mp4 Posted February 18, 2015 Report Posted February 18, 2015 IntroData grabbing:URL's (geturl/massurl) -> (scan)Configs, Databases, SQLi's (dork)Full Path Disclosures / Users (fpds) -> (brutefpds)Top websites info (top)Massive scanningXSS, SQLi, LFI, RFI (scan)FTP, SSH, DB's, IMAP (multibruter)Accurate SSH bruteforce (brutefpds)PlanWeb AppsGrab url's via 'geturl' or 'massurl' (massurl requires list of tags as file)Scan url's parameters for vulns with 'scan'ServersPick target, get ip rangeScan for services on each IP and bruteforce with 'multibruter'Grab full path disclosures, and so linux usernamesPerform SSH bruteforce for specific user with 'brutefpds'Info grabbingUse 'dork' for automatic dorkingUse 'fpds' for full path disclosure grabbingUse 'search' for searching someone in ur databasesUse 'top' for scanning all top websites of specific nationOthers'Stat' shows actual statistics and informations'Show' display specific file'Clear' and 'filter' - remove duplicates, remove blacklisted url'sOthersMultiBrtuer requirements (php5):php5-mysql - for mysql connectionsphp5-pgsql - for postgresql connectionslibssh2-php - for ssh connectionsphp5-sybase - for mssql connectionsphp5-imap - for imap connectionsTODO:Fix problems with grabbing large amount of url'sMore search enginesSQL InjectorRFI shell uploaderFSU is not secure as it should beDownload ba. Quote