View Issue Details

IDProjectCategoryView StatusLast Update
0001411Kali LinuxNew Tool Requestspublic2020-02-10 18:13
ReporterTheXC3LL Assigned Tog0tmi1k  
PrioritynormalSeverityfeatureReproducibilityhave not tried
Status closedResolutionwon't fix 
Summary0001411: Dumb0 - A tool to harvest users in popular forums and CMS
Description

Dumb0 is a free script written in perl designed to extract the usernames from a lot of forums and CMS (27 rigth now). Is pretty usefull to minimize the time of a bruteforce attack because you know all usernames registered in the forum/CMS, so you only need to set a dictionary with passwords in your favourite bruteforcer tool.

I would be really happy if you consider to try this tool.

https://github.com/0verl0ad/Dumb0

Additional Information

Getopt::Long and LWP::UserAgent perl modules are needed

Attached Files
kali1.png (35,741 bytes)   
kali1.png (35,741 bytes)   

Activities

g0tmi1k

g0tmi1k

2018-01-29 14:51

administrator   ~0008385

To help speed up the process of evaluating the tool, please make sure to include the following information (the more information you include, the more beneficial it will for us):

  • [Name] - The name of the tool
  • [Version] - What version of the tool should be added?
    --- If it uses source control (such as git), please make sure there is a release to match (e.g. git tag)
  • [Homepage] - Where can the tool be found online? Where to go to get more information?
  • [Download] - Where to go to get the tool?
  • [Author] - Who made the tool?
  • [Licence] - How is the software distributed? What conditions does it come with?
  • [Description] - What is the tool about? What does it do?
  • [Dependencies] - What is needed for the tool to work?
  • [Similar tools] - What other tools are out there?
  • [How to install] - How do you compile it?
  • [How to use] - What are some basic commands/functions to demonstrate it?
TheXC3LL

TheXC3LL

2018-01-31 12:43

reporter   ~0008590

Name: Dumb0

Version: v0.1.3

Download: https://github.com/0verl0ad/Dumb0

Author: Juan Manuel Fernandez (@TheXC3LL)

License: GNU General Public License v2.0

Description:

Dumb0 is a script written in python designed to extract the usernames from a lot of forums and CMS (27 rigth now). Is pretty usefull to minimize the time of a bruteforce attack because you know all usernames registered in the forum/CMS, so you only need to set a dictionary with passwords in your favourite bruteforcer tool.

Dependencies: Python modules argparse, re, requests, signal.

How to install: Just download from Github and execute it

How to use:

python dumb0.py --url=[TARGET URL] --type=[CMS/FORUM ID] {OPTIONS: --cookie=[SESSION COOKIE] }

To see all CMS/FORUM IDs available use:

python dumb0.py --list

g0tmi1k

g0tmi1k

2018-01-31 13:43

administrator   ~0008591

There isn't a git tag release on https://github.com/0verl0ad/Dumb0/releases
Please could you tag & release v0.1.3

g0tmi1k

g0tmi1k

2020-02-10 18:13

administrator   ~0012193

This is python 2 - which is now EOL

Issue History

Date Modified Username Field Change
2014-06-11 12:18 TheXC3LL New Issue
2014-06-11 12:18 TheXC3LL File Added: kali1.png
2014-06-29 19:52 vichet Issue cloned: 0001472
2018-01-29 14:51 g0tmi1k Note Added: 0008385
2018-01-31 12:43 TheXC3LL Note Added: 0008590
2018-01-31 13:43 g0tmi1k Note Added: 0008591
2019-12-09 13:30 g0tmi1k Severity minor => feature
2020-02-10 18:13 g0tmi1k Note Added: 0012193
2020-02-10 18:13 g0tmi1k Assigned To => g0tmi1k
2020-02-10 18:13 g0tmi1k Status new => closed
2020-02-10 18:13 g0tmi1k Resolution open => won't fix