View Issue Details

IDProjectCategoryView StatusLast Update
0003950Kali LinuxNew Tool Requestspublic2020-02-10 13:35
Reporteranarcoder Assigned To 
PrioritynormalSeverityfeatureReproducibilityhave not tried
Status closedResolutionwon't fix 
Summary0003950: Google Explorer (mass exploiting tool)
Description

This is a automated robot for google search engine.

Basic, it makes a google search, parse the results and test if the results are vulnerable to a specific exploit the user define.

Actually the tool is present in Arch Strike, and now i'm sending this request to submit for Kali.

tool github: https://github.com/anarcoder/google_explorer

One exaample of tool in action exploiting apache strunts2:

https://www.youtube.com/watch?v=b57ndmMliIA

There are other examples exploring other vulnerabilities in my youtube channel: youtube.com/c/anarcoder

Relationships

has duplicate 0004762 closed Google Explorer - Mass exploitation tool 

Activities

g0tmi1k

g0tmi1k

2018-01-29 14:58

administrator   ~0008401

To help speed up the process of evaluating the tool, please make sure to include the following information (the more information you include, the more beneficial it will for us):

  • [Name] - The name of the tool
  • [Version] - What version of the tool should be added?
    --- If it uses source control (such as git), please make sure there is a release to match (e.g. git tag)
  • [Homepage] - Where can the tool be found online? Where to go to get more information?
  • [Download] - Where to go to get the tool?
  • [Author] - Who made the tool?
  • [Licence] - How is the software distributed? What conditions does it come with?
  • [Description] - What is the tool about? What does it do?
  • [Dependencies] - What is needed for the tool to work?
  • [Similar tools] - What other tools are out there?
  • [How to install] - How do you compile it?
  • [How to use] - What are some basic commands/functions to demonstrate it?
anarcoder

anarcoder

2018-05-04 12:57

reporter   ~0009094

  • Google Explorer
  • Version - 0.1
  • github.com/anarcoder/google_explorer
  • autor: Daniel Almeida
  • License: MIT
  • It's a massive exploitation tool, that crawls google.com, parsing the results and run a specific exploit on each target, testing if is exploitable or not for that exploit. The tool is made in Selenium lib, so the user can deal with the captcha, with no problems.. if the captcha shows, the user type the captcha, and the robot keeps crawling until no results is showed.

As new exploits are published, i make the --plugin for it, so the tool is constantly updated. Actually is on ArchStrike and BlackArch. The last --plugin was for drupalgeddon2 (7 and 8) and the results are good.

  • Dependencies are:

beautifulsoup4>=4.4.1
docopt>=0.6.2
lxml>=3.6.0
selenium==2.53.6
requests>=2.10.0

  • I didn't find public tools that make anything like it..

  • How to use:

1 - First make a google search:

$ python3 google_explorer.py --browser=firefox --dork='intext:"powered by drupal" inurl:"/user/register"'

2 - Then run the --plugin for the specific google dork:

$ python3 google_explorer.py --plugin='drupalgeddonrce2'

There are other combinations of search you can make, like:

$ python3 google_explorer.py --browser=firefox --dork='YOUR DORK HERE" --locationo='Brazil' --last_update='past year'

This last command will search on servers located at Brazil, and indexed by google on the last year..

$ python3 google_explorer.py --browser=firefox --dork='YOUR DORK HERE" --language='Portuguese'

This last command will search for pages written in Portuguese..

The sucess of results depends on your google dork, more goode the dork is, more efficient is results of the tool..

anarcoder

anarcoder

2018-05-04 13:09

reporter   ~0009095

Some old pocs:

https://filebin.net/nt03f8m34g19k3lt/poc_apple.m4v

https://filebin.net/ycf15jj31f9opf7k/poc_mass.mp4

https://filebin.net/ycf15jj31f9opf7k/poc_mass2.mp4

g0tmi1k

g0tmi1k

2020-02-10 13:35

administrator   ~0012059

Tool hasn't been touched since 2018

Issue History

Date Modified Username Field Change
2017-04-06 18:00 anarcoder New Issue
2018-01-29 14:58 g0tmi1k Note Added: 0008401
2018-05-04 12:57 anarcoder Note Added: 0009094
2018-05-04 13:09 anarcoder Note Added: 0009095
2019-12-09 13:30 g0tmi1k Severity minor => feature
2019-12-10 11:57 g0tmi1k View Status private => public
2020-01-06 13:26 g0tmi1k Relationship added has duplicate 0004762
2020-02-10 13:35 g0tmi1k Note Added: 0012059
2020-02-10 13:35 g0tmi1k Status new => closed
2020-02-10 13:35 g0tmi1k Resolution open => won't fix