(A) Main Configuration
-This panel is for the basics of the attack
----------------------------------------------------------------------------------
Exploit: This field is what will be added to the end of the URL. Lets say I put
the value at "l3vel".
http://target.com/vuln.php?var=
becomes
http://target.com/vuln.php?var=l3vel
----------------------------------------------------------------------------------
Scan Code(Code Snippet)
Basically if the URL source code doesnt contain this snippet it is ignored. So I
would goto your shell and click "View Page Source" and get a piece of html from
there. For LFI's or other exploits you can also put error messages or anything
that means it is exploitable.
----------------------------------------------------------------------------------
Google D0rk: The string that will be searched in google
Results Per Page: Sets how many results on google to show per page
__________________________________________________________________________________
(B) Regular Expressions
Target Parse RegEx:
Basically I use regular expressions on each of the results to remove the crap
after the = sign. You can use this to get any part of the URL you want. I used a
weak one you can make your own using RegEx Buddy (warez-bb ftw?) Any URLS that
don't match the regex in anyway are removed from the target list.
With mine (not perfect only works on some URLS)
http://somesite.com/somepage.php?somevar=o...ingelse=watever
Becomes:
http://somesite.com/somepage.php?somevar=
__________________________________________________________________________________
