random gallery image
random tutorial
preview..cool, we will make a new module and not just some new module, nope let's make a fully automatic injection script! This tutorial is the first step into making this. Let's first..
random bruteforce
AntiFTP
AntiFTP uses wordlists in order to bruteforce FTP user accounts
HackSuite File Library
File Library
Here you can find the latest files and structure of the THC HackSuite, note that if you have an earlier version of the suite it's not recommended to update files manually. Instead you should overwrite your existing HackSuite environment.
<?php
/* Resolves CloudFlare Addresses
Author: Remco Kouw
Site: http://www.hacksuite.com
Last Edit: 02-04-2015
*/
set_time_limit(0);
session_cache_limiter('nocache');
header('Expires: '.gmdate('r',0));
header('Content-type: application/json');
$_DYNAMIC_ROOT = "../..";
include_once("../../header.php");
$aDataR = array();
$aDataR['jresult'] = false;
$aDataR['jmessage'] = "Invalid post data";
// validate hostname
if(!isset($_POST['sInput']) || $_POST['sInput']==""){
die(json_encode($aDataR));
}
$sSite = "http://".$_POST['sInput'];
$aInput = @parse_url($sSite);
if(!isset($aInput['host']) || $aInput['host']==""){
$aDataR['jmessage'] = "Invalid hostname";
die(json_encode($aDataR));
}
// setup variables and start with resolving
$sSite = str_replace("www.","",$aInput['host']);
$aPre = array("www","cpanel","ftp","mail","webmail","direct","direct-connect","dns","host","ns","mx","api","dbserver");
$sRealIP = "";
$sCFIP = "";
$bCF = false;
$bOffline = false;
for($x=0;$x<count($aPre);$x++){
if($x==0){
// filter header response for url
$aHeader = @get_headers("http://".$aPre[$x].".".$aInput['host']);
if(isset($aHeader[1])){
// search the headers for the cloudflare string
for($y=0;$y<count($aHeader);$y++){
if(stripos($aHeader[$y],"cloudflare")!==false){
// found cloudflare on this server
$bCF = true;
$sCFIP = @gethostbyname($sSite);
break;
}
}
}
else{
// failed to get headers, host is offline
$bOffline = true;
break;
}
}
$sTarget = $aPre[$x].".".$sSite;
$sIP = @gethostbyname($sTarget);
if(!filter_var($sIP,FILTER_VALIDATE_IP)){
continue;
}
// if there's an ip address and it's not the same as cloudflare then we have success
if($sIP!=$sCFIP){
$sRealIP = $sIP;
}
}
$aDataR['jresult'] = true;
if($sRealIP!=""){
$aDataR['jmessage'] = "Cloudflare server on: ".$sCFIP."<br />\nReal ip address is: ".$sRealIP;
}
else{
if(!$bCF && !$bOffline){
$aDataR['jmessage'] = "No cloudflare installed";
}
elseif(!$bCF && $bOffline){
$aDataR['jmessage'] = "Host is offline";
}
else{
$aDataR['jmessage'] = "Failed to get real ip address";
}
}
echo json_encode($aDataR);
?>
powered by
site stats
cms statistics:
version: 0.6.0downloads: 3914
native: 26
modules: 21
apps: 2
support development
It takes lots of calories in order to create new things for the hacksuite, so it would be grand if you could buy me a protein shake or extra energy to keep me going. Thanks!
disclaimer
We are not responsible for any direct or indirect damage caused by abusing the tools provided on hacksuite.com. The suite is developed for educational purposes, use at your own risk!
site resources
remote resources
partners and friends