ALERT!
Click here to register with a few steps and explore all our cool stuff we have to offer!

Jump to content

 
sunjester's Photo
sunjester
Reason:  Permanent
Unbanned: Never
Underwurld Admin
2
Reputation
26

Likes

Information

Username Changes:
Joined: 27-12-18
Date of Birth: 41 years old - December 14, 1982
Last Visit: Mar 22 2019 09:14 PM
Profile Views: 1,668

Statistics

Posts: 104
Leecher Value: 465
Likes:
26
Reputation: 2
Warning level: Low
Threads: 90
Credits: 0
Vouches: 0
Trust Scan: Info
Reported posts: 23
Shouts
Loading...

Groups

Awards

Last visitors

  • Photo
    Artman
    29 Jul 2021 - 10:04
  • Photo
    IndigoGoblin
    19 Jun 2021 - 07:04
  • Photo
    charismarole
    14 Dec 2020 - 14:19
  • Photo
    EbonyMaw
    12 Dec 2020 - 23:27
  • Photo
    nvnuv
    02 Dec 2020 - 00:39

Hidden Content
You'll be able to see the hidden content once you reply to this topic or upgrade your account.


  • 1


#17027586 Practical Malware Analysis: The Hands-On Guide to Dissecting Malicious Software

Posted by sunjester on 28 February 2019 - 09:53 AM

EzePrZO.jpg

 

Hidden Content
You'll be able to see the hidden content once you reply to this topic or upgrade your account.


  • 1


#16778863 sunjester's Proxy Checker

Posted by sunjester on 17 February 2019 - 09:47 PM

8He3mTd.png

So it's pretty basic. If you make changes or have suggestions, leave a message on the thread. The checker will tell you if it is online and what type of proxy it is.

supported types:

  • socks4
  • socks4a
  • socks5
  • http
  • https
  • http 1.0

<h3>sunjester&apos;s proxy checker</h3>
<p>This checker requires your proxies to be in the format of IP:PORT</p>
<p>This checker will determine if a proxy is online and what type of proxy it is.</p>
<form method="post">
        <p><textarea name="proxies" cols="80" rows="20" placeholder="paste your proxies here"></textarea></p>
        <p>
        <b>Output</b><br/>
        <!--input type="radio" name="output" id="json_out" value="json" /> <label for="json_out">JSON output</label-->
        <input type="radio" name="output" id="raw_out" value="raw" checked /><label for="raw_out">Raw</label>
        </p>
        <p><button type="submit">Check proxies</button></p>
</form>
<?php
if($_POST)
{
        $checker = new SJProxyChecker($_POST['proxies']);
        echo $checker->check();
}
class SJProxyChecker
{
        private $ip;
        private $port;
        private $proxies;
        private $proxy_types = [
                "CURLPROXY_SOCKS5",
                "CURLPROXY_HTTP",
                "CURLPROXY_HTTPS",
                "CURLPROXY_HTTP_1_0",
                "CURLPROXY_SOCKS4",
                "CURLPROXY_SOCKS4A"
        ];
        private $result = "<table border=1>";
        function __construct($proxylist)
        {
                $this->proxies = explode("\n", $proxylist);
        }
        function check()
        {
                foreach($this->proxies as $proxy)
                {
                        foreach($this->proxy_types as $type)
                        {
                                $proxy_info = explode(":", $proxy);
                                if($this->isOnline($proxy_info[0], $proxy_info[1]))
                                {
                                        $r = $this->makeReq($proxy, $type);
                                        if($r == $proxy_info[0])
                                        {
                                                $this->result .= "<tr><td>".$proxy."</td><td>".$type."</td></tr>";
                                                break;
                                        }
                                }
                        }
                }
                $this->result .= "</table>";
                return $this->result;
        }
        function isOnline($ip, $port)
        {
                if(fsockopen($ip, $port, $errno, $errstr, 30))
                {
                        return true;
                } else {
                        return false;
                }
        }
        function makeReq($proxy, $type)
        {
                $ch = curl_init();
                curl_setopt($ch, CURLOPT_URL, "https://api.ipify.org");
                curl_setopt($ch, CURLOPT_PROXY, $proxy);
                curl_setopt($ch, CURLOPT_PROXYTYPE, $type);
                curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
                curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
                $result = curl_exec($ch);
                curl_close($ch);
                return $result;
        }
}
?>

  • 1


#16778793 Cloning Doxbin.org for Fun and Not Profit

Posted by sunjester on 17 February 2019 - 09:44 PM

For some reason “doxing” people is some kind of new trend among the hacking communities on the internet. Not only do I not like the word “dox” because it just sounds so noobish but the fact that people think they are accomplishing something special also irritates me. I came across a site named doxbin.org a few weeks back or so.

 

The website allows people to upload text information about someone, with no verification at all for it’s validity. This can work against people trying to “dox” someone. If you simply upload false information about someone over and over again, how do you know the information is correct? I decided I would just clone the website and give it to the masses, maybe a thousand of these dox sites will pop up and people will move away from “doxing” and claiming to have personal information on people.

 

Initial Cloning
The first thing to do when you clone a website is to just save all the pages. I remember using something called HTTTrack or something like that on Windows a long time ago. However, I do not use Windows anymore and try not to use it, ever. I am currently using Ubuntu (xenial), so let’s use wget to download the whole site.

wget -r -nc -p --html-extension -k -np -X upload https://doxbin.org/

We don’t need the upload folder with all the entries so the -X argument is telling wget to exclude the upload directories from the website.

So now we have a base to work with. From here it’s not too difficult to add some kind of admin panel to manage the site. We can also guess at what the database is like from simply using the website and what information it has on it.

 

?url=https%3A%2F%2Frealsunjester.files.w

?url=https%3A%2F%2Frealsunjester.files.w

 

So now if we look at it in our browser, we can see it’s almost good to go, with barely any work, as you can see below. It all works, but nothing is saving to a database of course.

 

?url=https%3A%2F%2Frealsunjester.files.w

 

The links on the front page of our clone is also pointing to the original doxbin.org, but that’s an easy fix.

 

Creating the Database
Looking at the interface we can get a good feel for the inner workings on the database. Below I circled some of the fields we are going to create. The next image is the phpMyAdmin database I created.

 

?url=https%3A%2F%2Fi.imgur.com%2FXcXOJkn

?url=https%3A%2F%2Frealsunjester.files.w

 

We will be using PDO, since it’s more secure and it’s basically the standard now for interacting with a MySQL database through PHP. We will write a class for our database that will make it easier to pass our data to the template files.

The doxbin site seems to use the titles of the dox's as the ID to view the dox that someone uploaded/added. This is a horrible idea since if you add a new dox with the same title, it won’t even add it to the database. This is a flaw that I think shows the skill level of the coder for doxbin.org, which in my opinion is quite low.

 

?url=https%3A%2F%2Frealsunjester.files.w

 

Template Engine
I like to use Smarty. If I get complete control over a project, I always opt to use Smarty instead of a heavy frameworks like Symfony. Using a simple template engine and not a huge framework for small projects like this is beneficial for you and the server. Download smarty here.

unzip -x master.zip
rm master.zip
mv smarty-master/ smarty/

Above, we unzip the master.zip archive (preserving the directory structure) we downloaded, remove the master.zip file, then rename the directory to something more friendly, named smarty. We need to break apart the sections of the site into a header, body, and footer. The website doesn’t have a footer but ours will.

 

?url=https%3A%2F%2Frealsunjester.files.w

 

So basically what we want to do with the template engine is separate our forward facing HTML from our PHP code. This is whole idea behind MVC style programming. This will allow us to update code without breaking other code on the site. We can update classes and then later just plug the data into our templates with ease. As you can see in the image above the body tag is still in the index.php file (the file featured above). I will move it into our nav.tpl file, since that;s where the site starts showing the HTML.

 

?url=https%3A%2F%2Frealsunjester.files.w

 

Pretty URL’s and Redirects
The site makes use of htaccess rewrites, at least, that’s what it seems like. It may be done with PHP but it’s much easier to just use simple htaccess rewrite rules, which is what we are going to use. The raw view and the upload view pages will be redirected.

 

?url=https%3A%2F%2Frealsunjester.files.w

 

Installation System
In order to get this thing to the masses so people can easily run and install this clone, we will need some kind of basic installation system. We will need something that a user can input their database details and other settings. To keep things a bit more secure we are going to need to have these settings our of the reach of the internet. This means writing a file and setting permissions for only the web server user.
The permissions on the config file should be

 

The Captcha
There are a bunch of different captchas out there. Doxbin uses Google’s Recaptcha service. The Google captcha is configured in the installation. If you don’t want the captcha to show, don’t fill out the captcha portion of the install or simply remove the site and secret keys from the config file. If you fail to verify with the captcha you will simply be redirected, no dox entry will be made.

 

Download

https://anonfile.com...qbba/doxbin_zip
https://realsunjeste...and-not-profit/


  • 2


#16778163 Direct Downloading Anonfile.com Links

Posted by sunjester on 17 February 2019 - 09:19 PM

Hidden Content
You'll be able to see the hidden content once you reply to this topic or upgrade your account.


  • 1


-->