operat0r_001

DONE ! 200 out of 6K working http 20 or so out of ~300 socks ( only socks4 tested ... socks is backward compact .. )

echo ======================================================================================= echo admin@krisweston.com added and cleaned up some of my code but hes dropped off the face of the planet so i have to pickup where he left off echo rmccurdy.com if you have any issues with any of the script not working ... echo ======================================================================================= echo 'NOTES:' echo '* Build with Ubuntu 10.04.3 LTS' echo '* GNU sed version 4.2.1' echo '* curl 7.19.7 (i486-pc-linux-gnu) libcurl/7.19.7 OpenSSL/0.9.8k zlib/1.2.3.3 libidn/1.15 ' echo 'TODO:' echo '* error checking max pages zero then bail report error ..' echo '* setup vars for config max timeout and test urls ..' echo '* add more checks from freeproxylists.com proxies ssl etc' echo '* add support to check TEST urls before we start or auto detect and set net TEST url if blocked etc ..' echo '* check output files for IP:PORT and wc to determing if site ripp worked ...' echo '* add file uploader site check' # curl -s -A "$varagent" -x "$proxyip" --url http://www.filesonic.com/file/537557874/T-64AOCP.rar --connect-timeout $TIMEOUT -m 10 | grep -ci 'suspicious' echo ======================================================================================= HTTP http://rmccurdy.com/scripts/proxy/good.txt SOCKS http://rmccurdy.com/scripts/proxy/socks.txt SOURCE http://rmccurdy.com/scripts/proxy/proxycheck.sh

* over 5K proxies tested ~500 HTTP are decent...weekly ?! * only HTTP proxies tested ... ( no SOCKS support yet because HTTP has higher success rate ) * updated to put BEST tested first based on filesonic.com's blacklist at the top !! http://rmccurdy.com/scripts/proxy/good.txt * added nocodeen.txt ( you know who you are ... http://rmccurdy.com/scripts/proxy/nocodeen.txt using nmap -sV :) ) * all worked and tested with curl and returned remote address ( sometimes transparent ill add notransparent.txt or something later .. ) * please give me comments about other types or proxies to remove like Codeen (BlueCoat|Mikrotik ? ) or any other proxy list to add !!! source and proxy list servers is here : http://rmccurdy.com/scripts/proxy/proxycheck.sh * again post I need more proxies ! more list ! freeproxylists.com proxylist.sakura.ne.jp multiproxy.org http://nntime.com http://www.my-proxy.com http://www.z4.cn/kit/proxy/?act=list&page=1 http://www.shroomery.org/ythan/proxylist.php http://www.proxylists.net/http_highanon.txt the proxylist.txt is all the proxies harvested ! http://rmccurdy.com/scripts/proxy/good.txt P.S. Script is horrid yes I know ...

This guy I know released a new version of his portable pack. He will one day update all the apps to work in win7 and XP but most of them already do. http://www.google.com/search?q=uber+1337+portable+2011 NOTE: Most the stuff in the ./security folder will get flagged by antivirus as they contain payloads and exploits etc ... so dont be an idiot and say "this is trojan" just zip them up with a password if you put it in a system that has antivirus Items deleted to save space that are free to download: * www.portableapps.com * porta putty * save sessions portability * unix utils aka unutils * most of the http://technet.microsoft.com/en-us/sysinternals/default.aspx * nirsoft.net tools password is password ( to prevent virus scanner from deleting it on my USB drive ... ) FLAGSHIP PORTABLE ITEMS!: portabl Portable AMP Portable apache / php / phpmyadmin / MySQL only 10megs ! portable Internet Explorer 8 portable w3af portable Dameware portable office 2k sp1 portable Camtasia Studio acc.bat to set all file associations to some file type to the apps here ( office image and media files etc .. ) INTERNET: portable Proxifier portable NewsBin V5.exe 5.2.1.0 portable GrabIt 1.7.2 Beta (build 988) ( supports SSL ! ) Portable RapidSVN .exe portable GreatNews .exe COMMAND LINE SCRIPTS: Cax * sort of like easy VBS scripting egrep reskit * nt reskit FTW ! SC * service manager for windows XXCOPY * supports long file names etc .. for large copies poratble Allway Sync portable movamp Apache MySQL PHP and PhpMyAdmin DESKTOP: AiRoboForm.exe por anti_idle_10 * numlock ever 59 sec to keep from password prompt autokey * auto hotkey macro script DisplayFusion * for dual monitors Glass2k * transparent mac *macro express QRes * change resolution quickly windows-hider *hide windows winpenguins-0.5 DISK : junction.exe sysinternals app to create sym links to folders for use with dropbox Beyond Compare 3 portable BurnInT3st * to burn in test in windows CCleaner * ccleaner portable Directory Opus portable explore2fs * read linux partions GetDataBack for FAT portable * get data back FAT GetDataBack for NTFS portable * get data back NTFS HandyRecovery *recover files MsiFix *msi fix tool for windows npp *notpadd ++ photorec * recover files RegCleanr * registry clener tool RegDoctor 1.92 * registry clener tool RegexBuddy_portable * Regex Buddy portable scanpst * scan PST file tools Shredder * file delete tool SpaceMonger * spacemonger portable tcopy * copy files TreePIE * view util TreeSizeFree * view util UltraEdit 14.20 Portable * x-raypc xplorer2 Advanced Uninstaller .exe Perfect Uninstaller v6.3.0 Portable .exe scanpst 2007 2003 2000 * fix pst files ... nlocker1.8.8-portable UnlockerPortable.exe Ad-aware Ad-Watch 2007 Portable DupFinder Duplicate File search MEDIA: Camtasia Studio dvdshrink32 * dvd shrink ImgBurn_portable * image burn portable MagicISO Maker 5.5 Portable portable Nero Burning Rom v10.0.13100 Replay Catcher UltraISO winrar dvdflick Video Download Capture 2.1.4.0 portable .exe MediaCoder 0.7.2.4582 portable .exe VirtualDub Portable .exe portable Replay Media Catcher portable Replay Media Catcher 3.11 portable Premiere 6.0 Portable SECURITY: SIW System Information portable exe 1.73.638.0 DiamondCS ProcessGuard 3.5.0.0 Cheat Engine Ad-aware Ad-Watch 2007 Portable Ad-Aware 2007.exe portable sqlmap 0.8_exe.zip http://sqlmap.sourceforge.net/#download Portable executable for Windows that does not require the Python interpreter to be installed on the operating system. HP SwfScan SwfScan_portable.exe ( find vuln params in flash apps ) aplv * proxy scanner Cain.sfx * cain and abel portable CAL9000 * cal900 cgiirc.html cygwin portable Dameware portable databases DeFixed_Edition * uber windbug portable olly debug with tons of plugins ( dont load them all at once ... ) encase 4 enterprise portable ExploitTree goolag Hijetter Imunity Canvas ( password security-sh3ll ) MetasploitPortable * portable metasploit ! nbtscan-1.0.33 NetworkMiner-0.82 nmap PicoZipRT portable_nessus SensePost Aura sql SWFDecompiler SwfScan_portable w3af_2312 * portable W3AF webscarab_portable wikito Wikto winAUTOPWN WiresharkPortable databases GHDB.xml encase portable EnCase ExploitTree portable nessus * no registration required sql Absinthe sql Acunetix portable th1nstall sql IHv2 sql pangolin pw password sql Paros sql PRIAMOS sql SQLPowerInjector sql Absinthe Absinthe SWF Decompiler Wikto windows nikto winAUTOPWN * simple way to run exploits Wireshark Portable brutus-aet2 Brute force portable DbVisualizer 7.1.2 nipper inone-0.12.6 firewall rule parser portable Acunetix portable Toad for Oracle 8.6 portable X-Scan-v3.3-en http://www.anti-hacker.info/papers/Xscan.pdf http://www.xfocus.net/ VIEWERS: Acunetix portable v65_2010_03_03_01 6.0.0.3140 Passware Password Recovery Kit Enterprise 9.3 build 815 Portable.exe ( password cracker rar xls cracker etc ) Adobe Premiere 6.0 Portable KompoZerPortable Adobe Reader v9.0 Lite ENG - (Portable) - Mr1000.exe CuteHTML * test editing etc Foxit Reader portable pdf2txt * pdf2text PDFEdit * edit pdf files pdftext * pdf2text Adobe Photoshop CS5 Portable Portable DIA * like visio but free SumatraPDF * PDF viewer PortableDIA Dia * like VISIO but free ! portable Microsoft Office Excel 2007 sp1 portable Microsoft Office PowerPoint 2007 sp1 portable Microsoft Office Word 2007 sp1

* Cygwin 400 megs 22K files .. * Cameyo packaged 121 megs Portable Cygwin http://db.tt/qp2nKi5 Run the EXE and wait a while if you still have errors wait close and reopen contains ruby/perl/make/c++/automake/screen/vim etc... * tested win7 32bit also included NMAP and NESSUS xml parse scripts ;) Why do you ask ?? because syncing 22K+ files is less IO when you can sync 107 files instead 22K .. ( great for dropbox or USB setups ) * this is all free/legal software! possible some GPL rules are broken here but Cameyo and Cygwin are free applications this is not warez! use junction.exe for dropbox sync .. I think you can aim dropbox at any folder now days but if need be use junction

regexbuddy ahs libs for regex and sort of try to convert it to other langs ... ( power grep too ) all fu ! http://www.rmccurdy.com/scripts/fu.txt

Alpha you can use with VMware so FTW :)

sslstrip the entire network that's always fun spearphishing with file_pawn for metasploit is creepy too or just dumpster dive its free !

just use webbuster or the new spoonwep may be commin' out

I cross compiled nmap for android ... I failsause but some nmap dev is working and has a binary some pace .. Looks like you know more about it then I do. I will be sure to refer to this post tho. Some guy is already selling the bin I made wrapped with a GUI. It only works for IP addresses tho.. also not totaly sure if the SYN scan even works.. I never had time to test it .. as far as notes ... I just kept haking make files etc till it worked I got no idea howto reproduce it :O http://www.rmccurdy.com/stuff/G1/BINS/NMAP/NMAP%20FOR%20ANDROID%20CROSS%20COMPILE%20ARM.html thats the notes but im sure I did other hacks.. I am currently trying to get metasploit to work with android;P I got ruby but when I run it I get lib errors ... http://zenmachine.wordpress.com/cross-compiling-ruby-to-arm-processors-the-not-so-zen-way/ ( my notes on the bottom let me know if you have any insite ) Anyway im sure your binary is better then mine :) PS. I an running nmap right now (OMG pwInez ! ) :) other then buying the book and making really bad binaries how can I support nmap.org ? --- On Mon, 7/19/10, David Fifield <################> wrote: > From: David Fifield <##############> > Subject: Nmap for Android > To: "Robert McCurdy" <###########> > Cc: "Fyodor" <##############> > Date: Monday, July 19, 2010, 7:13 PM > Mr. McCurdy: > > I'm David Fifield, one of the developers of the Nmap > security scanner. > We've been talking about making a package for Android and I > learned > about your page at http://rmccurdy.com/stuff/G1/BINS/NMAP/NMAP FOR > ANDROID CROSS COMPILE ARM.html. > > I want to invite you to help us with the development by > sharing your > knowledge. Most of our development coordination happens on > the > nmap-dev@insecure.org > mailing list (http://seclists.org/nmap-dev/). > Would you consider replying to the thread at > http://seclists.org/nmap-dev/2010/q2/1021, or starting > a new one, > sharing what you did to get Nmap to compile on Android? > > Our goal is to eventually have Android be one of our > standard build > platforms. We would have an Android-specific directory > containing build > scripts like yours, such that anyone with the proper tools > could build > and install it. > > When you distribute binaries, as in > http://rmccurdy.com/stuff/G1/BINS/NMAP/NMAP.zip, please > also be sure to > distribute source code or an offer to provide source. > > David Fifield

ettercap easy rickroll http://anythingyouttypehreer.rmccurdy.com for howto

http://forums.remote-exploit.org/programmi....html#post94904 anythingyoutypehere.rmccurdy.com for quick rick-roll

http://www.rmccurdy.com/scripts/proxy/good.txt .. its broken smoe how only one result lol .. ill fix it later .... check back wrote this lame tool ages ago http://www.rmccurdy.com/scripts/proxy/proxycheck.sh

* portable roboforum * portable IE 8 this way its all contained in your USB device or trucrypt volume etc

* windows XP use www.usboot.org ( you need a clean masine to build or us a VM etc .. ) * windows 7 http://www.rmccurdy.com/scripts/usboot%20windows%207.bat you also want to include driverpacks.net ( they have beta drivers for win7 etc .. ) only annoyance I have found so far is (last time I checked) that win7 you have to click like 10 times to allow non signed devices on boot .. so you have to type this one liner to disable driver signing and i cane embeded it into http://www.vlite.net/ for win7 yet tongue.gif and its not an option in http://www.vlite.net/ I have a <4 gig XP partition I can push to a HDD and boot in under 4 minutes :) I use partimage to push the image to the HDD

Tutorial WIM image files wimfltr.sys Windows Image File Filter Driver command line install I have an H drive ( using junction to link C:\users\internet\Documents\my dropbox to h:\ ) I wanted to easily update files that triggerd AV so I zipped them up. I update the zip often and was testing for other options and this is what I tried. * h:\junction.exe -s "C:\users\internet\Documents\my dropbox" h: this is howto change location of dropbox sync :) * google for the drivers ImageX_x86 * install the driver rundll32 syssetup,SetupInfObjectInstallAction DefaultInstall 128 .\ImageX_x86\wimfltr.inf * create an image of a DRIVE ( cannot be mapped drive OR junction 'ln for windows' ) .\ImageX_x86\imagex.exe /capture d:\ c:\twf.wim "WIM Compress" /compress maximum * umount image .\ImageX_x86\imagex.exe /unmount /commit c:\cygwin * mount image .\ImageX_x86\imagex.exe /mountrw .\cygwin.wim 1 c:\mount * even with 'maximum' compresstion images are larger then the source files in most cases... ??? * 80meg zip of Cygwin ~300 unzipped becomes 600 WIM file ??? * requires admin rights to install drivers but still beats zipping and unzipping items that trigger AV reference: http://technet.microsoft.com/en-us/library...28WS.10%29.aspx

ettercap filters are wonkey ... you can use transparent proxy with say squid/apache/mod rewrite or use my ugly script http://forums.remote-exploit.org/programmi....html#post94904 But yes you present a really good point.. snort would be a really great non HTTP based 'proxy' .. ill look around and see if anybody has done anything with this... very interesting stuff thanks !

Most clients can force SSL not sure if this would defunk the script or not but it sure beats snort for ease

can you please add W3AF it pwns !

Fixed security feeds and fixed proxy check script http://feeds.rmccurdy.com http://www.rmccurdy.com/scripts/proxy/good.txt

or just host free wifi with popups and malware on it ...

its a python script so you need python

* porta putty / tunnel + Proxifier portable if you need a shell let me know you can nmap -P0 login.oscar.aol.com > txt.txt to find open ports or use fragmatation attacks on the firewall if need be

I use RT 'request tracker' and the asset plug-in for it to track hardware etc.

* yes flame on.. * its old * only 10megs * run the apache.exe for debug not the gui .. http://www.rmccurdy.com/scripts/downloaded/ movamp.zip just find replace the path with your usb path in the httpd.conf and wala ! I think you could also use some %CD% > httpd.conf / sed/ awk and make it more portable if path changes etc ..