Hello TurkHackTeam family, Today I will tell you what some of the tools in the Buscador distribution are and how to use them. In my first tutorial, I showed the installation and settings. (Click to go to the first part -Here should be added an URL after releasing) Now I will explain the Tool.
Subject Titles
? What Is Stegosuite And Its Usage
? What Is HTTrack And Its Usage
? What Is Me Tagoofil And Its Usage
? What Is Sublist3r And Its Usage
? What Is TheHarvester And Its Usage
? What Is Amass And Its Usage
? What Is EyeWitness And Its Usage
What Is Stegosuite And Its Usage
Stegosuite is a tool to hide messages inside image files (png, jpg, etc.). Embedded posts are encrypted using AES.
Click on the "Stegosuite" from the Applications section.
Our application is opened and we click on the "File" option from the top left.
Choose "Open..".
Here you choose the photo you want.
Then we write the text that we will hide above as I wrote in the photo. We write our password at the bottom (Do not forget this password because we will open and read the data we have hidden with this password.) And we say "Embed"
The same photo is created on our desktop, but as you can see the name is different.
Now, to test, we click on the "File" section from the top left and click "Open" and select the newly created file.
We just write the password we just wrote in the place I show below and choose "Extract".
As you can see, the data we wrote while encrypting at first is output above.
This was the expression of this tool, my friends.
What Is HTTrack And Its Usage
HTTrack is a website copy tool that allows us to download an entire site to a computer.
First of all, we open our application as I have shown.
After opening, we say "Next".
We write the name of the project and say "Next".
If you want to create a copy of any website, we write its url and click "Next".
Click "Next" again :trl
Our process is over. We say "Exit" and go into our folder.
As you can see, we've copied the index.
This was our tool. Let's get to the next one.
What Is Me Tagoofil And Its Usage
Me tagoofil is a tool to find image files such as word, excell, PDF, JPG on the target site and collect information about them.
We click on ?Domain Tools? as I showed you.
We open it by selecting the Me tagoofil tool from here.
Then we write the target site here.
It asks how many documénts we will get. Write a value between 10-3000.
Kod:
Home Folder> Domains>Me tagoofil
As you can see about our target site, our files have arrived. That was it, let's move to the next one.
What Is Sublist3r And Its Usage
Sublist3r; It provides information to us by finding the subdomains, open port and directories of the target site using many search engines such as Google, Bind, Yahoo and Ask.
We click on the ?Domain Tools? option from the place I showed you.
We choose Sublist3r here.
Then we write our target site.
As you can see, it started working, when the scan is finished, the terminal will close.
We can access the information of our target site by following the file path after it is closed.
Kod:
Home folder> Domains>Sublist3r
What Is TheHarvester And Its Usage
TheHarvester is an application used for the use of information about the target site by email, subdomains, open ports, etc..
We click on the "Domain Tools" option from the place I showed you.
We choose TheHarvester here.
We write the URL of the target site.
As you can see it has started to work.
It will open as a web page and show you the information.
What Is Amass And Its Usage
Amass offers us information about the target site by scanning the target site's domain address and web archives. Additionally, by using Amass, it is used to discover ASNs through the IP address on the target site.
ASN: It is a group of IP networks operated by one and/or more network operators with an external routing policy.
First of all, we choose "Domain Tools" from the place I showed you.
After selecting it, we choose Amass here and say "OK".
Here, we write the target site.
The process ends a few minutes after writing the site and it shows us the information it has received by opening this folder.
This was our tool.
What Is EyeWitness And Its Usage
EyeWitness is used to capture credentials by taking screenshots from the target site's RDP and active VNC servers
RDP: Remote Desktop Protocol
VNC: VNC is used to connect the remote computer remotely, even access the BIOS settings and perform transactions.
First of all, we click on "Domain Tools" from the place I showed you.
From here we choose EyeWitness and say "OK".
It asks us whether we will be browsing a single site or multiple sites. I will scan a single website.
We write the target site.
As you can see, our process has started.
When the process is over, it will open a site for us and provide information there.
This tutorial ends here, mates. I hope it will be useful for you
Download Link (Buscador): https://inteltechniques.com/buscador/
Source:https://www.turkhackteam.org/linux/1...-whitered.html
Translator: @Dolyetyus