Giter VIP home page Giter VIP logo

backupx's Introduction

Intro

# help to generate wordlist based on patterns to fuzz backup files (backup killer)

# read from:
* Url
* File
* STDIN

Install

                                       *** julia ***

# install julia: https://julialang.org/downloads/    or    snap install julia --classic
# then run this commands in terminal:

* 1. julia -e 'using Pkg; Pkg.add("JSON"); Pkg.add("ArgParse"); Pkg.add("OrderedCollections")'
* 2. git clone https://github.com/mrmeeseeks01/BackupX.git
* 3. cd BackupX/
* 4. julia BackupX.jl -h


# or you can use docker:

* 1. git clone https://github.com/mrmeeseeks01/BackupX.git
* 2. cd BackupX/
* 3. docker build -t backupx .
* 4. docker run backupx

Switches

# optional arguments:

*  -h, --help            show this help message and exit
*  --version             show version information and exit
*  -u                    single url
*  -U                    multiple urls in file
*  -s                    read url(s) from stdin
*  -p                    pattern file
*  -w                    wordlist file
*  -e                    extensions file
*  -n                    number range (i.e. 1-100)
*  -y, --year            year range (i.e. 2022-2023)
*  -m, --month           month range (i.e. 1-12)
*  -d, --day             day range (i.e. 1-30)
*  --silent              do not print additional information (default: false)
*  -o, --output          save output in file (default: "")

Examples

  • for custom threads, should pass -t [int] to julia
> julia -t 2 BackupX.jl [switches]
  • generate wordlist by your custom input
> julia BackupX.jl -U [file] -p [file] -w [file] -e [file] -n [min-max] -y [min-max] -m [min-max] -d [min-max]
  • for example generate wordlist by single url with this pattern: $subdomain.$domain.$ext$num.$y-$m-$d
> julia BackupX.jl -u https://sub1-sub2.sub3.domain.tld -p pattern.json  -w wordlist.txt -e extensions.txt -n 1-100 -y 2021-2023 -m 1-12 -d 1-30

Variables

# for example consider this url: https://root:[email protected]:443/dir1/dir2/myfile.php?id=5678&user=nobody#nothing
# you can use below variables in your custom patterns:

* scheme:    https
* username:  root
* password:  1234
* host:      api-v1.admin.mysite.co.uk
* subdomain: api-v1.admin                    ->   "ap1-v1.admin", "ap1", "v1", "admin", "ap1-v1"
* domain:    mysite
* tld:       co.uk
* port:      443
* path:      /dir1/dir2/myfile.php
* directory: /dir1/dir2
* file:      myfile.php
* fileN:     myfile
* fileE:     php
* query:     id=5678&user=nobody
* fragment:  nothing

* word:      your custom words
* ext:       your custom extensions
* num:       numbers (i.e. 1-100)
* y:         years (i.e. 2022-2023)
* m:         months (i.e. 1-12)
* d:         days (i.e. 1-30)


# you can use $ or % to define your variables in pattern: $num or %num     $ext or %ext

Example of using Variables in Patterns.json

{
    "patterns":[
        "$domain.$ext",
        "$host.$ext",
        "$subdomain.$domain.$ext",
        "$host%num.$ext",
        "$domain%num.$ext",
        "$subdomain.$ext",
        "$file.$ext",
        "$file~",
        "$path.$ext",
        ".$file",
        ".$domain.$ext",
        ".$file.$ext",
        "$path~",
        "$directory/.$file.$ext",
        "$word.$ext",
        "$directory/$word.$ext",
        "$directory/$word"
    ],
     "date-formats":[
         "$domain.%y.$ext",
         "$domain.%y-%m-%d.$ext",
         "$host.%y-%m-%d.$ext",
         "$host.%y%m%d.$ext",
         "$host.%y%m%d.$ext",
         "$directory/%y-%m-%d.$ext"
    ]
}

backupx's People

Contributors

comeyrd avatar shadowdev01 avatar

Stargazers

chilipaper avatar  avatar Amir avatar Arganex-Emad avatar  avatar Soheil avatar NoobHunter avatar AmirJr avatar Gwyn avatar amoobehrooz avatar

Watchers

 avatar

Forkers

emadyay mhnikyar

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    ๐Ÿ–– Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. ๐Ÿ“Š๐Ÿ“ˆ๐ŸŽ‰

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google โค๏ธ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.