• Keep alive connections
• Multithreaded
• Detect not found web pages when 404 not found errors are masked (.htaccess, web.config, etc).
• Recursive brute forcing

Usage: dirs3arch.py [-u|--url] target [-e|--extensions] extensions [options]

Options:
  -h, --help            show this help message and exit

  Mandatory:
    -u URL, --url=URL   URL target
    -e EXTENSIONS, --extensions=EXTENSIONS
                        Extensions list separated by comma (Example: php, asp)

  Dictionary Settings:
    -w WORDLIST, --wordlist=WORDLIST
    -l, --lowercase

  General Settings:
    -r, --recursive     Bruteforce recursively
    -t THREADSCOUNT, --threads=THREADSCOUNT
                        Number of Threads
    -x EXCLUDESTATUSCODES, --exclude-status=EXCLUDESTATUSCODES
                        Exclude status code, separated by comma (example: 301,
                        500)
    --cookie=COOKIE, --cookie=COOKIE
    --user-agent=USERAGENT, --user-agent=USERAGENT
    --no-follow-redirects, --no-follow-redirects

  Connection Settings:
    --timeout=TIMEOUT, --timeout=TIMEOUT
                        Connection timeout
    --ip=IP, --ip=IP    Destination IP (instead of resolving domain, use this
                        ip)
    --http-proxy=HTTPPROXY, --http-proxy=HTTPPROXY
                        Http Proxy (example: localhost:8080
    --max-retries=MAXRETRIES, --max-retries=MAXRETRIES

  Reports:
    -o OUTPUTFILE, --output=OUTPUTFILE
    --json-output=JSONOUTPUTFILE, --json-output=JSONOUTPUTFILE

Using RunFromProcess

What you can do with this tool

Using ProcessThreadsView

• Performs File Integrity Comparison using popular Hash algorithms such as MD5, SHA1 & SHA256.
• 'Drag & Drop' feature to quickly drag one or both files.
• Save the file comparison report to HTML/TEXT/XML file
• Displays detailed status during the operation.
• Auto copy the Hash data to clipboard on successful comparison
• Simple, easy to use GUI Interface.
• Completely Portable Tool, can be run from anywhere. 

usage: osueta.py [-h] [-H HOST] [-k HFILE] [-f FQDN] [-p PORT] [-L UFILE]
             [-U USER] [-d DELAY] [-v VARI] [-o OUTP] [-l LENGTH]
             [-c VERS] [--dos DOS] [-t THREADS]

OpenSSH User Enumeration Time-Based Attack Python script

optional arguments:
-h, --help  show this help message and exit
-H HOST     Host Ip or CIDR netblock.
-k HFILE    Host list in a file.
-f FQDN     FQDN to attack.
-p PORT     Host port.
-L UFILE    Username list file.
-U USER     Only use a single username.
-d DELAY    Time delay fixed in seconds. If not, delay time is calculated.
-v VARI     Make variations of the username (default yes).
-o OUTP     Output file with positive results.
-l LENGTH   Length of the password in characters (x1000) (default 40).
-c VERS     Check or not the OpenSSH version (default yes).
--dos DOS   Try to make a DOS attack (default no).
-t THREADS  Threads for the DOS attack (default 5).

Start Using Password Security Scanner

Columns Description

• Item Name:The name of the item. For Web site passwords, the address of the Web site is displayed. For email passwords, the email address is displayed.
• Password Type:The type of the password: Web Browser, Messenger, Email, or Dialup/VPN.
• Application:The application that stores the specified password item: Microsoft Outlook, Firefox, Internet Explorer, and so on...
• User Name:The user name that is used with the specified password item.
• Password Length:The total number of characters in the password.
• Numeric:The total number of numeric characters (0 - 9) in the password.
• Lowercase:The total number of lowercase characters (a - z) in the password.
• Uppercase:The total number of uppercase characters (A - Z) in the password.
• Other Ascii:The total number of non-alphanumeric characters in the password.
• Non-English:The total number of non-English characters in the password.
• Repeating:The total number of repeating characters in the password. For example, if the password is abcdab, then the 'Repeating' value will be 2, because both a and b characters appears more than once.
• Password Strength:The strength of the password, calculated according to number of parameters, including the total number of characters, number of repeating characters, type of characters used in the passwords, and more... 
  The numeric value displayed in this column represents the strength of the password, according to the following list:
  • 1 - 7: Very Weak
  • 8 - 14: Weak
  • 15 - 25: Medium
  • 26 - 45: Strong
  • 46 and above: Very Strong
• Windows User:The Windows user that owns the password. For most passwords, this column will display the current logged-on user. However, for Dialup passwords of Windows, you might also see the passwords of other Windows users, and in those cases, this column will display the Windows users that created the dialup password.    

Using MultiMonitorTool

Save/Load Monitors Configuration

Preview Window

Command-Line Options

• Primary - Specifies that you want to do the action on the primary monitor.
• Monitor Name, as it appears in the 'Name' column, for example: \\.\DISPLAY1 , \\.\DISPLAY2, \\.\DISPLAY3
• Monitor Number - The number that appears in the monitor name. (1 for \\.\DISPLAY1, 2 for \\.\DISPLAY2, and so on...)

• Added MAC authentication support for Edge-corE 4510
• Added support for Ruckus External Captive Portal
• Support for Huawei S2700, S3700, S5700, S6700, S7700, S9700 switches
• Added support for LinkedIn and Windows Live as authentication sources
• Support for 802.1X on Juniper EX2200 and EX4200 switches
• Added support for the Netgear M series switches
• Added support to define SNAT interface to use for passthrough
• Added Nessus scan policy based on a DHCP fingerprint
• Added support to unregister a node if the username is locked or deleted in Active Directory
• Fortinet FortiGate and PaloAlto firewalls integration
• New configuration parameters in switches.conf to use mapping by VLAN and/or mapping by role

• When validating an email confirmation code, use the same portal profile initially used by to register the device
• Removed old iptables code (ipset is now always used for inline enforcement)
• MariaDB support
• Updated WebAPI method
• Use Webservices parameters from PacketFence configuration
• Use WebAPI notify from pfdhcplistener (faster)
• Improved Apache SSL configuration forbids SSLv2 use and prioritzes better ciphers
• Removed CGI-based captive portal files
• For device registration use the source used to authenticate for calculating the role and unregdate (bugid:1805)
• For device registration, we set the "NOTES" field of the node with the selected type of device (if defined)
• On status page check the portal associated to the user and authenticate on the sources included in the portal profile
• Merge pf::email_activation and pf::sms_activation to pf::activation
• Removed unused table switchlocation
• Deauthentication and firewall enforcement can now be done throught the web API
• Added support to configure high-availability from within the configurator/webadmin
• Changed the way we’re handling DNS blackholing when unregistered in inline enforcement mode (using DNAT rather than REDIRECT)
• Now handling rogue DHCP servers based both on the server IP and server MAC address

• Fixed pfdetectd not starting because of stale pid file
• Fixed SQL join with iplog in advanced search of nodes
• Fixed unreg date calculation in Catalyst captive portal
• Fixed allowed_device_types array in device registration page (bugid:1809)
• Fixed VLAN format to comply with RFC 2868
• Fixed possible double submission of the form on the billing page
• Fixed db upgrade script to avoid duplicate changes to locationlog table

Start Using FolderTimeUpdate

• The source or destination file may be in use
• Cannot delete file: Access is denied
• The file is in use by another program or user
• There has been a sharing violation
• Make sure the disk is not full or write-protected

•     Unblock files and folders locked by other applications
•     Terminate processes that lock a file or folder
•     Scan files and folders for locked objects
•     Close opened handles and unload loaded DLL modules
•     Unload DLL modules loaded in running processes
•     Unlock all locked objects with a single mouse click
•     Scan files and folders through the Windows explorer context menu
•     Safely delete a locked file on the next reboot
•     A valid and powerful alternative to the popular Unlocker
•     Run it from the USB flash drive with the portable version
•     The application can be translated into multiple languages
•     Supports all Microsoft Windows operating systems
•     Very lightweight in the memory and CPU usage

• inxi supports the following options. These options are included as of inxi 2.2.20. Earlier versions may not have every option. You can combine these options, or list them one by one: Examples: inxi -v4 -c6 OR inxi -bDc 6

• If you start inxi with no arguments, it will show the short form. The following options if used without -b, -F or -v + number will show just that complete line:
• A, C, D, G, I, M, N, P, R, S, f, i, n, o, p, l, u, r, s, t, w, W - you can use these together or alone to show just the line(s) you want to see.
• If you use them with either a -v + level, a -b, or with -F, it will show the full output for that line along with the output for the chosen verbosity level.
• NOTE: as of version 1.6.5, the old basic output option -d was changed to -b, for basic. -d is now used for the extended disk option, showing cdrom/dvd information as well.

• Output Control Options:
• -A Show Audio/sound card information.
• -b Shows basic (b for basic - version 1.7.5 or later. Earlier versions used: -d) output, short form. Similar to inxi -v 2. Shows -S -M -C -G -N -D and -R (short forms), and -I. -R does not show if no raid devices found.
• -c Available color schemes. Scheme number is required. Color selectors run a color selector option prior to inxi starting which lets you set the config file value for the selection.
• Supported color schemes: 0-32 Example: inxi -c 11
• Note: if you want to turn off all script colors, use -c 0 This is useful if you are for example piping output and don't want the color code characters.
• Supported color selectors. NOTE: irc and global only show safe color set. (version 1.5.x or later only)
• 94 - Console, out of X
• 95 - Terminal, running in X - like xTerm
• 96 - Gui IRC, running in X - like Xchat, Quassel, Konversation etc.
• 97 - Console IRC running in X - like irssi in xTerm
• 98 - Console IRC not in X
• 99 - Global - Overrides/removes all settings. Setting specific removes global.
• -C Show full CPU output, including per CPU clockspeed.
• -D Show full hard Disk info, not only model, ie: /dev/sda ST380817AS 80.0GB.
• -f Show all cpu flags used, not just the short list. Not shown with -F to avoid spamming.
• -F Show Fuller output for inxi, includes all upper case line arguments, plus -n and -s. Does not show extra verbose options like -d -f -u -l -p -t or -o unless you add them explicitly, for example: -Fplo
• -G Show Graphic card information (card, x type, resolution, version). Also shows glx renderer, card pci busID with -x. Shows active/unloaded/failed driver versions (1.5.x or later)
• -i Show Wan IP address, and shows local interfaces (requires ifconfig network tool). Same as -Nni
• If you are going to use this for public posting of your data, consider running it with the -z option for filtering. IRC filters by default.
• -I (upper case i) Show Information: processes, uptime, memory, irc client, inxi version.
• -l (lower case l, el) Show partition labels. Default: short partition -P. For full -p output, use: -pl (or -plu).
• -M Show machine data. Motherboard, Bios, and if present, System Builder (Like Lenovo) (version 1.6.x and later). Older systems/kernels without the required /sys data can use dmidecode instead, run as root. -! 33 forces use of dmidecode, which might be of some utility in certain fringe cases where dmidecode has more data than /sys.
• -n Show Advanced Network card information. Same as -Nn. Shows interface, speed, mac id, state (version 1.5.x and later).
• -N Show Network card information. Shows card and driver. Includes support for USB networking devices. Also shows busID/USB-ID, ports, driver version with -x
• -o Show unmounted partition information (includes UUID and LABEL if available).
• Shows file system type if you have file installed, if you are root OR if you have added to /etc/sudoers (sudo v. 1.7 or newer):
• < username > ALL = NOPASSWD: /usr/bin/file (sample)
• -p Show full partition information (-P plus all other detected partitions).
• -P Show Partition information (shows what -v 4 would show, but without extra data).
• Shows, if detected: / /boot /home /tmp /usr /var. Use -p to see all mounted partitions.
• -r Show distro repository data. Currently supported repo types:
• APT (Debian, Ubuntu + derived versions)
• PACMAN (Arch Linux + derived versions)
• PISI (Pardus + derived versions)
• URPMQ (Mandriva, Mageia + derived versions)
• YUM. (Fedora, Redhat, maybe Suse + derived versions)
• (as distro data is collected more will be added. If your's is missing please show us how to get this information and we'll try to add it.)
• -R Show RAID data. Shows RAID devices, states, levels, and components, and extra data with -x/-xx. If device is resyncing, shows resync progress line as well.
• -s Show sensors output (if sensors installed/configured): mobo/cpu/gpu temp; detected fan speeds.
• Gpu temp only for Fglrx/Nvidia drivers. Nvidia shows screen number for > 1 screens
• -S Show System information: host name, kernel, desktop, desktop version (plus toolkit if -x used), distro (desktop features, version 1.5.x or later)
• -t Show processes. Requires extra options: c (cpu) m (memory) cm (cpu+memory).
• If followed by numbers 1-20, shows that number of top process for each selection (default: 5):
• Examples:
• -t cm10 (shows top 10 cpu and memory processes, 20 in all)
• -t c (shows top 5 cpu processes)
• -t m20 (shows top 20 memory processes)
• -t cm (shows top 5 cpu and memory processes, 10 in all)
• Make sure to have no space between letters and numbers (cm10 -right, cm 10 - wrong).
• -u Show partition UUIDs. Default: short partition -P. For full -p output, use: -pu (or -plu).
• -v Script verbosity levels. Verbosity level number is required. Note: do not mix -v options with -b or -F, use one or the other.
• Supported levels: 0-7 Example: inxi -v 4
• 0 - short output, same as: inxi
• 1 - Basic verbose. Roughly the same as the old -d,
• 2 - Adds networking card (-N), Machine (-M) data, and shows basic hard disk data (names only), and basic raid (devices only, and if inactive, notes that). Similar to inxi -b
• 3 - Adds advanced CPU (-C), network (-n) data, and switches on -x advanced data option.
• 4 - Adds partition size/filled data (-P) for (if present):/, /home, /var/, /boot. Shows full disk data (-D)
• 5 - Adds audio card (-A); sensors (-s), partition label (-l) and UUID (-u), short form of optical drives, and standard raid data (-R).
• 6 - Adds full partition data (-p), unmounted partition data (-o), -d full disk data, including CD/DVD information.
• 7 - Adds network IP data (-i); triggers -xx.
• -w Local weather data/time. To check an alternate location, see: -W location. For extra weather data options see -x, -xx, and -xxx.
• -W location - location supported options: postal code; city,[state/country]; latitude,longitude. Only use if you want the weather somewhere other than the machine running inxi. Use only ascii characters, replace spaces in city/state/country names with +: new+york,ny
• -x Show extra data:
• -C - Bogomips on Cpu; CPU flags short list
• -d - Shows more information if present on cd/dvd devices.
• -D - Shows hdd temp with disk data if you have hddtemp installed, if you are root OR if you have added to /etc/sudoers (sudo v. 1.7 or newer):
• < username > ALL = NOPASSWD: /usr/sbin/hddtemp (sample)
• -G - Direct rendering status for Graphics (in X). Only works with verbose or line output;
• -G - Shows (for single gpu, nvidia driver) screen number gpu is running on.
• -i - Show IPv6 as well for LAN interface (IF) devices.
• -I - Show system GCC, default. With -xx, also show other installed GCC versions. Show Init type, if detected, like systemd, Upstart, SysVinit, init (bsd), Epoch, runit. Show runlevel/target if present.
• -N, -A - driver version (if available) for Network/Audio;
• -N, -A - Shows port for card/device, if available.
• -N -A -G - Shows pci Bus ID / Usb ID for Audio, Network, Graphics
• -R - Shows component raid id. Adds second RAID Info line: raid level; report on drives (like 5/5); blocks; chunk size; bitmap (if present). Resync line, shows blocks synced/total blocks.
• -S - Shows toolkit (QT or GTK) if GNOME, KDE, or XFCE. Shows kernel gcc version.
• -t - Adds memory use output to cpu (-xt c, and cpu use to memory (-xt m).
• -w/-W - Wind speed and time zone (time zone, -w only).
• -xx Show extra, extra data (only works with verbose or line output, not short form). You can also trigger it with -Fx (but not -xF) (Version 1.6.x and later)
• -D - Adds disk serial number.
• -I - Adds other detected installed gcc versions to primary gcc output (if present). Shows init type version if found, and default runlevel/target if found.
• -M - Adds chassis information, if any data for that is available.
• -N -A -G - Shows vendor:product ID for Audio, Network, Graphics
• -R - Adds superblock (if present); algorythm, U data. Adds system info line (kernel support, read ahead, raid events). Adds if present, unused device line. Resync line, shows progress bar.
• -w/-W - Humidity, barometric pressure.
• -xx -@ [11-14] - Automatically uploads debugger data tar.gz file to ftp.techpatterns.com.
• -xxx Show extra, extra, extra data (only works with verbose or line output, not short form):
• -S - Panel/shell information in desktop output, if in X (like gnome-shell, cinnamon, mate-panel).
• -w/-W - Location (uses -z/irc filter), weather observation time, wind chill, heat index, dew point (shows extra lines for data where relevant).
• -y (plus integer >= 80) This is an absolute width override which sets the output line width max. Overrides COLS_MAX_IRC / COLS_MAX_CONSOLE globals, or the actual widths of the terminal. If used with -h or -c 94-99, put -y option first or the override will be ignored. Cannot be used with --help / --version / --recommends type long options. Example: inxi -y 130 -Fxx
• -z Adds security filters for IP addresses, Mac, and user home directory name. Default on for irc clients.
• -Z Absolute override for output filters. Useful for debugging networking issues in irc for example.

• Additional Options:
• -h, --help This help menu.
• -H - This help menu, plus developer options. Do not use dev options in normal operation!
• --recommends Checks inxi application dependencies + recommends, and directories, then shows what package(s) you need to install to add support for that feature (version 1.6.6 and later).
• -U Auto-update script. Note: if you installed as root, you must be root to update, otherwise user is fine.
• -V, --version inxi version information. Prints information then exits.
• -% Overrides defective or corrupted data.
• -@ Triggers debugger output. Requires debugging level 1-13 (8-10 - logging). Less than 8 just triggers inxi debugger output on screen.
• 1-7 - On screen debugger output
• 8 - Basic logging
• 9 - Full file/sys info logging
• 10 - Color logging.
• The following create a tar.gz file of system data, plus collecting the inxi output to file. To automatically upload debugger data tar.gz file to ftp.techpatterns.com: inxi -xx@ [11-14] For alternate ftp upload locations: Example: inxi -! ftp.yourserver.com/incoming -xx@ 14
• 11 - With data file of xiin read of /sys.
• 12 - With xorg conf and log data, xrandr, xprop, xdpyinfo, glxinfo etc.
• 13 - With data from dev, disks, partitions etc.
• 14 - Everything, all the data available.
• -! 31 - Turns off hostname in output. Useful if showing output from servers etc.
• -! 32 - Turns on hostname in output. Overrides global B_SHOW_HOST='false'
• -! 33 - Force use of dmidecode. This will override /sys data in some lines, like -M. 

List of Payloads

Windows

Gather

• Gather Information
• Hashdump and Exfiltrate
• Keylog and Exfiltrate
• Sniffer
• WLAN keys dump
• Get Target Credentials
• Dump LSA Secrets
• Dump passwords in plain
• Copy SAM (VSS)
• Dump Process Memory

- Dump Windows Vault Credentials

Execute

• Download and Execute
• Connect to Hotspot and Execute code
• Code Execution using Powershell
• Code Execution using DNS TXT queries
• Download and Execute PowerShell Script
• Execute ShellCode

Backdoor

• Sethc and Utilman backdoor
• Time based payload execution
• HTTP backdoor
• DNS TXT Backdoor
• Wireless Rogue AP
• Tracking Target Connectivity

Escalate

• Remove Update
• Forceful Browsing

Manage

• Add an admin user
• Change the default DNS server
• Edit the hosts file
• Add a user and Enable RDP
• Add a user and Enable Telnet
• Add a user and Enable Powershell Remoting

Misc

• Browse and Accept Java Signed Applet
• Speak on Target

Linux

• Download and Execute
• Reverse Shells using built in tools
• Code Execution
• DNS TXT Code Execution
• Perl reverse shell (MSF)

OSX

• Download and Execute
• DNS TXT Code Execution
• Perl Reverse Shell (MSF)
• Ruby Reverse Shell (MSF)

Payloads Compatibility

• The Windows payloads and modules are written mostly in powershell (in combination with native commands) and are tested on Windows 7 and Windows 8.
• The Linux payloads are mostly shell scripts (those installed by default) in combination with commands. These are tested on Ubuntu 11.
• The OS X payloads are shell scripts (those installed by default) with usage of native commands. Tested on OS X Lion running on a VMWare

• Added Execute Shellcode for Windows (under Execution menu).
• Added "Dump passwords in plain" for Windows (under Gather menu).
• Added "Copy SAM (VSS)" for Windows (under Gather menu).
• Added "Dump Process Memory" for Windows (under Gather menu).
• Added "Dump Windows Vault Credentials" for Windows (under Gather menu).
• Added "Add a user and Enable Powershell Remoting" for Windows (under Manage menu).
• Added support for Gems bundler.
• Added more banners of Kautilya.

• All Platforms
• Update Firefox to 24.7.0esr
• Update obfsproxy to 0.2.12
• Update FTE to 0.2.17
• Update NoScript to 2.6.8.33
• Update HTTPS Everywhere to 3.5.3
• Bug 12673: Update FTE bridges
• Update Torbutton to 1.6.11.0
• Bug 12221: Remove obsolete Javascript components from the toggle era
• Bug 10819: Bind new third party isolation pref to Torbutton security UI
• Bug 9268: Fix some window resizing corner cases with DPI and taskbar size.
• Linux:
  • Bug 11102: Set Window Class to "Tor Browser" to aid in Desktop navigation
  • Bug 12249: Don't create PT debug files anymore