natzdev / r-u-dead-yet Goto Github PK

Hi ravivr, 

I got a dummy question, did I do something wrong with your scripts? :o

[root@localhost rudy]# which python; ls
/usr/bin/python
BeautifulSoup.py  README.txt  rudeadyet.conf  r-u-dead-yet.py
[root@localhost rudy]# ./r-u-dead-yet.py http://google.com
: No such file or directory

What steps will reproduce the problem?
1. run RUDY against a lab web server with known form files and data
2. It does an initial GET of the requested URL (on the command line). On the 
interactive menu, detects forms within the URL. select a form. 
3. select other parameters on the interactive menu (no.of conns to spawn, etc)
4. run RUDY. capture packets on the wire and  read HTTP packets using tcpdump 
or wireshark.

What is the expected output? What do you see instead?

I expected the request from RUDY for form data to be a http POST but it does 
GET. I don't know if there's a configuration option to do so. I tried using it 
in rudeadyet.conf but it didnt seem work.

What version of the product are you using? On what operating system?

v2.0, OS is Debian.

Please provide any additional information below.

C:\Python31\rudy>r-u-dead-yet-v2.2.py
  File "C:\Python31\rudy\r-u-dead-yet-v2.2.py", line 65
    except Exception, ex:
                    ^
SyntaxError: invalid syntax

C:\Python31\rudy>

Any solution? something im doing wrong?

PD: windows xp sp3

What steps will reproduce the problem?
1. gunzip R-U-Dead-Yet-v2.0.tar.gz
2. tar xvf R-U-Dead-Yet-v2.0.tar
3. Files are extracted directly the current working directory. It is normally 
expected that the extracted files should go under a created directory  (with 
name "R-U-Dead-Yet-v2.0") by the tarball.

What is the expected output? What do you see instead?

# tar xvf R-U-Dead-Yet-v2.0.tar 
Dead-Yet-v2.0/
BeautifulSoup.py
README.txt
rudeadyet.conf
r-u-dead-yet.py
socks.py
#

What version of the product are you using? On what operating system?
v2.0

Please provide any additional information below.

output of gunzip and tar:

# gunzip R-U-Dead-Yet-v2.0.tar.gz 
# tar xvf R-U-Dead-Yet-v2.0.tar 
BeautifulSoup.py
README.txt
rudeadyet.conf
r-u-dead-yet.py
socks.py
# ls
BeautifulSoup.py   ethtool-6.tar.gz  rudeadyet.conf   R-U-Dead-Yet-v2.0.tar
README.txt       r-u-dead-yet.py  socks.py
# 

it would be nice if the files get extracted within a directory called 
'R-U-Dead-Yet-v2.0'

What am I doing wrong?

[root R-U-Dead-Yet-v2.1]# ./r-u-dead-yet.py http://google.com
: No such file or directory

Also tried:

[root R-U-Dead-Yet-v2.1]# /usr/bin/python ./r-u-dead-yet.py http://google.com
  File "./r-u-dead-yet.py", line 11
    class Parser():
                 ^
SyntaxError: invalid syntax


[root R-U-Dead-Yet-v2.1]# which python
/usr/bin/python

What steps will reproduce the problem?
1. Config proxy  proxy on other port, then 9050


What is the expected output? What do you see instead?
SocketError

What version of the product are you using? On what operating system?
v2.0

Please provide any additional information below.
--self.s.setproxy(PROXY_TYPE_SOCKS4,"127.0.0.1",9050)
++self.s.setproxy(PROXY_TYPE_SOCKS4,self.proxy_addr,self.proxy_port)

What steps will reproduce the problem?
adding the address of a socks4 proxy

What is the expected output? What do you see instead?
machine actively refused connection even though socks4 proxy is working

What version of the product are you using? On what operating system?
rudy v2.2

Please provide any additional information below.

What steps will reproduce the problem?
1. run python ~/r-u-d-y.py http://www.xxx.yyy/zzz/form.aspx
2. select form
3. select attack parameter
4. select num. of connections to spawn
5. select proxy > yes
6. select address > default
7. select port > default


What is the expected output? What do you see instead?

expected to see attack in progress, instead i got this error msgs:
" 
Traceback (most recent call last):
  File "Projects/NetSec/RUDY/r-u-d-y.py", line 251, in <module>
    data = urlopen(attack_url)
  File "/usr/lib/python2.6/urllib2.py", line 126, in urlopen
    return _opener.open(url, data, timeout)
  File "/usr/lib/python2.6/urllib2.py", line 397, in open
    response = meth(req, response)
  File "/usr/lib/python2.6/urllib2.py", line 510, in http_response
    'http', request, response, code, msg, hdrs)
  File "/usr/lib/python2.6/urllib2.py", line 429, in error
    result = self._call_chain(*args)
  File "/usr/lib/python2.6/urllib2.py", line 369, in _call_chain
    result = func(*args)
  File "/usr/lib/python2.6/urllib2.py", line 605, in http_error_302
    return self.parent.open(new, timeout=req.timeout)
  File "/usr/lib/python2.6/urllib2.py", line 397, in open
    response = meth(req, response)
  File "/usr/lib/python2.6/urllib2.py", line 510, in http_response
    'http', request, response, code, msg, hdrs)
  File "/usr/lib/python2.6/urllib2.py", line 435, in error
    return self._call_chain(*args)
  File "/usr/lib/python2.6/urllib2.py", line 369, in _call_chain
    result = func(*args)
  File "/usr/lib/python2.6/urllib2.py", line 518, in http_error_default
    raise HTTPError(req.get_full_url(), code, msg, hdrs, fp)
urllib2.HTTPError: HTTP Error 404: Not Found
"

What version of the product are you using? On what operating system?

V. 2.1 , OS ubuntu 10.10 with default python version installed.

Please provide any additional information below.

i extracted the tar and tried to run it as is.
as i saw soup.py and socks.py are included in the tar, i did not download them 
at first.
i tried later on, with the downloaded files of soup.py and socks.py extracted 
into the RUDY directory. no change.

What steps will reproduce the problem?
1. Attempted to run the program after initially downloading.
2. Corrected initial issue, worked fine one time and now am receiving another 
error.
3. Run again after the first working run time.

What is the expected output? What do you see instead?
Expected it to run, saw this:

./r-u-dead-yet-v2.2.py
  File "./r-u-dead-yet-v2.2.py", line 31
    class Parser():
                 ^
SyntaxError: invalid syntax


What version of the product are you using? On what operating system?
2.2 on centos 5

Please provide any additional information below.
I updated it to be the following and it now runs partially. New speedbump though
class Parser: 
Testing with 1 connection for the sake of length: 

/r-u-dead-yet-v2.2.py
[!] Using configuration file
[!] Attacking: http://www.****.***
[!] With parameter: login
Process Client-1:
Traceback (most recent call last):
  File "/usr/lib/python2.4/site-packages/multiprocessing/process.py", line 237, in _bootstrap
    self.run()
  File "./r-u-dead-yet-v2.2.py", line 179, in run
    c.send("A")
  File "./r-u-dead-yet-v2.2.py", line 163, in send
    self.s.send(data)
error: (32, 'Broken pipe')

What version of Python should this be using? I can't get around this error no 
matter what I do. Tried restarting bind, flushing iptables, etc. 

Also, for those running on low mem servers (VPS) 
Lower the # max connections if you get memory errors.

[!] Using configuration file
Traceback (most recent call last):
  File "./r-u-dead-yet-v2.2.py", line 262, in <module>
    data = urlopen(attack_url)
  File "/usr/lib64/python2.6/urllib2.py", line 126, in urlopen
    return _opener.open(url, data, timeout)
  File "/usr/lib64/python2.6/urllib2.py", line 397, in open
    response = meth(req, response)
  File "/usr/lib64/python2.6/urllib2.py", line 510, in http_response
    'http', request, response, code, msg, hdrs)
  File "/usr/lib64/python2.6/urllib2.py", line 435, in error
    return self._call_chain(*args)
  File "/usr/lib64/python2.6/urllib2.py", line 369, in _call_chain
    result = func(*args)
  File "/usr/lib64/python2.6/urllib2.py", line 518, in http_error_default
    raise HTTPError(req.get_full_url(), code, msg, hdrs, fp)
urllib2.HTTPError: HTTP Error 500: Internal Server Error


I am using linux centos, can someone help me resolve this problem ?

What steps will reproduce the problem?
1. click on 'Wiki' tab -> Usage -> under 'Requirements' heading note the first 
url has double 'http://'

Requirements
R.U.D.Y requires the following includes to be present under the same directory:

http://http://www.crummy.com/software/BeautifulSoup


What is the expected output? What do you see instead?

http://www.crummy.com/software/BeautifulSoup

What version of the product are you using? On what operating system?

n/a

Please provide any additional information below.