tracking

Documentation

Overview

*

## ## ######## ## ## ####### ######## ######## ######## ######## ### ## ## ## ## ## ## ## ## ## ## ## ## ## ## #### ## ## ## ## ## ## ## ## ## ## ## ## ## ## ## ## ## ###### ## ## ## ## ## ######## ## ## ###### ######## ## #### ## ## ## ## ## ## ## ## ## ## ## ## ## ## ### ## ## ## ## ## ## ## ## ## ## ## ## ## ## ## ######## ### ### ####### ## ## ######## ######## ## ##

"NewOrder" - Reverse Proxy SE
    "CHANGE THE WORLD..."

Copyright 2022 (C) NEMESIS. neworder@tutamail.com. All rights reserved.

*

*

## ## ######## ## ## ####### ######## ######## ######## ######## ### ## ## ## ## ## ## ## ## ## ## ## ## ## ## #### ## ## ## ## ## ## ## ## ## ## ## ## ## ## ## ## ## ###### ## ## ## ## ## ######## ## ## ###### ######## ## #### ## ## ## ## ## ## ## ## ## ## ## ## ## ## ### ## ## ## ## ## ## ## ## ## ## ## ## ## ## ## ######## ### ### ####### ## ## ######## ######## ## ##

"NewOrder" - Reverse Proxy SE
    "CHANGE THE WORLD..."

Copyright 2022 (C) NEMESIS. neworder@tutamail.com. All rights reserved.

*

*

## ## ######## ## ## ####### ######## ######## ######## ######## ### ## ## ## ## ## ## ## ## ## ## ## ## ## ## #### ## ## ## ## ## ## ## ## ## ## ## ## ## ## ## ## ## ###### ## ## ## ## ## ######## ## ## ###### ######## ## #### ## ## ## ## ## ## ## ## ## ## ## ## ## ## ### ## ## ## ## ## ## ## ## ## ## ## ## ## ## ## ######## ### ### ####### ## ## ######## ######## ## ##

"NewOrder" - Reverse Proxy SE
    "CHANGE THE WORLD..."

Copyright 2022 (C) NEMESIS. neworder@tutamail.com. All rights reserved.

*

Index

• Constants
• func InnerSubstring(str string, prefix string, suffix string) string
• type Trace
  • func (t *Trace) ExtractCredentials(body string, request *http.Request) (found bool, err error)
  • func (t *Trace) HijackSession(request *http.Request) (err error)
  • func (t *Trace) IsValid() bool
• type Tracker
  • func Load(s *session.Session) (m *Tracker, err error)
  • func (module *Tracker) Author() string
  • func (module *Tracker) Description() string
  • func (module *Tracker) ExportSession(id string)
  • func (module *Tracker) GetVictim(t *Trace) (v *db.Victim, err error)
  • func (module *Tracker) IsEnabled() bool
  • func (module *Tracker) Name() string
  • func (module *Tracker) Prompt()
  • func (module *Tracker) PushCookie(victim *db.Victim, cookie db.VictimCookie)
  • func (module *Tracker) PushVictim(v *db.Victim)
  • func (module *Tracker) ShowCredentials()
  • func (module *Tracker) ShowVictims()
  • func (module *Tracker) TrackRequest(request *http.Request) (t *Trace)
  • func (module *Tracker) TrackResponse(response *http.Response) (victim *db.Victim)

Constants

const (
	// Name of this module
	Name = "tracker"

	// Description of this module
	Description = "Uniquely track clients via unique identifiers, while harvesting for web credentials and sessions"

	// Author of this module
	Author = "NEMESIS"
)

Functions

func InnerSubstring

func InnerSubstring(str string, prefix string, suffix string) string

InnerSubstring returns the string contained between prefix and suffix

Types

type Trace

type Trace struct {
	*Tracker
	ID string
}

Trace object structure

func (*Trace) ExtractCredentials

func (t *Trace) ExtractCredentials(body string, request *http.Request) (found bool, err error)

ExtractCredentials extracts credentials from a request body and stores within a VictimCredentials object

func (*Trace) HijackSession

func (t *Trace) HijackSession(request *http.Request) (err error)

HijackSession: If the request URL matches those defined in authSession in the config, then pass the cookies in the CookieJar to necrobrowser to hijack the session

func (*Trace) IsValid

func (t *Trace) IsValid() bool

IsValid validates the tracking value

type Tracker

type Tracker struct {
	session.SessionModule

	Enabled        bool
	Type           string
	Identifier     string
	Header         string
	Landing        string
	ValidatorRegex *regexp.Regexp
}

Tracker module

func Load

func Load(s *session.Session) (m *Tracker, err error)

Load configures the module by initializing its main structure and variables

func (*Tracker) Author

func (module *Tracker) Author() string

Author returns the module author

func (*Tracker) Description

func (module *Tracker) Description() string

Description returns the module description

func (*Tracker) ExportSession

func (module *Tracker) ExportSession(id string)

ExportSession prints the list of victims

func (*Tracker) GetVictim

func (module *Tracker) GetVictim(t *Trace) (v *db.Victim, err error)

func (*Tracker) IsEnabled

func (module *Tracker) IsEnabled() bool

IsEnabled returns a boolead to indicate if the module is enabled or not

func (*Tracker) Name

func (module *Tracker) Name() string

Name returns the module name

func (*Tracker) Prompt

func (module *Tracker) Prompt()

Prompt prints module status based on the provided parameters

func (*Tracker) PushCookie

func (module *Tracker) PushCookie(victim *db.Victim, cookie db.VictimCookie)

PushCookie stores a Cookie in the database. If the cookie exists, it will be overridden

func (*Tracker) PushVictim

func (module *Tracker) PushVictim(v *db.Victim)

PushVictim stores a Victim in the database

func (*Tracker) ShowCredentials

func (module *Tracker) ShowCredentials()

ShowCredentials prints the credentials in the CLI

func (*Tracker) ShowVictims

func (module *Tracker) ShowVictims()

ShowVictims prints the list of victims

func (*Tracker) TrackRequest

func (module *Tracker) TrackRequest(request *http.Request) (t *Trace)

TrackRequest tracks an HTTP Request

func (*Tracker) TrackResponse

func (module *Tracker) TrackResponse(response *http.Response) (victim *db.Victim)

TrackResponse tracks an HTTP Response