Readme
Readme
4
----------
- Made main Site combobox not alphabetical order anymore. It will put the last
tested site at the top of the list.
(theFarmer)
- Added agent randomizer. This is used by default. Also used in History Checker.
See below for details.
- Added option to assume a certain redirect is a fake. This is helpful if you
think/know the site redirects
to a certain member's URL or just want to see better your redirects that aren't
this path. This can be used
together with the other redirect options. (Used in Snap Shots) (Wolfman)
- Added option to not reactivate proxies banned for fake replies. Made it part of
the default settings. This is
good if you only want to ban fake proxies, and not all 200 reply proxies. (Used
in Snap Shots)
- Snapshots couldn't save if a ":" was present in the URL (because of a port
number).
- Changed both Manager Lists to Multi-Select. (theFarmer)
- Added option to Sort History by Image. Good if you want to put
hits/misses/redirects together.
- Fixed bug with writing to Debug file. There was no way to stop Sentry of doing
this in last version because it
was broken.
- Recoded the History Select code. Much more accurate and efficient now.
- Fixed bug with Limit Retry code. It didn't reset the count when you abort and
start a new test.
- Rewrote some of the Set Proxy code. In extreme cases, it could have caused
problems.
- Fixed graphical bug when resizing the form with "Check for Update" command
button.
- Fixed a bug with reactivating proxies.
- Turned off Hide Selection on History Listview. I don't know why I had it
enabled in the first place.
- Fixed bug with banning Fake proxies. Sentry used to ban the proxies it used
with Check Hits X Times, even though
they could still be good proxies.
- Sentry will now remember what directory you use when opening files with Proxy
Analyzer. (PhanTom)
- Fixed major bug when you do not have simultaneous testing checked and you have
sites in that list. Sentry only
tried the first combo. (WD40)
- Fixed Bug when not using "http://" infront of a site. It will now save
correctly. (ItalianGuy)
- Added Accept Language Field in HTTP Debugger.
- Fixed bug with loading proxies and having invalid integer with ports. (Sniper)
Sentry 1.1 (20-7-03)
----------
IMPORTANT: Read over all the changes in this file, and then if you need further
help, look at the program/manual.
Some help is already inside the program. The manual didn't get a full
update, because I didn't think
it was necessary.
- Turned AutoComplete off with the combobox for HTTP Debugger. (Falk0n)
- Added an Updater so you can always check to see if you are using the latest
version of Sentry.
- Fixed List Out of Bounds bug in History Checking.
- All Bots now default to 1 to prevent hammering on sites. (theFarmer)
- Fixed various bugs with limit Retry Engine.
- Removed Custom Hit Response, because defining Header Success Key Phrases is
much more effective and does the
same thing but in more detail.
- Made the textboxes for the length filter's to handle double digits. (wolverine)
- Made all listboxes (Key Phrases) multi-select.
- Made simultaneous listbox multi-select and it now sorts alphabetically.
(cobradiver)
- Put an option so you don't need to reset your wordlist every time you test a
new site. Sentry will auto-detect
it now (cobradiver)
- Fixed bad bug with Paste Proxies into My List. It didn't work, now it does.
- Added option to limit Retries and to limit them to an exact number. (theFarmer)
- If you get a hit and the exact hit is already in your history, it will not be
added, but the Time column
and proxy column will be updated.
- Fixed bug when all your proxies are banned and cannot be reactivated. It caused
an access violation error.
- Added Paste Proxies To My List. This uses the append option, so if you want to
append the pasted proxies,
then make sure you have Append to My List checked. (cobradiver)
- Fixed bad bug when you checked Filter Length and you had a combo at the end of
your wordlist that got
filtered. It caused a list out of bounds error. (vronique)
- Added option to Copy Proxy To Clipboard in the Hit list. (cobradiver)
- Fixed Copy to Clipboard in Hit ListBox to just copy the URL and not the proxy
information.
- Fixed bug with Defining a Failure Header Key Phrase. It didn't record hits.
- Added 2 options to not reactivate proxies (On 200 Response and on Bad Key
Phrase found). (Used in Snap Shots)
- Fixed bad bug when hits were done in simultaneous mode. Some routines added the
site from the combobox when in
fact, it could have been one of the sites from the simultaneous list.
- Added Retry Redirects X Times. Default is set to 0, because it is an advanced
option and rarely needed.
(Used in Snap Shots)
- Added more redirect protection, if a site is redirecting, I strongly suggest
you use GET Source Key Phrases,
unless you specify a redirect path as a hit.
- Added option to specify a redirect path as a hit. (Also used in Snap Shots)
- Added more options for History Saving (save SITE l: p: format and Detailed
History Saving).
- When loading a combo list, Sentry now deletes all trailing and leading spaces
on each combo.
- When a test ended, Sentry automatically aborted regardless of a combo needing a
retry. This is fixed except if
you click the abort button, combos will not be retried if they do. (You clicked
the abort button so don't blame
me)
- Moved Referer and Data To Post Fields to the Main Page in HTTP Debugger. These
options are the most common to
modify and this makes it easier.
- Added 3 new saving options under the history (Save Combos, Save URLs, Save Base
URLs)
- Made History Checking "select only", meaning you need to select the sites you
want to verify. ("a" selects
the entire list).
- Added Parse Proxy Key Phrase under Specific Site. (See Below)
- Moved Proxy Rotation and Ban Proxy options to the Proxy Options tab.
- Made a New tab Proxy -> Proxy Options (Deals with actual proxy options during a
test).
- Changed tab Proxy -> Options to Proxy -> Analyzer Options (Only deals with the
Proxy Analyzer).
- Fixed bad freezing bug with external ProxyJudge.
- Added a Horizontal Splitter in the progression tab. You can now resize the
Listview and the tabs at the bottom.
- Upgraded the GET Parsing engine so that you can now use Failure and Success Key
Phrases. Success Key Phrases have
priority over Failure Key Phrases.
- Added an option to abort a site after x hits. (Under Fake Tab, used in Snap
Shots also)
Note: This will abort when total hits equals X, so keep this in mind when doing
Simultaneous Sites
- Fixed a small memory problem with the internal judge.
- Added option to update My List after proxy analyzing completes.
- Added option to Delete Bad and Timeout Proxies Automatically after proxy
analyzing completes.
I decided to leave the Beta Readme as a part of the real readme, because this way
you can see how Sentry grew and
you might understand some more of the options by looking chronologically how they
have been added.
===================================================================================
=====================================
- Fixed very bad bug with retrieving IP Externally. It didn't clear the source
from the array which meant if you
tried to do a proxycheck afterwards, the source from that webpage would be
appended to the source of your first proxy, making it appear not anonymous
when infact it very well could be anonymous.
- Launch Base Site in Browser (the globe icon next to the site combobox) now
supports (http://members.somesite.com).
- Fixed bad bug with History (List out of bounds error). Was an error in the
proxy setting routine.
- Added option to Check Hits x times using the same proxy it got the hit with.
- Changed Edit Wordlist in Auto-Pilot to Open Dialog Box.
- Added load Proxies to My List option. Proxies are compared against Blacklist
and then loaded to My List.
- Fixed 2 bugs regarding the AutoPilot popup menu. If no jobs in list, then gave
a exception error.
- Fixed bug when loading Sentry, wordlist position didn't load right.
- Fixed bug with Wordlist from disk, you can now set a start position using the
wordlist position slider.
- Very bad bug in GET Engine, with failure key phrase used and content-length not
checked. No hits were
recorded.
- More fixes on Read Wordlist From Disk.
- Fixed a bug with adding proxies to the proxy analyzer. Some bad ports slipped
through.
- Fixed cosmetic bug with Internal ProxyJudge panel. There was a way you can make
it not dissapear and it
was not checked.
- Added option to save a list of URLs in Auto-Pilot.
- Added option to load a list of URLs with "Regular Settings" and your Current
Wordlist in Auto-Pilot.
Beta (RC 4) (Thanks�R@nge� for all your input and help) (04-6-03)
-----------
Beta (RC 3) (Special Thanks to Wolfman for his various inputs. Your help is
greatly appreciated :) (27-5-03)
-----------
- Added an option to reactivate all proxies when the active proxies equal or go
below x amount.
- Added an Internal ProxyJudge. Works the same as Proxyrama except for HTTPS and
Country Locator.
See below for more information. (Thanks Gaa Moa for your Open Source)
- Fixed Bug with Delete Gateway. If Gateway was blank, the proxy was deleted.
- History now saves on the fly to a file called "Logfile.log".
- Added a use No Proxy Option. This Option does not save.
- Fixed Bug with removing duplicates when a new wordlist is added to Wordlist
History.
- Added a Proxy Blacklist. This is used to compare whether a proxy should be
loaded into My List when you
click Update My List.
- Added a Page Viewer in the HTTP Debugger. It simply just displays in HTML the
source which the debugger
returned.
- Fixed HTTP Debugger when posting data. It didn't work correctly and caused an
error most of the time.
- Fixed bad bug with "Ban Proxy on 200 Reply". It banned all proxies because I
misplaced it in an if/then
statement.
- Fixed bug with calculating attempts when aborting. It missed the aborted
attempts.
- Fixed division by zero bug on very slow starting tests.
- Fixed Bad bug when aborting a test. Was a bug in the retry engine when test was
aborted and combos
that were going to be retried were passed as hits.
- Added an AboutBox Page
- Added a randomize function under Proxy Analyzer (Randomize them and then send
them to MyList)
- Added simple manipulation features.
- Changing wordlist position can now be done on the fly. (I though this was
already implemented until
I realized I forgot to do it when recoding some things for the wordlist from
disk option).
- Added Read wordlist from disk to save memory for big wordlists.
- Added a button that extracts proxies from clipboard to the analyzer.
- Added a reset button on the wordlist position panel.
- Sentry now automatically uses Get request method if you are using a fake
prevention that
requires this request method.
- Fixed the bad bug with the comboboxes. They now work.
- Added an option "Ban Proxy on 200 Reply" under Fake Tab. This was talked about
in one of the
forums to not use proxies after they returned a hit.
- Fixed how the Http Debugger displays the source. It now is more easily
readable. (Thanks tbscope)
- Added Statistics under the Progression tab. Includes Speed, Elapsed Time, Time
Remaining etc.
- Split the cracking engine into two separate procedures. Get and Head. This
should quicken
the code for each, especially Head.
- Added a QuickLaunch Menu and Editor. This option enables you to quickly run
your favorite
programs easily from within Sentry.
- Fixed problem with proxy loading for the analyzer. It now verifies the ports to
see
if the proxy is ok to load. (Thanks slysnake)
===================================================================================
================
Some Help and pointers of how to use this tool effectively:
Agent Randomizer
----------------
Chooses a random user agent between these 5 built in agents. This will make it
look less obvious that a bruteforce
attack is being used.
Simply parses a specific site for certain key phrases. If found, then the proxy
is good. If not, the proxy
is bad. The logic behind this is to remove redircting proxies that censor
content.
If a site returns a 401 without a key phrase being found, it could have not
returned a source. Not all proxies
return a source with a 401 recieved response. Keep this in mind.
Auto-Pilot
----------
And Auto-Pilot system is an engine that runs a certain amount of jobs, which the
user specifies. The
entire engine is built on using Snap Shots.
- If a Snap Shot exists for the site added, you can decide to use it. If one
does not exist or you decide
not to use the Snap Shot, the settings of what is currently being used are
used for this job. Saved as
AutoPilot.sss, so essentially you just created a Snap-Shot for that site of
the settings you just had.
This Snap Shot will be used for all the sites that you didn't specify a Snap
Shot for.
- Sleep between jobs is a good way for letting your connections reset (lettings
slow connections finish).
- Auto-Pilot reports a summary at the beginning and end of each job.
- Use the abort button in the Auto-Pilot Section.
- You cannot use a wordlist from disk when using Auto-Pilot.
Header Parsing
--------------
Header Parsing is a brand new type of fake protection. Basically, you now can
specify keyphrases in the
header response sent to you by the server. Why is this useful?
- I should not have put this option in here, but too many people would wonder
why it this method is still
spitting out fakes: 503 and 502 responses are automatically disregarded when
using this method.
If you are still getting fakes, use the Debug Header Response option and add
additional Key Phrases.
- Success Key Phrase parsing only needs to find one of the listed key phrases to
be considered a hit.
- This method, in conjunction with the Debug Option, and a little thought can be
very powerful.
Snap Shots
----------
A Snap Shot is basically what its name describes it as. When you test a site for
the first time, a Snap
Shot is created. What this file contains is all the essential details in Main and
Fake tabs.
The engine is built even so you can use shortcuts once a Snap Shot exists. For
instance, you open up Sentry
and decide to run http://somesite.com/members/index.html
If you have a Snap Shot of that site, you can even enter somesite.com in the Site
ComboBox. Sentry will
automatically detect that you have a Snap Shot of that site and will ask you to
load it.
In the above case, if you load it, the Site ComboBox will now be replaced with
the Member's URL saved for
that site. If you choose not to load it, be prepared for a lot of 200
responses :)
Internal ProxyJudge
-------------------
An Internal ProxyJudge is simple. Your computer acts like an HTTP Server and it
connects back to it with
the proxies in the list. If your IP is found in the Header Data (X_FORWARDED)
field, then the proxy is
not anonymous.
401 determines if the proxy supports a Basic Authentication. Almost all proxies
do, so this field should
almost always have a "YES". The proxy connects to the HTTP Server and receives
the Header of a Basic
Authentication Page. If the response by the Proxy is a 401, than the proxy
supports this.
All pages are created virtually; so you don't really have a proxyjudge.html, etc.
on your computer anywhere.
Locations:
ProxyJudge: http://<YOUR_IP>:<SERVER_PORT>/proxyjudge.html
Basic Authentication Page:
http://<YOUR_IP>:<SERVER_PORT>/secure/fuck/sex/boobs/xxx/index.html
Bad words in the Basic Authentication path will filter out proxies that sensor
sites.
Note: Changing the Server Port will not allow some proxies to work. Some proxies
can only connect to
port 80 and changing this port may cause some perfectly legit proxies not
to work.
QuickLaunch Menu (upper right corner, button with the exe icon) is a way to start
your favorite programs
through Sentry. Just open a Path to Exe file using the open button in the editor.
The name is filled in
by Sentry of the program you chose according to the filname of the program. The
icon is ripped from the
Exe file to better identify your programs. Then hit the Add button to add the
program to the QuickStart
menu. Close the QuickLaunch Editor and click the QuickStart Menu to see the
program you added. Everything
is editable, except for the icon.
Wordlist Position keeps track of where Sentry's position is with your wordlist at
any given time. If
a test ends or you abort a test early, you'll need to reset the wordlist position
as well.
My List = These are the proxies that are being used during your test.
If your IP comes up wrong in Proxy -> Options, you can change it by Double
Clicking the Panel that displays
your IP.
Site List and Wordlist History keep track of the sites you've tested and the
wordlists you've used.
Ban Proxy on Bad Keyphrase = If a failure keyphrase is found, the proxy is banned.
- Check Hits x Times still works with this method, although it should never be
used. This option only
works if you do not specify any fake protection except for this option.
- Define Success Keyphrase. If a keyphrase is known on the members page, you can
use this option to increase
the amount of hits on a site. For example, if you get a hit, you can scan
through the source of the webpage
(i.e. members.html) and pick out a distinctive keyphrase (<title>Welcome to My
Members Area</title>). Every
200 reply's source is scanned for these good keyphrases. If one is found, then
returned as hit. Everything
else is a failure. This method also scans redirects for keyphrases. This
method can elimanates fake replies.
Http Debugger sends requests to a given site using various options. Follows
Redirects to completion which can
be very useful for spoofing.
Progression Tab shows what is happening during the test. Replies Tab has
statistics of the current test in
progress.