JW Network Consulting » penetration testing

New Open Source Project Created – Reconnoiter

Jason — Wed, 16 Sep 2009 05:07:03 +0000

Earlier this month I decided to take the scripts for username generation and roll them into an open source project. There were a couple of reasons for doing so. First, I needed source control hosting and SourceForge provides that for free as long as you release the project to the public. Second, I want to expand the scope of it to go beyond what I’ve done so far. It’s great that people have found these scripts useful, but its hardly rocket science. This should give me some more room to explore and share with others.

If you would like to check out the project, you can search for “Reconnoiter” on sourceforge.net or you can just follow this link:

http://sourceforge.net/projects/reconnoiter/

One last note. There are some changes in the 0.2 release of Reconnoiter that may be useful. I found a nasty bug in the Yahoo script that needed to be fixed badly. That’s been done and committed to the release. Last, I made the output a lot more useful. There was no filtering at all for results that included HTML code in them. This caused some obviously bad usernames. Unless you logged in as “jwood” often. To help with that I’ve added some filtering which should improve the quality of the results. Enjoy!

Technorati Tags: open source, penetration testing, web app security

Scripts to Generate Usernames

Jason — Wed, 02 Sep 2009 05:00:15 +0000

I’ve written a couple of posts about a script I wrote to generate usernames. Since then I’ve written another script that uses Yahoo’s XML API and both of them have been included in SamuraiWTF. It’s been pretty cool to see people try out something that I wrote and find it useful to them. The scripts are still pretty rough and need some work.

I’d like to make the Yahoo script less ugly to use. Putting a huge API key in as a command argument strikes me as kinda lame. The results from it are very consistent though. So I actually prefer using it to the google version of the script. You can download the Yahoo script here: usernameGenYahoo.txt The Google script is here: usernameGen-v2.1.1.txt

Please let me know if you find any bugs with them, want additional functionality or if you just found them useful.

Technorati Tags: penetration testing, username generation, username generator

Updated usernameGen.py

Jason — Wed, 17 Jun 2009 02:33:20 +0000

Mike Patterson on the Pauldotcom mailing list commented that he thought usernameGen.py could use handling for middle names. The template that he suggested was of first initial, middle initial and last name. I think he’s right. Originally I had the script avoid middle names or initials, but I went back and added the format Mike requested.

So here it is. usernameGen-v2.1.txt

Technorati Tags: penetration testing, social networks, username generator