Cатсн²² (in)sесuяitу / ChrisJohnRiley

After a short hiatus I finally got back into the swing of things. Unsurprisingly for me it was a new project that got me out of my slump and back in-front of the computer. Over the last month or so I’ve been working on a framework (modular) for account enumeration.

Scythe was designed with a couple of purposes in mind:

• The ability to test a range of email addresses (or account names) across a range of websites (e.g. social media, blogging platforms, etc…) to find where those “targets” have active accounts. This can be useful in social engineering tests where you have email or account names for a company and want to convert that into a list of external services where these users have used their work email for 3rd party web-based services.

• The ability to quickly create custom test-case modules and use it to enumerate for a list of active accounts. Using either a list of known usernames, email addresses, or a dictionary of common account names. The framework can handle cookie collection and CSRF token work that would otherwise make a POC enumeration a pain in the ***.

The modules are XML-Based and allow for both simple and more complex functionality (depending on what the user needs). Currently modules for the following websites are included as a starting point:

• Facebook
• Twitter (Username and Email/Phone number)
• GitHub (Email and Username)
• BackTrack Forum (care of @digininja)
• Tumblr (Email and Username)
• WordPress
• Xing

Hopefully users will continue to add modules and feed them back to me for inclusion into the framework. This can be done via a PULL request in GitHub, or via email if you prefer. Examples are included in the modules directory (with GitHub being the example of a complex modules using cookies and matching CSRF token extraction).

Screenshots:

Demo Video:

Appologies for the quality, but Vimeo and Flickr dislike the video resolution

Slides:
I presented a quick lightning talk on Scythe at the BruCON 2012 conference last week… the slides (and thankfully no audio/video) of the presentation are below.

This is my first attempt at a framework so feedback, comments, additions and PULL requests are always welcomed! If you find this useful, let me know. Inspiration to keep going is hard to come-by nowadays it seems!

Links:

• Scythe Framework on GitHUB
• “Cutting Accounts Down to Scythe” slides –> Slideshare
• Scythe Framework Demo video –> Vimeo