elza 1.4.3-16 / etc / elza.def

This file is indexed.

/etc/elza.def is in elza 1.4.3-16.

This file is owned by root:root, with mode 0o644.

The actual contents of the file can be viewed below. 

  1
  2
  3
  4
  5
  6
  7
  8
  9
 10
 11
 12
 13
 14
 15
 16
 17
 18
 19
 20
 21
 22
 23
 24
 25
 26
 27
 28
 29
 30
 31
 32
 33
 34
 35
 36
 37
 38
 39
 40
 41
 42
 43
 44
 45
 46
 47
 48
 49
 50
 51
 52
 53
 54
 55
 56
 57
 58
 59
 60
 61
 62
 63
 64
 65
 66
 67
 68
 69
 70
 71
 72
 73
 74
 75
 76
 77
 78
 79
 80
 81
 82
 83
 84
 85
 86
 87
 88
 89
 90
 91
 92
 93
 94
 95
 96
 97
 98
 99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
#
# DEFAULT VALUES FOR VARIOUS ELZA VARIABLES. PLEASE REVIEW.
#

# ========================================================================
# STEP 1 - Choosing the operating system
# ========================================================================

# Uncomment the line below to show that you have reviewed elza.def

$DefaultsReviewed = 1;

# Uncomment the line below if running in Win32 environment

#use Win32::Process;	use Win32;


# ========================================================================
# STEP 1A - Choosing authentication mechanism
# ========================================================================

# If you plan to talk to sites that use Basic authentication, uncomment
# the line below. You will also need the MIME::Base64 module from CPAN

#use MIME::Base64;

# If you plan to talk to sites that use Basic authentication, uncomment
# the line below. You will also need the Digest:MD5 module from CPAN

#use Digest::MD5;

# ========================================================================
# STEP 1B - Keepalive
# ========================================================================

$VAR{'keepalive'} = 'on';

# ========================================================================
# STEP 2 - Setting up the SSL tunnel
# ========================================================================

$VAR{'ssllocal'} = "24442";	# Local port to bind the SSL tunnel to

# Please uncomment the set pertaining to your system.
# SSLHOST and SSLPORT will be replaced by the ELZA with
# the appropriate values at runtime.

# SET FOR WIN32 (tested with stunnel on Win95)

#$DEF{'sslapp'} = "c:\\win-util\\stunnel.exe";
#$DEF{'sslcmd'} = "stunnel -c -d 127.0.0.1:SSLLOCAL -r SSLHOST:SSLPORT -D 1";
#$DEF{'sslconsole'} = 1;		# Set to 1 to see the console

# SET FOR UNIX (tested with stunnel on Debian Linux)

$DEF{'sslapp'} = "stunnel";	# This name will be passed to KILLALL
$DEF{'sslcmd'} = "/usr/bin/stunnel -c -d 127.0.0.1:$VAR{'ssllocal'} -r SSLHOST:SSLPORT -D 1 -P none -o /dev/fd/2";

# ========================================================================
# STEP 3 - Proxies
# ========================================================================

# HTTP Proxy configuration.
# NOTE:SSL requests are piped through the SSL tunnel, not the proxy.

#$VAR{'proxyhost'} = 'proxy.bgnet.bg';
#$VAR{'proxyport'} = '3128';

# SOCKS proxy configuration.

# Uncomment the line below to load the SOCKS module.

#use Net::SOCKS;

#$VAR{'sockshost'} = '127.0.0.1';
#$VAR{'socksport'} = 1080;
#$VAR{'socksversion'} = 5;

#$VAR{'socksuser'} = 'foo';
#$VAR{'sockspassword'} = 'bar';


# ========================================================================
# STEP 4 - Dumping
# ========================================================================

# Make ELZA completely silent?

#$VAR{'silent'} = 'on';

# Output debugging information?

#$VAR{'debug'} = 'on';

# Default file for raw output

#$VAR{'rawfile'} = 'raw.out';

# Options for what should be dumped. Comment out those you do not need.

# Dump the literal request we send?

$VAR{'dumprequest'} = '1';

# Dump the headers of the response?

$VAR{'dumpheaders'} = '1';

# Dump the body of the response? - basically between <HTML> and </HTML>

$VAR{'dumpbody'} = '1';

# Temporary files where the current attack position will be saved so that
# the attack can be resumed.

$VAR{'tmpfile'} = 'elza.tmp';

# ========================================================================
# STEP 5 - Defaults for various things
# ========================================================================

# Those can also be changed from within the script files.

# Default action upon error condition

$VAR{'onerror'} = 'exit';

# Default User-Agent - IE5

$VAR{'agent'} = "Mozilla/4.0 (compatible; MSIE 5.0; Windows 98)";

# Default host - if none specified in the first request

$DEF{'host'} = 'localhost';

# Send User-Agent?

$VAR{'sendagent'} = 'on';

# Encode URLs to bypass IDS alarms? Courtesy of r.f.p. (rfp@wiretrip.net)

#$VAR{'encode'} = 'on';

# Send various other HTTP request fields?

$DEF{'headers'}.= "X-Elza: Request generated by the ELZA script ver. $DEF{'version'}.\n";
$DEF{'headers'}.= "Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/msword, */*\n";
$DEF{'headers'}.= "Accept-Language: en\n";
$DEF{'headers'}.= "UA-pixels: 640x480\n";
$DEF{'headers'}.= "UA-color: color16\n";
$DEF{'headers'}.= "UA-OS: Windows 95\n";
$DEF{'headers'}.= "UA-CPU: x86\n";

# Follow 302 Moved redirects automatically?

$VAR{'autoredir'} = 'on';

# Follow HTTP-EQUIV refreshes automatically?

$VAR{'autorefresh'} = 'on';

# ========================================================================
# VARIABLES BELOW THIS LINE DO NOT REQUIRE CHANGING
# ========================================================================

# Default URL prefixes and port assignments

$DEF{'port'} = '80';
$DEF{'sslport'} = '443';
$DEF{'http'} = 'http://';
$DEF{'https'} = 'https://';
$DEF{'protocol'} = 'HTTP/1.0';

# Bracketz

$LeftBrack = '<';			$RightBrack = '>';

# Those are the various tags that the tag processor can look for.

$TagBegin{'base'} = '<base ';		$TagVal{'base'} = 'href';
$TagBegin{'link'} = '<a ';		$TagVal{'link'} = 'href';
$TagClose{'link'} = '</a>';
$TagBegin{'hidden'} = '<input ';	$TagVal{'hidden'} = 'value';
$TagBegin{'form'} = '<form '; 		$TagVal{'form'} = 'action';
$TagBegin{'frame'} = '<frame ';		$TagVal{'frame'} = 'src';
$TagBegin{'layer'} = '<layer ';		$TagVal{'layer'} = 'src';
$TagBegin{'refresh'} = '<meta ';	$TagVal{'refresh'} = 'content';
$TagBegin{'ilayer'} = '<ilayer ';	$TagVal{'ilayer'} = 'src';
$TagBegin{'area'} = '<area ';		$TagVal{'area'} = 'href';
$TagBegin{'applet'} = '<applet ';	$TagClose{'applet'} = '</applet>';
$TagBegin{'param'} = '<param ';		$TagVal{'param'} = 'value';
$TagBegin{'image'} = '<img ';		$TagVal{'image'} = 'src';

# Those are tags that can appear in forms and be used to extract data
# ot set the container

$TagBegin{'option'} = '<option';	$TagEnd{'option'} = '</option>';
$TagBegin{'input'} = '<input ';		$TagEnd{'input'} = '</input>';
$TagBegin{'select'} = '<select ';	$TagEnd{'select'} = '</select>';
$TagBegin{'textarea'} = '<textarea ';	$TagEnd{'textarea'} = '</textarea';

# And, finally, some other tags

$TagBegin{'table'} = '<table';		$TagEnd{'table'} = '</table>';
$TagBegin{'row'} = '<tr';		$TagEnd{'row'} = '</tr>';
$TagBegin{'cell'} = '<td';		$TagEnd{'cell'} = '</td>';
$TagBegin{'title'} = '<title';		$TagEnd{'title'} = '</title>';
$TagBegin{'address'} = '<address';	$TagEnd{'address'} = '</address>';
$TagBegin{'blockquote'} = '<blockquote';$TagEnd{'blockquote'} = '</blockquote>';
$TagBegin{'div'} = '<div';		$TagEnd{'div'} = '</div>';
$TagBegin{'p'} = '<p';		$TagEnd{'p'} = '</p>';
$TagBegin{'pre'} = '<pre';		$TagEnd{'pre'} = '</pre>';
$TagBegin{'xmp'} = '<xmp';		$TagEnd{'xmp'} = '</xmp>';
$TagBegin{'caption'} = '<caption';	$TagEnd{'caption'} = '</caption>';
$TagBegin{'th'} = '<th';		$TagEnd{'th'} = '</th>';



# Print message if elza.def is executed on its own
if ($DEF{'version'} eq '') { print "This file is not indended to be executed on its own.\n"}

APT Browse - Built by Thomas Orozco.