Copyright: NetMole Application Help v 1.0
Citation: NetMole Application Help v 1.0


NetMole - copyright notice

END-USER LICENSE AGREEMENT

IMPORTANT-READ CAREFULLY: This Euromedia End-User License Agreement (EULA) is a legal agreement between you (either an individual or a single entity) and Euromedia for the WebTester software product and any accompanying electronic documentation (SOFTWARE PRODUCT or SOFTWARE). By installing, copying, or otherwise using the SOFTWARE PRODUCT, you agree to be bound by the terms of this EULA. If you do not agree to the terms of this EULA, you are not authorized to use the SOFTWARE PRODUCT.WEBTESTER SOFTWARE LICENSE: The SOFTWARE PRODUCT is protected by copyright laws and international copyright treaties, as well as other intellectual property laws and treaties. The SOFTWARE PRODUCT is licensed, not sold.

1. GRANT OF LICENSE

Euromedia grants to you as an individual, a personal, non-exclusive, license to install and use one copy of the SOFTWARE on a single personal computer. Euromedia may have patents or pending patent applications, trademarks, copyrights, or other intellectual property rights covering the SOFTWARE PRODUCT. You are not granted any license to these patents, trademarks, copyrights, or other intellectual property rights except as expressly provided herein. Euromedia reserves all rights not expressly granted.

2. COPYRIGHT

All title and copyrights in and to the SOFTWARE PRODUCT (including but not limited to any images, photographs, animations, video, audio, music, text, and applets, incorporated into the SOFTWARE PRODUCT), the accompanying printed materials, and any copies of the SOFTWARE PRODUCT, are owned by Euromedia or its suppliers. The SOFTWARE PRODUCT is protected by copyright laws and international treaty provisions. Therefore, you must treat the SOFTWARE PRODUCT like any other copyrighted material except that you may either (a) make one copy of the SOFTWARE PRODUCT solely for backup or archival purposes, or (b) install the SOFTWARE PRODUCT on a single computer provided you keep the original solely for backup or archival purposes.

3. DESCRIPTION OF OTHER RIGHTS AND LIMITATIONS

You may not reverse-engineer, decompile, or disassemble the SOFTWARE PRODUCT, except and only to the extent that such activity is expressly permitted by applicable law, notwithstanding this limitation.You may permanently transfer all of your rights under this EULA, provided you retain no copies, you transfer all of the SOFTWARE PRODUCT (including all component parts, all accompanying electronic documentation, and this EULA), and the recipient agrees to the terms of this EULA.You may not rent or lease the SOFTWARE PRODUCT.The SOFTWARE PRODUCT is licensed as a single product. Its component parts may not be separated for use by more than one user.Without prejudice to any other rights, Euromedia may terminate this EULA if you fail to comply with the terms and conditions of this EULA. In such event, you must destroy all copies of the SOFTWARE PRODUCT and all of its component parts.

4. NO WARRANTIES

THE SOFTWARE PRODUCT IS PROVIDED AS IS WITHOUT WARRANTY OF ANY KIND. ANY USE OF THE SOFTWARE PRODUCT IS AT YOUR OWN RISK. TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, EUROMEDIA AND ITS SUPPLIERS DISCLAIM ALL WARRANTIES, EITHER EXPRESS OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE AND ANY WARRANTY AGAINST INFRINGEMENT, WITH REGARD TO THE SOFTWARE PRODUCT.

5. NO LIABILITY FOR CONSEQUENTIAL DAMAGES

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, IN NO EVENT SHALL EUROMEDIA OR ITS SUPPLIERS BE LIABLE FOR ANY DAMAGES WHATSOEVER (INCLUDING, WITHOUT LIMITATION, DAMAGES FOR LOSS OF BUSINESS PROFITS, BUSINESS INTERRUPTION, LOSS OF BUSINESS INFORMATION, OR ANY OTHER PECUNIARY LOSS) ARISING OUT OF THE USE OF OR INABILITY TO USE THIS PRODUCT, EVEN IF EUROMEDIA HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. BECAUSE SOME STATES/JURISDICTIONS DO NOT ALLOW THE EXCLUSION OR LIMITATION OF LIABILITY FOR CONSEQUENTIAL OR INCIDENTAL DAMAGES, THE ABOVE LIMITATION MAY NOT APPLY TO YOU.

6. LIMITATION OF LIABILITY

EUROMEDIA'S ENTIRE LIABILITY AND YOUR EXCLUSIVE REMEDY UNDER THIS EULA SHALL NOT EXCEED FIVE DOLLARS (US$5.00).

9. MISCELLANEOUS

Should you have any questions concerning this EULA, or if you desire to contact Euromedia for any reason, please visit http://euromedia.hypermart.net


NetMole what is ...
NetMole - what is ...

This program is designed to test security of any protected site !

For the moment this program simulate a spider but for future versions we plan to add other usefull "jobs" .

Warnings

1. this program is for webmasters ONLY !

2. use this program with EXTREME precaution and ONLY to test your own site !

3. some of settings of this program make the program to take control of your computer CPU so it is fully recommended to NOT run many other programs ( especialy browsers ) while this one is running !

For impressions and to report any bug contact us at webmaster@euromedia.ro


Terms in use
NetMole - terms in use

session

By "session" we mean a launched attack against a password-protected site which simulate a number of browsers equal to number of the threads you set that its try to access the site .

combo-dictionary

Is a dictionary that contain <username:password> pairs .

 dictionary

By "dictionary" we mean a text file which contains words ( that don't contain ":" char ) delimited by <CRLF> sequence . We use as well terms like "username-dictionaries" or "password-dictionaries" but we refer to the same type of file .

engine

An "engine" is basically a thread .

thread

A "thread" runs inside the program process like an independent program . It has its own CPUs allocated time to run then passes the control to another thread in the program process or to the other program . In our program every thread simulate a browser that it try to access an URL .

For impressions and to report any bug contact us at webmaster@euromedia.ro


"Spider" job - How it works
NetMole - "Spider" - How it works

It is very simple to use it :

 When you open program it has the default [image] settings . Just push the

start spider button and wait it to do its job . You will be surprised to see how fast the results will appear ( check "Results" tab ) . Although , you cannot make any [image] settings while the program works .

 NOTE

The program automate stop when it finish its job .

IMPORTANT NOTE

 Do not try to close the program while it works . Stop it first so the program can safely end all the engines it started .

For impressions and to report any bug contact us at webmaster@euromedia.ro


"Spider" job - Settings
NetMole - "Spider" - Settings

It takes only a few seconds to make this settings .

1. you can choose to connect through a proxy ( using or not an username and a password ) . Note : you can use only numeric IP address in this case e.g. 111.1.11.111

2. you can set type of search :

 2.1. search for passwords for a specific URL ( see L1. limitation for this case )

 2.2. search for all passwords

For 2.2. case you can choose to

2.2.1. extract working URLs ( in "Results" tab  will be displayed working URLs) and / or extract passwords ( in "Results" tab  will be displayed User-Pass pairs )

2.2.2. enable bann - when you push banned sites button you can load a .BND file .

 Notes :

a. when you (re)move your .bnd files and your last settings used one of .bnd files (re)moved the program will annonce you that it can load the last default banned file .  Push "OK" from when the two consecutive windows will appear .

b. To add a site ( URL ) to a .bnd file use right-click mouse in "Results" tab .

c. you can edit a .txt file with banned sites and than load .bnd file when "from NetMole Spider-> Session' settings" .

2.2.3. depth level - is rezerved for future versions .

NOTES :

1. The program will "remmember" settings from one session to another and between two restarts .

2. You cannot modify settings while "Spiders" works - push first the

stop spider button and wait program to stop all engines it started before make any settings .

For impressions and to report any bug contact us at webmaster@euromedia.ro


"Spider" job - Database
NetMole - "Spider" - Database

That is ! Use this button [image] get spider's database to give program the sites from where it can download the <username:passowrd> for password protected sites . There are a lot of sites on 'Net which give these passwords . For the start we will give you  a list which you can update .

For impressions and to report any bug contact us at webmaster@euromedia.ro


"Spider" job - Save results
NetMole - "Spider" - Save results

When you select "Results" tab depending the [image] settings you make :

1.

you can see "propertysheet" above which contain three tabs :

- User-Pass list - if active , buttons 1. will be disabled .

- Working URLs - if active , buttons 2. and 3. will be disabled .

- Failed to test - if active , buttons 2. and 3. will be disabled .

or not .

Always you will see three buttons ( disabled or not ) :

1.

When you push button above you will have save the results in a .HTML file you can use latter or overwrite next time you save in HTML format .

2.

When you push button above you will have save the results in a .TXT file you can use latter or overwrite next time you save in TXT format .

3.

When you push button above you will have paste the results to a .TXT file you can use latter  . The file must exist already . Note : this operation will not automate remove duplicates from file  you paste to but if in the list it exist an User-Pass pair which is found in file that User-Pass pair will not be saved .

Note : when saving or pasting in .TXT format a window will popup to ask you about separator you want to use betwwen User and Pass .

sample :

if in list you have 1:1,2:2 and 3:3 pairs and you choose SPACE separator then  in file its will be save like :

1 1

2 2

3 3

For impressions and to report any bug contact us at webmaster@euromedia.ro


HARD stop
NetMole - HARD stop

 b button "hard stop" is for the ones which have very slow connection .

if you push the stop button either on "spider" or "HTTP attack" and program don't stop in 5 minutes ,than push the "hard stop" button .

WARNING

USE THIS BUTTON ONLY WHEN IS STRICT NECESSARILY !!!

For impressions and to report any bug contact us at webmaster@euromedia.ro


"Spider" job - Limitations
NetMole - "Spider" - Limitations

L1. When you set search for passwords for a specific URL in [image] settings the program will find the User-Pass pairs for that URL but you must manually try if its work .

For impressions and to report any bug contact us at webmaster@euromedia.ro


How it works - Step by step
NetMole "HTTP Attack"- How it works - Step by step

This section explain how the program work and what you have to do .

RESUME

a. First , load a (new ) session .

b. Choose settings for the session .

c. Start 'HTTP Attack' (connect) .

d. Stop 'HTTP Attack' (disconnect) .

e. Save or/and quit  .

a. First , load a (new ) session .

When you first start the program you will have to start a new session or to load a saved one . To do this just push "http attack sessions" button . From the new window will appear push "new session" button or select session you want to load and push "load session" button .

For informations about loading a session see [image] "Operate with sessions" chapter in "How it works" book in Help Topics .

Up to resume

b. Choose settings for the session .

If you loaded a new session you will must to set all options before you can connect.you don't make valid settings for the curent session a message dialog box will appear and signal you where an error occured.

If you loaded a session you saved it before , you canNOT change the settings for that session .

For detailed informations about settings see [image] "Choose session's settings" chapter in "How it works" book in Help Topics .

Up to resume

c. Start 'HTTP Attack' (connect) .

If no problem appeared untill now , you can start attack by pushing "start http attack" button .

Up to resume

d. Stop 'HTTP Attack' (disconnect) .

If you choose to stop an attack no information will be saved on your disk but you can still restart the attack ( see below section e.Save or/and quit ).

If you choose to save a "Save as" dialog will appear and you can save with any name and in any directory of your computer a file that will contain all the information about interrupted session .

IMPORTANT NOTE !

YOU HAVE TO WAIT UNTILL PROGRAM END ALL THREADS BEFORE YOU GIVE ANY OTHER COMMAND . YOU WILL  KNOW THAT PROGRAM STOP WHEN THE 'START' BUTTON WILL BECAME AVAILABLE TO PUSH .

Up to resume

e. Save or/and quit .

Push "save session" (that's all) . You can launch again an attack ( reconnect ) right after you STOP (disconnect) . You canNOT change settings of a session .

Up to resume

For impressions and to report any bug contact us at webmaster@euromedia.ro


"HTTP Attack" - How it works - General settings
NetMole "HTTP Attack" - How it works - General settings

 use that button to set "Connection" and "Miscellanceous" .

The list of proxies you give here will be load like default for every new session you start .

NOTE

about sounds ... if you don't want the program to "say" to you "hello" and "see you later , aligator " just remove the .wav proper files from "sounds" directory .

For impressions and to report any bug contact us at webmaster@euromedia.ro


overview of " Choose session's settings "
NetMole "HTTP Attack" - Choose session's settings - Overview

This chapter explain how to set a session before you connect .

Choosing session's settings is the most important important part of the process of testing your site with this program .You have multiple options and we hope for future versions you will have more . Since the program "simulate" a brute-force attack against your password-protected site that means that the program will try to enter your site using dictionaries of names and passwords , combo-dictionaries or all combination from a given charset .

General schema ( and the only one for the momment ) NetMole use is <service://username:password@yoursite> where service can only be "http" .

When you load a (new) session  a "propertysheet" is displayed . It contains three "propertypages" named "Connection" , "Dictionaries" , "Sites" .

1. From Connection "propetypage" you can choose the type of connection the program use to connect to your site "direct" or "through proxies" . Note that the program can accept a list of proxies . That will make it "invizible" and almost impossible to trace because it will use alternatively proxies from the list to connect to your site . For a complete list of options on this property page see [image] "Conection's settings" document in Help Topics .

2. From Dictionaries "propetypage" you can set how the program will choose "username:password" pairs . You can load multiple username-dictionaries , password-dictionaries or combo-dictionaries . Also you can set the program not to read from dictionaries but to generate all combinations from a customizable charset . For a complete list of options on this property page see [image] "Dictionaries' settings" document in Help Topics .

3. From Sites "propetypage" you can set when the program should stop and you can give a list of URLs inside your site which program should try to access . For a complete list of options on this property page see [image] "Sites' settings" document in Help Topics .

For impressions and to report any bug contact us at webmaster@euromedia.ro


Conection's settings
NetMole "HTTP Attack" - Conection's settings

This section explain how options you have to set in Conection  "propertypage" .

You CAN MODIFY these settings after you saved a session and then you load it .

Here is a list of settings you can make.

direct

This let the program access the Internet direct .

through a proxy

This let the program access the Internet through a proxy-server .

particular one

You can choose the program to use a proxy-server but you must enter the numeric address ( in xxx.xxx.xxx.xxx form ) .

random from the list below

You can add any numbers of proxy-servers , for each thread the program will random choose from the list . If you are not setting the port the program will suppose is 80 ( this not apply to "particular one" setting ) and will pop up a dialog to ask you what it should do .

For impressions and to report any bug contact us at webmaster@euromedia.ro


Dictionaries' settings
NetMole "HTTP Attack" - Dictionaries' settings

This section explain what options you have to set in Dictionaries  "propertypage" .

Since the program "simulate" a brute-force attack against your password-protected site that means that the program will try to enter your site using dictionaries of names and passwords , combo-dictionaries or all combination from a given charset .

When you choose "Dictionaries " command of "Settings" menu item the Settings dialog will pop up with the proper "propertypage" already selected . You can reach here pushing "Settings" button and select Dictionaries  too .

You CANNOT MODIFY these settings after you saved a session and then you load it .

Here is a list of settings you can make.

use dictionaries

This let you use dictionaries . You can load its pushing "load" button . If you started a new session in the short view list you will see the firsts ten words in the dictionaries you load ( note that its will not appear anymore after you saved a session and then you load it ) . You can load multiple dictionaries but the program wil not test if the words in its repeat .

normal

this let you use username-dictionaries and password-dictionaries .

combofiles

this let you use combo-dictionaries .

try combinations

You have this option instead of using dictionaries . The program will generate combinations of characters it found in the charset you can set . By default the charset is "abcdefghijklmnoqprstuvwxyz0123456789" but you can add or delete characters .

all

this make the program to generate , separate , all combinations of characters for the "username" and all combinations of characters for the password.

simetric

this make the program to generate all combinations of characters for the "password" and then make "username"="password".

random

this make the program to generate random combinations of characters in charset based on size of "password" or "username" . Note that "equal" or "equal or less than" has no efect in this case .

GREAT FEATURES FOR DICTIONARIES

1. you can load MULTIPLE dictionaries ( how many you want ) .

2. you have posibility to extend dictionaries you load using "extended" button - a new window will popup and you can set variable extensions for "USER" and "PASS" . A contor in right-down of the window will announce you how many times you multiply the dictinaries you load .

3. in case of "combo-dictionaries" you can set the separators used in wordlist in files SO the program proper load the UP pairs . Suppose you import a wordlist generated by another program which has <Username%Password> form . Just push "separators for combofiles" button , choose "custom" and type [%] char .

Here you have a sample for try combination settings .

charset is "abc" . You set simetric.

password maximum size = 2 . You set equal or less than ...

username maximum size = 2 . You set equal or less than ...

For these settings the program will generate the combinations below :

username="a" ; password="a"

username="b" ; password="b"

username="c" ; password="c"

username="aa" ; password="aa"

username="ab" ; password="ab"

username="ac" ; password="ac"

username="ba" ; password="ba"

username="bb" ; password="bb"

username="bc" ; password="bc"

username="ca" ; password="ca"

username="cb" ; password="cb"

username="cc" ; password="cc"

For impressions and to report any bug contact us at webmaster@euromedia.ro


Sites' settings
NetMole "HTTP Attack" - Sites' settings

This section explain how options you have to set in Conection  "propertypage" .

You CANNOT MODIFY these settings after you saved a session and then you load it .

Here you give a list of URLs the program will try to access . Also you can set when the program should stop , by default it stop when , depending [image] "Dictionaries' settings" you choose , finish all the words in the dictionaries you loaded or all possibles combinations . check if you want the program to stop prematurely

If you check this the program will stop depending on settings below .

after first valid entry was found

If you choose this the program will stop after it access one of the URLs you give in the list .

after first valid entry for every site in the list was found

If you choose this the program will stop after it access all the URLs you give in the list .

You have possibility to set number of engines program use to attack . Depending on number of URLs you load , you can set this number up to 999 .

When you load a single URL number of engines can be 1 up to 999 .

When you load more than an URL , number of engines can be 1 up to 100 .

NOTES

1. Every engine is a separate thread . If you don't have powerful computer , it can block for a big number of engines . Just think that a common program don't use more than 10 threads SO if you set program to use 100 engines !...

2. Even your computer supports 200 threads running at same time it has no point to set program to run a lot of engines if your connection is slow .

For impressions and to report any bug contact us at webmaster@euromedia.ro


overview of " Operate with sessions "
NetMole "HTTP Attack" - Operate with sessions - Overview

This chapter explain how to work with sessions .

When you push "sessions button a new window will pop up .

Here is a list of buttons and what are its for .

  new session button .

This make the program to launch a new ( blank ) session . After you push that button the program will close Sessions window and will pop up the Settings window where you will have to make settings . For more informations about setting a session see [image] "Choose session's settings" .

  load session button .

This make the program to load a session you saved it before . After you push that button the program will close Sessions window and you are ready to start .

  delete session button .

This make the program to delete a session you saved it before .

For impressions and to report any bug contact us at webmaster@euromedia.ro


new session
NetMole "HTTP Attack" - New session

This section explain how to load sessions .

From the main window of the program , open Sessions window by pushing the "sessions" button .

New Session

Suppose you are at the first use and want to load a new session just push the "new session" button . This action will clear all memory program and will reinit the settings . You will not be able to connect untill you [image] "Choose session's settings" .

For impressions and to report any bug contact us at webmaster@euromedia.ro


Load sessions
NetMole "HTTP Attack" - Load sessions

This section explain how to load sessions .

From the main window of the program , open Sessions window by pushing the "sessions" button .

Load A Session You Saved Before

This is easy to do . Make a selection from the list of saved sessions and then push load session button . If you accidentally deleted the proper file , the program will tell you that - if this happened you have to delete the session - for more informations see [image] Delete a session .

Note that when you save a session is possible to choose any name and to save it anywhere on your hard disk .

For impressions and to report any bug contact us at webmaster@euromedia.ro


Delete a session
NetMole "HTTP Attack" - Delete a session

This section explain how to delete sessions you saved .

From the main window of the program , open Sessions window by pushing the "sessions" button or by selecting "Open" command of "Sessions" menu item .

It is easy to delete a session you saved . Just select the session you want to delete from the list of saved sessions and then push the "delete session" button . The file will be phisically removed and will be deleted from the list .

If you accidentally deleted ( not with this program ) the file you select , the program will tell you that and will only delete the file from the list .

For impressions and to report any bug contact us at webmaster@euromedia.ro


wordlist generator
NetMole "Wordlist Manipulator" - Wordlist Generator

NetMole Word Generator let you generates dictionaries of words . we introduce the "macro-word" term . an "macro-word" is a sum of characters and words . samples of macrowords : "c+w+c" , "c+c+c+c+c" , "w+c+w" , "w+w" etc.

- legend - [c] means [character] , [w] means [word] , [+] is the separator

- for every [c] and [w] you can set a domain . more than this you can set how many times a [c] or a [w] should repeat in the resulted word .

- you can generate an wordlist only after you confirm the macro .

- you can save the "macro-word" and modify a saved one ; you will note when load a "macro-word" that program use predefined [csX] and [wsX] where X is a number ( e.g "cs01+cs02+w03+c04" ) - you can delete items ( e.g "cs01+cs02+w03+c04" -->  "cs01+w03+c04" or  "cs01+cs02+w03+c04" --> "cs01+cs02" ) and/or you can add item ( e.g "cs01+cs02+w03+c04" --> "cs01+cs02+c+w03+c04+w" )

- program will generate files containing no more than 99999 words based on "macro-words" you set . before generate NetMole will popup a window containing some usefull informations - it will tell you :

how many words it will be generated

how many files it will be created

estimated hard-disk space it need

you can "cancel" action the generate or you can accept program to begin generate .

- after NetMole begins to generate you can stop it anytime you wish or you wait program to finish its job - you will know that it finished his job when you can set again the number of words in a dictionaries .

lets  see an example

1. we set the "c+w+c+c" macro-word

2. we push " confirm macro-word form " button

3. program it displays "c01+w02+c03" ( so where is c04  ? - of course it exists ; we use ">>" and "<<" buttons to scroll )

4. we set the domain for c01 :  1,2,3

5. we set the domain for w02 :  abc,xx

6. we set the domain for c03 :  4,5,6,7  ; also we set for this domain program to "repeat every char" 2 times

7. we set the domain for c04 :  0

RESULT OF GENERATE

program generate 1 file : 180 bytes and containing 24 words

1abc440

1abc550

1abc660

1abc770

1xx440

1xx550

1xx660

1xx770

2abc440

2abc550

2abc660

2abc770

2xx440

2xx550

2xx660

2xx770

3abc440

3abc550

3abc660

3abc770

3xx440

3xx550

3xx660

3xx770

- observe that program make all possible combination between domains ; the number words = | domain of c01 | x | domain of w02 | x | domain of c03 | x | domain of c04 | = 3 x 2 x 4 = 24 ;

- we want to save the word - we push "save" button and save the macro-word in a file with ".wlm" extension

- we push "reset"  to edit a new macroword .

For impressions and to report any bug contact us at webmaster@euromedia.ro