Bile-suite

The BiLE suite includes a number of PERL scripts that can be used by a Penetration Tester to aid in the enumeration phase of a test.  BiLE itself stands for Bi-directional Link Extraction utilities. The suite of tools essentially can be used in the footprinting process to find both obvious and non-obvious relationships between disparate.  With this information a Pen Tester may then decide to try and access sites with close realtionships to the target as a means of a stepping stone into the target network.

Note: - This process depends on the fact that the linked sites you plan to attack to get thru to your target are actually owned by the target company and are in the scope of the test.

The BiLE suite is available from here.

Installation.

There is one requirement to enable the suite of perl scripts to function correctly and that is httrack, the website copying application which is available from here.

To install httrack:

tar -zxvf httrack-3.40-2.tar.gz

./configure

make make install

To install BiLE:

tar -zxvf BilePublic.gz

tar -zxvf BiLE-suite.gz

Execution:

To identify links between sites we use the BiLE.pl script:

Usage BiLE.pl <site> <outfile>

root@hacker Bile]# perl BiLE.pl www.blackhat.com blackhat

This produces 2 text files blackhat.mine and blackhat.walrus.  The latter file details just the links between the sites in the format target_site:linked_site i.e.

The former details sites that links from:

====> Link from: [abcnews.go.com]

====> Link from: [biz.yahoo.com]

====> Link from: [blackhat.com]

====> Link from: [blogs.technet.com]

====> Link from: [blogs.washingtonpost.com]

====> Link from: [cfp.blackhat.com]

====> Link from: [cnet.com.au]

====> Link from: [taosecurity.blogspot.com]

====> Link from: [technology.guardian.co.uk]

With this information we can then try and determine the weight of the link between sites, utilising BiLE-weigh.pl:

Usage: perl BiLE-weigh.pl domain.com output.file.from.bile.mine

root@hacker Bile]# perl BiLE-weigh.pl www.blackhat.com blackhat.mine

The file blackhat.mine.sorted is then created:

Obviously the higher the number the more of a link between each sites and hence the relationship.

Other tools that come in this suite include:

vet-IPrange.pl

This script performs DNS lookups for a set of DNS names.  The IP addresses obtained are stored and a DNS lookup is performed on a second set of DNS names.  If the IP addresses returned match any from the first query they are written to file.  This tool is very useful for determining the use of virtual hosting and grouping of domains.

Usage:  perl vet-IPrange.pl [input file] [true domain file] [output file] <range>
 

vet-mx.pl

As vet-IPrange, this script queries mx records to interpret if any relationships between domains can be detected.

Usage:  perl vet-mx.pl [input file] [true domain file] [output file]
 

exp-tld.pl

This script takes a given list of domain names and tries to determine if any are valid in other TLD's.

Usage:  perl exp-tld.pl [input file] [output file]