Monday, January 30, 2006

MSNPawn - Featured on HNS

MSNPawn – Footprinting, Profiling and Assessment with MSN Search
by Shreeraj Shah - net square - Monday, 30 January 2006.

Any search engine database is a very powerful source of information for web applications. We are interested in the searching interface and criteria
these engines provide. Now, if we could combine these search options with our intelligently crafted queries against a database, we would be able to fetch a lot of critical information.

SEARCH.MSN provides web services APIs to build applications using their search interface. For the examples outlined in this paper, some of the information is retrieved using this interface, with a sample application called MSNPawn.

MSNPawn - Releasing 1.1

31 st Jan 2006
Beta 1.1 Released

+ IP filtering is added for cross domain. This will compare all cross domains with specific IP range.
+ Bugs resolved


Tuesday, January 10, 2006

MSNPawn 1.0 (Beta) release

MSNPawn has been designed and developed on the .Net framework and must be installed on the system. The following utilities have been bundled with MSNPawn.

MSNHostFP - Supply an IP Address or IP Address range to fetch all possible virtual hosts or application running on each IP addresses.

MSNDomainFP - Supply a domain name to fetch the top 50 child domains, considering the supplied domain name as parent.

MSNCrossDomainFP - Supply an application domain to fetch the top 50 domains pointing to this particular domain on the Internet.

MSNCrawler - Supply a domain or application name to fetch all possible links crawled by the search engine.

MSNFetch - Supply a domain and rules file. The tool will run each rule in the file against the domain specified and fetch the first five results of the resultant query. This can help in assessing an application.

Search.MSN - Provides place to run your search against MSN and gather all URLs.

Whitepaper is included for better understanding for all these tools.


[Download paper]