Triton Basic Set-Up

Today I am going to show you how to use well known exploit scanner Triton. I will show you how to use it for certain "exploit" the ccbill log. First of all you need to download your copy of Triton (http://www.project2025.com/triton.php) or direct link (http://www.project2025.com/Triton.zip). When it is on your HDD just simply unpack it and run Triton.exe. Triton has nice and intuitive interface, on the left you can see sections’ buttons on the right main window.

First of all go to "Connection" tab you can choose there if you want to scan sites using direct connection or via proxy or using proxy list what I recommend! So check the "Proxy List" option and load your proxies (if you do not know anything about proxies or how to check them I recommend to read this tutorial http://blog.hansatan.com/?page_id=26). When proxies are ready simply click right mouse button on the white box and choose "Paste Proxies From Clipboard" or "Load Proxies From File". When proxies are set proceed to the next step. CHECK SCREEN

Now go to "Sites" tab here you need to upload basic url or urls. What I mean by basic url? Well basic url is site address without any additional data so for example if you want to check some "path" against ddgirls.com you need to type http://ddgirls.com do not forget to remove "/" on the end! Url can not look like this http://ddgirls.com/ or http://ddgirls.com/members just http://ddgirls.com. You can also load whole list of basic urls! To enter one url simply click right mouse button on the white box and use "Enter a new site" function or if you want to load whole list "Load new site(s) from file". When urls are set proceed to the next step. CHECK SCREEN

Now go to "Paths" tab check "Manual Selection" now click right mouse button on the white box and choose "Create a new list" type some name whatever you want for example "private_list". Now when new window has opened click on "New path" button in "Path" pool type /ccbill/secure/ccbill.log in "Method" pool choose GET in "Good keys" put " ADD- " (without quotas). Now click on "Save path" button and "Save New List" and check list you want to use. When paths are set proceed to the next step. CHECK SCREEN CHECK SCREEN

Now go to "Progression" tab and push "Start" button all good hits will be highlited on green background. When the scan is done go to "History" tab all hits will be enlisted there. Remember you can put many paths and many urls for the test but in most of cases it is just waste of time, some certain exploits need special settings like other Method or keys etc. For example add-passwd scripts need some extra data but for logs scan these settings are fine and they work.

Back to top