[PHP & Ajax]PleskScan v0.1

Hello everyone,

Well it’s been a while since my last post, well yeah that’s what I almost say always xD.

My today’s post has a short story, and I’ll try to rush through it to not overwhelm you with emotions, and stuff yeah I have emotions 😀 see that’s an emotion. Enough with joking, well 2 days ago Kingcope an Exploit developer/research/legend has published an 0day exploit for plesk panel’s yay! so I had an idea, damn wouldn’t it be cool, to have a scanner which goes through a given list of host’s and checks them for Plesk Panel’s, rather then trying them one by one.

It’s always cooler to automate processes like that, so (Yeah I know I can use Google dorks) I wrote a little PHP script that does exactly that, based on patterns it goes through you’re given hosts if an host matches a pattern It’s probably hosting a plesk panel.

All this runs in the background of as I use ajax to show real time data.

Tada! we got a beautiful tiny scanner.

The scanner looks something like this:

pleskdoesn’t it just look cute :3

The usage is pretty simple, you have to enter some hosts to scan divided by a comma the next step would be you to hit check pages and there you go.. brum brum

Please don’t scan any sites that you’re not allowed too, before going through a scanning process ask the administrators for permit to perform a scan, enough said the script can be found here GITHUB and please don’t use this EXPLOIT to do evil.


As i wrote this script king in a rush, it may contain bugs, but as always I welcome any king of suggestion and feedback.


p.s. before using the script you have to do go into you’re php directory and open the file php.ini and uncomment line extension=php_openssl.dll this is required because we have to perform some HTTPS requests.


[Chrome Packaged App] Mirror Mirror (WebRTC Experiment)

Hello everyone,

Tonight I was trying to finish one of my extensions Mirror Mirror, which does nothing more then just show you, yourself xD really useless extension xD.

Well I was enthusiastic because of the new WebRTC  API and that was the whole reason why I started the extension, but today I found out that chrome extensions still don’t support WebRTC!!!!!! (Men don’t cry).

But then I’ve heard that packaged apps support the WebRTC  API so I thought why not do an packaged app instead? hmmm…. and yeah I did it!.


Okay, the baby is cool…. so here’s the app, if you ever have to run out for a date xD or whatever else and need to check fast how you look, use it. In case you don’t have real mirror emmmm.

Link to packaged app: https://chrome.google.com/webstore/detail/mirror-mirror/fejppkniooabkfljalenaojjjhaadhbi?hl=en-US

And as usual a screenshot:


If anyone, likes the app and has ideas or some feedback feel free to comment.

P.s. If the app doesn’t function you either have no webcam or your browser doesn’t support it yet.

Password complexity rating by Google

Hello everyone,

Well here’s another fast post for tonight, I was just resetting a password to one of my gmail accounts, and while doing that I’ve noticed a few AJAX requests that were been made by gmail while i was typing the new password.

Hmmmm I thought, let’s take a look at the requests that are being send (“The Prodigy – Voodoo” playing in the background I get the feeling….), and voila I found out how Google rates it’s password complexity.

It does a post request to this URL:


which returns then a integer value between 1 and 4, so why not use Google to rate the password complexity? when your to lazy to do it yourself.

Almost forgot here’s also the function used by Google to show you how strong your password is by showing you a message and a progress bar indication.

function updatePasswordBar(rating) {
var ratingClasses = new Array(6);
ratingClasses[0] = ‘short’;
ratingClasses[1] = ‘weak’;
ratingClasses[2] = ‘fair’;
ratingClasses[3] = ‘good’;
ratingClasses[4] = ‘strong’;
ratingClasses[5] = ‘notRated’;

var bar = document.getElementById(‘strength-bar’);
if (bar) {
var message = document.getElementById(‘passwdRating’);
var barLength = document.getElementById(‘passwdBar’).clientWidth;
bar.className = ratingClasses[rating];
if (rating >= 0 && rating <= 4) {
bar.style.width  = (barLength * (parseInt(rating) + 1.0) / 5.0) + ‘px’;
message.innerHTML = ratingMessages[rating];
} else {
bar.style.width = 0;
rating = 5;

I’m not telling you to use Google’s service to rate password complexity, I’m just showing you where Google does it.

So I’m not responsible if the FBI runs into your home one day, and you’ll end up in a cold cell, where you get tortured each day for using Google’s stuff MUHAHHAHAHAHHAHAH!

crazy laugh


And also are some screenshot’s  of the AJAX Requests because I looks so much geekier (^.^)

Google 1

Google 2

[Android] WebView unable to write into input fields

Hello everyone,

Today I have a quick post with a solution to a problem i recently had ( a dumb one )…

I was working on an Android application in which I had to display a WebView which loaded a page, everything looked nice and it was free to go!…but then wait!

I was unable to type into input fields, and the horror started (Ahhhhhh!). I’ve went through searching and reading so many articles on similar problems, I even went through the Android documentation searching wherever I’m forgetting to set a property in the WebView.

But nahh no solution worked (At least I learned a bunch of stuff while reading and trying 😉 ), so I went into hardcore debugging mode NA NA NA NA!, I went through checking every single JS file and every CSS file on the page if there might be something wrong…. and BAM! there it was…. As I didn’t like the border when selecting text on the page I had previously used a CSS property to disable user selection….  ( ̄□ ̄;)


-webkit-touch-callout: none;
-webkit-user-select: none;
-khtml-user-select: none;
-moz-user-select: none;
-ms-user-select: none;
user-select: none;

This little property caused me a headache…, believe it or not. After finding the solution a good friend of mine gave me the idea to post this into my blog, in case somebody else might have the same problem, and this could be the solution to it.

So here you go, If someone find this one useful, please let me know so we can laugh together on how funny the solution was.  (⌒▽⌒)

[Chrome Extension] Facebook uStalk

Hello everyone, it’s been a while :D.

So today I was playing around with the Facebook API which showed me a lot of information regarding myself. Information like indexes, names and images so muchhhhh information Facebook just loves you. Well I wont go into much details tonight, as I’m a little tired. But I will tell you this while playing around with the API, I wrote an extension which provides a list of all your friends, which you really really like (stalk). This little extension will present a list with your friends and an index displayed. Based on the number of how often you visit a friend (Past and Present) that index is calculated, don’t ask me how I still don’t know.  In the extension itself is a information note which shows you how to use the extension.

As always I welcome and kind of suggestion and bug reports.

Cheers and good night!


Chrome Extension:

P.s. Tomorrow I will fine tune the index I will try to make some calculations to it, I also might sort the output so there’s no miss understanding.

[Chrome Extension] HTTP Status Codes

Well, hello everyone it’s been a while.

I hope everyone of you had a great slide into the new year, so the first post for 2013 will be about a new extension I’ve wrote for Chrome. It’s called HTTP Status Codes, and it’s purpose is to provide you with information regarding HTTP status codes.

Yeah that’s all nothing more xD, why I wrote the extension? well I’ve caught myself visiting Google a lot to read about various HTTP status codes time to time, as I like to make things faster and easier for myself. I’ve took some time to code this extension, to fast access information about these so lovely status codes we use everyday. The extension also has filtering functionality to fast find your needed status code, it it also the first extension in which I used AngularJS it’s kick ass!

I will try to use this great JavaScript library a lot in my projects this year so expect the unexpected! as always I will make a blog post about things I think are interesting to anyone of you. So back to the extension as usual here’s a screenshot showing the usuage of the extension

http status codes

And here’s the extension HERE

Also for those of you who’d like to build something similar, I have prepared a JSON Object with various kind of information regarding http status codes, because I’m the nice guy and I love to share (“Don’t ask me for money I’m a programmer”) the JSON data can be found on this link here PasteBIN ready to be used.

As usual I welcome any kind of suggestions or feedback.

Wardriving (Bus Version)

A while ago I was coming to our capital city from my home home town 83km  away, on that way I thought why not monitor all wireless devices, because I’d always wanted to know how (in)secure the wireless devices over here were, and as I watched the AP number increasing while drinking a half warm coke.

I saw that in general people thought that an simple WEP protection is enough for them to feel secure xD, even thought WEP is known to be a buggy and weak security algorithm, people use it a lot here and everywhere else.

From 805 wireless devices I’ve been able to capture during the drive, were 363 with no security at all! from the remaining 442 where only 37% with an WPA/WPA2 protection, all the rest relied on an easy to break WEP protection.

Here bellow you’ll see a thew screens I made in the middle of the road while monitoring.



If someone has done any similar scans in his city, I’d love to know the number of (in)secure wireless connections :).