______ __ ______ __ __ __ __ _____ __ __ __
| __ \.-----.--| |______| __ \.---.-.| |--.| |--.|__| |_ ______| \.-----.----.--.--.--------.-----.-----.| |_.---.-.| |_|__|.-----.-----.
| <| -__| _ |______| <| _ || _ || _ || | _|______| -- | _ | __| | | | -__| || _| _ || _| || _ | |
|___|__||_____|_____| |___|__||___._||_____||_____||__|____| |_____/|_____|____|_____|__|__|__|_____|__|__||____|___._||____|__||_____|__|__|
The next few sections will be dedicated to the red rabbit documentation, the sections will be disected by module, eg: (0x0001 is module search) it goes from there
from the list above. Another example of how modules will be seperated is by the cloumn number in the chart above where Brute is the second module name, its section will
be labeled 0x0002 - BRUTE -, please take your time going through the documentation ALOT of people often forget about documentation then come to the devs confused as to
why some dont work, or how the script works and how to use it, so please, when i mean read it i mean READ IT CAREFULLY!
Seciton 0x0006 will be talking about cloud checking utilities, phone number databases
and proton OSINT scripts.
> check cpanel vuln
this command will simply detect the system you are on
attempt to find the cpanel admin path, and then finally
check to see if the current version you have is vulnerable
if it is it will link you to a perl file that you can run
to upgrade and repair your current version of cpanel
> check proton ip
check if an IP address belongs
to the proton mail / proton VPN
database, if the IP is apart of the
database you will get the following
message during runtime
Enter a IP>> 1.1.1.1
---->>> RR6: IP [1.1.1.1], is NOT apart of the proton mail VPN...
> check proton email
like check proton IP this will
simply ask you for an email, pull
the email list then find out and search
to see if it belongs to the proton mail
email service. when you run the tool and
the tool found the email you
will get the following message.
Enter an email>> example_email@protonmail.com
found it!
> check cloudfair ip
this command checks wether or
not an IP address is apart of
a cloud service proxy or IP owned
database
example output
Enter a IP>> 1.1.1.1
RR6> Address Range | 197.234.240.0/22 | Does not match with | 1.1.1.1 | > | 197.234.240.0/22 | Is not a possible cloudflare IP range
RR6> Address Range | 198.41.128.0/17 | Does not match with | 1.1.1.1 | > | 198.41.128.0/17 | Is not a possible cloudflare IP range
RR6> Address Range | 162.158.0.0/15 | Does not match with | 1.1.1.1 | > | 162.158.0.0/15 | Is not a possible cloudflare IP range
RR6> Address Range | 104.16.0.0/12 | Does not match with | 1.1.1.1 | > | 104.16.0.0/12 | Is not a possible cloudflare IP range
RR6> Address Range | 172.64.0.0/13 | Does not match with | 1.1.1.1 | > | 172.64.0.0/13 | Is not a possible cloudflare IP range
RR6> Address Range | 131.0.72.0/22 | Does not match with | 1.1.1.1 | > | 131.0.72.0/22 | Is not a possible cloudflare IP range
RR6> Address Range | 173.245.48.0/20 | Does not match with | 1.1.1.1 | > | 173.245.48.0/20 | Is not a possible cloudflare IP range
RR6> Address Range | 103.21.244.0/22 | Does not match with | 1.1.1.1 | > | 103.21.244.0/22 | Is not a possible cloudflare IP range
RR6> Address Range | 103.22.200.0/22 | Does not match with | 1.1.1.1 | > | 103.22.200.0/22 | Is not a possible cloudflare IP range
RR6> Address Range | 103.31.4.0/22 | Does not match with | 1.1.1.1 | > | 103.31.4.0/22 | Is not a possible cloudflare IP range
RR6> Address Range | 141.101.64.0/18 | Does not match with | 1.1.1.1 | > | 141.101.64.0/18 | Is not a possible cloudflare IP range
RR6> Address Range | 108.162.192.0/18 | Does not match with | 1.1.1.1 | > | 108.162.192.0/18 | Is not a possible cloudflare IP range
RR6> Address Range | 190.93.240.0/20 | Does not match with | 1.1.1.1 | > | 190.93.240.0/20 | Is not a possible cloudflare IP range
RR6> Address Range | 188.114.96.0/20 | Does not match with | 1.1.1.1 | > | 188.114.96.0/20 | Is not a possible cloudflare IP range
the output on this can be annoying to look at but what it is doing is taking all IP4 ranges found in the list
and checking wether or not your entered IP is a match for the IP range or IP in the list, if it is true
one will turn red, if it is not true all of them will be green with messages up top
> check cloudfront ip
this command goes through the cloudfront
global and regional edge IP list and tests
if your IP is a match for one in the list
you will get the following message
example output
(Cloud Check) IP < 1.1.1.1 > is NOT apart of the cloudfront (CLOUDFRONT_GLOBAL_IP_LIST)
(Cloud Check) IP < 1.1.1.1 > is NOT apart of the cloudfront (CLOUDFRONT_REGIONAL_EDGE_IP_LIST)
> check mcafe ip
simple command, this one like all cloud utils
cloud related will check the json database that
is stored in the file, and attempt to match
an IP you entered with the IP addresses in the list
if your IP came back false and did not match no
output will be found, if it did you will get
a simple message saying the IP is apart of the mcafe
list.
> check aws ip
like all cloud checking utilities this one
will take an ip address and check the AWS
IP list and JSON db to see if the IP matched
the database.
Note that if the aws json file is not in the
directory that it needs to search, it will
make a request to grab the json file and return
to the console, you will need to run the command
again to check if your IP matches the AWS IP LIST
> check azure ip
Command will check the IP address to
see if it is apart of the microsoft
azure cloud IP database, if it is
true it will return a simple message
if else then it wont return anything.
> check myip
Command will grab your IP address
no output is needed to be shown
literally all it does is show your
public IP
> check number
the number section is a bit wacky so here i am to explain it
the way this works is the function accepts a number hash value
as a input like +381-##-###-####, and it will attempt to find
and match the hash to a section in the database, then it will
pull the location of that number or base location, this does
not output the direct location it will mostly be a state or country
example output
Phone Value | Phone Mask | +381-##-###-####
Phone Value | Location Name English | Serbia
Phone Value | Location desc English |
Phone Value | Location Country code | RS
Phone Value | Location Russian name | Сербия
Phone Value | Location Russian desc |
Phone Value | Country code to prefix | 381
Phone Value | Country code to currency | RSD
Phone Value | Country Code to Country name | Serbia
Phone Value | Country ISO2 to Country ISO3 | SRB
Phone Value | Country ISO2 to Country ISO3 Capital | Belgrade
> check number be
this is similar to the number section
however unlike the check number or defualt
international entry, this is specified to numbers
that are assigned or collected or ran in the beligum
country or area, this like the previous command takes
a number hash based value like the following (+32(2)###-##-##)
this version of the scanner will grab everything about
the number, the area of the number, and the aproximate
information about the number hash, there is soon to
be way more added to this in the further future
such as time zones, time current, weather, google
maps links, image maps, and more.
example output
Phone Value | Phone Mask | +32(2)###-##-##
Phone Value | Phone Dial Country Code | BE
Phone Value | Phone Dial Country Name | Belgium
Phone Value | Phone Dial Country code to name | Belgium
Phone Value | Phone Dial Country code to currency | EUR
Phone Value | Phone Dial Country code to currency | Brussel/Bruxelles (Brussels)
> check number us
this one like all number commands will
parse through a database of information
specified to the numbers in the US only.
this also operates based on a hash like
input but instead of adding ### as a format
you can just add the first three numbers
of the phone number such as the area / dial
code.
example output
Phone Value | Phone Mask | 320
Phone Value | Phone Dial Country Language | English
Phone Value | Phone Dial Country Curreny | USD
Phone Value | Phone Dial Country Code | US
Phone Value | Phone Dial Country Code Full | United States of America
Phone Value | Phone Dial State Location Short | MN
Phone Value | Phone Dial State of Number | Minnesota
Phone Value | Phone Dial City of Number | most of central Minnesota, excluding the Twin Cities metro
> trace number us
this is unlike most of the phone number
/ phone hash checkers in red rabbit, this
one uses a few phone API's to grab information
on the phone number that may be in use, however
this tool will need the entire number.
note: since this is a bash file
the tool might not capture the
output that you need, or it
may not capture any at all, this
is probobly due to a internal error
in the OS or the script that pops up
or is detected as NIL or an ignored
error by red rabbit.
> check username
check username is quite simple
just input a username and a function
will be run to test if a username
exists or is active on that website
this is status code based, does not
100% mean that this username exists
but just that the page was there
example output
[+] Found username < user123 > IS on website < https://www.instagram.com/user123 > | Stat code < 200 >
[+] Found username < user123 > IS on website < https://www.facebook.com/user123 > | Stat code < 200 >
[+] Found username < user123 > IS on website < https://www.twitter.com/user123 > | Stat code < 200 >