Author Topic: vURL Desktop Edition  (Read 25994 times)

0 Members and 1 Guest are viewing this topic.

February 28, 2008, 11:36:38 pm
Read 25994 times

MysteryFCM

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 1689
  • Personal Text
    Phishing Phanatic
    • I.T. Mate
Meant to post this when I posted about hpObserver but completely forgot about it ....

What is vURL Desktop Edition?

vURL Desktop Edition (vURL DE) is the desktop version of the extremely popular vURL service that we've been running for quite some time now.

This application has been developed solely to provide those that like our service, an alternate method of doing such. This edition also helps to save on my own server costs as it is entirely standalone*, requiring only your own internet connection.

vURL Desktop Edition currently allows you to get and save the source code of any website you fancy with the click of a button, and additionally, see a list of files it currently links to.

As with the online version of the vURL service, this application is and will remain, completely free for both personal and business use.

Current version: 0.2.6 (released a few mins ago)

Changes in this release:

Added: Server IP PTR
Added: Check MDL status (malwaredomainlist.com)

Modified: hpHosts status now shown in main source window aswell

Fixed: Corrected minor issue with Owner info not showing if using MS XML method

Misc: Other minor modifications

System Requirements

Windows 98 or above
64MB Ram
Internet connection
VB6 Runtime files (SP5 recommended)

Additional file's are also required, but should be already present on most systems. If not, these can be found in the Dependancies package on the programs download page.

Download:
http://support.it-mate.co.uk/?mode=Products&act=DL&p=vurldesktopedition

Support:
http://forum.hosts-file.net/viewforum.php?f=32
Regards

Steven Burn
I.T. Mate / hpHosts
it-mate.co.uk / hosts-file.net

March 05, 2008, 12:13:38 am
Reply #1

MysteryFCM

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 1689
  • Personal Text
    Phishing Phanatic
    • I.T. Mate
Version: 0.2.7

Changes:

Fixed: Minor issue when extracting links from meta refresh tag

Misc: Other minor modifications
Regards

Steven Burn
I.T. Mate / hpHosts
it-mate.co.uk / hosts-file.net

March 09, 2008, 06:55:37 pm
Reply #2

MysteryFCM

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 1689
  • Personal Text
    Phishing Phanatic
    • I.T. Mate
Version: 0.2.8

changes:

Added: Save source to file, including list of links

Fixed: IP not detected when dissecting FTP link containing @ symbol (see notes)
Fixed: Double seperator on right click when not selecting link in source window
Fixed: WhoIs info not displayed when dissecting IP instead of hostname

Modified: Updated ReadMe (Release Notes > General Information)

Misc: Other minor modifications

Quote
Notes:

Previously when dissecting FTP links, the IP was not extracted if the link contained the @ symbol, as is now commonly used by phishers.

To see an example of this, please see the two following links. The first is an example e-mail I received for an eBay phishing scam, and the second, the vURL DE results for the FTP link.

http://it-mate.co.uk/temp/213_197_11_180_-_eBay_Phish-Email.txt
http://it-mate.co.uk/temp/213_197_11_180_-_eBay_Phish-vURLDE_Results.txt
Regards

Steven Burn
I.T. Mate / hpHosts
it-mate.co.uk / hosts-file.net

March 13, 2008, 10:33:03 pm
Reply #3

MysteryFCM

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 1689
  • Personal Text
    Phishing Phanatic
    • I.T. Mate
Just a note that the online version of this has been completely re-written, and now has a new home :)

http://vurl.mysteryfcm.co.uk/
Regards

Steven Burn
I.T. Mate / hpHosts
it-mate.co.uk / hosts-file.net

March 25, 2008, 06:56:02 am
Reply #4

MysteryFCM

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 1689
  • Personal Text
    Phishing Phanatic
    • I.T. Mate
Version: 0.2.9

Added: Colour coding based on hpHosts classification (see notes)
Added: hpHosts classification now shown if listed
Added: PhishTank integration
Added: Clear All option to context menu (requested)

Fixed: Minor error with JS escaping when string contains line break or tabs

Misc: Other minor modifications

Quote
Notes:

I've modified the hpHosts query to bring it inline with the new hpHosts query that I wrote for vURL Online. This now also includes a new colour coding, based on classification;

1. Not yet classified = orange
2. ATS or GRM = Yellow
3. All others (EMD, FSA, EXP etc) = red


Download:
http://support.it-mate.co.uk/?mode=Products&act=DL&p=vurldesktopedition
Regards

Steven Burn
I.T. Mate / hpHosts
it-mate.co.uk / hosts-file.net

March 29, 2008, 01:53:16 am
Reply #5

MysteryFCM

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 1689
  • Personal Text
    Phishing Phanatic
    • I.T. Mate
Ooooh, didn't realise this had been stickified ........ cheers guys :)
Regards

Steven Burn
I.T. Mate / hpHosts
it-mate.co.uk / hosts-file.net

July 19, 2008, 12:44:53 pm
Reply #6

Evilcry

  • Special Access
  • Jr. Member

  • Offline
  • *

  • 39
Hello,

I've noticed some problem with the last version of vURL, when I launch a dissection
vURL sais that there is "no internet connection", but that obviously is not true :)

I'm connected to a router with a lan cable

Regards,
Evilcry
Deep Root Never Freezes - Tolkien

July 19, 2008, 01:17:59 pm
Reply #7

MysteryFCM

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 1689
  • Personal Text
    Phishing Phanatic
    • I.T. Mate
Regards

Steven Burn
I.T. Mate / hpHosts
it-mate.co.uk / hosts-file.net

July 19, 2008, 02:44:14 pm
Reply #8

Evilcry

  • Special Access
  • Jr. Member

  • Offline
  • *

  • 39
Its vURL Desktop Edition v0.2.9  :)

Deep Root Never Freezes - Tolkien

July 19, 2008, 02:51:52 pm
Reply #9

MysteryFCM

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 1689
  • Personal Text
    Phishing Phanatic
    • I.T. Mate
hehe can you try 0.3.0 and lemme know if the problem persists? (they've worked fine on my home network, along with a couple others, so am rather baffled as to why it's failed on yours).
Regards

Steven Burn
I.T. Mate / hpHosts
it-mate.co.uk / hosts-file.net

July 19, 2008, 04:48:06 pm
Reply #10

Evilcry

  • Special Access
  • Jr. Member

  • Offline
  • *

  • 39
Hello,

Also 0.3.0 fails, but I think I've understood why that happens :)

in this computer I use a Lan-> Modem/Router connection but persists also a dial-up connection
builded with Internet Explorer.

Some programs as mirc, skype when are launched opens the Dial-Up Windows,
I think vURL "sees" that exist this connection but is disabled and "thinks" that there is
no connection :)

This evening I'll remove that Dial-Up and if I'm correct, vURL should automatically
switch to the correct eth ;)

I'll write here the results, so if someone have the same problem, knows why..

Regards,
Evilcry
Deep Root Never Freezes - Tolkien

July 19, 2008, 04:54:53 pm
Reply #11

MysteryFCM

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 1689
  • Personal Text
    Phishing Phanatic
    • I.T. Mate
If that does fix it, I'll modify the routine to allow for such :)

Cheers for letting me know :)
Regards

Steven Burn
I.T. Mate / hpHosts
it-mate.co.uk / hosts-file.net

July 20, 2008, 04:58:54 am
Reply #12

Evilcry

  • Special Access
  • Jr. Member

  • Offline
  • *

  • 39
Hello,

My supposition was correct, when I deleted from IE, to be sure that all Registry Key Entries will be
cleared, vURL 0.2.9 and 0.3.0 started correctly and accepts Dissection requests ;)

vURL seems to resolve correctly the URL, indeed I can see the Server IP correctly solved,
but for every URL that I tried it sais that the server failed to return any actual content
but returned an OK (200) status code
and obviously does not lists images or resolves owner
infos.

If I click into the TextBox that contains all informations (Server IP etc) surely happens an Exception because appears a MessageBox with the message Run-Time:error 429 - ActiveX component can't
create object
and vURL is closed.

If you need other infos tell me freely ;)

Regards,
Evilcry



Deep Root Never Freezes - Tolkien

July 20, 2008, 07:09:03 am
Reply #13

MysteryFCM

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 1689
  • Personal Text
    Phishing Phanatic
    • I.T. Mate
The only AX used is MSXML, but this should display a non critical error telling you MSXML is missing;

http://www.microsoft.com/downloads/details.aspx?FamilyID=993c0bcf-3bcf-4009-be21-27e85e1857b1&displaylang=en

Even without this, it should work using the URLDownloadToFile method ... which method is showing in the caption bar?
Regards

Steven Burn
I.T. Mate / hpHosts
it-mate.co.uk / hosts-file.net

July 20, 2008, 01:34:14 pm
Reply #14

Evilcry

  • Special Access
  • Jr. Member

  • Offline
  • *

  • 39
The used method is indeed URLDownloadToFile, I've already installed MSXML,
seems that only in certain cases it crashes now, I'll analyze deeply that thing..

Regards
Deep Root Never Freezes - Tolkien