Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- #!/usr/bin/env python
- '''
- By Dr.L0v3 : http://pastebin.com/u/Dr-L0v3
- '''
- import httplib,socket,sys,os
- def action(msg) : print '[#] - ' + msg
- def alert(msg) : print '[+] - ' + msg
- def error(msg) : print '[!] - ' + msg
- def errorExit(msg) : raise SystemExit('[!] - ' + msg)
- scaned_counter=0
- found_counter=0
- dirs = ['phpmyadmin/','webdav/','admin/','administrator/','admin1/','admin2/','admin3/','admin4/','admin5/','usuarios/','usuario/','administrator/','moderator/','webadmin/','adminarea/','bb-admin/','adminLogin/','admin_area/','panel-administracion/','instadmin/','memberadmin/','administratorlogin/','adm/']
- files = ['admin/account','admin/index','admin/login','admin/admin','admin/account','admin_area/admin','admin_area/login','siteadmin/login','siteadmin/index','siteadmin/login','admin/account','admin/index','admin/login','admin/admin','admin_area/index','bb-admin/index','bb-admin/login','bb-admin/admin','admin/home','admin_area/login','admin_area/index','admin/controlpanel','admin','admincp/index','admincp/login','admincp/index','admin/account','adminpanel','webadmin','webadmin/index','webadmin/admin','webadmin/login','admin/admin_login','admin_login','panel-administracion/login','admin/cp','cp','administrator/index','administrator/login','nsw/admin/login','webadmin/login','admin/admin_login','admin_login','administrator/account','administrator','admin_area/admin','pages/admin/admin-login','admin/admin-login','admin-login','bb-admin/index','bb-admin/login','acceso','bb-admin/admin','admin/home','login','modelsearch/login','moderator','moderator/login','moderator/admin','account','pages/admin/admin-login','admin/admin-login','admin-login','controlpanel','admincontrol','admin/adminLogin','adminLogin','admin/adminLogin','home','rcjakar/admin/login','adminarea/index','adminarea/admin','webadmin','webadmin/index','webadmin/admin','admin/controlpanel','admin','admin/cp','cp','adminpanel','moderator','administrator/index','administrator/login','user','administrator/account','administrator','login','modelsearch/login','moderator/login','adminarea/login','panel-administracion/index','panel-administracion/admin','modelsearch/index','modelsearch/admin','admincontrol/login','adm/index','adm','moderator/admin','user','account','controlpanel','admincontrol','panel-administracion/login','wp-login','adminLogin','admin/adminLogin','home','admin','adminarea/index','adminarea/admin','adminarea/login','panel-administracion/index','panel-administracion/admin','modelsearch/index','modelsearch/admin','admincontrol/login','adm/admloginuser','admloginuser','admin2','admin2/login','admin2/index','usuarios/login','adm/index','adm','affiliate','adm_auth','memberadmin','administratorlogin']
- scripts = ['.htm','.html','.php','.asp','.jsp','.cgi','.brf','.cfm']
- if os.name == 'nt' : os.system('title ProFinder (admin path finder) by Dr.L0v3 && cls && color 0e')
- else : os.system('clear')
- print'''
- ___ _____ __
- / _ \_______ / __(_)__ ___/ /__ ____
- / ___/ __/ _ \/ _// / _ \/ _ / -_) __/
- /_/ /_/ \___/_/ /_/_//_/\_,_/\__/_/
- ---------------Dr.L0v3----------------
- '''
- try:
- try:
- target = raw_input('Enter target : ')
- target = target.replace('http://','')
- target = target.replace('https://','')
- action('checking '+target+' if online')
- conn = httplib.HTTPConnection(target)
- conn.connect()
- alert(target + ' is online\n\n')
- except (httplib.HTTPResponse, socket.error) as Exit:
- error('error occured '+target+' my be offline !!!')
- raw_input('')
- exit()
- action('STAGE1 scanning '+target+ ' using directory indexing method\n\n')
- for dir in dirs:
- dir = dir.replace('\n','')
- dir = '/' + dir
- host = target + dir
- connection = httplib.HTTPConnection(target)
- connection.request('GET',dir)
- response = connection.getresponse()
- print '[+] - checking %s ==> %s ... %s' % (target,response.status,dir)
- scaned_counter = scaned_counter + 1
- if response.status == 200:
- if os.name == 'nt' : os.system('color 0a')
- found_counter = found_counter + 1
- alert(host + ' admin path found [OK]\n\n')
- raw_input('Press enter to continue scanning\n\n')
- if os.name == 'nt' : os.system('color 0e')
- elif response.status == 404:
- scaned_counter = scaned_counter
- found_counter = found_counter
- elif response.status == 302:
- alert(host+' possible admin path (302 redirect) ')
- else:
- print 'interesting response ... %S' % (response.status)
- if os.name == 'nt' : os.system('color c')
- action('\n\nSTAGE2 scanning '+target+ ' using script language\n\n')
- for script in scripts:
- for file in files:
- file = file.replace('\n','')
- file = '/' + file
- file = file + script
- host = target + file
- connection = httplib.HTTPConnection(target)
- connection.request('GET',file)
- response = connection.getresponse()
- print '[+] - checking %s ==> %s ... %s' % (target,response.status,file)
- scaned_counter = scaned_counter + 1
- if response.status == 200:
- if os.name == 'nt' : os.system('color 0a')
- found_counter = found_counter + 1
- alert(host + ' admin path found [OK]\n\n')
- raw_input('Press enter to continue scanning\n\n')
- if os.name == 'nt' : os.system('color 0e')
- elif response.status == 404:
- scaned_counter = scaned_counter
- found_counter = found_counter
- elif response.status == 302:
- alert(host+' possible admin path (302 redirect) ')
- else:
- print 'Interesting response ... %S' % (response.status)
- alert('Scan Completed\n')
- print found_counter, " Admin pages found"
- print scaned_counter, " pages scanned"
- raw_input("The Party is Over; Press Enter to Exit")
- except (httplib.HTTPResponse, socket.error):
- print "\n\t[!] Session Cancelled; Error occured. Check internet settings"
- except (KeyboardInterrupt, SystemExit):
- print "\n\t[!] Session cancelled"
- print found_counter, " Admin pages found"
- print scaned_counter, " pages scanned"
Advertisement