Dr-L0v3

ProFinder (admin path finder)

Jul 23rd, 2015
557
0
Never
10
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
Python 6.29 KB | None | 0 0
  1. #!/usr/bin/env python
  2. '''
  3.  
  4. By Dr.L0v3 : http://pastebin.com/u/Dr-L0v3
  5.  
  6. '''
  7. import httplib,socket,sys,os
  8. def action(msg)    : print '[#] - ' + msg
  9. def alert(msg)     : print '[+] - ' + msg
  10. def error(msg)     : print '[!] - ' + msg
  11. def errorExit(msg) : raise SystemExit('[!] - ' + msg)
  12. scaned_counter=0
  13. found_counter=0
  14. dirs = ['phpmyadmin/','webdav/','admin/','administrator/','admin1/','admin2/','admin3/','admin4/','admin5/','usuarios/','usuario/','administrator/','moderator/','webadmin/','adminarea/','bb-admin/','adminLogin/','admin_area/','panel-administracion/','instadmin/','memberadmin/','administratorlogin/','adm/']
  15. files = ['admin/account','admin/index','admin/login','admin/admin','admin/account','admin_area/admin','admin_area/login','siteadmin/login','siteadmin/index','siteadmin/login','admin/account','admin/index','admin/login','admin/admin','admin_area/index','bb-admin/index','bb-admin/login','bb-admin/admin','admin/home','admin_area/login','admin_area/index','admin/controlpanel','admin','admincp/index','admincp/login','admincp/index','admin/account','adminpanel','webadmin','webadmin/index','webadmin/admin','webadmin/login','admin/admin_login','admin_login','panel-administracion/login','admin/cp','cp','administrator/index','administrator/login','nsw/admin/login','webadmin/login','admin/admin_login','admin_login','administrator/account','administrator','admin_area/admin','pages/admin/admin-login','admin/admin-login','admin-login','bb-admin/index','bb-admin/login','acceso','bb-admin/admin','admin/home','login','modelsearch/login','moderator','moderator/login','moderator/admin','account','pages/admin/admin-login','admin/admin-login','admin-login','controlpanel','admincontrol','admin/adminLogin','adminLogin','admin/adminLogin','home','rcjakar/admin/login','adminarea/index','adminarea/admin','webadmin','webadmin/index','webadmin/admin','admin/controlpanel','admin','admin/cp','cp','adminpanel','moderator','administrator/index','administrator/login','user','administrator/account','administrator','login','modelsearch/login','moderator/login','adminarea/login','panel-administracion/index','panel-administracion/admin','modelsearch/index','modelsearch/admin','admincontrol/login','adm/index','adm','moderator/admin','user','account','controlpanel','admincontrol','panel-administracion/login','wp-login','adminLogin','admin/adminLogin','home','admin','adminarea/index','adminarea/admin','adminarea/login','panel-administracion/index','panel-administracion/admin','modelsearch/index','modelsearch/admin','admincontrol/login','adm/admloginuser','admloginuser','admin2','admin2/login','admin2/index','usuarios/login','adm/index','adm','affiliate','adm_auth','memberadmin','administratorlogin']
  16. scripts = ['.htm','.html','.php','.asp','.jsp','.cgi','.brf','.cfm']
  17. if os.name == 'nt' : os.system('title ProFinder (admin path finder) by Dr.L0v3 && cls && color 0e')
  18. else : os.system('clear')
  19. print'''
  20.   ___           _____         __      
  21.  / _ \_______  / __(_)__  ___/ /__ ____
  22. / ___/ __/ _ \/ _// / _ \/ _  / -_) __/
  23. /_/  /_/  \___/_/ /_/_//_/\_,_/\__/_/    
  24.  ---------------Dr.L0v3----------------
  25. '''
  26. try:
  27.  
  28.     try:
  29.         target = raw_input('Enter target : ')
  30.         target = target.replace('http://','')
  31.         target = target.replace('https://','')
  32.         action('checking '+target+' if online')
  33.         conn = httplib.HTTPConnection(target)
  34.         conn.connect()
  35.         alert(target + ' is online\n\n')
  36.     except (httplib.HTTPResponse, socket.error) as Exit:
  37.         error('error occured '+target+' my be offline !!!')
  38.         raw_input('')
  39.         exit()
  40.  
  41.        
  42.     action('STAGE1 scanning '+target+ ' using directory indexing method\n\n')
  43.     for dir in dirs:
  44.         dir = dir.replace('\n','')
  45.         dir = '/' + dir
  46.         host = target + dir
  47.         connection = httplib.HTTPConnection(target)
  48.         connection.request('GET',dir)
  49.         response = connection.getresponse()
  50.         print '[+] - checking %s ==> %s ... %s' % (target,response.status,dir)
  51.         scaned_counter = scaned_counter + 1
  52.         if response.status == 200:
  53.             if os.name == 'nt' : os.system('color 0a')
  54.             found_counter = found_counter + 1
  55.             alert(host + ' admin path found     [OK]\n\n')
  56.             raw_input('Press enter to continue scanning\n\n')
  57.             if os.name == 'nt' : os.system('color 0e')
  58.         elif response.status == 404:
  59.             scaned_counter = scaned_counter
  60.             found_counter = found_counter
  61.         elif response.status == 302:
  62.             alert(host+' possible admin path (302 redirect) ')
  63.         else:
  64.             print 'interesting response ... %S' % (response.status)
  65.     if os.name == 'nt' : os.system('color c')
  66.    
  67.    
  68.     action('\n\nSTAGE2 scanning '+target+ ' using script language\n\n')
  69.     for script in scripts:
  70.         for file in files:
  71.             file = file.replace('\n','')
  72.             file = '/' + file
  73.             file = file + script
  74.             host = target + file
  75.             connection = httplib.HTTPConnection(target)
  76.             connection.request('GET',file)
  77.             response = connection.getresponse()
  78.             print '[+] - checking %s ==> %s ... %s' % (target,response.status,file)
  79.             scaned_counter = scaned_counter + 1
  80.         if response.status == 200:
  81.             if os.name == 'nt' : os.system('color 0a')
  82.             found_counter = found_counter + 1
  83.             alert(host + ' admin path found     [OK]\n\n')
  84.             raw_input('Press enter to continue scanning\n\n')
  85.             if os.name == 'nt' : os.system('color 0e')
  86.         elif response.status == 404:
  87.             scaned_counter = scaned_counter
  88.             found_counter = found_counter
  89.         elif response.status == 302:
  90.             alert(host+' possible admin path (302 redirect) ')
  91.         else:
  92.             print 'Interesting response ... %S' % (response.status)
  93.     alert('Scan Completed\n')
  94.     print found_counter, " Admin pages found"
  95.     print scaned_counter, " pages scanned"
  96.     raw_input("The Party is Over; Press Enter to Exit")
  97.    
  98. except (httplib.HTTPResponse, socket.error):
  99.     print "\n\t[!] Session Cancelled; Error occured. Check internet settings"
  100. except (KeyboardInterrupt, SystemExit):
  101.     print "\n\t[!] Session cancelled"
  102.     print found_counter, " Admin pages found"
  103.     print scaned_counter, " pages scanned"
Advertisement
Comments
  • User was banned
  • User was banned
  • User was banned
  • User was banned
  • User was banned
  • User was banned
  • User was banned
  • User was banned
  • User was banned
  • User was banned
Add Comment
Please, Sign In to add comment