PhpMyadmin Scanner - shor7cut

CODE BY shor7cut - Kiddies selalu merubah :v
Thank's : IndoXploit Coders Team & Bug7sec

//

Isi dalam list mengunakan pembatas | , jika ingin merubahnya silahkan
jadi isi dalam list misal :

127.0.0.1|127.0.0.1|127.0.0.1|127.0.0.1|127.0.0.1|127.0.0.1|127.0.0.1|127.0.0.1
save : ikisme.txt

buka CMD ->
cd /xampp/php
php {nama file} {file list target} {output(HTML)}
//

<?php
error_reporting(0);
if(!isset($argv[2])){
    echo "[+] Format : php namefile.php {file list} {output.html}\r\n";
    echo "[+] Contoh : php namafile.php target.txt sukses.html";
}else if(!file_exists($argv[1])){
  die('File Tidak ditemukan');
}else {

$buka_file = fopen($argv[1], "r");
$baca_file = fgets($buka_file);
$target = explode("|", $baca_file);
$no=1;
$success=0;
$fail=0;
$names = $argv[2];
$auth=0;
$no_urut=1;
if(file_exists($argv[2])){
    $del = $argv[2];
    unlink($del);
}

echo "<------------{Scan}-------------->\r\n";
echo "-> phpMyadmin Scanner - Shor7cut\r\n";
echo "-> Target Count : ".count($target)."\r\n";
echo "-> Save File : ".$names."\r\n";
echo "<-------------------------------->\r\n\n";
foreach ($target as $sites) {

echo "[$no/".count($target)."]-> $sites | PhpMyadmin : ";
$url = "http://$sites/phpmyadmin/querywindow.php";

// xampp - patch lang.php\\
$xamppcur2 = curl_init("$url");
curl_setopt($xamppcur2, CURLOPT_FAILONERROR, true);
curl_setopt($xamppcur2, CURLOPT_FOLLOWLOCATION, true);
curl_setopt($xamppcur2, CURLOPT_RETURNTRANSFER, true);
curl_setopt($xamppcur2, CURLOPT_CONNECTTIMEOUT ,0);
curl_setopt($xamppcur2, CURLOPT_TIMEOUT, 30);
$result2 = curl_exec($xamppcur2);

$re = "/<input type=\"hidden\" name=\"token\" value=\"(.*)\"/";
if(preg_match($re, $result2, $matches)){
if(preg_match_all("/pma_password/", $result2, $matx)){
echo "ONO -> JALUK LOGIN\r\n\n";
$fp = fopen("mintalogin-".$names, 'a');
fwrite($fp, "$url\r\n");
fclose($fp);
$auth++;
}else {
echo "ONO -> Mantep iki\r\n\n";
$fp = fopen($names, 'a');
fwrite($fp, '['.$no_urut.'] <a href="'.$url.'" target=_blank>'.$url.'</a>'."<br>");
fclose($fp);
$success++;
$no_urut++;


}

}else {
    echo "RA ONO COK\r\n\n";
    $fail++;
}

    flush();
    ob_flush();
    sleep(2);
    $no++;
    }
echo "\r\n------------------------------------------\r\n";
echo "-------------> LAPORAN AKHIR -------------\r\n";
echo "-> Total Target : ".count($target)."\n";
echo "-> Total PhpMyadmin (Auth) : ".$auth."\n";
echo "-> Total PhpMyadmin (Non Auth) : ".$success."\n";
echo "-> Total PhpMyadmin (Fail / Non Vuln) : ".$fail."\n";
echo "\n\n------------------------------------------\n";
}



?>