API tools faq
paste
Advertisement
Z3R089

Python_Admin

Z3R089
Jan 6th, 2014
147
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
Python 14.61 KB | None | 0 0
raw download clone embed print report
  1. #!/usr/bin/python
  2.  
  3. # This was written for educational purpose only. Use it at your own risk.
  4.  
  5. # Author will be not responsible for any damage!
  6.  
  7. #
  8.  
  9.  
  10.  
  11.  
  12.  
  13. import httplib
  14.  
  15. import socket
  16.  
  17. import sys
  18.  
  19.  
  20.  
  21.  
  22.  
  23. try:
  24.  
  25.     print "\t################################################################"
  26.  
  27.     print "\t#                  ADMIN FINDER TOOL  v1.0                     #"
  28.  
  29.     print "\t#                                                              #"
  30.  
  31.     print "\t#                                                              #"
  32.  
  33.     print "\t#                                                              #"
  34.  
  35.     print "\t#           Cod3 by TerryBits (c) MexicanHacker2013            #"
  36.  
  37.     print "\t################################################################"
  38.  
  39.     var1=0
  40.  
  41.     var2=0
  42.  
  43.  
  44.  
  45.     php = ['admin/','administrator/','admin1/','admin2/','admin3/','admin4/','admin5/','usuarios/','usuario/','administrator/','moderator/','webadmin/','adminarea/','bb-admin/','adminLogin/','admin_area/','panel-administracion/','instadmin/',
  46.  
  47. 'memberadmin/','administratorlogin/','adm/','admin/account.php','admin/index.php','admin/login.php','admin/admin.php','admin/account.php',
  48.  
  49. 'admin_area/admin.php','admin_area/login.php','siteadmin/login.php','siteadmin/index.php','siteadmin/login.html','admin/account.html','admin/index.html','admin/login.html','admin/admin.html',
  50.  
  51. 'admin_area/index.php','bb-admin/index.php','bb-admin/login.php','bb-admin/admin.php','admin/home.php','admin_area/login.html','admin_area/index.html',
  52.  
  53. 'admin/controlpanel.php','admin.php','admincp/index.asp','admincp/login.asp','admincp/index.html','admin/account.html','adminpanel.html','webadmin.html',
  54.  
  55. 'webadmin/index.html','webadmin/admin.html','webadmin/login.html','admin/admin_login.html','admin_login.html','panel-administracion/login.html',
  56.  
  57. 'admin/cp.php','cp.php','administrator/index.php','administrator/login.php','nsw/admin/login.php','webadmin/login.php','admin/admin_login.php','admin_login.php',
  58.  
  59. 'administrator/account.php','administrator.php','admin_area/admin.html','pages/admin/admin-login.php','admin/admin-login.php','admin-login.php',
  60.  
  61. 'bb-admin/index.html','bb-admin/login.html','acceso.php','bb-admin/admin.html','admin/home.html','login.php','modelsearch/login.php','moderator.php','moderator/login.php',
  62.  
  63. 'moderator/admin.php','account.php','pages/admin/admin-login.html','admin/admin-login.html','admin-login.html','controlpanel.php','admincontrol.php',
  64.  
  65. 'admin/adminLogin.html','adminLogin.html','admin/adminLogin.html','home.html','rcjakar/admin/login.php','adminarea/index.html','adminarea/admin.html',
  66.  
  67. 'webadmin.php','webadmin/index.php','webadmin/admin.php','admin/controlpanel.html','admin.html','admin/cp.html','cp.html','adminpanel.php','moderator.html',
  68.  
  69. 'administrator/index.html','administrator/login.html','user.html','administrator/account.html','administrator.html','login.html','modelsearch/login.html',
  70.  
  71. 'moderator/login.html','adminarea/login.html','panel-administracion/index.html','panel-administracion/admin.html','modelsearch/index.html','modelsearch/admin.html',
  72.  
  73. 'admincontrol/login.html','adm/index.html','adm.html','moderator/admin.html','user.php','account.html','controlpanel.html','admincontrol.html',
  74.  
  75. 'panel-administracion/login.php','wp-login.php','adminLogin.php','admin/adminLogin.php','home.php','admin.php','adminarea/index.php',
  76.  
  77. 'adminarea/admin.php','adminarea/login.php','panel-administracion/index.php','panel-administracion/admin.php','modelsearch/index.php',
  78.  
  79. 'modelsearch/admin.php','admincontrol/login.php','adm/admloginuser.php','admloginuser.php','admin2.php','admin2/login.php','admin2/index.php','usuarios/login.php',
  80.  
  81. 'adm/index.php','adm.php','affiliate.php','adm_auth.php','memberadmin.php','administratorlogin.php']
  82.  
  83.  
  84.  
  85.     asp = ['admin/','administrator/','admin1/','admin2/','admin3/','admin4/','admin5/','moderator/','webadmin/','adminarea/','bb-admin/','adminLogin/','admin_area/','panel-administracion/','instadmin/',
  86.  
  87. 'memberadmin/','administratorlogin/','adm/','account.asp','admin/account.asp','admin/index.asp','admin/login.asp','admin/admin.asp',
  88.  
  89. 'admin_area/admin.asp','admin_area/login.asp','admin/account.html','admin/index.html','admin/login.html','admin/admin.html',
  90.  
  91. 'admin_area/admin.html','admin_area/login.html','admin_area/index.html','admin_area/index.asp','bb-admin/index.asp','bb-admin/login.asp','bb-admin/admin.asp',
  92.  
  93. 'bb-admin/index.html','bb-admin/login.html','bb-admin/admin.html','admin/home.html','admin/controlpanel.html','admin.html','admin/cp.html','cp.html',
  94.  
  95. 'administrator/index.html','administrator/login.html','administrator/account.html','administrator.html','login.html','modelsearch/login.html','moderator.html',
  96.  
  97. 'moderator/login.html','moderator/admin.html','account.html','controlpanel.html','admincontrol.html','admin_login.html','panel-administracion/login.html',
  98.  
  99. 'admin/home.asp','admin/controlpanel.asp','admin.asp','pages/admin/admin-login.asp','admin/admin-login.asp','admin-login.asp','admin/cp.asp','cp.asp',
  100.  
  101. 'administrator/account.asp','administrator.asp','acceso.asp','login.asp','modelsearch/login.asp','moderator.asp','moderator/login.asp','administrator/login.asp',
  102.  
  103. 'moderator/admin.asp','controlpanel.asp','admin/account.html','adminpanel.html','webadmin.html','pages/admin/admin-login.html','admin/admin-login.html',
  104.  
  105. 'webadmin/index.html','webadmin/admin.html','webadmin/login.html','user.asp','user.html','admincp/index.asp','admincp/login.asp','admincp/index.html',
  106.  
  107. 'admin/adminLogin.html','adminLogin.html','admin/adminLogin.html','home.html','adminarea/index.html','adminarea/admin.html','adminarea/login.html',
  108.  
  109. 'panel-administracion/index.html','panel-administracion/admin.html','modelsearch/index.html','modelsearch/admin.html','admin/admin_login.html',
  110.  
  111. 'admincontrol/login.html','adm/index.html','adm.html','admincontrol.asp','admin/account.asp','adminpanel.asp','webadmin.asp','webadmin/index.asp',
  112.  
  113. 'webadmin/admin.asp','webadmin/login.asp','admin/admin_login.asp','admin_login.asp','panel-administracion/login.asp','adminLogin.asp',
  114.  
  115. 'admin/adminLogin.asp','home.asp','admin.asp','adminarea/index.asp','adminarea/admin.asp','adminarea/login.asp','admin-login.html',
  116.  
  117. 'panel-administracion/index.asp','panel-administracion/admin.asp','modelsearch/index.asp','modelsearch/admin.asp','administrator/index.asp',
  118.  
  119. 'admincontrol/login.asp','adm/admloginuser.asp','admloginuser.asp','admin2.asp','admin2/login.asp','admin2/index.asp','adm/index.asp',
  120.  
  121. 'adm.asp','affiliate.asp','adm_auth.asp','memberadmin.asp','administratorlogin.asp','siteadmin/login.asp','siteadmin/index.asp','siteadmin/login.html']
  122.  
  123.  
  124.  
  125.    
  126.  
  127.     try:
  128.  
  129.         site = raw_input("Web Site for Scan?: ")
  130.  
  131.         site = site.replace("http://","")
  132.  
  133.         print ("\tChecking website " + site + "...")
  134.  
  135.         conn = httplib.HTTPConnection(site)
  136.  
  137.         conn.connect()
  138.  
  139.         print "\t[$] Yes... Server is Online."
  140.  
  141.     except (httplib.HTTPResponse, socket.error) as Exit:
  142.  
  143.         raw_input("\t [!] Oops Error occured, Server offline or invalid URL")
  144.  
  145.         exit()
  146.  
  147.     print "Enter site source code:"
  148.  
  149.     print "1 PHP"
  150.  
  151.     print "2 ASP"
  152.  
  153.     print "\nPress 1 and 'Enter key' for Select PHP\n"
  154.  
  155.     code=input("> ")
  156.  
  157.        
  158.  
  159.     if code==1:
  160.  
  161.         print("\t [+] Scanning " + site + "...\n\n")
  162.  
  163.         for admin in php:
  164.  
  165.             admin = admin.replace("\n","")
  166.  
  167.             admin = "/" + admin
  168.  
  169.             host = site + admin
  170.  
  171.             print ("\t [#] Checking " + host + "...")
  172.  
  173.             connection = httplib.HTTPConnection(site)
  174.  
  175.             connection.request("GET",admin)
  176.  
  177.             response = connection.getresponse()
  178.  
  179.             var2 = var2 + 1
  180.  
  181.             if response.status == 200:
  182.  
  183.                 var1 = var1 + 1
  184.  
  185.                 print "%s %s" % ( "\n\n>>>" + host, "Admin page found!")
  186.  
  187.                 raw_input("Press enter to continue scanning.\n")
  188.  
  189.             elif response.status == 404:
  190.  
  191.                 var2 = var2
  192.  
  193.             elif response.status == 302:
  194.  
  195.                 print "%s %s" % ("\n>>>" + host, "Possible admin page (302 - Redirect)")
  196.  
  197.             else:
  198.  
  199.                 print "%s %s %s" % (host, " Interesting response:", response.status)
  200.  
  201.             connection.close()
  202.  
  203.         print("\n\nCompleted \n")
  204.  
  205.         print var1, " Admin pages found"
  206.  
  207.         print var2, " total pages scanned"
  208.  
  209.         raw_input("[/] The Game Over; Press Enter to Exit")
  210.  
  211.  
  212.  
  213.  
  214.  
  215.     if code==2:
  216.  
  217.         print("\t [+] Scanning " + site + "...\n\n")
  218.  
  219.         for admin in asp:
  220.  
  221.             admin = admin.replace("\n","")
  222.  
  223.             admin = "/" + admin
  224.  
  225.             host = site + admin
  226.  
  227.             print ("\t [#] Checking " + host + "...")
  228.  
  229.             connection = httplib.HTTPConnection(site)
  230.  
  231.             connection.request("GET",admin)
  232.  
  233.             response = connection.getresponse()
  234.  
  235.             var2 = var2 + 1
  236.  
  237.             if response.status == 200:
  238.  
  239.                 var1 = var1 + 1
  240.  
  241.                 print "%s %s" % ( "\n\n>>>" + host, "Admin page found!")
  242.  
  243.                 raw_input("Press enter to continue scanning.\n")
  244.  
  245.             elif response.status == 404:
  246.  
  247.                 var2 = var2
  248.  
  249.             elif response.status == 302:
  250.  
  251.                 print "%s %s" % ("\n>>>" + host, "Possible admin page (302 - Redirect)")
  252.  
  253.             else:
  254.  
  255.                 print "%s %s %s" % (host, " Interesting response:", response.status)
  256.  
  257.             connection.close()
  258.  
  259.         print("\n\nCompleted \n")
  260.  
  261.         print var1, " Admin pages found"
  262.  
  263.         print var2, " total pages scanned"
  264.  
  265.         raw_input("The Game Over; Press Enter to Exit")
  266.  
  267.  
  268.  
  269.     if code==3:
  270.  
  271.         print("\t [+] Scanning " + site + "...\n\n")
  272.  
  273.         for admin in cfm:
  274.  
  275.             admin = admin.replace("\n","")
  276.  
  277.             admin = "/" + admin
  278.  
  279.             host = site + admin
  280.  
  281.             print ("\t [#] Checking " + host + "...")
  282.  
  283.             connection = httplib.HTTPConnection(site)
  284.  
  285.             connection.request("GET",admin)
  286.  
  287.             response = connection.getresponse()
  288.  
  289.             var2 = var2 + 1
  290.  
  291.             if response.status == 200:
  292.  
  293.                 var1 = var1 + 1
  294.  
  295.                 print "%s %s" % ( "\n\n>>>" + host, "Admin page found!")
  296.  
  297.                 raw_input("Press enter to continue scanning.\n")
  298.  
  299.             elif response.status == 404:
  300.  
  301.                 var2 = var2
  302.  
  303.             elif response.status == 302:
  304.  
  305.                 print "%s %s" % ("\n>>>" + host, "Possible admin page (302 - Redirect)")
  306.  
  307.             else:
  308.  
  309.                 print "%s %s %s" % (host, " Interesting response:", response.status)
  310.  
  311.             connection.close()
  312.  
  313.         print("\n\nCompleted \n")
  314.  
  315.         print var1, " Admin pages found"
  316.  
  317.         print var2, " total pages scanned"
  318.  
  319.         raw_input("The Game Over; Press Enter to Exit")
  320.  
  321.  
  322.  
  323.     if code==4:
  324.  
  325.         print("\t [+] Scanning " + site + "...\n\n")
  326.  
  327.         for admin in js:
  328.  
  329.             admin = admin.replace("\n","")
  330.  
  331.             admin = "/" + admin
  332.  
  333.             host = site + admin
  334.  
  335.             print ("\t [#] Checking " + host + "...")
  336.  
  337.             connection = httplib.HTTPConnection(site)
  338.  
  339.             connection.request("GET",admin)
  340.  
  341.             response = connection.getresponse()
  342.  
  343.             var2 = var2 + 1
  344.  
  345.             if response.status == 200:
  346.  
  347.                 var1 = var1 + 1
  348.  
  349.                 print "%s %s" % ( "\n\n>>>" + host, "Admin page found!")
  350.  
  351.                 raw_input("Press enter to continue scanning.\n")
  352.  
  353.             elif response.status == 404:
  354.  
  355.                 var2 = var2
  356.  
  357.             elif response.status == 302:
  358.  
  359.                 print "%s %s" % ("\n>>>" + host, "Possible admin page (302 - Redirect)")
  360.  
  361.             else:
  362.  
  363.                 print "%s %s %s" % (host, " Interesting response:", response.status)
  364.  
  365.             connection.close()
  366.  
  367.         print("\n\nCompleted \n")
  368.  
  369.         print var1, " Admin pages found"
  370.  
  371.         print var2, " total pages scanned"
  372.  
  373.         raw_input("The Game Over; Press Enter to Exit")
  374.  
  375.  
  376.  
  377.     if code==5:
  378.  
  379.         print("\t [+] Scanning " + site + "...\n\n")
  380.  
  381.         for admin in cgi:
  382.  
  383.             admin = admin.replace("\n","")
  384.  
  385.             admin = "/" + admin
  386.  
  387.             host = site + admin
  388.  
  389.             print ("\t [#] Checking " + host + "...")
  390.  
  391.             connection = httplib.HTTPConnection(site)
  392.  
  393.             connection.request("GET",admin)
  394.  
  395.             response = connection.getresponse()
  396.  
  397.             var2 = var2 + 1
  398.  
  399.             if response.status == 200:
  400.  
  401.                 var1 = var1 + 1
  402.  
  403.                 print "%s %s" % ( "\n\n>>>" + host, "Admin page found!")
  404.  
  405.                 raw_input("Press enter to continue scanning.\n")
  406.  
  407.             elif response.status == 404:
  408.  
  409.                 var2 = var2
  410.  
  411.             elif response.status == 302:
  412.  
  413.                 print "%s %s" % ("\n>>>" + host, "Possible admin page (302 - Redirect)")
  414.  
  415.             else:
  416.  
  417.                 print "%s %s %s" % (host, " Interesting response:", response.status)
  418.  
  419.             connection.close()
  420.  
  421.         print("\n\nCompleted \n")
  422.  
  423.         print var1, " Admin pages found"
  424.  
  425.         print var2, " total pages scanned"
  426.  
  427.         raw_input("The Game Over; Press Enter to Exit")
  428.  
  429.  
  430.  
  431.     if code==6:
  432.  
  433.         print("\t [+] Scanning " + site + "...\n\n")
  434.  
  435.         for admin in brf:
  436.  
  437.             admin = admin.replace("\n","")
  438.  
  439.             admin = "/" + admin
  440.  
  441.             host = site + admin
  442.  
  443.             print ("\t [#] Checking " + host + "...")
  444.  
  445.             connection = httplib.HTTPConnection(site)
  446.  
  447.             connection.request("GET",admin)
  448.  
  449.             response = connection.getresponse()
  450.  
  451.             var2 = var2 + 1
  452.  
  453.             if response.status == 200:
  454.  
  455.                 var1 = var1 + 1
  456.  
  457.                 print "%s %s" % ( "\n\n>>>" + host, "Admin page found!")
  458.  
  459.                 raw_input("Press enter to continue scanning.\n")
  460.  
  461.             elif response.status == 404:
  462.  
  463.                 var2 = var2
  464.  
  465.             elif response.status == 302:
  466.  
  467.                 print "%s %s" % ("\n>>>" + host, "Possible admin page (302 - Redirect)")
  468.  
  469.             else:
  470.  
  471.                 print "%s %s %s" % (host, " Interesting response:", response.status)
  472.  
  473.             connection.close()
  474.  
  475.         print("\n\nCompleted \n")
  476.  
  477.         print var1, " Admin pages found"
  478.  
  479.         print var2, " total pages scanned"
  480.  
  481.         raw_input("The Game Over; Press Enter to Exit")
  482.  
  483. except (httplib.HTTPResponse, socket.error):
  484.  
  485.     print "\n\t[!] Session Cancelled; Error occured. Check internet settings"
  486.  
  487. except (KeyboardInterrupt, SystemExit):
  488.  
  489.     print "\n\t[!] Session cancelled"
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!