Rabu, 06 Juni 2012

Admin Finder

Dalam aktifitas Hacking pada defacer tidak terlepas dari pencarian halaman admin, nah kali ini saya mau share script python yang bisa membantu dalam pencarian halaman admin. (saya coba di linux Backtrack).
ni Scriptnya... :


#/usr/bin/python
import sys, os, time, httplib
if sys.platform == 'linux' or sys.platform == 'blackbuntu':
clearing = 'clear'
else:
clearing = 'cls'
os.system(clearing)
if len(sys.argv) != 2:
print "\n|-------------------------------------------------------------|"
print "|               Admin login finder                        |"
print "|               author: zer03s!!!                          |"
print "|---------------------------------------------------------------|\n"
sys.exit(1)
for arg in sys.argv:
if arg == '-h':
print "\n|-----------------------------------------------------------------------------|"
print "|                Admin login finder                                       |"
print "|        Usage: admin-find.py www.site.com                      |"
print "|         Example: admin-find.py site.com                           |"
print "|-------------------------------------------------------------------------------|\n"
sys.exit(1)
site = sys.argv[1].replace("http://","").rsplit("/",1)[0]
site = site.lower()
admin_path = ['admin.php','admin/','administrator/','moderator/','webadmin/','adminarea/','bb-admin/','adminLogin/','admin_area/','panel-administ
racion/','instadmin/','memberadmin/','administratorlogin/','adm/','admin/account.php','admin/index.php','admin/login.php','admin/admin.php','admin/ac
c
ount.php','joomla/administrator','login.php',
'admin_area/admin.php','admin_area/login.php','siteadmin/login.php','siteadmin/index.php','siteadmin/login.html','admin/account.html','admin/index.ht
ml','admin/login.html','admin/admin.html','admin_area/index.php','bb-admin/index.php','bb-admin/login.php','bb-admin/admin.php','admin/home.php','adm
i
n_area/login.html','admin_area/index.html','admin/controlpanel.php','admincp/index.asp','admincp/login.asp','admincp/index.html','admin/account.html'
,
'adminpanel.html','webadmin.html','w  ebadmin/index.html','webadmin/admin.html','webadmin/login.html','admin/admin_login.html','admin_login.html','pa
n
el-administracion/login.html','admin/cp.php','cp.php','administrator/index.php','administrator/login.php','nsw/admin/login.php','webadmin/login.php',
'
admin/admin_login.php','admin_login.php','administrator/account.php','administrator.php','admin_area/admin.html','pages/admin/admin-login.php','admin
/
admin-login.php','admin-login.php','bb-admin/index.html','bb-admin/login.html','bb-admin/admin.html','admin/home.html','modelsearch/login.php','moder
a
tor.php','moderator/login.php','moderator/admin.php','account.php','pages/admin/admin-login.html','admin/admin-login.html','admin-login.html','contro
l
panel.php','admincontrol.php',
'admin/adminLogin.html','adminLogin.html','admin/adminLogin.html','home.html','rcjakar/admin/login.php','adminarea/index.html','adminarea/admin.html'
,'webadmin.php','webadmin/index.php','webadmin/admin.php','admin/controlpanel.html','admin.html','admin/cp.html','cp.html','adminpanel.php','moderato
r
.htm  l','administrator/index.html','administrator/login.html','user.html','administrator/account.html','administrator.html','login.html','m  odelsea
r
ch/login.html','moderator/login.html','adminarea/login.html','panel-administracion/index.html','panel-administracion/admin.html','modelsearch/index.h
t
ml','modelsearch/admin.html','admincontrol/login.html','adm/index.html','adm.html','moderator/admin.html','user.php','account.html','controlpane  l.h
t
ml','admincontrol.html','panel-administracion/login.php','wp-login.php','adminLogin.php','admin/adminLogin.php','home.php','adminarea/index.php','adm
i
narea/admin.php','adminarea/login.php','panel-administracion/index.php','panel-administracion/admin.php','modelsearch/index.php','modelsearch/admin.p
h
p','admincontrol/login.php','adm/admloginuser.php','admloginuser.php','admin2.php',  'admin2/login.php','admin2/index.php','adm/index.php','adm.php',
'
affiliate.php','adm_auth.php  ','memberadmin.php','administratorlogin.php']
print "\n|-------------------------------------------------------------|"
print "|  contact me : zer03s[at]hackermail[dot]com  |"
print "|----------------------------------------------------------------|\n"
print "\n[-] %s" % time.strftime("%X")
      print "[+] Target:",site
print "[+] Checking paths..."
print
try:
for admin in admin_path:
admin = admin.replace("\n","")
admin = "/" + admin
connection = httplib.HTTPConnection(site)
connection.request("GET",admin)
response = connection.getresponse()
print "%s %s %s" % (admin, response.status, response.reason)
except(KeyboardInterrupt,SystemExit):
raise
except:
pass





◄ Newer Post Older Post ►