[zer0_s3c]

I use this PERL script 90% of the time with my projects.

Hope you enjoy it as much as I do, lol. :blackhat:

Code:

#!/usr/bin/perl use HTTP::Request; use LWP::UserAgent; system('cls'); system('title Administrator Control Panel Finder'); system "color 8"; print"\n"; print "\t++++++++++++++++++++++++++++++++++++++++++\n"; print "\t+ Administrator Finder [ PHP,HTML ] \n"; print "\t+ By: AmirMasoud \n"; print "\t+ Found Me On My Website: \n"; print "\t+ http://amir-masoud.ir \n"; print "\t+++++++++++++++++++++++++++++++++++++++++++\n"; print "\n"; print " Please Add Website Target :) \n Ex: www.victim.com or www.victim.com/path\n-> "; $address=<STDIN>; chomp $address; if ( $address !~ /^http:/ ) { $address = 'http://' . $address; } if ( $address !~ /\/$/ ) { $address = $address . '/'; } print "\n"; if($address){ print "#root-message: Target: $address\n"; print "#root-message: Searching Administrator Control Panel...\n\n\n"; @path=('admin/','administrator/','admin1/','admin2/','admin3/','admin4/','admin5/','usuarios/','usuario/','administrator/','moderator/','webadmin/','adminarea/','bb-admin/','adminLogin/','admin_area/','panel-administracion/','instadmin/', 'memberadmin/','administratorlogin/','adm/','admin/account.php','admin/index.php','admin/login.php','admin/admin.php','admin/account.php', 'admin_area/admin.php','admin_area/login.php','siteadmin/login.php','siteadmin/index.php','siteadmin/login.html','admin/account.html','admin/index.html','admin/login.html','admin/admin.html', 'admin_area/index.php','bb-admin/index.php','bb-admin/login.php','bb-admin/admin.php','admin/home.php','admin_area/login.html','admin_area/index.html', 'admin/controlpanel.php','admin.php','admincp/index.asp','admincp/login.asp','admincp/index.html','admin/account.html','adminpanel.html','webadmin.html', 'webadmin/index.html','webadmin/admin.html','webadmin/login.html','admin/admin_login.html','admin_login.html','panel-administracion/login.html', 'admin/cp.php','cp.php','administrator/index.php','administrator/login.php','nsw/admin/login.php','webadmin/login.php','admin/admin_login.php','admin_login.php', 'administrator/account.php','administrator.php','admin_area/admin.html','pages/admin/admin-login.php','admin/admin-login.php','admin-login.php', 'bb-admin/index.html','bb-admin/login.html','acceso.php','bb-admin/admin.html','admin/home.html','login.php','modelsearch/login.php','moderator.php','moderator/login.php', 'moderator/admin.php','account.php','pages/admin/admin-login.html','admin/admin-login.html','admin-login.html','controlpanel.php','admincontrol.php', 'admin/adminLogin.html','adminLogin.html','admin/adminLogin.html','home.html','rcjakar/admin/login.php','adminarea/index.html','adminarea/admin.html', 'webadmin.php','webadmin/index.php','webadmin/admin.php','admin/controlpanel.html','admin.html','admin/cp.html','cp.html','adminpanel.php','moderator.html', 'administrator/index.html','administrator/login.html','user.html','administrator/account.html','administrator.html','login.html','modelsearch/login.html', 'moderator/login.html','adminarea/login.html','panel-administracion/index.html','panel-administracion/admin.html','modelsearch/index.html','modelsearch/admin.html', 'admincontrol/login.html','adm/index.html','adm.html','moderator/admin.html','user.php','account.html','controlpanel.html','admincontrol.html', 'panel-administracion/login.php','wp-login.php','adminLogin.php','admin/adminLogin.php','home.php','admin.php','adminarea/index.php', 'adminarea/admin.php','adminarea/login.php','panel-administracion/index.php','panel-administracion/admin.php','modelsearch/index.php', 'modelsearch/admin.php','admincontrol/login.php','adm/admloginuser.php','admloginuser.php','admin2.php','admin2/login.php','admin2/index.php','usuarios/login.php', 'adm/index.php','adm.php','affiliate.php','adm_auth.php','memberadmin.php','administratorlogin.php','wp-admin' ); foreach $patchh(@path){ $findall=$address.$patchh; my $req=HTTP::Request->new(GET=>$findall); my $ua=LWP::UserAgent->new(); $ua->timeout(30); my $contentpage=$ua->request($req); if($contentpage->content =~ /Username/ || $contentpage->content =~ /Password/ || $contentpage->content =~ /username/ || $contentpage->content =~ /password/ || $contentpage->content =~ /USERNAME/ || $contentpage->content =~ /PASSWORD/ || $contentpage->content =~ /Username/ || $contentpage->content =~ /Wachtwoord/ || $contentpage->content =~ /Senha/ || $contentpage->content =~ /senha/ || $contentpage->content =~ /Personal/ || $contentpage->content =~ /Usuario/ || $contentpage->content =~ /Clave/ || $contentpage->content =~ /Usager/ || $contentpage->content =~ /usager/ || $contentpage->content =~ /Sing/ || $contentpage->content =~ /passe/ || $contentpage->content =~ /P\/W/ || $contentpage->content =~ /Admin Password/ ){ print " \n #root-amir: [+] Ow ! Found => $findall\n\n"; }else{ print "#root-amir:[-] Not Found <- $findall\n"; } } }

usage:
perl Cp-Finder.pl
OR
perl Cp-Finder.pl http://www.domain.com

[BreShiE]

Thanks for this, my EXE one is very slow. I'm going to give this a try.

[zer0_s3c]

I have others if this one isn't suffice. Lol.

[Corrupt]

This is a pretty nice admin finder. I'd also like to point out that since this is a script, you can add/remove possible pages.

[yokai_old]

Well , you can add 2082 at the end of the address to find admin panel
i.e . site.com:2082

Although this is a gravedug thread, this script is also bad as it doesn't load the list from another file and is just in the file, port 2082/2083 - commonly used for cpanel/whm, can easily be changed as well, apparently you want to learn 'hacking', start reading a bit more and not spitting crap like this, and get rid of the gay fawkes crap.

[Nuance]

closed for grave digging.