Advertisement
EnggarHakim

Admin Page Finder

Jun 1st, 2014
317
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
PHP 10.91 KB | None | 0 0
  1. <?php
  2. set_time_limit(0);
  3. error_reporting(0);
  4. $list['front'] ="admin
  5. adm
  6. admincp
  7. admcp
  8. cp
  9. modcp
  10. moderatorcp
  11. adminare
  12. admins
  13. cpanel
  14. controlpanel";
  15. $list['end'] = "admin1.php
  16. admin1.html
  17. admin2.php
  18. admin2.html
  19. yonetim.php
  20. yonetim.html
  21. yonetici.php
  22. yonetici.html
  23. ccms/
  24. ccms/login.php
  25. ccms/index.php
  26. maintenance/
  27. webmaster/
  28. adm/
  29. configuration/
  30. configure/
  31. websvn/
  32. admin/
  33. admin/account.php
  34. admin/account.html
  35. admin/index.php
  36. admin/index.html
  37. admin/login.php
  38. admin/login.html
  39. admin/home.php
  40. admin/controlpanel.html
  41. admin/controlpanel.php
  42. admin.php
  43. admin.html
  44. admin/cp.php
  45. admin/cp.html
  46. cp.php
  47. cp.html
  48. administrator/
  49. administrator/index.html
  50. administrator/index.php
  51. administrator/login.html
  52. administrator/login.php
  53. administrator/account.html
  54. administrator/account.php
  55. administrator.php
  56. administrator.html
  57. login.php
  58. login.html
  59. modelsearch/login.php
  60. moderator.php
  61. moderator.html
  62. moderator/login.php
  63. moderator/login.html
  64. moderator/admin.php
  65. moderator/admin.html
  66. moderator/
  67. account.php
  68. account.html
  69. controlpanel/
  70. controlpanel.php
  71. controlpanel.html
  72. admincontrol.php
  73. admincontrol.html
  74. adminpanel.php
  75. adminpanel.html
  76. admin1.asp
  77. admin2.asp
  78. yonetim.asp
  79. yonetici.asp
  80. admin/account.asp
  81. admin/index.asp
  82. admin/login.asp
  83. admin/home.asp
  84. admin/controlpanel.asp
  85. admin.asp
  86. admin/cp.asp
  87. cp.asp
  88. administrator/index.asp
  89. administrator/login.asp
  90. administrator/account.asp
  91. administrator.asp
  92. login.asp
  93. modelsearch/login.asp
  94. moderator.asp
  95. moderator/login.asp
  96. moderator/admin.asp
  97. account.asp
  98. controlpanel.asp
  99. admincontrol.asp
  100. adminpanel.asp
  101. fileadmin/
  102. fileadmin.php
  103. fileadmin.asp
  104. fileadmin.html
  105. administration/
  106. administration.php
  107. administration.html
  108. sysadmin.php
  109. sysadmin.html
  110. phpmyadmin/
  111. myadmin/
  112. sysadmin.asp
  113. sysadmin/
  114. ur-admin.asp
  115. ur-admin.php
  116. ur-admin.html
  117. ur-admin/
  118. Server.php
  119. Server.html
  120. Server.asp
  121. Server/
  122. wp-admin/
  123. administr8.php
  124. administr8.html
  125. administr8/
  126. administr8.asp
  127. webadmin/
  128. webadmin.php
  129. webadmin.asp
  130. webadmin.html
  131. administratie/
  132. admins/
  133. admins.php
  134. admins.asp
  135. admins.html
  136. administrivia/
  137. Database_Administration/
  138. WebAdmin/
  139. useradmin/
  140. sysadmins/
  141. admin1/
  142. system-administration/
  143. administrators/
  144. pgadmin/
  145. directadmin/
  146. staradmin/
  147. ServerAdministrator/
  148. SysAdmin/
  149. administer/
  150. LiveUser_Admin/
  151. sys-admin/
  152. typo3/
  153. panel/
  154. cpanel/
  155. cPanel/
  156. cpanel_file/
  157. platz_login/
  158. rcLogin/
  159. blogindex/
  160. formslogin/
  161. autologin/
  162. support_login/
  163. meta_login/
  164. manuallogin/
  165. simpleLogin/
  166. loginflat/
  167. utility_login/
  168. showlogin/
  169. memlogin/
  170. members/
  171. login-redirect/
  172. sub-login/
  173. wp-login/
  174. login1/
  175. dir-login/
  176. login_db/
  177. xlogin/
  178. smblogin/
  179. customer_login/
  180. UserLogin/
  181. login-us/
  182. acct_login/
  183. admin_area/
  184. bigadmin/
  185. project-admins/
  186. phppgadmin/
  187. pureadmin/
  188. sql-admin/
  189. radmind/
  190. openvpnadmin/
  191. wizmysqladmin/
  192. vadmind/
  193. ezsqliteadmin/
  194. hpwebjetadmin/
  195. newsadmin/
  196. adminpro/
  197. Lotus_Domino_Admin/
  198. bbadmin/
  199. vmailadmin/
  200. Indy_admin/
  201. ccp14admin/
  202. irc-macadmin/
  203. banneradmin/
  204. sshadmin/
  205. phpldapadmin/
  206. macadmin/
  207. administratoraccounts/
  208. admin4_account/
  209. admin4_colon/
  210. radmind-1/
  211. Super-Admin/
  212. AdminTools/
  213. cmsadmin/
  214. SysAdmin2/
  215. globes_admin/
  216. cadmins/
  217. phpSQLiteAdmin/
  218. navSiteAdmin/
  219. server_admin_small/
  220. logo_sysadmin/
  221. server/
  222. database_administration/
  223. power_user/
  224. system_administration/
  225. ss_vms_admin_sm/
  226. adminarea/
  227. bb-admin/
  228. adminLogin/
  229. panel-administracion/
  230. instadmin/
  231. memberadmin/
  232. administratorlogin/
  233. admin/admin.php
  234. admin_area/admin.php
  235. admin_area/login.php
  236. siteadmin/login.php
  237. siteadmin/index.php
  238. siteadmin/login.html
  239. admin/admin.html
  240. admin_area/index.php
  241. bb-admin/index.php
  242. bb-admin/login.php
  243. bb-admin/admin.php
  244. admin_area/login.html
  245. admin_area/index.html
  246. admincp/index.asp
  247. admincp/login.asp
  248. admincp/index.html
  249. webadmin/index.html
  250. webadmin/admin.html
  251. webadmin/login.html
  252. admin/admin_login.html
  253. admin_login.html
  254. panel-administracion/login.html
  255. nsw/admin/login.php
  256. webadmin/login.php
  257. admin/admin_login.php
  258. admin_login.php
  259. admin_area/admin.html
  260. pages/admin/admin-login.php
  261. admin/admin-login.php
  262. admin-login.php
  263. bb-admin/index.html
  264. bb-admin/login.html
  265. bb-admin/admin.html
  266. admin/home.html
  267. pages/admin/admin-login.html
  268. admin/admin-login.html
  269. admin-login.html
  270. admin/adminLogin.html
  271. adminLogin.html
  272. home.html
  273. rcjakar/admin/login.php
  274. adminarea/index.html
  275. adminarea/admin.html
  276. webadmin/index.php
  277. webadmin/admin.php
  278. user.html
  279. modelsearch/login.html
  280. adminarea/login.html
  281. panel-administracion/index.html
  282. panel-administracion/admin.html
  283. modelsearch/index.html
  284. modelsearch/admin.html
  285. admincontrol/login.html
  286. adm/index.html
  287. adm.html
  288. user.php
  289. panel-administracion/login.php
  290. wp-login.php
  291. adminLogin.php
  292. admin/adminLogin.php
  293. home.php
  294. adminarea/index.php
  295. adminarea/admin.php
  296. adminarea/login.php
  297. panel-administracion/index.php
  298. panel-administracion/admin.php
  299. modelsearch/index.php
  300. modelsearch/admin.php
  301. admincontrol/login.php
  302. adm/admloginuser.php
  303. admloginuser.php
  304. admin2/login.php
  305. admin2/index.php
  306. adm/index.php
  307. adm.php
  308. affiliate.php
  309. adm_auth.php
  310. memberadmin.php
  311. administratorlogin.php
  312. admin/admin.asp
  313. admin_area/admin.asp
  314. admin_area/login.asp
  315. admin_area/index.asp
  316. bb-admin/index.asp
  317. bb-admin/login.asp
  318. bb-admin/admin.asp
  319. pages/admin/admin-login.asp
  320. admin/admin-login.asp
  321. admin-login.asp
  322. user.asp
  323. webadmin/index.asp
  324. webadmin/admin.asp
  325. webadmin/login.asp
  326. admin/admin_login.asp
  327. admin_login.asp
  328. panel-administracion/login.asp
  329. adminLogin.asp
  330. admin/adminLogin.asp
  331. home.asp
  332. adminarea/index.asp
  333. adminarea/admin.asp
  334. adminarea/login.asp
  335. panel-administracion/index.asp
  336. panel-administracion/admin.asp
  337. modelsearch/index.asp
  338. modelsearch/admin.asp
  339. admincontrol/login.asp
  340. adm/admloginuser.asp
  341. admloginuser.asp
  342. admin2/login.asp
  343. admin2/index.asp
  344. adm/index.asp
  345. adm.asp
  346. affiliate.asp
  347. adm_auth.asp
  348. memberadmin.asp
  349. administratorlogin.asp
  350. siteadmin/login.asp
  351. siteadmin/index.asp
  352. ADMIN/
  353. paneldecontrol/
  354. login/
  355. cms/
  356. admon/
  357. ADMON/
  358. administrador/
  359. ADMIN/login.php
  360. panelc/
  361. ADMIN/login.html";
  362. function template() {
  363. echo '
  364. <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
  365. <html xmlns="http://www.w3.org/1999/xhtml">
  366. <head>
  367. <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
  368. <title>Admin page Finder by k[N]i[g]Ht</title>
  369. <style type="text/css">
  370. body{
  371.    background: #000;
  372.    margin: 0;
  373.    padding: 0;
  374.    padding-top: 10px;
  375.    color: #FFF;
  376.    font-family: Calibri;
  377.    font-size: 13px;
  378. }
  379. a{
  380.    color: #FFF;
  381.    text-decoration: none;
  382.    font-weight: bold;
  383. }
  384. .wrapper{
  385.    width: 1000px;
  386.    margin: 0 auto;
  387. }
  388. .tube{
  389.    padding: 10px;
  390. }
  391. .red{
  392.    width: 998px;
  393.    border: 1px solid #e52224;
  394.    background: #191919;
  395.    color: #e52224
  396. }
  397. .red input{
  398.    background: #000;
  399.    border: 1px solid #e52224;
  400.    color: #FFF;
  401. }
  402. .blue{
  403.    float: left;
  404.    width: 1000px;
  405.    border: 1px solid #1d7fc3;
  406.    background: #191919;
  407.    color: #1d7fc3;
  408. }
  409. .green{
  410.    float: left;
  411.    width: 1000px;
  412.    border: 1px solid #5fd419;
  413.    background: #191919;
  414.    color: #5fd419;
  415. }
  416. </style>
  417. <script type="text/javascript">
  418. <!--
  419. function insertcode($text, $place, $replace)
  420. {
  421.    var $this = $text;
  422.    var logbox = document.getElementById($place);
  423.    if($replace == 0)
  424.        document.getElementById($place).innerHTML = logbox.innerHTML+$this;
  425.    else
  426.        document.getElementById($place).innerHTML = $this;
  427. //document.getElementById("helpbox").innerHTML = $this;
  428. }
  429. -->
  430. </script>
  431. </head>
  432. <body>
  433. <br />
  434. <br />
  435. <div class="wrapper">
  436. <div class="red">
  437. <div class="tube">
  438. <form action="" method="post" name="xploit_form">
  439. URL:<br /><input type="text" name="xploit_url" value="'.$_POST['xploit_url'].'" style="width: 100%;" /><br /><br />
  440. 404string:<br /><input type="text" name="xploit_404string" value="'.$_POST['xploit_404string'].'" style="width: 100%;" /><br /><br />
  441. <span style="float: right;"><input type="submit" name="xploit_submit" value="go for it" align="right" /></span>
  442. </form>
  443. <br />
  444. </div> <!-- /tube -->
  445. </div> <!-- /red -->
  446. <br />
  447. <div class="green">
  448. <div class="tube" id="rightcol">
  449. Verificat: <span id="verified">0</span> / <span id="total">0</span><br />
  450. Found ones:<br />
  451. </div> <!-- /tube -->
  452. </div> <!-- /green -->
  453. <br clear="all" /><br />
  454. <div class="blue">
  455. <div class="tube" id="logbox">
  456. <br />
  457. <br />
  458. Admin page Finder [v0.2]<br />
  459. bY <a href="https://www.facebook.com/1.13.19.Hacker" target="_blank">Adnan Tahir</a><br />
  460. </div> <!-- /tube -->
  461. </div> <!-- /blue -->
  462. </div> <!-- /wrapper -->
  463. <br clear="all">';
  464. }
  465. function show($msg, $br=1, $stop=0, $place='logbox', $replace=0) {
  466.     if($br == 1) $msg .= "<br />";
  467.     echo "<script type=\"text/javascript\">insertcode('".$msg."', '".$place."', '".$replace."');</script>";
  468.     if($stop == 1) exit;
  469.     @flush();@ob_flush();
  470. }
  471. function check($x, $front=0) {
  472.     global $_POST,$site,$false;
  473.     if($front == 0) $t = $site.$x;
  474.     else $t = 'http://'.$x.'.'.$site.'/';
  475.     $headers = get_headers($t);
  476.     if (!eregi('200', $headers[0])) return 0;
  477.     $data = @file_get_contents($t);
  478.     if($_POST['xploit_404string'] == "") if($data == $false) return 0;
  479.     if($_POST['xploit_404string'] != "") if(strpos($data, $_POST['xploit_404string'])) return 0;
  480.     return 1;
  481. }
  482.    
  483. // --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
  484. template();
  485. if(!isset($_POST['xploit_url'])) die;
  486. if($_POST['xploit_url'] == '') die;
  487. $site = $_POST['xploit_url'];
  488. if ($site[strlen($site)-1] != "/") $site .= "/";
  489. if($_POST['xploit_404string'] == "") $false = @file_get_contents($site."d65897f5380a21a42db94b3927b823d56ee1099a-this_can-t_exist.html");
  490. $list['end'] = str_replace("\r", "", $list['end']);
  491. $list['front'] = str_replace("\r", "", $list['front']);
  492. $pathes = explode("\n", $list['end']);
  493. $frontpathes = explode("\n", $list['front']);
  494. show(count($pathes)+count($frontpathes), 1, 0, 'total', 1);
  495. $verificate = 0;
  496. foreach($pathes as $path) {
  497.     show('Checking '.$site.$path.' : ', 0, 0, 'logbox', 0);
  498.     $verificate++; show($verificate, 0, 0, 'verified', 1);
  499.     if(check($path) == 0) show('not found', 1, 0, 'logbox', 0);
  500.     else{
  501.         show('<span style="color: #00FF00;"><strong>found</strong></span>', 1, 0, 'logbox', 0);
  502.         show('<a href="'.$site.$path.'">'.$site.$path.'</a>', 1, 0, 'rightcol', 0);
  503.     }
  504. }
  505. preg_match("/\/\/(.*?)\//i", $site, $xx); $site = $xx[1];
  506. if(substr($site, 0, 3) == "www") $site = substr($site, 4);
  507. foreach($frontpathes as $frontpath) {
  508.     show('Checking http://'.$frontpath.'.'.$site.'/ : ', 0, 0, 'logbox', 0);
  509.     $verificate++; show($verificate, 0, 0, 'verified', 1);
  510.     if(check($frontpath, 1) == 0) show('not found', 1, 0, 'logbox', 0);
  511.     else{
  512.         show('<span style="color: #00FF00;"><strong>found</strong></span>', 1, 0, 'logbox', 0);
  513.         show('<a href="http://'.$frontpath.'.'.$site.'/">'.$frontpath.'.'.$site.'</a>', 1, 0, 'rightcol', 0);
  514.     }
  515.    
  516. }
  517. ?>
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement