-
Notifications
You must be signed in to change notification settings - Fork 9
/
admin-panel-sniffer.py
276 lines (242 loc) · 10.5 KB
/
admin-panel-sniffer.py
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
#!/usr/bin/env python
#import required modules
from datetime import datetime as dt
import sys, random, optparse, time, os
try:#python 3
import urllib.request as req
from urllib.error import URLError, HTTPError
three = True
except ImportError:#python 2
import urllib2 as req
three = False
#custom header to avoid being blocked by the website
custom_headers = {"User-Agent" : "Mozilla/5.0 (Windows NT {}; rv:{}.0) Gecko/20100101 Firefox/{}.0".format(random.randint(7,11),
random.randint(40,50),
random.randint(35,50))}
def adjustDomainName(domain):#correct domain name for urllib
if domain.startswith("www."):
domain = domain[4:]
if not domain.startswith("http"):
domain = "http://" + domain
if domain.endswith("/"):
domain = domain[:-1]
return domain
def loadWordList(wordlist_file, ext):#load pages to check from dictionary
try:
with open(wordlist_file, encoding="utf8") as wlf:
content = wlf.readlines()
for i in range(len(content)):
content[i] = content[i].strip("\n")
if ext.lower() == "a":
return content
else:
return [element for element in content if element.endswith(ext) or element.endswith("/")]
except FileNotFoundError:
sys.exit("Couldn't find wordlist file!")
def saveResults(file_name, found_pages, progress=0):
now = dt.now()
with open("admin_sniffer_results.txt", "a") as f:
stamp = "%d-%d-%d %d: %d: %d" % (now.year, now.month, now.day, now.hour, now.minute, now.second)
print(stamp, file=f)
for page in found_pages:
print(page, file=f)
print("total progress: %d\n______________________________________________" % progress, file=f)
def main(domain, progress=0, ext="a", strict=False, save=True, visible=True, wordlist_file="admin_login.txt"):
print(" [+] HULK Is On Progress... Feel Free To Press Ctrl+C At Any Point To Abort...")
resp_codes = {403 : "request forbidden", 401 : "authentication required"}#HTTP response codes
found = []#list to hold the results we find
domain = adjustDomainName(domain)#correct domain name for urllib
print(" [+] Loading Wordlist...")
attempts = loadWordList(wordlist_file, ext)
print(" [+] Crawling...")
for link in attempts[progress:]:#loop over every page in the wordlist file
try:
site = domain + "/" + link
if visible:#show links as they're being tested
print(" trying:", end=" ")
panel_page = req.Request(site, headers=custom_headers)
try:
resp = req.urlopen(site)#try visiting the page
found.append(site)
print(" ✔️✔️✔️ " "%s page valid!" % site)
except HTTPError as e:#investigate the HTTPError we got
if three:
c = e.getcode()
else:
c = e.code()
if c == 404:
if visible:
print("%s not found..." % site)
else:
print("%s potential positive.. %s" % (site, resp_codes[c]))
if not strict:
found.append(site)
except URLError:
print("invalid link or no internet connection!")
break
except Exception as e2:
print("an exception occured when trying {}... {}".format(site, e2))
continue
progress += 1
except KeyboardInterrupt:#make sure we don't lose everything should the user get bored
print()
break
if found:
if save:#save results to a text file
print("Saving results...")
saveResults("admin_sniffer_results.txt", found)
print("results saved to admin_sniffer_results.txt...")
print("found the following results: " + " ".join(found) + " total progress: %s" % progress)
else:
print("could not find any panel pages... Make sure you're connected to the internet\n" \
+ "or try a different wordlist. total progress: %s" % progress)
def getRobotsFile(domain):
print("Attempting to get robots.txt file...")
found = []
domain = adjustDomainName(domain)#correct domain name for urllib
robots_file = domain + "/robots.txt"
try:
data = req.urlopen(robots_file).read().decode("utf-8")
for element in data.split("\n"):
if element.startswith("Disallow:"):
panel_page = domain + element[10:]
print("Disallow rule found: %s" % (panel_page))
found.append(panel_page)
if found:
print("admin panels found... Saving results to file...")
saveResults("admin_sniffer_results.txt", found, 0)
print("done...")
else:
print("could not find any panel pages in the robots file...")
except:
sys.exit("Could not retrieve robots.txt!")
try:
def slowprint(l):
for c in l + '\n' :
sys.stdout.write(c)
sys.stdout.flush()
time.sleep(10. / 100)
print("")
os.system('clear')
slowprint("\033[91m************* Screen Loading For You *************** ")
def bannerprint(h):
for c in h + '\n' :
sys.stdout.write(c)
sys.stdout.flush()
time.sleep(100000. / 10000000)
bannerprint('''\033[92m
_
(_)___
| (_-<
|_/__/ _ _
| |_| |_ (_)___
| _| ' \| (_-< _ _
_ \__|_||_|_/__/_ __ _ __| |_ __ (_)_ _
| || / _ \ || | '_| / _` / _` | ' \| | ' \
\_, \___/\_,_|_| \__,_\__,_|_|_|_|_|_||_|???
|__/ coded by R3DHULK
github page : https://github.com/R3DHULK
''')
def slowprint(s):
for c in s + '\n' :
sys.stdout.write(c)
sys.stdout.flush()
time.sleep(10. / 100)
slowprint(" [!] RESPECT OTHER'S PRIVACY ")
time.sleep(2)
os.system('clear')
print('''\033[92m
_
(_)___
| (_-< v.2.O
|_/__/ _ _
| |_| |_ (_)___
| _| ' \| (_-< _ _
_ \__|_||_|_/__/_ __ _ __| |_ __ (_)_ _
| || / _ \ || | '_| / _` / _` | ' \| | ' \
\_, \___/\_,_|_| \__,_\__,_|_|_|_|_|_||_|???
|__/ coded by R3DHULK
github page : https://github.com/R3DHULK
''')
except KeyboardInterrupt:
print(" \n [-] You Have Entered CTRL + C .... \n [-] Exiting Loading Period... \n [+] Continuing From Next Part....\n ")
try:
if __name__ == "__main__":
parser = optparse.OptionParser("Usage: python %prog --domain <target domain> " \
+ "--progress <index of the page the script reached last run> " \
+ "--page_extension <website language> --strict <True or False> " \
+ "--save <Save the results to a text file?> " \
+ "--verbose <print links as they're tested?> --wordlist <dictionary file to use>" \
+ "--robots <if True don't enter anything else except the domain name>")
domain_help = "target domain. eg: google.com or www.example.org"
progress_help = "(optional) index of the page the script reached last run. The script " \
+ "displays and saves this value in the results file after every run. "\
+ "0 starts from the beginning."
page_extension_help = "(optional) whether the website uses html asp php... default value is 'a' which checks everything"
strict_mode_help = "(optional, default False) if True, HTTP codes that correspond to forbidden or " \
+ "authentication required will be ignored."
save_help = "(optional, default True) if True results will be saved to a txt file."
verbose_help = "(optional, default True) if True each link will be shown as it's being tested."
wordlist_help = "(optional, default is the included wordlist) wordlist file to be used."
robots_help = "(optional, default False) if True the script will try to get the robots.txt " \
+ "file that usually contains the admin panel. If you set it to True, don't enter" \
+ "anything else except the target domain."
parser.add_option("--domain", dest="domain", type="string", help=domain_help)
parser.add_option("--progress", dest="progress", type="string", help=progress_help)
parser.add_option("--page_extension", dest="page_ext", type="string", help=page_extension_help)
parser.add_option("--strict", dest="strict", type="string", help=strict_mode_help)
parser.add_option("--save", dest="save", type="string", help=save_help)
parser.add_option("--verbose", dest="verbose", type="string", help=verbose_help)
parser.add_option("--wordlist", dest="wordlist", type="string", help=wordlist_help)
parser.add_option("--robots", dest="robots", type="string", help=robots_help)
(options, args) = parser.parse_args()
if not options.domain:
sys.exit(" [!] Hulk Wants You To Enter A Target Domain : \n\n%s" % parser.usage)
if not options.wordlist:
sys.exit(" [*] Please Enter A Wordlist File Or Go With Inbuilt Wordlist : \n\n%s" % parser.usage)
try:
strict_mode = eval(options.strict.title())
except:
strict_mode = False
try:
save = eval(options.save.title())
except:
save = True
try:
verbose = eval(options.verbose.title())
except:
verbose = True
if not options.page_ext:
page_ext = 'a'
else:
page_ext = options.page_ext
if not options.progress:
progress = 0
else:
progress = int(options.progress)
if not options.wordlist:
wordlist = "admin_login.txt"
else:
wordlist = options.wordlist
try:
robots = eval(options.robots.title())
except:
robots = False
if robots:
getRobotsFile(options.domain)
else:
main(options.domain, progress, page_ext, strict_mode, save, verbose, wordlist)
except KeyboardInterrupt:
print("\n [-] Ctrl + C Detected \n")
try:
input(" [+] Enter To Exit " )
def slowprint(f):
for c in f + '\n' :
sys.stdout.write(c)
sys.stdout.flush()
time.sleep(10. / 100)
slowprint("\n\033[91m [+] Exiting.... Thanks For Using My Tool \n")
time.sleep(2)
os.system('clear')
except KeyboardInterrupt:
print( "\n\033[90m [-] See You Again ^-^ ")