Skip to content
Blazing fast admin panel finder with multi-threading
Python
Branch: master
Clone or download
Latest commit 01694ab Apr 26, 2019
Permalink
Type Name Latest commit message Commit time
Failed to load latest commit information.
lib http base auth added (#10) Apr 26, 2019
log rewritten from scratch, working but WIP Sep 20, 2018
LICENSE Initial commit Dec 19, 2015
README.md README.md: typo fixed Apr 26, 2019
admin-finder.py admin-finder.py: fixed the typo in help message Apr 26, 2019
robot.txt fixed robot.txt missing Feb 10, 2019
wordlist.txt Removed 405 duplicate lines Oct 26, 2017

README.md

admin-finder

╔════════════════════════════════════════════╗
║               .          .                 ║
║ ,-. ,-| ,-,-. . ,-.   ," . ,-. ,-| ,-. ,-. ║
║ ,-| | | | | | | | |   |- | | | | | |-' |   ║
║ `-^ `-^ ' ' ' ' ' '   |  ' ' ' `-^ `-' '   ║
║                       '          the-c0d3r ║
╚════════════════════════════════════════════╝

Usage

usage: admin-finder.py [-h] [-u URL] [-w WORDLIST] [-t THREADCOUNT]
                       [-c CREDENTIALS]

Admin panel finder

optional arguments:
  -h, --help            show this help message and exit
  -u URL, --url URL     Target url/website
  -w WORDLIST, --wordlist WORDLIST
                        Wordlist to use, default 'wordlist.txt'
  -t THREADCOUNT, --threadcount THREADCOUNT
                        Number of threads to use
  -c CREDENTIALS, --credentials CREDENTIALS
                        Basic http authentication credentials user:pass format
[-] -u URL paremeter required

Multi-threaded admin finder written in python

Disclaimer: For Educational Purpose only. Use at your own risk, it is very easy to detect such attempts

Features

  • Check the robots.txt file, see if there is any useful information in it
  • Locates admin webpage using over 800 lines of dictionary list
  • Http basic authentication support with -c admin:pass format

Config

  • robot.txt contains the keyword to scan for on the target website's robot file. If they are found, it will be shown on screen.
  • wordlist.txt contains the wordlist that is used to build the urls for scanning

Contributors

@the-c0d3r, @Taimander, @B4DF4C3

TODO

Convert the admin finder into a general purpose bruteforcing tool.

You can’t perform that action at this time.