كود PHP:
<?php
/*
0xf-security
Created By Lion-Heart
Re-Coded By KrypTiK
*/
set_time_limit(0);
$url = htmlentities(trim($_POST['url']));
if(isset($_POST["Start_scan"])){
echo '<br> Starting. .....<br>';
echo "<br>Scanning : ".$url." <br><br>";
$value = array("news/wp-login.php"* "user-admin.php"* "user-admin.asp"* "panel-administracion/index.html"* "adminLogin.html"* "affiliate.asp"* "adminarea/login.html"* "adminarea/admin.html"* "siteadmin/login.asp"* "bb-admin/login.asp"* "admincp.php"* "admin-login.html"* "mypanel/login.php"* "panel/login.php"* "wp-login.php"* "admin1.php"* "admin1.html"* "admin2.php"* "admin2.html"* "yonetim.php"* "yonetim.html"* "yonetici.php"* "yonetici.html"* "ccms"* "ccms/login.php"* "ccms/index.php"* "maintenance"* "webmaster"* "adm"* "configuration"* "configure"* "websvn"* "admin"* "admin/account.php"* "admin/account.html". "admin/index.php"* "admin/index.html"* "admin/login.php". "admin/login.html"* "admin/home.php"* "admin/controlpanel.html"* "admin/controlpanel.php"* "admin.php"* "admin.html"* "admin/cp.php"* "admin/cp.html"* "cp.php"* "cp.html"* "administrator"* "administrator/index.html"* "administrator/index.php"* "administrator/login.html"* "administrator/login.php"* "administrator/account.html"* "administrator/account.php"* "administrator.php"* "administrator.html"* "login.php"* "login.html"* "modelsearch/login.php"* "moderator.php"* "moderator.html"* "moderator/login.php"* "moderator/login.html"*"moderator/admin.php"* "moderator/admin.html"* "moderator"* "account.php"* "account.html"* "controlpanel"* "controlpanel.php"* "controlpanel.html"* "admincontrol.php"* "admincontrol.html"* "adminpanel.php"* "adminpanel.html"* "admin1.asp"* "admin2.asp"* "yonetim.asp"* "yonetici.asp"* "admin/account.asp"* "admin/index.asp"* "admin/login.asp"* "admin/home.asp"* "admin/controlpanel.asp"* "admin.asp"* "admin/cp.asp"* "cp.asp"* "administrator/index.asp"* "administrator/login.asp"* "administrator/account.asp"* "administrator.asp"* "login.asp"* "modelsearch/login.asp"* "moderator.asp"* "moderator/login.asp"* "moderator/admin.asp"* "account.asp"* "controlpanel.asp"* "admincontrol.asp"* "adminpanel.asp"* "fileadmin"* "fileadmin.php"* "fileadmin.asp"* "fileadmin.html"* "administration"* "administration.php"* "administration.html"* "sysadmin.php"* "sysadmin.html"* "phpmyadmin"* "myadmin"* "sysadmin.asp"* "sysadmin"* "ur-admin.asp"* "ur-admin.php"* "ur-admin.html"* "ur-admin"* "Server.php"* "Server.html"* "Server.asp"* "Server"* "wp-admin"* "administr8.php"* "administr8.html"* "administr8"* "administr8.asp"* "webadmin"* "webadmin.php"* "webadmin.asp"* "webadmin.html"* "administratie"* "admins"* "admins.php"* "admins.asp"* "admins.html"* "administrivia"* "Database_Administration"* "WebAdmin"* "useradmin"* "sysadmins"* "admin1"* "system-administration"* "administrators"* "pgadmin"* "directadmin"* "staradmin"* "ServerAdministrator"* "SysAdmin"* "administer"* "LiveUser_admin"* "sys-admin"* "typo3"* "panel"* "cpanel"* "cPanel"* "cpanel_file"* "platz_login"* "rcLogin"* "blogindex"* "formslogin"* "autologin"* "support_login"* "meta_login"* "manuallogin"* "simpleLogin"* "loginflat"* "utility_login"* "showlogin"* "memlogin"* "members"* "login-redirect"* "sub-login"* "wp-login"* "login1"* "dir-login"* "login_db"* "xlogin"* "smblogin"* "customer_login"* "UserLogin"* "login-us"* "acct_login"* "admin_area"* "bigadmin"* "project-admins"* "phppgadmin"* "pureadmin"* "sql-admin"* "radmind"* "openvpnadmin"* "wizmysqladmin"* "vadmind"* "ezsqliteadmin"* "hpwebjetadmin"* "newsadmin"* "adminpro"* "Lotus_Domino_admin"* "bbadmin"* "vmailadmin"* "Indy_admin"* "ccp14admin"* "irc-macadmin"* "banneradmin"* "sshadmin"* "phpldapadmin"* "macadmin"* "administratoraccounts"* "admin4_account"* "admin4_colon"* "radmind-1"* "Super-admin"* "AdminTools"* "cmsadmin"* "SysAdmin2"* "globes_admin"* "cadmins"* "phpSQLiteAdmin"* "navSiteAdmin"* "server_admin_small"* "logo_sysadmin"* "server"* "database_administration"* "power_user"* "system_administration"* "ss_vms_admin_sm");
foreach($value as $panel){
$headers = get_headers("$url$panel");
if(preg_match('/200/'* $headers[0])){
echo '<a href="'.$url.$panel.'"> Admin Panel Found! - '.$panel.'</a><br>';
} else {
echo '<a href="'.$url.$panel.'"> Admin Panel Not Found!</a><br>';
}
}
}
echo <<<FORM1
<html>
<head>
<title>-Lion's Admin Page Finder-</title>
</head>
<body>
<form method="POST" align="center">
<input name="url" type="url" size="110" value="http://"><br>
<input name="Start_scan" value="Start scan" type="submit">
</form>
</body>
</html>
FORM1;
?>
