Scaner de Directorios

#!/usr/bin/perl

#

#bY boER

use LWP::UserAgent;

my $ua = LWP::UserAgent->new();

$ua->timeout(10);

$ua->agent("Mozilla/5.0 (X11; U; Linux i686; en-US; rv:0.9.3) Gecko/20010801");

unless($ARGV[0]){

	OUT("#############################################\n");

	OUT("\n Usage: perl $0 website\n");

	OUT("\n#############################################\n");

	exit(0);

}

if($^O =~ /Win/){

	system("cls");

}else{

	system("clear");

}

OUT("#############################################\n");

OUT("        Scanner Directory!\n");

OUT("#############################################\n");

OUT(" 200 - OK\n");

OUT(" 401 - Authorization Required\n");

OUT(" 403 - Forbidden\n");

OUT(" 500 - Bad Hostname | Internal Server Error\n");

OUT("#############################################\n");

$webcl = clear($ARGV[0]);

OUT("\n# Scanning: $webcl\n\n");

brute($webcl);

OUT("\n# Scanning Finished\n");

sub brute{

	$web = shift;

	@paths = ("access","active","adm","admin","_admin","administrator",

	"administracion","_administracion","~administracion","administer",

	"upload","uploads","~adm","~admin","~administrator","~guest","~mail",

	"~operator","~root","~sys","~sysadm","~sysadmin","~test","~user","~www",

	"~webmaster","admin_upload","admin_uploadpic","editpassword",

	"manager_userinfo","manager_tongji","managerenter","incupfile","inc",

	"upfile","admin_index","admin_admin","index_admin","index","admindefault",

	"default","manage","login","manage_index","index_manage","admin1",

	"admin_login","login_admin","ad_login","ad_manage","count","manager",

	"adminlogin","adminuserlogin","adm_login","chklogin","adduser","adminuser",

	"admin_user","edituser","adminadduser","adminmember","addmember","adminedit",

	"admin_edit","up","upfiles","aadmin","admintab","admin_main","fileadmin",

	"databases","includeinc","***","app","apacheasp","apps","archive","archives",

	"asp","back","backup","back-up","bak","bakup","bak-up","basic","bea","bin",

	"binaries","broken","c","cc","connections","ccs","cache","cgi","fcgi",

	"cgibin","cgi-win","class","classes","classified","classifieds","code",

	"common","credit","creditcards","cv","cvs","customer","customers",

	"CYBERDOCS","CYBERDOCS25","CYBERDOCS31","d","dfiles","data","database",

	"db","dbase","dbm","dbms","demo","dev","devel","develop","development",

	"doc","docs","docs41","docs51","dms","e","email","downloads","ecommerce",

	"ebriefs","error","errors","esales","echannel","esupport","etc","exec",

	"executable","executables","extra","extranet","examples","exchange",

	"fcgi-bin","functions","feedback","file","files","forum","forums","ftp",

	"graphics","galeria","gallery","galerias","guestbook","guests","help",

	"hidden","hide","home","homes","htm","html","imagen","images","icons",

	"incs","include","includes","interactive","internet","intranet","java",

	"javascript","js","jsp","keep","kept","ldap","lib","libs","libraries",

	"links","log","logfiles","logs","lightbox2","mail","me","members","mine",

	"mirror","mirrors","mp3","mp3s","ms","mssql","ms-sql","music","my","new",

	"old","online","order","orders","pages","_pages","pass","passes","passwd",

	"password","polls","passwords","perl","personal","personals","php","_php",

	"phpincludes","pics","pl","pls","plx","press","priv","private","products",

	"production","pub","public","removed","reports","root","sales","save",

	"saved","scripts","secret","secrets","security","servlet","servlets",

	"soap","soapdocs","source","site","sites","SiteServer","sql","src",

	"staff","stats","statistics","ssi","stuff","support","temp","temps","test",

	"text","texts","tmp","user","users","var","vb","vbs","vbscript","vbscripts",

	"weblogic","www","xcache","xsql","zip","zips","W3SVC","W3SVC3","index.php",

	"index.html","phpmyadmin","phpMyAdmin",".bash_history","upload.php",

	"upload.asp","uploader.php","uploader.asp","phpinfo.php","_banners",

	"_adv","468","88","ads","adv","ban","baners","bann","banner","banners",

	"bannerz","be","begun","bn","bnr","cnstats","cnt","phpadsnew","server-status",

	"server-info",".server-status",".server-info",".passwd","INSTALL","_vti_log",

	"admcgi","_notes","_tmp","_temp","panel","_panel","~panel","upFiles","img",

	"es","css","socios","Documentation","INSTALLsetup.php","Upfile","cgi-bin",

	"content","secure","mysql","4Dbin","trustscn_pdos","trustscn_pdos1","_vti_bin",

	"Connections","_mmServerScripts","bot","imag","lobatos","phpmyadm","Phpmyadmin",

	"PhpMyAdmin","PhpGAdmin","PhpInclude","PhpIncludes","phpscripts","PhpScripts",

	"_vti_txt","cgi-local","cgis","WS_FTP.LOG","User.php","Upload.php","AlbumDB.php",

	"add_comment.php","add_photo.php","admin.php","adm.php","adm.asp","admin.asp","main",

	"web","global","globals","uploader","logon","sign","signin","example","update",

	"readme","client","clients","cmd","logfile","details","shtml","asa","jsa",

	"txt","cfm","sav","nsf","bat","com","exe","dll","reg","tar","tar.gz","tgz",

	"o","sh","member","auth","login.php","user.php","admin.php~","members.php",

	"members.php~","configuration.php~","config.php~","Setting.php~","Settings.php~",

	"Settings_bak.php~","Setting_bak.php~","config-bak.php~","member.php","users.php",

	"webadmin.php","webadmin","miembro","miembros","administrador","administration",

	"config.php.inc","config.php.inc~","configuration.php.inc","configuration.php.inc~",

	"DBConnection.inc","includesDBConnection.inc","includesDBConnection.php.inc");

	foreach $path(@paths){

		chomp($path);

		$code = $ua->get($web . $path)->status_line;

		check_code($code,$path);

	}

}

sub check_code{

	$ncode = shift;

	$path = shift;

	$wp = $webcl . $path;

	if($ncode =~ /200/){

		OUT("$wp\t=>\t200 OK\n");

	}

	if($ncode =~ /401/){

		OUT("$wp\t=>\t401 Authorization Required\n");

	}

	if($ncode =~ /403/){

		OUT("$wp\t=>\t403 Forbidden\n");

	}

	if($ncode =~ /500/){

		OUT("$wp\t=>\t500 Internal Server Error\n");

	}

}

sub clear{

	$website = shift;

	if($website !~ /^http/){

		$website = 'http://' . $website;

	}

	if($website !~ /\/$/){

		$website.='/';

	}

	return $website;

}

sub OUT{

	$msg = shift;

	syswrite STDOUT, "$msg";

}