Version Tk de un programa en Perl para buscar el famoso panel de admin.
Una imagen
(http://doddyhackman.webcindario.com/images/panelnew.jpg)
El codigo
#!usr/bin/perl
#Panel Control 0.3
#Version Tk
#Coded By Doddy H
#The arrays are a collection of several I found on the web
use Tk;
use Tk::Dialog;
use LWP::UserAgent;
my @paneles = (
'admin/admin.asp', 'admin/login.asp',
'admin/index.asp', 'admin/admin.aspx',
'admin/login.aspx', 'admin/index.aspx',
'admin/webmaster.asp', 'admin/webmaster.aspx',
'asp/admin/index.asp', 'asp/admin/index.aspx',
'asp/admin/admin.asp', 'asp/admin/admin.aspx',
'asp/admin/webmaster.asp', 'asp/admin/webmaster.aspx',
'admin/', 'login.asp',
'login.aspx', 'admin.asp',
'admin.aspx', 'webmaster.aspx',
'webmaster.asp', 'login/index.asp',
'login/index.aspx', 'login/login.asp',
'login/login.aspx', 'login/admin.asp',
'login/admin.aspx', 'administracion/index.asp',
'administracion/index.aspx', 'administracion/login.asp',
'administracion/login.aspx', 'administracion/webmaster.asp',
'administracion/webmaster.aspx', 'administracion/admin.asp',
'administracion/admin.aspx', 'php/admin/',
'admin/admin.php', 'admin/index.php',
'admin/login.php', 'admin/system.php',
'admin/ingresar.php', 'admin/administrador.php',
'admin/default.php', 'administracion/',
'administracion/index.php', 'administracion/login.php',
'administracion/ingresar.php', 'administracion/admin.php',
'administration/', 'administration/index.php',
'administration/login.php', 'administrator/index.php',
'administrator/login.php', 'administrator/system.php',
'system/', 'system/login.php',
'admin.php', 'login.php',
'administrador.php', 'administration.php',
'administrator.php', 'admin1.html',
'admin1.php', 'admin2.php',
'admin2.html', 'yonetim.php',
'yonetim.html', 'yonetici.php',
'yonetici.html', 'adm/',
'admin/account.php', 'admin/account.html',
'admin/index.html', 'admin/login.html',
'admin/home.php', 'admin/controlpanel.html',
'admin/controlpanel.php', 'admin.html',
'admin/cp.php', 'admin/cp.html',
'cp.php', 'cp.html',
'administrator/', 'administrator/index.html',
'administrator/login.html', 'administrator/account.html',
'administrator/account.php', 'administrator.html',
'login.html', 'modelsearch/login.php',
'moderator.php', 'moderator.html',
'moderator/login.php', 'moderator/login.html',
'moderator/admin.php', 'moderator/admin.html',
'moderator/', 'account.php',
'account.html', 'controlpanel/',
'controlpanel.php', 'controlpanel.html',
'admincontrol.php', 'admincontrol.html',
'adminpanel.php', 'adminpanel.html',
'admin1.asp', 'admin2.asp',
'yonetim.asp', 'yonetici.asp',
'admin/account.asp', 'admin/home.asp',
'admin/controlpanel.asp', 'admin/cp.asp',
'cp.asp', 'administrator/index.asp',
'administrator/login.asp', 'administrator/account.asp',
'administrator.asp', 'modelsearch/login.asp',
'moderator.asp', 'moderator/login.asp',
'moderator/admin.asp', 'account.asp',
'controlpanel.asp', 'admincontrol.asp',
'adminpanel.asp', 'fileadmin/',
'fileadmin.php', 'fileadmin.asp',
'fileadmin.html', 'administration.html',
'sysadmin.php', 'sysadmin.html',
'phpmyadmin/', 'myadmin/',
'sysadmin.asp', 'sysadmin/',
'ur-admin.asp', 'ur-admin.php',
'ur-admin.html', 'ur-admin/',
'Server.php', 'Server.html',
'Server.asp', 'Server/',
'wp-admin/', 'administr8.php',
'administr8.html', 'administr8/',
'administr8.asp', 'webadmin/',
'webadmin.php', 'webadmin.asp',
'webadmin.html', 'administratie/',
'admins/', 'admins.php',
'admins.asp', 'admins.html',
'administrivia/', 'Database_Administration/',
'WebAdmin/', 'useradmin/',
'sysadmins/', 'admin1/',
'system-administration/', 'administrators/',
'pgadmin/', 'directadmin/',
'staradmin/', 'ServerAdministrator/',
'SysAdmin/', 'administer/',
'LiveUser_Admin/', 'sys-admin/',
'typo3/', 'panel/',
'cpanel/', 'cPanel/',
'cpanel_file/', 'platz_login/',
'rcLogin/', 'blogindex/',
'formslogin/', 'autologin/',
'support_login/', 'meta_login/',
'manuallogin/', 'simpleLogin/',
'loginflat/', 'utility_login/',
'showlogin/', 'memlogin/',
'members/', 'login-redirect/',
'sub-login/', 'wp-login/',
'login1/', 'dir-login/',
'login_db/', 'xlogin/',
'smblogin/', 'customer_login/',
'UserLogin/', 'login-us/',
'acct_login/', 'admin_area/',
'bigadmin/', 'project-admins/',
'phppgadmin/', 'pureadmin/',
'sql-admin/', 'radmind/',
'openvpnadmin/', 'wizmysqladmin/',
'vadmind/', 'ezsqliteadmin/',
'hpwebjetadmin/', 'newsadmin/',
'adminpro/', 'Lotus_Domino_Admin/',
'bbadmin/', 'vmailadmin/',
'Indy_admin/', 'ccp14admin/',
'irc-macadmin/', 'banneradmin/',
'sshadmin/', 'phpldapadmin/',
'macadmin/', 'administratoraccounts/',
'admin4_account/', 'admin4_colon/',
'radmind-1/', 'Super-Admin/',
'AdminTools/', 'cmsadmin/',
'SysAdmin2/', 'globes_admin/',
'cadmins/', 'phpSQLiteAdmin/',
'navSiteAdmin/', 'server_admin_small/',
'logo_sysadmin/', 'server/',
'database_administration/', 'power_user/',
'system_administration/', 'ss_vms_admin_sm/'
);
my $nave = LWP::UserAgent->new();
$nave->timeout(5);
$nave->agent(
"Mozilla/5.0 (Windows; U; Windows NT 5.1; nl; rv:1.8.1.12) Gecko/20080201Firefox/2.0.0.12"
);
#if ($^O eq 'MSWin32') {
#use Win32::Console;
#Win32::Console::Free();
#}
my $color_texto = "red";
my $color_fondo = "black";
my $newdaxz =
MainWindow->new( -background => $color_fondo, -foreground => $color_texto );
$newdaxz->title("Panel Control 0.3 || Coded By Doddy H");
$newdaxz->geometry("345x350+50+50");
$newdaxz->resizable( 0, 0 );
$menula = $newdaxz->Frame(
-relief => "sunken",
-bd => 1,
-background => $color_fondo,
-foreground => $color_texto
);
my $menulnowaxm = $menula->Menubutton(
-text => "Options",
-underline => 1,
-background => $color_fondo,
-foreground => $color_texto,
-activebackground => $color_texto
)->pack( -side => "left" );
my $aboutnowaxm = $menula->Menubutton(
-text => "About",
-underline => 1,
-background => $color_fondo,
-foreground => $color_texto,
-activebackground => $color_texto
)->pack( -side => "left" );
my $exitnowaxm = $menula->Menubutton(
-text => "Exit",
-underline => 1,
-background => $color_fondo,
-foreground => $color_texto,
-activebackground => $color_texto
)->pack( -side => "left" );
$menula->pack( -side => "top", -fill => "x" );
$menulnowaxm->command(
-label => "Scan",
-background => $color_fondo,
-foreground => $color_texto,
-command => \&findpanel
);
$menulnowaxm->command(
-label => "Open Logs",
-background => $color_fondo,
-foreground => $color_texto,
-command => \&openlogsk
);
$aboutnowaxm->command(
-label => "About",
-background => $color_fondo,
-foreground => $color_texto,
-command => \&aboutxa
);
$exitnowaxm->command(
-label => "Exit",
-background => $color_fondo,
-foreground => $color_texto,
-command => \&exitnow
);
$newdaxz->Label(
-text => "Page : ",
-font => "Impact",
-background => $color_fondo,
-foreground => $color_texto
)->place( -x => 20, -y => 40 );
my $paget = $newdaxz->Entry(
-width => 40,
-background => $color_fondo,
-foreground => $color_texto
)->place( -x => 70, -y => 45 );
$newdaxz->Label(
-text => "Panels Found",
-font => "Impact",
-background => $color_fondo,
-foreground => $color_texto
)->place( -x => 120, -y => 80 );
my $admins = $newdaxz->Listbox(
-width => 40,
-height => 10,
-background => $color_fondo,
-foreground => $color_texto
)->place( -x => 50, -y => 130 );
$newdaxz->Label(
-text => "Status : ",
-font => "Impact",
-background => $color_fondo,
-foreground => $color_texto
)->place( -x => 63, -y => 300 );
my $tatus = $newdaxz->Entry(
-width => 25,
-background => $color_fondo,
-foreground => $color_texto
)->place( -x => 120, -y => 305 );
$admins->bind( "<Double-1>", [ \&loader ] );
MainLoop;
sub findpanel {
my $hage = $paget->get;
$admins->delete( "0.0", "end" );
$tatus->configure( -text => "Starting" );
for my $path (@paneles) {
$newdaxz->update;
$tatus->configure( -text => $path );
$code = tomados( $hage . "/" . $path );
if ( $code->is_success ) {
$controlt = 1;
$admins->insert( "end", $hage . "/" . $path );
savefile( "admins-founds.txt", $hage . "/" . $path );
}
}
if ( $controlt ne 1 ) {
$newdaxz->Dialog(
-title => "Error",
-buttons => ["OK"],
-text => "Not found anything",
-background => $color_fondo,
-foreground => $color_texto,
-activebackground => $color_texto
)->Show();
}
$tatus->configure( -text => "Finished" );
}
sub loader {
$adminsa = $admins->curselection();
for my $id (@$adminsa) {
my $linkar = $admins->get($id);
system("start firefox $linkar");
}
}
sub openlogsk {
my $f = "admins-founds.txt";
if ( -f $f ) {
system($f);
}
else {
$newdaxz->Dialog(
-title => "Error",
-buttons => ["OK"],
-text => "File Not Found",
-background => $color_fondo,
-foreground => $color_texto,
-activebackground => $color_texto
)->Show();
}
}
sub aboutxa {
$newdaxz->Dialog(
-title => "About",
-buttons => ["OK"],
-text => "Coded By Doddy H",
-background => $color_fondo,
-foreground => $color_texto,
-activebackground => $color_texto
)->Show();
}
sub exitnow {
exit 1;
}
sub savefile {
open( SAVE, ">>" . $_[0] );
print SAVE $_[1] . "\n";
close SAVE;
}
sub tomados {
return $nave->get( $_[0] );
}
sub repes {
my @limpio;
foreach $test (@_) {
push @limpio, $test unless $repe{$test}++;
}
return @limpio;
}
#The End ?
Gracias, estoy sirve mucho, ya que muchos pagina no llegan a ser vulneradas ya que no llegamos a encontrar el panel de administracion xD
Saludos,, Cronos.-
como se usa??? tengo backtrack 5r3
Copias el contenido y guardas el archivo con extencion .pl. Luego desde la terminal ingresas al directorio donde guardaste el archivo y lo ejecutas de la siguiente manera:
perl archivoCopiado.pl
Aunque estoy seguro que no funcionara ya que tienes que instalar los módulos Tk y Tk::Dialog. Ya que este script no esta utilizando modulos estándar de Perl.
Perl Standard Modules (http://perldoc.perl.org/perlmodlib.html#Standard-Modules)
Saludos.
sip , me olvide de mencionar que solo funciona en Windows debido a que soy windosero a muerte xDD , ademas el activeperl que estoy usando en mi windows seven si trae por defecto Tk.
lo probe con ubuntu despues de instalar los modulos de Tk y funciona pero se ve todo corrido y mal.