+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: ▒▒[Tool]*Preview*-UnSp0k3n Admin Page Finder-[Alot of Features][NoobFriendly]▒▒ (/showthread.php?tid=2368870)
▒▒[Tool]*Preview*-UnSp0k3n Admin Page Finder-[Alot of Features][NoobFriendly]▒▒ - BeggFoMercy - Apr 4, 2012
Hello HF
Some days ago , I have decided to Code an Admin page finder With some features ... Still adding some though This one has a diff system , Because it doesnt look for Dir's As what Havij Does and checks the response
Features:
1-This one doesnt check for responses as havij's , Cus that will flood you with forbidden and shit , This one Searches on the web server for Specific Part That contain username/password boxes And leads you to it By showing you the link :)
2-Ability to Ping the web site to check if its up or down or Doesnt exist
3-Commands system ;)
4-This one is purely coded in python
Needed Programs:
1-Python 2.7 Will add the link when i release it , And the mediafire downloading link of the tool , And a "how to use it"
Pictures :
![[Image: uw5Gr.png]](https://i.imgur.com/uw5Gr.png)
This is how it fetch the Login pages .
![[Image: IhLTi.png]](https://i.imgur.com/IhLTi.png)
This is how the pinging tab looks like
![[Image: 9R4aN.png]](https://i.imgur.com/9R4aN.png)
At last i would like to give some shout outs :
1-Team Intra, Inj3ctors
2-Rhynorater
3-The Hydra
Thanks for viewing my thread 👍
Features:
1-This one doesnt check for responses as havij's , Cus that will flood you with forbidden and shit , This one Searches on the web server for Specific Part That contain username/password boxes And leads you to it By showing you the link :)
2-Ability to Ping the web site to check if its up or down or Doesnt exist
3-Commands system ;)
4-This one is purely coded in python
Needed Programs:
1-Python 2.7 Will add the link when i release it , And the mediafire downloading link of the tool , And a "how to use it"
Pictures :
This is how it fetch the Login pages .
This is how the pinging tab looks like
At last i would like to give some shout outs :
1-Team Intra, Inj3ctors
2-Rhynorater
3-The Hydra
Thanks for viewing my thread 👍
* - joomlafkr - Apr 4, 2012
Nicely done ,maybe you can add the bruteforce check (as you said havij-like) with a big admin list !
so if your method doesn't give results it can start bruteforcing with many threads.
so it would be the best admin page fetcher so far !
* - BeggFoMercy - Apr 4, 2012
Great Idea dude , I also was thinking of SQLi vulnerability checker , :D
Im expanding it to look for more diff types of languages , Like username password boxes in germany and shit
* - zer0pwn - Apr 4, 2012
Nice.
Try something like an SQLi finder, there's too many of these around.
But don't get me wrong, it looks very good :)
* - Hooded Robin - Apr 4, 2012
love that its python based, looks nice from start. As joomlafkr has mentioned I would use both methods to find panels as i don't think your form finding method will work on all sites (just have this nagging suspicion, but you could be on to something). Also suggest you add a sub-domain checker as well, occasionally you can find mail logins and the occasionally moved admin login (i.e. mail.site.com or admin.site.com). Possibly a reverse IP lookup to check shared hosting quickly...if you asking for additional ideas which would keep aligned with general theme. that's my 02...
* - BeggFoMercy - Apr 4, 2012
(Apr 4, 2012 05:56 PM)Hooded Robin Wrote: love that its python based, looks nice from start. As joomlafkr has mentioned I would use both methods to find panels as i don't think your form finding method will work on all sites (just have this nagging suspicion, but you could be on to something). Also suggest you add a sub-domain checker as well, occasionally you can find mail logins and the occasionally moved admin login (i.e. mail.site.com or admin.site.com). Possibly a reverse IP lookup to check shared hosting quickly...if you asking for additional ideas which would keep aligned with general theme. that's my 02...Correct dude , I love your brain :D <3 , i have tryed over 80 web sites with different kinds on the admin page finder it worked on 71 web sites but the other 9 were not in english , thats what im trying to cover now , And i also built SQL vulnerability checker
* - kamz89 - Apr 4, 2012
Awesome tool. When do you plan on releasing it?
* - BeggFoMercy - Apr 5, 2012
(Apr 4, 2012 07:48 PM)Kamz89 Wrote: Awesome tool. When do you plan on releasing it?Adding features to it and designing it , So it would take 1 more day or some thing :D " thinking of making a login system For ProZ"
* - Sw1x - Apr 5, 2012
Nice work bro, keep it up. :)
Hopefully you'll release this quickly. :)
* - BeggFoMercy - Apr 5, 2012
Ofc dude ill release it quickly , But im adding some SQLI vulnerablility checker, Editing the design etc.
* - -White Power- - Apr 5, 2012
I am going to try this out ina bit im on phonr
* - kamz89 - Apr 5, 2012
(Apr 5, 2012 05:00 AM)BeggFoMercy Wrote: Adding features to it and designing it , So it would take 1 more day or some thing :D " thinking of making a login system For ProZ"
Not bad, by the way send me a msg on skype. I need to clear out skids and inactive people.
* - khaz - Apr 6, 2012
Nice BeggFoMercy i like the idea, Ive spent some time finding admin page.
This gonna save us moar time
* - t0Xin - Apr 10, 2012
Great tool. I can't wait for the release.
* - SleazeBeez - Apr 10, 2012
yeah, seems awesome!! can't wait to try it !