![]() |
|
[PHP] PHP | Webdav | scanner | Coded by me. - Printable Version +- Hack Forums (https://hackforums.net) +-- Forum: Tech (https://hackforums.net/forumdisplay.php?fid=444) +--- Forum: Coding (https://hackforums.net/forumdisplay.php?fid=151) +---- Forum: Web Development (https://hackforums.net/forumdisplay.php?fid=183) +---- Thread: [PHP] PHP | Webdav | scanner | Coded by me. (/showthread.php?tid=3276638) Pages: Pages
1
2
|
PHP | Webdav | scanner | Coded by me. - radde94 - Feb 21, 2013 Hello, So I was bored, I looked for some webdav exploiter, but I had no time to wait for friends to come online so they could give me it. So I started thinking, at first I did php code for search for random IPs and see if they was up using socket on ip:port, got a lot of IPs and working. After a while I added a function that scanned for ip:port + the folder webdav. The script is very simple to use. Version 1 You need 2 files to get this working. .php file .txt file Code <?phpVersion 2 - PHP You need 2 files to get this working, and 1 database. .php file .txt file Code <?phpVersion 2 - Database Make a database named "anything", do the code below into the database. Code CREATE TABLE `up` (For the .txt just make a empty text document. If running linux don't forget to chmod the .txt file. Enjoy 🤝 * - MrPaxio - Feb 23, 2013 Thanks man :P I've been looking for soooo long. * - Paradigm. - Feb 23, 2013 Doesn't look to bad however the $rand1,$rand2,$rand3 and $rand4 variables should only go up to 255. * - CarrotMilk - Feb 23, 2013 Mannn, indent your code properly, that's an eye-sore 😝 * - Pillows - Feb 23, 2013 You should make sure that the script doesn't scan into local IP's (10, 127, 192, etc), military IPs, and gateways (255). If you're doing this more than once isn't a for loop good for repetitive code? * - radde94 - Feb 23, 2013 (Feb 23, 2013 01:52 PM)Pillows Wrote: You should make sure that the script doesn't scan into local IP's (10, 127, 192, etc), military IPs, and gateways (255). If you're doing this more than once isn't a for loop good for repetitive code? Well, you could recode it for Mysql : Database and use if IP -> Scanned already, skip. If you need that just PM me and I'll help you out. Regards, | Michi * - MrPaxio - Feb 23, 2013 Mine won't output to the logg.txt Ideas? * - csrx - Feb 23, 2013 Thanks for this man very useful i need to try this * - radde94 - Feb 24, 2013 (Feb 23, 2013 11:31 PM)MrPaxio Wrote: Mine won't output to the logg.txt Running linux? chmod it. Also, it need to be in the same folder. It only add to logg.txt if IP is online and folder webdav exist. -- EDIT: Working on a more advanced script, will be 2-3 versions soon enough :) 1 With .txt file 1 With database You can choose between them, also adding a form so you can choose which folder you are going to scan on and what ip ranges :) * - MrPaxio - Feb 24, 2013 (Feb 24, 2013 12:38 AM)| Michi Wrote: Running linux? Really nice :) and I'm on a webhost(Is that alright?) and I chmoded it already to 777. I visit the URL and it rapidly refreshes. but the logg.txt doesn't change even after a hour or so. * - radde94 - Feb 24, 2013 (Feb 24, 2013 12:44 AM)MrPaxio Wrote: Really nice :) and I'm on a webhost(Is that alright?) and I chmoded it already to 777. I visit the URL and it rapidly refreshes. but the logg.txt doesn't change even after a hour or so. It's looking for many ranges, it takes a while before it find a web server with webdav. 🤝 * - DAVEologist - Feb 24, 2013 (Feb 24, 2013 01:33 AM)| Michi Wrote: It's looking for many ranges, it takes a while before it find a web server with webdav. I think your code might have some chances pinging the same IP for a brief period of time. Why don't you try storing what you already pinged using MySQL, or NoSQL so that there will be no repetition of pinging IPs. * - radde94 - Feb 24, 2013 I just release version 2, Have fun guys, took like 5-15 minutes to code it for all of you! It's working good 🤝 (Feb 24, 2013 02:03 AM)DAVEologist Wrote: I think your code might have some chances pinging the same IP for a brief period of time. Why don't you try storing what you already pinged using MySQL, or NoSQL so that there will be no repetition of pinging IPs. Yeah, I fixed it in version 2, It's released on first page, enjoy :) Wait, don't use version 2, found an error. Sorry :( Fixed it, Forgot to add the $result and $row. Should not look for same ip, that is online twice now. Enjoy 🤝 * - ManDoR - Feb 24, 2013 To be honest, even if you're saying you coded it in like 10min, I hope nobody will learn from it. God, you're still using mysql_* or die(), you're not indenting your code... Please at least put some effort in the releases you make. * - DAVEologist - Feb 24, 2013 (Feb 24, 2013 03:50 AM)ManDoR Wrote: To be honest, even if you're saying you coded it in like 10min, I hope nobody will learn from it. God, you're still using mysql_* or die(), you're not indenting your code... Please at least put some effort in the releases you make. I totally agree. Someone could even make this better. (*cough* *cough*) This is a good idea, so please add some effort in your code. |