Hack Forums
Admin Panel Finder & Vulnerability Scanner - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Hacking Tools and Programs (https://hackforums.net/forumdisplay.php?fid=10)
+---- Thread: Admin Panel Finder & Vulnerability Scanner (/showthread.php?tid=6295672)

Admin Panel Finder & Vulnerability Scanner - DarkG8 - Apr 5, 2025

After such a long time, I can present to you my best project.

This code is an automated tool for finding admin panels and checking vulnerabilities in websites. It is written in Python using asynchronous requests (aiohttp), which makes it fast and efficient.

What can it do?

Admin panel search:
  • Checks a list of 100+ popular paths (e.g. admin, wp-admin, login).

  • Automatically detects a working control panel.



Login Bruteforce:
  • Tries to pick up admin password from an extended list (can be loaded from a file).

  • Added delay between requests to avoid blocking.



Vulnerability Search:
  • SQL injection (SQLi) - checks standard and enhanced payloads.

  • XSS (cross-site scripting) - tests for the possibility of JS code execution.



Logging and reporting:
  • Saves results to scan_results.log file.

  • Outputs color messages to the console (colorama).



Flexible customization:
  • Supports command line arguments (--url, --timeout, --delay).

  • Can be run with different parameters without changing the code.



Example of use:

Code
python admin_finder.py --url desired site --timeout 10 --delay 1.0

Instead of the "desired site", put the site you need to scan

Bottom line:
  • This script is a powerful pentest tool that:

  • Finds hidden admin panels

  • Checks for SQLi/XSS

  • Supports multithreading

  • Flexibly customizable

  • Saves results



Suitable for ethical hacking, security auditing and training.

Base64 encoded link:
aHR0cHM6Ly9wYXN0ZWJpbi5jb20vV1lSaUpBMmI=

Base64 encoded password:
SGFja0ZvcnVtc0hG

RE: Admin Panel Finder & Vulnerability Scanner - DramaKing - Apr 5, 2025

CMS detection, subdomain checking, scanning for cPanel port, and searching hosting service for login details are also good methods.

RE: Admin Panel Finder & Vulnerability Scanner - DarkG8 - Apr 5, 2025

(Apr 5, 2025 04:11 AM)DramaKing Wrote:  CMS detection, subdomain checking, scanning for cPanel port, and searching hosting service for login details are also good methods.

Were you able to get the code? If yes, then all is well. I'm interested, I'll add it soon.

RE: Admin Panel Finder & Vulnerability Scanner - DarkG8 - Apr 5, 2025

(Apr 5, 2025 08:10 AM)Caboose Wrote:  Code isn’t available, it’s being reviewed on pastebin

Then what am I supposed to do? I just haven't worked with pastebin before

I finished the code and introduced new functions. You can find them on pastebin.

How to use:
Code
pip install aiohttp colorama argparse
- dependency setting

Code
python scanner.py --url web-site --argument
- Starting the scanner

Available command line arguments:
--url Mandatory. Target URL (from http:// or https://) --url web-sit
--timeout Request timeout (default: 5 sec) --timeout 10
--delay Delay between requests (default: 0.5 sec) --delay 1.0
--wordlist Path to file with passwords for bruteforcing --wordlist passwords.txt
--subdomains Path to the file with the list of subdomains --subdomains subdomains.txt

RE: Admin Panel Finder & Vulnerability Scanner - y743761 - Jun 13, 2025

Error, this is a private paste or is pending moderation. If this paste belongs to you, please login to Pastebin to view it.

There are no documents in the website you left behind