Apr 5, 2025 03:19 AM
(This post was last modified: Apr 5, 2025 03:33 AM by DarkG8.)
After such a long time, I can present to you my best project.
This code is an automated tool for finding admin panels and checking vulnerabilities in websites. It is written in Python using asynchronous requests (aiohttp), which makes it fast and efficient.
What can it do?
Admin panel search:
Login Bruteforce:
Vulnerability Search:
Logging and reporting:
Flexible customization:
Example of use:
Instead of the "desired site", put the site you need to scan
Bottom line:
Suitable for ethical hacking, security auditing and training.
Base64 encoded link:
aHR0cHM6Ly9wYXN0ZWJpbi5jb20vV1lSaUpBMmI=
Base64 encoded password:
SGFja0ZvcnVtc0hG
This code is an automated tool for finding admin panels and checking vulnerabilities in websites. It is written in Python using asynchronous requests (aiohttp), which makes it fast and efficient.
What can it do?
Admin panel search:
- Checks a list of 100+ popular paths (e.g. admin, wp-admin, login).
- Automatically detects a working control panel.
Login Bruteforce:
- Tries to pick up admin password from an extended list (can be loaded from a file).
- Added delay between requests to avoid blocking.
Vulnerability Search:
- SQL injection (SQLi) - checks standard and enhanced payloads.
- XSS (cross-site scripting) - tests for the possibility of JS code execution.
Logging and reporting:
- Saves results to scan_results.log file.
- Outputs color messages to the console (colorama).
Flexible customization:
- Supports command line arguments (--url, --timeout, --delay).
- Can be run with different parameters without changing the code.
Example of use:
Code
python admin_finder.py --url desired site --timeout 10 --delay 1.0Instead of the "desired site", put the site you need to scan
Bottom line:
- This script is a powerful pentest tool that:
- Finds hidden admin panels
- Checks for SQLi/XSS
- Supports multithreading
- Flexibly customizable
- Saves results
Suitable for ethical hacking, security auditing and training.
Base64 encoded link:
aHR0cHM6Ly9wYXN0ZWJpbi5jb20vV1lSaUpBMmI=
Base64 encoded password:
SGFja0ZvcnVtc0hG

