Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

Admin Panel Finder & Vulnerability Scanner

After such a long time, I can present to you my best project.

This code is an automated tool for finding admin panels and checking vulnerabilities in websites. It is written in Python using asynchronous requests (aiohttp), which makes it fast and efficient.

What can it do?

Admin panel search:
  • Checks a list of 100+ popular paths (e.g. admin, wp-admin, login).

  • Automatically detects a working control panel.



Login Bruteforce:
  • Tries to pick up admin password from an extended list (can be loaded from a file).

  • Added delay between requests to avoid blocking.



Vulnerability Search:
  • SQL injection (SQLi) - checks standard and enhanced payloads.

  • XSS (cross-site scripting) - tests for the possibility of JS code execution.



Logging and reporting:
  • Saves results to scan_results.log file.

  • Outputs color messages to the console (colorama).



Flexible customization:
  • Supports command line arguments (--url, --timeout, --delay).

  • Can be run with different parameters without changing the code.



Example of use:

Code
python admin_finder.py --url desired site --timeout 10 --delay 1.0

Instead of the "desired site", put the site you need to scan

Bottom line:
  • This script is a powerful pentest tool that:

  • Finds hidden admin panels

  • Checks for SQLi/XSS

  • Supports multithreading

  • Flexibly customizable

  • Saves results



Suitable for ethical hacking, security auditing and training.

Base64 encoded link:
aHR0cHM6Ly9wYXN0ZWJpbi5jb20vV1lSaUpBMmI=

Base64 encoded password:
SGFja0ZvcnVtc0hG
CMS detection, subdomain checking, scanning for cPanel port, and searching hosting service for login details are also good methods.
(Apr 5, 2025 04:11 AM)DramaKing Wrote:  CMS detection, subdomain checking, scanning for cPanel port, and searching hosting service for login details are also good methods.

Were you able to get the code? If yes, then all is well. I'm interested, I'll add it soon.
(Apr 5, 2025 08:10 AM)Caboose Wrote:  Code isn’t available, it’s being reviewed on pastebin

Then what am I supposed to do? I just haven't worked with pastebin before


I finished the code and introduced new functions. You can find them on pastebin.

How to use:
Code
pip install aiohttp colorama argparse
- dependency setting

Code
python scanner.py --url web-site --argument
- Starting the scanner

Available command line arguments:
--url Mandatory. Target URL (from http:// or https://) --url web-sit
--timeout Request timeout (default: 5 sec) --timeout 10
--delay Delay between requests (default: 0.5 sec) --delay 1.0
--wordlist Path to file with passwords for bruteforcing --wordlist passwords.txt
--subdomains Path to the file with the list of subdomains --subdomains subdomains.txt
Error, this is a private paste or is pending moderation. If this paste belongs to you, please login to Pastebin to view it.


There are no documents in the website you left behind


Possibly Related Threads...
Thread / Author Replies Views Last Post
by ilyass muslimOct 14, 2026 07:28 PM 1 116 Oct 14, 2026 07:28 PM
Last Post: DramaKing
by UlyanovskDec 23, 2025 08:01 PM 12 972 Dec 23, 2025 08:01 PM
Last Post: Hamedmusa
by lightdutyApr 12, 2025 01:24 PM 1 204 Apr 12, 2025 01:24 PM
Last Post: Al masry