s0md3v / breacher Goto Github PK

View Code? Open in Web Editor NEW

702.0 31.0 247.0 31 KB

An advanced multithreaded admin panel finder written in python.

Home Page: http://teamultimate.in

License: Other

Python 100.00%

python admin-panel cpanl-finder cpanel directory directory-bruteforce

breacher's Introduction

Hi, I'm Somdev

I am a cyber security researcher and programmer.

Do you want to be one too? Check out my advice for learning hacking and programming.

You can support my work with a few bucks, here.

breacher's People

Contributors

Stargazers

Watchers

Forkers

iamaditya-gaur kuteminh11 hectonpdomingos buildgk nycto-hackerone scorpioni4e devils-ey3 samyoyo johnjohnsp1 lw1988 hax0rg1rl techlord-rce selfevo stefanzeng moriarty2016 mypuppet kaicastledine anon0ps ghaspaer totoroha tuian hcary ccavxx johnnash99 oscar3x39 m41doror andrewyrn grukz ch4p34un0ir tobey123 mehrdad-shokri exploitcollection kcsec aglaianwoman zerocry h3di bernadsatriani danxaldanxe alabazatam ro9ueadmin waidakyaw krashman aliadnanaslam xeddmc angeloobeta leiurus17 xtenex sporiyano prodject purplebyteone natrix-fork hybridious ykankaya yashodhank a2wharrison adarshdigievo 4n6strider samjaninf cmscardoso rizzy01 offxec gr3yr0n1n fatnerd abraham313 1firsts strunz983 exploit-inters otaman21 cabralfilho cybernetix-s3c hamzazirh daveleroy64 johndoex1 threatinteltest unforeseenocean modulexcite cmthzn fakegit michyamrane samhaxr muhammeday9un khryptorgraphics zeus911 vhers ibrahimcheik rkreddypandu sagaroffsec ameg-yag benmcewan7e c002 toygang ingramali lucianmaxx marciopocebon bonzedh068 mbrksntrk apsecdev rob-rychs jashim2019 markwh245

breacher's Issues

error with subdomains

I needed to find an admin panel.
This was working : python breacher.py -u http://10.10.10.140
But this was not working: python breacher.py -u http://10.10.10.140/index.php

The admin panel is located at 10.10.10.140/index.php/admin
So I could not find with this tool.

inconsistent use of tabs and spaces in indentation

File "breacher.py", line 69
if 'asp' in type:
^
TabError: inconsistent use of tabs and spaces in indentation

Multi-domain issues

Does it seem to not support multiple domain names?

admin panel founds were blank when open

i used this tool on a site but there were many links found for adim panel but when links were opened th site was blank , whole white.

add sub domain admin panell.

Add please sub domain admin panel.
Path:
admin
login
password
passport
Example: login.example.com or admin.example.com

For someone using the program for the first time unmodified, they might encounter the "inconsistent spacing" python error, don't know if this is a python3 thing or if this error started showing up when you brought python3 compatibility.

Fixed easily by accessing the source code with vim and typing in :
--> :%s/^I/ /g <--

:%s///g

This replaces all tabs with 4 spaces.

P.S Great projects, you should really develop it more, I think it's going to get REALLY popular, it's really cool, good job :)

Syntax Error

File "breacher.py", line 17
\033[37mMade with \033[91m<3\033[37m By D3V\033[1;m"""
^
SyntaxError: Missing parentheses in call to 'print'. Did you mean print("""\033[1;34m______ ______ _______ _______ _______ _ _ _______ ______
|] |/ |______ || | || |______ |/
|] | _ |______ | | |_____ | | |______ | _

                      \033[37mMade with \033[91m<3\033[37m By D3V\033[1;m""")?

Not able to scan sites where port is not 443

bug!???

python2 breacher.py --fast -u "www.test.com.us/tc/"

--------------------------------------------------------------------------

Exception in thread Thread-2:
Traceback (most recent call last):
  File "/data/data/com.termux/files/usr/lib/python2.7/threading.py", line 801, in __bootstrap_inner
    self.run()
  File "/data/data/com.termux/files/usr/lib/python2.7/threading.py", line 754, in run
    self.__target(*self.__args, **self.__kwargs)
  File "breacher.py", line 100, in part2
    scan(links) #calls the scanner
  File "breacher.py", line 52, in scan
    r = requests.get(link) #Requests to the combined url
  File "/data/data/com.termux/files/usr/lib/python2.7/site-packages/requests/api.py", line 75, in get
    return request('get', url, params=params, **kwargs)
  File "/data/data/com.termux/files/usr/lib/python2.7/site-packages/requests/api.py", line 60, in request
    return session.request(method=method, url=url, **kwargs)
  File "/data/data/com.termux/files/usr/lib/python2.7/site-packages/requests/sessions.py", line 533, in request
    resp = self.send(prep, **send_kwargs)
  File "/data/data/com.termux/files/usr/lib/python2.7/site-packages/requests/sessions.py", line 646, in send
    r = adapter.send(request, **kwargs)
  File "/data/data/com.termux/files/usr/lib/python2.7/site-packages/requests/adapters.py", line 516, in send
    raise ConnectionError(e, request=request)
ConnectionError: HTTPConnectionPool(host='www.test.com.ustc', port=80): Max retries exceeded with url: /admin/welcome.php (Caused by NewConnectionError('<urllib3.connection.HTTPConnection object at 0x7248e77e10>: Failed to establish a new connection: [Errno 7] No address associated with hostname',))
Exception in thread Thread-1:
Traceback (most recent call last):
  File "/data/data/com.termux/files/usr/lib/python2.7/threading.py", line 801, in __bootstrap_inner
    self.run()
  File "/data/data/com.termux/files/usr/lib/python2.7/threading.py", line 754, in run
    self.__target(*self.__args, **self.__kwargs)
  File "breacher.py", line 97, in part1
    scan(links) #calls the scanner
  File "breacher.py", line 52, in scan
    r = requests.get(link) #Requests to the combined url
  File "/data/data/com.termux/files/usr/lib/python2.7/site-packages/requests/api.py", line 75, in get
    return request('get', url, params=params, **kwargs)
  File "/data/data/com.termux/files/usr/lib/python2.7/site-packages/requests/api.py", line 60, in request
    return session.request(method=method, url=url, **kwargs)
  File "/data/data/com.termux/files/usr/lib/python2.7/site-packages/requests/sessions.py", line 533, in request
    resp = self.send(prep, **send_kwargs)
  File "/data/data/com.termux/files/usr/lib/python2.7/site-packages/requests/sessions.py", line 646, in send
    r = adapter.send(request, **kwargs)
  File "/data/data/com.termux/files/usr/lib/python2.7/site-packages/requests/adapters.py", line 516, in send
    raise ConnectionError(e, request=request)
ConnectionError: HTTPConnectionPool(host='www.test.com.ustc', port=80): Max retries exceeded with url: /acceso.asp (Caused by NewConnectionError('<urllib3.connection.HTTPConnection object at 0x7248e77c10>: Failed to establish a new connection: [Errno 7] No address associated with hostname',))


$

file robot. txt not fund

is this a bug or am i doing something wrong?

Syntax Error

./breacher.py: line 4: syntax error near unexpected token '('
./breacher.py: line 4: `parser = argparse.ArgumentParser() #defines the parser'

Collaboration Project

Any chance to update this script to python 3?

I am currently working on a python3 project. I could use your script, but it is in python2. In order to have it call your script, I would need it to work on 3.

Links are not working

The links this tools are giving are not working. It just takes me to the home page of the website.

Error in file "breacher.py" on line 17

C:\Users\Foo\Downloads\Breacher-master\Breacher-master>python breacher.py -u foobar.org --type php --fast
File "breacher.py", line 17
\033[37mMade with \033[91m<3\033[37m By D3V\033[1;m"""
^
SyntaxError: Missing parentheses in call to 'print'. Did you mean print("""\033[1;34m______ ______ _______ _______ _______ _ _ _______ ______
|] |/ |______ || | || |______ |/
|] | _ |______ | | |_____ | | |______ | _

                      \033[37mMade with \033[91m<3\033[37m By D3V\033[1;m""")?

No https support

http only, would be nice if it could also do https

some sites don't let you use their port 80 only 443

think it could be fixed by editing (( target = "http://" + ... ))

but again, it would be nice if it had an option from the start for https like an -s flag or something

Timeout

İt gave me a timeout error.

error

Traceback (most recent call last):
File "breacher.py", line 1, in
import requests #module for making request to a webpage
ImportError: No module named requests

halp

Python3.7.3 Linux 2019.2 how to fix this error

File "breacher.py", line 69
if 'asp' in type:
^
TabError: inconsistent use of tabs and spaces in indentation
how to fix this error

Update list path

/adminarea/admin.asp
/showlogin/
/ccms/
/admin2.php
/_adm/
/panel-administracion/login.js
/rcjakar/admin/login.php
/controlpanel/
/macadmin/
/admin/login.cfm
/rcjakar/admin/login.cfm
/moderator/login.asp
/adminarea/index.js
/panel-administracion/admin.js
/adminLogin/
/admin/dash.php
/moderator.js
/login1/
/bb-admin/index.cfm
/siteadmin/login.cfm
/modelsearch/admin.js
/formslogin/
/admin.js
/admin/cpanel.php
/utility_login/
/admincontrol.cfm
/fileadmin.html
/administration/
/admin_login.html
/admloginuser.cgi
/administrator/login.asp
/admin/admin-login.php
/phpSQLiteAdmin/
/admin/controlpanel.cfm
/modelsearch/admin.asp
/admin/adminview.php
/admin/slider.php
/account.php
/adminLogin.cfm
/admin2/
/adminarea/login.cgi
/admin1.asp
/smblogin/
/admin4/
/admin/viewmembers.php
/server/
/siteadmin/index.js
/admin3/
/usuarios/login.php
/admin/index.asp
/administrator/login.html
/admin/login.cgi
/admin_login.cgi
/adm.cgi
/authorize.php
/admins.html
/bb-admin/login.cgi
/memberadmin.php
/panel-administracion/index.js
/login.cgi
/irc-macadmin/
/siteadmin/index.cfm
/usuarios/
/account.html
/logo_sysadmin/
/bb-admin/index.asp
/ur-admin/
/administrator.html
/administrator/
/login.php
/adminpanel.cfm
/adminarea/login.php
/ss_vms_admin_sm/
/admin/home.cfm
/account.js
/admin/add-room.php
/directadmin/
/controlpanel.php
/pages/admin/admin-login.cfm
/admin/admin_login.asp
/administrator/index.cfm
/admin/home.html
/administrator
/admin2/index.cgi
/login-redirect/
/affiliate.cgi
/admin/form.php
/admin-login.cgi
/acceso.php
/admin/add_banner.php/
/modelsearch/login.asp
/admin/account.html
/admin/controlpanel.php
/admin1/
/cp.cfm
/admin/configration.php
/admin/default.php
/bb-admin/login.js
/yonetici.php
/admin/gallery.php
/auth/login/
/admin/adminLogin.html
/admin2/index.cfm
/admincontrol.cgi
/memberadmin.cfm
/login/
/cms/login/
/admin/home.asp
/mag/admin/
/memberadmin/
/project-admins/
/webadmin/index.cfm
/admin_area/login.cgi
/usuarios/login.cgi
/modelsearch/login.php
/WebAdmin/
/panel-administracion/index.html
/rcLogin/
/admin2/login.cfm
/adminpanel.asp
/admin-login.html
/admin/adm.php
/admin/products.php
/cpanel_file/
/admin_area/login.asp
/administrator/account.cgi
/adminLogin.asp
/ezsqliteadmin/
/globes_admin/
/admin_tool/
/SysAdmin2/
/admin_main.html
/admin/admin_users.php
/administrator/login.cgi
/admincontrol.php/
/ccms/index.php
/bb-admin/index.cgi
/sshadmin/
/adm_auth.php
/admin_area/index.js
/modelsearch/admin.cgi
/adminarea/login.js
/admin_area/index.html
/admin/login.html
/adminLogin.cgi
/admin2/login.js
/admin2/index.js
/adm/index.php
/moderator/admin.html
/modelsearch/login.cfm
/phppgadmin/
/ADMIN/login.html
/access.php
/Database_Administration/
/admin_area/admin.asp
/admin/home.cgi
/administrator/account.js
/simpleLogin/
/moderator/admin.js
/cp.cgi
/modelsearch/index.php
/cms/_admin/logon.php
/wp-login.js
/admin1.html
/admin/admin-login.html
/admincontrol.js
/memberadmin.cgi
/server_admin_small/
/admin2/login.php
/adm/index.html
/webadmin/admin.js
/panel-administracion/index.cfm
/pages/admin/admin-login.cgi
/adminpanel.cgi
/admin/login.php
/administratorlogin/
/administrator/login.cfm
/system-administration/
/yonetim.asp
/admin/index-digital.php
/admin/category.php
/pages/admin/admin-login.php
/admin_area/admin.html
/webadmin/admin.cfm
/acceso.js
/webadmin.html
/admloginuser.js
/admin2/login.asp
/administr8/
/admincontrol/login.html
/webadmin.cgi
/admin/account.php
/admin/index_ref.php
/rcjakar/admin/login.cgi
/panelc/
/bb-admin/login.cfm
/webadmin/login.html
/administratorlogin.cgi
/admin.cfm
/admin/log.php
/adm/
/user.js
/adminpanel.html
/administrator/index.asp
/adminarea/admin.js
/administratorlogin.js
/yonetim.php
/administr8.asp
/admin/controlpanel.cgi
/administracion.php
/admin/account.js
/adminarea/index.html
/login.cfm
/myadmin/
/webadmin/login.cfm
/hpwebjetadmin/
/modelsearch/login.js
/cp.php
/webadmin/index.html
/controlpanel.cgi
/administration.html
/administratoraccounts/
/admin/home.php
/admon/
/admincp/login.asp
/webadmin/admin.cgi
/admin/account.cfm
/edit.php
/admin/checklogin.php
/site_admin/login.php
/admin/admin-login.js
/sysadmin.asp
/admin_area/index.php
/administrator/index.cgi
/nsw/admin/login.cfm
/siteadmin/login.asp
/admin/ManageAdmin.php
/radmind-1/
/Server.asp
/administrator.cfm
/account/
/adm/index.js
/cPanel/
/adm/admloginuser.asp
/admin/add_testimonials.php
/admin_panel/
/admin/home.js
/admin_login.php
/admins.php
/admin/admin.cfm
/controlpanel.js
/modelsearch/index.html
/configure/
/admincontrol/login.asp
/admin/index.html
/administrators/
/manuallogin/
/adm/
/dir-login/
/administratorlogin.asp
/admin/save.php
/admin/dashbord.php
/manage_admin.php
/admin/login_success.php
/webmaster/
/admin/index.cgi
/cmsadmin/
/webadmin.php
/admin/headline.php
/links/login.php
/admin/controlpanel.js
/administrator/login.php
/pages/admin/admin-login.asp
/admin/admin.php
/moderator/login.php
/siteadmin/login.html
/admin/manage_team.php
/account.asp
/account.cgi
/cms/admin/
/admin/AdminHome.php
/LiveUser_Admin/
/yonetim.html
/admin/overview.php
/editor/
/modelsearch/admin.php
/admins.asp
/newsadmin/
/webadmin/admin.html
/modelsearch/admin.html
/administration.php
/login.js
/webadmin.js
/admin/adminLogin.cfm
/modelsearch/login.html
/admins/
/panel-administracion/login.html
/ccp14admin/
/access/
/admin_home.php
/adminarea/login.cfm
/Admin/private/
/includes/login.php
/admin/add-slider.php
/admin_area/login.php
/webadmin.asp
/support_login/
/admin-login.php
/admin.cgi
/admincontrol.php
/admin/my_account.php
/cp.html
/admin_login.php]
/ur-admin.php
/base/admin/
/admin_area/admin.cgi
/typo3/
/instadmin/
/admin4_colon/
/usuario/
/controlpanel.html
/webadmin/login.php
/administrivia/
/admin2.html
/admin/
/user.cfm
/administrator/index.js
/admin_area/
/admincontrol/login.js
/ADMIN/
/bb-admin/admin.js
/pureadmin/
/Admin/
/adminarea/
/admincontrol.asp
/sysadmin/
/adminpanel.js
/admin/CPhome.php
/administrator/
/admin/change_gallery.php
/admin/admin-login.cgi
/administrator/account.html
/navSiteAdmin/
/moderator/admin.php
/include/admin.php
/siteadmin/login.js
/customer_login/
/admin/add_gallery_image.php
/fileadmin.php
/admin/voucher.php
/bb-admin/index.js
/admin/login.js
/panel-administracion/index.php
/admin/userpage.php
/usuarios//
/account.cfm
/modelsearch/login.cgi
/cadmins/
/ADMIN/login.php
/db/admin.php
/manager/
/administratorlogin.php
/yonetici.html
/admin-login.php/
/modelsearch/index.cgi
/panel-administracion/login.php
/nsw/admin/login.php
/panel-administracion/
/sys-admin/
/admincontrol/login.cgi
/modelsearch/admin.cfm
/bb-admin/
/adm.cfm
/useradmin/
/admin/admin.cgi
/meta_login/
/acceso.asp
/adm2/
/admincp/index.asp
/administrator.asp
/admin2.cfm
/adm_cp//admin/moderator.php
/user.html
/logins/
/admincontrol/login.cfm
/administrator.js
/adminLogin.js
/bb-admin/index.html
/wizmysqladmin/
/admin/index.js
/admin/adminLogin.php
/adm/index.asp
/banneradmin/
/admin/admin.js
/moderator/login.cgi
/administrator/account.php
/panel-administracion/index.asp
/interactive/admin.php
/login/login.php
/admin/viewblog.php
/forum/admin
/_admin/
/vadmind/
/acceso.cgi
/Lotus_Domino_Admin/
/nsw/admin/login.js
/fileadmin.asp
/wp-login/
/controlpanel.cfm
/Server/
/admin/admin-login.cfm
/database_administration/
/bb-admin/login.php
/evmsadmin/
/admin/main_page.php
/openvpnadmin/
/_administrator/
/admin/control_pages/admin_home.php
/admin/cp.asp
/adminarea/admin.cfm
/admin_area/login.js
/adm_auth.cgi
/moderator.php/
/adm.asp
/home.php
/admin_login.cfm
/adm/admloginuser.js
/panel-administracion/login.cfm
/admin/add.php
/adminpanel/
/controlpanel.asp
/admin/adminLogin.js
/site/admin/
/adm.js
/Server.html
/admin/list_gallery.php
/moderator/admin.cfm
/webadmin/index.cgi
/rcjakar/admin/login.js
/pages/admin/admin-login.js
/admincp/index.html
/adminarea/admin.php
/adm/index.cgi
/affiliate.cfm
/adminarea/login.html
/websvn/
/admin.php
/siteadmin/index.php
/home.cfm
/Super-Admin/
/SysAdmin/
/adminarea/index.cfm
/bb-admin/admin.html
/cms/
/administrator.cgi
/adm.html
/yonetici.asp
/admin/loginsuccess.php
/bb-admin/admin.asp
/adm/admloginuser.cfm
/admin/upload.php
/admin/welcome.php
/cp.js
/admin/admin-login.asp
/ur-admin.html
/webadmin/admin.asp
/admin/cp.cgi
/admin/welcomepage.php
/administr8.php
/admin/index.php
/panel-administracion/admin.asp
/ADMON/
/AdminTools/
/admin/account.asp
/administr8.html
/affiliate.asp
/administratorlogin.cfm
/moderator/admin.cgi
/admin/adminLogin.cgi
/loginflat/
/logon/
/admin/cp.js
/admin2.cgi
/ccms/login.php
/adm/index.cfm
/admin_panel.html
/adminarea/admin.html
/panel-administracion/login.asp
/sysadmin.html
/Server.php
/administrador/
/memberadmin.asp
/admin/login.asp
/webadmin/index.js
/login-us/
/user.cgi
/panel-administracion/index.cgi
/admin/initialadmin.php
/webadmin/login.asp
/modelsearch/index.asp
/bb-admin/admin.php
/admin2/index.asp
/admin/admin_login.js
/admin2.asp
/panel.php
/memberadmin.js
/admin/main.php/
/admin/myaccount.php
/admin_area/login.html
/bigadmin/
/login.asp
/admin/
/adminarea/index.php
/admin/admin_management.php
/moderator/
/admin2/login.cgi
/fileadmin/
/modelsearch/index.cfm
/login.html
/admin/addblog.php
/wplogin/
/admin/dashboard.php
/administrator/index.php
/adminarea/login.asp
/bb-admin/index.php
/admin/specializations.php
/adminarea/admin.cgi
/webadmin/login.js
/admin_area/admin.js
/adm_auth.js
/wp-admin/
/adminLogin.html
/admin/admin_login.cfm
/bb-admin/login.asp
/moderator.asp
/panel-administracion/admin.html
/admin/uhome.html
/adminarea/index.cgi
/admin/cp.php
/login_db/
/admin/login-home.php
/admloginuser.asp
/affiliate.php
/admin_login.js
/moderator/login.js
/panel-administracion/login.cgi
/vmailadmin/
/moderator.cgi
/bbadmin/
/admin/banner.php
/moderator/admin.asp
/siteadmin/
/admloginuser.cfm
/configuration/
/autologin/
/admin/event.php
/home.html
/admin2/index.php
/admincontrol/login.php
/admloginuser.php
/administrator/login.js
/ServerAdministrator/
/admin/dashboard/index.php
/adm_auth.asp
/admin2.js
/moderator/login.html
/admin/admin_login.cgi
/admin_area/index.cgi
/admin5/
/webadmin.cfm
/adm/admloginuser.php
/admin/adminLogin.asp
/power_user/
/adm/admloginuser.cgi
/moderator.cfm
/members/
/admin/banners_report.php
/admin_area/login.cfm
/admincontrol.html
/siteadmin/login.php
/modelsearch/index.js
/admin/member_home.php
/admin/admin/
/bb-admin/login.html
/moderator.php
/system_administration/
/admin.html
/admin/account.cgi
/home.cgi
/admin/adminarea.php
/admin/login
/xlogin/
/affiliate.js
/home.js
/nsw/admin/login.cgi
/sysadmin.php
/administrator/index.html
/admin/product.php
/admin/enter.php
/siteadmin/index.asp
/webadmin/
/wp-login.php
/usuarios/login.js
/admin/controlpanel.html
/admin-login.asp
/panel-administracion/admin.php
/user.asp
/webadmin/admin.php
/admin_area/admin.cfm
/adm.php
/admin/controlpanel.asp
/panel/
/admin/index.cfm
/moderator.html
/UserLogin/
/admin/admin_index.php
/sql-admin/
/sub-login/
/admin/pages/home_admin.php
/admin/admin_login.php
/radmind/
/administratie/
/administrator.php
/home.asp
/admin_area/index.cfm
/acceso.cfm
/usuarios/login.cfm
/admin.asp
/admin_area/admin.php
/administrator/account.cfm
/admin/AdminDashboard.php
/admin/page_management.php
/adminpanel.php
/adminpro/
/admin4_account/
/adminarea/index.asp
/siteadmin/login.cgi
/admin1.php
/ur-admin.asp
/siteadmin/index.cgi
/admin_area/index.asp
/phpmyadmin/
/bb-admin/admin.cgi
/acct_login/
/admin2/index/
/admin/admin.html
/panel-administracion/admin.cgi
/AdminWeb/
/phpldapadmin/
/admin/leads.php
/staradmin/
/sysadmins/
/admin/manageImages.php
/pma/
/admin/cp.html
/user.php
/wp-login.cfm
/Indy_admin/
/platz_login/
/webadmin/index.asp
/pgadmin/
/moderator/login.cfm
/administrator/account.asp
/admin/admin_login.html
/webadmin/index.php
/admin/admin-home.php
/admin_login.asp
/admin/cp.cfm
/manager/ispmgr/
/administer/
/adm_auth.cfm
/webadmin/login.cgi
/pages/admin/admin-login.html
/blogindex/
/admin-login.cfm
/admin-login.js
/adminLogin.php
/admin/admin.asp
/maintenance/
/auth/
/paneldecontrol/
/bb-admin/admin.cfm
/panel-administracion/admin.cfm
/cp.asp
/memlogin/
/wp-login.cgi
/cpanel/

put break

need to stop checking after valid path found.otherwise its keep going loop

print ' \033[1;32m[+]\033[0m Admin panel found: %s'% link

                    raw_input("Found: Nothing is Impossible")

Error in code

I got this error while scanning a website and as my knowledge from python the problem is from code not my device