Scanner Kcfinder

[dotjpeg]

• #!/usr/bin/python
• # -*- coding: utf-8 -*
• #Scanner KCfinder Python2
• # Blog : https://pleace.id
• #####################################
• import requests, re, urllib2, os, sys, codecs, random
• from multiprocessing.dummy import Pool
• from time import time as timer
• import time
• from zlib import compress, decompress
• from platform import system
• from colorama import Fore
• from colorama import Style
• from pprint import pprint
• from colorama import init
• from urlparse import urlparse
• import warnings
• import subprocess
• from requests.packages.urllib3.exceptions import InsecureRequestWarning
• warnings.simplefilter(‘ignore’,InsecureRequestWarning)
• reload(sys)
• sys.setdefaultencoding(‘utf8’)
• init(autoreset=True)
• abang = Fore.RED
• ijo = Fore.GREEN
• putih = Fore.WHITE
• biru = Fore.BLUE
• kuning = Fore.YELLOW
• mbohopo = Fore.MAGENTA
• def cls():
•     linux = ‘clear’
•     windows = ‘cls’
•     os.system([linux, windows][os.name == ‘nt’])
• def print_logo():
•     clear = “\x1b[0m”
•     colors = [36, 32, 34, 35, 31, 37]
•     x = “””
•               Mass Scanner KCfinder – Pleace.id
•                      Python 2.7.17
• “””
•     for N, line in enumerate(x.split(“\n”)):
•         sys.stdout.write(“\x1b[1;%dm%s%s\n” % (random.choice(colors), line, clear))
•         time.sleep(0.05)
• cls()
• print_logo()
• start_raw = raw_input(“\n\033[91mGive,Me List Dear\033[97m:~# \033[97m”)
• crownes = raw_input(“\033[91mthread \033[97m\033[97m:~# \033[97m”)
• try:
•     with open(start_raw, ‘r’) as f:
•         ooo = f.read().splitlines()
• except IOError:
•     pass
• try:
•     ooo = list((ooo))
• except NameError:
•     print ‘\033[31mOpen Your Eyes!’
•     sys.exit()
• count=0
• with open(start_raw,’r’)as f:
•  for line in f:
•     count+=1
• print ‘\x1b[91m[\x1b[92m+\x1b[91m]\x1b[92mTOTAL WEBLIST=’,count
• def kcfinder(url):
• try:
• Agent1 = {‘User-Agent’: ‘Mozilla/5.0 (Linux; Android 10; Redmi Note 9 Pro Build/QKQ1.191215.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/83.0.4103.101 Mobile Safari/537.36’}
• ajg = [‘ckeditor/kcfinder/’,’dist/kcfinder/’,’assets/kcfinder/’,’webboard/plugins/editors/kcfinder/’,’admin/editor/kcfinder/’,’ckeditor/plugins/kcfinder/’,’admin-panel/vendor/kcfinder/’,’assets/plugin/kcfinder/’,’plugins/kcfinder/’,’admin/kcfinder/’,’vendor/kcfinder/’,’painel/kcfinder/’,’panel/kcfinder/’,’yonetim/engine/ckeditor/kcfinder/’,’assets/admin/js/kcfinder/’,’js/kcfinder/’]
• for ajg1 in ajg:
• asu = requests.get(url+’/’+ajg1+’upload.php’,headers=Agent1, timeout=15)
• if “alert(‘Unknown error’)” in asu.content:
• print(url+ ijo + ‘[!] Vuln Kcfinder . . .’)
• open(‘rzlt_kcf.txt’, ‘a’).write(url+’/’+ajg1+’upload.php\n’)
• else:
• print(url+ abang + ‘[!] Not Vuln Kcfinder . . .’)
• except:
• pass
• def Main():
•     try:
•         start = timer()
•         pp = Pool(int(crownes))
•         pr = pp.map(kcfinder, ooo)
•         print(‘TIME TAKE: ‘ + str(timer() – start) + ‘ S’)
•     except:
•         pass
• if __name__ == ‘__main__’:
•     Main()

• This topic was modified 3 weeks ago by dotjpeg. Reason: Tools Scanner Kcfinder

[dotjpeg]

open result : open(‘rzlt_kcf.txt’, ‘a’) , file.txt nya bisa kalian rename & jika vuln file result otomatis create di folder yang sama..

python kcfinder.py

10

list..

[www.pleace.id]

Liputan6.com, Jakarta – Derby dalam sepak bola menghadirkan pertandingan dua tim dengan kedekatan geografis, biasanya kota. Tapi dalam kompetisi regional, lingkup laga tersebut meluas menjadi duel satu negara.

[www.pleace.id]

Liputan6.com, Jakarta – Derby dalam sepak bola menghadirkan pertandingan dua tim dengan kedekatan geografis, biasanya kota. Tapi dalam kompetisi regional, lingkup laga tersebut meluas menjadi duel satu negara.

[sukmawati]

Version: 1.15.2

[Author]

Posts