1 reply to this topic

[Exynos]

Dorkgen  -  hier ein kleines simples PHP script 

<?php
echo "<form method='POST'>";
echo "<textarea name='dorks' cols='20' rows='20'></textarea>";
echo "<br><br><input type='submit'></form>";

if ($_POST) {
	$arr_query = explode("\r\n", $_POST['dorks']);
	if (count($arr_query) > 25) {
		echo "error: max 25 queries";
		die;
	}
	
	$i = 0;
	$stop = count($arr_query);
	
	while ($i != $stop) {
		if (strlen($arr_query[$i]) > 25) {
			echo "error: max 25 digits in query";
			die;
		}
		$i++;
	}
	$ok = 1;
}

if ($ok) {
	$arr_ext = array("ASPX", "Asp", "AxCMS", "CAD", "GBL", "ashx", "asmx", "asp", "aspx", "axd", "bon", "c", "cfm", "cgi", "cmd", "cms", "cmt", "do", "doc", "ece", "exe", "ftl", "htm", "htn", "ipm", "jhtml", "jpg", "jsf", "jsp", "jspz", "mvc", "page", "pdf", "pdfx", "php3", "php4", "php5", "php", "phtml", "pl", "plg", "py", "shtml", "tld", "tpl", "wml", "wss", "xhtml", "xlsx", "xml", "xsql");
	$arr_get = array("kasse", "query", "payment", "id", "get", "CartID", "do", "USERID", "login");
	$arr_pages = array("index", "index5", "index4", "index3", "buy", "catalog/product", "search", "login", "order", "b2b_marketplace", "b2b", "bank", "customer", "user", "basket", "forum", "board", "checkout", "pagina", "shop");

	$result = array();

	foreach($arr_pages as $pages)
	{
		foreach($arr_ext as $ext)
		{
			foreach($arr_query as $query)
			{
				foreach($arr_get as $get)
				{
					array_push($result, 'inurl:' . $pages . ' & ' . $get . ' filetype:' . $ext . ' intext:"' . $query . '"');
				}
			}
		}
	}
	
	$dorks = implode("\r\n", $result);
	echo "<textarea cols='100' rows='20'>".$dorks."</textarea>";
}

?>

[Payload]

Nette Idee! Wenn man mal auf die schnelle etwas mehr Dorks generieren will eine gute Lösung.

Für mich als php Anfänger besonders interessant.