Ross Marks

Fork: 0

0xRoM / Pwnfind

Browse code first update in YEARS master
1 parent e9ea9ce commit 7b6eee3d467f024bc3113da274d6b094022d22db root authored on 16 Apr 2020

Patch

Unified Split

Showing 1 changed file

                Ignore Space
               Show notes
              View
            
          
          9 ■■■■■
          pwnfind.pl
             #!/usr/bin/perl
# By NaN
# By 0xRoM
use strict;
use warnings;
use Getopt::Long;
 
                system("find $src -name '*.$tryext' -print | xargs grep -n '_SERVER' >> $dest/request_vars_server.txt");
 
                print "         Locating PHP object injection\n";
                system("find $src -name '*.$tryext' -print | xargs grep -n 'unserialize(' >> $dest/unserialize.txt");
 
                print "         Locating SSRF\n";
                system("find $src -name '*.$tryext' -print | xargs grep -n 'file_get_contents(' >> $dest/ssrf.txt");
		system("find $src -name '*.$tryext' -print | xargs grep -n 'fopen(' >> $dest/ssrf.txt");
                system("find $src -name '*.$tryext' -print | xargs grep -n 'fsockopen(' >> $dest/ssrf.txt");
		system("find $src -name '*.$tryext' -print | xargs grep -n 'curl_exec(' >> $dest/ssrf.txt");
		system("find $src -name '*.$tryext' -print | xargs grep -n 'parse_url(' >> $dest/ssrf.txt");
 
                print "         Locating command execution\n";
                system("find $src -name '*.$tryext' -print | xargs grep -n 'exec(' >> $dest/cmd_exec_exec.txt");
                system("find $src -name '*.$tryext' -print | xargs grep -n 'system(' >> $dest/cmd_exec_system.txt");
 #!/usr/bin/perl
+# By NaN
+# By 0xRoM
 use strict;
 use warnings;
 use Getopt::Long;
                 system("find $src -name '*.$tryext' -print | xargs grep -n '_SERVER' >> $dest/request_vars_server.txt");
                 print "         Locating PHP object injection\n";
                 system("find $src -name '*.$tryext' -print | xargs grep -n 'unserialize(' >> $dest/unserialize.txt");
+                print "         Locating SSRF\n";
+                system("find $src -name '*.$tryext' -print | xargs grep -n 'file_get_contents(' >> $dest/ssrf.txt");
+		system("find $src -name '*.$tryext' -print | xargs grep -n 'fopen(' >> $dest/ssrf.txt");
+                system("find $src -name '*.$tryext' -print | xargs grep -n 'fsockopen(' >> $dest/ssrf.txt");
+		system("find $src -name '*.$tryext' -print | xargs grep -n 'curl_exec(' >> $dest/ssrf.txt");
+		system("find $src -name '*.$tryext' -print | xargs grep -n 'parse_url(' >> $dest/ssrf.txt");
                 print "         Locating command execution\n";
                 system("find $src -name '*.$tryext' -print | xargs grep -n 'exec(' >> $dest/cmd_exec_exec.txt");
                 system("find $src -name '*.$tryext' -print | xargs grep -n 'system(' >> $dest/cmd_exec_system.txt");

Show line notes below