diff --git a/pwnfind.pl b/pwnfind.pl index 6e72ed2..bbc3296 100755 --- a/pwnfind.pl +++ b/pwnfind.pl @@ -1,5 +1,5 @@ #!/usr/bin/perl -# By NaN +# By 0xRoM use strict; use warnings; use Getopt::Long; @@ -78,6 +78,13 @@ print " Locating PHP object injection\n"; system("find $src -name '*.$tryext' -print | xargs grep -n 'unserialize(' >> $dest/unserialize.txt"); + print " Locating SSRF\n"; + system("find $src -name '*.$tryext' -print | xargs grep -n 'file_get_contents(' >> $dest/ssrf.txt"); + system("find $src -name '*.$tryext' -print | xargs grep -n 'fopen(' >> $dest/ssrf.txt"); + system("find $src -name '*.$tryext' -print | xargs grep -n 'fsockopen(' >> $dest/ssrf.txt"); + system("find $src -name '*.$tryext' -print | xargs grep -n 'curl_exec(' >> $dest/ssrf.txt"); + system("find $src -name '*.$tryext' -print | xargs grep -n 'parse_url(' >> $dest/ssrf.txt"); + print " Locating command execution\n"; system("find $src -name '*.$tryext' -print | xargs grep -n 'exec(' >> $dest/cmd_exec_exec.txt"); system("find $src -name '*.$tryext' -print | xargs grep -n 'system(' >> $dest/cmd_exec_system.txt");