Nullbyte.Org.IL :: exploits, vulnerabilities, shellcode, tools, viruses

A simple spider

<?
if($argc < 1)
{
echo "/------------------------------------\n\r";
echo " Welcome to L[s]D's spider           \n\r";
echo " usage php ".$argv[0]." <subfolders>/ <host>\n\r";
echo " e.g. php ".$argv[0]." forum/ 127.0.0.1\n\r";
echo "/------------------------------------\n\r";
die();
}

$host = $argv[2];
$sub = $argv[1];
$port = 80;

$file = @fopen("folders.txt", 'r');
while(!feof($file))
{
$string .= fgets($file);
}
$folders = explode("<br />", nl2br($string));
$string = "";

$file = @fopen("files.txt", 'r');
while(!feof($file))
{
$string .= fgets($file);
}
$files= explode("<br />", nl2br($string));

$suc = "";
foreach($folders as $folder)
{
	$socket = @fsockopen($host, $port, $errno, $errstr) or die($errno." - ".$errstr);
	$req = "GET /".$sub.$folder." HTTP/1.1\r\n";
    $req.= "Host: ".$host."\r\n";
   	$req.= "Keep-Alive: 300\r\n";
   	$req.= "Connection: keep-alive\r\n\r\n";
	fwrite($socket, $req);
	$str = fread($socket, 512);
	fclose($socket);
	if(!strstr($str, 'HTTP/1.1 404')){
		echo "[+] ".$folder." was found.";
		foreach($files as $file)
		{
			$socket = @fsockopen($host, $port, $errno, $errstr) or die($errno." - ".$errstr);
			$req = "GET /".$sub.$folder." HTTP/1.1\r\n";
			$req.= "Host: ".$host."\r\n";
			$req.= "Keep-Alive: 300\r\n";
			$req.= "Connection: keep-alive\r\n\r\n";
			fwrite($socket, $req);
			$str = fread($socket, 512);
			fclose($socket);
			if(!strstr($str, 'HTTP/1.1 404')){
				echo "[+] ".$folder."/".$file." was found.";
			}
			@fclose($sock);
		}
	}
}
?>

Back