Author: Trix Cyrus
Waymap Pentesting tool: Click Here
TrixSec Github: Click Here
TrixSec Telegram: Click Here
AdminProber: Click Here
Hey, fellow security enthusiasts! π
I'm excited to announce the release of AdminProber v1.1, a tool designed specifically for penetration testers and ethical hackers to easily discover hidden admin login panels on websites. This tool was built with simplicity, speed, and power in mind. Whether you're performing a security audit or just exploring a websiteβs structure, AdminProber can help you identify potentially vulnerable areas and access points.
π οΈ What is AdminProber?
AdminProber is a Python-based tool that automates the discovery of admin login panels on websites. It utilizes a customizable wordlist of common admin paths and checks multiple paths against the target domain. The best part? Itβs fast, multithreaded, and easy to use.
π₯ Key Features of AdminProber v1.1
Multi-Threading Support
AdminProber now supports multi-threading, which allows for faster scanning of multiple admin paths. No more waiting around for long scans!Automatic Updates
Stay up to date with the latest version by running a quick update check. AdminProber will automatically pull the latest release from GitHub, ensuring you're always using the newest features and fixes.Customizable Wordlist
You can now easily modify the wordlist (the file containing common admin paths) to fit your needs. Whether youβre using a pre-built wordlist or a custom one, AdminProber can handle it!Detailed Output
AdminProber outputs all discovered admin panels into a results file, with details about the URLs and their status codes. This makes documentation and further analysis easy.Error Handling
The tool gracefully handles errors, so even if a request fails, it doesnβt interrupt the scanning process. This means more reliable results.Easy to Use
You donβt need to be an expert to get started. With simple arguments and an easy-to-follow process, AdminProber is beginner-friendly while still offering advanced functionality for seasoned penetration testers.
π How Does AdminProber Work?
AdminProber works by scanning a list of common admin paths (you can customize the list) and checking them against the target website. It sends HTTP requests to each path, looking for valid responses that indicate the presence of an admin panel, such as 200 OK, 301 Redirect, or 302 Redirect responses. If it finds something suspicious (like "admin" or "login" in the page content), it flags the URL as a potential admin panel.
π How to Use AdminProber
Getting started with AdminProber is easy. Here's a quick guide:
- Install Dependencies: First, make sure you have Python 3.x installed. You'll also need to install some dependencies. You can do that by running:
pip install requests termcolor
- Run the Tool: Now you can run the tool to scan for admin panels. Here's an example command:
python adminprober.py --target https://example.com
-
--target
specifies the target URL to scan. -
--threads
specifies the number of threads (default is 5). -
--paths
points to the wordlist file (you can use your own or the default). -
--output
specifies where to save the results.
- View Results: The results will be saved in the output file you specified. Each found admin panel will be listed with its status code.
π₯ Download and Get Started
You can download AdminProber and check out the source code on GitHub:
AdminProber on GitHub
π What's New in v1.1?
In version 1.1, we've added some exciting updates to improve usability, performance, and security:
- Improved Multi-threading: Faster scanning means you can check more paths in less time.
- Auto Update: Ensure you're always on the latest version with a quick update check.
- Custom Wordlist Support: Scan with a wordlist that fits your target environment.
π Conclusion
AdminProber v1.1 is a fantastic tool for anyone involved in penetration testing or ethical hacking. It helps streamline the process of discovering admin panels and makes the task of web application security testing a whole lot easier. With new features like multi-threading, auto-update, and improved error handling, this tool is now faster and more reliable than ever before.
Give it a try and let me know what you think! If you encounter any issues, feel free to open an issue on GitHub, or reach out to me directly.
π¨ Disclaimer
This tool is intended for ethical hacking and penetration testing only. Please ensure you have permission to scan the target websites. Unauthorized scanning of websites is illegal and unethical.
Top comments (0)