";
}
if($ulo[2] == "" || !empty($ulo[2])){
echo $ulo[2]." ";
}
if($ulo[3] == "" || !empty($ulo[3])){
echo $ulo[3]." ";
}
if($ulo[4] == "" || !empty($ulo[4])){
echo $ulo[4]." ";
}
if($ulo[5] == "" || !empty($ulo[5])){
echo $ulo[5]." ";
}
if($ulo[6] == "" || !empty($ulo[6])){
echo $ulo[6]." ";
}
if($ulo[7] == "" || !empty($ulo[7])){
echo $ulo[7]." ";
}
if($ulo[8] == "" || !empty($ulo[8])){
echo $ulo[8]." ";
}
}//end of function
function brutedir($url, $dir) {
//bring your own wordlist worthless
$urls = $url."/".$dir;
$headers = @get_headers($urls);
if($headers[0] == "HTTP/1.1 404 Not Found"){
echo "[NOT FOUND] {$urls} does not exists..";
}else if($headers[0] == 'HTTP/1.0 302 Found' && $headers[7] == "HTTP/1.0 404 Not Found"){
echo "[NOT FOUND] {$urls} does not exists, Redirected to custom 404 Page..";
flush();
@ob_flush();
}else if($headers[0] == "HTTP/1.0 302 Found"){
echo "[NOT FOUND] {$urls} does not exists, Error 302..";
flush();
@ob_flush();
}else if($headers[0] == "HTTP/1.0 301 Moved Permanently"){
echo "[MOVED PERMANENTLY] {$urls} does not exists, Error 301..";
flush();
@ob_flush();
}else if($headers[0] == "HTTP/1.1 200 OK"){
echo "[FOUND] {$urls} does exists..";
flush();
@ob_flush();
sleep(1);
}elseif(eregi('404', $headers[0])){
echo "[NOT FOUND] {$urls} does not exists..";
flush();
@ob_flush();
}elseif(eregi('403', $headers[0])){
echo "[FORBIDDEN] {$urls} is forbidden..";
flush();
@ob_flush();
}elseif(eregi('500', $headers[0])){
echo "[INTERNAL SERVER ERROR] {$urls} is Server Error..";
flush();
@ob_flush();
}elseif(eregi('301', $headers[0])){
echo "[MOVED PERMANENTLY] {$urls} has been moved..";
flush();
@ob_flush();
}else{
echo "{$headers[0]} >> {$urls} :| ";
flush();
@ob_flush();
sleep(1);
}
}//end of function
$ip = isset($_SERVER['REMOTE_ADDR']) ? $_SERVER['REMOTE_ADDR'] : $_SERVER['HTTP_CLIENT_IP'];
$token = bin2hex(base64_encode(crypt($ip.openssl_random_pseudo_bytes(32), 'spade')));
setcookie('csrf_token', $token);
?>
-[URL Fuzzer]-
The URL Fuzzer can be used to find hidden files and directories on a web server by fuzzing. This is a discovery activity which allows you to discover resources that were not meant to be publicly accessible.
PS: I recommend to put a slash in the end of every word on your directory wordlist. ex: kewl/
";
foreach($dir as $dirs):
ob_flush();
flush();
$dirz = @trim(filter_var($dirs, FILTER_SANITIZE_STRING));
echo brutedir($urlx,$dirz)." ";
ob_end_flush();// thanks to my friend at 3xtr4ct cyber army for helping me outta here :v
endforeach;
echo "";
}
?>