📄 m-scan.frm
字号:
VERSION 5.00
Object = "{48E59290-9880-11CF-9754-00AA00C00908}#1.0#0"; "MSINET.OCX"
Begin VB.Form Form1
Caption = "M-SCAN 黑防专版"
ClientHeight = 7065
ClientLeft = 165
ClientTop = 735
ClientWidth = 10530
LinkTopic = "Form1"
MaxButton = 0 'False
ScaleHeight = 7065
ScaleWidth = 10530
StartUpPosition = 3 '窗口缺省
Begin VB.CommandButton Command3
Caption = "清空结果"
Height = 375
Left = 2880
TabIndex = 20
Top = 6480
Width = 1095
End
Begin VB.CommandButton Command2
Caption = "在线升级数据库"
Height = 495
Left = 600
TabIndex = 19
Top = 5760
Width = 1575
End
Begin VB.TextBox Text4
Height = 975
Left = 2880
MultiLine = -1 'True
TabIndex = 14
Top = 5280
Width = 7575
End
Begin VB.TextBox Text3
Height = 2175
Left = 2880
MultiLine = -1 'True
TabIndex = 13
Top = 2520
Width = 7575
End
Begin VB.Frame Frame2
Caption = "扫描参数"
Height = 1215
Left = 2880
TabIndex = 1
Top = 480
Width = 7575
Begin InetCtlsObjects.Inet Inet1
Left = 6960
Top = 120
_ExtentX = 1005
_ExtentY = 1005
_Version = 393216
End
Begin VB.CommandButton Command1
Caption = "开始扫描"
Height = 255
Left = 5400
TabIndex = 6
Top = 600
Width = 1335
End
Begin VB.TextBox Text1
Height = 270
Left = 840
TabIndex = 3
Text = "www.target.com"
Top = 600
Width = 3855
End
Begin VB.Label Label3
Caption = "/"
Height = 255
Left = 4920
TabIndex = 5
Top = 600
Width = 255
End
Begin VB.Label Label2
Caption = "http://"
Height = 255
Left = 120
TabIndex = 4
Top = 600
Width = 855
End
Begin VB.Label Label1
Caption = "URL输入:(注意格式)"
Height = 255
Left = 120
TabIndex = 2
Top = 240
Width = 1815
End
End
Begin VB.Frame Frame1
Caption = "扫描模块设置"
Height = 4575
Left = 120
TabIndex = 0
Top = 480
Width = 2535
Begin VB.TextBox Text2
Height = 270
Left = 240
TabIndex = 12
Text = "404 Not Found"
Top = 2640
Width = 1815
End
Begin VB.ComboBox Combo2
Height = 300
ItemData = "M-scan.frx":0000
Left = 240
List = "M-scan.frx":0019
TabIndex = 10
Text = ".asp"
Top = 1560
Width = 1695
End
Begin VB.ComboBox Combo1
Height = 300
ItemData = "M-scan.frx":0049
Left = 240
List = "M-scan.frx":0059
TabIndex = 8
Text = "IIS"
Top = 720
Width = 1815
End
Begin VB.Label Label5
Caption = "说明：特征码这里填写不存在目录或者后台文件时所返回的代码，比如“找不到”。"
Height = 855
Left = 240
TabIndex = 15
Top = 3240
Width = 1815
End
Begin VB.Label Label9
Caption = "填写特征码："
Height = 255
Left = 240
TabIndex = 11
Top = 2280
Width = 1455
End
Begin VB.Label Label8
Caption = "后台地址文件后缀类型："
Height = 255
Left = 240
TabIndex = 9
Top = 1200
Width = 2055
End
Begin VB.Label Label4
Caption = "选择目标web服务器类型"
Height = 255
Left = 240
TabIndex = 7
Top = 360
Width = 2055
End
End
Begin VB.Image Image2
Height = 465
Left = 9120
Picture = "M-scan.frx":0078
Top = 6480
Width = 1320
End
Begin VB.Image Image1
Height = 465
Left = 7680
Picture = "M-scan.frx":0C5C
Top = 6480
Visible = 0 'False
Width = 1320
End
Begin VB.Label waiting
Caption = "猜解进度因数据量的大小而有所不同，请耐心等待……"
Height = 255
Left = 2880
TabIndex = 18
Top = 2280
Visible = 0 'False
Width = 4335
End
Begin VB.Label Label7
Caption = "猜解进程："
Height = 255
Left = 2880
TabIndex = 17
Top = 1920
Width = 1695
End
Begin VB.Label Label6
Caption = "可能存在的后台路径："
Height = 255
Left = 2880
TabIndex = 16
Top = 4920
Width = 1815
End
Begin VB.Menu file
Caption = "文件"
Begin VB.Menu exit
Caption = "退出"
End
End
Begin VB.Menu about
Caption = "关于"
Begin VB.Menu about1
Caption = "关于程序"
End
Begin VB.Menu about2
Caption = "关于作者"
End
End
End
Attribute VB_Name = "Form1"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = False
Private Sub Check3_Click()
Text2.Enabled = True
Check3.Enabled = False
End Sub
Private Sub about1_Click()
MsgBox "请不要用于恶意的破坏！本程序引起的任何法律上的问题，本人不承担任何法律责任。"
End Sub
Private Sub about2_Click()
MsgBox "福尔马林掩盖了腐臭，正如黑夜掩埋了罪恶……"
End Sub
Private Sub Command1_Click()
waiting.Visible = True
Dim folder, login, ext, url As String, e_code1 As String, e_code2 As String, o_put As String '定义字符串
Dim A1, A2 As String
e_code1 = Text2.Text '特征码1
ext = Combo2.Text '后缀名字寄存到ext里面
If Combo1.Text <> "IIS" Then '------------------------------非IIS模块部分
folder = ""
FreeNum = FreeFile 'Freenum表示一个空闲的文件号
Open "data.txt" For Input As #FreeNum '这步是打开“data.txt”，for input表示以输入方式（即读取文件）打开。
Do Until EOF(FreeNum) '循环，直到文件结尾。Eof函数用来判断文件是否读完
Line Input #FreeNum, A1
'-------------开始猜解部分
login = A1 & ext
url = "http://" & Text1.Text & "/" & folder & login
e_code2 = Inet1.OpenURL(url)
Text3.Text = url & vbCrLf & Text3.Text '进程显示
If result(e_code1, e_code2) = 0 Then
Text4.Text = vbCrLf & url & Text4.Text & vbCrLf '追加逐行显示
End If
'-------------猜解部分结束
If EOF(FreeNum) Then
Exit Do
End If
Loop
Close FreeNum
MsgBox "猜解完毕！"
Else '-----------------------------IIS模块部分！！！
'--------读取目录字典文件
Dim FreeNum1 As Integer
FreeNum1 = FreeFile 'Freenum表示一个空闲的文件号
Open "data-iis.txt" For Input As #FreeNum1 '这步是打开“data-iis.txt”，for input表示以输入方式（即读取文件）打开。
Do Until EOF(FreeNum1) '循环，直到文件结尾。Eof函数用来判断文件是否读完
Line Input #FreeNum1, A2 '目录循环
login = A2 '猜解的仅仅是目录
url = "http://" & Text1.Text & "/" & login
e_code2 = Inet1.OpenURL(url)
Text3.Text = url & vbCrLf & Text3.Text '进程显示
If result(e_code1, e_code2) = 0 Then
Text4.Text = vbCrLf & url & Text4.Text & vbCrLf '追加逐行显示
'-------------深层打开另一文件，并把目录与文件连接，存放到新的login
Dim FreeNum2 As Integer
FreeNum2 = FreeFile
Open "data.txt" For Input As #FreeNum2
Do Until EOF(FreeNum2) '----------第二次循环
Line Input #FreeNum2, A1 '文件名存到A1
login = A2 & "/" & A1 & ext
url = "http://" & Text1.Text & "/" & login
e_code2 = Inet1.OpenURL(url)
Text3.Text = url & vbCrLf & Text3.Text '进程显示
If EOF(FreeNum2) Then
Exit Do
End If
Loop
Close FreeNum2
End If '放到这里就不必列举出不存在的目录列表
'--------返回上一层循环
If EOF(FreeNum1) Then
Exit Do
End If
Loop
Close FreeNum1
MsgBox "猜解完毕！"
waiting.Visible = False
End If
End Sub
Public Function result(ByVal c1, c2 As String) As Integer '改版后的比较函数,欧阳无敌原创函数
Dim tempstr, newstr As String
tempstr = ""
If c1 = "" Or c2 = "" Then
result = 0 '0表示不存特征码，就是后台地址存在
Else
newstr = Replace(c2, c1, tempstr)
If newstr = c2 Then
result = 0 '也是不存在特征码，同上！
Else: result = 1 '否则存在特征码，后台不存在！
End If
End If
End Function
Private Sub Command3_Click()
Text4.Text = "" '测试按钮！！！！
End Sub
Private Sub Command2_Click()
MsgBox "暂时不提供数据库在线升级功能！字典大家先将就着用吧……" & vbCrLf & "By morephaze[D.S.G] QQ：35366018"
End Sub
Private Sub exit_Click()
Unload Me
End Sub
Private Sub Image1_Click()
Shell "C:\Program Files\Internet Explorer\IEXPLORE.EXE http://morephaze.zhmy.com/"
End Sub
Private Sub Label10_Click()
End Sub
Private Sub Image2_Click()
Shell "C:\Program Files\Internet Explorer\IEXPLORE.EXE http://www.hacker.com.cn/"
End Sub
⌨️ 快捷键说明
复制代码
Ctrl + C
搜索代码
Ctrl + F
全屏模式
F11
切换主题
Ctrl + Shift + D
显示快捷键
?
增大字号
Ctrl + =
减小字号
Ctrl + -