Breacher | Find Admin Login Pages in Website

breacher banner | Cybervie

In this article, we are going to discuss a tool called the Breacher which is an open-source project by s0md3v.

What is Breacher?

The Breacher is an open-source tool written in python and it has some very useful features, but there is one basic functionality of this tool, which is to find admin login pages on websites. This tool checks the website and provides the URL to the potential login pages on the website.

Features

  •  Multi-threading on demand
  •  Big path list (482 paths)
  •  Supports php, asp and html extensions
  •  Checks for potential EAR vulnerabilites
  •  Checks for robots.txt
  •  Support for custom patns

One of the best features of this tool is that it supports multithreading. The breacher also tests for Execution After Redirect(EAR) Vulnerabilities.

Installation

Open The Terminal and type the following commands

#clone the git repo
git clone https://github.com/s0md3v/Breacher

#change Directory to Breacher
cd Breacher

#to open the help menu in breacher
python breacher.py -h

The help menu of the Breacher will look something like this.

Breacher Help Menu

Usage Commands

  • Check all paths with php extension
python breacher -u example.com --type php
  • Checks all paths with php extension with threads
python breacher -u example.com --type php --fast
  • Check all paths without threads
python breacher -u example.com
  • Adding a custom path. For example if you want all paths to start with /data (example.com/data/…) you can do this:
python breacher -u example.com --path /data

Note: When you specify an extension using the –type option, Breacher includes paths of that extension as well as paths with no extensions like /admin/login

Demo

Breacher Demo

In the above picture, you can see that I have used a simple command python breacher.py – u <website>, and the tool automatically check if there is any robot.txt and then provide you with all the potential admin pages.

Important Links

  1. Official Github
  2. Take A Quick Look On What is Web Application Security

For More Blogs Like This Please Visit our blog page.

About Cybervie

Cybervie provides best cyber security training program in hyderabad, India.This cyber security course enables you to detect vulnerablities of a system, wardoff attacks and manage emergency situations. Taking a proactive approach to security that can help organisations to protect their data, Cybervie has designed its training module based on the cyber security industry requirements with three levels of training in both offensive and defensive manner, and use real time scenarios which can help our students to understand the market up-to its standard certification which is an add on advantage for our students to stand out of competition in an cyber security interview.

More Info – Click Here

Share on facebook
Share on twitter
Share on linkedin
Share on whatsapp

Recent Posts

Follow Us on Youtube

Cyber Security Training Program 2020

Cyber security Course offered by Cybervie prepares students for a path of success in a highly demanding and rapidly growing field of cyber security. The course is completely designed with an adaptable mindset, where the program allows the student to complete the course work at their own pace while being able to complete weekly assignments. Hence, also making it convenient for busy working professionals to pursue the training to help them advance their career in cyber security.

Cybervie has designed the training module based on the cyber security industry requirements in both offensive and defensive manner, using real time scenarios which help our students to understand the market standards.

Sign up for our Newsletter

Interested in Cyber Security Training Program 2020 – Click Here