Example of website directory scanning indexing tool based on PHP
This article shares with you the source code of a website directory scanning and indexing tool based on PHP. It is very simple and practical. Friends in need can refer to it.
The code is very simple, so there won’t be much nonsense here. Okay, this code comes from a netizen's contribution, and it can be used after testing
##
<?php
error_reporting(E_ALL & ~E_NOTICE);
ignore_user_abort();
set_time_limit(0);
if ($_GET['act'] == 'op') {
$data_url = $_GET['url'] . '/';
$hz = $_GET['type'];
list($fw1, $fw2) = explode('-', $_GET['fw']);
$zs404 = strlen(file_get_contents_curl($data_url . "momaka")) + 200; //404页面字数
$file_name = $_SERVER["REMOTE_ADDR"] . '_' . mt_rand(1000, 9999999) . '.txt'; //写入的文件名
setcookie("file_name", $file_name, time() + 3600 * 24 * 7); //写入cookie 方便识别
for ($i = $fw1;$i <= $fw2;$i++) {
$name = $data_url . $i . $hz; //curl读取页面
$data = file_get_contents_curl($name); //判断页面是否有用
if (strlen($data) > $zs404) {
$log = $name . ' *yes';
} else {
$log = $name . ' no';
}
file_put_contents($file_name, $log . PHP_EOL, FILE_APPEND); //写入文件
if ($_GET['ys']) {
sleep($_GET['ys']); //遇到防火墙使用延迟扫目录
}
}
}
if ($_GET['act'] == 'list') {
$filename = $_COOKIE["file_name"]; //要下载的文件名
header("Content-Type:application/force-download");
header("Content-Disposition:attachment;filename=" . $filename);
readfile($filename);
}
if ($_GET['file_name']) {
$data = file_get_contents($_COOKIE["file_name"]);
}
/* CURL 配置函数 */
function file_get_contents_curl($url) {
$ch = curl_init();
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false); // 跳过证书检查
//curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, true); // 从证书中检查SSL加密算法是否存在
curl_setopt($ch, CURLOPT_URL, $url);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 10);
$dxycontent = curl_exec($ch);
return $dxycontent;
}
?>
<!DOCTYPE html>
<html>
<head>
<http-equiv="Content-Type" content="text/html; charset=utf-8"/>
<http-equiv="X-UA-Compatible" content="IE=EmulateIE7"/>
<title>网站目录文件图片扫描工具</title>
<script src="jquery-1.8.3.min.js"></script>
</head>
<style>
body{ margin: 0; padding: 0; background-color: #F9F9F9;}
.list{margin: 0 auto; width: 500px; padding: 30px 0; background-color: #FFF; margin-top: 50px; border-radius: 8px; border: 1px solid #ECECEC;}
.list h1{ text-align: center; font-size: 1.8em; margin: 30px 0;color: #686B82;}
.list input{width: 250px; height: 28px; border-radius: 5px; border: 1px solid #CACACA; margin: 0 0 20px 20px; display: inline-block; padding: 2px 8px;}
input:focus { border-color: #66afe9; outline: 0; -webkit-box-shadow: inset 0 1px 1px rgba(0,0,0,.075),0 0 8px rgba(102,175,233,.6); box-shadow: inset 0 1px 1px rgba(0,0,0,.075),0 0 8px rgba(102,175,233,.6);}
#sm{width: 270px; height: 32px; font-size: 16px; background-color: #0DD88D; color: #FFF; border: 0;margin-left: 140px;cursor:pointer;}
.list span{float: left; display: inline-block; width: 120px; text-align: right; line-height: 30px;}
.list a{ text-align: center; display: block; color: #808080; text-decoration: none;}
</style>
<body>
<?php if($data) {?>
<p style="text-align:center;">
每隔15秒更新一次数据 查找连接后面为 *yes 即可用页面
</p>
<?php echo $data; ?>
<script>function moma(){ history.go(0);}setInterval("moma()",15000);</script>
<?php }else{ ?>
<p class="list">
<h1 id="网站目录文件扫描工具">网站目录文件扫描工具</h1>
<span>链接：</span><input type="text" id="url" placeholder="如https://www.baidu.com" value="">
<span>后缀：</span><input type="text" id="type" placeholder="如 .html ，目录模式则放空" value="">
<span>范围：</span><input type="text" id="fw" placeholder="如1-99999或a-zzzzz" value="">
<span>延迟：</span><input type="text" id="ys" placeholder="遇防火墙请填写轮询时间，如2" value="">
<input type="submit" id="sm" value="扫描">
<a href="index.php?file_name=1" target="_blank">查看扫描结果</a></br>
<a href="index.php?act=list" target="_blank">下载扫描结果</a></br>
</p>
<?php } ?>
<p id="data">
</p>
<script>
$("#sm").click(function(){
$(this).disabled=true;
if(confirm('之前有一个任务可能正在进行，选择确定则新建任务扫描，选择取消则查看任务')){
$.get("index.php?act=op",
{
url : $("#url").val(),
type : $("#type").val(),
fw : $("#fw").val(),
ys : $("#ys").val()
},
function(req) {
alert("扫描结束！");
});
}else{
window.open("index.php?file_name=1");
}
})
</script>
</body>
</html>
Summary: The above is the article The entire content, I hope it will be helpful to everyone's study. Related recommendations:
PHP built-in encryption function
phpstrtotime function performance analysis_phpTips
##
The above is the detailed content of Example of website directory scanning indexing tool based on PHP. For more information, please follow other related articles on the PHP Chinese website!
How does PHP identify a user's session?May 01, 2025 am 12:23 AMPHPidentifiesauser'ssessionusingsessioncookiesandsessionIDs.1)Whensession_start()iscalled,PHPgeneratesauniquesessionIDstoredinacookienamedPHPSESSIDontheuser'sbrowser.2)ThisIDallowsPHPtoretrievesessiondatafromtheserver.
What are some best practices for securing PHP sessions?May 01, 2025 am 12:22 AMThe security of PHP sessions can be achieved through the following measures: 1. Use session_regenerate_id() to regenerate the session ID when the user logs in or is an important operation. 2. Encrypt the transmission session ID through the HTTPS protocol. 3. Use session_save_path() to specify the secure directory to store session data and set permissions correctly.
Where are PHP session files stored by default?May 01, 2025 am 12:15 AMPHPsessionfilesarestoredinthedirectoryspecifiedbysession.save_path,typically/tmponUnix-likesystemsorC:\Windows\TemponWindows.Tocustomizethis:1)Usesession_save_path()tosetacustomdirectory,ensuringit'swritable;2)Verifythecustomdirectoryexistsandiswrita
How do you retrieve data from a PHP session?May 01, 2025 am 12:11 AMToretrievedatafromaPHPsession,startthesessionwithsession_start()andaccessvariablesinthe$_SESSIONarray.Forexample:1)Startthesession:session_start().2)Retrievedata:$username=$_SESSION['username'];echo"Welcome,".$username;.Sessionsareserver-si
How can you use sessions to implement a shopping cart?May 01, 2025 am 12:10 AMThe steps to build an efficient shopping cart system using sessions include: 1) Understand the definition and function of the session. The session is a server-side storage mechanism used to maintain user status across requests; 2) Implement basic session management, such as adding products to the shopping cart; 3) Expand to advanced usage, supporting product quantity management and deletion; 4) Optimize performance and security, by persisting session data and using secure session identifiers.
How do you create and use an interface in PHP?Apr 30, 2025 pm 03:40 PMThe article explains how to create, implement, and use interfaces in PHP, focusing on their benefits for code organization and maintainability.
What is the difference between crypt() and password_hash()?Apr 30, 2025 pm 03:39 PMThe article discusses the differences between crypt() and password_hash() in PHP for password hashing, focusing on their implementation, security, and suitability for modern web applications.
How can you prevent Cross-Site Scripting (XSS) in PHP?Apr 30, 2025 pm 03:38 PMArticle discusses preventing Cross-Site Scripting (XSS) in PHP through input validation, output encoding, and using tools like OWASP ESAPI and HTML Purifier.
Hot AI Tools
Undresser.AI Undress
AI-powered app for creating realistic nude photos
AI Clothes Remover
Online AI tool for removing clothes from photos.
Undress AI Tool
Undress images for free
Clothoff.io
AI clothes remover
Video Face Swap
Swap faces in any video effortlessly with our completely free AI face swap tool!
Hot Article
Hot Tools
SublimeText3 Chinese version
Chinese version, very easy to use
Zend Studio 13.0.1
Powerful PHP integrated development environment
PhpStorm Mac version
The latest (2018.2.1) professional PHP integrated development tool
Dreamweaver CS6
Visual web development tools
SecLists
SecLists is the ultimate security tester's companion. It is a collection of various types of lists that are frequently used during security assessments, all in one place. SecLists helps make security testing more efficient and productive by conveniently providing all the lists a security tester might need. List types include usernames, passwords, URLs, fuzzing payloads, sensitive data patterns, web shells, and more. The tester can simply pull this repository onto a new test machine and he will have access to every type of list he needs.
