OpenFire AdminFinder is a small Perl utility I wrote in 2013 during my information-security and ethical-hacking years. It sends requests to a list of common administrative paths for ASP, CFM, PHP, and Java sites, then looks for login-form language in the responses.
Historical and unmaintained. This repository is preserved as part of my early public work, not recommended as a modern security-assessment tool.
AdminFinder discovers likely login paths. It does not bypass authentication, exploit a target, or establish that a page is vulnerable. Results can contain false positives and should be checked manually.
Run this only against systems you own or have explicit permission to test. Path discovery still creates network traffic and can trigger security controls. You are responsible for following the law and the rules of the system being assessed.
- Perl
HTTP::RequestLWP::UserAgent
perl AdminFinder.plThe script prompts for a target and the site type (asp, cfm, php, java, or any). It is old code and assumes http:// when no scheme is supplied.
GNU GPL v2 — see LICENSE.
Built during the OpenFire Technologies chapter of my career. For current work, see my GitHub profile.