PhpMyadmin Checker

How the phpMyAdmin checker works

This section is an asynchronous phpMyAdmin checker using aiohttp and asyncio.

File parsing

Reads credentials in URL:login:password format. If the URL doesn't start with http, it automatically prepends https://.

CSRF handling

Requests the main page to extract the CSRF token (input field named token) required for login.

phpMyAdmin detection

  • Checks if the site contains "phpMyAdmin" in its content.
  • Handles redirects recursively and logs them.
  • Handles 404 responses separately.
  • Login attempts

  • Posts pma_username, pma_password, and token to the login page.
  • Retries up to 3 times for timeouts or failures.
  • Considers a login successful if the page contains logout, logout.php, or
  • title="Log out".

    Async processing

  • Uses asyncio.Semaphore to limit concurrency and aiofiles for asynchronous
  • file writing.

    File logging

  • Valid credentials → valid_credentials.txt
  • Invalid credentials → invalid_credentials.txt
  • Not found sites → not_found.txt
  • Unreachable sites → unreachable.txt
  • Character encoding

    Uses chardet to auto-detect the encoding of the input file.

    Logging

    Uses colorlog for color-coded console logs and standard logging to save logs to processing_log.txt.

    Folder management

    Creates timestamped output directories for each run to organize results.

    User input

    Asks for:

  • The path to the database file
  • Number of threads (concurrent requests, recommended 100-150)