EPH – A tool which allows you to perform scans to find exposed administration panels that can lead to security vulnerabilities

EPH is a tool which allows you to perform scans to find exposed administration panels that can lead to security vulnerabilities.

It can be used offensively (Pentest, Bug Bounty…) or defensively (Threat Hunting).

The search is realized by Shodan, so you will need an API key (free API keys are not working).
Queries can be done with a custom favicon or by using the available database containing a list of dangerous and frequently used panels.

  • Gitlab
  • FS Switch
  • Spring Boot
  • Tomcat
  • PhpMyAdmin
  • Jenkis
  • OpenVPN
  • Portainer
  • GraphQL
  • Adminer
  • Roundcube Webmail
  • pfSense
  • cPanel Login
  • Magento
  • SeaFile
    […]

Installation

git clone https://github.com/Nishacid/EPH.git
cd  EPH/
pip3 install -r requirements.txt

Usage