Pocbit ULP Checker: Streaming Classification for Panel and CMS Credential Lists

When one dump mixes panels, CMS, and phpMyAdmin

Security teams and authorized researchers often inherit a single ULP file — URL, login, password per line — mixing cPanel :2083, WordPress /wp-login.php, Joomla administrator, and phpMyAdmin paths. Manual grep does not scale past a few million rows.

Pocbit ULP Checker is a member CLI toolkit on pocbit.org/tools/ulp-checker (sign in to download). It classifies lines in one streaming pass into 40 categories (20 panels, 18 CMS, 2 DB tools) with low RAM use on multi‑GB inputs.

What it is (and is not)

| It is | It is not | |-------|-----------| | Inventory / triage for your authorized datasets | A license to test random internet hosts | | Rule-based URL/port/path classification (ulp_classify.py) | A guarantee every line is exploitable | | Optional cPanel/Plesk format + login check helpers | WordPress/Joomla brute-force built-in |

Use main.py as the primary entry. Output files: ulp_{category}.txt under your chosen -d directory. One line may land in multiple buckets when both panel ports and CMS paths match — check the summary multi_label count.

Typical workflow

1. Sign in at Pocbit → tools/ulp-checker → download pocbit-ulp-checker.py extractor.
2. pip install -r requirements.txt
3. python main.py --list-categories — review CATEGORIES.md in the bundle for port/path rules.
4. python main.py -i ulp.txt -d ./out --no-live --progress-every 500000 for large runs.
5. Panel-only follow-up: format_cpanel_piped.py / format_plesk_piped.py, then cpanel.py / plesk.py only on assets you own.

python main.py -i ulp.txt -d ./out --categories cms
python main.py -i ulp.txt --stats-only --json-summary stats.json

Hygiene and legal

• Keep ulp.txt and ulp_*.txt local — never commit to Git or paste into tickets unredacted.
• Authorized use only — same standard as safe PoC lab setup and Pocbit Terms.
• High 8080/8443 hits need path hints; see category docs to reduce false positives.

Cross-read: how to prioritize critical CVEs, Joomla security checklist (2026), WordPress security checklist (2026).

FAQ

Do I need Reverse IP first?

No. ULP Checker assumes you already have credential rows. Pair with Mass Reverse IP when you need co-hosted discovery from domain lists.

Why member-only download?

The bundle includes panel check helpers; gating downloads supports fair use and aligns with other Pocbit toolkit features.

Bottom line

ULP Checker saves hours when a single leak file spans hosting panels and CMS admin URLs — run main.py once, scope your authorized patch and audit queues, and keep dumps off the public internet.