andripzf

[PHP] Private Whmcs 5.2.7 Scanner

Dec 23rd, 2013
740
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
PHP 2.63 KB | None | 0 0
  1. <?php
  2. @set_time_limit(0);
  3. echo "<form method='POST'><style>
  4. textarea {
  5. font-size: 15px;
  6. font-family: Tahoma;
  7. color: #0078AA;
  8. border: dashed 1pt #0078AA;
  9. }
  10. input {
  11. color: #0078AA;
  12. border: dotted 1pt #0078AA;
  13. }
  14. </style>
  15. <title>./Private Whmcs 5.2.7 Scanner</title>
  16. <body text='#808080' bgcolor='#FFFFFF'>
  17. <p align='center' dir='ltr'><b><br>
  18. <nobr>
  19. <font face='Tahoma' size='7' color='#0078AA'>W</font><font face='Tahoma' size='5'>hmcs</font><font face='Tahoma' size='7'>
  20. <font color='#0078AA'>V</font></font><font face='Tahoma' size='5'>er</font><font face='Tahoma' size='7'>
  21. <font color='#0078AA'>5.2.7</font>
  22. <font color='#0078AA'>S</font></font><font face='Tahoma' size='5'>canner</font></b></nobr></p><center>
  23.  
  24. <textarea name='sites' cols='50' rows='10'></textarea><br>
  25. <input type='submit' name='scan' value='Scan Sites'><br>
  26. </form><br><br>";
  27.    
  28. if($_POST['scan']){
  29. $IIIII1I1II = explode("\r\n",$_POST['sites']);
  30. foreach($IIIII1I1II as $IIIII1I1III){
  31. $IIIII1I1III = dirname($IIIII1I1III) . '/login.php';
  32. $IIIII1I1III = str_replace("/admin","",$IIIII1I1III);
  33. $IIII1III1II1 = ereg_replace("(https?)://", "", $IIIII1I1III);
  34. $III1II1III1II = ereg_replace("www.", "", $IIII1III1II1);
  35. $II1III1IIII1="http://".$III1II1III1II;
  36.  
  37. $bukadikitjoss = fopen("$II1III1IIII1","r");
  38. $hasil = '';
  39. while (!feof($bukadikitjoss)) {
  40. $hasil .= fread($bukadikitjoss, 8192);
  41. }
  42. if(eregi('name="token"',$hasil)){
  43. $IIII1III1II1II = ereg_replace("(https?)://", "", $IIIII1I1III);
  44. $IIII1III1II1I = ereg_replace("login.php", "register.php", $IIIII1I1III);
  45. $IIII1III1III1I = ereg_replace("/login.php", "", $IIII1III1II1II);
  46. $IIIII1I1II1II="http://".$IIII1III1II1I;
  47. $IIII1II1II1II="http://".$IIII1III1III1I;
  48. echo "<nobr><font face='Comic Sans MS'>[+] <a href='{$IIIII1I1II1II}' style='text-decoration: none'>{$IIII1II1II1II}</a> <= <font color='green'>Try Sql Injection</font></font></nobr><br>";
  49. }
  50. else {
  51. $IIII1III1II11 = ereg_replace("(https?)://", "", $IIIII1I1III);
  52. $IIII1III1IIII1I = ereg_replace("/login.php", "", $IIII1III1II11);
  53. $III1III1III1II="http://".$IIII1III1IIII1I;
  54. echo "<nobr><font face='Comic Sans MS'>[~] {$III1III1III1II} <= <font color='red'>Not Vulnerable</font></font></nobr><br>";
  55. }
  56. }
  57. }
  58. echo "<br><br><p dir='ltr' align='center'><font face='Verdana' size='2'>Coded By : <font color='#0078AA'>Andripzf  ./DM</font><br>
  59. <span lang='en-us'><b><a href='http://sec4ever.com/'>
  60. <img border='0' src='http://www.sec4ever.com/home/sec4ever_2.0/images/statusicon/forum_new.png' width='60' height='65'></a><a href='http://is-sec.com/'><img src='http://is-sec.com/vb/images/Is/images/logo-is.png' width='132' height='69'></a></b></span><br>";
  61. ?>
Advertisement
Add Comment
Please, Sign In to add comment