Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- <?php
- @set_time_limit(0);
- echo "<form method='POST'><style>
- textarea {
- font-size: 15px;
- font-family: Tahoma;
- color: #0078AA;
- border: dashed 1pt #0078AA;
- }
- input {
- color: #0078AA;
- border: dotted 1pt #0078AA;
- }
- </style>
- <title>./Private Whmcs 5.2.7 Scanner</title>
- <body text='#808080' bgcolor='#FFFFFF'>
- <p align='center' dir='ltr'><b><br>
- <nobr>
- <font face='Tahoma' size='7' color='#0078AA'>W</font><font face='Tahoma' size='5'>hmcs</font><font face='Tahoma' size='7'>
- <font color='#0078AA'>V</font></font><font face='Tahoma' size='5'>er</font><font face='Tahoma' size='7'>
- <font color='#0078AA'>5.2.7</font>
- <font color='#0078AA'>S</font></font><font face='Tahoma' size='5'>canner</font></b></nobr></p><center>
- <textarea name='sites' cols='50' rows='10'></textarea><br>
- <input type='submit' name='scan' value='Scan Sites'><br>
- </form><br><br>";
- if($_POST['scan']){
- $IIIII1I1II = explode("\r\n",$_POST['sites']);
- foreach($IIIII1I1II as $IIIII1I1III){
- $IIIII1I1III = dirname($IIIII1I1III) . '/login.php';
- $IIIII1I1III = str_replace("/admin","",$IIIII1I1III);
- $IIII1III1II1 = ereg_replace("(https?)://", "", $IIIII1I1III);
- $III1II1III1II = ereg_replace("www.", "", $IIII1III1II1);
- $II1III1IIII1="http://".$III1II1III1II;
- $bukadikitjoss = fopen("$II1III1IIII1","r");
- $hasil = '';
- while (!feof($bukadikitjoss)) {
- $hasil .= fread($bukadikitjoss, 8192);
- }
- if(eregi('name="token"',$hasil)){
- $IIII1III1II1II = ereg_replace("(https?)://", "", $IIIII1I1III);
- $IIII1III1II1I = ereg_replace("login.php", "register.php", $IIIII1I1III);
- $IIII1III1III1I = ereg_replace("/login.php", "", $IIII1III1II1II);
- $IIIII1I1II1II="http://".$IIII1III1II1I;
- $IIII1II1II1II="http://".$IIII1III1III1I;
- echo "<nobr><font face='Comic Sans MS'>[+] <a href='{$IIIII1I1II1II}' style='text-decoration: none'>{$IIII1II1II1II}</a> <= <font color='green'>Try Sql Injection</font></font></nobr><br>";
- }
- else {
- $IIII1III1II11 = ereg_replace("(https?)://", "", $IIIII1I1III);
- $IIII1III1IIII1I = ereg_replace("/login.php", "", $IIII1III1II11);
- $III1III1III1II="http://".$IIII1III1IIII1I;
- echo "<nobr><font face='Comic Sans MS'>[~] {$III1III1III1II} <= <font color='red'>Not Vulnerable</font></font></nobr><br>";
- }
- }
- }
- echo "<br><br><p dir='ltr' align='center'><font face='Verdana' size='2'>Coded By : <font color='#0078AA'>Andripzf ./DM</font><br>
- <span lang='en-us'><b><a href='http://sec4ever.com/'>
- <img border='0' src='http://www.sec4ever.com/home/sec4ever_2.0/images/statusicon/forum_new.png' width='60' height='65'></a><a href='http://is-sec.com/'><img src='http://is-sec.com/vb/images/Is/images/logo-is.png' width='132' height='69'></a></b></span><br>";
- ?>
Advertisement
Add Comment
Please, Sign In to add comment