Arhiva Bot Wordpress shell - (BOT)

[Mr.Jokerx]

Nu stiu exact ce face , am gasito cred ca este pentru WP - SHell

#!/usr/bin/perl
# scanner
# (c) Humax

use LWP::UserAgent;
use WWW::Mechanize;
use threads;

$ua = LWP::UserAgent->new(keep_alive => 1);
$ua->agent("Mozilla/5.0 (Windows; U; Windows NT 5.1; fr; rv:1.9.1) Gecko/20090624 Firefox/3.5");
$ua->timeout(30);
$defext = "php";
$| = 1;
$threads = 5;
head();
print "[+] Enter ip - site[(s) file] : ";
$choice=<STDIN>;
chomp($choice);
if ($choice =~ /^(\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3})/)
{
print " + you're entering an ip address : ".$choice."\n";
dojob($choice);
}
elsif($choice =~ /\.txt/)
{
print " + you are entering a file : ".$choice."\n";
open(sites, "<".$choice) or $!; @paths)."  - not found : http://".$_[0].$_[1]."/".$filescan.".".$fext;
}
}
}
print "\n";
}

sub checkcommon {
print "    + scanning common files  \n";
@cpaths = ("validator.php","uploader.php","vbseo.php","test.txt","test.zip","public_html.zip","pulic_html.rar","public_html.tar.gz","backup.zip","backup.tar.gz",".bash_history","error_log","domlogs");
$countcp=0; 
foreach $filecscan (@cpaths) {
chomp($filecscan);
$countcp++;
$scanpc = $ua->get("http://".$_[0]."/".$filecscan);
if ($scanpc->status_line !~ /404/){
if ($scanpc->status_line =~ /Bad hostname\)/)
{
print "\t   - cant connect to site\n";}else{
print "\r\t   ".$countcp."/".scalar(@cpaths)."  + found : http://".$_[0]."/".$filecscan."  ".$scanpc->status_line."\n";
}
}
else{
print "\r\t   ".$countcp."/".scalar(@cpaths)."  - not found : http://".$_[0]."/".$filecscan;
}
}
print "\n";
}
sub getjooken {
$gjotoken = WWW::Mechanize->new();
$gjotoken->get("http://".$_[0]."/administrator/index.php");
 if($gjotoken->content() =~ /([0-9a-fA-F]{32})/){
print "      + found token \n";
 chomp($1);
return $1;
 } else {
print "      - can't get token \n";
next;
 }
}

sub savefile {
open (save,">>".$_[0]);
print save $_[1]."\n";
close save; 
}

sub uniq {
    return keys %{{ map { $_ => 1 } @_ }};
}

sub head {
print qq {
[+] scanner
[+] (c) Humax
}
}

https://www.sendspace.com/file/1xlza6