Gio33 Posted March 23, 2015 Report Posted March 23, 2015 (edited) Se vinde sursa scanner python threaded facut pe baza a doua pluginuri (revslider si showbiz).Features:Spre deosebire de alte scannere mediocre ce folosesc aceasta vulnerabilitate, al meu face urmatoarele:1- Spawneaza shell wso 2.5.1 cu password intr-un folder anume si nu in cel default, unde va este sters automat.2- Spawneaza un php mailer cu interfata HTML si password. 3- Cauta SMTP-uri in diverse fisiere / tabele din database. (nu va asteptati la minuni aici, putine folosesc SMTP).4- Totul este threaded si foarte rapid, rezultatele sunt salvate in .txt5- Dupa injectarea shell-ului hostul este curatat pentru a elimina sursa exploit-ului etc (de unde s-a spawnat shell-ul).Prinde destul de bine, tine doar de lista de url-uri / ip-uri ce o aveti.Bonus ofer si sursa unui sorter facut tot de mine, cu care sa va sortati ip-urile/domeniile sa va ramana doar cele bune de scanat.Toate update-urile sunt gratuite si anuntate in acest topic (daca nu se inchide sau ceva).Pret : 200$Accept doar BTC / BTC-e USD code.PM pentru Jabber.////ENGLISHSelling threaded python source for shell injection into wordpress (base on two plugins, revslider and showbiz).Unlike other shit scanners using those vulnerabilities, mine does the following:1- Spawn a WSO 2.5.1 shell with password in a certain folder, not in the default one where it is erased fast.2- Spawns a php mailer with HTML interface and password.3- Searches for SMTP in some files / database tables.4- Everything is very fast (being threaded), all results are saved in .txt files5- After shell injection the host is cleaned to erase the exploit source (from which the shell is spawned etc.. )It has a good injection rate, you just need a good url/ip list.Bonus I'm offering also a python source for an url sorter made by me, that will help you sort your ips/domains and outputs only those good for scanning .All updates are free of charge and announced in this topic.Price : 200$ Accepting only BTC / BTC-e USD code.PM for jabber id.Thank you.Scannerul injector: Scannerul de linkuri:https://www.youtube.com/watch?v=PP4P-XhLhqk Edited March 29, 2015 by Gio33 Quote
zonamea Posted March 24, 2015 Report Posted March 24, 2015 Dc nu faci un demo, video sa vedem si noi cum face? Quote
Gio33 Posted March 24, 2015 Author Report Posted March 24, 2015 O sa fac pana la sf saptamanii sper.Mersi. Quote
em20346 Posted March 28, 2015 Report Posted March 28, 2015 astept video...si daca sunt multumit ce vad, ti-l cumpar! Quote
Gio33 Posted March 29, 2015 Author Report Posted March 29, 2015 Scannerul injector: Scannerul de linkuri:https://www.youtube.com/watch?v=PP4P-XhLhqkScuzati calitatea proasta dar.. n-am avut prea mult timp la dispozitie de un setup special. Cand ecranul era alb aveam notepad deschis dar era prost pozitionat si nu se vedea tot, la final se vede ca din el copiam linkurile ... sa nu credeti ca era ceva fake pe acolo. Quote
zonamea Posted March 29, 2015 Report Posted March 29, 2015 F frumos, ce pret are ala de wp ? sheel Quote
Gio33 Posted March 29, 2015 Author Report Posted March 29, 2015 Am scris si in primul post, 200$ BTC . In pretul asta intra cele doua scannere pentru fiecare plugin si sorter-ul de linkuri, care scoate domeniile ce pot fi vulnerabile si astfel scanezi "targetat" pe ce trebuie. Quote
Gio33 Posted April 21, 2015 Author Report Posted April 21, 2015 Update pret : 150$ BTC. Multumesc. Quote