WP Mass Exploit Pack — 11 Python Tools to Hunt Shells, Exploit WooCommerce & Map Reve

[538]

Show ContentSpoiler:

1. B-Wso.pyType: Mass WSO Shell Scanner

• Reads a list of target sites from a file
  
• Tries a huge list of hardcoded paths (wso112233.php, shell20211028.php, bala.php, dropdown.php, etc.) across many directories
  
• Detects WSO shell by looking for the string
  Code:

  Uname:
  in the response
  
• Saves found shells to
  Code:

  wso-shell.txt
• Uses 100 threads
  

2. my1-backdoor-pesword.pyType: Mass Shell Scanner (my1.php / cgi-bin / well-known)

• Scans targets for
  Code:

  my1.php
  in several paths (root, wp-admin/images, cgi-bin, .well-known/acme-challenge)
  
• Fingerprints a specific post-form shell by matching the input form HTML
  
• Saves to
  Code:

  Shells.txt
• 100 threads
  

3. new-backdoor (2).pyType: Mass Shell Scanner (MARIJUANA / acme-challenge index.php)

• Checks
  Code:

  /.well-known/acme-challenge/index.php
  and
  
  Code:

  /.well-known/index.php
• Fingerprints shells via upload form and the
  Code:

  MARIJUANA/icon.png
  reference
  
• Saves to
  Code:

  index-shells.txt
  and
  
  Code:

  MARIJUANA.txt
• 100 threads
  

4. newbackdoor.pyType: Mass Shell Scanner (cong.php / st.php / css/index.php / radio.php)

• Checks multiple shell paths, matches banners like
  Code:

  Mr.Combet WebShell
  ,
  
  Code:

  Uname:
  ,
  
  Code:

  L I E R SHELL
  ,
  
  Code:

  BlackDragon
• Saves to
  Code:

  cong-Shells.txt
  ,
  
  Code:

  wso-Shells.txt
  ,
  
  Code:

  ex-Shells.txt
  ,
  
  Code:

  re-Shells.txt
• 100 threads
  

5. newExloitWP.pyType: Joomla/WP Plugin Scanner (envato-market)

• Scans a single hardcoded path:
  Code:

  /wp-content/plugins/envato-market/inc/class-envato-market-api.php
• Fingerprints via
  Code:

  Upload File : <input
• Saves to
  Code:

  wso-shell.txt
• 100 threads
  

6. prv8-backdoor.pyType: Mass Shell Scanner (license.php / cjfuns.php)

• Checks
  Code:

  /.well-known/acme-challenge/license.php
  and
  
  Code:

  /cjfuns.php
• Fingerprints via password form and
  Code:

  Doc Root:
• Saves to
  Code:

  license-Shells.txt
  ,
  
  Code:

  cjfuns-Shells.txt
• 150 threads
  

7. Tiny-File-Manager.pyType: Mass Tiny File Manager Scanner

• Checks
  Code:

  /wp-includes/js/tinymce/skins/lightgray/img/index.php?p=
• Fingerprints via
  Code:

  Tiny File Manager
  string
  
• Saves to
  Code:

  Tiny-File-Manager.txt
• 100 threads
  

8. WooCommerce-Payments.pyType: WooCommerce Payments Exploit (CVE-2023-28121)

• Reads
  Code:

  /wp-content/plugins/woocommerce-payments/readme.txt
  , extracts stable version
  
• If version < 5.6.2 → vulnerable
  
• Creates a new admin user (
  Code:

  rangexxx
  ) via
  
  Code:

  /wp-json/wp/v2/users
  using the
  
  Code:

  X-WCPAY-PLATFORM-CHECKOUT-USER: 1
  header trick
  
• Saves creds to
  Code:

  admin.txt
  , vulns to
  
  Code:

  Vulnerable.txt
• 100 threads
  

9. yallah.pyType: Reverse IP → Domains Finder

• Takes a list of IPs (user prompted for filename)
  
• Queries
  Code:

  domains.tntcode.com/ip/<ip>
  to extract all domains hosted on that IP
  
• Appends results to
  Code:

  domains.txt
• Uses random fake User-Agent, 50 threads, 5 retries per IP
  

10. Yanz.pyType: Mass Webshell Scanner (Yanz/Alfa-Rex family)

• Huge Pathlist of known backdoor paths (alfa-rex, alfanew, wsoyanz, repeater, dropdown, about.php7, etc.)
  
• Fingerprints via
  Code:

  Yanz Webshell!
• Saves to
  Code:

  Webshell!.txt
• 100 threads
  

11. Ya-shellWSO.pyType: Mass Yanz Webshell Scanner (targeted paths)

• Checks
  Code:

  /ioxi-rex4.php7
  ,
  
  Code:

  /wp-content/plugins/seoo/alfa-ioxi.php
  ,
  
  Code:

  /wp-content/plugins/classic-editor/wp-login.php
• Fingerprints via
  Code:

  Yanz Webshell!
• Saves to
  Code:

  Yanzvuln.txt
• 100 threads
  

 

Hidden Content

You must register or login to view this content.

Virustotal link https://www.virustotal.com/gui/file/b57ccfecc92256fd4d60a70a27d462bd87f740aa2b798b85a5697765c843dd3c

✅ Fresh SMTP and cheap, high limits, full access — plus a SMTP checker to grab more.
Hit me up  CLICK HERE

[85]

ty

[108]

Show ContentSpoiler:

1. B-Wso.pyType: Mass WSO Shell Scanner

• Reads a list of target sites from a file
  
• Tries a huge list of hardcoded paths (wso112233.php, shell20211028.php, bala.php, dropdown.php, etc.) across many directories
  
• Detects WSO shell by looking for the string
  Code:

  Uname:
  in the response
  
• Saves found shells to
  Code:

  wso-shell.txt
• Uses 100 threads
  

2. my1-backdoor-pesword.pyType: Mass Shell Scanner (my1.php / cgi-bin / well-known)

• Scans targets for
  Code:

  my1.php
  in several paths (root, wp-admin/images, cgi-bin, .well-known/acme-challenge)
  
• Fingerprints a specific post-form shell by matching the input form HTML
  
• Saves to
  Code:

  Shells.txt
• 100 threads
  

3. new-backdoor (2).pyType: Mass Shell Scanner (MARIJUANA / acme-challenge index.php)

• Checks
  Code:

  /.well-known/acme-challenge/index.php
  and
  
  Code:

  /.well-known/index.php
• Fingerprints shells via upload form and the
  Code:

  MARIJUANA/icon.png
  reference
  
• Saves to
  Code:

  index-shells.txt
  and
  
  Code:

  MARIJUANA.txt
• 100 threads
  

4. newbackdoor.pyType: Mass Shell Scanner (cong.php / st.php / css/index.php / radio.php)

• Checks multiple shell paths, matches banners like
  Code:

  Mr.Combet WebShell
  ,
  
  Code:

  Uname:
  ,
  
  Code:

  L I E R SHELL
  ,
  
  Code:

  BlackDragon
• Saves to
  Code:

  cong-Shells.txt
  ,
  
  Code:

  wso-Shells.txt
  ,
  
  Code:

  ex-Shells.txt
  ,
  
  Code:

  re-Shells.txt
• 100 threads
  

5. newExloitWP.pyType: Joomla/WP Plugin Scanner (envato-market)

• Scans a single hardcoded path:
  Code:

  /wp-content/plugins/envato-market/inc/class-envato-market-api.php
• Fingerprints via
  Code:

  Upload File : <input
• Saves to
  Code:

  wso-shell.txt
• 100 threads
  

6. prv8-backdoor.pyType: Mass Shell Scanner (license.php / cjfuns.php)

• Checks
  Code:

  /.well-known/acme-challenge/license.php
  and
  
  Code:

  /cjfuns.php
• Fingerprints via password form and
  Code:

  Doc Root:
• Saves to
  Code:

  license-Shells.txt
  ,
  
  Code:

  cjfuns-Shells.txt
• 150 threads
  

7. Tiny-File-Manager.pyType: Mass Tiny File Manager Scanner

• Checks
  Code:

  /wp-includes/js/tinymce/skins/lightgray/img/index.php?p=
• Fingerprints via
  Code:

  Tiny File Manager
  string
  
• Saves to
  Code:

  Tiny-File-Manager.txt
• 100 threads
  

8. WooCommerce-Payments.pyType: WooCommerce Payments Exploit (CVE-2023-28121)

• Reads
  Code:

  /wp-content/plugins/woocommerce-payments/readme.txt
  , extracts stable version
  
• If version < 5.6.2 → vulnerable
  
• Creates a new admin user (
  Code:

  rangexxx
  ) via
  
  Code:

  /wp-json/wp/v2/users
  using the
  
  Code:

  X-WCPAY-PLATFORM-CHECKOUT-USER: 1
  header trick
  
• Saves creds to
  Code:

  admin.txt
  , vulns to
  
  Code:

  Vulnerable.txt
• 100 threads
  

9. yallah.pyType: Reverse IP → Domains Finder

• Takes a list of IPs (user prompted for filename)
  
• Queries
  Code:

  domains.tntcode.com/ip/<ip>
  to extract all domains hosted on that IP
  
• Appends results to
  Code:

  domains.txt
• Uses random fake User-Agent, 50 threads, 5 retries per IP
  

10. Yanz.pyType: Mass Webshell Scanner (Yanz/Alfa-Rex family)

• Huge Pathlist of known backdoor paths (alfa-rex, alfanew, wsoyanz, repeater, dropdown, about.php7, etc.)
  
• Fingerprints via
  Code:

  Yanz Webshell!
• Saves to
  Code:

  Webshell!.txt
• 100 threads
  

11. Ya-shellWSO.pyType: Mass Yanz Webshell Scanner (targeted paths)

• Checks
  Code:

  /ioxi-rex4.php7
  ,
  
  Code:

  /wp-content/plugins/seoo/alfa-ioxi.php
  ,
  
  Code:

  /wp-content/plugins/classic-editor/wp-login.php
• Fingerprints via
  Code:

  Yanz Webshell!
• Saves to
  Code:

  Yanzvuln.txt
• 100 threads
  

 

tha

[17]

Show ContentSpoiler:

1. B-Wso.pyType: Mass WSO Shell Scanner

• Reads a list of target sites from a file
  
• Tries a huge list of hardcoded paths (wso112233.php, shell20211028.php, bala.php, dropdown.php, etc.) across many directories
  
• Detects WSO shell by looking for the string
  Code:

  Uname:
  in the response
  
• Saves found shells to
  Code:

  wso-shell.txt
• Uses 100 threads
  

2. my1-backdoor-pesword.pyType: Mass Shell Scanner (my1.php / cgi-bin / well-known)

• Scans targets for
  Code:

  my1.php
  in several paths (root, wp-admin/images, cgi-bin, .well-known/acme-challenge)
  
• Fingerprints a specific post-form shell by matching the input form HTML
  
• Saves to
  Code:

  Shells.txt
• 100 threads
  

3. new-backdoor (2).pyType: Mass Shell Scanner (MARIJUANA / acme-challenge index.php)

• Checks
  Code:

  /.well-known/acme-challenge/index.php
  and
  
  Code:

  /.well-known/index.php
• Fingerprints shells via upload form and the
  Code:

  MARIJUANA/icon.png
  reference
  
• Saves to
  Code:

  index-shells.txt
  and
  
  Code:

  MARIJUANA.txt
• 100 threads
  

4. newbackdoor.pyType: Mass Shell Scanner (cong.php / st.php / css/index.php / radio.php)

• Checks multiple shell paths, matches banners like
  Code:

  Mr.Combet WebShell
  ,
  
  Code:

  Uname:
  ,
  
  Code:

  L I E R SHELL
  ,
  
  Code:

  BlackDragon
• Saves to
  Code:

  cong-Shells.txt
  ,
  
  Code:

  wso-Shells.txt
  ,
  
  Code:

  ex-Shells.txt
  ,
  
  Code:

  re-Shells.txt
• 100 threads
  

5. newExloitWP.pyType: Joomla/WP Plugin Scanner (envato-market)

• Scans a single hardcoded path:
  Code:

  /wp-content/plugins/envato-market/inc/class-envato-market-api.php
• Fingerprints via
  Code:

  Upload File : <input
• Saves to
  Code:

  wso-shell.txt
• 100 threads
  

6. prv8-backdoor.pyType: Mass Shell Scanner (license.php / cjfuns.php)

• Checks
  Code:

  /.well-known/acme-challenge/license.php
  and
  
  Code:

  /cjfuns.php
• Fingerprints via password form and
  Code:

  Doc Root:
• Saves to
  Code:

  license-Shells.txt
  ,
  
  Code:

  cjfuns-Shells.txt
• 150 threads
  

7. Tiny-File-Manager.pyType: Mass Tiny File Manager Scanner

• Checks
  Code:

  /wp-includes/js/tinymce/skins/lightgray/img/index.php?p=
• Fingerprints via
  Code:

  Tiny File Manager
  string
  
• Saves to
  Code:

  Tiny-File-Manager.txt
• 100 threads
  

8. WooCommerce-Payments.pyType: WooCommerce Payments Exploit (CVE-2023-28121)

• Reads
  Code:

  /wp-content/plugins/woocommerce-payments/readme.txt
  , extracts stable version
  
• If version < 5.6.2 → vulnerable
  
• Creates a new admin user (
  Code:

  rangexxx
  ) via
  
  Code:

  /wp-json/wp/v2/users
  using the
  
  Code:

  X-WCPAY-PLATFORM-CHECKOUT-USER: 1
  header trick
  
• Saves creds to
  Code:

  admin.txt
  , vulns to
  
  Code:

  Vulnerable.txt
• 100 threads
  

9. yallah.pyType: Reverse IP → Domains Finder

• Takes a list of IPs (user prompted for filename)
  
• Queries
  Code:

  domains.tntcode.com/ip/<ip>
  to extract all domains hosted on that IP
  
• Appends results to
  Code:

  domains.txt
• Uses random fake User-Agent, 50 threads, 5 retries per IP
  

10. Yanz.pyType: Mass Webshell Scanner (Yanz/Alfa-Rex family)

• Huge Pathlist of known backdoor paths (alfa-rex, alfanew, wsoyanz, repeater, dropdown, about.php7, etc.)
  
• Fingerprints via
  Code:

  Yanz Webshell!
• Saves to
  Code:

  Webshell!.txt
• 100 threads
  

11. Ya-shellWSO.pyType: Mass Yanz Webshell Scanner (targeted paths)

• Checks
  Code:

  /ioxi-rex4.php7
  ,
  
  Code:

  /wp-content/plugins/seoo/alfa-ioxi.php
  ,
  
  Code:

  /wp-content/plugins/classic-editor/wp-login.php
• Fingerprints via
  Code:

  Yanz Webshell!
• Saves to
  Code:

  Yanzvuln.txt
• 100 threads
  

 

 

ty

[41]

thx

[319]

Show ContentSpoiler:

1. B-Wso.pyType: Mass WSO Shell Scanner

• Reads a list of target sites from a file
  
• Tries a huge list of hardcoded paths (wso112233.php, shell20211028.php, bala.php, dropdown.php, etc.) across many directories
  
• Detects WSO shell by looking for the string
  Code:

  Uname:
  in the response
  
• Saves found shells to
  Code:

  wso-shell.txt
• Uses 100 threads
  

2. my1-backdoor-pesword.pyType: Mass Shell Scanner (my1.php / cgi-bin / well-known)

• Scans targets for
  Code:

  my1.php
  in several paths (root, wp-admin/images, cgi-bin, .well-known/acme-challenge)
  
• Fingerprints a specific post-form shell by matching the input form HTML
  
• Saves to
  Code:

  Shells.txt
• 100 threads
  

3. new-backdoor (2).pyType: Mass Shell Scanner (MARIJUANA / acme-challenge index.php)

• Checks
  Code:

  /.well-known/acme-challenge/index.php
  and
  
  Code:

  /.well-known/index.php
• Fingerprints shells via upload form and the
  Code:

  MARIJUANA/icon.png
  reference
  
• Saves to
  Code:

  index-shells.txt
  and
  
  Code:

  MARIJUANA.txt
• 100 threads
  

4. newbackdoor.pyType: Mass Shell Scanner (cong.php / st.php / css/index.php / radio.php)

• Checks multiple shell paths, matches banners like
  Code:

  Mr.Combet WebShell
  ,
  
  Code:

  Uname:
  ,
  
  Code:

  L I E R SHELL
  ,
  
  Code:

  BlackDragon
• Saves to
  Code:

  cong-Shells.txt
  ,
  
  Code:

  wso-Shells.txt
  ,
  
  Code:

  ex-Shells.txt
  ,
  
  Code:

  re-Shells.txt
• 100 threads
  

5. newExloitWP.pyType: Joomla/WP Plugin Scanner (envato-market)

• Scans a single hardcoded path:
  Code:

  /wp-content/plugins/envato-market/inc/class-envato-market-api.php
• Fingerprints via
  Code:

  Upload File : <input
• Saves to
  Code:

  wso-shell.txt
• 100 threads
  

6. prv8-backdoor.pyType: Mass Shell Scanner (license.php / cjfuns.php)

• Checks
  Code:

  /.well-known/acme-challenge/license.php
  and
  
  Code:

  /cjfuns.php
• Fingerprints via password form and
  Code:

  Doc Root:
• Saves to
  Code:

  license-Shells.txt
  ,
  
  Code:

  cjfuns-Shells.txt
• 150 threads
  

7. Tiny-File-Manager.pyType: Mass Tiny File Manager Scanner

• Checks
  Code:

  /wp-includes/js/tinymce/skins/lightgray/img/index.php?p=
• Fingerprints via
  Code:

  Tiny File Manager
  string
  
• Saves to
  Code:

  Tiny-File-Manager.txt
• 100 threads
  

8. WooCommerce-Payments.pyType: WooCommerce Payments Exploit (CVE-2023-28121)

• Reads
  Code:

  /wp-content/plugins/woocommerce-payments/readme.txt
  , extracts stable version
  
• If version < 5.6.2 → vulnerable
  
• Creates a new admin user (
  Code:

  rangexxx
  ) via
  
  Code:

  /wp-json/wp/v2/users
  using the
  
  Code:

  X-WCPAY-PLATFORM-CHECKOUT-USER: 1
  header trick
  
• Saves creds to
  Code:

  admin.txt
  , vulns to
  
  Code:

  Vulnerable.txt
• 100 threads
  

9. yallah.pyType: Reverse IP → Domains Finder

• Takes a list of IPs (user prompted for filename)
  
• Queries
  Code:

  domains.tntcode.com/ip/<ip>
  to extract all domains hosted on that IP
  
• Appends results to
  Code:

  domains.txt
• Uses random fake User-Agent, 50 threads, 5 retries per IP
  

10. Yanz.pyType: Mass Webshell Scanner (Yanz/Alfa-Rex family)

• Huge Pathlist of known backdoor paths (alfa-rex, alfanew, wsoyanz, repeater, dropdown, about.php7, etc.)
  
• Fingerprints via
  Code:

  Yanz Webshell!
• Saves to
  Code:

  Webshell!.txt
• 100 threads
  

11. Ya-shellWSO.pyType: Mass Yanz Webshell Scanner (targeted paths)

• Checks
  Code:

  /ioxi-rex4.php7
  ,
  
  Code:

  /wp-content/plugins/seoo/alfa-ioxi.php
  ,
  
  Code:

  /wp-content/plugins/classic-editor/wp-login.php
• Fingerprints via
  Code:

  Yanz Webshell!
• Saves to
  Code:

  Yanzvuln.txt
• 100 threads
  

 

 

lol

[18]

Show ContentSpoiler:

1. B-Wso.pyType: Mass WSO Shell Scanner

• Reads a list of target sites from a file
  
• Tries a huge list of hardcoded paths (wso112233.php, shell20211028.php, bala.php, dropdown.php, etc.) across many directories
  
• Detects WSO shell by looking for the string
  Code:

  Uname:
  in the response
  
• Saves found shells to
  Code:

  wso-shell.txt
• Uses 100 threads
  

2. my1-backdoor-pesword.pyType: Mass Shell Scanner (my1.php / cgi-bin / well-known)

• Scans targets for
  Code:

  my1.php
  in several paths (root, wp-admin/images, cgi-bin, .well-known/acme-challenge)
  
• Fingerprints a specific post-form shell by matching the input form HTML
  
• Saves to
  Code:

  Shells.txt
• 100 threads
  

3. new-backdoor (2).pyType: Mass Shell Scanner (MARIJUANA / acme-challenge index.php)

• Checks
  Code:

  /.well-known/acme-challenge/index.php
  and
  
  Code:

  /.well-known/index.php
• Fingerprints shells via upload form and the
  Code:

  MARIJUANA/icon.png
  reference
  
• Saves to
  Code:

  index-shells.txt
  and
  
  Code:

  MARIJUANA.txt
• 100 threads
  

4. newbackdoor.pyType: Mass Shell Scanner (cong.php / st.php / css/index.php / radio.php)

• Checks multiple shell paths, matches banners like
  Code:

  Mr.Combet WebShell
  ,
  
  Code:

  Uname:
  ,
  
  Code:

  L I E R SHELL
  ,
  
  Code:

  BlackDragon
• Saves to
  Code:

  cong-Shells.txt
  ,
  
  Code:

  wso-Shells.txt
  ,
  
  Code:

  ex-Shells.txt
  ,
  
  Code:

  re-Shells.txt
• 100 threads
  

5. newExloitWP.pyType: Joomla/WP Plugin Scanner (envato-market)

• Scans a single hardcoded path:
  Code:

  /wp-content/plugins/envato-market/inc/class-envato-market-api.php
• Fingerprints via
  Code:

  Upload File : <input
• Saves to
  Code:

  wso-shell.txt
• 100 threads
  

6. prv8-backdoor.pyType: Mass Shell Scanner (license.php / cjfuns.php)

• Checks
  Code:

  /.well-known/acme-challenge/license.php
  and
  
  Code:

  /cjfuns.php
• Fingerprints via password form and
  Code:

  Doc Root:
• Saves to
  Code:

  license-Shells.txt
  ,
  
  Code:

  cjfuns-Shells.txt
• 150 threads
  

7. Tiny-File-Manager.pyType: Mass Tiny File Manager Scanner

• Checks
  Code:

  /wp-includes/js/tinymce/skins/lightgray/img/index.php?p=
• Fingerprints via
  Code:

  Tiny File Manager
  string
  
• Saves to
  Code:

  Tiny-File-Manager.txt
• 100 threads
  

8. WooCommerce-Payments.pyType: WooCommerce Payments Exploit (CVE-2023-28121)

• Reads
  Code:

  /wp-content/plugins/woocommerce-payments/readme.txt
  , extracts stable version
  
• If version < 5.6.2 → vulnerable
  
• Creates a new admin user (
  Code:

  rangexxx
  ) via
  
  Code:

  /wp-json/wp/v2/users
  using the
  
  Code:

  X-WCPAY-PLATFORM-CHECKOUT-USER: 1
  header trick
  
• Saves creds to
  Code:

  admin.txt
  , vulns to
  
  Code:

  Vulnerable.txt
• 100 threads
  

9. yallah.pyType: Reverse IP → Domains Finder

• Takes a list of IPs (user prompted for filename)
  
• Queries
  Code:

  domains.tntcode.com/ip/<ip>
  to extract all domains hosted on that IP
  
• Appends results to
  Code:

  domains.txt
• Uses random fake User-Agent, 50 threads, 5 retries per IP
  

10. Yanz.pyType: Mass Webshell Scanner (Yanz/Alfa-Rex family)

• Huge Pathlist of known backdoor paths (alfa-rex, alfanew, wsoyanz, repeater, dropdown, about.php7, etc.)
  
• Fingerprints via
  Code:

  Yanz Webshell!
• Saves to
  Code:

  Webshell!.txt
• 100 threads
  

11. Ya-shellWSO.pyType: Mass Yanz Webshell Scanner (targeted paths)

• Checks
  Code:

  /ioxi-rex4.php7
  ,
  
  Code:

  /wp-content/plugins/seoo/alfa-ioxi.php
  ,
  
  Code:

  /wp-content/plugins/classic-editor/wp-login.php
• Fingerprints via
  Code:

  Yanz Webshell!
• Saves to
  Code:

  Yanzvuln.txt
• 100 threads
  

 

 

wwwwwwwwwwwwwwwwwwwwwwww

[5]

TY