viniciushenriqueti/letmefuckit-scannerScanner and Exploit for Magento 1.9
Scanner and Exploit Magento
The Scanner explores the SQLi Vulnerability (1.9.1.0 CE) of Magento.
The vulnerability was fixed in Patch SUPEE-5344, however, the scanner is used to locate and test systems that did not apply the security patch.
LetMeFuckIt was written in Python and uses the following libraries:
pygoogle, argparse, urllib2, requests, base64
letmefuckit.py --dork <dork> --pages <number> --user <user> --pwd <pass>
letmefuckit.py --dork "inurl:customer/account/login/ site:com.br" --pages 4 --user adm --pwd pass
--dork --user --pwd --pages --help
"inurl:/customer/account/login site:com.br"
"inurl:/checkout/onepage/ site:com.br"
Through the inserted dork, a scan is performed on Google, the URLs are saved in the urls.txt file, which are later automatically tested.
The users provided at runtime are automatically added as administrators on vulnerable sites.
If you encounter the error below, it is because the scanner uses the pygoogle library, which is outdated with the new Google API system, as now a Key is required to use the API.
pygoogle ERROR __search__| responseDetails : Suspected Terms of Service Abuse. Please see http://code.google.com/apis/errors
If the error appears, just wait 1 or 2 minutes. The Scanner will return to normal.
Exploit: Magento Shoplift exploit (SUPEE-5344) by Manish Kishan Tanwar AKA error1046 on 25/08/2015
LetMeFuckIt Scanner AutoPwned by OntheFrontLine on 27/09/2015