Advertisement
choirurrizal

Joomla Vulnerability Scanner by ShinChan

Oct 14th, 2017
1,470
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
PHP 8.60 KB | None | 0 0
  1. <?php
  2. # ShinChan - N45HT - N45HT.WEB.ID
  3. # fb.com/angelia.put - fb.com/ShinChan.admin - fb.com/N45HTOfficial - fb.com/groups/N45HTOfficial
  4.  
  5. # Joomla Vulnerability Scanner - coded by ShinChan | copyright ShinChan@2017#
  6.  
  7. echo "
  8.  ___  _  _  __  _  _  __  _  _   __   _  _     _    _  ____  ___
  9. / __)( )( )(  )( \( )/ _)( )( ) (  ) ( \( )   ( \/\/ )(_  _)(  _)
  10. \__ \ )__(  )(  )  (( (_  )__(  /__\  )  (  ___\    /   )(   ) _)
  11. (___/(_)(_)(__)(_)\_)\__)(_)(_)(_)(_)(_)\_)(___)\/\/   (__) (_)  
  12.        Joomla Vulnerability Scanner - coded by ShinChan
  13.  
  14.     Thanks to :  PETR03X - Comod0x - SCYTHE404_LOL - Grav3
  15.                        All Members N45HT
  16.  
  17.  
  18. ";
  19. echo "Input your target (ex:victim.com) : ";
  20. $target = trim(fgets(STDIN));
  21. $totalvuln = "0";
  22. $totalnotvuln = "0";
  23.  
  24. if(!preg_match("/^http:\/\//",$target) AND !preg_match("/^https:\/\//",$target)){
  25.     $targets = "http://$target";
  26. }else{
  27.     $targets = $target;
  28. }
  29.  
  30. echo "\n[~] Scanning => $targets";
  31.  
  32. /* Exploit COM SEXY - ShinChan - N45HT */
  33. echo "\n\n[+] Testing Exploit COM_SEXY";
  34. $urlsexy = "$targets/components/com_sexycontactform/fileupload/index.php";
  35. $curlsexy = curl_init();
  36. curl_setopt($curlsexy, CURLOPT_URL, $urlsexy);
  37. curl_setopt($curlsexy, CURLOPT_FOLLOWLOCATION, 1);
  38. curl_setopt($curlsexy, CURLOPT_RETURNTRANSFER, 1);
  39. $response = curl_exec($curlsexy);
  40. $httpCode = curl_getinfo($curlsexy, CURLINFO_HTTP_CODE);
  41. curl_close($curlsexy);
  42. if($httpCode == 200){
  43.     echo "\n    > Result : 200 ok";
  44.     echo "\n    > Exploit : COM_SEXY";
  45.     echo "\n    > Tutorial : http://yobuilder.com/8uWs\n";
  46.     $totalvuln = $totalvuln + 1;
  47. }else{
  48.     echo "\n    > Result : 404";
  49.     echo "\n    > Not Vulnerable";
  50.     $totalnotvuln = $totalnotvuln + 1;
  51. }
  52. /* Exploit COM SEXY - ShinChan - N45HT */
  53.  
  54. /* Exploit COM jDownloads - ShinChan - N45HT */
  55. echo "\n\n[+] Testing Exploit COM_jDownloads";
  56. $urljdownloads = "$targets/index.php?option=com_jdownloads&Itemid=1&view=upload";
  57. $curljdownloads = curl_init();
  58. curl_setopt($curljdownloads, CURLOPT_URL, $urljdownloads);
  59. curl_setopt($curljdownloads, CURLOPT_FOLLOWLOCATION, 1);
  60. curl_setopt($curljdownloads, CURLOPT_RETURNTRANSFER, 1);
  61. $response = curl_exec($curljdownloads);
  62. $httpCode = curl_getinfo($curljdownloads, CURLINFO_HTTP_CODE);
  63. curl_close($curljdownloads);
  64. if($httpCode == 200){
  65.     echo "\n    > Result : 200 ok";
  66.     echo "\n    > Exploit : COM_jDownloads";
  67.     echo "\n    > Tutorial : http://yobuilder.com/8tlO\n";
  68.     $totalvuln = $totalvuln + 1;
  69. }else{
  70.     echo "\n    > Result : 404";
  71.     echo "\n    > Not Vulnerable";
  72.     $totalnotvuln = $totalnotvuln + 1;
  73. }
  74. /* Exploit COM jDownloads - ShinChan - N45HT */
  75.  
  76. /* Exploit COM MEDIA - ShinChan - N45HT */
  77. echo "\n\n[+] Testing Exploit COM_MEDIA";
  78. $urlmedia = "$targets/index.php?option=com_media&view=images&tmpl=component&fieldid=&e_name=jform_articletext&asset=com_content&author=&folder=";
  79. $curlmedia = curl_init();
  80. curl_setopt($curlmedia, CURLOPT_URL, $urlmedia);
  81. curl_setopt($curlmedia, CURLOPT_FOLLOWLOCATION, 1);
  82. curl_setopt($curlmedia, CURLOPT_RETURNTRANSFER, 1);
  83. $response = curl_exec($curlmedia);
  84. $httpCode = curl_getinfo($curlmedia, CURLINFO_HTTP_CODE);
  85. curl_close($curlmedia);
  86. if($httpCode == 200){
  87.     echo "\n    > Result : 200 ok";
  88.     echo "\n    > Exploit : COM_MEDIA";
  89.     echo "\n    > Tutorial : http://yobuilder.com/8uUU\n";
  90.     $totalvuln = $totalvuln + 1;
  91. }else{
  92.     echo "\n    > Result : 404";
  93.     echo "\n    > Not Vulnerable";
  94.     $totalnotvuln = $totalnotvuln + 1;
  95. }
  96. /* Exploit COM MEDIA - ShinChan - N45HT */
  97.  
  98. /* Exploit COM Jfuploader - ShinChan - N45HT */
  99. echo "\n\n[+] Testing Exploit COM_Jfuploader";
  100. $urljfuploader = "$targets/index.php?option=com_jfuploader&Itemid=1";
  101. $curljfuploader = curl_init();
  102. curl_setopt($curljfuploader, CURLOPT_URL, $urljfuploader);
  103. curl_setopt($curljfuploader, CURLOPT_FOLLOWLOCATION, 1);
  104. curl_setopt($curljfuploader, CURLOPT_RETURNTRANSFER, 1);
  105. $response = curl_exec($curljfuploader);
  106. $httpCode = curl_getinfo($curljfuploader, CURLINFO_HTTP_CODE);
  107. curl_close($curljfuploader);
  108. if($httpCode == 200){
  109.     echo "\n    > Result : 200 ok";
  110.     echo "\n    > Exploit : COM_Jfuploader";
  111.     echo "\n    > Tutorial : http://yobuilder.com/8uBj\n";
  112.     $totalvuln = $totalvuln + 1;
  113. }else{
  114.     echo "\n    > Result : 404";
  115.     echo "\n    > Not Vulnerable";
  116.     $totalnotvuln = $totalnotvuln + 1;
  117. }
  118. /* Exploit COM Jfuploader - ShinChan - N45HT */
  119.  
  120. /* Exploit COM USERS - ShinChan - N45HT */
  121. echo "\n\n[+] Testing Exploit COM_USERS";
  122. $urlusers = "$targets/index.php?option=com_users&view=registration";
  123. $curlusers = curl_init();
  124. curl_setopt($curlusers, CURLOPT_URL, $urlusers);
  125. curl_setopt($curlusers, CURLOPT_FOLLOWLOCATION, 1);
  126. curl_setopt($curlusers, CURLOPT_RETURNTRANSFER, 1);
  127. $response = curl_exec($curlusers);
  128. $httpCode = curl_getinfo($curlusers, CURLINFO_HTTP_CODE);
  129. curl_close($curlusers);
  130. if($httpCode == 200){
  131.     echo "\n    > Result : 200 ok";
  132.     echo "\n    > Exploit : COM_USERS";
  133.     echo "\n    > Tutorial : http://yobuilder.com/94tM\n";
  134.     $totalvuln = $totalvuln + 1;
  135. }else{
  136.     echo "\n    > Result : 404";
  137.     echo "\n    > Not Vulnerable";
  138.     $totalnotvuln = $totalnotvuln + 1;
  139. }
  140. /* Exploit COM USERS - ShinChan - N45HT */
  141.  
  142. /* Exploit COM KSAdvertiser - ShinChan - N45HT */
  143. echo "\n\n[+] Testing Exploit COM_KSAdvertiser";
  144. $urlksadviser = "$targets/index.php?option=com_user&view=login";
  145. $curlksadviser = curl_init();
  146. curl_setopt($curlksadviser, CURLOPT_URL, $urlksadviser);
  147. curl_setopt($curlksadviser, CURLOPT_FOLLOWLOCATION, 1);
  148. curl_setopt($curlksadviser, CURLOPT_RETURNTRANSFER, 1);
  149. $response = curl_exec($curlksadviser);
  150. $httpCode = curl_getinfo($curlksadviser, CURLINFO_HTTP_CODE);
  151. curl_close($curlksadviser);
  152. if($httpCode == 200){
  153.     echo "\n    > Result : 200 ok";
  154.     echo "\n    > Exploit : COM_KSAdvertiser";
  155.     echo "\n    > Tutorial : http://yobuilder.com/8uHb\n";
  156.     $totalvuln = $totalvuln + 1;
  157. }else{
  158.     echo "\n    > Result : 404";
  159.     echo "\n    > Not Vulnerable";
  160.     $totalnotvuln = $totalnotvuln + 1;
  161. }
  162. /* Exploit COM KSAdvertiser - ShinChan - N45HT */
  163.  
  164. /* Exploit COM OSProperty - ShinChan - N45HT */
  165. echo "\n\n[+] Testing Exploit COM_OSProperty";
  166. $urlosproperty = "$targets/component/osproperty/?task=agent_register";
  167. $curlosproperty = curl_init();
  168. curl_setopt($curlosproperty, CURLOPT_URL, $urlosproperty);
  169. curl_setopt($curlosproperty, CURLOPT_FOLLOWLOCATION, 1);
  170. curl_setopt($curlosproperty, CURLOPT_RETURNTRANSFER, 1);
  171. $response = curl_exec($curlosproperty);
  172. $httpCode = curl_getinfo($curlosproperty, CURLINFO_HTTP_CODE);
  173. curl_close($curlosproperty);
  174. if($httpCode == 200){
  175.     echo "\n    > Result : 200 ok";
  176.     echo "\n    > Exploit : COM_OSProperty";
  177.     echo "\n    > Tutorial : http://yobuilder.com/8uNE\n";
  178.     $totalvuln = $totalvuln + 1;
  179. }else{
  180.     echo "\n    > Result : 404";
  181.     echo "\n    > Not Vulnerable";
  182.     $totalnotvuln = $totalnotvuln + 1;
  183. }
  184. /* Exploit COM OSProperty - ShinChan - N45HT */
  185.  
  186. /* Exploit COM FABRIK - ShinChan - N45HT */
  187. echo "\n\n[+] Testing Exploit COM_FABRIK";
  188. $urlfabrik = "$targets/index.php?option=com_fabrik&c=import&view=import&filetype=csv&table=1";
  189. $curlfabrik = curl_init();
  190. curl_setopt($curlfabrik, CURLOPT_URL, $urlfabrik);
  191. curl_setopt($curlfabrik, CURLOPT_FOLLOWLOCATION, 1);
  192. curl_setopt($curlfabrik, CURLOPT_RETURNTRANSFER, 1);
  193. $response = curl_exec($curlfabrik);
  194. $httpCode = curl_getinfo($curlfabrik, CURLINFO_HTTP_CODE);
  195. curl_close($curlfabrik);
  196. if($httpCode == 200){
  197.     echo "\n    > Result : 200 ok";
  198.     echo "\n    > Exploit : COM_FABRIK";
  199.     echo "\n    > Tutorial : http://yobuilder.com/94tM\n";
  200.     $totalvuln = $totalvuln + 1;
  201. }else{
  202.     echo "\n    > Result : 404";
  203.     echo "\n    > Not Vulnerable";
  204.     $totalnotvuln = $totalnotvuln + 1;
  205. }
  206. /* Exploit COM FABRIK - ShinChan - N45HT */
  207.  
  208. /* Exploit COM Collector - ShinChan - N45HT */
  209. echo "\n\n[+] Testing Exploit COM_Collector";
  210. $urlcollector = "$targets/index.php?option=com_collector&view=filelist&tmpl=component&folder=&type=1";
  211. $curlcollector = curl_init();
  212. curl_setopt($curlcollector, CURLOPT_URL, $urlcollector);
  213. curl_setopt($curlcollector, CURLOPT_FOLLOWLOCATION, 1);
  214. curl_setopt($curlcollector, CURLOPT_RETURNTRANSFER, 1);
  215. $response = curl_exec($curlcollector);
  216. $httpCode = curl_getinfo($curlcollector, CURLINFO_HTTP_CODE);
  217. curl_close($curlcollector);
  218. if($httpCode == 200){
  219.     echo "\n    > Result : 200 ok";
  220.     echo "\n    > Exploit : COM_Collector";
  221.     echo "\n    > Tutorial : http://yobuilder.com/8uP0\n";
  222.     $totalvuln = $totalvuln + 1;
  223. }else{
  224.     echo "\n    > Result : 404";
  225.     echo "\n    > Not Vulnerable";
  226.     $totalnotvuln = $totalnotvuln + 1;
  227. }
  228. /* Exploit COM Collector - ShinChan - N45HT */
  229.  
  230. echo "\n\n [x] Result :";
  231. echo "\n    [~] Total Vulnerability = $totalvuln";
  232. echo "\n    [~] Total Not Vulnerability = $totalnotvuln\n\n";
  233. ?>
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement