Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- <?php
- /*
- Joomla Scanner
- http://youtube.com/user/brazilobscure
- */
- @set_time_limit (0);
- if (!isset ($argv[1]))
- die ("\nModo De Usar : php {$argv[0]} sites.txt\n\n");
- if (!file_exists ($argv[1]))
- die ("\"{$argv[1]}\" Arquivo Nao Encontrado !\n\n");
- $urls = file ($argv[1]);
- echo "\n\n";
- echo " ###################################\n";
- echo " # #\n";
- echo " # *** Brazilians Hackers Team *** #\n";
- echo " # #\n";
- echo " ###################################\n";
- echo "\n\n";
- echo " SITES CARREGADOS: ".count ($urls)."\n\n";
- scan ($urls);
- function scan ($urls)
- {
- $path = array (
- "com_jce"=>array ("/No function call specified/i"=>"/index.php?option=com_jce&task=plugin&plugin=imgmanager&file=imgmanager&method=form"),
- "com_jnews"=>array ("/(?=Saving your image to)(?!can't open file)/i"=>"/components/com_jnews/includes/openflashchart/php-ofc-library/ofc_upload_image.php?name=yunus.txt"),
- "com_oziogallery"=>array ("/Can't open file for writing/i"=>"/components/com_oziogallery/imagin/scripts_ralcr/filesystem/writeToFile.php"),
- "com_oziogallery2"=>array ("/Can't open file for writing/i"=>"/components/com_oziogallery2/imagin/scripts_ralcr/filesystem/writeToFile.php"),
- "com_civicrm"=>array ("/(?=Saving your image to)(?!can't open file)/i"=>"/administrator/components/com_civicrm/civicrm/packages/OpenFlashChart/php-ofc-library/ofc_upload_image.php?name=yunus.txt"),
- "com_community"=>array ("/No access/i"=>"/components/com_community/index.html"),
- "com_media"=>array ("/<input type=\"file\" id=\"upload-file\" name=\"Filedata\" \/>/i"=>"/?option=com_media&view=images&tmpl=component&fieldid=&e_name=jform_articletext&asset=com_content&author=&folder="),
- "com_maianmedia"=>array ("/(?=Saving your image to)(?!can't open file)/i"=>"/administrator/components/com_maianmedia/charts/php-ofc-library/ofc_upload_image.php?name=yunus.txt")
- );
- foreach ($urls as $url)
- {
- $url = trim ($url);
- echo " TESTANDO SITE --> $url\n\n";
- foreach ($path as $key=>$paths)
- {
- echo "\t\t$key : ";
- $file = fopen ("$key.txt", "a");
- foreach ($paths as $key2=>$p)
- {
- $data = @file_get_contents ($url.$p);
- if (preg_match ($key2, $data))
- {
- echo "--------> ++++ Vulneravel ++++\n\n";
- fwrite ($file, "$url\n");
- }
- else
- echo "Nao Vulneravel\n";
- }
- }
- echo "\n";
- }
- }
- ?>
Add Comment
Please, Sign In to add comment