#!/usr/bin/php
<?php
/**********************************************************************************
* 	Janissaries Joomla Fingerprint Tool Using PacketStormSecurity with Multithread
* 	Coded by Miyachung
* 	miyachung@hotmail.com
* 	Janissaries.Org
* 	Usage -> php jomplug.php FILENAME
* 	Example -> php jomplug.php sites.txt
* 	Site list must be www.site.com	
* 	Demonstration -> http://www.youtube.com/watch?v=WbRX099akjA
***********************************************************************************/
set_time_limit(0);
if($argv[1] && file_exists($argv[1]))
{
$finder = new finder;
$finder->main($argv[1],5);
}
else
{
exit("
\n************************************************************
* Janissaries Joomla Fingerprint Tool Using PacketStormSecurity with Multithread
* Coded by Miyachung
* Usage -> php jomplug.php FILENAME
* Example -> php jomplug.php sites.txt
************************************************************\n
[-]File not found.\n
");
}

class finder
{

private $regex 			= "#option=(.*?)\"#si";
private $packetlink 	= "http://packetstormsecurity.com/search/?q=";
private $expregex		= '#<a class="ico text-plain" href="(.*?)" title="(.*?)">(.*?)</a>#si';

public function main($url,$thnum)
{
	$url = file($url);
	$url = str_replace("\n","",$url);
	$url = str_replace("\r","",$url);
	$this->threading($url,$thnum);
}

private function threading($url,$thread)
{

$mcurl = curl_multi_init();
$urlx   = array_chunk($url,$thread);
$inc = 0;

foreach($urlx as $thlinks)
{
	for($i=0;$i<=count($thlinks)-1;$i++)
	{
		if(!preg_match('/http/',$thlinks[$i])) $links = "http://".$thlinks[$i];
		$ch[$i]=curl_init();
		curl_setopt($ch[$i],CURLOPT_RETURNTRANSFER,1);
		curl_setopt($ch[$i],CURLOPT_URL,$links);
		curl_setopt($ch[$i],CURLOPT_FOLLOWLOCATION,1);
		curl_setopt($ch[$i],CURLOPT_TIMEOUT,25);
		curl_multi_add_handle($mcurl,$ch[$i]);
	}
	
	do
	{
		curl_multi_exec($mcurl,$active);
	}while( $active > 0 );
	
	foreach($ch as $cid => $cend)
	{
	$datas[$cid] = curl_multi_getcontent($cend);
	curl_multi_remove_handle($mcurl,$cend);
	$inc++;
	echo "#########################################################\n";
	echo "[*]Scanning site: ".$thlinks[$cid]." $inc / ".count($url)."\n";
	if(!preg_match('/option=com_/',$datas[$cid]))
	{
	echo "[-]It isn't joomla\n";
	echo "#########################################################\n\n";
	continue;
	}
	preg_match_all($this->regex,$datas[$cid],$plugin);
	foreach(array_values(array_filter(array_unique(($plugin[1])))) as $plugins)
	{
	$plugins = explode("&",$plugins);
	$pl[] = $plugins[0];
	
	}
	echo "[*]Total plugins: ".count(array_unique($pl))."\n";
	foreach(array_unique($pl) as $pluginx)
	{
		$found = false;
		$returned	=	$this->curl(urlencode($pluginx));
		echo "[*]Looking bugs for ".$pluginx." from packetstormsecurity\n";
		usleep(1000);
		
		if(preg_match_all($this->expregex,$returned,$exploit))
		{
		echo "-----------------------------------------------------------------------------\n\n";
		$this->savefile("logz.txt","#########################################################\n[*]Site -> $thlinks[$cid]\n-----------------------------------------------------------------------------\n");
		foreach($exploit[1] as $id => $exploits)
			{
				$found = true;
				$exp_link  = "http://packetstormsecurity.com".$exploits;
				$exp_link  = trim($exp_link);
				$exp_title = $exploit[3][$id];
				$exp_title = trim($exp_title);
				$exp_title = urldecode($exp_title);
				
				echo "[+]Found -> ".$exp_title."\n";
				echo "[!]Link  -> ".$exp_link."\n";
				
				$this->savefile("logz.txt","[+]Found -> $exp_title\n[!]Link -> $exp_link\n######################\n");
			}
			echo "\n-----------------------------------------------------------------------------\n";
		}
		unset($pl);
		if(!$found){ echo "[-]$pluginx -> No Results Found From PacketStormSecurity\n";}
		else
		{
		$this->savefile("logz.txt","-----------------------------------------------------------------------------\n#########################################################\n");
		}
	}
	echo "#########################################################\n\n";
	}
	
}


}

private function curl($plugin)
{
$curl=curl_init();
curl_setopt($curl,CURLOPT_RETURNTRANSFER,1);
curl_setopt($curl,CURLOPT_URL,$this->packetlink.$plugin);
$exec=curl_exec($curl);
return $exec;
}

private function savefile($filename,$content)
{
$fopen=fopen($filename,'ab');
fwrite($fopen,$content."\r\n");
fclose($fopen);
}


}


?>
