API tools faq
paste
Advertisement
jaenudinmaulana69

Shellfinder MadLeets

jaenudinmaulana69
Feb 18th, 2018
213
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
PHP 4.44 KB | None | 0 0
raw download clone embed print report
  1. <style>
  2.     #sbz {text-align: center;color: #000;font-size: 30px;font-weight: bold;line-height: 0.8em;letter-spacing: 0.2em;margin:0;text-shadow: 0 1px 20px #00FF00, 0 0 5px #00FF00, 0 0px 30px #00FF00, 1px 0 3px #00FF00;}
  3.     span.tab{padding: 0 10px; }
  4.     .box{
  5.         -moz-box-shadow: 1px 1px 8px #666;
  6.         -webkit-box-shadow: 1px 1px 8px #666;
  7.         box-shadow: 1px 1px 8px #40D5D2;
  8.         border: solid 1px black;
  9.         -webkit-border-radius: 8px 8px 0px 0px;
  10.         -moz-border-radius: 8px 8px 0px 0px;
  11.         border-radius: 8px 8px 0px 0px;
  12.         margin: 15px 0px;
  13.         background-color: #F5F5F5;
  14.          opacity: 0.8;
  15.          width:840px;
  16.     }
  17.     #footer {
  18.     position : absolute;
  19.     bottom : 0;
  20.     height : 40px;
  21.     margin-top : 40px;
  22.     }
  23.     body{
  24.         background-color: black;
  25.        background: url('http://images7.alphacoders.com/332/332232.jpg') no-repeat center center fixed;
  26.     }
  27. </style>
  28. <?php
  29. @set_time_limit(0);error_reporting(0);
  30. function recurseDir($dir,$list) {
  31.     if(is_dir($dir)) {
  32.         if($dh = opendir($dir)){
  33.             while($file = readdir($dh)){
  34.                 if($file != '.' && $file != '..'){
  35.                     if(is_dir($dir . '/' .  $file)){
  36.                         $list = recurseDir($dir .'/' .  $file  . '/',$list);
  37.                     }else{
  38.                         $list[] = $dir . '/' . $file;
  39.                      }
  40.                 }
  41.              }
  42.         }
  43.          closedir($dh);        
  44.    }
  45.    return $list;
  46. }
  47. echo '<html><head><title>Shellfinder</title></head><body><center><pre id="sbz">Shellfinder by T3N38R15</pre><div class="box" align="left">';
  48.  
  49. if(empty($_POST["go"])==0){
  50.     $files = array();
  51.     $files = recurseDir($_POST["directory"],$files);
  52.     echo '<table cellpadding="2"><tr><td>Path</td><td>Functions</td><td> Shell ?</td><td>OPTION</td></tr>';
  53.     $i =1;
  54.     foreach($files as $file){
  55.         if($file!=getcwd() . $_SERVER["PHP_SELF"]){
  56.             $content=file_get_contents($file);
  57.             if (preg_match('/(<\?php)/i',$content)){
  58.                 if (preg_match('/(base64_\(|eval\s*\(|system\s*\(|shell_|exec\s*\(|move_uploaded_file\s*\(|gzinflate\s*\()/i',$content)){    
  59.                     $ve1=0;$ve2=0;$ve3=0;$ve4=0;$ve5=0;$ve6=0;
  60.                     echo '<tr><td>'. $file . '</td><td>';
  61.                     if (preg_match('/(base64_)/i',$content)){echo "base64 decoding/encoding,";$ve1=1;}
  62.                     if (preg_match('/(eval)/i',$content)){echo "eval,";$ve2=1;}
  63.                     if (preg_match('/(system)/i',$content)){echo "system,";$ve3=1;}
  64.                     if (preg_match('/(shell_)/i',$content)){echo "Shell_,";$ve4=1;}
  65.                     if (preg_match('/(move_uploaded_file)/i',$content)){echo "move_uploaded_file,";$ve5=1;}
  66.                     if (preg_match('/(gzinflate)/i',$content)){echo "gzinflate,";$ve6=1;}
  67.                     echo '</td><td>';
  68.                     if(($ve1==1 && $ve2==1) || ($ve6==1 && $ve2==1)){
  69.                         echo '<font color="red">possible shell 85%</font>';
  70.                     }elseif($ve5==1){
  71.                         echo '<font color="red">possible uploader 90%</font>';
  72.                     }elseif($ve4==1){
  73.                         echo '<font color="red">possible shell-Console 50%</font>';
  74.                     }elseif($ve3==1){
  75.                         echo '<font color="red">system-shell 50%</font>';
  76.                     }else{
  77.                         echo ' ';
  78.                     }
  79.                     echo '</td><td><form name="dt' . $i . '" method="post" target="_blank" style="display:inline"><input type="hidden" name="de" value="' . $file . '"><input type="submit" value="DELETE"></form></tr>';
  80.                     $i++;
  81.                 }
  82.             }
  83.         }
  84.     }
  85.     echo '</tr></table>';
  86. }else{
  87.     if(!empty($_POST["de"])){
  88.         echo '<center>Delete the file : ' . $_POST["de"] . '</br>';
  89.         unlink($_POST["de"]);
  90.         if(file_exists($_POST["de"])){echo "The file is protectet ...";}else{echo "The file is deleted";}
  91.         echo '</center>';
  92.     }else{
  93.         echo '<center>To start the scanning press go.</br>this can took a bit of your time :)</br></br><form method="POST">scann : <input type="text" name="directory" value="' . $_SERVER["DOCUMENT_ROOT"] . '"/></br><input type="submit" name="go" value="GO"/></form></center>';
  94.     }
  95. }
  96. echo '</div></center></body><div id="footer"><pre id="sbz">Team Madleets</pre></div></html>';
  97. ?>
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!