API tools faq
paste
Xyb3r-D3vil

Zone-h Mass Notifier

Xyb3r-D3vil
Apr 8th, 2016
220
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 6.59 KB | None | 0 0
raw download clone embed print report
  1. Our Blogpost https://xyb3rd3vil-1337hax0r.blogspot.com
  2.  
  3. <?php
  4. ob_start();
  5.  
  6. /************************************
  7.  
  8. Zone-H Mass Deface Poster
  9.  
  10. *************************************/
  11.  
  12. // curl var mi ?
  13.  
  14.  
  15.  
  16. $sub = get_loaded_extensions();
  17.  
  18. if(!in_array("curl", $sub)){
  19.  
  20. die('Can not connect to this server to reconnect to the server ip_address');
  21.  
  22. }
  23.  
  24.  
  25.  
  26. // sari sari ?rdekler ucusuyorrrrrr...
  27.  
  28. ?>
  29.  
  30. <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
  31.  
  32. <html xmlns="http://www.w3.org/1999/xhtml">
  33.  
  34. <style>
  35.  
  36. body{margin:0px;font-style:normal;font-size:10px;color:#FFFFFF;font-family:Verdana,Arial;background-color:#3a3a3a;scrollbar-face-color: #303030;scrollbar-highlight-color: #5d5d5d;scrollbar-shadow-color: #121212;scrollbar-3dlight-color: #3a3a3a;scrollbar-arrow-color: #9d9d9d;scrollbar-track-color: #3a3a3a;scrollbar-darkshadow-color: #3a3a3a;}
  37.  
  38. input,
  39.  
  40. .kbrtm,select{background:#303030;color:#FFFFFF;fon t-family:Verdana,Arial;font-size:10px;vertical-align:middle; height:18; border-left:1px solid #5d5d5d; border-right:1px solid #121212; border-bottom:1px solid #121212; border-top:1px solid #5d5d5d;}
  41.  
  42. button{background-color: #666666; font-size: 8pt; color: #FFFFFF; font-family: Tahoma; border: 1 solid #666666;}
  43.  
  44. body,td,th { font-family: verdana; color: #d9d9d9; font-size: 11px;}body { background-color: #303030;}
  45.  
  46. textarea,option{background:#303030;color:#FFFFFF;f ont-family:Verdana,Arial;font-size:10px;vertical-align:middle; border-left:1px solid #121212; border-right:1px solid #5d5d5d; border-bottom:1px solid #5d5d5d; border-top:1px solid #121212;}
  47.  
  48. </style>
  49.  
  50.  
  51. <title>Zone-H Mass Notifier</title>
  52.  
  53. <style type="text/css">
  54.  
  55. .style1 {
  56.  
  57. text-align: center;
  58.  
  59. }
  60.  
  61. .style2 {
  62.  
  63. font-weight: bold;
  64.  
  65. }
  66.  
  67. .style3 {
  68.  
  69. font-size: large;
  70.  
  71. color: #FF0000;
  72.  
  73. }
  74.  
  75. div#option {
  76.  
  77. background:#303030;color:#FFFFFF;font-family:Verdana,Arial;font-size:10px;vertical-align:middle; border-left:1px solid #121212; border-right:1px solid #5d5d5d; border-bottom:1px solid #5d5d5d; border-top:1px solid #121212;
  78.  
  79.  
  80.  
  81. }
  82.  
  83. </style>
  84.  
  85. </head>
  86.  
  87. <?php
  88.  
  89. if($_POST) {
  90.  
  91. $hacker = $_POST['defacer'];
  92.  
  93. $method = $_POST['hackmode'];
  94.  
  95. $neden = $_POST['reason'];
  96.  
  97. $site = $_POST['domain'];
  98.  
  99.  
  100.  
  101. // bosmu dolumu
  102.  
  103. if ($hacker == "") {
  104.  
  105.  
  106.  
  107. die ("<center>Which distorted and said that if the answer is yes, type the name of<center>");
  108.  
  109. }
  110.  
  111. elseif($method == "--------SELECT--------") {
  112.  
  113. die("<center>Method must be told</center>");
  114.  
  115. }
  116.  
  117. elseif($neden == "--------SELECT--------") {
  118.  
  119.  
  120.  
  121. die("<center>Why do I have to tell</center>");
  122.  
  123. }
  124.  
  125. elseif($site == "") {
  126.  
  127.  
  128.  
  129. die("<center>Registration continued breakthroughs in the locations Zone H </center>");
  130.  
  131. }
  132.  
  133.  
  134.  
  135.  
  136.  
  137. $i = 0;
  138.  
  139. $sites = explode("\n", $site);
  140.  
  141. while($i < count($sites)) {
  142.  
  143. if(substr($sites[$i], 0, 4) != "http") {
  144.  
  145. $sites[$i] = "http://".$sites[$i];
  146.  
  147.  
  148.  
  149. }
  150.  
  151.  
  152.  
  153. poster("http://zone-h.org/notify/single", $hacker, $method, $neden, $sites[$i]);
  154.  
  155.  
  156.  
  157. ++$i;
  158.  
  159. }
  160.  
  161. echo "<center><p>Zone-h Mass Deface Poster</p></center>";
  162.  
  163.  
  164.  
  165. }else{
  166.  
  167.  
  168.  
  169. echo '<center>
  170.  
  171.  
  172. <form action="" method="post">
  173.  
  174. <div id="option">
  175.  
  176. <p>Defacer<br />
  177.  
  178. <span class="ok"><input type="text" name="defacer" size="40" /></span> </p>
  179.  
  180.  
  181.  
  182. <p>How to hack <br /><select name="hackmode">
  183.  
  184. <option >--------SELECT--------</option>
  185.  
  186. <option value="1">known vulnerability (i.e. unpatched system)</option>
  187.  
  188. <option
  189.  
  190. value="2" >undisclosed (new) vulnerability</option>
  191.  
  192. <option
  193.  
  194. value="3" >configuration / admin. mistake</option>
  195.  
  196. <option
  197.  
  198. value="4" >brute force attack</option>
  199.  
  200.  
  201.  
  202. <option
  203.  
  204. value="5" >social engineering</option>
  205.  
  206. <option
  207.  
  208. value="6" >Web Server intrusion</option>
  209.  
  210. <option
  211.  
  212. value="7" >Web Server external module intrusion</option>
  213.  
  214. <option
  215.  
  216. value="8" >Mail Server intrusion</option>
  217.  
  218. <option
  219.  
  220. value="9" >FTP Server intrusion</option>
  221.  
  222. <option
  223.  
  224. value="10" >SSH Server intrusion</option>
  225.  
  226.  
  227.  
  228. <option
  229.  
  230. value="11" >Telnet Server intrusion</option>
  231.  
  232. <option
  233.  
  234. value="12" >RPC Server intrusion</option>
  235.  
  236. <option
  237.  
  238. value="13" >Shares misconfiguration</option>
  239.  
  240. <option
  241.  
  242.  
  243.  
  244. value="14" >Other Server intrusion</option>
  245.  
  246. <option
  247.  
  248. value="15" >SQL Injection</option>
  249.  
  250. <option
  251.  
  252. value="16" >URL Poisoning</option>
  253.  
  254.  
  255.  
  256. <option
  257.  
  258. value="17" >File Inclusion</option>
  259.  
  260. <option
  261.  
  262. value="18" >Other Web Application bug</option>
  263.  
  264. <option
  265.  
  266. value="19" >Remote administrative panel access through bruteforcing</option>
  267.  
  268. <option
  269.  
  270. value="20" >Remote administrative panel access through password guessing</option>
  271.  
  272. <option
  273.  
  274. value="21" >Remote administrative panel access through social engineering</option>
  275.  
  276. <option
  277.  
  278. value="22" >Attack against the administrator/user (password stealing/sniffing)</option>
  279.  
  280.  
  281.  
  282. <option
  283.  
  284. value="23" >Access credentials through Man In the Middle attack</option>
  285.  
  286. <option
  287.  
  288. value="24" >Remote service password guessing</option>
  289.  
  290. <option
  291.  
  292. value="25" >Remote service password bruteforce</option>
  293.  
  294. <option
  295.  
  296. value="26" >Rerouting after attacking the Firewall</option>
  297.  
  298. <option
  299.  
  300. value="27" >Rerouting after attacking the Router</option>
  301.  
  302. <option
  303.  
  304. value="28" >DNS attack through social engineering</option>
  305.  
  306.  
  307.  
  308. <option
  309.  
  310. value="29" >DNS attack through cache poisoning</option>
  311.  
  312. <option
  313.  
  314. value="30" >Not available</option>
  315.  
  316. </select></p>
  317.  
  318. <p> Cause of hack ? <br /><select name="reason">
  319.  
  320.  
  321.  
  322. <option >--------SELECT--------</option>
  323.  
  324. <option
  325.  
  326. value="1" >Heh...just for fun!</option>
  327.  
  328. <option
  329.  
  330. value="2" >Revenge against that website</option>
  331.  
  332. <option
  333.  
  334. value="3" >Political reasons</option>
  335.  
  336. <option
  337.  
  338. value="4" >As a challenge</option>
  339.  
  340. <option
  341.  
  342. value="5" >I just want to be the best defacer</option>
  343.  
  344.  
  345.  
  346. <option
  347.  
  348. value="6" >Patriotism</option>
  349.  
  350. <option
  351.  
  352. value="7" >Not available</option>
  353.  
  354. </select> </p>
  355.  
  356.  
  357.  
  358. <p>Sites <br />
  359.  
  360. <span class="fur">Put all the sites on the server</span><br />
  361.  
  362. <span class=""><textarea name="domain" cols="43" rows="17"></textarea></span> </p>
  363.  
  364. <p><input type="submit" value="Send" />
  365.  
  366. </form>
  367.  
  368.  
  369. <br>
  370.  
  371. </div>
  372.  
  373. </center>';
  374.  
  375.  
  376.  
  377. }
  378.  
  379.  
  380.  
  381. function poster($url, $hacker, $hackmode,$reson, $site )
  382.  
  383. {
  384.  
  385.  
  386.  
  387. $k = curl_init();
  388.  
  389. curl_setopt($k, CURLOPT_URL, $url);
  390.  
  391. curl_setopt($k,CURLOPT_POST,true);
  392.  
  393. curl_setopt($k, CURLOPT_POSTFIELDS,"defacer=".$hacker."&domain1=". $site."&hackmode=".$hackmode."&reason=".$reson);
  394.  
  395. curl_setopt($k,CURLOPT_FOLLOWLOCATION, true);
  396.  
  397. curl_setopt($k, CURLOPT_RETURNTRANSFER, true);
  398.  
  399.  
  400.  
  401. $kubra = curl_exec($k);
  402.  
  403. curl_close($k);
  404.  
  405. return $kubra;
  406.  
  407. }
  408.  
  409.  
  410.  
  411. ?>
  412.  
  413. <body>
  414.  
  415. </body>
  416.  
  417. </html>
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!